Nigerian spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 01 Dec 2023 19:48:38 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))
(envelope-from)
id 1r9G2V-00000000L1y-4AdQ
for dave@doctor.nl2k.ab.ca;
Fri, 01 Dec 2023 19:47:31 -0700
Resent-From: The Doctor
Resent-Date: Fri, 1 Dec 2023 19:47:31 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f52.google.com ([209.85.160.52]:60657)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97 (FreeBSD))
(envelope-from)
id 1r9Eb1-000000006f8-2AcD
for doctor@doctor.nl2k.ab.ca;
Fri, 01 Dec 2023 18:15:11 -0700
Received: by mail-oa1-f52.google.com with SMTP id 586e51a60fabf-1fab887fab8so706050fac.0
for; Fri, 01 Dec 2023 17:13:05 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1701479579; x=1702084379; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=uKp4dz0cWeNfe7ufSt2/nlPLiq0ZlmoI6e66y7iE+vM=;
b=DS0OQ8uJ+co4I69/BDENewhuHEkdQd+V0En7XTKCDXIC3uEAJRGYJZon2BGnxE8KRm
isaaX97pqHFr/aik2l9BCznmx+J52zgVbZ6dc3FouEvd4YB9hxZMYvrFz1o7d1mPf/py
6CDCkCvfgLpnze+Qr64cC5s1HS31KranvjkdYrAba62bSsZcfm/+GTiFQMk3eu0jf2zu
F307IoH27EZZ4okdtoTrokP95nAhcYSCw9VkKgaud1Sgu9vgD1/GOmbS1cCbWQld1iq7
x0I1D3vVz7RvNdS9pHguACLOrah4ojsGyZKeDhRZpOTDcHctFLhTzIjoXepXsqEQy8WB
sjAg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1701479579; x=1702084379;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=uKp4dz0cWeNfe7ufSt2/nlPLiq0ZlmoI6e66y7iE+vM=;
b=tXqxHwjttcslifPcgRfTUzaqN6WXElpvXQ3aZOm4N6rXs4m12giacID7LJqinjUi+K
gFTtdmMY4j48Z2xnyt3zf6u6exvn2Dqjj7GktotWsW8q3zg5Sy9CnH7bCLMHRaYLZWTc
euv5ObIC5e6AB9a3D6y16gy8N7LZaS7LmGXHBEkdA7qGV1qesPZb29kGbZ0E2odf2zbC
JUSoD4RyeIaoHlAOLqYs+EF0uDXGcb2xGJlq09Y9hyofCNeNTVKUOju7p6t20iKICAMP
qRNaN4NouSajkqknBagvg6wvOsnSzwvLOYydiTzIKW68W5pGEUf3FtiqL8+P4/2J0bDA
3Xvw==
X-Gm-Message-State: AOJu0YyE9fDzxjvWj3EDdjmB5MH6rDe6Y/5L4u41/VcJc3wMg113ODPC
q0XzYmWfnepZN7FnttPmldQu+qUbn977nAe1TTE=
X-Google-Smtp-Source: AGHT+IFck9D79Lk7bJ69kY/s01WBtU7vs4Iy/5Lq5fHpNRJPkDPwnwWryuE4ttvkUyE2HxMb7Tef23+f2FLABMixy44=
X-Received: by 2002:a05:6870:b28a:b0:1fa:2660:1a41 with SMTP id
c10-20020a056870b28a00b001fa26601a41mr531210oao.48.1701479579011; Fri, 01 Dec
2023 17:12:59 -0800 (PST)
MIME-Version: 1.0
Reply-To: bankdeliveryemailny3@gmail.com
From: Bank of America
Date: Sat, 2 Dec 2023 02:13:12 -0800
Message-ID:
Subject: Urgent Attention:...
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000e64e73060b7c95fd"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 19.7
X-Spam_score_int: 197
X-Spam_bar: +++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Urgent Attention ******Payment Approval of US$12,000,000.00
** ** You are being legally contacted regarding the release of your long
awaited fund. After a detailed review of your file, the United Nations Monetary
Unit has been authorized to release your fund immedia [...]
Content analysis details: (19.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.52 listed in wl.mailspike.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.52 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[banktransferdeptcentre(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[bankdeliveryemailny3(at)gmail.com]
0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
1.1 HK_SCAM_N3 BODY: No description available.
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.5 HK_SCAM_N2 BODY: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.0 HK_SCAM No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 LOTS_OF_MONEY Huge... sums of money
2.6 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 XFER_LOTSA_MONEY Transfer a lot of money
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 FILL_THIS_FORM Fill in a form with personal information
1.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 MONEY_FORM Lots of money if you fill out a form
1.8 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
Subject: {SPAM?} Urgent Attention:...
X-Antivirus: AVG (VPS 231201-4, 12/1/2023), Inbound message
X-Antivirus-Status: Clean
--000000000000e64e73060b7c95fd
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--=20
Urgent Attention
******Payment Approval of US$12,000,000.00 ** **
You are being legally contacted regarding the release of your long awaited
fund. After a detailed review of your file, the United Nations Monetary
Unit has been authorized to release your fund immediately.
The sum of US$12 Million Dollars has been approved in your favor via my
desk. This payment will be release to you through Bank to Bank transfer
under a special arrangement.
Be informed that we are working in collaborations with the United Nations
secretary General Mr.Ant=C3=B3nio Guterres, who authorize the immediate pay=
ment
of your long awaited fund without any further delay.
Note that the above fund has been cleared from terrorist or fraud related
activities and we guarantee delivery of these funds as good, clean, cleared
fund of non-criminal origin.
PERSONAL INFORMATION REQUESTED:
1. Full Name
2. Contact Address
3. Direct Telephone Number
4. Date of Birth
5. Marital Status
6. Next of Kin
7. Relationship
Kindly get back to us with the stated information as soon as possible.
Regards,
Mr.Jerry Decembre
Vice President, Consumer & Business Banking
Bank of America New York
--000000000000e64e73060b7c95fd
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
x">--
=3D"gmail_signature">Urgent Attention
=C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 ******Payment Approval of US$12,000,000.00 *** ***
>You are being legally contacted regarding the release of your long awaited=
fund. After a detailed review of your file, the United Nations Monetary Un=
it has been authorized to release your fund immediately.
The sum of =
US$12 Million Dollars has been approved in your favor via my desk. This pay=
ment will be release to you through Bank to Bank transfer under a special a=
rrangement.
Be informed that we are working in collaborations with t=
he United Nations secretary General Mr.Ant=C3=B3nio Guterres, who authorize=
the immediate payment of your long awaited fund without any further delay.=
Note that the above fund has been cleared from terrorist or fraud r=
elated activities and we guarantee delivery of these funds as good, clean, =
cleared fund of non-criminal origin.
PERSONAL INFORMATION REQUESTED:=
1. Full Name
2. Contact Address
3. Direct Telephone Number
>4. Date of Birth
5. Marital Status
6. Next of Kin
7. Relationship=
Kindly get back to us with the stated information as soon as possib=
le.
Regards,
Mr.Jerry Decembre
Vice President, Consumer &a=
mp; Business Banking
Bank of America New York
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 01 Dec 2023 19:48:38 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))
(envelope-from
id 1r9G2V-00000000L1y-4AdQ
for dave@doctor.nl2k.ab.ca;
Fri, 01 Dec 2023 19:47:31 -0700
Resent-From: The Doctor
Resent-Date: Fri, 1 Dec 2023 19:47:31 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f52.google.com ([209.85.160.52]:60657)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97 (FreeBSD))
(envelope-from
id 1r9Eb1-000000006f8-2AcD
for doctor@doctor.nl2k.ab.ca;
Fri, 01 Dec 2023 18:15:11 -0700
Received: by mail-oa1-f52.google.com with SMTP id 586e51a60fabf-1fab887fab8so706050fac.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1701479579; x=1702084379; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=uKp4dz0cWeNfe7ufSt2/nlPLiq0ZlmoI6e66y7iE+vM=;
b=DS0OQ8uJ+co4I69/BDENewhuHEkdQd+V0En7XTKCDXIC3uEAJRGYJZon2BGnxE8KRm
isaaX97pqHFr/aik2l9BCznmx+J52zgVbZ6dc3FouEvd4YB9hxZMYvrFz1o7d1mPf/py
6CDCkCvfgLpnze+Qr64cC5s1HS31KranvjkdYrAba62bSsZcfm/+GTiFQMk3eu0jf2zu
F307IoH27EZZ4okdtoTrokP95nAhcYSCw9VkKgaud1Sgu9vgD1/GOmbS1cCbWQld1iq7
x0I1D3vVz7RvNdS9pHguACLOrah4ojsGyZKeDhRZpOTDcHctFLhTzIjoXepXsqEQy8WB
sjAg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1701479579; x=1702084379;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=uKp4dz0cWeNfe7ufSt2/nlPLiq0ZlmoI6e66y7iE+vM=;
b=tXqxHwjttcslifPcgRfTUzaqN6WXElpvXQ3aZOm4N6rXs4m12giacID7LJqinjUi+K
gFTtdmMY4j48Z2xnyt3zf6u6exvn2Dqjj7GktotWsW8q3zg5Sy9CnH7bCLMHRaYLZWTc
euv5ObIC5e6AB9a3D6y16gy8N7LZaS7LmGXHBEkdA7qGV1qesPZb29kGbZ0E2odf2zbC
JUSoD4RyeIaoHlAOLqYs+EF0uDXGcb2xGJlq09Y9hyofCNeNTVKUOju7p6t20iKICAMP
qRNaN4NouSajkqknBagvg6wvOsnSzwvLOYydiTzIKW68W5pGEUf3FtiqL8+P4/2J0bDA
3Xvw==
X-Gm-Message-State: AOJu0YyE9fDzxjvWj3EDdjmB5MH6rDe6Y/5L4u41/VcJc3wMg113ODPC
q0XzYmWfnepZN7FnttPmldQu+qUbn977nAe1TTE=
X-Google-Smtp-Source: AGHT+IFck9D79Lk7bJ69kY/s01WBtU7vs4Iy/5Lq5fHpNRJPkDPwnwWryuE4ttvkUyE2HxMb7Tef23+f2FLABMixy44=
X-Received: by 2002:a05:6870:b28a:b0:1fa:2660:1a41 with SMTP id
c10-20020a056870b28a00b001fa26601a41mr531210oao.48.1701479579011; Fri, 01 Dec
2023 17:12:59 -0800 (PST)
MIME-Version: 1.0
Reply-To: bankdeliveryemailny3@gmail.com
From: Bank of America
Date: Sat, 2 Dec 2023 02:13:12 -0800
Message-ID:
Subject: Urgent Attention:...
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000e64e73060b7c95fd"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 19.7
X-Spam_score_int: 197
X-Spam_bar: +++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Urgent Attention ******Payment Approval of US$12,000,000.00
** ** You are being legally contacted regarding the release of your long
awaited fund. After a detailed review of your file, the United Nations Monetary
Unit has been authorized to release your fund immedia [...]
Content analysis details: (19.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.52 listed in wl.mailspike.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.52 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[banktransferdeptcentre(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[bankdeliveryemailny3(at)gmail.com]
0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
1.1 HK_SCAM_N3 BODY: No description available.
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.5 HK_SCAM_N2 BODY: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.0 HK_SCAM No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 LOTS_OF_MONEY Huge... sums of money
2.6 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 XFER_LOTSA_MONEY Transfer a lot of money
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 FILL_THIS_FORM Fill in a form with personal information
1.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 MONEY_FORM Lots of money if you fill out a form
1.8 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
Subject: {SPAM?} Urgent Attention:...
X-Antivirus: AVG (VPS 231201-4, 12/1/2023), Inbound message
X-Antivirus-Status: Clean
--000000000000e64e73060b7c95fd
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--=20
Urgent Attention
******Payment Approval of US$12,000,000.00 ** **
You are being legally contacted regarding the release of your long awaited
fund. After a detailed review of your file, the United Nations Monetary
Unit has been authorized to release your fund immediately.
The sum of US$12 Million Dollars has been approved in your favor via my
desk. This payment will be release to you through Bank to Bank transfer
under a special arrangement.
Be informed that we are working in collaborations with the United Nations
secretary General Mr.Ant=C3=B3nio Guterres, who authorize the immediate pay=
ment
of your long awaited fund without any further delay.
Note that the above fund has been cleared from terrorist or fraud related
activities and we guarantee delivery of these funds as good, clean, cleared
fund of non-criminal origin.
PERSONAL INFORMATION REQUESTED:
1. Full Name
2. Contact Address
3. Direct Telephone Number
4. Date of Birth
5. Marital Status
6. Next of Kin
7. Relationship
Kindly get back to us with the stated information as soon as possible.
Regards,
Mr.Jerry Decembre
Vice President, Consumer & Business Banking
Bank of America New York
--000000000000e64e73060b7c95fd
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
x">--
=3D"gmail_signature">Urgent Attention
=C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 ******Payment Approval of US$12,000,000.00 *** ***
>You are being legally contacted regarding the release of your long awaited=
fund. After a detailed review of your file, the United Nations Monetary Un=
it has been authorized to release your fund immediately.
The sum of =
US$12 Million Dollars has been approved in your favor via my desk. This pay=
ment will be release to you through Bank to Bank transfer under a special a=
rrangement.
Be informed that we are working in collaborations with t=
he United Nations secretary General Mr.Ant=C3=B3nio Guterres, who authorize=
the immediate payment of your long awaited fund without any further delay.=
Note that the above fund has been cleared from terrorist or fraud r=
elated activities and we guarantee delivery of these funds as good, clean, =
cleared fund of non-criminal origin.
PERSONAL INFORMATION REQUESTED:=
1. Full Name
2. Contact Address
3. Direct Telephone Number
>4. Date of Birth
5. Marital Status
6. Next of Kin
7. Relationship=
Kindly get back to us with the stated information as soon as possib=
le.
Regards,
Mr.Jerry Decembre
Vice President, Consumer &a=
mp; Business Banking
Bank of America New York
--000000000000e64e73060b7c95fd--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments