Nigerian Gmail spam

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 26 Aug 2022 10:31:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oRcDu-000PwA-2z

for dave@doctor.nl2k.ab.ca;

Fri, 26 Aug 2022 10:30:22 -0600

Resent-From: The Doctor

Resent-Date: Fri, 26 Aug 2022 10:30:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f68.google.com ([209.85.210.68]:34452)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oRbJd-000KVt-QN

for doctor@doctor.nl2k.ab.ca;

Fri, 26 Aug 2022 09:32:18 -0600

Received: by mail-ot1-f68.google.com with SMTP id q39-20020a056830442700b0063889adc0ddso1242330otv.1

for ; Fri, 26 Aug 2022 08:31:56 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc;

bh=45M5w7GXGhDaHEQwL25lX9CTGRVaeOJaQXcMnDBQBJA=;

b=Whwrk+Tv0ND8qfQnhD3YJZWKo48t/V5ocNnwxwyc6meJJT809NuIRKF73pVANvmWzg

Yuit4rPF1uD3qDggQObwTX9nEbPY1bxmkjXI7fNzqOtQfXPsxAn7ZZK+y7Nndlsxas0B

tnASJkA7MlxW98AzcDrEIQkcA09/0fXTvPiIRILh0PMrFjTG9obguUTSICVUztUm0B+d

YPZdiW0YX1i1jYcLvSWQpDnd6k907IuhP5k8MPDO012rclyIW4zS0czIAFYwZc8Ryc8D

OBsSxHfEMAO01B1d6ma2JEIwTRjZL4TJNJOu9H1bpvib0VgdtqmB0xkB6JqhI3wh0Fs1

xkdg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc;

bh=45M5w7GXGhDaHEQwL25lX9CTGRVaeOJaQXcMnDBQBJA=;

b=eNdrdge7FIIpILeSQrb7Me+uP1yVZTUozXD3uQZAWiDCRJ/DQaFS8etNGCbieAJKKx

xqyXa58VwLkA2/HTujNltMdr7gSovxSPhN5+anvfvFsl+KW0PotTvnlE/tao4p5Pj88Q

u6ZM75L5ttZTuc01Xot7I8fIYTTq22YE8JvvalSSgYZKy+WlNZBb1/N+Fyf1/tFqpdW7

Hiwnbh1PUzJF+5KGss7xH/rD27/nbs5s+smjoR+MSAmbuYFQbf2YSKjcQmRzNcpF1lLU

LOg/z/bh0GFB//qBJHc1P8RMtQ317Scx/EGS789iaOFGuu0eUGQ2votFnfbBPUfcdMML

+8Vw==

X-Gm-Message-State: ACgBeo0yp+tUXFx1ypGDKCUHNKYVCielt6/eI08jn5QUmU/gz0+/X+h8

y5c04JlcGqjqlyj7NulMn+Hqxie8x7TflrR41yk=

X-Google-Smtp-Source: AA6agR4kZ80nVwiXnJ6iiNX83SE85pNMZcw4p426vCh/hpFY2lTOgx5dWBiCWNZz1flUbelddWcFszSCKlCHFn7e73I=

X-Received: by 2002:a05:6830:18c4:b0:636:ee33:158e with SMTP id

v4-20020a05683018c400b00636ee33158emr1590921ote.239.1661527910426; Fri, 26

Aug 2022 08:31:50 -0700 (PDT)

MIME-Version: 1.0

From: Mrs Aisha Al-Qaddafi

Date: Fri, 26 Aug 2022 08:31:30 -0700

Message-ID:

Subject: MY Beloved one, i need your assistance

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000e2af6305e7269c88"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 11.8

X-Spam_score_int: 118

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: MY Beloved one, i need your assistance Please bear with me.

I am writing this letter to you with tears and sorrow from my heart. I am

Aisha Muammar Gaddafi, the only daughter of the embattled president of Libya,

Hon. Muammar Gaddafi. I know my mail might come to you as a surprise because

you don’t know me, but due to the unso [...]



Content analysis details: (11.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

DNSWL was blocked. See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[209.85.210.68 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.68 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[leahsamson87[at]gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[leahsamson87[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

2.5 HK_SCAM_N2 BODY: No description available.

0.1 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

1.0 HK_SCAM_N15 BODY: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 HK_SCAM No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 XFER_LOTSA_MONEY Transfer a lot of money

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} MY Beloved one, i need your assistance



--000000000000e2af6305e7269c88

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



MY Beloved one, i need your assistance



Please bear with me. I am writing this letter to you with tears and sorrow

from my heart.



I am Aisha Muammar Gaddafi, the only daughter of the embattled president of

Libya, Hon. Muammar Gaddafi. I know my mail might come to you as a surprise

because you don=E2=80=99t know me, but due to the unsolicited nature of my

situation here in Refugee camp Ouagadougou Burkina Faso i decided to

contact you for help. I have passed through pains and sorrowful moments

since the death of my father. At the same time, my family is the target of

Western nations led by Nato who want to destroy my father at all costs. Our

investments and bank accounts in several countries are their targets to

freeze.



My Father of blessed memory deposited the sum of $27.5M (Twenty Seven

Million Five Hundred Thousand Dollars) in a Bank at Burkina Faso which he

used my name as the next of kin. I have been commissioned by the (BOA) bank

to present an interested foreign investor/partner who can stand as my

trustee and receive the fund in his account for a possible investment in

his country due to my refugee status here in Burkina Faso.



I am in search of an honest and reliable person who will help me and stand

as my trustee so that I will present him to the Bank for the transfer of

the fund to his bank account overseas. I have chosen to contact you after

my prayers and I believe that you will not betray my trust but rather take

me as your own sister or daughter. If this transaction interests you, you

don't have to disclose it to anybody because of what is going on with my

entire family, if the United nation happens to know this account, they will

freeze it as they freeze others, so please keep this transaction only to

yourself until we finalize it.



Sorry for my pictures. I will enclose it in my next mail and more about me

when I hear from you okay.



Yours Sincerely

Best Regard,

Aisha Gaddafi



--000000000000e2af6305e7269c88

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



MY Beloved one, i need your assistance

Please bear =

with me. I am writing this letter to you with tears and sorrow from my hear=

t.

I am Aisha Muammar Gaddafi, the only daughter of the embattled pr=

esident of Libya, Hon. Muammar Gaddafi. I know my mail might come to you as=

a surprise because you don=E2=80=99t know me, but due to the unsolicited n=

ature of my situation here in Refugee camp Ouagadougou Burkina Faso i decid=

ed to contact you for help. I have passed through pains and sorrowful momen=

ts since the death of my father. At the same time, my family is the target =

of Western nations led by Nato who want to destroy my father at all costs. =

Our investments and bank accounts in several countries are their targets to=

freeze.

My Father of blessed memory deposited the sum of $27.5M (Tw=

enty Seven Million Five Hundred Thousand Dollars) in a Bank at Burkina Faso=

which he used my name as the next of kin. I have been commissioned by the =

(BOA) bank to present an interested foreign investor/partner who can stand =

as my trustee and receive the fund in his account for a possible investment=

in his country due to my refugee status here in Burkina Faso.

I am =

in search of an honest and reliable person who will help me and stand as my=

trustee so that I will present him to the Bank for the transfer of the fun=

d to his bank account overseas. I have chosen to contact you after my praye=

rs and I believe that you will not betray my trust but rather take me as yo=

ur own sister or daughter. If this transaction interests you, you don't=

have to disclose it to anybody because of what is going on with my entire =

family, if the United nation happens to know this account, they will freeze=

it as they freeze others, so please keep this transaction only to yourself=

until we finalize it.

Sorry for my pictures. I will enclose it in m=

y next mail and more about me when I hear from you okay.

Yours Since=

rely
Best Regard, =C2=A0
Aisha Gaddafi




--000000000000e2af6305e7269c88--

Business deal spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 26 Aug 2022 08:03:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oRZuT-000BwN-Pt

for dave@doctor.nl2k.ab.ca;

Fri, 26 Aug 2022 08:02:09 -0600

Resent-From: The Doctor

Resent-Date: Fri, 26 Aug 2022 08:02:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f174.google.com ([209.85.210.174]:44622)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oRYOo-0008dq-4D

for doctor@doctor.nl2k.ab.ca;

Fri, 26 Aug 2022 06:25:26 -0600

Received: by mail-pf1-f174.google.com with SMTP id f17so1385155pfk.11

for ; Fri, 26 Aug 2022 05:25:04 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc;

bh=4IAVCA2gJTTjDt5CBjLggMJFJuBSUP41/Lvi+HTqvVI=;

b=Hi2HpAK1yqHNv8ZJAjUUQVvu/VaJoMdZP2U9qLSSsp0N3GQr63+HtJflOqAV3+Wqkv

zPmAIFZEVisSDLO3fSN6070WHOvnD3aycgWBHN0+z95yLo2vzcctR7T96v+6vlENjQMG

CeMjes9YEs9eN0lphxJR7avwLJofMPQGj0u2qVd0aaEfEAZOnB/pB4k6ok9lEnN/NOnh

d8t6PHKzP467hp0YG0w8MJ4/bMrnYfE7VCKImQVRvcB2YJNQ/ueB5xQSA+gBneEAtRkG

12X49/kNYrE/vLATGkEnucplZ+gRdvlQCXTtiHAMWsKwZRIY6kuU7b6rb+3h4R+uZT40

2krQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc;

bh=4IAVCA2gJTTjDt5CBjLggMJFJuBSUP41/Lvi+HTqvVI=;

b=Rr3uBf9+BmM2grdqv4OZY5AWqiqMAp9NM8UjcBkx+AtdUMJr9bGtJsK1/nJjFt38x9

0pfq41X2uIMYenLoTenlyX7faMm+ArDuKSwL0d+8DX/yVgeoqSzaN4990VTWHeNWqiQt

esohKyQqUhTLH4xwPYNBmUeyZyn6chV+siWyrqGgfRrz3j+j3cJl4TKVkMfJgFlp6jnU

wdWXIgCVKIu2YgmqvlapJLWLuvAobcPV4l0LvLJX208PPT2mOX6DtfJGQBm4tHw4B315

7Ao7CBLax3mQ1CsufCfvwVw02USE/FWSuRAB6H7D6SiiIWcDuXBw3mf27wNDpCfh/ItM

DrbQ==

X-Gm-Message-State: ACgBeo1jX2QzHinQMK6Wq4FMFxa1m1+FQdxMdw2inWF4xysiNEP9PZhj

jQY3sVXyugIpyOX0u/gzT+IiIUlfz8Pph8n3C6U=

X-Google-Smtp-Source: AA6agR6xvnytaeYdZtNYeqXPsePMrnbBVDx55vnGbLoW8Uts2rwTaJUif96M+Y6Cs+oO3uwBZiH44IALgPGc0RnLfgw=

X-Received: by 2002:a65:6755:0:b0:41d:70c1:be0 with SMTP id

c21-20020a656755000000b0041d70c10be0mr3145387pgu.99.1661516699418; Fri, 26

Aug 2022 05:24:59 -0700 (PDT)

MIME-Version: 1.0

From: "Dr. Umar Bello"

Date: Fri, 26 Aug 2022 05:24:45 -0700

Message-ID:

Subject: Greetings dear Friend:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000a846f905e7240097"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 13.3

X-Spam_score_int: 133

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings dear Friend: I am contacting you on a business deal

of $19.5 Million US Dollars, ready for transfer into your account if we make

this claim, we will share it 60%/40%.100% risk free and it will be legally

backed up with government approved If you are interested reply for more details.





Content analysis details: (13.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.174 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[a0sis4ite31[at]gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[a0sis4ite31[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

3.6 NA_DOLLARS BODY: Talks about a million North American dollars

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_HK_NAME_FM_DR No description available.

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

3.1 RISK_FREE No risk!

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Greetings dear Friend:



--000000000000a846f905e7240097

Content-Type: text/plain; charset="UTF-8"



Greetings dear Friend:



I am contacting you on a business deal of $19.5 Million US Dollars,

ready for transfer into your account



if we make this claim, we will share it 60%/40%.100% risk free and it

will be legally backed up with government approved If you are

interested reply for more details.



Kindly reply for more details Waiting for your reply Make Sure You

Write To My Via E-mail Address...(umarbellod46@gmail.com)



Best regards

Dr.Umar Bello,



--000000000000a846f905e7240097

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Greetings dear Friend:
=C2=A0 =C2=A0
=C2=A0 I am co=

ntacting you on a business deal of $19.5 Million US Dollars,
ready for t=

ransfer into your account

if we make this claim, we will share it 60=

%/40%.100% risk free and it
will be legally backed up with government ap=

proved If you are
interested reply for more details.

Kindly reply=

=C2=A0for more details Waiting for your reply =C2=A0Make Sure You
Write=

To My Via E-mail Address...(umar=

bellod46@gmail.com
)

Best regards
Dr.Umar Bello,




--000000000000a846f905e7240097--