Beneficiary fund spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 20 Oct 2022 17:17:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1olelu-0006W2-3z
for dave@doctor.nl2k.ab.ca;
Thu, 20 Oct 2022 17:16:18 -0600
Resent-From: The Doctor
Resent-Date: Thu, 20 Oct 2022 17:16:18 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wr1-f45.google.com ([209.85.221.45]:34616)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oleAA-000P1l-28
for root@doctor.nl2k.ab.ca;
Thu, 20 Oct 2022 16:37:22 -0600
Received: by mail-wr1-f45.google.com with SMTP id b4so1877475wrs.1
for; Thu, 20 Oct 2022 15:34:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:from:to:cc:subject:date:message-id:reply-to;
bh=voEKvenxqrCxC466vpIalXmplYj+ewNqAkPNwaj95WM=;
b=gAl6U0TUvIISAWZUfveSGuC/txTKw6lnYJxrAH22D5j+ANq3epoTPn0yPyZkNdxgvb
kSUzcBm70mNelZnBX1hUIw1+CzcngIkX15DDx3wfimBovxWQpiV+U5CrnRXyab8mQM66
29ci4gKnj6JZl+Kc5xbaQdYVt6gd/03cN9XxB3hParD33Zrl166V9aD5ylRdnQgm5z4W
ugYEjqMZKqs/HimoK61J0wBAxUs+UYQsXD3jngWOUXPTqq8B1IISeWG958CcXrwO8IGX
Ge5PiG5rWRm3u439HMwGlYSHKlMUhp5dqelNc/HRKKaJu17W7wxYzfjjz6PnwyKv5A0T
F71Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=voEKvenxqrCxC466vpIalXmplYj+ewNqAkPNwaj95WM=;
b=aSJYzzLio9DuBVMnBR7JxGSqQMMvIxZEnqZHG38xhTuNitt5ZmOYrK2IPHAaN7Hd4e
0+ui9FYKaR+Ww9vcBDu/aA3Ax2NAHlse0LTxl7bKqqOdmOudwEG8dLMT9zTTuI3X4AVF
p5ba9fzjckS7eo+nyMv12JySUYoBCXB2If5AtIxSRV/pv2bYR+8BQjD0FXkPj8SIffhZ
GAxz7PUx6YXzKtN4ipUAYwcHGeFfrtdZ8BUECxHT+EJDTmyA0ntfgWPpwCfZLREhXv61
TPdcAffuP35CiLW1laQPp04cSGeiAcYiTvS1FtqVPK0wMa7y5iJQhslGhUvZMeO6ylm4
Khtw==
X-Gm-Message-State: ACrzQf0kAQYBp1ly4PFYo9KtTB5tyAeYSyaCc84M2wSpXNbqA1QUfSjM
E0aVS4bUQYuyjYn6OJdOkmwuY7l3dEdKeVYx40A=
X-Google-Smtp-Source: AMsMyM77rfRoqDValYHF49mdRc4LmcErgR8Hho3A9J4lW1cIhDvzKEHXUDdc19vI+ZJkeMRmqZ1s5L2DsuhbWBwsM0M=
X-Received: by 2002:adf:d4cb:0:b0:22e:489d:e0e3 with SMTP id
w11-20020adfd4cb000000b0022e489de0e3mr10594182wrk.653.1666305267611; Thu, 20
Oct 2022 15:34:27 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a5d:6c61:0:0:0:0:0 with HTTP; Thu, 20 Oct 2022 15:34:26
-0700 (PDT)
Reply-To: freservebank748@gmail.com
From: Mack William UN
Date: Fri, 21 Oct 2022 04:04:26 +0530
Message-ID:
Subject: Hello dear Fund Beneficiary
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: root@doctor.nl2k.ab.ca
X-Spam_score: 25.2
X-Spam_score_int: 252
X-Spam_bar: +++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Welcome To Federal Reserve Bank Of Cleveland Federal Reserve
Bank® Notification Of Your Compensation Funds Your payment files from three
(3) different banks, Natwest Bank of London, Central Bank of Nigeria and
Bank of America was compiled and submitted to my desk this morning for review.
The total sum owed [...]
Content analysis details: (25.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.221.45 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[freservebank748[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[officef661[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[officef661[at]gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.5 HK_SCAM_N8 BODY: No description available.
0.8 HK_SCAM No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.0 XFER_LOTSA_MONEY Transfer a lot of money
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of
money
2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Hello dear Fund Beneficiary
Welcome To Federal Reserve Bank Of Cleveland
Federal Reserve Bank=C2=AE Notification Of Your Compensation Funds
Your payment files from three (3) different banks, Natwest Bank of
London, Central Bank of Nigeria and Bank of America was compiled and
submitted to my desk this morning for review. The total sum owed to you
by the 3 banks mentioned above was sum up to the tune of
US$15,500,000.00 (Fifteen Million Five Hundred Thousand United States
Dollars).
Now the fund has been totally lodged in one particular Escrow account
(non deductible) here in the Federal Reserve Bank New York on your name,
while waiting for accreditation to your personal bank account in any
part of the world.
Below are the information needed for now for your transfer.
1. Personal Details:
Full Name:
Current Address:
Age/Gender:
Occupation:
Direct Mobile Number:
Passport Copy, ID card or DL:
2. Banking Details:
Bank Name:
Bank Address:
Account Name
Account Number:
Routing Number:
Swift Code:
Note: If you prefer to receive your funds in form of a Visa Card, we
could load and ship your Visa Card to your address which will permit you
a daily withdrawal limit of US$3000 or write a draft check which can be
deposited in any bank and send to you.
In anticipating for your urgent cooperation
Yours sincerely,
JEROME POWELL
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 20 Oct 2022 17:17:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1olelu-0006W2-3z
for dave@doctor.nl2k.ab.ca;
Thu, 20 Oct 2022 17:16:18 -0600
Resent-From: The Doctor
Resent-Date: Thu, 20 Oct 2022 17:16:18 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wr1-f45.google.com ([209.85.221.45]:34616)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oleAA-000P1l-28
for root@doctor.nl2k.ab.ca;
Thu, 20 Oct 2022 16:37:22 -0600
Received: by mail-wr1-f45.google.com with SMTP id b4so1877475wrs.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:from:to:cc:subject:date:message-id:reply-to;
bh=voEKvenxqrCxC466vpIalXmplYj+ewNqAkPNwaj95WM=;
b=gAl6U0TUvIISAWZUfveSGuC/txTKw6lnYJxrAH22D5j+ANq3epoTPn0yPyZkNdxgvb
kSUzcBm70mNelZnBX1hUIw1+CzcngIkX15DDx3wfimBovxWQpiV+U5CrnRXyab8mQM66
29ci4gKnj6JZl+Kc5xbaQdYVt6gd/03cN9XxB3hParD33Zrl166V9aD5ylRdnQgm5z4W
ugYEjqMZKqs/HimoK61J0wBAxUs+UYQsXD3jngWOUXPTqq8B1IISeWG958CcXrwO8IGX
Ge5PiG5rWRm3u439HMwGlYSHKlMUhp5dqelNc/HRKKaJu17W7wxYzfjjz6PnwyKv5A0T
F71Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=voEKvenxqrCxC466vpIalXmplYj+ewNqAkPNwaj95WM=;
b=aSJYzzLio9DuBVMnBR7JxGSqQMMvIxZEnqZHG38xhTuNitt5ZmOYrK2IPHAaN7Hd4e
0+ui9FYKaR+Ww9vcBDu/aA3Ax2NAHlse0LTxl7bKqqOdmOudwEG8dLMT9zTTuI3X4AVF
p5ba9fzjckS7eo+nyMv12JySUYoBCXB2If5AtIxSRV/pv2bYR+8BQjD0FXkPj8SIffhZ
GAxz7PUx6YXzKtN4ipUAYwcHGeFfrtdZ8BUECxHT+EJDTmyA0ntfgWPpwCfZLREhXv61
TPdcAffuP35CiLW1laQPp04cSGeiAcYiTvS1FtqVPK0wMa7y5iJQhslGhUvZMeO6ylm4
Khtw==
X-Gm-Message-State: ACrzQf0kAQYBp1ly4PFYo9KtTB5tyAeYSyaCc84M2wSpXNbqA1QUfSjM
E0aVS4bUQYuyjYn6OJdOkmwuY7l3dEdKeVYx40A=
X-Google-Smtp-Source: AMsMyM77rfRoqDValYHF49mdRc4LmcErgR8Hho3A9J4lW1cIhDvzKEHXUDdc19vI+ZJkeMRmqZ1s5L2DsuhbWBwsM0M=
X-Received: by 2002:adf:d4cb:0:b0:22e:489d:e0e3 with SMTP id
w11-20020adfd4cb000000b0022e489de0e3mr10594182wrk.653.1666305267611; Thu, 20
Oct 2022 15:34:27 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a5d:6c61:0:0:0:0:0 with HTTP; Thu, 20 Oct 2022 15:34:26
-0700 (PDT)
Reply-To: freservebank748@gmail.com
From: Mack William UN
Date: Fri, 21 Oct 2022 04:04:26 +0530
Message-ID:
Subject: Hello dear Fund Beneficiary
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: root@doctor.nl2k.ab.ca
X-Spam_score: 25.2
X-Spam_score_int: 252
X-Spam_bar: +++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Welcome To Federal Reserve Bank Of Cleveland Federal Reserve
Bank® Notification Of Your Compensation Funds Your payment files from three
(3) different banks, Natwest Bank of London, Central Bank of Nigeria and
Bank of America was compiled and submitted to my desk this morning for review.
The total sum owed [...]
Content analysis details: (25.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.221.45 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[freservebank748[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[officef661[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[officef661[at]gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.5 HK_SCAM_N8 BODY: No description available.
0.8 HK_SCAM No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.0 XFER_LOTSA_MONEY Transfer a lot of money
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of
money
2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Hello dear Fund Beneficiary
Welcome To Federal Reserve Bank Of Cleveland
Federal Reserve Bank=C2=AE Notification Of Your Compensation Funds
Your payment files from three (3) different banks, Natwest Bank of
London, Central Bank of Nigeria and Bank of America was compiled and
submitted to my desk this morning for review. The total sum owed to you
by the 3 banks mentioned above was sum up to the tune of
US$15,500,000.00 (Fifteen Million Five Hundred Thousand United States
Dollars).
Now the fund has been totally lodged in one particular Escrow account
(non deductible) here in the Federal Reserve Bank New York on your name,
while waiting for accreditation to your personal bank account in any
part of the world.
Below are the information needed for now for your transfer.
1. Personal Details:
Full Name:
Current Address:
Age/Gender:
Occupation:
Direct Mobile Number:
Passport Copy, ID card or DL:
2. Banking Details:
Bank Name:
Bank Address:
Account Name
Account Number:
Routing Number:
Swift Code:
Note: If you prefer to receive your funds in form of a Visa Card, we
could load and ship your Visa Card to your address which will permit you
a daily withdrawal limit of US$3000 or write a draft check which can be
deposited in any bank and send to you.
In anticipating for your urgent cooperation
Yours sincerely,
JEROME POWELL