Nigerian spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 11 Feb 2024 06:28:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rZ9rq-00000000AWF-3e6Y
for dave@doctor.nl2k.ab.ca;
Sun, 11 Feb 2024 06:27:34 -0700
Resent-From: The Doctor
Resent-Date: Sun, 11 Feb 2024 06:27:34 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oo1-f65.google.com ([209.85.161.65]:42141)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rZ9VZ-000000009BU-0Ki9
for doctor@nl2k.ab.ca;
Sun, 11 Feb 2024 06:04:36 -0700
Received: by mail-oo1-f65.google.com with SMTP id 006d021491bc7-59505514213so1499312eaf.0
for; Sun, 11 Feb 2024 05:02:38 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1707656552; x=1708261352; darn=nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=jmzQyJ6J6l8yBTawpIhthvNz4xLU6qnjFt8YqQ/AvjU=;
b=SwocsPA8095vaorLpvXEtBNkzh4tGoc95ML0DpBFiptRj8RtAlr57rei06YEfoTkaF
+4KxgqwrDeynO95k6D5Vf7ZsYtb+Tgvou6Emo0YNyNxemJGF03brj8etoZgXBjoa8UFG
CQv8cPMkswWZbsIeOA8p8x1nwQN0puNHKPAWH7s4w8kvWsJdHgo3ZmuZ77ZDmO90Vb97
SJnPN+hBRUdL67dSk7rEuAb403LT0T4JhUYZMVb3EnT0IsWmJv3IA6Gzv+MZjP2GkpaA
dNNLAzl3aCXanY5G8Vq5HQgKA04HoInPKH/HCzmm6bHyuSmULsJzG8Cj30bHX9tQg+fE
zveA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1707656552; x=1708261352;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=jmzQyJ6J6l8yBTawpIhthvNz4xLU6qnjFt8YqQ/AvjU=;
b=qkQG0pa0uQogYAuJidsu4SbFuZ4Uyj/Fhi39TR5bMHDBFxGsGfBIqRRVdPFjOqGhmn
w52unTjIMXh0eE+/R5IlUp9Xod1FvFfbMOr87ZvW+ClTFaUybJeTSS05gO/OCgv+vAg6
2JhWOmTGmHgnjVPn4H/i2GLSOb2DYj/p4qkCFzntq8tp5cHb51XLKmKwDdtObuA3OnF5
OywFtp8z0944+4DaFpYX4iv7MVVGH2JRB7j7LhzEh6YOnkczz4Y1M+xRjIX9ahSFYB68
y1pvcZRr3mxnySWQjvTkiAvCzQFKf36zTU9Mgs8DJ9vqdqV5NAZvTsrklYqDWElycJoq
gpgg==
X-Forwarded-Encrypted: i=1; AJvYcCWTGoMD2TjS+jogPxEQCcWGzAL/SYtAuIh59/wi1CMN02Wz9Wf6wiTkVYY/jis5Sn/5TfPdfF0tXrSmNtsDTXKCwg==
X-Gm-Message-State: AOJu0YzcZkV5jQNm39Nmy7hwX75/NudvQ5BSsxTnhnb64aHsr1rmmf8x
+D39Dhr+VT8fU0xn7EcIEJgId9yXIc3DDNJApo2qcCxoiDTzhqPwA0vHjj38EED+19iOFML5U9I
3qNAAl/uXjJyq8t/jQJ/mAEk6Ovw=
X-Google-Smtp-Source: AGHT+IEXqTfvR1gPLZW0PgKdQ5+2wLAi2PvKQVIom4oYJmnhPgNRvimrvcVnxJwgav1kUd4rvmS2Ki47JGwOrhfuNls=
X-Received: by 2002:a4a:3c13:0:b0:59c:ad0a:1411 with SMTP id
d19-20020a4a3c13000000b0059cad0a1411mr2026011ooa.0.1707656552371; Sun, 11 Feb
2024 05:02:32 -0800 (PST)
MIME-Version: 1.0
Reply-To: austinmusa220@gmail.com
From: "austinmusa220@gmail.com"
Date: Sun, 11 Feb 2024 05:02:21 -0800
Message-ID:
Subject: Greetings Lucky Person,
To: ...
doctor@nl2k.ab.ca ...
Content-Type: multipart/alternative; boundary="00000000000033dbba06111ac68b"
X-Spam_score: 17.4
X-Spam_score_int: 174
X-Spam_bar: +++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Greetings Lucky Person, I'm sorry to invade your privacy
in such a manner. But I actually have a good reason for springing up this
connection. I contacted you specifically regarding an important piece of
information I intend [...]
Content analysis details: (17.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.161.65 listed in list.dnswl.org]
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.161.65 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[austinmusa003(at)gmail.com]
2.5 SORTED_RECIPS Recipient list is sorted by address
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[austinmusa003(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[austinmusa220(at)gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.8 TVD_PH_BODY_META_ALL No description available.
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 TVD_PH_BODY_META No description available.
0.7 PDS_FROM_2_EMAILS No description available.
1.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
1.8 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
Subject: {SPAM?} Greetings Lucky Person,
--00000000000033dbba06111ac68b
Content-Type: text/plain; charset="UTF-8"
--
Greetings Lucky Person,
I'm sorry to invade your privacy in such a manner. But I actually have a
good reason for springing up this connection. I contacted you specifically
regarding an important piece of information I intend sharing with you.
I got your email address from Internet computerized search so I decided to
contact you for this great opportunity.
Let me officially introduce myself to you. I am Austin Musa, from Burkina
Faso, I work with (B.O.A) Bank of Africa Burkina Faso As an account officer.
This is a great opportunity transaction which I notify from our bank an
abandon fund which belongs to our late foreign customer who deposited the
sum of $10.2 million United States dollars, but he died out of cancer and
ever since then no one has applied to claim the fund so I write to you with
confidence that you can be a help so we can get the fund out of the bank as
his foreign business partner note that once the fund is been released to
your wish bank account in your country it will be shared among us in the
ratio of 50 % 50 so if you are interested please kindly forward your
details so we can move towards it.
Your full Name.....
Your Bank Name....
Your Telephone Number....
Your Age And Sex.......
Your Marital Status......
Your Occupation.........
Your Country City........
A Copy Of Your International Passport or Working ID Card or Drivers
License...
Thanks
Mr, Austin Musa
--00000000000033dbba06111ac68b
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
ature_prefix">--
-smartmail=3D"gmail_signature">
iv>
--00000000000033dbba06111ac68b--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 11 Feb 2024 06:28:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rZ9rq-00000000AWF-3e6Y
for dave@doctor.nl2k.ab.ca;
Sun, 11 Feb 2024 06:27:34 -0700
Resent-From: The Doctor
Resent-Date: Sun, 11 Feb 2024 06:27:34 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oo1-f65.google.com ([209.85.161.65]:42141)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rZ9VZ-000000009BU-0Ki9
for doctor@nl2k.ab.ca;
Sun, 11 Feb 2024 06:04:36 -0700
Received: by mail-oo1-f65.google.com with SMTP id 006d021491bc7-59505514213so1499312eaf.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1707656552; x=1708261352; darn=nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=jmzQyJ6J6l8yBTawpIhthvNz4xLU6qnjFt8YqQ/AvjU=;
b=SwocsPA8095vaorLpvXEtBNkzh4tGoc95ML0DpBFiptRj8RtAlr57rei06YEfoTkaF
+4KxgqwrDeynO95k6D5Vf7ZsYtb+Tgvou6Emo0YNyNxemJGF03brj8etoZgXBjoa8UFG
CQv8cPMkswWZbsIeOA8p8x1nwQN0puNHKPAWH7s4w8kvWsJdHgo3ZmuZ77ZDmO90Vb97
SJnPN+hBRUdL67dSk7rEuAb403LT0T4JhUYZMVb3EnT0IsWmJv3IA6Gzv+MZjP2GkpaA
dNNLAzl3aCXanY5G8Vq5HQgKA04HoInPKH/HCzmm6bHyuSmULsJzG8Cj30bHX9tQg+fE
zveA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1707656552; x=1708261352;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=jmzQyJ6J6l8yBTawpIhthvNz4xLU6qnjFt8YqQ/AvjU=;
b=qkQG0pa0uQogYAuJidsu4SbFuZ4Uyj/Fhi39TR5bMHDBFxGsGfBIqRRVdPFjOqGhmn
w52unTjIMXh0eE+/R5IlUp9Xod1FvFfbMOr87ZvW+ClTFaUybJeTSS05gO/OCgv+vAg6
2JhWOmTGmHgnjVPn4H/i2GLSOb2DYj/p4qkCFzntq8tp5cHb51XLKmKwDdtObuA3OnF5
OywFtp8z0944+4DaFpYX4iv7MVVGH2JRB7j7LhzEh6YOnkczz4Y1M+xRjIX9ahSFYB68
y1pvcZRr3mxnySWQjvTkiAvCzQFKf36zTU9Mgs8DJ9vqdqV5NAZvTsrklYqDWElycJoq
gpgg==
X-Forwarded-Encrypted: i=1; AJvYcCWTGoMD2TjS+jogPxEQCcWGzAL/SYtAuIh59/wi1CMN02Wz9Wf6wiTkVYY/jis5Sn/5TfPdfF0tXrSmNtsDTXKCwg==
X-Gm-Message-State: AOJu0YzcZkV5jQNm39Nmy7hwX75/NudvQ5BSsxTnhnb64aHsr1rmmf8x
+D39Dhr+VT8fU0xn7EcIEJgId9yXIc3DDNJApo2qcCxoiDTzhqPwA0vHjj38EED+19iOFML5U9I
3qNAAl/uXjJyq8t/jQJ/mAEk6Ovw=
X-Google-Smtp-Source: AGHT+IEXqTfvR1gPLZW0PgKdQ5+2wLAi2PvKQVIom4oYJmnhPgNRvimrvcVnxJwgav1kUd4rvmS2Ki47JGwOrhfuNls=
X-Received: by 2002:a4a:3c13:0:b0:59c:ad0a:1411 with SMTP id
d19-20020a4a3c13000000b0059cad0a1411mr2026011ooa.0.1707656552371; Sun, 11 Feb
2024 05:02:32 -0800 (PST)
MIME-Version: 1.0
Reply-To: austinmusa220@gmail.com
From: "austinmusa220@gmail.com"
Date: Sun, 11 Feb 2024 05:02:21 -0800
Message-ID:
Subject: Greetings Lucky Person,
To: ...
doctor@nl2k.ab.ca ...
Content-Type: multipart/alternative; boundary="00000000000033dbba06111ac68b"
X-Spam_score: 17.4
X-Spam_score_int: 174
X-Spam_bar: +++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Greetings Lucky Person, I'm sorry to invade your privacy
in such a manner. But I actually have a good reason for springing up this
connection. I contacted you specifically regarding an important piece of
information I intend [...]
Content analysis details: (17.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.161.65 listed in list.dnswl.org]
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.161.65 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[austinmusa003(at)gmail.com]
2.5 SORTED_RECIPS Recipient list is sorted by address
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[austinmusa003(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[austinmusa220(at)gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.8 TVD_PH_BODY_META_ALL No description available.
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 TVD_PH_BODY_META No description available.
0.7 PDS_FROM_2_EMAILS No description available.
1.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
1.8 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
Subject: {SPAM?} Greetings Lucky Person,
--00000000000033dbba06111ac68b
Content-Type: text/plain; charset="UTF-8"
--
Greetings Lucky Person,
I'm sorry to invade your privacy in such a manner. But I actually have a
good reason for springing up this connection. I contacted you specifically
regarding an important piece of information I intend sharing with you.
I got your email address from Internet computerized search so I decided to
contact you for this great opportunity.
Let me officially introduce myself to you. I am Austin Musa, from Burkina
Faso, I work with (B.O.A) Bank of Africa Burkina Faso As an account officer.
This is a great opportunity transaction which I notify from our bank an
abandon fund which belongs to our late foreign customer who deposited the
sum of $10.2 million United States dollars, but he died out of cancer and
ever since then no one has applied to claim the fund so I write to you with
confidence that you can be a help so we can get the fund out of the bank as
his foreign business partner note that once the fund is been released to
your wish bank account in your country it will be shared among us in the
ratio of 50 % 50 so if you are interested please kindly forward your
details so we can move towards it.
Your full Name.....
Your Bank Name....
Your Telephone Number....
Your Age And Sex.......
Your Marital Status......
Your Occupation.........
Your Country City........
A Copy Of Your International Passport or Working ID Card or Drivers
License...
Thanks
Mr, Austin Musa
--00000000000033dbba06111ac68b
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
ature_prefix">--
-smartmail=3D"gmail_signature">
=C2=A0
Greetings Lucky P=
erson,
I'm sorry to invade your privacy in such a manner. But I =
actually have a good reason for springing up this connection. I contacted y=
ou specifically regarding an important piece of information I intend sharin=
g with you.
I got your email address from Internet computerized sear=
ch so I decided to contact you for this great opportunity.
Let me of=
ficially introduce myself to you. I am Austin Musa, from Burkina Faso, I wo=
rk with (B.O.A) Bank of Africa Burkina Faso As an account officer.
T=
his is a great opportunity=C2=A0 transaction which I notify from our bank a=
n abandon fund which belongs to our late foreign customer who deposited the=
sum of $10.2 million United States dollars, but he died out of cancer and =
ever since then no one has applied to claim the fund so I write to you with=
confidence that you can be a help so we can get the fund out of the bank a=
s his foreign business partner note that once the fund is been released to =
your wish bank account in your country it will be shared among us in the ra=
tio of 50 % 50 so if you are interested please kindly forward your details =
so we can move towards it.
Your full Name.....
Your Bank Name=
....
Your Telephone Number....
Your Age And Sex.......
>Your Marital Status......
Your Occupation.........
Your Coun=
try City........
A Copy Of Your International Passport or Working ID=
Card or Drivers License...
Thanks
Mr, Austin Musa
Greetings Lucky P=
erson,
I'm sorry to invade your privacy in such a manner. But I =
actually have a good reason for springing up this connection. I contacted y=
ou specifically regarding an important piece of information I intend sharin=
g with you.
I got your email address from Internet computerized sear=
ch so I decided to contact you for this great opportunity.
Let me of=
ficially introduce myself to you. I am Austin Musa, from Burkina Faso, I wo=
rk with (B.O.A) Bank of Africa Burkina Faso As an account officer.
T=
his is a great opportunity=C2=A0 transaction which I notify from our bank a=
n abandon fund which belongs to our late foreign customer who deposited the=
sum of $10.2 million United States dollars, but he died out of cancer and =
ever since then no one has applied to claim the fund so I write to you with=
confidence that you can be a help so we can get the fund out of the bank a=
s his foreign business partner note that once the fund is been released to =
your wish bank account in your country it will be shared among us in the ra=
tio of 50 % 50 so if you are interested please kindly forward your details =
so we can move towards it.
Your full Name.....
Your Bank Name=
....
Your Telephone Number....
Your Age And Sex.......
>Your Marital Status......
Your Occupation.........
Your Coun=
try City........
A Copy Of Your International Passport or Working ID=
Card or Drivers License...
Thanks
Mr, Austin Musa
iv>
--00000000000033dbba06111ac68b--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments