nigerian spam
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 22 Mar 2026 12:21:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1w4NQ2-00000000F2m-0jA0
for dave@doctor.nl2k.ab.ca;
Sun, 22 Mar 2026 12:20:58 -0600
Resent-From: The Doctor
Resent-Date: Sun, 22 Mar 2026 12:20:58 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [195.83.153.7] (port=47937 helo=smtp-out2-webmail-7.u-picardie.fr)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1w4JbW-00000000HPP-2LUN
for sales@nk.ca;
Sun, 22 Mar 2026 08:16:43 -0600
Received: from passoire-02.vm.u-picardie.fr (passoire-02.vm.u-picardie.fr [10.0.132.142])
by smtp-out2-webmail-7.u-picardie.fr (Postfix) with ESMTP id 4fdyR12vsKzCrDX;
Sun, 22 Mar 2026 14:52:13 +0100 (CET)
X-Virus-Scanned: Debian amavisd-new at u-picardie.fr
Received: from smtp.u-picardie.fr ([10.0.132.227])
by passoire-02.vm.u-picardie.fr (passoire-02.vm.u-picardie.fr [10.0.132.142]) (amavisd-new, port 10048)
with LMTP id OewThFIcET68; Sun, 22 Mar 2026 14:52:10 +0100 (CET)
Received: from horde-07 (horde-07.vm.u-picardie.fr [10.0.132.99])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
(No client certificate requested)
(Authenticated sender: g22105250)
by smtp.u-picardie.fr (Postfix) with ESMTPSA id 4fdyQx3pxgz40Q2;
Sun, 22 Mar 2026 14:52:09 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=u-picardie.fr;
s=smtp; t=1774187530; h=from:from:reply-to:reply-to:subject:subject:date:date:
message-id:message-id:to:to:cc:mime-version:mime-version:
content-type:content-type; bh=jMEzzN46f5jC6ygnDOMquatxcRr1RYKrjfhY9w/QnjY=;
b=r3RO2vgYr5DqDTYNWBqaoIUKKtqOXydJE4nONj01gZTob21ol8xiBto/ojM6dNSiOHYL/z
dGaZcUn0dJaWcBn9gzhX22eLvcsGV+XZSS5EfkFNgO1yzYABD4uy1iMtjpzLLKDM2ac6DS
wyaz7dTGv6+WmqJMtznNAt5i3kSgFXNCUiTtAnQFQsdQuKnmPqNMUtPc/2VXOPh7/YG7OM
v2dFJ0PreaAXpgkWCdqo2uvWdOdDSF9yvgBNc7VHf5iSuGvK9x2nqg5Z1QA8DoDc2BkJaV
2n0SROx3htUwGGGkqf1ip4zJxMsSju6pKcQXsZzDivSFqjpDBFyCzHuGJiPqcw==
Received: from unn-195-181-167-41.datapacket.com
(unn-195-181-167-41.datapacket.com [195.181.167.41]) by
webmail.etud.u-picardie.fr (Horde Framework) with HTTPS; Sun, 22 Mar 2026
14:52:09 +0100
Date: Sun, 22 Mar 2026 14:52:09 +0100
Message-ID: <20260322145209.Horde.BA-uiQwGV6Y4qKDcbOSyxvG@webmail.etud.u-picardie.fr>
From: Valerii Churkin
To: 923471672j@gmail.com
Subject: Read and reply back
Reply-to: o_a111911@aol.com
User-Agent: Horde Application Framework 5
Content-Type: text/plain; charset=utf-8; format=flowed; DelSp=Yes
MIME-Version: 1.0
Content-Disposition: inline
X-Spamd-Bar: +++++
Authentication-Results: smtp.u-picardie.fr;
auth=pass smtp.auth=g22105250 smtp.mailfrom=william.goemaere@etud.u-picardie.fr
X-Rspamd-Server: passoire-04
X-Rspamd-Queue-Id: 4fdyQx3pxgz40Q2
X-Spamd-Result: default: False [5.82 / 1000.00];
BAYES_SPAM(5.92)[99.84%];
MIME_GOOD(-0.10)[text/plain];
ARC_NA(0.00)[];
DKIM_SIGNED(0.00)[u-picardie.fr:s=smtp];
TO_DN_NONE(0.00)[];
MID_RHS_MATCH_FROMTLD(0.00)[];
NEURAL_HAM(-0.00)[-0.998];
FREEMAIL_TO(0.00)[gmail.com];
R_RATELIMIT(0.00)[user(RLc6oh57c5pcnt54),from(RL5okfe1k1465s7jp9i3d5jy9r),user(RLbp3uqkxr7w799q),user(RLfut5xyrj1rhazr)];
MIME_TRACE(0.00)[0:+];
FROM_EQ_ENVFROM(0.00)[];
RCVD_COUNT_TWO(0.00)[2];
RCPT_COUNT_ONE(0.00)[1];
REPLYTO_DOM_NEQ_FROM_DOM(0.00)[];
FROM_HAS_DN(0.00)[];
RCVD_VIA_SMTP_AUTH(0.00)[];
HAS_REPLYTO(0.00)[o_a111911@aol.com];
ETUD_FROM(0.00)[etud.u-picardie.fr];
FREEMAIL_ENVRCPT(0.00)[gmail.com,qq.com];
TAGGED_RCPT(0.00)[];
TO_MATCH_ENVRCPT_ALL(0.00)[];
FREEMAIL_REPLYTO(0.00)[aol.com];
RCVD_TLS_ALL(0.00)[]
X-Spam_score: 9.1
X-Spam_score_int: 91
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Good day, I am Valerii Churkin, a senior officer in the
Ukrainian military. I would like to discuss a financial matter currently
held in Europe, which I am unable to manage due to my military duties. Please
rep [...]
Content analysis details: (9.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[195.181.167.41 listed in will-spam-for-food.eu.org]
[195.181.167.41 listed in will-spam-for-food.eu.org]
[195.181.167.41 listed in will-spam-for-food.eu.org]
[195.181.167.41 listed in will-spam-for-food.eu.org]
[195.181.167.41 listed in will-spam-for-food.eu.org]
[195.181.167.41 listed in will-spam-for-food.eu.org]
[195.181.167.41 listed in will-spam-for-food.eu.org]
[195.181.167.41 listed in will-spam-for-food.eu.org]
[195.83.153.7 listed in will-spam-for-food.eu.org]
[195.83.153.7 listed in will-spam-for-food.eu.org]
[195.83.153.7 listed in will-spam-for-food.eu.org]
[195.83.153.7 listed in will-spam-for-food.eu.org]
[195.83.153.7 listed in will-spam-for-food.eu.org]
[195.83.153.7 listed in will-spam-for-food.eu.org]
[195.83.153.7 listed in will-spam-for-food.eu.org]
[195.83.153.7 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[195.83.153.7 listed in dnsbl.ahbl.org]
[195.83.153.7 listed in dnsbl.ahbl.org]
[195.83.153.7 listed in dnsbl.ahbl.org]
[195.83.153.7 listed in dnsbl.ahbl.org]
[195.181.167.41 listed in dnsbl.ahbl.org]
[195.181.167.41 listed in dnsbl.ahbl.org]
[195.181.167.41 listed in dnsbl.ahbl.org]
[195.181.167.41 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[195.83.153.7 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[195.83.153.7 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[195.83.153.7 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[195.83.153.7 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[o_a111911(at)aol.com]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 NO_RDNS2 Sending MTA has no reverse DNS
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
Subject: {SPAM?} Read and reply back
--
Good day,
I am Valerii Churkin, a senior officer in the Ukrainian military. I
would like to discuss a financial matter currently held in Europe,
which I am unable to manage due to my military duties. Please reply
for further details.
Sincerely
Valerii Churkin
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 22 Mar 2026 12:21:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1w4NQ2-00000000F2m-0jA0
for dave@doctor.nl2k.ab.ca;
Sun, 22 Mar 2026 12:20:58 -0600
Resent-From: The Doctor
Resent-Date: Sun, 22 Mar 2026 12:20:58 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [195.83.153.7] (port=47937 helo=smtp-out2-webmail-7.u-picardie.fr)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1w4JbW-00000000HPP-2LUN
for sales@nk.ca;
Sun, 22 Mar 2026 08:16:43 -0600
Received: from passoire-02.vm.u-picardie.fr (passoire-02.vm.u-picardie.fr [10.0.132.142])
by smtp-out2-webmail-7.u-picardie.fr (Postfix) with ESMTP id 4fdyR12vsKzCrDX;
Sun, 22 Mar 2026 14:52:13 +0100 (CET)
X-Virus-Scanned: Debian amavisd-new at u-picardie.fr
Received: from smtp.u-picardie.fr ([10.0.132.227])
by passoire-02.vm.u-picardie.fr (passoire-02.vm.u-picardie.fr [10.0.132.142]) (amavisd-new, port 10048)
with LMTP id OewThFIcET68; Sun, 22 Mar 2026 14:52:10 +0100 (CET)
Received: from horde-07 (horde-07.vm.u-picardie.fr [10.0.132.99])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
(No client certificate requested)
(Authenticated sender: g22105250)
by smtp.u-picardie.fr (Postfix) with ESMTPSA id 4fdyQx3pxgz40Q2;
Sun, 22 Mar 2026 14:52:09 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=u-picardie.fr;
s=smtp; t=1774187530; h=from:from:reply-to:reply-to:subject:subject:date:date:
message-id:message-id:to:to:cc:mime-version:mime-version:
content-type:content-type; bh=jMEzzN46f5jC6ygnDOMquatxcRr1RYKrjfhY9w/QnjY=;
b=r3RO2vgYr5DqDTYNWBqaoIUKKtqOXydJE4nONj01gZTob21ol8xiBto/ojM6dNSiOHYL/z
dGaZcUn0dJaWcBn9gzhX22eLvcsGV+XZSS5EfkFNgO1yzYABD4uy1iMtjpzLLKDM2ac6DS
wyaz7dTGv6+WmqJMtznNAt5i3kSgFXNCUiTtAnQFQsdQuKnmPqNMUtPc/2VXOPh7/YG7OM
v2dFJ0PreaAXpgkWCdqo2uvWdOdDSF9yvgBNc7VHf5iSuGvK9x2nqg5Z1QA8DoDc2BkJaV
2n0SROx3htUwGGGkqf1ip4zJxMsSju6pKcQXsZzDivSFqjpDBFyCzHuGJiPqcw==
Received: from unn-195-181-167-41.datapacket.com
(unn-195-181-167-41.datapacket.com [195.181.167.41]) by
webmail.etud.u-picardie.fr (Horde Framework) with HTTPS; Sun, 22 Mar 2026
14:52:09 +0100
Date: Sun, 22 Mar 2026 14:52:09 +0100
Message-ID: <20260322145209.Horde.BA-uiQwGV6Y4qKDcbOSyxvG@webmail.etud.u-picardie.fr>
From: Valerii Churkin
To: 923471672j@gmail.com
Subject: Read and reply back
Reply-to: o_a111911@aol.com
User-Agent: Horde Application Framework 5
Content-Type: text/plain; charset=utf-8; format=flowed; DelSp=Yes
MIME-Version: 1.0
Content-Disposition: inline
X-Spamd-Bar: +++++
Authentication-Results: smtp.u-picardie.fr;
auth=pass smtp.auth=g22105250 smtp.mailfrom=william.goemaere@etud.u-picardie.fr
X-Rspamd-Server: passoire-04
X-Rspamd-Queue-Id: 4fdyQx3pxgz40Q2
X-Spamd-Result: default: False [5.82 / 1000.00];
BAYES_SPAM(5.92)[99.84%];
MIME_GOOD(-0.10)[text/plain];
ARC_NA(0.00)[];
DKIM_SIGNED(0.00)[u-picardie.fr:s=smtp];
TO_DN_NONE(0.00)[];
MID_RHS_MATCH_FROMTLD(0.00)[];
NEURAL_HAM(-0.00)[-0.998];
FREEMAIL_TO(0.00)[gmail.com];
R_RATELIMIT(0.00)[user(RLc6oh57c5pcnt54),from(RL5okfe1k1465s7jp9i3d5jy9r),user(RLbp3uqkxr7w799q),user(RLfut5xyrj1rhazr)];
MIME_TRACE(0.00)[0:+];
FROM_EQ_ENVFROM(0.00)[];
RCVD_COUNT_TWO(0.00)[2];
RCPT_COUNT_ONE(0.00)[1];
REPLYTO_DOM_NEQ_FROM_DOM(0.00)[];
FROM_HAS_DN(0.00)[];
RCVD_VIA_SMTP_AUTH(0.00)[];
HAS_REPLYTO(0.00)[o_a111911@aol.com];
ETUD_FROM(0.00)[etud.u-picardie.fr];
FREEMAIL_ENVRCPT(0.00)[gmail.com,qq.com];
TAGGED_RCPT(0.00)[];
TO_MATCH_ENVRCPT_ALL(0.00)[];
FREEMAIL_REPLYTO(0.00)[aol.com];
RCVD_TLS_ALL(0.00)[]
X-Spam_score: 9.1
X-Spam_score_int: 91
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Good day, I am Valerii Churkin, a senior officer in the
Ukrainian military. I would like to discuss a financial matter currently
held in Europe, which I am unable to manage due to my military duties. Please
rep [...]
Content analysis details: (9.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[195.181.167.41 listed in will-spam-for-food.eu.org]
[195.181.167.41 listed in will-spam-for-food.eu.org]
[195.181.167.41 listed in will-spam-for-food.eu.org]
[195.181.167.41 listed in will-spam-for-food.eu.org]
[195.181.167.41 listed in will-spam-for-food.eu.org]
[195.181.167.41 listed in will-spam-for-food.eu.org]
[195.181.167.41 listed in will-spam-for-food.eu.org]
[195.181.167.41 listed in will-spam-for-food.eu.org]
[195.83.153.7 listed in will-spam-for-food.eu.org]
[195.83.153.7 listed in will-spam-for-food.eu.org]
[195.83.153.7 listed in will-spam-for-food.eu.org]
[195.83.153.7 listed in will-spam-for-food.eu.org]
[195.83.153.7 listed in will-spam-for-food.eu.org]
[195.83.153.7 listed in will-spam-for-food.eu.org]
[195.83.153.7 listed in will-spam-for-food.eu.org]
[195.83.153.7 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[195.83.153.7 listed in dnsbl.ahbl.org]
[195.83.153.7 listed in dnsbl.ahbl.org]
[195.83.153.7 listed in dnsbl.ahbl.org]
[195.83.153.7 listed in dnsbl.ahbl.org]
[195.181.167.41 listed in dnsbl.ahbl.org]
[195.181.167.41 listed in dnsbl.ahbl.org]
[195.181.167.41 listed in dnsbl.ahbl.org]
[195.181.167.41 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[195.83.153.7 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[195.83.153.7 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[195.83.153.7 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[195.83.153.7 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[o_a111911(at)aol.com]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 NO_RDNS2 Sending MTA has no reverse DNS
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
Subject: {SPAM?} Read and reply back
--
Good day,
I am Valerii Churkin, a senior officer in the Ukrainian military. I
would like to discuss a financial matter currently held in Europe,
which I am unable to manage due to my military duties. Please reply
for further details.
Sincerely
Valerii Churkin
![](3D"https://buffer-media-uploads.s3.amazonaws.com/69b0=<br)