More Nigerian Spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 18 Jun 2022 15:58:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1o2gRf-0007MJ-Un

for dave@doctor.nl2k.ab.ca;

Sat, 18 Jun 2022 15:57:31 -0600

Resent-From: The Doctor

Resent-Date: Sat, 18 Jun 2022 15:57:31 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f174.google.com ([209.85.167.174]:39918)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1o2eof-0003UX-V5

for doctor@doctor.nl2k.ab.ca;

Sat, 18 Jun 2022 14:13:14 -0600

Received: by mail-oi1-f174.google.com with SMTP id bd16so9277087oib.6

for ; Sat, 18 Jun 2022 13:12:52 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:from:date:message-id:subject:to;

bh=d+btXPHMxxiMzhQa5xCaVHxJdbvOoYUKZJxCRRoBosc=;

b=AgTJ9R5lDR24BJtld8wz74vabRB421AGIl03aajwYdjVQozpe2rQ6ugNWrAqcjhfFk

x7Yhlb1FC/qi87WMVLwIvMgdnVqMhum3Jyqa99aKLzdPrB89og8UL3jMDHaY6voLZ8jG

Bt41hWqrb8GwbZjcDaHaiPMAUKtPHS6NTuQZ90euk4TUyCvKQlKnQm7rI4zIhVx4phqI

H/r8wTPo/axNt2+e6ksNDLYUINqyedG9wsA9kNNFp/lirgbwFAyB2Z58zqo2+InVgFP0

fcbk2rBB8ANyq2GO0ytOCZQQA8J+r0kR23H1KM2SwYMOPlv+DLijaiC7VS/AWiT1KTW1

yYRw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:from:date:message-id:subject:to;

bh=d+btXPHMxxiMzhQa5xCaVHxJdbvOoYUKZJxCRRoBosc=;

b=q9QVJfI8V+Smq7juMCIx+c1Q+F/NF5wqdYwviZOeCeiIxsY6K5tPiYdD1qfyb5rCSi

jddEIqosaeBfuaOTpp0PVBb7QcuVjKvxMYbJL1T/syiJ5Y0NFCUIiEmAY3gxfp1vd3Ma

q0v+WCSMYj+yd1v3aWtKNIFff9e/BQA/oOpt88PPDHHGVSsyazyMueVE2aCmEw/L/yC/

gzAL5mCeoL7ymflB4nnY3VBciSW3EAalDudN4rCiwSkp3v03UeY+6Z6bg83LwkN4FicT

DEc+pBfnnP0VPFwn1KnxYfOj429vbRdLbgZRv6RNJ0QKftiUX8oZ9FUGnSCyBhcPUuga

4M+w==

X-Gm-Message-State: AJIora9TZGZaYm52x8gGImjA7BMz281zRmDh/XZqf6pJs6ciaupWPfLq

UAXatYtLvnSJU3tTYXvTnUOpbIE+olEQKNPgvsM=

X-Google-Smtp-Source: AGRyM1sNXg9I5mjoUIKiy0lfyImlySIYhJ3wQcGo6d4xy7uGlAJUNfbYnfHVlpQZd4trmzeHeGwMaSsX3qr44Dz45fc=

X-Received: by 2002:a05:6808:300f:b0:325:a942:fd64 with SMTP id

ay15-20020a056808300f00b00325a942fd64mr8562287oib.41.1655583166390; Sat, 18

Jun 2022 13:12:46 -0700 (PDT)

MIME-Version: 1.0

From: Mrs Aisha Al-Qaddafi

Date: Sat, 18 Jun 2022 08:11:23 -0700

Message-ID:

Subject: please Dear i need your urgent reply

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000008765cf05e1be7ee6"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 13.4

X-Spam_score_int: 134

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: please Dear i need your urgent reply Please bear with me.

I am writing this letter to you with tears and sorrow from my heart. I am

Aisha Muammar Gaddafi, the only daughter of the embattled president of Libya,

Hon. Muammar Gaddafi. I know my mail might come to you as a surprise because

you don’t know me, but due to the unso [...]



Content analysis details: (13.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.174 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[mrsaishaalqaddafi967[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date

2.5 HK_SCAM_N2 BODY: No description available.

1.3 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

0.9 URG_BIZ BODY: Contains urgent matter

1.0 HK_SCAM_N15 BODY: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

0.0 HK_SCAM No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

1.5 HK_NAME_FM_MR_MRS No description available.

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.5 XFER_LOTSA_MONEY Transfer a lot of money

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} please Dear i need your urgent reply



--0000000000008765cf05e1be7ee6

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



please Dear i need your urgent reply



Please bear with me. I am writing this letter to you with tears and sorrow

from my heart.



I am Aisha Muammar Gaddafi, the only daughter of the embattled president of

Libya, Hon. Muammar Gaddafi. I know my mail might come to you as a surprise

because you don=E2=80=99t know me, but due to the unsolicited nature of my

situation here in Refugee camp Ouagadougou Burkina Faso i decided to

contact you for help. I have passed through pains and sorrowful moments

since the death of my father. At the same time, my family is the target of

Western nations led by Nato who want to destroy my father at all costs. Our

investments and bank accounts in several countries are their targets to

freeze.



My Father of blessed memory deposited the sum of $27.5M (Twenty Seven

Million Five Hundred Thousand Dollars) in a Bank at Burkina Faso which he

used my name as the next of kin. I have been commissioned by the (BOA) bank

to present an interested foreign investor/partner who can stand as my

trustee and receive the fund in his account for a possible investment in

his country due to my refugee status here in Burkina Faso.



I am in search of an honest and reliable person who will help me and stand

as my trustee so that I will present him to the Bank for the transfer of

the fund to his bank account overseas. I have chosen to contact you after

my prayers and I believe that you will not betray my trust but rather take

me as your own sister or daughter. If this transaction interests you, you

don't have to disclose it to anybody because of what is going on with my

entire family, if the United nation happens to know this account, they will

freeze it as they freeze others, so please keep this transaction only to

yourself until we finalize it.



Sorry for my pictures. I will enclose it in my next mail and more about me

when I hear from you okay.



Yours Sincerely

Best Regard,

Aisha Gaddafi



--0000000000008765cf05e1be7ee6

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



please Dear i need your urgent reply

Please bear wi=

th me. I am writing this letter to you with tears and sorrow from my heart.=



I am Aisha Muammar Gaddafi, the only daughter of the embattled pres=

ident of Libya, Hon. Muammar Gaddafi. I know my mail might come to you as a=

surprise because you don=E2=80=99t know me, but due to the unsolicited nat=

ure of my situation here in Refugee camp Ouagadougou Burkina Faso i decided=

to contact you for help. I have passed through pains and sorrowful moments=

since the death of my father. At the same time, my family is the target of=

Western nations led by Nato who want to destroy my father at all costs. Ou=

r investments and bank accounts in several countries are their targets to f=

reeze.

My Father of blessed memory deposited the sum of $27.5M (Twen=

ty Seven Million Five Hundred Thousand Dollars) in a Bank at Burkina Faso w=

hich he used my name as the next of kin. I have been commissioned by the (B=

OA) bank to present an interested foreign investor/partner who can stand as=

my trustee and receive the fund in his account for a possible investment i=

n his country due to my refugee status here in Burkina Faso.

I am in=

search of an honest and reliable person who will help me and stand as my t=

rustee so that I will present him to the Bank for the transfer of the fund =

to his bank account overseas. I have chosen to contact you after my prayers=

and I believe that you will not betray my trust but rather take me as your=

own sister or daughter. If this transaction interests you, you don't h=

ave to disclose it to anybody because of what is going on with my entire fa=

mily, if the United nation happens to know this account, they will freeze i=

t as they freeze others, so please keep this transaction only to yourself u=

ntil we finalize it.

Sorry for my pictures. I will enclose it in my =

next mail and more about me when I hear from you okay.

Yours Sincere=

ly
Best Regard,
Aisha Gaddafi




--0000000000008765cf05e1be7ee6--

Nigerian spam from Google

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 17 Jun 2022 18:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1o2ML3-000Eml-PJ

for dave@doctor.nl2k.ab.ca;

Fri, 17 Jun 2022 18:29:21 -0600

Resent-From: The Doctor

Resent-Date: Fri, 17 Jun 2022 18:29:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f49.google.com ([209.85.217.49]:41532)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1o2MGJ-000Ebe-Gw

for doctor@doctor.nl2k.ab.ca;

Fri, 17 Jun 2022 18:24:31 -0600

Received: by mail-vs1-f49.google.com with SMTP id r12so5473471vsg.8

for ; Fri, 17 Jun 2022 17:24:10 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=8KU4TjDf1bjxduwFoZGdEqnV+10G4DaK+SuskaHR+OU=;

b=OxCVC9GQTRPdM+d2FFc2bTHh2EmtMd12ZCheG1Aq6fw7WXs7jdW8B5w9AbK4nUaawJ

jXNxH7be7RNjEeq4/qC0lUx2VtTx84dlm27WIO1rSlUwl5kMb9YzvXhL9SHWS7nYBwlj

ArmXSaAzZL1qsBA2d+lzwcsRVMJSkKwHROKHtWCCFEHb1q42fEijUfZb5TVcpC32M1Nl

EyyYL+DJiz5eBFBtD7M5hQJTD1meWIzsjgy514pJ7axVc728Fc9ZbfJmyjATDF66k1Ex

kuhVEXSTHQYN2O0YMb8p+A3ogGaEkhUqWUDx3PUpLpI3lOoEPOusBK5yaexa2V9z4BnS

PhDQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=8KU4TjDf1bjxduwFoZGdEqnV+10G4DaK+SuskaHR+OU=;

b=Sci4uM2GBA4tcKSRX6WdAsvVsAP/DFxIlE5RVRwCYa5J0amw7gjn60Rs/0usbeKUEq

rmxQeYynCEqhlmyxR/RuCttGMZa0GU+eGu/ZsrC+KuGpbLRZQsW+N+jUc6Cgt3LNS51+

2xS6fRVQvLjkhvAnS/vK/KqPJnZQxT4GiZopuA9UOk+g7A8tJ35bL5YuVUu0anGh00Ba

kOahBRN/PneQJSKw9pnPtoap6zRaCU/yoBYLh/LDAhcNo/jqFF9m2Vljy7D2cmoAThuo

i1JUKWcyk/ave2NJzzjbbLYnXVP2kt5UmVAzs86dSFMH5A7nA1NkUPIeZeIu/U5bX5YL

1BXA==

X-Gm-Message-State: AJIora9ZhBB9G8RzmL8oxX1d7/T01Z09cJiTa5m00hU9umIS/zYmSnv+

trwLOKxTUsxLNMfsw5POWJDTzru2RrYcM5wYX2g=

X-Google-Smtp-Source: AGRyM1srWnE0UjuzhO8m6+KhkhpHntQ6/n5VGdlHUBywOFO8sVRVpNN8MetH6x5H7HyfpZ0ElOvBbcef3dAEApvowck=

X-Received: by 2002:a67:d182:0:b0:337:8e4c:76c7 with SMTP id

w2-20020a67d182000000b003378e4c76c7mr5352776vsi.75.1655511844225; Fri, 17 Jun

2022 17:24:04 -0700 (PDT)

MIME-Version: 1.0

Reply-To: mrstheresek@hotmail.com

From: "Mrs.Therese Koga"

Date: Sat, 18 Jun 2022 00:23:46 +0000

Message-ID:

Subject: Greetings to you dear

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000006587af05e1ade3dc"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 9.4

X-Spam_score_int: 94

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Friend, I assume that this message will reach you in

good health. Though I did not know you in person or having seen you before,

due to the reliable revelation, I decided to share this lucrative opportunity

w [...]



Content analysis details: (9.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.217.49 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[ali1954musa[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.0 HTML_MESSAGE BODY: HTML included in message

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

1.5 HK_NAME_FM_MR_MRS No description available.

-0.0 T_SCC_BODY_TEXT_LINE No description available.

3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Greetings to you dear



--0000000000006587af05e1ade3dc

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Friend,



I assume that this message will reach you in good health. Though I did not

know you in person or having seen you before, due to the reliable

revelation, I decided to share this lucrative opportunity with you. Mrs.

Therese Koga from Burkina Faso, married to Late Dr. Dr. Patrick Koga ,

director High River Gold Mines Ltd Burkina Faso West Africa. It=E2=80=99s =

just my

urgent need for foreign partner that made me contact you, so if you are

interested, kindly respond back to me, further information will be given to

you.



Regards

Mrs. Therese Koga



--0000000000006587af05e1ade3dc

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Friend,

I assume that this message will reach =

you in good health. Though I did not know you in person or having seen you =

before, due to the reliable revelation, I decided to share this lucrative o=

pportunity with you. =C2=A0 Mrs. Therese Koga =C2=A0from Burkina Faso, marr=

ied to Late Dr.=C2=A0 Dr. Patrick =C2=A0Koga , director High River Gold Min=

es Ltd Burkina Faso West Africa.=C2=A0 It=E2=80=99s just my urgent need for=

foreign partner that made me contact you, so if you are interested, kindly=

respond back to me, further information will be given to you.

Regar=

ds
Mrs. Therese Koga




--0000000000006587af05e1ade3dc--