scammers scam phish from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 28 May 2022 06:48:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1nuvqn-000NER-95
for dave@doctor.nl2k.ab.ca;
Sat, 28 May 2022 06:47:25 -0600
Resent-From: The Doctor
Resent-Date: Sat, 28 May 2022 06:47:25 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f196.google.com ([209.85.128.196]:34658)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1nuv2y-000EBJ-Nf
for doctor@nl2k.ab.ca;
Sat, 28 May 2022 05:56:00 -0600
Received: by mail-yw1-f196.google.com with SMTP id 00721157ae682-306b5b452b1so38008097b3.1
for; Sat, 28 May 2022 04:55:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=euDEn8VxJxDFN1y5CiFgNQOF6xkbEIbBzV3SSGBP0Bc=;
b=IWDt/6XFZGIOs3kEnt3G0mm6bqRK0Ynu/fPX89PK4RHwijil0oR4oGWtiAcjw5PPfM
Z7qnNWVDyxFiOFqLtXfRqovhjpmJM3Ua9CLcXPqjifFUddWZdEJJ/8lbE0ETHKW2e3Ix
F2ySxzsoQy0Z1Jb3IGlRW5jhYz09+kSARFq8e13ya2iFZiig5roSx+NP4d3Kj9/sb7+M
AibRk7YfFfiwn2CNwVoccLucwVTc1m4MzD30mcB1FiUXc4lnipwlFAPqeXIOxEqtPG9/
n8ompezzfs0wpfnKPGQivQFtGiHIA30jNSdNR+DUCqxhG5R6c0in3HVcE2oULuODgtqZ
FWnQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=euDEn8VxJxDFN1y5CiFgNQOF6xkbEIbBzV3SSGBP0Bc=;
b=69nnHO1okxRAWn2+vDQr+3RQu+JeoOQ1xVQHqBMa2pfz2TrF8/mSqlof0NYj9gX4d+
x6LF/cZpVMZblSlZU59K/dBtCBolFIxKU8ETp5JDqaTzntpWRJxBkYyYEdLAEmAainyE
0WisJCCpK/ZjPUOgKRBgZqB8T4Z+/sIVVJa77hcYVnboUIJMLCjd3hlHDLZNm8Nz7f2H
LvM3N6I42XWF/X9BROeu9znRXto6CphDCkMrYngv3JPPujSjCzf+/GgnpnVfgf2zIuzA
AuainXPTOZDyWhNnXd0231zn6s3xAdlii2KDMwQ5bxlgJyVwIJXQlzurNJvDZN/ENMRF
1RIg==
X-Gm-Message-State: AOAM533KetDKegzoL+92CznqcPtRxTt22eddVkyUaCmlS3p3+rv2wyoE
xtiIcSqolTxFl1tEoNGJhEpyQRhH4095AOnK5sg=
X-Google-Smtp-Source: ABdhPJxeKq/FNr+eeP3hMMN/bflgK6wRYMaKSAihkfK8HbDzOSA/eA7ktOcaM1bvlz7hqKYk8AQlJ4SSlao2Wr3BVbI=
X-Received: by 2002:a0d:ffc3:0:b0:2eb:2327:3361 with SMTP id
p186-20020a0dffc3000000b002eb23273361mr47953940ywf.36.1653738929322; Sat, 28
May 2022 04:55:29 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:7000:6e8a:0:0:0:0 with HTTP; Sat, 28 May 2022 04:55:28
-0700 (PDT)
Reply-To: insp.maxwell101@outlook.com
From: "INSP. MAXWELL"
Date: Sat, 28 May 2022 12:55:28 +0100
Message-ID:
Subject: You are a Scam Victim, Stop Sending Money to Scammers
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 9.9
X-Spam_score_int: 99
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Good Day Dear Scam Victim, Urgent Reply Needed ! Hope you
get this mail in good health and sound mind.The Economic and Financial Crimes
Commission EFCC with the assistance of the FBI has detected from our database
that you have been sending money to [...]
Content analysis details: (9.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[orjifrank54[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.196 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[orjifrank54[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[insp.maxwell101[at]outlook.com]
0.9 URG_BIZ BODY: Contains urgent matter
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} You are a Scam Victim, Stop Sending Money to Scammers
--
Good Day Dear Scam Victim, Urgent Reply Needed !
Hope you get this mail in good health and sound mind.The Economic and
Financial Crimes Commission EFCC with the assistance of the FBI has
detected from our database that you have been sending money to some
SCAMMERS for one documentation to another, Transfer charges of funds
etc and yet you are not getting any funds (ATM Card).
We are giving you the full ODER to STOP sending Money or ITunes cards
to them for you will not get anything positive from those thieves that
have been robbing you for quite a long time now.
These fraudulent people are here in Nigeria, UK and USA.
Also a report has reached us that you have sent so much money to this
scam artist. Please STOP!!! contacting these people we advise you to
STOP and use your hard earned money for something good.
However, the President of Nigeria, Muhammed Buhari and the United
Nation and IMF are giving you a compensation check of $850,000USD so
that you can start life again and be a happy and better person.
Dear Scam victims, You are strongly advised to provide us with the
below information.
Name in full:
Home address:
Marital Status:
Also a phone number to contact you with is needed.
send the above information to our email Address stated below.
Inspector Maxwell Okeke
Email: insp.maxwell101@outlook.com
Thanks
Economic and Financial Crimes Commission EFCC
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 28 May 2022 06:48:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1nuvqn-000NER-95
for dave@doctor.nl2k.ab.ca;
Sat, 28 May 2022 06:47:25 -0600
Resent-From: The Doctor
Resent-Date: Sat, 28 May 2022 06:47:25 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f196.google.com ([209.85.128.196]:34658)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1nuv2y-000EBJ-Nf
for doctor@nl2k.ab.ca;
Sat, 28 May 2022 05:56:00 -0600
Received: by mail-yw1-f196.google.com with SMTP id 00721157ae682-306b5b452b1so38008097b3.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=euDEn8VxJxDFN1y5CiFgNQOF6xkbEIbBzV3SSGBP0Bc=;
b=IWDt/6XFZGIOs3kEnt3G0mm6bqRK0Ynu/fPX89PK4RHwijil0oR4oGWtiAcjw5PPfM
Z7qnNWVDyxFiOFqLtXfRqovhjpmJM3Ua9CLcXPqjifFUddWZdEJJ/8lbE0ETHKW2e3Ix
F2ySxzsoQy0Z1Jb3IGlRW5jhYz09+kSARFq8e13ya2iFZiig5roSx+NP4d3Kj9/sb7+M
AibRk7YfFfiwn2CNwVoccLucwVTc1m4MzD30mcB1FiUXc4lnipwlFAPqeXIOxEqtPG9/
n8ompezzfs0wpfnKPGQivQFtGiHIA30jNSdNR+DUCqxhG5R6c0in3HVcE2oULuODgtqZ
FWnQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=euDEn8VxJxDFN1y5CiFgNQOF6xkbEIbBzV3SSGBP0Bc=;
b=69nnHO1okxRAWn2+vDQr+3RQu+JeoOQ1xVQHqBMa2pfz2TrF8/mSqlof0NYj9gX4d+
x6LF/cZpVMZblSlZU59K/dBtCBolFIxKU8ETp5JDqaTzntpWRJxBkYyYEdLAEmAainyE
0WisJCCpK/ZjPUOgKRBgZqB8T4Z+/sIVVJa77hcYVnboUIJMLCjd3hlHDLZNm8Nz7f2H
LvM3N6I42XWF/X9BROeu9znRXto6CphDCkMrYngv3JPPujSjCzf+/GgnpnVfgf2zIuzA
AuainXPTOZDyWhNnXd0231zn6s3xAdlii2KDMwQ5bxlgJyVwIJXQlzurNJvDZN/ENMRF
1RIg==
X-Gm-Message-State: AOAM533KetDKegzoL+92CznqcPtRxTt22eddVkyUaCmlS3p3+rv2wyoE
xtiIcSqolTxFl1tEoNGJhEpyQRhH4095AOnK5sg=
X-Google-Smtp-Source: ABdhPJxeKq/FNr+eeP3hMMN/bflgK6wRYMaKSAihkfK8HbDzOSA/eA7ktOcaM1bvlz7hqKYk8AQlJ4SSlao2Wr3BVbI=
X-Received: by 2002:a0d:ffc3:0:b0:2eb:2327:3361 with SMTP id
p186-20020a0dffc3000000b002eb23273361mr47953940ywf.36.1653738929322; Sat, 28
May 2022 04:55:29 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:7000:6e8a:0:0:0:0 with HTTP; Sat, 28 May 2022 04:55:28
-0700 (PDT)
Reply-To: insp.maxwell101@outlook.com
From: "INSP. MAXWELL"
Date: Sat, 28 May 2022 12:55:28 +0100
Message-ID:
Subject: You are a Scam Victim, Stop Sending Money to Scammers
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 9.9
X-Spam_score_int: 99
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Good Day Dear Scam Victim, Urgent Reply Needed ! Hope you
get this mail in good health and sound mind.The Economic and Financial Crimes
Commission EFCC with the assistance of the FBI has detected from our database
that you have been sending money to [...]
Content analysis details: (9.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[orjifrank54[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.196 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[orjifrank54[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[insp.maxwell101[at]outlook.com]
0.9 URG_BIZ BODY: Contains urgent matter
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} You are a Scam Victim, Stop Sending Money to Scammers
--
Good Day Dear Scam Victim, Urgent Reply Needed !
Hope you get this mail in good health and sound mind.The Economic and
Financial Crimes Commission EFCC with the assistance of the FBI has
detected from our database that you have been sending money to some
SCAMMERS for one documentation to another, Transfer charges of funds
etc and yet you are not getting any funds (ATM Card).
We are giving you the full ODER to STOP sending Money or ITunes cards
to them for you will not get anything positive from those thieves that
have been robbing you for quite a long time now.
These fraudulent people are here in Nigeria, UK and USA.
Also a report has reached us that you have sent so much money to this
scam artist. Please STOP!!! contacting these people we advise you to
STOP and use your hard earned money for something good.
However, the President of Nigeria, Muhammed Buhari and the United
Nation and IMF are giving you a compensation check of $850,000USD so
that you can start life again and be a happy and better person.
Dear Scam victims, You are strongly advised to provide us with the
below information.
Name in full:
Home address:
Marital Status:
Also a phone number to contact you with is needed.
send the above information to our email Address stated below.
Inspector Maxwell Okeke
Email: insp.maxwell101@outlook.com
Thanks
Economic and Financial Crimes Commission EFCC