Nigerian spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 12 Nov 2023 05:34:01 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))
(envelope-from)
id 1r29Us-000000001LH-3qgQ
for dave@doctor.nl2k.ab.ca;
Sun, 12 Nov 2023 05:23:26 -0700
Resent-From: The Doctor
Resent-Date: Sun, 12 Nov 2023 05:23:26 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f171.google.com ([209.85.214.171]:49619)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97 (FreeBSD))
(envelope-from)
id 1r26lI-00000000CQT-2DMu
for root@doctor.nl2k.ab.ca;
Sun, 12 Nov 2023 02:28:16 -0700
Received: by mail-pl1-f171.google.com with SMTP id d9443c01a7336-1cc3bb32b5dso30375545ad.3
for; Sun, 12 Nov 2023 01:26:21 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1699781176; x=1700385976; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=lB2sXX8UK/rjEiUcl7Ts7MrCsg1bZ+zv/7zNmt/vJ98=;
b=eK9j579pvdQaXNuRU99YySLZIfenlHsXn9iYWs2sraiJRjsCyp4d27xq+aNbqc7Wpc
31AcIq7T3Qv9Hf5z9Um2uwImfiSoutiuWCjCXfRsBvkMrIO3muBmthSrULAu1DGbosyO
2d8ui5a3u/RRf9qyaN0VG5pL1dbpbqh6dvnZ9NjqIGyRBumTndA6R6RYAHp9gq/jrit+
kw+5u03o0tI0fWtpTMGq1vxYdzKOn3AJNsqJKdMWCV+6o6yMXmH4wQUIPo8u70sm4KCx
TsvZ+OuXJQvGQvvIZUUBcM7utxqo+SR2S4zCumRHRlYgcUkC4lHaQEa4KtZ4CwiWPPkz
ypZQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1699781176; x=1700385976;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=lB2sXX8UK/rjEiUcl7Ts7MrCsg1bZ+zv/7zNmt/vJ98=;
b=N31o9xk3FmwLKHeeR1skSfzBnyIiHuTEvzjw7anUjZj5VFLwi3cN0jCfCtrCcccA5Z
7NmyQe5Aieb+RQoO/l+68zJXYeBbweaSIPDnlhDnD4T0URV6gtS4smVkw0Dx/f0R0dVa
5xfp1FcCE3X+Re4BIEBTrsCONUggSdFzHQtuazAbipsq7mpfOwO88Q42vtBaMJBoYhYG
wfUlEvVAC5km4CE+LOmydgME4s670Wq4FISw6FcGTjCpcAOgi7Ho5YITTPYBRxJjr/fF
oC2n2ZtQoIsxJ23Lgvzrg/u1htJXYxlxdKoRrgmf1XeBEIPDpMdSFqnzk9CpbQ9CgeT4
BUwg==
X-Gm-Message-State: AOJu0YxSTbxxW8ksmjdaaoHVSY2bqLLqQV4YPvh7OHIqTN4tJs0NY/Ne
YUzXIilk6WxlDek1CEyQ10xhqBV4It4GnnyurPQ=
X-Google-Smtp-Source: AGHT+IEWRN658QXiPvJhso4OiBrfIdtd5dC3zKCgGSta1z+nUMK4EfCbDzj78iV8dbXTB6NJXYqoPA31OYhepLMcxoY=
X-Received: by 2002:a17:90b:1a92:b0:27d:f711:112e with SMTP id
ng18-20020a17090b1a9200b0027df711112emr4638633pjb.45.1699781175662; Sun, 12
Nov 2023 01:26:15 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a17:522:9749:b0:533:8f68:2c73 with HTTP; Sun, 12 Nov 2023
01:26:14 -0800 (PST)
Reply-To: k477wills@yahoo.com
From: Kelvin Williams
Date: Sun, 12 Nov 2023 09:26:14 +0000
Message-ID:
Subject: Hello
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: root@doctor.nl2k.ab.ca
X-Spam_score: 13.1
X-Spam_score_int: 131
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear, Greetings, to you. I have come across your name and
contact as I search for a very good partner. Briefly I will explain a business
to you and if it would be to your interest, then we can move ahead to effectively
build this business relationship.
Content analysis details: (13.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.214.171 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[kw92011320(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[kw92011320(at)gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.214.171 listed in wl.mailspike.net]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.8 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 XFER_LOTSA_MONEY Transfer a lot of money
2.6 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.5 MONEY_ATM_CARD Lots of money on an ATM card
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Hello
X-Antivirus: AVG (VPS 231112-0, 11/11/2023), Inbound message
X-Antivirus-Status: Clean
Dear,
Greetings, to you. I have come across your name and contact as I
search for a very good partner.
Briefly I will explain a business to you and if it would be to your
interest, then we can move ahead to effectively build this business
relationship.
I have inherited the sum of 5 million dollars from my late father. The
funds had been with a bank here in my country.
As a result of some agreement clause, they could not release the funds
to me here locally.
In one occasion I went to the bank, a director of the bank called me
and explained to me that even if I want to transfer the funds out to
the account of a foreign partner, that it would take much time,
lawyers and many expenses. He explained to me that the rigors are so
much and most foreign partners might not be interested to involve in
such expenditure because of the fear of scam.
He advised me that,If I can get a foreign partner but instead of
transferring the funds to the account of the foreign partner, the bank
will offer an ATM card to my partner.
The ATM card is a PREMIUM PLATINUM CARD and this would allow us to
make withdrawals of the fund in your country to the tune of
50,000-100,000 dollars per day.
He explained to me that the card is good and would be sent to the
contact of my foreign partner by DHL or FEDEX.
If you are interested to partner with me, please reach back to me
through for details and we can also discuss my investment plans.
Kind Regards,
Ken Williams.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 12 Nov 2023 05:34:01 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))
(envelope-from
id 1r29Us-000000001LH-3qgQ
for dave@doctor.nl2k.ab.ca;
Sun, 12 Nov 2023 05:23:26 -0700
Resent-From: The Doctor
Resent-Date: Sun, 12 Nov 2023 05:23:26 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f171.google.com ([209.85.214.171]:49619)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97 (FreeBSD))
(envelope-from
id 1r26lI-00000000CQT-2DMu
for root@doctor.nl2k.ab.ca;
Sun, 12 Nov 2023 02:28:16 -0700
Received: by mail-pl1-f171.google.com with SMTP id d9443c01a7336-1cc3bb32b5dso30375545ad.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1699781176; x=1700385976; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=lB2sXX8UK/rjEiUcl7Ts7MrCsg1bZ+zv/7zNmt/vJ98=;
b=eK9j579pvdQaXNuRU99YySLZIfenlHsXn9iYWs2sraiJRjsCyp4d27xq+aNbqc7Wpc
31AcIq7T3Qv9Hf5z9Um2uwImfiSoutiuWCjCXfRsBvkMrIO3muBmthSrULAu1DGbosyO
2d8ui5a3u/RRf9qyaN0VG5pL1dbpbqh6dvnZ9NjqIGyRBumTndA6R6RYAHp9gq/jrit+
kw+5u03o0tI0fWtpTMGq1vxYdzKOn3AJNsqJKdMWCV+6o6yMXmH4wQUIPo8u70sm4KCx
TsvZ+OuXJQvGQvvIZUUBcM7utxqo+SR2S4zCumRHRlYgcUkC4lHaQEa4KtZ4CwiWPPkz
ypZQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1699781176; x=1700385976;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=lB2sXX8UK/rjEiUcl7Ts7MrCsg1bZ+zv/7zNmt/vJ98=;
b=N31o9xk3FmwLKHeeR1skSfzBnyIiHuTEvzjw7anUjZj5VFLwi3cN0jCfCtrCcccA5Z
7NmyQe5Aieb+RQoO/l+68zJXYeBbweaSIPDnlhDnD4T0URV6gtS4smVkw0Dx/f0R0dVa
5xfp1FcCE3X+Re4BIEBTrsCONUggSdFzHQtuazAbipsq7mpfOwO88Q42vtBaMJBoYhYG
wfUlEvVAC5km4CE+LOmydgME4s670Wq4FISw6FcGTjCpcAOgi7Ho5YITTPYBRxJjr/fF
oC2n2ZtQoIsxJ23Lgvzrg/u1htJXYxlxdKoRrgmf1XeBEIPDpMdSFqnzk9CpbQ9CgeT4
BUwg==
X-Gm-Message-State: AOJu0YxSTbxxW8ksmjdaaoHVSY2bqLLqQV4YPvh7OHIqTN4tJs0NY/Ne
YUzXIilk6WxlDek1CEyQ10xhqBV4It4GnnyurPQ=
X-Google-Smtp-Source: AGHT+IEWRN658QXiPvJhso4OiBrfIdtd5dC3zKCgGSta1z+nUMK4EfCbDzj78iV8dbXTB6NJXYqoPA31OYhepLMcxoY=
X-Received: by 2002:a17:90b:1a92:b0:27d:f711:112e with SMTP id
ng18-20020a17090b1a9200b0027df711112emr4638633pjb.45.1699781175662; Sun, 12
Nov 2023 01:26:15 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a17:522:9749:b0:533:8f68:2c73 with HTTP; Sun, 12 Nov 2023
01:26:14 -0800 (PST)
Reply-To: k477wills@yahoo.com
From: Kelvin Williams
Date: Sun, 12 Nov 2023 09:26:14 +0000
Message-ID:
Subject: Hello
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: root@doctor.nl2k.ab.ca
X-Spam_score: 13.1
X-Spam_score_int: 131
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear, Greetings, to you. I have come across your name and
contact as I search for a very good partner. Briefly I will explain a business
to you and if it would be to your interest, then we can move ahead to effectively
build this business relationship.
Content analysis details: (13.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.214.171 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[kw92011320(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[kw92011320(at)gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.214.171 listed in wl.mailspike.net]
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.8 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 XFER_LOTSA_MONEY Transfer a lot of money
2.6 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.5 MONEY_ATM_CARD Lots of money on an ATM card
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Hello
X-Antivirus: AVG (VPS 231112-0, 11/11/2023), Inbound message
X-Antivirus-Status: Clean
Dear,
Greetings, to you. I have come across your name and contact as I
search for a very good partner.
Briefly I will explain a business to you and if it would be to your
interest, then we can move ahead to effectively build this business
relationship.
I have inherited the sum of 5 million dollars from my late father. The
funds had been with a bank here in my country.
As a result of some agreement clause, they could not release the funds
to me here locally.
In one occasion I went to the bank, a director of the bank called me
and explained to me that even if I want to transfer the funds out to
the account of a foreign partner, that it would take much time,
lawyers and many expenses. He explained to me that the rigors are so
much and most foreign partners might not be interested to involve in
such expenditure because of the fear of scam.
He advised me that,If I can get a foreign partner but instead of
transferring the funds to the account of the foreign partner, the bank
will offer an ATM card to my partner.
The ATM card is a PREMIUM PLATINUM CARD and this would allow us to
make withdrawals of the fund in your country to the tune of
50,000-100,000 dollars per day.
He explained to me that the card is good and would be sent to the
contact of my foreign partner by DHL or FEDEX.
If you are interested to partner with me, please reach back to me
through for details and we can also discuss my investment plans.
Kind Regards,
Ken Williams.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments