Nigerian spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 01 Jun 2023 15:18:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from)
id 1q4pe1-0002ey-14
for dave@doctor.nl2k.ab.ca;
Thu, 01 Jun 2023 15:15:41 -0600
Resent-From: The Doctor
Resent-Date: Thu, 1 Jun 2023 15:15:41 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f196.google.com ([209.85.208.196]:49206)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1q4o7A-0006zb-1Z
for doctor@doctor.nl2k.ab.ca;
Thu, 01 Jun 2023 13:37:43 -0600
Received: by mail-lj1-f196.google.com with SMTP id 38308e7fff4ca-2af2d092d7aso18530631fa.2
for; Thu, 01 Jun 2023 12:35:40 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1685648134; x=1688240134;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:from:to:cc:subject:date:message-id:reply-to;
bh=pOTPZ6SrykJb5Nw5iTGk3EbveKXQluUKzCDlOxcgH/4=;
b=QRoYb5ROEwH3uGtW7X0UWGjI3fbZoS0Se/xFHpF5mVNvQScbRTSABu+I1ByB8IYyIh
lrZxaOuo4vdCZ+WAgUS+mlm6X+q/A1NDv9uQV6bt7Dx/dqBY1VjFQ+w0kREyVCDhy8UD
X58PglCKmokihNhJp6jK98BavR4SQ36yIIypKv4rUfol0RGHHKXnfyhUApbun9GRQ7mg
QB7u4n/qxuAMutaYDTHvZ0vGRV8AwmeF17/eVmIcEdfCqAEsk6rAFgF1ijJpOUpUUSe5
/+9AienJuqL7xIX6bNR2AB+RcrFWy0eaktUC0JTVccJ1isNrgz2ntnXk3iTERFXoJr6M
tupw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1685648134; x=1688240134;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=pOTPZ6SrykJb5Nw5iTGk3EbveKXQluUKzCDlOxcgH/4=;
b=FBhqrgjzZ8nkj8VrNQDl/gCBAeKp9ZPn5UB4MAbcBmLg1LzrI8zZb3VpAcXU7L08Lg
zbJpbvFR8LwPXqz40+Vefwu8wZmBY160HJYMvxDe9eMXdqmofwIGGUZyRjg8POvs+AS0
Dtm8Je/yERIvdZZk83j9Gu+1cV4dHUlDthNPmvDkg6hAqs5qSmkWylUAQMOfwBL8j4lD
JM/1yk134/UylVK4aiaOCnNXzwBkkdzo9K6yagsZKcHY76V/wy216cOJhPoSmUToTSZ7
0sdJbGYZpJOpt9+rn1TDIBe1MHeuhcAN5bbmwhC6GX/doFMc6I9m2WpsQFgx6Wti+AvE
eRoQ==
X-Gm-Message-State: AC+VfDw/asK7XcmgC9XzcVLCSOT0cZNRWJxEkHaHJP+zkn0HfN8e6sSH
usTANGGxUAhLo1HE6cjQUIrR309MNjLoD0oMuKw=
X-Google-Smtp-Source: ACHHUZ5UvO19zLyJraZ3RqR8RtTaLmvA+wbZShTqkh2v5+KfjkrFHk0gcHlUt3YnN3J7dcvCfkBIWbdoMm3a65ZgzNM=
X-Received: by 2002:a2e:95da:0:b0:2a8:c75c:96cb with SMTP id
y26-20020a2e95da000000b002a8c75c96cbmr301785ljh.1.1685648133683; Thu, 01 Jun
2023 12:35:33 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a2e:9dd5:0:b0:2ac:577d:1ff7 with HTTP; Thu, 1 Jun 2023
12:35:33 -0700 (PDT)
Reply-To: mrssusanw203@gmail.com
From: Mrs Susan Williams
Date: Thu, 1 Jun 2023 19:35:33 +0000
Message-ID:
Subject: From Mrs Susan Williams.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 19.7
X-Spam_score_int: 197
X-Spam_bar: +++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Beloved, Thank you for your response. I am Mrs Susan
Williams an aging widow suffering from long time illness. I am currently admitted
in a private hospital in Abidjan Cote D‘Ivoire. I have some funds I inhe
[...]
Content analysis details: (19.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.196 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[pglenncarlo(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[mrssusanw203(at)gmail.com]
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
1.5 HK_SCAM_N8 BODY: No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
2.0 HK_SCAM No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 LOTS_OF_MONEY Huge... sums of money
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.196 listed in wl.mailspike.net]
Subject: {SPAM?} From Mrs Susan Williams.
X-Antivirus: AVG (VPS 230601-6, 6/1/2023), Inbound message
X-Antivirus-Status: Clean
Dear Beloved,
Thank you for your response. I am Mrs Susan Williams an aging widow
suffering from long time illness. I am currently admitted in a private
hospital in Abidjan Cote D=E2=80=98Ivoire. I have some funds I inherited fr=
om
my late loving husband, the sum of US$ 4.700.000 which he deposited in
bank here. I need a very honest and God fearing person that can use
these funds for God's work and 15% out of the total funds will be for
your compensation for doing this work of God.
Please if you would be able to use these funds for the Lord's work
kindly reply me as soon as possible for more detail.
Yours in Christ.
Mrs Susan Williams.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 01 Jun 2023 15:18:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1q4pe1-0002ey-14
for dave@doctor.nl2k.ab.ca;
Thu, 01 Jun 2023 15:15:41 -0600
Resent-From: The Doctor
Resent-Date: Thu, 1 Jun 2023 15:15:41 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f196.google.com ([209.85.208.196]:49206)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1q4o7A-0006zb-1Z
for doctor@doctor.nl2k.ab.ca;
Thu, 01 Jun 2023 13:37:43 -0600
Received: by mail-lj1-f196.google.com with SMTP id 38308e7fff4ca-2af2d092d7aso18530631fa.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1685648134; x=1688240134;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:from:to:cc:subject:date:message-id:reply-to;
bh=pOTPZ6SrykJb5Nw5iTGk3EbveKXQluUKzCDlOxcgH/4=;
b=QRoYb5ROEwH3uGtW7X0UWGjI3fbZoS0Se/xFHpF5mVNvQScbRTSABu+I1ByB8IYyIh
lrZxaOuo4vdCZ+WAgUS+mlm6X+q/A1NDv9uQV6bt7Dx/dqBY1VjFQ+w0kREyVCDhy8UD
X58PglCKmokihNhJp6jK98BavR4SQ36yIIypKv4rUfol0RGHHKXnfyhUApbun9GRQ7mg
QB7u4n/qxuAMutaYDTHvZ0vGRV8AwmeF17/eVmIcEdfCqAEsk6rAFgF1ijJpOUpUUSe5
/+9AienJuqL7xIX6bNR2AB+RcrFWy0eaktUC0JTVccJ1isNrgz2ntnXk3iTERFXoJr6M
tupw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1685648134; x=1688240134;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=pOTPZ6SrykJb5Nw5iTGk3EbveKXQluUKzCDlOxcgH/4=;
b=FBhqrgjzZ8nkj8VrNQDl/gCBAeKp9ZPn5UB4MAbcBmLg1LzrI8zZb3VpAcXU7L08Lg
zbJpbvFR8LwPXqz40+Vefwu8wZmBY160HJYMvxDe9eMXdqmofwIGGUZyRjg8POvs+AS0
Dtm8Je/yERIvdZZk83j9Gu+1cV4dHUlDthNPmvDkg6hAqs5qSmkWylUAQMOfwBL8j4lD
JM/1yk134/UylVK4aiaOCnNXzwBkkdzo9K6yagsZKcHY76V/wy216cOJhPoSmUToTSZ7
0sdJbGYZpJOpt9+rn1TDIBe1MHeuhcAN5bbmwhC6GX/doFMc6I9m2WpsQFgx6Wti+AvE
eRoQ==
X-Gm-Message-State: AC+VfDw/asK7XcmgC9XzcVLCSOT0cZNRWJxEkHaHJP+zkn0HfN8e6sSH
usTANGGxUAhLo1HE6cjQUIrR309MNjLoD0oMuKw=
X-Google-Smtp-Source: ACHHUZ5UvO19zLyJraZ3RqR8RtTaLmvA+wbZShTqkh2v5+KfjkrFHk0gcHlUt3YnN3J7dcvCfkBIWbdoMm3a65ZgzNM=
X-Received: by 2002:a2e:95da:0:b0:2a8:c75c:96cb with SMTP id
y26-20020a2e95da000000b002a8c75c96cbmr301785ljh.1.1685648133683; Thu, 01 Jun
2023 12:35:33 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a2e:9dd5:0:b0:2ac:577d:1ff7 with HTTP; Thu, 1 Jun 2023
12:35:33 -0700 (PDT)
Reply-To: mrssusanw203@gmail.com
From: Mrs Susan Williams
Date: Thu, 1 Jun 2023 19:35:33 +0000
Message-ID:
Subject: From Mrs Susan Williams.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 19.7
X-Spam_score_int: 197
X-Spam_bar: +++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Beloved, Thank you for your response. I am Mrs Susan
Williams an aging widow suffering from long time illness. I am currently admitted
in a private hospital in Abidjan Cote D‘Ivoire. I have some funds I inhe
[...]
Content analysis details: (19.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.196 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[pglenncarlo(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[mrssusanw203(at)gmail.com]
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
1.5 HK_SCAM_N8 BODY: No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
2.0 HK_SCAM No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 LOTS_OF_MONEY Huge... sums of money
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.196 listed in wl.mailspike.net]
Subject: {SPAM?} From Mrs Susan Williams.
X-Antivirus: AVG (VPS 230601-6, 6/1/2023), Inbound message
X-Antivirus-Status: Clean
Dear Beloved,
Thank you for your response. I am Mrs Susan Williams an aging widow
suffering from long time illness. I am currently admitted in a private
hospital in Abidjan Cote D=E2=80=98Ivoire. I have some funds I inherited fr=
om
my late loving husband, the sum of US$ 4.700.000 which he deposited in
bank here. I need a very honest and God fearing person that can use
these funds for God's work and 15% out of the total funds will be for
your compensation for doing this work of God.
Please if you would be able to use these funds for the Lord's work
kindly reply me as soon as possible for more detail.
Yours in Christ.
Mrs Susan Williams.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments