Nigerian spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jan 2025 15:22:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVHwf-0000000066G-0bYc

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jan 2025 15:21:05 -0700

Resent-From: The Doctor

Resent-Date: Tue, 7 Jan 2025 15:21:05 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f196.google.com ([209.85.160.196]:50209)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVGzo-00000000Kx8-18XF

for sales@nk.ca;

Tue, 07 Jan 2025 14:20:25 -0700

Received: by mail-qt1-f196.google.com with SMTP id d75a77b69052e-46769b34cbfso58137281cf.0

for ; Tue, 07 Jan 2025 13:18:21 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1736284695; x=1736889495; darn=nk.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=rN8L9kNbcxTp4AA4upHEaXFCQgW+kw1Du4zT910D4qg=;

b=InWbg2eKD2p5ZXAextyqu1RxQTv+NrK53obwyVBiOPcH1AQKY3/ag7KKHxgD5VwB3o

ow2dqvyl1TmEPUxTojql22rbyjEJiU3mUDbodyaHLEUv4ud71ztU1A5UkjhlpakjYRXY

6k3lI0NS7NonMZiruC6aHGc2VUAF/G1wZbFUSaA2ZXjCMYGZy1VAJUvsjTDRtJlLt/dX

uTmypP7XAspUs3f/Id09vh691z2t70BSM95fPOA5xnX8yfwmqW/HT+uvzN24BtTM4CIJ

aiLlAPbDQEnA7pPpRKeaJ2mJ66pQl/S2TlxiC8DI97hw51wzK8lBL+XWnJzePHO47iu2

loUg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1736284695; x=1736889495;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=rN8L9kNbcxTp4AA4upHEaXFCQgW+kw1Du4zT910D4qg=;

b=LE/jDZMoqcAc4+eX+eaBnziklJMh0Hln9JScTkk+6djBiBo8UQrJDOHlgd/UlbV9BK

VMdAM4OI82Wsl0qlCGq9RDCvyaRPUrSqTgMHjzeSoUFxbRqNGoj8MZeso/bW943zVkfV

6NdlIzUTCR4oFRgwTG9dyEPMnQSUMf6U0KktRP8CiJinn+XitJ7RYyB6CJbur0dsv9Rt

A3l6c4tg66gRDqBdXMNn92QXtiOyWFAOP6dfI804dGIRdDqaRZUag7RNBA52dLV+yFSb

ToouD3WzmrYPBlDLs9HGKXDcdji702Sr6osJiIps7Gk7PTDI47CoDZHUvqujJHV6XxsX

dmiA==

X-Forwarded-Encrypted: i=1; AJvYcCWVsc34PHRmgPq9G68pAREhe3rMsNiDZFgHXY5MlDb7LHgAJZKkHz3p9syMlbJsEny0pF/+Og==@nk.ca

X-Gm-Message-State: AOJu0Ywglfq1InC0hUQPcu13Cfjo+/sY1870wtpoNwBxqT7e1lc0Yv9d

i6Mlm8zP+NNpyQsk43LERd8RKw3A5io5MV54EwATZUfRZAmJ0Br+jw9OeFyYoaejmLLOVSardcv

lLLgPYFkpKuJyBB1Q+385c28+WpQ=

X-Gm-Gg: ASbGncvlFwOYOgK4/PubxNUyFmrMU0j0svHXMQyykRVqYdJsQRyRHeZdmTtYWnGXu2a

RvOgLDIhmHbnjAQFAgq30rAUXVHvgP9XL1h+Towy04ASKkoWtPrx86cUaSnUGpx3Mw3b9/PFc

X-Google-Smtp-Source: AGHT+IE5/cbMaHwlz4FMXx0M/TSGbjo88u1g9415zOnrSLDV7Bo7HTxfRXAqRMcV+CQfFDLNX0aCKfsjccnunorHTEU=

X-Received: by 2002:a05:622a:e:b0:467:70ce:75eb with SMTP id

d75a77b69052e-46c7108f4b5mr5619501cf.45.1736284694999; Tue, 07 Jan 2025

13:18:14 -0800 (PST)

MIME-Version: 1.0

Reply-To: sanourose-kone@att.net

From: "Ms.KONE ROSE SANOU"

Date: Tue, 7 Jan 2025 21:17:17 +0000

X-Gm-Features: AbW1kvYItJuTNj_OFRoA0dja_x-TZQr886O9wOdrBuTmS_GnDyihRzFHJi2AECw

Message-ID:

Subject: Best Regards,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000007979e7062b244839"

Bcc: sales@nk.ca

X-Spam_score: 20.5

X-Spam_score_int: 205

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greeting, My name is Ms. Sanou Rose Kone, I am currently Regional

Audit Manager of United Bank for Africa Burkina Faso. I understand that this

message must seem quite strange but I assure you, if my sources are [...]





Content analysis details: (20.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.196 listed in dnsbl.ahbl.org]

[209.85.160.196 listed in dnsbl.ahbl.org]

[209.85.160.196 listed in dnsbl.ahbl.org]

[209.85.160.196 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.196 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.196 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.196 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.196 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.196 listed in will-spam-for-food.eu.org]

[209.85.160.196 listed in will-spam-for-food.eu.org]

[209.85.160.196 listed in will-spam-for-food.eu.org]

[209.85.160.196 listed in will-spam-for-food.eu.org]

[209.85.160.196 listed in will-spam-for-food.eu.org]

[209.85.160.196 listed in will-spam-for-food.eu.org]

[209.85.160.196 listed in will-spam-for-food.eu.org]

[209.85.160.196 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.196 listed in list.dnswl.org]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.160.196 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.160.196 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.160.196 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.160.196 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.196 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[vicepresident2015raffle01(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[vicepresident2015raffle01(at)gmail.com]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.6 J_CHICKENPOX_71 BODY: 7alpha-pock-1alpha

2.5 MILLION_USD BODY: Talks about millions of dollars

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 T_MONEY_PERCENT X% of a lot of money for you

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

0.0 XFER_LOTSA_MONEY Transfer a lot of money

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

1.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

Subject: {SPAM?} Best Regards,



--0000000000007979e7062b244839

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Greeting,



My name is Ms. Sanou Rose Kone, I am currently Regional Audit Manager of

United Bank for Africa Burkina Faso. I understand that this message must

seem quite strange but I assure you, if my sources are correct, together we

will be able to ensure the success of my proposal.



I got your email address contact details from your country,s guest book

which i got from my late friend archive as a good match for future business

that will make both of us very happy!



Although i am not comfortable to send this proposal to you because of

increase in SCAM and FRAUD especially in Africa, but i am too sure that

this is not Scam because you have access to confirm, and provided you all

the necessary information you need to know, do not let my Bank know the

source of your information. I have pack agenda financial transaction that

will benefit both of us. As the currently Regional Audit Manager of this

bank United Bank for Africa Burkina Faso (UBA), it is my duty to send

financial reports to my head office in the capital city of Ouagadougou,

Burkina Faso. On the course of year 2022/2023 end of the year's report, i

discovered that at my branch in which I am the Audit Manager, discovered

the sum of US$5,000,000,00 (Fve Million United State Dollars. ) without

beneficial and since then had PLACED this fund in an ESCROW CALL ACCOUNT

without a beneficiary. As the regional manager of the bank, I cannot be

directly connected to this money thus, i am impelled to request for your

assistance to receive this money into your bank account.



I intend to part 40% of this fund to you while 60% shall be for me and two

officers who will assist us to move the fund to your account. I do need to

assure you that there is no risk involved in this Business. It=E2=80=99s go=

ing to

be BANK TO BANK TRANSFER Or THROUGH ATM VISA CARD. All I need from you is

to stand as the original depositor of this fund. If you accept this offer,

i will appreciate your timely response and then we shall discuss on how we

move on=E2=80=A6



NB: Your early reply is highly welcomed and attaches your profiles, such as

your name and address, and also your contact telephone number for easy

means of communication.



Best Regards,

Ms. Sanou Rose Kone



--0000000000007979e7062b244839

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Greeting,

My name is Ms. Sanou Rose Kone, =C2=A0I a=

m=C2=A0 currently Regional Audit Manager of United Bank for Africa Burkina =

Faso. I understand that this message must seem quite strange but I assure y=

ou, if my sources are correct, together we will be able to ensure the succe=

ss of my proposal.

I got your email address contact details from you=

r country,s guest book which i got from my late friend archive as a good ma=

tch for future business that will make both of us very happy!

Althou=

gh i am not comfortable to send this proposal to you because of increase in=

SCAM and FRAUD especially in Africa, but i am too sure that this is not Sc=

am because you have access to confirm, and provided you all the necessary i=

nformation you need to know, do not let my Bank know the source of your inf=

ormation. I have pack agenda financial transaction that will benefit both o=

f us. As the currently Regional Audit Manager =C2=A0of this bank United Ban=

k for Africa Burkina Faso (UBA), it is my duty to send financial reports to=

my head office in the capital city of Ouagadougou, Burkina Faso. On the co=

urse of year 2022/2023 end of the year's report, i discovered that at m=

y branch in which I am the Audit Manager, discovered the sum of US$5,000,00=

0,00 (Fve Million United State Dollars. ) =C2=A0without beneficial and sinc=

e then had PLACED this fund in an ESCROW CALL ACCOUNT without a beneficiary=

. As the regional manager of the bank, I cannot be directly connected to th=

is money thus, i am impelled to request for your assistance to receive this=

money into your bank account.

I intend to part 40% of this fund to =

you while 60% shall be for me and two officers who will assist us to move t=

he fund to your account. I do need to assure you that there is no risk invo=

lved in this Business. It=E2=80=99s going to be BANK TO BANK TRANSFER Or TH=

ROUGH ATM VISA CARD. All I need from you is to stand as the original deposi=

tor of this fund. If you accept this offer, i will appreciate your timely r=

esponse and then we shall discuss on how we move on=E2=80=A6

NB: You=

r early reply is highly welcomed and attaches your profiles, such as your n=

ame and address, and also your contact telephone number for easy means of c=

ommunication.

Best Regards,
Ms. Sanou Rose Kone




--0000000000007979e7062b244839--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA 1CAPTCHA 2CAPTCHA 3CAPTCHA 4CAPTCHA 5


Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA 1CAPTCHA 2CAPTCHA 3CAPTCHA 4CAPTCHA 5