Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 07 Feb 2023 15:33:41 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1pPWWL-0005H3-2j
for dave@doctor.nl2k.ab.ca;
Tue, 07 Feb 2023 15:33:01 -0700
Resent-From: The Doctor
Resent-Date: Tue, 7 Feb 2023 15:33:01 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pg1-f194.google.com ([209.85.215.194]:34390)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1pPTp1-0008Hr-1c
for www@nl2k.ab.ca;
Tue, 07 Feb 2023 12:40:10 -0700
Received: by mail-pg1-f194.google.com with SMTP id 7so11198205pga.1
for; Tue, 07 Feb 2023 11:38:09 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=IM8l1lORTRxQk89mb+vPTFYR3kKrlR8Uzhp19LsMUk4=;
b=Gmuv3NWgOqFZJK3Zc+QHjS/7bf5rbqhfnKcNGRlfJUrAmKDrgx3eudm3xhi0jRsXCu
zpcIvmnbqPPLnCu6E0uutMnrNSHXKE40xBBWzV1225cHrWrGKeOtbBN0oDODhnuot5yV
nUUgrCH1lY1ZTu3fqgb1VTrr/P7fkcBjLIw/DLLZtuYy/+BxgOwwI0AxuM1ONVCQM/LX
7vIHKyZG2GDd8MtZJ2zdVCiVNEc/WXm2A5Q3sKiOGTgDW1iytk//aiHDgdgwBO8+UeqA
eGddbAfFaX7rPubfUowp75k0L4m+CSkajxzj1JFG4T21wMpRO81LXQ39gTolxIw5ICFV
liyA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=IM8l1lORTRxQk89mb+vPTFYR3kKrlR8Uzhp19LsMUk4=;
b=rGwjaKUIqdnOsq5BrHySvGZzUY92rhn6UVQkWXnzj4dyHEVY2wSJqqJNjo1m5jEgp/
TG0a3w92DwXAbh9KkVg8eqJcNe+Hf201Y4sXwNFQ5YJCO5QBpkqNdDQLcO4utcehhuCu
WYlgsHsBIhTKyGf2IV27HAj6R6ttroQUV7AI78chrh8WTpKYR06ZVM4grX8QSsvEkE9j
iPq9q0Sg6Apjx2GqgHqSxFEd9iN4uvvg23bWNGV3U0M2BBBHKn0NwOxLVIbXRhiQ/b38
4vkDHcZLiRvcFZVCTDjXBB0FevYLlxGbSNz5VaW2Nq+KQy+GQ0V8SqOn4wx0Xo3ekgRB
xrpg==
X-Gm-Message-State: AO0yUKWLMophik0mo1XaRdkHBqGOi4eIIzN/cBNy6RQrC2fNdzXrR07E
P7coEhT4zoA+NbV8suxXty7aYqNsCGS+ctfIzg==
X-Google-Smtp-Source: AK7set/5xgqsBHAkw0sB6H7T4NPqpnENwBB4urbp2+ctTRmiBKQY9bOdWuWDRo7pmMFIuNtkCcdxRzGaD8N7iWvs+qw=
X-Received: by 2002:aa7:9472:0:b0:5a7:6ee6:6710 with SMTP id
t18-20020aa79472000000b005a76ee66710mr849585pfq.29.1675798682197; Tue, 07 Feb
2023 11:38:02 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a05:6a10:6715:b0:364:5e99:4883 with HTTP; Tue, 7 Feb 2023
11:38:00 -0800 (PST)
Reply-To: warrebuf12@gmail.com
From: Mr Warren Buffett
Date: Wed, 8 Feb 2023 01:08:00 +0530
Message-ID:
Subject: Donation From Warren Buffett
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: www@nl2k.ab.ca
X-Spam_score: 11.4
X-Spam_score_int: 114
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Atten Beneficiary This is Warren Buffett , You are selected
to receive the sum of Two million Five Hundred thousand Dollars from Mr Warren
Buffet and family donation 2023, you email was chosen while searching randomly
[...]
Content analysis details: (11.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[warrebuf12(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[giantmotorgarage(at)gmail.com]
2.7 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.215.194 listed in list.dnswl.org]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.215.194 listed in wl.mailspike.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
Subject: {SPAM?} Donation From Warren Buffett
Atten Beneficiary
This is Warren Buffett , You are selected to receive the sum of Two
million Five Hundred thousand Dollars from Mr Warren Buffet and family
donation 2023, you email was chosen while
searching randomly kindly get back to me,so I know your email address is valid.
warrebuf12@gmail.com
God bless you.
Best Regard
Warren Buffett
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 07 Feb 2023 15:33:41 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1pPWWL-0005H3-2j
for dave@doctor.nl2k.ab.ca;
Tue, 07 Feb 2023 15:33:01 -0700
Resent-From: The Doctor
Resent-Date: Tue, 7 Feb 2023 15:33:01 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pg1-f194.google.com ([209.85.215.194]:34390)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1pPTp1-0008Hr-1c
for www@nl2k.ab.ca;
Tue, 07 Feb 2023 12:40:10 -0700
Received: by mail-pg1-f194.google.com with SMTP id 7so11198205pga.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=IM8l1lORTRxQk89mb+vPTFYR3kKrlR8Uzhp19LsMUk4=;
b=Gmuv3NWgOqFZJK3Zc+QHjS/7bf5rbqhfnKcNGRlfJUrAmKDrgx3eudm3xhi0jRsXCu
zpcIvmnbqPPLnCu6E0uutMnrNSHXKE40xBBWzV1225cHrWrGKeOtbBN0oDODhnuot5yV
nUUgrCH1lY1ZTu3fqgb1VTrr/P7fkcBjLIw/DLLZtuYy/+BxgOwwI0AxuM1ONVCQM/LX
7vIHKyZG2GDd8MtZJ2zdVCiVNEc/WXm2A5Q3sKiOGTgDW1iytk//aiHDgdgwBO8+UeqA
eGddbAfFaX7rPubfUowp75k0L4m+CSkajxzj1JFG4T21wMpRO81LXQ39gTolxIw5ICFV
liyA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=IM8l1lORTRxQk89mb+vPTFYR3kKrlR8Uzhp19LsMUk4=;
b=rGwjaKUIqdnOsq5BrHySvGZzUY92rhn6UVQkWXnzj4dyHEVY2wSJqqJNjo1m5jEgp/
TG0a3w92DwXAbh9KkVg8eqJcNe+Hf201Y4sXwNFQ5YJCO5QBpkqNdDQLcO4utcehhuCu
WYlgsHsBIhTKyGf2IV27HAj6R6ttroQUV7AI78chrh8WTpKYR06ZVM4grX8QSsvEkE9j
iPq9q0Sg6Apjx2GqgHqSxFEd9iN4uvvg23bWNGV3U0M2BBBHKn0NwOxLVIbXRhiQ/b38
4vkDHcZLiRvcFZVCTDjXBB0FevYLlxGbSNz5VaW2Nq+KQy+GQ0V8SqOn4wx0Xo3ekgRB
xrpg==
X-Gm-Message-State: AO0yUKWLMophik0mo1XaRdkHBqGOi4eIIzN/cBNy6RQrC2fNdzXrR07E
P7coEhT4zoA+NbV8suxXty7aYqNsCGS+ctfIzg==
X-Google-Smtp-Source: AK7set/5xgqsBHAkw0sB6H7T4NPqpnENwBB4urbp2+ctTRmiBKQY9bOdWuWDRo7pmMFIuNtkCcdxRzGaD8N7iWvs+qw=
X-Received: by 2002:aa7:9472:0:b0:5a7:6ee6:6710 with SMTP id
t18-20020aa79472000000b005a76ee66710mr849585pfq.29.1675798682197; Tue, 07 Feb
2023 11:38:02 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a05:6a10:6715:b0:364:5e99:4883 with HTTP; Tue, 7 Feb 2023
11:38:00 -0800 (PST)
Reply-To: warrebuf12@gmail.com
From: Mr Warren Buffett
Date: Wed, 8 Feb 2023 01:08:00 +0530
Message-ID:
Subject: Donation From Warren Buffett
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: www@nl2k.ab.ca
X-Spam_score: 11.4
X-Spam_score_int: 114
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Atten Beneficiary This is Warren Buffett , You are selected
to receive the sum of Two million Five Hundred thousand Dollars from Mr Warren
Buffet and family donation 2023, you email was chosen while searching randomly
[...]
Content analysis details: (11.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[warrebuf12(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[giantmotorgarage(at)gmail.com]
2.7 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.215.194 listed in list.dnswl.org]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.215.194 listed in wl.mailspike.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
Subject: {SPAM?} Donation From Warren Buffett
Atten Beneficiary
This is Warren Buffett , You are selected to receive the sum of Two
million Five Hundred thousand Dollars from Mr Warren Buffet and family
donation 2023, you email was chosen while
searching randomly kindly get back to me,so I know your email address is valid.
warrebuf12@gmail.com
God bless you.
Best Regard
Warren Buffett
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments