Beneficiary spam from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 21 Jun 2022 08:03:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1o3eSa-0000Sr-9E
for dave@doctor.nl2k.ab.ca;
Tue, 21 Jun 2022 08:02:28 -0600
Resent-From: The Doctor
Resent-Date: Tue, 21 Jun 2022 08:02:28 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yb1-f179.google.com ([209.85.219.179]:45898)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1o3bvB-000HJC-QU
for root@nl2k.ab.ca;
Tue, 21 Jun 2022 05:19:56 -0600
Received: by mail-yb1-f179.google.com with SMTP id n144so19838986ybf.12
for; Tue, 21 Jun 2022 04:19:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:from:date:message-id:subject:to;
bh=SAUIMAJb0ZnUP4bCTUXlkyE2oEAKZPv+XCEIn7FqN+Y=;
b=FUNDiE9Bmiw848iB72taxxqBYWILtAPfxG1d4KbZObiYswbinleHGV/fA7SSr+OsWL
VwB0g7J4KD0PFjSdY/nGIgggMI8Cc9nEQ+H2VFlLElYwenZOZJSY2gkUDGvyKt/AwJZJ
Eo5m2IWsbAmCwAow98bB2I+qTdj8uGOHck47wBeMqn4+kgsMscKQcNiW+vcr3PCbg3iJ
Jkf21uRj/+k3vCExd5yTecPvIphxQiYodLo/bhBL0vzV6cA4GeCCLTejxIi4uFWnTZMG
XMjKCmbKY73bdF5b6rGpP3V/emKj6Pof4dUO35XlLcs/e7E40kqlVXsOSZYb6yXsR4t0
HGIw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=SAUIMAJb0ZnUP4bCTUXlkyE2oEAKZPv+XCEIn7FqN+Y=;
b=FQciBjGQH9FtazAJ4uW59bShFKsBXcmyyEspb7PVi4R3zg1/p2zlgyvlMZRtVOhFQx
1d5h0uw7y4AYnxBMLcqNBV4byjIlIYuKhjZiGIWVjLQD1sI07R6D2pb2xArwDDGhrB43
FsxF75yoeXJ/lUZYctbrX7fwZGN/ModpQz9Kk9LvB+4p0otpN7I2DycBf5CjL7lXPxH6
a83U17qPaCVxIXj40M9QoVPfDh9H7foDSoEIIxdzP4pzHc/WHgNZB0VumSowPHw5aJHq
XQxApA58aF941eab211BNBVlQFPxWqDfGLlqwT5rg0q1v6zwgrH8zumDY8FYXl1+Uyo7
YlLg==
X-Gm-Message-State: AJIora93o3c1OgN5GinmlYaAjPKER9Y6d7s5/DXQ/SGKlIr8Y9Vda30C
y+SDI9wQE0nwql3jLMEnCXYD7AJXFPPLn6u/7qo=
X-Google-Smtp-Source: AGRyM1tdZsyWIyOnQSv8jCR+8znqRVm5B25ihn0cVOtqDskkgJ2xqbZ2lHYz1T6cOgEIZOZdZPPpWban2uYY1Vshx08=
X-Received: by 2002:a25:a091:0:b0:664:6685:89cf with SMTP id
y17-20020a25a091000000b00664668589cfmr31386388ybh.266.1655810366825; Tue, 21
Jun 2022 04:19:26 -0700 (PDT)
MIME-Version: 1.0
From: Martin Nesirky
Date: Tue, 21 Jun 2022 11:15:52 +0000
Message-ID:
Subject: Attn: Beneficiary,
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000bae93405e1f364f2"
Bcc: root@nl2k.ab.ca
X-Spam_score: 15.0
X-Spam_score_int: 150
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Attn: Beneficiary, Department of Public Information and human
rights under the approval of United Nations (UN). My Name is Mr. Martin Nesirky.
The United Nations Globally has approved the sum US$2,800,000.00 (Two Millio
[...]
Content analysis details: (15.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.179 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[americabankofscotland[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.5 MILLION_USD BODY: Talks about millions of dollars
1.3 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
2.3 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of
money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} Attn: Beneficiary,
--000000000000bae93405e1f364f2
Content-Type: text/plain; charset="UTF-8"
Attn: Beneficiary,
Department of Public Information and human rights under the approval of
United Nations (UN). My Name is Mr. Martin Nesirky. The United Nations
Globally has approved the sum US$2,800,000.00 (Two Million Eight hundred
thousand united States dollars only) compensation as part of the
responsibilities for humanitarian Aid for fighting against Corona Virus and
you are among the lucky ones.
This compensation is for the most affected countries, communities and
families across the globe. Your funds were deposited with Societe Generale
Bank Senegal (SGBS) to transfer your funds to you via Internet Banking
which will enable you to have full access to the funds and make transfers
online by yourself.
We hereby demand for your full current information to avoid wrong details.
Your full names:
Home Address:
Telephone:
ID card or passport copy.
Yours Sincerely
Mr. Martin Nesirk
--000000000000bae93405e1f364f2
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--000000000000bae93405e1f364f2--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 21 Jun 2022 08:03:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1o3eSa-0000Sr-9E
for dave@doctor.nl2k.ab.ca;
Tue, 21 Jun 2022 08:02:28 -0600
Resent-From: The Doctor
Resent-Date: Tue, 21 Jun 2022 08:02:28 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yb1-f179.google.com ([209.85.219.179]:45898)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1o3bvB-000HJC-QU
for root@nl2k.ab.ca;
Tue, 21 Jun 2022 05:19:56 -0600
Received: by mail-yb1-f179.google.com with SMTP id n144so19838986ybf.12
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:from:date:message-id:subject:to;
bh=SAUIMAJb0ZnUP4bCTUXlkyE2oEAKZPv+XCEIn7FqN+Y=;
b=FUNDiE9Bmiw848iB72taxxqBYWILtAPfxG1d4KbZObiYswbinleHGV/fA7SSr+OsWL
VwB0g7J4KD0PFjSdY/nGIgggMI8Cc9nEQ+H2VFlLElYwenZOZJSY2gkUDGvyKt/AwJZJ
Eo5m2IWsbAmCwAow98bB2I+qTdj8uGOHck47wBeMqn4+kgsMscKQcNiW+vcr3PCbg3iJ
Jkf21uRj/+k3vCExd5yTecPvIphxQiYodLo/bhBL0vzV6cA4GeCCLTejxIi4uFWnTZMG
XMjKCmbKY73bdF5b6rGpP3V/emKj6Pof4dUO35XlLcs/e7E40kqlVXsOSZYb6yXsR4t0
HGIw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=SAUIMAJb0ZnUP4bCTUXlkyE2oEAKZPv+XCEIn7FqN+Y=;
b=FQciBjGQH9FtazAJ4uW59bShFKsBXcmyyEspb7PVi4R3zg1/p2zlgyvlMZRtVOhFQx
1d5h0uw7y4AYnxBMLcqNBV4byjIlIYuKhjZiGIWVjLQD1sI07R6D2pb2xArwDDGhrB43
FsxF75yoeXJ/lUZYctbrX7fwZGN/ModpQz9Kk9LvB+4p0otpN7I2DycBf5CjL7lXPxH6
a83U17qPaCVxIXj40M9QoVPfDh9H7foDSoEIIxdzP4pzHc/WHgNZB0VumSowPHw5aJHq
XQxApA58aF941eab211BNBVlQFPxWqDfGLlqwT5rg0q1v6zwgrH8zumDY8FYXl1+Uyo7
YlLg==
X-Gm-Message-State: AJIora93o3c1OgN5GinmlYaAjPKER9Y6d7s5/DXQ/SGKlIr8Y9Vda30C
y+SDI9wQE0nwql3jLMEnCXYD7AJXFPPLn6u/7qo=
X-Google-Smtp-Source: AGRyM1tdZsyWIyOnQSv8jCR+8znqRVm5B25ihn0cVOtqDskkgJ2xqbZ2lHYz1T6cOgEIZOZdZPPpWban2uYY1Vshx08=
X-Received: by 2002:a25:a091:0:b0:664:6685:89cf with SMTP id
y17-20020a25a091000000b00664668589cfmr31386388ybh.266.1655810366825; Tue, 21
Jun 2022 04:19:26 -0700 (PDT)
MIME-Version: 1.0
From: Martin Nesirky
Date: Tue, 21 Jun 2022 11:15:52 +0000
Message-ID:
Subject: Attn: Beneficiary,
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000bae93405e1f364f2"
Bcc: root@nl2k.ab.ca
X-Spam_score: 15.0
X-Spam_score_int: 150
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Attn: Beneficiary, Department of Public Information and human
rights under the approval of United Nations (UN). My Name is Mr. Martin Nesirky.
The United Nations Globally has approved the sum US$2,800,000.00 (Two Millio
[...]
Content analysis details: (15.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.179 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[americabankofscotland[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.5 MILLION_USD BODY: Talks about millions of dollars
1.3 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
2.3 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of
money
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} Attn: Beneficiary,
--000000000000bae93405e1f364f2
Content-Type: text/plain; charset="UTF-8"
Attn: Beneficiary,
Department of Public Information and human rights under the approval of
United Nations (UN). My Name is Mr. Martin Nesirky. The United Nations
Globally has approved the sum US$2,800,000.00 (Two Million Eight hundred
thousand united States dollars only) compensation as part of the
responsibilities for humanitarian Aid for fighting against Corona Virus and
you are among the lucky ones.
This compensation is for the most affected countries, communities and
families across the globe. Your funds were deposited with Societe Generale
Bank Senegal (SGBS) to transfer your funds to you via Internet Banking
which will enable you to have full access to the funds and make transfers
online by yourself.
We hereby demand for your full current information to avoid wrong details.
Your full names:
Home Address:
Telephone:
ID card or passport copy.
Yours Sincerely
Mr. Martin Nesirk
--000000000000bae93405e1f364f2
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Attn: Beneficiary,
Department of Public Information=
and human rights under the approval of United Nations (UN). My Name is =C2=
=A0Mr. Martin Nesirky. The United Nations Globally has approved the sum US$=
2,800,000.00 (Two Million Eight hundred thousand united States dollars only=
) compensation as part of the responsibilities for humanitarian Aid for fig=
hting against Corona Virus and you are among the lucky ones.
This co=
mpensation is for the most affected countries, communities and families acr=
oss the globe. Your funds were deposited with Societe Generale Bank Senegal=
(SGBS) to transfer your funds to you via Internet Banking which will enabl=
e you to have full access to the funds and make transfers online by yoursel=
f.
We hereby demand for your full current information to avoid w=
rong details.
Your full names:
Home Address:
Telephone:
>ID card or passport copy.
Yours Sincerely
Mr. Martin Nesirk<=
br>
Department of Public Information=
and human rights under the approval of United Nations (UN). My Name is =C2=
=A0Mr. Martin Nesirky. The United Nations Globally has approved the sum US$=
2,800,000.00 (Two Million Eight hundred thousand united States dollars only=
) compensation as part of the responsibilities for humanitarian Aid for fig=
hting against Corona Virus and you are among the lucky ones.
This co=
mpensation is for the most affected countries, communities and families acr=
oss the globe. Your funds were deposited with Societe Generale Bank Senegal=
(SGBS) to transfer your funds to you via Internet Banking which will enabl=
e you to have full access to the funds and make transfers online by yoursel=
f.
We hereby demand for your full current information to avoid w=
rong details.
Your full names:
Home Address:
Telephone:
>ID card or passport copy.
Yours Sincerely
Mr. Martin Nesirk<=
br>
--000000000000bae93405e1f364f2--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments