Nigerian Google Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 21 Sep 2023 15:25:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from)
id 1qjRA1-00023H-36
for dave@doctor.nl2k.ab.ca;
Thu, 21 Sep 2023 15:24:33 -0600
Resent-From: The Doctor
Resent-Date: Thu, 21 Sep 2023 15:24:33 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f170.google.com ([209.85.208.170]:55538)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1qjKcK-0005An-1o
for doctor@doctor.nl2k.ab.ca;
Thu, 21 Sep 2023 08:25:26 -0600
Received: by mail-lj1-f170.google.com with SMTP id 38308e7fff4ca-2b9338e4695so16948351fa.2
for; Thu, 21 Sep 2023 07:23:21 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1695306195; x=1695910995; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=EF2nf65pJCL+bISys6nGpRIfePGpNpy7yQHweobi918=;
b=EGwaksGAHSE7/mlvZtmC/+Vi14BmFdDv8hWeji94Cvje77fYdcz6vxI2RMAzoY28rv
NbyroNu1ReRv1+fNeczHW1+6zPKxbiINyKRvgcg5Y/63GRauRurFgNGVGZPFd9BwoGX0
9NVD9gO8Epwpdj+tPOUAg1gsgdjVwIpvpkhOEobf2aMI/LIPw3+VovXOEr+vsI7x+MeX
/ppyixuPgahxezqDCMUekAY9Adz14i2DiiNMs6+8veE1IB0rJDmqPk8yEQPWb/cqjVg0
H7mf012hwFxmFWXy8YwFh79fxOuT4/AyCeN4eHYNHQcIn1m8G0+TK6nkL+02F1sHHq97
03rQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1695306195; x=1695910995;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=EF2nf65pJCL+bISys6nGpRIfePGpNpy7yQHweobi918=;
b=MHNcuEyAgRzdhwUlAvnAufpZ5ZAI9+QsFwNaLPlGO7bJgO3gMp7ZINCo3NyNoZWyds
qxNOFsj1a/3Fv3VzqOrdHKDdwdlIDczsxeflRPm1doDp1p1AEq5FBaql+PJZdNtlI8kV
YWRFfdw3mCX2NNl7oW4l4BXxs1aOIPA9j6KOvL/3w1M4QG2ihxjlqgTav9itTmaAIytG
btaKA9yWvl49smqui9dDyhXmCwnhbM3s2f/NjgAGupLQuvpSMRcexHuM30MVeBcAvfXe
FkcbVDdqab2KOlrCO48HtmDdCrRvnIry92Pl4Len6JTz8PlTjnrjxh7er0YGuaS1BgNZ
3plA==
X-Gm-Message-State: AOJu0YxVnnyNit4aQcLi438CIs96G0ARJ1e8JAhdpi9ydaroK84tgrMB
/tyMxDBc9iQZcK5an4cph7UvaST8RT+T4uunILc=
X-Google-Smtp-Source: AGHT+IHClVzNwRTHczx9eCpuRPKZYYB+I6c86E0+yIfSo9ok6wFcOfN8pWMKUmfyzl1227yjY6bFuRp0uczHEUrlFro=
X-Received: by 2002:a05:6512:2f3:b0:500:79a9:d714 with SMTP id
m19-20020a05651202f300b0050079a9d714mr5190734lfq.65.1695306194209; Thu, 21
Sep 2023 07:23:14 -0700 (PDT)
MIME-Version: 1.0
From: Aisha Al-Qaddafi
Date: Thu, 21 Sep 2023 16:22:58 +0200
Message-ID:
Subject: Hope to hear from you soon
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000007dd9580605df3bba"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 12.2
X-Spam_score_int: 122
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings to you from the city of Muscat Oman I came across
your e-mail contact prior to a private search while in need of your assistance.
I am Aisha Al-Qaddafi, the only daughter to Former President of Libya Col.
Muammar Al-Qaddafi. Am a Widow [...]
Content analysis details: (12.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[aishaqaddafi077(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[felixylaur71(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.170 listed in list.dnswl.org]
0.9 URG_BIZ BODY: Contains urgent matter
2.5 MILLION_USD BODY: Talks about millions of dollars
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.170 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Hope to hear from you soon
--0000000000007dd9580605df3bba
Content-Type: text/plain; charset="UTF-8"
Greetings to you from the city of Muscat Oman
I came across your e-mail contact prior to a private search while in need
of your assistance. I am Aisha Al-Qaddafi, the only daughter to Former
President of Libya Col. Muammar Al-Qaddafi. Am a Widow with Children.
I have investment funds worth Twenty Seven Million Five Hundred Thousand
United State Dollar ($27.500.000.00 ) and i need a trusted investment
Manager/Partner because of my current refugee status, however, I am
interested in you for investment project assistance in your country, may be
from there, we can build business relationship in the nearest future.
I am willing to negotiate an investment/business profit sharing ratio with
you based on the future investment earning profits.
If you are willing to handle this project on my behalf, kindly reply
urgently to enable me to provide you more information about the investment
funds.
Your Urgent Reply Will Be Appreciated
Best Regards
Aisha Al-Qaddafi
--0000000000007dd9580605df3bba
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--0000000000007dd9580605df3bba--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 21 Sep 2023 15:25:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1qjRA1-00023H-36
for dave@doctor.nl2k.ab.ca;
Thu, 21 Sep 2023 15:24:33 -0600
Resent-From: The Doctor
Resent-Date: Thu, 21 Sep 2023 15:24:33 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f170.google.com ([209.85.208.170]:55538)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qjKcK-0005An-1o
for doctor@doctor.nl2k.ab.ca;
Thu, 21 Sep 2023 08:25:26 -0600
Received: by mail-lj1-f170.google.com with SMTP id 38308e7fff4ca-2b9338e4695so16948351fa.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1695306195; x=1695910995; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=EF2nf65pJCL+bISys6nGpRIfePGpNpy7yQHweobi918=;
b=EGwaksGAHSE7/mlvZtmC/+Vi14BmFdDv8hWeji94Cvje77fYdcz6vxI2RMAzoY28rv
NbyroNu1ReRv1+fNeczHW1+6zPKxbiINyKRvgcg5Y/63GRauRurFgNGVGZPFd9BwoGX0
9NVD9gO8Epwpdj+tPOUAg1gsgdjVwIpvpkhOEobf2aMI/LIPw3+VovXOEr+vsI7x+MeX
/ppyixuPgahxezqDCMUekAY9Adz14i2DiiNMs6+8veE1IB0rJDmqPk8yEQPWb/cqjVg0
H7mf012hwFxmFWXy8YwFh79fxOuT4/AyCeN4eHYNHQcIn1m8G0+TK6nkL+02F1sHHq97
03rQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1695306195; x=1695910995;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=EF2nf65pJCL+bISys6nGpRIfePGpNpy7yQHweobi918=;
b=MHNcuEyAgRzdhwUlAvnAufpZ5ZAI9+QsFwNaLPlGO7bJgO3gMp7ZINCo3NyNoZWyds
qxNOFsj1a/3Fv3VzqOrdHKDdwdlIDczsxeflRPm1doDp1p1AEq5FBaql+PJZdNtlI8kV
YWRFfdw3mCX2NNl7oW4l4BXxs1aOIPA9j6KOvL/3w1M4QG2ihxjlqgTav9itTmaAIytG
btaKA9yWvl49smqui9dDyhXmCwnhbM3s2f/NjgAGupLQuvpSMRcexHuM30MVeBcAvfXe
FkcbVDdqab2KOlrCO48HtmDdCrRvnIry92Pl4Len6JTz8PlTjnrjxh7er0YGuaS1BgNZ
3plA==
X-Gm-Message-State: AOJu0YxVnnyNit4aQcLi438CIs96G0ARJ1e8JAhdpi9ydaroK84tgrMB
/tyMxDBc9iQZcK5an4cph7UvaST8RT+T4uunILc=
X-Google-Smtp-Source: AGHT+IHClVzNwRTHczx9eCpuRPKZYYB+I6c86E0+yIfSo9ok6wFcOfN8pWMKUmfyzl1227yjY6bFuRp0uczHEUrlFro=
X-Received: by 2002:a05:6512:2f3:b0:500:79a9:d714 with SMTP id
m19-20020a05651202f300b0050079a9d714mr5190734lfq.65.1695306194209; Thu, 21
Sep 2023 07:23:14 -0700 (PDT)
MIME-Version: 1.0
From: Aisha Al-Qaddafi
Date: Thu, 21 Sep 2023 16:22:58 +0200
Message-ID:
Subject: Hope to hear from you soon
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000007dd9580605df3bba"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 12.2
X-Spam_score_int: 122
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings to you from the city of Muscat Oman I came across
your e-mail contact prior to a private search while in need of your assistance.
I am Aisha Al-Qaddafi, the only daughter to Former President of Libya Col.
Muammar Al-Qaddafi. Am a Widow [...]
Content analysis details: (12.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[aishaqaddafi077(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[felixylaur71(at)gmail.com]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.170 listed in list.dnswl.org]
0.9 URG_BIZ BODY: Contains urgent matter
2.5 MILLION_USD BODY: Talks about millions of dollars
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.170 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Hope to hear from you soon
--0000000000007dd9580605df3bba
Content-Type: text/plain; charset="UTF-8"
Greetings to you from the city of Muscat Oman
I came across your e-mail contact prior to a private search while in need
of your assistance. I am Aisha Al-Qaddafi, the only daughter to Former
President of Libya Col. Muammar Al-Qaddafi. Am a Widow with Children.
I have investment funds worth Twenty Seven Million Five Hundred Thousand
United State Dollar ($27.500.000.00 ) and i need a trusted investment
Manager/Partner because of my current refugee status, however, I am
interested in you for investment project assistance in your country, may be
from there, we can build business relationship in the nearest future.
I am willing to negotiate an investment/business profit sharing ratio with
you based on the future investment earning profits.
If you are willing to handle this project on my behalf, kindly reply
urgently to enable me to provide you more information about the investment
funds.
Your Urgent Reply Will Be Appreciated
Best Regards
Aisha Al-Qaddafi
--0000000000007dd9580605df3bba
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Greetings to you from the city of Muscat Oman
I cam=
e across your e-mail contact prior to a private search while in need of you=
r assistance. I am Aisha Al-Qaddafi, the only daughter to Former President =
of Libya Col. Muammar Al-Qaddafi. Am a Widow with Children.
I have i=
nvestment funds worth Twenty Seven Million Five Hundred Thousand United Sta=
te Dollar ($27.500.000.00 ) and i need a trusted investment Manager/Partner=
because of my current refugee status, however, I am interested in you for =
investment project assistance in your country, may be from there, we can bu=
ild business relationship in the nearest future.
I am willing to neg=
otiate an investment/business profit sharing ratio with you based on the fu=
ture investment earning profits.
If you are willing to handle this p=
roject on my behalf, kindly reply urgently to enable me to provide you more=
information about the investment funds.
Your Urgent Reply Will Be A=
ppreciated
Best Regards
Aisha Al-Qaddafi
I cam=
e across your e-mail contact prior to a private search while in need of you=
r assistance. I am Aisha Al-Qaddafi, the only daughter to Former President =
of Libya Col. Muammar Al-Qaddafi. Am a Widow with Children.
I have i=
nvestment funds worth Twenty Seven Million Five Hundred Thousand United Sta=
te Dollar ($27.500.000.00 ) and i need a trusted investment Manager/Partner=
because of my current refugee status, however, I am interested in you for =
investment project assistance in your country, may be from there, we can bu=
ild business relationship in the nearest future.
I am willing to neg=
otiate an investment/business profit sharing ratio with you based on the fu=
ture investment earning profits.
If you are willing to handle this p=
roject on my behalf, kindly reply urgently to enable me to provide you more=
information about the investment funds.
Your Urgent Reply Will Be A=
ppreciated
Best Regards
Aisha Al-Qaddafi
--0000000000007dd9580605df3bba--