Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 19 Jul 2023 08:19:49 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from)
id 1qM7zS-000Kfh-2F
for dave@doctor.nl2k.ab.ca;
Wed, 19 Jul 2023 08:17:18 -0600
Resent-From: The Doctor
Resent-Date: Wed, 19 Jul 2023 08:17:18 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f51.google.com ([209.85.208.51]:42261)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1qM2b6-0001Zq-15
for doctor@doctor.nl2k.ab.ca;
Wed, 19 Jul 2023 02:31:51 -0600
Received: by mail-ed1-f51.google.com with SMTP id 4fb4d7f45d1cf-51e344efd75so1173571a12.1
for; Wed, 19 Jul 2023 01:30:08 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1689755402; x=1692347402;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=WtOhCtqoN038sOILSjsX7hQ7FrT0DQhwDxA69Mrrgvg=;
b=ZI3Slvmr3AyVJhQqAwEQbqanNURjSbsPOq3Vm8PwIVEmasgII02J8ORtkxcjlPPZb0
YcM9wUnjPVYIY7kPIhDnJjtLc4p5pfBYsgogPpIwPLMB3gPuDFml8GuPH/mu7+HPjt6J
MuST3fe6NDkavlZcu7DwSzb9n3RL3+uBLDIKr5f+HKhnIHG2FY4TGO6d6puKrlVjk6U8
LJffrXSNvwDYrgf1cEP2qQuWrJejRteRpmlXtT9DY7c35dVy6Itw63ySJurrD49qhGhd
vVKKYOV9L4jEo9ANIpG1HfgnG7K+1CX3Izbslrg3vLY7NGySGJ6TGNWoDw6jSEbX4fUM
cShA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1689755402; x=1692347402;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=WtOhCtqoN038sOILSjsX7hQ7FrT0DQhwDxA69Mrrgvg=;
b=TLW5WZl5CZ0uPP3VDXkA9q3S7PnW6PK3DXIEMxWLYa4l4e9HEN42eFWgwfakqLlG5u
4r9nbXfmwyfSu+yuzKmB0s69UpernJ0o4L4jaY9s+2ukgjWGZ+wiJ7PDmucjiV9RIaGE
QYvuM/Qfpt7YpqmlMROlfMrruedZ45sbfsDmTXJcD+kISf2xwQGALUVZZ301ecFLlnQr
xaNNKUv7TkLtSl6kXPl6irEPZz85Pm7iADEvXB1x6/wkGijHX57WMb3+UM/S5HqJtRYh
Efeo/Ku3Jy2zYSH+g+ff1IDnRwSo8Ls1WbE7cKKocJhsboq8RIcT5v7WlUIkvOhdA28X
SOMw==
X-Gm-Message-State: ABy/qLbEN+7pnsrX+uixqjkuvUg/tt0lxWY3L6nMKQBrbt5ElLpZbvhn
msnKRB9W/RfwhrIO4XpdH39lgZWdKzauz+SqK7g=
X-Google-Smtp-Source: APBJJlGI5Wj4V4/a4ZyU+LGNhcgopQtzpJV2db0DUb+Y2eLnCnAa1f5HZQqbJ4naXVC51ObfA8QMDU4SABguFA/isxg=
X-Received: by 2002:a17:906:1cd:b0:98f:8481:24b3 with SMTP id
13-20020a17090601cd00b0098f848124b3mr1468995ejj.37.1689755380909; Wed, 19 Jul
2023 01:29:40 -0700 (PDT)
MIME-Version: 1.0
Sender: ibrahmali655@gmail.com
Received: by 2002:a05:640c:2a87:b0:1ce:a7b4:ad25 with HTTP; Wed, 19 Jul 2023
01:29:40 -0700 (PDT)
From: "Mrs Yu. Ging Yunnan"
Date: Wed, 19 Jul 2023 08:29:40 +0000
X-Google-Sender-Auth: ueQ1p6EOxc3LJVhJWblH7MxbrcE
Message-ID:
Subject: hello dear
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 11.7
X-Spam_score_int: 117
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor
said I will not survive it because all vaccines has been given to me but
to no avian, am a China woman but I base here in France because am [...]
Content analysis details: (11.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[ibrahmali655(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[yunnanmrsyuging(at)gmail.com]
2.5 HK_SCAM_N2 BODY: No description available.
2.5 MILLION_USD BODY: Talks about millions of dollars
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.51 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.51 listed in wl.mailspike.net]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS No description available.
2.0 HK_SCAM No description available.
3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
Subject: {SPAM?} hello dear
I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor said I
will not survive it because all vaccines has been given to me but to
no avian, am a China woman but I base here in France because am
married here and I have no child for my late husband and now am a
widow. My reason of communicating you is that i have $17.2million USD
which was deposited in BNP Paribas Bank here in France by my late
husband which am the next of kin to and I want you to stand as the
beneficiary for the claim now that am about to end my race according
to my doctor. I will want you to use the fund to build an orphanage
home in my name there in your country, please kindly reply to this
message urgently if willing to handle this project
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 19 Jul 2023 08:19:49 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1qM7zS-000Kfh-2F
for dave@doctor.nl2k.ab.ca;
Wed, 19 Jul 2023 08:17:18 -0600
Resent-From: The Doctor
Resent-Date: Wed, 19 Jul 2023 08:17:18 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f51.google.com ([209.85.208.51]:42261)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qM2b6-0001Zq-15
for doctor@doctor.nl2k.ab.ca;
Wed, 19 Jul 2023 02:31:51 -0600
Received: by mail-ed1-f51.google.com with SMTP id 4fb4d7f45d1cf-51e344efd75so1173571a12.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1689755402; x=1692347402;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=WtOhCtqoN038sOILSjsX7hQ7FrT0DQhwDxA69Mrrgvg=;
b=ZI3Slvmr3AyVJhQqAwEQbqanNURjSbsPOq3Vm8PwIVEmasgII02J8ORtkxcjlPPZb0
YcM9wUnjPVYIY7kPIhDnJjtLc4p5pfBYsgogPpIwPLMB3gPuDFml8GuPH/mu7+HPjt6J
MuST3fe6NDkavlZcu7DwSzb9n3RL3+uBLDIKr5f+HKhnIHG2FY4TGO6d6puKrlVjk6U8
LJffrXSNvwDYrgf1cEP2qQuWrJejRteRpmlXtT9DY7c35dVy6Itw63ySJurrD49qhGhd
vVKKYOV9L4jEo9ANIpG1HfgnG7K+1CX3Izbslrg3vLY7NGySGJ6TGNWoDw6jSEbX4fUM
cShA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1689755402; x=1692347402;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=WtOhCtqoN038sOILSjsX7hQ7FrT0DQhwDxA69Mrrgvg=;
b=TLW5WZl5CZ0uPP3VDXkA9q3S7PnW6PK3DXIEMxWLYa4l4e9HEN42eFWgwfakqLlG5u
4r9nbXfmwyfSu+yuzKmB0s69UpernJ0o4L4jaY9s+2ukgjWGZ+wiJ7PDmucjiV9RIaGE
QYvuM/Qfpt7YpqmlMROlfMrruedZ45sbfsDmTXJcD+kISf2xwQGALUVZZ301ecFLlnQr
xaNNKUv7TkLtSl6kXPl6irEPZz85Pm7iADEvXB1x6/wkGijHX57WMb3+UM/S5HqJtRYh
Efeo/Ku3Jy2zYSH+g+ff1IDnRwSo8Ls1WbE7cKKocJhsboq8RIcT5v7WlUIkvOhdA28X
SOMw==
X-Gm-Message-State: ABy/qLbEN+7pnsrX+uixqjkuvUg/tt0lxWY3L6nMKQBrbt5ElLpZbvhn
msnKRB9W/RfwhrIO4XpdH39lgZWdKzauz+SqK7g=
X-Google-Smtp-Source: APBJJlGI5Wj4V4/a4ZyU+LGNhcgopQtzpJV2db0DUb+Y2eLnCnAa1f5HZQqbJ4naXVC51ObfA8QMDU4SABguFA/isxg=
X-Received: by 2002:a17:906:1cd:b0:98f:8481:24b3 with SMTP id
13-20020a17090601cd00b0098f848124b3mr1468995ejj.37.1689755380909; Wed, 19 Jul
2023 01:29:40 -0700 (PDT)
MIME-Version: 1.0
Sender: ibrahmali655@gmail.com
Received: by 2002:a05:640c:2a87:b0:1ce:a7b4:ad25 with HTTP; Wed, 19 Jul 2023
01:29:40 -0700 (PDT)
From: "Mrs Yu. Ging Yunnan"
Date: Wed, 19 Jul 2023 08:29:40 +0000
X-Google-Sender-Auth: ueQ1p6EOxc3LJVhJWblH7MxbrcE
Message-ID:
Subject: hello dear
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 11.7
X-Spam_score_int: 117
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor
said I will not survive it because all vaccines has been given to me but
to no avian, am a China woman but I base here in France because am [...]
Content analysis details: (11.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[ibrahmali655(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[yunnanmrsyuging(at)gmail.com]
2.5 HK_SCAM_N2 BODY: No description available.
2.5 MILLION_USD BODY: Talks about millions of dollars
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.51 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.51 listed in wl.mailspike.net]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS No description available.
2.0 HK_SCAM No description available.
3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
Subject: {SPAM?} hello dear
I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor said I
will not survive it because all vaccines has been given to me but to
no avian, am a China woman but I base here in France because am
married here and I have no child for my late husband and now am a
widow. My reason of communicating you is that i have $17.2million USD
which was deposited in BNP Paribas Bank here in France by my late
husband which am the next of kin to and I want you to stand as the
beneficiary for the claim now that am about to end my race according
to my doctor. I will want you to use the fund to build an orphanage
home in my name there in your country, please kindly reply to this
message urgently if willing to handle this project
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments