Nigerian Google Spam
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 07 Aug 2026 23:25:50 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.5 (FreeBSD))
(envelope-from
id 1wsZYW-00000000KNm-2oRp
for dave@doctor.nl2k.ab.ca;
Fri, 07 Aug 2026 23:25:12 -0600
Resent-From: The Doctor
Resent-Date: Fri, 7 Aug 2026 23:25:12 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f41.google.com ([209.85.208.41]:52510)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.99.5 (FreeBSD))
(envelope-from
id 1wsTSZ-00000000Fu3-1Vi1
for root@nk.ca;
Fri, 07 Aug 2026 16:54:48 -0600
Received: by mail-ed1-f41.google.com with SMTP id 4fb4d7f45d1cf-6a0a4aa99bdso11682a12.1
for
ARC-Seal: i=1; a=rsa-sha256; t=1786143225; cv=none;
d=google.com; s=arc-20260327;
b=PVJC+2HLiJxOaPfDu5fUI/dYr5Dlj6bXmVJcE0x9zQSGb1Sio/ButKceGgiE+mq90M
LepME6zc5MhIHNc9osojsKHp/N+TJIkqY50d7xnzxOULsgMSUHQQdyJqvB0kM6IIqam7
pfnxiz4rInmcbzqh07TdSXnDWun6lzDc18OZeZypQl1ifqeHqGztdB9unMoNa5orDsOY
KtmeqwDXyNoBbgmjpPWXOwAuVbd9R4Ik7Tsw/sIuhPYROvIGHDn0dnM9+TMirkSLu+/N
8z/c7mD6cXQMTt8ArCR8+Sgdnl2/bOzMWbfxJeOgQgvRxUNBpq09S1Mkev7RvEgQdpY1
iEIw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;
h=to:subject:message-id:date:from:reply-to:in-reply-to:references
:mime-version:dkim-signature;
bh=5d1uo0TVAOohow1C8kRGk6WZ+47dVJJ1KDCLiWHCq1c=;
fh=cfHyk3ixUEj0FyoSqzaZ+6/La5zfzR5Ss4o3Z4VDn7I=;
b=FwZAcmI+gfht8ByjB9RtIkAGF2pl5bZVzXHJ+l2RScVJ9krTQl1ZvSUvEowHWZmXiS
XBMHV3jQHQ7NEKF0GmOxgnE3ztrdiDS+oJDzf6tX3GVlA5kxPQd9EBTXTGaco+kOpdEY
3fHoYbDy1sGUQsGl70/vdXCmPiNGn/2pLc/Ieh+EF3MNcnE4n1NfeHrMVwyz+Yn1BAQj
zC4sgP50EXSX9VBhbTUTkb3lcNElHhHZDCXdMkCWM7gc9JJ+jRCKP1Sn7TRNJQ+wJuGw
X0S0JIaE24ojvTN99od/Map66HqLfLGbPdwV28QA+hGTWq/WoJ4vqIsnPf2XXFTkrcNv
VL7Q==;
darn=nk.ca
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20251104; t=1786143225; x=1786748025; darn=nk.ca;
h=content-type:to:subject:message-id:date:from:reply-to:in-reply-to
:references:mime-version:from:to:cc:subject:date:message-id:reply-to
:content-type;
bh=5d1uo0TVAOohow1C8kRGk6WZ+47dVJJ1KDCLiWHCq1c=;
b=XlImmTick+fk2CXHEELqBG/7wq9QRofOf+/Fz2OZXvyy5ApEHUQwcQ9OWf9Fo1sTrh
Uqhgsh4t8GT672XZ4B+/fCfPrMMHze62Nvhaw2xCWDZTHhDKPYxbp+4a9G555dYlt/LR
L6OrxZxTL1Muj6w2hZQfxqNeJt/66K7VQUIv1FOEzUeL2aH9FI4YkSUOWL1tNzhOJ3Oe
vFqTxNuh41sGU6WP3KLDwnRBN3V9tNM6zQ4Tb5AyzxL+JdGChgjs1rZJKqBrbasKXCsc
JFurwwenqViIPuiMYKln8JM3XvQWD2DHGBoM9DRZoGrU/KUcG9ey4iGv4XEZd74g4RvX
pN0g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1786143225; x=1786748025;
h=content-type:to:subject:message-id:date:from:reply-to:in-reply-to
:references:mime-version:x-gm-gg:x-gm-message-state:from:to:cc
:subject:date:message-id:reply-to:content-type;
bh=5d1uo0TVAOohow1C8kRGk6WZ+47dVJJ1KDCLiWHCq1c=;
b=bwd2515ReKQEmnsqjeZ1bwGvYflu3EL5STVMez/ks1TY6J7KLhHVsgX15cLka26BGb
lgmVpxV5UoKUOWs3xh3bbXJedKzQZTWuC1jhP5eJnZP5x09gurcLjxjXAp+sX+/QGcnY
L03m2rUKiYHW4OfzwsPp9HHBl8rNq/Nhp8nMFLsebFf69Yqmo0Vh05STn7zlzJ7Q6Hnl
vqeZrN7IfjlxOH92piwyNarRq4kzwLU35xb2iVCYC+gKk6hQMCNWg8QA6xwv6UiwgX+6
Cuz7G4YtbK7aHAfLpYkEfm8118AAU6UL6Nu25V7Vtf5FrFh1J96FcNjiOiie6hGaaiLz
2AKQ==
X-Forwarded-Encrypted: i=1; AHgh+Rphd0Ks8wtQou8YCukIvfzdTE7N9Og3cjCDWfwr+azUKNIYVrh+MaK6vaUrmBGEZ9NUaapr@nk.ca
X-Gm-Message-State: AOJu0YzHCXMsvmT+fJTsnO1WFsMaTPZjeff+IvItq0XwFmv/CJ78iRop
lmgNkreLF8LZG5XkAJBwD85of4UTfP+31lpIPiwCIo8Uwxfk16pMF5lsbHizrZDb+PCqYSt1EZ9
pwme94rptCXzpRtL2aj0yR9Y3e7+8eqE=
X-Gm-Gg: AR+sD12dhVJd6pZaiq8YVPbXXDS3bZ53CWz3NJcLXflAhzXWqMHcNhVGKkHL4RVdTcY
aGn8GPcmrJp1wUWBksrCm8P3Dd3Aw7vpmphInt93eQvLoYCs4+I4zycPFhxDBUF7pbLoezPn37H
5YL98zsxiU1teQJABxrvGzwupd9chY5nG3WEkYn7zGxSFBReprjVHJXeoxxXZaIfckrfhh7LDbI
pL6z6+O2RDg/xjOR9HS29mu/kgxcZcvETtFjCKmVbUgZ3uX9ohOfoLw2NkW8PsyvEEleTDKeJUb
5jkI0U/j93fyAGJJRPkEv5L5yswG96UTPEOt+NJvrh8tUaNDyQmXZg==
X-Received: by 2002:a17:907:3d02:b0:c1c:4fce:6517 with SMTP id
a640c23a62f3a-c2039b4c29bmr1287990066b.11.1786143225017; Fri, 07 Aug 2026
15:53:45 -0700 (PDT)
MIME-Version: 1.0
References:
In-Reply-To:
Reply-To: mbulamafuta538@gmail.com
From: JOHN ZUMA
Date: Sat, 8 Aug 2026 14:29:55 -0700
X-Gm-Features: AUfX_mzGRKSYolbTs3W0h9BTqau6ICFaeeW4JrVN6-UV0McAudjXMcNLSJkCgsE
Message-ID:
Subject: Seeking Your Consent
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000071f88106587ce0d0"
Bcc: root@nk.ca
X-Spam_score: 11.8
X-Spam_score_int: 118
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Sir/Madam, I am writing to inquire if your company can
supply Rice/Kidney Beans,Sugar to war countries like Congo DRC, we shall
make an upfront payment before supply. Best Regards,
Content analysis details: (11.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.208.41 listed in will-spam-for-food.eu.org]
[209.85.208.41 listed in will-spam-for-food.eu.org]
[209.85.208.41 listed in will-spam-for-food.eu.org]
[209.85.208.41 listed in will-spam-for-food.eu.org]
[209.85.208.41 listed in will-spam-for-food.eu.org]
[209.85.208.41 listed in will-spam-for-food.eu.org]
[209.85.208.41 listed in will-spam-for-food.eu.org]
[209.85.208.41 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.208.41 listed in dnsbl.ahbl.org]
[209.85.208.41 listed in dnsbl.ahbl.org]
[209.85.208.41 listed in dnsbl.ahbl.org]
[209.85.208.41 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.208.41 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.208.41 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.208.41 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.208.41 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.41 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.41 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[johnzuma225(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[mbulamafuta538(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[johnzuma225(at)gmail.com]
2.5 DATE_IN_FUTURE_12_24 Date: is 12 to 24 hours after Received: date
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.6 J_CHICKENPOX_55 BODY: 5alpha-pock-5alpha
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.208.41 listed in bl.score.senderscore.com]
Subject: {SPAM?} Seeking Your Consent
--00000000000071f88106587ce0d0
Content-Type: text/plain; charset="UTF-8"
Dear Sir/Madam,
I am writing to inquire if your company can supply Rice/Kidney Beans,Sugar
to war countries like Congo DRC, we shall make an upfront payment before
supply.
Best Regards,
Mbula Mafuta
Email: mbulamafuta538@gmail.com
--00000000000071f88106587ce0d0
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
=3D"ltr" class=3D"gmail_attr">
l_quote">
class=3D"gmail_quote">
I am writing =
to inquire if your company can supply Rice/Kidney Beans,Sugar to war countr=
ies like Congo DRC, we shall make an upfront payment before supply.
=
Best Regards,
Mbula Mafuta
Email: =C2=A0
afuta538@gmail.com" target=3D"_blank">mbulamafuta538@gmail.com
>
--00000000000071f88106587ce0d0--