Nigerian Spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 28 Oct 2022 08:42:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1ooQXs-0005iN-D5

for dave@doctor.nl2k.ab.ca;

Fri, 28 Oct 2022 08:41:16 -0600

Resent-From: The Doctor

Resent-Date: Fri, 28 Oct 2022 08:41:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f45.google.com ([209.85.218.45]:42979)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1ooLnp-0001Ek-Cq

for doctor@doctor.nl2k.ab.ca;

Fri, 28 Oct 2022 03:37:38 -0600

Received: by mail-ej1-f45.google.com with SMTP id y14so11608533ejd.9

for ; Fri, 28 Oct 2022 02:34:41 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=content-transfer-encoding:mime-version:message-id:subject:to

:reply-to:from:date:from:to:cc:subject:date:message-id:reply-to;

bh=+ddDDTyYynbpTdMBqW70lM7hSldAXCkQwDzMu+JNgmA=;

b=CKMIe8vfVxlUNl4Qdayo6hAhHfILn1kkUYaUW24wLSr+l+cge1zDvIqjK5hc1u5dtz

qJZ3lbLe4trmkZ6SPDhRQJZfMukFdrvGxaeQBoidBdDs5j9DdnZe5laltw7u2TpdwwMC

NgPuBfyTcRZPUDklFY3PjNg7yKkWMphkeS9qtawbKApVdKSn5BSZY11uqy5kGJI4axgg

LxGtDJkl6C4K8Hk1XV+EHZLxj0sqopcgSvXLaME3vdNBSXPQ3e/j7DxjEK/VXk1qUGu9

JOfKkwurfJdueOEHV3ViSjuAhyCW1SExscdW/fn0lv4XfSg1607fxl2ym2htYe5zHb0S

6Adg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=content-transfer-encoding:mime-version:message-id:subject:to

:reply-to:from:date:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=+ddDDTyYynbpTdMBqW70lM7hSldAXCkQwDzMu+JNgmA=;

b=KON1SxSdZzP1STt1q9442qzL24A0ZOvVLoNNbfJSlQow8rG3zJOvOOvKo1o+f/98A+

hHVZNqqt77LfzJlgt5iD43FQJw0VaKPmvS7y6svAlh9cAktyK+mZuw6nvU9mLa/e6XuU

9uy+EIBSL5CZ4Z20n6pqxn9YuauitDhkObXJjvD6x3j90WsuRhxjIz+93FmSIzGW/n9D

kCcL/h8J32xEQQ4SCi8PPLvhG+6zIcQrYG9gOnCqoKQhcCjA/RZ0Wsve0c+FxQv3WFgX

AUa85gaws5bW0YrdY2s+ZHpeeC/tJtFCxCpaCcUtuZsQbf/DbYsy/Iu7thNwa6Gzt1iy

CAOw==

X-Gm-Message-State: ACrzQf1FDaM/BvtYyJMYX6KSENkvtzrbfZYMbHSimB0bbh3rD5t3NAbz

+3UlJPzBIY4Z5mujfQlzqkrUFwv3N5Cg5A==

X-Google-Smtp-Source: AMsMyM7ETxdovMkhYmkLeUFDzLQD4l0jqtm39YGNU8Wy1kAPoQKsbjR6dZLSz8JXrN4AFhlklQvKyQ==

X-Received: by 2002:a17:907:1c9e:b0:79e:6d97:5e0 with SMTP id nb30-20020a1709071c9e00b0079e6d9705e0mr30318306ejc.534.1666949674921;

Fri, 28 Oct 2022 02:34:34 -0700 (PDT)

Received: from [197.234.221.254] ([197.234.221.254])

by smtp.gmail.com with ESMTPSA id cd13-20020a170906b34d00b0077a1dd3e7b7sm1939998ejb.102.2022.10.28.02.34.31

for

(version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256);

Fri, 28 Oct 2022 02:34:34 -0700 (PDT)

Date: Fri, 28 Oct 2022 02:34:34 -0700 (PDT)

X-Google-Original-Date: 28 Oct 2022 10:33:44 -0700

From: kristengriest354@gmail.com

X-Google-Original-From:

Reply-To:

To: doctor@doctor.nl2k.ab.ca

Subject: I NEED TO HERE FROM YOU

Message-ID: <20221028102933.C58AC1D783FAAC6E@gmail.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 10.2

X-Spam_score_int: 102

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good day , Referring to the letter that I posted to your address

but did not hear from you and I decided to email you once again. we are pleased

to announce that you have been chosen at random to receive a compe [...]



Content analysis details: (10.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in

bl.spamcop.net

[Blocked - see ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.218.45 listed in wl.mailspike.net]

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[kristengriest354[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[kristengriest354[at]gmail.com]

0.3 HTML_FONT_FACE_BAD BODY: HTML font face is not a word

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.2 MIXED_ES Too many es are not es

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)

Subject: {SPAM?} I NEED TO HERE FROM YOU











Good day ,



Referring to the letter that I posted to your address but did not hear f=

rom you and I decided to email you once again. we are pleased to announce t=

hat you have been chosen at random to receive a compensation fund from Rock=

efeller Foundation.



Is an Online program held in the Month of July 2022, Where your email ad=

dress has been picked as one of the lucky direct award-winning allocations =

and has been approved by the Rockefeller Foundation,  The sole purpose=

of this fund grant is to reach out to impoverished families, The approval =

of the funds came in collaboration with the European Association for Public=

administration accreditation



Your money is now loaded into a  debit card, from our corresponding=

financial institution; National Bank of Greece, which you=

can use to withdraw cash from an automated teller machine anywhere in your=

country.



For more information and delivery of your debit card, kindly contact our=

regional Zonal coordinator through the following: 



Sir.JOHNSON PAUL.



E-mail:  johnson1950paul@gmail.com=


Regards.
Payments Committee
European Commission.<=

BR>
....................................................................=

=2E........................................................................=

=2E........................................................................=

=2E......................................................................
R>

Добрый день ,
P>



Ссылаясь на =

087;исьмо, котор=

;ое я отправи&#=

1083; на ваш адре =

89;, но не получl=

0;л от вас отве=

та, я=20

решил напис =

72;ть вам еще ра=

;з. мы рады соо=

бщить, что вы &=

#1073;ыли выбранm=

9; случайным о&=

#1073;разом=20

для получен =

80;я компенсац&=

#1080;онного фонk=

6;а от Фонда Ро=

кфеллера.





Является ли =

086;нлайн-прогр=

амма, провод=

080;мая в июле 2022 г=

ода, где ваш а&=

#1076;рес электрl=

6;нной=20

почты был вы=

073;ран в качест=

;ве одного из &=

#1091;дачных пряl=

4;ых распреде&#=

1083;ений, отмечk=

7;нных=20

наградами, и &#=

1073;ыл одобрен j=

0;ондом Рокфе&#=

1083;лера. Единсm=

0;венная цель &=

#1101;того грантk=

2; фонда -=20

обратиться =

82; обедневшие =

семьи, Утвер=

078;дение средс=

тв было полу=

095;ено в=20

сотрудничеl=

9;тве с Европе&=

#1081;ской ассоцl=

0;ацией аккре&#=

1076;итации госу=

;дарственно =

75;о=20

управления.

=





Ваши деньги =

090;еперь загру=

жены на дебе=

090;овую карту и=

;з нашего соо&#=

1090;ветствующе=

го=20

финансовогl=

6; учреждения; =

Национальнm=

9;й банк Греци&=

#1080;, который вы &#=

1084;ожете=20

использоваm=

0;ь для снятия =

наличных в б=

072;нкомате в лю=

;бой точке ва&#=

1096;ей страны.





Для получен =

80;я дополните&=

#1083;ьной инфорl=

4;ации и получ&=

#1077;ния вашей д =

77;бетовой кар&=

#1090;ы,=20

пожалуйста, =

089;вяжитесь с н=

;ашим регион=

072;льным зонал=

ьным коорди =

85;атором по=20

следующему =

72;дресу:



Сэр. ДЖОНСОН=

ПОЛ.



Электронна&#=

1103; почта:
l@gmail.com">johnson1950paul@gmail.com

С Ува=

жением.
Плат=

ежный комит =

77;т


Европейскаn=

3; комиссия.


ML>

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA