Abandoned fund spamj from gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 21 Feb 2023 07:24:09 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1pUTYS-000GBH-1E
for dave@doctor.nl2k.ab.ca;
Tue, 21 Feb 2023 07:23:40 -0700
Resent-From: The Doctor
Resent-Date: Tue, 21 Feb 2023 07:23:40 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f53.google.com ([209.85.160.53]:38436)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1pUP4A-0004Q6-1J
for doctor@nl2k.ab.ca;
Tue, 21 Feb 2023 02:36:05 -0700
Received: by mail-oa1-f53.google.com with SMTP id 586e51a60fabf-1720433ba75so4671669fac.5
for; Tue, 21 Feb 2023 01:34:01 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=+CEj6YhWV6VEK+2Xsn58ereYl4vGs0bX3NxCzMPw4aA=;
b=l5aXOhKAT5LosGia5v3jCxIp0rPOrCaOgMyz0eqlvzz2pWY6k5QJ7Ndm2Kdd0OqESn
q0HkTD45YsLGRJoZ5VdjM7lbFksx2U4jL07qBimhcoipKCYuAGttXw3gHduxDI4cN9jM
R4Hc6MpfcyTP+MKTHdSBJlOmRkiW6NQHxmosq2HnuhFDr1UGh28zOyH/jcKPFCkeK4di
2ArxQnR450ioLxfNVBH6xoYJHBUdmfWxCM2cEZp8f1nZk18uK4/ywDdDkGhiKUspgVpN
IZ+ETAoRKg60f601HS+lWjMmgJA+e1oGiwHrdDLmZh0IS7j0vn6gqkcLyWbnh/JKHWIH
xfxQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=+CEj6YhWV6VEK+2Xsn58ereYl4vGs0bX3NxCzMPw4aA=;
b=Uy5voI2q5POdgq9aZnGgW4B0H4hfiB4nMeaOROeJ4fs5B7+WVMbNVtpxfo1ipXGTfJ
w9QZjGu+FzBprt6mNXfNWsVDa/WZaInoOsRywiYNklPn7bJgKpno025sPV4NvXdEy+Ox
dCiGsjLsUp78SLW9IqwZLDlZVyLcF5jeKc1UP7KwIjHpdIEGcunILTSHX0J+PDBB1S9Q
VLspXwVOpOtMHkc4oDnrVj2gLFWBMdZpjxDeMtpS6iH1ZY8AjTlQrPUDA8SSci3WVXD9
fPjZiiCnzBWVGvCvkqO0Gp8tPza129nWcqpyl70hNUl4jn2x8PIgwJN4pcDe8OFCLz0K
BsAQ==
X-Gm-Message-State: AO0yUKUEtsda6WxhY7wMstrNxe5us22CX+PWVvx3kP4nq8+pRqyWsVDR
nhY4xVAMwbffs82fCd2uNSSWRqIuIT+dk5hCvfTOvUB3omLiwFEa31s=
X-Google-Smtp-Source: AK7set9B0mrJGNQEdZuNZ/9PYE5poYZkq8X4C0iN7jDJTIfTff/7rE+nHoxAa2ivvvTIlc7vL3Q7iTid2J9SOE6o2yw=
X-Received: by 2002:a17:90b:3b43:b0:215:f80c:18e6 with SMTP id
ot3-20020a17090b3b4300b00215f80c18e6mr647586pjb.45.1676971588880; Tue, 21 Feb
2023 01:26:28 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a05:6a11:43aa:b0:40a:7364:1f39 with HTTP; Tue, 21 Feb 2023
01:26:28 -0800 (PST)
Reply-To: mpasenall.email910@aol.com
From: "MR.J Mark Mason"
Date: Tue, 21 Feb 2023 01:26:28 -0800
Message-ID:
Subject: Urgent Attention
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 16.1
X-Spam_score_int: 161
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings I am contacting you from CITI BANK NEW-YORK USA
to receive and share with me an abandoned fund $30,000,000.00.USD. left in
our bank by a deceased customer.I sent you this letter last year, but I haven
[...]
Content analysis details: (16.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[mpasenall.email910(at)aol.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[afenikayodejohnson(at)gmail.com]
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.9 URG_BIZ BODY: Contains urgent matter
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.53 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.53 listed in wl.mailspike.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Urgent Attention
Greetings
I am contacting you from CITI BANK NEW-YORK USA to receive and share
with me an abandoned fund
$30,000,000.00.USD. left in our bank by a deceased customer.I sent you
this letter
last year, but I haven't heard from you. First of all I am going
through the Internet
search when I found your email address. My name is Mr,J Mark Mason.I
want to utilize
this opportunity to present your name to the bank to stand as his
business associate/ trustee
for the fund to be released to you via Visa card for easy withdrawals
in any VISA ATM machine
anywhere in the World if you a interested get back to me and let's
benefit from this golden
opportunity. You are my first contact.I shall wait a few days and if
I do not hear from you, I shall
look for another person.
I wait your immediate response with your information to enable this
bank expedite action.however, there will be no third party in this
transaction.
I wait for your urgent reply
Yours Faithfully,
MR.J Mark Mason
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 21 Feb 2023 07:24:09 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1pUTYS-000GBH-1E
for dave@doctor.nl2k.ab.ca;
Tue, 21 Feb 2023 07:23:40 -0700
Resent-From: The Doctor
Resent-Date: Tue, 21 Feb 2023 07:23:40 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f53.google.com ([209.85.160.53]:38436)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1pUP4A-0004Q6-1J
for doctor@nl2k.ab.ca;
Tue, 21 Feb 2023 02:36:05 -0700
Received: by mail-oa1-f53.google.com with SMTP id 586e51a60fabf-1720433ba75so4671669fac.5
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=+CEj6YhWV6VEK+2Xsn58ereYl4vGs0bX3NxCzMPw4aA=;
b=l5aXOhKAT5LosGia5v3jCxIp0rPOrCaOgMyz0eqlvzz2pWY6k5QJ7Ndm2Kdd0OqESn
q0HkTD45YsLGRJoZ5VdjM7lbFksx2U4jL07qBimhcoipKCYuAGttXw3gHduxDI4cN9jM
R4Hc6MpfcyTP+MKTHdSBJlOmRkiW6NQHxmosq2HnuhFDr1UGh28zOyH/jcKPFCkeK4di
2ArxQnR450ioLxfNVBH6xoYJHBUdmfWxCM2cEZp8f1nZk18uK4/ywDdDkGhiKUspgVpN
IZ+ETAoRKg60f601HS+lWjMmgJA+e1oGiwHrdDLmZh0IS7j0vn6gqkcLyWbnh/JKHWIH
xfxQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=+CEj6YhWV6VEK+2Xsn58ereYl4vGs0bX3NxCzMPw4aA=;
b=Uy5voI2q5POdgq9aZnGgW4B0H4hfiB4nMeaOROeJ4fs5B7+WVMbNVtpxfo1ipXGTfJ
w9QZjGu+FzBprt6mNXfNWsVDa/WZaInoOsRywiYNklPn7bJgKpno025sPV4NvXdEy+Ox
dCiGsjLsUp78SLW9IqwZLDlZVyLcF5jeKc1UP7KwIjHpdIEGcunILTSHX0J+PDBB1S9Q
VLspXwVOpOtMHkc4oDnrVj2gLFWBMdZpjxDeMtpS6iH1ZY8AjTlQrPUDA8SSci3WVXD9
fPjZiiCnzBWVGvCvkqO0Gp8tPza129nWcqpyl70hNUl4jn2x8PIgwJN4pcDe8OFCLz0K
BsAQ==
X-Gm-Message-State: AO0yUKUEtsda6WxhY7wMstrNxe5us22CX+PWVvx3kP4nq8+pRqyWsVDR
nhY4xVAMwbffs82fCd2uNSSWRqIuIT+dk5hCvfTOvUB3omLiwFEa31s=
X-Google-Smtp-Source: AK7set9B0mrJGNQEdZuNZ/9PYE5poYZkq8X4C0iN7jDJTIfTff/7rE+nHoxAa2ivvvTIlc7vL3Q7iTid2J9SOE6o2yw=
X-Received: by 2002:a17:90b:3b43:b0:215:f80c:18e6 with SMTP id
ot3-20020a17090b3b4300b00215f80c18e6mr647586pjb.45.1676971588880; Tue, 21 Feb
2023 01:26:28 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a05:6a11:43aa:b0:40a:7364:1f39 with HTTP; Tue, 21 Feb 2023
01:26:28 -0800 (PST)
Reply-To: mpasenall.email910@aol.com
From: "MR.J Mark Mason"
Date: Tue, 21 Feb 2023 01:26:28 -0800
Message-ID:
Subject: Urgent Attention
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 16.1
X-Spam_score_int: 161
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings I am contacting you from CITI BANK NEW-YORK USA
to receive and share with me an abandoned fund $30,000,000.00.USD. left in
our bank by a deceased customer.I sent you this letter last year, but I haven
[...]
Content analysis details: (16.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[mpasenall.email910(at)aol.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[afenikayodejohnson(at)gmail.com]
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.9 URG_BIZ BODY: Contains urgent matter
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.160.53 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.53 listed in wl.mailspike.net]
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Urgent Attention
Greetings
I am contacting you from CITI BANK NEW-YORK USA to receive and share
with me an abandoned fund
$30,000,000.00.USD. left in our bank by a deceased customer.I sent you
this letter
last year, but I haven't heard from you. First of all I am going
through the Internet
search when I found your email address. My name is Mr,J Mark Mason.I
want to utilize
this opportunity to present your name to the bank to stand as his
business associate/ trustee
for the fund to be released to you via Visa card for easy withdrawals
in any VISA ATM machine
anywhere in the World if you a interested get back to me and let's
benefit from this golden
opportunity. You are my first contact.I shall wait a few days and if
I do not hear from you, I shall
look for another person.
I wait your immediate response with your information to enable this
bank expedite action.however, there will be no third party in this
transaction.
I wait for your urgent reply
Yours Faithfully,
MR.J Mark Mason
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments