Beneficiary spam from Google

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 09 May 2022 07:54:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1no3pL-000JrF-I6

for dave@doctor.nl2k.ab.ca;

Mon, 09 May 2022 07:53:31 -0600

Resent-From: The Doctor

Resent-Date: Mon, 9 May 2022 07:53:31 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f181.google.com ([209.85.208.181]:36688)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1no2jq-0005Kq-Ot

for doctor@nl2k.ab.ca;

Mon, 09 May 2022 06:43:52 -0600

Received: by mail-lj1-f181.google.com with SMTP id g16so16895274lja.3

for ; Mon, 09 May 2022 05:43:29 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=vDGE5p0LoBpc0RKHGpZ6Btt6b0cDt2Naf/vPes2RBOc=;

b=gLOtdPyQcrotM4/57iOUpxsmeDdcb/G1pBaIajWo7q5vafKmCHM2MdwqSonNbxZV/l

6H13yE9jyINTIX/FuR7nswhQugHEKz4xXbNr00YDxIKbgm96XguVkXsCXJmhT+dNxaz0

CDTSC4yIQBUOae+2m421yaaqoy2t8Xyk+IWJX+lEOmNZJKBcspNpMQ19zO2qgYCzl6Z4

35ZT+LmsLUEWFbuGmjRfT+3vItqhhyANPVBH0W9W8O0KOtb16K68x1Z3D4v/A8HLQQNt

Qj8OXTbzHQ6atLKXyYSWbUQQMQuOEKuAOh3Ceepq5O75IxuLcamWMFMij7xKVBp8qDJ2

Pmiw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=vDGE5p0LoBpc0RKHGpZ6Btt6b0cDt2Naf/vPes2RBOc=;

b=0EBz5PiWdRvQJ2zIo99aVTsc19suLkEdd1p/YD+5hdLncueTSKZ3S+SwxWEZ/Hf7uI

W3eRYn2nm+IE3FUFXh2B+j/Wwjq2sFYjJ5yv22ezdXnEXWO93yyKAu29+/gE9CoyPPf0

7m9+I4VTozGt9GWtUrepqJZWhQVCLlI26VWy0On3uJN2oWOy8XNQgZl9MsKD/XyRtQXZ

uhAFlxMEKzS2Vl5AL5WVZUU4t320uRuDmvLvn0JLWgDoyDBhNTnIXwoiwlNwvXCJFUg3

YHFzgVljAXI0czq6hFjpn/aqii4IirgyzXLM3jbRixR9y9sc4nEiPQJIYyuC6/d0ovAw

7Ojg==

X-Gm-Message-State: AOAM530LOScFO6G9BB+Yprz+CmSKgsJCwZVCq9HqHGHJcrqlWDECwOk8

669xWgfpdhgGBVRrTQCk//kz071WmjhRZx/XUZg=

X-Google-Smtp-Source: ABdhPJw9AQrEgKhgHRhvM3Knvdu8WgzTQmrj2DLYE1BdA+cPnoqJeZftdiOW/umt0z6IWnIJ1w83yl6fLQW4siQp3LU=

X-Received: by 2002:a2e:9ad5:0:b0:250:9be1:cc95 with SMTP id

p21-20020a2e9ad5000000b002509be1cc95mr10556374ljj.79.1652100202818; Mon, 09

May 2022 05:43:22 -0700 (PDT)

MIME-Version: 1.0

Reply-To: ubacfcfinancier@gmail.com

From: "mrjimmy.young"

Date: Mon, 9 May 2022 00:43:10 -1200

Message-ID:

Subject: ATTN DEAR BENEFICIARY ,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000b8ee0f05de938dd1"

Bcc: doctor@nl2k.ab.ca

X-Spam_score: 24.8

X-Spam_score_int: 248

X-Spam_bar: ++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: ATTN DEAR BENEFICIARY , I AM RALPH SALOMON, DIRECTOR CASH

PROCESSING UNIT,UBA BANK BENIN REPUBLIC [UBA] THE ONLY BANK APPOINTED BY THE

O.A.U MEMBERS LED BY PRESIDENT Patrick talon. DUE TO ON GOING FRAUD IN WEST

AFRICA COUNTRIES WHERE SOME INNOCENT BENEFICIARIES WERE ASKED TO PAY IN ADVANCE

BEFORE RECEIVING THEIR MONEY. THE ABOVE AFRICA UNION AND IMF HELD A MEETING

IN BENIN REPU [...]



Content analysis details: (24.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.181 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[mrjimmy.young7[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[mrjimmy.young7[at]gmail.com]

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 HTML_MESSAGE BODY: HTML included in message

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.2 UPPERCASE_75_100 message body is 75-100% uppercase

0.0 LOTS_OF_MONEY Huge... sums of money

1.9 HK_SCAM No description available.

2.0 TVD_PH_BODY_META No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 XFER_LOTSA_MONEY Transfer a lot of money

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal

information

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

1.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

Subject: {SPAM?} ATTN DEAR BENEFICIARY ,



--000000000000b8ee0f05de938dd1

Content-Type: text/plain; charset="UTF-8"



ATTN DEAR BENEFICIARY ,



I AM RALPH SALOMON, DIRECTOR CASH PROCESSING UNIT,UBA BANK BENIN REPUBLIC

[UBA] THE ONLY BANK APPOINTED BY THE O.A.U MEMBERS LED BY PRESIDENT Patrick

talon.



DUE TO ON GOING FRAUD IN WEST AFRICA COUNTRIES WHERE SOME INNOCENT

BENEFICIARIES WERE ASKED TO PAY IN ADVANCE BEFORE RECEIVING THEIR MONEY.

THE ABOVE AFRICA UNION AND IMF HELD A MEETING IN BENIN REPUBLIC AND

RESOLVED TO PAY ALL BENEFICIARIES IN CASH THROUGH A DIPLOMATIC COURIER

SERVICE.THE UNION HAS APPROVED AND APPOINTED UBA BANK BENINI REPUBLIC TO

PAY YOU THE SUM OF ($2,500,000.00)BUT DUE TO ONGOING FRAUD IN WEST AFRICA,

WE HAVE TAKEN (US$10,000) FROM YOUR FUND FOR HANDLING CHARGES.





THEREFORE THE AMOUNT YOU WILL BE EXPECTING FROM THE DIPLOMAT IS

$2,490,000.00) INSTEAD OF ($2.5M).WE HAVE SET UP A PLAN TO CONCLUDE THIS

TRANSACTION WITH YOU, HENCE YOU CAN GIVE US MAXIMUM COOPERATION.WE WANT YOU

TO STOP FURTHER COMMUNICATION WITH PERSONS, BANK OR COURIER THAT PROMISED

TO PAY YOU THROUGH BANK TO BANK, WESTERN UNION, MONEY GRAM, ATM CARD, EVEN

CHECK,DO NOT LISTING TO THEM BECAUSE BENIN REPUBLIC FINANCIAL INSTITUTION

HAS PROHIBITED SUCH PAYMENT DUE TO FRAUDULENT ACTIVITIES ALL OVER THE

COUNTRY. WE ALSO UNDERSTOOD FROM THE FILE THAT YOU HAVE BEEN DEALING WITH

THE FRAUDSTER WHO HAS BEEN EXTORTING MONEY FROM YOU,MY DEAR,AS A SENIOR

BANKER, CONTROLLING THIS CASH PAYMENT NOW,I ADVISE YOU NOT TO WASTE YOUR

HARD EARNING MONEY BY PAYING ANY BODY IN ADVANCE AGAIN, AND IF YOU JUST

FOLLOW MY INSTRUCTION YOU WILL RECEIVE YOUR MONEY IN THREE DAYS TIME.



YOUR FUND WILL BE PACKAGED IN A CONSIGNMENT BOX AND SHIPPED THROUGH

LICENSED DIPLOMATIC COURIER SERVICE. I WILL ALSO SEND THE PICTURE OF THE

BOX BY ATTACHMENT TO YOU TO SEE HOW THE MONEY IS PACKAGED, I WILL SEND YOU

MORE MAILS TO GIVE YOU MORE INFORMATION WITH MY INTERNATIONAL PASSPORT FOR

YOU TO KNOW THE GENUINE OF THIS TRANSACTION.THEREFORE, QUICKLY FORWARD YOUR

FULL NAME, HOME ADDRESS AND DIRECT PHONE NUMBER TO ME AT(

ubacfcfinancier@gmail.com ) FOR IMMEDIATE DELIVERY.ALL THE DOCUMENTS WILL

BE SENT TO YOU IF I AM ASSURED THAT YOU HAVE STOPPED SENDING MONEY TO THOSE

FRAUDSTER . BUT GOD WILL SURELY JUDGE ALL OF THEM WHO LIVES BY CHEATING.

MY BIBLE SAYS WHAT DOES IT PROFIT A MAN TO GAIN THE WHOLE WORLD BUT LOOSE

HIS SOUL? I AM WAITING TO HEAR FROM YOU WITH THE REQUIRED INFORMATION





RALPH SALOMON JP

DIRECTOR CASH PROCESSING

E-MAIL (ubacfcfinancier@gmail.com)



--000000000000b8ee0f05de938dd1

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



ATTN DEAR BENEFICIARY ,

=C2=A0I AM RALPH SALOMON, D=

IRECTOR CASH PROCESSING UNIT,UBA BANK BENIN REPUBLIC [UBA] THE ONLY BANK AP=

POINTED BY THE O.A.U MEMBERS LED BY PRESIDENT Patrick talon.

=C2=A0D=

UE TO ON GOING FRAUD IN WEST AFRICA COUNTRIES WHERE SOME INNOCENT BENEFICIA=

RIES WERE ASKED TO PAY IN ADVANCE BEFORE RECEIVING THEIR MONEY. THE ABOVE A=

FRICA UNION AND IMF HELD A MEETING IN BENIN REPUBLIC AND RESOLVED TO PAY AL=

L BENEFICIARIES IN CASH THROUGH A DIPLOMATIC COURIER SERVICE.THE UNION HAS =

APPROVED AND APPOINTED UBA BANK BENINI REPUBLIC TO PAY YOU THE SUM OF ($2,5=

00,000.00)BUT DUE TO ONGOING FRAUD =C2=A0IN WEST AFRICA, WE HAVE TAKEN (US$=

10,000) FROM YOUR FUND FOR HANDLING CHARGES.


=C2=A0 THEREFORE TH=

E AMOUNT YOU WILL BE EXPECTING =C2=A0FROM THE DIPLOMAT IS $2,490,000.00) IN=

STEAD OF ($2.5M).WE HAVE SET UP A PLAN TO CONCLUDE THIS TRANSACTION WITH YO=

U, HENCE YOU CAN GIVE US MAXIMUM COOPERATION.WE WANT YOU TO STOP FURTHER CO=

MMUNICATION WITH PERSONS, BANK OR COURIER THAT PROMISED TO PAY YOU THROUGH =

BANK TO BANK, WESTERN UNION, MONEY GRAM, ATM CARD, EVEN CHECK,DO NOT LISTIN=

G TO THEM BECAUSE BENIN REPUBLIC FINANCIAL INSTITUTION HAS PROHIBITED SUCH =

PAYMENT DUE TO FRAUDULENT ACTIVITIES ALL OVER THE COUNTRY. WE ALSO UNDERSTO=

OD FROM THE FILE THAT YOU HAVE BEEN DEALING WITH THE FRAUDSTER WHO HAS BEEN=

EXTORTING MONEY FROM YOU,MY DEAR,AS A SENIOR BANKER, CONTROLLING THIS CASH=

PAYMENT NOW,I ADVISE YOU NOT TO WASTE YOUR HARD EARNING =C2=A0MONEY BY PAY=

ING ANY BODY IN ADVANCE AGAIN, AND IF YOU JUST FOLLOW MY INSTRUCTION YOU WI=

LL RECEIVE YOUR MONEY IN THREE DAYS TIME.

YOUR FUND WILL BE PACKAGED=

IN A CONSIGNMENT BOX AND SHIPPED THROUGH LICENSED DIPLOMATIC COURIER SERVI=

CE.=C2=A0 I WILL ALSO SEND THE PICTURE OF THE BOX BY ATTACHMENT TO YOU TO S=

EE HOW THE MONEY IS PACKAGED, =C2=A0I WILL SEND YOU MORE MAILS TO GIVE YOU =

MORE INFORMATION WITH MY INTERNATIONAL PASSPORT FOR YOU TO KNOW THE GENUINE=

OF THIS TRANSACTION.THEREFORE, QUICKLY FORWARD YOUR FULL NAME, HOME ADDRES=

S AND DIRECT PHONE NUMBER TO ME AT(
com">ubacfcfinancier@gmail.com
) FOR IMMEDIATE DELIVERY.ALL THE DOCUMEN=

TS WILL BE SENT TO YOU IF I AM ASSURED THAT YOU HAVE STOPPED SENDING MONEY =

TO THOSE FRAUDSTER . BUT GOD WILL =C2=A0SURELY JUDGE ALL OF THEM WHO LIVES =

BY CHEATING. MY BIBLE SAYS WHAT DOES IT PROFIT A MAN TO GAIN THE WHOLE WORL=

D BUT LOOSE HIS =C2=A0SOUL? I AM WAITING TO HEAR FROM YOU WITH THE REQUIRED=

INFORMATION


=C2=A0RALPH SALOMON JP
=C2=A0DIRECTOR CASH PROCE=

SSING
=C2=A0E-MAIL (ubacfcf=

inancier@gmail.com
)




--000000000000b8ee0f05de938dd1--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA