nigerian spam from amazon
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 28 Mar 2023 08:06:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1ph9xW-000JBE-0r
for dave@doctor.nl2k.ab.ca;
Tue, 28 Mar 2023 08:05:58 -0600
Resent-From: The Doctor
Resent-Date: Tue, 28 Mar 2023 08:05:58 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from ec2-54-229-85-128.eu-west-1.compute.amazonaws.com ([54.229.85.128]:53413 helo=VPC-GT2.GT.CLOUD)
by doctor.nl2k.ab.ca with esmtp (Exim 4.96)
(envelope-from)
id 1ph9rj-000I4A-2t;
Tue, 28 Mar 2023 08:00:02 -0600
Received: from [85.217.144.227] ([85.217.144.227]) by VPC-GT2.GT.CLOUD with Microsoft SMTPSVC(8.5.9600.16384);
Tue, 28 Mar 2023 13:57:49 +0000
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Re: Greetings
To: Recipients
From: "Engr. Gordon Hirschy"
Date: Tue, 28 Mar 2023 06:57:48 -0700
Reply-To: hirschy.e@yahoo.com
Message-ID:
X-OriginalArrivalTime: 28 Mar 2023 13:57:49.0249 (UTC) FILETIME=[48182B10:01D9617D]
X-Spam_score: 24.9
X-Spam_score_int: 249
X-Spam_bar: ++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings, My name is Engr. Gordon Hirschy, I am a citizen
of U.S.A, a business man specialized in Real Estate; but now I am critically
sick with esophageal cancer which has damaged almost all the cells in my
bo [...]
Content analysis details: (24.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[54.229.85.128 listed in bl.score.senderscore.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[54.229.85.128 listed in bl.score.senderscore.com]
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[85.217.144.227 listed in zen.spamhaus.org]
2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[85.217.144.227 listed in zen.spamhaus.org]
1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[54.229.85.128 listed in bb.barracudacentral.org]
1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[engr.gordon.hirschy(at)yandex.com]
0.9 URG_BIZ BODY: Contains urgent matter
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.4 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 AC_FROM_MANY_DOTS Multiple periods in From user name
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.0 TVD_PH_BODY_META No description available.
0.0 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS
1.0 XFER_LOTSA_MONEY Transfer a lot of money
0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Re: Greetings
Greetings,
My name is Engr. Gordon Hirschy, I am a citizen of U.S.A, a business
man specialized in Real Estate; but now I am critically sick with
esophageal cancer which has damaged almost all the cells in my body
system.
>From all medical indications my condition has really deteriorated and
it=E2=80=99s pretty obvious that I may not live for more than six months
because of the rapid growth stage and the excruciating pain that
accrues to it.
My wife was killed during the Gulf War, and our long years of marriage
were not blessed with children. My wife was very wealthy, after her
death I inherited all her business and funds. My doctor has diagnosed
and told me privately that I may not last for more than six months,
based on this I have taken the decision to share part of my funds and
wealth in contribution to the development of the Church and society
with major focus on the poor and needy.
I am willing to donate the sum of $10,000,000USD to you for the work
in developing the Church and to help the needy, and less privileged
among your congregations/society.
As soon as the fund is transferred to your own bank account, you shall
take 30% of the total amount transferred to your account as my
representative and the manager of the fund and use 70% for the
assignment.
In my next message, I will send you my identification and picture for
your confidence.
Please reply immediately with your full data if you agree my proposal
so that we can arrange for the transfer of the fund to your own bank
account before anything happens to me, because I will undergo surgery
by next week, and I do not know what will be the result of the surgery
as doctor has told me already that I may not survive.
May the grace and blessings of God be and remain with you.
I am waiting for your urgent response.
Yours Sincerely,
Engr. Gordon Hirschy
Reply to my private email: hirschy.e@yahoo.com
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 28 Mar 2023 08:06:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1ph9xW-000JBE-0r
for dave@doctor.nl2k.ab.ca;
Tue, 28 Mar 2023 08:05:58 -0600
Resent-From: The Doctor
Resent-Date: Tue, 28 Mar 2023 08:05:58 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from ec2-54-229-85-128.eu-west-1.compute.amazonaws.com ([54.229.85.128]:53413 helo=VPC-GT2.GT.CLOUD)
by doctor.nl2k.ab.ca with esmtp (Exim 4.96)
(envelope-from
id 1ph9rj-000I4A-2t;
Tue, 28 Mar 2023 08:00:02 -0600
Received: from [85.217.144.227] ([85.217.144.227]) by VPC-GT2.GT.CLOUD with Microsoft SMTPSVC(8.5.9600.16384);
Tue, 28 Mar 2023 13:57:49 +0000
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Re: Greetings
To: Recipients
From: "Engr. Gordon Hirschy"
Date: Tue, 28 Mar 2023 06:57:48 -0700
Reply-To: hirschy.e@yahoo.com
Message-ID:
X-OriginalArrivalTime: 28 Mar 2023 13:57:49.0249 (UTC) FILETIME=[48182B10:01D9617D]
X-Spam_score: 24.9
X-Spam_score_int: 249
X-Spam_bar: ++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings, My name is Engr. Gordon Hirschy, I am a citizen
of U.S.A, a business man specialized in Real Estate; but now I am critically
sick with esophageal cancer which has damaged almost all the cells in my
bo [...]
Content analysis details: (24.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[54.229.85.128 listed in bl.score.senderscore.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[54.229.85.128 listed in bl.score.senderscore.com]
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[85.217.144.227 listed in zen.spamhaus.org]
2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[85.217.144.227 listed in zen.spamhaus.org]
1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[54.229.85.128 listed in bb.barracudacentral.org]
1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[engr.gordon.hirschy(at)yandex.com]
0.9 URG_BIZ BODY: Contains urgent matter
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.4 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 AC_FROM_MANY_DOTS Multiple periods in From user name
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.0 TVD_PH_BODY_META No description available.
0.0 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS
1.0 XFER_LOTSA_MONEY Transfer a lot of money
0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Re: Greetings
Greetings,
My name is Engr. Gordon Hirschy, I am a citizen of U.S.A, a business
man specialized in Real Estate; but now I am critically sick with
esophageal cancer which has damaged almost all the cells in my body
system.
>From all medical indications my condition has really deteriorated and
it=E2=80=99s pretty obvious that I may not live for more than six months
because of the rapid growth stage and the excruciating pain that
accrues to it.
My wife was killed during the Gulf War, and our long years of marriage
were not blessed with children. My wife was very wealthy, after her
death I inherited all her business and funds. My doctor has diagnosed
and told me privately that I may not last for more than six months,
based on this I have taken the decision to share part of my funds and
wealth in contribution to the development of the Church and society
with major focus on the poor and needy.
I am willing to donate the sum of $10,000,000USD to you for the work
in developing the Church and to help the needy, and less privileged
among your congregations/society.
As soon as the fund is transferred to your own bank account, you shall
take 30% of the total amount transferred to your account as my
representative and the manager of the fund and use 70% for the
assignment.
In my next message, I will send you my identification and picture for
your confidence.
Please reply immediately with your full data if you agree my proposal
so that we can arrange for the transfer of the fund to your own bank
account before anything happens to me, because I will undergo surgery
by next week, and I do not know what will be the result of the surgery
as doctor has told me already that I may not survive.
May the grace and blessings of God be and remain with you.
I am waiting for your urgent response.
Yours Sincerely,
Engr. Gordon Hirschy
Reply to my private email: hirschy.e@yahoo.com
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments