Nigerian Spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 05 Jun 2022 19:32:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1ny1ao-000Dk6-8K
for dave@doctor.nl2k.ab.ca;
Sun, 05 Jun 2022 19:31:42 -0600
Resent-From: The Doctor
Resent-Date: Sun, 5 Jun 2022 19:31:42 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yb1-f178.google.com ([209.85.219.178]:33644)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1ny0q8-000CWZ-Hc
for doctor@doctor.nl2k.ab.ca;
Sun, 05 Jun 2022 18:43:32 -0600
Received: by mail-yb1-f178.google.com with SMTP id v106so23192549ybi.0
for; Sun, 05 Jun 2022 17:43:03 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=BUqLeSLQtBy+xD6q3Rh+wbDDbDSdBtgvEGD/WAkD7lw=;
b=V2awoShODKVYFwzi8/4lE2N/vt+rzIjj85Q5tqb9DTzrspKPGeonOgvZMz2a449vb/
6iZEeQiXbnV+2Dzy2WFC8spcmx509qD3LRgvvo0al1knatimXufNTvwf/WfE1xd7gC25
2QCyNgM2dDHaz/B42x3XAv2ISIJamcDrrXxfRlSKxiGFSYN8VYExz+ssuXrWrfuSo7Rq
HpgsIk3foAylFeyNMWuScbPKRdmO+jEvcVDnHiu+Dw9oalxNg3+tp/g3oJO6xdeNksTu
r9tCnp4Zb3EDh5Jz4tO96sg37UtgndTwMjs2/qynkVT16OlEAFbM+VH16k1nqBjDLwMA
+Ulw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=BUqLeSLQtBy+xD6q3Rh+wbDDbDSdBtgvEGD/WAkD7lw=;
b=fsRGop8RCiUoQr9GUiOPCxy7TlAtms+uzNJ5u2hwaHvfXXYVFcXBCu0M/bFVdz19KM
yLU7uWoP3akn18py/m5eXKeREqfptdtZvcuhbWJX5/7cRw7Po2X9WAMh3DQ7n4D0AFHx
VLPsswrK07+/YCb+gFvnXeZjGdz2W8S9wh1X7WiNhbTOvxUMsAaGrxlkT/OE8+0/m8gG
VKunx4zrK5Ku14/I2CELEvmNrkOoECgOrV179Uy06GHZDDQwsaxuxmksKn1t8RLbbolb
wiXqKBLWmr3FTGl3nYqawu7lFr9cR1E0ixUjXWyEN97nxKggSXifkDK+TaGd03cxM7rg
Kxug==
X-Gm-Message-State: AOAM533SsiELF/VE/YHuj3e14d6w4bh57XDQypukq6UAEX9RaCSB2qAh
+SAQwEep5ME6eS+l71Z/jwcKYg6ZzSZtgN/RvCc=
X-Google-Smtp-Source: ABdhPJzwzEk/l8Uuta4Dhv6+G6NSZc5PFoDbDbliV/Dda288nbdOKqU++GIs1CmT4uEfdm9qZSxLrSJIYNf/dh2JxdI=
X-Received: by 2002:a05:6902:14e:b0:64f:d2eb:2df0 with SMTP id
p14-20020a056902014e00b0064fd2eb2df0mr22391318ybh.557.1654476177225; Sun, 05
Jun 2022 17:42:57 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:7010:7526:b0:2d6:ca7e:3374 with HTTP; Sun, 5 Jun 2022
17:42:56 -0700 (PDT)
Reply-To: tonybanneth@gmail.com
From: "Mr. Tony Banneth"
Date: Mon, 6 Jun 2022 02:42:56 +0200
Message-ID:
Subject: Dear Friend
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 11.5
X-Spam_score_int: 115
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greeting My Dear Before I introduce myself, I wish to inform
you that this letter is not a hoax mail,My name is Mr.Tony Banneth.from Burkina
Faso, West Africa. I work in Society General Burkina Faso (SG;BF) as telex
m [...]
Content analysis details: (11.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[alikabiru62[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.178 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[alikabiru62[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Dear Friend
Greeting My Dear
Before I introduce myself, I wish to inform you that this letter is
not a hoax mail,My name is Mr.Tony Banneth.from Burkina Faso, West
Africa. I work in Society General Burkina Faso (SG;BF) as telex
manager with the business proposal of ($10.5million Dollars) to
transfer into your account,
if you are interested them let me know if interested to work
together so that the fund to be transfer your account your country get
back to me to proceed them i can give you the full details about the
transaction,
if you believe to work with me nobody come for it asking you about the
fund, looking forward to hearing from you immediately for further
information,I await your response to give you more details.this my
email(tonybanneth@gmail.com )
Thanks with all my best regards.
Mr.Tony Banneth,
Telex Manager
Society General Burkina Faso (SG.BF)
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 05 Jun 2022 19:32:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1ny1ao-000Dk6-8K
for dave@doctor.nl2k.ab.ca;
Sun, 05 Jun 2022 19:31:42 -0600
Resent-From: The Doctor
Resent-Date: Sun, 5 Jun 2022 19:31:42 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yb1-f178.google.com ([209.85.219.178]:33644)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1ny0q8-000CWZ-Hc
for doctor@doctor.nl2k.ab.ca;
Sun, 05 Jun 2022 18:43:32 -0600
Received: by mail-yb1-f178.google.com with SMTP id v106so23192549ybi.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=BUqLeSLQtBy+xD6q3Rh+wbDDbDSdBtgvEGD/WAkD7lw=;
b=V2awoShODKVYFwzi8/4lE2N/vt+rzIjj85Q5tqb9DTzrspKPGeonOgvZMz2a449vb/
6iZEeQiXbnV+2Dzy2WFC8spcmx509qD3LRgvvo0al1knatimXufNTvwf/WfE1xd7gC25
2QCyNgM2dDHaz/B42x3XAv2ISIJamcDrrXxfRlSKxiGFSYN8VYExz+ssuXrWrfuSo7Rq
HpgsIk3foAylFeyNMWuScbPKRdmO+jEvcVDnHiu+Dw9oalxNg3+tp/g3oJO6xdeNksTu
r9tCnp4Zb3EDh5Jz4tO96sg37UtgndTwMjs2/qynkVT16OlEAFbM+VH16k1nqBjDLwMA
+Ulw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=BUqLeSLQtBy+xD6q3Rh+wbDDbDSdBtgvEGD/WAkD7lw=;
b=fsRGop8RCiUoQr9GUiOPCxy7TlAtms+uzNJ5u2hwaHvfXXYVFcXBCu0M/bFVdz19KM
yLU7uWoP3akn18py/m5eXKeREqfptdtZvcuhbWJX5/7cRw7Po2X9WAMh3DQ7n4D0AFHx
VLPsswrK07+/YCb+gFvnXeZjGdz2W8S9wh1X7WiNhbTOvxUMsAaGrxlkT/OE8+0/m8gG
VKunx4zrK5Ku14/I2CELEvmNrkOoECgOrV179Uy06GHZDDQwsaxuxmksKn1t8RLbbolb
wiXqKBLWmr3FTGl3nYqawu7lFr9cR1E0ixUjXWyEN97nxKggSXifkDK+TaGd03cxM7rg
Kxug==
X-Gm-Message-State: AOAM533SsiELF/VE/YHuj3e14d6w4bh57XDQypukq6UAEX9RaCSB2qAh
+SAQwEep5ME6eS+l71Z/jwcKYg6ZzSZtgN/RvCc=
X-Google-Smtp-Source: ABdhPJzwzEk/l8Uuta4Dhv6+G6NSZc5PFoDbDbliV/Dda288nbdOKqU++GIs1CmT4uEfdm9qZSxLrSJIYNf/dh2JxdI=
X-Received: by 2002:a05:6902:14e:b0:64f:d2eb:2df0 with SMTP id
p14-20020a056902014e00b0064fd2eb2df0mr22391318ybh.557.1654476177225; Sun, 05
Jun 2022 17:42:57 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:7010:7526:b0:2d6:ca7e:3374 with HTTP; Sun, 5 Jun 2022
17:42:56 -0700 (PDT)
Reply-To: tonybanneth@gmail.com
From: "Mr. Tony Banneth"
Date: Mon, 6 Jun 2022 02:42:56 +0200
Message-ID:
Subject: Dear Friend
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 11.5
X-Spam_score_int: 115
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greeting My Dear Before I introduce myself, I wish to inform
you that this letter is not a hoax mail,My name is Mr.Tony Banneth.from Burkina
Faso, West Africa. I work in Society General Burkina Faso (SG;BF) as telex
m [...]
Content analysis details: (11.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[alikabiru62[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.178 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[alikabiru62[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Dear Friend
Greeting My Dear
Before I introduce myself, I wish to inform you that this letter is
not a hoax mail,My name is Mr.Tony Banneth.from Burkina Faso, West
Africa. I work in Society General Burkina Faso (SG;BF) as telex
manager with the business proposal of ($10.5million Dollars) to
transfer into your account,
if you are interested them let me know if interested to work
together so that the fund to be transfer your account your country get
back to me to proceed them i can give you the full details about the
transaction,
if you believe to work with me nobody come for it asking you about the
fund, looking forward to hearing from you immediately for further
information,I await your response to give you more details.this my
email(tonybanneth@gmail.com )
Thanks with all my best regards.
Mr.Tony Banneth,
Telex Manager
Society General Burkina Faso (SG.BF)
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments