Compensation spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 28 May 2022 06:45:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1nuvoG-000MvC-9r
for dave@doctor.nl2k.ab.ca;
Sat, 28 May 2022 06:44:48 -0600
Resent-From: The Doctor
Resent-Date: Sat, 28 May 2022 06:44:48 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs1-f51.google.com ([209.85.217.51]:37540)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1nurLY-0002jF-NA
for doctor@nl2k.ab.ca;
Sat, 28 May 2022 01:58:56 -0600
Received: by mail-vs1-f51.google.com with SMTP id w10so6260103vsa.4
for; Sat, 28 May 2022 00:58:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:from:date:message-id:subject:to;
bh=T/Y/2L3TDfqNBGrLEWf/HeyrHnrsuRtFSyFZXzjirdw=;
b=XJ3tQYQs5kTZIVATRtYIlpAlmtsQP1hxf0a3VZhxl8zYkekqRThoN0TY5qGmSA/pTj
1dFN7Nbb5UgFMzkGIqLwKRVhGko+3aknQOR+rFAq0tGz4jHdDljbxm+My+amAhfv8Y3U
28OEN2eBb/FkEv7oOQtBMU1LK2ktwNl1kHBcKLcvzovH7S0+SMutGiMBRnbw1CIO7/dM
ruGWyniPMUC/mExHDWWQWe5McknKWHwdSOsW0/zLAr+GYEu6rwWU2vW3lIOIprFhcA/+
fKRyhMMtTFwlessOepQZ6gwo1x+GOzevlBxNZCPSRPBtNW4hrFT/lzFlNi3ihRFY/I7h
gJ8Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=T/Y/2L3TDfqNBGrLEWf/HeyrHnrsuRtFSyFZXzjirdw=;
b=GWXJT6rzKogr/T2pKISlIWGuFx8elScErfLmrZMCUp21V7fXx/9ZNKHzJ0ZkRIghO8
GqercVbNmUb+vlFOaOqWKnS0ga/Nkx18dJPSjY0DTxVXCcR7axkvMPQM0P43WgVkj2UV
/PXmjErbKMUcVShwS5aIJ7s28cKdGxEcAhyY52HaGWK/51ZLPMe2VzpazNCE5ES6ymzb
1mj6sgmGdZoc/KBGi7LRtUK8Qus4ZjNCERi8TgHwezutpCCMZqcruPegvyK0hwEzB1SA
kTGyf5NnrLVakT1/7OW5v2dBaiF4awZa4PXdkrGqqnB5oF2R0lGY35fwJ43CMK2KgOhX
dAXA==
X-Gm-Message-State: AOAM533xYT9pK7pO6SvangBx5Z8f7zwF1BwhSB3J3QwqohRzSmWNHNC8
VN1A/rFqL8LssiG7GRg5BfQbDoN5uUI01/kKazI=
X-Google-Smtp-Source: ABdhPJz6nqGPuZ+R56wBp0wfwxXkZGDZXYtIcRhts//ndQy5rdvQVaTfsjMq2vmu5u/iJJI9YGxab7zxyWjcA9+MUg8=
X-Received: by 2002:a67:d28d:0:b0:337:e148:38bf with SMTP id
z13-20020a67d28d000000b00337e14838bfmr7187710vsi.74.1653724709386; Sat, 28
May 2022 00:58:29 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a67:eccf:0:0:0:0:0 with HTTP; Sat, 28 May 2022 00:58:28
-0700 (PDT)
From: ELIZABETH WILSON
Date: Sat, 28 May 2022 00:58:28 -0700
Message-ID:
Subject: YOUR FUND PACKAGE IS ARRIVED SUCCESSFULL
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 10.7
X-Spam_score_int: 107
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: We are notifying this afternoon From the Table of lotto London,
Western Union, Deliver company bank Transfer IMF, UNITED NATIONS, Civil Service
Commission and head of states has finally succeeded to f [...]
Content analysis details: (10.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[ew2373460[at]gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.217.51 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[ew2373460[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.5 XFER_LOTSA_MONEY Transfer a lot of money
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} YOUR FUND PACKAGE IS ARRIVED SUCCESSFULL
We are notifying this afternoon From the Table of lotto London,
Western Union, Deliver company bank Transfer IMF, UNITED NATIONS,
Civil Service Commission and head of states has finally succeeded to
fixes your payment under co-operation of United State western union
to western union. The united state government have Commission the
payment to be paid to you $4,500 twice daily. Contact the CEO of
western union Mrs.Elizabeh Lisson.
in USA Mrs.Elizabeh Lisson Contact her with your full information. Such as
Your name.....
Your country....
Your phone number..
Your adders......
The issue of using West Africa western union, Money gram ,bank ETC.
was cancel for the reason of scam victim's that is going on over there
in west Africa.
For more information contact Mrs.Elizabeh Lisson,
text only, Email ( she will ew2373460@gmail.com
start sending your payment to you until your total fund is Completed
$80.000,000.00 usd.
Yours Official
post United State Government assign
IMF, UNITED NATIONS
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 28 May 2022 06:45:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1nuvoG-000MvC-9r
for dave@doctor.nl2k.ab.ca;
Sat, 28 May 2022 06:44:48 -0600
Resent-From: The Doctor
Resent-Date: Sat, 28 May 2022 06:44:48 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs1-f51.google.com ([209.85.217.51]:37540)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1nurLY-0002jF-NA
for doctor@nl2k.ab.ca;
Sat, 28 May 2022 01:58:56 -0600
Received: by mail-vs1-f51.google.com with SMTP id w10so6260103vsa.4
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:from:date:message-id:subject:to;
bh=T/Y/2L3TDfqNBGrLEWf/HeyrHnrsuRtFSyFZXzjirdw=;
b=XJ3tQYQs5kTZIVATRtYIlpAlmtsQP1hxf0a3VZhxl8zYkekqRThoN0TY5qGmSA/pTj
1dFN7Nbb5UgFMzkGIqLwKRVhGko+3aknQOR+rFAq0tGz4jHdDljbxm+My+amAhfv8Y3U
28OEN2eBb/FkEv7oOQtBMU1LK2ktwNl1kHBcKLcvzovH7S0+SMutGiMBRnbw1CIO7/dM
ruGWyniPMUC/mExHDWWQWe5McknKWHwdSOsW0/zLAr+GYEu6rwWU2vW3lIOIprFhcA/+
fKRyhMMtTFwlessOepQZ6gwo1x+GOzevlBxNZCPSRPBtNW4hrFT/lzFlNi3ihRFY/I7h
gJ8Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=T/Y/2L3TDfqNBGrLEWf/HeyrHnrsuRtFSyFZXzjirdw=;
b=GWXJT6rzKogr/T2pKISlIWGuFx8elScErfLmrZMCUp21V7fXx/9ZNKHzJ0ZkRIghO8
GqercVbNmUb+vlFOaOqWKnS0ga/Nkx18dJPSjY0DTxVXCcR7axkvMPQM0P43WgVkj2UV
/PXmjErbKMUcVShwS5aIJ7s28cKdGxEcAhyY52HaGWK/51ZLPMe2VzpazNCE5ES6ymzb
1mj6sgmGdZoc/KBGi7LRtUK8Qus4ZjNCERi8TgHwezutpCCMZqcruPegvyK0hwEzB1SA
kTGyf5NnrLVakT1/7OW5v2dBaiF4awZa4PXdkrGqqnB5oF2R0lGY35fwJ43CMK2KgOhX
dAXA==
X-Gm-Message-State: AOAM533xYT9pK7pO6SvangBx5Z8f7zwF1BwhSB3J3QwqohRzSmWNHNC8
VN1A/rFqL8LssiG7GRg5BfQbDoN5uUI01/kKazI=
X-Google-Smtp-Source: ABdhPJz6nqGPuZ+R56wBp0wfwxXkZGDZXYtIcRhts//ndQy5rdvQVaTfsjMq2vmu5u/iJJI9YGxab7zxyWjcA9+MUg8=
X-Received: by 2002:a67:d28d:0:b0:337:e148:38bf with SMTP id
z13-20020a67d28d000000b00337e14838bfmr7187710vsi.74.1653724709386; Sat, 28
May 2022 00:58:29 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a67:eccf:0:0:0:0:0 with HTTP; Sat, 28 May 2022 00:58:28
-0700 (PDT)
From: ELIZABETH WILSON
Date: Sat, 28 May 2022 00:58:28 -0700
Message-ID:
Subject: YOUR FUND PACKAGE IS ARRIVED SUCCESSFULL
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 10.7
X-Spam_score_int: 107
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: We are notifying this afternoon From the Table of lotto London,
Western Union, Deliver company bank Transfer IMF, UNITED NATIONS, Civil Service
Commission and head of states has finally succeeded to f [...]
Content analysis details: (10.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[ew2373460[at]gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.217.51 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[ew2373460[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.5 XFER_LOTSA_MONEY Transfer a lot of money
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} YOUR FUND PACKAGE IS ARRIVED SUCCESSFULL
We are notifying this afternoon From the Table of lotto London,
Western Union, Deliver company bank Transfer IMF, UNITED NATIONS,
Civil Service Commission and head of states has finally succeeded to
fixes your payment under co-operation of United State western union
to western union. The united state government have Commission the
payment to be paid to you $4,500 twice daily. Contact the CEO of
western union Mrs.Elizabeh Lisson.
in USA Mrs.Elizabeh Lisson Contact her with your full information. Such as
Your name.....
Your country....
Your phone number..
Your adders......
The issue of using West Africa western union, Money gram ,bank ETC.
was cancel for the reason of scam victim's that is going on over there
in west Africa.
For more information contact Mrs.Elizabeh Lisson,
text only, Email ( she will ew2373460@gmail.com
start sending your payment to you until your total fund is Completed
$80.000,000.00 usd.
Yours Official
post United State Government assign
IMF, UNITED NATIONS
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments