Christian charitable work spam from Microsoft
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 28 Mar 2023 08:02:48 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1ph9tg-000IZl-1I
for dave@doctor.nl2k.ab.ca;
Tue, 28 Mar 2023 08:02:00 -0600
Resent-From: The Doctor
Resent-Date: Tue, 28 Mar 2023 08:02:00 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-dm6nam04rlhn2175.outbound.protection.outlook.com ([40.95.46.175]:10956 helo=NAM04-DM6-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96)
(envelope-from)
id 1ph3pY-000KlK-2Q
for doctor@nl2k.ab.ca;
Tue, 28 Mar 2023 01:33:25 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=H61F6RfkjmCE4erdlDHTvuFsWlk2ziYgMU5JSdiOkosPMUzv9ZfKpQlyQt3P0MH7vq7bJ7MTg0ql1eIiLXFOvJ8GnoqVS/PXMeZBt62lZHI4TnEoXUTQ9AhAV3awyj6NmyAvNz3y+ceFkaBlMeqgdq3Af/7aMFR5hD6km6hw04s3TIbAsqQ8BSlZ3VoNO1cd7qDd0rnFhP3EKLK7ImdqY9zCG3xjmGq+lNvw6yiYMZlodIue0doby2Wo6kRf8OZNvv0sJM+EYTT3fZzTDMbolR75cVhMjSAir2/sRFJqd9sWx9A7erlfmvaEAU3oPE1BH5Z8gkQffTox0TRoULMGbw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=f4G6aAVpszwHzFpgYTV9KsgCGsA0Vk6QFaE3bzLst2w=;
b=n2q8oi7XgycLAqiODDo7k78sKIKZ8XHWCyttc8l4vr9E7N+tCTcaytSEtsgTJ9Ux6rFX+WSMBRrYiG5PIKDmj9ZcZLOx/Y11FFAK1SuENBu8ZETX+M1IEBKtpjHW79Czsj+BTTE33mQrwMCOLxLOQ4tX4zHA299H5D9RRS8Px27AWEUZFFV9pLEouJ9y317lwmxtTP9ZzCsKUxsbI7u71zxoF/F62GFIdVAGQ2okmCCQZrDsHo10/dLiYqWkwuG3p1VitjAHrQLLfa41xK0gTyHdXmXWCsg5QCuYC432zgUnGU6RAuCLWssvZkpTyMg04dYYGDw2diXjA2Gu9jGK7Q==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is
8.42.207.81) smtp.rcpttodomain=hargray.com smtp.mailfrom=mail.sirius.tel;
dmarc=fail (p=none sp=none pct=100) action=none header.from=mail.sirius.tel;
dkim=none (message not signed); arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=wwjwm.onMicrosoft.com;
s=selector2-wwjwm-onMicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=f4G6aAVpszwHzFpgYTV9KsgCGsA0Vk6QFaE3bzLst2w=;
b=TTn61s64ITJzbd82toyN0dwy+Ey6c4JO30cTaV7jTbA5KhVK4NqtZiWS0dlertVV67B5pzaEDxyHubNUdWm/5wVeAx/3P3sJyYiI+qrHRSCZde2kUcTS+U9rW3syq4hQe5eT2pTd3rGzB/gC7qczuVkWlPuWG7fjoED+mxYd2Uw=
Received: from BN9PR03CA0581.namprd03.prod.outlook.com (2603:10b6:408:10d::16)
by MN2PR01MB5581.prod.exchangelabs.com (2603:10b6:208:11d::27) with Microsoft
SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.6254.16; Tue, 28 Mar 2023 07:31:13 +0000
Received: from BN8NAM12FT057.eop-nam12.prod.protection.outlook.com
(2603:10b6:408:10d:cafe::2d) by BN9PR03CA0581.outlook.office365.com
(2603:10b6:408:10d::16) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6178.43 via Frontend
Transport; Tue, 28 Mar 2023 07:31:13 +0000
X-MS-Exchange-Authentication-Results: spf=none (sender IP is 8.42.207.81)
smtp.mailfrom=mail.sirius.tel; dkim=none (message not signed)
header.d=none;dmarc=fail action=none header.from=mail.sirius.tel;
Received-SPF: None (protection.outlook.com: mail.sirius.tel does not designate
permitted sender hosts)
Received: from mail1.jas.com (8.42.207.81) by
BN8NAM12FT057.mail.protection.outlook.com (10.13.182.192) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.6254.9 via Frontend Transport; Tue, 28 Mar 2023 07:31:13 +0000
Received: from USBCDPSMBX02.jas1.ds.Jas.com (172.29.10.52) by
USBCDPSMBX01.jas1.ds.Jas.com (172.29.10.51) with Microsoft SMTP Server
(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.2.1118.26; Tue, 28 Mar 2023 03:30:55 -0400
Received: from User (93.157.59.3) by USBCDPSMBX02.jas1.ds.Jas.com
(172.29.10.52) with Microsoft SMTP Server id 15.2.1118.26 via Frontend
Transport; Tue, 28 Mar 2023 03:30:43 -0400
Reply-To:,
From: Maureen SHORELIN
Subject: GOD'S WORK
Date: Tue, 28 Mar 2023 00:30:55 -0700
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID:
To: Undisclosed recipients:;
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: BN8NAM12FT057:EE_|MN2PR01MB5581:EE_
X-MS-Office365-Filtering-Correlation-Id: 1f16951d-a74c-40ed-2b77-08db2f5e68ba
X-MS-Exchange-SenderADCheck: 2
X-MS-Exchange-AntiSpam-Relay: 1
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
=?windows-1251?Q?VcREznCpAx5RS2BkzqT+Q+M+YQwjEHoZSZqifgD/kmvMHSYASAG1p18r?=
=?windows-1251?Q?PCOVz84UCkGpeIhy6A4qdHgIvTDVx6l7TiDSQVEjszQ8soBwRD1BOMxj?=
=?windows-1251?Q?7Qpr0I5v1bJMe3VAsiATbvIyS2fTfFh+lC2NdcUT3VJHFf67Ip51rizU?=
=?windows-1251?Q?ZYrQXwVolYLB2u1rvWA+XyFUPTvr8NVpEwvH6PqG2fSg2iDqRNA9ia+p?=
=?windows-1251?Q?hNWhjr3GOzfkaZ76yCB5O9Qf8/DQtXxx/t7p3LD9swKDNY5pZAhGNwGh?=
=?windows-1251?Q?54GJiUg14PAtougBIaITEY+C+ad1NQL0w3jbn8lE5DH8KxPWoItyx1vo?=
=?windows-1251?Q?kCdFgpxpZjU1cOQdBY8H2/YVKQub8MEKYlhhq3e7BdZx/ykANaYG7lr3?=
=?windows-1251?Q?ICRWsO2Li4SfyVkP4ef1Oww68DU2VzE9unPByCgzQZuIuYJtuA16rIoh?=
=?windows-1251?Q?+oblbdw1MJIJOcHIQu0Ge0TSY2vhCgtSvaTDtXbTKhlN07VP5UKBGDjP?=
=?windows-1251?Q?WSJW8IOHHbPi1Gl7rwqMbWWYvErZBGThIlreZEDGE9w3hWtf1+zpTV6v?=
=?windows-1251?Q?IurGeG//l/oRCCAbpdm2sJ64GhO8U9RaggruiR2enU/0KUlWw06GHESS?=
=?windows-1251?Q?ox50rotTZYv9MIH6C+SdrTFPJ5JfghsxltekVN0rrHB+s7sNYLQKlIjP?=
=?windows-1251?Q?9KXss4EV6qBJ/M7eI480C4N1Q7Lg6YaJOcpSnqs2saDQ6dIpzIPUGS2D?=
=?windows-1251?Q?jU9IHovyI6n7Az3k+gYbKF/aZ/Q2FJXmbVhift96G90PKoyF5dxl4iJO?=
=?windows-1251?Q?/yOTVCewdploRDVcOJzYehUqMIifyzmWWYNFotH4BwGjv298JP9vKeHz?=
=?windows-1251?Q?DdBWmLqhz8LuBXFQ1P8MuEKnUd/DNnxTvOvID3TAvAr/49tCBZ0KkuDz?=
=?windows-1251?Q?OWZBeKj1XWIJhT/4OvdB9VcjVP7Fc9aA8v8zb9LxVjYjowr9stRD6Jan?=
=?windows-1251?Q?L0T5tiI6Cl6ECb7eMCOZUBb7lDTkLXfSP4SLBe+iupj4AvXkwXMBSmPG?=
=?windows-1251?Q?YNujZHlmEeT2KJK3hq9sq65xIUY+MFxI7xE6VgxTJtFrJ0ogCqruUrZd?=
=?windows-1251?Q?D/CAmndeXE7jnDMSafrnERuvJ+LW4Dg7NUVu7IOhwl/pfB42+3b/ygpG?=
=?windows-1251?Q?u82QJarS3N+GhU/Qw74h8Os4q5T5BSMi?=
X-Forefront-Antispam-Report:
CIP:8.42.207.81;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail1.jas.com;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230028)(4636009)(376002)(346002)(39860400002)(136003)(396003)(451199021)(109986019)(40470700004)(66899021)(32650700002)(40480700001)(70586007)(8676002)(70206006)(40460700003)(316002)(2860700004)(498600001)(3480700007)(2906002)(9686003)(26005)(35950700001)(7366002)(7416002)(7406005)(83380400001)(956004)(86362001)(336012)(31686004)(31696002)(82310400005)(81166007)(6666004)(5660300002)(41300700001)(356005)(82740400003)(8936002)(2700400008);DIR:OUT;SFP:1023;
X-OriginatorOrg: WWJWM.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Mar 2023 07:31:13.2894
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 1f16951d-a74c-40ed-2b77-08db2f5e68ba
X-MS-Exchange-CrossTenant-Id: fa3414ca-197f-48b7-8ff3-892f8bdd8e93
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=fa3414ca-197f-48b7-8ff3-892f8bdd8e93;Ip=[8.42.207.81];Helo=[mail1.jas.com]
X-MS-Exchange-CrossTenant-AuthSource:
BN8NAM12FT057.eop-nam12.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR01MB5581
X-Spam_score: 15.7
X-Spam_score_int: 157
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Chosen One, The time has come for Christians to worship
God in spirit and in truth according to the book of John chapter 4:vs23-24.But
the hour cometh and now is when the true worshipers shall worship the Father
[...]
Content analysis details: (15.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[93.157.59.3 listed in zen.spamhaus.org]
0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=NAM04-DM6-obe.outbound.protection.outlook.com;ip=40.95.46.175;r=doctor.nl2k.ab.ca]
0.0 AXB_X_FF_SEZ_S Forefront sez this is spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 CTE_8BIT_MISMATCH Header says 7bits but body disagrees
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.3 PDS_HELO_SPF_FAIL High profile HELO that fails SPF
0.0 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS
0.6 FSL_NEW_HELO_USER Spam's using Helo and User
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} GOD'S WORK
Dear Chosen One,
The time has come for Christians to worship God in spirit and in truth
according to the book of John chapter 4:vs23-24.But the hour cometh
and now is when the true worshipers shall worship the Father in spirit
and in truth: for the Father seeketh such to worship him . God is a
spirit,and they that worship him must worship him in spirit and in
truth. Based on this scripture, it became obvious that I should do the
right thing if I must enter into the kingdom of God.I am writing this
mail to you with serious tears in my eyes and great sorrow in my heart,
I decided to contact you due to the urgency of my situation.
Would you devote your time and be totally committed and devoted to run
multi-million Dollars humanitarian charity project sponsored totally
by me; with an incentive/compensation accrual to you for your time and
effort and at no cost to you.
If Lead by God, get back to me to enable us to discuss in a more
clarifying manner to the best of your understanding. I must say that
I'm very uncomfortable sending this message to you without knowing
truly if you would misconstrue the importance and decide to go public.
In this regard, I will not hold back to say that the essence of this
message is strictly for Charity. May God bless you as you make up your
mind to work for God.
hoping to hear from you soon. Send Text to +44-7418368449
Not all of us can do great things. But we can do small things with great love.” – Mother Teresa
Thanks and Remain blessed in the Lord.
l remain your sister in Christ.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 28 Mar 2023 08:02:48 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1ph9tg-000IZl-1I
for dave@doctor.nl2k.ab.ca;
Tue, 28 Mar 2023 08:02:00 -0600
Resent-From: The Doctor
Resent-Date: Tue, 28 Mar 2023 08:02:00 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-dm6nam04rlhn2175.outbound.protection.outlook.com ([40.95.46.175]:10956 helo=NAM04-DM6-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96)
(envelope-from
id 1ph3pY-000KlK-2Q
for doctor@nl2k.ab.ca;
Tue, 28 Mar 2023 01:33:25 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=H61F6RfkjmCE4erdlDHTvuFsWlk2ziYgMU5JSdiOkosPMUzv9ZfKpQlyQt3P0MH7vq7bJ7MTg0ql1eIiLXFOvJ8GnoqVS/PXMeZBt62lZHI4TnEoXUTQ9AhAV3awyj6NmyAvNz3y+ceFkaBlMeqgdq3Af/7aMFR5hD6km6hw04s3TIbAsqQ8BSlZ3VoNO1cd7qDd0rnFhP3EKLK7ImdqY9zCG3xjmGq+lNvw6yiYMZlodIue0doby2Wo6kRf8OZNvv0sJM+EYTT3fZzTDMbolR75cVhMjSAir2/sRFJqd9sWx9A7erlfmvaEAU3oPE1BH5Z8gkQffTox0TRoULMGbw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=f4G6aAVpszwHzFpgYTV9KsgCGsA0Vk6QFaE3bzLst2w=;
b=n2q8oi7XgycLAqiODDo7k78sKIKZ8XHWCyttc8l4vr9E7N+tCTcaytSEtsgTJ9Ux6rFX+WSMBRrYiG5PIKDmj9ZcZLOx/Y11FFAK1SuENBu8ZETX+M1IEBKtpjHW79Czsj+BTTE33mQrwMCOLxLOQ4tX4zHA299H5D9RRS8Px27AWEUZFFV9pLEouJ9y317lwmxtTP9ZzCsKUxsbI7u71zxoF/F62GFIdVAGQ2okmCCQZrDsHo10/dLiYqWkwuG3p1VitjAHrQLLfa41xK0gTyHdXmXWCsg5QCuYC432zgUnGU6RAuCLWssvZkpTyMg04dYYGDw2diXjA2Gu9jGK7Q==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is
8.42.207.81) smtp.rcpttodomain=hargray.com smtp.mailfrom=mail.sirius.tel;
dmarc=fail (p=none sp=none pct=100) action=none header.from=mail.sirius.tel;
dkim=none (message not signed); arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=wwjwm.onMicrosoft.com;
s=selector2-wwjwm-onMicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=f4G6aAVpszwHzFpgYTV9KsgCGsA0Vk6QFaE3bzLst2w=;
b=TTn61s64ITJzbd82toyN0dwy+Ey6c4JO30cTaV7jTbA5KhVK4NqtZiWS0dlertVV67B5pzaEDxyHubNUdWm/5wVeAx/3P3sJyYiI+qrHRSCZde2kUcTS+U9rW3syq4hQe5eT2pTd3rGzB/gC7qczuVkWlPuWG7fjoED+mxYd2Uw=
Received: from BN9PR03CA0581.namprd03.prod.outlook.com (2603:10b6:408:10d::16)
by MN2PR01MB5581.prod.exchangelabs.com (2603:10b6:208:11d::27) with Microsoft
SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.6254.16; Tue, 28 Mar 2023 07:31:13 +0000
Received: from BN8NAM12FT057.eop-nam12.prod.protection.outlook.com
(2603:10b6:408:10d:cafe::2d) by BN9PR03CA0581.outlook.office365.com
(2603:10b6:408:10d::16) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6178.43 via Frontend
Transport; Tue, 28 Mar 2023 07:31:13 +0000
X-MS-Exchange-Authentication-Results: spf=none (sender IP is 8.42.207.81)
smtp.mailfrom=mail.sirius.tel; dkim=none (message not signed)
header.d=none;dmarc=fail action=none header.from=mail.sirius.tel;
Received-SPF: None (protection.outlook.com: mail.sirius.tel does not designate
permitted sender hosts)
Received: from mail1.jas.com (8.42.207.81) by
BN8NAM12FT057.mail.protection.outlook.com (10.13.182.192) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.6254.9 via Frontend Transport; Tue, 28 Mar 2023 07:31:13 +0000
Received: from USBCDPSMBX02.jas1.ds.Jas.com (172.29.10.52) by
USBCDPSMBX01.jas1.ds.Jas.com (172.29.10.51) with Microsoft SMTP Server
(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.2.1118.26; Tue, 28 Mar 2023 03:30:55 -0400
Received: from User (93.157.59.3) by USBCDPSMBX02.jas1.ds.Jas.com
(172.29.10.52) with Microsoft SMTP Server id 15.2.1118.26 via Frontend
Transport; Tue, 28 Mar 2023 03:30:43 -0400
Reply-To:
From: Maureen SHORELIN
Subject: GOD'S WORK
Date: Tue, 28 Mar 2023 00:30:55 -0700
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID:
To: Undisclosed recipients:;
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: BN8NAM12FT057:EE_|MN2PR01MB5581:EE_
X-MS-Office365-Filtering-Correlation-Id: 1f16951d-a74c-40ed-2b77-08db2f5e68ba
X-MS-Exchange-SenderADCheck: 2
X-MS-Exchange-AntiSpam-Relay: 1
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
=?windows-1251?Q?VcREznCpAx5RS2BkzqT+Q+M+YQwjEHoZSZqifgD/kmvMHSYASAG1p18r?=
=?windows-1251?Q?PCOVz84UCkGpeIhy6A4qdHgIvTDVx6l7TiDSQVEjszQ8soBwRD1BOMxj?=
=?windows-1251?Q?7Qpr0I5v1bJMe3VAsiATbvIyS2fTfFh+lC2NdcUT3VJHFf67Ip51rizU?=
=?windows-1251?Q?ZYrQXwVolYLB2u1rvWA+XyFUPTvr8NVpEwvH6PqG2fSg2iDqRNA9ia+p?=
=?windows-1251?Q?hNWhjr3GOzfkaZ76yCB5O9Qf8/DQtXxx/t7p3LD9swKDNY5pZAhGNwGh?=
=?windows-1251?Q?54GJiUg14PAtougBIaITEY+C+ad1NQL0w3jbn8lE5DH8KxPWoItyx1vo?=
=?windows-1251?Q?kCdFgpxpZjU1cOQdBY8H2/YVKQub8MEKYlhhq3e7BdZx/ykANaYG7lr3?=
=?windows-1251?Q?ICRWsO2Li4SfyVkP4ef1Oww68DU2VzE9unPByCgzQZuIuYJtuA16rIoh?=
=?windows-1251?Q?+oblbdw1MJIJOcHIQu0Ge0TSY2vhCgtSvaTDtXbTKhlN07VP5UKBGDjP?=
=?windows-1251?Q?WSJW8IOHHbPi1Gl7rwqMbWWYvErZBGThIlreZEDGE9w3hWtf1+zpTV6v?=
=?windows-1251?Q?IurGeG//l/oRCCAbpdm2sJ64GhO8U9RaggruiR2enU/0KUlWw06GHESS?=
=?windows-1251?Q?ox50rotTZYv9MIH6C+SdrTFPJ5JfghsxltekVN0rrHB+s7sNYLQKlIjP?=
=?windows-1251?Q?9KXss4EV6qBJ/M7eI480C4N1Q7Lg6YaJOcpSnqs2saDQ6dIpzIPUGS2D?=
=?windows-1251?Q?jU9IHovyI6n7Az3k+gYbKF/aZ/Q2FJXmbVhift96G90PKoyF5dxl4iJO?=
=?windows-1251?Q?/yOTVCewdploRDVcOJzYehUqMIifyzmWWYNFotH4BwGjv298JP9vKeHz?=
=?windows-1251?Q?DdBWmLqhz8LuBXFQ1P8MuEKnUd/DNnxTvOvID3TAvAr/49tCBZ0KkuDz?=
=?windows-1251?Q?OWZBeKj1XWIJhT/4OvdB9VcjVP7Fc9aA8v8zb9LxVjYjowr9stRD6Jan?=
=?windows-1251?Q?L0T5tiI6Cl6ECb7eMCOZUBb7lDTkLXfSP4SLBe+iupj4AvXkwXMBSmPG?=
=?windows-1251?Q?YNujZHlmEeT2KJK3hq9sq65xIUY+MFxI7xE6VgxTJtFrJ0ogCqruUrZd?=
=?windows-1251?Q?D/CAmndeXE7jnDMSafrnERuvJ+LW4Dg7NUVu7IOhwl/pfB42+3b/ygpG?=
=?windows-1251?Q?u82QJarS3N+GhU/Qw74h8Os4q5T5BSMi?=
X-Forefront-Antispam-Report:
CIP:8.42.207.81;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail1.jas.com;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230028)(4636009)(376002)(346002)(39860400002)(136003)(396003)(451199021)(109986019)(40470700004)(66899021)(32650700002)(40480700001)(70586007)(8676002)(70206006)(40460700003)(316002)(2860700004)(498600001)(3480700007)(2906002)(9686003)(26005)(35950700001)(7366002)(7416002)(7406005)(83380400001)(956004)(86362001)(336012)(31686004)(31696002)(82310400005)(81166007)(6666004)(5660300002)(41300700001)(356005)(82740400003)(8936002)(2700400008);DIR:OUT;SFP:1023;
X-OriginatorOrg: WWJWM.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Mar 2023 07:31:13.2894
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 1f16951d-a74c-40ed-2b77-08db2f5e68ba
X-MS-Exchange-CrossTenant-Id: fa3414ca-197f-48b7-8ff3-892f8bdd8e93
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=fa3414ca-197f-48b7-8ff3-892f8bdd8e93;Ip=[8.42.207.81];Helo=[mail1.jas.com]
X-MS-Exchange-CrossTenant-AuthSource:
BN8NAM12FT057.eop-nam12.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR01MB5581
X-Spam_score: 15.7
X-Spam_score_int: 157
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Chosen One, The time has come for Christians to worship
God in spirit and in truth according to the book of John chapter 4:vs23-24.But
the hour cometh and now is when the true worshipers shall worship the Father
[...]
Content analysis details: (15.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[93.157.59.3 listed in zen.spamhaus.org]
0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=NAM04-DM6-obe.outbound.protection.outlook.com;ip=40.95.46.175;r=doctor.nl2k.ab.ca]
0.0 AXB_X_FF_SEZ_S Forefront sez this is spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 CTE_8BIT_MISMATCH Header says 7bits but body disagrees
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.3 PDS_HELO_SPF_FAIL High profile HELO that fails SPF
0.0 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS
0.6 FSL_NEW_HELO_USER Spam's using Helo and User
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} GOD'S WORK
Dear Chosen One,
The time has come for Christians to worship God in spirit and in truth
according to the book of John chapter 4:vs23-24.But the hour cometh
and now is when the true worshipers shall worship the Father in spirit
and in truth: for the Father seeketh such to worship him . God is a
spirit,and they that worship him must worship him in spirit and in
truth. Based on this scripture, it became obvious that I should do the
right thing if I must enter into the kingdom of God.I am writing this
mail to you with serious tears in my eyes and great sorrow in my heart,
I decided to contact you due to the urgency of my situation.
Would you devote your time and be totally committed and devoted to run
multi-million Dollars humanitarian charity project sponsored totally
by me; with an incentive/compensation accrual to you for your time and
effort and at no cost to you.
If Lead by God, get back to me to enable us to discuss in a more
clarifying manner to the best of your understanding. I must say that
I'm very uncomfortable sending this message to you without knowing
truly if you would misconstrue the importance and decide to go public.
In this regard, I will not hold back to say that the essence of this
message is strictly for Charity. May God bless you as you make up your
mind to work for God.
hoping to hear from you soon. Send Text to +44-7418368449
Not all of us can do great things. But we can do small things with great love.” – Mother Teresa
Thanks and Remain blessed in the Lord.
l remain your sister in Christ.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments