Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 18 Aug 2022 00:35:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oOZ6k-0007wA-Sy
for dave@doctor.nl2k.ab.ca;
Thu, 18 Aug 2022 00:34:22 -0600
Resent-From: The Doctor
Resent-Date: Thu, 18 Aug 2022 00:34:22 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f171.google.com ([209.85.210.171]:34463)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oOYbw-0003a1-01
for root@doctor.nl2k.ab.ca;
Thu, 18 Aug 2022 00:02:36 -0600
Received: by mail-pf1-f171.google.com with SMTP id f28so651366pfk.1
for; Wed, 17 Aug 2022 23:02:10 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=Uj2eUJMFARxsfQk+XVIcOBkxReEtHB96/kDVT2c9r3Y=;
b=btH/VAVqzNp93gYyrgKcWWYI1f1Roz0KYHbK0w3YmUheVecZhNhhX/wMeyd4Kh3iEF
9lxXyxJT7SRXdPKRl4shjBzvjokXWKR1CxQ3bWdYFEerE+A8FOtpi1Ngu4d1yAMf4Aw6
QdY739D6OoqoGjA1oKkVE1+hZblA2zV9pb7Rlsd2eXJgu2tvhM/47aP09PrhR+9wgiol
kDGMlVmRNnP1VCqfm+WPoLpOMVv9ByS7+Rdw2hI6a1yzwq5prSZbnRAncGDaL2ri6HxU
xDL5Imimb7REo0yBxTUIMkIdrzV7/warn58FTqX5rl8TA4UtINpzC5zaqg6lH2l7oxkK
6cBQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=Uj2eUJMFARxsfQk+XVIcOBkxReEtHB96/kDVT2c9r3Y=;
b=Gf3BXgVfQSWRyJqjZB5H7iQOuQT8uougv060g/KMsvyhYCIVUbfZzpSmBq+z8v7m++
n8So9qMzZBNtZwkGqGxN46OfP8BfdhIFLC+khm4jcXPvH/Lqz1MXas+TieLlScg0fE3L
yWdTiz4+/Ti3K9DDWyuuvaBdNJhk/8Eyl4cC4w+JEQs9/8M+uakkDgdqgXAKbpTCW8H3
a0hkv6JJ5TK++TW0Fecl9TKh+MEKJ1eQmfzB7srJZ1yayXP9eKyW7b1jXbTi9594TSW8
57ci9K3sB15NNoppXrEjrF07AUzPOb3Qt7i8+ljPtOszTF+nVw2pQtfSLrMwuZyZclZc
kPJg==
X-Gm-Message-State: ACgBeo2bFaoaqdNSedRz0S8DuhC5WwuuzPR4bl9S962oIILNFguM/fwE
IvnYJx/jnkkb/l6KSRCTasdvfZMVxpPBdfFTBA8=
X-Google-Smtp-Source: AA6agR774EELUesOpo5HZ7IijApVQCY0NJSlGGW7vNzrWxu6a0wHQh0T1KQ/eTsd270ZX6dlXPAaIDiJlfAVqVqAlPw=
X-Received: by 2002:a05:6a00:cc7:b0:52f:2ada:11c5 with SMTP id
b7-20020a056a000cc700b0052f2ada11c5mr1518028pfv.19.1660802525252; Wed, 17 Aug
2022 23:02:05 -0700 (PDT)
MIME-Version: 1.0
Reply-To: bankcentralasiahalobcaxxx@gmail.com
From: Bank Central Asia
Date: Thu, 18 Aug 2022 13:01:51 +0700
Message-ID:
Subject: BANK CENTRAL ASIA - ALWAYS BY YOUR SIDE
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000008f4f2505e67db8ce"
Bcc: root@doctor.nl2k.ab.ca
X-Spam_score: 16.5
X-Spam_score_int: 165
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: BANK CENTRAL ASIA - JAKARTA INDONESIA FOREIGN REMITTANCE DEPARTMENT
PRE-PAYMENT ADVICE: (U.N-W.B.O-I.M.F-B.C.A -5100-12/22)
Content analysis details: (16.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.210.171 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[centralasia364[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[centralasia364[at]gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 LOTTO_DEPT Claims Department
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} BANK CENTRAL ASIA - ALWAYS BY YOUR SIDE
--0000000000008f4f2505e67db8ce
Content-Type: text/plain; charset="UTF-8"
BANK CENTRAL ASIA - JAKARTA INDONESIA
FOREIGN REMITTANCE DEPARTMENT
PRE-PAYMENT ADVICE: (U.N-W.B.O-I.M.F-B.C.A -5100-12/22)
>From The Desk of Mr. Andreas Rahmat Reinhard, Director Foreign Remittance
Department of Bank Central Asia.
Facts and statistics gathered from our human resource database we found out
you have worked extremely hard to get your payment but to no avail because
of the unstable and dishonest officials at the helm of affairs. Your
fund was moved to our bank by the United Nation Debt and Foreign Assets
Committee, Valued $9,200,000 and we are mandated to recover and remit
unpaid debts owed to beneficiaries and companies across the globe to ensure
justice is done through our due processes which are our terms and
conditions of service.
Note: You are obligated to confirm this account, if it is your correct
account information? BBVA Compass, 15 South 20th Street Suite 1202
Birmingham, Alabama 35233 USA because our Bank will not be held responsible
if there should be any wrong transfer.
Thank you for your cooperation.
Regards
Mr. Andreas Rahmat Reinhard
Director Foreign Remittance Department
IMPORTANT NOTICE REGARDING THIS ELECTRONIC MESSAGE:
This message may contain privileged or confidential information. If you are
not the intended recipient of this email, please delete the message and
notify the sender so that we may correct our records.
--0000000000008f4f2505e67db8ce
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
t-size:12pt;font-family:"Times New Roman","serif"">
n style=3D"font-family:Tahoma,"sans-serif";color:black">BANK CENT=
RAL ASIA - JAKARTA INDONESIA
text-align:justify;font-size:12pt;font-family:"Times New Roman",&=
quot;serif"">
color:black">FOREIGN REMITTANCE DEPARTMENT
0cm 0.0001pt;text-align:justify;font-size:12pt;font-family:"Times New=
Roman","serif"">
sans-serif";color:black">PRE-PAYMENT ADVICE: (U.N-W.B.O-I.M.F-B.C.A -5=
100-12/22)
rgin-left:0cm;font-size:12pt;font-family:"Times New Roman","=
serif"">
:black">From The Desk of Mr. Andreas Rahmat Reinhard,=C2=A0Director Foreign=
Remittance Department of Bank Central Asia.=C2=A0
xt-align:justify;margin-right:0cm;margin-left:0cm;font-size:12pt;font-famil=
y:"Times New Roman","serif"">
:Tahoma,"sans-serif";color:black">Facts and statistics gathered f=
rom our human resource database=C2=A0we found out you have worked extremely=
hard to get your=C2=A0payment=C2=A0but to no avail because of the unstable=
and dishonest officials at the helm of affairs. Your fund=C2=A0was moved t=
o our bank=C2=A0by the=C2=A0United Nation=C2=A0Debt=C2=A0and=C2=A0Foreign A=
ssets Committee, Valued $9,200,000 and we are mandated to recover and remit=
unpaid debts owed=C2=A0to beneficiaries and companies across the globe=C2=
=A0to ensure justice is done through our due processes which are our terms =
and conditions of service.
right:0cm;margin-left:0cm;font-size:12pt;font-family:"Times New Roman&=
quot;,"serif"">
";color:black">Note: You are obligated to confirm this account, if it =
is your correct account information?=C2=A0BBVA Compass, 15 South 20th Stree=
t Suite 1202 Birmingham, Alabama 35233 USA=C2=A0because our Bank will not b=
e held responsible if there should be any wrong transfer.
e=3D"text-align:justify;margin-right:0cm;margin-left:0cm;font-size:12pt;fon=
t-family:"Times New Roman","serif"">
-family:Tahoma,"sans-serif";color:black">Thank you=C2=A0for your =
cooperation.
fy;font-size:12pt;font-family:"Times New Roman","serif"=
">Reg=
ards
size:12pt;font-family:"Times New Roman","serif"">
style=3D"font-family:Tahoma,"sans-serif";color:black">Mr. Andreas=
Rahmat Reinhard
ustify;font-size:12pt;font-family:"Times New Roman","serif&q=
uot;">
>Director Foreign Remittance Department
:9.75pt;text-align:justify;margin-right:0cm;margin-left:0cm;font-size:12pt;=
font-family:"Times New Roman","serif"">
=3D"font-size:8pt;font-family:Tahoma,"sans-serif";color:black">IM=
PORTANT NOTICE REGARDING THIS ELECTRONIC MESSAGE:
"margin:0cm 0cm 0.0001pt;text-align:justify;font-size:12pt;font-family:&quo=
t;Times New Roman",serif">
ign:justify;margin-right:0cm;margin-left:0cm;font-size:12pt;font-family:&qu=
ot;Times New Roman","serif"">
nt-family:Tahoma,"sans-serif";color:black">This message may conta=
in privileged or confidential information. If you are not the intended reci=
pient of this email, please delete the message and notify the sender so tha=
t we may correct our records.
--0000000000008f4f2505e67db8ce--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 18 Aug 2022 00:35:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oOZ6k-0007wA-Sy
for dave@doctor.nl2k.ab.ca;
Thu, 18 Aug 2022 00:34:22 -0600
Resent-From: The Doctor
Resent-Date: Thu, 18 Aug 2022 00:34:22 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f171.google.com ([209.85.210.171]:34463)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oOYbw-0003a1-01
for root@doctor.nl2k.ab.ca;
Thu, 18 Aug 2022 00:02:36 -0600
Received: by mail-pf1-f171.google.com with SMTP id f28so651366pfk.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=Uj2eUJMFARxsfQk+XVIcOBkxReEtHB96/kDVT2c9r3Y=;
b=btH/VAVqzNp93gYyrgKcWWYI1f1Roz0KYHbK0w3YmUheVecZhNhhX/wMeyd4Kh3iEF
9lxXyxJT7SRXdPKRl4shjBzvjokXWKR1CxQ3bWdYFEerE+A8FOtpi1Ngu4d1yAMf4Aw6
QdY739D6OoqoGjA1oKkVE1+hZblA2zV9pb7Rlsd2eXJgu2tvhM/47aP09PrhR+9wgiol
kDGMlVmRNnP1VCqfm+WPoLpOMVv9ByS7+Rdw2hI6a1yzwq5prSZbnRAncGDaL2ri6HxU
xDL5Imimb7REo0yBxTUIMkIdrzV7/warn58FTqX5rl8TA4UtINpzC5zaqg6lH2l7oxkK
6cBQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=Uj2eUJMFARxsfQk+XVIcOBkxReEtHB96/kDVT2c9r3Y=;
b=Gf3BXgVfQSWRyJqjZB5H7iQOuQT8uougv060g/KMsvyhYCIVUbfZzpSmBq+z8v7m++
n8So9qMzZBNtZwkGqGxN46OfP8BfdhIFLC+khm4jcXPvH/Lqz1MXas+TieLlScg0fE3L
yWdTiz4+/Ti3K9DDWyuuvaBdNJhk/8Eyl4cC4w+JEQs9/8M+uakkDgdqgXAKbpTCW8H3
a0hkv6JJ5TK++TW0Fecl9TKh+MEKJ1eQmfzB7srJZ1yayXP9eKyW7b1jXbTi9594TSW8
57ci9K3sB15NNoppXrEjrF07AUzPOb3Qt7i8+ljPtOszTF+nVw2pQtfSLrMwuZyZclZc
kPJg==
X-Gm-Message-State: ACgBeo2bFaoaqdNSedRz0S8DuhC5WwuuzPR4bl9S962oIILNFguM/fwE
IvnYJx/jnkkb/l6KSRCTasdvfZMVxpPBdfFTBA8=
X-Google-Smtp-Source: AA6agR774EELUesOpo5HZ7IijApVQCY0NJSlGGW7vNzrWxu6a0wHQh0T1KQ/eTsd270ZX6dlXPAaIDiJlfAVqVqAlPw=
X-Received: by 2002:a05:6a00:cc7:b0:52f:2ada:11c5 with SMTP id
b7-20020a056a000cc700b0052f2ada11c5mr1518028pfv.19.1660802525252; Wed, 17 Aug
2022 23:02:05 -0700 (PDT)
MIME-Version: 1.0
Reply-To: bankcentralasiahalobcaxxx@gmail.com
From: Bank Central Asia
Date: Thu, 18 Aug 2022 13:01:51 +0700
Message-ID:
Subject: BANK CENTRAL ASIA - ALWAYS BY YOUR SIDE
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000008f4f2505e67db8ce"
Bcc: root@doctor.nl2k.ab.ca
X-Spam_score: 16.5
X-Spam_score_int: 165
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: BANK CENTRAL ASIA - JAKARTA INDONESIA FOREIGN REMITTANCE DEPARTMENT
PRE-PAYMENT ADVICE: (U.N-W.B.O-I.M.F-B.C.A -5100-12/22)
Content analysis details: (16.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.210.171 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[centralasia364[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[centralasia364[at]gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 LOTTO_DEPT Claims Department
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} BANK CENTRAL ASIA - ALWAYS BY YOUR SIDE
--0000000000008f4f2505e67db8ce
Content-Type: text/plain; charset="UTF-8"
BANK CENTRAL ASIA - JAKARTA INDONESIA
FOREIGN REMITTANCE DEPARTMENT
PRE-PAYMENT ADVICE: (U.N-W.B.O-I.M.F-B.C.A -5100-12/22)
>From The Desk of Mr. Andreas Rahmat Reinhard, Director Foreign Remittance
Department of Bank Central Asia.
Facts and statistics gathered from our human resource database we found out
you have worked extremely hard to get your payment but to no avail because
of the unstable and dishonest officials at the helm of affairs. Your
fund was moved to our bank by the United Nation Debt and Foreign Assets
Committee, Valued $9,200,000 and we are mandated to recover and remit
unpaid debts owed to beneficiaries and companies across the globe to ensure
justice is done through our due processes which are our terms and
conditions of service.
Note: You are obligated to confirm this account, if it is your correct
account information? BBVA Compass, 15 South 20th Street Suite 1202
Birmingham, Alabama 35233 USA because our Bank will not be held responsible
if there should be any wrong transfer.
Thank you for your cooperation.
Regards
Mr. Andreas Rahmat Reinhard
Director Foreign Remittance Department
IMPORTANT NOTICE REGARDING THIS ELECTRONIC MESSAGE:
This message may contain privileged or confidential information. If you are
not the intended recipient of this email, please delete the message and
notify the sender so that we may correct our records.
--0000000000008f4f2505e67db8ce
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
t-size:12pt;font-family:"Times New Roman","serif"">
n style=3D"font-family:Tahoma,"sans-serif";color:black">BANK CENT=
RAL ASIA - JAKARTA INDONESIA
text-align:justify;font-size:12pt;font-family:"Times New Roman",&=
quot;serif"">
color:black">FOREIGN REMITTANCE DEPARTMENT
0cm 0.0001pt;text-align:justify;font-size:12pt;font-family:"Times New=
Roman","serif"">
sans-serif";color:black">PRE-PAYMENT ADVICE: (U.N-W.B.O-I.M.F-B.C.A -5=
100-12/22)
rgin-left:0cm;font-size:12pt;font-family:"Times New Roman","=
serif"">
:black">From The Desk of Mr. Andreas Rahmat Reinhard,=C2=A0Director Foreign=
Remittance Department of Bank Central Asia.=C2=A0
xt-align:justify;margin-right:0cm;margin-left:0cm;font-size:12pt;font-famil=
y:"Times New Roman","serif"">
:Tahoma,"sans-serif";color:black">Facts and statistics gathered f=
rom our human resource database=C2=A0we found out you have worked extremely=
hard to get your=C2=A0payment=C2=A0but to no avail because of the unstable=
and dishonest officials at the helm of affairs. Your fund=C2=A0was moved t=
o our bank=C2=A0by the=C2=A0United Nation=C2=A0Debt=C2=A0and=C2=A0Foreign A=
ssets Committee, Valued $9,200,000 and we are mandated to recover and remit=
unpaid debts owed=C2=A0to beneficiaries and companies across the globe=C2=
=A0to ensure justice is done through our due processes which are our terms =
and conditions of service.
right:0cm;margin-left:0cm;font-size:12pt;font-family:"Times New Roman&=
quot;,"serif"">
";color:black">Note: You are obligated to confirm this account, if it =
is your correct account information?=C2=A0BBVA Compass, 15 South 20th Stree=
t Suite 1202 Birmingham, Alabama 35233 USA=C2=A0because our Bank will not b=
e held responsible if there should be any wrong transfer.
e=3D"text-align:justify;margin-right:0cm;margin-left:0cm;font-size:12pt;fon=
t-family:"Times New Roman","serif"">
-family:Tahoma,"sans-serif";color:black">Thank you=C2=A0for your =
cooperation.
fy;font-size:12pt;font-family:"Times New Roman","serif"=
">Reg=
ards
size:12pt;font-family:"Times New Roman","serif"">
style=3D"font-family:Tahoma,"sans-serif";color:black">Mr. Andreas=
Rahmat Reinhard
ustify;font-size:12pt;font-family:"Times New Roman","serif&q=
uot;">
>Director Foreign Remittance Department
:9.75pt;text-align:justify;margin-right:0cm;margin-left:0cm;font-size:12pt;=
font-family:"Times New Roman","serif"">
=3D"font-size:8pt;font-family:Tahoma,"sans-serif";color:black">IM=
PORTANT NOTICE REGARDING THIS ELECTRONIC MESSAGE:
"margin:0cm 0cm 0.0001pt;text-align:justify;font-size:12pt;font-family:&quo=
t;Times New Roman",serif">
ign:justify;margin-right:0cm;margin-left:0cm;font-size:12pt;font-family:&qu=
ot;Times New Roman","serif"">
nt-family:Tahoma,"sans-serif";color:black">This message may conta=
in privileged or confidential information. If you are not the intended reci=
pient of this email, please delete the message and notify the sender so tha=
t we may correct our records.
--0000000000008f4f2505e67db8ce--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments