Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 03 Jan 2023 16:48:19 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1pCqvF-0003uT-1T
for dave@doctor.nl2k.ab.ca;
Tue, 03 Jan 2023 16:42:21 -0700
Resent-From: The Doctor
Resent-Date: Tue, 3 Jan 2023 16:42:21 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wm1-f43.google.com ([209.85.128.43]:36510)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from <25896345y@gmail.com>)
id 1pCnWq-0008M5-1y
for doctor@doctor.nl2k.ab.ca;
Tue, 03 Jan 2023 13:04:59 -0700
Received: by mail-wm1-f43.google.com with SMTP id c65-20020a1c3544000000b003cfffd00fc0so27522025wma.1
for; Tue, 03 Jan 2023 12:02:27 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=a+ZUuxUTAoz+nMDIAxIHUE5qjUM6hZWQNbOQhvaBX2U=;
b=n3Nus2E2L9qFnMsBdR/l3q30yhCuvXQPm0zt1RH4zDCCMkm+2Ph8FUyB5LsT/DdmsW
kNRj72eLDlzYTQkm5QXoXsEvZeR6JjNiLZLMdjdl962OzqK2XP/dFTCobPl4Cl0bNeNR
jIgjMtF9YeRdnMC07kKbrj/BolbAkUL5Bxrzd0kX54AoUBbNIJI656u5yfpJq+6YgY1E
OOREq5+DbcH3AoxnMH+w/x+DdbmW9C6tpf5wDslTaHuKPhQvA7QK7gnnozD9XRpfDp4K
aW3SdN6FLfzcKyv2v9QilJEjl9Jq5DwzVT7P+PyyFeaaLSKABiDCY/y8CmW0l3aZ1xSf
fpcw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=a+ZUuxUTAoz+nMDIAxIHUE5qjUM6hZWQNbOQhvaBX2U=;
b=UnM5v8gqcx85yTDHQtRDyx6y7hl8VRmQtu+tRBa2yGpH0l2colcdx/priHqYYf9agr
y1ihQlzuZ84VIThH9bB1ZE/f1FdW3jOkK0y29VpQOWN6+9Aiud49HBECbKWoKgLcXmLC
L3rjvQ41zl+ZFYSMHuavwejjh31trxsQLb1wIw5qls06I/sUGDl2hdcEstMpKLtF6+PK
A/O/QK4PJh/SzHuAxjMqlfFjb/bIpwXCHTMF/ddfKSI/3RbOIcOtRCQhnhPDTrYyDb3x
fPePOw79s3U3BPkuTxneOzGMJcQArj08yTi9dgzf0lez+Fvkn71iFqcQWVUCxRlkzQJx
x6Uw==
X-Gm-Message-State: AFqh2kotzeVYJFKOEJhYQqYlcT7yGt5ba8l1oBsjdLJVwl8wuESSASKz
xnKVu5plgw8e9j9O/ZB1odG2y8kEcqWPIQLoIhU=
X-Google-Smtp-Source: AMrXdXuB0KdoWbk6b3vGq1kqyMndwoP3PKvp6yAuKLYaUg5j9iK9y88d39868E/ffix0ABSYU6SUDRHLg7PornJrVcc=
X-Received: by 2002:a05:600c:364a:b0:3d0:438b:9775 with SMTP id
y10-20020a05600c364a00b003d0438b9775mr2207413wmq.192.1672776140909; Tue, 03
Jan 2023 12:02:20 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a5d:6d86:0:0:0:0:0 with HTTP; Tue, 3 Jan 2023 12:02:20 -0800 (PST)
Reply-To: n45710y@gmail.com
From: Bill Chantal <25896345y@gmail.com>
Date: Tue, 3 Jan 2023 20:02:20 +0000
Message-ID:
Subject: SANTANDER BANK COMPENSATION UNIT, IN AFFILIATION WITH THE UNITED NATION.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 15.6
X-Spam_score_int: 156
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: SANTANDER BANK COMPENSATION UNIT, IN AFFILIATION WITH THE
UNITED NATION. Your compensation fund of 6 million dollars is ready for payment
contact me for more details. Thanks
Content analysis details: (15.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.6 FROM_STARTS_WITH_NUMS From: starts with several numbers
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.128.43 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[25896345y[at]gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.43 listed in wl.mailspike.net]
1.5 HK_SCAM_N8 BODY: No description available.
2.0 HK_SCAM No description available.
0.8 UPPERCASE_50_75 message body is 50-75% uppercase
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 LOTTO_DEPT Claims Department
3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} SANTANDER BANK COMPENSATION UNIT, IN AFFILIATION WITH THE UNITED NATION.
SANTANDER BANK COMPENSATION UNIT, IN AFFILIATION WITH THE UNITED NATION.
Your compensation fund of 6 million dollars is ready for payment
contact me for more details.
Thanks
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 03 Jan 2023 16:48:19 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1pCqvF-0003uT-1T
for dave@doctor.nl2k.ab.ca;
Tue, 03 Jan 2023 16:42:21 -0700
Resent-From: The Doctor
Resent-Date: Tue, 3 Jan 2023 16:42:21 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wm1-f43.google.com ([209.85.128.43]:36510)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from <25896345y@gmail.com>)
id 1pCnWq-0008M5-1y
for doctor@doctor.nl2k.ab.ca;
Tue, 03 Jan 2023 13:04:59 -0700
Received: by mail-wm1-f43.google.com with SMTP id c65-20020a1c3544000000b003cfffd00fc0so27522025wma.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=a+ZUuxUTAoz+nMDIAxIHUE5qjUM6hZWQNbOQhvaBX2U=;
b=n3Nus2E2L9qFnMsBdR/l3q30yhCuvXQPm0zt1RH4zDCCMkm+2Ph8FUyB5LsT/DdmsW
kNRj72eLDlzYTQkm5QXoXsEvZeR6JjNiLZLMdjdl962OzqK2XP/dFTCobPl4Cl0bNeNR
jIgjMtF9YeRdnMC07kKbrj/BolbAkUL5Bxrzd0kX54AoUBbNIJI656u5yfpJq+6YgY1E
OOREq5+DbcH3AoxnMH+w/x+DdbmW9C6tpf5wDslTaHuKPhQvA7QK7gnnozD9XRpfDp4K
aW3SdN6FLfzcKyv2v9QilJEjl9Jq5DwzVT7P+PyyFeaaLSKABiDCY/y8CmW0l3aZ1xSf
fpcw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=a+ZUuxUTAoz+nMDIAxIHUE5qjUM6hZWQNbOQhvaBX2U=;
b=UnM5v8gqcx85yTDHQtRDyx6y7hl8VRmQtu+tRBa2yGpH0l2colcdx/priHqYYf9agr
y1ihQlzuZ84VIThH9bB1ZE/f1FdW3jOkK0y29VpQOWN6+9Aiud49HBECbKWoKgLcXmLC
L3rjvQ41zl+ZFYSMHuavwejjh31trxsQLb1wIw5qls06I/sUGDl2hdcEstMpKLtF6+PK
A/O/QK4PJh/SzHuAxjMqlfFjb/bIpwXCHTMF/ddfKSI/3RbOIcOtRCQhnhPDTrYyDb3x
fPePOw79s3U3BPkuTxneOzGMJcQArj08yTi9dgzf0lez+Fvkn71iFqcQWVUCxRlkzQJx
x6Uw==
X-Gm-Message-State: AFqh2kotzeVYJFKOEJhYQqYlcT7yGt5ba8l1oBsjdLJVwl8wuESSASKz
xnKVu5plgw8e9j9O/ZB1odG2y8kEcqWPIQLoIhU=
X-Google-Smtp-Source: AMrXdXuB0KdoWbk6b3vGq1kqyMndwoP3PKvp6yAuKLYaUg5j9iK9y88d39868E/ffix0ABSYU6SUDRHLg7PornJrVcc=
X-Received: by 2002:a05:600c:364a:b0:3d0:438b:9775 with SMTP id
y10-20020a05600c364a00b003d0438b9775mr2207413wmq.192.1672776140909; Tue, 03
Jan 2023 12:02:20 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a5d:6d86:0:0:0:0:0 with HTTP; Tue, 3 Jan 2023 12:02:20 -0800 (PST)
Reply-To: n45710y@gmail.com
From: Bill Chantal <25896345y@gmail.com>
Date: Tue, 3 Jan 2023 20:02:20 +0000
Message-ID:
Subject: SANTANDER BANK COMPENSATION UNIT, IN AFFILIATION WITH THE UNITED NATION.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 15.6
X-Spam_score_int: 156
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: SANTANDER BANK COMPENSATION UNIT, IN AFFILIATION WITH THE
UNITED NATION. Your compensation fund of 6 million dollars is ready for payment
contact me for more details. Thanks
Content analysis details: (15.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.6 FROM_STARTS_WITH_NUMS From: starts with several numbers
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.128.43 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[25896345y[at]gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.43 listed in wl.mailspike.net]
1.5 HK_SCAM_N8 BODY: No description available.
2.0 HK_SCAM No description available.
0.8 UPPERCASE_50_75 message body is 50-75% uppercase
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 LOTTO_DEPT Claims Department
3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} SANTANDER BANK COMPENSATION UNIT, IN AFFILIATION WITH THE UNITED NATION.
SANTANDER BANK COMPENSATION UNIT, IN AFFILIATION WITH THE UNITED NATION.
Your compensation fund of 6 million dollars is ready for payment
contact me for more details.
Thanks
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments