Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 15 Dec 2022 16:44:27 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1p5xtq-000HPL-0I
for dave@doctor.nl2k.ab.ca;
Thu, 15 Dec 2022 16:44:26 -0700
Resent-From: The Doctor
Resent-Date: Thu, 15 Dec 2022 16:44:26 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oi1-f181.google.com ([209.85.167.181]:43847)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1p5u12-000Lid-1j
for doctor@doctor.nl2k.ab.ca;
Thu, 15 Dec 2022 12:35:40 -0700
Received: by mail-oi1-f181.google.com with SMTP id s187so61211oie.10
for; Thu, 15 Dec 2022 11:33:07 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=kEgZ/rGRo+aaXI8dXLP6L4i1PpDxjjZuo+pEY+8blzs=;
b=TN7gZciwx3BLe6MukNRbiY8E/HB9O10Epxh086Ld7DcGvHjDsoyyCabI+DD23sBoGW
C+jism2MkbzkN18flexzxhgGPG6GBsKbfC6GsnbHeiPp/eZgNG+VoIPIozobmKVjTcT8
sVms8PIZpYBdBClTZtqPfVUg3uOwwzouNsBOSl3FH5gR56rNiwj1KXJCwfwUpQigfoEM
dMw7bhgf/sdGS7UhhFelmRN0XVy2Y3HupjdqgEC5Hgk/+uv2kN6ltJ+fzP7RYdvPXwIn
5ieBOJC9Qe6h5QqdSKYYA98+nPxSKysdi8uxXfZmh34nv35srWJrZk/GdC1vV2ZerPId
h8XA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=kEgZ/rGRo+aaXI8dXLP6L4i1PpDxjjZuo+pEY+8blzs=;
b=gwM37GsVVWWcepknSpgJKwPtL1KPc7CNhsTiOUblJZy+mdzdqZ6QbjMzZqRR3+OPgF
lyg/hw2yuzC7bCFN2RFdaUi+0bwnNWJvApaxFOsw8VmLtl7B89cgsV1psxu4tnosd7YA
PIeMxfKJZO1QiFeriF3k+cbFps0U4jZkX4zmI6B88e207Y86YiA2kexTZNLNwlZVQTyq
J/PRZlgZdqkBxL1AlJx3vgmpzxtWadfMPoz4bKcLgUN96Wcp/oMWR6cv5fCjbgRmy5iN
fyYDn0GYQ/G2P/ShuWUj+AzqI8JJbZUcsJ5zKWSLkNnqoAEM4rjcIMMn28LGJK4oi0OY
tFvA==
X-Gm-Message-State: ANoB5pmi22cJNDJnZs4Z9VKhCtAM3zXVxAntvJWAyeLHEJXROXZwvbCF
0zmT07AMQyWo4uSrg8hcIjhIEh9Yhk3mraEGCZw=
X-Google-Smtp-Source: AA0mqf4mrd4UM4GqNXfSzlWmwrZimcJUT2TArm49vp78tKHWqoednjsNSsrfPVYUhiOsUz5s6Olu0Wg9Ch9x4SRZR3A=
X-Received: by 2002:a05:6808:210e:b0:35e:b032:9cb3 with SMTP id
r14-20020a056808210e00b0035eb0329cb3mr471458oiw.170.1671132782084; Thu, 15
Dec 2022 11:33:02 -0800 (PST)
MIME-Version: 1.0
Reply-To: faustinamoussou42@gmail.com
From: Faustin Amoussou
Date: Thu, 15 Dec 2022 11:32:52 -0800
Message-ID:
Subject: PLEASE REPLY URGENTLY FOR MORE DETAILS.
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000d9482705efe2eba0"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 15.6
X-Spam_score_int: 156
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello Dearest, In the name of Allah the Merciful Peace be
upon you and Allah mercy and blessings be upon you. FROM Mr . Staff of Bank
Of Africa in Burkina Faso. I would like you to indicate your interest to
receive the transfer of ($11.3) Million Dollars which I will like you to stand
as the next of kin to my [...]
Content analysis details: (15.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.167.181 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[sanaabdoulkarim21[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[faustinamoussou42[at]gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[faustinamoussou42[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.181 listed in wl.mailspike.net]
2.5 HK_SCAM_N2 BODY: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 HK_SCAM No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} PLEASE REPLY URGENTLY FOR MORE DETAILS.
--000000000000d9482705efe2eba0
Content-Type: text/plain; charset="UTF-8"
Hello Dearest,
In the name of Allah the Merciful
Peace be upon you and Allah mercy and blessings be upon you.
FROM Mr . Staff of Bank Of Africa in Burkina Faso. I would like you to
indicate your interest to receive the transfer of ($11.3) Million Dollars
which I will like you to stand as the next of kin to my late client whose
account is presently dormant for claims. if you are interested,indicate and
i will intimate you with the method of application and how you can apply to
the bank.
Now my questions are:
1) Can you handle this project?
2) Can I give you this trust?
so i will like you to send to me those informations for easy and effective
communication.Upon receipt of your reply, I will send to you by fax or
email the text of the application form.I will not fail to bring to your
notice that this transaction is hitch-free and that you should not
entertain any atom of fear. You should contact me immediately as soon as
you receive this letter,if only you are interested and ready to help On
this:
I am waiting for your urgent mail.
Best Regards.
Mr. Faustin Amoussou.
--000000000000d9482705efe2eba0
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--000000000000d9482705efe2eba0--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 15 Dec 2022 16:44:27 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1p5xtq-000HPL-0I
for dave@doctor.nl2k.ab.ca;
Thu, 15 Dec 2022 16:44:26 -0700
Resent-From: The Doctor
Resent-Date: Thu, 15 Dec 2022 16:44:26 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oi1-f181.google.com ([209.85.167.181]:43847)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1p5u12-000Lid-1j
for doctor@doctor.nl2k.ab.ca;
Thu, 15 Dec 2022 12:35:40 -0700
Received: by mail-oi1-f181.google.com with SMTP id s187so61211oie.10
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=kEgZ/rGRo+aaXI8dXLP6L4i1PpDxjjZuo+pEY+8blzs=;
b=TN7gZciwx3BLe6MukNRbiY8E/HB9O10Epxh086Ld7DcGvHjDsoyyCabI+DD23sBoGW
C+jism2MkbzkN18flexzxhgGPG6GBsKbfC6GsnbHeiPp/eZgNG+VoIPIozobmKVjTcT8
sVms8PIZpYBdBClTZtqPfVUg3uOwwzouNsBOSl3FH5gR56rNiwj1KXJCwfwUpQigfoEM
dMw7bhgf/sdGS7UhhFelmRN0XVy2Y3HupjdqgEC5Hgk/+uv2kN6ltJ+fzP7RYdvPXwIn
5ieBOJC9Qe6h5QqdSKYYA98+nPxSKysdi8uxXfZmh34nv35srWJrZk/GdC1vV2ZerPId
h8XA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=kEgZ/rGRo+aaXI8dXLP6L4i1PpDxjjZuo+pEY+8blzs=;
b=gwM37GsVVWWcepknSpgJKwPtL1KPc7CNhsTiOUblJZy+mdzdqZ6QbjMzZqRR3+OPgF
lyg/hw2yuzC7bCFN2RFdaUi+0bwnNWJvApaxFOsw8VmLtl7B89cgsV1psxu4tnosd7YA
PIeMxfKJZO1QiFeriF3k+cbFps0U4jZkX4zmI6B88e207Y86YiA2kexTZNLNwlZVQTyq
J/PRZlgZdqkBxL1AlJx3vgmpzxtWadfMPoz4bKcLgUN96Wcp/oMWR6cv5fCjbgRmy5iN
fyYDn0GYQ/G2P/ShuWUj+AzqI8JJbZUcsJ5zKWSLkNnqoAEM4rjcIMMn28LGJK4oi0OY
tFvA==
X-Gm-Message-State: ANoB5pmi22cJNDJnZs4Z9VKhCtAM3zXVxAntvJWAyeLHEJXROXZwvbCF
0zmT07AMQyWo4uSrg8hcIjhIEh9Yhk3mraEGCZw=
X-Google-Smtp-Source: AA0mqf4mrd4UM4GqNXfSzlWmwrZimcJUT2TArm49vp78tKHWqoednjsNSsrfPVYUhiOsUz5s6Olu0Wg9Ch9x4SRZR3A=
X-Received: by 2002:a05:6808:210e:b0:35e:b032:9cb3 with SMTP id
r14-20020a056808210e00b0035eb0329cb3mr471458oiw.170.1671132782084; Thu, 15
Dec 2022 11:33:02 -0800 (PST)
MIME-Version: 1.0
Reply-To: faustinamoussou42@gmail.com
From: Faustin Amoussou
Date: Thu, 15 Dec 2022 11:32:52 -0800
Message-ID:
Subject: PLEASE REPLY URGENTLY FOR MORE DETAILS.
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000d9482705efe2eba0"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 15.6
X-Spam_score_int: 156
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello Dearest, In the name of Allah the Merciful Peace be
upon you and Allah mercy and blessings be upon you. FROM Mr . Staff of Bank
Of Africa in Burkina Faso. I would like you to indicate your interest to
receive the transfer of ($11.3) Million Dollars which I will like you to stand
as the next of kin to my [...]
Content analysis details: (15.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.167.181 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[sanaabdoulkarim21[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[faustinamoussou42[at]gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[faustinamoussou42[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.181 listed in wl.mailspike.net]
2.5 HK_SCAM_N2 BODY: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 HK_SCAM No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} PLEASE REPLY URGENTLY FOR MORE DETAILS.
--000000000000d9482705efe2eba0
Content-Type: text/plain; charset="UTF-8"
Hello Dearest,
In the name of Allah the Merciful
Peace be upon you and Allah mercy and blessings be upon you.
FROM Mr . Staff of Bank Of Africa in Burkina Faso. I would like you to
indicate your interest to receive the transfer of ($11.3) Million Dollars
which I will like you to stand as the next of kin to my late client whose
account is presently dormant for claims. if you are interested,indicate and
i will intimate you with the method of application and how you can apply to
the bank.
Now my questions are:
1) Can you handle this project?
2) Can I give you this trust?
so i will like you to send to me those informations for easy and effective
communication.Upon receipt of your reply, I will send to you by fax or
email the text of the application form.I will not fail to bring to your
notice that this transaction is hitch-free and that you should not
entertain any atom of fear. You should contact me immediately as soon as
you receive this letter,if only you are interested and ready to help On
this:
I am waiting for your urgent mail.
Best Regards.
Mr. Faustin Amoussou.
--000000000000d9482705efe2eba0
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hello Dearest,
In the name of Allah the Merciful
>Peace be upon you and Allah mercy and blessings be upon you.
FROM M=
r . Staff of Bank Of Africa in Burkina Faso. I would like you to indicate y=
our interest to receive the transfer of ($11.3) Million Dollars which I wil=
l like you to stand as the next of kin to my late client whose account is p=
resently dormant for claims. if you are interested,indicate and i will inti=
mate you with the method of application and how you can apply to the bank.<=
br>
Now my questions are:
1) Can you handle this project?
2) Can I=
give you this trust?
so i will like you to send to me those informa=
tions for easy and effective communication.Upon receipt of your reply, I wi=
ll send to you by fax or email the text of the application form.I will not =
fail to bring to your notice that this transaction is hitch-free and that y=
ou should not entertain any atom of fear. You should contact me immediately=
as soon as you receive this letter,if only you are interested and ready to=
help On this:
I am waiting for your urgent mail.
Best Regard=
s.
Mr. Faustin Amoussou.
In the name of Allah the Merciful
>Peace be upon you and Allah mercy and blessings be upon you.
FROM M=
r . Staff of Bank Of Africa in Burkina Faso. I would like you to indicate y=
our interest to receive the transfer of ($11.3) Million Dollars which I wil=
l like you to stand as the next of kin to my late client whose account is p=
resently dormant for claims. if you are interested,indicate and i will inti=
mate you with the method of application and how you can apply to the bank.<=
br>
Now my questions are:
1) Can you handle this project?
2) Can I=
give you this trust?
so i will like you to send to me those informa=
tions for easy and effective communication.Upon receipt of your reply, I wi=
ll send to you by fax or email the text of the application form.I will not =
fail to bring to your notice that this transaction is hitch-free and that y=
ou should not entertain any atom of fear. You should contact me immediately=
as soon as you receive this letter,if only you are interested and ready to=
help On this:
I am waiting for your urgent mail.
Best Regard=
s.
Mr. Faustin Amoussou.
--000000000000d9482705efe2eba0--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments