money laundering gmail spam

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 02 May 2022 07:25:02 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nlW1x-000Ind-Pv

for dave@doctor.nl2k.ab.ca;

Mon, 02 May 2022 07:24:01 -0600

Resent-From: The Doctor

Resent-Date: Mon, 2 May 2022 07:24:01 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f172.google.com ([209.85.167.172]:38807)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1nlRwN-000NaG-6f

for doctor@nl2k.ab.ca;

Mon, 02 May 2022 03:02:04 -0600

Received: by mail-oi1-f172.google.com with SMTP id r8so14648280oib.5

for ; Mon, 02 May 2022 02:01:42 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=nH15ovnuuxcAzUEWjOWnUgZp58UCC74lzEL4XUq2fL4=;

b=Q+FH+XKORWB4BS8Xm6xp3L5zgMtOgOVq7rGPCyPlWX0F9xn3uqXBHzf5WwpsHKShMQ

GBqUeDjMLygwNptnPguuHS3cJv2bBnokZE/Jx11UuVm0j3s7jzgaBeT2PRM7oTrlwRin

j+gbFftwK6UPanvKXj9gehJ/uAb5DlWT3IEPfLoe0ZjC8Wpmz4adgsmStA0qgEUVzNUh

DzAfz7wUwZTajg7+ygHnjUXiqaMTeAupWzk8qHJ9QClczOX/6N+wwonXx32n/AV10T+z

xBzWrKXdAF8UbZN9F+stwRtl81S4LvE1mZsT0jJ6jzwRGzDIU0R/XEuyQf44422eJgE5

eXqQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=nH15ovnuuxcAzUEWjOWnUgZp58UCC74lzEL4XUq2fL4=;

b=v2WoPHE4CwvWA9WMHMKZ4jGP9IBxF27ilBzH1LWYOLnRk7MDHN/eqR+F5zXTXh3XcP

W69i3jrSmUcSLOb8Ut+/StM3jbXu7PEEXGyfdpPJq4fSHaBozk2H/Gm1xp6D/rGiEMLp

9SuPpvW03VnCoGUHpQ8RcD4+CfElVQXPm0p4FDH4UE21kSIFkEsMP1lgCnHhyIbGUbTv

ETKjuvhPNQGelywdIt+8MNVFsY8hNtFGxAkQO5+MgScJOfRt8dIMhjy8nPbgyWVVnLId

skyqSdk8L+MxIjkcFft+pW4s3jIWlSYooLFDRUHLadAkTz/TlSQPAOl55pMvIjsHd53R

e0Dw==

X-Gm-Message-State: AOAM530zrlPGaDTnLNqDgbww0SL8TYwaSFxD8FOS/tSJZyljpCkKfyuV

fqh23/SCpOm8HI9tvsjehjEyEtU+Veq6ylvb+HQ=

X-Google-Smtp-Source: ABdhPJw+6DbEVCzoal3wQvQ4NkmrBLhWpLl/cz8d0Wieoa7JS2wUpXwJWdlCFUm7E78xW3sYqCtmIhbvUG46Q9S9H2I=

X-Received: by 2002:a05:6808:300f:b0:2fa:6fd5:9723 with SMTP id

ay15-20020a056808300f00b002fa6fd59723mr4984572oib.202.1651482096080; Mon, 02

May 2022 02:01:36 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:6830:1c2d:b0:605:f63d:481c with HTTP; Mon, 2 May 2022

02:01:35 -0700 (PDT)

Reply-To: kalinkindralexander@gmail.com

From: "DR. Alexander Kalinkin"

Date: Mon, 2 May 2022 02:01:35 -0700

Message-ID:

Subject: I need a trusted Business person to handle this opportunity

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@nl2k.ab.ca

X-Spam_score: 13.3

X-Spam_score_int: 133

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Attention: Beneficiary, This message is to confirm if you

have received your fund from the paying bank as reported in our Database.

Please confirm the status of your Fund Transfer If you are yet to receive

your funds, plea [...]



Content analysis details: (13.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.172 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[jamepetersalmon12[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[jamepetersalmon12[at]gmail.com]

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 T_HK_NAME_FM_DR No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.6 UNDISC_FREEM Undisclosed recipients + freemail reply-to

3.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)

2.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} I need a trusted Business person to handle this opportunity



--

Attention: Beneficiary,



This message is to confirm if you have received your fund from the

paying bank as reported in our Database. Please confirm the status of

your Fund Transfer


If you are yet to receive your funds, please write back immediately

you receive this message. We will appreciate you earliest response to

enable us submit our report to the investigating board. Please treat

as very urgently as we await your compliance to this notice.



Thank you for your cooperation,

Yours faithfully,

DR. Alexander Kalinkin

Secretary's Department

Fund Recovery & Management Agency Under "IMF"

More cheap watch spam from mindspring.com

From - Thu Apr 17 00:50:22 2008

X-Account-Key: account2

X-UIDL: \Uj"!~1B"!kJl"!'%`"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208825113.83807@BiO9N5AMNut1shR0y9tm9Q

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3H0j7Br010165

for ; Wed, 16 Apr 2008 18:45:12 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3H0j7ZL010164

for dave@doctor.nl2k.ab.ca; Wed, 16 Apr 2008 18:45:07 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Wed, 16 Apr 2008 18:45:07 -0600

Resent-Message-ID: <20080417004507.GA9979@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208824084.48095@csudGHuryFgBzbfNlD0FSQ

Received: from user-0c8hck7.cable.mindspring.com

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3H0RoeN004694

for ; Wed, 16 Apr 2008 18:28:03 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Message-ID: <000501c8a021$024bdfe6$82c81ba5@codaim>

From: "gerick uriel"

To:

Subject: {?} {Disarmed} Rocking great coolest gadgets

Date: Wed, 16 Apr 2008 22:40:31 +0000

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0002_01C8A021.0249393A"

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.3138

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: sss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3H0j7Br010165

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: \Uj"!~1B"!kJl"!'%`"!



This is a multi-part message in MIME format.



------=_NextPart_000_0002_01C8A021.0249393A

Content-Type: text/plain;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable





Best deals online for top quality branded watches here  http://ww=

w.miekaleg.com/

--=20

This message has been scanned for viruses and

dangerous content by MailScanner, and is

believed to be clean.





------=_NextPart_000_0002_01C8A021.0249393A

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



















Best deals online for top quality bra=

nded watches here
  

MailScanner=

has detected a possible fraud attempt from "www.vereaneth.com" claiming to=

be
http://www.miekaleg.com/



--=20




This message has been scanned for viruses and


dangerous content by

MailScanner, and is


believed to be clean.





------=_NextPart_000_0002_01C8A021.0249393A--









Porn/Anatomical Mindspring Spam

From - Sat Mar 15 12:16:49 2008

X-Account-Key: account2

X-UIDL: ]]H"!(bo"!F@Q!!j'~"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4.67.3-1-MailScanner-Watermark: 1206014447.66073@8jHTLNLIkgoFTSy3BBMcow

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m2FC0Cl2008418

for ; Sat, 15 Mar 2008 06:00:18 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m2FC0CtX008416

for dave@doctor.nl2k.ab.ca; Sat, 15 Mar 2008 06:00:12 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Sat, 15 Mar 2008 06:00:11 -0600

Resent-Message-ID: <20080315120011.GB4755@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4.67.3-1-MailScanner-Watermark: 1205976209.58886@2KlQl8RQxkxBXUQzdUvWAA

Received: from user-160uc81.cable.mindspring.com

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m2F1N9iA016323

for ; Fri, 14 Mar 2008 19:23:23 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Message-ID: <000f01c8863b$261a9d50$01310f4c@DF89TMB1>

From: "Manilal caudillo"

To: sales@nk.ca

Subject: {?} Proven in thousands of men

Date: Fri, 14 Mar 2008 21:23:18 -0400

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--------=_NextPart_000_000B_01C88619.9F08FD50"

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.3138

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198

X-Null-Tag: be8cbf94bec60772fe8414b4996bde91

X-Null-Tag: cf5c642b9d9e9d2f16d492acbff87b41

X-NetKnow-InComing-4.67.3-1-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4.67.3-1-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=21.961, required 5,

HTML_MESSAGE 0.00, NO_RELAYS -0.00, URIBL_AB_SURBL 5.00,

URIBL_BLACK 1.96, URIBL_JP_SURBL 5.00, URIBL_OB_SURBL 5.00,

URIBL_SC_SURBL 5.00)

X-NetKnow-InComing-4.67.3-1-MailScanner-SpamScore: sssssssssssssssssssss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4.67.3-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m2FC0Cl2008418

X-NetKnow-InComing-4.67.3-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: ]]H"!(bo"!F@Q!!j'~"!





----------=_NextPart_000_000B_01C88619.9F08FD50

Content-Type: text/plain;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Let the size of your shaft grow to its full potential with this.





http://www.ggesrpa.com/

Moan zone for her

--=20

This message has been scanned for viruses and

dangerous content by MailScanner, and is

believed to be clean.





----------=_NextPart_000_000B_01C88619.9F08FD50

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



















Let the size of your shaft grow to its ful=

l=20

potential with this.


 


 



href=3D"http://www.ggesrpa.com/">http://www.ggesrpa.com/




Moan zone for her


>--=20


This message has been scanned for viruses and


dangerous content by

MailScanner, and is


believed to be clean.





----------=_NextPart_000_000B_01C88619.9F08FD50--