ROOTPLOIT

File: /home/bashacomputer/mail/cur/1738316474.M947989P3386935.node6122.myfcloud.com,S=8568,W=8735:2,
Envelope-to: info@bashacomputer.com
Delivery-date: Fri, 31 Jan 2025 12:41:14 +0300
Reply-To: Liam Clark <liamclark708@gmail.com>
From: DFC <aslanpoor.mohammad@okco.ir>
To: <info@bashacomputer.com>
Subject: Donation For Change
Date: Fri, 31 Jan 2025 03:40:07 -0600
Message-ID: <20250131034006.85FB80F072BCE5E3@okco.ir>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0012_BD8FAB2F.A6C07208"
Received-SPF: Fail (OKDC10016.okco.ir: domain of aslanpoor.mohammad@okco.ir
 does not designate 23.171.176.36 as permitted sender)
 receiver=OKDC10016.okco.ir; client-ip=23.171.176.36; helo=[23.171.176.36];
X-CrossPremisesHeadersFilteredBySendConnector: OKDC10016.okco.ir
X-OrganizationHeadersPreserved: OKDC10016.okco.ir
X-Spam-Status: No, score=4.7
X-Spam-Score: 47
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "node6122.myfcloud.com",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hello, I hope this message finds you well. I am reaching out
    to you from Donation For Change. In light of the financial hardships and
   inflation many are facing, you've been nominated for a grant to help ease
   these difficulties for you, those around you and your community. You are eligible
    to r [...] 
 Content analysis details:   (4.7 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
                             zen.spamhaus.org was blocked due to usage of an
                              open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [185.14.161.17 listed in zen.spamhaus.org]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [185.14.161.17 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [185.14.161.17 listed in sa-trusted.bondedsender.org]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: okco.ir]
  0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
                             dbl.spamhaus.org was blocked due to usage of an
                              open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [URI: okco.ir]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [185.14.161.17 listed in bl.score.senderscore.com]
  1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
               [Blocked - see <https://www.spamcop.net/bl.shtml?23.171.176.36>]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from author's
                             domain
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
  0.8 BAYES_50               BODY: Bayes spam probability is 40 to 60%
                             [score: 0.5000]
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
                             [liamclark708(at)gmail.com]
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 LOTS_OF_MONEY          Huge... sums of money
  1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  0.8 MONEY_FREEMAIL_REPTO   Lots of money from someone using free email?
X-Spam-Flag: NO

------=_NextPart_000_0012_BD8FAB2F.A6C07208
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hello,

I hope this message finds you well. I am reaching out to you from=20
Donation For Change.

In light of the financial hardships and inflation many are=20
facing, you've been nominated for a grant to help ease these=20
difficulties for you, those around you and your community. You=20
are eligible to receive a grant sum of Eight hundred thousand=20
Euros.

You can decline this offer. However, we would greatly appreciate=20
if you could nominate someone who you believe could benefit from=20
this grant.

Please respond to this email within 30 days to accept or decline=20
this offer. If we do not hear from you by then, we will assume=20
that you have declined the offer, and the funds will be made=20
available to the next nominee.

For more information contact: liamclark708@gmail.com
Thank you for your time

Liam Clark
Donation For Change
A legacy of generosity.

------=_NextPart_000_0012_BD8FAB2F.A6C07208
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML>

<html><head><title></title>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head>
<body style=3D"margin: 0.4em; font-family: System; font-size: 10pt;">
<div>Hello,<br><br>I hope this message finds you well. I am reaching out to=
 you from Donation For Change.<br><br>In light of the financial hardships a=
nd inflation many are facing, you've been nominated for a grant to help eas=
e these difficulties for you, those around you and your community. You are =
eligible to receive a grant sum of Eight hundred thousand Euros.<br><br>
You can decline this offer. However, we would greatly appreciate if you cou=
ld nominate someone who you believe could benefit from this grant.<br><br>P=
lease respond to this email within 30 days to accept or decline this offer.=
 If we do not hear from you by then, we will assume that you have declined =
the offer, and the funds will be made available to the next nominee.<br><br=
>For more information contact: <a href=3D"mailto:liamclark708@gmail.com">li=
amclark708@gmail.com</a><br>
Thank you for your time<span style=3D"font-size: 10pt;"></span><br><br>Liam=
 Clark<br>Donation For Change<br>A legacy of generosity.<span style=3D"font=
-size: 12pt;"></span></div>


</body></html>
------=_NextPart_000_0012_BD8FAB2F.A6C07208--