Nigerian spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 28 Feb 2024 07:31:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rfKxU-000000001A8-1P8G
for dave@doctor.nl2k.ab.ca;
Wed, 28 Feb 2024 07:30:56 -0700
Resent-From: The Doctor
Resent-Date: Wed, 28 Feb 2024 07:30:56 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f52.google.com ([209.85.167.52]:52293)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rfHKA-00000000DzU-1gyN
for doctor@doctor.nl2k.ab.ca;
Wed, 28 Feb 2024 03:38:09 -0700
Received: by mail-lf1-f52.google.com with SMTP id 2adb3069b0e04-512d19e2cb8so7684874e87.0
for; Wed, 28 Feb 2024 02:36:11 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1709116565; x=1709721365; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=why7A0OBNRUH/W+n+q2V3CWOI1jgi8RqqMdTJ+TLIlY=;
b=Po0CyA0EYuNyDdsri42wbumznJTY1TInLOLz6vbtyxdfAiOf2c3jSydzX/J+CPH32Q
taHfE+tnxyNHy8owpP99ziCLBmmyt/mh+Fhr5mT4Ihd7KT5mTY798XY7ThbsBks/wXLl
m+k9xJO4F/VtxNwIiKNLhOXJ+vWhee0gBay1WfjHpp/b8dNuLN+RgLcYSJsEDQWoOal+
mdEGprLJ9tEfC/LE1OxQLByKTytbLJC6CySJXQeX1E4lFNgRm40EuWZzCP/181X6BZLb
Xz3++PcJ8ZoozbgH89zlJpFocW8CqtFQ/IIp93gWFk6NV3q4KUKUKSDyRtsNyTQA3vcJ
X18Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1709116565; x=1709721365;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=why7A0OBNRUH/W+n+q2V3CWOI1jgi8RqqMdTJ+TLIlY=;
b=HvDfCwll/v3uQqM4U+roG0itbbbJRCggIGUmOU85KwKT4UUMy16wG1Eb/yY/iGAq+b
ms8fi/XVA/y1ihCIFo6ATjp9aY/RFSnKFaQfRexWeuUvT+m8eKJWyYVhqUSjyZIhrQJo
RpzE1NDxQwF5XOk2ikheTYJ5wei+Fdk6F7KAkJgEWK9ZqLm4aUx0iexUzwnxSY34CaMg
jm5hp9TLYLzReiuwV7yLXSbA8hqH56XCf2+ZFAFJcxNqtEJC1I+w+p8UJorwD7gjECtc
zLdDhFd2bkxHH0guYZTv8kVWlOwxjBv9Nfzjl1758IEP5yw0N9lJYD5O6x6/lxY/1KZB
8+kQ==
X-Forwarded-Encrypted: i=1; AJvYcCVWeUYCo520qYk1NQ03s03BHXTJiSHBRX/McF1Em9rKycAg9YKPcqowXUAxflvwk2qsz81tN84TG+N8zFckoPpcbTxkS8qyMzs=
X-Gm-Message-State: AOJu0YzS0L1mpvZAUiQrVbuhe/PyqyLyyNVbKDfjH6Xc/EKLO8Et7VAc
aemmKmx0gFoNqhtqD1Yc3T3FWoap8Yo/w6HOFmsmvDQQAIzBcnLk7TzM/bipoyDsimGX/qiYPpD
tss2w+Z3buKPF8eBFXhMfnrYYTW3uhrUq3Gn0Tkqidxs=
X-Google-Smtp-Source: AGHT+IGboe1Jvlzml86DQ9aH2R5Azsaz6xF3DJQXvMEleg3MDnEyBYZ9aFwCN6Pb3GN6Mpijopa4lhgilcjgCsESXso=
X-Received: by 2002:a05:651c:b08:b0:2d2:dd39:ecee with SMTP id
b8-20020a05651c0b0800b002d2dd39eceemr7962ljr.7.1709113034696; Wed, 28 Feb
2024 01:37:14 -0800 (PST)
MIME-Version: 1.0
From: Brian Kawakami
Date: Wed, 28 Feb 2024 01:36:30 -0800
Message-ID:
Subject: GOOD DAY 01
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000506d6c06126de3a7"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 10.7
X-Spam_score_int: 107
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Attention This is to officially inform you that United Nations
Secretary general Mr. António Guterres has advised my office for an immediate
release of your unpaid Contract/inheritance funds without any delay, [...]
Content analysis details: (10.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.52 listed in list.dnswl.org]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[briankawakami101(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[briankawakami101(at)gmail.com]
0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.5 MILLION_USD BODY: Talks about millions of dollars
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.52 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 LOTTO_DEPT Claims Department
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} GOOD DAY 01
--000000000000506d6c06126de3a7
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Attention
This is to officially inform you that United Nations Secretary
general Mr. Ant=C3=B3nio Guterres has advised my office for an immediate
release of your unpaid Contract/inheritance funds without any delay,
Kindly forward Your Full Name: Your Address: Your Mobile Number: A
copy of your verifiable Identity document for more verification to
avoid any wrong payment all the legal documents will be provided to
you immediately for the release of your $1,500,000.00 One Million Five
Hundred Thousand United States Dollars.
Yours Sincerely
Brian Kawakami
International Payment Department
United Nations Headquarters New York, United States
Equity Bank
--000000000000506d6c06126de3a7
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--000000000000506d6c06126de3a7--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 28 Feb 2024 07:31:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rfKxU-000000001A8-1P8G
for dave@doctor.nl2k.ab.ca;
Wed, 28 Feb 2024 07:30:56 -0700
Resent-From: The Doctor
Resent-Date: Wed, 28 Feb 2024 07:30:56 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f52.google.com ([209.85.167.52]:52293)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rfHKA-00000000DzU-1gyN
for doctor@doctor.nl2k.ab.ca;
Wed, 28 Feb 2024 03:38:09 -0700
Received: by mail-lf1-f52.google.com with SMTP id 2adb3069b0e04-512d19e2cb8so7684874e87.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1709116565; x=1709721365; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=why7A0OBNRUH/W+n+q2V3CWOI1jgi8RqqMdTJ+TLIlY=;
b=Po0CyA0EYuNyDdsri42wbumznJTY1TInLOLz6vbtyxdfAiOf2c3jSydzX/J+CPH32Q
taHfE+tnxyNHy8owpP99ziCLBmmyt/mh+Fhr5mT4Ihd7KT5mTY798XY7ThbsBks/wXLl
m+k9xJO4F/VtxNwIiKNLhOXJ+vWhee0gBay1WfjHpp/b8dNuLN+RgLcYSJsEDQWoOal+
mdEGprLJ9tEfC/LE1OxQLByKTytbLJC6CySJXQeX1E4lFNgRm40EuWZzCP/181X6BZLb
Xz3++PcJ8ZoozbgH89zlJpFocW8CqtFQ/IIp93gWFk6NV3q4KUKUKSDyRtsNyTQA3vcJ
X18Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1709116565; x=1709721365;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=why7A0OBNRUH/W+n+q2V3CWOI1jgi8RqqMdTJ+TLIlY=;
b=HvDfCwll/v3uQqM4U+roG0itbbbJRCggIGUmOU85KwKT4UUMy16wG1Eb/yY/iGAq+b
ms8fi/XVA/y1ihCIFo6ATjp9aY/RFSnKFaQfRexWeuUvT+m8eKJWyYVhqUSjyZIhrQJo
RpzE1NDxQwF5XOk2ikheTYJ5wei+Fdk6F7KAkJgEWK9ZqLm4aUx0iexUzwnxSY34CaMg
jm5hp9TLYLzReiuwV7yLXSbA8hqH56XCf2+ZFAFJcxNqtEJC1I+w+p8UJorwD7gjECtc
zLdDhFd2bkxHH0guYZTv8kVWlOwxjBv9Nfzjl1758IEP5yw0N9lJYD5O6x6/lxY/1KZB
8+kQ==
X-Forwarded-Encrypted: i=1; AJvYcCVWeUYCo520qYk1NQ03s03BHXTJiSHBRX/McF1Em9rKycAg9YKPcqowXUAxflvwk2qsz81tN84TG+N8zFckoPpcbTxkS8qyMzs=
X-Gm-Message-State: AOJu0YzS0L1mpvZAUiQrVbuhe/PyqyLyyNVbKDfjH6Xc/EKLO8Et7VAc
aemmKmx0gFoNqhtqD1Yc3T3FWoap8Yo/w6HOFmsmvDQQAIzBcnLk7TzM/bipoyDsimGX/qiYPpD
tss2w+Z3buKPF8eBFXhMfnrYYTW3uhrUq3Gn0Tkqidxs=
X-Google-Smtp-Source: AGHT+IGboe1Jvlzml86DQ9aH2R5Azsaz6xF3DJQXvMEleg3MDnEyBYZ9aFwCN6Pb3GN6Mpijopa4lhgilcjgCsESXso=
X-Received: by 2002:a05:651c:b08:b0:2d2:dd39:ecee with SMTP id
b8-20020a05651c0b0800b002d2dd39eceemr7962ljr.7.1709113034696; Wed, 28 Feb
2024 01:37:14 -0800 (PST)
MIME-Version: 1.0
From: Brian Kawakami
Date: Wed, 28 Feb 2024 01:36:30 -0800
Message-ID:
Subject: GOOD DAY 01
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000506d6c06126de3a7"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 10.7
X-Spam_score_int: 107
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Attention This is to officially inform you that United Nations
Secretary general Mr. António Guterres has advised my office for an immediate
release of your unpaid Contract/inheritance funds without any delay, [...]
Content analysis details: (10.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.52 listed in list.dnswl.org]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[briankawakami101(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[briankawakami101(at)gmail.com]
0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.5 MILLION_USD BODY: Talks about millions of dollars
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.52 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 LOTTO_DEPT Claims Department
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} GOOD DAY 01
--000000000000506d6c06126de3a7
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Attention
This is to officially inform you that United Nations Secretary
general Mr. Ant=C3=B3nio Guterres has advised my office for an immediate
release of your unpaid Contract/inheritance funds without any delay,
Kindly forward Your Full Name: Your Address: Your Mobile Number: A
copy of your verifiable Identity document for more verification to
avoid any wrong payment all the legal documents will be provided to
you immediately for the release of your $1,500,000.00 One Million Five
Hundred Thousand United States Dollars.
Yours Sincerely
Brian Kawakami
International Payment Department
United Nations Headquarters New York, United States
Equity Bank
--000000000000506d6c06126de3a7
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Attention =C2=A0
This is to officially inform =
you that United Nations Secretary
general Mr. Ant=C3=B3nio Guterres has =
advised my office for an immediate
release of your unpaid Contract/inher=
itance funds without any delay,
Kindly forward Your Full Name: Your Addr=
ess: Your Mobile Number: A
copy of your verifiable Identity document for=
more verification to
avoid any wrong payment all the legal documents wi=
ll be provided to
you immediately for the release of your $1,500,000.00 =
One Million Five
Hundred Thousand United States Dollars.
Yours Si=
ncerely
Brian Kawakami
International Payment Department
United=
Nations Headquarters =C2=A0New York, United States
=C2=A0 =C2=A0 Equity=
Bank
This is to officially inform =
you that United Nations Secretary
general Mr. Ant=C3=B3nio Guterres has =
advised my office for an immediate
release of your unpaid Contract/inher=
itance funds without any delay,
Kindly forward Your Full Name: Your Addr=
ess: Your Mobile Number: A
copy of your verifiable Identity document for=
more verification to
avoid any wrong payment all the legal documents wi=
ll be provided to
you immediately for the release of your $1,500,000.00 =
One Million Five
Hundred Thousand United States Dollars.
Yours Si=
ncerely
Brian Kawakami
International Payment Department
United=
Nations Headquarters =C2=A0New York, United States
=C2=A0 =C2=A0 Equity=
Bank
--000000000000506d6c06126de3a7--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments