Nigerian spam
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 05 Oct 2026 23:05:13 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from
id 1xDxMO-00000000ALy-0XLk
for dave@doctor.nl2k.ab.ca;
Mon, 05 Oct 2026 23:05:04 -0600
Resent-From: The Doctor
Resent-Date: Mon, 5 Oct 2026 23:05:04 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail.plesio.bg ([91.196.126.13]:43020)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.100.1 (FreeBSD))
(envelope-from
id 1xDrog-00000000PVe-0D6R
for doctor@doctor.nl2k.ab.ca;
Mon, 05 Oct 2026 17:09:31 -0600
Received: (qmail 21705 invoked by uid 1010); 5 Oct 2026 22:28:18 -0000
X-Qmail-Scanner-Diagnostics: from 154.118.73.164 (hostedben@plesio.bg@154.118.73.164) by dsrv103-plesio-db (envelope-from
(spamassassin: 3.4.0. perlscan: 2.11st.
Clear:RC:1(154.118.73.164):SA:0(2.6/5.0):.
Processed in 1.165895 secs); 05 Oct 2026 22:28:18 -0000
X-Spam-Status: No, hits=2.6 required=5.0
X-Spam-Level: ++
X-Spam-Report: SA TESTS
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: skyibfcu.com]
-1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
1.0 FROMSPACE Idiosyncratic "From" header format
0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
0.5 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
1.1 MONEY_NOHTML Lots of money in plain text
2.9 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
Received: from unknown (HELO ?192.168.1.4?) (hostedben@plesio.bg@154.118.73.164)
by mail.plesio.bg with ESMTPA; 5 Oct 2026 22:28:16 -0000
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: my subject
To: Recipients
From: " SKY FEDERAL CREDIT UNION BANK"
Date: Mon, 05 Oct 2026 15:28:07 -0700
Reply-To: admin@skyibfcu.com
Message-ID: <1791239296104121591@dsrv103-plesio-db>
X-Spam_score: 6.8
X-Spam_score_int: 68
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: CONTACT US HERE: admin@skyibfcu.com We received your file
to release your payment of twenty three million three hundred thousand dollars
to you, so you are to inform us on how you want to receive your payment,
because we are paying in f [...]
Content analysis details: (6.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[154.118.73.164 listed in will-spam-for-food.eu.org]
[154.118.73.164 listed in will-spam-for-food.eu.org]
[154.118.73.164 listed in will-spam-for-food.eu.org]
[154.118.73.164 listed in will-spam-for-food.eu.org]
[154.118.73.164 listed in will-spam-for-food.eu.org]
[154.118.73.164 listed in will-spam-for-food.eu.org]
[154.118.73.164 listed in will-spam-for-food.eu.org]
[154.118.73.164 listed in will-spam-for-food.eu.org]
[91.196.126.13 listed in will-spam-for-food.eu.org]
[91.196.126.13 listed in will-spam-for-food.eu.org]
[91.196.126.13 listed in will-spam-for-food.eu.org]
[91.196.126.13 listed in will-spam-for-food.eu.org]
[91.196.126.13 listed in will-spam-for-food.eu.org]
[91.196.126.13 listed in will-spam-for-food.eu.org]
[91.196.126.13 listed in will-spam-for-food.eu.org]
[91.196.126.13 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[154.118.73.164 listed in dnsbl.ahbl.org]
[154.118.73.164 listed in dnsbl.ahbl.org]
[154.118.73.164 listed in dnsbl.ahbl.org]
[154.118.73.164 listed in dnsbl.ahbl.org]
[91.196.126.13 listed in dnsbl.ahbl.org]
[91.196.126.13 listed in dnsbl.ahbl.org]
[91.196.126.13 listed in dnsbl.ahbl.org]
[91.196.126.13 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[154.118.73.164 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[154.118.73.164 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[154.118.73.164 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[154.118.73.164 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
1.0 FROMSPACE Idiosyncratic "From" header format
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
2.5 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
0.0 LOTS_OF_MONEY Huge... sums of money
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[91.196.126.13 listed in bl.score.senderscore.com]
Subject: {SPAM?} my subject
CONTACT US HERE: admin@skyibfcu.com
We received your file to release your payment of twenty three million three=
hundred thousand dollars to you, so you are to inform us on how you want t=
o receive your payment, because we are paying in four ways: 1, wire transfe=
r bank to bank, 2, certified international ATM MASTERCARD,
3, we can open online account for you and credit your full payment and dire=
ct you on how you can transfer to your local account, 4, we can deliver you=
r payment through diplomatic, to your door step in your country.
This is the picture of your payment in dollars, so you should try get back =
to us immediately, you can call us through whatsapp on +19342013826
We are here to serve you better
Regards
Dr. Daisy Romo