beneficiary spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 17 Oct 2023 04:42:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.2 (FreeBSD))
(envelope-from)
id 1qshVh-0003Et-2d
for dave@doctor.nl2k.ab.ca;
Tue, 17 Oct 2023 04:41:13 -0600
Resent-From: The Doctor
Resent-Date: Tue, 17 Oct 2023 04:41:13 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oo1-f43.google.com ([209.85.161.43]:51392)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96.2 (FreeBSD))
(envelope-from)
id 1qsgRl-0005ni-2z
for doctor@nl2k.ab.ca;
Tue, 17 Oct 2023 03:33:10 -0600
Received: by mail-oo1-f43.google.com with SMTP id 006d021491bc7-57e3c2adbf0so3025802eaf.2
for; Tue, 17 Oct 2023 02:31:07 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1697535061; x=1698139861; darn=nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=sTWkWG/qFC20RGw++Z/AWA0FmYRSkgfdypONh2SuZKo=;
b=hGSywuuXI5Qf0ODSxOztiGXX+0JJZAjZmVbje4DzurupicOtcVCi3NB0zBHCmtJcSc
/qQY2bfGnLQ5EVj8S7e7ZrRJ+Vj2CIkm+hTzJlZ2jVBZ2FjwK2+bSqilOymzuDrV5MvE
HtLi3LVpKe+IQrBt6VtUMSVG+b7M26P0R+4Ty6pe5TbVyjmVeIvJpOk21Wjy+WmmpBhD
b9QVarR5aRbWzKEcW5YmKAk4DAVNKjFYF5DAE5yZ7Ip1TlKiKAgDJWFlgdvtQClQs0g8
SNdMxL9t/SyB5Hssz0J3HUIECNZnAA3OeDEfIox0X6lVY5ufZbh0ki8DDFk4CY4avYnV
cr9g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1697535061; x=1698139861;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=sTWkWG/qFC20RGw++Z/AWA0FmYRSkgfdypONh2SuZKo=;
b=tKwgXt1qUtNcjJUzdsBehjESqHF0tpmHpsKJRnh3zQa9eqrvxhPpsLg5cYI6Y60nzl
BzIHlFVzAcfhE9CQJaqSpQ/6gpdDI4PkyYxQSt+oYUct6ogHt4Zfjba/e0mjxEf8S3pk
nLDk6nU6vKwCQvrLgKXmwsxRXhbnmTFD4OJxxxv0GzWmbtDhdrzLaDrfgwoCjnvtUjyw
LHrhV8vLnIDtOVmiGidU3x9QabvT3+2D1RdyErSDuONIah4fL4xjnTvr9QOfXgxdAP+M
q8dx03gCPhmopR8IJMIrNe4pEO1oJhYoIfSccbexKNSs6LSDsB7QjJGQ6J7lKV8Vfve9
WK+w==
X-Gm-Message-State: AOJu0Yz0B8DcV3ipwiiBcFRG9dU7P8WS/9KZCbf/qRwcaZegflLxMr9N
oAG6yz84xCeQHDjA4J/dr6yFLh6fduf8f+H0aI0=
X-Google-Smtp-Source: AGHT+IE3S3agOVCCnU7vIsqqFhKA94JyGjbWDN5ODukC2G/bklurPWs0Ljq7rWMNU+95I9WCro8KleU890uNO9rGVeY=
X-Received: by 2002:a05:6830:10ce:b0:6bd:b0c9:a8d with SMTP id
z14-20020a05683010ce00b006bdb0c90a8dmr1591450oto.25.1697535061149; Tue, 17
Oct 2023 02:31:01 -0700 (PDT)
MIME-Version: 1.0
Reply-To: gw522835@gmail.com
From: Kevin Martins
Date: Tue, 17 Oct 2023 02:30:43 -0700
Message-ID:
Subject: Attention to you the Beneficiary
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000005050c50607e62e4d"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 12.5
X-Spam_score_int: 125
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Attention to you the Beneficiary I am writing to inform you
that Central Intelligence Agency Director and United Nation Recovering Team
Director have recovered some funds to the Glory of God they decided to reward
50 people with the [...]
Content analysis details: (12.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.161.43 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.161.43 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[zaggaashakimi(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[gw522835(at)gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
2.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
2.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Attention to you the Beneficiary
X-Antivirus: AVG (VPS 231016-6, 10/16/2023), Inbound message
X-Antivirus-Status: Clean
--0000000000005050c50607e62e4d
Content-Type: text/plain; charset="UTF-8"
Attention to you the Beneficiary
I am writing to inform you that Central Intelligence Agency Director and
United Nation Recovering Team Director have recovered some funds to the
Glory of God they decided to reward 50 people with the sum of $10.800, 000,
00 million USD as one of the Victim, and your email is included, Now the
fund is deposited to National Bank for a successful arrangement on how you
can receive the funds.
Be aware that every necessary arrangement has been made successfully with
the National Bank Director, and the $10.800, 000, 00 million USD is now
available in National Bank, So you are to contact and reconfirm your full
information to Mr. George Wilson at following Email: ( gw522834@gmail.com )
for more information about the fund.
1. Full Name:______
2. Address:________
3. Country:________
4. Phone Number:___
Contact person Mr. George Wilson at following Email
gw522834@gmail.com )
Best Regards,
Kevin Martins
>From CIA Director and United Nation Recovering Team Director
--0000000000005050c50607e62e4d
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--0000000000005050c50607e62e4d--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 17 Oct 2023 04:42:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.2 (FreeBSD))
(envelope-from
id 1qshVh-0003Et-2d
for dave@doctor.nl2k.ab.ca;
Tue, 17 Oct 2023 04:41:13 -0600
Resent-From: The Doctor
Resent-Date: Tue, 17 Oct 2023 04:41:13 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oo1-f43.google.com ([209.85.161.43]:51392)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96.2 (FreeBSD))
(envelope-from
id 1qsgRl-0005ni-2z
for doctor@nl2k.ab.ca;
Tue, 17 Oct 2023 03:33:10 -0600
Received: by mail-oo1-f43.google.com with SMTP id 006d021491bc7-57e3c2adbf0so3025802eaf.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1697535061; x=1698139861; darn=nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=sTWkWG/qFC20RGw++Z/AWA0FmYRSkgfdypONh2SuZKo=;
b=hGSywuuXI5Qf0ODSxOztiGXX+0JJZAjZmVbje4DzurupicOtcVCi3NB0zBHCmtJcSc
/qQY2bfGnLQ5EVj8S7e7ZrRJ+Vj2CIkm+hTzJlZ2jVBZ2FjwK2+bSqilOymzuDrV5MvE
HtLi3LVpKe+IQrBt6VtUMSVG+b7M26P0R+4Ty6pe5TbVyjmVeIvJpOk21Wjy+WmmpBhD
b9QVarR5aRbWzKEcW5YmKAk4DAVNKjFYF5DAE5yZ7Ip1TlKiKAgDJWFlgdvtQClQs0g8
SNdMxL9t/SyB5Hssz0J3HUIECNZnAA3OeDEfIox0X6lVY5ufZbh0ki8DDFk4CY4avYnV
cr9g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1697535061; x=1698139861;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=sTWkWG/qFC20RGw++Z/AWA0FmYRSkgfdypONh2SuZKo=;
b=tKwgXt1qUtNcjJUzdsBehjESqHF0tpmHpsKJRnh3zQa9eqrvxhPpsLg5cYI6Y60nzl
BzIHlFVzAcfhE9CQJaqSpQ/6gpdDI4PkyYxQSt+oYUct6ogHt4Zfjba/e0mjxEf8S3pk
nLDk6nU6vKwCQvrLgKXmwsxRXhbnmTFD4OJxxxv0GzWmbtDhdrzLaDrfgwoCjnvtUjyw
LHrhV8vLnIDtOVmiGidU3x9QabvT3+2D1RdyErSDuONIah4fL4xjnTvr9QOfXgxdAP+M
q8dx03gCPhmopR8IJMIrNe4pEO1oJhYoIfSccbexKNSs6LSDsB7QjJGQ6J7lKV8Vfve9
WK+w==
X-Gm-Message-State: AOJu0Yz0B8DcV3ipwiiBcFRG9dU7P8WS/9KZCbf/qRwcaZegflLxMr9N
oAG6yz84xCeQHDjA4J/dr6yFLh6fduf8f+H0aI0=
X-Google-Smtp-Source: AGHT+IE3S3agOVCCnU7vIsqqFhKA94JyGjbWDN5ODukC2G/bklurPWs0Ljq7rWMNU+95I9WCro8KleU890uNO9rGVeY=
X-Received: by 2002:a05:6830:10ce:b0:6bd:b0c9:a8d with SMTP id
z14-20020a05683010ce00b006bdb0c90a8dmr1591450oto.25.1697535061149; Tue, 17
Oct 2023 02:31:01 -0700 (PDT)
MIME-Version: 1.0
Reply-To: gw522835@gmail.com
From: Kevin Martins
Date: Tue, 17 Oct 2023 02:30:43 -0700
Message-ID:
Subject: Attention to you the Beneficiary
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000005050c50607e62e4d"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 12.5
X-Spam_score_int: 125
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Attention to you the Beneficiary I am writing to inform you
that Central Intelligence Agency Director and United Nation Recovering Team
Director have recovered some funds to the Glory of God they decided to reward
50 people with the [...]
Content analysis details: (12.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.161.43 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.161.43 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[zaggaashakimi(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[gw522835(at)gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
2.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
2.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Attention to you the Beneficiary
X-Antivirus: AVG (VPS 231016-6, 10/16/2023), Inbound message
X-Antivirus-Status: Clean
--0000000000005050c50607e62e4d
Content-Type: text/plain; charset="UTF-8"
Attention to you the Beneficiary
I am writing to inform you that Central Intelligence Agency Director and
United Nation Recovering Team Director have recovered some funds to the
Glory of God they decided to reward 50 people with the sum of $10.800, 000,
00 million USD as one of the Victim, and your email is included, Now the
fund is deposited to National Bank for a successful arrangement on how you
can receive the funds.
Be aware that every necessary arrangement has been made successfully with
the National Bank Director, and the $10.800, 000, 00 million USD is now
available in National Bank, So you are to contact and reconfirm your full
information to Mr. George Wilson at following Email: ( gw522834@gmail.com )
for more information about the fund.
1. Full Name:______
2. Address:________
3. Country:________
4. Phone Number:___
Contact person Mr. George Wilson at following Email
gw522834@gmail.com )Best Regards,
Kevin Martins
>From CIA Director and United Nation Recovering Team Director
--0000000000005050c50607e62e4d
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Attention to you the Beneficiary
I am writing to in=
form you that Central Intelligence Agency Director and United Nation Recove=
ring Team Director have recovered some funds to the Glory of God they decid=
ed to reward 50 people with the sum of $10.800, 000, 00 million USD as one =
of the Victim, and your email is included, Now the fund is deposited to Nat=
ional Bank for a successful arrangement on how you can receive the funds.
r>
Be aware that every necessary arrangement has been made successfully =
with the National Bank Director, and the $10.800, 000, 00 million USD is no=
w available in National Bank, So you are to contact and reconfirm your full=
information to Mr. George Wilson at following Email: (
w522834@gmail.com">gw522834@gmail.com ) for more information about the =
fund.
1. Full Name:______
2. Address:________
3. Country:_=
_______
4. Phone Number:___
Contact person Mr. George Wilson at f=
ollowing Email gw522834@gmail.com<=
/a> )
Best Regards,
Kevin Martins
From CIA Director and United=
Nation Recovering Team Director
I am writing to in=
form you that Central Intelligence Agency Director and United Nation Recove=
ring Team Director have recovered some funds to the Glory of God they decid=
ed to reward 50 people with the sum of $10.800, 000, 00 million USD as one =
of the Victim, and your email is included, Now the fund is deposited to Nat=
ional Bank for a successful arrangement on how you can receive the funds.
r>
Be aware that every necessary arrangement has been made successfully =
with the National Bank Director, and the $10.800, 000, 00 million USD is no=
w available in National Bank, So you are to contact and reconfirm your full=
information to Mr. George Wilson at following Email: (
w522834@gmail.com">gw522834@gmail.com ) for more information about the =
fund.
1. Full Name:______
2. Address:________
3. Country:_=
_______
4. Phone Number:___
Contact person Mr. George Wilson at f=
ollowing Email
gw522834@gmail.com<=/a> )
Best Regards,
Kevin Martins
From CIA Director and United=
Nation Recovering Team Director
--0000000000005050c50607e62e4d--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments