Nigerian Spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 03 Aug 2022 12:00:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oJIeA-000NOG-8z
for dave@doctor.nl2k.ab.ca;
Wed, 03 Aug 2022 11:59:06 -0600
Resent-From: The Doctor
Resent-Date: Wed, 3 Aug 2022 11:59:06 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ot1-f47.google.com ([209.85.210.47]:36745)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oJHlq-000JE4-Of
for doctor@doctor.nl2k.ab.ca;
Wed, 03 Aug 2022 11:03:02 -0600
Received: by mail-ot1-f47.google.com with SMTP id a14-20020a0568300b8e00b0061c4e3eb52aso12580531otv.3
for; Wed, 03 Aug 2022 10:02:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=OxN5lU8bV5Ycff3Uu4lalGCuqQ+mqfRV3stoOTwN4YY=;
b=YGlJkj8lxSY4KvbZBX2TBbTKyITRyt5iVQketgf2zpPXl0Yo99AyC9yh/0kH15Sftw
T7NqHe5Utiga9c+HtXuCuk4GKazVjsCiYuO7APwZO5vb7tfBuXekxtImwUQ/RYlUW3Oo
BCparqg+EUeX5YFtEyzr7j61OLzKTXV06ef8MPGqFS/6XMiS1ZMMziwpOv7xSCf+Dmgh
iOvIagzA/EBiiNhXCfxASw0x2JHyWriu59QL69BnX2g/XfIj9+czAloR2aT1F7SLlO7k
5fMqoaOx5kNFPVTOBWsbjfU1TCGiVpKlcWtph03IJF6JFqo9LJohYKOarSUUiQ0SGkeu
etrA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=OxN5lU8bV5Ycff3Uu4lalGCuqQ+mqfRV3stoOTwN4YY=;
b=PY9MTFLFfrqzUF864/sZoAqkLnsJT49Ov0U8QfUZdrYaUtgHgg/35qa9x2/aGebVYD
BMBlfhftYKviM2twall2dwub6NYBXqpn7Y/KE2+Hzk1vJtlcdMNjTKvPxgQZ3Uy5yrcE
ewpERC5gjBn4+dYVYNS8uRNzz6KkX7OTTFpbSpG7dCx0pkTjw9Ac/ra4vLcMBZ4f/nTL
rRU2H7zjbm9sVOWIDnPnwJmywgIMJz9AxT5ysnVwY5XPSPq7UVxkrkIJy5Il7C9PrFTa
qM5FGIzMHP4eTKMo2RtXUSWxFZL6sv5apxC2+/nM4zqTypWOMOzeNIm6Kv38xLpMfXL1
5OXg==
X-Gm-Message-State: AJIora+RiaR+EjWPm2nqE+S8qz01MAGGZNzJHn1N9IrTLT8lnEyflh1o
v0q/fvdv1B5/Y5dRjTvfX8Z16hj8hyorwBdWcug=
X-Google-Smtp-Source: AGRyM1tmFcKj6s1BP5lQaJoYnmC3xtcIdxhyMVnbV8c7hqoR1s65S0G0EzpYh93dX4ycMfeVzTZ9rbZkvxhiDp+K2Gc=
X-Received: by 2002:a05:6830:1f49:b0:61c:9e6b:a73a with SMTP id
u9-20020a0568301f4900b0061c9e6ba73amr9238160oth.105.1659546151269; Wed, 03
Aug 2022 10:02:31 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:ac9:4914:0:0:0:0:0 with HTTP; Wed, 3 Aug 2022 10:02:30 -0700 (PDT)
Reply-To: mk4360957@gmail.com
From: "Mr.Emmanuel Kwame."
Date: Wed, 3 Aug 2022 05:02:30 -1200
Message-ID:
Subject: business proposal,
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 14.8
X-Spam_score_int: 148
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- business proposal, My name is Mr.Emmanuel Kwame, I am a
newly promoted Branch Manager of a Bank here in Ghana, West
Content analysis details: (14.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.47 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mk4360957[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[kwameemma523[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[kwameemma523[at]gmail.com]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 T_MONEY_PERCENT X% of a lot of money for you
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} business proposal,
--
business proposal,
My name is Mr.Emmanuel Kwame, I am a newly promoted Branch Manager of
a Bank here in Ghana, West
Africa, I got your information during my search through the Internet.
It may interest you to hear that I am a man of PEACE and don't want
problems, I only hope we can
assist each other. If you don't want this business offer kindly forget
it, as I will not contact you
again.
I have packaged a financial transaction that will benefit both of us,
as the Branch Manager of the
Bank, it is my duty to send in a Financial Report to my head office in
the capital city Accra at the
end of each year.
In the course of the last year 2021 end of the year report, I
discovered that my branch in which I am
the Manager made excess profit of [US$12.5 Million dollars] which my
head office are not aware of and
will never be aware of. I have since placed this fund in a SUNDRY ACCOUNT.
As an officer of the bank I cannot be directly linked to this money,
so this informed my contacting
you for us to work together so that you can assist me and receive this
fund into your bank account in
your country for us to SHARE.
I am offering you 40% of the total fund, while you keep 60% for me in
your bank account till I join
you in your country for the sharing/investment of my own share of the
funds or better still we can go
into a joint partnership venture, I will appreciate it very much.
As soon as I receive your response I will give you more details on how
we can achieve it
successfully.
Sincerely,
Mr.Emmanuel Kwame.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 03 Aug 2022 12:00:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oJIeA-000NOG-8z
for dave@doctor.nl2k.ab.ca;
Wed, 03 Aug 2022 11:59:06 -0600
Resent-From: The Doctor
Resent-Date: Wed, 3 Aug 2022 11:59:06 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ot1-f47.google.com ([209.85.210.47]:36745)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oJHlq-000JE4-Of
for doctor@doctor.nl2k.ab.ca;
Wed, 03 Aug 2022 11:03:02 -0600
Received: by mail-ot1-f47.google.com with SMTP id a14-20020a0568300b8e00b0061c4e3eb52aso12580531otv.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=OxN5lU8bV5Ycff3Uu4lalGCuqQ+mqfRV3stoOTwN4YY=;
b=YGlJkj8lxSY4KvbZBX2TBbTKyITRyt5iVQketgf2zpPXl0Yo99AyC9yh/0kH15Sftw
T7NqHe5Utiga9c+HtXuCuk4GKazVjsCiYuO7APwZO5vb7tfBuXekxtImwUQ/RYlUW3Oo
BCparqg+EUeX5YFtEyzr7j61OLzKTXV06ef8MPGqFS/6XMiS1ZMMziwpOv7xSCf+Dmgh
iOvIagzA/EBiiNhXCfxASw0x2JHyWriu59QL69BnX2g/XfIj9+czAloR2aT1F7SLlO7k
5fMqoaOx5kNFPVTOBWsbjfU1TCGiVpKlcWtph03IJF6JFqo9LJohYKOarSUUiQ0SGkeu
etrA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=OxN5lU8bV5Ycff3Uu4lalGCuqQ+mqfRV3stoOTwN4YY=;
b=PY9MTFLFfrqzUF864/sZoAqkLnsJT49Ov0U8QfUZdrYaUtgHgg/35qa9x2/aGebVYD
BMBlfhftYKviM2twall2dwub6NYBXqpn7Y/KE2+Hzk1vJtlcdMNjTKvPxgQZ3Uy5yrcE
ewpERC5gjBn4+dYVYNS8uRNzz6KkX7OTTFpbSpG7dCx0pkTjw9Ac/ra4vLcMBZ4f/nTL
rRU2H7zjbm9sVOWIDnPnwJmywgIMJz9AxT5ysnVwY5XPSPq7UVxkrkIJy5Il7C9PrFTa
qM5FGIzMHP4eTKMo2RtXUSWxFZL6sv5apxC2+/nM4zqTypWOMOzeNIm6Kv38xLpMfXL1
5OXg==
X-Gm-Message-State: AJIora+RiaR+EjWPm2nqE+S8qz01MAGGZNzJHn1N9IrTLT8lnEyflh1o
v0q/fvdv1B5/Y5dRjTvfX8Z16hj8hyorwBdWcug=
X-Google-Smtp-Source: AGRyM1tmFcKj6s1BP5lQaJoYnmC3xtcIdxhyMVnbV8c7hqoR1s65S0G0EzpYh93dX4ycMfeVzTZ9rbZkvxhiDp+K2Gc=
X-Received: by 2002:a05:6830:1f49:b0:61c:9e6b:a73a with SMTP id
u9-20020a0568301f4900b0061c9e6ba73amr9238160oth.105.1659546151269; Wed, 03
Aug 2022 10:02:31 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:ac9:4914:0:0:0:0:0 with HTTP; Wed, 3 Aug 2022 10:02:30 -0700 (PDT)
Reply-To: mk4360957@gmail.com
From: "Mr.Emmanuel Kwame."
Date: Wed, 3 Aug 2022 05:02:30 -1200
Message-ID:
Subject: business proposal,
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 14.8
X-Spam_score_int: 148
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- business proposal, My name is Mr.Emmanuel Kwame, I am a
newly promoted Branch Manager of a Bank here in Ghana, West
Content analysis details: (14.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.47 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mk4360957[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[kwameemma523[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[kwameemma523[at]gmail.com]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 T_MONEY_PERCENT X% of a lot of money for you
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} business proposal,
--
business proposal,
My name is Mr.Emmanuel Kwame, I am a newly promoted Branch Manager of
a Bank here in Ghana, West
Africa, I got your information during my search through the Internet.
It may interest you to hear that I am a man of PEACE and don't want
problems, I only hope we can
assist each other. If you don't want this business offer kindly forget
it, as I will not contact you
again.
I have packaged a financial transaction that will benefit both of us,
as the Branch Manager of the
Bank, it is my duty to send in a Financial Report to my head office in
the capital city Accra at the
end of each year.
In the course of the last year 2021 end of the year report, I
discovered that my branch in which I am
the Manager made excess profit of [US$12.5 Million dollars] which my
head office are not aware of and
will never be aware of. I have since placed this fund in a SUNDRY ACCOUNT.
As an officer of the bank I cannot be directly linked to this money,
so this informed my contacting
you for us to work together so that you can assist me and receive this
fund into your bank account in
your country for us to SHARE.
I am offering you 40% of the total fund, while you keep 60% for me in
your bank account till I join
you in your country for the sharing/investment of my own share of the
funds or better still we can go
into a joint partnership venture, I will appreciate it very much.
As soon as I receive your response I will give you more details on how
we can achieve it
successfully.
Sincerely,
Mr.Emmanuel Kwame.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments