More Nigerian Spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 Jul 2022 08:57:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oDSAi-0009Vo-BC

for dave@doctor.nl2k.ab.ca;

Mon, 18 Jul 2022 08:56:32 -0600

Resent-From: The Doctor

Resent-Date: Mon, 18 Jul 2022 08:56:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f48.google.com ([209.85.167.48]:45782)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oDS7D-00082g-IC

for sales@nk.ca;

Mon, 18 Jul 2022 08:53:00 -0600

Received: by mail-lf1-f48.google.com with SMTP id d12so19729164lfq.12

for ; Mon, 18 Jul 2022 07:52:38 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=Nwiwx3iWV2W406jPPgWnadDK+6JC23u7Ske0EVk36gQ=;

b=VmWmnfXT2Jv1wNRv08lO/Y097tIzgD8pvCZTQjfhgGyQUtFzP3dvTLZ30jGkguMejl

FqSWiMENFASyg32qLfVEIKwjlmxM6HabnF5BWxicDFtqH7i8EKa8mzmx6lcTFtlD+e1n

z43i+q754Ee9tN9e88N4Yv9aTWwdseBPKLb9ZCJP8eNwwfyxwRvLkHSenlHrfEpSNtWE

0M3uebCj7tdvSkEwuv8zG5GHUfzb8L2XJuMeFDBuYcm/U9AgvxmBW2cp2cxXfo7cBhYb

Qfje+qOZrH6FvDYQD/4xINmsv3tp8U8H4U9W3cWi60PJQYypsmI282UId1yDPvtPzeeC

s2xw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=Nwiwx3iWV2W406jPPgWnadDK+6JC23u7Ske0EVk36gQ=;

b=Ji5BfhqZuuIM1STzT7ufreHBJbfoAsVN6xd69WHP2tGVXsfjoDv+5rWJHMiOdEoz9/

dJTshxv7hjXi5AoHg3PXgcxkM6g1ZK6VfO6BHkivym77ROSXpuvZ4D8Fd/TTUvW87QFb

XtCwkg4my/nBuI2nIvNyTQ65299vXlVmTCbqqCYOCx3+uTkVtMVWCM2hutmMidjRNfn5

Al7hANlZcXpJaGh5HkQrkHbT16ISV8Bal0MHE7qOc8INqCdRS2Ga2QTmdxGba5OiFZVY

cYz9gE8cr1lLIuim28jtKURIqgSlL+bFPfxLGF8k94KbS19rCRpOSQjsshtJwZXGF90Y

3WJg==

X-Gm-Message-State: AJIora/kV+C/KLt3UsymnCycIS/JWmMicJGgHPjoL2NFPcpxRTtUulsr

ITuDK4nNkEBNmO6cqEr8f49/Mmz25rBa7UNd8Ek=

X-Google-Smtp-Source: AGRyM1tKCkBCHzICsd3c3ldWzkJ5Ox04RlEl+r/L/NnXNUypJkvOsV0xBqKvF2sySiNnBJQKnfDYyBwC1HK/U4ASTxg=

X-Received: by 2002:a05:6512:2806:b0:489:e73c:f5e8 with SMTP id

cf6-20020a056512280600b00489e73cf5e8mr14651361lfb.581.1658155950913; Mon, 18

Jul 2022 07:52:30 -0700 (PDT)

MIME-Version: 1.0

Reply-To: mrsshawnancy@gmail.com

From: FROM NANCY SHAW

Date: Mon, 18 Jul 2022 16:52:07 +0200

Message-ID:

Subject: Dearest One Please Be Honest

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000006fbc0a05e41584e9"

Bcc: sales@nk.ca

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good day, My name is Mrs. Nancy Shaw, I am 75 years old and

was diagnosed with cancer about four years ago, immediately after the death

of my husband. As I lay on my sick bed, I have chosen you for my giving Pledge

Donations of 5.5m US for Charities. I want you to help me in carrying out

my last wish on earth which will also be very profitable to yo [...]



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.48 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[infonsure33[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[infonsure33[at]gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_HK_NAME_FM_FROM No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Dearest One Please Be Honest



--0000000000006fbc0a05e41584e9

Content-Type: text/plain; charset="UTF-8"



Good day,



My name is Mrs. Nancy Shaw, I am 75 years old and was diagnosed with

cancer about four years ago, immediately after the death of my husband.



As I lay on my sick bed, I have chosen you for my giving Pledge Donations

of 5.5m US for Charities. I want you to help me in carrying out my last

wish on earth which will also be very profitable to you.



Please for further information contact me ASAP on my private Email:

mrsshawnancy@gmail.com



Regards,

Mrs. Nancy Shaw



--0000000000006fbc0a05e41584e9

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




:Helvetica,Arial,sans-serif">Good day,

lor:rgb(0,0,0);font-size:13px;font-family:Helvetica,Arial,sans-serif">

lear=3D"none" style=3D"color:rgb(0,0,0);font-size:13px;font-family:Helvetic=

a,Arial,sans-serif">
ily:Helvetica,Arial,sans-serif">My name is Mrs. Nancy=C2=A0 Shaw, I am 75 y=

ears old and was diagnosed with cancer about four years ago, immediately af=

ter the death of my husband.

0,0);font-size:13px;font-family:Helvetica,Arial,sans-serif">

ne" style=3D"color:rgb(0,0,0);font-size:13px;font-family:Helvetica,Arial,sa=

ns-serif">
ica,Arial,sans-serif">As I lay on my sick bed, I have chosen you for my giv=

ing Pledge Donations of 5.5m US for Charities. I want you to help me in car=

rying out my last wish on earth which will also be very profitable to you.<=

/span>

ly:Helvetica,Arial,sans-serif">

;font-size:13px;font-family:Helvetica,Arial,sans-serif">
r:rgb(0,0,0);font-size:13px;font-family:Helvetica,Arial,sans-serif">Please =

for further information contact me ASAP on my private Email:=C2=A0=C2=A0
pan>
o:mrsshawnancy@gmail.com" style=3D"color:rgb(151,155,167);font-size:13px;fo=

nt-family:Helvetica,Arial,sans-serif">mrsshawnancy@gmail.com
=3D"color:rgb(0,0,0);font-size:13px;font-family:Helvetica,Arial,sans-serif"=

>=C2=A0=C2=A0

13px;font-family:Helvetica,Arial,sans-serif">

lor:rgb(0,0,0);font-size:13px;font-family:Helvetica,Arial,sans-serif">
style=3D"color:rgb(0,0,0);font-size:13px;font-family:Helvetica,Arial,sans-=

serif">Regards,

e:13px;font-family:Helvetica,Arial,sans-serif">
,0);font-size:13px;font-family:Helvetica,Arial,sans-serif">Mrs. Nancy=C2=A0=

Shaw




--0000000000006fbc0a05e41584e9--

Nigerian Gmail spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 17 Jul 2022 21:56:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oDHqg-000BWh-CV

for dave@doctor.nl2k.ab.ca;

Sun, 17 Jul 2022 21:55:10 -0600

Resent-From: The Doctor

Resent-Date: Sun, 17 Jul 2022 21:55:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f67.google.com ([209.85.217.67]:35461)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oDFMN-0004BZ-PE

for root@nk.ca;

Sun, 17 Jul 2022 19:15:47 -0600

Received: by mail-vs1-f67.google.com with SMTP id 189so9172707vsh.2

for ; Sun, 17 Jul 2022 18:15:26 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=JbP0IjSGpDlAJE9uXD6moB5VdSooaDL+BClRMeCoArc=;

b=RzIkC4faKYyJDfLvu1veVj4DQ2jmKoVLM5OSy8/B7jmoDYKbYs3q4F8KW1XuiVzAq4

KgyipBR6ZPdTx99QHGRyKbp5xy7O+ilpxMuO9mOsGOyxHxSRuYTjTfQ0wbh8oTa/kzuJ

eeEKVLNKMQlrd98M1D/Xw3+ARLQnjkpfizqFI+QCKcDIoSFiW9Vvk5qrNyjRzB26rMOG

Q0AEA29lT/H9k1JdxJ+805yuAGiFN+0PRQzYJCPM8XjTBI1cgADw3u4CkIwuteRtC1ff

SQnPfBCVePWL7NjF2PO1BY7cpfY+5pBPQ3B0e3fF+wtcLJ/pSngyjilFcNGO16+X42J8

r9DA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=JbP0IjSGpDlAJE9uXD6moB5VdSooaDL+BClRMeCoArc=;

b=7KrzlQaOYk85wX0Uz+bA2hbc4/IQt5J3uKskxmJfuGuPap5FGksSMU+cCLaqWWlzY8

SFdOH4CBJt7hyqFIwiHhtVP2moOcpgTf6BUHNxmT5SueTX5r8wOKSf0ymgfv+vUtsTfT

xOHcUSSTx7rMfuHI0xvdEobK89nEDuF/TwP7W4fuYf/s46vJt2oFt5xrNv30iKrYpYds

MFJO+7KZExTkduTrZ57RoR0qZcoBikj7iGw7xh/K0tTCtW4sJ6zu/z41fqIQX1cTYleV

9qPVsps1XQY8QylQvBE5obevtxFhN9sd73JLTmNTSuNYQhfkCQ4No5F1kHMuouN96H/r

MFEA==

X-Gm-Message-State: AJIora+iA0pmp86nENkp6/QScsEJS7tlPlcaa6zM7z+GHR4IgDAIp6Fn

Gtz05YDJksnsR4E2nH8WWv8FhZPS8XAZjZk0mSk=

X-Google-Smtp-Source: AGRyM1uKSoH7+NLfZrPFEkzinD2IboKcHXfgI7h9aCIoefSqkjVNEFhDD3R5gcnUrN6N7FvLcRGeabNrYz7KrD1PliM=

X-Received: by 2002:a67:e0c1:0:b0:357:5179:c310 with SMTP id

m1-20020a67e0c1000000b003575179c310mr8424892vsl.25.1658106920237; Sun, 17 Jul

2022 18:15:20 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:ab0:60c4:0:0:0:0:0 with HTTP; Sun, 17 Jul 2022 18:15:19

-0700 (PDT)

Reply-To: marina.cervantes1@aol.com

From: detpartmemt office

Date: Mon, 18 Jul 2022 02:15:19 +0100

Message-ID:

Subject: Greetings Dear Beloved,

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: root@nk.ca

X-Spam_score: 16.2

X-Spam_score_int: 162

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings Dear Beloved, Please read this slowly and carefully,

as it may be one of the most important emails you ever get. I am Mrs. Marina

Quibec Cervantes from USA, I was married to Late Engr. Martin Harold Cervantes

from [...]



Content analysis details: (16.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.217.67 listed in wl.mailspike.net]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[marina.cervantes1[at]aol.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[detpartmemtoffice818[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[detpartmemtoffice818[at]gmail.com]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Greetings Dear Beloved,



Greetings Dear Beloved,



Please read this slowly and carefully, as it may be one of the most

important emails you ever get. I am Mrs. Marina Quibec Cervantes from

USA, I was married to Late Engr. Martin Harold Cervantes from UK. He

used to work with Shell Petroleum Development Company Kuwait and was

also a seasoned contractor in the Middle East Region. He died on 31

December, 2010 in Kuwait.



We were married for seventeen years without a child. After his death I

decided not to re-marry or get a child outside my matrimonial home.

When my late husband was alive, he deposited the sum of

(US$78,500,000.00) USD which he deposited in a Vault with a Finance

Firm. My Doctor told me that I would not last long due to my

complicated health issues, I have cancer. Having known my condition, I

decided to donate this fund to better the lives of the less privileged

and orphanage. I need an honest and trustworthy individual that will

utilize this money in accordance with my instructions.



I want the funds to be used in funding religious organizations,

orphanages and the less privileged propagating the word of God. I took

this decision because I don't have any child that will inherit this

money and my husband's relatives are very unkindly to me and I don't

want my husband's hard earned money to be misused. I am not afraid of

death hence I know where I am going. I know that I am going to be in

the bosom of the Lord. Exodus 14 VS 14 says that the lord will fight

my course and I shall hold my peace. As soon as I receive your reply I

shall give you the contact of my Attorney. Contact me on this email

for more information: (marina.cervantes1@aol.com)



For legitimacy, he will also issue you a Letter of Authorization that

will empower you as the original-beneficiary of this fund. I want you

to always pray for me. Any delay in your reply will give me room in

sourcing for another individual for this same purpose, if you are not

interested, kindly pardon me for contacting you.



Yours Faithfully,



Mrs. Marina Q. Cervantes.