Nigerian spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 23 Jul 2023 00:37:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from)
id 1qNSfi-0009ID-1o
for dave@doctor.nl2k.ab.ca;
Sun, 23 Jul 2023 00:34:26 -0600
Resent-From: The Doctor
Resent-Date: Sun, 23 Jul 2023 00:34:26 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f52.google.com ([209.85.218.52]:44070)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1qNQwf-0003uE-0k
for doctor@doctor.nl2k.ab.ca;
Sat, 22 Jul 2023 22:43:53 -0600
Received: by mail-ej1-f52.google.com with SMTP id a640c23a62f3a-98de21518fbso549596666b.0
for; Sat, 22 Jul 2023 21:41:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1690087303; x=1690692103;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=KH2r0EsgzxQkSOqN4jI6fAvHFA47eQNRS196vDdDb68=;
b=JN9vlphw8zIbumSXFvdXCC5AT/28sz1KqpjYMXMA0SMyjwy2qG+cFepPetUsgb+NXG
FHJz4EGjZabxVxsxxsRVMQldRVTC/Ul/IYBHw6sbs17mVA0mMJDeNkLAzJAiGSvB2lOI
geIKepoqq0xjDqXK/OTlzf0xhbGotVq5w1GNTy3htIZK3u3mOortbs+DZJLV3ISDL2pO
YGuDy7U2kaAmbNpRkvABunlb9P8Vc12BpFGwl9FvZnxCv6g/5cVFwPgt0bJl1cA1U0T9
ynupxNut5xkeHMWXKiJqOAEAtso4iGmTVUcAkSnz86zXt+Rmhcm4zrhMnKscIEIPhcRs
eeCQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1690087303; x=1690692103;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=KH2r0EsgzxQkSOqN4jI6fAvHFA47eQNRS196vDdDb68=;
b=Xf+H7HIvwVYk+2Kn+dBtY5RbSngWHEn6WU9Ov97BuYfjKlGhTMpMJDqvFHNdrViYPQ
8SgVO9/32Vqj2KlMYyQX43Tfb8XvbDeru9sW4Zhm3+KP75yIfvfEcdSbbYUoxqyDJsIF
0ajyBpwHtoS64jOttUdcFw1LLUHiujPzl33e3K89dSNxKW46lBEmyuSvAAiDzrJKPwd7
oIu14M4RKlx37NxWd0NUU2rdOXMe4MAKVD0Z160BAorFK9kz0ES0sPv8r8hldszuf7T/
kzdHuz7tCKNboPHYfdWEw0vJ1sf5NGFOiRFgYHFbv2IzfBlcnEPFES8wGl/2znxZBuuG
O0tQ==
X-Gm-Message-State: ABy/qLYg9JyaoLFgphbqEjxvZMVH7VueQyYd0absAt2Ite24MUs3djwi
R6E/VJ4qTuS0GZCLrKXy4bleBnSvBiziyFAu5sc=
X-Google-Smtp-Source: APBJJlFj+y1leX5TnDkx1p34Fflzu5WjOB/kwUJc7B4N4uyQ5CKUkbF0cAWZsAnmeGzF+xem+hev/l3EfOKkEneTjsg=
X-Received: by 2002:a17:906:538f:b0:991:bf04:204f with SMTP id
g15-20020a170906538f00b00991bf04204fmr6276359ejo.60.1690087302923; Sat, 22
Jul 2023 21:41:42 -0700 (PDT)
MIME-Version: 1.0
Sender: sebegolouk93@gmail.com
Received: by 2002:a17:907:2d8c:b0:994:1da0:875b with HTTP; Sat, 22 Jul 2023
21:41:42 -0700 (PDT)
From: "Mrs Yu. Ging Yunnan"
Date: Sun, 23 Jul 2023 04:41:42 +0000
X-Google-Sender-Auth: AFwbtx7Wssxf7VvfFg9MjkEeQ7c
Message-ID:
Subject: hello dear
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 11.9
X-Spam_score_int: 119
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor
said I will not survive it because all vaccines has been given to me but
to no avian, am a China woman but I base here in France because am [...]
Content analysis details: (11.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[sebegolouk93(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[yunnanmrsyuging(at)gmail.com]
2.5 HK_SCAM_N2 BODY: No description available.
2.5 MILLION_USD BODY: Talks about millions of dollars
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.218.52 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.52 listed in wl.mailspike.net]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
2.0 HK_SCAM No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
Subject: {SPAM?} hello dear
X-Antivirus: AVG (VPS 230722-6, 7/22/2023), Inbound message
X-Antivirus-Status: Clean
I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor said I
will not survive it because all vaccines has been given to me but to
no avian, am a China woman but I base here in France because am
married here and I have no child for my late husband and now am a
widow. My reason of communicating you is that i have $14 .2million USD
which was deposited in BNP Paribas Bank here in France by my late
husband which am the next of kin to and I want you to stand as the
beneficiary for the claim now that am about to end my race according
to my doctor. I will want you to use the fund to build an orphanage
home in my name there in your country, please kindly reply to this
message urgently if willing to handle this project
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 23 Jul 2023 00:37:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1qNSfi-0009ID-1o
for dave@doctor.nl2k.ab.ca;
Sun, 23 Jul 2023 00:34:26 -0600
Resent-From: The Doctor
Resent-Date: Sun, 23 Jul 2023 00:34:26 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f52.google.com ([209.85.218.52]:44070)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qNQwf-0003uE-0k
for doctor@doctor.nl2k.ab.ca;
Sat, 22 Jul 2023 22:43:53 -0600
Received: by mail-ej1-f52.google.com with SMTP id a640c23a62f3a-98de21518fbso549596666b.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1690087303; x=1690692103;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=KH2r0EsgzxQkSOqN4jI6fAvHFA47eQNRS196vDdDb68=;
b=JN9vlphw8zIbumSXFvdXCC5AT/28sz1KqpjYMXMA0SMyjwy2qG+cFepPetUsgb+NXG
FHJz4EGjZabxVxsxxsRVMQldRVTC/Ul/IYBHw6sbs17mVA0mMJDeNkLAzJAiGSvB2lOI
geIKepoqq0xjDqXK/OTlzf0xhbGotVq5w1GNTy3htIZK3u3mOortbs+DZJLV3ISDL2pO
YGuDy7U2kaAmbNpRkvABunlb9P8Vc12BpFGwl9FvZnxCv6g/5cVFwPgt0bJl1cA1U0T9
ynupxNut5xkeHMWXKiJqOAEAtso4iGmTVUcAkSnz86zXt+Rmhcm4zrhMnKscIEIPhcRs
eeCQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1690087303; x=1690692103;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=KH2r0EsgzxQkSOqN4jI6fAvHFA47eQNRS196vDdDb68=;
b=Xf+H7HIvwVYk+2Kn+dBtY5RbSngWHEn6WU9Ov97BuYfjKlGhTMpMJDqvFHNdrViYPQ
8SgVO9/32Vqj2KlMYyQX43Tfb8XvbDeru9sW4Zhm3+KP75yIfvfEcdSbbYUoxqyDJsIF
0ajyBpwHtoS64jOttUdcFw1LLUHiujPzl33e3K89dSNxKW46lBEmyuSvAAiDzrJKPwd7
oIu14M4RKlx37NxWd0NUU2rdOXMe4MAKVD0Z160BAorFK9kz0ES0sPv8r8hldszuf7T/
kzdHuz7tCKNboPHYfdWEw0vJ1sf5NGFOiRFgYHFbv2IzfBlcnEPFES8wGl/2znxZBuuG
O0tQ==
X-Gm-Message-State: ABy/qLYg9JyaoLFgphbqEjxvZMVH7VueQyYd0absAt2Ite24MUs3djwi
R6E/VJ4qTuS0GZCLrKXy4bleBnSvBiziyFAu5sc=
X-Google-Smtp-Source: APBJJlFj+y1leX5TnDkx1p34Fflzu5WjOB/kwUJc7B4N4uyQ5CKUkbF0cAWZsAnmeGzF+xem+hev/l3EfOKkEneTjsg=
X-Received: by 2002:a17:906:538f:b0:991:bf04:204f with SMTP id
g15-20020a170906538f00b00991bf04204fmr6276359ejo.60.1690087302923; Sat, 22
Jul 2023 21:41:42 -0700 (PDT)
MIME-Version: 1.0
Sender: sebegolouk93@gmail.com
Received: by 2002:a17:907:2d8c:b0:994:1da0:875b with HTTP; Sat, 22 Jul 2023
21:41:42 -0700 (PDT)
From: "Mrs Yu. Ging Yunnan"
Date: Sun, 23 Jul 2023 04:41:42 +0000
X-Google-Sender-Auth: AFwbtx7Wssxf7VvfFg9MjkEeQ7c
Message-ID:
Subject: hello dear
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 11.9
X-Spam_score_int: 119
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor
said I will not survive it because all vaccines has been given to me but
to no avian, am a China woman but I base here in France because am [...]
Content analysis details: (11.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[sebegolouk93(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[yunnanmrsyuging(at)gmail.com]
2.5 HK_SCAM_N2 BODY: No description available.
2.5 MILLION_USD BODY: Talks about millions of dollars
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.218.52 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.52 listed in wl.mailspike.net]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
2.0 HK_SCAM No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
Subject: {SPAM?} hello dear
X-Antivirus: AVG (VPS 230722-6, 7/22/2023), Inbound message
X-Antivirus-Status: Clean
I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor said I
will not survive it because all vaccines has been given to me but to
no avian, am a China woman but I base here in France because am
married here and I have no child for my late husband and now am a
widow. My reason of communicating you is that i have $14 .2million USD
which was deposited in BNP Paribas Bank here in France by my late
husband which am the next of kin to and I want you to stand as the
beneficiary for the claim now that am about to end my race according
to my doctor. I will want you to use the fund to build an orphanage
home in my name there in your country, please kindly reply to this
message urgently if willing to handle this project
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments