Nigerian spam from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 29 May 2022 16:16:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1nvRBc-00087V-2c
for dave@doctor.nl2k.ab.ca;
Sun, 29 May 2022 16:15:00 -0600
Resent-From: The Doctor
Resent-Date: Sun, 29 May 2022 16:15:00 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs1-f67.google.com ([209.85.217.67]:44569)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1nvP8s-00023o-MB
for bin@nl2k.ab.ca;
Sun, 29 May 2022 14:04:06 -0600
Received: by mail-vs1-f67.google.com with SMTP id 68so9016221vse.11
for; Sun, 29 May 2022 13:03:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to
:content-transfer-encoding;
bh=SBgtwvWkIYwrI4NNUchOadkQP815ewxm/3gr0Bmy3PM=;
b=k6+bafiRly0kgfp/sbNNXQ3C1giowV0ccQ584Wu/IO72u59PKRLWMm7vM0wQW+HlCI
6FoQ369uEoKJsgfnJeOdn8skFGOBpOhEzyDaPajVgQl2haG9GTmV4dLbjHOUzASRvmo4
ndHm8UW8r8TDuWhl2AjQexF/uAoGT1dYcs7JzzzTj0peMtoxSbzW1QbYpnC1+NEmIDDW
EbobjPnhSgOYlS33ndZ7jzrtlBZqWZ6bC11ufSaUh113JyDlYxp1XEZJmERCRBBn2NZi
RSakZtYdmY72CdCCE3LXsd/fAJqv22yhN0A6ShnXAsqcX6Tvfk3vpEwps78LXRMIR36W
8puw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to:content-transfer-encoding;
bh=SBgtwvWkIYwrI4NNUchOadkQP815ewxm/3gr0Bmy3PM=;
b=c0Y63AKPR2IVSdG8Bpsb0QlAZ7FlfVYn27MQUm718/+KPoGbmtVH+6lgUgzbATQ0vz
FvvHXA/ATHuHjRVEQQXV53rP3zCRpMKBT2nM4j6DwR48ijGVkVc58ehx1p17v4nTrqGb
Q9Hf6nS4J+JkFCbjNBJLq5lbVjKpJc2adMDNJx4vdNOue7FGhG70fp6DgdtgZMyh+t1B
63g5oFCXbdlk32i6tIGrfQiBoJe+8mKbBRsCNIdJbE0UJN8gr3J2btPgS62QBloZ7Gt0
KZBQHHamuvcNhYiFKp5eugdmKzBSXATAAdus1uwrJcTqXji995MzlBWmfl+YDCNE1/vk
RY8g==
X-Gm-Message-State: AOAM530TXxivIN3I/an5PRajfiupeEqxc4bZWVMNMdSjxHfB/LmenokR
qPlMF6ymJ8NXijToMcIM58yxxJ6vZMPEFK7Xi9w=
X-Google-Smtp-Source: ABdhPJz66wIKvi6M1/2VQU2SulasyjM9xX2/I8NVVwvWIfVN2hctGyOqRW9k6Y5ElDZxLOWQlRXd9nuUyLSewpIvTBo=
X-Received: by 2002:a67:1a02:0:b0:320:a51f:8067 with SMTP id
a2-20020a671a02000000b00320a51f8067mr21317052vsa.38.1653854619516; Sun, 29
May 2022 13:03:39 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:612c:6aa:b0:2bd:1789:bd2a with HTTP; Sun, 29 May 2022
13:03:38 -0700 (PDT)
Reply-To: kristalinageorgieva17@yahoo.com
From: IMF OFFICE
Date: Sun, 29 May 2022 13:03:38 -0700
Message-ID:
Subject: Greetings
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: bin@nl2k.ab.ca
X-Spam_score: 20.5
X-Spam_score_int: 205
X-Spam_bar: ++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Greeting from IMF office INTERNATIONAL MONETARY FUND (IMF)
OFFICE OF REGISTER 700 19th STREET, NW, SUITE HQ1_3_544 WASHINGTON, DC 20431,
USA Are you alive or dead? We received several emails from one Mr. David
Trent Mallory who narrated to us about the auto car accident you had 2 weeks
ago. Mr. David Trent Mallory made us to understand tha [...]
Content analysis details: (20.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[robertumar001[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.217.67 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[robertumar001[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[kristalinageorgieva17[at]yahoo.com]
1.1 HK_SCAM_N3 BODY: No description available.
2.5 HK_SCAM_N2 BODY: No description available.
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 HK_SCAM No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.3 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of
money
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
Subject: {SPAM?} Greetings
--=20
Greeting from IMF office
INTERNATIONAL MONETARY FUND (IMF)
OFFICE OF REGISTER
700 19th STREET, NW, SUITE HQ1_3_544
WASHINGTON, DC 20431, USA
Are you alive or dead? We received several emails from one Mr. David
Trent Mallory
who narrated to us about the auto car accident you had 2 weeks ago.
Mr. David Trent Mallory
made us to understand that you are in hospital for treatment but there is n=
o
hope of your recovery. He stated that he is your business associates and
your next of kin who you have chosen and permitted to inherit all your
properties, he is contacting this office base on your contract
/Inheritance payment fund
valid $8.5 Million US Dollars,so we request your confirmation before
we can process this transfer to Mr. David Trent Mallory
Bank Account. This is to avoid releasing your money to wrong person because
Mr. David Trent Mallory is too eager and ready to follow every
instruction to have this
money into his account. If you did not have auto accident and you did not p=
ermit
Mr. David Trent Mallory to claim your money, kindly reply this message
with your full contact information so we can process the release of
the $8.5 Million US Dollars dollars to you, and please if anyone
emails with my name without this very code (006955). Please that email
is a scam and do not reply.so here is the information we need now to
start processing your release of your funds.
Full Name:=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=
=E2=80=A6. =E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=
=E2=80=A6=E2=80=A6=E2=80=A6 =E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=
=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6
Full Address:=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=
=A6. =E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=
=A6=E2=80=A6=E2=80=A6 =E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=
=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6
Direct Telephone Number:=E2=80=A6=E2=80=A6. =E2=80=A6=E2=80=A6=E2=80=A6=E2=
=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6 =E2=80=A6=E2=
=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6
IDENTITY CARD OR PASSPORT COPY...........
Please, reconfirm your direct cell phone number to enable voice communicati=
on
Here to contact my office with the information.
Mrs. Georgieva Kristalina
Managing Director
Contact Email:
kristalinageorgieva17@yahoo.com
Text number:+1 (315) 238-4879
WhatsApp: number +1 (972) 848-7050
Waiting to here from you.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 29 May 2022 16:16:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1nvRBc-00087V-2c
for dave@doctor.nl2k.ab.ca;
Sun, 29 May 2022 16:15:00 -0600
Resent-From: The Doctor
Resent-Date: Sun, 29 May 2022 16:15:00 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs1-f67.google.com ([209.85.217.67]:44569)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1nvP8s-00023o-MB
for bin@nl2k.ab.ca;
Sun, 29 May 2022 14:04:06 -0600
Received: by mail-vs1-f67.google.com with SMTP id 68so9016221vse.11
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to
:content-transfer-encoding;
bh=SBgtwvWkIYwrI4NNUchOadkQP815ewxm/3gr0Bmy3PM=;
b=k6+bafiRly0kgfp/sbNNXQ3C1giowV0ccQ584Wu/IO72u59PKRLWMm7vM0wQW+HlCI
6FoQ369uEoKJsgfnJeOdn8skFGOBpOhEzyDaPajVgQl2haG9GTmV4dLbjHOUzASRvmo4
ndHm8UW8r8TDuWhl2AjQexF/uAoGT1dYcs7JzzzTj0peMtoxSbzW1QbYpnC1+NEmIDDW
EbobjPnhSgOYlS33ndZ7jzrtlBZqWZ6bC11ufSaUh113JyDlYxp1XEZJmERCRBBn2NZi
RSakZtYdmY72CdCCE3LXsd/fAJqv22yhN0A6ShnXAsqcX6Tvfk3vpEwps78LXRMIR36W
8puw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to:content-transfer-encoding;
bh=SBgtwvWkIYwrI4NNUchOadkQP815ewxm/3gr0Bmy3PM=;
b=c0Y63AKPR2IVSdG8Bpsb0QlAZ7FlfVYn27MQUm718/+KPoGbmtVH+6lgUgzbATQ0vz
FvvHXA/ATHuHjRVEQQXV53rP3zCRpMKBT2nM4j6DwR48ijGVkVc58ehx1p17v4nTrqGb
Q9Hf6nS4J+JkFCbjNBJLq5lbVjKpJc2adMDNJx4vdNOue7FGhG70fp6DgdtgZMyh+t1B
63g5oFCXbdlk32i6tIGrfQiBoJe+8mKbBRsCNIdJbE0UJN8gr3J2btPgS62QBloZ7Gt0
KZBQHHamuvcNhYiFKp5eugdmKzBSXATAAdus1uwrJcTqXji995MzlBWmfl+YDCNE1/vk
RY8g==
X-Gm-Message-State: AOAM530TXxivIN3I/an5PRajfiupeEqxc4bZWVMNMdSjxHfB/LmenokR
qPlMF6ymJ8NXijToMcIM58yxxJ6vZMPEFK7Xi9w=
X-Google-Smtp-Source: ABdhPJz66wIKvi6M1/2VQU2SulasyjM9xX2/I8NVVwvWIfVN2hctGyOqRW9k6Y5ElDZxLOWQlRXd9nuUyLSewpIvTBo=
X-Received: by 2002:a67:1a02:0:b0:320:a51f:8067 with SMTP id
a2-20020a671a02000000b00320a51f8067mr21317052vsa.38.1653854619516; Sun, 29
May 2022 13:03:39 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:612c:6aa:b0:2bd:1789:bd2a with HTTP; Sun, 29 May 2022
13:03:38 -0700 (PDT)
Reply-To: kristalinageorgieva17@yahoo.com
From: IMF OFFICE
Date: Sun, 29 May 2022 13:03:38 -0700
Message-ID:
Subject: Greetings
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: bin@nl2k.ab.ca
X-Spam_score: 20.5
X-Spam_score_int: 205
X-Spam_bar: ++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Greeting from IMF office INTERNATIONAL MONETARY FUND (IMF)
OFFICE OF REGISTER 700 19th STREET, NW, SUITE HQ1_3_544 WASHINGTON, DC 20431,
USA Are you alive or dead? We received several emails from one Mr. David
Trent Mallory who narrated to us about the auto car accident you had 2 weeks
ago. Mr. David Trent Mallory made us to understand tha [...]
Content analysis details: (20.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[robertumar001[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.217.67 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[robertumar001[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[kristalinageorgieva17[at]yahoo.com]
1.1 HK_SCAM_N3 BODY: No description available.
2.5 HK_SCAM_N2 BODY: No description available.
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 HK_SCAM No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.3 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of
money
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
Subject: {SPAM?} Greetings
--=20
Greeting from IMF office
INTERNATIONAL MONETARY FUND (IMF)
OFFICE OF REGISTER
700 19th STREET, NW, SUITE HQ1_3_544
WASHINGTON, DC 20431, USA
Are you alive or dead? We received several emails from one Mr. David
Trent Mallory
who narrated to us about the auto car accident you had 2 weeks ago.
Mr. David Trent Mallory
made us to understand that you are in hospital for treatment but there is n=
o
hope of your recovery. He stated that he is your business associates and
your next of kin who you have chosen and permitted to inherit all your
properties, he is contacting this office base on your contract
/Inheritance payment fund
valid $8.5 Million US Dollars,so we request your confirmation before
we can process this transfer to Mr. David Trent Mallory
Bank Account. This is to avoid releasing your money to wrong person because
Mr. David Trent Mallory is too eager and ready to follow every
instruction to have this
money into his account. If you did not have auto accident and you did not p=
ermit
Mr. David Trent Mallory to claim your money, kindly reply this message
with your full contact information so we can process the release of
the $8.5 Million US Dollars dollars to you, and please if anyone
emails with my name without this very code (006955). Please that email
is a scam and do not reply.so here is the information we need now to
start processing your release of your funds.
Full Name:=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=
=E2=80=A6. =E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=
=E2=80=A6=E2=80=A6=E2=80=A6 =E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=
=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6
Full Address:=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=
=A6. =E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=
=A6=E2=80=A6=E2=80=A6 =E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=
=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6
Direct Telephone Number:=E2=80=A6=E2=80=A6. =E2=80=A6=E2=80=A6=E2=80=A6=E2=
=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6 =E2=80=A6=E2=
=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6
IDENTITY CARD OR PASSPORT COPY...........
Please, reconfirm your direct cell phone number to enable voice communicati=
on
Here to contact my office with the information.
Mrs. Georgieva Kristalina
Managing Director
Contact Email:
kristalinageorgieva17@yahoo.com
Text number:+1 (315) 238-4879
WhatsApp: number +1 (972) 848-7050
Waiting to here from you.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments