Nigerian spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 05 Jun 2023 23:44:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from)
id 1q6PTi-000AWe-3A
for dave@doctor.nl2k.ab.ca;
Mon, 05 Jun 2023 23:43:34 -0600
Resent-From: The Doctor
Resent-Date: Mon, 5 Jun 2023 23:43:34 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wr1-f67.google.com ([209.85.221.67]:37981)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1q6MGe-000CKs-0P
for doctor@doctor.nl2k.ab.ca;
Mon, 05 Jun 2023 20:17:59 -0600
Received: by mail-wr1-f67.google.com with SMTP id ffacd0b85a97d-30ae9cb91a3so785759f8f.0
for; Mon, 05 Jun 2023 19:15:53 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1686017746; x=1688609746;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:from:to:cc:subject:date:message-id:reply-to;
bh=jJmmPYP/NOu9Vu/jkDIj52H0OC81rRaQPOIu3BhZ1lU=;
b=pwXG4HoZ1DazfYWFPttwaQeQDkgMS3Do6Vdfmii1qOIjvTbpqKrQ6hfYCB8/N51h/I
UHjcXrYPMG7QC0W9tCAoRSUP8D/BigHvRNJux87QCZvFT0AMGtMWht3mMpRk8PUyXDqC
F2DX+L/yi7lG5Tz8nM/Y2Ook+5uojTrxh/rzZDH+UoF7pb49XVDuQkB/j1nvx13XUa0c
ENjFbLcIpriCSqmBfdYqmt4ABx6Ozrpb8XlWW16TvPWXm2lde3UE6MeYMrTxOJQSEGCI
9fta+UcBGL3j8RkZ0NWLEa3KaFMJnF/ci2t8jgbrcyEF8O18MZqfmqubTMuX/3becEKu
sqhw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1686017746; x=1688609746;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=jJmmPYP/NOu9Vu/jkDIj52H0OC81rRaQPOIu3BhZ1lU=;
b=fwS5EdakD9LusK6OqRTnrR85b6cEMfin0C3rN/LRK9kQjeAKD2GceQZUVKYYzDclIv
ijXwjpHtsDAW8qJ1kA5fkWSXJqdHRZdjvyTkanPszjZ2ybmAE/x0GoS2e6Jt+rIyADXY
U7epYPDLuDgast/WrA0yXMSZ+LeU3H4Ae7xPdrBwI8nGTXXFdFZiWXc+UskH5YogM8Zz
wsRbTU096xBodjgtWvM3BUtoz919/Z4qa5Qz7DKieDnBIrs4qpQbE7KBvLQzPG5hkUY0
tE3lRxnf1RmVZVlemUPByMNTgCQlVjTkPdJknNa6trd1t5HqHthVDX3QFn2OH5R4cDht
v4DQ==
X-Gm-Message-State: AC+VfDxR3UDxmFSMZLVYzbXQf3gWd9o3QJpfNjE3REGWeAydD6tQk+qg
IgyWvYm8bL/3gifWNJqFkBjvYdrisE9vULneKVk=
X-Google-Smtp-Source: ACHHUZ42QsE8Rro7ND7rVxw9Yke/LoWS6tjEHZ0FZsHJIPncD8cR49lhktIx4m4rngfS+WQDW7pbpppVgs0fCkAxXTI=
X-Received: by 2002:a05:6402:35d2:b0:516:39bf:1223 with SMTP id
z18-20020a05640235d200b0051639bf1223mr795677edc.2.1686017745843; Mon, 05 Jun
2023 19:15:45 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a54:2406:0:b0:20f:b601:60d2 with HTTP; Mon, 5 Jun 2023
19:15:45 -0700 (PDT)
Reply-To: mrscarbungcomacrin@mail.com
From: Mrs carbungco Macrin
Date: Tue, 6 Jun 2023 02:15:45 +0000
Message-ID:
Subject: VERY URGENT''
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 22.3
X-Spam_score_int: 223
X-Spam_bar: ++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings, I hope that this message will reach you in good
health! I’m Mrs carbungco macrin, the widow of the late Dr. Tertius Zongo,
from Philippines Base in Burkina Faso; I’m 56,years old, suffe [...]
Content analysis details: (22.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[mrsnicoleapollonia32(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[mrsnicoleapollonia32(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.221.67 listed in list.dnswl.org]
2.7 HK_SCAM_N1 BODY: No description available.
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 XFER_LOTSA_MONEY Transfer a lot of money
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.221.67 listed in wl.mailspike.net]
Subject: {SPAM?} VERY URGENT''
X-Antivirus: AVG (VPS 230605-4, 6/5/2023), Inbound message
X-Antivirus-Status: Clean
Greetings,
I hope that this message will reach you in good health! I=E2=80=99m
Mrs carbungco macrin, the widow of the late Dr. Tertius Zongo, from
Philippines Base in Burkina Faso; I=E2=80=99m 56,years old, suffering from
ovarian cancer and from all medical indications my condition has
really deteriorated and my doctor told me that I may not last long
because of my health. Based on this I have decided to donate the sum
of ($4.5 Million US Dollars) for Charity Organization,In my next
email, I will send you the copy of the Certificate of Deposit which
will enable you apply to the bank and receive the money with no
case,but you will assure me that you will take 50% of the fund and
give 50% to the orphanages home in your country for my soul to rest
after i have gone,
Yours Faithfully,
Mrs carbungco macrin
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 05 Jun 2023 23:44:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1q6PTi-000AWe-3A
for dave@doctor.nl2k.ab.ca;
Mon, 05 Jun 2023 23:43:34 -0600
Resent-From: The Doctor
Resent-Date: Mon, 5 Jun 2023 23:43:34 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wr1-f67.google.com ([209.85.221.67]:37981)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1q6MGe-000CKs-0P
for doctor@doctor.nl2k.ab.ca;
Mon, 05 Jun 2023 20:17:59 -0600
Received: by mail-wr1-f67.google.com with SMTP id ffacd0b85a97d-30ae9cb91a3so785759f8f.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1686017746; x=1688609746;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:from:to:cc:subject:date:message-id:reply-to;
bh=jJmmPYP/NOu9Vu/jkDIj52H0OC81rRaQPOIu3BhZ1lU=;
b=pwXG4HoZ1DazfYWFPttwaQeQDkgMS3Do6Vdfmii1qOIjvTbpqKrQ6hfYCB8/N51h/I
UHjcXrYPMG7QC0W9tCAoRSUP8D/BigHvRNJux87QCZvFT0AMGtMWht3mMpRk8PUyXDqC
F2DX+L/yi7lG5Tz8nM/Y2Ook+5uojTrxh/rzZDH+UoF7pb49XVDuQkB/j1nvx13XUa0c
ENjFbLcIpriCSqmBfdYqmt4ABx6Ozrpb8XlWW16TvPWXm2lde3UE6MeYMrTxOJQSEGCI
9fta+UcBGL3j8RkZ0NWLEa3KaFMJnF/ci2t8jgbrcyEF8O18MZqfmqubTMuX/3becEKu
sqhw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1686017746; x=1688609746;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=jJmmPYP/NOu9Vu/jkDIj52H0OC81rRaQPOIu3BhZ1lU=;
b=fwS5EdakD9LusK6OqRTnrR85b6cEMfin0C3rN/LRK9kQjeAKD2GceQZUVKYYzDclIv
ijXwjpHtsDAW8qJ1kA5fkWSXJqdHRZdjvyTkanPszjZ2ybmAE/x0GoS2e6Jt+rIyADXY
U7epYPDLuDgast/WrA0yXMSZ+LeU3H4Ae7xPdrBwI8nGTXXFdFZiWXc+UskH5YogM8Zz
wsRbTU096xBodjgtWvM3BUtoz919/Z4qa5Qz7DKieDnBIrs4qpQbE7KBvLQzPG5hkUY0
tE3lRxnf1RmVZVlemUPByMNTgCQlVjTkPdJknNa6trd1t5HqHthVDX3QFn2OH5R4cDht
v4DQ==
X-Gm-Message-State: AC+VfDxR3UDxmFSMZLVYzbXQf3gWd9o3QJpfNjE3REGWeAydD6tQk+qg
IgyWvYm8bL/3gifWNJqFkBjvYdrisE9vULneKVk=
X-Google-Smtp-Source: ACHHUZ42QsE8Rro7ND7rVxw9Yke/LoWS6tjEHZ0FZsHJIPncD8cR49lhktIx4m4rngfS+WQDW7pbpppVgs0fCkAxXTI=
X-Received: by 2002:a05:6402:35d2:b0:516:39bf:1223 with SMTP id
z18-20020a05640235d200b0051639bf1223mr795677edc.2.1686017745843; Mon, 05 Jun
2023 19:15:45 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a54:2406:0:b0:20f:b601:60d2 with HTTP; Mon, 5 Jun 2023
19:15:45 -0700 (PDT)
Reply-To: mrscarbungcomacrin@mail.com
From: Mrs carbungco Macrin
Date: Tue, 6 Jun 2023 02:15:45 +0000
Message-ID:
Subject: VERY URGENT''
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 22.3
X-Spam_score_int: 223
X-Spam_bar: ++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings, I hope that this message will reach you in good
health! I’m Mrs carbungco macrin, the widow of the late Dr. Tertius Zongo,
from Philippines Base in Burkina Faso; I’m 56,years old, suffe [...]
Content analysis details: (22.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[mrsnicoleapollonia32(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[mrsnicoleapollonia32(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.221.67 listed in list.dnswl.org]
2.7 HK_SCAM_N1 BODY: No description available.
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
0.0 XFER_LOTSA_MONEY Transfer a lot of money
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.221.67 listed in wl.mailspike.net]
Subject: {SPAM?} VERY URGENT''
X-Antivirus: AVG (VPS 230605-4, 6/5/2023), Inbound message
X-Antivirus-Status: Clean
Greetings,
I hope that this message will reach you in good health! I=E2=80=99m
Mrs carbungco macrin, the widow of the late Dr. Tertius Zongo, from
Philippines Base in Burkina Faso; I=E2=80=99m 56,years old, suffering from
ovarian cancer and from all medical indications my condition has
really deteriorated and my doctor told me that I may not last long
because of my health. Based on this I have decided to donate the sum
of ($4.5 Million US Dollars) for Charity Organization,In my next
email, I will send you the copy of the Certificate of Deposit which
will enable you apply to the bank and receive the money with no
case,but you will assure me that you will take 50% of the fund and
give 50% to the orphanages home in your country for my soul to rest
after i have gone,
Yours Faithfully,
Mrs carbungco macrin