Donation spam from gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 05 Oct 2022 15:41:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1ogC7j-000Mgt-9n
for dave@doctor.nl2k.ab.ca;
Wed, 05 Oct 2022 15:40:15 -0600
Resent-From: The Doctor
Resent-Date: Wed, 5 Oct 2022 15:40:15 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f196.google.com ([209.85.214.196]:35473)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1ogACB-000Dfm-L7
for doctor@doctor.nl2k.ab.ca;
Wed, 05 Oct 2022 13:36:48 -0600
Received: by mail-pl1-f196.google.com with SMTP id h10so13568672plb.2
for; Wed, 05 Oct 2022 12:36:22 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=5ALorehvtiMjvs/UgTNsqXzIdWtyRpVJblewkbGuhsk=;
b=TeszWVirhkeyHPicTfgXv8C/gSAEFYcJkBkZpXxom25e3e7HStLG1he/r0ynuop+uO
7SvFFRVLSkdAYANELXXUBvu3JFQ+33tZfiN2uw2JB1oE/C8iYSu/yBTtnT0QYvH/rWXL
8n7AnVsdNuyBQcTXCf7nrVGAnqCowVgbdQQ0sHAvbtYDumJSJashBHXfWfPFcaz5pTQ8
tvQvRE6TdxoeMJdQJSre3Yy+trZEvszOmnZEG5F08yWLxtVEfGnXclLzEmX1Hu4P0ew4
hJMRXrCFCizxedz8tYHGap8qkVsGza29TrYepCeN3p0b5lzTm1BaTDLGMsR/Az+cu0DH
KYgA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=5ALorehvtiMjvs/UgTNsqXzIdWtyRpVJblewkbGuhsk=;
b=xLRCvBJZbk5aG9G39PRApkCDBhGO5jEBVarjD+ryZdnmFdcg6VlaW2h5fVMQGILoyg
+BoQpKqChTHiB1JllYGQ0pad6jrMZLo0ZNteDaeiR2Nnn3+JL0jyAhKtYaaec2iTXAXk
kE0VQMNWUFB7GWcJCghj3zTQo8m8Q4+GORl6EiaxTha1ZxtDJn3qV9V5swNkj4ya9UpC
jS51+bvo13mopmMw6m/TWmfBtCy0HD6jvDnEcSChxvaezwS6ZaWhTIN+kRF4qb7sVHs9
9p4wHpnhLHCG+tk7mqy5W4GxN5C4yhDzMB68OSE6x9fxS0GdJnKySgUkRNhhu9W6USNw
yvBg==
X-Gm-Message-State: ACrzQf0hFHSa5nhcWQFmvXdW4/NygddXjdNoKhgWdGI4OIue1eDntWL4
TuaSNLuLG8obv8BNdMmslgOqSXDw5TA272dze/4=
X-Google-Smtp-Source: AMsMyM6/r1Neey5GmIOoLWL+jjIWhyxLO2Gpj9e8XP4CRmd3PVHaDP7l6zkFh+ezD28HOx02SCfSlUb9u+jcNu0aZug=
X-Received: by 2002:a17:902:784d:b0:178:6946:3ff7 with SMTP id
e13-20020a170902784d00b0017869463ff7mr998863pln.133.1664998576818; Wed, 05
Oct 2022 12:36:16 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6a10:6813:b0:2f6:2baf:5015 with HTTP; Wed, 5 Oct 2022
12:36:16 -0700 (PDT)
Reply-To: brnclouise@gmail.com
From: "Mrs. Berenice"
Date: Wed, 5 Oct 2022 19:36:16 +0000
Message-ID:
Subject: have faith in God
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 8.2
X-Spam_score_int: 82
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: How are you doing and your family. I'm Mrs. Berenice Louise.
I have a fund of 3,600,000.00 EURO that I inherited from my late husband
that I want to donate through you for orphanage and charity project, but I
have been suffering from c [...]
Content analysis details: (8.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 HK_RANDOM_REPLYTO Reply-To username looks random
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[salicoullibaly[at]gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.214.196 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} have faith in God
How are you doing and your family.
I'm Mrs. Berenice Louise. I have a fund of 3,600,000.00 EURO that I
inherited from my late husband that I want to donate through you for
orphanage and charity project, but I have been suffering from cancer
illness for so long now which I have been admitted in a hospital for
treatment. My fear now is what the doctor informed me, after series of
tests on me that I may not live long because of the sickness and I'm afraid
of losing this fund to the government because they don't care about the
poor ones in the society.
I will appreciate your honesty and courage to handle this fund to help the
orphans and the charity home.
As soon as I receive your message regarding your interest in this fund to
help the charity home and the less privileges, I will give you more details
about this fund.
God bless you while I'm waiting for your answer.
Your sister.
Mrs. Berenice Louise
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 05 Oct 2022 15:41:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1ogC7j-000Mgt-9n
for dave@doctor.nl2k.ab.ca;
Wed, 05 Oct 2022 15:40:15 -0600
Resent-From: The Doctor
Resent-Date: Wed, 5 Oct 2022 15:40:15 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f196.google.com ([209.85.214.196]:35473)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1ogACB-000Dfm-L7
for doctor@doctor.nl2k.ab.ca;
Wed, 05 Oct 2022 13:36:48 -0600
Received: by mail-pl1-f196.google.com with SMTP id h10so13568672plb.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date;
bh=5ALorehvtiMjvs/UgTNsqXzIdWtyRpVJblewkbGuhsk=;
b=TeszWVirhkeyHPicTfgXv8C/gSAEFYcJkBkZpXxom25e3e7HStLG1he/r0ynuop+uO
7SvFFRVLSkdAYANELXXUBvu3JFQ+33tZfiN2uw2JB1oE/C8iYSu/yBTtnT0QYvH/rWXL
8n7AnVsdNuyBQcTXCf7nrVGAnqCowVgbdQQ0sHAvbtYDumJSJashBHXfWfPFcaz5pTQ8
tvQvRE6TdxoeMJdQJSre3Yy+trZEvszOmnZEG5F08yWLxtVEfGnXclLzEmX1Hu4P0ew4
hJMRXrCFCizxedz8tYHGap8qkVsGza29TrYepCeN3p0b5lzTm1BaTDLGMsR/Az+cu0DH
KYgA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date;
bh=5ALorehvtiMjvs/UgTNsqXzIdWtyRpVJblewkbGuhsk=;
b=xLRCvBJZbk5aG9G39PRApkCDBhGO5jEBVarjD+ryZdnmFdcg6VlaW2h5fVMQGILoyg
+BoQpKqChTHiB1JllYGQ0pad6jrMZLo0ZNteDaeiR2Nnn3+JL0jyAhKtYaaec2iTXAXk
kE0VQMNWUFB7GWcJCghj3zTQo8m8Q4+GORl6EiaxTha1ZxtDJn3qV9V5swNkj4ya9UpC
jS51+bvo13mopmMw6m/TWmfBtCy0HD6jvDnEcSChxvaezwS6ZaWhTIN+kRF4qb7sVHs9
9p4wHpnhLHCG+tk7mqy5W4GxN5C4yhDzMB68OSE6x9fxS0GdJnKySgUkRNhhu9W6USNw
yvBg==
X-Gm-Message-State: ACrzQf0hFHSa5nhcWQFmvXdW4/NygddXjdNoKhgWdGI4OIue1eDntWL4
TuaSNLuLG8obv8BNdMmslgOqSXDw5TA272dze/4=
X-Google-Smtp-Source: AMsMyM6/r1Neey5GmIOoLWL+jjIWhyxLO2Gpj9e8XP4CRmd3PVHaDP7l6zkFh+ezD28HOx02SCfSlUb9u+jcNu0aZug=
X-Received: by 2002:a17:902:784d:b0:178:6946:3ff7 with SMTP id
e13-20020a170902784d00b0017869463ff7mr998863pln.133.1664998576818; Wed, 05
Oct 2022 12:36:16 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6a10:6813:b0:2f6:2baf:5015 with HTTP; Wed, 5 Oct 2022
12:36:16 -0700 (PDT)
Reply-To: brnclouise@gmail.com
From: "Mrs. Berenice"
Date: Wed, 5 Oct 2022 19:36:16 +0000
Message-ID:
Subject: have faith in God
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 8.2
X-Spam_score_int: 82
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: How are you doing and your family. I'm Mrs. Berenice Louise.
I have a fund of 3,600,000.00 EURO that I inherited from my late husband
that I want to donate through you for orphanage and charity project, but I
have been suffering from c [...]
Content analysis details: (8.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 HK_RANDOM_REPLYTO Reply-To username looks random
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[salicoullibaly[at]gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.214.196 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} have faith in God
How are you doing and your family.
I'm Mrs. Berenice Louise. I have a fund of 3,600,000.00 EURO that I
inherited from my late husband that I want to donate through you for
orphanage and charity project, but I have been suffering from cancer
illness for so long now which I have been admitted in a hospital for
treatment. My fear now is what the doctor informed me, after series of
tests on me that I may not live long because of the sickness and I'm afraid
of losing this fund to the government because they don't care about the
poor ones in the society.
I will appreciate your honesty and courage to handle this fund to help the
orphans and the charity home.
As soon as I receive your message regarding your interest in this fund to
help the charity home and the less privileges, I will give you more details
about this fund.
God bless you while I'm waiting for your answer.
Your sister.
Mrs. Berenice Louise
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments