confidential spam mail from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 22 Nov 2023 07:37:17 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))
(envelope-from)
id 1r5oH0-0000000046w-3Vw1
for dave@doctor.nl2k.ab.ca;
Wed, 22 Nov 2023 07:32:14 -0700
Resent-From: The Doctor
Resent-Date: Wed, 22 Nov 2023 07:32:14 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qt1-f182.google.com ([209.85.160.182]:48428)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97 (FreeBSD))
(envelope-from)
id 1r5ftD-00000000Pn2-15cw
for doctor@doctor.nl2k.ab.ca;
Tue, 21 Nov 2023 22:35:11 -0700
Received: by mail-qt1-f182.google.com with SMTP id d75a77b69052e-41e1921da84so38415811cf.1
for; Tue, 21 Nov 2023 21:33:08 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1700631182; x=1701235982; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=GHFONI/HyrBgMOJHuSXy+UeKks4/IcR9o57o7XvYaV8=;
b=DwMRRM8miScFyEDUtG44cWNpLyO6qtGDrXomgMmk8pkPN11rcRXVtVXa5pvMBcClXi
vedq76/qDfre6UR8FBP0yBc8D+bT9oo2TyT73heZYinjmsv81lO80CKk1kA84S3u7ZUx
I8y6/drzMdOLbDse042VjbM1AyVLgyyTkRcwSCahfc3tHYXGOrSP7ACKKC3tyHeH6cr5
nzYaWHgDiGFuytuGGwTrxJKHCFRC98875ZJyjyufsVD7PnWbg8u4d1vnNXYwJEIh7se8
LDHZBukGoGLiVdNs0YFLYBPozMErzv8ZSaWeP1OXyJSJLEx2pI7Cu61oqpSJ5flz6nTv
mL8g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1700631182; x=1701235982;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=GHFONI/HyrBgMOJHuSXy+UeKks4/IcR9o57o7XvYaV8=;
b=UnYkR2EtaqpP0/ciWU6Cef0b9Q8z5/EBT86/FPgtL8EcweAnj4mTLVgoaVUjizd2sA
qIpktIIojMHZWndowqYTis8B8ZMwn6pPTPW8F2kUsAtPoCHSb599WBkXDe/R52cwR4R/
hdZ1e2FerdntNqbsbwg3lHmtX9bGTmiDFuONXLt9Z49oRiPPtLZQz/5+UJ4Wc96QXhyu
68a2pRqRKp+Tur9a3o8jcFejuOg5bEL/GvW7CfU8PgmFxOmL2nxteymUaQrFNrvCCGKu
H63whft7pMEfueLBpYXPZyDfgsD85rPAJp8fN0bAIAOJr8KjM/0trCR3L90NneaNk+gz
5HwQ==
X-Gm-Message-State: AOJu0Yz5oKEPnPZFJTIpMtP8ul8nzXjWg1/hbpdA0Wh2+pFm/5l782hF
0rieIKgQCrUprruz622CKR+0IL42mvTcnip9OHYurzMp9DI=
X-Google-Smtp-Source: AGHT+IFS9+t6iOXeOiLagcQCVdSvyO0tF0wScMQ/q6r4wweOfmQlYF+JvWT+UoZEqsGYCfsTlZoJeae2s2/AWBfbyqo=
X-Received: by 2002:ac8:60d0:0:b0:423:811a:88b with SMTP id
i16-20020ac860d0000000b00423811a088bmr15438qtm.63.1700631182364; Tue, 21 Nov
2023 21:33:02 -0800 (PST)
MIME-Version: 1.0
From: "MRS. SOLA YOMI AJAYI"
Date: Wed, 22 Nov 2023 06:32:51 +0100
Message-ID:
Subject: Please this Should be Confidential.
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000084d4f7060ab70dba"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 12.6
X-Spam_score_int: 126
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Dear Good Friend, How are you together with your family?
I hope all is well. Please "I'm very sorry to intrude on your privacy, but
this can't wait, because of the urgency of it, I am Mrs. Sola Yomi AJAYI,
the Auditing and account manager of U.B.A, BANK OUAGADOUGOU, BURKINA FA [...]
Content analysis details: (12.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.182 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.182 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[dominionchinze1(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[dominionchinze1(at)gmail.com]
0.1 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
0.9 URG_BIZ BODY: Contains urgent matter
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 TVD_PH_BODY_META No description available.
0.0 T_MONEY_PERCENT X% of a lot of money for you
2.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Please this Should be Confidential.
X-Antivirus: AVG (VPS 231121-6, 11/21/2023), Inbound message
X-Antivirus-Status: Clean
--00000000000084d4f7060ab70dba
Content-Type: text/plain; charset="UTF-8"
--
Dear Good Friend,
How are you together with your family? I hope all is well.
Please "I'm very sorry to intrude on your privacy, but this can't wait,
because of the urgency of it, I am Mrs. Sola Yomi AJAYI, the Auditing and
account manager of U.B.A, BANK OUAGADOUGOU, BURKINA FASO,
Please I had the intent to contact you over transfer of funds worth the sum
of Ten Million Three Hundred Thousand US Dollars. (US$10.3m) i agree that
50% of the total amount will be for you and 50% for me.
I need your urgent response and assurance of trust that you will not deny
my share when the fund is transferred to your personal bank account.
I look forward to hearing from you immediately when you receive this
message, upon receipt of your reply, I will give you full details on how
thebusiness will be executed.
In sincerity,
Mrs. Sola Yomi AJAYI .
--00000000000084d4f7060ab70dba
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
x">--
=3D"gmail_signature">Dear Good Friend,
How are you together with you=
r family? I hope all is well.
Please=C2=A0 "I'm very sorry =
to intrude on your privacy, but this can't wait, because of the urgency=
of it, I am Mrs. Sola Yomi AJAYI, the Auditing and account manager of U.B.=
A, BANK OUAGADOUGOU, BURKINA FASO,
Please I had the intent to contac=
t you over transfer of funds worth the sum of Ten Million Three Hundred Tho=
usand US Dollars. (US$10.3m) i agree that 50% of the total amount will be f=
or you and 50% for me.
I need your urgent response and assurance of =
trust that you will not deny my share when the fund is transferred to your =
personal bank account.
I look forward to hearing from you immediatel=
y when you receive this message, upon receipt of your reply, I will give yo=
u full details on how thebusiness will be executed.
In sincerity,
>Mrs. Sola Yomi AJAYI .
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 22 Nov 2023 07:37:17 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))
(envelope-from
id 1r5oH0-0000000046w-3Vw1
for dave@doctor.nl2k.ab.ca;
Wed, 22 Nov 2023 07:32:14 -0700
Resent-From: The Doctor
Resent-Date: Wed, 22 Nov 2023 07:32:14 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qt1-f182.google.com ([209.85.160.182]:48428)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97 (FreeBSD))
(envelope-from
id 1r5ftD-00000000Pn2-15cw
for doctor@doctor.nl2k.ab.ca;
Tue, 21 Nov 2023 22:35:11 -0700
Received: by mail-qt1-f182.google.com with SMTP id d75a77b69052e-41e1921da84so38415811cf.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1700631182; x=1701235982; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=GHFONI/HyrBgMOJHuSXy+UeKks4/IcR9o57o7XvYaV8=;
b=DwMRRM8miScFyEDUtG44cWNpLyO6qtGDrXomgMmk8pkPN11rcRXVtVXa5pvMBcClXi
vedq76/qDfre6UR8FBP0yBc8D+bT9oo2TyT73heZYinjmsv81lO80CKk1kA84S3u7ZUx
I8y6/drzMdOLbDse042VjbM1AyVLgyyTkRcwSCahfc3tHYXGOrSP7ACKKC3tyHeH6cr5
nzYaWHgDiGFuytuGGwTrxJKHCFRC98875ZJyjyufsVD7PnWbg8u4d1vnNXYwJEIh7se8
LDHZBukGoGLiVdNs0YFLYBPozMErzv8ZSaWeP1OXyJSJLEx2pI7Cu61oqpSJ5flz6nTv
mL8g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1700631182; x=1701235982;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=GHFONI/HyrBgMOJHuSXy+UeKks4/IcR9o57o7XvYaV8=;
b=UnYkR2EtaqpP0/ciWU6Cef0b9Q8z5/EBT86/FPgtL8EcweAnj4mTLVgoaVUjizd2sA
qIpktIIojMHZWndowqYTis8B8ZMwn6pPTPW8F2kUsAtPoCHSb599WBkXDe/R52cwR4R/
hdZ1e2FerdntNqbsbwg3lHmtX9bGTmiDFuONXLt9Z49oRiPPtLZQz/5+UJ4Wc96QXhyu
68a2pRqRKp+Tur9a3o8jcFejuOg5bEL/GvW7CfU8PgmFxOmL2nxteymUaQrFNrvCCGKu
H63whft7pMEfueLBpYXPZyDfgsD85rPAJp8fN0bAIAOJr8KjM/0trCR3L90NneaNk+gz
5HwQ==
X-Gm-Message-State: AOJu0Yz5oKEPnPZFJTIpMtP8ul8nzXjWg1/hbpdA0Wh2+pFm/5l782hF
0rieIKgQCrUprruz622CKR+0IL42mvTcnip9OHYurzMp9DI=
X-Google-Smtp-Source: AGHT+IFS9+t6iOXeOiLagcQCVdSvyO0tF0wScMQ/q6r4wweOfmQlYF+JvWT+UoZEqsGYCfsTlZoJeae2s2/AWBfbyqo=
X-Received: by 2002:ac8:60d0:0:b0:423:811a:88b with SMTP id
i16-20020ac860d0000000b00423811a088bmr15438qtm.63.1700631182364; Tue, 21 Nov
2023 21:33:02 -0800 (PST)
MIME-Version: 1.0
From: "MRS. SOLA YOMI AJAYI"
Date: Wed, 22 Nov 2023 06:32:51 +0100
Message-ID:
Subject: Please this Should be Confidential.
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000084d4f7060ab70dba"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 12.6
X-Spam_score_int: 126
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Dear Good Friend, How are you together with your family?
I hope all is well. Please "I'm very sorry to intrude on your privacy, but
this can't wait, because of the urgency of it, I am Mrs. Sola Yomi AJAYI,
the Auditing and account manager of U.B.A, BANK OUAGADOUGOU, BURKINA FA [...]
Content analysis details: (12.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.182 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.182 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[dominionchinze1(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[dominionchinze1(at)gmail.com]
0.1 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
0.9 URG_BIZ BODY: Contains urgent matter
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 TVD_PH_BODY_META No description available.
0.0 T_MONEY_PERCENT X% of a lot of money for you
2.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Please this Should be Confidential.
X-Antivirus: AVG (VPS 231121-6, 11/21/2023), Inbound message
X-Antivirus-Status: Clean
--00000000000084d4f7060ab70dba
Content-Type: text/plain; charset="UTF-8"
--
Dear Good Friend,
How are you together with your family? I hope all is well.
Please "I'm very sorry to intrude on your privacy, but this can't wait,
because of the urgency of it, I am Mrs. Sola Yomi AJAYI, the Auditing and
account manager of U.B.A, BANK OUAGADOUGOU, BURKINA FASO,
Please I had the intent to contact you over transfer of funds worth the sum
of Ten Million Three Hundred Thousand US Dollars. (US$10.3m) i agree that
50% of the total amount will be for you and 50% for me.
I need your urgent response and assurance of trust that you will not deny
my share when the fund is transferred to your personal bank account.
I look forward to hearing from you immediately when you receive this
message, upon receipt of your reply, I will give you full details on how
thebusiness will be executed.
In sincerity,
Mrs. Sola Yomi AJAYI .
--00000000000084d4f7060ab70dba
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
x">--
=3D"gmail_signature">Dear Good Friend,
How are you together with you=
r family? I hope all is well.
Please=C2=A0 "I'm very sorry =
to intrude on your privacy, but this can't wait, because of the urgency=
of it, I am Mrs. Sola Yomi AJAYI, the Auditing and account manager of U.B.=
A, BANK OUAGADOUGOU, BURKINA FASO,
Please I had the intent to contac=
t you over transfer of funds worth the sum of Ten Million Three Hundred Tho=
usand US Dollars. (US$10.3m) i agree that 50% of the total amount will be f=
or you and 50% for me.
I need your urgent response and assurance of =
trust that you will not deny my share when the fund is transferred to your =
personal bank account.
I look forward to hearing from you immediatel=
y when you receive this message, upon receipt of your reply, I will give yo=
u full details on how thebusiness will be executed.
In sincerity,
>Mrs. Sola Yomi AJAYI .
--00000000000084d4f7060ab70dba--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments