Nigerian Spam from Yahoo

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 08 Nov 2022 07:33:05 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1osPdX-000FDm-Ov

for dave@doctor.nl2k.ab.ca;

Tue, 08 Nov 2022 07:31:35 -0700

Resent-From: The Doctor

Resent-Date: Tue, 8 Nov 2022 07:31:35 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from sonic311-57.consmr.mail.ir2.yahoo.com ([77.238.176.189]:36090)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1osMVk-000A41-PI

for doctor@doctor.nl2k.ab.ca;

Tue, 08 Nov 2022 04:11:27 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s2048; t=1667905711; bh=OJnQI5TfbhThjcwjJb/4jHXJ1je0LQFD58f/qeDEwds=; h=Date:From:Subject:References:From:Subject:Reply-To; b=jKsdcl9B1tSTs/jheeur5P33aBVBvRMrU5uspNtJ2JWutILxthYsrLAMrmuUHeTS5KtcwIVxAeW1I4+DRo49VUQJFx4XP5WSj+q5pma0PJ2bJPusexlEElNaIOtAzzj/b1FIgZsNKgT11Bwqmz4XBTgdYbQIxRndzrYmKkGb6ww/QOFhIPFMlGaKnQhg3BhkPYqS0F91t1/sDmdCzCbYwnsu4tKpUfL2ov9dMISAPdXZFcjGQ27j1dxe1ZERF85oRJkuQCnj0VSMCvl7sKYd5i+mgCjKNL1xjC/aOC3YRgILetB9Qb1OyBy6cnZm+dMJ9YXFdw9z9f0lQlWn9BNaCQ==

X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1667905711; bh=gUb15ZqKaYGz0JcrXel+f+s+3+PXHmV7+90fL8H2yD+=; h=X-Sonic-MF:Date:From:Subject:From:Subject; b=aDK2Q8KH5oh1gYlTAq2quX7PV6lhSMpZmSrKEoUW4T/9t978CTUusbAJR6U199RyFdvHaQCScd7HOYh2A0ee8lAjMB/RuZxY3eK80RPAqNAS6QeqRRTkMljXRVG7dYASzSQSHBnZRYKnkra9Y2tmVa0bCnKSIDWhVW1aZBekaNe5D7b38ELbK4lsEqHfXFrwlw1nzIopSvo5gXBeYj7e7PAhTGUO1pqe01FzQfC5KbBxWoGAEsoeElZJzaOiG7TG9VBlgYtfL/OrhY7/whgUNP6NVbBQv6cx633ZKCviBOi0URRskP8gusJEOYWkxaqtmaYOXuxKNpioitdwnUoq1w==

X-YMail-OSG: 86UNTBkVM1l_icAFSgV0slcugWZT4nhi2AVrJiyO.nToKsjnr_zk5LY_7JtGZ2Y

VWbIcFHyE8eKlfgZwSEXgaVNGs1u6CbhUctR1UHSE8QGBKhsM93eOcztKw.B90p5WSZfB9VlYp2q

5Tes3KXk__Nx2XSgZW5zfIo7hKC7TPnRN4zFIll41ZcolPIdHXv0xI5y4pqjSQg6hr3EvBJA5BP0

R3qKIh6UIFluxckRB996yelbMdFdOD10SmcBqeLCJ7bObh6pi7W07aucGOYNzIJoHgu3VttxQBtk

bLQr2.D2X3km3zdY3EDD4C7yI2uNGZicJPdjHN_U5iLv7xT2IvSFF3BYCA3coTaQK45vtHPBPsNA

O1RYjnfvFg_YZ__lYVH17Zm36OFoRVO4KENEFAV7P9QraLNF8Hxq0NdTLbdykjM2eq5fqCIDFcxX

uVnC7IIO2z_x.zMMB2zEDplWpK0bgHhhVlaKGP.rfswvPU80IJZXB36ni_BtaxA6J_eQsutcU439

nPM2xDy65kft6owVmRW2jSRs0XgHuOWg_DAP0DmooC0Macu0yf5L.34AxRRH7bolV7Ru.VyZ8Jgx

b1beJNzEtRNa6nEYEMFdpmN94H.QhB1wj_I3wThdspH6tPLwWTJYjuYe6hXn0s7C6sis7IIoO7Jn

tBKhW4q_lfW9VFbNaejNGyI_AP32ud8q3RMZo8v12OAHlDQABqi42yt596aqutKj2YirILFUchqs

qGa3VIJA2wk19xW7tvivrsitOIQNOm.d7fAHzedP1jN7Ly0tePqECmh2sPor9IcPt1hl3UfNP_oa

B0popx0nqumGNhE92xAbMvfplwNcCCVXeuC6OGXLRXYhkyRSYdqaa7t5kp_Xk.EOZU5V3ddhopbP

pIdadTQOe.bQWkSNy1pzvAb3AtkEFUt0jZ3AusA7VSLShddAfioUEeWKSHsfEUVusQ4ps3t5XNiK

QofQQ.aQUuJGWKDH8KyicoaO3Y6ECg__9Cwyq69fGNlQn88VZF7Ne8KEDUIhc7VS_UBh1h7dmarn

pyaoJFwQWsyzwyDQr66JwhgLZvAyguCXSfKVDf_IzPN9.RnfHgkY.8.cDyXRiwB89CGk59chquKp

iHZ4x4uOPCRa4Kyc9L6PvWeGHt2zxN9.IMMfhR7p9IKDhtinzmFx4MBnvPuh._rhGVWF32UKskN1

7TcfYlaZDudMVXrMhF0zqQzWLAnkzA4jOW3WqycyburAgtodG1UiqtsypQbqVTNeyNNN.EqO5csD

uOIX7vFThWt_NLesi16C2zGD77bmJs.j0s1Y5kJbTMm5ul3GF3W7PkWvriIPcnw2GGp8Cb4vXMR6

HbjFf2nARykjftgRrrlnsUuZvktVz6yqbN0Ai9jRKzzoNdlEyCG93_Ila4DJ48YDqGm8sJWkGuAJ

sv.CsEA27makMP5g34x28yqYSQsJWbQpEQakYQpJMzbuaxhxIWsEFh9.gU4A2DvdOZkYr9sAHHry

UvdUSvZ2rwh8yJ_NNxBhl0srpbDJHynouglDrNpJmOxL5Yvdn8ciBRnpDIZjprJYoFrcDz7RwQKY

7difLH1y1x7cS_B.Yx99.iz2b5AQsxboQ1ZSgUKPNbHgjsILxbfaGe0RdI71xVJ1YuoUSvsMyMP2

JnZFg9abzKaLcqqVWe_bB_Baf7tjPHTWygjz.Ue7U.4MK1d1YwJ91EQbdcMPWhB6FGAMKBFRrcZG

ZvAhjCvXaL2kNvFmbNHCp723XhZ32RPc8bnUygJ36FaLH4GlgD0.3xr.hpgLvUFIbdMq1yWandsb

JvfQ592rGkRob5onscVZa2Tdq_W8t6InR5.dBAEfjioBHil07Q4W4Fva6ibhFq.surfveFUjd3A8

kHMmpLYLBqj.oEP9J2H9wL.0jXUDtQJh3i12_diZsD7OyvKS.3g3b5CRQ9129Q0_uxot8kaR2QKs

Tg5e3CS1hvDDWQcqO6ciErfEQzIk7wriekWFc5gjERa_QdV1p_JnKoLDiOlgD3Z3Mc8ZIx2cyJLL

1jhEdWFsLyzKDKUxfiGOjiIlV.yK.BWbvHezVI.CdP2uHag2Js2w4XECDxN7arOqPJx0GEapb2k7

_KA_3X56Rrh5_W2w.EZORp2dMrqxc4xQcBkTmi9aMZHhTwglgiYCgH7Pt44yZeExKmago.RGuR9v

cOr.h3h6oeVQzI5RY8BoSDFGwCp5RGW7tOJn4NzyynQUICF25ZN3.tUw_ZRX3C9Nbu6fU16zn6Db

In62MZV0f1j_nXCd2k7k674C4KVGeBWxa1Qb5ts_k1QPsT9jwRZergCIp29SvPXLWtUluFYVWjEs

-

X-Sonic-MF:

Received: from sonic.gate.mail.ne1.yahoo.com by sonic311.consmr.mail.ir2.yahoo.com with HTTP; Tue, 8 Nov 2022 11:08:31 +0000

Date: Tue, 8 Nov 2022 10:54:21 +0000 (UTC)

From: Martha Oceni

Message-ID: <198826499.2091838.1667904861224@mail.yahoo.com>

Subject: Your fund has been transferred and the paying bank is waiting for

you.

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_Part_2091837_1742743213.1667904861223"

References: <198826499.2091838.1667904861224.ref@mail.yahoo.com>

X-Mailer: WebService/1.1.20826 YMailNorrin

X-Spam_score: 5.4

X-Spam_score_int: 54

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good morning, Â Â Â Â Â I am Mrs.Martha Oceni, I work

with a bank here in Republic of Benin and it is my pleasure to inform you

that the sum of (€950,000) Nine hundred and fifty thousand Euros [...]





Content analysis details: (5.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,

no trust

[77.238.176.189 listed in list.dnswl.org]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[marthaoceni[at]yahoo.fr]

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email

service

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLY From and body contain different freemails

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal

information

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Your fund has been transferred and the paying bank is waiting for

you.



------=_Part_2091837_1742743213.1667904861223

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable



Good morning,

=C2=A0 =C2=A0=C2=A0 =C2=A0 =C2=A0 I am Mrs.Martha Oceni, I work with a bank=

here in Republic of Benin and it is my pleasure to inform you that the sum=

of (=E2=82=AC950,000)=C2=A0 Nine hundred and fifty thousand Euros has just=

been transferred to our corresponding bank in your country for immediate p=

ayment to you.

The paying bank is now waiting for you to contact them with the back up leg=

al documents for the said fund transfer so that they will remit your fund i=

nto your bank account. So you are advice to forward your full name, contact=

address and telephone to our Protocol officer in Republic of Benin,to enab=

le her send to you the back up legal documents for the already transferred =

fund which you will be submitting to the paying bank to enable them release=

your fund to you.

You can reach the protocol officer Ms.Cornelia Wieman through her email=C2=

=A0 ( corneliawieman@yahoo.ca ) or telephone number +229 644 88188.

Base on the above information's, take note that you will be responsible for=

the payment of =E2=82=AC210 euro for the delivery of your fund transfer le=

gal documents to you.

So you are advise then to co-operate with Cornelia Wieman so that your fund=

transfer legal documents can be sent to you.

That will be all and thank you for your maximum co-operation.

Yours sincerely,

Mrs. Martha Oceni.



------=_Part_2091837_1742743213.1667904861223

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable




ly:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:13px;">

=3D"ltr" data-setdir=3D"false">
Good morning,

=

   
      I am Mrs.Martha Oceni, I =

work with a bank here in Republic of Benin and it is my pleasure to inform =

you that the sum of (=E2=82=AC950,000)  Nine hundred and fifty thousan=

d Euros has just been transferred to our corresponding bank in your country=

for immediate payment to you.

The paying bank is =

now waiting for you to contact them with the back up legal documents for th=

e said fund transfer so that they will remit your fund into your bank accou=

nt. So you are advice to forward your full name, contact address and teleph=

one to our Protocol officer in Republic of Benin,to enable her send to you =

the back up legal documents for the already transferred fund which you will=

be submitting to the paying bank to enable them release your fund to you.<=

/div>

You can reach the protocol officer Ms.Cornelia Wie=

man through her email  ( corneliawieman@yahoo.ca ) or telephone number=

+229 644 88188.

Base on the above information's, =

take note that you will be responsible for the payment of =E2=82=AC210 euro=

for the delivery of your fund transfer legal documents to you.
<=

br>
So you are advise then to co-operate with Cornelia Wieman so =

that your fund transfer legal documents can be sent to you.

<=

/div>
That will be all and thank you for your maximum co-operation.
v>

Yours sincerely,

Mrs. Martha=

Oceni.



------=_Part_2091837_1742743213.1667904861223--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA