money Fraud spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 03 Jul 2023 06:31:03 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from)
id 1qGIgw-0008FN-2z
for dave@doctor.nl2k.ab.ca;
Mon, 03 Jul 2023 06:30:06 -0600
Resent-From: The Doctor
Resent-Date: Mon, 3 Jul 2023 06:30:06 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f50.google.com ([209.85.208.50]:60804)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1qGEUB-000ApI-15
for doctor@doctor.nl2k.ab.ca;
Mon, 03 Jul 2023 02:00:44 -0600
Received: by mail-ed1-f50.google.com with SMTP id 4fb4d7f45d1cf-51e00695e21so1319272a12.1
for; Mon, 03 Jul 2023 00:58:40 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1688371114; x=1690963114;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=FvXRjwmdhZP5MFo8egj2DQ5N74RzAstgRZ8f7YRD4WA=;
b=aMVtSJSLZcNqBZJNkILUbkm3zttZSLdp2qg80pqXCsLsKygcnFdeYwCoPqosYIg2bI
/YdELykfloQ45QzxZ5clR9nmjRxz3DPop2bEL5QS3wGW8Ce8vPxXSf4auhyPwhGSC57G
AyOpFm8il5xvH3wAnl0AtD1tWty1cCMJBJ4l2GCYTbzkxJhvsnog7fQm27uW3l7PjLt/
+heOERgFeIKTQSOm5sgzjqPjbVNbiH4DUTSk6kNvWAIfS8CH/LQOslOUwECGxx4PIOeH
+mEDgXyH+pz9sG+OfepcjsC3HNymhXErh74SQIibFAf8R4b4XTsMwD6f+ryVFkfq9ymF
Q/YA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1688371114; x=1690963114;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=FvXRjwmdhZP5MFo8egj2DQ5N74RzAstgRZ8f7YRD4WA=;
b=FDzkJ77CWGDyn5kwlhyZwoH6YJvURhl4c74yprCCpYc0LRfSRm+Db5OtOheJ9HdPah
R1l22N4WfTRFkTErO4mFzKt5f4+c8klJ/pI2ajuGAlvw51DwbVLgMxsE/WC7QUoa0Rey
N10D0TfcKmaJ38mPQyv5yjNv8Hu+KLrSu0nz8TeOUo/7GYbMK/sA+bUeLg9ApFguFaC5
p4CnE5fYwObQB7jClFoMC1hH3wYKYRMVsDhSxqns2oyYkXu21tX7RNJECoxX3CMRnnTZ
9iVVv2p1EfLXy/AjLIv4P1VQA5aJzuWmM1TlnbzQ2vXpVUvZS7uFZRvvXa71xKDunaeN
h+zQ==
X-Gm-Message-State: ABy/qLaYNT+ScTzc4bFaOhTFC7gWZG1MOz62HHaSfkfOOgF/zScywKut
ZDoBbaGJw9fYkbDhPXFou+v0A/CYMYVtOKMGFEg=
X-Google-Smtp-Source: APBJJlH8hyxEZQjQC3Z1rMN6uM/KiMb6afxsGXk20Z4t7Xg3StBPmaXVRmmnngBYMsjacCrFipNqeErMrAe8wrAzrQ4=
X-Received: by 2002:aa7:d85a:0:b0:518:7a51:7e97 with SMTP id
f26-20020aa7d85a000000b005187a517e97mr6988762eds.36.1688371113209; Mon, 03
Jul 2023 00:58:33 -0700 (PDT)
MIME-Version: 1.0
Sender: kaderbelem30@gmail.com
Received: by 2002:a05:7208:400e:b0:6c:3361:11c7 with HTTP; Mon, 3 Jul 2023
00:58:32 -0700 (PDT)
From: "Mrs Yu. Ging Yunnan"
Date: Mon, 3 Jul 2023 07:58:32 +0000
X-Google-Sender-Auth: z11WamkHO8VOfZgIXo4IXn2Y748
Message-ID:
Subject: hello dear
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 11.6
X-Spam_score_int: 116
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor
said I will not survive it because all vaccines has been given to me but
to no avian, am a China woman but I base here in France because am [...]
Content analysis details: (11.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.50 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[kaderbelem30(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[yunnanmrsyuging(at)gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
2.5 HK_SCAM_N2 BODY: No description available.
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.50 listed in wl.mailspike.net]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
2.0 HK_SCAM No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
Subject: {SPAM?} hello dear
I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor said I
will not survive it because all vaccines has been given to me but to
no avian, am a China woman but I base here in France because am
married here and I have no child for my late husband and now am a
widow. My reason of communicating you is that i have $19.2million USD
which was deposited in BNP Paribas Bank here in France by my late
husband which am the next of kin to and I want you to stand as the
beneficiary for the claim now that am about to end my race according
to my doctor. I will want you to use the fund to build an orphanage
home in my name there in your country, please kindly reply to this
message urgently if willing to handle this project.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 03 Jul 2023 06:31:03 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1qGIgw-0008FN-2z
for dave@doctor.nl2k.ab.ca;
Mon, 03 Jul 2023 06:30:06 -0600
Resent-From: The Doctor
Resent-Date: Mon, 3 Jul 2023 06:30:06 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f50.google.com ([209.85.208.50]:60804)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qGEUB-000ApI-15
for doctor@doctor.nl2k.ab.ca;
Mon, 03 Jul 2023 02:00:44 -0600
Received: by mail-ed1-f50.google.com with SMTP id 4fb4d7f45d1cf-51e00695e21so1319272a12.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1688371114; x=1690963114;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=FvXRjwmdhZP5MFo8egj2DQ5N74RzAstgRZ8f7YRD4WA=;
b=aMVtSJSLZcNqBZJNkILUbkm3zttZSLdp2qg80pqXCsLsKygcnFdeYwCoPqosYIg2bI
/YdELykfloQ45QzxZ5clR9nmjRxz3DPop2bEL5QS3wGW8Ce8vPxXSf4auhyPwhGSC57G
AyOpFm8il5xvH3wAnl0AtD1tWty1cCMJBJ4l2GCYTbzkxJhvsnog7fQm27uW3l7PjLt/
+heOERgFeIKTQSOm5sgzjqPjbVNbiH4DUTSk6kNvWAIfS8CH/LQOslOUwECGxx4PIOeH
+mEDgXyH+pz9sG+OfepcjsC3HNymhXErh74SQIibFAf8R4b4XTsMwD6f+ryVFkfq9ymF
Q/YA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1688371114; x=1690963114;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=FvXRjwmdhZP5MFo8egj2DQ5N74RzAstgRZ8f7YRD4WA=;
b=FDzkJ77CWGDyn5kwlhyZwoH6YJvURhl4c74yprCCpYc0LRfSRm+Db5OtOheJ9HdPah
R1l22N4WfTRFkTErO4mFzKt5f4+c8klJ/pI2ajuGAlvw51DwbVLgMxsE/WC7QUoa0Rey
N10D0TfcKmaJ38mPQyv5yjNv8Hu+KLrSu0nz8TeOUo/7GYbMK/sA+bUeLg9ApFguFaC5
p4CnE5fYwObQB7jClFoMC1hH3wYKYRMVsDhSxqns2oyYkXu21tX7RNJECoxX3CMRnnTZ
9iVVv2p1EfLXy/AjLIv4P1VQA5aJzuWmM1TlnbzQ2vXpVUvZS7uFZRvvXa71xKDunaeN
h+zQ==
X-Gm-Message-State: ABy/qLaYNT+ScTzc4bFaOhTFC7gWZG1MOz62HHaSfkfOOgF/zScywKut
ZDoBbaGJw9fYkbDhPXFou+v0A/CYMYVtOKMGFEg=
X-Google-Smtp-Source: APBJJlH8hyxEZQjQC3Z1rMN6uM/KiMb6afxsGXk20Z4t7Xg3StBPmaXVRmmnngBYMsjacCrFipNqeErMrAe8wrAzrQ4=
X-Received: by 2002:aa7:d85a:0:b0:518:7a51:7e97 with SMTP id
f26-20020aa7d85a000000b005187a517e97mr6988762eds.36.1688371113209; Mon, 03
Jul 2023 00:58:33 -0700 (PDT)
MIME-Version: 1.0
Sender: kaderbelem30@gmail.com
Received: by 2002:a05:7208:400e:b0:6c:3361:11c7 with HTTP; Mon, 3 Jul 2023
00:58:32 -0700 (PDT)
From: "Mrs Yu. Ging Yunnan"
Date: Mon, 3 Jul 2023 07:58:32 +0000
X-Google-Sender-Auth: z11WamkHO8VOfZgIXo4IXn2Y748
Message-ID:
Subject: hello dear
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 11.6
X-Spam_score_int: 116
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor
said I will not survive it because all vaccines has been given to me but
to no avian, am a China woman but I base here in France because am [...]
Content analysis details: (11.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.50 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[kaderbelem30(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[yunnanmrsyuging(at)gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
2.5 HK_SCAM_N2 BODY: No description available.
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.50 listed in wl.mailspike.net]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
2.0 HK_SCAM No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
Subject: {SPAM?} hello dear
I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor said I
will not survive it because all vaccines has been given to me but to
no avian, am a China woman but I base here in France because am
married here and I have no child for my late husband and now am a
widow. My reason of communicating you is that i have $19.2million USD
which was deposited in BNP Paribas Bank here in France by my late
husband which am the next of kin to and I want you to stand as the
beneficiary for the claim now that am about to end my race according
to my doctor. I will want you to use the fund to build an orphanage
home in my name there in your country, please kindly reply to this
message urgently if willing to handle this project.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments