Nigerian Google Gmail spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 Sep 2023 06:32:05 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qiDPE-000305-1G

for dave@doctor.nl2k.ab.ca;

Mon, 18 Sep 2023 06:31:12 -0600

Resent-From: The Doctor

Resent-Date: Mon, 18 Sep 2023 06:31:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f68.google.com ([209.85.167.68]:46567)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from <4ctobix4@gmail.com>)

id 1qiCiD-0007Rk-0f

for root@nk.ca;

Mon, 18 Sep 2023 05:46:55 -0600

Received: by mail-lf1-f68.google.com with SMTP id 2adb3069b0e04-50300e9e75bso2960138e87.1

for ; Mon, 18 Sep 2023 04:44:45 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1695037478; x=1695642278; darn=nk.ca;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=1Q/Tq8wQF85dZWAXMkjdC0/TbJQzxDmbpWpKHwdAGko=;

b=RUgdi6TzuuLhoYvP5NJJFv21CA2ydH5/1P37qAO0r5oF7QHyrgj+itO/gzUGTC6S6X

bJ0nlDk1WUsOvkM3NlvYZ3fpWx5FHidUHtXbCYQ2zjlj92VW40ymWQvJBic6RW9O1zHm

mclyqpmc/UDUrk1pZsRhVKn03ZcXjvubnHOcEmIYiZabpiOLEzhyzGXKj/Yti3JIie0X

RLfYJ5/8yyvulBIcb+tb9u6mi71tL2nIstO8fLqC5lPSMDZjTiBJv7L41+38eMrnq2lD

FqM1yWajJtJpYykMxAoYAXE65z8Ed+n4rRM8+DaHAwxrLGTI9f3ACZNe7OGcCa4QTIYW

NVAg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1695037478; x=1695642278;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=1Q/Tq8wQF85dZWAXMkjdC0/TbJQzxDmbpWpKHwdAGko=;

b=q/mdw0cq1c65Qjl8SSnrmQMi4XTYpC8kwgfnz4Vnm4TNfDByY9Y15BSYZJrLXwtt27

kbx/dfmC3V0tFP6elueEpVipHAZsV43kD5ckdRPMoOSaPu8DOqyJfTsICOjZ7kcA1Rsw

byWuKdwvyyQUbMrALpykMAJhZ/grj+llvwpD76idN53GdNXIEkFSrQNDVBhJIc1RqGtN

64KL6jif7C9T2Fv83lFCGtS5yfVlkGIVRtkR3WPK+H5lLfsKG+j5hr6Jv9GP7eM83MKA

9CpP44WI/tdrvsYlZCbuFHyKZcU6TMd/bCxzGWdvkuHpQp5oyz+cza65edqcgjOo8XNI

hjXg==

X-Gm-Message-State: AOJu0YwyHmRGnUNASm29HYV3Tuly58MU1rkOHyA5eIwFUIJ7uTmxI9iw

2dGDD/GqSAivIjlmzNMFjsFRHblzNmk9Jzk61oD8VVRDEly27esE

X-Google-Smtp-Source: AGHT+IFk+D15XHvnvsnJTVDiJamwBLqIj7/h/hwSrepK9gx0rvn+1wBoO2cJgMD8ZaiBvfJKziNnFVaSEpESwww5IUw=

X-Received: by 2002:ac2:54a7:0:b0:500:b53f:fbc2 with SMTP id

w7-20020ac254a7000000b00500b53ffbc2mr6148892lfk.26.1695037477913; Mon, 18 Sep

2023 04:44:37 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:6f02:c727:b0:5a:43a5:7f15 with HTTP; Mon, 18 Sep 2023

04:44:37 -0700 (PDT)

Reply-To: mrs.m.machelgraca@gmail.com

From: "Mrs.Graca" <4ctobix4@gmail.com>

Date: Mon, 18 Sep 2023 13:44:37 +0200

Message-ID:

Subject: Have a Good Day

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Bcc: root@nk.ca

X-Spam_score: 20.8

X-Spam_score_int: 208

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Mrs Graca Machel Mandela 4th Street Houghton Estates Johannesburg

South Africa Email: mrs.m.machelgraca@gmail.com As the Third wife of late

Nelson Mandela, My late husband deposit cash the trust fund account on my

name here in south Africa, for self keeping and as they all know that I am

originally from Portugues [...]



Content analysis details: (20.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.68 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.68 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[4ctobix4(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[4ctobix4(at)gmail.com]

2.7 HK_SCAM_N1 BODY: No description available.

2.5 MILLION_USD BODY: Talks about millions of dollars

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 MONEY_NOHTML Lots of money in plain text

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

2.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 T_MONEY_PERCENT X% of a lot of money for you

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.6 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

Subject: {SPAM?} Have a Good Day



Mrs Graca Machel Mandela

4th Street Houghton Estates

Johannesburg South Africa

Email: mrs.m.machelgraca@gmail.com



As the Third wife of late Nelson Mandela, My late husband deposit cash

the trust fund account on my name here in south Africa, for self

keeping and as they all know that I am originally from Portuguese East

Africa Mozambique, he did this because he knew that once he died, the

entire family=E2=80=99s and the late ex wife=E2=80=99s families will come t=

oward me

for his inheritance,



My late husband, Nelson Mandela, deposited (Sixty Million, Five

Hundred Thousand United States Dollars) in cash in a bank here in

South Africa Through diplomatic channel, after his death, I and my son

being in Johannesburg, South Africa, decided to transfer this money

out of South Africa for my family use since it is the only

confidential thing we benefited.



In acknowledgment of executive powers and the various business

opportunities in your country, I am requesting your assistance in

helping me transfer this money into your company/ personal or business

account, For your assistance rendered in this transaction, I will

offer you 20% of the total sum for compensation. And all other

expenses you incur during this operation will be credited to you.



Please do not hesitate to contact me. All documents concerning this

transaction will be made available to you for your safety and as a

proof that this money is not from any criminal origin. I must then

emphasize that this operation/transaction is highly confidential and

is to be kept as such. Kindly provide me with your full names, private

phone number and you can email me at [mrs.m.machelgraca@gmail.com]

More link spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 Sep 2023 06:32:05 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qiDNC-000Obf-2h

for dave@doctor.nl2k.ab.ca;

Mon, 18 Sep 2023 06:29:06 -0600

Resent-From: The Doctor

Resent-Date: Mon, 18 Sep 2023 06:29:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f178.google.com ([209.85.215.178]:59660)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qiA5F-000H3i-0J

for usenet@nl2k.ab.ca;

Mon, 18 Sep 2023 02:58:24 -0600

Received: by mail-pg1-f178.google.com with SMTP id 41be03b00d2f7-57756115f08so3575886a12.3

for ; Mon, 18 Sep 2023 01:56:22 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1695027376; x=1695632176; darn=nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=J3XoOiJromrULfNHHDe+7JmGb0SB+7Ecx7f+1SMp1wg=;

b=XlT50LTr5G3b4/Yr7+2YuSxHf57xEy3SkLCv/e2o3r2hZRQhJSVr/OWKfSDfFNeYSC

E+OZYD8d7C566UYxh1zizC5SZuw+alwRkGJzZ9pp4ogc7WihMkiDu0jCEhd/TVoRzM2m

7daxc6CKelBWgaSmzaMcK3nNbZ6RyAm/mKwYRJ0LC+3stFIQ1y4tf2+R6EC1kmt7XgsM

4Iy144c0HMLG2SBJQTLbRjwulftOxymPw4yrdwskSu6FCPuLt5DHTJ1+P7dObm3U8o9G

An6HFPwx6eZS+cURIetlRNNuSLKioWMKW68FIXwBGVfRQC1da9o5GKz83nzy5so+VNey

1wEQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1695027376; x=1695632176;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=J3XoOiJromrULfNHHDe+7JmGb0SB+7Ecx7f+1SMp1wg=;

b=TrPA+IQhEIX/b0gCq7C5oMS7sfTvxU2Sxqj9yRyGog0ZBhXCEkxmu8cOiLxdLUqJVY

Tazbny3z/IytnlaAVB71kZC1rp8t6v0IO5ZEmnU8E9pM+BxU5wb6arAP9hGUWeFgFIuO

H2Cp0tT03t2SK3LX+j/l9jeZK0bu+84CEz4p7toGKZ9x4mwpo9WxJ5vQT9sQm4l62GLK

3bkMA33yfNd39L9zRstaQ5hM7ACDU0C2cvR7GyzuD8N5V36AUfeSe9e9l3YRu5rOju0z

oQtj8XhR3zhHdRsISQigqv9I1WtE/LXNVhtfj7UxEjWPh26k3Bdq+3P5LBhoLnfWF6a0

R7sA==

X-Gm-Message-State: AOJu0Ywj01NqBMEn5WFxnFgfWgqa1028JgWW662L5ElmzCrzb9zICFK0

Yvd69GcjHTs0L/JnNwJPAp+vQ483kSiBY/1HEvy3E+xpmHk=

X-Google-Smtp-Source: AGHT+IGENZM2YA6hu3QNTbyPVBJ/RZNQYezHrVCHzgCSF8qjPh8Q/bVh5IRDawwhhDI90DZ9d22VZlOp/QivKWFZWbw=

X-Received: by 2002:a17:90a:c981:b0:268:3ea0:7160 with SMTP id

w1-20020a17090ac98100b002683ea07160mr7360879pjt.0.1695027376627; Mon, 18 Sep

2023 01:56:16 -0700 (PDT)

MIME-Version: 1.0

From: Herr Gomez Rodrigo

Date: Mon, 18 Sep 2023 08:56:07 +0000

Message-ID:

Subject: Hi there

To: usenet , valerie bailey ,

valhalla , valhome ,

vejaietwaroo , vicraf ,

vincent weithers , w seufert

Content-Type: multipart/alternative; boundary="000000000000ab259b06059e5076"



--000000000000ab259b06059e5076

Content-Type: text/plain; charset="UTF-8"



Herr Gomez Rodrigo really loved the idea and simply made the decision to

share it with you - https://p7dk4.app.link/NvkaVdenaDb

You certainly must do it!



--000000000000ab259b06059e5076

Content-Type: text/html; charset="UTF-8"



Herr Gomez Rodrigo really loved the idea and simply made the decision to share it with you - https://p7dk4.app.link/NvkaVdenaDb
You certainly must do it!



--000000000000ab259b06059e5076--

link spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 Sep 2023 06:32:05 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qiDN8-000O8e-0d

for dave@doctor.nl2k.ab.ca;

Mon, 18 Sep 2023 06:29:02 -0600

Resent-From: The Doctor

Resent-Date: Mon, 18 Sep 2023 06:29:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f196.google.com ([209.85.215.196]:60522)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qiA4l-000GpH-1T

for doctor@nl2k.ab.ca;

Mon, 18 Sep 2023 02:57:55 -0600

Received: by mail-pg1-f196.google.com with SMTP id 41be03b00d2f7-564af0ac494so3023907a12.0

for ; Mon, 18 Sep 2023 01:55:52 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1695027346; x=1695632146; darn=nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=WcyejZWyJ3ysHxRD3bCTj3G92fDDkOMy37Fll18h88w=;

b=Ih9g72/OkVSSMY3hsMclMt/BV7KELyXOmPOJPV0Mqnu9RHrnGCPwuvYfkxMAKn0biC

ZR5vTjPAyitYbL9yq7VIls27lL8Ba/3Xut/eVjYcZdY5aOuZBdJZvYzjDnVdDri3czmK

URvhkJ/aAJWa5RqDJ7Od6lJksEnSF+zDvo9y2B3lp/2CdItePqalxqX1VNHzZDijhZCB

Ygjyl8vBHcnEFzf0praJqPddAPf57VI1nEddlVQ20MyfghOdKDvFv9/KktEZvlgDRg32

JTNDTwAos9V8afRjNRPwQKQ9VNymksIKrRRccfwsZIg0eWxmc4oATRStIclw3Hb4w+IJ

Tdeg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1695027346; x=1695632146;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=WcyejZWyJ3ysHxRD3bCTj3G92fDDkOMy37Fll18h88w=;

b=TZ4wUZyYDFq2DIqoZL/Azo5fQq6Ocb04yCHfeOncp36R6Lo80ywdEbB8RL8bWGAvbE

+Icj3/dCxtpvsuB4aNHEjOMSA1pgrmqga3gcvFm51DnkoyBq1Yc4G+9bBvZB2C/JuZft

CATQpRUiehM82RmNVJ6KRtCORAraLqj6eN6VvAkWpMLjpCpq4m+Wq4GH6yNHFrvwvvsb

hZVpq2yDTfyhiClX53qM0ovfwaOx4YRLri33tpVKU0dggHWM/rsFjQwUmM2iTjJfUsLT

syy1S/EMsAwd2oFcCkzr9/BBldz6gYLRfdgv01cbaGIWytfmook8zzyZB+xF71hERh3q

uNBg==

X-Gm-Message-State: AOJu0Yy68Lv2wTGbXz3HnaHOlAUyA+XEgbV30Ox33tdBjUdFfXYZedFU

9QKNluemAHd9lixwCmJ1M8Vec8QCs7jVrDMDpF0=

X-Google-Smtp-Source: AGHT+IEk2jjkoLKvI9C+1iO/215uIQvxCd2mSpU9vmuMKB2xz/SP4vwrX8aaa9pYsnrogVQ4sHr3RU4m+ldmFNM3Dco=

X-Received: by 2002:a17:90b:3549:b0:274:77df:50cd with SMTP id

lt9-20020a17090b354900b0027477df50cdmr5647406pjb.9.1695027346303; Mon, 18 Sep

2023 01:55:46 -0700 (PDT)

MIME-Version: 1.0

From: MONICA DAN

Date: Mon, 18 Sep 2023 08:55:36 +0000

Message-ID:

Subject: Hi there

To: discdrive , dleinbach , dnto ,

doctor , doug ,

drdexterhiggins

Content-Type: multipart/alternative; boundary="000000000000dc6f4606059e4e25"

X-Spam_score: 6.5

X-Spam_score_int: 65

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: MONICA DAN shared the web page link with you - https://ot6ce.app.link/jbvoJdXqaDb

It does indeed work! MONICA DAN shared the web page link with you - https://ot6ce.app.link/jbvoJdXqaDb

It does indeed work!



Content analysis details: (6.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[danparedes0715(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[danparedes0715(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.215.196 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.196 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: ot6ce.app.link]

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

Subject: {SPAM?} Hi there



--000000000000dc6f4606059e4e25

Content-Type: text/plain; charset="UTF-8"



MONICA DAN shared the web page link with you -

https://ot6ce.app.link/jbvoJdXqaDb

It does indeed work!



--000000000000dc6f4606059e4e25

Content-Type: text/html; charset="UTF-8"



MONICA DAN shared the web page link with you - https://ot6ce.app.link/jbvoJdXqaDb
It does indeed work!



--000000000000dc6f4606059e4e25--

Loan link spam from Google gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 Sep 2023 06:32:05 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qiDN3-000Nsx-0t

for dave@doctor.nl2k.ab.ca;

Mon, 18 Sep 2023 06:28:57 -0600

Resent-From: The Doctor

Resent-Date: Mon, 18 Sep 2023 06:28:57 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f49.google.com ([209.85.218.49]:54568)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qiA0V-000FjU-14

for doctor@doctor.nl2k.ab.ca;

Mon, 18 Sep 2023 02:53:32 -0600

Received: by mail-ej1-f49.google.com with SMTP id a640c23a62f3a-9ada6b0649fso562297266b.1

for ; Mon, 18 Sep 2023 01:51:28 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1695027082; x=1695631882; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=2W588pOkh1a7v+IWxEtP2il/0AV0dS6j3liS/LvlJig=;

b=Z4uuZ1FZl3NKvJAQRuL85i+3gQIyTfY5C3X9B93OuL/ux7JkFPJURwwM1kyRCtsXlC

Of2/rdmpdf9OrKPh0dtV81QeacMVm6QzWJqnGofiGsirPC7Cr+Q1ttbZjabjXULs2HJH

SkO0CGPaeVnNdRYgUfW3bw7peBw/QiFuWy2DiL8CCKQOfKPyrieaWDlbhPy0VRJr6vnu

CU4oTuU57ZyM53nLncsEfget5TZMkbbnqrn7UWUz7AOGFCb3HD7qgbxzamIO4mprMMHX

W+sMi+ndWs+JnlV3zTbpCldN0BocMzQO8si9y9Bu9mRzFqPIPKvaqSeslx9T8yDZlCby

7Ktw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1695027082; x=1695631882;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=2W588pOkh1a7v+IWxEtP2il/0AV0dS6j3liS/LvlJig=;

b=QlCg9y3YEVvkKQ2iD/NZB6N2gcjghYmNBXAduSYkEuZsuf7OVNHgamMWY5XJ+0p3XT

HdtBzCNEwtF/lQ8NBHp521KKeneQ77TQVa197OYoCht/u2zpxYXcENQOxfvBvFHGzqpA

M9CAbYcUNyy2J/gbOF0oQXGhE/2UohQtm03w3SHGtW4mYhfyUsp6ExJvONndMtJlAAb9

NhlhQWN6oNGTgmFhkMFB1fLHK/gdoPlXxl1iMAKL4CyAmOHuB2JP+hT/zhap+h9EA2Q3

8J0kQFlqzKYVRDxRDSEhRyKfXcAA5LpCUYBfCpduliiQVvSrnXM0wZ82XsRRM/gkZZ85

p+Hg==

X-Gm-Message-State: AOJu0YwpFwoSE6ow/uFjWr7a3JJgPbuubrXdLogl3eRvSSAWUvOKxVah

M6MF4hYs/NKYftmxyMKL8CRcw3Pabs5eqq7BPmA=

X-Google-Smtp-Source: AGHT+IH3GMlhV/WNxeXjmWuav8XhJ7qu0X9DhlnirRuw0knrM7dLGHYzBdEBdgesbo/tM1fTp2JkE6/ulCv53zprTQE=

X-Received: by 2002:a17:907:270b:b0:9a1:e1cf:6c70 with SMTP id

w11-20020a170907270b00b009a1e1cf6c70mr7265994ejk.6.1695027081582; Mon, 18 Sep

2023 01:51:21 -0700 (PDT)

MIME-Version: 1.0

From: LOAN OFFER

Date: Mon, 18 Sep 2023 08:51:13 +0000

Message-ID:

Subject: Hello

To: countryaccents , cteng ,

ctetley , c degagne ,

doctor , elizabethp ,

firdosh

Content-Type: multipart/alternative; boundary="000000000000151c1a06059e3f77"



--000000000000151c1a06059e3f77

Content-Type: text/plain; charset="UTF-8"



LOAN OFFER truly adored it and made a decision to reveal it to you -

https://8cv58.app.link/uaxpMdToaDb

Not necessarily some thing you discover every single day



--000000000000151c1a06059e3f77

Content-Type: text/html; charset="UTF-8"



LOAN OFFER truly adored it and made a decision to reveal it to you - https://8cv58.app.link/uaxpMdToaDb
Not necessarily some thing you discover every single day



--000000000000151c1a06059e3f77--

Nigerian Google Gmail spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 17 Sep 2023 19:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qi3HF-000Fwu-1i

for dave@doctor.nl2k.ab.ca;

Sun, 17 Sep 2023 19:42:17 -0600

Resent-From: The Doctor

Resent-Date: Sun, 17 Sep 2023 19:42:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f47.google.com ([209.85.208.47]:59609)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qi1RP-000FpV-0y

for root@nk.ca;

Sun, 17 Sep 2023 17:44:43 -0600

Received: by mail-ed1-f47.google.com with SMTP id 4fb4d7f45d1cf-52a49a42353so4773676a12.2

for ; Sun, 17 Sep 2023 16:42:39 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1694994152; x=1695598952; darn=nk.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=iJUfGlRj0dx/FpdXQZzjmGdMIW2EOQiZN/CLkMNSKO8=;

b=gDg1aRhC/KZVD4Kgd5ClJl2wpmdBRq4WIfAuGnHP+xadm+0pUnmjzgHKHim0C4gQ3Q

Gr5QlM9bHyIEhOCW0It+zUJPrwBXKDz7Jh2rnTs3C2W6uhZ6DHwQoJj0BgzVV8rAu7Mc

FADzURNV2IMZN2hn4xxSLfc8aKF0cljz+mtq7X7ulaZuaBQ51OaSy/9n+Ca5SIvUI5hH

2IQ4yINrysUEmZ5/XUdBCYsK3XU03/sC4B4l6AzR9tm2FYGjoX0RZDGbuv0m8ocRvzrX

IKh5Z4d8jQaNh7Yg4KzCevGIDUzmWP3Od7so29C43BkDwH6qA3sTX40s8HIIO0fuCuwq

YmFw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1694994152; x=1695598952;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=iJUfGlRj0dx/FpdXQZzjmGdMIW2EOQiZN/CLkMNSKO8=;

b=rEjoCF2m3iwG3XGdzbiWWmMG8so+jQZJkpFvrWA4FBybhy74afxtW4FpbyWluYMXUf

MONzzKPTEFR+Xp2sG1B3HHTFJ0Vka/KlhheLilQs5rd2vgjoVt7APjSw4v98ryhk6cF2

3nwzOVv35hqWDf6icMsIKLWCgtr/Yg7LYJhKWw1j+OZJLBq30eh0/oKoyN2CAcDFAaqt

+97rQn1/VAxR9rIoRGHjdLQ8IAivveHcXnqJ+0ykSasmWSM2Aj+kqpQyfR9TB7KFzC5z

J0xRH1ipQYxuqoYzv8xytBI2ITubWSVIxS5P62DqSvkF7ATOoNXwGcjp0vas09QmhGkf

X0fA==

X-Gm-Message-State: AOJu0Ywdk988mvXxYLsKrwlghWKEri1X4qD7XaCvE02TPikDebdlIvPC

cGWkvDiwufDdSbrmOeKQco/iQF3JdJSxMUuQgeA=

X-Google-Smtp-Source: AGHT+IFf1ideROwYsm7TPFisIfsMz9iOTzbFbLvG54fAJw5buNWtQ0m7YfFxdUQXAX5IeyNR8HsaioYrx2WemxAU6mw=

X-Received: by 2002:aa7:d394:0:b0:51e:309:2e11 with SMTP id

x20-20020aa7d394000000b0051e03092e11mr6100865edq.36.1694994152630; Sun, 17

Sep 2023 16:42:32 -0700 (PDT)

MIME-Version: 1.0

Reply-To: docsmith0013@hotmail.com

From: mark david

Date: Sun, 17 Sep 2023 16:42:24 -0700

Message-ID:

Subject: Update

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000005d2f140605969431"

Bcc: root@nk.ca

X-Spam_score: 19.8

X-Spam_score_int: 198

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings. On behalf of the Trustees and Executor of the estate

of Late Mr. Edwin Gabriel, I once again try to notify you as my earlier letter

was returned undelivered. I hereby attempt to reach you again by thi [...]





Content analysis details: (19.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.47 listed in list.dnswl.org]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[markdavid874(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[markdavid874(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[docsmith0013(at)hotmail.com]

3.6 NA_DOLLARS BODY: Talks about a million North American dollars

0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.47 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

2.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.6 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 FILL_THIS_FORM Fill in a form with personal information

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

0.0 MONEY_FORM Lots of money if you fill out a form

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases

2.3 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money

Subject: {SPAM?} Update



--0000000000005d2f140605969431

Content-Type: text/plain; charset="UTF-8"



Greetings.



On behalf of the Trustees and Executor of the estate of Late Mr. Edwin

Gabriel, I once again try to notify you as my earlier letter was returned

undelivered. I hereby attempt to reach you again by this same email address

on the WILL.I was made to understand that My Late client Mr. Edwin Gabriel

met with you during his business trip before he died. I wish to notify you

that late Mr. Edwin Gabriel made you a beneficiary to his WILL. He left the

sum of Ten Million seven hundred thousand Dollars ( US$10.7Million ) to you

in the codicil and the last testament to his will.



This may sound strange and unbelievable to you, but it is real and true.

Being a widely traveled man, he Must have been in contact with you in the

past or simply you were nominated to him by one of his Numerous friends

abroad who wished you good. Mr. Edwin Gabriel until his death was a member

of the helicopter Society and the Institute of Electronic & Electrical

Engineers. He was a very dedicated Christian who loved to give out.



His great philanthropy earned him numerous awards during his lifetime. Late

Mr. Edwin Gabriel died on the 16th day of February 2015 at the age of 71

years and his WILL is now ready for execution. According to him this money

is to support his Christian activities (May his soul rest with the Lord)

and to help the poor and needy. Please if I reach you as I am hopeful,

endeavor to get back to me as soon as possible to enable me to conclude my

job. I hope to hear from you on a distant date with your address, direct

phone number, fax number ,age, occupation to enable me to send you the

copies of the will documents on your name.





Regards

Mark David.



--0000000000005d2f140605969431

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Greetings.

On behalf of the Trustees and Executor o=

f the estate of Late Mr. Edwin Gabriel, I once again try to notify you as m=

y earlier letter was returned undelivered. I hereby attempt to reach you ag=

ain by this same email address on the WILL.I was made to understand that My=

Late client Mr. Edwin Gabriel met with you during his business trip before=

he died. I wish to notify you that late Mr. Edwin Gabriel made you a benef=

iciary to his WILL. He left the sum of Ten Million seven hundred thousand D=

ollars ( US$10.7Million ) to you in the codicil and the last testament to h=

is will.

This may sound strange and unbelievable to you, but it is r=

eal and true. Being a widely traveled man, he Must have been in contact wit=

h you in the past or simply you were nominated to him by one of his Numerou=

s =C2=A0friends abroad who wished you good. Mr. Edwin Gabriel until his dea=

th was a member of the helicopter Society and the Institute of Electronic &=

amp; Electrical Engineers. He was a very dedicated Christian who loved to g=

ive out.

His great philanthropy earned him numerous awards during hi=

s lifetime. Late Mr. Edwin Gabriel died on the 16th day of February 2015 at=

the age of 71 years and his WILL is now ready for execution. According to =

him this money is to support his Christian activities (May his soul rest wi=

th the Lord) and to help the poor and needy. Please if I reach you as I am =

hopeful, endeavor to get back to me as soon as possible to enable me to con=

clude my job. I hope to hear from you on a distant date with your address, =

direct phone number, fax number ,age, occupation to enable me to send you t=

he copies of the will documents on your name.


Regards
Mark Da=

vid.




--0000000000005d2f140605969431--