Nigerian spam
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 13 Jan 2026 07:30:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vffOr-000000008SN-2ET8
for dave@doctor.nl2k.ab.ca;
Tue, 13 Jan 2026 07:29:37 -0700
Resent-From: The Doctor
Resent-Date: Tue, 13 Jan 2026 07:29:37 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail.rapidemail11.org ([51.195.235.220]:48414)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vffH3-00000000LWh-2vpq
for sales@nk.ca;
Tue, 13 Jan 2026 07:21:42 -0700
Received: from DESKTOP-IL35PKJ (unknown [102.89.83.91])
by mail.rapidemail11.org (Postfix) with ESMTPSA id 0F69488155AF
for; Tue, 13 Jan 2026 14:19:48 +0000 (UTC)
DKIM-Filter: OpenDKIM Filter v2.11.0 mail.rapidemail11.org 0F69488155AF
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rapidemail11.org;
s=202511; t=1768313988;
bh=92Q77fYm1EBm1/XzZhJcVi+5MeFmxV9gMwLYK6pyKlk=;
h=Reply-To:From:To:Subject:Date:From;
b=OKswX0Fa4sR+NDPRPSgN9+nIIMf00b1uqDyOw9SokDtTwMWFnmIg6GstNh5DPoM5k
RWy4/Gfq8T/UkGjx/lzU1ZbMPIlbBh9Qq+IKqA4XfAUjvFrhrNm6ihypmZ9kBM1EZ7
i70IkU+bm3abyVnTVL4wHHDljykOdFspSWxZAVQSdWbLFNei7tJXET5Iy0FI/1Tbru
gNSYiPJos5hKwTX0Zp0UNYgv644VyuFw1ofdCle0AbH+e3lwK6a4n5q02n7F1+xjvO
8jte4P5OEcq1Zl4mlf1bJTrH4mQnmxoSOgNiUEX+uwK1X8i0WZ0jwTw9fIkAha2g8i
XWfhmnKXkzhTw==
Reply-To:
From: "Smsm"
To: "sales"
Subject: I await your response.
Message-ID:
Date: Tue, 13 Jan 2026 08:19:28 -0600
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_64E66854.49A28741"
X-Priority: 3
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.4 (mail.rapidemail11.org [0.0.0.0]); Tue, 13 Jan 2026 14:19:48 +0000 (UTC)
X-Spam_score: 6.4
X-Spam_score_int: 64
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings Happy New Year and welcome to 2026. I hope this
message finds you well. My name is Ahmad, a CEO from Palestine. I am reaching
out to discuss a possible investment partnership with you. Due [...]
Content analysis details: (6.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[51.195.235.220 listed in dnsbl.ahbl.org]
[51.195.235.220 listed in dnsbl.ahbl.org]
[51.195.235.220 listed in dnsbl.ahbl.org]
[51.195.235.220 listed in dnsbl.ahbl.org]
[102.89.83.91 listed in dnsbl.ahbl.org]
[102.89.83.91 listed in dnsbl.ahbl.org]
[102.89.83.91 listed in dnsbl.ahbl.org]
[102.89.83.91 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[51.195.235.220 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[51.195.235.220 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[51.195.235.220 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[51.195.235.220 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[102.89.83.91 listed in will-spam-for-food.eu.org]
[102.89.83.91 listed in will-spam-for-food.eu.org]
[102.89.83.91 listed in will-spam-for-food.eu.org]
[102.89.83.91 listed in will-spam-for-food.eu.org]
[102.89.83.91 listed in will-spam-for-food.eu.org]
[102.89.83.91 listed in will-spam-for-food.eu.org]
[102.89.83.91 listed in will-spam-for-food.eu.org]
[102.89.83.91 listed in will-spam-for-food.eu.org]
[51.195.235.220 listed in will-spam-for-food.eu.org]
[51.195.235.220 listed in will-spam-for-food.eu.org]
[51.195.235.220 listed in will-spam-for-food.eu.org]
[51.195.235.220 listed in will-spam-for-food.eu.org]
[51.195.235.220 listed in will-spam-for-food.eu.org]
[51.195.235.220 listed in will-spam-for-food.eu.org]
[51.195.235.220 listed in will-spam-for-food.eu.org]
[51.195.235.220 listed in will-spam-for-food.eu.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.2 REPTO_419_FRAUD Reply-To is known advance fee fraud collector mailbox
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
0.7 MPART_ALT_DIFF BODY: HTML and text parts are different
Subject: {SPAM?} I await your response.
This is a multi-part message in MIME format.
------=_NextPart_000_0001_64E66854.49A28741
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
------=_NextPart_000_0001_64E66854.49A28741
Content-Type: text/html;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
=0D=0A
TML>=0D=0A
001">=0D=0AGreetings
Happy New Year and welcome =
to 2026. I hope this message finds you well. My name is Ahmad, =
a CEO from Palestine. I am reaching out to discuss a possible =
investment partnership with you. Due to the ongoing conflict =
in my country, many businesses including mine, have suffered =
severe losses and as result of this I have decided to move my =
funds abroad to invest in your safe region into joint partnership =
to secure my funds and family future. I am also willing to give =
out the funds for a business Loan on 1% interest rate. we can =
work with your viable start up or already existing business/project =
that requires funding or expansion. The total funds I have available =
for the investment will be disclosed in my next email if you =
are interested
Looking forward to your response.
Best =
regards,
Ahmad
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 13 Jan 2026 07:30:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vffOr-000000008SN-2ET8
for dave@doctor.nl2k.ab.ca;
Tue, 13 Jan 2026 07:29:37 -0700
Resent-From: The Doctor
Resent-Date: Tue, 13 Jan 2026 07:29:37 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail.rapidemail11.org ([51.195.235.220]:48414)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vffH3-00000000LWh-2vpq
for sales@nk.ca;
Tue, 13 Jan 2026 07:21:42 -0700
Received: from DESKTOP-IL35PKJ (unknown [102.89.83.91])
by mail.rapidemail11.org (Postfix) with ESMTPSA id 0F69488155AF
for
DKIM-Filter: OpenDKIM Filter v2.11.0 mail.rapidemail11.org 0F69488155AF
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rapidemail11.org;
s=202511; t=1768313988;
bh=92Q77fYm1EBm1/XzZhJcVi+5MeFmxV9gMwLYK6pyKlk=;
h=Reply-To:From:To:Subject:Date:From;
b=OKswX0Fa4sR+NDPRPSgN9+nIIMf00b1uqDyOw9SokDtTwMWFnmIg6GstNh5DPoM5k
RWy4/Gfq8T/UkGjx/lzU1ZbMPIlbBh9Qq+IKqA4XfAUjvFrhrNm6ihypmZ9kBM1EZ7
i70IkU+bm3abyVnTVL4wHHDljykOdFspSWxZAVQSdWbLFNei7tJXET5Iy0FI/1Tbru
gNSYiPJos5hKwTX0Zp0UNYgv644VyuFw1ofdCle0AbH+e3lwK6a4n5q02n7F1+xjvO
8jte4P5OEcq1Zl4mlf1bJTrH4mQnmxoSOgNiUEX+uwK1X8i0WZ0jwTw9fIkAha2g8i
XWfhmnKXkzhTw==
Reply-To:
From: "Smsm"
To: "sales"
Subject: I await your response.
Message-ID:
Date: Tue, 13 Jan 2026 08:19:28 -0600
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_64E66854.49A28741"
X-Priority: 3
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.4 (mail.rapidemail11.org [0.0.0.0]); Tue, 13 Jan 2026 14:19:48 +0000 (UTC)
X-Spam_score: 6.4
X-Spam_score_int: 64
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings Happy New Year and welcome to 2026. I hope this
message finds you well. My name is Ahmad, a CEO from Palestine. I am reaching
out to discuss a possible investment partnership with you. Due [...]
Content analysis details: (6.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[51.195.235.220 listed in dnsbl.ahbl.org]
[51.195.235.220 listed in dnsbl.ahbl.org]
[51.195.235.220 listed in dnsbl.ahbl.org]
[51.195.235.220 listed in dnsbl.ahbl.org]
[102.89.83.91 listed in dnsbl.ahbl.org]
[102.89.83.91 listed in dnsbl.ahbl.org]
[102.89.83.91 listed in dnsbl.ahbl.org]
[102.89.83.91 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[51.195.235.220 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[51.195.235.220 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[51.195.235.220 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[51.195.235.220 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[102.89.83.91 listed in will-spam-for-food.eu.org]
[102.89.83.91 listed in will-spam-for-food.eu.org]
[102.89.83.91 listed in will-spam-for-food.eu.org]
[102.89.83.91 listed in will-spam-for-food.eu.org]
[102.89.83.91 listed in will-spam-for-food.eu.org]
[102.89.83.91 listed in will-spam-for-food.eu.org]
[102.89.83.91 listed in will-spam-for-food.eu.org]
[102.89.83.91 listed in will-spam-for-food.eu.org]
[51.195.235.220 listed in will-spam-for-food.eu.org]
[51.195.235.220 listed in will-spam-for-food.eu.org]
[51.195.235.220 listed in will-spam-for-food.eu.org]
[51.195.235.220 listed in will-spam-for-food.eu.org]
[51.195.235.220 listed in will-spam-for-food.eu.org]
[51.195.235.220 listed in will-spam-for-food.eu.org]
[51.195.235.220 listed in will-spam-for-food.eu.org]
[51.195.235.220 listed in will-spam-for-food.eu.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.2 REPTO_419_FRAUD Reply-To is known advance fee fraud collector mailbox
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
0.7 MPART_ALT_DIFF BODY: HTML and text parts are different
Subject: {SPAM?} I await your response.
This is a multi-part message in MIME format.
------=_NextPart_000_0001_64E66854.49A28741
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
------=_NextPart_000_0001_64E66854.49A28741
Content-Type: text/html;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
=0D=0A
TML>=0D=0A
001">=0D=0AGreetings
Happy New Year and welcome =
to 2026. I hope this message finds you well. My name is Ahmad, =
a CEO from Palestine. I am reaching out to discuss a possible =
investment partnership with you. Due to the ongoing conflict =
in my country, many businesses including mine, have suffered =
severe losses and as result of this I have decided to move my =
funds abroad to invest in your safe region into joint partnership =
to secure my funds and family future. I am also willing to give =
out the funds for a business Loan on 1% interest rate. we can =
work with your viable start up or already existing business/project =
that requires funding or expansion. The total funds I have available =
for the investment will be disclosed in my next email if you =
are interested
Looking forward to your response.
Best =
regards,
Ahmad