Nigerian Spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Jan 2023 08:59:21 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pFGrI-000Bom-1G

for dave@doctor.nl2k.ab.ca;

Tue, 10 Jan 2023 08:48:16 -0700

Resent-From: The Doctor

Resent-Date: Tue, 10 Jan 2023 08:48:16 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f196.google.com ([209.85.128.196]:33504)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pFFIn-000DIS-0I

for root@nk.ca;

Tue, 10 Jan 2023 07:09:47 -0700

Received: by mail-yw1-f196.google.com with SMTP id 00721157ae682-4a263c4ddbaso155505347b3.0

for ; Tue, 10 Jan 2023 06:06:03 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:in-reply-to:references

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=M2S/ofSO/+CC7iu+660/3sVUSTtcQWDQsjChEFO7xxM=;

b=Cy5nDkqDO1ccUgBA6PNhuFLDq8+e0jRdUfeAXkg1SuGeVppVaij6uT9xi+gPMRe0mu

IvcxYQSL9X/jxsFAcePH6DPM1cbUkM7pVINO62y8+VSGJ16C2kipl624pK+oL3Fg5GxU

bw5u495x7R1p8/babtvtdbvNiqSC7NJXlZSHeHkMpFUxmszu8bTAMG+xjHF/hl3xcFsD

N2xV+VaT/B0Nly2/WbMvSX1TK5c+/fpBhyFBvZMV0u43sKdDYR/QoEZ4PUbbyoEIU/HY

aOXtc/JQc8FCBT4BcXhYo0YvCN4NVcLjkhYg0bnFNUdsK0UETx1rRZnNfEWQQPi9zdMi

z0kg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:in-reply-to:references

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=M2S/ofSO/+CC7iu+660/3sVUSTtcQWDQsjChEFO7xxM=;

b=BOeF8oc+aekfAvNCX5vElu3VRJsGMC29nd6CQEDQ2o4y8srk+TCvUmc8IfRscEM+vK

kzYxCWW+gbuy+rqY+Nt3C+J90IMaLoBMUMRMWTqhVd++P6y1FCmqx02L/krpay8ys6wW

Rrmq/wIHKpSstr2QO+PlgY94yUhuPAwnGjSNpogKs+HH7QgFi3UnbdorBLcfc8PyGc2L

5VtuE50uDEEyWk0ga7cH1EIemjLET/ZS0tVHtMHZXYhmHnLxY4bPdsOHRcbcU93KBoY7

nPpHbBO0/jHxTEqPfHeLZaNcGPzd87AfPlQZSdofSK87L59xCaObWTXQzB8dRwsIU90D

oSBQ==

X-Gm-Message-State: AFqh2krT3im/OeK9oPm84R5zW3WBkwTlHDxP6BWzMM5EJfOnuUYEwo/X

BatB930jqjU/WghV4BG+EVPFvdzYnLGRfVVzndXDD65oguc=

X-Google-Smtp-Source: AMrXdXu3+EM6u6/o1wjgqpM4xHSXXSnUQx7Lr6kjz+pZEls4yXMN0DUyH7ZTrNQ/ccGW6hLdyrYkDeW9NwDx3xdQzhc=

X-Received: by 2002:a25:606:0:b0:709:9335:236e with SMTP id

6-20020a250606000000b007099335236emr6135135ybg.288.1673358940282; Tue, 10 Jan

2023 05:55:40 -0800 (PST)

MIME-Version: 1.0

References:

In-Reply-To:

Reply-To: Kossigerard1@outlook.com

From: Kossi Gerard

Date: Tue, 10 Jan 2023 13:55:28 +0000

Message-ID:

Subject: Greetings to you,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000037a52205f1e93d1f"

Bcc: root@nk.ca

X-Spam_score: 12.2

X-Spam_score_int: 122

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings to you, I have sent you the message earlier, but

your failure to respond has prompted me to resend it again. I am Mr. Kossi

Gerard, the branch manager of BANQUE ATLANTIQUE in LOME TOGO. I’m contacting

you i [...]



Content analysis details: (12.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.196 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.196 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[kossigerard1(at)outlook.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[brandonru632(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[brandonru632(at)gmail.com]

0.9 URG_BIZ BODY: Contains urgent matter

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

0.0 T_MONEY_PERCENT X% of a lot of money for you

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

1.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Greetings to you,



--00000000000037a52205f1e93d1f

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Greetings to you,



I have sent you the message earlier, but your failure to respond has

prompted me to resend it again. I am Mr. Kossi Gerard, the branch manager

of BANQUE ATLANTIQUE in LOME TOGO. I=E2=80=99m contacting you in respect of=

our

deceased customer lady Margalit.



She passed on with her only child in an auto accident and left no one to

claim her fund for past years now and the Lome Togo financial converters

wants to confiscate this fund as abandoned fund and I want you to stand in

as the new beneficiary to her fund worth =C2=A36.1 Million pounds in our ba=

nk

here in my country, I=E2=80=99m her personal account manager and as we prog=

ress on

the transaction, every back up document that will be needed in this claims

shall be procured in your name and favor.



She inherited the fund from her late husband who was an industrialist and

Oil magnate before he died. Indicate your interest to receive the transfer

of (=C2=A36, 1 Million Pounds) 45% for me and 45% for you and 10% will be g=

iven

to the Charity Organization to support the poor.



I can make you Inherit the fund if you give me your maximum co-operation.



I need your urgent response to help me give you more details.



With Respect

Mr. Kossi Gerard,



--00000000000037a52205f1e93d1f

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Greetings to y=

ou,

I have sent you the message earlier, but your failure to respond=

has prompted me to resend it again. I am Mr. Kossi Gerard, the branch mana=

ger of BANQUE ATLANTIQUE in LOME TOGO. I=E2=80=99m contacting you in respec=

t of our deceased customer lady Margalit.

She passed on with her onl=

y child in an auto accident and left no one to claim her fund for past year=

s now and the Lome Togo financial converters wants to confiscate this fund =

as abandoned fund and I want you to stand in as the new beneficiary to her =

fund worth =C2=A36.1 Million pounds in our bank here in my country, I=E2=80=

=99m her personal account manager and as we progress on the transaction, ev=

ery back up document that will be needed in this claims shall be procured i=

n your name and favor.

She inherited the fund from her late husband =

who was an industrialist and Oil magnate before he died. Indicate your inte=

rest to receive the transfer of (=C2=A36, 1 Million Pounds) 45% for me and =

45% for you and 10% will be given to the Charity Organization to support th=

e poor.

I can make you Inherit the fund if you give me your maximum =

co-operation.

I need your urgent response to help me give you more d=

etails.

With Respect
Mr. Kossi Gerard,






--00000000000037a52205f1e93d1f--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA