Qatar Airways spam scam from Google Gmail
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 27 Sep 2026 18:58:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))
(envelope-from
id 1xAzgp-00000000K40-3F5a
for dave@doctor.nl2k.ab.ca;
Sun, 27 Sep 2026 18:57:55 -0600
Resent-From: The Doctor
Resent-Date: Sun, 27 Sep 2026 18:57:55 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wr1-f103.google.com ([209.85.221.103]:59840)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.100.1 (FreeBSD))
(envelope-from
id 1xAxfT-00000000HN1-3ZOB
for doctor@netknow.ca;
Sun, 27 Sep 2026 16:48:32 -0600
Received: by mail-wr1-f103.google.com with SMTP id ffacd0b85a97d-488885c37f2so342863f8f.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=olloum.com; s=google; t=1790549250; x=1791154050; darn=netknow.ca;
h=content-transfer-encoding:content-type:mime-version:message-id:date
:subject:to:from:reply-to:from:to:cc:subject:date:message-id
:reply-to:content-type;
bh=vZQE9v6WWyJOlVrvlDJrJqkIZEN6UCIf7RlCr+5VP88=;
b=nAYFivjKn4cFoAh+eAkPv1Ejp7jShme5aYo0bKaBpzBI8iV1oIS5RZmechIDSPRYC3
uiXE55g1s86GWw7CB2qeqhl4ns7UxcYmcF1GjrVjrUyOHFipuZHS+XrPMSq87JGXeiay
L3pD4XumJ1HpC7+NB0vyZ/UV0PboOHGdM2iJEzC2z8g54fU+UrTdIUWP9Dy9EbdsWnlM
Be0pE6k2uK4QhcMSRoTa47ZdvIUEZAsyOfNdYgKBCF/mbTXWPr6C3eC8sa8SIc5hP/Gf
8Kwv4De4Lk+YlowhjNeiWjJW4+0GWGm4IYCj5aY8b2b2wbWaAL93bBwMJZCK6Yykv7dV
qzFQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20260707; t=1790549250; x=1791154050;
h=content-transfer-encoding:content-type:mime-version:message-id:date
:subject:to:from:reply-to:x-gm-gg:x-gm-message-state:from:to:cc
:subject:date:message-id:reply-to:content-type;
bh=vZQE9v6WWyJOlVrvlDJrJqkIZEN6UCIf7RlCr+5VP88=;
b=IReHH6c4yVt03KkqkNcFx1/LPR1Pkq78Aowb1OqEhiPOS4hptD01TTN0KnXAS3nmr7
9efBsWjXhiJPoxDyySnnisIcz7f8H1eM7lTkvoYE7O7LeDqs5vZR/HX5oNr9Xa9+yvTv
BzV0U21UeT8x30E2Q3zCRjLaRgZ+C7JVngtXDlJoGXRQggi8ARKtzlB8cEu6g6jfhvJ0
pOIOuxGt2C/EJXyDHWsUViw9SE+jxtWlao2kMrIA334LghEtcqnMfiSQBpIJweyHNEOh
xes2hrn3a8gi/MSeCVdzNPRwivL8+4eNLO6D+OOpcXoLjGLP2J06Gspw3I2HDCRrgXiU
3Dmg==
X-Gm-Message-State: AFuF++kBKCuLwxJWoajlhcSWJz67XkZGA0iFwJZM2ZGfSfs04+ctyvnW
KN0EY+W4Fm5zTRj/nL47f4qvNA3eBZtLNB2URax5nS4D6qO+5A7BRkk6zNRhP1w+N6IW8IxTkYq
2KDnHo1lWOSLHQKfqDLmAXwgqUqKB4cSFGXrZqGiWY1/yGUQ=
X-Gm-Gg: AYBFou2DVARiAoJMuy6SAKHoylYha2+5wbnX+prwsLt5cIfuruYE9Hc86gRtLvBD8Wu
f4RUD+ckn9RNk4MV5D4I0dRF5VPWm/dNaq265Plbn2lwuqJ3lSvFi1DeWGkY5oF+37um1x5XsZr
BG+Jnz/AT8kJhNwDJFiDuXOoVxx4+xYw8GNsIvMnCL52EHFhincZ6sC56x1TWALahkZahJToi2N
mAEbAthxbnhsUSqTMUR+NtuDGwpYv8Yhhb+QkmDDMS1XoMBR+YoppWlLIevlPzxo+yC2OYxhepn
iWOMDLQgX8YSzvHouW8KmZbUZiSapkW4a/yMTbotfYHx3zSFp72ISOF9F4d/RyygViiBg8beI35
vTM9pC/ADvZpy
X-Received: by 2002:a05:600c:4688:b0:49b:96a0:5c00 with SMTP id 5b1f17b1804b1-49fe66c61fcmr224338215e9.13.1790549249958;
Sun, 27 Sep 2026 15:47:29 -0700 (PDT)
Received: from [45.133.174.145] ([45.133.174.145])
by smtp-relay.gmail.com with ESMTPS id 5b1f17b1804b1-49fef399dc7sm34518285e9.4.2026.09.27.15.47.29
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Sun, 27 Sep 2026 15:47:29 -0700 (PDT)
X-Relaying-Domain: olloum.com
Reply-To: contracts@contracts-qatarairways.com
From: "QATAR AIRWAYS"
To: doctor@netknow.ca
Subject: =?UTF-8?B?SW52aXRhdGlvbiB0byBQcmUtUXVhbGlmaWNhdGlvbiDigJMgRVBDIENvbnRyYWN0b3JzICYgU3VwcGxpZXJzIHwgUWF0YXIgQWlyd2F5cw==?=
Date: 27 Sep 2026 15:47:29 -0700
Message-ID: <20260927154729.DB4774C3B0F45604@olloum.com>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam_score: 6.9
X-Spam_score_int: 69
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Qatar Airways | EPC Pre-Qualification Invitation QATAR AIRWAYS
Content analysis details: (6.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[45.133.174.145 listed in will-spam-for-food.eu.org]
[45.133.174.145 listed in will-spam-for-food.eu.org]
[45.133.174.145 listed in will-spam-for-food.eu.org]
[45.133.174.145 listed in will-spam-for-food.eu.org]
[45.133.174.145 listed in will-spam-for-food.eu.org]
[45.133.174.145 listed in will-spam-for-food.eu.org]
[45.133.174.145 listed in will-spam-for-food.eu.org]
[45.133.174.145 listed in will-spam-for-food.eu.org]
[209.85.221.103 listed in will-spam-for-food.eu.org]
[209.85.221.103 listed in will-spam-for-food.eu.org]
[209.85.221.103 listed in will-spam-for-food.eu.org]
[209.85.221.103 listed in will-spam-for-food.eu.org]
[209.85.221.103 listed in will-spam-for-food.eu.org]
[209.85.221.103 listed in will-spam-for-food.eu.org]
[209.85.221.103 listed in will-spam-for-food.eu.org]
[209.85.221.103 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.221.103 listed in dnsbl.ahbl.org]
[209.85.221.103 listed in dnsbl.ahbl.org]
[209.85.221.103 listed in dnsbl.ahbl.org]
[209.85.221.103 listed in dnsbl.ahbl.org]
[45.133.174.145 listed in dnsbl.ahbl.org]
[45.133.174.145 listed in dnsbl.ahbl.org]
[45.133.174.145 listed in dnsbl.ahbl.org]
[45.133.174.145 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.221.103 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.221.103 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.221.103 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.221.103 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.221.103 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist
[URI: olloum.com]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[209.85.221.103 listed in bl.score.senderscore.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.221.103 listed in wl.mailspike.net]
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 NO_RDNS2 Sending MTA has no reverse DNS
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 FROM_MISSPACED From: missing whitespace
0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
Subject: {SPAM?} =?UTF-8?B?SW52aXRhdGlvbiB0byBQcmUtUXVhbGlmaWNhdGlvbiDigJMgRVBDIENvbnRyYWN0b3JzICYgU3VwcGxpZXJzIHwgUWF0YXIgQWlyd2F5cw==?=
=3D1.0">
QATAR AIRWAYS
Services Center
Greetings from Qatar Airways,
On behalf of the Group Procurement & Contracts =
Shared Services Center,
we are pleased to invite reputable Engineering, Pro=
curement, and Construction (EPC)
companies to register and participate in our pre-qualificat=
ion process for ongoing and upcoming
projects within Qatar.
Qatar Airways continues to develop and expand its operation=
s in the aviation sector.
We are seeking qualified EPC contractors and suppliers with=
proven expertise and the
capability to deliver in line with international standards =
and Qatar Airways requirements.
Interested companies are requested to subm=
it their company profile.
Kindly also indicate your area(s) of specialization and cle=
arly outline the services
and value your company can offer to QATAR AIRWAYS=
strong>.
Once we receive your response, we will guide you through th=
e pre-qualification process,
and shortlisted companies will be invited to participate in=
the upcoming
Invitations to Tender (ITT).
: 6px;">📩 Submit your information via email:
ss=3D"email-address">
contracts@contracts-qatarairways.com
Please send your company profile and relevant details a=
t your earliest convenience.
We look forward to your participation and to establishing a=
strong and mutually
beneficial partnership.