Nigerian spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 26 May 2023 06:29:03 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1q2WYq-000LdA-KS
for dave@doctor.nl2k.ab.ca;
Fri, 26 May 2023 06:28:48 -0600
Resent-From: The Doctor
Resent-Date: Fri, 26 May 2023 06:28:48 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f44.google.com ([209.85.208.44]:45442)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1q2RE3-000Hyi-Vd
for doctor@doctor.nl2k.ab.ca;
Fri, 26 May 2023 00:47:04 -0600
Received: by mail-ed1-f44.google.com with SMTP id 4fb4d7f45d1cf-513fd8cc029so607905a12.3
for; Thu, 25 May 2023 23:45:00 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1685083494; x=1687675494;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=/ICULnOIjLNJVzLdKMMIrMnZOY6hVRlJZVGvwKWONkA=;
b=bmfpUCzmjc5iD0o/74xuBA57PHn0+kB930lgYIPQWLdN/aAcDKADeSEIdecGOqiDmZ
44dXT6yDToFGynxhFYFxsJlXDLwqh+29Ff9FHuemFTr3/4ZDzUoVBvNrvMM3X1TuNSVL
OZV90iz29jcRDkRFgiwNPFoMiSun31RqT2j5wvnkVX/f8/jOUmWZ6A+aq27w3N5kdXDE
LE+aq8GnZZzE3AhAF/GY3lV4DkYIzIV24HHtJ0EmyjCIhhXiNqvVGIHqxkJPOHIVIxTr
IKULgwtdUquV0/W9a7CB9fitrHoK0Yi5u0DKzqHu7b7pF6QjG/7QfhiguYowmrmC4gIo
tzRA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1685083494; x=1687675494;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=/ICULnOIjLNJVzLdKMMIrMnZOY6hVRlJZVGvwKWONkA=;
b=KPeu9xO3BCgHXQE5fPnvZ4U2+O82tz1SeXGZyqdkZHhZiI/qUZrxTkVkZ6pIxvXKSD
vkjI6xuTZKZU5Eyf5ZfOd30+U+lCt+rnZDVm2roVRkvMH9z5d9eJVlj6jvjjRzFxs4uz
bT/7z+jR6ZWnNp9TBJnU3KDbwN9zrKJzG4fgR/EYri29KYJYGTgUqWYvFOVs11Fl7Mhj
25QB8h1JAtjtIphrk9Lc6phv2n9HgKgaDoKs12A4vbRKLgBH+t1ATt7V15pJypP5elqM
jvISJgllYGNyqHrFTUo7lpkK9dnv8KrjqaMCvMyknNCdcLoE4j52jY0++iN/ptZcxMOV
AmZw==
X-Gm-Message-State: AC+VfDyYJpVoKzJpm1VOYuwNJwc8PMIo1KeOEalydLADyv2xE08Sk11d
CvXcE7F+EOvEF9gRZBMlNGrizaYJXzFb1L/3qkc=
X-Google-Smtp-Source: ACHHUZ6KW+efaGgq0y74weGy3MDCSD1IphxZ+23NuTbYTMjEFGeUuRmt9GKoU/4dL8hiJ2I0LAkjY9lgfqBgnlVGD6o=
X-Received: by 2002:a17:907:9816:b0:971:5a46:8ab4 with SMTP id
ji22-20020a170907981600b009715a468ab4mr943231ejc.66.1685083473106; Thu, 25
May 2023 23:44:33 -0700 (PDT)
MIME-Version: 1.0
Sender: amoduibrahim194@gmail.com
Received: by 2002:a17:907:948a:b0:94f:8ff0:d883 with HTTP; Thu, 25 May 2023
23:44:32 -0700 (PDT)
From: "Mrs Yu. Ging Yunnan"
Date: Fri, 26 May 2023 06:44:32 +0000
X-Google-Sender-Auth: A105lsezxojsIf6GoBAkMftHmGA
Message-ID:
Subject: hello dear
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 11.6
X-Spam_score_int: 116
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: hello I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the
doctor said I will not survive it because all vaccines has been given to
me but to no avian, am a China woman but I base here in France beca [...]
Content analysis details: (11.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.44 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[amoduibrahim194(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[amoduibrahim194(at)gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
2.5 HK_SCAM_N2 BODY: No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
2.0 HK_SCAM No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.44 listed in wl.mailspike.net]
Subject: {SPAM?} hello dear
X-Antivirus: AVG (VPS 230526-0, 5/25/2023), Inbound message
X-Antivirus-Status: Clean
hello
I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor said I
will not survive it because all vaccines has been given to me but to
no avian, am a China woman but I base here in France because am
married here and I have no child for my late husband and now am a
widow. My reason of communicating you is that i have $14.2million USD
which was deposited in BNP Paribas Bank here in France by my late
husband which am the next of kin to and I want you to stand as the
beneficiary for the claim now that am about to end my race according
to my doctor. I will want you to use the fund to build an orphanage
home in my name there in your country, please kindly reply to this
message urgently if willing to handle this project.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 26 May 2023 06:29:03 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1q2WYq-000LdA-KS
for dave@doctor.nl2k.ab.ca;
Fri, 26 May 2023 06:28:48 -0600
Resent-From: The Doctor
Resent-Date: Fri, 26 May 2023 06:28:48 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f44.google.com ([209.85.208.44]:45442)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1q2RE3-000Hyi-Vd
for doctor@doctor.nl2k.ab.ca;
Fri, 26 May 2023 00:47:04 -0600
Received: by mail-ed1-f44.google.com with SMTP id 4fb4d7f45d1cf-513fd8cc029so607905a12.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1685083494; x=1687675494;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=/ICULnOIjLNJVzLdKMMIrMnZOY6hVRlJZVGvwKWONkA=;
b=bmfpUCzmjc5iD0o/74xuBA57PHn0+kB930lgYIPQWLdN/aAcDKADeSEIdecGOqiDmZ
44dXT6yDToFGynxhFYFxsJlXDLwqh+29Ff9FHuemFTr3/4ZDzUoVBvNrvMM3X1TuNSVL
OZV90iz29jcRDkRFgiwNPFoMiSun31RqT2j5wvnkVX/f8/jOUmWZ6A+aq27w3N5kdXDE
LE+aq8GnZZzE3AhAF/GY3lV4DkYIzIV24HHtJ0EmyjCIhhXiNqvVGIHqxkJPOHIVIxTr
IKULgwtdUquV0/W9a7CB9fitrHoK0Yi5u0DKzqHu7b7pF6QjG/7QfhiguYowmrmC4gIo
tzRA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1685083494; x=1687675494;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=/ICULnOIjLNJVzLdKMMIrMnZOY6hVRlJZVGvwKWONkA=;
b=KPeu9xO3BCgHXQE5fPnvZ4U2+O82tz1SeXGZyqdkZHhZiI/qUZrxTkVkZ6pIxvXKSD
vkjI6xuTZKZU5Eyf5ZfOd30+U+lCt+rnZDVm2roVRkvMH9z5d9eJVlj6jvjjRzFxs4uz
bT/7z+jR6ZWnNp9TBJnU3KDbwN9zrKJzG4fgR/EYri29KYJYGTgUqWYvFOVs11Fl7Mhj
25QB8h1JAtjtIphrk9Lc6phv2n9HgKgaDoKs12A4vbRKLgBH+t1ATt7V15pJypP5elqM
jvISJgllYGNyqHrFTUo7lpkK9dnv8KrjqaMCvMyknNCdcLoE4j52jY0++iN/ptZcxMOV
AmZw==
X-Gm-Message-State: AC+VfDyYJpVoKzJpm1VOYuwNJwc8PMIo1KeOEalydLADyv2xE08Sk11d
CvXcE7F+EOvEF9gRZBMlNGrizaYJXzFb1L/3qkc=
X-Google-Smtp-Source: ACHHUZ6KW+efaGgq0y74weGy3MDCSD1IphxZ+23NuTbYTMjEFGeUuRmt9GKoU/4dL8hiJ2I0LAkjY9lgfqBgnlVGD6o=
X-Received: by 2002:a17:907:9816:b0:971:5a46:8ab4 with SMTP id
ji22-20020a170907981600b009715a468ab4mr943231ejc.66.1685083473106; Thu, 25
May 2023 23:44:33 -0700 (PDT)
MIME-Version: 1.0
Sender: amoduibrahim194@gmail.com
Received: by 2002:a17:907:948a:b0:94f:8ff0:d883 with HTTP; Thu, 25 May 2023
23:44:32 -0700 (PDT)
From: "Mrs Yu. Ging Yunnan"
Date: Fri, 26 May 2023 06:44:32 +0000
X-Google-Sender-Auth: A105lsezxojsIf6GoBAkMftHmGA
Message-ID:
Subject: hello dear
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 11.6
X-Spam_score_int: 116
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: hello I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the
doctor said I will not survive it because all vaccines has been given to
me but to no avian, am a China woman but I base here in France beca [...]
Content analysis details: (11.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.44 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[amoduibrahim194(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[amoduibrahim194(at)gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
2.5 HK_SCAM_N2 BODY: No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
2.0 HK_SCAM No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.44 listed in wl.mailspike.net]
Subject: {SPAM?} hello dear
X-Antivirus: AVG (VPS 230526-0, 5/25/2023), Inbound message
X-Antivirus-Status: Clean
hello
I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor said I
will not survive it because all vaccines has been given to me but to
no avian, am a China woman but I base here in France because am
married here and I have no child for my late husband and now am a
widow. My reason of communicating you is that i have $14.2million USD
which was deposited in BNP Paribas Bank here in France by my late
husband which am the next of kin to and I want you to stand as the
beneficiary for the claim now that am about to end my race according
to my doctor. I will want you to use the fund to build an orphanage
home in my name there in your country, please kindly reply to this
message urgently if willing to handle this project.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments