Charity spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 05 Sep 2022 10:21:08 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oVEn6-0009Kk-W9
for dave@doctor.nl2k.ab.ca;
Mon, 05 Sep 2022 10:17:40 -0600
Resent-From: The Doctor
Resent-Date: Mon, 5 Sep 2022 10:17:40 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj1-f51.google.com ([209.85.216.51]:37789)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oV4Y6-0009DA-Jd
for doctor@doctor.nl2k.ab.ca;
Sun, 04 Sep 2022 23:21:34 -0600
Received: by mail-pj1-f51.google.com with SMTP id o2-20020a17090a9f8200b0020025a22208so3880504pjp.2
for; Sun, 04 Sep 2022 22:21:13 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=Z5RZOcpHJme36rUACetTfHk3nZmkI6kP6XcG7wp7XkI=;
b=aplDkDCvZ//p1E6+Kongt/PEAow5plN8m2DWUUOxYOIc/XWWFDPat/FVMSj+npjn61
xXG0jj6Boo8In4CgeULxXWVLLFFPZTiEqmO0QIab54ly/zc0DBcJurMzs6e1oDQIEuJj
meZvKNdkSoXJ9664XpxiREJ8gCzUe5bVo0ZPOWpDNBiB757QR5J1hwUaM4h9jwu0GJcR
LA2p+xhQ8W3FDCEQ31bYLd0w8nfRrQaPQlFTOERgA61emo8ykPOqFAHn2lzJUFQiN72H
U5uQAbIi6gqChC8aGOxoGRlQ5vga6aYvv+PAQDBzqBTXYUGNR02igpEr95VAe95eQ9DX
Sk2w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=Z5RZOcpHJme36rUACetTfHk3nZmkI6kP6XcG7wp7XkI=;
b=M5ioggsAEed3MYmIWMCVZtTiJ4XAYOAvlnn2/G/wFLWrkQmMBMhN3X7RfHI85YRp8H
KCTtiqH8Jz1kx0tPXT2NProGlmyq5u6FILvIQ6FD2f+ORkAyci5ymTVRlA3oJzAORFMq
xSKg18xIfg1UWZsz68wmcSxNtEslqT3Suo8MZNr1bpZD5nNacFz/H6RKVJBPOCLWX9bp
G6k3TcnX0HpcKKah2knbta9xsgIG+DFS+ZKlQNHoZYy98UVydHt5yQtrL7y8/la+3SpH
ManduSDFGOYSy7q8dK7zFH3e/fpiKzdabwiKJHDmvB8y9zUdZZtsJBOBXAzqvjLNKnrI
lEvg==
X-Gm-Message-State: ACgBeo21lgEo+5BoW1EYUG0x80JapJPa2UvObbD7EbnuUoY9CHnnDyaE
a3fhr/48TbkSWsdRFlKM2ZK72a4hm8u+QUCLTLg=
X-Google-Smtp-Source: AA6agR6IWGIy+2be6+5DejMwaKJf8VHkobXnY/02zDjYPgOpOJIl6HTdi62ySSmUL7S88047WPJvpdeC/fQZKd4IBPM=
X-Received: by 2002:a17:902:bd84:b0:174:e086:c734 with SMTP id
q4-20020a170902bd8400b00174e086c734mr33968696pls.46.1662355267437; Sun, 04
Sep 2022 22:21:07 -0700 (PDT)
MIME-Version: 1.0
Reply-To: estherkatherine1961@gmail.com
From: Katherine Esther
Date: Mon, 5 Sep 2022 06:20:54 +0100
Message-ID:
Subject: Get Back To Me Please.
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000034cbf105e7e73f94"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 17.8
X-Spam_score_int: 178
X-Spam_bar: +++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, I WANT YOU TO UNDERSTAND MY POINT VERY WELL. I AM MRS.
ESTHER KATHERINE, I HAVE BEEN SUFFERING FROM OVARIAN CANCER AND THE DOCTOR
SAYS THAT I HAVE JUST A FEW DAYS TO LIVE. I AM FROM (PARIS) FRA [...]
Content analysis details: (17.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[estherkatherine1961[at]gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.216.51 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[pastorjohn19711[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[pastorjohn19711[at]gmail.com]
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.8 UPPERCASE_50_75 message body is 50-75% uppercase
1.0 REPTO_419_FRAUD_GM_LOOSE Ends-in-digits Reply-To is similar to
known advance fee fraud collector mailbox
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 XFER_LOTSA_MONEY Transfer a lot of money
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Get Back To Me Please.
--00000000000034cbf105e7e73f94
Content-Type: text/plain; charset="UTF-8"
Hello,
I WANT YOU TO UNDERSTAND MY POINT VERY WELL. I AM MRS. ESTHER KATHERINE, I
HAVE BEEN SUFFERING FROM OVARIAN CANCER AND THE DOCTOR SAYS THAT I HAVE
JUST A FEW DAYS TO LIVE. I AM FROM (PARIS) FRANCE, BUT I WAS IN THE UNITED
STATES OF AMERICA WITH MY LATE HUSBAND AS AN IMPORTATION AND EXPORTATION
BUSINESS FAMILY BEFORE HE DIED AND I STARTED THIS BAD ILLNESS. DUE TO THE
VIRUS ALL OVER THE WORLD AND NOW THAT I AM ABOUT TO END THE RACE LIKE THIS,
WITHOUT ANY FAMILY MEMBERS AND NO CHILDREN. MY LATE HUSBAND AND I HAD
MILLIONS OF DOLLARS IN BANK OF AMERICA WHICH I INSTRUCTED THE BANK TO SHARE
WITH THE ORPHANAGES HOMES IN THE USA IMMEDIATELY THIS SICKNESS STARTED. BUT
MY MIND IS NOT AT REST BECAUSE I AM WRITING THIS LETTER NOW WITH THE HELP
OF MY LAPTOP BESIDE MY SICKBED.WE ALSO HAVE $17.5 MILLION US DOLLARS AT
BARCLAYS BANK, I will also instruct the bank manager to transfer the fund
to you as a foreigner business partner that will apply to the bank, that
they should release the funds to you to start building orphanage homes and
help poor people with it. but you will assure me that you will take 20% of
the fund and use 80% to the orphanage homes in your country and other
countries for my heart to rest.Respond to me immediately for further
details.
Mrs. Esther Katherine.
--00000000000034cbf105e7e73f94
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--00000000000034cbf105e7e73f94--
I1.17KL0LD670In/aRank6.73Mln/awhoissourceRank28.2MAdv Disp Ads1Pub Disp Ads1PIN0Summary reportDiagnosisDensity00n/a
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 05 Sep 2022 10:21:08 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oVEn6-0009Kk-W9
for dave@doctor.nl2k.ab.ca;
Mon, 05 Sep 2022 10:17:40 -0600
Resent-From: The Doctor
Resent-Date: Mon, 5 Sep 2022 10:17:40 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj1-f51.google.com ([209.85.216.51]:37789)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oV4Y6-0009DA-Jd
for doctor@doctor.nl2k.ab.ca;
Sun, 04 Sep 2022 23:21:34 -0600
Received: by mail-pj1-f51.google.com with SMTP id o2-20020a17090a9f8200b0020025a22208so3880504pjp.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=Z5RZOcpHJme36rUACetTfHk3nZmkI6kP6XcG7wp7XkI=;
b=aplDkDCvZ//p1E6+Kongt/PEAow5plN8m2DWUUOxYOIc/XWWFDPat/FVMSj+npjn61
xXG0jj6Boo8In4CgeULxXWVLLFFPZTiEqmO0QIab54ly/zc0DBcJurMzs6e1oDQIEuJj
meZvKNdkSoXJ9664XpxiREJ8gCzUe5bVo0ZPOWpDNBiB757QR5J1hwUaM4h9jwu0GJcR
LA2p+xhQ8W3FDCEQ31bYLd0w8nfRrQaPQlFTOERgA61emo8ykPOqFAHn2lzJUFQiN72H
U5uQAbIi6gqChC8aGOxoGRlQ5vga6aYvv+PAQDBzqBTXYUGNR02igpEr95VAe95eQ9DX
Sk2w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=Z5RZOcpHJme36rUACetTfHk3nZmkI6kP6XcG7wp7XkI=;
b=M5ioggsAEed3MYmIWMCVZtTiJ4XAYOAvlnn2/G/wFLWrkQmMBMhN3X7RfHI85YRp8H
KCTtiqH8Jz1kx0tPXT2NProGlmyq5u6FILvIQ6FD2f+ORkAyci5ymTVRlA3oJzAORFMq
xSKg18xIfg1UWZsz68wmcSxNtEslqT3Suo8MZNr1bpZD5nNacFz/H6RKVJBPOCLWX9bp
G6k3TcnX0HpcKKah2knbta9xsgIG+DFS+ZKlQNHoZYy98UVydHt5yQtrL7y8/la+3SpH
ManduSDFGOYSy7q8dK7zFH3e/fpiKzdabwiKJHDmvB8y9zUdZZtsJBOBXAzqvjLNKnrI
lEvg==
X-Gm-Message-State: ACgBeo21lgEo+5BoW1EYUG0x80JapJPa2UvObbD7EbnuUoY9CHnnDyaE
a3fhr/48TbkSWsdRFlKM2ZK72a4hm8u+QUCLTLg=
X-Google-Smtp-Source: AA6agR6IWGIy+2be6+5DejMwaKJf8VHkobXnY/02zDjYPgOpOJIl6HTdi62ySSmUL7S88047WPJvpdeC/fQZKd4IBPM=
X-Received: by 2002:a17:902:bd84:b0:174:e086:c734 with SMTP id
q4-20020a170902bd8400b00174e086c734mr33968696pls.46.1662355267437; Sun, 04
Sep 2022 22:21:07 -0700 (PDT)
MIME-Version: 1.0
Reply-To: estherkatherine1961@gmail.com
From: Katherine Esther
Date: Mon, 5 Sep 2022 06:20:54 +0100
Message-ID:
Subject: Get Back To Me Please.
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000034cbf105e7e73f94"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 17.8
X-Spam_score_int: 178
X-Spam_bar: +++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, I WANT YOU TO UNDERSTAND MY POINT VERY WELL. I AM MRS.
ESTHER KATHERINE, I HAVE BEEN SUFFERING FROM OVARIAN CANCER AND THE DOCTOR
SAYS THAT I HAVE JUST A FEW DAYS TO LIVE. I AM FROM (PARIS) FRA [...]
Content analysis details: (17.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[estherkatherine1961[at]gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.216.51 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[pastorjohn19711[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[pastorjohn19711[at]gmail.com]
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.8 UPPERCASE_50_75 message body is 50-75% uppercase
1.0 REPTO_419_FRAUD_GM_LOOSE Ends-in-digits Reply-To is similar to
known advance fee fraud collector mailbox
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 XFER_LOTSA_MONEY Transfer a lot of money
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Get Back To Me Please.
--00000000000034cbf105e7e73f94
Content-Type: text/plain; charset="UTF-8"
Hello,
I WANT YOU TO UNDERSTAND MY POINT VERY WELL. I AM MRS. ESTHER KATHERINE, I
HAVE BEEN SUFFERING FROM OVARIAN CANCER AND THE DOCTOR SAYS THAT I HAVE
JUST A FEW DAYS TO LIVE. I AM FROM (PARIS) FRANCE, BUT I WAS IN THE UNITED
STATES OF AMERICA WITH MY LATE HUSBAND AS AN IMPORTATION AND EXPORTATION
BUSINESS FAMILY BEFORE HE DIED AND I STARTED THIS BAD ILLNESS. DUE TO THE
VIRUS ALL OVER THE WORLD AND NOW THAT I AM ABOUT TO END THE RACE LIKE THIS,
WITHOUT ANY FAMILY MEMBERS AND NO CHILDREN. MY LATE HUSBAND AND I HAD
MILLIONS OF DOLLARS IN BANK OF AMERICA WHICH I INSTRUCTED THE BANK TO SHARE
WITH THE ORPHANAGES HOMES IN THE USA IMMEDIATELY THIS SICKNESS STARTED. BUT
MY MIND IS NOT AT REST BECAUSE I AM WRITING THIS LETTER NOW WITH THE HELP
OF MY LAPTOP BESIDE MY SICKBED.WE ALSO HAVE $17.5 MILLION US DOLLARS AT
BARCLAYS BANK, I will also instruct the bank manager to transfer the fund
to you as a foreigner business partner that will apply to the bank, that
they should release the funds to you to start building orphanage homes and
help poor people with it. but you will assure me that you will take 20% of
the fund and use 80% to the orphanage homes in your country and other
countries for my heart to rest.Respond to me immediately for further
details.
Mrs. Esther Katherine.
--00000000000034cbf105e7e73f94
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hello,
I WANT YOU TO UNDER=
STAND MY POINT VERY WELL. I AM MRS. ESTHER KATHERINE, I HAVE BEEN SUFFERING=
FROM OVARIAN CANCER AND THE DOCTOR SAYS THAT I HAVE JUST A FEW DAYS TO LIV=
E. I AM FROM (PARIS) FRANCE, BUT I WAS IN THE UNITED STATES OF AMERICA WITH=
MY LATE HUSBAND AS AN IMPORTATION AND EXPORTATION BUSINESS FAMILY BEFORE H=
E DIED AND I STARTED THIS BAD ILLNESS. DUE TO THE VIRUS ALL OVER THE WORLD =
AND NOW THAT I AM ABOUT TO END THE RACE LIKE THIS, WITHOUT ANY FAMILY MEMBE=
RS AND NO CHILDREN. MY LATE HUSBAND AND I HAD MILLIONS OF DOLLARS IN BANK O=
F AMERICA WHICH I INSTRUCTED THE BANK TO SHARE WITH THE ORPHANAGES HOMES IN=
THE USA IMMEDIATELY THIS SICKNESS STARTED. BUT MY MIND IS NOT AT REST BECA=
USE I AM WRITING THIS LETTER NOW WITH THE HELP OF MY LAPTOP BESIDE MY SICKB=
ED.WE ALSO HAVE $17.5 MILLION US DOLLARS AT BARCLAYS BANK, I will also inst=
ruct the bank manager to transfer the fund to you as a foreigner business p=
artner that will apply to the bank, that they should release the funds to y=
ou to start building orphanage homes and help poor people with it. but you =
will assure me that you will take 20% of the fund and use 80% to the orphan=
age homes in your country and other countries for my heart to rest.Respond =
to me immediately for further details.
STAND MY POINT VERY WELL. I AM MRS. ESTHER KATHERINE, I HAVE BEEN SUFFERING=
FROM OVARIAN CANCER AND THE DOCTOR SAYS THAT I HAVE JUST A FEW DAYS TO LIV=
E. I AM FROM (PARIS) FRANCE, BUT I WAS IN THE UNITED STATES OF AMERICA WITH=
MY LATE HUSBAND AS AN IMPORTATION AND EXPORTATION BUSINESS FAMILY BEFORE H=
E DIED AND I STARTED THIS BAD ILLNESS. DUE TO THE VIRUS ALL OVER THE WORLD =
AND NOW THAT I AM ABOUT TO END THE RACE LIKE THIS, WITHOUT ANY FAMILY MEMBE=
RS AND NO CHILDREN. MY LATE HUSBAND AND I HAD MILLIONS OF DOLLARS IN BANK O=
F AMERICA WHICH I INSTRUCTED THE BANK TO SHARE WITH THE ORPHANAGES HOMES IN=
THE USA IMMEDIATELY THIS SICKNESS STARTED. BUT MY MIND IS NOT AT REST BECA=
USE I AM WRITING THIS LETTER NOW WITH THE HELP OF MY LAPTOP BESIDE MY SICKB=
ED.WE ALSO HAVE $17.5 MILLION US DOLLARS AT BARCLAYS BANK, I will also inst=
ruct the bank manager to transfer the fund to you as a foreigner business p=
artner that will apply to the bank, that they should release the funds to y=
ou to start building orphanage homes and help poor people with it. but you =
will assure me that you will take 20% of the fund and use 80% to the orphan=
age homes in your country and other countries for my heart to rest.Respond =
to me immediately for further details.
Mrs. Esther Katherine.
v>
v>
--00000000000034cbf105e7e73f94--
I1.17KL0LD670In/aRank6.73Mln/awhoissourceRank28.2MAdv Disp Ads1Pub Disp Ads1PIN0Summary reportDiagnosisDensity00n/a
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments