Nigerian Spam from Google Gmail
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 09 Dec 2024 03:39:00 -0700
Received: from mail-ej1-f66.google.com ([209.85.218.66]:59668)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98 (FreeBSD))
(envelope-from
id 1tKb9z-00000000Lcq-224h
for dave@doctor.nl2k.ab.ca;
Mon, 09 Dec 2024 03:38:42 -0700
Received: by mail-ej1-f66.google.com with SMTP id a640c23a62f3a-a9a68480164so560390966b.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1733740598; x=1734345398; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=EpsqdiTX3H8bf2DsJ7UgNKjvIjdqswkZTaPjFkafi7Q=;
b=Q4uSSjpq1FMO7QTxip2SvP5uXZVg/p2nNppTFNMyuzchp41qjWuhTROwAHeZSv+Edn
w1YII7uyrMgBj4WKm38ZkkDNkOU0mz7Z1cDOpLqI7PAqnD9FZ+vImwhZOpBhiBmz8HUm
ZYacDh2TEbszvpCNyiz47nZAGv1e0dbbMH6SVR354ga2Pj5wsnaQcQ+kFVlH8PFRI2aZ
sZlzD3F5YxylplDyW3VtECG01aVuGVLgGRj33H0eysNWOHop1xlcCmfyp8eB0Hasw+Xr
BIR1k0RVF+9RskSFn606LEJAVql5iNplntDCG5Q1bDef7/TcOzKz/BmhYSg2rf9rkM+L
EI4g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1733740598; x=1734345398;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=EpsqdiTX3H8bf2DsJ7UgNKjvIjdqswkZTaPjFkafi7Q=;
b=Ej/4yJFyb0Zfu3MYDMJ6hSP7hcoPSivoUEFuhqnfvhZKuPHTDxihNZ7FF4JsnE/SSS
zlj15rLtLNEj4Bl4ctraIDrD0lzplc3x29dZGNECVChHM96HeeBvzm5GNmqCEuqCeimL
kd99XszoyYp0H7tuv8HNX1RxkDatVRjOAe9QPaQIiAV4MmFBA7nHl+c7RDAO+/9d75j4
d9NVXX8btYC7SvAA0TzQo2tTNZHgf8lIea8oyICb+ed8tXQNLQ9js0OQgLBxCTDFeAJf
x70ngkxyeHBdLQcHjrT5ZIEqY9WOKLUt1RSM5iiEoH2Sa1N77TAqO+hFQPbuIgEVJLOs
5+YA==
X-Forwarded-Encrypted: i=1; AJvYcCVb/quC0P0VdRgznfvlArMWApvrtKnlihwl3CMSfFG8lmM74AFHfL5m8xOCWT3tJHbNIuLj@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0YwsJ67A9m+EZqHujIXlYiMlkr+rASthX9YSEV/cIkPfMrHkbCDx
CprQ08m69rePY1QmhKxWc3oam+z7PSbnkIWspA42bdKKFQvqlv0J/qA+UcvRFIw1GuVrdPLV8u9
XaST0hwuaztjXGQwsdVolZ81VXzbkVY5CLbKwmg==
X-Gm-Gg: ASbGncstMM2YNPycZJmfUvCj0JF6nhce70R6DjbbXphqK+M3nH4iFl8Q+Mle27C2fSb
FAyr8Es/pT5CefZJDpdcA4XlqC4OZDCQ=
X-Google-Smtp-Source: AGHT+IHSqIMR6gffY2mgJxejyoPrlkUKcqBOSX8mblWnKcpYKlI238iLvQ5Llk2G+Zj4dtGCd0YDE5TQtduHRk0E3o4=
X-Received: by 2002:a05:6402:2791:b0:5cf:a1c1:5289 with SMTP id
4fb4d7f45d1cf-5d3be6fb887mr10666889a12.21.1733738785806; Mon, 09 Dec 2024
02:06:25 -0800 (PST)
MIME-Version: 1.0
Reply-To: benmarie824@gmail.com
From: "Mrs.Mary Benjamin"
Date: Mon, 9 Dec 2024 11:06:11 +0100
Message-ID:
Subject: =?UTF-8?B?TXJzLiBNYXJ5IEJlbmphbcOtbiw=?=
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000007622550628d3842b"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 13.3
X-Spam_score_int: 133
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Kindly read and reply fast. I will need your help to accomplish
the wishes of my late husband. I want to donate toward education and the
less privilege ones and churches; I will need your service to h [...]
Content analysis details: (13.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.218.66 listed in dnsbl.ahbl.org]
[209.85.218.66 listed in dnsbl.ahbl.org]
[209.85.218.66 listed in dnsbl.ahbl.org]
[209.85.218.66 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.218.66 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.218.66 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.218.66 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.218.66 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.218.66 listed in will-spam-for-food.eu.org]
[209.85.218.66 listed in will-spam-for-food.eu.org]
[209.85.218.66 listed in will-spam-for-food.eu.org]
[209.85.218.66 listed in will-spam-for-food.eu.org]
[209.85.218.66 listed in will-spam-for-food.eu.org]
[209.85.218.66 listed in will-spam-for-food.eu.org]
[209.85.218.66 listed in will-spam-for-food.eu.org]
[209.85.218.66 listed in will-spam-for-food.eu.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.218.66 listed in list.dnswl.org]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.66 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[benmarie824(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[ben870266(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[ben870266(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
1.5 HK_NAME_FM_MR_MRS No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} =?UTF-8?B?TXJzLiBNYXJ5IEJlbmphbcOtbiw=?=
--0000000000007622550628d3842b
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Kindly read and reply fast.
I will need your help to accomplish the wishes of my late husband. I want
to donate toward education and the less privilege ones and churches; I will
need your service to handle this project=E2=80=99s. I will give you more de=
tails
once you accept this offer.
Sincerely
Mrs. Mary Benjam=C3=ADn,
--0000000000007622550628d3842b
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
I will need your help to ac=
complish the wishes of my late husband. I want to donate toward education a=
nd the less privilege ones and churches; I will need your service to handle=
this project=E2=80=99s. I will give you more details once you accept this =
offer.
Sincerely
Mrs. Mary Benjam=C3=ADn,
--0000000000007622550628d3842b--