Nigerian spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 25 Feb 2024 12:22:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1reK4A-0000000020Y-16rd
for dave@doctor.nl2k.ab.ca;
Sun, 25 Feb 2024 12:21:38 -0700
Resent-From: The Doctor
Resent-Date: Sun, 25 Feb 2024 12:21:38 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f180.google.com ([209.85.210.180]:49382)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1reHDp-00000000K9X-0ijL
for doctor@doctor.nl2k.ab.ca;
Sun, 25 Feb 2024 09:19:29 -0700
Received: by mail-pf1-f180.google.com with SMTP id d2e1a72fcca58-6e508d9d80eso152025b3a.2
for; Sun, 25 Feb 2024 08:17:30 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1708877844; x=1709482644; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=hnBRpakTk0jgsc0KvsWCNdrjKSyd45sZBi1aYDYNOW0=;
b=MixdV/g1siP3G2O4m2bGW7Kwr6lvu67EdEBqdBUarO5biJVlxMZ/NJ61N4y/98jzqi
HayPWgSvZXKmxEoGCgn21UyATMAomMllt78lHfpo/q/WzDR5W9FqkjOxQ7HcDp09WkcE
Q3aC82dP++wPqp/9Og4JhSj94V3VRQ+rvB7aNpqTXny8Ve1QC/Bb35c/Tutsz28vNLJL
FTwFccVDIRtHoH+AN9786vyVk2dMvU/rGdALYJ7Pk2MZEr9ZjYSoIYVyHmaeZ5++0wUt
aDIAYdSyU7BD2te5IvFFttnVfb03b+ciL1mugt1qixc0zxHq54be3jZGiT75K7zSLY9W
+W/g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1708877844; x=1709482644;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=hnBRpakTk0jgsc0KvsWCNdrjKSyd45sZBi1aYDYNOW0=;
b=q4/qn8XoBnHAEodxRkXVjGkymkgPc92LsXE3/fUSrhVVYipcMNtAXQ5lRbevqcklzg
z0IFJqnjaj5212/UeQO2+RNGE3DwIkOiGIdZP2z1Q9JVn/y6+a9S4x0YldLtF/TsHNmW
ytA/ujDA+J9dowwSRary5luAY05ZnO5Sx8wWALJUbe8S0qNzy/QwETGDfE7geOh05PNX
HrhbQIvEHCzwF9HLAcKhwM9sX4PaHQ1RGc21yHRGavdyotaJYGjHbgukTMBXNhilzVXQ
mza/byBm2BBABfO5K2XhrTVvkaVye08E1ADSgVwkJYNOaHC1W1JCUMdNDu2fHFJBLgWt
RYmQ==
X-Forwarded-Encrypted: i=1; AJvYcCV/Dbdc873rMlrGjqVZxIApo4jd+8sMfaW2ngWnRD8i/uYvrzAnSjLiSN5MMyuYjDm7AhFXsDTUx6TLg7nxuIuOMfV0mfRhKbg=
X-Gm-Message-State: AOJu0YyP/t9qTHn9/emD2Hr/SBa4GBYEndvYik3ywCmezCtFiU0Zui1A
WxRceBp6K58mLq5rpeXVVxw06DQ1vGRiarcMiKOGPAnAg3W9Bl4rbFlE9fKhU7ARYAa5zI3+qLR
yRn0VrsJvlmJI+Nm/I3EZMxWBe6c=
X-Google-Smtp-Source: AGHT+IEek5xVDB/IwkBN7q/8MwA6HLKsWPR86vkU6h/Q7Q3oOQ7HDjKANyswHa0YV3gBzZDWtOpq3LjxbxbA++0JFdE=
X-Received: by 2002:a05:6a21:920a:b0:1a0:5f8b:2cad with SMTP id
tl10-20020a056a21920a00b001a05f8b2cadmr7367521pzb.13.1708877843983; Sun, 25
Feb 2024 08:17:23 -0800 (PST)
MIME-Version: 1.0
From: "Mrs Yu. Ging Yunnan"
Date: Sun, 25 Feb 2024 16:17:24 +0000
Message-ID:
Subject: hello dear
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000daf5db0612372002"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 10.6
X-Spam_score_int: 106
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: hello dear I am Mrs Yu. Ging Yunnan, and i have Covid-19 and
the doctor said I will not survive it because all vaccines has been given
to me but to no avian, am a China woman but I base here in France because
am married here and I have no child for my late husband and now am a widow.
Content analysis details: (10.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[sodikamond103(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[sodikamond103(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.210.180 listed in list.dnswl.org]
2.5 MILLION_USD BODY: Talks about millions of dollars
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.180 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} hello dear
--000000000000daf5db0612372002
Content-Type: text/plain; charset="UTF-8"
hello dear
I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor said I will
not survive it because all vaccines has been given to me but to no avian,
am a China
woman but I base here in France because am married here and I have no child
for my late husband and now am a widow.
My reason of communicating you is that i have $23 .3 million USD which was
deposited in BNP Paribas Bank here in France by my late husband which am
the next of
kin to and I want you to stand as the beneficiary for the claim now that am
about to end my race according to my doctor.
I will want you to use the fund to build an orphanage home in my name there
in your country, please kindly reply to this message urgently if willing to
handle this project.
God bless you and i wait your swift response asap.
Yours fairly friend,
Mrs Yu. Ging Yunnan.
--000000000000daf5db0612372002
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
ize:11pt;font-family:"Calibri","sans-serif"">hello dear=
ize:11pt;font-family:"Calibri","sans-serif"">I am Mrs Y=
u. Ging=C2=A0 =C2=A0Yunnan, and i have Covid-19 a=
nd the doctor
said I will not survive it because all vaccines has been given to me but to=
no
avian, am a China
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">woman but =
I base here in France because am married here and
I have no child for my late husband and now am a widow.
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">My reason =
of communicating you is that i have $23 .3 million
USD which was deposited in BNP Paribas Bank here in France by my late husba=
nd
which am the next of
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">kin to and=
I want you to stand as the beneficiary for the
claim now that am about to end my race according to my doctor.=
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">I will wan=
t you to use the fund to build an orphanage home
in my name there in your country, please kindly reply to this message urgen=
tly
if willing to handle this project.
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">God bless =
you and i wait your swift response asap.
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">Yours fair=
ly friend,
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">Mrs Yu. Gi=
ng Yunnan.
--000000000000daf5db0612372002--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 25 Feb 2024 12:22:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1reK4A-0000000020Y-16rd
for dave@doctor.nl2k.ab.ca;
Sun, 25 Feb 2024 12:21:38 -0700
Resent-From: The Doctor
Resent-Date: Sun, 25 Feb 2024 12:21:38 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f180.google.com ([209.85.210.180]:49382)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1reHDp-00000000K9X-0ijL
for doctor@doctor.nl2k.ab.ca;
Sun, 25 Feb 2024 09:19:29 -0700
Received: by mail-pf1-f180.google.com with SMTP id d2e1a72fcca58-6e508d9d80eso152025b3a.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1708877844; x=1709482644; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=hnBRpakTk0jgsc0KvsWCNdrjKSyd45sZBi1aYDYNOW0=;
b=MixdV/g1siP3G2O4m2bGW7Kwr6lvu67EdEBqdBUarO5biJVlxMZ/NJ61N4y/98jzqi
HayPWgSvZXKmxEoGCgn21UyATMAomMllt78lHfpo/q/WzDR5W9FqkjOxQ7HcDp09WkcE
Q3aC82dP++wPqp/9Og4JhSj94V3VRQ+rvB7aNpqTXny8Ve1QC/Bb35c/Tutsz28vNLJL
FTwFccVDIRtHoH+AN9786vyVk2dMvU/rGdALYJ7Pk2MZEr9ZjYSoIYVyHmaeZ5++0wUt
aDIAYdSyU7BD2te5IvFFttnVfb03b+ciL1mugt1qixc0zxHq54be3jZGiT75K7zSLY9W
+W/g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1708877844; x=1709482644;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=hnBRpakTk0jgsc0KvsWCNdrjKSyd45sZBi1aYDYNOW0=;
b=q4/qn8XoBnHAEodxRkXVjGkymkgPc92LsXE3/fUSrhVVYipcMNtAXQ5lRbevqcklzg
z0IFJqnjaj5212/UeQO2+RNGE3DwIkOiGIdZP2z1Q9JVn/y6+a9S4x0YldLtF/TsHNmW
ytA/ujDA+J9dowwSRary5luAY05ZnO5Sx8wWALJUbe8S0qNzy/QwETGDfE7geOh05PNX
HrhbQIvEHCzwF9HLAcKhwM9sX4PaHQ1RGc21yHRGavdyotaJYGjHbgukTMBXNhilzVXQ
mza/byBm2BBABfO5K2XhrTVvkaVye08E1ADSgVwkJYNOaHC1W1JCUMdNDu2fHFJBLgWt
RYmQ==
X-Forwarded-Encrypted: i=1; AJvYcCV/Dbdc873rMlrGjqVZxIApo4jd+8sMfaW2ngWnRD8i/uYvrzAnSjLiSN5MMyuYjDm7AhFXsDTUx6TLg7nxuIuOMfV0mfRhKbg=
X-Gm-Message-State: AOJu0YyP/t9qTHn9/emD2Hr/SBa4GBYEndvYik3ywCmezCtFiU0Zui1A
WxRceBp6K58mLq5rpeXVVxw06DQ1vGRiarcMiKOGPAnAg3W9Bl4rbFlE9fKhU7ARYAa5zI3+qLR
yRn0VrsJvlmJI+Nm/I3EZMxWBe6c=
X-Google-Smtp-Source: AGHT+IEek5xVDB/IwkBN7q/8MwA6HLKsWPR86vkU6h/Q7Q3oOQ7HDjKANyswHa0YV3gBzZDWtOpq3LjxbxbA++0JFdE=
X-Received: by 2002:a05:6a21:920a:b0:1a0:5f8b:2cad with SMTP id
tl10-20020a056a21920a00b001a05f8b2cadmr7367521pzb.13.1708877843983; Sun, 25
Feb 2024 08:17:23 -0800 (PST)
MIME-Version: 1.0
From: "Mrs Yu. Ging Yunnan"
Date: Sun, 25 Feb 2024 16:17:24 +0000
Message-ID:
Subject: hello dear
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000daf5db0612372002"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 10.6
X-Spam_score_int: 106
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: hello dear I am Mrs Yu. Ging Yunnan, and i have Covid-19 and
the doctor said I will not survive it because all vaccines has been given
to me but to no avian, am a China woman but I base here in France because
am married here and I have no child for my late husband and now am a widow.
Content analysis details: (10.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[sodikamond103(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[sodikamond103(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.210.180 listed in list.dnswl.org]
2.5 MILLION_USD BODY: Talks about millions of dollars
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.180 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} hello dear
--000000000000daf5db0612372002
Content-Type: text/plain; charset="UTF-8"
hello dear
I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor said I will
not survive it because all vaccines has been given to me but to no avian,
am a China
woman but I base here in France because am married here and I have no child
for my late husband and now am a widow.
My reason of communicating you is that i have $23 .3 million USD which was
deposited in BNP Paribas Bank here in France by my late husband which am
the next of
kin to and I want you to stand as the beneficiary for the claim now that am
about to end my race according to my doctor.
I will want you to use the fund to build an orphanage home in my name there
in your country, please kindly reply to this message urgently if willing to
handle this project.
God bless you and i wait your swift response asap.
Yours fairly friend,
Mrs Yu. Ging Yunnan.
--000000000000daf5db0612372002
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
ize:11pt;font-family:"Calibri","sans-serif"">hello dear=
ize:11pt;font-family:"Calibri","sans-serif"">I am Mrs Y=
u. Ging=C2=A0 =C2=A0Yunnan, and i have Covid-19 a=
nd the doctor
said I will not survive it because all vaccines has been given to me but to=
no
avian, am a China
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">woman but =
I base here in France because am married here and
I have no child for my late husband and now am a widow.
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">My reason =
of communicating you is that i have $23 .3 million
USD which was deposited in BNP Paribas Bank here in France by my late husba=
nd
which am the next of
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">kin to and=
I want you to stand as the beneficiary for the
claim now that am about to end my race according to my doctor.=
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">I will wan=
t you to use the fund to build an orphanage home
in my name there in your country, please kindly reply to this message urgen=
tly
if willing to handle this project.
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">God bless =
you and i wait your swift response asap.
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">Yours fair=
ly friend,
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">Mrs Yu. Gi=
ng Yunnan.
--000000000000daf5db0612372002--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments