Beneficiary spam from GMail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 30 Aug 2022 08:29:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oT2EF-0004fl-Sl
for dave@doctor.nl2k.ab.ca;
Tue, 30 Aug 2022 08:28:35 -0600
Resent-From: The Doctor
Resent-Date: Tue, 30 Aug 2022 08:28:35 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj1-f53.google.com ([209.85.216.53]:53087)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oT21f-000JNy-6G
for doctor@doctor.nl2k.ab.ca;
Tue, 30 Aug 2022 08:15:38 -0600
Received: by mail-pj1-f53.google.com with SMTP id fa2so3587121pjb.2
for; Tue, 30 Aug 2022 07:15:13 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc;
bh=uV9kUx0ltp48jinvuc5kCp+WwAyt6Wrqd2CPlRmBmtY=;
b=ILNt4RmLFxlPPF2vJ8aYSQZAzk1W96ZzfdAqkPziTZC0KkaVwNFEJxSVwjY5aDOGCQ
C4X1DJMu0Z+TW/7jBg1laHNW4O/CrkICbBxthG6MMN2QsuEW/LLDii6T0q6OSvk0IfdF
5J18hH1maiuuEHo0xzJp/AjijQ1Bij0h0Lv43iRg3xp6im1j+L4Qyn0b6yE1Nql2sapU
CtgkRDNI3KLgLtJhVA2laZtEc/kpSvzacLMeFVo/sKTfZVbU24WJFVPF67J9H9R04R2J
WRjUIkTel3NOsDdVFjusJJkiMMv982qYiy+DkKshY0RSJG71ZljGRjShbyX4HV/KhIpi
jrAA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc;
bh=uV9kUx0ltp48jinvuc5kCp+WwAyt6Wrqd2CPlRmBmtY=;
b=gOxdoYXruU1O51nzJGKYYlfObTBj+UupGLibN11mdvUt0XoEtU2Abpr+vd/p7lghpZ
9bPBvqt32rPOcI+wYcUdK0nHprWX3sAMiwNJ1l0RxDa4JIZa3qNKH9vykzc1hcmqcqrS
4f3q8GKlbF1vzbEDRAGUaNTIaIgMJ2p9uYiig0Rpp98Irn6lzpnDDvBss0930lpGxD9v
CXJt0HDNHeU7nErxlEDbSZ4kBKZ0wOyXd5BzChFORiMRsFW0fiYyy1t+u6E0oHDhquy6
MS9JAVZ9hGmAizn2K2xh3NzrOjUR72v3fytGl3zsK7xINwVJMIJbZHdXxpIlfXYeHkIM
DPjQ==
X-Gm-Message-State: ACgBeo3173OVcN1Vf2YE5vSJ2UuOy47CBtoN4RTgp7cZfk6R4WUJrzvo
eDIyoEF4Zg6oVLMdPquIUgc9O1ai3+MxfwAY3ws=
X-Google-Smtp-Source: AA6agR7yZfbCb8c6e1zySd+hHgBI1RhYAoewdLDY0L/aaezdSvHI3XhU2/FKBfcjheuB8j2I8xuWTNf9zBG4Ycy5jok=
X-Received: by 2002:a17:90a:4496:b0:1fa:bbb5:7000 with SMTP id
t22-20020a17090a449600b001fabbb57000mr24014952pjg.218.1661868907953; Tue, 30
Aug 2022 07:15:07 -0700 (PDT)
MIME-Version: 1.0
Sender: sosaiddlord@gmail.com
Received: by 2002:ac4:8356:0:b0:569:4a45:a42c with HTTP; Tue, 30 Aug 2022
07:15:07 -0700 (PDT)
From: "Mrs Yu. Ging Yunnan"
Date: Tue, 30 Aug 2022 14:15:07 +0000
X-Google-Sender-Auth: VMkBC3vEZO9hbnlYAgGI76bXG7Y
Message-ID:
Subject: hello dear
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 6.8
X-Spam_score_int: 68
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: hello I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the
doctor said I will not survive it because all vaccines has been given to
me but to no avian, am a China woman but I base here in France because am
married here and I have no child for my late husband and now am a widow.
Content analysis details: (6.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.216.53 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[sosaiddlord[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 MILLION_USD BODY: Talks about millions of dollars
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} hello dear
hello
I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor said I
will not survive it because all vaccines has been given to me but to
no avian, am a China
woman but I base here in France because am married here and I have no
child for my late husband and now am a widow.
My reason of communicating you is that i have $10 .2million USD which
was deposited in BNP Paribas Bank here in France by my late husband
which am the next of
kin to and I want you to stand as the beneficiary for the claim now
that am about to end my race according to my doctor.
I will want you to use the fund to build an orphanage home in my name
there in your country, please kindly reply to this message urgently if
willing to handle this project.
God bless you and i wait your swift response asap.
Mrs Yu. Ging Yunnan.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 30 Aug 2022 08:29:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oT2EF-0004fl-Sl
for dave@doctor.nl2k.ab.ca;
Tue, 30 Aug 2022 08:28:35 -0600
Resent-From: The Doctor
Resent-Date: Tue, 30 Aug 2022 08:28:35 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj1-f53.google.com ([209.85.216.53]:53087)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oT21f-000JNy-6G
for doctor@doctor.nl2k.ab.ca;
Tue, 30 Aug 2022 08:15:38 -0600
Received: by mail-pj1-f53.google.com with SMTP id fa2so3587121pjb.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc;
bh=uV9kUx0ltp48jinvuc5kCp+WwAyt6Wrqd2CPlRmBmtY=;
b=ILNt4RmLFxlPPF2vJ8aYSQZAzk1W96ZzfdAqkPziTZC0KkaVwNFEJxSVwjY5aDOGCQ
C4X1DJMu0Z+TW/7jBg1laHNW4O/CrkICbBxthG6MMN2QsuEW/LLDii6T0q6OSvk0IfdF
5J18hH1maiuuEHo0xzJp/AjijQ1Bij0h0Lv43iRg3xp6im1j+L4Qyn0b6yE1Nql2sapU
CtgkRDNI3KLgLtJhVA2laZtEc/kpSvzacLMeFVo/sKTfZVbU24WJFVPF67J9H9R04R2J
WRjUIkTel3NOsDdVFjusJJkiMMv982qYiy+DkKshY0RSJG71ZljGRjShbyX4HV/KhIpi
jrAA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc;
bh=uV9kUx0ltp48jinvuc5kCp+WwAyt6Wrqd2CPlRmBmtY=;
b=gOxdoYXruU1O51nzJGKYYlfObTBj+UupGLibN11mdvUt0XoEtU2Abpr+vd/p7lghpZ
9bPBvqt32rPOcI+wYcUdK0nHprWX3sAMiwNJ1l0RxDa4JIZa3qNKH9vykzc1hcmqcqrS
4f3q8GKlbF1vzbEDRAGUaNTIaIgMJ2p9uYiig0Rpp98Irn6lzpnDDvBss0930lpGxD9v
CXJt0HDNHeU7nErxlEDbSZ4kBKZ0wOyXd5BzChFORiMRsFW0fiYyy1t+u6E0oHDhquy6
MS9JAVZ9hGmAizn2K2xh3NzrOjUR72v3fytGl3zsK7xINwVJMIJbZHdXxpIlfXYeHkIM
DPjQ==
X-Gm-Message-State: ACgBeo3173OVcN1Vf2YE5vSJ2UuOy47CBtoN4RTgp7cZfk6R4WUJrzvo
eDIyoEF4Zg6oVLMdPquIUgc9O1ai3+MxfwAY3ws=
X-Google-Smtp-Source: AA6agR7yZfbCb8c6e1zySd+hHgBI1RhYAoewdLDY0L/aaezdSvHI3XhU2/FKBfcjheuB8j2I8xuWTNf9zBG4Ycy5jok=
X-Received: by 2002:a17:90a:4496:b0:1fa:bbb5:7000 with SMTP id
t22-20020a17090a449600b001fabbb57000mr24014952pjg.218.1661868907953; Tue, 30
Aug 2022 07:15:07 -0700 (PDT)
MIME-Version: 1.0
Sender: sosaiddlord@gmail.com
Received: by 2002:ac4:8356:0:b0:569:4a45:a42c with HTTP; Tue, 30 Aug 2022
07:15:07 -0700 (PDT)
From: "Mrs Yu. Ging Yunnan"
Date: Tue, 30 Aug 2022 14:15:07 +0000
X-Google-Sender-Auth: VMkBC3vEZO9hbnlYAgGI76bXG7Y
Message-ID:
Subject: hello dear
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 6.8
X-Spam_score_int: 68
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: hello I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the
doctor said I will not survive it because all vaccines has been given to
me but to no avian, am a China woman but I base here in France because am
married here and I have no child for my late husband and now am a widow.
Content analysis details: (6.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.216.53 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[sosaiddlord[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 MILLION_USD BODY: Talks about millions of dollars
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} hello dear
hello
I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor said I
will not survive it because all vaccines has been given to me but to
no avian, am a China
woman but I base here in France because am married here and I have no
child for my late husband and now am a widow.
My reason of communicating you is that i have $10 .2million USD which
was deposited in BNP Paribas Bank here in France by my late husband
which am the next of
kin to and I want you to stand as the beneficiary for the claim now
that am about to end my race according to my doctor.
I will want you to use the fund to build an orphanage home in my name
there in your country, please kindly reply to this message urgently if
willing to handle this project.
God bless you and i wait your swift response asap.
Mrs Yu. Ging Yunnan.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments