Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 03 Dec 2022 08:13:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1p1TU1-000Ol5-Nv
for dave@doctor.nl2k.ab.ca;
Sat, 03 Dec 2022 07:27:13 -0700
Resent-From: The Doctor
Resent-Date: Sat, 3 Dec 2022 07:27:13 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f174.google.com ([209.85.128.174]:38488)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1p1OCN-0004Sp-OG
for doctor@doctor.nl2k.ab.ca;
Sat, 03 Dec 2022 01:48:55 -0700
Received: by mail-yw1-f174.google.com with SMTP id 00721157ae682-3bfd998fa53so71009767b3.5
for; Sat, 03 Dec 2022 00:46:10 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=ylZofwVVz/cborkFBPDT+jV8UqtMMLEQZGw4Phu5iHU=;
b=CF9i9DnBe0FAFAHX3yrTrkUza1+961DrPXAOn7ar0C4vLDJa9WPBPTQTScsGhf88wH
gp4shC1XbhtuQjfngiHDTTgAbzujCnZGi3EX9aZuv72/gv7Lq/qBnzTrMsU6EJJoKTbK
u44wuwJzwQK5sDbmKyhSSQratAhCJKIX4WuxTD/WeB6yGNpj5QgmL7cRe/5N3agrsyFy
dFHuts8t+CoyF7vdWHtvKvW0w4oZ+0+IDgIimwXBCnJ3KPvQ3Iis/od7Psh//kBQUyVu
2z437FG/l0CxCJWBEZtJ8iwua7ads7vn4J2gCYpST7Eb5Z5FTkM6VsUx/qJDCL6mR1bc
ohew==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=ylZofwVVz/cborkFBPDT+jV8UqtMMLEQZGw4Phu5iHU=;
b=r1SNdib6APrvFMwahpzxZoY0+FNRoT04yIgpO5cfOJmRTxHm/DsDPyF4CRMI6LAKzj
MK8JkNIzufh1WX2rF/5nf+Q9nMc3zaEcsj33PpxWwjC8wkV3VBE1dOdJnhWYMFy+kItf
L5fH6OJSn3zk7zBw+QjmjfRp5lhNrEaJx6n1jqVO9VgMOXGYee3ZNbFdat4Qqbz7Eu7K
qLkGjclIoJnydL/pWQTj05u0Wl/7cNPVix0yZc7VP19rlBSMmiiVGZRaGE4gyXof8SOJ
NZu3H5FZVcxIoa2XrRIrch9d7T+LGNWchzBrDEWcY9wnkQMl3SOw7cWXQz9pzY565Ya8
nOrQ==
X-Gm-Message-State: ANoB5pnuht71mkN9bpVXWn0mJ/jgzokGwismkQZ0iWOoz6q1y6HgT6f9
Cs50IB0JKnkbq/EUmgYA1QQtvegEBdfM9j6kezs=
X-Google-Smtp-Source: AA0mqf4IonwXwQeB/Pl7BmHJaJaEvyvBYHdPl9CI8RcLJEIJDcx/BUCxpzpwJmqEpcLrjrsA8nTfRFBIIpXEwrj57f0=
X-Received: by 2002:a05:690c:e:b0:36b:fbd0:2f6b with SMTP id
bc14-20020a05690c000e00b0036bfbd02f6bmr53296239ywb.387.1670057163750; Sat, 03
Dec 2022 00:46:03 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a05:7010:34c8:b0:314:4f9d:6eea with HTTP; Sat, 3 Dec 2022
00:46:03 -0800 (PST)
Reply-To: fcr23893@gmail.com
From: Daniel Ndoye
Date: Sat, 3 Dec 2022 08:46:03 +0000
Message-ID:
Subject: Inform Your Interest
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 22.5
X-Spam_score_int: 225
X-Spam_bar: ++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: 3rd December 2022. Hi friend, I need God fearing person for
profitable business partnership. I'm grateful for your patience to read this
message, I need a mutual understanding with you as this business is 100%
Legal and risk free [...]
Content analysis details: (22.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.174 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[kabakasedogo[at]gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[fcr23893[at]gmail.com]
2.5 HK_SCAM_N2 BODY: No description available.
2.0 HK_SCAM No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 TVD_PH_BODY_META No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
1.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of
money
3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Inform Your Interest
3rd December 2022.
Hi friend,
I need God fearing person for profitable business partnership. I'm
grateful for your patience to read this message, I need a mutual
understanding with you as this business is 100% Legal and risk free.
My names are Mr, Daniel Ndoye. The chief operating officer we
discovered an abandoned sum of $15 millions dollars which i want you
stand as next of kin to the deceased fund as you have similar names
with him and once this fund is transferred to your bank account.
I'll come over so that we can move into any business in your country
where we can invest this fund, kindly reply to me urgently and we will
discuss how to achieve this effectively. I'm willing to offer you the
40% of the total amount for your assistance, while the balance shall
be my capital investment in your country when we come over.
Your Full Name..,
Your Cell Phone Number...,
Your Occupation....,
Sex.....,
Your Country.......
I am expecting to read from you soon.
Best Regards,
Daniel Ndoye.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 03 Dec 2022 08:13:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1p1TU1-000Ol5-Nv
for dave@doctor.nl2k.ab.ca;
Sat, 03 Dec 2022 07:27:13 -0700
Resent-From: The Doctor
Resent-Date: Sat, 3 Dec 2022 07:27:13 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f174.google.com ([209.85.128.174]:38488)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1p1OCN-0004Sp-OG
for doctor@doctor.nl2k.ab.ca;
Sat, 03 Dec 2022 01:48:55 -0700
Received: by mail-yw1-f174.google.com with SMTP id 00721157ae682-3bfd998fa53so71009767b3.5
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=ylZofwVVz/cborkFBPDT+jV8UqtMMLEQZGw4Phu5iHU=;
b=CF9i9DnBe0FAFAHX3yrTrkUza1+961DrPXAOn7ar0C4vLDJa9WPBPTQTScsGhf88wH
gp4shC1XbhtuQjfngiHDTTgAbzujCnZGi3EX9aZuv72/gv7Lq/qBnzTrMsU6EJJoKTbK
u44wuwJzwQK5sDbmKyhSSQratAhCJKIX4WuxTD/WeB6yGNpj5QgmL7cRe/5N3agrsyFy
dFHuts8t+CoyF7vdWHtvKvW0w4oZ+0+IDgIimwXBCnJ3KPvQ3Iis/od7Psh//kBQUyVu
2z437FG/l0CxCJWBEZtJ8iwua7ads7vn4J2gCYpST7Eb5Z5FTkM6VsUx/qJDCL6mR1bc
ohew==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=ylZofwVVz/cborkFBPDT+jV8UqtMMLEQZGw4Phu5iHU=;
b=r1SNdib6APrvFMwahpzxZoY0+FNRoT04yIgpO5cfOJmRTxHm/DsDPyF4CRMI6LAKzj
MK8JkNIzufh1WX2rF/5nf+Q9nMc3zaEcsj33PpxWwjC8wkV3VBE1dOdJnhWYMFy+kItf
L5fH6OJSn3zk7zBw+QjmjfRp5lhNrEaJx6n1jqVO9VgMOXGYee3ZNbFdat4Qqbz7Eu7K
qLkGjclIoJnydL/pWQTj05u0Wl/7cNPVix0yZc7VP19rlBSMmiiVGZRaGE4gyXof8SOJ
NZu3H5FZVcxIoa2XrRIrch9d7T+LGNWchzBrDEWcY9wnkQMl3SOw7cWXQz9pzY565Ya8
nOrQ==
X-Gm-Message-State: ANoB5pnuht71mkN9bpVXWn0mJ/jgzokGwismkQZ0iWOoz6q1y6HgT6f9
Cs50IB0JKnkbq/EUmgYA1QQtvegEBdfM9j6kezs=
X-Google-Smtp-Source: AA0mqf4IonwXwQeB/Pl7BmHJaJaEvyvBYHdPl9CI8RcLJEIJDcx/BUCxpzpwJmqEpcLrjrsA8nTfRFBIIpXEwrj57f0=
X-Received: by 2002:a05:690c:e:b0:36b:fbd0:2f6b with SMTP id
bc14-20020a05690c000e00b0036bfbd02f6bmr53296239ywb.387.1670057163750; Sat, 03
Dec 2022 00:46:03 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a05:7010:34c8:b0:314:4f9d:6eea with HTTP; Sat, 3 Dec 2022
00:46:03 -0800 (PST)
Reply-To: fcr23893@gmail.com
From: Daniel Ndoye
Date: Sat, 3 Dec 2022 08:46:03 +0000
Message-ID:
Subject: Inform Your Interest
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 22.5
X-Spam_score_int: 225
X-Spam_bar: ++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: 3rd December 2022. Hi friend, I need God fearing person for
profitable business partnership. I'm grateful for your patience to read this
message, I need a mutual understanding with you as this business is 100%
Legal and risk free [...]
Content analysis details: (22.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.174 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[kabakasedogo[at]gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[fcr23893[at]gmail.com]
2.5 HK_SCAM_N2 BODY: No description available.
2.0 HK_SCAM No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 TVD_PH_BODY_META No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
1.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of
money
3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Inform Your Interest
3rd December 2022.
Hi friend,
I need God fearing person for profitable business partnership. I'm
grateful for your patience to read this message, I need a mutual
understanding with you as this business is 100% Legal and risk free.
My names are Mr, Daniel Ndoye. The chief operating officer we
discovered an abandoned sum of $15 millions dollars which i want you
stand as next of kin to the deceased fund as you have similar names
with him and once this fund is transferred to your bank account.
I'll come over so that we can move into any business in your country
where we can invest this fund, kindly reply to me urgently and we will
discuss how to achieve this effectively. I'm willing to offer you the
40% of the total amount for your assistance, while the balance shall
be my capital investment in your country when we come over.
Your Full Name..,
Your Cell Phone Number...,
Your Occupation....,
Sex.....,
Your Country.......
I am expecting to read from you soon.
Best Regards,
Daniel Ndoye.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments