Nigerian charity spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 04 Jun 2023 05:18:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from)
id 1q5len-0003g3-2i
for dave@doctor.nl2k.ab.ca;
Sun, 04 Jun 2023 05:12:21 -0600
Resent-From: The Doctor
Resent-Date: Sun, 4 Jun 2023 05:12:21 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qt1-f171.google.com ([209.85.160.171]:38059)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1q5h3v-0000HW-18
for doctor@doctor.nl2k.ab.ca;
Sun, 04 Jun 2023 00:18:04 -0600
Received: by mail-qt1-f171.google.com with SMTP id d75a77b69052e-3f828ee8ecdso8443421cf.0
for; Sat, 03 Jun 2023 23:15:59 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1685859354; x=1688451354;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=j+3APPKDAvdEKWlX7US5qfc/nSv5H/QqLHr7ELKuLuk=;
b=M0md1UsqychKxt/ns2CxolQpfnFa2term6ludiTZZxxgoXDeFHb19vUwfKfb24G/56
bZ37HKrnvOpjv1e9P0aO1avtsMRytRPsj5dfD7W0vJXWw9+PSo7wMcP/8WAXOZFMIkVL
cdAsJ4G/0wqN4f96A34vqs3KMZgUj9hV1zch0j5b4udddB/4IBeJrxGsFaqE7ODwa9h8
D30YTuIF4MXsbx0wfvB1ICgYwnFpQVjWNuEwBDe3WStkfo4nUamRSMejLC5LXlp4jlLP
D1X8zJNlfM5bPS6+d8xAR8heTpto8OQeNEqzUKZP9nJa2eYFqwSsIE0kk4RM7tACT4aj
8ZMg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1685859354; x=1688451354;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=j+3APPKDAvdEKWlX7US5qfc/nSv5H/QqLHr7ELKuLuk=;
b=JQaBMCF3eQD4Pr7gcmsy9jlzEAm5KBMjbQd/HJbLN+8v1uaiPab3Tsams9ZB6OPoCU
GTgPons+cZFlfUmzX1Q2IW3xhf6kiNg7GmVaUQZgU68j3L0HH/vjuUSPmtckedsICpmR
maOfqjHtE56nAcImIHaV9IgQj6NpixB7GpeBaNGzYpsNHZVhvRxa1MoU9GNgxJuvHHNN
5rzq+Mk85IinyRQlzmIaCjn0DCIM3NmfZK+gKEV9caQ7dW9PNdq2uUisvVa70ZKPSF28
l3puoW/T6E8Rlt5C2igjYyPQ8ZxYecxadXTaP0hzP/rMSVSlzxZpYjYHTqR3xVud0MLW
KX3A==
X-Gm-Message-State: AC+VfDy3ucAnwWOCoKBLiNI5I316AAJmjLTSVNKHTLnVQe2+hu5jtxcG
+FVNNJI8ZKhYAe2cRJC5jVC8heFwWkZ6Kfxu0t8=
X-Google-Smtp-Source: ACHHUZ6BXzqxQyx8eKb8I/leyMuoTKglz3YvdmU0hS6uEN5gVb73nqoBjHFMyjRH9YIRHDVjWT2Aw2T+eEnXe/ar2Xg=
X-Received: by 2002:a05:6214:509b:b0:61b:2111:c2e2 with SMTP id
kk27-20020a056214509b00b0061b2111c2e2mr15235107qvb.2.1685859353396; Sat, 03
Jun 2023 23:15:53 -0700 (PDT)
MIME-Version: 1.0
Sender: patrice.okp@gmail.com
Received: by 2002:a0c:b446:0:b0:625:ade2:5df3 with HTTP; Sat, 3 Jun 2023
23:15:52 -0700 (PDT)
From: "Mrs Yu. Ging Yunnan"
Date: Sun, 4 Jun 2023 06:15:52 +0000
X-Google-Sender-Auth: 7QDBZg67lTNY6Hhgtz7lozUoQbI
Message-ID:
Subject: hello dear
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 11.4
X-Spam_score_int: 114
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: hello I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the
doctor said I will not survive it because all vaccines has been given to
me but to no avian, am a China woman but I base here in France beca [...]
Content analysis details: (11.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.171 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[patrice.okp(at)gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
2.5 HK_SCAM_N2 BODY: No description available.
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.160.171 listed in wl.mailspike.net]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 HK_SCAM No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} hello dear
X-Antivirus: AVG (VPS 230604-0, 6/3/2023), Inbound message
X-Antivirus-Status: Clean
hello
I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor said I
will not survive it because all vaccines has been given to me but to
no avian, am a China woman but I base here in France because am
married here and I have no child for my late husband and now am a
widow. My reason of communicating you is that i have $14 .2million USD
which was deposited in BNP Paribas Bank here in France by my late
husband which am the next of kin to and I want you to stand as the
beneficiary for the claim now that am about to end my race according
to my doctor. I will want you to use the fund to build an orphanage
home in my name there in your country, please kindly reply to this
message urgently if willing to handle this project
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 04 Jun 2023 05:18:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1q5len-0003g3-2i
for dave@doctor.nl2k.ab.ca;
Sun, 04 Jun 2023 05:12:21 -0600
Resent-From: The Doctor
Resent-Date: Sun, 4 Jun 2023 05:12:21 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qt1-f171.google.com ([209.85.160.171]:38059)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1q5h3v-0000HW-18
for doctor@doctor.nl2k.ab.ca;
Sun, 04 Jun 2023 00:18:04 -0600
Received: by mail-qt1-f171.google.com with SMTP id d75a77b69052e-3f828ee8ecdso8443421cf.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1685859354; x=1688451354;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=j+3APPKDAvdEKWlX7US5qfc/nSv5H/QqLHr7ELKuLuk=;
b=M0md1UsqychKxt/ns2CxolQpfnFa2term6ludiTZZxxgoXDeFHb19vUwfKfb24G/56
bZ37HKrnvOpjv1e9P0aO1avtsMRytRPsj5dfD7W0vJXWw9+PSo7wMcP/8WAXOZFMIkVL
cdAsJ4G/0wqN4f96A34vqs3KMZgUj9hV1zch0j5b4udddB/4IBeJrxGsFaqE7ODwa9h8
D30YTuIF4MXsbx0wfvB1ICgYwnFpQVjWNuEwBDe3WStkfo4nUamRSMejLC5LXlp4jlLP
D1X8zJNlfM5bPS6+d8xAR8heTpto8OQeNEqzUKZP9nJa2eYFqwSsIE0kk4RM7tACT4aj
8ZMg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1685859354; x=1688451354;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=j+3APPKDAvdEKWlX7US5qfc/nSv5H/QqLHr7ELKuLuk=;
b=JQaBMCF3eQD4Pr7gcmsy9jlzEAm5KBMjbQd/HJbLN+8v1uaiPab3Tsams9ZB6OPoCU
GTgPons+cZFlfUmzX1Q2IW3xhf6kiNg7GmVaUQZgU68j3L0HH/vjuUSPmtckedsICpmR
maOfqjHtE56nAcImIHaV9IgQj6NpixB7GpeBaNGzYpsNHZVhvRxa1MoU9GNgxJuvHHNN
5rzq+Mk85IinyRQlzmIaCjn0DCIM3NmfZK+gKEV9caQ7dW9PNdq2uUisvVa70ZKPSF28
l3puoW/T6E8Rlt5C2igjYyPQ8ZxYecxadXTaP0hzP/rMSVSlzxZpYjYHTqR3xVud0MLW
KX3A==
X-Gm-Message-State: AC+VfDy3ucAnwWOCoKBLiNI5I316AAJmjLTSVNKHTLnVQe2+hu5jtxcG
+FVNNJI8ZKhYAe2cRJC5jVC8heFwWkZ6Kfxu0t8=
X-Google-Smtp-Source: ACHHUZ6BXzqxQyx8eKb8I/leyMuoTKglz3YvdmU0hS6uEN5gVb73nqoBjHFMyjRH9YIRHDVjWT2Aw2T+eEnXe/ar2Xg=
X-Received: by 2002:a05:6214:509b:b0:61b:2111:c2e2 with SMTP id
kk27-20020a056214509b00b0061b2111c2e2mr15235107qvb.2.1685859353396; Sat, 03
Jun 2023 23:15:53 -0700 (PDT)
MIME-Version: 1.0
Sender: patrice.okp@gmail.com
Received: by 2002:a0c:b446:0:b0:625:ade2:5df3 with HTTP; Sat, 3 Jun 2023
23:15:52 -0700 (PDT)
From: "Mrs Yu. Ging Yunnan"
Date: Sun, 4 Jun 2023 06:15:52 +0000
X-Google-Sender-Auth: 7QDBZg67lTNY6Hhgtz7lozUoQbI
Message-ID:
Subject: hello dear
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 11.4
X-Spam_score_int: 114
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: hello I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the
doctor said I will not survive it because all vaccines has been given to
me but to no avian, am a China woman but I base here in France beca [...]
Content analysis details: (11.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.171 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[patrice.okp(at)gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
2.5 HK_SCAM_N2 BODY: No description available.
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.160.171 listed in wl.mailspike.net]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 HK_SCAM No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} hello dear
X-Antivirus: AVG (VPS 230604-0, 6/3/2023), Inbound message
X-Antivirus-Status: Clean
hello
I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor said I
will not survive it because all vaccines has been given to me but to
no avian, am a China woman but I base here in France because am
married here and I have no child for my late husband and now am a
widow. My reason of communicating you is that i have $14 .2million USD
which was deposited in BNP Paribas Bank here in France by my late
husband which am the next of kin to and I want you to stand as the
beneficiary for the claim now that am about to end my race according
to my doctor. I will want you to use the fund to build an orphanage
home in my name there in your country, please kindly reply to this
message urgently if willing to handle this project