Nigerian Gmail spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 16 Aug 2022 07:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oNwbl-0000dz-De

for dave@doctor.nl2k.ab.ca;

Tue, 16 Aug 2022 07:27:49 -0600

Resent-From: The Doctor

Resent-Date: Tue, 16 Aug 2022 07:27:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f179.google.com ([209.85.128.179]:46066)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oNwW6-000Pke-Mj

for doctor@doctor.nl2k.ab.ca;

Tue, 16 Aug 2022 07:22:02 -0600

Received: by mail-yw1-f179.google.com with SMTP id 00721157ae682-3246910dac3so149934577b3.12

for ; Tue, 16 Aug 2022 06:21:41 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc;

bh=XJcCtdzHlHc6RVHmnid6Iplysw0jrvS/xcLsOeW1J6o=;

b=kq7bjDTRPAV1YCSmK4zVotYwBJSN36XtBWRA4w1mV6xA2TB3Qw54ZAlw1NkMBRnXa3

oGdpQzHQArYjWFTv85+GTxNrHT+Z7W79HBV6VmBdzyQE6DCRrJ330LUBA3GesZ5gT0PS

wpikDW0nxIIqudn7I4xVUpNzEwWK6s1NmfzwkLKzOq2+RJAbxRC+fp0ajZAU1HYGcw2l

xVkEaSBNHAlWKTHLaHs0Q3xyET8FsEfbWFGs/afhwiVT/vqYrhQHoM00XppuO+no94+B

f/jjC2NEoLW1kCxmzhMWOzLpMhVXR7HAwOsylHiJbHfxPbip40SdZVzNJo+4IibX6fzy

JUEA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc;

bh=XJcCtdzHlHc6RVHmnid6Iplysw0jrvS/xcLsOeW1J6o=;

b=PrtYtm2LSq9+Mjko93uWe9QbOSuUhyfQiv2rejlAS8AceUePlcWGTxpp06SaAxWEYD

sXByDDXpWLb6gW1COSMQJBA++Ebe8NgOjHlIcnsMxjTQ5ApCmrPbsBpu6x0PASXN1xBz

5Bpav6daAk63HQaUX+1dWenvwJQbqks6xR29g6oW9TSpbcHxMUapYVg7nOIlUYIqmpTp

G+gTWrAb1uMGnEosbSg3wEGbtx7oXnLPqDCvy/q7TbTde8gDYD4P0ZBf4I0YszErdJIr

gcvdKRjc9sSI/9X55vbpLoa3IWnFPiZS6R5CTEnz1E+eMUO6uUuQxmhtoxbCJUPHmZfP

Ia1w==

X-Gm-Message-State: ACgBeo1JFRxa+/jS5JE7D18FaCrcq1a+tZ7JqAgZhfHV2Gx2Ho8qlBoL

P+O/A9iYBp8Iofnwz29qRIvM4JSjlrFq4c4gSjo=

X-Google-Smtp-Source: AA6agR5X6fViq9W7CcqyvwV/iu8YTq+iZ9eiZXW/w3hdT01aSCwxJFbtYQERgfTaafxeygbpFy7JdI1EFuwc2hGut+I=

X-Received: by 2002:a0d:e28c:0:b0:334:2a33:b923 with SMTP id

l134-20020a0de28c000000b003342a33b923mr1016304ywe.177.1660656095172; Tue, 16

Aug 2022 06:21:35 -0700 (PDT)

MIME-Version: 1.0

From: "Dr. Umar Bello"

Date: Tue, 16 Aug 2022 06:21:22 -0700

Message-ID:

Subject: GREETINGS:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000a59cba05e65ba04f"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 11.5

X-Spam_score_int: 115

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: GREETINGS: I am contacting you on a business deal of $19.5

Million US Dollars, ready for transfer into your account if we make this

claim, we will share it 60%/40%.100% risk free and it will be legally backed

up with government approved If you are interested reply for more details.





Content analysis details: (11.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.179 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[bellalogan584[at]gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[bellalogan584[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

3.6 NA_DOLLARS BODY: Talks about a million North American dollars

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_HK_NAME_FM_DR No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

3.1 RISK_FREE No risk!

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} GREETINGS:



--000000000000a59cba05e65ba04f

Content-Type: text/plain; charset="UTF-8"



GREETINGS:



I am contacting you on a business deal of $19.5 Million US Dollars,

ready for transfer into your account



if we make this claim, we will share it 60%/40%.100% risk free and it

will be legally backed up with government approved If you are

interested reply for more details.



Kindly reply for more details Waiting for your reply Make Sure You

Write To My Via E-mail Address...(umarbellod46@gmail.com)



Best regards

Dr.Umar Bello,



--000000000000a59cba05e65ba04f

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



GREETINGS:
=C2=A0 =C2=A0
=C2=A0 I am contacting you=

on a business deal of $19.5 Million US Dollars,
ready for transfer into=

your account

if we make this claim, we will share it 60%/40%.100% r=

isk free and it
will be legally backed up with government approved If yo=

u are
interested reply for more details.

Kindly reply =C2=A0for m=

ore details Waiting for your reply =C2=A0Make Sure You
Write To My Via E=

-mail Address...(umarbellod46@gma=

il.com)

Best regards
Dr.Umar Bello,




--000000000000a59cba05e65ba04f--

SEO spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 16 Aug 2022 06:42:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oNvsi-0006su-PM

for dave@doctor.nl2k.ab.ca;

Tue, 16 Aug 2022 06:41:16 -0600

Resent-From: The Doctor

Resent-Date: Tue, 16 Aug 2022 06:41:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f176.google.com ([209.85.160.176]:39697)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oNqTJ-000GHj-U0

for sales@nk.ca;

Tue, 16 Aug 2022 00:54:47 -0600

Received: by mail-qt1-f176.google.com with SMTP id s11so7487666qtx.6

for ; Mon, 15 Aug 2022 23:54:21 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc;

bh=bJtksrI6/S9hYbDAOy7j/DYyJRxWOrOohUhQlez0YTE=;

b=Z6EekeacN2gOBVsc9X7YP/memsDNxk10nVFDc9sFO1Yg6CcS5//F/1eV/b/5+AQN5K

PYSRxM5nRzpCM5y5pH9r9pK7hVu2kbXWf5DMAvfzjN7XPjB9C1Q4OrxqLp1XIpXq+PxB

j033N2QRI/D4Kfa3kSp/LpKT3piTjjqukpWHOzj4jd8Cplt1mRzJOQLjfBSZMakEg0bJ

pMCRRMJ3P45fozq8EAz59zt0wltNZGHii/eC13cNq8+E52eNfsoGwRd0K8ANvJhB/tmV

THZhwAcMDrEHROJHdUbYBFDMPGuR8t/AOKi7VakQmUMJe8hb9hIF0COiyeMQIzpgkQxh

8I5Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:sender:mime-version

:x-gm-message-state:from:to:cc;

bh=bJtksrI6/S9hYbDAOy7j/DYyJRxWOrOohUhQlez0YTE=;

b=kZq04ESqSqKsDiEX/DBF991uPp//tZd/DmAwiS77jwjAVPLpwVjmikyHTnTF1FLVOJ

NPrbxxjM+MT1OgvKev1L/ArGrgO/6e92IFQZoyev6owycnVhgRA0iyilVpXxeCV5PAdx

9Ux4cxljNMHv5Nqw1ENE5BQ2pTFVjQSBuR+U0nbxLzKpQTFLVuIOuWj0PXqKEuR2M3K9

J4KYMO0EvfBy1RCGoZCRVZ3I2uUx2ifnTl+Z3dNXpbdm9RRbU/B50Ln71XDeBMzMOrIL

KiVA2kAjhX6geQgG+SN2YL7xoCEtfzP30SvpthiKuSu/U2Y1EbjWrK+js8Lpg0wunrcs

4wrA==

X-Gm-Message-State: ACgBeo0tsxY36lDoIgT/SFMdSRHfmcQzuy2AOux5vycY3ZPgjgtUFFVB

MsP0c9N+/0MyAll9aIzgdA65f6jHnztA42ClUSSecDUZnXI=

X-Google-Smtp-Source: AA6agR66bi4M4RUwQBIj6+YQWztltyvAAFrdNFU3XQAvRtRedGTGdlJepIuMNHMFPj7cdej0bQFQC0MetVQyFf44Sfc=

X-Received: by 2002:a05:622a:34a:b0:343:6a5f:2f0 with SMTP id

r10-20020a05622a034a00b003436a5f02f0mr17499929qtw.238.1660632855511; Mon, 15

Aug 2022 23:54:15 -0700 (PDT)

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Mon, 15 Aug 2022 23:54:15 -0700

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Mon, 15 Aug 2022 23:54:13 -0700

MIME-Version: 1.0

Sender: Joseph Jeremy

From: Joseph Jeremy

Date: Mon, 15 Aug 2022 23:54:15 -0700

X-Google-Sender-Auth: J-vLFTKNgajRb-Cdzjt0lgMt2Mk

Message-ID:

Subject: Incredible Online Presence : nk.ca

To: Sales

Content-Type: multipart/alternative; boundary="0000000000007484ba05e656372c"



--0000000000007484ba05e656372c

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello nk Team,



It=E2=80=99s a pleasure to be in touch with you.



Without a shadow of doubt you always want your website on top to attract

maximum business and we are second to none when it comes to delivering you

the best result. Given a chance we can share our ideas and implement new

approaches to achieve the desired goal.





There are some major factors which must be taken into consideration while

moving into online competition. Please find below some of the major points:





- Technically sound websites are always prioritized by Google.

- Proper selection and placement of keywords are important.

- More engagement on Social Media sites.

- Unique Contents makes a website noticeable.

- Understand Competitors strategy before implementing any change.



There=E2=80=99s been a lot to discuss for better results on your site as

traditional methods cause negative influence. Our Team can show you the

right direction and guidelines to overcome the flaws. Given consent I would

love to present a detailed analysis report on your website.





Should you need any further clarification, please do not hesitate to

contact us. Feel free to email us or provide us with your contact number

and the best time to call you. Once you revert we will get back to you from

our corporate ID.

















Joseph Jeremy



Digital Marketing Analyst



--------------------------------------------------



--0000000000007484ba05e656372c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




e-height:normal">Hello=

nk=C2=A0Team,=C2=A0





It=E2=80=99s a pleasure to be in touch with you.





Without a shadow of doubt you always want your website on top to attract

maximum business and we are second to none when it comes to delivering you =

the

best result. Given a chance we can share our ideas and implement new approa=

ches

to achieve the desired goal.





=




There are some major factors which must be taken into consideration while

moving into online competition. Please find below some of the major points:=

=C2=A0




  • >=C2=A0Technically sound websites are always prioritized by Google.    <=

    /li>
  • =C2=A0Proper s=

    election and placement of keywords are important.

  • =3D"verdana, sans-serif" color=3D"#000000">=C2=A0More engagement on Social =

    Media sites.

  • 0000">=C2=A0Unique Contents makes a website noticeable.

  • t face=3D"verdana, sans-serif" color=3D"#000000">=C2=A0Understand Competito=

    rs strategy before implementing any change.


Normal" style=3D"margin-bottom:0.0001pt;line-height:normal">
erdana, sans-serif" color=3D"#000000">

There=E2=80=99s been a lot to discuss for better results on your site=C2=A0=

as

traditional methods cause negative influence.=C2=A0Our Team can show you th=

e

right direction and guidelines to overcome the flaws. Given consent=C2=A0I

would love to present a detailed analysis report on your website.
an>





=




Should you need any further clarification, please do not hesitate to contac=

t

us. Feel free to email us or provide us with your contact number and the be=

st

time to call you. Once you revert we will get back to you from our corporat=

e

ID.





=

=C2=A0
ont>





=






=






=

=C2=A0
ont>





=

=C2=A0
ont>






or=3D"#000000">Joseph Jeremy


ace=3D"verdana, sans-serif" color=3D"#000000">Digital

Marketing Analyst


a, sans-serif">---------------------------------=

-----------------





--0000000000007484ba05e656372c--

Nigerian Gmail spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 15 Aug 2022 23:16:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oNovI-000OCi-FQ

for dave@doctor.nl2k.ab.ca;

Mon, 15 Aug 2022 23:15:28 -0600

Resent-From: The Doctor

Resent-Date: Mon, 15 Aug 2022 23:15:28 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wr1-f66.google.com ([209.85.221.66]:40798)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oNmrS-0009dJ-CI

for doctor@nl2k.ab.ca;

Mon, 15 Aug 2022 21:03:27 -0600

Received: by mail-wr1-f66.google.com with SMTP id bu15so2537075wrb.7

for ; Mon, 15 Aug 2022 20:03:02 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;

bh=+gETPVq1/31XSt8TCJEtNNAvfeaHtQl6QlHGr7nBtW8=;

b=NuhiXIOLCnSnzXATmxt6ZyCi3jzdcAOxePnsVnfa8Cw70yB1vD+HH6rqU2sCGvGN6V

RU68QPGKaDGGomkJzQK2LvGCRSYzKTaw81v6cVaSNizsPt5CSXffWLZm4/F1otbt0Ze0

118EmlR0myVyqoqafzwLWD1/NG9ayxltnQtP1Ff9QEDMxEXg5xsnBeYsZxj38wYJcVtT

m7Tw1qvz4wc55Sx2u0v+NwfWZp6TSKFY0f5KrGqpNUyNVuNAtgoIC2ssAZT7GSVTpIQY

AlCGa6Rud/KV8OVj8QD/ablFR1Za5C3ixhld/wXI1HTRRwgeGY+NSbwCT/IWIWEfer7o

fvsg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc;

bh=+gETPVq1/31XSt8TCJEtNNAvfeaHtQl6QlHGr7nBtW8=;

b=eJKJ27aaT0IKFnVraxuNmpYL/AvvY6gVzT0idLO/wgXHyqwPErLHFEEtYIBzuQ4RTS

cmFZWxtyqGnHmVwR4B26a/6yZ1RI9PAEe8+sD+uHoIVbMr0YpStpKZE1y4r9nxfy6OmM

skzGPFs8YHtFZq25swyKc5YAKQzv3OBg7TC7rABQZhJ/LLCAY02AdC0RWKbYHUo7BAJE

rkRyyUxE2OmAdDZTQqcIAkpdtoC5YzSuU7liAZQ0/in+2AzG6xto9/NytTTzHKtgF0nZ

Q0knovfUvh8vUhjeZhgzUFP3P+DG9u0/4jXfLUsvUxqmZZ361XIcXAvpr6tjjmxUWIHe

Bg2g==

X-Gm-Message-State: ACgBeo2101MQZkhC1K4UvEp5Duy4yj9z6RWq8bx1mRcN7WgUGILasg80

elF9RIyFbsJsDcQ+xWTAKXWnvBoQXApBmkq4jmw=

X-Google-Smtp-Source: AA6agR4rOwwEWXXKIugeX1O1yWT/OVp9YQ8UeNWknsUYb8CRcLNnMwS8WBxw2ibrEB9YtZnjVa6zxjGZEpZLLTvCtbk=

X-Received: by 2002:a5d:60d0:0:b0:220:4e23:9934 with SMTP id

x16-20020a5d60d0000000b002204e239934mr10127231wrt.474.1660618975234; Mon, 15

Aug 2022 20:02:55 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:6000:1846:0:0:0:0 with HTTP; Mon, 15 Aug 2022 20:02:54

-0700 (PDT)

Reply-To: fotisangelos3@gmail.com

From: "Fotis Angelos (GCP.)"

Date: Tue, 16 Aug 2022 04:02:54 +0100

Message-ID:

Subject: VERY URGENT.

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@nl2k.ab.ca

X-Spam_score: 23.2

X-Spam_score_int: 232

X-Spam_bar: +++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good day to you. I am Mr. Fotis Angelos and a personal Accountant

Director of National bank of Greece. It is with a good spirit of heart that

I opened up this great opportunity to you. A deceased client of mine that

s [...]



Content analysis details: (23.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.66 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[jeangomez385[at]gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[jeangomez385[at]gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[fotisangelos3[at]gmail.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.0 SPF_PASS SPF: sender matches SPF record

2.5 MILLION_USD BODY: Talks about millions of dollars

2.5 HK_SCAM_N2 BODY: No description available.

0.1 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 HK_SCAM No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 XFER_LOTSA_MONEY Transfer a lot of money

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal

information

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

Subject: {SPAM?} VERY URGENT.



Good day to you.



I am Mr. Fotis Angelos and a personal Accountant Director of National

bank of Greece. It is with a good spirit of heart that I opened up

this great opportunity to you. A deceased client of mine that shares

almost the same name as yours died as a result of heart-related

condition on march 2015, He died due to the death of the members of

his family in the plane crash disaster on the 8th of March 2014 in

Malaysia where they all lost their lives. You can read the website

below.



https://www.bbc.com/news/business-59517821



There is a draft account opened in my bank in 1999 by the deceased. He

was a CEO/a textile company owner, business man, a miner at Halkidiki

Peninsula mining company here in Greece. He was a geologist and

consultant to several other mining conglomerates operating in Greece,

China, Taiwan, Japan, Indonesia, Pakistan, Vietnam all in Asia.

Before he passed away on 12th march 2015 he had nobody as the next of

kin to his Bank account.



The amount in this account is currently $19,500,000 (Nineteen Million

Five Hundred Thousand United States Dollars) I want to present you as

his beneficiary/next of kin, I will use my position and influence in

our bank to make them release this money to you for us to share.



Let me know if you are interested in working with me by sending your

full name, Mobile telephone and fax number. As soon as I hear from

you, I will direct you on what to do next.



Best Regards,

Mr. Fotis Angelos.