Nigerian Spam from Gmail

Posted by Dave Yadallee on Tuesday, February 28. 2023

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 28 Feb 2023 08:04:03 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pX1Vu-0008DY-0x

for dave@doctor.nl2k.ab.ca;

Tue, 28 Feb 2023 08:03:34 -0700

Resent-From: The Doctor

Resent-Date: Tue, 28 Feb 2023 08:03:34 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f49.google.com ([209.85.167.49]:38545)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pWwvK-000KeZ-0z

for root@nl2k.ab.ca;

Tue, 28 Feb 2023 03:09:38 -0700

Received: by mail-lf1-f49.google.com with SMTP id m6so12424431lfq.5

for ; Tue, 28 Feb 2023 02:07:31 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=y473zhrUU1LTt1xiEp50XRjl9qC28TSC0JLn3SdjZWE=;

b=n27QXPiTvOil0afB1ktkLqndPxPI+oui0jvoI6Bz5s1Tz+Sv14dg4szsUmPtV0bgHC

jRk+ahV6UR6njvWqF1jDG9fyLrdmg2o81iWESQKexQDMBG27drTs5Tw08enHkMykMVoI

ZB1m+BLvnmztuejtH82fctJPNpwsUt4FmI1byk7st89yDfUBoNldjdzgtvVvBG8lIZEi

sxdKT0G/IdkUCZKzs5mmERiliV9p7pQuTjrmSTNNQF2j+t4tFa0Slhh0AXM3Ekg4zgPB

P+HFQ6SsdMrc3VsC+YYC+HUlxWmrblJtHyN9QV61Ht4pjSRGEtvCnuDv2PDS3ApZrYS9

UpdQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=y473zhrUU1LTt1xiEp50XRjl9qC28TSC0JLn3SdjZWE=;

b=aXTNbMGydxPZVjO3hE8mx+Af4WAV/D3fg0oY9IVp+Zzi8Einzab4alRVfSDbIiiek1

meVxUcEu7oJyrnyLtFNKM2Q/S/2BmMY4UqcJ1/NdXLXBE/trakWb0aZwEhcQrkYZjie4

6VAia7FNM8s92RmyzAke2Ltqcin3XAMBOPhjXl+NxJwk83IAD5cq1RCro16gS8c/2GJW

i3X40vTDODiTMYVK447Jq0nlIkerTPwuJOz+BnUVWNzKW5WkbQNvIFD9fmsJnnfvXUEl

nNG6cMI9WHpGJODFB2DCPvSSJOzDtfuclJihD6pQeRc1f6XmiCBopO55Syh9akplQBy/

lV7Q==

X-Gm-Message-State: AO0yUKUbc2d0YPWqPcLMu+7wruIqe+Iv4UjnOlzDzasiFD2CW7Nv8eSw

EDyZszqVCsdyz96AY8+XQW3AUrgOaHGFcIsAMw==

X-Google-Smtp-Source: AK7set9aLZ454OCkvJEG9fEfhWVDACSId7TwGyrWliN0qsnF9cNyBB+kV1YZWKAomiX24cLfFOQZCiIlLfXHG32pX90=

X-Received: by 2002:ac2:46f3:0:b0:4dd:a4c5:2b42 with SMTP id

q19-20020ac246f3000000b004dda4c52b42mr538102lfo.8.1677578844523; Tue, 28 Feb

2023 02:07:24 -0800 (PST)

MIME-Version: 1.0

From: Ernest Francis

Date: Tue, 28 Feb 2023 12:07:10 +0200

Message-ID:

Subject: Message.

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000001c513605f5bfc36f"

Bcc: root@nl2k.ab.ca

X-Spam_score: 17.8

X-Spam_score_int: 178

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Ref: Business Proposal. I hope my email finds you well. Firstly,

I must solicit for your confidence in this transaction; this is by virtue

of its nature as being utterly confidential.

Content analysis details: (17.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.49 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[bryan.g.lukas(at)gmail.com]

2.5 MILLION_USD BODY: Talks about millions of dollars

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

2.5 HK_SCAM_N2 BODY: No description available.

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.49 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 HK_SCAM No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLY From and body contain different freemails

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Message.

--0000000000001c513605f5bfc36f

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Ref: Business Proposal.

I hope my email finds you well.

Firstly, I must solicit for your confidence in this transaction; this is by

virtue of its nature as being utterly confidential.

You may be surprised to receive such an email from someone you barely know.

My name is Ernest Francis, a Business consultant and facilitator. A client

of mine died last year in 2022 from a heart attack. Few weeks before his

death, he needed to make an urgent investment requiring cash payment in

which he requested me to assist him move the sum of US$28,500,000.00 to an

open beneficiary account securely for the business deal. I personally

facilitated the moving of this fund through a special security firm in

Canada to the Bank as per his instruction. The Canadian firm is an

especially private firm that accepts deposits from high net worth

individuals and blue chip corporations.

None of my client=E2=80=99s family or associate is aware of this deal becau=

se he

used me as a proxy to move the funds; as it is, I have no knowledge of any

of his relatives or next of kin and how to locate them.

Before his untimely death, I had acted as his proxy for most of his

business dealings, especially those he wanted to remain anonymous; he was a

very meticulous person when it comes to business deals.

Having made the Bank aware of his death recently, they have mandated me to

present a member of his family (heir/inheritor) to make claim to the

deposited fund. Since I do not know any of his relatives and as such there

is no specific mentioning of a next of kin in all the documents we used for

the deposit with the Bank, and it is because of this I have obtained the

letter of probate for the administration of the said estate since I was

involved in the process of moving the funds from Canada and depositing it

with the Bank.

My proposal therefore is to seek your consent to present you as the next of

kin beneficiary for this claim so that the money would be released and

transferred to you. I have exclusive access to the documents of the fund

deposit with the Bank, you will be made the next of kin beneficiary of this

fund. It is my intention that we both benefit from this fund. I know of

someone who has pulled out a similar deal in the past, it is an

opportunity. If the money is not claimed, it will be escheat and nobody

benefits from this.

I suggest that we donate One Million USD of this money to a charity

organization of our choice after the deal and we will share the remaining

fund equal between us.

In order to come up with the bank pre-requisite for the claim, I will

explain to you the step by step process that we need to take before

presenting you to the bank with all the necessary documentation; what I

need from you is trust, confidentiality and your honest co-operation in

this transaction if you are interested. I guarantee you that this

transaction is 100% Risk free and would be executed under legitimate

arrangement.

Please contact me at your earliest convenience using my private email

ernestgframcis@usa.com if you are interested and willing to work with me,

send me your telephone number and name and I will reach you as soon as

possible.

Kindest Regards

Ernest Francis

--0000000000001c513605f5bfc36f

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

0cm 0cm 8pt;line-height:107%;font-size:11pt;font-family:Calibri,sans-serif"=

>Ref: Business Proposal.