Nigerian Google Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 01 Mar 2024 14:32:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rgATQ-0000000002H-00b3
for dave@doctor.nl2k.ab.ca;
Fri, 01 Mar 2024 14:31:20 -0700
Resent-From: The Doctor
Resent-Date: Fri, 1 Mar 2024 14:31:19 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj1-f68.google.com ([209.85.216.68]:58875)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rg8HL-000000009Gx-0HHg
for doctor@doctor.nl2k.ab.ca;
Fri, 01 Mar 2024 12:10:46 -0700
Received: by mail-pj1-f68.google.com with SMTP id 98e67ed59e1d1-299a2456948so1965805a91.1
for; Fri, 01 Mar 2024 11:08:47 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1709320122; x=1709924922; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=0HdlYPsD61x38E2fzWI8SGPjIDBfOoAzcF8ctIRmY0U=;
b=BRrv3vBlyUiVGhw9CTbHvAwT2xNzN9662S7pNNUlFpdt4ne6ZpRGK2pJaTZrVPOwbj
vIpr7Ih5dU/yUENHb3jr2yp2O79MdiRTOa99mbzhw3IH9lH2ARmmqnU8G0NNSA//vBlX
ULoT6AdZOwQZJWLzRHskBwuCHOkGBIjFlehW42kWQKoe9hYJ2g8jrqXFTmpnPJfGFtSy
Y7JcUgIbWW5r/wAndAbWuBpio8KOPYd1Zv2Gb2rXanI37s/mpfcDLr4VB1Wf/25GlW0d
MsPmWESVxyQk+2bI2CSDBNXPF7Qs2ZQJl0/9D8hzzvc1bhOMzyu2BkW3IOGN6tZQOm9S
4btw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1709320122; x=1709924922;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=0HdlYPsD61x38E2fzWI8SGPjIDBfOoAzcF8ctIRmY0U=;
b=BJGYCePtTSexUAA1JHtsYs7SQOWogOlZb5SzxwRQu3K52o1STmoKJiM15SybcjMsHr
PFwNo+rmUjRqpz1t0OI8JQS3JbNf8GeimlTpt7teVqfenocnw5RUBKg46O8w1a5OGZQV
IvlJnxFSVfbhGkr+WOhSmyxuK0JqpqXHy3NX9MEIz8hE1/YhNHDii5KrWh7xblAqMY6c
yVLxWaTtioSH9fX4C13oBCt94sRPRpL6EtPmo+FXdWCU0Qzq5ESllT3ctDo3Ar4n7Eq1
9OyPVGmjgvR4Wozo44kKvPrZ/Z+QE1HRLHjVbirdJFr1/RY34DErZq8NF20ZKnKVz4Ou
jqXw==
X-Forwarded-Encrypted: i=1; AJvYcCXC0WraaixP9APW0uMS7N3cOQcDRcfT8JOrjNIlXbvXYoDUXqZXyMpl8Q2tlriFsQNyHU2Jv2Ywg3qA3YQvaPRnGMsNVHbd+Xg=
X-Gm-Message-State: AOJu0Yx7Gt3M4AjgmwfE9BOuRT6Dg+h7mc6bRQuQCHBKDLLPck6giHCR
j931nfrVKj1hrMEsv8+h4nn0f+Z8uHeHrmQ4kT43rIa2QL9akwYAmt8caQqk06cb8I0UtiIPx3X
KqazGI6nZU8PCvusFu0ZDhVsyTyUCERhQyMxFsztz6yI=
X-Google-Smtp-Source: AGHT+IHJaPdeNEhQmW26DD4c8WrdF8+IUUifsSgcY1oBjUlpBaBRPn6unQcZR6RxrhLmeAahX7nSlAsgp/G2wigMVRk=
X-Received: by 2002:a25:3cc3:0:b0:dc7:49a8:e148 with SMTP id
j186-20020a253cc3000000b00dc749a8e148mr2412789yba.27.1709316534965; Fri, 01
Mar 2024 10:08:54 -0800 (PST)
MIME-Version: 1.0
From: MR ABDULMALIK ZONGO
Date: Fri, 1 Mar 2024 18:07:43 +0100
Message-ID:
Subject: DEAR FRIEND,
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000e0207c06129d4401"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 18.8
X-Spam_score_int: 188
X-Spam_bar: ++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: DEAR FRIEND, For give my indignation if this message comes
to you as a surprise. I got your contact When i was searching for a foreign
reliable partner. (Abdulmalik Zongo) This is my private email. You can always
[...]
Content analysis details: (18.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.216.68 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[abdulmalikzongo07(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[jhorgejames4(at)gmail.com]
2.5 HK_SCAM_N2 BODY: No description available.
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.216.68 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.0 HK_SCAM No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.5 HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLY From and body contain different freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 MONEY_FORM Lots of money if you fill out a form
1.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
Subject: {SPAM?} DEAR FRIEND,
--000000000000e0207c06129d4401
Content-Type: text/plain; charset="UTF-8"
DEAR FRIEND,
For give my indignation if this message comes to you as a surprise. I got
your contact When i was searching for a foreign reliable partner.
(Abdulmalik Zongo) This is my private email. You can always reach me (
abdulmalik.zongo@yahoo.com) the Head of file Department bank (B.O.A).
In my department we discovered an abandoned sum of $42.3 million U.S.A
dollars. In an account that belongs to one of our foreign customer also
deposited a quantity of Gold worth millions of dollars in a security
company in this country, he died a long time ago with all his family in
the Asia Earthquake Disaster (TSUNAMI DISASTER INDONESIA.
Since we got information about his death, unfortunately we learn that all
his supposed next of kin or relatives died alongside leaving nobody behind
for the claim. In respect to the provision of a foreign account ($40%) will
be for you ($60%) for me.
Thereafter I will visit your country for disbursement according to the
percentages indicated, if you are really interested in partnering with me
please get back to me with below information for urgent process.
(FILL THIS FORM BELOW PLEASE AND RESEND IT TO ME).
1) Your Full Name,,,,,,,,,,,,,,,,,,,,,,,,,
2) Your Age,,,,,,,,,,,,,,,,,,,,,,,,,,
3) Marital Status,,,,,,,,,,,,,,,,,,,
4) Your Cell Phone Number,,,,,,,,,,,,,
5) Your Fax Number,,,,,,,,,,,,,,,,,,,,,
6) Your Country,,,,,,,,,,,,,,,,,,,,,
7) Your Occupation,,,,,,,,,,,,,
Sex,,,,,,,,,,,,,,,,,,,,,
9) Your Religion,,,,,,,,,
You have to keep everything secret as to enable the transfer to move very
smoothly in to the account you will prove to the
Bank. God bless you.
Yours faithfully).
--000000000000e0207c06129d4401
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--000000000000e0207c06129d4401--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 01 Mar 2024 14:32:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rgATQ-0000000002H-00b3
for dave@doctor.nl2k.ab.ca;
Fri, 01 Mar 2024 14:31:20 -0700
Resent-From: The Doctor
Resent-Date: Fri, 1 Mar 2024 14:31:19 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj1-f68.google.com ([209.85.216.68]:58875)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rg8HL-000000009Gx-0HHg
for doctor@doctor.nl2k.ab.ca;
Fri, 01 Mar 2024 12:10:46 -0700
Received: by mail-pj1-f68.google.com with SMTP id 98e67ed59e1d1-299a2456948so1965805a91.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1709320122; x=1709924922; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=0HdlYPsD61x38E2fzWI8SGPjIDBfOoAzcF8ctIRmY0U=;
b=BRrv3vBlyUiVGhw9CTbHvAwT2xNzN9662S7pNNUlFpdt4ne6ZpRGK2pJaTZrVPOwbj
vIpr7Ih5dU/yUENHb3jr2yp2O79MdiRTOa99mbzhw3IH9lH2ARmmqnU8G0NNSA//vBlX
ULoT6AdZOwQZJWLzRHskBwuCHOkGBIjFlehW42kWQKoe9hYJ2g8jrqXFTmpnPJfGFtSy
Y7JcUgIbWW5r/wAndAbWuBpio8KOPYd1Zv2Gb2rXanI37s/mpfcDLr4VB1Wf/25GlW0d
MsPmWESVxyQk+2bI2CSDBNXPF7Qs2ZQJl0/9D8hzzvc1bhOMzyu2BkW3IOGN6tZQOm9S
4btw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1709320122; x=1709924922;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=0HdlYPsD61x38E2fzWI8SGPjIDBfOoAzcF8ctIRmY0U=;
b=BJGYCePtTSexUAA1JHtsYs7SQOWogOlZb5SzxwRQu3K52o1STmoKJiM15SybcjMsHr
PFwNo+rmUjRqpz1t0OI8JQS3JbNf8GeimlTpt7teVqfenocnw5RUBKg46O8w1a5OGZQV
IvlJnxFSVfbhGkr+WOhSmyxuK0JqpqXHy3NX9MEIz8hE1/YhNHDii5KrWh7xblAqMY6c
yVLxWaTtioSH9fX4C13oBCt94sRPRpL6EtPmo+FXdWCU0Qzq5ESllT3ctDo3Ar4n7Eq1
9OyPVGmjgvR4Wozo44kKvPrZ/Z+QE1HRLHjVbirdJFr1/RY34DErZq8NF20ZKnKVz4Ou
jqXw==
X-Forwarded-Encrypted: i=1; AJvYcCXC0WraaixP9APW0uMS7N3cOQcDRcfT8JOrjNIlXbvXYoDUXqZXyMpl8Q2tlriFsQNyHU2Jv2Ywg3qA3YQvaPRnGMsNVHbd+Xg=
X-Gm-Message-State: AOJu0Yx7Gt3M4AjgmwfE9BOuRT6Dg+h7mc6bRQuQCHBKDLLPck6giHCR
j931nfrVKj1hrMEsv8+h4nn0f+Z8uHeHrmQ4kT43rIa2QL9akwYAmt8caQqk06cb8I0UtiIPx3X
KqazGI6nZU8PCvusFu0ZDhVsyTyUCERhQyMxFsztz6yI=
X-Google-Smtp-Source: AGHT+IHJaPdeNEhQmW26DD4c8WrdF8+IUUifsSgcY1oBjUlpBaBRPn6unQcZR6RxrhLmeAahX7nSlAsgp/G2wigMVRk=
X-Received: by 2002:a25:3cc3:0:b0:dc7:49a8:e148 with SMTP id
j186-20020a253cc3000000b00dc749a8e148mr2412789yba.27.1709316534965; Fri, 01
Mar 2024 10:08:54 -0800 (PST)
MIME-Version: 1.0
From: MR ABDULMALIK ZONGO
Date: Fri, 1 Mar 2024 18:07:43 +0100
Message-ID:
Subject: DEAR FRIEND,
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000e0207c06129d4401"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 18.8
X-Spam_score_int: 188
X-Spam_bar: ++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: DEAR FRIEND, For give my indignation if this message comes
to you as a surprise. I got your contact When i was searching for a foreign
reliable partner. (Abdulmalik Zongo) This is my private email. You can always
[...]
Content analysis details: (18.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.216.68 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[abdulmalikzongo07(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[jhorgejames4(at)gmail.com]
2.5 HK_SCAM_N2 BODY: No description available.
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.216.68 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.0 HK_SCAM No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.5 HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLY From and body contain different freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 MONEY_FORM Lots of money if you fill out a form
1.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money
Subject: {SPAM?} DEAR FRIEND,
--000000000000e0207c06129d4401
Content-Type: text/plain; charset="UTF-8"
DEAR FRIEND,
For give my indignation if this message comes to you as a surprise. I got
your contact When i was searching for a foreign reliable partner.
(Abdulmalik Zongo) This is my private email. You can always reach me (
abdulmalik.zongo@yahoo.com) the Head of file Department bank (B.O.A).
In my department we discovered an abandoned sum of $42.3 million U.S.A
dollars. In an account that belongs to one of our foreign customer also
deposited a quantity of Gold worth millions of dollars in a security
company in this country, he died a long time ago with all his family in
the Asia Earthquake Disaster (TSUNAMI DISASTER INDONESIA.
Since we got information about his death, unfortunately we learn that all
his supposed next of kin or relatives died alongside leaving nobody behind
for the claim. In respect to the provision of a foreign account ($40%) will
be for you ($60%) for me.
Thereafter I will visit your country for disbursement according to the
percentages indicated, if you are really interested in partnering with me
please get back to me with below information for urgent process.
(FILL THIS FORM BELOW PLEASE AND RESEND IT TO ME).
1) Your Full Name,,,,,,,,,,,,,,,,,,,,,,,,,
2) Your Age,,,,,,,,,,,,,,,,,,,,,,,,,,
3) Marital Status,,,,,,,,,,,,,,,,,,,
4) Your Cell Phone Number,,,,,,,,,,,,,
5) Your Fax Number,,,,,,,,,,,,,,,,,,,,,
6) Your Country,,,,,,,,,,,,,,,,,,,,,
7) Your Occupation,,,,,,,,,,,,,
Sex,,,,,,,,,,,,,,,,,,,,,9) Your Religion,,,,,,,,,
You have to keep everything secret as to enable the transfer to move very
smoothly in to the account you will prove to the
Bank. God bless you.
Yours faithfully).
--000000000000e0207c06129d4401
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
DEAR FRIEND,
For give my indignation if this messag=
e comes to you as a surprise. I got your contact When i was searching for a=
foreign reliable partner. (Abdulmalik Zongo) This is my private email. You=
can always reach me (abdulma=
lik.zongo@yahoo.com) the Head of file Department bank (B.O.A).
=
=C2=A0
In my department we discovered an abandoned sum of $42.3 mill=
ion U.S.A dollars.=C2=A0 In an account that belongs to one of our foreign c=
ustomer also deposited a quantity =C2=A0of Gold worth millions of dollars i=
n a security company in =C2=A0this country, he died a long time ago with al=
l his family in the Asia Earthquake Disaster (TSUNAMI DISASTER INDONESIA.
r>
=C2=A0
Since we got information about his death, unfortunately=
we learn that all his supposed next of kin or relatives died alongside lea=
ving nobody behind for the claim. In respect to the provision of a foreign =
account ($40%) will be for you ($60%) for me.
Thereafter I will visi=
t your country for disbursement according to the percentages indicated, if =
you are really interested in partnering with me please get back to me with =
below information for urgent process.
=C2=A0
(FILL THIS FORM =
BELOW PLEASE AND RESEND IT TO ME).
1) Your Full Name,,,,,,,,,,,,,,,,=
,,,,,,,,,
2) Your Age,,,,,,,,,,,,,,,,,,,,,,,,,,
3) Marital St=
atus,,,,,,,,,,,,,,,,,,,
4) Your Cell Phone Number,,,,,,,,,,,,,
r>5) Your Fax Number,,,,,,,,,,,,,,,,,,,,,
6) Your Country,,,,,,,,,,,=
,,,,,,,,,,
7) Your Occupation,,,,,,,,,,,,,
Sex,,,,,,,,,,,,=
,,,,,,,,,
9) Your Religion,,,,,,,,,
=C2=A0
You have to=
keep everything secret as to enable the transfer to move very smoothly in =
to the account you will prove to the
Bank. God bless you.
You=
rs faithfully).
For give my indignation if this messag=
e comes to you as a surprise. I got your contact When i was searching for a=
foreign reliable partner. (Abdulmalik Zongo) This is my private email. You=
can always reach me (abdulma=
lik.zongo@yahoo.com) the Head of file Department bank (B.O.A).
=
=C2=A0
In my department we discovered an abandoned sum of $42.3 mill=
ion U.S.A dollars.=C2=A0 In an account that belongs to one of our foreign c=
ustomer also deposited a quantity =C2=A0of Gold worth millions of dollars i=
n a security company in =C2=A0this country, he died a long time ago with al=
l his family in the Asia Earthquake Disaster (TSUNAMI DISASTER INDONESIA.
r>
=C2=A0
Since we got information about his death, unfortunately=
we learn that all his supposed next of kin or relatives died alongside lea=
ving nobody behind for the claim. In respect to the provision of a foreign =
account ($40%) will be for you ($60%) for me.
Thereafter I will visi=
t your country for disbursement according to the percentages indicated, if =
you are really interested in partnering with me please get back to me with =
below information for urgent process.
=C2=A0
(FILL THIS FORM =
BELOW PLEASE AND RESEND IT TO ME).
1) Your Full Name,,,,,,,,,,,,,,,,=
,,,,,,,,,
2) Your Age,,,,,,,,,,,,,,,,,,,,,,,,,,
3) Marital St=
atus,,,,,,,,,,,,,,,,,,,
4) Your Cell Phone Number,,,,,,,,,,,,,
r>5) Your Fax Number,,,,,,,,,,,,,,,,,,,,,
6) Your Country,,,,,,,,,,,=
,,,,,,,,,,
7) Your Occupation,,,,,,,,,,,,,
Sex,,,,,,,,,,,,=,,,,,,,,,
9) Your Religion,,,,,,,,,
=C2=A0
You have to=
keep everything secret as to enable the transfer to move very smoothly in =
to the account you will prove to the
Bank. God bless you.
You=
rs faithfully).
--000000000000e0207c06129d4401--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments