Nigerian spam from google Gmail
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 18 May 2025 05:36:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uGcIL-00000000B3r-2WNe
for dave@doctor.nl2k.ab.ca;
Sun, 18 May 2025 05:35:05 -0600
Resent-From: The Doctor
Resent-Date: Sun, 18 May 2025 05:35:05 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oi1-f196.google.com ([209.85.167.196]:60516)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uGXkh-00000000EBA-3vUX
for doctor@doctor.nl2k.ab.ca;
Sun, 18 May 2025 00:44:13 -0600
Received: by mail-oi1-f196.google.com with SMTP id 5614622812f47-3f6eaa017d0so3155595b6e.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1747550528; x=1748155328; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=j+MtZIfVdKyfRcq4zfxA20LfuSMjebieTcfxWgKObB0=;
b=L+kGQPoX4/jMwcIqq9wsrvWPoJT+YSYMXu2EFHVdwuRJnSsrG72UEtKq+UkTymgfDL
FMOAZqUYLCqQE/d9wPCP6fma8czNMIiYIqQVPvqH1/778TUND/EXtw2/IAzDpT03rR5a
eyPXpjg/K5YTn4SajIaTykJAxWtxXsxd812QAEjHA8+JfbhyyV8WU49QrUnUNcHTkJSl
zW9U8pKbFuDtU8VXILIzhw5MFhjNKvdqPCkRw6F4IwsRXiRN4/BVAJYbK/4AzmdrOh83
UIwevHXJFai2gvpguyrEjX8XD7EZPQaq35sE3EvXcjf/uTGwmVqeTVkm6wVPYYMFv1DO
K6xw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1747550528; x=1748155328;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=j+MtZIfVdKyfRcq4zfxA20LfuSMjebieTcfxWgKObB0=;
b=JHq/9s701Nzy7D8FIHMHvU/YbmLByk7H6TbOc5hWIYoSLEZ6f2VpyIA5pz56j5baWH
AHoAbUKYulHZSh+KMK36vOoW0zS/ha/6jx29Q4utfVNzHMNDnxghHudBCH/lT9SyohIm
yiaKBQN2b5OUzb8DFGbueH5qdA/wsdhC2ImO+RL7dJq3Pg5lfRx90KSVOnMO4wEyYABV
LfSDtsLykDKksIAvw0N1HKtAyNPQXjfTzL5hRetgSIcRKpu8ObIcyxIRA6snKQRgeZU7
/wJWyreOf8e261p1RfvB5gzeiGmRCQnep15NneZdHHEcktWJlDVZIMTzRwd3xygZlBee
T0dg==
X-Forwarded-Encrypted: i=1; AJvYcCXWCsD905M63LoqxaC0fROGrOZb+l45ywITdwTJi1OHDgOy8YBH0V603LtuVniU7h7dIAp0sw4=@doctor.nl2k.ab.ca
X-Gm-Message-State: AOJu0YwNjHr8RIxAc1knsz5McYiXnX90/KrBZC+kzufSExhmBEaApfoO
keDUT3GisHBp8RpLcaKFKILLrl5qq1HDaLLitSjh8hbGZ2RW3V9Aa1cQnQQdT43mla9tFEzGQQn
gR464nyg0m8XU8O0ob0UXP8u9rpAKC2s=
X-Gm-Gg: ASbGncu3P0yBhWYvlDLTM3G/heisKl25d/UXxe6xy3OKkFT/KTRg9plUZSiDP9LV9OB
dtXKnkFnZVFqRMZ9GN236Y1Bb8zKSe4r1sbXSULzavWPIYLbzkA693bhlAiaiPlSQtlDlun71dB
NtqpR/SyC53h1xE5knqlMUHHDVC/ltfBEuISeFpSxJmVOUN307n+Hk4XFe/cRc4l/CFQ==
X-Google-Smtp-Source: AGHT+IF7hTGT/Ben1EjwJbEz/WGhzNcdx7Yjne9FZVXkKTW0oB3LDPpu1jP4LEh8cuCIrNa8Lyp078x7JwA2Q1+Vi0s=
X-Received: by 2002:a05:6808:80a9:b0:403:3503:6a16 with SMTP id
5614622812f47-404d8679928mr5445875b6e.1.1747550527559; Sat, 17 May 2025
23:42:07 -0700 (PDT)
MIME-Version: 1.0
From: Mr Wolfgang
Date: Sat, 17 May 2025 23:41:55 -0700
X-Gm-Features: AX0GCFuTLg3gpGP6_WlbF6SRxkJXzEDq0hq3rI77So5ZedtU0OKS3q8fj4vldPQ
Message-ID:
Subject: Please I Need Your Help,
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000006c1deb063563506b"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 11.3
X-Spam_score_int: 113
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I Need Your Help, I am Mr Wolfgang Hermann Triebsch, a due
Citizen of Germany and Canada, but living in Burkina Faso. I am 72 years
old, I lost my wife and two daughters during the Burkina Faso Political unrest
that ha [...]
Content analysis details: (11.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.167.196 listed in dnsbl.ahbl.org]
[209.85.167.196 listed in dnsbl.ahbl.org]
[209.85.167.196 listed in dnsbl.ahbl.org]
[209.85.167.196 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.167.196 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.167.196 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.167.196 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.167.196 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.167.196 listed in will-spam-for-food.eu.org]
[209.85.167.196 listed in will-spam-for-food.eu.org]
[209.85.167.196 listed in will-spam-for-food.eu.org]
[209.85.167.196 listed in will-spam-for-food.eu.org]
[209.85.167.196 listed in will-spam-for-food.eu.org]
[209.85.167.196 listed in will-spam-for-food.eu.org]
[209.85.167.196 listed in will-spam-for-food.eu.org]
[209.85.167.196 listed in will-spam-for-food.eu.org]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.167.196 listed in sa-trusted.bondedsender.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.167.196 listed in sa-accredit.habeas.com]
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.167.196 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[somethingtictac(at)gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.196 listed in wl.mailspike.net]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.167.196 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.167.196 listed in bl.score.senderscore.com]
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 HK_NAME_FM_MR_MRS No description available.
2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Please I Need Your Help,
--0000000000006c1deb063563506b
Content-Type: text/plain; charset="UTF-8"
I Need Your Help,
I am Mr Wolfgang Hermann Triebsch, a due Citizen of Germany and Canada, but
living in Burkina Faso. I am 72 years old, I lost my wife and two daughters
during the Burkina Faso Political unrest that happened in August 2016.
I am a philanthropist and a God fearing devoted Christian, a Crude Oil
dealer and Architecture.
Due to the shock of their death that resulted in me being diagnosed with
High Blood Pressure (HBP) also with Paralysis.
I cannot walk or stand, I have been bedridden for years now, recently I was
diagnosed with Prostate Cancer, and I have concluded that I will donate all
my savings to charities and churches.
Since I know that I have very limited time to stay on earth before I die
according to my Doctors, I have been helping and contributing some amounts
of money to Orphanage Homes and to Charity Organizations, as well as
Foundations with the help of the Priest of the Catholic church where i
worship, I have given donations to over 10 Charity Organizations and
Foundations, in Africa, Asia, South America, etc. at this moment I have the
balance deposit sum of $7,000,000,00 USD, in one of the prime bank here in
Burkina Faso which I want to entrust in you or your church or your
foundation for charity project in your country with my name.
As soon as I receive your reply (wolfgangtriebsch2@gmail.com) I shall give
you the contact of my bank where you will send your bank details and other
requirements they may need from you .I want you and the church to always
pray for me. Thanks for your understanding.
Best regards,
Mr. Wolfgang Hermann Triebsch.
--0000000000006c1deb063563506b
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
I am Mr Wolfgang Hermann Triebsch=
, a due Citizen of Germany and Canada, but living in Burkina Faso. I am 72 =
years old, I lost my wife and two daughters during the Burkina Faso Politic=
al unrest that happened in August 2016.
I am a philanthropist and a =
God fearing devoted Christian, a Crude Oil dealer and Architecture.
=
Due to the shock of their death that resulted in me being diagnosed with Hi=
gh Blood Pressure (HBP) also with Paralysis.
I cannot walk or stand,=
I have been bedridden for years now, recently I was diagnosed with Prostat=
e Cancer, and I have concluded that I will donate all my savings to chariti=
es and churches.
Since I know that I have very limited time to stay =
on earth before I die according to my Doctors, I have been helping and cont=
ributing some amounts of money to Orphanage Homes and to Charity Organizati=
ons, as well as Foundations with the help of the Priest of the Catholic chu=
rch where i worship, I have given donations to over 10 Charity Organization=
s and Foundations, in Africa, Asia, South America, etc. at this moment I ha=
ve the balance deposit sum of $7,000,000,00 USD, =C2=A0in one of the prime =
bank here in Burkina Faso which I want to entrust in you or your church or =
your foundation for charity project in your country with my name.
As=
soon as I receive your reply (
m">wolfgangtriebsch2@gmail.com) I shall give you the contact of my bank=
where you will send your bank details and other requirements they may need=
from you .I want you and the church to always pray for me. Thanks for your=
understanding.
Best regards,
Mr. Wolfgang Hermann Triebsch.
>
--0000000000006c1deb063563506b--