More Nigerian spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 10 Jul 2022 16:21:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oAfHj-000PaY-IF
for dave@doctor.nl2k.ab.ca;
Sun, 10 Jul 2022 16:20:15 -0600
Resent-From: The Doctor
Resent-Date: Sun, 10 Jul 2022 16:20:15 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oi1-f193.google.com ([209.85.167.193]:33696)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oAXMz-000Oyx-TD
for doctor@doctor.nl2k.ab.ca;
Sun, 10 Jul 2022 07:53:14 -0600
Received: by mail-oi1-f193.google.com with SMTP id j193so4122700oih.0
for; Sun, 10 Jul 2022 06:52:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:sender:from:date:message-id:subject:to
:content-transfer-encoding;
bh=0Xk90BHf6mwPdkYbVeFP81sv99Zzs1R/GjMtspPD45M=;
b=bnedHqh9SvrAQIFmUeSb/LiZ4z5x11XcKAVv92JtSb+9Ozki7FVhFwW8cln/yo6EPg
2tCfGuNORoKbE8tom6ypXaKfSaKbJK9SpmgXMdAtQ1pS/rgTFO61x3bwYlt3NgqtO7ny
fbsDeKUvV7v62D9UUWoPUmf5E0e/fIxcV6Gf9+KgZdTmzDKNMaC/VFA4OnW56SlhINVn
vwSZyZgppvy6y/qbPh7kUzymYFrwKpUKu6gznCbbkyAh6LMrhkY6tqsiZ74PFi93LEFq
r+olTsFdzWPGlRWNqYEJGBTsPBsYI/5IfQaf+5fqvYRRMBGblE5MmblHgBt9KC/dY9Os
NxAQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:sender:from:date:message-id:subject
:to:content-transfer-encoding;
bh=0Xk90BHf6mwPdkYbVeFP81sv99Zzs1R/GjMtspPD45M=;
b=BwbE6A9U4JgcE3Q1FtUipb7AFBgMtnepsD2G41/F3HkQjQWrn0oWRC6sv3PUSZVI3A
RTb25ORY94btEatcTTp4JTUoo2tilFauWSusAcnWlFanAEtxEcreQWF3oD7/b4uVxEZN
liRBDGm+fQamXw0/oVdSVfQK61Xw1Abn3YfPqUoXsf13u2wmVmMWZHVRS9wvrDOoI5xG
J2M/ecONcuHS9Wen78FNM0rq7iXmbH+AoDttt7qCrSwTjMZjFaX0/ADpXABFV7lSQkUv
BaqjDMMQzNvGh0aqF1OQtMNIru4rnZHvCBlOMeROAKE88/PIlysC1gANIDnPYiwnwo6i
1hVQ==
X-Gm-Message-State: AJIora+1v98pcwA14uEj8f6fK00QPhmhqQ9IR23+3ZLQINiCgfobyfp2
k2qxadz1RSdtso2W3jTG95Vh4EMKnm8wDJPUHwg=
X-Google-Smtp-Source: AGRyM1tV5x4GiCMjxUgdgYLfJAWyIW7YzWaysA/yDTBBGwVCvLPgZMyFnvWziZnYNanzZGpyHZojN/6x1S8LtGpBnCM=
X-Received: by 2002:a05:6808:1496:b0:335:7839:4e6c with SMTP id
e22-20020a056808149600b0033578394e6cmr4458797oiw.45.1657461163571; Sun, 10
Jul 2022 06:52:43 -0700 (PDT)
MIME-Version: 1.0
Sender: mrseunicedafia01@gmail.com
Received: by 2002:a9d:37a1:0:0:0:0:0 with HTTP; Sun, 10 Jul 2022 06:52:42
-0700 (PDT)
From: "Mrs.Rose Raya"
Date: Sun, 10 Jul 2022 13:52:42 +0000
X-Google-Sender-Auth: 2Buf6DGXXiYmRf1fdn2vxET4Ns4
Message-ID:
Subject: FROM MRS ROSE RAYA
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 9.5
X-Spam_score_int: 95
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: My name is Mrs.Rose Raya.from Indonesia, I know that this
message might come to you as a surprise because we don't know each other nor
have we ever met before but accept it with an open and positive mind. I have
a Very important request that [...]
Content analysis details: (9.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.193 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[mrseunicedafia01[at]gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[yeetybayarmaa[at]gmail.com]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
1.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of
money
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
Subject: {SPAM?} FROM MRS ROSE RAYA
My name is Mrs.Rose Raya.from Indonesia,
I know that this message might come to you as a surprise because we
don't know each other nor have we ever met before but accept it with
an open and positive mind. I have a Very important request that made
me to contact you; I was diagnosed with ovarian cancer disease which
doctors have confirmed and announced to me that i have just few days
to leave, Now that I=E2=80=99m ending the race like this, without any famil=
y
members and no child, I just came across your email contact from my
personal search.
I=E2=80=99m a business woman from Indonesia dealing with gold exportation h=
ere
in the Republic of Burkina Faso. I have decided to hand over the sum
of ($10.5 Million Dollar) in my account to you for the help of
orphanage homes/the needy once in your location to fulfill my wish on
earth. But before handing over my data=E2=80=99s to you, kindly assure me t=
hat
you will take only 50% of the money and share the rest to orphanage
homes/the needy once in your country, Return to enable me forward to
you the bank contact details now that I have access to Internet in the
hospital to enable you contact the bank, always
check your email and reply in time for better communications.
PLEASE REPLY ME WITH THE ANSWERS TO THOSE QUESTIONS BELOW FOR MY
CONFIRMATION SO THAT I CAN GIVE YOU THE EMAIL ADDRESS OF THE BANK FOR YOU
TO CONTACT THEM.
1. FULL NAME:
2. YOUR AGE:
3. SEX:
4. NATIONALITY:
5. COUNTRY OF RESIDENCE:
6. TELEPHONE NUMBER:
7. YOUR MARITAL STATUS:
8. YOUR OCCUPATION:
9. SEND TO ME YOUR PICTURE:
10. YOU HAVE TO ASSURE ME YOU WILL ACT AS I HAVE INSTRUCTED YOU IF THE
MONEY GETS TO YOUR BANK ACCOUNT.
Your early response will be appreciated.
Yours Faithfully,
Mrs.Rose Raya.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 10 Jul 2022 16:21:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oAfHj-000PaY-IF
for dave@doctor.nl2k.ab.ca;
Sun, 10 Jul 2022 16:20:15 -0600
Resent-From: The Doctor
Resent-Date: Sun, 10 Jul 2022 16:20:15 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oi1-f193.google.com ([209.85.167.193]:33696)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oAXMz-000Oyx-TD
for doctor@doctor.nl2k.ab.ca;
Sun, 10 Jul 2022 07:53:14 -0600
Received: by mail-oi1-f193.google.com with SMTP id j193so4122700oih.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:sender:from:date:message-id:subject:to
:content-transfer-encoding;
bh=0Xk90BHf6mwPdkYbVeFP81sv99Zzs1R/GjMtspPD45M=;
b=bnedHqh9SvrAQIFmUeSb/LiZ4z5x11XcKAVv92JtSb+9Ozki7FVhFwW8cln/yo6EPg
2tCfGuNORoKbE8tom6ypXaKfSaKbJK9SpmgXMdAtQ1pS/rgTFO61x3bwYlt3NgqtO7ny
fbsDeKUvV7v62D9UUWoPUmf5E0e/fIxcV6Gf9+KgZdTmzDKNMaC/VFA4OnW56SlhINVn
vwSZyZgppvy6y/qbPh7kUzymYFrwKpUKu6gznCbbkyAh6LMrhkY6tqsiZ74PFi93LEFq
r+olTsFdzWPGlRWNqYEJGBTsPBsYI/5IfQaf+5fqvYRRMBGblE5MmblHgBt9KC/dY9Os
NxAQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:sender:from:date:message-id:subject
:to:content-transfer-encoding;
bh=0Xk90BHf6mwPdkYbVeFP81sv99Zzs1R/GjMtspPD45M=;
b=BwbE6A9U4JgcE3Q1FtUipb7AFBgMtnepsD2G41/F3HkQjQWrn0oWRC6sv3PUSZVI3A
RTb25ORY94btEatcTTp4JTUoo2tilFauWSusAcnWlFanAEtxEcreQWF3oD7/b4uVxEZN
liRBDGm+fQamXw0/oVdSVfQK61Xw1Abn3YfPqUoXsf13u2wmVmMWZHVRS9wvrDOoI5xG
J2M/ecONcuHS9Wen78FNM0rq7iXmbH+AoDttt7qCrSwTjMZjFaX0/ADpXABFV7lSQkUv
BaqjDMMQzNvGh0aqF1OQtMNIru4rnZHvCBlOMeROAKE88/PIlysC1gANIDnPYiwnwo6i
1hVQ==
X-Gm-Message-State: AJIora+1v98pcwA14uEj8f6fK00QPhmhqQ9IR23+3ZLQINiCgfobyfp2
k2qxadz1RSdtso2W3jTG95Vh4EMKnm8wDJPUHwg=
X-Google-Smtp-Source: AGRyM1tV5x4GiCMjxUgdgYLfJAWyIW7YzWaysA/yDTBBGwVCvLPgZMyFnvWziZnYNanzZGpyHZojN/6x1S8LtGpBnCM=
X-Received: by 2002:a05:6808:1496:b0:335:7839:4e6c with SMTP id
e22-20020a056808149600b0033578394e6cmr4458797oiw.45.1657461163571; Sun, 10
Jul 2022 06:52:43 -0700 (PDT)
MIME-Version: 1.0
Sender: mrseunicedafia01@gmail.com
Received: by 2002:a9d:37a1:0:0:0:0:0 with HTTP; Sun, 10 Jul 2022 06:52:42
-0700 (PDT)
From: "Mrs.Rose Raya"
Date: Sun, 10 Jul 2022 13:52:42 +0000
X-Google-Sender-Auth: 2Buf6DGXXiYmRf1fdn2vxET4Ns4
Message-ID:
Subject: FROM MRS ROSE RAYA
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 9.5
X-Spam_score_int: 95
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: My name is Mrs.Rose Raya.from Indonesia, I know that this
message might come to you as a surprise because we don't know each other nor
have we ever met before but accept it with an open and positive mind. I have
a Very important request that [...]
Content analysis details: (9.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.193 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[mrseunicedafia01[at]gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[yeetybayarmaa[at]gmail.com]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
1.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of
money
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
Subject: {SPAM?} FROM MRS ROSE RAYA
My name is Mrs.Rose Raya.from Indonesia,
I know that this message might come to you as a surprise because we
don't know each other nor have we ever met before but accept it with
an open and positive mind. I have a Very important request that made
me to contact you; I was diagnosed with ovarian cancer disease which
doctors have confirmed and announced to me that i have just few days
to leave, Now that I=E2=80=99m ending the race like this, without any famil=
y
members and no child, I just came across your email contact from my
personal search.
I=E2=80=99m a business woman from Indonesia dealing with gold exportation h=
ere
in the Republic of Burkina Faso. I have decided to hand over the sum
of ($10.5 Million Dollar) in my account to you for the help of
orphanage homes/the needy once in your location to fulfill my wish on
earth. But before handing over my data=E2=80=99s to you, kindly assure me t=
hat
you will take only 50% of the money and share the rest to orphanage
homes/the needy once in your country, Return to enable me forward to
you the bank contact details now that I have access to Internet in the
hospital to enable you contact the bank, always
check your email and reply in time for better communications.
PLEASE REPLY ME WITH THE ANSWERS TO THOSE QUESTIONS BELOW FOR MY
CONFIRMATION SO THAT I CAN GIVE YOU THE EMAIL ADDRESS OF THE BANK FOR YOU
TO CONTACT THEM.
1. FULL NAME:
2. YOUR AGE:
3. SEX:
4. NATIONALITY:
5. COUNTRY OF RESIDENCE:
6. TELEPHONE NUMBER:
7. YOUR MARITAL STATUS:
8. YOUR OCCUPATION:
9. SEND TO ME YOUR PICTURE:
10. YOU HAVE TO ASSURE ME YOU WILL ACT AS I HAVE INSTRUCTED YOU IF THE
MONEY GETS TO YOUR BANK ACCOUNT.
Your early response will be appreciated.
Yours Faithfully,
Mrs.Rose Raya.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments