Nigerian spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 28 Aug 2023 07:12:25 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from)
id 1qabqN-000JQq-04
for dave@doctor.nl2k.ab.ca;
Mon, 28 Aug 2023 06:59:47 -0600
Resent-From: The Doctor
Resent-Date: Mon, 28 Aug 2023 06:59:46 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qv1-f68.google.com ([209.85.219.68]:57476)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1qaXTG-000N2Y-2F
for doctor@nk.ca;
Mon, 28 Aug 2023 02:19:46 -0600
Received: by mail-qv1-f68.google.com with SMTP id 6a1803df08f44-6493389c56fso19343256d6.2
for; Mon, 28 Aug 2023 01:17:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1693210653; x=1693815453;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=bFeBu51C0PnyHVMJfDJuqWufC6S52uWpj9vGXIOcwqA=;
b=PyDQDSWoxqPJ6XKif53p0A1y7929IPSW2f3KQdT/sW7/G8qJKbHy/Aw+9a6Ptqntqp
8w71QD/JeKDg+zr4cQE3pFjS+IjV3gPB+l145t5TlvkLt2lFJCjC4IsUvR4CaxMgdcqq
3STVsnx49q9HuR0ySYFx2uEIaL/zm+4iH5qkQfZgGBE53qA7hZSgXEoGZq9R5OUY+9eQ
Z0EpkPOw7b8ykcic2YwIxo2PD7KObkkVINUFM61mBajx5+WBv6OQpqY1WwVcRLeF6mbQ
Oeux3CpW8C0CpRlWsHI7Eb91EXREcYlVdBItf6vupTSf3Hwc6I9+anNApAKF3DkYo9cw
st0A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1693210653; x=1693815453;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=bFeBu51C0PnyHVMJfDJuqWufC6S52uWpj9vGXIOcwqA=;
b=F9vBnA8bWFjYilwEA37jg1oq7dQueJtQ6hPYA/xACHW6povebzmwuUJL51nOWqNPMX
WOffQZWkgFmmp+F393kYfag+oVuDditWdq5u8dl2HTawyVS7fMuPico8JO7tXvcnXODE
8G5ny55yNh2IBUSkHSr3a7ceLCxw0IflmblK6teh/G7m9KAXaL47xst2fI+H/SFU6su5
PdH7KrNg5JNLJl78kahGxcfJvYS84X0s2tPXagmzyfW69/jupawV37ObqCu9PGkTXio5
CyZL5y4kkvrJZgncJnljvnGZ3alh0ZCcd3T0Z693/9YOIlG5J8IvlviPbxROLLWtmK9K
8Stg==
X-Gm-Message-State: AOJu0YxrV5i1HqJnuL1S6Um2WF0VLA4AmtFwUxMDR0y9HeCSH6ijP6Dg
WjuSumjf3jdN3JTZm8i2OTRydVjW8/Y2VjW76M8=
X-Google-Smtp-Source: AGHT+IGQzOOLKfnEyITcSw7MqWJA89YsY0XGFK5HcsIzMn/vkOqOdjTqUT0EkOQdfcFx0khThvnls7D6pmGVydiQamw=
X-Received: by 2002:a0c:f54b:0:b0:63f:5868:ae45 with SMTP id
p11-20020a0cf54b000000b0063f5868ae45mr25272148qvm.11.1693210653339; Mon, 28
Aug 2023 01:17:33 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a0c:9c4d:0:b0:64b:502f:deef with HTTP; Mon, 28 Aug 2023
01:17:30 -0700 (PDT)
Reply-To: ninamsjohnson@gmail.com
From: MS NINA JOHNSON
Date: Mon, 28 Aug 2023 08:17:30 +0000
Message-ID:
Subject: Re, Hello dear
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@nk.ca
X-Spam_score: 19.0
X-Spam_score_int: 190
X-Spam_bar: +++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dearest One Good day to you, I hope my mail meets you in good
health. Please do not be surprise to receive this letter. I am coming to
you in good faith with believe that you will not let me down in this unpleasa
[...]
Content analysis details: (19.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.219.68 listed in list.dnswl.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[alinikiema883(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[alinikiema883(at)gmail.com]
0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
2.5 HK_SCAM_N2 BODY: No description available.
2.5 MILLION_USD BODY: Talks about millions of dollars
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.68 listed in wl.mailspike.net]
2.0 HK_SCAM No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.6 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Re, Hello dear
X-Antivirus: AVG (VPS 230827-4, 8/27/2023), Inbound message
X-Antivirus-Status: Clean
Dearest One
Good day to you, I hope my mail meets you in good health. Please do
not be surprise to receive this letter. I am coming to you in good
faith with believe that you will not let me down in this unpleasant
situation. I will be thankful to you if you could understand my plight
and touch your heart to help me out.
I am Miss Nina Johnson the only child of Late Chief & Mrs Johnson Nado
of Cote d'Ivoire. My father was a wealthy businessman who deals on
Cocoa and Diamond. My father was killed because he is not in support
of our president in his evil doing
I am contacting you because of the sum of US$8.9M (Eight Million Nine
Hundred Thousand United States Dollars) which my late father deposited
in a bank here in my country with my name as the next of kin.
I will be glad to give you 20% of the money for your assistance after
the transfer, and furthermore you will have share in the profit of the
investments.
I am honorably seeking your assistance in the
following ways:
(1) I will use it for investment purpose such as Music industries or
hotel management .
(2) To provide a bank account into which this money would be transferred to.
(3) To serve as a guardian.
(4) To make arrangement for me to come over to your country to further
my education and to secure a resident permit in your country.
Please it is important you contact me immediately for more
clarification on the next step on this transaction.
Awaiting your immediate response there i will tell you more about myself
Yours Sincerely
Nina Johnson
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 28 Aug 2023 07:12:25 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1qabqN-000JQq-04
for dave@doctor.nl2k.ab.ca;
Mon, 28 Aug 2023 06:59:47 -0600
Resent-From: The Doctor
Resent-Date: Mon, 28 Aug 2023 06:59:46 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qv1-f68.google.com ([209.85.219.68]:57476)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qaXTG-000N2Y-2F
for doctor@nk.ca;
Mon, 28 Aug 2023 02:19:46 -0600
Received: by mail-qv1-f68.google.com with SMTP id 6a1803df08f44-6493389c56fso19343256d6.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1693210653; x=1693815453;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=bFeBu51C0PnyHVMJfDJuqWufC6S52uWpj9vGXIOcwqA=;
b=PyDQDSWoxqPJ6XKif53p0A1y7929IPSW2f3KQdT/sW7/G8qJKbHy/Aw+9a6Ptqntqp
8w71QD/JeKDg+zr4cQE3pFjS+IjV3gPB+l145t5TlvkLt2lFJCjC4IsUvR4CaxMgdcqq
3STVsnx49q9HuR0ySYFx2uEIaL/zm+4iH5qkQfZgGBE53qA7hZSgXEoGZq9R5OUY+9eQ
Z0EpkPOw7b8ykcic2YwIxo2PD7KObkkVINUFM61mBajx5+WBv6OQpqY1WwVcRLeF6mbQ
Oeux3CpW8C0CpRlWsHI7Eb91EXREcYlVdBItf6vupTSf3Hwc6I9+anNApAKF3DkYo9cw
st0A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1693210653; x=1693815453;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=bFeBu51C0PnyHVMJfDJuqWufC6S52uWpj9vGXIOcwqA=;
b=F9vBnA8bWFjYilwEA37jg1oq7dQueJtQ6hPYA/xACHW6povebzmwuUJL51nOWqNPMX
WOffQZWkgFmmp+F393kYfag+oVuDditWdq5u8dl2HTawyVS7fMuPico8JO7tXvcnXODE
8G5ny55yNh2IBUSkHSr3a7ceLCxw0IflmblK6teh/G7m9KAXaL47xst2fI+H/SFU6su5
PdH7KrNg5JNLJl78kahGxcfJvYS84X0s2tPXagmzyfW69/jupawV37ObqCu9PGkTXio5
CyZL5y4kkvrJZgncJnljvnGZ3alh0ZCcd3T0Z693/9YOIlG5J8IvlviPbxROLLWtmK9K
8Stg==
X-Gm-Message-State: AOJu0YxrV5i1HqJnuL1S6Um2WF0VLA4AmtFwUxMDR0y9HeCSH6ijP6Dg
WjuSumjf3jdN3JTZm8i2OTRydVjW8/Y2VjW76M8=
X-Google-Smtp-Source: AGHT+IGQzOOLKfnEyITcSw7MqWJA89YsY0XGFK5HcsIzMn/vkOqOdjTqUT0EkOQdfcFx0khThvnls7D6pmGVydiQamw=
X-Received: by 2002:a0c:f54b:0:b0:63f:5868:ae45 with SMTP id
p11-20020a0cf54b000000b0063f5868ae45mr25272148qvm.11.1693210653339; Mon, 28
Aug 2023 01:17:33 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a0c:9c4d:0:b0:64b:502f:deef with HTTP; Mon, 28 Aug 2023
01:17:30 -0700 (PDT)
Reply-To: ninamsjohnson@gmail.com
From: MS NINA JOHNSON
Date: Mon, 28 Aug 2023 08:17:30 +0000
Message-ID:
Subject: Re, Hello dear
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@nk.ca
X-Spam_score: 19.0
X-Spam_score_int: 190
X-Spam_bar: +++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dearest One Good day to you, I hope my mail meets you in good
health. Please do not be surprise to receive this letter. I am coming to
you in good faith with believe that you will not let me down in this unpleasa
[...]
Content analysis details: (19.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.219.68 listed in list.dnswl.org]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[alinikiema883(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[alinikiema883(at)gmail.com]
0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
2.5 HK_SCAM_N2 BODY: No description available.
2.5 MILLION_USD BODY: Talks about millions of dollars
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.68 listed in wl.mailspike.net]
2.0 HK_SCAM No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.6 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Re, Hello dear
X-Antivirus: AVG (VPS 230827-4, 8/27/2023), Inbound message
X-Antivirus-Status: Clean
Dearest One
Good day to you, I hope my mail meets you in good health. Please do
not be surprise to receive this letter. I am coming to you in good
faith with believe that you will not let me down in this unpleasant
situation. I will be thankful to you if you could understand my plight
and touch your heart to help me out.
I am Miss Nina Johnson the only child of Late Chief & Mrs Johnson Nado
of Cote d'Ivoire. My father was a wealthy businessman who deals on
Cocoa and Diamond. My father was killed because he is not in support
of our president in his evil doing
I am contacting you because of the sum of US$8.9M (Eight Million Nine
Hundred Thousand United States Dollars) which my late father deposited
in a bank here in my country with my name as the next of kin.
I will be glad to give you 20% of the money for your assistance after
the transfer, and furthermore you will have share in the profit of the
investments.
I am honorably seeking your assistance in the
following ways:
(1) I will use it for investment purpose such as Music industries or
hotel management .
(2) To provide a bank account into which this money would be transferred to.
(3) To serve as a guardian.
(4) To make arrangement for me to come over to your country to further
my education and to secure a resident permit in your country.
Please it is important you contact me immediately for more
clarification on the next step on this transaction.
Awaiting your immediate response there i will tell you more about myself
Yours Sincerely
Nina Johnson
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments