Nigerian spam from Google Gmail
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 04 Jul 2025 10:10:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uXiz0-00000000IRB-0CBY
for dave@doctor.nl2k.ab.ca;
Fri, 04 Jul 2025 10:09:50 -0600
Resent-From: The Doctor
Resent-Date: Fri, 4 Jul 2025 10:09:50 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f175.google.com ([209.85.214.175]:47233)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uXhOH-000000007QU-1sA9
for doctor@doctor.nl2k.ab.ca;
Fri, 04 Jul 2025 08:28:05 -0600
Received: by mail-pl1-f175.google.com with SMTP id d9443c01a7336-23694cec0feso9082555ad.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1751639149; x=1752243949; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=Abn4rewVyF4bEsDuDwlvj3sBgcN11b0Qqgc4U2NJDi8=;
b=b8EpFC7UM/4cVMFosTQACM6kc5q/LqtuKTXB/o/WJ8zU5vD1G1G0O6adWDXpS3My07
D21t7WzQNEJ1GtUYC2PyG9YqfPfLy1/5+qRA5dvITEgrCu0nPzPHzAdSRzoUg5dH+haN
4hFj35vJRP87S1Z07onbC3/fqIM1jox66Pm6zEWQkMYElh+c8SoYLZ8wqJBE4Xwp3b9O
J2wYxELHSimIM4ykN7rup+4/dhBO3GYobChUYrGzUPeK7EKSQr6wpl+Kmc5ENACZtdSP
BB4qydI1ayzxg1pyKAE4tnRritCHvdyVJXG5EmyHsqgodwu8arsU8C61LYTR5KeubyYB
N4AA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1751639149; x=1752243949;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=Abn4rewVyF4bEsDuDwlvj3sBgcN11b0Qqgc4U2NJDi8=;
b=XWFByG6eSkLs2YOcVTTM0lfms1dztAype0Nx5eFr1qCBtUsGbgB2kq0PO/5WdO5sPW
OM+G9o2kUCklzXiKHYzw+iAmPCOTVZEwhK8Rpg0X0KHNX+yifv6nqMwnKSF/jX1J8E9Z
rw3jAzLS15COwZDUX6yyvtb62x417lNwXhL9FPs2oMSaF27xSZDLCycUryzx4bK1ngq+
wttZoveGjVpFfRMWGm/I9L1aATBc4HbYr68Y2VdbjrhaUrLdEzwbE2u56bT8RpBcTQOH
PzxYxguwK1U7AB6Aj+ggRhD1Ja5FBKoPJv3BObSfw8tx8j0kt7u/pWQW7sGGfWQqAjWw
CQMw==
X-Forwarded-Encrypted: i=1; AJvYcCVfUZO6srX/O5PIqYX5TA0uxZte7eTsUknNz1uBHTUHKJ6FvvExRluSCl2nWV15Qa4IcfnfJDM=@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0YwokRgIeNGAoeiErf3/rOWzP4MCmI6D96AbPrpr88FshIkmvtlj
UvFXTD0Do2+1Tfpbd8xjANJ8MoDu94O+tZZKhMKIiU3k+CvFCPaZ2L4256sEWYnRqDrunl90jPe
jgkhO5TsPpl9uBtaKgXYg/2XCCmPCdrQ=
X-Gm-Gg: ASbGncuPKBYbjqgkycSWBIg1Ap39SrR8caAvb4Uorlalje2JiFos5oiBcgGK3pYLIzx
LqNX/yLV8tyQHQIKaX5AxfSg3+0NLX/eU9O+L5cBCDZJY08eBcrT/56BGK9EmPPVGxpczqIEdqo
mCvhTx+9EUI7IhpmL1O0ZUDjpuQ1JjQkf1/ZGfNCC06e2b9329wDadfDk=
X-Google-Smtp-Source: AGHT+IHx+KX4BbPFsy+vUFNkjo0YRytkOML5tuKZrgbLfhXSu7gNSSSCCm4Jd9+cpKoG4VmKCPQVpIMZeSunPFmX/YA=
X-Received: by 2002:a17:90b:3807:b0:312:db8:dbd2 with SMTP id
98e67ed59e1d1-31aac4badc4mr3991346a91.19.1751639148636; Fri, 04 Jul 2025
07:25:48 -0700 (PDT)
MIME-Version: 1.0
Reply-To: kingsleyinfogeorge@gmail.com
From: Peter Libby
Date: Fri, 4 Jul 2025 14:25:42 +0000
X-Gm-Features: Ac12FXw2NdI1TBAXIDH3DpgWxoNkMG74BOBRSwpgiZM6Cuf5rWadd5IevVbXjpQ
Message-ID:
Subject: it's well
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000003ab07a06391b450f"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 9.1
X-Spam_score_int: 91
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Sub: This is top secret, keep confidential please. This letter
may come to you as a surprise but I really prayed to God to help me choose
somebody that will be my true God sent, a person who has a fear of God that
cannot betray my remaining family. My [...]
Content analysis details: (9.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.214.175 listed in dnsbl.ahbl.org]
[209.85.214.175 listed in dnsbl.ahbl.org]
[209.85.214.175 listed in dnsbl.ahbl.org]
[209.85.214.175 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.214.175 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.214.175 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.214.175 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.214.175 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.214.175 listed in will-spam-for-food.eu.org]
[209.85.214.175 listed in will-spam-for-food.eu.org]
[209.85.214.175 listed in will-spam-for-food.eu.org]
[209.85.214.175 listed in will-spam-for-food.eu.org]
[209.85.214.175 listed in will-spam-for-food.eu.org]
[209.85.214.175 listed in will-spam-for-food.eu.org]
[209.85.214.175 listed in will-spam-for-food.eu.org]
[209.85.214.175 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.214.175 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.214.175 listed in sa-accredit.habeas.com]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
0.2 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.214.175 listed in sa-trusted.bondedsender.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.214.175 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[infopeterlibby(at)gmail.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.214.175 listed in bl.score.senderscore.com]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.214.175 listed in bl.score.senderscore.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} it's well
--0000000000003ab07a06391b450f
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Sub: This is top secret, keep confidential please.
This letter may come to you as a surprise but I really prayed to God to
help me
choose somebody that will be my true God sent, a person who has a fear of
God that cannot betray my remaining family. My only adopted son David is 13
years old and live's with my personal lawyer. I am sick of cancer for which
the doctor said I have a short period of time to live
I'm the CEO of Oil & Gas Company limited. I started making money when I was
young with my inheritance money I inherited from my late step father in the
USA my dear please if you will be a trusted and God=E2=80=99s sent to be on=
my
behalf contact my lawyer he will give you more information about me and how
you can help me.
God bless you and I pray you have a clean heart and won=E2=80=99t misuse my=
funds
.With deep tears now, if you don=E2=80=99t hear from me again I promise to =
be there
for you in spirit. Wish you the very best.
GOD BLESS YOU
--0000000000003ab07a06391b450f
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Sub: This is top secret, keep confidential ple=
ase.
This letter may come to you as a surprise but I really pray=
ed to God to help me
choose somebody that will be my true God sent, a pe=
rson who has a fear of God that cannot betray my remaining family. My only =
adopted son David is 13 years old and live's with my personal lawyer. I=
am sick of cancer for which the doctor said I have a short period of time =
to live
=C2=A0
I'm the CEO of Oil & Gas Company limited. I st=
arted making money when I was young with my inheritance money I inherited f=
rom my late step father in the USA my dear please if you will be a trusted =
and God=E2=80=99s sent to be on my behalf contact my lawyer he will give yo=
u more information about me and how you can help me.
God bless you a=
nd I pray you have a clean heart and won=E2=80=99t misuse my funds .With de=
ep tears now, if you don=E2=80=99t hear from me again I promise to be there=
for you in spirit. Wish you the very best.
GOD BLESS YOU
>
--0000000000003ab07a06391b450f--