Nigerian Phish from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 01 Aug 2022 08:23:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oIWIy-000FV8-M3
for dave@doctor.nl2k.ab.ca;
Mon, 01 Aug 2022 08:22:00 -0600
Resent-From: The Doctor
Resent-Date: Mon, 1 Aug 2022 08:22:00 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f181.google.com ([209.85.210.181]:43851)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oIW7z-000ERI-4I
for doctor@doctor.nl2k.ab.ca;
Mon, 01 Aug 2022 08:10:44 -0600
Received: by mail-pf1-f181.google.com with SMTP id u133so4054137pfc.10
for; Mon, 01 Aug 2022 07:10:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:mime-version:from:to:cc;
bh=3n9EO+/pxtIFmjix5GV27i0AAZSwDwZoR024TErBNXE=;
b=Wl2vfQPH/0mq5/spK2FTiZIeN60KtnjwoYm6vgIPXXkVO/R6NJgVWkf5XZntjKheqs
JDxQWtkDMhFpBCI48NfSWbGqrLkpCyI2r2FfE2jndqqANh1Cx66VxYzn3NaejFrrWmpo
dOgLOG9IADMVP6ddMPf0Vhaigc9zVIxmiV0/N0IXb6hcvOjlvEAlnnmKIUTnRxmlfKbe
hSpQKDLxO/JS5lVtwMHPDbBxo30p/ldIaROqLNenwSOSEQWfAcdWwhUlYlaWRttinCrH
Qv4w3D6V9Ut6zmZuHpW0IoY262K2gPoLaZbiRdiuJ+K3FoEG4B8rN4tbWZr3KmULd/nG
2KTQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc;
bh=3n9EO+/pxtIFmjix5GV27i0AAZSwDwZoR024TErBNXE=;
b=SoMxUbUEHdAV1F9jvB/NveeOjXd6WDmRHN/LSnrLK8eZo1e/3kffA9snMvFmrRzpSB
htoQCWcgbNVlT/Vu3aw2Kak2kkfWSHISVskY2/aXNOPJl+YlkmpJd5/hc76kQLvR/hIo
6JQQqymVTsPAQAloTXZq2gHhGbBF7qifxRKXyyY6Li7bLLZOf31RN3KfTuOiRX6T4pow
rfKeVAst4oRwS7nyg7By8OiBmmmY62iehcxgAKP8bMbsUlAoifQT3y8ExekAdV4B9w3u
TC3C9h7VXyzYyzJUtPWEcKzt0pRsocybxGEIc/g1Uz6hqg61xjB8fB5Uzu2fs93RDjTe
BbeA==
X-Gm-Message-State: ACgBeo21JuXVFxxJ7GbIPvFIBjowm8n+7vlBHUTuZyyS+Yu8H+juuE2d
LqrlpLToDhdjq5EYzXVi6rFU9AuLEjTQCFwQmxg5oWiplMmXaQ==
X-Google-Smtp-Source: AA6agR75GMO/MR5OcZzXD7Z3YIHlPLFSRf1FxHGFJe/n5228tM1CV+iRLkwaifwXhRBgXzB2l8hnq+9AyOO6hZYiVuA=
X-Received: by 2002:a63:9144:0:b0:41b:bd2e:2261 with SMTP id
l65-20020a639144000000b0041bbd2e2261mr9598625pge.533.1659363011748; Mon, 01
Aug 2022 07:10:11 -0700 (PDT)
MIME-Version: 1.0
From: "Mr. Osman Mohammed"
Date: Mon, 1 Aug 2022 14:03:10 -0700
Message-ID:
Subject: ATTN:
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000de68c605e52e8e35"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 11.7
X-Spam_score_int: 117
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: ATTN: We (Visa Incorporation Burkina Faso) is now in charge
of your payment has been arranged to be paid to you through ATM VISA CARD.
An ATM Visa Card will be issued in your name and your Three Hundred and [...]
Content analysis details: (11.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.181 listed in wl.mailspike.net]
0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[anthonyjake812[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[anthonyjake812[at]gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 MONEY_ATM_CARD Lots of money on an ATM card
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} ATTN:
--000000000000de68c605e52e8e35
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
ATTN:
We (Visa Incorporation Burkina Faso) is now in charge of your payment has
been arranged to be paid to you through ATM VISA CARD. An ATM Visa Card
will be issued in your name and your Three Hundred and Thirty Thousand
United State Dollars ($330,000.00) will be loaded into it, and deliver it
to your postal address with the Pin code Number, as to enable you
withdrawal your funds from any ATM Machine anywhere in the world.
This is so because Visa Card Inc. is a global payments technology company
that enables consumers, businesses, financial institutions and governments
to use digital currency instead of cash and checks, and the Government
choose us to payout all the compensation funds via atm visa card to scammed
beneficiaries.
An ATM card will be issued to you immediately which you can use to withdraw
your funds from any ATM Machine, but the maximum is $20,000 dollars per day
because the Card has been upgrade. So if you like to receive your funds
through this means you=E2=80=99re advised to confirm with the following inf=
ormation
as stated below:
1. Your Full Name:
2. Address Where You Want the Courier Company to Send Your ATM Card To
or (P.O Box):
3. Your Age:
4. Occupation:
5. Cell/Mobile Number:
Please Be Warned, as The United Nations Anti-Crime Commission and the
United State Government does not instruct any other Bank or agent in this
payment except my office. we advise you to stop all the communications you
are having with any other Agent or bank officials in Europe, Asia and
Africa regarding to your payment.
Thanks for your understanding as you follow instructions.
Yours in Services.
Honorable Mr. Osman Mohammed
Director ATM VISA CARD Issuance Department
(Visa Incorporation Burkina Faso).
--000000000000de68c605e52e8e35
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
ATTN:
We (Visa Incorporation Burkina Faso) is now in charge of=20
your payment has been arranged to be paid to you through ATM VISA CARD.=20
An ATM Visa Card will be issued in your name and your Three Hundred and=20
Thirty Thousand United State Dollars ($330,000.00) will be loaded into=20
it, and deliver it to your postal address with the Pin code Number, as=20
to enable you withdrawal your funds from any ATM Machine anywhere in the
world.
This is so because Visa Card Inc. is a global payments=20
technology company that enables consumers, businesses, financial=20
institutions and governments to use digital currency instead of cash and
checks, and the Government choose us to payout all the compensation=20
funds via atm visa card to scammed beneficiaries.
An ATM=20
card will be issued to you immediately which you can use to withdraw=20
your funds from any ATM Machine, but the maximum is $20,000 dollars per=20
day because the Card has been upgrade. So if you like to receive your=20
funds through this means you=E2=80=99re advised to confirm with the followi=
ng=20
information as stated below:
1. Your Full Name:
2. Address Where =
You Want the Courier Company to Send Your ATM Card To
or (P.O Box):
3=
. Your Age:
4. Occupation:
5. Cell/Mobile Number:
Please
Be Warned, as The United Nations Anti-Crime Commission and the United=20
State Government does not instruct any other Bank or agent in this=20
payment except my office. we advise you to stop all the communications=20
you are having with any other Agent or bank officials in Europe, Asia=20
and Africa regarding to your payment.
Thanks for your understanding =
as you follow instructions.
Yours in Services.
Honorable Mr. =
Osman Mohammed
Director ATM VISA CARD Issuance Department
(Visa I=
ncorporation Burkina Faso).
--000000000000de68c605e52e8e35--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 01 Aug 2022 08:23:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oIWIy-000FV8-M3
for dave@doctor.nl2k.ab.ca;
Mon, 01 Aug 2022 08:22:00 -0600
Resent-From: The Doctor
Resent-Date: Mon, 1 Aug 2022 08:22:00 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f181.google.com ([209.85.210.181]:43851)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oIW7z-000ERI-4I
for doctor@doctor.nl2k.ab.ca;
Mon, 01 Aug 2022 08:10:44 -0600
Received: by mail-pf1-f181.google.com with SMTP id u133so4054137pfc.10
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:mime-version:from:to:cc;
bh=3n9EO+/pxtIFmjix5GV27i0AAZSwDwZoR024TErBNXE=;
b=Wl2vfQPH/0mq5/spK2FTiZIeN60KtnjwoYm6vgIPXXkVO/R6NJgVWkf5XZntjKheqs
JDxQWtkDMhFpBCI48NfSWbGqrLkpCyI2r2FfE2jndqqANh1Cx66VxYzn3NaejFrrWmpo
dOgLOG9IADMVP6ddMPf0Vhaigc9zVIxmiV0/N0IXb6hcvOjlvEAlnnmKIUTnRxmlfKbe
hSpQKDLxO/JS5lVtwMHPDbBxo30p/ldIaROqLNenwSOSEQWfAcdWwhUlYlaWRttinCrH
Qv4w3D6V9Ut6zmZuHpW0IoY262K2gPoLaZbiRdiuJ+K3FoEG4B8rN4tbWZr3KmULd/nG
2KTQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc;
bh=3n9EO+/pxtIFmjix5GV27i0AAZSwDwZoR024TErBNXE=;
b=SoMxUbUEHdAV1F9jvB/NveeOjXd6WDmRHN/LSnrLK8eZo1e/3kffA9snMvFmrRzpSB
htoQCWcgbNVlT/Vu3aw2Kak2kkfWSHISVskY2/aXNOPJl+YlkmpJd5/hc76kQLvR/hIo
6JQQqymVTsPAQAloTXZq2gHhGbBF7qifxRKXyyY6Li7bLLZOf31RN3KfTuOiRX6T4pow
rfKeVAst4oRwS7nyg7By8OiBmmmY62iehcxgAKP8bMbsUlAoifQT3y8ExekAdV4B9w3u
TC3C9h7VXyzYyzJUtPWEcKzt0pRsocybxGEIc/g1Uz6hqg61xjB8fB5Uzu2fs93RDjTe
BbeA==
X-Gm-Message-State: ACgBeo21JuXVFxxJ7GbIPvFIBjowm8n+7vlBHUTuZyyS+Yu8H+juuE2d
LqrlpLToDhdjq5EYzXVi6rFU9AuLEjTQCFwQmxg5oWiplMmXaQ==
X-Google-Smtp-Source: AA6agR75GMO/MR5OcZzXD7Z3YIHlPLFSRf1FxHGFJe/n5228tM1CV+iRLkwaifwXhRBgXzB2l8hnq+9AyOO6hZYiVuA=
X-Received: by 2002:a63:9144:0:b0:41b:bd2e:2261 with SMTP id
l65-20020a639144000000b0041bbd2e2261mr9598625pge.533.1659363011748; Mon, 01
Aug 2022 07:10:11 -0700 (PDT)
MIME-Version: 1.0
From: "Mr. Osman Mohammed"
Date: Mon, 1 Aug 2022 14:03:10 -0700
Message-ID:
Subject: ATTN:
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000de68c605e52e8e35"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 11.7
X-Spam_score_int: 117
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: ATTN: We (Visa Incorporation Burkina Faso) is now in charge
of your payment has been arranged to be paid to you through ATM VISA CARD.
An ATM Visa Card will be issued in your name and your Three Hundred and [...]
Content analysis details: (11.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.181 listed in wl.mailspike.net]
0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[anthonyjake812[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[anthonyjake812[at]gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 MONEY_ATM_CARD Lots of money on an ATM card
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} ATTN:
--000000000000de68c605e52e8e35
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
ATTN:
We (Visa Incorporation Burkina Faso) is now in charge of your payment has
been arranged to be paid to you through ATM VISA CARD. An ATM Visa Card
will be issued in your name and your Three Hundred and Thirty Thousand
United State Dollars ($330,000.00) will be loaded into it, and deliver it
to your postal address with the Pin code Number, as to enable you
withdrawal your funds from any ATM Machine anywhere in the world.
This is so because Visa Card Inc. is a global payments technology company
that enables consumers, businesses, financial institutions and governments
to use digital currency instead of cash and checks, and the Government
choose us to payout all the compensation funds via atm visa card to scammed
beneficiaries.
An ATM card will be issued to you immediately which you can use to withdraw
your funds from any ATM Machine, but the maximum is $20,000 dollars per day
because the Card has been upgrade. So if you like to receive your funds
through this means you=E2=80=99re advised to confirm with the following inf=
ormation
as stated below:
1. Your Full Name:
2. Address Where You Want the Courier Company to Send Your ATM Card To
or (P.O Box):
3. Your Age:
4. Occupation:
5. Cell/Mobile Number:
Please Be Warned, as The United Nations Anti-Crime Commission and the
United State Government does not instruct any other Bank or agent in this
payment except my office. we advise you to stop all the communications you
are having with any other Agent or bank officials in Europe, Asia and
Africa regarding to your payment.
Thanks for your understanding as you follow instructions.
Yours in Services.
Honorable Mr. Osman Mohammed
Director ATM VISA CARD Issuance Department
(Visa Incorporation Burkina Faso).
--000000000000de68c605e52e8e35
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
ATTN:
We (Visa Incorporation Burkina Faso) is now in charge of=20
your payment has been arranged to be paid to you through ATM VISA CARD.=20
An ATM Visa Card will be issued in your name and your Three Hundred and=20
Thirty Thousand United State Dollars ($330,000.00) will be loaded into=20
it, and deliver it to your postal address with the Pin code Number, as=20
to enable you withdrawal your funds from any ATM Machine anywhere in the
world.
This is so because Visa Card Inc. is a global payments=20
technology company that enables consumers, businesses, financial=20
institutions and governments to use digital currency instead of cash and
checks, and the Government choose us to payout all the compensation=20
funds via atm visa card to scammed beneficiaries.
An ATM=20
card will be issued to you immediately which you can use to withdraw=20
your funds from any ATM Machine, but the maximum is $20,000 dollars per=20
day because the Card has been upgrade. So if you like to receive your=20
funds through this means you=E2=80=99re advised to confirm with the followi=
ng=20
information as stated below:
1. Your Full Name:
2. Address Where =
You Want the Courier Company to Send Your ATM Card To
or (P.O Box):
3=
. Your Age:
4. Occupation:
5. Cell/Mobile Number:
Please
Be Warned, as The United Nations Anti-Crime Commission and the United=20
State Government does not instruct any other Bank or agent in this=20
payment except my office. we advise you to stop all the communications=20
you are having with any other Agent or bank officials in Europe, Asia=20
and Africa regarding to your payment.
Thanks for your understanding =
as you follow instructions.
Yours in Services.
Honorable Mr. =
Osman Mohammed
Director ATM VISA CARD Issuance Department
(Visa I=
ncorporation Burkina Faso).
--000000000000de68c605e52e8e35--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments