missing package spam from Google

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Aug 2022 13:16:56 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSjvO-0004uT-AD

for dave@doctor.nl2k.ab.ca;

Mon, 29 Aug 2022 12:55:54 -0600

Resent-From: The Doctor

Resent-Date: Mon, 29 Aug 2022 12:55:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f194.google.com ([209.85.128.194]:38527)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSeiK-000FKx-NI

for root@nk.ca;

Mon, 29 Aug 2022 07:22:09 -0600

Received: by mail-yw1-f194.google.com with SMTP id 00721157ae682-3321c2a8d4cso194710397b3.5

for ; Mon, 29 Aug 2022 06:21:47 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:from:to:cc;

bh=zBsuMTBIQFTiCQaQT/lPnRwAVPSE/xl96YwZmqcRBf4=;

b=K2zUPaSS1D8UoDht4UVsnhWqS2WRSPvQpVdWNPFVaI/OLuvOnxx7F2hrxsvkd/z42E

ENnSj+7xBU7rIoI4HKo+Zm4r/iGcJPvUKZ9UXCBt/n36RSgTn74Wto2bEwd86RMsEzm7

S1IvGhao+YzsHqBmhRYDvNeVIUT22Dys1vsIt3XBEMvgVg7JhHfV+3l3RqInnlcpb6dk

b2+2JZ88z+numbF4UIqZfkelghLx4f5l7u+YIMt0fgdYNlz67+iGccF15OTuQMKDHf+g

yWVXFeAACHuLCkXMEGsLr0kk6zHseNzv4uXzture7A6LXu6wPSH2+TOk5lFAkB/QPb+I

+1YA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:x-gm-message-state:from:to:cc;

bh=zBsuMTBIQFTiCQaQT/lPnRwAVPSE/xl96YwZmqcRBf4=;

b=rvedpv2KNNRwNlnpMKRhVI08hQ2Wz6hGc8L7OlrFatcqhXJ0LC2TWKNSMLIXiYYIRE

Grd6y/rPKu9fo1ElrJuuhx+OOOYW4yQTN7fvHVXuaHD2E4Nar9r3pBzBE9hmM9QHydid

iqfxOi9MMg9PqdnSE7w7DtJ+OfdnE1bNFqXInooRu4Q7ziXVr+4FIl/ZSAbC5nSUAzg8

ytOTNb+hj/BvkPhkwx+HgVpAWipBYAeKcKImElyBemFwQmAnDCAGK07soSddkPZCMo3z

wB8ZiZrKzZw5N1q0kPxPrbqtWYx+PwgwO8jtNqWxQLvxdnAzbMzKBAdw/R0WU7JvqvVR

DdvA==

X-Gm-Message-State: ACgBeo2ZIwluCFeHpt0Wq0zMF5CoTigKDv5ne6+6h1cId3XD3migb5eK

oOHX9VSDj/QsLflR2+GE7wgvEN4Mc75bcXc44Kw=

X-Google-Smtp-Source: AA6agR6n5SAUrHT4CvsUkDPwViBkTg4Zo20WSwOWkvIlKtYrzPurhTksY+6BBxZLG7ejoZ9QQWuTW7RUGDcSjgM3GOs=

X-Received: by 2002:a25:1641:0:b0:684:d31a:feff with SMTP id

62-20020a251641000000b00684d31afeffmr8768329ybw.538.1661779301276; Mon, 29

Aug 2022 06:21:41 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:7010:ee4c:b0:2d6:50e8:7824 with HTTP; Mon, 29 Aug 2022

06:21:40 -0700 (PDT)

Reply-To: josephscottok@gmail.com

From: "Mr.Joseph Scott"

Date: Mon, 29 Aug 2022 06:21:40 -0700

Message-ID:

Subject: Re: Your Abandoned Package For Delivery

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Bcc: root@nk.ca

X-Spam_score: 11.0

X-Spam_score_int: 110

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Assistant Inspection Director McCarran International Airport

Las Vegas Nevada, WMO 72386, United State Date: 08/29/2022 Hello: My Good

Friend Re: Your Abandoned Package For Delivery



Content analysis details: (11.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.194 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[japhetanbua[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal

information

2.7 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

Subject: {SPAM?} Re: Your Abandoned Package For Delivery



Assistant Inspection Director

McCarran International Airport

Las Vegas Nevada,

WMO 72386, United State

Date: 08/29/2022



Hello: My Good Friend



Re: Your Abandoned Package For Delivery



I have very vital information to give to you, but first I must have

your trust before I review it to you because it may cause me my job,

so I need somebody that I can trust for me to be able to review the

secret to you.



I am Mr Joseph Scott, head of luggage/baggage storage facilities here

at the McCarran International Airport,Nevada USA. During my recent

withheld package routine check at the Airport Storage Vault, I

discovered an abandoned shipment from a Diplomat from London and when

scanned it revealed an undisclosed sum of money in a metal trunk box.

The consignment was abandoned because the Contents of the consignment

was not properly declared by the consignee as =E2=80=9CMONEY=E2=80=9D rathe=

r it was

declared as personal effect to avoid interrogation and also the

inability of the diplomat to pay for the United States Non Inspection

Charges which is $3,700USD. On my assumption the consignment is still

left in our Storage House here at the International Airport Nevada

till date. The details of the consignment including your name, your

email address and the official documents from the United Nations

office in Geneva are tagged on the Trunk box.



However, to enable me confirm if you are the actual recipient of this

consignment as the assistant director of the Inspection Unit, I will

advise you provide your current Phone Number and Full Address, to

enable me cross check if it corresponds with the address on the

official documents including the name of nearest Airport around your

city. Please note that this consignment is supposed to have been

returned to the United States Treasury Department as unclaimed

delivery due to the delays in concluding the clearance processes so as

a result of this, I will not be able to receive your details on my

official email account. So in order words to enable me cross check

your details, I will advise you send the required details to my

private email address for quick processing and response. Once I

confirm you as the actual recipient of the trunk box, I can get

everything concluded within 48hours upon your acceptance and proceed

to your address for delivery.



Lastly, be informed that the reason I have taken it upon myself to

contact you personally about this abandoned consignment is because I

want us to transact this business and share the money 80% for you and

20% for me since the consignment has not yet been returned to the

United States Treasury Department after being abandoned by the

diplomat so immediately the confirmation is made, I will go ahead and

pay for the United States Non Inspection Fee of $3,700 dollars and

arrange for the box to be delivered to your doorstep Or I can bring it

by myself to avoid any more trouble but you have to assure me of my

20% share.



I wait to hear from you urgently if you are still alive and I will

appreciate if we can keep this deal confidential. Please get back to

me via my private Email:(josephscottok@gmail.com) for further

directives:



Thank you.

Mr.Joseph Scott

Assistance Inspection Director

McCarran International Airport

Las Vegas Nevada,

WMO 72386, United States.

Western union phish from Google Mail Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Aug 2022 08:27:02 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSeob-000Fx1-9G

for dave@doctor.nl2k.ab.ca;

Mon, 29 Aug 2022 07:28:33 -0600

Resent-From: The Doctor

Resent-Date: Mon, 29 Aug 2022 07:28:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f171.google.com ([209.85.128.171]:46809)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSc9k-0001UC-FC

for root@nk.ca;

Mon, 29 Aug 2022 04:38:17 -0600

Received: by mail-yw1-f171.google.com with SMTP id 00721157ae682-3413ad0640dso28750487b3.13

for ; Mon, 29 Aug 2022 03:37:55 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:from:to:cc;

bh=PEmB3x6VdXcWnJW7B80xYuqe+o1lnmoF5m750WPXd4U=;

b=nYj9gBRWPgSOBAvmmyesuBlxqtBPzdEyJu7ZvcnruuLDKzC/csrkIALZe4z5WUO5z6

sr+Ruck9S6trg4HK0LFDm+gU6JHg3Ei9/HVZ/upSDOFCnz/GIZe5MC0vH4RMw3AFDa+A

tIeynFPNF+OenzHFHzKOqwbLIkcvGJZlfss0xkuJuCCzUCA+zEvNy8b7a4I1rq0p9flF

tHUgaRlDiHy82rCM7XIB4T6znRKQco3Jnr6pPk12sNYvuUefNTWJBiybWOe0G9iQ2SYf

U5Feer3SkreBT3zVqtZearaKGSBLCJgrZvpBanKPLXssOY32lFp1F92FGUXufcyHXA0I

dQXA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:x-gm-message-state:from:to:cc;

bh=PEmB3x6VdXcWnJW7B80xYuqe+o1lnmoF5m750WPXd4U=;

b=7ypbdQ8ggeNqIP1PajWd9XMTRql7Mwx+ECQmGdeXWirt9ARQkR/3XfkCAjpyP/UqS1

+rL84SeYkDMHQKYcrqv/rP2yMbYSSfEGVk3VzbJMNzpglg3QQoLWpa0r+eiMliVaN2vs

bWqB0hZ2xJb1jdHyrqwqUOVrLpjFBqfCGyAKY1TyHwW1jurohdHxKf1UnXIPxhvBt0KC

XNsUwmy0pmSRfsZNPMhb/Yvg+juOm7Vy563jhWOqLJKzr0KIaMRyU2b1ZYgNaD6Ak6gT

KLILtrD5e488k31JMIeYmlG4Jjv0sz1423ulFLsR+d+CXc2HlTYvo7xz4WQ7WCKTLi9v

KpZQ==

X-Gm-Message-State: ACgBeo1vWWbyoR3sjTeItue6qdhagBmVEZWyFZgjSdim8WgK/VuhPajY

gRrblJSqo1gYgDoQe7hnB3djU6uASJyjHi4nUlg=

X-Google-Smtp-Source: AA6agR7U4DY0i7U3U95CetGH/RXGLyT8COaJfa5ZjPuNQe/tGOTCAw7SfOqzxe7O3dDJlfvLTSpsJJzMy8lVDvxqq44=

X-Received: by 2002:a25:eb0d:0:b0:696:436e:c833 with SMTP id

d13-20020a25eb0d000000b00696436ec833mr7262617ybs.574.1661769469214; Mon, 29

Aug 2022 03:37:49 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:7010:4848:b0:2ef:b4be:b855 with HTTP; Mon, 29 Aug 2022

03:37:48 -0700 (PDT)

Reply-To: wesernunion.179@yahoo.com

From: Western Union Money Transfer

Date: Mon, 29 Aug 2022 03:37:48 -0700

Message-ID:

Subject: Available Money To Pick Up

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Bcc: root@nk.ca

X-Spam_score: 21.0

X-Spam_score_int: 210

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Attention E-mail Address Owner: Sequel to the first edition

2022 meeting held yesterday with Federal Bureau of Investigation, The International

Monetary Fund (IMF) is compensating all the scam victims and your email address

was foun [...]



Content analysis details: (21.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was

blocked. See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[URIs: westernunion.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.171 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[africateam397[at]gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[africateam397[at]gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[wesernunion.179[at]yahoo.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 HK_SCAM_N8 BODY: No description available.

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 HK_SCAM No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 FILL_THIS_FORM Fill in a form with personal information

2.2 FILL_THIS_FORM_LOAN Answer loan question(s)

0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)

0.0 MONEY_FORM Lots of money if you fill out a form

0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)

0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.3 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of

money

3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases

Subject: {SPAM?} Available Money To Pick Up



Attention E-mail Address Owner:



Sequel to the first edition 2022 meeting held yesterday with Federal

Bureau of Investigation, The International Monetary Fund (IMF) is

compensating all the scam victims and your email address was found in

the scam victims list and selected to be compensated. This Western

Union office has been mandated by the IMF to transfer your

compensation to you via Western Union Money Transfer.



However, we have concluded to effect your payment through Western Union

Money Transfer, $3,500,00. twice per day until your total sum of $3.500,000=

.00.

is completely transferred to you. We have made your first payment this morn=

ing

but you can't pick it because your payment file need to activate and renewe=

d

before you could pick up the payment today and it will cost you $75. only t=

o

activate and renewed your payment file.



THIS IS YOUR FIRST PAYMENT INFORMATION; visit Western Union Website on.



https://www.westernunion.com/global-service/track-transfer

[https://www.westernunion.com/global-service/track-transfer]



MTCN: 770-413-6000.

SENDERS NAME: PETER MOORE

SENDERS COUNTRY: BENIN REPUBLIC

TEXT QUESTION: IN GOD

TEXT ANS: WE TRUST

AMOUNT: $3,500.00



Note that your payment files will be returned to the IMF within 72 hours if

we did not hear from you, this was the instruction given to us by the IMF.



Send the $75. with this information below.



Receiver Name =3D=3D=3D=3D DANIEL CHRISTIAN

Country =3D=3D=3D=3D Benin Republic

City =3D=3D=3D=3D Cotonou

Test Question =3D=3D=3D=3D=3D When

Answer =3D=3D=3D Now

Amount =3D=3D=3D=3D $75



SINCERELY,

MR. ROBERT SMITH

Telephone: +229-60333897

Western Union=C2=AE Money Transfer,

Head Office Benin Republic

Business proposal spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Aug 2022 09:28:03 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSenk-000FsX-E6

for dave@doctor.nl2k.ab.ca;

Mon, 29 Aug 2022 07:27:40 -0600

Resent-From: The Doctor

Resent-Date: Mon, 29 Aug 2022 07:27:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ua1-f67.google.com ([209.85.222.67]:43977)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSan2-000HOB-LK

for root@nk.ca;

Mon, 29 Aug 2022 03:10:44 -0600

Received: by mail-ua1-f67.google.com with SMTP id z14so2855124uam.10

for ; Mon, 29 Aug 2022 02:10:19 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;

bh=u4ux40pLfc9JCwhXa0iXIqaNwXoEyUtPQwkKPM3Hooc=;

b=VEDQPQve9R1VYTKUAkEJJR3uQ5+HZTRdvY6dKPQh6O6uI/4UlD410fUPznp1/T/d21

yjt0NlSCZjaMipR5PULuZbcCaq7NtxPx8hpeFUqdn33T9awyP3E6WHiCn1WcPPuS4+ta

SEpkcSayBe1eH3mdlC1sXjiAo0P+PvgnLxX12yavQtVfwiqkK8iZlJqb9itE+nv82xs+

NxMPYdgF51TxYKnYWWm4rLVzlxn+8uW1LEl5jQw7H+nbw8jdRg8jNbEOhQl9n/hFHdM1

IVd4snyVyt0oCIxukw6PqwKXLcW+d4oC/RwygP8LG7XtWpTvFlWvWS1EZ/1zRQLR78LB

WSbQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc;

bh=u4ux40pLfc9JCwhXa0iXIqaNwXoEyUtPQwkKPM3Hooc=;

b=d/h7JlpRU6AGp06yjE2aRAld9NELVxfB1LvSjI7M02F/XlvQbyruNrK07wjBzg7yjg

Hj9JTePqWiOhzpfi495ETHpJIN3ZNPFCHHgdboVjr2j0Tyu7TNPS6t3g+1Ugk3n7U8Sz

AczOe1nz3McVhz6O+NDBS9rdj2ZmsoXr4GkqBEIRofgkMPSYxNLipR74HXVOTRxoMHKr

OVEJh9EH53fwK4W93tyToXOlvl2bsl7tmRjS4EWV6inog9lQfJitxaVTauMzh5+OwXtm

A0+XmVFv76xMtVgN0IYeM0+wmec/3AKZH6N1PT7g2vuDAtOAIvSZUW1K4xO8XWO41h0+

d4XQ==

X-Gm-Message-State: ACgBeo0h6od2mBn6iyDDyxyIAEK9GUO55kAKsIblIIazuS2QS0EzBq+T

QhutVT7bDMrLP6BcZc93TGY/QpwD1akS48LN/3M=

X-Google-Smtp-Source: AA6agR6pTompcAGgj+Aw86cvGbQbWJCcmpt4FltNdMz+GUG/gWqcGruRTii2gjVzd7v35tRHCZs7Oq3VSHiZNgJL5k0=

X-Received: by 2002:ab0:548e:0:b0:39f:9349:bbed with SMTP id

p14-20020ab0548e000000b0039f9349bbedmr1021176uaa.42.1661764213353; Mon, 29

Aug 2022 02:10:13 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a59:ada8:0:b0:2d6:fb61:7eb5 with HTTP; Mon, 29 Aug 2022

02:10:12 -0700 (PDT)

Reply-To: zebulonmatsiattorney@gmail.com

From: Zebulon Matsi

Date: Mon, 29 Aug 2022 11:10:12 +0200

Message-ID:

Subject: Thank You.

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: root@nk.ca



Hi

I am writing to inform you that I have a business proposal for you

Kindly confirm your willingness to partner with me so That I can

furnish You with the full details,Thanks



Yours Sincerely

Barr. Zebulon Matsi

zebulonmatsiattorney@gmail.com

Urgency spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 28 Aug 2022 23:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSUba-000OKs-FA

for dave@doctor.nl2k.ab.ca;

Sun, 28 Aug 2022 20:34:26 -0600

Resent-From: The Doctor

Resent-Date: Sun, 28 Aug 2022 20:34:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f47.google.com ([209.85.167.47]:34425)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSQBA-000Goz-Im

for doctor@doctor.nl2k.ab.ca;

Sun, 28 Aug 2022 15:50:57 -0600

Received: by mail-lf1-f47.google.com with SMTP id bt10so8840838lfb.1

for ; Sun, 28 Aug 2022 14:50:35 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;

bh=er/LsCFGnglHbssr+g8ELSIClTaWwfUGaB/KaUC2bII=;

b=ZOViw+Bdqg12lpsUteNBl+B+v84BWfkFoenYnTHIuSeQGVdIbvB/CaudmqiXfnyGuM

EV5D8JABGbuuAiDUIRbA+nJB3y3cmZWy8HJmFA3RyLsCiF+KpfUn1wla0aJkLeOrqcXT

c5f4ugvo4IHB2LHl4JNt83u/gR1dYAR9Y6dZWQg9Bkr1aFH3CKLzM6fI2IgvPoXBCm4e

C40c0sWabQ+KxClluiCtGxYB/60rHg9mTBn3KeesaG2F8cq0sUtZin5gRNYal6A9hrcO

jYgCSUCiKcSAoktmIiZag3CRUuPcLNXa353bL2/zuTMBjpdvv/SyXLTX95cofF7iOI37

S6HQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc;

bh=er/LsCFGnglHbssr+g8ELSIClTaWwfUGaB/KaUC2bII=;

b=IkjBMfzzL9UqGFjoP9vreF7yYIMTKjt6SgeIV/EwtT4+HTffPPpo/o424FUHzOSpeu

Uf1pqGSUYGOW2WUrllCspeo8U0U8iAeJBvW4IJ+KNLlx1Z3YY7stgMQp/JJeGPgb4Pvy

So56CZ7VqJKq2jC9gPeHtDFxC5GOB9Hhgxjw/FZl/tUBbgMRSq+ZnJ74z9acY6I0PFtD

fZ0JsrtXTiWOBGgMTEZvpIMCM5v7ZvRC1U8/777D1s6jNUKtHmmdeCWnkuiFz9ewublI

u2u+azPezjWNVFxLKJeNE+STX2HQW8fSSxPk/PfcX8nuyzx97AXYqrZbezh4OZWlzdL/

mN+w==

X-Gm-Message-State: ACgBeo3eg2NUaKfo5RA24A6+ZEQSqVD2pGhTlc5mxhJaH63uV0b3ek/+

vD01DEIUe9Huq+M/I1BGDm9Sepej6E9VeN4lPCg=

X-Google-Smtp-Source: AA6agR6ocAN2E3tBTh4mIOxNezxSD8pqJgJnefThCuYuaNfyJn9AdpJZQ7CyRvXeXb0n2Fj8OM02Cds+K9lUILFDU60=

X-Received: by 2002:a19:505b:0:b0:494:6549:ade7 with SMTP id

z27-20020a19505b000000b004946549ade7mr1862056lfj.62.1661723428200; Sun, 28

Aug 2022 14:50:28 -0700 (PDT)

MIME-Version: 1.0

Reply-To: drrhahassancom@gmail.com

From: Dr Rhama

Date: Sun, 28 Aug 2022 21:50:23 -0700

Message-ID:

Subject: Please read carefully,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000a726ce05e7542281"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 13.4

X-Spam_score_int: 134

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: From: Dr Rhama_______ Please read carefully, This message

might meet you in utmost surprise. However, it's just my urgent need for

foreign partner that made me contact you for this transaction. I got your

contact from yahoo tourist search while [...]



Content analysis details: (13.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.47 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[jbsamsunghuit[at]gmail.com]

0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_HK_NAME_FM_DR No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal

information

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Please read carefully,



--000000000000a726ce05e7542281

Content-Type: text/plain; charset="UTF-8"



From: Dr Rhama_______

Please read carefully,



This message might meet you in utmost surprise. However, it's just my

urgent need for foreign partner that made me contact you for this

transaction. I got your contact from yahoo tourist search while I was

searching for a foreign partner. I am assured of your capability and

reliability to champion this business opportunity when I prayed about you.



I am a banker by profession in Burkina-Faso, West Africa and currently

holding the post of manager in account and auditing department in our

bank. I have the opportunity of transferring the left over funds ($5.5

Million Dollars) belonging to our deceased customer who died along

with his entire family in a plane crash



Hence; I am inviting you for a business deal where this money can be

shared between us in the ratio of 60/40 if you agree to my business

proposal. Further details of the transfer will be forwarded to you as

soon as I receive your return mail as soon as you receive this letter.



Please indicate your willingness by sending the below information for

more clarification and easy communication. For more details, Contact

me for more details.



For the Expenses, I will be the one to take care of the expenses, if

the bank asks

you for any money, do not pay, inform me in time i will pay it.

I will take care of expenses.



(1) YOUR FULL NAME...

(2) YOUR CONTACT ADDRESS....

(3) YOUR PRIVATE PHONE N0..........

(4) YOUR COUNTRY OF ORIGIN..................

(5) YOUR OCCUPATION.........................



Trusting to hear from you immediately.

Thanks & Best Regards,

Dr Rhama.



--000000000000a726ce05e7542281

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable








ont-size:small;font-style:normal;font-variant-ligatures:normal;font-variant=

-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-in=

dent:0px;text-transform:none;white-space:normal;word-spacing:0px;background=

-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color=

:initial;display:inline;float:none">From: Dr Rhama_______

=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:sm=

all;font-style:normal;font-variant-ligatures:normal;font-variant-caps:norma=

l;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;te=

xt-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(=

255,255,255);text-decoration-style:initial;text-decoration-color:initial"><=

span style=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;fo=

nt-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-=

caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-ind=

ent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-=

color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:=

initial;display:inline;float:none">Please read carefully,

=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:sm=

all;font-style:normal;font-variant-ligatures:normal;font-variant-caps:norma=

l;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;te=

xt-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(=

255,255,255);text-decoration-style:initial;text-decoration-color:initial"><=

br style=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font=

-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-ca=

ps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-inden=

t:0px;text-transform:none;white-space:normal;word-spacing:0px;background-co=

lor:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:in=

itial">
serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-=

variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;=

text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;bac=

kground-color:rgb(255,255,255);text-decoration-style:initial;text-decoratio=

n-color:initial;display:inline;float:none">This message might meet you in u=

tmost surprise. However, it's just my

4,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:nor=

mal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;=

letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;=

white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-=

decoration-style:initial;text-decoration-color:initial">
r:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font=

-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-w=

eight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-trans=

form:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,=

255);text-decoration-style:initial;text-decoration-color:initial;display:in=

line;float:none">urgent need for foreign partner that made me contact you f=

or this

sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;=

font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:s=

tart;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0p=

x;background-color:rgb(255,255,255);text-decoration-style:initial;text-deco=

ration-color:initial">
Helvetica,sans-serif;font-size:small;font-style:normal;font-variant-ligatur=

es:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;te=

xt-align:start;text-indent:0px;text-transform:none;white-space:normal;word-=

spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial=

;text-decoration-color:initial;display:inline;float:none">transaction. I go=

t your contact from yahoo tourist search while I was

or:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;fon=

t-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-=

weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-tran=

sform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255=

,255);text-decoration-style:initial;text-decoration-color:initial">
yle=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size=

:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:no=

rmal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px=

;text-transform:none;white-space:normal;word-spacing:0px;background-color:r=

gb(255,255,255);text-decoration-style:initial;text-decoration-color:initial=

;display:inline;float:none">searching for a foreign partner. I am assured o=

f your capability and

ial,Helvetica,sans-serif;font-size:small;font-style:normal;font-variant-lig=

atures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:norma=

l;text-align:start;text-indent:0px;text-transform:none;white-space:normal;w=

ord-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:ini=

tial;text-decoration-color:initial">
-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-v=

ariant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spa=

cing:normal;text-align:start;text-indent:0px;text-transform:none;white-spac=

e:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration=

-style:initial;text-decoration-color:initial;display:inline;float:none">rel=

iability to champion this business opportunity when I prayed about you.
an>

font-size:small;font-style:normal;font-variant-ligatures:normal;font-varian=

t-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-i=

ndent:0px;text-transform:none;white-space:normal;word-spacing:0px;backgroun=

d-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-colo=

r:initial">

s-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;fon=

t-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:star=

t;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;b=

ackground-color:rgb(255,255,255);text-decoration-style:initial;text-decorat=

ion-color:initial">
vetica,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:=

normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-=

align:start;text-indent:0px;text-transform:none;white-space:normal;word-spa=

cing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;te=

xt-decoration-color:initial;display:inline;float:none">I am a banker by pro=

fession in Burkina-Faso, West Africa and currently

:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-=

style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-we=

ight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transf=

orm:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,2=

55);text-decoration-style:initial;text-decoration-color:initial">
e=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:s=

mall;font-style:normal;font-variant-ligatures:normal;font-variant-caps:norm=

al;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;t=

ext-transform:none;white-space:normal;word-spacing:0px;background-color:rgb=

(255,255,255);text-decoration-style:initial;text-decoration-color:initial;d=

isplay:inline;float:none">holding the post of manager in account and auditi=

ng department in our

al,Helvetica,sans-serif;font-size:small;font-style:normal;font-variant-liga=

tures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal=

;text-align:start;text-indent:0px;text-transform:none;white-space:normal;wo=

rd-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:init=

ial;text-decoration-color:initial">
family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-va=

riant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spac=

ing:normal;text-align:start;text-indent:0px;text-transform:none;white-space=

:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-=

style:initial;text-decoration-color:initial;display:inline;float:none">bank=

. I have the opportunity of transferring the left over funds ($5.5
r style=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-=

size:small;font-style:normal;font-variant-ligatures:normal;font-variant-cap=

s:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent=

:0px;text-transform:none;white-space:normal;word-spacing:0px;background-col=

or:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:ini=

tial">
erif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-v=

ariant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;t=

ext-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;back=

ground-color:rgb(255,255,255);text-decoration-style:initial;text-decoration=

-color:initial;display:inline;float:none">Million Dollars) belonging to our=

deceased customer who died along

nt-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font=

-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-s=

pacing:normal;text-align:start;text-indent:0px;text-transform:none;white-sp=

ace:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decorati=

on-style:initial;text-decoration-color:initial">
,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:n=

ormal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:40=

0;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:non=

e;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);tex=

t-decoration-style:initial;text-decoration-color:initial;display:inline;flo=

at:none">with his entire family in a plane crash

gb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-st=

yle:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weig=

ht:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transfor=

m:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255=

);text-decoration-style:initial;text-decoration-color:initial">

"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small=

;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;f=

ont-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-=

transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255=

,255,255);text-decoration-style:initial;text-decoration-color:initial">
n style=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-=

size:small;font-style:normal;font-variant-ligatures:normal;font-variant-cap=

s:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent=

:0px;text-transform:none;white-space:normal;word-spacing:0px;background-col=

or:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:ini=

tial;display:inline;float:none">Hence; I am inviting you for a business dea=

l where this money can be

y:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-variant=

-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:n=

ormal;text-align:start;text-indent:0px;text-transform:none;white-space:norm=

al;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style=

:initial;text-decoration-color:initial">
font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;fo=

nt-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter=

-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-=

space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decora=

tion-style:initial;text-decoration-color:initial;display:inline;float:none"=

>shared between us in the ratio of 60/40 if you agree to my business=



t-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-c=

aps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-inde=

nt:0px;text-transform:none;white-space:normal;word-spacing:0px;background-c=

olor:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:i=

nitial">
-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font=

-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start=

;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;ba=

ckground-color:rgb(255,255,255);text-decoration-style:initial;text-decorati=

on-color:initial;display:inline;float:none">proposal. Further details of th=

e transfer will be forwarded to you as

4);font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal=

;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;let=

ter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;whi=

te-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-dec=

oration-style:initial;text-decoration-color:initial">
gb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-st=

yle:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weig=

ht:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transfor=

m:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255=

);text-decoration-style:initial;text-decoration-color:initial;display:inlin=

e;float:none">soon as I receive your return mail as soon as you receive thi=

s letter.

a,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:norma=

l;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align=

:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:=

0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-de=

coration-color:initial">

Helvetica,sans-serif;font-size:small;font-style:normal;font-variant-ligatur=

es:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;te=

xt-align:start;text-indent:0px;text-transform:none;white-space:normal;word-=

spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial=

;text-decoration-color:initial">
ily:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-varia=

nt-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing=

:normal;text-align:start;text-indent:0px;text-transform:none;white-space:no=

rmal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-sty=

le:initial;text-decoration-color:initial;display:inline;float:none">Please =

indicate your willingness by sending the below information for

yle=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size=

:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:no=

rmal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px=

;text-transform:none;white-space:normal;word-spacing:0px;background-color:r=

gb(255,255,255);text-decoration-style:initial;text-decoration-color:initial=

">
;font-size:small;font-style:normal;font-variant-ligatures:normal;font-varia=

nt-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-=

indent:0px;text-transform:none;white-space:normal;word-spacing:0px;backgrou=

nd-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-col=

or:initial;display:inline;float:none">more clarification and easy communica=

tion. For more details, Contact

-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-v=

ariant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spa=

cing:normal;text-align:start;text-indent:0px;text-transform:none;white-spac=

e:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration=

-style:initial;text-decoration-color:initial">
4,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:nor=

mal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;=

letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;=

white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-=

decoration-style:initial;text-decoration-color:initial;display:inline;float=

:none">me for more details.

ily:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-varia=

nt-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing=

:normal;text-align:start;text-indent:0px;text-transform:none;white-space:no=

rmal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-sty=

le:initial;text-decoration-color:initial">

font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;fo=

nt-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter=

-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-=

space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decora=

tion-style:initial;text-decoration-color:initial">
34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-style=

:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:=

400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:n=

one;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);t=

ext-decoration-style:initial;text-decoration-color:initial;display:inline;f=

loat:none">For the Expenses, I will be the one to take care of the expenses=

, if

s-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;fon=

t-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:star=

t;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;b=

ackground-color:rgb(255,255,255);text-decoration-style:initial;text-decorat=

ion-color:initial">
vetica,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:=

normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-=

align:start;text-indent:0px;text-transform:none;white-space:normal;word-spa=

cing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;te=

xt-decoration-color:initial;display:inline;float:none">the bank asks=



t-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-c=

aps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-inde=

nt:0px;text-transform:none;white-space:normal;word-spacing:0px;background-c=

olor:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:i=

nitial">
-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font=

-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start=

;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;ba=

ckground-color:rgb(255,255,255);text-decoration-style:initial;text-decorati=

on-color:initial;display:inline;float:none">you for any money, do not pay, =

inform me in time i will pay it.

t-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-=

variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-sp=

acing:normal;text-align:start;text-indent:0px;text-transform:none;white-spa=

ce:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoratio=

n-style:initial;text-decoration-color:initial">
34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:no=

rmal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400=

;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none=

;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text=

-decoration-style:initial;text-decoration-color:initial;display:inline;floa=

t:none">I will take care of =C2=A0expenses.

,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:n=

ormal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:40=

0;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:non=

e;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);tex=

t-decoration-style:initial;text-decoration-color:initial">

r:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font=

-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-w=

eight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-trans=

form:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,=

255);text-decoration-style:initial;text-decoration-color:initial">
le=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:=

small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:nor=

mal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;=

text-transform:none;white-space:normal;word-spacing:0px;background-color:rg=

b(255,255,255);text-decoration-style:initial;text-decoration-color:initial;=

display:inline;float:none">(1) YOUR FULL NAME...

gb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-st=

yle:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weig=

ht:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transfor=

m:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255=

);text-decoration-style:initial;text-decoration-color:initial">
=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:sm=

all;font-style:normal;font-variant-ligatures:normal;font-variant-caps:norma=

l;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;te=

xt-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(=

255,255,255);text-decoration-style:initial;text-decoration-color:initial;di=

splay:inline;float:none">(2) YOUR CONTACT ADDRESS....

lor:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;fo=

nt-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font=

-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-tra=

nsform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,25=

5,255);text-decoration-style:initial;text-decoration-color:initial">
tyle=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-siz=

e:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:n=

ormal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0p=

x;text-transform:none;white-space:normal;word-spacing:0px;background-color:=

rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initia=

l;display:inline;float:none">(3) YOUR PRIVATE PHONE N0..........

style=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-si=

ze:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:=

normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0=

px;text-transform:none;white-space:normal;word-spacing:0px;background-color=

:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initi=

al">
if;font-size:small;font-style:normal;font-variant-ligatures:normal;font-var=

iant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;tex=

t-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;backgr=

ound-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-c=

olor:initial;display:inline;float:none">(4) YOUR COUNTRY OF ORIGIN.........=

.........

a,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:norma=

l;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align=

:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:=

0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-de=

coration-color:initial">
l,Helvetica,sans-serif;font-size:small;font-style:normal;font-variant-ligat=

ures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;=

text-align:start;text-indent:0px;text-transform:none;white-space:normal;wor=

d-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initi=

al;text-decoration-color:initial;display:inline;float:none">(5) YOUR OCCUPA=

TION....................
ly:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-varian=

t-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:=

normal;text-align:start;text-indent:0px;text-transform:none;white-space:nor=

mal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-styl=

e:initial;text-decoration-color:initial;display:inline;float:none">.....
pan>

;font-size:small;font-style:normal;font-variant-ligatures:normal;font-varia=

nt-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-=

indent:0px;text-transform:none;white-space:normal;word-spacing:0px;backgrou=

nd-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-col=

or:initial">

ns-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;fo=

nt-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:sta=

rt;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;=

background-color:rgb(255,255,255);text-decoration-style:initial;text-decora=

tion-color:initial">
lvetica,sans-serif;font-size:small;font-style:normal;font-variant-ligatures=

:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text=

-align:start;text-indent:0px;text-transform:none;white-space:normal;word-sp=

acing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;t=

ext-decoration-color:initial;display:inline;float:none">Trusting to hear fr=

om you immediately.

l,Helvetica,sans-serif;font-size:small;font-style:normal;font-variant-ligat=

ures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;=

text-align:start;text-indent:0px;text-transform:none;white-space:normal;wor=

d-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initi=

al;text-decoration-color:initial">
amily:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-var=

iant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spaci=

ng:normal;text-align:start;text-indent:0px;text-transform:none;white-space:=

normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-s=

tyle:initial;text-decoration-color:initial;display:inline;float:none">Thank=

s & Best Regards,

ial,Helvetica,sans-serif;font-size:small;font-style:normal;font-variant-lig=

atures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:norma=

l;text-align:start;text-indent:0px;text-transform:none;white-space:normal;w=

ord-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:ini=

tial;text-decoration-color:initial">
-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-v=

ariant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spa=

cing:normal;text-align:start;text-indent:0px;text-transform:none;white-spac=

e:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration=

-style:initial;text-decoration-color:initial;display:inline;float:none">Dr =

Rhama.







--000000000000a726ce05e7542281--

Urgency spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Aug 2022 05:25:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSXHM-000D7T-4O

for dave@doctor.nl2k.ab.ca;

Sun, 28 Aug 2022 23:25:44 -0600

Resent-From: The Doctor

Resent-Date: Sun, 28 Aug 2022 23:25:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f49.google.com ([209.85.218.49]:45671)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSV9i-0001RZ-61

for doctor@doctor.nl2k.ab.ca;

Sun, 28 Aug 2022 21:09:45 -0600

Received: by mail-ej1-f49.google.com with SMTP id lx1so13063639ejb.12

for ; Sun, 28 Aug 2022 20:09:25 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;

bh=9IBKKLgkfhER1wfKS3CqqCBd7PzkoxFQ7y7PLeB7PlI=;

b=YoATawWjhvJI7g3ouyz/CRbYO24XVDwIf+6T1iU2/cQ3kl46N7S/CUkBdQMLAA+tXz

K/xvVsv2wqbIzrUyMRo37zgmEuJOqeCpDi53ybamDYSjj0Gmo+gsb9zC4pCYnKXRxIJy

m/wTkHIqKXPEfw2VhE8JruX2RTBbnYvxksMEgQQqLotoIcY1aYR4wjVuArxNzKYZuqEW

EtGhiPmp3JQj5X5nnQL4wahAQhqd0dE0FIcvi+NV/jX1l72Nt2Oua3s8W1M8vRAQg9jN

WXjdp3mkDZYDxzOLdGDf2/EePSeQdu+qqu01VIshjNX55y6deodgInbAxst2hG2R1QzQ

HOfQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc;

bh=9IBKKLgkfhER1wfKS3CqqCBd7PzkoxFQ7y7PLeB7PlI=;

b=E9vVmDV+LDyxGenQMIxvU09MhjMF/iS+tDkS2swQIKuRaInm5fUil0nezwXHzkKfBY

1k7n7ejE/Noo9RKAzDYyDkksjMvAIdCCRuAt51zWG4UzH7OOW7qYcKrnI/vU9Q+bUUnx

ey/LqOToQ9QkxKZ3jatzX808u6xo18VbttTBiL4lceEC5a4AP9aDExQ/6jT2ORu5T7pc

T4y93GmcXelliu8gt1+ONvmbWDkTtCRHbk5G2YoMy7zYO/aCYDMiTjFNZTh6k5lv3AHk

aYq3C83jV/3Ch5HpC98SG+v75HizZ+2f/EBt6YoA6eeqGRP4wNXBkTur1llzbfiwTa49

DMAA==

X-Gm-Message-State: ACgBeo1V7yX/rIcFWmWJVKVYb1OawoQn5CcQ/0zl+8Dzn8pBdc70uRr4

Aoc1bSL65lZ3agezbCeetf+StqVBaE1P6KKqK9g=

X-Google-Smtp-Source: AA6agR4OxazLTN2h0/13IRjnuB5IUylSTggwWLbbqBtE8EhWmiMXA65u8HaXtzFlR8cePX3u6ZTwdKEZ2OXBSTScsts=

X-Received: by 2002:a17:907:608b:b0:731:8a9d:5a2d with SMTP id

ht11-20020a170907608b00b007318a9d5a2dmr12037934ejc.443.1661742558681; Sun, 28

Aug 2022 20:09:18 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a17:906:b04:b0:73d:fcdd:ecdd with HTTP; Sun, 28 Aug 2022

20:09:17 -0700 (PDT)

Reply-To: mrsaifemohammed2018@outlook.fr

From: Mr Saife Mohammed

Date: Mon, 29 Aug 2022 03:09:17 +0000

Message-ID:

Subject: VERY URGENT

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 24.0

X-Spam_score_int: 240

X-Spam_bar: ++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Friend, How are you today?. Please, I would like you

to give an urgent attention to this proposal. I have a very lucrative business

transaction which requires your utmost discretion. Though, I know it would

c [...]



Content analysis details: (24.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.218.49 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[mrezekieljeremiah21[at]gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[mrezekieljeremiah21[at]gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[mrsaifemohammed2018[at]outlook.fr]

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.0 SPF_PASS SPF: sender matches SPF record

0.9 URG_BIZ BODY: Contains urgent matter

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

2.6 HK_SCAM_N13 BODY: No description available.

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 T_MONEY_PERCENT X% of a lot of money for you

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal

information

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

Subject: {SPAM?} VERY URGENT



Dear Friend,



How are you today?. Please, I would like you to give an urgent

attention to this proposal.

I have a very lucrative business transaction which requires your

utmost discretion.

Though, I know it would come to you at uttermost surprise. I am Mr.

Saife Mohammed, A banker by profession.



Please, I want to transfer the sum of ($15.5M) dollars into your bank

account. This business is 100% risk free.

Your share will be 40% while 60% for me.



Full details will be send to you on the receipt of your urgent

response by forwarding the following details bellow:



Here is my private E-mail Address: (mrsaifemohammed2018@outlook.fr)



1. Your Full Name................

2. Your Telephone No..........

3. Your Receiving Country................

4. Your Home Address........



Thanks.



Mr. Saife Mohammed,