Nigerian spam from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 17 Jun 2022 18:30:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1o2ML3-000Eml-PJ
for dave@doctor.nl2k.ab.ca;
Fri, 17 Jun 2022 18:29:21 -0600
Resent-From: The Doctor
Resent-Date: Fri, 17 Jun 2022 18:29:21 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs1-f49.google.com ([209.85.217.49]:41532)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1o2MGJ-000Ebe-Gw
for doctor@doctor.nl2k.ab.ca;
Fri, 17 Jun 2022 18:24:31 -0600
Received: by mail-vs1-f49.google.com with SMTP id r12so5473471vsg.8
for; Fri, 17 Jun 2022 17:24:10 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=8KU4TjDf1bjxduwFoZGdEqnV+10G4DaK+SuskaHR+OU=;
b=OxCVC9GQTRPdM+d2FFc2bTHh2EmtMd12ZCheG1Aq6fw7WXs7jdW8B5w9AbK4nUaawJ
jXNxH7be7RNjEeq4/qC0lUx2VtTx84dlm27WIO1rSlUwl5kMb9YzvXhL9SHWS7nYBwlj
ArmXSaAzZL1qsBA2d+lzwcsRVMJSkKwHROKHtWCCFEHb1q42fEijUfZb5TVcpC32M1Nl
EyyYL+DJiz5eBFBtD7M5hQJTD1meWIzsjgy514pJ7axVc728Fc9ZbfJmyjATDF66k1Ex
kuhVEXSTHQYN2O0YMb8p+A3ogGaEkhUqWUDx3PUpLpI3lOoEPOusBK5yaexa2V9z4BnS
PhDQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=8KU4TjDf1bjxduwFoZGdEqnV+10G4DaK+SuskaHR+OU=;
b=Sci4uM2GBA4tcKSRX6WdAsvVsAP/DFxIlE5RVRwCYa5J0amw7gjn60Rs/0usbeKUEq
rmxQeYynCEqhlmyxR/RuCttGMZa0GU+eGu/ZsrC+KuGpbLRZQsW+N+jUc6Cgt3LNS51+
2xS6fRVQvLjkhvAnS/vK/KqPJnZQxT4GiZopuA9UOk+g7A8tJ35bL5YuVUu0anGh00Ba
kOahBRN/PneQJSKw9pnPtoap6zRaCU/yoBYLh/LDAhcNo/jqFF9m2Vljy7D2cmoAThuo
i1JUKWcyk/ave2NJzzjbbLYnXVP2kt5UmVAzs86dSFMH5A7nA1NkUPIeZeIu/U5bX5YL
1BXA==
X-Gm-Message-State: AJIora9ZhBB9G8RzmL8oxX1d7/T01Z09cJiTa5m00hU9umIS/zYmSnv+
trwLOKxTUsxLNMfsw5POWJDTzru2RrYcM5wYX2g=
X-Google-Smtp-Source: AGRyM1srWnE0UjuzhO8m6+KhkhpHntQ6/n5VGdlHUBywOFO8sVRVpNN8MetH6x5H7HyfpZ0ElOvBbcef3dAEApvowck=
X-Received: by 2002:a67:d182:0:b0:337:8e4c:76c7 with SMTP id
w2-20020a67d182000000b003378e4c76c7mr5352776vsi.75.1655511844225; Fri, 17 Jun
2022 17:24:04 -0700 (PDT)
MIME-Version: 1.0
Reply-To: mrstheresek@hotmail.com
From: "Mrs.Therese Koga"
Date: Sat, 18 Jun 2022 00:23:46 +0000
Message-ID:
Subject: Greetings to you dear
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000006587af05e1ade3dc"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 9.4
X-Spam_score_int: 94
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, I assume that this message will reach you in
good health. Though I did not know you in person or having seen you before,
due to the reliable revelation, I decided to share this lucrative opportunity
w [...]
Content analysis details: (9.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.217.49 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[ali1954musa[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
1.5 HK_NAME_FM_MR_MRS No description available.
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Greetings to you dear
--0000000000006587af05e1ade3dc
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Dear Friend,
I assume that this message will reach you in good health. Though I did not
know you in person or having seen you before, due to the reliable
revelation, I decided to share this lucrative opportunity with you. Mrs.
Therese Koga from Burkina Faso, married to Late Dr. Dr. Patrick Koga ,
director High River Gold Mines Ltd Burkina Faso West Africa. It=E2=80=99s =
just my
urgent need for foreign partner that made me contact you, so if you are
interested, kindly respond back to me, further information will be given to
you.
Regards
Mrs. Therese Koga
--0000000000006587af05e1ade3dc
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--0000000000006587af05e1ade3dc--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 17 Jun 2022 18:30:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1o2ML3-000Eml-PJ
for dave@doctor.nl2k.ab.ca;
Fri, 17 Jun 2022 18:29:21 -0600
Resent-From: The Doctor
Resent-Date: Fri, 17 Jun 2022 18:29:21 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs1-f49.google.com ([209.85.217.49]:41532)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1o2MGJ-000Ebe-Gw
for doctor@doctor.nl2k.ab.ca;
Fri, 17 Jun 2022 18:24:31 -0600
Received: by mail-vs1-f49.google.com with SMTP id r12so5473471vsg.8
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=8KU4TjDf1bjxduwFoZGdEqnV+10G4DaK+SuskaHR+OU=;
b=OxCVC9GQTRPdM+d2FFc2bTHh2EmtMd12ZCheG1Aq6fw7WXs7jdW8B5w9AbK4nUaawJ
jXNxH7be7RNjEeq4/qC0lUx2VtTx84dlm27WIO1rSlUwl5kMb9YzvXhL9SHWS7nYBwlj
ArmXSaAzZL1qsBA2d+lzwcsRVMJSkKwHROKHtWCCFEHb1q42fEijUfZb5TVcpC32M1Nl
EyyYL+DJiz5eBFBtD7M5hQJTD1meWIzsjgy514pJ7axVc728Fc9ZbfJmyjATDF66k1Ex
kuhVEXSTHQYN2O0YMb8p+A3ogGaEkhUqWUDx3PUpLpI3lOoEPOusBK5yaexa2V9z4BnS
PhDQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=8KU4TjDf1bjxduwFoZGdEqnV+10G4DaK+SuskaHR+OU=;
b=Sci4uM2GBA4tcKSRX6WdAsvVsAP/DFxIlE5RVRwCYa5J0amw7gjn60Rs/0usbeKUEq
rmxQeYynCEqhlmyxR/RuCttGMZa0GU+eGu/ZsrC+KuGpbLRZQsW+N+jUc6Cgt3LNS51+
2xS6fRVQvLjkhvAnS/vK/KqPJnZQxT4GiZopuA9UOk+g7A8tJ35bL5YuVUu0anGh00Ba
kOahBRN/PneQJSKw9pnPtoap6zRaCU/yoBYLh/LDAhcNo/jqFF9m2Vljy7D2cmoAThuo
i1JUKWcyk/ave2NJzzjbbLYnXVP2kt5UmVAzs86dSFMH5A7nA1NkUPIeZeIu/U5bX5YL
1BXA==
X-Gm-Message-State: AJIora9ZhBB9G8RzmL8oxX1d7/T01Z09cJiTa5m00hU9umIS/zYmSnv+
trwLOKxTUsxLNMfsw5POWJDTzru2RrYcM5wYX2g=
X-Google-Smtp-Source: AGRyM1srWnE0UjuzhO8m6+KhkhpHntQ6/n5VGdlHUBywOFO8sVRVpNN8MetH6x5H7HyfpZ0ElOvBbcef3dAEApvowck=
X-Received: by 2002:a67:d182:0:b0:337:8e4c:76c7 with SMTP id
w2-20020a67d182000000b003378e4c76c7mr5352776vsi.75.1655511844225; Fri, 17 Jun
2022 17:24:04 -0700 (PDT)
MIME-Version: 1.0
Reply-To: mrstheresek@hotmail.com
From: "Mrs.Therese Koga"
Date: Sat, 18 Jun 2022 00:23:46 +0000
Message-ID:
Subject: Greetings to you dear
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000006587af05e1ade3dc"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 9.4
X-Spam_score_int: 94
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, I assume that this message will reach you in
good health. Though I did not know you in person or having seen you before,
due to the reliable revelation, I decided to share this lucrative opportunity
w [...]
Content analysis details: (9.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.217.49 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[ali1954musa[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
1.5 HK_NAME_FM_MR_MRS No description available.
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Greetings to you dear
--0000000000006587af05e1ade3dc
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Dear Friend,
I assume that this message will reach you in good health. Though I did not
know you in person or having seen you before, due to the reliable
revelation, I decided to share this lucrative opportunity with you. Mrs.
Therese Koga from Burkina Faso, married to Late Dr. Dr. Patrick Koga ,
director High River Gold Mines Ltd Burkina Faso West Africa. It=E2=80=99s =
just my
urgent need for foreign partner that made me contact you, so if you are
interested, kindly respond back to me, further information will be given to
you.
Regards
Mrs. Therese Koga
--0000000000006587af05e1ade3dc
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Dear Friend,
I assume that this message will reach =
you in good health. Though I did not know you in person or having seen you =
before, due to the reliable revelation, I decided to share this lucrative o=
pportunity with you. =C2=A0 Mrs. Therese Koga =C2=A0from Burkina Faso, marr=
ied to Late Dr.=C2=A0 Dr. Patrick =C2=A0Koga , director High River Gold Min=
es Ltd Burkina Faso West Africa.=C2=A0 It=E2=80=99s just my urgent need for=
foreign partner that made me contact you, so if you are interested, kindly=
respond back to me, further information will be given to you.
Regar=
ds
Mrs. Therese Koga
I assume that this message will reach =
you in good health. Though I did not know you in person or having seen you =
before, due to the reliable revelation, I decided to share this lucrative o=
pportunity with you. =C2=A0 Mrs. Therese Koga =C2=A0from Burkina Faso, marr=
ied to Late Dr.=C2=A0 Dr. Patrick =C2=A0Koga , director High River Gold Min=
es Ltd Burkina Faso West Africa.=C2=A0 It=E2=80=99s just my urgent need for=
foreign partner that made me contact you, so if you are interested, kindly=
respond back to me, further information will be given to you.
Regar=
ds
Mrs. Therese Koga
--0000000000006587af05e1ade3dc--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments