Nigerian investment spam from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 10 Apr 2023 08:24:48 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1plsR9-000Lsz-1p
for dave@doctor.nl2k.ab.ca;
Mon, 10 Apr 2023 08:24:03 -0600
Resent-From: The Doctor
Resent-Date: Mon, 10 Apr 2023 08:24:03 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f193.google.com ([209.85.208.193]:45688)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1plpkM-000En1-0X
for sales@nk.ca;
Mon, 10 Apr 2023 05:31:45 -0600
Received: by mail-lj1-f193.google.com with SMTP id be27so4983496ljb.12
for; Mon, 10 Apr 2023 04:29:43 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1681126176;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=9AZv42qlSRohHS9Hwm8wKlP/yXttfsWcGDqMkdbsZfs=;
b=PoVjGJbwo0Evp6Dwl1eOPqRuYtOQ1wGK53CAHo7COIIC4/VfMIxUG090srMRR3R9/x
vuK7P+zZWqxO/DmYHCVA6qhS+LkNFB0/UXdlCm2gOKTnnlti8MCAPf08w0mnZA5vFfry
wYlPo6EajocRYKzEe8J40LGHxS7M8T62aaeBVbvFYMOzmxdgcbViaYsdFdvqvTygcb+C
T84Ugi7Zzdnrli4qmNxZzRAf2iVU2sI8iub8xCsX6ps4+8ZnT8dx7ZfM9SqsQXM6ZQK6
lfnD5PTFXp5qGmK12tfslAsjs9THMp/X/gMZUKWwVS7tdzADe6WGRhsVW3HcKmJfGuNN
nzcA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1681126176;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=9AZv42qlSRohHS9Hwm8wKlP/yXttfsWcGDqMkdbsZfs=;
b=A6LeKIspadKa4SHgC6bSHes25fMNbPLZoPVfqmzbjA39RJmbRlXO1WHjUWq4T5vol0
/cH6PYdDNQjTS21vXDZO/f4XMEtXGSJYIwjsLUBIJ6mGgHZ3uUzCANb3Vu23uhFV+Pur
iRBxsi9DQHUbvi15K761j/kuzCFxyb2NPC2nSFJbX63z6/iDA5w9jK1rBrjom3NeH+bC
EiV549dwUWPBNYo4N91TlVcTdK2+hgXBe6+ZZ8BjLC4ndKh7i87A3tj9w5r5qdzE1sdZ
6QkXNjgHqVNeTicVOjb+Yzoa92V27Ewl4nmkNJSDtHLyzLIizbkTJ/Zytwbv+bBH41mJ
miCg==
X-Gm-Message-State: AAQBX9fF5+zeKDilp/UCmtw1fInCodbWzqkyc4DAFO25xpUtRX9znF6I
QPRzVb7q+JLXQZqYiySnc1pvqsCXSSIVUn6MEp0=
X-Google-Smtp-Source: AKy350ZBjr67dzlH8eUsg3KPEyb8DGcQVPKqa9xzaV+xPhxNbinM/k6BgIcXaCFMK4+1mMyRd3SvBvgzLC59GLKGSyc=
X-Received: by 2002:a2e:2e18:0:b0:29b:d21c:e859 with SMTP id
u24-20020a2e2e18000000b0029bd21ce859mr2871379lju.3.1681126176514; Mon, 10 Apr
2023 04:29:36 -0700 (PDT)
MIME-Version: 1.0
Reply-To: magidiyusuf13@gmail.com
From: Magid Yusuf
Date: Mon, 10 Apr 2023 13:29:25 +0200
Message-ID:
Subject: INVESTMENT REPRESENTATIVE
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000092e6ea05f8f9b079"
Bcc: sales@nk.ca
X-Spam_score: 11.7
X-Spam_score_int: 117
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: My Dear Friend, I am glad to contact you, and hope everything
is going fine with you and your family. My email correspondence is to seek
your assistance as an overseas representative for an investment involving
a large volume of funds.
Content analysis details: (11.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.193 listed in list.dnswl.org]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[mustafatamawe21(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[magidiyusuf13(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[mustafatamawe21(at)gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.193 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
Subject: {SPAM?} INVESTMENT REPRESENTATIVE
--00000000000092e6ea05f8f9b079
Content-Type: text/plain; charset="UTF-8"
My Dear Friend,
I am glad to contact you, and hope everything is going fine with you and
your family.
My email correspondence is to seek your assistance as an overseas
representative for an investment involving a large volume of funds.
Please, I will provide more details about the transaction if you are
willing to handle such a project and also let you know your entitlement for
the solicited role.
I shall be expecting your quick reply.
Best Regards,
Magid Yusuf
--00000000000092e6ea05f8f9b079
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--00000000000092e6ea05f8f9b079--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 10 Apr 2023 08:24:48 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1plsR9-000Lsz-1p
for dave@doctor.nl2k.ab.ca;
Mon, 10 Apr 2023 08:24:03 -0600
Resent-From: The Doctor
Resent-Date: Mon, 10 Apr 2023 08:24:03 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f193.google.com ([209.85.208.193]:45688)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1plpkM-000En1-0X
for sales@nk.ca;
Mon, 10 Apr 2023 05:31:45 -0600
Received: by mail-lj1-f193.google.com with SMTP id be27so4983496ljb.12
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1681126176;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=9AZv42qlSRohHS9Hwm8wKlP/yXttfsWcGDqMkdbsZfs=;
b=PoVjGJbwo0Evp6Dwl1eOPqRuYtOQ1wGK53CAHo7COIIC4/VfMIxUG090srMRR3R9/x
vuK7P+zZWqxO/DmYHCVA6qhS+LkNFB0/UXdlCm2gOKTnnlti8MCAPf08w0mnZA5vFfry
wYlPo6EajocRYKzEe8J40LGHxS7M8T62aaeBVbvFYMOzmxdgcbViaYsdFdvqvTygcb+C
T84Ugi7Zzdnrli4qmNxZzRAf2iVU2sI8iub8xCsX6ps4+8ZnT8dx7ZfM9SqsQXM6ZQK6
lfnD5PTFXp5qGmK12tfslAsjs9THMp/X/gMZUKWwVS7tdzADe6WGRhsVW3HcKmJfGuNN
nzcA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1681126176;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=9AZv42qlSRohHS9Hwm8wKlP/yXttfsWcGDqMkdbsZfs=;
b=A6LeKIspadKa4SHgC6bSHes25fMNbPLZoPVfqmzbjA39RJmbRlXO1WHjUWq4T5vol0
/cH6PYdDNQjTS21vXDZO/f4XMEtXGSJYIwjsLUBIJ6mGgHZ3uUzCANb3Vu23uhFV+Pur
iRBxsi9DQHUbvi15K761j/kuzCFxyb2NPC2nSFJbX63z6/iDA5w9jK1rBrjom3NeH+bC
EiV549dwUWPBNYo4N91TlVcTdK2+hgXBe6+ZZ8BjLC4ndKh7i87A3tj9w5r5qdzE1sdZ
6QkXNjgHqVNeTicVOjb+Yzoa92V27Ewl4nmkNJSDtHLyzLIizbkTJ/Zytwbv+bBH41mJ
miCg==
X-Gm-Message-State: AAQBX9fF5+zeKDilp/UCmtw1fInCodbWzqkyc4DAFO25xpUtRX9znF6I
QPRzVb7q+JLXQZqYiySnc1pvqsCXSSIVUn6MEp0=
X-Google-Smtp-Source: AKy350ZBjr67dzlH8eUsg3KPEyb8DGcQVPKqa9xzaV+xPhxNbinM/k6BgIcXaCFMK4+1mMyRd3SvBvgzLC59GLKGSyc=
X-Received: by 2002:a2e:2e18:0:b0:29b:d21c:e859 with SMTP id
u24-20020a2e2e18000000b0029bd21ce859mr2871379lju.3.1681126176514; Mon, 10 Apr
2023 04:29:36 -0700 (PDT)
MIME-Version: 1.0
Reply-To: magidiyusuf13@gmail.com
From: Magid Yusuf
Date: Mon, 10 Apr 2023 13:29:25 +0200
Message-ID:
Subject: INVESTMENT REPRESENTATIVE
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000092e6ea05f8f9b079"
Bcc: sales@nk.ca
X-Spam_score: 11.7
X-Spam_score_int: 117
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: My Dear Friend, I am glad to contact you, and hope everything
is going fine with you and your family. My email correspondence is to seek
your assistance as an overseas representative for an investment involving
a large volume of funds.
Content analysis details: (11.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.193 listed in list.dnswl.org]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[mustafatamawe21(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[magidiyusuf13(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[mustafatamawe21(at)gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.193 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
Subject: {SPAM?} INVESTMENT REPRESENTATIVE
--00000000000092e6ea05f8f9b079
Content-Type: text/plain; charset="UTF-8"
My Dear Friend,
I am glad to contact you, and hope everything is going fine with you and
your family.
My email correspondence is to seek your assistance as an overseas
representative for an investment involving a large volume of funds.
Please, I will provide more details about the transaction if you are
willing to handle such a project and also let you know your entitlement for
the solicited role.
I shall be expecting your quick reply.
Best Regards,
Magid Yusuf
--00000000000092e6ea05f8f9b079
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
My Dear Friend,
I am glad to contact you, and hope =
everything is going fine with you and your family.
My email correspo=
ndence is to seek your assistance as an overseas representative for an inve=
stment involving a large volume of funds.
Please, I will provide mor=
e details about the transaction if you are willing to handle such a project=
and also let you know your entitlement for the solicited role.
I sh=
all be expecting your quick reply.
Best Regards,
Magid Yusuf<=
br>
I am glad to contact you, and hope =
everything is going fine with you and your family.
My email correspo=
ndence is to seek your assistance as an overseas representative for an inve=
stment involving a large volume of funds.
Please, I will provide mor=
e details about the transaction if you are willing to handle such a project=
and also let you know your entitlement for the solicited role.
I sh=
all be expecting your quick reply.
Best Regards,
Magid Yusuf<=
br>
--00000000000092e6ea05f8f9b079--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments