Nigerian spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 01 Jun 2023 06:35:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from)
id 1q4hTz-000IJ6-0p
for dave@doctor.nl2k.ab.ca;
Thu, 01 Jun 2023 06:32:47 -0600
Resent-From: The Doctor
Resent-Date: Thu, 1 Jun 2023 06:32:47 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f68.google.com ([209.85.167.68]:52325)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1q4gUd-0002vV-28
for doctor@nl2k.ab.ca;
Thu, 01 Jun 2023 05:29:28 -0600
Received: by mail-lf1-f68.google.com with SMTP id 2adb3069b0e04-4f50470d77cso869679e87.0
for; Thu, 01 Jun 2023 04:27:24 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1685618838; x=1688210838;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=bZuj3CBFcBuU4i0WDTRpYytc2gAH+zfraqgOstt1tVw=;
b=s3M3GrYy/xxgAanaL07ArcuYWB1gqypv3JiAvnYFRWrqZTmpN27xOIOZs5upUPiI0K
lLcE4mNJNlBertjTm/vkp8/qLv7aw1ANwsZlSm/dsV9FHGC3fjKYDR2aLWzaOnkyuZWj
Unik0sIaXCRg4o+DcGJRRXVlNYkdZ/qERJ9/iv9Ndk/OEF/vk3mkhXJcc0mBgLNolcvr
rhlA/TpMEx+/cYYOuOYMunmphx/aXp4D2IjmiT//mM0lwGp6HCDUmvQBuXf9toqCJX8T
O+TJ5jmtfYjbPkslPIXGTpm2B3OPhfNeoSWnLtHUrkNMLtmkvVjlxzQF8mj6X8PCyz6/
Ko1g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1685618838; x=1688210838;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=bZuj3CBFcBuU4i0WDTRpYytc2gAH+zfraqgOstt1tVw=;
b=PUXKY/u21DUGhh9cey8PstkqVLAfp25tT89ke9PQLU26FeRpiDKKXmwbMyMKEScg8G
Z1+ur0wY3L/6APPzn62k+0Ni12stzhRgsRgx8RYtcC689c9U2DAdTN5q0Un14Hb6qHXM
kWIBvWYPfojEhWtNHSjhV1eNYFM0MglOJMZG/Kc+yEX0JF+cxPSsYsutFLQVPtxCg2jR
Yua19ExutY1imuo7maJurG7/SOX+WJZzlFA3Mv7RT+LmUSbUfvEI0e3/aa0tKYTZOiD3
UMvE667RqxR7uIuwpPP66tD5ihgMBV45CpIuM2hWd76kY5dmGnPCYMI0/SD+iNiMRhsF
JMww==
X-Gm-Message-State: AC+VfDxosqKoNxzYYKJXsnn+BJY4JYP0IbrwlKeizSWpBDj/whh2J4V7
WpjjA+C8VvcEuNppZKxZMDGTzA9Id72Dbb6fBe8=
X-Google-Smtp-Source: ACHHUZ5bnmjpGC9o06eXWZAbIozwYqVrYOxB55/puiFb2dDS6GXocsZf59OtWqQgAm5Odl/xg0X/2xzRljXd/PJ9pVk=
X-Received: by 2002:ac2:5ec7:0:b0:4eb:1e87:b1fe with SMTP id
d7-20020ac25ec7000000b004eb1e87b1femr1110946lfq.58.1685618837160; Thu, 01 Jun
2023 04:27:17 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:ab3:6792:0:b0:230:91ff:dbff with HTTP; Thu, 1 Jun 2023
04:27:16 -0700 (PDT)
Reply-To: yusookmin@gmail.com
From: "Mrs.Young Sook Min"
Date: Thu, 1 Jun 2023 12:27:16 +0100
Message-ID:
Subject: Greetings From Mrs. Young Sook Min
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 15.2
X-Spam_score_int: 152
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear, This mail might come to you as a surprise and also temptation
to ignore it as unserious email; but please try to consider it a divine wish
and accept it with a deep sense of humility. My name is Mrs. Young Sook Min.
I am 56 year old and also a Korean living in the Malaysia suffering from
long time cancer, which also affected my heart. My late husband and my two
children died on a g [...]
Content analysis details: (15.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.68 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[donandy2017(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[donandy2017(at)gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.68 listed in wl.mailspike.net]
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.5 HK_NAME_FM_MR_MRS No description available.
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
Subject: {SPAM?} Greetings From Mrs. Young Sook Min
X-Antivirus: AVG (VPS 230601-0, 5/31/2023), Inbound message
X-Antivirus-Status: Clean
Dear,
This mail might come to you as a surprise and also temptation to
ignore it as unserious email; but please try to consider it a divine
wish and accept it with a deep sense of humility.
My name is Mrs. Young Sook Min. I am 56 year old and also a Korean
living in the Malaysia suffering from long time cancer, which also
affected my heart. My late husband and my two children died on a
ghastly motor accident few years ago while on vacation in New Zealand.
But since the loss of my Lovely husband and children, I have found a
new desire to assist helpless families, such as the orphanage/
motherless homes.
Before I became ill, I made $7.2 million in real estate investment,
which I kept in a long-term deposit in a finance company in Malaysia.
It is my last wish to see this money is been invested into any
business of your choice that will be giving out to be distributed
amongst the charity organizations.
If you are willing to help me,Update me with this information.
Full Name.......................
Full Address....................
Mobile Number...................
Country of Origin...............
Personal Email Address..........
Thank you and be blessed with your family?
Yours,
Mrs. Young Sook Min.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 01 Jun 2023 06:35:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1q4hTz-000IJ6-0p
for dave@doctor.nl2k.ab.ca;
Thu, 01 Jun 2023 06:32:47 -0600
Resent-From: The Doctor
Resent-Date: Thu, 1 Jun 2023 06:32:47 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lf1-f68.google.com ([209.85.167.68]:52325)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1q4gUd-0002vV-28
for doctor@nl2k.ab.ca;
Thu, 01 Jun 2023 05:29:28 -0600
Received: by mail-lf1-f68.google.com with SMTP id 2adb3069b0e04-4f50470d77cso869679e87.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1685618838; x=1688210838;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=bZuj3CBFcBuU4i0WDTRpYytc2gAH+zfraqgOstt1tVw=;
b=s3M3GrYy/xxgAanaL07ArcuYWB1gqypv3JiAvnYFRWrqZTmpN27xOIOZs5upUPiI0K
lLcE4mNJNlBertjTm/vkp8/qLv7aw1ANwsZlSm/dsV9FHGC3fjKYDR2aLWzaOnkyuZWj
Unik0sIaXCRg4o+DcGJRRXVlNYkdZ/qERJ9/iv9Ndk/OEF/vk3mkhXJcc0mBgLNolcvr
rhlA/TpMEx+/cYYOuOYMunmphx/aXp4D2IjmiT//mM0lwGp6HCDUmvQBuXf9toqCJX8T
O+TJ5jmtfYjbPkslPIXGTpm2B3OPhfNeoSWnLtHUrkNMLtmkvVjlxzQF8mj6X8PCyz6/
Ko1g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1685618838; x=1688210838;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=bZuj3CBFcBuU4i0WDTRpYytc2gAH+zfraqgOstt1tVw=;
b=PUXKY/u21DUGhh9cey8PstkqVLAfp25tT89ke9PQLU26FeRpiDKKXmwbMyMKEScg8G
Z1+ur0wY3L/6APPzn62k+0Ni12stzhRgsRgx8RYtcC689c9U2DAdTN5q0Un14Hb6qHXM
kWIBvWYPfojEhWtNHSjhV1eNYFM0MglOJMZG/Kc+yEX0JF+cxPSsYsutFLQVPtxCg2jR
Yua19ExutY1imuo7maJurG7/SOX+WJZzlFA3Mv7RT+LmUSbUfvEI0e3/aa0tKYTZOiD3
UMvE667RqxR7uIuwpPP66tD5ihgMBV45CpIuM2hWd76kY5dmGnPCYMI0/SD+iNiMRhsF
JMww==
X-Gm-Message-State: AC+VfDxosqKoNxzYYKJXsnn+BJY4JYP0IbrwlKeizSWpBDj/whh2J4V7
WpjjA+C8VvcEuNppZKxZMDGTzA9Id72Dbb6fBe8=
X-Google-Smtp-Source: ACHHUZ5bnmjpGC9o06eXWZAbIozwYqVrYOxB55/puiFb2dDS6GXocsZf59OtWqQgAm5Odl/xg0X/2xzRljXd/PJ9pVk=
X-Received: by 2002:ac2:5ec7:0:b0:4eb:1e87:b1fe with SMTP id
d7-20020ac25ec7000000b004eb1e87b1femr1110946lfq.58.1685618837160; Thu, 01 Jun
2023 04:27:17 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:ab3:6792:0:b0:230:91ff:dbff with HTTP; Thu, 1 Jun 2023
04:27:16 -0700 (PDT)
Reply-To: yusookmin@gmail.com
From: "Mrs.Young Sook Min"
Date: Thu, 1 Jun 2023 12:27:16 +0100
Message-ID:
Subject: Greetings From Mrs. Young Sook Min
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 15.2
X-Spam_score_int: 152
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear, This mail might come to you as a surprise and also temptation
to ignore it as unserious email; but please try to consider it a divine wish
and accept it with a deep sense of humility. My name is Mrs. Young Sook Min.
I am 56 year old and also a Korean living in the Malaysia suffering from
long time cancer, which also affected my heart. My late husband and my two
children died on a g [...]
Content analysis details: (15.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.68 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[donandy2017(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[donandy2017(at)gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.68 listed in wl.mailspike.net]
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.5 HK_NAME_FM_MR_MRS No description available.
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
Subject: {SPAM?} Greetings From Mrs. Young Sook Min
X-Antivirus: AVG (VPS 230601-0, 5/31/2023), Inbound message
X-Antivirus-Status: Clean
Dear,
This mail might come to you as a surprise and also temptation to
ignore it as unserious email; but please try to consider it a divine
wish and accept it with a deep sense of humility.
My name is Mrs. Young Sook Min. I am 56 year old and also a Korean
living in the Malaysia suffering from long time cancer, which also
affected my heart. My late husband and my two children died on a
ghastly motor accident few years ago while on vacation in New Zealand.
But since the loss of my Lovely husband and children, I have found a
new desire to assist helpless families, such as the orphanage/
motherless homes.
Before I became ill, I made $7.2 million in real estate investment,
which I kept in a long-term deposit in a finance company in Malaysia.
It is my last wish to see this money is been invested into any
business of your choice that will be giving out to be distributed
amongst the charity organizations.
If you are willing to help me,Update me with this information.
Full Name.......................
Full Address....................
Mobile Number...................
Country of Origin...............
Personal Email Address..........
Thank you and be blessed with your family?
Yours,
Mrs. Young Sook Min.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments