funds phish from gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 14 Nov 2022 09:04:01 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oubrQ-0009ze-05
for dave@doctor.nl2k.ab.ca;
Mon, 14 Nov 2022 08:59:00 -0700
Resent-From: The Doctor
Resent-Date: Mon, 14 Nov 2022 08:58:59 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f174.google.com ([209.85.208.174]:38438)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oub0G-0004yq-8D
for doctor@doctor.nl2k.ab.ca;
Mon, 14 Nov 2022 08:04:14 -0700
Received: by mail-lj1-f174.google.com with SMTP id b9so13551678ljr.5
for; Mon, 14 Nov 2022 07:01:21 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:from:to:cc:subject:date:message-id:reply-to;
bh=ddecC7jgwbXSk1uBeYW3nn8Anig/nWvGwVtGeDGzoik=;
b=hg07lkVu0gz+m8HsBrwi3YMctpGkxx7bSC8l2s7DXEmiHOQ42cDTpke9BX6kPO+lgf
ZHJmfbOcsSOXJJJLMqKOKbxeqrSMgfOIyNJIf8DjXZrMGVUkmjffa4rgUseAVOY+dNJt
jHdd1QpWBFhQMKCzfaWtt7Bhmq+U1wHrvKOpo001tWIOdSLcyUu8tR0m3MjFZlGE/E18
Rpg7H8gXKcm7eohEw9Lv6AlWeJLBA31/XrycPRpfu9YX2dyoF8EZraH4oH7jJNcdqvNg
++O3dmaI5ubRRbKEf8VatgM8TlcWuwZvpBmgDZJcmpw8sWLX85AvAY6fELisGQBo6mF7
DVNg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=ddecC7jgwbXSk1uBeYW3nn8Anig/nWvGwVtGeDGzoik=;
b=I24K8hGZmaFTbZZ5QTNz4hLxAiDvvaapaeNDcqJPDlD92lnwzNgmYwHB3JVd9+yrOj
obOpJNk97KyKLVnQwqlB1KSwlSdYCN+WUGhjjRclQ/PYXT8odaS282BFYC8TN+glJgwe
kvBmJUhUR5MdLBgPyHHBsjULlbDbFEkyzUEa4EQAJa4W6Oxapkycv3u1QScUj1pj4EW0
LCtczAN7PrQu7HOGAGQtIpO4X7XEPxaZF+X+KuJ2DGP4Uq8VD0/GvhJTH2k3JO4Z4QyK
9lLoq+KXlvgAt9AC0l9VxDBrqjGaaCMmD59areZpHRRAgowS4uCGhChHEVkObxlPCoeY
yHpA==
X-Gm-Message-State: ANoB5pnYwEFHMJlJVli+vKuUlFhqJHlDvvWLLH2YRuxfIRA1Ok+l3s4+
d1rZwdiIPwHjp0QavGljb3OnHTAwKdAEUlR9iKY=
X-Google-Smtp-Source: AA0mqf7LNw0+NNSoIAEDWWu7Dxr770Saq3C7lRQLz/DlkbO3f/V7QA1NCLU9mcfJ4N6ASEwI32gnngsdGOKCmCDkvgY=
X-Received: by 2002:a2e:b8c7:0:b0:278:eef5:8d18 with SMTP id
s7-20020a2eb8c7000000b00278eef58d18mr3808669ljp.240.1668438074151; Mon, 14
Nov 2022 07:01:14 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a05:6520:4d4f:b0:22d:ee5:b03f with HTTP; Mon, 14 Nov 2022
07:01:13 -0800 (PST)
Reply-To: ruth_moore13@yahoo.com
From: HANS PATRICK
Date: Tue, 15 Nov 2022 05:01:13 +1400
Message-ID:
Subject: Contact her for Your atm visa card For Compensation immediatel
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 14.0
X-Spam_score_int: 140
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Good Friend. I am happy to inform you about my success
in getting those funds transferred under the cooperation of a new partner
from Indonesia.
Content analysis details: (14.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.208.174 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[ruth_moore13[at]yahoo.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[peterolu752[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[peterolu752[at]gmail.com]
1.5 HK_SCAM_N8 BODY: No description available.
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.174 listed in wl.mailspike.net]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.0 HK_SCAM No description available.
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.8 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 FILL_THIS_FORM Fill in a form with personal information
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of
money
Subject: {SPAM?} Contact her for Your atm visa card For Compensation immediatel
Dear Good Friend.
I am happy to inform you about my success in getting those funds
transferred under the cooperation of a new partner from Indonesia.
Presently I am in Indonesia for investment projects with my own share
of the total sum. Meanwhile, I didn=E2=80=99t forget you=E2=80=99re past ef=
forts and
attempts to assist me in transferring those funds despite that it
failed us some how. Now contact my secretary in Finland his name is Ruth M=
oore
Email address: (ruth_moore13@yahoo.com)
Contact her and ask her to send you the total of
atm visa card $920.000.00.{Nine Hundred And Twenty Thousand United
States Dollars} which I kept for your past efforts and attempts to
assist me in this matter. I appreciated your efforts at that time very
much. So feel free and get in touched with my Secretary Ruth Moore and
instruct her where to send the amount to you. Please do let me know
immediately you receive it so that we can share the joy after all the
suffer ness at that time. Do send to Ruth Moore, your contact details.
Your Full Names=E2=80=A6...........................................
You=E2=80=99re Address=E2=80=A6............................................=
..
Cell Phone Number=E2=80=A6........................................
Your occupation................................................
Your Age=E2=80=A6.....................................................
To enable her submit your details to her for delivery of your package
ATM CARD to your address for your compensation money to your
nominated a to your address for you to withdraw the money from any
bank atm machine in your country.
In the moment, I am very busy here because of the investment projects
which me and the new partner are having at hand, finally, remember
that I had forwarded instruction to my secretary on your behalf to
receive that money, so feel free to get in touch with Ruth Moore
will send the amount to you with out any delay.
Thanks and God bless you.
MR HANS PATRICK
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 14 Nov 2022 09:04:01 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oubrQ-0009ze-05
for dave@doctor.nl2k.ab.ca;
Mon, 14 Nov 2022 08:59:00 -0700
Resent-From: The Doctor
Resent-Date: Mon, 14 Nov 2022 08:58:59 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f174.google.com ([209.85.208.174]:38438)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oub0G-0004yq-8D
for doctor@doctor.nl2k.ab.ca;
Mon, 14 Nov 2022 08:04:14 -0700
Received: by mail-lj1-f174.google.com with SMTP id b9so13551678ljr.5
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:from:to:cc:subject:date:message-id:reply-to;
bh=ddecC7jgwbXSk1uBeYW3nn8Anig/nWvGwVtGeDGzoik=;
b=hg07lkVu0gz+m8HsBrwi3YMctpGkxx7bSC8l2s7DXEmiHOQ42cDTpke9BX6kPO+lgf
ZHJmfbOcsSOXJJJLMqKOKbxeqrSMgfOIyNJIf8DjXZrMGVUkmjffa4rgUseAVOY+dNJt
jHdd1QpWBFhQMKCzfaWtt7Bhmq+U1wHrvKOpo001tWIOdSLcyUu8tR0m3MjFZlGE/E18
Rpg7H8gXKcm7eohEw9Lv6AlWeJLBA31/XrycPRpfu9YX2dyoF8EZraH4oH7jJNcdqvNg
++O3dmaI5ubRRbKEf8VatgM8TlcWuwZvpBmgDZJcmpw8sWLX85AvAY6fELisGQBo6mF7
DVNg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=ddecC7jgwbXSk1uBeYW3nn8Anig/nWvGwVtGeDGzoik=;
b=I24K8hGZmaFTbZZ5QTNz4hLxAiDvvaapaeNDcqJPDlD92lnwzNgmYwHB3JVd9+yrOj
obOpJNk97KyKLVnQwqlB1KSwlSdYCN+WUGhjjRclQ/PYXT8odaS282BFYC8TN+glJgwe
kvBmJUhUR5MdLBgPyHHBsjULlbDbFEkyzUEa4EQAJa4W6Oxapkycv3u1QScUj1pj4EW0
LCtczAN7PrQu7HOGAGQtIpO4X7XEPxaZF+X+KuJ2DGP4Uq8VD0/GvhJTH2k3JO4Z4QyK
9lLoq+KXlvgAt9AC0l9VxDBrqjGaaCMmD59areZpHRRAgowS4uCGhChHEVkObxlPCoeY
yHpA==
X-Gm-Message-State: ANoB5pnYwEFHMJlJVli+vKuUlFhqJHlDvvWLLH2YRuxfIRA1Ok+l3s4+
d1rZwdiIPwHjp0QavGljb3OnHTAwKdAEUlR9iKY=
X-Google-Smtp-Source: AA0mqf7LNw0+NNSoIAEDWWu7Dxr770Saq3C7lRQLz/DlkbO3f/V7QA1NCLU9mcfJ4N6ASEwI32gnngsdGOKCmCDkvgY=
X-Received: by 2002:a2e:b8c7:0:b0:278:eef5:8d18 with SMTP id
s7-20020a2eb8c7000000b00278eef58d18mr3808669ljp.240.1668438074151; Mon, 14
Nov 2022 07:01:14 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a05:6520:4d4f:b0:22d:ee5:b03f with HTTP; Mon, 14 Nov 2022
07:01:13 -0800 (PST)
Reply-To: ruth_moore13@yahoo.com
From: HANS PATRICK
Date: Tue, 15 Nov 2022 05:01:13 +1400
Message-ID:
Subject: Contact her for Your atm visa card For Compensation immediatel
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 14.0
X-Spam_score_int: 140
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Good Friend. I am happy to inform you about my success
in getting those funds transferred under the cooperation of a new partner
from Indonesia.
Content analysis details: (14.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,
no trust
[209.85.208.174 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[ruth_moore13[at]yahoo.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[peterolu752[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[peterolu752[at]gmail.com]
1.5 HK_SCAM_N8 BODY: No description available.
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.174 listed in wl.mailspike.net]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.0 HK_SCAM No description available.
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.8 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 FILL_THIS_FORM Fill in a form with personal information
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of
money
Subject: {SPAM?} Contact her for Your atm visa card For Compensation immediatel
Dear Good Friend.
I am happy to inform you about my success in getting those funds
transferred under the cooperation of a new partner from Indonesia.
Presently I am in Indonesia for investment projects with my own share
of the total sum. Meanwhile, I didn=E2=80=99t forget you=E2=80=99re past ef=
forts and
attempts to assist me in transferring those funds despite that it
failed us some how. Now contact my secretary in Finland his name is Ruth M=
oore
Email address: (ruth_moore13@yahoo.com)
Contact her and ask her to send you the total of
atm visa card $920.000.00.{Nine Hundred And Twenty Thousand United
States Dollars} which I kept for your past efforts and attempts to
assist me in this matter. I appreciated your efforts at that time very
much. So feel free and get in touched with my Secretary Ruth Moore and
instruct her where to send the amount to you. Please do let me know
immediately you receive it so that we can share the joy after all the
suffer ness at that time. Do send to Ruth Moore, your contact details.
Your Full Names=E2=80=A6...........................................
You=E2=80=99re Address=E2=80=A6............................................=
..
Cell Phone Number=E2=80=A6........................................
Your occupation................................................
Your Age=E2=80=A6.....................................................
To enable her submit your details to her for delivery of your package
ATM CARD to your address for your compensation money to your
nominated a to your address for you to withdraw the money from any
bank atm machine in your country.
In the moment, I am very busy here because of the investment projects
which me and the new partner are having at hand, finally, remember
that I had forwarded instruction to my secretary on your behalf to
receive that money, so feel free to get in touch with Ruth Moore
will send the amount to you with out any delay.
Thanks and God bless you.
MR HANS PATRICK
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments