nigerian 419 spam
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 02 Jul 2026 05:51:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wfFvg-00000000K93-2Zyh
for dave@doctor.nl2k.ab.ca;
Thu, 02 Jul 2026 05:50:04 -0600
Resent-From: The Doctor
Resent-Date: Thu, 2 Jul 2026 05:50:04 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-outd.mail.t-online.hu ([195.228.240.57]:32775)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wfA7H-00000000Opf-03Wy
for www@nl2k.ab.ca;
Wed, 01 Jul 2026 23:37:48 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=t-online.hu; s=mail;
t=1782970552; bh=SN5PyyZUBRYDF843AEL/zTBiHZ5WIZ7C2RzHU0oj2AI=;
h=Date:From:To:Subject:Reply-to;
b=DWqlqKqC2gCnXS7u2Gx6J/+GiPqqEtAlwOwCXggvvUba587KTKX+kjFGav52HedLf
kIi/3k4b0ryjaZnsYB6q2X4YoRQ6Tjpf6KmGr8hPy3dUINKNhVnEWw7JMaP8wikyko
WPWEN7bx6ZasuwvWyJnOtNuY6jhflDiZlE4O+CPbTKQFHB0so0rg8Q/MUDOKg9E0mV
dggXOIGQbPYMGKL7tzQYcW3ihaavqbsRRx375IXFrIeqtUB9k4LepdDMkpMFnNUCE/
jkwQavnIZhRC/tAz3M2W0C4gr2J2KopfKLjUZyFCnyqm0R4NdzR9c2pYbLG9A4CZxF
rM/27zNrLjzNQ==
Received: from maxwm03a.mail.t-online.hu (maxwm03a.mail.telekom.hu [195.228.240.101])
by mail-outd.mail.t-online.hu (Postfix) with ESMTP id 4grQVG4vClzDMNH;
Thu, 2 Jul 2026 07:31:34 +0200 (CEST)
Received: from public-nat-01.vpngate.v4.open.ad.jp
(public-nat-01.vpngate.v4.open.ad.jp [219.100.37.233]) by webmail.telekom.hu
(Horde Framework) with HTTP; Thu, 02 Jul 2026 07:35:52 +0200
Date: Thu, 02 Jul 2026 07:35:52 +0200
Message-ID: <20260702073552.Horde.Hb_cGX4-B6orPjAK0trl3EJ@webmail.telekom.hu>
From: Olena Zelenska
To: me@me.com
Subject: N41-
Reply-to: olenazelenska68@gmail.com
User-Agent: Horde Application Framework 5
Content-Type: text/html; charset=utf-8
Content-Description: HTML =?utf-8?b?bGV2w6ls?=
MIME-Version: 1.0
Content-Disposition: inline
X-VadeSecure-Status: Legit
X-VadeSecure-Score: 0
X-VadeSecure-Verdict: Legit
Authentication-Results: iprev=notverified ip=195.228.240.101;
spf=notverified client-ip=195.228.240.101 smtp.mailfrom=balint.peter@t-online.hu;
dkim=notverified (), header.i=;
dmarc=notverified
Received-SPF: SPF not checked
X-VadeSecure-Status: Legit
X-VadeSecure-Score: 0
X-VadeSecure-Cause: gggruggvucftvghtrhhoucdtuddrgeefiedrtddtgdehudehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuofetifgjteftvffgnffgmffqofdpucfqfgfvnecuuegrihhlohhuthemuceftddtnecunecujfgurhephffvufhrfggtgggusehhtddttddtreejnecuhfhrohhmpefqlhgvnhgrucgkvghlvghnshhkrgcuoegsrghlihhnthdrphgvthgvrhesthdqohhnlhhinhgvrdhhuheqnecuggftrfgrthhtvghrnhepueffffevlefgfedttdeugfetheeghedtjeethfeludehieeigeffudefuedutdejnecukfhppeduleehrddvvdekrddvgedtrddutddupddvudelrddutddtrdefjedrvdeffeenuceurggutfgvphhuthfkphepvdduledruddttddrfeejrddvfeefnecuvehluhhsthgvrhfuihiivgepuddtnecurfgrrhgrmhepmhhouggvpehsmhhtphdpihhnvghtpeduleehrddvvdekrddvgedtrddutddupdhhvghlohepmhgrgiifmhdtfegrrdhmrghilhdrthdqohhnlhhinhgvrdhhuhdpmhgrihhlfhhrohhmpegsrghlihhnthdrphgvthgvrhesthdqohhnlhhinhgvrdhhuhdpnhgspghrtghpthhtohepfedupdhrtghpthhtohepmhgvsehmvgdrtghomhdprhgtphhtthhopeiffiifrdhprghlohhnshhosehusghishhhohhpshdrtggrpdhrtghpthhtohepfiiffidrphgrrhgrughishgvsehshihmphgrthhitghordgtrgdprhgtphhtthhopeiffiifrdhpihgtvghsrdhinh
htphhitggvshesihhoshdrsggtrdgtrgdprhgtphhtthhopeiffiifrdhprhgvshhiuggvnhhtsehhuggrshdrtggrpdhrtghpthhtohepfiiffidrrhgvughrihhvvghrrhhighhgvghrsehshhgrfidrtggrpdhrtghpthhtohepfiiffidrrhhitghhrghrugesmhgrrhhtihhnvgiirdgtrg
X-VadeSecure-Verdict: Legit
X-Spam_score: 12.1
X-Spam_score_int: 121
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings. This is Mrs. Olena Zelenska, I am contacting you
based on my personal interest to develop a mutual businesRelationship with
you in your country or your company. which I believe we could mutually benef
[...]
Content analysis details: (12.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[219.100.37.233 listed in dnsbl.ahbl.org]
[219.100.37.233 listed in dnsbl.ahbl.org]
[219.100.37.233 listed in dnsbl.ahbl.org]
[219.100.37.233 listed in dnsbl.ahbl.org]
[195.228.240.101 listed in dnsbl.ahbl.org]
[195.228.240.101 listed in dnsbl.ahbl.org]
[195.228.240.101 listed in dnsbl.ahbl.org]
[195.228.240.101 listed in dnsbl.ahbl.org]
[195.228.240.57 listed in dnsbl.ahbl.org]
[195.228.240.57 listed in dnsbl.ahbl.org]
[195.228.240.57 listed in dnsbl.ahbl.org]
[195.228.240.57 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[219.100.37.233 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[219.100.37.233 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[219.100.37.233 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[219.100.37.233 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[219.100.37.233 listed in will-spam-for-food.eu.org]
[219.100.37.233 listed in will-spam-for-food.eu.org]
[219.100.37.233 listed in will-spam-for-food.eu.org]
[219.100.37.233 listed in will-spam-for-food.eu.org]
[219.100.37.233 listed in will-spam-for-food.eu.org]
[219.100.37.233 listed in will-spam-for-food.eu.org]
[219.100.37.233 listed in will-spam-for-food.eu.org]
[219.100.37.233 listed in will-spam-for-food.eu.org]
[195.228.240.101 listed in will-spam-for-food.eu.org]
[195.228.240.101 listed in will-spam-for-food.eu.org]
[195.228.240.101 listed in will-spam-for-food.eu.org]
[195.228.240.101 listed in will-spam-for-food.eu.org]
[195.228.240.101 listed in will-spam-for-food.eu.org]
[195.228.240.101 listed in will-spam-for-food.eu.org]
[195.228.240.101 listed in will-spam-for-food.eu.org]
[195.228.240.101 listed in will-spam-for-food.eu.org]
[195.228.240.57 listed in will-spam-for-food.eu.org]
[195.228.240.57 listed in will-spam-for-food.eu.org]
[195.228.240.57 listed in will-spam-for-food.eu.org]
[195.228.240.57 listed in will-spam-for-food.eu.org]
[195.228.240.57 listed in will-spam-for-food.eu.org]
[195.228.240.57 listed in will-spam-for-food.eu.org]
[195.228.240.57 listed in will-spam-for-food.eu.org]
[195.228.240.57 listed in will-spam-for-food.eu.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[219.100.37.233 listed in sbl-xbl.spamhaus.org]
1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org
[Listed by XBL, see]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[olenazelenska68(at)gmail.com]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[195.228.240.57 listed in bl.score.senderscore.com]
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.7 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
Subject: {SPAM?} N41-
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 02 Jul 2026 05:51:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wfFvg-00000000K93-2Zyh
for dave@doctor.nl2k.ab.ca;
Thu, 02 Jul 2026 05:50:04 -0600
Resent-From: The Doctor
Resent-Date: Thu, 2 Jul 2026 05:50:04 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-outd.mail.t-online.hu ([195.228.240.57]:32775)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wfA7H-00000000Opf-03Wy
for www@nl2k.ab.ca;
Wed, 01 Jul 2026 23:37:48 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=t-online.hu; s=mail;
t=1782970552; bh=SN5PyyZUBRYDF843AEL/zTBiHZ5WIZ7C2RzHU0oj2AI=;
h=Date:From:To:Subject:Reply-to;
b=DWqlqKqC2gCnXS7u2Gx6J/+GiPqqEtAlwOwCXggvvUba587KTKX+kjFGav52HedLf
kIi/3k4b0ryjaZnsYB6q2X4YoRQ6Tjpf6KmGr8hPy3dUINKNhVnEWw7JMaP8wikyko
WPWEN7bx6ZasuwvWyJnOtNuY6jhflDiZlE4O+CPbTKQFHB0so0rg8Q/MUDOKg9E0mV
dggXOIGQbPYMGKL7tzQYcW3ihaavqbsRRx375IXFrIeqtUB9k4LepdDMkpMFnNUCE/
jkwQavnIZhRC/tAz3M2W0C4gr2J2KopfKLjUZyFCnyqm0R4NdzR9c2pYbLG9A4CZxF
rM/27zNrLjzNQ==
Received: from maxwm03a.mail.t-online.hu (maxwm03a.mail.telekom.hu [195.228.240.101])
by mail-outd.mail.t-online.hu (Postfix) with ESMTP id 4grQVG4vClzDMNH;
Thu, 2 Jul 2026 07:31:34 +0200 (CEST)
Received: from public-nat-01.vpngate.v4.open.ad.jp
(public-nat-01.vpngate.v4.open.ad.jp [219.100.37.233]) by webmail.telekom.hu
(Horde Framework) with HTTP; Thu, 02 Jul 2026 07:35:52 +0200
Date: Thu, 02 Jul 2026 07:35:52 +0200
Message-ID: <20260702073552.Horde.Hb_cGX4-B6orPjAK0trl3EJ@webmail.telekom.hu>
From: Olena Zelenska
To: me@me.com
Subject: N41-
Reply-to: olenazelenska68@gmail.com
User-Agent: Horde Application Framework 5
Content-Type: text/html; charset=utf-8
Content-Description: HTML =?utf-8?b?bGV2w6ls?=
MIME-Version: 1.0
Content-Disposition: inline
X-VadeSecure-Status: Legit
X-VadeSecure-Score: 0
X-VadeSecure-Verdict: Legit
Authentication-Results: iprev=notverified ip=195.228.240.101;
spf=notverified client-ip=195.228.240.101 smtp.mailfrom=balint.peter@t-online.hu;
dkim=notverified (), header.i=;
dmarc=notverified
Received-SPF: SPF not checked
X-VadeSecure-Status: Legit
X-VadeSecure-Score: 0
X-VadeSecure-Cause: gggruggvucftvghtrhhoucdtuddrgeefiedrtddtgdehudehucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuofetifgjteftvffgnffgmffqofdpucfqfgfvnecuuegrihhlohhuthemuceftddtnecunecujfgurhephffvufhrfggtgggusehhtddttddtreejnecuhfhrohhmpefqlhgvnhgrucgkvghlvghnshhkrgcuoegsrghlihhnthdrphgvthgvrhesthdqohhnlhhinhgvrdhhuheqnecuggftrfgrthhtvghrnhepueffffevlefgfedttdeugfetheeghedtjeethfeludehieeigeffudefuedutdejnecukfhppeduleehrddvvdekrddvgedtrddutddupddvudelrddutddtrdefjedrvdeffeenuceurggutfgvphhuthfkphepvdduledruddttddrfeejrddvfeefnecuvehluhhsthgvrhfuihiivgepuddtnecurfgrrhgrmhepmhhouggvpehsmhhtphdpihhnvghtpeduleehrddvvdekrddvgedtrddutddupdhhvghlohepmhgrgiifmhdtfegrrdhmrghilhdrthdqohhnlhhinhgvrdhhuhdpmhgrihhlfhhrohhmpegsrghlihhnthdrphgvthgvrhesthdqohhnlhhinhgvrdhhuhdpnhgspghrtghpthhtohepfedupdhrtghpthhtohepmhgvsehmvgdrtghomhdprhgtphhtthhopeiffiifrdhprghlohhnshhosehusghishhhohhpshdrtggrpdhrtghpthhtohepfiiffidrphgrrhgrughishgvsehshihmphgrthhitghordgtrgdprhgtphhtthhopeiffiifrdhpihgtvghsrdhinh
htphhitggvshesihhoshdrsggtrdgtrgdprhgtphhtthhopeiffiifrdhprhgvshhiuggvnhhtsehhuggrshdrtggrpdhrtghpthhtohepfiiffidrrhgvughrihhvvghrrhhighhgvghrsehshhgrfidrtggrpdhrtghpthhtohepfiiffidrrhhitghhrghrugesmhgrrhhtihhnvgiirdgtrg
X-VadeSecure-Verdict: Legit
X-Spam_score: 12.1
X-Spam_score_int: 121
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings. This is Mrs. Olena Zelenska, I am contacting you
based on my personal interest to develop a mutual businesRelationship with
you in your country or your company. which I believe we could mutually benef
[...]
Content analysis details: (12.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[219.100.37.233 listed in dnsbl.ahbl.org]
[219.100.37.233 listed in dnsbl.ahbl.org]
[219.100.37.233 listed in dnsbl.ahbl.org]
[219.100.37.233 listed in dnsbl.ahbl.org]
[195.228.240.101 listed in dnsbl.ahbl.org]
[195.228.240.101 listed in dnsbl.ahbl.org]
[195.228.240.101 listed in dnsbl.ahbl.org]
[195.228.240.101 listed in dnsbl.ahbl.org]
[195.228.240.57 listed in dnsbl.ahbl.org]
[195.228.240.57 listed in dnsbl.ahbl.org]
[195.228.240.57 listed in dnsbl.ahbl.org]
[195.228.240.57 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[219.100.37.233 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[219.100.37.233 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[219.100.37.233 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[219.100.37.233 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[219.100.37.233 listed in will-spam-for-food.eu.org]
[219.100.37.233 listed in will-spam-for-food.eu.org]
[219.100.37.233 listed in will-spam-for-food.eu.org]
[219.100.37.233 listed in will-spam-for-food.eu.org]
[219.100.37.233 listed in will-spam-for-food.eu.org]
[219.100.37.233 listed in will-spam-for-food.eu.org]
[219.100.37.233 listed in will-spam-for-food.eu.org]
[219.100.37.233 listed in will-spam-for-food.eu.org]
[195.228.240.101 listed in will-spam-for-food.eu.org]
[195.228.240.101 listed in will-spam-for-food.eu.org]
[195.228.240.101 listed in will-spam-for-food.eu.org]
[195.228.240.101 listed in will-spam-for-food.eu.org]
[195.228.240.101 listed in will-spam-for-food.eu.org]
[195.228.240.101 listed in will-spam-for-food.eu.org]
[195.228.240.101 listed in will-spam-for-food.eu.org]
[195.228.240.101 listed in will-spam-for-food.eu.org]
[195.228.240.57 listed in will-spam-for-food.eu.org]
[195.228.240.57 listed in will-spam-for-food.eu.org]
[195.228.240.57 listed in will-spam-for-food.eu.org]
[195.228.240.57 listed in will-spam-for-food.eu.org]
[195.228.240.57 listed in will-spam-for-food.eu.org]
[195.228.240.57 listed in will-spam-for-food.eu.org]
[195.228.240.57 listed in will-spam-for-food.eu.org]
[195.228.240.57 listed in will-spam-for-food.eu.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[219.100.37.233 listed in sbl-xbl.spamhaus.org]
1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org
[Listed by XBL, see
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[olenazelenska68(at)gmail.com]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[195.228.240.57 listed in bl.score.senderscore.com]
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.7 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
Subject: {SPAM?} N41-
Greetings.
This is Mrs. Olena Zelenska, I am contacting you based on my personal interest to develop a mutual businesRelationship with you in your country or your company. which I believe we could mutually benefit from.
Please reply urgently for more details
Regards,
Olena Zelenska
Please Note: if you receive this email in your junk or spam folders, please note it’s because of your internet ISP. Please mark it as not spam or move it to your inbox to reply
This is Mrs. Olena Zelenska, I am contacting you based on my personal interest to develop a mutual businesRelationship with you in your country or your company. which I believe we could mutually benefit from.
Please reply urgently for more details
Regards,
Olena Zelenska
Please Note: if you receive this email in your junk or spam folders, please note it’s because of your internet ISP. Please mark it as not spam or move it to your inbox to reply