Mass spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 21 Jun 2022 08:05:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1o3eU4-0000aV-5i

for dave@doctor.nl2k.ab.ca;

Tue, 21 Jun 2022 08:04:00 -0600

Resent-From: The Doctor

Resent-Date: Tue, 21 Jun 2022 08:04:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f41.google.com ([209.85.208.41]:38758)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1o3d35-000Jmq-B8

for doctor@doctor.nl2k.ab.ca;

Tue, 21 Jun 2022 06:32:06 -0600

Received: by mail-ed1-f41.google.com with SMTP id fd6so16393613edb.5

for ; Tue, 21 Jun 2022 05:31:46 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:from:date:message-id:subject:to;

bh=O0s/38mRtLPZsNupMag2+I6XvaBteqgk7gwj12NCUk4=;

b=AYG2ey+0ix/oUtmaqbc+K4eqvvpN/qUC4XhiMazilCqf/BKlDG5NnAj44Smn02U+0z

LCaaNxoRfD8HjumeP4XZY+vsHkuUehWPVrfBV2lSbRCzbVwyePBwi/nB3a1waL7d/xbE

2VtG33GEWDX+pBEgNLlOB9KEShTkHugr1SD/UOaAg6h3FiV8e5IPkT2H3W6EZkw93QOr

IqnGzYySH2kZC+TZJqyyxblTYSU25sqQec8nPUQ7j6prKDXmqRwWGveQCazcWQLZTW/n

0base+dh5DmdFbIMntuqRK3XrnwUljknDl4QoTGQNRHcFBHIuQoDoXZknxy4HxX9qvR7

k0Bw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:from:date:message-id:subject:to;

bh=O0s/38mRtLPZsNupMag2+I6XvaBteqgk7gwj12NCUk4=;

b=KsFLLo/FL0QtAa/kzOkiPaHkAF7XA0L4dKJZ8F+7U8Oovt0lbpX/FJqpHoRhrmeNgD

5ZUyriSixOMUABMpso8Cc730TrZInkI0JmuUCOZ9zOZ//XGz/gdd+kvP/tDKciI65jlx

+MWOvwMQTgQFBBzUNOcpOHxEQnlW+YQOcHh4/nSMqSUOuC31LDc7gb5DXLc4qbikCx4i

ebIlAOrmfQNhsHG0eZ2SJzdx+KgYjxOd4pxlAUrMavamIUhiYvSsCpYC2zQBEh5gXVNP

EHDJKCa+3SBS/FFrLQJwJ2cVutnyS3ePrI39zFyvu7STRsoBxs1sYHhxT1XHqnd6vDNA

jBJw==

X-Gm-Message-State: AJIora+2SEawgTUwT2Jj10+oJpOs6QIc9nE+h0F9nvHLFayOtzdb5V7G

Fw4aHgA2rBS0AO45lvbFRDM5oXt15hwQrYqbqHw=

X-Google-Smtp-Source: AGRyM1sMwsnOBuhxO3hybH/7CjZIMwP1y2LL6wjXWqIfcY6vSl3RgZ12zl67IRacM2ZQF78DvZgyW57q4A0dxUNX7Pg=

X-Received: by 2002:a05:6402:254e:b0:431:35df:5e38 with SMTP id

l14-20020a056402254e00b0043135df5e38mr34831400edb.385.1655814699470; Tue, 21

Jun 2022 05:31:39 -0700 (PDT)

MIME-Version: 1.0

From: "Dr. Suraya Farah"

Date: Tue, 21 Jun 2022 12:31:20 +0000

Message-ID:

Subject: Hello Dear

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000f9d53305e1f4661c"

Bcc: doctor@doctor.nl2k.ab.ca



--000000000000f9d53305e1f4661c

Content-Type: text/plain; charset="UTF-8"



How are you doing today?



--000000000000f9d53305e1f4661c

Content-Type: text/html; charset="UTF-8"



How are you doing today?




--000000000000f9d53305e1f4661c--

Beneficiary spam from Google

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 21 Jun 2022 08:03:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1o3eSa-0000Sr-9E

for dave@doctor.nl2k.ab.ca;

Tue, 21 Jun 2022 08:02:28 -0600

Resent-From: The Doctor

Resent-Date: Tue, 21 Jun 2022 08:02:28 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yb1-f179.google.com ([209.85.219.179]:45898)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1o3bvB-000HJC-QU

for root@nl2k.ab.ca;

Tue, 21 Jun 2022 05:19:56 -0600

Received: by mail-yb1-f179.google.com with SMTP id n144so19838986ybf.12

for ; Tue, 21 Jun 2022 04:19:32 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:from:date:message-id:subject:to;

bh=SAUIMAJb0ZnUP4bCTUXlkyE2oEAKZPv+XCEIn7FqN+Y=;

b=FUNDiE9Bmiw848iB72taxxqBYWILtAPfxG1d4KbZObiYswbinleHGV/fA7SSr+OsWL

VwB0g7J4KD0PFjSdY/nGIgggMI8Cc9nEQ+H2VFlLElYwenZOZJSY2gkUDGvyKt/AwJZJ

Eo5m2IWsbAmCwAow98bB2I+qTdj8uGOHck47wBeMqn4+kgsMscKQcNiW+vcr3PCbg3iJ

Jkf21uRj/+k3vCExd5yTecPvIphxQiYodLo/bhBL0vzV6cA4GeCCLTejxIi4uFWnTZMG

XMjKCmbKY73bdF5b6rGpP3V/emKj6Pof4dUO35XlLcs/e7E40kqlVXsOSZYb6yXsR4t0

HGIw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:from:date:message-id:subject:to;

bh=SAUIMAJb0ZnUP4bCTUXlkyE2oEAKZPv+XCEIn7FqN+Y=;

b=FQciBjGQH9FtazAJ4uW59bShFKsBXcmyyEspb7PVi4R3zg1/p2zlgyvlMZRtVOhFQx

1d5h0uw7y4AYnxBMLcqNBV4byjIlIYuKhjZiGIWVjLQD1sI07R6D2pb2xArwDDGhrB43

FsxF75yoeXJ/lUZYctbrX7fwZGN/ModpQz9Kk9LvB+4p0otpN7I2DycBf5CjL7lXPxH6

a83U17qPaCVxIXj40M9QoVPfDh9H7foDSoEIIxdzP4pzHc/WHgNZB0VumSowPHw5aJHq

XQxApA58aF941eab211BNBVlQFPxWqDfGLlqwT5rg0q1v6zwgrH8zumDY8FYXl1+Uyo7

YlLg==

X-Gm-Message-State: AJIora93o3c1OgN5GinmlYaAjPKER9Y6d7s5/DXQ/SGKlIr8Y9Vda30C

y+SDI9wQE0nwql3jLMEnCXYD7AJXFPPLn6u/7qo=

X-Google-Smtp-Source: AGRyM1tdZsyWIyOnQSv8jCR+8znqRVm5B25ihn0cVOtqDskkgJ2xqbZ2lHYz1T6cOgEIZOZdZPPpWban2uYY1Vshx08=

X-Received: by 2002:a25:a091:0:b0:664:6685:89cf with SMTP id

y17-20020a25a091000000b00664668589cfmr31386388ybh.266.1655810366825; Tue, 21

Jun 2022 04:19:26 -0700 (PDT)

MIME-Version: 1.0

From: Martin Nesirky

Date: Tue, 21 Jun 2022 11:15:52 +0000

Message-ID:

Subject: Attn: Beneficiary,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000bae93405e1f364f2"

Bcc: root@nl2k.ab.ca

X-Spam_score: 15.0

X-Spam_score_int: 150

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Attn: Beneficiary, Department of Public Information and human

rights under the approval of United Nations (UN). My Name is Mr. Martin Nesirky.

The United Nations Globally has approved the sum US$2,800,000.00 (Two Millio

[...]



Content analysis details: (15.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.179 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[americabankofscotland[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

2.5 MILLION_USD BODY: Talks about millions of dollars

1.3 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

0.0 HTML_MESSAGE BODY: HTML included in message

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 FILL_THIS_FORM Fill in a form with personal information

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

0.0 MONEY_FORM Lots of money if you fill out a form

1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

2.3 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of

money

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

Subject: {SPAM?} Attn: Beneficiary,



--000000000000bae93405e1f364f2

Content-Type: text/plain; charset="UTF-8"



Attn: Beneficiary,



Department of Public Information and human rights under the approval of

United Nations (UN). My Name is Mr. Martin Nesirky. The United Nations

Globally has approved the sum US$2,800,000.00 (Two Million Eight hundred

thousand united States dollars only) compensation as part of the

responsibilities for humanitarian Aid for fighting against Corona Virus and

you are among the lucky ones.



This compensation is for the most affected countries, communities and

families across the globe. Your funds were deposited with Societe Generale

Bank Senegal (SGBS) to transfer your funds to you via Internet Banking

which will enable you to have full access to the funds and make transfers

online by yourself.





We hereby demand for your full current information to avoid wrong details.





Your full names:

Home Address:

Telephone:

ID card or passport copy.





Yours Sincerely

Mr. Martin Nesirk



--000000000000bae93405e1f364f2

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Attn: Beneficiary,

Department of Public Information=

and human rights under the approval of United Nations (UN). My Name is =C2=

=A0Mr. Martin Nesirky. The United Nations Globally has approved the sum US$=

2,800,000.00 (Two Million Eight hundred thousand united States dollars only=

) compensation as part of the responsibilities for humanitarian Aid for fig=

hting against Corona Virus and you are among the lucky ones.

This co=

mpensation is for the most affected countries, communities and families acr=

oss the globe. Your funds were deposited with Societe Generale Bank Senegal=

(SGBS) to transfer your funds to you via Internet Banking which will enabl=

e you to have full access to the funds and make transfers online by yoursel=

f.


We hereby demand for your full current information to avoid w=

rong details.


Your full names:
Home Address:
Telephone:
>ID card or passport copy.


Yours Sincerely
Mr. Martin Nesirk<=

br>




--000000000000bae93405e1f364f2--

FBI phish from GMail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 21 Jun 2022 08:03:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1o3eSM-0000Rx-56

for dave@doctor.nl2k.ab.ca;

Tue, 21 Jun 2022 08:02:14 -0600

Resent-From: The Doctor

Resent-Date: Tue, 21 Jun 2022 08:02:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f48.google.com ([209.85.217.48]:33609)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1o3bW9-000GZh-Jn

for doctor@doctor.nl2k.ab.ca;

Tue, 21 Jun 2022 04:54:02 -0600

Received: by mail-vs1-f48.google.com with SMTP id j6so5044521vsi.0

for ; Tue, 21 Jun 2022 03:53:36 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=cMQBpSyp1yvR2MHIGcuvJSQzJmRwhHlTqTpAIcah2OY=;

b=OjKUCRnwvlEbmQevUXMJrj5fBmdtqNQr6dBXlGmy9ZPjKz5FVZVQsAsHUr0H9USxcT

C13NNpCPxVrMRJbeJblWcUxyd8VFTE7WF45YpLrmQhIyZg55vRAXYon4lUam3EITq1Px

8+DV8+rbc5768H7C3NXSQtx/kBy0OgDMXG4JecWEoEssHjp5O5evghYTf1mk5XT9C1/6

WGaBoYPX9pfXRKtps0KzrqbiIvetdCb0BpnRGULP1++GWkwBa1TIcCcOhh3Lh0Hef3I4

srKuTvG1/z8vKKmVvfsnCdHxXkj3wVntBDUJ0hAc3L/3+Z1e0PSTFKlCSGgErki16vug

lzJA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=cMQBpSyp1yvR2MHIGcuvJSQzJmRwhHlTqTpAIcah2OY=;

b=73Tlg6mm+JATKMi5XshtglCXa/QzlT78feUgi+sZbcfScx784ofnwsfoYVxHEQ7niZ

S4NWXbMPY2nzjb8jW6djRGK2NPD4lgX1vS5CKEWKNs0grR6h5buf3gOdDkeiPPXrxZGZ

25fTdUhZWFwFe5IbYwuyLwBWKy+4EY3cBQpJgD+oLBvcMFkpyM3XyGlipXi4LdSZnjyf

Plj4s1OnLZu72g7tWLyevOnewAUe3FOWcNHZ3rMFPeUThwK1VcInvvrQY5qHVvNKPhOf

JifxJ1eM8/3K6bjeZCZE66aCCC7rvVzJjN3sgggYK6l1b9P7B20+xJPUD1EXwdncdhgK

26aQ==

X-Gm-Message-State: AJIora9SMzpvub5jtyLgkGXorowe6rXSue2wapqSHyyINRRL5ZMAD7B/

ltXP82wJTUoBJ11+1kVGuD4lRzCfOD0/NvVZGR0=

X-Google-Smtp-Source: AGRyM1sjwRsfsGH/hYzNkdnZjy8VYA0be+PFyFoI3dHqYtmYhlJBMnOy0VNyzfHzcIFrhOb40q+SuRSUh+SITIZnHfQ=

X-Received: by 2002:a05:6102:50a9:b0:34c:4c74:8d80 with SMTP id

bl41-20020a05610250a900b0034c4c748d80mr10771174vsb.13.1655808809962; Tue, 21

Jun 2022 03:53:29 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a59:797:0:b0:2cd:288f:de27 with HTTP; Tue, 21 Jun 2022

03:53:29 -0700 (PDT)

Reply-To: christopherwray5050@gmail.com

From: christopher wray

Date: Tue, 21 Jun 2022 03:53:29 -0700

Message-ID:

Subject: FBI OFFICE

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 14.2

X-Spam_score_int: 142

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: federal bureau of investigation united states department of

justice fbi new york 26 federal plaza 23rd floor new. york 10278-0004 FBI

OFFICE attn:dear atm visa card owner.......read carefully



Content analysis details: (14.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[ejikesunday900[at]gmail.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.217.48 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[ejikesunday900[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[christopherwray5050[at]gmail.com]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.5 XFER_LOTSA_MONEY Transfer a lot of money

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} FBI OFFICE



federal bureau of investigation united states department of justice

fbi new york 26 federal plaza 23rd floor new. york 10278-0004



FBI OFFICE



attn:dear atm visa card owner.......read carefully



i, Christopher .A. Wray the FBi Director is here by announcing to

you that your atm visa card worth $15.000.000.00usd received at jfk

airport since year 2021 from benin republic government authorities and

every necessary fees/charges has been paid by senders except $350.00

for ccc custom clearance certificate but a lady mrs. jane frederick

came forward and claimed you sent her to claim your $15,000,000.00

because you are dead that you are having kidney problem in a process

of surgery you died .







did you order her to pay for custom clearance certificate (ccc) to

claim your fund atm visa card ? also be informed that we came to an

agreement with the u.s custom authority at (jfk) john f. kennedy int'l

airport nyc that you will send $150.00 latest tomorrow morning.







this is to bring to your notice that we have just been informed

through secrete source that the u.s custom authority at (jfk) john f.

kennedy international airport new york are making arrangement to have

your contract fund wired into the bank account of mrs. jane frederick,

the lady that contacted them, earlier and presented some

documentations evidencing your claim purported to have being signed

personally by you for the release of your contract fund to her, since

you have chose to ignore their messages and refuse to pay the required

$150 for custom clearance certificate charges as imposed, despite the

advise we gave to you.







i want to personally assure you once again that you will have every

course to smile and be happy upon conclusion of this project, as we

will continue monitoring all your services with them at all level as

well as your correspondence, until you have received your atm visa

card accordingly. as a legal owner, we are here to protect your

interest and that is the reason why we are doing all we can to make

sure all goes well, this is a huge amount of money which we don't wish

for you to lose.







we understand that the imposed fee might be too much for you to pay so

to further make things easier for you, we have discussed with the u.s

custom authority at (jfk) john f. kennedy international airport new

york pleaded on your behalf for them to give you the grace of sending

half of the charges $550 for now after which the diplomatic agent

makes the delivery of your atm visa card to you then once you receive

your fund, you can then pay the balance of $150 ,



all we want you to do right now is to send the half of the money with

the name listed below so we can forward it to benin republic customs

authority to help us bobtail the custom clearance certificate and the

diplomat will make the delivery to your home address tomorrow morning

by 9:00 am







contact us right away and let me know when you send half of the

charges as we discussed with them to enable them route your fund to

you with immediate effect. this is a life time opportunity and we will

advise you take advantage of it, before it is too late to do so.

god bless you!

thanks.



yours in service,



best regards,



Christopher .A.Wray FBI DRECTOR

Charity Spam from Google

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 21 Jun 2022 08:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1o3eQq-0000HY-T2

for dave@doctor.nl2k.ab.ca;

Tue, 21 Jun 2022 08:00:40 -0600

Resent-From: The Doctor

Resent-Date: Tue, 21 Jun 2022 08:00:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yb1-f182.google.com ([209.85.219.182]:35485)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1o3aeU-000Ea1-Qb

for doctor@doctor.nl2k.ab.ca;

Tue, 21 Jun 2022 03:58:36 -0600

Received: by mail-yb1-f182.google.com with SMTP id t1so23569572ybd.2

for ; Tue, 21 Jun 2022 02:58:13 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:from:date:message-id:subject:to;

bh=zdrlngofrpNy34krPPHXW/o5LXzV52zUmwc9dIMekZ4=;

b=HB00dzoovtD9urp4Stq8zi6j6771UM+eo33yBuqExmU/HfRK+J8pB2yesug1uioVUn

EhsVMT/AA3/Hdf4skl9aBMCUjzg3ZIgyrSjI5CwucuKWMHbO6D1atubNmzPGvHBJ2ScZ

Y1YcZs/hRtWvfGd+zeoBA3snxk4cZsrYfTvj423jBcoQhxNwrL5S0QiSoDbSEM8id763

SI00ffPXwxy6VfZVWGH9tS8glZ4VRe47vbiA9Kc85c0fRZtguQ8P0OVaU0K+iGtac4t2

vvNR3zvx677R6lz4Gu7T8vh15c+fE3ZMP/uc3rn90NoFJ4a+gV5iQ+lA9EObQ9E6X5I5

jQnQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:from:date:message-id:subject:to;

bh=zdrlngofrpNy34krPPHXW/o5LXzV52zUmwc9dIMekZ4=;

b=62duU2v0XCcZs2K/K2sTdJlt2YBKTq0/lzOfUz8y+9Rp3AS/IVwv0XN4YPKkRufKTt

nSzHswN+ntEXDNX+JEMdLxh23GiFBN6Y2WWB86u/3T9frpvfKxi35MRwKLonkI6EfUQa

AAkqVwXvZlA9Zoqf6Y1tSfGi9BVligR/PzqjJ4D6k9AOOEKQiXCaOTuYfj36xg6G5qsR

Ak3+M39pyyJzJN8eA+fN/u4CoePLQUg0a3l8CrxPTlWhI1S/d5eT8RqeLWHvYfAiyYF/

31ocPL345OhNismnG4l4ZnZOhAHxpQXBxOBMx/I4jTlzLIUfSfR3kr6oRbJn7TTpeSo2

a5kA==

X-Gm-Message-State: AJIora/pvcVfv9AqBhFACrXulYEZpLDl/gJJ1nKusVbu01WMYqcZkx5f

labh8nIgGTpRdsLrZhOTpFt09rggRpHKcPprOdo=

X-Google-Smtp-Source: AGRyM1uuTzSufIRs3zLQalZOF/3fQQeQdQ0vKGe5lScE6Jn/mBCyFdulYDHE6HRt4R3FGLCMkWvLRd6JqpP1I3GiDyk=

X-Received: by 2002:a25:68c4:0:b0:668:d0a4:fbfb with SMTP id

d187-20020a2568c4000000b00668d0a4fbfbmr17260195ybc.313.1655805487747; Tue, 21

Jun 2022 02:58:07 -0700 (PDT)

MIME-Version: 1.0

From: Mrs Josefine John Carlsen

Date: Tue, 21 Jun 2022 10:57:10 +0100

Message-ID:

Subject: Dearest Friend,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000ea189505e1f241d9"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 14.5

X-Spam_score_int: 145

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: CHARITY DONATION Please read carefully, I know it is true

that this letter may come to you as a surprise. I came across your e-mail

contact through a private search while in need of your assistance. [...]



Content analysis details: (14.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[pettbrown02[at]gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.182 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[pettbrown02[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

2.7 HK_SCAM_N1 BODY: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

0.0 LOTS_OF_MONEY Huge... sums of money

1.5 HK_NAME_FM_MR_MRS No description available.

-0.0 T_SCC_BODY_TEXT_LINE No description available.

2.0 TVD_PH_BODY_META No description available.

0.5 XFER_LOTSA_MONEY Transfer a lot of money

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Dearest Friend,



--000000000000ea189505e1f241d9

Content-Type: text/plain; charset="UTF-8"



CHARITY DONATION Please read carefully, I know it is true that this

letter may come to you as a surprise. I came across your e-mail contact

through a private search while in need of your assistance. am writing this

mail to you with heavy sorrow in my heart, I have chose to reach out to you

through Internet because it still remains the fastest medium of

communication. I sent this mail praying it will found you in a good

condition of health, since I myself are in a very critical health condition

in which I sleep every night without knowing if I may be alive to see the

next day.



I am Josefine John Carlsen, wife of late Mr John Carlsen, a widow suffering

from long time illness. I have some funds I inherited from my late husband,

the sum of ($11.000.000,eleven million dollars) my Doctor told me recently

that I have serious sickness which is cancer problem. What disturbs me

most is my stroke sickness. Having known my condition, I decided to donate

this fund to a good person that will utilize it the way am going to

instruct herein. I need a very honest and God fearing person who can claim

this money and use it for Charity works, for orphanages, widows and also

build schools for less

privileges that will be named after my late husband if possible and to

promote the word of God and the effort that the house of God is maintained.



I do not want a situation where this money will be used in an ungodly

manners. That's why am taking this decision. am not afraid of death so I

know where am going. I accept this decision because I do not have any child

who will inherit this money after I die. Please I want your sincerely and

urgent answer to know if you will be able to execute this project, and I

will give you more information on how the fund will be transferred to your

bank account. am waiting for your reply.



Best Regards,

Mrs.Josefine John Carlsen,



--000000000000ea189505e1f241d9

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





=C2=A0 =C2=A0 CHARITY DONATION Please read careful=

ly, I know it is true that this letter may come to you as a surprise. I cam=

e across your e-mail contact through a private search while in need of your=

assistance. am writing this mail to you with heavy sorrow in my heart, I h=

ave chose to reach out to you through Internet because it still remains the=

fastest medium of communication. I sent this mail praying it will found yo=

u in a good condition of health, since I myself are in a very critical heal=

th condition in which I sleep every night without knowing if I may be alive=

to see the next day.

I am Josefine John Carlsen, wife of late Mr Jo=

hn Carlsen, a widow suffering from long time illness. I have some funds I i=

nherited from my late husband, the sum of ($11.000.000,eleven million dolla=

rs) my Doctor told me recently that I have serious sickness =C2=A0which is =

cancer problem. What disturbs me most is my stroke sickness. Having known m=

y condition, I decided to donate this fund to a good person that will utili=

ze it the way am going to instruct herein. I need a very honest and God fea=

ring person who can claim this money and use it for Charity works, for orph=

anages, widows and also build schools for less
privileges that will be n=

amed after my late husband if possible and to promote the word of God and t=

he effort that the house of God is maintained.

I do not want a situa=

tion where this money will be used in an ungodly manners. That's why am=

taking this decision. am not afraid of death so I know where am going. I a=

ccept this decision because I do not have any child who will inherit this m=

oney after I die. Please I want your sincerely and urgent answer to know if=

you will be able to execute this project, and I will give you more informa=

tion on how the fund will be transferred to your bank account. am waiting f=

or your reply.

Best Regards,
Mrs.Josefine =C2=A0John Carlsen,
v>



--000000000000ea189505e1f241d9--

Nigerian Spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 20 Jun 2022 22:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1o3VaI-000Kyy-Ui

for dave@doctor.nl2k.ab.ca;

Mon, 20 Jun 2022 22:33:50 -0600

Resent-From: The Doctor

Resent-Date: Mon, 20 Jun 2022 22:33:50 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f53.google.com ([209.85.160.53]:36766)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1o3VEF-000JdO-HE

for doctor@doctor.nl2k.ab.ca;

Mon, 20 Jun 2022 22:11:07 -0600

Received: by mail-oa1-f53.google.com with SMTP id 586e51a60fabf-101ec2d6087so6424872fac.3

for ; Mon, 20 Jun 2022 21:10:42 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to

:content-transfer-encoding;

bh=gXiu60E/BLB/Mq1E7EKkx5g85NXIxfUrqBdCghGDzIE=;

b=NviIAxEVTKjnxLlTwul1a3fFdSyXQtqyNQZt1vjuavmPu/cFlI0UUpdkXRqL9RM0FP

F/y+66H/EE6ThdSm0oG5a6bFx+59dYiMur9Sr5Olk5iLQMHoxm9Kp4gTAaPwz59yyj5Q

cXna9lRTA7AjbADD2ENBQecf5qy8aFeoeRM7vs5y9tbWkg7GU5XpBtuqoOZkO8Q5XfCl

O17Ht2JeW1m+tOYPzdR+e3Ar6x0cEUhmxb7a154wfeWc9hGiMR3KoXcMA2AJtYssnSXB

Ho/tUO29J1P862HBaCbYD5Y9gIWwV5Rc7IlIHUnbiCW7kHNNv5zkZFPtiB0/N4iNpiO/

Zhrg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to:content-transfer-encoding;

bh=gXiu60E/BLB/Mq1E7EKkx5g85NXIxfUrqBdCghGDzIE=;

b=5oszzDqLzEZ149VF1g0sHwlWkm0TrqH8PCiSAaPf0MkAc6KEu95pNVcGYMoIvrqLGC

U7+VzxtZo0NPLieckooFRQUIe6gqZwPAiNaTo8gVcTWZDqpHdYVW8L89DmWDb6MNg+O6

xJsRBnqRH0+tlLE0MSdp3zqFkR2yo9hmNiPBq5YxohV47dE5QdMQLArxVoYZzL1WOWai

QfTjk5lEShQpoQrjhyLuyywteRQwr0DZ9ixYDKjFLP8FqYP/fRRh3e6t82K9QzQ9x9iq

eBa1s1mwpNzrNDy9KS2+esmat8BJfdK72wM3HwWmvL77p2dSpY84p9gyv5KxqVakZKoZ

u/1w==

X-Gm-Message-State: AJIora9iQW8mnKou7g36Cz9WESBT3R54JZNHE9Hx+4ScfQQWVuGGGb8c

HckfHwmYmaDr+EpVMCu4zcvceNAXMshcfAymarE=

X-Google-Smtp-Source: AGRyM1sJyJAXwzCoD6HHGc8CJ+xJ2F+TuBdwJKTUlWqa7wvjcickI8rBaLw3HhEZMtmMwY4KyQWFDhFx0B6UYUW4fbc=

X-Received: by 2002:a05:6870:219c:b0:101:ce22:f541 with SMTP id

l28-20020a056870219c00b00101ce22f541mr6944332oae.265.1655784636068; Mon, 20

Jun 2022 21:10:36 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a4a:301:0:0:0:0:0 with HTTP; Mon, 20 Jun 2022 21:10:32 -0700 (PDT)

Reply-To: mrslatifatariq@citromail.hu

From: "Mrs.Latifa Tariq"

Date: Mon, 20 Jun 2022 21:10:32 -0700

Message-ID:

Subject: Peace be Upon You,

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 12.6

X-Spam_score_int: 126

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Peace be Upon You, I am glad to know you, but Allah knows

you better and he knows why he has directed me to you at this point in time

so do not be afraid. I saw your e-mail contact at Tunisian ministries of

commerce and [...]



Content analysis details: (12.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.53 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[mosesabatutu[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.3 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

0.0 LOTS_OF_MONEY Huge... sums of money

1.5 HK_NAME_FM_MR_MRS No description available.

-0.0 T_SCC_BODY_TEXT_LINE No description available.

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 T_MONEY_PERCENT X% of a lot of money for you

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Peace be Upon You,



Peace be Upon You,



I am glad to know you, but Allah knows you better and he knows why he

has directed me to you at this point in time so do not be afraid. I

saw your e-mail contact at Tunisian ministries of commerce and foreign

trade departments. I am writing this mail to you with heavy sorrow in

my heart, My Name is Latifa Tariq. And am contacting you from my

country Tunisia I want to tell you this because I don=E2=80=99t have any ot=

her

option than to tell you as I was touched to open up to you, I am

married to Mr. Nasseri Tariq who worked with Tunisia embassy in

Burkina Faso for nine years before he died in the year 2019.We were

married for eleven years without a child. He died after a brief

illness that lasted for only five days.



Since his death I decided not to remarry, When my late husband was

alive he deposited the sum of US$8.2m(Eight million two hundred

thousand dollars)in a bank in Ouagadougou the capital city of Burkina

Faso in west Africa Presently this money is still in bank. He made

this money available for exportation of Gold from Burkina Faso mining.

Recently, My Doctor told me that I would not last for the period of

seven months due to cancer problem. Whoever that wants to serve Allah

must serve him in spirit and Truth because Allah is the Most High,

Please always be prayerful all through your life.



The one that disturbs me most is my cancer sickness. Having known my

condition decided to hand you over this money to take care of the

less-privileged people, you will utilize this money the way I am going

to instruct herein. I want you to take 30 Percent of the total money

for your personal use While 70%of the money will go to charity" people

in the street and helping the orphanage.



I don't have any child that will inherit this money and my husband

relatives are not good not even good at all because they are the one

that responsible for the death of my late husband in other to have all

my late husband properties and I don't want my husband's efforts to be

used by those that conspired for his death. I grew up as an Orphan and

I don't have anybody as my family member, just to Endeavour that the

name of Allah is maintained.... Am doing this so that Allah will

forgive my sins and accept my soul because this sickness has suffered

me so much.



As soon as I receive your reply I shall give you the contact of the

bank in Burkina Faso and I will send authority letter that will prove

you as the present beneficiary of the money in the bank that is if you

assure me that you will act accordingly as I Stated herein. Hoping to

receive your reply mrslatifatariq@citromail.hu.



Yours Faithfully.

Mrs. Latifa Tariq

Written from Hospital in Tunis