money laundering gmail spam

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 29 Apr 2022 08:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nkRsd-0007Na-Nx

for dave@doctor.nl2k.ab.ca;

Fri, 29 Apr 2022 08:45:59 -0600

Resent-From: The Doctor

Resent-Date: Fri, 29 Apr 2022 08:45:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f175.google.com ([209.85.167.175]:34400)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1nkPM4-000M2N-2i

for doctor@netknow.ca;

Fri, 29 Apr 2022 06:04:17 -0600

Received: by mail-oi1-f175.google.com with SMTP id s131so8306240oie.1

for ; Fri, 29 Apr 2022 05:03:55 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=ZL0zrHRMAZmrtxacg7lPLle+/gIICqv0dQPC5hj/o1I=;

b=hS1fuJ7xiZ8+LHGI+4YsfDVsQGxWVTdTBQKEvGAh38j7Ls4C76b6gpyD8zdXAKYUPB

Ijyy/xQBzVqkbBs+tM2bqqNf22UZV4umDB4aaCnPGufD0KafRhxlgjhneqfBySpynRpa

75WfNrTBUB8VZATLBFfkqu5yh9VEF+7DaXaHrARKQCwspx3behsDAr5+kFT7qphnAHrm

13D1+e7SwO/ZkHr0ib4sp0TD1+m9oyWl7WnIWIL7BtA2w6IfCUBf33ZF5IjXWwwdHcoc

JEWEYWSY2z9CDnNWG58jkzmDowE+bg+hnMcf2fJkDRpjvXjnp0Fj7iqaHuIn/7UMY83u

Yevg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=ZL0zrHRMAZmrtxacg7lPLle+/gIICqv0dQPC5hj/o1I=;

b=vNMNPS5XaU88Htjrw6e7atdorWWYeFgH7vMXdhTyCWh6XF0l5unobXzk7ghieLdGoX

YxT1/UrJ5eyafoO3ocNRCzH1t8WUNUb0/t0Bpe5flFnYWL+m9eoih4lOONB8fgw2BvX9

5FVE2VZa0ujILmveaTOqCnZWsZ4IjX/xsi89wOWXlYlCABFGTo9tSUdOjHxgM+odp0VS

l0sNhRFi6l8wqw/3W9bpp+zHv8lQOw/TH5OztcIbNHQKosjjEsFoOb7TlfBBloIAE44f

uBmxTpapJ4XF84IGDXM7z5GQszPuRLUIyRdq7QlOKzUoOP0oVdQzc0e0c0kTlQr5uix0

rHzQ==

X-Gm-Message-State: AOAM5309HBV91OpOl+4UrH5SMp6PzmhoGtT4lwOotGe2++XP93RkjOaK

eyyESpQsbuuqhcnZDp3rFLJPKbdtkQXnEWYrOXc=

X-Google-Smtp-Source: ABdhPJyBjcd6rmxRoLmdHxYDqNn5tnyUTKlhRmS+P3vBpPwP09Rl/upcI03CKPWUxISaQdaG2Z5efIMZqDm6dKjovgM=

X-Received: by 2002:a05:6808:1691:b0:2f9:4bd7:581e with SMTP id

bb17-20020a056808169100b002f94bd7581emr1207655oib.144.1651233829211; Fri, 29

Apr 2022 05:03:49 -0700 (PDT)

MIME-Version: 1.0

Reply-To: m.joylen@yahoo.com

From: "MRS. SAVANNAH KANE"

Date: Fri, 29 Apr 2022 14:03:36 +0200

Message-ID:

Subject: I NEED YOUR HELP PLEASE 1

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000d4d2fc05ddc9d572"

Bcc: doctor@netknow.ca

X-Spam_score: 16.1

X-Spam_score_int: 161

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: PLEASE EMAIL ME FROM THIS ADDRESS m.joylen@yahoo.com

My Dear, May this letter find you in good faith and may you receive this

letter
with peace of mind and with due respect as it may be very strange

to
*you as we have not communicated or know each other befo [...]



Content analysis details: (16.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.175 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[voonwood5[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[voonwood5[at]gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

3.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

1.0 XFER_LOTSA_MONEY Transfer a lot of money

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

3.6 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} I NEED YOUR HELP PLEASE 1



--000000000000d4d2fc05ddc9d572

Content-Type: text/plain; charset="UTF-8"



PLEASE EMAIL ME FROM THIS ADDRESS m.joylen@yahoo.com

My Dear,



May this letter find you in good faith and may you receive this letter

with peace of mind and with due respect as it may be very strange to

you as we have not communicated or know each other before. My present

condition is very desperate and that is why I decided to contact you

through this means to come to my aid.



My name is Mrs.Savannah Kane from France but I am married to late

Mr.Hans Kane from Cote d Ivoire We were married for 20 years and had

only one Son called Stanley. My husband died after a brief illness

that lasted for two years. Since his death I decided not to re-marry

or get a child outside my matrimonial home. When my late husband was

alive he deposited this $8.6 Million Dollars in a bank for foreign

investment. Presently this money is still in the bank.



I am undergoing a medical treatment ,I have cancer, recently my doctor

are trying but the sickness are getting worst. Having known my

condition I decided to contact you through email to help me invest the

money in your country on behalf of my Son Stanley. You will take care

of my son and will help him continue with his education once he

arrives your country to meet you.





What pains me so much is that my late husband relatives seized his

company immediately after the death of my husband and nothing was left

for me and my Son. I am here with my laptop computer and I don't need

any telephone communication in this regard due to the presence of my

late husband relatives around me. I don't want them to know about this

deposit.



As soon as I receive your reply , I shall give you more information on

what you should do to receive the money to your bank account for the

investment.



PLEASE EMAIL ME FROM THIS ADDRESS m.joylen@yahoo.com

Hoping to receive your reply.

From Mrs.Savannah Kane



--000000000000d4d2fc05ddc9d572

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



PLEASE EMAIL ME FROM THIS ADDRESS=

m.joylen@yahoo.com

>My Dear,

May this letter find yo=

u in good faith and may you receive this letter
with peace=

of mind and with due respect as it may be very strange to

>you as we have not communicated or know each other before. My present<=

/div>
condition is very desperate and that is why I decided to conta=

ct you
through this means to come to my aid.

>
My name is Mrs.Savannah Kane from France but I am=

married to late
Mr.Hans Kane from Cote d Ivoire We were m=

arried for 20 years and had
only one Son called Stanley. M=

y husband died after a brief illness
that lasted for two y=

ears. Since his death I decided not to re-marry
or get a c=

hild outside my matrimonial home. When my late husband was

>alive he deposited this $8.6 Million Dollars in a bank for foreign
v>
investment. Presently this money is still in the bank.
<=

div>
I am undergoing a medical treatment ,I have ca=

ncer, recently my doctor
are trying but the sickness are g=

etting worst. Having known my
condition I decided to conta=

ct you through email to help me invest the
money in your c=

ountry on behalf of my Son Stanley. You will take care
of =

my son and will help him continue with his education once he
=

arrives your country to meet you.


>
What pains me so much is that my late husband relati=

ves seized his
company immediately after the death of my h=

usband and nothing was left
for me and my Son. I am here w=

ith my laptop computer and I don't need
any telephone =

communication in this regard due to the presence of my
lat=

e husband relatives around me. I don't want them to know about this
=

deposit.

As soon as I =

receive your reply , I shall give you more information on
=

what you should do to receive the money to your bank account for the

iv>
investment.

PLEASE EMAIL =

ME FROM THIS ADDRESS m.joylen@yahoo.c=

om
Hoping to receive your reply.
From=

Mrs.Savannah Kane





--000000000000d4d2fc05ddc9d572--

blackmail spam from Google

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 29 Apr 2022 07:24:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nkQaU-0004T1-0L

for dave@doctor.nl2k.ab.ca;

Fri, 29 Apr 2022 07:23:10 -0600

Resent-From: The Doctor

Resent-Date: Fri, 29 Apr 2022 07:23:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ua1-f68.google.com ([209.85.222.68]:46841)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1nkKGs-0006PJ-9M

for doctor@netknow.ca;

Fri, 29 Apr 2022 00:38:34 -0600

Received: by mail-ua1-f68.google.com with SMTP id az13so2559673uab.13

for ; Thu, 28 Apr 2022 23:38:13 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=p1ezrjCIwvHcj/9iMkEpsL23IcuURvOXCdC78oGP9Ow=;

b=f/DvhhQpT6MHVGF7kfUo1GIkEqEta/T8gRCvHp5GMgqSJ6vFDZgP/hKS+NX2iwCAYH

1GhZRUaNWun+Wa5Tw7EL9bWxmQYXlnJKkqEQIlpO6k7lOio0XmS8BbXl7gQE8jPUKhPj

id2EB+poqYeFlSqtg+N3w2GKSw6tehwQYX4711x7oKIx1J41lJcDr19mDcWP4fDpvsnu

BiqE2/9QLVgfc1P1UyYkx+XGoJn7Yqh6ScLm7ayevtPwzoBLEkLSxYQ9WWsDAPFc9mCp

sa5E1HPvHS3VxsniezHUROkRNWSefuN1BsrwObsCHVVZFAn22HJOYxhBYhqD/ws7zPqW

r4QQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=p1ezrjCIwvHcj/9iMkEpsL23IcuURvOXCdC78oGP9Ow=;

b=KtFJhK4hMQgTJEkZEI5ge+xISQdBwBl0ZX1VMKW2mxqj/3ThuX4Sw0tsTel+NArlhq

poTj8CEDsaWndYisCbQNfFPz9REl69Cv5R+2WdaA5ieC7gHSt4OHYoHU1W5NFLi17is+

CWQEuNl7xgceie74f3quRqT4zhJHfX/FV02NDGdCYNCZdnu7UAWPtiXLuTHsBgM7mQua

T2HLcP43vZPCJBLHseXpZmpCjTkt+3WHi7HvxhBm1MpUI9I75hLnHXzTS09VwNoykQGJ

FmAzDq4ufP9/Se3dOYTaneEYy88AP8204skFsa4av6FRN6r+wPeRksiX7NPDTPX9qqkZ

iX0g==

X-Gm-Message-State: AOAM530W4K9mjjPBRgqvoHBK/aTNeUyP5BLKeCMVxONnX3bk88+aV2Yw

mngapH2sE0YFADgDh+kkoDTr2oAiQMdVp5ICLB8=

X-Google-Smtp-Source: ABdhPJyq52IudJKOhtmhLfhkbOqu3Qgd9i15wV/lJ2ZtPGUfyX/5nQz3kvtEuNoGvsh/c9IAxz16XKvSBHHqmqpVoSE=

X-Received: by 2002:ab0:349a:0:b0:35c:b898:a733 with SMTP id

c26-20020ab0349a000000b0035cb898a733mr11215178uar.85.1651214286962; Thu, 28

Apr 2022 23:38:06 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a59:884b:0:b0:2b2:eb27:d307 with HTTP; Thu, 28 Apr 2022

23:38:06 -0700 (PDT)

Reply-To: mrpeterfranklin12@gmail.com

From: Peter franklin

Date: Thu, 28 Apr 2022 23:38:06 -0700

Message-ID:

Subject: Re. Your financial activities.

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@netknow.ca

X-Spam_score: 11.0

X-Spam_score_int: 110

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- peter franklin (head and chief constable ) the international

police(Interpol) national central bureau (NCB UK) http://www.interpol.int/

NCJ Number: 47731 Re. Your financial activities. I am peter franklin head

and chief constable. international police(Interpol UK}. This organization

is set up to fight against, corruption, crime against children, cybercrime,

drugs, environmental fast [...]



Content analysis details: (11.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[mrpeterfranklin12[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[effmagu[at]gmail.com]

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.0 T_SCC_BODY_TEXT_LINE No description available.

3.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)

3.6 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Re. Your financial activities.



--

peter franklin (head and chief constable )

the international police(Interpol)

national central bureau (NCB UK)

http://www.interpol.int/

NCJ Number: 47731





Re. Your financial activities.





I am peter franklin head and chief constable. international police(Interpol UK}.

This organization is set up to fight against, corruption, crime

against children, cybercrime, drugs, environmental fasted, financial

crime, fugitives, maritime Piracy, organized crime, people smuggling,

pharmaceutical crime, terrorism, trafficking in human beings,

trafficking in illicit goods, vehicle crime, wanted person, war crime,

weapon, works of art etc. in the global community.



Recently, we have been working closely with secret agencies around the

globe trying to stop internet fraud that is aimed at unsuspected

victims in the United States of America, Canada and other parts of the

Europe and Asia



We have been informed that you have been wiring out money just to

receive huge funds.

>From our investigations we suspected that you have been dealing with

some fraudster. they will disappear once they are done collecting all

your money. an example of their fraudulent operations includes:





Check fraud

lottery promotion

online dating scam

online sales scam

online loan fraud

and the like of impersonation

e.t.c





Recent review has it that this office is been impersonated and we

really need your assistance to figure things out and help you receive

your long awaiting fund. I therefore oblige that you respond to this

e-mail, Your money could be paid back to you , if only you are ready

to co-operate with us by given us more information on the activities.



more details would be given to you once your response is received.



Peter franklin



International police UK(Interpol)