Nigerian Spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 07 Jun 2022 08:35:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1nyaHt-000Fsz-AO
for dave@doctor.nl2k.ab.ca;
Tue, 07 Jun 2022 08:34:29 -0600
Resent-From: The Doctor
Resent-Date: Tue, 7 Jun 2022 08:34:29 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs1-f48.google.com ([209.85.217.48]:37592)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1nyZT4-0006oO-6j
for doctor@doctor.nl2k.ab.ca;
Tue, 07 Jun 2022 07:42:04 -0600
Received: by mail-vs1-f48.google.com with SMTP id w10so16720323vsa.4
for; Tue, 07 Jun 2022 06:41:40 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=iMgfh4dNrbZNC0zackE+NFoHodFU+BrSQXwCeyK59sA=;
b=UIXFlhg1Zj+JY3P8lGAoMiy1x/yEfsBGaBv3zleDgKKWLrVgydFwL3e0SjsYwSt9YU
L6pI3bi1bAoL7LdGYTP8UafNN4NZOwfQFMBvZscuE6lq+1aef36ctKIbA+X6fV0eks4+
d0WptREhPq/HQg/52K7SWZccscyHy5YDyfXFXFaE+Ht6g1+NF+9ePGLX0uWY57Pbzb3z
LHCEzo/sxuXvmrSYS7/TUCX6tsBvu/N3+Tw9F4Ox+CmAfVIy/MKwwGIaNkyl4wCXtz/T
IpOdT8eygbHpKa9W0y4bZzeg1YsH6keldDfyt0e8abzyPJRrkbFU31JWP+B63C7oHhYN
8+hQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=iMgfh4dNrbZNC0zackE+NFoHodFU+BrSQXwCeyK59sA=;
b=N33F0PBZVMfBPO3mEvfIAIBFme8sANJVUHeiKbskZkQ1IFiTIW5pnq4QcKhpig01OV
U/iINiCuOPu1KSnvBtYd6T/Jrjjt9JVLUYQ7HPZU7W6bj7ct/Z5WGovfmc8p72+V051j
yMrz6JYWH1kMFQihUE2b9PDjlBKq6bvNczRfF0uQPbe2HZZOzg4ge3o7tjgwund2e3g+
KDjFTT95/mk9ptziXrt5mMWdzHkHY8JYyU33PJIOSZT8GKUKefXV+ReA6rd1SgaWtkd+
QQUbrURB7qOVol8K0SEDHT4/kqjsrPVbA55A0ILfKBxYvA8oHE1UGOlmGhhbXFN36vt4
A5Qw==
X-Gm-Message-State: AOAM531mmodGnsMbkfXSwMSaQH9xz4EePhUzRDNdZaaSctkQxnrn0ALZ
e72vCEQwdDn7waiUtkv0eoSgTR9m0jWVIpEbxfM=
X-Google-Smtp-Source: ABdhPJxYWwYpxQKi6CmkxU3OCpPDWPxKQ6/xP56zRgKN8+judoHVeGrkxiPWbTtByaYROB0BAyLWIyoLKQlBGsHM6HM=
X-Received: by 2002:a05:6102:5090:b0:34b:c270:436e with SMTP id
bl16-20020a056102509000b0034bc270436emr4174718vsb.61.1654609294534; Tue, 07
Jun 2022 06:41:34 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6102:3e8e:0:0:0:0 with HTTP; Tue, 7 Jun 2022 06:41:33
-0700 (PDT)
Reply-To: nn9122250@gmail.com
From: "Mr.K.Mashal"
Date: Tue, 7 Jun 2022 14:41:33 +0100
Message-ID:
Subject: Read this Letter and Reply very important!
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 14.0
X-Spam_score_int: 140
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Sir I have a Lucrative Investment business proposal/Next
of Kin opportunity if interested kindly contact me for more details:( dalh52179@gmail.com
) Regards Mr.Khader Mashal ( dalh52179@gmail.com )
Content analysis details: (14.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[okorookoro437[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.217.48 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[okorookoro437[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[nn9122250[at]gmail.com]
2.5 HK_SCAM_N2 BODY: No description available.
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 HK_SCAM No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Read this Letter and Reply very important!
Dear Sir
I have a Lucrative Investment business proposal/Next of Kin
opportunity if interested kindly contact me for more details:(
dalh52179@gmail.com )
Regards
Mr.Khader Mashal
( dalh52179@gmail.com )
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 07 Jun 2022 08:35:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1nyaHt-000Fsz-AO
for dave@doctor.nl2k.ab.ca;
Tue, 07 Jun 2022 08:34:29 -0600
Resent-From: The Doctor
Resent-Date: Tue, 7 Jun 2022 08:34:29 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs1-f48.google.com ([209.85.217.48]:37592)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1nyZT4-0006oO-6j
for doctor@doctor.nl2k.ab.ca;
Tue, 07 Jun 2022 07:42:04 -0600
Received: by mail-vs1-f48.google.com with SMTP id w10so16720323vsa.4
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=iMgfh4dNrbZNC0zackE+NFoHodFU+BrSQXwCeyK59sA=;
b=UIXFlhg1Zj+JY3P8lGAoMiy1x/yEfsBGaBv3zleDgKKWLrVgydFwL3e0SjsYwSt9YU
L6pI3bi1bAoL7LdGYTP8UafNN4NZOwfQFMBvZscuE6lq+1aef36ctKIbA+X6fV0eks4+
d0WptREhPq/HQg/52K7SWZccscyHy5YDyfXFXFaE+Ht6g1+NF+9ePGLX0uWY57Pbzb3z
LHCEzo/sxuXvmrSYS7/TUCX6tsBvu/N3+Tw9F4Ox+CmAfVIy/MKwwGIaNkyl4wCXtz/T
IpOdT8eygbHpKa9W0y4bZzeg1YsH6keldDfyt0e8abzyPJRrkbFU31JWP+B63C7oHhYN
8+hQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=iMgfh4dNrbZNC0zackE+NFoHodFU+BrSQXwCeyK59sA=;
b=N33F0PBZVMfBPO3mEvfIAIBFme8sANJVUHeiKbskZkQ1IFiTIW5pnq4QcKhpig01OV
U/iINiCuOPu1KSnvBtYd6T/Jrjjt9JVLUYQ7HPZU7W6bj7ct/Z5WGovfmc8p72+V051j
yMrz6JYWH1kMFQihUE2b9PDjlBKq6bvNczRfF0uQPbe2HZZOzg4ge3o7tjgwund2e3g+
KDjFTT95/mk9ptziXrt5mMWdzHkHY8JYyU33PJIOSZT8GKUKefXV+ReA6rd1SgaWtkd+
QQUbrURB7qOVol8K0SEDHT4/kqjsrPVbA55A0ILfKBxYvA8oHE1UGOlmGhhbXFN36vt4
A5Qw==
X-Gm-Message-State: AOAM531mmodGnsMbkfXSwMSaQH9xz4EePhUzRDNdZaaSctkQxnrn0ALZ
e72vCEQwdDn7waiUtkv0eoSgTR9m0jWVIpEbxfM=
X-Google-Smtp-Source: ABdhPJxYWwYpxQKi6CmkxU3OCpPDWPxKQ6/xP56zRgKN8+judoHVeGrkxiPWbTtByaYROB0BAyLWIyoLKQlBGsHM6HM=
X-Received: by 2002:a05:6102:5090:b0:34b:c270:436e with SMTP id
bl16-20020a056102509000b0034bc270436emr4174718vsb.61.1654609294534; Tue, 07
Jun 2022 06:41:34 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6102:3e8e:0:0:0:0 with HTTP; Tue, 7 Jun 2022 06:41:33
-0700 (PDT)
Reply-To: nn9122250@gmail.com
From: "Mr.K.Mashal"
Date: Tue, 7 Jun 2022 14:41:33 +0100
Message-ID:
Subject: Read this Letter and Reply very important!
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 14.0
X-Spam_score_int: 140
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Sir I have a Lucrative Investment business proposal/Next
of Kin opportunity if interested kindly contact me for more details:( dalh52179@gmail.com
) Regards Mr.Khader Mashal ( dalh52179@gmail.com )
Content analysis details: (14.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[okorookoro437[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.217.48 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[okorookoro437[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[nn9122250[at]gmail.com]
2.5 HK_SCAM_N2 BODY: No description available.
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 HK_SCAM No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Read this Letter and Reply very important!
Dear Sir
I have a Lucrative Investment business proposal/Next of Kin
opportunity if interested kindly contact me for more details:(
dalh52179@gmail.com )
Regards
Mr.Khader Mashal
( dalh52179@gmail.com )
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments