Nigerian spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 16 May 2024 15:33:00 -0600

Received: from mail-oa1-f67.google.com ([209.85.160.67]:46325)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s7ii4-000000001W5-3lCW

for dave@doctor.nl2k.ab.ca;

Thu, 16 May 2024 15:32:24 -0600

Received: by mail-oa1-f67.google.com with SMTP id 586e51a60fabf-23f2996b634so693765fac.0

for ; Thu, 16 May 2024 14:30:24 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1715895018; x=1716499818; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=DqvByW2zR54bK5K++xeqo6cWgdxrP3fhl8ENKa8RtQI=;

b=Dfd9mmbcDsOOMzbrzw3tQUVO2qAs3QPrn62X+dQ8My45kaqm/QDrdZEN6iYCeDfSm/

vfhfOLeoTgpikm8hO9OHSdLTMJLfZIdpxyOolC4MgxKCxA+4Qcpudn2UXVrdvK7qq+q9

Re1f8mCqbLlLgfgWAE9odwCFTm3lI8J/rF5X3jsc9HCcxtiv0B9A9pUqcg0iXI46EciN

zR8xdR6hxiFsIpqyQ7K0FjDZNA+3UqhBmpWnSncfR68LTCNZIeVcwXiQ28Cu6kTVk1wY

IXBZm3UeYpkpP/8zitIOEUsjxTfM6y8r2qVqQ+VeXNttrfiBwVup3aa3IylHI1Uyo1i+

MHxA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1715895018; x=1716499818;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=DqvByW2zR54bK5K++xeqo6cWgdxrP3fhl8ENKa8RtQI=;

b=JW7tIBaiuPXoq89ZAZwwpcBTw4FMP47GhGUNxlHJhh/XdYrTg8JAHdiWEhHEOfeXIA

P7d1qAFasMz7FYklyrdp6vS/JfbEobB2B9sgRm0Nebz9p8bthiAXxcqnGiT5pqBw4dim

ON3kyImLy7gDTtm5uZkRzZdxuzrA43ohZPEQ8Xnt7joAjrqBfk/7G2WiCjkemvKMMqu0

k89f4s/vguphmdxD1nhib9Sl9rbg+Wcr4ZQW4llVT3FLFqsWU/5CDb4Viu9cFy9GOBYY

vs/qob9MAe1dzoaJGnb84O3uAfWUhJ5exjo8NCfjorCGA4PBE8DP3QuLNptN6DMad1kx

xz4Q==

X-Forwarded-Encrypted: i=1; AJvYcCWrk+du4xHx/eiGmJ4G7Fi21W2YGyU291/3t8AAboFuPrQrnt0OcM6PDeIFkRMqTwtOT/k3B2JElOCOjRaQIraSEfMwM47G

X-Gm-Message-State: AOJu0YzUyAAwij9emuEElzLKETM6W/REP53RzaqLhvTs7dIF47Kx0YsU

pZTzvEkAB2S+j2aybge6072W/02mv0WWs7YNVVUEUumim7C84y3WoMT0SCDEL3AlAf8rgvVDSD5

xdgRNXvrBsMneTDaZ8Q5XyYKi//4=

X-Google-Smtp-Source: AGHT+IHSVJwYlA52jt2CVfneuHpPgui4ZnBmzoPMhMrPHAaWAFxIWlNQA4UkjNS++lSsU5ghBX4nDi3sXpnpAy/2lwc=

X-Received: by 2002:a05:6871:b330:b0:23d:bf8d:2453 with SMTP id

586e51a60fabf-24172e02ed6mr17502065fac.42.1715895017260; Thu, 16 May 2024

14:30:17 -0700 (PDT)

MIME-Version: 1.0

From: Mrs Aisha Al-Qaddafi

Date: Thu, 16 May 2024 14:29:56 -0700

Message-ID:

Subject: greetings My beloved One.

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000f9d40d061898f086"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 19.5

X-Spam_score_int: 195

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: greetings My beloved One. Please bear with me. I am writing

this letter to you with tears and sorrow from my heart. I am Aisha Muammar

Gaddafi, the only daughter of the embattled president of Libya, [...]



Content analysis details: (19.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.67 listed in dnsbl.ahbl.org]

[209.85.160.67 listed in dnsbl.ahbl.org]

[209.85.160.67 listed in dnsbl.ahbl.org]

[209.85.160.67 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.67 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.67 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.67 listed in will-spam-for-food.eu.org]

[209.85.160.67 listed in will-spam-for-food.eu.org]

[209.85.160.67 listed in will-spam-for-food.eu.org]

[209.85.160.67 listed in will-spam-for-food.eu.org]

[209.85.160.67 listed in will-spam-for-food.eu.org]

[209.85.160.67 listed in will-spam-for-food.eu.org]

[209.85.160.67 listed in will-spam-for-food.eu.org]

[209.85.160.67 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.67 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.67 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mrsaishaalqaddaffi8(at)gmail.com]

1.4 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

1.0 HK_SCAM_N15 BODY: No description available.

2.5 HK_SCAM_N2 BODY: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 HK_SCAM No description available.

0.0 XFER_LOTSA_MONEY Transfer a lot of money

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} greetings My beloved One.



--000000000000f9d40d061898f086

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



greetings My beloved One.

Please bear with me. I am writing this letter to you with tears and sorrow

from my heart.

I am Aisha Muammar Gaddafi, the only daughter of the embattled president of

Libya, Hon. Muammar Gaddafi. I know my mail might come to you as a surprise

because you don=E2=80=99t know me, but due to the unsolicited nature of my

situation here in Refugee camp Ouagadougou Burkina Faso i decided to

contact you for help. I have passed through pains and sorrowful moments

since the death of my father. At the same time, my family is the target of

Western nations led by Nato who want to destroy my father at all costs. Our

investments and bank accounts in several countries are their targets to

freeze.

My Father of blessed memory deposited the sum of $27.5M (Twenty Seven

Million Five Hundred Thousand Dollars) in a Bank at Burkina Faso which he

used my name as the next of kin. I have been commissioned by the (BOA) bank

to present an interested foreign investor/partner who can stand as my

trustee and receive the fund in his account for a possible investment in

his country due to my refugee status here in Burkina Faso.



I am in search of an honest and reliable person who will help me and stand

as my trustee so that I will present him to the Bank for the transfer of

the fund to his bank account overseas. I have chosen to contact you after

my prayers and I believe that you will not betray my trust but rather take

me as your own sister or daughter. If this transaction interests you, you

don't have to disclose it to anybody because of what is going on with my

entire family, if the United nation happens to know this account, they will

freeze it as they freeze others, so please keep this transaction only to

yourself until we finalize it.

Sorry for my pictures. I will enclose it in my next mail and more about me

when I hear from you okay.

Yours Sincerely

Best Regard,

Aisha Gaddafi



--000000000000f9d40d061898f086

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



=C2=A0 =C2=A0greetings My beloved One.
Please bear with=

me. I am writing this letter to you with tears and sorrow from my heart.
r>I am Aisha Muammar Gaddafi, the only daughter of the embattled president =

of Libya, Hon. Muammar Gaddafi. I know my mail might come to you as a surpr=

ise because you don=E2=80=99t know me, but due to the unsolicited nature of=

my situation here in Refugee camp Ouagadougou Burkina Faso i decided to co=

ntact you for help. I have passed through pains and sorrowful moments since=

the death of my father. At the same time, my family is the target of Weste=

rn nations led by Nato who want to destroy my father at all costs. Our inve=

stments and bank accounts in several countries are their targets to freeze.=


My Father of blessed memory deposited the sum of $27.5M (Twenty Seven M=

illion Five Hundred Thousand Dollars) in a Bank at Burkina Faso which he us=

ed my name as the next of kin. I have been commissioned by the (BOA) bank t=

o present an interested foreign investor/partner who can stand as my truste=

e and receive the fund in his account for a possible investment in his coun=

try due to my refugee status here in Burkina Faso.

I am in search of=

an honest and reliable person who will help me and stand as my trustee so =

that I will present him to the Bank for the transfer of the fund to his ban=

k account overseas. I have chosen to contact you after my prayers and I bel=

ieve that you will not betray my trust but rather take me as your own siste=

r or daughter. If this transaction interests you, you don't have to dis=

close it to anybody because of what is going on with my entire family, if t=

he United nation happens to know this account, they will freeze it as they =

freeze others, so please keep this transaction only to yourself until we fi=

nalize it.
Sorry for my pictures. I will enclose it in my next mail and =

more about me when I hear from you okay.
Yours Sincerely
Best Regard,=

=C2=A0
Aisha Gaddafi




--000000000000f9d40d061898f086--

I1.13KL0LD37.6KI2.25KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA