Nigerian spam from Google gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 27 Sep 2024 01:40:00 -0600

Received: from mail-il1-f174.google.com ([209.85.166.174]:46415)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1su43X-00000000Lbp-1P4l

for dave@doctor.nl2k.ab.ca;

Fri, 27 Sep 2024 00:02:35 -0600

Received: by mail-il1-f174.google.com with SMTP id e9e14a558f8ab-3a1f1ef7550so7762875ab.1

for ; Thu, 26 Sep 2024 23:00:30 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1727416824; x=1728021624; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=zkEe8D1b/uQxCHim4FNZxB8N5zQhSZP3+SznkM8X6b4=;

b=ltZHf3T2Gk8XD/rNkWlPjKYkw7yGUaff5vDjjk1FYynEfcbKtzu2aGp3catTzqZsNY

+0vnVRBuT9YhtE5Yu8k1utIuvkQxvEZULCXuMfiaSLZmYo9y7oLy2uMydIIN0qVRtNpa

IHICspRlw7ze0+QgmN8RgX3jUiNV2Xu4xfgjsU4RiA3lmLUpZbJg5g0L1GeErNVbg9wE

/mZuY7P1U/PEvopROu6lzWl4+tdR+10S1c4rVhQGwJUuuCo5M+cg9ndfpOCKFXarws6/

gg8gSzMNZGtK2g6egwUcrfiwXRD6Qao+oDvPKsshdJckrRdXly/2/MosbaT4Xd25lhk9

GAMg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1727416824; x=1728021624;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=zkEe8D1b/uQxCHim4FNZxB8N5zQhSZP3+SznkM8X6b4=;

b=MV0mvnU2zheP4Kj/39b50sN6gWSLI6wzg4+Y6nlSd02QzgmdEG3zNZ6z9Z5Y/jbHpW

Nf3xmc2cBTlic+ebjONcK1wMqV2mFF3ZLUsMg+DYu+qQfO6F310LwoshGngYPY31vGJf

7z6a/GZg8694CG0tK7ECMShzmBLeFwfE+oSLV4QvpW5lXQ4ZK7os2dI7HqpfI9fIYKob

OSlQgtcLFD15XZqmsc6vTdzhihAAG5ism2ZnsMat2ZTm4qwRVi0B6wFOIA2e8phfq3cP

Ss1g/nVZ+zoov7AvxoWNsvPpDN9OdSVCYHs+IoKRr1h+rq+R9LAy+2r+ghdaG51w1jmu

gdOw==

X-Forwarded-Encrypted: i=1; AJvYcCX+eDzUn3maV2Q/Oyv2O/mz9EDvXxycu8blxlojgaNpW3MzRphu0plxHFrF/c5dvJc8+yKW@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YwVed6JqDGHADrK/XP6YMYYQ35fFogQ3CuTMJGpeyp/wZF/nFai

extoiNS+Y+wF/qoILJj1XO5n8Q2XeWkKcOT+F9zDVWKyjXbrq6hLAR84llzzrPD+QudXNqrd5Y/

RGO55X8TAlZJbHU/hFZB2gtzjIHk=

X-Google-Smtp-Source: AGHT+IEuyVK60qiyMzFsRH9DDAhp/tkPzg4X2zj23et/pfUbhE+YZiAg+S+gUOnQ6rce8+HIM1lPUUYiYHfwSZX91Hk=

X-Received: by 2002:a05:6e02:164b:b0:3a0:9ea3:8d79 with SMTP id

e9e14a558f8ab-3a3451bbd54mr19679585ab.16.1727416823348; Thu, 26 Sep 2024

23:00:23 -0700 (PDT)

MIME-Version: 1.0

Reply-To: piraeusegreecebank@gmail.com

From: "Ms. Martina Polasek"

Date: Fri, 27 Sep 2024 07:00:11 +0100

Message-ID:

Subject: YOUR $2.5 MILLION DOLLARS FUND IS APPROVED!

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000022854806231392d0"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 29.9

X-Spam_score_int: 299

X-Spam_bar: +++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Attention: Dear Fund Beneficiary, This is to officially inform

you that we have been having meetings for the past months now which ended

one week ago with Mr. Ajay Banga the World Bank president and other seven

Continental Executives [...]



Content analysis details: (29.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.166.174 listed in will-spam-for-food.eu.org]

[209.85.166.174 listed in will-spam-for-food.eu.org]

[209.85.166.174 listed in will-spam-for-food.eu.org]

[209.85.166.174 listed in will-spam-for-food.eu.org]

[209.85.166.174 listed in will-spam-for-food.eu.org]

[209.85.166.174 listed in will-spam-for-food.eu.org]

[209.85.166.174 listed in will-spam-for-food.eu.org]

[209.85.166.174 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.166.174 listed in dnsbl.ahbl.org]

[209.85.166.174 listed in dnsbl.ahbl.org]

[209.85.166.174 listed in dnsbl.ahbl.org]

[209.85.166.174 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.166.174 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.166.174 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.166.174 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.166.174 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.166.174 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[abuchisam9(at)gmail.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[abuchisam9(at)gmail.com]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.9 URG_BIZ BODY: Contains urgent matter

1.5 HK_SCAM_N8 BODY: No description available.

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

1.5 BILLION_DOLLARS BODY: Talks about lots of money

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 HK_SCAM No description available.

1.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.2 FILL_THIS_FORM_LOAN Answer loan question(s)

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

0.0 MONEY_FORM Lots of money if you fill out a form

0.0 XFER_LOTSA_MONEY Transfer a lot of money

0.0 FILL_THIS_FORM Fill in a form with personal information

0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information

1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs

1.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

Subject: {SPAM?} YOUR $2.5 MILLION DOLLARS FUND IS APPROVED!



--00000000000022854806231392d0

Content-Type: text/plain; charset="UTF-8"



Attention: Dear Fund Beneficiary,



This is to officially inform you that we have been having meetings for the

past months now which ended one week ago with Mr. Ajay Banga the World Bank

president and other seven Continental Executives boards. In the Congress we

discussed solutions to Scam victim problems.



Note: we have decided to contact you following the reports we received from

Anti-Fraud International Monitoring Group European Union, your name/email

has been submitted to us However, the United Nations in conjunction with

the World Bank have agreed to compensate all the Scam victims we have in

the list. Your compensation fund is the sum of ($2,500,000.00 USD) this

compensation is also including international business, Transactions,

Inheritance, Contract, Gambling/Lottery that failed due to Government

problems etc.



We have tried to contact you several times without success, so we are

sending you this last reminder, We have no choice but to cancel and flag

your Funds, as unsolicited. You are advised to follow the instructions to

receive your funds without any inconvenience.



We have ensured that the payment is made to you via an ATM Visa Card, which

will be issued in your name and sent directly to your address via DHL or

any courier service available in your country. However All responses must

be directed to our representative MR. CHRISTOS MEGALOU the Chief Executive

Officer of Piraeus Greece Bank, who is in position to release your fund in

your own convenient way.



Contact MR. CHRISTOS MEGALOU to claim your fund.



Bank E-MAIL: piraeusegreecebank@gmail.com

Bank site: https://www.piraeusbank.gr

Phone: +306975501627



On contacting the Managing director, make sure you furnish them with your

delivery details as listed below to avoid delivery to wrong hands:



Your Full Name.........

Your Home Address.......

Your Country..........

Your Date of Birth and Gender........

Your Occupation........

Your Post Code..........

Direct Phone Number.......

Your Personal/Company Email Address.......



To avoid further delays, we've requested your urgent response to this email

per the instructions.



Please note that any other contact you made outside his office is at your

own risk.



Thanks,

Best Regards,

Ms. Martina Polasek

Deputy Secretary-General of the World Bank.



--00000000000022854806231392d0

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Attention: Dear Fund Beneficiary,

This is to o=

fficially inform you that we have been having meetings for the past months =

now which ended one week ago with Mr. Ajay Banga the World Bank president a=

nd other seven Continental Executives boards. In the Congress we discussed =

solutions to Scam victim problems.

Note: we have decided to contact =

you following the reports we received from Anti-Fraud International Monitor=

ing Group European Union, your name/email has been submitted to us However,=

the United Nations in conjunction with the World Bank have agreed to compe=

nsate all the Scam victims we have in the list. Your compensation fund is t=

he sum of ($2,500,000.00 USD) this compensation is also including internati=

onal business, Transactions, Inheritance, Contract, Gambling/Lottery that f=

ailed due to Government problems etc.

We have tried to contact you s=

everal times without success, so we are sending you this last reminder, We =

have no choice but to cancel and flag your Funds, as unsolicited. You are a=

dvised to follow the instructions to receive your funds without any inconve=

nience.

We have ensured that the payment is made to you via an ATM V=

isa Card, which will be issued in your name and sent directly to your addre=

ss via DHL or any courier service available in your country. However All re=

sponses must be directed to our representative =C2=A0MR. CHRISTOS MEGALOU t=

he Chief Executive Officer of Piraeus Greece Bank, who is in position to re=

lease your fund in your own convenient way.

Contact MR. CHRISTOS MEG=

ALOU =C2=A0to claim your fund.

Bank E-MAIL:
segreecebank@gmail.com">piraeusegreecebank@gmail.com

Bank site:
ref=3D"https://www.piraeusbank.gr">https://www.piraeusbank.gr

Phone:=

+306975501627

On contacting the Managing director, make sure you fu=

rnish them with your delivery details as listed below to avoid delivery to =

wrong hands:

Your Full Name.........
Your Home Address.......
=

Your Country..........
Your Date of Birth and Gender........
Your Occ=

upation........
Your Post Code..........
Direct Phone Number.......
r>Your Personal/Company Email Address.......

To avoid further delays=

, we've requested your urgent response to this email per the instructio=

ns.

Please note that any other contact you made outside his office i=

s at your own risk.

Thanks,
Best Regards,
Ms. Martina Polasek<=

br>Deputy Secretary-General of the World Bank.




--00000000000022854806231392d0--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA