scammers scam phish from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 03 Jul 2022 05:39:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1o7xvX-000GU3-3I
for dave@doctor.nl2k.ab.ca;
Sun, 03 Jul 2022 05:38:11 -0600
Resent-From: The Doctor
Resent-Date: Sun, 3 Jul 2022 05:38:11 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f193.google.com ([209.85.210.193]:36746)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1o7vue-0006Mp-0j
for doctor@doctor.nl2k.ab.ca;
Sun, 03 Jul 2022 03:29:14 -0600
Received: by mail-pf1-f193.google.com with SMTP id f85so2591628pfa.3
for; Sun, 03 Jul 2022 02:28:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to
:content-transfer-encoding;
bh=hgUzfV/G4L1fel3LqHtHUgDugn6tDjbQk0UFDjyHs9w=;
b=S4nf5wm7W5f+IxP9EYNG58X9C8L/2EcixD9zi69GdZcbwurkL75Z/yzx+GCjHlCL4p
z03kzJWHxI62HBwnUbMMGTuNtlOPpkslH/OLB/zwcxz21LalrLQlYOBs9uiJiO680yfX
5/XvPuM8HVM/5Ql0z4BTMAxaKp+4YuZjaoxWmTdr+q6gbsG0KDwUcuVh/ioLdcYCDhQl
o1ARF9Nvu7kAzCK0pACqFYd2EpBPHNLN/QM5avm/OCOo3f4DNVQAWjOVTkt8Lpisliis
T6p0GWu7c5I8Q1w6cQptvcds4cinC1ULFemomtH9r7CNPDZs2jtff9/MgBoXoOxIiCQH
0sZg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to:content-transfer-encoding;
bh=hgUzfV/G4L1fel3LqHtHUgDugn6tDjbQk0UFDjyHs9w=;
b=kzFfsSeyp2Ygai0HRDPsB3Y/lKXFMr+CbrgNnNpY1AZ0lc51NpgBcRGRZ1d7Bl5ywh
+/tVNq02OTwOGFtNHryBWpaBGmbRpI1yhpqpI5uQFbl/XXjCPCq8p6yWPk3QiglSXzxJ
do8wQuMl7Ma/amgxZVOMgbl8SIoS7xD9uhMRYafvAGgxxcJxdzqFVvLyVsPsJOvuoOMx
ZJ+GkXsRMJBw9yQ3NO0mZEJnyRNG58xB8MXCaJWBfbWhQ9Gfipnyn+Q1YdEBuaMR0xSo
iyzy/vWtvYMwVXYtkTL11Flb37LdJj+L3pBwGEGHW+fDYwtMiyjpHCekli0hrzHoNFv0
b1ag==
X-Gm-Message-State: AJIora9ze8x/uPcW234VsirUtpU/XtfZ4P73XyAzYfhy9uNvx1RDKMHh
dFcB0YRTnAYv2ZeqNauEBU62B+XlIFYM2ZoHZhc=
X-Google-Smtp-Source: AGRyM1tYiEHEC7eUnSWnw8AeEcccUvRtYFm28DZjfKqE/5MN5V45x9Vv53TaBf9b3d1/hKwWHbLVfLPMthKqMaagacs=
X-Received: by 2002:a63:f415:0:b0:408:808b:238f with SMTP id
g21-20020a63f415000000b00408808b238fmr19915429pgi.469.1656840519921; Sun, 03
Jul 2022 02:28:39 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6a10:5d3:0:0:0:0 with HTTP; Sun, 3 Jul 2022 02:28:39
-0700 (PDT)
Reply-To: khaled1ibrahim01@gmail.com
From: "Dr.Khaled Ibrahim"
Date: Sun, 3 Jul 2022 12:28:39 +0300
Message-ID:
Subject: Give This Attention
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 5.5
X-Spam_score_int: 55
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello Dear; Please this proposal is NEVER a SCAM. I repeat
myself this proposal is not a scam. Will you be interested in a LEGAL PARTNERSHIP
DEAL that will be fetching you and I (€10,000) Euro everyday till end [...]
Content analysis details: (5.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.193 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[walleady.colla3[at]gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[khaled1ibrahim01[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[walleady.colla3[at]gmail.com]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_HK_NAME_FM_DR No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Give This Attention
Hello Dear;
Please this proposal is NEVER a SCAM. I repeat myself this proposal is
not a scam. Will you be interested in a LEGAL PARTNERSHIP DEAL that
will be fetching you and I (=E2=82=AC10,000) Euro everyday till ending of J=
uly
2024? You will be earning 50% of (=E2=82=AC10,000) Euro as your own persona=
l
share on daily basis till ending of July 2024. If you are interested
reply me for full details of the business.
P.S: You might receive this message in your inbox; spam or junk
folders depending on your web host or server network. I will be
waiting for your reply.
Yours Sincerely
Dr.Khaled Ibrahim
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 03 Jul 2022 05:39:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1o7xvX-000GU3-3I
for dave@doctor.nl2k.ab.ca;
Sun, 03 Jul 2022 05:38:11 -0600
Resent-From: The Doctor
Resent-Date: Sun, 3 Jul 2022 05:38:11 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f193.google.com ([209.85.210.193]:36746)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1o7vue-0006Mp-0j
for doctor@doctor.nl2k.ab.ca;
Sun, 03 Jul 2022 03:29:14 -0600
Received: by mail-pf1-f193.google.com with SMTP id f85so2591628pfa.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to
:content-transfer-encoding;
bh=hgUzfV/G4L1fel3LqHtHUgDugn6tDjbQk0UFDjyHs9w=;
b=S4nf5wm7W5f+IxP9EYNG58X9C8L/2EcixD9zi69GdZcbwurkL75Z/yzx+GCjHlCL4p
z03kzJWHxI62HBwnUbMMGTuNtlOPpkslH/OLB/zwcxz21LalrLQlYOBs9uiJiO680yfX
5/XvPuM8HVM/5Ql0z4BTMAxaKp+4YuZjaoxWmTdr+q6gbsG0KDwUcuVh/ioLdcYCDhQl
o1ARF9Nvu7kAzCK0pACqFYd2EpBPHNLN/QM5avm/OCOo3f4DNVQAWjOVTkt8Lpisliis
T6p0GWu7c5I8Q1w6cQptvcds4cinC1ULFemomtH9r7CNPDZs2jtff9/MgBoXoOxIiCQH
0sZg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to:content-transfer-encoding;
bh=hgUzfV/G4L1fel3LqHtHUgDugn6tDjbQk0UFDjyHs9w=;
b=kzFfsSeyp2Ygai0HRDPsB3Y/lKXFMr+CbrgNnNpY1AZ0lc51NpgBcRGRZ1d7Bl5ywh
+/tVNq02OTwOGFtNHryBWpaBGmbRpI1yhpqpI5uQFbl/XXjCPCq8p6yWPk3QiglSXzxJ
do8wQuMl7Ma/amgxZVOMgbl8SIoS7xD9uhMRYafvAGgxxcJxdzqFVvLyVsPsJOvuoOMx
ZJ+GkXsRMJBw9yQ3NO0mZEJnyRNG58xB8MXCaJWBfbWhQ9Gfipnyn+Q1YdEBuaMR0xSo
iyzy/vWtvYMwVXYtkTL11Flb37LdJj+L3pBwGEGHW+fDYwtMiyjpHCekli0hrzHoNFv0
b1ag==
X-Gm-Message-State: AJIora9ze8x/uPcW234VsirUtpU/XtfZ4P73XyAzYfhy9uNvx1RDKMHh
dFcB0YRTnAYv2ZeqNauEBU62B+XlIFYM2ZoHZhc=
X-Google-Smtp-Source: AGRyM1tYiEHEC7eUnSWnw8AeEcccUvRtYFm28DZjfKqE/5MN5V45x9Vv53TaBf9b3d1/hKwWHbLVfLPMthKqMaagacs=
X-Received: by 2002:a63:f415:0:b0:408:808b:238f with SMTP id
g21-20020a63f415000000b00408808b238fmr19915429pgi.469.1656840519921; Sun, 03
Jul 2022 02:28:39 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6a10:5d3:0:0:0:0 with HTTP; Sun, 3 Jul 2022 02:28:39
-0700 (PDT)
Reply-To: khaled1ibrahim01@gmail.com
From: "Dr.Khaled Ibrahim"
Date: Sun, 3 Jul 2022 12:28:39 +0300
Message-ID:
Subject: Give This Attention
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 5.5
X-Spam_score_int: 55
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello Dear; Please this proposal is NEVER a SCAM. I repeat
myself this proposal is not a scam. Will you be interested in a LEGAL PARTNERSHIP
DEAL that will be fetching you and I (€10,000) Euro everyday till end [...]
Content analysis details: (5.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.193 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[walleady.colla3[at]gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[khaled1ibrahim01[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[walleady.colla3[at]gmail.com]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_HK_NAME_FM_DR No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Give This Attention
Hello Dear;
Please this proposal is NEVER a SCAM. I repeat myself this proposal is
not a scam. Will you be interested in a LEGAL PARTNERSHIP DEAL that
will be fetching you and I (=E2=82=AC10,000) Euro everyday till ending of J=
uly
2024? You will be earning 50% of (=E2=82=AC10,000) Euro as your own persona=
l
share on daily basis till ending of July 2024. If you are interested
reply me for full details of the business.
P.S: You might receive this message in your inbox; spam or junk
folders depending on your web host or server network. I will be
waiting for your reply.
Yours Sincerely
Dr.Khaled Ibrahim
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments