Funds spam from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 13 Mar 2023 17:42:07 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1pbrnZ-000ApH-2p
for dave@doctor.nl2k.ab.ca;
Mon, 13 Mar 2023 17:41:49 -0600
Resent-From: The Doctor
Resent-Date: Mon, 13 Mar 2023 17:41:49 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f67.google.com ([209.85.208.67]:45917)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1pblCz-000K69-0d
for doctor@doctor.nl2k.ab.ca;
Mon, 13 Mar 2023 10:39:43 -0600
Received: by mail-ed1-f67.google.com with SMTP id cy23so51068495edb.12
for; Mon, 13 Mar 2023 09:37:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1678725451;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=dlVJUN9KhXQShtblKbJqFRYNomVqFV2pOoLqqpfk0Qo=;
b=JhUAxAy1WRu4VxOJr/dNC7y1kd/SYIGxhkEYAwATaj5WduzOT7rp3IGCNhFKMUiMXs
Hn0F0aQWbVTqYkc/F5b/HHGadhLEJfQWyPv7MQ9OyzThy7hrUf0NvZGBbFsyi1z9HoGT
Xt7nWyfi8uyALys9Dx8NElL+ZpUJc5i+NnAOwd3Qa59MKA4LBAYpb8uYfMpsKlZhoG6e
bKFzvW7Zhl9LF89zk6F5qLkWEGRMoWXhX5jcNGjN4StMWXf0XEpeIY8hpEicFSK4ZWwX
HqaKtwkMeV2cWc/QM4aBwiymJ1NldRXm1bFw+pRd4ppJDEN6ZUcomLJNjA+L6bdLtp0Z
KAIA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1678725451;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=dlVJUN9KhXQShtblKbJqFRYNomVqFV2pOoLqqpfk0Qo=;
b=K9zBYoCsKKAC1yK4R5UjMzGEzerEGMA2CLnapWAoxh8rRQBtq3GKqSDGz8ErcTXhRl
bwNCTEAGrmSH6Luh73SFOafUOXfaYzDHON7IYmr1UNK7kbNwyrahPUUNV3l+rW3OTOxA
dVZm0iuz+BGH21MaCEEe8Ydl8BB/XidKQfN+rAg8RpTqX/oXchXSW9OzuJynM0HqIAAc
55sO7xZgppYyrOQhMzQjnfqfywE7TNDstNUB594wY93jlxHPyWi4nZ6JpjWi+dDxcHky
7H1LAgXrFkPlasjOKpa/UVh2aVBNDS3TezuVkCqRDlsfxXGA32ttLaZ8KDE2IFKIjdY2
+/hw==
X-Gm-Message-State: AO0yUKUEZCgimdAtdVQ5gr+4N8HRyXLMbw7qKYH6qPhtpNWf2TsPIbvb
dX/+9vajLClKonAZjTRTTDwMa0NCu0G2N2bR4EY=
X-Google-Smtp-Source: AK7set8F/U/9Wmm1jMUIM25xEPYFmRcxCwfyiHmm3h51yg91VFgKBldfaw2Dn2n7Jci7OzI+mqzouQL/p+/A75fyg90=
X-Received: by 2002:a17:906:6dd8:b0:877:ef6d:8e59 with SMTP id
j24-20020a1709066dd800b00877ef6d8e59mr18284132ejt.8.1678725451331; Mon, 13
Mar 2023 09:37:31 -0700 (PDT)
MIME-Version: 1.0
Reply-To: aishagaddafisdaughter@gmail.com
From: Aisha Gaddafi
Date: Mon, 13 Mar 2023 16:37:04 -0700
Message-ID:
Subject: Dear Friend, greetings. Please, i need your assistance.
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000033bccd05f6cababf"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 17.8
X-Spam_score_int: 178
X-Spam_bar: +++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, greetings. Please, i need your assistance. I
am sending this message to you from Oman, in the largest city Muscat. Aisha
Gaddafi is my name,I am a widow and a single mother with three children,
the only biological daughter of the late Libyan President, Colonel Muammar
Gaddafi of Libya. I am currently under politic [...]
Content analysis details: (17.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.67 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[worldwidegold4(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[worldwidegold4(at)gmail.com]
0.9 URG_BIZ BODY: Contains urgent matter
2.7 HK_SCAM_N1 BODY: No description available.
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.67 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Dear Friend, greetings. Please, i need your assistance.
--00000000000033bccd05f6cababf
Content-Type: text/plain; charset="UTF-8"
Dear Friend, greetings. Please, i need your assistance.
I am sending this message to you from Oman, in the largest city Muscat.
Aisha Gaddafi is my name,I am a widow and a single mother with three
children, the only biological daughter of the late Libyan President,
Colonel Muammar Gaddafi of Libya. I am currently under political asylum
protection by the Omani government.
I have an investment fund worth "twenty seven millions, Five hundred
thousand united state dollars" ( $27, 500, 000. 00 USD ) available for
investment projects in your country. I would sincerely like to request your
permission to assist me in setting up an investment project in your country
and ensuring that the fund is efficiently invested in a profitable business
that you will manage and control on my behalf in your country.
Your urgent response for more details is required at my private email:
aishagaddafisdaughter@gmail.com
Many Thanks
Sincerely, Aisha
--00000000000033bccd05f6cababf
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--00000000000033bccd05f6cababf--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 13 Mar 2023 17:42:07 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1pbrnZ-000ApH-2p
for dave@doctor.nl2k.ab.ca;
Mon, 13 Mar 2023 17:41:49 -0600
Resent-From: The Doctor
Resent-Date: Mon, 13 Mar 2023 17:41:49 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f67.google.com ([209.85.208.67]:45917)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1pblCz-000K69-0d
for doctor@doctor.nl2k.ab.ca;
Mon, 13 Mar 2023 10:39:43 -0600
Received: by mail-ed1-f67.google.com with SMTP id cy23so51068495edb.12
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1678725451;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=dlVJUN9KhXQShtblKbJqFRYNomVqFV2pOoLqqpfk0Qo=;
b=JhUAxAy1WRu4VxOJr/dNC7y1kd/SYIGxhkEYAwATaj5WduzOT7rp3IGCNhFKMUiMXs
Hn0F0aQWbVTqYkc/F5b/HHGadhLEJfQWyPv7MQ9OyzThy7hrUf0NvZGBbFsyi1z9HoGT
Xt7nWyfi8uyALys9Dx8NElL+ZpUJc5i+NnAOwd3Qa59MKA4LBAYpb8uYfMpsKlZhoG6e
bKFzvW7Zhl9LF89zk6F5qLkWEGRMoWXhX5jcNGjN4StMWXf0XEpeIY8hpEicFSK4ZWwX
HqaKtwkMeV2cWc/QM4aBwiymJ1NldRXm1bFw+pRd4ppJDEN6ZUcomLJNjA+L6bdLtp0Z
KAIA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1678725451;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=dlVJUN9KhXQShtblKbJqFRYNomVqFV2pOoLqqpfk0Qo=;
b=K9zBYoCsKKAC1yK4R5UjMzGEzerEGMA2CLnapWAoxh8rRQBtq3GKqSDGz8ErcTXhRl
bwNCTEAGrmSH6Luh73SFOafUOXfaYzDHON7IYmr1UNK7kbNwyrahPUUNV3l+rW3OTOxA
dVZm0iuz+BGH21MaCEEe8Ydl8BB/XidKQfN+rAg8RpTqX/oXchXSW9OzuJynM0HqIAAc
55sO7xZgppYyrOQhMzQjnfqfywE7TNDstNUB594wY93jlxHPyWi4nZ6JpjWi+dDxcHky
7H1LAgXrFkPlasjOKpa/UVh2aVBNDS3TezuVkCqRDlsfxXGA32ttLaZ8KDE2IFKIjdY2
+/hw==
X-Gm-Message-State: AO0yUKUEZCgimdAtdVQ5gr+4N8HRyXLMbw7qKYH6qPhtpNWf2TsPIbvb
dX/+9vajLClKonAZjTRTTDwMa0NCu0G2N2bR4EY=
X-Google-Smtp-Source: AK7set8F/U/9Wmm1jMUIM25xEPYFmRcxCwfyiHmm3h51yg91VFgKBldfaw2Dn2n7Jci7OzI+mqzouQL/p+/A75fyg90=
X-Received: by 2002:a17:906:6dd8:b0:877:ef6d:8e59 with SMTP id
j24-20020a1709066dd800b00877ef6d8e59mr18284132ejt.8.1678725451331; Mon, 13
Mar 2023 09:37:31 -0700 (PDT)
MIME-Version: 1.0
Reply-To: aishagaddafisdaughter@gmail.com
From: Aisha Gaddafi
Date: Mon, 13 Mar 2023 16:37:04 -0700
Message-ID:
Subject: Dear Friend, greetings. Please, i need your assistance.
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000033bccd05f6cababf"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 17.8
X-Spam_score_int: 178
X-Spam_bar: +++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, greetings. Please, i need your assistance. I
am sending this message to you from Oman, in the largest city Muscat. Aisha
Gaddafi is my name,I am a widow and a single mother with three children,
the only biological daughter of the late Libyan President, Colonel Muammar
Gaddafi of Libya. I am currently under politic [...]
Content analysis details: (17.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.67 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[worldwidegold4(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[worldwidegold4(at)gmail.com]
0.9 URG_BIZ BODY: Contains urgent matter
2.7 HK_SCAM_N1 BODY: No description available.
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.67 listed in wl.mailspike.net]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Dear Friend, greetings. Please, i need your assistance.
--00000000000033bccd05f6cababf
Content-Type: text/plain; charset="UTF-8"
Dear Friend, greetings. Please, i need your assistance.
I am sending this message to you from Oman, in the largest city Muscat.
Aisha Gaddafi is my name,I am a widow and a single mother with three
children, the only biological daughter of the late Libyan President,
Colonel Muammar Gaddafi of Libya. I am currently under political asylum
protection by the Omani government.
I have an investment fund worth "twenty seven millions, Five hundred
thousand united state dollars" ( $27, 500, 000. 00 USD ) available for
investment projects in your country. I would sincerely like to request your
permission to assist me in setting up an investment project in your country
and ensuring that the fund is efficiently invested in a profitable business
that you will manage and control on my behalf in your country.
Your urgent response for more details is required at my private email:
aishagaddafisdaughter@gmail.com
Many Thanks
Sincerely, Aisha
--00000000000033bccd05f6cababf
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Dear Friend, greetings. Please, i need your assistance.
r>
I am sending this message to you from Oman, in the largest city Musca=
t.
Aisha Gaddafi is my name,I am a widow and a single mother with th=
ree children, the only biological daughter of the late Libyan President, Co=
lonel Muammar Gaddafi of Libya. I am currently under political asylum prote=
ction by the Omani government.
I have an investment fund =C2=A0worth=
"twenty seven millions, Five hundred thousand united state dollars&qu=
ot; ( $27, 500, 000. 00 USD ) available =C2=A0for investment projects in yo=
ur country. I would sincerely like to request your permission to assist me =
in setting up an investment project in your country and ensuring that the f=
und is efficiently invested in a profitable business that you will manage a=
nd control on my behalf in your country.
Your urgent response for mo=
re details is required at my private email:
daughter@gmail.com">aishagaddafisdaughter@gmail.com
Many Thanks<=
br>Sincerely, Aisha
r>
I am sending this message to you from Oman, in the largest city Musca=
t.
Aisha Gaddafi is my name,I am a widow and a single mother with th=
ree children, the only biological daughter of the late Libyan President, Co=
lonel Muammar Gaddafi of Libya. I am currently under political asylum prote=
ction by the Omani government.
I have an investment fund =C2=A0worth=
"twenty seven millions, Five hundred thousand united state dollars&qu=
ot; ( $27, 500, 000. 00 USD ) available =C2=A0for investment projects in yo=
ur country. I would sincerely like to request your permission to assist me =
in setting up an investment project in your country and ensuring that the f=
und is efficiently invested in a profitable business that you will manage a=
nd control on my behalf in your country.
Your urgent response for mo=
re details is required at my private email:
daughter@gmail.com">aishagaddafisdaughter@gmail.com
Many Thanks<=
br>Sincerely, Aisha
--00000000000033bccd05f6cababf--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments