Nigerian Lottery spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 28 Feb 2024 08:24:00 -0700
Received: from mail-qv1-f51.google.com ([209.85.219.51]:43283)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rfLmf-00000000Fnb-1o1I
for dave@doctor.nl2k.ab.ca;
Wed, 28 Feb 2024 08:23:52 -0700
Received: by mail-qv1-f51.google.com with SMTP id 6a1803df08f44-68f5cdca7a3so7122306d6.1
for; Wed, 28 Feb 2024 07:21:54 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1709133709; x=1709738509; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=xIoqboe6/GxI/068kRfvKcnwveLkkoihJHX8PPeKYmE=;
b=cigezN2y4pMbGZg2mo1qyGJKG4rDfYDD3fAFXe87ue17XUUce+dYvpSOQPcl1WN0O/
q/J2d+9Nn0VvMOACuDvW7fUcLZbgo3+CtFLtDA2nYQmwJBUYlOySbwd7RuinDqVWf8Rh
YjHGXB2NcrTVXoUrN0W2lENU+YHGiaSUgdMhtZVvmpdxFRYTQjiSDUZ0R3OXXylFa/6R
Y1GHEFS25Z0WZmuOZ3QWP3wrx2M2oyUZKFoySHs3UPLJjDO7E43i8k+z3jQsaUM7bWWP
HNyUa86rr/p+wKgADAUMGxqvYbF3W6KtsXQHKt9oHyadeM64imOtI7iXmrKuZhu7zG72
ebnw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1709133709; x=1709738509;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=xIoqboe6/GxI/068kRfvKcnwveLkkoihJHX8PPeKYmE=;
b=AJvjjcNmAQGah0xgvkoNuQhPbrTBQaDPKQRv4VbLVRPItSiAXJZRI4DMsfkJaEwekb
pgjD53+OY8lOQCQ/setyIhEP+NcxAzbRLAPWrokoECtb6gZvie7h6fCDmOPHNs2OM4rd
2vEv75B1fa7Rq2sgBDcjBeEXLkMuj649Mw1Q/7VFsWaI3m9O7ens+xUFTMa7ODclTBeS
vFQrucwiSaGECQhUbUnAPf/HK97rgZDzGSNXfaJ64wWs+SqaD+ETVOolPg+6YfSoZaoC
MJSl1Q8xNzTrlFc7Y7a4g/CSbgI5z5LpST1Ssk0cJqOTOFQ+HqQIqrbL3WZlDmaorHeX
42EA==
X-Forwarded-Encrypted: i=1; AJvYcCXjFt4YuPeK9nxRSmTVyjr43ivHUejL0r3SuBxVtc7v9Gx9+ySazvmdr8K+euFeLR9m+m0Vgpft66J9FuL0yS+FLt0dmPgN
X-Gm-Message-State: AOJu0YyyMfA9jJstXU6bLW6azg0LXYNOvBrz6VCtdmh7ZqgZ8Doc000K
xW7FSU5EPB99aYvZeY0XBI9YXD+cImP5sFDfTKaxXBHKEYqUab8Pd+sxLas1XuqXvyxSvdfsBCB
E4g+XPqAzB0fhxj48YdI6KiFv9fg=
X-Google-Smtp-Source: AGHT+IEbzNigep5QJCPIvL2L6RUJz5o2Uudq7V0fatQpS4xighEV2wx1r9/R/mfB4m00bA0cROdczlgNELcUpsJjVb0=
X-Received: by 2002:a05:6214:319d:b0:68f:5d7f:6a8d with SMTP id
lb29-20020a056214319d00b0068f5d7f6a8dmr4700864qvb.3.1709133708694; Wed, 28
Feb 2024 07:21:48 -0800 (PST)
MIME-Version: 1.0
Reply-To: ramesursolicitors@gmail.com
From: MR STANLEY EDWARD
Date: Wed, 28 Feb 2024 07:21:37 -0800
Message-ID:
Subject: HELLO
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000949b46061272b304"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 19.3
X-Spam_score_int: 193
X-Spam_bar: +++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: HELLO EMAIL OWNER, This mail is to inform you that the Pennsylvania
Lottery organization has drawn winning lottery global awards in the regional
and national centers . They said that after the final draw your email emer
[...]
Content analysis details: (19.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.219.51 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.51 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[idrissourabi1960(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[idrissourabi1960(at)gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
1.8 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} HELLO
--000000000000949b46061272b304
Content-Type: text/plain; charset="UTF-8"
HELLO EMAIL OWNER,
This mail is to inform you that the Pennsylvania Lottery organization has
drawn winning lottery global awards in the regional and national centers
. They said that after the final draw your email emerged as the winner
award price of 2,800,000.00 million united states dollars. Consequently the
said amount has been deposited in the bank custody in Greece as directed by
the lottery company.
Contact this email here ( sanjairamessu7@gmail.com ) and he will direct you
to the bank where your money is deposited to claim your winning fund,
contact him with your details as follows : your full name, your country,
your home address and your phone number.
Sincerely,
Mr Stanley Edward.
--000000000000949b46061272b304
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--000000000000949b46061272b304--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 28 Feb 2024 08:24:00 -0700
Received: from mail-qv1-f51.google.com ([209.85.219.51]:43283)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rfLmf-00000000Fnb-1o1I
for dave@doctor.nl2k.ab.ca;
Wed, 28 Feb 2024 08:23:52 -0700
Received: by mail-qv1-f51.google.com with SMTP id 6a1803df08f44-68f5cdca7a3so7122306d6.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1709133709; x=1709738509; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=xIoqboe6/GxI/068kRfvKcnwveLkkoihJHX8PPeKYmE=;
b=cigezN2y4pMbGZg2mo1qyGJKG4rDfYDD3fAFXe87ue17XUUce+dYvpSOQPcl1WN0O/
q/J2d+9Nn0VvMOACuDvW7fUcLZbgo3+CtFLtDA2nYQmwJBUYlOySbwd7RuinDqVWf8Rh
YjHGXB2NcrTVXoUrN0W2lENU+YHGiaSUgdMhtZVvmpdxFRYTQjiSDUZ0R3OXXylFa/6R
Y1GHEFS25Z0WZmuOZ3QWP3wrx2M2oyUZKFoySHs3UPLJjDO7E43i8k+z3jQsaUM7bWWP
HNyUa86rr/p+wKgADAUMGxqvYbF3W6KtsXQHKt9oHyadeM64imOtI7iXmrKuZhu7zG72
ebnw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1709133709; x=1709738509;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=xIoqboe6/GxI/068kRfvKcnwveLkkoihJHX8PPeKYmE=;
b=AJvjjcNmAQGah0xgvkoNuQhPbrTBQaDPKQRv4VbLVRPItSiAXJZRI4DMsfkJaEwekb
pgjD53+OY8lOQCQ/setyIhEP+NcxAzbRLAPWrokoECtb6gZvie7h6fCDmOPHNs2OM4rd
2vEv75B1fa7Rq2sgBDcjBeEXLkMuj649Mw1Q/7VFsWaI3m9O7ens+xUFTMa7ODclTBeS
vFQrucwiSaGECQhUbUnAPf/HK97rgZDzGSNXfaJ64wWs+SqaD+ETVOolPg+6YfSoZaoC
MJSl1Q8xNzTrlFc7Y7a4g/CSbgI5z5LpST1Ssk0cJqOTOFQ+HqQIqrbL3WZlDmaorHeX
42EA==
X-Forwarded-Encrypted: i=1; AJvYcCXjFt4YuPeK9nxRSmTVyjr43ivHUejL0r3SuBxVtc7v9Gx9+ySazvmdr8K+euFeLR9m+m0Vgpft66J9FuL0yS+FLt0dmPgN
X-Gm-Message-State: AOJu0YyyMfA9jJstXU6bLW6azg0LXYNOvBrz6VCtdmh7ZqgZ8Doc000K
xW7FSU5EPB99aYvZeY0XBI9YXD+cImP5sFDfTKaxXBHKEYqUab8Pd+sxLas1XuqXvyxSvdfsBCB
E4g+XPqAzB0fhxj48YdI6KiFv9fg=
X-Google-Smtp-Source: AGHT+IEbzNigep5QJCPIvL2L6RUJz5o2Uudq7V0fatQpS4xighEV2wx1r9/R/mfB4m00bA0cROdczlgNELcUpsJjVb0=
X-Received: by 2002:a05:6214:319d:b0:68f:5d7f:6a8d with SMTP id
lb29-20020a056214319d00b0068f5d7f6a8dmr4700864qvb.3.1709133708694; Wed, 28
Feb 2024 07:21:48 -0800 (PST)
MIME-Version: 1.0
Reply-To: ramesursolicitors@gmail.com
From: MR STANLEY EDWARD
Date: Wed, 28 Feb 2024 07:21:37 -0800
Message-ID:
Subject: HELLO
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000949b46061272b304"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 19.3
X-Spam_score_int: 193
X-Spam_bar: +++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: HELLO EMAIL OWNER, This mail is to inform you that the Pennsylvania
Lottery organization has drawn winning lottery global awards in the regional
and national centers . They said that after the final draw your email emer
[...]
Content analysis details: (19.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.219.51 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.51 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[idrissourabi1960(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[idrissourabi1960(at)gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
1.8 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} HELLO
--000000000000949b46061272b304
Content-Type: text/plain; charset="UTF-8"
HELLO EMAIL OWNER,
This mail is to inform you that the Pennsylvania Lottery organization has
drawn winning lottery global awards in the regional and national centers
. They said that after the final draw your email emerged as the winner
award price of 2,800,000.00 million united states dollars. Consequently the
said amount has been deposited in the bank custody in Greece as directed by
the lottery company.
Contact this email here ( sanjairamessu7@gmail.com ) and he will direct you
to the bank where your money is deposited to claim your winning fund,
contact him with your details as follows : your full name, your country,
your home address and your phone number.
Sincerely,
Mr Stanley Edward.
--000000000000949b46061272b304
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
HELLO EMAIL OWNER,
This mail is to inform you that =
the Pennsylvania Lottery organization =C2=A0has drawn =C2=A0winning lottery=
global awards in =C2=A0the regional and national centers . They said that =
after the final draw your email emerged as the winner award price of 2,800,=
000.00 million united states dollars. Consequently the said amount has been=
deposited in the bank custody in Greece as directed by the lottery company=
.
Contact this email here (
om">sanjairamessu7@gmail.com ) and he will direct you to the bank where=
your money is deposited to claim your winning fund, contact him with your =
details as follows : your full name, your country, your home address and yo=
ur phone number.
Sincerely,
Mr Stanley Edward.
This mail is to inform you that =
the Pennsylvania Lottery organization =C2=A0has drawn =C2=A0winning lottery=
global awards in =C2=A0the regional and national centers . They said that =
after the final draw your email emerged as the winner award price of 2,800,=
000.00 million united states dollars. Consequently the said amount has been=
deposited in the bank custody in Greece as directed by the lottery company=
.
Contact this email here (
om">sanjairamessu7@gmail.com ) and he will direct you to the bank where=
your money is deposited to claim your winning fund, contact him with your =
details as follows : your full name, your country, your home address and yo=
ur phone number.
Sincerely,
Mr Stanley Edward.
--000000000000949b46061272b304--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments