Nigerian Google Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 06 Jul 2024 12:18:00 -0600
Received: from mail-lj1-f175.google.com ([209.85.208.175]:58780)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1sQ9xx-000000005aI-3uuQ
for dave@doctor.nl2k.ab.ca;
Sat, 06 Jul 2024 12:17:01 -0600
Received: by mail-lj1-f175.google.com with SMTP id 38308e7fff4ca-2ee92f7137bso19344161fa.1
for; Sat, 06 Jul 2024 11:15:03 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1720289697; x=1720894497; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=tud9ljCnaMkI8DWe0Yg1x3npRjLu/nluDZn+JcUUazY=;
b=itDR+vSqDtv7U6bdvxFQ3okcQhqpwnvkgVm7aBosZpkh+9lt7AFCUXPM+8guqOFlKP
pGHr3QsGJw6hyTWaOHffLkyxe3AcPKT8zJIZhmVh6g2jth6RexsuAnyH1UsuFeiXbAqF
zxsj2iUbZ6/axJeWUzrN0B4ShUa+rMtqMOJOHpCBLf3ABunFi9FrE4QBuNTBfRINwUoz
gIoysam50eK0rjYN3ALlnTtEuAsTh9UhrDWO7GOLtQcmYXwOj08ARNqseFpgJ8sy6+Ky
hH+coOxeBMGYcQTlhwula+bzslE/3Hx5IVJRSZ0Q79NtJ4vLNd/zEuRO0YkbTlW2svsl
pl7A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1720289697; x=1720894497;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=tud9ljCnaMkI8DWe0Yg1x3npRjLu/nluDZn+JcUUazY=;
b=SvbWkN65kkdjW2K3qqczBZ4HusCy0lSbnbliUcnLoQ3GKWKFQEcF9NttKkSYN3FXBh
HIVyJUiOAG7DnI9VBBx7vDrVcbu+Ptr3nZLKxcFjYNwXw4booInN1v5BeY/atJzuViip
fBXSvklCRgXSqw0INVLCCKs5V5NiH203APZrmYgtASkP4nXquktwjx3WlZU4pVSgoddY
bKE6dwnonmdf7zPG3rqfo3kKQ0QZdPbAaF+B+hifV9rTgeo3nSO56O7CoBBk84VhyYVU
Ky1gX1HrJukMl8AV6GpyDkB5MxMk+PN3SQLuP2X1iI/qSfWSNQxV+Gy5JOnI+0HW6QQk
NVBg==
X-Forwarded-Encrypted: i=1; AJvYcCWnh9lW7ZZ6sJMS9C573+cjeCNYamMyJvvGaUKKpssJ6qal2/Ic+UGoY4UKfinf4AQGfsSx9++2W3o4ixmlrKsU9HUFs8aA
X-Gm-Message-State: AOJu0YxDwHVy1UJ8DN/e+vG0W7S4AFFzqd4o81HyFzXaGXChmCIEafFU
MV8yQHDYLai4lE8EcYHO7MHTQsT/d+zRh+hoXacfhQzx/92/c0HWBMyB0Hi0/BcwLiHvX6k/9x7
rYYBGbfhDYw70ECDZFHWCOC9WJLE=
X-Google-Smtp-Source: AGHT+IFjqdp/+5j6C9GA/KIqAJUnL84Khs0TQKTd7eRf949SrNho67PEJkBV6CjGe0ymKRqwOsm9PvgefPM8sqtFwwQ=
X-Received: by 2002:a2e:86d3:0:b0:2ee:493f:d751 with SMTP id
38308e7fff4ca-2ee8eda55abmr46748391fa.23.1720289696116; Sat, 06 Jul 2024
11:14:56 -0700 (PDT)
MIME-Version: 1.0
From: Mrs Aisha Al-Qaddafi
Date: Sat, 6 Jul 2024 11:14:39 -0700
Message-ID:
Subject: Inquiry for investment
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000003f77f1061c9828b3"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 21.4
X-Spam_score_int: 214
X-Spam_bar: +++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Inquiry for investment I am pleased to use this medium to
open a mutual communication with you and to ask for your permission and acceptance
to partner with you to invest in your country. I am Aisha Gaddafi, a single
Mother and widowed with three Children. I am the only biological Daughter
of the late Libyan President (Late Colonel Muammar Gaddafi). I have an investment
fund worth Twen [...]
Content analysis details: (21.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.208.175 listed in dnsbl.ahbl.org]
[209.85.208.175 listed in dnsbl.ahbl.org]
[209.85.208.175 listed in dnsbl.ahbl.org]
[209.85.208.175 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.208.175 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.208.175 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.208.175 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.208.175 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.175 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.175 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[muhammedmrsyed(at)gmail.com]
0.9 URG_BIZ BODY: Contains urgent matter
2.8 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
2.5 MILLION_USD BODY: Talks about millions of dollars
2.7 HK_SCAM_N1 BODY: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Inquiry for investment
--0000000000003f77f1061c9828b3
Content-Type: text/plain; charset="UTF-8"
Inquiry for investment
I am pleased to use this medium to open a mutual communication with you and
to ask for your permission and acceptance to partner with you to invest in
your country.
I am Aisha Gaddafi, a single Mother and widowed with three Children. I am
the only biological Daughter of the late Libyan President (Late Colonel
Muammar Gaddafi). I have an investment fund worth Twenty-Seven Million Five
Hundred Thousand United States Dollars (27,500,000.00 ) which I want to
entrust to you for investment project assistance in your country, Maybe
from there, we can build a business relationship in the near future. I am
will to negotiate an investment/business profit-sharing ratio with you
based on future investment-earning profits.
If you are willing to handle this project on my behalf, I would appreciate
your urgent response to provide you with more details to proceed further.
If you do not see my email in a few minutes after your reply, check your
spam or junk folder please.
Best Regards
Mrs. Aisha Gaddafi
--0000000000003f77f1061c9828b3
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--0000000000003f77f1061c9828b3--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 06 Jul 2024 12:18:00 -0600
Received: from mail-lj1-f175.google.com ([209.85.208.175]:58780)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1sQ9xx-000000005aI-3uuQ
for dave@doctor.nl2k.ab.ca;
Sat, 06 Jul 2024 12:17:01 -0600
Received: by mail-lj1-f175.google.com with SMTP id 38308e7fff4ca-2ee92f7137bso19344161fa.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1720289697; x=1720894497; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=tud9ljCnaMkI8DWe0Yg1x3npRjLu/nluDZn+JcUUazY=;
b=itDR+vSqDtv7U6bdvxFQ3okcQhqpwnvkgVm7aBosZpkh+9lt7AFCUXPM+8guqOFlKP
pGHr3QsGJw6hyTWaOHffLkyxe3AcPKT8zJIZhmVh6g2jth6RexsuAnyH1UsuFeiXbAqF
zxsj2iUbZ6/axJeWUzrN0B4ShUa+rMtqMOJOHpCBLf3ABunFi9FrE4QBuNTBfRINwUoz
gIoysam50eK0rjYN3ALlnTtEuAsTh9UhrDWO7GOLtQcmYXwOj08ARNqseFpgJ8sy6+Ky
hH+coOxeBMGYcQTlhwula+bzslE/3Hx5IVJRSZ0Q79NtJ4vLNd/zEuRO0YkbTlW2svsl
pl7A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1720289697; x=1720894497;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=tud9ljCnaMkI8DWe0Yg1x3npRjLu/nluDZn+JcUUazY=;
b=SvbWkN65kkdjW2K3qqczBZ4HusCy0lSbnbliUcnLoQ3GKWKFQEcF9NttKkSYN3FXBh
HIVyJUiOAG7DnI9VBBx7vDrVcbu+Ptr3nZLKxcFjYNwXw4booInN1v5BeY/atJzuViip
fBXSvklCRgXSqw0INVLCCKs5V5NiH203APZrmYgtASkP4nXquktwjx3WlZU4pVSgoddY
bKE6dwnonmdf7zPG3rqfo3kKQ0QZdPbAaF+B+hifV9rTgeo3nSO56O7CoBBk84VhyYVU
Ky1gX1HrJukMl8AV6GpyDkB5MxMk+PN3SQLuP2X1iI/qSfWSNQxV+Gy5JOnI+0HW6QQk
NVBg==
X-Forwarded-Encrypted: i=1; AJvYcCWnh9lW7ZZ6sJMS9C573+cjeCNYamMyJvvGaUKKpssJ6qal2/Ic+UGoY4UKfinf4AQGfsSx9++2W3o4ixmlrKsU9HUFs8aA
X-Gm-Message-State: AOJu0YxDwHVy1UJ8DN/e+vG0W7S4AFFzqd4o81HyFzXaGXChmCIEafFU
MV8yQHDYLai4lE8EcYHO7MHTQsT/d+zRh+hoXacfhQzx/92/c0HWBMyB0Hi0/BcwLiHvX6k/9x7
rYYBGbfhDYw70ECDZFHWCOC9WJLE=
X-Google-Smtp-Source: AGHT+IFjqdp/+5j6C9GA/KIqAJUnL84Khs0TQKTd7eRf949SrNho67PEJkBV6CjGe0ymKRqwOsm9PvgefPM8sqtFwwQ=
X-Received: by 2002:a2e:86d3:0:b0:2ee:493f:d751 with SMTP id
38308e7fff4ca-2ee8eda55abmr46748391fa.23.1720289696116; Sat, 06 Jul 2024
11:14:56 -0700 (PDT)
MIME-Version: 1.0
From: Mrs Aisha Al-Qaddafi
Date: Sat, 6 Jul 2024 11:14:39 -0700
Message-ID:
Subject: Inquiry for investment
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000003f77f1061c9828b3"
Bcc: dave@doctor.nl2k.ab.ca
X-Spam_score: 21.4
X-Spam_score_int: 214
X-Spam_bar: +++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Inquiry for investment I am pleased to use this medium to
open a mutual communication with you and to ask for your permission and acceptance
to partner with you to invest in your country. I am Aisha Gaddafi, a single
Mother and widowed with three Children. I am the only biological Daughter
of the late Libyan President (Late Colonel Muammar Gaddafi). I have an investment
fund worth Twen [...]
Content analysis details: (21.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.208.175 listed in dnsbl.ahbl.org]
[209.85.208.175 listed in dnsbl.ahbl.org]
[209.85.208.175 listed in dnsbl.ahbl.org]
[209.85.208.175 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.208.175 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.208.175 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.208.175 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.208.175 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
[209.85.208.175 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.175 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.175 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[muhammedmrsyed(at)gmail.com]
0.9 URG_BIZ BODY: Contains urgent matter
2.8 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
2.5 MILLION_USD BODY: Talks about millions of dollars
2.7 HK_SCAM_N1 BODY: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
0.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Inquiry for investment
--0000000000003f77f1061c9828b3
Content-Type: text/plain; charset="UTF-8"
Inquiry for investment
I am pleased to use this medium to open a mutual communication with you and
to ask for your permission and acceptance to partner with you to invest in
your country.
I am Aisha Gaddafi, a single Mother and widowed with three Children. I am
the only biological Daughter of the late Libyan President (Late Colonel
Muammar Gaddafi). I have an investment fund worth Twenty-Seven Million Five
Hundred Thousand United States Dollars (27,500,000.00 ) which I want to
entrust to you for investment project assistance in your country, Maybe
from there, we can build a business relationship in the near future. I am
will to negotiate an investment/business profit-sharing ratio with you
based on future investment-earning profits.
If you are willing to handle this project on my behalf, I would appreciate
your urgent response to provide you with more details to proceed further.
If you do not see my email in a few minutes after your reply, check your
spam or junk folder please.
Best Regards
Mrs. Aisha Gaddafi
--0000000000003f77f1061c9828b3
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Inquiry for investment
I am pleased to use this=
medium to open a mutual communication with you and to ask for your permiss=
ion and acceptance to partner with you to invest in your country.
I =
am Aisha Gaddafi, a single Mother and widowed with three Children. I am the=
only biological Daughter of the late Libyan President (Late Colonel Muamma=
r Gaddafi). I have an investment fund worth Twenty-Seven Million Five Hundr=
ed Thousand United States Dollars (27,500,000.00 ) which I want to entrust =
to you for investment project assistance in your country, Maybe from there,=
we can build a business relationship in the near future. I am will to nego=
tiate an investment/business profit-sharing ratio with you based on future =
investment-earning profits.
If you are willing to handle this projec=
t on my behalf, I would appreciate your urgent response to provide you with=
more details to proceed further.
If you do not see my email in a fe=
w minutes after your reply, check your spam or junk folder please.
B=
est Regards
Mrs. Aisha Gaddafi
I am pleased to use this=
medium to open a mutual communication with you and to ask for your permiss=
ion and acceptance to partner with you to invest in your country.
I =
am Aisha Gaddafi, a single Mother and widowed with three Children. I am the=
only biological Daughter of the late Libyan President (Late Colonel Muamma=
r Gaddafi). I have an investment fund worth Twenty-Seven Million Five Hundr=
ed Thousand United States Dollars (27,500,000.00 ) which I want to entrust =
to you for investment project assistance in your country, Maybe from there,=
we can build a business relationship in the near future. I am will to nego=
tiate an investment/business profit-sharing ratio with you based on future =
investment-earning profits.
If you are willing to handle this projec=
t on my behalf, I would appreciate your urgent response to provide you with=
more details to proceed further.
If you do not see my email in a fe=
w minutes after your reply, check your spam or junk folder please.
B=
est Regards
Mrs. Aisha Gaddafi
--0000000000003f77f1061c9828b3--