Nigerian spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 25 Nov 2025 01:33:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vNoTe-00000000NQh-41uS
for dave@doctor.nl2k.ab.ca;
Tue, 25 Nov 2025 01:32:46 -0700
Resent-From: The Doctor
Resent-Date: Tue, 25 Nov 2025 01:32:46 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from c16i.soniatv.info ([23.26.125.118]:47752)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vNo9R-00000000Len-2qLO
for doctor@doctor.nl2k.ab.ca;
Tue, 25 Nov 2025 01:12:05 -0700
Received: from localhost (localhost.localdomain [IPv6:::1])
by c16i.soniatv.info (Postfix) with ESMTP id 021D42016E6;
Mon, 24 Nov 2025 23:00:31 -0800 (PST)
Received: from c16i.soniatv.info ([IPv6:::1])
by localhost (c16i.soniatv.info [IPv6:::1]) (amavis, port 10032) with ESMTP
id nD6HTYfteGI7; Mon, 24 Nov 2025 23:00:28 -0800 (PST)
Received: from localhost (localhost.localdomain [IPv6:::1])
by c16i.soniatv.info (Postfix) with ESMTP id 4C01A2016EB;
Mon, 24 Nov 2025 23:00:28 -0800 (PST)
X-Virus-Scanned: amavis at c16i.soniatv.info
Received: from c16i.soniatv.info ([IPv6:::1])
by localhost (c16i.soniatv.info [IPv6:::1]) (amavis, port 10026) with ESMTP
id TYvFxObozi1z; Mon, 24 Nov 2025 23:00:27 -0800 (PST)
Received: from c16i.soniatv.info (localhost.localdomain [127.0.0.1])
by c16i.soniatv.info (Postfix) with ESMTP id 8F40B2016E6;
Mon, 24 Nov 2025 23:00:18 -0800 (PST)
Date: Mon, 24 Nov 2025 23:00:18 -0800 (PST)
From: "A. M. A"
Reply-To: "A. M. A" <684795info@mail.ee>
Message-ID: <842112533.266857.1764054018543.JavaMail.zimbra@soniatv.info>
Subject: URGENT ATTENTION TO MY ENQUIRY..
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_2d418512-457c-4f5b-a12a-cdb54535b583"
Thread-Index: Gi6aTs/VPCftckqEFl2/XcNAZZS4fw==
Thread-Topic: URGENT ATTENTION TO MY ENQUIRY..
X-Spam_score: 15.5
X-Spam_score_int: 155
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings from Uganda. Hi Dear
Content analysis details: (15.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[23.26.125.118 listed in will-spam-for-food.eu.org]
[23.26.125.118 listed in will-spam-for-food.eu.org]
[23.26.125.118 listed in will-spam-for-food.eu.org]
[23.26.125.118 listed in will-spam-for-food.eu.org]
[23.26.125.118 listed in will-spam-for-food.eu.org]
[23.26.125.118 listed in will-spam-for-food.eu.org]
[23.26.125.118 listed in will-spam-for-food.eu.org]
[23.26.125.118 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[23.26.125.118 listed in dnsbl.ahbl.org]
[23.26.125.118 listed in dnsbl.ahbl.org]
[23.26.125.118 listed in dnsbl.ahbl.org]
[23.26.125.118 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[23.26.125.118 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[23.26.125.118 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[23.26.125.118 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[23.26.125.118 listed in dnsbl.ahbl.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.26.125.118 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.26.125.118 listed in sa-accredit.habeas.com]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
1.2 MISSING_HEADERS Missing To: header
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
2.5 HK_SCAM_N2 BODY: No description available.
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[23.26.125.118 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.26.125.118 listed in bl.score.senderscore.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.5 SUBJ_ATTENTION ATTENTION in Subject
0.0 HK_SCAM No description available.
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
3.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
Subject: {SPAM?} URGENT ATTENTION TO MY ENQUIRY..
--=_2d418512-457c-4f5b-a12a-cdb54535b583
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Greetings from Uganda.
Hi Dear
How are you today? My name is Emmanuel Omoding Okabe. I am a serving parliamentarian here in Serere district Uganda. My parents died in a ghastly car collision in December of 2022. I recently discovered my late father who was a politician made some gold and funds deposits in a bank in a bank using my mother's name as next of kin beneficiary. Unfortunately, both of them are dead now.
I am contacting you to know the possibility of you acting as a family proxy to communicate with the bank and have the funds liquidated so we can go into joint business venture using the deposited funds. Presently, I am a serving parliamentarian here in Uganda so I can directly be linked with these funds to avoid being tagged a corrupt politician by my opposition. My late father was also a politician and business man before he passed.
Please see the below web site which sheds more light on the circumstances of my parents death. https://softpower.ug/parliament-mourns-death-of-serere-county-mp-okabe/
Kindly share with me your private whatsApp number for easy and faster communication.
Waiting to hear from you.
Yours faithfully.
Emmanuel
--=_2d418512-457c-4f5b-a12a-cdb54535b583
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
ize: 12pt; color: #000000">
=3D"__SIG_PRE__">Greetings from Uganda.
Hi Dear
How are you t=
oday? My name is Emmanuel Omoding Okabe. I am a serving parliamentarian her=
e in Serere district Uganda. My parents died in a ghastly car collision in =
December of 2022. I recently discovered my late father who was a politician=
made some gold and funds deposits in a bank in a bank using my mother's na=
me as next of kin beneficiary. Unfortunately, both of them are dead now.
>
I am contacting you to know the possibility of you acting as a family =
proxy to communicate with the bank and have the funds liquidated so we can =
go into joint business venture using the deposited funds. Presently, I am a=
serving parliamentarian here in Uganda so I can directly be linked with th=
ese funds to avoid being tagged a corrupt politician by my opposition. My l=
ate father was also a politician and business man before he passed.
&nbs=
p;
Please see the below web site which sheds more light on the circumsta=
nces of my parents death. https://softpower.ug/parliament-mourns-death-of-s=
erere-county-mp-okabe/
Kindly share with me your private whatsApp nu=
mber for easy and faster communication.
Waiting to hear from you.
>Yours faithfully.
Emmanuel
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 25 Nov 2025 01:33:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vNoTe-00000000NQh-41uS
for dave@doctor.nl2k.ab.ca;
Tue, 25 Nov 2025 01:32:46 -0700
Resent-From: The Doctor
Resent-Date: Tue, 25 Nov 2025 01:32:46 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from c16i.soniatv.info ([23.26.125.118]:47752)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vNo9R-00000000Len-2qLO
for doctor@doctor.nl2k.ab.ca;
Tue, 25 Nov 2025 01:12:05 -0700
Received: from localhost (localhost.localdomain [IPv6:::1])
by c16i.soniatv.info (Postfix) with ESMTP id 021D42016E6;
Mon, 24 Nov 2025 23:00:31 -0800 (PST)
Received: from c16i.soniatv.info ([IPv6:::1])
by localhost (c16i.soniatv.info [IPv6:::1]) (amavis, port 10032) with ESMTP
id nD6HTYfteGI7; Mon, 24 Nov 2025 23:00:28 -0800 (PST)
Received: from localhost (localhost.localdomain [IPv6:::1])
by c16i.soniatv.info (Postfix) with ESMTP id 4C01A2016EB;
Mon, 24 Nov 2025 23:00:28 -0800 (PST)
X-Virus-Scanned: amavis at c16i.soniatv.info
Received: from c16i.soniatv.info ([IPv6:::1])
by localhost (c16i.soniatv.info [IPv6:::1]) (amavis, port 10026) with ESMTP
id TYvFxObozi1z; Mon, 24 Nov 2025 23:00:27 -0800 (PST)
Received: from c16i.soniatv.info (localhost.localdomain [127.0.0.1])
by c16i.soniatv.info (Postfix) with ESMTP id 8F40B2016E6;
Mon, 24 Nov 2025 23:00:18 -0800 (PST)
Date: Mon, 24 Nov 2025 23:00:18 -0800 (PST)
From: "A. M. A"
Reply-To: "A. M. A" <684795info@mail.ee>
Message-ID: <842112533.266857.1764054018543.JavaMail.zimbra@soniatv.info>
Subject: URGENT ATTENTION TO MY ENQUIRY..
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_2d418512-457c-4f5b-a12a-cdb54535b583"
Thread-Index: Gi6aTs/VPCftckqEFl2/XcNAZZS4fw==
Thread-Topic: URGENT ATTENTION TO MY ENQUIRY..
X-Spam_score: 15.5
X-Spam_score_int: 155
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings from Uganda. Hi Dear
Content analysis details: (15.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[23.26.125.118 listed in will-spam-for-food.eu.org]
[23.26.125.118 listed in will-spam-for-food.eu.org]
[23.26.125.118 listed in will-spam-for-food.eu.org]
[23.26.125.118 listed in will-spam-for-food.eu.org]
[23.26.125.118 listed in will-spam-for-food.eu.org]
[23.26.125.118 listed in will-spam-for-food.eu.org]
[23.26.125.118 listed in will-spam-for-food.eu.org]
[23.26.125.118 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[23.26.125.118 listed in dnsbl.ahbl.org]
[23.26.125.118 listed in dnsbl.ahbl.org]
[23.26.125.118 listed in dnsbl.ahbl.org]
[23.26.125.118 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[23.26.125.118 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[23.26.125.118 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[23.26.125.118 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[23.26.125.118 listed in dnsbl.ahbl.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.26.125.118 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.26.125.118 listed in sa-accredit.habeas.com]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
1.2 MISSING_HEADERS Missing To: header
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
2.5 HK_SCAM_N2 BODY: No description available.
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[23.26.125.118 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.26.125.118 listed in bl.score.senderscore.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.5 SUBJ_ATTENTION ATTENTION in Subject
0.0 HK_SCAM No description available.
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
3.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
Subject: {SPAM?} URGENT ATTENTION TO MY ENQUIRY..
--=_2d418512-457c-4f5b-a12a-cdb54535b583
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Greetings from Uganda.
Hi Dear
How are you today? My name is Emmanuel Omoding Okabe. I am a serving parliamentarian here in Serere district Uganda. My parents died in a ghastly car collision in December of 2022. I recently discovered my late father who was a politician made some gold and funds deposits in a bank in a bank using my mother's name as next of kin beneficiary. Unfortunately, both of them are dead now.
I am contacting you to know the possibility of you acting as a family proxy to communicate with the bank and have the funds liquidated so we can go into joint business venture using the deposited funds. Presently, I am a serving parliamentarian here in Uganda so I can directly be linked with these funds to avoid being tagged a corrupt politician by my opposition. My late father was also a politician and business man before he passed.
Please see the below web site which sheds more light on the circumstances of my parents death. https://softpower.ug/parliament-mourns-death-of-serere-county-mp-okabe/
Kindly share with me your private whatsApp number for easy and faster communication.
Waiting to hear from you.
Yours faithfully.
Emmanuel
--=_2d418512-457c-4f5b-a12a-cdb54535b583
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
ize: 12pt; color: #000000">
=3D"__SIG_PRE__">Greetings from Uganda.
Hi Dear
How are you t=
oday? My name is Emmanuel Omoding Okabe. I am a serving parliamentarian her=
e in Serere district Uganda. My parents died in a ghastly car collision in =
December of 2022. I recently discovered my late father who was a politician=
made some gold and funds deposits in a bank in a bank using my mother's na=
me as next of kin beneficiary. Unfortunately, both of them are dead now.
>
I am contacting you to know the possibility of you acting as a family =
proxy to communicate with the bank and have the funds liquidated so we can =
go into joint business venture using the deposited funds. Presently, I am a=
serving parliamentarian here in Uganda so I can directly be linked with th=
ese funds to avoid being tagged a corrupt politician by my opposition. My l=
ate father was also a politician and business man before he passed.
&nbs=
p;
Please see the below web site which sheds more light on the circumsta=
nces of my parents death. https://softpower.ug/parliament-mourns-death-of-s=
erere-county-mp-okabe/
Kindly share with me your private whatsApp nu=
mber for easy and faster communication.
Waiting to hear from you.
>Yours faithfully.
Emmanuel
--=_2d418512-457c-4f5b-a12a-cdb54535b583--