Money scam spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 08 May 2022 16:41:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1nnpZX-0008m3-N5
for dave@doctor.nl2k.ab.ca;
Sun, 08 May 2022 16:40:15 -0600
Resent-From: The Doctor
Resent-Date: Sun, 8 May 2022 16:40:15 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [200.75.10.84] (port=14963 helo=si100.idev.cl)
by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))
(envelope-from)
id 1nnnM4-000Cwa-Uf
for doctor@netknow.ca;
Sun, 08 May 2022 14:18:17 -0600
Received: from [156.96.56.14] ([156.96.56.14])
(authenticated bits=0)
by si100.idev.cl (8.14.4/8.14.4) with ESMTP id 248A8PQZ031077;
Sun, 8 May 2022 06:12:45 -0400
Message-Id: <202205081012.248A8PQZ031077@si100.idev.cl>
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: ARE YOU DEAD OR ALIVE ??????????? REPLY NOW
To: Recipients
From: lsmith@jimpc.net
Date: Sun, 08 May 2022 03:11:50 -0700
Reply-To: jw626521@gmail.com
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.4.3 (si100.idev.cl [10.0.60.100]); Sun, 08 May 2022 06:14:32 -0400 (-04)
X-Virus-Scanned: clamav-milter 0.98.4 at si100.idev.cl
X-Virus-Status: Clean
X-Spam_score: 16.8
X-Spam_score_int: 168
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Beneficiary, My Name is John O. Williams, I am in charge
of all unpaid Inheritance/Contract fund which all process of payment in your
favor is in progress. A power of attorney was forwarded to my office this
morni [...]
Content analysis details: (16.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.6 SUBJ_ALL_CAPS Subject is all capitals
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[200.75.10.84 listed in bl.score.senderscore.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[200.75.10.84 listed in bb.barracudacentral.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[200.75.10.84 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[jw626521[at]gmail.com]
0.9 URG_BIZ BODY: Contains urgent matter
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
2.7 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} ARE YOU DEAD OR ALIVE ??????????? REPLY NOW
Dear Beneficiary,
My Name is John O. Williams, I am in charge of all unpaid
Inheritance/Contract fund which all process of payment in your favor
is in progress. A power of attorney was forwarded to my office this
morning by your local associates and a Foreign partner Mr. ALBERT
HILL to claim your fund.
This gentleman claimed to be the representative of your company, and
this power of attorney stated that you have died, they brought a
picture of your burial and an account to replace your information and
claimed your fund which it is right now lying DORMANT and UNCLAIMED,
below is the new account they have submitted:
BANK.-BPI BANK
QUEZON AVE. DELTA BRANCH
QUEZON CITY, PHILIPPINES
ACCOUNT NO. 2984-0008-66
SWIFT CODE. BOPIPHMM
Be further informed that this power of attorney also stated that you
suffered and died of a throat cancer/COVID-19 . he also brought your
burial pictures in confirmation that you are dead. You are therefore
given 48 hrs to confirm the truth in this information if you are still
alive .
As soon as we hear from you and confirm, we shall proceed with all
arrangements for prompt payment.
You are advised to reconfirm the following information:
Full Name:
Full Address:
Amount in question:
Telephone Number :
You are advised to stop all communication with any office here and
abroad for prompt payment. We are working to serve you better.
I await your urgent response.
Sincerely,
John O. Williams.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 08 May 2022 16:41:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1nnpZX-0008m3-N5
for dave@doctor.nl2k.ab.ca;
Sun, 08 May 2022 16:40:15 -0600
Resent-From: The Doctor
Resent-Date: Sun, 8 May 2022 16:40:15 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [200.75.10.84] (port=14963 helo=si100.idev.cl)
by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))
(envelope-from
id 1nnnM4-000Cwa-Uf
for doctor@netknow.ca;
Sun, 08 May 2022 14:18:17 -0600
Received: from [156.96.56.14] ([156.96.56.14])
(authenticated bits=0)
by si100.idev.cl (8.14.4/8.14.4) with ESMTP id 248A8PQZ031077;
Sun, 8 May 2022 06:12:45 -0400
Message-Id: <202205081012.248A8PQZ031077@si100.idev.cl>
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: ARE YOU DEAD OR ALIVE ??????????? REPLY NOW
To: Recipients
From: lsmith@jimpc.net
Date: Sun, 08 May 2022 03:11:50 -0700
Reply-To: jw626521@gmail.com
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.4.3 (si100.idev.cl [10.0.60.100]); Sun, 08 May 2022 06:14:32 -0400 (-04)
X-Virus-Scanned: clamav-milter 0.98.4 at si100.idev.cl
X-Virus-Status: Clean
X-Spam_score: 16.8
X-Spam_score_int: 168
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Beneficiary, My Name is John O. Williams, I am in charge
of all unpaid Inheritance/Contract fund which all process of payment in your
favor is in progress. A power of attorney was forwarded to my office this
morni [...]
Content analysis details: (16.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.6 SUBJ_ALL_CAPS Subject is all capitals
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[200.75.10.84 listed in bl.score.senderscore.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[200.75.10.84 listed in bb.barracudacentral.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[200.75.10.84 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[jw626521[at]gmail.com]
0.9 URG_BIZ BODY: Contains urgent matter
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
2.7 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} ARE YOU DEAD OR ALIVE ??????????? REPLY NOW
Dear Beneficiary,
My Name is John O. Williams, I am in charge of all unpaid
Inheritance/Contract fund which all process of payment in your favor
is in progress. A power of attorney was forwarded to my office this
morning by your local associates and a Foreign partner Mr. ALBERT
HILL to claim your fund.
This gentleman claimed to be the representative of your company, and
this power of attorney stated that you have died, they brought a
picture of your burial and an account to replace your information and
claimed your fund which it is right now lying DORMANT and UNCLAIMED,
below is the new account they have submitted:
BANK.-BPI BANK
QUEZON AVE. DELTA BRANCH
QUEZON CITY, PHILIPPINES
ACCOUNT NO. 2984-0008-66
SWIFT CODE. BOPIPHMM
Be further informed that this power of attorney also stated that you
suffered and died of a throat cancer/COVID-19 . he also brought your
burial pictures in confirmation that you are dead. You are therefore
given 48 hrs to confirm the truth in this information if you are still
alive .
As soon as we hear from you and confirm, we shall proceed with all
arrangements for prompt payment.
You are advised to reconfirm the following information:
Full Name:
Full Address:
Amount in question:
Telephone Number :
You are advised to stop all communication with any office here and
abroad for prompt payment. We are working to serve you better.
I await your urgent response.
Sincerely,
John O. Williams.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments