Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 17 Jan 2023 08:20:16 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1pHng6-000JX1-04
for dave@doctor.nl2k.ab.ca;
Tue, 17 Jan 2023 08:15:10 -0700
Resent-From: The Doctor
Resent-Date: Tue, 17 Jan 2023 08:15:10 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj1-f48.google.com ([209.85.216.48]:38764)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1pHiJr-000Evg-1Q
for www@doctor.nl2k.ab.ca;
Tue, 17 Jan 2023 02:33:10 -0700
Received: by mail-pj1-f48.google.com with SMTP id a14-20020a17090a70ce00b00229a2f73c56so1442938pjm.3
for; Tue, 17 Jan 2023 01:29:21 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=Blcn4/1fZwRWt2WeKwSyjSc89EgxDar6priCiL/iajE=;
b=XO0L/O6EBaUld8NoBGEM5N52doSPLSGC9Hf1omKWLcC6uMjnXAfLuVoR4TAOsac9e1
vFLrfXzBtT6Z5hm4F9sNsya3ZmbK2CroLKcOMGfjNsaI7PDMMR7VyeBaeqaW8j5HI/eA
DdCond8Z2kVriBDFZEqqSsFwRTE7wZPJ67YZGJDw9/gvOna7ZAHV4mbIExu7vuelh+h1
U02MnQqDmkv3pque4sP1TT0O1gONcqluqO8SapuQ6q0ZxUC++Dj3DktgLiKtjzJ62IIe
YcAn4MAhpA+mAZ9vljCz7ExWBHk8D55tsJvyINLkz0/6gKtwDBjDqmB3ld+6MENOuym8
ovug==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=Blcn4/1fZwRWt2WeKwSyjSc89EgxDar6priCiL/iajE=;
b=FwmXnNdOCdLndXMxn7JpW+3IO59S8Kwn7jO1KtOVmgPn//6rs38njHKeU2KGPTjORF
UJN79goZKd6y/Zeq+mySbQHVUm/9pgZxTH2UyOo5XlorTCIyLDZJAbQ3n42cc1F6GYZN
lB6Ku3fYc+H93eQUHHX3TH9pgjNAJc/TZyDZMXVRz/1TgHwcWqR1zr6wIKgD9C9jvUKE
PJJJ3TO256iYG2I2fgWXoCt3aXdyUdsGeh14AWC0ScEMzI7UgfbiSW2nYN6DO1Ro5aIo
GVCnwzmUfKpwjhsLJblHquThCeQkk1tqB+nWHQ05J70qFj3EB2mdCrzbroRAsjZQl7IM
rCjQ==
X-Gm-Message-State: AFqh2krjZR0uadFxvnH1Sjkk3KO5g/A0mFer5Rp5xqjRHbPa6zYFUxmu
fG3jKbrDiOmTflpHXllb7u45pXZ4WvCxa+CWx4alDSns+5EeRw==
X-Google-Smtp-Source: AMrXdXsuNJwgPdSdaGURvvYuDZcMrqVGKB5M2e+SjnheyZ3F1Z8zSeTCjs0guCISWfu2lGjxafteL0EqbzMrZYJG+mg=
X-Received: by 2002:a05:6870:4151:b0:15b:3207:42aa with SMTP id
r17-20020a056870415100b0015b320742aamr137227oad.157.1673942848335; Tue, 17
Jan 2023 00:07:28 -0800 (PST)
MIME-Version: 1.0
Sender: mrgeorgegumel17@gmail.com
Received: by 2002:a05:6358:910e:b0:eb:d80:1cce with HTTP; Tue, 17 Jan 2023
00:07:27 -0800 (PST)
From: "Mr. Ibrahim Salif"
Date: Tue, 17 Jan 2023 08:07:27 +0000
X-Google-Sender-Auth: 4diIQir8IadCrdtT6lAJv19Qj8g
Message-ID:
Subject: ATTENTION PLEASE
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: www@doctor.nl2k.ab.ca
X-Spam_score: 16.1
X-Spam_score_int: 161
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear friend, My name is Mr. Ibrahim Salif, I am a staff working
with the Bank of Africa here in Ouagadougou,Burkina Faso. I want you to help
me in receiving the sum of Twenty Seven Million Two Hundred thousand Dollars
($27,200,000) into your Bank Account. This fund was deposited in the bank
here by a foreign customer who [...]
Content analysis details: (16.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.216.48 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.216.48 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[ibrahimsalif516(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[mrgeorgegumel17(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLY From and body contain different freemails
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
1.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} ATTENTION PLEASE
Dear friend,
My name is Mr. Ibrahim Salif, I am a staff working with the Bank of
Africa here in Ouagadougou,Burkina Faso.
I want you to help me in receiving the sum of Twenty Seven Million Two
Hundred thousand Dollars ($27,200,000) into your Bank Account. This
fund was deposited in the bank here by a foreign customer who died
accidentally alongside with his entire family members many years ago.
Nobody had asked for this fund till now please contact me through my
private email address: (ibrahimsalif516@yahoo.com) for more details.
Mr. Ibrahim Salif.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 17 Jan 2023 08:20:16 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1pHng6-000JX1-04
for dave@doctor.nl2k.ab.ca;
Tue, 17 Jan 2023 08:15:10 -0700
Resent-From: The Doctor
Resent-Date: Tue, 17 Jan 2023 08:15:10 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj1-f48.google.com ([209.85.216.48]:38764)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1pHiJr-000Evg-1Q
for www@doctor.nl2k.ab.ca;
Tue, 17 Jan 2023 02:33:10 -0700
Received: by mail-pj1-f48.google.com with SMTP id a14-20020a17090a70ce00b00229a2f73c56so1442938pjm.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=Blcn4/1fZwRWt2WeKwSyjSc89EgxDar6priCiL/iajE=;
b=XO0L/O6EBaUld8NoBGEM5N52doSPLSGC9Hf1omKWLcC6uMjnXAfLuVoR4TAOsac9e1
vFLrfXzBtT6Z5hm4F9sNsya3ZmbK2CroLKcOMGfjNsaI7PDMMR7VyeBaeqaW8j5HI/eA
DdCond8Z2kVriBDFZEqqSsFwRTE7wZPJ67YZGJDw9/gvOna7ZAHV4mbIExu7vuelh+h1
U02MnQqDmkv3pque4sP1TT0O1gONcqluqO8SapuQ6q0ZxUC++Dj3DktgLiKtjzJ62IIe
YcAn4MAhpA+mAZ9vljCz7ExWBHk8D55tsJvyINLkz0/6gKtwDBjDqmB3ld+6MENOuym8
ovug==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=Blcn4/1fZwRWt2WeKwSyjSc89EgxDar6priCiL/iajE=;
b=FwmXnNdOCdLndXMxn7JpW+3IO59S8Kwn7jO1KtOVmgPn//6rs38njHKeU2KGPTjORF
UJN79goZKd6y/Zeq+mySbQHVUm/9pgZxTH2UyOo5XlorTCIyLDZJAbQ3n42cc1F6GYZN
lB6Ku3fYc+H93eQUHHX3TH9pgjNAJc/TZyDZMXVRz/1TgHwcWqR1zr6wIKgD9C9jvUKE
PJJJ3TO256iYG2I2fgWXoCt3aXdyUdsGeh14AWC0ScEMzI7UgfbiSW2nYN6DO1Ro5aIo
GVCnwzmUfKpwjhsLJblHquThCeQkk1tqB+nWHQ05J70qFj3EB2mdCrzbroRAsjZQl7IM
rCjQ==
X-Gm-Message-State: AFqh2krjZR0uadFxvnH1Sjkk3KO5g/A0mFer5Rp5xqjRHbPa6zYFUxmu
fG3jKbrDiOmTflpHXllb7u45pXZ4WvCxa+CWx4alDSns+5EeRw==
X-Google-Smtp-Source: AMrXdXsuNJwgPdSdaGURvvYuDZcMrqVGKB5M2e+SjnheyZ3F1Z8zSeTCjs0guCISWfu2lGjxafteL0EqbzMrZYJG+mg=
X-Received: by 2002:a05:6870:4151:b0:15b:3207:42aa with SMTP id
r17-20020a056870415100b0015b320742aamr137227oad.157.1673942848335; Tue, 17
Jan 2023 00:07:28 -0800 (PST)
MIME-Version: 1.0
Sender: mrgeorgegumel17@gmail.com
Received: by 2002:a05:6358:910e:b0:eb:d80:1cce with HTTP; Tue, 17 Jan 2023
00:07:27 -0800 (PST)
From: "Mr. Ibrahim Salif"
Date: Tue, 17 Jan 2023 08:07:27 +0000
X-Google-Sender-Auth: 4diIQir8IadCrdtT6lAJv19Qj8g
Message-ID:
Subject: ATTENTION PLEASE
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: www@doctor.nl2k.ab.ca
X-Spam_score: 16.1
X-Spam_score_int: 161
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear friend, My name is Mr. Ibrahim Salif, I am a staff working
with the Bank of Africa here in Ouagadougou,Burkina Faso. I want you to help
me in receiving the sum of Twenty Seven Million Two Hundred thousand Dollars
($27,200,000) into your Bank Account. This fund was deposited in the bank
here by a foreign customer who [...]
Content analysis details: (16.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.216.48 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.216.48 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[ibrahimsalif516(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[mrgeorgegumel17(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLY From and body contain different freemails
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
1.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} ATTENTION PLEASE
Dear friend,
My name is Mr. Ibrahim Salif, I am a staff working with the Bank of
Africa here in Ouagadougou,Burkina Faso.
I want you to help me in receiving the sum of Twenty Seven Million Two
Hundred thousand Dollars ($27,200,000) into your Bank Account. This
fund was deposited in the bank here by a foreign customer who died
accidentally alongside with his entire family members many years ago.
Nobody had asked for this fund till now please contact me through my
private email address: (ibrahimsalif516@yahoo.com) for more details.
Mr. Ibrahim Salif.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments