Donation spam from gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 18 Aug 2022 14:10:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oOlpg-000BFl-SG
for dave@doctor.nl2k.ab.ca;
Thu, 18 Aug 2022 14:09:36 -0600
Resent-From: The Doctor
Resent-Date: Thu, 18 Aug 2022 14:09:36 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-io1-f50.google.com ([209.85.166.50]:34526)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oOh9m-000LHk-6r
for doctor@nl2k.ab.ca;
Thu, 18 Aug 2022 09:10:05 -0600
Received: by mail-io1-f50.google.com with SMTP id x64so1304595iof.1
for; Thu, 18 Aug 2022 08:09:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc;
bh=fq/FMo3N2YZ5gAL5l22vJq0j+A2OZhZuCvLwNurrkgc=;
b=hE2tyEoqtgPhcee3RMUbAXWocsFr6zWX0Tre6aOJS6cdWjsieRkGfQyRFSDp6zdUVe
LdokgfeTJ/hTlXe+pfW3pAnGn9kPQvm7q8WRiV42vgyRUKi8dYkgeilDpOFYAuikWCG5
SSxlWRUwqJU4hXo1u4tSZ8MLgLR+0mzW28kA/IWyCv8JIstdruyXozKb5+qs39OM8oj7
mndA0BVN+jbRwrjsPNHrMcVLrbjs+o0ie64mlXJQbrF6Prhw/N9me4dnFldO/8IgELNe
ih3xWS1d1lVGcTc8GI5WpOo31OpX22VUQcrGpX03NmS6TnpXBt4ASHEBs9lpeljEtKZL
kjXA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc;
bh=fq/FMo3N2YZ5gAL5l22vJq0j+A2OZhZuCvLwNurrkgc=;
b=zGTJjrtzIItO9JXnG3ULrkbwtfR1kNyO2q2ORtaHpPICDNc1cz86QR+NTXxiyfRixu
x1rzFUdC/ltJgP5g4yEUhf/y+XPiLqGsP0ytWuLlSGGWloiIlo109eGgJoAleCkIG+A9
tkzFIgM5glERLHS6gL/AMwez0dRxIbVaEOTB0tlgF94EMrDODpftKGx8EfbnVMt/CknZ
pZ/oeIRqZ2o0QATo0w0u3rw47tHlN1P7gjoGcxz4K0d8aPCSuUzAvV7eI3A5NqLDhIfo
qn4NEYx2iESEbWkdGJjtqww0u3f9NwWx6+KjZvDsxHJ2KQuSAH40wSb0X4MobeYhsIwz
JaWg==
X-Gm-Message-State: ACgBeo1H/33CXjPhIXiONfDOIkenhboUOiP8nBymDEs9lE2a6DrwIs3m
HWBUQoEII8XB+WG49uYg8KdJCBYhkWZsM0DcHp4=
X-Google-Smtp-Source: AA6agR7oeUNpeoXSgy6tfzLE37RkkXWMAHrNUfq3cBJ4fL+ozy+1fRP7J+dZtp7ukFi0k7Tkh7oxb4nPylAQBXaUtvU=
X-Received: by 2002:a05:6638:14c5:b0:343:4296:3d28 with SMTP id
l5-20020a05663814c500b0034342963d28mr1612332jak.36.1660835378514; Thu, 18 Aug
2022 08:09:38 -0700 (PDT)
MIME-Version: 1.0
Sender: elizabeth.hoisington2@gmail.com
Received: by 2002:a05:6e02:681:0:0:0:0 with HTTP; Thu, 18 Aug 2022 08:09:37
-0700 (PDT)
From: "Mrs Yu. Ging Yunnan"
Date: Thu, 18 Aug 2022 15:09:37 +0000
X-Google-Sender-Auth: xFxwNMMEmOLqIsB1jWMINXUscfs
Message-ID:
Subject: hello dear
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 6.8
X-Spam_score_int: 68
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: hello I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the
doctor said I will not survive it because all vaccines has been given to
me but to no avian, am a China woman but I base here in France because am
married here and I have no child for my late husband and now am a widow.
Content analysis details: (6.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.50 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[elizabeth.hoisington2[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[elizabeth.hoisington2[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 MILLION_USD BODY: Talks about millions of dollars
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} hello dear
hello
I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor said I
will not survive it because all vaccines has been given to me but to
no avian, am a China
woman but I base here in France because am married here and I have no
child for my late husband and now am a widow.
My reason of communicating you is that i have $9.2million USD which
was deposited in BNP Paribas Bank here in France by my late husband
which am the next of
kin to and I want you to stand as the beneficiary for the claim now
that am about to end my race according to my doctor.
I will want you to use the fund to build an orphanage home in my name
there in your country, please kindly reply to this message urgently if
willing to handle this project.
Mrs Yu. Ging Yunnan.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 18 Aug 2022 14:10:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oOlpg-000BFl-SG
for dave@doctor.nl2k.ab.ca;
Thu, 18 Aug 2022 14:09:36 -0600
Resent-From: The Doctor
Resent-Date: Thu, 18 Aug 2022 14:09:36 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-io1-f50.google.com ([209.85.166.50]:34526)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oOh9m-000LHk-6r
for doctor@nl2k.ab.ca;
Thu, 18 Aug 2022 09:10:05 -0600
Received: by mail-io1-f50.google.com with SMTP id x64so1304595iof.1
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc;
bh=fq/FMo3N2YZ5gAL5l22vJq0j+A2OZhZuCvLwNurrkgc=;
b=hE2tyEoqtgPhcee3RMUbAXWocsFr6zWX0Tre6aOJS6cdWjsieRkGfQyRFSDp6zdUVe
LdokgfeTJ/hTlXe+pfW3pAnGn9kPQvm7q8WRiV42vgyRUKi8dYkgeilDpOFYAuikWCG5
SSxlWRUwqJU4hXo1u4tSZ8MLgLR+0mzW28kA/IWyCv8JIstdruyXozKb5+qs39OM8oj7
mndA0BVN+jbRwrjsPNHrMcVLrbjs+o0ie64mlXJQbrF6Prhw/N9me4dnFldO/8IgELNe
ih3xWS1d1lVGcTc8GI5WpOo31OpX22VUQcrGpX03NmS6TnpXBt4ASHEBs9lpeljEtKZL
kjXA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc;
bh=fq/FMo3N2YZ5gAL5l22vJq0j+A2OZhZuCvLwNurrkgc=;
b=zGTJjrtzIItO9JXnG3ULrkbwtfR1kNyO2q2ORtaHpPICDNc1cz86QR+NTXxiyfRixu
x1rzFUdC/ltJgP5g4yEUhf/y+XPiLqGsP0ytWuLlSGGWloiIlo109eGgJoAleCkIG+A9
tkzFIgM5glERLHS6gL/AMwez0dRxIbVaEOTB0tlgF94EMrDODpftKGx8EfbnVMt/CknZ
pZ/oeIRqZ2o0QATo0w0u3rw47tHlN1P7gjoGcxz4K0d8aPCSuUzAvV7eI3A5NqLDhIfo
qn4NEYx2iESEbWkdGJjtqww0u3f9NwWx6+KjZvDsxHJ2KQuSAH40wSb0X4MobeYhsIwz
JaWg==
X-Gm-Message-State: ACgBeo1H/33CXjPhIXiONfDOIkenhboUOiP8nBymDEs9lE2a6DrwIs3m
HWBUQoEII8XB+WG49uYg8KdJCBYhkWZsM0DcHp4=
X-Google-Smtp-Source: AA6agR7oeUNpeoXSgy6tfzLE37RkkXWMAHrNUfq3cBJ4fL+ozy+1fRP7J+dZtp7ukFi0k7Tkh7oxb4nPylAQBXaUtvU=
X-Received: by 2002:a05:6638:14c5:b0:343:4296:3d28 with SMTP id
l5-20020a05663814c500b0034342963d28mr1612332jak.36.1660835378514; Thu, 18 Aug
2022 08:09:38 -0700 (PDT)
MIME-Version: 1.0
Sender: elizabeth.hoisington2@gmail.com
Received: by 2002:a05:6e02:681:0:0:0:0 with HTTP; Thu, 18 Aug 2022 08:09:37
-0700 (PDT)
From: "Mrs Yu. Ging Yunnan"
Date: Thu, 18 Aug 2022 15:09:37 +0000
X-Google-Sender-Auth: xFxwNMMEmOLqIsB1jWMINXUscfs
Message-ID:
Subject: hello dear
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 6.8
X-Spam_score_int: 68
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: hello I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the
doctor said I will not survive it because all vaccines has been given to
me but to no avian, am a China woman but I base here in France because am
married here and I have no child for my late husband and now am a widow.
Content analysis details: (6.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.50 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[elizabeth.hoisington2[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[elizabeth.hoisington2[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 MILLION_USD BODY: Talks about millions of dollars
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} hello dear
hello
I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor said I
will not survive it because all vaccines has been given to me but to
no avian, am a China
woman but I base here in France because am married here and I have no
child for my late husband and now am a widow.
My reason of communicating you is that i have $9.2million USD which
was deposited in BNP Paribas Bank here in France by my late husband
which am the next of
kin to and I want you to stand as the beneficiary for the claim now
that am about to end my race according to my doctor.
I will want you to use the fund to build an orphanage home in my name
there in your country, please kindly reply to this message urgently if
willing to handle this project.
Mrs Yu. Ging Yunnan.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments