Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 24 Sep 2022 14:34:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1ocBq9-0004fP-85
for dave@doctor.nl2k.ab.ca;
Sat, 24 Sep 2022 14:33:33 -0600
Resent-From: The Doctor
Resent-Date: Sat, 24 Sep 2022 14:33:33 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f169.google.com ([209.85.210.169]:37726)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oc6q9-00064J-8A
for root@nk.ca;
Sat, 24 Sep 2022 09:13:17 -0600
Received: by mail-pf1-f169.google.com with SMTP id a80so2752928pfa.4
for; Sat, 24 Sep 2022 08:12:55 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=k7DS2vqBGrflhmFkJ+W4P2gKdUgAf8M2WNJh73mCgP0=;
b=V4yz4E5X+GHaArxZ/ElmTA6K75Z67yAt9N0jVds5qDv+TOKAikqkAuVIFeqV+Zi8IH
rHQYh+MO2FCp61FDJUsM7fA7IijZJBzbpug0BxetU46SinC0SxoL65WSwS8KOE1juw7I
Idd1JGSFLZPZa1rG+o82Gvg5KYB9Cv98Ei3vzGQiCHwwyhuCtRNWFk/UTGP0GpKWya+c
RlC8cIdO3OZC6aU5oW5Z7lvR3N0WEH+xfJ3TGPz322oOw5iMTgbpoZWixeUdcPoDuNwk
6aUdOrKyS2REJJWz+xaUJ86c8emBBAZe7M5WMcZ4k9F22oHHUs1Ix2a9QGpIMP2PYgiH
Bt4A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=k7DS2vqBGrflhmFkJ+W4P2gKdUgAf8M2WNJh73mCgP0=;
b=DCjA4j6wBcRlJwepiZE2RPKaw1x+QhIWGx0f2ODo4WCEJQsgNJ5RbKuhHE/R6G93Vc
kHf1523u5VBoZ6VnycVQcZAHlJTisFfTFgQiNw5Qo1dzKnWxOgVqVqn7VNdbpEQns2tl
x1uGWr6VoOywSZPEVI+p8SHdnHwdMHTgNKpAvhYEYbSuZpyMTESNgJVGaOszLK9heh2q
b78UjAbudpr8wjBnyuqJMcgc/l3Rtg/FxY8ex2bTKOxROAu8uv8JHfzr9mFBSc2sMaC6
uyDJkYlMJDzvNdaCX9bUz6w9cWUNt/SrkY3p14Ft2V3I3b4KiXqkoSWeNKvWIDSA5SYf
wbhA==
X-Gm-Message-State: ACrzQf3crPqeSyYo3xmvYVs85F2JWPIFEc2MUm7L/3bo/t3b7R9wpC2e
6ItyKFwfdF8LGKVyDgGX5IRCB9V3HDgMLQymZmI=
X-Google-Smtp-Source: AMsMyM7z2SKsnXcL8pMXlSkeiihyypnZUatZ5Jx0fHeLveoCwQr7v2RsmXth1qkhEfyeDhaSjejTfGe8jXmQ0wSOkB4=
X-Received: by 2002:a62:1d56:0:b0:557:8233:7442 with SMTP id
d83-20020a621d56000000b0055782337442mr6027568pfd.33.1664032370039; Sat, 24
Sep 2022 08:12:50 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a17:902:eccd:b0:178:3217:e47e with HTTP; Sat, 24 Sep 2022
08:12:49 -0700 (PDT)
Reply-To: JennehKandeh@yahoo.com
From: Jenneh Kandeh
Date: Sat, 24 Sep 2022 16:12:49 +0100
Message-ID:
Subject: Re: Regarding Of My Late Father's Fund $10,200,000
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: root@nk.ca
X-Spam_score: 18.1
X-Spam_score_int: 181
X-Spam_bar: ++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: dear, I got your contact through the internet - due to serious
searching for a reliable personality. I am Jenneh Kandeh birth date May/23rd/1994
in Free Town Capital of Sierra Leone. l am a nephew to Foday Sankoh, the
rebel leader of Sierra Leone, opposed to the government of President Ahmad
Tejan Kebbah the ex-leader. I have been on exile in the Benin - Porto- Novo.
But l am curr [...]
Content analysis details: (18.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[herryjohn451[at]gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.169 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[herryjohn451[at]gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Re: Regarding Of My Late Father's Fund $10,200,000
dear,
I got your contact through the internet - due to serious searching for
a reliable personality. I am Jenneh Kandeh birth date May/23rd/1994 in
Free Town Capital of Sierra Leone.
l am a nephew to Foday Sankoh, the rebel leader of Sierra Leone,
opposed to the government of President Ahmad Tejan Kebbah the
ex-leader. I have been on exile in the Benin - Porto- Novo. But l am
current residing in PORTO-NOVO BENIN due to war of my country, my
mother killed on 04/01/2002 for Sierre Leone civilian war my father
decided to change another residence country with me because I am only
child for my family bad news that my father pass away last year on
25/11/2018.
During the war, My father made a lot of money through the sales of
Diamonds. To the tune of $10,200,000 (Ten Million Two Hundered United
States Dollars). This money is currently and secretly kept in a ECOWAS
security company here in Kampala Uganda, but because of the political
turmoil which still exists in this africa, I can not invest the money
myself, hence am soliciting your help me take these funds into your
custody and also advise me on how to invest it.
And I want to add here that if agreed 30% of the total worth of the
fund will be yours minus your total expenses incurred during the
clearing of the fund in Kampala Uganda that 30% is a $3,060,000 (Three
Million Sixty Thousand United State Dollars) is yours out of the fund
after we confirmed the fund there.
While l wait to hear from you soon, my warm regards to you and your family.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 24 Sep 2022 14:34:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1ocBq9-0004fP-85
for dave@doctor.nl2k.ab.ca;
Sat, 24 Sep 2022 14:33:33 -0600
Resent-From: The Doctor
Resent-Date: Sat, 24 Sep 2022 14:33:33 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f169.google.com ([209.85.210.169]:37726)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oc6q9-00064J-8A
for root@nk.ca;
Sat, 24 Sep 2022 09:13:17 -0600
Received: by mail-pf1-f169.google.com with SMTP id a80so2752928pfa.4
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=k7DS2vqBGrflhmFkJ+W4P2gKdUgAf8M2WNJh73mCgP0=;
b=V4yz4E5X+GHaArxZ/ElmTA6K75Z67yAt9N0jVds5qDv+TOKAikqkAuVIFeqV+Zi8IH
rHQYh+MO2FCp61FDJUsM7fA7IijZJBzbpug0BxetU46SinC0SxoL65WSwS8KOE1juw7I
Idd1JGSFLZPZa1rG+o82Gvg5KYB9Cv98Ei3vzGQiCHwwyhuCtRNWFk/UTGP0GpKWya+c
RlC8cIdO3OZC6aU5oW5Z7lvR3N0WEH+xfJ3TGPz322oOw5iMTgbpoZWixeUdcPoDuNwk
6aUdOrKyS2REJJWz+xaUJ86c8emBBAZe7M5WMcZ4k9F22oHHUs1Ix2a9QGpIMP2PYgiH
Bt4A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=k7DS2vqBGrflhmFkJ+W4P2gKdUgAf8M2WNJh73mCgP0=;
b=DCjA4j6wBcRlJwepiZE2RPKaw1x+QhIWGx0f2ODo4WCEJQsgNJ5RbKuhHE/R6G93Vc
kHf1523u5VBoZ6VnycVQcZAHlJTisFfTFgQiNw5Qo1dzKnWxOgVqVqn7VNdbpEQns2tl
x1uGWr6VoOywSZPEVI+p8SHdnHwdMHTgNKpAvhYEYbSuZpyMTESNgJVGaOszLK9heh2q
b78UjAbudpr8wjBnyuqJMcgc/l3Rtg/FxY8ex2bTKOxROAu8uv8JHfzr9mFBSc2sMaC6
uyDJkYlMJDzvNdaCX9bUz6w9cWUNt/SrkY3p14Ft2V3I3b4KiXqkoSWeNKvWIDSA5SYf
wbhA==
X-Gm-Message-State: ACrzQf3crPqeSyYo3xmvYVs85F2JWPIFEc2MUm7L/3bo/t3b7R9wpC2e
6ItyKFwfdF8LGKVyDgGX5IRCB9V3HDgMLQymZmI=
X-Google-Smtp-Source: AMsMyM7z2SKsnXcL8pMXlSkeiihyypnZUatZ5Jx0fHeLveoCwQr7v2RsmXth1qkhEfyeDhaSjejTfGe8jXmQ0wSOkB4=
X-Received: by 2002:a62:1d56:0:b0:557:8233:7442 with SMTP id
d83-20020a621d56000000b0055782337442mr6027568pfd.33.1664032370039; Sat, 24
Sep 2022 08:12:50 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a17:902:eccd:b0:178:3217:e47e with HTTP; Sat, 24 Sep 2022
08:12:49 -0700 (PDT)
Reply-To: JennehKandeh@yahoo.com
From: Jenneh Kandeh
Date: Sat, 24 Sep 2022 16:12:49 +0100
Message-ID:
Subject: Re: Regarding Of My Late Father's Fund $10,200,000
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: root@nk.ca
X-Spam_score: 18.1
X-Spam_score_int: 181
X-Spam_bar: ++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: dear, I got your contact through the internet - due to serious
searching for a reliable personality. I am Jenneh Kandeh birth date May/23rd/1994
in Free Town Capital of Sierra Leone. l am a nephew to Foday Sankoh, the
rebel leader of Sierra Leone, opposed to the government of President Ahmad
Tejan Kebbah the ex-leader. I have been on exile in the Benin - Porto- Novo.
But l am curr [...]
Content analysis details: (18.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[herryjohn451[at]gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.169 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[herryjohn451[at]gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Re: Regarding Of My Late Father's Fund $10,200,000
dear,
I got your contact through the internet - due to serious searching for
a reliable personality. I am Jenneh Kandeh birth date May/23rd/1994 in
Free Town Capital of Sierra Leone.
l am a nephew to Foday Sankoh, the rebel leader of Sierra Leone,
opposed to the government of President Ahmad Tejan Kebbah the
ex-leader. I have been on exile in the Benin - Porto- Novo. But l am
current residing in PORTO-NOVO BENIN due to war of my country, my
mother killed on 04/01/2002 for Sierre Leone civilian war my father
decided to change another residence country with me because I am only
child for my family bad news that my father pass away last year on
25/11/2018.
During the war, My father made a lot of money through the sales of
Diamonds. To the tune of $10,200,000 (Ten Million Two Hundered United
States Dollars). This money is currently and secretly kept in a ECOWAS
security company here in Kampala Uganda, but because of the political
turmoil which still exists in this africa, I can not invest the money
myself, hence am soliciting your help me take these funds into your
custody and also advise me on how to invest it.
And I want to add here that if agreed 30% of the total worth of the
fund will be yours minus your total expenses incurred during the
clearing of the fund in Kampala Uganda that 30% is a $3,060,000 (Three
Million Sixty Thousand United State Dollars) is yours out of the fund
after we confirmed the fund there.
While l wait to hear from you soon, my warm regards to you and your family.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments