Nigerian Spam from Google Gmail Part 2
Posted by Dave Yadallee on1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.208.47 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.208.47 listed in will-spam-for-food.eu.org]
[209.85.208.47 listed in will-spam-for-food.eu.org]
[209.85.208.47 listed in will-spam-for-food.eu.org]
[209.85.208.47 listed in will-spam-for-food.eu.org]
[209.85.208.47 listed in will-spam-for-food.eu.org]
[209.85.208.47 listed in will-spam-for-food.eu.org]
[209.85.208.47 listed in will-spam-for-food.eu.org]
[209.85.208.47 listed in will-spam-for-food.eu.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.47 listed in list.dnswl.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[bank60073(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[igwehero80(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[igwehero80(at)gmail.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.208.47 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.47 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 LOTTO_DEPT Claims Department
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 FILL_THIS_FORM Fill in a form with personal information
1.5 MONEY_ATM_CARD Lots of money on an ATM card
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
2.3 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
2.6 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
Subject: {SPAM?} UBA
--0000000000002bdfd506567f8941
Content-Type: text/plain; charset="UTF-8"
--
Having reviewed all at 50.5 Million Dollars and your inability to meet
up with some charges levied against you due to the past transfer
options. We the Board of Directors, United Bank For Africa (UBA) has
ordered our Foreign Payment Remittance Unit to issue you a CORPORATE
VISA CARD where your payment will be uploaded and today we got notice
that your Payment has been uploaded into this CORPORATE ATM CARD and
also have registered it with DHL for delivery to you.
For your information, The delivery charges has been paid and they were
supposed to have shipped your packaged ATM CARD but they insisted that
you must re-confirm to them your current delivery address to ensure
accurate Delivery.
MOST IMPORTANT: Due to the content of the package, DHL mandated that
before your package will be shipped, A Tax/Stamp Duty MUST be procured
according to the New Customs Creed, and the essence of such Document
is to ensure a hitch-free delivery.
Therefore re-confirm your current delivery address:
1. Full Names.
2. Delivery Address.
3. Telephone Number.
4. Your country.
5. Your city.
6. Your Occupation.
7. Your Age.
8. Your ID card or passport copy.
--0000000000002bdfd506567f8941
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
ature_prefix">--
-smartmail=3D"gmail_signature">
Having revi=
ewed all at 50.5 Million Dollars and your inability to meet
up with some=
charges levied against you due to the past transfer
options. We the Boa=
rd of Directors, United Bank For Africa (UBA) has
ordered our Foreign Pa=
yment Remittance Unit to issue you a CORPORATE
VISA CARD where your paym=
ent will be uploaded and today we got notice
that your Payment has been =
uploaded into this CORPORATE ATM CARD and
also have registered it with D=
HL for delivery to you.
For your information, The delivery charges has b=
een paid and they were
supposed to have shipped your packaged ATM CARD b=
ut they insisted that
you must re-confirm to them your current delivery =
address to ensure
accurate Delivery.
MOST IMPORTANT: Due to the c=
ontent of the package, DHL mandated that
before your package will be shi=
pped, A Tax/Stamp Duty MUST be procured
according to the New Customs Cre=
ed, and the essence of such Document
is to ensure a hitch-free delivery.=
Therefore re-confirm your current delivery address:
1. Full =
Names.
2. Delivery Address.
3. Telephone Number.
4. Your country.<=
br>5. Your city.
6. Your Occupation.
7. Your Age.
8. Your ID card =
or passport copy.
--0000000000002bdfd506567f8941--