netflix phish from inmotionhosting.com

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 03 Dec 2022 14:43:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1p1Zwr-000816-1D

for dave@doctor.nl2k.ab.ca;

Sat, 03 Dec 2022 14:21:25 -0700

Resent-From: The Doctor

Resent-Date: Sat, 3 Dec 2022 14:21:25 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps87324.inmotionhosting.com ([144.208.67.236]:59046 helo=alcaldiadeilopango.co.sv)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

(envelope-from )

id 1p1Wrq-0007Vj-2O

for games@nl2k.ab.ca;

Sat, 03 Dec 2022 11:04:06 -0700

To: games@nl2k.ab.ca

Reply-To: NetfIix info

From: NetfIix info

Subject: Your subscription has been canceled.

X-Priority: 3

X-Mailer: PHPMailer [version 1.73]

MIME-Version: 1.0

X-priority: 3

Content-Transfer-Encoding: base64

Content-Type: text/html; charset="iso-8859-1"

Message-Id: <20221203175521.C93F1D3A81@alcaldiadeilopango.co.sv>

Date: Sat, 3 Dec 2022 09:55:21 -0800 (PST)



PHA+Jm5ic3A7PC9wPg0KDQo8cCBzdHlsZT0ibWFyZ2luLWxlZnQ6NDBweCI+PGltZyBzcmM9Imh0

dHBzOi8vY2tlZGl0b3IuY29tL2FwcHMvY2tmaW5kZXIvdXNlcmZpbGVzL2ZpbGVzLzExMSgxKS5w

bmciIHN0eWxlPSJoZWlnaHQ6NzVweDsgd2lkdGg6MjI1cHgiIC8+PC9wPg0KDQo8cCBzdHlsZT0i

bWFyZ2luLWxlZnQ6NDBweCI+PGJyIC8+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjE0cHgiPjxz

cGFuIHN0eWxlPSJmb250LWZhbWlseTpUcmVidWNoZXQgTVMsSGVsdmV0aWNhLHNhbnMtc2VyaWYi

PjxzdHJvbmc+VXBkYXRlIHlvdXIgcGF5bWVudCZuYnNwOzwvc3Ryb25nPjxzdHJvbmc+TWV0aG9k

Ljwvc3Ryb25nPjwvc3Bhbj48L3NwYW4+PC9wPg0KDQo8cCBzdHlsZT0ibWFyZ2luLWxlZnQ6NDBw

eCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxNHB4Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6

VHJlYnVjaGV0IE1TLEhlbHZldGljYSxzYW5zLXNlcmlmIj5EZWFyIGNvc3R1bWVyLDxiciAvPg0K

PGJyIC8+DQpXZSYjMzk7cmUgaGF2aW5nIHNvbWUgdHJvdWJsZSB3aXRoIHlvdXIgY3VycmVudCBi

aWxsaW5nJm5ic3A7aW5mb3JtYXRpb24uPGJyIC8+DQpXZSYjMzk7bGwgdHJ5IGFnYWluLCBidXQg

aW4gdGhlIG1lYW50aW1lIHlvdSBtYXkgd2FudCB0byB1cGRhdGU8YnIgLz4NCnlvdXIgcGF5bWVu

dCBkZXRhaWxzLjwvc3Bhbj48L3NwYW4+PGJyIC8+DQombmJzcDs8L3A+DQoNCjxwIHN0eWxlPSJt

YXJnaW4tbGVmdDo4MHB4Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjE0cHgiPjxzcGFuIHN0eWxl

PSJmb250LWZhbWlseTpUcmVidWNoZXQgTVMsSGVsdmV0aWNhLHNhbnMtc2VyaWYiPjxzdHJvbmc+

PGEgaHJlZj0iaHR0cDovL2xhY2hub3VlZW5ib3JkZWUuZnIvLndlbGwta25vd24vIiByZWw9Im5v

b3BlbmVyIG5vcmVmZXJyZXIiPjxzcGFuIHN0eWxlPSJjb2xvcjojZmYzMzMzIj5VUERBVEUgWU9V

UiBBQ0NPVU5UIE5PVzwvc3Bhbj48L2E+PC9zdHJvbmc+PC9zcGFuPjwvc3Bhbj48L3A+DQoNCjxw

IHN0eWxlPSJtYXJnaW4tbGVmdDo0MHB4Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjE0cHgiPjxz

cGFuIHN0eWxlPSJmb250LWZhbWlseTpUcmVidWNoZXQgTVMsSGVsdmV0aWNhLHNhbnMtc2VyaWYi

PiZuYnNwOzxiciAvPg0KPHN0cm9uZz4mY29weTsgWW91ciBmcmllbmRzIGF0IE5ldGZsaXg8L3N0

cm9uZz48L3NwYW4+PC9zcGFuPjwvcD4NCg0KPHAgc3R5bGU9Im1hcmdpbi1sZWZ0OjQwcHgiPiZu

YnNwOzwvcD4NCg==





Nigerian Spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 03 Dec 2022 13:14:00 -0700

Received: from mail-lf1-f67.google.com ([209.85.167.67]:33603)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1p1W1g-0000cI-N9

for dave@doctor.nl2k.ab.ca;

Sat, 03 Dec 2022 10:10:14 -0700

Received: by mail-lf1-f67.google.com with SMTP id j4so12150653lfk.0

for ; Sat, 03 Dec 2022 09:07:40 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=Uwk2CozHkMftSdUyW0O0QNshqCuV4UOoNNcBk6LJPws=;

b=KNfh3y3Qy3uUMiLJsrQk6ZBcXATV7cXpA1BJbz1lE4XMyPpPX1Q+Vl59IV6yJMtylh

+o8o+IgHRRfLCiKMojYcXv4BEebpundk70yEMQD6LYJKFr1Qz6WuEJwJ1eSpqkuRLQgC

m6Ogc6GLRM3oLWKs8JBzpojnE5mCnUiaswaljLEs4SvgNGNnAl4i32imnhGl0hD9NzIL

jb+v1r8JgzxQuJ79DK0qogW5+LIj4joU00zoNWRdkrT4/vsTcYk0rFQCVANFKvHABXvP

HjObIfgHlOyQbWw26IUhP1yRubK5l/S7OvGmLElc0QM3XiIfqzItrJg7ZlMXVYsyMqWw

72ww==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=Uwk2CozHkMftSdUyW0O0QNshqCuV4UOoNNcBk6LJPws=;

b=2tsmPF8wHQKSSgeQV1BXhn5xn5FP+mMaafg98/hYUGSpvQ8Nv3+j7/Wq6zUWYY+TxS

YXCes5c6xq5xMeXvQEFmbMkwjSv8/Ea4z8XPnxifDoXx37+8CVBWZVisGcddmxNROv76

eIRu3+PFT8PBYy2/77mTHk2eO6ZWRiUGsOuaGKIf3xpDqtjnhxSdV7uoxf8UAedIxRNX

rvxHca3dLt4Q/+LMVoIi025EEhIEdIbhS0i7k42s++D2Sx+iTEheEsNJEGeWih23Riiw

cyNJWvg6bqsq7kR0cPS2CS1coKK33hEeowAenLDtbV1TzjrigCZyL0v8uGMPThE90aCg

dkxg==

X-Gm-Message-State: ANoB5pmPpJjhXtppkX9zMScBbnOGMGyEqDpJclXKFkbTmYUZ/61RiJbq

VYQbTzhO1Qu04UXyuQKWjTkZ9dEnOqIW5qURbdo=

X-Google-Smtp-Source: AA0mqf6yAW/KuJRCxu3kq4PpCBlqKMj2oRyrBSrLuc74L1A7cMcjpyyo7VDOIDn/dYMe2RilCnRhxv5SLkyU1HXi9eQ=

X-Received: by 2002:a05:6512:ac4:b0:4b5:585b:ff2d with SMTP id

n4-20020a0565120ac400b004b5585bff2dmr1932327lfu.319.1670087253578; Sat, 03

Dec 2022 09:07:33 -0800 (PST)

MIME-Version: 1.0

Received: by 2002:a05:6022:1319:b0:32:989b:d2e9 with HTTP; Sat, 3 Dec 2022

09:07:33 -0800 (PST)

Reply-To: godwinemefiele109@gmail.com

From: "MR. GODWIN EMEFIELE"

Date: Sat, 3 Dec 2022 17:07:33 +0000

Message-ID:

Subject: MR. GODWIN EMEFIELE.

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 32.6

X-Spam_score_int: 326

X-Spam_bar: ++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: CENTRAL BANK REMITTANCE UNIT, CENTRAL BUSINESS DISTRICT, CADASTRAL

ZONE, ABUJA, FEDERAL CAPITAL TERRITORY, CONTRACT #: MAV/NNPC/FGN/MIN/013,

Swift Code: BPH KPL PK, A/C#: 329606=101244=169=678 FOREIGN [...]



Content analysis details: (32.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,

no trust

[209.85.167.67 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[nnedavid95[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[nnedavid95[at]gmail.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[godwinemefiele109[at]gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.67 listed in wl.mailspike.net]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

1.5 BILLION_DOLLARS BODY: Talks about lots of money

2.5 MILLION_USD BODY: Talks about millions of dollars

2.9 YOU_INHERIT Discussing your inheritance

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

2.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 LOTTO_DEPT Claims Department

0.0 XFER_LOTSA_MONEY Transfer a lot of money

0.0 FILL_THIS_FORM Fill in a form with personal information

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

2.2 FILL_THIS_FORM_LOAN Answer loan question(s)

0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)

0.0 MONEY_FORM Lots of money if you fill out a form

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)

0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)

1.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of

money

3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} MR. GODWIN EMEFIELE.



CENTRAL BANK REMITTANCE UNIT,

CENTRAL BUSINESS DISTRICT,

CADASTRAL ZONE, ABUJA,

FEDERAL CAPITAL TERRITORY,

CONTRACT #: MAV/NNPC/FGN/MIN/013,

Swift Code: BPH KPL PK,

A/C#: 329606=101244=169=678

FOREIGN REMITTANCE

Our Ref: CBN/IRD/CBX/021/11



Attention: Beneficiary,



YOUR FUND APPROVED PAYMENT OF $25,000,000.00 (TWENTY FIVE MILLION

DOLLARS THROUGH (ATM CARD)



I am Mr.Godwin Emefiele, The Governor of Central Bank of Nigeria (CBN)

I am contacting you today to alert you of a notification which will be

a great help to you, I am the new director of fund approved payment

department here in CBN and I saw a file last week in your name with

all your information from our central computer stating that abandoned

fund worth of $25,000,000,00 (Twenty Five Million United state

Dollars) belongs to you.



Please, I want to know from you the reason why you abandoned such big

fund here in our bank for long up til this moment without any claim by

you. I hereby officially notifying you about the present arrangement

to pay you as i have been appointed and directed to take in-charge of

your fund payment here in my department, This arrangement was

initiated/constituted by the World Bank and the International Monetary

Fund (IMF) during.



The board meeting due to fraudulent and scam activities going on

within the African Region, I officially contacted you today because

your Inheritance Funds was Redeposited into the "Federal Suspense

Account" of (CBN) last week because you did not proceed with your

Claim as the rightful beneficiary which is well known to the board and

management team of Central Bank of Nigeria (CBN)



I am now in charge of your fund payment in my department here in

Central Bank of Nigeria (CBN) and like i stated in my mail that your

name appear in our Central Computer here as a beneficiary who have not

receive his contract payment for long, Be informed that your fund of

$25,Million Dollars has been approved by the (IMF) and the federal

government for payment and we have decided to convert your fund into

an (ATM CARD) which we will send to you in your country for the

withdraw of your fund in any ATM machine in your country.



To make it easy for your payment in other to avoid much expenses in

receiving your fund and we have made every arrangement regarding your

payment through (ATM CARD) since last week Due to the instruction

given to us for your immediate payment.



Dear beneficiary, I therefore to inform you that we have approved an

(ATM CARD) on your behalf which we will send to you for the withdraw

of your fund and we have converted your total fund of ($25,000,000.00)

into Your (ATM CARD) which is with me right now in my department, your

(ATM CARD) worth the sum of $25,Million Dollars has been ready for the

delivery to your home, Take note, Your (ATM CARD) Pin number is 2126.



You are hereby to quickly respond back to my department today and

provide or reconfirm to me your personal information once again where

you base right now and your home address where you desire to receive

your (ATM CARD) to avoid mistake during the delivery for us to quickly

submit your (ATM CARD) together with your current residential address

for the delivery to your Home in other for you to receive it and start

making a withdraw of your fund in any ATM machine in your country,

This is the conclusion and agreement of your fund



Payment here in our bank. The information required from you for the

delivery of your (ATM CARD) is such as below.



Your Full Name:.................

Your Country And Location:..................

Current Home Address:.........................

Private Telephone Number:...............

A Copy Of Your Id Card:........

Occupation:.......................

Age/Sex:....................



Kindly provide the following information and respond back to my

department today as I will be waiting to hear from you as soon as

possible with the required information for the proceed and delivery of

your (ATM CARD) to your country where you desire to receive it.



Best Regards,

Mr. Godwin Emefiele.

Govermor. Of Central Bank Of Nigeria (CBN)

DHL Phish from Japan

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 03 Dec 2022 08:13:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1p1TUm-000Opt-Rc

for dave@doctor.nl2k.ab.ca;

Sat, 03 Dec 2022 07:28:00 -0700

Resent-From: The Doctor

Resent-Date: Sat, 3 Dec 2022 07:28:00 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from msc12.plala.or.jp ([60.36.166.22]:45879)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

(envelope-from )

id 1p1Rda-000DhM-38

for sales@nk.ca;

Sat, 03 Dec 2022 05:29:14 -0700

Received: from mite.sakura.ne.jp ([163.43.102.54]) by msc12.plala.or.jp

with ESMTP

id <20221203122608.VHSR25384.msc12.plala.or.jp@mite.sakura.ne.jp>

for ; Sat, 3 Dec 2022 21:26:08 +0900

Date: Sat, 3 Dec 2022 21:02:41 +0900

To: sales@nk.ca

From: =?UTF-8?B?Q3VzdG9tZXIgU2VydmljZQ==?=

Subject: =?UTF-8?B?U2jRltGA0YDRlm5nIGFkZHJlc3MgOiBpbnZhbGlkIGRldGFpbHM=?=

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1c216d2a76b20388c14056c1855056581"

X-VirusScan: Outbound; mvir-ac12; Sat, 3 Dec 2022 21:26:08 +0900



This is a multi-part message in MIME format.



--1c216d2a76b20388c14056c1855056581

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: base64



DQogICAgDQogICAgICAgIA0KDQogICAgICANCiAgICAgIA0KICAgDQogICANCg0KICAgIA0KCSAN

CiAgICAgICAgICAgIFlvdXIgcGFja2FnZSBjb3VsZCBub3QgYmUgZGVsaXZlcmVkIGJlY2F1c2Ug

dGhlIHNoaXBwaW5nIGNvc3RzIGhhdmUgbm90IGJlZW4gcGFpZCAoMS43NSQpLg0KICAgICAgICAg

ICAgDQogICAgICAgICAgICBTaGlwbWVudCANCiAgICAgICAgICAgIA0KICAgICAgICAgICAgUmVh

c29uOiBVbnBhaWQgc2hpcHBpbmcgY2hhcmdlcy4NCiAgDQogICAgICAgICAgICBBbW91bnQgOiAx

Ljc1JA0KICAgICAgICAgICAgDQogICAgICAgICAgICBDb25maXJtIFlvdXIgUGFja2FnZQ0KICAg

ICAgICAgICAgDQogICAgICAgICAgICBJbXBvcnRhbnQ6DQogICAgICAgICAgICANCiAgICAgICAg

ICAgIFlvdSBjYW4gYWxzbyBzZWxlY3QgYSBjb2xsZWN0aW9uIHBvaW50IHRvIHBpY2sgdXAgeW91

ciBwYWNrYWdlLg0KICAgICAgIA0KICAgDQogICBDdXN0b21lciBTZXJ2aWNlLURITA0KDQoNCg0K





--1c216d2a76b20388c14056c1855056581

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: base64



PGh0bWw+DQogICAgPGhlYWQ+DQogICAgICAgIDxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlw

ZSIgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCg0KICAgPGgyIHN0eWxlPSJm

b250LWZhbWlseTogU0ZVSVRleHQsIEhlbHZldGljYSwgc2Fucy1zZXJpZjsgbGV0dGVyLXNwYWNp

bmc6IC0wLjM3cHg7IGNvbG9yOiByZ2IoMzIsIDMxLCAzMCk7Ij4gICA8YnI+DQogICAgICA8aW1n

IHN0eWxlPSJwYWRkaW5nOjBweCAzMHB4O3dpZHRoOjIxMXB4O2hlaWdodDo2MHB4IiBzcmM9Imh0

dHBzOi8vaW1hZ2VzNi5mYW5wb3AuY29tL2ltYWdlL3VzZXJfaW1hZ2VzLzYxMTEwMDAveHFydmMt

aWhybi02MTExODEyXzI1NjBfNTY3LnBuZyIgd2lkdGg9IjIxMXB4IiBoZWlnaHQ9IjY4cHgiID4N

CiAgIDwvaDI+DQogICA8cCBzdHlsZT0iZm9udC1mYW1pbHk6IFNGVUlUZXh0LCBIZWx2ZXRpY2Es

IHNhbnMtc2VyaWY7IGxldHRlci1zcGFjaW5nOiAtMC4zN3B4OyBtYXJnaW46IDBweDsgcGFkZGlu

ZzowcHggMzBweDsgYm9yZGVyOiAwcHg7IGZvbnQtc3RyZXRjaDogaW5oZXJpdDsgZm9udC1zaXpl

OiAxNHB4OyBsaW5lLWhlaWdodDogMjJweDsgdmVydGljYWwtYWxpZ246IGJhc2VsaW5lOyBjb2xv

cjogcmdiKDMyLCAzMSwgMzApOyI+DQoNCiAgICA8YnI+DQoJIA0KICAgICAgICAgICAgWW91ciBw

YWNrYWdlIGNvdWxkIG5vdCBiZSBkZWxpdmVyZWQgYmVjYXVzZSB0aGUgc2hpcHBpbmcgY29zdHMg

aGF2ZSBub3QgYmVlbiBwYWlkICgxLjc1JCkuPGJyIC8+DQogICAgICAgICAgICA8YnIgLz4NCiAg

ICAgICAgICAgIDxzcGFuIHN0eWxlPSJtYXJnaW46IDBweDsgcGFkZGluZzogMHB4OyBib3JkZXI6

IDBweDsgZm9udDogaW5oZXJpdDsgdmVydGljYWwtYWxpZ246IGJhc2VsaW5lOyBjb2xvcjogaW5o

ZXJpdDsiPlNoaXBtZW50PC9zcGFuPiANCiAgICAgICAgICAgIDxzcGFuIHN0eWxlPSJtYXJnaW46

IDBweDsgcGFkZGluZzogMHB4OyBib3JkZXI6IDBweDsgZm9udDogaW5oZXJpdDsgdmVydGljYWwt

YWxpZ246IGJhc2VsaW5lOyBjb2xvcjogaW5oZXJpdDsiPg0KICAgICAgICAgICAgUmVhc29uOiBV

bnBhaWQgc2hpcHBpbmcgY2hhcmdlcy48YnIgLz4NCiAgDQogICAgICAgICAgICBBbW91bnQgOiAx

Ljc1JDxiciAvPg0KICAgICAgICAgICAgPGJyIC8+DQogICAgICAgICAgICA8YSAgaHJlZj0iaHR0

cHM6Ly9hYXJ0d29sZi5zZS9yd3pnaCIgdGFyZ2V0PSJfYmxhbmsiIHN0eWxlPSJjb2xvcjogcmdi

KDIxMiw1LDE3KTt0ZXh0LWRlY29yYXRpb246bm9uZTsiPkNvbmZpcm0gWW91ciBQYWNrYWdlPC9z

cGFuPjwvYT48YnIgLz4NCiAgICAgICAgICAgIDxiciAvPg0KICAgICAgICAgICAgSW1wb3J0YW50

OjxiciAvPg0KICAgICAgICAgICAgPGJyIC8+DQogICAgICAgICAgICBZb3UgY2FuIGFsc28gc2Vs

ZWN0IGEgY29sbGVjdGlvbiBwb2ludCB0byBwaWNrIHVwIHlvdXIgcGFja2FnZS4NCiAgICAgICAN

CiAgPC9icj4gDQogICBDdXN0b21lciBTZXJ2aWNlLURITA0KDQoNCg0KPC9odG1sPg==







--1c216d2a76b20388c14056c1855056581--



Nigerian Gmail spam

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 03 Dec 2022 08:13:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1p1TU1-000Ol5-Nv

for dave@doctor.nl2k.ab.ca;

Sat, 03 Dec 2022 07:27:13 -0700

Resent-From: The Doctor

Resent-Date: Sat, 3 Dec 2022 07:27:13 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f174.google.com ([209.85.128.174]:38488)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1p1OCN-0004Sp-OG

for doctor@doctor.nl2k.ab.ca;

Sat, 03 Dec 2022 01:48:55 -0700

Received: by mail-yw1-f174.google.com with SMTP id 00721157ae682-3bfd998fa53so71009767b3.5

for ; Sat, 03 Dec 2022 00:46:10 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=ylZofwVVz/cborkFBPDT+jV8UqtMMLEQZGw4Phu5iHU=;

b=CF9i9DnBe0FAFAHX3yrTrkUza1+961DrPXAOn7ar0C4vLDJa9WPBPTQTScsGhf88wH

gp4shC1XbhtuQjfngiHDTTgAbzujCnZGi3EX9aZuv72/gv7Lq/qBnzTrMsU6EJJoKTbK

u44wuwJzwQK5sDbmKyhSSQratAhCJKIX4WuxTD/WeB6yGNpj5QgmL7cRe/5N3agrsyFy

dFHuts8t+CoyF7vdWHtvKvW0w4oZ+0+IDgIimwXBCnJ3KPvQ3Iis/od7Psh//kBQUyVu

2z437FG/l0CxCJWBEZtJ8iwua7ads7vn4J2gCYpST7Eb5Z5FTkM6VsUx/qJDCL6mR1bc

ohew==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=ylZofwVVz/cborkFBPDT+jV8UqtMMLEQZGw4Phu5iHU=;

b=r1SNdib6APrvFMwahpzxZoY0+FNRoT04yIgpO5cfOJmRTxHm/DsDPyF4CRMI6LAKzj

MK8JkNIzufh1WX2rF/5nf+Q9nMc3zaEcsj33PpxWwjC8wkV3VBE1dOdJnhWYMFy+kItf

L5fH6OJSn3zk7zBw+QjmjfRp5lhNrEaJx6n1jqVO9VgMOXGYee3ZNbFdat4Qqbz7Eu7K

qLkGjclIoJnydL/pWQTj05u0Wl/7cNPVix0yZc7VP19rlBSMmiiVGZRaGE4gyXof8SOJ

NZu3H5FZVcxIoa2XrRIrch9d7T+LGNWchzBrDEWcY9wnkQMl3SOw7cWXQz9pzY565Ya8

nOrQ==

X-Gm-Message-State: ANoB5pnuht71mkN9bpVXWn0mJ/jgzokGwismkQZ0iWOoz6q1y6HgT6f9

Cs50IB0JKnkbq/EUmgYA1QQtvegEBdfM9j6kezs=

X-Google-Smtp-Source: AA0mqf4IonwXwQeB/Pl7BmHJaJaEvyvBYHdPl9CI8RcLJEIJDcx/BUCxpzpwJmqEpcLrjrsA8nTfRFBIIpXEwrj57f0=

X-Received: by 2002:a05:690c:e:b0:36b:fbd0:2f6b with SMTP id

bc14-20020a05690c000e00b0036bfbd02f6bmr53296239ywb.387.1670057163750; Sat, 03

Dec 2022 00:46:03 -0800 (PST)

MIME-Version: 1.0

Received: by 2002:a05:7010:34c8:b0:314:4f9d:6eea with HTTP; Sat, 3 Dec 2022

00:46:03 -0800 (PST)

Reply-To: fcr23893@gmail.com

From: Daniel Ndoye

Date: Sat, 3 Dec 2022 08:46:03 +0000

Message-ID:

Subject: Inform Your Interest

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 22.5

X-Spam_score_int: 225

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: 3rd December 2022. Hi friend, I need God fearing person for

profitable business partnership. I'm grateful for your patience to read this

message, I need a mutual understanding with you as this business is 100%

Legal and risk free [...]



Content analysis details: (22.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.174 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[kabakasedogo[at]gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[fcr23893[at]gmail.com]

2.5 HK_SCAM_N2 BODY: No description available.

2.0 HK_SCAM No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.0 TVD_PH_BODY_META No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

2.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 T_MONEY_PERCENT X% of a lot of money for you

0.0 FILL_THIS_FORM Fill in a form with personal information

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

2.2 FILL_THIS_FORM_LOAN Answer loan question(s)

0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)

0.0 MONEY_FORM Lots of money if you fill out a form

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

1.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of

money

3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Inform Your Interest



3rd December 2022.



Hi friend,



I need God fearing person for profitable business partnership. I'm

grateful for your patience to read this message, I need a mutual

understanding with you as this business is 100% Legal and risk free.

My names are Mr, Daniel Ndoye. The chief operating officer we

discovered an abandoned sum of $15 millions dollars which i want you

stand as next of kin to the deceased fund as you have similar names

with him and once this fund is transferred to your bank account.



I'll come over so that we can move into any business in your country

where we can invest this fund, kindly reply to me urgently and we will

discuss how to achieve this effectively. I'm willing to offer you the

40% of the total amount for your assistance, while the balance shall

be my capital investment in your country when we come over.



Your Full Name..,

Your Cell Phone Number...,

Your Occupation....,

Sex.....,

Your Country.......



I am expecting to read from you soon.

Best Regards,

Daniel Ndoye.