Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 26 Apr 2023 12:27:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1prjqE-000DjG-Ej
for dave@doctor.nl2k.ab.ca;
Wed, 26 Apr 2023 12:26:10 -0600
Resent-From: The Doctor
Resent-Date: Wed, 26 Apr 2023 12:26:10 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [176.223.91.98] (port=17970 helo=fortimail.gammachimica.it)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1priKH-0009wB-KA
for doctor@doctor.nl2k.ab.ca;
Wed, 26 Apr 2023 10:49:12 -0600
Received: from User ([78.142.218.142])
(user=postmaster@gammachimica.it mech=LOGIN bits=0)
by fortimail.gammachimica.it with ESMTP id 33QGkrPs019407-33QGkrPu019407;
Wed, 26 Apr 2023 18:46:54 +0200
Message-Id: <202304261646.33QGkrPs019407-33QGkrPu019407@fortimail.gammachimica.it>
Reply-To:
From: "REBECCA JOHNSON"
Subject: URGENT ATTENTION PLEASE
Date: Wed, 26 Apr 2023 12:47:00 -0400
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-FEAS-Auth-User: postmaster@gammachimica.it
X-FE-Policy-ID: 0:1:0:SYSTEM
X-Spam_score: 28.5
X-Spam_score_int: 285
X-Spam_bar: ++++++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Beloved. Greetings to you and the rest of your family,
i know this may come as a surprise to you but dont worry and just listen
to what i am going to say because i urgently need your assistance right away,
fir [...]
Content analysis details: (28.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[176.223.91.98 listed in bl.score.senderscore.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[176.223.91.98 listed in bl.score.senderscore.com]
1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.6 SUBJ_ALL_CAPS Subject is all capitals
1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[winsdeptservice(at)gmail.com]
1.2 MISSING_HEADERS Missing To: header
0.9 URG_BIZ BODY: Contains urgent matter
0.6 FSL_NEW_HELO_USER Spam's using Helo and User
1.9 REPLYTO_WITHOUT_TO_CC No description available.
3.4 MSOE_MID_WRONG_CASE No description available.
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 LOTS_OF_MONEY Huge... sums of money
1.4 MALFORMED_FREEMAIL Bad headers on message from free email service
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.3 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FROM_MISSPACED From: missing whitespace
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 SPOOFED_FREEMAIL No description available.
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
0.0 XFER_LOTSA_MONEY Transfer a lot of money
0.0 SPOOF_GMAIL_MID From Gmail but it doesn't seem to be...
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} URGENT ATTENTION PLEASE
X-Antivirus: AVG (VPS 230426-2, 4/25/2023), Inbound message
X-Antivirus-Status: Clean
Dear Beloved.
Greetings to you and the rest of your family, i know this may come as a surprise to you but dont worry and just listen to what i am going to say because i urgently need your assistance right away, firstly i instroduce myself, my name is Mrs Rebeca Johnson born in Machester by american parents, i was never married but i have a son with one of europe elite business mogul billionaire, with an agreement that it will would be concealed for ever since he paid me off to the sum of 500 million euros he does not want any of his family members expecially his wife to know about this, its a top secret that i have promised to keep for him for the rest of my life.
I have been doing well in life and enjoying my life taking good care of my son, i have a very good business which yield good money and a house in the united states and also in London UK, they are already WILL to my son the only child i have for the billionair, my son is presently studying business and managment in havard business school united states of america, i have secure his future, so the business and the 2 houses and enough money are already WILL to him.
Finally, you need to act fast soon after you read this letter, i am dying of cancer and the doctors has confirmed that i have 3 months or less to live, i have donated enough to charity and other none goverment organisation till date, i felt its time to reach out to other people too, so well i deposited the total sum of 12 million euros with a security vault company in Thessalonike Greece, i will give you the contacts of the vault company and other information that you need to claim and receive this funds soon as possible so that it wont be gone, this is my wish and promised to give away part of my wealth.
With Thanks and Regards
Mrs Rebecca Johnson
My Direct email is winsdeptservice@gmail.com
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 26 Apr 2023 12:27:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1prjqE-000DjG-Ej
for dave@doctor.nl2k.ab.ca;
Wed, 26 Apr 2023 12:26:10 -0600
Resent-From: The Doctor
Resent-Date: Wed, 26 Apr 2023 12:26:10 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [176.223.91.98] (port=17970 helo=fortimail.gammachimica.it)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from
id 1priKH-0009wB-KA
for doctor@doctor.nl2k.ab.ca;
Wed, 26 Apr 2023 10:49:12 -0600
Received: from User ([78.142.218.142])
(user=postmaster@gammachimica.it mech=LOGIN bits=0)
by fortimail.gammachimica.it with ESMTP id 33QGkrPs019407-33QGkrPu019407;
Wed, 26 Apr 2023 18:46:54 +0200
Message-Id: <202304261646.33QGkrPs019407-33QGkrPu019407@fortimail.gammachimica.it>
Reply-To:
From: "REBECCA JOHNSON"
Subject: URGENT ATTENTION PLEASE
Date: Wed, 26 Apr 2023 12:47:00 -0400
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-FEAS-Auth-User: postmaster@gammachimica.it
X-FE-Policy-ID: 0:1:0:SYSTEM
X-Spam_score: 28.5
X-Spam_score_int: 285
X-Spam_bar: ++++++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Beloved. Greetings to you and the rest of your family,
i know this may come as a surprise to you but dont worry and just listen
to what i am going to say because i urgently need your assistance right away,
fir [...]
Content analysis details: (28.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[176.223.91.98 listed in bl.score.senderscore.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[176.223.91.98 listed in bl.score.senderscore.com]
1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.6 SUBJ_ALL_CAPS Subject is all capitals
1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[winsdeptservice(at)gmail.com]
1.2 MISSING_HEADERS Missing To: header
0.9 URG_BIZ BODY: Contains urgent matter
0.6 FSL_NEW_HELO_USER Spam's using Helo and User
1.9 REPLYTO_WITHOUT_TO_CC No description available.
3.4 MSOE_MID_WRONG_CASE No description available.
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 LOTS_OF_MONEY Huge... sums of money
1.4 MALFORMED_FREEMAIL Bad headers on message from free email service
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.3 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FROM_MISSPACED From: missing whitespace
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 SPOOFED_FREEMAIL No description available.
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
0.0 XFER_LOTSA_MONEY Transfer a lot of money
0.0 SPOOF_GMAIL_MID From Gmail but it doesn't seem to be...
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} URGENT ATTENTION PLEASE
X-Antivirus: AVG (VPS 230426-2, 4/25/2023), Inbound message
X-Antivirus-Status: Clean
Dear Beloved.
Greetings to you and the rest of your family, i know this may come as a surprise to you but dont worry and just listen to what i am going to say because i urgently need your assistance right away, firstly i instroduce myself, my name is Mrs Rebeca Johnson born in Machester by american parents, i was never married but i have a son with one of europe elite business mogul billionaire, with an agreement that it will would be concealed for ever since he paid me off to the sum of 500 million euros he does not want any of his family members expecially his wife to know about this, its a top secret that i have promised to keep for him for the rest of my life.
I have been doing well in life and enjoying my life taking good care of my son, i have a very good business which yield good money and a house in the united states and also in London UK, they are already WILL to my son the only child i have for the billionair, my son is presently studying business and managment in havard business school united states of america, i have secure his future, so the business and the 2 houses and enough money are already WILL to him.
Finally, you need to act fast soon after you read this letter, i am dying of cancer and the doctors has confirmed that i have 3 months or less to live, i have donated enough to charity and other none goverment organisation till date, i felt its time to reach out to other people too, so well i deposited the total sum of 12 million euros with a security vault company in Thessalonike Greece, i will give you the contacts of the vault company and other information that you need to claim and receive this funds soon as possible so that it wont be gone, this is my wish and promised to give away part of my wealth.
With Thanks and Regards
Mrs Rebecca Johnson
My Direct email is winsdeptservice@gmail.com
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments