Nigerian spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 30 Oct 2023 06:36:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.2 (FreeBSD))
(envelope-from)
id 1qxRUs-000JZg-3D
for dave@doctor.nl2k.ab.ca;
Mon, 30 Oct 2023 06:35:58 -0600
Resent-From: The Doctor
Resent-Date: Mon, 30 Oct 2023 06:35:58 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yb1-f196.google.com ([209.85.219.196]:59439)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96.2 (FreeBSD))
(envelope-from)
id 1qxRQd-000DIA-1a
for root@nk.ca;
Mon, 30 Oct 2023 06:31:39 -0600
Received: by mail-yb1-f196.google.com with SMTP id 3f1490d57ef6-d84c24a810dso3724855276.2
for; Mon, 30 Oct 2023 05:29:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1698668971; x=1699273771; darn=nk.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=8L3WpiSHpxbvtwz3l9BIIMqCWETDPR8j6ePi3sfG5S4=;
b=aQ+nASmLwXLoO1hREducuW3vv+XZB0B8gAIvCuXtB7cW+oLEjPZlulEa+n7M0gi7ND
lGEtwu68XZo3vv/0i6Pm1loHLrAIUq/iuci9+85WkJuk6s4xRcnnfeBkGX1YthMwjOzp
/5hNpv60u8BEw31UwLQoxv17Wqq/n9HwN839Ze8//PxS/+wRbkDzaH+qhzz4g4mBjuMo
LXmQyko/T6v88vvQyb4ea8MLTSxPVos6RyzuZ8S+yR1+myhhMVtru6rlaFRuokcz7VIi
YbifBiNwdg8dx5h+FhwWXfhuTKL/XltkM4wyvQdfcAP7e/jgUyKA1PTfSEza/uRXLyuA
J5JA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1698668971; x=1699273771;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=8L3WpiSHpxbvtwz3l9BIIMqCWETDPR8j6ePi3sfG5S4=;
b=wWpQ4HBEzNRcXf2u8eLRwNxDNpC6KDmcLUjEGjSsvDgMSqtSLDcG3/z65IrFymlZtI
YP4JscW3k33aeatdtW8P0sXWkDKy4PZ8ACwWzS+HeQZo04wpJCGL6TKWPYO0NiwfhO83
d+YvRntccu/Nr1+Ey0tTNVa78hG1/5pc3pvxAdKhJcFtyG6wV3hl/zN8q/8RuMEQdK70
jMOd+OoqmZzp7cO8sUI8CAsdbYPfJPH5QmghZnK9JvU+ZTdoeEPsvxpdR+Ow6lKhj9UW
7j++Fp1XpE3+gYh/efx7H5OU0KlDNzHuQeOrBs+0TF1+8pc9ZuZyh4zP2mMbxj5+X4rR
fiRw==
X-Gm-Message-State: AOJu0Ywzw9PzCIfVTjbWmLkPVL2e0WhL5bFtV2KGf6NdPY8GTxl0G5WD
Q5HscuWGoL4dK/mPX4sRMcV2Rel67YgCVdIipOk=
X-Google-Smtp-Source: AGHT+IHoOQy4V26hnw4YEOS5p8P5QyG0loF9zItRYPY6KaINYNVShkYVt1e1fDZrXgVe6HcJfqrWx4IeGE4CpjfxZPU=
X-Received: by 2002:a25:84c9:0:b0:da0:4bda:dc41 with SMTP id
x9-20020a2584c9000000b00da04bdadc41mr7875300ybm.37.1698668970768; Mon, 30 Oct
2023 05:29:30 -0700 (PDT)
MIME-Version: 1.0
Reply-To: rinat77@inbox.lv
From: "Mr. Rinat Akhmetov"
Date: Mon, 30 Oct 2023 05:29:19 -0700
Message-ID:
Subject: Hello Friend
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000098006c0608ee3052"
Bcc: root@nk.ca
X-Spam_score: 13.8
X-Spam_score_int: 138
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Good Day, I am Mr. Rinat Akhmetov, an investor and a director
with SCM Holdings (System Capital Management) Donetsk, Ukraine. Considering
the current situation in my country Ukraine in regards to the Military I
[...]
Content analysis details: (13.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.219.196 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.196 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[ashleymg862(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[ashleymg862(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[rinat77(at)inbox.lv]
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
0.0 HTML_MESSAGE BODY: HTML included in message
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
2.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Hello Friend
X-Antivirus: AVG (VPS 231029-4, 10/29/2023), Inbound message
X-Antivirus-Status: Clean
--00000000000098006c0608ee3052
Content-Type: text/plain; charset="UTF-8"
Good Day,
I am Mr. Rinat Akhmetov, an investor and a director with SCM Holdings
(System Capital Management) Donetsk, Ukraine. Considering the current
situation in my country Ukraine in regards to the Military Invasion by the
Russian Federation, which has destroyed our country and many companies,
and has put a hold on economic activities.
I am soliciting your consent to transfer the sum of Three Hundred and Fifty
Million US Dollars ($350M) investment funds deposited with an Austrian bank
(SGB BANK AUSTRIA) into your personal bank account or Company bank account
for investment purposes.
Please respond back for more details.
Yours Truly,
Mr. Rinat Akhmetov
Chairman SCM Holdings
--00000000000098006c0608ee3052
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--00000000000098006c0608ee3052--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 30 Oct 2023 06:36:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.2 (FreeBSD))
(envelope-from
id 1qxRUs-000JZg-3D
for dave@doctor.nl2k.ab.ca;
Mon, 30 Oct 2023 06:35:58 -0600
Resent-From: The Doctor
Resent-Date: Mon, 30 Oct 2023 06:35:58 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yb1-f196.google.com ([209.85.219.196]:59439)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96.2 (FreeBSD))
(envelope-from
id 1qxRQd-000DIA-1a
for root@nk.ca;
Mon, 30 Oct 2023 06:31:39 -0600
Received: by mail-yb1-f196.google.com with SMTP id 3f1490d57ef6-d84c24a810dso3724855276.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1698668971; x=1699273771; darn=nk.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=8L3WpiSHpxbvtwz3l9BIIMqCWETDPR8j6ePi3sfG5S4=;
b=aQ+nASmLwXLoO1hREducuW3vv+XZB0B8gAIvCuXtB7cW+oLEjPZlulEa+n7M0gi7ND
lGEtwu68XZo3vv/0i6Pm1loHLrAIUq/iuci9+85WkJuk6s4xRcnnfeBkGX1YthMwjOzp
/5hNpv60u8BEw31UwLQoxv17Wqq/n9HwN839Ze8//PxS/+wRbkDzaH+qhzz4g4mBjuMo
LXmQyko/T6v88vvQyb4ea8MLTSxPVos6RyzuZ8S+yR1+myhhMVtru6rlaFRuokcz7VIi
YbifBiNwdg8dx5h+FhwWXfhuTKL/XltkM4wyvQdfcAP7e/jgUyKA1PTfSEza/uRXLyuA
J5JA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1698668971; x=1699273771;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=8L3WpiSHpxbvtwz3l9BIIMqCWETDPR8j6ePi3sfG5S4=;
b=wWpQ4HBEzNRcXf2u8eLRwNxDNpC6KDmcLUjEGjSsvDgMSqtSLDcG3/z65IrFymlZtI
YP4JscW3k33aeatdtW8P0sXWkDKy4PZ8ACwWzS+HeQZo04wpJCGL6TKWPYO0NiwfhO83
d+YvRntccu/Nr1+Ey0tTNVa78hG1/5pc3pvxAdKhJcFtyG6wV3hl/zN8q/8RuMEQdK70
jMOd+OoqmZzp7cO8sUI8CAsdbYPfJPH5QmghZnK9JvU+ZTdoeEPsvxpdR+Ow6lKhj9UW
7j++Fp1XpE3+gYh/efx7H5OU0KlDNzHuQeOrBs+0TF1+8pc9ZuZyh4zP2mMbxj5+X4rR
fiRw==
X-Gm-Message-State: AOJu0Ywzw9PzCIfVTjbWmLkPVL2e0WhL5bFtV2KGf6NdPY8GTxl0G5WD
Q5HscuWGoL4dK/mPX4sRMcV2Rel67YgCVdIipOk=
X-Google-Smtp-Source: AGHT+IHoOQy4V26hnw4YEOS5p8P5QyG0loF9zItRYPY6KaINYNVShkYVt1e1fDZrXgVe6HcJfqrWx4IeGE4CpjfxZPU=
X-Received: by 2002:a25:84c9:0:b0:da0:4bda:dc41 with SMTP id
x9-20020a2584c9000000b00da04bdadc41mr7875300ybm.37.1698668970768; Mon, 30 Oct
2023 05:29:30 -0700 (PDT)
MIME-Version: 1.0
Reply-To: rinat77@inbox.lv
From: "Mr. Rinat Akhmetov"
Date: Mon, 30 Oct 2023 05:29:19 -0700
Message-ID:
Subject: Hello Friend
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000098006c0608ee3052"
Bcc: root@nk.ca
X-Spam_score: 13.8
X-Spam_score_int: 138
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Good Day, I am Mr. Rinat Akhmetov, an investor and a director
with SCM Holdings (System Capital Management) Donetsk, Ukraine. Considering
the current situation in my country Ukraine in regards to the Military I
[...]
Content analysis details: (13.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.219.196 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.196 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[ashleymg862(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[ashleymg862(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[rinat77(at)inbox.lv]
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
0.0 HTML_MESSAGE BODY: HTML included in message
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
2.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Hello Friend
X-Antivirus: AVG (VPS 231029-4, 10/29/2023), Inbound message
X-Antivirus-Status: Clean
--00000000000098006c0608ee3052
Content-Type: text/plain; charset="UTF-8"
Good Day,
I am Mr. Rinat Akhmetov, an investor and a director with SCM Holdings
(System Capital Management) Donetsk, Ukraine. Considering the current
situation in my country Ukraine in regards to the Military Invasion by the
Russian Federation, which has destroyed our country and many companies,
and has put a hold on economic activities.
I am soliciting your consent to transfer the sum of Three Hundred and Fifty
Million US Dollars ($350M) investment funds deposited with an Austrian bank
(SGB BANK AUSTRIA) into your personal bank account or Company bank account
for investment purposes.
Please respond back for more details.
Yours Truly,
Mr. Rinat Akhmetov
Chairman SCM Holdings
--00000000000098006c0608ee3052
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Good Day,
I=
am Mr. Rinat Akhmetov, an investor and a director with SCM Holdings (Syste=
m Capital Management) Donetsk, Ukraine. Considering the current situation i=
n my country Ukraine in regards to the Military Invasion=C2=A0 by the Russi=
an Federation, which has destroyed our country and many companies,=C2=A0 an=
d has put a hold on economic activities.
am Mr. Rinat Akhmetov, an investor and a director with SCM Holdings (Syste=
m Capital Management) Donetsk, Ukraine. Considering the current situation i=
n my country Ukraine in regards to the Military Invasion=C2=A0 by the Russi=
an Federation, which has destroyed our country and many companies,=C2=A0 an=
d has put a hold on economic activities.
I am soli=
citing your consent to transfer the sum of Three Hundred and Fifty Million =
US Dollars ($350M) investment funds deposited with an Austrian bank (SGB BA=
NK AUSTRIA) into your personal bank account or Company bank account for inv=
estment purposes.
citing your consent to transfer the sum of Three Hundred and Fifty Million =
US Dollars ($350M) investment funds deposited with an Austrian bank (SGB BA=
NK AUSTRIA) into your personal bank account or Company bank account for inv=
estment purposes.
Please respond back for more det=
ails.
ails.
Yours Truly,
Mr. Rinat Akhmetov
iv>
iv>
Chairman SCM Holdings
--00000000000098006c0608ee3052--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments