Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 01 Jan 2023 23:05:58 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1pCDww-000G85-0X
for dave@doctor.nl2k.ab.ca;
Sun, 01 Jan 2023 23:05:30 -0700
Resent-From: The Doctor
Resent-Date: Sun, 1 Jan 2023 23:05:30 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f53.google.com ([209.85.218.53]:46691)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1pCCdT-0007D2-0E
for doctor@doctor.nl2k.ab.ca;
Sun, 01 Jan 2023 21:41:23 -0700
Received: by mail-ej1-f53.google.com with SMTP id fy8so485455ejc.13
for; Sun, 01 Jan 2023 20:38:50 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:from:to:cc:subject:date:message-id:reply-to;
bh=4yUASsBmKh1cX1V3+QBsmSvtvrvr6jfN0VVnpY8xa0w=;
b=X1f/0rEADNnaS9qZJDwsTfrz87qX9bXXPOpJHJoEcS3lchJ/p1VOHnVgeLEHSlggtR
FOugwQPSOxnai3f4fBalKiEYhmfvWRjoEQ1/MBDh4MOMe3Dez5nAQcCicW9BEY8TBpve
N0i6frbzXQTN8beHgNTqnLxKrbIvYVw18U2EJVad6FpoKIa/KUfXfyZMamxrvZ9XuDbX
VrzHLUwJDYO1uuPcjUFZ6w/SNbSBJizChH21sXIOSOEaW8cq3p0TeS+GeJBBDwkKDgVU
ocatbTOfJiMyKo6aoSyRZCD1e3cAJAUisTwJywzngw4gAfbBdQ72GYFmBEq4+HFg1C9p
l0cQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=4yUASsBmKh1cX1V3+QBsmSvtvrvr6jfN0VVnpY8xa0w=;
b=0Ux10+yi4Li8JFyX6uUFYzeO48u741mU9kztGAVNJjIcvFNtR91DuGnm7EnbPS3UDq
hUN7gLPdtJ8qZY1O1PvuRiZYox5g/JFsbey+daxQm4j8/hzMM/dndBNhas9jHe9kxR1v
9r+J/01E+7LUDJpQmYjfvP5+j2CuC7R2PRegfnycfYOvTRmh3h9LWccGToC9w1ilWko6
CNFr1Nvdrt0Czx0BBj6imZv7cptB6bFvxdJ1UmQ6bjxRKsm3mrUHC8aRr8WDzQxDCTxZ
aqLwuWuomIIpYV9C9pKRNRM03lkFK8n3IcEy2PhnQgryKhCNel4lRJxUD7pLE2LNTnJi
+IkA==
X-Gm-Message-State: AFqh2koCk26F0lWqK3UzWBsRhieek06hclBd+2Mcp9GeltPG5CHkFUCD
E6hVKT4mvrQGph15iJB2qU5vs4kjFns9qGzh+fM=
X-Google-Smtp-Source: AMrXdXvXQnyy4pYeMxWPvcJuSV1A++d2QWy3VqEEgRVxgL568JZWrD6fkJ0JMwHyIPLwGZ5sp6MxuXgEFwSmICP6XRQ=
X-Received: by 2002:a17:906:7119:b0:7ae:39b4:7208 with SMTP id
x25-20020a170906711900b007ae39b47208mr3834640ejj.766.1672634323490; Sun, 01
Jan 2023 20:38:43 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a05:7208:320a:b0:5e:b2b5:22a3 with HTTP; Sun, 1 Jan 2023
20:38:42 -0800 (PST)
Reply-To: mrabdullahibrahim@barid.com
From: "Mr. Abdullah Ibrahim"
Date: Sun, 1 Jan 2023 20:38:42 -0800
Message-ID:
Subject: As-salaam Aliekum....
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 17.1
X-Spam_score_int: 171
X-Spam_bar: +++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, Peace be upon you, Please kindly pardon me for
any inconvenience this letter may cost you because I know it may come to
you as a surprise as we have no previous correspondence. I got your contact
through internet search [...]
Content analysis details: (17.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.218.53 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[mribrahimalassane45[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[mribrahimalassane45[at]gmail.com]
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
1.4 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.53 listed in wl.mailspike.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.0 TVD_PH_BODY_META No description available.
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} As-salaam Aliekum....
Dear Friend,
Peace be upon you,
Please kindly pardon me for any inconvenience this letter may cost you
because I know it may come to you as a surprise as we have no previous
correspondence. I got your contact through internet search as I was
searching for an assistant, that is why I decided to appeal to you as
a matter of urgency about ($4,700,000.00) Four Million Seven Hundred
Thousand Dollars. It is an unequivocal fact that we=E2=80=99ve not met nor
communicated before but due to the true revelation that I should share
this with you.
My name is Mr. Abdullah Ibrahim Accountant of integrated finance of
Bank of Africa BOA here in West Africa, Thus for your indulgence and
assistance (morally and financially), i propose a 35% share of the
total amount to you after receiving the funds successfully, and i need
your assurance of trust that you will not deny me my share once the
fund is credited to your personal bank account, so kindly state your
interest by replying immediately and I shall furnish you with details
and procedures preceding the transaction. Hoping to receive your reply
to my private E-mail (mrabdullahibrahim@barid.com).
ALLAH BLESS YOU
Mr. Abdullah Ibrahim
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 01 Jan 2023 23:05:58 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1pCDww-000G85-0X
for dave@doctor.nl2k.ab.ca;
Sun, 01 Jan 2023 23:05:30 -0700
Resent-From: The Doctor
Resent-Date: Sun, 1 Jan 2023 23:05:30 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f53.google.com ([209.85.218.53]:46691)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1pCCdT-0007D2-0E
for doctor@doctor.nl2k.ab.ca;
Sun, 01 Jan 2023 21:41:23 -0700
Received: by mail-ej1-f53.google.com with SMTP id fy8so485455ejc.13
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:from:to:cc:subject:date:message-id:reply-to;
bh=4yUASsBmKh1cX1V3+QBsmSvtvrvr6jfN0VVnpY8xa0w=;
b=X1f/0rEADNnaS9qZJDwsTfrz87qX9bXXPOpJHJoEcS3lchJ/p1VOHnVgeLEHSlggtR
FOugwQPSOxnai3f4fBalKiEYhmfvWRjoEQ1/MBDh4MOMe3Dez5nAQcCicW9BEY8TBpve
N0i6frbzXQTN8beHgNTqnLxKrbIvYVw18U2EJVad6FpoKIa/KUfXfyZMamxrvZ9XuDbX
VrzHLUwJDYO1uuPcjUFZ6w/SNbSBJizChH21sXIOSOEaW8cq3p0TeS+GeJBBDwkKDgVU
ocatbTOfJiMyKo6aoSyRZCD1e3cAJAUisTwJywzngw4gAfbBdQ72GYFmBEq4+HFg1C9p
l0cQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=4yUASsBmKh1cX1V3+QBsmSvtvrvr6jfN0VVnpY8xa0w=;
b=0Ux10+yi4Li8JFyX6uUFYzeO48u741mU9kztGAVNJjIcvFNtR91DuGnm7EnbPS3UDq
hUN7gLPdtJ8qZY1O1PvuRiZYox5g/JFsbey+daxQm4j8/hzMM/dndBNhas9jHe9kxR1v
9r+J/01E+7LUDJpQmYjfvP5+j2CuC7R2PRegfnycfYOvTRmh3h9LWccGToC9w1ilWko6
CNFr1Nvdrt0Czx0BBj6imZv7cptB6bFvxdJ1UmQ6bjxRKsm3mrUHC8aRr8WDzQxDCTxZ
aqLwuWuomIIpYV9C9pKRNRM03lkFK8n3IcEy2PhnQgryKhCNel4lRJxUD7pLE2LNTnJi
+IkA==
X-Gm-Message-State: AFqh2koCk26F0lWqK3UzWBsRhieek06hclBd+2Mcp9GeltPG5CHkFUCD
E6hVKT4mvrQGph15iJB2qU5vs4kjFns9qGzh+fM=
X-Google-Smtp-Source: AMrXdXvXQnyy4pYeMxWPvcJuSV1A++d2QWy3VqEEgRVxgL568JZWrD6fkJ0JMwHyIPLwGZ5sp6MxuXgEFwSmICP6XRQ=
X-Received: by 2002:a17:906:7119:b0:7ae:39b4:7208 with SMTP id
x25-20020a170906711900b007ae39b47208mr3834640ejj.766.1672634323490; Sun, 01
Jan 2023 20:38:43 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a05:7208:320a:b0:5e:b2b5:22a3 with HTTP; Sun, 1 Jan 2023
20:38:42 -0800 (PST)
Reply-To: mrabdullahibrahim@barid.com
From: "Mr. Abdullah Ibrahim"
Date: Sun, 1 Jan 2023 20:38:42 -0800
Message-ID:
Subject: As-salaam Aliekum....
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 17.1
X-Spam_score_int: 171
X-Spam_bar: +++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, Peace be upon you, Please kindly pardon me for
any inconvenience this letter may cost you because I know it may come to
you as a surprise as we have no previous correspondence. I got your contact
through internet search [...]
Content analysis details: (17.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.218.53 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[mribrahimalassane45[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[mribrahimalassane45[at]gmail.com]
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
1.4 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.53 listed in wl.mailspike.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.0 TVD_PH_BODY_META No description available.
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} As-salaam Aliekum....
Dear Friend,
Peace be upon you,
Please kindly pardon me for any inconvenience this letter may cost you
because I know it may come to you as a surprise as we have no previous
correspondence. I got your contact through internet search as I was
searching for an assistant, that is why I decided to appeal to you as
a matter of urgency about ($4,700,000.00) Four Million Seven Hundred
Thousand Dollars. It is an unequivocal fact that we=E2=80=99ve not met nor
communicated before but due to the true revelation that I should share
this with you.
My name is Mr. Abdullah Ibrahim Accountant of integrated finance of
Bank of Africa BOA here in West Africa, Thus for your indulgence and
assistance (morally and financially), i propose a 35% share of the
total amount to you after receiving the funds successfully, and i need
your assurance of trust that you will not deny me my share once the
fund is credited to your personal bank account, so kindly state your
interest by replying immediately and I shall furnish you with details
and procedures preceding the transaction. Hoping to receive your reply
to my private E-mail (mrabdullahibrahim@barid.com).
ALLAH BLESS YOU
Mr. Abdullah Ibrahim
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments