Nigerian spam from Microsoft Outlook
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 16 Sep 2024 18:29:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from)
id 1sqLT5-00000000PAe-2odj
for dave@doctor.nl2k.ab.ca;
Mon, 16 Sep 2024 17:49:19 -0600
Resent-From: The Doctor
Resent-Date: Mon, 16 Sep 2024 17:49:19 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-psaapc01rlhn2161.outbound.protection.outlook.com ([40.95.53.161]:51240 helo=APC01-PSA-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98 (FreeBSD))
(envelope-from)
id 1sqHSm-00000000Ang-3Kyp
for bin@nl2k.ab.ca;
Mon, 16 Sep 2024 13:32:50 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
b=GIo/WzNlVxnZ4sZyOCPK/0bWo8WnLpZEJnCzIMHjSQ71j4JXcXjXRWyBrNHftRkbI9DEJGBadvlOvB9Ffhr6Z4eRoi3Mr+MvVHNHUH4CyGupFLaE2bTLQfgk1mIWr7iN87OqVgd9QgCt67rgVXDRFFzlaqS+T22KVFb4bMTUEbslwHTSHlmfMNI9Jp93JEuO5yzJUWQ9oSrmr5lFlNHNKWpq2wb6PHJx1DT2xgVRchM+tRgZyiefzBhB+59H/BQEg436dr4M74f8rsVhzUPId085ebeHFPY5yK6RUUWdy/gtzI7YrCBgblG+MiOPn6csgnXsKJ+8pkIShL4Nqumd2A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector10001;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=N7X9EL7St/+9dOLPWxorA62UgUZ0RVvo8GLOUNyUF2M=;
b=T5h7rlmUwPMeThaOSvHXOrWav+ECfDHI2Jq/bfun4bMZxOz9TOdDwVkxwvvmztyy9m5wwFmlR5EGadii2djksf5+e+270UR66vK4dyP+lOXrmHE5ttLBA0G3TIBWvRMHu9Ph8wMZoRhkYfLphAbgbacxlmBbHnJU4RRDI29IycKiV/Dyrs1QzTiX2C8topnge3xqOxW5yR7y+SL/zuwpq63y3s0+2CPihB6ZrpAVyp+vQ28zEM7/aSctuF0KNCFGqrKEFahlieGV8gsjKuuXYx7c8O1MZOPqf5fBEryER7Eh8VsVlbKRtyFhHS+dhLevtcmfy985khExPsuiZZF0ng==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is
103.196.166.1) smtp.rcpttodomain=msn.com smtp.mailfrom=orgl.com; dmarc=none
action=none header.from=orgl.com; dkim=none (message not signed); arc=none
(0)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=KemenKeu.onmicrosoft.com; s=selector1-KemenKeu-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=N7X9EL7St/+9dOLPWxorA62UgUZ0RVvo8GLOUNyUF2M=;
b=HIV64OGbVdrBUvvjKn8PUq+e/o1SEuIBmh9QtIDkjKLp+3oGzqS9C5H4deGdMuRgWExucKFdXXb9/Ev9lAqgg9ru4RQKRmyRUHd/V3E/SCdsNKTZEms/rHqOw/m2PArxJbBMn71khokrPpId3MPQfRw/TJElT9GUsjXgmisikxFR/r0LuQJsy9rCNs2gOtuzpWTzw7LZvtjWoQeV9eJoeGe5DG4gjucHaJ7hslZOH0E4hlkLyabfGfjFRAES9VWBixj/x/EFLTyXcZV0tXFqGC1sgo57E+Piie9AYwAa8YHAlUxSLELAC2UsCpa8dgoJy49yaS+QzdkHH3BGBtXSeA==
Received: from SGAP274CA0005.SGPP274.PROD.OUTLOOK.COM (2603:1096:4:b6::17) by
OSQPR03MB8748.apcprd03.prod.outlook.com (2603:1096:604:275::10) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7962.23; Mon, 16 Sep
2024 19:12:31 +0000
Received: from HK3PEPF0000021E.apcprd03.prod.outlook.com
(2603:1096:4:b6:cafe::7c) by SGAP274CA0005.outlook.office365.com
(2603:1096:4:b6::17) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7939.30 via Frontend
Transport; Mon, 16 Sep 2024 19:12:30 +0000
X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 103.196.166.1)
smtp.mailfrom=orgl.com; dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=orgl.com;
Received-SPF: Fail (protection.outlook.com: domain of orgl.com does not
designate 103.196.166.1 as permitted sender) receiver=protection.outlook.com;
client-ip=103.196.166.1; helo=VSDC010025P.kemenkeu.go.id;
Received: from VSDC010025P.kemenkeu.go.id (103.196.166.1) by
HK3PEPF0000021E.mail.protection.outlook.com (10.167.8.40) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.7918.13 via Frontend Transport; Mon, 16 Sep 2024 19:12:29 +0000
Received: from [178.215.236.135] (178.215.236.135) by
VSDC010025P.kemenkeu.go.id (10.216.131.11) with Microsoft SMTP Server id
15.2.1258.12; Tue, 17 Sep 2024 02:12:39 +0700
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Is this a valid email address.
To: Recipients
From: "Mrs. Marla Blown"
Date: Mon, 16 Sep 2024 12:11:11 -0700
Reply-To:
Message-ID:
Received-SPF: Fail (VSDC010025P.kemenkeu.go.id: domain of
skollfoundation@orgl.com does not designate 178.215.236.135 as permitted
sender) receiver=VSDC010025P.kemenkeu.go.id; client-ip=178.215.236.135;
helo=[178.215.236.135];
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: HK3PEPF0000021E:EE_|OSQPR03MB8748:EE_
X-MS-Office365-Filtering-Correlation-Id: 5ca2e724-1b5c-49b0-d961-08dcd6838297
X-MS-Exchange-SenderADCheck: 2
X-MS-Exchange-AntiSpam-Relay: 1
X-Microsoft-Antispam:
BCL:0;ARA:13230040|48200799018|32650700017|35950700016|82310400026|30052699003|7416014|376014|61400799027|62346027;
X-Microsoft-Antispam-Message-Info:
=?iso-8859-1?Q?klsvoeJ3OPuYanTJIUqpDFPugKzfB+IdH11uesLDeJQlsLzVo7jV8Dn/qL?=
=?iso-8859-1?Q?JsTptA6FBIXLwcZmIJ7pv8s2anTyvvFrZavRDwCCX/u9ZonpQOzBXuR8eA?=
=?iso-8859-1?Q?6LkBMM3QXbhXbutO+nX6zwRdQyY7RtKHIk1NjqsQyQa3+UcUR5DMdy/GsT?=
=?iso-8859-1?Q?3Voe7YRqa0BvFLy58MGevF9uGyvaTkC2zWFv2zlUHvCpFJTiqTxsnAzbh2?=
=?iso-8859-1?Q?KO+7v5PSDwMYLlUyIukuV1BcfNoVAbkurj9b4V4sif+ALixY3JGAGlocgV?=
=?iso-8859-1?Q?ElktJFoxBtwT/bWoQd5ZdsSs76s8E/nkZezJilrZHn0/yfEt9+UkYw3FKn?=
=?iso-8859-1?Q?dheY+zAv/HGX1lhBPjSfNyU3UMUGdnwlOoAinWEhK4ifvwbHp3aqhf9gUi?=
=?iso-8859-1?Q?q5LTq2ZpZIaSDWIDBDBEtZqfcFgWGC0kYZLqWOVehCL5HZr4R4Cu4+xCIE?=
=?iso-8859-1?Q?UoUpFtSZD8GjOE+5EsJ9cnd1IJ1tzYPD2teNt0cOC/G0c1auNsAnBOjuzL?=
=?iso-8859-1?Q?JTsNVciXQ7IxBuB12rpy7lirH9vnv2D8jhN0X8Q9h3TlEnEB/cVWHcbXOI?=
=?iso-8859-1?Q?l4cRwMFzjUDLth6WVOy/NmASn5UeZB9mnucdQBLARiLtIa/lGSYDvMKTod?=
=?iso-8859-1?Q?c+863L3Hai/u0lh+CJjCP8LdvBn5MlhYzvBtUCC0t7pN/oJzum9cH9aPOI?=
=?iso-8859-1?Q?rBIg3luzYxeodAsPsD4DJLxgXd13L3r3S17ZZBWCv4bFSw++mxfnX9OKyh?=
=?iso-8859-1?Q?pNuKh5K8xVmqL7tYcn315VBG6eh64MuA4kUZrN//mQcK5GPTERM2yidL0i?=
=?iso-8859-1?Q?1DRKAIdDUoR44zuPuXRBAm4+D2nLDcBYGa5efI8fDFTYbCzfRbNOQ38hpN?=
=?iso-8859-1?Q?rGglYc4/91xiOY0d09qPYWBiiGQHoPk8grNNFQIJqhU57UsBcoJbNztFZp?=
=?iso-8859-1?Q?5/ar/yPrE4uYvAhU+vmQXV3MRN4cj41mbaNMNv/21orKdzEVW/Z3hrj0kr?=
=?iso-8859-1?Q?smM8yzd4A53Jjjx8XWA7BswuC9ml+EQWT0Iskb6bZnX8KREEuT9PjTMK7Q?=
=?iso-8859-1?Q?uordw1pXkUBAZh5BP+YI0QdkDSCDE0cpI+ac/ae/fZUzOl/4JvwutTE8g7?=
=?iso-8859-1?Q?2eScKotjK/v7+cSSlOizLpFkbCYWXUhwm/8OGWVUFJ7L6zIlSNxiJbj689?=
=?iso-8859-1?Q?3W+nEwjX13h+0vfEOYSkhHe37VQv3Lrba79S1QvDqwDj7hNn1VsPMT5YpY?=
=?iso-8859-1?Q?UIdNSkkROlNuJoxeQZD8gCSTpQRiTDSRDaNyxjmrzxH9oYCj53nMT6KEdB?=
=?iso-8859-1?Q?QA46+Rhv40FIMpkzNVPyBpvSg9cc9ozT1J/AErIvUEd/yf7lxEzlw1sODA?=
=?iso-8859-1?Q?qMIynT+shqzK+mfWQGLIgG31E8+k1QBgc7/dhxxr0HL2ECx40/hB8Yk5+t?=
=?iso-8859-1?Q?206Ug7aDi20HeCuQIjWQYr/zhJPSZDrBtQOufN178WQ2ynwE7Cah1zagqI?=
=?iso-8859-1?Q?KCJM13Mmmut10xova3TbjEt7Cv9alrhBYXt9OZqSUj9jQAF/0p1d/DEbN8?=
=?iso-8859-1?Q?4bK3cKiFN8S9O/7q6IVo+ZDa1YTVXzrbzF1wXPtLSGp1Y1/Lcypd2xkXE9?=
=?iso-8859-1?Q?1H7o2hiBVRhj3AAqaP2yUk1CzEgW66kHoYhWqYCwqqatjWLF+Skv0GDoCo?=
=?iso-8859-1?Q?vysMLTjQB9EAeZfDt6KJ7tysuVUk/PsKNvmAQhfkxKZ7od3DjzsJMF4+Kd?=
=?iso-8859-1?Q?tA0yyRwc0arQX1IeKLT/NEOx/U0ARBRDERSwpH+V7ag+1cYXk1WGagqpk0?=
=?iso-8859-1?Q?9shswrnYbY7tgyXybLb3W8ljKWTZw/kys4Y1jrMWxjIcSvImawELZ9+/BS?=
=?iso-8859-1?Q?8g0lJayrS+2/fUE+hFiaI/Ty4yQfTkqxpb6Xx/rAS5EUWTIaANuq9BxkYH?=
=?iso-8859-1?Q?XhffWEbeaAQXgExpJhGkxyjxJq3MZzpUNjIEQt3U61E=3D?=
X-Forefront-Antispam-Report:
CIP:103.196.166.1;CTRY:ID;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:VSDC010025P.kemenkeu.go.id;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230040)(48200799018)(32650700017)(35950700016)(82310400026)(30052699003)(7416014)(376014)(61400799027)(62346027);DIR:OUT;SFP:1023;
X-OriginatorOrg: kemenkeu.go.id
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Sep 2024 19:12:29.8567
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 5ca2e724-1b5c-49b0-d961-08dcd6838297
X-MS-Exchange-CrossTenant-Id: ed6fb366-8322-46f3-915e-c4d037a454a9
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=ed6fb366-8322-46f3-915e-c4d037a454a9;Ip=[103.196.166.1];Helo=[VSDC010025P.kemenkeu.go.id]
X-MS-Exchange-CrossTenant-AuthSource:
HK3PEPF0000021E.apcprd03.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: OSQPR03MB8748
X-Spam_score: 25.9
X-Spam_score_int: 259
X-Spam_bar: +++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Congratulations! Your email address is selected to receive
a $3,500,000.00 grant Fund. Dear Email ID Owner. Congratulations from the
Jeff Skoll Foundation, where life changing opportunities and cash are given
out on a daily basis. Our Founder has indeed been a great philanthropist
to this generation and is [...]
Content analysis details: (25.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[178.215.236.135 listed in will-spam-for-food.eu.org]
[178.215.236.135 listed in will-spam-for-food.eu.org]
[178.215.236.135 listed in will-spam-for-food.eu.org]
[178.215.236.135 listed in will-spam-for-food.eu.org]
[178.215.236.135 listed in will-spam-for-food.eu.org]
[178.215.236.135 listed in will-spam-for-food.eu.org]
[178.215.236.135 listed in will-spam-for-food.eu.org]
[178.215.236.135 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[2603:1096:4:b6:cafe:0:0:7c listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:cafe:0:0:7c listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:cafe:0:0:7c listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:cafe:0:0:7c listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:cafe:0:0:7c listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:cafe:0:0:7c listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:cafe:0:0:7c listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:cafe:0:0:7c listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:0:0:0:17 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:0:0:0:17 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:0:0:0:17 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:0:0:0:17 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:0:0:0:17 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:0:0:0:17 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:0:0:0:17 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:0:0:0:17 listed in]
[will-spam-for-food.eu.org]
[40.95.53.161 listed in will-spam-for-food.eu.org]
[40.95.53.161 listed in will-spam-for-food.eu.org]
[40.95.53.161 listed in will-spam-for-food.eu.org]
[40.95.53.161 listed in will-spam-for-food.eu.org]
[40.95.53.161 listed in will-spam-for-food.eu.org]
[40.95.53.161 listed in will-spam-for-food.eu.org]
[40.95.53.161 listed in will-spam-for-food.eu.org]
[40.95.53.161 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[40.95.53.161 listed in dnsbl.ahbl.org]
[40.95.53.161 listed in dnsbl.ahbl.org]
[40.95.53.161 listed in dnsbl.ahbl.org]
[40.95.53.161 listed in dnsbl.ahbl.org]
[2603:1096:4:b6:0:0:0:17 listed in]
[dnsbl.ahbl.org]
[2603:1096:4:b6:0:0:0:17 listed in]
[dnsbl.ahbl.org]
[2603:1096:4:b6:0:0:0:17 listed in]
[dnsbl.ahbl.org]
[2603:1096:4:b6:0:0:0:17 listed in]
[dnsbl.ahbl.org]
[2603:1096:4:b6:cafe:0:0:7c listed in]
[dnsbl.ahbl.org]
[2603:1096:4:b6:cafe:0:0:7c listed in]
[dnsbl.ahbl.org]
[2603:1096:4:b6:cafe:0:0:7c listed in]
[dnsbl.ahbl.org]
[2603:1096:4:b6:cafe:0:0:7c listed in]
[dnsbl.ahbl.org]
[103.196.166.1 listed in dnsbl.ahbl.org]
[103.196.166.1 listed in dnsbl.ahbl.org]
[103.196.166.1 listed in dnsbl.ahbl.org]
[103.196.166.1 listed in dnsbl.ahbl.org]
[178.215.236.135 listed in dnsbl.ahbl.org]
[178.215.236.135 listed in dnsbl.ahbl.org]
[178.215.236.135 listed in dnsbl.ahbl.org]
[178.215.236.135 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[40.95.53.161 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[40.95.53.161 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[40.95.53.161 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[40.95.53.161 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org
[Listed by XBL, see]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[178.215.236.135 listed in sbl-xbl.spamhaus.org]
[178.215.236.135 listed in sbl-xbl.spamhaus.org]
[178.215.236.135 listed in sbl-xbl.spamhaus.org]
[178.215.236.135 listed in sbl-xbl.spamhaus.org]
2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[178.215.236.135 listed in zen.spamhaus.org]
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[178.215.236.135 listed in zen.spamhaus.org]
0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=skollfoundation%40orgl.com;ip=40.95.53.161;r=doctor.nl2k.ab.ca]
0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=APC01-PSA-obe.outbound.protection.outlook.com;ip=40.95.53.161;r=doctor.nl2k.ab.ca]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 ARC_VALID Message has a valid ARC signature
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 ARC_SIGNED Message has a ARC signature
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.0 AXB_X_FF_SEZ_S Forefront sez this is spam
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.0 PDS_HELO_SPF_FAIL High profile HELO that fails SPF
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 HK_NAME_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.6 MONEY_NOHTML Lots of money in plain text
0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF
failed
Subject: {SPAM?} Is this a valid email address.
Congratulations! Your email address is selected to receive a $3,500,000.00 =
grant Fund.
Dear Email ID Owner.
Congratulations from the Jeff Skoll Foundation, where life changing opportu=
nities and cash are given out on a daily basis. Our Founder has indeed been=
a great philanthropist to this generation and is truly committed to giving=
while living.
We are therefore pleased to inform you that you are one of the lucky people=
to benefit and receive $3,500,000.00 USD from our Foundation's ongoing goo=
dwill (Grant Program). Is this message sent to a valid email account? Your =
email account was randomly selected from a massive pool to receive a cash d=
onation of $3,500,000.00 from the Foundation.
If this is a valid email account, kindly contact our Att. Raymond Arner (=
Attorney / Payment Supervisor) via (arnerattraymondg@gmail.com), for more c=
omprehensive information pertaining to your donation fund payment.
Have a pleasant day.
Sincerely,
Marla Blow,
President and Chief Operating Officer,
Skoll Foundation.
________________________________
PENTING
"Email ini (termasuk seluruh lampirannya, bila ada) hanya ditujukan kepada =
penerima sebagaimana dimaksud pada tujuan email ini. Email ini dapat berisi=
informasi atau hal-hal yang secara hukum bersifat rahasia. Jika terdapat k=
esalahan pengiriman (Anda bukan penerima yang dituju), maka Anda tidak dipe=
rkenankan untuk memanfaatkan, menyebarkan, mendistribusikan, atau mengganda=
kan email ini beserta seluruh lampirannya. Mohon kerja samanya untuk segera=
menghapus email ini beserta seluruh lampirannya (di mana Anda bukan peneri=
ma yang dituju). Semua pendapat yang ada dalam email ini merupakan pendapat=
pribadi dari pengirim yang bersangkutan dan tidak serta merta mencerminkan=
pandangan Kementerian Keuangan, kecuali telah terdapat kesepakatan antara =
pengirim dan penerima bahwa email ini termasuk salah satu bentuk komunikasi=
kedinasan yang dapat diterima oleh kedua pihak".
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 16 Sep 2024 18:29:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from
id 1sqLT5-00000000PAe-2odj
for dave@doctor.nl2k.ab.ca;
Mon, 16 Sep 2024 17:49:19 -0600
Resent-From: The Doctor
Resent-Date: Mon, 16 Sep 2024 17:49:19 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-psaapc01rlhn2161.outbound.protection.outlook.com ([40.95.53.161]:51240 helo=APC01-PSA-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98 (FreeBSD))
(envelope-from
id 1sqHSm-00000000Ang-3Kyp
for bin@nl2k.ab.ca;
Mon, 16 Sep 2024 13:32:50 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
b=GIo/WzNlVxnZ4sZyOCPK/0bWo8WnLpZEJnCzIMHjSQ71j4JXcXjXRWyBrNHftRkbI9DEJGBadvlOvB9Ffhr6Z4eRoi3Mr+MvVHNHUH4CyGupFLaE2bTLQfgk1mIWr7iN87OqVgd9QgCt67rgVXDRFFzlaqS+T22KVFb4bMTUEbslwHTSHlmfMNI9Jp93JEuO5yzJUWQ9oSrmr5lFlNHNKWpq2wb6PHJx1DT2xgVRchM+tRgZyiefzBhB+59H/BQEg436dr4M74f8rsVhzUPId085ebeHFPY5yK6RUUWdy/gtzI7YrCBgblG+MiOPn6csgnXsKJ+8pkIShL4Nqumd2A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector10001;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=N7X9EL7St/+9dOLPWxorA62UgUZ0RVvo8GLOUNyUF2M=;
b=T5h7rlmUwPMeThaOSvHXOrWav+ECfDHI2Jq/bfun4bMZxOz9TOdDwVkxwvvmztyy9m5wwFmlR5EGadii2djksf5+e+270UR66vK4dyP+lOXrmHE5ttLBA0G3TIBWvRMHu9Ph8wMZoRhkYfLphAbgbacxlmBbHnJU4RRDI29IycKiV/Dyrs1QzTiX2C8topnge3xqOxW5yR7y+SL/zuwpq63y3s0+2CPihB6ZrpAVyp+vQ28zEM7/aSctuF0KNCFGqrKEFahlieGV8gsjKuuXYx7c8O1MZOPqf5fBEryER7Eh8VsVlbKRtyFhHS+dhLevtcmfy985khExPsuiZZF0ng==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is
103.196.166.1) smtp.rcpttodomain=msn.com smtp.mailfrom=orgl.com; dmarc=none
action=none header.from=orgl.com; dkim=none (message not signed); arc=none
(0)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=KemenKeu.onmicrosoft.com; s=selector1-KemenKeu-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=N7X9EL7St/+9dOLPWxorA62UgUZ0RVvo8GLOUNyUF2M=;
b=HIV64OGbVdrBUvvjKn8PUq+e/o1SEuIBmh9QtIDkjKLp+3oGzqS9C5H4deGdMuRgWExucKFdXXb9/Ev9lAqgg9ru4RQKRmyRUHd/V3E/SCdsNKTZEms/rHqOw/m2PArxJbBMn71khokrPpId3MPQfRw/TJElT9GUsjXgmisikxFR/r0LuQJsy9rCNs2gOtuzpWTzw7LZvtjWoQeV9eJoeGe5DG4gjucHaJ7hslZOH0E4hlkLyabfGfjFRAES9VWBixj/x/EFLTyXcZV0tXFqGC1sgo57E+Piie9AYwAa8YHAlUxSLELAC2UsCpa8dgoJy49yaS+QzdkHH3BGBtXSeA==
Received: from SGAP274CA0005.SGPP274.PROD.OUTLOOK.COM (2603:1096:4:b6::17) by
OSQPR03MB8748.apcprd03.prod.outlook.com (2603:1096:604:275::10) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7962.23; Mon, 16 Sep
2024 19:12:31 +0000
Received: from HK3PEPF0000021E.apcprd03.prod.outlook.com
(2603:1096:4:b6:cafe::7c) by SGAP274CA0005.outlook.office365.com
(2603:1096:4:b6::17) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7939.30 via Frontend
Transport; Mon, 16 Sep 2024 19:12:30 +0000
X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 103.196.166.1)
smtp.mailfrom=orgl.com; dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=orgl.com;
Received-SPF: Fail (protection.outlook.com: domain of orgl.com does not
designate 103.196.166.1 as permitted sender) receiver=protection.outlook.com;
client-ip=103.196.166.1; helo=VSDC010025P.kemenkeu.go.id;
Received: from VSDC010025P.kemenkeu.go.id (103.196.166.1) by
HK3PEPF0000021E.mail.protection.outlook.com (10.167.8.40) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.7918.13 via Frontend Transport; Mon, 16 Sep 2024 19:12:29 +0000
Received: from [178.215.236.135] (178.215.236.135) by
VSDC010025P.kemenkeu.go.id (10.216.131.11) with Microsoft SMTP Server id
15.2.1258.12; Tue, 17 Sep 2024 02:12:39 +0700
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Is this a valid email address.
To: Recipients
From: "Mrs. Marla Blown"
Date: Mon, 16 Sep 2024 12:11:11 -0700
Reply-To:
Message-ID:
Received-SPF: Fail (VSDC010025P.kemenkeu.go.id: domain of
skollfoundation@orgl.com does not designate 178.215.236.135 as permitted
sender) receiver=VSDC010025P.kemenkeu.go.id; client-ip=178.215.236.135;
helo=[178.215.236.135];
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: HK3PEPF0000021E:EE_|OSQPR03MB8748:EE_
X-MS-Office365-Filtering-Correlation-Id: 5ca2e724-1b5c-49b0-d961-08dcd6838297
X-MS-Exchange-SenderADCheck: 2
X-MS-Exchange-AntiSpam-Relay: 1
X-Microsoft-Antispam:
BCL:0;ARA:13230040|48200799018|32650700017|35950700016|82310400026|30052699003|7416014|376014|61400799027|62346027;
X-Microsoft-Antispam-Message-Info:
=?iso-8859-1?Q?klsvoeJ3OPuYanTJIUqpDFPugKzfB+IdH11uesLDeJQlsLzVo7jV8Dn/qL?=
=?iso-8859-1?Q?JsTptA6FBIXLwcZmIJ7pv8s2anTyvvFrZavRDwCCX/u9ZonpQOzBXuR8eA?=
=?iso-8859-1?Q?6LkBMM3QXbhXbutO+nX6zwRdQyY7RtKHIk1NjqsQyQa3+UcUR5DMdy/GsT?=
=?iso-8859-1?Q?3Voe7YRqa0BvFLy58MGevF9uGyvaTkC2zWFv2zlUHvCpFJTiqTxsnAzbh2?=
=?iso-8859-1?Q?KO+7v5PSDwMYLlUyIukuV1BcfNoVAbkurj9b4V4sif+ALixY3JGAGlocgV?=
=?iso-8859-1?Q?ElktJFoxBtwT/bWoQd5ZdsSs76s8E/nkZezJilrZHn0/yfEt9+UkYw3FKn?=
=?iso-8859-1?Q?dheY+zAv/HGX1lhBPjSfNyU3UMUGdnwlOoAinWEhK4ifvwbHp3aqhf9gUi?=
=?iso-8859-1?Q?q5LTq2ZpZIaSDWIDBDBEtZqfcFgWGC0kYZLqWOVehCL5HZr4R4Cu4+xCIE?=
=?iso-8859-1?Q?UoUpFtSZD8GjOE+5EsJ9cnd1IJ1tzYPD2teNt0cOC/G0c1auNsAnBOjuzL?=
=?iso-8859-1?Q?JTsNVciXQ7IxBuB12rpy7lirH9vnv2D8jhN0X8Q9h3TlEnEB/cVWHcbXOI?=
=?iso-8859-1?Q?l4cRwMFzjUDLth6WVOy/NmASn5UeZB9mnucdQBLARiLtIa/lGSYDvMKTod?=
=?iso-8859-1?Q?c+863L3Hai/u0lh+CJjCP8LdvBn5MlhYzvBtUCC0t7pN/oJzum9cH9aPOI?=
=?iso-8859-1?Q?rBIg3luzYxeodAsPsD4DJLxgXd13L3r3S17ZZBWCv4bFSw++mxfnX9OKyh?=
=?iso-8859-1?Q?pNuKh5K8xVmqL7tYcn315VBG6eh64MuA4kUZrN//mQcK5GPTERM2yidL0i?=
=?iso-8859-1?Q?1DRKAIdDUoR44zuPuXRBAm4+D2nLDcBYGa5efI8fDFTYbCzfRbNOQ38hpN?=
=?iso-8859-1?Q?rGglYc4/91xiOY0d09qPYWBiiGQHoPk8grNNFQIJqhU57UsBcoJbNztFZp?=
=?iso-8859-1?Q?5/ar/yPrE4uYvAhU+vmQXV3MRN4cj41mbaNMNv/21orKdzEVW/Z3hrj0kr?=
=?iso-8859-1?Q?smM8yzd4A53Jjjx8XWA7BswuC9ml+EQWT0Iskb6bZnX8KREEuT9PjTMK7Q?=
=?iso-8859-1?Q?uordw1pXkUBAZh5BP+YI0QdkDSCDE0cpI+ac/ae/fZUzOl/4JvwutTE8g7?=
=?iso-8859-1?Q?2eScKotjK/v7+cSSlOizLpFkbCYWXUhwm/8OGWVUFJ7L6zIlSNxiJbj689?=
=?iso-8859-1?Q?3W+nEwjX13h+0vfEOYSkhHe37VQv3Lrba79S1QvDqwDj7hNn1VsPMT5YpY?=
=?iso-8859-1?Q?UIdNSkkROlNuJoxeQZD8gCSTpQRiTDSRDaNyxjmrzxH9oYCj53nMT6KEdB?=
=?iso-8859-1?Q?QA46+Rhv40FIMpkzNVPyBpvSg9cc9ozT1J/AErIvUEd/yf7lxEzlw1sODA?=
=?iso-8859-1?Q?qMIynT+shqzK+mfWQGLIgG31E8+k1QBgc7/dhxxr0HL2ECx40/hB8Yk5+t?=
=?iso-8859-1?Q?206Ug7aDi20HeCuQIjWQYr/zhJPSZDrBtQOufN178WQ2ynwE7Cah1zagqI?=
=?iso-8859-1?Q?KCJM13Mmmut10xova3TbjEt7Cv9alrhBYXt9OZqSUj9jQAF/0p1d/DEbN8?=
=?iso-8859-1?Q?4bK3cKiFN8S9O/7q6IVo+ZDa1YTVXzrbzF1wXPtLSGp1Y1/Lcypd2xkXE9?=
=?iso-8859-1?Q?1H7o2hiBVRhj3AAqaP2yUk1CzEgW66kHoYhWqYCwqqatjWLF+Skv0GDoCo?=
=?iso-8859-1?Q?vysMLTjQB9EAeZfDt6KJ7tysuVUk/PsKNvmAQhfkxKZ7od3DjzsJMF4+Kd?=
=?iso-8859-1?Q?tA0yyRwc0arQX1IeKLT/NEOx/U0ARBRDERSwpH+V7ag+1cYXk1WGagqpk0?=
=?iso-8859-1?Q?9shswrnYbY7tgyXybLb3W8ljKWTZw/kys4Y1jrMWxjIcSvImawELZ9+/BS?=
=?iso-8859-1?Q?8g0lJayrS+2/fUE+hFiaI/Ty4yQfTkqxpb6Xx/rAS5EUWTIaANuq9BxkYH?=
=?iso-8859-1?Q?XhffWEbeaAQXgExpJhGkxyjxJq3MZzpUNjIEQt3U61E=3D?=
X-Forefront-Antispam-Report:
CIP:103.196.166.1;CTRY:ID;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:VSDC010025P.kemenkeu.go.id;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230040)(48200799018)(32650700017)(35950700016)(82310400026)(30052699003)(7416014)(376014)(61400799027)(62346027);DIR:OUT;SFP:1023;
X-OriginatorOrg: kemenkeu.go.id
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Sep 2024 19:12:29.8567
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 5ca2e724-1b5c-49b0-d961-08dcd6838297
X-MS-Exchange-CrossTenant-Id: ed6fb366-8322-46f3-915e-c4d037a454a9
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=ed6fb366-8322-46f3-915e-c4d037a454a9;Ip=[103.196.166.1];Helo=[VSDC010025P.kemenkeu.go.id]
X-MS-Exchange-CrossTenant-AuthSource:
HK3PEPF0000021E.apcprd03.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: OSQPR03MB8748
X-Spam_score: 25.9
X-Spam_score_int: 259
X-Spam_bar: +++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Congratulations! Your email address is selected to receive
a $3,500,000.00 grant Fund. Dear Email ID Owner. Congratulations from the
Jeff Skoll Foundation, where life changing opportunities and cash are given
out on a daily basis. Our Founder has indeed been a great philanthropist
to this generation and is [...]
Content analysis details: (25.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[178.215.236.135 listed in will-spam-for-food.eu.org]
[178.215.236.135 listed in will-spam-for-food.eu.org]
[178.215.236.135 listed in will-spam-for-food.eu.org]
[178.215.236.135 listed in will-spam-for-food.eu.org]
[178.215.236.135 listed in will-spam-for-food.eu.org]
[178.215.236.135 listed in will-spam-for-food.eu.org]
[178.215.236.135 listed in will-spam-for-food.eu.org]
[178.215.236.135 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[103.196.166.1 listed in will-spam-for-food.eu.org]
[2603:1096:4:b6:cafe:0:0:7c listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:cafe:0:0:7c listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:cafe:0:0:7c listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:cafe:0:0:7c listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:cafe:0:0:7c listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:cafe:0:0:7c listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:cafe:0:0:7c listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:cafe:0:0:7c listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:0:0:0:17 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:0:0:0:17 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:0:0:0:17 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:0:0:0:17 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:0:0:0:17 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:0:0:0:17 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:0:0:0:17 listed in]
[will-spam-for-food.eu.org]
[2603:1096:4:b6:0:0:0:17 listed in]
[will-spam-for-food.eu.org]
[40.95.53.161 listed in will-spam-for-food.eu.org]
[40.95.53.161 listed in will-spam-for-food.eu.org]
[40.95.53.161 listed in will-spam-for-food.eu.org]
[40.95.53.161 listed in will-spam-for-food.eu.org]
[40.95.53.161 listed in will-spam-for-food.eu.org]
[40.95.53.161 listed in will-spam-for-food.eu.org]
[40.95.53.161 listed in will-spam-for-food.eu.org]
[40.95.53.161 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[40.95.53.161 listed in dnsbl.ahbl.org]
[40.95.53.161 listed in dnsbl.ahbl.org]
[40.95.53.161 listed in dnsbl.ahbl.org]
[40.95.53.161 listed in dnsbl.ahbl.org]
[2603:1096:4:b6:0:0:0:17 listed in]
[dnsbl.ahbl.org]
[2603:1096:4:b6:0:0:0:17 listed in]
[dnsbl.ahbl.org]
[2603:1096:4:b6:0:0:0:17 listed in]
[dnsbl.ahbl.org]
[2603:1096:4:b6:0:0:0:17 listed in]
[dnsbl.ahbl.org]
[2603:1096:4:b6:cafe:0:0:7c listed in]
[dnsbl.ahbl.org]
[2603:1096:4:b6:cafe:0:0:7c listed in]
[dnsbl.ahbl.org]
[2603:1096:4:b6:cafe:0:0:7c listed in]
[dnsbl.ahbl.org]
[2603:1096:4:b6:cafe:0:0:7c listed in]
[dnsbl.ahbl.org]
[103.196.166.1 listed in dnsbl.ahbl.org]
[103.196.166.1 listed in dnsbl.ahbl.org]
[103.196.166.1 listed in dnsbl.ahbl.org]
[103.196.166.1 listed in dnsbl.ahbl.org]
[178.215.236.135 listed in dnsbl.ahbl.org]
[178.215.236.135 listed in dnsbl.ahbl.org]
[178.215.236.135 listed in dnsbl.ahbl.org]
[178.215.236.135 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[40.95.53.161 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[40.95.53.161 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[40.95.53.161 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[40.95.53.161 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org
[Listed by XBL, see
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[178.215.236.135 listed in sbl-xbl.spamhaus.org]
[178.215.236.135 listed in sbl-xbl.spamhaus.org]
[178.215.236.135 listed in sbl-xbl.spamhaus.org]
[178.215.236.135 listed in sbl-xbl.spamhaus.org]
2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[178.215.236.135 listed in zen.spamhaus.org]
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[178.215.236.135 listed in zen.spamhaus.org]
0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=skollfoundation%40orgl.com;ip=40.95.53.161;r=doctor.nl2k.ab.ca]
0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=APC01-PSA-obe.outbound.protection.outlook.com;ip=40.95.53.161;r=doctor.nl2k.ab.ca]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 ARC_VALID Message has a valid ARC signature
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 ARC_SIGNED Message has a ARC signature
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.0 AXB_X_FF_SEZ_S Forefront sez this is spam
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.0 PDS_HELO_SPF_FAIL High profile HELO that fails SPF
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 HK_NAME_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.6 MONEY_NOHTML Lots of money in plain text
0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF
failed
Subject: {SPAM?} Is this a valid email address.
Congratulations! Your email address is selected to receive a $3,500,000.00 =
grant Fund.
Dear Email ID Owner.
Congratulations from the Jeff Skoll Foundation, where life changing opportu=
nities and cash are given out on a daily basis. Our Founder has indeed been=
a great philanthropist to this generation and is truly committed to giving=
while living.
We are therefore pleased to inform you that you are one of the lucky people=
to benefit and receive $3,500,000.00 USD from our Foundation's ongoing goo=
dwill (Grant Program). Is this message sent to a valid email account? Your =
email account was randomly selected from a massive pool to receive a cash d=
onation of $3,500,000.00 from the Foundation.
If this is a valid email account, kindly contact our Att. Raymond Arner (=
Attorney / Payment Supervisor) via (arnerattraymondg@gmail.com), for more c=
omprehensive information pertaining to your donation fund payment.
Have a pleasant day.
Sincerely,
Marla Blow,
President and Chief Operating Officer,
Skoll Foundation.
________________________________
PENTING
"Email ini (termasuk seluruh lampirannya, bila ada) hanya ditujukan kepada =
penerima sebagaimana dimaksud pada tujuan email ini. Email ini dapat berisi=
informasi atau hal-hal yang secara hukum bersifat rahasia. Jika terdapat k=
esalahan pengiriman (Anda bukan penerima yang dituju), maka Anda tidak dipe=
rkenankan untuk memanfaatkan, menyebarkan, mendistribusikan, atau mengganda=
kan email ini beserta seluruh lampirannya. Mohon kerja samanya untuk segera=
menghapus email ini beserta seluruh lampirannya (di mana Anda bukan peneri=
ma yang dituju). Semua pendapat yang ada dalam email ini merupakan pendapat=
pribadi dari pengirim yang bersangkutan dan tidak serta merta mencerminkan=
pandangan Kementerian Keuangan, kecuali telah terdapat kesepakatan antara =
pengirim dan penerima bahwa email ini termasuk salah satu bentuk komunikasi=
kedinasan yang dapat diterima oleh kedua pihak".
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments