Nigerian spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 06 Nov 2023 08:28:01 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.2 (FreeBSD))
(envelope-from)
id 1r01W8-000IVm-1j
for dave@doctor.nl2k.ab.ca;
Mon, 06 Nov 2023 08:27:56 -0700
Resent-From: The Doctor
Resent-Date: Mon, 6 Nov 2023 08:27:56 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wm1-f49.google.com ([209.85.128.49]:57731)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96.2 (FreeBSD))
(envelope-from)
id 1qzvXc-000BnH-1I
for doctor@mail.nl2k.ab.ca;
Mon, 06 Nov 2023 02:05:10 -0700
Received: by mail-wm1-f49.google.com with SMTP id 5b1f17b1804b1-407da05f05aso29705085e9.3
for; Mon, 06 Nov 2023 01:03:06 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1699261379; x=1699866179; darn=mail.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=dNElwFNOmwYqVJEZ91RuoTM26oHJlDMNwUzm+J5yNrk=;
b=gxewbE8A2yWX+D3qT2AguWnRZU46Gwz7nVtWs4SxCbbYfu0MDXdV9SLZdVRefBQmtK
f9BskrYbk3IRtLE3TnhfNySxsdNbsqSPbVFnt429p35Wto1aCIWeAOBf5oJ0WlF9P8PZ
zdWmT1ncJeJeywCgw+CZ904Ravq72lACC60pjuocmDG/ft4elEvqtx7KL5KxgmUsqayX
qAouT3f5P+Ss6waqpCrdgMMB6TJwUNmypt/fKtL00vyjGOiEyYv5ody66zihaqUFfMSJ
T0MpxFDMnFxIBvAeG9BhLcV5AVaKJLTYnVi+BGx5TZgPHMrZ68YKNycToxJPwUSVv6Mw
ckOQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1699261379; x=1699866179;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=dNElwFNOmwYqVJEZ91RuoTM26oHJlDMNwUzm+J5yNrk=;
b=vXa/MGlzPp88qn51eq+D2XUO0969NwZ+XBmVDAluuoJ215kxDKiDGOEma3ID8QOAa7
zxyb2fk4w/x8i8BP9d/b0qakz0J6o4W979f09TiVs57gfj5+q2v6pswiYbhRri8vT926
QqBjjx4QkEyWdDKY3lHnJu4oTF1exdXrqDtVJQ0u9RoRyI7XZca4TwcN9QF3P6lKAULK
6kXQhGNOVQb58RURC9SPEJdmRrHLFMlvI1icIOlr4RnZLtycA4G0QVqqXZygqcXVItYH
ehAbqxjsZBR47bSc3IJYlk3XzKmmthlZ6iKwRbaUuDuWiqCQb+kVga0kjas7Iy9WomwB
Mu7Q==
X-Gm-Message-State: AOJu0YxYxMEZIaMgLPkJKu2s6j09DN7Pq8GU6U13dPNRpQ6p+xQoxxHH
z8BA9oy1jgEGSoiiO63MqRRHQSOaV73aOU3Eh6g=
X-Google-Smtp-Source: AGHT+IEDS52jLzdIWUbSUmicED+712C26Da40j7Bc3Qmpw8wAwmetwL21lkNUlwQkhiCDK8fuyEsUlkJPqnZMSjlmJ8=
X-Received: by 2002:a05:600c:4f92:b0:402:f55c:faee with SMTP id
n18-20020a05600c4f9200b00402f55cfaeemr22830828wmq.26.1699261378917; Mon, 06
Nov 2023 01:02:58 -0800 (PST)
MIME-Version: 1.0
Reply-To: k477wills@yahoo.com
From: Kelvin Williams
Date: Mon, 6 Nov 2023 09:02:47 +0000
Message-ID:
Subject: Hello
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000defd600609781ee6"
Bcc: doctor@mail.nl2k.ab.ca
X-Spam_score: 14.0
X-Spam_score_int: 140
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear, Greetings, to you. I have come across your name and
contact as I search for a very good partner. Briefly I will explain a business
to you and if it would be to your interest, then we can move ahead to effectively
build this business relationship.
Content analysis details: (14.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.49 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.49 listed in wl.mailspike.net]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[lukstev2018(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[lukstev2018(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
2.6 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 MONEY_ATM_CARD Lots of money on an ATM card
0.2 XFER_LOTSA_MONEY Transfer a lot of money
2.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Hello
X-Antivirus: AVG (VPS 231106-0, 11/5/2023), Inbound message
X-Antivirus-Status: Clean
--000000000000defd600609781ee6
Content-Type: text/plain; charset="UTF-8"
Dear,
Greetings, to you. I have come across your name and contact as I search for
a very good partner.
Briefly I will explain a business to you and if it would be to your
interest, then we can move ahead to effectively build this business
relationship.
I have inherited the sum of 5 million dollars from my late father. The
funds had been with a bank here in my country.
As a result of some agreement clause, they could not release the funds to
me here locally.
In one occasion I went to the bank, a director of the bank called me and
explained to me that even if I want to transfer the funds out to the
account of a foreign partner, that it would take much time, lawyers and
many expenses. He explained to me that the rigors are so much and most
foreign partners might not be interested to involve in such expenditure
because of the fear of scam.
He advised me that,If I can get a foreign partner but instead of
transferring the funds to the account of the foreign partner, the bank will
offer an ATM card to my partner.
The ATM card is a PREMIUM PLATINUM CARD and this would allow us to make
withdrawals of the fund in your country to the tune of 50,000-100,000
dollars per day.
He explained to me that the card is good and would be sent to the contact
of my foreign partner by DHL or FEDEX.
If you are interested to partner with me, please reach back to me through
for details and we can also discuss my investment plans.
Kind Regards,
Ken Williams.
--000000000000defd600609781ee6
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--000000000000defd600609781ee6--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 06 Nov 2023 08:28:01 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.2 (FreeBSD))
(envelope-from
id 1r01W8-000IVm-1j
for dave@doctor.nl2k.ab.ca;
Mon, 06 Nov 2023 08:27:56 -0700
Resent-From: The Doctor
Resent-Date: Mon, 6 Nov 2023 08:27:56 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wm1-f49.google.com ([209.85.128.49]:57731)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96.2 (FreeBSD))
(envelope-from
id 1qzvXc-000BnH-1I
for doctor@mail.nl2k.ab.ca;
Mon, 06 Nov 2023 02:05:10 -0700
Received: by mail-wm1-f49.google.com with SMTP id 5b1f17b1804b1-407da05f05aso29705085e9.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1699261379; x=1699866179; darn=mail.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=dNElwFNOmwYqVJEZ91RuoTM26oHJlDMNwUzm+J5yNrk=;
b=gxewbE8A2yWX+D3qT2AguWnRZU46Gwz7nVtWs4SxCbbYfu0MDXdV9SLZdVRefBQmtK
f9BskrYbk3IRtLE3TnhfNySxsdNbsqSPbVFnt429p35Wto1aCIWeAOBf5oJ0WlF9P8PZ
zdWmT1ncJeJeywCgw+CZ904Ravq72lACC60pjuocmDG/ft4elEvqtx7KL5KxgmUsqayX
qAouT3f5P+Ss6waqpCrdgMMB6TJwUNmypt/fKtL00vyjGOiEyYv5ody66zihaqUFfMSJ
T0MpxFDMnFxIBvAeG9BhLcV5AVaKJLTYnVi+BGx5TZgPHMrZ68YKNycToxJPwUSVv6Mw
ckOQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1699261379; x=1699866179;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=dNElwFNOmwYqVJEZ91RuoTM26oHJlDMNwUzm+J5yNrk=;
b=vXa/MGlzPp88qn51eq+D2XUO0969NwZ+XBmVDAluuoJ215kxDKiDGOEma3ID8QOAa7
zxyb2fk4w/x8i8BP9d/b0qakz0J6o4W979f09TiVs57gfj5+q2v6pswiYbhRri8vT926
QqBjjx4QkEyWdDKY3lHnJu4oTF1exdXrqDtVJQ0u9RoRyI7XZca4TwcN9QF3P6lKAULK
6kXQhGNOVQb58RURC9SPEJdmRrHLFMlvI1icIOlr4RnZLtycA4G0QVqqXZygqcXVItYH
ehAbqxjsZBR47bSc3IJYlk3XzKmmthlZ6iKwRbaUuDuWiqCQb+kVga0kjas7Iy9WomwB
Mu7Q==
X-Gm-Message-State: AOJu0YxYxMEZIaMgLPkJKu2s6j09DN7Pq8GU6U13dPNRpQ6p+xQoxxHH
z8BA9oy1jgEGSoiiO63MqRRHQSOaV73aOU3Eh6g=
X-Google-Smtp-Source: AGHT+IEDS52jLzdIWUbSUmicED+712C26Da40j7Bc3Qmpw8wAwmetwL21lkNUlwQkhiCDK8fuyEsUlkJPqnZMSjlmJ8=
X-Received: by 2002:a05:600c:4f92:b0:402:f55c:faee with SMTP id
n18-20020a05600c4f9200b00402f55cfaeemr22830828wmq.26.1699261378917; Mon, 06
Nov 2023 01:02:58 -0800 (PST)
MIME-Version: 1.0
Reply-To: k477wills@yahoo.com
From: Kelvin Williams
Date: Mon, 6 Nov 2023 09:02:47 +0000
Message-ID:
Subject: Hello
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000defd600609781ee6"
Bcc: doctor@mail.nl2k.ab.ca
X-Spam_score: 14.0
X-Spam_score_int: 140
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear, Greetings, to you. I have come across your name and
contact as I search for a very good partner. Briefly I will explain a business
to you and if it would be to your interest, then we can move ahead to effectively
build this business relationship.
Content analysis details: (14.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.49 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.49 listed in wl.mailspike.net]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[lukstev2018(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[lukstev2018(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
2.6 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 MONEY_ATM_CARD Lots of money on an ATM card
0.2 XFER_LOTSA_MONEY Transfer a lot of money
2.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Hello
X-Antivirus: AVG (VPS 231106-0, 11/5/2023), Inbound message
X-Antivirus-Status: Clean
--000000000000defd600609781ee6
Content-Type: text/plain; charset="UTF-8"
Dear,
Greetings, to you. I have come across your name and contact as I search for
a very good partner.
Briefly I will explain a business to you and if it would be to your
interest, then we can move ahead to effectively build this business
relationship.
I have inherited the sum of 5 million dollars from my late father. The
funds had been with a bank here in my country.
As a result of some agreement clause, they could not release the funds to
me here locally.
In one occasion I went to the bank, a director of the bank called me and
explained to me that even if I want to transfer the funds out to the
account of a foreign partner, that it would take much time, lawyers and
many expenses. He explained to me that the rigors are so much and most
foreign partners might not be interested to involve in such expenditure
because of the fear of scam.
He advised me that,If I can get a foreign partner but instead of
transferring the funds to the account of the foreign partner, the bank will
offer an ATM card to my partner.
The ATM card is a PREMIUM PLATINUM CARD and this would allow us to make
withdrawals of the fund in your country to the tune of 50,000-100,000
dollars per day.
He explained to me that the card is good and would be sent to the contact
of my foreign partner by DHL or FEDEX.
If you are interested to partner with me, please reach back to me through
for details and we can also discuss my investment plans.
Kind Regards,
Ken Williams.
--000000000000defd600609781ee6
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
=C2=A0Dear,
=C2=A0
Greetings, to you. I have come ac=
ross your name and contact as I search for a very good partner.
=C2=A0
r>Briefly I will explain a business to you and if it would be to your inter=
est, then we can move ahead to effectively build this business relationship=
.
=C2=A0
I have inherited the sum of 5 million dollars from my late f=
ather. The funds had been with a bank here in my country.
=C2=A0
As a=
result of some agreement clause, they could not release the funds to me he=
re locally.
=C2=A0
In one occasion I went to the bank, a director of =
the bank called me and explained to me that even if I want to transfer the =
funds out to the account of a foreign partner, that it would take much time=
, lawyers and =C2=A0many expenses. He explained to me that the rigors are s=
o much and most foreign partners might not be interested to involve in such=
expenditure because of the fear of scam.
=C2=A0
He advised me that,I=
f I can get a foreign partner but instead of transferring the funds to the =
account of the foreign partner, the bank will offer an ATM card to my partn=
er.
=C2=A0
The ATM card is a PREMIUM PLATINUM CARD and this would all=
ow us to make withdrawals of the fund in your country to the tune of 50,000=
-100,000 dollars per day.
=C2=A0
He explained to me that the card is =
good and would be sent to the contact of my foreign partner by DHL or FEDEX=
.
=C2=A0
If you are interested to partner with me, please reach back =
to me through for details and we can also discuss my investment plans.
=
=C2=A0
Kind Regards,
Ken Williams.
=C2=A0
Greetings, to you. I have come ac=
ross your name and contact as I search for a very good partner.
=C2=A0
r>Briefly I will explain a business to you and if it would be to your inter=
est, then we can move ahead to effectively build this business relationship=
.
=C2=A0
I have inherited the sum of 5 million dollars from my late f=
ather. The funds had been with a bank here in my country.
=C2=A0
As a=
result of some agreement clause, they could not release the funds to me he=
re locally.
=C2=A0
In one occasion I went to the bank, a director of =
the bank called me and explained to me that even if I want to transfer the =
funds out to the account of a foreign partner, that it would take much time=
, lawyers and =C2=A0many expenses. He explained to me that the rigors are s=
o much and most foreign partners might not be interested to involve in such=
expenditure because of the fear of scam.
=C2=A0
He advised me that,I=
f I can get a foreign partner but instead of transferring the funds to the =
account of the foreign partner, the bank will offer an ATM card to my partn=
er.
=C2=A0
The ATM card is a PREMIUM PLATINUM CARD and this would all=
ow us to make withdrawals of the fund in your country to the tune of 50,000=
-100,000 dollars per day.
=C2=A0
He explained to me that the card is =
good and would be sent to the contact of my foreign partner by DHL or FEDEX=
.
=C2=A0
If you are interested to partner with me, please reach back =
to me through for details and we can also discuss my investment plans.
=
=C2=A0
Kind Regards,
Ken Williams.
--000000000000defd600609781ee6--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments