Nigerian Google Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 21 Mar 2024 12:49:00 -0600
Received: from mail-ot1-f47.google.com ([209.85.210.47]:54553)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rnNSX-0000000077G-20oP
for dave@doctor.nl2k.ab.ca;
Thu, 21 Mar 2024 12:48:16 -0600
Received: by mail-ot1-f47.google.com with SMTP id 46e09a7af769-6e0f43074edso722878a34.1
for; Thu, 21 Mar 2024 11:46:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1711046773; x=1711651573; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=402ZbL6JnCBXk5TYr/tOXrljpjhOa8DB10cbJow6660=;
b=FGRVPmarw27dhV+QfUR4rHhlL10DOwe04GJX2yeN0U3KjycDaiEP5IdYFJjnAHf3Up
xHc3UeSRHbNfBbdk5+t0UOCxor4SlfHv4Z9YfcwcGR9Ro33L9GlHzdDUXgiQ+JUExrIx
KOv89QRy5vPSILxcK+2MK7ddvJZzEWPCyAYJQxSg/EVAy3FxZsVDkbDreMakKRuek7H8
0xx8tPIU8JUU7J+yJu7VhRmRZY/OnyU7xamVrB9XUQgcA08H7aXOijl7enNj1iuipjk7
hJjRE3Z0UhCuAWyNvXUwbzvZkjvaLM2mEteDZvlE0KRwx4jySGNp/zz8ucIkKhd+oSK5
75mA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1711046773; x=1711651573;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=402ZbL6JnCBXk5TYr/tOXrljpjhOa8DB10cbJow6660=;
b=KP9Qjsfn6MX7UIDTckdbsYP+1JWEgoK4RrA2R2nMKizx2zlrDTDHTqkVcC4ba1Mv9a
E2xga6nqWwx+Dpd8L8J9rQ9ifIeNFRz62xNT+KLFB2O21jyKnLCh1pAaUQB0dUzvPcxI
d5qX/q3dZJQqpfA8XXD3fxTE9uTJi0z2mOPdhMGHLP+RL5wifRsEHVMY+tBarNpgIMJu
Xr0ZCoPjqncRfphsV9IKXpqXlB2FqkTBe3zX8O4EzXqJWwrybKD43RCdri/62BWqcG8D
rNzWdId0St2eQmf25R3EDQRlPKVWz8pmMRCz/Zw/It9itWRHWM8lkJI45M+u1by+aSow
OuaQ==
X-Forwarded-Encrypted: i=1; AJvYcCW0HFfXkt+gykckrsIAA0mCw89P9S0bSJcl+qVNRUosRA4Z8Yy+OiLNQe4iBLTUexJWtI+8gEw6dw+rC5A1vW+YgCr0hocY
X-Gm-Message-State: AOJu0YyGiaDmwFjoXUOOpChXZGwTOru4GQVHYIdJQnjj/IdfpaxZEAlE
bWlYH9pe9LC8qkj0/cxPOJuiuTtVoRTt0YiZa0lr1oXBoJRzvFNBTIK+GzPwpWeg4nSxMzR75uA
Elq70/uh2W2MyeFL6ieSOWyojvaiWpMPOGg7bjg==
X-Google-Smtp-Source: AGHT+IHkkMTcsxqI9NsWuRZdM4xqUBHO7rd4rAVx2o4zWgmbR5/gw94TV/go8FFNtIpzvsWljPMY9fRlv72U3LQ9bS8=
X-Received: by 2002:a17:90b:4a52:b0:29b:68c:1779 with SMTP id
lb18-20020a17090b4a5200b0029b068c1779mr92063pjb.40.1711044981555; Thu, 21 Mar
2024 11:16:21 -0700 (PDT)
MIME-Version: 1.0
From: "Mr. Rouhani Hassain"
Date: Thu, 21 Mar 2024 18:58:54 -0700
Message-ID:
Subject: Hello dear partner!
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000005207f706142fb4c8"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 13.4
X-Spam_score_int: 134
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello dear partner! I came across your e-mail contact prior
to a private search while in need of assistance. I am Mr. Rouhani Hassain,
I am presently working as a bank Accountant here, I am seeking your assistance
to pul [...]
Content analysis details: (13.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.210.47 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[mr.rh3000000(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[huioguy334(at)gmail.com]
0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
0.9 URG_BIZ BODY: Contains urgent matter
2.5 MILLION_USD BODY: Talks about millions of dollars
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.47 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.5 HK_NAME_FM_MR_MRS No description available.
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
Subject: {SPAM?} Hello dear partner!
--0000000000005207f706142fb4c8
Content-Type: text/plain; charset="UTF-8"
Hello dear partner!
I came across your e-mail contact prior to a private search while in need
of assistance. I am Mr. Rouhani Hassain, I am presently working as a bank
Accountant here, I am seeking your assistance to pull out an abandoned
fund, A sum of Fourth Million United State Dollar ($40. Million Dollars )
in my bank.
And I need a trusted investment Manager/Partner because of my current
position, However, I am interested in you for investment project assistance
in your country, may be from there, we can build a business relationship in
the near future.
I am willing to negotiate an investment/business profit sharing ratio with
you based on the future investment earning profits, If you are willing to
handle this project on my behalf,
kindly reply urgently through my business private email (
mr.rh3000000@gmail.com) for easy communication to enable me to provide you
more information about the investment funds.
Your Urgent Reply Will Be Appreciated,
Best Regards
Mr. Rouhani Hassain.
--0000000000005207f706142fb4c8
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--0000000000005207f706142fb4c8--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 21 Mar 2024 12:49:00 -0600
Received: from mail-ot1-f47.google.com ([209.85.210.47]:54553)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rnNSX-0000000077G-20oP
for dave@doctor.nl2k.ab.ca;
Thu, 21 Mar 2024 12:48:16 -0600
Received: by mail-ot1-f47.google.com with SMTP id 46e09a7af769-6e0f43074edso722878a34.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1711046773; x=1711651573; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=402ZbL6JnCBXk5TYr/tOXrljpjhOa8DB10cbJow6660=;
b=FGRVPmarw27dhV+QfUR4rHhlL10DOwe04GJX2yeN0U3KjycDaiEP5IdYFJjnAHf3Up
xHc3UeSRHbNfBbdk5+t0UOCxor4SlfHv4Z9YfcwcGR9Ro33L9GlHzdDUXgiQ+JUExrIx
KOv89QRy5vPSILxcK+2MK7ddvJZzEWPCyAYJQxSg/EVAy3FxZsVDkbDreMakKRuek7H8
0xx8tPIU8JUU7J+yJu7VhRmRZY/OnyU7xamVrB9XUQgcA08H7aXOijl7enNj1iuipjk7
hJjRE3Z0UhCuAWyNvXUwbzvZkjvaLM2mEteDZvlE0KRwx4jySGNp/zz8ucIkKhd+oSK5
75mA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1711046773; x=1711651573;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=402ZbL6JnCBXk5TYr/tOXrljpjhOa8DB10cbJow6660=;
b=KP9Qjsfn6MX7UIDTckdbsYP+1JWEgoK4RrA2R2nMKizx2zlrDTDHTqkVcC4ba1Mv9a
E2xga6nqWwx+Dpd8L8J9rQ9ifIeNFRz62xNT+KLFB2O21jyKnLCh1pAaUQB0dUzvPcxI
d5qX/q3dZJQqpfA8XXD3fxTE9uTJi0z2mOPdhMGHLP+RL5wifRsEHVMY+tBarNpgIMJu
Xr0ZCoPjqncRfphsV9IKXpqXlB2FqkTBe3zX8O4EzXqJWwrybKD43RCdri/62BWqcG8D
rNzWdId0St2eQmf25R3EDQRlPKVWz8pmMRCz/Zw/It9itWRHWM8lkJI45M+u1by+aSow
OuaQ==
X-Forwarded-Encrypted: i=1; AJvYcCW0HFfXkt+gykckrsIAA0mCw89P9S0bSJcl+qVNRUosRA4Z8Yy+OiLNQe4iBLTUexJWtI+8gEw6dw+rC5A1vW+YgCr0hocY
X-Gm-Message-State: AOJu0YyGiaDmwFjoXUOOpChXZGwTOru4GQVHYIdJQnjj/IdfpaxZEAlE
bWlYH9pe9LC8qkj0/cxPOJuiuTtVoRTt0YiZa0lr1oXBoJRzvFNBTIK+GzPwpWeg4nSxMzR75uA
Elq70/uh2W2MyeFL6ieSOWyojvaiWpMPOGg7bjg==
X-Google-Smtp-Source: AGHT+IHkkMTcsxqI9NsWuRZdM4xqUBHO7rd4rAVx2o4zWgmbR5/gw94TV/go8FFNtIpzvsWljPMY9fRlv72U3LQ9bS8=
X-Received: by 2002:a17:90b:4a52:b0:29b:68c:1779 with SMTP id
lb18-20020a17090b4a5200b0029b068c1779mr92063pjb.40.1711044981555; Thu, 21 Mar
2024 11:16:21 -0700 (PDT)
MIME-Version: 1.0
From: "Mr. Rouhani Hassain"
Date: Thu, 21 Mar 2024 18:58:54 -0700
Message-ID:
Subject: Hello dear partner!
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000005207f706142fb4c8"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 13.4
X-Spam_score_int: 134
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello dear partner! I came across your e-mail contact prior
to a private search while in need of assistance. I am Mr. Rouhani Hassain,
I am presently working as a bank Accountant here, I am seeking your assistance
to pul [...]
Content analysis details: (13.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.210.47 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[mr.rh3000000(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[huioguy334(at)gmail.com]
0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
0.9 URG_BIZ BODY: Contains urgent matter
2.5 MILLION_USD BODY: Talks about millions of dollars
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.47 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.5 HK_NAME_FM_MR_MRS No description available.
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
Subject: {SPAM?} Hello dear partner!
--0000000000005207f706142fb4c8
Content-Type: text/plain; charset="UTF-8"
Hello dear partner!
I came across your e-mail contact prior to a private search while in need
of assistance. I am Mr. Rouhani Hassain, I am presently working as a bank
Accountant here, I am seeking your assistance to pull out an abandoned
fund, A sum of Fourth Million United State Dollar ($40. Million Dollars )
in my bank.
And I need a trusted investment Manager/Partner because of my current
position, However, I am interested in you for investment project assistance
in your country, may be from there, we can build a business relationship in
the near future.
I am willing to negotiate an investment/business profit sharing ratio with
you based on the future investment earning profits, If you are willing to
handle this project on my behalf,
kindly reply urgently through my business private email (
mr.rh3000000@gmail.com) for easy communication to enable me to provide you
more information about the investment funds.
Your Urgent Reply Will Be Appreciated,
Best Regards
Mr. Rouhani Hassain.
--0000000000005207f706142fb4c8
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hello dear partner!
I came across your e-mail conta=
ct prior to a private search while in need of assistance. I am Mr. Rouhani =
Hassain, I am presently working as a bank Accountant here, I am seeking you=
r assistance to pull out an abandoned fund, A sum of Fourth Million United =
State Dollar ($40. Million Dollars ) in my bank.
And I need a truste=
d investment Manager/Partner because of my current position, However, I am =
interested in you for investment project assistance in your country, may be=
from there, we can build a business relationship in the near future.
r>I am willing to negotiate an investment/business profit sharing ratio wit=
h you based on the future investment earning profits, If you are willing to=
handle this project on my behalf,
kindly reply urgently through my busi=
ness private email (mr.rh3000000@=
gmail.com) for easy communication =C2=A0to enable me to provide you mor=
e information about the investment funds.
Your Urgent Reply Will Be =
Appreciated,
Best Regards
Mr. Rouhani Hassain.
I came across your e-mail conta=
ct prior to a private search while in need of assistance. I am Mr. Rouhani =
Hassain, I am presently working as a bank Accountant here, I am seeking you=
r assistance to pull out an abandoned fund, A sum of Fourth Million United =
State Dollar ($40. Million Dollars ) in my bank.
And I need a truste=
d investment Manager/Partner because of my current position, However, I am =
interested in you for investment project assistance in your country, may be=
from there, we can build a business relationship in the near future.
r>I am willing to negotiate an investment/business profit sharing ratio wit=
h you based on the future investment earning profits, If you are willing to=
handle this project on my behalf,
kindly reply urgently through my busi=
ness private email (mr.rh3000000@=
gmail.com) for easy communication =C2=A0to enable me to provide you mor=
e information about the investment funds.
Your Urgent Reply Will Be =
Appreciated,
Best Regards
Mr. Rouhani Hassain.
--0000000000005207f706142fb4c8--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments