Lottery Nigerian Spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 20 May 2024 07:45:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s93JE-00000000Gk1-2jLD

for dave@doctor.nl2k.ab.ca;

Mon, 20 May 2024 07:44:12 -0600

Resent-From: The Doctor

Resent-Date: Mon, 20 May 2024 07:44:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wm1-f66.google.com ([209.85.128.66]:58512)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s92mh-00000000CNF-1GDd

for bin@nl2k.ab.ca;

Mon, 20 May 2024 07:10:39 -0600

Received: by mail-wm1-f66.google.com with SMTP id 5b1f17b1804b1-41fd5dc04f0so14919585e9.0

for ; Mon, 20 May 2024 06:08:38 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1716210512; x=1716815312; darn=nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=AIRs1aBhGVB2eRxgBGj+4kPmBIWbk+YostsVmg+0jKU=;

b=FToJ5aCd25yCwXhH6wSvfnpAQl+LlZeIzQR8oG8IcMxLbdrMYI18wnDPT6QmyxVYwg

v4xew/yKwveVGcPQRDJJpWIJqpKPC6/T+cBVJOCt0+O5+dflxFNS+wXRis8+4A65PtBn

rUM7/qR5S/I/cGVjAdulIPg/3lbbGLVsiwkuE4q8aTMXoAzI/Qq2hEOyEqC2rn4ZL5/L

Lzfd/wGEliBYsegvsBZ9aKNOWFmweRnsMH8WbIhiRHDU3DjQPMVcJGVz85XzctVFdIKH

iUJmO/EJnXmVMWRdyyhiXevxZWKSW7pmQ8K4ERFszpc4YbxdANJcqJltMn1GQN13cIst

03gQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1716210512; x=1716815312;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=AIRs1aBhGVB2eRxgBGj+4kPmBIWbk+YostsVmg+0jKU=;

b=TH8W1ddpzQ8zxaCBcCoTDvte2IYeZisOjwsDHZ6zZLHpFLgjjg74wb3+iedkcz26Kr

uImYijjdZMZiA5rVR/mV7D0FkJvzz+Z23xdTsJH57bj0i/Dap4tbzDGTQfztDWUkCbyw

oWOsLtUy+vm/evssy5zGVYT2RVs1mP7U4IDem2PIAwyxRpYI1NzIvoCAEkCA3Ooo15Og

QNqBkr7uluiUF/WhGgfKrK6PftKkxsqGz/pK0QSIbepyNlV4oSF2OpQS+heM/k8rCMXB

8W71eVSxDfXhcmSFVw0w+GUU7txSO/3nTMoi+4umSp4QG2acluw1ltBUvRBUZdtCqkuL

TFDg==

X-Forwarded-Encrypted: i=1; AJvYcCUAYlGg6wIivh6Inwj1Dyk3LzJnsDFQ9N60Shhh/YvJf1W4g+lOPDAKuBPQtbn/ChuBe1Wz+qo3bq7JXbo2Gg==

X-Gm-Message-State: AOJu0YybB+A36pWtEpNoIzm+N7Ww1Ll29l1eGRWlxIR58HLSyiWQkGmh

S4ZwHfg44rCTqT72ROCIRhulvN8iggstrksoNztYH26ZBW5c66FEtRdFY9sknysFsaFP7KC1pBW

uOv5ofBAAC0GJjr9q2Ua7hO/i2YjIjSVwLWEK/A==

X-Google-Smtp-Source: AGHT+IGc8Zs7vcSVWq7b2S05Cbd/sGQAo/JyrDohWYmYI1mp4JYRiFOng3CUG61SkpYcPJNw1NO3l3Q0KurVOAgQcA8=

X-Received: by 2002:a2e:1319:0:b0:2e5:3f56:2a0e with SMTP id

38308e7fff4ca-2e53f562af9mr262074981fa.24.1716200693651; Mon, 20 May 2024

03:24:53 -0700 (PDT)

MIME-Version: 1.0

Reply-To: edwincastrodonations@gmail.com

From: Edwin Castro Donation

Date: Mon, 20 May 2024 03:24:40 -0700

Message-ID:

Subject: DONATION

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000b560840618e01c3e"

Bcc: bin@nl2k.ab.ca

X-Spam_score: 19.9

X-Spam_score_int: 199

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Congratulations, you are one of our selected beneficiaries.

You have received this message on behalf of Edwin Castro; I am the winner

of the Powerball jackpot of 2.04 billion U.S. dollar. I am the big [...]



Content analysis details: (19.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.66 listed in dnsbl.ahbl.org]

[209.85.128.66 listed in dnsbl.ahbl.org]

[209.85.128.66 listed in dnsbl.ahbl.org]

[209.85.128.66 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.66 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.66 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.66 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.66 listed in will-spam-for-food.eu.org]

[209.85.128.66 listed in will-spam-for-food.eu.org]

[209.85.128.66 listed in will-spam-for-food.eu.org]

[209.85.128.66 listed in will-spam-for-food.eu.org]

[209.85.128.66 listed in will-spam-for-food.eu.org]

[209.85.128.66 listed in will-spam-for-food.eu.org]

[209.85.128.66 listed in will-spam-for-food.eu.org]

[209.85.128.66 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.66 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[jungilwoo563(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[jungilwoo563(at)gmail.com]

3.6 NA_DOLLARS BODY: Talks about a million North American dollars

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 FILL_THIS_FORM Fill in a form with personal information

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 MONEY_FORM Lots of money if you fill out a form

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases

Subject: {SPAM?} DONATION



--000000000000b560840618e01c3e

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Congratulations, you are one of our selected beneficiaries.

You have received this message on behalf of Edwin Castro; I am

the winner of the Powerball jackpot of 2.04 billion U.S. dollar. I am the

biggest Powerball jackpot winner in the History of the United States. I won

this lottery on the 7th. of November 2022.

I would like to inform you that Google in collaboration with Microsoft

sent your =E2=80=9Cemail address=E2=80=9D upon my request to receive a dona=

tion of $2.5

million. I'm giving you $2.5 million to do charity

and help poor people in your community so that we can make this world a

better place for everyone



Please visit the website below for more information,

So that you don't be skeptical about this $2.5 million donation.

https://edition.cnn.com/2023/02/14/us/powerball-winner-named/index.html



NOTE: You can search for =E2=80=9CEdwin Castro,=E2=80=9D the winner

of the record-breaking Powerball jackpot of 2.04 billion

US Dollar in November in California on November 7th, 2022



Please reply to: (edwincastrodonations@gmail.com) with the

information below so that we can send your details to the bank

to issue you a universal ATM card worth 2.5 million US dollars.

YOUR COMPLETE NAME:

PHONE NUMBER:

CONTACT ADDRESS:

NATIONAL:

GENDER:

MARITAL STATUS:

JOBS:



Greetings,

Edwin Castro Foundation



Edwin Castro jackpot winner



--000000000000b560840618e01c3e

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





nature" data-smartmail=3D"gmail_signature">

">
Congratulations, you are one of our selected benefi=

ciaries.
You have received this message on behalf of Edwin Castro=

; I am
the winner of the Powerball jackpot of 2.04 billion U.S. d=

ollar. I am the biggest Powerball jackpot winner in the History of the Unit=

ed States. I won this lottery on the 7th. of November 2022.=C2=A0

>=C2=A0I would like to inform you that Google in collaboration with Microso=

ft sent your =E2=80=9Cemail address=E2=80=9D upon my request to receive a d=

onation of $2.5 million. I'm giving you $2.5 million to do charity

>
and help poor people in your community so that we can make this world=

a better place for everyone

=C2=A0Please visit th=

e website below for more information,
So that you don't be sk=

eptical about this $2.5 million donation.

NOTE: You can search for =E2=80=9CEdwin Castr=

o,=E2=80=9D the winner
of the record-breaking Powerball jackpot o=

f 2.04 billion
US Dollar in November in California on November 7t=

h, 2022

information below so that we can send your de=

tails to the bank
to issue you a universal ATM card worth 2.5 mil=

lion US dollars.
YOUR COMPLETE NAME:
PHONE NUMBER:
>
CONTACT ADDRESS:
NATIONAL:
GENDER:
MARI=

TAL STATUS:
JOBS:

Greetings,
E=

dwin Castro Foundation

>
Edwin Castro jackpot winner




--000000000000b560840618e01c3e--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA