Nigerian spam from Microsoft Outlook
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 16 Sep 2024 18:29:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from)
id 1sqLTv-00000000PGA-1bl0
for dave@doctor.nl2k.ab.ca;
Mon, 16 Sep 2024 17:50:11 -0600
Resent-From: The Doctor
Resent-Date: Mon, 16 Sep 2024 17:50:11 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-psaapc01rlhn2159.outbound.protection.outlook.com ([40.95.53.159]:63456 helo=APC01-PSA-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98 (FreeBSD))
(envelope-from)
id 1sqKCg-00000000KaY-1q0s
for bin@nl2k.ab.ca;
Mon, 16 Sep 2024 16:28:30 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
b=F2OyM7g7v3cHmxjVrrbIVHBaCOquHdGVL9pXwCp+hw+lNUmg5RCpveGkI0/XTMwubRhGb0IL+uNaNTRiGjVHRoEtsSjUPgd2KJP6U14SWIdbyKswarUW9m3kown1lTber4R1fuQX9EgDPYw8gkbdthHOdaUG66iDkVlobc+r8bMsw2SQSkgBFA61ycrHcRtRFGFLLE4kgR7Q+zNm26y7h6XOCExa3H0OgFlJDKGzTuD9hNLP9fjnVYlLM7v+RqItZgwzYqPoMtUpoS8KGH5BgD4+LhiTbuCabv/1f4Ljk2A82OQeMu6ucpwdenxlpNrji7oo2o1Ar4TeH5c80jWCZA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector10001;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=igcKjzj10KB1mVg9FcmVu8EJUsVMpVfYoRepyotNvB0=;
b=KvGa8kW0Hk7I+rRBvyStc/y3aEM5diL6Fk3Go8QPLpWBKeS38zTkMVFK04sd0b5A8vzKTrV1lkotSN4JuZl0vW0WgIuW5bmFmT0AEJC9Dyu7U4CYHewYQCxJ8g9jDeSbySb6J+9rQrhmK+SnrSaFVUtFcZvh8ItFbnpRSWEkYa9y/dkbt6ECu5G3jVizVcdz4kVTvkHHv7T63MrzmL6edT4ngJOAYfeEQ3ASOE+Q+eXh4qrC1zkx3UpJtT3daUCF8626qVkgLf5n/tMFfjrAALuAetxUP8m0gN1OIiah+X5iOdQnM2ldawX4F6nNsXqHNlVy2LHh5LLMMUkMFvaOzg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is
103.196.166.1) smtp.rcpttodomain=khsclan.de smtp.mailfrom=0rgm.com;
dmarc=none action=none header.from=0rgm.com; dkim=none (message not signed);
arc=none (0)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=KemenKeu.onmicrosoft.com; s=selector1-KemenKeu-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=igcKjzj10KB1mVg9FcmVu8EJUsVMpVfYoRepyotNvB0=;
b=aKCHXRvQlhvI/soM2VHSHekr2rsb9N+Uc18fbqHE2CYz2dWN9ldtfE07TGaKZHoFAg0kM4TrVALTaVIdZ//nhLj52Y2NwzvfnJVnAuLDi/1Yn9DUly6FuTU3jOZhs4Ov918MFANaIeGOnSMljeBthWditGgsGE1Wzr2MNl1deVXfUwxE8J37YncS4qNjHzPta87dPkIZhIozgE2H9d/n2Tvp5DnCZNnDY0Hr0dWdZlKYhGZYMQT9T+hkkY5c87S/dYy9nKfRhj1fKqQ/iJO/i5VWJ0TJUlE1NtK6q/YcQ/0zaV8sz2RVqBdbDz8tx7nlOyeppGmiyMlbK0FLGfFqFA==
Received: from SI2PR06CA0014.apcprd06.prod.outlook.com (2603:1096:4:186::11)
by SEZPR03MB7034.apcprd03.prod.outlook.com (2603:1096:101:e0::11) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7962.24; Mon, 16 Sep
2024 22:26:19 +0000
Received: from HK2PEPF00006FAF.apcprd02.prod.outlook.com
(2603:1096:4:186:cafe::f5) by SI2PR06CA0014.outlook.office365.com
(2603:1096:4:186::11) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7939.30 via Frontend
Transport; Mon, 16 Sep 2024 22:26:18 +0000
X-MS-Exchange-Authentication-Results: spf=none (sender IP is 103.196.166.1)
smtp.mailfrom=0rgm.com; dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=0rgm.com;
Received-SPF: None (protection.outlook.com: 0rgm.com does not designate
permitted sender hosts)
Received: from VSDC010026P.kemenkeu.go.id (103.196.166.1) by
HK2PEPF00006FAF.mail.protection.outlook.com (10.167.8.5) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.7918.13 via Frontend Transport; Mon, 16 Sep 2024 22:26:18 +0000
Received: from [94.141.120.230] (94.141.120.230) by VSDC010026P.kemenkeu.go.id
(10.216.131.12) with Microsoft SMTP Server id 15.2.1258.12; Tue, 17 Sep 2024
05:25:59 +0700
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Hello there
To: Recipients
From: "Mrs.Olga Tsokova info"
Date: Mon, 16 Sep 2024 15:25:01 -0700
Reply-To:
Message-ID: <3eb23580-35e6-421e-bdd5-995104251390@VSDC010026P.kemenkeu.go.id>
Received-SPF: Fail (VSDC010026P.kemenkeu.go.id: domain of infoinfo22@0rgm.com
does not designate 94.141.120.230 as permitted sender)
receiver=VSDC010026P.kemenkeu.go.id; client-ip=94.141.120.230;
helo=[94.141.120.230];
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: HK2PEPF00006FAF:EE_|SEZPR03MB7034:EE_
X-MS-Office365-Filtering-Correlation-Id: 25e160e0-3957-45bc-7e6d-08dcd69e95bf
X-MS-Exchange-SenderADCheck: 2
X-MS-Exchange-AntiSpam-Relay: 1
X-Microsoft-Antispam:
BCL:0;ARA:13230040|35950700016|32650700017|82310400026|48200799018|376014|7416014|61400799027|62346027;
X-Microsoft-Antispam-Message-Info:
=?iso-8859-1?Q?sBcLwtYuUpPYaqpclJEt1YNY4DuB3pK9AOhfUku/AYLT5xx4+n7IVCS5Xn?=
=?iso-8859-1?Q?3TWv4Pqe/eld1+BqGiB/sab6wBaHz6NunD9kjiq7RQvaxGfg+X0FlX7Xki?=
=?iso-8859-1?Q?6/60dOimyssLPnHatCrq1J6n2VoayxPZZqHC32zQ2GG5W2trR/p8+khVoD?=
=?iso-8859-1?Q?FabWC73avJ5C4v/+9MU3I8xLUYAjv9HFSaUolnVFY0HDNXSP3wNQf/H9GQ?=
=?iso-8859-1?Q?iDE7MKO/r4qtxDoBcMwVxslsQD69wef3iXoSIb4SorRhPDprPTKtwJr0Qx?=
=?iso-8859-1?Q?E3UAZTkDywcHcnzh++6nGrqkdEUn+aWNfoAzcnFNvlfefuDWpJEyNWdgZR?=
=?iso-8859-1?Q?DPtqjsmWv7f/K/l5FqdLwgTydYwFIZ5QpE5ey88I6hUsbMZVHDKtJ9Fakt?=
=?iso-8859-1?Q?cUi4XhnnKlPf8yFe+CSJJ+9QW6poszeWLZVHrLepSFhNV42Z1+GK/WK4h4?=
=?iso-8859-1?Q?ylUfVmqvEGjOGQp0mx0PUMC98OS/I1oc1VwFCmJN50zOTm3SNYqqGVC/pO?=
=?iso-8859-1?Q?D0TDcFl6v/KrQC7gyu8KNp3wNiYiqFDzvEn0XameN0qB02ZynWoI732GEY?=
=?iso-8859-1?Q?mUmKZk1eA+pka8GoT9nbHx7SOmiHL527jjq4Hq1C/6QONGa9SOJsIYIQMw?=
=?iso-8859-1?Q?ixv+6cjRtSI90MqePKRp3vB2xiiS34njxUDuSIcqFCRodph19DbVj63g0N?=
=?iso-8859-1?Q?fmaWFBm5P/ThVnc9OBg8cFgllUEPt5DIAMyJnH9JzIXmCgLtj7yoY6IrOR?=
=?iso-8859-1?Q?rYDij5EfV0FzcgLbzU3BcxJ7AsOJn9kyau7O84QWxvCn1tGdP10RhaGNkp?=
=?iso-8859-1?Q?W0OZ3V2fFuu9kKhNKRnFnO9wl8YYOz0W2sC6w5nIWTveKyuLSefrY+7CEq?=
=?iso-8859-1?Q?CnfxqIhBgiFTsycioznnbnRx1U5/yw2+bsLPND57S1BXTJi6i7yPLlisZX?=
=?iso-8859-1?Q?hpwzTVlJBbJxE9Uo9QlieOnp4vhBB0fPv5cdlsu9d2013jqnna1RtCZUXj?=
=?iso-8859-1?Q?oSaSCn7MIUnetB3inH81y9A4Hop7vWZUhnzvC5P/kRAnT/lJjHVHgxJqZi?=
=?iso-8859-1?Q?neq4yadew6Eh2t2THESdorC5fo+wgkkeHmZEn8cLhloWnndwf3wnyg4egb?=
=?iso-8859-1?Q?or7yjQsUlrbOBGd44LIvZxrxgHgLR1vTFFm/qicNGVI8op4JYHpHVlo8Fx?=
=?iso-8859-1?Q?irH64ay1ZrHfqLpWdT3qP0/fNJRekzB+n7bhqEv+a3J55GaUzxSSlOpbdb?=
=?iso-8859-1?Q?eF7LeQsHndBR/A+bvuRXXIpc8f7CD9xQO2ZZj2B32AKwBgxPK2O3Vvor2t?=
=?iso-8859-1?Q?9teI+hsP6GElWdC4oirGq7tpwJuRtPMLULCct/4sl8u6VgM9Mg8NxHsJTT?=
=?iso-8859-1?Q?3+p9qWZzL0Md40jvO6M5IRFPErfOlj87kWxhfFKR60lSOzdrqiEB7Zbb+C?=
=?iso-8859-1?Q?f4GBdOLsqeqJty7GFDmqxt6C+2DWMXdqpa+Pc4Y+CBkrYirKHSj3QFUp1O?=
=?iso-8859-1?Q?FM2B/qRl7fhxGNLHqWuwkfuJyNVLIQy9aODMYAHrkl/SvXHgZkAx7mprWs?=
=?iso-8859-1?Q?jwrmiaY70RnXDkL/OfgWPPxYG6hJP2hLM6EI4W+/suY4oQLn9GPhU63llX?=
=?iso-8859-1?Q?7tbzKDdHWz+RWViiQ9EkxBIEK+te9oNfr9IQ1eNOi14DiwU9MCy6u+3JFV?=
=?iso-8859-1?Q?f/3DVQnRSc8UcoEWAJw4OQ71oG8wj64Wie5ktmsnXNEbVtGQEHVBlqtinC?=
=?iso-8859-1?Q?Mg8wqoiZIrCF6BfnAMjogGEm2buIGm+itL4LtPTHwLh2kMlelD9LPlntmJ?=
=?iso-8859-1?Q?5CRIVFebE/VgyjWFCi2KU7Wnyle/9XVUjowUg9Ju45yJmKuAchDUIo8K20?=
=?iso-8859-1?Q?2t9Ci3KsQrp3tXS8lf3P92uzfb0peWKMbSsv0=3D?=
X-Forefront-Antispam-Report:
CIP:103.196.166.1;CTRY:ID;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:VSDC010026P.kemenkeu.go.id;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230040)(35950700016)(32650700017)(82310400026)(48200799018)(376014)(7416014)(61400799027)(62346027);DIR:OUT;SFP:1023;
X-OriginatorOrg: kemenkeu.go.id
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Sep 2024 22:26:18.3893
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 25e160e0-3957-45bc-7e6d-08dcd69e95bf
X-MS-Exchange-CrossTenant-Id: ed6fb366-8322-46f3-915e-c4d037a454a9
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=ed6fb366-8322-46f3-915e-c4d037a454a9;Ip=[103.196.166.1];Helo=[VSDC010026P.kemenkeu.go.id]
X-MS-Exchange-CrossTenant-AuthSource:
HK2PEPF00006FAF.apcprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR03MB7034
X-Spam_score: 27.9
X-Spam_score_int: 279
X-Spam_bar: +++++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Recipient, This is to inform you that the UN Organizations
had a meeting in the past week and have decided to settle you for all the
resources you misfeed to swindlers. You have been awarded a compensation
package totaling US$8.50,000.00, which may be transmitted electronically to
your nominated bank account or, at your preference, a MasterCard bearing
the correspond [...]
Content analysis details: (27.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[94.141.120.230 listed in will-spam-for-food.eu.org]
[94.141.120.230 listed in will-spam-for-food.eu.org]
[94.141.120.230 listed in will-spam-for-food.eu.org]
[94.141.120.230 listed in will-spam-for-food.eu.org]
[94.141.120.230 listed in will-spam-for-food.eu.org]
[94.141.120.230 listed in will-spam-for-food.eu.org]
[94.141.120.230 listed in will-spam-for-food.eu.org]
[94.141.120.230 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[2603:1096:4:186:cafe:0:0:f5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:cafe:0:0:f5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:cafe:0:0:f5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:cafe:0:0:f5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:cafe:0:0:f5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:cafe:0:0:f5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:cafe:0:0:f5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:cafe:0:0:f5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:0:0:0:11 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:0:0:0:11 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:0:0:0:11 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:0:0:0:11 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:0:0:0:11 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:0:0:0:11 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:0:0:0:11 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:0:0:0:11 listed in]
[will-spam-for-food.eu.org]
[40.95.53.159 listed in will-spam-for-food.eu.org]
[40.95.53.159 listed in will-spam-for-food.eu.org]
[40.95.53.159 listed in will-spam-for-food.eu.org]
[40.95.53.159 listed in will-spam-for-food.eu.org]
[40.95.53.159 listed in will-spam-for-food.eu.org]
[40.95.53.159 listed in will-spam-for-food.eu.org]
[40.95.53.159 listed in will-spam-for-food.eu.org]
[40.95.53.159 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[103.196.166.1 listed in dnsbl.ahbl.org]
[103.196.166.1 listed in dnsbl.ahbl.org]
[103.196.166.1 listed in dnsbl.ahbl.org]
[103.196.166.1 listed in dnsbl.ahbl.org]
[40.95.53.159 listed in dnsbl.ahbl.org]
[40.95.53.159 listed in dnsbl.ahbl.org]
[40.95.53.159 listed in dnsbl.ahbl.org]
[40.95.53.159 listed in dnsbl.ahbl.org]
[94.141.120.230 listed in dnsbl.ahbl.org]
[94.141.120.230 listed in dnsbl.ahbl.org]
[94.141.120.230 listed in dnsbl.ahbl.org]
[94.141.120.230 listed in dnsbl.ahbl.org]
[2603:1096:4:186:0:0:0:11 listed in]
[dnsbl.ahbl.org]
[2603:1096:4:186:0:0:0:11 listed in]
[dnsbl.ahbl.org]
[2603:1096:4:186:0:0:0:11 listed in]
[dnsbl.ahbl.org]
[2603:1096:4:186:0:0:0:11 listed in]
[dnsbl.ahbl.org]
[2603:1096:4:186:cafe:0:0:f5 listed in]
[dnsbl.ahbl.org]
[2603:1096:4:186:cafe:0:0:f5 listed in]
[dnsbl.ahbl.org]
[2603:1096:4:186:cafe:0:0:f5 listed in]
[dnsbl.ahbl.org]
[2603:1096:4:186:cafe:0:0:f5 listed in]
[dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[103.196.166.1 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[103.196.166.1 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[103.196.166.1 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[103.196.166.1 listed in dnsbl.ahbl.org]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see]
1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org
[Listed by XBL, see]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[94.141.120.230 listed in sbl-xbl.spamhaus.org]
[94.141.120.230 listed in sbl-xbl.spamhaus.org]
[94.141.120.230 listed in sbl-xbl.spamhaus.org]
[94.141.120.230 listed in sbl-xbl.spamhaus.org]
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[94.141.120.230 listed in zen.spamhaus.org]
2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[94.141.120.230 listed in zen.spamhaus.org]
0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS
0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=APC01-PSA-obe.outbound.protection.outlook.com;ip=40.95.53.159;r=doctor.nl2k.ab.ca]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 ARC_VALID Message has a valid ARC signature
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 ARC_SIGNED Message has a ARC signature
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.0 AXB_X_FF_SEZ_S Forefront sez this is spam
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[officebankinfo01(at)gmail.com]
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 HK_NAME_MR_MRS No description available.
0.6 MONEY_NOHTML Lots of money in plain text
2.0 PDS_HELO_SPF_FAIL High profile HELO that fails SPF
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
Subject: {SPAM?} Hello there
Dear Recipient,
This is to inform you that the UN Organizations had a meeting in the past w=
eek and have decided to settle you for all the resources you misfeed to swi=
ndlers.
You have been awarded a compensation package totaling US$8.50,000.00, which=
may be transmitted electronically to your nominated bank account or, at yo=
ur preference, a MasterCard bearing the corresponding value will be forward=
ed to your verified home address.
Validate your information:
1: Full Name
2: Current Home address
3: Country
4: Phone Number
5:ID Card (Government Issued)
Regards
Olga Tsokova
Email:offf4232@gmail.com
________________________________
PENTING
"Email ini (termasuk seluruh lampirannya, bila ada) hanya ditujukan kepada =
penerima sebagaimana dimaksud pada tujuan email ini. Email ini dapat berisi=
informasi atau hal-hal yang secara hukum bersifat rahasia. Jika terdapat k=
esalahan pengiriman (Anda bukan penerima yang dituju), maka Anda tidak dipe=
rkenankan untuk memanfaatkan, menyebarkan, mendistribusikan, atau mengganda=
kan email ini beserta seluruh lampirannya. Mohon kerja samanya untuk segera=
menghapus email ini beserta seluruh lampirannya (di mana Anda bukan peneri=
ma yang dituju). Semua pendapat yang ada dalam email ini merupakan pendapat=
pribadi dari pengirim yang bersangkutan dan tidak serta merta mencerminkan=
pandangan Kementerian Keuangan, kecuali telah terdapat kesepakatan antara =
pengirim dan penerima bahwa email ini termasuk salah satu bentuk komunikasi=
kedinasan yang dapat diterima oleh kedua pihak".
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 16 Sep 2024 18:29:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from
id 1sqLTv-00000000PGA-1bl0
for dave@doctor.nl2k.ab.ca;
Mon, 16 Sep 2024 17:50:11 -0600
Resent-From: The Doctor
Resent-Date: Mon, 16 Sep 2024 17:50:11 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-psaapc01rlhn2159.outbound.protection.outlook.com ([40.95.53.159]:63456 helo=APC01-PSA-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98 (FreeBSD))
(envelope-from
id 1sqKCg-00000000KaY-1q0s
for bin@nl2k.ab.ca;
Mon, 16 Sep 2024 16:28:30 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
b=F2OyM7g7v3cHmxjVrrbIVHBaCOquHdGVL9pXwCp+hw+lNUmg5RCpveGkI0/XTMwubRhGb0IL+uNaNTRiGjVHRoEtsSjUPgd2KJP6U14SWIdbyKswarUW9m3kown1lTber4R1fuQX9EgDPYw8gkbdthHOdaUG66iDkVlobc+r8bMsw2SQSkgBFA61ycrHcRtRFGFLLE4kgR7Q+zNm26y7h6XOCExa3H0OgFlJDKGzTuD9hNLP9fjnVYlLM7v+RqItZgwzYqPoMtUpoS8KGH5BgD4+LhiTbuCabv/1f4Ljk2A82OQeMu6ucpwdenxlpNrji7oo2o1Ar4TeH5c80jWCZA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector10001;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=igcKjzj10KB1mVg9FcmVu8EJUsVMpVfYoRepyotNvB0=;
b=KvGa8kW0Hk7I+rRBvyStc/y3aEM5diL6Fk3Go8QPLpWBKeS38zTkMVFK04sd0b5A8vzKTrV1lkotSN4JuZl0vW0WgIuW5bmFmT0AEJC9Dyu7U4CYHewYQCxJ8g9jDeSbySb6J+9rQrhmK+SnrSaFVUtFcZvh8ItFbnpRSWEkYa9y/dkbt6ECu5G3jVizVcdz4kVTvkHHv7T63MrzmL6edT4ngJOAYfeEQ3ASOE+Q+eXh4qrC1zkx3UpJtT3daUCF8626qVkgLf5n/tMFfjrAALuAetxUP8m0gN1OIiah+X5iOdQnM2ldawX4F6nNsXqHNlVy2LHh5LLMMUkMFvaOzg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is
103.196.166.1) smtp.rcpttodomain=khsclan.de smtp.mailfrom=0rgm.com;
dmarc=none action=none header.from=0rgm.com; dkim=none (message not signed);
arc=none (0)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=KemenKeu.onmicrosoft.com; s=selector1-KemenKeu-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=igcKjzj10KB1mVg9FcmVu8EJUsVMpVfYoRepyotNvB0=;
b=aKCHXRvQlhvI/soM2VHSHekr2rsb9N+Uc18fbqHE2CYz2dWN9ldtfE07TGaKZHoFAg0kM4TrVALTaVIdZ//nhLj52Y2NwzvfnJVnAuLDi/1Yn9DUly6FuTU3jOZhs4Ov918MFANaIeGOnSMljeBthWditGgsGE1Wzr2MNl1deVXfUwxE8J37YncS4qNjHzPta87dPkIZhIozgE2H9d/n2Tvp5DnCZNnDY0Hr0dWdZlKYhGZYMQT9T+hkkY5c87S/dYy9nKfRhj1fKqQ/iJO/i5VWJ0TJUlE1NtK6q/YcQ/0zaV8sz2RVqBdbDz8tx7nlOyeppGmiyMlbK0FLGfFqFA==
Received: from SI2PR06CA0014.apcprd06.prod.outlook.com (2603:1096:4:186::11)
by SEZPR03MB7034.apcprd03.prod.outlook.com (2603:1096:101:e0::11) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7962.24; Mon, 16 Sep
2024 22:26:19 +0000
Received: from HK2PEPF00006FAF.apcprd02.prod.outlook.com
(2603:1096:4:186:cafe::f5) by SI2PR06CA0014.outlook.office365.com
(2603:1096:4:186::11) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7939.30 via Frontend
Transport; Mon, 16 Sep 2024 22:26:18 +0000
X-MS-Exchange-Authentication-Results: spf=none (sender IP is 103.196.166.1)
smtp.mailfrom=0rgm.com; dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=0rgm.com;
Received-SPF: None (protection.outlook.com: 0rgm.com does not designate
permitted sender hosts)
Received: from VSDC010026P.kemenkeu.go.id (103.196.166.1) by
HK2PEPF00006FAF.mail.protection.outlook.com (10.167.8.5) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.7918.13 via Frontend Transport; Mon, 16 Sep 2024 22:26:18 +0000
Received: from [94.141.120.230] (94.141.120.230) by VSDC010026P.kemenkeu.go.id
(10.216.131.12) with Microsoft SMTP Server id 15.2.1258.12; Tue, 17 Sep 2024
05:25:59 +0700
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Hello there
To: Recipients
From: "Mrs.Olga Tsokova info"
Date: Mon, 16 Sep 2024 15:25:01 -0700
Reply-To:
Message-ID: <3eb23580-35e6-421e-bdd5-995104251390@VSDC010026P.kemenkeu.go.id>
Received-SPF: Fail (VSDC010026P.kemenkeu.go.id: domain of infoinfo22@0rgm.com
does not designate 94.141.120.230 as permitted sender)
receiver=VSDC010026P.kemenkeu.go.id; client-ip=94.141.120.230;
helo=[94.141.120.230];
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: HK2PEPF00006FAF:EE_|SEZPR03MB7034:EE_
X-MS-Office365-Filtering-Correlation-Id: 25e160e0-3957-45bc-7e6d-08dcd69e95bf
X-MS-Exchange-SenderADCheck: 2
X-MS-Exchange-AntiSpam-Relay: 1
X-Microsoft-Antispam:
BCL:0;ARA:13230040|35950700016|32650700017|82310400026|48200799018|376014|7416014|61400799027|62346027;
X-Microsoft-Antispam-Message-Info:
=?iso-8859-1?Q?sBcLwtYuUpPYaqpclJEt1YNY4DuB3pK9AOhfUku/AYLT5xx4+n7IVCS5Xn?=
=?iso-8859-1?Q?3TWv4Pqe/eld1+BqGiB/sab6wBaHz6NunD9kjiq7RQvaxGfg+X0FlX7Xki?=
=?iso-8859-1?Q?6/60dOimyssLPnHatCrq1J6n2VoayxPZZqHC32zQ2GG5W2trR/p8+khVoD?=
=?iso-8859-1?Q?FabWC73avJ5C4v/+9MU3I8xLUYAjv9HFSaUolnVFY0HDNXSP3wNQf/H9GQ?=
=?iso-8859-1?Q?iDE7MKO/r4qtxDoBcMwVxslsQD69wef3iXoSIb4SorRhPDprPTKtwJr0Qx?=
=?iso-8859-1?Q?E3UAZTkDywcHcnzh++6nGrqkdEUn+aWNfoAzcnFNvlfefuDWpJEyNWdgZR?=
=?iso-8859-1?Q?DPtqjsmWv7f/K/l5FqdLwgTydYwFIZ5QpE5ey88I6hUsbMZVHDKtJ9Fakt?=
=?iso-8859-1?Q?cUi4XhnnKlPf8yFe+CSJJ+9QW6poszeWLZVHrLepSFhNV42Z1+GK/WK4h4?=
=?iso-8859-1?Q?ylUfVmqvEGjOGQp0mx0PUMC98OS/I1oc1VwFCmJN50zOTm3SNYqqGVC/pO?=
=?iso-8859-1?Q?D0TDcFl6v/KrQC7gyu8KNp3wNiYiqFDzvEn0XameN0qB02ZynWoI732GEY?=
=?iso-8859-1?Q?mUmKZk1eA+pka8GoT9nbHx7SOmiHL527jjq4Hq1C/6QONGa9SOJsIYIQMw?=
=?iso-8859-1?Q?ixv+6cjRtSI90MqePKRp3vB2xiiS34njxUDuSIcqFCRodph19DbVj63g0N?=
=?iso-8859-1?Q?fmaWFBm5P/ThVnc9OBg8cFgllUEPt5DIAMyJnH9JzIXmCgLtj7yoY6IrOR?=
=?iso-8859-1?Q?rYDij5EfV0FzcgLbzU3BcxJ7AsOJn9kyau7O84QWxvCn1tGdP10RhaGNkp?=
=?iso-8859-1?Q?W0OZ3V2fFuu9kKhNKRnFnO9wl8YYOz0W2sC6w5nIWTveKyuLSefrY+7CEq?=
=?iso-8859-1?Q?CnfxqIhBgiFTsycioznnbnRx1U5/yw2+bsLPND57S1BXTJi6i7yPLlisZX?=
=?iso-8859-1?Q?hpwzTVlJBbJxE9Uo9QlieOnp4vhBB0fPv5cdlsu9d2013jqnna1RtCZUXj?=
=?iso-8859-1?Q?oSaSCn7MIUnetB3inH81y9A4Hop7vWZUhnzvC5P/kRAnT/lJjHVHgxJqZi?=
=?iso-8859-1?Q?neq4yadew6Eh2t2THESdorC5fo+wgkkeHmZEn8cLhloWnndwf3wnyg4egb?=
=?iso-8859-1?Q?or7yjQsUlrbOBGd44LIvZxrxgHgLR1vTFFm/qicNGVI8op4JYHpHVlo8Fx?=
=?iso-8859-1?Q?irH64ay1ZrHfqLpWdT3qP0/fNJRekzB+n7bhqEv+a3J55GaUzxSSlOpbdb?=
=?iso-8859-1?Q?eF7LeQsHndBR/A+bvuRXXIpc8f7CD9xQO2ZZj2B32AKwBgxPK2O3Vvor2t?=
=?iso-8859-1?Q?9teI+hsP6GElWdC4oirGq7tpwJuRtPMLULCct/4sl8u6VgM9Mg8NxHsJTT?=
=?iso-8859-1?Q?3+p9qWZzL0Md40jvO6M5IRFPErfOlj87kWxhfFKR60lSOzdrqiEB7Zbb+C?=
=?iso-8859-1?Q?f4GBdOLsqeqJty7GFDmqxt6C+2DWMXdqpa+Pc4Y+CBkrYirKHSj3QFUp1O?=
=?iso-8859-1?Q?FM2B/qRl7fhxGNLHqWuwkfuJyNVLIQy9aODMYAHrkl/SvXHgZkAx7mprWs?=
=?iso-8859-1?Q?jwrmiaY70RnXDkL/OfgWPPxYG6hJP2hLM6EI4W+/suY4oQLn9GPhU63llX?=
=?iso-8859-1?Q?7tbzKDdHWz+RWViiQ9EkxBIEK+te9oNfr9IQ1eNOi14DiwU9MCy6u+3JFV?=
=?iso-8859-1?Q?f/3DVQnRSc8UcoEWAJw4OQ71oG8wj64Wie5ktmsnXNEbVtGQEHVBlqtinC?=
=?iso-8859-1?Q?Mg8wqoiZIrCF6BfnAMjogGEm2buIGm+itL4LtPTHwLh2kMlelD9LPlntmJ?=
=?iso-8859-1?Q?5CRIVFebE/VgyjWFCi2KU7Wnyle/9XVUjowUg9Ju45yJmKuAchDUIo8K20?=
=?iso-8859-1?Q?2t9Ci3KsQrp3tXS8lf3P92uzfb0peWKMbSsv0=3D?=
X-Forefront-Antispam-Report:
CIP:103.196.166.1;CTRY:ID;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:VSDC010026P.kemenkeu.go.id;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230040)(35950700016)(32650700017)(82310400026)(48200799018)(376014)(7416014)(61400799027)(62346027);DIR:OUT;SFP:1023;
X-OriginatorOrg: kemenkeu.go.id
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Sep 2024 22:26:18.3893
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 25e160e0-3957-45bc-7e6d-08dcd69e95bf
X-MS-Exchange-CrossTenant-Id: ed6fb366-8322-46f3-915e-c4d037a454a9
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=ed6fb366-8322-46f3-915e-c4d037a454a9;Ip=[103.196.166.1];Helo=[VSDC010026P.kemenkeu.go.id]
X-MS-Exchange-CrossTenant-AuthSource:
HK2PEPF00006FAF.apcprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR03MB7034
X-Spam_score: 27.9
X-Spam_score_int: 279
X-Spam_bar: +++++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Recipient, This is to inform you that the UN Organizations
had a meeting in the past week and have decided to settle you for all the
resources you misfeed to swindlers. You have been awarded a compensation
package totaling US$8.50,000.00, which may be transmitted electronically to
your nominated bank account or, at your preference, a MasterCard bearing
the correspond [...]
Content analysis details: (27.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[94.141.120.230 listed in will-spam-for-food.eu.org]
[94.141.120.230 listed in will-spam-for-food.eu.org]
[94.141.120.230 listed in will-spam-for-food.eu.org]
[94.141.120.230 listed in will-spam-for-food.eu.org]
[94.141.120.230 listed in will-spam-for-food.eu.org]
[94.141.120.230 listed in will-spam-for-food.eu.org]
[94.141.120.230 listed in will-spam-for-food.eu.org]
[94.141.120.230 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[2603:1096:4:186:cafe:0:0:f5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:cafe:0:0:f5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:cafe:0:0:f5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:cafe:0:0:f5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:cafe:0:0:f5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:cafe:0:0:f5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:cafe:0:0:f5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:cafe:0:0:f5 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:0:0:0:11 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:0:0:0:11 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:0:0:0:11 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:0:0:0:11 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:0:0:0:11 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:0:0:0:11 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:0:0:0:11 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:186:0:0:0:11 listed in]
[will-spam-for-food.eu.org]
[40.95.53.159 listed in will-spam-for-food.eu.org]
[40.95.53.159 listed in will-spam-for-food.eu.org]
[40.95.53.159 listed in will-spam-for-food.eu.org]
[40.95.53.159 listed in will-spam-for-food.eu.org]
[40.95.53.159 listed in will-spam-for-food.eu.org]
[40.95.53.159 listed in will-spam-for-food.eu.org]
[40.95.53.159 listed in will-spam-for-food.eu.org]
[40.95.53.159 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[103.196.166.1 listed in dnsbl.ahbl.org]
[103.196.166.1 listed in dnsbl.ahbl.org]
[103.196.166.1 listed in dnsbl.ahbl.org]
[103.196.166.1 listed in dnsbl.ahbl.org]
[40.95.53.159 listed in dnsbl.ahbl.org]
[40.95.53.159 listed in dnsbl.ahbl.org]
[40.95.53.159 listed in dnsbl.ahbl.org]
[40.95.53.159 listed in dnsbl.ahbl.org]
[94.141.120.230 listed in dnsbl.ahbl.org]
[94.141.120.230 listed in dnsbl.ahbl.org]
[94.141.120.230 listed in dnsbl.ahbl.org]
[94.141.120.230 listed in dnsbl.ahbl.org]
[2603:1096:4:186:0:0:0:11 listed in]
[dnsbl.ahbl.org]
[2603:1096:4:186:0:0:0:11 listed in]
[dnsbl.ahbl.org]
[2603:1096:4:186:0:0:0:11 listed in]
[dnsbl.ahbl.org]
[2603:1096:4:186:0:0:0:11 listed in]
[dnsbl.ahbl.org]
[2603:1096:4:186:cafe:0:0:f5 listed in]
[dnsbl.ahbl.org]
[2603:1096:4:186:cafe:0:0:f5 listed in]
[dnsbl.ahbl.org]
[2603:1096:4:186:cafe:0:0:f5 listed in]
[dnsbl.ahbl.org]
[2603:1096:4:186:cafe:0:0:f5 listed in]
[dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[103.196.166.1 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[103.196.166.1 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[103.196.166.1 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[103.196.166.1 listed in dnsbl.ahbl.org]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see
1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org
[Listed by XBL, see
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[94.141.120.230 listed in sbl-xbl.spamhaus.org]
[94.141.120.230 listed in sbl-xbl.spamhaus.org]
[94.141.120.230 listed in sbl-xbl.spamhaus.org]
[94.141.120.230 listed in sbl-xbl.spamhaus.org]
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[94.141.120.230 listed in zen.spamhaus.org]
2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[94.141.120.230 listed in zen.spamhaus.org]
0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS
0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=APC01-PSA-obe.outbound.protection.outlook.com;ip=40.95.53.159;r=doctor.nl2k.ab.ca]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 ARC_VALID Message has a valid ARC signature
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 ARC_SIGNED Message has a ARC signature
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.0 AXB_X_FF_SEZ_S Forefront sez this is spam
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[officebankinfo01(at)gmail.com]
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 HK_NAME_MR_MRS No description available.
0.6 MONEY_NOHTML Lots of money in plain text
2.0 PDS_HELO_SPF_FAIL High profile HELO that fails SPF
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
Subject: {SPAM?} Hello there
Dear Recipient,
This is to inform you that the UN Organizations had a meeting in the past w=
eek and have decided to settle you for all the resources you misfeed to swi=
ndlers.
You have been awarded a compensation package totaling US$8.50,000.00, which=
may be transmitted electronically to your nominated bank account or, at yo=
ur preference, a MasterCard bearing the corresponding value will be forward=
ed to your verified home address.
Validate your information:
1: Full Name
2: Current Home address
3: Country
4: Phone Number
5:ID Card (Government Issued)
Regards
Olga Tsokova
Email:offf4232@gmail.com
________________________________
PENTING
"Email ini (termasuk seluruh lampirannya, bila ada) hanya ditujukan kepada =
penerima sebagaimana dimaksud pada tujuan email ini. Email ini dapat berisi=
informasi atau hal-hal yang secara hukum bersifat rahasia. Jika terdapat k=
esalahan pengiriman (Anda bukan penerima yang dituju), maka Anda tidak dipe=
rkenankan untuk memanfaatkan, menyebarkan, mendistribusikan, atau mengganda=
kan email ini beserta seluruh lampirannya. Mohon kerja samanya untuk segera=
menghapus email ini beserta seluruh lampirannya (di mana Anda bukan peneri=
ma yang dituju). Semua pendapat yang ada dalam email ini merupakan pendapat=
pribadi dari pengirim yang bersangkutan dan tidak serta merta mencerminkan=
pandangan Kementerian Keuangan, kecuali telah terdapat kesepakatan antara =
pengirim dan penerima bahwa email ini termasuk salah satu bentuk komunikasi=
kedinasan yang dapat diterima oleh kedua pihak".
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments