Nigerian spam from Google

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 14 May 2022 06:42:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1npr5H-0001DM-2b

for dave@doctor.nl2k.ab.ca;

Sat, 14 May 2022 06:41:23 -0600

Resent-From: The Doctor

Resent-Date: Sat, 14 May 2022 06:41:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wm1-f68.google.com ([209.85.128.68]:51761)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1npoKj-0005bk-VJ

for root@doctor.nl2k.ab.ca;

Sat, 14 May 2022 03:45:40 -0600

Received: by mail-wm1-f68.google.com with SMTP id q20so5987168wmq.1

for ; Sat, 14 May 2022 02:44:52 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=message-id:mime-version:subject:to:from:date:reply-to;

bh=scQcx9Pdew1o5z+V4BlbcSvURScZBPjfkTQ7fppZgws=;

b=FJJP9jrSptyGgpYE98YF/gOzcd7vp13tvdMLXXXKp2khbGSXKzy49XuqfAENP2QHWq

I0vx0n7wrLwwsTkvJseRRI2eiYV86k90Stn9wSd9s6D47P48eU3uJS8hBpUZ/0fHzNR0

cRt/JveohgHNy5/zCFfDyIz3MfzodHVw3QvCvv8DDXPp7MyghkzdI+YJobXzfjdna9kx

vd4xmIoKnWz+eUdmnXOUrA7U+1IkVHTgTo4u80dotICJbgXtzl2kJf1FbBUk/2FehVAC

Slz5haPtzJzwdGU1rt4TZztk4se/8ct0E5bwbC4YhKGYwgJe0YHQ5v0lhHN1TLRpkNiY

1EyA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:message-id:mime-version:subject:to:from:date

:reply-to;

bh=scQcx9Pdew1o5z+V4BlbcSvURScZBPjfkTQ7fppZgws=;

b=in3Px+PoBXtfSZ8W/8aYrJ36fQiGEgYPqE3rA8Zt/GHFuaS9r9KF6zsCqC2/RKGMyr

uFsGhXAjwq2yAk792iZ1R+FbTXFhfJseg2AH02m0T12otLhb8mG4nhn7t+2tac+HVIBV

sOI1SDN5TOxPmXCDXVfb0hIYF0XdvdR0XjddImluY1dIcBTaS+/U4fJC4PBU4wKX8ffg

REliI4zd7K72Wqzx5b98aPhOO+XwlUV747NLaBOhqWV5cV0BbmjzM9wtZQPhEIgnEjCK

ue89KZu4T5GvjjLc2wYJImZrNo4/OF9MdLwrL+eNrIrRw8VU7jml/9tdRpCSvT91OPfk

NvTA==

X-Gm-Message-State: AOAM532Hisk5ryyyON33X/HCTt8efIKNB/1TGKdNVRHFVhG+E0PMgfIN

8uIqh9PK4UD+nwqBfhjOVH8=

X-Google-Smtp-Source: ABdhPJzNV1x1IPhfTD+FsKHWJF+g/HKYgz7bBpqNzgaFd1uB0Z4KWWiSvg10glCZTXCj6dHoXjeqNA==

X-Received: by 2002:a1c:acc4:0:b0:392:9dd4:fbcc with SMTP id v187-20020a1cacc4000000b003929dd4fbccmr8043636wme.78.1652521485832;

Sat, 14 May 2022 02:44:45 -0700 (PDT)

Received: from [192.168.8.155] ([41.58.245.34])

by smtp.gmail.com with ESMTPSA id p10-20020a1c544a000000b003942a244ecasm4663702wmi.15.2022.05.14.02.44.37

(version=TLS1 cipher=AES128-SHA bits=128/128);

Sat, 14 May 2022 02:44:45 -0700 (PDT)

Message-ID: <627f7a0d.1c69fb81.e0c5d.5ca7@mx.google.com>

Content-Type: multipart/alternative; boundary="===============0747385880=="

MIME-Version: 1.0

Subject: FUNDS TRANSFER

To: Recipients

From: "FUNDS TRANSFER"

Date: Sat, 14 May 2022 17:44:28 +0800

Reply-To: williamhrogersjr@outlook.com

X-Spam_score: 13.7

X-Spam_score_int: 137

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Head of International Operations, Sun Trust Bank - USA Address:

N Street NE Washington, DC 20002 USA. Dear Beneficiary With all due respect,

This particular letter is strictly confidential and only fo [...]



Content analysis details: (13.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.68 listed in wl.mailspike.net]

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[mrdavidmorris707[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[mrdavidmorris707[at]gmail.com]

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 HTML_MESSAGE BODY: HTML included in message

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

0.7 MONEY_FROM_41 Lots of money from Africa

0.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 XFER_LOTSA_MONEY Transfer a lot of money

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} FUNDS TRANSFER



You will not see this in a MIME-aware mail reader.

--===============0747385880==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



Head of International Operations, Sun Trust Bank - USA Address: N Street NE=

Washington, DC 20002 USA. Dear Beneficiary With all due respect, This part=

icular letter is strictly confidential and only for your perusal. Based on =

your inability to complete your claim from your previous transactions, we h=

ave been officially appointed by World Bank - Switzerland to release the al=

ready ear-marked (assigned) sum of (US$10,500,000.00) to you as a form of s=

ettlement of debt. Officially, you are the true beneficiary to the stated s=

um. The US Treasury Department and the Securities/Exchange Commission are c=

ollectively ready to APPROVE and ORDER for the immediate swift wire transfe=

r of your due funds via Telegraphic Transfer/Telex Transfer (Swift). As a m=

atter of fact, we are ready to affect the onward remittance of your due fun=

d but your partner/representative (Mr. Donald Parker) from Georgia has advi=

sed us to transfer your fund into his own personal account. The mentioned p=

erson (Mr. Donald Parker) said that you authorized him to help you collect =

your due fund from this bank. And he is ready to pay a transfer fee of $750=

to get this done. And we receive an alert that a fake scammer has extorted=

some money from you already, please we advise you to stop any further comm=

unication with them. Please confirm to us if we should release your due fun=

d to your partner/representative (Mr. Donald Parker). We hereby anticipate =

your swift response because this is urgent. Sealed, Mr. William H. Rogers, =

Jr. Chairman and Chief Executive Officer. Sun Trust Bank - USA (Privacy Pol=

icy, Terms, Satisfaction and Banking Accuracy)

--===============0747385880==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body




=3Diso-8859-1"/>Head of International Operations,

Sun Trust Bank - USA

Address: N Street NE Washington,

DC 20002 USA.







Dear Beneficiary

With all due respect,



This particular letter is strictly confidential and only for your perusal.



Based on your inability to complete your claim from your previous transacti=

ons, we have been officially appointed by World Bank - Switzerland to relea=

se the already ear-marked (assigned) sum of (US$10,500,000.00) to you as a =

form of settlement of debt. Officially, you are the true beneficiary to the=

stated sum. The US Treasury Department and the Securities/Exchange Commiss=

ion are collectively ready to APPROVE and ORDER for the immediate swift wir=

e transfer of your due funds via Telegraphic Transfer/Telex Transfer (Swift=

).



As a matter of fact, we are ready to affect the onward remittance of your d=

ue fund but your partner/representative (Mr. Donald Parker) from Georgia ha=

s advised us to transfer your fund into his own personal account. The menti=

oned person (Mr. Donald Parker) said that you authorized him to help you co=

llect your due fund from this bank. And he is ready to pay a transfer fee o=

f $750 to get this done. And we receive an alert that a fake scammer has ex=

torted some money from you already, please we advise you to stop any furthe=

r communication with them.



Please confirm to us if we should release your due fund to your partner/rep=

resentative (Mr. Donald Parker). We hereby anticipate your swift response b=

ecause this is urgent.



Sealed,

Mr. William H. Rogers, Jr.

Chairman and Chief Executive Officer.

Sun Trust Bank - USA

(Privacy Policy, Terms, Satisfaction and Banking Accuracy)

--===============0747385880==--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA