Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 06 Mar 2023 04:51:46 -0700
Received: from mail-yb1-f193.google.com ([209.85.219.193]:41964)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1pZ9Mq-0007Xq-1u
for dave@doctor.nl2k.ab.ca;
Mon, 06 Mar 2023 04:51:04 -0700
Received: by mail-yb1-f193.google.com with SMTP id i6so7769074ybu.8
for; Mon, 06 Mar 2023 03:49:01 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1678103336;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=2YzccideQHL2TaV9QiUX8ommdvdAPGfRdYWhfHemtTc=;
b=AQVTyeCtoYW5qrdbO9FyCabAHwLMDMl9sDhNaxy6HUlOdTyRC9vOm1bk2zRv9gAIYd
q57khs7WxWpyIl6odw7hHuZTl6bB4k08IBH8yxCvT9jBCF7RGIaA7MHgYNrYZF5bI9ST
okC19+na6TgBWYo9lSmQcWbgnprhmQgwGDbe6Idjw2wXw7FijPP8JPZSwZ6KQpZkIeb/
6rpSZYnDVMC9pdIEeMIjDCsO/+d9EpWEXMXpZZQdo+mCaKZ14PXKncvZdQlOX6Yh8hB1
D8PoktktNiXLuo82hb7NTyiIhALaYSs1CpZnUqlSpSn0XtRNkhtEPuHQYMDLjllebfEQ
yDoA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1678103336;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=2YzccideQHL2TaV9QiUX8ommdvdAPGfRdYWhfHemtTc=;
b=KO2f70eGljjTd0zMj8M5CEcAJWSy/lI00WjAVQZu8Oa8XZ33dL02teax6b3+YvanOr
no3afMIq1flcZdvIvqUWOtZeD66tAs6FkkySjfEIQXu+gOOqUL56m7xaS4lb8cB3UXeh
gWU0+DiMpzUggi4FLXo0G+fsYg1ZUXevd3BAUOD7l8MSY6ioMLO/O3o6zVJ0O7IFbqZB
u36B3f+jEooLvlR6jofiodhhU3SQ4DAuvqH2sNqYVVKfyuLz6e8kleBA/94lTuMLnRB8
XTbqMrLr6ZHFsRs+i6l7oBaOrY80pg56lN4g/Q067DkDhskRe+sFceCxr55Zvhu72fvf
PcMw==
X-Gm-Message-State: AO0yUKVibMQGFhqDL7ZYJA0t9+zgSdIoiJzxODdjTYj7cxqoZ2mokE2e
EnEYjKOMOHTbfggYS8xF0O8hX08fL2P/YvlN65k=
X-Google-Smtp-Source: AK7set+LbZ7/5hexvX0rIZQxdE9+pYY8nv+jK63hj+bjM2ZAdDsTbxSi11gfjK0mt5WaedxrMb9bkckWDyt5Uiw3/Og=
X-Received: by 2002:a05:6902:d2:b0:a8f:a6cc:9657 with SMTP id
i18-20020a05690200d200b00a8fa6cc9657mr4772195ybs.7.1678103335784; Mon, 06 Mar
2023 03:48:55 -0800 (PST)
MIME-Version: 1.0
Reply-To: davidmoonass@gmail.com
From: "Mr.David Moon"
Date: Mon, 6 Mar 2023 11:48:43 +0000
Message-ID:
Subject: Dear Friend,
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000039d6ad05f639e17d"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 19.2
X-Spam_score_int: 192
X-Spam_bar: +++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, I know this means of communication may not be
morally right to you as a person but I also have had a great thought about
it and I have come to this conclusion which I am about to share with you.
Content analysis details: (19.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[ryanjonesemily(at)gmail.com]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.219.193 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.193 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_MONEY_PERCENT X% of a lot of money for you
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} Dear Friend,
--00000000000039d6ad05f639e17d
Content-Type: text/plain; charset="UTF-8"
Dear Friend,
I know this means of communication may not be morally right to you as a
person but I also have had a great thought about it and I have come to this
conclusion which I am about to share with you.
I am Mr.David Moon, the auditing director of International Bank Burkina
Faso. I hope you will cooperate with me as a partner in a project of
transferring an abandoned fund of a late customer of the bank worth
$18,000,000 (Eighteen Million Dollars only).
This will be disbursed or shared between the both of us in these
percentages, 55% for me and 45% for you. Contact me immediately if that is
alright for you so that we can enter into an agreement before we start
processing for the transfer of the funds. If you are satisfied with this
proposal, please provide the below details for the Mutual Confidentiality
Agreement
1. Full Name and Address
2. Occupation and Country of Origin
3. Telephone Number
I wait for your response so that we can commence on this project as soon as
possible.
Regards,
Mr. David Moon
--00000000000039d6ad05f639e17d
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Dear Friend,
I know this means of communication may not be=20
morally right to you as a person but I also have had a great thought=20
about it and I have come to this conclusion which I am about to share=20
with you.
I am Mr.David Moon, the auditing director of=20
International Bank Burkina Faso. I hope you will cooperate with me as a=20
partner in a project of transferring an abandoned fund of a late=20
customer of the bank worth $18,000,000 (Eighteen Million Dollars only).
=
This
will be disbursed or shared between the both of us in these=20
percentages, 55% for me and 45% for you. Contact me immediately if that=20
is alright for you so that we can enter into an agreement before we=20
start processing for the transfer of the funds. If you are satisfied=20
with this proposal, please provide the below details for the Mutual=20
Confidentiality Agreement
1. Full Name and Address
2. Occupation =
and Country of Origin
3. Telephone Number
I wait for your respons=
e so that we can commence on this project as soon as possible.
Regar=
ds,
Mr. David Moon=C2=A0
gmail-adL">
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 06 Mar 2023 04:51:46 -0700
Received: from mail-yb1-f193.google.com ([209.85.219.193]:41964)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1pZ9Mq-0007Xq-1u
for dave@doctor.nl2k.ab.ca;
Mon, 06 Mar 2023 04:51:04 -0700
Received: by mail-yb1-f193.google.com with SMTP id i6so7769074ybu.8
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1678103336;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=2YzccideQHL2TaV9QiUX8ommdvdAPGfRdYWhfHemtTc=;
b=AQVTyeCtoYW5qrdbO9FyCabAHwLMDMl9sDhNaxy6HUlOdTyRC9vOm1bk2zRv9gAIYd
q57khs7WxWpyIl6odw7hHuZTl6bB4k08IBH8yxCvT9jBCF7RGIaA7MHgYNrYZF5bI9ST
okC19+na6TgBWYo9lSmQcWbgnprhmQgwGDbe6Idjw2wXw7FijPP8JPZSwZ6KQpZkIeb/
6rpSZYnDVMC9pdIEeMIjDCsO/+d9EpWEXMXpZZQdo+mCaKZ14PXKncvZdQlOX6Yh8hB1
D8PoktktNiXLuo82hb7NTyiIhALaYSs1CpZnUqlSpSn0XtRNkhtEPuHQYMDLjllebfEQ
yDoA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1678103336;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=2YzccideQHL2TaV9QiUX8ommdvdAPGfRdYWhfHemtTc=;
b=KO2f70eGljjTd0zMj8M5CEcAJWSy/lI00WjAVQZu8Oa8XZ33dL02teax6b3+YvanOr
no3afMIq1flcZdvIvqUWOtZeD66tAs6FkkySjfEIQXu+gOOqUL56m7xaS4lb8cB3UXeh
gWU0+DiMpzUggi4FLXo0G+fsYg1ZUXevd3BAUOD7l8MSY6ioMLO/O3o6zVJ0O7IFbqZB
u36B3f+jEooLvlR6jofiodhhU3SQ4DAuvqH2sNqYVVKfyuLz6e8kleBA/94lTuMLnRB8
XTbqMrLr6ZHFsRs+i6l7oBaOrY80pg56lN4g/Q067DkDhskRe+sFceCxr55Zvhu72fvf
PcMw==
X-Gm-Message-State: AO0yUKVibMQGFhqDL7ZYJA0t9+zgSdIoiJzxODdjTYj7cxqoZ2mokE2e
EnEYjKOMOHTbfggYS8xF0O8hX08fL2P/YvlN65k=
X-Google-Smtp-Source: AK7set+LbZ7/5hexvX0rIZQxdE9+pYY8nv+jK63hj+bjM2ZAdDsTbxSi11gfjK0mt5WaedxrMb9bkckWDyt5Uiw3/Og=
X-Received: by 2002:a05:6902:d2:b0:a8f:a6cc:9657 with SMTP id
i18-20020a05690200d200b00a8fa6cc9657mr4772195ybs.7.1678103335784; Mon, 06 Mar
2023 03:48:55 -0800 (PST)
MIME-Version: 1.0
Reply-To: davidmoonass@gmail.com
From: "Mr.David Moon"
Date: Mon, 6 Mar 2023 11:48:43 +0000
Message-ID:
Subject: Dear Friend,
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000039d6ad05f639e17d"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 19.2
X-Spam_score_int: 192
X-Spam_bar: +++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, I know this means of communication may not be
morally right to you as a person but I also have had a great thought about
it and I have come to this conclusion which I am about to share with you.
Content analysis details: (19.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[ryanjonesemily(at)gmail.com]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.219.193 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.193 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_MONEY_PERCENT X% of a lot of money for you
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} Dear Friend,
--00000000000039d6ad05f639e17d
Content-Type: text/plain; charset="UTF-8"
Dear Friend,
I know this means of communication may not be morally right to you as a
person but I also have had a great thought about it and I have come to this
conclusion which I am about to share with you.
I am Mr.David Moon, the auditing director of International Bank Burkina
Faso. I hope you will cooperate with me as a partner in a project of
transferring an abandoned fund of a late customer of the bank worth
$18,000,000 (Eighteen Million Dollars only).
This will be disbursed or shared between the both of us in these
percentages, 55% for me and 45% for you. Contact me immediately if that is
alright for you so that we can enter into an agreement before we start
processing for the transfer of the funds. If you are satisfied with this
proposal, please provide the below details for the Mutual Confidentiality
Agreement
1. Full Name and Address
2. Occupation and Country of Origin
3. Telephone Number
I wait for your response so that we can commence on this project as soon as
possible.
Regards,
Mr. David Moon
--00000000000039d6ad05f639e17d
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Dear Friend,
I know this means of communication may not be=20
morally right to you as a person but I also have had a great thought=20
about it and I have come to this conclusion which I am about to share=20
with you.
I am Mr.David Moon, the auditing director of=20
International Bank Burkina Faso. I hope you will cooperate with me as a=20
partner in a project of transferring an abandoned fund of a late=20
customer of the bank worth $18,000,000 (Eighteen Million Dollars only).
=
This
will be disbursed or shared between the both of us in these=20
percentages, 55% for me and 45% for you. Contact me immediately if that=20
is alright for you so that we can enter into an agreement before we=20
start processing for the transfer of the funds. If you are satisfied=20
with this proposal, please provide the below details for the Mutual=20
Confidentiality Agreement
1. Full Name and Address
2. Occupation =
and Country of Origin
3. Telephone Number
I wait for your respons=
e so that we can commence on this project as soon as possible.
Regar=
ds,
Mr. David Moon=C2=A0
gmail-adL">
--00000000000039d6ad05f639e17d--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments