Nigerian spam from Google Gmail PaRT 2

Posted by Dave Yadallee on


--000000000000a1c2f606482cb959

Content-Type: text/plain; charset="UTF-8"



1 Lothbury, London EC2R 7DB

United Kingdom,

Good day ,

ZHOU XIN is my name with the Bank of China. I want to partner with you to

transfer funds into our account for investment.

Please state your direct phone number and full names in your reply so that

we can discuss benefits and process.

I await your reply on your willingness to partner with me .

PLEASE REPLY TO MY PRIVATE EMAIL :: xinzhouuk@aol.com

Yours sincerely

ZHOU XIN



--000000000000a1c2f606482cb959

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




t;,Helvetica,Arial,sans-serif">1 Lothbury, London EC2R 7DB

=3D"font-family:Roboto,"Helvetica Neue",Helvetica,Arial,sans-seri=

f">
rial,sans-serif">United Kingdom,

t;Helvetica Neue",Helvetica,Arial,sans-serif">
ly:Roboto,"Helvetica Neue",Helvetica,Arial,sans-serif">Good day=

=C2=A0
elvetica,Arial,sans-serif">,

lvetica Neue",Helvetica,Arial,sans-serif">
oboto,"Helvetica Neue",Helvetica,Arial,sans-serif">ZHOU XIN is my=

name with the Bank of China. I want to partner with you to transfer funds =

into our account for investment.

t;Helvetica Neue",Helvetica,Arial,sans-serif">
ly:Roboto,"Helvetica Neue",Helvetica,Arial,sans-serif">Please sta=

te your direct phone number and full names in your reply so that we can dis=

cuss benefits and process.

etica Neue",Helvetica,Arial,sans-serif">
oto,"Helvetica Neue",Helvetica,Arial,sans-serif">I await your rep=

ly on your willingness to partner with me .

Roboto,"Helvetica Neue",Helvetica,Arial,sans-serif">
=3D"font-family:Roboto,"Helvetica Neue",Helvetica,Arial,sans-seri=

f">PLEASE REPLY TO MY PRIVATE EMAIL ::=C2=A0
uuk@aol.com" target=3D"_blank" style=3D"font-family:Roboto,"Helvetica =

Neue",Helvetica,Arial,sans-serif">xinzhouuk@aol.com

nt-family:Roboto,"Helvetica Neue",Helvetica,Arial,sans-serif">
an style=3D"font-family:Roboto,"Helvetica Neue",Helvetica,Arial,s=

ans-serif">Yours sincerely

etica Neue",Helvetica,Arial,sans-serif">
oto,"Helvetica Neue",Helvetica,Arial,sans-serif">ZHOU XIN<=

/div>



--000000000000a1c2f606482cb959--

Nigerian spam from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 12 Jan 2026 07:53:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vfJHb-000000006uF-2WgH

for dave@doctor.nl2k.ab.ca;

Mon, 12 Jan 2026 07:52:39 -0700

Resent-From: The Doctor

Resent-Date: Mon, 12 Jan 2026 07:52:39 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f68.google.com ([209.85.217.68]:47353)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vfDNE-000000009ka-3blF

for doctor@doctor.nl2k.ab.ca;

Mon, 12 Jan 2026 01:34:15 -0700

Received: by mail-vs1-f68.google.com with SMTP id ada2fe7eead31-5ef2561e395so2064276137.2

for ; Mon, 12 Jan 2026 00:33:17 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1768206790; x=1768811590; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=C2dU0yTZI7I2ilWy2IqBs0TB0FRAsoWqxDG3h/QuvFY=;

b=Gom45vHWF8Kl+1MFjJNWTKkcS3EuyzZYKqpSb+wmMUR8sUBeD52C7CbjIhzoR4UMOG

zvevDHbAc1a7pwuZNNmexDJYSyW/+sMdJqp21ziwxd2YDjB/aaS4F4621Bj1a09R1pl0

GRz49QwCNZ9hiJSChToRFyHHZXZCE3HtHIZaavv2LyGtC6M4v4BZ4ZV5PIBh8iTY3vsT

imgwO7FrrOm/4JB1Es+mNIv7Dj0CaljUlXoN45olhBliN3Sa5gLWGWhU/kBzj6nXAHYr

qGDxNMAVwXkhcq5+vS4HCGVS7OZeCTiFiYdsLHU0rL4RZuPnVHzW8laCDtMiBWqCDvWE

ggPQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1768206790; x=1768811590;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=C2dU0yTZI7I2ilWy2IqBs0TB0FRAsoWqxDG3h/QuvFY=;

b=JSUfmqxo1hWN0UwpaWK+OEyVU4iUqBiZxU/wl5t9MNrM7PvLhf52Pr2/F630Ud1d2A

T5iDNP/nlSjMO6IlGqC2XdRPUmAaUTuhXVcWKN2jRY1LQfCPL9bKeHM6w4r0CLzCEnNe

P4fbyQhHeGUTkbVAqrnXCi1n4SkT+lMEU+eU1ZvkUViivpmnFZLE0rkAg10iw9wwqVOv

WbedXIL6PY6Tz+r/L1veojVTX/a7GWhy2xWSux2+qPTcaAMawZ1N1XJ7MUEl0h7qKj0G

Lq6JfObw2WvDZQvcTElgj4BCprp/2hMBzfmW5kuW+17uK9xZ6sR2ywYMONskLyuoAENd

SVrg==

X-Forwarded-Encrypted: i=1; AJvYcCXttUqSM2Tr3Hm11qVulA0ORzfvgb21HOD1LZSpbzu+gSzq31kd04FNXegLL547dyeCdeY8poo=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YxrTYKpNUPeaLnRZWRAUpk0GGsaQQ/8UKt9fW7/L57HmKchLWM5

8cjc3J8LIUhCan0+zKNJn0Mgfw0umfDN9wuKvg8BUGjPH9b63ssaljnkTiKvI9qf2+fQd8ozkKy

6AZ4YtwXBLNitZu32np220heaVDbVSGk=

X-Gm-Gg: AY/fxX7pgpeeF52CJLCIFhptwGuP2FDBrcxNujN9UeGPqyeE5Dvs1UgtygKz8nhnw6P

HjE4mBhmGXtZkcq/jXjuqDztTDzP1J4BvKRNrEUvHzSE7PifVObkz9NsSxjzPHiJE/dGGB4wag6

DigAYwMKYcAZRjYqq+50mIxp1KP6sei9SRRhUOt0CemU9E2MnCUFWqHPuADmiFpOisTBnn4E+QK

uhWVWgg4vPCmAHCSWQV4AUmrzOy+5fC2Zs+jzYY7d1EDrDOKvW2yi02rlx7q2LTuZ+OpAGsK7nU

tlcxBvKiKd88EzRXeNYc15gFcq0OsO/RDQ==

X-Google-Smtp-Source: AGHT+IEnqpQsZ+spKc1sLxXJN/12Pztpr5yYFYUCoFxvQoNHVFgeexILuSvrY51Tw7yMzGrHFflVoLKdtLhR6qS36vY=

X-Received: by 2002:a05:6102:5ccb:b0:5dd:b61a:a9c5 with SMTP id

ada2fe7eead31-5ecb062b3e1mr7272732137.0.1768206790409; Mon, 12 Jan 2026

00:33:10 -0800 (PST)

MIME-Version: 1.0

Reply-To: mtsolicitorsp1@gmail.com

From: BANK OF CHINA

Date: Mon, 12 Jan 2026 08:32:56 +0000

X-Gm-Features: AZwV_Qh8b8sRMhSDglfeWRZsqy70wFFKHsjU6jXp8cyh_xIB1rRXPMg97JSIpYU

Message-ID:

Subject: HAPPY NEW YEAR /INVESTMENT OFFER

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000a1c2f606482cb959"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 15.1

X-Spam_score_int: 151

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: 1 Lothbury, London EC2R 7DB United Kingdom, Good day , ZHOU

XIN is my name with the Bank of China. I want to partner with you to transfer

funds into our account for investment. Please state your direc [...]



Content analysis details: (15.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.217.68 listed in dnsbl.ahbl.org]

[209.85.217.68 listed in dnsbl.ahbl.org]

[209.85.217.68 listed in dnsbl.ahbl.org]

[209.85.217.68 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.217.68 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.217.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.217.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.217.68 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.217.68 listed in will-spam-for-food.eu.org]

[209.85.217.68 listed in will-spam-for-food.eu.org]

[209.85.217.68 listed in will-spam-for-food.eu.org]

[209.85.217.68 listed in will-spam-for-food.eu.org]

[209.85.217.68 listed in will-spam-for-food.eu.org]

[209.85.217.68 listed in will-spam-for-food.eu.org]

[209.85.217.68 listed in will-spam-for-food.eu.org]

[209.85.217.68 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.217.68 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.217.68 listed in wl.mailspike.net]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[mtsolicitorsp1(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[mtsolicitorsp1(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mtsolicitorsp1(at)gmail.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} HAPPY NEW YEAR /INVESTMENT OFFER

AI puppy robot phish part 3

Posted by Dave Yadallee on






A Futuristic Puppy That Adores You





Over 67% of families want a pet, but many worry about allergies, mess, or responsibility.

Wuffy solves this by bringing the joy of a real puppy into your home –

without the challenges.







30-Day Money-Back Guarantee




Try Wuffy at home. If your child doesn't fall in love, simply return it within 30 days

for a full refund. No questions asked.

















Real Families. Real Joy. 4.7 / 5



Over 1,400+ reviews – 97% of parents would recommend Wuffy to a friend.







Gemma B.


Verified Customer – 18 days ago


★★★★★




"I bought this for my niece's 7th birthday, thought it'd just be some fun gadget but she

literally screamed when she opened it! She named it 'Cupcake' right away and now

takes it everywhere. It barks when she pets it and she's obsessed – best gift I've ever given."









Melinda


★★★★★




"We love Wuffy!!! We got it for our toddler daughter and even we love to play with it.

It acts like a real puppy and the laughter we get from her is worth so much more than the price."









Carla


★★★★★




"Didn't expect it to be this interactive – it seriously reacts to you and doesn't just bark.

It walks, plays, and feels like a real little companion. Amazing!"

















Limited-Time Offer: GET -70% Discount




In stock and ready to ship. Don't miss the chance to give your child a best friend they'll never forget.









Get Wuffy Now & Save 70%







*Offer valid while stocks last.

















You are receiving this email because you subscribed to updates about family & kids products.





If you no longer wish to receive these emails, you can

unsubscribe here.





Company Name, Street 123, 00000 City, Country













Posted by Dave Yadallee on
.cta-button {

display: inline-block;

background-color: #ff6a3d;

color: #ffffff !important;

padding: 12px 28px;

border-radius: 999px;

font-size: 15px;

font-weight: bold;

text-transform: uppercase;

letter-spacing: 0.5px;

}

.cta-button:hover {

opacity: 0.9;

}

.guarantee-box {

margin: 15px 0;

padding: 10px 12px;

border-radius: 8px;

background-color: #fdf5e6;

border: 1px solid #f2d39e;

font-size: 13px;

}

.guarantee-title {

font-weight: bold;

color: #8b5a1e;

margin-bottom: 4px;

}

.review-box {

margin: 12px 0;

padding: 10px 12px;

border-radius: 8px;

background-color: #f4f7ff;

border: 1px solid #d4ddff;

font-size: 13px;

}

.review-name {

font-weight: bold;

color: #2b2a5a;

margin-bottom: 2px;

}

.review-meta {

color: #888;

font-size: 11px;

margin-bottom: 5px;

}

.stars {

color: #ffb347;

font-size: 13px;

margin-bottom: 4px;

}

.footer {

width: 100%;

max-width: 600px;

margin: 12px auto 0;

font-size: 11px;

color: #777777;

text-align: center;

}

.footer a {

color: #777777;

text-decoration: underline;

}

@media only screen and (max-width: 620px) {

.content {

padding: 18px 16px 6px;

}

.cta-section {

padding: 12px 16px 16px;

}

}



























































AI puppy robot phish part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 11 Jan 2026 18:54:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vf77E-00000000Anq-3eeH

for dave@doctor.nl2k.ab.ca;

Sun, 11 Jan 2026 18:53:08 -0700

Resent-From: The Doctor

Resent-Date: Sun, 11 Jan 2026 18:53:08 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [147.45.50.200] (port=58503 helo=solaceteletherapy.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

id 1vf3NB-00000000LKp-2FoP

for sales@netknow.ca;

Sun, 11 Jan 2026 14:53:28 -0700

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=netknow.ca;

h=Date:Message-Id:To:From:Subject:Content-Type:Mime-Version:

Content-Transfer-Encoding; i=sales@netknow.ca;

bh=nme0bSgEnnm+kb0kg+c6zI28uQg=;

b=Bof9Z0NjkzSnqpLv1Y1Y6/uvQmx/4kJuBxXEhVTSFfEpc8U666Jg0TulDjw8uGkhp1WSIsS/j3u3

Ofv3+uuHfKz6oVzpzgERAs/Lz+54JvUhLQGzvsa4VkjHDiCjG4MFwzfxmlwRlFeVl6X5jJ2Tt7Uj

bdIdSZjzBx8XAElfTuc=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=netknow.ca;

b=AnVrTcyiHYCetf8BGp/vxr8Ytm/9YtITRiJflYQ6KDPPeMKGIndwQbktnhIt/vOxv+/O5pamqUQ1

z8axjNigUaxfl7HyxMAQf+Z1ppHKcoCrYcRGlNb1wuldzFPMrJBceI/kdoZEMdU+b3HQvqkMzbDD

oDqZjTB8x/CIgvtuSFg=;

Date: Sun, 11 Jan 2026 21:52:33 +0000

Message-Id: <797224537056678.2.ZLB2101528018@solaceteletherapy.com>

To: sales@netknow.ca

From: Natural Balance Coach

Subject: Say Goodbye to Old Habits – Hello Energy

Content-Type: text/html; charset="UTF-8"

Mime-Version: 1.0

Content-Transfer-Encoding: 8bit

X-Spam_score: 13.9

X-Spam_score_int: 139

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Meet Wuffy – Your Child's New Best Friend Your Child's

New Best Friend: Wuffy



Content analysis details: (13.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[147.45.50.200 listed in dnsbl.ahbl.org]

[147.45.50.200 listed in dnsbl.ahbl.org]

[147.45.50.200 listed in dnsbl.ahbl.org]

[147.45.50.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[147.45.50.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[147.45.50.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[147.45.50.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[147.45.50.200 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[147.45.50.200 listed in will-spam-for-food.eu.org]

[147.45.50.200 listed in will-spam-for-food.eu.org]

[147.45.50.200 listed in will-spam-for-food.eu.org]

[147.45.50.200 listed in will-spam-for-food.eu.org]

[147.45.50.200 listed in will-spam-for-food.eu.org]

[147.45.50.200 listed in will-spam-for-food.eu.org]

[147.45.50.200 listed in will-spam-for-food.eu.org]

[147.45.50.200 listed in will-spam-for-food.eu.org]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: leaadpersons.com]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: 89.185.80.148]

0.3 OFFER_2 BODY: Offers you Something (2)

1.0 SAVE_PERCENT BODY: Save some percentage

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.3 MIME_8BIT_HEADER Message header contains 8-bit character

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX

1.8 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only

Subject: {SPAM?} Say Goodbye to Old Habits – Hello Energy











Meet Wuffy – Your Child's New Best Friend















Slim, secure, and built to last—get 75% OFF CardShield today.




RFID-Blocking Protection — CardShield




11K+ Happy Customers · Rated 4.7/5





"Front-pocket comfort, zero bulk, and real peace of mind." — Peter R.


‌







style="display:inline-block; background:#10b981; border:1px solid #34d399; color:#0b1222; font-family:Arial, Helvetica, sans-serif; font-weight:bold; font-size:15px; line-height:44px; height:44px; padding:0 20px; border-radius:8px; text-align:center;">

Secure Yours Now







Limited-time offer. While supplies last.
















You received this email because you subscribed to CardShield updates.




Unsubscribe

 | 

Shop CardShield


















shielding credit card phish part 3

Posted by Dave Yadallee on








Slim, secure, and built to last—get 75% OFF CardShield today.