More desparation Google Spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 21 Apr 2022 23:21:01 -0600
Received: from 4.176.133.34.bc.googleusercontent.com ([34.133.176.4]:57966 helo=mail.video.io)
by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))
(envelope-from)
id 1nhliB-000MRG-A3
for dave@doctor.nl2k.ab.ca;
Thu, 21 Apr 2022 23:20:12 -0600
Received: from lawa.com (unknown [10.196.0.1])
by mail.video.io (Postfix) with ESMTP id 0B0D44787C2
for; Fri, 22 Apr 2022 05:04:00 +0000 (UTC)
Reply-To: hayleeschowalter736@gmail.com
From: Suren
To: dave@doctor.nl2k.ab.ca
Subject: Hi, Please Send me a Response
Date: 21 Apr 2022 22:04:00 -0700
Message-ID: <20220421220400.14E8BE67D3DD777B@lawa.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0012_022E8B72.0D656BB6"
X-Spam_score: 18.6
X-Spam_score_int: 186
X-Spam_bar: ++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello How are you? I hope you are fine and doing great. I
am sorry for coming to you this way, but this is the only means to communicate
with you and I hope you will see reason to contact me back after rea [...]
Content analysis details: (18.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 TVD_RCVD_IP Message was received from an IP address
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[34.133.176.4 listed in psbl.surriel.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[34.133.176.4 listed in bl.score.senderscore.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
2.1 RCVD_IN_MSPIKE_L4 RBL: Bad reputation (-4)
[34.133.176.4 listed in bl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[hayleeschowalter736[at]gmail.com]
2.5 HK_SCAM_N2 BODY: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.0 LOTS_OF_MONEY Huge... sums of money
0.4 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 HK_SCAM No description available.
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps
0.3 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS
0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.0 XFER_LOTSA_MONEY Transfer a lot of money
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Hi, Please Send me a Response
------=_NextPart_000_0012_022E8B72.0D656BB6
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Hello
How are you? I hope you are fine and doing great. I am sorry for=20
coming to you this way, but this is the only means to communicate=20
with you and I hope you will see reason to contact me back after
reading this email. I want to share important information with=20
you, all I ask is that you read this email carefully, understand=20
what I am saying and I need your honest discretion. You may want=20
to know that, this may cause me my job if words get that I leak=20
out this information, so I need somebody that I can trust and=20
someone who is honest too.
My name is Suren Kanthasamy, an Australian living in the United=20
States and work as head of luggage/baggage storage facilities=20
(Operations, Maintenance, Transportation) at Los Angeles=20
International Airport - L.A.X, USA. During my recent withheld=20
package routine check at the Airport
Storage Vault last year December 2021, I discovered an abandoned=20
shipment which I personally recorded when a Diplomat from=20
Australia flew in October 2020 and when it was scanned, it
revealed an undisclosed sum of money in a Metal Trunk Boxes=20
weighing approximately 720kg.
The consignment was held on hold because the Contents of the=20
consignment was not properly declared by the consignee as "MONEY"=20
rather it was declared as personal effect to avoid interrogation=20
and after investigation was complete, the diplomat was fine but=20
the inability of the diplomat to pay for the United States Non-=20
Inspection Charges of $5,700.00, he abandon it because he was=20
later rushed to the hospital for suspicion of having Covid-19.
The content of the boxes has since been deposited with a bank=20
after report confirmed, the death of the diplomat a month after=20
from Covid-19 complications, leaving no trace or information of=20
any relatives or next of kin. So the reason why I am contacting=20
you is, for you to work with me and act as his next of kin,
because you both share the same last name. I will arrange for=20
all documents that you need to present to the authorities at the=20
airport, so that they would know that you are the next of kin to=20
the deceased. The bank will hand over all the money to you by=20
transferring it to your bank account but you have to assure me=20
that, once you receive the funds, it will be share equally.
I wait to hear from you urgently and I will appreciate if we can=20
keep this deal strictly confidential. You might think of it as=20
illegal but it's not, because if no one comes to make claim on=20
it, the government will claim it after 3yrs, so it's not illegal,=20
I just need your support and join me to make claim on it. please
get back to me via my private Email:=20
(hayleeschowalter736@gmail.com) for further directives.
Thanks,
Suren Kanthasamy
------=_NextPart_000_0012_022E8B72.0D656BB6
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
w3.org/TR/html4/loose.dtd">
------=_NextPart_000_0012_022E8B72.0D656BB6--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 21 Apr 2022 23:21:01 -0600
Received: from 4.176.133.34.bc.googleusercontent.com ([34.133.176.4]:57966 helo=mail.video.io)
by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))
(envelope-from
id 1nhliB-000MRG-A3
for dave@doctor.nl2k.ab.ca;
Thu, 21 Apr 2022 23:20:12 -0600
Received: from lawa.com (unknown [10.196.0.1])
by mail.video.io (Postfix) with ESMTP id 0B0D44787C2
for
Reply-To: hayleeschowalter736@gmail.com
From: Suren
To: dave@doctor.nl2k.ab.ca
Subject: Hi, Please Send me a Response
Date: 21 Apr 2022 22:04:00 -0700
Message-ID: <20220421220400.14E8BE67D3DD777B@lawa.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0012_022E8B72.0D656BB6"
X-Spam_score: 18.6
X-Spam_score_int: 186
X-Spam_bar: ++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello How are you? I hope you are fine and doing great. I
am sorry for coming to you this way, but this is the only means to communicate
with you and I hope you will see reason to contact me back after rea [...]
Content analysis details: (18.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 TVD_RCVD_IP Message was received from an IP address
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[34.133.176.4 listed in psbl.surriel.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[34.133.176.4 listed in bl.score.senderscore.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
2.1 RCVD_IN_MSPIKE_L4 RBL: Bad reputation (-4)
[34.133.176.4 listed in bl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[hayleeschowalter736[at]gmail.com]
2.5 HK_SCAM_N2 BODY: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
0.0 LOTS_OF_MONEY Huge... sums of money
0.4 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 HK_SCAM No description available.
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps
0.3 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS
0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.0 XFER_LOTSA_MONEY Transfer a lot of money
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Hi, Please Send me a Response
------=_NextPart_000_0012_022E8B72.0D656BB6
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Hello
How are you? I hope you are fine and doing great. I am sorry for=20
coming to you this way, but this is the only means to communicate=20
with you and I hope you will see reason to contact me back after
reading this email. I want to share important information with=20
you, all I ask is that you read this email carefully, understand=20
what I am saying and I need your honest discretion. You may want=20
to know that, this may cause me my job if words get that I leak=20
out this information, so I need somebody that I can trust and=20
someone who is honest too.
My name is Suren Kanthasamy, an Australian living in the United=20
States and work as head of luggage/baggage storage facilities=20
(Operations, Maintenance, Transportation) at Los Angeles=20
International Airport - L.A.X, USA. During my recent withheld=20
package routine check at the Airport
Storage Vault last year December 2021, I discovered an abandoned=20
shipment which I personally recorded when a Diplomat from=20
Australia flew in October 2020 and when it was scanned, it
revealed an undisclosed sum of money in a Metal Trunk Boxes=20
weighing approximately 720kg.
The consignment was held on hold because the Contents of the=20
consignment was not properly declared by the consignee as "MONEY"=20
rather it was declared as personal effect to avoid interrogation=20
and after investigation was complete, the diplomat was fine but=20
the inability of the diplomat to pay for the United States Non-=20
Inspection Charges of $5,700.00, he abandon it because he was=20
later rushed to the hospital for suspicion of having Covid-19.
The content of the boxes has since been deposited with a bank=20
after report confirmed, the death of the diplomat a month after=20
from Covid-19 complications, leaving no trace or information of=20
any relatives or next of kin. So the reason why I am contacting=20
you is, for you to work with me and act as his next of kin,
because you both share the same last name. I will arrange for=20
all documents that you need to present to the authorities at the=20
airport, so that they would know that you are the next of kin to=20
the deceased. The bank will hand over all the money to you by=20
transferring it to your bank account but you have to assure me=20
that, once you receive the funds, it will be share equally.
I wait to hear from you urgently and I will appreciate if we can=20
keep this deal strictly confidential. You might think of it as=20
illegal but it's not, because if no one comes to make claim on=20
it, the government will claim it after 3yrs, so it's not illegal,=20
I just need your support and join me to make claim on it. please
get back to me via my private Email:=20
(hayleeschowalter736@gmail.com) for further directives.
Thanks,
Suren Kanthasamy
------=_NextPart_000_0012_022E8B72.0D656BB6
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
w3.org/TR/html4/loose.dtd">
------=_NextPart_000_0012_022E8B72.0D656BB6--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments