Nigerian spam from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 14 May 2022 06:42:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1npr5H-0001DM-2b
for dave@doctor.nl2k.ab.ca;
Sat, 14 May 2022 06:41:23 -0600
Resent-From: The Doctor
Resent-Date: Sat, 14 May 2022 06:41:23 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wm1-f68.google.com ([209.85.128.68]:51761)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1npoKj-0005bk-VJ
for root@doctor.nl2k.ab.ca;
Sat, 14 May 2022 03:45:40 -0600
Received: by mail-wm1-f68.google.com with SMTP id q20so5987168wmq.1
for; Sat, 14 May 2022 02:44:52 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=message-id:mime-version:subject:to:from:date:reply-to;
bh=scQcx9Pdew1o5z+V4BlbcSvURScZBPjfkTQ7fppZgws=;
b=FJJP9jrSptyGgpYE98YF/gOzcd7vp13tvdMLXXXKp2khbGSXKzy49XuqfAENP2QHWq
I0vx0n7wrLwwsTkvJseRRI2eiYV86k90Stn9wSd9s6D47P48eU3uJS8hBpUZ/0fHzNR0
cRt/JveohgHNy5/zCFfDyIz3MfzodHVw3QvCvv8DDXPp7MyghkzdI+YJobXzfjdna9kx
vd4xmIoKnWz+eUdmnXOUrA7U+1IkVHTgTo4u80dotICJbgXtzl2kJf1FbBUk/2FehVAC
Slz5haPtzJzwdGU1rt4TZztk4se/8ct0E5bwbC4YhKGYwgJe0YHQ5v0lhHN1TLRpkNiY
1EyA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:message-id:mime-version:subject:to:from:date
:reply-to;
bh=scQcx9Pdew1o5z+V4BlbcSvURScZBPjfkTQ7fppZgws=;
b=in3Px+PoBXtfSZ8W/8aYrJ36fQiGEgYPqE3rA8Zt/GHFuaS9r9KF6zsCqC2/RKGMyr
uFsGhXAjwq2yAk792iZ1R+FbTXFhfJseg2AH02m0T12otLhb8mG4nhn7t+2tac+HVIBV
sOI1SDN5TOxPmXCDXVfb0hIYF0XdvdR0XjddImluY1dIcBTaS+/U4fJC4PBU4wKX8ffg
REliI4zd7K72Wqzx5b98aPhOO+XwlUV747NLaBOhqWV5cV0BbmjzM9wtZQPhEIgnEjCK
ue89KZu4T5GvjjLc2wYJImZrNo4/OF9MdLwrL+eNrIrRw8VU7jml/9tdRpCSvT91OPfk
NvTA==
X-Gm-Message-State: AOAM532Hisk5ryyyON33X/HCTt8efIKNB/1TGKdNVRHFVhG+E0PMgfIN
8uIqh9PK4UD+nwqBfhjOVH8=
X-Google-Smtp-Source: ABdhPJzNV1x1IPhfTD+FsKHWJF+g/HKYgz7bBpqNzgaFd1uB0Z4KWWiSvg10glCZTXCj6dHoXjeqNA==
X-Received: by 2002:a1c:acc4:0:b0:392:9dd4:fbcc with SMTP id v187-20020a1cacc4000000b003929dd4fbccmr8043636wme.78.1652521485832;
Sat, 14 May 2022 02:44:45 -0700 (PDT)
Received: from [192.168.8.155] ([41.58.245.34])
by smtp.gmail.com with ESMTPSA id p10-20020a1c544a000000b003942a244ecasm4663702wmi.15.2022.05.14.02.44.37
(version=TLS1 cipher=AES128-SHA bits=128/128);
Sat, 14 May 2022 02:44:45 -0700 (PDT)
Message-ID: <627f7a0d.1c69fb81.e0c5d.5ca7@mx.google.com>
Content-Type: multipart/alternative; boundary="===============0747385880=="
MIME-Version: 1.0
Subject: FUNDS TRANSFER
To: Recipients
From: "FUNDS TRANSFER"
Date: Sat, 14 May 2022 17:44:28 +0800
Reply-To: williamhrogersjr@outlook.com
X-Spam_score: 13.7
X-Spam_score_int: 137
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Head of International Operations, Sun Trust Bank - USA Address:
N Street NE Washington, DC 20002 USA. Dear Beneficiary With all due respect,
This particular letter is strictly confidential and only fo [...]
Content analysis details: (13.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.68 listed in wl.mailspike.net]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[mrdavidmorris707[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[mrdavidmorris707[at]gmail.com]
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.7 MONEY_FROM_41 Lots of money from Africa
0.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 XFER_LOTSA_MONEY Transfer a lot of money
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} FUNDS TRANSFER
You will not see this in a MIME-aware mail reader.
--===============0747385880==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Head of International Operations, Sun Trust Bank - USA Address: N Street NE=
Washington, DC 20002 USA. Dear Beneficiary With all due respect, This part=
icular letter is strictly confidential and only for your perusal. Based on =
your inability to complete your claim from your previous transactions, we h=
ave been officially appointed by World Bank - Switzerland to release the al=
ready ear-marked (assigned) sum of (US$10,500,000.00) to you as a form of s=
ettlement of debt. Officially, you are the true beneficiary to the stated s=
um. The US Treasury Department and the Securities/Exchange Commission are c=
ollectively ready to APPROVE and ORDER for the immediate swift wire transfe=
r of your due funds via Telegraphic Transfer/Telex Transfer (Swift). As a m=
atter of fact, we are ready to affect the onward remittance of your due fun=
d but your partner/representative (Mr. Donald Parker) from Georgia has advi=
sed us to transfer your fund into his own personal account. The mentioned p=
erson (Mr. Donald Parker) said that you authorized him to help you collect =
your due fund from this bank. And he is ready to pay a transfer fee of $750=
to get this done. And we receive an alert that a fake scammer has extorted=
some money from you already, please we advise you to stop any further comm=
unication with them. Please confirm to us if we should release your due fun=
d to your partner/representative (Mr. Donald Parker). We hereby anticipate =
your swift response because this is urgent. Sealed, Mr. William H. Rogers, =
Jr. Chairman and Chief Executive Officer. Sun Trust Bank - USA (Privacy Pol=
icy, Terms, Satisfaction and Banking Accuracy)
--===============0747385880==
Content-Type: text/html; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
=3Diso-8859-1"/>Head of International Operations,
Sun Trust Bank - USA
Address: N Street NE Washington,
DC 20002 USA.
Dear Beneficiary
With all due respect,
This particular letter is strictly confidential and only for your perusal.
Based on your inability to complete your claim from your previous transacti=
ons, we have been officially appointed by World Bank - Switzerland to relea=
se the already ear-marked (assigned) sum of (US$10,500,000.00) to you as a =
form of settlement of debt. Officially, you are the true beneficiary to the=
stated sum. The US Treasury Department and the Securities/Exchange Commiss=
ion are collectively ready to APPROVE and ORDER for the immediate swift wir=
e transfer of your due funds via Telegraphic Transfer/Telex Transfer (Swift=
).
As a matter of fact, we are ready to affect the onward remittance of your d=
ue fund but your partner/representative (Mr. Donald Parker) from Georgia ha=
s advised us to transfer your fund into his own personal account. The menti=
oned person (Mr. Donald Parker) said that you authorized him to help you co=
llect your due fund from this bank. And he is ready to pay a transfer fee o=
f $750 to get this done. And we receive an alert that a fake scammer has ex=
torted some money from you already, please we advise you to stop any furthe=
r communication with them.
Please confirm to us if we should release your due fund to your partner/rep=
resentative (Mr. Donald Parker). We hereby anticipate your swift response b=
ecause this is urgent.
Sealed,
Mr. William H. Rogers, Jr.
Chairman and Chief Executive Officer.
Sun Trust Bank - USA
(Privacy Policy, Terms, Satisfaction and Banking Accuracy)
--===============0747385880==--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 14 May 2022 06:42:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1npr5H-0001DM-2b
for dave@doctor.nl2k.ab.ca;
Sat, 14 May 2022 06:41:23 -0600
Resent-From: The Doctor
Resent-Date: Sat, 14 May 2022 06:41:23 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wm1-f68.google.com ([209.85.128.68]:51761)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1npoKj-0005bk-VJ
for root@doctor.nl2k.ab.ca;
Sat, 14 May 2022 03:45:40 -0600
Received: by mail-wm1-f68.google.com with SMTP id q20so5987168wmq.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=message-id:mime-version:subject:to:from:date:reply-to;
bh=scQcx9Pdew1o5z+V4BlbcSvURScZBPjfkTQ7fppZgws=;
b=FJJP9jrSptyGgpYE98YF/gOzcd7vp13tvdMLXXXKp2khbGSXKzy49XuqfAENP2QHWq
I0vx0n7wrLwwsTkvJseRRI2eiYV86k90Stn9wSd9s6D47P48eU3uJS8hBpUZ/0fHzNR0
cRt/JveohgHNy5/zCFfDyIz3MfzodHVw3QvCvv8DDXPp7MyghkzdI+YJobXzfjdna9kx
vd4xmIoKnWz+eUdmnXOUrA7U+1IkVHTgTo4u80dotICJbgXtzl2kJf1FbBUk/2FehVAC
Slz5haPtzJzwdGU1rt4TZztk4se/8ct0E5bwbC4YhKGYwgJe0YHQ5v0lhHN1TLRpkNiY
1EyA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:message-id:mime-version:subject:to:from:date
:reply-to;
bh=scQcx9Pdew1o5z+V4BlbcSvURScZBPjfkTQ7fppZgws=;
b=in3Px+PoBXtfSZ8W/8aYrJ36fQiGEgYPqE3rA8Zt/GHFuaS9r9KF6zsCqC2/RKGMyr
uFsGhXAjwq2yAk792iZ1R+FbTXFhfJseg2AH02m0T12otLhb8mG4nhn7t+2tac+HVIBV
sOI1SDN5TOxPmXCDXVfb0hIYF0XdvdR0XjddImluY1dIcBTaS+/U4fJC4PBU4wKX8ffg
REliI4zd7K72Wqzx5b98aPhOO+XwlUV747NLaBOhqWV5cV0BbmjzM9wtZQPhEIgnEjCK
ue89KZu4T5GvjjLc2wYJImZrNo4/OF9MdLwrL+eNrIrRw8VU7jml/9tdRpCSvT91OPfk
NvTA==
X-Gm-Message-State: AOAM532Hisk5ryyyON33X/HCTt8efIKNB/1TGKdNVRHFVhG+E0PMgfIN
8uIqh9PK4UD+nwqBfhjOVH8=
X-Google-Smtp-Source: ABdhPJzNV1x1IPhfTD+FsKHWJF+g/HKYgz7bBpqNzgaFd1uB0Z4KWWiSvg10glCZTXCj6dHoXjeqNA==
X-Received: by 2002:a1c:acc4:0:b0:392:9dd4:fbcc with SMTP id v187-20020a1cacc4000000b003929dd4fbccmr8043636wme.78.1652521485832;
Sat, 14 May 2022 02:44:45 -0700 (PDT)
Received: from [192.168.8.155] ([41.58.245.34])
by smtp.gmail.com with ESMTPSA id p10-20020a1c544a000000b003942a244ecasm4663702wmi.15.2022.05.14.02.44.37
(version=TLS1 cipher=AES128-SHA bits=128/128);
Sat, 14 May 2022 02:44:45 -0700 (PDT)
Message-ID: <627f7a0d.1c69fb81.e0c5d.5ca7@mx.google.com>
Content-Type: multipart/alternative; boundary="===============0747385880=="
MIME-Version: 1.0
Subject: FUNDS TRANSFER
To: Recipients
From: "FUNDS TRANSFER"
Date: Sat, 14 May 2022 17:44:28 +0800
Reply-To: williamhrogersjr@outlook.com
X-Spam_score: 13.7
X-Spam_score_int: 137
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Head of International Operations, Sun Trust Bank - USA Address:
N Street NE Washington, DC 20002 USA. Dear Beneficiary With all due respect,
This particular letter is strictly confidential and only fo [...]
Content analysis details: (13.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.68 listed in wl.mailspike.net]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[mrdavidmorris707[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[mrdavidmorris707[at]gmail.com]
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.7 MONEY_FROM_41 Lots of money from Africa
0.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 XFER_LOTSA_MONEY Transfer a lot of money
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} FUNDS TRANSFER
You will not see this in a MIME-aware mail reader.
--===============0747385880==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Head of International Operations, Sun Trust Bank - USA Address: N Street NE=
Washington, DC 20002 USA. Dear Beneficiary With all due respect, This part=
icular letter is strictly confidential and only for your perusal. Based on =
your inability to complete your claim from your previous transactions, we h=
ave been officially appointed by World Bank - Switzerland to release the al=
ready ear-marked (assigned) sum of (US$10,500,000.00) to you as a form of s=
ettlement of debt. Officially, you are the true beneficiary to the stated s=
um. The US Treasury Department and the Securities/Exchange Commission are c=
ollectively ready to APPROVE and ORDER for the immediate swift wire transfe=
r of your due funds via Telegraphic Transfer/Telex Transfer (Swift). As a m=
atter of fact, we are ready to affect the onward remittance of your due fun=
d but your partner/representative (Mr. Donald Parker) from Georgia has advi=
sed us to transfer your fund into his own personal account. The mentioned p=
erson (Mr. Donald Parker) said that you authorized him to help you collect =
your due fund from this bank. And he is ready to pay a transfer fee of $750=
to get this done. And we receive an alert that a fake scammer has extorted=
some money from you already, please we advise you to stop any further comm=
unication with them. Please confirm to us if we should release your due fun=
d to your partner/representative (Mr. Donald Parker). We hereby anticipate =
your swift response because this is urgent. Sealed, Mr. William H. Rogers, =
Jr. Chairman and Chief Executive Officer. Sun Trust Bank - USA (Privacy Pol=
icy, Terms, Satisfaction and Banking Accuracy)
--===============0747385880==
Content-Type: text/html; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
=3Diso-8859-1"/>Head of International Operations,
Sun Trust Bank - USA
Address: N Street NE Washington,
DC 20002 USA.
Dear Beneficiary
With all due respect,
This particular letter is strictly confidential and only for your perusal.
Based on your inability to complete your claim from your previous transacti=
ons, we have been officially appointed by World Bank - Switzerland to relea=
se the already ear-marked (assigned) sum of (US$10,500,000.00) to you as a =
form of settlement of debt. Officially, you are the true beneficiary to the=
stated sum. The US Treasury Department and the Securities/Exchange Commiss=
ion are collectively ready to APPROVE and ORDER for the immediate swift wir=
e transfer of your due funds via Telegraphic Transfer/Telex Transfer (Swift=
).
As a matter of fact, we are ready to affect the onward remittance of your d=
ue fund but your partner/representative (Mr. Donald Parker) from Georgia ha=
s advised us to transfer your fund into his own personal account. The menti=
oned person (Mr. Donald Parker) said that you authorized him to help you co=
llect your due fund from this bank. And he is ready to pay a transfer fee o=
f $750 to get this done. And we receive an alert that a fake scammer has ex=
torted some money from you already, please we advise you to stop any furthe=
r communication with them.
Please confirm to us if we should release your due fund to your partner/rep=
resentative (Mr. Donald Parker). We hereby anticipate your swift response b=
ecause this is urgent.
Sealed,
Mr. William H. Rogers, Jr.
Chairman and Chief Executive Officer.
Sun Trust Bank - USA
(Privacy Policy, Terms, Satisfaction and Banking Accuracy)
--===============0747385880==--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments