More Nigerian Spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 18 Jul 2022 08:57:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oDSAi-0009Vo-BC
for dave@doctor.nl2k.ab.ca;
Mon, 18 Jul 2022 08:56:32 -0600
Resent-From: The Doctor
Resent-Date: Mon, 18 Jul 2022 08:56:32 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f48.google.com ([209.85.167.48]:45782)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oDS7D-00082g-IC
for sales@nk.ca;
Mon, 18 Jul 2022 08:53:00 -0600
Received: by mail-lf1-f48.google.com with SMTP id d12so19729164lfq.12
for; Mon, 18 Jul 2022 07:52:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=Nwiwx3iWV2W406jPPgWnadDK+6JC23u7Ske0EVk36gQ=;
b=VmWmnfXT2Jv1wNRv08lO/Y097tIzgD8pvCZTQjfhgGyQUtFzP3dvTLZ30jGkguMejl
FqSWiMENFASyg32qLfVEIKwjlmxM6HabnF5BWxicDFtqH7i8EKa8mzmx6lcTFtlD+e1n
z43i+q754Ee9tN9e88N4Yv9aTWwdseBPKLb9ZCJP8eNwwfyxwRvLkHSenlHrfEpSNtWE
0M3uebCj7tdvSkEwuv8zG5GHUfzb8L2XJuMeFDBuYcm/U9AgvxmBW2cp2cxXfo7cBhYb
Qfje+qOZrH6FvDYQD/4xINmsv3tp8U8H4U9W3cWi60PJQYypsmI282UId1yDPvtPzeeC
s2xw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=Nwiwx3iWV2W406jPPgWnadDK+6JC23u7Ske0EVk36gQ=;
b=Ji5BfhqZuuIM1STzT7ufreHBJbfoAsVN6xd69WHP2tGVXsfjoDv+5rWJHMiOdEoz9/
dJTshxv7hjXi5AoHg3PXgcxkM6g1ZK6VfO6BHkivym77ROSXpuvZ4D8Fd/TTUvW87QFb
XtCwkg4my/nBuI2nIvNyTQ65299vXlVmTCbqqCYOCx3+uTkVtMVWCM2hutmMidjRNfn5
Al7hANlZcXpJaGh5HkQrkHbT16ISV8Bal0MHE7qOc8INqCdRS2Ga2QTmdxGba5OiFZVY
cYz9gE8cr1lLIuim28jtKURIqgSlL+bFPfxLGF8k94KbS19rCRpOSQjsshtJwZXGF90Y
3WJg==
X-Gm-Message-State: AJIora/kV+C/KLt3UsymnCycIS/JWmMicJGgHPjoL2NFPcpxRTtUulsr
ITuDK4nNkEBNmO6cqEr8f49/Mmz25rBa7UNd8Ek=
X-Google-Smtp-Source: AGRyM1tKCkBCHzICsd3c3ldWzkJ5Ox04RlEl+r/L/NnXNUypJkvOsV0xBqKvF2sySiNnBJQKnfDYyBwC1HK/U4ASTxg=
X-Received: by 2002:a05:6512:2806:b0:489:e73c:f5e8 with SMTP id
cf6-20020a056512280600b00489e73cf5e8mr14651361lfb.581.1658155950913; Mon, 18
Jul 2022 07:52:30 -0700 (PDT)
MIME-Version: 1.0
Reply-To: mrsshawnancy@gmail.com
From: FROM NANCY SHAW
Date: Mon, 18 Jul 2022 16:52:07 +0200
Message-ID:
Subject: Dearest One Please Be Honest
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000006fbc0a05e41584e9"
Bcc: sales@nk.ca
X-Spam_score: 7.2
X-Spam_score_int: 72
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Good day, My name is Mrs. Nancy Shaw, I am 75 years old and
was diagnosed with cancer about four years ago, immediately after the death
of my husband. As I lay on my sick bed, I have chosen you for my giving Pledge
Donations of 5.5m US for Charities. I want you to help me in carrying out
my last wish on earth which will also be very profitable to yo [...]
Content analysis details: (7.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.48 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[infonsure33[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[infonsure33[at]gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_HK_NAME_FM_FROM No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Dearest One Please Be Honest
--0000000000006fbc0a05e41584e9
Content-Type: text/plain; charset="UTF-8"
Good day,
My name is Mrs. Nancy Shaw, I am 75 years old and was diagnosed with
cancer about four years ago, immediately after the death of my husband.
As I lay on my sick bed, I have chosen you for my giving Pledge Donations
of 5.5m US for Charities. I want you to help me in carrying out my last
wish on earth which will also be very profitable to you.
Please for further information contact me ASAP on my private Email:
mrsshawnancy@gmail.com
Regards,
Mrs. Nancy Shaw
--0000000000006fbc0a05e41584e9
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
:Helvetica,Arial,sans-serif">Good day,
lor:rgb(0,0,0);font-size:13px;font-family:Helvetica,Arial,sans-serif">
lear=3D"none" style=3D"color:rgb(0,0,0);font-size:13px;font-family:Helvetic=
a,Arial,sans-serif">
ily:Helvetica,Arial,sans-serif">My name is Mrs. Nancy=C2=A0 Shaw, I am 75 y=
ears old and was diagnosed with cancer about four years ago, immediately af=
ter the death of my husband.
0,0);font-size:13px;font-family:Helvetica,Arial,sans-serif">
ne" style=3D"color:rgb(0,0,0);font-size:13px;font-family:Helvetica,Arial,sa=
ns-serif">
ica,Arial,sans-serif">As I lay on my sick bed, I have chosen you for my giv=
ing Pledge Donations of 5.5m US for Charities. I want you to help me in car=
rying out my last wish on earth which will also be very profitable to you.<=
/span>
ly:Helvetica,Arial,sans-serif">
;font-size:13px;font-family:Helvetica,Arial,sans-serif">
r:rgb(0,0,0);font-size:13px;font-family:Helvetica,Arial,sans-serif">Please =
for further information contact me ASAP on my private Email:=C2=A0=C2=A0
pan>
o:mrsshawnancy@gmail.com" style=3D"color:rgb(151,155,167);font-size:13px;fo=
nt-family:Helvetica,Arial,sans-serif">mrsshawnancy@gmail.com
=3D"color:rgb(0,0,0);font-size:13px;font-family:Helvetica,Arial,sans-serif"=
>=C2=A0=C2=A0
13px;font-family:Helvetica,Arial,sans-serif">
lor:rgb(0,0,0);font-size:13px;font-family:Helvetica,Arial,sans-serif">
style=3D"color:rgb(0,0,0);font-size:13px;font-family:Helvetica,Arial,sans-=
serif">Regards,
e:13px;font-family:Helvetica,Arial,sans-serif">
,0);font-size:13px;font-family:Helvetica,Arial,sans-serif">Mrs. Nancy=C2=A0=
Shaw
--0000000000006fbc0a05e41584e9--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 18 Jul 2022 08:57:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oDSAi-0009Vo-BC
for dave@doctor.nl2k.ab.ca;
Mon, 18 Jul 2022 08:56:32 -0600
Resent-From: The Doctor
Resent-Date: Mon, 18 Jul 2022 08:56:32 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f48.google.com ([209.85.167.48]:45782)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oDS7D-00082g-IC
for sales@nk.ca;
Mon, 18 Jul 2022 08:53:00 -0600
Received: by mail-lf1-f48.google.com with SMTP id d12so19729164lfq.12
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=Nwiwx3iWV2W406jPPgWnadDK+6JC23u7Ske0EVk36gQ=;
b=VmWmnfXT2Jv1wNRv08lO/Y097tIzgD8pvCZTQjfhgGyQUtFzP3dvTLZ30jGkguMejl
FqSWiMENFASyg32qLfVEIKwjlmxM6HabnF5BWxicDFtqH7i8EKa8mzmx6lcTFtlD+e1n
z43i+q754Ee9tN9e88N4Yv9aTWwdseBPKLb9ZCJP8eNwwfyxwRvLkHSenlHrfEpSNtWE
0M3uebCj7tdvSkEwuv8zG5GHUfzb8L2XJuMeFDBuYcm/U9AgvxmBW2cp2cxXfo7cBhYb
Qfje+qOZrH6FvDYQD/4xINmsv3tp8U8H4U9W3cWi60PJQYypsmI282UId1yDPvtPzeeC
s2xw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=Nwiwx3iWV2W406jPPgWnadDK+6JC23u7Ske0EVk36gQ=;
b=Ji5BfhqZuuIM1STzT7ufreHBJbfoAsVN6xd69WHP2tGVXsfjoDv+5rWJHMiOdEoz9/
dJTshxv7hjXi5AoHg3PXgcxkM6g1ZK6VfO6BHkivym77ROSXpuvZ4D8Fd/TTUvW87QFb
XtCwkg4my/nBuI2nIvNyTQ65299vXlVmTCbqqCYOCx3+uTkVtMVWCM2hutmMidjRNfn5
Al7hANlZcXpJaGh5HkQrkHbT16ISV8Bal0MHE7qOc8INqCdRS2Ga2QTmdxGba5OiFZVY
cYz9gE8cr1lLIuim28jtKURIqgSlL+bFPfxLGF8k94KbS19rCRpOSQjsshtJwZXGF90Y
3WJg==
X-Gm-Message-State: AJIora/kV+C/KLt3UsymnCycIS/JWmMicJGgHPjoL2NFPcpxRTtUulsr
ITuDK4nNkEBNmO6cqEr8f49/Mmz25rBa7UNd8Ek=
X-Google-Smtp-Source: AGRyM1tKCkBCHzICsd3c3ldWzkJ5Ox04RlEl+r/L/NnXNUypJkvOsV0xBqKvF2sySiNnBJQKnfDYyBwC1HK/U4ASTxg=
X-Received: by 2002:a05:6512:2806:b0:489:e73c:f5e8 with SMTP id
cf6-20020a056512280600b00489e73cf5e8mr14651361lfb.581.1658155950913; Mon, 18
Jul 2022 07:52:30 -0700 (PDT)
MIME-Version: 1.0
Reply-To: mrsshawnancy@gmail.com
From: FROM NANCY SHAW
Date: Mon, 18 Jul 2022 16:52:07 +0200
Message-ID:
Subject: Dearest One Please Be Honest
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000006fbc0a05e41584e9"
Bcc: sales@nk.ca
X-Spam_score: 7.2
X-Spam_score_int: 72
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Good day, My name is Mrs. Nancy Shaw, I am 75 years old and
was diagnosed with cancer about four years ago, immediately after the death
of my husband. As I lay on my sick bed, I have chosen you for my giving Pledge
Donations of 5.5m US for Charities. I want you to help me in carrying out
my last wish on earth which will also be very profitable to yo [...]
Content analysis details: (7.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.48 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[infonsure33[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[infonsure33[at]gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_HK_NAME_FM_FROM No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Dearest One Please Be Honest
--0000000000006fbc0a05e41584e9
Content-Type: text/plain; charset="UTF-8"
Good day,
My name is Mrs. Nancy Shaw, I am 75 years old and was diagnosed with
cancer about four years ago, immediately after the death of my husband.
As I lay on my sick bed, I have chosen you for my giving Pledge Donations
of 5.5m US for Charities. I want you to help me in carrying out my last
wish on earth which will also be very profitable to you.
Please for further information contact me ASAP on my private Email:
mrsshawnancy@gmail.com
Regards,
Mrs. Nancy Shaw
--0000000000006fbc0a05e41584e9
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
:Helvetica,Arial,sans-serif">Good day,
lor:rgb(0,0,0);font-size:13px;font-family:Helvetica,Arial,sans-serif">
lear=3D"none" style=3D"color:rgb(0,0,0);font-size:13px;font-family:Helvetic=
a,Arial,sans-serif">
ily:Helvetica,Arial,sans-serif">My name is Mrs. Nancy=C2=A0 Shaw, I am 75 y=
ears old and was diagnosed with cancer about four years ago, immediately af=
ter the death of my husband.
0,0);font-size:13px;font-family:Helvetica,Arial,sans-serif">
ne" style=3D"color:rgb(0,0,0);font-size:13px;font-family:Helvetica,Arial,sa=
ns-serif">
ica,Arial,sans-serif">As I lay on my sick bed, I have chosen you for my giv=
ing Pledge Donations of 5.5m US for Charities. I want you to help me in car=
rying out my last wish on earth which will also be very profitable to you.<=
/span>
ly:Helvetica,Arial,sans-serif">
;font-size:13px;font-family:Helvetica,Arial,sans-serif">
r:rgb(0,0,0);font-size:13px;font-family:Helvetica,Arial,sans-serif">Please =
for further information contact me ASAP on my private Email:=C2=A0=C2=A0
pan>
o:mrsshawnancy@gmail.com" style=3D"color:rgb(151,155,167);font-size:13px;fo=
nt-family:Helvetica,Arial,sans-serif">mrsshawnancy@gmail.com
=3D"color:rgb(0,0,0);font-size:13px;font-family:Helvetica,Arial,sans-serif"=
>=C2=A0=C2=A0
13px;font-family:Helvetica,Arial,sans-serif">
lor:rgb(0,0,0);font-size:13px;font-family:Helvetica,Arial,sans-serif">
style=3D"color:rgb(0,0,0);font-size:13px;font-family:Helvetica,Arial,sans-=
serif">Regards,
e:13px;font-family:Helvetica,Arial,sans-serif">
,0);font-size:13px;font-family:Helvetica,Arial,sans-serif">Mrs. Nancy=C2=A0=
Shaw
--0000000000006fbc0a05e41584e9--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments