Nigerian Funds Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 17 Mar 2023 05:28:04 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1pd8F1-000MQ7-2u
for dave@doctor.nl2k.ab.ca;
Fri, 17 Mar 2023 05:27:23 -0600
Resent-From: The Doctor
Resent-Date: Fri, 17 Mar 2023 05:27:23 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f174.google.com ([209.85.128.174]:38496)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1pd6Oq-0008SM-2K
for doctor@doctor.nl2k.ab.ca;
Fri, 17 Mar 2023 03:29:28 -0600
Received: by mail-yw1-f174.google.com with SMTP id 00721157ae682-5418c2b8ef2so83065367b3.5
for; Fri, 17 Mar 2023 02:27:26 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1679045240;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=exv8RTiQ7ACn6BniEJECbY2nBbKsFHLWJ8ZiriLPjZY=;
b=QA8L3PGVGzxhUgxfcS2TdcytRsL5ktc8iTQqaZf95Usjpu937Ma3wikhOxTRdBl4df
vhQHG/ESJMGQj0MFBvKFu5tRXqFbTMJ6580n6ND/wkKiK2YhpRjoyd51WKhTY2G2xzWS
a9xB2CI7GH2p38K5v0r9ok55eVvyqTx3+T3odJvGuHljF8Em3/9DTeH+zzciVew2ftAp
4q/kJ+iSydZnzLVcg3KBHvQ62q3QbvxYIGu/bpwQ9vA9Qlv/JmQ4N8XVkOyjdKH/KtCr
in9+JeRX1NAlqmaYJ88ULnB7aDpG3MkLWSatSTVf1fAXaRZmSj3mhL6NdL96PYWrHVAf
yD2A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1679045240;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=exv8RTiQ7ACn6BniEJECbY2nBbKsFHLWJ8ZiriLPjZY=;
b=ExQE3gxDHZMUmuVYMBP60RH3+o743c+Ar6lKEvz6oeByIPbMguRzjUpVsefbLtbG2/
uG/2+cQOA139nB/NjTT4aJ+gK0YVFvtRQQJx1Y/PAsUXIull6HvscxMJJtYsEwvNl9Dr
pSbwBMIujv388d/DtUNg1zRO2EyFVHch4Bi3Dh6C7sbQJ150mnaSbWwADP+scSz+sKe2
sF5P1O9YscXC7B8UEefDe7MRJcg53npyF+EnwY9v277q38q2i8ax/q4dracESM0LNYrI
np1wdVFF0nec4AO1PWJu+HS7tq1ZEPcNXfaBq9wq9ORWyD+30QBF03jgCcJCU7jlFEY1
DRcQ==
X-Gm-Message-State: AO0yUKUKnlT7ku10Fan3WAihbeQz48AcpNT1ADXSS3QQQgkXVC4qzXAl
sF32Hr4KJD7nSB0+4iDlnzWrTkONm7jq8lBZgms=
X-Google-Smtp-Source: AK7set8kDIicyjxfy2Hs/ohzVI+/1lmcHx10ayBeFHHd9Zsch5WyrFCGuJcPe4gqKAVaSKXLWbK1rn75BhbP2zFSss8=
X-Received: by 2002:a81:ad28:0:b0:541:66a2:dd93 with SMTP id
l40-20020a81ad28000000b0054166a2dd93mr4057838ywh.3.1679045240236; Fri, 17 Mar
2023 02:27:20 -0700 (PDT)
MIME-Version: 1.0
Reply-To: crystalvault21@outlook.com
From: Wilfred Hatch
Date: Fri, 17 Mar 2023 09:27:08 +0000
Message-ID:
Subject: Proposal
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000001b33c705f7152faa"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 16.1
X-Spam_score_int: 161
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, I am working with an associate contractor/auditor
with asset management/investment banking of BANK OF TOKYO MITSIBUSHI (MUFG).
I am currently in the auditing department that normalizes funds transfer
[...]
Content analysis details: (16.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[crystalvault21(at)outlook.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[pacificdanlimited(at)gmail.com]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.174 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_MONEY_PERCENT X% of a lot of money for you
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Proposal
--0000000000001b33c705f7152faa
Content-Type: text/plain; charset="UTF-8"
Dear Friend,
I am working with an associate contractor/auditor with asset
management/investment banking of BANK OF TOKYO MITSIBUSHI (MUFG). I am
currently in the auditing department that normalizes funds transfer from
foreign countries passing through the BANK OF TOKYO- MITSIBUSHI TURKEY as a
major corresponding bank in Europe for Asian banks and other countries. Am
sure you know about this.
I personally handle hundreds of funds meant for different accounts in
different banks from different countries daily. Every day we have more than
60 block funds floating without existing accounts with the BANK OF
TOKYO-MITSIBUSHI GROUP. Every three months, the funds are warehoused in a
particular account here in the BANK without any beneficiary.
THIS IS MY DEAL: If you can open an online account with our bank and
reactivate the account immediately, I will make deposits of funds in that
account to the volume of $20,500,000.00 United State Dollars while you
transfer it to your local bank in your country and withdraw it from your
bank. Any amount I deposit in your transit account, you take 50% and send
50% to me after withdrawal.
If you are comfortable with my proposal and be certain that you want to do
the transaction with me, do provide me with your full contact details. I
will guide you on how to achieve the delivery of the project/transaction
successfully within days.
Sincerely,
Wilfred Hatch
--0000000000001b33c705f7152faa
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"">
an style=3D"font-family:"Times New Roman","serif"">Dear=
Friend,
-size:11pt;font-family:Calibri,"sans-serif"">
family:"Times New Roman","serif"">I am working with an =
associate
contractor/auditor with asset management/investment banking of BANK OF
TOKYO=C2=A0MITSIBUSHI=C2=A0(MUFG). I am currently in the
auditing=C2=A0department that normalizes funds transfer from foreign countr=
ies
passing through the=C2=A0BANK OF TOKYO- MITSIBUSHI=C2=A0TURKEY=C2=A0as a ma=
jor
corresponding bank in Europe for Asian banks=C2=A0and other countries. Am s=
ure
you know about this.
-size:11pt;font-family:Calibri,"sans-serif"">
family:"Times New Roman","serif"">I personally handle h=
undreds of
funds meant for different accounts in different banks from different countr=
ies
daily. Every day we have more than 60 block funds floating without existing
accounts with the BANK OF TOKYO-MITSIBUSHI=C2=A0GROUP. Every three months, =
the
funds are warehoused in a particular account here in the BANK without any
beneficiary.
-size:11pt;font-family:Calibri,"sans-serif"">
family:"Times New Roman","serif"">THIS IS MY DEAL: If y=
ou can open an
online=C2=A0account=C2=A0with=C2=A0our=C2=A0bank and
reactivate=C2=A0the=C2=A0account immediately, I=C2=A0will make deposits of
funds=C2=A0in that account to the volume of $20,500,000.00 United
State=C2=A0Dollars while you transfer it to your local bank in your country=
and
withdraw it from your bank. Any amount I=C2=A0deposit in your transit accou=
nt,
you take 50% and send 50% to me after withdrawal.
-size:11pt;font-family:Calibri,"sans-serif"">
family:"Times New Roman","serif"">If you are comfortabl=
e with my
proposal and be certain that you want to do the transaction with me, do pro=
vide
me with your full contact details. I will guide you on how to achieve the
delivery of the project/transaction successfully within days.
font-size:11pt;font-family:Calibri,"sans-serif"">
ont-family:"Times New Roman","serif"">Sincerely,=
font-size:11pt;font-family:Calibri,"sans-serif"">
ont-family:"Times New Roman","serif"">=C2=A0
font-size:11pt;font-family:Calibri,"sans-serif"">
ont-family:"Times New Roman","serif"">Wilfred Hatch
an>
--0000000000001b33c705f7152faa--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 17 Mar 2023 05:28:04 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1pd8F1-000MQ7-2u
for dave@doctor.nl2k.ab.ca;
Fri, 17 Mar 2023 05:27:23 -0600
Resent-From: The Doctor
Resent-Date: Fri, 17 Mar 2023 05:27:23 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f174.google.com ([209.85.128.174]:38496)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1pd6Oq-0008SM-2K
for doctor@doctor.nl2k.ab.ca;
Fri, 17 Mar 2023 03:29:28 -0600
Received: by mail-yw1-f174.google.com with SMTP id 00721157ae682-5418c2b8ef2so83065367b3.5
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1679045240;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=exv8RTiQ7ACn6BniEJECbY2nBbKsFHLWJ8ZiriLPjZY=;
b=QA8L3PGVGzxhUgxfcS2TdcytRsL5ktc8iTQqaZf95Usjpu937Ma3wikhOxTRdBl4df
vhQHG/ESJMGQj0MFBvKFu5tRXqFbTMJ6580n6ND/wkKiK2YhpRjoyd51WKhTY2G2xzWS
a9xB2CI7GH2p38K5v0r9ok55eVvyqTx3+T3odJvGuHljF8Em3/9DTeH+zzciVew2ftAp
4q/kJ+iSydZnzLVcg3KBHvQ62q3QbvxYIGu/bpwQ9vA9Qlv/JmQ4N8XVkOyjdKH/KtCr
in9+JeRX1NAlqmaYJ88ULnB7aDpG3MkLWSatSTVf1fAXaRZmSj3mhL6NdL96PYWrHVAf
yD2A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1679045240;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=exv8RTiQ7ACn6BniEJECbY2nBbKsFHLWJ8ZiriLPjZY=;
b=ExQE3gxDHZMUmuVYMBP60RH3+o743c+Ar6lKEvz6oeByIPbMguRzjUpVsefbLtbG2/
uG/2+cQOA139nB/NjTT4aJ+gK0YVFvtRQQJx1Y/PAsUXIull6HvscxMJJtYsEwvNl9Dr
pSbwBMIujv388d/DtUNg1zRO2EyFVHch4Bi3Dh6C7sbQJ150mnaSbWwADP+scSz+sKe2
sF5P1O9YscXC7B8UEefDe7MRJcg53npyF+EnwY9v277q38q2i8ax/q4dracESM0LNYrI
np1wdVFF0nec4AO1PWJu+HS7tq1ZEPcNXfaBq9wq9ORWyD+30QBF03jgCcJCU7jlFEY1
DRcQ==
X-Gm-Message-State: AO0yUKUKnlT7ku10Fan3WAihbeQz48AcpNT1ADXSS3QQQgkXVC4qzXAl
sF32Hr4KJD7nSB0+4iDlnzWrTkONm7jq8lBZgms=
X-Google-Smtp-Source: AK7set8kDIicyjxfy2Hs/ohzVI+/1lmcHx10ayBeFHHd9Zsch5WyrFCGuJcPe4gqKAVaSKXLWbK1rn75BhbP2zFSss8=
X-Received: by 2002:a81:ad28:0:b0:541:66a2:dd93 with SMTP id
l40-20020a81ad28000000b0054166a2dd93mr4057838ywh.3.1679045240236; Fri, 17 Mar
2023 02:27:20 -0700 (PDT)
MIME-Version: 1.0
Reply-To: crystalvault21@outlook.com
From: Wilfred Hatch
Date: Fri, 17 Mar 2023 09:27:08 +0000
Message-ID:
Subject: Proposal
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000001b33c705f7152faa"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 16.1
X-Spam_score_int: 161
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, I am working with an associate contractor/auditor
with asset management/investment banking of BANK OF TOKYO MITSIBUSHI (MUFG).
I am currently in the auditing department that normalizes funds transfer
[...]
Content analysis details: (16.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[crystalvault21(at)outlook.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[pacificdanlimited(at)gmail.com]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.174 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_MONEY_PERCENT X% of a lot of money for you
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Proposal
--0000000000001b33c705f7152faa
Content-Type: text/plain; charset="UTF-8"
Dear Friend,
I am working with an associate contractor/auditor with asset
management/investment banking of BANK OF TOKYO MITSIBUSHI (MUFG). I am
currently in the auditing department that normalizes funds transfer from
foreign countries passing through the BANK OF TOKYO- MITSIBUSHI TURKEY as a
major corresponding bank in Europe for Asian banks and other countries. Am
sure you know about this.
I personally handle hundreds of funds meant for different accounts in
different banks from different countries daily. Every day we have more than
60 block funds floating without existing accounts with the BANK OF
TOKYO-MITSIBUSHI GROUP. Every three months, the funds are warehoused in a
particular account here in the BANK without any beneficiary.
THIS IS MY DEAL: If you can open an online account with our bank and
reactivate the account immediately, I will make deposits of funds in that
account to the volume of $20,500,000.00 United State Dollars while you
transfer it to your local bank in your country and withdraw it from your
bank. Any amount I deposit in your transit account, you take 50% and send
50% to me after withdrawal.
If you are comfortable with my proposal and be certain that you want to do
the transaction with me, do provide me with your full contact details. I
will guide you on how to achieve the delivery of the project/transaction
successfully within days.
Sincerely,
Wilfred Hatch
--0000000000001b33c705f7152faa
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"">
an style=3D"font-family:"Times New Roman","serif"">Dear=
Friend,
-size:11pt;font-family:Calibri,"sans-serif"">
family:"Times New Roman","serif"">I am working with an =
associate
contractor/auditor with asset management/investment banking of BANK OF
TOKYO=C2=A0MITSIBUSHI=C2=A0(MUFG). I am currently in the
auditing=C2=A0department that normalizes funds transfer from foreign countr=
ies
passing through the=C2=A0BANK OF TOKYO- MITSIBUSHI=C2=A0TURKEY=C2=A0as a ma=
jor
corresponding bank in Europe for Asian banks=C2=A0and other countries. Am s=
ure
you know about this.
-size:11pt;font-family:Calibri,"sans-serif"">
family:"Times New Roman","serif"">I personally handle h=
undreds of
funds meant for different accounts in different banks from different countr=
ies
daily. Every day we have more than 60 block funds floating without existing
accounts with the BANK OF TOKYO-MITSIBUSHI=C2=A0GROUP. Every three months, =
the
funds are warehoused in a particular account here in the BANK without any
beneficiary.
-size:11pt;font-family:Calibri,"sans-serif"">
family:"Times New Roman","serif"">THIS IS MY DEAL: If y=
ou can open an
online=C2=A0account=C2=A0with=C2=A0our=C2=A0bank and
reactivate=C2=A0the=C2=A0account immediately, I=C2=A0will make deposits of
funds=C2=A0in that account to the volume of $20,500,000.00 United
State=C2=A0Dollars while you transfer it to your local bank in your country=
and
withdraw it from your bank. Any amount I=C2=A0deposit in your transit accou=
nt,
you take 50% and send 50% to me after withdrawal.
-size:11pt;font-family:Calibri,"sans-serif"">
family:"Times New Roman","serif"">If you are comfortabl=
e with my
proposal and be certain that you want to do the transaction with me, do pro=
vide
me with your full contact details. I will guide you on how to achieve the
delivery of the project/transaction successfully within days.
font-size:11pt;font-family:Calibri,"sans-serif"">
ont-family:"Times New Roman","serif"">Sincerely,=
font-size:11pt;font-family:Calibri,"sans-serif"">
ont-family:"Times New Roman","serif"">=C2=A0
font-size:11pt;font-family:Calibri,"sans-serif"">
ont-family:"Times New Roman","serif"">Wilfred Hatch
an>
--0000000000001b33c705f7152faa--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments