Beneficiary spam from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 21 Jul 2022 18:10:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oEgED-000MQR-A2
for dave@doctor.nl2k.ab.ca;
Thu, 21 Jul 2022 18:09:13 -0600
Resent-From: The Doctor
Resent-Date: Thu, 21 Jul 2022 18:09:13 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs1-f67.google.com ([209.85.217.67]:39649)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oEewB-000FUb-T0
for sales@nk.ca;
Thu, 21 Jul 2022 16:46:38 -0600
Received: by mail-vs1-f67.google.com with SMTP id c3so2888063vsc.6
for; Thu, 21 Jul 2022 15:46:10 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:from:date:message-id:subject:to;
bh=xMTFpimUC0J4TVaEa1NLKJX46BeN/gkjX2Yo1PHwi2g=;
b=lqyJE6eznWGiIl4P5bP4epC7YWXsLNbLJTO8zH5oOX5KHuR3Pox9DYIEQcpurPQDW1
Pnx8iZKVeCSBY47DZ260CZCKAkyl11giSVEXITesetSsVFLPW0USg3+VpxEmjNOYfgFO
g+vtuOyL1gU1ODuhAGzaxJMXNCQ+8SnfPblirnz80LhkRIjEdDd0yEJV/rC7Ocr3f9N4
P2WF8cIgmuhqb90ebL6Gf8MIRxcZPbV1IBCb72JgZY+jzJZ4hd1jU4OEDsMZJ2GeSHZP
MaEMMHs8LBWgcdBuKBdmED2cSJl+Euhixp3DyxH0S/iEx5q/A+z38KF1Wu8q6RiqYsVI
KZJQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=xMTFpimUC0J4TVaEa1NLKJX46BeN/gkjX2Yo1PHwi2g=;
b=E4sn7WJhUlrACUslckyZGN0nfrs2PCNNObILzxpKY1pRJAzx/TAYjVm8JQj5KMhK2s
zhiTkLg6DnxSUb5jgD8GYKSdN6SC2Is71ecZxbCFojgD5HnXQ2y8m8Fl7k7tI6iTNudN
Obe7EjBkSHEZWYjiTQENc6zCIRIH8n4koMIHDkL5hArpHo1WFQ09X+i1pq+RA2naWHOc
4iI6AbOLLeGm0W8UWVYxsRkm1Pfljo8XjV8cWqd/28wCuyJZ/5KAwPN9PB91aYzuz9FR
65e13tl3dABkUMLyJIGUVW1vgjwhGmduVs0WenX47/e/2R6MUgexmzvgHl60Mw3XnCnd
/I6A==
X-Gm-Message-State: AJIora/B1KO5PeA4EHZfd5FossAFtxZUdVByVw6fi33dq4hsHLnnzixA
5HXXnEHgWQPB8MXiEt/orH2FcGemwR4DiSy6o0U=
X-Google-Smtp-Source: AGRyM1uoBIy6R9pBT6G4X6wzFfoHzJXecoNqz+jSkpj+mBqFBYmg6S0ZVFsV2VsjCUoo0zJzrpWD1Mrk9ikyQG1t/lk=
X-Received: by 2002:a67:b843:0:b0:356:6c55:dda1 with SMTP id
o3-20020a67b843000000b003566c55dda1mr234103vsh.52.1658443564653; Thu, 21 Jul
2022 15:46:04 -0700 (PDT)
MIME-Version: 1.0
From: Andrew McHattie
Date: Thu, 21 Jul 2022 23:45:51 +0100
Message-ID:
Subject: LETTER
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000008d208905e4587b6a"
Bcc: sales@nk.ca
X-Spam_score: 12.5
X-Spam_score_int: 125
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: My name is Andrew McHattie, A Management Accountant and an
External Auditor for financial institutes. I currently work with a team of
external auditors who were retained after the outbreak of covid-19 [...]
Content analysis details: (12.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.217.67 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[tinihamed93[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[andrewmchattie6[at]gmail.com]
2.7 UNCLAIMED_MONEY BODY: People just leave money laying around
0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} LETTER
--0000000000008d208905e4587b6a
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
My name is Andrew McHattie, A Management Accountant and an External Auditor
for financial institutes. I currently work with a team of external auditors
who were retained after the outbreak of covid-19 pandemic to audit
financial activities.
In the course of a routine audit of our books last quarter, I discovered
some investment accounts that have been dormant for one year now. Most of
the accounts belong to a single beneficiary who died during the covid-19
pandemic. (Four million five hundred thousand united states dollars)in the
intent of the deceased depositor who died intestate and as such, no
next-of-kin has come forward all these Months to lay claim to the
investment.( Names now withheld for security reasons ) Since this is our
second letter to you.
I contacted you because you bear the same last name with the deceased
expatriate investor/depositor who died as a result if covid-19 and
therefore I can present you as the beneficiary to the inheritance since
there is no written will from our late investor. My service's aim is to
provide you with a complete service as I'm prepared to provide you with all
the documents required by the holding Bank to enable them to release these
inheritance funds to you . we can secure the funds in this bank account for
ourselves instead of allowing it to be transmitted as =E2=80=9Cunclaimed fu=
nds=E2=80=9D
into the Treasury of the Government.
All the papers required will be processed in your acceptance of this deal
as we are prepared to offer you 40%,50% for me, while 10% should be given
to any orphanage Home/Hospitals/clinics to support the needy worldwide.
I request that you kindly respond to me with acceptance:
Your prompt response is highly imperative.
Andrew McHattie
--0000000000008d208905e4587b6a
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--0000000000008d208905e4587b6a--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 21 Jul 2022 18:10:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oEgED-000MQR-A2
for dave@doctor.nl2k.ab.ca;
Thu, 21 Jul 2022 18:09:13 -0600
Resent-From: The Doctor
Resent-Date: Thu, 21 Jul 2022 18:09:13 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs1-f67.google.com ([209.85.217.67]:39649)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oEewB-000FUb-T0
for sales@nk.ca;
Thu, 21 Jul 2022 16:46:38 -0600
Received: by mail-vs1-f67.google.com with SMTP id c3so2888063vsc.6
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:from:date:message-id:subject:to;
bh=xMTFpimUC0J4TVaEa1NLKJX46BeN/gkjX2Yo1PHwi2g=;
b=lqyJE6eznWGiIl4P5bP4epC7YWXsLNbLJTO8zH5oOX5KHuR3Pox9DYIEQcpurPQDW1
Pnx8iZKVeCSBY47DZ260CZCKAkyl11giSVEXITesetSsVFLPW0USg3+VpxEmjNOYfgFO
g+vtuOyL1gU1ODuhAGzaxJMXNCQ+8SnfPblirnz80LhkRIjEdDd0yEJV/rC7Ocr3f9N4
P2WF8cIgmuhqb90ebL6Gf8MIRxcZPbV1IBCb72JgZY+jzJZ4hd1jU4OEDsMZJ2GeSHZP
MaEMMHs8LBWgcdBuKBdmED2cSJl+Euhixp3DyxH0S/iEx5q/A+z38KF1Wu8q6RiqYsVI
KZJQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=xMTFpimUC0J4TVaEa1NLKJX46BeN/gkjX2Yo1PHwi2g=;
b=E4sn7WJhUlrACUslckyZGN0nfrs2PCNNObILzxpKY1pRJAzx/TAYjVm8JQj5KMhK2s
zhiTkLg6DnxSUb5jgD8GYKSdN6SC2Is71ecZxbCFojgD5HnXQ2y8m8Fl7k7tI6iTNudN
Obe7EjBkSHEZWYjiTQENc6zCIRIH8n4koMIHDkL5hArpHo1WFQ09X+i1pq+RA2naWHOc
4iI6AbOLLeGm0W8UWVYxsRkm1Pfljo8XjV8cWqd/28wCuyJZ/5KAwPN9PB91aYzuz9FR
65e13tl3dABkUMLyJIGUVW1vgjwhGmduVs0WenX47/e/2R6MUgexmzvgHl60Mw3XnCnd
/I6A==
X-Gm-Message-State: AJIora/B1KO5PeA4EHZfd5FossAFtxZUdVByVw6fi33dq4hsHLnnzixA
5HXXnEHgWQPB8MXiEt/orH2FcGemwR4DiSy6o0U=
X-Google-Smtp-Source: AGRyM1uoBIy6R9pBT6G4X6wzFfoHzJXecoNqz+jSkpj+mBqFBYmg6S0ZVFsV2VsjCUoo0zJzrpWD1Mrk9ikyQG1t/lk=
X-Received: by 2002:a67:b843:0:b0:356:6c55:dda1 with SMTP id
o3-20020a67b843000000b003566c55dda1mr234103vsh.52.1658443564653; Thu, 21 Jul
2022 15:46:04 -0700 (PDT)
MIME-Version: 1.0
From: Andrew McHattie
Date: Thu, 21 Jul 2022 23:45:51 +0100
Message-ID:
Subject: LETTER
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000008d208905e4587b6a"
Bcc: sales@nk.ca
X-Spam_score: 12.5
X-Spam_score_int: 125
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: My name is Andrew McHattie, A Management Accountant and an
External Auditor for financial institutes. I currently work with a team of
external auditors who were retained after the outbreak of covid-19 [...]
Content analysis details: (12.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.217.67 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[tinihamed93[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[andrewmchattie6[at]gmail.com]
2.7 UNCLAIMED_MONEY BODY: People just leave money laying around
0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} LETTER
--0000000000008d208905e4587b6a
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
My name is Andrew McHattie, A Management Accountant and an External Auditor
for financial institutes. I currently work with a team of external auditors
who were retained after the outbreak of covid-19 pandemic to audit
financial activities.
In the course of a routine audit of our books last quarter, I discovered
some investment accounts that have been dormant for one year now. Most of
the accounts belong to a single beneficiary who died during the covid-19
pandemic. (Four million five hundred thousand united states dollars)in the
intent of the deceased depositor who died intestate and as such, no
next-of-kin has come forward all these Months to lay claim to the
investment.( Names now withheld for security reasons ) Since this is our
second letter to you.
I contacted you because you bear the same last name with the deceased
expatriate investor/depositor who died as a result if covid-19 and
therefore I can present you as the beneficiary to the inheritance since
there is no written will from our late investor. My service's aim is to
provide you with a complete service as I'm prepared to provide you with all
the documents required by the holding Bank to enable them to release these
inheritance funds to you . we can secure the funds in this bank account for
ourselves instead of allowing it to be transmitted as =E2=80=9Cunclaimed fu=
nds=E2=80=9D
into the Treasury of the Government.
All the papers required will be processed in your acceptance of this deal
as we are prepared to offer you 40%,50% for me, while 10% should be given
to any orphanage Home/Hospitals/clinics to support the needy worldwide.
I request that you kindly respond to me with acceptance:
Your prompt response is highly imperative.
Andrew McHattie
--0000000000008d208905e4587b6a
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
My name is Andrew McHattie, A Management Accountant and an=
External Auditor for financial institutes. I currently work with a team of=
external auditors who were retained after the outbreak of covid-19 pandemi=
c to audit financial activities.
In the course of a routine audit of=
our books last quarter, I discovered some investment accounts that have be=
en dormant for one year now. Most of the accounts belong to a single benefi=
ciary who died during the covid-19 pandemic. (Four million five hundred tho=
usand united states dollars)in the intent of the deceased depositor who die=
d intestate and as such, no next-of-kin has come forward all these Months t=
o lay claim to the investment.( Names now withheld for security reasons ) S=
ince this is our second letter to you.
I contacted you because you b=
ear the same last name with the deceased expatriate investor/depositor who =
died as a result if covid-19 and therefore I can present you as the benefic=
iary to the inheritance since there is no written will from our late invest=
or. My service's aim is to provide you with a complete service as I'=
;m prepared to provide you with all the documents required by the holding B=
ank to enable them to release these inheritance funds to you . we can secur=
e the funds in this bank account for ourselves instead of allowing it to be=
transmitted as =E2=80=9Cunclaimed funds=E2=80=9D into the Treasury of the =
Government.
All the papers required will be processed in your accept=
ance of this deal as we are prepared to offer you 40%,50% for me, while 10%=
should be given to any orphanage Home/Hospitals/clinics to support the nee=
dy worldwide.
I request that you kindly respond to me with acceptanc=
e:
Your prompt response is highly imperative.
Andrew McHa=
ttie
External Auditor for financial institutes. I currently work with a team of=
external auditors who were retained after the outbreak of covid-19 pandemi=
c to audit financial activities.
In the course of a routine audit of=
our books last quarter, I discovered some investment accounts that have be=
en dormant for one year now. Most of the accounts belong to a single benefi=
ciary who died during the covid-19 pandemic. (Four million five hundred tho=
usand united states dollars)in the intent of the deceased depositor who die=
d intestate and as such, no next-of-kin has come forward all these Months t=
o lay claim to the investment.( Names now withheld for security reasons ) S=
ince this is our second letter to you.
I contacted you because you b=
ear the same last name with the deceased expatriate investor/depositor who =
died as a result if covid-19 and therefore I can present you as the benefic=
iary to the inheritance since there is no written will from our late invest=
or. My service's aim is to provide you with a complete service as I'=
;m prepared to provide you with all the documents required by the holding B=
ank to enable them to release these inheritance funds to you . we can secur=
e the funds in this bank account for ourselves instead of allowing it to be=
transmitted as =E2=80=9Cunclaimed funds=E2=80=9D into the Treasury of the =
Government.
All the papers required will be processed in your accept=
ance of this deal as we are prepared to offer you 40%,50% for me, while 10%=
should be given to any orphanage Home/Hospitals/clinics to support the nee=
dy worldwide.
I request that you kindly respond to me with acceptanc=
e:
Your prompt response is highly imperative.
Andrew McHa=
ttie
--0000000000008d208905e4587b6a--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments