Nigerian spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 28 Feb 2024 07:31:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rfKwr-000000000zN-3DKq
for dave@doctor.nl2k.ab.ca;
Wed, 28 Feb 2024 07:30:17 -0700
Resent-From: The Doctor
Resent-Date: Wed, 28 Feb 2024 07:30:17 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f45.google.com ([209.85.160.45]:51619)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rfGZ9-00000000OX2-2AMZ
for doctor@doctor.nl2k.ab.ca;
Wed, 28 Feb 2024 02:49:40 -0700
Received: by mail-oa1-f45.google.com with SMTP id 586e51a60fabf-21433afcc53so2781875fac.3
for; Wed, 28 Feb 2024 01:47:35 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1709113650; x=1709718450; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=zOua8FOlUzGw6N9IIAo8hxNQGqeesl+LZz9J1bkoeSc=;
b=gKMzqZAfI5e9z5g6nbzZpGznbeO4o8j2QXCgetwvQNXU3pfr+Lds+EzdpXKD6yxS/U
/ErbcNv43QqH/FlGIeU/p/U9dN0jakEPYyj9gcAeznHj/lleTZ5W86k+0fG/jkpRUbAv
Jb+FpLFkazrAwsZUwzP5BZweJKDvhunD1JjCYS9WihuBCTLqN1Mpsht3vgjE5//5fDrE
4VosNyWd+yfaeM5je0lm1dchiJ1wrpeulDAIoyZpxk/gSoXIs5xmYZ+PVUhiJRFDPksm
ohwSSisWP2/lkADb9NJDAauiuB4gI/sqO/LHLEfBCsi/rLtvLAB4NBBVsjEU+DiAk6TP
n3Dw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1709113650; x=1709718450;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=zOua8FOlUzGw6N9IIAo8hxNQGqeesl+LZz9J1bkoeSc=;
b=Tud/h5KqvEmbVM9kR9xn27b4C8W4pPqdueVm7PLeY5N1S38ZfKOXoIRuYW+kjVYhdL
TCeD9uEf8zA7cnEsLWypTPWi9jcTJD1c/UGYs9yxk46J1wYY5OsZYJERQJG3cePUSndh
aPCwJwdV2xqBn42hnGvRRSBKvzNQKkVAgiolLn0llQtKckZOAhLm9xNUBAnTyCfMcZg7
LD6sBa2ejSAigIF1aNEjuy8u0W+d48eJLfvr9NYP455dYz2w225xoVkKGNCSuhZk6RPK
iZCBCT4+5sjea9/xplEM1gVHsqDAkP4h/wZzGPL7bnzv7VRegSPY8/5GLQbXOf1TtuZz
tP7g==
X-Forwarded-Encrypted: i=1; AJvYcCXmehPTIBBCjkOBlm0T2JT1bRkD3HN356qRPUWGtaxgn/fb4VcqKVwADKype9E/iIacWRqErvRHPUHJoTZy0ZEaujTtOkCE+Z8=
X-Gm-Message-State: AOJu0YzX5CI30NFxrXGZvvRdnBPnJL+bZtMAojvGh/4e26sqxruarpeT
vHbKYN6R4cpTY+EVqxj1wZiNtLFnVEKO8rGxiOpzqztaC5dlpeqTgG9SdAvnqqVO30johzyU1qO
gkvEcdKTc+Usnp3P1BstI9/VMp3zS1UtYFaVt0Q==
X-Google-Smtp-Source: AGHT+IFS5IVn8TnvqHf4H1BQdEwBqM9muMCHbsgZk5WNBkMIVgB/51PON5dPliRyZcS0V0tuP5NktTBZPFqY/OWT5CQ=
X-Received: by 2002:a05:6102:809:b0:470:432c:282e with SMTP id
g9-20020a056102080900b00470432c282emr8986209vsb.18.1709103026560; Tue, 27 Feb
2024 22:50:26 -0800 (PST)
MIME-Version: 1.0
From: "Mrs Yu. Ging Yunnan"
Date: Wed, 28 Feb 2024 06:50:13 +0000
Message-ID:
Subject: hello dear
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000c8711106126b8e16"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 10.6
X-Spam_score_int: 106
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: hello dear I am Mrs Yu. Ging Yunnan, and i have Covid-19 and
the doctor said I will not survive it because all vaccines has been given
to me but to no avian, am a China woman but I base here in France because
am married here and I have no child for my late husband and now am a widow.
Content analysis details: (10.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[samirakonfe2001(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[samirakonfe2001(at)gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.45 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.45 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.5 HK_NAME_FM_MR_MRS No description available.
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} hello dear
--000000000000c8711106126b8e16
Content-Type: text/plain; charset="UTF-8"
hello dear
I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor said I will
not survive it because all vaccines has been given to me but to no avian,
am a China
woman but I base here in France because am married here and I have no child
for my late husband and now am a widow.
My reason of communicating you is that i have $23 .3 million USD which was
deposited in BNP Paribas Bank here in France by my late husband which am
the next of
kin to and I want you to stand as the beneficiary for the claim now that am
about to end my race according to my doctor.
I will want you to use the fund to build an orphanage home in my name there
in your country, please kindly reply to this message urgently if willing to
handle this project.
God bless you and i wait your swift response asap.
Yours fairly friend,
Mrs Yu. Ging Yunnan.
--000000000000c8711106126b8e16
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
ize:11pt;font-family:"Calibri","sans-serif"">hello dear=
ize:11pt;font-family:"Calibri","sans-serif"">I am Mrs Y=
u. Ging=C2=A0 =C2=A0Yunnan, and i have Covid-19 a=
nd the doctor
said I will not survive it because all vaccines has been given to me but to=
no
avian, am a China
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">woman but =
I base here in France because am married here and
I have no child for my late husband and now am a widow.
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">My reason =
of communicating you is that i have $23 .3 million
USD which was deposited in BNP Paribas Bank here in France by my late husba=
nd
which am the next of
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">kin to and=
I want you to stand as the beneficiary for the
claim now that am about to end my race according to my doctor.=
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">I will wan=
t you to use the fund to build an orphanage home
in my name there in your country, please kindly reply to this message urgen=
tly
if willing to handle this project.
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">God bless =
you and i wait your swift response asap.
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">Yours fair=
ly friend,
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">Mrs Yu. Gi=
ng Yunnan.
--000000000000c8711106126b8e16--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 28 Feb 2024 07:31:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rfKwr-000000000zN-3DKq
for dave@doctor.nl2k.ab.ca;
Wed, 28 Feb 2024 07:30:17 -0700
Resent-From: The Doctor
Resent-Date: Wed, 28 Feb 2024 07:30:17 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f45.google.com ([209.85.160.45]:51619)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rfGZ9-00000000OX2-2AMZ
for doctor@doctor.nl2k.ab.ca;
Wed, 28 Feb 2024 02:49:40 -0700
Received: by mail-oa1-f45.google.com with SMTP id 586e51a60fabf-21433afcc53so2781875fac.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1709113650; x=1709718450; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=zOua8FOlUzGw6N9IIAo8hxNQGqeesl+LZz9J1bkoeSc=;
b=gKMzqZAfI5e9z5g6nbzZpGznbeO4o8j2QXCgetwvQNXU3pfr+Lds+EzdpXKD6yxS/U
/ErbcNv43QqH/FlGIeU/p/U9dN0jakEPYyj9gcAeznHj/lleTZ5W86k+0fG/jkpRUbAv
Jb+FpLFkazrAwsZUwzP5BZweJKDvhunD1JjCYS9WihuBCTLqN1Mpsht3vgjE5//5fDrE
4VosNyWd+yfaeM5je0lm1dchiJ1wrpeulDAIoyZpxk/gSoXIs5xmYZ+PVUhiJRFDPksm
ohwSSisWP2/lkADb9NJDAauiuB4gI/sqO/LHLEfBCsi/rLtvLAB4NBBVsjEU+DiAk6TP
n3Dw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1709113650; x=1709718450;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=zOua8FOlUzGw6N9IIAo8hxNQGqeesl+LZz9J1bkoeSc=;
b=Tud/h5KqvEmbVM9kR9xn27b4C8W4pPqdueVm7PLeY5N1S38ZfKOXoIRuYW+kjVYhdL
TCeD9uEf8zA7cnEsLWypTPWi9jcTJD1c/UGYs9yxk46J1wYY5OsZYJERQJG3cePUSndh
aPCwJwdV2xqBn42hnGvRRSBKvzNQKkVAgiolLn0llQtKckZOAhLm9xNUBAnTyCfMcZg7
LD6sBa2ejSAigIF1aNEjuy8u0W+d48eJLfvr9NYP455dYz2w225xoVkKGNCSuhZk6RPK
iZCBCT4+5sjea9/xplEM1gVHsqDAkP4h/wZzGPL7bnzv7VRegSPY8/5GLQbXOf1TtuZz
tP7g==
X-Forwarded-Encrypted: i=1; AJvYcCXmehPTIBBCjkOBlm0T2JT1bRkD3HN356qRPUWGtaxgn/fb4VcqKVwADKype9E/iIacWRqErvRHPUHJoTZy0ZEaujTtOkCE+Z8=
X-Gm-Message-State: AOJu0YzX5CI30NFxrXGZvvRdnBPnJL+bZtMAojvGh/4e26sqxruarpeT
vHbKYN6R4cpTY+EVqxj1wZiNtLFnVEKO8rGxiOpzqztaC5dlpeqTgG9SdAvnqqVO30johzyU1qO
gkvEcdKTc+Usnp3P1BstI9/VMp3zS1UtYFaVt0Q==
X-Google-Smtp-Source: AGHT+IFS5IVn8TnvqHf4H1BQdEwBqM9muMCHbsgZk5WNBkMIVgB/51PON5dPliRyZcS0V0tuP5NktTBZPFqY/OWT5CQ=
X-Received: by 2002:a05:6102:809:b0:470:432c:282e with SMTP id
g9-20020a056102080900b00470432c282emr8986209vsb.18.1709103026560; Tue, 27 Feb
2024 22:50:26 -0800 (PST)
MIME-Version: 1.0
From: "Mrs Yu. Ging Yunnan"
Date: Wed, 28 Feb 2024 06:50:13 +0000
Message-ID:
Subject: hello dear
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000c8711106126b8e16"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 10.6
X-Spam_score_int: 106
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: hello dear I am Mrs Yu. Ging Yunnan, and i have Covid-19 and
the doctor said I will not survive it because all vaccines has been given
to me but to no avian, am a China woman but I base here in France because
am married here and I have no child for my late husband and now am a widow.
Content analysis details: (10.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[samirakonfe2001(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[samirakonfe2001(at)gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.45 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.45 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.5 HK_NAME_FM_MR_MRS No description available.
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} hello dear
--000000000000c8711106126b8e16
Content-Type: text/plain; charset="UTF-8"
hello dear
I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor said I will
not survive it because all vaccines has been given to me but to no avian,
am a China
woman but I base here in France because am married here and I have no child
for my late husband and now am a widow.
My reason of communicating you is that i have $23 .3 million USD which was
deposited in BNP Paribas Bank here in France by my late husband which am
the next of
kin to and I want you to stand as the beneficiary for the claim now that am
about to end my race according to my doctor.
I will want you to use the fund to build an orphanage home in my name there
in your country, please kindly reply to this message urgently if willing to
handle this project.
God bless you and i wait your swift response asap.
Yours fairly friend,
Mrs Yu. Ging Yunnan.
--000000000000c8711106126b8e16
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
ize:11pt;font-family:"Calibri","sans-serif"">hello dear=
ize:11pt;font-family:"Calibri","sans-serif"">I am Mrs Y=
u. Ging=C2=A0 =C2=A0Yunnan, and i have Covid-19 a=
nd the doctor
said I will not survive it because all vaccines has been given to me but to=
no
avian, am a China
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">woman but =
I base here in France because am married here and
I have no child for my late husband and now am a widow.
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">My reason =
of communicating you is that i have $23 .3 million
USD which was deposited in BNP Paribas Bank here in France by my late husba=
nd
which am the next of
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">kin to and=
I want you to stand as the beneficiary for the
claim now that am about to end my race according to my doctor.=
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">I will wan=
t you to use the fund to build an orphanage home
in my name there in your country, please kindly reply to this message urgen=
tly
if willing to handle this project.
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">God bless =
you and i wait your swift response asap.
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">Yours fair=
ly friend,
ize:11pt;font-family:"Calibri","sans-serif"">=C2=
=A0
ize:11pt;font-family:"Calibri","sans-serif"">Mrs Yu. Gi=
ng Yunnan.
--000000000000c8711106126b8e16--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments