Funds spam from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 06 Jun 2022 16:20:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1nyL4T-000Nts-86
for dave@doctor.nl2k.ab.ca;
Mon, 06 Jun 2022 16:19:37 -0600
Resent-From: The Doctor
Resent-Date: Mon, 6 Jun 2022 16:19:37 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f41.google.com ([209.85.218.41]:46924)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1nyEOx-0004hT-D0
for doctor@doctor.nl2k.ab.ca;
Mon, 06 Jun 2022 09:12:23 -0600
Received: by mail-ej1-f41.google.com with SMTP id v1so18875798ejg.13
for; Mon, 06 Jun 2022 08:11:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=cmxLeQhc/Gm0jEweZALq36BxqgxDBf0HfFASFmM5MFk=;
b=KGYl21nWV2Rn4o/V7xHkE4bIayU+NWQd/aKYeYzv0EdqseelmRyXQZsDjE6krM2Npd
y7EFh5P7wDJPBrdNyhb8OqPXkr/nZAcqylwWmj+uUqa+Lfi8Kc0kxFf/bjzkna3mBNOW
w0p6dqXidAa66boJZalRaPLywWH/FuBVSMIZLvGWg3+EylgrGvDHBeDULbDHVo12mtAy
DBvjm1S7/rrBlkOgVTMAQNoByzFQxOY3LxDMV2TMx8gqd2xU5RMpMc7js0MfkJaJsWLG
ABgPPitdAF+pf34zQCAvSnNLC4s3t7kRT2B8hgn1BBlpy6E6mw3Z/3dbtAs2aUtn0SeP
4dAA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=cmxLeQhc/Gm0jEweZALq36BxqgxDBf0HfFASFmM5MFk=;
b=mNWV9JBASFro1/FYoBoOOkCggaYsEiHHU5xvke/Gra2E920x5vS4rgo5aMDZCjUgzW
ADjoSydSYBdWrynWXP9tHdyDbUcFGYye4LQI9ZV8I6l86IXrOKDJHwnNbFd0Sgb6DS+j
9vQ+N8PGPNI5aDYGlM1g7LyZbeJ4AsvfkSsHwmQ8zfq5B2HmLVw3QN2srnzCUoICPINg
lA6dmpZv96J4Bb5YWSZG6F5kdlZGTF5Vo7jWKs708Eg2jmD9r3RiE7GG9etwPsDu5XXT
QYsrspjyHXvL92HB5vcKxmCbkwUMTgmFWRVpyE+agls6CkXi1EA7qbBmKKmXAwAhGYwM
PKpw==
X-Gm-Message-State: AOAM530zrsBapEE/M8KB6cYzu9O1jXk5fl6LzwMRyn+Xo0HDUd3SoyGw
Cp7wtwQYGkraDzNcqKW3jKMsoxG7zkzXtYwpbOc=
X-Google-Smtp-Source: ABdhPJz5Tw5TmtuF+XQrUBxwKRuho7pkvKYm/3M9v9srLeeUeXKXJyEbOaAnCyckiHtyjeD64m0m4N4EWa4U4npp5xo=
X-Received: by 2002:a17:907:ea6:b0:708:1282:cbe8 with SMTP id
ho38-20020a1709070ea600b007081282cbe8mr22555180ejc.520.1654528311715; Mon, 06
Jun 2022 08:11:51 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:ab4:ada1:0:0:0:0:0 with HTTP; Mon, 6 Jun 2022 08:11:51 -0700 (PDT)
Reply-To: garryellis5521@gmail.com
From: "MR. GARRY ELLIS"
Date: Mon, 6 Jun 2022 16:11:51 +0100
Message-ID:
Subject: ABANDONED FUNDS SHIPMENT.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 9.1
X-Spam_score_int: 91
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I am Mr. Garry Ellis, Head of Inspection Unit United Nations
office. inspection Agency in Harts field Jackson International Airport Atlanta,
GA. During our investigation, We discovered An abandoned sh [...]
Content analysis details: (9.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[adegokewakeel22[at]gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.41 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[adegokewakeel22[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[garryellis5521[at]gmail.com]
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
1.5 HK_NAME_FM_MR_MRS No description available.
-0.0 T_SCC_BODY_TEXT_LINE No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} ABANDONED FUNDS SHIPMENT.
I am Mr. Garry Ellis, Head of Inspection Unit United Nations office.
inspection Agency in Harts field Jackson International Airport
Atlanta, GA. During our investigation, We discovered An abandoned
shipment through a Diplomat from United Kingdom which was transferred
from JF Kennedy Airport. To our facility here in Atlanta, and when
scanned it revealed an undisclosed sum of money in 2 Metal Consignment
Package weighing approximately 110kg each. The consignment was abandoned
because the Content was not properly declared by the consignee
Right now you need the consignment clearance permit or allow us repatriate it
back to UK (place of origin) as we were instructed. Like I did say again, the
shipper abandoned it and ran away most importantly because he gave a false
declaration, you have to get back this packages provided you will also give
me something out of it (financial gratification) Contact Email Address
(garryellis5521@gmail.com)
I wait to hear from you very urgently.
Sincerely,
Mr. Garry Ellis.
Head Officer-in-Charge
Administrative Service Inspection Unit.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 06 Jun 2022 16:20:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1nyL4T-000Nts-86
for dave@doctor.nl2k.ab.ca;
Mon, 06 Jun 2022 16:19:37 -0600
Resent-From: The Doctor
Resent-Date: Mon, 6 Jun 2022 16:19:37 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f41.google.com ([209.85.218.41]:46924)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1nyEOx-0004hT-D0
for doctor@doctor.nl2k.ab.ca;
Mon, 06 Jun 2022 09:12:23 -0600
Received: by mail-ej1-f41.google.com with SMTP id v1so18875798ejg.13
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=cmxLeQhc/Gm0jEweZALq36BxqgxDBf0HfFASFmM5MFk=;
b=KGYl21nWV2Rn4o/V7xHkE4bIayU+NWQd/aKYeYzv0EdqseelmRyXQZsDjE6krM2Npd
y7EFh5P7wDJPBrdNyhb8OqPXkr/nZAcqylwWmj+uUqa+Lfi8Kc0kxFf/bjzkna3mBNOW
w0p6dqXidAa66boJZalRaPLywWH/FuBVSMIZLvGWg3+EylgrGvDHBeDULbDHVo12mtAy
DBvjm1S7/rrBlkOgVTMAQNoByzFQxOY3LxDMV2TMx8gqd2xU5RMpMc7js0MfkJaJsWLG
ABgPPitdAF+pf34zQCAvSnNLC4s3t7kRT2B8hgn1BBlpy6E6mw3Z/3dbtAs2aUtn0SeP
4dAA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=cmxLeQhc/Gm0jEweZALq36BxqgxDBf0HfFASFmM5MFk=;
b=mNWV9JBASFro1/FYoBoOOkCggaYsEiHHU5xvke/Gra2E920x5vS4rgo5aMDZCjUgzW
ADjoSydSYBdWrynWXP9tHdyDbUcFGYye4LQI9ZV8I6l86IXrOKDJHwnNbFd0Sgb6DS+j
9vQ+N8PGPNI5aDYGlM1g7LyZbeJ4AsvfkSsHwmQ8zfq5B2HmLVw3QN2srnzCUoICPINg
lA6dmpZv96J4Bb5YWSZG6F5kdlZGTF5Vo7jWKs708Eg2jmD9r3RiE7GG9etwPsDu5XXT
QYsrspjyHXvL92HB5vcKxmCbkwUMTgmFWRVpyE+agls6CkXi1EA7qbBmKKmXAwAhGYwM
PKpw==
X-Gm-Message-State: AOAM530zrsBapEE/M8KB6cYzu9O1jXk5fl6LzwMRyn+Xo0HDUd3SoyGw
Cp7wtwQYGkraDzNcqKW3jKMsoxG7zkzXtYwpbOc=
X-Google-Smtp-Source: ABdhPJz5Tw5TmtuF+XQrUBxwKRuho7pkvKYm/3M9v9srLeeUeXKXJyEbOaAnCyckiHtyjeD64m0m4N4EWa4U4npp5xo=
X-Received: by 2002:a17:907:ea6:b0:708:1282:cbe8 with SMTP id
ho38-20020a1709070ea600b007081282cbe8mr22555180ejc.520.1654528311715; Mon, 06
Jun 2022 08:11:51 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:ab4:ada1:0:0:0:0:0 with HTTP; Mon, 6 Jun 2022 08:11:51 -0700 (PDT)
Reply-To: garryellis5521@gmail.com
From: "MR. GARRY ELLIS"
Date: Mon, 6 Jun 2022 16:11:51 +0100
Message-ID:
Subject: ABANDONED FUNDS SHIPMENT.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 9.1
X-Spam_score_int: 91
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I am Mr. Garry Ellis, Head of Inspection Unit United Nations
office. inspection Agency in Harts field Jackson International Airport Atlanta,
GA. During our investigation, We discovered An abandoned sh [...]
Content analysis details: (9.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[adegokewakeel22[at]gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.41 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[adegokewakeel22[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[garryellis5521[at]gmail.com]
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
1.5 HK_NAME_FM_MR_MRS No description available.
-0.0 T_SCC_BODY_TEXT_LINE No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} ABANDONED FUNDS SHIPMENT.
I am Mr. Garry Ellis, Head of Inspection Unit United Nations office.
inspection Agency in Harts field Jackson International Airport
Atlanta, GA. During our investigation, We discovered An abandoned
shipment through a Diplomat from United Kingdom which was transferred
from JF Kennedy Airport. To our facility here in Atlanta, and when
scanned it revealed an undisclosed sum of money in 2 Metal Consignment
Package weighing approximately 110kg each. The consignment was abandoned
because the Content was not properly declared by the consignee
Right now you need the consignment clearance permit or allow us repatriate it
back to UK (place of origin) as we were instructed. Like I did say again, the
shipper abandoned it and ran away most importantly because he gave a false
declaration, you have to get back this packages provided you will also give
me something out of it (financial gratification) Contact Email Address
(garryellis5521@gmail.com)
I wait to hear from you very urgently.
Sincerely,
Mr. Garry Ellis.
Head Officer-in-Charge
Administrative Service Inspection Unit.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments