Nigerian Spam from Google Gmail

Posted by Dave Yadallee on Tuesday, October 15. 2024

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 14 Oct 2024 13:45:00 -0600

Received: from mail-oa1-f43.google.com ([209.85.160.43]:53253)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1t0QzB-00000000GId-35Rx

for dave@doctor.nl2k.ab.ca;

Mon, 14 Oct 2024 13:44:13 -0600

Received: by mail-oa1-f43.google.com with SMTP id 586e51a60fabf-2884e7fadb8so2381801fac.2

for ; Mon, 14 Oct 2024 12:42:18 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1728934932; x=1729539732; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=8GP4XUzIxxhyy5jTmoLl86hCnQAONPCksrJ6hmWv2Yc=;

b=YAdCoxCssE5XKRnzV1yNEdoaRL24u6psMpQRKo7dwp/HpY/h5LEhZT4e5PrXMD6uAW

W6TUonxLW7R9EqXCBZEXAWSiZfYFnYcjDee7EDQPNFosI8dQzoMMvwI6hYTefNeWZCOs

hLX5VoOFFLoAlwwXrs7JzJxTXAbbq6/lXtlBwUVfRfLrD+0pLF+3i2jLtkcZmBimv2Nm

ICGCIwggfCRxkiv3ykRJq4VeJ29zV7sM3SXouolD4UFD4oglzATqeqZIfpveNRIM8Nc7

x2QLahecSdZDgRks/zpgvVXlEYBwNZRBIIE0HU1iMRFh3T64M/XaqBIvMocLchKznjkn

/wpg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1728934932; x=1729539732;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=8GP4XUzIxxhyy5jTmoLl86hCnQAONPCksrJ6hmWv2Yc=;

b=PJNsQv8swJX3VeJg5WMpH8hcMDmUUfbeSO180UlcqckR36q9fCSszBlWb0qgF00if6

gwsdz2Bv9pm35L7s0Z5yXD2O72rVctrYfvy2NomY0AR31UluXkilDTp33egAHeYBCF8Z

TG6+e1wG+UbTTIJuALjEN2k0sdLcOgy6+g7U63ZaA7MnURAKKSu5U2WCHHHpGciK0N9H

godKLVeatm/st01qKJrar85Mr2llzRaqLnyUNj3p0Pq7fnW41ZzGXqVu0B1HssRWhCd7

KLlBtA4cgsCsZpjft22tEv0uUGi0FBvFZB4Ol9vPDLrTciTa7mJXGWNCgOBkzZMcRVh0

BLyg==

X-Forwarded-Encrypted: i=1; AJvYcCWL1Hbn5/jXamYek8B8lS3n3mxuePFlnw2lA3nfVmBoFK0ZIeNDpkifjc6B3LYfmkRY352E@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0Yz5d2PTV/DZ91Cpfq9xEcuYIGQPqIgaW0GYtIfKJhZu9FhvYXc7

jinISETqhKfd8c4v1OnzQr1U+M+TSAkJWOY7wGta/oICJQbySgfQn5aTZt9a0UUidWztuSeP+tE

AumJzuuDRdvM1hxy+8/k/dQNsT5SiJ2GXdLE=

X-Google-Smtp-Source: AGHT+IEd9/p5pwnAGSEcEdWJDe5Xca9rCSKeIg+2ukof2okOM3Bg0Uev0IyMHXji/PPmv/EyYtpFQs7d8Hv9KSqknXw=

X-Received: by 2002:a17:902:d509:b0:20b:6d82:acb with SMTP id

d9443c01a7336-20cbb19ce4dmr145498045ad.23.1728932880500; Mon, 14 Oct 2024

12:08:00 -0700 (PDT)

MIME-Version: 1.0

Reply-To: kk.bfk@aol.com

From: Toma Karim

Date: Mon, 14 Oct 2024 19:06:41 -1000

Message-ID:

Subject: Immediate Reply ,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000002ed1080624748ec1"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 18.2

X-Spam_score_int: 182

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dear Friend, I know that this letter will come to you as surprise,

I got your contact address while searching for foreign partner to assist

me in this business transaction that is present in our favor, My name is [...]

Content analysis details: (18.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.43 listed in will-spam-for-food.eu.org]

[209.85.160.43 listed in will-spam-for-food.eu.org]

[209.85.160.43 listed in will-spam-for-food.eu.org]

[209.85.160.43 listed in will-spam-for-food.eu.org]

[209.85.160.43 listed in will-spam-for-food.eu.org]

[209.85.160.43 listed in will-spam-for-food.eu.org]

[209.85.160.43 listed in will-spam-for-food.eu.org]

[209.85.160.43 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.43 listed in dnsbl.ahbl.org]

[209.85.160.43 listed in dnsbl.ahbl.org]

[209.85.160.43 listed in dnsbl.ahbl.org]

[209.85.160.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.43 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.43 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.43 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.43 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.160.43 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[e2ksd2(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[e2ksd2(at)gmail.com]

0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date

2.6 HK_SCAM_N13 BODY: No description available.

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.0 HTML_MESSAGE BODY: HTML included in message

0.3 HTML_FONT_FACE_BAD BODY: HTML font face is not a word

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.6 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

1.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

1.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

Subject: {SPAM?} Immediate Reply ,

--0000000000002ed1080624748ec1

Content-Type: text/plain; charset="UTF-8"

Dear Friend,

I know that this letter will come to you as surprise, I got your contact

address while searching for foreign partner to assist me in this business

transaction that is present in our favor, My name is Mr. TOMA KARIM, I am

the Bill and Exchange (assistant) Manager (BOA) BANK OF AFRICA. I'm

proposing to transfer out in your name (US$16.5 Million Dollars) that

belongs to our later customer, MR. GORPUN VLADIMIR From Oblast Russia who

died in Siber airline that crashed into sea at Israel on 4th October 2001.

I want to present you to my bank here as the beneficiary to this fund, am

waiting for your response for more details, as you are willing to execute

this business opportunity with me.

Yours Sincerely,

Mr. Toma Karim

--0000000000002ed1080624748ec1

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

mail-XbIp4 gmail-jmmB7 gmail-GNqVo gmail-allowTextSelection gmail-OuGoX" id=

=3D"gmail-UniqueMessageBody_12">

v dir=3D"ltr">

x_gmail-XbIp4 gmail-x_gmail-jmmB7 gmail-x_gmail-GNqVo gmail-x_gmail-allowTe=

xtSelection gmail-x_gmail-OuGoX" aria-label=3D"Message body" tabindex=3D"0"=

>

ndex=3D"-1" aria-label=3D"Message body" class=3D"gmail-x_gmail-x_gmail-XbIp=

4 gmail-x_gmail-x_gmail-jmmB7 gmail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_g=

mail-allowTextSelection gmail-x_gmail-x_gmail-OuGoX" id=3D"gmail-x_gmail-x_=

gmail-UniqueMessageBody_1">

1">

sageBody_2" class=3D"gmail-x_gmail-x_gmail-x_gmail-XbIp4 gmail-x_gmail-x_gm=

ail-x_gmail-jmmB7 gmail-x_gmail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_gmail=

-x_gmail-allowTextSelection gmail-x_gmail-x_gmail-x_gmail-OuGoX" aria-label=

=3D"Message body" tabindex=3D"-1">

x_gmail-rps_6161">

gmail-x_gmail-UniqueMessageBody_5" class=3D"gmail-x_gmail-x_gmail-x_gmail-x=

_gmail-XbIp4 gmail-x_gmail-x_gmail-x_gmail-x_gmail-jmmB7 gmail-x_gmail-x_gm=

ail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_gmail-x_gmail-x_gmail-allowTextSe=

lection gmail-x_gmail-x_gmail-x_gmail-x_gmail-OuGoX" aria-label=3D"Message =

body" tabindex=3D"-1">

ail-rps_58ac">

l-x_gmail-x_gmail-UniqueMessageBody_6" class=3D"gmail-x_gmail-x_gmail-x_gma=

il-x_gmail-x_gmail-XbIp4 gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-jmmB=

7 gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_gmail=

-x_gmail-x_gmail-x_gmail-allowTextSelection gmail-x_gmail-x_gmail-x_gmail-x=

_gmail-x_gmail-OuGoX" aria-label=3D"Message body" tabindex=3D"-1">

class=3D"gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-rps_c3ab">

dir=3D"ltr">

l-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-XbIp4 gmail-x_gmail-x_gma=

il-x_gmail-x_gmail-x_gmail-x_gmail-jmmB7 gmail-x_gmail-x_gmail-x_gmail-x_gm=

ail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_g=

mail-allowTextSelection gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gma=

il-OuGoX" id=3D"gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-Uniqu=

eMessageBody_1">

gmail-x_gmail-rps_b570">

ail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-UniqueMessageBody_7" class=3D"g=

mail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-XbIp4 gmail-x_=

gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-jmmB7 gmail-x_gmail-x=

_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_gmail-=

x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-allowTextSelection gmail-x_gmail-x_=

gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-OuGoX" aria-label=3D"Message =

body" tabindex=3D"-1">

ail-x_gmail-x_gmail-x_gmail-rps_fd2e">

mail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmai=

l_signature" dir=3D"ltr">

t-stretch:inherit;font-size:15px;line-height:inherit;margin:0px;padding:0px=

;vertical-align:baseline;color:rgb(36,36,36)">

-stretch:inherit;line-height:inherit;margin:0px;padding:0px;vertical-align:=

baseline">

<=

div dir=3D"ltr">

nt-stretch:inherit;line-height:inherit;margin:0px;padding:0px;vertical-alig=

n:baseline">
-apple-system, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" col=

or=3D"#242424">Dear=C2=A0 Friend,

;font-stretch:inherit;line-height:inherit;margin:0px;padding:0px;vertical-a=

lign:baseline">
UI, -apple-system, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" =

color=3D"#242424">

ch:inherit;line-height:inherit;margin:0px;padding:0px;vertical-align:baseli=

ne">
system, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" color=3D"#2=

42424">=C2=A0

I know that this letter will come to you as surprise, I got your=20

contact address while searching for foreign partner to assist me in this

business transaction that is present in our favor, My name is Mr. TOMA=20

KARIM, I am the Bill and Exchange (assistant)=C2=A0 Manager (BOA) BANK OF=

=20

AFRICA. I'm proposing to transfer out in your name (US$16.5 Million=20

Dollars) that belongs to our later customer, MR. GORPUN VLADIMIR From=20

Oblast Russia who died in Siber airline that crashed into sea at Israel=20

on 4th October 2001.

:inherit;line-height:inherit;margin:0px;padding:0px;vertical-align:baseline=

">
stem, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" color=3D"#242=

424">

ne-height:inherit;margin:0px;padding:0px;vertical-align:baseline">
e=3D"Segoe UI, Segoe UI Web (West European), Segoe UI, -apple-system, Blink=

MacSystemFont, Roboto, Helvetica Neue, sans-serif" color=3D"#242424">I

want to present you to my bank here as the beneficiary to this fund, am

waiting for your response for more details, as you are willing to=20

execute this business opportunity with me.

:0px none;font-stretch:inherit;line-height:inherit;margin:0px;padding:0px;v=

ertical-align:baseline">

h:inherit;line-height:inherit;margin:0px;padding:0px;vertical-align:baselin=

e">
ystem, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" color=3D"#24=

2424">Yours Sincerely,

ch:inherit;line-height:inherit;margin:0px;padding:0px;vertical-align:baseli=

ne">
system, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" color=3D"#2=

42424">Mr. Toma Karim

div>

>

--0000000000002ed1080624748ec1--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Name

Homepage

In reply to

Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.

Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.

Enter the string from the spam-prevention image above:

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.

Standard emoticons like :-) and ;-) are converted to images.

Enter the string from the spam-prevention image above:

Remember Information?

Subscribe to this entry

Mon	Tue	Wed	Thu	Fri	Sat	Sun
← Back	July '25					Forward →
	1	2	3	4	5	6
7	8	9	10	11	12	13
14	15	16	17	18	19	20
21	22	23	24	25	26	27
28	29	30	31