Nigerian spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 31 Jan 2024 08:08:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rVCBi-00000000Nsm-450K
for dave@doctor.nl2k.ab.ca;
Wed, 31 Jan 2024 08:07:42 -0700
Resent-From: The Doctor
Resent-Date: Wed, 31 Jan 2024 08:07:42 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f46.google.com ([209.85.167.46]:54329)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rV7xG-00000000Fjn-1me4
for bin@nl2k.ab.ca;
Wed, 31 Jan 2024 03:36:33 -0700
Received: by mail-lf1-f46.google.com with SMTP id 2adb3069b0e04-51114557c77so3590475e87.0
for; Wed, 31 Jan 2024 02:34:36 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1706697270; x=1707302070; darn=nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=9ZMqdOpwuJy3H3NeqXvJvDffnVf/vMpHveFXbe4QM9c=;
b=QYnuwmWSdlF11L6zswJx0nFfuxhWUmkSvPoGjcjCt0QJRpT1zzDK+UgiDqx9vzHpci
PdK/D+eP+mgq/0W1dsZ0dOjQA0LiRZxt+XYTTNT38S6hhgWav0GJJbuQux2W9rfbPurz
5sdYJ6Wc2dHr4QDCn7I4U5PwUBqDIbIJm/+c2FPfXCq4MqNWYnvruA0YDCU6weyaQFHa
qJVNHRtLjKG80KyfXwwCv8TycUW7S02RB8wCGoRNGHWacsuZtkd9JMiTGkTRGt7LLit+
woC+Z3VzslzQX/81K+7KFcEYsLaETkjyMQIS2TsAmAFCcE76QKTu32GETzoZfElwu22m
ci2g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1706697270; x=1707302070;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=9ZMqdOpwuJy3H3NeqXvJvDffnVf/vMpHveFXbe4QM9c=;
b=iUJTvTJn/bakbj+rhTeIU/BIODG/J5hhm8UjtQ8pMNpqpm6PGQK1OllXsNehucdBww
GOylKHKDi55VICnXccokQeq0tFFe2CYPPiOrhjcsSvrCubkyeGAkuOlOZ0XKXazelgFa
PboZzd/JU+lJM/8jCF+jcSWvCrsDgnX2HNE6UJer+ZeYcdN1j5LOWR9+k5bCqCy8SvEr
s2HPFORzs5y9zGZr4PVlmNqXS0xRi69Tgm+69221vt6ZfZyrDnwsznzmqJ5qjJ0getyJ
6OJJ503YpMKOorG/yr2tAQ5hS1NbUqlJvWOa/lmJQjMUZBfg+Ux/j58xvcmyxHGVjG8C
5oCQ==
X-Gm-Message-State: AOJu0YwxdQc4TjdZ3vUqZNxuYa62yeXe69oNYSABdoW23JQNe2dfy/OX
3Dq3Ba7PxweOCEih42OVwuvugbafJC4vUc/4ibjZMKrkQZaCPH5CuSWYpUrLUx/RNBOz+uq94gj
oGQNnmrpkk9+O1IGbjSCSDeekfIn74AnKw1g26Psm
X-Google-Smtp-Source: AGHT+IHNxTwOCDnUE5cZBJeAxsgKOabtCwWpCUb2eR9l3MxEQJwrOfAl4BT7ywHi33kCAnfAVdKfpaiNc8xusa0R0mo=
X-Received: by 2002:a2e:978a:0:b0:2d0:66cd:8637 with SMTP id
y10-20020a2e978a000000b002d066cd8637mr864572lji.41.1706695792542; Wed, 31 Jan
2024 02:09:52 -0800 (PST)
MIME-Version: 1.0
Reply-To: dongood910@gmail.com
From: Jerome Powell
Date: Wed, 31 Jan 2024 02:10:12 -0800
Message-ID:
Subject: Central Bank of USA
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000074471d06103b144c"
Bcc: bin@nl2k.ab.ca
X-Spam_score: 10.0
X-Spam_score_int: 100
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- I am now in charge of your fund payment in my department
here in Central Bank of USA (CBN) and like i stated in my mail that your
name appear in our Central Computer here as a beneficiary who have not [...]
Content analysis details: (10.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.46 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.46 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[fredsameho(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[dongood910(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 MONEY_ATM_CARD Lots of money on an ATM card
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Central Bank of USA
X-Antivirus: AVG (VPS 240131-2, 1/31/2024), Inbound message
X-Antivirus-Status: Clean
--00000000000074471d06103b144c
Content-Type: text/plain; charset="UTF-8"
--
I am now in charge of your fund payment in my department here in
Central Bank of USA (CBN) and like i stated in my mail that your
name appear in our Central Computer here as a beneficiary who have not
receive his contract payment for long, Be informed that your fund
of USD $5000,Million Dollars has been approved by the (IMF) and the federal
government for payment and we have decided to convert your fund into
an (ATM CARD) which we will send to you in your country for the
withdrawal of your fund in any ATM machine in your country.
To make it easy for your payment in order to avoid many expenses in
receiving your funds, we have made every arrangement regarding your
payment through (ATM CARD) since last week Due to the instruction
given to us for your immediate payment.
I have to inform you again, That we are not playing over this, I know
my reason for the continuous sending of this notification to you, The
fact is that you can't seem to trust any one again over this payment
for what you have been in cantered in many Year/months ago, But i want
you to trust me, I cannot scam you for $50 It is for bank processing
of your ATM CARD, The fees of $50 is clearly written to you before, I
did not invent the bill to defraud you of $50 It is an official bank
ATM CARD processing fee, And the good part of this, Is that you will
never, Ever be disturbed again over any kind of payment, This is
final, And the forms from there becomes effective once we submit your
ATM CARD application processing fee and pay the form fee of $50 don't
want you to loose this ATM CARD this time,
Thank you and God bless you.
Name/ Jerome Powell
--00000000000074471d06103b144c
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
x">--
=3D"gmail_signature">
I am now in charge of your fund payment in my depa=
rtment here in
Central Bank of USA (CBN) and like i stated in my mail th=
at your
name appear in our Central Computer here as a beneficiary who ha=
ve not
receive his contract payment for long, Be informed that your fund=
of USD $5000,Million Dollars has been approved by the (IMF) and the fed=
eral
government for payment and we have decided to convert your fund int=
o
an (ATM CARD) which we will send to you in your country for the
wit=
hdrawal of your fund in any ATM machine in your country.
To make it =
easy for your payment in order to avoid many expenses in
receiving your =
funds, we have made every arrangement regarding your
payment through (AT=
M CARD) since last week Due to the instruction
given to us for your imme=
diate payment.
I have to inform you again, That we are not playing o=
ver this, I know
my reason for the continuous sending of this notificati=
on to you, The
fact is that you can't seem to trust any one again ov=
er this payment
for what you have been in cantered in many Year/months a=
go, But i want
you to trust me, I cannot scam you for $50 It is for bank=
processing
of your ATM CARD, The fees of $50 is clearly written to you =
before, I
did not invent the bill to defraud you of $50 It is an officia=
l bank
ATM CARD processing fee, And the good part of this, Is that you w=
ill
never, Ever be disturbed again over any kind of payment, This is
=
final, And the forms from there becomes effective once we submit your
AT=
M CARD application processing fee and pay the form fee of $50 don't
=
want you to loose this ATM CARD this time,
Thank you and God bless y=
ou.
Name/ Jerome Powell
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 31 Jan 2024 08:08:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rVCBi-00000000Nsm-450K
for dave@doctor.nl2k.ab.ca;
Wed, 31 Jan 2024 08:07:42 -0700
Resent-From: The Doctor
Resent-Date: Wed, 31 Jan 2024 08:07:42 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f46.google.com ([209.85.167.46]:54329)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rV7xG-00000000Fjn-1me4
for bin@nl2k.ab.ca;
Wed, 31 Jan 2024 03:36:33 -0700
Received: by mail-lf1-f46.google.com with SMTP id 2adb3069b0e04-51114557c77so3590475e87.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1706697270; x=1707302070; darn=nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=9ZMqdOpwuJy3H3NeqXvJvDffnVf/vMpHveFXbe4QM9c=;
b=QYnuwmWSdlF11L6zswJx0nFfuxhWUmkSvPoGjcjCt0QJRpT1zzDK+UgiDqx9vzHpci
PdK/D+eP+mgq/0W1dsZ0dOjQA0LiRZxt+XYTTNT38S6hhgWav0GJJbuQux2W9rfbPurz
5sdYJ6Wc2dHr4QDCn7I4U5PwUBqDIbIJm/+c2FPfXCq4MqNWYnvruA0YDCU6weyaQFHa
qJVNHRtLjKG80KyfXwwCv8TycUW7S02RB8wCGoRNGHWacsuZtkd9JMiTGkTRGt7LLit+
woC+Z3VzslzQX/81K+7KFcEYsLaETkjyMQIS2TsAmAFCcE76QKTu32GETzoZfElwu22m
ci2g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1706697270; x=1707302070;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=9ZMqdOpwuJy3H3NeqXvJvDffnVf/vMpHveFXbe4QM9c=;
b=iUJTvTJn/bakbj+rhTeIU/BIODG/J5hhm8UjtQ8pMNpqpm6PGQK1OllXsNehucdBww
GOylKHKDi55VICnXccokQeq0tFFe2CYPPiOrhjcsSvrCubkyeGAkuOlOZ0XKXazelgFa
PboZzd/JU+lJM/8jCF+jcSWvCrsDgnX2HNE6UJer+ZeYcdN1j5LOWR9+k5bCqCy8SvEr
s2HPFORzs5y9zGZr4PVlmNqXS0xRi69Tgm+69221vt6ZfZyrDnwsznzmqJ5qjJ0getyJ
6OJJ503YpMKOorG/yr2tAQ5hS1NbUqlJvWOa/lmJQjMUZBfg+Ux/j58xvcmyxHGVjG8C
5oCQ==
X-Gm-Message-State: AOJu0YwxdQc4TjdZ3vUqZNxuYa62yeXe69oNYSABdoW23JQNe2dfy/OX
3Dq3Ba7PxweOCEih42OVwuvugbafJC4vUc/4ibjZMKrkQZaCPH5CuSWYpUrLUx/RNBOz+uq94gj
oGQNnmrpkk9+O1IGbjSCSDeekfIn74AnKw1g26Psm
X-Google-Smtp-Source: AGHT+IHNxTwOCDnUE5cZBJeAxsgKOabtCwWpCUb2eR9l3MxEQJwrOfAl4BT7ywHi33kCAnfAVdKfpaiNc8xusa0R0mo=
X-Received: by 2002:a2e:978a:0:b0:2d0:66cd:8637 with SMTP id
y10-20020a2e978a000000b002d066cd8637mr864572lji.41.1706695792542; Wed, 31 Jan
2024 02:09:52 -0800 (PST)
MIME-Version: 1.0
Reply-To: dongood910@gmail.com
From: Jerome Powell
Date: Wed, 31 Jan 2024 02:10:12 -0800
Message-ID:
Subject: Central Bank of USA
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000074471d06103b144c"
Bcc: bin@nl2k.ab.ca
X-Spam_score: 10.0
X-Spam_score_int: 100
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- I am now in charge of your fund payment in my department
here in Central Bank of USA (CBN) and like i stated in my mail that your
name appear in our Central Computer here as a beneficiary who have not [...]
Content analysis details: (10.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.46 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.46 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[fredsameho(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[dongood910(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 MONEY_ATM_CARD Lots of money on an ATM card
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Central Bank of USA
X-Antivirus: AVG (VPS 240131-2, 1/31/2024), Inbound message
X-Antivirus-Status: Clean
--00000000000074471d06103b144c
Content-Type: text/plain; charset="UTF-8"
--
I am now in charge of your fund payment in my department here in
Central Bank of USA (CBN) and like i stated in my mail that your
name appear in our Central Computer here as a beneficiary who have not
receive his contract payment for long, Be informed that your fund
of USD $5000,Million Dollars has been approved by the (IMF) and the federal
government for payment and we have decided to convert your fund into
an (ATM CARD) which we will send to you in your country for the
withdrawal of your fund in any ATM machine in your country.
To make it easy for your payment in order to avoid many expenses in
receiving your funds, we have made every arrangement regarding your
payment through (ATM CARD) since last week Due to the instruction
given to us for your immediate payment.
I have to inform you again, That we are not playing over this, I know
my reason for the continuous sending of this notification to you, The
fact is that you can't seem to trust any one again over this payment
for what you have been in cantered in many Year/months ago, But i want
you to trust me, I cannot scam you for $50 It is for bank processing
of your ATM CARD, The fees of $50 is clearly written to you before, I
did not invent the bill to defraud you of $50 It is an official bank
ATM CARD processing fee, And the good part of this, Is that you will
never, Ever be disturbed again over any kind of payment, This is
final, And the forms from there becomes effective once we submit your
ATM CARD application processing fee and pay the form fee of $50 don't
want you to loose this ATM CARD this time,
Thank you and God bless you.
Name/ Jerome Powell
--00000000000074471d06103b144c
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
x">--
=3D"gmail_signature">
I am now in charge of your fund payment in my depa=
rtment here in
Central Bank of USA (CBN) and like i stated in my mail th=
at your
name appear in our Central Computer here as a beneficiary who ha=
ve not
receive his contract payment for long, Be informed that your fund=
of USD $5000,Million Dollars has been approved by the (IMF) and the fed=
eral
government for payment and we have decided to convert your fund int=
o
an (ATM CARD) which we will send to you in your country for the
wit=
hdrawal of your fund in any ATM machine in your country.
To make it =
easy for your payment in order to avoid many expenses in
receiving your =
funds, we have made every arrangement regarding your
payment through (AT=
M CARD) since last week Due to the instruction
given to us for your imme=
diate payment.
I have to inform you again, That we are not playing o=
ver this, I know
my reason for the continuous sending of this notificati=
on to you, The
fact is that you can't seem to trust any one again ov=
er this payment
for what you have been in cantered in many Year/months a=
go, But i want
you to trust me, I cannot scam you for $50 It is for bank=
processing
of your ATM CARD, The fees of $50 is clearly written to you =
before, I
did not invent the bill to defraud you of $50 It is an officia=
l bank
ATM CARD processing fee, And the good part of this, Is that you w=
ill
never, Ever be disturbed again over any kind of payment, This is
=
final, And the forms from there becomes effective once we submit your
AT=
M CARD application processing fee and pay the form fee of $50 don't
=
want you to loose this ATM CARD this time,
Thank you and God bless y=
ou.
Name/ Jerome Powell
--00000000000074471d06103b144c--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments