Nigerian spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@nl2k.ab.ca
Delivery-date: Wed, 07 Feb 2024 08:44:00 -0700
Received: from mail-ej1-f44.google.com ([209.85.218.44]:51679)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rXk5V-00000000Cmx-2Fer
for dave@nl2k.ab.ca;
Wed, 07 Feb 2024 08:43:52 -0700
Received: by mail-ej1-f44.google.com with SMTP id a640c23a62f3a-a389ea940f1so24433166b.3
for; Wed, 07 Feb 2024 07:41:54 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1707320507; x=1707925307; darn=nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=ps2rnPZwrqZTihnkbJx+NCtCa5Pid226e6WftJfN8zI=;
b=CJyY4ueFMC+nKuafwrTI7cOiSVEYbc3Ly11/R9zoLUpxGon4n35H6xPzYVYXDyAReN
v153z9Bz6jWuxIZIE4dT26CmcLmxNb9NOdtICV5SDzknDilaP7I7bMreY9BMkIi/nNMM
xgMAXwhCWDLs8UM8TgINjJZGhFId06BaUNJd4MhR1cxWXMYJca4X337vq9cfBchW/iTb
xDI+WcmdTWllOiBaN83EpAaOdTvnux9dcaTsfeoZCXlHdjtJxlNd78Ba3V7KEA7QYbgR
3Ny4iZYGGTzVIyek9oyxzbKIOu+YY0GaMC4U3I7N2zOZMhtf/kpFYlpZRjk0nX5B2P8l
4/vQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1707320507; x=1707925307;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=ps2rnPZwrqZTihnkbJx+NCtCa5Pid226e6WftJfN8zI=;
b=QeDMJJXsNCgtHYXvvDYlr4tdPMtbyinY3ctfzqSDkgjNhnJv6uLtJLsp2jqZjweF5w
4GFQzHNpkuni9HWf9EBst9nP4I7r3AovpM3DDVYaPsXLkMKopB4KWwMau9nft1HfO+l+
gQ3ru8fc5HBFY4Xlk9FlMiar/MX+gGapv3Xq3rMNyiMFW4dBgO7FHeXNH4tLOdBve3n3
0hKwjML98F6bKWVKskkxKywkrvwwEjANLboFrhTlsdDKWPc+/q+oRSdJ5BTil8MU039V
CMwrVAH9Ns66HlVhBiVMVMHK74T5aCPbchXctW2BmaqBnZH6+OIgeKzMoFYTNiQwUyrV
bbcg==
X-Forwarded-Encrypted: i=1; AJvYcCXzaLb27KAFctRIDhNHpX0MuAfGNt8bFUIMRTzgZv/g81nv3eG7UsnPQg3edNu6/tmkJBw1LV8GCMoeztLT5oA=
X-Gm-Message-State: AOJu0YzvHxxHo5vUqp4+qezxcFfFcAeRHhaHyZ0sl2TWeGC1ZJCWwTIj
K9Gz46imcN7QapX71pYEnDPXoyzaLpak+UK3UysiIMjIUrGI+JusFXp5rMVSQkD9EchHSQw+nBM
n6D5Gg92rTIzsxzt4Od+8adNrIEyV5753VeANEQA9
X-Google-Smtp-Source: AGHT+IFfHOmBHxS5BhWciDtuMtPu77HP+YDE9b86dzLIXVXQ7WqwXEDTja6jqB9T4OV6ltrp0KLC/z7Mhh43PxiAF2c=
X-Received: by 2002:adf:f381:0:b0:33b:35d7:bef0 with SMTP id
m1-20020adff381000000b0033b35d7bef0mr3966543wro.49.1707320063518; Wed, 07 Feb
2024 07:34:23 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:adf:f241:0:b0:33b:50e2:7a55 with HTTP; Wed, 7 Feb 2024
07:34:20 -0800 (PST)
Reply-To: chriswilliam222111@gmail.com
From: "Mr. Mark Eric"
Date: Wed, 7 Feb 2024 07:34:20 -0800
Message-ID:
Subject: UBA BANK
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: dave@nl2k.ab.ca
X-Spam_score: 16.4
X-Spam_score_int: 164
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- UBA BANK UBA BANK has finalize all the necessary arrangement
and your fund is inside ATM CARD, I write to inform you that your ATM CARD
has been arrived in our office DHL this morning with your pin code of 498
[...]
Content analysis details: (16.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.218.44 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.218.44 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[onone66west9907(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[onone66west9907(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[chriswilliam222111(at)gmail.com]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
1.5 MONEY_ATM_CARD Lots of money on an ATM card
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
1.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.0 MONEY_NOHTML Lots of money in plain text
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 FILL_THIS_FORM Fill in a form with personal information
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
Subject: {SPAM?} UBA BANK
X-Antivirus: AVG (VPS 240207-4, 2/7/2024), Inbound message
X-Antivirus-Status: Clean
--
UBA BANK
UBA BANK has finalize all the necessary arrangement and your fund is
inside ATM CARD, I write to inform you that your ATM CARD has been
arrived in our office DHL this morning with your pin code of 4988, you
advice to contact our sectary his name is Mr. Chris William ,he is
with your ATM CARD which contains US$10.5Million dollars.
Email him on this email with this below information, you can also add
him on Hangout.
Email: chriswilliam222111@gmail.com
1. Full name .............
2. Country...............
3. Contact Address..........
4. Telephone Number ......
5. Occupation .............
6. Age...................
The only money you have to send to them is the delivery charge of
$50,for the delivery of your ATM CARD to you to be successfully in
your home and note that you have to keep your ATM CARD information
secret to avoid diverting/stealing of your money because we registered
your ATM CARD as a parcel.
Ask him what you will do to receive your ATM CARD, try follow the
instruction as I told you, Again you have to make it very urgent.
Thanks
Mr. Mark Eric
P.R.O, DHL
Envelope-to: dave@nl2k.ab.ca
Delivery-date: Wed, 07 Feb 2024 08:44:00 -0700
Received: from mail-ej1-f44.google.com ([209.85.218.44]:51679)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rXk5V-00000000Cmx-2Fer
for dave@nl2k.ab.ca;
Wed, 07 Feb 2024 08:43:52 -0700
Received: by mail-ej1-f44.google.com with SMTP id a640c23a62f3a-a389ea940f1so24433166b.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1707320507; x=1707925307; darn=nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=ps2rnPZwrqZTihnkbJx+NCtCa5Pid226e6WftJfN8zI=;
b=CJyY4ueFMC+nKuafwrTI7cOiSVEYbc3Ly11/R9zoLUpxGon4n35H6xPzYVYXDyAReN
v153z9Bz6jWuxIZIE4dT26CmcLmxNb9NOdtICV5SDzknDilaP7I7bMreY9BMkIi/nNMM
xgMAXwhCWDLs8UM8TgINjJZGhFId06BaUNJd4MhR1cxWXMYJca4X337vq9cfBchW/iTb
xDI+WcmdTWllOiBaN83EpAaOdTvnux9dcaTsfeoZCXlHdjtJxlNd78Ba3V7KEA7QYbgR
3Ny4iZYGGTzVIyek9oyxzbKIOu+YY0GaMC4U3I7N2zOZMhtf/kpFYlpZRjk0nX5B2P8l
4/vQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1707320507; x=1707925307;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=ps2rnPZwrqZTihnkbJx+NCtCa5Pid226e6WftJfN8zI=;
b=QeDMJJXsNCgtHYXvvDYlr4tdPMtbyinY3ctfzqSDkgjNhnJv6uLtJLsp2jqZjweF5w
4GFQzHNpkuni9HWf9EBst9nP4I7r3AovpM3DDVYaPsXLkMKopB4KWwMau9nft1HfO+l+
gQ3ru8fc5HBFY4Xlk9FlMiar/MX+gGapv3Xq3rMNyiMFW4dBgO7FHeXNH4tLOdBve3n3
0hKwjML98F6bKWVKskkxKywkrvwwEjANLboFrhTlsdDKWPc+/q+oRSdJ5BTil8MU039V
CMwrVAH9Ns66HlVhBiVMVMHK74T5aCPbchXctW2BmaqBnZH6+OIgeKzMoFYTNiQwUyrV
bbcg==
X-Forwarded-Encrypted: i=1; AJvYcCXzaLb27KAFctRIDhNHpX0MuAfGNt8bFUIMRTzgZv/g81nv3eG7UsnPQg3edNu6/tmkJBw1LV8GCMoeztLT5oA=
X-Gm-Message-State: AOJu0YzvHxxHo5vUqp4+qezxcFfFcAeRHhaHyZ0sl2TWeGC1ZJCWwTIj
K9Gz46imcN7QapX71pYEnDPXoyzaLpak+UK3UysiIMjIUrGI+JusFXp5rMVSQkD9EchHSQw+nBM
n6D5Gg92rTIzsxzt4Od+8adNrIEyV5753VeANEQA9
X-Google-Smtp-Source: AGHT+IFfHOmBHxS5BhWciDtuMtPu77HP+YDE9b86dzLIXVXQ7WqwXEDTja6jqB9T4OV6ltrp0KLC/z7Mhh43PxiAF2c=
X-Received: by 2002:adf:f381:0:b0:33b:35d7:bef0 with SMTP id
m1-20020adff381000000b0033b35d7bef0mr3966543wro.49.1707320063518; Wed, 07 Feb
2024 07:34:23 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:adf:f241:0:b0:33b:50e2:7a55 with HTTP; Wed, 7 Feb 2024
07:34:20 -0800 (PST)
Reply-To: chriswilliam222111@gmail.com
From: "Mr. Mark Eric"
Date: Wed, 7 Feb 2024 07:34:20 -0800
Message-ID:
Subject: UBA BANK
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: dave@nl2k.ab.ca
X-Spam_score: 16.4
X-Spam_score_int: 164
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- UBA BANK UBA BANK has finalize all the necessary arrangement
and your fund is inside ATM CARD, I write to inform you that your ATM CARD
has been arrived in our office DHL this morning with your pin code of 498
[...]
Content analysis details: (16.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.218.44 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.218.44 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[onone66west9907(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[onone66west9907(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[chriswilliam222111(at)gmail.com]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
1.5 MONEY_ATM_CARD Lots of money on an ATM card
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
1.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.0 MONEY_NOHTML Lots of money in plain text
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 FILL_THIS_FORM Fill in a form with personal information
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
Subject: {SPAM?} UBA BANK
X-Antivirus: AVG (VPS 240207-4, 2/7/2024), Inbound message
X-Antivirus-Status: Clean
--
UBA BANK
UBA BANK has finalize all the necessary arrangement and your fund is
inside ATM CARD, I write to inform you that your ATM CARD has been
arrived in our office DHL this morning with your pin code of 4988, you
advice to contact our sectary his name is Mr. Chris William ,he is
with your ATM CARD which contains US$10.5Million dollars.
Email him on this email with this below information, you can also add
him on Hangout.
Email: chriswilliam222111@gmail.com
1. Full name .............
2. Country...............
3. Contact Address..........
4. Telephone Number ......
5. Occupation .............
6. Age...................
The only money you have to send to them is the delivery charge of
$50,for the delivery of your ATM CARD to you to be successfully in
your home and note that you have to keep your ATM CARD information
secret to avoid diverting/stealing of your money because we registered
your ATM CARD as a parcel.
Ask him what you will do to receive your ATM CARD, try follow the
instruction as I told you, Again you have to make it very urgent.
Thanks
Mr. Mark Eric
P.R.O, DHL
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments