Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 15 Aug 2022 23:16:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oNovI-000OCi-FQ
for dave@doctor.nl2k.ab.ca;
Mon, 15 Aug 2022 23:15:28 -0600
Resent-From: The Doctor
Resent-Date: Mon, 15 Aug 2022 23:15:28 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wr1-f66.google.com ([209.85.221.66]:40798)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oNmrS-0009dJ-CI
for doctor@nl2k.ab.ca;
Mon, 15 Aug 2022 21:03:27 -0600
Received: by mail-wr1-f66.google.com with SMTP id bu15so2537075wrb.7
for; Mon, 15 Aug 2022 20:03:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=+gETPVq1/31XSt8TCJEtNNAvfeaHtQl6QlHGr7nBtW8=;
b=NuhiXIOLCnSnzXATmxt6ZyCi3jzdcAOxePnsVnfa8Cw70yB1vD+HH6rqU2sCGvGN6V
RU68QPGKaDGGomkJzQK2LvGCRSYzKTaw81v6cVaSNizsPt5CSXffWLZm4/F1otbt0Ze0
118EmlR0myVyqoqafzwLWD1/NG9ayxltnQtP1Ff9QEDMxEXg5xsnBeYsZxj38wYJcVtT
m7Tw1qvz4wc55Sx2u0v+NwfWZp6TSKFY0f5KrGqpNUyNVuNAtgoIC2ssAZT7GSVTpIQY
AlCGa6Rud/KV8OVj8QD/ablFR1Za5C3ixhld/wXI1HTRRwgeGY+NSbwCT/IWIWEfer7o
fvsg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=+gETPVq1/31XSt8TCJEtNNAvfeaHtQl6QlHGr7nBtW8=;
b=eJKJ27aaT0IKFnVraxuNmpYL/AvvY6gVzT0idLO/wgXHyqwPErLHFEEtYIBzuQ4RTS
cmFZWxtyqGnHmVwR4B26a/6yZ1RI9PAEe8+sD+uHoIVbMr0YpStpKZE1y4r9nxfy6OmM
skzGPFs8YHtFZq25swyKc5YAKQzv3OBg7TC7rABQZhJ/LLCAY02AdC0RWKbYHUo7BAJE
rkRyyUxE2OmAdDZTQqcIAkpdtoC5YzSuU7liAZQ0/in+2AzG6xto9/NytTTzHKtgF0nZ
Q0knovfUvh8vUhjeZhgzUFP3P+DG9u0/4jXfLUsvUxqmZZ361XIcXAvpr6tjjmxUWIHe
Bg2g==
X-Gm-Message-State: ACgBeo2101MQZkhC1K4UvEp5Duy4yj9z6RWq8bx1mRcN7WgUGILasg80
elF9RIyFbsJsDcQ+xWTAKXWnvBoQXApBmkq4jmw=
X-Google-Smtp-Source: AA6agR4rOwwEWXXKIugeX1O1yWT/OVp9YQ8UeNWknsUYb8CRcLNnMwS8WBxw2ibrEB9YtZnjVa6zxjGZEpZLLTvCtbk=
X-Received: by 2002:a5d:60d0:0:b0:220:4e23:9934 with SMTP id
x16-20020a5d60d0000000b002204e239934mr10127231wrt.474.1660618975234; Mon, 15
Aug 2022 20:02:55 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6000:1846:0:0:0:0 with HTTP; Mon, 15 Aug 2022 20:02:54
-0700 (PDT)
Reply-To: fotisangelos3@gmail.com
From: "Fotis Angelos (GCP.)"
Date: Tue, 16 Aug 2022 04:02:54 +0100
Message-ID:
Subject: VERY URGENT.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 23.2
X-Spam_score_int: 232
X-Spam_bar: +++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Good day to you. I am Mr. Fotis Angelos and a personal Accountant
Director of National bank of Greece. It is with a good spirit of heart that
I opened up this great opportunity to you. A deceased client of mine that
s [...]
Content analysis details: (23.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.221.66 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[jeangomez385[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[jeangomez385[at]gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[fotisangelos3[at]gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 MILLION_USD BODY: Talks about millions of dollars
2.5 HK_SCAM_N2 BODY: No description available.
0.1 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 HK_SCAM No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 XFER_LOTSA_MONEY Transfer a lot of money
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} VERY URGENT.
Good day to you.
I am Mr. Fotis Angelos and a personal Accountant Director of National
bank of Greece. It is with a good spirit of heart that I opened up
this great opportunity to you. A deceased client of mine that shares
almost the same name as yours died as a result of heart-related
condition on march 2015, He died due to the death of the members of
his family in the plane crash disaster on the 8th of March 2014 in
Malaysia where they all lost their lives. You can read the website
below.
https://www.bbc.com/news/business-59517821
There is a draft account opened in my bank in 1999 by the deceased. He
was a CEO/a textile company owner, business man, a miner at Halkidiki
Peninsula mining company here in Greece. He was a geologist and
consultant to several other mining conglomerates operating in Greece,
China, Taiwan, Japan, Indonesia, Pakistan, Vietnam all in Asia.
Before he passed away on 12th march 2015 he had nobody as the next of
kin to his Bank account.
The amount in this account is currently $19,500,000 (Nineteen Million
Five Hundred Thousand United States Dollars) I want to present you as
his beneficiary/next of kin, I will use my position and influence in
our bank to make them release this money to you for us to share.
Let me know if you are interested in working with me by sending your
full name, Mobile telephone and fax number. As soon as I hear from
you, I will direct you on what to do next.
Best Regards,
Mr. Fotis Angelos.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 15 Aug 2022 23:16:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oNovI-000OCi-FQ
for dave@doctor.nl2k.ab.ca;
Mon, 15 Aug 2022 23:15:28 -0600
Resent-From: The Doctor
Resent-Date: Mon, 15 Aug 2022 23:15:28 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wr1-f66.google.com ([209.85.221.66]:40798)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oNmrS-0009dJ-CI
for doctor@nl2k.ab.ca;
Mon, 15 Aug 2022 21:03:27 -0600
Received: by mail-wr1-f66.google.com with SMTP id bu15so2537075wrb.7
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=+gETPVq1/31XSt8TCJEtNNAvfeaHtQl6QlHGr7nBtW8=;
b=NuhiXIOLCnSnzXATmxt6ZyCi3jzdcAOxePnsVnfa8Cw70yB1vD+HH6rqU2sCGvGN6V
RU68QPGKaDGGomkJzQK2LvGCRSYzKTaw81v6cVaSNizsPt5CSXffWLZm4/F1otbt0Ze0
118EmlR0myVyqoqafzwLWD1/NG9ayxltnQtP1Ff9QEDMxEXg5xsnBeYsZxj38wYJcVtT
m7Tw1qvz4wc55Sx2u0v+NwfWZp6TSKFY0f5KrGqpNUyNVuNAtgoIC2ssAZT7GSVTpIQY
AlCGa6Rud/KV8OVj8QD/ablFR1Za5C3ixhld/wXI1HTRRwgeGY+NSbwCT/IWIWEfer7o
fvsg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=+gETPVq1/31XSt8TCJEtNNAvfeaHtQl6QlHGr7nBtW8=;
b=eJKJ27aaT0IKFnVraxuNmpYL/AvvY6gVzT0idLO/wgXHyqwPErLHFEEtYIBzuQ4RTS
cmFZWxtyqGnHmVwR4B26a/6yZ1RI9PAEe8+sD+uHoIVbMr0YpStpKZE1y4r9nxfy6OmM
skzGPFs8YHtFZq25swyKc5YAKQzv3OBg7TC7rABQZhJ/LLCAY02AdC0RWKbYHUo7BAJE
rkRyyUxE2OmAdDZTQqcIAkpdtoC5YzSuU7liAZQ0/in+2AzG6xto9/NytTTzHKtgF0nZ
Q0knovfUvh8vUhjeZhgzUFP3P+DG9u0/4jXfLUsvUxqmZZ361XIcXAvpr6tjjmxUWIHe
Bg2g==
X-Gm-Message-State: ACgBeo2101MQZkhC1K4UvEp5Duy4yj9z6RWq8bx1mRcN7WgUGILasg80
elF9RIyFbsJsDcQ+xWTAKXWnvBoQXApBmkq4jmw=
X-Google-Smtp-Source: AA6agR4rOwwEWXXKIugeX1O1yWT/OVp9YQ8UeNWknsUYb8CRcLNnMwS8WBxw2ibrEB9YtZnjVa6zxjGZEpZLLTvCtbk=
X-Received: by 2002:a5d:60d0:0:b0:220:4e23:9934 with SMTP id
x16-20020a5d60d0000000b002204e239934mr10127231wrt.474.1660618975234; Mon, 15
Aug 2022 20:02:55 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6000:1846:0:0:0:0 with HTTP; Mon, 15 Aug 2022 20:02:54
-0700 (PDT)
Reply-To: fotisangelos3@gmail.com
From: "Fotis Angelos (GCP.)"
Date: Tue, 16 Aug 2022 04:02:54 +0100
Message-ID:
Subject: VERY URGENT.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 23.2
X-Spam_score_int: 232
X-Spam_bar: +++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Good day to you. I am Mr. Fotis Angelos and a personal Accountant
Director of National bank of Greece. It is with a good spirit of heart that
I opened up this great opportunity to you. A deceased client of mine that
s [...]
Content analysis details: (23.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.221.66 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[jeangomez385[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[jeangomez385[at]gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[fotisangelos3[at]gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 MILLION_USD BODY: Talks about millions of dollars
2.5 HK_SCAM_N2 BODY: No description available.
0.1 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 HK_SCAM No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 XFER_LOTSA_MONEY Transfer a lot of money
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} VERY URGENT.
Good day to you.
I am Mr. Fotis Angelos and a personal Accountant Director of National
bank of Greece. It is with a good spirit of heart that I opened up
this great opportunity to you. A deceased client of mine that shares
almost the same name as yours died as a result of heart-related
condition on march 2015, He died due to the death of the members of
his family in the plane crash disaster on the 8th of March 2014 in
Malaysia where they all lost their lives. You can read the website
below.
https://www.bbc.com/news/business-59517821
There is a draft account opened in my bank in 1999 by the deceased. He
was a CEO/a textile company owner, business man, a miner at Halkidiki
Peninsula mining company here in Greece. He was a geologist and
consultant to several other mining conglomerates operating in Greece,
China, Taiwan, Japan, Indonesia, Pakistan, Vietnam all in Asia.
Before he passed away on 12th march 2015 he had nobody as the next of
kin to his Bank account.
The amount in this account is currently $19,500,000 (Nineteen Million
Five Hundred Thousand United States Dollars) I want to present you as
his beneficiary/next of kin, I will use my position and influence in
our bank to make them release this money to you for us to share.
Let me know if you are interested in working with me by sending your
full name, Mobile telephone and fax number. As soon as I hear from
you, I will direct you on what to do next.
Best Regards,
Mr. Fotis Angelos.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments