Nigerian investment spam part 3

Posted by Dave Yadallee on
TYLE: normal; ORPHANS: 2; WIDOWS: 2; DISPLAY: inline; LETTER-SPACING: norma=

l; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px'>
T-SIZE: 17px; FONT-FAMILY: "Helvetica Neue", "Segoe UI", Helvetica, Arial, =

"Lucida Grande", sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-T=

RANSFORM: none; FLOAT: none; FONT-WEIGHT: 400; COLOR: rgb(29,34,40); FONT-S=

TYLE: normal; ORPHANS: 2; WIDOWS: 2; DISPLAY: inline; LETTER-SPACING: norma=

l; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px'>
T-SIZE: 17px; FONT-FAMILY: "Helvetica Neue", "Segoe UI", Helvetica, Arial, =

"Lucida Grande", sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-T=

RANSFORM: none; FLOAT: none; FONT-WEIGHT: 400; COLOR: rgb(29,34,40); FONT-S=

TYLE: normal; ORPHANS: 2; WIDOWS: 2; DISPLAY: inline; LETTER-SPACING: norma=

l; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px'>
T-SIZE: 17px; FONT-FAMILY: "Helvetica Neue", "Segoe UI", Helvetica, Arial, =

"Lucida Grande", sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-T=

RANSFORM: none; FLOAT: none; FONT-WEIGHT: 400; COLOR: rgb(29,34,40); FONT-S=

TYLE: normal; ORPHANS: 2; WIDOWS: 2; DISPLAY: inline; LETTER-SPACING: norma=

l; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px'>
AN>
FONT-FAMILY: Verdana, sans-serif; WHITE-SPACE: nowrap; WORD-SPACING: 0px; T=

EXT-TRANSFORM: none; FLOAT: none; FONT-WEIGHT: 700; COLOR: rgb(51,51,51); F=

ONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; DISPLAY: inline; LETTER-SPACING: =

normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px">
=3D'FONT-SIZE: 17px; FONT-FAMILY: "Helvetica Neue", "Segoe UI", Helvetica, =

Arial, "Lucida Grande", sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px;=

TEXT-TRANSFORM: none; FLOAT: none; FONT-WEIGHT: 400; COLOR: rgb(29,34,40);=

FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; DISPLAY: inline; LETTER-SPACING=

: normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px'>
=3D'FONT-SIZE: 17px; FONT-FAMILY: "Helvetica Neue", "Segoe UI", Helvetica, =

Arial, "Lucida Grande", sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px;=

TEXT-TRANSFORM: none; FLOAT: none; FONT-WEIGHT: 400; COLOR: rgb(29,34,40);=

FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; DISPLAY: inline; LETTER-SPACING=

: normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px'>
AN>
MILY: Verdana, sans-serif; WHITE-SPACE: nowrap; WORD-SPACING: 0px; TEXT-TRA=

NSFORM: none; FLOAT: none; FONT-WEIGHT: 700; COLOR: rgb(51,51,51); FONT-STY=

LE: normal; ORPHANS: 2; WIDOWS: 2; DISPLAY: inline; LETTER-SPACING: normal;=

BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px">
SIZE: 17px; FONT-FAMILY: "Helvetica Neue", "Segoe UI", Helvetica, Arial, "L=

ucida Grande", sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRA=

NSFORM: none; FLOAT: none; FONT-WEIGHT: 400; COLOR: rgb(29,34,40); FONT-STY=

LE: normal; ORPHANS: 2; WIDOWS: 2; DISPLAY: inline; LETTER-SPACING: normal;=

BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px'>
>
ans-serif; WHITE-SPACE: nowrap; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FL=

OAT: none; FONT-WEIGHT: 700; COLOR: rgb(51,51,51); FONT-STYLE: normal; ORPH=

ANS: 2; WIDOWS: 2; DISPLAY: inline; LETTER-SPACING: normal; BACKGROUND-COLO=

R: rgb(255,255,255); TEXT-INDENT: 0px">
-FAMILY: Verdana, sans-serif; WHITE-SPACE: nowrap; WORD-SPACING: 0px; TEXT-=

TRANSFORM: none; FLOAT: none; FONT-WEIGHT: 700; COLOR: rgb(51,51,51); FONT-=

STYLE: normal; ORPHANS: 2; WIDOWS: 2; DISPLAY: inline; LETTER-SPACING: norm=

al; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px">
PAN>
-serif; WHITE-SPACE: nowrap; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT=

: none; FONT-WEIGHT: 700; COLOR: rgb(51,51,51); FONT-STYLE: normal; ORPHANS=

: 2; WIDOWS: 2; DISPLAY: inline; LETTER-SPACING: normal; BACKGROUND-COLOR: =

rgb(255,255,255); TEXT-INDENT: 0px">
MILY: Verdana, sans-serif; WHITE-SPACE: nowrap; WORD-SPACING: 0px; TEXT-TRA=

NSFORM: none; FLOAT: none; FONT-WEIGHT: 700; COLOR: rgb(51,51,51); FONT-STY=

LE: normal; ORPHANS: 2; WIDOWS: 2; DISPLAY: inline; LETTER-SPACING: normal;=

BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px">
SIZE: 14px; FONT-FAMILY: Verdana, sans-serif; WHITE-SPACE: nowrap; WORD-SPA=

CING: 0px; TEXT-TRANSFORM: none; FLOAT: none; FONT-WEIGHT: 700; COLOR: rgb(=

51,51,51); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; DISPLAY: inline; LETT=

ER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px"><=

SPAN style=3D"FONT-SIZE: 14px; FONT-FAMILY: Verdana, sans-serif; WHITE-SPAC=

E: nowrap; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; FONT-WEIGH=

T: 700; COLOR: rgb(51,51,51); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; DI=

SPLAY: inline; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); =

TEXT-INDENT: 0px">
ONT-SIZE: 14px; FONT-FAMILY: Verdana, sans-serif; WHITE-SPACE: nowrap; WORD=

-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; FONT-WEIGHT: 700; COLOR: =

rgb(51,51,51); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; DISPLAY: inline; =

LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0p=

x">
SPACE: nowrap; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; FONT-W=

EIGHT: 700; COLOR: rgb(51,51,51); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2=

; DISPLAY: inline; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,25=

5); TEXT-INDENT: 0px">
sans-serif; WHITE-SPACE: nowrap; WORD-SPACING: 0px; TEXT-TRANSFORM: none; =

FLOAT: none; FONT-WEIGHT: 700; COLOR: rgb(51,51,51); FONT-STYLE: normal; OR=

PHANS: 2; WIDOWS: 2; DISPLAY: inline; LETTER-SPACING: normal; BACKGROUND-CO=

LOR: rgb(255,255,255); TEXT-INDENT: 0px">=


le=3D"FONT-SIZE: 9pt; FONT-FAMILY: Verdana, sans-serif; COLOR: black">I am =

Mrs Anita Aleksander  the wife of Mr. Seme Aleksander (Ukraine sunflow=

er oil & wheat, maize farmer ) my husband was murdered by the Russian A=

rmy troop because of the war between Russian& Ukraine it was so very te=

rrible




D-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); =

FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; TEXT-IND=

ENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal; -webki=

t-text-stroke-width: 0px; text-decoration-thickness: initial; text-decorati=

on-style: initial; text-decoration-color: initial">
IZE: 9pt; FONT-FAMILY: Verdana, sans-serif; COLOR: black">He was a sunflowe=

r oil & wheat and maize farmer who have invested much in agriculture po=

litical opponents.
rdana, sans-serif; COLOR: black">

Nigerian investment spam part 2

Posted by Dave Yadallee on
--===============1600480634==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body




=3Diso-8859-1"/>


ana; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEI=

GHT: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LET=

TER-SPACING: normal; TEXT-INDENT: 0px; font-variant-ligatures: normal; font=

-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thic=

kness: initial; text-decoration-style: initial; text-decoration-color: init=

ial">THIS IS MY INVESTMENT LETTER TO YOU.
NG> 




-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; RIGHT: 0px; POSITION: absol=

ute; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(51,51,51); FONT-STY=

LE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; TOP: 0px; BACKGR=

OUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: nor=

mal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decora=

tion-thickness: initial; text-decoration-style: initial; text-decoration-co=

lor: initial">



D-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); =

FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; TEXT-IND=

ENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal; -webki=

t-text-stroke-width: 0px; text-decoration-thickness: initial; text-decorati=

on-style: initial; text-decoration-color: initial">
=3D2>
UI", Helvetica, Arial, "Lucida Grande", sans-serif; WHITE-SPACE: normal; WO=

RD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; FONT-WEIGHT: 400; COLOR=

: rgb(29,34,40); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; DISPLAY: inline=

!important; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); TE=

XT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal; =

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-de=

coration-style: initial; text-decoration-color: initial'>
AN>
sans-serif; WHITE-SPACE: nowrap; WORD-SPACING: 0px; TEXT-TRANSFORM: none; =

FLOAT: none; FONT-WEIGHT: 700; COLOR: rgb(51,51,51); FONT-STYLE: normal; OR=

PHANS: 2; WIDOWS: 2; DISPLAY: inline; LETTER-SPACING: normal; BACKGROUND-CO=

LOR: rgb(255,255,255); TEXT-INDENT: 0px">
NT-FAMILY: "Helvetica Neue", "Segoe UI", Helvetica, Arial, "Lucida Grande",=

sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; =

FLOAT: none; FONT-WEIGHT: 400; COLOR: rgb(29,34,40); FONT-STYLE: normal; OR=

PHANS: 2; WIDOWS: 2; DISPLAY: inline; LETTER-SPACING: normal; BACKGROUND-CO=

LOR: rgb(255,255,255); TEXT-INDENT: 0px'>=


TE-SPACE: nowrap; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FLOAT: none; FON=

T-WEIGHT: 700; COLOR: rgb(51,51,51); FONT-STYLE: normal; ORPHANS: 2; WIDOWS=

: 2; DISPLAY: inline; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255=

,255); TEXT-INDENT: 0px">
na, sans-serif; WHITE-SPACE: nowrap; WORD-SPACING: 0px; TEXT-TRANSFORM: non=

e; FLOAT: none; FONT-WEIGHT: 700; COLOR: rgb(51,51,51); FONT-STYLE: normal;=

ORPHANS: 2; WIDOWS: 2; DISPLAY: inline; LETTER-SPACING: normal; BACKGROUND=

-COLOR: rgb(255,255,255); TEXT-INDENT: 0px">
FONT-FAMILY: Verdana, sans-serif; WHITE-SPACE: nowrap; WORD-SPACING: 0px; =

TEXT-TRANSFORM: none; FLOAT: none; FONT-WEIGHT: 700; COLOR: rgb(51,51,51); =

FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; DISPLAY: inline; LETTER-SPACING:=

normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px">
N>
ILY: Verdana, sans-serif; WHITE-SPACE: nowrap; WORD-SPACING: 0px; TEXT-TRAN=

SFORM: none; FLOAT: none; FONT-WEIGHT: 700; COLOR: rgb(51,51,51); FONT-STYL=

E: normal; ORPHANS: 2; WIDOWS: 2; DISPLAY: inline; LETTER-SPACING: normal; =

BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px">
IZE: 14px; FONT-FAMILY: Verdana, sans-serif; WHITE-SPACE: nowrap; WORD-SPAC=

ING: 0px; TEXT-TRANSFORM: none; FLOAT: none; FONT-WEIGHT: 700; COLOR: rgb(5=

1,51,51); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; DISPLAY: inline; LETTE=

R-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px">
SPAN>
FAMILY: Verdana, sans-serif; WHITE-SPACE: nowrap; WORD-SPACING: 0px; TEXT-T=

RANSFORM: none; FLOAT: none; FONT-WEIGHT: 700; COLOR: rgb(51,51,51); FONT-S=

TYLE: normal; ORPHANS: 2; WIDOWS: 2; DISPLAY: inline; LETTER-SPACING: norma=

l; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px">
T-SIZE: 17px; FONT-FAMILY: "Helvetica Neue", "Segoe UI", Helvetica, Arial, =

"Lucida Grande", sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-T=

RANSFORM: none; FLOAT: none; FONT-WEIGHT: 400; COLOR: rgb(29,34,40); FONT-S=

TYLE: normal; ORPHANS: 2; WIDOWS: 2; DISPLAY: inline; LETTER-SPACING: norma=

l; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px'>

Nigerian investment spam part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 07 Dec 2025 15:13:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vSMkC-00000000N1n-0a4a

for dave@doctor.nl2k.ab.ca;

Sun, 07 Dec 2025 14:56:40 -0700

Resent-From: The Doctor

Resent-Date: Sun, 7 Dec 2025 14:56:40 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail1.serve-it.ru ([46.180.135.126]:28136)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vSLNm-00000000FPD-3Nb0

for sales@nk.ca;

Sun, 07 Dec 2025 13:29:36 -0700

Content-Type: multipart/alternative; boundary="===============1600480634=="

MIME-Version: 1.0

Subject: MY INVESTMENT LETTER TO YOU.

To: Recipients

From: ANITA ALEKSANDER

Date: Sun, 7 Dec 2025 22:28:12 +0200

Reply-To:

Message-ID: <29ed6bf2-0110-448a-b691-224b35530db5@SWC-vSRV-MX-01.SWC.LOCAL>

X-Spam_score: 26.4

X-Spam_score_int: 264

X-Spam_bar: ++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: THIS IS MY INVESTMENT LETTER TO YOU. I am Mrs Anita Aleksander

the wife of Mr. Seme Aleksander (Ukraine sunflower oil & wheat, maize farmer

) my husband was murdered by the Russian Army troop because of the war between

Russian& Ukraine [...]



Content analysis details: (26.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[46.180.135.126 listed in will-spam-for-food.eu.org]

[46.180.135.126 listed in will-spam-for-food.eu.org]

[46.180.135.126 listed in will-spam-for-food.eu.org]

[46.180.135.126 listed in will-spam-for-food.eu.org]

[46.180.135.126 listed in will-spam-for-food.eu.org]

[46.180.135.126 listed in will-spam-for-food.eu.org]

[46.180.135.126 listed in will-spam-for-food.eu.org]

[46.180.135.126 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[46.180.135.126 listed in dnsbl.ahbl.org]

[46.180.135.126 listed in dnsbl.ahbl.org]

[46.180.135.126 listed in dnsbl.ahbl.org]

[46.180.135.126 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[46.180.135.126 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[46.180.135.126 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[46.180.135.126 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[46.180.135.126 listed in dnsbl.ahbl.org]

1.6 SUBJ_ALL_CAPS Subject is all capitals

2.5 MILLION_USD BODY: Talks about millions of dollars

2.7 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

2.6 HK_SCAM_N13 BODY: No description available.

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 LOTS_OF_MONEY Huge... sums of money

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

2.0 TVD_PH_BODY_META No description available.

0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} MY INVESTMENT LETTER TO YOU.



--===============1600480634==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



THIS IS MY INVESTMENT LETTER TO YOU. =



=



I am Mrs Anita Aleksander the wife of Mr. Seme Aleksander (Ukraine sunflo=

wer oil & wheat, maize farmer ) my husband was murdered by the Russian Army=

troop because of the war between Russian& Ukraine it was so very terrible

He was a sunflower oil & wheat and maize farmer who have invested much in =

agriculture political opponents.

I acknowledge very well that my Husband deposited the sum of US$10.7M (TEN=

MILLION SEVEN HUNDRED THOUSAND UNITED STATES DOLLARS) with a security and =

financial company here in Johannesburg South -Africa with the intention of =

using it for the purchase of new farm machinaries and chemical for Agricult=

ural purpose as well as purchasing hectares of land in South Africa for his=

investment. I got your contact through online chamber of commerce .With th=

e high risk of staying in my country we are now on political asylum. (Refug=

ee) me and my daughter we are here in South Africa, my position does not al=

low me to open an account or to normalize this funds to any meaningful busi=

ness transaction, I want you to understand that this is purely family fund =

not money laundering affair.

I solicit for your honest assistance as I want this fund to be transferred=

to your account in oversea with your partnership, I will want to invest th=

is fund in your country.

We can invest the fund as a family investment together with you in your co=

untry be assured that all the necessary document backing this fund will bee=

n arranged with one of the Attorney I meet here in Johannesburg South Afric=

a, feel free to ask any question regarding this transaction.

Hoping to hear from you soonest, kindly contact me through this my private=

email For Confidential: a.annita.alex@gmail.com

I will be waiting to hear from you.

Thanks you and regards

MRS ANITA ALEKSANDER

Crypto phishing part 4

Posted by Dave Yadallee on



adjust:100%; display:inline-block; background:#3b5a99; color:#fff; padding:=

10px 16px; border-radius:10px; text-decoration:none; font-weight:600; margi=

n-top:6px" class=3D"cta-primary" href=3D"https://www.cryptocarefoundation.o=

rg/make-a-donation">Support Through Our Official Donation Page












ust:100%; mso-table-lspace:0; mso-table-rspace:0; text-align:center; paddin=

g:18px 20px; font-size:13px; color:#6b7280" class=3D"footer">

CryptoCare Foundation — Immediate humanitarian relief=

powered by blockchain.


For other payment methods or questions, reply or contact
style=3D"-webkit-text-size-adjust:100%; -ms-text-size-adjust:100%" href=3D=

"mailto:tiffanykonomi@cryptocarefoundation.org">tiffanykonomi@cryptocarefou=

ndation.org.























Crypto phishing part 3

Posted by Dave Yadallee on

bic; border:0; height:auto; line-height:100%; outline:none; text-decoration=

:none; display:block; border-radius:8px;" src=3D"https://cryptologos.cc/log=

os/bitcoin-btc-logo.png" alt=3D"BTC" width=3D"44" height=3D"44" />




-ms-text-size-adjust:100%; mso-table-lspace:0; mso-table-rspace:0; display=

:table-cell; vertical-align:middle" class=3D"wallet-meta">


:700;">Bitcoin (BTC)



px; font-family:monospace; font-size:13px; color:#0b1220; word-break:break-=

all; background:#fbfdff; padding:8px 10px; border-radius:8px; border:1px da=

shed #e6eefc" class=3D"addr">13ZR4iRB2Q2FoRDHZGAWr1p77eEEduBcU3



display:flex;

gap:30px; / spacing between buttons /

flex-wrap:wrap;

justify-content:flex-start" class=3D"actions">


text-decoration:none;

padding:10px 16px;

border-radius:8px;

border:1px solid #3b5a99;

background:#3b5a99;

color:#fff;

font-size:14px;

min-width:120px;

text-align:center" class=3D"btn" href=3D"#" onclick=3D"copyToClipboar=

d(event,'13ZR4iRB2Q2FoRDHZGAWr1p77eEEduBcU3')">Copy


text-decoration:none;

padding:10px 16px;

border-radius:8px;

border:1px solid #3b5a99;

background:#3b5a99;

color:#fff;

font-size:14px;

min-width:120px;

text-align:center" class=3D"btn" href=3D"bitcoin:13ZR4iRB2Q2FoRDHZGAW=

r1p77eEEduBcU3">Open in Wallet


























ze-adjust:100%; mso-table-lspace:0; mso-table-rspace:0; padding-bottom:12px=

;">


xt-size-adjust:100%; mso-table-lspace:0; mso-table-rspace:0; border-collaps=

e:collapse !important; background:#fbfdff; border:1px solid #eef2ff; border=

-radius:10px; padding:12px; margin-bottom:14px" role=3D"presentation" width=

=3D"100%" class=3D"wallet-card" cellpadding=3D"0" cellspacing=3D"0">








ext-size-adjust:100%; mso-table-lspace:0; mso-table-rspace:0; vertical-alig=

n:middle; padding:12px;">


-ms-text-size-adjust:100%; mso-table-lspace:0; mso-table-rspace:0; border-c=

ollapse:collapse !important" role=3D"presentation" width=3D"100%" cellpaddi=

ng=3D"0" cellspacing=3D"0">










-ms-text-size-adjust:100%; mso-table-lspace:0; mso-table-rspace:0; display=

:table-cell; vertical-align:middle; width:56px; padding-right:12px" class=

=3D"wallet-left">


bic; border:0; height:auto; line-height:100%; outline:none; text-decoration=

:none; display:block; border-radius:8px;" src=3D"https://cryptologos.cc/log=

os/ethereum-eth-logo.png" alt=3D"ETH" width=3D"44" height=3D"44" />
-ms-text-size-adjust:100%; mso-table-lspace:0; mso-table-rspace:0; display=

:table-cell; vertical-align:middle" class=3D"wallet-meta">


:700;">Ethereum (ERC20)



px; font-family:monospace; font-size:13px; color:#0b1220; word-break:break-=

all; background:#fbfdff; padding:8px 10px; border-radius:8px; border:1px da=

shed #e6eefc" class=3D"addr">0x7c774a1f67eff8cd6642796f325bdcf26a589697
v>















ze-adjust:100%; mso-table-lspace:0; mso-table-rspace:0; padding-bottom:8px;=

">


xt-size-adjust:100%; mso-table-lspace:0; mso-table-rspace:0; border-collaps=

e:collapse !important; background:#fbfdff; border:1px solid #eef2ff; border=

-radius:10px; padding:12px; margin-bottom:14px" role=3D"presentation" width=

=3D"100%" class=3D"wallet-card" cellpadding=3D"0" cellspacing=3D"0">








ext-size-adjust:100%; mso-table-lspace:0; mso-table-rspace:0; vertical-alig=

n:middle; padding:12px;">


-ms-text-size-adjust:100%; mso-table-lspace:0; mso-table-rspace:0; border-c=

ollapse:collapse !important" role=3D"presentation" width=3D"100%" cellpaddi=

ng=3D"0" cellspacing=3D"0">










-ms-text-size-adjust:100%; mso-table-lspace:0; mso-table-rspace:0; display=

:table-cell; vertical-align:middle; width:56px; padding-right:12px" class=

=3D"wallet-left">


bic; border:0; height:auto; line-height:100%; outline:none; text-decoration=

:none; display:block; border-radius:8px;" src=3D"https://cryptologos.cc/log=

os/tether-usdt-logo.png" alt=3D"USDT" width=3D"44" height=3D"44" />
-ms-text-size-adjust:100%; mso-table-lspace:0; mso-table-rspace:0; display=

:table-cell; vertical-align:middle" class=3D"wallet-meta">


:700;">USDT (TRC20)



px; font-family:monospace; font-size:13px; color:#0b1220; word-break:break-=

all; background:#fbfdff; padding:8px 10px; border-radius:8px; border:1px da=

shed #e6eefc" class=3D"addr">TR399cPaeThkoxcqyyg6jM8ebhtSSkN4Mr










Crypto phishing part 2

Posted by Dave Yadallee on



%; mso-table-lspace:0; mso-table-rspace:0; border-collapse:collapse !import=

ant; width:100%; max-width:680px; margin:0 auto" role=3D"presentation" clas=

s=3D"main" cellpadding=3D"0" cellspacing=3D"0">




0%; mso-table-lspace:0; mso-table-rspace:0" align=3D"center">


st:100%; mso-table-lspace:0; mso-table-rspace:0; border-collapse:collapse !=

important; background:#fff; border-radius:12px; overflow:visible; box-shado=

w:0 8px 30px rgba(9,20,45,0.06)" role=3D"presentation" width=3D"100%" class=

=3D"card" cellpadding=3D"0" cellspacing=3D"0">




























ust:100%; mso-table-lspace:0; mso-table-rspace:0; background:#f6f8fb; text-=

align:center; padding:18px 18px 6px 18px" class=3D"header" align=3D"center"=

>


just:100%" href=3D"https://www.cryptocarefoundation.org/" target=3D"_blank"=

rel=3D"noopener">


eight:auto; line-height:100%; outline:none; text-decoration:none; display:b=

lock; display:inline-block; width:160px; max-width:160px; height:auto" clas=

s=3D"logo" src=3D"https://assets.zyrosite.com/cdn-cgi/image/format%3Dauto%2=

Cw%3D375%2Cfit%3Dcrop%2Cq%3D95/mp8q2Kv82ySG8wWz/dalla-e-2025-02-27-00.38.53=

---a-professional-logo-for-cryptocare-foundation-a-humanitarian-organizatio=

n-using-cryptocurrency-for-aid.-the-design-should-include-a-modern-blockcha=

-A3QORkyyo0hDnE47.jpg" alt=3D"CryptoCare Foundation Logo" width=3D"160" hei=

ght=3D"147" />

ust:100%; mso-table-lspace:0; mso-table-rspace:0; text-align:center; paddin=

g:12px 18px 18px 18px" class=3D"title-bar" align=3D"center">


x; margin:0; line-height:1.15" class=3D"title">CryptoCare Foundation —=

; Immediate Humanitarian Relief

ust:100%; mso-table-lspace:0; mso-table-rspace:0; padding:0 20px 22px 20px;=

color:#111827; font-size:16px; line-height:1.5" class=3D"content">

Dear Humanitarian,



I am Tiffany Konomi<=

/strong>, Senior Vice President and Chief Marketing Officer of Cryp=

toCare Foundation.



Across the world, families a=

re fighting to survive crises they did not create.





In Ukraine,=

a mother puts her child to sleep hungry, hoping tomorrow brings light, war=

mth, and safety.


In Gaza, families struggle daily with shor=

tages of food, clean water, medicine, and basic necessities.


In Sudan, displacement has left millions w=

ithout shelter or medical care.


In Yemen, parents skip their own meals so =

their children can eat.


In Haiti, women and children flee escalati=

ng violence, carrying only what they can hold as they search for safety.
>




x 0" class=3D"lead">This is the world right now. And they are still=

waiting.



At CryptoCare Founda=

tion, we reach people at their hardest moments with food, medicine=

, and emergency support — direct, transparent, and powered by blockch=

ain so help gets to the right hands immediately.




x 0" class=3D"lead">You can be the reason someone survives another =

day.

ust:100%; mso-table-lspace:0; mso-table-rspace:0; padding:12px 20px 24px 20=

px" class=3D"donations" align=3D"center">


e-adjust:100%; mso-table-lspace:0; mso-table-rspace:0; border-collapse:coll=

apse !important" role=3D"presentation" width=3D"100%" cellpadding=3D"0" cel=

lspacing=3D"0">






ze-adjust:100%; mso-table-lspace:0; mso-table-rspace:0; padding-bottom:12px=

;">


xt-size-adjust:100%; mso-table-lspace:0; mso-table-rspace:0; border-collaps=

e:collapse !important; background:#fbfdff; border:1px solid #eef2ff; border=

-radius:10px; padding:12px; margin-bottom:14px" role=3D"presentation" width=

=3D"100%" class=3D"wallet-card" cellpadding=3D"0" cellspacing=3D"0">




ext-size-adjust:100%; mso-table-lspace:0; mso-table-rspace:0; vertical-alig=

n:middle; padding:12px;">


-ms-text-size-adjust:100%; mso-table-lspace:0; mso-table-rspace:0; border-c=

ollapse:collapse !important" role=3D"presentation" width=3D"100%" cellpaddi=

ng=3D"0" cellspacing=3D"0">




-ms-text-size-adjust:100%; mso-table-lspace:0; mso-table-rspace:0; display=

:table-cell; vertical-align:middle; width:56px; padding-right:12px" class=

=3D"wallet-left">

Crypto phishing part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 07 Dec 2025 15:13:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vSMjk-00000000N0o-2ciN

for dave@doctor.nl2k.ab.ca;

Sun, 07 Dec 2025 14:56:12 -0700

Resent-From: The Doctor

Resent-Date: Sun, 7 Dec 2025 14:56:12 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx.cndns.org ([107.189.14.8]:48386)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vSKxF-00000000E0I-1ASP

for sales@nk.ca;

Sun, 07 Dec 2025 13:02:10 -0700

Received: from [102.211.42.66] (unknown [102.211.42.66])

by mx.cndns.org (Postfix) with ESMTP id 79CC948F9E

for ; Sun, 7 Dec 2025 19:45:27 +0000 (UTC)

From: info@cryptocarefoundation.org

To: sales@nk.ca

Subject: The cry of hunger is louder than bombs

Date: 7 Dec 2025 20:45:26 +0100

Message-ID: <20251207204526.438536B50E57B059@cryptocarefoundation.org>

MIME-Version: 1.0

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 18.5

X-Spam_score_int: 185

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: CryptoCare Foundation — Give Directly CryptoCare Foundation

— Immediate Humanitarian Relief



Content analysis details: (18.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[102.211.42.66 listed in will-spam-for-food.eu.org]

[102.211.42.66 listed in will-spam-for-food.eu.org]

[102.211.42.66 listed in will-spam-for-food.eu.org]

[102.211.42.66 listed in will-spam-for-food.eu.org]

[102.211.42.66 listed in will-spam-for-food.eu.org]

[102.211.42.66 listed in will-spam-for-food.eu.org]

[102.211.42.66 listed in will-spam-for-food.eu.org]

[102.211.42.66 listed in will-spam-for-food.eu.org]

[107.189.14.8 listed in will-spam-for-food.eu.org]

[107.189.14.8 listed in will-spam-for-food.eu.org]

[107.189.14.8 listed in will-spam-for-food.eu.org]

[107.189.14.8 listed in will-spam-for-food.eu.org]

[107.189.14.8 listed in will-spam-for-food.eu.org]

[107.189.14.8 listed in will-spam-for-food.eu.org]

[107.189.14.8 listed in will-spam-for-food.eu.org]

[107.189.14.8 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[107.189.14.8 listed in dnsbl.ahbl.org]

[107.189.14.8 listed in dnsbl.ahbl.org]

[107.189.14.8 listed in dnsbl.ahbl.org]

[107.189.14.8 listed in dnsbl.ahbl.org]

[102.211.42.66 listed in dnsbl.ahbl.org]

[102.211.42.66 listed in dnsbl.ahbl.org]

[102.211.42.66 listed in dnsbl.ahbl.org]

[102.211.42.66 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[107.189.14.8 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[107.189.14.8 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[107.189.14.8 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[107.189.14.8 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[102.211.42.66 listed in sbl-xbl.spamhaus.org]

[102.211.42.66 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[102.211.42.66 listed in zen.spamhaus.org]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 TRACKER_ID BODY: Incorporates a tracking ID number

0.3 LONGWORD BODY: Uses overlong words

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.5 PDS_BTC_ID FP reduced Bitcoin ID

0.0 T_REMOTE_IMAGE Message contains an external image

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

0.0 GB_HASHBL_BTC Message contains BTC address found on BTCBL

[13zr4irb2q2fordhzgawr1p77eeedubcu3]

Subject: {SPAM?} The cry of hunger is louder than bombs












" />

CryptoCare Foundation — Give Directly






rgin:0; padding:0; width:100% !important; background:#f6f8fb; font-family:A=

rial, Helvetica, sans-serif; color:#111827">


nd:#f6f8fb" class=3D"wrapper">

Nigerian Spam from Google Gmail Part 2

Posted by Dave Yadallee on
--0000000000009f5cbe06455d0c0c

Content-Type: text/plain; charset="UTF-8"



With Due Respect,



It's my pleasure to meet you,I humbly write to solicit for your partnership

and assistance with divine confidence that you are a reliable and honest

person who will be capable for this important business transaction,

believing also that you will not let me down either now or in the future.



I got your email address through an online directory and I am contacting

you personal because I seriously need your help.



My name is Miss.Zalanda Mubarak. I am a 20 years old girl and the only

daughter of my late parents, In my culture, when a man dies, if he doesn't

have a male child, the brothers share his property leaving both the wife

and the daughters empty handed. This is the exact case with me as I am the

only daughter of my father. I lost my mother when I was barely a year old

and my father refused to re-marry because he felt solely responsible for my

mothers death and My father died during the political crises in my country,

My father worked for many years in an oil drilling company and before he

died he told me that he deposited his live saves money in his bank and use

my name as his only daughter as next of kin and he instructed me to seek

for a foreign partner in a country of my choice where I will transfer this

money and use it for future investment purpose that is why I want you to

help me transfer this money to your bank account in your country and also

help me come to your country to continue my education.



This is because after the death of my parents, my wicked uncle wants to

kill me and take over all my father property's from me because I have no

one to defend me. He has taken the house in the village and the one in town

and other things. I have reported my uncle to the local police here in my

country, but nothing has been done since then. I am writing this mail from

a local hotel where I am presently hiding for my safety.



I am willing to offer you 20% out of the Total Fund just for your

Assistance for helping me regarding the transfer and investment of this

Fund in your country and i will offer 10% of the total fund to the

orphanage over there in your country,while my 70% will invest in profitable

business and will be managing by you while I continue my studies. Endeavor

to let me know your decision.



Your urgent response will be appreciated. Talk to you more sincerely

with regards.Miss.Mubarak



--0000000000009f5cbe06455d0c0c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



With Due Respect,

It's my pleasure to meet you,=

I humbly write to solicit for your partnership and assistance with divine c=

onfidence that you are a reliable and honest person who will be capable for=

this important business transaction, believing also that you will not let =

me down either now or in the future.

I got your email address throug=

h an online directory and I am contacting you personal because I seriously =

need your help.

My name is Miss.Zalanda Mubarak. I am a 20 years old=

girl and the only daughter of my late parents, In my culture, when a man d=

ies, if he doesn't have a male child, the brothers share his property l=

eaving both the wife and the daughters empty handed. This is the exact case=

with me as I am the only daughter of my father. I lost my mother when I wa=

s barely a year old and my father refused to re-marry because he felt solel=

y responsible for my mothers death and My father died during the political =

crises in my country, My father worked for many years in an oil drilling co=

mpany and before he died he told me that he deposited his live saves money =

in his bank and use my name as his only daughter as next of kin and he inst=

ructed me to seek for a foreign partner in a country of my choice where I w=

ill transfer this money and use it for future investment purpose that is wh=

y I want you to help me transfer this money to your bank account in your co=

untry and also help me come to your country to continue my education.

r>This is because after the death of my parents, my wicked uncle wants to k=

ill me and take over all my father property's from me because I have no=

one to defend me. He has taken the house in the village and the one in tow=

n and other things. I have reported my uncle to the local police here in my=

country, but nothing has been done since then. I am writing this mail from=

a local hotel where I am presently hiding for my safety.

I am willi=

ng to offer you 20% out of the Total Fund just for your Assistance for help=

ing me regarding the transfer and investment of this Fund in your country a=

nd i will offer 10% of the total fund to the orphanage over there in your c=

ountry,while my 70% will invest in profitable business and will be managing=

by you while I continue my studies. Endeavor to let me know your decision.=



Your urgent response will be appreciated. Talk to you more sincerel=

y
with regards.Miss.Mubarak




--0000000000009f5cbe06455d0c0c--

Nigerian Spam from Google Gmail Part 1

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 07 Dec 2025 12:35:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vSKWv-00000000ENf-1n58

for dave@doctor.nl2k.ab.ca;

Sun, 07 Dec 2025 12:34:49 -0700

Resent-From: The Doctor

Resent-Date: Sun, 7 Dec 2025 12:34:49 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f51.google.com ([209.85.167.51]:42149)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vSFGf-00000000Pkb-10Le

for sales@netknow.ca;

Sun, 07 Dec 2025 06:57:57 -0700

Received: by mail-lf1-f51.google.com with SMTP id 2adb3069b0e04-595819064cdso5339222e87.0

for ; Sun, 07 Dec 2025 05:56:54 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1765115807; x=1765720607; darn=netknow.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=5xSmkMGaBBJBG/udJm38i+WYqa1Ee5lBsOaAr21tRK0=;

b=NEBfyBUTGfl4oHxuZKY2VuPR7sqabvF9SuDnut8lYGqOImuNfNCS2x11CCkGbh5YKD

NT337jQgX4EoSo3HLEfKfQGwuQBE0Yj9kRax2qNZtjbp5YeidRpjyz1xSBGVSRHGsw4L

c1bW2aUOHpzeIyM5Vmxzha3GldN6oof3/IwQQ2BkU30PG93fzXQgPcpERk7uhL6AZbV2

gCSbv3ut1XkpZypTyIAOb6lQxJDdnrpfbP07JYBEaX8d3jSxm4xUOIT3Qo+lnyszXKnU

fWOGkLXCJ5GcBzaSVzrDnee+XvWrJnAdWSYaL3sf2bXixhKpAxO7BZLTO8mYFDg0aAR+

I9Ow==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765115807; x=1765720607;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=5xSmkMGaBBJBG/udJm38i+WYqa1Ee5lBsOaAr21tRK0=;

b=l8guc8UmV3vZklHKWzR815asc6Ps4ddd2czeOPhZIR8qsUC+CFxTHud/sLEmNrk1jz

PZzKI8BTuN12jplbptTDUU/d3DphPvrtVkE5VBhx8Eb9vIb3+s5LyoYNlaXUn+ro7rIN

1/vLn3rPOlo/qwa7XKNADcvOgeLcXtwUQbcghLIiaPoUStEfVW5ETOW1QP5tHFmEnvFB

ge8EV5dM57ZIbEBASgIVn7saxTzjUsCbPKmFxfbxzTGShGMwWfKimtRw/2lBf6aFXkUf

ZyJqHOipdyYrBNe5Ef/aXyECsW/ahv/rTDfHX/N8TWrCy6pbslLV4qIuQSDbG8mGO9dV

MFgg==

X-Forwarded-Encrypted: i=1; AJvYcCUcE01/r1LgOS/3x8gdowVcCDuyiifaOKsY7T5Yd/1ZnHfcga2TBjG4Z+21DoR/wWsWyC5b0w==@netknow.ca

X-Gm-Message-State: AOJu0YwXwwzLNtLKlzy4ONXNviMMKuRD4NwZpq5r0kECyrkQ3vpxnh2d

qKJufWrpQOGrfjZ8+afnEUTVw9D/La3uMWNKUnK/6D2aHdeEXbSJaooFptX1GkjhV7QP1+XYbim

Byn0wbpb2EVerHH74JFDoSry6iXQ/1xM=

X-Gm-Gg: ASbGncscGs/sgziK/WwcOtNrfQwjduGIKeqkpNGgds8dJmcrKII4zq2v4wjH/rwtPt2

41aJOXOGDjijnhdO8qWOYaTpveQvBYu28vGhvN3x7YdgyhZIdtnkaLkhxobc+qpZg2cfA3IJMCp

HPD6Jh9I4ciTgHf6Q9HL7reREDtS4AUh9og+Y8U132iteUTvXtrmaeR6dOisC7h/IqvR1PZdoO9

PsL8J6L2oI4/uoH3Et5dArUbfH1qQREqlH4ThFTQy0mv7KTjJLPJyugHKPvBF5DRrGttccSNUir

X-Google-Smtp-Source: AGHT+IFZQ5pgH5I4UNCCdo5v/r+i477KXdd9sn4XFkMyyoYYWV0xFG5ys2aSrdngy7ljfLRf6+bUz0dfT88t7R4sZNs=

X-Received: by 2002:a05:6512:3a84:b0:598:7e89:24d with SMTP id

2adb3069b0e04-5987e890285mr1632324e87.25.1765115806308; Sun, 07 Dec 2025

05:56:46 -0800 (PST)

MIME-Version: 1.0

Reply-To: mmisszalanda@gmail.com

From: "Mis.Zalanda Mubarak"

Date: Sun, 7 Dec 2025 13:51:02 +0100

X-Gm-Features: AQt7F2oZKn7AeXqp7RfrIXAFtbTuxfyydpx11ApYDTxhDw7BaPb0rQQdqztlS_4

Message-ID:

Subject: Hi,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000009f5cbe06455d0c0c"

Bcc: sales@netknow.ca

X-Spam_score: 23.0

X-Spam_score_int: 230

X-Spam_bar: +++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: With Due Respect, It's my pleasure to meet you,I humbly write

to solicit for your partnership and assistance with divine confidence that

you are a reliable and honest person who will be capable for this important

busin [...]



Content analysis details: (23.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.51 listed in will-spam-for-food.eu.org]

[209.85.167.51 listed in will-spam-for-food.eu.org]

[209.85.167.51 listed in will-spam-for-food.eu.org]

[209.85.167.51 listed in will-spam-for-food.eu.org]

[209.85.167.51 listed in will-spam-for-food.eu.org]

[209.85.167.51 listed in will-spam-for-food.eu.org]

[209.85.167.51 listed in will-spam-for-food.eu.org]

[209.85.167.51 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.51 listed in dnsbl.ahbl.org]

[209.85.167.51 listed in dnsbl.ahbl.org]

[209.85.167.51 listed in dnsbl.ahbl.org]

[209.85.167.51 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.51 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.51 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.51 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.51 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.51 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[huntstrongr(at)gmail.com]

2.6 HK_SCAM_N13 BODY: No description available.

0.9 URG_BIZ BODY: Contains urgent matter

2.5 HK_SCAM_N2 BODY: No description available.

0.6 J_CHICKENPOX_31 BODY: 3alpha-pock-1alpha

0.6 J_CHICKENPOX_75 BODY: 7alpha-pock-5alpha

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.51 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HK_SCAM No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

3.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)

2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Hi,



Nigerian Spam from Google Gmail Part 2

Posted by Dave Yadallee on


--0000000000009f5cbe06455d0c0c

Content-Type: text/plain; charset="UTF-8"



With Due Respect,



It's my pleasure to meet you,I humbly write to solicit for your partnership

and assistance with divine confidence that you are a reliable and honest

person who will be capable for this important business transaction,

believing also that you will not let me down either now or in the future.



I got your email address through an online directory and I am contacting

you personal because I seriously need your help.



My name is Miss.Zalanda Mubarak. I am a 20 years old girl and the only

daughter of my late parents, In my culture, when a man dies, if he doesn't

have a male child, the brothers share his property leaving both the wife

and the daughters empty handed. This is the exact case with me as I am the

only daughter of my father. I lost my mother when I was barely a year old

and my father refused to re-marry because he felt solely responsible for my

mothers death and My father died during the political crises in my country,

My father worked for many years in an oil drilling company and before he

died he told me that he deposited his live saves money in his bank and use

my name as his only daughter as next of kin and he instructed me to seek

for a foreign partner in a country of my choice where I will transfer this

money and use it for future investment purpose that is why I want you to

help me transfer this money to your bank account in your country and also

help me come to your country to continue my education.



This is because after the death of my parents, my wicked uncle wants to

kill me and take over all my father property's from me because I have no

one to defend me. He has taken the house in the village and the one in town

and other things. I have reported my uncle to the local police here in my

country, but nothing has been done since then. I am writing this mail from

a local hotel where I am presently hiding for my safety.



I am willing to offer you 20% out of the Total Fund just for your

Assistance for helping me regarding the transfer and investment of this

Fund in your country and i will offer 10% of the total fund to the

orphanage over there in your country,while my 70% will invest in profitable

business and will be managing by you while I continue my studies. Endeavor

to let me know your decision.



Your urgent response will be appreciated. Talk to you more sincerely

with regards.Miss.Mubarak



--0000000000009f5cbe06455d0c0c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



With Due Respect,

It's my pleasure to meet you,=

I humbly write to solicit for your partnership and assistance with divine c=

onfidence that you are a reliable and honest person who will be capable for=

this important business transaction, believing also that you will not let =

me down either now or in the future.

I got your email address throug=

h an online directory and I am contacting you personal because I seriously =

need your help.

My name is Miss.Zalanda Mubarak. I am a 20 years old=

girl and the only daughter of my late parents, In my culture, when a man d=

ies, if he doesn't have a male child, the brothers share his property l=

eaving both the wife and the daughters empty handed. This is the exact case=

with me as I am the only daughter of my father. I lost my mother when I wa=

s barely a year old and my father refused to re-marry because he felt solel=

y responsible for my mothers death and My father died during the political =

crises in my country, My father worked for many years in an oil drilling co=

mpany and before he died he told me that he deposited his live saves money =

in his bank and use my name as his only daughter as next of kin and he inst=

ructed me to seek for a foreign partner in a country of my choice where I w=

ill transfer this money and use it for future investment purpose that is wh=

y I want you to help me transfer this money to your bank account in your co=

untry and also help me come to your country to continue my education.

r>This is because after the death of my parents, my wicked uncle wants to k=

ill me and take over all my father property's from me because I have no=

one to defend me. He has taken the house in the village and the one in tow=

n and other things. I have reported my uncle to the local police here in my=

country, but nothing has been done since then. I am writing this mail from=

a local hotel where I am presently hiding for my safety.

I am willi=

ng to offer you 20% out of the Total Fund just for your Assistance for help=

ing me regarding the transfer and investment of this Fund in your country a=

nd i will offer 10% of the total fund to the orphanage over there in your c=

ountry,while my 70% will invest in profitable business and will be managing=

by you while I continue my studies. Endeavor to let me know your decision.=



Your urgent response will be appreciated. Talk to you more sincerel=

y
with regards.Miss.Mubarak




--0000000000009f5cbe06455d0c0c--

Nigerian Spam from Google Gmail Part 1

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 07 Dec 2025 12:35:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vSKWb-00000000EKT-2Zx8

for dave@doctor.nl2k.ab.ca;

Sun, 07 Dec 2025 12:34:29 -0700

Resent-From: The Doctor

Resent-Date: Sun, 7 Dec 2025 12:34:29 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f52.google.com ([209.85.167.52]:42383)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vSFGf-00000000PkO-126u

for doctor@doctor.nl2k.ab.ca;

Sun, 07 Dec 2025 06:57:57 -0700

Received: by mail-lf1-f52.google.com with SMTP id 2adb3069b0e04-59583505988so4548297e87.1

for ; Sun, 07 Dec 2025 05:56:54 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1765115807; x=1765720607; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=5xSmkMGaBBJBG/udJm38i+WYqa1Ee5lBsOaAr21tRK0=;

b=kxaW/nbAQDbwgIQPQN/WVtkRicragey5SC2nx1jn9Xkjpp9W9qZM4bRw6FiTv6EOA/

qOfX09p5XKdH4CfrhsIL00qduwfA8R2FPo9N9O18l/m0jZzsXBsHAFwgtDfWPY4Uy9Ly

/mbSb30JXh46I6Jnujsvb5BYYI8DhJcQsuHt0pHv7Q8KFK7FAzR2OwfUBBw8JCBQ3hcr

ciG0iDIbL/A0ceKvaIDsXfdWSYpVarHYHSXGvONxsWftBY0ZBHL0ft9pLagsRtDrNr65

R3mwtGlr28ejvaIK2AxEYxlIt/bCl3o44Wj3ZKqPXt2UxSyc8zXP0KEk1Jvsk0l6DO4t

ApeA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765115807; x=1765720607;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=5xSmkMGaBBJBG/udJm38i+WYqa1Ee5lBsOaAr21tRK0=;

b=tohhZlN4i4Cjv1O8PWLdYBwOXS/qLmE0h6vhMiRGq45PFssP9stDfO0etMHfDhYD/s

V3mE7GdrIPVeRLQvQDrlhfViRJ+L6kznP0oarBgQygjigGIyrhkuGkCRIQHzZiX1H2QU

ZTAnfppG05ceUbtjIkuiwxpgpo8osot7idAAWGEjGzcdsOvKucaO+yIwQZuiYjg7Tsmv

dg4ms6XIgFMZdtIL/Cd+0t2pR+EZT7r328759OGtGcgd4k0SFS07q67AALO50AdwG4dJ

Y0+lE9Xhtr8GBSTjPW8pwKm8girjnbZQgmai5uw6Tj3Mf/zIWjK8OhAz6kNHW/xtDMdY

N3PA==

X-Forwarded-Encrypted: i=1; AJvYcCXa6jMCFr+Y6NUzlq9sit4I7O/1UFvKILObCNgnU6jmf885hrnprasxZYQBZhmuAdG4/pZRBZ8=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YxLVLfqzQjThepaZDHMHlPCL+1pKVFEsk//swAOng8AmiiKzkue

RTP4rwv5gMekoBlaXh/xUCpQi8ePiQ3pq0o2lGzLwFLj18chz8MVQQDj41+orAfB/gGryenjeXH

ae/ZT6H15l0NKGfw11Qbh7sqDG2F5z7Y=

X-Gm-Gg: ASbGncuoplcB+/+t9LO3b+s9H2gISHspd+kHLy/yyfdMb7hO2ymh7SsdXlukqsD1dmy

u9Arnh/8QAFZ5+6tNjQBv6w/GODWDHr4uLkR4VHwn0+H4ZEvXJIhHbMbAV3tlIb9CL7210l07Ii

VbCccxPGX0wyq016OVOLziDwOE8+SGsRpx0+po+xHtHe87abJWgC35XzHn0BmCF2jEvfTOpWIOv

q6qwQnTF275Kixod+T+HKAuEMUuWT4QKiJNNMXNVv9Yn4RoDz22nxQdQr9BZe4Tfboo6cSq2Xwk

X-Google-Smtp-Source: AGHT+IFZQ5pgH5I4UNCCdo5v/r+i477KXdd9sn4XFkMyyoYYWV0xFG5ys2aSrdngy7ljfLRf6+bUz0dfT88t7R4sZNs=

X-Received: by 2002:a05:6512:3a84:b0:598:7e89:24d with SMTP id

2adb3069b0e04-5987e890285mr1632324e87.25.1765115806308; Sun, 07 Dec 2025

05:56:46 -0800 (PST)

MIME-Version: 1.0

Reply-To: mmisszalanda@gmail.com

From: "Mis.Zalanda Mubarak"

Date: Sun, 7 Dec 2025 13:51:02 +0100

X-Gm-Features: AQt7F2oZKn7AeXqp7RfrIXAFtbTuxfyydpx11ApYDTxhDw7BaPb0rQQdqztlS_4

Message-ID:

Subject: Hi,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000009f5cbe06455d0c0c"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 23.0

X-Spam_score_int: 230

X-Spam_bar: +++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: With Due Respect, It's my pleasure to meet you,I humbly write

to solicit for your partnership and assistance with divine confidence that

you are a reliable and honest person who will be capable for this important

busin [...]



Content analysis details: (23.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.52 listed in will-spam-for-food.eu.org]

[209.85.167.52 listed in will-spam-for-food.eu.org]

[209.85.167.52 listed in will-spam-for-food.eu.org]

[209.85.167.52 listed in will-spam-for-food.eu.org]

[209.85.167.52 listed in will-spam-for-food.eu.org]

[209.85.167.52 listed in will-spam-for-food.eu.org]

[209.85.167.52 listed in will-spam-for-food.eu.org]

[209.85.167.52 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.52 listed in dnsbl.ahbl.org]

[209.85.167.52 listed in dnsbl.ahbl.org]

[209.85.167.52 listed in dnsbl.ahbl.org]

[209.85.167.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.52 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.52 listed in list.dnswl.org]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mubarakzalanda779(at)gmail.com]

2.6 HK_SCAM_N13 BODY: No description available.

0.9 URG_BIZ BODY: Contains urgent matter

2.5 HK_SCAM_N2 BODY: No description available.

0.6 J_CHICKENPOX_31 BODY: 3alpha-pock-1alpha

0.6 J_CHICKENPOX_75 BODY: 7alpha-pock-5alpha

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.52 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HK_SCAM No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)

Subject: {SPAM?} Hi,

Nigerian Spam from Google Gmail Part 2

Posted by Dave Yadallee on


--0000000000009f5cbe06455d0c0c

Content-Type: text/plain; charset="UTF-8"



With Due Respect,



It's my pleasure to meet you,I humbly write to solicit for your partnership

and assistance with divine confidence that you are a reliable and honest

person who will be capable for this important business transaction,

believing also that you will not let me down either now or in the future.



I got your email address through an online directory and I am contacting

you personal because I seriously need your help.



My name is Miss.Zalanda Mubarak. I am a 20 years old girl and the only

daughter of my late parents, In my culture, when a man dies, if he doesn't

have a male child, the brothers share his property leaving both the wife

and the daughters empty handed. This is the exact case with me as I am the

only daughter of my father. I lost my mother when I was barely a year old

and my father refused to re-marry because he felt solely responsible for my

mothers death and My father died during the political crises in my country,

My father worked for many years in an oil drilling company and before he

died he told me that he deposited his live saves money in his bank and use

my name as his only daughter as next of kin and he instructed me to seek

for a foreign partner in a country of my choice where I will transfer this

money and use it for future investment purpose that is why I want you to

help me transfer this money to your bank account in your country and also

help me come to your country to continue my education.



This is because after the death of my parents, my wicked uncle wants to

kill me and take over all my father property's from me because I have no

one to defend me. He has taken the house in the village and the one in town

and other things. I have reported my uncle to the local police here in my

country, but nothing has been done since then. I am writing this mail from

a local hotel where I am presently hiding for my safety.



I am willing to offer you 20% out of the Total Fund just for your

Assistance for helping me regarding the transfer and investment of this

Fund in your country and i will offer 10% of the total fund to the

orphanage over there in your country,while my 70% will invest in profitable

business and will be managing by you while I continue my studies. Endeavor

to let me know your decision.



Your urgent response will be appreciated. Talk to you more sincerely

with regards.Miss.Mubarak



--0000000000009f5cbe06455d0c0c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



With Due Respect,

It's my pleasure to meet you,=

I humbly write to solicit for your partnership and assistance with divine c=

onfidence that you are a reliable and honest person who will be capable for=

this important business transaction, believing also that you will not let =

me down either now or in the future.

I got your email address throug=

h an online directory and I am contacting you personal because I seriously =

need your help.

My name is Miss.Zalanda Mubarak. I am a 20 years old=

girl and the only daughter of my late parents, In my culture, when a man d=

ies, if he doesn't have a male child, the brothers share his property l=

eaving both the wife and the daughters empty handed. This is the exact case=

with me as I am the only daughter of my father. I lost my mother when I wa=

s barely a year old and my father refused to re-marry because he felt solel=

y responsible for my mothers death and My father died during the political =

crises in my country, My father worked for many years in an oil drilling co=

mpany and before he died he told me that he deposited his live saves money =

in his bank and use my name as his only daughter as next of kin and he inst=

ructed me to seek for a foreign partner in a country of my choice where I w=

ill transfer this money and use it for future investment purpose that is wh=

y I want you to help me transfer this money to your bank account in your co=

untry and also help me come to your country to continue my education.

r>This is because after the death of my parents, my wicked uncle wants to k=

ill me and take over all my father property's from me because I have no=

one to defend me. He has taken the house in the village and the one in tow=

n and other things. I have reported my uncle to the local police here in my=

country, but nothing has been done since then. I am writing this mail from=

a local hotel where I am presently hiding for my safety.

I am willi=

ng to offer you 20% out of the Total Fund just for your Assistance for help=

ing me regarding the transfer and investment of this Fund in your country a=

nd i will offer 10% of the total fund to the orphanage over there in your c=

ountry,while my 70% will invest in profitable business and will be managing=

by you while I continue my studies. Endeavor to let me know your decision.=



Your urgent response will be appreciated. Talk to you more sincerel=

y
with regards.Miss.Mubarak




--0000000000009f5cbe06455d0c0c--

Nigerian Spam from Google Gmail Part 1

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 07 Dec 2025 12:35:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vSKWm-00000000EMX-2ld8

for dave@doctor.nl2k.ab.ca;

Sun, 07 Dec 2025 12:34:40 -0700

Resent-From: The Doctor

Resent-Date: Sun, 7 Dec 2025 12:34:40 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f41.google.com ([209.85.167.41]:43321)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vSFGf-00000000PkX-12xv

for sales@nk.ca;

Sun, 07 Dec 2025 06:57:54 -0700

Received: by mail-lf1-f41.google.com with SMTP id 2adb3069b0e04-59577c4c7c1so4295219e87.1

for ; Sun, 07 Dec 2025 05:56:54 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1765115807; x=1765720607; darn=nk.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=5xSmkMGaBBJBG/udJm38i+WYqa1Ee5lBsOaAr21tRK0=;

b=XoMt060xi2FMutPXkh5JfqYVwP1mFCganW1SGciV0nu3R/NDqlDf4Mk8bK2o+G9MTW

fbF/KRsEar1+GRvnRKrSWR8NjYyLZv5sPYHrT5wRQQLMqa9rNXKyQ8rELiM//LopvrCF

/9gvd0EDe2NIsav9KppjUFclMFZBFjzDMbhVZlDs3FShzak+h/UkpXUAzVjvjazKfSNh

lBz3d0poDrri8kJtfHwAfzMQ874jHAJqHKWBI5LDR4OtmPHl7JLIdAd2PKloDNbo952E

myCgBZfEjBZw+lki2kmWm8aXa8YCcaSgF+jA1lSLz8haVbDHocEEkD+jy8Kvx10H4u57

sq+w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765115807; x=1765720607;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=5xSmkMGaBBJBG/udJm38i+WYqa1Ee5lBsOaAr21tRK0=;

b=MzCcNW3flPbMEFVjRn+Xi/shDsuzzMfFtM/1udZo1z3CuwAKfOZxRz12e7jgG8z3B/

mnjVJWgQQslXkXM8aJsaJF2yD6ammca1ZICY0AjllwZ3OaQBeZFYsvFz/YkUIRTSmDlD

Frp2/dtiy3gqywJtHj9LvQaRXvKykkXWCzxa3TGiVm57tpIOjAGLcm4TabHk/o+QuluZ

Kun6uP8plvzSNtOPOxf98sWzSkvqCW7lNamwAVYqqZ9a6JkN+T2HtkLjHo8ycVzL7GqQ

wDZvFHEP+VDNQmavc3xscKOtdoGnW1vhu/3tvCQ2V0w2uPWx/pmXfCR7i6LBk+NBzvxb

HcbA==

X-Forwarded-Encrypted: i=1; AJvYcCWun3T/JetRBECjNDit0x6pMolFrS/41AYNyfDo9zXbmRNwM4HXU8jWDabiNzSGLOJDV91r6g==@nk.ca

X-Gm-Message-State: AOJu0YyHZkSlVkd0d5yxuy5rAtXWcI69CU4fNsol1Oy9CqPlRU4LN8Ne

7TFKcC5vp+BCvlUxTno73kaqBsIOUjKPgJi/idUyGG4i1Ads3ssxHbvNq+QCZTr3qaTTgzyh5ny

5EA4Xrtetfnao2hrpriB857PMumCS0O0=

X-Gm-Gg: ASbGncuofR64XgIjUXOgITlDYnrZA2zKUStItSr8CG5BAf6bK/Gfx+BTT9WKXF2tMNj

TnsQn3xFK6jXCVukQXzP9kZbJ95ysOyLbv8OJAPV4SO7JBx1gRpFT+2Sry29l4ICO35uzP3MEiN

GAD9EhdxfbiBcdZok1ecOZhw5afjkLjkxJprY3i6LNNYK4QMU5X0SXPJxvHqD7GWjA35xbM4Tkl

nqppVN1Wov2vMk5itCfww/nDK53dL3J38LdQ3cuLLR56f8PF4+zULKeiXoCijcDPso5G/IOz2IB

X-Google-Smtp-Source: AGHT+IFZQ5pgH5I4UNCCdo5v/r+i477KXdd9sn4XFkMyyoYYWV0xFG5ys2aSrdngy7ljfLRf6+bUz0dfT88t7R4sZNs=

X-Received: by 2002:a05:6512:3a84:b0:598:7e89:24d with SMTP id

2adb3069b0e04-5987e890285mr1632324e87.25.1765115806308; Sun, 07 Dec 2025

05:56:46 -0800 (PST)

MIME-Version: 1.0

Reply-To: mmisszalanda@gmail.com

From: "Mis.Zalanda Mubarak"

Date: Sun, 7 Dec 2025 13:51:02 +0100

X-Gm-Features: AQt7F2oZKn7AeXqp7RfrIXAFtbTuxfyydpx11ApYDTxhDw7BaPb0rQQdqztlS_4

Message-ID:

Subject: Hi,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000009f5cbe06455d0c0c"

Bcc: sales@nk.ca

X-Spam_score: 23.0

X-Spam_score_int: 230

X-Spam_bar: +++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: With Due Respect, It's my pleasure to meet you,I humbly write

to solicit for your partnership and assistance with divine confidence that

you are a reliable and honest person who will be capable for this important

busin [...]



Content analysis details: (23.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.41 listed in will-spam-for-food.eu.org]

[209.85.167.41 listed in will-spam-for-food.eu.org]

[209.85.167.41 listed in will-spam-for-food.eu.org]

[209.85.167.41 listed in will-spam-for-food.eu.org]

[209.85.167.41 listed in will-spam-for-food.eu.org]

[209.85.167.41 listed in will-spam-for-food.eu.org]

[209.85.167.41 listed in will-spam-for-food.eu.org]

[209.85.167.41 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.41 listed in dnsbl.ahbl.org]

[209.85.167.41 listed in dnsbl.ahbl.org]

[209.85.167.41 listed in dnsbl.ahbl.org]

[209.85.167.41 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.41 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.41 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.41 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.41 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mubarakzalanda779(at)gmail.com]

2.6 HK_SCAM_N13 BODY: No description available.

0.9 URG_BIZ BODY: Contains urgent matter

2.5 HK_SCAM_N2 BODY: No description available.

0.6 J_CHICKENPOX_31 BODY: 3alpha-pock-1alpha

0.6 J_CHICKENPOX_75 BODY: 7alpha-pock-5alpha

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HK_SCAM No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

3.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)

2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Hi,

Nigerian Spam from Google Gmail Part 2

Posted by Dave Yadallee on
--0000000000009f5cbe06455d0c0c

Content-Type: text/plain; charset="UTF-8"



With Due Respect,



It's my pleasure to meet you,I humbly write to solicit for your partnership

and assistance with divine confidence that you are a reliable and honest

person who will be capable for this important business transaction,

believing also that you will not let me down either now or in the future.



I got your email address through an online directory and I am contacting

you personal because I seriously need your help.



My name is Miss.Zalanda Mubarak. I am a 20 years old girl and the only

daughter of my late parents, In my culture, when a man dies, if he doesn't

have a male child, the brothers share his property leaving both the wife

and the daughters empty handed. This is the exact case with me as I am the

only daughter of my father. I lost my mother when I was barely a year old

and my father refused to re-marry because he felt solely responsible for my

mothers death and My father died during the political crises in my country,

My father worked for many years in an oil drilling company and before he

died he told me that he deposited his live saves money in his bank and use

my name as his only daughter as next of kin and he instructed me to seek

for a foreign partner in a country of my choice where I will transfer this

money and use it for future investment purpose that is why I want you to

help me transfer this money to your bank account in your country and also

help me come to your country to continue my education.



This is because after the death of my parents, my wicked uncle wants to

kill me and take over all my father property's from me because I have no

one to defend me. He has taken the house in the village and the one in town

and other things. I have reported my uncle to the local police here in my

country, but nothing has been done since then. I am writing this mail from

a local hotel where I am presently hiding for my safety.



I am willing to offer you 20% out of the Total Fund just for your

Assistance for helping me regarding the transfer and investment of this

Fund in your country and i will offer 10% of the total fund to the

orphanage over there in your country,while my 70% will invest in profitable

business and will be managing by you while I continue my studies. Endeavor

to let me know your decision.



Your urgent response will be appreciated. Talk to you more sincerely

with regards.Miss.Mubarak



--0000000000009f5cbe06455d0c0c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



With Due Respect,

It's my pleasure to meet you,=

I humbly write to solicit for your partnership and assistance with divine c=

onfidence that you are a reliable and honest person who will be capable for=

this important business transaction, believing also that you will not let =

me down either now or in the future.

I got your email address throug=

h an online directory and I am contacting you personal because I seriously =

need your help.

My name is Miss.Zalanda Mubarak. I am a 20 years old=

girl and the only daughter of my late parents, In my culture, when a man d=

ies, if he doesn't have a male child, the brothers share his property l=

eaving both the wife and the daughters empty handed. This is the exact case=

with me as I am the only daughter of my father. I lost my mother when I wa=

s barely a year old and my father refused to re-marry because he felt solel=

y responsible for my mothers death and My father died during the political =

crises in my country, My father worked for many years in an oil drilling co=

mpany and before he died he told me that he deposited his live saves money =

in his bank and use my name as his only daughter as next of kin and he inst=

ructed me to seek for a foreign partner in a country of my choice where I w=

ill transfer this money and use it for future investment purpose that is wh=

y I want you to help me transfer this money to your bank account in your co=

untry and also help me come to your country to continue my education.

r>This is because after the death of my parents, my wicked uncle wants to k=

ill me and take over all my father property's from me because I have no=

one to defend me. He has taken the house in the village and the one in tow=

n and other things. I have reported my uncle to the local police here in my=

country, but nothing has been done since then. I am writing this mail from=

a local hotel where I am presently hiding for my safety.

I am willi=

ng to offer you 20% out of the Total Fund just for your Assistance for help=

ing me regarding the transfer and investment of this Fund in your country a=

nd i will offer 10% of the total fund to the orphanage over there in your c=

ountry,while my 70% will invest in profitable business and will be managing=

by you while I continue my studies. Endeavor to let me know your decision.=



Your urgent response will be appreciated. Talk to you more sincerel=

y
with regards.Miss.Mubarak




--0000000000009f5cbe06455d0c0c--

Nigerian Spam from Google Gmail Part 1

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 07 Dec 2025 12:35:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vSKWr-00000000ENU-3yUY

for dave@doctor.nl2k.ab.ca;

Sun, 07 Dec 2025 12:34:45 -0700

Resent-From: The Doctor

Resent-Date: Sun, 7 Dec 2025 12:34:45 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f50.google.com ([209.85.167.50]:42148)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vSFGf-00000000Pka-15Ef

for doctor@mail.nl2k.ab.ca;

Sun, 07 Dec 2025 06:57:54 -0700

Received: by mail-lf1-f50.google.com with SMTP id 2adb3069b0e04-595819064cdso5339225e87.0

for ; Sun, 07 Dec 2025 05:56:54 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1765115807; x=1765720607; darn=mail.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=5xSmkMGaBBJBG/udJm38i+WYqa1Ee5lBsOaAr21tRK0=;

b=mupHU2rlqKQbxyrw7psi9MckFJAcOJafMh+H2Hdtu2L4JIYd+0OkWl96dhmzl5pekh

+0BgZbpodlDknntA6UTJ1bMcjEfKdF/2HLsRNcBuxDaICo6rqqDGdvqr/Y3jvSlvZV3F

Si4xscaFv2aSxq6MYYP5txgfFB4ACsrD3BSKRmxJ3FHnVSZxKJoHOfdAkjBi8o8mD0Q+

4+wy7NImZ/lbSnvSUfO4SgVtpu3XKkhCerVAY2KMWva+EJ3YjhItKj1ye3fIfAAoFtSA

iykw8Wqe8hjLjP6rjlujzntbIpAkSshg/HCVKd2cjt7r1GTuJv+g2Jte+8eZ/640zvHy

ROig==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765115807; x=1765720607;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=5xSmkMGaBBJBG/udJm38i+WYqa1Ee5lBsOaAr21tRK0=;

b=ELMlvxtNZqPXl64PPNNNWUoK8iW0LG1xK9DdZDgYi5dum1Nq+8ObjzulrfDNPoYIaa

xXdI79k1zN2kKq1mzEXmfObN+Vj7OWIr5U1V5cI02g6tZ1j7u4Bodq/M1sAbhtsTs+gW

TrVU2h9oY8Ean9O6D0dG13opkaf3exMJOKWGJ1PW5Y6H4KVk49531F0de9hGq+kWFDl4

ygwKPyX5vj1oCPGLO5N0AKC1dgfSdoDQI82PfIvXeSDoTzz0SQYWcD2CvWLOpoeZAlyK

SKtfCknWwH6g+WIdF2U6GKpkSDWoQy6istz0phvwnLTCfd6UXtLVUt0syPIY+pJAefZ+

Pe2w==

X-Forwarded-Encrypted: i=1; AJvYcCVryLXzkAYC2Bh4CnJTcRFV/3r1O4vNMr+B9IiH3TTSwxh9pWU+USO5AwSogfK3oLL6gMEFST4=@mail.nl2k.ab.ca

X-Gm-Message-State: AOJu0Yx8Wg0QtGdTp/b72s4Ts0itpq1hMWm5WRK/mV08m8adA9/lb/Jf

6DPMhm15NOd7OYWtuaAeAK3ccqHz/9GHZhCbF5ipKpzxN459vetcgcfdp39ZOeFhiIzxBHCtkVc

VF+YnsPyKZX5ADC1Oe/cVQDxhlJd9smA=

X-Gm-Gg: ASbGnctqm/Ya3se+H/KWgYY1zXza1Zr+R8M6bNMHThNcC66q1cDY9cPx713jvPYTITK

WjzU1dviX48j3u25g0vNhqngajWeNdRiWvgXGTUFoo3cjU/UGiK8dGc2IkT2ylr6TKK7bOpG0Ve

bLDhZ77Xjibc8n5I2aEIoKkcZK4CuPHcbm9BMyFf8FOeKGwrRRrz/36xW7LIYit0uizQsN7DRDS

TnDCFx48fQScayJyhkw5bW1jQFse4/3WQpTUHCWB72wTGAGMWY77zPAroNyGHTHZpNjJdvrXiri

X-Google-Smtp-Source: AGHT+IFZQ5pgH5I4UNCCdo5v/r+i477KXdd9sn4XFkMyyoYYWV0xFG5ys2aSrdngy7ljfLRf6+bUz0dfT88t7R4sZNs=

X-Received: by 2002:a05:6512:3a84:b0:598:7e89:24d with SMTP id

2adb3069b0e04-5987e890285mr1632324e87.25.1765115806308; Sun, 07 Dec 2025

05:56:46 -0800 (PST)

MIME-Version: 1.0

Reply-To: mmisszalanda@gmail.com

From: "Mis.Zalanda Mubarak"

Date: Sun, 7 Dec 2025 13:51:02 +0100

X-Gm-Features: AQt7F2oZKn7AeXqp7RfrIXAFtbTuxfyydpx11ApYDTxhDw7BaPb0rQQdqztlS_4

Message-ID:

Subject: Hi,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000009f5cbe06455d0c0c"

Bcc: doctor@mail.nl2k.ab.ca

X-Spam_score: 23.0

X-Spam_score_int: 230

X-Spam_bar: +++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: With Due Respect, It's my pleasure to meet you,I humbly write

to solicit for your partnership and assistance with divine confidence that

you are a reliable and honest person who will be capable for this important

busin [...]



Content analysis details: (23.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.50 listed in will-spam-for-food.eu.org]

[209.85.167.50 listed in will-spam-for-food.eu.org]

[209.85.167.50 listed in will-spam-for-food.eu.org]

[209.85.167.50 listed in will-spam-for-food.eu.org]

[209.85.167.50 listed in will-spam-for-food.eu.org]

[209.85.167.50 listed in will-spam-for-food.eu.org]

[209.85.167.50 listed in will-spam-for-food.eu.org]

[209.85.167.50 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.50 listed in dnsbl.ahbl.org]

[209.85.167.50 listed in dnsbl.ahbl.org]

[209.85.167.50 listed in dnsbl.ahbl.org]

[209.85.167.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.50 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.50 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.50 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.50 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.50 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mubarakzalanda779(at)gmail.com]

2.6 HK_SCAM_N13 BODY: No description available.

0.9 URG_BIZ BODY: Contains urgent matter

2.5 HK_SCAM_N2 BODY: No description available.

0.6 J_CHICKENPOX_31 BODY: 3alpha-pock-1alpha

0.6 J_CHICKENPOX_75 BODY: 7alpha-pock-5alpha

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HK_SCAM No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)

Subject: {SPAM?} Hi,