Nigerian Google Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 09 Oct 2023 07:59:06 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.1 (FreeBSD))
(envelope-from)
id 1qpqmQ-0005D2-1I
for dave@doctor.nl2k.ab.ca;
Mon, 09 Oct 2023 07:58:42 -0600
Resent-From: The Doctor
Resent-Date: Mon, 9 Oct 2023 07:58:42 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qt1-f196.google.com ([209.85.160.196]:45223)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96.1 (FreeBSD))
(envelope-from)
id 1qppS7-000E1V-22
for doctor@doctor.nl2k.ab.ca;
Mon, 09 Oct 2023 06:33:42 -0600
Received: by mail-qt1-f196.google.com with SMTP id d75a77b69052e-41983b83e53so30918931cf.2
for; Mon, 09 Oct 2023 05:31:41 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1696854695; x=1697459495; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=IVVI1ZXgxyX1lGhOfgcyCOsLxgdujnnLZ6ojui667Ss=;
b=c8XCYvAiGUPMWq1cQODytfrgwrRaswKqnNBG/bfzjx82yMgOx1FmAual/dW+OH/p9j
akWH9hsDiVHi0SSHZAsVUnXeLBNRANa19MCvOl3DZkWddNrkl5/tD8ksnGeSlPaesBth
xDeE5W8KSWt0SLbvDaeezoj2v971LUwpYhOU5Li+MAw1LSwTuNNgW3OLKutF5JRViQ7j
IjZy3FtL3bis3K78Kuf+Vqozq3D0n1lL04AWGP0HB4F7DlgVFCwR3VgyCan8dGFtlrse
LdUkRDe0wFYfZxUvcJRFNaedeCGIslOsSYqXrNjncXenELB2F+6OxMOmiBjL9vU2qdnD
0FAA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1696854695; x=1697459495;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=IVVI1ZXgxyX1lGhOfgcyCOsLxgdujnnLZ6ojui667Ss=;
b=T5FpkAPKBy7Q/Dv4SiDr+u59bvpxXer/CHpTj2m8cFAc+oWk30C6dmXjZG/J9KmWRN
EmWSdJYwl9EFtBjVup1qTO4JrjlxCNFul3fC4bWABVdSd+67+RbnkoH5+3tXldUuyvZz
j7cHEGrJOYiSwEyKXC2sNzUfAbmP7k1umus0FJa27uSMQPYgpiRBfgmifzr5wXXDUcIm
HEBOpRG7QQ7iOr+1QKzhVMtw388CqRSH+Pw5H2ovMBoYi5I0PRukUUKWoQ9UW0apbMT/
VdIvw7p0X9oYmRiv5EfAAC4BZqvKcrYZRIMcnZfr7YqisDgc7F0EoFppwJiHEeRetRxo
1OEQ==
X-Gm-Message-State: AOJu0YxGlxB+8IYAoUl71eCY/ZrOHMY4ZmDMn2moxQDRqOG8bLV1I7b/
0FFfITlJgKHOEw+MoAgfhjIPGLyWiCMqdCalIRk=
X-Google-Smtp-Source: AGHT+IGzkd5wCJ2GRdTGbwQ8hUadIRU2s4bzZJfm/M32qIUSJYOumjpGnhH9vE90ht2l4z/6TUvYH4XTTdvwBVqN658=
X-Received: by 2002:ac8:5809:0:b0:418:125b:2cfb with SMTP id
g9-20020ac85809000000b00418125b2cfbmr22057925qtg.3.1696854694657; Mon, 09 Oct
2023 05:31:34 -0700 (PDT)
MIME-Version: 1.0
From: Martins Ilo
Date: Mon, 9 Oct 2023 05:31:23 -0700
Message-ID:
Subject: Attn: The President/Ceo
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000004f866c060747c58c"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 9.5
X-Spam_score_int: 95
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: It is my pleasure to write you this mail for a mutual business
transaction. I am an accountant with the Nigerian National Petroleum Corporation
(NNPC). The Nigerian National Petroleum Corporation (NNPC) awarded a contract
to a German firm for the Rehabilitation and Maintenance of the Port Harcourt/
Kaduna refineries in Nigeria to the tune of $500m. B [...]
Content analysis details: (9.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.196 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[mrmrsilo22(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[mrmrsilo22(at)gmail.com]
2.6 HK_SCAM_N13 BODY: No description available.
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.196 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTTO_DEPT Claims Department
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
2.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Attn: The President/Ceo
--0000000000004f866c060747c58c
Content-Type: text/plain; charset="UTF-8"
It is my pleasure to write you this mail for a mutual business transaction.
I am an accountant with the Nigerian National Petroleum Corporation (NNPC).
The Nigerian National Petroleum Corporation (NNPC) awarded a contract to a
German firm for the Rehabilitation and Maintenance of the Port Harcourt/
Kaduna refineries in Nigeria to the tune of $500m. But the contract was
inflated to $650m by us in the contract award committee.
The German contractors have completed their contract and have been paid
their actual contract amount of the $500m, leaving the $150m over invoicing
in the NNPC's coffer with the central bank of Nigeria.
Presently, the contract award committee has been dissolved after completing
their assignment. Myself who is an employed officer with the NNPC is still
working and aware of this over invoiced fund.
Now, the NNPC has approved the payment of the $150m as the balance of the
contract value and authorized my office to contact the contractor for the
payment.
The German contractors have gone, I am looking for a reliable foreign
partner who I will process this payment with his name as the SUB-CONTRACTOR
to the German firm and transfer the $150m into his bank account, hence my
contacting you through this medium.
There is no risk whatsoever involved in this transaction as all measures
are in place for a hitch free transaction.
If you will be interested to work with me to execute this project, please
kindly get back to me through this email address for more details.
Thanking you in anticipation of your positive response.
Regards,
Martins Ilobaba.
--0000000000004f866c060747c58c
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
mail=3D"gmail_signature">
=3D"margin-bottom:0.0001pt;color:rgb(34,34,34);line-height:normal;backgroun=
d-image:initial;background-position:initial;background-repeat:initial">
n style=3D"font-family:Verdana,Arial,Helvetica,sans-serif;font-size:13.3333=
px">It is my pleasure to write you this mail for a mutual business transact=
ion.
Helvetica,sans-serif;font-size:13.3333px">
(34,34,34);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:13.3333=
px">I am an accountant with the Nigerian National Petroleum Corporation (NN=
PC).
elvetica,sans-serif;font-size:13.3333px">
34,34,34);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:13.3333p=
x">The Nigerian National Petroleum Corporation (NNPC)=C2=A0awarded a contra=
ct to a German firm for the Rehabilitation and Maintenance of the Port Harc=
ourt/ Kaduna refineries in Nigeria to the tune of $500m. But the contract w=
as inflated to $650m by us in the contract award committee.
tyle=3D"color:rgb(34,34,34);font-family:Verdana,Arial,Helvetica,sans-serif;=
font-size:13.3333px">
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 09 Oct 2023 07:59:06 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.1 (FreeBSD))
(envelope-from
id 1qpqmQ-0005D2-1I
for dave@doctor.nl2k.ab.ca;
Mon, 09 Oct 2023 07:58:42 -0600
Resent-From: The Doctor
Resent-Date: Mon, 9 Oct 2023 07:58:42 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qt1-f196.google.com ([209.85.160.196]:45223)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96.1 (FreeBSD))
(envelope-from
id 1qppS7-000E1V-22
for doctor@doctor.nl2k.ab.ca;
Mon, 09 Oct 2023 06:33:42 -0600
Received: by mail-qt1-f196.google.com with SMTP id d75a77b69052e-41983b83e53so30918931cf.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1696854695; x=1697459495; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=IVVI1ZXgxyX1lGhOfgcyCOsLxgdujnnLZ6ojui667Ss=;
b=c8XCYvAiGUPMWq1cQODytfrgwrRaswKqnNBG/bfzjx82yMgOx1FmAual/dW+OH/p9j
akWH9hsDiVHi0SSHZAsVUnXeLBNRANa19MCvOl3DZkWddNrkl5/tD8ksnGeSlPaesBth
xDeE5W8KSWt0SLbvDaeezoj2v971LUwpYhOU5Li+MAw1LSwTuNNgW3OLKutF5JRViQ7j
IjZy3FtL3bis3K78Kuf+Vqozq3D0n1lL04AWGP0HB4F7DlgVFCwR3VgyCan8dGFtlrse
LdUkRDe0wFYfZxUvcJRFNaedeCGIslOsSYqXrNjncXenELB2F+6OxMOmiBjL9vU2qdnD
0FAA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1696854695; x=1697459495;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=IVVI1ZXgxyX1lGhOfgcyCOsLxgdujnnLZ6ojui667Ss=;
b=T5FpkAPKBy7Q/Dv4SiDr+u59bvpxXer/CHpTj2m8cFAc+oWk30C6dmXjZG/J9KmWRN
EmWSdJYwl9EFtBjVup1qTO4JrjlxCNFul3fC4bWABVdSd+67+RbnkoH5+3tXldUuyvZz
j7cHEGrJOYiSwEyKXC2sNzUfAbmP7k1umus0FJa27uSMQPYgpiRBfgmifzr5wXXDUcIm
HEBOpRG7QQ7iOr+1QKzhVMtw388CqRSH+Pw5H2ovMBoYi5I0PRukUUKWoQ9UW0apbMT/
VdIvw7p0X9oYmRiv5EfAAC4BZqvKcrYZRIMcnZfr7YqisDgc7F0EoFppwJiHEeRetRxo
1OEQ==
X-Gm-Message-State: AOJu0YxGlxB+8IYAoUl71eCY/ZrOHMY4ZmDMn2moxQDRqOG8bLV1I7b/
0FFfITlJgKHOEw+MoAgfhjIPGLyWiCMqdCalIRk=
X-Google-Smtp-Source: AGHT+IGzkd5wCJ2GRdTGbwQ8hUadIRU2s4bzZJfm/M32qIUSJYOumjpGnhH9vE90ht2l4z/6TUvYH4XTTdvwBVqN658=
X-Received: by 2002:ac8:5809:0:b0:418:125b:2cfb with SMTP id
g9-20020ac85809000000b00418125b2cfbmr22057925qtg.3.1696854694657; Mon, 09 Oct
2023 05:31:34 -0700 (PDT)
MIME-Version: 1.0
From: Martins Ilo
Date: Mon, 9 Oct 2023 05:31:23 -0700
Message-ID:
Subject: Attn: The President/Ceo
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000004f866c060747c58c"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 9.5
X-Spam_score_int: 95
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: It is my pleasure to write you this mail for a mutual business
transaction. I am an accountant with the Nigerian National Petroleum Corporation
(NNPC). The Nigerian National Petroleum Corporation (NNPC) awarded a contract
to a German firm for the Rehabilitation and Maintenance of the Port Harcourt/
Kaduna refineries in Nigeria to the tune of $500m. B [...]
Content analysis details: (9.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.196 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[mrmrsilo22(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[mrmrsilo22(at)gmail.com]
2.6 HK_SCAM_N13 BODY: No description available.
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.196 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTTO_DEPT Claims Department
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
2.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Attn: The President/Ceo
--0000000000004f866c060747c58c
Content-Type: text/plain; charset="UTF-8"
It is my pleasure to write you this mail for a mutual business transaction.
I am an accountant with the Nigerian National Petroleum Corporation (NNPC).
The Nigerian National Petroleum Corporation (NNPC) awarded a contract to a
German firm for the Rehabilitation and Maintenance of the Port Harcourt/
Kaduna refineries in Nigeria to the tune of $500m. But the contract was
inflated to $650m by us in the contract award committee.
The German contractors have completed their contract and have been paid
their actual contract amount of the $500m, leaving the $150m over invoicing
in the NNPC's coffer with the central bank of Nigeria.
Presently, the contract award committee has been dissolved after completing
their assignment. Myself who is an employed officer with the NNPC is still
working and aware of this over invoiced fund.
Now, the NNPC has approved the payment of the $150m as the balance of the
contract value and authorized my office to contact the contractor for the
payment.
The German contractors have gone, I am looking for a reliable foreign
partner who I will process this payment with his name as the SUB-CONTRACTOR
to the German firm and transfer the $150m into his bank account, hence my
contacting you through this medium.
There is no risk whatsoever involved in this transaction as all measures
are in place for a hitch free transaction.
If you will be interested to work with me to execute this project, please
kindly get back to me through this email address for more details.
Thanking you in anticipation of your positive response.
Regards,
Martins Ilobaba.
--0000000000004f866c060747c58c
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
mail=3D"gmail_signature">
=3D"margin-bottom:0.0001pt;color:rgb(34,34,34);line-height:normal;backgroun=
d-image:initial;background-position:initial;background-repeat:initial">
n style=3D"font-family:Verdana,Arial,Helvetica,sans-serif;font-size:13.3333=
px">It is my pleasure to write you this mail for a mutual business transact=
ion.
Helvetica,sans-serif;font-size:13.3333px">
(34,34,34);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:13.3333=
px">I am an accountant with the Nigerian National Petroleum Corporation (NN=
PC).
elvetica,sans-serif;font-size:13.3333px">
34,34,34);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:13.3333p=
x">The Nigerian National Petroleum Corporation (NNPC)=C2=A0awarded a contra=
ct to a German firm for the Rehabilitation and Maintenance of the Port Harc=
ourt/ Kaduna refineries in Nigeria to the tune of $500m. But the contract w=
as inflated to $650m by us in the contract award committee.
tyle=3D"color:rgb(34,34,34);font-family:Verdana,Arial,Helvetica,sans-serif;=
font-size:13.3333px">
y:Verdana,Arial,Helvetica,sans-serif;font-size:13.3333px">The German contra=
ctors have completed their contract and have been paid their actual contrac=
t amount of the $500m, leaving the $150m over invoicing in the NNPC's c=
offer with the central bank of Nigeria.
,34,34);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:13.3333px"=
>
etica,sans-serif;font-size:13.3333px">Presently, the contract award committ=
ee has been dissolved after completing their assignment. Myself who is an e=
mployed officer with the NNPC is still working and aware of this over invoi=
ced fund.
ial,Helvetica,sans-serif;font-size:13.3333px">
:rgb(34,34,34);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:13.=
3333px">Now, the NNPC has approved the payment of the $150m as the balance =
of the contract value and authorized my office to contact the contractor fo=
r the payment.
na,Arial,Helvetica,sans-serif;font-size:13.3333px">
color:rgb(34,34,34);font-family:Verdana,Arial,Helvetica,sans-serif;font-siz=
e:13.3333px">The German contractors have gone, I am looking for a reliable =
foreign partner who I will process this payment with his name as the SUB-CO=
NTRACTOR to the German firm and transfer the $150m into his bank account, h=
ence my contacting you through this medium.
b(34,34,34);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:13.333=
3px">
Helvetica,sans-serif;font-size:13.3333px">There is no risk whatsoever invol=
ved in this transaction as all measures are in place for a hitch free trans=
action.
l,Helvetica,sans-serif;font-size:13.3333px">
gb(34,34,34);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:13.33=
33px">If you will be interested to work with me to execute this project, pl=
ease kindly get back to me through this email address for more details.
=
,sans-serif;font-size:13.3333px">
);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:13.3333px">Thank=
ing you in anticipation of your positive response.
olor:rgb(34,34,34);font-family:Verdana,Arial,Helvetica,sans-serif;font-size=
:13.3333px">
,Arial,Helvetica,sans-serif;font-size:13.3333px">Regards,
=3D"color:rgb(34,34,34);font-family:Verdana,Arial,Helvetica,sans-serif;font=
-size:13.3333px">
=3D"ltr">
);font-family:Verdana,Arial,Helvetica,sans-serif;font-size:13.3333px">
style=3D"font-family:Arial,Helvetica,sans-serif;font-size:small">Martins I=
lobaba.
--0000000000004f866c060747c58c--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments