Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 04 Apr 2023 23:06:25 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1pjvLX-000JLr-12
for dave@doctor.nl2k.ab.ca;
Tue, 04 Apr 2023 23:06:11 -0600
Resent-From: The Doctor
Resent-Date: Tue, 4 Apr 2023 23:06:11 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f52.google.com ([209.85.208.52]:51539)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1pjv6z-000ImI-1u
for doctor@doctor.nl2k.ab.ca;
Tue, 04 Apr 2023 22:51:12 -0600
Received: by mail-ed1-f52.google.com with SMTP id 4fb4d7f45d1cf-5027e589e20so171948a12.3
for; Tue, 04 Apr 2023 21:49:10 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1680670144;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:from:to:cc:subject:date:message-id:reply-to;
bh=WgbfjZunoIV2a9rWcRLmr0fo5WboVjQkRutTEiMZ2D8=;
b=dKJ/MWzC51hPe+hNhP1gdVj28PBz6KIuzxqIvCk75VNkoUfaHIsBGF7n59zjsYrmeu
uzsthO6hzE0s5Fauql0tyFAI8xA7Ck2PC3mJcG3LJpEH7XVUYDSq1XbSH4r9ujo9/FtV
7wGTHj4vQCH6V1mjZ3CMJKQSuTtxcLDbEk7TEmR8swk9Z0Fp97h3d/wdTP3PrBfbTmLS
edf065MXZ7H4TTBLV++m5fNWftsx3snS8ZLFweQMkv8SiStGd3xnR6zjgjYpLWmfjOrZ
2/6NWUe1Mr6xmQeHrcYHwzPXmXwzMzHkPasXnnMyuqpixQ0f0ewaaIcWm2T/a7RR57qB
JLuA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1680670144;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=WgbfjZunoIV2a9rWcRLmr0fo5WboVjQkRutTEiMZ2D8=;
b=Wc4C9liIio/GCQFtAWOqvjY32XF1jhLpkAbwAL3RcLP8rVKyhEpH88JOQjMliVKw7U
OuJnYHsDZxyl1oilPVz4qzMoSvgDk47uywM2Y4VNNyIS56lWVLQirqoMlxD+gsZO8JbQ
HZnZug2UDW4WPbf4Eg5yo2w3eAh/sO7wERZR+Osdgzg/y9wBP+BlvTKZF4hM5gNz5wiy
oPbXFJdjXqK0NzH2DdsVHJBFKK1QidqCLU7FDFebC/rJpRpixApQ6DaBW5kgYcFxc0yY
HPgURDcUJ73pS0ydcfTtVHozfwSOO5lq4pvFyBrZYAftmFMHhztxuJVWSv0sIKc11wRM
RfCg==
X-Gm-Message-State: AAQBX9dU9kknX60jspJ4r916pAnM6JoRSmY5iog5NEdbWgxaQZdvYZmi
+3W3BvYs/oygibOWNiBoDZ+o+8ZMwg9JWEsERBU=
X-Google-Smtp-Source: AKy350Yjd0Hgk4Bgp0vzZaLg39Dfdr3Y0dUIkUNqZczeQwm5ITbA2aBXqTSqrXVBtqGxQQlYun/k4mkLfjPD1S05aTQ=
X-Received: by 2002:a50:f691:0:b0:500:5463:35de with SMTP id
d17-20020a50f691000000b00500546335demr442499edn.8.1680670144287; Tue, 04 Apr
2023 21:49:04 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a50:e8f:0:b0:203:36b1:875c with HTTP; Tue, 4 Apr 2023
21:49:03 -0700 (PDT)
Reply-To: emma.dankworth16@gmail.com
From: Mrs Emma Dankworth
Date: Tue, 4 Apr 2023 21:49:03 -0700
Message-ID:
Subject: Hello Dear
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 17.8
X-Spam_score_int: 178
X-Spam_bar: +++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Good Day, Please accept my apologies for sending you a surprise
letter. I am Mrs Emma Dankworth, an account Manager with an investment Bank
here in the United Kingdom-London. I have a very important business I [...]
Content analysis details: (17.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[smaiga034(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[emma.dankworth16(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[smaiga034(at)gmail.com]
2.5 HK_SCAM_N2 BODY: No description available.
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.52 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.52 listed in wl.mailspike.net]
0.0 SHARE_50_50 Share the money 50/50
0.0 T_SHARE_50_50 Share the money 50/50
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 HK_SCAM No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_MONEY_PERCENT X% of a lot of money for you
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Hello Dear
Good Day,
Please accept my apologies for sending you a surprise letter. I am Mrs
Emma Dankworth, an account Manager with an investment Bank here in the
United Kingdom-London. I have a very important business I want to
discuss with you. There is a draft account opened in my firm by a
long-time client of our bank. I have the opportunity of transferring
the left over fund (GBP=C2=A34,800,000.00 Four Million, Eight Hundred
Thousand British Pounds) belonging to one of our International
Customers who was killed on Feb. 24 during the Russia war against
Ukraine. And being single, he did not state any next of kin
Heir-apparent when the account was opened, although as her account
officer, he told me that he will later forward one of his relative=E2=80=99=
s
name as his next of kin Heir to the account which he did not fulfilled
before he met his death.
I want to invest these funds and introduce you to our bank for this
project as the next of kin since you have the same surname as the
deceased client and this will be executed under a legitimate agreement
that will protect us from any breach of the law. We will share the
fund 50% for you in your participation, 50% for me. If you are really
interested in my proposal, more details about the transfer of funds
will be sent to you.
Yours Sincerely,
Mrs Emma Dankworth
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 04 Apr 2023 23:06:25 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1pjvLX-000JLr-12
for dave@doctor.nl2k.ab.ca;
Tue, 04 Apr 2023 23:06:11 -0600
Resent-From: The Doctor
Resent-Date: Tue, 4 Apr 2023 23:06:11 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f52.google.com ([209.85.208.52]:51539)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1pjv6z-000ImI-1u
for doctor@doctor.nl2k.ab.ca;
Tue, 04 Apr 2023 22:51:12 -0600
Received: by mail-ed1-f52.google.com with SMTP id 4fb4d7f45d1cf-5027e589e20so171948a12.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1680670144;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:from:to:cc:subject:date:message-id:reply-to;
bh=WgbfjZunoIV2a9rWcRLmr0fo5WboVjQkRutTEiMZ2D8=;
b=dKJ/MWzC51hPe+hNhP1gdVj28PBz6KIuzxqIvCk75VNkoUfaHIsBGF7n59zjsYrmeu
uzsthO6hzE0s5Fauql0tyFAI8xA7Ck2PC3mJcG3LJpEH7XVUYDSq1XbSH4r9ujo9/FtV
7wGTHj4vQCH6V1mjZ3CMJKQSuTtxcLDbEk7TEmR8swk9Z0Fp97h3d/wdTP3PrBfbTmLS
edf065MXZ7H4TTBLV++m5fNWftsx3snS8ZLFweQMkv8SiStGd3xnR6zjgjYpLWmfjOrZ
2/6NWUe1Mr6xmQeHrcYHwzPXmXwzMzHkPasXnnMyuqpixQ0f0ewaaIcWm2T/a7RR57qB
JLuA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1680670144;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=WgbfjZunoIV2a9rWcRLmr0fo5WboVjQkRutTEiMZ2D8=;
b=Wc4C9liIio/GCQFtAWOqvjY32XF1jhLpkAbwAL3RcLP8rVKyhEpH88JOQjMliVKw7U
OuJnYHsDZxyl1oilPVz4qzMoSvgDk47uywM2Y4VNNyIS56lWVLQirqoMlxD+gsZO8JbQ
HZnZug2UDW4WPbf4Eg5yo2w3eAh/sO7wERZR+Osdgzg/y9wBP+BlvTKZF4hM5gNz5wiy
oPbXFJdjXqK0NzH2DdsVHJBFKK1QidqCLU7FDFebC/rJpRpixApQ6DaBW5kgYcFxc0yY
HPgURDcUJ73pS0ydcfTtVHozfwSOO5lq4pvFyBrZYAftmFMHhztxuJVWSv0sIKc11wRM
RfCg==
X-Gm-Message-State: AAQBX9dU9kknX60jspJ4r916pAnM6JoRSmY5iog5NEdbWgxaQZdvYZmi
+3W3BvYs/oygibOWNiBoDZ+o+8ZMwg9JWEsERBU=
X-Google-Smtp-Source: AKy350Yjd0Hgk4Bgp0vzZaLg39Dfdr3Y0dUIkUNqZczeQwm5ITbA2aBXqTSqrXVBtqGxQQlYun/k4mkLfjPD1S05aTQ=
X-Received: by 2002:a50:f691:0:b0:500:5463:35de with SMTP id
d17-20020a50f691000000b00500546335demr442499edn.8.1680670144287; Tue, 04 Apr
2023 21:49:04 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a50:e8f:0:b0:203:36b1:875c with HTTP; Tue, 4 Apr 2023
21:49:03 -0700 (PDT)
Reply-To: emma.dankworth16@gmail.com
From: Mrs Emma Dankworth
Date: Tue, 4 Apr 2023 21:49:03 -0700
Message-ID:
Subject: Hello Dear
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 17.8
X-Spam_score_int: 178
X-Spam_bar: +++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Good Day, Please accept my apologies for sending you a surprise
letter. I am Mrs Emma Dankworth, an account Manager with an investment Bank
here in the United Kingdom-London. I have a very important business I [...]
Content analysis details: (17.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[smaiga034(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[emma.dankworth16(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[smaiga034(at)gmail.com]
2.5 HK_SCAM_N2 BODY: No description available.
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.52 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.52 listed in wl.mailspike.net]
0.0 SHARE_50_50 Share the money 50/50
0.0 T_SHARE_50_50 Share the money 50/50
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 HK_SCAM No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_MONEY_PERCENT X% of a lot of money for you
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Hello Dear
Good Day,
Please accept my apologies for sending you a surprise letter. I am Mrs
Emma Dankworth, an account Manager with an investment Bank here in the
United Kingdom-London. I have a very important business I want to
discuss with you. There is a draft account opened in my firm by a
long-time client of our bank. I have the opportunity of transferring
the left over fund (GBP=C2=A34,800,000.00 Four Million, Eight Hundred
Thousand British Pounds) belonging to one of our International
Customers who was killed on Feb. 24 during the Russia war against
Ukraine. And being single, he did not state any next of kin
Heir-apparent when the account was opened, although as her account
officer, he told me that he will later forward one of his relative=E2=80=99=
s
name as his next of kin Heir to the account which he did not fulfilled
before he met his death.
I want to invest these funds and introduce you to our bank for this
project as the next of kin since you have the same surname as the
deceased client and this will be executed under a legitimate agreement
that will protect us from any breach of the law. We will share the
fund 50% for you in your participation, 50% for me. If you are really
interested in my proposal, more details about the transfer of funds
will be sent to you.
Yours Sincerely,
Mrs Emma Dankworth
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments