Nigerian spam from Google Gmail
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 11 Feb 2026 16:24:00 -0700
Received: from mail-qt1-f194.google.com ([209.85.160.194]:43038)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vqJY4-00000000FA3-3mmI
for dave@doctor.nl2k.ab.ca;
Wed, 11 Feb 2026 16:23:18 -0700
Received: by mail-qt1-f194.google.com with SMTP id d75a77b69052e-5033387c80aso18772611cf.0
for; Wed, 11 Feb 2026 15:22:20 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1770852134; cv=none;
d=google.com; s=arc-20240605;
b=LwOteL2x23sA9PICcOanFPx/xCyb/G0V65CSF2dXn3eXovgv7gC6Lez4WZ/oxsmHG3
eIR0kdBNhMhEXIRUghjrBRhS30PzbFasWfV7fcG2rEiNxWSpemS4NDA40/E7lbLmxYqK
WkvCw8l19o5GLxgK9mBzi1qJGJbWM2L0zyonYDQWyb/9GVWVghnmjji1aC1O1GIlYeF3
wZyo3I9mR0YFJNGUX2gUG2XlZgchqhA2VBVzyPgnNmzrjy0Ak8QMxeLibuKwpBur8uM5
69Dy2SjqZuDuUeyCZ2trsrlDwvM5frVbRim6enmMF2Yr5XsuXs1E6ixKGQMIYNSfqfwN
gAcQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
h=to:subject:message-id:date:from:reply-to:mime-version
:dkim-signature;
bh=jNtEuBl5KWUxqHpfKkUvTF3sWLjeOS1oBzNpu2Tjdd0=;
fh=bGYnzVVyls1OiFBUuqL9w6PaWR8TzvThWDjJbNwRS6s=;
b=KZRyFGis2XTKVefjxQMsyHj7ACOz66BN9Vm6qcRtOV0KdlFiH+kpUT3R+AZg1tuNMo
xxnF9z9TC+7JE9IlyTyjdyDWVygiGXqRIwnnNx8uJeu9W38N4xy3ZcwsvaLvZUFE30+2
ezkHWGnhkgGftj0g73YgbJC9iamu4zRcgwO7oPF7f+UfFK0Ts6LN0g1+KUgvVoVzVYIt
8kgyx1MfrBIIJ7idbGhjI4JiV8f4gFQcowLqe6taEe/DnClTxFTk/8i3eX5Idvtshgpa
NHSiqgRNc8Zr01BM9ezLnYAP42kHSAlp8U6y5D+SC9o14AOBFAYbaCD0Mu5b/Pp/wSIJ
QOQA==;
darn=doctor.nl2k.ab.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1770852134; x=1771456934; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=jNtEuBl5KWUxqHpfKkUvTF3sWLjeOS1oBzNpu2Tjdd0=;
b=cU1piSeuqQI7hO/HzkY3QeYYlGns1vFiNT9A6uwZ7E2qGYtyxiY5tow6l3l87ahwoQ
OPB9iNEayHGDR9GJklXdLB+K1jjMf+R4KbO3CXPNWEr9ESqh4+jLmJJXA2XdAjFulq+l
B94kyefSn7NB1uc5IsuAv3YS7U1sIW89GVxtipntbS2a2WCw9QNwRxn8I+IrjU8WmG+D
wWXJQ8kUjT1HSqA787tGbNCXI2XMZeDNbtekO4nQoiSiOqhvYV/I1aJK3Q8HBCdxWVXL
tugMVePjfxxmhWgtp7927mHOfemRrcUbaRfFeDja1+bjGb1M2pxDdXIQX2Uw8lfhyUfp
+NzA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1770852134; x=1771456934;
h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=jNtEuBl5KWUxqHpfKkUvTF3sWLjeOS1oBzNpu2Tjdd0=;
b=IZCngmApmc5xvIiWF6fDUV2kerPcIUrgEvt9cZy82yiFuChdX6DOUU030XrZQhssGU
XZK0ThvRBGqgs8EpJPEO5loY8F+nHE3kWGedytAF448XFtBbk19FXDqzruVPm7W5n1Ds
SYcshGahcPLFoMikz5bkNuSDFAD0WQLOLyT1z3AIGhB8tnsyzzON4ROEKUXEATcNYOe4
KcoIn/9+zgI/0/jZ4PlsEguzTOknGsSIXHOQMv0cKqNiYBOa+HWmujGQda7Qq8yFw3yz
TgBTQwQHLplSnnLalhK+D24d7AOazvbdm02NBjEAVWhh0ymxKlP1UAAJl5qK+IfFAKtJ
5e7g==
X-Forwarded-Encrypted: i=1; AJvYcCWDBID/rFkk7AGWQEOqGdONPafnS86O0FBr7qfN6ZFw0q3bV6cnQot4b5AVXpjT7V/YFMNx@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0YyzxPcbZEu8VZRTY+Fyn+I8RR+65xm40hIcgym0C6Ye+nqxS7Vz
10SZvOZ6ioqd79IW0QlPAX3UIpA9l492j5B4pmSdrxsxoIM3dH46gGAw4PU1yXSuEEMWOKvREsT
V1bDWceVRTEFd9MNw6VLam4jCJbjuc+o=
X-Gm-Gg: AZuq6aLCGHm58G9atAzJps9/U8IrWVkrTGHQsu06Xc3pvIb/ZwfQacRPOf1r6dmSE3E
ZEtDFNQVzoJO33qdNk7nvOgJRqP14j7I3ju0uqmKUXLZ8cG7laQkykwzFXNvF+ufJbr0EAFQFXU
/Yz7n2a/f9V6JC8F63f3k0Oz6ZgVoQg92esZInfRY4TbVFW5UycD9Bi8DJNxvFbp6TJ3ZAuhBi5
XoWBL29UFmmGfgH5cZALC9PoKXStjVE/AX3RAnsVyEP4CRf6qOJaChtEwXsBzDRDq8Q8wTmPGPa
YklRV+Y5wg==
X-Received: by 2002:ac8:5dd0:0:b0:501:51d4:df30 with SMTP id
d75a77b69052e-506933e51d5mr10457821cf.8.1770852134120; Wed, 11 Feb 2026
15:22:14 -0800 (PST)
MIME-Version: 1.0
Reply-To: dabrehassan91@gmail.com
From: Hassan Dabre
Date: Wed, 11 Feb 2026 23:21:42 -0800
X-Gm-Features: AZwV_QjlM9cJejl82wn5576CMIkcDliMSY1tKzfJw8aQmRwgGtC3iw9M5yaupbY
Message-ID:
Subject: Hello Dear Greetings
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000676f35064a94a4ac"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 22.2
X-Spam_score_int: 222
X-Spam_bar: ++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello Dear Greetings Your email was on an online email address-book.\
My name is Hassan Dabre (Mr). I am a physician. I work in Syria as a red
cross official under the UN. I am reaching you to seek yo [...]
Content analysis details: (22.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.160.194 listed in dnsbl.ahbl.org]
[209.85.160.194 listed in dnsbl.ahbl.org]
[209.85.160.194 listed in dnsbl.ahbl.org]
[209.85.160.194 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.160.194 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.160.194 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.160.194 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.160.194 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.160.194 listed in will-spam-for-food.eu.org]
[209.85.160.194 listed in will-spam-for-food.eu.org]
[209.85.160.194 listed in will-spam-for-food.eu.org]
[209.85.160.194 listed in will-spam-for-food.eu.org]
[209.85.160.194 listed in will-spam-for-food.eu.org]
[209.85.160.194 listed in will-spam-for-food.eu.org]
[209.85.160.194 listed in will-spam-for-food.eu.org]
[209.85.160.194 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.194 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.194 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[dabrehassan91(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[uche.pem1(at)gmail.com]
0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[uche.pem1(at)gmail.com]
1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Hello Dear Greetings
--000000000000676f35064a94a4ac
Content-Type: text/plain; charset="UTF-8"
Hello Dear Greetings
Your email was on an online email address-book.\ My name is Hassan Dabre
(Mr). I am a physician. I work in Syria as a red cross official under the
UN.
I am reaching you to seek your assistance to invest $30Million usd in your
country or region for a gainful business.
I wish to partner with you or I provide you with forty percent commission.
Please, kindly get back to me if you are able to carry out the business.
Kindly send your contact details as written below.
Your names in full:..
your Marital Status:....
Your Occupation:....
Names of your Country of Origin:...
Your Whatsapp Number:...
Your Private Mobile Number:.....
Your reply is awaited.
My Warmest Regards.
Mr.Hassan Dabre
--000000000000676f35064a94a4ac
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--000000000000676f35064a94a4ac--
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 11 Feb 2026 16:24:00 -0700
Received: from mail-qt1-f194.google.com ([209.85.160.194]:43038)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vqJY4-00000000FA3-3mmI
for dave@doctor.nl2k.ab.ca;
Wed, 11 Feb 2026 16:23:18 -0700
Received: by mail-qt1-f194.google.com with SMTP id d75a77b69052e-5033387c80aso18772611cf.0
for
ARC-Seal: i=1; a=rsa-sha256; t=1770852134; cv=none;
d=google.com; s=arc-20240605;
b=LwOteL2x23sA9PICcOanFPx/xCyb/G0V65CSF2dXn3eXovgv7gC6Lez4WZ/oxsmHG3
eIR0kdBNhMhEXIRUghjrBRhS30PzbFasWfV7fcG2rEiNxWSpemS4NDA40/E7lbLmxYqK
WkvCw8l19o5GLxgK9mBzi1qJGJbWM2L0zyonYDQWyb/9GVWVghnmjji1aC1O1GIlYeF3
wZyo3I9mR0YFJNGUX2gUG2XlZgchqhA2VBVzyPgnNmzrjy0Ak8QMxeLibuKwpBur8uM5
69Dy2SjqZuDuUeyCZ2trsrlDwvM5frVbRim6enmMF2Yr5XsuXs1E6ixKGQMIYNSfqfwN
gAcQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
h=to:subject:message-id:date:from:reply-to:mime-version
:dkim-signature;
bh=jNtEuBl5KWUxqHpfKkUvTF3sWLjeOS1oBzNpu2Tjdd0=;
fh=bGYnzVVyls1OiFBUuqL9w6PaWR8TzvThWDjJbNwRS6s=;
b=KZRyFGis2XTKVefjxQMsyHj7ACOz66BN9Vm6qcRtOV0KdlFiH+kpUT3R+AZg1tuNMo
xxnF9z9TC+7JE9IlyTyjdyDWVygiGXqRIwnnNx8uJeu9W38N4xy3ZcwsvaLvZUFE30+2
ezkHWGnhkgGftj0g73YgbJC9iamu4zRcgwO7oPF7f+UfFK0Ts6LN0g1+KUgvVoVzVYIt
8kgyx1MfrBIIJ7idbGhjI4JiV8f4gFQcowLqe6taEe/DnClTxFTk/8i3eX5Idvtshgpa
NHSiqgRNc8Zr01BM9ezLnYAP42kHSAlp8U6y5D+SC9o14AOBFAYbaCD0Mu5b/Pp/wSIJ
QOQA==;
darn=doctor.nl2k.ab.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1770852134; x=1771456934; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=jNtEuBl5KWUxqHpfKkUvTF3sWLjeOS1oBzNpu2Tjdd0=;
b=cU1piSeuqQI7hO/HzkY3QeYYlGns1vFiNT9A6uwZ7E2qGYtyxiY5tow6l3l87ahwoQ
OPB9iNEayHGDR9GJklXdLB+K1jjMf+R4KbO3CXPNWEr9ESqh4+jLmJJXA2XdAjFulq+l
B94kyefSn7NB1uc5IsuAv3YS7U1sIW89GVxtipntbS2a2WCw9QNwRxn8I+IrjU8WmG+D
wWXJQ8kUjT1HSqA787tGbNCXI2XMZeDNbtekO4nQoiSiOqhvYV/I1aJK3Q8HBCdxWVXL
tugMVePjfxxmhWgtp7927mHOfemRrcUbaRfFeDja1+bjGb1M2pxDdXIQX2Uw8lfhyUfp
+NzA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1770852134; x=1771456934;
h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=jNtEuBl5KWUxqHpfKkUvTF3sWLjeOS1oBzNpu2Tjdd0=;
b=IZCngmApmc5xvIiWF6fDUV2kerPcIUrgEvt9cZy82yiFuChdX6DOUU030XrZQhssGU
XZK0ThvRBGqgs8EpJPEO5loY8F+nHE3kWGedytAF448XFtBbk19FXDqzruVPm7W5n1Ds
SYcshGahcPLFoMikz5bkNuSDFAD0WQLOLyT1z3AIGhB8tnsyzzON4ROEKUXEATcNYOe4
KcoIn/9+zgI/0/jZ4PlsEguzTOknGsSIXHOQMv0cKqNiYBOa+HWmujGQda7Qq8yFw3yz
TgBTQwQHLplSnnLalhK+D24d7AOazvbdm02NBjEAVWhh0ymxKlP1UAAJl5qK+IfFAKtJ
5e7g==
X-Forwarded-Encrypted: i=1; AJvYcCWDBID/rFkk7AGWQEOqGdONPafnS86O0FBr7qfN6ZFw0q3bV6cnQot4b5AVXpjT7V/YFMNx@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0YyzxPcbZEu8VZRTY+Fyn+I8RR+65xm40hIcgym0C6Ye+nqxS7Vz
10SZvOZ6ioqd79IW0QlPAX3UIpA9l492j5B4pmSdrxsxoIM3dH46gGAw4PU1yXSuEEMWOKvREsT
V1bDWceVRTEFd9MNw6VLam4jCJbjuc+o=
X-Gm-Gg: AZuq6aLCGHm58G9atAzJps9/U8IrWVkrTGHQsu06Xc3pvIb/ZwfQacRPOf1r6dmSE3E
ZEtDFNQVzoJO33qdNk7nvOgJRqP14j7I3ju0uqmKUXLZ8cG7laQkykwzFXNvF+ufJbr0EAFQFXU
/Yz7n2a/f9V6JC8F63f3k0Oz6ZgVoQg92esZInfRY4TbVFW5UycD9Bi8DJNxvFbp6TJ3ZAuhBi5
XoWBL29UFmmGfgH5cZALC9PoKXStjVE/AX3RAnsVyEP4CRf6qOJaChtEwXsBzDRDq8Q8wTmPGPa
YklRV+Y5wg==
X-Received: by 2002:ac8:5dd0:0:b0:501:51d4:df30 with SMTP id
d75a77b69052e-506933e51d5mr10457821cf.8.1770852134120; Wed, 11 Feb 2026
15:22:14 -0800 (PST)
MIME-Version: 1.0
Reply-To: dabrehassan91@gmail.com
From: Hassan Dabre
Date: Wed, 11 Feb 2026 23:21:42 -0800
X-Gm-Features: AZwV_QjlM9cJejl82wn5576CMIkcDliMSY1tKzfJw8aQmRwgGtC3iw9M5yaupbY
Message-ID:
Subject: Hello Dear Greetings
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000676f35064a94a4ac"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 22.2
X-Spam_score_int: 222
X-Spam_bar: ++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello Dear Greetings Your email was on an online email address-book.\
My name is Hassan Dabre (Mr). I am a physician. I work in Syria as a red
cross official under the UN. I am reaching you to seek yo [...]
Content analysis details: (22.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.160.194 listed in dnsbl.ahbl.org]
[209.85.160.194 listed in dnsbl.ahbl.org]
[209.85.160.194 listed in dnsbl.ahbl.org]
[209.85.160.194 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.160.194 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.160.194 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.160.194 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.160.194 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.160.194 listed in will-spam-for-food.eu.org]
[209.85.160.194 listed in will-spam-for-food.eu.org]
[209.85.160.194 listed in will-spam-for-food.eu.org]
[209.85.160.194 listed in will-spam-for-food.eu.org]
[209.85.160.194 listed in will-spam-for-food.eu.org]
[209.85.160.194 listed in will-spam-for-food.eu.org]
[209.85.160.194 listed in will-spam-for-food.eu.org]
[209.85.160.194 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.194 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.194 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[dabrehassan91(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[uche.pem1(at)gmail.com]
0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[uche.pem1(at)gmail.com]
1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Hello Dear Greetings
--000000000000676f35064a94a4ac
Content-Type: text/plain; charset="UTF-8"
Hello Dear Greetings
Your email was on an online email address-book.\ My name is Hassan Dabre
(Mr). I am a physician. I work in Syria as a red cross official under the
UN.
I am reaching you to seek your assistance to invest $30Million usd in your
country or region for a gainful business.
I wish to partner with you or I provide you with forty percent commission.
Please, kindly get back to me if you are able to carry out the business.
Kindly send your contact details as written below.
Your names in full:..
your Marital Status:....
Your Occupation:....
Names of your Country of Origin:...
Your Whatsapp Number:...
Your Private Mobile Number:.....
Your reply is awaited.
My Warmest Regards.
Mr.Hassan Dabre
--000000000000676f35064a94a4ac
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hello Dear Greetings
Your email was on an online email =
address-book.\ My name is Hassan Dabre =C2=A0(Mr). I am a physician. I work=
in Syria as a red cross official under the UN.
I am reaching you to see=
k your assistance to invest =C2=A0$30Million usd in your country or region =
for a gainful business.
=C2=A0I wish to partner with you or I provid=
e you with forty percent commission. Please, kindly get back to me if you a=
re able to carry out the business.
Kindly send your contact details as w=
ritten below.
Your names in full:..
your Marital Status:....
Y=
our Occupation:....
Names of your Country of Origin:...
Your Whatsapp=
Number:...
Your Private Mobile Number:.....
Your reply is awaite=
d.
My Warmest =C2=A0Regards.
Mr.Hassan Dabre
Your email was on an online email =
address-book.\ My name is Hassan Dabre =C2=A0(Mr). I am a physician. I work=
in Syria as a red cross official under the UN.
I am reaching you to see=
k your assistance to invest =C2=A0$30Million usd in your country or region =
for a gainful business.
=C2=A0I wish to partner with you or I provid=
e you with forty percent commission. Please, kindly get back to me if you a=
re able to carry out the business.
Kindly send your contact details as w=
ritten below.
Your names in full:..
your Marital Status:....
Y=
our Occupation:....
Names of your Country of Origin:...
Your Whatsapp=
Number:...
Your Private Mobile Number:.....
Your reply is awaite=
d.
My Warmest =C2=A0Regards.
Mr.Hassan Dabre
--000000000000676f35064a94a4ac--