Nigerian spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 20 Nov 2023 08:55:18 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))
(envelope-from)
id 1r55Wa-000000009MZ-0pMs
for dave@doctor.nl2k.ab.ca;
Mon, 20 Nov 2023 07:45:20 -0700
Resent-From: The Doctor
Resent-Date: Mon, 20 Nov 2023 07:45:20 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f44.google.com ([209.85.218.44]:48403)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97 (FreeBSD))
(envelope-from)
id 1r54Bj-000000007ih-1k4I
for doctor@doctor.nl2k.ab.ca;
Mon, 20 Nov 2023 06:19:47 -0700
Received: by mail-ej1-f44.google.com with SMTP id a640c23a62f3a-9fa2714e828so276312466b.1
for; Mon, 20 Nov 2023 05:17:44 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1700486258; x=1701091058; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=omPGqxQbNzjgxq6CyMVDR2R6NlpcZNvrEiDiXEw8bgk=;
b=FUdw/PFtzx7V32wOnRBpFZwBSq3V7irXbvENSg9KTzGGAlWIw1KtaqAc9jS1cnEI7y
z2JiQhC6AtNgmEiSuVZiPQvTPnruOkMv+2a4pv+YlNUNugRLwFLzkUP0SqrYhMI+4EZm
lVHRMzOoEBy9B6EYlhmmnL0EMc1M1f8qAurbfoZd1RspDPIdApNlRu1fLYqs0gA75TOT
vgwf9r2WQugVqYdAFC8PHUmyRNq5UA4xSdpyy9GfzVkNG1Aweufm7O18DeOY9Gb4f8S6
mkK8gMsM+HVk6l+xZyHEDUaz+Vt19H6z2zzCQ04TRd6vurUhEqnBz08VInUHpc2KnVWv
HQIw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1700486258; x=1701091058;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=omPGqxQbNzjgxq6CyMVDR2R6NlpcZNvrEiDiXEw8bgk=;
b=CLJyLSgtPhoT2dUtCYyHbf+pP2tz3eKiBES1HVyI52TtRZwyl9dsPFK050i6mit/pD
hYx4GsAD4r/U78vAn8HaLD6J+PObs0CW1m9ecWBAwLgLn6Fb5AGKTAO5MJ/+1a/lGA0J
TuqBc6b/+hi92kq6x+8rPEyNjWhZetP+1+escXZOGfWC1XIUw3/fUYq+rPKS0Vkh0E8t
Rh0JnqqQQcOCu04jAo29qQ286Zrrc6hgCazpWPBKpZaYYkYixCLTD8bdZ29nN6MMMK88
zCB0OTqw3nNVe0xks1zbIoHy2bnJzPAnfyUJ6kNkGk51PdgKCu4Z/fMBeeWKKQoK2PXY
X1Mg==
X-Gm-Message-State: AOJu0YwPLuqu1pK+RRZCQPVLLfEcIa9jm9DK8iO8povVN4De+yx4w6Ik
Auz2kERJObjpXQukhC79Hx8yYkup/Ls+pIWSbMU=
X-Google-Smtp-Source: AGHT+IGgPgkWixTUcjs7wgylpnHZPpNvgBEJQvUHQJ+xy3UCPe3xrsus3xParwPcZ7DyIxFol5U5G3SBQWUzUwsyXQ8=
X-Received: by 2002:a17:906:2748:b0:9d4:84b6:8715 with SMTP id
a8-20020a170906274800b009d484b68715mr5565894ejd.52.1700486258314; Mon, 20 Nov
2023 05:17:38 -0800 (PST)
MIME-Version: 1.0
From: "Mrs. Aisha Gaddafi"
Date: Mon, 20 Nov 2023 14:17:26 +0100
Message-ID:
Subject: I need your help
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000005f55d3060a954fb4"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 17.5
X-Spam_score_int: 175
X-Spam_bar: +++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I am sending my greetings to you from the Sultanate of Oman,
In the capital city of Muscat. May I use this medium to open a mutual communication
with you, and seeking your acceptance towards investing in your country under
your management as my partner, My name is Aisha Gaddafi and presently [...]
Content analysis details: (17.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.218.44 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[monqurte(at)gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.218.44 listed in wl.mailspike.net]
0.1 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
2.7 HK_SCAM_N1 BODY: No description available.
0.9 URG_BIZ BODY: Contains urgent matter
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
2.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} I need your help
X-Antivirus: AVG (VPS 231119-4, 11/19/2023), Inbound message
X-Antivirus-Status: Clean
--0000000000005f55d3060a954fb4
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
I am sending my greetings to you from the Sultanate of Oman, In the capital
city of Muscat.
May I use this medium to open a mutual communication with you, and seeking
your acceptance towards investing in your country under your management as
my partner, My name is Aisha Gaddafi and presently living in Oman, I am a
Widow and single Mother with three Children, the only biological Daughter
of late Libyan President (Late Colonel Muammar Gaddafi) and presently I am
under political asylum protection by the Omani Government.
I have funds worth =E2=80=9CTwenty Seven Million Five Hundred Thousand Unit=
ed State
Dollars=E2=80=9D -$27.500.000.00 US Dollars which I want to entrust to you =
for an
investment project in your country. If you are willing to handle this
project on my behalf, kindly reply urgently to enable me to provide you
with more details to start the transfer process.
I shall appreciate your urgent response through my email address below:
mrsaisha0algaddafi@gmail.com
Thanks
Yours Truly Aisha
--0000000000005f55d3060a954fb4
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
I am sending my greetings to you from the Sultanate of=
Oman, In the capital city of Muscat.
May I use this medium to open =
a mutual communication with you, and seeking your acceptance towards invest=
ing in your country under your management as my partner, My name is Aisha G=
addafi and presently living in Oman, I am a Widow and single Mother with th=
ree Children, the only biological Daughter of late Libyan President (Late C=
olonel Muammar Gaddafi) and presently I am under political asylum protectio=
n by the Omani Government.
I have funds worth =E2=80=9CTwenty Seven =
Million Five Hundred Thousand United State Dollars=E2=80=9D -$27.500.000.00=
US Dollars which I want to entrust to you for an investment project in you=
r country. If you are willing to handle this project on my behalf, kindly r=
eply urgently to enable me to provide you with more details to start the tr=
ansfer process.
I shall appreciate your urgent response through my e=
mail address below: mrsaish=
a0algaddafi@gmail.com
Thanks
Yours Truly Aisha
--0000000000005f55d3060a954fb4--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 20 Nov 2023 08:55:18 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))
(envelope-from
id 1r55Wa-000000009MZ-0pMs
for dave@doctor.nl2k.ab.ca;
Mon, 20 Nov 2023 07:45:20 -0700
Resent-From: The Doctor
Resent-Date: Mon, 20 Nov 2023 07:45:20 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f44.google.com ([209.85.218.44]:48403)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97 (FreeBSD))
(envelope-from
id 1r54Bj-000000007ih-1k4I
for doctor@doctor.nl2k.ab.ca;
Mon, 20 Nov 2023 06:19:47 -0700
Received: by mail-ej1-f44.google.com with SMTP id a640c23a62f3a-9fa2714e828so276312466b.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1700486258; x=1701091058; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=omPGqxQbNzjgxq6CyMVDR2R6NlpcZNvrEiDiXEw8bgk=;
b=FUdw/PFtzx7V32wOnRBpFZwBSq3V7irXbvENSg9KTzGGAlWIw1KtaqAc9jS1cnEI7y
z2JiQhC6AtNgmEiSuVZiPQvTPnruOkMv+2a4pv+YlNUNugRLwFLzkUP0SqrYhMI+4EZm
lVHRMzOoEBy9B6EYlhmmnL0EMc1M1f8qAurbfoZd1RspDPIdApNlRu1fLYqs0gA75TOT
vgwf9r2WQugVqYdAFC8PHUmyRNq5UA4xSdpyy9GfzVkNG1Aweufm7O18DeOY9Gb4f8S6
mkK8gMsM+HVk6l+xZyHEDUaz+Vt19H6z2zzCQ04TRd6vurUhEqnBz08VInUHpc2KnVWv
HQIw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1700486258; x=1701091058;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=omPGqxQbNzjgxq6CyMVDR2R6NlpcZNvrEiDiXEw8bgk=;
b=CLJyLSgtPhoT2dUtCYyHbf+pP2tz3eKiBES1HVyI52TtRZwyl9dsPFK050i6mit/pD
hYx4GsAD4r/U78vAn8HaLD6J+PObs0CW1m9ecWBAwLgLn6Fb5AGKTAO5MJ/+1a/lGA0J
TuqBc6b/+hi92kq6x+8rPEyNjWhZetP+1+escXZOGfWC1XIUw3/fUYq+rPKS0Vkh0E8t
Rh0JnqqQQcOCu04jAo29qQ286Zrrc6hgCazpWPBKpZaYYkYixCLTD8bdZ29nN6MMMK88
zCB0OTqw3nNVe0xks1zbIoHy2bnJzPAnfyUJ6kNkGk51PdgKCu4Z/fMBeeWKKQoK2PXY
X1Mg==
X-Gm-Message-State: AOJu0YwPLuqu1pK+RRZCQPVLLfEcIa9jm9DK8iO8povVN4De+yx4w6Ik
Auz2kERJObjpXQukhC79Hx8yYkup/Ls+pIWSbMU=
X-Google-Smtp-Source: AGHT+IGgPgkWixTUcjs7wgylpnHZPpNvgBEJQvUHQJ+xy3UCPe3xrsus3xParwPcZ7DyIxFol5U5G3SBQWUzUwsyXQ8=
X-Received: by 2002:a17:906:2748:b0:9d4:84b6:8715 with SMTP id
a8-20020a170906274800b009d484b68715mr5565894ejd.52.1700486258314; Mon, 20 Nov
2023 05:17:38 -0800 (PST)
MIME-Version: 1.0
From: "Mrs. Aisha Gaddafi"
Date: Mon, 20 Nov 2023 14:17:26 +0100
Message-ID:
Subject: I need your help
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000005f55d3060a954fb4"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 17.5
X-Spam_score_int: 175
X-Spam_bar: +++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: I am sending my greetings to you from the Sultanate of Oman,
In the capital city of Muscat. May I use this medium to open a mutual communication
with you, and seeking your acceptance towards investing in your country under
your management as my partner, My name is Aisha Gaddafi and presently [...]
Content analysis details: (17.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.218.44 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[monqurte(at)gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.218.44 listed in wl.mailspike.net]
0.1 MILLION_HUNDRED BODY: Million "One to Nine" Hundred
2.7 HK_SCAM_N1 BODY: No description available.
0.9 URG_BIZ BODY: Contains urgent matter
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
2.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} I need your help
X-Antivirus: AVG (VPS 231119-4, 11/19/2023), Inbound message
X-Antivirus-Status: Clean
--0000000000005f55d3060a954fb4
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
I am sending my greetings to you from the Sultanate of Oman, In the capital
city of Muscat.
May I use this medium to open a mutual communication with you, and seeking
your acceptance towards investing in your country under your management as
my partner, My name is Aisha Gaddafi and presently living in Oman, I am a
Widow and single Mother with three Children, the only biological Daughter
of late Libyan President (Late Colonel Muammar Gaddafi) and presently I am
under political asylum protection by the Omani Government.
I have funds worth =E2=80=9CTwenty Seven Million Five Hundred Thousand Unit=
ed State
Dollars=E2=80=9D -$27.500.000.00 US Dollars which I want to entrust to you =
for an
investment project in your country. If you are willing to handle this
project on my behalf, kindly reply urgently to enable me to provide you
with more details to start the transfer process.
I shall appreciate your urgent response through my email address below:
mrsaisha0algaddafi@gmail.com
Thanks
Yours Truly Aisha
--0000000000005f55d3060a954fb4
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
I am sending my greetings to you from the Sultanate of=
Oman, In the capital city of Muscat.
May I use this medium to open =
a mutual communication with you, and seeking your acceptance towards invest=
ing in your country under your management as my partner, My name is Aisha G=
addafi and presently living in Oman, I am a Widow and single Mother with th=
ree Children, the only biological Daughter of late Libyan President (Late C=
olonel Muammar Gaddafi) and presently I am under political asylum protectio=
n by the Omani Government.
I have funds worth =E2=80=9CTwenty Seven =
Million Five Hundred Thousand United State Dollars=E2=80=9D -$27.500.000.00=
US Dollars which I want to entrust to you for an investment project in you=
r country. If you are willing to handle this project on my behalf, kindly r=
eply urgently to enable me to provide you with more details to start the tr=
ansfer process.
I shall appreciate your urgent response through my e=
mail address below: mrsaish=
a0algaddafi@gmail.com
Thanks
Yours Truly Aisha
--0000000000005f55d3060a954fb4--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments