Nigerian spam from Google Gmail
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 31 Aug 2026 10:45:00 -0600
Received: from mail-pg1-f180.google.com ([209.85.215.180]:48442)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100 (FreeBSD))
(envelope-from
id 1x157c-00000000ND3-3LSZ
for dave@doctor.nl2k.ab.ca;
Mon, 31 Aug 2026 10:44:46 -0600
Received: by mail-pg1-f180.google.com with SMTP id 41be03b00d2f7-cc1c7364550so3940394a12.1
for
ARC-Seal: i=1; a=rsa-sha256; t=1788194621; cv=none;
d=google.com; s=arc-20260327;
b=Q+LYE3X3Fn3Ik6/VXqfKPCeWDi6Tz9Tc5ofzEkeFQjzgAInnIg8vilJ+wJ9vlvBLSM
QRstz8dIOySG/I4X1yxn3cMwqLu7qwLydJYxUecHJqtS2C3kmTxyAlisGvmOV9ePY9PI
NelOGoFksqGxglWvYq22EvTtTlMuetMqYlWNQOt9g+eXKBvK0apv7VaSqBj5N7yZglVG
CW8Q1mj9crxjj/21QNPDVUS6oUrPmP6/drKqfpbFx2CyKJjb0LNJiDiMhZm9zXquihx8
HrVMumziiJCKOkJZrUC0/v3IcfcxL6jvv4UF22uTOx2+YpY2g/xnY0II1lw0DcGDjyA0
2llg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;
h=to:subject:message-id:date:from:mime-version:dkim-signature;
bh=flrjlqJJNsPrQkF3PAzn3PynRsBunf8ALkY+ryazHQ8=;
fh=QzgHP1uNFlkXffavC6F+ULdhvHx2FpEr8r6N3G9Bolw=;
b=G8Zz+LVi+22a0+Wu0doc+CxqdEoBfC8/r7JC3Mko90Exx+3nR5TPGJmEfxRkQoojHp
HsB8MaND5te4gcnKlKNCbzOlkGoGhAFw7ckXbwGjvJcbQVxx5V+1KfZkGPdc9DVGjYjr
3Of8uX5BilcxW/1+eZbiwEuPUMrIpS8aOOsNyFcZMAw93LFG1LmhNN3UzQoOeR0UPUr+
V6knjGjbgZtC08G3Wg806s4Oa+yIESSEw+cuE5rsJrhVCBHbl0f3ksoQZpU/10tc+B+s
jGc2AunVOhqsyr0mq5hG3U1Ji/7D+GHY4uDdnhrjF55xywIiGzbAQHwSj8Wt8aKvcW5l
bBow==;
darn=doctor.nl2k.ab.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1788194621; x=1788799421; darn=doctor.nl2k.ab.ca;
h=content-type:to:subject:message-id:date:from:mime-version:from:to
:cc:subject:date:message-id:reply-to:content-type;
bh=flrjlqJJNsPrQkF3PAzn3PynRsBunf8ALkY+ryazHQ8=;
b=Vw4U1eZPZZaO0o0YZ/+96AYAe4DnFSTUKl75erw8sWe5WdcG8WwaiL215ZtZkm/AKU
HA/7nNY1kmZphRyR7+DH9IvUOwYgq6VM/50jSUytrqY6GNWfGmN/wvWGDKk5FivImIiU
4LEo68oWaoddl8HhSvFk1qdQzbm3ysqFYr208Wttoy2Ro8LO6ZQZ0fWm5XK/IwVCmVGN
hDbMeTIio6Ro2jh0MlX2+nAtZ8A2gkWfKXWYUScM4rTG2cMX8msgqiikO6tIe6bLRxSY
0FiDau3fRcxf/McWV9MMnKJYIxYKK+R0HF+RwEoUhGi6cFcyIZmaHUM7AKjqJ1cZCk8v
R9DA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1788194621; x=1788799421;
h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=flrjlqJJNsPrQkF3PAzn3PynRsBunf8ALkY+ryazHQ8=;
b=NNSZx/8kHc9/++dpmBp911sf+F2dccS4riUf9FyBdHjfQV/pbAgh3p3e99PYzNDpSt
fdwIMgCNOJwnduuJ8mHeNt2Gepc4sOI0bfHVQ7wysZlUja9tHcM8xNun1uiGa9CB2wS5
pHCvh0GI+XYY0toj+8/8byQ+8X21GuAFwyfjEbTdTJ0mfjPZGA7EsSJuqmnr43/X8GjA
20k3nhTPa5dgTkOg6WKmeHjP8HrULI49nRpEoHSkBH4NLIPfV0uverM6jWvccT6Zswm0
UyAJVp1P4ZuSz2v8qOXxxtjkCIPyaF9Mn1+AdXPuUZfR3isRoRE88qyH5p2l4El58Tiw
hyLw==
X-Forwarded-Encrypted: i=1; AHgh+RrDE8rkXmgkIUhNW9LCW34nXKUwYMIQ7Kumgbk09b6fb9g15R3JOFvGV1Cp3r4/FSzR5ojU@doctor.nl2k.ab.ca
X-Gm-Message-State: AFuF++kWnUdthbQZbN+DMYlUT1A8QQ4C/qprIkWNiMR5PiqWmX7ENkYO
Ftlcv3j0UtIOpBA9zMYMG3jaIrsscPnE3Z0XEAVoiEsZ1vCnzNPwBBSGnb9wq+pFE1jcUO7DICp
sr99fvpK9UPcFXwO683qlLI8ScNLYncs=
X-Gm-Gg: AR+sD1159XNp+XR8l1U1B2P3ra48Yfp3C5ntrHzBmgYfO1ImaFPm9fT2HtI/QJZ+Rjg
LjBwvxGAb1WP+S+iBiJYxCH1OCve7TcsmMeYS9SeYcsIA+5FHR5fauZk3miJE2hoXi/Cm9W7jTy
1KMKDJzNDsu+fb+f0cE0XPUynLDbLsXaOzsgG3YTxEkA4clDKqBBToHifW3j7CWL9J68AlgTlKN
ugZVHKTFe1YNeMMdBfmPq4MI5kWkj37vSNab4emp5vgcMhK/GdHKeaqrARsyfx3j5EJK3cHkUIG
le3se7pA7Jsei2rdHWE/B4Uio4dS3o+s3eDgrmTDHjnW0XxtXsfUTY5eu5xqR9xDHhtafONsU6v
4her35bnhRB2nA0JKL03nDu8o74nBzUl9vgRG
X-Received: by 2002:a05:6a21:a34c:b0:3b4:7e2d:a3c2 with SMTP id
adf61e73a8af0-3d7afe3b13amr3543034637.18.1788194621196; Mon, 31 Aug 2026
09:43:41 -0700 (PDT)
MIME-Version: 1.0
From: zaidiallen69
Date: Mon, 31 Aug 2026 16:42:43 -0700
X-Gm-Features: AcwNN1VQutJtn_pijHVQoPrbuAFx4Galk9D2vHk2BUe8pvNpwlA59ulFvjYnwms
Message-ID:
Subject: I Need Your Help. Urgent,
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000002f91ae065a5a81a1"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 14.3
X-Spam_score_int: 143
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I Need Your Help. Urgent, I came across your e-mail contact
prior to a private search while in need of assistance. I am Mr. *Allen
Zaidi**, I am presently working as a bank Accountant here, I am seeking your
assistance to pull out an abandoned fund, ten Million Five Hundred Thousand
United State Dollar ($10.5. Millio [...]
Content analysis details: (14.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.215.180 listed in will-spam-for-food.eu.org]
[209.85.215.180 listed in will-spam-for-food.eu.org]
[209.85.215.180 listed in will-spam-for-food.eu.org]
[209.85.215.180 listed in will-spam-for-food.eu.org]
[209.85.215.180 listed in will-spam-for-food.eu.org]
[209.85.215.180 listed in will-spam-for-food.eu.org]
[209.85.215.180 listed in will-spam-for-food.eu.org]
[209.85.215.180 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.215.180 listed in dnsbl.ahbl.org]
[209.85.215.180 listed in dnsbl.ahbl.org]
[209.85.215.180 listed in dnsbl.ahbl.org]
[209.85.215.180 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.215.180 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.215.180 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.215.180 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.215.180 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[serher200(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[zaidiallen69(at)gmail.com]
0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
2.5 MILLION_USD BODY: Talks about millions of dollars
2.7 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
0.9 URG_BIZ BODY: Contains urgent matter
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.215.180 listed in list.dnswl.org]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.215.180 listed in bl.score.senderscore.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.215.180 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
2.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} I Need Your Help. Urgent,
--0000000000002f91ae065a5a81a1
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
I Need Your Help. Urgent,
I came across your e-mail contact prior to a private search while in need
of assistance. I am
Mr. Allen Zaidi**, I am presently working as a bank Accountant here, I
am seeking your assistance to pull out an abandoned fund, ten Million Five
Hundred Thousand United State Dollar ($10.5. Million Dollars) in my bank.
And I need a trusted investment Manager/Partner because of my current
position, However, I am interested in you for investment project assistance
in your country, may be from there, we can build a business relationship in
the near future.
I am willing to negotiate an investment/business profit sharing ratio with
you based on the future investment earning profits, If you are willing to
handle this project on my behalf kindly get back to me immediately,
Your Mobile Phone Number;=E2=80=A6
Your Current Home Address;=E2=80=A6
Your Urgent Reply Will Be Appreciated
Mr. Allen Zaidi
--0000000000002f91ae065a5a81a1
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
ne-height:normal;font-size:11pt;font-family:Calibri,"sans-serif""=
>
;,"serif"">I Need Your Help. Urgent,
font-size:11pt;font-family:Calibri,"sans-serif"">
e=3D"font-size:12pt;font-family:"Times New Roman","serif&quo=
t;">=C2=A0
font-size:11pt;font-family:Calibri,"sans-serif"">
e=3D"font-size:12pt;font-family:"Times New Roman","serif&quo=
t;">I came across your e-mail contact
prior to a private search while in need of assistance. I am=C2=A0
>
"serif"">=C2=A0
font-size:11pt;font-family:Calibri,"sans-serif"">
=3D"EN" style=3D"font-size:12pt">Mr.
le=3D"font-size:12pt;font-family:Helvetica,"sans-serif";color:rgb=
(31,31,31)">=C2=A0
y:Helvetica,"sans-serif";color:rgb(31,31,31)">Allen Zaidi<=
/i>
n","serif"">, I am presently working as a bank Accountant he=
re, I am seeking
your assistance to pull out an abandoned fund, ten Million Five Hundred
Thousand United State Dollar ($10.5. Million Dollars) in my bank.
>
font-size:11pt;font-family:Calibri,"sans-serif"">
e=3D"font-size:12pt;font-family:"Times New Roman","serif&quo=
t;">=C2=A0
font-size:11pt;font-family:Calibri,"sans-serif"">
e=3D"font-size:12pt;font-family:"Times New Roman","serif&quo=
t;">And I need a trusted investment
Manager/Partner because of my current position, However, I am interested in=
you
for investment project assistance in your country, may be from there, we ca=
n
build a business relationship in the near future.
font-size:11pt;font-family:Calibri,"sans-serif"">
e=3D"font-size:12pt;font-family:"Times New Roman","serif&quo=
t;">=C2=A0
font-size:11pt;font-family:Calibri,"sans-serif"">
e=3D"font-size:12pt;font-family:"Times New Roman","serif&quo=
t;">I am willing to negotiate an
investment/business profit sharing ratio with you based on the future
investment earning profits, If you are willing to handle this project on my
behalf kindly get back to me immediately,
font-size:11pt;font-family:Calibri,"sans-serif"">
e=3D"font-size:12pt;font-family:"Times New Roman","serif&quo=
t;">=C2=A0
font-size:11pt;font-family:Calibri,"sans-serif"">
e=3D"font-size:12pt;font-family:"Times New Roman","serif&quo=
t;">Your Mobile Phone Number;=E2=80=A6
font-size:11pt;font-family:Calibri,"sans-serif"">
e=3D"font-size:12pt;font-family:"Times New Roman","serif&quo=
t;">Your Current Home Address;=E2=80=A6
font-size:11pt;font-family:Calibri,"sans-serif"">
e=3D"font-size:12pt;font-family:"Times New Roman","serif&quo=
t;">=C2=A0
font-size:11pt;font-family:Calibri,"sans-serif"">
e=3D"font-size:12pt;font-family:"Times New Roman","serif&quo=
t;">Your Urgent Reply Will Be
Appreciated
font-size:11pt;font-family:Calibri,"sans-serif"">
e=3D"font-size:12pt;font-family:"Times New Roman","serif&quo=
t;">=C2=A0
ize:11pt;font-family:Calibri,"sans-serif"">
" style=3D"font-size:12pt;line-height:115%">Mr.
=3D"EN" style=3D"font-size:12pt;line-height:115%;font-family:Helvetica,&quo=
t;sans-serif";color:rgb(31,31,31)">=C2=A0
=3D"font-size:12pt;line-height:115%;font-family:Helvetica,"sans-serif&=
quot;;color:rgb(31,31,31)">Allen Zaidi
--0000000000002f91ae065a5a81a1--