Nigerian Spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 14 Jun 2022 17:43:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1o1GBX-0007Bi-Mi

for dave@doctor.nl2k.ab.ca;

Tue, 14 Jun 2022 17:42:59 -0600

Resent-From: The Doctor

Resent-Date: Tue, 14 Jun 2022 17:42:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f43.google.com ([209.85.160.43]:42585)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1o1FYT-0005d0-72

for doctor@doctor.nl2k.ab.ca;

Tue, 14 Jun 2022 17:02:41 -0600

Received: by mail-oa1-f43.google.com with SMTP id 586e51a60fabf-f2a4c51c45so14417260fac.9

for ; Tue, 14 Jun 2022 16:02:19 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:from:date:message-id:subject:to;

bh=VMRRI6sS6Tconbgpft688d2DVd3o7t8SGmBL+bVxLxg=;

b=A73gFY6XmFAx71QK6IHBcHPAyY39OVwG9Jn8OWRIaNsMI6uCRcU69B2igNDhochDEd

tWlMCGILdR46WAedv49ANhGKhU03gDI7T4KacGg4MNK/t9K0sYKdOUXDWHmdlpQ8XaXp

KXmOxgpOmA9TzHu3YHbeThftLBdFFvNe+v0uJgQsE7I/6B8FhIl7TCHhC1K7iq7FfcdN

wEK8FII6XwF96Ee14jnHc8ak2yI6jic7vuBM/F7Ao3HQ2v2XPAHRkjxfXeTBfY1ldWWp

n7DxrHRkga1UTSJSXe4ei9LjyzG7tUVvkgxyrITNUzQPmquS2dECy7k2bskFb4GbFb0A

2MQw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:from:date:message-id:subject:to;

bh=VMRRI6sS6Tconbgpft688d2DVd3o7t8SGmBL+bVxLxg=;

b=6zrfnZ0tFc+AQLeiv5dIZARUB9cp6Nke3SaalrB6SYw/lBqLzNYqSptvc7ZoFeZBFD

VTxTp7n//U74CjgMBE0vTSbI8Oz7Qy0lDFXXe6Anee82jx9BvTtoutgX5FsmSRwUhHrb

HpDdM/fZC/Sh9TmJUY9l99dgI+uIEgP+H/U1f60tnuhjzkRPzDwmQOL/RbUuXO+gJGde

wlr2ZRUdyUpH4O3Xr3fWnRYAFJB9U95pmuqTe2yQZhiB8khT3x3raiZjQxDpLAauFJsU

Cvm3URMxqKgl0tnUhWan+yYA4cAWZhYNdJD2Bsn95pgl5JDOH8RMyRvs5934C4GRgxYk

To+Q==

X-Gm-Message-State: AJIora/ZnIUOJyIIlekDWQ2BmxHcLlI0e5VvaZALNqzPfzRTzLkMuGXA

P4YOLsEyHgwNgTYHniDIxWQMYpRRv15T2cl86eI=

X-Google-Smtp-Source: AGRyM1uEkrCroMfLreNIQ1n9O9Pg/EmkCai8p0/I618DhGbT73QfDVcnw4KnMwJslHtQljTDOH3+VxH6p+AOQnZU2vc=

X-Received: by 2002:a05:6870:80d1:b0:f3:26bb:a874 with SMTP id

r17-20020a05687080d100b000f326bba874mr3792636oab.26.1655247733848; Tue, 14

Jun 2022 16:02:13 -0700 (PDT)

MIME-Version: 1.0

From: Mrs Aisha Al-Qaddafi

Date: Tue, 14 Jun 2022 11:01:58 -0700

Message-ID:

Subject: Please my beloved One, i need your assistance,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000031060005e170654c"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 12.5

X-Spam_score_int: 125

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please my beloved One, i need your assistance, Please bear

with me. I am writing this letter to you with tears and sorrow from my heart.

I am Aisha Muammar Gaddafi, the only daughter of the embattled president

of Libya, Hon. Muammar Gaddafi. I know my mail might come to you as a surprise

because you don’t know me, but due to the unso [...]



Content analysis details: (12.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.160.43 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[mrsaishaalqaddafi967[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date

2.5 HK_SCAM_N2 BODY: No description available.

1.3 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

1.0 HK_SCAM_N15 BODY: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

0.0 HK_SCAM No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

1.5 HK_NAME_FM_MR_MRS No description available.

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.5 XFER_LOTSA_MONEY Transfer a lot of money

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Please my beloved One, i need your assistance,



--00000000000031060005e170654c

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Please my beloved One, i need your assistance,



Please bear with me. I am writing this letter to you with tears and sorrow

from my heart.



I am Aisha Muammar Gaddafi, the only daughter of the embattled president of

Libya, Hon. Muammar Gaddafi. I know my mail might come to you as a surprise

because you don=E2=80=99t know me, but due to the unsolicited nature of my

situation here in Refugee camp Ouagadougou Burkina Faso i decided to

contact you for help. I have passed through pains and sorrowful moments

since the death of my father. At the same time, my family is the target of

Western nations led by Nato who want to destroy my father at all costs. Our

investments and bank accounts in several countries are their targets to

freeze.



My Father of blessed memory deposited the sum of $27.5M (Twenty Seven

Million Five Hundred Thousand Dollars) in a Bank at Burkina Faso which he

used my name as the next of kin. I have been commissioned by the (BOA) bank

to present an interested foreign investor/partner who can stand as my

trustee and receive the fund in his account for a possible investment in

his country due to my refugee status here in Burkina Faso.



I am in search of an honest and reliable person who will help me and stand

as my trustee so that I will present him to the Bank for the transfer of

the fund to his bank account overseas. I have chosen to contact you after

my prayers and I believe that you will not betray my trust but rather take

me as your own sister or daughter. If this transaction interests you, you

don't have to disclose it to anybody because of what is going on with my

entire family, if the United nation happens to know this account, they will

freeze it as they freeze others, so please keep this transaction only to

yourself until we finalize it.



Sorry for my pictures. I will enclose it in my next mail and more about me

when I hear from you okay.



Yours Sincerely

Best Regard,

Aisha Gaddafi



--00000000000031060005e170654c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Please my beloved One, i need your assistance,

Plea=

se bear with me. I am writing this letter to you with tears and sorrow from=

my heart.

I am Aisha Muammar Gaddafi, the only daughter of the emba=

ttled president of Libya, Hon. Muammar Gaddafi. I know my mail might come t=

o you as a surprise because you don=E2=80=99t know me, but due to the unsol=

icited nature of my situation here in Refugee camp Ouagadougou Burkina Faso=

i decided to contact you for help. I have passed through pains and sorrowf=

ul moments since the death of my father. At the same time, my family is the=

target of Western nations led by Nato who want to destroy my father at all=

costs. Our investments and bank accounts in several countries are their ta=

rgets to freeze.

My Father of blessed memory deposited the sum of $2=

7.5M (Twenty Seven Million Five Hundred Thousand Dollars) in a Bank at Burk=

ina Faso which he used my name as the next of kin. I have been commissioned=

by the (BOA) bank to present an interested foreign investor/partner who ca=

n stand as my trustee and receive the fund in his account for a possible in=

vestment in his country due to my refugee status here in Burkina Faso.
<=

br>I am in search of an honest and reliable person who will help me and sta=

nd as my trustee so that I will present him to the Bank for the transfer of=

the fund to his bank account overseas. I have chosen to contact you after =

my prayers and I believe that you will not betray my trust but rather take =

me as your own sister or daughter. If this transaction interests you, you d=

on't have to disclose it to anybody because of what is going on with my=

entire family, if the United nation happens to know this account, they wil=

l freeze it as they freeze others, so please keep this transaction only to =

yourself until we finalize it.

Sorry for my pictures. I will enclose=

it in my next mail and more about me when I hear from you okay.

You=

rs Sincerely
Best Regard,
Aisha Gaddafi




--00000000000031060005e170654c--

Domain selling Spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 14 Jun 2022 16:55:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1o1FPZ-0005OO-TA

for dave@doctor.nl2k.ab.ca;

Tue, 14 Jun 2022 16:53:25 -0600

Resent-From: The Doctor

Resent-Date: Tue, 14 Jun 2022 16:53:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yb1-f182.google.com ([209.85.219.182]:39544)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1o1AJI-000KXk-Sk

for sales@nk.ca;

Tue, 14 Jun 2022 11:26:41 -0600

Received: by mail-yb1-f182.google.com with SMTP id r3so16318655ybr.6

for ; Tue, 14 Jun 2022 10:26:19 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:references:in-reply-to:from:date:message-id:subject:to;

bh=J9+idZATpLT8Z2ZZRhXdYF4qJ0uNfnb9eHBod/dUQjA=;

b=XwvpX7wQn5yFWzG9y3rWCBqz+61n9TjeuOIpDJ/350ecsdg13umOYInfKSfyRmqQaw

J3GQiEloblORimKTDn313VQ3jteGegcD/cfSEClQAU0yK7fEHhENvoNP5GybFQNAjX98

wP6Fqv6nnC2nW3Msg45Q0HBd1ByO2IAhBGQe8LfBehzMlM19ztzHo9cT9C3T5HJGUtX0

05jXNbpuBcd6T7ZkwV5YwWOpLiQj9IKE04zuClCTOKA7K8OFMw5AxndZnKQiqnS48VIR

nrEbMTKXdSC6h9mmp40Li6cdyYMFFLy0TNAW84n94ikpt56TM6ihSx8sqSUxyy9nAvA5

93xw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:references:in-reply-to:from:date

:message-id:subject:to;

bh=J9+idZATpLT8Z2ZZRhXdYF4qJ0uNfnb9eHBod/dUQjA=;

b=0nBVIcnKMBuWZqtMaxOI7OQaj+PafGmkYOC2xga8nboqcsFeJd9uSi+HVBo/Buls+I

PVvZy0xfBqkfN93BAFUJL7o8cvYu/R+VOcSEyh6NxG/1e8dLXlXOtg1zkY4bXHTcuXxv

XCmjQiPX696bM2pVSL1AAAbbeGsWVxOSJ3n3V7zptrO4yTGPXom3RJoQybE2Lfgx7m2u

KC6hh0VnnuDWoIOOqkvW0ZexVhP81t2SGavkoSR8cMU9+Y206JUThldUYky6yyNZzS6y

gGo/AbANB7/m9ROOzFvs26b35AepCNK53kAaKDeMPxWLFM+UfCi53n2imevGrbHYAVui

evuQ==

X-Gm-Message-State: AJIora8P2nsVO/92Mkgd0NdyObtA8D5V6uOSfDVcsPEzTcUPPskrhSJW

w2fd/RIUPDqQrDflX7fSAjnByb3vgQNPg5H8G71U2Mz2st4=

X-Google-Smtp-Source: AGRyM1vHO/3eG8uDen6P5A0aicTytgDQGmHh2jy8Au1dOo0UJ8rqUGCgcKFoQlP3AWCaFICZk77WMTpt59TRCMm1UJY=

X-Received: by 2002:a25:da83:0:b0:663:ffae:e29 with SMTP id

n125-20020a25da83000000b00663ffae0e29mr6072308ybf.70.1655227573266; Tue, 14

Jun 2022 10:26:13 -0700 (PDT)

MIME-Version: 1.0

References:

In-Reply-To:

From: Michael Davis

Date: Tue, 14 Jun 2022 18:25:44 +0100

Message-ID:

Subject: Re: Edmonton Broadband

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="00000000000086ed6d05e16bb3bf"



--00000000000086ed6d05e16bb3bf

Content-Type: text/plain; charset="UTF-8"



Hello,



EdmontonBroadband.com is still available for purchase.



The current price is $499 which is a one time fee.



If you are interested, visit www.EdmontonBroadband.com to purchase or make

an offer.



If you don't have any interest, kindly send UNSUBSCRIBE.



Thank you

Michael Davis.



On Mon, May 9, 2022, 6:49 PM Michael Davis wrote:



> Hello,

>

> EdmontonBroadband.com is listed for sale on Dan Domain Marketplace.

>

> The domain is often checked up on the internet in Edmonton. To capture

> more targeted customers for your business, redirect this massive domain to

> your primary website or build a new massive one on it.

>

> When you have 2 or more domains, it helps to throw a wider range and

> visibility than just 1.

>

> Go to www.EdmontonBroadband.com for immediate acquisition @ $499 only.

>

> Domain is also available @ GoDaddy.

>

> Best Regards,

> Michael Davis

> From Crown Domains.

>



--00000000000086ed6d05e16bb3bf

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,


>
EdmontonBroadband.com is still available for purchase.=

=C2=A0

The current price=

is $499 which is a one time fee.


=3D"auto">If you are interested, visit
and.com">www.EdmontonBroadband.com
to purchase or make an offer.
<=

div dir=3D"auto">
If you don't have any inte=

rest, kindly send UNSUBSCRIBE.=C2=A0


dir=3D"auto">Thank you
Michael Davis.=C2=A0

iv>
On =

Mon, May 9, 2022, 6:49 PM Michael Davis <
9@gmail.com">michaeldav2559@gmail.com
> wrote:

lass=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;=

padding-left:1ex">
=C2=A0Hello,


>
EdmontonBroadband.com is listed for sale on Dan Domain M=

arketplace.=C2=A0

The do=

main is often checked up on the internet in Edmonton. To capture more targe=

ted customers for your business, redirect this massive domain to your prima=

ry website or build a new massive one on it.=C2=A0
<=

br>
When you have 2 or more domains, it helps to thr=

ow a wider range and visibility than just 1.=C2=A0
<=

br>
Go to
m" target=3D"_blank" rel=3D"noreferrer">www.EdmontonBroadband.com
for i=

mmediate acquisition @ $499 only.=C2=A0


iv dir=3D"auto">Domain is also available @ GoDaddy.=C2=A0

auto">
Best Regards,
Mich=

ael Davis
From Crown Domains.






--00000000000086ed6d05e16bb3bf--

Nigerian Money Spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 14 Jun 2022 08:13:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1o17Hk-000Ons-8m

for dave@doctor.nl2k.ab.ca;

Tue, 14 Jun 2022 08:12:48 -0600

Resent-From: The Doctor

Resent-Date: Tue, 14 Jun 2022 08:12:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f195.google.com ([209.85.214.195]:33404)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1o15S1-000HPn-Ux

for doctor@doctor.nl2k.ab.ca;

Tue, 14 Jun 2022 06:15:21 -0600

Received: by mail-pl1-f195.google.com with SMTP id f9so7653410plg.0

for ; Tue, 14 Jun 2022 05:15:00 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:sender:from:date:message-id:subject:to

:content-transfer-encoding;

bh=cayK0H6IQy1d0QUC88HsF24/yaLJdFvFfYMkqrp9K4s=;

b=miMi61N1p2XBeZ1blcGNVjoWrawjrujU7MiBO/G8PppwTL4Ka3WT1Va6lVOybhELjY

SjkXdANHXnbaY0bWKY1KPoJg++wf1uhILehsSy7IAdjtndyY0QzX8j8w39Y4svRNN0DC

yOYM3+pQNeCJ+f1VKqyxT1TsHoD9up69HQVEjk3LOAUT6qPw6YSmw1d2tUcZl+0EY2zq

fRprYLb1gXUoz0owZo4+hsHqbmcwPYt12CNfCRrc1iVgIHje2X2sYLd238KUB+UOlwcF

nYVGpjgLOeuMooxRFNWwXgVadTn3CoagRkTEPekzTgkksaOQEUmfnUzqvYEbwj2aDgzW

dZRQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:sender:from:date:message-id:subject

:to:content-transfer-encoding;

bh=cayK0H6IQy1d0QUC88HsF24/yaLJdFvFfYMkqrp9K4s=;

b=ybryprE1vyV51iJPLeCJkkfNrbaIBOgCbgrLUjSELIB9CnRKT8Q6tWIFj2v/medo+H

gAs7YoKLnpJFzYN9ykWD4UOXdqevEgO8KY7hQtmh7afCGrYY7K+Q6VGOYpvViUxGj+Pp

AKA0KBYEQwpQKnrb/bIL3ou6pG166rIWlGID6asHQMa5K5KufsBlOIZ04k/aw7AAcQmI

u0v5BGVx84ruP48anKOJjPVmSG+sW7iGc57Kx5nL5LLrI+f6TU4Oo4MjVWjzpDxj4s1s

x5jPwe0EeBFbx68sM/+g9kplPS+5w1eRCZUyNRYHBejTF0h3EQHPUPdJ20shvLpgglUk

t6QQ==

X-Gm-Message-State: AJIora8gq9FyyKs9E6QJhcu+cgbdzwT3jCK0WR7cBMMPch05WGhYFkCs

BeCRUHli6uoLKgUIsQupM+U2xn4ULqN2VQmNg2E=

X-Google-Smtp-Source: AGRyM1vRRWny9/8E8Ud3SBhy8VVd47SZqBl0qyg0uHyT1lUQ3TuhF2oBIIoL9HPpcAN9pFok62fku4ImEmI854mWgLU=

X-Received: by 2002:a17:902:a618:b0:168:9ef0:fb82 with SMTP id

u24-20020a170902a61800b001689ef0fb82mr4068496plq.144.1655208894528; Tue, 14

Jun 2022 05:14:54 -0700 (PDT)

MIME-Version: 1.0

Sender: rosekipkalya934@gmail.com

Received: by 2002:a05:7300:8b84:b0:68:2780:ebea with HTTP; Tue, 14 Jun 2022

05:14:53 -0700 (PDT)

From: Ibrahim idewu

Date: Tue, 14 Jun 2022 13:14:53 +0100

X-Google-Sender-Auth: TjwM-WpPj4Dn1-lJGHwjkyxeN1A

Message-ID:

Subject: GREETINGS

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Bcc: doctor@doctor.nl2k.ab.ca

X-Antivirus: AVG (VPS 220614-2, 6/14/2022), Inbound message

X-Antivirus-Status: Clean



I have a business proposal to the tune of $19.3m USD for you to handle

with me. I have opportunity to transfer this abandon fund to your bank

account in your country which belongs to our client.



I am inviting you in this transaction where this money can be shared

between us at ratio of 50/50% and help the needy around us don=E2=80=99t be

afraid of anything I am with you I will instruct you what you will do

to maintain this fund.



Please kindly contact me with your information if you are interested

in this transaction for more details(ibrahimidewu4@gmail.com)



1. Your Full Name.....................

2. Your Address......................

3. Your Country of Origin.............

4. Your Age..........................

5. Your ID card copy and telephone number for easy communication...........=

....



Best regards,

Mr.Ibrahim Idewu.

Nigerian ATM Spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 14 Jun 2022 08:12:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1o17GH-000Nwv-J1

for dave@doctor.nl2k.ab.ca;

Tue, 14 Jun 2022 08:11:17 -0600

Resent-From: The Doctor

Resent-Date: Tue, 14 Jun 2022 08:11:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f48.google.com ([209.85.216.48]:52774)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1o13oX-000ERf-Uf

for root@doctor.nl2k.ab.ca;

Tue, 14 Jun 2022 04:30:29 -0600

Received: by mail-pj1-f48.google.com with SMTP id gd1so8123534pjb.2

for ; Tue, 14 Jun 2022 03:30:08 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=NEEJbfXxn0TjJn5vw0dPGRoxGSJmfr3kYirYCa/E8ag=;

b=fkRpAJcc00/XIFNd0TPArBes5jh63BRklnpeRwlnCCSr4DjzSseaaW8A4rteaoSYsk

1/wwTqXaqL8Viw3ZU8zBvHhLpgjgyoTEotlPV8KJxYXvcD6iTc7Dkf3I17hQo499Ddg8

PEvznYOma0Vsh+jYI/Pc1XtN1u+9yqEFTodTNSEbqIW/E46fVzdAnr2zvJ8Az5m+FVSq

Z4gkP4MV7xW8187bqUWz0PucXAXNOZEd+T4fxEHE3O7sy4qG4CHiuySgviilgVHcPLnH

QcloB1px39ZYmity5sqmTMpicXgaP9DQvlvraJ5S49JtBVztWgs+TKLJFSHs7FYpNXrQ

+MPg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=NEEJbfXxn0TjJn5vw0dPGRoxGSJmfr3kYirYCa/E8ag=;

b=usqs72bSymw7TPfUIj+9Fj54Nayc9HDmdDzRKLMGwFmRYyRYNKkdF/1AJkIA5hWYIo

aysPP/jNV3lzo2GWSVs34T458P3e/5ieaWydPgA8Patp2h6PWFxk7IcqNngnzutxBu7v

tiCWnRWusm0cYcHoUjpwzNsExdiNSjqky2rNWd4cO7+yytzwcqyN1XnyaXYUNhQ3bBFi

gQLHxvlZwXwJ/KAf4WsrLpw93wsgYAO6qsG93Oui4VBMz2CEsvnDoaWOxZLxYPLYOndW

d9pi1ZN4g0AyT/vOkTVJ3jvUaOV++3yLgYSmsPCrHM7GWzJLjtZ9yMXPKle2F25CEf4G

QLxA==

X-Gm-Message-State: AJIora+0CFIl/PCuwylxZwCqwT5UE3gAf6LHOqqnVXeR0XQmAH8zkETm

QGy7TDKLzzy7sjWXch1o1WPKuGaoy+hDAw3f+ww=

X-Google-Smtp-Source: AGRyM1v3R/pCTtmRH6NzjjSTPMx4/ow2ArMjQiqo++n/UzTRtelzAs+dMQnkQlgDcVWKnYhCS/T2JSnu5p76RGGzIMM=

X-Received: by 2002:a17:902:6b05:b0:168:ee36:1928 with SMTP id

o5-20020a1709026b0500b00168ee361928mr2232615plk.114.1655202602977; Tue, 14

Jun 2022 03:30:02 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:7022:725:b0:40:cd38:e6b7 with HTTP; Tue, 14 Jun 2022

03:30:02 -0700 (PDT)

Reply-To: officefile_0112@yahoo.co.jp

From: OFFICIAL MESSAGE

Date: Tue, 14 Jun 2022 11:30:02 +0100

Message-ID:

Subject: We officially want to inform you that an ATM Visa Card Valued at $120 Million

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: root@doctor.nl2k.ab.ca

X-Spam_score: 14.1

X-Spam_score_int: 141

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Your ATM card is ready now,your contact delivery details

as stated below so that they will proceed with the necessary arrangement

for the delivery your ATM VISA/MASTER CARD. You're Full Name=== Cell Phone

Number=== Whats-app Number=== Your Company names=== Current Home Address===

OCCUPATION=== Country=,City=== Nearest Airport=== Next Of Kin Name=== Next

Email Address=== A [...]



Content analysis details: (14.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.48 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[barr.williamsdavis[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[officefile_0112[at]yahoo.co.jp]

2.5 HK_SCAM_N2 BODY: No description available.

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

0.0 HK_SCAM No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

1.5 MONEY_ATM_CARD Lots of money on an ATM card

0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 FILL_THIS_FORM Fill in a form with personal information

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

2.2 FILL_THIS_FORM_LOAN Answer loan question(s)

0.0 MONEY_FORM Lots of money if you fill out a form

1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of

money

Subject: {SPAM?} We officially want to inform you that an ATM Visa Card Valued at $120 Million

X-Antivirus: AVG (VPS 220614-2, 6/14/2022), Inbound message

X-Antivirus-Status: Clean



--

Your ATM card is ready now,your contact delivery details as stated

below so that they will proceed with the necessary arrangement for the

delivery your ATM VISA/MASTER CARD.



You're Full Name===

Cell Phone Number===

Whats-app Number===

Your Company names===

Current Home Address===

OCCUPATION===

Country=,City===

Nearest Airport===

Next Of Kin Name===

Next Email Address===

ANNUAL INCOME===



contact Tony Elumelu, Chairman Email:

tonyelumeluchairman@accountant.com or tonyelumeluchairman@gmail.com,

you shall receive your ATM Card package as soon as possible.



Best regards

Mrs. Chantal Sevo.