Roman Abramovich phish from Google

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 19 May 2022 04:54:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nrdmK-0001Cb-K5

for dave@doctor.nl2k.ab.ca;

Thu, 19 May 2022 04:53:12 -0600

Resent-From: The Doctor

Resent-Date: Thu, 19 May 2022 04:53:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f43.google.com ([209.85.161.43]:41607)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1nrcqh-000Gf3-0V

for doctor@doctor.nl2k.ab.ca;

Thu, 19 May 2022 03:53:43 -0600

Received: by mail-oo1-f43.google.com with SMTP id bm18-20020a056820189200b0035f7e56a3dfso892997oob.8

for ; Thu, 19 May 2022 02:53:21 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=aTytB7zm583deKj8bJ4N1na4gV7HxjCGZXowUzWX2EE=;

b=KvX1YBHQf/t4Fdyh+TSYuvqLZWurUbFZfKNeU5QC0VKQ1okBWGIo2jxiNVFDJKZuvW

yxX4ZNizud85mGZoojyuBCHhKBwEwdmlkWy2pBxES/GTLZNwMrM5TLeRP4i/oCvZIZvz

OTlS8dTBrHFWRtPdNe7vqGwbd73qhdtCJpqyhCytF7jKdShs+H9p/q2zqIiTjs29vfXQ

Z83V27LXOFPZwTCy1wgCC4YpCWtLiu3mEfJddllbqJRacyhoglhnNnZg7g07sIFoBi0W

FWCbzzmWKCbCXIXwaZSgrj5R+frOggCCAx2B9WJ3C0owm/ps/yAfjFxR0uUMM+Yx+lnW

wmVw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=aTytB7zm583deKj8bJ4N1na4gV7HxjCGZXowUzWX2EE=;

b=DFUJZy+QCv5MKlucUA1wE15+qzKUNXnbwd1DIKW5k3YRbsMiFZklM5rWYhGi5Fk6r+

FXAu+kPJTbQG/5iBTT2ecusupilJYb3O1OOeQmuq4l0FfqsuCNhTIkvGGNdkNB6k2fLm

ey7dT8HvIifTM66aNH0g8kl6S23n1eYwnvus9I9055XUSSlrx/kBcHhaCSI3KmrvUbch

XIvu8QbdW538aBIBGNJl2qem8Df1dEDqRhA9rV9qLvoF1nWQGUnAAuj4bKFFk4nQJAMm

77JbdJCFbS67bgSyGI2zygfjThZHlAjFltBl3/cNlp+U3Z6XKll/6zVr7XD0hWEsghBd

7uxw==

X-Gm-Message-State: AOAM533SxLxeRNkkd5efpP8pGhlPPk+mHRZYhFKqRikQKICr3IksWL8S

RwZ3F1io0oEY5KFZhX6Z2sxworGGjcr566N7GFg=

X-Google-Smtp-Source: ABdhPJze/Cs436rk7sGxrQCOhwWf36jRb+42s59TgNhaq0hUttSFNiSzy9nTrtmg1txGycEp0jLdBTeC3j60eSyYma0=

X-Received: by 2002:a4a:5dc1:0:b0:40e:444d:bd64 with SMTP id

w184-20020a4a5dc1000000b0040e444dbd64mr1589692ooa.92.1652953995664; Thu, 19

May 2022 02:53:15 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:ac9:7456:0:0:0:0:0 with HTTP; Thu, 19 May 2022 02:53:14

-0700 (PDT)

Reply-To: press.abramovich@hotmail.com

From: "Chelsea FC Club Owner/President"

Date: Thu, 19 May 2022 10:53:14 +0100

Message-ID:

Subject: Please your urgent attention is personally needed, Chelsea FC Club Owner/President.

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 6.4

X-Spam_score_int: 64

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Hello Dear, How are you, I trust that this meet you well.

My name is: Roman Abramovich, the Chelsea FC Club owner, please I need your

urgent attention and assistance for the ongoing WAR between my country Russia

and Ukraine.



Content analysis details: (6.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 HK_LOTTO_NAME No description available.

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[awardcliamsoffice899[at]gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.43 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[awardcliamsoffice899[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.9 URG_BIZ BODY: Contains urgent matter

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

-0.0 T_SCC_BODY_TEXT_LINE No description available.

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

Subject: {SPAM?} Please your urgent attention is personally needed, Chelsea FC Club Owner/President.



--

Hello Dear,

How are you, I trust that this meet you well.



My name is: Roman Abramovich, the Chelsea FC Club owner, please I need

your urgent attention and assistance for the ongoing WAR between my

country Russia and Ukraine.



I am soliciting your international friendly express assistance on my

matters right now; I will give you my personal reasons of contacting

you upon your reply.



With regards,



Roman Abramovich

Chelsea FC Club Owner/President

London, (England).

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA