Legal Nigerian Spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 12 Jun 2022 05:34:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1o0LqW-00027E-I6
for dave@doctor.nl2k.ab.ca;
Sun, 12 Jun 2022 05:33:32 -0600
Resent-From: The Doctor
Resent-Date: Sun, 12 Jun 2022 05:33:32 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qk1-f173.google.com ([209.85.222.173]:34305)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1o0Lh1-000Kqo-Vh
for root@nk.ca;
Sun, 12 Jun 2022 05:23:56 -0600
Received: by mail-qk1-f173.google.com with SMTP id n197so2292008qke.1
for; Sun, 12 Jun 2022 04:23:26 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=M3+NGpwZtmKSZ/DtW0BBRCwIZe9cDI8Ne+yd1C5Nsb0=;
b=JH2BxCC7kYFf1rfva+oyGmh/EOQNwmAPsR3qevGeXlzniCkuHhKcqr4oEKxxjJQLeY
NiW6pL0XoLkpSydV//W6HVaxG42lIAw6ecVRShtz77S8/JHdvd+TrjPtn2EXantdreBX
igMY+oF2OMHopuCYSNXilKSO/pyWA9KDyfIRZ4hVGR1k74uZfLW8BetSVZXFBKnTpaY+
BYWH7HhGbFIj/S6/KCx05iJGNpAafjE12bKNfe/NJUiVf5MHnoNY/VWgSbmmDnvl+ucw
ak5p2O3pvqkSJ/5KTDJ07Slv6yHjIT30/Kd0J9dMSbsR30D2aKVSsaNC/Q1usFtL5Wbj
BvAQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=M3+NGpwZtmKSZ/DtW0BBRCwIZe9cDI8Ne+yd1C5Nsb0=;
b=yyV+COUhk4xXGe8RND7LktvC9LWq7hzkUXaRsUnWVIQDLlVEoEyWAv6oNUyLaCXGw9
SDCa5tDF33fprtgxetyVZUgpumbqMW1jyKFJLvlrHeRZGv61M6n27bwza5ey5FtxMHa2
wpYrKD/6UMN0u/NZjfUDIM0F8SkvJZV9gjsnGya0JwWJtZOOz9+OBK50dD0PV7FwilR5
dcsSnNX6uRhRv0FX4MUP2IgtkPc3WU+ORH0isC/sEEcR74wgKi+QWCa/KKlMSYelkUYN
eHTN4qpMIabad0AwEiCVqwZxo4xc1cweILRMcr+XfFclZY4Sr7sMg+2HA08gxR/LgCy1
rCuw==
X-Gm-Message-State: AOAM532N+/JY6dCFXV0Sz6a1HvbI5C1hbPedK4mUVUMJsgk2I+a7zsRb
CgytblOpgZ0AucVee0jGeB6gL/76JnuyiEBOuWKAXFJqak8SA7EH
X-Google-Smtp-Source: ABdhPJxBkI4P1F4vtRiwi4f/h0ZcLQ5s74aiT7YPhwkS+Gj7vb3p3/VVIMypIOAZIilXMq4Vbjfh1cckiL0GksAIRos=
X-Received: by 2002:a05:6638:3e0d:b0:331:b6de:71c9 with SMTP id
co13-20020a0566383e0d00b00331b6de71c9mr18783454jab.180.1655032663100; Sun, 12
Jun 2022 04:17:43 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6e02:158c:0:0:0:0 with HTTP; Sun, 12 Jun 2022 04:17:42
-0700 (PDT)
Reply-To: baileym53@yahoo.com
From: Officer
Date: Sun, 12 Jun 2022 04:17:42 -0700
Message-ID:
Subject: New development
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: root@nk.ca
X-Spam_score: 15.6
X-Spam_score_int: 156
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: ATTENTION : , This is to inform you that you are now going
to receive your fund in their affiliate office in France payment center or,
any other of their affiliate office. hence presently, i have gotten an a
sponso [...]
Content analysis details: (15.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.173 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[jamespeters4011[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[jamespeters4011[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[baileym53[at]yahoo.com]
1.1 HK_SCAM_N3 BODY: No description available.
2.5 MILLION_USD BODY: Talks about millions of dollars
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 HK_SCAM No description available.
1.2 UPPERCASE_75_100 message body is 75-100% uppercase
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 MONEY_BARRISTER Lots of money from a UK lawyer
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.5 XFER_LOTSA_MONEY Transfer a lot of money
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} New development
ATTENTION : ,
This is to inform you that you are now going to receive your fund in
their affiliate office in France payment center or, any other of their
affiliate office. hence presently, i have gotten an a sponsor from
France who is willing to carter for the expenses on your behalf since
you are unable. note, the sponsor will be taking 10% out of the total
sum $40 million USD after your fund must have transferred into your
account.
The conditions mentioned in the payment arrangement are short listed below.
1. YOU WILL HAVE TO TRAVEL TO FRENCH GUIANA FIRST TO MEET WITH THE
SPONSOR FOR THE SIGNING OF YOUR SECURE PAYMENT DOCUMENT AND PRESENT TO
FRANCE PAYMENT CENTER WITH THE GIFT WHERE YOU WILL RECEIVE YOUR FUND
AS THE BENEFICIARY AS SOON AS YOU ARRIVE IN FRANCE OR ANY OTHER OF
THEIR AFFILIATE OFFICE.
2. NO MORE UPFRONT PAYMENT REQUIRED FROM YOU AS THE BENEFICIARY.
3.YOUR FLIGHT TICKETS WILL BE CATERED BY THE SPONSOR.
4. YOUR HOTEL RESERVATION / ACCOMMODATION WILL BE PROVIDED BY THE SPONSOR.
5. YOUR JOURNEY /TRIP TO FRANCE YOUR PAYMENT CENTER WILL NOT TAKE MORE
THAN SIX DAYS TO FINALIZE YOUR PAYMENT.
6. YOUR DUTY IS TO PROVIDE YOUR VALID PASSPORT AND READINESS TO FLY TO
THE PAYING CENTER AT NO EXPENSES FROM YOU AS YOU NEED NO VISA. NOTE,
YOU ARE TRAVELING TO FRENCH GUIANA FIRST TO MEET WITH THE SPONSOR FOR
THE DOCUMENT AND THEN PROCEED TO THEIR AFFILIATE OFFICE IN FRANCE
THEIR PAYMENT CENTER TO MEET WITH THE OFFICIALS FOR THE FINAL RELEASE
OF YOUR FUND.
BE MINDFUL, YOU ARE ALSO TRAVELING TO THE PAYMENT CENTER FRANCE TO
PRESENT ALL YOUR FUNDS SECURE PAYMENT DOCUMENTS THAT BACK UP YOUR
CLAIM AS THE BENEFICIARY. AS SOON AS YOU SIGN ALL THE NECESSARY
DOCUMENTS THAT BACK UP YOUR CLAIM, THE OFFICIALS WILL THEN NOW HAVE
THE FULL OFFICIAL RIGHT TO RELEASE YOUR FUND TO YOU AS THE BENEFICIARY
WITHOUT ANY FURTHER DELAY.
7. SEND YOUR CURRENT AND DIRECT TELEPHONE NUMBER AND YOUR CONTACT ADDRESS.
8. SEND YOUR INTERNATIONAL PASSPORT.
THEREFORE, UPON THE RECEIPT OF YOUR DETAILS, THE INVESTOR WILL SEND
YOUR FLIGHT TICKET TO YOU WITHOUT DELAY. CONGRATULATIONS.
I WILL COME OVER THERE IN YOUR COUNTRY TO MEET WITH YOU FOR MY OWN
PERCENTAGE AS WE HAVE AGREED AFTER YOUR FUND MUST HAVE TRANSFERRED
INTO YOUR ACCOUNT.
THANKS FOR YOUR UNDERSTANDING
BARR. I.M.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 12 Jun 2022 05:34:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1o0LqW-00027E-I6
for dave@doctor.nl2k.ab.ca;
Sun, 12 Jun 2022 05:33:32 -0600
Resent-From: The Doctor
Resent-Date: Sun, 12 Jun 2022 05:33:32 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qk1-f173.google.com ([209.85.222.173]:34305)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1o0Lh1-000Kqo-Vh
for root@nk.ca;
Sun, 12 Jun 2022 05:23:56 -0600
Received: by mail-qk1-f173.google.com with SMTP id n197so2292008qke.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=M3+NGpwZtmKSZ/DtW0BBRCwIZe9cDI8Ne+yd1C5Nsb0=;
b=JH2BxCC7kYFf1rfva+oyGmh/EOQNwmAPsR3qevGeXlzniCkuHhKcqr4oEKxxjJQLeY
NiW6pL0XoLkpSydV//W6HVaxG42lIAw6ecVRShtz77S8/JHdvd+TrjPtn2EXantdreBX
igMY+oF2OMHopuCYSNXilKSO/pyWA9KDyfIRZ4hVGR1k74uZfLW8BetSVZXFBKnTpaY+
BYWH7HhGbFIj/S6/KCx05iJGNpAafjE12bKNfe/NJUiVf5MHnoNY/VWgSbmmDnvl+ucw
ak5p2O3pvqkSJ/5KTDJ07Slv6yHjIT30/Kd0J9dMSbsR30D2aKVSsaNC/Q1usFtL5Wbj
BvAQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=M3+NGpwZtmKSZ/DtW0BBRCwIZe9cDI8Ne+yd1C5Nsb0=;
b=yyV+COUhk4xXGe8RND7LktvC9LWq7hzkUXaRsUnWVIQDLlVEoEyWAv6oNUyLaCXGw9
SDCa5tDF33fprtgxetyVZUgpumbqMW1jyKFJLvlrHeRZGv61M6n27bwza5ey5FtxMHa2
wpYrKD/6UMN0u/NZjfUDIM0F8SkvJZV9gjsnGya0JwWJtZOOz9+OBK50dD0PV7FwilR5
dcsSnNX6uRhRv0FX4MUP2IgtkPc3WU+ORH0isC/sEEcR74wgKi+QWCa/KKlMSYelkUYN
eHTN4qpMIabad0AwEiCVqwZxo4xc1cweILRMcr+XfFclZY4Sr7sMg+2HA08gxR/LgCy1
rCuw==
X-Gm-Message-State: AOAM532N+/JY6dCFXV0Sz6a1HvbI5C1hbPedK4mUVUMJsgk2I+a7zsRb
CgytblOpgZ0AucVee0jGeB6gL/76JnuyiEBOuWKAXFJqak8SA7EH
X-Google-Smtp-Source: ABdhPJxBkI4P1F4vtRiwi4f/h0ZcLQ5s74aiT7YPhwkS+Gj7vb3p3/VVIMypIOAZIilXMq4Vbjfh1cckiL0GksAIRos=
X-Received: by 2002:a05:6638:3e0d:b0:331:b6de:71c9 with SMTP id
co13-20020a0566383e0d00b00331b6de71c9mr18783454jab.180.1655032663100; Sun, 12
Jun 2022 04:17:43 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6e02:158c:0:0:0:0 with HTTP; Sun, 12 Jun 2022 04:17:42
-0700 (PDT)
Reply-To: baileym53@yahoo.com
From: Officer
Date: Sun, 12 Jun 2022 04:17:42 -0700
Message-ID:
Subject: New development
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: root@nk.ca
X-Spam_score: 15.6
X-Spam_score_int: 156
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: ATTENTION : , This is to inform you that you are now going
to receive your fund in their affiliate office in France payment center or,
any other of their affiliate office. hence presently, i have gotten an a
sponso [...]
Content analysis details: (15.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.173 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[jamespeters4011[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[jamespeters4011[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[baileym53[at]yahoo.com]
1.1 HK_SCAM_N3 BODY: No description available.
2.5 MILLION_USD BODY: Talks about millions of dollars
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 HK_SCAM No description available.
1.2 UPPERCASE_75_100 message body is 75-100% uppercase
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 MONEY_BARRISTER Lots of money from a UK lawyer
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.5 XFER_LOTSA_MONEY Transfer a lot of money
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} New development
ATTENTION : ,
This is to inform you that you are now going to receive your fund in
their affiliate office in France payment center or, any other of their
affiliate office. hence presently, i have gotten an a sponsor from
France who is willing to carter for the expenses on your behalf since
you are unable. note, the sponsor will be taking 10% out of the total
sum $40 million USD after your fund must have transferred into your
account.
The conditions mentioned in the payment arrangement are short listed below.
1. YOU WILL HAVE TO TRAVEL TO FRENCH GUIANA FIRST TO MEET WITH THE
SPONSOR FOR THE SIGNING OF YOUR SECURE PAYMENT DOCUMENT AND PRESENT TO
FRANCE PAYMENT CENTER WITH THE GIFT WHERE YOU WILL RECEIVE YOUR FUND
AS THE BENEFICIARY AS SOON AS YOU ARRIVE IN FRANCE OR ANY OTHER OF
THEIR AFFILIATE OFFICE.
2. NO MORE UPFRONT PAYMENT REQUIRED FROM YOU AS THE BENEFICIARY.
3.YOUR FLIGHT TICKETS WILL BE CATERED BY THE SPONSOR.
4. YOUR HOTEL RESERVATION / ACCOMMODATION WILL BE PROVIDED BY THE SPONSOR.
5. YOUR JOURNEY /TRIP TO FRANCE YOUR PAYMENT CENTER WILL NOT TAKE MORE
THAN SIX DAYS TO FINALIZE YOUR PAYMENT.
6. YOUR DUTY IS TO PROVIDE YOUR VALID PASSPORT AND READINESS TO FLY TO
THE PAYING CENTER AT NO EXPENSES FROM YOU AS YOU NEED NO VISA. NOTE,
YOU ARE TRAVELING TO FRENCH GUIANA FIRST TO MEET WITH THE SPONSOR FOR
THE DOCUMENT AND THEN PROCEED TO THEIR AFFILIATE OFFICE IN FRANCE
THEIR PAYMENT CENTER TO MEET WITH THE OFFICIALS FOR THE FINAL RELEASE
OF YOUR FUND.
BE MINDFUL, YOU ARE ALSO TRAVELING TO THE PAYMENT CENTER FRANCE TO
PRESENT ALL YOUR FUNDS SECURE PAYMENT DOCUMENTS THAT BACK UP YOUR
CLAIM AS THE BENEFICIARY. AS SOON AS YOU SIGN ALL THE NECESSARY
DOCUMENTS THAT BACK UP YOUR CLAIM, THE OFFICIALS WILL THEN NOW HAVE
THE FULL OFFICIAL RIGHT TO RELEASE YOUR FUND TO YOU AS THE BENEFICIARY
WITHOUT ANY FURTHER DELAY.
7. SEND YOUR CURRENT AND DIRECT TELEPHONE NUMBER AND YOUR CONTACT ADDRESS.
8. SEND YOUR INTERNATIONAL PASSPORT.
THEREFORE, UPON THE RECEIPT OF YOUR DETAILS, THE INVESTOR WILL SEND
YOUR FLIGHT TICKET TO YOU WITHOUT DELAY. CONGRATULATIONS.
I WILL COME OVER THERE IN YOUR COUNTRY TO MEET WITH YOU FOR MY OWN
PERCENTAGE AS WE HAVE AGREED AFTER YOUR FUND MUST HAVE TRANSFERRED
INTO YOUR ACCOUNT.
THANKS FOR YOUR UNDERSTANDING
BARR. I.M.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments