Nigerian spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 25 Oct 2023 19:40:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.2 (FreeBSD))
(envelope-from)
id 1qvpIz-000I48-1z
for dave@doctor.nl2k.ab.ca;
Wed, 25 Oct 2023 19:37:01 -0600
Resent-From: The Doctor
Resent-Date: Wed, 25 Oct 2023 19:37:01 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f43.google.com ([209.85.218.43]:41450)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96.2 (FreeBSD))
(envelope-from)
id 1qvoi1-00017s-10
for doctor@doctor.nl2k.ab.ca;
Wed, 25 Oct 2023 18:58:55 -0600
Received: by mail-ej1-f43.google.com with SMTP id a640c23a62f3a-9bf0bee9f2fso10710866b.1
for; Wed, 25 Oct 2023 17:56:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1698281803; x=1698886603; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=Lf3znABcoh/UifBi5DU4HaRTXgfHL2nVKv3evR02vB0=;
b=NJQpwA2XuWDHKCY8pmv0bXDCC5WUO4902JCzRTXK5orOHj0H75uGeBaUP36xvqvKZl
dZFCvXSCxS1MKOZn/K6t9MP+lVOpTohBmKUATcrjZkaENXItbpgmyT1XovoQVeU5yPdO
CIJf3jccUmvYVpadMtT0LjrbNtHfUYvGR+p59Hj4vMhprUeIvNa0xAeFW37zP9Vq5GBD
eaMI/nReFbrTjkvcy9FIZWow/HntlJEGKWyVYhKDn1Q8St2Mi8g2BIDZx77tZcKaQ5Jl
uu0yu0o1+5UncYq+AVdLP6eam9DVvjlnczLoQHFgiJPpXmIpQAdq9noH1x8rn1eR+WPH
hCzg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1698281803; x=1698886603;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=Lf3znABcoh/UifBi5DU4HaRTXgfHL2nVKv3evR02vB0=;
b=XqWdKn0IgmJ955G1U6lDyZT50pJdnIsCexxcmFbzYwCLHFFnd/mxHkOieY8BGxwR4n
vpMlEXUeTdOGeeCNlrhDrk0pbOn4/hSGjVb5sNaDyOOLg2oybDhwn7pzarOwrWnXqYrE
DryltV5MDD/tEvc7gYNE3eQe2mOhjzhPCsoeiuLWCtgPKmyFu1jhtE5ZEnfOdDCqZfIC
ws+DFNUu2TrJr7v8TM+bm9xyFR1TpNn0h931oj2xDKhlFlYecw2ykVGq2L0wm+UpnHyM
P1yyUPiqsJRATEFtklLMU5yCiAv0Zg5OPOUaUNHsRdF+QrTWXL9LFP5hUTkJGECXbyAN
LE8w==
X-Gm-Message-State: AOJu0Yx251lVjdyzKVhbEyPbyfvrhSy1dM9zgJ4DNFUH98UHYZlkrdMT
B8m1rnEgQob7msO40tbYHy1x4ntb1DgkDs8KY80=
X-Google-Smtp-Source: AGHT+IFtWLkoidlNNp50Y9+hxYirXNI7XrO9Gafw5oj01mdVicqfpu+ItkGpqrHlEDZzBoKzFNeu0Y9U7NQ5cqc09XI=
X-Received: by 2002:a05:6402:12d3:b0:540:a181:f40b with SMTP id
k19-20020a05640212d300b00540a181f40bmr4679613edx.4.1698281803046; Wed, 25 Oct
2023 17:56:43 -0700 (PDT)
MIME-Version: 1.0
From: Aisha Al-Qaddafi
Date: Thu, 26 Oct 2023 02:56:31 +0200
Message-ID:
Subject: I NEED YOUR ASSISTANCE
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000009966990608940b87"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 15.0
X-Spam_score_int: 150
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greeting Beloved I came across your e-mail contact prior to
a private search while in need of your assistance. I am Aisha Al-Qaddafi,
the only daughter to Former President of Libya Col. Muammar Al-Qaddafi. Am
a Widow [...]
Content analysis details: (15.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.218.43 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[haifakalfan26(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[haifakalfan26(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.218.43 listed in wl.mailspike.net]
0.9 URG_BIZ BODY: Contains urgent matter
1.3 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
2.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} I NEED YOUR ASSISTANCE
X-Antivirus: AVG (VPS 231025-16, 10/25/2023), Inbound message
X-Antivirus-Status: Clean
--0000000000009966990608940b87
Content-Type: text/plain; charset="UTF-8"
Greeting Beloved
I came across your e-mail contact prior to a private search while in need
of your assistance. I am Aisha Al-Qaddafi, the only daughter to Former
President of Libya Col. Muammar Al-Qaddafi. Am a Widow with Children.
I have investment funds worth Twenty Seven Million Five Hundred Thousand
United State Dollar ($27.500.000.00 ) and i need a trusted investment
Manager/Partner because of my current refugee status, however, I am
interested in you for investment project assistance in your country, may be
from there, we can build business relationship in the nearest future.
I am willing to negotiate an investment/business profit sharing ratio with
you based on the future investment earning profits.
If you are willing to handle this project on my behalf, kindly reply
urgently to enable me to provide you more information about the investment
funds.
Your Urgent Reply Will Be Appreciated
Best Regards
Aisha Al-Qaddafi
--0000000000009966990608940b87
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--0000000000009966990608940b87--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 25 Oct 2023 19:40:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.2 (FreeBSD))
(envelope-from
id 1qvpIz-000I48-1z
for dave@doctor.nl2k.ab.ca;
Wed, 25 Oct 2023 19:37:01 -0600
Resent-From: The Doctor
Resent-Date: Wed, 25 Oct 2023 19:37:01 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f43.google.com ([209.85.218.43]:41450)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96.2 (FreeBSD))
(envelope-from
id 1qvoi1-00017s-10
for doctor@doctor.nl2k.ab.ca;
Wed, 25 Oct 2023 18:58:55 -0600
Received: by mail-ej1-f43.google.com with SMTP id a640c23a62f3a-9bf0bee9f2fso10710866b.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1698281803; x=1698886603; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=Lf3znABcoh/UifBi5DU4HaRTXgfHL2nVKv3evR02vB0=;
b=NJQpwA2XuWDHKCY8pmv0bXDCC5WUO4902JCzRTXK5orOHj0H75uGeBaUP36xvqvKZl
dZFCvXSCxS1MKOZn/K6t9MP+lVOpTohBmKUATcrjZkaENXItbpgmyT1XovoQVeU5yPdO
CIJf3jccUmvYVpadMtT0LjrbNtHfUYvGR+p59Hj4vMhprUeIvNa0xAeFW37zP9Vq5GBD
eaMI/nReFbrTjkvcy9FIZWow/HntlJEGKWyVYhKDn1Q8St2Mi8g2BIDZx77tZcKaQ5Jl
uu0yu0o1+5UncYq+AVdLP6eam9DVvjlnczLoQHFgiJPpXmIpQAdq9noH1x8rn1eR+WPH
hCzg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1698281803; x=1698886603;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=Lf3znABcoh/UifBi5DU4HaRTXgfHL2nVKv3evR02vB0=;
b=XqWdKn0IgmJ955G1U6lDyZT50pJdnIsCexxcmFbzYwCLHFFnd/mxHkOieY8BGxwR4n
vpMlEXUeTdOGeeCNlrhDrk0pbOn4/hSGjVb5sNaDyOOLg2oybDhwn7pzarOwrWnXqYrE
DryltV5MDD/tEvc7gYNE3eQe2mOhjzhPCsoeiuLWCtgPKmyFu1jhtE5ZEnfOdDCqZfIC
ws+DFNUu2TrJr7v8TM+bm9xyFR1TpNn0h931oj2xDKhlFlYecw2ykVGq2L0wm+UpnHyM
P1yyUPiqsJRATEFtklLMU5yCiAv0Zg5OPOUaUNHsRdF+QrTWXL9LFP5hUTkJGECXbyAN
LE8w==
X-Gm-Message-State: AOJu0Yx251lVjdyzKVhbEyPbyfvrhSy1dM9zgJ4DNFUH98UHYZlkrdMT
B8m1rnEgQob7msO40tbYHy1x4ntb1DgkDs8KY80=
X-Google-Smtp-Source: AGHT+IFtWLkoidlNNp50Y9+hxYirXNI7XrO9Gafw5oj01mdVicqfpu+ItkGpqrHlEDZzBoKzFNeu0Y9U7NQ5cqc09XI=
X-Received: by 2002:a05:6402:12d3:b0:540:a181:f40b with SMTP id
k19-20020a05640212d300b00540a181f40bmr4679613edx.4.1698281803046; Wed, 25 Oct
2023 17:56:43 -0700 (PDT)
MIME-Version: 1.0
From: Aisha Al-Qaddafi
Date: Thu, 26 Oct 2023 02:56:31 +0200
Message-ID:
Subject: I NEED YOUR ASSISTANCE
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000009966990608940b87"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 15.0
X-Spam_score_int: 150
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greeting Beloved I came across your e-mail contact prior to
a private search while in need of your assistance. I am Aisha Al-Qaddafi,
the only daughter to Former President of Libya Col. Muammar Al-Qaddafi. Am
a Widow [...]
Content analysis details: (15.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.218.43 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[haifakalfan26(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[haifakalfan26(at)gmail.com]
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.218.43 listed in wl.mailspike.net]
0.9 URG_BIZ BODY: Contains urgent matter
1.3 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
2.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} I NEED YOUR ASSISTANCE
X-Antivirus: AVG (VPS 231025-16, 10/25/2023), Inbound message
X-Antivirus-Status: Clean
--0000000000009966990608940b87
Content-Type: text/plain; charset="UTF-8"
Greeting Beloved
I came across your e-mail contact prior to a private search while in need
of your assistance. I am Aisha Al-Qaddafi, the only daughter to Former
President of Libya Col. Muammar Al-Qaddafi. Am a Widow with Children.
I have investment funds worth Twenty Seven Million Five Hundred Thousand
United State Dollar ($27.500.000.00 ) and i need a trusted investment
Manager/Partner because of my current refugee status, however, I am
interested in you for investment project assistance in your country, may be
from there, we can build business relationship in the nearest future.
I am willing to negotiate an investment/business profit sharing ratio with
you based on the future investment earning profits.
If you are willing to handle this project on my behalf, kindly reply
urgently to enable me to provide you more information about the investment
funds.
Your Urgent Reply Will Be Appreciated
Best Regards
Aisha Al-Qaddafi
--0000000000009966990608940b87
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Greeting Beloved
I came across your e-mail contact=
prior to a private search while in need of your assistance. I am Aisha Al-=
Qaddafi, the only daughter to Former President of Libya Col. Muammar Al-Qad=
dafi. Am a Widow with Children.
I have investment funds worth Twenty=
Seven Million Five Hundred Thousand United State Dollar ($27.500.000.00 ) =
and i need a trusted investment Manager/Partner because of my current refug=
ee status, however, I am interested in you for investment project assistanc=
e in your country, may be from there, we can build business relationship in=
the nearest future.
I am willing to negotiate an investment/busines=
s profit sharing ratio with you based on the future investment earning prof=
its.
If you are willing to handle this project on my behalf, kindly =
reply urgently to enable me to provide you more information about the inves=
tment funds.
Your Urgent Reply Will Be Appreciated
Best Regar=
ds
Aisha Al-Qaddafi
I came across your e-mail contact=
prior to a private search while in need of your assistance. I am Aisha Al-=
Qaddafi, the only daughter to Former President of Libya Col. Muammar Al-Qad=
dafi. Am a Widow with Children.
I have investment funds worth Twenty=
Seven Million Five Hundred Thousand United State Dollar ($27.500.000.00 ) =
and i need a trusted investment Manager/Partner because of my current refug=
ee status, however, I am interested in you for investment project assistanc=
e in your country, may be from there, we can build business relationship in=
the nearest future.
I am willing to negotiate an investment/busines=
s profit sharing ratio with you based on the future investment earning prof=
its.
If you are willing to handle this project on my behalf, kindly =
reply urgently to enable me to provide you more information about the inves=
tment funds.
Your Urgent Reply Will Be Appreciated
Best Regar=
ds
Aisha Al-Qaddafi
--0000000000009966990608940b87--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments