Nigerian spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 25 Mar 2024 08:07:00 -0600

Received: from mail-pg1-f196.google.com ([209.85.215.196]:59803)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rokyK-00000000HFj-0gao

for dave@doctor.nl2k.ab.ca;

Mon, 25 Mar 2024 08:06:53 -0600

Received: by mail-pg1-f196.google.com with SMTP id 41be03b00d2f7-5d3907ff128so3238505a12.3

for ; Mon, 25 Mar 2024 07:04:49 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1711375484; x=1711980284; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=kbmkvkNbBqjlGX8aa7wRHqiwWTrtRjcep8LAj9udQQM=;

b=MX102fFvJKC76jnR3z9WZDdoGfLmoitPpV+2qtAPDv7L8IxxbEuINhDMkc7nQDauXq

f62NXZS3+2KCZHVpUJxkI7sux8uil8GghQVdMndNddhcARW0dArdWU9dw9VVuC4apEQF

Z2IsZLaIlMyVsc0Z+lQa12Z+bpjOzy1KSyi6SDupnZ1BfStI5MbUNhJr2bx7DxDjZ1Or

5dVFDPZu3mrkv3k3C7gZjyzFw0KcJWTHSUz+OA4MkWLCURtDa8mKV3q9aj+AxJOWAv+2

lSiL9S9mzY54ix7bkwZiZbfC10/nVI8rsGqn7mTbapwr7vI0Od5i9sRK2fLXO6LSlSLr

eDRw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1711375484; x=1711980284;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=kbmkvkNbBqjlGX8aa7wRHqiwWTrtRjcep8LAj9udQQM=;

b=EawmbbHqhdNBDwnzz3AtES6lHWNE8t248h08+Y88J66somNU9/izrWuagCAVF2I2fC

hs+AisP7pP/tXcrnjMaQV9138F1+iyEFvN+9FS8jbkyRjEPPZXX5GxpWemG0CgpZEQET

9860tSPNYAR1MA5i25mH/cYsqWyOmWnDvtYEsNPpMV75ZAhc2hTBCa07CG7ajIPF2Kgx

lJCl8XUNOU8S4hHbrnJK+hBgpJb08F1MOF2SOnAMZXooS+oXBGIAt6o2UbvvSzKkpKQt

KH8xcvNzSCwh+A/Ky7auao0sjI28PEHd6QqsML1zYQKk4cE6H2yAhHIkNZMXSA83viUh

Ttgw==

X-Forwarded-Encrypted: i=1; AJvYcCVyrmyfp9nhptq1wxf1zYBToD/IjVcOCIor52tUIltJ1zyoUVEiKromCw9NhErruK/+bzaSztMTrLVsgQpI1jIPqxB3gK/H

X-Gm-Message-State: AOJu0YxwAYLeYwaOzYKfk/PUQbuBXqj3Q9plRCVQvvRFmCFHfg6k9RBU

aFXPHP5yat2S3Jhn0O+QEVOw3JnqcDp5uIws+SIdTYkHK5pGDZ2Ui1EoJEBjr0Vri15YszIwFR5

csj+m9qBFksLQTENe17qA8PI2gzk=

X-Google-Smtp-Source: AGHT+IHaULLcCYgVGQDccai0DGVC5KhXO1BDFICKvMGsUBNjQsMJVwtHeYGTOpnwqGiQXgtVMA0sBG8Diy55sLHhmJI=

X-Received: by 2002:a17:90a:d3cd:b0:29a:46d2:e877 with SMTP id

d13-20020a17090ad3cd00b0029a46d2e877mr5967955pjw.48.1711375483515; Mon, 25

Mar 2024 07:04:43 -0700 (PDT)

MIME-Version: 1.0

Reply-To: mrsaishagaddafi76@hotmail.com

From: Mrs Aisha Al-Qaddafi

Date: Mon, 25 Mar 2024 07:04:22 -0700

Message-ID:

Subject: business

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000c5bfbc06147ca7a3"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 22.1

X-Spam_score_int: 221

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please bear with me. I am writing this letter to you with

tears of sorrow from my heart.I am Aisha Muammar Gaddafi, the only daughter

of the embattled president of Libya, Hon. Muammar Gaddafi. I knowm [...]



Content analysis details: (22.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.196 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.215.196 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[209.85.215.196 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.215.196 listed in wl.mailspike.net]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[mrsaishagaddafi76(at)hotmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mohaiyanibintishamsudin22(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[mohaiyanibintishamsudin22(at)gmail.com]

0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

2.5 HK_SCAM_N2 BODY: No description available.

1.0 HK_SCAM_N15 BODY: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

2.0 HK_SCAM No description available.

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.5 HK_NAME_FM_MR_MRS No description available.

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 XFER_LOTSA_MONEY Transfer a lot of money

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} business

X-Antivirus: AVG (VPS 240325-0, 3/24/2024), Inbound message

X-Antivirus-Status: Clean



--000000000000c5bfbc06147ca7a3

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Please bear with me. I am writing this letter to you with tears of sorrow

from my heart.I am Aisha Muammar Gaddafi, the only daughter of the

embattled president of Libya, Hon. Muammar Gaddafi. I knowmymailmight



Come to you as a surprise because you don=E2=80=99t know me, but due to the

unsolicited nature of my situation here inRefugeecampOuagadougouBurkina

Faso I decided to contact you for help.I have passed through pains and

sorrowful moments since the death



of my father. At the same time, my family is the target Western Nations led

by Nato who want to destroy my father at all costs.Our Investments and bank

accounts in several countries are their targets to freeze.



My Father of blessed memory deposited the sum of$27.5M(TwentySevenMillion

Five Hundred Thousand Dollars) in a BankBurkina Faso which he used my name

as the next of kin. I have been commissioned by the (BBc) bank to present

an interested foreign investor/partner who can stand as my trustee and

receive the fund in his account for a

possible investment in his country due to my refugee status here inBurkina

Faso.



I am in search of an honest and reliable person who will help me understand

as my trustee so that I will present him to theBank for the transfer of the

fund to his bank account overseas. I have chosen to contact you after my

prayers and I believe that you will not betray my trust but rather take me

as your own sister or daughter. If this transaction interests you, you

don't have to disclose it to anybody because of what is going on with my

entire family, if the United Nations happens to know this account,they will

freeze it as they freeze others,so please keep this transaction only to

yourself until we finalize



it.Sorry for my pictures. I will enclose it in my next mail and more about

me when I hear from you okay.



Yours Sincerely

Best Regard,

Aisha Gaddafi



mrsaishagaddafi76@hotmail.com



--000000000000c5bfbc06147ca7a3

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Please bear with me. I am writing this letter to you with =

tears of sorrow from my heart.I am Aisha Muammar Gaddafi, the only daughter=

of the embattled president of Libya, Hon. Muammar Gaddafi. I knowmymailmig=

ht

Come to you as a surprise because you don=E2=80=99t know me, but =

due to the unsolicited nature of my situation here inRefugeecampOuagadougou=

Burkina Faso I decided to contact you for help.I have passed through pains =

and sorrowful moments since the death

of my father. At the same time=

, my family is the target Western Nations led by Nato who want to destroy m=

y father at all costs.Our Investments and bank accounts in several countrie=

s are their targets to freeze.

My Father of blessed memory deposited=

the sum of$27.5M(TwentySevenMillion Five Hundred Thousand Dollars) in a Ba=

nkBurkina Faso which he used my name as the next of kin. I have been commis=

sioned by the (BBc) bank to present an interested foreign investor/partner =

who can stand as my trustee and receive the fund in his account for a
po=

ssible investment in his country due to my refugee status here inBurkina Fa=

so.

I am in search of an honest and reliable person who will help me=

understand as my trustee so that I will present him to theBank for the tra=

nsfer of the fund to his bank account overseas. I have chosen to contact yo=

u after my prayers and I believe that you will not betray my trust but rath=

er take me as your own sister or daughter. If this transaction interests yo=

u, you don't have to disclose it to anybody because of what is going on=

with my entire family, if the United Nations happens to know this account,=

they will freeze it as they freeze others,so please keep this transaction o=

nly to yourself until we finalize

it.Sorry for my pictures. I will e=

nclose it in my next mail and more about me when I hear from you okay.
<=

br>Yours Sincerely
Best Regard,
Aisha Gaddafi


o:mrsaishagaddafi76@hotmail.com">mrsaishagaddafi76@hotmail.com


>



--000000000000c5bfbc06147ca7a3--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA