Nigerian spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 29 Jun 2023 08:06:15 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from)
id 1qEsEN-000N83-2J
for dave@doctor.nl2k.ab.ca;
Thu, 29 Jun 2023 08:02:43 -0600
Resent-From: The Doctor
Resent-Date: Thu, 29 Jun 2023 08:02:43 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qk1-f169.google.com ([209.85.222.169]:52732)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1qEs1c-0005Sm-1a
for doctor@doctor.nl2k.ab.ca;
Thu, 29 Jun 2023 07:49:35 -0600
Received: by mail-qk1-f169.google.com with SMTP id af79cd13be357-7654e1d83e8so61654785a.1
for; Thu, 29 Jun 2023 06:47:33 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1688046447; x=1690638447;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=kfE5BUtzEHGji/31Teh4U2ClgJ9mcAf+t+K9R51dSFU=;
b=W6o1dNePw2WUmPqU1hVi5tO0XPvyiHjhzTvm375L7P+aHidfo5Ilpy2+hix25MLwrq
LQprpf5qp7ZHV/CSRRTN+aDeFCxu5YSW42J7TIRmEN+5Xx/y3ggFp9GqQcJCSEfZdV9i
xnAZ0RD6KenJcMsldu578J4t1FhR63yEqbNK9+K2Delh/BbymkbD/WyA4RLeKClqx8yp
SdZsi7nq0nacWTzi4IPoTt/g9/klQjwuPRD/pAllUOj+ye1SriSQ9Q1DXVh302mUi44a
1iMwQGGJMEYTufr0PL7AYkt2jsmCUvIar3harGlv7UZXCy1H7LSbi9IXwImKixB5ozW+
ywjA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1688046447; x=1690638447;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=kfE5BUtzEHGji/31Teh4U2ClgJ9mcAf+t+K9R51dSFU=;
b=JoE/UP5BjKYh/tOAtMR/3dUvignRgc67FVEHrJpF1vOPrdwbf2iHzV2oVOcRco1xX9
GTKTfG72zuPsEDKkpQAFRgiSmrzK0JMsBUAGCHlOa3BA5FxcBFLXwqg4rL7NqtDEajlb
daiDuULQhPNAMCbKgAvRcEOF0NM/O0qwmFwPi1y1Pr+IE6SXiERCxP3MZUqA6CSXEVzU
06oDRQX9cTpKoffA0nUHbclwvCg9p8Sqyv0iAyIoBfQbIyt9c8BbWLmsf32JzLkEeoiT
KccPBxg7O5MiY5jVZXwX0OwWaO5Foaik3P78TmKqtVuvstFbnvxRLrfA0qN+b29nSFxX
S9Aw==
X-Gm-Message-State: AC+VfDwQVEXsJ1tADwvs7g7f/rdddbnwE0SJ65Eh8hXZobCttgYsJoHP
f1LnuskKqpLxS5Y8z0IQTgYQlSL4zQZdcPHQ3Nc=
X-Google-Smtp-Source: ACHHUZ6Ph7jfwUz2+WTgB129Tc1rgmrjkyv1Ng0dS4j+ShLkea9XrrBjhNwPguy0JZkhyH2Jrw9thZNy1r+o9qt6qKs=
X-Received: by 2002:ad4:5761:0:b0:62f:ff00:f8fa with SMTP id
r1-20020ad45761000000b0062fff00f8famr53055902qvx.63.1688046446985; Thu, 29
Jun 2023 06:47:26 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a0c:b383:0:b0:635:f736:329e with HTTP; Thu, 29 Jun 2023
06:47:26 -0700 (PDT)
Reply-To: issaisman48@aol.com
From: Issa Isman
Date: Thu, 29 Jun 2023 06:47:26 -0700
Message-ID:
Subject: Your Compasention.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 16.9
X-Spam_score_int: 169
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, Compliment of the day' Fine I hope for you and
your family, I am very happy now to inform you about my success in getting
the fund out of the bank with the help of a French business woman that catere
[...]
Content analysis details: (16.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.222.169 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[issaisman48(at)aol.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[bfinfoinf(at)gmail.com]
1.5 HK_SCAM_N8 BODY: No description available.
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.169 listed in wl.mailspike.net]
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.0 HK_SCAM No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.5 MONEY_ATM_CARD Lots of money on an ATM card
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Your Compasention.
X-Antivirus: AVG (VPS 230629-2, 6/29/2023), Inbound message
X-Antivirus-Status: Clean
Dear Friend,
Compliment of the day' Fine I hope for you and your family, I am
very happy now to inform you about my success in getting the fund out
of the bank with the help of a French business woman that catered for
other logistics. However, I left the sum of US$500,000 (Five Hundred
Thousand Dollars) in an ATM Card. for your compensation as your past
effort trying to assist me with the claim.
I would have sent the ATM card to you by myself, but I lack the time
to do that now because I have to urgently meet up with my business
colleagues in Angola. I will be heading to the airport as soon as I
send you this email because I will be traveling out of my country to
Angola where I shall continue with petroleum business engagements.
You have to contact ((Rev Fr. Stephen George)) in my country with
his address below to enable him to dispatch the ATM VISA CARD I left
with him on your behalf.
E-mail: rev.gparish@outlook.com
Name: REV FR. STEPHEN GEORGE
I will no longer be able to email you again for the moment as I am too
busy investing my own share.
Sincerely Yours,
Mr. Issa Isman.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 29 Jun 2023 08:06:15 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1qEsEN-000N83-2J
for dave@doctor.nl2k.ab.ca;
Thu, 29 Jun 2023 08:02:43 -0600
Resent-From: The Doctor
Resent-Date: Thu, 29 Jun 2023 08:02:43 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qk1-f169.google.com ([209.85.222.169]:52732)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qEs1c-0005Sm-1a
for doctor@doctor.nl2k.ab.ca;
Thu, 29 Jun 2023 07:49:35 -0600
Received: by mail-qk1-f169.google.com with SMTP id af79cd13be357-7654e1d83e8so61654785a.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1688046447; x=1690638447;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=kfE5BUtzEHGji/31Teh4U2ClgJ9mcAf+t+K9R51dSFU=;
b=W6o1dNePw2WUmPqU1hVi5tO0XPvyiHjhzTvm375L7P+aHidfo5Ilpy2+hix25MLwrq
LQprpf5qp7ZHV/CSRRTN+aDeFCxu5YSW42J7TIRmEN+5Xx/y3ggFp9GqQcJCSEfZdV9i
xnAZ0RD6KenJcMsldu578J4t1FhR63yEqbNK9+K2Delh/BbymkbD/WyA4RLeKClqx8yp
SdZsi7nq0nacWTzi4IPoTt/g9/klQjwuPRD/pAllUOj+ye1SriSQ9Q1DXVh302mUi44a
1iMwQGGJMEYTufr0PL7AYkt2jsmCUvIar3harGlv7UZXCy1H7LSbi9IXwImKixB5ozW+
ywjA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1688046447; x=1690638447;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=kfE5BUtzEHGji/31Teh4U2ClgJ9mcAf+t+K9R51dSFU=;
b=JoE/UP5BjKYh/tOAtMR/3dUvignRgc67FVEHrJpF1vOPrdwbf2iHzV2oVOcRco1xX9
GTKTfG72zuPsEDKkpQAFRgiSmrzK0JMsBUAGCHlOa3BA5FxcBFLXwqg4rL7NqtDEajlb
daiDuULQhPNAMCbKgAvRcEOF0NM/O0qwmFwPi1y1Pr+IE6SXiERCxP3MZUqA6CSXEVzU
06oDRQX9cTpKoffA0nUHbclwvCg9p8Sqyv0iAyIoBfQbIyt9c8BbWLmsf32JzLkEeoiT
KccPBxg7O5MiY5jVZXwX0OwWaO5Foaik3P78TmKqtVuvstFbnvxRLrfA0qN+b29nSFxX
S9Aw==
X-Gm-Message-State: AC+VfDwQVEXsJ1tADwvs7g7f/rdddbnwE0SJ65Eh8hXZobCttgYsJoHP
f1LnuskKqpLxS5Y8z0IQTgYQlSL4zQZdcPHQ3Nc=
X-Google-Smtp-Source: ACHHUZ6Ph7jfwUz2+WTgB129Tc1rgmrjkyv1Ng0dS4j+ShLkea9XrrBjhNwPguy0JZkhyH2Jrw9thZNy1r+o9qt6qKs=
X-Received: by 2002:ad4:5761:0:b0:62f:ff00:f8fa with SMTP id
r1-20020ad45761000000b0062fff00f8famr53055902qvx.63.1688046446985; Thu, 29
Jun 2023 06:47:26 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a0c:b383:0:b0:635:f736:329e with HTTP; Thu, 29 Jun 2023
06:47:26 -0700 (PDT)
Reply-To: issaisman48@aol.com
From: Issa Isman
Date: Thu, 29 Jun 2023 06:47:26 -0700
Message-ID:
Subject: Your Compasention.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 16.9
X-Spam_score_int: 169
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, Compliment of the day' Fine I hope for you and
your family, I am very happy now to inform you about my success in getting
the fund out of the bank with the help of a French business woman that catere
[...]
Content analysis details: (16.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.222.169 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[issaisman48(at)aol.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[bfinfoinf(at)gmail.com]
1.5 HK_SCAM_N8 BODY: No description available.
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.169 listed in wl.mailspike.net]
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.0 HK_SCAM No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.5 MONEY_ATM_CARD Lots of money on an ATM card
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Your Compasention.
X-Antivirus: AVG (VPS 230629-2, 6/29/2023), Inbound message
X-Antivirus-Status: Clean
Dear Friend,
Compliment of the day' Fine I hope for you and your family, I am
very happy now to inform you about my success in getting the fund out
of the bank with the help of a French business woman that catered for
other logistics. However, I left the sum of US$500,000 (Five Hundred
Thousand Dollars) in an ATM Card. for your compensation as your past
effort trying to assist me with the claim.
I would have sent the ATM card to you by myself, but I lack the time
to do that now because I have to urgently meet up with my business
colleagues in Angola. I will be heading to the airport as soon as I
send you this email because I will be traveling out of my country to
Angola where I shall continue with petroleum business engagements.
You have to contact ((Rev Fr. Stephen George)) in my country with
his address below to enable him to dispatch the ATM VISA CARD I left
with him on your behalf.
E-mail: rev.gparish@outlook.com
Name: REV FR. STEPHEN GEORGE
I will no longer be able to email you again for the moment as I am too
busy investing my own share.
Sincerely Yours,
Mr. Issa Isman.