Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 07 May 2022 06:52:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from )
id 1nnJtx-0001Oj-B3
for dave@doctor.nl2k.ab.ca;
Sat, 07 May 2022 06:51:13 -0600
Resent-From: The Doctor
Resent-Date: Sat, 7 May 2022 06:51:13 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f195.google.com ([209.85.208.195]:40845)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from )
id 1nnEKo-000Jke-OX
for doctor@doctor.nl2k.ab.ca;
Sat, 07 May 2022 00:54:43 -0600
Received: by mail-lj1-f195.google.com with SMTP id l19so11513710ljb.7
for ; Fri, 06 May 2022 23:54:14 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=hsUKIcNshGh5u0mR8/5G+ouRleuJ4g/FKTudx9uBO0M=;
b=ZeiowRfa+AzUHe4l78g56mg2hmHvwLUUxdIqhUBuPcF+c9nP4qCEHvK21eIp8TjW4w
ejMPa4AwGT2hDUGJgFKwO+QV6OEdkVF2Bdwp6UTxX3aVKT/h1gOuICrOBl4BWoa2V5vg
Dbrht1vjd4OkplKin6Y/h/iYJDvS6HmhlOusH2ktNADE8sJI+TzMdLEDIasRfcCWgJSJ
8BuG+fZk70GY4KJ4RqLdhIB6T/eQVysGGpMpqPh+gPzAlOb3ch/d8GpSqOMVV9bd0rEp
/ZFD0RZRUdL+fiRPrltsle1oTj/sItXukhi6wE0xotWGBDFm1oBRXW1Zm/gWbGEHnGbQ
AvVg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=hsUKIcNshGh5u0mR8/5G+ouRleuJ4g/FKTudx9uBO0M=;
b=V8eavbLdQystp3k3orMg6MeNxqPqYKF+rRXlXr5HNZdb/Fg2adcx87z6W47LYVWmwh
HkAPAQpv9G6v3rzIb3Zt+r8DiIUZofLsPqKllywXemyWr+Ng6+Opd7S4MTH8RAQOZiVz
JHHxn0+pxOVII7xuMWGHUTR2ZT+iaBKDED+oDsDCpWCNOhUiWlHUub1VjY8cmiAgg/RB
jQHhr0F0AT19f8IddPnYSD4Ky1c4sXjHFUtq/0ftiTogWwkpUDXV+B5J+yv+wDp9SjOC
SFcB3/lWL+Gqz+LJTSwN49rjzqWJu9YvEKmkKdq1dnCaj3Iy4Sw/uXqzqN4RZbF5Jz4o
GXSQ==
X-Gm-Message-State: AOAM531DqAs44D5w1PZLsw8WAQqTpAh1NHhB46EX8JM7AKqTUBAJl7U9
nOeBg26imDTJhAl0/N68kIzaX+gUNMfGcY608sc=
X-Google-Smtp-Source: ABdhPJwetQrnPOnNwVVMXXVnrQbmKj9Z42McXXLJOjALv15BrDod2iugfiLOknIsVX3fGXqRhk+3eQEVf/tSf00Jd5A=
X-Received: by 2002:a2e:7206:0:b0:250:796b:12ed with SMTP id
n6-20020a2e7206000000b00250796b12edmr4250193ljc.499.1651906447991; Fri, 06
May 2022 23:54:07 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6504:641:0:0:0:0 with HTTP; Fri, 6 May 2022 23:54:07
-0700 (PDT)
Reply-To: Mrs_Bill.Chantal.Lawrence2022@europemail.com
From: MRS Chantal Lawrence
Date: Sat, 7 May 2022 09:54:07 +0300
Message-ID:
Subject: Dear Beneficiary
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 13.1
X-Spam_score_int: 131
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello Dear You Have Been Compensated With The Sum Of 4.4 Million
Dollars In This United Nation the Payment Will Be Issued Into ATM Visa Card
and Sent To You From The Bank.You Can Send Me Your Whats app,And Your [...]
Content analysis details: (13.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.195 listed in wl.mailspike.net]
0.6 HK_RANDOM_ENVFROM Envelope sender username looks random
1.0 HK_RANDOM_FROM From username looks random
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mrs_bill.chantal.lawrence2022[at]europemail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[konbfcx[at]gmail.com]
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Dear Beneficiary
Hello Dear
You Have Been Compensated With The Sum Of 4.4 Million Dollars In This
United Nation the Payment Will Be Issued Into ATM Visa Card and Sent
To You
>From The Bank.You Can Send Me Your Whats app,And Your Passport.
THANKS
Mrs Bill Chant Lawrence
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 06 May 2022 18:29:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from )
id 1nn8Ii-000HIf-4K
for dave@doctor.nl2k.ab.ca;
Fri, 06 May 2022 18:28:00 -0600
Resent-From: The Doctor
Resent-Date: Fri, 6 May 2022 18:28:00 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [122.144.141.65] (port=2967 helo=mail.service-fujitsu.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))
(envelope-from )
id 1nn7Ym-000Dfx-Vn
for doctor@mail.nl2k.ab.ca;
Fri, 06 May 2022 17:40:37 -0600
Received: from User (8ta-229-151-227.telkomadsl.co.za [197.229.151.227])
by mail.service-fujitsu.com (Postfix) with ESMTPA id 4F4BE2A0CCF;
Sat, 7 May 2022 07:30:43 +0800 (CST)
Reply-To:
From: "Nigerian National Petroleum Corporation (NNPC)"
Subject: Re: PROJECT: From: Dr. Emmanuel Ibe Kachikwu (GMD) Nnpc Towers Garki, Abuja
Date: Sat, 7 May 2022 01:31:01 +0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam_score: 35.6
X-Spam_score_int: 356
X-Spam_bar: +++++++++++++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Nnpc Towers, Central Business District, Herbert Macaulay way,
P.m.b. 190, Garki, Abuja. From: Dr. Emmanuel Ibe Kachikwu (GMD) Contract
Ref No: NNPC/PED/1462/KADREF/92) Attn: Ceo,
Content analysis details: (35.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[122.144.141.65 listed in psbl.surriel.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[122.144.141.65 listed in bl.score.senderscore.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 NSL_RCVD_FROM_USER Received from User
1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[122.144.141.65 listed in bb.barracudacentral.org]
1.2 MISSING_HEADERS Missing To: header
1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[dremmanuelibekachikwun2022[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[dremmanuelibekachikwun20221[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[dremmanuelibekachikwun20221[at]gmail.com]
1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received'
headers
0.9 URG_BIZ BODY: Contains urgent matter
2.5 MILLION_USD BODY: Talks about millions of dollars
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.1 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 CTE_8BIT_MISMATCH Header says 7bits but body disagrees
0.6 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.4 MALFORMED_FREEMAIL Bad headers on message from free email
service
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_USER From misspaced, from "User"
0.0 FAKE_REPLY_C No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing
list
0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable
0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
0.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 XFER_LOTSA_MONEY Transfer a lot of money
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.3 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FILL_THIS_FORM Fill in a form with personal information
2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 SPOOFED_FREEM_REPTO Forged freemail sender with freemail
reply-to
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of
money
Subject: {SPAM?} Re: PROJECT: From: Dr. Emmanuel Ibe Kachikwu (GMD) Nnpc Towers Garki, Abuja
Nnpc Towers, Central Business District, Herbert Macaulay way, P.m.b. 190, Garki, Abuja.
From: Dr. Emmanuel Ibe Kachikwu (GMD)
Contract Ref No: NNPC/PED/1462/KADREF/92)
Attn: Ceo,
I know that this proposal may come to you as a surprise especially having to come from someone you have not met before. I got your information from your country's chamber of commerce here in Nigeria.
My name is Dr. Emmanuel Ibe Kachikwu, The Minister of State for Petroleum Resources, National Petroleum Corporation (NNPC). Be informed that my partner Dr. Maikanti Baru and I awarded a contract to a foreign firm (Sheng Yang Contraction Company) with contract Ref No: NNPC/PED/1462/KADREF/92) for the maintenance of the Nigeria petroleum-chemical complex located at Kaduna, Nigeria.
I know that this proposal may come to you as a surprise especially having to come from someone you have not met before, but I would like you to co-operate with me so that this U$D98, 000,000.00 will be released and transferred into your account, it is mine profound intention to contact you for this very important and highly confidential transaction for the transfer of (U$D98, 000,000.00 Ninety-Eight Million United States Dollars Only into your bank account.
The contract has been successfully executed by the contractors and their contract sum has been paid to them, leaving us an overestimated balance of (U$D98, 000,000.00 Ninety-Eight Million United States Dollars Only) still pending at the bank. Right now, we are left with this overestimated balance of (U$D98, 000,000.00) which is still floating at the escrow account in the Central Bank of Nigeria (CBN) waiting for final payment to any reliable foreign bank account, you may provide.
We, as government officials, are not permitted to own or operate foreign bank accounts. therefore, we need reliable person who will provide us with a foreign account where to transfer and deposit this US$98,000,000.00, that is the reason we are soliciting for your sincere assistance to provide us with an account where to transfer this money .all modalities for the easy transfer of this money is now in place, the period of this transaction is only two weeks from the day we receive your bank account details.
Note that 50% of our share will be invested in your country, as we propose to give you 30% of the U$D98, 000,000.00, my partners and I will get 60% of the money.
The balance of 10% will be allocated to cover all expenses incurred by both partners, be informed that this proposal is urgent and confidential, please send to me your bank account details and full address of company name and address, your private phone and fax number for easy communication which will be used in securing all the necessary documents for easy transfer of the fund.
Awaiting your urgent response.
Best regards.
Dr. Emmanuel Ibe Kachikwu.
The Minister of State for Petroleum Resources, Nigerian National Petroleum Corporation (NNPC)
This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Masterpage®. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error.