scammers scam phish from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 03 Jul 2022 05:39:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1o7xvX-000GU3-3I

for dave@doctor.nl2k.ab.ca;

Sun, 03 Jul 2022 05:38:11 -0600

Resent-From: The Doctor

Resent-Date: Sun, 3 Jul 2022 05:38:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f193.google.com ([209.85.210.193]:36746)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1o7vue-0006Mp-0j

for doctor@doctor.nl2k.ab.ca;

Sun, 03 Jul 2022 03:29:14 -0600

Received: by mail-pf1-f193.google.com with SMTP id f85so2591628pfa.3

for ; Sun, 03 Jul 2022 02:28:45 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to

:content-transfer-encoding;

bh=hgUzfV/G4L1fel3LqHtHUgDugn6tDjbQk0UFDjyHs9w=;

b=S4nf5wm7W5f+IxP9EYNG58X9C8L/2EcixD9zi69GdZcbwurkL75Z/yzx+GCjHlCL4p

z03kzJWHxI62HBwnUbMMGTuNtlOPpkslH/OLB/zwcxz21LalrLQlYOBs9uiJiO680yfX

5/XvPuM8HVM/5Ql0z4BTMAxaKp+4YuZjaoxWmTdr+q6gbsG0KDwUcuVh/ioLdcYCDhQl

o1ARF9Nvu7kAzCK0pACqFYd2EpBPHNLN/QM5avm/OCOo3f4DNVQAWjOVTkt8Lpisliis

T6p0GWu7c5I8Q1w6cQptvcds4cinC1ULFemomtH9r7CNPDZs2jtff9/MgBoXoOxIiCQH

0sZg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to:content-transfer-encoding;

bh=hgUzfV/G4L1fel3LqHtHUgDugn6tDjbQk0UFDjyHs9w=;

b=kzFfsSeyp2Ygai0HRDPsB3Y/lKXFMr+CbrgNnNpY1AZ0lc51NpgBcRGRZ1d7Bl5ywh

+/tVNq02OTwOGFtNHryBWpaBGmbRpI1yhpqpI5uQFbl/XXjCPCq8p6yWPk3QiglSXzxJ

do8wQuMl7Ma/amgxZVOMgbl8SIoS7xD9uhMRYafvAGgxxcJxdzqFVvLyVsPsJOvuoOMx

ZJ+GkXsRMJBw9yQ3NO0mZEJnyRNG58xB8MXCaJWBfbWhQ9Gfipnyn+Q1YdEBuaMR0xSo

iyzy/vWtvYMwVXYtkTL11Flb37LdJj+L3pBwGEGHW+fDYwtMiyjpHCekli0hrzHoNFv0

b1ag==

X-Gm-Message-State: AJIora9ze8x/uPcW234VsirUtpU/XtfZ4P73XyAzYfhy9uNvx1RDKMHh

dFcB0YRTnAYv2ZeqNauEBU62B+XlIFYM2ZoHZhc=

X-Google-Smtp-Source: AGRyM1tYiEHEC7eUnSWnw8AeEcccUvRtYFm28DZjfKqE/5MN5V45x9Vv53TaBf9b3d1/hKwWHbLVfLPMthKqMaagacs=

X-Received: by 2002:a63:f415:0:b0:408:808b:238f with SMTP id

g21-20020a63f415000000b00408808b238fmr19915429pgi.469.1656840519921; Sun, 03

Jul 2022 02:28:39 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:6a10:5d3:0:0:0:0 with HTTP; Sun, 3 Jul 2022 02:28:39

-0700 (PDT)

Reply-To: khaled1ibrahim01@gmail.com

From: "Dr.Khaled Ibrahim"

Date: Sun, 3 Jul 2022 12:28:39 +0300

Message-ID:

Subject: Give This Attention

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 5.5

X-Spam_score_int: 55

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello Dear; Please this proposal is NEVER a SCAM. I repeat

myself this proposal is not a scam. Will you be interested in a LEGAL PARTNERSHIP

DEAL that will be fetching you and I (€10,000) Euro everyday till end [...]





Content analysis details: (5.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.193 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[walleady.colla3[at]gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[khaled1ibrahim01[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[walleady.colla3[at]gmail.com]

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_HK_NAME_FM_DR No description available.

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

2.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Give This Attention



Hello Dear;



Please this proposal is NEVER a SCAM. I repeat myself this proposal is

not a scam. Will you be interested in a LEGAL PARTNERSHIP DEAL that

will be fetching you and I (=E2=82=AC10,000) Euro everyday till ending of J=

uly

2024? You will be earning 50% of (=E2=82=AC10,000) Euro as your own persona=

l

share on daily basis till ending of July 2024. If you are interested

reply me for full details of the business.





P.S: You might receive this message in your inbox; spam or junk

folders depending on your web host or server network. I will be

waiting for your reply.





Yours Sincerely



Dr.Khaled Ibrahim

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA