Nigerian Spam from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 01 Aug 2022 14:40:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oIcCW-000762-MK
for dave@doctor.nl2k.ab.ca;
Mon, 01 Aug 2022 14:39:44 -0600
Resent-From: The Doctor
Resent-Date: Mon, 1 Aug 2022 14:39:44 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f45.google.com ([209.85.208.45]:34450)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oIXvg-0005qH-Lj
for doctor@nl2k.ab.ca;
Mon, 01 Aug 2022 10:06:08 -0600
Received: by mail-ed1-f45.google.com with SMTP id z2so3963836edc.1
for; Mon, 01 Aug 2022 09:05:47 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=bWzY690hrit6lVeVsDnLi4ABdD4UV1Z+rG04GfLkbgI=;
b=gmPHgEVGilRqRKZZe2Y4WZQpKBjYr+RsK6W5lTdDOaFD37Pk2F+hJI2SBeIM9nJ86J
U1jUTq90SId+vTcj4KcxlccZvWk6NHerA/6lEcSeYsyZMB4a90DQaGu0bOQE4TmAGpYQ
jxbvevabzlvFnAuRDDCGgcmhnzxqL2mWgL2MLXjwwT2TWRGhP9R70tcLsYWpeVV+c9dx
vdYE02M2XpdModpwBf2KRtbL95TaKRO4uN8OLGsbGrr4aclFI3rOG9PipwCeDGXdLiHg
ChtykN6TRdP9fuCgv1Vd/XgWK3Ks2g+lmpLEV6GSr54I4xKBd05wvTegN+efELUoKASD
pitA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=bWzY690hrit6lVeVsDnLi4ABdD4UV1Z+rG04GfLkbgI=;
b=Qf50D2EPduDEC9z9beoQpXQXj89sjxCQyUEO6Co3QIp3QLw/Ruy9XZKay65iC6JhjW
+PvwU0lD6ChLj9Kp0lcVOoxmIBUfxZdDYaMplk+YBYcngtD5eo1ZZlA2hktbEnX1HawC
T2YuWEfSGKheQQfY4SLMdkxtCvCzqhV2J6JvxcvDAOQhY4d4le5uJtwUF2HYgK9NuxBC
U33jjBSc6pTSKSaWbfmMe3eJE9qzzxydhFrIbXVPN84XnKhCYWRKr6slPCMc2/XfP90F
BOdIJiDctTekC4Q//tapwBXpJY27pyTnKgrpZI67+uTXwdgO1zo/IoZHhoVEvF095Eam
D3jQ==
X-Gm-Message-State: AJIora88+VAX4eW/n4Gf99iC6Gp9SztMjlIr1y/LNzNq8t688d3CvGWk
jmbofOkZVPVfCil4QjkdU0tt0DtqFsDBbdj2iI4=
X-Google-Smtp-Source: AGRyM1vtJgTQUUE9hIpYD5iCGSEEmyel9YIl0rO/601BGqWKxNJq/tMTotizNKAy78RXHvCiPMLmMhN1Sla+eUEsxbo=
X-Received: by 2002:a50:fc89:0:b0:43c:bf1e:165d with SMTP id
f9-20020a50fc89000000b0043cbf1e165dmr16115411edq.161.1659369939891; Mon, 01
Aug 2022 09:05:39 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a17:907:1b1f:b0:705:c347:8fa5 with HTTP; Mon, 1 Aug 2022
09:05:38 -0700 (PDT)
Reply-To: ong4uu@yahoo.co.jp
From: "Mr. Kennedy Briskila Uzoka,"
Date: Mon, 1 Aug 2022 09:05:38 -0700
Message-ID:
Subject: INSTRUCTION TO RELEASE YOUR UNPAID FUND
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 13.0
X-Spam_score_int: 130
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: We are aware of the stress you have been passing through and
how you have lost your money trying to claim your fund after which your fund
remains unpaid and your fund is now Re-deposited into the "Fed [...]
Content analysis details: (13.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.45 listed in wl.mailspike.net]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[lewechi855[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[lewechi855[at]gmail.com]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.7 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} INSTRUCTION TO RELEASE YOUR UNPAID FUND
We are aware of the stress you have been passing through and how you
have lost your money trying to claim your fund after which your fund
remains unpaid and your fund is now Re-deposited into the "Federal
Suspense Account. Henceforth, this honorable Bank United Bank for
Africa is now in charge to release your fund via ATM CARD
delivery.Respond to this e-mail on (tj1170255@gmail.com) with
immediate effect and we shall give you further details on how your
fund will be released.
Best Regards,
Mr. Kennedy Briskila Uzoka,
General Managing Director of
United Bank for Africa (U.B.A).
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 01 Aug 2022 14:40:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oIcCW-000762-MK
for dave@doctor.nl2k.ab.ca;
Mon, 01 Aug 2022 14:39:44 -0600
Resent-From: The Doctor
Resent-Date: Mon, 1 Aug 2022 14:39:44 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f45.google.com ([209.85.208.45]:34450)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oIXvg-0005qH-Lj
for doctor@nl2k.ab.ca;
Mon, 01 Aug 2022 10:06:08 -0600
Received: by mail-ed1-f45.google.com with SMTP id z2so3963836edc.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=bWzY690hrit6lVeVsDnLi4ABdD4UV1Z+rG04GfLkbgI=;
b=gmPHgEVGilRqRKZZe2Y4WZQpKBjYr+RsK6W5lTdDOaFD37Pk2F+hJI2SBeIM9nJ86J
U1jUTq90SId+vTcj4KcxlccZvWk6NHerA/6lEcSeYsyZMB4a90DQaGu0bOQE4TmAGpYQ
jxbvevabzlvFnAuRDDCGgcmhnzxqL2mWgL2MLXjwwT2TWRGhP9R70tcLsYWpeVV+c9dx
vdYE02M2XpdModpwBf2KRtbL95TaKRO4uN8OLGsbGrr4aclFI3rOG9PipwCeDGXdLiHg
ChtykN6TRdP9fuCgv1Vd/XgWK3Ks2g+lmpLEV6GSr54I4xKBd05wvTegN+efELUoKASD
pitA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=bWzY690hrit6lVeVsDnLi4ABdD4UV1Z+rG04GfLkbgI=;
b=Qf50D2EPduDEC9z9beoQpXQXj89sjxCQyUEO6Co3QIp3QLw/Ruy9XZKay65iC6JhjW
+PvwU0lD6ChLj9Kp0lcVOoxmIBUfxZdDYaMplk+YBYcngtD5eo1ZZlA2hktbEnX1HawC
T2YuWEfSGKheQQfY4SLMdkxtCvCzqhV2J6JvxcvDAOQhY4d4le5uJtwUF2HYgK9NuxBC
U33jjBSc6pTSKSaWbfmMe3eJE9qzzxydhFrIbXVPN84XnKhCYWRKr6slPCMc2/XfP90F
BOdIJiDctTekC4Q//tapwBXpJY27pyTnKgrpZI67+uTXwdgO1zo/IoZHhoVEvF095Eam
D3jQ==
X-Gm-Message-State: AJIora88+VAX4eW/n4Gf99iC6Gp9SztMjlIr1y/LNzNq8t688d3CvGWk
jmbofOkZVPVfCil4QjkdU0tt0DtqFsDBbdj2iI4=
X-Google-Smtp-Source: AGRyM1vtJgTQUUE9hIpYD5iCGSEEmyel9YIl0rO/601BGqWKxNJq/tMTotizNKAy78RXHvCiPMLmMhN1Sla+eUEsxbo=
X-Received: by 2002:a50:fc89:0:b0:43c:bf1e:165d with SMTP id
f9-20020a50fc89000000b0043cbf1e165dmr16115411edq.161.1659369939891; Mon, 01
Aug 2022 09:05:39 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a17:907:1b1f:b0:705:c347:8fa5 with HTTP; Mon, 1 Aug 2022
09:05:38 -0700 (PDT)
Reply-To: ong4uu@yahoo.co.jp
From: "Mr. Kennedy Briskila Uzoka,"
Date: Mon, 1 Aug 2022 09:05:38 -0700
Message-ID:
Subject: INSTRUCTION TO RELEASE YOUR UNPAID FUND
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 13.0
X-Spam_score_int: 130
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: We are aware of the stress you have been passing through and
how you have lost your money trying to claim your fund after which your fund
remains unpaid and your fund is now Re-deposited into the "Fed [...]
Content analysis details: (13.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.45 listed in wl.mailspike.net]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[lewechi855[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[lewechi855[at]gmail.com]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.7 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} INSTRUCTION TO RELEASE YOUR UNPAID FUND
We are aware of the stress you have been passing through and how you
have lost your money trying to claim your fund after which your fund
remains unpaid and your fund is now Re-deposited into the "Federal
Suspense Account. Henceforth, this honorable Bank United Bank for
Africa is now in charge to release your fund via ATM CARD
delivery.Respond to this e-mail on (tj1170255@gmail.com) with
immediate effect and we shall give you further details on how your
fund will be released.
Best Regards,
Mr. Kennedy Briskila Uzoka,
General Managing Director of
United Bank for Africa (U.B.A).
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments