Nigerian Spam from Gmail
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 28 Oct 2022 08:42:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1ooQXs-0005iN-D5
for dave@doctor.nl2k.ab.ca;
Fri, 28 Oct 2022 08:41:16 -0600
Resent-From: The Doctor
Resent-Date: Fri, 28 Oct 2022 08:41:16 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f45.google.com ([209.85.218.45]:42979)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1ooLnp-0001Ek-Cq
for doctor@doctor.nl2k.ab.ca;
Fri, 28 Oct 2022 03:37:38 -0600
Received: by mail-ej1-f45.google.com with SMTP id y14so11608533ejd.9
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=content-transfer-encoding:mime-version:message-id:subject:to
:reply-to:from:date:from:to:cc:subject:date:message-id:reply-to;
bh=+ddDDTyYynbpTdMBqW70lM7hSldAXCkQwDzMu+JNgmA=;
b=CKMIe8vfVxlUNl4Qdayo6hAhHfILn1kkUYaUW24wLSr+l+cge1zDvIqjK5hc1u5dtz
qJZ3lbLe4trmkZ6SPDhRQJZfMukFdrvGxaeQBoidBdDs5j9DdnZe5laltw7u2TpdwwMC
NgPuBfyTcRZPUDklFY3PjNg7yKkWMphkeS9qtawbKApVdKSn5BSZY11uqy5kGJI4axgg
LxGtDJkl6C4K8Hk1XV+EHZLxj0sqopcgSvXLaME3vdNBSXPQ3e/j7DxjEK/VXk1qUGu9
JOfKkwurfJdueOEHV3ViSjuAhyCW1SExscdW/fn0lv4XfSg1607fxl2ym2htYe5zHb0S
6Adg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=content-transfer-encoding:mime-version:message-id:subject:to
:reply-to:from:date:x-gm-message-state:from:to:cc:subject:date
:message-id:reply-to;
bh=+ddDDTyYynbpTdMBqW70lM7hSldAXCkQwDzMu+JNgmA=;
b=KON1SxSdZzP1STt1q9442qzL24A0ZOvVLoNNbfJSlQow8rG3zJOvOOvKo1o+f/98A+
hHVZNqqt77LfzJlgt5iD43FQJw0VaKPmvS7y6svAlh9cAktyK+mZuw6nvU9mLa/e6XuU
9uy+EIBSL5CZ4Z20n6pqxn9YuauitDhkObXJjvD6x3j90WsuRhxjIz+93FmSIzGW/n9D
kCcL/h8J32xEQQ4SCi8PPLvhG+6zIcQrYG9gOnCqoKQhcCjA/RZ0Wsve0c+FxQv3WFgX
AUa85gaws5bW0YrdY2s+ZHpeeC/tJtFCxCpaCcUtuZsQbf/DbYsy/Iu7thNwa6Gzt1iy
CAOw==
X-Gm-Message-State: ACrzQf1FDaM/BvtYyJMYX6KSENkvtzrbfZYMbHSimB0bbh3rD5t3NAbz
+3UlJPzBIY4Z5mujfQlzqkrUFwv3N5Cg5A==
X-Google-Smtp-Source: AMsMyM7ETxdovMkhYmkLeUFDzLQD4l0jqtm39YGNU8Wy1kAPoQKsbjR6dZLSz8JXrN4AFhlklQvKyQ==
X-Received: by 2002:a17:907:1c9e:b0:79e:6d97:5e0 with SMTP id nb30-20020a1709071c9e00b0079e6d9705e0mr30318306ejc.534.1666949674921;
Fri, 28 Oct 2022 02:34:34 -0700 (PDT)
Received: from [197.234.221.254] ([197.234.221.254])
by smtp.gmail.com with ESMTPSA id cd13-20020a170906b34d00b0077a1dd3e7b7sm1939998ejb.102.2022.10.28.02.34.31
for
(version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256);
Fri, 28 Oct 2022 02:34:34 -0700 (PDT)
Date: Fri, 28 Oct 2022 02:34:34 -0700 (PDT)
X-Google-Original-Date: 28 Oct 2022 10:33:44 -0700
From: kristengriest354@gmail.com
X-Google-Original-From:
Reply-To:
To: doctor@doctor.nl2k.ab.ca
Subject: I NEED TO HERE FROM YOU
Message-ID: <20221028102933.C58AC1D783FAAC6E@gmail.com>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-Spam_score: 10.2
X-Spam_score_int: 102
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Good day , Referring to the letter that I posted to your address
but did not hear from you and I decided to email you once again. we are pleased
to announce that you have been chosen at random to receive a compe [...]
Content analysis details: (10.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.45 listed in wl.mailspike.net]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[kristengriest354[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[kristengriest354[at]gmail.com]
0.3 HTML_FONT_FACE_BAD BODY: HTML font face is not a word
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
2.2 MIXED_ES Too many es are not es
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
Subject: {SPAM?} I NEED TO HERE FROM YOU
Good day ,
Referring to the letter that I posted to your address but did not hear f=
rom you and I decided to email you once again. we are pleased to announce t=
hat you have been chosen at random to receive a compensation fund from Rock=
efeller Foundation.
Is an Online program held in the Month of July 2022, Where your email ad=
dress has been picked as one of the lucky direct award-winning allocations =
and has been approved by the Rockefeller Foundation, The sole purpose=
of this fund grant is to reach out to impoverished families, The approval =
of the funds came in collaboration with the European Association for Public=
administration accreditation
Your money is now loaded into a debit card, from our corresponding=
financial institution; National Bank of Greece, which you=
can use to withdraw cash from an automated teller machine anywhere in your=
country.
For more information and delivery of your debit card, kindly contact our=
regional Zonal coordinator through the following:
Sir.JOHNSON PAUL.
E-mail: johnson1950paul@gmail.com=
Regards.
Payments Committee
European Commission.<=
BR>
....................................................................=
=2E........................................................................=
=2E........................................................................=
=2E......................................................................
R>
Добрый день ,=
P>
Ссылаясь на =
087;исьмо, котор=
;ое я отправи=
1083; на ваш адре
=
89;, но не получl=
0;л от вас отве=
та, я=20
решил напис
=
72;ть вам еще ра=
;з. мы рады соо=
бщить, что вы &=
#1073;ыли выбранm=
9; случайным о&=
#1073;разом=20
для получен
=
80;я компенсац&=
#1080;онного фонk=
6;а от Фонда Ро=
кфеллера.
Является ли =
086;нлайн-прогр=
амма, провод=
080;мая в июле 2022 г=
ода, где ваш а&=
#1076;рес электрl=
6;нной=20
почты был вы=
073;ран в качест=
;ве одного из &=
#1091;дачных пряl=
4;ых распреде=
1083;ений, отмечk=
7;нных=20
наградами, и =
1073;ыл одобрен j=
0;ондом Рокфе=
1083;лера. Единсm=
0;венная цель &=
#1101;того грантk=
2; фонда -=20
обратиться
=
82; обедневшие =
семьи, Утвер=
078;дение средс=
тв было полу=
095;ено в=20
сотрудничеl=
9;тве с Европе&=
#1081;ской ассоцl=
0;ацией аккре=
1076;итации госу=
;дарственно
=
75;о=20
управления.
Ваши деньги =
090;еперь загру=
жены на дебе=
090;овую карту и=
;з нашего соо=
1090;ветствующе=
го=20
финансовогl=
6; учреждения; =
Национальнm=
9;й банк Греци&=
#1080;, который вы =
1084;ожете=20
использоваm=
0;ь для снятия =
наличных в б=
072;нкомате в лю=
;бой точке ва=
1096;ей страны.
Для получен
=
80;я дополните&=
#1083;ьной инфорl=
4;ации и получ&=
#1077;ния вашей д
=
77;бетовой кар&=
#1090;ы,=20
пожалуйста, =
089;вяжитесь с н=
;ашим регион=
072;льным зонал=
ьным коорди
=
85;атором по=20
следующему
=
72;дресу:
Сэр. ДЖОНСОН=
ПОЛ.
Электронна=
1103; почта:
l@gmail.com">johnson1950paul@gmail.com
С Ува=
жением.
Плат=
ежный комит
=
77;т
Европейскаn=
3; комиссия.
ML>
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments