Nigerian Spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 09 May 2023 13:40:04 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1pwT9G-000BX6-1b
for dave@doctor.nl2k.ab.ca;
Tue, 09 May 2023 13:37:22 -0600
Resent-From: The Doctor
Resent-Date: Tue, 9 May 2023 13:37:21 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f173.google.com ([209.85.208.173]:51376)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1pwOn0-0000QY-Es
for doctor@doctor.nl2k.ab.ca;
Tue, 09 May 2023 08:58:09 -0600
Received: by mail-lj1-f173.google.com with SMTP id 38308e7fff4ca-2ac7f53ae44so65705661fa.2
for; Tue, 09 May 2023 07:56:07 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1683644160; x=1686236160;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=fFghqr+TctbTH4d/HJ8uBOzmYVXaplmFhk/9J8jhf+g=;
b=NSjQNAYlObDHa90DkCv4IobHjlua0a2CFbLxqqMr6gIBWI6KN83hT1/5zcwwUOZmuO
yVHd/VRd8pNbxTdrNHLn/Ak8Hvwk71V1HNZxRPye8oUcHDj1dN1tMZw6LfK4fsACCDFO
8xJ/d5D5Nu6G9Va61j+BNgLbLXzNZstsOyU7xOUlY+jia9tp31y1B84QBufAUY4FVpes
RxhtCpveh0AXPHitUT+t9p89etGbenm4H38MG6e2tzR9GBnYcLobTMy3uioGvIXWVf4F
gePTPyFqpPY5NaUOT6p3qBtKKHNCLzUgo0a1Pcyi3Htmlw8joTqw8t/r6/rDo+utBewf
D2dA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1683644160; x=1686236160;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=fFghqr+TctbTH4d/HJ8uBOzmYVXaplmFhk/9J8jhf+g=;
b=iRIrixP8vyXI1NwuhmMKu4a/DTnWzwzYAuzcom6EBUqtUAmigI5zklGBXrPbslZEBB
aD13I/usyPVvkIfpG7Bpj+OKFEFHHE2pSpc+hX5AcKqlquwsGEnZfxlBgsP6YkuTiefb
fwGkE/UIJrpnTg6GwWTUsSQR6j6dbhr5cpI4wEonFf1ryPoXt2SUfAta3o1ml3I3TVee
nXVoLMbaCRDeRLGcNtfvSmZ93j/iP5XXcX44Tv/xSFs8sO9Pi3j5sOILaS5o0G9GVaAb
ANLyQtrd3/3tebIoXTAupcuEd9lw0lhW3+OZnwbLT1Zl0Xogyu+Bm6iRvjxg9yGJijf+
U0mQ==
X-Gm-Message-State: AC+VfDx+xDadfb6PRULyY9DvPmKr3SzBjDZwQKiNDxWUzy2RIrqIVt10
V2BKoF6yv/+qUrXFml2x5kdN9YSEbG+9HmbrdQ4=
X-Google-Smtp-Source: ACHHUZ52/QD6UPER/FwGJTG9B69bQjnmQyF8oS4kIJmbJNfJYH2eUU+hoOYp/zPfi231hmNod8knVt87ml4rPlPlt+E=
X-Received: by 2002:a2e:94c7:0:b0:2aa:41a1:cd6c with SMTP id
r7-20020a2e94c7000000b002aa41a1cd6cmr855815ljh.23.1683644160296; Tue, 09 May
2023 07:56:00 -0700 (PDT)
MIME-Version: 1.0
Sender: yacoubatao78@gmail.com
Received: by 2002:a05:6022:73a6:b0:3e:897e:3bcb with HTTP; Tue, 9 May 2023
07:55:59 -0700 (PDT)
From: "Mrs Yu. Ging Yunnan"
Date: Tue, 9 May 2023 14:55:59 +0000
X-Google-Sender-Auth: ZbjJWKD_edQD-qor0-1lpgfL7e8
Message-ID:
Subject: hello dear
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 11.6
X-Spam_score_int: 116
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: hello I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the
doctor said I will not survive it because all vaccines has been given to
me but to no avian, am a China woman but I base here in France beca [...]
Content analysis details: (11.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.173 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[yacoubatao78(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[yacoubatao78(at)gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
2.5 HK_SCAM_N2 BODY: No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
2.0 HK_SCAM No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.173 listed in wl.mailspike.net]
Subject: {SPAM?} hello dear
hello
I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor said I
will not survive it because all vaccines has been given to me but to
no avian, am a China woman but I base here in France because am
married here and I have no child for my late husband and now am a
widow. My reason of communicating you is that i have $12 .2million USD
which was deposited in BNP Paribas Bank here in France by my late
husband which am the next of kin to and I want you to stand as the
beneficiary for the claim now that am about to end my race according
to my doctor. I will want you to use the fund to build an orphanage
home in my name there in your country, please kindly reply to this
message urgently if willing to handle this project
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 09 May 2023 13:40:04 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1pwT9G-000BX6-1b
for dave@doctor.nl2k.ab.ca;
Tue, 09 May 2023 13:37:22 -0600
Resent-From: The Doctor
Resent-Date: Tue, 9 May 2023 13:37:21 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f173.google.com ([209.85.208.173]:51376)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1pwOn0-0000QY-Es
for doctor@doctor.nl2k.ab.ca;
Tue, 09 May 2023 08:58:09 -0600
Received: by mail-lj1-f173.google.com with SMTP id 38308e7fff4ca-2ac7f53ae44so65705661fa.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1683644160; x=1686236160;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=fFghqr+TctbTH4d/HJ8uBOzmYVXaplmFhk/9J8jhf+g=;
b=NSjQNAYlObDHa90DkCv4IobHjlua0a2CFbLxqqMr6gIBWI6KN83hT1/5zcwwUOZmuO
yVHd/VRd8pNbxTdrNHLn/Ak8Hvwk71V1HNZxRPye8oUcHDj1dN1tMZw6LfK4fsACCDFO
8xJ/d5D5Nu6G9Va61j+BNgLbLXzNZstsOyU7xOUlY+jia9tp31y1B84QBufAUY4FVpes
RxhtCpveh0AXPHitUT+t9p89etGbenm4H38MG6e2tzR9GBnYcLobTMy3uioGvIXWVf4F
gePTPyFqpPY5NaUOT6p3qBtKKHNCLzUgo0a1Pcyi3Htmlw8joTqw8t/r6/rDo+utBewf
D2dA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1683644160; x=1686236160;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=fFghqr+TctbTH4d/HJ8uBOzmYVXaplmFhk/9J8jhf+g=;
b=iRIrixP8vyXI1NwuhmMKu4a/DTnWzwzYAuzcom6EBUqtUAmigI5zklGBXrPbslZEBB
aD13I/usyPVvkIfpG7Bpj+OKFEFHHE2pSpc+hX5AcKqlquwsGEnZfxlBgsP6YkuTiefb
fwGkE/UIJrpnTg6GwWTUsSQR6j6dbhr5cpI4wEonFf1ryPoXt2SUfAta3o1ml3I3TVee
nXVoLMbaCRDeRLGcNtfvSmZ93j/iP5XXcX44Tv/xSFs8sO9Pi3j5sOILaS5o0G9GVaAb
ANLyQtrd3/3tebIoXTAupcuEd9lw0lhW3+OZnwbLT1Zl0Xogyu+Bm6iRvjxg9yGJijf+
U0mQ==
X-Gm-Message-State: AC+VfDx+xDadfb6PRULyY9DvPmKr3SzBjDZwQKiNDxWUzy2RIrqIVt10
V2BKoF6yv/+qUrXFml2x5kdN9YSEbG+9HmbrdQ4=
X-Google-Smtp-Source: ACHHUZ52/QD6UPER/FwGJTG9B69bQjnmQyF8oS4kIJmbJNfJYH2eUU+hoOYp/zPfi231hmNod8knVt87ml4rPlPlt+E=
X-Received: by 2002:a2e:94c7:0:b0:2aa:41a1:cd6c with SMTP id
r7-20020a2e94c7000000b002aa41a1cd6cmr855815ljh.23.1683644160296; Tue, 09 May
2023 07:56:00 -0700 (PDT)
MIME-Version: 1.0
Sender: yacoubatao78@gmail.com
Received: by 2002:a05:6022:73a6:b0:3e:897e:3bcb with HTTP; Tue, 9 May 2023
07:55:59 -0700 (PDT)
From: "Mrs Yu. Ging Yunnan"
Date: Tue, 9 May 2023 14:55:59 +0000
X-Google-Sender-Auth: ZbjJWKD_edQD-qor0-1lpgfL7e8
Message-ID:
Subject: hello dear
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 11.6
X-Spam_score_int: 116
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: hello I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the
doctor said I will not survive it because all vaccines has been given to
me but to no avian, am a China woman but I base here in France beca [...]
Content analysis details: (11.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.173 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[yacoubatao78(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[yacoubatao78(at)gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
2.5 HK_SCAM_N2 BODY: No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
2.0 HK_SCAM No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.173 listed in wl.mailspike.net]
Subject: {SPAM?} hello dear
hello
I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor said I
will not survive it because all vaccines has been given to me but to
no avian, am a China woman but I base here in France because am
married here and I have no child for my late husband and now am a
widow. My reason of communicating you is that i have $12 .2million USD
which was deposited in BNP Paribas Bank here in France by my late
husband which am the next of kin to and I want you to stand as the
beneficiary for the claim now that am about to end my race according
to my doctor. I will want you to use the fund to build an orphanage
home in my name there in your country, please kindly reply to this
message urgently if willing to handle this project
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments