French nigerian spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 08 Apr 2023 04:49:14 -0600

Received: from mail-pf1-f182.google.com ([209.85.210.182]:51528)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pl67H-000FQS-08

for dave@doctor.nl2k.ab.ca;

Sat, 08 Apr 2023 04:48:22 -0600

Received: by mail-pf1-f182.google.com with SMTP id d2e1a72fcca58-632cf805762so83223b3a.3

for ; Sat, 08 Apr 2023 03:46:19 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112; t=1680950774;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=i8FIqArfQbTCFaDdYwnNiXLhdYhVXlmPWHWgiPB2W54=;

b=p6zRtZbA83KuI2sGCjQvXXnQMSPBtjmTf6Wk+Ftl1TiRMha8lX7ZyIyqSq9vYdPqhI

dJdU8e9veoEfvvqS2GmeJWjAzaNOwqkXaSuKiQBEvI8ozWKtrAyJeRRzqDjkBBDIRPRF

y254lKba0W1IdHLQqzc41RLeU8Js+vDgW18CWRdDUyHcHHZzYHhNxs61PSV4UhrgTmMl

1GDnRsgb9SdOl3nigddRFlDhBxJkKZwiZmrK00wvBgYkMgfTbV7pFREXuWw9x94JivJu

RhPge4ijLzRLOFq6qEvo853PYnhjROSNye+g7RsZ6ZkN6tR4tNyfpjyNW/IaKO5Bjxia

fsiQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1680950774;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=i8FIqArfQbTCFaDdYwnNiXLhdYhVXlmPWHWgiPB2W54=;

b=eQw55B0UJmmXtE6QtFOQmq/dwXrs2hFmPZL4kT6Cc2Yb7iR5cOEtyxoU2I5/9DOjV6

6NVG4H7soFSKxP/d12wtzmsrPNN3D6Nh6jv05vA6/JCnBFvBNQZL0a69N0JKnier9GLq

NSW5tS7yJZXuvVkambHiDqXoUQbzLR1ZmcOBTa+E99GBjSNr7ZzvLpId3B6chZ1lePUT

p4SRxCc2RZFVQN6vtod4D8sWJhvl0rm9/xw5BTAaRWxsjDOEPK4+vqZFU3J1fqQ94nJl

ozj9ftQAMR0nLlC5QMYtRONKyIYHVOyJchRmOp5qbCyzo0CtStTF6jSmuKdP8y9AkHBA

OxrA==

X-Gm-Message-State: AAQBX9f4hHMD8VBryOq4KRdcYLzJAOJWQKKueZ8VhSOL24F59cfR7u/x

4JQ34Lx3kBX9PRmN1F+ZO++U2zp4lq0qqPycw4zSjwej

X-Google-Smtp-Source: AKy350b49Nb3O/+Jq9fUghMO3xYVNuG9B/vSKzmVgxbl8VM0rPOEebKT7Lvn+Ql1bOYFpPx92FsM3Y8kRst2wYGrAhM=

X-Received: by 2002:a05:6a00:1916:b0:624:5886:4b4b with SMTP id

y22-20020a056a00191600b0062458864b4bmr664849pfi.5.1680950773805; Sat, 08 Apr

2023 03:46:13 -0700 (PDT)

MIME-Version: 1.0

Reply-To: annamakara06@gmail.com

From: Anna Makara

Date: Sat, 8 Apr 2023 10:45:26 +0000

Message-ID:

Subject:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000c1f5a605f8d0d9ee"

Bcc: dave@doctor.nl2k.ab.ca



--000000000000c1f5a605f8d0d9ee

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Bonjour bien-aim=C3=A9,



Je m'appelle Anna Makara de Kiev en Ukraine, je suis c=C3=A9libataire et a=

ussi

infirmi=C3=A8re. Je t'ai envoy=C3=A9 un mail l'autre jour sans recevoir de =

r=C3=A9ponse de

ta part.



Je suis dans l'attente de votre r=C3=A9ponse.



Anna Makara



--000000000000c1f5a605f8d0d9ee

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





nature" data-smartmail=3D"gmail_signature">
Bonjour=

bien-aim=C3=A9,

Je m'appelle An=

na Makara de Kiev en Ukraine, je suis c=C3=A9libataire et aussi infirmi=C3=

=A8re. Je t'ai envoy=C3=A9 un mail l'autre jour sans recevoir de r=

=C3=A9ponse de ta part.

Je suis dans=

l'attente de votre r=C3=A9ponse.

<=

b>Anna Makara




--000000000000c1f5a605f8d0d9ee--

Nigerian investment spam from Google

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 08 Apr 2023 06:41:39 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pl7sc-00015G-24

for dave@doctor.nl2k.ab.ca;

Sat, 08 Apr 2023 06:41:18 -0600

Resent-From: The Doctor

Resent-Date: Sat, 8 Apr 2023 06:41:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f170.google.com ([209.85.208.170]:43712)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pkzm9-000Mjc-0g

for doctor@doctor.nl2k.ab.ca;

Fri, 07 Apr 2023 22:02:10 -0600

Received: by mail-lj1-f170.google.com with SMTP id a44so26431632ljr.10

for ; Fri, 07 Apr 2023 21:00:05 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112; t=1680926399;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=oG+GZWPr2IPxkQD0GS9kCNUNAQNB92eGb4za3BLv68I=;

b=LeVw30uocvuaFuqvkhyBe6IQ3VlOqcGDDbR+puUIe06YRsyI+gdbKvrDCEMaVud6QE

14NTyY6cws7j1Qb57bmZBtnTmO53MC8AIHL7hF8Nh87U0eET20wEoTp6ixP+PXk+FX52

0xjv4t1k692rKl76Zm6ClzyStsHWDM2yELkodinHU/5I4bTuYxnY76cRJBew5cZvVK7e

dV8K5DGUpn6MkjTY/hhBcfC5i9EdZSwLAMQHqeWgk1gLSDpIHCP3a1sklgAghNJzT8mH

ooU8W6groYjIKYPj+xLndZH5ZiS0lAKJZAwrtCcgeRKsPRGuOO5WIfrYUp4OH/UHIR6B

nlQw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1680926399;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=oG+GZWPr2IPxkQD0GS9kCNUNAQNB92eGb4za3BLv68I=;

b=ArnJO+7OmeL848kkJ/JjZmuvX99NBJMOxXuNQ0F9TIY8voshkuPZkuthSFrQ+dtcRI

q7Xvs/eWSJDMqdBpGVWBUl4bzG9YUZhGPHfgNY8NDLoa9E15BqNX/H50o7g4pIxrkF5U

6MYkfXsQMYMvLC2m5YM1N+K4hG35V8uPTX9Lwv5B6DeQ/mxXAgU2VGdN4ZzBAMRBFBIz

s8Z97BqEyLCZuaOohlJOjH7pXC2m8SCkmuN7CqOO4AHGqgv+6JgXbfXiYF30QgqAMf2G

rbczuKP+bUV2lhMCumJhsv9pw6PHwNgy6sJOhQT7b+MUH/Dg5fx2J1eEaJSHXhI/7YF6

aORw==

X-Gm-Message-State: AAQBX9ezqMTwjiHb+6jXuJHDT9a9arzegCEwJwigCqgYDuP3pUkzlE+t

L4/LEX2np8IKUe75lxj8oaeUIq1Q4WMdECR2zew=

X-Google-Smtp-Source: AKy350aiLjkyYYlp4dIrZy9Y/6DTn3QxcNxA89caboTk28PFfhx0Nlrb5V1U9r0ZueM8KoGtkr/1NdXwWmN+/ygRrec=

X-Received: by 2002:a05:651c:1035:b0:2a5:f6f2:1ff4 with SMTP id

w21-20020a05651c103500b002a5f6f21ff4mr1085754ljm.10.1680926398765; Fri, 07

Apr 2023 20:59:58 -0700 (PDT)

MIME-Version: 1.0

From: DrFrederick Owen

Date: Fri, 7 Apr 2023 20:59:33 -0700

Message-ID:

Subject: INVESTMENT PROJECT

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000e45f6805f8cb2cfd"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 13.6

X-Spam_score_int: 136

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings, I am Dr Frederick Owen by name, I represent a formal

Minister of Petroleum (name withheld) for security reasons) I am writing

to you as I truly need your guidance in investing in your country.



Content analysis details: (13.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_PASS SPF: sender matches SPF record

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[owenf4921solution(at)gmail.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.170 listed in list.dnswl.org]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

3.6 NA_DOLLARS BODY: Talks about a million North American dollars

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.170 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLY From and body contain different freemails

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} INVESTMENT PROJECT



--000000000000e45f6805f8cb2cfd

Content-Type: text/plain; charset="UTF-8"



Greetings,



I am Dr Frederick Owen by name, I represent a formal Minister of Petroleum

(name withheld) for security reasons) I am writing to you as I truly need

your guidance in investing in your country.



I came across your email during my investment research, so I decided to

contact you in confidence on this vital issue. I would like to establish a

partnership with you for project assistance in your country as soon as we

conclude arrangements.



There are few basic things I would like to know about that i want you to

assist me in:



(1) Your assistance to carry out a feasibility study on lucrative

areas/choice of investment that will benefit us.



(2) Can your company's account be able to receive and accommodate such a

large amount of funds on a very comfortable note?



(3) Security of the investment and continuity.



The total amount involved in this business is $200,000.000.00 (Two Hundred

Million US Dollars) please note: Should this be of interest to you, do not

hesitate to email me back as further information will be given to you once

we establish understanding in initiating the business. You can contact me

on my private email : drowenfrederick@yahoo.com





I look forward hearing from you,

Dr Frederick Owen



--000000000000e45f6805f8cb2cfd

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




;font-family:Helvetica,Arial,sans-serif;margin:0px">Greetings,
style=3D"color:rgb(0,0,0);font-family:Calibri,Arial,Helvetica,sans-serif;fo=

nt-size:16px;margin:0px">
:Calibri,Arial,Helvetica,sans-serif;font-size:16px">

style=3D"font-size:13px;margin:0px;padding:0px;color:rgb(0,0,0);font-famil=

y:Helvetica,Arial,sans-serif">

:13px;margin:0px;padding:0px;color:rgb(0,0,0);font-family:Helvetica,Arial,s=

ans-serif">I am Dr Frederick Owen by name, I represent a formal Minister of=

Petroleum (name withheld) for security reasons) I am writing to you as I t=

ruly need your guidance in investing in your country.

ltr" style=3D"font-size:13px;margin:0px;padding:0px;color:rgb(0,0,0);font-f=

amily:Helvetica,Arial,sans-serif">

size:13px;margin:0px;padding:0px;color:rgb(0,0,0);font-family:Helvetica,Ari=

al,sans-serif">I came across your email during my investment research, so I=

decided to contact you=C2=A0 in confidence on this vital issue. I would li=

ke to establish a partnership with you for project assistance in your count=

ry as soon as we conclude arrangements.

font-size:13px;margin:0px;padding:0px;color:rgb(0,0,0);font-family:Helvetic=

a,Arial,sans-serif">

in:0px;padding:0px;color:rgb(0,0,0);font-family:Helvetica,Arial,sans-serif"=

>There are few basic things I would like to know about that i want you to a=

ssist me in:

adding:0px;color:rgb(0,0,0);font-family:Helvetica,Arial,sans-serif">

iv>

b(0,0,0);font-family:Helvetica,Arial,sans-serif">(1) Your assistance to car=

ry out a feasibility study on lucrative areas/choice of investment that wil=

l benefit us.

padding:0px;color:rgb(0,0,0);font-family:Helvetica,Arial,sans-serif">

div>

gb(0,0,0);font-family:Helvetica,Arial,sans-serif">(2) Can your company'=

s account be able to receive and accommodate such a large amount of funds o=

n a very comfortable note?

x;margin:0px;padding:0px;color:rgb(0,0,0);font-family:Helvetica,Arial,sans-=

serif">

g:0px;color:rgb(0,0,0);font-family:Helvetica,Arial,sans-serif">(3) Security=

of the investment and continuity.

size:13px;margin:0px;padding:0px;color:rgb(0,0,0);font-family:Helvetica,Ari=

al,sans-serif">

x;padding:0px;color:rgb(0,0,0);font-family:Helvetica,Arial,sans-serif">
t color=3D"#000000">The total amount involved in this business is $200,000.=

000.00 (Two Hundred Million US Dollars) please note: Should this be of inte=

rest to you, do not hesitate to email me back as further information will b=

e given to you once we establish understanding in initiating the business. =

You can contact me on my private email :=

=C2=A0
=3D"mailto:drowenfrederick@yahoo.com" style=3D"color:rgb(151,155,167)">
t color=3D"#0000ff">drowenfrederick@yahoo.com

iv dir=3D"ltr" style=3D"font-size:13px;margin:0px;padding:0px;color:rgb(0,0=

,0);font-family:Helvetica,Arial,sans-serif">

e=3D"font-size:13px;margin:0px;padding:0px;color:rgb(0,0,0);font-family:Hel=

vetica,Arial,sans-serif">I look forward hearing from you,

r=3D"ltr" style=3D"font-size:13px;color:rgb(0,0,0);font-family:Helvetica,Ar=

ial,sans-serif;margin:0px">Dr Frederick Owen




--000000000000e45f6805f8cb2cfd--