Nigerian Gmail spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 02 Feb 2023 14:39:10 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pNhHq-000GKQ-01

for dave@doctor.nl2k.ab.ca;

Thu, 02 Feb 2023 14:38:30 -0700

Resent-From: The Doctor

Resent-Date: Thu, 2 Feb 2023 14:38:29 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f41.google.com ([209.85.167.41]:34804)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pNgIj-000DQV-2G

for doctor@doctor.nl2k.ab.ca;

Thu, 02 Feb 2023 13:35:26 -0700

Received: by mail-lf1-f41.google.com with SMTP id cf42so4803940lfb.1

for ; Thu, 02 Feb 2023 12:33:22 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=DcIP7sVO2A0wryRpupzUPWQywPt7sc4xyWCvZop1t1s=;

b=kuhHel7HOFSgUbgYAbEHeRy8Y7z4x49jsmrzKu342PoB+wg/IWf03scgq06wU4qHW+

OKpYeo2meIC6zy/noAgLsrADc97UW+QBorq6tdGAOkjPgwO10Xt+7fKmQK5LYO7UOAro

7/lPS0eflfO7aPMO3bTaVlUqPWbQwpA9itpvvps6Wneqx1u+XP6duSc+DInviAQfqfJJ

cMCen7PZK/YSHTogkSArcHUHxF0MJiPAcoyd5TvXrtUwq/2oWdnIUqOvw7giHIo7fox/

9gyI1WYkl+Z02nIOlctOHdLS5MzQeFcV5ixWV798yWgIn6J5+vTqVZM4XmTQp+MZkxkx

zo7Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=DcIP7sVO2A0wryRpupzUPWQywPt7sc4xyWCvZop1t1s=;

b=pE3mswy7zFbL2tINku2eJW1biC/VQtW/NMLUHX4Bc/Zp3oOTf3HUQEcF+AuWJ2yHXb

4pdfSQf6NFKHAOtsVwh8VmXIrxgwf2esPm9XE266UriU7QiWuyyshOqCcL6RCMpBwzxB

s9WOIEFiciO/OCwxUpgOvw7yWaxmnEvyZFCb+23+P0TwuOF7wHbZw8p3kXv/umyjCGzY

BmVd5lX2pBE51XIhAd4MKk+DN7oPUtvSqyM/bc49cSR14MQ0Aw63t5ldxJZQRXSNWkbD

I68cH4UdyTFkK6JzBlV2JhS4IhCACxd6LlMTgEADeY+8XKoj7BVPOaMXC1E+GpF7Xroy

XrkQ==

X-Gm-Message-State: AO0yUKVQEzTG2Y/WGcsHR6PyKyO1n0yiEAZcRl6GXv4H6bn4AV1WLbjy

DdGhoCJvyu/KtabII5N3oMnOtSd0sFAAkdWXJgw=

X-Google-Smtp-Source: AK7set8R2hIaG5ymR3g8Z/qBAxQ6/MmAbAr8Ymg7EPB2/3UkZUNgn/L4WV6i45QZq7eq9NlUtcIPL9ccUS34IxM8Gbk=

X-Received: by 2002:ac2:410b:0:b0:4cb:27b9:e88 with SMTP id

b11-20020ac2410b000000b004cb27b90e88mr932810lfi.197.1675369996037; Thu, 02

Feb 2023 12:33:16 -0800 (PST)

MIME-Version: 1.0

Received: by 2002:ab2:6c0e:0:b0:182:6566:b85b with HTTP; Thu, 2 Feb 2023

12:33:15 -0800 (PST)

Reply-To: Mrschantal1985@proton.me

From: Mrs chanta R

Date: Thu, 2 Feb 2023 20:33:15 +0000

Message-ID:

Subject: Greetings, I am Mrs. Chantal. I got your contact information from a

reputable business/professional directory.

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 10.7

X-Spam_score_int: 107

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear friend I have a business proposal worth the sum of 6

million dollars, Kindly notify me if interested. Thanks Mrs Chantel



Content analysis details: (10.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.41 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[prankanderson(at)gmail.com]

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.41 listed in wl.mailspike.net]

Subject: {SPAM?} Greetings, I am Mrs. Chantal. I got your contact information from a

reputable business/professional directory.



Dear friend



I have a business proposal worth the sum of 6 million dollars, Kindly

notify me if interested.



Thanks

Mrs Chantel

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA