Nigerian Spam from Microsoft outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 16 Mar 2024 08:12:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rlUlM-00000000O2t-19UP

for dave@doctor.nl2k.ab.ca;

Sat, 16 Mar 2024 08:11:56 -0600

Resent-From: The Doctor

Resent-Date: Sat, 16 Mar 2024 08:11:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vi1eur04on2115.outbound.protection.outlook.com ([40.107.8.115]:39490 helo=EUR04-VI1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rlQ2z-00000000Bhw-069t

for doctor@nl2k.ab.ca;

Sat, 16 Mar 2024 03:09:49 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=Rc+wEmDUuE7v2vfFBUPG8eJrVm+2JENrFkpTiMTjY2wMNgzavMzcmp5XxPVAbzlwpMDbNGzLu2Piow+oWNEDw7hVmkFMRLQLi8UGAJM4FisEhN9gqdAJL1h9K3cijMaW4HAeidw0qMdY/k9mE4O+r21Qi+0GPh7/QRP28MWaY/pQla9/vIYZvnHJ+R6TuD6kbmwwlm6JTnNPAuio1t0b63u8FbaRs5jtklrZtDf68a5MhYhnCxxtyfIrqj6HcAshK4Y09aRACE5EiehMDfTZ48e8nWNBhKgAsUwljIzF87Pl5rEVDtsuxr1Mdp3kfqRLUOrUJW7Qar8hlJhwbPJxEw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=+5AeO5d8odrtQFa33GXHRedOjOEpPuI4jZ7R9DMQb+A=;

b=EQb8Fbz64xJzA9OsTxzsKWt00StaeaNE3+9vwDi49ujcVQ6B0AsnZlCSIA/pj6OKg+nYKBVDLQ8mGm9CgWkPXqWVq3umZnXjO+lZ8FwQ1A0IfppNoK/OPFZ6zTAZ36vVnxnes6i8moO4KqCDpnzQDJ6ZOMs9eoO13y7EpkDs0+y3SxIYgZjKXeXTe187fYGIC2JPRpzm5TIjDGUZz+q2fLbs2ER8CpY7wR/oKZh4WtAj3PNilq0sU9UWZIwOahr0PivWwMuV1fRSs2dcqZccwKMSWlhw7ryAPVvlEaVwnUZMCq5wCTbph+MLY8KQoWf4aW8SwpBlc3E7NDNhN53Byw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=temperror (sender ip

is 2001:67c:2564:a187::2:73) smtp.rcpttodomain=gmail.com

smtp.mailfrom=alumni.itc.nl; dmarc=pass (p=quarantine sp=quarantine pct=100)

action=none header.from=alumni.itc.nl; dkim=pass (signature was verified)

header.d=alumni.itc.nl; arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alumni.itc.nl;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=+5AeO5d8odrtQFa33GXHRedOjOEpPuI4jZ7R9DMQb+A=;

b=mvjrm5c06LmBibHRPPXfFBo2SGK5vIY5MHRUjtT0Ujr5fwL0yizEtCKx5GVPOhgSVCTK0KakNi5AYmA+yJIReAhCRDPdywwvGzm3MqKGbyFSHG+1SkdpNLFeePjz2KBetZYnCHGzwStNbRuafRnGifHNhn6Vvzyirr7WeJJpPXvfsziK34lMopW4m1oNkOou+xY9ZFHltIcfd30xVbEVAWUQx337NFsImAG0M66gmheOKaq7bVIN7qouiphP42xTpNhNIZoh5NeHBEYNZ9Fne4Nh6Ej+fa4StkXRDzpmuHUME+7KOY+GzIwxIYUy9OT8ANndISE09OKpsNnONjd9Lg==

Received: from DU6P191CA0039.EURP191.PROD.OUTLOOK.COM (2603:10a6:10:53f::13)

by PAXP195MB1229.EURP195.PROD.OUTLOOK.COM (2603:10a6:102:1af::19) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7386.23; Sat, 16 Mar

2024 09:07:40 +0000

Received: from DU6PEPF0000A7E0.eurprd02.prod.outlook.com

(2603:10a6:10:53f:cafe::4a) by DU6P191CA0039.outlook.office365.com

(2603:10a6:10:53f::13) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7386.23 via Frontend

Transport; Sat, 16 Mar 2024 09:07:40 +0000

X-MS-Exchange-Authentication-Results: spf=temperror (sender IP is

2001:67c:2564:a187::2:73) smtp.mailfrom=alumni.itc.nl; dkim=pass (signature

was verified) header.d=alumni.itc.nl;dmarc=pass action=none

header.from=alumni.itc.nl;

Received-SPF: TempError (protection.outlook.com: error in processing during

lookup of alumni.itc.nl: DNS Timeout)

Received: from mail.ad.utwente.nl (130.89.9.12) by

DU6PEPF0000A7E0.mail.protection.outlook.com (10.167.8.42) with Microsoft SMTP

Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.7386.12 via Frontend Transport; Sat, 16 Mar 2024 09:07:39 +0000

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

s=s2048; d=alumni.itc.nl;

h=from:subject:date:message-id:content-type:mime-version:to;

bh=+5AeO5d8odrtQFa33GXHRedOjOEpPuI4jZ7R9DMQb+A=;

b=l3jMZYOKc51sEBMnZnWQjxKmj0pfxIgoR3ZY5TUmSU42wr6/59lCr6IEHK2aLL

ITKFKLNMnP5BaTRRUbmJqsWq8xgIIj2+TB9K8ESOqtyjgw6o/X6dpglZmvGKQg

8/iG3qlw0fmGp5tRjceFXeP1PqwIMF9K8hv7wTXjc79VPgqQ9vo0dTIejYwafb

t/lx0tCvEu7nkW1l1tJ+4XTkvxvV5DVWMiB+o+JEw19JIVEwBZi0s7gf2hWe7Y

GjhvnYO9FOQyXDHEuD8aDFaCDCYIbz+N0iDU5XdDRBD/bgDUBHUMf4e640nIn7

ub07qeZNR/z+h9AApxLRB2UI8ZkO+44A==

Received: from exmrs73.ad.utwente.nl (2001:67c:2564:a187::2:73) by

mail.ad.utwente.nl (2001:67c:2564:a187::2:161) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.2.1544.9; Sat, 16 Mar 2024 10:07:39 +0100

Received: from exmrs72.ad.utwente.nl (2001:67c:2564:a187::2:72) by

exmrs73.ad.utwente.nl (2001:67c:2564:a187::2:73) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.2.1544.9; Sat, 16 Mar 2024 10:07:38 +0100

Received: from exmrs72.ad.utwente.nl ([fe80::dcd:fa20:abf1:7a3d]) by

exmrs72.ad.utwente.nl ([fe80::dcd:fa20:abf1:7a3d%16]) with mapi id

15.02.1544.009; Sat, 16 Mar 2024 10:07:38 +0100

From: Yaseen Taha Mustafa

Subject: Mr. Bernard has donated some amount to you for the purpose of

charity. Note you will not have to pay any fee to receive these funds,

charges have been paid on your behalf. Contact bernardarnault928@gmail.com

for details on how to claim your donation.

Thread-Topic: Mr. Bernard has donated some amount to you for the purpose of

charity. Note you will not have to pay any fee to receive these funds,

charges have been paid on your behalf. Contact bernardarnault928@gmail.com

for details on how to claim your donation.

Thread-Index: AQHad4FKK3mNNJwIhUm29ZYESqM7Uw==

Date: Sat, 16 Mar 2024 09:07:38 +0000

Message-ID: <6f8f08617efe45d1805e4d47c2191fb3@alumni.itc.nl>

Accept-Language: en-US, en-GB

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [130.89.9.62]

Content-Type: multipart/alternative;

boundary="_000_6f8f08617efe45d1805e4d47c2191fb3alumniitcnl_"

MIME-Version: 1.0

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-Exchange-SkipListedInternetSender:

ip=[2001:67c:2564:a187::2:73];domain=exmrs73.ad.utwente.nl

X-MS-Exchange-ExternalOriginalInternetSender:

ip=[2001:67c:2564:a187::2:73];domain=exmrs73.ad.utwente.nl

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DU6PEPF0000A7E0:EE_|PAXP195MB1229:EE_

X-MS-Office365-Filtering-Correlation-Id: 2eb1a3d4-b7a5-40d1-3723-08dc459887f3

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:130.89.9.12;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:exmrs73.ad.utwente.nl;PTR:exmrs73.ad.utwente.nl;CAT:NONE;SFS:(13230031)(82310400014)(7416005)(1800799015)(36860700004)(32650700005)(376005);DIR:OUT;SFP:1102;

X-OriginatorOrg: alumni.itc.nl

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Mar 2024 09:07:39.5945

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 2eb1a3d4-b7a5-40d1-3723-08dc459887f3

X-MS-Exchange-CrossTenant-Id: 723246a1-c3f5-43c5-acdc-43adb404ac4d

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=723246a1-c3f5-43c5-acdc-43adb404ac4d;Ip=[130.89.9.12];Helo=[mail.ad.utwente.nl]

X-MS-Exchange-CrossTenant-AuthSource:

DU6PEPF0000A7E0.eurprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PAXP195MB1229



--_000_6f8f08617efe45d1805e4d47c2191fb3alumniitcnl_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable







--_000_6f8f08617efe45d1805e4d47c2191fb3alumniitcnl_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








-family:Calibri,Helvetica,sans-serif;" dir=3D"ltr">














--_000_6f8f08617efe45d1805e4d47c2191fb3alumniitcnl_--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA