nigerian spam from google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 05 Nov 2022 06:00:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1orHom-000IiW-0f
for dave@doctor.nl2k.ab.ca;
Sat, 05 Nov 2022 05:58:32 -0600
Resent-From: The Doctor
Resent-Date: Sat, 5 Nov 2022 05:58:32 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f68.google.com ([209.85.218.68]:34777)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1orCK7-000KQv-3b
for doctor@nl2k.ab.ca;
Sat, 05 Nov 2022 00:06:34 -0600
Received: by mail-ej1-f68.google.com with SMTP id f27so18259092eje.1
for; Fri, 04 Nov 2022 23:03:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=iSLL6fdHoPKndLFMXFo35XqqBHnYSvLeZjfxKM9emJ8=;
b=XRZ94Y6cIxmRP+faD8SstfGBBjJvERE5plbzs/M/kJT9wK1Yjb8N7YIJrO3VGqsYQF
8rZFlV6XoLxLH0LGIKuHQtpc4rbvV7mcLUk7INrltYQNh3C6FWcu3guxVkxXGOvr0XG1
DX6lZKFUrohrj5RiwFFBaC1DXPp3QS/N95I2UM1V+/xCt5TJ8JOH0lsL74I2lepXumbB
i9txbOJAhEzVef6RCe7q1xkrJJTsaYidA5DGTF6B3hyxR0NI8JXdS3ahPuuAkd8Gbi3B
bUBfyJ+Jo6V5doYuPIJZvc035cAbnVkvelMIe8rRud0+V9dR5zOKg2c6kzU64LCgINWu
fSZg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=iSLL6fdHoPKndLFMXFo35XqqBHnYSvLeZjfxKM9emJ8=;
b=KKoIEEsFqvoEuIn/4a2gmlnjRsxAMUTW/z9FEmVscgLiJyjYrBySC2A0TlRQL6e/ZP
aaE3tVtpMH+28sjLLIy9Ja3rOlrn9OgIPPeBZqXpPUctBZUjERUaYjS/QYe/KgxAmdMK
VyDf44nSDq0yKvW8QpdKkiIQz2Dn1IGpDgD8bHlERBma+UkaDcmdLO8zN2QTs/fkPy3i
kRNx5RY5b0RqH89QsA3yUvai214PTQ/OkfTCixJvSoLELG2atvtTrebnItb9+hHRVhDz
aZBRtkAb0v9+XhbTEeOzmULDgsAjgar34Asmh9Hdd+yf5WDbop6VAOXdpULtYPPLkChQ
RQMw==
X-Gm-Message-State: ACrzQf1BRlf66UYpn+JfXAJeBPHcBU1Yz5ucrwBucSGaRO7ihZhBPI1u
SCfcIZivKDHuwlZnSCrOhy0Eh645cJ+04Vwn5UY=
X-Google-Smtp-Source: AMsMyM507Z30nhs9lhlp8N4KPexeZtWvTwvdPtWk+59hER0YSWSM0EQDaFT/gb496+D2XEnqZ10r53ixCTm+JwrFh40=
X-Received: by 2002:a17:906:5a46:b0:7ad:b822:d2c2 with SMTP id
my6-20020a1709065a4600b007adb822d2c2mr35174147ejc.41.1667628220354; Fri, 04
Nov 2022 23:03:40 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a17:906:65d7:b0:73d:8891:8234 with HTTP; Fri, 4 Nov 2022
23:03:39 -0700 (PDT)
Reply-To: sullivan.j46@yahoo.com
From: jeff Sullivan
Date: Sat, 5 Nov 2022 06:03:39 +0000
Message-ID:
Subject: Hello,
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 8.4
X-Spam_score_int: 84
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, Please can you assist me to receive and invest this
US$10 .5M, I will give you details as I hear from you. Hope to hear from
you. Mr.Jeff
Content analysis details: (8.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.218.68 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.68 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[sullivan.j46[at]yahoo.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[sullivan45422[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[sullivan45422[at]gmail.com]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.8 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Hello,
Hello,
Please can you assist me to receive and invest this US$10
.5M, I will give you details as I hear from you.
Hope to hear from you.
Mr.Jeff
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 05 Nov 2022 06:00:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1orHom-000IiW-0f
for dave@doctor.nl2k.ab.ca;
Sat, 05 Nov 2022 05:58:32 -0600
Resent-From: The Doctor
Resent-Date: Sat, 5 Nov 2022 05:58:32 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f68.google.com ([209.85.218.68]:34777)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1orCK7-000KQv-3b
for doctor@nl2k.ab.ca;
Sat, 05 Nov 2022 00:06:34 -0600
Received: by mail-ej1-f68.google.com with SMTP id f27so18259092eje.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=iSLL6fdHoPKndLFMXFo35XqqBHnYSvLeZjfxKM9emJ8=;
b=XRZ94Y6cIxmRP+faD8SstfGBBjJvERE5plbzs/M/kJT9wK1Yjb8N7YIJrO3VGqsYQF
8rZFlV6XoLxLH0LGIKuHQtpc4rbvV7mcLUk7INrltYQNh3C6FWcu3guxVkxXGOvr0XG1
DX6lZKFUrohrj5RiwFFBaC1DXPp3QS/N95I2UM1V+/xCt5TJ8JOH0lsL74I2lepXumbB
i9txbOJAhEzVef6RCe7q1xkrJJTsaYidA5DGTF6B3hyxR0NI8JXdS3ahPuuAkd8Gbi3B
bUBfyJ+Jo6V5doYuPIJZvc035cAbnVkvelMIe8rRud0+V9dR5zOKg2c6kzU64LCgINWu
fSZg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=iSLL6fdHoPKndLFMXFo35XqqBHnYSvLeZjfxKM9emJ8=;
b=KKoIEEsFqvoEuIn/4a2gmlnjRsxAMUTW/z9FEmVscgLiJyjYrBySC2A0TlRQL6e/ZP
aaE3tVtpMH+28sjLLIy9Ja3rOlrn9OgIPPeBZqXpPUctBZUjERUaYjS/QYe/KgxAmdMK
VyDf44nSDq0yKvW8QpdKkiIQz2Dn1IGpDgD8bHlERBma+UkaDcmdLO8zN2QTs/fkPy3i
kRNx5RY5b0RqH89QsA3yUvai214PTQ/OkfTCixJvSoLELG2atvtTrebnItb9+hHRVhDz
aZBRtkAb0v9+XhbTEeOzmULDgsAjgar34Asmh9Hdd+yf5WDbop6VAOXdpULtYPPLkChQ
RQMw==
X-Gm-Message-State: ACrzQf1BRlf66UYpn+JfXAJeBPHcBU1Yz5ucrwBucSGaRO7ihZhBPI1u
SCfcIZivKDHuwlZnSCrOhy0Eh645cJ+04Vwn5UY=
X-Google-Smtp-Source: AMsMyM507Z30nhs9lhlp8N4KPexeZtWvTwvdPtWk+59hER0YSWSM0EQDaFT/gb496+D2XEnqZ10r53ixCTm+JwrFh40=
X-Received: by 2002:a17:906:5a46:b0:7ad:b822:d2c2 with SMTP id
my6-20020a1709065a4600b007adb822d2c2mr35174147ejc.41.1667628220354; Fri, 04
Nov 2022 23:03:40 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a17:906:65d7:b0:73d:8891:8234 with HTTP; Fri, 4 Nov 2022
23:03:39 -0700 (PDT)
Reply-To: sullivan.j46@yahoo.com
From: jeff Sullivan
Date: Sat, 5 Nov 2022 06:03:39 +0000
Message-ID:
Subject: Hello,
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 8.4
X-Spam_score_int: 84
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, Please can you assist me to receive and invest this
US$10 .5M, I will give you details as I hear from you. Hope to hear from
you. Mr.Jeff
Content analysis details: (8.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.218.68 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.68 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[sullivan.j46[at]yahoo.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[sullivan45422[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[sullivan45422[at]gmail.com]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.8 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Hello,
Hello,
Please can you assist me to receive and invest this US$10
.5M, I will give you details as I hear from you.
Hope to hear from you.
Mr.Jeff
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments