Nigerian spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 25 Oct 2023 08:05:09 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.2 (FreeBSD))
(envelope-from)
id 1qveUm-000D9W-0v
for dave@doctor.nl2k.ab.ca;
Wed, 25 Oct 2023 08:04:28 -0600
Resent-From: The Doctor
Resent-Date: Wed, 25 Oct 2023 08:04:28 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f174.google.com ([209.85.214.174]:61678)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96.2 (FreeBSD))
(envelope-from)
id 1qvb1S-000OKA-35
for root@nk.ca;
Wed, 25 Oct 2023 04:22:03 -0600
Received: by mail-pl1-f174.google.com with SMTP id d9443c01a7336-1bdf4752c3cso36124175ad.2
for; Wed, 25 Oct 2023 03:20:00 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1698229195; x=1698833995; darn=nk.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=A+F4GEapecAssvXRn0EW1fJSLdXECmn4jt3rOZtnILY=;
b=PREDgd3gKAtpvVvcyel8qQpN/mY1Hc2WKifvLgryMQFgQagldweNTw44TYwUGttOFw
Cpw5kk6m9wyX6X4wWEk6g/7EATQYr36OqXaM6s6Pfd+oM5JpSKnHUD0eDKpq3x9O94hx
LrHCa8VS5fP6q+kxl4771WV9j/rnvarSq5oJFbYy7XCnX2qAaNpM3OygRaHPhCC6jsrM
5QQz9jqAJDEpJFRfzeBQ3dJ8pFCNzSQQfVCkC7EkoxXtDTqaDpviCPGmZ0G/EnqKqGjz
xY65XTyi3OkG1u5xVnEBldKb4kr2zbpQJQjB+L6gotIqzf78OnuxW0Vh+qduD9l4312O
19eg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1698229195; x=1698833995;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=A+F4GEapecAssvXRn0EW1fJSLdXECmn4jt3rOZtnILY=;
b=hT/+/uodJcNKj8QoxqMpsD8D83QUsyqEcxIl4HJOziwHdzSD327gkBa8oN7CL/eNsy
LmpqTQPWtQ+hMh6n01moP2JRrdVI6/mrIdJ1WCsdhvTNFzV39FttKQnHuEEFPDVTk/fK
TvFn1LJz8tHqw3/WvjgfJInx5Y39zS3u0p5Iom4nq0sdQOdmo27OTonPFs7YOPsdKp/g
ptiXv5tlmX/QqAxhv2Y1MPWPOTra6Nhtnx6UCil1sy3ovKZxb4FDzO2bPzDY+ErT1EJc
rIK8LHArTOLCn5QK2TMSZQ51k8X0VO3//Og7Tr1Mvt7PoUs+WBONlMQnzz0o8dMr/S/R
zcmg==
X-Gm-Message-State: AOJu0YyuWOIGGQ01XbIKAi7hF4qWushX5P05uaWNRruePdDwdmZUerCi
ARAJL89Y14qwy+uvy4LKSnXgPFSV8EV6YJqyPF80iXfJ10D5wPYY
X-Google-Smtp-Source: AGHT+IHRCcKXb/uXMZ2RIuIV1kTWy4vAahyxeTfXLAJcj8jzo+pbwQiMPkuR5YqDbgc8uuZi47EHf5z6v6ZrJBuY4Iw=
X-Received: by 2002:a05:6214:5008:b0:658:c75c:1946 with SMTP id
jo8-20020a056214500800b00658c75c1946mr16250307qvb.52.1698227307137; Wed, 25
Oct 2023 02:48:27 -0700 (PDT)
MIME-Version: 1.0
Reply-To: batimosu@gmail.com
From: "Ms.Helena Willem"
Date: Wed, 25 Oct 2023 02:48:15 -0700
Message-ID:
Subject: ATTENTION NEEDED
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000063cebe0608875b36"
Bcc: root@nk.ca
X-Spam_score: 17.5
X-Spam_score_int: 175
X-Spam_bar: +++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings:-Sir/Madam This is to acknowledge the receipts of
your unclaimed funds discovery.Did you receive any information regarding
of your unclaimed funds payment from the Bank?If Not. I write this official
letter to yo [...]
Content analysis details: (17.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.214.174 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.214.174 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[ousmanechakiraht(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.9 URG_BIZ BODY: Contains urgent matter
2.7 UNCLAIMED_MONEY BODY: People just leave money laying around
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
0.5 SUBJ_ATTENTION ATTENTION in Subject
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.5 MONEY_ATM_CARD Lots of money on an ATM card
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} ATTENTION NEEDED
X-Antivirus: AVG (VPS 231024-8, 10/24/2023), Inbound message
X-Antivirus-Status: Clean
--00000000000063cebe0608875b36
Content-Type: text/plain; charset="UTF-8"
Greetings:-Sir/Madam
This is to acknowledge the receipts of your unclaimed funds discovery.Did
you receive any information regarding of your unclaimed funds payment from
the Bank?If Not. I write this official letter to you for your information
about your recovered funds,Though. it's is my duty to send you this
official letter to update you about your unclaimed payment funds,My Name
are Ms.Helena Willem,I Hope this message meets you in good health!We at
Post-bank N V. (Subsidiary Of Ing Bank),Treasury/Fund Management Dept.has
been mandated to have your unclaimed funds in ATM CARD worth ($8.5Millions
Usd) from our affiliate bank in Africa which has been moved and deposited
in our bank here in Netherlands as an OFFSHORE funds and your inability to
receive it initially through ATM CARD as arranged before in the past was
failed.
Kindly be informed that it will now be processed and transferred to you
directly through the Electronics wire to wire bank transfer to your
will/choices be nominated bank account in any part of the world of your
choices through our bank here.
You are now advised to get back to us immediately you receive this message
on your acceptance to this new plans so that we can inform you on what is
required from you for the wire transfer to be carried out and your urgent
response will be highly be appreciated to get this over in no due matter
concluded once and for all in your own interest.
You are hereby advised to contact Mr. Erik Van Daan, The Foreign Operation
Officer in any of these E:Post: ( batimosu@gmail.com ) for further
directives.
Waiting for your urgent attention and cooperation on this very important
matter.
Sincerely Yours.
Ms.Helena Willem.
Customer Desk Officer.
Postbank N V.
Netherlands.
--00000000000063cebe0608875b36
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--00000000000063cebe0608875b36--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 25 Oct 2023 08:05:09 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.2 (FreeBSD))
(envelope-from
id 1qveUm-000D9W-0v
for dave@doctor.nl2k.ab.ca;
Wed, 25 Oct 2023 08:04:28 -0600
Resent-From: The Doctor
Resent-Date: Wed, 25 Oct 2023 08:04:28 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f174.google.com ([209.85.214.174]:61678)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96.2 (FreeBSD))
(envelope-from
id 1qvb1S-000OKA-35
for root@nk.ca;
Wed, 25 Oct 2023 04:22:03 -0600
Received: by mail-pl1-f174.google.com with SMTP id d9443c01a7336-1bdf4752c3cso36124175ad.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1698229195; x=1698833995; darn=nk.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=A+F4GEapecAssvXRn0EW1fJSLdXECmn4jt3rOZtnILY=;
b=PREDgd3gKAtpvVvcyel8qQpN/mY1Hc2WKifvLgryMQFgQagldweNTw44TYwUGttOFw
Cpw5kk6m9wyX6X4wWEk6g/7EATQYr36OqXaM6s6Pfd+oM5JpSKnHUD0eDKpq3x9O94hx
LrHCa8VS5fP6q+kxl4771WV9j/rnvarSq5oJFbYy7XCnX2qAaNpM3OygRaHPhCC6jsrM
5QQz9jqAJDEpJFRfzeBQ3dJ8pFCNzSQQfVCkC7EkoxXtDTqaDpviCPGmZ0G/EnqKqGjz
xY65XTyi3OkG1u5xVnEBldKb4kr2zbpQJQjB+L6gotIqzf78OnuxW0Vh+qduD9l4312O
19eg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1698229195; x=1698833995;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=A+F4GEapecAssvXRn0EW1fJSLdXECmn4jt3rOZtnILY=;
b=hT/+/uodJcNKj8QoxqMpsD8D83QUsyqEcxIl4HJOziwHdzSD327gkBa8oN7CL/eNsy
LmpqTQPWtQ+hMh6n01moP2JRrdVI6/mrIdJ1WCsdhvTNFzV39FttKQnHuEEFPDVTk/fK
TvFn1LJz8tHqw3/WvjgfJInx5Y39zS3u0p5Iom4nq0sdQOdmo27OTonPFs7YOPsdKp/g
ptiXv5tlmX/QqAxhv2Y1MPWPOTra6Nhtnx6UCil1sy3ovKZxb4FDzO2bPzDY+ErT1EJc
rIK8LHArTOLCn5QK2TMSZQ51k8X0VO3//Og7Tr1Mvt7PoUs+WBONlMQnzz0o8dMr/S/R
zcmg==
X-Gm-Message-State: AOJu0YyuWOIGGQ01XbIKAi7hF4qWushX5P05uaWNRruePdDwdmZUerCi
ARAJL89Y14qwy+uvy4LKSnXgPFSV8EV6YJqyPF80iXfJ10D5wPYY
X-Google-Smtp-Source: AGHT+IHRCcKXb/uXMZ2RIuIV1kTWy4vAahyxeTfXLAJcj8jzo+pbwQiMPkuR5YqDbgc8uuZi47EHf5z6v6ZrJBuY4Iw=
X-Received: by 2002:a05:6214:5008:b0:658:c75c:1946 with SMTP id
jo8-20020a056214500800b00658c75c1946mr16250307qvb.52.1698227307137; Wed, 25
Oct 2023 02:48:27 -0700 (PDT)
MIME-Version: 1.0
Reply-To: batimosu@gmail.com
From: "Ms.Helena Willem"
Date: Wed, 25 Oct 2023 02:48:15 -0700
Message-ID:
Subject: ATTENTION NEEDED
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000063cebe0608875b36"
Bcc: root@nk.ca
X-Spam_score: 17.5
X-Spam_score_int: 175
X-Spam_bar: +++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings:-Sir/Madam This is to acknowledge the receipts of
your unclaimed funds discovery.Did you receive any information regarding
of your unclaimed funds payment from the Bank?If Not. I write this official
letter to yo [...]
Content analysis details: (17.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.214.174 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.214.174 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[ousmanechakiraht(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.9 URG_BIZ BODY: Contains urgent matter
2.7 UNCLAIMED_MONEY BODY: People just leave money laying around
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
0.5 SUBJ_ATTENTION ATTENTION in Subject
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.5 MONEY_ATM_CARD Lots of money on an ATM card
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} ATTENTION NEEDED
X-Antivirus: AVG (VPS 231024-8, 10/24/2023), Inbound message
X-Antivirus-Status: Clean
--00000000000063cebe0608875b36
Content-Type: text/plain; charset="UTF-8"
Greetings:-Sir/Madam
This is to acknowledge the receipts of your unclaimed funds discovery.Did
you receive any information regarding of your unclaimed funds payment from
the Bank?If Not. I write this official letter to you for your information
about your recovered funds,Though. it's is my duty to send you this
official letter to update you about your unclaimed payment funds,My Name
are Ms.Helena Willem,I Hope this message meets you in good health!We at
Post-bank N V. (Subsidiary Of Ing Bank),Treasury/Fund Management Dept.has
been mandated to have your unclaimed funds in ATM CARD worth ($8.5Millions
Usd) from our affiliate bank in Africa which has been moved and deposited
in our bank here in Netherlands as an OFFSHORE funds and your inability to
receive it initially through ATM CARD as arranged before in the past was
failed.
Kindly be informed that it will now be processed and transferred to you
directly through the Electronics wire to wire bank transfer to your
will/choices be nominated bank account in any part of the world of your
choices through our bank here.
You are now advised to get back to us immediately you receive this message
on your acceptance to this new plans so that we can inform you on what is
required from you for the wire transfer to be carried out and your urgent
response will be highly be appreciated to get this over in no due matter
concluded once and for all in your own interest.
You are hereby advised to contact Mr. Erik Van Daan, The Foreign Operation
Officer in any of these E:Post: ( batimosu@gmail.com ) for further
directives.
Waiting for your urgent attention and cooperation on this very important
matter.
Sincerely Yours.
Ms.Helena Willem.
Customer Desk Officer.
Postbank N V.
Netherlands.
--00000000000063cebe0608875b36
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Greetings:-Sir/Madam
This is to acknowledge the rec=
eipts of your unclaimed funds discovery.Did you receive any information reg=
arding of your unclaimed funds payment from the Bank?If Not. I write this o=
fficial letter to you for your information about your recovered funds,Thoug=
h. it's is my duty to send you this official letter to update you about=
your unclaimed payment funds,My Name are Ms.Helena Willem,I Hope this mess=
age meets you in good health!We at Post-bank N V. (Subsidiary Of Ing Bank),=
Treasury/Fund Management Dept.has been mandated to have your unclaimed fund=
s in ATM CARD worth ($8.5Millions Usd) from our affiliate bank in Africa wh=
ich has been moved and deposited in our bank here in Netherlands as an OFFS=
HORE funds and your inability to receive it initially through ATM CARD as a=
rranged before in the past was failed.
Kindly be informed that it wi=
ll now be processed and transferred to you directly through the Electronics=
wire to wire bank transfer to your will/choices be nominated bank account =
in any part of the world of your choices through our bank here.
You =
are now advised to get back to us immediately you receive this message on y=
our acceptance to this new plans so that we can inform you on what is requi=
red from you for the wire transfer to be carried out and your urgent respon=
se will be highly be appreciated to get this over in no due matter conclude=
d once and for all in your own interest.
You are hereby advised to c=
ontact Mr. Erik Van Daan, The Foreign Operation Officer in any of these E:P=
ost: ( batimosu@gmail.com ) for f=
urther directives.
Waiting for your urgent attention and cooperation=
on this very important matter.
Sincerely Yours.
Ms.Helena Willem=
.
Customer Desk Officer.
Postbank N V.
Netherlands.
This is to acknowledge the rec=
eipts of your unclaimed funds discovery.Did you receive any information reg=
arding of your unclaimed funds payment from the Bank?If Not. I write this o=
fficial letter to you for your information about your recovered funds,Thoug=
h. it's is my duty to send you this official letter to update you about=
your unclaimed payment funds,My Name are Ms.Helena Willem,I Hope this mess=
age meets you in good health!We at Post-bank N V. (Subsidiary Of Ing Bank),=
Treasury/Fund Management Dept.has been mandated to have your unclaimed fund=
s in ATM CARD worth ($8.5Millions Usd) from our affiliate bank in Africa wh=
ich has been moved and deposited in our bank here in Netherlands as an OFFS=
HORE funds and your inability to receive it initially through ATM CARD as a=
rranged before in the past was failed.
Kindly be informed that it wi=
ll now be processed and transferred to you directly through the Electronics=
wire to wire bank transfer to your will/choices be nominated bank account =
in any part of the world of your choices through our bank here.
You =
are now advised to get back to us immediately you receive this message on y=
our acceptance to this new plans so that we can inform you on what is requi=
red from you for the wire transfer to be carried out and your urgent respon=
se will be highly be appreciated to get this over in no due matter conclude=
d once and for all in your own interest.
You are hereby advised to c=
ontact Mr. Erik Van Daan, The Foreign Operation Officer in any of these E:P=
ost: ( batimosu@gmail.com ) for f=
urther directives.
Waiting for your urgent attention and cooperation=
on this very important matter.
Sincerely Yours.
Ms.Helena Willem=
.
Customer Desk Officer.
Postbank N V.
Netherlands.
--00000000000063cebe0608875b36--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments