Nigerian Gmail spam

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 08 Apr 2023 15:09:41 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1plFo9-0009Ab-2O

for dave@doctor.nl2k.ab.ca;

Sat, 08 Apr 2023 15:09:13 -0600

Resent-From: The Doctor

Resent-Date: Sat, 8 Apr 2023 15:09:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f181.google.com ([209.85.208.181]:34644)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1plCKz-000PV9-1q

for doctor@doctor.nl2k.ab.ca;

Sat, 08 Apr 2023 11:26:57 -0600

Received: by mail-lj1-f181.google.com with SMTP id b6so26109849ljr.1

for ; Sat, 08 Apr 2023 10:24:54 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112; t=1680974687;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=W5Kpm5JHrN9kyVf+rvFmPBKD2ief5TEdCVPa3+aN6yU=;

b=oY2teAOusfeV2SK+u0Blb8AyCJ2GVFiZKKpRMrRuu33Od8jtUG7GVmuvTk537qy92P

tI1RKlKcyHOEuAqjNsWVfBlowR05pgms4XOSMzO4it/MSl217WuQZRjx2nWhdFUzeF4n

+9Aiwng1ngDcvZ2kCh+TDtrg/r5zgFAEzBK2rQjspAwxiNRlGqBfX9Y9ggqFVK0D8uFn

MMOmkxBKixIIgh2WCWhtHh69z+dEF9Me/M+6xuG2flAOoW8D8VQPkAH4xUKgfZuuuVZC

gc0zI7v3Ca/baSavLXtV9Hr964t//Dk5pdMUwRNEg9irBHQKYbxeH1+3nGCktE9xxkba

7LsA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1680974687;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=W5Kpm5JHrN9kyVf+rvFmPBKD2ief5TEdCVPa3+aN6yU=;

b=ecgyw0PkQ2knftKUcG6wpcaJB3x+xcAY34st43OwlzXAN2RmvPnsECG0bQBVThflIM

RdQLDQbIojL8twWsli0uB8uQ6jbtOQL57DxKm8nGb7usBnFJkYse8ihGWTICwoaag1ah

gGkaCI+/4DRVm/4tnnYf8YbNF6/ua7rjFXx/2l8VVsOS16dg1Ws/mfYhcT6qCdCjBmf2

k61msnEH6CsG8KmqKQACMLE4byIVE+peOoLz+wag7a+QLFQK0vlPYnM6OCUhs2xNgA4E

9XZWxu3ip1m1td3N1peKEphwfPql4rLWyp8VujdUWzAnSlE//MRYzfAu1IjEk56elnRb

noMQ==

X-Gm-Message-State: AAQBX9ctP5Hh//cyXNe3xuHAooyvA5n6RPRSrl9ttu62mNGCWm74iRl2

BcNch53e+vu2OQn4RGJnk0rRc4sNF/ALJCDIXSQ=

X-Google-Smtp-Source: AKy350YY1+eYYa93vlu6RuAafoOUhGztyXoNjtIFNlUmwNYcFTUwvvTMgbtdMvnmnayF///z+mjXMIjmeLB4wOXSTu8=

X-Received: by 2002:a2e:870c:0:b0:2a6:2f28:252f with SMTP id

m12-20020a2e870c000000b002a62f28252fmr1494398lji.5.1680974687577; Sat, 08 Apr

2023 10:24:47 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:ab3:6341:0:b0:224:b83d:a245 with HTTP; Sat, 8 Apr 2023

10:24:47 -0700 (PDT)

Reply-To: ms.vero-bahi@hotmail.com

From: "Mrs. Veronique Baghi."

Date: Sat, 8 Apr 2023 17:24:47 +0000

Message-ID:

Subject: Can you handle this project please

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 8.6

X-Spam_score_int: 86

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello Beloved, My name is Madame Véronique Baghi, of German

nationality. I am contacting you to do something very important to me. It's

true that you don't know me well yet. I have cancer which is in [...]



Content analysis details: (8.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.181 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mrsveroniquebaghi(at)gmail.com]

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.181 listed in wl.mailspike.net]

Subject: {SPAM?} Can you handle this project please



Hello Beloved,

My name is Madame V=C3=A9ronique Baghi, of German nationality. I am

contacting you to do something very important to me. It's true that

you don't know me well yet. I have cancer which is in the terminal

phase, my attending physician has just informed me that my days are

numbered because of my degraded state of health. According to what the

Doctor explained to me, a Ball is currently settling in my cerebral

cage, I have had this disease for more than 4 years now. I have the

sum of (=E2=82=AC 3.500.000 Euros) as a donation to you. And want you to

accept this gift as a donation as it could be very useful to you for

the works of God. You must answer me if you accept my offer, 'Cause I

feel really bad all these days, I can hardly sleep at night or during

day times. I beg you to accept my donation. Because I cannot die

without having donated all this money

otherwise I think it would be wasted.



I wish you a good time and may Almighty God protect you and your family Ame=

n!



Thank you in advance for your attention.

God Love You!

Mrs. Veronique Baghi.

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA