Nigerian Spam from Google Gmail Part 2
Posted by Dave Yadallee onContent analysis details: (18.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.128.52 listed in dnsbl.ahbl.org]
[209.85.128.52 listed in dnsbl.ahbl.org]
[209.85.128.52 listed in dnsbl.ahbl.org]
[209.85.128.52 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.128.52 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.128.52 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.128.52 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.128.52 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.128.52 listed in will-spam-for-food.eu.org]
[209.85.128.52 listed in will-spam-for-food.eu.org]
[209.85.128.52 listed in will-spam-for-food.eu.org]
[209.85.128.52 listed in will-spam-for-food.eu.org]
[209.85.128.52 listed in will-spam-for-food.eu.org]
[209.85.128.52 listed in will-spam-for-food.eu.org]
[209.85.128.52 listed in will-spam-for-food.eu.org]
[209.85.128.52 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.52 listed in list.dnswl.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.128.52 listed in sa-accredit.habeas.com]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.128.52 listed in sa-trusted.bondedsender.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.128.52 listed in bl.score.senderscore.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.128.52 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.52 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[ashaalqaddfi10(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[yomiano3(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[yomiano3(at)gmail.com]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
2.5 MILLION_USD BODY: Talks about millions of dollars
1.7 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
0.9 URG_BIZ BODY: Contains urgent matter
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Dear Friend,
--000000000000f88b6e064f850559
Content-Type: text/plain; charset="UTF-8"
Dear Friend,
I came across your mail contact prior to a private search while in need of
your assistance. I am Aisha Qaddafi, the only biological Daughter of Former
President of Libya Col. Qaddafi. Am a single Mother and a Widow with three
Children.
I have investment funds worth Twenty Seven Million Five Hundred Thousand
United State Dollar 27.500.000.00 and i need a trusted investment
Manager/Partner because of my current refugee status, however, I am
interested in you for investment project assistance in your country,
If you are willing to handle this project on my behalf kindly reply
urgently to enable me to provide you more information
Your Urgent Reply Will Be Appreciated
Best Regards
Mrs Aisha Al-Qaddafi
--000000000000f88b6e064f850559
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
=C2=A0Dear Friend,
I came across your mail contact =
prior to a private search while in need of your assistance. I am Aisha Qadd=
afi, the only biological Daughter of Former President of Libya Col. Qaddafi=
. Am a single Mother and a Widow with three Children.
I have investm=
ent funds worth Twenty Seven Million Five Hundred Thousand United State Dol=
lar 27.500.000.00 =C2=A0and i need a trusted investment Manager/Partner bec=
ause of my current refugee status, however, I am interested in you for inve=
stment project assistance in your country,
=C2=A0If you are willing =
to handle this project on my behalf kindly reply urgently to enable me to p=
rovide you more information
=C2=A0Your Urgent Reply Will Be Apprecia=
ted
=C2=A0Best Regards
=C2=A0Mrs Aisha Al-Qaddafi
I came across your mail contact =
prior to a private search while in need of your assistance. I am Aisha Qadd=
afi, the only biological Daughter of Former President of Libya Col. Qaddafi=
. Am a single Mother and a Widow with three Children.
I have investm=
ent funds worth Twenty Seven Million Five Hundred Thousand United State Dol=
lar 27.500.000.00 =C2=A0and i need a trusted investment Manager/Partner bec=
ause of my current refugee status, however, I am interested in you for inve=
stment project assistance in your country,
=C2=A0If you are willing =
to handle this project on my behalf kindly reply urgently to enable me to p=
rovide you more information
=C2=A0Your Urgent Reply Will Be Apprecia=
ted
=C2=A0Best Regards
=C2=A0Mrs Aisha Al-Qaddafi
--000000000000f88b6e064f850559--