Nigerian Spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 03 Feb 2025 06:46:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tewlf-00000000A0i-2pVE

for dave@doctor.nl2k.ab.ca;

Mon, 03 Feb 2025 06:45:39 -0700

Resent-From: The Doctor

Resent-Date: Mon, 3 Feb 2025 06:45:39 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f65.google.com ([209.85.218.65]:44535)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tevQi-000000006XT-1YuC

for doctor@doctor.nl2k.ab.ca;

Mon, 03 Feb 2025 05:20:00 -0700

Received: by mail-ej1-f65.google.com with SMTP id a640c23a62f3a-ab737e5674bso81470966b.1

for ; Mon, 03 Feb 2025 04:18:06 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1738585080; x=1739189880; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=dVK8dxwqkMB8/izuoDJiNZ7Y9TtVnyhC2ENORj01bvw=;

b=OEFfKL2bdVzEBIp6Rh5g+IlcSn7mmy/0gBb+e+OywI5DTRk47E8wm+VCboBhjq3RrQ

+VJDsbbGClyeGamiT6Ki1VdCLKv6r6nz37N0rwz5yB7AIinG1QUqklAn6uJh0w2RJxJ7

HtvALZywcSzP8IDvpYRmm2hdykaYHk3lkbS0PunN384owoo/ykvorERfaRyL4hj36ELS

m3mQE9i8EzLWWLqQUzUFe2L6JeZz8I63v5+33XuV+cgLZV33JXpu6e8TkKSk0BLUSsIp

bvWUsaLel1vGD9RYsRxYDSqZwTmTURDh9FI3lv2WZT/qo/2+j/bTd2Z/hWa8fXCagpTk

ZSKA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1738585080; x=1739189880;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=dVK8dxwqkMB8/izuoDJiNZ7Y9TtVnyhC2ENORj01bvw=;

b=PnIK/8bb33CMq/vvcSARJ/pithg41O4SrAy48vh/TjSz6N8FP7GqwVJ4tsUWNfKiBx

xqWjk1yli97ADeDUQDZ/x96Q8FhBnZ1FKxSaNDvJDT7fvpLxDtc9pLHtsfHFt/iSCMDX

TCe/FWQW0RHw1ghnInNWScVe8iS2UpnFl7Yx0yUurmUYjUV09Cpsf9bzVPHHQXY2nskK

/p6tTz3YBceTBMmdNDIQMgdvfDJEVLwirxl8/wtnoPmfsCQDQMoYon7b4KGs865sbRn+

l0YkDnB4webrjBi6KpReEAPS+eM8mS6UftCd/bQTegeGjtPotGTFXj1afFjBrvo7mHoZ

rbXw==

X-Forwarded-Encrypted: i=1; AJvYcCXR9u/XvvL+w1W3xYUw3clVqiRpe3hsZtYGA09VXZT2yABYxRhgjHI0Cft7LIUefI1r4UlusUo=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YyfFvfWE6yUEIY3YiX4azsL4Yqc71qEq8hwkxTmj69WxzqTnN/Q

PbsJqRR381i3F/o9taou5rlPnZ8fC6IlcCYTpoj39fIa6tE92LpgaFYDht0QL8ZhGHdAi4a9ZpL

7JBxvctk6Ttka54bV7I/cgxGQeCAd2O6JG3EBpH7L

X-Gm-Gg: ASbGncvmKz4i1sRCdTX2CAUAculEjfh92a4N1+i/NtAGtWk86Zt+z+1qsKhGFt1j7qF

xkWvzoS+eOWgiRBZ6IN+HKG9kZXBM6nVJ/ufn9VvoGUk78QyXe05Qw9NcOhT8yKbGbj6XdDzEcQ

==

X-Google-Smtp-Source: AGHT+IGOKLYYLbGC5ngVj+WT3Ps4pqTIqNKnH+Fa1ie+d+skdOdpU6OFJ1Pq8cYpjJd24EGIKkILnQ7Z80ZKWaKxINk=

X-Received: by 2002:a05:651c:242:b0:300:360b:bc36 with SMTP id

38308e7fff4ca-3079694bae0mr67324541fa.23.1738584773332; Mon, 03 Feb 2025

04:12:53 -0800 (PST)

MIME-Version: 1.0

Reply-To: adrveronicaamadi@gmail.com

From: "Dr.Mrs. Veronica Amadi JP"

Date: Mon, 3 Feb 2025 13:09:14 +0100

X-Gm-Features: AWEUYZlPB7b0RKonZ8CvQAUX5RTsym7_2A492_u92_AfmBkq0T7z7wETL--dhcs

Message-ID:

Subject: Re: From Dr.Mrs. Veronica Amadi JP

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000d39885062d3bcf33"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 12.7

X-Spam_score_int: 127

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dearest, This might come to you as a surprise but what I'm

about telling you is nothing but the reality about your fund which has been

held for so long with the Central Bank of Nigeria. Do you know that all the

money you have been sending to the officials for one certificate clearance

or the other is being used against you?



Content analysis details: (12.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.218.65 listed in will-spam-for-food.eu.org]

[209.85.218.65 listed in will-spam-for-food.eu.org]

[209.85.218.65 listed in will-spam-for-food.eu.org]

[209.85.218.65 listed in will-spam-for-food.eu.org]

[209.85.218.65 listed in will-spam-for-food.eu.org]

[209.85.218.65 listed in will-spam-for-food.eu.org]

[209.85.218.65 listed in will-spam-for-food.eu.org]

[209.85.218.65 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.218.65 listed in dnsbl.ahbl.org]

[209.85.218.65 listed in dnsbl.ahbl.org]

[209.85.218.65 listed in dnsbl.ahbl.org]

[209.85.218.65 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.218.65 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.218.65 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.218.65 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.218.65 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.218.65 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.218.65 listed in sa-accredit.habeas.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.218.65 listed in sa-trusted.bondedsender.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.218.65 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.218.65 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.218.65 listed in bl.score.senderscore.com]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[jonbasil001(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[jonbasil001(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_HK_NAME_FM_DR No description available.

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

3.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)

2.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Re: From Dr.Mrs. Veronica Amadi JP



--000000000000d39885062d3bcf33

Content-Type: text/plain; charset="UTF-8"



Dearest,



This might come to you as a surprise but what I'm about telling you is

nothing but the reality about your fund which has been held for so long

with the Central Bank of Nigeria.



Do you know that all the money you have been sending to the officials for

one certificate clearance or the other is being used against you?



Well, this might sound strange but I am taking this bold step because of my

religious belief as a Christian. The truth is there are a lot of forces

working against you right from the last central bank Governor and the

current Governor with other top officials of all the commercial banks in

Nigeria, they have been frustrating you by delaying your payment.



There is a way I can assist you get your fund without further delay and

avoid unnecessary expenses; it is risky on my own-side to exposes the

secret of authorities but one has to take it because I am not happy as

things is going against a humanity, I have directed many people through

this way, and they receive their long-awaited outstanding payment.



Get back to me as soon as you get this mail so that I will be in a better

position to direct you what to do so you will receive your funds. Waiting

for your immediate reply to this address ( adrveronicaamadi@gmail.com ).



Yours sister in the lord

Dr.Mrs. Veronica Amadi JP.



--000000000000d39885062d3bcf33

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






W-avf gmail-tS-tW gmail-tS-tY" aria-label=3D"Message Body" role=3D"textbox"=

aria-multiline=3D"true" style=3D"direction:ltr;min-height:288px" tabindex=

=3D"1" aria-controls=3D":qh" aria-expanded=3D"false">Dearest,

This m=

ight come to you as a surprise but what I'm about telling you is nothin=

g but the reality about your fund which has been held for so long with the =

Central Bank of Nigeria.

Do you know that all the money you have bee=

n sending to the officials for one certificate clearance or the other is be=

ing used against you?

Well, this might sound strange but I am taking=

this bold step because of my religious belief as a Christian. The truth is=

there are a lot of forces working against you right from the last central =

bank Governor and the current Governor with other top officials of all the =

commercial banks in Nigeria, they have been frustrating you by delaying you=

r payment.

There is a way I can assist you get your fund without fur=

ther delay and avoid unnecessary expenses; it is risky on my own-side to ex=

poses the secret of authorities but one has to take it because I am not hap=

py as things is going against a humanity, I have directed many people throu=

gh this way, and they receive their long-awaited outstanding payment.

r>Get back to me as soon as you get this mail so that I will be in a better=

position to direct you what to do so you will receive your funds. Waiting =

for your immediate reply to this address (
di@gmail.com">adrveronicaamadi@gmail.com
).

Yours sister in the =

lord
Dr.Mrs. Veronica Amadi JP.








--000000000000d39885062d3bcf33--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA