Ukrainain based nigerian spam from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 26 Jul 2022 07:38:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oGKkP-000JgS-Qp
for dave@doctor.nl2k.ab.ca;
Tue, 26 Jul 2022 07:37:17 -0600
Resent-From: The Doctor
Resent-Date: Tue, 26 Jul 2022 07:37:17 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ot1-f52.google.com ([209.85.210.52]:36508)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oGJKI-00033Y-8d
for root@nl2k.ab.ca;
Tue, 26 Jul 2022 06:06:19 -0600
Received: by mail-ot1-f52.google.com with SMTP id a14-20020a0568300b8e00b0061c4e3eb52aso10644187otv.3
for; Tue, 26 Jul 2022 05:05:57 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:mime-version:from:to:cc;
bh=/A+3neOCfD0oGm4GaBsBnoWAgJOq126IAqrHHeRH0Ps=;
b=PdU34UVvKVg/Zld9IQHpZsqpRLCXvx+EbZaDMgO1jmcjlX71rn9UZ8Vk+3dCJqwAGq
ESED94c+icPCaWpXHXBC7GGXd0MgDBCGG0z0bxJxgWgUeElnRc6G5n5qx7FWOVH5qEKg
EMUEZy++JaBRUmQL2kcTdPkJbI2IrEqjLbRFpoLWSENUy6+K8lUJJgG0IKSAqN92zd6U
4uhScVTwAI1m32IBoL/It83kF5KA3u/h++wyoxH94SWajqt12Dr9/WBhsqCthcfSxuYI
rJ9NHofcxl9NLeZtsiL8RX9EFsFHJo1EMztIor62pFTJh4F1FJv5r8JH4bLu4q7ZjtNY
dPlQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc;
bh=/A+3neOCfD0oGm4GaBsBnoWAgJOq126IAqrHHeRH0Ps=;
b=DzErJEINmPyWOoLKNc/6AbPryvxvLMc0rPbZXbd+K+HUi5Z/gURhe1+gaTBozdviQP
3S687YZzgEPBA1lVGUU0tGr4Lf42OHxyeC1yD6Iwmzl6iOSb7YjeLg/HVS+gR3aRp7Cv
Wt62VJD8r4AMJDWmq3irf6VUqQJc5zPuCHkOBNbqiiLGiLWHJArTMZMFBByJgur/esT5
1OVmkkVlo/C87J5j0STWUVci+YBD+4KBL0j/eXzTLgfRmy3Wv/wjVOrP/IptgSaz9QHk
5l9fCu0YPsvegQbF7zVwMqG34Aq9Fn6QzBJO4gmKCZ4Fcn/UApAa9y8yxzw+zqQNf0c3
8Jsg==
X-Gm-Message-State: AJIora+pEVvV6FaEnESTbrGsVQj8YbzD1+dktcKQATtIBBQOq9M+rmnV
+LJzxiI7slYAGDASVtuMWhLi2YU2ET8ZFDIEdt4=
X-Google-Smtp-Source: AGRyM1t2xGdAShXvJEDWUIhbszxAYqSVHxizkwjusT25lw6E5dIXI2UITKiHD68WaDhHM5Jto5ni3ALhZbUS/4qIDFQ=
X-Received: by 2002:a05:6830:6419:b0:61c:5648:122f with SMTP id
cj25-20020a056830641900b0061c5648122fmr6613711otb.324.1658837151209; Tue, 26
Jul 2022 05:05:51 -0700 (PDT)
MIME-Version: 1.0
From: Katarina Chornovil
Date: Tue, 26 Jul 2022 12:05:40 +0100
Message-ID:
Subject:
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000237ed205e4b41f15"
Bcc: root@nl2k.ab.ca
X-Spam_score: 5.0
X-Spam_score_int: 50
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello I am indeed sorry for contacting you through this means,
but this is the only means I can reach you for now, I am Mrs Katarina Chornovil,
a native of Mariupol , south eastern Ukraine. I am 65 years ol [...]
Content analysis details: (5.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.52 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[katarinachorn[at]gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?}
--000000000000237ed205e4b41f15
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hello
I am indeed sorry for contacting you through this means, but this is the
only means I can reach you for now, I am Mrs Katarina Chornovil, a native
of Mariupol , south eastern Ukraine. I am 65 years old. My husband had an
oil and gas company and operated the company until he was conscripted by
Russian Soldiers on 10th March 2022 alongside other family members.
Please I want to entrust into your care valuables because I am trapped
here beneath a steel plant in Mariupol, am badly hurt and cannot move, I
have seven ATM Master cards , its for the family, the amount in all the
cards is =E2=82=AC10.7m(Ten million, seven hundred thousand Euros), so each
contains not less than =E2=82=AC1,5m
I have sent all the cards out of Ukraine. it was packed sealed inside a
wall clock and laptop, sent to Poland and presently the packages are with
the family cook who escaped to Poland because of the fierce war situation
here. I gave him the wall clock and laptop to take with him and keep it
until I contact him for them, he is not aware of the content.
I want to send to you the wall clock and laptop to your address , when you
receive them, open them, you will find 7 ATM Master cards in both of
them. then I will send you the pin code for each of them as soon as you
confirm you have received them. You can remove money everyday them keep 10%
of whatever you remove in each day and you will send the rest to me in an
account I will provide for you.The point is I have to remove all the fund
from all my cards for security reasons and though your help I can be
rescued and flown to your end.
Please let this be confidential between us. Even my cook in Poland now
believes it is just a clock and a laptop, and he is waiting for my message
to send the package to wherever I instruct him as the owner. Six cards are
in the clock and one in the Laptop. if you can handle this for the sake of
humanity then please inform me. I will give you other information when I
hear from you.
Thanks
Mrs Katarina Chornovil.
--000000000000237ed205e4b41f15
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--000000000000237ed205e4b41f15--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 26 Jul 2022 07:38:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oGKkP-000JgS-Qp
for dave@doctor.nl2k.ab.ca;
Tue, 26 Jul 2022 07:37:17 -0600
Resent-From: The Doctor
Resent-Date: Tue, 26 Jul 2022 07:37:17 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ot1-f52.google.com ([209.85.210.52]:36508)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oGJKI-00033Y-8d
for root@nl2k.ab.ca;
Tue, 26 Jul 2022 06:06:19 -0600
Received: by mail-ot1-f52.google.com with SMTP id a14-20020a0568300b8e00b0061c4e3eb52aso10644187otv.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:mime-version:from:to:cc;
bh=/A+3neOCfD0oGm4GaBsBnoWAgJOq126IAqrHHeRH0Ps=;
b=PdU34UVvKVg/Zld9IQHpZsqpRLCXvx+EbZaDMgO1jmcjlX71rn9UZ8Vk+3dCJqwAGq
ESED94c+icPCaWpXHXBC7GGXd0MgDBCGG0z0bxJxgWgUeElnRc6G5n5qx7FWOVH5qEKg
EMUEZy++JaBRUmQL2kcTdPkJbI2IrEqjLbRFpoLWSENUy6+K8lUJJgG0IKSAqN92zd6U
4uhScVTwAI1m32IBoL/It83kF5KA3u/h++wyoxH94SWajqt12Dr9/WBhsqCthcfSxuYI
rJ9NHofcxl9NLeZtsiL8RX9EFsFHJo1EMztIor62pFTJh4F1FJv5r8JH4bLu4q7ZjtNY
dPlQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc;
bh=/A+3neOCfD0oGm4GaBsBnoWAgJOq126IAqrHHeRH0Ps=;
b=DzErJEINmPyWOoLKNc/6AbPryvxvLMc0rPbZXbd+K+HUi5Z/gURhe1+gaTBozdviQP
3S687YZzgEPBA1lVGUU0tGr4Lf42OHxyeC1yD6Iwmzl6iOSb7YjeLg/HVS+gR3aRp7Cv
Wt62VJD8r4AMJDWmq3irf6VUqQJc5zPuCHkOBNbqiiLGiLWHJArTMZMFBByJgur/esT5
1OVmkkVlo/C87J5j0STWUVci+YBD+4KBL0j/eXzTLgfRmy3Wv/wjVOrP/IptgSaz9QHk
5l9fCu0YPsvegQbF7zVwMqG34Aq9Fn6QzBJO4gmKCZ4Fcn/UApAa9y8yxzw+zqQNf0c3
8Jsg==
X-Gm-Message-State: AJIora+pEVvV6FaEnESTbrGsVQj8YbzD1+dktcKQATtIBBQOq9M+rmnV
+LJzxiI7slYAGDASVtuMWhLi2YU2ET8ZFDIEdt4=
X-Google-Smtp-Source: AGRyM1t2xGdAShXvJEDWUIhbszxAYqSVHxizkwjusT25lw6E5dIXI2UITKiHD68WaDhHM5Jto5ni3ALhZbUS/4qIDFQ=
X-Received: by 2002:a05:6830:6419:b0:61c:5648:122f with SMTP id
cj25-20020a056830641900b0061c5648122fmr6613711otb.324.1658837151209; Tue, 26
Jul 2022 05:05:51 -0700 (PDT)
MIME-Version: 1.0
From: Katarina Chornovil
Date: Tue, 26 Jul 2022 12:05:40 +0100
Message-ID:
Subject:
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000237ed205e4b41f15"
Bcc: root@nl2k.ab.ca
X-Spam_score: 5.0
X-Spam_score_int: 50
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello I am indeed sorry for contacting you through this means,
but this is the only means I can reach you for now, I am Mrs Katarina Chornovil,
a native of Mariupol , south eastern Ukraine. I am 65 years ol [...]
Content analysis details: (5.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.52 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[katarinachorn[at]gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?}
--000000000000237ed205e4b41f15
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hello
I am indeed sorry for contacting you through this means, but this is the
only means I can reach you for now, I am Mrs Katarina Chornovil, a native
of Mariupol , south eastern Ukraine. I am 65 years old. My husband had an
oil and gas company and operated the company until he was conscripted by
Russian Soldiers on 10th March 2022 alongside other family members.
Please I want to entrust into your care valuables because I am trapped
here beneath a steel plant in Mariupol, am badly hurt and cannot move, I
have seven ATM Master cards , its for the family, the amount in all the
cards is =E2=82=AC10.7m(Ten million, seven hundred thousand Euros), so each
contains not less than =E2=82=AC1,5m
I have sent all the cards out of Ukraine. it was packed sealed inside a
wall clock and laptop, sent to Poland and presently the packages are with
the family cook who escaped to Poland because of the fierce war situation
here. I gave him the wall clock and laptop to take with him and keep it
until I contact him for them, he is not aware of the content.
I want to send to you the wall clock and laptop to your address , when you
receive them, open them, you will find 7 ATM Master cards in both of
them. then I will send you the pin code for each of them as soon as you
confirm you have received them. You can remove money everyday them keep 10%
of whatever you remove in each day and you will send the rest to me in an
account I will provide for you.The point is I have to remove all the fund
from all my cards for security reasons and though your help I can be
rescued and flown to your end.
Please let this be confidential between us. Even my cook in Poland now
believes it is just a clock and a laptop, and he is waiting for my message
to send the package to wherever I instruct him as the owner. Six cards are
in the clock and one in the Laptop. if you can handle this for the sake of
humanity then please inform me. I will give you other information when I
hear from you.
Thanks
Mrs Katarina Chornovil.
--000000000000237ed205e4b41f15
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hello
I am indeed sorry for contacting you through =
this means, but this is the only means I can reach you for now, I am Mrs Ka=
tarina Chornovil, a native of Mariupol , south eastern Ukraine. I am 65 yea=
rs old. My husband had an oil and gas company and operated the company =C2=
=A0until he was conscripted by Russian Soldiers on 10th March 2022 alongsid=
e other family members.
Please I want to entrust into your care =C2=
=A0valuables because I am trapped here beneath a steel plant in Mariupol, a=
m badly hurt and cannot move, I have seven ATM Master cards , its for the f=
amily, the amount in all the cards is =E2=82=AC10.7m(Ten million, seven hun=
dred thousand Euros), so each contains not less than =C2=A0=E2=82=AC1,5m
>=C2=A0
I have sent all the cards =C2=A0out of Ukraine. it was packed se=
aled inside a wall clock and laptop, sent to Poland and presently the packa=
ges are with the family =C2=A0cook who =C2=A0escaped to Poland because of t=
he fierce war situation here. I gave him the wall clock and laptop to take =
with him and keep it until I contact him for them, he is not aware of the c=
ontent.
I want to send to you the wall clock and laptop to your addr=
ess , when you receive them, =C2=A0open them, you =C2=A0will find 7 ATM =C2=
=A0Master cards in both of them. then I will send you the pin code for each=
of them as soon as you confirm you have received them. You can remove mone=
y everyday them keep 10% of whatever you remove in each day and you will se=
nd the rest to me in an account I will provide for you.The point is I have =
to remove all the fund from all my cards for security reasons and though yo=
ur help I can be rescued and flown to your end.
Please let this be c=
onfidential between us. Even my cook in Poland now believes it is just a cl=
ock and a laptop, and he is waiting for my message to send the package to w=
herever I instruct him as the owner. Six cards are in the clock and one in =
the Laptop. if you can handle this for the sake of humanity then please inf=
orm me. I will give you other information when I hear from you.
Than=
ks
Mrs Katarina Chornovil.
I am indeed sorry for contacting you through =
this means, but this is the only means I can reach you for now, I am Mrs Ka=
tarina Chornovil, a native of Mariupol , south eastern Ukraine. I am 65 yea=
rs old. My husband had an oil and gas company and operated the company =C2=
=A0until he was conscripted by Russian Soldiers on 10th March 2022 alongsid=
e other family members.
Please I want to entrust into your care =C2=
=A0valuables because I am trapped here beneath a steel plant in Mariupol, a=
m badly hurt and cannot move, I have seven ATM Master cards , its for the f=
amily, the amount in all the cards is =E2=82=AC10.7m(Ten million, seven hun=
dred thousand Euros), so each contains not less than =C2=A0=E2=82=AC1,5m
>=C2=A0
I have sent all the cards =C2=A0out of Ukraine. it was packed se=
aled inside a wall clock and laptop, sent to Poland and presently the packa=
ges are with the family =C2=A0cook who =C2=A0escaped to Poland because of t=
he fierce war situation here. I gave him the wall clock and laptop to take =
with him and keep it until I contact him for them, he is not aware of the c=
ontent.
I want to send to you the wall clock and laptop to your addr=
ess , when you receive them, =C2=A0open them, you =C2=A0will find 7 ATM =C2=
=A0Master cards in both of them. then I will send you the pin code for each=
of them as soon as you confirm you have received them. You can remove mone=
y everyday them keep 10% of whatever you remove in each day and you will se=
nd the rest to me in an account I will provide for you.The point is I have =
to remove all the fund from all my cards for security reasons and though yo=
ur help I can be rescued and flown to your end.
Please let this be c=
onfidential between us. Even my cook in Poland now believes it is just a cl=
ock and a laptop, and he is waiting for my message to send the package to w=
herever I instruct him as the owner. Six cards are in the clock and one in =
the Laptop. if you can handle this for the sake of humanity then please inf=
orm me. I will give you other information when I hear from you.
Than=
ks
Mrs Katarina Chornovil.
--000000000000237ed205e4b41f15--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments