Nigerian Google Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 12 Oct 2023 04:26:13 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.1 (FreeBSD))
(envelope-from)
id 1qqss3-0004Yl-2l
for dave@doctor.nl2k.ab.ca;
Thu, 12 Oct 2023 04:24:47 -0600
Resent-From: The Doctor
Resent-Date: Thu, 12 Oct 2023 04:24:47 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f176.google.com ([209.85.128.176]:42073)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96.1 (FreeBSD))
(envelope-from)
id 1qqsKL-000Dlj-0u
for doctor@doctor.nl2k.ab.ca;
Thu, 12 Oct 2023 03:50:01 -0600
Received: by mail-yw1-f176.google.com with SMTP id 00721157ae682-59f6492b415so6309857b3.0
for; Thu, 12 Oct 2023 02:47:59 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1697104073; x=1697708873; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=2SZc/UlaJsjhRgemTIK0rMLOpLhb3lqPTicMRAja4cY=;
b=FzxQ///xGQI262J2JohOqgt4SniBGpJUV5kj6FcilHp5R7bwjU1A1ooFrq3UdUVWIx
DHiYWmRX30OqzPb1ATnzKonpW0r58cYoPcJPGo5BvybbExhzy22trilK9eMDLayTkzLj
MBngLccXjB3e+RN3QPdBpx5fRF4G5p1fjYQFOnqicAHq8jst7yQyhmuhsMRw6wJAMJ0U
0ibpa9E9dvPXTTsx5T3YLRmmUPF5RmTvtqz+qX0z8OGRp4AK8o1o+zttonEOWs9+9nEW
Ds5DRGCtcxB1bT5E3rJlXZ4bhbnyRw19Qd1LtuWM7UbSgbYAkSriqtZ3dKorkul7dWNA
fuHg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1697104073; x=1697708873;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=2SZc/UlaJsjhRgemTIK0rMLOpLhb3lqPTicMRAja4cY=;
b=NZHKie4Eivl5MjCnIT2GuW/Gd6RZ410j27NK2LPVJlwjOE6Dryg/3yfDIqeBcBOC/q
rwHhA9DECrxqpUmvZiMeHmyCCaf+ruGhkmzvGwN8nWNer6UIb4v73MMCxhB23Us22kE6
433Akhy4aClrgYW1qTM0dDDLGYjbEe9wufE1Aif+Io2ZY+z4+KoFUtwlX+36A25Hc5Ul
2VhqAmvQXgJaq8h8CAe2VO9MletDjwcTocqrGovxc0djlJ6WCbe2kVHccf1NVQMe3tx6
0vg3S2dLrR9ny/IjWAkaX1Jjgt9Uq8caTZmFMumCMtjZ6FhcBw+JqktQec0mcfQXnu1p
Ugug==
X-Gm-Message-State: AOJu0Yw1gVpQ3o9TomOW35kRkP0fuSkWVk3de9U/B0qVAfPlYq/MUa5E
VT9nAMxLgP+yvX0eSvnPx7/j+aOp6XfgX8uHztg=
X-Google-Smtp-Source: AGHT+IErEX15dmh3HWXp2/6TvhkSXbq0IKMSX6zPo2M5xwiD5+9iJkT8rO5yUv/iWK2H5zQHziL1G3YLJRSrrvicptA=
X-Received: by 2002:a81:af18:0:b0:5a7:af51:fa39 with SMTP id
n24-20020a81af18000000b005a7af51fa39mr6221260ywh.8.1697104072649; Thu, 12 Oct
2023 02:47:52 -0700 (PDT)
MIME-Version: 1.0
From: Mohamed El Sadeq Salem
Date: Thu, 12 Oct 2023 02:47:34 -0700
Message-ID:
Subject: Hello Dear, I need your assistance and cooperation on investments projects,
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000065b22d060781d5e9"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 6.8
X-Spam_score_int: 68
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greeting Dear Friend, How are you doing, My Name is Mohamed
El Sadeq Salem, am from Damascus Syria and I have now resigned from the government.
I am a member of an opposition party government in Syria.
Content analysis details: (6.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.176 listed in list.dnswl.org]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.176 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[mohamedelsadeqsalem(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[mjakabdullah105(at)gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
2.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Hello Dear, I need your assistance and cooperation on investments projects,
--00000000000065b22d060781d5e9
Content-Type: text/plain; charset="UTF-8"
Greeting Dear Friend,
How are you doing, My Name is Mohamed El Sadeq Salem, am from Damascus
Syria and I have now resigned from the government. I am a member of an
opposition party government in Syria.
I need a foreign partner to enable me to transport my investment capital
and then relocate with my family, honestly I wish I will discuss more and
get along. I need a partner because my investment capital is in my
international account. Am interested in buying Properties, houses, and some
tourist places, or any business ideal you know that we can invest in your
country, my capital for investment is ($16.5Million USD).
I came across your email contact prior a private search while in need of
your assistance and I decided to contact you directly to ask you if you
know any Lucrative Business Investment in your Country I can invest my
Money since my Country Syria Security and Economic Independent has lost to
the Greatest Lower level, and our Culture has lost forever including our
happiness has been taken away from us. Our Country has been on fire for
many years now.
If you are capable of handling this deal Contact me for more details i will
appreciate it if you can contact me immediately.
You may as well tell me a little more about yourself. Contact me urgently
to enable us to proceed with the business.
I am waiting for your response,
Sincerely Yours,
Mohamed El Sadeq Salem.
--00000000000065b22d060781d5e9
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
eight:115%;font-size:11pt;font-family:Calibri,"sans-serif"">
style=3D"font-family:Cambria,"serif"">Greeting Dear Friend,
n>
font-size:11pt;font-family:Calibri,"sans-serif"">
ont-family:Cambria,"serif"">How are you doing, My Name is
Mohamed El Sadeq Salem, am from Damascus Syria and I have now resigned from=
the
government. I am a member of an opposition party government in Syria.
>
ont-size:11pt;font-family:Calibri,"sans-serif"">
nt-family:Cambria,"serif"">I need a foreign partner to
enable me to transport my investment capital and then relocate with my fami=
ly,
honestly I wish I will discuss more and get along. I need a partner because=
my
investment capital is in my international account. Am interested in buying
Properties, houses, and some tourist places, or any business ideal you know
that we can invest in your country, my capital for investment is ($16.5Mill=
ion
USD).
ight:115%;font-size:11pt;font-family:Calibri,"sans-serif"">
style=3D"font-family:Cambria,"serif"">I came across your email co=
ntact
prior a private search while in need of your assistance and I decided to
contact you directly to ask you if you know any Lucrative Business Investme=
nt
in your Country I can invest my Money since my Country Syria Security and
Economic Independent has lost to the Greatest Lower level, and our Culture =
has
lost forever including our happiness has been taken away from us. Our Count=
ry
has been on fire for many years now.
=3D"margin:0in 0in 10pt;line-height:115%;font-size:11pt;font-family:Calibri=
,"sans-serif"">
t;">If you are capable of handling
this deal Contact me for more details i will appreciate it if you can conta=
ct
me immediately.
pt;line-height:115%;font-size:11pt;font-family:Calibri,"sans-serif&quo=
t;">You may as well t=
ell me a little
more about yourself. Contact me urgently to enable us to proceed with the
business.
e-height:115%;font-size:11pt;font-family:Calibri,"sans-serif"">
pan style=3D"font-family:Cambria,"serif"">I am waiting for your r=
esponse,
-height:115%;font-size:11pt;font-family:Calibri,"sans-serif"">
an style=3D"font-family:Cambria,"serif"">=C2=A0
s=3D"MsoNormal" style=3D"margin:0in 0in 10pt;line-height:115%;font-size:11p=
t;font-family:Calibri,"sans-serif"">
mbria,"serif"">Sincerely Yours,
style=3D"margin:0in 0in 10pt;line-height:115%;font-size:11pt;font-family:Ca=
libri,"sans-serif"">
nt-size:11pt;font-family:Calibri,"sans-serif"">
t-family:Cambria,"serif"">Mohamed El Sadeq Salem.
>
--00000000000065b22d060781d5e9--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 12 Oct 2023 04:26:13 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.1 (FreeBSD))
(envelope-from
id 1qqss3-0004Yl-2l
for dave@doctor.nl2k.ab.ca;
Thu, 12 Oct 2023 04:24:47 -0600
Resent-From: The Doctor
Resent-Date: Thu, 12 Oct 2023 04:24:47 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f176.google.com ([209.85.128.176]:42073)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96.1 (FreeBSD))
(envelope-from
id 1qqsKL-000Dlj-0u
for doctor@doctor.nl2k.ab.ca;
Thu, 12 Oct 2023 03:50:01 -0600
Received: by mail-yw1-f176.google.com with SMTP id 00721157ae682-59f6492b415so6309857b3.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1697104073; x=1697708873; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=2SZc/UlaJsjhRgemTIK0rMLOpLhb3lqPTicMRAja4cY=;
b=FzxQ///xGQI262J2JohOqgt4SniBGpJUV5kj6FcilHp5R7bwjU1A1ooFrq3UdUVWIx
DHiYWmRX30OqzPb1ATnzKonpW0r58cYoPcJPGo5BvybbExhzy22trilK9eMDLayTkzLj
MBngLccXjB3e+RN3QPdBpx5fRF4G5p1fjYQFOnqicAHq8jst7yQyhmuhsMRw6wJAMJ0U
0ibpa9E9dvPXTTsx5T3YLRmmUPF5RmTvtqz+qX0z8OGRp4AK8o1o+zttonEOWs9+9nEW
Ds5DRGCtcxB1bT5E3rJlXZ4bhbnyRw19Qd1LtuWM7UbSgbYAkSriqtZ3dKorkul7dWNA
fuHg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1697104073; x=1697708873;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=2SZc/UlaJsjhRgemTIK0rMLOpLhb3lqPTicMRAja4cY=;
b=NZHKie4Eivl5MjCnIT2GuW/Gd6RZ410j27NK2LPVJlwjOE6Dryg/3yfDIqeBcBOC/q
rwHhA9DECrxqpUmvZiMeHmyCCaf+ruGhkmzvGwN8nWNer6UIb4v73MMCxhB23Us22kE6
433Akhy4aClrgYW1qTM0dDDLGYjbEe9wufE1Aif+Io2ZY+z4+KoFUtwlX+36A25Hc5Ul
2VhqAmvQXgJaq8h8CAe2VO9MletDjwcTocqrGovxc0djlJ6WCbe2kVHccf1NVQMe3tx6
0vg3S2dLrR9ny/IjWAkaX1Jjgt9Uq8caTZmFMumCMtjZ6FhcBw+JqktQec0mcfQXnu1p
Ugug==
X-Gm-Message-State: AOJu0Yw1gVpQ3o9TomOW35kRkP0fuSkWVk3de9U/B0qVAfPlYq/MUa5E
VT9nAMxLgP+yvX0eSvnPx7/j+aOp6XfgX8uHztg=
X-Google-Smtp-Source: AGHT+IErEX15dmh3HWXp2/6TvhkSXbq0IKMSX6zPo2M5xwiD5+9iJkT8rO5yUv/iWK2H5zQHziL1G3YLJRSrrvicptA=
X-Received: by 2002:a81:af18:0:b0:5a7:af51:fa39 with SMTP id
n24-20020a81af18000000b005a7af51fa39mr6221260ywh.8.1697104072649; Thu, 12 Oct
2023 02:47:52 -0700 (PDT)
MIME-Version: 1.0
From: Mohamed El Sadeq Salem
Date: Thu, 12 Oct 2023 02:47:34 -0700
Message-ID:
Subject: Hello Dear, I need your assistance and cooperation on investments projects,
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000065b22d060781d5e9"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 6.8
X-Spam_score_int: 68
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greeting Dear Friend, How are you doing, My Name is Mohamed
El Sadeq Salem, am from Damascus Syria and I have now resigned from the government.
I am a member of an opposition party government in Syria.
Content analysis details: (6.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.176 listed in list.dnswl.org]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.176 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[mohamedelsadeqsalem(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[mjakabdullah105(at)gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
2.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Hello Dear, I need your assistance and cooperation on investments projects,
--00000000000065b22d060781d5e9
Content-Type: text/plain; charset="UTF-8"
Greeting Dear Friend,
How are you doing, My Name is Mohamed El Sadeq Salem, am from Damascus
Syria and I have now resigned from the government. I am a member of an
opposition party government in Syria.
I need a foreign partner to enable me to transport my investment capital
and then relocate with my family, honestly I wish I will discuss more and
get along. I need a partner because my investment capital is in my
international account. Am interested in buying Properties, houses, and some
tourist places, or any business ideal you know that we can invest in your
country, my capital for investment is ($16.5Million USD).
I came across your email contact prior a private search while in need of
your assistance and I decided to contact you directly to ask you if you
know any Lucrative Business Investment in your Country I can invest my
Money since my Country Syria Security and Economic Independent has lost to
the Greatest Lower level, and our Culture has lost forever including our
happiness has been taken away from us. Our Country has been on fire for
many years now.
If you are capable of handling this deal Contact me for more details i will
appreciate it if you can contact me immediately.
You may as well tell me a little more about yourself. Contact me urgently
to enable us to proceed with the business.
I am waiting for your response,
Sincerely Yours,
Mohamed El Sadeq Salem.
--00000000000065b22d060781d5e9
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
eight:115%;font-size:11pt;font-family:Calibri,"sans-serif"">
style=3D"font-family:Cambria,"serif"">Greeting Dear Friend,
n>
font-size:11pt;font-family:Calibri,"sans-serif"">
ont-family:Cambria,"serif"">How are you doing, My Name is
Mohamed El Sadeq Salem, am from Damascus Syria and I have now resigned from=
the
government. I am a member of an opposition party government in Syria.
>
ont-size:11pt;font-family:Calibri,"sans-serif"">
nt-family:Cambria,"serif"">I need a foreign partner to
enable me to transport my investment capital and then relocate with my fami=
ly,
honestly I wish I will discuss more and get along. I need a partner because=
my
investment capital is in my international account. Am interested in buying
Properties, houses, and some tourist places, or any business ideal you know
that we can invest in your country, my capital for investment is ($16.5Mill=
ion
USD).
ight:115%;font-size:11pt;font-family:Calibri,"sans-serif"">
style=3D"font-family:Cambria,"serif"">I came across your email co=
ntact
prior a private search while in need of your assistance and I decided to
contact you directly to ask you if you know any Lucrative Business Investme=
nt
in your Country I can invest my Money since my Country Syria Security and
Economic Independent has lost to the Greatest Lower level, and our Culture =
has
lost forever including our happiness has been taken away from us. Our Count=
ry
has been on fire for many years now.
=3D"margin:0in 0in 10pt;line-height:115%;font-size:11pt;font-family:Calibri=
,"sans-serif"">
t;">If you are capable of handling
this deal Contact me for more details i will appreciate it if you can conta=
ct
me immediately.
pt;line-height:115%;font-size:11pt;font-family:Calibri,"sans-serif&quo=
t;">You may as well t=
ell me a little
more about yourself. Contact me urgently to enable us to proceed with the
business.
e-height:115%;font-size:11pt;font-family:Calibri,"sans-serif"">
pan style=3D"font-family:Cambria,"serif"">I am waiting for your r=
esponse,
-height:115%;font-size:11pt;font-family:Calibri,"sans-serif"">
an style=3D"font-family:Cambria,"serif"">=C2=A0
s=3D"MsoNormal" style=3D"margin:0in 0in 10pt;line-height:115%;font-size:11p=
t;font-family:Calibri,"sans-serif"">
mbria,"serif"">Sincerely Yours,
style=3D"margin:0in 0in 10pt;line-height:115%;font-size:11pt;font-family:Ca=
libri,"sans-serif"">
nt-size:11pt;font-family:Calibri,"sans-serif"">
t-family:Cambria,"serif"">Mohamed El Sadeq Salem.
>
--00000000000065b22d060781d5e9--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments