Donation spam from gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 12 Mar 2023 05:42:16 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pbK5W-0001nD-04

for dave@doctor.nl2k.ab.ca;

Sun, 12 Mar 2023 05:42:06 -0600

Resent-From: The Doctor

Resent-Date: Sun, 12 Mar 2023 05:42:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f48.google.com ([209.85.208.48]:46076)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pbJVU-0000gN-1U

for doctor@doctor.nl2k.ab.ca;

Sun, 12 Mar 2023 05:04:58 -0600

Received: by mail-ed1-f48.google.com with SMTP id cy23so37734606edb.12

for ; Sun, 12 Mar 2023 04:02:53 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112; t=1678618967;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=m2X1cOy1iPF4r1Zi4K62y4b7+YGvJ6SsHY3WzuBO3e4=;

b=VkSdoBkqxgkfcxxiV/RKjIzeMuG6jqjAmGsyrsqGQxcYpt5p1jeaaUqtCcgzoC3em9

FowOPMwzulLIH4DdfB2qjmvcNU4TvZ+FEswvOWOdqvt/gLVxA90SGsZDhJFuK5Lg9gL2

JfJal6mYOma6OT13TgQSDdSaaH7lhzxGtqDAJzJbw09hLdyDVK0YoVrz45/FGVAJzzK9

Rd+qAO+Pj68GEDF2iJLTrPfBcCB3DTEU6RN0izF0Y9PnoO1BI2rU65FYp0w+UYS+ryZr

tX2Psl62uWzpoGu4u+OUDrQwoQNSqPVMBGuy7vSlG9J7U5hB9Jvs907VKXsT1Qewdhhf

gdXg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1678618967;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=m2X1cOy1iPF4r1Zi4K62y4b7+YGvJ6SsHY3WzuBO3e4=;

b=uqdJ7F+bWvuSHVrnSJtZSSOPFT1O4yj/kbqR9zTEsnaVDTjifObx9XIzK7rDaYSKnE

KVYuvGepQIJISEjLCTdFkhyxwBsRKNDNKmg3oztKBshtLCUDhW0nJQhS7yJyJxlr/BC/

nvabUX67lDdVKF12Ru9iqxZN+iT2DCF1ryl8+vCInKEPP8bOR/uQEofeUMObQdex5BdV

QwZqphd1d7rWpFTcyGoGIBmKTWca8vWVwsra/BzJJQmlIj9w8O42ZW7N/c3RqFQkSwBY

tekfRM2luU59ERsnrBLQqGrVHNt3+c8VkxytWk/EQcUAWrNPnDbWELXGtjPdDKWZp5Zj

mNUg==

X-Gm-Message-State: AO0yUKUhjw/V8usKc+vSmHBUxixHeup5fSa30a4ff3zVzRmJeumQtANf

bNTOr7Wsw3TtJLwnig0/rnqQtJGE0GNVgMxVIRc=

X-Google-Smtp-Source: AK7set/yg/B4mCTopg8OL5k7vnWPD87jbi/xQJA3QcnTpzyeC30cHUjSq2vpZp1uBeQhbL/UKZByblz8SBQflcuBol0=

X-Received: by 2002:a50:d6d3:0:b0:4fb:9f5:b994 with SMTP id

l19-20020a50d6d3000000b004fb09f5b994mr1342056edj.0.1678618966934; Sun, 12 Mar

2023 04:02:46 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a17:907:94c9:b0:8f5:51cc:424b with HTTP; Sun, 12 Mar 2023

04:02:46 -0700 (PDT)

Reply-To: omrsmatilda@gmail.com

From: "Mrs. Matilda Olsson"

Date: Sun, 12 Mar 2023 12:02:46 +0100

Message-ID:

Subject: Dear my good friend in lord,

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 13.5

X-Spam_score_int: 135

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: I am sorry for intruding into your privacy, especially by

contacting you through this means for an important offer, how are you and

your family over there? My name is Mrs. Matilda Olsson I want to don [...]





Content analysis details: (13.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.48 listed in list.dnswl.org]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[hugoambode(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.48 listed in wl.mailspike.net]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 T_MONEY_PERCENT X% of a lot of money for you

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

Subject: {SPAM?} Dear my good friend in lord,



I am sorry for intruding into your privacy, especially by contacting

you through this means for an important offer, how are you and your

family over there? My name is Mrs. Matilda Olsson I want to donate my

inheritance to the less privileged people in the society. I work as a

contractor and business woman. I want to donate my inheritance to the

less privileged people in the society. I live alone and have no

family, relatives or children presently. I lost my beloved husband and

two kids in a terrible car accident. I am suffering from Stomach

Cancer and have undergone a series of cancer treatments but to no

avail, i am presently in a special Government hospital for a cancer

operation. After the test result, my doctor said that I have a short

time to live, for this reason I got your email address on the internet

and I am contacting you because I have no option again. I save my

personal money, the sum of 7.5 Million Euros in the Bank now that I

have a short time to live I want you to stand as my representative in

your country and build either Mosque or church for people over there

in your city or help any orphanage home or poor people with my money.

If you can accept to be my representative then I will give you 30% of

the total amount as your commission and you will use the balance 70 %

for the project. Please I need an honest person who will take very

good care of this project. If you are capable of handling this

project, then I will tell you further steps to take. I suffer a lot in

my life and I am very much afraid of dying without knowing the

destination of my property, I hardly sleep at night and during the day

because I do not want to die without having donated all the property I

have, otherwise I think it would be a mess.



I want to hear from you even if you=E2=80=99re not interested. This is my

private email address. (omrsmatilda@gmail.com)



Regards

Mrs. Matilda Olsson

Nigerian Gmail spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 11 Mar 2023 16:29:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pb8dx-000FJP-0z

for dave@doctor.nl2k.ab.ca;

Sat, 11 Mar 2023 16:28:53 -0700

Resent-From: The Doctor

Resent-Date: Sat, 11 Mar 2023 16:28:53 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wr1-f67.google.com ([209.85.221.67]:34557)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pb1l6-000GeK-29

for doctor@doctor.nl2k.ab.ca;

Sat, 11 Mar 2023 09:07:52 -0700

Received: by mail-wr1-f67.google.com with SMTP id r18so7708140wrx.1

for ; Sat, 11 Mar 2023 08:05:49 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112; t=1678550743;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=owObjCwhBJHQaKvAYabgGnqXnEMMYpa/e6jYikKETTw=;

b=Jx0OEPUU28EH/QW3ZIc2uuA0f7ac4HV20PwmGRZCfLp4yvsVEf11EK0hmgz3eaEXOv

nXDpKDSvJo790NFDG0n7Ww+ZDXKfkBKpD8EQy5HZjhTjMr98quLQNZWYS73Wu+q40Crm

Pwv/sz8W2b94bZdAJPwjcpD30jLiyX9yJ324SMigTYDWTTUKElbYwLR2CPvJRem8YVQh

9Mlje4pTDk+wmisn2JwWk4PJuV/vqPNjPNKxzg1lmCxfZISbt/YV5Hj4dg99txsz2n9f

caTk04yFdzMW8lJYdNb0+zG6dHPOoodr4DTTMJ2/3mCkox+rOPUCuqU7sufsgQ8I9twq

UqGA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1678550743;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=owObjCwhBJHQaKvAYabgGnqXnEMMYpa/e6jYikKETTw=;

b=UEHz+Bdbl2B8/qUZ9EGfIQLqM/lMYjRzfaSpPgGzhCAh/t34u9mm4nrtb5Gm3tdc1o

qmomkaUzgcM4OsNgGNXeRTJHWJtPZMKyYju3l7PPB7aR/Y6MrqI/VbpJ/J4xyVakKjEw

IkG7bTELaJNZA/m+fsaceSu+8+WogKYV74iJvuPQiDjwevQQoDv+apIrHMcYs/dVbzRK

ZF0QzcngFuYEjJSZ4ZX9zw0PZtqnAyMqFOIHBrSZ4eNsbtVen7EN409Ysb2k1CBHs995

n4DxaSSof131OmtL/M2LROxmrY6q0ZmDRPFi9zyXcD0ClpA7VaiPjlXhj4GdEU1cA7M3

ayqQ==

X-Gm-Message-State: AO0yUKU7xNvvZWQLezwwjbGAFmMQok3Tq1F3bfmBdixQpmI6iIZw5ESy

kK0coEtlcfLDewnwPsTmb4V5g5OE5F3j2GmFSLQ=

X-Google-Smtp-Source: AK7set+P/gEiCTxJrKY9fRbsbfNe1FCpX7khxh4grrkVRVMkycIqh4p9ITRzmgj+Fa86YkwY1edtZVggYdZZWazmXQs=

X-Received: by 2002:adf:dfc9:0:b0:2c9:b9bf:e211 with SMTP id

q9-20020adfdfc9000000b002c9b9bfe211mr1132642wrn.2.1678550742587; Sat, 11 Mar

2023 08:05:42 -0800 (PST)

MIME-Version: 1.0

From: Mrs Aisha Al-Qaddafi

Date: Sat, 11 Mar 2023 16:06:19 +0000

Message-ID:

Subject: HELLO DEAR PLEASE KINDLY REPLY MY EMAIL IS URGENTLY

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000bfdb0205f6a20cdb"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 16.6

X-Spam_score_int: 166

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Can I trust you My beloved One, I need your assistance. Please

bear with me. I am writing this letter to you with tears and sorrow from

my heart. I am Aisha Muammar Gaddafi, the only daughter of the e [...]



Content analysis details: (16.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.221.67 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mrsaishag16(at)gmail.com]

1.0 HK_SCAM_N15 BODY: No description available.

2.5 HK_SCAM_N2 BODY: No description available.

0.2 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.67 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_HK_NAME_FM_MR_MRS No description available.

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

2.0 HK_SCAM No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 XFER_LOTSA_MONEY Transfer a lot of money

3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} HELLO DEAR PLEASE KINDLY REPLY MY EMAIL IS URGENTLY



--000000000000bfdb0205f6a20cdb

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Can I trust you My beloved One, I need your assistance.

Please bear with me. I am writing this letter to you with tears and sorrow

from my heart.

I am Aisha Muammar Gaddafi, the only daughter of the embattled president of

Libya, Hon. Muammar Gaddafi. I know my mail might come to you as a surprise

because you don=E2=80=99t know me, but due to the unsolicited nature of my

situation here in Refugee camp Ouagadougou Burkina Faso i decided to

contact you for help. I have passed through pains and sorrowful moments

since the death of my father. At the same time, my family is the target of

Western nations led by Nato who want to destroy my father at all costs. Our

investments and bank accounts in several countries are their targets to

freeze.



My Father of blessed memory deposited the sum of $27.5M (Twenty Seven

Million Five Hundred Thousand Dollars) in a Bank at Burkina Faso which he

used my name as the next of kin. I have been commissioned by the (BOA) bank

to present an interested foreign investor/partner who can stand as my

trustee and receive the fund in his account for a possible investment in

his country due to my refugee status here in Burkina Faso.



I am in search of an honest and reliable person who will help me and stand

as my trustee so that I will present him to the Bank for the transfer of

the fund to his bank account overseas. I have chosen to contact you after

my prayers and I believe that you will not betray my trust but rather take

me as your own sister or daughter. If this transaction interests you, you

don't have to disclose it to anybody because of what is going on with my

entire family, if the United nation happens to know this account, they will

freeze it as they freeze others, so please keep this transaction only to

yourself until we finalize it.



Sorry for my pictures. I will enclose it in my next mail and more about me

when I hear from you okay.



Yours Sincerely

Best Regard,

Aisha Gaddafi



--000000000000bfdb0205f6a20cdb

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Can I trust you My beloved One, I need your assistance.
>Please bear with me. I am writing this letter to you with tears and sorrow=

from my heart.
I am Aisha Muammar Gaddafi, the only daughter of the emb=

attled president of Libya, Hon. Muammar Gaddafi. I know my mail might come =

to you as a surprise because you don=E2=80=99t know me, but due to the unso=

licited nature of my situation here in Refugee camp Ouagadougou Burkina Fas=

o i decided to contact you for help. I have passed through pains and sorrow=

ful moments since the death of my father. At the same time, my family is th=

e target of Western nations led by Nato who want to destroy my father at al=

l costs. Our investments and bank accounts in several countries are their t=

argets to freeze.

My Father of blessed memory deposited the sum of $=

27.5M (Twenty Seven Million Five Hundred Thousand Dollars) in a Bank at Bur=

kina Faso which he used my name as the next of kin. I have been commissione=

d by the (BOA) bank to present an interested foreign investor/partner who c=

an stand as my trustee and receive the fund in his account for a possible i=

nvestment in his country due to my refugee status here in Burkina Faso.
=


I am in search of an honest and reliable person who will help me and st=

and as my trustee so that I will present him to the Bank for the transfer o=

f the fund to his bank account overseas. I have chosen to contact you after=

my prayers and I believe that you will not betray my trust but rather take=

me as your own sister or daughter. If this transaction interests you, you =

don't have to disclose it to anybody because of what is going on with m=

y entire family, if the United nation happens to know this account, they wi=

ll freeze it as they freeze others, so please keep this transaction only to=

yourself until we finalize it.

Sorry for my pictures. I will enclos=

e it in my next mail and more about me when I hear from you okay.

Yo=

urs Sincerely
Best Regard, =C2=A0
Aisha Gaddafi




--000000000000bfdb0205f6a20cdb--