Nigerian Spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 24 Mar 2023 07:25:03 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1pfhPa-0002YL-2a
for dave@doctor.nl2k.ab.ca;
Fri, 24 Mar 2023 07:24:54 -0600
Resent-From: The Doctor
Resent-Date: Fri, 24 Mar 2023 07:24:54 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f42.google.com ([209.85.208.42]:41558)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1pfdIT-000G0f-2O
for doctor@doctor.nl2k.ab.ca;
Fri, 24 Mar 2023 03:01:38 -0600
Received: by mail-ed1-f42.google.com with SMTP id h8so4986022ede.8
for; Fri, 24 Mar 2023 01:59:18 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1679648352;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=4FKnNgzBci+rlKO/7cJqIDuRg9mRewm8G5NItW1hFPs=;
b=BUxZtMC5G8Ykv1SUAdcgf0xrubHaQTeDjgNDOBNGqeLebqCvvkLkbVRrp5o9MYx59K
7wabciBkJg1VTTygVXQiEYMuEQr8mbv0jFsucwUOoIhitOK2NbFjb3iQ+tPRmlG49Ejv
JwUQYbxW7cBQnH2gDuPOC1co+VQIqirqrZwnFWYd1CXVE32qG0NFlX4/HmkcztTI4gnE
tLu0/7SiHhpEi0kAXnBghSuOZSsFXJpgCXF/XHwfC+oRF5XaRT6E8yRCxNNISPgS0Z1s
HaTX3E0eUHPp9w9VMwHz12A2EWFHLV3NNLDiMpFdZlI5+3IoM+32FN6CYNCKsX/unDSn
lENQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1679648352;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=4FKnNgzBci+rlKO/7cJqIDuRg9mRewm8G5NItW1hFPs=;
b=erKl9aBp3qcsV9jVU1eYNKGjJnYPMcmhROTjhalM1ovpAzHvJx572WA4hAwf2C7b9U
pxuc0gvC+LNPcHMheCsMLhRKk5FvNTZmOsPj4fHB5UaTxtGPfx6se60bvZtHOst7yQ0C
eYCIgChASi5v4Uh3onVoFlGfAh9R3dMz8Sweym8pCJAJvjycNr2L4znZrOZ6U8NsIf0h
76F7pG5Lb/u++X3toHqNLjK0fTSkpmQnC3KNhVR8cMKGho8H04zKff6bwuXPoVCaUph2
17inqSwQus6xq5fzRHsQj2EFQlW2ciiiJ+8GqlVEi7etVPWrbJWKa10RnuJHWiobT/ek
JGdQ==
X-Gm-Message-State: AAQBX9cSw4mSTaijl4J7zdqdnU9kWvwniLQ3/amA/ZVqhTAHrfB9WMxB
3ivWh0Q1kS2csipOay298xh43t8CYdTeYsHaq7w=
X-Google-Smtp-Source: AKy350bCTMZkm9oQO5BwqvIOW6P0Wos3pQ6YEa/Xc75PIAKeWnr1PS3Ez5DvMFZDTPRB+Cpye9Odm/ae3//fAS2tKQA=
X-Received: by 2002:a50:d69a:0:b0:4fb:71d0:6aa8 with SMTP id
r26-20020a50d69a000000b004fb71d06aa8mr1148321edi.0.1679648351733; Fri, 24 Mar
2023 01:59:11 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:7412:419:b0:c3:bb87:20c1 with HTTP; Fri, 24 Mar 2023
01:59:11 -0700 (PDT)
Reply-To: williamsbenth@yahoo.com
From: Mr Williams Benth
Date: Fri, 24 Mar 2023 08:59:11 +0000
Message-ID:
Subject: VERY URGENT
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 19.4
X-Spam_score_int: 194
X-Spam_bar: +++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, How are you today with your family, Hope all
is well?. Please, I would like you to give an urgent attention to this proposal.
I have a very lucrative business transaction which requires your utmost discretion.
Content analysis details: (19.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.42 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.42 listed in wl.mailspike.net]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[mrs.clarissemusa(at)gmail.com]
0.9 URG_BIZ BODY: Contains urgent matter
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
2.6 HK_SCAM_N13 BODY: No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} VERY URGENT
Dear Friend,
How are you today with your family, Hope all is well?. Please, I would
like you to give an urgent attention to this proposal.
I have a very lucrative business transaction which requires your
utmost discretion.
Though, I know it would come to you at uttermost surprise. I am
Mr.Williams Benth, A banker by profession.
Please, I want to transfer the sum of ($12.5Million)into your bank
account. This business is 100% risk free.
Your share will be 40% while 60% for me.
Full details will be send to you on the receipt of your urgent
response by forwarding the following details bellow:
1. Your Full Name................
2. Your Telephone No..........
3. Your Receiving Country................
4. Your Home Address........
Thanks for your anticipated co-operation.
Best regards.
My E-mail Address:...(williamsbenth@yahoo.com) Or WhatsApp Nunber
(+226-56066169)
Mr. Williams Benth,
williamsbenth@yahoo.com,
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 24 Mar 2023 07:25:03 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1pfhPa-0002YL-2a
for dave@doctor.nl2k.ab.ca;
Fri, 24 Mar 2023 07:24:54 -0600
Resent-From: The Doctor
Resent-Date: Fri, 24 Mar 2023 07:24:54 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f42.google.com ([209.85.208.42]:41558)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1pfdIT-000G0f-2O
for doctor@doctor.nl2k.ab.ca;
Fri, 24 Mar 2023 03:01:38 -0600
Received: by mail-ed1-f42.google.com with SMTP id h8so4986022ede.8
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1679648352;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=4FKnNgzBci+rlKO/7cJqIDuRg9mRewm8G5NItW1hFPs=;
b=BUxZtMC5G8Ykv1SUAdcgf0xrubHaQTeDjgNDOBNGqeLebqCvvkLkbVRrp5o9MYx59K
7wabciBkJg1VTTygVXQiEYMuEQr8mbv0jFsucwUOoIhitOK2NbFjb3iQ+tPRmlG49Ejv
JwUQYbxW7cBQnH2gDuPOC1co+VQIqirqrZwnFWYd1CXVE32qG0NFlX4/HmkcztTI4gnE
tLu0/7SiHhpEi0kAXnBghSuOZSsFXJpgCXF/XHwfC+oRF5XaRT6E8yRCxNNISPgS0Z1s
HaTX3E0eUHPp9w9VMwHz12A2EWFHLV3NNLDiMpFdZlI5+3IoM+32FN6CYNCKsX/unDSn
lENQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1679648352;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=4FKnNgzBci+rlKO/7cJqIDuRg9mRewm8G5NItW1hFPs=;
b=erKl9aBp3qcsV9jVU1eYNKGjJnYPMcmhROTjhalM1ovpAzHvJx572WA4hAwf2C7b9U
pxuc0gvC+LNPcHMheCsMLhRKk5FvNTZmOsPj4fHB5UaTxtGPfx6se60bvZtHOst7yQ0C
eYCIgChASi5v4Uh3onVoFlGfAh9R3dMz8Sweym8pCJAJvjycNr2L4znZrOZ6U8NsIf0h
76F7pG5Lb/u++X3toHqNLjK0fTSkpmQnC3KNhVR8cMKGho8H04zKff6bwuXPoVCaUph2
17inqSwQus6xq5fzRHsQj2EFQlW2ciiiJ+8GqlVEi7etVPWrbJWKa10RnuJHWiobT/ek
JGdQ==
X-Gm-Message-State: AAQBX9cSw4mSTaijl4J7zdqdnU9kWvwniLQ3/amA/ZVqhTAHrfB9WMxB
3ivWh0Q1kS2csipOay298xh43t8CYdTeYsHaq7w=
X-Google-Smtp-Source: AKy350bCTMZkm9oQO5BwqvIOW6P0Wos3pQ6YEa/Xc75PIAKeWnr1PS3Ez5DvMFZDTPRB+Cpye9Odm/ae3//fAS2tKQA=
X-Received: by 2002:a50:d69a:0:b0:4fb:71d0:6aa8 with SMTP id
r26-20020a50d69a000000b004fb71d06aa8mr1148321edi.0.1679648351733; Fri, 24 Mar
2023 01:59:11 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:7412:419:b0:c3:bb87:20c1 with HTTP; Fri, 24 Mar 2023
01:59:11 -0700 (PDT)
Reply-To: williamsbenth@yahoo.com
From: Mr Williams Benth
Date: Fri, 24 Mar 2023 08:59:11 +0000
Message-ID:
Subject: VERY URGENT
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 19.4
X-Spam_score_int: 194
X-Spam_bar: +++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, How are you today with your family, Hope all
is well?. Please, I would like you to give an urgent attention to this proposal.
I have a very lucrative business transaction which requires your utmost discretion.
Content analysis details: (19.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.42 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.42 listed in wl.mailspike.net]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[mrs.clarissemusa(at)gmail.com]
0.9 URG_BIZ BODY: Contains urgent matter
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
2.6 HK_SCAM_N13 BODY: No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} VERY URGENT
Dear Friend,
How are you today with your family, Hope all is well?. Please, I would
like you to give an urgent attention to this proposal.
I have a very lucrative business transaction which requires your
utmost discretion.
Though, I know it would come to you at uttermost surprise. I am
Mr.Williams Benth, A banker by profession.
Please, I want to transfer the sum of ($12.5Million)into your bank
account. This business is 100% risk free.
Your share will be 40% while 60% for me.
Full details will be send to you on the receipt of your urgent
response by forwarding the following details bellow:
1. Your Full Name................
2. Your Telephone No..........
3. Your Receiving Country................
4. Your Home Address........
Thanks for your anticipated co-operation.
Best regards.
My E-mail Address:...(williamsbenth@yahoo.com) Or WhatsApp Nunber
(+226-56066169)
Mr. Williams Benth,
williamsbenth@yahoo.com,
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments