Nigerian spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 29 Nov 2023 07:33:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))
(envelope-from)
id 1r8Lau-000000009RX-3hZe
for dave@doctor.nl2k.ab.ca;
Wed, 29 Nov 2023 07:31:16 -0700
Resent-From: The Doctor
Resent-Date: Wed, 29 Nov 2023 07:31:16 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f180.google.com ([209.85.208.180]:60664)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97 (FreeBSD))
(envelope-from)
id 1r8GF0-00000000PJe-2BEk
for doctor@doctor.nl2k.ab.ca;
Wed, 29 Nov 2023 01:48:27 -0700
Received: by mail-lj1-f180.google.com with SMTP id 38308e7fff4ca-2c9bfbf08d0so3700761fa.0
for; Wed, 29 Nov 2023 00:46:19 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1701247572; x=1701852372; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=S9wo575EsEvfp241D+0EyXLazHvxnWVCEavS6dKCEJc=;
b=Vyw1GNLMB5fC82HguwMlvNLrBW/coJeeINQQZKBHDlQCQ/nPREzuJLPRpmnVeSLeI2
d8oTbUPcU6qKWTUpcuCKF/fohctU2vIJfrolVQlGGSWjEbD/QRyyKfR4DZqFxz1xyoEb
smlcJ7mV/yYvrfwc+RXYhXR2BgzOf2sludIKPvHcAVYDHJ95Uyc/VEyQ0AwuIRM+y4Y6
ZgZ0CPaa6acp4I3l/gO9pAgw5iJNVZMObXzPZRDgOShyFsoYhbxH2yLnS1BoxcmAdZWs
Qe4igAFp2v/IgfIP3pRlid2yEJc0mFRXa+orqZy2th2drU1Oezq+ocVPK9QMc3xYkpNt
RP4A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1701247572; x=1701852372;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=S9wo575EsEvfp241D+0EyXLazHvxnWVCEavS6dKCEJc=;
b=DAXtBiGHP+V4MsPJ/OeSOlNGqJ1kifFStqdWvT7OgsaAopd1Rp0RVQtzNo1vqU+cOC
xnbYKNOJrSfqiXv884dleP3jG4CYScBhvkHt+9wdKNBuxkA2ut1TbfFwWnFVpj5JCQDe
xBRUNlYvBeLnr0XMP/4Lg685IrCoM1TJdFTWv3zWkvhZrHqUnvXcqwEkolBtQLorTt/8
gAW47P88r0LYZ7zHtjsjwdnzjzjLGZ2xOSLhaLXA2FB5isLI2ntlGPBhPXr03f1jYk7y
Iu0Yp8ymBZibyCpxIPHkTiX3umUCiKcRIhLrtuc6j2sgk6kLNZOpS0UnAY5P/129ecxm
kgDw==
X-Gm-Message-State: AOJu0YyiTo2mXwO/y0uR00Ok9cqbdbWh+IXlFCZyhslHUjgV6kb5SSit
S5KwdBRNn2EhNWBPkyi5h5U2ou11SHg8f536HqI=
X-Google-Smtp-Source: AGHT+IGNguujBEvwHpHedx2a0ddobm+x4kMO4Q052E3sShKHsWoAs32xUdLS6dEKLsjUavkD/XfLTcNXLbB6j/5d2vc=
X-Received: by 2002:a2e:891a:0:b0:2c8:32b4:c431 with SMTP id
d26-20020a2e891a000000b002c832b4c431mr11697598lji.40.1701247572444; Wed, 29
Nov 2023 00:46:12 -0800 (PST)
MIME-Version: 1.0
Reply-To: bankdeliveryemailny3@gmail.com
From: Bank of America
Date: Wed, 29 Nov 2023 09:46:23 -0800
Message-ID:
Subject: Urgent Attention:
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000003b0904060b4691bb"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 18.7
X-Spam_score_int: 187
X-Spam_bar: ++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Urgent Attention ******Payment Approval of US$12,000,000.00
** ** You are being legally contacted regarding the release of your long
awaited fund. After a detailed review of your file, the United Nations Monetary
Unit has been authorized to release your fund immedia [...]
Content analysis details: (18.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.180 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.180 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[officeknymail150(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[bankdeliveryemailny3(at)gmail.com]
0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[officeknymail150(at)gmail.com]
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.5 HK_SCAM_N2 BODY: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 HK_SCAM No description available.
1.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 FILL_THIS_FORM Fill in a form with personal information
2.6 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 XFER_LOTSA_MONEY Transfer a lot of money
0.0 MONEY_FORM Lots of money if you fill out a form
1.8 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} Urgent Attention:
X-Antivirus: AVG (VPS 231128-4, 11/28/2023), Inbound message
X-Antivirus-Status: Clean
--0000000000003b0904060b4691bb
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--=20
Urgent Attention
******Payment Approval of US$12,000,000.00 ** **
You are being legally contacted regarding the release of your long awaited
fund. After a detailed review of your file, the United Nations Monetary
Unit has been authorized to release your fund immediately.
The sum of US$12 Million Dollars has been approved in your favor via my
desk. This payment will be release to you through Bank to Bank transfer
under a special arrangement.
Be informed that we are working in collaborations with the United Nations
secretary General Mr.Ant=C3=B3nio Guterres, who authorize the immediate pay=
ment
of your long awaited fund without any further delay.
Note that the above fund has been cleared from terrorist or fraud related
activities and we guarantee delivery of these funds as good, clean, cleared
fund of non-criminal origin.
PERSONAL INFORMATION REQUESTED:
1. Full Name:...................
2. Current Address:.............
3. Telephone Number:............
4. Date of Birth:...............
5. Marital Status:..............
6. Next of Kin:.................
7. Relationship:................
Kindly get back to us with the stated information as soon as possible.
Regards,
Mr.Jerry Decembre
Vice President, Consumer & Business Banking
Bank of America New York
--0000000000003b0904060b4691bb
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
x">--
=3D"gmail_signature">Urgent Attention
=C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 ******Payment Approval of US$12,000,000.00 *** ***
>You are being legally contacted regarding the release of your long awaited=
fund. After a detailed review of your file, the United Nations Monetary Un=
it has been authorized to release your fund immediately.
The sum of =
US$12 Million Dollars has been approved in your favor via my desk. This pay=
ment will be release to you through Bank to Bank transfer under a special a=
rrangement.
Be informed that we are working in collaborations with t=
he United Nations secretary General Mr.Ant=C3=B3nio Guterres, who authorize=
the immediate payment of your long awaited fund without any further delay.=
Note that the above fund has been cleared from terrorist or fraud r=
elated activities and we guarantee delivery of these funds as good, clean, =
cleared fund of non-criminal origin.
PERSONAL INFORMATION REQUESTED:=
1. Full Name:...................
2. Current Address:............=
.
3. Telephone Number:............
4. Date of Birth:...............
r>5. Marital Status:..............
6. Next of Kin:.................
7=
. Relationship:................
Kindly get back to us with the state=
d information as soon as possible.
Regards,
Mr.Jerry Decembre=
Vice President, Consumer & Business Banking
Bank of America New =
York
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 29 Nov 2023 07:33:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))
(envelope-from
id 1r8Lau-000000009RX-3hZe
for dave@doctor.nl2k.ab.ca;
Wed, 29 Nov 2023 07:31:16 -0700
Resent-From: The Doctor
Resent-Date: Wed, 29 Nov 2023 07:31:16 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f180.google.com ([209.85.208.180]:60664)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97 (FreeBSD))
(envelope-from
id 1r8GF0-00000000PJe-2BEk
for doctor@doctor.nl2k.ab.ca;
Wed, 29 Nov 2023 01:48:27 -0700
Received: by mail-lj1-f180.google.com with SMTP id 38308e7fff4ca-2c9bfbf08d0so3700761fa.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1701247572; x=1701852372; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=S9wo575EsEvfp241D+0EyXLazHvxnWVCEavS6dKCEJc=;
b=Vyw1GNLMB5fC82HguwMlvNLrBW/coJeeINQQZKBHDlQCQ/nPREzuJLPRpmnVeSLeI2
d8oTbUPcU6qKWTUpcuCKF/fohctU2vIJfrolVQlGGSWjEbD/QRyyKfR4DZqFxz1xyoEb
smlcJ7mV/yYvrfwc+RXYhXR2BgzOf2sludIKPvHcAVYDHJ95Uyc/VEyQ0AwuIRM+y4Y6
ZgZ0CPaa6acp4I3l/gO9pAgw5iJNVZMObXzPZRDgOShyFsoYhbxH2yLnS1BoxcmAdZWs
Qe4igAFp2v/IgfIP3pRlid2yEJc0mFRXa+orqZy2th2drU1Oezq+ocVPK9QMc3xYkpNt
RP4A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1701247572; x=1701852372;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=S9wo575EsEvfp241D+0EyXLazHvxnWVCEavS6dKCEJc=;
b=DAXtBiGHP+V4MsPJ/OeSOlNGqJ1kifFStqdWvT7OgsaAopd1Rp0RVQtzNo1vqU+cOC
xnbYKNOJrSfqiXv884dleP3jG4CYScBhvkHt+9wdKNBuxkA2ut1TbfFwWnFVpj5JCQDe
xBRUNlYvBeLnr0XMP/4Lg685IrCoM1TJdFTWv3zWkvhZrHqUnvXcqwEkolBtQLorTt/8
gAW47P88r0LYZ7zHtjsjwdnzjzjLGZ2xOSLhaLXA2FB5isLI2ntlGPBhPXr03f1jYk7y
Iu0Yp8ymBZibyCpxIPHkTiX3umUCiKcRIhLrtuc6j2sgk6kLNZOpS0UnAY5P/129ecxm
kgDw==
X-Gm-Message-State: AOJu0YyiTo2mXwO/y0uR00Ok9cqbdbWh+IXlFCZyhslHUjgV6kb5SSit
S5KwdBRNn2EhNWBPkyi5h5U2ou11SHg8f536HqI=
X-Google-Smtp-Source: AGHT+IGNguujBEvwHpHedx2a0ddobm+x4kMO4Q052E3sShKHsWoAs32xUdLS6dEKLsjUavkD/XfLTcNXLbB6j/5d2vc=
X-Received: by 2002:a2e:891a:0:b0:2c8:32b4:c431 with SMTP id
d26-20020a2e891a000000b002c832b4c431mr11697598lji.40.1701247572444; Wed, 29
Nov 2023 00:46:12 -0800 (PST)
MIME-Version: 1.0
Reply-To: bankdeliveryemailny3@gmail.com
From: Bank of America
Date: Wed, 29 Nov 2023 09:46:23 -0800
Message-ID:
Subject: Urgent Attention:
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000003b0904060b4691bb"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 18.7
X-Spam_score_int: 187
X-Spam_bar: ++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Urgent Attention ******Payment Approval of US$12,000,000.00
** ** You are being legally contacted regarding the release of your long
awaited fund. After a detailed review of your file, the United Nations Monetary
Unit has been authorized to release your fund immedia [...]
Content analysis details: (18.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.180 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.180 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[officeknymail150(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[bankdeliveryemailny3(at)gmail.com]
0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[officeknymail150(at)gmail.com]
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.5 HK_SCAM_N2 BODY: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 HK_SCAM No description available.
1.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 FILL_THIS_FORM Fill in a form with personal information
2.6 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 XFER_LOTSA_MONEY Transfer a lot of money
0.0 MONEY_FORM Lots of money if you fill out a form
1.8 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} Urgent Attention:
X-Antivirus: AVG (VPS 231128-4, 11/28/2023), Inbound message
X-Antivirus-Status: Clean
--0000000000003b0904060b4691bb
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--=20
Urgent Attention
******Payment Approval of US$12,000,000.00 ** **
You are being legally contacted regarding the release of your long awaited
fund. After a detailed review of your file, the United Nations Monetary
Unit has been authorized to release your fund immediately.
The sum of US$12 Million Dollars has been approved in your favor via my
desk. This payment will be release to you through Bank to Bank transfer
under a special arrangement.
Be informed that we are working in collaborations with the United Nations
secretary General Mr.Ant=C3=B3nio Guterres, who authorize the immediate pay=
ment
of your long awaited fund without any further delay.
Note that the above fund has been cleared from terrorist or fraud related
activities and we guarantee delivery of these funds as good, clean, cleared
fund of non-criminal origin.
PERSONAL INFORMATION REQUESTED:
1. Full Name:...................
2. Current Address:.............
3. Telephone Number:............
4. Date of Birth:...............
5. Marital Status:..............
6. Next of Kin:.................
7. Relationship:................
Kindly get back to us with the stated information as soon as possible.
Regards,
Mr.Jerry Decembre
Vice President, Consumer & Business Banking
Bank of America New York
--0000000000003b0904060b4691bb
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
x">--
=3D"gmail_signature">Urgent Attention
=C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 ******Payment Approval of US$12,000,000.00 *** ***
>You are being legally contacted regarding the release of your long awaited=
fund. After a detailed review of your file, the United Nations Monetary Un=
it has been authorized to release your fund immediately.
The sum of =
US$12 Million Dollars has been approved in your favor via my desk. This pay=
ment will be release to you through Bank to Bank transfer under a special a=
rrangement.
Be informed that we are working in collaborations with t=
he United Nations secretary General Mr.Ant=C3=B3nio Guterres, who authorize=
the immediate payment of your long awaited fund without any further delay.=
Note that the above fund has been cleared from terrorist or fraud r=
elated activities and we guarantee delivery of these funds as good, clean, =
cleared fund of non-criminal origin.
PERSONAL INFORMATION REQUESTED:=
1. Full Name:...................
2. Current Address:............=
.
3. Telephone Number:............
4. Date of Birth:...............
r>5. Marital Status:..............
6. Next of Kin:.................
7=
. Relationship:................
Kindly get back to us with the state=
d information as soon as possible.
Regards,
Mr.Jerry Decembre=
Vice President, Consumer & Business Banking
Bank of America New =
York
--0000000000003b0904060b4691bb--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments