Nigerian Spam from Google Gmail
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 05 Apr 2026 13:08:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1w9SoJ-00000000FJ9-3OMY
for dave@doctor.nl2k.ab.ca;
Sun, 05 Apr 2026 13:07:03 -0600
Resent-From: The Doctor
Resent-Date: Sun, 5 Apr 2026 13:07:03 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yx1-f53.google.com ([74.125.224.53]:48610)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1w9Pvb-000000006Q7-2fiJ
for doctor@doctor.nl2k.ab.ca;
Sun, 05 Apr 2026 10:02:33 -0600
Received: by mail-yx1-f53.google.com with SMTP id 956f58d0204a3-64ef161129bso2562583d50.1
for
ARC-Seal: i=1; a=rsa-sha256; t=1775404890; cv=none;
d=google.com; s=arc-20240605;
b=jRTk1sVe0rabkPTcwcCsJOXywTOG6f1TM4/yUiM3c1uN7uuuy2xxtzZusAfpgg6DiP
H5XJpxsi4FiMeNq6XGi+ysLFw9FZgTfd7hBKXjMzuPgQdVHwhwwoVPJuA2R/q9xcgQlu
leYuSHPTiUGwFg9uueDi/fwGMAwwkZhZ2cNMpBqENLML8nsOTi4aV1J50cTkmt0YhLfX
CTxjh3xNd9OQilN77o6x0F+4KNgV4riJjSKEb2V/2rPoRVzsQSbqnGQEeVi+MvArX9/N
mMzBOPZ7WrWItSbDcMeFiVYKTYtvoSqYGBhP1hUhET2kvOKYxc9IoBkHvwpnIcRkf4cw
CyuQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
h=to:subject:message-id:date:from:reply-to:mime-version
:dkim-signature;
bh=OzAuvCXaR8VtgAo2YlN3HOaSVK/FgiFFi3Ga2aGkE8s=;
fh=b+UGVVQofpdbvjMvi60mvv7ySk/qKKWEme/8ac+byQg=;
b=DuSUbpu6iGeagWIH1mCWkSlVCVo6xXEdWv10xdRnd6Oy/khskzLkCpoA2GrU/dFZpq
LvR5a6uaVZEtqNFO0bKpVNkQk2ebPDYMxYUgY/65BaMu4YUl/3clw8K37ahWdBv/CrqA
UiCGNxI4FrssD0QewDzU+ITfQEkhSQ9vAcJR6bgtjDTZxc9xeL85d9JpwRoIjy3+jzH7
Szq5Lk3PCMeDdKPuq+3wV2rWTtvzP3ftRzrXuKxH4YfXAEfbC74MUnx87ZcGdQ0kbhfj
LyKcESjzV9EPFkE+hfO6w7ktFvW/AgFtUnABwh7mLqepSLW9CgZirKTCYX+UQeS0sbbv
/Rmw==;
darn=doctor.nl2k.ab.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1775404890; x=1776009690; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=OzAuvCXaR8VtgAo2YlN3HOaSVK/FgiFFi3Ga2aGkE8s=;
b=miqh0l65tv25XjmN4hMJSyjpEqm50hOhiSJ67a44SCGZsArNFqyvwtZN0/WUhjSzz5
CzEizZ2qUSB5f+xpb4Sz8WTab02pOlCL/tcT8LlOtsEvDs7WGp0CDrTrSLdrr5rX9X2Y
ES5EgSeKWlgquAL5haOHQTWJn5JtLA5Wo5YzRHYwX5JWdAkDBYdmKUjPLs3y0cyptcU7
5vsYjcAQtz43E6Noeb3qYNqjsfCzib+HspHbrIu9VGeeeEzj3eHVrO3MJSxKPtARd1Kt
6K2nmqHFHt4y/XHxjFMaMMkzHKnr5nEpdgrnOKOqvGNqoT0oQHDSJa3i3WzKFzkbN9r0
vCVA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1775404890; x=1776009690;
h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=OzAuvCXaR8VtgAo2YlN3HOaSVK/FgiFFi3Ga2aGkE8s=;
b=cnmsrF2V9PEfVx+7g05E+Q/xqtwp1Vvjcod7zVdCRQa1EoyQh+7lXxePk7V7i0PHpj
qYKMZv5/uiUuvyj7hPDN+jqj0XPjcfsOHww4nqAQQ1RH5Q5SCmxJ7BcAQD1n9WC4dFzE
QzeKG/EoD/BunFcsqm/IalFamEfO1W++oLghHGtBKCY5mt6H9x1B5AiRy2AlgQs1uy8Z
c97ILNHHKGWdGEW3Ye2f9TF/WrDfZb6LhqjYv60UU9EcO95bZ/uLfZmcVndqZndW48/c
4ZnDWO9HcbnwWm41VMok3SbnR7Re1hUsRYCuHtCIu5QacZoKlJdt/BhFvvJnletQDObc
DGeg==
X-Forwarded-Encrypted: i=1; AJvYcCVPtHmE7T6/iq+E6Hjv3sfJIzkvcM5K0Bv3688hSf5+1mFMVslGMV4+9w3SPzOsg682AMFuXxM=@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0YwpYEp/TkgaYPErajvj+I4JZzxjawdTH6wK8s/PA+/nnbwFB+JA
aQjyiu8f4onZre0ZD3IQzHhrHMix2SOyy6lqPWbmCRFTz/82uh+Cwjyczea5fHtFMj0kGBHSQVd
n5L347Hyh+YUzR1er9NIRCNA/vKNe6GQ=
X-Gm-Gg: AeBDiesVHbufCN97qFpQbaa9bpY9+IjqT34gnst3uHy5JTywZx9foy+4IsToXVaLyfk
H7U7oqUbXZyNVHcUyT2E1rEnzsBtvCdJnQ7qonwUEANF6h3lHf0WBte+6swycTmc9OLSSH60QPn
kInaQhoINAhrzZXSVtpXtLILW9vWu3XN2qxxTXFS9ml8ZDvhWHGQ8gejq5VQMZQk2/mo2OSxUka
DsKoPhMuczVNFekJKhC9YUkcgoB59MyTqbHOwwDSg/6RJoJYLkOC7bBWr7ML/W8GKu9ulpo0Xda
s9DCTADrSB56iipN+9ZYCU77a4xsH5P/A31hA3NBcgCbBUAV7cF5gI7Ph/RmvW3+JQypkB+hfVz
5+47GWTiXIuw=
X-Received: by 2002:a05:690e:1591:10b0:64e:a853:624d with SMTP id
956f58d0204a3-650486e4273mr7260236d50.19.1775404889694; Sun, 05 Apr 2026
09:01:29 -0700 (PDT)
MIME-Version: 1.0
Reply-To: selassie.abebe@yandex.com
From: MR OLIVER
Date: Sun, 5 Apr 2026 09:01:24 -0700
X-Gm-Features: AQROBzBbGnmvpOAdEex1enL2PHZPdMcghXFbIPylt-OCgIOmoAPVAHF-wXZSRx0
Message-ID:
Subject: RELIEF TRUST
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000c86648064eb8a908"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 24.3
X-Spam_score_int: 243
X-Spam_bar: ++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Sir/Madam, I am Mr. Edward Stave, a representative from
the British High Commission, focusing on Compensation Matters for fraud-affected
victims.British Government has allocated $2.8 million each to those affect
[...]
Content analysis details: (24.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[74.125.224.53 listed in dnsbl.ahbl.org]
[74.125.224.53 listed in dnsbl.ahbl.org]
[74.125.224.53 listed in dnsbl.ahbl.org]
[74.125.224.53 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[74.125.224.53 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[74.125.224.53 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[74.125.224.53 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[74.125.224.53 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[74.125.224.53 listed in will-spam-for-food.eu.org]
[74.125.224.53 listed in will-spam-for-food.eu.org]
[74.125.224.53 listed in will-spam-for-food.eu.org]
[74.125.224.53 listed in will-spam-for-food.eu.org]
[74.125.224.53 listed in will-spam-for-food.eu.org]
[74.125.224.53 listed in will-spam-for-food.eu.org]
[74.125.224.53 listed in will-spam-for-food.eu.org]
[74.125.224.53 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.125.224.53 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[lynnkate071(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[lynnkate071(at)gmail.com]
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[74.125.224.53 listed in wl.mailspike.net]
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
2.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} RELIEF TRUST
--000000000000c86648064eb8a908
Content-Type: text/plain; charset="UTF-8"
Dear Sir/Madam,
I am Mr. Edward Stave, a representative from the British High Commission,
focusing on Compensation Matters for fraud-affected victims.British
Government has allocated $2.8 million each to those affected victims to be
compensated
1. Your full name
2. A form of identification
3. Your contact address
4. Your phone number or Whatsapp number
I await to receive these details to enable us to do the needful.
Yours Sincerely,
Mr. Edward Stave
--000000000000c86648064eb8a908
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
>Dear Sir/Madam,
gnature">
I
am Mr. Edward Stave, a representative from the British High Commission,
focusing on Compensation Matters for fraud-affected victims.British=20
Government has allocated $2.8 million each to those affected victims to=20
be compensated
1. Your full name
2. A form of identification
=
3. Your contact address
4. Your phone number or Whatsapp number
I=
await to receive these details to enable us to do the needful.
Yours Si=
ncerely,
Mr. Edward Stave
--000000000000c86648064eb8a908--