UN Charity Donation Spam
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 22 Jul 2022 15:31:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oF0E6-0006o8-4e
for dave@doctor.nl2k.ab.ca;
Fri, 22 Jul 2022 15:30:26 -0600
Resent-From: The Doctor
Resent-Date: Fri, 22 Jul 2022 15:30:26 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-cy1gcc01bn2020.outbound.protection.outlook.com ([52.100.19.20]:36841 helo=EUR04-VI1-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
id 1oExr1-000ImA-RU
for sales@nk.ca;
Fri, 22 Jul 2022 12:58:32 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=Mo9RbyFAEwMDIA27hZfvWtkQ5vrYyWB7SDw4LjOMhj1frVcVanzqqS6cCmJDdFozWVP6PlGV/9mpML+Q7+PzPLKOki8VmcTZuf6Wna7wMctRF4H/u11XUE0XDQEfwNDA38emfDOS3pyG0T5EhVw4pDUW+zeTzW4+hPZ0/HGZJ4oxC9kpD6NTHzNcEwq0ieZJfPn1qYkO3G1V7srBXnW3YGeQ5ENUid3HDM3+5/Dm0pQZeG6MURNtPvQrQ6zxVKCYAV0j2Qe8ZAxvj0UsTgfodfu9rKFxGyfh8SPhsOVrGnfD5n0HpuQbXUJvFujZmop/z+DkKvCZLjk55CRePtO5EA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=psglYXmtwCzWN28DaqpH5gqqB1TacLupP6Yx1K3dEj4=;
b=PdSmanAetRdzXxAds2fLZYfu1PNynQgLvhwuPDl6SIZNeUPTPlHG2OacC1snPZvyDhTUqIfP6MAuyn93OPyganDfVuo9vnNk7jkMPgf6ZNLLAkQSDMvsVvi9Q6SAt3YFyl79jw+wkMe68j3zK/OJpwFxW+mGDk4UXn8J6diUtoLp9fW3WITMAoFP7/LlFUc9FdFHkFSnGtWP8Y2jf9Zjay/wkeyeyxTmBpAQ0s9StDchXjkscKkb2JDpKhPQUDtIloxXGvbSiNpYkW5k7Me5//GUijeZ+7w9Ev9Srm8oMHgDGmuqRNWicEYOM+XFDA/gjEdNS6g4MiBEXtC3T4XXqA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is
193.183.126.23) smtp.rcpttodomain=nk.ca smtp.helo=smtp.husqvarnagroup.com;
dmarc=none; dkim=none (message not signed); arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=Husqvarnagroup.onmicrosoft.com; s=selector1-Husqvarnagroup-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=psglYXmtwCzWN28DaqpH5gqqB1TacLupP6Yx1K3dEj4=;
b=Lqqww7jFl33b3RmC1BlVcGZMj8M4/Swv/t7KY0e5ybkYf9Y9V06XH7Dt/hbiAiR55AbnZEH7SlDAFsEKYUMD1/iMEuPpVki/Txh0rVTg1TEbXV+Vqt042EhR1CE7gUD7bVc3NgnYb0eZdXOquE31D20WCJU9lswBQSgop1kXpnU=
Received: from AM6P193CA0100.EURP193.PROD.OUTLOOK.COM (2603:10a6:209:88::41)
by AM0PR0402MB3346.eurprd04.prod.outlook.com (2603:10a6:208:23::15) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5438.23; Fri, 22 Jul
2022 18:57:48 +0000
Received: from AM5EUR02FT032.eop-EUR02.prod.protection.outlook.com
(2603:10a6:209:88:cafe::a3) by AM6P193CA0100.outlook.office365.com
(2603:10a6:209:88::41) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5458.18 via Frontend
Transport; Fri, 22 Jul 2022 18:57:48 +0000
X-MS-Exchange-Authentication-Results: spf=none (sender IP is 193.183.126.23)
smtp.helo=smtp.husqvarnagroup.com; dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=;
Received-SPF: None (protection.outlook.com: smtp.husqvarnagroup.com does not
designate permitted sender hosts)
Received: from smtp.husqvarnagroup.com (193.183.126.23) by
AM5EUR02FT032.mail.protection.outlook.com (10.152.8.109) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id
15.20.5458.17 via Frontend Transport; Fri, 22 Jul 2022 18:57:47 +0000
Received: from AS400TGT.CP.ELECTROLUX-NA.COM ([10.80.249.221]) by smtp.husqvarnagroup.com with Microsoft SMTPSVC(8.5.9600.16384);
Fri, 22 Jul 2022 20:58:01 +0200
Received: from [192.168.43.247](::ffff:129.205.124.216[129.205.124.216])
by AS400TGT.CP.ELECTROLUX-NA.COM (IBM i SMTP 7.3.0) with TCP;
Fri, 22 Jul 2022 04:26:23 -0500
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: YOU HAVE A DONATION
To: Recipients <>
From: "UNITED WORLD CHARITY ORGANIZATIONS" <>
Date: Fri, 22 Jul 2022 17:24:26 +0800
Reply-To: unitednationsworldcharityorgan@gmail.com
Message-ID:
X-OriginalArrivalTime: 22 Jul 2022 18:58:01.0399 (UTC) FILETIME=[F7506470:01D89DFC]
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: a51c2dd3-2dce-4072-11bc-08da6c1411a8
X-MS-TrafficTypeDiagnostic: AM0PR0402MB3346:EE_
X-MS-Exchange-SenderADCheck: 2
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
=?iso-8859-1?Q?CTpji4Hos4GPO36y8TfCCPNziW6eJuez4l9BQdy4+1ONJKlqU4BQ/J+tAJ?=
=?iso-8859-1?Q?R3tSaRfaoCNEtEh0yR2gV9LGEg5qvHMWiI74YOPMECGnwN7rsDJQAf5yqB?=
=?iso-8859-1?Q?TyjylTLQ7kx2/gUPpOQe/3oWU7xzn5iLKdd7S0zVa08M6AX//pklfxnDCV?=
=?iso-8859-1?Q?xmcyOokuj7hwSvfGM4hK6wVVtQ6sLu25BOrBdhi8LPrg+T+u0JBGnM90XE?=
=?iso-8859-1?Q?f+jhE3II0P+X9LCBmAqTZVrGa76P59rr8RrCMh/yZAOIRayLwi0u1Q+sYU?=
=?iso-8859-1?Q?du4/L61xWDWBlyQHiaByxdaE3UGNbtxn6aOXj66lGjRHSQrgDLjOt8DTS8?=
=?iso-8859-1?Q?SQr/G7wEOd3+C3uIy1yxQ2h3v2PwLm/iSW9h6fppn4qXL9hB7Lqa1gDiuR?=
=?iso-8859-1?Q?cTmo6MOzqen6sSKn6iB7PqCkWzI8rwR/t3z5e5IMyX6OAjRyy98JA9Hbxn?=
=?iso-8859-1?Q?Dl31QIEcNUnnJ8joWilFpoavbiN3ZHubnNwGYDJm1kmd8DGwIqX15vDX9w?=
=?iso-8859-1?Q?cGSQRsnCY3PqikFyw7MZCFMEg5OnifKFvEii8JauLzTkBwVtKzzsPsq4nQ?=
=?iso-8859-1?Q?RV+6jiX4cvqQnk6UHgjYY67ojOTgJgAkpRN3bZQkEBcLPpalM0scwmu8P4?=
=?iso-8859-1?Q?vgXsKuhmkE6IRU7VZFVXx0hZFzdmfONjRwnUNjZt0E/7iaruZXE7IvpnJq?=
=?iso-8859-1?Q?8Q0mhdfPlrLt6VO+PChPIn5GuQQGt4Hb+KI0o0VA2qisvHf2QGx5/OtpAD?=
=?iso-8859-1?Q?rWvJc5NShuYBYkBUtXj+7wwn69A7HsHjtSNb7a//Lnj1fMayWqKLTlwhrK?=
=?iso-8859-1?Q?I+HFEKcaITIBwP8lCVKY+Qr8RzHJgs2T9y4ITMDpWO+o6KLq0zuKVRiHrN?=
=?iso-8859-1?Q?ntpPozGrv5Clgv+H5UVk/bE5zSstmR18RezjMdlgjUtoVjf4AkgKA8pHrz?=
=?iso-8859-1?Q?tKOMPILSEw1eF4tNNOf5y7i+FnTNdVfzHIOSFH3OpTA43gTajREC/kh+Y7?=
=?iso-8859-1?Q?UuuSSosUMfDHY9UnBbKO8smOVJpT0eWZd1eh5aqYbplmp+Gom0HYPm9J01?=
=?iso-8859-1?Q?ZL2Rpbl6Nc/ezeGmyJa3mMKVuHa/am/zLv8nL9BE9DVikjFYi8sQSqPJ01?=
=?iso-8859-1?Q?WTpgmf39borot/rNn1zVH/pzU7wJwvjCX0r6ZdHYTqNAEU1jhzvtqIBbk0?=
=?iso-8859-1?Q?XS99etK+cwvD9g=3D=3D?=
X-Forefront-Antispam-Report:
CIP:193.183.126.23;CTRY:SE;LANG:en;SCL:6;SRV:;IPV:NLI;SFV:SPM;H:smtp.husqvarnagroup.com;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230016)(4636009)(39860400002)(376002)(136003)(346002)(396003)(5005620100009)(40470700004)(46966006)(5660300002)(26005)(4743002)(508600001)(4744005)(356005)(41300700001)(8936002)(86362001)(2860700004)(316002)(40460700003)(109986005)(83380400001)(47076005)(956004)(336012)(81166007)(3480700007)(42882007)(40480700001)(35950700001)(70206006)(8676002)(70586007)(78352004)(2906002)(82310400005)(82740400003)(1557600019);DIR:OUT;SFP:1501;
X-OriginatorOrg: Husqvarnagroup.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Jul 2022 18:57:47.6469
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: a51c2dd3-2dce-4072-11bc-08da6c1411a8
X-MS-Exchange-CrossTenant-Id: 2a1c169e-715a-412b-b526-05da3f8412fa
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=2a1c169e-715a-412b-b526-05da3f8412fa;Ip=[193.183.126.23];Helo=[smtp.husqvarnagroup.com]
X-MS-Exchange-CrossTenant-AuthSource:
AM5EUR02FT032.eop-EUR02.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR0402MB3346
X-Spam_score: 11.4
X-Spam_score_int: 114
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: YOU HAVE A DONATION OF 2,000,000.00 GBP OF COVID19 SUPPORT
FROM UNITED WORLD CHARITY ORGANIZATIONS, FOR CHARITABLE WORK IN YOUR COUNTRY,
TO RECEIVE YOUR DONATION AMOUNT KINDLY SEND YOUR FULL DETAILS T [...]
Content analysis details: (11.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 TO_MALFORMED To: has a malformed address
0.0 AXB_X_FF_SEZ_S Forefront sez this is spam
2.6 FROM_NO_USER From: has no local-part before @ sign
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.0 FORGED_SPF_HELO No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
Subject: {SPAM?} YOU HAVE A DONATION
YOU HAVE A DONATION OF 2,000,000.00 GBP OF COVID19 SUPPORT FROM UNITED WORL=
D CHARITY ORGANIZATIONS, FOR CHARITABLE WORK IN YOUR COUNTRY, TO RECEIVE Y=
OUR DONATION AMOUNT KINDLY SEND YOUR FULL DETAILS TO VIA unitednationsworld=
charityorgan@gmail.com
The information in this email may be confidential and/or legally privileged=
. It has been sent for the sole use of the intended recipient(s). If you ar=
e not an intended recipient, you are strictly prohibited from reading, disc=
losing, distributing, copying or using this email or any of its contents, i=
n any way whatsoever. If you have received this email in error, please cont=
act the sender by reply email and destroy all copies of the original messag=
e. Please also be advised that emails are not a secure form for communicati=
on, and may contain errors.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 22 Jul 2022 15:31:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oF0E6-0006o8-4e
for dave@doctor.nl2k.ab.ca;
Fri, 22 Jul 2022 15:30:26 -0600
Resent-From: The Doctor
Resent-Date: Fri, 22 Jul 2022 15:30:26 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-cy1gcc01bn2020.outbound.protection.outlook.com ([52.100.19.20]:36841 helo=EUR04-VI1-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
id 1oExr1-000ImA-RU
for sales@nk.ca;
Fri, 22 Jul 2022 12:58:32 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=Mo9RbyFAEwMDIA27hZfvWtkQ5vrYyWB7SDw4LjOMhj1frVcVanzqqS6cCmJDdFozWVP6PlGV/9mpML+Q7+PzPLKOki8VmcTZuf6Wna7wMctRF4H/u11XUE0XDQEfwNDA38emfDOS3pyG0T5EhVw4pDUW+zeTzW4+hPZ0/HGZJ4oxC9kpD6NTHzNcEwq0ieZJfPn1qYkO3G1V7srBXnW3YGeQ5ENUid3HDM3+5/Dm0pQZeG6MURNtPvQrQ6zxVKCYAV0j2Qe8ZAxvj0UsTgfodfu9rKFxGyfh8SPhsOVrGnfD5n0HpuQbXUJvFujZmop/z+DkKvCZLjk55CRePtO5EA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=psglYXmtwCzWN28DaqpH5gqqB1TacLupP6Yx1K3dEj4=;
b=PdSmanAetRdzXxAds2fLZYfu1PNynQgLvhwuPDl6SIZNeUPTPlHG2OacC1snPZvyDhTUqIfP6MAuyn93OPyganDfVuo9vnNk7jkMPgf6ZNLLAkQSDMvsVvi9Q6SAt3YFyl79jw+wkMe68j3zK/OJpwFxW+mGDk4UXn8J6diUtoLp9fW3WITMAoFP7/LlFUc9FdFHkFSnGtWP8Y2jf9Zjay/wkeyeyxTmBpAQ0s9StDchXjkscKkb2JDpKhPQUDtIloxXGvbSiNpYkW5k7Me5//GUijeZ+7w9Ev9Srm8oMHgDGmuqRNWicEYOM+XFDA/gjEdNS6g4MiBEXtC3T4XXqA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is
193.183.126.23) smtp.rcpttodomain=nk.ca smtp.helo=smtp.husqvarnagroup.com;
dmarc=none; dkim=none (message not signed); arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=Husqvarnagroup.onmicrosoft.com; s=selector1-Husqvarnagroup-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=psglYXmtwCzWN28DaqpH5gqqB1TacLupP6Yx1K3dEj4=;
b=Lqqww7jFl33b3RmC1BlVcGZMj8M4/Swv/t7KY0e5ybkYf9Y9V06XH7Dt/hbiAiR55AbnZEH7SlDAFsEKYUMD1/iMEuPpVki/Txh0rVTg1TEbXV+Vqt042EhR1CE7gUD7bVc3NgnYb0eZdXOquE31D20WCJU9lswBQSgop1kXpnU=
Received: from AM6P193CA0100.EURP193.PROD.OUTLOOK.COM (2603:10a6:209:88::41)
by AM0PR0402MB3346.eurprd04.prod.outlook.com (2603:10a6:208:23::15) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5438.23; Fri, 22 Jul
2022 18:57:48 +0000
Received: from AM5EUR02FT032.eop-EUR02.prod.protection.outlook.com
(2603:10a6:209:88:cafe::a3) by AM6P193CA0100.outlook.office365.com
(2603:10a6:209:88::41) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5458.18 via Frontend
Transport; Fri, 22 Jul 2022 18:57:48 +0000
X-MS-Exchange-Authentication-Results: spf=none (sender IP is 193.183.126.23)
smtp.helo=smtp.husqvarnagroup.com; dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=;
Received-SPF: None (protection.outlook.com: smtp.husqvarnagroup.com does not
designate permitted sender hosts)
Received: from smtp.husqvarnagroup.com (193.183.126.23) by
AM5EUR02FT032.mail.protection.outlook.com (10.152.8.109) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id
15.20.5458.17 via Frontend Transport; Fri, 22 Jul 2022 18:57:47 +0000
Received: from AS400TGT.CP.ELECTROLUX-NA.COM ([10.80.249.221]) by smtp.husqvarnagroup.com with Microsoft SMTPSVC(8.5.9600.16384);
Fri, 22 Jul 2022 20:58:01 +0200
Received: from [192.168.43.247](::ffff:129.205.124.216[129.205.124.216])
by AS400TGT.CP.ELECTROLUX-NA.COM (IBM i SMTP 7.3.0) with TCP;
Fri, 22 Jul 2022 04:26:23 -0500
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: YOU HAVE A DONATION
To: Recipients <>
From: "UNITED WORLD CHARITY ORGANIZATIONS" <>
Date: Fri, 22 Jul 2022 17:24:26 +0800
Reply-To: unitednationsworldcharityorgan@gmail.com
Message-ID:
X-OriginalArrivalTime: 22 Jul 2022 18:58:01.0399 (UTC) FILETIME=[F7506470:01D89DFC]
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: a51c2dd3-2dce-4072-11bc-08da6c1411a8
X-MS-TrafficTypeDiagnostic: AM0PR0402MB3346:EE_
X-MS-Exchange-SenderADCheck: 2
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
=?iso-8859-1?Q?CTpji4Hos4GPO36y8TfCCPNziW6eJuez4l9BQdy4+1ONJKlqU4BQ/J+tAJ?=
=?iso-8859-1?Q?R3tSaRfaoCNEtEh0yR2gV9LGEg5qvHMWiI74YOPMECGnwN7rsDJQAf5yqB?=
=?iso-8859-1?Q?TyjylTLQ7kx2/gUPpOQe/3oWU7xzn5iLKdd7S0zVa08M6AX//pklfxnDCV?=
=?iso-8859-1?Q?xmcyOokuj7hwSvfGM4hK6wVVtQ6sLu25BOrBdhi8LPrg+T+u0JBGnM90XE?=
=?iso-8859-1?Q?f+jhE3II0P+X9LCBmAqTZVrGa76P59rr8RrCMh/yZAOIRayLwi0u1Q+sYU?=
=?iso-8859-1?Q?du4/L61xWDWBlyQHiaByxdaE3UGNbtxn6aOXj66lGjRHSQrgDLjOt8DTS8?=
=?iso-8859-1?Q?SQr/G7wEOd3+C3uIy1yxQ2h3v2PwLm/iSW9h6fppn4qXL9hB7Lqa1gDiuR?=
=?iso-8859-1?Q?cTmo6MOzqen6sSKn6iB7PqCkWzI8rwR/t3z5e5IMyX6OAjRyy98JA9Hbxn?=
=?iso-8859-1?Q?Dl31QIEcNUnnJ8joWilFpoavbiN3ZHubnNwGYDJm1kmd8DGwIqX15vDX9w?=
=?iso-8859-1?Q?cGSQRsnCY3PqikFyw7MZCFMEg5OnifKFvEii8JauLzTkBwVtKzzsPsq4nQ?=
=?iso-8859-1?Q?RV+6jiX4cvqQnk6UHgjYY67ojOTgJgAkpRN3bZQkEBcLPpalM0scwmu8P4?=
=?iso-8859-1?Q?vgXsKuhmkE6IRU7VZFVXx0hZFzdmfONjRwnUNjZt0E/7iaruZXE7IvpnJq?=
=?iso-8859-1?Q?8Q0mhdfPlrLt6VO+PChPIn5GuQQGt4Hb+KI0o0VA2qisvHf2QGx5/OtpAD?=
=?iso-8859-1?Q?rWvJc5NShuYBYkBUtXj+7wwn69A7HsHjtSNb7a//Lnj1fMayWqKLTlwhrK?=
=?iso-8859-1?Q?I+HFEKcaITIBwP8lCVKY+Qr8RzHJgs2T9y4ITMDpWO+o6KLq0zuKVRiHrN?=
=?iso-8859-1?Q?ntpPozGrv5Clgv+H5UVk/bE5zSstmR18RezjMdlgjUtoVjf4AkgKA8pHrz?=
=?iso-8859-1?Q?tKOMPILSEw1eF4tNNOf5y7i+FnTNdVfzHIOSFH3OpTA43gTajREC/kh+Y7?=
=?iso-8859-1?Q?UuuSSosUMfDHY9UnBbKO8smOVJpT0eWZd1eh5aqYbplmp+Gom0HYPm9J01?=
=?iso-8859-1?Q?ZL2Rpbl6Nc/ezeGmyJa3mMKVuHa/am/zLv8nL9BE9DVikjFYi8sQSqPJ01?=
=?iso-8859-1?Q?WTpgmf39borot/rNn1zVH/pzU7wJwvjCX0r6ZdHYTqNAEU1jhzvtqIBbk0?=
=?iso-8859-1?Q?XS99etK+cwvD9g=3D=3D?=
X-Forefront-Antispam-Report:
CIP:193.183.126.23;CTRY:SE;LANG:en;SCL:6;SRV:;IPV:NLI;SFV:SPM;H:smtp.husqvarnagroup.com;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230016)(4636009)(39860400002)(376002)(136003)(346002)(396003)(5005620100009)(40470700004)(46966006)(5660300002)(26005)(4743002)(508600001)(4744005)(356005)(41300700001)(8936002)(86362001)(2860700004)(316002)(40460700003)(109986005)(83380400001)(47076005)(956004)(336012)(81166007)(3480700007)(42882007)(40480700001)(35950700001)(70206006)(8676002)(70586007)(78352004)(2906002)(82310400005)(82740400003)(1557600019);DIR:OUT;SFP:1501;
X-OriginatorOrg: Husqvarnagroup.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Jul 2022 18:57:47.6469
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: a51c2dd3-2dce-4072-11bc-08da6c1411a8
X-MS-Exchange-CrossTenant-Id: 2a1c169e-715a-412b-b526-05da3f8412fa
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=2a1c169e-715a-412b-b526-05da3f8412fa;Ip=[193.183.126.23];Helo=[smtp.husqvarnagroup.com]
X-MS-Exchange-CrossTenant-AuthSource:
AM5EUR02FT032.eop-EUR02.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR0402MB3346
X-Spam_score: 11.4
X-Spam_score_int: 114
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: YOU HAVE A DONATION OF 2,000,000.00 GBP OF COVID19 SUPPORT
FROM UNITED WORLD CHARITY ORGANIZATIONS, FOR CHARITABLE WORK IN YOUR COUNTRY,
TO RECEIVE YOUR DONATION AMOUNT KINDLY SEND YOUR FULL DETAILS T [...]
Content analysis details: (11.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 TO_MALFORMED To: has a malformed address
0.0 AXB_X_FF_SEZ_S Forefront sez this is spam
2.6 FROM_NO_USER From: has no local-part before @ sign
1.6 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.0 FORGED_SPF_HELO No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
Subject: {SPAM?} YOU HAVE A DONATION
YOU HAVE A DONATION OF 2,000,000.00 GBP OF COVID19 SUPPORT FROM UNITED WORL=
D CHARITY ORGANIZATIONS, FOR CHARITABLE WORK IN YOUR COUNTRY, TO RECEIVE Y=
OUR DONATION AMOUNT KINDLY SEND YOUR FULL DETAILS TO VIA unitednationsworld=
charityorgan@gmail.com
The information in this email may be confidential and/or legally privileged=
. It has been sent for the sole use of the intended recipient(s). If you ar=
e not an intended recipient, you are strictly prohibited from reading, disc=
losing, distributing, copying or using this email or any of its contents, i=
n any way whatsoever. If you have received this email in error, please cont=
act the sender by reply email and destroy all copies of the original messag=
e. Please also be advised that emails are not a secure form for communicati=
on, and may contain errors.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments