Wednesday, January 19, 2022

Fwd: Fraud/Phishing emails Fwd: HELLO



---------- Forwarded message ----------
From: Andrey Kopelev <ansvet_99@yahoo.com>
Date: Tuesday, January 18, 2022
Subject: Fraud/Phishing emails Fwd: HELLO
To: spam@fightspam.gc.ca, reportphishing@antiphishing.org, reportphishing@apwg.org, phishing-report@us-cert.gov, fraudreporting@unaids.org, contact@cyber.gc.ca, abuse@contactprivacy.com, emailscamalerts@gmail.com, network-abuse@google.com, arin-contact@google.com, google-abuse-bounces-reports@devnull.spamcop.net, google-cloud-compliance@google.com, abusecomplaints@markmonitor.com, ccops@markmonitor.com, hostmaster@markmonitor.com, david@davidstrauss.net, abuse@pantheon.io, security@google.com, tchessiabozamarc@gmail.com, abuse@microsoft.com, secure@microsoft.com, msndcc@microsoft.com, msnhst@microsoft.com, IOC@microsoft.com, dabedard@microsoft.com, v-raghuy@microsoft.com, abuse@hotmail.com, domains@microsoft.com, junk@office365.microsoft.com, phish@office365.microsoft.com


This email violates anti-spam act. I don't know this person.  This person has no idea who he is contacting. My emails address is not officially listed anywhere.   The only way this person could get it is from the spam list. Looks like this person is phishing.  Please block his accounts.  Below is the full header,  his original email, example messages sent from this IP,  and abuse reports.  

Reply email: sarahabdulx@hotmail.com 

X-Originating-Ip: [209.85.167.46]
209.85.167.46 listed in dnsbl.sorbs.net ( 1 )
Geographic LocationUnited States United States

First Received Fromapproximately 2 years, 5 months, 2 weeks ago 
Last Received Fromwithin 1 week 
Number Received315 email(s) sent from this IP

Example Messages Sent From 209.85.167.46
Subjectnone/blank 
Subjectnone/blank 
Subject: Dear Beneficiary 
Subject: GOOD NEWS 
Subject: ORDER 
Subject: Attention Beneficiary 
Subject: Attention; Beneficiary, 
Subject: Greetings my friend, 
Subject: Dear Email ID Owner, 
Subject: =?UTF-8?B?5YSq5a2Q44G=? 
Subject: Dear Sir/Ma, This is to inform you of a very imp 
Subject: ARE YOU ALIVE OR DEATH 
Subject: RE: IMPORTANT BUSINESS PROPOSAL 
Subject: My Dear Frie 
Subject: Welcome To Wells Fargo Bank 
Subject: Book Bord - Wasabi Sushi Lounge ApS 
Subject: =?UTF-8?B?44CQ44Ki44Kv44OI44Oq44Oq44O844CR5LqI57=? 
Subject: Contact Mr Green John for your first Payment Asp 
Subject: MTCN; (3423986721) 
Subject: Re: Have you received your funds ? 
Subject: COMPENSATION UNIT 
Subject: MRS MARY 
Subject: MTCN-Nr. 3387957346 



HELLO
To: undisclosed-recipients:; Bcc: Svetlana Kopelev <ansvet_99@yahoo.com> 
X-Ymailisg: 97dwMAYWLDtwjhglE1Qd5e9QUkXp0GAEBo5_Z1mQWLeBODVd CWSPwrS1UwPsjBw7SKHrX9hLEna.0aYc2hrM3TsWv8vI_HGFwi_8rZzZtBY9 1I6J8JO6QCkko2nWbTTYxd2vA2M8_jG5__oo_bT2Lqe45M7VfAErJK0nJaE9 Sn9ds.EIYQegFgTTJdgd7JKl7dRc8MtEKzKAPj7N2Q7Xx_5K7ZxWCbrqa1kF 4XUR_mTbiu2Upgaui_saY7jUgknzKwCMbpgwkeldwwF32H_zK1dFicgfyPnS 0N8j4Y5RRbFjzx0y.7uRPJ76DURBZW43OknSDLAySh7UVFOonhb6T99tFEWB gmgr7SCoR7jorm8SLskOHcye2dTvkleaPyNdY6YrtBYA8LLfn.JEKfVO15dW pJpjRiBuh4zmdaQmGKvuFtm.OEYaH0139UP2ALYz6rI3DSStTr.k491lMhLG DuB6FZ7V6p8yzD_nBFcvtOEkY0i0RfGD8O1IlQWlS_0_FGaqwap2Wk9kgWzY k5zhh1BI9yiPu2vnnA9iqm4M73z4Ey6HF.GSm_SNrMm9rPmoc2q5ncrDMeNj zNV2jFXcax209PyDfNcaRdjSYFYY6GnNIG2LlTtkyQjxu1Syn2kllLeoI3K0 8_3lmMQsdO1S3FhDC49ZeKgByMOtAKrWscJaAl8VHb9Azku8CNQ38eO1lbhu jAQmqbpH9RR27412MCntKC1ylpVkpo05CzET1KWiuDs.NlGxkGXyBwpGtfM5 IZFjmWdDnsa6LP7xCBRyrnQmf6saUQ.ModdbI4mkMjRJyKpFFE0PdIx88YzM vn6BuZPpcDWJ4HGXmOpjwHaCeLnrnX816FePhOdq8YXLwf_1D_CMpTW2qABa 5dRdS4QYbDZRbbyvrFEQtm.in4ZEBRsfXEMQxQZAyBUbplQkdL6n6hM8IIUS so4XVE7pNKGxCJj70bmDrFZjO7mIVmPSTfV4RKlVkaipOYMTfDSbxsSC4XPp 9.Oyn6dRgq8wONJ4ZL91ELc_XnsaKzLbz191ikPHsdkobb_8zSG058U08TtH hRXoUR.dOI7dYCLiJWwlbm2GUkobFDTdXw2Zei9s5Use31mewl2iYaEBMHh2 Wnn_6OC_c1dfN_0X7OALCOqBb3kptxelI30r9znXv.ydZUrWS39mlahUF754 hLXbvW2gTbZuxsqNavVpJgll
X-Received: by 2002:ac2:520e:: with SMTP id a14mr22591103lfl.680.1642525741187; Tue, 18 Jan 2022 09:09:01 -0800 (PST)
X-Originating-Ip: [209.85.167.46]
X-Apparently-To: ansvet_99@yahoo.com; Tue, 18 Jan 2022 17:09:02 +0000
X-Gm-Message-State: AOAM531rtV3/RattzzVvp+fp8V/I0+hD62jEyjqaQYk7DjgRa90xcQZq iuBPm7od/rusJGUECz912f4wVkLQjw4UQNxVK0E=
X-Google-Smtp-Source: ABdhPJze8klcmiNkpfEYXIxFSO9CnhZYHgZXusqak3cmbiLLYO0T41745Am/zODxKUy7mu2MTz7wQFJ9Y2VeL97pZ14=
Mime-Version: 1.0
Authentication-Results: atlas310.free.mail.ne1.yahoo.com; dkim=pass header.i=@gmail.com header.s=20210112; spf=pass smtp.mailfrom=gmail.com; dmarc=pass(p=NONE,sp=QUARANTINE) header.from=gmail.com;
Content-Length: 65
Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:reply-to:from:date:message-id:subject:to; bh=Hbo61kLWi9CDAsEvyvD1JOB2Yd4Qt2hYP0MdRul/Lwk=; b=NXlasxghT+VGb8iK72uOS36/Y0RBB266fE+SkSP7soH01fLCEZnTVqc5EP1s8T2xXY gaTQ92OFdCZvjLhg+mjaLWky4l2XzdO1AujNkyA+Zz1xPh+hBIj+aW0aT/rPEbi4Ij2k 7iRQrZe57OQvaM9Zma6TrRBs7mrmNqxWf3k0q5WlLIYgvENvtRjzrsICF99G0SRMBF3S WbYPTc9jtFbCuaxwNBgsHDjf61SwyMFPGB1XWvfOQN/6VNfoI6O3THArkzQsqcwOOjs8 uBPLKY99D7qCRwF5NdnmwSePk0ZRz97/cN+4a12rLjGWVuV9NatzGxXv7tW1XT/tAvjf hk2A==
X-Google-Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:reply-to:from:date:message-id :subject:to; bh=Hbo61kLWi9CDAsEvyvD1JOB2Yd4Qt2hYP0MdRul/Lwk=; b=KVTw+IYj+X03VV1HAIwi4Jm+DU12jIZIUUS27DXgvyH7uAz1TOgsvsNf8W+viB34Lb iEwg/0cWOGHC0OF82yZmu7hLq2+FckZbzG+a3mqOvR2N7GhgRjJGr3sGYo73LIFYyEg8 FvHM7Yuyq1WljOKec0RN93Py5imeWmChXKGk5bNxDSDgXAZJdaUzh/c/zkrm9hkNyZPy wssDNOqTlNQmbDGaX4rKK38NwiEUbkAjmtjtfmPS7foTHBQF0f6/OWRHs6lnsedaXkWi 6+jv/sDb5cEZiW5ZwnMNyycwISuZDTLdBcicFeQ0vtgdS5T0LSCnDy0u9UmiMxcI2Rrh mXIA==
Content-Type: text/plain; charset="UTF-8"
Received-Spf: pass (domain of gmail.com designates 209.85.167.46 as permitted sender)
Received: from 10.217.134.205 by atlas310.free.mail.ne1.yahoo.com with HTTPS; Tue, 18 Jan 2022 17:09:01 +0000
Received: from 209.85.167.46 (EHLO mail-lf1-f46.google.com) by 10.217.134.205 with SMTPs (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256); Tue, 18 Jan 2022 17:09:01 +0000
Received: by mail-lf1-f46.google.com with SMTP id x11so47677020lfa.2 for <ansvet_99@yahoo.com>; Tue, 18 Jan 2022 09:09:01 -0800 (PST)
Received: by 2002:a2e:9888:0:0:0:0:0 with HTTP; Tue, 18 Jan 2022 09:09:00 -0800 (PST)


Begin forwarded message:

From: Sarah Abdul <tchessiabozamarc@gmail.com>
Subject: HELLO
Date: January 18, 2022 at 12:09:00 PM EST
To: undisclosed-recipients:;

Hello

I sent you an email but no response from you why??

Sarah


No comments:

Post a Comment