Nigerian Google Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 21 Jan 2024 17:59:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rRidt-00000000Ckk-3pRf
for dave@doctor.nl2k.ab.ca;
Sun, 21 Jan 2024 17:58:26 -0700
Resent-From: The Doctor
Resent-Date: Sun, 21 Jan 2024 17:58:25 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-il1-f182.google.com ([209.85.166.182]:50258)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rRew7-000000008Cl-2Ppe
for bin@nl2k.ab.ca;
Sun, 21 Jan 2024 14:01:02 -0700
Received: by mail-il1-f182.google.com with SMTP id e9e14a558f8ab-361a38dd171so9703575ab.0
for; Sun, 21 Jan 2024 12:59:05 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1705870739; x=1706475539; darn=nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=/zsdddPgmCAlZek852yvg7goRsVDuVHYO0TeKsaVdu8=;
b=foa2MGoyTUYP9NhgUMvmi8Ch5jH+nxIESK4qCfT2KGcS+iWaQKhE1vSfS4a3FlhYec
1xRhkijDIPhc6a4co946kea6/hTe19RCDcuxsazeDdjRxc7wHCjLjW4bs2NAOn2DodZL
6NSczVs+/Itmoq/xClp/CrpFJg6Cj96gxmVbtFFfatTgLVa9g2BR1z9hKs+lkmzIt4tA
5FOaH5IKqpKxf+7O3/C/wF5r1guV5rapnf4wNU4NBLccIbcf6aU/krW+lMNSNvUTjkPV
ELpmyi5/fFSJ8ENLe2gfkyfsbCwtuCEk+4Fk4XCYbfuUc1BQpR6oWdk+kWoVFZoc4ku4
ovXw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1705870739; x=1706475539;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=/zsdddPgmCAlZek852yvg7goRsVDuVHYO0TeKsaVdu8=;
b=MfMW5jF9vSYa7gkm3ahAYsd/7PK0XIYOtwUNJELLzV3mkQZOgZCHLjAsuBCegeky1A
shixsvdSWP3aC+89fvmeOTS1+X3Dmix3JZH9Jaa/ePWjlrhZOa0ZhkuE7Ngl8QjeACeW
OI7DdlVxOIUoODYEACp0yfCefqdnD8X8VOyFChCkrw9DpAErrH14hnGVi+clgZHXpVPD
9QQXc1rEsIq1sdQpeOqGGjCBYyAfFNjJiU/QkjtBqbz+WpkJ0ORv4RZ24imVjcuIluZd
cWvdfjbm5R9Mjd4DoeAT57uAKYgPPpxYKDJ0PtKF6CGfilpueFb2eTamWvGZJSLru2JA
tOkQ==
X-Gm-Message-State: AOJu0YwvYzXIDZTK8/miKeFPVu3qUfridb4SFU6wrcc8bk2kDbwnxTvH
cLmswGKHdWYTVbV6E6kfZexnKj6AEJ9wiPqLvjUEDQhmRXcQ3XBJJWvwst+JvuAN8ORvqFumfDM
gL8J5ri+oDPe14Jzdqss2BFkJMnQ=
X-Google-Smtp-Source: AGHT+IEDsACszrC+tCcq50iW5u7SurBsyMWRDJYUvU1YWylbc1yoKUcIAtIwG+fYwFIpZPd3qhJ6KjNJ/0529/4UpFU=
X-Received: by 2002:a05:6e02:4a7:b0:360:a469:3889 with SMTP id
e7-20020a056e0204a700b00360a4693889mr4776892ils.56.1705870738660; Sun, 21 Jan
2024 12:58:58 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:ad5:5b8e:0:b0:2fd:c1a2:ad29 with HTTP; Sun, 21 Jan 2024
12:58:55 -0800 (PST)
Reply-To: brainmoynihan558@gmail.com
From: BRAIN MOYNIHAN
Date: Sun, 21 Jan 2024 12:58:55 -0800
Message-ID:
Subject: ATTENTION BENNEFICIALRY
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: bin@nl2k.ab.ca
X-Spam_score: 25.8
X-Spam_score_int: 258
X-Spam_bar: +++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- ATTENTION BENEFICIARY BANK of America has finalize all
the necessary arrangement and your fund is inside ATM CARD, I write to inform
you that your ATM CARD has been arrived in our Bank this morning with your
pin code, you [...]
Content analysis details: (25.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.166.182 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.182 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[brainmoynihan558(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[chibunnaofficial(at)gmail.com]
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.5 SUBJ_ATTENTION ATTENTION in Subject
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
2.6 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.4 MONEY_NOHTML Lots of money in plain text
1.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
1.5 MONEY_ATM_CARD Lots of money on an ATM card
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FORM Lots of money if you fill out a form
2.3 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
Subject: {SPAM?} ATTENTION BENNEFICIALRY
--
ATTENTION BENEFICIARY
BANK of America has finalize all the necessary arrangement and your
fund is inside
ATM CARD, I write to inform you that your ATM CARD has been arrived in our
Bank this morning with your pin code, you advice to contact our
sectary his name is Mr brain moynihan,he is with your ATM CARD which contains
US$10.8 Million dollars.
Email him on this email(brainmoynihan558@gmail.com)
with this below
information.
1. Full name .............
2. Country...............
3. Contact Address..........
4. Telephone Number ......
5. Occupation .............
6. Age...................
Ask him what you will do to receive your ATM CARD, try follow the
instruction as I told you, Again you have to make it very urgent.
Thanks
Mr brain moynihan
Bank of America
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 21 Jan 2024 17:59:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rRidt-00000000Ckk-3pRf
for dave@doctor.nl2k.ab.ca;
Sun, 21 Jan 2024 17:58:26 -0700
Resent-From: The Doctor
Resent-Date: Sun, 21 Jan 2024 17:58:25 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-il1-f182.google.com ([209.85.166.182]:50258)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rRew7-000000008Cl-2Ppe
for bin@nl2k.ab.ca;
Sun, 21 Jan 2024 14:01:02 -0700
Received: by mail-il1-f182.google.com with SMTP id e9e14a558f8ab-361a38dd171so9703575ab.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1705870739; x=1706475539; darn=nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=/zsdddPgmCAlZek852yvg7goRsVDuVHYO0TeKsaVdu8=;
b=foa2MGoyTUYP9NhgUMvmi8Ch5jH+nxIESK4qCfT2KGcS+iWaQKhE1vSfS4a3FlhYec
1xRhkijDIPhc6a4co946kea6/hTe19RCDcuxsazeDdjRxc7wHCjLjW4bs2NAOn2DodZL
6NSczVs+/Itmoq/xClp/CrpFJg6Cj96gxmVbtFFfatTgLVa9g2BR1z9hKs+lkmzIt4tA
5FOaH5IKqpKxf+7O3/C/wF5r1guV5rapnf4wNU4NBLccIbcf6aU/krW+lMNSNvUTjkPV
ELpmyi5/fFSJ8ENLe2gfkyfsbCwtuCEk+4Fk4XCYbfuUc1BQpR6oWdk+kWoVFZoc4ku4
ovXw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1705870739; x=1706475539;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=/zsdddPgmCAlZek852yvg7goRsVDuVHYO0TeKsaVdu8=;
b=MfMW5jF9vSYa7gkm3ahAYsd/7PK0XIYOtwUNJELLzV3mkQZOgZCHLjAsuBCegeky1A
shixsvdSWP3aC+89fvmeOTS1+X3Dmix3JZH9Jaa/ePWjlrhZOa0ZhkuE7Ngl8QjeACeW
OI7DdlVxOIUoODYEACp0yfCefqdnD8X8VOyFChCkrw9DpAErrH14hnGVi+clgZHXpVPD
9QQXc1rEsIq1sdQpeOqGGjCBYyAfFNjJiU/QkjtBqbz+WpkJ0ORv4RZ24imVjcuIluZd
cWvdfjbm5R9Mjd4DoeAT57uAKYgPPpxYKDJ0PtKF6CGfilpueFb2eTamWvGZJSLru2JA
tOkQ==
X-Gm-Message-State: AOJu0YwvYzXIDZTK8/miKeFPVu3qUfridb4SFU6wrcc8bk2kDbwnxTvH
cLmswGKHdWYTVbV6E6kfZexnKj6AEJ9wiPqLvjUEDQhmRXcQ3XBJJWvwst+JvuAN8ORvqFumfDM
gL8J5ri+oDPe14Jzdqss2BFkJMnQ=
X-Google-Smtp-Source: AGHT+IEDsACszrC+tCcq50iW5u7SurBsyMWRDJYUvU1YWylbc1yoKUcIAtIwG+fYwFIpZPd3qhJ6KjNJ/0529/4UpFU=
X-Received: by 2002:a05:6e02:4a7:b0:360:a469:3889 with SMTP id
e7-20020a056e0204a700b00360a4693889mr4776892ils.56.1705870738660; Sun, 21 Jan
2024 12:58:58 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:ad5:5b8e:0:b0:2fd:c1a2:ad29 with HTTP; Sun, 21 Jan 2024
12:58:55 -0800 (PST)
Reply-To: brainmoynihan558@gmail.com
From: BRAIN MOYNIHAN
Date: Sun, 21 Jan 2024 12:58:55 -0800
Message-ID:
Subject: ATTENTION BENNEFICIALRY
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: bin@nl2k.ab.ca
X-Spam_score: 25.8
X-Spam_score_int: 258
X-Spam_bar: +++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- ATTENTION BENEFICIARY BANK of America has finalize all
the necessary arrangement and your fund is inside ATM CARD, I write to inform
you that your ATM CARD has been arrived in our Bank this morning with your
pin code, you [...]
Content analysis details: (25.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.166.182 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.182 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[brainmoynihan558(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[chibunnaofficial(at)gmail.com]
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.5 SUBJ_ATTENTION ATTENTION in Subject
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
2.6 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.4 MONEY_NOHTML Lots of money in plain text
1.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
1.5 MONEY_ATM_CARD Lots of money on an ATM card
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FORM Lots of money if you fill out a form
2.3 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
Subject: {SPAM?} ATTENTION BENNEFICIALRY
--
ATTENTION BENEFICIARY
BANK of America has finalize all the necessary arrangement and your
fund is inside
ATM CARD, I write to inform you that your ATM CARD has been arrived in our
Bank this morning with your pin code, you advice to contact our
sectary his name is Mr brain moynihan,he is with your ATM CARD which contains
US$10.8 Million dollars.
Email him on this email(brainmoynihan558@gmail.com)
with this below
information.
1. Full name .............
2. Country...............
3. Contact Address..........
4. Telephone Number ......
5. Occupation .............
6. Age...................
Ask him what you will do to receive your ATM CARD, try follow the
instruction as I told you, Again you have to make it very urgent.
Thanks
Mr brain moynihan
Bank of America
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments