Nigerian Spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 13 Aug 2022 16:07:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oMzGk-000DvC-4S
for dave@doctor.nl2k.ab.ca;
Sat, 13 Aug 2022 16:06:10 -0600
Resent-From: The Doctor
Resent-Date: Sat, 13 Aug 2022 16:06:10 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj1-f48.google.com ([209.85.216.48]:46653)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oMu5V-0009HP-Hu
for doctor@doctor.nl2k.ab.ca;
Sat, 13 Aug 2022 10:34:19 -0600
Received: by mail-pj1-f48.google.com with SMTP id q7-20020a17090a7a8700b001f300db8677so3407112pjf.5
for; Sat, 13 Aug 2022 09:33:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=oOXoDyT6t+pnhdLd0loJ9S8e3OW0oLnNVj4ipQpAx3s=;
b=ZG5DZaM9QK0V84XKrXgaPrt89OEK0X3ntom9RhG6M58/AHUhRh0YTv/0o70Yj4+G2c
2efJrTFLVTS3EbcGeg9I3iz7sR/jK5ey3x6nniggRm9gPODywVZLoVqWO/rH8M66KpYw
h5ckkQGjEaaiT/iBUufxL70TmFUqwkRmyTfgURnPWyNsOrobFT9z4dNky56Gy5tJfQQg
4+gGNMVliphiUTKSFLKArPfRcHSmf9wQcR7V0QbB1CaSPK8fjdacBv8SoecF2N47IdHo
FDzErGt/qBiLMm4+rlAvKs1U7p/V535AngV436fGBtFC/C6k9uQIKc4D4+Nvjykwlixy
5hTg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=oOXoDyT6t+pnhdLd0loJ9S8e3OW0oLnNVj4ipQpAx3s=;
b=u95SuAWIcitL4zJbL3Va8NLUPiK2uv7ht5Jew8UJG2bqeGIo9ceE6d4qtWfEmXrAj6
eNbPIwZzL/NCWbgBi8EVPxVxkFLBKo9fTibAezvh9KD3pTaiT7jAGS+9cHSuIsN1SHZx
b2TdA5265MHi9+CWXMAqxGUG8AqZmT8wPQgpYP0p4uqJ2YOYsLnMBy0vQ/mSA8DOjQrf
MfqIzEiFsHhqXTvRLtX602viKk1QV23uJt7oWf6oBKFGlwMrEZmDLDpQKhDYNQFID14U
NBdqUJCkh69uVQBcxS3kqz0xg5k5TGpAArwyMqR4HBwJwz9JBpk/oMZSQSukglWzgxoR
IT1g==
X-Gm-Message-State: ACgBeo1+wWEoabSzqCxTVh6kwDvxQj7/caupfY1Q5ybfn5eSFK8l2c+s
N9vBfhuCAtPFhQMOB7X7QnCzFYranT68dTXdSI8=
X-Google-Smtp-Source: AA6agR6wYAMHSwNGy/BaCEfZ74U+QK9y/+Gv/PF09grqCPVPuMXUGP5o0WdNYZVhHmu8BlU4A/1SRSX0KtJaobu5xLc=
X-Received: by 2002:a17:90b:3947:b0:1f5:104:f8cd with SMTP id
oe7-20020a17090b394700b001f50104f8cdmr19001531pjb.26.1660408430561; Sat, 13
Aug 2022 09:33:50 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a17:90b:1c06:0:0:0:0 with HTTP; Sat, 13 Aug 2022 09:33:50
-0700 (PDT)
Reply-To: aishaelgaddafi213@yahoo.com
From: Aisha Gaddafi
Date: Sat, 13 Aug 2022 16:33:50 +0000
Message-ID:
Subject: HI from Mrs. Aisha El Gaddafi?
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 24.8
X-Spam_score_int: 248
X-Spam_bar: ++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, Please I want you to exercise some patience going
through this mail so that it will enable you to have a good understanding.
Meanwhile I will appreciate you ignoring and deleting this mail from your
m [...]
Content analysis details: (24.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: telegraph.co.uk]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.216.48 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[mosessuccess036[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[mosessuccess036[at]gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[aishaelgaddafi213[at]yahoo.com]
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 MILLION_USD BODY: Talks about millions of dollars
0.9 URG_BIZ BODY: Contains urgent matter
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.1 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
2.7 HK_SCAM_N1 BODY: No description available.
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} HI from Mrs. Aisha El Gaddafi?
Dear Friend,
Please I want you to exercise some patience going through this mail so
that it will enable you to have a good understanding. Meanwhile I will
appreciate you ignoring and deleting this mail from your mail box if
you are not interested in being my partner for the investment project
in your country.
I came across your e-mail contact prior to a private search while in
need of your assistance. My name is Mrs Aisha El Gaddafi, a single
Mother and a Widow with three Children. I am the only biological
Daughter of the late Libyan President (Late Colonel Muammar Gaddafi).
I have investment funds worth Twenty Seven Million Five Hundred
Thousand United State Dollar ($27,500,000.00 ) and i need a trusted
investment Manager/Partner because of my current refugee status,
however, I am interested in you for investment project assistance in
your country, may be from there, we can build business relationship in
the nearest future.
About me and the reason why I am now in Burkina Faso as you can read
more in the link below Please enter the link to read and know more
about me and the reason why I contacted you.
http://www.telegraph.co.uk/news/worldnews/africaandindianocean/libya/9967203/Gaddafis-daughter-thrown-out-of-Algeria-after-she-set-fire-to-presidential-residence.html
I am willing to negotiate an investment/business profit sharing ratio
with you based on the future investment earning profits. If you are
willing to handle this project on my behalf, kindly reply urgently to
enable me to provide you more information about the investment funds.
For your information, My late father also deposited 37kg of (GOLD) in
Accra Ghana, a neighboring country from where I am presently. My plan
is after claiming this fund, we will have enough funds to move for the
claim of the GOLD.
Your Urgent Reply Will Be Appreciated if really this transaction interests you.
contact me at this email address ( aisha ) for further discussion.
Best Regards
Mrs Aisha El Gaddafi
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 13 Aug 2022 16:07:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oMzGk-000DvC-4S
for dave@doctor.nl2k.ab.ca;
Sat, 13 Aug 2022 16:06:10 -0600
Resent-From: The Doctor
Resent-Date: Sat, 13 Aug 2022 16:06:10 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pj1-f48.google.com ([209.85.216.48]:46653)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oMu5V-0009HP-Hu
for doctor@doctor.nl2k.ab.ca;
Sat, 13 Aug 2022 10:34:19 -0600
Received: by mail-pj1-f48.google.com with SMTP id q7-20020a17090a7a8700b001f300db8677so3407112pjf.5
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=oOXoDyT6t+pnhdLd0loJ9S8e3OW0oLnNVj4ipQpAx3s=;
b=ZG5DZaM9QK0V84XKrXgaPrt89OEK0X3ntom9RhG6M58/AHUhRh0YTv/0o70Yj4+G2c
2efJrTFLVTS3EbcGeg9I3iz7sR/jK5ey3x6nniggRm9gPODywVZLoVqWO/rH8M66KpYw
h5ckkQGjEaaiT/iBUufxL70TmFUqwkRmyTfgURnPWyNsOrobFT9z4dNky56Gy5tJfQQg
4+gGNMVliphiUTKSFLKArPfRcHSmf9wQcR7V0QbB1CaSPK8fjdacBv8SoecF2N47IdHo
FDzErGt/qBiLMm4+rlAvKs1U7p/V535AngV436fGBtFC/C6k9uQIKc4D4+Nvjykwlixy
5hTg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=oOXoDyT6t+pnhdLd0loJ9S8e3OW0oLnNVj4ipQpAx3s=;
b=u95SuAWIcitL4zJbL3Va8NLUPiK2uv7ht5Jew8UJG2bqeGIo9ceE6d4qtWfEmXrAj6
eNbPIwZzL/NCWbgBi8EVPxVxkFLBKo9fTibAezvh9KD3pTaiT7jAGS+9cHSuIsN1SHZx
b2TdA5265MHi9+CWXMAqxGUG8AqZmT8wPQgpYP0p4uqJ2YOYsLnMBy0vQ/mSA8DOjQrf
MfqIzEiFsHhqXTvRLtX602viKk1QV23uJt7oWf6oBKFGlwMrEZmDLDpQKhDYNQFID14U
NBdqUJCkh69uVQBcxS3kqz0xg5k5TGpAArwyMqR4HBwJwz9JBpk/oMZSQSukglWzgxoR
IT1g==
X-Gm-Message-State: ACgBeo1+wWEoabSzqCxTVh6kwDvxQj7/caupfY1Q5ybfn5eSFK8l2c+s
N9vBfhuCAtPFhQMOB7X7QnCzFYranT68dTXdSI8=
X-Google-Smtp-Source: AA6agR6wYAMHSwNGy/BaCEfZ74U+QK9y/+Gv/PF09grqCPVPuMXUGP5o0WdNYZVhHmu8BlU4A/1SRSX0KtJaobu5xLc=
X-Received: by 2002:a17:90b:3947:b0:1f5:104:f8cd with SMTP id
oe7-20020a17090b394700b001f50104f8cdmr19001531pjb.26.1660408430561; Sat, 13
Aug 2022 09:33:50 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a17:90b:1c06:0:0:0:0 with HTTP; Sat, 13 Aug 2022 09:33:50
-0700 (PDT)
Reply-To: aishaelgaddafi213@yahoo.com
From: Aisha Gaddafi
Date: Sat, 13 Aug 2022 16:33:50 +0000
Message-ID:
Subject: HI from Mrs. Aisha El Gaddafi?
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 24.8
X-Spam_score_int: 248
X-Spam_bar: ++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, Please I want you to exercise some patience going
through this mail so that it will enable you to have a good understanding.
Meanwhile I will appreciate you ignoring and deleting this mail from your
m [...]
Content analysis details: (24.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: telegraph.co.uk]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.216.48 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[mosessuccess036[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[mosessuccess036[at]gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[aishaelgaddafi213[at]yahoo.com]
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 MILLION_USD BODY: Talks about millions of dollars
0.9 URG_BIZ BODY: Contains urgent matter
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.1 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
2.7 HK_SCAM_N1 BODY: No description available.
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} HI from Mrs. Aisha El Gaddafi?
Dear Friend,
Please I want you to exercise some patience going through this mail so
that it will enable you to have a good understanding. Meanwhile I will
appreciate you ignoring and deleting this mail from your mail box if
you are not interested in being my partner for the investment project
in your country.
I came across your e-mail contact prior to a private search while in
need of your assistance. My name is Mrs Aisha El Gaddafi, a single
Mother and a Widow with three Children. I am the only biological
Daughter of the late Libyan President (Late Colonel Muammar Gaddafi).
I have investment funds worth Twenty Seven Million Five Hundred
Thousand United State Dollar ($27,500,000.00 ) and i need a trusted
investment Manager/Partner because of my current refugee status,
however, I am interested in you for investment project assistance in
your country, may be from there, we can build business relationship in
the nearest future.
About me and the reason why I am now in Burkina Faso as you can read
more in the link below Please enter the link to read and know more
about me and the reason why I contacted you.
http://www.telegraph.co.uk/news/worldnews/africaandindianocean/libya/9967203/Gaddafis-daughter-thrown-out-of-Algeria-after-she-set-fire-to-presidential-residence.html
I am willing to negotiate an investment/business profit sharing ratio
with you based on the future investment earning profits. If you are
willing to handle this project on my behalf, kindly reply urgently to
enable me to provide you more information about the investment funds.
For your information, My late father also deposited 37kg of (GOLD) in
Accra Ghana, a neighboring country from where I am presently. My plan
is after claiming this fund, we will have enough funds to move for the
claim of the GOLD.
Your Urgent Reply Will Be Appreciated if really this transaction interests you.
contact me at this email address ( aisha ) for further discussion.
Best Regards
Mrs Aisha El Gaddafi
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments