Lottery Nigerian Spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 05 Oct 2022 15:39:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1ogC6E-000Mb2-Kl
for dave@doctor.nl2k.ab.ca;
Wed, 05 Oct 2022 15:38:42 -0600
Resent-From: The Doctor
Resent-Date: Wed, 5 Oct 2022 15:38:42 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f52.google.com ([209.85.160.52]:36412)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1og8fm-0007TY-QV
for doctor@doctor.nl2k.ab.ca;
Wed, 05 Oct 2022 11:59:14 -0600
Received: by mail-oa1-f52.google.com with SMTP id 586e51a60fabf-13207a86076so16498459fac.3
for; Wed, 05 Oct 2022 10:58:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:from:to:cc:subject:date;
bh=MfUYRVAtA0jSsi38Jkiza4l1zz/PFB2tcwPOJq29WSM=;
b=FxRKhr+NkCgC/28OFX0DLPTb30qn4HduKWQYwk1psJpV27wtKH/C2VwpYWx6T/d1oX
TXe1ArUfK/joRCfKg1g7m+EP/Mro7Tg+QzD+veyMCXxNwYQb/yXRg/fMZSZ4GQuy4wz9
QFj39BFTRvwUuv8tsuYu5Yq2XMw5JFDutjyXBUe1nV2tEUlPAYqXZxB/6QrkXRHBm39g
1R/t3CMeUO2pJdIuMxcr1BxSLsKewNlVzzcglZX01cuaaEVubbSmiC3593QrLNEjzGn2
uHKEPkyL6gb4dhxFsjICjU6roNrS6ry/282o2+QPa6kRrEXJozsaj017vmQu2dGW68rd
iK5w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:x-gm-message-state:from:to:cc:subject:date;
bh=MfUYRVAtA0jSsi38Jkiza4l1zz/PFB2tcwPOJq29WSM=;
b=4HFh9H8KwUt8f9YtSWw0fh9dmQKQf6x/feDE0aug/E8p4jEGF6lVCxSiF9CBSjnbdI
yCZ93D9e9+JFUzmfg0sqyNRVgSR1ylFOXlG/NIPc5c2DECe00KaPSc0nVSFQtCElaKrZ
kcF/5do0xX2OWibwfRX0G/dXmp8jgumbDXjmzBzri8/khbJa6JXr40sSIfRO1GnNS1Rn
zdpULHPfwPuQhRaiolXhuVvjsmAYzR2s6yHZV3yocM0rIJeUqFiIUnQgjpj4OYtsCPvR
Ei8GrjZeXbXdxIffRM50WNXQfdjhW/1E7Z+D5H8WPkvRaBfIJjg4twZK0MFgnq+SApH6
Oc0A==
X-Gm-Message-State: ACrzQf3yeZ7YVngVj99D+SUnz5nKBnlBFmrHZmjSZq2LWD0D8NGaQVkZ
EdoHmx1zks1eL2rJta6VRCEjKrothNViSBo9W2o=
X-Google-Smtp-Source: AMsMyM6pzCwM01o+nIvqe4xtD0OhP4Nu2+n7DDbvYg1pyoGnK9mZtXNE4MfpkLcVZChFqSvWKfRJwi1Or2026fSopF8=
X-Received: by 2002:a05:6870:160f:b0:131:e2c3:8fe3 with SMTP id
b15-20020a056870160f00b00131e2c38fe3mr3239172oae.54.1664992724027; Wed, 05
Oct 2022 10:58:44 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:ac9:6692:0:0:0:0:0 with HTTP; Wed, 5 Oct 2022 10:58:43 -0700 (PDT)
Reply-To: timdulla46@gmail.com
From: MR NAMARA
Date: Wed, 5 Oct 2022 10:58:43 -0700
Message-ID:
Subject:
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: LOTTORI NYEREMÉNYDÃJ. Az Ön e-mail cÃme 2 600 000 millió
dollárt nyert a Fire Lotto Company-nál. Lépjen kapcsolatba Edward Raymond
ügyvéddel az itt található e-mail cÃmén (  mveronesi21@gmail.com  Â
 ), [...]
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[timdulla46[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[lot8000[at]gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.52 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[lot8000[at]gmail.com]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
Subject: {SPAM?}
LOTTORI NYEREM=C3=89NYD=C3=8DJ.
Az =C3=96n e-mail c=C3=ADme 2 600 000 milli=C3=B3 doll=C3=A1rt nyert a Fire=
Lotto
Company-n=C3=A1l. L=C3=A9pjen kapcsolatba Edward Raymond =C3=BCgyv=C3=A9dde=
l az itt
tal=C3=A1lhat=C3=B3 e-mail c=C3=ADm=C3=A9n (=C2=A0 =C2=A0mveronesi21@gmail.=
com=C2=A0=C2=A0=C2=A0 =C2=A0), =C3=A9s k=C3=A9rje a
nyerem=C3=A9nyalapot az al=C3=A1bbiak szerint. teljes neved, orsz=C3=A1god.=
az
otthoni c=C3=ADm=C3=A9t =C3=A9s a telefonsz=C3=A1m=C3=A1t. ezek az adatok s=
z=C3=BCks=C3=A9gesek a
sz=C3=A1ll=C3=ADt=C3=A1shoz.
=C3=9Cdv=C3=B6zlettel..
Bacia Namara =C3=BAr
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 05 Oct 2022 15:39:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1ogC6E-000Mb2-Kl
for dave@doctor.nl2k.ab.ca;
Wed, 05 Oct 2022 15:38:42 -0600
Resent-From: The Doctor
Resent-Date: Wed, 5 Oct 2022 15:38:42 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f52.google.com ([209.85.160.52]:36412)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1og8fm-0007TY-QV
for doctor@doctor.nl2k.ab.ca;
Wed, 05 Oct 2022 11:59:14 -0600
Received: by mail-oa1-f52.google.com with SMTP id 586e51a60fabf-13207a86076so16498459fac.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:from:to:cc:subject:date;
bh=MfUYRVAtA0jSsi38Jkiza4l1zz/PFB2tcwPOJq29WSM=;
b=FxRKhr+NkCgC/28OFX0DLPTb30qn4HduKWQYwk1psJpV27wtKH/C2VwpYWx6T/d1oX
TXe1ArUfK/joRCfKg1g7m+EP/Mro7Tg+QzD+veyMCXxNwYQb/yXRg/fMZSZ4GQuy4wz9
QFj39BFTRvwUuv8tsuYu5Yq2XMw5JFDutjyXBUe1nV2tEUlPAYqXZxB/6QrkXRHBm39g
1R/t3CMeUO2pJdIuMxcr1BxSLsKewNlVzzcglZX01cuaaEVubbSmiC3593QrLNEjzGn2
uHKEPkyL6gb4dhxFsjICjU6roNrS6ry/282o2+QPa6kRrEXJozsaj017vmQu2dGW68rd
iK5w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:x-gm-message-state:from:to:cc:subject:date;
bh=MfUYRVAtA0jSsi38Jkiza4l1zz/PFB2tcwPOJq29WSM=;
b=4HFh9H8KwUt8f9YtSWw0fh9dmQKQf6x/feDE0aug/E8p4jEGF6lVCxSiF9CBSjnbdI
yCZ93D9e9+JFUzmfg0sqyNRVgSR1ylFOXlG/NIPc5c2DECe00KaPSc0nVSFQtCElaKrZ
kcF/5do0xX2OWibwfRX0G/dXmp8jgumbDXjmzBzri8/khbJa6JXr40sSIfRO1GnNS1Rn
zdpULHPfwPuQhRaiolXhuVvjsmAYzR2s6yHZV3yocM0rIJeUqFiIUnQgjpj4OYtsCPvR
Ei8GrjZeXbXdxIffRM50WNXQfdjhW/1E7Z+D5H8WPkvRaBfIJjg4twZK0MFgnq+SApH6
Oc0A==
X-Gm-Message-State: ACrzQf3yeZ7YVngVj99D+SUnz5nKBnlBFmrHZmjSZq2LWD0D8NGaQVkZ
EdoHmx1zks1eL2rJta6VRCEjKrothNViSBo9W2o=
X-Google-Smtp-Source: AMsMyM6pzCwM01o+nIvqe4xtD0OhP4Nu2+n7DDbvYg1pyoGnK9mZtXNE4MfpkLcVZChFqSvWKfRJwi1Or2026fSopF8=
X-Received: by 2002:a05:6870:160f:b0:131:e2c3:8fe3 with SMTP id
b15-20020a056870160f00b00131e2c38fe3mr3239172oae.54.1664992724027; Wed, 05
Oct 2022 10:58:44 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:ac9:6692:0:0:0:0:0 with HTTP; Wed, 5 Oct 2022 10:58:43 -0700 (PDT)
Reply-To: timdulla46@gmail.com
From: MR NAMARA
Date: Wed, 5 Oct 2022 10:58:43 -0700
Message-ID:
Subject:
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: LOTTORI NYEREMÉNYDÃJ. Az Ön e-mail cÃme 2 600 000 millió
dollárt nyert a Fire Lotto Company-nál. Lépjen kapcsolatba Edward Raymond
ügyvéddel az itt található e-mail cÃmén (  mveronesi21@gmail.com  Â
 ), [...]
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[timdulla46[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[lot8000[at]gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.52 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[lot8000[at]gmail.com]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
Subject: {SPAM?}
LOTTORI NYEREM=C3=89NYD=C3=8DJ.
Az =C3=96n e-mail c=C3=ADme 2 600 000 milli=C3=B3 doll=C3=A1rt nyert a Fire=
Lotto
Company-n=C3=A1l. L=C3=A9pjen kapcsolatba Edward Raymond =C3=BCgyv=C3=A9dde=
l az itt
tal=C3=A1lhat=C3=B3 e-mail c=C3=ADm=C3=A9n (=C2=A0 =C2=A0mveronesi21@gmail.=
com=C2=A0=C2=A0=C2=A0 =C2=A0), =C3=A9s k=C3=A9rje a
nyerem=C3=A9nyalapot az al=C3=A1bbiak szerint. teljes neved, orsz=C3=A1god.=
az
otthoni c=C3=ADm=C3=A9t =C3=A9s a telefonsz=C3=A1m=C3=A1t. ezek az adatok s=
z=C3=BCks=C3=A9gesek a
sz=C3=A1ll=C3=ADt=C3=A1shoz.
=C3=9Cdv=C3=B6zlettel..
Bacia Namara =C3=BAr
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments