nigerian spam
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@nk.ca
Delivery-date: Fri, 19 Jun 2026 17:45:00 -0600
Received: from mail.senamhi.gob.pe ([190.119.131.37]:53549 helo=senamhi-mail.senamhi.gob.pe)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1waisq-00000000JsU-1paL;
Fri, 19 Jun 2026 17:44:33 -0600
Received: from localhost (localhost [127.0.0.1])
by senamhi-mail.senamhi.gob.pe (Postfix) with ESMTP id 1ED2E31A4988A1;
Fri, 19 Jun 2026 18:20:34 -0500 (-05)
Received: from senamhi-mail.senamhi.gob.pe ([127.0.0.1])
by localhost (senamhi-mail.senamhi.gob.pe [127.0.0.1]) (amavis, port 10032)
with ESMTP id mBfBhrfjI0JO; Fri, 19 Jun 2026 18:20:33 -0500 (-05)
Received: from senamhi-mail.senamhi.gob.pe (localhost [127.0.0.1])
by senamhi-mail.senamhi.gob.pe (Postfix) with ESMTPS id D33CE31A4463A0;
Fri, 19 Jun 2026 18:20:32 -0500 (-05)
DKIM-Filter: OpenDKIM Filter v2.10.3 senamhi-mail.senamhi.gob.pe D33CE31A4463A0
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=senamhi.gob.pe;
s=92A4C6C2-509C-11F1-B330-7558252557ED; t=1781911233;
bh=qcEfc6dL3BTmJEctOfufztFohzDq41Emjc5wVvsRig4=;
h=Date:From:Message-ID:MIME-Version;
b=hLo0F8Q5b2jeefqMEgwjEq6zimrnYmXFK6ZL/2EQ3oQjnTUHlDj7lcTf2bpvDTkr4
fpmZdWKQBGY+pkh3/trVVsLXDl35WnJb7XJj9luVqWs469e7UcIKM0s/zoLcAwzFe/
Jp89lMCL0b7ClupCl9TJ4D8opt657+cuOLXcHo0+xVVp4J3IzvIypP3Qyd1Xgj3Sfq
ENd6HOzkNew49wQ35TgibDB+NaDADIv2ijGUu+BvlbwmDTd30BG0GCX1wTFXjteQhx
tn3fxKg4aQzTmeaksxR1OkTEbkN7bd7oIDuWLyWbdWC25YE73vuki1wS+2U9OP6+nd
KMXhhUYjn8RHQ==
Received: from senamhi-mail.senamhi.gob.pe (mail.senamhi.gob.pe [10.10.20.5])
by senamhi-mail.senamhi.gob.pe (Postfix) with ESMTP id 96DCC31A200303;
Fri, 19 Jun 2026 18:20:17 -0500 (-05)
Date: Fri, 19 Jun 2026 18:20:17 -0500 (PET)
From: Attorney David Ware
Reply-To: "esq.davidware1@gmail.com"
Message-ID: <2002888057.17383.1781911217453.JavaMail.zimbra@senamhi.gob.pe>
Subject:
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_a2f581ff-0531-493e-ade5-3ec69b9c7917"
X-Originating-IP: [37.140.254.49]
X-Mailer: Zimbra 8.8.15_GA_4581 (ZimbraWebClient - GC149 (Win)/8.8.15_GA_4581)
Thread-Index: eTywCh5kz1J4c7e8MBaH2sUst9CiMw==
Thread-Topic:
X-Spam_score: 13.6
X-Spam_score_int: 136
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I am Attorney David Ware, a solicitor to a client who passed
away in 2007 due to a heart attack. He left a fixed deposit of £34.8 million
pounds sterling in a bank here in the United Kingdom without [...]
Content analysis details: (13.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[190.119.131.37 listed in dnsbl.ahbl.org]
[190.119.131.37 listed in dnsbl.ahbl.org]
[190.119.131.37 listed in dnsbl.ahbl.org]
[190.119.131.37 listed in dnsbl.ahbl.org]
[37.140.254.49 listed in dnsbl.ahbl.org]
[37.140.254.49 listed in dnsbl.ahbl.org]
[37.140.254.49 listed in dnsbl.ahbl.org]
[37.140.254.49 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[190.119.131.37 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[190.119.131.37 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[190.119.131.37 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[190.119.131.37 listed in dnsbl.ahbl.org]
1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[190.119.131.37 listed in bb.barracudacentral.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[190.119.131.37 listed in will-spam-for-food.eu.org]
[190.119.131.37 listed in will-spam-for-food.eu.org]
[190.119.131.37 listed in will-spam-for-food.eu.org]
[190.119.131.37 listed in will-spam-for-food.eu.org]
[190.119.131.37 listed in will-spam-for-food.eu.org]
[190.119.131.37 listed in will-spam-for-food.eu.org]
[190.119.131.37 listed in will-spam-for-food.eu.org]
[190.119.131.37 listed in will-spam-for-food.eu.org]
[37.140.254.49 listed in will-spam-for-food.eu.org]
[37.140.254.49 listed in will-spam-for-food.eu.org]
[37.140.254.49 listed in will-spam-for-food.eu.org]
[37.140.254.49 listed in will-spam-for-food.eu.org]
[37.140.254.49 listed in will-spam-for-food.eu.org]
[37.140.254.49 listed in will-spam-for-food.eu.org]
[37.140.254.49 listed in will-spam-for-food.eu.org]
[37.140.254.49 listed in will-spam-for-food.eu.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[190.119.131.37 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
1.2 MISSING_HEADERS Missing To: header
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[esq.davidware1(at)gmail.com]
2.5 HK_SCAM_N2 BODY: No description available.
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.0 HK_SCAM No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
Subject: {SPAM?}
--=_a2f581ff-0531-493e-ade5-3ec69b9c7917
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
I am Attorney David Ware, a solicitor to a client who passed away in 2007 d=
ue to a heart attack. He left a fixed deposit of =C2=A334.8 million pounds =
sterling in a bank here in the United Kingdom without naming any next of ki=
n. Since you share the same last name, I am seeking your consent to present=
you as his next of kin.=20
I propose a completely risk-free opportunity that guarantees substantial fi=
nancial gain for you. I can prepare all necessary documents to support my c=
laim and ensure that these funds are transferred to you within two weeks. W=
e can then split the proceeds. Please respond to this email at your earlies=
t convenience.=20
Attorney David Ware=20
--=_a2f581ff-0531-493e-ade5-3ec69b9c7917
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
ize: 12pt; color: #000000">
=3D"__SIG_PRE__">
v>I propose a completely risk-free opportunity that guarantees substantial =
financial gain for you. I can prepare all necessary documents to support my=
claim and ensure that these funds are transferred to you within two weeks.=
We can then split the proceeds. Please respond to this email at your earli=
est convenience.
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@nk.ca
Delivery-date: Fri, 19 Jun 2026 17:45:00 -0600
Received: from mail.senamhi.gob.pe ([190.119.131.37]:53549 helo=senamhi-mail.senamhi.gob.pe)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.99.3 (FreeBSD))
(envelope-from
id 1waisq-00000000JsU-1paL;
Fri, 19 Jun 2026 17:44:33 -0600
Received: from localhost (localhost [127.0.0.1])
by senamhi-mail.senamhi.gob.pe (Postfix) with ESMTP id 1ED2E31A4988A1;
Fri, 19 Jun 2026 18:20:34 -0500 (-05)
Received: from senamhi-mail.senamhi.gob.pe ([127.0.0.1])
by localhost (senamhi-mail.senamhi.gob.pe [127.0.0.1]) (amavis, port 10032)
with ESMTP id mBfBhrfjI0JO; Fri, 19 Jun 2026 18:20:33 -0500 (-05)
Received: from senamhi-mail.senamhi.gob.pe (localhost [127.0.0.1])
by senamhi-mail.senamhi.gob.pe (Postfix) with ESMTPS id D33CE31A4463A0;
Fri, 19 Jun 2026 18:20:32 -0500 (-05)
DKIM-Filter: OpenDKIM Filter v2.10.3 senamhi-mail.senamhi.gob.pe D33CE31A4463A0
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=senamhi.gob.pe;
s=92A4C6C2-509C-11F1-B330-7558252557ED; t=1781911233;
bh=qcEfc6dL3BTmJEctOfufztFohzDq41Emjc5wVvsRig4=;
h=Date:From:Message-ID:MIME-Version;
b=hLo0F8Q5b2jeefqMEgwjEq6zimrnYmXFK6ZL/2EQ3oQjnTUHlDj7lcTf2bpvDTkr4
fpmZdWKQBGY+pkh3/trVVsLXDl35WnJb7XJj9luVqWs469e7UcIKM0s/zoLcAwzFe/
Jp89lMCL0b7ClupCl9TJ4D8opt657+cuOLXcHo0+xVVp4J3IzvIypP3Qyd1Xgj3Sfq
ENd6HOzkNew49wQ35TgibDB+NaDADIv2ijGUu+BvlbwmDTd30BG0GCX1wTFXjteQhx
tn3fxKg4aQzTmeaksxR1OkTEbkN7bd7oIDuWLyWbdWC25YE73vuki1wS+2U9OP6+nd
KMXhhUYjn8RHQ==
Received: from senamhi-mail.senamhi.gob.pe (mail.senamhi.gob.pe [10.10.20.5])
by senamhi-mail.senamhi.gob.pe (Postfix) with ESMTP id 96DCC31A200303;
Fri, 19 Jun 2026 18:20:17 -0500 (-05)
Date: Fri, 19 Jun 2026 18:20:17 -0500 (PET)
From: Attorney David Ware
Reply-To: "esq.davidware1@gmail.com"
Message-ID: <2002888057.17383.1781911217453.JavaMail.zimbra@senamhi.gob.pe>
Subject:
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_a2f581ff-0531-493e-ade5-3ec69b9c7917"
X-Originating-IP: [37.140.254.49]
X-Mailer: Zimbra 8.8.15_GA_4581 (ZimbraWebClient - GC149 (Win)/8.8.15_GA_4581)
Thread-Index: eTywCh5kz1J4c7e8MBaH2sUst9CiMw==
Thread-Topic:
X-Spam_score: 13.6
X-Spam_score_int: 136
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I am Attorney David Ware, a solicitor to a client who passed
away in 2007 due to a heart attack. He left a fixed deposit of £34.8 million
pounds sterling in a bank here in the United Kingdom without [...]
Content analysis details: (13.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[190.119.131.37 listed in dnsbl.ahbl.org]
[190.119.131.37 listed in dnsbl.ahbl.org]
[190.119.131.37 listed in dnsbl.ahbl.org]
[190.119.131.37 listed in dnsbl.ahbl.org]
[37.140.254.49 listed in dnsbl.ahbl.org]
[37.140.254.49 listed in dnsbl.ahbl.org]
[37.140.254.49 listed in dnsbl.ahbl.org]
[37.140.254.49 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[190.119.131.37 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[190.119.131.37 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[190.119.131.37 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[190.119.131.37 listed in dnsbl.ahbl.org]
1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[190.119.131.37 listed in bb.barracudacentral.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[190.119.131.37 listed in will-spam-for-food.eu.org]
[190.119.131.37 listed in will-spam-for-food.eu.org]
[190.119.131.37 listed in will-spam-for-food.eu.org]
[190.119.131.37 listed in will-spam-for-food.eu.org]
[190.119.131.37 listed in will-spam-for-food.eu.org]
[190.119.131.37 listed in will-spam-for-food.eu.org]
[190.119.131.37 listed in will-spam-for-food.eu.org]
[190.119.131.37 listed in will-spam-for-food.eu.org]
[37.140.254.49 listed in will-spam-for-food.eu.org]
[37.140.254.49 listed in will-spam-for-food.eu.org]
[37.140.254.49 listed in will-spam-for-food.eu.org]
[37.140.254.49 listed in will-spam-for-food.eu.org]
[37.140.254.49 listed in will-spam-for-food.eu.org]
[37.140.254.49 listed in will-spam-for-food.eu.org]
[37.140.254.49 listed in will-spam-for-food.eu.org]
[37.140.254.49 listed in will-spam-for-food.eu.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[190.119.131.37 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
1.2 MISSING_HEADERS Missing To: header
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[esq.davidware1(at)gmail.com]
2.5 HK_SCAM_N2 BODY: No description available.
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.0 HK_SCAM No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
Subject: {SPAM?}
--=_a2f581ff-0531-493e-ade5-3ec69b9c7917
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
I am Attorney David Ware, a solicitor to a client who passed away in 2007 d=
ue to a heart attack. He left a fixed deposit of =C2=A334.8 million pounds =
sterling in a bank here in the United Kingdom without naming any next of ki=
n. Since you share the same last name, I am seeking your consent to present=
you as his next of kin.=20
I propose a completely risk-free opportunity that guarantees substantial fi=
nancial gain for you. I can prepare all necessary documents to support my c=
laim and ensure that these funds are transferred to you within two weeks. W=
e can then split the proceeds. Please respond to this email at your earlies=
t convenience.=20
Attorney David Ware=20
--=_a2f581ff-0531-493e-ade5-3ec69b9c7917
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
ize: 12pt; color: #000000">
=3D"__SIG_PRE__">
I am Attorney David Ware, a solicitor to a clien=
t who passed away in 2007 due to a heart attack. He left a fixed deposit of=
=C2=A334.8 million pounds sterling in a bank here in the United Kingdom wi=
thout naming any next of kin. Since you share the same last name, I am seek=
ing your consent to present you as his next of kin.
t who passed away in 2007 due to a heart attack. He left a fixed deposit of=
=C2=A334.8 million pounds sterling in a bank here in the United Kingdom wi=
thout naming any next of kin. Since you share the same last name, I am seek=
ing your consent to present you as his next of kin.
v>I propose a completely risk-free opportunity that guarantees substantial =
financial gain for you. I can prepare all necessary documents to support my=
claim and ensure that these funds are transferred to you within two weeks.=
We can then split the proceeds. Please respond to this email at your earli=
est convenience.
Attorney David Ware
div>
--=_a2f581ff-0531-493e-ade5-3ec69b9c7917--