Nigerian Spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 03 Dec 2022 13:14:00 -0700
Received: from mail-lf1-f67.google.com ([209.85.167.67]:33603)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1p1W1g-0000cI-N9
for dave@doctor.nl2k.ab.ca;
Sat, 03 Dec 2022 10:10:14 -0700
Received: by mail-lf1-f67.google.com with SMTP id j4so12150653lfk.0
for; Sat, 03 Dec 2022 09:07:40 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=Uwk2CozHkMftSdUyW0O0QNshqCuV4UOoNNcBk6LJPws=;
b=KNfh3y3Qy3uUMiLJsrQk6ZBcXATV7cXpA1BJbz1lE4XMyPpPX1Q+Vl59IV6yJMtylh
+o8o+IgHRRfLCiKMojYcXv4BEebpundk70yEMQD6LYJKFr1Qz6WuEJwJ1eSpqkuRLQgC
m6Ogc6GLRM3oLWKs8JBzpojnE5mCnUiaswaljLEs4SvgNGNnAl4i32imnhGl0hD9NzIL
jb+v1r8JgzxQuJ79DK0qogW5+LIj4joU00zoNWRdkrT4/vsTcYk0rFQCVANFKvHABXvP
HjObIfgHlOyQbWw26IUhP1yRubK5l/S7OvGmLElc0QM3XiIfqzItrJg7ZlMXVYsyMqWw
72ww==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=Uwk2CozHkMftSdUyW0O0QNshqCuV4UOoNNcBk6LJPws=;
b=2tsmPF8wHQKSSgeQV1BXhn5xn5FP+mMaafg98/hYUGSpvQ8Nv3+j7/Wq6zUWYY+TxS
YXCes5c6xq5xMeXvQEFmbMkwjSv8/Ea4z8XPnxifDoXx37+8CVBWZVisGcddmxNROv76
eIRu3+PFT8PBYy2/77mTHk2eO6ZWRiUGsOuaGKIf3xpDqtjnhxSdV7uoxf8UAedIxRNX
rvxHca3dLt4Q/+LMVoIi025EEhIEdIbhS0i7k42s++D2Sx+iTEheEsNJEGeWih23Riiw
cyNJWvg6bqsq7kR0cPS2CS1coKK33hEeowAenLDtbV1TzjrigCZyL0v8uGMPThE90aCg
dkxg==
X-Gm-Message-State: ANoB5pmPpJjhXtppkX9zMScBbnOGMGyEqDpJclXKFkbTmYUZ/61RiJbq
VYQbTzhO1Qu04UXyuQKWjTkZ9dEnOqIW5qURbdo=
X-Google-Smtp-Source: AA0mqf6yAW/KuJRCxu3kq4PpCBlqKMj2oRyrBSrLuc74L1A7cMcjpyyo7VDOIDn/dYMe2RilCnRhxv5SLkyU1HXi9eQ=
X-Received: by 2002:a05:6512:ac4:b0:4b5:585b:ff2d with SMTP id
n4-20020a0565120ac400b004b5585bff2dmr1932327lfu.319.1670087253578; Sat, 03
Dec 2022 09:07:33 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a05:6022:1319:b0:32:989b:d2e9 with HTTP; Sat, 3 Dec 2022
09:07:33 -0800 (PST)
Reply-To: godwinemefiele109@gmail.com
From: "MR. GODWIN EMEFIELE"
Date: Sat, 3 Dec 2022 17:07:33 +0000
Message-ID:
Subject: MR. GODWIN EMEFIELE.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 32.6
X-Spam_score_int: 326
X-Spam_bar: ++++++++++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: CENTRAL BANK REMITTANCE UNIT, CENTRAL BUSINESS DISTRICT, CADASTRAL
ZONE, ABUJA, FEDERAL CAPITAL TERRITORY, CONTRACT #: MAV/NNPC/FGN/MIN/013,
Swift Code: BPH KPL PK, A/C#: 329606=101244=169=678 FOREIGN [...]
Content analysis details: (32.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.167.67 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[nnedavid95[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[nnedavid95[at]gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[godwinemefiele109[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.67 listed in wl.mailspike.net]
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.5 BILLION_DOLLARS BODY: Talks about lots of money
2.5 MILLION_USD BODY: Talks about millions of dollars
2.9 YOU_INHERIT Discussing your inheritance
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 LOTTO_DEPT Claims Department
0.0 XFER_LOTSA_MONEY Transfer a lot of money
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of
money
3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} MR. GODWIN EMEFIELE.
CENTRAL BANK REMITTANCE UNIT,
CENTRAL BUSINESS DISTRICT,
CADASTRAL ZONE, ABUJA,
FEDERAL CAPITAL TERRITORY,
CONTRACT #: MAV/NNPC/FGN/MIN/013,
Swift Code: BPH KPL PK,
A/C#: 329606=101244=169=678
FOREIGN REMITTANCE
Our Ref: CBN/IRD/CBX/021/11
Attention: Beneficiary,
YOUR FUND APPROVED PAYMENT OF $25,000,000.00 (TWENTY FIVE MILLION
DOLLARS THROUGH (ATM CARD)
I am Mr.Godwin Emefiele, The Governor of Central Bank of Nigeria (CBN)
I am contacting you today to alert you of a notification which will be
a great help to you, I am the new director of fund approved payment
department here in CBN and I saw a file last week in your name with
all your information from our central computer stating that abandoned
fund worth of $25,000,000,00 (Twenty Five Million United state
Dollars) belongs to you.
Please, I want to know from you the reason why you abandoned such big
fund here in our bank for long up til this moment without any claim by
you. I hereby officially notifying you about the present arrangement
to pay you as i have been appointed and directed to take in-charge of
your fund payment here in my department, This arrangement was
initiated/constituted by the World Bank and the International Monetary
Fund (IMF) during.
The board meeting due to fraudulent and scam activities going on
within the African Region, I officially contacted you today because
your Inheritance Funds was Redeposited into the "Federal Suspense
Account" of (CBN) last week because you did not proceed with your
Claim as the rightful beneficiary which is well known to the board and
management team of Central Bank of Nigeria (CBN)
I am now in charge of your fund payment in my department here in
Central Bank of Nigeria (CBN) and like i stated in my mail that your
name appear in our Central Computer here as a beneficiary who have not
receive his contract payment for long, Be informed that your fund of
$25,Million Dollars has been approved by the (IMF) and the federal
government for payment and we have decided to convert your fund into
an (ATM CARD) which we will send to you in your country for the
withdraw of your fund in any ATM machine in your country.
To make it easy for your payment in other to avoid much expenses in
receiving your fund and we have made every arrangement regarding your
payment through (ATM CARD) since last week Due to the instruction
given to us for your immediate payment.
Dear beneficiary, I therefore to inform you that we have approved an
(ATM CARD) on your behalf which we will send to you for the withdraw
of your fund and we have converted your total fund of ($25,000,000.00)
into Your (ATM CARD) which is with me right now in my department, your
(ATM CARD) worth the sum of $25,Million Dollars has been ready for the
delivery to your home, Take note, Your (ATM CARD) Pin number is 2126.
You are hereby to quickly respond back to my department today and
provide or reconfirm to me your personal information once again where
you base right now and your home address where you desire to receive
your (ATM CARD) to avoid mistake during the delivery for us to quickly
submit your (ATM CARD) together with your current residential address
for the delivery to your Home in other for you to receive it and start
making a withdraw of your fund in any ATM machine in your country,
This is the conclusion and agreement of your fund
Payment here in our bank. The information required from you for the
delivery of your (ATM CARD) is such as below.
Your Full Name:.................
Your Country And Location:..................
Current Home Address:.........................
Private Telephone Number:...............
A Copy Of Your Id Card:........
Occupation:.......................
Age/Sex:....................
Kindly provide the following information and respond back to my
department today as I will be waiting to hear from you as soon as
possible with the required information for the proceed and delivery of
your (ATM CARD) to your country where you desire to receive it.
Best Regards,
Mr. Godwin Emefiele.
Govermor. Of Central Bank Of Nigeria (CBN)
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 03 Dec 2022 13:14:00 -0700
Received: from mail-lf1-f67.google.com ([209.85.167.67]:33603)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1p1W1g-0000cI-N9
for dave@doctor.nl2k.ab.ca;
Sat, 03 Dec 2022 10:10:14 -0700
Received: by mail-lf1-f67.google.com with SMTP id j4so12150653lfk.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=Uwk2CozHkMftSdUyW0O0QNshqCuV4UOoNNcBk6LJPws=;
b=KNfh3y3Qy3uUMiLJsrQk6ZBcXATV7cXpA1BJbz1lE4XMyPpPX1Q+Vl59IV6yJMtylh
+o8o+IgHRRfLCiKMojYcXv4BEebpundk70yEMQD6LYJKFr1Qz6WuEJwJ1eSpqkuRLQgC
m6Ogc6GLRM3oLWKs8JBzpojnE5mCnUiaswaljLEs4SvgNGNnAl4i32imnhGl0hD9NzIL
jb+v1r8JgzxQuJ79DK0qogW5+LIj4joU00zoNWRdkrT4/vsTcYk0rFQCVANFKvHABXvP
HjObIfgHlOyQbWw26IUhP1yRubK5l/S7OvGmLElc0QM3XiIfqzItrJg7ZlMXVYsyMqWw
72ww==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=Uwk2CozHkMftSdUyW0O0QNshqCuV4UOoNNcBk6LJPws=;
b=2tsmPF8wHQKSSgeQV1BXhn5xn5FP+mMaafg98/hYUGSpvQ8Nv3+j7/Wq6zUWYY+TxS
YXCes5c6xq5xMeXvQEFmbMkwjSv8/Ea4z8XPnxifDoXx37+8CVBWZVisGcddmxNROv76
eIRu3+PFT8PBYy2/77mTHk2eO6ZWRiUGsOuaGKIf3xpDqtjnhxSdV7uoxf8UAedIxRNX
rvxHca3dLt4Q/+LMVoIi025EEhIEdIbhS0i7k42s++D2Sx+iTEheEsNJEGeWih23Riiw
cyNJWvg6bqsq7kR0cPS2CS1coKK33hEeowAenLDtbV1TzjrigCZyL0v8uGMPThE90aCg
dkxg==
X-Gm-Message-State: ANoB5pmPpJjhXtppkX9zMScBbnOGMGyEqDpJclXKFkbTmYUZ/61RiJbq
VYQbTzhO1Qu04UXyuQKWjTkZ9dEnOqIW5qURbdo=
X-Google-Smtp-Source: AA0mqf6yAW/KuJRCxu3kq4PpCBlqKMj2oRyrBSrLuc74L1A7cMcjpyyo7VDOIDn/dYMe2RilCnRhxv5SLkyU1HXi9eQ=
X-Received: by 2002:a05:6512:ac4:b0:4b5:585b:ff2d with SMTP id
n4-20020a0565120ac400b004b5585bff2dmr1932327lfu.319.1670087253578; Sat, 03
Dec 2022 09:07:33 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a05:6022:1319:b0:32:989b:d2e9 with HTTP; Sat, 3 Dec 2022
09:07:33 -0800 (PST)
Reply-To: godwinemefiele109@gmail.com
From: "MR. GODWIN EMEFIELE"
Date: Sat, 3 Dec 2022 17:07:33 +0000
Message-ID:
Subject: MR. GODWIN EMEFIELE.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 32.6
X-Spam_score_int: 326
X-Spam_bar: ++++++++++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: CENTRAL BANK REMITTANCE UNIT, CENTRAL BUSINESS DISTRICT, CADASTRAL
ZONE, ABUJA, FEDERAL CAPITAL TERRITORY, CONTRACT #: MAV/NNPC/FGN/MIN/013,
Swift Code: BPH KPL PK, A/C#: 329606=101244=169=678 FOREIGN [...]
Content analysis details: (32.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.167.67 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[nnedavid95[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[nnedavid95[at]gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[godwinemefiele109[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.67 listed in wl.mailspike.net]
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.5 BILLION_DOLLARS BODY: Talks about lots of money
2.5 MILLION_USD BODY: Talks about millions of dollars
2.9 YOU_INHERIT Discussing your inheritance
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 LOTTO_DEPT Claims Department
0.0 XFER_LOTSA_MONEY Transfer a lot of money
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of
money
3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} MR. GODWIN EMEFIELE.
CENTRAL BANK REMITTANCE UNIT,
CENTRAL BUSINESS DISTRICT,
CADASTRAL ZONE, ABUJA,
FEDERAL CAPITAL TERRITORY,
CONTRACT #: MAV/NNPC/FGN/MIN/013,
Swift Code: BPH KPL PK,
A/C#: 329606=101244=169=678
FOREIGN REMITTANCE
Our Ref: CBN/IRD/CBX/021/11
Attention: Beneficiary,
YOUR FUND APPROVED PAYMENT OF $25,000,000.00 (TWENTY FIVE MILLION
DOLLARS THROUGH (ATM CARD)
I am Mr.Godwin Emefiele, The Governor of Central Bank of Nigeria (CBN)
I am contacting you today to alert you of a notification which will be
a great help to you, I am the new director of fund approved payment
department here in CBN and I saw a file last week in your name with
all your information from our central computer stating that abandoned
fund worth of $25,000,000,00 (Twenty Five Million United state
Dollars) belongs to you.
Please, I want to know from you the reason why you abandoned such big
fund here in our bank for long up til this moment without any claim by
you. I hereby officially notifying you about the present arrangement
to pay you as i have been appointed and directed to take in-charge of
your fund payment here in my department, This arrangement was
initiated/constituted by the World Bank and the International Monetary
Fund (IMF) during.
The board meeting due to fraudulent and scam activities going on
within the African Region, I officially contacted you today because
your Inheritance Funds was Redeposited into the "Federal Suspense
Account" of (CBN) last week because you did not proceed with your
Claim as the rightful beneficiary which is well known to the board and
management team of Central Bank of Nigeria (CBN)
I am now in charge of your fund payment in my department here in
Central Bank of Nigeria (CBN) and like i stated in my mail that your
name appear in our Central Computer here as a beneficiary who have not
receive his contract payment for long, Be informed that your fund of
$25,Million Dollars has been approved by the (IMF) and the federal
government for payment and we have decided to convert your fund into
an (ATM CARD) which we will send to you in your country for the
withdraw of your fund in any ATM machine in your country.
To make it easy for your payment in other to avoid much expenses in
receiving your fund and we have made every arrangement regarding your
payment through (ATM CARD) since last week Due to the instruction
given to us for your immediate payment.
Dear beneficiary, I therefore to inform you that we have approved an
(ATM CARD) on your behalf which we will send to you for the withdraw
of your fund and we have converted your total fund of ($25,000,000.00)
into Your (ATM CARD) which is with me right now in my department, your
(ATM CARD) worth the sum of $25,Million Dollars has been ready for the
delivery to your home, Take note, Your (ATM CARD) Pin number is 2126.
You are hereby to quickly respond back to my department today and
provide or reconfirm to me your personal information once again where
you base right now and your home address where you desire to receive
your (ATM CARD) to avoid mistake during the delivery for us to quickly
submit your (ATM CARD) together with your current residential address
for the delivery to your Home in other for you to receive it and start
making a withdraw of your fund in any ATM machine in your country,
This is the conclusion and agreement of your fund
Payment here in our bank. The information required from you for the
delivery of your (ATM CARD) is such as below.
Your Full Name:.................
Your Country And Location:..................
Current Home Address:.........................
Private Telephone Number:...............
A Copy Of Your Id Card:........
Occupation:.......................
Age/Sex:....................
Kindly provide the following information and respond back to my
department today as I will be waiting to hear from you as soon as
possible with the required information for the proceed and delivery of
your (ATM CARD) to your country where you desire to receive it.
Best Regards,
Mr. Godwin Emefiele.
Govermor. Of Central Bank Of Nigeria (CBN)