Nigerian Gmail spam

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 Jan 2023 23:01:37 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pMjhf-000A3F-0Y

for dave@doctor.nl2k.ab.ca;

Mon, 30 Jan 2023 23:01:11 -0700

Resent-From: The Doctor

Resent-Date: Mon, 30 Jan 2023 23:01:11 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f174.google.com ([209.85.215.174]:40514)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pMjFd-0008xe-12

for doctor@doctor.nl2k.ab.ca;

Mon, 30 Jan 2023 22:32:16 -0700

Received: by mail-pg1-f174.google.com with SMTP id 7so4359766pgh.7

for ; Mon, 30 Jan 2023 21:30:14 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=IMYWIrRq8ndNWOy0tMStjdQPcxxkMl/m7Y5ibQCpJCE=;

b=Spp6eW44KcUO1D7NWRjHf+wNECTj49Kn9IK8xT2NHhIIgVDHCQkQydlC3ap1HheAW7

2dIbFeHr5XODEOGD/9uU+eYqp/J+BPPvvhXsfaskaFXSQOKjwjTIkhmBIVe/5fogF1qm

YohMOlKmlHGmWTPMiVQVqySiCm4S++2A6f1vv5C3ZbsIhq76tqOp2pa0ItMo9n7k1qJE

ovRBt/d5Ho59JMuxJFqpo1jliIOOJuOy2wMorFreJdjJX8A9MwglCBRTgoIgmYbllRab

1g9OWJQayt5aRuIG9SfACBrmzPom7sw4GzzTYNGmF+aSSYz4jc3bjp5HFvLEzcdriJHc

uFDw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=IMYWIrRq8ndNWOy0tMStjdQPcxxkMl/m7Y5ibQCpJCE=;

b=3yJlU+rQyPUnMc27BR4Y/3Puehma+bGtwH3BlEZgp+nOXeDaLQKJVwU/hzV82gq8Ab

9kZhyvzhm2ZP4edi7/nirfOZQLk0UWbkUKAUu6VHW3u/Kq48j+ak2nekO29iZESeRqUB

Db1Dc0VlVNPmmcUfDlG21ZW9/n5b1dzjr/jBUnELxvUOT0lSdB3PF4/kkfoUBLUDDfPz

OfmlRDtz+NhQN/OWsLGk+BWdI/9KOb4Wokw3xDSquzNb9QAT5QRlfjLZf/1Tnml/Fa5x

4bCKoNclRfs2ja//ui/YBZ7PDUZj/jSrIzsnnn519/XPdXGUfxZF3FtwKNk29CUYY7mj

jK1g==

X-Gm-Message-State: AO0yUKW3Solp+l1aSeQMejgfusG24EbmVs9+gM3Q9kKPWrdYUV0cKDWD

5mcr7bIZksCL3EAbui2N3whwWTJjA61P/GwC47k=

X-Google-Smtp-Source: AK7set/AdTyRrf3xyBWUYQCZAzIOhUZd+E4nMqdIqBULx6sRGfJyDPuQoEZZ1DN0usaQ8QNpJYRWpdupZZcE1hEXLc8=

X-Received: by 2002:a62:3681:0:b0:593:d4cb:dba2 with SMTP id

d123-20020a623681000000b00593d4cbdba2mr863916pfa.13.1675143008520; Mon, 30

Jan 2023 21:30:08 -0800 (PST)

MIME-Version: 1.0

Reply-To: cbudanov@gmx.com

From: cyril bedanov

Date: Mon, 30 Jan 2023 21:29:25 -0800

Message-ID:

Subject: I NEED YOUR ASSISTANCE..

To: budanov11

Content-Type: multipart/alternative; boundary="000000000000f891e105f3889f58"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 6.8

X-Spam_score_int: 68

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings Dear, I am General Cyril Budanov, officer commanding

363rd security and service battalion (MU A1785). Ukraine.. I need your assistance

in securing some funds on my behalf and this is why I am contacting you..

my troops have stumbled upon (€16.2million euro) which was discovered last

month here in ukraine..



Content analysis details: (6.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.174 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[bedanobudanova(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.215.174 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} I NEED YOUR ASSISTANCE..



--000000000000f891e105f3889f58

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Greetings Dear,



I am General Cyril Budanov, officer commanding 363rd security and

service battalion (MU A1785). Ukraine..



I need your assistance in securing some funds on my behalf and this

is why I am contacting you.. my troops have stumbled upon

(=E2=82=AC16.2million euro) which was discovered last month here in ukrain=

e..



my officers came across this raw cash during our strategic night

routing in one of the local banks here in eastern cities of ukraine,

after the bombardment by the russian soldier through an air rocket

lunchers a day earlier..



.The 2 locked boxes was handed over to me as a commandant in-charge

and I have successfully deposited and move this funds out of here

through diplomatic courier service to one of the southeast asian

country that will later be disclosed to you..



I need someone I could trust and deal with. If you accept, I shall

instruct the diplomatic courier to contact you and move the funds to

wherever you are as the beneficiary without any delay..



Should you interested in this transaction, I will provide full details

as to how you can handle this transaction successfully.. I believe I

can trust you and tender my resignation letter as soon as you recieve

the funds and come over to your country for a joint business partners



I can only communicate through our military communication facilities

for now of which i believe is more secured and safer to avoid any

detection, I will only reach you through emails at the moments for

security reasons.... Telephone calls may be monitored,



Do not be sceptical neither worried about how this large sum will get to

you..



. herebelow are the statutory obligation of DIPLOMATIC COURIERS



Under the Vienna Convention, couriers are also granted diplomatic

immunity delivery status. This means that when couriers are travelling

with designated diplomatic ;pouchs; they cannot be arrested or

detained. To ensure their diplomatic immunity delivery status,

couriers always travel with the proper documentation reporting their

status as couriers and outlining the number of packages they are

transporting.



,Do note that am revealing this deal to you with belief that you will

never let me down..



please reply me immediately so that I can contact you for further

inquiries. REPLYWITH MY DIRECT EMAIL ADRESS .. (cbudanov@gmx.com)



Await for your reply..



Gen. Cyril Budanov



--000000000000f891e105f3889f58

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Greetings Dear,

I am =C2=A0General Cyril Budanov, =

=C2=A0officer commanding 363rd security and
service battalion (MU A1785)=

. Ukraine..

I need your assistance in securing some funds on my beha=

lf =C2=A0and this
is why I am contacting you.. =C2=A0my troops have stum=

bled upon
(=E2=82=AC16.2million euro) =C2=A0which was discovered last mo=

nth here in ukraine..

=C2=A0my officers came across this raw cash du=

ring our strategic night
routing in one of the local banks here in easte=

rn cities of ukraine,
after the bombardment by the russian soldier throu=

gh an air rocket
lunchers a day earlier..

.The 2 locked boxes was=

handed over to me as a commandant in-charge
and I have successfully dep=

osited =C2=A0and move this funds out of here
through diplomatic courier =

service to one of the southeast asian
country that will later be disclos=

ed to you..

I need someone I could trust and deal with. If you accep=

t, I shall
instruct the diplomatic courier to contact you and move the f=

unds to
wherever you are as the beneficiary without any delay..

S=

hould you interested in this transaction, I will provide full details
as=

to how you can handle this transaction successfully.. I believe I
can t=

rust you and tender my resignation letter as soon as you recieve
the fun=

ds and come over to your country for a joint business partners

=C2=

=A0I can only communicate through our military communication facilities
=

for now of which i believe is =C2=A0more secured and safer to avoid any
=

detection, =C2=A0I will only reach you through emails at the moments for
>security reasons.... Telephone calls may be monitored,

Do not be sc=

eptical neither worried about how this large sum will get to you..

.=

herebelow are the statutory obligation of DIPLOMATIC COURIERS

Under=

the Vienna Convention, couriers are also granted diplomatic
immunity de=

livery status. This means that when couriers are travelling
with designa=

ted diplomatic ;pouchs; they cannot be arrested or
detained. To ensure t=

heir diplomatic immunity delivery status,
couriers always travel with th=

e proper documentation reporting their
status as couriers and outlining =

the number of packages they are
transporting.

,Do note that am re=

vealing this deal to you with belief that you will
never let me down..
r>
=C2=A0please reply me immediately so that I can contact you for furth=

er
inquiries. REPLYWITH MY DIRECT EMAIL ADRESS .. (
danov@gmx.com">cbudanov@gmx.com
)

Await for your reply..

G=

en. Cyril Budanov




--000000000000f891e105f3889f58--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA