Nigerian Spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Dec 2024 08:50:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJaaO-0000000030p-2P0D

for dave@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 08:49:44 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Dec 2024 08:49:44 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f41.google.com ([209.85.218.41]:59496)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJWeM-00000000H3h-29gg

for root@nk.ca;

Fri, 06 Dec 2024 04:37:41 -0700

Received: by mail-ej1-f41.google.com with SMTP id a640c23a62f3a-aa549d9dffdso282970466b.2

for ; Fri, 06 Dec 2024 03:35:39 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=thepha-ac-th.20230601.gappssmtp.com; s=20230601; t=1733484933; x=1734089733; darn=nk.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=EfQREcq9Rm9Nsq39iXL+vVsqgu2wh0WW/pb6ltmBwww=;

b=rVEiJznxzt+3A+Ff7SludX0SMlbkBVA6GVyp2iPhz9QXznEozVbwgD6rcgPrCtAJC+

jEfT0kMqaxsI9QPrR+7ACsh9bowY+Mgxs+BO28ILD5TQBaF/kfSQlFwUzERDyGatGWZn

oGVpVwfZSwJyKAmjmE/7dsjy6lJz8zQZr2gfxn97svIif1JZG1LbGorzu5N1Dtc27opJ

tgxNCBTSdH20OnUlPuWG0d5ZL1j/ngEOVRYqGYFGV+19CPWTPTW9CuCG+06EoPptCVr9

rTAeWjd35pyeUbi/zYtBkQheftW2/6Xw1r3uhtkcK5ANPI3Qgnf+1K1Ov1E/kOCJNy4V

sTtA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1733484933; x=1734089733;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=EfQREcq9Rm9Nsq39iXL+vVsqgu2wh0WW/pb6ltmBwww=;

b=iuOCeMPzv0AYabmlrHKiLhV103uq8s0gReCHjok+A6DmxxZGmtPJVS19TLvAgMKnW5

nrRxcFwRSrSGesxdaXxC+x89jV2SpQ/qA+tqrfd1GaHxaoQHZF7AcJ6wYhURsMcvp5Bg

iSiH1mKPlxT4SsPKaarP2sEsHhemzuqWB4I+6iNheuNYIpXZv2UIfRfXukql6/Oc1c9S

BnMQOkxYboywSAnFHabeW/uu/VQzT7+pHapPvLV+pxDUEwPZBnLku+TsvVixPszI/GP2

abiVj+orBX8LPJQQvFudPj7N1TMcWevbOdlXkkVUgCkYTRS+MPUWelXwCmfB1782I1o4

toCQ==

X-Forwarded-Encrypted: i=1; AJvYcCW0es376nlJTcK84r7HdzJ4RnJPC+yE9TK3f3Dt2urKeEZc9VIfZjGmXNcI5pI1qDIEAfxX@nk.ca

X-Gm-Message-State: AOJu0Yxh075DyZXxCXq2+JfcaLzXK5T787sg+7eON4t9BHdeslZq1n6H

gOr629X4EpRqduBZeUjXdJSCmMA7Ap80JCYodzBmW3nP9vudCY9fzNW4UxEjMkgDpNUsnFuRg9M

P9zQp/DlaOV+LoU+jrMbJETtAO2gUxxq3CtVe+A==

X-Gm-Gg: ASbGncsAOeP+kQlpGdLcbMONMwTHxKUhUjYQoyWVakXBkLZF9V3SNn5zA4dtY0IaTDj

R7ZlRzOzTIIbut/lFEoeKOGjhqAPQpkatQRUU

X-Google-Smtp-Source: AGHT+IFYsTjAOVegtlfXDyaFTvaLMtYZ6g/vYtDbMGFFnXDCKGvmcWspy4w8vI35VCBYxeevfS2nBmpX65gi6nvvNVk=

X-Received: by 2002:a17:906:3191:b0:aa6:2d35:3ca8 with SMTP id

a640c23a62f3a-aa639fed7c9mr158303666b.13.1733484932165; Fri, 06 Dec 2024

03:35:32 -0800 (PST)

MIME-Version: 1.0

Reply-To: foreign.settlement@outlook.com

From: Patrick

Date: Fri, 6 Dec 2024 14:35:07 +0300

Message-ID:

Subject: Please accept my sincere apologies for this.

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000009b024306289869e7"

Bcc: root@nk.ca

X-Spam_score: 16.6

X-Spam_score_int: 166

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir, I am sincerely sorry for the delay in payment for

your winning/inheritance funds. I recently found an error in your payment

file and didn't want to send payment until I was sure that the che [...]



Content analysis details: (16.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

[209.85.218.41 listed in dnsbl.ahbl.org]

[209.85.218.41 listed in dnsbl.ahbl.org]

[209.85.218.41 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.218.41 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.218.41 listed in sa-accredit.habeas.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.218.41 listed in sa-trusted.bondedsender.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.218.41 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.218.41 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.218.41 listed in bl.score.senderscore.com]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.0 XFER_LOTSA_MONEY Transfer a lot of money

1.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Please accept my sincere apologies for this.



--0000000000009b024306289869e7

Content-Type: text/plain; charset="UTF-8"



Dear Sir,

I am sincerely sorry for the delay in payment for your winning/inheritance

funds. I recently found an error in your payment file and didn't want to

send payment until I was sure that the cheque would not be returned back by

your bank. On behalf of our Legal Department, I apologise for any

inconvenience or frustration this caused you.

Please allow this letter to serve as our confirmation that we are ready,

willing, and able to ISSUE A CERTIFIED BANK DRAFT IN THE AMOUNT OF

$5,000,000 USD as the first tranche of your payment and to Confirm the Bank

Draft by SWIFT MT-110, upon reconfirmation of your real name.

This Confirmation SWIFT will be sent by the Brussels Swift System, to the

designated Beneficiary banking coordinates, within three banking days of

your request, to be followed by the DELIVERY of the BANK DRAFT by Bank

Bonded Courier.

Government issued ID copy:-



Please accept my sincere apologies for this.









Very truly yours,



Patrick Hovakimian

Commissioner

Foreign Claims Settlement Commission



--0000000000009b024306289869e7

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear =C2=A0Sir,
I am sincerely sorry for the delay in p=

ayment for your winning/inheritance funds. I recently found an error in you=

r payment file and didn't want to send payment until I was sure that th=

e cheque would not be returned back by your bank. On behalf of our Legal De=

partment, I apologise for any inconvenience or frustration this caused you.=

=C2=A0
Please allow this letter to serve as our confirmation that we ar=

e ready, willing, and able to ISSUE A CERTIFIED BANK DRAFT IN THE AMOUNT OF=

$5,000,000 USD as the first tranche of your payment and to Confirm the Ban=

k Draft by SWIFT MT-110, upon reconfirmation of your real name.
This Co=

nfirmation SWIFT will be sent by the Brussels Swift System, to the designat=

ed Beneficiary banking coordinates, within three banking days of your reque=

st, to be followed by the DELIVERY of the BANK DRAFT by Bank Bonded Courier=

.
Government issued ID copy:-

Please accept my sincere apologies =

for this.




Very truly yours,

Patrick Hovakimian
>Commissioner
Foreign Claims Settlement Commission




--0000000000009b024306289869e7--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA