Sunday, February 13, 2022

Fwd: Fraud/Phishing emails Fwd: Tender Invitation for FIFA 2022 world cup



---------- Forwarded message ----------
From: Rightway Auto Repair <rightwayautomotive@yahoo.com>
Date: Sunday, February 6, 2022
Subject: Fraud/Phishing emails Fwd: Tender Invitation for FIFA 2022 world cup
To: spam@fightspam.gc.ca, reportphishing@antiphishing.org, reportphishing@apwg.org, phishing-report@us-cert.gov, fraudreporting@unaids.org, contact@cyber.gc.ca, abuse@contactprivacy.com, emailscamalerts@gmail.com, network-abuse@google.com, arin-contact@google.com, abusecomplaints@markmonitor.com, ccops@markmonitor.com, hostmaster@markmonitor.com, security@google.com, dns-admin@google.com, david@davidstrauss.net, abuse@pantheon.io, mr.kelvindennis201@gmail.com, google-abuse-bounces-reports@devnull.spamcop.net, google-cloud-compliance@google.com



This person is a scammer impersonating Republic of Qatar.  I don't know the sender, never provided my information. This person has no idea who he is contacting - I don't sell any products and don't have  brochures/catalogs. My emails address is not officially listed anywhere.  The only way this person could get it is from the spam list. This person is phishing. Please block his accounts including internet.  Below is the full header, his original email, abuse reports, and the example messages sent from this IP address. 

The email address mr.kelvindennis201@gmail.com has many fraud warnings on the internet. 



Reply email: aahmedtrading1@gmail.com 

X-Originating-Ip: [209.85.222.66]
209.85.222.66 listed in dnsbl.sorbs.net ( 1 )

Geographic LocationUnited States United States

First Received Fromapproximately 3 years, 5 months, 1 week ago 
Last Received Fromwithin 1 week 
Number Received252 email(s) sent from this IP

Dictionary Attacks22 email(s) sent from this IP
First Received Fromapproximately 2 years, 1 month, 4 weeks ago 
Last Received Fromwithin 3 months, 1 week

Example Messages Sent From 209.85.222.66
Subject: ATTENTION 
Subject: Dear Esteemed Winner, 
Subject: Dear Friend, 
Subject: Dear Friend, 
Subject: Good day to you. 
Subject: Hello 
Subject: Hello, 
Subject: Investment Opportunity 
Subject: LETTER 
Subject: RE 
Subject: Attention Please !!! 
Subject: It's my pleasure 
Subject: SURROGATE COURT, 152 GENESEE ST, AUBURN, NY USA (N 
Subject: Attention:. 
Subject: Attention:. 
Subject: Donation Of $1,500.000.00 for you 
Subject: $$$$$$$$$$$$$$$$$$$ 
Subject: Online Banking Transaction For Your Funds..!! 
Subject: COVID-19 FUNDS. 
Subject: Can I give you this trust 
Subject: Roger, You'd love this shirt for sure! 
Example User Names Used By 209.85.222.66
User-nameacptwi
User-nameoachs
User-nameselypuk
User-nameerey
User-nameepositregular
User-nameafshar69
User-nameamal.bonsell
User-nameooch521
User-nameefkovichchz
User-namehanhharradon
User-nameelsihpizarro
User-nameelodyanway
User-nameosefine_christescu
User-namehristescu
User-nameebora_h_mostowy
User-namearradon
User-nameerisaharvel
User-nameailynmontana7
User-nameaimedove
User-nameakramwork19
User-namealeesa.yost
User-nameeggy_bartolomei



Amer Ismail Trading Agency <mr.kelvindennis201@gmail.com> 
Tender Invitation for FIFA 2022 world cup
To: undisclosed-recipients:; Bcc: Right Way Auto Repair <rightwayautomotive@yahoo.com> 
X-Ymailisg: Ru1P3ngWLDv37ksbJLNFvYbHiqSfozw2Vc1A5V8HwbWCwPiV zi4MaoJEMlNWdMfgBUdRe.EAjnin1lYgCk1XQ0FvRtDpsN0m3fLVldl6KA7o QrOOe.h1rnomotTOOtjxWHwAj2ngui0LMPRdWNH6gJ6pZ_IF0BQVb.yhXGO4 _lftnf.cG4I9x1PK7TduCghW_7.jHDWXWGyV1Egs.3Pp17X0ZpPtiW50.cii 4yV4Zd_36uydjd0VjDh.WZ9wQ.JUyuHM2IeltCZbmDmRjVWqzmMnScxclUVZ IE5vmHEO4x74ycsrc857C4S3wlpKgULv2gVRjYZ.Sl6dchnYsvYzV1Xz4fWL FOf.UDuGTLuZrg9NRdrYMJ.WYrK.581siBy1Lqi8HCUBuUCDGytoF1a3bhxB S0Tx8yJKqFFCkZNjVrOLUubujeFnptLx4re.fbCa8Mw91RcQndkHRC6Lubr1 ImmS0svmEWJUfyLV11O2ZF6JvyYGmd0XzSPUo.frnZVrrev3QXX_sgaUwiJ7 sV6B6ekk8CBY_oXC6BEfEll1AVUpAslPtRIs3bRzgJSminyie6r0vmM9DZKN qdmsz9RvYntBQLjLp3DMA26UPCbsCtrMBxP5bVy.agx.cZeAh05xjUsl78Un iwRITdXYrX7k3m577ji4DNtVCtl2IQZdSpOGQnzuUrN8WEZ46r9JIf1XpKWS 9fZ4jwoTrVMx1kcNpuM9OEZpbmEgZYh.__pHXJJFC1jxW.FrwprJwVR3T2pF BKHrEXSIEyMYnuJNbc7EzZ_8erC_P8Rk_2494HSpjcOVwE4UZ2AGemBl149Y U4IREULUXao6nK8cJHPoMEKMOFXZZWgmctQLAI8XjTJCGEYPmi7q1PVu6GJn Vlz9Ho9f6cntmJdhzZJJxpFl1qTQVZX7OBV4yIa_lgEq3wKBZU7VIv2_nsLg HpTyn8LmloR225ObGh0Jmw.quDZICeBEZE_RccWsK_gUufBAD5EqYnovTHaY LimFQFfJwyAlUnab3EDta2Zd8HdI29Kos7P5LhKDURtweHONrN0p5Dmo8ato Mr7kXWZbah4lNjwu5_69s_KZwxDoF7_3xPX0yfTlxUgZohgrSgbMTNVpU2j1 r.iPf8_c8lgToy48VR2XO3m.7hdbC1jHRjzuKTU6fMAFDaUfLsaNP5nlwICf HDgoFk10Y2twKh3XjA_X8JqzBQFrVSkKj1s6KzKRxTTjXFSOhQNNbT1MZORW axY3li8n0CQyOa6J
X-Received: by 2002:a05:6130:399:: with SMTP id az25mr2257225uab.138.1644137284051; Sun, 06 Feb 2022 00:48:04 -0800 (PST)
X-Originating-Ip: [209.85.222.66]
X-Apparently-To: rightwayautomotive@yahoo.com; Sun, 6 Feb 2022 08:48:07 +0000
X-Gm-Message-State: AOAM530YyWMJo0RM9XLrl/NZp4tyUcza5J8S2NizHHtFAKej1rQo9afP QiGu0zM33peRwlklkl0IFP5XZKZQw4BBaAMQddw=
X-Google-Smtp-Source: ABdhPJydg6xa/FIOc4jMnoLwgjz/o/M8sq2TYFcFn/9PTjHcJNrw1fu0br1crYIfWf8B3rIWXiM0+76SMTLgO8+Ecrk=
Mime-Version: 1.0
Authentication-Results: atlas320.free.mail.gq1.yahoo.com; dkim=pass header.i=@gmail.com header.s=20210112; spf=pass smtp.mailfrom=gmail.com; dmarc=pass(p=NONE,sp=QUARANTINE) header.from=gmail.com;
Content-Length: 502
Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:reply-to:from:date:message-id:subject:to; bh=Fr+H/RL38TLKpCNRNB2UpwplrJUGuyZKq4dmE6F5TCM=; b=J9oW0gYA2EeNlnN2pXK/gVqNeRXlAnci8MyhA1yknWjLtOx01mMgjD2ZfZDTAZIF1j kqM4FcKyGehSMB2IzXv5sChxvPY0gR4W4j+mHituu67vWiaZGkeVzu5xLws4oGvGyc79 W9lWsx1AbTQYbRkCQBYCMvRrX1+bkpE+N1QK/rk0QMSPXrsFXf3GxfMtXbMgXrJq/xtf p02EQlOYYelPvCN2schRxZ7LnQ09zXMNGky4io0k7vtRSoDtFahGaYO/lTLXWyt69SDV jxDhpJINLRWQpbP1PowsA46CPRFeknIpWQqASlLjq1kHi19l2vffcxYddnfK5mHEO8GU tnfA==
X-Google-Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:reply-to:from:date:message-id :subject:to; bh=Fr+H/RL38TLKpCNRNB2UpwplrJUGuyZKq4dmE6F5TCM=; b=6x8L61Bol2TuIom4RX5PkwAWH8Ztnu9vtSkIHwRCP/22XB0dsVFtFnDhqhMU+cvDAK kNCN7y3k55gFPPEPVh708+Rp6gvS6It+SLfUy//alel3zYXlNBKlJ5ygnhAHQWNNWIOZ KzR0wINqW/lLTrrxkOpUkAkd6Q1AvqB3HAwgxe8NX1O7k5Oj/s7oN0c5q8czWY40ge70 3UKKv9RXDbxBxF0T7GaPr3BnDq+UtF1GYQvJ+6tt545sJH/5XA4dM2PlVHcrKlaeVRjA wPwhDu52r5EK3SQeJtHN1lEjUjShM0Cr9VQiDEKVEiW4aEVVC6eDI8BknxaKNNAoHz1Y Ypgg==
Content-Type: text/plain; charset="UTF-8"
Received-Spf: pass (domain of gmail.com designates 209.85.222.66 as permitted sender)
Received: from 10.214.140.253 by atlas320.free.mail.gq1.yahoo.com with HTTPS; Sun, 6 Feb 2022 08:48:05 +0000
Received: from 209.85.222.66 (EHLO mail-ua1-f66.google.com) by 10.214.140.253 with SMTPs (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256); Sun, 06 Feb 2022 08:48:05 +0000
Received: by mail-ua1-f66.google.com with SMTP id w18so14804260uar.8 for <rightwayautomotive@yahoo.com>; Sun, 06 Feb 2022 00:48:04 -0800 (PST)
Received: by 2002:ab0:5849:0:0:0:0:0 with HTTP; Sun, 6 Feb 2022 00:48:03 -0800 (PST)


Begin forwarded message:

From: Amer Ismail Trading Agency <mr.kelvindennis201@gmail.com>
Subject: Tender Invitation for FIFA 2022 world cup
Date: February 6, 2022 at 3:48:03 AM EST
To: undisclosed-recipients:;

Dear Sir,

I would like to know more about your products and your company.
Please send me a brochure, a product catalog and price details.Do you
have a sales point in Qatar, Hoping to receiving positive response
from you for more details about the supply.for FIFA 2022 world cup


E-Mail: aahmedtrading1@gmail.com
Mr.Amer Ismail
Director
Amer Ismail Trading Agency
Al Matar Commercial Center-Airport Road
# 104, First floor, P.O Box: 5283
Doha - Qatar. Supply
Tender Invitation for FIFA 2022 world cup


No comments:

Post a Comment