Nigerian Spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 12 May 2022 05:02:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1np6ZS-000JtK-Qs
for dave@doctor.nl2k.ab.ca;
Thu, 12 May 2022 05:01:26 -0600
Resent-From: The Doctor
Resent-Date: Thu, 12 May 2022 05:01:26 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-io1-f44.google.com ([209.85.166.44]:39602)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1np2Uz-000OQ0-Nh
for root@nl2k.ab.ca;
Thu, 12 May 2022 00:40:37 -0600
Received: by mail-io1-f44.google.com with SMTP id e3so4327932ios.6
for; Wed, 11 May 2022 23:40:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=+l/aLwysrFt34IYFEqF+YjUqNY4GR6zO+CHPn7mV1zY=;
b=JP0zEO5Rikx9VR/kDze6FsBeoK4qXOoe4pYETyusw7o1UnpFlicPrzJW6933no5Q7u
s6H/4tryypqPX2jV9Ia44bh343wr5r5j+rouHF1pgIKP1V4yzMgrcktWGY3sWmPbhsAQ
LYjeMi8we0Y1yBE94Bi0Sfx6VZX56xG7NAHOCM/1mtMFAeNwtvA8WqCvwcgGd9jx4+sj
WXcssYCw7MPdinb3BWTpM+NApOqd4SvMgD/L7vwOfrRuSalQHqcIVs9GD4bRqq7KemMO
F7g0IyXYDjC0raSjO8a3zWJmDA5jbqBldwlVXnUptLNno6IvMe7nbYwMti0M0c2qLl5x
26lQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=+l/aLwysrFt34IYFEqF+YjUqNY4GR6zO+CHPn7mV1zY=;
b=q3PMQ/9omzTngff0QpgtMAuZBz99m+UZ0HLNWegMncrLcFEpzeGlatBpwzxxLum+aq
J6138JMt7y4+8ga/ZsAK2Mzmyr9o4VmmalNGJWlQREXW17zmnO1+y41CBFqwlpxLVOfd
XmVvMmJwoNmhbv0FMEFWGFeo04tIvzN6IKgX9o1Yhbjald+zSw5Oe+Pqnxv8xK7NbVJ+
5DxmfEagKbgpFtIvm6f005CDACn/a0Ps5vyHfDxDfDF+2/KbQ+Q5yLuvNmJuyGxg07NF
3p61EVUVvV0Uw/z1Vqn5aaslfBs7VpUUxOcHzOEmKRgPeCRAG1I8GLoyN9erU6j3tk9V
HCuA==
X-Gm-Message-State: AOAM532R2rNLM0OBmvk2j6YBdzDv70XagF3k4izJpWwFYUfQykNhuu/8
ezKmzTrPiDd9iwYEADNtGTmuXXUL5FVS/yUO/8Q=
X-Google-Smtp-Source: ABdhPJxY/5gITzVTFLyFocJR7PJmFj2IwUMrWepDM+QasB/GgxUzDkdrViWLhIm1dd+wL2KqW6vuknKvH7HwlyTgByU=
X-Received: by 2002:a05:6638:240d:b0:32b:89bc:6c5e with SMTP id
z13-20020a056638240d00b0032b89bc6c5emr14532975jat.1.1652337598565; Wed, 11
May 2022 23:39:58 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6602:2b84:0:0:0:0 with HTTP; Wed, 11 May 2022 23:39:58
-0700 (PDT)
Reply-To: infolilah01@mail.com
From: lilah Aim
Date: Thu, 12 May 2022 08:39:58 +0200
Message-ID:
Subject: Dear Friend.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: root@nl2k.ab.ca
X-Spam_score: 18.3
X-Spam_score_int: 183
X-Spam_bar: ++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: HI My Name is Miss.lilah Aim from Libya, am 23 years old,
am presently in St.Christopher's Parish for refugee in Burkina Faso under
United Nations High commission for Refugee,I lost my parents in the rec [...]
Content analysis details: (18.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.44 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[infolilah01[at]mail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[kara.drissa[at]gmail.com]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
2.5 MILLION_USD BODY: Talks about millions of dollars
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
2.9 YOU_INHERIT Discussing your inheritance
2.0 TVD_PH_BODY_META No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
1.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
Subject: {SPAM?} Dear Friend.
HI
My Name is Miss.lilah Aim from Libya, am 23 years old, am
presently in St.Christopher's Parish for refugee in Burkina Faso under
United Nations High commission for Refugee,I lost my parents in the
recent war in Libya, right now am in Burkina Faso, please save my
life i am in danger need your help in transferring my inheritance my
father left behind for me in a Bank in Burkina Faso here,i have every
necessary document for the fund, all i needed is a foreigner who will
stand as the foreign partner to my father and beneficiary of the fund.
The money deposited in the Bank is US10.5 MILLION UNITED STATES
DOLLAR) I just need this fund to be transfer to your bank account so
that i will come over to your country and complete my education as you
know that my country have been in deep crisis due to the war.And I
cannot go back there again because I have nobody again all of my
family were killed in the war. If you are interested to save me and
help me receive my inheritance fund into your bank account with utmost
good faith Please get back to me.
Miss.lilah Aim
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 12 May 2022 05:02:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1np6ZS-000JtK-Qs
for dave@doctor.nl2k.ab.ca;
Thu, 12 May 2022 05:01:26 -0600
Resent-From: The Doctor
Resent-Date: Thu, 12 May 2022 05:01:26 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-io1-f44.google.com ([209.85.166.44]:39602)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1np2Uz-000OQ0-Nh
for root@nl2k.ab.ca;
Thu, 12 May 2022 00:40:37 -0600
Received: by mail-io1-f44.google.com with SMTP id e3so4327932ios.6
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=+l/aLwysrFt34IYFEqF+YjUqNY4GR6zO+CHPn7mV1zY=;
b=JP0zEO5Rikx9VR/kDze6FsBeoK4qXOoe4pYETyusw7o1UnpFlicPrzJW6933no5Q7u
s6H/4tryypqPX2jV9Ia44bh343wr5r5j+rouHF1pgIKP1V4yzMgrcktWGY3sWmPbhsAQ
LYjeMi8we0Y1yBE94Bi0Sfx6VZX56xG7NAHOCM/1mtMFAeNwtvA8WqCvwcgGd9jx4+sj
WXcssYCw7MPdinb3BWTpM+NApOqd4SvMgD/L7vwOfrRuSalQHqcIVs9GD4bRqq7KemMO
F7g0IyXYDjC0raSjO8a3zWJmDA5jbqBldwlVXnUptLNno6IvMe7nbYwMti0M0c2qLl5x
26lQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=+l/aLwysrFt34IYFEqF+YjUqNY4GR6zO+CHPn7mV1zY=;
b=q3PMQ/9omzTngff0QpgtMAuZBz99m+UZ0HLNWegMncrLcFEpzeGlatBpwzxxLum+aq
J6138JMt7y4+8ga/ZsAK2Mzmyr9o4VmmalNGJWlQREXW17zmnO1+y41CBFqwlpxLVOfd
XmVvMmJwoNmhbv0FMEFWGFeo04tIvzN6IKgX9o1Yhbjald+zSw5Oe+Pqnxv8xK7NbVJ+
5DxmfEagKbgpFtIvm6f005CDACn/a0Ps5vyHfDxDfDF+2/KbQ+Q5yLuvNmJuyGxg07NF
3p61EVUVvV0Uw/z1Vqn5aaslfBs7VpUUxOcHzOEmKRgPeCRAG1I8GLoyN9erU6j3tk9V
HCuA==
X-Gm-Message-State: AOAM532R2rNLM0OBmvk2j6YBdzDv70XagF3k4izJpWwFYUfQykNhuu/8
ezKmzTrPiDd9iwYEADNtGTmuXXUL5FVS/yUO/8Q=
X-Google-Smtp-Source: ABdhPJxY/5gITzVTFLyFocJR7PJmFj2IwUMrWepDM+QasB/GgxUzDkdrViWLhIm1dd+wL2KqW6vuknKvH7HwlyTgByU=
X-Received: by 2002:a05:6638:240d:b0:32b:89bc:6c5e with SMTP id
z13-20020a056638240d00b0032b89bc6c5emr14532975jat.1.1652337598565; Wed, 11
May 2022 23:39:58 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6602:2b84:0:0:0:0 with HTTP; Wed, 11 May 2022 23:39:58
-0700 (PDT)
Reply-To: infolilah01@mail.com
From: lilah Aim
Date: Thu, 12 May 2022 08:39:58 +0200
Message-ID:
Subject: Dear Friend.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: root@nl2k.ab.ca
X-Spam_score: 18.3
X-Spam_score_int: 183
X-Spam_bar: ++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: HI My Name is Miss.lilah Aim from Libya, am 23 years old,
am presently in St.Christopher's Parish for refugee in Burkina Faso under
United Nations High commission for Refugee,I lost my parents in the rec [...]
Content analysis details: (18.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.44 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[infolilah01[at]mail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[kara.drissa[at]gmail.com]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
2.5 MILLION_USD BODY: Talks about millions of dollars
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
2.9 YOU_INHERIT Discussing your inheritance
2.0 TVD_PH_BODY_META No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
1.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
Subject: {SPAM?} Dear Friend.
HI
My Name is Miss.lilah Aim from Libya, am 23 years old, am
presently in St.Christopher's Parish for refugee in Burkina Faso under
United Nations High commission for Refugee,I lost my parents in the
recent war in Libya, right now am in Burkina Faso, please save my
life i am in danger need your help in transferring my inheritance my
father left behind for me in a Bank in Burkina Faso here,i have every
necessary document for the fund, all i needed is a foreigner who will
stand as the foreign partner to my father and beneficiary of the fund.
The money deposited in the Bank is US10.5 MILLION UNITED STATES
DOLLAR) I just need this fund to be transfer to your bank account so
that i will come over to your country and complete my education as you
know that my country have been in deep crisis due to the war.And I
cannot go back there again because I have nobody again all of my
family were killed in the war. If you are interested to save me and
help me receive my inheritance fund into your bank account with utmost
good faith Please get back to me.
Miss.lilah Aim
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments