Nigerian spam from gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 Feb 2023 06:47:25 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pQ7GU-000B3x-2K

for dave@doctor.nl2k.ab.ca;

Thu, 09 Feb 2023 06:47:06 -0700

Resent-From: The Doctor

Resent-Date: Thu, 9 Feb 2023 06:47:06 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f68.google.com ([209.85.218.68]:34579)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pQ6oR-00061W-1G

for root@nk.ca;

Thu, 09 Feb 2023 06:17:59 -0700

Received: by mail-ej1-f68.google.com with SMTP id qb15so4157644ejc.1

for ; Thu, 09 Feb 2023 05:15:56 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=LQy/A2PjNnyHqcbZfXNcsApxv51sOPlNJqln3lXFZxA=;

b=Vpaw+ffx9NS3TZCPbOivifEWxTaaBkI9qe+S1j293GwwXTINelqI05idws8CS2YFeB

vDqUt4tpmFsB1jA5wf/2tNc5qpbczfOK9MgJ0VrR6Ay1FnvI1JmJJvCHtkE6XKIHT/Jx

kiuoDqrMSe6fi3vwPfhqKr60uTJPEn1SQTVmvqMtQ7Jxm7RI7Lcl4hpkLsW6qs9KhEas

mkqH8HJ42UFXEKjP2X12fhTNPL2jtIzqFvcEfIW+ahGuRwzN9ficXrmDdorIA5Bi67Mo

xenagfB/noGkgA3dBcsYUYAokSGNInEKB+j+Y90Nbw132ZBCj4EwKqvZog7vwvadSFEc

G5Qg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=LQy/A2PjNnyHqcbZfXNcsApxv51sOPlNJqln3lXFZxA=;

b=8QRwW3jG71kj9XZGKc/nTUlqcPPnSJB6Nig5rcB4kQsILgjDT0RJr1FVb0oe27jGMu

bsi12gAf8DJfYayOrmXuaxr6IC/Sy9BK6EkV4MOYWFn+mH7Tl9mbdI5WaHERgt4FeQa0

utRN/qXdVhhe1HuC/kgynnUahoutN9OIXr8J7ETn/YNEmeFVIPWbV70ftUS8ZDESzgPy

kKyWSiKgHV4pakFYlz9dRU3B56KGaNFBsWvk6bur1TrDXJZcI7D0Rz3vBUw0tkkM2upP

s1dAQqbKUZMtoH1kCpfTrx3mi41pmaTxH35iXrMmzI+JDTmiX7hyaQgj1mFAFyB5c27G

iMag==

X-Gm-Message-State: AO0yUKXLqldYNbPz6GOni8nsBMqfCfpxhqn+n8G7ljlmvsHTuQYqNVeY

6Q5dwV7ZbsviyYADe2FZkpVrvWu6qbK9VUw+i7Y=

X-Google-Smtp-Source: AK7set//eOOLbaoTQYg1CMh4i2LbX9GkHo2XeHsWWA3rFT1nfljYq9C0BcoE+uM2Pddryx3ynbK0DxeZQqeulFTvaKM=

X-Received: by 2002:a17:906:270b:b0:87b:d89d:c6a6 with SMTP id

z11-20020a170906270b00b0087bd89dc6a6mr2478296ejc.103.1675948550137; Thu, 09

Feb 2023 05:15:50 -0800 (PST)

MIME-Version: 1.0

Reply-To: seydenedzhibtatar611@gmail.com

From: Seyde Nedzhib Tatar

Date: Thu, 9 Feb 2023 14:15:39 +0100

Message-ID:

Subject:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000fe2bb005f4442da5"

Bcc: root@nk.ca

X-Spam_score: 15.5

X-Spam_score_int: 155

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: My humble regards to everyone reading comments on this platform

and a great thanks to the admin who made this medium a lively one whereby

everyone can share an opinion, I am Mrs. Seyde Nedzhib Tatar, [...]



Content analysis details: (15.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.218.68 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[209.85.218.68 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.218.68 listed in list.dnswl.org]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[seydenedzhibtatar611(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[austinezaks(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.218.68 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.0 TVD_PH_BODY_META No description available.

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?}



--000000000000fe2bb005f4442da5

Content-Type: text/plain; charset="UTF-8"



My humble regards to everyone reading comments on this platform and a great

thanks to the admin who made this medium a lively one whereby everyone can

share an opinion, I am Mrs. Seyde Nedzhib Tatar, from Brooklyn, New York,

United states. I'm a nurse by profession, I had a serious health issue that

took me 8 months to get back to work, during this period of eight months I

came across an advert with a lot of good comments under the trading broker

platform. I was very interested so I decided to contact the trading

platform and invest with them, after my first deposit I was told there is

an increase in buying stocks so I had to send another money and this whole

thing continued for a good 6 months. before I could realize I was already

bankrupt when I discovered that I have been scammed for a total sum of

three hundred and fifty seven thousand dollars, I tried to get some

recommended hackers online but I ended up getting scammed of an additional

thirty-five thousand dollars, it hurts me so much, I already gave it up but

then I came in contact with him who I also message directly via

WhatsApp(+1) (845)207? 8532 and he responded to me urgently and helped me

to get back all my funds, everything was sent to me at once. Wierzbicki

Programmer proves to me that scammed crypto can be recovered. All thanks to

Genius Recovery Advocate WhatsApp:+18452078532 Email:

WIZARDWIERZBICKIPROGRAMMER@GMAIL.COM





There is no shame in becoming a scam victim of one of these sophisticated

and predatory operations. By reporting you may be able to recover some or

all your lost funds and prevent the scammers from targeting others. Their

approach relies on working closely with forensic accountants and other

experts, as well as law They have an excellent track record of holding

scammers accountable, including asset freezes, Do not let scammers get

away with your hard-earned cash, look for ways to recover your stolen money

To recover your Scammed funds back to your bank account or to your bitcoin

wallet address also to Clear or Erase Criminal Records.



--000000000000fe2bb005f4442da5

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



My humble regards to everyone reading comments on this pla=

tform and a great thanks to the admin who made this medium a lively one whe=

reby everyone can share an opinion, I am Mrs. Seyde Nedzhib Tatar, from Bro=

oklyn, New York, United states. I'm a nurse by profession, I had a seri=

ous health issue that took me 8 months to get back to work, during this per=

iod of eight months I came across an advert with a lot of good comments und=

er the trading broker platform. I was very interested so I decided to conta=

ct the trading platform and invest with them, after my first deposit I was =

told there is an increase in buying stocks so I had to send another money a=

nd this whole thing continued for a good 6 months. before I could realize I=

was already bankrupt when I discovered that I have been scammed for a tota=

l sum of three hundred and fifty seven thousand dollars, I tried to get som=

e recommended hackers online but I ended up getting scammed of an additiona=

l thirty-five thousand dollars, it hurts me so much, I already gave it up b=

ut then I came in contact with =C2=A0him who I also message directly via Wh=

atsApp(+1) (845)207? 8532 and he responded to me urgently and helped me to =

get back all my funds, everything was sent to me at once.=C2=A0 Wierzbicki =

Programmer proves to me that scammed crypto can be recovered. All thanks to=

Genius Recovery Advocate WhatsApp:+18452078532 Email:
ZARDWIERZBICKIPROGRAMMER@GMAIL.COM">WIZARDWIERZBICKIPROGRAMMER@GMAIL.COM
>


There is no shame in becoming a scam victim of one of these so=

phisticated and predatory operations. By reporting you may be able to recov=

er some or all your lost funds and prevent the scammers from targeting othe=

rs. Their approach relies on working closely with forensic accountants and =

other experts, as well as law They have an excellent track record of holdin=

g scammers accountable, including asset freezes, =C2=A0Do not let scammers =

get away with your hard-earned cash, look for ways to recover your stolen m=

oney To recover your Scammed funds back to your bank account or to your bit=

coin wallet address also to Clear or Erase Criminal Records.




--000000000000fe2bb005f4442da5--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA