Nigerian Gmail spam

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 22 Oct 2022 14:47:10 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1omLCC-000C0c-Dn

for dave@doctor.nl2k.ab.ca;

Sat, 22 Oct 2022 14:34:16 -0600

Resent-From: The Doctor

Resent-Date: Sat, 22 Oct 2022 14:34:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f180.google.com ([209.85.128.180]:42619)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1omJZ7-000NTW-UW

for root@doctor.nl2k.ab.ca;

Sat, 22 Oct 2022 12:49:57 -0600

Received: by mail-yw1-f180.google.com with SMTP id 00721157ae682-3691e040abaso52288727b3.9

for ; Sat, 22 Oct 2022 11:47:06 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:in-reply-to:references

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=z21y8mQZHVRx9Ne5xoNHwbvaMd13gOhRFoaTCq0igHA=;

b=llB9k8iwS7AdRYtNtPa6omugBD/SxaDuTDVa6MeK2KM/EzkeGyekGTL0xwIpkDcoGo

dpzPw002imkOmqj29YBfME97jITZMh5+bIbNCcxW2xhpG31YM1/e9MS7e0pwyeczgHKK

iI/IRg6WehMHrLib23o9knkxOedKcYBH00WTBtSDaSrKkoNG3I9oEYyc/KK+bxQoVdz2

zUso9d8Dr5f+Ff9Ftx2Vb404QH2VzquCKtPUPsNiIJ0INEoJxL5xNYxjnHrgljUZo0Dn

eGn2MfKjsLpgopNWGIQOrr89I3hBz9duNmg8xhLO3NdDLIk8bgej6XPog/UnEFPB/WiD

kpsg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:in-reply-to:references

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=z21y8mQZHVRx9Ne5xoNHwbvaMd13gOhRFoaTCq0igHA=;

b=Af7u8wdmIT0amD5nDpVXyqOTnhoUQ9TljpT572/MQ5Bv0wKrd2Cgc3VhRaOzvod9ev

7IQ8dJ1bGHhLRidY5cO4Xh7yeXdzucxKCsYRBVckFGlYbHheAKcjw1MXHFh+DDiLi/sh

1B4ZX1TqXks1O5515LY11oDSEQAlAahu3HCVsUnOaKIC26oS7WFEPOSOn889P2NCgmAu

Z5wG45gy2r5+vi9+9rN5BIiXaC0o6nBaImS3+jVSc+8b7Q9HNF0VYhLBBhEE+T91OVdX

t7aR+zE9aZ2Oyh/Zs3GGsIKN5YpuuFGWYykyZEm9rObiWIDgSFeV9kxPfiNpmYGVhxUn

L9Lw==

X-Gm-Message-State: ACrzQf33ymo/pENyBHRnD8VyTVbVBVQyT30lFjGRuRkOG/Hx0dgciAcX

ir0ujIuIaPnE+SxGaInETMW/4wPP3CXQ4tPWYSc=

X-Google-Smtp-Source: AMsMyM55BZt+YMPa2BxnFau3Dbd+EMkxr0Y13lahfK2jXdqvEnx4p4CBiRTlpI7uyrIPNtp9LiyXNj+1UJQQDGSysR0=

X-Received: by 2002:a81:2558:0:b0:367:72c1:175b with SMTP id

l85-20020a812558000000b0036772c1175bmr17166227ywl.32.1666464420015; Sat, 22

Oct 2022 11:47:00 -0700 (PDT)

MIME-Version: 1.0

References:

In-Reply-To:

Reply-To: gerardkossi36@gmail.com

From: Kossi Gerard

Date: Sat, 22 Oct 2022 18:46:54 +0000

Message-ID:

Subject: Greetings.

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000c9345205eba3fba3"

Bcc: root@doctor.nl2k.ab.ca

X-Spam_score: 13.9

X-Spam_score_int: 139

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings. I have sent you the message earlier, but your failure

to respond has prompted me to resend it again. I am Mr. Kossi Gerard, the

branch manager of BANQUE ATLANTIQUE in LOME TOGO. I’m contacting you i

[...]



Content analysis details: (13.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.180 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[gerardkossi36[at]gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[rubenbrandon255[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[rubenbrandon255[at]gmail.com]

0.9 URG_BIZ BODY: Contains urgent matter

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 T_MONEY_PERCENT X% of a lot of money for you

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Greetings.



--000000000000c9345205eba3fba3

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Greetings.



I have sent you the message earlier, but your failure to respond has

prompted me to resend it again. I am Mr. Kossi Gerard, the branch manager

of BANQUE ATLANTIQUE in LOME TOGO. I=E2=80=99m contacting you in respect of=

our

deceased customer lady Margalit.



She passed on with her only child in an auto accident and left no one to

claim her fund for past years now and the Lome Togo financial converters

wants to confiscate this fund as abandoned fund and I want you to stand in

as the new beneficiary to her fund worth =C2=A36.1 Million pounds in our ba=

nk

here in my country, I=E2=80=99m her personal account manager and as we prog=

ress on

the transaction, every back up document that will be needed in this claims

shall be procured in your name and favor.



She inherited the fund from her late husband who was an industrialist and

Oil magnate before he died. Indicate your interest to receive the transfer

of (=C2=A36, 1 Million Pounds) 45% for me and 45% for you and 10% will be g=

iven

to the Charity Organization to support the poor.



I can make you Inherit the fund if you give me your maximum co-operation.



I need your urgent response to help me give you more details.



With Respect

Mr. Kossi Gerard,



--000000000000c9345205eba3fba3

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Greetings.
=


I have sent you the message earlier, but your failure to respond has pr=

ompted me to resend it again. I am Mr. Kossi Gerard, the branch manager of =

BANQUE ATLANTIQUE in LOME TOGO. I=E2=80=99m contacting you in respect of ou=

r deceased customer lady Margalit.

She passed on with her only child=

in an auto accident and left no one to claim her fund for past years now a=

nd the Lome Togo financial converters wants to confiscate this fund as aban=

doned fund and I want you to stand in as the new beneficiary to her fund wo=

rth =C2=A36.1 Million pounds in our bank here in my country, I=E2=80=99m he=

r personal account manager and as we progress on the transaction, every bac=

k up document that will be needed in this claims shall be procured in your =

name and favor.

She inherited the fund from her late husband who was=

an industrialist and Oil magnate before he died. Indicate your interest to=

receive the transfer of (=C2=A36, 1 Million Pounds) 45% for me and 45% for=

you and 10% will be given to the Charity Organization to support the poor.=



I can make you Inherit the fund if you give me your maximum co-oper=

ation.

I need your urgent response to help me give you more details.=



With Respect
Mr. Kossi Gerard,






--000000000000c9345205eba3fba3--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA