Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 02 Oct 2022 15:37:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1of6dQ-000IOP-Gk
for dave@doctor.nl2k.ab.ca;
Sun, 02 Oct 2022 15:36:28 -0600
Resent-From: The Doctor
Resent-Date: Sun, 2 Oct 2022 15:36:28 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oi1-f169.google.com ([209.85.167.169]:37477)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1of2An-000NJx-5W
for doctor@doctor.nl2k.ab.ca;
Sun, 02 Oct 2022 10:50:41 -0600
Received: by mail-oi1-f169.google.com with SMTP id s125so9482857oie.4
for; Sun, 02 Oct 2022 09:50:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=5pl26cWOw2llZ7CcPQB3dtUG9Hg+TSbWjJxq5Urv26k=;
b=YNMwowwAPI9S417jlKo3p2dBUoVGpYO3NxAGdtnsJibMbEUqIpRjT04lzEHwcAwifH
7WgviydVbiKqHtKsKpLLe1VKHnQY0JRda6Bc8VppSPtjaKCoCezhVn2JOneiaiXdq69O
wAp/cWHBe10MC5AJb0VdS1aj22ikgJ8wu0rDtQ9jG6EyGAMzUWZy4HnyF5APtS+K1lAv
l1xvlcgJgTo6hKXRdz3qTdAi3gwP3TOVwRDo/KL23yXwTHcbzwxiyB/h6VvLUpNwJl5k
cQV4ixVmTzEsL7Xs8BG+5OZxx0JWjetBPe0y9TTHXbGb/CMw0Hz+BHIupPEa5m/ABrFU
LCdw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=5pl26cWOw2llZ7CcPQB3dtUG9Hg+TSbWjJxq5Urv26k=;
b=T029xPc7gaWJ6fegCk6PBRRVbpTuJeELxukgJYBZ8zPzL7+pu/ML3LsQiDK/Qmzu4d
y24zPcFZfSDAZIfGUCPno5WL8asXiw0fijGjbHQFCRBSNfLAs2fwJ1QK7zoPnKxSDvgo
6tqjlvT9FD8BTgVzzjzsjcmTe2O+Ncl5Tlb82eMXaQ1IQWDgdYBn8sg/13E1wDAyKg/X
JNqfqROz5Hi8stoP9hHIW4wwETT7m1kAeRB7oQkWNkdVIlygtcdT7vrDgULoHLnxv2t2
MzCPiSLt7mDibK6woc4auwH29zg7D/2/Ub7+pXcMXMmwKvVzRAWV31N0tWJVKbJC782C
zN0g==
X-Gm-Message-State: ACrzQf2jAyrZudeG/NS0fxCJAhcybb2Tvx5+2W0o29cQIXIYWTvehAWF
cbJoiYbHNv/aANST4xpggUG2slpoiIvfGz/ADmE=
X-Google-Smtp-Source: AMsMyM7CjnhZmkmQ1ie4z2oQmIhWBPxQpnAgSTObOv5pJvr1IRRCdiM7lO4iaqibhzmM3O62tXGdsKEd7sV0mJjpSOs=
X-Received: by 2002:a05:6808:13d6:b0:350:aae9:3b8 with SMTP id
d22-20020a05680813d600b00350aae903b8mr2860153oiw.176.1664729414233; Sun, 02
Oct 2022 09:50:14 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6838:6146:0:0:0:0 with HTTP; Sun, 2 Oct 2022 09:50:13
-0700 (PDT)
Reply-To: danielkando15@gmail.com
From: "Mr. Daniel Kafando"
Date: Sun, 2 Oct 2022 16:50:13 +0000
Message-ID:
Subject: Am expecting your response
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 11.2
X-Spam_score_int: 112
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: My name is Mr.Daniel Kafando, I work for a zoological company
here in Burkina Faso My company is in need of a product herbal supplement
oil a raw material which has been found in Kenya recently. While [...]
Content analysis details: (11.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[danielkando15[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.169 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[kafandoanu[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Am expecting your response
My name is Mr.Daniel Kafando, I work for a zoological company here in
Burkina Faso My company is in need of a product herbal supplement oil
a raw material which has been found in Kenya recently. While our
company ran out of stock of this product which we have been using for
the production of animal injections and vaccines and also for research
since 2005.
The purchasing manager was the head of my department and my direct
boss before he quit. Our company is currently buying this product at
the rate of $65,000 USD per lite, and since the resignation of my boss
I have been named the interim purchasing manager. As at this moment, I
only have the contact address of this Local Vendor in Kenya from the
file of my former boss and I found out that this same material is sold
by the manufacturer at the rate USD $30,000 per liter to our former
company purchasing manager and I do not wish to let anyone in our
company know about this because of my interest in the business. I
intend to present you as a supplier who will be a middleman between
our company boss and the local vendor in Kenya, so that my company
will not know the main-source of the material, while I will forward to
you the contact of the local dealer in Kenya So that you can negotiate
with them and sell to my company at a rate of $65,000.00 per liter.
If you are interested I will forward the details on what to do and the
contact of my director so that you can contact him for negotiation.
All profits accrued would be shared between you and me.This would be a
long term business relationship between you and our company. Upon your
response I will send the procedures and all relevant information
needed for this business.
Yours truly,
Mr.Daniel Kafando.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 02 Oct 2022 15:37:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1of6dQ-000IOP-Gk
for dave@doctor.nl2k.ab.ca;
Sun, 02 Oct 2022 15:36:28 -0600
Resent-From: The Doctor
Resent-Date: Sun, 2 Oct 2022 15:36:28 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oi1-f169.google.com ([209.85.167.169]:37477)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1of2An-000NJx-5W
for doctor@doctor.nl2k.ab.ca;
Sun, 02 Oct 2022 10:50:41 -0600
Received: by mail-oi1-f169.google.com with SMTP id s125so9482857oie.4
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=5pl26cWOw2llZ7CcPQB3dtUG9Hg+TSbWjJxq5Urv26k=;
b=YNMwowwAPI9S417jlKo3p2dBUoVGpYO3NxAGdtnsJibMbEUqIpRjT04lzEHwcAwifH
7WgviydVbiKqHtKsKpLLe1VKHnQY0JRda6Bc8VppSPtjaKCoCezhVn2JOneiaiXdq69O
wAp/cWHBe10MC5AJb0VdS1aj22ikgJ8wu0rDtQ9jG6EyGAMzUWZy4HnyF5APtS+K1lAv
l1xvlcgJgTo6hKXRdz3qTdAi3gwP3TOVwRDo/KL23yXwTHcbzwxiyB/h6VvLUpNwJl5k
cQV4ixVmTzEsL7Xs8BG+5OZxx0JWjetBPe0y9TTHXbGb/CMw0Hz+BHIupPEa5m/ABrFU
LCdw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=5pl26cWOw2llZ7CcPQB3dtUG9Hg+TSbWjJxq5Urv26k=;
b=T029xPc7gaWJ6fegCk6PBRRVbpTuJeELxukgJYBZ8zPzL7+pu/ML3LsQiDK/Qmzu4d
y24zPcFZfSDAZIfGUCPno5WL8asXiw0fijGjbHQFCRBSNfLAs2fwJ1QK7zoPnKxSDvgo
6tqjlvT9FD8BTgVzzjzsjcmTe2O+Ncl5Tlb82eMXaQ1IQWDgdYBn8sg/13E1wDAyKg/X
JNqfqROz5Hi8stoP9hHIW4wwETT7m1kAeRB7oQkWNkdVIlygtcdT7vrDgULoHLnxv2t2
MzCPiSLt7mDibK6woc4auwH29zg7D/2/Ub7+pXcMXMmwKvVzRAWV31N0tWJVKbJC782C
zN0g==
X-Gm-Message-State: ACrzQf2jAyrZudeG/NS0fxCJAhcybb2Tvx5+2W0o29cQIXIYWTvehAWF
cbJoiYbHNv/aANST4xpggUG2slpoiIvfGz/ADmE=
X-Google-Smtp-Source: AMsMyM7CjnhZmkmQ1ie4z2oQmIhWBPxQpnAgSTObOv5pJvr1IRRCdiM7lO4iaqibhzmM3O62tXGdsKEd7sV0mJjpSOs=
X-Received: by 2002:a05:6808:13d6:b0:350:aae9:3b8 with SMTP id
d22-20020a05680813d600b00350aae903b8mr2860153oiw.176.1664729414233; Sun, 02
Oct 2022 09:50:14 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6838:6146:0:0:0:0 with HTTP; Sun, 2 Oct 2022 09:50:13
-0700 (PDT)
Reply-To: danielkando15@gmail.com
From: "Mr. Daniel Kafando"
Date: Sun, 2 Oct 2022 16:50:13 +0000
Message-ID:
Subject: Am expecting your response
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 11.2
X-Spam_score_int: 112
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: My name is Mr.Daniel Kafando, I work for a zoological company
here in Burkina Faso My company is in need of a product herbal supplement
oil a raw material which has been found in Kenya recently. While [...]
Content analysis details: (11.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[danielkando15[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.167.169 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[kafandoanu[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Am expecting your response
My name is Mr.Daniel Kafando, I work for a zoological company here in
Burkina Faso My company is in need of a product herbal supplement oil
a raw material which has been found in Kenya recently. While our
company ran out of stock of this product which we have been using for
the production of animal injections and vaccines and also for research
since 2005.
The purchasing manager was the head of my department and my direct
boss before he quit. Our company is currently buying this product at
the rate of $65,000 USD per lite, and since the resignation of my boss
I have been named the interim purchasing manager. As at this moment, I
only have the contact address of this Local Vendor in Kenya from the
file of my former boss and I found out that this same material is sold
by the manufacturer at the rate USD $30,000 per liter to our former
company purchasing manager and I do not wish to let anyone in our
company know about this because of my interest in the business. I
intend to present you as a supplier who will be a middleman between
our company boss and the local vendor in Kenya, so that my company
will not know the main-source of the material, while I will forward to
you the contact of the local dealer in Kenya So that you can negotiate
with them and sell to my company at a rate of $65,000.00 per liter.
If you are interested I will forward the details on what to do and the
contact of my director so that you can contact him for negotiation.
All profits accrued would be shared between you and me.This would be a
long term business relationship between you and our company. Upon your
response I will send the procedures and all relevant information
needed for this business.
Yours truly,
Mr.Daniel Kafando.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments