Nigerian spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 25 Jan 2024 13:35:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rT6R7-00000000NGG-2VPY
for dave@doctor.nl2k.ab.ca;
Thu, 25 Jan 2024 13:34:57 -0700
Resent-From: The Doctor
Resent-Date: Thu, 25 Jan 2024 13:34:57 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f174.google.com ([209.85.208.174]:46212)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rT4bw-00000000L2p-2QTe
for MAILER-DAEMON@doctor.nl2k.ab.ca;
Thu, 25 Jan 2024 11:38:03 -0700
Received: by mail-lj1-f174.google.com with SMTP id 38308e7fff4ca-2cdfa8e69b5so77217301fa.0
for; Thu, 25 Jan 2024 10:36:06 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1706207759; x=1706812559; darn=doctor.nl2k.ab.ca;
h=cc:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=HtNnoRTl92TrFGZFTa7sMmuhIIzNospyRBtPc0txftg=;
b=dfks4Aqc5bMznHHmA0B/jReFqUCX4y75/v3hntd4xxQIGC2afZ2BhtF0sEne+h+jFC
0wA9r/Epih+RNZF0vJfFe51EuayrvqkStHAQO1Sh9jChFKGUQhQmBtpTtJvFVUCbRqGv
1GMD+xzW2TWJ56Q3zyjIIb0wrX3iweed35OWmmUWXlLOsGML8QyPhGcsctkbDR81JKNF
g7coZXLGImhemdCjW4mNZWCRlLoIAH7sesELrasbmMS8oX1wExmIB1ei2gHpmuJSotZl
U1bkuB8lLcugofg/7tsXCHjYQxrTQJfL1bAvHEhVO1AYyGm/fcnACZwqyYz8lbtQq+zQ
72GA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1706207759; x=1706812559;
h=cc:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=HtNnoRTl92TrFGZFTa7sMmuhIIzNospyRBtPc0txftg=;
b=wTCkFlwI/JWitOZOZE0UFq6N4wIUAoCzdhXh+/MliP3XmQBonLYcL1eXxLLRMnukUF
CIumdfyk/wSQtPaZIPLeRKdPd/zspzN604ynyiqO4Aq8HnLg09ZTAopgSxYpU8ouneJ2
PzXsd/gS8DJBg6zEDRCLFue98hHUsX0t4XByYLQUcg355BxVsnCd0fFQNXBqA4E7RQSd
CcMwkRqBhat9WmDZliyRz68f7WthMEq4KFfLz1AFT6R7lBwIy5ZEfMUdor21JgGn5+CQ
Wgb7mWrWzAkMt/x+YeeU2BdhRg1PMYQjktQyvNW6N9uGWIYelg7AXwSKycUMj0smrY9T
SrtA==
X-Gm-Message-State: AOJu0YzpZhvU4KGSF1HiiYh1OxIKsvmKVkjVjWQaddXHK9gxeIiTLgJB
rbpjzUWoMS/VHGCvu5fQ7COjhW4rmJM45XIfHb1FkaJYE4ETANPYJXQ50UkB8cB6+iD+JmTt33m
CI5300MtCVmoSzhJH+TWXnT3ZoIONvvcD7y0=
X-Received: by 2002:a2e:2e1a:0:b0:2cf:33b9:81e with SMTP id
u26-20020a2e2e1a000000b002cf33b9081emt38143lju.38.1706207386006; Thu, 25 Jan
2024 10:29:46 -0800 (PST)
MIME-Version: 1.0
Reply-To: austinmusa220@gmail.com
From: Austin musa
Date: Thu, 25 Jan 2024 10:29:31 -0800
Message-ID:
Subject: Greetings Lucky Person,
Cc: MAILER-DAEMON@doctor.nl2k.ab.ca
Content-Type: multipart/alternative; boundary="000000000000649db8060fc9732e"
X-Spam_score: 18.8
X-Spam_score_int: 188
X-Spam_bar: ++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Greetings Lucky Person, I'm sorry to invade your privacy
in such a manner. But I actually have a good reason for springing up this
connection. I contacted you specifically regarding an important piece of
information I intend [...]
Content analysis details: (18.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.174 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[evangelistruthikejehovah6(at)gmail.com]
1.2 MISSING_HEADERS Missing To: header
1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[evangelistruthikejehovah6(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[austinmusa220(at)gmail.com]
2.5 SORTED_RECIPS Recipient list is sorted by address
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.174 listed in wl.mailspike.net]
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
1.4 MALFORMED_FREEMAIL Bad headers on message from free email service
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.6 TVD_PH_BODY_META_ALL No description available.
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
2.0 TVD_PH_BODY_META No description available.
1.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
1.8 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
Subject: {SPAM?} Greetings Lucky Person,
--000000000000649db8060fc9732e
Content-Type: text/plain; charset="UTF-8"
--
Greetings Lucky Person,
I'm sorry to invade your privacy in such a manner. But I actually have a
good reason for springing up this connection. I contacted you specifically
regarding an important piece of information I intend sharing with you.
I got your email address from Internet computerized search so I decided to
contact you for this great opportunity.
Let me officially introduce myself to you. I am Austin Musa, from Burkina
Faso, I work with (B.O.A) Bank of Africa Burkina Faso As an account officer.
This is a great opportunity transaction which I notify from our bank an
abandon fund which belongs to our late foreign customer who deposited the
sum of $10.2 million United States dollars, but he died out of cancer and
ever since then no one has applied to claim the fund so I write to you with
confidence that you can be a help so we can get the fund out of the bank as
his foreign business partner note that once the fund is been released to
your wish bank account in your country it will be shared among us in the
ratio of 50 % 50 so if you are interested please kindly forward your
details so we can move towards it.
Your full Name.....
Your Bank Name....
Your Telephone Number....
Your Age And Sex.......
Your Marital Status......
Your Occupation.........
Your Country City........
A Copy Of Your International Passport or Working ID Card or Drivers
License...
Thanks
Mr, Austin Musa
--000000000000649db8060fc9732e
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
ature_prefix">--
-smartmail=3D"gmail_signature">
>
--000000000000649db8060fc9732e--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 25 Jan 2024 13:35:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rT6R7-00000000NGG-2VPY
for dave@doctor.nl2k.ab.ca;
Thu, 25 Jan 2024 13:34:57 -0700
Resent-From: The Doctor
Resent-Date: Thu, 25 Jan 2024 13:34:57 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f174.google.com ([209.85.208.174]:46212)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rT4bw-00000000L2p-2QTe
for MAILER-DAEMON@doctor.nl2k.ab.ca;
Thu, 25 Jan 2024 11:38:03 -0700
Received: by mail-lj1-f174.google.com with SMTP id 38308e7fff4ca-2cdfa8e69b5so77217301fa.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1706207759; x=1706812559; darn=doctor.nl2k.ab.ca;
h=cc:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=HtNnoRTl92TrFGZFTa7sMmuhIIzNospyRBtPc0txftg=;
b=dfks4Aqc5bMznHHmA0B/jReFqUCX4y75/v3hntd4xxQIGC2afZ2BhtF0sEne+h+jFC
0wA9r/Epih+RNZF0vJfFe51EuayrvqkStHAQO1Sh9jChFKGUQhQmBtpTtJvFVUCbRqGv
1GMD+xzW2TWJ56Q3zyjIIb0wrX3iweed35OWmmUWXlLOsGML8QyPhGcsctkbDR81JKNF
g7coZXLGImhemdCjW4mNZWCRlLoIAH7sesELrasbmMS8oX1wExmIB1ei2gHpmuJSotZl
U1bkuB8lLcugofg/7tsXCHjYQxrTQJfL1bAvHEhVO1AYyGm/fcnACZwqyYz8lbtQq+zQ
72GA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1706207759; x=1706812559;
h=cc:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=HtNnoRTl92TrFGZFTa7sMmuhIIzNospyRBtPc0txftg=;
b=wTCkFlwI/JWitOZOZE0UFq6N4wIUAoCzdhXh+/MliP3XmQBonLYcL1eXxLLRMnukUF
CIumdfyk/wSQtPaZIPLeRKdPd/zspzN604ynyiqO4Aq8HnLg09ZTAopgSxYpU8ouneJ2
PzXsd/gS8DJBg6zEDRCLFue98hHUsX0t4XByYLQUcg355BxVsnCd0fFQNXBqA4E7RQSd
CcMwkRqBhat9WmDZliyRz68f7WthMEq4KFfLz1AFT6R7lBwIy5ZEfMUdor21JgGn5+CQ
Wgb7mWrWzAkMt/x+YeeU2BdhRg1PMYQjktQyvNW6N9uGWIYelg7AXwSKycUMj0smrY9T
SrtA==
X-Gm-Message-State: AOJu0YzpZhvU4KGSF1HiiYh1OxIKsvmKVkjVjWQaddXHK9gxeIiTLgJB
rbpjzUWoMS/VHGCvu5fQ7COjhW4rmJM45XIfHb1FkaJYE4ETANPYJXQ50UkB8cB6+iD+JmTt33m
CI5300MtCVmoSzhJH+TWXnT3ZoIONvvcD7y0=
X-Received: by 2002:a2e:2e1a:0:b0:2cf:33b9:81e with SMTP id
u26-20020a2e2e1a000000b002cf33b9081emt38143lju.38.1706207386006; Thu, 25 Jan
2024 10:29:46 -0800 (PST)
MIME-Version: 1.0
Reply-To: austinmusa220@gmail.com
From: Austin musa
Date: Thu, 25 Jan 2024 10:29:31 -0800
Message-ID:
Subject: Greetings Lucky Person,
Cc: MAILER-DAEMON@doctor.nl2k.ab.ca
Content-Type: multipart/alternative; boundary="000000000000649db8060fc9732e"
X-Spam_score: 18.8
X-Spam_score_int: 188
X-Spam_bar: ++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Greetings Lucky Person, I'm sorry to invade your privacy
in such a manner. But I actually have a good reason for springing up this
connection. I contacted you specifically regarding an important piece of
information I intend [...]
Content analysis details: (18.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.174 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[evangelistruthikejehovah6(at)gmail.com]
1.2 MISSING_HEADERS Missing To: header
1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[evangelistruthikejehovah6(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[austinmusa220(at)gmail.com]
2.5 SORTED_RECIPS Recipient list is sorted by address
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.174 listed in wl.mailspike.net]
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
1.4 MALFORMED_FREEMAIL Bad headers on message from free email service
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.6 TVD_PH_BODY_META_ALL No description available.
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
2.0 TVD_PH_BODY_META No description available.
1.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
1.8 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
Subject: {SPAM?} Greetings Lucky Person,
--000000000000649db8060fc9732e
Content-Type: text/plain; charset="UTF-8"
--
Greetings Lucky Person,
I'm sorry to invade your privacy in such a manner. But I actually have a
good reason for springing up this connection. I contacted you specifically
regarding an important piece of information I intend sharing with you.
I got your email address from Internet computerized search so I decided to
contact you for this great opportunity.
Let me officially introduce myself to you. I am Austin Musa, from Burkina
Faso, I work with (B.O.A) Bank of Africa Burkina Faso As an account officer.
This is a great opportunity transaction which I notify from our bank an
abandon fund which belongs to our late foreign customer who deposited the
sum of $10.2 million United States dollars, but he died out of cancer and
ever since then no one has applied to claim the fund so I write to you with
confidence that you can be a help so we can get the fund out of the bank as
his foreign business partner note that once the fund is been released to
your wish bank account in your country it will be shared among us in the
ratio of 50 % 50 so if you are interested please kindly forward your
details so we can move towards it.
Your full Name.....
Your Bank Name....
Your Telephone Number....
Your Age And Sex.......
Your Marital Status......
Your Occupation.........
Your Country City........
A Copy Of Your International Passport or Working ID Card or Drivers
License...
Thanks
Mr, Austin Musa
--000000000000649db8060fc9732e
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
ature_prefix">--
-smartmail=3D"gmail_signature">
Greetin=
gs Lucky Person,
gs Lucky Person,
I'm sorry to invade your priv=
acy in such a manner. But I actually have a good reason for springing up th=
is connection. I contacted you specifically regarding an important piece of=
information I intend sharing with you.
acy in such a manner. But I actually have a good reason for springing up th=
is connection. I contacted you specifically regarding an important piece of=
information I intend sharing with you.
I got your=
email address from Internet computerized search so I decided to contact yo=
u for this great opportunity.
email address from Internet computerized search so I decided to contact yo=
u for this great opportunity.
Let me officially in=
troduce myself to you. I am Austin Musa, from Burkina Faso, I work with (B.=
O.A) Bank of Africa Burkina Faso As an account officer.
troduce myself to you. I am Austin Musa, from Burkina Faso, I work with (B.=
O.A) Bank of Africa Burkina Faso As an account officer.
>
This is a great opportunity=C2=A0 transaction which I notify from our=
bank an abandon fund which belongs to our late foreign customer who deposi=
ted the sum of $10.2 million United States dollars, but he died out of canc=
er and ever since then no one has applied to claim the fund so I write to y=
ou with confidence that you can be a help so we can get the fund out of the=
bank as his foreign business partner note that once the fund is been relea=
sed to your wish bank account in your country it will be shared among us in=
the ratio of 50 % 50 so if you are interested please kindly forward your d=
etails so we can move towards it.
bank an abandon fund which belongs to our late foreign customer who deposi=
ted the sum of $10.2 million United States dollars, but he died out of canc=
er and ever since then no one has applied to claim the fund so I write to y=
ou with confidence that you can be a help so we can get the fund out of the=
bank as his foreign business partner note that once the fund is been relea=
sed to your wish bank account in your country it will be shared among us in=
the ratio of 50 % 50 so if you are interested please kindly forward your d=
etails so we can move towards it.
Your full Name..=
...
...
Your Bank Name....
Yo=
ur Telephone Number....
ur Telephone Number....
Your Age And Sex.......
iv>
iv>
Your Marital Status......
Y=
our Occupation.........
our Occupation.........
Your Country City........<=
/div>
/div>
A Copy Of Your International Passport or Working I=
D Card or Drivers License...
D Card or Drivers License...
Thanks
Mr, =
Austin Musa
Austin Musa
--000000000000649db8060fc9732e--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments