Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 22 Jun 2023 05:18:07 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from)
id 1qCIJR-0008m1-13
for dave@doctor.nl2k.ab.ca;
Thu, 22 Jun 2023 05:17:17 -0600
Resent-From: The Doctor
Resent-Date: Thu, 22 Jun 2023 05:17:17 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj1-f65.google.com ([209.85.216.65]:60673)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1qCEGz-000EDq-2v
for doctor@doctor.nl2k.ab.ca;
Thu, 22 Jun 2023 00:58:34 -0600
Received: by mail-pj1-f65.google.com with SMTP id 98e67ed59e1d1-25edd424306so2541150a91.1
for; Wed, 21 Jun 2023 23:56:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1687416985; x=1690008985;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=kSHR7cJwrJiIfpUvBIghDNmLQzN2uvqfoxKo/d54xus=;
b=pxy5Phz8Ax8gti1zSRu8YZ6/8vjh0hPzzXCTiJiRLF/rC3AmFrsXYOgEPitZTj3+/R
SDSbSHsdrBT0EvMciRHKzaTgtBdZTPzefI1EsmOptgG6Ib+OeWnbdtdQDitHQ3gRFrGF
hgdCdgvH8IYVwbWOhgFnpyjJQ4EoA+dRfGxSO6aUqfuUj4FIv2SoSdUzY77LLLGxUqbq
YgDuOkC4tfVSiiT9aLzorDlunedIiYJzPZ96sws9mCETPh5yDIOxlNiNRY+ZMbbsEM4e
Urjfz8oH0XWdCDdzsehunpQ/nI3d51UCffeCzhCCOgSlM9qqNEthZLN2YQzI0OefvTkI
vyfA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1687416985; x=1690008985;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=kSHR7cJwrJiIfpUvBIghDNmLQzN2uvqfoxKo/d54xus=;
b=e5at+gh3aEVQ77n9MTJf2wFknZhPSORB3bfPcwmr+S0ehIi5rpePJcA8ofOXo8/szU
M9G4dd/m02/CHKXgfAcDwnE4cUJ8oTqSU/IeAuX5JquPlhKhNzT363yPK0e5YDB90i0l
w6enrXvmzxpp0qxuqhwAJyb/X7TrwLxWOsix/YDpfdQzqhBLYtThPnEoSXMhT1qeEq5f
Jz/BiR8orT3x9B02rfxoLpHeQZ3WNM/Ei+yz0XY/AJn2uTWT64PVlH7IOuSK/NxgZ7Mz
FjqS+/UmpvB6v+SSpZEbroRpuO1ZZUwWU+r5aJJnUPHwlqUss1/RsNbbeA1W5i5Vcgch
VYDw==
X-Gm-Message-State: AC+VfDwVr/fJOkQy4yAFgFTO5eED3Bm1XU0DWpXhYmdXB6ovRa9Jt41+
lG5L7VuYC88+2OLRLpQYnc3cnWyeSJthmzXBtUQ=
X-Google-Smtp-Source: ACHHUZ5jfFd23iUTwsglfkpo3hNTAhb/AK9sh6jPXMcfLg/Qs+EmLL0LiuWzWHe7Crk2YRbWLcd4DBKTRGxIc0BCNog=
X-Received: by 2002:a17:90a:eb0c:b0:253:727e:4b41 with SMTP id
j12-20020a17090aeb0c00b00253727e4b41mr7588748pjz.34.1687416984763; Wed, 21
Jun 2023 23:56:24 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6a10:2d03:b0:4c5:2ec8:e07a with HTTP; Wed, 21 Jun 2023
23:56:23 -0700 (PDT)
Reply-To: issaisman48@aol.com
From: Issa Isman
Date: Wed, 21 Jun 2023 23:56:23 -0700
Message-ID:
Subject: Good Day
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 13.7
X-Spam_score_int: 137
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, How are you doing Today, My name is Mr.ssa Isman,
and I am the Bill and Exchange Assistant Manager BOA Bank of Afrlca. I have
a business deal worth ( US$18.3 Million Dollars )to execute with you, it'
[...]
Content analysis details: (13.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.216.65 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.216.65 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[issaisman48(at)aol.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[bfmr.info(at)gmail.com]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Good Day
Dear Friend,
How are you doing Today, My name is Mr.ssa Isman, and I am the Bill
and Exchange Assistant Manager BOA Bank of Afrlca. I have a business
deal worth ( US$18.3 Million Dollars )to execute with you, it's
legitimate' legal and your personal Identity will not be compromised,
Will I have your support to achieve this great opportunity
Yours Sincerely,
Mr.Issa Isman
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 22 Jun 2023 05:18:07 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1qCIJR-0008m1-13
for dave@doctor.nl2k.ab.ca;
Thu, 22 Jun 2023 05:17:17 -0600
Resent-From: The Doctor
Resent-Date: Thu, 22 Jun 2023 05:17:17 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj1-f65.google.com ([209.85.216.65]:60673)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qCEGz-000EDq-2v
for doctor@doctor.nl2k.ab.ca;
Thu, 22 Jun 2023 00:58:34 -0600
Received: by mail-pj1-f65.google.com with SMTP id 98e67ed59e1d1-25edd424306so2541150a91.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1687416985; x=1690008985;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=kSHR7cJwrJiIfpUvBIghDNmLQzN2uvqfoxKo/d54xus=;
b=pxy5Phz8Ax8gti1zSRu8YZ6/8vjh0hPzzXCTiJiRLF/rC3AmFrsXYOgEPitZTj3+/R
SDSbSHsdrBT0EvMciRHKzaTgtBdZTPzefI1EsmOptgG6Ib+OeWnbdtdQDitHQ3gRFrGF
hgdCdgvH8IYVwbWOhgFnpyjJQ4EoA+dRfGxSO6aUqfuUj4FIv2SoSdUzY77LLLGxUqbq
YgDuOkC4tfVSiiT9aLzorDlunedIiYJzPZ96sws9mCETPh5yDIOxlNiNRY+ZMbbsEM4e
Urjfz8oH0XWdCDdzsehunpQ/nI3d51UCffeCzhCCOgSlM9qqNEthZLN2YQzI0OefvTkI
vyfA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1687416985; x=1690008985;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=kSHR7cJwrJiIfpUvBIghDNmLQzN2uvqfoxKo/d54xus=;
b=e5at+gh3aEVQ77n9MTJf2wFknZhPSORB3bfPcwmr+S0ehIi5rpePJcA8ofOXo8/szU
M9G4dd/m02/CHKXgfAcDwnE4cUJ8oTqSU/IeAuX5JquPlhKhNzT363yPK0e5YDB90i0l
w6enrXvmzxpp0qxuqhwAJyb/X7TrwLxWOsix/YDpfdQzqhBLYtThPnEoSXMhT1qeEq5f
Jz/BiR8orT3x9B02rfxoLpHeQZ3WNM/Ei+yz0XY/AJn2uTWT64PVlH7IOuSK/NxgZ7Mz
FjqS+/UmpvB6v+SSpZEbroRpuO1ZZUwWU+r5aJJnUPHwlqUss1/RsNbbeA1W5i5Vcgch
VYDw==
X-Gm-Message-State: AC+VfDwVr/fJOkQy4yAFgFTO5eED3Bm1XU0DWpXhYmdXB6ovRa9Jt41+
lG5L7VuYC88+2OLRLpQYnc3cnWyeSJthmzXBtUQ=
X-Google-Smtp-Source: ACHHUZ5jfFd23iUTwsglfkpo3hNTAhb/AK9sh6jPXMcfLg/Qs+EmLL0LiuWzWHe7Crk2YRbWLcd4DBKTRGxIc0BCNog=
X-Received: by 2002:a17:90a:eb0c:b0:253:727e:4b41 with SMTP id
j12-20020a17090aeb0c00b00253727e4b41mr7588748pjz.34.1687416984763; Wed, 21
Jun 2023 23:56:24 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6a10:2d03:b0:4c5:2ec8:e07a with HTTP; Wed, 21 Jun 2023
23:56:23 -0700 (PDT)
Reply-To: issaisman48@aol.com
From: Issa Isman
Date: Wed, 21 Jun 2023 23:56:23 -0700
Message-ID:
Subject: Good Day
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 13.7
X-Spam_score_int: 137
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, How are you doing Today, My name is Mr.ssa Isman,
and I am the Bill and Exchange Assistant Manager BOA Bank of Afrlca. I have
a business deal worth ( US$18.3 Million Dollars )to execute with you, it'
[...]
Content analysis details: (13.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.216.65 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.216.65 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[issaisman48(at)aol.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[bfmr.info(at)gmail.com]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Good Day
Dear Friend,
How are you doing Today, My name is Mr.ssa Isman, and I am the Bill
and Exchange Assistant Manager BOA Bank of Afrlca. I have a business
deal worth ( US$18.3 Million Dollars )to execute with you, it's
legitimate' legal and your personal Identity will not be compromised,
Will I have your support to achieve this great opportunity
Yours Sincerely,
Mr.Issa Isman
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments