Central Asian Bank spam from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 18 Aug 2022 07:10:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oOfHA-00078h-Ef
for dave@doctor.nl2k.ab.ca;
Thu, 18 Aug 2022 07:09:32 -0600
Resent-From: The Doctor
Resent-Date: Thu, 18 Aug 2022 07:09:32 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs1-f68.google.com ([209.85.217.68]:39786)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oOa1g-000JtT-Hj
for majordomo-Owner@nk.ca;
Thu, 18 Aug 2022 01:33:17 -0600
Received: by mail-vs1-f68.google.com with SMTP id c3so687681vsc.6
for; Thu, 18 Aug 2022 00:32:55 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=yH/SF0+EmCb353hDcQ/0QVkq0oVhfOab4UR3jEYnb3Q=;
b=hUicacqeTE/pN/j5/5VCXQ8KP2SPyevQmv79u6jbrUPCnvPiFj/5nYUO/q4JZDatWG
/8VnmtWAhWN8Q3/8Azyc2ORpob8+gHkKElG/TpXcp7V0Xbe/4z9p2OciT4rbDuf7hRfd
OvPHIRdsmb9y+ZwpLhHjBQgDxSwDvP6TZrTuNVjBhxUNlJPVneFSOZdKo9REsCzXHob5
2sJ3YgiocUSiv1bhVfTdxKa/8rQCmwBwsp8yTVxdPfKhLzJvjQJiVkTaQJSktj5Jy7JC
arFUzlBRYMe91/lhTb1iOjdQ7AhtGgLrwCbqVN7HymxDeEKGVxK9DEuUFewz4WdZvGfO
a75g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=yH/SF0+EmCb353hDcQ/0QVkq0oVhfOab4UR3jEYnb3Q=;
b=XtSRx8JcIOQHoUTY1GmuL+B774VfGSdVKrJvvmcgJwW0u9V5HU9zOjMXIQp/C6BNW0
dz3NYw5wHfoyFKoMwgb+Lx8hty5GasgobSTkYK85L2qQVHXE6WF+V215dIlkGPpt4xY4
Tfiy3/hmYpTrFjxPJ86U4YM0XJUBEsQCLEla8JM02PBdtibqc2CX2rnPVhk9xZJG9LAf
NnTU20KK1TunOjNW6UfQ1OphuUxK63cfVRN8K3kvE+Pk6vw8R8VjN2Uze17vT/BSDhRI
+dEMCsxwmss7qEm8lvvRgJyh3PXBxTrn0sEluNBIpVzZrcfSVh3dNEkTw05XCNJ6xljV
/Jmw==
X-Gm-Message-State: ACgBeo3gLsNTYc9u80/t4qweIW0iURhB87SVr7hC8KCKT6la4eyMkeWv
3NuuPrRs2yz9NyAOX/rMOK1KvMAW2yAIbwLWJJ8=
X-Google-Smtp-Source: AA6agR7HokR2k2rgrrgP+CN0Wby3ulQjFIYay9UCYcwGw/LVMzg033xSwLGE70EuwwAtRJVdOgAMScMWl4Hdrg2W/d8=
X-Received: by 2002:a67:a44d:0:b0:38a:ce33:da9e with SMTP id
p13-20020a67a44d000000b0038ace33da9emr791119vsh.17.1660807969400; Thu, 18 Aug
2022 00:32:49 -0700 (PDT)
MIME-Version: 1.0
Reply-To: bankcentralasiahalobcaxxx@gmail.com
From: Bank Central Asia
Date: Thu, 18 Aug 2022 14:32:35 +0700
Message-ID:
Subject: BANK CENTRAL ASIA - ALWAYS BY YOUR SIDE
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000000e6b3105e67efd3d"
Bcc: majordomo-Owner@nk.ca
X-Spam_score: 16.5
X-Spam_score_int: 165
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: BANK CENTRAL ASIA - JAKARTA INDONESIA FOREIGN REMITTANCE DEPARTMENT
PRE-PAYMENT ADVICE: (U.N-W.B.O-I.M.F-B.C.A -5100-12/22)
Content analysis details: (16.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.217.68 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[centralasiab09[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[centralasiab09[at]gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 LOTTO_DEPT Claims Department
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} BANK CENTRAL ASIA - ALWAYS BY YOUR SIDE
--0000000000000e6b3105e67efd3d
Content-Type: text/plain; charset="UTF-8"
BANK CENTRAL ASIA - JAKARTA INDONESIA
FOREIGN REMITTANCE DEPARTMENT
PRE-PAYMENT ADVICE: (U.N-W.B.O-I.M.F-B.C.A -5100-12/22)
>From The Desk of Mr. Andreas Rahmat Reinhard, Director Foreign Remittance
Department of Bank Central Asia.
Facts and statistics gathered from our human resource database we found out
you have worked extremely hard to get your payment but to no avail because
of the unstable and dishonest officials at the helm of affairs. Your
fund was moved to our bank by the United Nation Debt and Foreign Assets
Committee, Valued $9,200,000 and we are mandated to recover and remit
unpaid debts owed to beneficiaries and companies across the globe to ensure
justice is done through our due processes which are our terms and
conditions of service.
Note: You are obligated to confirm this account, if it is your correct
account information? BBVA Compass, 15 South 20th Street Suite 1202
Birmingham, Alabama 35233 USA because our Bank will not be held responsible
if there should be any wrong transfer.
Thank you for your cooperation.
Regards
Mr. Andreas Rahmat Reinhard
Director Foreign Remittance Department
IMPORTANT NOTICE REGARDING THIS ELECTRONIC MESSAGE:
This message may contain privileged or confidential information. If you are
not the intended recipient of this email, please delete the message and
notify the sender so that we may correct our records.
--0000000000000e6b3105e67efd3d
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
t-size:12pt;font-family:"Times New Roman","serif"">
n style=3D"font-family:Tahoma,"sans-serif";color:black">BANK CENT=
RAL ASIA - JAKARTA INDONESIA
text-align:justify;font-size:12pt;font-family:"Times New Roman",&=
quot;serif"">
color:black">FOREIGN REMITTANCE DEPARTMENT
0cm 0.0001pt;text-align:justify;font-size:12pt;font-family:"Times New=
Roman","serif"">
sans-serif";color:black">PRE-PAYMENT ADVICE: (U.N-W.B.O-I.M.F-B.C.A -5=
100-12/22)
rgin-left:0cm;font-size:12pt;font-family:"Times New Roman","=
serif"">
:black">From The Desk of Mr. Andreas Rahmat Reinhard,=C2=A0Director Foreign=
Remittance Department of Bank Central Asia.=C2=A0
xt-align:justify;margin-right:0cm;margin-left:0cm;font-size:12pt;font-famil=
y:"Times New Roman","serif"">
:Tahoma,"sans-serif";color:black">Facts and statistics gathered f=
rom our human resource database=C2=A0we found out you have worked extremely=
hard to get your=C2=A0payment=C2=A0but to no avail because of the unstable=
and dishonest officials at the helm of affairs. Your fund=C2=A0was moved t=
o our bank=C2=A0by the=C2=A0United Nation=C2=A0Debt=C2=A0and=C2=A0Foreign A=
ssets Committee, Valued $9,200,000 and we are mandated to recover and remit=
unpaid debts owed=C2=A0to beneficiaries and companies across the globe=C2=
=A0to ensure justice is done through our due processes which are our terms =
and conditions of service.
right:0cm;margin-left:0cm;font-size:12pt;font-family:"Times New Roman&=
quot;,"serif"">
";color:black">Note: You are obligated to confirm this account, if it =
is your correct account information?=C2=A0BBVA Compass, 15 South 20th Stree=
t Suite 1202 Birmingham, Alabama 35233 USA=C2=A0because our Bank will not b=
e held responsible if there should be any wrong transfer.
e=3D"text-align:justify;margin-right:0cm;margin-left:0cm;font-size:12pt;fon=
t-family:"Times New Roman","serif"">
-family:Tahoma,"sans-serif";color:black">Thank you=C2=A0for your =
cooperation.
fy;font-size:12pt;font-family:"Times New Roman","serif"=
">Reg=
ards
size:12pt;font-family:"Times New Roman","serif"">
style=3D"font-family:Tahoma,"sans-serif";color:black">Mr. Andreas=
Rahmat Reinhard
ustify;font-size:12pt;font-family:"Times New Roman","serif&q=
uot;">
>Director Foreign Remittance Department
:9.75pt;text-align:justify;margin-right:0cm;margin-left:0cm;font-size:12pt;=
font-family:"Times New Roman","serif"">
=3D"font-size:8pt;font-family:Tahoma,"sans-serif";color:black">IM=
PORTANT NOTICE REGARDING THIS ELECTRONIC MESSAGE:
"margin:0cm 0cm 0.0001pt;text-align:justify;font-size:12pt;font-family:&quo=
t;Times New Roman",serif">
ign:justify;margin-right:0cm;margin-left:0cm;font-size:12pt;font-family:&qu=
ot;Times New Roman","serif"">
nt-family:Tahoma,"sans-serif";color:black">This message may conta=
in privileged or confidential information. If you are not the intended reci=
pient of this email, please delete the message and notify the sender so tha=
t we may correct our records.
--0000000000000e6b3105e67efd3d--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 18 Aug 2022 07:10:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oOfHA-00078h-Ef
for dave@doctor.nl2k.ab.ca;
Thu, 18 Aug 2022 07:09:32 -0600
Resent-From: The Doctor
Resent-Date: Thu, 18 Aug 2022 07:09:32 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs1-f68.google.com ([209.85.217.68]:39786)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oOa1g-000JtT-Hj
for majordomo-Owner@nk.ca;
Thu, 18 Aug 2022 01:33:17 -0600
Received: by mail-vs1-f68.google.com with SMTP id c3so687681vsc.6
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=yH/SF0+EmCb353hDcQ/0QVkq0oVhfOab4UR3jEYnb3Q=;
b=hUicacqeTE/pN/j5/5VCXQ8KP2SPyevQmv79u6jbrUPCnvPiFj/5nYUO/q4JZDatWG
/8VnmtWAhWN8Q3/8Azyc2ORpob8+gHkKElG/TpXcp7V0Xbe/4z9p2OciT4rbDuf7hRfd
OvPHIRdsmb9y+ZwpLhHjBQgDxSwDvP6TZrTuNVjBhxUNlJPVneFSOZdKo9REsCzXHob5
2sJ3YgiocUSiv1bhVfTdxKa/8rQCmwBwsp8yTVxdPfKhLzJvjQJiVkTaQJSktj5Jy7JC
arFUzlBRYMe91/lhTb1iOjdQ7AhtGgLrwCbqVN7HymxDeEKGVxK9DEuUFewz4WdZvGfO
a75g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=yH/SF0+EmCb353hDcQ/0QVkq0oVhfOab4UR3jEYnb3Q=;
b=XtSRx8JcIOQHoUTY1GmuL+B774VfGSdVKrJvvmcgJwW0u9V5HU9zOjMXIQp/C6BNW0
dz3NYw5wHfoyFKoMwgb+Lx8hty5GasgobSTkYK85L2qQVHXE6WF+V215dIlkGPpt4xY4
Tfiy3/hmYpTrFjxPJ86U4YM0XJUBEsQCLEla8JM02PBdtibqc2CX2rnPVhk9xZJG9LAf
NnTU20KK1TunOjNW6UfQ1OphuUxK63cfVRN8K3kvE+Pk6vw8R8VjN2Uze17vT/BSDhRI
+dEMCsxwmss7qEm8lvvRgJyh3PXBxTrn0sEluNBIpVzZrcfSVh3dNEkTw05XCNJ6xljV
/Jmw==
X-Gm-Message-State: ACgBeo3gLsNTYc9u80/t4qweIW0iURhB87SVr7hC8KCKT6la4eyMkeWv
3NuuPrRs2yz9NyAOX/rMOK1KvMAW2yAIbwLWJJ8=
X-Google-Smtp-Source: AA6agR7HokR2k2rgrrgP+CN0Wby3ulQjFIYay9UCYcwGw/LVMzg033xSwLGE70EuwwAtRJVdOgAMScMWl4Hdrg2W/d8=
X-Received: by 2002:a67:a44d:0:b0:38a:ce33:da9e with SMTP id
p13-20020a67a44d000000b0038ace33da9emr791119vsh.17.1660807969400; Thu, 18 Aug
2022 00:32:49 -0700 (PDT)
MIME-Version: 1.0
Reply-To: bankcentralasiahalobcaxxx@gmail.com
From: Bank Central Asia
Date: Thu, 18 Aug 2022 14:32:35 +0700
Message-ID:
Subject: BANK CENTRAL ASIA - ALWAYS BY YOUR SIDE
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000000e6b3105e67efd3d"
Bcc: majordomo-Owner@nk.ca
X-Spam_score: 16.5
X-Spam_score_int: 165
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: BANK CENTRAL ASIA - JAKARTA INDONESIA FOREIGN REMITTANCE DEPARTMENT
PRE-PAYMENT ADVICE: (U.N-W.B.O-I.M.F-B.C.A -5100-12/22)
Content analysis details: (16.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.217.68 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[centralasiab09[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[centralasiab09[at]gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 LOTTO_DEPT Claims Department
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} BANK CENTRAL ASIA - ALWAYS BY YOUR SIDE
--0000000000000e6b3105e67efd3d
Content-Type: text/plain; charset="UTF-8"
BANK CENTRAL ASIA - JAKARTA INDONESIA
FOREIGN REMITTANCE DEPARTMENT
PRE-PAYMENT ADVICE: (U.N-W.B.O-I.M.F-B.C.A -5100-12/22)
>From The Desk of Mr. Andreas Rahmat Reinhard, Director Foreign Remittance
Department of Bank Central Asia.
Facts and statistics gathered from our human resource database we found out
you have worked extremely hard to get your payment but to no avail because
of the unstable and dishonest officials at the helm of affairs. Your
fund was moved to our bank by the United Nation Debt and Foreign Assets
Committee, Valued $9,200,000 and we are mandated to recover and remit
unpaid debts owed to beneficiaries and companies across the globe to ensure
justice is done through our due processes which are our terms and
conditions of service.
Note: You are obligated to confirm this account, if it is your correct
account information? BBVA Compass, 15 South 20th Street Suite 1202
Birmingham, Alabama 35233 USA because our Bank will not be held responsible
if there should be any wrong transfer.
Thank you for your cooperation.
Regards
Mr. Andreas Rahmat Reinhard
Director Foreign Remittance Department
IMPORTANT NOTICE REGARDING THIS ELECTRONIC MESSAGE:
This message may contain privileged or confidential information. If you are
not the intended recipient of this email, please delete the message and
notify the sender so that we may correct our records.
--0000000000000e6b3105e67efd3d
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
t-size:12pt;font-family:"Times New Roman","serif"">
n style=3D"font-family:Tahoma,"sans-serif";color:black">BANK CENT=
RAL ASIA - JAKARTA INDONESIA
text-align:justify;font-size:12pt;font-family:"Times New Roman",&=
quot;serif"">
color:black">FOREIGN REMITTANCE DEPARTMENT
0cm 0.0001pt;text-align:justify;font-size:12pt;font-family:"Times New=
Roman","serif"">
sans-serif";color:black">PRE-PAYMENT ADVICE: (U.N-W.B.O-I.M.F-B.C.A -5=
100-12/22)
rgin-left:0cm;font-size:12pt;font-family:"Times New Roman","=
serif"">
:black">From The Desk of Mr. Andreas Rahmat Reinhard,=C2=A0Director Foreign=
Remittance Department of Bank Central Asia.=C2=A0
xt-align:justify;margin-right:0cm;margin-left:0cm;font-size:12pt;font-famil=
y:"Times New Roman","serif"">
:Tahoma,"sans-serif";color:black">Facts and statistics gathered f=
rom our human resource database=C2=A0we found out you have worked extremely=
hard to get your=C2=A0payment=C2=A0but to no avail because of the unstable=
and dishonest officials at the helm of affairs. Your fund=C2=A0was moved t=
o our bank=C2=A0by the=C2=A0United Nation=C2=A0Debt=C2=A0and=C2=A0Foreign A=
ssets Committee, Valued $9,200,000 and we are mandated to recover and remit=
unpaid debts owed=C2=A0to beneficiaries and companies across the globe=C2=
=A0to ensure justice is done through our due processes which are our terms =
and conditions of service.
right:0cm;margin-left:0cm;font-size:12pt;font-family:"Times New Roman&=
quot;,"serif"">
";color:black">Note: You are obligated to confirm this account, if it =
is your correct account information?=C2=A0BBVA Compass, 15 South 20th Stree=
t Suite 1202 Birmingham, Alabama 35233 USA=C2=A0because our Bank will not b=
e held responsible if there should be any wrong transfer.
e=3D"text-align:justify;margin-right:0cm;margin-left:0cm;font-size:12pt;fon=
t-family:"Times New Roman","serif"">
-family:Tahoma,"sans-serif";color:black">Thank you=C2=A0for your =
cooperation.
fy;font-size:12pt;font-family:"Times New Roman","serif"=
">Reg=
ards
size:12pt;font-family:"Times New Roman","serif"">
style=3D"font-family:Tahoma,"sans-serif";color:black">Mr. Andreas=
Rahmat Reinhard
ustify;font-size:12pt;font-family:"Times New Roman","serif&q=
uot;">
>Director Foreign Remittance Department
:9.75pt;text-align:justify;margin-right:0cm;margin-left:0cm;font-size:12pt;=
font-family:"Times New Roman","serif"">
=3D"font-size:8pt;font-family:Tahoma,"sans-serif";color:black">IM=
PORTANT NOTICE REGARDING THIS ELECTRONIC MESSAGE:
"margin:0cm 0cm 0.0001pt;text-align:justify;font-size:12pt;font-family:&quo=
t;Times New Roman",serif">
ign:justify;margin-right:0cm;margin-left:0cm;font-size:12pt;font-family:&qu=
ot;Times New Roman","serif"">
nt-family:Tahoma,"sans-serif";color:black">This message may conta=
in privileged or confidential information. If you are not the intended reci=
pient of this email, please delete the message and notify the sender so tha=
t we may correct our records.
--0000000000000e6b3105e67efd3d--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments