Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 16 Jun 2022 14:50:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1o1wQp-000Kyu-J7
for dave@doctor.nl2k.ab.ca;
Thu, 16 Jun 2022 14:49:35 -0600
Resent-From: The Doctor
Resent-Date: Thu, 16 Jun 2022 14:49:35 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f48.google.com ([209.85.160.48]:42611)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1o1sEq-0007Ol-Kp
for doctor@doctor.nl2k.ab.ca;
Thu, 16 Jun 2022 10:21:01 -0600
Received: by mail-oa1-f48.google.com with SMTP id 586e51a60fabf-f2a4c51c45so2464080fac.9
for; Thu, 16 Jun 2022 09:20:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=caIolrb2oys2sKIBzCG26i0VNTXZk7i3i6hCpjaG090=;
b=lu7Dm2yorKlw9FnzDRPLHq/aL0LcRTmbhuS0Z3ip+woKJ4ChL7ygxMwX98nnevylmc
Exrd2c/diK3a6xgrhOoc+nqdnHC6KbXpEHyNMxmDMYWkApbhePBl5hpEDzrJwPZ6/AP7
nfbgKamV+9DImt6Hg9fDdYcJvXhzv9cmDQksEDXUaa1QSDFn94zDfPiwwmYUpFjTutTM
VK8aYSMv9ERznpVN8Q8Eq1Moc5LpB/BP0rOFNP2u5MFMoZjomlDyN9X/i9oS4q2ivu7s
GF4IAYRdrJI8bElBiEKlLJpzjxrsgaIqB9mo5GINOpJ/zaiafinRtIPWxqks2M4V6zch
PKGw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=caIolrb2oys2sKIBzCG26i0VNTXZk7i3i6hCpjaG090=;
b=Eh6xudH700FKpzTrdxVkPiwVnJB3bgIzCAnkYpzuT1rIEfEKE4XpsPHIefatGHQDTI
WyXp9JnmXIzVBKMCyx39U7AjjnzkL2ljLM+Cg44uaZYrEyUcAK1Ta0mqNVMR1U1J9SX7
xZ6T+L+rTHkvN3kmbg1qK+6L6OP40Awq4q1J/Of3fBWgOuj9Z/7tDJgdLaP9sJ7iPMef
Q1lZErM5iOgkcEcS6tBGVMgv0TvS0fzBwS4FBGM+qS5Vhy+ROSZnVuxUEHIVbwumIlOw
tPXP74+qg75uGT27gR5GllBliil2/vN/xTQwXpcb8Y7cUzIij4VCO0LWT/AsxirtPb0i
7AAw==
X-Gm-Message-State: AJIora/D4yMVZpXiSmLoJ0wVTNZI9EJPSsjwSAu9Xu2RMfaIBoMlYIFT
t7TFuttOA8Ryb/WZvTrBToUHCg4CeatJxdEtZmM=
X-Google-Smtp-Source: AGRyM1u44lWujMDEpx+rV+iqll3ReeHs/ghQKvv5X8T+2AjiZX0JimmdbTljnSQHRdGfL3QwDstbDsM+noTEgK5eoq4=
X-Received: by 2002:a05:6870:891f:b0:f3:3811:3e30 with SMTP id
i31-20020a056870891f00b000f338113e30mr9050993oao.269.1655396430416; Thu, 16
Jun 2022 09:20:30 -0700 (PDT)
MIME-Version: 1.0
Reply-To: anselemadams3@gmail.com
From: Anselem Adams
Date: Thu, 16 Jun 2022 09:20:21 -0700
Message-ID:
Subject: PLEASE REPLY URGENTLY FOR MORE DETAILS.
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000003290a705e19304c4"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 16.5
X-Spam_score_int: 165
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, Greetings. How are you doing today i hope fine?
Content analysis details: (16.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.160.48 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[westernunionburkinafasowestafr[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[anselemadams3[at]gmail.com]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.0 TVD_PH_BODY_META No description available.
0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.5 XFER_LOTSA_MONEY Transfer a lot of money
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} PLEASE REPLY URGENTLY FOR MORE DETAILS.
--0000000000003290a705e19304c4
Content-Type: text/plain; charset="UTF-8"
Dear Friend,
Greetings.
How are you doing today i hope fine?
I came across your e-mail contact prior a private search while in need of
your assistance. My name is Anselem Adams I work with the department of
Audit and accounting manager here in the Bank of Africa, There is this fund
that was keep in my custody years ago and I need your assistance for the
transferring of this fund to your bank account for both of us benefit for
life time investment and the amount is US$($11.3) million US dollars"
I have every inquiry details to make the bank believe you and release the
fund to your bank account in within 7 banking working days with your full
co-operation with me after success Note 40% for you while 60% for me after
success of the transfer of the funds to your bank account.
Below information is what I need from you so we can be reaching each other,
1) Full name ...
2) Private telephone number....,
Receiver Country..,
Occupation..,
Thanks
Mr. Anselem Adams.
--0000000000003290a705e19304c4
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
ns-serif">Dear Friend,
Greetings.
How are you doing today i h=
ope fine?
I came across your e-mail contact prior a private search w=
hile in need of your assistance. My name is Anselem Adams I work with the d=
epartment of Audit and accounting manager here in the Bank of Africa, There=
is this fund that was keep in my custody years ago and I need your assista=
nce for the transferring of this fund to your bank account for both of us b=
enefit for life time investment and the amount is US$($11.3) million US dol=
lars"
I have every inquiry details to make the bank believe you=
and release the fund to your bank account in within 7 banking working days=
with your full co-operation with me after success Note 40% for you while 6=
0% for me after success of the transfer of the funds to your bank account.<=
br>
Below information is what I need from you so we can be reaching each=
other,
1) Full name ...
2) Private telephone number....,
Receiver=
Country..,
Occupation..,
Thanks
Mr. Anselem Adams.
v>
--0000000000003290a705e19304c4--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 16 Jun 2022 14:50:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1o1wQp-000Kyu-J7
for dave@doctor.nl2k.ab.ca;
Thu, 16 Jun 2022 14:49:35 -0600
Resent-From: The Doctor
Resent-Date: Thu, 16 Jun 2022 14:49:35 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f48.google.com ([209.85.160.48]:42611)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1o1sEq-0007Ol-Kp
for doctor@doctor.nl2k.ab.ca;
Thu, 16 Jun 2022 10:21:01 -0600
Received: by mail-oa1-f48.google.com with SMTP id 586e51a60fabf-f2a4c51c45so2464080fac.9
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=caIolrb2oys2sKIBzCG26i0VNTXZk7i3i6hCpjaG090=;
b=lu7Dm2yorKlw9FnzDRPLHq/aL0LcRTmbhuS0Z3ip+woKJ4ChL7ygxMwX98nnevylmc
Exrd2c/diK3a6xgrhOoc+nqdnHC6KbXpEHyNMxmDMYWkApbhePBl5hpEDzrJwPZ6/AP7
nfbgKamV+9DImt6Hg9fDdYcJvXhzv9cmDQksEDXUaa1QSDFn94zDfPiwwmYUpFjTutTM
VK8aYSMv9ERznpVN8Q8Eq1Moc5LpB/BP0rOFNP2u5MFMoZjomlDyN9X/i9oS4q2ivu7s
GF4IAYRdrJI8bElBiEKlLJpzjxrsgaIqB9mo5GINOpJ/zaiafinRtIPWxqks2M4V6zch
PKGw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=caIolrb2oys2sKIBzCG26i0VNTXZk7i3i6hCpjaG090=;
b=Eh6xudH700FKpzTrdxVkPiwVnJB3bgIzCAnkYpzuT1rIEfEKE4XpsPHIefatGHQDTI
WyXp9JnmXIzVBKMCyx39U7AjjnzkL2ljLM+Cg44uaZYrEyUcAK1Ta0mqNVMR1U1J9SX7
xZ6T+L+rTHkvN3kmbg1qK+6L6OP40Awq4q1J/Of3fBWgOuj9Z/7tDJgdLaP9sJ7iPMef
Q1lZErM5iOgkcEcS6tBGVMgv0TvS0fzBwS4FBGM+qS5Vhy+ROSZnVuxUEHIVbwumIlOw
tPXP74+qg75uGT27gR5GllBliil2/vN/xTQwXpcb8Y7cUzIij4VCO0LWT/AsxirtPb0i
7AAw==
X-Gm-Message-State: AJIora/D4yMVZpXiSmLoJ0wVTNZI9EJPSsjwSAu9Xu2RMfaIBoMlYIFT
t7TFuttOA8Ryb/WZvTrBToUHCg4CeatJxdEtZmM=
X-Google-Smtp-Source: AGRyM1u44lWujMDEpx+rV+iqll3ReeHs/ghQKvv5X8T+2AjiZX0JimmdbTljnSQHRdGfL3QwDstbDsM+noTEgK5eoq4=
X-Received: by 2002:a05:6870:891f:b0:f3:3811:3e30 with SMTP id
i31-20020a056870891f00b000f338113e30mr9050993oao.269.1655396430416; Thu, 16
Jun 2022 09:20:30 -0700 (PDT)
MIME-Version: 1.0
Reply-To: anselemadams3@gmail.com
From: Anselem Adams
Date: Thu, 16 Jun 2022 09:20:21 -0700
Message-ID:
Subject: PLEASE REPLY URGENTLY FOR MORE DETAILS.
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000003290a705e19304c4"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 16.5
X-Spam_score_int: 165
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, Greetings. How are you doing today i hope fine?
Content analysis details: (16.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.160.48 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[westernunionburkinafasowestafr[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[anselemadams3[at]gmail.com]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.0 TVD_PH_BODY_META No description available.
0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.5 XFER_LOTSA_MONEY Transfer a lot of money
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} PLEASE REPLY URGENTLY FOR MORE DETAILS.
--0000000000003290a705e19304c4
Content-Type: text/plain; charset="UTF-8"
Dear Friend,
Greetings.
How are you doing today i hope fine?
I came across your e-mail contact prior a private search while in need of
your assistance. My name is Anselem Adams I work with the department of
Audit and accounting manager here in the Bank of Africa, There is this fund
that was keep in my custody years ago and I need your assistance for the
transferring of this fund to your bank account for both of us benefit for
life time investment and the amount is US$($11.3) million US dollars"
I have every inquiry details to make the bank believe you and release the
fund to your bank account in within 7 banking working days with your full
co-operation with me after success Note 40% for you while 60% for me after
success of the transfer of the funds to your bank account.
Below information is what I need from you so we can be reaching each other,
1) Full name ...
2) Private telephone number....,
Receiver Country..,
Occupation..,
Thanks
Mr. Anselem Adams.
--0000000000003290a705e19304c4
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
ns-serif">Dear Friend,
Greetings.
How are you doing today i h=
ope fine?
I came across your e-mail contact prior a private search w=
hile in need of your assistance. My name is Anselem Adams I work with the d=
epartment of Audit and accounting manager here in the Bank of Africa, There=
is this fund that was keep in my custody years ago and I need your assista=
nce for the transferring of this fund to your bank account for both of us b=
enefit for life time investment and the amount is US$($11.3) million US dol=
lars"
I have every inquiry details to make the bank believe you=
and release the fund to your bank account in within 7 banking working days=
with your full co-operation with me after success Note 40% for you while 6=
0% for me after success of the transfer of the funds to your bank account.<=
br>
Below information is what I need from you so we can be reaching each=
other,
1) Full name ...
2) Private telephone number....,
Receiver=
Country..,
Occupation..,
Thanks
Mr. Anselem Adams.
v>
--0000000000003290a705e19304c4--