Roman Abramovich phish from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 19 May 2022 04:54:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1nrdmK-0001Cb-K5
for dave@doctor.nl2k.ab.ca;
Thu, 19 May 2022 04:53:12 -0600
Resent-From: The Doctor
Resent-Date: Thu, 19 May 2022 04:53:12 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oo1-f43.google.com ([209.85.161.43]:41607)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1nrcqh-000Gf3-0V
for doctor@doctor.nl2k.ab.ca;
Thu, 19 May 2022 03:53:43 -0600
Received: by mail-oo1-f43.google.com with SMTP id bm18-20020a056820189200b0035f7e56a3dfso892997oob.8
for; Thu, 19 May 2022 02:53:21 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=aTytB7zm583deKj8bJ4N1na4gV7HxjCGZXowUzWX2EE=;
b=KvX1YBHQf/t4Fdyh+TSYuvqLZWurUbFZfKNeU5QC0VKQ1okBWGIo2jxiNVFDJKZuvW
yxX4ZNizud85mGZoojyuBCHhKBwEwdmlkWy2pBxES/GTLZNwMrM5TLeRP4i/oCvZIZvz
OTlS8dTBrHFWRtPdNe7vqGwbd73qhdtCJpqyhCytF7jKdShs+H9p/q2zqIiTjs29vfXQ
Z83V27LXOFPZwTCy1wgCC4YpCWtLiu3mEfJddllbqJRacyhoglhnNnZg7g07sIFoBi0W
FWCbzzmWKCbCXIXwaZSgrj5R+frOggCCAx2B9WJ3C0owm/ps/yAfjFxR0uUMM+Yx+lnW
wmVw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=aTytB7zm583deKj8bJ4N1na4gV7HxjCGZXowUzWX2EE=;
b=DFUJZy+QCv5MKlucUA1wE15+qzKUNXnbwd1DIKW5k3YRbsMiFZklM5rWYhGi5Fk6r+
FXAu+kPJTbQG/5iBTT2ecusupilJYb3O1OOeQmuq4l0FfqsuCNhTIkvGGNdkNB6k2fLm
ey7dT8HvIifTM66aNH0g8kl6S23n1eYwnvus9I9055XUSSlrx/kBcHhaCSI3KmrvUbch
XIvu8QbdW538aBIBGNJl2qem8Df1dEDqRhA9rV9qLvoF1nWQGUnAAuj4bKFFk4nQJAMm
77JbdJCFbS67bgSyGI2zygfjThZHlAjFltBl3/cNlp+U3Z6XKll/6zVr7XD0hWEsghBd
7uxw==
X-Gm-Message-State: AOAM533SxLxeRNkkd5efpP8pGhlPPk+mHRZYhFKqRikQKICr3IksWL8S
RwZ3F1io0oEY5KFZhX6Z2sxworGGjcr566N7GFg=
X-Google-Smtp-Source: ABdhPJze/Cs436rk7sGxrQCOhwWf36jRb+42s59TgNhaq0hUttSFNiSzy9nTrtmg1txGycEp0jLdBTeC3j60eSyYma0=
X-Received: by 2002:a4a:5dc1:0:b0:40e:444d:bd64 with SMTP id
w184-20020a4a5dc1000000b0040e444dbd64mr1589692ooa.92.1652953995664; Thu, 19
May 2022 02:53:15 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:ac9:7456:0:0:0:0:0 with HTTP; Thu, 19 May 2022 02:53:14
-0700 (PDT)
Reply-To: press.abramovich@hotmail.com
From: "Chelsea FC Club Owner/President"
Date: Thu, 19 May 2022 10:53:14 +0100
Message-ID:
Subject: Please your urgent attention is personally needed, Chelsea FC Club Owner/President.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 6.4
X-Spam_score_int: 64
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Hello Dear, How are you, I trust that this meet you well.
My name is: Roman Abramovich, the Chelsea FC Club owner, please I need your
urgent attention and assistance for the ongoing WAR between my country Russia
and Ukraine.
Content analysis details: (6.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 HK_LOTTO_NAME No description available.
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[awardcliamsoffice899[at]gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.161.43 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[awardcliamsoffice899[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.9 URG_BIZ BODY: Contains urgent matter
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.0 T_SCC_BODY_TEXT_LINE No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
Subject: {SPAM?} Please your urgent attention is personally needed, Chelsea FC Club Owner/President.
--
Hello Dear,
How are you, I trust that this meet you well.
My name is: Roman Abramovich, the Chelsea FC Club owner, please I need
your urgent attention and assistance for the ongoing WAR between my
country Russia and Ukraine.
I am soliciting your international friendly express assistance on my
matters right now; I will give you my personal reasons of contacting
you upon your reply.
With regards,
Roman Abramovich
Chelsea FC Club Owner/President
London, (England).
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 19 May 2022 04:54:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1nrdmK-0001Cb-K5
for dave@doctor.nl2k.ab.ca;
Thu, 19 May 2022 04:53:12 -0600
Resent-From: The Doctor
Resent-Date: Thu, 19 May 2022 04:53:12 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oo1-f43.google.com ([209.85.161.43]:41607)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1nrcqh-000Gf3-0V
for doctor@doctor.nl2k.ab.ca;
Thu, 19 May 2022 03:53:43 -0600
Received: by mail-oo1-f43.google.com with SMTP id bm18-20020a056820189200b0035f7e56a3dfso892997oob.8
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=aTytB7zm583deKj8bJ4N1na4gV7HxjCGZXowUzWX2EE=;
b=KvX1YBHQf/t4Fdyh+TSYuvqLZWurUbFZfKNeU5QC0VKQ1okBWGIo2jxiNVFDJKZuvW
yxX4ZNizud85mGZoojyuBCHhKBwEwdmlkWy2pBxES/GTLZNwMrM5TLeRP4i/oCvZIZvz
OTlS8dTBrHFWRtPdNe7vqGwbd73qhdtCJpqyhCytF7jKdShs+H9p/q2zqIiTjs29vfXQ
Z83V27LXOFPZwTCy1wgCC4YpCWtLiu3mEfJddllbqJRacyhoglhnNnZg7g07sIFoBi0W
FWCbzzmWKCbCXIXwaZSgrj5R+frOggCCAx2B9WJ3C0owm/ps/yAfjFxR0uUMM+Yx+lnW
wmVw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=aTytB7zm583deKj8bJ4N1na4gV7HxjCGZXowUzWX2EE=;
b=DFUJZy+QCv5MKlucUA1wE15+qzKUNXnbwd1DIKW5k3YRbsMiFZklM5rWYhGi5Fk6r+
FXAu+kPJTbQG/5iBTT2ecusupilJYb3O1OOeQmuq4l0FfqsuCNhTIkvGGNdkNB6k2fLm
ey7dT8HvIifTM66aNH0g8kl6S23n1eYwnvus9I9055XUSSlrx/kBcHhaCSI3KmrvUbch
XIvu8QbdW538aBIBGNJl2qem8Df1dEDqRhA9rV9qLvoF1nWQGUnAAuj4bKFFk4nQJAMm
77JbdJCFbS67bgSyGI2zygfjThZHlAjFltBl3/cNlp+U3Z6XKll/6zVr7XD0hWEsghBd
7uxw==
X-Gm-Message-State: AOAM533SxLxeRNkkd5efpP8pGhlPPk+mHRZYhFKqRikQKICr3IksWL8S
RwZ3F1io0oEY5KFZhX6Z2sxworGGjcr566N7GFg=
X-Google-Smtp-Source: ABdhPJze/Cs436rk7sGxrQCOhwWf36jRb+42s59TgNhaq0hUttSFNiSzy9nTrtmg1txGycEp0jLdBTeC3j60eSyYma0=
X-Received: by 2002:a4a:5dc1:0:b0:40e:444d:bd64 with SMTP id
w184-20020a4a5dc1000000b0040e444dbd64mr1589692ooa.92.1652953995664; Thu, 19
May 2022 02:53:15 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:ac9:7456:0:0:0:0:0 with HTTP; Thu, 19 May 2022 02:53:14
-0700 (PDT)
Reply-To: press.abramovich@hotmail.com
From: "Chelsea FC Club Owner/President"
Date: Thu, 19 May 2022 10:53:14 +0100
Message-ID:
Subject: Please your urgent attention is personally needed, Chelsea FC Club Owner/President.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 6.4
X-Spam_score_int: 64
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Hello Dear, How are you, I trust that this meet you well.
My name is: Roman Abramovich, the Chelsea FC Club owner, please I need your
urgent attention and assistance for the ongoing WAR between my country Russia
and Ukraine.
Content analysis details: (6.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 HK_LOTTO_NAME No description available.
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[awardcliamsoffice899[at]gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.161.43 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[awardcliamsoffice899[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.9 URG_BIZ BODY: Contains urgent matter
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.0 T_SCC_BODY_TEXT_LINE No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
Subject: {SPAM?} Please your urgent attention is personally needed, Chelsea FC Club Owner/President.
--
Hello Dear,
How are you, I trust that this meet you well.
My name is: Roman Abramovich, the Chelsea FC Club owner, please I need
your urgent attention and assistance for the ongoing WAR between my
country Russia and Ukraine.
I am soliciting your international friendly express assistance on my
matters right now; I will give you my personal reasons of contacting
you upon your reply.
With regards,
Roman Abramovich
Chelsea FC Club Owner/President
London, (England).
Gecko/20100408 Thunderbird/3.0.3