Credit card phish
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 15 Nov 2022 16:29:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1ov5Lk-0007sZ-V8
for dave@doctor.nl2k.ab.ca;
Tue, 15 Nov 2022 16:28:16 -0700
Resent-From: The Doctor
Resent-Date: Tue, 15 Nov 2022 16:28:16 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from v163-44-165-155.a062.g.tyo1.static.cnode.io ([163.44.165.155]:35826 helo=vp8.sanwango.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))
(envelope-from)
id 1ov1OK-000Bf5-3f
for doctor@nl2k.ab.ca;
Tue, 15 Nov 2022 12:14:43 -0700
Recevied: by vp8.sanwango.com (localhost [127.0.0.1]) id 17A881A1F6C;
Wed, 16 Nov 2022 03:51:56 +0900 (JST)
Message-ID: <8a5ceab9b299b3bb27229438d2c6ecfe644aee@vp8.sanwango.com>
Reply-To: "Sydney Williams"
From: "Sydney Williams"
Subject: Reminder: Instructions to Credit your account with US$3,750,000.00 USD.
Date: Wed, 16 Nov 2022 01:51:55 +0700
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8";
Content-Transfer-Encoding: quoted-printable
X-Spam_score: 16.6
X-Spam_score_int: 166
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Good morning, We are unsure if you received our previous message,
but we would like to use this opportunity to congratulate you and let you
know that your payment file was sent to our office for the immediate trans
[...]
Content analysis details: (16.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.2 MISSING_HEADERS Missing To: header
1.5 HK_SCAM_N8 BODY: No description available.
2.7 UNCLAIMED_MONEY BODY: People just leave money laying around
1.1 HK_SCAM_N3 BODY: No description available.
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 HK_SCAM No description available.
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Reminder: Instructions to Credit your account with US$3,750,000.00 USD.
Good morning,
We are unsure if you received our previous message, but we would like to =
use this opportunity to congratulate you and let you know that your payme=
nt file was sent to our office for the immediate transfer of US$3,750,000=
.00 USD to you as financial compensation after a thorough review of all i=
nheritance, contract, lottery, and unclaimed funds with various banks and=
financial institutions, in conjunction with the World Bank and the Inter=
national Monetary Fund auditors assessment report.
The audit reports show that you have struggled in the past to see your fu=
nds released, which has been delayed.
If you follow our instructions, your compensation amount of US$3,750,000.=
00 USD will be credited to your designated bank account in your country w=
ithin the next five (5) bank working days, with transfer copies forwarded=
to you and your bankers for confirmation.
Please respond today with your direct TELEPHONE number so that our Paymen=
t Coordinator, Ms. Vanessa Whiteley, can contact you directly for more in=
formation to receive your US$3,750,000.00 USD compensation.
Sincerely,
Financial Services, UK.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 15 Nov 2022 16:29:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1ov5Lk-0007sZ-V8
for dave@doctor.nl2k.ab.ca;
Tue, 15 Nov 2022 16:28:16 -0700
Resent-From: The Doctor
Resent-Date: Tue, 15 Nov 2022 16:28:16 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from v163-44-165-155.a062.g.tyo1.static.cnode.io ([163.44.165.155]:35826 helo=vp8.sanwango.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))
(envelope-from
id 1ov1OK-000Bf5-3f
for doctor@nl2k.ab.ca;
Tue, 15 Nov 2022 12:14:43 -0700
Recevied: by vp8.sanwango.com (localhost [127.0.0.1]) id 17A881A1F6C;
Wed, 16 Nov 2022 03:51:56 +0900 (JST)
Message-ID: <8a5ceab9b299b3bb27229438d2c6ecfe644aee@vp8.sanwango.com>
Reply-To: "Sydney Williams"
From: "Sydney Williams"
Subject: Reminder: Instructions to Credit your account with US$3,750,000.00 USD.
Date: Wed, 16 Nov 2022 01:51:55 +0700
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8";
Content-Transfer-Encoding: quoted-printable
X-Spam_score: 16.6
X-Spam_score_int: 166
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Good morning, We are unsure if you received our previous message,
but we would like to use this opportunity to congratulate you and let you
know that your payment file was sent to our office for the immediate trans
[...]
Content analysis details: (16.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.2 MISSING_HEADERS Missing To: header
1.5 HK_SCAM_N8 BODY: No description available.
2.7 UNCLAIMED_MONEY BODY: People just leave money laying around
1.1 HK_SCAM_N3 BODY: No description available.
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 HK_SCAM No description available.
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Reminder: Instructions to Credit your account with US$3,750,000.00 USD.
Good morning,
We are unsure if you received our previous message, but we would like to =
use this opportunity to congratulate you and let you know that your payme=
nt file was sent to our office for the immediate transfer of US$3,750,000=
.00 USD to you as financial compensation after a thorough review of all i=
nheritance, contract, lottery, and unclaimed funds with various banks and=
financial institutions, in conjunction with the World Bank and the Inter=
national Monetary Fund auditors assessment report.
The audit reports show that you have struggled in the past to see your fu=
nds released, which has been delayed.
If you follow our instructions, your compensation amount of US$3,750,000.=
00 USD will be credited to your designated bank account in your country w=
ithin the next five (5) bank working days, with transfer copies forwarded=
to you and your bankers for confirmation.
Please respond today with your direct TELEPHONE number so that our Paymen=
t Coordinator, Ms. Vanessa Whiteley, can contact you directly for more in=
formation to receive your US$3,750,000.00 USD compensation.
Sincerely,
Financial Services, UK.