Nigerian spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 19 Nov 2023 06:21:21 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))
(envelope-from)
id 1r4gdg-00000000I1h-00hO
for dave@doctor.nl2k.ab.ca;
Sun, 19 Nov 2023 05:11:00 -0700
Resent-From: The Doctor
Resent-Date: Sun, 19 Nov 2023 05:10:59 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oo1-f68.google.com ([209.85.161.68]:58501)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97 (FreeBSD))
(envelope-from)
id 1r4f4Q-00000000PAB-38TN
for doctor@doctor.nl2k.ab.ca;
Sun, 19 Nov 2023 03:30:36 -0700
Received: by mail-oo1-f68.google.com with SMTP id 006d021491bc7-586940ee5a5so1829323eaf.0
for; Sun, 19 Nov 2023 02:28:32 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1700389706; x=1700994506; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=fFikppFJ+t891axnWm4N9PXBsDvFmlcklUy8Pb9udcw=;
b=HM/xACqG9sVfFhAUiZq+e8HKlY1iNMtnLpvp/3haL/cd9Uom5Gj4SE8pCegu6PkjYJ
oPrsckXc5mWfLgAyzMbuzk5qJFo8M9S9WL3WHUZeJ6iWIxlHLnyew9Yfr5Llqt0xHa3D
v2+b1RqB75QKLxPQSRPdA8h2Bfr7f4BF+ICGT0sup6C+TJQjtzLgWP3FaCqtN/X8wTot
RMfMnwIqv8y9PHQbtZwmLfbwVr7Z8TJ2ZsE6qv/+f6DVOCwawNBHHOdR3WhDSIGQx3sI
6o+5c/G3qXqNn/mNTKPXvCpwgWHVVd75c37DvGwZDEeSUDOhPwJ+kXCQmaLcpzNm5wqH
hoLA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1700389706; x=1700994506;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=fFikppFJ+t891axnWm4N9PXBsDvFmlcklUy8Pb9udcw=;
b=ds5RqYzNdybJPQkNk5xu9kevjWlBE/OHSFnnCJplMsqqiOk/D294NJleDbA3bUesO0
4uOdXYz9Tsr4YU811B7VCCf1SwSfbWZ2UodBLmMzB+rjoDTI3c9EZLPvToyPi6RaiUp+
3bNrN17B1eh8JA+Rg4BvRXSwMftELY+Frh71RHCHSIYnpR7yGrN+VgP/hojI+Fdse1HZ
P0H3/wXBxjOnX2E5FuIgQOlGUGurL2K6e0x0K4zbxwsFd87rPdBJbz5Axo3AOVFhrGqQ
+RekkZgkwtWca03LaBARfw0lKZzRD0liqKTQTVba0Tco8gBLjmgBRdtnn/6t1vXVTXyA
jcTg==
X-Gm-Message-State: AOJu0YxlaQHtanHx6qSbsnqy4OrSe7wtUq5m8nAJ3e9rrtaVSk2ThZUo
bc4t3vb8Sy+prQJRDDzCZknzygCHtxftbBb3OYsFHOLx7cxpbly5
X-Google-Smtp-Source: AGHT+IHaOUTNvXg5oThfy9ZWXAEjmrjV93yvo61F0BIGBF6TeNfajpifhBThvV3LC3DK4fjFdJFM62vjZJBKBGkdoBc=
X-Received: by 2002:a05:6358:e812:b0:16b:fc58:6ad with SMTP id
gi18-20020a056358e81200b0016bfc5806admr2538587rwb.21.1700389706154; Sun, 19
Nov 2023 02:28:26 -0800 (PST)
MIME-Version: 1.0
From: "MRS. SOLA YOMI AJAYI"
Date: Sun, 19 Nov 2023 11:28:14 +0100
Message-ID:
Subject: Please this Should be Confidential.
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000006a4656060a7ed40e"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 12.3
X-Spam_score_int: 123
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Good Friend, How are you together with your family?
I hope all is well. Please "I'm very sorry to intrude on your privacy, but
this can't wait, because of the urgency of it, I am Mrs. Sola Yomi AJAYI,
the Auditing and account manager of U.B.A, BANK OUAGADOUGOU, BURKINA FA [...]
Content analysis details: (12.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[mrsyomisolaajayi(at)gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.161.68 listed in wl.mailspike.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.161.68 listed in list.dnswl.org]
0.1 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
0.9 URG_BIZ BODY: Contains urgent matter
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
0.0 HTML_MESSAGE BODY: HTML included in message
1.5 HK_NAME_FM_MR_MRS No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.0 TVD_PH_BODY_META No description available.
0.0 T_MONEY_PERCENT X% of a lot of money for you
2.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
Subject: {SPAM?} Please this Should be Confidential.
X-Antivirus: AVG (VPS 231118-6, 11/18/2023), Inbound message
X-Antivirus-Status: Clean
--0000000000006a4656060a7ed40e
Content-Type: text/plain; charset="UTF-8"
Dear Good Friend,
How are you together with your family? I hope all is well.
Please "I'm very sorry to intrude on your privacy, but this can't wait,
because of the urgency of it, I am Mrs. Sola Yomi AJAYI, the Auditing and
account manager of U.B.A, BANK OUAGADOUGOU, BURKINA FASO,
Please I had the intent to contact you over transfer of funds worth the sum
of Ten Million Three Hundred Thousand US Dollars. (US$10.3m) i agree that
50% of the total amount will be for you and 50% for me.
I need your urgent response and assurance of trust that you will not deny
my share when the fund is transferred to your personal bank account.
I look forward to hearing from you immediately when you receive this
message, upon receipt of your reply, I will give you full details on how
thebusiness will be executed.
In sincerity,
Mrs. Sola Yomi AJAYI .
--0000000000006a4656060a7ed40e
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Dear Good Friend,
How are =
you together with your family? I hope all is well.
=
Please=C2=A0
"I'm very sorry to intrude on your privacy, but this can't wa=
it,=20
because of the urgency of it, I am Mrs. Sola Yomi AJAYI, the Auditing=20
and account manager of U.B.A, BANK OUAGADOUGOU, BURKINA FASO,
n=3D"true">
Please
I had the intent to contact you over transfer of funds worth the sum of
Ten Million Three Hundred Thousand US Dollars. (US$10.3m) i agree that=20
50% of the total amount will be for you and 50% for me.
rue">
I
need your urgent response and assurance of trust that you will not deny
my share when the fund is transferred to your personal bank account.
ia-hidden=3D"true">
I
look forward to hearing from you immediately when you receive this=20
message, upon receipt of your reply, I will give you full details on how
thebusiness will be executed.
rue">In sincerity,
Mrs. Sola Yomi AJAYI .
--0000000000006a4656060a7ed40e--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 19 Nov 2023 06:21:21 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))
(envelope-from
id 1r4gdg-00000000I1h-00hO
for dave@doctor.nl2k.ab.ca;
Sun, 19 Nov 2023 05:11:00 -0700
Resent-From: The Doctor
Resent-Date: Sun, 19 Nov 2023 05:10:59 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oo1-f68.google.com ([209.85.161.68]:58501)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97 (FreeBSD))
(envelope-from
id 1r4f4Q-00000000PAB-38TN
for doctor@doctor.nl2k.ab.ca;
Sun, 19 Nov 2023 03:30:36 -0700
Received: by mail-oo1-f68.google.com with SMTP id 006d021491bc7-586940ee5a5so1829323eaf.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1700389706; x=1700994506; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=fFikppFJ+t891axnWm4N9PXBsDvFmlcklUy8Pb9udcw=;
b=HM/xACqG9sVfFhAUiZq+e8HKlY1iNMtnLpvp/3haL/cd9Uom5Gj4SE8pCegu6PkjYJ
oPrsckXc5mWfLgAyzMbuzk5qJFo8M9S9WL3WHUZeJ6iWIxlHLnyew9Yfr5Llqt0xHa3D
v2+b1RqB75QKLxPQSRPdA8h2Bfr7f4BF+ICGT0sup6C+TJQjtzLgWP3FaCqtN/X8wTot
RMfMnwIqv8y9PHQbtZwmLfbwVr7Z8TJ2ZsE6qv/+f6DVOCwawNBHHOdR3WhDSIGQx3sI
6o+5c/G3qXqNn/mNTKPXvCpwgWHVVd75c37DvGwZDEeSUDOhPwJ+kXCQmaLcpzNm5wqH
hoLA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1700389706; x=1700994506;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=fFikppFJ+t891axnWm4N9PXBsDvFmlcklUy8Pb9udcw=;
b=ds5RqYzNdybJPQkNk5xu9kevjWlBE/OHSFnnCJplMsqqiOk/D294NJleDbA3bUesO0
4uOdXYz9Tsr4YU811B7VCCf1SwSfbWZ2UodBLmMzB+rjoDTI3c9EZLPvToyPi6RaiUp+
3bNrN17B1eh8JA+Rg4BvRXSwMftELY+Frh71RHCHSIYnpR7yGrN+VgP/hojI+Fdse1HZ
P0H3/wXBxjOnX2E5FuIgQOlGUGurL2K6e0x0K4zbxwsFd87rPdBJbz5Axo3AOVFhrGqQ
+RekkZgkwtWca03LaBARfw0lKZzRD0liqKTQTVba0Tco8gBLjmgBRdtnn/6t1vXVTXyA
jcTg==
X-Gm-Message-State: AOJu0YxlaQHtanHx6qSbsnqy4OrSe7wtUq5m8nAJ3e9rrtaVSk2ThZUo
bc4t3vb8Sy+prQJRDDzCZknzygCHtxftbBb3OYsFHOLx7cxpbly5
X-Google-Smtp-Source: AGHT+IHaOUTNvXg5oThfy9ZWXAEjmrjV93yvo61F0BIGBF6TeNfajpifhBThvV3LC3DK4fjFdJFM62vjZJBKBGkdoBc=
X-Received: by 2002:a05:6358:e812:b0:16b:fc58:6ad with SMTP id
gi18-20020a056358e81200b0016bfc5806admr2538587rwb.21.1700389706154; Sun, 19
Nov 2023 02:28:26 -0800 (PST)
MIME-Version: 1.0
From: "MRS. SOLA YOMI AJAYI"
Date: Sun, 19 Nov 2023 11:28:14 +0100
Message-ID:
Subject: Please this Should be Confidential.
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000006a4656060a7ed40e"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 12.3
X-Spam_score_int: 123
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Good Friend, How are you together with your family?
I hope all is well. Please "I'm very sorry to intrude on your privacy, but
this can't wait, because of the urgency of it, I am Mrs. Sola Yomi AJAYI,
the Auditing and account manager of U.B.A, BANK OUAGADOUGOU, BURKINA FA [...]
Content analysis details: (12.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[mrsyomisolaajayi(at)gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.161.68 listed in wl.mailspike.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.161.68 listed in list.dnswl.org]
0.1 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
0.9 URG_BIZ BODY: Contains urgent matter
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
0.0 HTML_MESSAGE BODY: HTML included in message
1.5 HK_NAME_FM_MR_MRS No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.0 TVD_PH_BODY_META No description available.
0.0 T_MONEY_PERCENT X% of a lot of money for you
2.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
Subject: {SPAM?} Please this Should be Confidential.
X-Antivirus: AVG (VPS 231118-6, 11/18/2023), Inbound message
X-Antivirus-Status: Clean
--0000000000006a4656060a7ed40e
Content-Type: text/plain; charset="UTF-8"
Dear Good Friend,
How are you together with your family? I hope all is well.
Please "I'm very sorry to intrude on your privacy, but this can't wait,
because of the urgency of it, I am Mrs. Sola Yomi AJAYI, the Auditing and
account manager of U.B.A, BANK OUAGADOUGOU, BURKINA FASO,
Please I had the intent to contact you over transfer of funds worth the sum
of Ten Million Three Hundred Thousand US Dollars. (US$10.3m) i agree that
50% of the total amount will be for you and 50% for me.
I need your urgent response and assurance of trust that you will not deny
my share when the fund is transferred to your personal bank account.
I look forward to hearing from you immediately when you receive this
message, upon receipt of your reply, I will give you full details on how
thebusiness will be executed.
In sincerity,
Mrs. Sola Yomi AJAYI .
--0000000000006a4656060a7ed40e
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Dear Good Friend,
How are =
you together with your family? I hope all is well.
=
Please=C2=A0
"I'm very sorry to intrude on your privacy, but this can't wa=
it,=20
because of the urgency of it, I am Mrs. Sola Yomi AJAYI, the Auditing=20
and account manager of U.B.A, BANK OUAGADOUGOU, BURKINA FASO,
n=3D"true">
Please
I had the intent to contact you over transfer of funds worth the sum of
Ten Million Three Hundred Thousand US Dollars. (US$10.3m) i agree that=20
50% of the total amount will be for you and 50% for me.
rue">
I
need your urgent response and assurance of trust that you will not deny
my share when the fund is transferred to your personal bank account.
ia-hidden=3D"true">
I
look forward to hearing from you immediately when you receive this=20
message, upon receipt of your reply, I will give you full details on how
thebusiness will be executed.
rue">In sincerity,
Mrs. Sola Yomi AJAYI .
--0000000000006a4656060a7ed40e--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments