Nigerian spam from G-mail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 11 Jan 2023 09:21:44 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1pFdrE-000A6N-0V
for dave@doctor.nl2k.ab.ca;
Wed, 11 Jan 2023 09:21:44 -0700
Resent-From: The Doctor
Resent-Date: Wed, 11 Jan 2023 09:21:44 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f51.google.com ([209.85.167.51]:40731)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1pFdBv-000411-1H
for doctor@doctor.nl2k.ab.ca;
Wed, 11 Jan 2023 08:39:07 -0700
Received: by mail-lf1-f51.google.com with SMTP id g13so24117293lfv.7
for; Wed, 11 Jan 2023 07:36:32 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=6ALG4kzSdI1SpcdAa4qh6LqMqxbySACxCIS6YY5QjVE=;
b=QZDew8fbRVFhmXVxlbTB2m4YNNaOGEDQU84uImw6yKFKJQJ/+vm47yX1Tmc5gBlhQf
gKCeamdft8HiDewTzqdIN8vP+X6KMBuYyWFx6e9VoI34AEy0NNlFlySzw2eJECeMwUaC
9cauzcMSu7KianQ1eJVm4iLq5tld4DSxCaeqrz3JQUKWKrjH86LzsBcjUZ8tw0YMjLtG
07AaEf1lev64eY6aG9kfb5K9qny7/KEfIeFg70Ct2L0mpwv5uXtZRakADWlkXMPONJb/
6WhAARwJYVnocp17XQalCs2VY66S1XczQGLH2igE6gbc6pr6OT7Q8JdB5HBQndSj+0nM
EEig==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=6ALG4kzSdI1SpcdAa4qh6LqMqxbySACxCIS6YY5QjVE=;
b=Aop8YyqpD+z8FcjjZnIUkX8QE1bAtHK3mIC0o+nC6jT1g6JKf88MGl3VJVScy5ivX6
D0IOKqnUNUHoXtx7zCIHc4fbaLb5d9ejaVNYB3evCVZw/8TWxfBWtoQhkftpS1Fpd5Xk
T/vOYDw2q4f6K3opqCRQBxEG36lEsMlEJAXtsrVpBlEmpYRC13OF5yIy6OduZpZG4M6z
WlSLxGSK6WXrHlNfbVmaeqett/MnMIZIhTYHfRdtxY77RWcVEud5ZVND7VTJWPXFPxHY
DotDPtG0Hl8L4hlOwgPsKgX/bfb29c4jp66gR8uNL7TiTPxNQIDeyF2claBlsT9Ok7f1
qZuA==
X-Gm-Message-State: AFqh2kpHoXB0yz8iU6ED2DuV2dvb4WETmp5O/0wyYYJWjTfUAgAbhQLh
Y7QD/mbN+YzEdTdvRtZA5kSKDh/OIM6Xqjj4ruU=
X-Google-Smtp-Source: AMrXdXtU0n12uN6X4ysVEbt49FROFQz+ZWS48BablORqedGlw+lskoKqcS7Eb+xbCKbwJ0/AZTVLgnVA+DbBnyQ0rFU=
X-Received: by 2002:a05:6512:3c88:b0:4b3:a022:2176 with SMTP id
h8-20020a0565123c8800b004b3a0222176mr4858673lfv.395.1673451385264; Wed, 11
Jan 2023 07:36:25 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a9a:7403:0:b0:231:8929:d63 with HTTP; Wed, 11 Jan 2023
07:36:24 -0800 (PST)
Reply-To: mrs.suzanmark3@gmail.com
From: Mr David
Date: Wed, 11 Jan 2023 07:36:24 -0800
Message-ID:
Subject: RE
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 20.3
X-Spam_score_int: 203
X-Spam_bar: ++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: ATTN: My Dear Good news,The BRITISH HIGH COMMISSION has actually
verified and discovered that your payment has been unnecessarily Delayed
by corrupt officials of the Company who are Trying to divert your fund of
$4 [...]
Content analysis details: (20.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.51 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.51 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[mrs.suzanmark3(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[dhldepartmen2744(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[dhldepartmen2744(at)gmail.com]
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 MONEY_ATM_CARD Lots of money on an ATM card
0.0 FILL_THIS_FORM Fill in a form with personal information
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 MONEY_FORM Lots of money if you fill out a form
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
1.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
Subject: {SPAM?} RE
ATTN: My Dear
Good news,The BRITISH HIGH COMMISSION has actually verified and discovered
that your payment has been unnecessarily Delayed by corrupt officials of the
Company who are Trying to divert your fund of $4,700.000.00 Million
into their private
accounts. Therefore we have obtained an irrevocable payment guarantee on your
Payment with the Bank to make your payment through our new ATM VISA CARD
system which you can use to withdraw your money in any ATM MACHINE around your
area.
So we are here by inviting you to our office to pick up your ATM VISA CARD but
if you cannot be able to come down here in our office in person be inform that
you are going to pay for shipping fee of your ATM visa CARD, so if you are
unable to come down here then you are required to update us so that we will
proceed with the necessary arrangement for the delivery of your ATM VISA CARD.
As of now be informed that all arrangement has been done and the ATM VISA CARD
has be in your name, but to RE-ACTIVATE the ATM Card you have to forward your
current information as requested below to the bank for the ATM Card re-
activcation, then we will send you the ATM CARD for your immediate use.
Here are the information you have to forward to the bank:
1. Your Full Names:______
2. Postal Address:_______
3. Direct Cell Numbers:_______
4. A copy of your id card----------
5. Sex:_____
6.Age:_____
7. Occupation:________
8.Nationality:________
9.whatsapp Number______
Therefore you are advised to contact Bank accountant Manager Mrs.Susan Mark
CONTACT PERSON: Mrs.Susan Mark
E-mail:( mrssusanmarkubabank@gmail.com )
Mr David Nicholas
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 11 Jan 2023 09:21:44 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1pFdrE-000A6N-0V
for dave@doctor.nl2k.ab.ca;
Wed, 11 Jan 2023 09:21:44 -0700
Resent-From: The Doctor
Resent-Date: Wed, 11 Jan 2023 09:21:44 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f51.google.com ([209.85.167.51]:40731)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1pFdBv-000411-1H
for doctor@doctor.nl2k.ab.ca;
Wed, 11 Jan 2023 08:39:07 -0700
Received: by mail-lf1-f51.google.com with SMTP id g13so24117293lfv.7
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=6ALG4kzSdI1SpcdAa4qh6LqMqxbySACxCIS6YY5QjVE=;
b=QZDew8fbRVFhmXVxlbTB2m4YNNaOGEDQU84uImw6yKFKJQJ/+vm47yX1Tmc5gBlhQf
gKCeamdft8HiDewTzqdIN8vP+X6KMBuYyWFx6e9VoI34AEy0NNlFlySzw2eJECeMwUaC
9cauzcMSu7KianQ1eJVm4iLq5tld4DSxCaeqrz3JQUKWKrjH86LzsBcjUZ8tw0YMjLtG
07AaEf1lev64eY6aG9kfb5K9qny7/KEfIeFg70Ct2L0mpwv5uXtZRakADWlkXMPONJb/
6WhAARwJYVnocp17XQalCs2VY66S1XczQGLH2igE6gbc6pr6OT7Q8JdB5HBQndSj+0nM
EEig==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=6ALG4kzSdI1SpcdAa4qh6LqMqxbySACxCIS6YY5QjVE=;
b=Aop8YyqpD+z8FcjjZnIUkX8QE1bAtHK3mIC0o+nC6jT1g6JKf88MGl3VJVScy5ivX6
D0IOKqnUNUHoXtx7zCIHc4fbaLb5d9ejaVNYB3evCVZw/8TWxfBWtoQhkftpS1Fpd5Xk
T/vOYDw2q4f6K3opqCRQBxEG36lEsMlEJAXtsrVpBlEmpYRC13OF5yIy6OduZpZG4M6z
WlSLxGSK6WXrHlNfbVmaeqett/MnMIZIhTYHfRdtxY77RWcVEud5ZVND7VTJWPXFPxHY
DotDPtG0Hl8L4hlOwgPsKgX/bfb29c4jp66gR8uNL7TiTPxNQIDeyF2claBlsT9Ok7f1
qZuA==
X-Gm-Message-State: AFqh2kpHoXB0yz8iU6ED2DuV2dvb4WETmp5O/0wyYYJWjTfUAgAbhQLh
Y7QD/mbN+YzEdTdvRtZA5kSKDh/OIM6Xqjj4ruU=
X-Google-Smtp-Source: AMrXdXtU0n12uN6X4ysVEbt49FROFQz+ZWS48BablORqedGlw+lskoKqcS7Eb+xbCKbwJ0/AZTVLgnVA+DbBnyQ0rFU=
X-Received: by 2002:a05:6512:3c88:b0:4b3:a022:2176 with SMTP id
h8-20020a0565123c8800b004b3a0222176mr4858673lfv.395.1673451385264; Wed, 11
Jan 2023 07:36:25 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a9a:7403:0:b0:231:8929:d63 with HTTP; Wed, 11 Jan 2023
07:36:24 -0800 (PST)
Reply-To: mrs.suzanmark3@gmail.com
From: Mr David
Date: Wed, 11 Jan 2023 07:36:24 -0800
Message-ID:
Subject: RE
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 20.3
X-Spam_score_int: 203
X-Spam_bar: ++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: ATTN: My Dear Good news,The BRITISH HIGH COMMISSION has actually
verified and discovered that your payment has been unnecessarily Delayed
by corrupt officials of the Company who are Trying to divert your fund of
$4 [...]
Content analysis details: (20.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.51 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.51 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[mrs.suzanmark3(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[dhldepartmen2744(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[dhldepartmen2744(at)gmail.com]
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 MONEY_ATM_CARD Lots of money on an ATM card
0.0 FILL_THIS_FORM Fill in a form with personal information
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 MONEY_FORM Lots of money if you fill out a form
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
1.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
Subject: {SPAM?} RE
ATTN: My Dear
Good news,The BRITISH HIGH COMMISSION has actually verified and discovered
that your payment has been unnecessarily Delayed by corrupt officials of the
Company who are Trying to divert your fund of $4,700.000.00 Million
into their private
accounts. Therefore we have obtained an irrevocable payment guarantee on your
Payment with the Bank to make your payment through our new ATM VISA CARD
system which you can use to withdraw your money in any ATM MACHINE around your
area.
So we are here by inviting you to our office to pick up your ATM VISA CARD but
if you cannot be able to come down here in our office in person be inform that
you are going to pay for shipping fee of your ATM visa CARD, so if you are
unable to come down here then you are required to update us so that we will
proceed with the necessary arrangement for the delivery of your ATM VISA CARD.
As of now be informed that all arrangement has been done and the ATM VISA CARD
has be in your name, but to RE-ACTIVATE the ATM Card you have to forward your
current information as requested below to the bank for the ATM Card re-
activcation, then we will send you the ATM CARD for your immediate use.
Here are the information you have to forward to the bank:
1. Your Full Names:______
2. Postal Address:_______
3. Direct Cell Numbers:_______
4. A copy of your id card----------
5. Sex:_____
6.Age:_____
7. Occupation:________
8.Nationality:________
9.whatsapp Number______
Therefore you are advised to contact Bank accountant Manager Mrs.Susan Mark
CONTACT PERSON: Mrs.Susan Mark
E-mail:( mrssusanmarkubabank@gmail.com )
Mr David Nicholas
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments