Nigerian spam from Google

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 17 Jun 2022 18:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1o2ML3-000Eml-PJ

for dave@doctor.nl2k.ab.ca;

Fri, 17 Jun 2022 18:29:21 -0600

Resent-From: The Doctor

Resent-Date: Fri, 17 Jun 2022 18:29:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f49.google.com ([209.85.217.49]:41532)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1o2MGJ-000Ebe-Gw

for doctor@doctor.nl2k.ab.ca;

Fri, 17 Jun 2022 18:24:31 -0600

Received: by mail-vs1-f49.google.com with SMTP id r12so5473471vsg.8

for ; Fri, 17 Jun 2022 17:24:10 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=8KU4TjDf1bjxduwFoZGdEqnV+10G4DaK+SuskaHR+OU=;

b=OxCVC9GQTRPdM+d2FFc2bTHh2EmtMd12ZCheG1Aq6fw7WXs7jdW8B5w9AbK4nUaawJ

jXNxH7be7RNjEeq4/qC0lUx2VtTx84dlm27WIO1rSlUwl5kMb9YzvXhL9SHWS7nYBwlj

ArmXSaAzZL1qsBA2d+lzwcsRVMJSkKwHROKHtWCCFEHb1q42fEijUfZb5TVcpC32M1Nl

EyyYL+DJiz5eBFBtD7M5hQJTD1meWIzsjgy514pJ7axVc728Fc9ZbfJmyjATDF66k1Ex

kuhVEXSTHQYN2O0YMb8p+A3ogGaEkhUqWUDx3PUpLpI3lOoEPOusBK5yaexa2V9z4BnS

PhDQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=8KU4TjDf1bjxduwFoZGdEqnV+10G4DaK+SuskaHR+OU=;

b=Sci4uM2GBA4tcKSRX6WdAsvVsAP/DFxIlE5RVRwCYa5J0amw7gjn60Rs/0usbeKUEq

rmxQeYynCEqhlmyxR/RuCttGMZa0GU+eGu/ZsrC+KuGpbLRZQsW+N+jUc6Cgt3LNS51+

2xS6fRVQvLjkhvAnS/vK/KqPJnZQxT4GiZopuA9UOk+g7A8tJ35bL5YuVUu0anGh00Ba

kOahBRN/PneQJSKw9pnPtoap6zRaCU/yoBYLh/LDAhcNo/jqFF9m2Vljy7D2cmoAThuo

i1JUKWcyk/ave2NJzzjbbLYnXVP2kt5UmVAzs86dSFMH5A7nA1NkUPIeZeIu/U5bX5YL

1BXA==

X-Gm-Message-State: AJIora9ZhBB9G8RzmL8oxX1d7/T01Z09cJiTa5m00hU9umIS/zYmSnv+

trwLOKxTUsxLNMfsw5POWJDTzru2RrYcM5wYX2g=

X-Google-Smtp-Source: AGRyM1srWnE0UjuzhO8m6+KhkhpHntQ6/n5VGdlHUBywOFO8sVRVpNN8MetH6x5H7HyfpZ0ElOvBbcef3dAEApvowck=

X-Received: by 2002:a67:d182:0:b0:337:8e4c:76c7 with SMTP id

w2-20020a67d182000000b003378e4c76c7mr5352776vsi.75.1655511844225; Fri, 17 Jun

2022 17:24:04 -0700 (PDT)

MIME-Version: 1.0

Reply-To: mrstheresek@hotmail.com

From: "Mrs.Therese Koga"

Date: Sat, 18 Jun 2022 00:23:46 +0000

Message-ID:

Subject: Greetings to you dear

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000006587af05e1ade3dc"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 9.4

X-Spam_score_int: 94

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Friend, I assume that this message will reach you in

good health. Though I did not know you in person or having seen you before,

due to the reliable revelation, I decided to share this lucrative opportunity

w [...]



Content analysis details: (9.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.217.49 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[ali1954musa[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.0 HTML_MESSAGE BODY: HTML included in message

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

1.5 HK_NAME_FM_MR_MRS No description available.

-0.0 T_SCC_BODY_TEXT_LINE No description available.

3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Greetings to you dear



--0000000000006587af05e1ade3dc

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Friend,



I assume that this message will reach you in good health. Though I did not

know you in person or having seen you before, due to the reliable

revelation, I decided to share this lucrative opportunity with you. Mrs.

Therese Koga from Burkina Faso, married to Late Dr. Dr. Patrick Koga ,

director High River Gold Mines Ltd Burkina Faso West Africa. It=E2=80=99s =

just my

urgent need for foreign partner that made me contact you, so if you are

interested, kindly respond back to me, further information will be given to

you.



Regards

Mrs. Therese Koga



--0000000000006587af05e1ade3dc

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Friend,

I assume that this message will reach =

you in good health. Though I did not know you in person or having seen you =

before, due to the reliable revelation, I decided to share this lucrative o=

pportunity with you. =C2=A0 Mrs. Therese Koga =C2=A0from Burkina Faso, marr=

ied to Late Dr.=C2=A0 Dr. Patrick =C2=A0Koga , director High River Gold Min=

es Ltd Burkina Faso West Africa.=C2=A0 It=E2=80=99s just my urgent need for=

foreign partner that made me contact you, so if you are interested, kindly=

respond back to me, further information will be given to you.

Regar=

ds
Mrs. Therese Koga




--0000000000006587af05e1ade3dc--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA