More Nigerian spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 10 Jul 2022 16:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oAfHj-000PaY-IF

for dave@doctor.nl2k.ab.ca;

Sun, 10 Jul 2022 16:20:15 -0600

Resent-From: The Doctor

Resent-Date: Sun, 10 Jul 2022 16:20:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f193.google.com ([209.85.167.193]:33696)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oAXMz-000Oyx-TD

for doctor@doctor.nl2k.ab.ca;

Sun, 10 Jul 2022 07:53:14 -0600

Received: by mail-oi1-f193.google.com with SMTP id j193so4122700oih.0

for ; Sun, 10 Jul 2022 06:52:49 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:sender:from:date:message-id:subject:to

:content-transfer-encoding;

bh=0Xk90BHf6mwPdkYbVeFP81sv99Zzs1R/GjMtspPD45M=;

b=bnedHqh9SvrAQIFmUeSb/LiZ4z5x11XcKAVv92JtSb+9Ozki7FVhFwW8cln/yo6EPg

2tCfGuNORoKbE8tom6ypXaKfSaKbJK9SpmgXMdAtQ1pS/rgTFO61x3bwYlt3NgqtO7ny

fbsDeKUvV7v62D9UUWoPUmf5E0e/fIxcV6Gf9+KgZdTmzDKNMaC/VFA4OnW56SlhINVn

vwSZyZgppvy6y/qbPh7kUzymYFrwKpUKu6gznCbbkyAh6LMrhkY6tqsiZ74PFi93LEFq

r+olTsFdzWPGlRWNqYEJGBTsPBsYI/5IfQaf+5fqvYRRMBGblE5MmblHgBt9KC/dY9Os

NxAQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:sender:from:date:message-id:subject

:to:content-transfer-encoding;

bh=0Xk90BHf6mwPdkYbVeFP81sv99Zzs1R/GjMtspPD45M=;

b=BwbE6A9U4JgcE3Q1FtUipb7AFBgMtnepsD2G41/F3HkQjQWrn0oWRC6sv3PUSZVI3A

RTb25ORY94btEatcTTp4JTUoo2tilFauWSusAcnWlFanAEtxEcreQWF3oD7/b4uVxEZN

liRBDGm+fQamXw0/oVdSVfQK61Xw1Abn3YfPqUoXsf13u2wmVmMWZHVRS9wvrDOoI5xG

J2M/ecONcuHS9Wen78FNM0rq7iXmbH+AoDttt7qCrSwTjMZjFaX0/ADpXABFV7lSQkUv

BaqjDMMQzNvGh0aqF1OQtMNIru4rnZHvCBlOMeROAKE88/PIlysC1gANIDnPYiwnwo6i

1hVQ==

X-Gm-Message-State: AJIora+1v98pcwA14uEj8f6fK00QPhmhqQ9IR23+3ZLQINiCgfobyfp2

k2qxadz1RSdtso2W3jTG95Vh4EMKnm8wDJPUHwg=

X-Google-Smtp-Source: AGRyM1tV5x4GiCMjxUgdgYLfJAWyIW7YzWaysA/yDTBBGwVCvLPgZMyFnvWziZnYNanzZGpyHZojN/6x1S8LtGpBnCM=

X-Received: by 2002:a05:6808:1496:b0:335:7839:4e6c with SMTP id

e22-20020a056808149600b0033578394e6cmr4458797oiw.45.1657461163571; Sun, 10

Jul 2022 06:52:43 -0700 (PDT)

MIME-Version: 1.0

Sender: mrseunicedafia01@gmail.com

Received: by 2002:a9d:37a1:0:0:0:0:0 with HTTP; Sun, 10 Jul 2022 06:52:42

-0700 (PDT)

From: "Mrs.Rose Raya"

Date: Sun, 10 Jul 2022 13:52:42 +0000

X-Google-Sender-Auth: 2Buf6DGXXiYmRf1fdn2vxET4Ns4

Message-ID:

Subject: FROM MRS ROSE RAYA

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 9.5

X-Spam_score_int: 95

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: My name is Mrs.Rose Raya.from Indonesia, I know that this

message might come to you as a surprise because we don't know each other nor

have we ever met before but accept it with an open and positive mind. I have

a Very important request that [...]



Content analysis details: (9.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.193 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[mrseunicedafia01[at]gmail.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[yeetybayarmaa[at]gmail.com]

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.0 T_MONEY_PERCENT X% of a lot of money for you

0.0 FILL_THIS_FORM Fill in a form with personal information

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

0.0 MONEY_FORM Lots of money if you fill out a form

1.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of

money

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

Subject: {SPAM?} FROM MRS ROSE RAYA



My name is Mrs.Rose Raya.from Indonesia,



I know that this message might come to you as a surprise because we

don't know each other nor have we ever met before but accept it with

an open and positive mind. I have a Very important request that made

me to contact you; I was diagnosed with ovarian cancer disease which

doctors have confirmed and announced to me that i have just few days

to leave, Now that I=E2=80=99m ending the race like this, without any famil=

y

members and no child, I just came across your email contact from my

personal search.



I=E2=80=99m a business woman from Indonesia dealing with gold exportation h=

ere

in the Republic of Burkina Faso. I have decided to hand over the sum

of ($10.5 Million Dollar) in my account to you for the help of

orphanage homes/the needy once in your location to fulfill my wish on

earth. But before handing over my data=E2=80=99s to you, kindly assure me t=

hat

you will take only 50% of the money and share the rest to orphanage

homes/the needy once in your country, Return to enable me forward to

you the bank contact details now that I have access to Internet in the

hospital to enable you contact the bank, always

check your email and reply in time for better communications.



PLEASE REPLY ME WITH THE ANSWERS TO THOSE QUESTIONS BELOW FOR MY

CONFIRMATION SO THAT I CAN GIVE YOU THE EMAIL ADDRESS OF THE BANK FOR YOU

TO CONTACT THEM.



1. FULL NAME:

2. YOUR AGE:

3. SEX:

4. NATIONALITY:

5. COUNTRY OF RESIDENCE:

6. TELEPHONE NUMBER:

7. YOUR MARITAL STATUS:

8. YOUR OCCUPATION:

9. SEND TO ME YOUR PICTURE:

10. YOU HAVE TO ASSURE ME YOU WILL ACT AS I HAVE INSTRUCTED YOU IF THE

MONEY GETS TO YOUR BANK ACCOUNT.



Your early response will be appreciated.

Yours Faithfully,

Mrs.Rose Raya.

Nigerian Spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 10 Jul 2022 05:39:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oAVH6-000Dn3-7n

for dave@doctor.nl2k.ab.ca;

Sun, 10 Jul 2022 05:38:56 -0600

Resent-From: The Doctor

Resent-Date: Sun, 10 Jul 2022 05:38:56 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-io1-f43.google.com ([209.85.166.43]:46827)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oAUZT-0004D8-8F

for doctor@doctor.nl2k.ab.ca;

Sun, 10 Jul 2022 04:53:56 -0600

Received: by mail-io1-f43.google.com with SMTP id l24so2659704ion.13

for ; Sun, 10 Jul 2022 03:53:34 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:from:date:message-id:subject:to;

bh=KiL0uWw634mKym9aqSZjoqtAWsJw1XtXkRKwy3muzxI=;

b=V0iUQJkJTomZQXZnTJ35BFy8ooN1IRLnPUfZ0jzSpms9vxMk99rvfsczxyw6dyT2ZD

SXxXKqtSquw3goUIEYRcdEIoHavtRB22Gs+H/tcQkit1o53ni8mYgD8UeNy+gctRxUsO

9kBDu/HUbPrkau8hkf/wT5RjHxAAPzou3ak/piKs61jAEBlGiVNPf/Pp1+B4LCPeB9SH

ERPb6G09IuzHfpizbe2fhYd+1I+EA7wCJIpZMoiYZaY0KlOTQ5AChdnbuoYxGnXojeEV

3fDzEbURgFJM/dU5B/X3Vu0qi6CEbtmrhrIe4P40208UM4dWi25TMBiuJ6OkHIQQp6TT

WLUw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:from:date:message-id:subject:to;

bh=KiL0uWw634mKym9aqSZjoqtAWsJw1XtXkRKwy3muzxI=;

b=A5N3vN3hCoJJVnPnW/xfTkVbQ+7EN0+wH+ULLwJFrRdRTifUOt/IdRIn7TeRIFe9Mz

Fm2ECvqw/GKGw676O6+Uo07guHiX3o+eEADS5quhcYxNG1k/N4UTuDgSH2aWUm1I+XVo

Yy9iSTPcPlsIKnzVaVMEDW3HtsxGQzC264+k8XyxNmjyGpW6QDa6GVdTVvHVcnq7jmNJ

Sz4wj2aE3/12e487FSJmO+bJ9RkV0p/IuWPMwZQTAXNvMYJ081M8M2kAL62GgQsO9n9D

+K79b8bhg+YhCaw9Qslyaj/gJsOMk+UdiJgSWs3wTDIdQkNmlCPc+kQs6kmwIT7fTQDE

5XAQ==

X-Gm-Message-State: AJIora9zVHUEhyP2R32D6unIjzVLAbtvZ1gOgig93SoY3Gw1D8bGamqS

CJnoL9qxEFLuMmIK8w+aPiTghpRjNViCj49dE8U=

X-Google-Smtp-Source: AGRyM1ucDLZ9svjZ+k5QsacAQXhNbga/utV+NJKggdF5Uaenrr60MjHpfXWFXaoy2rn2+a55lbPN2p34pcx0JARY/u8=

X-Received: by 2002:a02:664a:0:b0:33f:5310:35e1 with SMTP id

l10-20020a02664a000000b0033f531035e1mr508424jaf.214.1657450407986; Sun, 10

Jul 2022 03:53:27 -0700 (PDT)

MIME-Version: 1.0

From: Mrs Aisha Al-Qaddafi

Date: Sun, 10 Jul 2022 10:53:05 -0700

Message-ID:

Subject: please Dear i need your urgent reply

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000cd0d0c05e3713e42"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 15.3

X-Spam_score_int: 153

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: please Dear i need your urgent reply Please bear with me.

I am writing this letter to you with tears and sorrow from my heart. I am

Aisha Muammar Gaddafi, the only daughter of the embattled president of Libya,

Hon. Muammar Gaddafi. I know my mail might come to you as a surprise because

you don’t know me, but due to the unso [...]



Content analysis details: (15.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.166.43 listed in wl.mailspike.net]

0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[ugohmike713[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[ugohmike713[at]gmail.com]

2.5 HK_SCAM_N2 BODY: No description available.

1.0 HK_SCAM_N15 BODY: No description available.

0.9 URG_BIZ BODY: Contains urgent matter

2.4 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

0.0 HTML_MESSAGE BODY: HTML included in message

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

0.0 LOTS_OF_MONEY Huge... sums of money

0.7 HK_SCAM No description available.

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} please Dear i need your urgent reply



--000000000000cd0d0c05e3713e42

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



please Dear i need your urgent reply



Please bear with me. I am writing this letter to you with tears and sorrow

from my heart.



I am Aisha Muammar Gaddafi, the only daughter of the embattled president of

Libya, Hon. Muammar Gaddafi. I know my mail might come to you as a surprise

because you don=E2=80=99t know me, but due to the unsolicited nature of my

situation here in Refugee camp Ouagadougou Burkina Faso i decided to

contact you for help. I have passed through pains and sorrowful moments

since the death of my father. At the same time, my family is the target of

Western nations led by Nato who want to destroy my father at all costs. Our

investments and bank accounts in several countries are their targets to

freeze.



My Father of blessed memory deposited the sum of $27.5M (Twenty Seven

Million Five Hundred Thousand Dollars) in a Bank at Burkina Faso which he

used my name as the next of kin. I have been commissioned by the (BOA) bank

to present an interested foreign investor/partner who can stand as my

trustee and receive the fund in his account for a possible investment in

his country due to my refugee status here in Burkina Faso.



I am in search of an honest and reliable person who will help me and stand

as my trustee so that I will present him to the Bank for the transfer of

the fund to his bank account overseas. I have chosen to contact you after

my prayers and I believe that you will not betray my trust but rather take

me as your own sister or daughter. If this transaction interests you, you

don't have to disclose it to anybody because of what is going on with my

entire family, if the United nation happens to know this account, they will

freeze it as they freeze others, so please keep this transaction only to

yourself until we finalize it.



Sorry for my pictures. I will enclose it in my next mail and more about me

when I hear from you okay.



Yours Sincerely

Best Regard,

Aisha Gaddafi



--000000000000cd0d0c05e3713e42

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



please Dear i need your urgent reply

Please bear wi=

th me. I am writing this letter to you with tears and sorrow from my heart.=



I am Aisha Muammar Gaddafi, the only daughter of the embattled pres=

ident of Libya, Hon. Muammar Gaddafi. I know my mail might come to you as a=

surprise because you don=E2=80=99t know me, but due to the unsolicited nat=

ure of my situation here in Refugee camp Ouagadougou Burkina Faso i decided=

to contact you for help. I have passed through pains and sorrowful moments=

since the death of my father. At the same time, my family is the target of=

Western nations led by Nato who want to destroy my father at all costs. Ou=

r investments and bank accounts in several countries are their targets to f=

reeze.

My Father of blessed memory deposited the sum of $27.5M (Twen=

ty Seven Million Five Hundred Thousand Dollars) in a Bank at Burkina Faso w=

hich he used my name as the next of kin. I have been commissioned by the (B=

OA) bank to present an interested foreign investor/partner who can stand as=

my trustee and receive the fund in his account for a possible investment i=

n his country due to my refugee status here in Burkina Faso.

I am in=

search of an honest and reliable person who will help me and stand as my t=

rustee so that I will present him to the Bank for the transfer of the fund =

to his bank account overseas. I have chosen to contact you after my prayers=

and I believe that you will not betray my trust but rather take me as your=

own sister or daughter. If this transaction interests you, you don't h=

ave to disclose it to anybody because of what is going on with my entire fa=

mily, if the United nation happens to know this account, they will freeze i=

t as they freeze others, so please keep this transaction only to yourself u=

ntil we finalize it.

Sorry for my pictures. I will enclose it in my =

next mail and more about me when I hear from you okay.

Yours Sincere=

ly
Best Regard,
Aisha Gaddafi




--000000000000cd0d0c05e3713e42--