Ukrainian moeny scam from gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 17 May 2022 08:40:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1nqyMK-0009gk-MA
for dave@doctor.nl2k.ab.ca;
Tue, 17 May 2022 08:39:36 -0600
Resent-From: The Doctor
Resent-Date: Tue, 17 May 2022 08:39:36 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f193.google.com ([209.85.214.193]:45930)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1nqxg7-0006Py-Ef
for doctor@nl2k.ab.ca;
Tue, 17 May 2022 07:56:03 -0600
Received: by mail-pl1-f193.google.com with SMTP id q18so17377861pln.12
for; Tue, 17 May 2022 06:55:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to
:content-transfer-encoding;
bh=Vp6ad3ipIO480wv5V9N3yuR3QGpSlcdLUjP2rzSiDVU=;
b=V9tVSKWH2VhwS9N7scwlCT4ldzS2EVluUYqpX0wObpoUapakh8qZZdiy6yQ0FPwdsa
SjU3nZNU95W7mPbctdTgn798ExJBO4WNfl2jQiDsXctWbUA2vYQU3/O8eXC7YPHZgZPe
SQCw4dMn9ItHXZW8iYk4qoJoVEelJJhL6N5+0Fzc7jy7PIk/ynqXH1YbFWvyMIxPrz0L
cMy1oxfA+vlUWGyIRp7WsLkT/52yDpz41bWmzHNyboTj64S4ua2IyvxlysBtOjLxMvPI
dLrRRjRS8LX1p26fxq7KElBo6or/IcB+5PWn9fhm++S0mYe0wdPkvl1H+7j+H15M17GW
wCiw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to:content-transfer-encoding;
bh=Vp6ad3ipIO480wv5V9N3yuR3QGpSlcdLUjP2rzSiDVU=;
b=7Pn+q6mbd4yNkfNX6Em7ZpIxo+g6s2orooaQC/aagtmyAQtEdNmGRaMl+XVF5bkozT
qLxAN/vWmnrESRJtDPXQBtwu0feDK5KbKcTqKauo1q5F+XrP0DfwVZXr5WfP/hphwGxg
0bSA6b3t6xjBre8xF27Ct/G/LN6rZ7uMwhxVpINBw2PDlGQNjIB+vdQUhzQ/VwtEtHk1
XuADQ6is26W/8ZIcLkSdNLAMhWR84HiaWq2WaEZR/tjV0PWK6RDwwVEwQdaWcr4VFzY3
mbTGqVLo/tvX3DeNcJNyeG5063SkvwxE717LWAJs6buiHSWKIZxHYdtLlMA0jwp1e4aa
1nVg==
X-Gm-Message-State: AOAM530Sm+u9eMdRC4eDDmAAzihVRR4CjKmx3WCeDgvTOliFj2+kEa/x
vjskLst6WscI21aRJk1qx1sx86skoW8X9XsOv1Q=
X-Google-Smtp-Source: ABdhPJwoX19lOOxH51gm5xBVpKwuqgtTmho91iCb9F71YwKr5xcMCYOYrZIkghNgIZaobLBx4dqBXtds+3ej8YIC+ec=
X-Received: by 2002:a17:90a:4d49:b0:1df:78ca:ae49 with SMTP id
l9-20020a17090a4d4900b001df78caae49mr6233253pjh.121.1652795736572; Tue, 17
May 2022 06:55:36 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:7022:911:b0:3e:56c5:c88f with HTTP; Tue, 17 May 2022
06:55:35 -0700 (PDT)
Reply-To: hon.oleksiy@hotmail.com
From: "Hon. Oleksiy Honcharuk"
Date: Tue, 17 May 2022 14:55:35 +0100
Message-ID:
Subject: Ukraine Prime Minister (Rtd), Urgent Help.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 8.0
X-Spam_score_int: 80
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Ukraine Prime Minister (Rtd) Hello Friend, COMPLEMENT OF
THE SEASON! We understands coronavirus as called “COVID-19 pandemicâ€
has caused heavy obstruction and deserter outbreak globally, but the living
once shall continue their lifespan.
Content analysis details: (8.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.214.193 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[chidigahna[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.0 T_SCC_BODY_TEXT_LINE No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Ukraine Prime Minister (Rtd), Urgent Help.
--=20
Ukraine Prime Minister (Rtd)
Hello Friend,
COMPLEMENT OF THE SEASON!
We understands coronavirus as called =E2=80=9CCOVID-19 pandemic=E2=80=9D ha=
s caused
heavy obstruction and deserter outbreak globally, but the living once
shall continue their lifespan.
However, I beseech you with love, how are you? I know that this
message might come to you as a surprise for the fact we didn=E2=80=99t know
each other before, but am open with positive mind. Please before I
proceed with the topic of my message, I will not fail to ask about the
modification of your health which is momentous in human dignity,
nevertheless; I strongly believed you are doing fine by the grace of
God.
Straight to my Topic:
I am the =E2=80=9Cformal=E2=80=9D Ukraine Prime Minister who resigned peace=
fully due
to the political issues in my country (Ukraine). As a matter of fact,
I tendered my resignation letter then and strictly resigned.
But my major reason contacting you now is; there is certain sum of
money i moved to a bank security vault outside Ukraine, as a result of
the on-going war between my country, Ukraine and Russia; so can you
please help me to go and receive it from the security company for
proper self-keeping in your country until we see what this war will
end with?
Please this is very confidential as I will put you more through on
your positive reply.
Yours faithfully,
Hon. Oleksiy Honcharuk
Ukraine Prime Minister (Rtd)
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 17 May 2022 08:40:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1nqyMK-0009gk-MA
for dave@doctor.nl2k.ab.ca;
Tue, 17 May 2022 08:39:36 -0600
Resent-From: The Doctor
Resent-Date: Tue, 17 May 2022 08:39:36 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f193.google.com ([209.85.214.193]:45930)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1nqxg7-0006Py-Ef
for doctor@nl2k.ab.ca;
Tue, 17 May 2022 07:56:03 -0600
Received: by mail-pl1-f193.google.com with SMTP id q18so17377861pln.12
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to
:content-transfer-encoding;
bh=Vp6ad3ipIO480wv5V9N3yuR3QGpSlcdLUjP2rzSiDVU=;
b=V9tVSKWH2VhwS9N7scwlCT4ldzS2EVluUYqpX0wObpoUapakh8qZZdiy6yQ0FPwdsa
SjU3nZNU95W7mPbctdTgn798ExJBO4WNfl2jQiDsXctWbUA2vYQU3/O8eXC7YPHZgZPe
SQCw4dMn9ItHXZW8iYk4qoJoVEelJJhL6N5+0Fzc7jy7PIk/ynqXH1YbFWvyMIxPrz0L
cMy1oxfA+vlUWGyIRp7WsLkT/52yDpz41bWmzHNyboTj64S4ua2IyvxlysBtOjLxMvPI
dLrRRjRS8LX1p26fxq7KElBo6or/IcB+5PWn9fhm++S0mYe0wdPkvl1H+7j+H15M17GW
wCiw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to:content-transfer-encoding;
bh=Vp6ad3ipIO480wv5V9N3yuR3QGpSlcdLUjP2rzSiDVU=;
b=7Pn+q6mbd4yNkfNX6Em7ZpIxo+g6s2orooaQC/aagtmyAQtEdNmGRaMl+XVF5bkozT
qLxAN/vWmnrESRJtDPXQBtwu0feDK5KbKcTqKauo1q5F+XrP0DfwVZXr5WfP/hphwGxg
0bSA6b3t6xjBre8xF27Ct/G/LN6rZ7uMwhxVpINBw2PDlGQNjIB+vdQUhzQ/VwtEtHk1
XuADQ6is26W/8ZIcLkSdNLAMhWR84HiaWq2WaEZR/tjV0PWK6RDwwVEwQdaWcr4VFzY3
mbTGqVLo/tvX3DeNcJNyeG5063SkvwxE717LWAJs6buiHSWKIZxHYdtLlMA0jwp1e4aa
1nVg==
X-Gm-Message-State: AOAM530Sm+u9eMdRC4eDDmAAzihVRR4CjKmx3WCeDgvTOliFj2+kEa/x
vjskLst6WscI21aRJk1qx1sx86skoW8X9XsOv1Q=
X-Google-Smtp-Source: ABdhPJwoX19lOOxH51gm5xBVpKwuqgtTmho91iCb9F71YwKr5xcMCYOYrZIkghNgIZaobLBx4dqBXtds+3ej8YIC+ec=
X-Received: by 2002:a17:90a:4d49:b0:1df:78ca:ae49 with SMTP id
l9-20020a17090a4d4900b001df78caae49mr6233253pjh.121.1652795736572; Tue, 17
May 2022 06:55:36 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:7022:911:b0:3e:56c5:c88f with HTTP; Tue, 17 May 2022
06:55:35 -0700 (PDT)
Reply-To: hon.oleksiy@hotmail.com
From: "Hon. Oleksiy Honcharuk"
Date: Tue, 17 May 2022 14:55:35 +0100
Message-ID:
Subject: Ukraine Prime Minister (Rtd), Urgent Help.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 8.0
X-Spam_score_int: 80
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Ukraine Prime Minister (Rtd) Hello Friend, COMPLEMENT OF
THE SEASON! We understands coronavirus as called “COVID-19 pandemicâ€
has caused heavy obstruction and deserter outbreak globally, but the living
once shall continue their lifespan.
Content analysis details: (8.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.214.193 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[chidigahna[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.0 T_SCC_BODY_TEXT_LINE No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Ukraine Prime Minister (Rtd), Urgent Help.
--=20
Ukraine Prime Minister (Rtd)
Hello Friend,
COMPLEMENT OF THE SEASON!
We understands coronavirus as called =E2=80=9CCOVID-19 pandemic=E2=80=9D ha=
s caused
heavy obstruction and deserter outbreak globally, but the living once
shall continue their lifespan.
However, I beseech you with love, how are you? I know that this
message might come to you as a surprise for the fact we didn=E2=80=99t know
each other before, but am open with positive mind. Please before I
proceed with the topic of my message, I will not fail to ask about the
modification of your health which is momentous in human dignity,
nevertheless; I strongly believed you are doing fine by the grace of
God.
Straight to my Topic:
I am the =E2=80=9Cformal=E2=80=9D Ukraine Prime Minister who resigned peace=
fully due
to the political issues in my country (Ukraine). As a matter of fact,
I tendered my resignation letter then and strictly resigned.
But my major reason contacting you now is; there is certain sum of
money i moved to a bank security vault outside Ukraine, as a result of
the on-going war between my country, Ukraine and Russia; so can you
please help me to go and receive it from the security company for
proper self-keeping in your country until we see what this war will
end with?
Please this is very confidential as I will put you more through on
your positive reply.
Yours faithfully,
Hon. Oleksiy Honcharuk
Ukraine Prime Minister (Rtd)
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments