Nigerian Gmail spam

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 26 Apr 2023 12:27:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1prjqE-000DjG-Ej

for dave@doctor.nl2k.ab.ca;

Wed, 26 Apr 2023 12:26:10 -0600

Resent-From: The Doctor

Resent-Date: Wed, 26 Apr 2023 12:26:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [176.223.91.98] (port=17970 helo=fortimail.gammachimica.it)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1priKH-0009wB-KA

for doctor@doctor.nl2k.ab.ca;

Wed, 26 Apr 2023 10:49:12 -0600

Received: from User ([78.142.218.142])

(user=postmaster@gammachimica.it mech=LOGIN bits=0)

by fortimail.gammachimica.it with ESMTP id 33QGkrPs019407-33QGkrPu019407;

Wed, 26 Apr 2023 18:46:54 +0200

Message-Id: <202304261646.33QGkrPs019407-33QGkrPu019407@fortimail.gammachimica.it>

Reply-To:

From: "REBECCA JOHNSON"

Subject: URGENT ATTENTION PLEASE

Date: Wed, 26 Apr 2023 12:47:00 -0400

MIME-Version: 1.0

Content-Type: text/plain;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

X-FEAS-Auth-User: postmaster@gammachimica.it

X-FE-Policy-ID: 0:1:0:SYSTEM

X-Spam_score: 28.5

X-Spam_score_int: 285

X-Spam_bar: ++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Beloved. Greetings to you and the rest of your family,

i know this may come as a surprise to you but dont worry and just listen

to what i am going to say because i urgently need your assistance right away,

fir [...]



Content analysis details: (28.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[176.223.91.98 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[176.223.91.98 listed in bl.score.senderscore.com]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.0 NSL_RCVD_FROM_USER Received from User

0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam

1.6 SUBJ_ALL_CAPS Subject is all capitals

1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[winsdeptservice(at)gmail.com]

1.2 MISSING_HEADERS Missing To: header

0.9 URG_BIZ BODY: Contains urgent matter

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

1.9 REPLYTO_WITHOUT_TO_CC No description available.

3.4 MSOE_MID_WRONG_CASE No description available.

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 LOTS_OF_MONEY Huge... sums of money

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority

1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool

0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait

0.0 FROM_MISSP_USER From misspaced, from "User"

0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To

2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool

0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors

0.3 FROM_MISSP_EH_MATCH From misspaced, matches envelope

0.0 FROM_MISSPACED From: missing whitespace

0.0 MONEY_FROM_MISSP Lots of money and misspaced From

0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider

0.0 SPOOFED_FREEMAIL No description available.

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS

0.0 XFER_LOTSA_MONEY Transfer a lot of money

0.0 SPOOF_GMAIL_MID From Gmail but it doesn't seem to be...

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} URGENT ATTENTION PLEASE

X-Antivirus: AVG (VPS 230426-2, 4/25/2023), Inbound message

X-Antivirus-Status: Clean





Dear Beloved.



Greetings to you and the rest of your family, i know this may come as a surprise to you but dont worry and just listen to what i am going to say because i urgently need your assistance right away, firstly i instroduce myself, my name is Mrs Rebeca Johnson born in Machester by american parents, i was never married but i have a son with one of europe elite business mogul billionaire, with an agreement that it will would be concealed for ever since he paid me off to the sum of 500 million euros he does not want any of his family members expecially his wife to know about this, its a top secret that i have promised to keep for him for the rest of my life.



I have been doing well in life and enjoying my life taking good care of my son, i have a very good business which yield good money and a house in the united states and also in London UK, they are already WILL to my son the only child i have for the billionair, my son is presently studying business and managment in havard business school united states of america, i have secure his future, so the business and the 2 houses and enough money are already WILL to him.



Finally, you need to act fast soon after you read this letter, i am dying of cancer and the doctors has confirmed that i have 3 months or less to live, i have donated enough to charity and other none goverment organisation till date, i felt its time to reach out to other people too, so well i deposited the total sum of 12 million euros with a security vault company in Thessalonike Greece, i will give you the contacts of the vault company and other information that you need to claim and receive this funds soon as possible so that it wont be gone, this is my wish and promised to give away part of my wealth.



With Thanks and Regards

Mrs Rebecca Johnson

My Direct email is winsdeptservice@gmail.com









Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA