Nigerian Spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 25 Nov 2022 07:23:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oyZal-000KQG-TH
for dave@doctor.nl2k.ab.ca;
Fri, 25 Nov 2022 07:22:11 -0700
Resent-From: The Doctor
Resent-Date: Fri, 25 Nov 2022 07:22:11 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f51.google.com ([209.85.218.51]:44989)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oyX7t-000Irs-G7
for doctor@doctor.nl2k.ab.ca;
Fri, 25 Nov 2022 04:44:17 -0700
Received: by mail-ej1-f51.google.com with SMTP id fy37so9693829ejc.11
for; Fri, 25 Nov 2022 03:41:44 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:from:to:cc:subject:date:message-id:reply-to;
bh=sVXqsqXY0oWdwgBd9DtJK92ZXOByAe/ooAc5IdvxK+M=;
b=ouC7lii4QWAN2G5rsgdW1vwaX+RcYoxMnODhSUxZ0TbKK8+2L+EXyNtuz4FGd55muF
JUl+7YlkBKFv8shRM+d9ceaFmeH2pzQND+sKYWza3WH3uEGTynnYZNp8RiU+BLsFStoc
Cc/7aR8aVY5sX/k/u/STFpBbW/X1Tof1jcIFX1/9rsEuVfb7/+Dsv8kLHq887jnNhqc6
Y8kQHH0bVB5Gjv0AF1GWhiHbkhDAJvmm5F7TYxQUSs0Yaw2i0K0qTVPL2o5UU3Eha+qT
wsu3C+bhR+o8I7fE0pV+T7KTPBCIA56klX7qpnEaVSHTC1NtNLX16eQUMsoyGnvikXTo
7NOA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=sVXqsqXY0oWdwgBd9DtJK92ZXOByAe/ooAc5IdvxK+M=;
b=3W0Khs6Xi5K85fu7rnfxVYRl3NB9BNvw6wGJFB/3UuvZByTp+hklIp7tEZ0ZOeQcLy
cUol0Pe2kzrWwQVk1H0m2jRu+sR9o6t3ePXQ3cwb94nQH8USBbpgjRf/G4mIWwJdT+VZ
5+PDney/Wos/YvEne8kVzFYpE9Hy/Bb9XbvnztVPAFPBanqtI8y5JkueVuqw81KYhD2U
dxr3BwG+6lV8Q48yrISOiGRU9FmKyiHrOX61J0ZBCHI6KS5m6ieGgfVh4wIgxGq2Graz
l4j0mnx5iaoHnpucl1hx0TXkskadPvAMnK98NzVCAYVaRkKC3wIafNbK5hFl+JfyxZaO
eUxA==
X-Gm-Message-State: ANoB5plRj5k+85hfrY92rknGcvjnXGCS3H0UX4JzW5qd6c1NxYpwCiDq
vpm2D+Sax+JRO4FPxaifyqieOmB6RV8/7mIbFCk=
X-Google-Smtp-Source: AA0mqf6OUgWk3klTD6zTi8exr3Zpqrov9eADvi5G5Lc6nLnxxdBXHRB2CybujYQGkqYCqLkEYC4Ehhr4Yq/fZyBliNQ=
X-Received: by 2002:a17:906:bc86:b0:78d:8580:8e07 with SMTP id
lv6-20020a170906bc8600b0078d85808e07mr31110452ejb.131.1669376497892; Fri, 25
Nov 2022 03:41:37 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a50:cb8d:0:b0:452:a97c:ffcf with HTTP; Fri, 25 Nov 2022
03:41:36 -0800 (PST)
Reply-To: mrsroseraya90@gmail.com
From: "I am Mrs. Rose Raya"
Date: Fri, 25 Nov 2022 03:41:36 -0800
Message-ID:
Subject: Dear Trusting Friend in God,
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 18.6
X-Spam_score_int: 186
X-Spam_bar: ++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Trusting Friend in God, I am Mrs. Rose Raya, 73 years,
from USA, I am childless and I am suffering from a pro-long cancer ill health
and from all indication my condition is critical, my doctors have confirmed
that I may not [...]
Content analysis details: (18.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mrsroseraya90[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[mrsamsana[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.218.51 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.51 listed in wl.mailspike.net]
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
1.5 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
1.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
3.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
Subject: {SPAM?} Dear Trusting Friend in God,
Dear Trusting Friend in God,
I am Mrs. Rose Raya, 73 years, from USA, I am childless and I am
suffering from a pro-long cancer ill health and from all indication my
condition is critical, my doctors have confirmed that I may not live
beyond two months from now for the reason that tumor has reached a
critical stage which has defiled all forms of medical treatment. Since
my days are numbered, I=E2=80=99ve decided willingly to fulfill my long-tim=
e
promise to donate the sum Five Million Five Hundred And Twenty-Five
Thousand United States Dollars US$5,525,000) remaining in my foreign
bank account over 9 years due to my health problem. This fund was
obtained by me when I was dealing on Gold.
Please get back to me if you can handle the project for more details.
I am Mrs. Rose Raya
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 25 Nov 2022 07:23:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oyZal-000KQG-TH
for dave@doctor.nl2k.ab.ca;
Fri, 25 Nov 2022 07:22:11 -0700
Resent-From: The Doctor
Resent-Date: Fri, 25 Nov 2022 07:22:11 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f51.google.com ([209.85.218.51]:44989)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oyX7t-000Irs-G7
for doctor@doctor.nl2k.ab.ca;
Fri, 25 Nov 2022 04:44:17 -0700
Received: by mail-ej1-f51.google.com with SMTP id fy37so9693829ejc.11
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:from:to:cc:subject:date:message-id:reply-to;
bh=sVXqsqXY0oWdwgBd9DtJK92ZXOByAe/ooAc5IdvxK+M=;
b=ouC7lii4QWAN2G5rsgdW1vwaX+RcYoxMnODhSUxZ0TbKK8+2L+EXyNtuz4FGd55muF
JUl+7YlkBKFv8shRM+d9ceaFmeH2pzQND+sKYWza3WH3uEGTynnYZNp8RiU+BLsFStoc
Cc/7aR8aVY5sX/k/u/STFpBbW/X1Tof1jcIFX1/9rsEuVfb7/+Dsv8kLHq887jnNhqc6
Y8kQHH0bVB5Gjv0AF1GWhiHbkhDAJvmm5F7TYxQUSs0Yaw2i0K0qTVPL2o5UU3Eha+qT
wsu3C+bhR+o8I7fE0pV+T7KTPBCIA56klX7qpnEaVSHTC1NtNLX16eQUMsoyGnvikXTo
7NOA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=sVXqsqXY0oWdwgBd9DtJK92ZXOByAe/ooAc5IdvxK+M=;
b=3W0Khs6Xi5K85fu7rnfxVYRl3NB9BNvw6wGJFB/3UuvZByTp+hklIp7tEZ0ZOeQcLy
cUol0Pe2kzrWwQVk1H0m2jRu+sR9o6t3ePXQ3cwb94nQH8USBbpgjRf/G4mIWwJdT+VZ
5+PDney/Wos/YvEne8kVzFYpE9Hy/Bb9XbvnztVPAFPBanqtI8y5JkueVuqw81KYhD2U
dxr3BwG+6lV8Q48yrISOiGRU9FmKyiHrOX61J0ZBCHI6KS5m6ieGgfVh4wIgxGq2Graz
l4j0mnx5iaoHnpucl1hx0TXkskadPvAMnK98NzVCAYVaRkKC3wIafNbK5hFl+JfyxZaO
eUxA==
X-Gm-Message-State: ANoB5plRj5k+85hfrY92rknGcvjnXGCS3H0UX4JzW5qd6c1NxYpwCiDq
vpm2D+Sax+JRO4FPxaifyqieOmB6RV8/7mIbFCk=
X-Google-Smtp-Source: AA0mqf6OUgWk3klTD6zTi8exr3Zpqrov9eADvi5G5Lc6nLnxxdBXHRB2CybujYQGkqYCqLkEYC4Ehhr4Yq/fZyBliNQ=
X-Received: by 2002:a17:906:bc86:b0:78d:8580:8e07 with SMTP id
lv6-20020a170906bc8600b0078d85808e07mr31110452ejb.131.1669376497892; Fri, 25
Nov 2022 03:41:37 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a50:cb8d:0:b0:452:a97c:ffcf with HTTP; Fri, 25 Nov 2022
03:41:36 -0800 (PST)
Reply-To: mrsroseraya90@gmail.com
From: "I am Mrs. Rose Raya"
Date: Fri, 25 Nov 2022 03:41:36 -0800
Message-ID:
Subject: Dear Trusting Friend in God,
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 18.6
X-Spam_score_int: 186
X-Spam_bar: ++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Trusting Friend in God, I am Mrs. Rose Raya, 73 years,
from USA, I am childless and I am suffering from a pro-long cancer ill health
and from all indication my condition is critical, my doctors have confirmed
that I may not [...]
Content analysis details: (18.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mrsroseraya90[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[mrsamsana[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.218.51 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.51 listed in wl.mailspike.net]
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
1.5 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
1.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
3.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
Subject: {SPAM?} Dear Trusting Friend in God,
Dear Trusting Friend in God,
I am Mrs. Rose Raya, 73 years, from USA, I am childless and I am
suffering from a pro-long cancer ill health and from all indication my
condition is critical, my doctors have confirmed that I may not live
beyond two months from now for the reason that tumor has reached a
critical stage which has defiled all forms of medical treatment. Since
my days are numbered, I=E2=80=99ve decided willingly to fulfill my long-tim=
e
promise to donate the sum Five Million Five Hundred And Twenty-Five
Thousand United States Dollars US$5,525,000) remaining in my foreign
bank account over 9 years due to my health problem. This fund was
obtained by me when I was dealing on Gold.
Please get back to me if you can handle the project for more details.
I am Mrs. Rose Raya
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments