Nigerian spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 01 Apr 2024 08:41:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rrIpv-000000005Su-1Quo
for dave@doctor.nl2k.ab.ca;
Mon, 01 Apr 2024 08:40:35 -0600
Resent-From: The Doctor
Resent-Date: Mon, 1 Apr 2024 08:40:35 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f195.google.com ([209.85.214.195]:58372)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rrEpv-00000000CUz-0GCx
for doctor@doctor.nl2k.ab.ca;
Mon, 01 Apr 2024 04:24:25 -0600
Received: by mail-pl1-f195.google.com with SMTP id d9443c01a7336-1e034607879so31059905ad.0
for; Mon, 01 Apr 2024 03:22:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1711966938; x=1712571738; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=bOhXsjV/vo/wjRp129uKTW/T4izBDipIZqlODGWSYTU=;
b=Wj0PDg7ZAom4vt1UP1p9Qvl5SyVxCD/OCvtMNwYCdDTsS9zwuWtLTvdsHyMOd2kkWk
P3cuRZDFI0039x6gU+oM3B7ueEkanWpCtAIV1Ylp8B0smuT/4GWJNwk62uN2to8XKrH+
UMuZVC0noH5PqYx9mQnpQns2gV9NpqR4l35FZIHxtIL3brQFm6yQ0PgnL1Pmyo8E/h98
uluEyoZNuQkFjOeXTqZkETfg+4UttHd0DpRq7IacEdOQc++fIubJPdisiIIT12XRa56d
OFNekiedW0hxLNtHDxc+BAIIqW4appcpiapwQ4UupT5tegHj7MDGY/CYej2TX58doXgQ
o3mg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1711966938; x=1712571738;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=bOhXsjV/vo/wjRp129uKTW/T4izBDipIZqlODGWSYTU=;
b=UE7q5BglLmJM7+wr+2aBx9ccwinS2I980Xs9h7BQaYoHrlLAhc5MtIEdl5jxdvyFuW
P2CmGjhUQovUf5y0kOGgjzNdPw7Op2O0rCSL5SZZvPkxPRS+jImECgav4vhQe6Y8S30R
bAC5nSDyObj7ebkdr4KpKAdRM7EsRnoQe71d1pGQXp/WJLO+WQpzV0tp03jkWz6kzbqL
KNaouZFNOcUA0sz9LbWhwXRXJeLCpgbAOIosPY8xfYcsEdnUOjS8U6IXBj0Sv7Fn0pAd
xeTFOsTohZ/7nmfWlruHsTjehVJl903Yka/IfUf1WVYb2yZ2zJz8XvvXRE0zG7t5B3pC
vUbg==
X-Forwarded-Encrypted: i=1; AJvYcCW4I9tIEBvc7zP/V2O+uBBKeOl7CNC9jPYsHm/ZlWHwUlolA06lKGGnHE4Cb75UGMjuywiWFVkLRZUvu7I53gn1NwpdjDXX6FE=
X-Gm-Message-State: AOJu0YyfREqsq7I0vxtlLna6W96bQ0x87hudoj0wBqgIEL2Xqyaa6431
be+k2bRdH6YarXNFkZtddoh8K46roAS3ZwNrKWDxscjCNmB+FCvZhJ1QJivG/WW9CdsjvnFTH4w
Axz7ABbXOWFHBQiPVC8j+GSTtpS3HvkrEkKQCDKfl
X-Google-Smtp-Source: AGHT+IELbAUJKhE1kKgp7/02ir1RoTQeBTFloFJHSu/dgBRB5Woy5dA25AeXjbriteYXaCBMZ0hZbP8j/zcuWFS8KW8=
X-Received: by 2002:a05:6a20:2587:b0:1a6:fca8:dad0 with SMTP id
k7-20020a056a20258700b001a6fca8dad0mr10627849pzd.20.1711966449915; Mon, 01
Apr 2024 03:14:09 -0700 (PDT)
MIME-Version: 1.0
From: Mohamed El Sadeq Salem
Date: Mon, 1 Apr 2024 03:13:42 -0700
Message-ID:
Subject: Hello Friend, I need your assistance and cooperation on investments projects,
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000001d5fc60615064034"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 7.2
X-Spam_score_int: 72
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Assalamu Alaikum Dear Friend, Nice to meet you, My Name is
Mohamed El Sadeq Salem, from Damascus Syria, and I have now resigned from
the government. I am a member of an opposition party government in Syria,
Content analysis details: (7.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[angelmabu533(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[angelmabu533(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.214.195 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.214.195 listed in wl.mailspike.net]
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Hello Friend, I need your assistance and cooperation on investments projects,
X-Antivirus: AVG (VPS 240401-10, 4/1/2024), Inbound message
X-Antivirus-Status: Clean
--0000000000001d5fc60615064034
Content-Type: text/plain; charset="UTF-8"
Assalamu Alaikum Dear Friend,
Nice to meet you, My Name is Mohamed El Sadeq Salem, from Damascus Syria,
and I have now resigned from the government. I am a member of an opposition
party government in Syria,
I need a foreign partner to enable me to transport my investment capital
and then relocate with my family, honestly I wish I will discuss more and
get along. I need a partner because my investment capital is in my
international account. Am interested in buying Properties, houses, and some
tourist places, or any business ideal you know that we can invest in your
country, my capital for investment is ($16.5Million USD)
I came across your email contact prior a private search while in need of
your assistance and I decided to contact you directly to ask you if you
know any Lucrative Business Investment in your Country I can invest my
Money since my Country Syria Security and Economic Independent has lost to
the Greatest Lower level, and our Culture has lost forever including our
happiness has been taken away from us. Our Country has been on fire for
many years now.
If you are capable of handling this deal Contact me for more details i will
appreciate it if you can contact me immediately.
You may as well tell me a little more about yourself. Contact me urgently
to enable us to proceed with the business.
I am waiting for your response,
Sincerely Yours,
Mr. Mohamed El Sadeq Salem.
--0000000000001d5fc60615064034
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
eight:115%;font-size:11pt;font-family:Calibri,"sans-serif"">
style=3D"font-family:Cambria,"serif"">Assalamu Alaikum Dear Frie=
nd,
ize:11pt;font-family:Calibri,"sans-serif"">
mily:Cambria,"serif"">Nice to meet you, My Name is
Mohamed El Sadeq Salem, from Damascus Syria, and I have now resigned from t=
he
government. I am a member of an opposition party government in Syria,
>
ize:11pt;font-family:Calibri,"sans-serif"">
mily:Cambria,"serif"">I need a foreign partner to
enable me to transport my investment capital and then relocate with my fami=
ly,
honestly I wish I will discuss more and get along. I need a partner because=
my
investment capital is in my international account. Am interested in buying
Properties, houses, and some tourist places, or any business ideal you know
that we can invest in your country, my capital for investment is ($16.5Mill=
ion
USD)
ize:11pt;font-family:Calibri,"sans-serif"">
mily:Cambria,"serif"">I came across your email contact
prior a private search while in need of your assistance and I decided to
contact you directly to ask you if you know any Lucrative Business Investme=
nt
in your Country I can invest my Money since my Country Syria Security and
Economic Independent has lost to the Greatest Lower level, and our Culture =
has
lost forever including our happiness has been taken away from us. Our Count=
ry
has been on fire for many years now.
ize:11pt;font-family:Calibri,"sans-serif"">
mily:Cambria,"serif"">If you are capable of handling
this deal Contact me for more details i will appreciate it if you can conta=
ct
me immediately.
ize:11pt;font-family:Calibri,"sans-serif"">
mily:Cambria,"serif"">You may as well tell me a little
more about yourself. Contact me urgently to enable us to proceed with the
business.
ize:11pt;font-family:Calibri,"sans-serif"">
mily:Cambria,"serif"">I am waiting for your response,
ize:11pt;font-family:Calibri,"sans-serif"">
mily:Cambria,"serif"">=C2=A0
ize:11pt;font-family:Calibri,"sans-serif"">
mily:Cambria,"serif"">Sincerely Yours,
ize:11pt;font-family:Calibri,"sans-serif"">
mily:Cambria,"serif"">Mr. Mohamed El Sadeq Salem.
>
--0000000000001d5fc60615064034--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 01 Apr 2024 08:41:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rrIpv-000000005Su-1Quo
for dave@doctor.nl2k.ab.ca;
Mon, 01 Apr 2024 08:40:35 -0600
Resent-From: The Doctor
Resent-Date: Mon, 1 Apr 2024 08:40:35 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f195.google.com ([209.85.214.195]:58372)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rrEpv-00000000CUz-0GCx
for doctor@doctor.nl2k.ab.ca;
Mon, 01 Apr 2024 04:24:25 -0600
Received: by mail-pl1-f195.google.com with SMTP id d9443c01a7336-1e034607879so31059905ad.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1711966938; x=1712571738; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=bOhXsjV/vo/wjRp129uKTW/T4izBDipIZqlODGWSYTU=;
b=Wj0PDg7ZAom4vt1UP1p9Qvl5SyVxCD/OCvtMNwYCdDTsS9zwuWtLTvdsHyMOd2kkWk
P3cuRZDFI0039x6gU+oM3B7ueEkanWpCtAIV1Ylp8B0smuT/4GWJNwk62uN2to8XKrH+
UMuZVC0noH5PqYx9mQnpQns2gV9NpqR4l35FZIHxtIL3brQFm6yQ0PgnL1Pmyo8E/h98
uluEyoZNuQkFjOeXTqZkETfg+4UttHd0DpRq7IacEdOQc++fIubJPdisiIIT12XRa56d
OFNekiedW0hxLNtHDxc+BAIIqW4appcpiapwQ4UupT5tegHj7MDGY/CYej2TX58doXgQ
o3mg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1711966938; x=1712571738;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=bOhXsjV/vo/wjRp129uKTW/T4izBDipIZqlODGWSYTU=;
b=UE7q5BglLmJM7+wr+2aBx9ccwinS2I980Xs9h7BQaYoHrlLAhc5MtIEdl5jxdvyFuW
P2CmGjhUQovUf5y0kOGgjzNdPw7Op2O0rCSL5SZZvPkxPRS+jImECgav4vhQe6Y8S30R
bAC5nSDyObj7ebkdr4KpKAdRM7EsRnoQe71d1pGQXp/WJLO+WQpzV0tp03jkWz6kzbqL
KNaouZFNOcUA0sz9LbWhwXRXJeLCpgbAOIosPY8xfYcsEdnUOjS8U6IXBj0Sv7Fn0pAd
xeTFOsTohZ/7nmfWlruHsTjehVJl903Yka/IfUf1WVYb2yZ2zJz8XvvXRE0zG7t5B3pC
vUbg==
X-Forwarded-Encrypted: i=1; AJvYcCW4I9tIEBvc7zP/V2O+uBBKeOl7CNC9jPYsHm/ZlWHwUlolA06lKGGnHE4Cb75UGMjuywiWFVkLRZUvu7I53gn1NwpdjDXX6FE=
X-Gm-Message-State: AOJu0YyfREqsq7I0vxtlLna6W96bQ0x87hudoj0wBqgIEL2Xqyaa6431
be+k2bRdH6YarXNFkZtddoh8K46roAS3ZwNrKWDxscjCNmB+FCvZhJ1QJivG/WW9CdsjvnFTH4w
Axz7ABbXOWFHBQiPVC8j+GSTtpS3HvkrEkKQCDKfl
X-Google-Smtp-Source: AGHT+IELbAUJKhE1kKgp7/02ir1RoTQeBTFloFJHSu/dgBRB5Woy5dA25AeXjbriteYXaCBMZ0hZbP8j/zcuWFS8KW8=
X-Received: by 2002:a05:6a20:2587:b0:1a6:fca8:dad0 with SMTP id
k7-20020a056a20258700b001a6fca8dad0mr10627849pzd.20.1711966449915; Mon, 01
Apr 2024 03:14:09 -0700 (PDT)
MIME-Version: 1.0
From: Mohamed El Sadeq Salem
Date: Mon, 1 Apr 2024 03:13:42 -0700
Message-ID:
Subject: Hello Friend, I need your assistance and cooperation on investments projects,
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000001d5fc60615064034"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 7.2
X-Spam_score_int: 72
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Assalamu Alaikum Dear Friend, Nice to meet you, My Name is
Mohamed El Sadeq Salem, from Damascus Syria, and I have now resigned from
the government. I am a member of an opposition party government in Syria,
Content analysis details: (7.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[angelmabu533(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[angelmabu533(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.214.195 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.214.195 listed in wl.mailspike.net]
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Hello Friend, I need your assistance and cooperation on investments projects,
X-Antivirus: AVG (VPS 240401-10, 4/1/2024), Inbound message
X-Antivirus-Status: Clean
--0000000000001d5fc60615064034
Content-Type: text/plain; charset="UTF-8"
Assalamu Alaikum Dear Friend,
Nice to meet you, My Name is Mohamed El Sadeq Salem, from Damascus Syria,
and I have now resigned from the government. I am a member of an opposition
party government in Syria,
I need a foreign partner to enable me to transport my investment capital
and then relocate with my family, honestly I wish I will discuss more and
get along. I need a partner because my investment capital is in my
international account. Am interested in buying Properties, houses, and some
tourist places, or any business ideal you know that we can invest in your
country, my capital for investment is ($16.5Million USD)
I came across your email contact prior a private search while in need of
your assistance and I decided to contact you directly to ask you if you
know any Lucrative Business Investment in your Country I can invest my
Money since my Country Syria Security and Economic Independent has lost to
the Greatest Lower level, and our Culture has lost forever including our
happiness has been taken away from us. Our Country has been on fire for
many years now.
If you are capable of handling this deal Contact me for more details i will
appreciate it if you can contact me immediately.
You may as well tell me a little more about yourself. Contact me urgently
to enable us to proceed with the business.
I am waiting for your response,
Sincerely Yours,
Mr. Mohamed El Sadeq Salem.
--0000000000001d5fc60615064034
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
eight:115%;font-size:11pt;font-family:Calibri,"sans-serif"">
style=3D"font-family:Cambria,"serif"">Assalamu Alaikum Dear Frie=
nd,
ize:11pt;font-family:Calibri,"sans-serif"">
mily:Cambria,"serif"">Nice to meet you, My Name is
Mohamed El Sadeq Salem, from Damascus Syria, and I have now resigned from t=
he
government. I am a member of an opposition party government in Syria,
>
ize:11pt;font-family:Calibri,"sans-serif"">
mily:Cambria,"serif"">I need a foreign partner to
enable me to transport my investment capital and then relocate with my fami=
ly,
honestly I wish I will discuss more and get along. I need a partner because=
my
investment capital is in my international account. Am interested in buying
Properties, houses, and some tourist places, or any business ideal you know
that we can invest in your country, my capital for investment is ($16.5Mill=
ion
USD)
ize:11pt;font-family:Calibri,"sans-serif"">
mily:Cambria,"serif"">I came across your email contact
prior a private search while in need of your assistance and I decided to
contact you directly to ask you if you know any Lucrative Business Investme=
nt
in your Country I can invest my Money since my Country Syria Security and
Economic Independent has lost to the Greatest Lower level, and our Culture =
has
lost forever including our happiness has been taken away from us. Our Count=
ry
has been on fire for many years now.
ize:11pt;font-family:Calibri,"sans-serif"">
mily:Cambria,"serif"">If you are capable of handling
this deal Contact me for more details i will appreciate it if you can conta=
ct
me immediately.
ize:11pt;font-family:Calibri,"sans-serif"">
mily:Cambria,"serif"">You may as well tell me a little
more about yourself. Contact me urgently to enable us to proceed with the
business.
ize:11pt;font-family:Calibri,"sans-serif"">
mily:Cambria,"serif"">I am waiting for your response,
ize:11pt;font-family:Calibri,"sans-serif"">
mily:Cambria,"serif"">=C2=A0
ize:11pt;font-family:Calibri,"sans-serif"">
mily:Cambria,"serif"">Sincerely Yours,
ize:11pt;font-family:Calibri,"sans-serif"">
mily:Cambria,"serif"">Mr. Mohamed El Sadeq Salem.
>
--0000000000001d5fc60615064034--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments