money laundering gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 02 May 2022 07:25:02 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1nlW1x-000Ind-Pv
for dave@doctor.nl2k.ab.ca;
Mon, 02 May 2022 07:24:01 -0600
Resent-From: The Doctor
Resent-Date: Mon, 2 May 2022 07:24:01 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oi1-f172.google.com ([209.85.167.172]:38807)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1nlRwN-000NaG-6f
for doctor@nl2k.ab.ca;
Mon, 02 May 2022 03:02:04 -0600
Received: by mail-oi1-f172.google.com with SMTP id r8so14648280oib.5
for; Mon, 02 May 2022 02:01:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=nH15ovnuuxcAzUEWjOWnUgZp58UCC74lzEL4XUq2fL4=;
b=Q+FH+XKORWB4BS8Xm6xp3L5zgMtOgOVq7rGPCyPlWX0F9xn3uqXBHzf5WwpsHKShMQ
GBqUeDjMLygwNptnPguuHS3cJv2bBnokZE/Jx11UuVm0j3s7jzgaBeT2PRM7oTrlwRin
j+gbFftwK6UPanvKXj9gehJ/uAb5DlWT3IEPfLoe0ZjC8Wpmz4adgsmStA0qgEUVzNUh
DzAfz7wUwZTajg7+ygHnjUXiqaMTeAupWzk8qHJ9QClczOX/6N+wwonXx32n/AV10T+z
xBzWrKXdAF8UbZN9F+stwRtl81S4LvE1mZsT0jJ6jzwRGzDIU0R/XEuyQf44422eJgE5
eXqQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=nH15ovnuuxcAzUEWjOWnUgZp58UCC74lzEL4XUq2fL4=;
b=v2WoPHE4CwvWA9WMHMKZ4jGP9IBxF27ilBzH1LWYOLnRk7MDHN/eqR+F5zXTXh3XcP
W69i3jrSmUcSLOb8Ut+/StM3jbXu7PEEXGyfdpPJq4fSHaBozk2H/Gm1xp6D/rGiEMLp
9SuPpvW03VnCoGUHpQ8RcD4+CfElVQXPm0p4FDH4UE21kSIFkEsMP1lgCnHhyIbGUbTv
ETKjuvhPNQGelywdIt+8MNVFsY8hNtFGxAkQO5+MgScJOfRt8dIMhjy8nPbgyWVVnLId
skyqSdk8L+MxIjkcFft+pW4s3jIWlSYooLFDRUHLadAkTz/TlSQPAOl55pMvIjsHd53R
e0Dw==
X-Gm-Message-State: AOAM530zrlPGaDTnLNqDgbww0SL8TYwaSFxD8FOS/tSJZyljpCkKfyuV
fqh23/SCpOm8HI9tvsjehjEyEtU+Veq6ylvb+HQ=
X-Google-Smtp-Source: ABdhPJw+6DbEVCzoal3wQvQ4NkmrBLhWpLl/cz8d0Wieoa7JS2wUpXwJWdlCFUm7E78xW3sYqCtmIhbvUG46Q9S9H2I=
X-Received: by 2002:a05:6808:300f:b0:2fa:6fd5:9723 with SMTP id
ay15-20020a056808300f00b002fa6fd59723mr4984572oib.202.1651482096080; Mon, 02
May 2022 02:01:36 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6830:1c2d:b0:605:f63d:481c with HTTP; Mon, 2 May 2022
02:01:35 -0700 (PDT)
Reply-To: kalinkindralexander@gmail.com
From: "DR. Alexander Kalinkin"
Date: Mon, 2 May 2022 02:01:35 -0700
Message-ID:
Subject: I need a trusted Business person to handle this opportunity
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 13.3
X-Spam_score_int: 133
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Attention: Beneficiary, This message is to confirm if you
have received your fund from the paying bank as reported in our Database.
Please confirm the status of your Fund Transfer If you are yet to receive
your funds, plea [...]
Content analysis details: (13.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.172 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[jamepetersalmon12[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[jamepetersalmon12[at]gmail.com]
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 T_HK_NAME_FM_DR No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.6 UNDISC_FREEM Undisclosed recipients + freemail reply-to
3.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
2.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} I need a trusted Business person to handle this opportunity
--
Attention: Beneficiary,
This message is to confirm if you have received your fund from the
paying bank as reported in our Database. Please confirm the status of
your Fund Transfer
If you are yet to receive your funds, please write back immediately
you receive this message. We will appreciate you earliest response to
enable us submit our report to the investigating board. Please treat
as very urgently as we await your compliance to this notice.
Thank you for your cooperation,
Yours faithfully,
DR. Alexander Kalinkin
Secretary's Department
Fund Recovery & Management Agency Under "IMF"
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 02 May 2022 07:25:02 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1nlW1x-000Ind-Pv
for dave@doctor.nl2k.ab.ca;
Mon, 02 May 2022 07:24:01 -0600
Resent-From: The Doctor
Resent-Date: Mon, 2 May 2022 07:24:01 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oi1-f172.google.com ([209.85.167.172]:38807)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1nlRwN-000NaG-6f
for doctor@nl2k.ab.ca;
Mon, 02 May 2022 03:02:04 -0600
Received: by mail-oi1-f172.google.com with SMTP id r8so14648280oib.5
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=nH15ovnuuxcAzUEWjOWnUgZp58UCC74lzEL4XUq2fL4=;
b=Q+FH+XKORWB4BS8Xm6xp3L5zgMtOgOVq7rGPCyPlWX0F9xn3uqXBHzf5WwpsHKShMQ
GBqUeDjMLygwNptnPguuHS3cJv2bBnokZE/Jx11UuVm0j3s7jzgaBeT2PRM7oTrlwRin
j+gbFftwK6UPanvKXj9gehJ/uAb5DlWT3IEPfLoe0ZjC8Wpmz4adgsmStA0qgEUVzNUh
DzAfz7wUwZTajg7+ygHnjUXiqaMTeAupWzk8qHJ9QClczOX/6N+wwonXx32n/AV10T+z
xBzWrKXdAF8UbZN9F+stwRtl81S4LvE1mZsT0jJ6jzwRGzDIU0R/XEuyQf44422eJgE5
eXqQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=nH15ovnuuxcAzUEWjOWnUgZp58UCC74lzEL4XUq2fL4=;
b=v2WoPHE4CwvWA9WMHMKZ4jGP9IBxF27ilBzH1LWYOLnRk7MDHN/eqR+F5zXTXh3XcP
W69i3jrSmUcSLOb8Ut+/StM3jbXu7PEEXGyfdpPJq4fSHaBozk2H/Gm1xp6D/rGiEMLp
9SuPpvW03VnCoGUHpQ8RcD4+CfElVQXPm0p4FDH4UE21kSIFkEsMP1lgCnHhyIbGUbTv
ETKjuvhPNQGelywdIt+8MNVFsY8hNtFGxAkQO5+MgScJOfRt8dIMhjy8nPbgyWVVnLId
skyqSdk8L+MxIjkcFft+pW4s3jIWlSYooLFDRUHLadAkTz/TlSQPAOl55pMvIjsHd53R
e0Dw==
X-Gm-Message-State: AOAM530zrlPGaDTnLNqDgbww0SL8TYwaSFxD8FOS/tSJZyljpCkKfyuV
fqh23/SCpOm8HI9tvsjehjEyEtU+Veq6ylvb+HQ=
X-Google-Smtp-Source: ABdhPJw+6DbEVCzoal3wQvQ4NkmrBLhWpLl/cz8d0Wieoa7JS2wUpXwJWdlCFUm7E78xW3sYqCtmIhbvUG46Q9S9H2I=
X-Received: by 2002:a05:6808:300f:b0:2fa:6fd5:9723 with SMTP id
ay15-20020a056808300f00b002fa6fd59723mr4984572oib.202.1651482096080; Mon, 02
May 2022 02:01:36 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6830:1c2d:b0:605:f63d:481c with HTTP; Mon, 2 May 2022
02:01:35 -0700 (PDT)
Reply-To: kalinkindralexander@gmail.com
From: "DR. Alexander Kalinkin"
Date: Mon, 2 May 2022 02:01:35 -0700
Message-ID:
Subject: I need a trusted Business person to handle this opportunity
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 13.3
X-Spam_score_int: 133
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Attention: Beneficiary, This message is to confirm if you
have received your fund from the paying bank as reported in our Database.
Please confirm the status of your Fund Transfer If you are yet to receive
your funds, plea [...]
Content analysis details: (13.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.172 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[jamepetersalmon12[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[jamepetersalmon12[at]gmail.com]
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 T_HK_NAME_FM_DR No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.6 UNDISC_FREEM Undisclosed recipients + freemail reply-to
3.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
2.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} I need a trusted Business person to handle this opportunity
--
Attention: Beneficiary,
This message is to confirm if you have received your fund from the
paying bank as reported in our Database. Please confirm the status of
your Fund Transfer
If you are yet to receive your funds, please write back immediately
you receive this message. We will appreciate you earliest response to
enable us submit our report to the investigating board. Please treat
as very urgently as we await your compliance to this notice.
Thank you for your cooperation,
Yours faithfully,
DR. Alexander Kalinkin
Secretary's Department
Fund Recovery & Management Agency Under "IMF"