Nigerian Google Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 22 Jan 2024 23:19:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rSA6i-000000001Cb-3ZSG
for dave@doctor.nl2k.ab.ca;
Mon, 22 Jan 2024 23:18:00 -0700
Resent-From: The Doctor
Resent-Date: Mon, 22 Jan 2024 23:18:00 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj1-f53.google.com ([209.85.216.53]:44471)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rS8sm-00000000P3x-21rP
for doctor@nl2k.ab.ca;
Mon, 22 Jan 2024 21:59:35 -0700
Received: by mail-pj1-f53.google.com with SMTP id 98e67ed59e1d1-2906773c7e9so1016609a91.1
for; Mon, 22 Jan 2024 20:57:37 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1705985852; x=1706590652; darn=nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=iMcz2rv94v4lf2kv0raDUgrEYUC3MnIEZ0ILqfqubDA=;
b=h/ixDwasDcfwR17gioL1Q6FU4wDbmX7R21owLY/kfLV+cjcJjAM+4IlmsYUjNfgO4R
23sBfesSaBNS2GdL2EQ2aZAEoZ86pNyMCrYCN5aAWi4XSgD1d4w51lP8WWiQZPo9zSbt
+v9Q3r3a4kE7NeixF2LChEvR0fcRLYFfK91rDh3BtW62DPcSrn515rnV4fSe/02J66lP
4P4qrV174oCBYOZHHg01QXoLzY7aJZFh/4qtgibXsXfSLB2hl6pe5ByyTj34+rDTz7By
AuIJv8bkAqU5igRPovRdThO65NG+a1PL7XXRU6RU8WxQTrFsUFYEoplW4T3ZqRh39+5H
hxkw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1705985852; x=1706590652;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=iMcz2rv94v4lf2kv0raDUgrEYUC3MnIEZ0ILqfqubDA=;
b=PqsqbUSzdsU5KB/ekCpp8vb94rt/HaCFL6brcl74/TVlABQ3SoQcAia2L8QG1p/sxP
6X/ONAQvfrbeeuHGDxnWNmk7nkmLd1UKEu1yxFPVlVcb8VPqhheG/vSvhucSb6x/Vfv7
5LPAksWWhcF1ZXWx8lx1WZHxOL4hn0NBXJrvuN7TqTxUm8lv65Z7lKOK48WRApvaE2Uk
9aAxP4Sk0j4TSAV5/RlYWqhZ6juSrf29j2kVWb9GDCZJL6p7jg+k1uTHGChgtVLSRXNV
1OBMPJTftQmifvraGI7F5ue8HsAygkuTvg3ZQc/KhpMpRCIih6yhvTi09yKDk7JpPzbi
n42w==
X-Gm-Message-State: AOJu0YwaO+mvRt+Zvr9oJGGF65+mLdeVlHL2X9jIAba6Gq21FANQhVJd
Xng1X2UImC0OGQ/YpMnQKED3zIwISZeiiiijekflBXV3Z5EQeSBB3Ex4ltBQsnfr1DqNRwcMrHl
TGsWyGa6kCsaI5aqOfYkvpH2zYWo=
X-Google-Smtp-Source: AGHT+IFxT1QOqlvludwO4Mx/Vy0h7mHi8ex4hoASbX7XTd6xJgKehV/9jNaEMeRQ9h0Z4uPvx0Da9uixi3mRyI5EkXQ=
X-Received: by 2002:a17:90a:c38b:b0:28f:eeb2:3809 with SMTP id
h11-20020a17090ac38b00b0028feeb23809mr2005208pjt.94.1705985851909; Mon, 22
Jan 2024 20:57:31 -0800 (PST)
MIME-Version: 1.0
Reply-To: austinmusa220@gmail.com
From: Austin Musa
Date: Mon, 22 Jan 2024 20:57:18 -0800
Message-ID:
Subject: Greetings Lucky Person,
To: ...
Content-Type: multipart/alternative; boundary="000000000000b1ee9c060f95c80b"
X-Spam_score: 15.4
X-Spam_score_int: 154
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings Lucky Person, I'm sorry to invade your privacy in
such a manner. But I actually have a good reason for springing up this connection.
I contacted you specifically regarding an important piece of information
I intend [...]
Content analysis details: (15.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[alissy352(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[alissy352(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[austinmusa220(at)gmail.com]
2.5 SORTED_RECIPS Recipient list is sorted by address
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.216.53 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.216.53 listed in wl.mailspike.net]
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.6 TVD_PH_BODY_META_ALL No description available.
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
2.0 TVD_PH_BODY_META No description available.
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
1.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
1.8 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
Subject: {SPAM?} Greetings Lucky Person,
--000000000000b1ee9c060f95c80b
Content-Type: text/plain; charset="UTF-8"
Greetings Lucky Person,
I'm sorry to invade your privacy in such a manner. But I actually have a
good reason for springing up this connection. I contacted you specifically
regarding an important piece of information I intend sharing with you.
I got your email address from Internet computerized search so I decided to
contact you for this great opportunity.
Let me officially introduce myself to you. I am Austin Musa, from Burkina
Faso, I work with (B.O.A) Bank of Africa Burkina Faso As an account officer.
This is a great opportunity transaction which I notify from our bank an
abandon fund which belongs to our late foreign customer who deposited the
sum of $10.2 million United States dollars, but he died out of cancer and
ever since then no one has applied to claim the fund so I write to you with
confidence that you can be a help so we can get the fund out of the bank as
his foreign business partner note that once the fund is been released to
your wish bank account in your country it will be shared among us in the
ratio of 50 % 50 so if you are interested please kindly forward your
details so we can move towards it.
Your full Name.....
Your Bank Name....
Your Telephone Number....
Your Age And Sex.......
Your Marital Status......
Your Occupation.........
Your Country City........
A Copy Of Your International Passport or Working ID Card or Drivers
License...
Thanks
Mr, Austin Musa
--000000000000b1ee9c060f95c80b
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
nature" data-smartmail=3D"gmail_signature">
r>
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 22 Jan 2024 23:19:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rSA6i-000000001Cb-3ZSG
for dave@doctor.nl2k.ab.ca;
Mon, 22 Jan 2024 23:18:00 -0700
Resent-From: The Doctor
Resent-Date: Mon, 22 Jan 2024 23:18:00 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj1-f53.google.com ([209.85.216.53]:44471)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rS8sm-00000000P3x-21rP
for doctor@nl2k.ab.ca;
Mon, 22 Jan 2024 21:59:35 -0700
Received: by mail-pj1-f53.google.com with SMTP id 98e67ed59e1d1-2906773c7e9so1016609a91.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1705985852; x=1706590652; darn=nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=iMcz2rv94v4lf2kv0raDUgrEYUC3MnIEZ0ILqfqubDA=;
b=h/ixDwasDcfwR17gioL1Q6FU4wDbmX7R21owLY/kfLV+cjcJjAM+4IlmsYUjNfgO4R
23sBfesSaBNS2GdL2EQ2aZAEoZ86pNyMCrYCN5aAWi4XSgD1d4w51lP8WWiQZPo9zSbt
+v9Q3r3a4kE7NeixF2LChEvR0fcRLYFfK91rDh3BtW62DPcSrn515rnV4fSe/02J66lP
4P4qrV174oCBYOZHHg01QXoLzY7aJZFh/4qtgibXsXfSLB2hl6pe5ByyTj34+rDTz7By
AuIJv8bkAqU5igRPovRdThO65NG+a1PL7XXRU6RU8WxQTrFsUFYEoplW4T3ZqRh39+5H
hxkw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1705985852; x=1706590652;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=iMcz2rv94v4lf2kv0raDUgrEYUC3MnIEZ0ILqfqubDA=;
b=PqsqbUSzdsU5KB/ekCpp8vb94rt/HaCFL6brcl74/TVlABQ3SoQcAia2L8QG1p/sxP
6X/ONAQvfrbeeuHGDxnWNmk7nkmLd1UKEu1yxFPVlVcb8VPqhheG/vSvhucSb6x/Vfv7
5LPAksWWhcF1ZXWx8lx1WZHxOL4hn0NBXJrvuN7TqTxUm8lv65Z7lKOK48WRApvaE2Uk
9aAxP4Sk0j4TSAV5/RlYWqhZ6juSrf29j2kVWb9GDCZJL6p7jg+k1uTHGChgtVLSRXNV
1OBMPJTftQmifvraGI7F5ue8HsAygkuTvg3ZQc/KhpMpRCIih6yhvTi09yKDk7JpPzbi
n42w==
X-Gm-Message-State: AOJu0YwaO+mvRt+Zvr9oJGGF65+mLdeVlHL2X9jIAba6Gq21FANQhVJd
Xng1X2UImC0OGQ/YpMnQKED3zIwISZeiiiijekflBXV3Z5EQeSBB3Ex4ltBQsnfr1DqNRwcMrHl
TGsWyGa6kCsaI5aqOfYkvpH2zYWo=
X-Google-Smtp-Source: AGHT+IFxT1QOqlvludwO4Mx/Vy0h7mHi8ex4hoASbX7XTd6xJgKehV/9jNaEMeRQ9h0Z4uPvx0Da9uixi3mRyI5EkXQ=
X-Received: by 2002:a17:90a:c38b:b0:28f:eeb2:3809 with SMTP id
h11-20020a17090ac38b00b0028feeb23809mr2005208pjt.94.1705985851909; Mon, 22
Jan 2024 20:57:31 -0800 (PST)
MIME-Version: 1.0
Reply-To: austinmusa220@gmail.com
From: Austin Musa
Date: Mon, 22 Jan 2024 20:57:18 -0800
Message-ID:
Subject: Greetings Lucky Person,
To: ...
Content-Type: multipart/alternative; boundary="000000000000b1ee9c060f95c80b"
X-Spam_score: 15.4
X-Spam_score_int: 154
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings Lucky Person, I'm sorry to invade your privacy in
such a manner. But I actually have a good reason for springing up this connection.
I contacted you specifically regarding an important piece of information
I intend [...]
Content analysis details: (15.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[alissy352(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[alissy352(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[austinmusa220(at)gmail.com]
2.5 SORTED_RECIPS Recipient list is sorted by address
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.216.53 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.216.53 listed in wl.mailspike.net]
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.6 TVD_PH_BODY_META_ALL No description available.
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
2.0 TVD_PH_BODY_META No description available.
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
1.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
1.8 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
Subject: {SPAM?} Greetings Lucky Person,
--000000000000b1ee9c060f95c80b
Content-Type: text/plain; charset="UTF-8"
Greetings Lucky Person,
I'm sorry to invade your privacy in such a manner. But I actually have a
good reason for springing up this connection. I contacted you specifically
regarding an important piece of information I intend sharing with you.
I got your email address from Internet computerized search so I decided to
contact you for this great opportunity.
Let me officially introduce myself to you. I am Austin Musa, from Burkina
Faso, I work with (B.O.A) Bank of Africa Burkina Faso As an account officer.
This is a great opportunity transaction which I notify from our bank an
abandon fund which belongs to our late foreign customer who deposited the
sum of $10.2 million United States dollars, but he died out of cancer and
ever since then no one has applied to claim the fund so I write to you with
confidence that you can be a help so we can get the fund out of the bank as
his foreign business partner note that once the fund is been released to
your wish bank account in your country it will be shared among us in the
ratio of 50 % 50 so if you are interested please kindly forward your
details so we can move towards it.
Your full Name.....
Your Bank Name....
Your Telephone Number....
Your Age And Sex.......
Your Marital Status......
Your Occupation.........
Your Country City........
A Copy Of Your International Passport or Working ID Card or Drivers
License...
Thanks
Mr, Austin Musa
--000000000000b1ee9c060f95c80b
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
nature" data-smartmail=3D"gmail_signature">
=C2=A0
=
div>
=
Greetings Lucky Person,
I'm
sorry to invade your privacy in such a manner. But I actually have a=20
good reason for springing up this connection. I contacted you=20
specifically regarding an important piece of information I intend=20
sharing with you.
sorry to invade your privacy in such a manner. But I actually have a=20
good reason for springing up this connection. I contacted you=20
specifically regarding an important piece of information I intend=20
sharing with you.
I got your email address from In=
ternet computerized search so I decided to contact you for this great oppor=
tunity.
ternet computerized search so I decided to contact you for this great oppor=
tunity.
Let
me officially introduce myself to you. I am Austin Musa, from Burkina=20
Faso, I work with (B.O.A) Bank of Africa Burkina Faso As an account=20
officer.
me officially introduce myself to you. I am Austin Musa, from Burkina=20
Faso, I work with (B.O.A) Bank of Africa Burkina Faso As an account=20
officer.
This is a great opportunity=C2=A0=20
transaction which I notify from our bank an abandon fund which belongs=20
to our late foreign customer who deposited the sum of $10.2 million=20
United States dollars, but he died out of cancer and ever since then no=20
one has applied to claim the fund so I write to you with confidence that
you can be a help so we can get the fund out of the bank as his foreign
business partner note that once the fund is been released to your wish=20
bank account in your country it will be shared among us in the ratio of=20
50 % 50 so if you are interested please kindly forward your details so=20
we can move towards it.
transaction which I notify from our bank an abandon fund which belongs=20
to our late foreign customer who deposited the sum of $10.2 million=20
United States dollars, but he died out of cancer and ever since then no=20
one has applied to claim the fund so I write to you with confidence that
you can be a help so we can get the fund out of the bank as his foreign
business partner note that once the fund is been released to your wish=20
bank account in your country it will be shared among us in the ratio of=20
50 % 50 so if you are interested please kindly forward your details so=20
we can move towards it.
Your full Name.....
<=div>
Your Bank Name....
Your Telepho=
ne Number....
ne Number....
Your Age And Sex.......
r>
Your Marital Status......
Your Occupa=
tion.........
tion.........
Your Country City........
=
A Copy Of Your International Passport or Working ID Card or =
Drivers License...
Drivers License...
Thanks
Mr, Austin Mus=
a
a
--000000000000b1ee9c060f95c80b--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments