Donation spam from gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 22 Aug 2022 15:35:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oQF4E-000Eyn-NU
for dave@doctor.nl2k.ab.ca;
Mon, 22 Aug 2022 15:34:42 -0600
Resent-From: The Doctor
Resent-Date: Mon, 22 Aug 2022 15:34:42 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f54.google.com ([209.85.218.54]:41965)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oQEH8-0009oU-SK
for doctor@doctor.nl2k.ab.ca;
Mon, 22 Aug 2022 14:44:02 -0600
Received: by mail-ej1-f54.google.com with SMTP id sd33so2250638ejc.8
for; Mon, 22 Aug 2022 13:43:41 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=YOGiUx+DukGr0qOiQIzNFzczwWldok05t4Vj1fRhZfU=;
b=Ovxe1JIQLpeZytXut0LODSC7JqKpbyyP367LTPzaOk5trG63S301iQFwUXGM696ivq
nQXpeiS9O4DfBNx6qEcLaieiwnqkZNB1g2l9GnG1QSNOd66hqkJn3zoSzkJiM2u9mdxm
PR0JSpjgUjIH/rp3BCHewRtmz7b26IR28vZ4Ci9Ti2UDhASRsmyOYQphaS2iGXgMF2IH
bHuJNWFQmhUvXqUZ3WvJCq0b+oOE9R6L9WIjSrE631uaXEqUyLZP9VP2NCSKQu5+QXWh
IRgyS41YPk+AjaPD37fJH2WUj/uIbz7MIgteDnmE18bysAezwocLYAW+0aTL+hxldAzo
5j1w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=YOGiUx+DukGr0qOiQIzNFzczwWldok05t4Vj1fRhZfU=;
b=YyqbVHAw6M8NPP4y8rt0yXgV5qkOF5PuKePnELsy78KdlQJGQb7znHNgnCDckLfwO4
+HmicLltWiHfr51ySCqdy6opi0gHMK8/JinAvra3hQYXlEuOQm0vRgXZd+/u6IGCDZKB
ngKU8Iu7HmNFFXiJNC2rU3bRWH9Az8T4OgeRlyPaqDRuYCfcwgqpDWvJu3qfCTDySM3J
pgNmGndsW4dy0kxLgMet+DhSq96Njsn0rLE3a/UwrDBC82GkmPd+i7IqY6KCB6Lgv+6/
uf9wFj7fwmeVVvI/fTAZtafaah2GC3jThCcHSXc8shq8YhVIPMg/hHCF0pQXn/GmTp7t
Lwqw==
X-Gm-Message-State: ACgBeo2nMtsSNN9Cy6jNIkELJKabqulYm+blLHjvj6rBRLIAnKGrvVEw
ezZuPuNFbfZkVBVBwUqcpvNtB7FXhEnyJP8ujHE=
X-Google-Smtp-Source: AA6agR6y3lADXF7M9jBI3U4fzCVr99c9KZ0sJWb1SviE49YuO2HGKkfDpSxeJ/pLV+8lllrGWtNFup8cSBNpBcwcOo8=
X-Received: by 2002:a17:907:6d05:b0:73d:8092:91ea with SMTP id
sa5-20020a1709076d0500b0073d809291eamr4686366ejc.280.1661201014772; Mon, 22
Aug 2022 13:43:34 -0700 (PDT)
MIME-Version: 1.0
Reply-To: mrsjulianatimothy22@gmail.com
From: juliana timothy
Date: Mon, 22 Aug 2022 20:43:21 +0000
Message-ID:
Subject: I Have A Donation For You
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000062d8a405e6da808e"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 10.0
X-Spam_score_int: 100
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Greetings to you and your family. I am Mrs. Juliana Timothy
A widow to late Mr. Johnson Timothy of Ivory Coast" I am 58 years old, I
Have A Donation For You Contact Me For More Details May the Good [...]
Content analysis details: (10.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.54 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[julianatimothy10[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[julianatimothy10[at]gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mrsjulianatimothy22[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} I Have A Donation For You
--00000000000062d8a405e6da808e
Content-Type: text/plain; charset="UTF-8"
--
Greetings to you and your family. I am Mrs. Juliana Timothy A widow to
late Mr. Johnson Timothy of Ivory Coast" I am 58 years old, I Have A
Donation For You
Contact Me For More Details
May the Good Lord Bless You
--00000000000062d8a405e6da808e
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--
lass=3D"gmail_signature" data-smartmail=3D"gmail_signature">
"><=
/div>
--00000000000062d8a405e6da808e--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 22 Aug 2022 15:35:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oQF4E-000Eyn-NU
for dave@doctor.nl2k.ab.ca;
Mon, 22 Aug 2022 15:34:42 -0600
Resent-From: The Doctor
Resent-Date: Mon, 22 Aug 2022 15:34:42 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f54.google.com ([209.85.218.54]:41965)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oQEH8-0009oU-SK
for doctor@doctor.nl2k.ab.ca;
Mon, 22 Aug 2022 14:44:02 -0600
Received: by mail-ej1-f54.google.com with SMTP id sd33so2250638ejc.8
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;
bh=YOGiUx+DukGr0qOiQIzNFzczwWldok05t4Vj1fRhZfU=;
b=Ovxe1JIQLpeZytXut0LODSC7JqKpbyyP367LTPzaOk5trG63S301iQFwUXGM696ivq
nQXpeiS9O4DfBNx6qEcLaieiwnqkZNB1g2l9GnG1QSNOd66hqkJn3zoSzkJiM2u9mdxm
PR0JSpjgUjIH/rp3BCHewRtmz7b26IR28vZ4Ci9Ti2UDhASRsmyOYQphaS2iGXgMF2IH
bHuJNWFQmhUvXqUZ3WvJCq0b+oOE9R6L9WIjSrE631uaXEqUyLZP9VP2NCSKQu5+QXWh
IRgyS41YPk+AjaPD37fJH2WUj/uIbz7MIgteDnmE18bysAezwocLYAW+0aTL+hxldAzo
5j1w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc;
bh=YOGiUx+DukGr0qOiQIzNFzczwWldok05t4Vj1fRhZfU=;
b=YyqbVHAw6M8NPP4y8rt0yXgV5qkOF5PuKePnELsy78KdlQJGQb7znHNgnCDckLfwO4
+HmicLltWiHfr51ySCqdy6opi0gHMK8/JinAvra3hQYXlEuOQm0vRgXZd+/u6IGCDZKB
ngKU8Iu7HmNFFXiJNC2rU3bRWH9Az8T4OgeRlyPaqDRuYCfcwgqpDWvJu3qfCTDySM3J
pgNmGndsW4dy0kxLgMet+DhSq96Njsn0rLE3a/UwrDBC82GkmPd+i7IqY6KCB6Lgv+6/
uf9wFj7fwmeVVvI/fTAZtafaah2GC3jThCcHSXc8shq8YhVIPMg/hHCF0pQXn/GmTp7t
Lwqw==
X-Gm-Message-State: ACgBeo2nMtsSNN9Cy6jNIkELJKabqulYm+blLHjvj6rBRLIAnKGrvVEw
ezZuPuNFbfZkVBVBwUqcpvNtB7FXhEnyJP8ujHE=
X-Google-Smtp-Source: AA6agR6y3lADXF7M9jBI3U4fzCVr99c9KZ0sJWb1SviE49YuO2HGKkfDpSxeJ/pLV+8lllrGWtNFup8cSBNpBcwcOo8=
X-Received: by 2002:a17:907:6d05:b0:73d:8092:91ea with SMTP id
sa5-20020a1709076d0500b0073d809291eamr4686366ejc.280.1661201014772; Mon, 22
Aug 2022 13:43:34 -0700 (PDT)
MIME-Version: 1.0
Reply-To: mrsjulianatimothy22@gmail.com
From: juliana timothy
Date: Mon, 22 Aug 2022 20:43:21 +0000
Message-ID:
Subject: I Have A Donation For You
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="00000000000062d8a405e6da808e"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 10.0
X-Spam_score_int: 100
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Greetings to you and your family. I am Mrs. Juliana Timothy
A widow to late Mr. Johnson Timothy of Ivory Coast" I am 58 years old, I
Have A Donation For You Contact Me For More Details May the Good [...]
Content analysis details: (10.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.54 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[julianatimothy10[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[julianatimothy10[at]gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mrsjulianatimothy22[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} I Have A Donation For You
--00000000000062d8a405e6da808e
Content-Type: text/plain; charset="UTF-8"
--
Greetings to you and your family. I am Mrs. Juliana Timothy A widow to
late Mr. Johnson Timothy of Ivory Coast" I am 58 years old, I Have A
Donation For You
Contact Me For More Details
May the Good Lord Bless You
--00000000000062d8a405e6da808e
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
lass=3D"gmail_signature" data-smartmail=3D"gmail_signature">
">
=
Greetings to you and your family. I am Mrs. Juliana Timothy A widow to
>
Greetings to you and your family. I am Mrs. Juliana Timothy A widow to
>
late Mr. Johnson Timothy of Ivory Coast" I am 58 years old, I Ha=
ve A
ve A
Donation For You
Contact Me For More Details
=May the Good Lord Bless You
/div>
--00000000000062d8a405e6da808e--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments