Donation spam from gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 17 Feb 2023 15:55:53 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1pT9dU-000CKq-1U
for dave@doctor.nl2k.ab.ca;
Fri, 17 Feb 2023 15:55:24 -0700
Resent-From: The Doctor
Resent-Date: Fri, 17 Feb 2023 15:55:24 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs1-f46.google.com ([209.85.217.46]:39680)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1pT9V9-000Bbu-2R
for root@nk.ca;
Fri, 17 Feb 2023 15:46:44 -0700
Received: by mail-vs1-f46.google.com with SMTP id w5so1120752vsl.6
for; Fri, 17 Feb 2023 14:44:42 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=cAoRZT/8V5E/xZjQalljRT3M8BBYl/iV6OH0cfmoeRs=;
b=AXpGPM2X4dGHZc/wcZPrkwp+0STWLIDf68REsogOJJhKxdklz0Xe0PK+qRHm5nqzkU
KyH97LV8DZtOGDSQ7qpCApXOGd666/PaG2SttaRroAvNRq2KqHVkXPh+BkyC+iOrMmfJ
Z1VWOy4NJVHEqvtRCWLy3tRDFjIhCGzHquQrGRLAJpnRD+rMcFCB1I0GaHgyDnWy3w1W
lPT2n7TNqAhXfyRAdozf2SS3bGquw79me5wBpfYwOzWByBxt+eIbBIWNwSSpLL4XiUxo
/HGYSqrjJ10cflZvaEA+JyOaQoNiTFkQXkz+BltUtFqAbv1wwPFV348Up5KnOuE+CNX3
7HqA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=cAoRZT/8V5E/xZjQalljRT3M8BBYl/iV6OH0cfmoeRs=;
b=0Ax/Mepqj0B5tRmE7v3YnGv7bK/hM2QlaoB48MuSZdYmXUkTDpYsge978HxdaC4QT8
BNZP927AQS/dHlANX+yh0u39nrG1Sj/0ev7Xqlb7zgXk/vTy15eF9/HIbLBNVM5aQvGR
zkrsNnTkAZYGzCY8PR17vmN10yt4572AGe6IQmPP80V+37uRh23Rvps1q8P4KzivTwQT
xd6GpHfFQ56+ddrN6tFgu2fp2UqwNv9PKKT/9GRGzMv+CaNenxMeMAlowld6kDO24oNQ
t9v9z9Ty+y1f2RCbnLd5Djt22zRa1Rce8vX1/z6aZDPM4f+9GOzMeQnqt6+PiTET7ir4
kNrA==
X-Gm-Message-State: AO0yUKXWviHfTReBZxq8yw9nY/5KD1Hl5Pul2MC7snAyd75ddP3XAxZC
tTqmOOLkKThZxhvyZISBPfe69NsXhw18CwONIOs=
X-Google-Smtp-Source: AK7set9gEPjbru5CP7ncA4B0r7jJqNrk7vtmrfmml1pioSkYILgLsTaLhja5loaWXk9EO9S/mF2WpLURilia3sAt2OI=
X-Received: by 2002:a67:fe4b:0:b0:414:cd37:4da8 with SMTP id
m11-20020a67fe4b000000b00414cd374da8mr810413vsr.83.1676673876054; Fri, 17 Feb
2023 14:44:36 -0800 (PST)
MIME-Version: 1.0
Reply-To: ceobeateheister@gmail.com
From: Ms Beate Heister
Date: Fri, 17 Feb 2023 14:44:24 -0800
Message-ID:
Subject: donation
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000c9581605f4ed0ee7"
Bcc: root@nk.ca
X-Spam_score: 7.0
X-Spam_score_int: 70
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: 25 percent of my personal wealth is spent for charity. And
I also promised the remaining 25% to give away this year; You have been selected
to receive this charitable donation of 2,800,000.00 Euro Thi [...]
Content analysis details: (7.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.217.46 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[emmanuelobizeee(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.217.46 listed in wl.mailspike.net]
Subject: {SPAM?} donation
--000000000000c9581605f4ed0ee7
Content-Type: text/plain; charset="UTF-8"
25 percent of my personal wealth is spent for charity. And I also promised
the remaining 25% to give away this year; You have been selected to receive
this charitable donation of 2,800,000.00 Euro This is part of my promises
to the charity project this year, My reason for this donation is to improve
the lives of many individuals in your local area and for your personal use
contact me for more information.
--000000000000c9581605f4ed0ee7
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--000000000000c9581605f4ed0ee7--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 17 Feb 2023 15:55:53 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1pT9dU-000CKq-1U
for dave@doctor.nl2k.ab.ca;
Fri, 17 Feb 2023 15:55:24 -0700
Resent-From: The Doctor
Resent-Date: Fri, 17 Feb 2023 15:55:24 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs1-f46.google.com ([209.85.217.46]:39680)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1pT9V9-000Bbu-2R
for root@nk.ca;
Fri, 17 Feb 2023 15:46:44 -0700
Received: by mail-vs1-f46.google.com with SMTP id w5so1120752vsl.6
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=cAoRZT/8V5E/xZjQalljRT3M8BBYl/iV6OH0cfmoeRs=;
b=AXpGPM2X4dGHZc/wcZPrkwp+0STWLIDf68REsogOJJhKxdklz0Xe0PK+qRHm5nqzkU
KyH97LV8DZtOGDSQ7qpCApXOGd666/PaG2SttaRroAvNRq2KqHVkXPh+BkyC+iOrMmfJ
Z1VWOy4NJVHEqvtRCWLy3tRDFjIhCGzHquQrGRLAJpnRD+rMcFCB1I0GaHgyDnWy3w1W
lPT2n7TNqAhXfyRAdozf2SS3bGquw79me5wBpfYwOzWByBxt+eIbBIWNwSSpLL4XiUxo
/HGYSqrjJ10cflZvaEA+JyOaQoNiTFkQXkz+BltUtFqAbv1wwPFV348Up5KnOuE+CNX3
7HqA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=to:subject:message-id:date:from:reply-to:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=cAoRZT/8V5E/xZjQalljRT3M8BBYl/iV6OH0cfmoeRs=;
b=0Ax/Mepqj0B5tRmE7v3YnGv7bK/hM2QlaoB48MuSZdYmXUkTDpYsge978HxdaC4QT8
BNZP927AQS/dHlANX+yh0u39nrG1Sj/0ev7Xqlb7zgXk/vTy15eF9/HIbLBNVM5aQvGR
zkrsNnTkAZYGzCY8PR17vmN10yt4572AGe6IQmPP80V+37uRh23Rvps1q8P4KzivTwQT
xd6GpHfFQ56+ddrN6tFgu2fp2UqwNv9PKKT/9GRGzMv+CaNenxMeMAlowld6kDO24oNQ
t9v9z9Ty+y1f2RCbnLd5Djt22zRa1Rce8vX1/z6aZDPM4f+9GOzMeQnqt6+PiTET7ir4
kNrA==
X-Gm-Message-State: AO0yUKXWviHfTReBZxq8yw9nY/5KD1Hl5Pul2MC7snAyd75ddP3XAxZC
tTqmOOLkKThZxhvyZISBPfe69NsXhw18CwONIOs=
X-Google-Smtp-Source: AK7set9gEPjbru5CP7ncA4B0r7jJqNrk7vtmrfmml1pioSkYILgLsTaLhja5loaWXk9EO9S/mF2WpLURilia3sAt2OI=
X-Received: by 2002:a67:fe4b:0:b0:414:cd37:4da8 with SMTP id
m11-20020a67fe4b000000b00414cd374da8mr810413vsr.83.1676673876054; Fri, 17 Feb
2023 14:44:36 -0800 (PST)
MIME-Version: 1.0
Reply-To: ceobeateheister@gmail.com
From: Ms Beate Heister
Date: Fri, 17 Feb 2023 14:44:24 -0800
Message-ID:
Subject: donation
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000c9581605f4ed0ee7"
Bcc: root@nk.ca
X-Spam_score: 7.0
X-Spam_score_int: 70
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: 25 percent of my personal wealth is spent for charity. And
I also promised the remaining 25% to give away this year; You have been selected
to receive this charitable donation of 2,800,000.00 Euro Thi [...]
Content analysis details: (7.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.217.46 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[emmanuelobizeee(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.217.46 listed in wl.mailspike.net]
Subject: {SPAM?} donation
--000000000000c9581605f4ed0ee7
Content-Type: text/plain; charset="UTF-8"
25 percent of my personal wealth is spent for charity. And I also promised
the remaining 25% to give away this year; You have been selected to receive
this charitable donation of 2,800,000.00 Euro This is part of my promises
to the charity project this year, My reason for this donation is to improve
the lives of many individuals in your local area and for your personal use
contact me for more information.
--000000000000c9581605f4ed0ee7
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
25 percent of my personal wealth is spent for charity. And=
I also promised the remaining 25% to give away this year; You have been se=
lected to receive this charitable donation of 2,800,000.00 Euro =C2=A0This =
is part of my promises to the charity project this year, My reason for this=
donation is to improve the lives of many individuals in your local area an=
d for your personal use contact me for more information.=C2=A0
I also promised the remaining 25% to give away this year; You have been se=
lected to receive this charitable donation of 2,800,000.00 Euro =C2=A0This =
is part of my promises to the charity project this year, My reason for this=
donation is to improve the lives of many individuals in your local area an=
d for your personal use contact me for more information.=C2=A0
--000000000000c9581605f4ed0ee7--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments