Nigerian spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 07 Jun 2023 07:59:09 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from)
id 1q6tfP-000B11-0E
for dave@doctor.nl2k.ab.ca;
Wed, 07 Jun 2023 07:57:39 -0600
Resent-From: The Doctor
Resent-Date: Wed, 7 Jun 2023 07:57:39 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qv1-f53.google.com ([209.85.219.53]:56391)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1q6skw-0004HV-1U
for doctor@doctor.nl2k.ab.ca;
Wed, 07 Jun 2023 06:59:23 -0600
Received: by mail-qv1-f53.google.com with SMTP id 6a1803df08f44-62614f2eee1so54004756d6.0
for; Wed, 07 Jun 2023 05:57:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1686142633; x=1688734633;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=RsTzCKh8bvjj+7fsJLeOfrhDNQ0r+NadzbD6gaCLLhc=;
b=Z6rUGckmoi38Bwnmh9N2t5BY1wXLf0mJYtZtH0UA76yJx9lFxqQPXV9m3o6mrbpp+t
AJQ470FFQVdQ9rdeXGtcj1FZe9725LkGVA23NPUVVo34dY08YEDDXVKwcS0cVODf7eCs
CxSXiw3m3xBu72hPETyRLPvzUvflGH1QYlKL+Y7YWsm6+7uOpOAJcPvNuOGVXdhAvuN/
m/Uw0ATxyx8EnbAq6zUZLv7iNfQucf+xGq8Rjki7ktK/LQsRfEALZevHzrSEnvLAEeQO
vOVkV179rFfOi1fBaDUBro4zlZq9ex98ig3h7h4F8qL7zI1gL0p5Uew4cb1oYnUQPNV1
FfAA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1686142633; x=1688734633;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=RsTzCKh8bvjj+7fsJLeOfrhDNQ0r+NadzbD6gaCLLhc=;
b=HgscLtODYg07hGNiNJBk9rxnIO9udcG42XnGrefaT3sCt9IDfMJ3X+FHYEdSJ0nDPM
b9taqR/6rbxxs9nOsVZUGcbvvYI05cbmo9r1h/EGTMP+y+A9QDy+S5V1gt/qKbccdYMt
yU38qnTnPttHkDwvFkeQ2Ka1aBFUKHY27jbjuEytugGcDlBxXz2sQu+HzDJWxbypf9S+
kkueZJ+VS7ozaaXaQoS/Sg5V0x8AMy/dAhNHCeTSnjNt/ELMQsS3bpUKmiFq9lhlDfdV
Vh36CLwAtwLFd7jEdtZYxoyYYuOpLaqAbfLDv3+0A5402OLCEGMCBFJDjpFRn4YaMyIV
TVlQ==
X-Gm-Message-State: AC+VfDyFOEvui7zz6Hor3fGZFXb9FjMHhFTsv3+vtMffIQDXC+hyJXfP
v4BDj2+bxGHaHT9lUMhPylr1ImX6mNmqnf2Vijs=
X-Google-Smtp-Source: ACHHUZ7FnCjNDd5sCSlKFf/B+/VCtTRPN1D3Eya/WXZ4It/zSqcfmXdRJeXio+FE3L3/lZ+1D0qae5xcpVAv2Q3sVNw=
X-Received: by 2002:ad4:5f45:0:b0:621:170:68b7 with SMTP id
p5-20020ad45f45000000b00621017068b7mr3522857qvg.35.1686142633250; Wed, 07 Jun
2023 05:57:13 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a59:aba3:0:b0:3d9:97ff:2d9c with HTTP; Wed, 7 Jun 2023
05:57:12 -0700 (PDT)
Reply-To: borismayor1967@gmail.com
From: Boris Ayiete Esq
Date: Wed, 7 Jun 2023 12:57:12 +0000
Message-ID:
Subject: From Boris Ayiete Esq
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 7.1
X-Spam_score_int: 71
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: My name is Mr Boris Ayiete. I will be waiting for your reply
to pass you the information about a relative of yours in our country who
died in Turkey some months ago kindly reply urgently. Have a good day Boris
Ayiete Esq
Content analysis details: (7.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[avivaeldemkoffi(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[borismayor1967(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.219.53 listed in list.dnswl.org]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.53 listed in wl.mailspike.net]
Subject: {SPAM?} From Boris Ayiete Esq
X-Antivirus: AVG (VPS 230607-0, 6/6/2023), Inbound message
X-Antivirus-Status: Clean
My name is Mr Boris Ayiete. I will be waiting for your reply to pass
you the information about a relative of yours in our country who died
in Turkey some months ago kindly reply urgently.
Have a good day
Boris Ayiete Esq
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 07 Jun 2023 07:59:09 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1q6tfP-000B11-0E
for dave@doctor.nl2k.ab.ca;
Wed, 07 Jun 2023 07:57:39 -0600
Resent-From: The Doctor
Resent-Date: Wed, 7 Jun 2023 07:57:39 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qv1-f53.google.com ([209.85.219.53]:56391)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1q6skw-0004HV-1U
for doctor@doctor.nl2k.ab.ca;
Wed, 07 Jun 2023 06:59:23 -0600
Received: by mail-qv1-f53.google.com with SMTP id 6a1803df08f44-62614f2eee1so54004756d6.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1686142633; x=1688734633;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=RsTzCKh8bvjj+7fsJLeOfrhDNQ0r+NadzbD6gaCLLhc=;
b=Z6rUGckmoi38Bwnmh9N2t5BY1wXLf0mJYtZtH0UA76yJx9lFxqQPXV9m3o6mrbpp+t
AJQ470FFQVdQ9rdeXGtcj1FZe9725LkGVA23NPUVVo34dY08YEDDXVKwcS0cVODf7eCs
CxSXiw3m3xBu72hPETyRLPvzUvflGH1QYlKL+Y7YWsm6+7uOpOAJcPvNuOGVXdhAvuN/
m/Uw0ATxyx8EnbAq6zUZLv7iNfQucf+xGq8Rjki7ktK/LQsRfEALZevHzrSEnvLAEeQO
vOVkV179rFfOi1fBaDUBro4zlZq9ex98ig3h7h4F8qL7zI1gL0p5Uew4cb1oYnUQPNV1
FfAA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1686142633; x=1688734633;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=RsTzCKh8bvjj+7fsJLeOfrhDNQ0r+NadzbD6gaCLLhc=;
b=HgscLtODYg07hGNiNJBk9rxnIO9udcG42XnGrefaT3sCt9IDfMJ3X+FHYEdSJ0nDPM
b9taqR/6rbxxs9nOsVZUGcbvvYI05cbmo9r1h/EGTMP+y+A9QDy+S5V1gt/qKbccdYMt
yU38qnTnPttHkDwvFkeQ2Ka1aBFUKHY27jbjuEytugGcDlBxXz2sQu+HzDJWxbypf9S+
kkueZJ+VS7ozaaXaQoS/Sg5V0x8AMy/dAhNHCeTSnjNt/ELMQsS3bpUKmiFq9lhlDfdV
Vh36CLwAtwLFd7jEdtZYxoyYYuOpLaqAbfLDv3+0A5402OLCEGMCBFJDjpFRn4YaMyIV
TVlQ==
X-Gm-Message-State: AC+VfDyFOEvui7zz6Hor3fGZFXb9FjMHhFTsv3+vtMffIQDXC+hyJXfP
v4BDj2+bxGHaHT9lUMhPylr1ImX6mNmqnf2Vijs=
X-Google-Smtp-Source: ACHHUZ7FnCjNDd5sCSlKFf/B+/VCtTRPN1D3Eya/WXZ4It/zSqcfmXdRJeXio+FE3L3/lZ+1D0qae5xcpVAv2Q3sVNw=
X-Received: by 2002:ad4:5f45:0:b0:621:170:68b7 with SMTP id
p5-20020ad45f45000000b00621017068b7mr3522857qvg.35.1686142633250; Wed, 07 Jun
2023 05:57:13 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a59:aba3:0:b0:3d9:97ff:2d9c with HTTP; Wed, 7 Jun 2023
05:57:12 -0700 (PDT)
Reply-To: borismayor1967@gmail.com
From: Boris Ayiete Esq
Date: Wed, 7 Jun 2023 12:57:12 +0000
Message-ID:
Subject: From Boris Ayiete Esq
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 7.1
X-Spam_score_int: 71
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: My name is Mr Boris Ayiete. I will be waiting for your reply
to pass you the information about a relative of yours in our country who
died in Turkey some months ago kindly reply urgently. Have a good day Boris
Ayiete Esq
Content analysis details: (7.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[avivaeldemkoffi(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[borismayor1967(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.219.53 listed in list.dnswl.org]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.53 listed in wl.mailspike.net]
Subject: {SPAM?} From Boris Ayiete Esq
X-Antivirus: AVG (VPS 230607-0, 6/6/2023), Inbound message
X-Antivirus-Status: Clean
My name is Mr Boris Ayiete. I will be waiting for your reply to pass
you the information about a relative of yours in our country who died
in Turkey some months ago kindly reply urgently.
Have a good day
Boris Ayiete Esq
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments