Nigerian spam from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 05 May 2022 05:00:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1nmZCx-0001UI-DR
for dave@doctor.nl2k.ab.ca;
Thu, 05 May 2022 04:59:43 -0600
Resent-From: The Doctor
Resent-Date: Thu, 5 May 2022 04:59:43 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f49.google.com ([209.85.167.49]:41832)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1nmQnF-000LKz-FW
for doctor@doctor.nl2k.ab.ca;
Wed, 04 May 2022 20:00:41 -0600
Received: by mail-lf1-f49.google.com with SMTP id j4so5218388lfh.8
for; Wed, 04 May 2022 19:00:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to
:content-transfer-encoding;
bh=Be37DuOAKRliz7fPNHqV//10UDpKOswwNpjBLc2U7QA=;
b=h7WnhqYpfvZSm2+koum+n26AluUGYm7AbBs9BvB6pyN2IpVGkTHPQIQcJItxLiPuu0
vAv3zEDUoOow0D1AtZSJiE0jjOd4O9pXFiYRJIeAW4kyXUyT0kVoZmhfIRPiQ+vjZTw1
E9Mx/igg+2ICBWqcIUKGDMyKcRCHw7Bvo9VuYMycdqOdqwm+q+L4+oZa7wYjOZ3IXTRL
uUShEbc4iC/KbffDEo5gttd+Fhe2F8f7szrz3SZ6rC5CiarFm8kKI/0dP0+npy1SG9XR
8XnwxO0eZYh4p8HCiy9ZwNicMltg7UHlUy1bhChJv9jy6HFXqY9YSD3u2+penRJUnWUb
uGdw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to:content-transfer-encoding;
bh=Be37DuOAKRliz7fPNHqV//10UDpKOswwNpjBLc2U7QA=;
b=UjUHSUilWxtRJekaDFoqGcxOL5s0A3q6kHs98tsMBZAL1iCSA0vR4fNwKNOFrlBeIj
KTtuNnyUJh+SCS7erPpP9UfVwA91LSgqEQWuBM6guH8tfcs+jS5ywIS3h4GAaVA20AZ3
vkG/P3MQeRGp3ZzGZxXhurPu8KWHDQwKXNYVApjt94k4fp14Wzt/7hZtj24q3DMDan6W
LItz/BIRnmEiksWVX6vYQQpYVQmlC/MoGQC5XzESBD822Mi8/miPEDy/4E51xKZyZjwn
uwQrch5V72wplVSNTD/V5r7646oREpZY9wgba+n/wSq6Bo/Z5rJwbsAYevmzCOoiZvoh
g+cw==
X-Gm-Message-State: AOAM530Tf31De1L3c66VFwkfKIvvQc5LsnClcjbzJ43Y5rOa+MUXYRWn
SPJ/39yJgNpgQrSPjasf2jNIPy45TNxECZHWGPY=
X-Google-Smtp-Source: ABdhPJz3BmUcCeeveBeOvuWIjwaEIQX0tJdnKmNa2d7M2frOW9Q1aTM5wZ1oePrYKQyAecIU/X7qkqjl9Td+Ztm60o4=
X-Received: by 2002:a05:6512:151f:b0:44a:2508:1d01 with SMTP id
bq31-20020a056512151f00b0044a25081d01mr16044475lfb.675.1651716013504; Wed, 04
May 2022 19:00:13 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:ab2:d06:0:b0:13c:7957:5a9e with HTTP; Wed, 4 May 2022
19:00:12 -0700 (PDT)
Reply-To: tombobolo74@gmail.com
From: MR TOM Bobolo
Date: Wed, 4 May 2022 19:00:12 -0700
Message-ID:
Subject: Dear Friend,
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 16.8
X-Spam_score_int: 168
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Dear Friend, I Am Tom Bobolo. from west Africa i have a
business deal to share with You in the sum of10.2M USD dollars that is been
held in our here in (B.O.A) bank of Africa the fund mentioned rightful belong
to [...]
Content analysis details: (16.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.49 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[tombobolo74[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[anissahelou01[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[anissahelou01[at]gmail.com]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 XFER_LOTSA_MONEY Transfer a lot of money
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
1.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} Dear Friend,
--=20
Dear Friend,
I Am Tom Bobolo. from west Africa i have a business deal to share
with You in the sum of10.2M USD dollars that is been held in our here
in (B.O.A) bank of Africa the fund mentioned rightful belong to one of
Our late client who deposited the money in our bank here ever since he
Died nobody have Been able to apply to claim the fund so I wish that
you will come and Assume as his foreign business partner also note
this business is risk Free not to be sacred or doubt is real please my
dearest one also noted.
This once we succeed in Transferring this fund to your wish provided
account in your country it Will shared among us in agreement of 60%40
i believe that after this Deal joy and happiness will be on or face's
and family's please reply to me with your details so we can move on
with this great plan ok.
REPLY TO-- (tombobolo74@gmail.com)
Your Full Name.......
You=E2=80=99re Age&Sex........
Your Marital Status......
You=E2=80=99re Country Name.......
You=E2=80=99re Phone Number......
Your Occupation.....
You=E2=80=99re Bank Name......
You=E2=80=99re Account Number......
Thanks Yours Brother
Tom Bobolo
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 05 May 2022 05:00:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1nmZCx-0001UI-DR
for dave@doctor.nl2k.ab.ca;
Thu, 05 May 2022 04:59:43 -0600
Resent-From: The Doctor
Resent-Date: Thu, 5 May 2022 04:59:43 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f49.google.com ([209.85.167.49]:41832)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1nmQnF-000LKz-FW
for doctor@doctor.nl2k.ab.ca;
Wed, 04 May 2022 20:00:41 -0600
Received: by mail-lf1-f49.google.com with SMTP id j4so5218388lfh.8
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to
:content-transfer-encoding;
bh=Be37DuOAKRliz7fPNHqV//10UDpKOswwNpjBLc2U7QA=;
b=h7WnhqYpfvZSm2+koum+n26AluUGYm7AbBs9BvB6pyN2IpVGkTHPQIQcJItxLiPuu0
vAv3zEDUoOow0D1AtZSJiE0jjOd4O9pXFiYRJIeAW4kyXUyT0kVoZmhfIRPiQ+vjZTw1
E9Mx/igg+2ICBWqcIUKGDMyKcRCHw7Bvo9VuYMycdqOdqwm+q+L4+oZa7wYjOZ3IXTRL
uUShEbc4iC/KbffDEo5gttd+Fhe2F8f7szrz3SZ6rC5CiarFm8kKI/0dP0+npy1SG9XR
8XnwxO0eZYh4p8HCiy9ZwNicMltg7UHlUy1bhChJv9jy6HFXqY9YSD3u2+penRJUnWUb
uGdw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to:content-transfer-encoding;
bh=Be37DuOAKRliz7fPNHqV//10UDpKOswwNpjBLc2U7QA=;
b=UjUHSUilWxtRJekaDFoqGcxOL5s0A3q6kHs98tsMBZAL1iCSA0vR4fNwKNOFrlBeIj
KTtuNnyUJh+SCS7erPpP9UfVwA91LSgqEQWuBM6guH8tfcs+jS5ywIS3h4GAaVA20AZ3
vkG/P3MQeRGp3ZzGZxXhurPu8KWHDQwKXNYVApjt94k4fp14Wzt/7hZtj24q3DMDan6W
LItz/BIRnmEiksWVX6vYQQpYVQmlC/MoGQC5XzESBD822Mi8/miPEDy/4E51xKZyZjwn
uwQrch5V72wplVSNTD/V5r7646oREpZY9wgba+n/wSq6Bo/Z5rJwbsAYevmzCOoiZvoh
g+cw==
X-Gm-Message-State: AOAM530Tf31De1L3c66VFwkfKIvvQc5LsnClcjbzJ43Y5rOa+MUXYRWn
SPJ/39yJgNpgQrSPjasf2jNIPy45TNxECZHWGPY=
X-Google-Smtp-Source: ABdhPJz3BmUcCeeveBeOvuWIjwaEIQX0tJdnKmNa2d7M2frOW9Q1aTM5wZ1oePrYKQyAecIU/X7qkqjl9Td+Ztm60o4=
X-Received: by 2002:a05:6512:151f:b0:44a:2508:1d01 with SMTP id
bq31-20020a056512151f00b0044a25081d01mr16044475lfb.675.1651716013504; Wed, 04
May 2022 19:00:13 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:ab2:d06:0:b0:13c:7957:5a9e with HTTP; Wed, 4 May 2022
19:00:12 -0700 (PDT)
Reply-To: tombobolo74@gmail.com
From: MR TOM Bobolo
Date: Wed, 4 May 2022 19:00:12 -0700
Message-ID:
Subject: Dear Friend,
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 16.8
X-Spam_score_int: 168
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Dear Friend, I Am Tom Bobolo. from west Africa i have a
business deal to share with You in the sum of10.2M USD dollars that is been
held in our here in (B.O.A) bank of Africa the fund mentioned rightful belong
to [...]
Content analysis details: (16.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.49 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[tombobolo74[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[anissahelou01[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[anissahelou01[at]gmail.com]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 XFER_LOTSA_MONEY Transfer a lot of money
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
1.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} Dear Friend,
--=20
Dear Friend,
I Am Tom Bobolo. from west Africa i have a business deal to share
with You in the sum of10.2M USD dollars that is been held in our here
in (B.O.A) bank of Africa the fund mentioned rightful belong to one of
Our late client who deposited the money in our bank here ever since he
Died nobody have Been able to apply to claim the fund so I wish that
you will come and Assume as his foreign business partner also note
this business is risk Free not to be sacred or doubt is real please my
dearest one also noted.
This once we succeed in Transferring this fund to your wish provided
account in your country it Will shared among us in agreement of 60%40
i believe that after this Deal joy and happiness will be on or face's
and family's please reply to me with your details so we can move on
with this great plan ok.
REPLY TO-- (tombobolo74@gmail.com)
Your Full Name.......
You=E2=80=99re Age&Sex........
Your Marital Status......
You=E2=80=99re Country Name.......
You=E2=80=99re Phone Number......
Your Occupation.....
You=E2=80=99re Bank Name......
You=E2=80=99re Account Number......
Thanks Yours Brother
Tom Bobolo
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments