This is my truth

Qatar cares

It's a pretty low-energy solicitation, really only deserving of an equally low-energy response. The SpamAssassin score of 30.2, of a required 4.0, is the most remarkable thing about it, TBH. That's really hitting it outta the park!

I have no idea what he means by me having me though. I guess it could mean the only person you can trust is yourself. Possibly? (confused)

Received: from tester (unknown [103.167.91.37])
	by montran-mail.in (Postfix) with ESMTPA id A27F1628EFC5;
	Mon,  3 Apr 2023 07:32:31 +0530 (IST)
Reply-To: <qatarcares.foundation.org@gmail.com>
From: "Qatar Foundation"<info@qf.org.qa>
Subject: *** SPAM *** You Have You
Date: Sun, 2 Apr 2023 19:02:39 -0700
Dear Beneficiary, You have been selected to receive (995,000.00 EUROS) as charity donations / aid from the Qatar Foundation. Therefore, you are required to Reply back to this email: qatarcares.foundation.org@gmail.com for more information. Yours sincerely, Mr. Atehar Mir..® Chief Executive Officer of Qatar Foundation Endowment.

I removed the SPAM alert from the subject line when I replied. After all, I didn't want him to think I was spamming him, or for it to be redirected into his junk mail folder.*

Subject: Re: You Have You
Date: Mon, 3 Apr 2023 14:26:38 +0200
To: qatarcares.foundation.org@gmail.com
Dear Mr Mir..®, Thank you for the advisory. But is there any possibility that this could be rounded up to 1,000,000 EUR? It would only cost 5,000 EUR and looks so much nicer, wouldn’t you agree? Sincerely,

But St. Thomas' Hospital doesn't

Agnes Cardella, on the other hand, is hardly trying, scoring a piddling 15.0. If she can't be bothered to put the work in, other than creating two Gmail accounts, then neither can I.

Received: from PC-ZXSZAHPYXM.PC-ZXSZAHPYXM (unknown [103.14.224.211])
	by mail.dashan.tw (Postfix) with ESMTPA id 77A322C87E60
	Mon,  3 Apr 2023 00:40:14 +0800 (CST)
Subject: *** SPAM *** Proposal  
From: "St. Thomas' Hospital UK" <agnescardella77@gmail.com>
Date: Sun, 02 Apr 2023 11:39:08 -0600
Reply-To: cardellaagnes444@gmail.com
Dear Sir/Madam, How are you doing? If you have a minute I would like to discuss a vital proposal with you for your kind consideration. Please contact me back at your earliest convenience. Thank you and please stay safe. Best Regards, Agnes Cardella.

* Actually, neither. I didn't want him to know that I'd been alerted to his message being spam, as if that wasn't screamingly obvious. There are a lot of naïve people out there.

Qatar Cares Foundation's spam analysis is fulsome:

X-Spam-Status: Yes, score=30.2 required=4.0 tests=AXB_XMAILER_MIMEOLE_OL_024C2,
	CTE_8BIT_MISMATCH,DCC_CHECK,DEAR_BENEFICIARY,DIGEST_MULTIPLE,
	FORGED_MUA_OUTLOOK,FREEMAIL_FORGED_REPLYTO,FROM_MISSPACED,
	FROM_MISSP_EH_MATCH,FROM_MISSP_MSFT,FROM_MISSP_REPLYTO,FSL_BULK_SIG,
	FSL_CTYPE_WIN1251,HP_VS_SCAM,LOTS_OF_MONEY,MISSING_HEADERS,MISSING_MID,
	MONEY_FREEMAIL_REPTO,MONEY_FROM_MISSP,PYZOR_CHECK,RCVD_IN_SBL,
	REPLYTO_WITHOUT_TO_CC,SPF_HELO_SOFTFAIL,TO_NO_BRKTS_FROM_MSSP,
	TO_NO_BRKTS_MSFT,T_SPF_PERMERROR autolearn=disabled version=4.0.0
X-Spam-Report: 
	*  0.1 MISSING_MID Missing Message-Id: header
	*  2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
	*      [103.167.91.37 listed in zen.spamhaus.org]
	*  0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)
	*  0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)
	*  1.1 DCC_CHECK Detected as bulk mail by DCC (dcc-servers.net)
	*  0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
	*  5.0 HP_VS_SCAM No description available.
	*  1.2 MISSING_HEADERS Missing To: header
	*  1.3 DEAR_BENEFICIARY BODY: Dear Beneficiary:
	*  1.9 REPLYTO_WITHOUT_TO_CC No description available.
	*  0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
	*  0.0 LOTS_OF_MONEY Huge... sums of money
	*  0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
	*  0.0 CTE_8BIT_MISMATCH Header says 7bits but body disagrees
	*  0.0 MONEY_FROM_MISSP Lots of money and misspaced From
	*  2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
	*  2.5 FROM_MISSP_REPLYTO From misspaced, has Reply-To
	*  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
	*  2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
	*  0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
	*  2.0 FROM_MISSPACED From: missing whitespace
	*  0.2 FROM_MISSP_EH_MATCH From misspaced, matches envelope
	*  1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
	*  2.0 PYZOR_CHECK Listed in Pyzor
	*      (https://pyzor.readthedocs.io/en/latest/)
	*  0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
	*  0.0 DIGEST_MULTIPLE Message hits more than one network digest check

I didn't expect a reply to my overt flippancy, but I suppose I shouldn't be too surprised. Mr Atehar Mir.®—I don't know why he's registered, or what as—now wants my personal details for the purposes of identity theft and fraud delivering to me my well-deserved windfall.

He didn't even acknowledge my request to round the figure up though. I'm pretty sure that one of the other lucky winners wouldn't mind receiving only 990K. It's not as if they've done anything otherwise to deserve it more than me me me.

X-Received: by 2002:a17:902:e747:b0:1a0:7630:8ef9 with SMTP id
 p7-20020a170902e74700b001a076308ef9mr687130plf.12.1680595668722; Tue, 04 Apr
 2023 01:07:48 -0700 (PDT)
From: qatar Cares <qatarcares.foundation.org@gmail.com>
Date: Tue, 4 Apr 2023 01:07:40 -0700
Subject: *** SPAM *** Required Information
Thanks for your prompt reply. I am Mr. Atehar Mir the Chief Financial Officer of Qatar Foundation and I acknowledge the receipt of your mail, I wish to inform you that the Qatar Foundation is a government-funded organization here in Qatar, founded in 1995 by decree of Sheikh Hamad bin Khalifa Al Thani, Emir of Qatar. This is to inform you that you were among the Seventeen (17) lucky beneficiaries selected to receive this donation fund of ( €995,000.00), as charity aid from the foundation. These donations are freely given to Individuals for Education, Business and Charity Development. Thus, for more information and to begin with the processing of claiming the donation award, you are required to fill out the following details to help facilitate the processing of your charity money and approval papers. BELOW ARE DETAILS REQUIRED FOR YOUR CHARITY CLAIMS! Full Name: Resident Address: Mobile Number: Date of Birth: Occupation: Sex: Country: Nationality: Congratulations once again and we hope to receive your immediate response to this email. Yours Sincerely, Mr Atehar Mir.® Chief Financial Officer of Qatar Foundation Endowment 2023

Again, I removed the SPAM alert in my reply's subject line.

Subject: Re: Required Information
Date: Tue, 4 Apr 2023 11:42:42 +0200
To: qatar Cares <qatarcares.foundation.org@gmail.com>
Dear Mr Atehar Mir.®, Thank you for your reply. I don't wish to appear ungrateful or greedy, but you did not address my request to round up the amount by €5,000.00, to €1,000,000.00. I'm sure that one of the other beneficiaries would not mind a reduction to €990,000.00. It is still a very generous award, and you can pass it off as ‘administrative fees’. Sincerely,

Oh, the irony! I've seen this issue before, with another email account. Google mail is protecting its spammers from spammers. Cute.

I could jump through the hoops to authenticate my email address, but it's not really worth the effort. Mr Atehar Mir.® can divide my windfall between the other seventeen lucky beneficiaries.

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  qatarcares.foundation.org@gmail.com
    host gmail-smtp-in.l.google.com [2a00:1450:4013:c00::1b]
    SMTP error from remote mail server after end of data:
    550-5.7.26 This mail is unauthenticated, which poses a security risk to the
    550-5.7.26 sender and Gmail users, and has been blocked. The sender must
    550-5.7.26 authenticate with at least one of SPF or DKIM. For this message,
    550-5.7.26 DKIM checks did not pass and SPF check for [snip] did not pass
    550-5.7.26 with ip: [snip]. The sender should visit
    550-5.7.26  https://support.google.com/mail/answer/81126#authentication for
    550 5.7.26 instructions on setting up authentication. v25-20020a056402185900b004fa04899181si1026883edy.148 - gsmtp