Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 10 Jan 2023 08:08:46 -0700
Received: from mail-ed1-f53.google.com ([209.85.208.53]:37449)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1pFGER-000PBQ-3C
for dave@doctor.nl2k.ab.ca;
Tue, 10 Jan 2023 08:08:17 -0700
Received: by mail-ed1-f53.google.com with SMTP id i9so17997275edj.4
for; Tue, 10 Jan 2023 07:05:38 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=z5sY/SlKcm5ylejooSx/mutg30tA20wXOtX/2R8yq/c=;
b=dQmTVz01l2cGDseGuB5VGaeRkJCqTPjhB79r64N4EHenSYJcJEmMrBdnxAu+qFtW2E
Qi9NQcFYGdJLld+TD2WwGm5eILPH5F5fAex4cWuJjzGT5aYbU8AM6T6uFHJcNXtVpKcX
A17D8TPRWPx8hXT0jsSnmI02C4RSkZ0VOPdu+2nfnyYtGLwt6bie6VaC4ctawDliwXdw
BlP+VuRlOt0L3X6P+V1mdEaGiKAq4iGgQyBFvaGzMPJvwjTy6QCQDSa1t5GgSFWkCLiN
YMDm0Vi8eLwp0oVdbZkRxde6aUR2OV3aeVUaVVNNOBVYp0/NxRtai0McmOpiskDQtIv1
3JOw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=z5sY/SlKcm5ylejooSx/mutg30tA20wXOtX/2R8yq/c=;
b=nIjG+sXOX/A4ISR9Sqha/2xXXqRLURIH8oxAoLYWK1Kpvfw4SVu1zPnH7JDvVMMjof
b5MTuz1Kg1+FPX/3wRDo6fyPkRO9a/Z5kFN6WFLPfk51UoCHYrRZiCQh2ws+BbLqkPOS
J5RrebwuGcIkR7+xh7VtBCwh1gdBR+iD3GxY4VrwLIL/l9/hFRpOlEfZjPVwPMX574xE
7bEJ/wrXZhlVDE1IX16TFYmWAcuoN6qFIDdBtjOXG1xIRcTIedGZxRHAEtijvtAeZCRS
+HF/I8pjKpJjdUBSRAwPUrcL99bbS9GHF8dx/RjTXy/AhRMbZ1UpCcrt9kjImFBASX/k
rxBg==
X-Gm-Message-State: AFqh2ko8QcGm86TsnCNdpON6CpW12Mvq/FwIOjV5tiBLTYtcUIelY17i
3PCwfVDred7T6WVsbFKq94VGDm2Ewf88wL8EQm8=
X-Google-Smtp-Source: AMrXdXtlmk//hmOF4W16f3e1qJz7PKt5Ac83vKO7+diLkFYsJKyfn0RgJzvW0UBm5NZZXuHhEdyI4Sl96rTxsKzYH94=
X-Received: by 2002:a05:6402:5002:b0:46b:51e5:832a with SMTP id
p2-20020a056402500200b0046b51e5832amr8975486eda.331.1673363127981; Tue, 10
Jan 2023 07:05:27 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a05:6400:140d:b0:1ed:fadb:6c5 with HTTP; Tue, 10 Jan 2023
07:05:27 -0800 (PST)
Reply-To: alhmed444ali@gmail.com
From: ALI AHMED
Date: Tue, 10 Jan 2023 07:05:27 -0800
Message-ID:
Subject: READ AND GET BACK TO ME
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 25.8
X-Spam_score_int: 258
X-Spam_bar: +++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: From the desk of Mr.Ali Ahmed Auditing manager African Development
Bank, Burkina Faso RE-REMITTANCE OF USD$15 MILLION Dear Friend,
Content analysis details: (25.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.53 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.53 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[bitban770(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[bitban770(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.5 HK_SCAM_N2 BODY: No description available.
2.5 MILLION_USD BODY: Talks about millions of dollars
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
2.0 HK_SCAM No description available.
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
1.0 XFER_LOTSA_MONEY Transfer a lot of money
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
Subject: {SPAM?} READ AND GET BACK TO ME
From the desk of Mr.Ali Ahmed
Auditing manager
African Development Bank,
Burkina Faso
RE-REMITTANCE OF USD$15 MILLION
Dear Friend,
I am Mr.Ali Ahmed,from Burkina Faso in West Africa.
The Manager of Auditing Department of Our Bank .In my department we
discovered an abandoned $15,000,000,00 ( Fifteen Million United States
Dollars). In an account that belongs to this our foreign customer who
died along with his wife and and children in the plane crash.
Since we got information about his death, we have been expecting his
next of kin to come over and claim his money because we cannot release
it unless somebody applies for it as the next of kin or relation to
the deceased, as indicated in our banking guidelines but unfortunately
we learnt that all his supposed next of kin or relation died alongside
with him in the plane crash leaving nobody behind for the claim.It is
therefore upon this discovery that I decided to make this business
proposals to you and release the money to you as next of kin or
relation to the deceased for safety and subsequent disbursement since
nobody is coming for it because I don't want this money to go into the
bank treasury as unclaimed Bill.I will give you more details on your
reply of this mail
Waiting to hear from you
Mr. Ali Ahmed
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 10 Jan 2023 08:08:46 -0700
Received: from mail-ed1-f53.google.com ([209.85.208.53]:37449)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1pFGER-000PBQ-3C
for dave@doctor.nl2k.ab.ca;
Tue, 10 Jan 2023 08:08:17 -0700
Received: by mail-ed1-f53.google.com with SMTP id i9so17997275edj.4
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=z5sY/SlKcm5ylejooSx/mutg30tA20wXOtX/2R8yq/c=;
b=dQmTVz01l2cGDseGuB5VGaeRkJCqTPjhB79r64N4EHenSYJcJEmMrBdnxAu+qFtW2E
Qi9NQcFYGdJLld+TD2WwGm5eILPH5F5fAex4cWuJjzGT5aYbU8AM6T6uFHJcNXtVpKcX
A17D8TPRWPx8hXT0jsSnmI02C4RSkZ0VOPdu+2nfnyYtGLwt6bie6VaC4ctawDliwXdw
BlP+VuRlOt0L3X6P+V1mdEaGiKAq4iGgQyBFvaGzMPJvwjTy6QCQDSa1t5GgSFWkCLiN
YMDm0Vi8eLwp0oVdbZkRxde6aUR2OV3aeVUaVVNNOBVYp0/NxRtai0McmOpiskDQtIv1
3JOw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=z5sY/SlKcm5ylejooSx/mutg30tA20wXOtX/2R8yq/c=;
b=nIjG+sXOX/A4ISR9Sqha/2xXXqRLURIH8oxAoLYWK1Kpvfw4SVu1zPnH7JDvVMMjof
b5MTuz1Kg1+FPX/3wRDo6fyPkRO9a/Z5kFN6WFLPfk51UoCHYrRZiCQh2ws+BbLqkPOS
J5RrebwuGcIkR7+xh7VtBCwh1gdBR+iD3GxY4VrwLIL/l9/hFRpOlEfZjPVwPMX574xE
7bEJ/wrXZhlVDE1IX16TFYmWAcuoN6qFIDdBtjOXG1xIRcTIedGZxRHAEtijvtAeZCRS
+HF/I8pjKpJjdUBSRAwPUrcL99bbS9GHF8dx/RjTXy/AhRMbZ1UpCcrt9kjImFBASX/k
rxBg==
X-Gm-Message-State: AFqh2ko8QcGm86TsnCNdpON6CpW12Mvq/FwIOjV5tiBLTYtcUIelY17i
3PCwfVDred7T6WVsbFKq94VGDm2Ewf88wL8EQm8=
X-Google-Smtp-Source: AMrXdXtlmk//hmOF4W16f3e1qJz7PKt5Ac83vKO7+diLkFYsJKyfn0RgJzvW0UBm5NZZXuHhEdyI4Sl96rTxsKzYH94=
X-Received: by 2002:a05:6402:5002:b0:46b:51e5:832a with SMTP id
p2-20020a056402500200b0046b51e5832amr8975486eda.331.1673363127981; Tue, 10
Jan 2023 07:05:27 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a05:6400:140d:b0:1ed:fadb:6c5 with HTTP; Tue, 10 Jan 2023
07:05:27 -0800 (PST)
Reply-To: alhmed444ali@gmail.com
From: ALI AHMED
Date: Tue, 10 Jan 2023 07:05:27 -0800
Message-ID:
Subject: READ AND GET BACK TO ME
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 25.8
X-Spam_score_int: 258
X-Spam_bar: +++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: From the desk of Mr.Ali Ahmed Auditing manager African Development
Bank, Burkina Faso RE-REMITTANCE OF USD$15 MILLION Dear Friend,
Content analysis details: (25.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.53 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.53 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[bitban770(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[bitban770(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.5 HK_SCAM_N2 BODY: No description available.
2.5 MILLION_USD BODY: Talks about millions of dollars
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
2.0 HK_SCAM No description available.
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
1.0 XFER_LOTSA_MONEY Transfer a lot of money
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
Subject: {SPAM?} READ AND GET BACK TO ME
From the desk of Mr.Ali Ahmed
Auditing manager
African Development Bank,
Burkina Faso
RE-REMITTANCE OF USD$15 MILLION
Dear Friend,
I am Mr.Ali Ahmed,from Burkina Faso in West Africa.
The Manager of Auditing Department of Our Bank .In my department we
discovered an abandoned $15,000,000,00 ( Fifteen Million United States
Dollars). In an account that belongs to this our foreign customer who
died along with his wife and and children in the plane crash.
Since we got information about his death, we have been expecting his
next of kin to come over and claim his money because we cannot release
it unless somebody applies for it as the next of kin or relation to
the deceased, as indicated in our banking guidelines but unfortunately
we learnt that all his supposed next of kin or relation died alongside
with him in the plane crash leaving nobody behind for the claim.It is
therefore upon this discovery that I decided to make this business
proposals to you and release the money to you as next of kin or
relation to the deceased for safety and subsequent disbursement since
nobody is coming for it because I don't want this money to go into the
bank treasury as unclaimed Bill.I will give you more details on your
reply of this mail
Waiting to hear from you
Mr. Ali Ahmed
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments