Nigerian spam
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 19 Sep 2026 19:11:31 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from)
id 1x865N-00000000Dy3-3VlZ
for dave@doctor.nl2k.ab.ca;
Sat, 19 Sep 2026 19:11:17 -0600
Resent-From: The Doctor
Resent-Date: Sat, 19 Sep 2026 19:11:17 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from 252-133.gtt-net.cz ([82.144.133.252]:40870 helo=mail.tvrdonice.cz)
by doctor.nl2k.ab.ca with esmtp (Exim 4.100 (FreeBSD))
(envelope-from)
id 1x7wA7-00000000BX0-0wzY
for doctor@nl2k.ab.ca;
Sat, 19 Sep 2026 08:35:40 -0600
Received: from webmail.tvrdonice.cz (localhost [127.0.0.1])
by mail.tvrdonice.cz (Postfix) with ESMTP id B84102249E83;
Sat, 19 Sep 2026 16:34:15 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=tvrdonice.cz; s=dkim;
t=1789828456; bh=bAqSvo4X1LZ85Bb/qVsc7ailqDAJh6onk7Bz4g2xj3E=;
h=Date:From:To:Subject:Reply-To:From;
b=UpzABLfD8EQ7XQUyxCr7rz9zMNdxVwtXReCF9C8kCcsLh7QyjDb+OWh7fu9UuNQMW
faXn4V526SdMYp8vSQ4Ka6QTJXjzxNLbmpjEq2sDxx2HBGHRgLZLwAGCVfICE6HflX
lq3QZ/eiS5L9KsTkh2/LBAjuIO/BpW31OJwTW7/lbgqW3m6FW0/5IqrlVhdSPDzw4O
hMlKXp+SwpyZs+YZiSK6tvnYrAnsKWxaC52cgpcf3DpW8RvbaE90tGX3h4VYNEB+lw
7oDVe3xIcLbzZK1FvDwkl/7JLfc7Brrh9plNf0VFK9FUBazFpyPRlh6oJTZW0qNxtJ
RO+XCpvZ/SnaA==
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8;
format=flowed
Content-Transfer-Encoding: 8bit
Date: Sat, 19 Sep 2026 16:34:15 +0200
From: "Mr. Mahmoud Ghazi Al-Bashir."
To: undisclosed-recipients:;
Subject: INVESTMENT PARTNERSHIP
Reply-To: ghazialbashir283@gmail.com
Mail-Reply-To: ghazialbashir283@gmail.com
Message-ID: <9445f5dcaaa8a76cad644e36bbb99937@tvrdonice.cz>
X-Sender: mgab@tvrdonice.cz
User-Agent: Roundcube Webmail/1.3.8
X-Spam_score: 25.0
X-Spam_score_int: 250
X-Spam_bar: +++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- GREETINGS. INVESTMENT PARTNERSHIP !
Content analysis details: (25.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[82.144.133.252 listed in will-spam-for-food.eu.org]
[82.144.133.252 listed in will-spam-for-food.eu.org]
[82.144.133.252 listed in will-spam-for-food.eu.org]
[82.144.133.252 listed in will-spam-for-food.eu.org]
[82.144.133.252 listed in will-spam-for-food.eu.org]
[82.144.133.252 listed in will-spam-for-food.eu.org]
[82.144.133.252 listed in will-spam-for-food.eu.org]
[82.144.133.252 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[82.144.133.252 listed in dnsbl.ahbl.org]
[82.144.133.252 listed in dnsbl.ahbl.org]
[82.144.133.252 listed in dnsbl.ahbl.org]
[82.144.133.252 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[82.144.133.252 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[82.144.133.252 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[82.144.133.252 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[82.144.133.252 listed in dnsbl.ahbl.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[ghazialbashir283(at)gmail.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[82.144.133.252 listed in bl.score.senderscore.com]
0.6 J_CHICKENPOX_72 BODY: 7alpha-pock-2alpha
2.5 MILLION_USD BODY: Talks about millions of dollars
2.7 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 ODD_FREEM_REPTO Has unusual reply-to header
0.0 HK_NAME_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.4 MONEY_NOHTML Lots of money in plain text
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 T_MONEY_PERCENT X% of a lot of money for you
2.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} INVESTMENT PARTNERSHIP
--
GREETINGS.
INVESTMENT PARTNERSHIP !
My name is Mahmoud Ghazi Al-Bashir and I am the Son of Dr. Issam
Al-Bashir, the formal religious advisor to our formally ousted President
Omar Al-Bashir. from Sudan. We are a family from Sudan, fleeing from
Political instability in our country. We have funds to give out for
investment either on equity or loan basis.
I want to leave Sudan as soon as possible because there’s a threat to
Our life. we have USD$55.7Million (Fifty-Five Million Seven Hundred
Thousand United States Dollars to invest in your Country.so that I and
my family wouldn't be a burden to you and your family. Please, we are
real and serious people and we are ready to have a talk with you and
also meet face to face to discuss this further if you will be kind
enough to give us your attention. For your assistance, we can offer you
50% of the total investment funds.
I am contacting you to know if you can assist me to relocate as soon as
possible. The areas to be considered for the investment are as follows
Real estate, Oil & Gas, Agriculture, Health, Aviation, Tourism, Retail,
Construction, IT & Communications, Technology, Education, Energy,
Engineering, Utilities, Telecoms, Mining, Maritime, sustainable energy
and host of other profitable ventures.
Intending beneficiaries must have a business plan and show their
capability to manage huge funds. The beneficiary must be able to deliver
good and sustainable returns on investment to the investor annually. If
you are that person or establishment seeking to expand your existing
business or you have new ideas waiting for
implementation, the opportunity is here.
Please do send me your personal details which includes your telephone
number for easy communication.
If you’re interested in assisting me, please do not hesitate to reply
back to me via my email (albashirmahmoudalbashir@zohomail.com) As soon
as possible.
I will furnish you with more details once I hear from you.
Best Regards.
Mr. Mahmoud Ghazi Al-Bashir.
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 19 Sep 2026 19:11:31 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from
id 1x865N-00000000Dy3-3VlZ
for dave@doctor.nl2k.ab.ca;
Sat, 19 Sep 2026 19:11:17 -0600
Resent-From: The Doctor
Resent-Date: Sat, 19 Sep 2026 19:11:17 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from 252-133.gtt-net.cz ([82.144.133.252]:40870 helo=mail.tvrdonice.cz)
by doctor.nl2k.ab.ca with esmtp (Exim 4.100 (FreeBSD))
(envelope-from
id 1x7wA7-00000000BX0-0wzY
for doctor@nl2k.ab.ca;
Sat, 19 Sep 2026 08:35:40 -0600
Received: from webmail.tvrdonice.cz (localhost [127.0.0.1])
by mail.tvrdonice.cz (Postfix) with ESMTP id B84102249E83;
Sat, 19 Sep 2026 16:34:15 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=tvrdonice.cz; s=dkim;
t=1789828456; bh=bAqSvo4X1LZ85Bb/qVsc7ailqDAJh6onk7Bz4g2xj3E=;
h=Date:From:To:Subject:Reply-To:From;
b=UpzABLfD8EQ7XQUyxCr7rz9zMNdxVwtXReCF9C8kCcsLh7QyjDb+OWh7fu9UuNQMW
faXn4V526SdMYp8vSQ4Ka6QTJXjzxNLbmpjEq2sDxx2HBGHRgLZLwAGCVfICE6HflX
lq3QZ/eiS5L9KsTkh2/LBAjuIO/BpW31OJwTW7/lbgqW3m6FW0/5IqrlVhdSPDzw4O
hMlKXp+SwpyZs+YZiSK6tvnYrAnsKWxaC52cgpcf3DpW8RvbaE90tGX3h4VYNEB+lw
7oDVe3xIcLbzZK1FvDwkl/7JLfc7Brrh9plNf0VFK9FUBazFpyPRlh6oJTZW0qNxtJ
RO+XCpvZ/SnaA==
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8;
format=flowed
Content-Transfer-Encoding: 8bit
Date: Sat, 19 Sep 2026 16:34:15 +0200
From: "Mr. Mahmoud Ghazi Al-Bashir."
To: undisclosed-recipients:;
Subject: INVESTMENT PARTNERSHIP
Reply-To: ghazialbashir283@gmail.com
Mail-Reply-To: ghazialbashir283@gmail.com
Message-ID: <9445f5dcaaa8a76cad644e36bbb99937@tvrdonice.cz>
X-Sender: mgab@tvrdonice.cz
User-Agent: Roundcube Webmail/1.3.8
X-Spam_score: 25.0
X-Spam_score_int: 250
X-Spam_bar: +++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- GREETINGS. INVESTMENT PARTNERSHIP !
Content analysis details: (25.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[82.144.133.252 listed in will-spam-for-food.eu.org]
[82.144.133.252 listed in will-spam-for-food.eu.org]
[82.144.133.252 listed in will-spam-for-food.eu.org]
[82.144.133.252 listed in will-spam-for-food.eu.org]
[82.144.133.252 listed in will-spam-for-food.eu.org]
[82.144.133.252 listed in will-spam-for-food.eu.org]
[82.144.133.252 listed in will-spam-for-food.eu.org]
[82.144.133.252 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[82.144.133.252 listed in dnsbl.ahbl.org]
[82.144.133.252 listed in dnsbl.ahbl.org]
[82.144.133.252 listed in dnsbl.ahbl.org]
[82.144.133.252 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[82.144.133.252 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[82.144.133.252 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[82.144.133.252 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[82.144.133.252 listed in dnsbl.ahbl.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[ghazialbashir283(at)gmail.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[82.144.133.252 listed in bl.score.senderscore.com]
0.6 J_CHICKENPOX_72 BODY: 7alpha-pock-2alpha
2.5 MILLION_USD BODY: Talks about millions of dollars
2.7 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 ODD_FREEM_REPTO Has unusual reply-to header
0.0 HK_NAME_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.4 MONEY_NOHTML Lots of money in plain text
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.4 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 T_MONEY_PERCENT X% of a lot of money for you
2.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} INVESTMENT PARTNERSHIP
--
GREETINGS.
INVESTMENT PARTNERSHIP !
My name is Mahmoud Ghazi Al-Bashir and I am the Son of Dr. Issam
Al-Bashir, the formal religious advisor to our formally ousted President
Omar Al-Bashir. from Sudan. We are a family from Sudan, fleeing from
Political instability in our country. We have funds to give out for
investment either on equity or loan basis.
I want to leave Sudan as soon as possible because there’s a threat to
Our life. we have USD$55.7Million (Fifty-Five Million Seven Hundred
Thousand United States Dollars to invest in your Country.so that I and
my family wouldn't be a burden to you and your family. Please, we are
real and serious people and we are ready to have a talk with you and
also meet face to face to discuss this further if you will be kind
enough to give us your attention. For your assistance, we can offer you
50% of the total investment funds.
I am contacting you to know if you can assist me to relocate as soon as
possible. The areas to be considered for the investment are as follows
Real estate, Oil & Gas, Agriculture, Health, Aviation, Tourism, Retail,
Construction, IT & Communications, Technology, Education, Energy,
Engineering, Utilities, Telecoms, Mining, Maritime, sustainable energy
and host of other profitable ventures.
Intending beneficiaries must have a business plan and show their
capability to manage huge funds. The beneficiary must be able to deliver
good and sustainable returns on investment to the investor annually. If
you are that person or establishment seeking to expand your existing
business or you have new ideas waiting for
implementation, the opportunity is here.
Please do send me your personal details which includes your telephone
number for easy communication.
If you’re interested in assisting me, please do not hesitate to reply
back to me via my email (albashirmahmoudalbashir@zohomail.com) As soon
as possible.
I will furnish you with more details once I hear from you.
Best Regards.
Mr. Mahmoud Ghazi Al-Bashir.
