Nigerian spam from Google Gmail
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 23 Dec 2025 06:36:00 -0700
Received: from mail-vk1-f182.google.com ([209.85.221.182]:51636)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vY2XP-00000000KW5-0w1G
for dave@doctor.nl2k.ab.ca;
Tue, 23 Dec 2025 06:35:05 -0700
Received: by mail-vk1-f182.google.com with SMTP id 71dfb90a1353d-5598b58d816so3549044e0c.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1766496840; x=1767101640; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=LBhwOHD3hyKDx8Xu4yqCi4YkKZ+Fu//x5RYZqbsiFgU=;
b=Uhuu7sp+2q+PDifw/3US4sioLP79rLRDBP7V3HM4ZPQIgTEJ9w1BAfJtHcIO3aEy/h
398CreMUnlwpy4r+zBj/yL6xRh4THdWb5NEf+Ju1gYXHnUhXrub7ogYabHFSiWvfh2J+
6JPBG7ntlJ82rdOfREzqppijYlX0HVV0C7gsX9QrcdMDqk/dhWasZccW6xSiIbexnTJR
UEBZ5a4XuTUXGEOU/KOO6cp6Et8IHRVFhjB8qGWZbCunMT1pQHyuqTRu2LfO1lDXWhpd
n+QDeq4oi+wx80j+AyjoE0USpOM5eP9CjE7C5bvwgND29lt0zM2tQ4ZGHPvD3wcnJNNV
5UqQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1766496840; x=1767101640;
h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=LBhwOHD3hyKDx8Xu4yqCi4YkKZ+Fu//x5RYZqbsiFgU=;
b=N/XGCB5POm23MCUCYdpj/5Sdu1qcLguOVeE5TrGxr9GkC1p4NzsM4+RFcVocTRLXlT
yNyZQz4nEoztLDed8lnHOrP70eMxsin6h3rLN9Qr8+VL17NGZnjaSZxBCL2z5D+RuEFh
OFHimeaxaHrAIzuGmIFFGx9jbJEbt2Scp6QYLodYyjlUkHuDjOXBRlsZQRDpdfDR5JZ3
GeKoBwcpiGcNQ/hR5hDNW2aahYL2o6VlXdLKhwAG4tf9/WLv3vfHISggvQGqiYvHs0yl
DwOzjdRI7Z1YXeQbub8ILEU4gd4KVNJLSG1+yOJS7OS6gskGUFeaI1KLnc0fzFKimYdT
Mr1g==
X-Forwarded-Encrypted: i=1; AJvYcCVCkG3JvE6tHDpJ8loGti6UwqwhC4GsyUs6KVzJ+cFe0wRH2213BuzgJRWwvEXCPEtUX3lG@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0YxU4HKByiCGCP1jKvP2BzR2kSlE9Pv6GItBPYAtthyDhNzsw1zl
JVaIgHtduYaso1/O3MA531mGc/HW98e4Bx9db4FVs/pP+n5n/eTAb8hs/3Q7+PSLjbssYg+c/2/
mGUgPttk2N0Zja5DZEBKum5OaLblTQtI=
X-Gm-Gg: AY/fxX7GuygJ5CFpVwOD0qjh7e5cJuLqG+V5jgDMoAkN12Y2WiRKv9szBdSU3Nqg920
Pny95jXhNwd28IA6/2BtBzPsJVu35bbJrTUWrTmznmUut+BRHMDIjAnDFrID6R35xQbT4ZvYFld
hHAm0NUJhABn3P64p1K0ZD/7kUVapmaN2HzKpMmXUlVbDBOJtNjzyUTTd+CcOFZpo23knwiTb6+
P8mAo96MKQNvqgvpbxJ/CR3XIMVaCfFqvGlNZg63ysmdX58vu0/FAyrabPFRjz1Ba/wP+FhQ/77
3VoIufnE/g3BG/ogyK/FxBOgiIx9V2OiLbAIBCtEe0U=
X-Google-Smtp-Source: AGHT+IGYEn4fOqSwFUCR2XFW4pubYTBmlUI5WLzOyyyP2v3sPRpLyy53iIYIIgVTk4YSXeAVt+27KHkwn/no0jNa+nY=
X-Received: by 2002:a05:6122:4f8b:b0:55f:f2f3:693c with SMTP id
71dfb90a1353d-5615bcf1901mr5315764e0c.3.1766496839368; Tue, 23 Dec 2025
05:33:59 -0800 (PST)
MIME-Version: 1.0
Reply-To: madimichel13@gmail.com
From: Michel Madi
Date: Wed, 24 Dec 2025 01:27:02 +0000
X-Gm-Features: AQt7F2rCncIRhfjQVFO4JaGfOPTToHHkfupvceIM3efs3Utsx3YGteEaeVv-KQs
Message-ID:
Subject: Proposal
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000009b870c06469e9897"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 24.6
X-Spam_score_int: 246
X-Spam_bar: ++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, Let me start by introducing myself, I am Mr.
Michel Madi Manager of Bank of Africa Burkina Faso. I am writing you this
letter based on the latest development at my Department which I will like
to bring to your personal edification. (7.5 million U.S Dollars transfer claims).
This is a legitimate t [...]
Content analysis details: (24.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.221.182 listed in dnsbl.ahbl.org]
[209.85.221.182 listed in dnsbl.ahbl.org]
[209.85.221.182 listed in dnsbl.ahbl.org]
[209.85.221.182 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.221.182 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.221.182 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.221.182 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.221.182 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.221.182 listed in will-spam-for-food.eu.org]
[209.85.221.182 listed in will-spam-for-food.eu.org]
[209.85.221.182 listed in will-spam-for-food.eu.org]
[209.85.221.182 listed in will-spam-for-food.eu.org]
[209.85.221.182 listed in will-spam-for-food.eu.org]
[209.85.221.182 listed in will-spam-for-food.eu.org]
[209.85.221.182 listed in will-spam-for-food.eu.org]
[209.85.221.182 listed in will-spam-for-food.eu.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[madimich102(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[madimichel13(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[madimich102(at)gmail.com]
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.221.182 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.221.182 listed in wl.mailspike.net]
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_MONEY_PERCENT X% of a lot of money for you
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 MONEY_FORM Lots of money if you fill out a form
0.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.8 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
Subject: {SPAM?} Proposal
--0000000000009b870c06469e9897
Content-Type: text/plain; charset="UTF-8"
Dear Friend,
Let me start by introducing myself, I am Mr. Michel Madi Manager of Bank of
Africa Burkina Faso.
I am writing you this letter based on the latest development at my
Department which I will like to bring to your personal edification. (7.5
million U.S Dollars transfer claims). This is a legitimate transaction and
I agreed to offer you 40% of this Money as my foreign partner after
confirmation of the fund in your bank account, if you are interested, get
back to me with the following
Details below
(1)Your age........
(2)Your occupation.....
(3)Your marital status.....
(4)Your full residential address.......
(5)Your private phone and fax number and your complete name.......
As soon as I receive these data's, I will forward to you the Application
form which you will complete and send to the bank to commence the
processing of the transfer; you can get back to me through this my private
email address (madimichel13@gmail.com)
Best Regard
Mr. Michel Madi
--0000000000009b870c06469e9897
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Let me start by introducing myself, I =
am Mr. Michel Madi Manager of Bank of Africa Burkina Faso.
I am writ=
ing you this letter based on the latest development at my Department which =
I will like to bring to your personal edification. (7.5 million U.S Dollars=
transfer claims). This is a legitimate transaction and I agreed to offer y=
ou 40% of this Money as my foreign partner after confirmation of the fund i=
n your bank account, if you are interested, get back to me with the followi=
ng
Details below
(1)Your age........
(2)Your occupati=
on.....
(3)Your marital status.....
(4)Your full residential =
address.......
(5)Your private phone and fax number and your complet=
e name.......
As soon as I receive these data's, I will forward =
to you the Application form which you will complete and send to the bank to=
commence the processing of the transfer; you can get back to me through th=
is my private email address (madi=
michel13@gmail.com)
Best Regard
Mr. Michel Madi
<=
br>
--0000000000009b870c06469e9897--