Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 10 Aug 2022 19:39:02 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oLx9V-000KS4-Js
for dave@doctor.nl2k.ab.ca;
Wed, 10 Aug 2022 19:38:25 -0600
Resent-From: The Doctor
Resent-Date: Wed, 10 Aug 2022 19:38:25 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f66.google.com ([209.85.218.66]:36572)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oLr9E-000HyW-Q4
for sales@nk.ca;
Wed, 10 Aug 2022 13:13:49 -0600
Received: by mail-ej1-f66.google.com with SMTP id m4so29424627ejr.3
for; Wed, 10 Aug 2022 12:13:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:mime-version:from:to:cc;
bh=T2Bn+lRws5WMTEKzbpmyZih5M9WD+iHYFMKuqowfCxY=;
b=LAmdFtXeVsoeysHFItml2WZGmCoB8J4awtgkU8IEM2HBu3xg6AACmlX8Za9/ju2mus
ZKx8rK/5rCp6+lJgi8S7Er+cFylboC7TaofOI5Xbi4UTqkD69bM2IXlmviP8pBPSxkr4
MgMJfqcnbRnFdJ1e0aehny70/x5y1D3QRIBV+P5eq9XVYoaQetL4OzultU5lR0F73rAC
4qTsOXxaT9U+nN1axC/b2YHpIMGO51dXpTjnCulhy07DjtqmWXzLRU2O1pwfiw5FNYhk
KlFqQ6mZklDhSFtaAwpcBr61DNV0DfulxT5bCWxfwaAbSa1GYsMBmTwekegCGWQqPLUZ
YSMQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc;
bh=T2Bn+lRws5WMTEKzbpmyZih5M9WD+iHYFMKuqowfCxY=;
b=Q1mNatgR0bTTG+3TV34UB2Heqq5aEg058mnOprL9vLSqBduUTiDeOKQghDuOUqqOVc
SvjTWZ2JZq9w4sKp2ueR5b7dfsQFkoNrnFI3VpBsiupnzxVtGCcArmjugtTEmShHdK8T
jt4byV0YxBQpNKNoJ/+kLXR3XpE/4nj933vLaPoZQlcSPGx0QTLd0vcQfJwgiFixFBv5
HuBFe6yIfgyGyZwTqNQZ11XJlxNiYxee5rYqgoJg+jGTGSc3dYws+i3Vu+z4gVE7/lKd
v9hwTQpXK7VkJPHTYPal7E/DGj+ldI08yn+j54VmXWfia53utZ4IbWYOBlGUkLyViOg/
RjDw==
X-Gm-Message-State: ACgBeo2odexUqoaCpYB5gygqwraRFSvuV7fdDfpIKrCGH8KRFz8il9BU
dz7QXLnn+oGtXkE7jsZ9i362x7QSmEnFEJfkzoA=
X-Google-Smtp-Source: AA6agR5UTYqpIeUNFXysVQfkTiyvadQZx2s7/6FefcFmHmALVDdzIXAcr5RlOomKOo3d/uykGO9JSZRXeSo6RlI51vY=
X-Received: by 2002:a17:907:9726:b0:730:9e04:f738 with SMTP id
jg38-20020a170907972600b007309e04f738mr21320992ejc.631.1660158796477; Wed, 10
Aug 2022 12:13:16 -0700 (PDT)
MIME-Version: 1.0
From: Andrew McHattie
Date: Wed, 10 Aug 2022 20:13:01 +0100
Message-ID:
Subject: LETTER
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000055b9e105e5e7d789"
Bcc: sales@nk.ca
X-Spam_score: 12.5
X-Spam_score_int: 125
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: My name is Andrew McHattie, A Management Accountant and an
External Auditor for financial institutes. I currently work with a team of
external auditors who were retained after the outbreak of covid-19 [...]
Content analysis details: (12.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.66 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[legueluc76[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[legueluc76[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 MILLION_USD BODY: Talks about millions of dollars
2.7 UNCLAIMED_MONEY BODY: People just leave money laying around
0.1 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 XFER_LOTSA_MONEY Transfer a lot of money
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} LETTER
--00000000000055b9e105e5e7d789
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
My name is Andrew McHattie, A Management Accountant and an External Auditor
for financial institutes. I currently work with a team of external auditors
who were retained after the outbreak of covid-19 pandemic to audit
financial activities.
In the course of a routine audit of our books last quarter, I discovered
some investment accounts that have been dormant for one year now. Most of
the accounts belong to a single beneficiary who died during the covid-19
pandemic. (Four million five hundred thousand united states dollars)in the
intent of the deceased depositor who died intestate and as such, no
next-of-kin has come forward all these Months to lay claim to the
investment.( Names now withheld for security reasons ) Since this is our
second letter to you.
I contacted you because you bear the same last name with the deceased
expatriate investor/depositor who died as a result if covid-19 and
therefore I can present you as the beneficiary to the inheritance since
there is no written will from our late investor. My service's aim is to
provide you with a complete service as I'm prepared to provide you with all
the documents required by the holding Bank to enable them to release these
inheritance funds to you . we can secure the funds in this bank account for
ourselves instead of allowing it to be transmitted as =E2=80=9Cunclaimed fu=
nds=E2=80=9D
into the Treasury of the Government.
All the papers required will be processed in your acceptance of this deal
as we are prepared to offer you 40%,50% for me, while 10% should be given
to any orphanage Home/Hospitals/clinics to support the needy worldwide.
I request that you kindly respond to me with acceptance:
Your prompt response is highly imperative.
Andrew McHattie
--00000000000055b9e105e5e7d789
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--00000000000055b9e105e5e7d789--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 10 Aug 2022 19:39:02 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oLx9V-000KS4-Js
for dave@doctor.nl2k.ab.ca;
Wed, 10 Aug 2022 19:38:25 -0600
Resent-From: The Doctor
Resent-Date: Wed, 10 Aug 2022 19:38:25 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f66.google.com ([209.85.218.66]:36572)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oLr9E-000HyW-Q4
for sales@nk.ca;
Wed, 10 Aug 2022 13:13:49 -0600
Received: by mail-ej1-f66.google.com with SMTP id m4so29424627ejr.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:mime-version:from:to:cc;
bh=T2Bn+lRws5WMTEKzbpmyZih5M9WD+iHYFMKuqowfCxY=;
b=LAmdFtXeVsoeysHFItml2WZGmCoB8J4awtgkU8IEM2HBu3xg6AACmlX8Za9/ju2mus
ZKx8rK/5rCp6+lJgi8S7Er+cFylboC7TaofOI5Xbi4UTqkD69bM2IXlmviP8pBPSxkr4
MgMJfqcnbRnFdJ1e0aehny70/x5y1D3QRIBV+P5eq9XVYoaQetL4OzultU5lR0F73rAC
4qTsOXxaT9U+nN1axC/b2YHpIMGO51dXpTjnCulhy07DjtqmWXzLRU2O1pwfiw5FNYhk
KlFqQ6mZklDhSFtaAwpcBr61DNV0DfulxT5bCWxfwaAbSa1GYsMBmTwekegCGWQqPLUZ
YSMQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc;
bh=T2Bn+lRws5WMTEKzbpmyZih5M9WD+iHYFMKuqowfCxY=;
b=Q1mNatgR0bTTG+3TV34UB2Heqq5aEg058mnOprL9vLSqBduUTiDeOKQghDuOUqqOVc
SvjTWZ2JZq9w4sKp2ueR5b7dfsQFkoNrnFI3VpBsiupnzxVtGCcArmjugtTEmShHdK8T
jt4byV0YxBQpNKNoJ/+kLXR3XpE/4nj933vLaPoZQlcSPGx0QTLd0vcQfJwgiFixFBv5
HuBFe6yIfgyGyZwTqNQZ11XJlxNiYxee5rYqgoJg+jGTGSc3dYws+i3Vu+z4gVE7/lKd
v9hwTQpXK7VkJPHTYPal7E/DGj+ldI08yn+j54VmXWfia53utZ4IbWYOBlGUkLyViOg/
RjDw==
X-Gm-Message-State: ACgBeo2odexUqoaCpYB5gygqwraRFSvuV7fdDfpIKrCGH8KRFz8il9BU
dz7QXLnn+oGtXkE7jsZ9i362x7QSmEnFEJfkzoA=
X-Google-Smtp-Source: AA6agR5UTYqpIeUNFXysVQfkTiyvadQZx2s7/6FefcFmHmALVDdzIXAcr5RlOomKOo3d/uykGO9JSZRXeSo6RlI51vY=
X-Received: by 2002:a17:907:9726:b0:730:9e04:f738 with SMTP id
jg38-20020a170907972600b007309e04f738mr21320992ejc.631.1660158796477; Wed, 10
Aug 2022 12:13:16 -0700 (PDT)
MIME-Version: 1.0
From: Andrew McHattie
Date: Wed, 10 Aug 2022 20:13:01 +0100
Message-ID:
Subject: LETTER
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000055b9e105e5e7d789"
Bcc: sales@nk.ca
X-Spam_score: 12.5
X-Spam_score_int: 125
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: My name is Andrew McHattie, A Management Accountant and an
External Auditor for financial institutes. I currently work with a team of
external auditors who were retained after the outbreak of covid-19 [...]
Content analysis details: (12.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.66 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[legueluc76[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[legueluc76[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 MILLION_USD BODY: Talks about millions of dollars
2.7 UNCLAIMED_MONEY BODY: People just leave money laying around
0.1 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 XFER_LOTSA_MONEY Transfer a lot of money
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} LETTER
--00000000000055b9e105e5e7d789
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
My name is Andrew McHattie, A Management Accountant and an External Auditor
for financial institutes. I currently work with a team of external auditors
who were retained after the outbreak of covid-19 pandemic to audit
financial activities.
In the course of a routine audit of our books last quarter, I discovered
some investment accounts that have been dormant for one year now. Most of
the accounts belong to a single beneficiary who died during the covid-19
pandemic. (Four million five hundred thousand united states dollars)in the
intent of the deceased depositor who died intestate and as such, no
next-of-kin has come forward all these Months to lay claim to the
investment.( Names now withheld for security reasons ) Since this is our
second letter to you.
I contacted you because you bear the same last name with the deceased
expatriate investor/depositor who died as a result if covid-19 and
therefore I can present you as the beneficiary to the inheritance since
there is no written will from our late investor. My service's aim is to
provide you with a complete service as I'm prepared to provide you with all
the documents required by the holding Bank to enable them to release these
inheritance funds to you . we can secure the funds in this bank account for
ourselves instead of allowing it to be transmitted as =E2=80=9Cunclaimed fu=
nds=E2=80=9D
into the Treasury of the Government.
All the papers required will be processed in your acceptance of this deal
as we are prepared to offer you 40%,50% for me, while 10% should be given
to any orphanage Home/Hospitals/clinics to support the needy worldwide.
I request that you kindly respond to me with acceptance:
Your prompt response is highly imperative.
Andrew McHattie
--00000000000055b9e105e5e7d789
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
My name is Andrew McHattie, A Management Accountant and an=
External Auditor for financial institutes. I currently work with a team of=
external auditors who were retained after the outbreak of covid-19 pandemi=
c to audit financial activities.
In the course of a routine audit of=
our books last quarter, I discovered some investment accounts that have be=
en dormant for one year now. Most of the accounts belong to a single benefi=
ciary who died during the covid-19 pandemic. (Four million five hundred tho=
usand united states dollars)in the intent of the deceased depositor who die=
d intestate and as such, no next-of-kin has come forward all these Months t=
o lay claim to the investment.( Names now withheld for security reasons ) S=
ince this is our second letter to you.
I contacted you because you b=
ear the same last name with the deceased expatriate investor/depositor who =
died as a result if covid-19 and therefore I can present you as the benefic=
iary to the inheritance since there is no written will from our late invest=
or. My service's aim is to provide you with a complete service as I'=
;m prepared to provide you with all the documents required by the holding B=
ank to enable them to release these inheritance funds to you . we can secur=
e the funds in this bank account for ourselves instead of allowing it to be=
transmitted as =E2=80=9Cunclaimed funds=E2=80=9D into the Treasury of the =
Government.
All the papers required will be processed in your accept=
ance of this deal as we are prepared to offer you 40%,50% for me, while 10%=
should be given to any orphanage Home/Hospitals/clinics to support the nee=
dy worldwide.
I request that you kindly respond to me with acceptanc=
e:
Your prompt response is highly imperative.
Andrew McHa=
ttie
External Auditor for financial institutes. I currently work with a team of=
external auditors who were retained after the outbreak of covid-19 pandemi=
c to audit financial activities.
In the course of a routine audit of=
our books last quarter, I discovered some investment accounts that have be=
en dormant for one year now. Most of the accounts belong to a single benefi=
ciary who died during the covid-19 pandemic. (Four million five hundred tho=
usand united states dollars)in the intent of the deceased depositor who die=
d intestate and as such, no next-of-kin has come forward all these Months t=
o lay claim to the investment.( Names now withheld for security reasons ) S=
ince this is our second letter to you.
I contacted you because you b=
ear the same last name with the deceased expatriate investor/depositor who =
died as a result if covid-19 and therefore I can present you as the benefic=
iary to the inheritance since there is no written will from our late invest=
or. My service's aim is to provide you with a complete service as I'=
;m prepared to provide you with all the documents required by the holding B=
ank to enable them to release these inheritance funds to you . we can secur=
e the funds in this bank account for ourselves instead of allowing it to be=
transmitted as =E2=80=9Cunclaimed funds=E2=80=9D into the Treasury of the =
Government.
All the papers required will be processed in your accept=
ance of this deal as we are prepared to offer you 40%,50% for me, while 10%=
should be given to any orphanage Home/Hospitals/clinics to support the nee=
dy worldwide.
I request that you kindly respond to me with acceptanc=
e:
Your prompt response is highly imperative.
Andrew McHa=
ttie
--00000000000055b9e105e5e7d789--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments