Nigerian Spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 18 Jan 2023 17:42:47 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1pIIzJ-000AHH-2K
for dave@doctor.nl2k.ab.ca;
Wed, 18 Jan 2023 17:41:05 -0700
Resent-From: The Doctor
Resent-Date: Wed, 18 Jan 2023 17:41:05 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yb1-f195.google.com ([209.85.219.195]:34724)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1pIHnm-0003GJ-1M
for root@nk.ca;
Wed, 18 Jan 2023 16:25:10 -0700
Received: by mail-yb1-f195.google.com with SMTP id v19so470357ybv.1
for; Wed, 18 Jan 2023 15:22:37 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=SvSv3rK2qNnzqWEaGBbequZgKaCnj74WnTE2xbqwJDo=;
b=HkskUritzkHYHaVa3IGy2CGZzUVGCoAt3YsZvgEe65Dv0ofeXYlSzFofP851I+40PF
rRrLWXb0I7qfDjL4Ukfn1giYmzN20wnZwnikBSmOLQkPFgf4AmehO3H8BWfRgEGqBIrJ
i3CoZc5Sqsx+5qbalVhb0au427dHAxGHmBzNxTlWXFoDoU6mFIcIZQj9oLWfH36R/Tjw
8nTdBASrX1sxYDrfEugwegQxW/2ACh0LdJGxe7Kf+FjQDrlQY4z+kROarNj8HEI1Dl0B
/gWB11VfblZZ7clWfvbtfIp/fsOWLi03lL3HP4JKA59BC+hTbG8pJ6RweYEv+389USpm
CkRw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=SvSv3rK2qNnzqWEaGBbequZgKaCnj74WnTE2xbqwJDo=;
b=GxS9nK/5fr1i4qJiJzcEmCbzH3YSn7dDLNAqtvwJKzION07eVKDWPRpbYvsAagT+S/
ll6wSK1ep4vSdVJ6spBsdbwGtCX5/DD/aK59eiBFkuZp/qnsIY7amci8PEnpYLwsOB6t
4A1XpsA/kc1ug6sQvciSFdLGoviv7SgCTQBTYKcWT/H6KtP7iYF24A6Uu8QKMswHCAkR
IjxVqaaSStataCG7wCdOXZ/0CPRd9DqkSTGG/h0co0I5y6rQTZjAfQdScCn0DUvmk6CM
0ELdh36jeexugtm7ljvpfxW8iW0Mupa5YkTV9lHjSYvno7kdx1ZK96VWAR/POpJR1yfu
Zpvw==
X-Gm-Message-State: AFqh2krKwz2XD1x4vtKIJF1GXGI/xliy1zrFcCL9i9htoIX/viRBlf8O
79Qj5aMqdxatUuMJJz2d1bwG3J/y8p8D4mD4fks=
X-Google-Smtp-Source: AMrXdXvkLe6ZkcbbaI1AiOxfG3NKXY9p7YzTxedKHQ9OggmnCF1DxiqyUsaT6LbXM0eL28DL6w9YZZGpgoFv6HkBFKc=
X-Received: by 2002:a25:8041:0:b0:702:5c2c:c9ee with SMTP id
a1-20020a258041000000b007025c2cc9eemr725397ybn.44.1674084151700; Wed, 18 Jan
2023 15:22:31 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a05:7010:5782:b0:324:f8a6:2515 with HTTP; Wed, 18 Jan 2023
15:22:31 -0800 (PST)
Reply-To: imfdepartmentremmittancesfund@gmail.com
From: alexrobinwhite880
Date: Wed, 18 Jan 2023 23:22:31 +0000
Message-ID:
Subject: INSTRUCTION TO RELEASE YOUR OVERDUE FUND
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: root@nk.ca
X-Spam_score: 14.7
X-Spam_score_int: 147
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: INTERNATIONAL MONETARY FUND (IMF) 164 DE-80939 Berkshire,
London, United Kingdom. TEL:+1 315-633-6608 REF:-XVGNN8809 ATTN: INSTRUCTION
TO RELEASE YOUR OVERDUE FUND we have come to understand that you have lost
a lot of money all because you want to receive your fund, well all that have
been put to a stop as the United nation has promised to assist you with the
s [...]
Content analysis details: (14.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.195 listed in wl.mailspike.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.219.195 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[alexrobinwhite880(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[alexrobinwhite880(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.0 XFER_LOTSA_MONEY Transfer a lot of money
1.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
Subject: {SPAM?} INSTRUCTION TO RELEASE YOUR OVERDUE FUND
INTERNATIONAL MONETARY FUND (IMF)
164 DE-80939 Berkshire, London,
United Kingdom.
TEL:+1 315-633-6608
REF:-XVGNN8809
ATTN: INSTRUCTION TO RELEASE YOUR OVERDUE FUND
we have come to understand that you have lost a lot of money all
because you want to receive your fund, well all that
have been put to a stop as the United nation has promised to assist
you with the sum of $5million in other to compensate you and all you
have to do is fill the below details..
1 full name
2 home phone and cell phone number
3 occupation
4 amount that was lost by you.
Furthermore one Michael Oneal said you sent him to claim the compensation
kindly confirm if you sent him before we do anything regarding it.
Below is our contact details, we are Expecting your prompt reply thank you.
Direct Usa Hotline: +1 315-633-6608
Reply to; imfdepartmentremmittancesfund@gmail.com
Sincerely
Ms. Carla Grasso,
Deputy Managing Director and
Chief Administrative Officer (CAO),
INTERNATIONAL MONETARY FUND.(UNITED NATION)
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 18 Jan 2023 17:42:47 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1pIIzJ-000AHH-2K
for dave@doctor.nl2k.ab.ca;
Wed, 18 Jan 2023 17:41:05 -0700
Resent-From: The Doctor
Resent-Date: Wed, 18 Jan 2023 17:41:05 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yb1-f195.google.com ([209.85.219.195]:34724)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1pIHnm-0003GJ-1M
for root@nk.ca;
Wed, 18 Jan 2023 16:25:10 -0700
Received: by mail-yb1-f195.google.com with SMTP id v19so470357ybv.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=SvSv3rK2qNnzqWEaGBbequZgKaCnj74WnTE2xbqwJDo=;
b=HkskUritzkHYHaVa3IGy2CGZzUVGCoAt3YsZvgEe65Dv0ofeXYlSzFofP851I+40PF
rRrLWXb0I7qfDjL4Ukfn1giYmzN20wnZwnikBSmOLQkPFgf4AmehO3H8BWfRgEGqBIrJ
i3CoZc5Sqsx+5qbalVhb0au427dHAxGHmBzNxTlWXFoDoU6mFIcIZQj9oLWfH36R/Tjw
8nTdBASrX1sxYDrfEugwegQxW/2ACh0LdJGxe7Kf+FjQDrlQY4z+kROarNj8HEI1Dl0B
/gWB11VfblZZ7clWfvbtfIp/fsOWLi03lL3HP4JKA59BC+hTbG8pJ6RweYEv+389USpm
CkRw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=SvSv3rK2qNnzqWEaGBbequZgKaCnj74WnTE2xbqwJDo=;
b=GxS9nK/5fr1i4qJiJzcEmCbzH3YSn7dDLNAqtvwJKzION07eVKDWPRpbYvsAagT+S/
ll6wSK1ep4vSdVJ6spBsdbwGtCX5/DD/aK59eiBFkuZp/qnsIY7amci8PEnpYLwsOB6t
4A1XpsA/kc1ug6sQvciSFdLGoviv7SgCTQBTYKcWT/H6KtP7iYF24A6Uu8QKMswHCAkR
IjxVqaaSStataCG7wCdOXZ/0CPRd9DqkSTGG/h0co0I5y6rQTZjAfQdScCn0DUvmk6CM
0ELdh36jeexugtm7ljvpfxW8iW0Mupa5YkTV9lHjSYvno7kdx1ZK96VWAR/POpJR1yfu
Zpvw==
X-Gm-Message-State: AFqh2krKwz2XD1x4vtKIJF1GXGI/xliy1zrFcCL9i9htoIX/viRBlf8O
79Qj5aMqdxatUuMJJz2d1bwG3J/y8p8D4mD4fks=
X-Google-Smtp-Source: AMrXdXvkLe6ZkcbbaI1AiOxfG3NKXY9p7YzTxedKHQ9OggmnCF1DxiqyUsaT6LbXM0eL28DL6w9YZZGpgoFv6HkBFKc=
X-Received: by 2002:a25:8041:0:b0:702:5c2c:c9ee with SMTP id
a1-20020a258041000000b007025c2cc9eemr725397ybn.44.1674084151700; Wed, 18 Jan
2023 15:22:31 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a05:7010:5782:b0:324:f8a6:2515 with HTTP; Wed, 18 Jan 2023
15:22:31 -0800 (PST)
Reply-To: imfdepartmentremmittancesfund@gmail.com
From: alexrobinwhite880
Date: Wed, 18 Jan 2023 23:22:31 +0000
Message-ID:
Subject: INSTRUCTION TO RELEASE YOUR OVERDUE FUND
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: root@nk.ca
X-Spam_score: 14.7
X-Spam_score_int: 147
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: INTERNATIONAL MONETARY FUND (IMF) 164 DE-80939 Berkshire,
London, United Kingdom. TEL:+1 315-633-6608 REF:-XVGNN8809 ATTN: INSTRUCTION
TO RELEASE YOUR OVERDUE FUND we have come to understand that you have lost
a lot of money all because you want to receive your fund, well all that have
been put to a stop as the United nation has promised to assist you with the
s [...]
Content analysis details: (14.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.195 listed in wl.mailspike.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.219.195 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[alexrobinwhite880(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[alexrobinwhite880(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.0 XFER_LOTSA_MONEY Transfer a lot of money
1.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
Subject: {SPAM?} INSTRUCTION TO RELEASE YOUR OVERDUE FUND
INTERNATIONAL MONETARY FUND (IMF)
164 DE-80939 Berkshire, London,
United Kingdom.
TEL:+1 315-633-6608
REF:-XVGNN8809
ATTN: INSTRUCTION TO RELEASE YOUR OVERDUE FUND
we have come to understand that you have lost a lot of money all
because you want to receive your fund, well all that
have been put to a stop as the United nation has promised to assist
you with the sum of $5million in other to compensate you and all you
have to do is fill the below details..
1 full name
2 home phone and cell phone number
3 occupation
4 amount that was lost by you.
Furthermore one Michael Oneal said you sent him to claim the compensation
kindly confirm if you sent him before we do anything regarding it.
Below is our contact details, we are Expecting your prompt reply thank you.
Direct Usa Hotline: +1 315-633-6608
Reply to; imfdepartmentremmittancesfund@gmail.com
Sincerely
Ms. Carla Grasso,
Deputy Managing Director and
Chief Administrative Officer (CAO),
INTERNATIONAL MONETARY FUND.(UNITED NATION)
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments