Nigerian spam from Google Gmail
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 20 Jun 2026 05:43:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wau5e-00000000MYg-2xBh
for dave@doctor.nl2k.ab.ca;
Sat, 20 Jun 2026 05:42:22 -0600
Resent-From: The Doctor
Resent-Date: Sat, 20 Jun 2026 05:42:22 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-dl1-f68.google.com ([74.125.82.68]:54575)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wao6k-000000005eI-0Mof
for root@nk.ca;
Fri, 19 Jun 2026 23:19:15 -0600
Received: by mail-dl1-f68.google.com with SMTP id a92af1059eb24-13721dfd471so3991496c88.1
for
ARC-Seal: i=1; a=rsa-sha256; t=1781932637; cv=none;
d=google.com; s=arc-20240605;
b=hr/zA9rhq5RcJ5hKKIse0YlN0GqfheiduD0cNWb1NzDiDR76axta0PVOf+eGAIGPK7
+uGF5DUacL2SDcfxCLWOrqi8W7op4MdDGK/XEeJUw7vGPqOfNgLg+1hwmGP/9VTdT40Z
78CahxISxkTWoA0W3tuXgA9WF6dgoU2x1s118w4VBliZL72XludWegXvtuwZ2Toxjtis
Wh+szZl8r+iKcrUo+0kBKwnTzGMdCa2wAmKqoz15bP8tWJQVu+dXUOjy1uwznVpsY107
/rI7lE9kVeKCGMwfHJd9aJ3jhcZJUW09YkGNLAZBeFQ9fy2krBR+FBKT4J7iEF4WkJOQ
JrMA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
h=to:subject:message-id:date:from:reply-to:mime-version
:dkim-signature;
bh=Jvzk4sxNb2jccpCM7HA2XAXuhWCMzq0g6ekaWWqkpqA=;
fh=l8C3eWBiPQSCSk55WwrtTGSXlFYPZxH9EQHp3Fupmoc=;
b=RCwDS+GbAwG6ZIs0oxOGAbaliomJ+22p+CX9In06SwcDkJ2OnsSNeHb1VbrjbxHvVg
f29HUoNt7aUi2YbikQKgWq97Zj1Bf3pSMjVtzgTDfYJKRG09T2XhUoJwGzEIxPnyZDZh
Lrf6XOtZkEE69f/LOfiDTrcN7E64RQm6JgkzHxGBg249Dp8Sd57hR2KJTOK4G8dlYPoC
d5q2pLPsC5NIoYCWbXdmDMyGCl45vtDcBQvfBnoCI2/AC+kuBqkaS1KRbOmnl3oZlLGB
XTOUtoxAV59WYkh0wEI0zqjROs5TKNONnYPBRdM9EYCJaNuU9eRa8OXWIFDxXlLDx5Gm
XSog==;
darn=nk.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1781932637; x=1782537437; darn=nk.ca;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=Jvzk4sxNb2jccpCM7HA2XAXuhWCMzq0g6ekaWWqkpqA=;
b=Gep+FkZXARohjyQTHUPZ99e/a5jkZCjHF+ourlrMHDy8Fit49vp80LoscYRtiMmaUU
2welZQPT9gJ3fruOTlnbV5cF/p9C+Eij8HOZEKI7p1MJ1XHhcPQIVNJG1//BhmbIHv3S
lsVpVGe2xMRdoGpGDETalXebwbVXk0ijLoAeIVlwJqPnADpMARjSK8bH3X+N5Rfux/P3
RTIpVygy+53n08ok4OoNOpDQGYvlsCqwOwItb8I4i/zOug61E5dK6vJV1MspKU1PiF8U
rQ2tTzRbgKTm0qIiK5X7IysWypTRMxnHQf23tIDSt0ctrPmuoHN8UGvnZDT545lVXeyQ
lahg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1781932637; x=1782537437;
h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=Jvzk4sxNb2jccpCM7HA2XAXuhWCMzq0g6ekaWWqkpqA=;
b=hTcrAcFFmgqylvQ41J2lODl01Vl5DrGZdvB2anOYzqOJrz/JgIfbdEWTluyjttUvI8
3G707qsFGw1xk0PyVAwRoc3KkE6ALqw6Gqt5zZiUznpV8QxKLP/aoANygEvFCk+ni2TA
luEXEO7P0+83WsfXiho6JpR9NgNDj+dys2uvroP/BOUj3pl1nGfQz/1ICRKT4e4vRZRj
/5GuNZEBSWo3Qw94fJjgyZ1p3LiprWsBMvVpgO4V7NrwPffYWiDldRhkDMDG5awCgFAh
BRltlsirWuoAKm/JOCqFiK6VDgJuk3OlORHrossK9VD/OdiT1VND7RCrNwOfGecvWPzt
mGoQ==
X-Forwarded-Encrypted: i=1; AFNElJ8Q8HIZ3HTcdDhPNbx9wyEX94SGsuSqbXG51r4dPzrWr7vcuTb7+rOBNrNagG4cGJw+5mB0@nk.ca
X-Gm-Message-State: AOJu0YyN0R+qgu53C9WehSXK6hZJmgb4x4eIESvTnJWK9xx+zcH5CU/Y
kzAwBMy+kSlLvsZD13w1oKCijGH5+Mo8y66xZ7WfWu19sFroYufRoXDEx2FJzlVRhBl6afIf/XG
udmaHXUKPcyrZ1phTlFFDXFW7GX+mc5E=
X-Gm-Gg: AfdE7ckwucXGV5+KkzKPM8FoSVNottzfmWmls+Nj43FJ+2SsnCJRRoCp06gFPphQm+5
NBoKL1sipJuYuhuCDTdmu3J01e3AfBb6kjTZeSVSCVOYzLAyMmoaa9C7X5olk3dBtEiQgh/rZCR
wvlOwCj8zqHarBHCCVQE7y1JyAZaoSkkodq3tgS1Rf0o7C7caY0BSzrKU6XrgSLko0GFsj20xKq
FexIAaWgs2hIj9gmp6a73IN8Vs+liu6AXLR1osNmEbk4+bFkSGQpPS8K/M/dd/Z3YmsLBOV/drO
etKrTWUV
X-Received: by 2002:a05:7023:b88:b0:139:7fd9:a22 with SMTP id
a92af1059eb24-139a217e5c7mr3276115c88.35.1781932636680; Fri, 19 Jun 2026
22:17:16 -0700 (PDT)
MIME-Version: 1.0
Reply-To: adnantunku80@gmail.com
From: Adnan Tunku
Date: Fri, 19 Jun 2026 22:17:03 -0700
X-Gm-Features: AVVi8Cd7Q56Shdy7XV3oM10o0uwsr--mB0rPfq0XJeX3gmCHWfRX0Ts8Eo-4YgU
Message-ID:
Subject: Product Inquiry
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000d2bb320654a8859e"
Bcc: root@nk.ca
X-Spam_score: 9.8
X-Spam_score_int: 98
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Sir, My name is Adnan Tunku, a business agent/tender
Agent in turkey. I am reaching out to you regarding an ongoing tender that
presents an excellent opportunity to supply your products in Turkey.
Content analysis details: (9.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[74.125.82.68 listed in will-spam-for-food.eu.org]
[74.125.82.68 listed in will-spam-for-food.eu.org]
[74.125.82.68 listed in will-spam-for-food.eu.org]
[74.125.82.68 listed in will-spam-for-food.eu.org]
[74.125.82.68 listed in will-spam-for-food.eu.org]
[74.125.82.68 listed in will-spam-for-food.eu.org]
[74.125.82.68 listed in will-spam-for-food.eu.org]
[74.125.82.68 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[74.125.82.68 listed in dnsbl.ahbl.org]
[74.125.82.68 listed in dnsbl.ahbl.org]
[74.125.82.68 listed in dnsbl.ahbl.org]
[74.125.82.68 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[74.125.82.68 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[74.125.82.68 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[74.125.82.68 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[74.125.82.68 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[74.125.82.68 listed in list.dnswl.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[74.125.82.68 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[74.125.82.68 listed in bl.score.senderscore.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[guninrsales82(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[guninrsales82(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[adnantunku80(at)gmail.com]
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to
Subject: {SPAM?} Product Inquiry
--000000000000d2bb320654a8859e
Content-Type: text/plain; charset="UTF-8"
Dear Sir,
My name is Adnan Tunku, a business agent/tender Agent in turkey.
I am reaching out to you regarding an ongoing tender that presents an
excellent opportunity to supply your products in Turkey.
If you're interested, kindly forward full product catalog for our review.
Looking forward to your response for more information.
Best regards,
Adnan Tunku
+905376993196
--000000000000d2bb320654a8859e
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
My name is Adnan Tunku, a business agent/=
tender Agent in turkey.
I am reaching out to you regarding an ongoin=
g tender that presents an
excellent opportunity to supply your products =
in Turkey.
If you're interested, kindly forward full product cat=
alog for our review.
Looking forward to your response for more infor=
mation.
Best regards,
Adnan Tunku
+905376993196
--000000000000d2bb320654a8859e--
