Nigerian spam from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 04 May 2022 15:03:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1nmM8G-0007G7-4P
for dave@doctor.nl2k.ab.ca;
Wed, 04 May 2022 15:02:00 -0600
Resent-From: The Doctor
Resent-Date: Wed, 4 May 2022 15:02:00 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f41.google.com ([209.85.208.41]:37753)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1nmJTL-000PJe-O5
for doctor@nl2k.ab.ca;
Wed, 04 May 2022 12:11:40 -0600
Received: by mail-ed1-f41.google.com with SMTP id k27so2612383edk.4
for; Wed, 04 May 2022 11:11:14 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=a8dmUFlyaxwTJ2Gc04dYWI65klCX0zWYrD9oNdcRIn4=;
b=L+1qMi4uqETgtYQ7kyqv0HXFsWFmbskMK/wHMTlI7AjJrb50no1SO7P6UMOXXULfIy
269J0j171yA3pYn61VmZIwT3ikyNwo4K0Sb4bMEYosLWsD4mudWDwsnUnFn54LHBic0d
MsVpMHDWxREg1B+JpW9fh09lbiC1XQFj8EsDoKFfeXNCL3E4GS67T9F2J+1JKwfSLfyV
apgONBg0FsJQ50llD9i7H7569GIxLIaW4+OshDysqb7FFo6d9KgovbEbEEVwhkIe4Aur
DS8rfereAE2XRd0hqVJBnWoonDiIhlFUrXFSiCwCLPQqfcyCz+p6ASenbHPfwXBZ1zNK
1NVg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=a8dmUFlyaxwTJ2Gc04dYWI65klCX0zWYrD9oNdcRIn4=;
b=TmCCcO6YRw3GgQOheBZga9S8GwBAvJmzyDBMnmxGh7c0m/zLCC85VSfG+H9k1J0lTZ
u6fWXNb5RMkvo5+5Imeo3Mmm0QAA3A+6x0Pz7m6ZsQIrofdDRyRqUoW67gXk3SutIkUX
C6dgjMnNMcV5NDE6uL8MzUUrt6OkvBo92rSIGEIJnDizVRM3YwYfcc3S1h/NTR0jlFAF
hnWBU+v/v/dv3uSi2xyZYc7lj84NZ5d0NzJN8M+UJdm5H7sMgJh8lARdJnAXjI+oA7oV
AuWxtnC/Ye7X84KtA4XFaEyMZDeQICn60HWM8fDooTGIg8hc7hcOVXhrort0UebVjI1r
rV+g==
X-Gm-Message-State: AOAM532GCvU+N+0suP74G/W3Vg2fRpK7/NqEQdpkTMy+JjoDP2X8SMyS
OuR8AtK4VuVXkcEWX5wiln+HbzCXYCRo15GRmrs=
X-Google-Smtp-Source: ABdhPJyWkd7uG9v+MVIL56h/T/La9lZdIGk4x6DoygMYxLqY2Atz5rR0kAjXPTf7RUTYhmXuMgj0F5QRGib1hC2VbRg=
X-Received: by 2002:a05:6402:1d51:b0:41f:cf6c:35a5 with SMTP id
dz17-20020a0564021d5100b0041fcf6c35a5mr24764060edb.25.1651687866292; Wed, 04
May 2022 11:11:06 -0700 (PDT)
MIME-Version: 1.0
Reply-To: drrhamabenson16@gmail.com
From: Dr Rhama Benson
Date: Wed, 4 May 2022 20:10:52 +0200
Message-ID:
Subject: Contact me back immediately.
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000008ce08d05de338c9d"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 14.2
X-Spam_score_int: 142
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: My Dear Friend. How are you and your family Today? I hope
all is well, and I am happy to share this transaction with you ,but you must
keep everything secret and very confidential. I have a very lucrative business
transaction which requires your utmost discretion. Please understand that
you and I myself, are to work as one team to inherit this fund, hence I am
your insider in th [...]
Content analysis details: (14.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.41 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[drrhamabenson16[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[nzubechi2010[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[nzubechi2010[at]gmail.com]
0.9 URG_BIZ BODY: Contains urgent matter
2.6 HK_SCAM_N13 BODY: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_DR No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
1.8 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of
money
1.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} Contact me back immediately.
--0000000000008ce08d05de338c9d
Content-Type: text/plain; charset="UTF-8"
My Dear Friend.
How are you and your family Today? I hope all is well, and I am happy to
share this transaction with you ,but you must keep everything secret and
very confidential.
I have a very lucrative business transaction which requires your utmost
discretion. Please understand that you and I myself, are to work as one
team to inherit this fund, hence I am your insider in the bank as the
transaction commences. I advise you to feel free with me for all is going
to be well with us.
Though, I know it would come to you at uttermost surprise because it is
virtually impossible to know who is trustworthy and who to believe. I am
Dr. Rhama Benson, A banker by profession. Please, I want to transfer the
sum of ($10.5 million) dollars into your bank account. This business is
100% risk free.
Your share will be 40% while 60% for me. Contact me for further advice.
Full details will be sent to you on the receipt of your urgent response by
forwarding the following details below.
1. Your Full Name................
2. Your Telephone No..........
3. Your Age................
4. Your Home Address........
5. Your Country............
Thanks for your anticipated cooperation.
Best regards.
Dr Rhama.
--0000000000008ce08d05de338c9d
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--0000000000008ce08d05de338c9d--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 04 May 2022 15:03:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1nmM8G-0007G7-4P
for dave@doctor.nl2k.ab.ca;
Wed, 04 May 2022 15:02:00 -0600
Resent-From: The Doctor
Resent-Date: Wed, 4 May 2022 15:02:00 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f41.google.com ([209.85.208.41]:37753)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1nmJTL-000PJe-O5
for doctor@nl2k.ab.ca;
Wed, 04 May 2022 12:11:40 -0600
Received: by mail-ed1-f41.google.com with SMTP id k27so2612383edk.4
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=a8dmUFlyaxwTJ2Gc04dYWI65klCX0zWYrD9oNdcRIn4=;
b=L+1qMi4uqETgtYQ7kyqv0HXFsWFmbskMK/wHMTlI7AjJrb50no1SO7P6UMOXXULfIy
269J0j171yA3pYn61VmZIwT3ikyNwo4K0Sb4bMEYosLWsD4mudWDwsnUnFn54LHBic0d
MsVpMHDWxREg1B+JpW9fh09lbiC1XQFj8EsDoKFfeXNCL3E4GS67T9F2J+1JKwfSLfyV
apgONBg0FsJQ50llD9i7H7569GIxLIaW4+OshDysqb7FFo6d9KgovbEbEEVwhkIe4Aur
DS8rfereAE2XRd0hqVJBnWoonDiIhlFUrXFSiCwCLPQqfcyCz+p6ASenbHPfwXBZ1zNK
1NVg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=a8dmUFlyaxwTJ2Gc04dYWI65klCX0zWYrD9oNdcRIn4=;
b=TmCCcO6YRw3GgQOheBZga9S8GwBAvJmzyDBMnmxGh7c0m/zLCC85VSfG+H9k1J0lTZ
u6fWXNb5RMkvo5+5Imeo3Mmm0QAA3A+6x0Pz7m6ZsQIrofdDRyRqUoW67gXk3SutIkUX
C6dgjMnNMcV5NDE6uL8MzUUrt6OkvBo92rSIGEIJnDizVRM3YwYfcc3S1h/NTR0jlFAF
hnWBU+v/v/dv3uSi2xyZYc7lj84NZ5d0NzJN8M+UJdm5H7sMgJh8lARdJnAXjI+oA7oV
AuWxtnC/Ye7X84KtA4XFaEyMZDeQICn60HWM8fDooTGIg8hc7hcOVXhrort0UebVjI1r
rV+g==
X-Gm-Message-State: AOAM532GCvU+N+0suP74G/W3Vg2fRpK7/NqEQdpkTMy+JjoDP2X8SMyS
OuR8AtK4VuVXkcEWX5wiln+HbzCXYCRo15GRmrs=
X-Google-Smtp-Source: ABdhPJyWkd7uG9v+MVIL56h/T/La9lZdIGk4x6DoygMYxLqY2Atz5rR0kAjXPTf7RUTYhmXuMgj0F5QRGib1hC2VbRg=
X-Received: by 2002:a05:6402:1d51:b0:41f:cf6c:35a5 with SMTP id
dz17-20020a0564021d5100b0041fcf6c35a5mr24764060edb.25.1651687866292; Wed, 04
May 2022 11:11:06 -0700 (PDT)
MIME-Version: 1.0
Reply-To: drrhamabenson16@gmail.com
From: Dr Rhama Benson
Date: Wed, 4 May 2022 20:10:52 +0200
Message-ID:
Subject: Contact me back immediately.
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000008ce08d05de338c9d"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 14.2
X-Spam_score_int: 142
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: My Dear Friend. How are you and your family Today? I hope
all is well, and I am happy to share this transaction with you ,but you must
keep everything secret and very confidential. I have a very lucrative business
transaction which requires your utmost discretion. Please understand that
you and I myself, are to work as one team to inherit this fund, hence I am
your insider in th [...]
Content analysis details: (14.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.41 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[drrhamabenson16[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[nzubechi2010[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[nzubechi2010[at]gmail.com]
0.9 URG_BIZ BODY: Contains urgent matter
2.6 HK_SCAM_N13 BODY: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_DR No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
1.8 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of
money
1.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} Contact me back immediately.
--0000000000008ce08d05de338c9d
Content-Type: text/plain; charset="UTF-8"
My Dear Friend.
How are you and your family Today? I hope all is well, and I am happy to
share this transaction with you ,but you must keep everything secret and
very confidential.
I have a very lucrative business transaction which requires your utmost
discretion. Please understand that you and I myself, are to work as one
team to inherit this fund, hence I am your insider in the bank as the
transaction commences. I advise you to feel free with me for all is going
to be well with us.
Though, I know it would come to you at uttermost surprise because it is
virtually impossible to know who is trustworthy and who to believe. I am
Dr. Rhama Benson, A banker by profession. Please, I want to transfer the
sum of ($10.5 million) dollars into your bank account. This business is
100% risk free.
Your share will be 40% while 60% for me. Contact me for further advice.
Full details will be sent to you on the receipt of your urgent response by
forwarding the following details below.
1. Your Full Name................
2. Your Telephone No..........
3. Your Age................
4. Your Home Address........
5. Your Country............
Thanks for your anticipated cooperation.
Best regards.
Dr Rhama.
--0000000000008ce08d05de338c9d
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
My Dear Friend.
How are you and your family Today? =
I hope all is well, and I am happy to share this transaction with you ,but =
you must keep everything secret and very confidential.
I have a very=
lucrative business transaction which requires your utmost discretion. Plea=
se understand that you and I myself, are to work as one team to inherit thi=
s fund, hence I am your insider in the bank as the transaction commences. I=
advise you to feel free with me for all is going to be well with us.
r>Though, I know it would come to you at uttermost surprise because it is v=
irtually impossible to know who is trustworthy and who to believe. I am Dr.=
Rhama Benson, A banker by profession. Please, I want to transfer the sum o=
f ($10.5 million) dollars into your bank account. This business is 100% ris=
k free.
Your share will be 40% while 60% for me. Contact me for furt=
her advice. Full details will be sent to you on the receipt of your urgent =
response by forwarding the following details below.
1. Your Full Nam=
e................
2. Your Telephone No..........
3. Your Age.........=
.......
4. Your Home Address........
5. Your Country............
<=
br>Thanks for your anticipated cooperation.
Best regards.
Dr Rhama.
r>
How are you and your family Today? =
I hope all is well, and I am happy to share this transaction with you ,but =
you must keep everything secret and very confidential.
I have a very=
lucrative business transaction which requires your utmost discretion. Plea=
se understand that you and I myself, are to work as one team to inherit thi=
s fund, hence I am your insider in the bank as the transaction commences. I=
advise you to feel free with me for all is going to be well with us.
r>Though, I know it would come to you at uttermost surprise because it is v=
irtually impossible to know who is trustworthy and who to believe. I am Dr.=
Rhama Benson, A banker by profession. Please, I want to transfer the sum o=
f ($10.5 million) dollars into your bank account. This business is 100% ris=
k free.
Your share will be 40% while 60% for me. Contact me for furt=
her advice. Full details will be sent to you on the receipt of your urgent =
response by forwarding the following details below.
1. Your Full Nam=
e................
2. Your Telephone No..........
3. Your Age.........=
.......
4. Your Home Address........
5. Your Country............
<=
br>Thanks for your anticipated cooperation.
Best regards.
Dr Rhama.
r>
--0000000000008ce08d05de338c9d--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments