Nigerian spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 14 Jan 2024 06:24:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rP0SZ-00000000Bcs-2MN6
for dave@doctor.nl2k.ab.ca;
Sun, 14 Jan 2024 06:23:31 -0700
Resent-From: The Doctor
Resent-Date: Sun, 14 Jan 2024 06:23:31 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f67.google.com ([209.85.218.67]:50417)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rOvgx-000000000OD-2ewo
for doctor@doctor.nl2k.ab.ca;
Sun, 14 Jan 2024 01:18:10 -0700
Received: by mail-ej1-f67.google.com with SMTP id a640c23a62f3a-a2ac304e526so724055966b.0
for; Sun, 14 Jan 2024 00:16:02 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1705220155; x=1705824955; darn=doctor.nl2k.ab.ca;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:from:to:cc:subject:date:message-id:reply-to;
bh=jEREuG07WK2gavTBoGvV4JTY+dK1SimPaHrPVvfKRdk=;
b=EyCiczSA427694bFiTP2sEowYFZei6fnlHAEe6Uld49TMf6oUGRYWImPPuCiC5oveW
g8QsEjAv+wDbyMBtPJ0+fCW6g3Kxop7UK0tL1Chf60vrMj5BjuVzvw4Wlxp1bMib5CwZ
peuD0L2gKHQSl6MDo5r+DZV9Msb7t4+S4cfXY+f9cvQzNhOtzuB9yKj5W6OY/YrCOMXd
y8dDgovhg9iwuFc4hsfTWj7ofEzVWK9QmDbv/cEwDFgIPLs03TpQMEDL5MacWHHTsS2n
O+teVPEzTYTvwAKx00gfBK505O3y/xG05NS6RsbHo9MIdrr43+ZJrrybF6FMOTnlxBv1
tlwQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1705220155; x=1705824955;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=jEREuG07WK2gavTBoGvV4JTY+dK1SimPaHrPVvfKRdk=;
b=dgCFKGnbNOA3LwNiXH/w+lHljNaQ8xMiFHajK/F76tpwXO2own5KxJfclJ5jcviVYt
Zq/batK1CdIaZ6wPyIjqRuL9RLXEd1WbbUcFzSl/o+dqBrz9t4K77WdH1g704/awGOhQ
Dg+9d90XIQeJMUhZ/q0EQ5L+5lWgypYVmw708AuaEKXUc55c8V4raRE4/RHOO/qLsdJM
1AA1+BTeWGEUd61YfpcDbLOhUz0Yvwm+o4oHryz0XK+WQI5qwYJomcaNwBI68gMMJoHP
QOUmTCw365VTdxNUfiShXHWXC/gpL+0mpR7Jbba4ZEIWJhwB55xnmfU8zByAOOR6J6uh
sltQ==
X-Gm-Message-State: AOJu0YzD1hMcpdSoQXzDV0LuEkd0b+OOcEIAuDRgOMpSaZhBT7p51Upc
Tx7wmThjm1xQP05hHPhVIKTvWmSPahuM72CG8EQ=
X-Google-Smtp-Source: AGHT+IFfaCc0zomVsX8/jShieTtPFhPLsolfDIIVjy7LGpUSeiYGL5VHl6Jf7UFuPVn1ax8ydN5VGiFBf6cTw5Zr1hA=
X-Received: by 2002:a17:907:160d:b0:a2d:9a0b:b4a1 with SMTP id
cw13-20020a170907160d00b00a2d9a0bb4a1mr185179ejd.106.1705220155204; Sun, 14
Jan 2024 00:15:55 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a05:7208:c325:b0:7c:54b7:2ad4 with HTTP; Sun, 14 Jan 2024
00:15:54 -0800 (PST)
Reply-To: sanourose-kone@att.net
From: SANOU ROSE KONE
Date: Sun, 14 Jan 2024 09:15:54 +0100
Message-ID:
Subject: Best Regards,
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 7.2
X-Spam_score_int: 72
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, I got your email address contact details through online
searching as a good match for future business that will make both of us very
happy! Allow me to introduce myself properly, my name is Ms.KONE ROSE SANOU,
I am currently Regional Audit Manager of United Bank for Africa Burkina Faso.
I understand that this message must seem quite stran [...]
Content analysis details: (7.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.218.67 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.67 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[westerunioncustomercarecenter(at)gmail.com]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.6 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 FILL_THIS_FORM Fill in a form with personal information
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
1.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
Subject: {SPAM?} Best Regards,
Hello,
I got your email address contact details through online searching as a
good match for future business that will make both of us very happy!
Allow me to introduce myself properly, my name is Ms.KONE ROSE SANOU,
I am currently Regional Audit Manager of United Bank for Africa
Burkina Faso. I understand that this message must seem quite strange
but I assure you, if my sources are correct, together we will be able
to ensure the success of my proposal.
As the Regional Audit Manager, it is part of my job to send financial
reports to my head office Ouagadougou, Burkina Faso, over the course
of year 2021 =E2=80=93 2022 when I was looking at the years fiscal report=
=E2=80=99s
and I discovered that the branch that I am Regional Audit Manager has
funds that are not accounted for according to my head office. I have
taken certain steps to make sure that these funds will also go
undetected on all accounts. I have set this up so it will be risk free
and like I said, if my sources are correct about you, everything will
go perfectly.
Currently the funds are in =E2=80=9Cescrow account=E2=80=9D without a benef=
iciary;
account is waiting for me to add a beneficiary to the account to allow
the funds to be transferred as soon as our =E2=80=9Cwork=E2=80=9D is comple=
te!
As I am sure you are aware, I cannot be seen to be connected directly
to these funds, that would cause too many issues and risks for me,
hence why I am contacting you. As long as I have you a second party
(you) that I would be able to add as a beneficiary, we have open and
clear communication together, both of us will be able to walk away
more than happy and both with a new friend for life, I am sure!
I have got several other contacts but am not too satisfied with their
conditions that's why making me contacted you if you we be interested.
So a quick response would be in your best interest if you would like
to proceed and receive further details.
=3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=
=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =
=3D=3D =3D=3D
=3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D
If you are interested to hear more details, please fill in the
information below:
First Name
Last Name
Phone Number
Email
Country
I appreciate your timely response and I look forward to being in
further contact with you along our venture.
Have a great day!
Best Regards,
Ms.KONE ROSE SANOU
I1.18KL0LD35.4KI2.16KwhoissourceRank10.8MPIN0Summary reportDiagnosisDensity00n/a
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 14 Jan 2024 06:24:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rP0SZ-00000000Bcs-2MN6
for dave@doctor.nl2k.ab.ca;
Sun, 14 Jan 2024 06:23:31 -0700
Resent-From: The Doctor
Resent-Date: Sun, 14 Jan 2024 06:23:31 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f67.google.com ([209.85.218.67]:50417)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rOvgx-000000000OD-2ewo
for doctor@doctor.nl2k.ab.ca;
Sun, 14 Jan 2024 01:18:10 -0700
Received: by mail-ej1-f67.google.com with SMTP id a640c23a62f3a-a2ac304e526so724055966b.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1705220155; x=1705824955; darn=doctor.nl2k.ab.ca;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:from:to:cc:subject:date:message-id:reply-to;
bh=jEREuG07WK2gavTBoGvV4JTY+dK1SimPaHrPVvfKRdk=;
b=EyCiczSA427694bFiTP2sEowYFZei6fnlHAEe6Uld49TMf6oUGRYWImPPuCiC5oveW
g8QsEjAv+wDbyMBtPJ0+fCW6g3Kxop7UK0tL1Chf60vrMj5BjuVzvw4Wlxp1bMib5CwZ
peuD0L2gKHQSl6MDo5r+DZV9Msb7t4+S4cfXY+f9cvQzNhOtzuB9yKj5W6OY/YrCOMXd
y8dDgovhg9iwuFc4hsfTWj7ofEzVWK9QmDbv/cEwDFgIPLs03TpQMEDL5MacWHHTsS2n
O+teVPEzTYTvwAKx00gfBK505O3y/xG05NS6RsbHo9MIdrr43+ZJrrybF6FMOTnlxBv1
tlwQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1705220155; x=1705824955;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=jEREuG07WK2gavTBoGvV4JTY+dK1SimPaHrPVvfKRdk=;
b=dgCFKGnbNOA3LwNiXH/w+lHljNaQ8xMiFHajK/F76tpwXO2own5KxJfclJ5jcviVYt
Zq/batK1CdIaZ6wPyIjqRuL9RLXEd1WbbUcFzSl/o+dqBrz9t4K77WdH1g704/awGOhQ
Dg+9d90XIQeJMUhZ/q0EQ5L+5lWgypYVmw708AuaEKXUc55c8V4raRE4/RHOO/qLsdJM
1AA1+BTeWGEUd61YfpcDbLOhUz0Yvwm+o4oHryz0XK+WQI5qwYJomcaNwBI68gMMJoHP
QOUmTCw365VTdxNUfiShXHWXC/gpL+0mpR7Jbba4ZEIWJhwB55xnmfU8zByAOOR6J6uh
sltQ==
X-Gm-Message-State: AOJu0YzD1hMcpdSoQXzDV0LuEkd0b+OOcEIAuDRgOMpSaZhBT7p51Upc
Tx7wmThjm1xQP05hHPhVIKTvWmSPahuM72CG8EQ=
X-Google-Smtp-Source: AGHT+IFfaCc0zomVsX8/jShieTtPFhPLsolfDIIVjy7LGpUSeiYGL5VHl6Jf7UFuPVn1ax8ydN5VGiFBf6cTw5Zr1hA=
X-Received: by 2002:a17:907:160d:b0:a2d:9a0b:b4a1 with SMTP id
cw13-20020a170907160d00b00a2d9a0bb4a1mr185179ejd.106.1705220155204; Sun, 14
Jan 2024 00:15:55 -0800 (PST)
MIME-Version: 1.0
Received: by 2002:a05:7208:c325:b0:7c:54b7:2ad4 with HTTP; Sun, 14 Jan 2024
00:15:54 -0800 (PST)
Reply-To: sanourose-kone@att.net
From: SANOU ROSE KONE
Date: Sun, 14 Jan 2024 09:15:54 +0100
Message-ID:
Subject: Best Regards,
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 7.2
X-Spam_score_int: 72
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, I got your email address contact details through online
searching as a good match for future business that will make both of us very
happy! Allow me to introduce myself properly, my name is Ms.KONE ROSE SANOU,
I am currently Regional Audit Manager of United Bank for Africa Burkina Faso.
I understand that this message must seem quite stran [...]
Content analysis details: (7.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.218.67 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.67 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[westerunioncustomercarecenter(at)gmail.com]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.6 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 FILL_THIS_FORM Fill in a form with personal information
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
1.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
Subject: {SPAM?} Best Regards,
Hello,
I got your email address contact details through online searching as a
good match for future business that will make both of us very happy!
Allow me to introduce myself properly, my name is Ms.KONE ROSE SANOU,
I am currently Regional Audit Manager of United Bank for Africa
Burkina Faso. I understand that this message must seem quite strange
but I assure you, if my sources are correct, together we will be able
to ensure the success of my proposal.
As the Regional Audit Manager, it is part of my job to send financial
reports to my head office Ouagadougou, Burkina Faso, over the course
of year 2021 =E2=80=93 2022 when I was looking at the years fiscal report=
=E2=80=99s
and I discovered that the branch that I am Regional Audit Manager has
funds that are not accounted for according to my head office. I have
taken certain steps to make sure that these funds will also go
undetected on all accounts. I have set this up so it will be risk free
and like I said, if my sources are correct about you, everything will
go perfectly.
Currently the funds are in =E2=80=9Cescrow account=E2=80=9D without a benef=
iciary;
account is waiting for me to add a beneficiary to the account to allow
the funds to be transferred as soon as our =E2=80=9Cwork=E2=80=9D is comple=
te!
As I am sure you are aware, I cannot be seen to be connected directly
to these funds, that would cause too many issues and risks for me,
hence why I am contacting you. As long as I have you a second party
(you) that I would be able to add as a beneficiary, we have open and
clear communication together, both of us will be able to walk away
more than happy and both with a new friend for life, I am sure!
I have got several other contacts but am not too satisfied with their
conditions that's why making me contacted you if you we be interested.
So a quick response would be in your best interest if you would like
to proceed and receive further details.
=3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=
=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =
=3D=3D =3D=3D
=3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D =3D=3D
If you are interested to hear more details, please fill in the
information below:
First Name
Last Name
Phone Number
Country
I appreciate your timely response and I look forward to being in
further contact with you along our venture.
Have a great day!
Best Regards,
Ms.KONE ROSE SANOU
I1.18KL0LD35.4KI2.16KwhoissourceRank10.8MPIN0Summary reportDiagnosisDensity00n/a
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments