Lottery Nigerian Spam from Google Gmail
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 20 May 2024 07:45:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1s93JE-00000000Gk1-2jLD
for dave@doctor.nl2k.ab.ca;
Mon, 20 May 2024 07:44:12 -0600
Resent-From: The Doctor
Resent-Date: Mon, 20 May 2024 07:44:12 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wm1-f66.google.com ([209.85.128.66]:58512)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1s92mh-00000000CNF-1GDd
for bin@nl2k.ab.ca;
Mon, 20 May 2024 07:10:39 -0600
Received: by mail-wm1-f66.google.com with SMTP id 5b1f17b1804b1-41fd5dc04f0so14919585e9.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1716210512; x=1716815312; darn=nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=AIRs1aBhGVB2eRxgBGj+4kPmBIWbk+YostsVmg+0jKU=;
b=FToJ5aCd25yCwXhH6wSvfnpAQl+LlZeIzQR8oG8IcMxLbdrMYI18wnDPT6QmyxVYwg
v4xew/yKwveVGcPQRDJJpWIJqpKPC6/T+cBVJOCt0+O5+dflxFNS+wXRis8+4A65PtBn
rUM7/qR5S/I/cGVjAdulIPg/3lbbGLVsiwkuE4q8aTMXoAzI/Qq2hEOyEqC2rn4ZL5/L
Lzfd/wGEliBYsegvsBZ9aKNOWFmweRnsMH8WbIhiRHDU3DjQPMVcJGVz85XzctVFdIKH
iUJmO/EJnXmVMWRdyyhiXevxZWKSW7pmQ8K4ERFszpc4YbxdANJcqJltMn1GQN13cIst
03gQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1716210512; x=1716815312;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=AIRs1aBhGVB2eRxgBGj+4kPmBIWbk+YostsVmg+0jKU=;
b=TH8W1ddpzQ8zxaCBcCoTDvte2IYeZisOjwsDHZ6zZLHpFLgjjg74wb3+iedkcz26Kr
uImYijjdZMZiA5rVR/mV7D0FkJvzz+Z23xdTsJH57bj0i/Dap4tbzDGTQfztDWUkCbyw
oWOsLtUy+vm/evssy5zGVYT2RVs1mP7U4IDem2PIAwyxRpYI1NzIvoCAEkCA3Ooo15Og
QNqBkr7uluiUF/WhGgfKrK6PftKkxsqGz/pK0QSIbepyNlV4oSF2OpQS+heM/k8rCMXB
8W71eVSxDfXhcmSFVw0w+GUU7txSO/3nTMoi+4umSp4QG2acluw1ltBUvRBUZdtCqkuL
TFDg==
X-Forwarded-Encrypted: i=1; AJvYcCUAYlGg6wIivh6Inwj1Dyk3LzJnsDFQ9N60Shhh/YvJf1W4g+lOPDAKuBPQtbn/ChuBe1Wz+qo3bq7JXbo2Gg==
X-Gm-Message-State: AOJu0YybB+A36pWtEpNoIzm+N7Ww1Ll29l1eGRWlxIR58HLSyiWQkGmh
S4ZwHfg44rCTqT72ROCIRhulvN8iggstrksoNztYH26ZBW5c66FEtRdFY9sknysFsaFP7KC1pBW
uOv5ofBAAC0GJjr9q2Ua7hO/i2YjIjSVwLWEK/A==
X-Google-Smtp-Source: AGHT+IGc8Zs7vcSVWq7b2S05Cbd/sGQAo/JyrDohWYmYI1mp4JYRiFOng3CUG61SkpYcPJNw1NO3l3Q0KurVOAgQcA8=
X-Received: by 2002:a2e:1319:0:b0:2e5:3f56:2a0e with SMTP id
38308e7fff4ca-2e53f562af9mr262074981fa.24.1716200693651; Mon, 20 May 2024
03:24:53 -0700 (PDT)
MIME-Version: 1.0
Reply-To: edwincastrodonations@gmail.com
From: Edwin Castro Donation
Date: Mon, 20 May 2024 03:24:40 -0700
Message-ID:
Subject: DONATION
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000b560840618e01c3e"
Bcc: bin@nl2k.ab.ca
X-Spam_score: 19.9
X-Spam_score_int: 199
X-Spam_bar: +++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Congratulations, you are one of our selected beneficiaries.
You have received this message on behalf of Edwin Castro; I am the winner
of the Powerball jackpot of 2.04 billion U.S. dollar. I am the big [...]
Content analysis details: (19.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.128.66 listed in dnsbl.ahbl.org]
[209.85.128.66 listed in dnsbl.ahbl.org]
[209.85.128.66 listed in dnsbl.ahbl.org]
[209.85.128.66 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.128.66 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.128.66 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.128.66 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.128.66 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.128.66 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.128.66 listed in will-spam-for-food.eu.org]
[209.85.128.66 listed in will-spam-for-food.eu.org]
[209.85.128.66 listed in will-spam-for-food.eu.org]
[209.85.128.66 listed in will-spam-for-food.eu.org]
[209.85.128.66 listed in will-spam-for-food.eu.org]
[209.85.128.66 listed in will-spam-for-food.eu.org]
[209.85.128.66 listed in will-spam-for-food.eu.org]
[209.85.128.66 listed in will-spam-for-food.eu.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.66 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[jungilwoo563(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[jungilwoo563(at)gmail.com]
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 FILL_THIS_FORM Fill in a form with personal information
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 MONEY_FORM Lots of money if you fill out a form
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
Subject: {SPAM?} DONATION
--000000000000b560840618e01c3e
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Congratulations, you are one of our selected beneficiaries.
You have received this message on behalf of Edwin Castro; I am
the winner of the Powerball jackpot of 2.04 billion U.S. dollar. I am the
biggest Powerball jackpot winner in the History of the United States. I won
this lottery on the 7th. of November 2022.
I would like to inform you that Google in collaboration with Microsoft
sent your =E2=80=9Cemail address=E2=80=9D upon my request to receive a dona=
tion of $2.5
million. I'm giving you $2.5 million to do charity
and help poor people in your community so that we can make this world a
better place for everyone
Please visit the website below for more information,
So that you don't be skeptical about this $2.5 million donation.
https://edition.cnn.com/2023/02/14/us/powerball-winner-named/index.html
NOTE: You can search for =E2=80=9CEdwin Castro,=E2=80=9D the winner
of the record-breaking Powerball jackpot of 2.04 billion
US Dollar in November in California on November 7th, 2022
Please reply to: (edwincastrodonations@gmail.com) with the
information below so that we can send your details to the bank
to issue you a universal ATM card worth 2.5 million US dollars.
YOUR COMPLETE NAME:
PHONE NUMBER:
CONTACT ADDRESS:
NATIONAL:
GENDER:
MARITAL STATUS:
JOBS:
Greetings,
Edwin Castro Foundation
Edwin Castro jackpot winner
--000000000000b560840618e01c3e
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
nature" data-smartmail=3D"gmail_signature">
">
ciaries.
; I am
ollar. I am the biggest Powerball jackpot winner in the History of the Unit=
ed States. I won this lottery on the 7th. of November 2022.=C2=A0
>=C2=A0I would like to inform you that Google in collaboration with Microso=
ft sent your =E2=80=9Cemail address=E2=80=9D upon my request to receive a d=
onation of $2.5 million. I'm giving you $2.5 million to do charity
>
a better place for everyone
e website below for more information,
eptical about this $2.5 million donation.
ion.cnn.com/2023/02/14/us/powerball-winner-named/index.html" target=3D"_bla=
nk">https://edition.cnn.com/2023/02/14/us/powerball-winner-named/index.html=
o,=E2=80=9D the winner
f 2.04 billion
h, 2022
edwincastrodonations@gmail.com" target=3D"_blank">edwincastrodonations@gmai=
l.com) with the
tails to the bank
lion US dollars.
>
TAL STATUS:
dwin Castro Foundation
>
--000000000000b560840618e01c3e--