donation spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 16 Aug 2022 17:45:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oO6EQ-000Fqc-Fj
for dave@doctor.nl2k.ab.ca;
Tue, 16 Aug 2022 17:44:22 -0600
Resent-From: The Doctor
Resent-Date: Tue, 16 Aug 2022 17:44:22 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qv1-f47.google.com ([209.85.219.47]:42769)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oO5Nk-000AcX-D3
for doctor@doctor.nl2k.ab.ca;
Tue, 16 Aug 2022 16:50:00 -0600
Received: by mail-qv1-f47.google.com with SMTP id ct13so8941294qvb.9
for; Tue, 16 Aug 2022 15:49:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=xkKZg6nTPN5oEcZOgQInI9b5tTqWEKa5Rt6dBsa65jo=;
b=ARXXpOn9oJNltS8N8qSqpc3Ei66DgPq6Dh2Kj8TDdGNeHltuFllo2y5PIs8H6r680y
O/nXy+ZJQkksQ3LxexIxUPDmrS+6cDt+Ak4j7dMtsuZVYhV5LZ0s0l8/ADFWav62RykI
ieiOBCPSDlVYFnCHZesix95OFf7YFmY5RUkVHPP6sEYFOkRZ5sOHEHV6kELR21RpF4YO
TNGifBbYO1g8pCntY0Ef8Mu83v6gWbXDK7Vi1FuFYX1eIGts87hgDSuurXX7YFfQSgBt
UFS5tXbx9BWfC/g9nbP2GKcNDaHVkHYNE3SqsPmvetgvievc4b3HCYE74nUPqnT7MYVa
kytA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=xkKZg6nTPN5oEcZOgQInI9b5tTqWEKa5Rt6dBsa65jo=;
b=HXsJAAspDsjPR31cuboCUS0QqlHR+BPr2tzeDMrhQ39mbjLHSTvUxxlricQKiAYwh8
+D9CL/SE2wtvDH+XfmZt5f3SXJw6LlM7XWwuHXzQ8PlKi8wYTFcKCk2P7pgsCAiB2csu
YBBBLt8tFH3qFP8M+JsjLWUrCZyqFp/fSuIOO0bJpzGooWWGAa1Hxy5cSzctODVsY9rR
BnPckx1l6FL3319qsyKVaqstt/YOPORCH2NhwTViUXBdlY9WyTOii/VdGo4HVudYXree
EC+LVkq/qFtRD56hLY/8EUXEq+Xg3tIwQe9snHvMbNCli8MogaunVdNsbsSqAwVjKxfo
kSug==
X-Gm-Message-State: ACgBeo05oMcq1DfNlJNlz2gegVkf20WTIDT6TV913iu50aCTlJXf1bXs
cfbQEFiXbHaWULFKZDEBxto10OTvI/6TOs0ZNlc=
X-Google-Smtp-Source: AA6agR4sLfesbMNE1JlfJFTlirbnI/YLta/18dixs4KH/MDNrtN/ap7BlD75syyqI+BMCKozz8VxxfRss2lXuGc6qJ8=
X-Received: by 2002:ad4:4eab:0:b0:47e:cada:d63d with SMTP id
ed11-20020ad44eab000000b0047ecadad63dmr19789889qvb.48.1660690172989; Tue, 16
Aug 2022 15:49:32 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:620a:f06:0:0:0:0 with HTTP; Tue, 16 Aug 2022 15:49:32
-0700 (PDT)
Reply-To: sigridruasungs@gmail.com
From: sigrid ruasungs
Date: Tue, 16 Aug 2022 15:49:32 -0700
Message-ID:
Subject: RE:
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 8.8
X-Spam_score_int: 88
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- I will donate 1,000,000.00 euros to you and challenge you
to help someone close to you with the little you can. For more information
about me, see my Wikipedia here: https://en.wikipedia.org/wiki/Sigrid_Rausing
.
Content analysis details: (8.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.47 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[simonkipruto67[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[simonkipruto67[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} RE:
--
I will donate 1,000,000.00 euros to you and challenge you to help
someone close to you with the little you can.
For more information about me, see my Wikipedia here:
https://en.wikipedia.org/wiki/Sigrid_Rausing .
Contact me on: sigridruasungs@gmail.com
Regards
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 16 Aug 2022 17:45:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oO6EQ-000Fqc-Fj
for dave@doctor.nl2k.ab.ca;
Tue, 16 Aug 2022 17:44:22 -0600
Resent-From: The Doctor
Resent-Date: Tue, 16 Aug 2022 17:44:22 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qv1-f47.google.com ([209.85.219.47]:42769)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oO5Nk-000AcX-D3
for doctor@doctor.nl2k.ab.ca;
Tue, 16 Aug 2022 16:50:00 -0600
Received: by mail-qv1-f47.google.com with SMTP id ct13so8941294qvb.9
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=xkKZg6nTPN5oEcZOgQInI9b5tTqWEKa5Rt6dBsa65jo=;
b=ARXXpOn9oJNltS8N8qSqpc3Ei66DgPq6Dh2Kj8TDdGNeHltuFllo2y5PIs8H6r680y
O/nXy+ZJQkksQ3LxexIxUPDmrS+6cDt+Ak4j7dMtsuZVYhV5LZ0s0l8/ADFWav62RykI
ieiOBCPSDlVYFnCHZesix95OFf7YFmY5RUkVHPP6sEYFOkRZ5sOHEHV6kELR21RpF4YO
TNGifBbYO1g8pCntY0Ef8Mu83v6gWbXDK7Vi1FuFYX1eIGts87hgDSuurXX7YFfQSgBt
UFS5tXbx9BWfC/g9nbP2GKcNDaHVkHYNE3SqsPmvetgvievc4b3HCYE74nUPqnT7MYVa
kytA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=xkKZg6nTPN5oEcZOgQInI9b5tTqWEKa5Rt6dBsa65jo=;
b=HXsJAAspDsjPR31cuboCUS0QqlHR+BPr2tzeDMrhQ39mbjLHSTvUxxlricQKiAYwh8
+D9CL/SE2wtvDH+XfmZt5f3SXJw6LlM7XWwuHXzQ8PlKi8wYTFcKCk2P7pgsCAiB2csu
YBBBLt8tFH3qFP8M+JsjLWUrCZyqFp/fSuIOO0bJpzGooWWGAa1Hxy5cSzctODVsY9rR
BnPckx1l6FL3319qsyKVaqstt/YOPORCH2NhwTViUXBdlY9WyTOii/VdGo4HVudYXree
EC+LVkq/qFtRD56hLY/8EUXEq+Xg3tIwQe9snHvMbNCli8MogaunVdNsbsSqAwVjKxfo
kSug==
X-Gm-Message-State: ACgBeo05oMcq1DfNlJNlz2gegVkf20WTIDT6TV913iu50aCTlJXf1bXs
cfbQEFiXbHaWULFKZDEBxto10OTvI/6TOs0ZNlc=
X-Google-Smtp-Source: AA6agR4sLfesbMNE1JlfJFTlirbnI/YLta/18dixs4KH/MDNrtN/ap7BlD75syyqI+BMCKozz8VxxfRss2lXuGc6qJ8=
X-Received: by 2002:ad4:4eab:0:b0:47e:cada:d63d with SMTP id
ed11-20020ad44eab000000b0047ecadad63dmr19789889qvb.48.1660690172989; Tue, 16
Aug 2022 15:49:32 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:620a:f06:0:0:0:0 with HTTP; Tue, 16 Aug 2022 15:49:32
-0700 (PDT)
Reply-To: sigridruasungs@gmail.com
From: sigrid ruasungs
Date: Tue, 16 Aug 2022 15:49:32 -0700
Message-ID:
Subject: RE:
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 8.8
X-Spam_score_int: 88
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- I will donate 1,000,000.00 euros to you and challenge you
to help someone close to you with the little you can. For more information
about me, see my Wikipedia here: https://en.wikipedia.org/wiki/Sigrid_Rausing
.
Content analysis details: (8.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.47 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[simonkipruto67[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[simonkipruto67[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} RE:
--
I will donate 1,000,000.00 euros to you and challenge you to help
someone close to you with the little you can.
For more information about me, see my Wikipedia here:
https://en.wikipedia.org/wiki/Sigrid_Rausing .
Contact me on: sigridruasungs@gmail.com
Regards
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments