Investment spam from gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 13 Sep 2022 16:19:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oYEEg-000IW8-FB

for dave@doctor.nl2k.ab.ca;

Tue, 13 Sep 2022 16:18:30 -0600

Resent-From: The Doctor

Resent-Date: Tue, 13 Sep 2022 16:18:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f49.google.com ([209.85.218.49]:35429)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oY9F1-000CGX-RB

for doctor@doctor.nl2k.ab.ca;

Tue, 13 Sep 2022 10:58:39 -0600

Received: by mail-ej1-f49.google.com with SMTP id go34so29012293ejc.2

for ; Tue, 13 Sep 2022 09:58:14 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date;

bh=xA8ooUIOgqIx12A3tDcrh8jt7U3hJhCja6mbnpieb28=;

b=bgjBtQvr4fFdx2SlxlF2oE/ceqlHJlBVKFqd4npCh00jJYlL/Iv3lCozibn6u+aTRm

KqRAHV8TnSbvWzue49bsFxyV2dc6kmC1uGnmsyWMQ1nlbJjzmR5zQ9DgeKX/nMCKddYt

eDJ9nNDxQd30bPcynwHCAHZp6cMR1blMIwxLhHCBj7yNgl9/ejRMVdOr8t3ApNc16ysO

yAqnYPTX0Rmj5nWm0m+NO8GCWDQG70a9IOAZd0d2K4LoSUjFNEm54HzuW4QhdqmmKZk6

XvsxuW5HT9l32zikKDYI5QwmDffhqyklcReLHEM7NyW/oA1Mz/v9FkHnNLT0TuIfIQpo

WFPQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date;

bh=xA8ooUIOgqIx12A3tDcrh8jt7U3hJhCja6mbnpieb28=;

b=YF4yMJ1dowDfv8tFHr37KQi7zMjE0KXDno4CvOnuxcJ4pXcCT5t1ZIbMOfSor0OTzW

a5uelOAAus5vS4+UvWcJvf8O5fvee3+nd1X41hy+SQVMKeSZJRpnXDTyTrATh+vxOfpB

zuSQ+uT/jZIJPWfanUud/feDM4iEGJVNIi/K/r0GufQhftEXiuid3Yxt216n1tNh6AjK

r8GIf9jCPWVttgoxnrac1AVzWWGrZ/XtY20aB8EEJmu4bp80Uvey7nwLF0zCuQhnmCcm

V/NEjj1pwXGP1ooH6yQ8jORpaasRtPzANr159aCtzqRhER7saWOrrZ68gL8Cz93O0A/k

PzuA==

X-Gm-Message-State: ACgBeo1HkfaZXrLStzYA7Ghu7Xdq0y47sUZVJdtgvgUA6fuEquAEeSHT

pQoDu+03oNep0Qob0Ix6hwoV/oGfkOXntzukM+Q=

X-Google-Smtp-Source: AA6agR5B6IVo2Byq2d/tyBnU6KVlmE3GtwEIHG0kK5vKIzumQp6A8w77nFv8ihUlRszDvosUs1qQbrMxisVj7VN0Y34=

X-Received: by 2002:a17:906:ef8b:b0:77f:2b14:6eef with SMTP id

ze11-20020a170906ef8b00b0077f2b146eefmr5484891ejb.612.1663088287971; Tue, 13

Sep 2022 09:58:07 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a50:3545:0:b0:1ce:afae:fec4 with HTTP; Tue, 13 Sep 2022

09:58:07 -0700 (PDT)

Reply-To: aisha1976gaddafi25@gmail.com

From: "Mrs. Aisha Al-Qaddafi"

Date: Tue, 13 Sep 2022 18:58:07 +0200

Message-ID:

Subject: Please Dear, I need your help to invest in your country,

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 23.6

X-Spam_score_int: 236

X-Spam_bar: +++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Friend, In the name of Allah the Merciful Peace be upon

you and God's mercy and blessings be upon you.



Content analysis details: (23.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[aisha1976gaddafi25[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[aishagadaf20[at]gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.218.49 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[aishagadaf20[at]gmail.com]

0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

2.7 HK_SCAM_N1 BODY: No description available.

2.5 MILLION_USD BODY: Talks about millions of dollars

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Please Dear, I need your help to invest in your country,



Dear Friend,



In the name of Allah the Merciful



Peace be upon you and God's mercy and blessings be upon you.



I am sending this message to you from Oman, In the city of Muscat.



Aisha Gaddafi is my name, I am presently living in Oman,i am a Widow

and single Mother with three Children, the only biological Daughter of

late Libyan President (Late Colonel Muammar Gaddafi) and presently I

am under political asylum protection by the Omani Government.



I have funds worth $27.500.000.00 US Dollars "Twenty Seven Million

Five Hundred Thousand United States Dollars" which I want to entrust

to you for investment project assistance in your country..



Kindly reply urgently for more details.



Thanks

Yours Truly Mrs Aisha Al-Qaddafi,

Payment notification phish from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 13 Sep 2022 16:17:03 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oYECw-000II7-Qf

for dave@doctor.nl2k.ab.ca;

Tue, 13 Sep 2022 16:16:42 -0600

Resent-From: The Doctor

Resent-Date: Tue, 13 Sep 2022 16:16:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f173.google.com ([209.85.208.173]:39835)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oY72F-000Fwa-KP

for doctor@doctor.nl2k.ab.ca;

Tue, 13 Sep 2022 08:37:15 -0600

Received: by mail-lj1-f173.google.com with SMTP id bn9so14614658ljb.6

for ; Tue, 13 Sep 2022 07:36:54 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date;

bh=vKviBlZv651C2CBIglhJWRvpj0ix94yf4EcyIqcdlf8=;

b=Yx57GIyh9ZROGLI0wLAWhLFttHJ/LNUrBDDrFgonryKUE/KZsVr2jJmwdhai0bpQpR

V4WortqgqGDCxmcGmLCIVmEFOK6LFH2mncUfMxcKxxVhSFiE708OoZLao4nRHSUZ/tYR

PByVZHSTteOaHws39r8r+GUe+SiXbHXrWnztJmlPskYFI38KxcJt895YiikIyZ+Lriqe

qWATHecejIs9l32shU7akaolgjeHzRGpbbGu6MHndXwW0jQnJovdaReinoOTmGNPcwvl

bGsOq/gg4PieHpa+p01F+yC74oy57SwbKDor7le7J/MhbUzk6R03zME7dY2AQdDmvuut

iTRg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date;

bh=vKviBlZv651C2CBIglhJWRvpj0ix94yf4EcyIqcdlf8=;

b=nSW0gP7vPBH6crceIT+tOFI0Gz3CeLQwR0uT58nlSd7xejBVBnf/qMazFXU3vT6Lfz

0i8zb4Iib0bMWL0jWbdnXPNrLMsYphKZ+iq4to/f+hTH6ScJBWBMzc8xiwZ6wtoM4gbL

UBEpQ5n+HNebcNAwbJlJpkziEAuBrgfozcOb+6h3oL4x7RLb9ukVaPMzt1S7v2W8gIXS

9q4mXaRAysWLG6hfUDnxbJEZT+87uF8nr5MpWbM5jZep+dBOiUzl6K/eYvS7QxlowaDk

PktZDw5Ts6ehSTFC7JBUHnSIsEMGWD/yChq/iHkWkJ10KandN9vkWFUBSkIOtQb/IiwW

4zQw==

X-Gm-Message-State: ACgBeo0BGnKmt9V2FVZZm9WxruPX2WTGn/khgQLF6nP09rOrDEFLwG23

23kf3lEWAF9b04u+D7raqfmknz/U7id8VYvPCis=

X-Google-Smtp-Source: AA6agR7Lh19m3DC8ovfsFfMAwm0yPWdDABJykz2al/sgvodQx6C68MbLoV3GRM/lAq9dPv33pIKSBv+den+DTcBITs8=

X-Received: by 2002:a2e:a887:0:b0:25e:3174:fb67 with SMTP id

m7-20020a2ea887000000b0025e3174fb67mr8855615ljq.337.1663079807389; Tue, 13

Sep 2022 07:36:47 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:6504:644:b0:1db:dc8f:5313 with HTTP; Tue, 13 Sep 2022

07:36:46 -0700 (PDT)

Reply-To: emefiele.centrabankofnig@gmail.com

From: "Pro.Godwin Emefiele"

Date: Tue, 13 Sep 2022 15:36:46 +0100

Message-ID:

Subject: 2022 SECOND QUARTER PAYMENT NOTIFICATION

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 19.0

X-Spam_score_int: 190

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Central International Bank PLC ATM Visa/Swift Card Unit, Attn.

Fund Beneficiary, This note is a reminder that the President through the

office of Federal Ministry Of Finance and the Central Bank of Nigeria has

approved the Release of your fund (10M) Million United States Dollars o [...]





Content analysis details: (19.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.173 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[paulmonti.miami[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.6 SUBJ_ALL_CAPS Subject is all capitals

2.5 MILLION_USD BODY: Talks about millions of dollars

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

1.5 MONEY_ATM_CARD Lots of money on an ATM card

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal

information

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)

0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

Subject: {SPAM?} 2022 SECOND QUARTER PAYMENT NOTIFICATION



Central International Bank PLC

ATM Visa/Swift Card Unit,



Attn. Fund Beneficiary,



This note is a reminder that the President through the office of

Federal Ministry Of Finance and the Central Bank of Nigeria has

approved the Release of your fund (10M) Million United States Dollars

only, through ATM CARD. This method is necessary to avoid

suppression,You are Required to send to us your details information

for process



1) Your: Full Name===================

2) Your: Full Address================

3) Your: contact telephone and fax number;=====

4) Your: Age and Profession;=========

5) Your:Copy of any valid form of your Identification;===

6) Your:Marital status===========



This information will enable our IT unit and customer service to

Process your ATM VISA OR MATER CARD which will be deliver to you.We

shall Proceed on receipt of this information requested from you .





Private E-mail:pro.godwinemefiele@yahoo.com



Thank you for your anticipated co-operation.

TREAT AS URGENT.

Pro.Godwin Emefiele.Governor Central Bank of Nigeria (CBN)

Head,e-Payment Division

German language spam from Google

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 13 Sep 2022 08:15:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oY6gR-0000CS-Dp

for dave@doctor.nl2k.ab.ca;

Tue, 13 Sep 2022 08:14:39 -0600

Resent-From: The Doctor

Resent-Date: Tue, 13 Sep 2022 08:14:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yb1-f193.google.com ([209.85.219.193]:35427)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oY6HH-000N8h-Ic

for bin@nl2k.ab.ca;

Tue, 13 Sep 2022 07:48:43 -0600

Received: by mail-yb1-f193.google.com with SMTP id b136so17862814yba.2

for ; Tue, 13 Sep 2022 06:48:22 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:from:to:cc:subject:date;

bh=4QZXkby0Wp/4RNwMQIRzC/NR6VYNSdocgJEPpjfKIz0=;

b=ZqQ78q2HtVvMDhmtx4HbofLdGT/+jrFH6+BHTIYkn9NAQTMK3ZSUVhSQTs5vQlvPkS

cfdvqF7U0qj+tCWi5/kUt07ubgUXrO0zl0g2yMb77rsmEWJfbsajSZkNfsGND0qqntZd

I192FBEL3p9+zBK/6XrqpwvixBkKcv8QbzYcQAUFXYpg0I7kCL4D03W+HpfTHITEZ2ZC

Pa61ocapL18+A1mjVYrVyu5yoQnrfRTWMj4XarCWUgdjSnSZhq1Zp3aB/dOTo4fIs3eS

X8DVTRY0T+cYxhIp830YHjRTdvi6a8U5F/dHnW9dYKiKfjanMCM/Zrjj39ZvSBxbU5kB

DkdA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:x-gm-message-state:from:to:cc:subject:date;

bh=4QZXkby0Wp/4RNwMQIRzC/NR6VYNSdocgJEPpjfKIz0=;

b=yfiA8llDJWY6V6dIzKYkk51mvlCz5gVs7sJgZyWI1r21mbdWcoqNCFmyPOCQzy6ytJ

nUXuh6ga5G+OOh8Wi9FgpVcxQ9vQzloprCrAL9WrOM7CFUxmvntcnyvm/Yln3sRqTxck

p2r7u8U+ES1qMMQcu6PITSPEQqirn7cz/5BFCtBIMOoWrpetV+G4vV17U5lLbpbVJX9b

odaauo2QjyN5nZLiyxUBQARVHRPSN9rwlOFyCDnEDMsf78QPdRGDQkMGKvC+VLFsmi53

CasZv8ZrEU8uKTJmNJaukoKCdlVsUnsjL4rbjARUmWjTFghavslagskQ7wxVfSongc5U

PHzQ==

X-Gm-Message-State: ACgBeo1rgM7tQEDCo+6loq2KkoJJ4RpXGXMh4m9LJTgqEo3oPC1cYLc7

C3esAFxL7qB/RlXKYfswahohbbIq4MrC3xTdxgc=

X-Google-Smtp-Source: AA6agR46Y4yTBCox00aFiG80GBz/ZpkAJ2V/oZBAJ+o1eBsozgjXaOdlrn/Xp0JIwmI5G8hPIsOeszgnmmau7atFknI=

X-Received: by 2002:a5b:aca:0:b0:6ae:269b:5dc1 with SMTP id

a10-20020a5b0aca000000b006ae269b5dc1mr21957286ybr.521.1663076896732; Tue, 13

Sep 2022 06:48:16 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a25:396:0:0:0:0:0 with HTTP; Tue, 13 Sep 2022 06:48:14 -0700 (PDT)

Reply-To: thepowerpackk@gmail.com

From: The Power Pack

Date: Tue, 13 Sep 2022 06:48:14 -0700

Message-ID:

Subject: Spende

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Bcc: bin@nl2k.ab.ca

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Guten Tag liebe Begünstigte, Sie haben diese Nachricht

von der Power Pack Foundation erhalten; Wir sind The Power Pack und der Gewinner

des $731,1 Millionen Powerball Jackpot. Wir sind einer der g [...]



Content analysis details: (7.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.193 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[thomasjaudip[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Spende



--=20

Guten Tag liebe Beg=C3=BCnstigte,

Sie haben diese Nachricht von der Power Pack Foundation erhalten;

Wir sind The Power Pack und der Gewinner des $731,1 Millionen Powerball

Jackpot. Wir sind einer der gr=C3=B6=C3=9Ften Jackpot-Gewinner in der Gesch=

ichte von

die Maryland-Lotterie in den Vereinigten Staaten. Wir haben diese

Lotterie gewonnen

20. Januar 2021 und m=C3=B6chte Sie dar=C3=BCber informieren, dass Google i=

n

Zusammenarbeit mit Microsoft, Ihre "E-Mail-Adresse" auf meine Anfrage an

eine Spende in H=C3=B6he von 3 Millionen US-Dollar erhalten. Wir geben

Ihnen diese 3 Millionen Dollar

um Wohlt=C3=A4tigkeitsorganisationen und armen Menschen in Ihrer Gemeinde

zu helfen, damit wir das schaffen k=C3=B6nnen

Welt ein besserer Ort f=C3=BCr alle. Bitte besuchen Sie die unten stehende

Website f=C3=BCr

weitere Informationen, um nicht skeptisch gegen=C3=BCber diesen 3 Millionen

Dollar zu sein

Spende



HINWEIS: Sie k=C3=B6nnen nach The Power Pack suchen, dem Gewinner des $731,=

1

Millionen-Powerball-Jackpot-Gewinner Maryland 20. Januar, 20. Januar 2021



Bitte antworten Sie an: (thepowerpackk@gmail.com), damit wir nach

rechts gehen k=C3=B6nnen

Bank, eine 3-Millionen-Dollar-Geldautomatenkarte auszustellen. Diese

Bankomatkarte wird mitgeliefert

zusammen mit Ihrer PIN f=C3=BCr den Zugriff auf Ihr Guthaben. Merken Sie

sich das alles

Antworten auf diese Nachricht m=C3=BCssen an (thepowerpackk@gmail.com)

gesendet werden

weitere Informationen dar=C3=BCber, wie Sie diese Spende mit einem

universellen Geldautomaten erhalten k=C3=B6nnen

Karte, die Ihnen schnellstm=C3=B6glich zugesandt wird. Nehmen Sie Kontakt m=

it auf

uns so schnell wie m=C3=B6glich



Gr=C3=BC=C3=9Fe,

Power Pack Foundation

*

Powerball-Jackpot-Gewinner

Missionary donations spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 13 Sep 2022 07:29:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oY5y4-000KY4-TC

for dave@doctor.nl2k.ab.ca;

Tue, 13 Sep 2022 07:28:48 -0600

Resent-From: The Doctor

Resent-Date: Tue, 13 Sep 2022 07:28:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wr1-f67.google.com ([209.85.221.67]:35611)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oY54t-000Ju5-8e

for root@nk.ca;

Tue, 13 Sep 2022 06:31:52 -0600

Received: by mail-wr1-f67.google.com with SMTP id bz13so20565457wrb.2

for ; Tue, 13 Sep 2022 05:31:23 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date;

bh=gvLdH6zezufWd52sVJ/onb6ET2RC6H9oGP0QVKCrVbc=;

b=D2TEXo+DI4EyPqvV+QdgMNNHu6piYhMrHt7RR9Dtk3+MmP8V+Z1NqsmBCJyzdY4KIR

eSo7+oC//Dx+fkhfYo+f6lPrGbZFAuVDbZ6jMsUmCEgRryXOTbfAZMreoXwwxJ6mNgCF

fpEfeSCwzDIhjqQsVsQyitp2s4OxaZQr9EUUPr0Op3U/CYgAvSYo7JJ0R7wrrGIVZh4N

tmctWRK0tx4359buoQYFdPaK7J2CorFYdM87fI8lt2mXqTxoflQ4c4RJ5CvmAM/TrOjZ

VdQIQStkEEq4DRnXH+sHNkMeR/V2MIEkZbZ4F1quV+9I+WP1qTVRSk58W2W6/i7Es/BW

0wmw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date;

bh=gvLdH6zezufWd52sVJ/onb6ET2RC6H9oGP0QVKCrVbc=;

b=d++xkZZrO76m1mznpXkkZTGPom0E7umBF02bmwYGjQYmxYVtacUzh0yYlKBcWLqrcV

BkQDvCuHHe5zH6XgNYNyn1in5aFuU4GI1v2dpphflMEJ6pbF41ItquM3EmZbQRqvXx9F

fdrIEbTrHQN3OhM+9SjfKBHUmWLJ0hOmz74ojyY4GFyPsxfxFwo6OB3XZ+XQop1HgSOT

6EA8JkR5ot6tby3JM28Z+JTfYXucfbRixEUeXFsNQX3ynwCdwc1HQHZbQ7y42BXlzqW2

mQ7cANk9mAKXXUcc2N44r4bOX4+iAKwcB4x3Glhleqa9AE9BuBidmcFuKERwSROlPPU5

8iHw==

X-Gm-Message-State: ACgBeo3pAYleiOq0CNoxqVk7a9GBjmPXjHtXlT/X7adSvzrwSud+Lfu1

wplJ3AHBnLYab4aUALlUi3SyLlEIf6GlW26J6+Y=

X-Google-Smtp-Source: AA6agR5hQCxq+eePKxDwhfI2PUHSznVKtQhxf8JWBI7h+U+Yo6HGOHeUl62bS8zq5jnepaMrbxYqnrQ2ISW6J+3Qe/k=

X-Received: by 2002:a5d:6483:0:b0:226:db59:2f94 with SMTP id

o3-20020a5d6483000000b00226db592f94mr18132968wri.200.1663072276488; Tue, 13

Sep 2022 05:31:16 -0700 (PDT)

MIME-Version: 1.0

From: Mrs Renate Settnik

Date: Tue, 13 Sep 2022 05:31:01 -0700

Message-ID:

Subject: peace

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000046a68605e88e3073"

Bcc: root@nk.ca

X-Spam_score: 7.3

X-Spam_score_int: 73

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: peace, Blessings Be Upon You, With all due respect, sorry

to approach you through this private message. It is the fastest way to get

your attention, I came across your E-mail from my personal search and I decided

to contact you be [...]



Content analysis details: (7.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[mikecollins9111[at]gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.67 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[mikecollins9111[at]gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} peace



--00000000000046a68605e88e3073

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



peace, Blessings Be Upon You,



With all due respect, sorry to approach you through this private message.

It is the fastest way to get your attention, I came across your E-mail from

my personal search and I decided to contact you believing you will be

honest to fulfill my final wish before I die.



I am Mrs Renate Settnik, 67 years old widow from Germany, but living in

Burkina Faso, I am a childless widow, suffering from a pro-long critical

cancer and Paralysis, my doctors confirmed I may not live beyond two months

from now as my health has defiled all forms of medical treatment what

worries me is that I am down with FULL-BODY PARALYSIS. I cannot walk, nor

stand. I have been bedridden for Three years now.



My late husband and I are devoted Christian and have the fear of God. I've

been a philanthropist and a care-giver with the funds and properties I

inherited from my late husband who was a Crude Oil dealer both in Germany

and here in Burkina Faso before he was killed during the Burkina Faso

Political unrest that happened in August 2016.



I have given donations to over 10 Charity Organizations and Foundations in

different countries such as Africa, Asia, South America, etc with the help

of my Catholic church Priest ( Rev. Fr. Philip Michael) where I worship and

my lawyer, from my search I found your email and with prayers and

revelations I see you trust worthy to entrust the remaining balance of =E2=

=82=AC25,

000,000.00.Euro) Twenty Five Million Euros) for a charity establishment

under my name.



As soon as I receive your reply I shall give you the contact of the

Catholic Priest or my Lawyer where you will send him your bank details and

other requirements he may need from you, I want you and the church to

always pray for me please take note, THIS IS A NONE RELIGION PROJECT IT

DOES NOT mATTER IF YOU ARE A MUSLIM OR A CHRISTIAN.



Get back to me if you are interested and ready to handle this transaction

for charity work: ( smrsrenate@gmail.com)

Thanks and Best regards,

Mrs. Renate Magdalena Settnik



--00000000000046a68605e88e3073

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



peace, Blessings Be Upon You,

With all due respect,=

sorry to approach you through this private message. It is the fastest way =

to get your attention, I came across your E-mail from my personal search an=

d I decided to contact you believing you will be honest to fulfill my final=

wish before I die.

I am Mrs Renate Settnik, 67 years old widow from=

Germany, but living in Burkina Faso, I am =C2=A0a childless widow, sufferi=

ng from a pro-long critical cancer and Paralysis, my doctors confirmed I ma=

y not live beyond two months from now as my health has defiled all forms of=

medical treatment what worries me is that I am down with FULL-BODY PARALYS=

IS. I cannot walk, nor stand. I have been bedridden for Three years now.
>
My late husband and I are devoted Christian and have the fear of God. =

I've been a philanthropist and a care-giver with the funds and properti=

es I inherited from my late husband who was a Crude Oil dealer both in Germ=

any and here in Burkina Faso before he was killed during the Burkina Faso P=

olitical unrest that happened in August 2016.

I have given donations=

to over 10 Charity Organizations and Foundations in different countries su=

ch as Africa, Asia, South America, etc with the help of my Catholic church =

Priest ( Rev. Fr. Philip Michael) where I worship and my lawyer, from my se=

arch I found your email and with prayers and revelations I see you trust wo=

rthy to entrust the remaining balance of =E2=82=AC25, 000,000.00.Euro) Twen=

ty Five Million Euros) for a charity establishment under my name.

As=

soon as I receive your reply I shall give you the contact of the Catholic =

Priest or my Lawyer where you will send him your bank details and other req=

uirements he may need from you, I want you and the church to always pray fo=

r me please take note, THIS IS A NONE RELIGION PROJECT IT DOES NOT mATTER I=

F YOU ARE A MUSLIM OR A CHRISTIAN.

Get back to me if you are interes=

ted and ready to handle this transaction for charity work: =C2=A0(
=3D"mailto:smrsrenate@gmail.com">smrsrenate@gmail.com)
Thanks and Be=

st regards,
Mrs. Renate Magdalena Settnik




--00000000000046a68605e88e3073--

urgency spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 13 Sep 2022 07:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oY5uj-000Je3-Gf

for dave@doctor.nl2k.ab.ca;

Tue, 13 Sep 2022 07:25:21 -0600

Resent-From: The Doctor

Resent-Date: Tue, 13 Sep 2022 07:25:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f175.google.com ([209.85.214.175]:40862)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oXyAG-0001pO-Jf

for root@nl2k.ab.ca;

Mon, 12 Sep 2022 23:08:56 -0600

Received: by mail-pl1-f175.google.com with SMTP id b21so10656321plz.7

for ; Mon, 12 Sep 2022 22:08:35 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=reply-to:date:to:subject:mime-version:from:message-id:from:to:cc

:subject:date;

bh=hBsOPskwc2vvnZFy9ZTEGW0M4TZ7jGXUFt4gifmA0n0=;

b=M4yPL8Xs+q57P+MhSClmgUZc30h4xTKx81Sf2Lk9QKoK8A+HfoL+MiF617knlLiilz

bV7NYZ03lwkhXINki2dHIwCX32HKjj2fbHDbU5Tw3HLSWzuSvb4AuG3AvB/9gfZHML0V

efYwZtDaFDBx5YKlkR8F1L5CDxDf7u5Eknx2Mh9INZ0Wa4nVuelEe3mhjriMPeA7BvAY

G+iqecRsFsFrEnusIQx0Y8ZNpkmh5/ITOcaompUefil2XMzrSDzcH62ZOf7eAiLnMIJV

zgG3qrAvEIpv0M3x1oy9Ziqov0JDCC322iKXjTDOt27z9xc+2pJ+fDlBp+yGL+sSZvAP

F9FA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=reply-to:date:to:subject:mime-version:from:message-id

:x-gm-message-state:from:to:cc:subject:date;

bh=hBsOPskwc2vvnZFy9ZTEGW0M4TZ7jGXUFt4gifmA0n0=;

b=CoeDXAxcV7FkAZgp86CFO7xnphEpKeatW0EARKGCYXe1w9AyxbU8oVJRPnrrvVfp5J

JPT8CCIz8TX8QdB+pPBQGCNRh8CvAZ5SOAdvC6DLQfTeAVOnwNv4w6szjXD158NUXxSA

93U4iYu+0WQqkPSqVGJ5NM0l8g9ZjVtsE4IupUHKhzYL1MjPTX8rHAU5b/Et3cB4IpJb

AzvnW2MpN72ImI+L7o6VkWgv+YyMMyT/wcWhpldrr6SRPxtOm+GQR8dbNsJZDpcvFikn

UBOOM0Xiy0Szg6BcqkFsS1tXpY7Q3lVSOB99i4+3TCI3mdPgC5P6w/UEUhaYlpVbn4Gg

kqYw==

X-Gm-Message-State: ACgBeo1Dta2JJDB9QU7bxKZgeeOxtfDKpS8ruJ1FJnHbgM+nCdzJ1ZDh

dFbE7xHs/VqvbvPdqd6cZGM=

X-Google-Smtp-Source: AA6agR4elicUUz9DgmPi2csRB3bp7BdBIibrA1RtdZopsIheGYrwfGa+5awalGhOCdl5H+GHAPiy9w==

X-Received: by 2002:a17:902:db08:b0:176:d40e:4b57 with SMTP id m8-20020a170902db0800b00176d40e4b57mr29971554plx.172.1663045709947;

Mon, 12 Sep 2022 22:08:29 -0700 (PDT)

Received: from [192.168.1.9] ([175.100.3.239])

by smtp.gmail.com with ESMTPSA id w63-20020a626242000000b0053dec787698sm6822238pfb.175.2022.09.12.22.08.23

(version=TLS1 cipher=AES128-SHA bits=128/128);

Mon, 12 Sep 2022 22:08:29 -0700 (PDT)

Message-ID: <6320104d.620a0220.18eee.becb@mx.google.com>

From: Hu Guangjie

X-Google-Original-From: "Hu Guangjie"

Content-Type: multipart/alternative; boundary="===============1731767300=="

MIME-Version: 1.0

Subject: Urgent Message!

To: Recipients

Date: Tue, 13 Sep 2022 12:08:15 +0700

Reply-To: hguangjie29@gmail.com



You will not see this in a MIME-aware mail reader.

--===============1731767300==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body





Hi Compliments, I am looking for a possible tie up with a business or indiv=

idual in your country so I can make some investments. Please, advise on inv=

estment opportunities in your country. Looking forward to your response. Be=

st Regards, Hu Guangjie Executive Group Chairman (Domestic and Internationa=

l) China National Offshore Oil Corporation (CNOOC)



--===============1731767300==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body




=3Diso-8859-1"/>
Hi Compliments,





I am looking for a possible tie up with a business or individual in your co=


untry so I can make some investments. Please, advise on investment opportun=


ities in your country.





Looking forward to your response.





Best Regards,


Hu Guangjie


Executive Group Chairman (Domestic and International)


China National Offshore Oil Corporation (CNOOC)


--===============1731767300==--