Nigerian Spam from Google Gmail
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 14 Oct 2024 13:45:00 -0600
Received: from mail-oa1-f43.google.com ([209.85.160.43]:53253)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98 (FreeBSD))
(envelope-from)
id 1t0QzB-00000000GId-35Rx
for dave@doctor.nl2k.ab.ca;
Mon, 14 Oct 2024 13:44:13 -0600
Received: by mail-oa1-f43.google.com with SMTP id 586e51a60fabf-2884e7fadb8so2381801fac.2
for; Mon, 14 Oct 2024 12:42:18 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1728934932; x=1729539732; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=8GP4XUzIxxhyy5jTmoLl86hCnQAONPCksrJ6hmWv2Yc=;
b=YAdCoxCssE5XKRnzV1yNEdoaRL24u6psMpQRKo7dwp/HpY/h5LEhZT4e5PrXMD6uAW
W6TUonxLW7R9EqXCBZEXAWSiZfYFnYcjDee7EDQPNFosI8dQzoMMvwI6hYTefNeWZCOs
hLX5VoOFFLoAlwwXrs7JzJxTXAbbq6/lXtlBwUVfRfLrD+0pLF+3i2jLtkcZmBimv2Nm
ICGCIwggfCRxkiv3ykRJq4VeJ29zV7sM3SXouolD4UFD4oglzATqeqZIfpveNRIM8Nc7
x2QLahecSdZDgRks/zpgvVXlEYBwNZRBIIE0HU1iMRFh3T64M/XaqBIvMocLchKznjkn
/wpg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1728934932; x=1729539732;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=8GP4XUzIxxhyy5jTmoLl86hCnQAONPCksrJ6hmWv2Yc=;
b=PJNsQv8swJX3VeJg5WMpH8hcMDmUUfbeSO180UlcqckR36q9fCSszBlWb0qgF00if6
gwsdz2Bv9pm35L7s0Z5yXD2O72rVctrYfvy2NomY0AR31UluXkilDTp33egAHeYBCF8Z
TG6+e1wG+UbTTIJuALjEN2k0sdLcOgy6+g7U63ZaA7MnURAKKSu5U2WCHHHpGciK0N9H
godKLVeatm/st01qKJrar85Mr2llzRaqLnyUNj3p0Pq7fnW41ZzGXqVu0B1HssRWhCd7
KLlBtA4cgsCsZpjft22tEv0uUGi0FBvFZB4Ol9vPDLrTciTa7mJXGWNCgOBkzZMcRVh0
BLyg==
X-Forwarded-Encrypted: i=1; AJvYcCWL1Hbn5/jXamYek8B8lS3n3mxuePFlnw2lA3nfVmBoFK0ZIeNDpkifjc6B3LYfmkRY352E@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0Yz5d2PTV/DZ91Cpfq9xEcuYIGQPqIgaW0GYtIfKJhZu9FhvYXc7
jinISETqhKfd8c4v1OnzQr1U+M+TSAkJWOY7wGta/oICJQbySgfQn5aTZt9a0UUidWztuSeP+tE
AumJzuuDRdvM1hxy+8/k/dQNsT5SiJ2GXdLE=
X-Google-Smtp-Source: AGHT+IEd9/p5pwnAGSEcEdWJDe5Xca9rCSKeIg+2ukof2okOM3Bg0Uev0IyMHXji/PPmv/EyYtpFQs7d8Hv9KSqknXw=
X-Received: by 2002:a17:902:d509:b0:20b:6d82:acb with SMTP id
d9443c01a7336-20cbb19ce4dmr145498045ad.23.1728932880500; Mon, 14 Oct 2024
12:08:00 -0700 (PDT)
MIME-Version: 1.0
Reply-To: kk.bfk@aol.com
From: Toma Karim
Date: Mon, 14 Oct 2024 19:06:41 -1000
Message-ID:
Subject: Immediate Reply ,
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000002ed1080624748ec1"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 18.2
X-Spam_score_int: 182
X-Spam_bar: ++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, I know that this letter will come to you as surprise,
I got your contact address while searching for foreign partner to assist
me in this business transaction that is present in our favor, My name is [...]
Content analysis details: (18.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.160.43 listed in will-spam-for-food.eu.org]
[209.85.160.43 listed in will-spam-for-food.eu.org]
[209.85.160.43 listed in will-spam-for-food.eu.org]
[209.85.160.43 listed in will-spam-for-food.eu.org]
[209.85.160.43 listed in will-spam-for-food.eu.org]
[209.85.160.43 listed in will-spam-for-food.eu.org]
[209.85.160.43 listed in will-spam-for-food.eu.org]
[209.85.160.43 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.160.43 listed in dnsbl.ahbl.org]
[209.85.160.43 listed in dnsbl.ahbl.org]
[209.85.160.43 listed in dnsbl.ahbl.org]
[209.85.160.43 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.160.43 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.160.43 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.160.43 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.160.43 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.43 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.160.43 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[e2ksd2(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[e2ksd2(at)gmail.com]
0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
2.6 HK_SCAM_N13 BODY: No description available.
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.0 HTML_MESSAGE BODY: HTML included in message
0.3 HTML_FONT_FACE_BAD BODY: HTML font face is not a word
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.6 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
1.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
Subject: {SPAM?} Immediate Reply ,
--0000000000002ed1080624748ec1
Content-Type: text/plain; charset="UTF-8"
Dear Friend,
I know that this letter will come to you as surprise, I got your contact
address while searching for foreign partner to assist me in this business
transaction that is present in our favor, My name is Mr. TOMA KARIM, I am
the Bill and Exchange (assistant) Manager (BOA) BANK OF AFRICA. I'm
proposing to transfer out in your name (US$16.5 Million Dollars) that
belongs to our later customer, MR. GORPUN VLADIMIR From Oblast Russia who
died in Siber airline that crashed into sea at Israel on 4th October 2001.
I want to present you to my bank here as the beneficiary to this fund, am
waiting for your response for more details, as you are willing to execute
this business opportunity with me.
Yours Sincerely,
Mr. Toma Karim
--0000000000002ed1080624748ec1
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
mail-XbIp4 gmail-jmmB7 gmail-GNqVo gmail-allowTextSelection gmail-OuGoX" id=
=3D"gmail-UniqueMessageBody_12">
v dir=3D"ltr">
x_gmail-XbIp4 gmail-x_gmail-jmmB7 gmail-x_gmail-GNqVo gmail-x_gmail-allowTe=
xtSelection gmail-x_gmail-OuGoX" aria-label=3D"Message body" tabindex=3D"0"=
>
ndex=3D"-1" aria-label=3D"Message body" class=3D"gmail-x_gmail-x_gmail-XbIp=
4 gmail-x_gmail-x_gmail-jmmB7 gmail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_g=
mail-allowTextSelection gmail-x_gmail-x_gmail-OuGoX" id=3D"gmail-x_gmail-x_=
gmail-UniqueMessageBody_1">
1">
sageBody_2" class=3D"gmail-x_gmail-x_gmail-x_gmail-XbIp4 gmail-x_gmail-x_gm=
ail-x_gmail-jmmB7 gmail-x_gmail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_gmail=
-x_gmail-allowTextSelection gmail-x_gmail-x_gmail-x_gmail-OuGoX" aria-label=
=3D"Message body" tabindex=3D"-1">
x_gmail-rps_6161">
gmail-x_gmail-UniqueMessageBody_5" class=3D"gmail-x_gmail-x_gmail-x_gmail-x=
_gmail-XbIp4 gmail-x_gmail-x_gmail-x_gmail-x_gmail-jmmB7 gmail-x_gmail-x_gm=
ail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_gmail-x_gmail-x_gmail-allowTextSe=
lection gmail-x_gmail-x_gmail-x_gmail-x_gmail-OuGoX" aria-label=3D"Message =
body" tabindex=3D"-1">
ail-rps_58ac">
l-x_gmail-x_gmail-UniqueMessageBody_6" class=3D"gmail-x_gmail-x_gmail-x_gma=
il-x_gmail-x_gmail-XbIp4 gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-jmmB=
7 gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_gmail=
-x_gmail-x_gmail-x_gmail-allowTextSelection gmail-x_gmail-x_gmail-x_gmail-x=
_gmail-x_gmail-OuGoX" aria-label=3D"Message body" tabindex=3D"-1">
class=3D"gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-rps_c3ab">
dir=3D"ltr">
l-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-XbIp4 gmail-x_gmail-x_gma=
il-x_gmail-x_gmail-x_gmail-x_gmail-jmmB7 gmail-x_gmail-x_gmail-x_gmail-x_gm=
ail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_g=
mail-allowTextSelection gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gma=
il-OuGoX" id=3D"gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-Uniqu=
eMessageBody_1">
gmail-x_gmail-rps_b570">
ail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-UniqueMessageBody_7" class=3D"g=
mail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-XbIp4 gmail-x_=
gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-jmmB7 gmail-x_gmail-x=
_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_gmail-=
x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-allowTextSelection gmail-x_gmail-x_=
gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-OuGoX" aria-label=3D"Message =
body" tabindex=3D"-1">
ail-x_gmail-x_gmail-x_gmail-rps_fd2e">
mail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmai=
l_signature" dir=3D"ltr">
t-stretch:inherit;font-size:15px;line-height:inherit;margin:0px;padding:0px=
;vertical-align:baseline;color:rgb(36,36,36)">
-stretch:inherit;line-height:inherit;margin:0px;padding:0px;vertical-align:=
baseline">
ne-height:inherit;margin:0px;padding:0px;vertical-align:baseline">
e=3D"Segoe UI, Segoe UI Web (West European), Segoe UI, -apple-system, Blink=
MacSystemFont, Roboto, Helvetica Neue, sans-serif" color=3D"#242424">I
want to present you to my bank here as the beneficiary to this fund, am
waiting for your response for more details, as you are willing to=20
execute this business opportunity with me.
:0px none;font-stretch:inherit;line-height:inherit;margin:0px;padding:0px;v=
ertical-align:baseline">
h:inherit;line-height:inherit;margin:0px;padding:0px;vertical-align:baselin=
e">
ystem, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" color=3D"#24=
2424">Yours Sincerely,
ch:inherit;line-height:inherit;margin:0px;padding:0px;vertical-align:baseli=
ne">
system, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" color=3D"#2=
42424">Mr. Toma Karim
>=
div>
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 14 Oct 2024 13:45:00 -0600
Received: from mail-oa1-f43.google.com ([209.85.160.43]:53253)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98 (FreeBSD))
(envelope-from
id 1t0QzB-00000000GId-35Rx
for dave@doctor.nl2k.ab.ca;
Mon, 14 Oct 2024 13:44:13 -0600
Received: by mail-oa1-f43.google.com with SMTP id 586e51a60fabf-2884e7fadb8so2381801fac.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1728934932; x=1729539732; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=8GP4XUzIxxhyy5jTmoLl86hCnQAONPCksrJ6hmWv2Yc=;
b=YAdCoxCssE5XKRnzV1yNEdoaRL24u6psMpQRKo7dwp/HpY/h5LEhZT4e5PrXMD6uAW
W6TUonxLW7R9EqXCBZEXAWSiZfYFnYcjDee7EDQPNFosI8dQzoMMvwI6hYTefNeWZCOs
hLX5VoOFFLoAlwwXrs7JzJxTXAbbq6/lXtlBwUVfRfLrD+0pLF+3i2jLtkcZmBimv2Nm
ICGCIwggfCRxkiv3ykRJq4VeJ29zV7sM3SXouolD4UFD4oglzATqeqZIfpveNRIM8Nc7
x2QLahecSdZDgRks/zpgvVXlEYBwNZRBIIE0HU1iMRFh3T64M/XaqBIvMocLchKznjkn
/wpg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1728934932; x=1729539732;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=8GP4XUzIxxhyy5jTmoLl86hCnQAONPCksrJ6hmWv2Yc=;
b=PJNsQv8swJX3VeJg5WMpH8hcMDmUUfbeSO180UlcqckR36q9fCSszBlWb0qgF00if6
gwsdz2Bv9pm35L7s0Z5yXD2O72rVctrYfvy2NomY0AR31UluXkilDTp33egAHeYBCF8Z
TG6+e1wG+UbTTIJuALjEN2k0sdLcOgy6+g7U63ZaA7MnURAKKSu5U2WCHHHpGciK0N9H
godKLVeatm/st01qKJrar85Mr2llzRaqLnyUNj3p0Pq7fnW41ZzGXqVu0B1HssRWhCd7
KLlBtA4cgsCsZpjft22tEv0uUGi0FBvFZB4Ol9vPDLrTciTa7mJXGWNCgOBkzZMcRVh0
BLyg==
X-Forwarded-Encrypted: i=1; AJvYcCWL1Hbn5/jXamYek8B8lS3n3mxuePFlnw2lA3nfVmBoFK0ZIeNDpkifjc6B3LYfmkRY352E@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0Yz5d2PTV/DZ91Cpfq9xEcuYIGQPqIgaW0GYtIfKJhZu9FhvYXc7
jinISETqhKfd8c4v1OnzQr1U+M+TSAkJWOY7wGta/oICJQbySgfQn5aTZt9a0UUidWztuSeP+tE
AumJzuuDRdvM1hxy+8/k/dQNsT5SiJ2GXdLE=
X-Google-Smtp-Source: AGHT+IEd9/p5pwnAGSEcEdWJDe5Xca9rCSKeIg+2ukof2okOM3Bg0Uev0IyMHXji/PPmv/EyYtpFQs7d8Hv9KSqknXw=
X-Received: by 2002:a17:902:d509:b0:20b:6d82:acb with SMTP id
d9443c01a7336-20cbb19ce4dmr145498045ad.23.1728932880500; Mon, 14 Oct 2024
12:08:00 -0700 (PDT)
MIME-Version: 1.0
Reply-To: kk.bfk@aol.com
From: Toma Karim
Date: Mon, 14 Oct 2024 19:06:41 -1000
Message-ID:
Subject: Immediate Reply ,
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000002ed1080624748ec1"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 18.2
X-Spam_score_int: 182
X-Spam_bar: ++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, I know that this letter will come to you as surprise,
I got your contact address while searching for foreign partner to assist
me in this business transaction that is present in our favor, My name is [...]
Content analysis details: (18.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.160.43 listed in will-spam-for-food.eu.org]
[209.85.160.43 listed in will-spam-for-food.eu.org]
[209.85.160.43 listed in will-spam-for-food.eu.org]
[209.85.160.43 listed in will-spam-for-food.eu.org]
[209.85.160.43 listed in will-spam-for-food.eu.org]
[209.85.160.43 listed in will-spam-for-food.eu.org]
[209.85.160.43 listed in will-spam-for-food.eu.org]
[209.85.160.43 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.160.43 listed in dnsbl.ahbl.org]
[209.85.160.43 listed in dnsbl.ahbl.org]
[209.85.160.43 listed in dnsbl.ahbl.org]
[209.85.160.43 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.160.43 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.160.43 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.160.43 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.160.43 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.43 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.160.43 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[e2ksd2(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[e2ksd2(at)gmail.com]
0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
2.6 HK_SCAM_N13 BODY: No description available.
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.0 HTML_MESSAGE BODY: HTML included in message
0.3 HTML_FONT_FACE_BAD BODY: HTML font face is not a word
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.6 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
1.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
Subject: {SPAM?} Immediate Reply ,
--0000000000002ed1080624748ec1
Content-Type: text/plain; charset="UTF-8"
Dear Friend,
I know that this letter will come to you as surprise, I got your contact
address while searching for foreign partner to assist me in this business
transaction that is present in our favor, My name is Mr. TOMA KARIM, I am
the Bill and Exchange (assistant) Manager (BOA) BANK OF AFRICA. I'm
proposing to transfer out in your name (US$16.5 Million Dollars) that
belongs to our later customer, MR. GORPUN VLADIMIR From Oblast Russia who
died in Siber airline that crashed into sea at Israel on 4th October 2001.
I want to present you to my bank here as the beneficiary to this fund, am
waiting for your response for more details, as you are willing to execute
this business opportunity with me.
Yours Sincerely,
Mr. Toma Karim
--0000000000002ed1080624748ec1
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
mail-XbIp4 gmail-jmmB7 gmail-GNqVo gmail-allowTextSelection gmail-OuGoX" id=
=3D"gmail-UniqueMessageBody_12">
v dir=3D"ltr">
x_gmail-XbIp4 gmail-x_gmail-jmmB7 gmail-x_gmail-GNqVo gmail-x_gmail-allowTe=
xtSelection gmail-x_gmail-OuGoX" aria-label=3D"Message body" tabindex=3D"0"=
>
ndex=3D"-1" aria-label=3D"Message body" class=3D"gmail-x_gmail-x_gmail-XbIp=
4 gmail-x_gmail-x_gmail-jmmB7 gmail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_g=
mail-allowTextSelection gmail-x_gmail-x_gmail-OuGoX" id=3D"gmail-x_gmail-x_=
gmail-UniqueMessageBody_1">
1">
sageBody_2" class=3D"gmail-x_gmail-x_gmail-x_gmail-XbIp4 gmail-x_gmail-x_gm=
ail-x_gmail-jmmB7 gmail-x_gmail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_gmail=
-x_gmail-allowTextSelection gmail-x_gmail-x_gmail-x_gmail-OuGoX" aria-label=
=3D"Message body" tabindex=3D"-1">
x_gmail-rps_6161">
gmail-x_gmail-UniqueMessageBody_5" class=3D"gmail-x_gmail-x_gmail-x_gmail-x=
_gmail-XbIp4 gmail-x_gmail-x_gmail-x_gmail-x_gmail-jmmB7 gmail-x_gmail-x_gm=
ail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_gmail-x_gmail-x_gmail-allowTextSe=
lection gmail-x_gmail-x_gmail-x_gmail-x_gmail-OuGoX" aria-label=3D"Message =
body" tabindex=3D"-1">
ail-rps_58ac">
l-x_gmail-x_gmail-UniqueMessageBody_6" class=3D"gmail-x_gmail-x_gmail-x_gma=
il-x_gmail-x_gmail-XbIp4 gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-jmmB=
7 gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_gmail=
-x_gmail-x_gmail-x_gmail-allowTextSelection gmail-x_gmail-x_gmail-x_gmail-x=
_gmail-x_gmail-OuGoX" aria-label=3D"Message body" tabindex=3D"-1">
class=3D"gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-rps_c3ab">
dir=3D"ltr">
l-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-XbIp4 gmail-x_gmail-x_gma=
il-x_gmail-x_gmail-x_gmail-x_gmail-jmmB7 gmail-x_gmail-x_gmail-x_gmail-x_gm=
ail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_g=
mail-allowTextSelection gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gma=
il-OuGoX" id=3D"gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-Uniqu=
eMessageBody_1">
gmail-x_gmail-rps_b570">
ail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-UniqueMessageBody_7" class=3D"g=
mail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-XbIp4 gmail-x_=
gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-jmmB7 gmail-x_gmail-x=
_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_gmail-=
x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-allowTextSelection gmail-x_gmail-x_=
gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-OuGoX" aria-label=3D"Message =
body" tabindex=3D"-1">
ail-x_gmail-x_gmail-x_gmail-rps_fd2e">
mail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmai=
l_signature" dir=3D"ltr">
t-stretch:inherit;font-size:15px;line-height:inherit;margin:0px;padding:0px=
;vertical-align:baseline;color:rgb(36,36,36)">
-stretch:inherit;line-height:inherit;margin:0px;padding:0px;vertical-align:=
baseline">
<=
div dir=3D"ltr">
nt-stretch:inherit;line-height:inherit;margin:0px;padding:0px;vertical-alig=
n:baseline">
-apple-system, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" col=
or=3D"#242424">Dear=C2=A0 Friend,
;font-stretch:inherit;line-height:inherit;margin:0px;padding:0px;vertical-a=
lign:baseline">
UI, -apple-system, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" =
color=3D"#242424">
ch:inherit;line-height:inherit;margin:0px;padding:0px;vertical-align:baseli=
ne">
system, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" color=3D"#2=
42424">=C2=A0
I know that this letter will come to you as surprise, I got your=20
contact address while searching for foreign partner to assist me in this
business transaction that is present in our favor, My name is Mr. TOMA=20
KARIM, I am the Bill and Exchange (assistant)=C2=A0 Manager (BOA) BANK OF=
=20
AFRICA. I'm proposing to transfer out in your name (US$16.5 Million=20
Dollars) that belongs to our later customer, MR. GORPUN VLADIMIR From=20
Oblast Russia who died in Siber airline that crashed into sea at Israel=20
on 4th October 2001.
:inherit;line-height:inherit;margin:0px;padding:0px;vertical-align:baseline=
">
stem, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" color=3D"#242=
424">
div dir=3D"ltr">
nt-stretch:inherit;line-height:inherit;margin:0px;padding:0px;vertical-alig=
n:baseline">
-apple-system, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" col=
or=3D"#242424">Dear=C2=A0 Friend,
;font-stretch:inherit;line-height:inherit;margin:0px;padding:0px;vertical-a=
lign:baseline">
UI, -apple-system, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" =
color=3D"#242424">
ch:inherit;line-height:inherit;margin:0px;padding:0px;vertical-align:baseli=
ne">
system, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" color=3D"#2=
42424">=C2=A0
I know that this letter will come to you as surprise, I got your=20
contact address while searching for foreign partner to assist me in this
business transaction that is present in our favor, My name is Mr. TOMA=20
KARIM, I am the Bill and Exchange (assistant)=C2=A0 Manager (BOA) BANK OF=
=20
AFRICA. I'm proposing to transfer out in your name (US$16.5 Million=20
Dollars) that belongs to our later customer, MR. GORPUN VLADIMIR From=20
Oblast Russia who died in Siber airline that crashed into sea at Israel=20
on 4th October 2001.
:inherit;line-height:inherit;margin:0px;padding:0px;vertical-align:baseline=
">
stem, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" color=3D"#242=
424">
ne-height:inherit;margin:0px;padding:0px;vertical-align:baseline">
e=3D"Segoe UI, Segoe UI Web (West European), Segoe UI, -apple-system, Blink=
MacSystemFont, Roboto, Helvetica Neue, sans-serif" color=3D"#242424">I
want to present you to my bank here as the beneficiary to this fund, am
waiting for your response for more details, as you are willing to=20
execute this business opportunity with me.
:0px none;font-stretch:inherit;line-height:inherit;margin:0px;padding:0px;v=
ertical-align:baseline">
h:inherit;line-height:inherit;margin:0px;padding:0px;vertical-align:baselin=
e">
ystem, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" color=3D"#24=
2424">Yours Sincerely,
ch:inherit;line-height:inherit;margin:0px;padding:0px;vertical-align:baseli=
ne">
system, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" color=3D"#2=
42424">Mr. Toma Karim
>
div>
>=
div>
>
--0000000000002ed1080624748ec1--