Nigerian Gmail spam

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 26 May 2023 14:41:00 -0600

Received: from mail-ed1-f54.google.com ([209.85.208.54]:47283)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1q2eEs-000NCm-2z

for dave@doctor.nl2k.ab.ca;

Fri, 26 May 2023 14:40:46 -0600

Received: by mail-ed1-f54.google.com with SMTP id 4fb4d7f45d1cf-510eb980ce2so1677133a12.2

for ; Fri, 26 May 2023 13:38:42 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1685133516; x=1687725516;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=tRA3JMX0A9nBXRv5+U2oAyf9Xuos41oc+dKm7W3IQHc=;

b=NQuf9RXHBClXkYI8rB/s3Oe98ZxBxO1CZFdId4mXIox2Tu/hgqjLs+HToUBqKeWVgC

KDZIBwS80sRaVioXQqxP6/rMKxEeIO+P+X0yq4lvNfYe9GGCCZw7pbn2GvZU6iM75tgi

SZfZ3Gwcya0UgIhMwTKiGiTYPVxbUaAjBfohhZm4V7WBb42ziI8G+DSlNPNTqzcEVXf/

CqXLWYBr+nkkKi3p2SsGEMT2Zgw/dNeZoZA+S1/sphZl1RXGsgPGhpRzhJk08FCJNzvR

wu3MH0v+XkWKwDbAtBYoF0OvUoz69fNfJhmJ6zB7mO6vM5c0//b4qQ8BbqU/kz1aciBT

OkYQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1685133516; x=1687725516;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=tRA3JMX0A9nBXRv5+U2oAyf9Xuos41oc+dKm7W3IQHc=;

b=aqRQVIXXTOgk4RFVCcJrt7nrDf878DhafWtk2Jbl4bCmzyjvurv2faoS0S8CkJYjKu

WtKcmCWKCzb9Ijowz8ykjG1DBBr+UDwU8VQa9otOugrHMPCtuqwHRFcnQEnt+K4yA5p/

fsBwZuRQ7SMY8h/nDT055tnE6QkEOTDHA/2d1bVtEPg4+qC7bPN+VuzjkJLCxTyBxQ9E

EXQWTvFprSukO+W0xfhV4QhAT8pUGeAdIgXC71Zmulin7o7kjjDBkxAcmX9tt+k/Hhg9

46r8CTlTv1diiY5jkks/CQZmQRiKqMDh6l1teHbcLn0dF65raWAEy9SUT3s9vS9g9Khv

WR5w==

X-Gm-Message-State: AC+VfDyTBhGR1iw35qHUhaodfoYzGczvWllBt+B6c/LodYA/oU2DC7ma

nbAc1C1nWZVDqayaVewMcjcilkvpOOzVBO2iqsU=

X-Google-Smtp-Source: ACHHUZ5YnzbDcCsa2f6ScSi/dYDB4SvHgg+hinY6T5t6OgBYbFXBglNvkwoVQTnQ26PnjXFKEgygi+CtN8mbMA6ou/Y=

X-Received: by 2002:a17:907:9805:b0:973:72ca:497f with SMTP id

ji5-20020a170907980500b0097372ca497fmr3560357ejc.17.1685133515741; Fri, 26

May 2023 13:38:35 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a17:907:1caa:b0:971:c931:3669 with HTTP; Fri, 26 May 2023

13:38:35 -0700 (PDT)

Reply-To: mrselizabethedward16@gmail.com

From: "Mrs. Elizabeth"

Date: Fri, 26 May 2023 21:38:35 +0100

Message-ID:

Subject: Your Response

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 14.4

X-Spam_score_int: 144

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello My Dear. Please do not feel disturbed for contacting

you, based on the critical condition I find mine self, though, it's not financial

problem, but my health, you might have know that cancer is not what to tal

[...]



Content analysis details: (14.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.54 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.54 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mrselizabettedward(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[mrselizabethedward16(at)gmail.com]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.0 T_MONEY_PERCENT X% of a lot of money for you

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Your Response

X-Antivirus: AVG (VPS 230526-4, 5/26/2023), Inbound message

X-Antivirus-Status: Clean



Hello My Dear.



Please do not feel disturbed for contacting you, based on the critical

condition I find mine self, though, it's not financial problem, but my

health, you might have know that cancer is not what to talk home

about, I am married to Mr. Edward Herbart who was a businessman in

this country before dying some years ago? We were married to many

years without a child. He died after a brief illness that lasted for

five days. And I myself have been suffering from an ovarian cancer

disease. At this moment I am about to finish the race in this way



Since his death I decided not to remarry, when my late husband was

alive he deposited the sum of ($5.000.000.00) million dollars I have

confirmed from the bank in Burkina Faso where the fund was deposited

presently this fund is still in Bank. And My Doctor told me that I

don't have much time to live because of the cancer problem, having

known my condition I decided to hand you over this fund to take care

of the less-privileged people,



You will utilize this money the way I am going to instruct you. I want

you to take 50 Percent of the total money for your personal use While

50% of the money will go to charity" people and helping the orphanage

and the poor I will really do appreciate if l can put my trust on you

to help me claim my fund for the mission of the Lord in donating it to

the Motherless Baby Home (ORPHANAGE). I want you to know that am right

here lying on the sick bed at the hospital waiting for the Lord's call

but I really want this mission to be well accomplished by the God I

don't want my husband's efforts to be used by the Government. I grew

up as an Orphan and I don't have anybody as my family member,



I am expecting your urgent respond.



Best Regards.



Mrs. Elizabeth Edward.

Nigerian spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 26 May 2023 06:29:03 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1q2WYq-000LdA-KS

for dave@doctor.nl2k.ab.ca;

Fri, 26 May 2023 06:28:48 -0600

Resent-From: The Doctor

Resent-Date: Fri, 26 May 2023 06:28:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f44.google.com ([209.85.208.44]:45442)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1q2RE3-000Hyi-Vd

for doctor@doctor.nl2k.ab.ca;

Fri, 26 May 2023 00:47:04 -0600

Received: by mail-ed1-f44.google.com with SMTP id 4fb4d7f45d1cf-513fd8cc029so607905a12.3

for ; Thu, 25 May 2023 23:45:00 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1685083494; x=1687675494;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=/ICULnOIjLNJVzLdKMMIrMnZOY6hVRlJZVGvwKWONkA=;

b=bmfpUCzmjc5iD0o/74xuBA57PHn0+kB930lgYIPQWLdN/aAcDKADeSEIdecGOqiDmZ

44dXT6yDToFGynxhFYFxsJlXDLwqh+29Ff9FHuemFTr3/4ZDzUoVBvNrvMM3X1TuNSVL

OZV90iz29jcRDkRFgiwNPFoMiSun31RqT2j5wvnkVX/f8/jOUmWZ6A+aq27w3N5kdXDE

LE+aq8GnZZzE3AhAF/GY3lV4DkYIzIV24HHtJ0EmyjCIhhXiNqvVGIHqxkJPOHIVIxTr

IKULgwtdUquV0/W9a7CB9fitrHoK0Yi5u0DKzqHu7b7pF6QjG/7QfhiguYowmrmC4gIo

tzRA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1685083494; x=1687675494;

h=to:subject:message-id:date:from:sender:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=/ICULnOIjLNJVzLdKMMIrMnZOY6hVRlJZVGvwKWONkA=;

b=KPeu9xO3BCgHXQE5fPnvZ4U2+O82tz1SeXGZyqdkZHhZiI/qUZrxTkVkZ6pIxvXKSD

vkjI6xuTZKZU5Eyf5ZfOd30+U+lCt+rnZDVm2roVRkvMH9z5d9eJVlj6jvjjRzFxs4uz

bT/7z+jR6ZWnNp9TBJnU3KDbwN9zrKJzG4fgR/EYri29KYJYGTgUqWYvFOVs11Fl7Mhj

25QB8h1JAtjtIphrk9Lc6phv2n9HgKgaDoKs12A4vbRKLgBH+t1ATt7V15pJypP5elqM

jvISJgllYGNyqHrFTUo7lpkK9dnv8KrjqaMCvMyknNCdcLoE4j52jY0++iN/ptZcxMOV

AmZw==

X-Gm-Message-State: AC+VfDyYJpVoKzJpm1VOYuwNJwc8PMIo1KeOEalydLADyv2xE08Sk11d

CvXcE7F+EOvEF9gRZBMlNGrizaYJXzFb1L/3qkc=

X-Google-Smtp-Source: ACHHUZ6KW+efaGgq0y74weGy3MDCSD1IphxZ+23NuTbYTMjEFGeUuRmt9GKoU/4dL8hiJ2I0LAkjY9lgfqBgnlVGD6o=

X-Received: by 2002:a17:907:9816:b0:971:5a46:8ab4 with SMTP id

ji22-20020a170907981600b009715a468ab4mr943231ejc.66.1685083473106; Thu, 25

May 2023 23:44:33 -0700 (PDT)

MIME-Version: 1.0

Sender: amoduibrahim194@gmail.com

Received: by 2002:a17:907:948a:b0:94f:8ff0:d883 with HTTP; Thu, 25 May 2023

23:44:32 -0700 (PDT)

From: "Mrs Yu. Ging Yunnan"

Date: Fri, 26 May 2023 06:44:32 +0000

X-Google-Sender-Auth: A105lsezxojsIf6GoBAkMftHmGA

Message-ID:

Subject: hello dear

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 11.6

X-Spam_score_int: 116

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: hello I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the

doctor said I will not survive it because all vaccines has been given to

me but to no avian, am a China woman but I base here in France beca [...]



Content analysis details: (11.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.44 listed in list.dnswl.org]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[amoduibrahim194(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[amoduibrahim194(at)gmail.com]

2.5 MILLION_USD BODY: Talks about millions of dollars

2.5 HK_SCAM_N2 BODY: No description available.

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

2.0 HK_SCAM No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.44 listed in wl.mailspike.net]

Subject: {SPAM?} hello dear

X-Antivirus: AVG (VPS 230526-0, 5/25/2023), Inbound message

X-Antivirus-Status: Clean



hello

I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor said I

will not survive it because all vaccines has been given to me but to

no avian, am a China woman but I base here in France because am

married here and I have no child for my late husband and now am a

widow. My reason of communicating you is that i have $14.2million USD

which was deposited in BNP Paribas Bank here in France by my late

husband which am the next of kin to and I want you to stand as the

beneficiary for the claim now that am about to end my race according

to my doctor. I will want you to use the fund to build an orphanage

home in my name there in your country, please kindly reply to this

message urgently if willing to handle this project.