Nigerian Gmail spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 10 Oct 2022 17:08:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oi1sG-000JKo-5y
for dave@doctor.nl2k.ab.ca;
Mon, 10 Oct 2022 17:07:52 -0600
Resent-From: The Doctor
Resent-Date: Mon, 10 Oct 2022 17:07:52 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs1-f41.google.com ([209.85.217.41]:37634)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oi18P-000Fgk-C4
for doctor@doctor.nl2k.ab.ca;
Mon, 10 Oct 2022 16:20:33 -0600
Received: by mail-vs1-f41.google.com with SMTP id h3so4742359vsa.4
for; Mon, 10 Oct 2022 15:19:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=UI6V8/65bZXQXB0JFk2sCMIfCXxzRdnj74W/TwI7Dkw=;
b=hLGheF8h9wtBPGwBvfUoXBHHQJpqbR23cSBWaAn8lYOrdkG20NHlqAiXjv+5nvcE98
+Zgu5GgwNg7g9b0mNyIVmkVBK92KLghDtmkW5mhU/JOvcskdUb4XEpDdciDpx6d8/C8X
urQ88bTs5b5MbTSrU6xZwpjXSQKc1rTr6KTwopGto/sxpnWWwcm+rVXzA64kUc8MzHNf
WyTgVR0nCEHt7hPIhiOTCtv5Y0MaR+JxP0SUzDaFnacaA1k+rs5UxK7wvFWo3JBDHGAx
OfKIIFrtgx94NGiR7IHrBB9KRMewc0YxHd3j7gEOSAhwST6EnvVZX8Masmt8o6vfCwcM
pn6A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=UI6V8/65bZXQXB0JFk2sCMIfCXxzRdnj74W/TwI7Dkw=;
b=EDH3MsYJVlrcaQrLW4zd/P31hT4CRAkhGrtArCc8jO429jUvdnugpQHDMl9MOCl2T9
ujt3A+05k7nmcA6EMznF0UeAYc8N8Kt6I0wgFMetLz+bFtWO28zUz0iZynTcl+JGx8p1
LpkAPmWLo/6jYwJ6JzkPbhbEW7ovFb9CkYQuBjH0jr9rq8DbfGY5lwYThzalo9uQW6wQ
WQkjEGTCPj7qWHo6k9E64oX2K/n83weci6V/z/JISalL917v0+gtUjYRhYSbkMxMfUbh
xv6FjbXyoMIniHSZz6ZdgCwxklIKwhkr1FbMkitoBXamfwSpH+H403v4syYTB8aPLUzj
1qHQ==
X-Gm-Message-State: ACrzQf0X4bekq4bzPeIxFTGDUqgWon3XTOITi67oCec0SgY16C5JrHI5
Kk/OXceHu/7PBmucYxhbukVkuRAA+qvy6jz4++o=
X-Google-Smtp-Source: AMsMyM6I8NE4S9wL/+snRWYqFX7xm7wJQQJWMCHNcNcTjpUxyKjyPTTLqdCL1AaJTUC4IfkxJJQAF9ksqBkgiwp3RlQ=
X-Received: by 2002:a05:6102:3fac:b0:39a:bf0a:7275 with SMTP id
o44-20020a0561023fac00b0039abf0a7275mr10247243vsv.24.1665440370231; Mon, 10
Oct 2022 15:19:30 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:612c:2704:b0:308:2324:427e with HTTP; Mon, 10 Oct 2022
15:19:29 -0700 (PDT)
Reply-To: danielkando15@gmail.com
From: "Mr. Daniel Kafando"
Date: Mon, 10 Oct 2022 22:19:29 +0000
Message-ID:
Subject: Am expecting your response
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 11.2
X-Spam_score_int: 112
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: ear Friend, My name is Mr.Daniel Kafando, I work for a zoological
company here in Burkina Faso My company is in need of a product herbal supplement
oil a raw material which has been found in Kenya rec [...]
Content analysis details: (11.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[danielkando15[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.217.41 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[agricultuaproduct[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Am expecting your response
ear Friend, My name is Mr.Daniel Kafando, I work for a zoological
company here in Burkina Faso My company is in need of a product herbal
supplement oil a raw material which has been found in Kenya recently.
While our company ran out of stock of this product which we have been
using for the production of animal injections and vaccines and also
for research since 2005.
The purchasing manager was the head of my department and my direct
boss before he quit. Our company is currently buying this product at
the rate of $65,000 USD per lite, and since the resignation of my boss
I have been named the interim purchasing manager. As at this moment, I
only have the contact address of this Local Vendor in Kenya from the
file of my former boss and I found out that this same material is sold
by the manufacturer at the rate USD $30,000 per liter to our former
company purchasing manager and I do not wish to let anyone in our
company know about this because of my interest in the business. I
intend to present you as a supplier who will be a middleman between
our company boss and the local vendor in Kenya, so that my company
will not know the main-source of the material, while I will forward to
you the contact of the local dealer in Kenya So that you can negotiate
with them and sell to my company at a rate of $65,000.00 per liter.
If you are interested I will forward the details on what to do and the
contact of my director so that you can contact him for negotiation.
All profits accrued would be shared between you and me.This would be a
long term business relationship between you and our company. Upon your
response I will send the procedures and all relevant information
needed for this business.
Yours truly,
Mr.Daniel Kafando.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 10 Oct 2022 17:08:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oi1sG-000JKo-5y
for dave@doctor.nl2k.ab.ca;
Mon, 10 Oct 2022 17:07:52 -0600
Resent-From: The Doctor
Resent-Date: Mon, 10 Oct 2022 17:07:52 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs1-f41.google.com ([209.85.217.41]:37634)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oi18P-000Fgk-C4
for doctor@doctor.nl2k.ab.ca;
Mon, 10 Oct 2022 16:20:33 -0600
Received: by mail-vs1-f41.google.com with SMTP id h3so4742359vsa.4
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=UI6V8/65bZXQXB0JFk2sCMIfCXxzRdnj74W/TwI7Dkw=;
b=hLGheF8h9wtBPGwBvfUoXBHHQJpqbR23cSBWaAn8lYOrdkG20NHlqAiXjv+5nvcE98
+Zgu5GgwNg7g9b0mNyIVmkVBK92KLghDtmkW5mhU/JOvcskdUb4XEpDdciDpx6d8/C8X
urQ88bTs5b5MbTSrU6xZwpjXSQKc1rTr6KTwopGto/sxpnWWwcm+rVXzA64kUc8MzHNf
WyTgVR0nCEHt7hPIhiOTCtv5Y0MaR+JxP0SUzDaFnacaA1k+rs5UxK7wvFWo3JBDHGAx
OfKIIFrtgx94NGiR7IHrBB9KRMewc0YxHd3j7gEOSAhwST6EnvVZX8Masmt8o6vfCwcM
pn6A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=UI6V8/65bZXQXB0JFk2sCMIfCXxzRdnj74W/TwI7Dkw=;
b=EDH3MsYJVlrcaQrLW4zd/P31hT4CRAkhGrtArCc8jO429jUvdnugpQHDMl9MOCl2T9
ujt3A+05k7nmcA6EMznF0UeAYc8N8Kt6I0wgFMetLz+bFtWO28zUz0iZynTcl+JGx8p1
LpkAPmWLo/6jYwJ6JzkPbhbEW7ovFb9CkYQuBjH0jr9rq8DbfGY5lwYThzalo9uQW6wQ
WQkjEGTCPj7qWHo6k9E64oX2K/n83weci6V/z/JISalL917v0+gtUjYRhYSbkMxMfUbh
xv6FjbXyoMIniHSZz6ZdgCwxklIKwhkr1FbMkitoBXamfwSpH+H403v4syYTB8aPLUzj
1qHQ==
X-Gm-Message-State: ACrzQf0X4bekq4bzPeIxFTGDUqgWon3XTOITi67oCec0SgY16C5JrHI5
Kk/OXceHu/7PBmucYxhbukVkuRAA+qvy6jz4++o=
X-Google-Smtp-Source: AMsMyM6I8NE4S9wL/+snRWYqFX7xm7wJQQJWMCHNcNcTjpUxyKjyPTTLqdCL1AaJTUC4IfkxJJQAF9ksqBkgiwp3RlQ=
X-Received: by 2002:a05:6102:3fac:b0:39a:bf0a:7275 with SMTP id
o44-20020a0561023fac00b0039abf0a7275mr10247243vsv.24.1665440370231; Mon, 10
Oct 2022 15:19:30 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:612c:2704:b0:308:2324:427e with HTTP; Mon, 10 Oct 2022
15:19:29 -0700 (PDT)
Reply-To: danielkando15@gmail.com
From: "Mr. Daniel Kafando"
Date: Mon, 10 Oct 2022 22:19:29 +0000
Message-ID:
Subject: Am expecting your response
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 11.2
X-Spam_score_int: 112
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: ear Friend, My name is Mr.Daniel Kafando, I work for a zoological
company here in Burkina Faso My company is in need of a product herbal supplement
oil a raw material which has been found in Kenya rec [...]
Content analysis details: (11.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[danielkando15[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.217.41 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[agricultuaproduct[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Am expecting your response
ear Friend, My name is Mr.Daniel Kafando, I work for a zoological
company here in Burkina Faso My company is in need of a product herbal
supplement oil a raw material which has been found in Kenya recently.
While our company ran out of stock of this product which we have been
using for the production of animal injections and vaccines and also
for research since 2005.
The purchasing manager was the head of my department and my direct
boss before he quit. Our company is currently buying this product at
the rate of $65,000 USD per lite, and since the resignation of my boss
I have been named the interim purchasing manager. As at this moment, I
only have the contact address of this Local Vendor in Kenya from the
file of my former boss and I found out that this same material is sold
by the manufacturer at the rate USD $30,000 per liter to our former
company purchasing manager and I do not wish to let anyone in our
company know about this because of my interest in the business. I
intend to present you as a supplier who will be a middleman between
our company boss and the local vendor in Kenya, so that my company
will not know the main-source of the material, while I will forward to
you the contact of the local dealer in Kenya So that you can negotiate
with them and sell to my company at a rate of $65,000.00 per liter.
If you are interested I will forward the details on what to do and the
contact of my director so that you can contact him for negotiation.
All profits accrued would be shared between you and me.This would be a
long term business relationship between you and our company. Upon your
response I will send the procedures and all relevant information
needed for this business.
Yours truly,
Mr.Daniel Kafando.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments