Financial record threat from gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 25 Apr 2022 16:36:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1nj7Iu-0000s0-NE
for dave@doctor.nl2k.ab.ca;
Mon, 25 Apr 2022 16:35:36 -0600
Resent-From: The Doctor
Resent-Date: Mon, 25 Apr 2022 16:35:36 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f68.google.com ([209.85.218.68]:41561)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1nj677-000MkJ-HL
for doctor@nl2k.ab.ca;
Mon, 25 Apr 2022 15:19:26 -0600
Received: by mail-ej1-f68.google.com with SMTP id dk23so8795100ejb.8
for; Mon, 25 Apr 2022 14:19:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=p1ezrjCIwvHcj/9iMkEpsL23IcuURvOXCdC78oGP9Ow=;
b=HhQKACVzdxhsm5keDPj4DFOgZFBgfyAynetSVPLKhZZ0oqcxEojuFS/rJcduOqiXDD
+VveF2y5YD/F5mobu4+PSf5IMVAVSyOBczF+d1C+pa8760q+0EQ5YBpxmcwu+jyeEaE3
4pZC80Xo7rkvSTYad0cbiiYm56GuEohqKudRmySQC3JNEtD6JssYjvqmpSsWlbRx9MMz
jZ9QgxeJbgI3vBxjxseHbBwiObQjnPRdGdzes8wnjdkQMauRXjPH5HcJOn2cTIlbNb6B
ZBNNiCuSKgiCXKqoo0VQ8S2JvCNgCYbcNZ5CVlWniFsVjsras1N0EwJqSg45fO5ceWCc
YBog==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=p1ezrjCIwvHcj/9iMkEpsL23IcuURvOXCdC78oGP9Ow=;
b=d1bEYRZBHzEp5WLjEkwRCRA7RksXuXy/IGSgUMhRz64IC5dTZWLnLRHusl+h0Nl1oK
deO5dSVmUdz8ILahrPSwKaMXI8pa+fBaMFVsWDZyCUBl6qAWvVfeFmZrqzBM3NHCGdiJ
jjHWZ4r4S3D/imXc8NQKbdzQ+yOtHhRfSUdij2bOavrHQj2G3xpNcQ6KKRCe+LuICqHs
8xn/qutlfBoFnDnnf5w8kh3tIgxrJYAILzghwQkiVEzYw6y6vBOBFjVvr+OCTgZxRDHd
5kBE+QCC4oRtaPn/N3u2gvd+A5W/dKNtNQXHve18MPjeoVnwtGMPJIGUcOzLvsa3E97H
GY0Q==
X-Gm-Message-State: AOAM531odHSm8Zq2GPa/bLsQO6Ax5SCj2XI4S7Y8SlypPIiTLHSv+5gP
q/3pr15XXlm9Gk/sYXbdbf5/9wl6/1y9k16CDk0=
X-Google-Smtp-Source: ABdhPJwE1cxn3mU12ycF/3o0QnxZ0k++/HuiDZW3McZVRdvR8wS8ZQN9cmZrPgv4VJBtlrITWP3NkStRZjwi6KCYJmQ=
X-Received: by 2002:a17:907:3e10:b0:6ef:f04b:c21e with SMTP id
hp16-20020a1709073e1000b006eff04bc21emr18162002ejc.747.1650921537850; Mon, 25
Apr 2022 14:18:57 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6f02:6153:b0:1a:6e12:94e1 with HTTP; Mon, 25 Apr 2022
14:18:56 -0700 (PDT)
Reply-To: mrpeterfranklin12@gmail.com
From: Peter franklin
Date: Mon, 25 Apr 2022 14:18:56 -0700
Message-ID:
Subject: Re. Your financial activities.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 11.2
X-Spam_score_int: 112
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- peter franklin (head and chief constable ) the international
police(Interpol) national central bureau (NCB UK) http://www.interpol.int/
NCJ Number: 47731 Re. Your financial activities. I am peter franklin head
and chief constable. international police(Interpol UK}. This organization
is set up to fight against, corruption, crime against children, cybercrime,
drugs, environmental fast [...]
Content analysis details: (11.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.68 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mrpeterfranklin12[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[johnfranciskellywhitehouse34[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[johnfranciskellywhitehouse34[at]gmail.com]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
3.6 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Re. Your financial activities.
--
peter franklin (head and chief constable )
the international police(Interpol)
national central bureau (NCB UK)
http://www.interpol.int/
NCJ Number: 47731
Re. Your financial activities.
I am peter franklin head and chief constable. international police(Interpol UK}.
This organization is set up to fight against, corruption, crime
against children, cybercrime, drugs, environmental fasted, financial
crime, fugitives, maritime Piracy, organized crime, people smuggling,
pharmaceutical crime, terrorism, trafficking in human beings,
trafficking in illicit goods, vehicle crime, wanted person, war crime,
weapon, works of art etc. in the global community.
Recently, we have been working closely with secret agencies around the
globe trying to stop internet fraud that is aimed at unsuspected
victims in the United States of America, Canada and other parts of the
Europe and Asia
We have been informed that you have been wiring out money just to
receive huge funds.
>From our investigations we suspected that you have been dealing with
some fraudster. they will disappear once they are done collecting all
your money. an example of their fraudulent operations includes:
Check fraud
lottery promotion
online dating scam
online sales scam
online loan fraud
and the like of impersonation
e.t.c
Recent review has it that this office is been impersonated and we
really need your assistance to figure things out and help you receive
your long awaiting fund. I therefore oblige that you respond to this
e-mail, Your money could be paid back to you , if only you are ready
to co-operate with us by given us more information on the activities.
more details would be given to you once your response is received.
Peter franklin
International police UK(Interpol)
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 25 Apr 2022 16:36:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1nj7Iu-0000s0-NE
for dave@doctor.nl2k.ab.ca;
Mon, 25 Apr 2022 16:35:36 -0600
Resent-From: The Doctor
Resent-Date: Mon, 25 Apr 2022 16:35:36 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f68.google.com ([209.85.218.68]:41561)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1nj677-000MkJ-HL
for doctor@nl2k.ab.ca;
Mon, 25 Apr 2022 15:19:26 -0600
Received: by mail-ej1-f68.google.com with SMTP id dk23so8795100ejb.8
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=p1ezrjCIwvHcj/9iMkEpsL23IcuURvOXCdC78oGP9Ow=;
b=HhQKACVzdxhsm5keDPj4DFOgZFBgfyAynetSVPLKhZZ0oqcxEojuFS/rJcduOqiXDD
+VveF2y5YD/F5mobu4+PSf5IMVAVSyOBczF+d1C+pa8760q+0EQ5YBpxmcwu+jyeEaE3
4pZC80Xo7rkvSTYad0cbiiYm56GuEohqKudRmySQC3JNEtD6JssYjvqmpSsWlbRx9MMz
jZ9QgxeJbgI3vBxjxseHbBwiObQjnPRdGdzes8wnjdkQMauRXjPH5HcJOn2cTIlbNb6B
ZBNNiCuSKgiCXKqoo0VQ8S2JvCNgCYbcNZ5CVlWniFsVjsras1N0EwJqSg45fO5ceWCc
YBog==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=p1ezrjCIwvHcj/9iMkEpsL23IcuURvOXCdC78oGP9Ow=;
b=d1bEYRZBHzEp5WLjEkwRCRA7RksXuXy/IGSgUMhRz64IC5dTZWLnLRHusl+h0Nl1oK
deO5dSVmUdz8ILahrPSwKaMXI8pa+fBaMFVsWDZyCUBl6qAWvVfeFmZrqzBM3NHCGdiJ
jjHWZ4r4S3D/imXc8NQKbdzQ+yOtHhRfSUdij2bOavrHQj2G3xpNcQ6KKRCe+LuICqHs
8xn/qutlfBoFnDnnf5w8kh3tIgxrJYAILzghwQkiVEzYw6y6vBOBFjVvr+OCTgZxRDHd
5kBE+QCC4oRtaPn/N3u2gvd+A5W/dKNtNQXHve18MPjeoVnwtGMPJIGUcOzLvsa3E97H
GY0Q==
X-Gm-Message-State: AOAM531odHSm8Zq2GPa/bLsQO6Ax5SCj2XI4S7Y8SlypPIiTLHSv+5gP
q/3pr15XXlm9Gk/sYXbdbf5/9wl6/1y9k16CDk0=
X-Google-Smtp-Source: ABdhPJwE1cxn3mU12ycF/3o0QnxZ0k++/HuiDZW3McZVRdvR8wS8ZQN9cmZrPgv4VJBtlrITWP3NkStRZjwi6KCYJmQ=
X-Received: by 2002:a17:907:3e10:b0:6ef:f04b:c21e with SMTP id
hp16-20020a1709073e1000b006eff04bc21emr18162002ejc.747.1650921537850; Mon, 25
Apr 2022 14:18:57 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6f02:6153:b0:1a:6e12:94e1 with HTTP; Mon, 25 Apr 2022
14:18:56 -0700 (PDT)
Reply-To: mrpeterfranklin12@gmail.com
From: Peter franklin
Date: Mon, 25 Apr 2022 14:18:56 -0700
Message-ID:
Subject: Re. Your financial activities.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 11.2
X-Spam_score_int: 112
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- peter franklin (head and chief constable ) the international
police(Interpol) national central bureau (NCB UK) http://www.interpol.int/
NCJ Number: 47731 Re. Your financial activities. I am peter franklin head
and chief constable. international police(Interpol UK}. This organization
is set up to fight against, corruption, crime against children, cybercrime,
drugs, environmental fast [...]
Content analysis details: (11.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.68 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mrpeterfranklin12[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[johnfranciskellywhitehouse34[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[johnfranciskellywhitehouse34[at]gmail.com]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
3.6 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Re. Your financial activities.
--
peter franklin (head and chief constable )
the international police(Interpol)
national central bureau (NCB UK)
http://www.interpol.int/
NCJ Number: 47731
Re. Your financial activities.
I am peter franklin head and chief constable. international police(Interpol UK}.
This organization is set up to fight against, corruption, crime
against children, cybercrime, drugs, environmental fasted, financial
crime, fugitives, maritime Piracy, organized crime, people smuggling,
pharmaceutical crime, terrorism, trafficking in human beings,
trafficking in illicit goods, vehicle crime, wanted person, war crime,
weapon, works of art etc. in the global community.
Recently, we have been working closely with secret agencies around the
globe trying to stop internet fraud that is aimed at unsuspected
victims in the United States of America, Canada and other parts of the
Europe and Asia
We have been informed that you have been wiring out money just to
receive huge funds.
>From our investigations we suspected that you have been dealing with
some fraudster. they will disappear once they are done collecting all
your money. an example of their fraudulent operations includes:
Check fraud
lottery promotion
online dating scam
online sales scam
online loan fraud
and the like of impersonation
e.t.c
Recent review has it that this office is been impersonated and we
really need your assistance to figure things out and help you receive
your long awaiting fund. I therefore oblige that you respond to this
e-mail, Your money could be paid back to you , if only you are ready
to co-operate with us by given us more information on the activities.
more details would be given to you once your response is received.
Peter franklin
International police UK(Interpol)