Donation spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 08 Sep 2022 22:59:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oWVhu-0002Rm-6j
for dave@doctor.nl2k.ab.ca;
Thu, 08 Sep 2022 22:33:34 -0600
Resent-From: The Doctor
Resent-Date: Thu, 8 Sep 2022 22:33:34 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qt1-f196.google.com ([209.85.160.196]:47097)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oWUJW-000Jrs-It
for doctor@nl2k.ab.ca;
Thu, 08 Sep 2022 21:04:27 -0600
Received: by mail-qt1-f196.google.com with SMTP id cr9so374682qtb.13
for; Thu, 08 Sep 2022 20:04:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=vR9IVbBVJ6pQeYaMCnY12fNU/3f6Le/HP8yFCtRASmY=;
b=AMW7lQnag/oWvaisyoqE7MzUdEEFL6qSX7mpYJVsg1lK67fq1mlSOlXTkbxfWQ88L0
K1KwADzcB0QIuj1OGhj7/httquGi/LdhBBgAy9GubnEgXvYnot26Z0A0+IxHi95xbaSb
bxv7d2PbUpr8wlwBPt6VzlhImp6J8+TTStzJQztxU9KNDz0BDOOPNTlvJeqfpknNDzmM
x6g2Y9+iwvlj+ABYTIcaIvGs6i361YjjpQAvJqXoPbeCUd68g9v0UP7VV5eZxLPOHYdl
e+tPDUxCzJWHNzoGOAI+jtorY+62E/HVeoVBctZXqZoQ3XDoZBj8DHAGey4EY78XtQbz
surw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=vR9IVbBVJ6pQeYaMCnY12fNU/3f6Le/HP8yFCtRASmY=;
b=tpX0WckfU/WrkIWK1tzXGtLiB+XB/eKXyX4twe78K/jYa4QGeLIdf7LPerOoTm4CWi
H10OyhEW9k96JaMkCJ9gOzDFz9uO4UnHNjFpdbHjAHhLTZJ1x5bZf3Keoqlc4xcge4W5
p/3wI6NIrY1LzkFsK12DkthJEtzn28s40UBD472wYxmcimcgkXAyLgMq7UhId49xz2q9
zxR3p+b8AWvuuyCQ89XTMCb/n0xcZ5yfwKMNciSusNrty35794XWQZgFyKu5+Lzfhgc5
8XuiPTNt9gdcufo/68nEHgdn0rARkswADqA2cyNa/fOGS6d682XJel2Q0jT381u4PPL0
xQnQ==
X-Gm-Message-State: ACgBeo1AolJRxnlsP+IcUwyJqxVEjB/7qmwSFhkSK1GzU4vkGj3ggHqd
brqFrn5L8q0XhUJ1yeZ3B3fiXkVR0JE+mOudd/w=
X-Google-Smtp-Source: AA6agR7nLgr4xdSTlJLkGjcA12YdKT0h4+d+9ey/pWkG3JutVbRzuVSl9TMGm0BZmmbVTJ9yaBLFhdWum3n8MFHyL/A=
X-Received: by 2002:a05:622a:138b:b0:344:540b:d10b with SMTP id
o11-20020a05622a138b00b00344540bd10bmr10834148qtk.331.1662692635464; Thu, 08
Sep 2022 20:03:55 -0700 (PDT)
MIME-Version: 1.0
Reply-To: fcpdonations2020@gmail.com
From: "Mr & Mrs Frances & Patrick Connolly"
Date: Fri, 9 Sep 2022 03:03:43 +0000
Message-ID:
Subject: voluntary donation
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000e857b605e835cb3e"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 9.7
X-Spam_score_int: 97
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: BIG WIN: While reading this mail you should consider yourself
a lifetime winner and be optimistic about it. we are Mr & Mrs Frances & Patrick
Connolly, we live in Moira, Northern Ireland and we are th [...]
Content analysis details: (9.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[fcpdonations2020[at]gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.196 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[sophiaassibi2020[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[sophiaassibi2020[at]gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} voluntary donation
--000000000000e857b605e835cb3e
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
BIG WIN: While reading this mail you should consider yourself a lifetime
winner and be optimistic about it. we are Mr & Mrs Frances & Patrick
Connolly, we live in Moira, Northern Ireland and we are the successful
winner of =C2=A3115m Euro Millions win which all became possible through th=
e
optimistic mindset we were having and now we hope you will find same
mindset as we have choose you as one of the 50 lucky winners to receive
this month of September, 2022 Donation which happens to be =C2=A3925,000. F=
or
more information on this please reach out to this email:
fcpdonations2020@gmail.com
--000000000000e857b605e835cb3e
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--000000000000e857b605e835cb3e--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 08 Sep 2022 22:59:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oWVhu-0002Rm-6j
for dave@doctor.nl2k.ab.ca;
Thu, 08 Sep 2022 22:33:34 -0600
Resent-From: The Doctor
Resent-Date: Thu, 8 Sep 2022 22:33:34 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qt1-f196.google.com ([209.85.160.196]:47097)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oWUJW-000Jrs-It
for doctor@nl2k.ab.ca;
Thu, 08 Sep 2022 21:04:27 -0600
Received: by mail-qt1-f196.google.com with SMTP id cr9so374682qtb.13
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=vR9IVbBVJ6pQeYaMCnY12fNU/3f6Le/HP8yFCtRASmY=;
b=AMW7lQnag/oWvaisyoqE7MzUdEEFL6qSX7mpYJVsg1lK67fq1mlSOlXTkbxfWQ88L0
K1KwADzcB0QIuj1OGhj7/httquGi/LdhBBgAy9GubnEgXvYnot26Z0A0+IxHi95xbaSb
bxv7d2PbUpr8wlwBPt6VzlhImp6J8+TTStzJQztxU9KNDz0BDOOPNTlvJeqfpknNDzmM
x6g2Y9+iwvlj+ABYTIcaIvGs6i361YjjpQAvJqXoPbeCUd68g9v0UP7VV5eZxLPOHYdl
e+tPDUxCzJWHNzoGOAI+jtorY+62E/HVeoVBctZXqZoQ3XDoZBj8DHAGey4EY78XtQbz
surw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=vR9IVbBVJ6pQeYaMCnY12fNU/3f6Le/HP8yFCtRASmY=;
b=tpX0WckfU/WrkIWK1tzXGtLiB+XB/eKXyX4twe78K/jYa4QGeLIdf7LPerOoTm4CWi
H10OyhEW9k96JaMkCJ9gOzDFz9uO4UnHNjFpdbHjAHhLTZJ1x5bZf3Keoqlc4xcge4W5
p/3wI6NIrY1LzkFsK12DkthJEtzn28s40UBD472wYxmcimcgkXAyLgMq7UhId49xz2q9
zxR3p+b8AWvuuyCQ89XTMCb/n0xcZ5yfwKMNciSusNrty35794XWQZgFyKu5+Lzfhgc5
8XuiPTNt9gdcufo/68nEHgdn0rARkswADqA2cyNa/fOGS6d682XJel2Q0jT381u4PPL0
xQnQ==
X-Gm-Message-State: ACgBeo1AolJRxnlsP+IcUwyJqxVEjB/7qmwSFhkSK1GzU4vkGj3ggHqd
brqFrn5L8q0XhUJ1yeZ3B3fiXkVR0JE+mOudd/w=
X-Google-Smtp-Source: AA6agR7nLgr4xdSTlJLkGjcA12YdKT0h4+d+9ey/pWkG3JutVbRzuVSl9TMGm0BZmmbVTJ9yaBLFhdWum3n8MFHyL/A=
X-Received: by 2002:a05:622a:138b:b0:344:540b:d10b with SMTP id
o11-20020a05622a138b00b00344540bd10bmr10834148qtk.331.1662692635464; Thu, 08
Sep 2022 20:03:55 -0700 (PDT)
MIME-Version: 1.0
Reply-To: fcpdonations2020@gmail.com
From: "Mr & Mrs Frances & Patrick Connolly"
Date: Fri, 9 Sep 2022 03:03:43 +0000
Message-ID:
Subject: voluntary donation
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000e857b605e835cb3e"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 9.7
X-Spam_score_int: 97
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: BIG WIN: While reading this mail you should consider yourself
a lifetime winner and be optimistic about it. we are Mr & Mrs Frances & Patrick
Connolly, we live in Moira, Northern Ireland and we are th [...]
Content analysis details: (9.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[fcpdonations2020[at]gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.160.196 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[sophiaassibi2020[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[sophiaassibi2020[at]gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} voluntary donation
--000000000000e857b605e835cb3e
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
BIG WIN: While reading this mail you should consider yourself a lifetime
winner and be optimistic about it. we are Mr & Mrs Frances & Patrick
Connolly, we live in Moira, Northern Ireland and we are the successful
winner of =C2=A3115m Euro Millions win which all became possible through th=
e
optimistic mindset we were having and now we hope you will find same
mindset as we have choose you as one of the 50 lucky winners to receive
this month of September, 2022 Donation which happens to be =C2=A3925,000. F=
or
more information on this please reach out to this email:
fcpdonations2020@gmail.com
--000000000000e857b605e835cb3e
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
BIG WIN: While reading this mail you should consider yours=
elf =C2=A0a lifetime winner and =C2=A0be optimistic about it. we are Mr &am=
p; Mrs Frances & Patrick Connolly, we live in Moira, Northern Ireland a=
nd we are the successful winner of =C2=A3115m Euro Millions win which all b=
ecame possible through the =C2=A0optimistic mindset we were having and now =
we hope you will find same mindset as we have choose you as one of the 50 l=
ucky winners to receive this month of September, 2022 Donation which happen=
s to be =C2=A3925,000. For more information on this please reach out to thi=
s email: fcpdonations2020@gma=
il.com
elf =C2=A0a lifetime winner and =C2=A0be optimistic about it. we are Mr &am=
p; Mrs Frances & Patrick Connolly, we live in Moira, Northern Ireland a=
nd we are the successful winner of =C2=A3115m Euro Millions win which all b=
ecame possible through the =C2=A0optimistic mindset we were having and now =
we hope you will find same mindset as we have choose you as one of the 50 l=
ucky winners to receive this month of September, 2022 Donation which happen=
s to be =C2=A3925,000. For more information on this please reach out to thi=
s email: fcpdonations2020@gma=
il.com
--000000000000e857b605e835cb3e--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments