Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 28 Feb 2023 08:03:01 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1pX1VA-0008Ag-0W
for dave@doctor.nl2k.ab.ca;
Tue, 28 Feb 2023 08:02:48 -0700
Resent-From: The Doctor
Resent-Date: Tue, 28 Feb 2023 08:02:48 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f176.google.com ([209.85.128.176]:40813)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1pWvhq-000GNS-0a
for doctor@doctor.nl2k.ab.ca;
Tue, 28 Feb 2023 01:51:33 -0700
Received: by mail-yw1-f176.google.com with SMTP id 00721157ae682-53916ab0c6bso251052647b3.7
for; Tue, 28 Feb 2023 00:49:31 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=ai58wS/jZjPzl4HXvGIx1b94+4Wgl3f9Gtg7NuwFbF8=;
b=J36KgVXQ/C2Jqf2qMpE+c7DAwYbLCo/2Y00pk+iOceK5L0K0Fudz3Sq8auRyffeiSs
BK4xNl2sYcAVzIze7RSqLTGH68lRgIb5isctMKwovycmxSBFhcHEolKylVTl1hfdFLFP
cA3GTYJbGKT88Aozek8zzJWoT28r9j3+0FC0H1tdZzAGa8dMuHYjfehyypKX50EFcUxI
Wad+Fh6l1/THUaPC24X4xroKCNFrYk895OydnU5JohtWf39CPSkPmWbelRQWERs1Xq2V
VvXYaggpbBASeCC11ljzJL0qFzSxgVfD5mrkdEefhOg7akQVXgZpNxSW8YFPBizrSx6c
U5wA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=ai58wS/jZjPzl4HXvGIx1b94+4Wgl3f9Gtg7NuwFbF8=;
b=vLC9PzQ3Q/LyRMbXLGpdcAGPB02Btjdt+0AU9gSLMZ3djmBsCRJTTm8uedodndEFbw
54MRRULK6gg9Fm+ee5S1wUlBeztOYnrZMN77FsxBcF3qNtuH7f5RLP7ntC3DVa5POoCj
SyHUJvr40t3/nwNLCvP5W7Yx2F0FG5G805t3v/dkGgOz5+BG3jGZgKy6qdbCJcvKtkrL
L4RFV0Krt2zMSU9DqyWYSkJqu1JCfOytkyT77FWngrpSO2B689t1aZoc/3SZ6cwHtPmG
HPQnOlYCPQS9ZbEb6hL/gccq2SzILE2GFIP+VxFulHyoZQbfmVntXbj79B7V36iOZV1g
WBZw==
X-Gm-Message-State: AO0yUKUsbfhig2At2pC0gac9xdfffuBQYN/iXQ9FEqrxcK02N69P3Ybm
QOShQT4uKVjBXcrq6mWk9sBH4K8XiVGz/4yBz04=
X-Google-Smtp-Source: AK7set/rpN0ufxW6AbX8U3mHmLI8nopMffl5cPuCbJawkmw5NlZWA01uaThtKMFbh/iU4fOeK6/82/RFWoobTlresRc=
X-Received: by 2002:a81:ae0e:0:b0:534:7429:2eb4 with SMTP id
m14-20020a81ae0e000000b0053474292eb4mr1157071ywh.3.1677574165673; Tue, 28 Feb
2023 00:49:25 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a05:7110:65aa:b0:1bf:32b4:3309 with HTTP; Tue, 28 Feb 2023
00:49:24 -0800 (PST)
Reply-To: magrethmc68@gmail.com
From: Mrs Margreth Guimard
Date: Tue, 28 Feb 2023 08:49:24 +0000
Message-ID:
Subject: RELIEF FUND
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 10.4
X-Spam_score_int: 104
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: At the invitation of the International Labour Organization
(ILO) Workrelated injuries and diseases FOR COVID 19 & MONKEYPOX VIRUS Recovery,
PAYMENT APPROVAL FOR pending COVID 19 & MONKEYPOX VIRUS RELI [...]
Content analysis details: (10.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.176 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[magrethmc68(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[desouzajolymichaelweezy(at)gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.176 listed in wl.mailspike.net]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} RELIEF FUND
At the invitation of the International Labour Organization (ILO)
Workrelated injuries and diseases FOR COVID 19 & MONKEYPOX VIRUS
Recovery, PAYMENT APPROVAL FOR pending COVID 19 & MONKEYPOX VIRUS
RELIEF FUNDS
The World Bank & World Health Organization (WHO) in collaboration with
its Parent Organization United Nations Economic and Social Council
(ECO-SOC), has mandated this office to diligently disburse benefit
Funds mapped out to assist (you) persons affected by the economic
meltdown the virus has caused.
We are highly pleased to inform you that you have been chosen among
150 candidates to be benefited with the sum of $550,000.00 (Five
Hundred and Fifty Thousand Dollars). The World Bank in conjunction
with Union Togolaise Bank and International Monetary Fund (IMF) has
chosen to pay out all pending unpaid relief funds to 150 beneficiaries
around the world.
You are benefit of ($550,000.00) Five hundred and fifty thousand
United States dollars is ready for disbursement, payment method is via
Union Togolaise Bank (UTB) Visa Prepaid Cards account which will be
shipped to you via Courier, and you can only withdraw a maximum of
$3500 daily till the full funds are totally withdrawn.
Warm Regards,
Mrs Sonia Guimard
Foriegn Operational Manager
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 28 Feb 2023 08:03:01 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1pX1VA-0008Ag-0W
for dave@doctor.nl2k.ab.ca;
Tue, 28 Feb 2023 08:02:48 -0700
Resent-From: The Doctor
Resent-Date: Tue, 28 Feb 2023 08:02:48 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f176.google.com ([209.85.128.176]:40813)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1pWvhq-000GNS-0a
for doctor@doctor.nl2k.ab.ca;
Tue, 28 Feb 2023 01:51:33 -0700
Received: by mail-yw1-f176.google.com with SMTP id 00721157ae682-53916ab0c6bso251052647b3.7
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=ai58wS/jZjPzl4HXvGIx1b94+4Wgl3f9Gtg7NuwFbF8=;
b=J36KgVXQ/C2Jqf2qMpE+c7DAwYbLCo/2Y00pk+iOceK5L0K0Fudz3Sq8auRyffeiSs
BK4xNl2sYcAVzIze7RSqLTGH68lRgIb5isctMKwovycmxSBFhcHEolKylVTl1hfdFLFP
cA3GTYJbGKT88Aozek8zzJWoT28r9j3+0FC0H1tdZzAGa8dMuHYjfehyypKX50EFcUxI
Wad+Fh6l1/THUaPC24X4xroKCNFrYk895OydnU5JohtWf39CPSkPmWbelRQWERs1Xq2V
VvXYaggpbBASeCC11ljzJL0qFzSxgVfD5mrkdEefhOg7akQVXgZpNxSW8YFPBizrSx6c
U5wA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=ai58wS/jZjPzl4HXvGIx1b94+4Wgl3f9Gtg7NuwFbF8=;
b=vLC9PzQ3Q/LyRMbXLGpdcAGPB02Btjdt+0AU9gSLMZ3djmBsCRJTTm8uedodndEFbw
54MRRULK6gg9Fm+ee5S1wUlBeztOYnrZMN77FsxBcF3qNtuH7f5RLP7ntC3DVa5POoCj
SyHUJvr40t3/nwNLCvP5W7Yx2F0FG5G805t3v/dkGgOz5+BG3jGZgKy6qdbCJcvKtkrL
L4RFV0Krt2zMSU9DqyWYSkJqu1JCfOytkyT77FWngrpSO2B689t1aZoc/3SZ6cwHtPmG
HPQnOlYCPQS9ZbEb6hL/gccq2SzILE2GFIP+VxFulHyoZQbfmVntXbj79B7V36iOZV1g
WBZw==
X-Gm-Message-State: AO0yUKUsbfhig2At2pC0gac9xdfffuBQYN/iXQ9FEqrxcK02N69P3Ybm
QOShQT4uKVjBXcrq6mWk9sBH4K8XiVGz/4yBz04=
X-Google-Smtp-Source: AK7set/rpN0ufxW6AbX8U3mHmLI8nopMffl5cPuCbJawkmw5NlZWA01uaThtKMFbh/iU4fOeK6/82/RFWoobTlresRc=
X-Received: by 2002:a81:ae0e:0:b0:534:7429:2eb4 with SMTP id
m14-20020a81ae0e000000b0053474292eb4mr1157071ywh.3.1677574165673; Tue, 28 Feb
2023 00:49:25 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a05:7110:65aa:b0:1bf:32b4:3309 with HTTP; Tue, 28 Feb 2023
00:49:24 -0800 (PST)
Reply-To: magrethmc68@gmail.com
From: Mrs Margreth Guimard
Date: Tue, 28 Feb 2023 08:49:24 +0000
Message-ID:
Subject: RELIEF FUND
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 10.4
X-Spam_score_int: 104
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: At the invitation of the International Labour Organization
(ILO) Workrelated injuries and diseases FOR COVID 19 & MONKEYPOX VIRUS Recovery,
PAYMENT APPROVAL FOR pending COVID 19 & MONKEYPOX VIRUS RELI [...]
Content analysis details: (10.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.176 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[magrethmc68(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[desouzajolymichaelweezy(at)gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.176 listed in wl.mailspike.net]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} RELIEF FUND
At the invitation of the International Labour Organization (ILO)
Workrelated injuries and diseases FOR COVID 19 & MONKEYPOX VIRUS
Recovery, PAYMENT APPROVAL FOR pending COVID 19 & MONKEYPOX VIRUS
RELIEF FUNDS
The World Bank & World Health Organization (WHO) in collaboration with
its Parent Organization United Nations Economic and Social Council
(ECO-SOC), has mandated this office to diligently disburse benefit
Funds mapped out to assist (you) persons affected by the economic
meltdown the virus has caused.
We are highly pleased to inform you that you have been chosen among
150 candidates to be benefited with the sum of $550,000.00 (Five
Hundred and Fifty Thousand Dollars). The World Bank in conjunction
with Union Togolaise Bank and International Monetary Fund (IMF) has
chosen to pay out all pending unpaid relief funds to 150 beneficiaries
around the world.
You are benefit of ($550,000.00) Five hundred and fifty thousand
United States dollars is ready for disbursement, payment method is via
Union Togolaise Bank (UTB) Visa Prepaid Cards account which will be
shipped to you via Courier, and you can only withdraw a maximum of
$3500 daily till the full funds are totally withdrawn.
Warm Regards,
Mrs Sonia Guimard
Foriegn Operational Manager
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments