Nigerian Spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 11 Jul 2022 21:53:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oB6ww-000BxK-5o
for dave@doctor.nl2k.ab.ca;
Mon, 11 Jul 2022 21:52:38 -0600
Resent-From: The Doctor
Resent-Date: Mon, 11 Jul 2022 21:52:38 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f66.google.com ([209.85.167.66]:35477)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oB6Gk-0007sC-Q5
for doctor@doctor.nl2k.ab.ca;
Mon, 11 Jul 2022 21:09:06 -0600
Received: by mail-lf1-f66.google.com with SMTP id z25so11792735lfr.2
for; Mon, 11 Jul 2022 20:08:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=I17EJfLJzu7Toyl3m5v1Tz/lyS3zXIv5tnjkeUxfqnI=;
b=JCYETFZgj0pHAZ1u0XcWsk5uKGIjH5FQs00nP2oH2ULfmkvK3SQolYn0Fkb+8oQKCs
BXbjtBAgim9RmwlZoyLKlOyNkJXoBRIZvv93RY2wh0tT0JtQ8lWEHmsJJGDQNaHp8MUV
awJJDzyskS8lD8dMQhgVjft/tfBEiPeeWR/5Vf3m/8chBbDeKfieveXQl1Q4g4eJrn9X
Z0zTlBiSLoBJKfxjhjoBvFn82mI7HBeLpSXzNdPrRS8K1X/l/JkhO0nRdtzhDV28CfcS
qfSvk9MtOif1Quzvt/WOJmAtvMleUmj52pv1cz2RI92bB1MIHwoeJ+iixTx7bMl4sqaK
kXuA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=I17EJfLJzu7Toyl3m5v1Tz/lyS3zXIv5tnjkeUxfqnI=;
b=vnJ9xyzSH7/dPLEf6qCJlhdhmXpE5Di1Xu9ZQbm9JDwDi0ZYItv7jBP8ZP58N0/ztP
bNdwEMghijd2qJyR9UvOiBO+s9KTpoRaGyD0gC34i05nL7++5Nwj3FNhzcWigm44Q86C
6FuWu0RIxqmuzV1P0EzJeV8pKJQAs8AoZUbVZC2R79HIvU8gxqg4aZ5mhNFqyOLFb3hi
OqK++w4veR8gWZFwjfBL5DAJZD5hgoayV3elHJCCjeMC9O7s2HMRTGFSgsrdyO3ZuCG9
imFf6ZiG1UmOme1S6PUBfLDZ+j6cj6EQG9gs9JRa4NEkZVteoP5MZ0rfqMN4GOlE1ZQL
wP/w==
X-Gm-Message-State: AJIora+AEquxrxyKRUTNL18j8BtgqV22IWoDikFdff1m3iSnNXlNgL3y
GC2O6sLeU/96ZC0Y+slUwx+nhZPkcSAdbGJnkdk=
X-Google-Smtp-Source: AGRyM1tt913NqAedGF2rEi9n8pT92VZVcAAE1bFNSc4HwKIl6lqxW/TTZsltDxYf5qWw1WceeCcXawKqCi/F71cyXBY=
X-Received: by 2002:a05:6512:1107:b0:489:dca7:274d with SMTP id
l7-20020a056512110700b00489dca7274dmr6092621lfg.390.1657595315729; Mon, 11
Jul 2022 20:08:35 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a2e:8646:0:0:0:0:0 with HTTP; Mon, 11 Jul 2022 20:08:35
-0700 (PDT)
Reply-To: donaldubah03@gmail.com
From: Mr Donald Ubah
Date: Mon, 11 Jul 2022 16:08:35 -1100
Message-ID:
Subject: From Mr Donald Ubah
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 22.3
X-Spam_score_int: 223
X-Spam_bar: ++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: FROM THE DESK OF MR DONALD UBAH DIRECTOR INTERNATIONAL REMITTANCE
OFFICE, ZENITH INTERNATIONAL BANK PLC PLOT 84 AJOSE ADEOGUN STREET,VICTORIA
ISLAND LAGOS CONFIRM IF YOU ARE ALIVE OR DEAD Dear Sir,
Content analysis details: (22.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[captrivera88[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[captrivera88[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.66 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[donaldubah03[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 HK_SCAM_N2 BODY: No description available.
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
1.5 BILLION_DOLLARS BODY: Talks about lots of money
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
2.0 HK_SCAM No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.2 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} From Mr Donald Ubah
FROM THE DESK OF MR DONALD UBAH
DIRECTOR INTERNATIONAL REMITTANCE OFFICE,
ZENITH INTERNATIONAL BANK PLC
PLOT 84 AJOSE ADEOGUN STREET,VICTORIA ISLAND LAGOS
CONFIRM IF YOU ARE ALIVE OR DEAD
Dear Sir,
There is presently a counter claim on your fund $5.5MILLION DOLLARS by
one MR.KYLE BURRIS, who is presently trying to make us believe that
you are Dead and even explained that you entered into an Agreement
with him, to help you in receiving your Fund, So here comes the big
question.
Did you sign any Deed of Assignment in favor of (KYLE BURRIS)? Thereby
making him the current Beneficiary / NEXT OF KIN with his following
Account Details:
NAME: MR KYLE BURRIS,
AC/NUMBER: 6503809428.
ROUTING/122006743,
B/NAME: CITI BANK,
ADDRESS: NEW YORK, USA,
We shall proceed to issue all payments Details to the said Mr. Kyle
Burris, if we do not hear from you within the next two working days
from today.
Once again I apologize to you on behalf of ZENITH INTERNATIONAL BANK
PLC, towards this contact and proper confirmation required urgently
from you if alive reply via: donaldubah03@gmail.com
Yours sincerely,
Mr Donald Ubah
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 11 Jul 2022 21:53:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oB6ww-000BxK-5o
for dave@doctor.nl2k.ab.ca;
Mon, 11 Jul 2022 21:52:38 -0600
Resent-From: The Doctor
Resent-Date: Mon, 11 Jul 2022 21:52:38 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f66.google.com ([209.85.167.66]:35477)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oB6Gk-0007sC-Q5
for doctor@doctor.nl2k.ab.ca;
Mon, 11 Jul 2022 21:09:06 -0600
Received: by mail-lf1-f66.google.com with SMTP id z25so11792735lfr.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=I17EJfLJzu7Toyl3m5v1Tz/lyS3zXIv5tnjkeUxfqnI=;
b=JCYETFZgj0pHAZ1u0XcWsk5uKGIjH5FQs00nP2oH2ULfmkvK3SQolYn0Fkb+8oQKCs
BXbjtBAgim9RmwlZoyLKlOyNkJXoBRIZvv93RY2wh0tT0JtQ8lWEHmsJJGDQNaHp8MUV
awJJDzyskS8lD8dMQhgVjft/tfBEiPeeWR/5Vf3m/8chBbDeKfieveXQl1Q4g4eJrn9X
Z0zTlBiSLoBJKfxjhjoBvFn82mI7HBeLpSXzNdPrRS8K1X/l/JkhO0nRdtzhDV28CfcS
qfSvk9MtOif1Quzvt/WOJmAtvMleUmj52pv1cz2RI92bB1MIHwoeJ+iixTx7bMl4sqaK
kXuA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=I17EJfLJzu7Toyl3m5v1Tz/lyS3zXIv5tnjkeUxfqnI=;
b=vnJ9xyzSH7/dPLEf6qCJlhdhmXpE5Di1Xu9ZQbm9JDwDi0ZYItv7jBP8ZP58N0/ztP
bNdwEMghijd2qJyR9UvOiBO+s9KTpoRaGyD0gC34i05nL7++5Nwj3FNhzcWigm44Q86C
6FuWu0RIxqmuzV1P0EzJeV8pKJQAs8AoZUbVZC2R79HIvU8gxqg4aZ5mhNFqyOLFb3hi
OqK++w4veR8gWZFwjfBL5DAJZD5hgoayV3elHJCCjeMC9O7s2HMRTGFSgsrdyO3ZuCG9
imFf6ZiG1UmOme1S6PUBfLDZ+j6cj6EQG9gs9JRa4NEkZVteoP5MZ0rfqMN4GOlE1ZQL
wP/w==
X-Gm-Message-State: AJIora+AEquxrxyKRUTNL18j8BtgqV22IWoDikFdff1m3iSnNXlNgL3y
GC2O6sLeU/96ZC0Y+slUwx+nhZPkcSAdbGJnkdk=
X-Google-Smtp-Source: AGRyM1tt913NqAedGF2rEi9n8pT92VZVcAAE1bFNSc4HwKIl6lqxW/TTZsltDxYf5qWw1WceeCcXawKqCi/F71cyXBY=
X-Received: by 2002:a05:6512:1107:b0:489:dca7:274d with SMTP id
l7-20020a056512110700b00489dca7274dmr6092621lfg.390.1657595315729; Mon, 11
Jul 2022 20:08:35 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a2e:8646:0:0:0:0:0 with HTTP; Mon, 11 Jul 2022 20:08:35
-0700 (PDT)
Reply-To: donaldubah03@gmail.com
From: Mr Donald Ubah
Date: Mon, 11 Jul 2022 16:08:35 -1100
Message-ID:
Subject: From Mr Donald Ubah
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 22.3
X-Spam_score_int: 223
X-Spam_bar: ++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: FROM THE DESK OF MR DONALD UBAH DIRECTOR INTERNATIONAL REMITTANCE
OFFICE, ZENITH INTERNATIONAL BANK PLC PLOT 84 AJOSE ADEOGUN STREET,VICTORIA
ISLAND LAGOS CONFIRM IF YOU ARE ALIVE OR DEAD Dear Sir,
Content analysis details: (22.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[captrivera88[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[captrivera88[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.66 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[donaldubah03[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 HK_SCAM_N2 BODY: No description available.
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
1.5 BILLION_DOLLARS BODY: Talks about lots of money
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
2.0 HK_SCAM No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.2 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} From Mr Donald Ubah
FROM THE DESK OF MR DONALD UBAH
DIRECTOR INTERNATIONAL REMITTANCE OFFICE,
ZENITH INTERNATIONAL BANK PLC
PLOT 84 AJOSE ADEOGUN STREET,VICTORIA ISLAND LAGOS
CONFIRM IF YOU ARE ALIVE OR DEAD
Dear Sir,
There is presently a counter claim on your fund $5.5MILLION DOLLARS by
one MR.KYLE BURRIS, who is presently trying to make us believe that
you are Dead and even explained that you entered into an Agreement
with him, to help you in receiving your Fund, So here comes the big
question.
Did you sign any Deed of Assignment in favor of (KYLE BURRIS)? Thereby
making him the current Beneficiary / NEXT OF KIN with his following
Account Details:
NAME: MR KYLE BURRIS,
AC/NUMBER: 6503809428.
ROUTING/122006743,
B/NAME: CITI BANK,
ADDRESS: NEW YORK, USA,
We shall proceed to issue all payments Details to the said Mr. Kyle
Burris, if we do not hear from you within the next two working days
from today.
Once again I apologize to you on behalf of ZENITH INTERNATIONAL BANK
PLC, towards this contact and proper confirmation required urgently
from you if alive reply via: donaldubah03@gmail.com
Yours sincerely,
Mr Donald Ubah
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments