compensation spam from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 20 Jul 2022 16:54:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oEIZn-000KLr-3w
for dave@doctor.nl2k.ab.ca;
Wed, 20 Jul 2022 16:53:55 -0600
Resent-From: The Doctor
Resent-Date: Wed, 20 Jul 2022 16:53:55 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-io1-f67.google.com ([209.85.166.67]:34623)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oEIG4-000IEc-H3
for doctor@doctor.nl2k.ab.ca;
Wed, 20 Jul 2022 16:33:37 -0600
Received: by mail-io1-f67.google.com with SMTP id x64so49260iof.1
for; Wed, 20 Jul 2022 15:33:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=Pm4blNEiUxJ7PFHd/MXl1FNU61P4zcnPR71aelKdwEA=;
b=Uz1ev+iKQUKZQZyUSRBcYA3++eSvl6/d5c4lmSN2H5lpZ+H6a4Wmi6hxiOMCWcZR2s
f2jgbpqzhuH/IrRKxydzAK9o9LrskBFQnhaf/pJeO30lxyPdhtNtwK2SjtKaiP4sWrZd
oi95I++EXtXiXlsksWfXuoMRv627VP8dw/TgyLIKoejSidm7j+62De5FIf3sG+0AMQlH
eyhVDyIBDCkl6v38reDJKzQxyM3r3bHcK0ghv1dNTobDn2cr/sxRXW0znjuYlsNutC1L
YyU0BiGugmEW0AVlhW1nw76IV4OcwJHarbKjXI3SLJYcsDrendRgYvEibrrMa8eYCIjM
ZsOQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=Pm4blNEiUxJ7PFHd/MXl1FNU61P4zcnPR71aelKdwEA=;
b=y5chJsoXSXQlm3aigWWgG8DqfxDeRJggbm3ntg3Vfkh99YA3bgWLT/Lf7PzafkUETX
Iemx+N+qVXdEcJO+Wsvtm88ZlpJl6+70vZpCESfhHoxdBUTA5E6H5rzyo5EuxdLNXqmN
WN8a4swbM8ia+hvhEHoULg7GvDNHGPv9DCBkqa0vBKG5ThS8iWqmMchJeFhd/75Fhl3S
EassCbEDOfLKze9qdoQzzsnr0PjHCArkHhEwvrrbB4XmgkTD+I0e5lD4cnHzl8b5Cmo0
brX68dwSMHctlcx7W+bhgPJY04pVBu3Il5vBau0uX6o33i9ckPwch20qt2bM8nAQlbp1
8biQ==
X-Gm-Message-State: AJIora/DoNskixA6+i0zaDLDFY7066O4fGCrDx0SCaCBwO1yJsyxIUwx
hjftuNduDCgCIm+iaIY35cnuoxLCOyoRVnZGL7A=
X-Google-Smtp-Source: AGRyM1sP1B9cMQFbcuTA161VV0q8tllNu3PDnDYuVdhqURlLru8oFL9pSXRdwb1CmSHF8wNh6vhmAaiRELc41WUYsQI=
X-Received: by 2002:a05:6638:240b:b0:341:4b32:4b4f with SMTP id
z11-20020a056638240b00b003414b324b4fmr15325491jat.185.1658356389063; Wed, 20
Jul 2022 15:33:09 -0700 (PDT)
MIME-Version: 1.0
Reply-To: jmxx1973@hotmail.com
From: "UN/IMF/OFFICE"
Date: Wed, 20 Jul 2022 23:33:45 +0100
Message-ID:
Subject: RE: GOOD NEWS (CLAIM YOUR COMPENSATION FUND) REPLY URGENTLY
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000007b345405e4442fb2"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 27.7
X-Spam_score_int: 277
X-Spam_bar: +++++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Beneficiary, This is to inform you that the united state
government authority (USA) in collaboration with the International Monetary
Fund (IMF) has been alleged to monitor all transactions. I hereby advise
you to stop whatever transactions you are Having in regards of your fund.
This information is reaching you because from our intelligent unit we discovered
that you have been involved i [...]
Content analysis details: (27.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 HK_RANDOM_FROM From username looks random
0.6 HK_RANDOM_ENVFROM Envelope sender username looks random
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.67 listed in wl.mailspike.net]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[jmxx1973[at]hotmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[babaayiumar[at]gmail.com]
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.5 HK_SCAM_N8 BODY: No description available.
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 HK_SCAM No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.5 MONEY_ATM_CARD Lots of money on an ATM card
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
1.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of
money
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} RE: GOOD NEWS (CLAIM YOUR COMPENSATION FUND) REPLY URGENTLY
--0000000000007b345405e4442fb2
Content-Type: text/plain; charset="UTF-8"
Dear Beneficiary,
This is to inform you that the united state government authority (USA) in
collaboration with the International Monetary Fund (IMF) has been alleged
to monitor all transactions.
I hereby advise you to stop whatever transactions you are Having in regards
of your fund. This information is reaching you because from our intelligent
unit we discovered that you have been involved in a transaction with
Internet Fraudster.
Based on a closed door-meeting held by all stakeholders regarding your bad
experience with the Internet Fraudster. However, a sum of (US$1,200,000.00)
has been approved to compensate all Scam Victims Across the world by the
above mentioned Organizations? We unanimously agreed to pay you Via ATM
MASTER CARD / BANK DRAFT for the safety of the said amount as compensation
for Scam Victims across the world.
You are advised to provide this office with your full details such as Your
Name, Cell Phone Number, Occupation and your Current Home Address where
your ATM MASTER CARD / BANK DRAFT will be delivered to you for security
reasons, get back to us for easy communication through our office
email: ( *IMF.1932_usa@consultant.com
*) as We have been given 14 working days to
get your ATM MASTER CARD / BANK DRAFT delivered to you by all the
Stakeholders.
Yours in Service,
Antonio Guterres
Head Of Operation
--0000000000007b345405e4442fb2
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
ne-height:normal;font-size:11pt;font-family:Calibri,"sans-serif""=
>
t;serif"">
Dear Beneficiary,
ize:11pt;font-family:Calibri,"sans-serif"">
ze:12pt;line-height:115%;font-family:"Times New Roman","seri=
f"">
This is to inform you that the united state government authority (USA) in
collaboration with the International Monetary Fund (IMF) has been alleged t=
o
monitor all transactions.
I hereby advise you to stop whatever transactions you are Having in regards=
of
your fund. This information is reaching you because from our intelligent un=
it
we discovered that you have been involved in a transaction with Internet
Fraudster.
=C2=A0Based on a closed door-meeting held by all stakeholders regarding you=
r
bad experience with the Internet Fraudster. However, a sum of (US$1,200,000=
.00)
has been approved to compensate all Scam Victims Across the world by the ab=
ove
mentioned Organizations? We unanimously agreed to pay you Via ATM MASTER CA=
RD /
BANK DRAFT for the safety of the said amount as compensation for Scam Victi=
ms
across the world.
You are advised to provide this office with your full details such as Your
Name, Cell Phone Number, Occupation and your Current Home Address where you=
r
ATM MASTER CARD / BANK DRAFT will be delivered to you for security reasons,=
get
back to us for easy communication through our office email: ( =C2=A0=
I","sans-serif";color:rgb(0,32,96);background-image:initial;=
background-position:initial;background-size:initial;background-repeat:initi=
al;background-origin:initial;background-clip:initial">
.1932_usa@consultant.com">IMF.1932_usa@consultant.com
tyle=3D"font-size:12pt;line-height:115%;font-family:"Times New Roman&q=
uot;,"serif"">) as We have been given 14 working
days to get your ATM MASTER CARD / BANK DRAFT delivered to you by all the
Stakeholders.
Yours in Service,
Antonio Guterres
Head Of Operation
uot;;background-image:initial;background-position:initial;background-size:i=
nitial;background-repeat:initial;background-origin:initial;background-clip:=
initial">
--0000000000007b345405e4442fb2--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 20 Jul 2022 16:54:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oEIZn-000KLr-3w
for dave@doctor.nl2k.ab.ca;
Wed, 20 Jul 2022 16:53:55 -0600
Resent-From: The Doctor
Resent-Date: Wed, 20 Jul 2022 16:53:55 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-io1-f67.google.com ([209.85.166.67]:34623)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oEIG4-000IEc-H3
for doctor@doctor.nl2k.ab.ca;
Wed, 20 Jul 2022 16:33:37 -0600
Received: by mail-io1-f67.google.com with SMTP id x64so49260iof.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=Pm4blNEiUxJ7PFHd/MXl1FNU61P4zcnPR71aelKdwEA=;
b=Uz1ev+iKQUKZQZyUSRBcYA3++eSvl6/d5c4lmSN2H5lpZ+H6a4Wmi6hxiOMCWcZR2s
f2jgbpqzhuH/IrRKxydzAK9o9LrskBFQnhaf/pJeO30lxyPdhtNtwK2SjtKaiP4sWrZd
oi95I++EXtXiXlsksWfXuoMRv627VP8dw/TgyLIKoejSidm7j+62De5FIf3sG+0AMQlH
eyhVDyIBDCkl6v38reDJKzQxyM3r3bHcK0ghv1dNTobDn2cr/sxRXW0znjuYlsNutC1L
YyU0BiGugmEW0AVlhW1nw76IV4OcwJHarbKjXI3SLJYcsDrendRgYvEibrrMa8eYCIjM
ZsOQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=Pm4blNEiUxJ7PFHd/MXl1FNU61P4zcnPR71aelKdwEA=;
b=y5chJsoXSXQlm3aigWWgG8DqfxDeRJggbm3ntg3Vfkh99YA3bgWLT/Lf7PzafkUETX
Iemx+N+qVXdEcJO+Wsvtm88ZlpJl6+70vZpCESfhHoxdBUTA5E6H5rzyo5EuxdLNXqmN
WN8a4swbM8ia+hvhEHoULg7GvDNHGPv9DCBkqa0vBKG5ThS8iWqmMchJeFhd/75Fhl3S
EassCbEDOfLKze9qdoQzzsnr0PjHCArkHhEwvrrbB4XmgkTD+I0e5lD4cnHzl8b5Cmo0
brX68dwSMHctlcx7W+bhgPJY04pVBu3Il5vBau0uX6o33i9ckPwch20qt2bM8nAQlbp1
8biQ==
X-Gm-Message-State: AJIora/DoNskixA6+i0zaDLDFY7066O4fGCrDx0SCaCBwO1yJsyxIUwx
hjftuNduDCgCIm+iaIY35cnuoxLCOyoRVnZGL7A=
X-Google-Smtp-Source: AGRyM1sP1B9cMQFbcuTA161VV0q8tllNu3PDnDYuVdhqURlLru8oFL9pSXRdwb1CmSHF8wNh6vhmAaiRELc41WUYsQI=
X-Received: by 2002:a05:6638:240b:b0:341:4b32:4b4f with SMTP id
z11-20020a056638240b00b003414b324b4fmr15325491jat.185.1658356389063; Wed, 20
Jul 2022 15:33:09 -0700 (PDT)
MIME-Version: 1.0
Reply-To: jmxx1973@hotmail.com
From: "UN/IMF/OFFICE"
Date: Wed, 20 Jul 2022 23:33:45 +0100
Message-ID:
Subject: RE: GOOD NEWS (CLAIM YOUR COMPENSATION FUND) REPLY URGENTLY
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000007b345405e4442fb2"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 27.7
X-Spam_score_int: 277
X-Spam_bar: +++++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Beneficiary, This is to inform you that the united state
government authority (USA) in collaboration with the International Monetary
Fund (IMF) has been alleged to monitor all transactions. I hereby advise
you to stop whatever transactions you are Having in regards of your fund.
This information is reaching you because from our intelligent unit we discovered
that you have been involved i [...]
Content analysis details: (27.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 HK_RANDOM_FROM From username looks random
0.6 HK_RANDOM_ENVFROM Envelope sender username looks random
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.67 listed in wl.mailspike.net]
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[jmxx1973[at]hotmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[babaayiumar[at]gmail.com]
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.5 HK_SCAM_N8 BODY: No description available.
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 HK_SCAM No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.5 MONEY_ATM_CARD Lots of money on an ATM card
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
1.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of
money
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} RE: GOOD NEWS (CLAIM YOUR COMPENSATION FUND) REPLY URGENTLY
--0000000000007b345405e4442fb2
Content-Type: text/plain; charset="UTF-8"
Dear Beneficiary,
This is to inform you that the united state government authority (USA) in
collaboration with the International Monetary Fund (IMF) has been alleged
to monitor all transactions.
I hereby advise you to stop whatever transactions you are Having in regards
of your fund. This information is reaching you because from our intelligent
unit we discovered that you have been involved in a transaction with
Internet Fraudster.
Based on a closed door-meeting held by all stakeholders regarding your bad
experience with the Internet Fraudster. However, a sum of (US$1,200,000.00)
has been approved to compensate all Scam Victims Across the world by the
above mentioned Organizations? We unanimously agreed to pay you Via ATM
MASTER CARD / BANK DRAFT for the safety of the said amount as compensation
for Scam Victims across the world.
You are advised to provide this office with your full details such as Your
Name, Cell Phone Number, Occupation and your Current Home Address where
your ATM MASTER CARD / BANK DRAFT will be delivered to you for security
reasons, get back to us for easy communication through our office
email: ( *IMF.1932_usa@consultant.com
get your ATM MASTER CARD / BANK DRAFT delivered to you by all the
Stakeholders.
Yours in Service,
Antonio Guterres
Head Of Operation
--0000000000007b345405e4442fb2
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
ne-height:normal;font-size:11pt;font-family:Calibri,"sans-serif""=
>
t;serif"">
Dear Beneficiary,
ize:11pt;font-family:Calibri,"sans-serif"">
ze:12pt;line-height:115%;font-family:"Times New Roman","seri=
f"">
This is to inform you that the united state government authority (USA) in
collaboration with the International Monetary Fund (IMF) has been alleged t=
o
monitor all transactions.
I hereby advise you to stop whatever transactions you are Having in regards=
of
your fund. This information is reaching you because from our intelligent un=
it
we discovered that you have been involved in a transaction with Internet
Fraudster.
=C2=A0Based on a closed door-meeting held by all stakeholders regarding you=
r
bad experience with the Internet Fraudster. However, a sum of (US$1,200,000=
.00)
has been approved to compensate all Scam Victims Across the world by the ab=
ove
mentioned Organizations? We unanimously agreed to pay you Via ATM MASTER CA=
RD /
BANK DRAFT for the safety of the said amount as compensation for Scam Victi=
ms
across the world.
You are advised to provide this office with your full details such as Your
Name, Cell Phone Number, Occupation and your Current Home Address where you=
r
ATM MASTER CARD / BANK DRAFT will be delivered to you for security reasons,=
get
back to us for easy communication through our office email: ( =C2=A0=
I","sans-serif";color:rgb(0,32,96);background-image:initial;=
background-position:initial;background-size:initial;background-repeat:initi=
al;background-origin:initial;background-clip:initial">
.1932_usa@consultant.com">IMF.1932_usa@consultant.com
tyle=3D"font-size:12pt;line-height:115%;font-family:"Times New Roman&q=
uot;,"serif"">) as We have been given 14 working
days to get your ATM MASTER CARD / BANK DRAFT delivered to you by all the
Stakeholders.
Yours in Service,
Antonio Guterres
Head Of Operation
uot;;background-image:initial;background-position:initial;background-size:i=
nitial;background-repeat:initial;background-origin:initial;background-clip:=
initial">
--0000000000007b345405e4442fb2--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments