Nigerian Google Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 06 Sep 2023 19:14:07 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from)
id 1qe3N7-0002DD-1D
for dave@doctor.nl2k.ab.ca;
Wed, 06 Sep 2023 18:59:49 -0600
Resent-From: The Doctor
Resent-Date: Wed, 6 Sep 2023 18:59:49 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f180.google.com ([209.85.128.180]:61577)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1qe1oC-000Fmz-2f
for doctor@doctor.nl2k.ab.ca;
Wed, 06 Sep 2023 17:19:43 -0600
Received: by mail-yw1-f180.google.com with SMTP id 00721157ae682-58d40c2debeso3879067b3.2
for; Wed, 06 Sep 2023 16:17:41 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1694042255; x=1694647055; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=BwlzGuy3ahQvImrO+lZ6bELUG9hTb4PVQGOlCykmwJ4=;
b=kKwYHKLfkt2xAb6PmvyIlGkjYLQGq2UGoG4qf1XoiH1MFvDjIrs8k4qDLXanxVqPYL
Na0Ts0vQTl3jZxJgP+81fWA0LrmIax6yQ+b3Anc8cQajXkq9AzpW6tD5KQlsEXYWicEa
N3c1mVR0Xr2CrARBumTSL3oG7r1sum3bV3juuCIPJfqed9OBQRY/OXh14y888tWc9PCi
uXMcbtNF/4eMXCT+AyB0gRUNdrfy/OwPXNm7+ymr33lE0A1nUNvJcPVO0vESadOXpIMB
99PVy9nfaOe8PqeNa8R+EiIG+P/lWNaa7N6QnJyJwuA940EYY5GX3SVGz1STWqmATHQp
tCDA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1694042255; x=1694647055;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=BwlzGuy3ahQvImrO+lZ6bELUG9hTb4PVQGOlCykmwJ4=;
b=e/ZaRFjMRuFk/LqIVsHhr01wf2H7EDuI7J3SM90hBko43jfipiifw26iD3UZUNOy0/
nExoP6LGrE4pGYyR9U07iVFAf+IB4BeaVGpV0ls7OMECBQJHNcTn8vL6euQlI3ybrl1B
lx+7jpvvNi0/RLCJwH9tPDOYz0uUfuxlT7PoMqlJDboSCYweP3SNqIEMWCssDFMM8F22
EC33C+wjGCk5eLInKTE5KxubPUCmFWHXvVfnVxLBoPlh+FYw6FPHQfmX7XjS33ZqCxgV
RDAMvXymONNjPOUCI3kEwvxLN2Af/zabDwBxvBR/NT6Gg3m+aUrJQw2xrrM0k8UEBc8P
i1Lg==
X-Gm-Message-State: AOJu0YxngT4YdfpajDmtRS6byHrYCQSOUwOBxbhkITpEiuD8ySWJCHyH
r9bY1THOt+Gu7RFCTdP54CksdAqi7wSsy/679eY=
X-Google-Smtp-Source: AGHT+IHi7SV4Jb6qli3lvzVlKLvjVO66iXVk7ghnh8HyMK6uGLBFtK/9I71CClpGNk0tgHsRNDp7VV43qWaBbqihH0s=
X-Received: by 2002:a0d:cb15:0:b0:56f:fbc6:3b0 with SMTP id
n21-20020a0dcb15000000b0056ffbc603b0mr17889345ywd.14.1694042254689; Wed, 06
Sep 2023 16:17:34 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6918:17a0:b0:191:5011:c6c2 with HTTP; Wed, 6 Sep 2023
16:17:34 -0700 (PDT)
Reply-To: fotisangelos3@aol.com
From: Fotis Angelos
Date: Wed, 6 Sep 2023 16:17:34 -0700
Message-ID:
Subject: CONTACT MY SECRETARY NOW.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 18.8
X-Spam_score_int: 188
X-Spam_bar: ++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, Long time! How are you and your family? You may
not understand why this mail came to you, But if you don't remember me, you
could have received a email from me in the past regarding a business proposal
that we didn't completed.
Content analysis details: (18.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.180 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[fotisangelos3(at)aol.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[jimedward691(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[jimedward691(at)gmail.com]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
1.5 HK_SCAM_N8 BODY: No description available.
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.180 listed in wl.mailspike.net]
2.0 HK_SCAM No description available.
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
2.6 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} CONTACT MY SECRETARY NOW.
Dear Friend,
Long time! How are you and your family?
You may not understand why this mail came to you, But if you don't
remember me, you could have received a email from me in the past
regarding a business proposal that we didn't completed.
I have not forgotten your previous effort and attempts to help me in
the past, I am now happy to report that I was able to transfer these
funds with the cooperation of a new partner from your country and we
traveled to the India for more business investments.
To thank you for your efforts and to prove to you that the transaction
was true and successful, I dropped $ 600,000.00 ATM visa Card for your
compensation, now contact my account manager and ask ( SIX HUNDRED
THOUSAND DOLLARS) to your ATM Visa card and ask him to send it to your
address, his name is Pastor Graham Tyers Email: (
tyersgraa@gmail.com ) Send him your complete data as indicated
below and ask him taao send the ATM visa card to your address via
express courier service.
Feel free to contact Paastor Graham Tyers Email: tyersgraa@gmail.com
1. Full names .......
2, Mobile phone number.......
3. Address .........
Regards,
Fotis Angelos
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 06 Sep 2023 19:14:07 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1qe3N7-0002DD-1D
for dave@doctor.nl2k.ab.ca;
Wed, 06 Sep 2023 18:59:49 -0600
Resent-From: The Doctor
Resent-Date: Wed, 6 Sep 2023 18:59:49 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f180.google.com ([209.85.128.180]:61577)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qe1oC-000Fmz-2f
for doctor@doctor.nl2k.ab.ca;
Wed, 06 Sep 2023 17:19:43 -0600
Received: by mail-yw1-f180.google.com with SMTP id 00721157ae682-58d40c2debeso3879067b3.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1694042255; x=1694647055; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=BwlzGuy3ahQvImrO+lZ6bELUG9hTb4PVQGOlCykmwJ4=;
b=kKwYHKLfkt2xAb6PmvyIlGkjYLQGq2UGoG4qf1XoiH1MFvDjIrs8k4qDLXanxVqPYL
Na0Ts0vQTl3jZxJgP+81fWA0LrmIax6yQ+b3Anc8cQajXkq9AzpW6tD5KQlsEXYWicEa
N3c1mVR0Xr2CrARBumTSL3oG7r1sum3bV3juuCIPJfqed9OBQRY/OXh14y888tWc9PCi
uXMcbtNF/4eMXCT+AyB0gRUNdrfy/OwPXNm7+ymr33lE0A1nUNvJcPVO0vESadOXpIMB
99PVy9nfaOe8PqeNa8R+EiIG+P/lWNaa7N6QnJyJwuA940EYY5GX3SVGz1STWqmATHQp
tCDA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1694042255; x=1694647055;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=BwlzGuy3ahQvImrO+lZ6bELUG9hTb4PVQGOlCykmwJ4=;
b=e/ZaRFjMRuFk/LqIVsHhr01wf2H7EDuI7J3SM90hBko43jfipiifw26iD3UZUNOy0/
nExoP6LGrE4pGYyR9U07iVFAf+IB4BeaVGpV0ls7OMECBQJHNcTn8vL6euQlI3ybrl1B
lx+7jpvvNi0/RLCJwH9tPDOYz0uUfuxlT7PoMqlJDboSCYweP3SNqIEMWCssDFMM8F22
EC33C+wjGCk5eLInKTE5KxubPUCmFWHXvVfnVxLBoPlh+FYw6FPHQfmX7XjS33ZqCxgV
RDAMvXymONNjPOUCI3kEwvxLN2Af/zabDwBxvBR/NT6Gg3m+aUrJQw2xrrM0k8UEBc8P
i1Lg==
X-Gm-Message-State: AOJu0YxngT4YdfpajDmtRS6byHrYCQSOUwOBxbhkITpEiuD8ySWJCHyH
r9bY1THOt+Gu7RFCTdP54CksdAqi7wSsy/679eY=
X-Google-Smtp-Source: AGHT+IHi7SV4Jb6qli3lvzVlKLvjVO66iXVk7ghnh8HyMK6uGLBFtK/9I71CClpGNk0tgHsRNDp7VV43qWaBbqihH0s=
X-Received: by 2002:a0d:cb15:0:b0:56f:fbc6:3b0 with SMTP id
n21-20020a0dcb15000000b0056ffbc603b0mr17889345ywd.14.1694042254689; Wed, 06
Sep 2023 16:17:34 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6918:17a0:b0:191:5011:c6c2 with HTTP; Wed, 6 Sep 2023
16:17:34 -0700 (PDT)
Reply-To: fotisangelos3@aol.com
From: Fotis Angelos
Date: Wed, 6 Sep 2023 16:17:34 -0700
Message-ID:
Subject: CONTACT MY SECRETARY NOW.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 18.8
X-Spam_score_int: 188
X-Spam_bar: ++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, Long time! How are you and your family? You may
not understand why this mail came to you, But if you don't remember me, you
could have received a email from me in the past regarding a business proposal
that we didn't completed.
Content analysis details: (18.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.180 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[fotisangelos3(at)aol.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[jimedward691(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[jimedward691(at)gmail.com]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
1.5 HK_SCAM_N8 BODY: No description available.
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.180 listed in wl.mailspike.net]
2.0 HK_SCAM No description available.
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
2.6 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} CONTACT MY SECRETARY NOW.
Dear Friend,
Long time! How are you and your family?
You may not understand why this mail came to you, But if you don't
remember me, you could have received a email from me in the past
regarding a business proposal that we didn't completed.
I have not forgotten your previous effort and attempts to help me in
the past, I am now happy to report that I was able to transfer these
funds with the cooperation of a new partner from your country and we
traveled to the India for more business investments.
To thank you for your efforts and to prove to you that the transaction
was true and successful, I dropped $ 600,000.00 ATM visa Card for your
compensation, now contact my account manager and ask ( SIX HUNDRED
THOUSAND DOLLARS) to your ATM Visa card and ask him to send it to your
address, his name is Pastor Graham Tyers Email: (
tyersgraa@gmail.com ) Send him your complete data as indicated
below and ask him taao send the ATM visa card to your address via
express courier service.
Feel free to contact Paastor Graham Tyers Email: tyersgraa@gmail.com
1. Full names .......
2, Mobile phone number.......
3. Address .........
Regards,
Fotis Angelos
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments