Nigerian gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 13 Oct 2022 16:21:08 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oj6Z2-000PHL-Sd
for dave@doctor.nl2k.ab.ca;
Thu, 13 Oct 2022 16:20:28 -0600
Resent-From: The Doctor
Resent-Date: Thu, 13 Oct 2022 16:20:28 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-il1-f171.google.com ([209.85.166.171]:39602)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oj2MY-000LFN-1G
for root@nk.ca;
Thu, 13 Oct 2022 11:51:22 -0600
Received: by mail-il1-f171.google.com with SMTP id u2so1347701ilv.6
for; Thu, 13 Oct 2022 10:48:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=I+eVlGTYOSzfSfe/rihU4KdqgQWx11BWqNZWrSj0rBM=;
b=bApAv+6Tr7ip3wwHSM4kJgcB1IY5kkOK5dzRvOcJ4gGyiQOFsRW/qZQPJNYd2SO/7c
Z7tsEPgRon/s6NALDMZ5/c/Yw+dgkehmP2zrQWktrK3Qcy00RxMHDUfU5ih9cYGMXaDD
kIkSBA7rukB5x/LqdRcmCNYpCjhIUbkHJBGwWPvLl41vhagezplKl3tLb3tyb6HZwoes
s6ZFkONu3H8s5wtC86r/Ef4pKJWxVVyrdrTo8V3eQSVuoF1idqwy7YjGhhdwSZJvEP6q
I2FsNPs5idLR109KmlJUBqzilLfet5k9QxFca8T2ag+2UdK7MqysdMN/RB4K9vyCBdLi
8ZaA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=I+eVlGTYOSzfSfe/rihU4KdqgQWx11BWqNZWrSj0rBM=;
b=e286cvWxTAlX8nTYpsLMiaUzx89aDeyg3nUIXF1zq9UIcyBSqQcxq0JxLB80sf+gPW
yZIUKV1MhZ2q+U5gJGtZXshJO1beTME7YhdcsiiOUsogVKC4n/91dE/HIns3Z2gPEbau
uOdc2k2cL8xG6hfatcq5nj8l+GmTreJ+NUmka3RNG4H59w64Ri4R0IDDavfv9WvPiehZ
x7Pb/CWgsk6QhlQwFnAR6K/K5sgU3nAyInvT9Mvp8aXg+m+75LVd9dEspZKhA+79W4Ah
ZmobLg8JyFK56S+kR9QvjjGqZNTzcD6t/RJB1h5jx3UChIAeS/K0pJYrWaop66xqS0Kq
/SSg==
X-Gm-Message-State: ACrzQf0m3XTy8v2E1qEaOUxuAo7qn9A/DKG8a5BQ21NlBVaNys0mbGuh
p9zWi7bIsCSajQ5wBaqpG8Z9uiZ828a8HHyKEoHyUAJJkZa/9oyB
X-Google-Smtp-Source: AMsMyM75cJp0XsQRQVh7qAe+hECWy1r/exBPHnwZwGzhVmOCvPTFcrPGWid2aEIDZmTbpTSoCyUKxVT/vbF1U0wd/1w=
X-Received: by 2002:a63:1e47:0:b0:43c:261f:f773 with SMTP id
p7-20020a631e47000000b0043c261ff773mr907903pgm.1.1665683298094; Thu, 13 Oct
2022 10:48:18 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a17:902:eccd:b0:178:3217:e47e with HTTP; Thu, 13 Oct 2022
10:48:17 -0700 (PDT)
Reply-To: JennehKandeh@yahoo.com
From: Jenneh Kandeh
Date: Thu, 13 Oct 2022 18:48:17 +0100
Message-ID:
Subject: Regarding Of My Late Father's Fund $10,200,000,,
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: root@nk.ca
X-Spam_score: 18.6
X-Spam_score_int: 186
X-Spam_bar: ++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: dear, I got your contact through the internet - due to serious
searching for a reliable personality. My name is Jenneh Kandeh birth date
May/23rd/1994 in Free Town Capital of Sierra Leone. l am a nephew to Foday
Sankoh, the rebel leader of Sierra Leone, opposed to the government of President
Ahmad Tejan Kebbah the ex-leader. I have been on exile in the Benin - Porto-
Novo. But l am curr [...]
Content analysis details: (18.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.171 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[herryjohn451[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[herryjohn451[at]gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Regarding Of My Late Father's Fund $10,200,000,,
dear,
I got your contact through the internet - due to serious searching for
a reliable personality. My name is Jenneh Kandeh birth date
May/23rd/1994 in Free Town Capital of Sierra Leone.
l am a nephew to Foday Sankoh, the rebel leader of Sierra Leone,
opposed to the government of President Ahmad Tejan Kebbah the
ex-leader. I have been on exile in the Benin - Porto- Novo. But l am
current residing in PORTO-NOVO BENIN due to war of my country, my
mother killed on 04/01/2002 for Sierre Leone civilian war my father
decided to change another residence country with me because I am only
child for my family bad news that my father pass away last year on
25/11/2019 during the war, My father made a lot of money through the
sales of Diamonds.
To the tune of $10,200,000 (Ten Million Two Hundered United States
Dollars). This money is currently and secretly kept in a ECOWAS
security company here in Porto-Novo Benin, but because of the
political turmoil which still exists in this africa, I can not invest
the money myself, hence am soliciting your help me take these funds
into your custody and also advise me on how to invest it and I want to
add here that if agreed 30% of the total worth of the fund will be
yours minus your total expenses incurred during the clearing of the
fund in Cotonou Benin that 30% is a $3,060,000 (Three Million Sixty
Thousand United State Dollars) is yours out of the fund after we
confirmed the fund there.
While l wait to hear from you soon, my warm regards to you and your family.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 13 Oct 2022 16:21:08 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oj6Z2-000PHL-Sd
for dave@doctor.nl2k.ab.ca;
Thu, 13 Oct 2022 16:20:28 -0600
Resent-From: The Doctor
Resent-Date: Thu, 13 Oct 2022 16:20:28 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-il1-f171.google.com ([209.85.166.171]:39602)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oj2MY-000LFN-1G
for root@nk.ca;
Thu, 13 Oct 2022 11:51:22 -0600
Received: by mail-il1-f171.google.com with SMTP id u2so1347701ilv.6
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=I+eVlGTYOSzfSfe/rihU4KdqgQWx11BWqNZWrSj0rBM=;
b=bApAv+6Tr7ip3wwHSM4kJgcB1IY5kkOK5dzRvOcJ4gGyiQOFsRW/qZQPJNYd2SO/7c
Z7tsEPgRon/s6NALDMZ5/c/Yw+dgkehmP2zrQWktrK3Qcy00RxMHDUfU5ih9cYGMXaDD
kIkSBA7rukB5x/LqdRcmCNYpCjhIUbkHJBGwWPvLl41vhagezplKl3tLb3tyb6HZwoes
s6ZFkONu3H8s5wtC86r/Ef4pKJWxVVyrdrTo8V3eQSVuoF1idqwy7YjGhhdwSZJvEP6q
I2FsNPs5idLR109KmlJUBqzilLfet5k9QxFca8T2ag+2UdK7MqysdMN/RB4K9vyCBdLi
8ZaA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=I+eVlGTYOSzfSfe/rihU4KdqgQWx11BWqNZWrSj0rBM=;
b=e286cvWxTAlX8nTYpsLMiaUzx89aDeyg3nUIXF1zq9UIcyBSqQcxq0JxLB80sf+gPW
yZIUKV1MhZ2q+U5gJGtZXshJO1beTME7YhdcsiiOUsogVKC4n/91dE/HIns3Z2gPEbau
uOdc2k2cL8xG6hfatcq5nj8l+GmTreJ+NUmka3RNG4H59w64Ri4R0IDDavfv9WvPiehZ
x7Pb/CWgsk6QhlQwFnAR6K/K5sgU3nAyInvT9Mvp8aXg+m+75LVd9dEspZKhA+79W4Ah
ZmobLg8JyFK56S+kR9QvjjGqZNTzcD6t/RJB1h5jx3UChIAeS/K0pJYrWaop66xqS0Kq
/SSg==
X-Gm-Message-State: ACrzQf0m3XTy8v2E1qEaOUxuAo7qn9A/DKG8a5BQ21NlBVaNys0mbGuh
p9zWi7bIsCSajQ5wBaqpG8Z9uiZ828a8HHyKEoHyUAJJkZa/9oyB
X-Google-Smtp-Source: AMsMyM75cJp0XsQRQVh7qAe+hECWy1r/exBPHnwZwGzhVmOCvPTFcrPGWid2aEIDZmTbpTSoCyUKxVT/vbF1U0wd/1w=
X-Received: by 2002:a63:1e47:0:b0:43c:261f:f773 with SMTP id
p7-20020a631e47000000b0043c261ff773mr907903pgm.1.1665683298094; Thu, 13 Oct
2022 10:48:18 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a17:902:eccd:b0:178:3217:e47e with HTTP; Thu, 13 Oct 2022
10:48:17 -0700 (PDT)
Reply-To: JennehKandeh@yahoo.com
From: Jenneh Kandeh
Date: Thu, 13 Oct 2022 18:48:17 +0100
Message-ID:
Subject: Regarding Of My Late Father's Fund $10,200,000,,
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: root@nk.ca
X-Spam_score: 18.6
X-Spam_score_int: 186
X-Spam_bar: ++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: dear, I got your contact through the internet - due to serious
searching for a reliable personality. My name is Jenneh Kandeh birth date
May/23rd/1994 in Free Town Capital of Sierra Leone. l am a nephew to Foday
Sankoh, the rebel leader of Sierra Leone, opposed to the government of President
Ahmad Tejan Kebbah the ex-leader. I have been on exile in the Benin - Porto-
Novo. But l am curr [...]
Content analysis details: (18.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.171 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[herryjohn451[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[herryjohn451[at]gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Regarding Of My Late Father's Fund $10,200,000,,
dear,
I got your contact through the internet - due to serious searching for
a reliable personality. My name is Jenneh Kandeh birth date
May/23rd/1994 in Free Town Capital of Sierra Leone.
l am a nephew to Foday Sankoh, the rebel leader of Sierra Leone,
opposed to the government of President Ahmad Tejan Kebbah the
ex-leader. I have been on exile in the Benin - Porto- Novo. But l am
current residing in PORTO-NOVO BENIN due to war of my country, my
mother killed on 04/01/2002 for Sierre Leone civilian war my father
decided to change another residence country with me because I am only
child for my family bad news that my father pass away last year on
25/11/2019 during the war, My father made a lot of money through the
sales of Diamonds.
To the tune of $10,200,000 (Ten Million Two Hundered United States
Dollars). This money is currently and secretly kept in a ECOWAS
security company here in Porto-Novo Benin, but because of the
political turmoil which still exists in this africa, I can not invest
the money myself, hence am soliciting your help me take these funds
into your custody and also advise me on how to invest it and I want to
add here that if agreed 30% of the total worth of the fund will be
yours minus your total expenses incurred during the clearing of the
fund in Cotonou Benin that 30% is a $3,060,000 (Three Million Sixty
Thousand United State Dollars) is yours out of the fund after we
confirmed the fund there.
While l wait to hear from you soon, my warm regards to you and your family.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments