Nigerian Gmail spam

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Sep 2022 07:42:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1odApz-00046R-9D

for dave@doctor.nl2k.ab.ca;

Tue, 27 Sep 2022 07:41:27 -0600

Resent-From: The Doctor

Resent-Date: Tue, 27 Sep 2022 07:41:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-il1-f170.google.com ([209.85.166.170]:38844)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1odATF-000NX5-84

for doctor@doctor.nl2k.ab.ca;

Tue, 27 Sep 2022 07:18:01 -0600

Received: by mail-il1-f170.google.com with SMTP id g12so5072879ilj.5

for ; Tue, 27 Sep 2022 06:17:36 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date;

bh=5SQVnq2rsFJsaTSufUc2h5p4tUC9Zv1bZ0XreTjwY6I=;

b=XJN65BfFnj7Vz+nvdfeww4xgUYSSRFICX1xH721SEbaqCJikU4/oCzio2YqCJBlhu+

FbHydj8DMRuWwz4NSJkaraPXra2eQkQnA67J9VRFcRjzoeaf98NE0gx5MwH7ctH1/fpa

YEXJl/r8URgePnD8yUHN1ffakCgcpwYfWkvaBDWrVW6kUyd0CJz8DxEyOZjARGQPvkEa

BqukhAif1MJV1lm8PZGLL6r/4fjTwwGyNZNZ+bSjqFPma9r7o+yj4Df6zeB/SV+ddCsU

dbgDtTC++SYl3dTWJjBBwuj3ED3wTlsEnR0gPiSKCt1dHgeE6DUMTlYfrR0k+RlCpTuC

MTNA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date;

bh=5SQVnq2rsFJsaTSufUc2h5p4tUC9Zv1bZ0XreTjwY6I=;

b=mxhHzUR6lsxm4lXaL7cq5JsnWWVrQMe0pO27dMOyUqVx+VICMMoS1qLH2lilWGLb4d

leByaVFfZi5CDNIswQKLGtVrncWF69nhCzOFqhMYn60Kp7SwbMD82tbA12n+DMmwz7ub

0z4RvakfiYc7FTTw52oAAXZM+haCnjmcZzPNYBfdjjeZiBCbgw3+s/F15z6pDRPD0V9q

cBQXUZoOr/9nJJyMM2UK63biRS/qZ3IOA+yEhL7jNnWxuEIEQf1G8YDUoH7F3jvwSAE7

QSwiXd9fF9BknYyozs3eGBzcmF/LwZglfp3jcj7FKitjdXmqhffFi2fC1gZ4VjswOR7e

Ng7w==

X-Gm-Message-State: ACrzQf1FBO6Tbj1sR6iPc7lZEUZdOhTyN3gZV5aeVOuO2AifPH4J5pnj

RLy2dOi0yeU0hP3dbRqQfJWZuyf3RMlwbzIBaAc=

X-Google-Smtp-Source: AMsMyM6EbtbIGfg/5F0iLoU6Fd3tRZQsZ8sEd90oXy8KFOappiNIp//UThPEorytp8PvD22xU15RITJc7pO6Uqp6Me8=

X-Received: by 2002:a05:6e02:12e1:b0:2f5:eca8:cf05 with SMTP id

l1-20020a056e0212e100b002f5eca8cf05mr12944872iln.4.1664284650204; Tue, 27 Sep

2022 06:17:30 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a4f:a45a:0:0:0:0:0 with HTTP; Tue, 27 Sep 2022 06:17:29

-0700 (PDT)

Reply-To: mrs.awazongo@gmail.com

From: "Mrs.Awa Zongo"

Date: Tue, 27 Sep 2022 13:17:29 +0000

Message-ID:

Subject: Can you assist on this message From Mrs.Awa Zongo

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 19.6

X-Spam_score_int: 196

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: FORMATE ATTENTION PLEASE, I am Mrs. Awa Zongo, a personal

Accountant/Executive board of Directors working with United bank for African

Burkina Faso UBA. I have an interesting business proposal for you that will

be of immense b [...]



Content analysis details: (19.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.166.170 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[fmoses755[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[fmoses755[at]gmail.com]

0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

2.6 HK_SCAM_N13 BODY: No description available.

2.5 MILLION_USD BODY: Talks about millions of dollars

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.9 URG_BIZ BODY: Contains urgent matter

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Can you assist on this message From Mrs.Awa Zongo



FORMATE





ATTENTION PLEASE,





I am Mrs. Awa Zongo, a personal Accountant/Executive board of

Directors working with United bank for African Burkina Faso UBA. I

have an interesting business proposal for you that will be of immense

benefit to both of us. Although this may be hard for you to believe,

we stand to gain a huge amount between us in a matter of days. Please

grant me the benefit of doubt and hear me out. I need you to signify

your interest by replying to my mail



Honestly, I have a business transaction worth the sum of

US$8,200,000.00 Eight Million two hundred thousand united States

dollars to transfer to you through proper documentation in the

position of your own Account.



Most importantly, I will need you to promise to keep whatever you

learn from me between us even if you decide not to go along with me. I

will make more details available to you on receipt of a positive

response from you. This transaction is risk-free; please urgently

confirm your willingness and interest to assist in this deal, I am in

good faith and with trust waiting for your Urgent response and maximum

cooperation for more details.





Best Regards,



Mrs. Awa Zongo.

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA