French language Nigerian Spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 04 Jul 2025 10:10:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1uXiz3-00000000IRj-005g
for dave@doctor.nl2k.ab.ca;
Fri, 04 Jul 2025 10:09:53 -0600
Resent-From: The Doctor
Resent-Date: Fri, 4 Jul 2025 10:09:52 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f195.google.com ([209.85.208.195]:59449)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1uXhR8-000000007oF-2W2R
for sales@nk.ca;
Fri, 04 Jul 2025 08:30:55 -0600
Received: by mail-lj1-f195.google.com with SMTP id 38308e7fff4ca-32b553e33e6so8812581fa.2
for; Fri, 04 Jul 2025 07:28:51 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1751639324; x=1752244124; darn=nk.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=8KgtYAFSyIZSuUiTQJ8Rc0VWhW5VJzD/X9tYdZEkKmM=;
b=CqYAgF2ozExa1odWU8GytmJRmXbg0T+v+HknfgMeZZVSzyMFVp1BPm0S/OYdHEb2iM
IE+cCqjg+15ssJAq+rx87xqZrVAN3liOhjUEgcluCfP4+VCSWZAZWZxzfuF0CbqeznK1
jA+6NuyNxhH7hm8eK/XUILdb17Nn14zr1R+jj2V+hOYwmfF9VtLbE4GIAuqBV8Zfrcxt
woY/ShbyPuM70YxLzKNpmIQby8Hg7vwShbLrUXIksD0CdrcJLeHIVsUiDlRO8IECr2hi
kJOp9Gp2Uoi4vekpwz447PtwrXpHiXRL1oqS6UL9ulfZ+LVEGl7Um/ye/PYlPz4I4+wj
FM2A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1751639324; x=1752244124;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=8KgtYAFSyIZSuUiTQJ8Rc0VWhW5VJzD/X9tYdZEkKmM=;
b=qknTFew62tuAKabzuJluF1saFt5yI4X2pku+6FQdl84M++AK/b2Od3BDpigzud5Vye
dtUXoOnEyBlh39Dr1uFSBwnFnm/L98NvP+QYmsp4HPrtGxZuPVHLKbGKeR1FHQ7ZaMLx
CQ9Wa2QGT0UOsthVoxuYWX1PW70r7HharXPOhcB1F6VEqeQaAS5cLl6bTjECB06lDPFF
arh2fkZTPwPlpWEkD1vLoZCgYWO4a0oGbfqqBKWUvj/ZryApMQHqzQpbICn+//ldzISx
RKLmEgVD6ilHPpHayPbxKPBatJTrXxjQkV/gjUor48Haq3vMM2tV4nssdBkrtui90JAt
5T9A==
X-Forwarded-Encrypted: i=1; AJvYcCVM0AA4jbMdGfEu5i63MEjg8tr2W3X5XOO+0pCZFIvhhO7jYRpmCAG17U8WQ8MzBkuIRR9lJw==@nk.ca
X-Gm-Message-State: AOJu0YwM9ESdpQsfPEz9SGeSBSik3fAVHvqfTzFH4BYxHRudB4wJ94CM
kciBUNjwV/4pFM0JFGBYqMIurZ07DoKu3+1qUZ0ozCRMqzuvpuVIjdqHPw3N471978NrSeI24ux
Bee+qgnakAWAsTlPIOjSRGkY+FkeyPYo=
X-Gm-Gg: ASbGncv7cAlqszqkUAk5+f3a39ivxrvlSjb0KSfWh4ZvF8/lqua4YFwJWXZzIopsN8v
rEkh/T2h7q5NxQyQFj5FMejQ2cg7IGzKfXtdi1jGH0vusiyeSR+XoUCVQnnd/CSdL0jI5a4ZbDC
jCA04fjLfvef0eMUFFgAUCB89Vvvu2aNH27TcIFa3iDgaM5CgpkQS8wVyZd7VLJI2PId69niNk2
po=
X-Google-Smtp-Source: AGHT+IGZnP8KhiUaG6OmLtObrabm1GlHEEIAGqhYwUJ32pcS3YKAZD8J6hJb3/6fzE5z9a5yqKInbB2vwUwePR/X8Fg=
X-Received: by 2002:a2e:a585:0:b0:32a:7122:58d8 with SMTP id
38308e7fff4ca-32f00c6703amr10001601fa.8.1751639323478; Fri, 04 Jul 2025
07:28:43 -0700 (PDT)
MIME-Version: 1.0
Reply-To: cfc.ubagroup77@gmail.com
From: Kristalina Georgieva
Date: Fri, 4 Jul 2025 07:28:31 -0700
X-Gm-Features: Ac12FXwfMVQ9c1NUk2GXuWk-842Yuj2I5yfp9X5gmAp_aVeBXepNJfiO1iYj3QM
Message-ID:
Subject: Attention!
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000a692a406391b4f05"
Bcc: sales@nk.ca
X-Spam_score: 12.6
X-Spam_score_int: 126
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Attention ! Cher propriétaire de l'adresse courriel ! Je
suis Mme Kristalina Georgieva, directrice et présidente (FMI) d'UBA (SUCCURSALE
ROYAUME-UNI). Nous vous informons que le Fonds monétaire international (FMI)
à Washington, DC, États-Unis, est pr [...]
Content analysis details: (12.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.208.195 listed in dnsbl.ahbl.org]
[209.85.208.195 listed in dnsbl.ahbl.org]
[209.85.208.195 listed in dnsbl.ahbl.org]
[209.85.208.195 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.208.195 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.208.195 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.208.195 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.208.195 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.208.195 listed in will-spam-for-food.eu.org]
[209.85.208.195 listed in will-spam-for-food.eu.org]
[209.85.208.195 listed in will-spam-for-food.eu.org]
[209.85.208.195 listed in will-spam-for-food.eu.org]
[209.85.208.195 listed in will-spam-for-food.eu.org]
[209.85.208.195 listed in will-spam-for-food.eu.org]
[209.85.208.195 listed in will-spam-for-food.eu.org]
[209.85.208.195 listed in will-spam-for-food.eu.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.195 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[cfc.ubagroup77(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[ogoc2799(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[ogoc2799(at)gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.195 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 LOTS_OF_MONEY Huge... sums of money
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Attention!
--000000000000a692a406391b4f05
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Attention !
Cher propri=C3=A9taire de l'adresse courriel !
Je suis Mme Kristalina Georgieva, directrice et pr=C3=A9sidente (FMI) d'UBA
(SUCCURSALE ROYAUME-UNI). Nous vous informons que le Fonds mon=C3=A9taire
international (FMI) =C3=A0 Washington, DC, =C3=89tats-Unis, est pr=C3=A9sen=
t dans notre
pays pour enqu=C3=AAter sur une fraude en ligne. Vous avez re=C3=A7u cette
information aujourd'hui, car votre adresse courriel figure sur la liste des
victimes de fraude dans ce pays.
Renseignements suppl=C3=A9mentaires : (FMI), Washington, DC, indemnise tous=
les
pays fraudeurs de notre pays, et votre adresse courriel figure sur ces
listes. Notre banque a donc confi=C3=A9 =C3=A0 (FMI) le transfert de votre =
fonds
d'indemnisation par carte de cr=C3=A9dit ou par virement bancaire.
Cependant, nous avons d=C3=A9cid=C3=A9 de transf=C3=A9rer ce fonds dans vot=
re compte, d'un
montant de 1 500 000,00 $ (un million cinq cent mille dollars), par carte
Visa ou par virement bancaire. Nous ne pourrons pas faire ce paiement en
utilisant seulement votre adresse e-mail.
Veuillez contacter UNITED BANK OF AFRICA imm=C3=A9diatement, car votre
financement est maintenant approuv=C3=A9. Contactez d=C3=A8s maintenant le =
directeur
d'UNITED BANK FOR AFRICA, M. OLIVER ALAWUBA.
Courriel : (cfc.ubagroup77@gmail.com)
Contactez-les d=C3=A8s maintenant et recevez votre financement total de
1 500 000,00 USD. Avant qu'il ne soit trop tard !
Heures d'ouverture : du lundi au vendredi : de 7 h 45 =C3=A0 17 h 00 et le
samedi de 9 h 00 =C3=A0 13 h 00.
Cordialement,
Mme Kristalina Georgieva, pr=C3=A9sidente du FMI.
--000000000000a692a406391b4f05
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
editable gmail-LW-avf gmail-tS-tW gmail-tS-tY" aria-label=3D"Message Body"=
role=3D"textbox" aria-multiline=3D"true" tabindex=3D"1" style=3D"direction=
:ltr;min-height:280px" aria-controls=3D":oy" aria-expanded=3D"false">Attent=
ion=C2=A0!
Cher propri=C3=A9taire de l'adresse courriel=C2=A0!
r>
Je suis Mme Kristalina Georgieva, directrice et pr=C3=A9sidente (FMI)=
d'UBA (SUCCURSALE ROYAUME-UNI). Nous vous informons que le Fonds mon=
=C3=A9taire international (FMI) =C3=A0 Washington, DC, =C3=89tats-Unis, est=
pr=C3=A9sent dans notre pays pour enqu=C3=AAter sur une fraude en ligne. V=
ous avez re=C3=A7u cette information aujourd'hui, car votre adresse cou=
rriel figure sur la liste des victimes de fraude dans ce pays.
Rense=
ignements suppl=C3=A9mentaires=C2=A0: (FMI), Washington, DC, indemnise tous=
les pays fraudeurs de notre pays, et votre adresse courriel figure sur ces=
listes. Notre banque a donc confi=C3=A9 =C3=A0 (FMI) le transfert de votre=
fonds d'indemnisation par carte de cr=C3=A9dit ou par virement bancair=
e.
Cependant, nous avons d=C3=A9cid=C3=A9 de transf=C3=A9rer ce fond=
s dans votre compte, d'un montant de 1=C2=A0500=C2=A0000,00=C2=A0$ (un =
million cinq cent mille dollars), par carte Visa ou par virement bancaire. =
Nous ne pourrons pas faire ce paiement en utilisant seulement votre adresse=
e-mail.
Veuillez contacter UNITED BANK OF AFRICA imm=C3=A9diatement=
, car votre financement est maintenant approuv=C3=A9. Contactez d=C3=A8s ma=
intenant le directeur d'UNITED BANK FOR AFRICA, M. OLIVER ALAWUBA.
C=
ourriel=C2=A0: (cfc.ubagroup77@=
gmail.com)
Contactez-les d=C3=A8s maintenant et recevez votre fi=
nancement total de 1=C2=A0500=C2=A0000,00=C2=A0USD. Avant qu'il ne soit=
trop tard=C2=A0!
Heures d'ouverture=C2=A0: du lundi au vendredi=
=C2=A0: de 7=C2=A0h=C2=A045 =C3=A0 17=C2=A0h=C2=A000 et le samedi de 9=C2=
=A0h=C2=A000 =C3=A0 13=C2=A0h=C2=A000.
Cordialement,
Mme Kris=
talina Georgieva, pr=C3=A9sidente du FMI.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 04 Jul 2025 10:10:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uXiz3-00000000IRj-005g
for dave@doctor.nl2k.ab.ca;
Fri, 04 Jul 2025 10:09:53 -0600
Resent-From: The Doctor
Resent-Date: Fri, 4 Jul 2025 10:09:52 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f195.google.com ([209.85.208.195]:59449)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uXhR8-000000007oF-2W2R
for sales@nk.ca;
Fri, 04 Jul 2025 08:30:55 -0600
Received: by mail-lj1-f195.google.com with SMTP id 38308e7fff4ca-32b553e33e6so8812581fa.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1751639324; x=1752244124; darn=nk.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=8KgtYAFSyIZSuUiTQJ8Rc0VWhW5VJzD/X9tYdZEkKmM=;
b=CqYAgF2ozExa1odWU8GytmJRmXbg0T+v+HknfgMeZZVSzyMFVp1BPm0S/OYdHEb2iM
IE+cCqjg+15ssJAq+rx87xqZrVAN3liOhjUEgcluCfP4+VCSWZAZWZxzfuF0CbqeznK1
jA+6NuyNxhH7hm8eK/XUILdb17Nn14zr1R+jj2V+hOYwmfF9VtLbE4GIAuqBV8Zfrcxt
woY/ShbyPuM70YxLzKNpmIQby8Hg7vwShbLrUXIksD0CdrcJLeHIVsUiDlRO8IECr2hi
kJOp9Gp2Uoi4vekpwz447PtwrXpHiXRL1oqS6UL9ulfZ+LVEGl7Um/ye/PYlPz4I4+wj
FM2A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1751639324; x=1752244124;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=8KgtYAFSyIZSuUiTQJ8Rc0VWhW5VJzD/X9tYdZEkKmM=;
b=qknTFew62tuAKabzuJluF1saFt5yI4X2pku+6FQdl84M++AK/b2Od3BDpigzud5Vye
dtUXoOnEyBlh39Dr1uFSBwnFnm/L98NvP+QYmsp4HPrtGxZuPVHLKbGKeR1FHQ7ZaMLx
CQ9Wa2QGT0UOsthVoxuYWX1PW70r7HharXPOhcB1F6VEqeQaAS5cLl6bTjECB06lDPFF
arh2fkZTPwPlpWEkD1vLoZCgYWO4a0oGbfqqBKWUvj/ZryApMQHqzQpbICn+//ldzISx
RKLmEgVD6ilHPpHayPbxKPBatJTrXxjQkV/gjUor48Haq3vMM2tV4nssdBkrtui90JAt
5T9A==
X-Forwarded-Encrypted: i=1; AJvYcCVM0AA4jbMdGfEu5i63MEjg8tr2W3X5XOO+0pCZFIvhhO7jYRpmCAG17U8WQ8MzBkuIRR9lJw==@nk.ca
X-Gm-Message-State: AOJu0YwM9ESdpQsfPEz9SGeSBSik3fAVHvqfTzFH4BYxHRudB4wJ94CM
kciBUNjwV/4pFM0JFGBYqMIurZ07DoKu3+1qUZ0ozCRMqzuvpuVIjdqHPw3N471978NrSeI24ux
Bee+qgnakAWAsTlPIOjSRGkY+FkeyPYo=
X-Gm-Gg: ASbGncv7cAlqszqkUAk5+f3a39ivxrvlSjb0KSfWh4ZvF8/lqua4YFwJWXZzIopsN8v
rEkh/T2h7q5NxQyQFj5FMejQ2cg7IGzKfXtdi1jGH0vusiyeSR+XoUCVQnnd/CSdL0jI5a4ZbDC
jCA04fjLfvef0eMUFFgAUCB89Vvvu2aNH27TcIFa3iDgaM5CgpkQS8wVyZd7VLJI2PId69niNk2
po=
X-Google-Smtp-Source: AGHT+IGZnP8KhiUaG6OmLtObrabm1GlHEEIAGqhYwUJ32pcS3YKAZD8J6hJb3/6fzE5z9a5yqKInbB2vwUwePR/X8Fg=
X-Received: by 2002:a2e:a585:0:b0:32a:7122:58d8 with SMTP id
38308e7fff4ca-32f00c6703amr10001601fa.8.1751639323478; Fri, 04 Jul 2025
07:28:43 -0700 (PDT)
MIME-Version: 1.0
Reply-To: cfc.ubagroup77@gmail.com
From: Kristalina Georgieva
Date: Fri, 4 Jul 2025 07:28:31 -0700
X-Gm-Features: Ac12FXwfMVQ9c1NUk2GXuWk-842Yuj2I5yfp9X5gmAp_aVeBXepNJfiO1iYj3QM
Message-ID:
Subject: Attention!
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000a692a406391b4f05"
Bcc: sales@nk.ca
X-Spam_score: 12.6
X-Spam_score_int: 126
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Attention ! Cher propriétaire de l'adresse courriel ! Je
suis Mme Kristalina Georgieva, directrice et présidente (FMI) d'UBA (SUCCURSALE
ROYAUME-UNI). Nous vous informons que le Fonds monétaire international (FMI)
à Washington, DC, États-Unis, est pr [...]
Content analysis details: (12.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.208.195 listed in dnsbl.ahbl.org]
[209.85.208.195 listed in dnsbl.ahbl.org]
[209.85.208.195 listed in dnsbl.ahbl.org]
[209.85.208.195 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.208.195 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.208.195 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.208.195 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.208.195 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.208.195 listed in will-spam-for-food.eu.org]
[209.85.208.195 listed in will-spam-for-food.eu.org]
[209.85.208.195 listed in will-spam-for-food.eu.org]
[209.85.208.195 listed in will-spam-for-food.eu.org]
[209.85.208.195 listed in will-spam-for-food.eu.org]
[209.85.208.195 listed in will-spam-for-food.eu.org]
[209.85.208.195 listed in will-spam-for-food.eu.org]
[209.85.208.195 listed in will-spam-for-food.eu.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.195 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[cfc.ubagroup77(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[ogoc2799(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[ogoc2799(at)gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.195 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 LOTS_OF_MONEY Huge... sums of money
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Attention!
--000000000000a692a406391b4f05
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Attention !
Cher propri=C3=A9taire de l'adresse courriel !
Je suis Mme Kristalina Georgieva, directrice et pr=C3=A9sidente (FMI) d'UBA
(SUCCURSALE ROYAUME-UNI). Nous vous informons que le Fonds mon=C3=A9taire
international (FMI) =C3=A0 Washington, DC, =C3=89tats-Unis, est pr=C3=A9sen=
t dans notre
pays pour enqu=C3=AAter sur une fraude en ligne. Vous avez re=C3=A7u cette
information aujourd'hui, car votre adresse courriel figure sur la liste des
victimes de fraude dans ce pays.
Renseignements suppl=C3=A9mentaires : (FMI), Washington, DC, indemnise tous=
les
pays fraudeurs de notre pays, et votre adresse courriel figure sur ces
listes. Notre banque a donc confi=C3=A9 =C3=A0 (FMI) le transfert de votre =
fonds
d'indemnisation par carte de cr=C3=A9dit ou par virement bancaire.
Cependant, nous avons d=C3=A9cid=C3=A9 de transf=C3=A9rer ce fonds dans vot=
re compte, d'un
montant de 1 500 000,00 $ (un million cinq cent mille dollars), par carte
Visa ou par virement bancaire. Nous ne pourrons pas faire ce paiement en
utilisant seulement votre adresse e-mail.
Veuillez contacter UNITED BANK OF AFRICA imm=C3=A9diatement, car votre
financement est maintenant approuv=C3=A9. Contactez d=C3=A8s maintenant le =
directeur
d'UNITED BANK FOR AFRICA, M. OLIVER ALAWUBA.
Courriel : (cfc.ubagroup77@gmail.com)
Contactez-les d=C3=A8s maintenant et recevez votre financement total de
1 500 000,00 USD. Avant qu'il ne soit trop tard !
Heures d'ouverture : du lundi au vendredi : de 7 h 45 =C3=A0 17 h 00 et le
samedi de 9 h 00 =C3=A0 13 h 00.
Cordialement,
Mme Kristalina Georgieva, pr=C3=A9sidente du FMI.
--000000000000a692a406391b4f05
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
editable gmail-LW-avf gmail-tS-tW gmail-tS-tY" aria-label=3D"Message Body"=
role=3D"textbox" aria-multiline=3D"true" tabindex=3D"1" style=3D"direction=
:ltr;min-height:280px" aria-controls=3D":oy" aria-expanded=3D"false">Attent=
ion=C2=A0!
Cher propri=C3=A9taire de l'adresse courriel=C2=A0!
r>
Je suis Mme Kristalina Georgieva, directrice et pr=C3=A9sidente (FMI)=
d'UBA (SUCCURSALE ROYAUME-UNI). Nous vous informons que le Fonds mon=
=C3=A9taire international (FMI) =C3=A0 Washington, DC, =C3=89tats-Unis, est=
pr=C3=A9sent dans notre pays pour enqu=C3=AAter sur une fraude en ligne. V=
ous avez re=C3=A7u cette information aujourd'hui, car votre adresse cou=
rriel figure sur la liste des victimes de fraude dans ce pays.
Rense=
ignements suppl=C3=A9mentaires=C2=A0: (FMI), Washington, DC, indemnise tous=
les pays fraudeurs de notre pays, et votre adresse courriel figure sur ces=
listes. Notre banque a donc confi=C3=A9 =C3=A0 (FMI) le transfert de votre=
fonds d'indemnisation par carte de cr=C3=A9dit ou par virement bancair=
e.
Cependant, nous avons d=C3=A9cid=C3=A9 de transf=C3=A9rer ce fond=
s dans votre compte, d'un montant de 1=C2=A0500=C2=A0000,00=C2=A0$ (un =
million cinq cent mille dollars), par carte Visa ou par virement bancaire. =
Nous ne pourrons pas faire ce paiement en utilisant seulement votre adresse=
e-mail.
Veuillez contacter UNITED BANK OF AFRICA imm=C3=A9diatement=
, car votre financement est maintenant approuv=C3=A9. Contactez d=C3=A8s ma=
intenant le directeur d'UNITED BANK FOR AFRICA, M. OLIVER ALAWUBA.
C=
ourriel=C2=A0: (cfc.ubagroup77@=
gmail.com)
Contactez-les d=C3=A8s maintenant et recevez votre fi=
nancement total de 1=C2=A0500=C2=A0000,00=C2=A0USD. Avant qu'il ne soit=
trop tard=C2=A0!
Heures d'ouverture=C2=A0: du lundi au vendredi=
=C2=A0: de 7=C2=A0h=C2=A045 =C3=A0 17=C2=A0h=C2=A000 et le samedi de 9=C2=
=A0h=C2=A000 =C3=A0 13=C2=A0h=C2=A000.
Cordialement,
Mme Kris=
talina Georgieva, pr=C3=A9sidente du FMI.
--000000000000a692a406391b4f05--
