Nigerian Gmail spam

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 22 Jul 2022 08:13:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oEtOR-000PKd-Kx

for dave@doctor.nl2k.ab.ca;

Fri, 22 Jul 2022 08:12:39 -0600

Resent-From: The Doctor

Resent-Date: Fri, 22 Jul 2022 08:12:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f51.google.com ([209.85.167.51]:38713)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oEnsn-000Cpw-AJ

for root@doctor.nl2k.ab.ca;

Fri, 22 Jul 2022 02:19:45 -0600

Received: by mail-lf1-f51.google.com with SMTP id p11so1642333lfu.5

for ; Fri, 22 Jul 2022 01:19:19 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=jFJoWAWm1uAAeYCNk3QZInkIxf7MCWMHdiE0z0rY95I=;

b=N/egeJ8HzGu5qD7b1f8DJ1ZBls/znxr75id8mnL7aM+5wXvD6nufZKGMr47So0DOtO

Z4EHJwhTbV8AdR+FJlzqmogbyY+kpLnj8eGi+2QQ6tzJ34mLnHTBCHb0aQRU5Nf01Nhu

+DS7qikpdwIFb5Enhkn6It9J4R6wmDG+Gc4f7YlLaQoDFWlLSelS13KBN//rIjnXPVUS

1dunuLB1ZkY1lyAGdkPtdzKKGdj7f8pTpccCcadOd+51LcHnl380p05B0WqkUWCz/ess

QiPvlg8tKzlorGiKWCma7u0MNOgUnieMjklqiDMM2LzZgeRW1w0NldpljZWSGKgcABdH

njDw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=jFJoWAWm1uAAeYCNk3QZInkIxf7MCWMHdiE0z0rY95I=;

b=Oa9qw6c/5QGh+kgpgiSZqNrfstp+tiP7I2Uviz7Qjerrs7jN9QjBH8ohwdQo19n8bX

ABXEBapahK9x9FT/3mEMA42M872+mLEGbkqGF5gqcXJAwLN3dYxGa+ij74emAegPtcvt

lEvv8grMBlqvSI8gpWagy+Dw9vcWzgSgdDHLdO4HkP9ooqf0lHJV5f2oulpjPYINdfnK

U4L68wY+aWdg3jfhkoXJK6xU5ts/QfiudvVYslhCgt/cIEGVCtP6mQdbJEMRJkwvldo1

b3ztvU5D4DyWFOYV/aZHlDNxWd3UKJXHHrjab/RVhQpFapaxzwpo2Zs5PLeAylXAa4uy

2VSA==

X-Gm-Message-State: AJIora/TW1RSdQG1lY55M1Off/ijuLB4XccPRKOuiviIdONaDdO/mzn+

1R1L8dEKXUvYh3NtTuDAzqDClMRI4yYkWqIWgTM=

X-Google-Smtp-Source: AGRyM1tL/jLRsREvpFjG++xpPnefcO2k1fFj8+AWYT7QzPaBkvyl+SByUKqd9JssN6eeZG4ZzQtHyGkv/2NTv0aDxHI=

X-Received: by 2002:ac2:4e03:0:b0:485:74c4:97ce with SMTP id

e3-20020ac24e03000000b0048574c497cemr849335lfr.13.1658477952474; Fri, 22 Jul

2022 01:19:12 -0700 (PDT)

MIME-Version: 1.0

Reply-To: unitedata@yandex.com

From: DR YURI AKOTA

Date: Fri, 22 Jul 2022 09:19:03 +0100

Message-ID:

Subject: RE: INHERITANCE FUND

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000039b97b05e4607df4"

Bcc: root@doctor.nl2k.ab.ca

X-Spam_score: 29.8

X-Spam_score_int: 298

X-Spam_bar: +++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: CENTRAL BANK OF NIGERIA PHASE II, GARKIFEDERAL CAPITAL TERRITORY

ABUJA-NIGERIA REF: CBN-0XX2/987 TEL: +23409168493316 EMAIL: cbnauditor@yandex.com

ATTN: BENEFICIARY RE: INHERITANCE FUND TRANSFER NOTIFICATION



Content analysis details: (29.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.51 listed in wl.mailspike.net]

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[rt.rev.dr.jdonal.esq[at]gmail.com]

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

3.6 NA_DOLLARS BODY: Talks about a million North American dollars

0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

0.0 HTML_MESSAGE BODY: HTML included in message

1.2 UPPERCASE_75_100 message body is 75-100% uppercase

2.9 YOU_INHERIT Discussing your inheritance

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_HK_NAME_FM_DR No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

1.5 MONEY_ATM_CARD Lots of money on an ATM card

0.0 FILL_THIS_FORM Fill in a form with personal information

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

2.2 FILL_THIS_FORM_LOAN Answer loan question(s)

0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)

0.0 MONEY_FORM Lots of money if you fill out a form

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

1.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of

money

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} RE: INHERITANCE FUND



--00000000000039b97b05e4607df4

Content-Type: text/plain; charset="UTF-8"



CENTRAL BANK OF NIGERIA

PHASE II, GARKIFEDERAL CAPITAL TERRITORY

ABUJA-NIGERIA

REF: CBN-0XX2/987

TEL: +23409168493316

EMAIL: cbnauditor@yandex.com





ATTN: BENEFICIARY



RE: INHERITANCE FUND TRANSFER NOTIFICATION



THIS IS TO NOTIFY YOU THAT YOUR FUND WHICH IS THE TOTAL SUM OF TEN MILLION

FIVE HUNDRED THOUSAND DOLLARS (US$10, 500,000.00), AS YOUR

CONTRACT/INHERITANCE FUND HAVE BEEN PROGRAMMED FOR IMMEDIATE PAYMENT TO

YOU. AND YOUR INHERITANCE FUND PAYMENT HAS BEEN FINALIZED TO BE RELEASED TO

YOU AS THE LEGITIMATE BENEFICIARY OF THE FUND, VIA HSBC ATM DEBIT CARD.



MEANWHILE, WE WANT YOU TO CLARIFY IF YOU INDEED APPROVE A WOMAN FEW DAYS

AGO TO CLAIM YOUR FUND ON YOUR BEHALF, WHO NOW CLAIM THAT SHE IS YOUR

REPRESENTATIVE SENT BY YOU TO RECEIVE YOUR FUND.



THE REQUIRED INFORMATION IS AS STATED BELOW:



1. YOUR NAME:

2. YOUR ADDRESS:

3. YOUR TELEPHONE:

4. FAX:

5. AGE:

6. SEX:

7. YOUR OCCUPATION:



NOTE THAT THIS ATM CARD WILL BE SENT TO YOU THROUGH THE COURIER SUCH AS

FEDEX, UPS OR ANY COURIER COMPANY OF YOUR CHOICE FOR THE DELIVERY OF YOUR

ATM CARD TO YOU FOR YOUR EASY CASHING OF YOUR CONTRACT SUM OF US$10,

500,000.00. FROM THE OFFICE OF THE PRESIDENCY, THIS REPUTABLE BANK HAS BEEN

APPROVED IN CONJUNCTION WITH THE HSBC BANK LONDON,THEY HAS BEEN ACCREDITED

TO HANDLE AND MAKE PAYMENT TO ALL FOREIGN CONTRACT/INHERITANCE FUNDS

BENEFICIARIES THIS SECOND QUARTER PAYMENT OF THE YEAR 2022 THEREFORE, WE

WAIT TO HEAR FROM YOU SOON.



WE ARE WAITING TO HERE FROM YOU AS SOON AS POSSIBLE.



YOURS REGARDS,



DR YURI AKOTA

DIRECTOR OF FOREIGN OPERATIONS DEPARTMENT

CENTRAL BANK OF NIGERIA (CBN)

TEL: +23409168493316



--00000000000039b97b05e4607df4

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =

=C2=A0CENTRAL BANK OF NIGERIA
=C2=A0 =C2=A0 =C2=A0 =C2=A0 PHASE II, GARK=

IFEDERAL CAPITAL TERRITORY
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=

=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 ABUJA-NIGERIA
=C2=A0 =C2=A0 =C2=A0 =C2=

=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0REF: CBN-0XX2/987
=C2=A0 =

=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0TEL: =C2=A0+23409168=

493316
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0EMAIL: =C2=

=A0cbnauditor@yandex.com =C2=

=A0 =C2=A0
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=

=A0 =C2=A0 =C2=A0 =C2=A0
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=

=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =

=C2=A0 =C2=A0 =C2=A0 =C2=A0
ATTN: BENEFICIARY
=C2=A0
=C2=A0 =C2=A0=

=C2=A0 =C2=A0 =C2=A0 =C2=A0RE: INHERITANCE FUND TRANSFER NOTIFICATION
<=

br>THIS IS TO NOTIFY YOU THAT YOUR FUND WHICH IS THE TOTAL SUM OF TEN MILLI=

ON FIVE HUNDRED THOUSAND DOLLARS (US$10, 500,000.00), AS YOUR CONTRACT/INHE=

RITANCE FUND HAVE BEEN PROGRAMMED FOR IMMEDIATE PAYMENT TO YOU. AND YOUR IN=

HERITANCE FUND PAYMENT HAS BEEN FINALIZED TO BE RELEASED TO YOU AS THE LEGI=

TIMATE BENEFICIARY OF THE FUND, VIA HSBC ATM DEBIT CARD.

MEANWHILE, =

WE WANT YOU TO CLARIFY IF YOU INDEED APPROVE A WOMAN FEW DAYS AGO TO CLAIM =

YOUR FUND ON YOUR BEHALF, WHO NOW CLAIM THAT SHE IS YOUR REPRESENTATIVE SEN=

T BY YOU TO RECEIVE YOUR FUND.

THE REQUIRED INFORMATION IS AS STATED=

BELOW:

1. YOUR NAME:
2. YOUR ADDRESS:
3. YOUR TELEPHONE:
4=

. FAX: =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=

=A0
5. AGE:
6. SEX:
7. YOUR OCCUPATION:

NOTE THAT THIS ATM =

CARD WILL BE SENT TO YOU THROUGH THE COURIER SUCH AS FEDEX, UPS OR ANY COUR=

IER COMPANY OF YOUR CHOICE FOR THE DELIVERY OF YOUR ATM CARD TO YOU FOR YOU=

R EASY CASHING OF YOUR CONTRACT SUM OF US$10, 500,000.00. FROM THE OFFICE O=

F THE PRESIDENCY, THIS REPUTABLE BANK HAS BEEN APPROVED IN CONJUNCTION WITH=

THE HSBC BANK LONDON,THEY HAS BEEN ACCREDITED TO HANDLE AND MAKE PAYMENT T=

O ALL FOREIGN CONTRACT/INHERITANCE FUNDS BENEFICIARIES THIS SECOND QUARTER =

PAYMENT OF THE YEAR 2022 THEREFORE, WE WAIT TO HEAR FROM YOU SOON.

W=

E ARE WAITING TO HERE FROM YOU AS SOON AS POSSIBLE.

YOURS REGARDS,
r>
DR YURI AKOTA
DIRECTOR OF FOREIGN OPERATIONS DEPARTMENT
CENTRAL=

BANK OF NIGERIA (CBN)
TEL: +23409168493316




--00000000000039b97b05e4607df4--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA