funding spam Part 1
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 16 Mar 2026 16:19:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1w2GGr-00000000CEm-1l5k
for dave@doctor.nl2k.ab.ca;
Mon, 16 Mar 2026 16:18:45 -0600
Resent-From: The Doctor
Resent-Date: Mon, 16 Mar 2026 16:18:45 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [195.83.152.10] (port=56539 helo=smtp-out1-webmail-10.u-picardie.fr)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1w2FGh-000000007J7-3hfY
for doctor@doctor.nl2k.ab.ca;
Mon, 16 Mar 2026 15:14:40 -0600
Received: from passoire-02.vm.u-picardie.fr (passoire-02.vm.u-picardie.fr [10.0.132.142])
by smtp-out1-webmail-10.u-picardie.fr (Postfix) with ESMTP id 4fZSW11K04zCmRq;
Mon, 16 Mar 2026 22:13:33 +0100 (CET)
X-Virus-Scanned: Debian amavisd-new at u-picardie.fr
Received: from smtp.u-picardie.fr ([10.0.132.228])
by passoire-02.vm.u-picardie.fr (passoire-02.vm.u-picardie.fr [10.0.132.142]) (amavisd-new, port 10048)
with LMTP id 3Qd-mv7MZgSj; Mon, 16 Mar 2026 22:13:30 +0100 (CET)
Received: from horde-08 (horde-08.vm.u-picardie.fr [10.0.132.100])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
(No client certificate requested)
(Authenticated sender: f22403923)
by smtp.u-picardie.fr (Postfix) with ESMTPSA id 4fZSVx0Bp5z40Ty;
Mon, 16 Mar 2026 22:13:29 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=u-picardie.fr;
s=smtp; t=1773695610; h=from:from:reply-to:reply-to:subject:subject:date:date:
message-id:message-id:to:to:cc:mime-version:mime-version:
content-type:content-type: content-transfer-encoding:content-transfer-encoding;
bh=DbV1Pz8iQN9+KPV1i8q3uphzWCeAZ2BZa9GkSeJHhDk=;
b=imSgLysmXmPBlaSbT3RRe6Nq8ZAvKd3zDgHueb7Zp4eQj7/8CaapYTlvPo/kFGYVIgsDSd
3iLCsYAEbHloh4mrIPNH4VD/vLwmyQ1FK6Y+NuL61CBuxCCv6qPA9uC7EBrKVtYwVYP4wY
495wK2KtxhC+V2TH8C8KpDGfv8WE7XLIruQkw19A0N45MsnT0mscl6Uz7yflQxcoozYlzf
bIdEgAvnHRIzH6dZYDJ3AkrJDZFG2CBDB6VqbcCuZiBS7O0nZcbEsi4h1yISamsOolI3Ey
DekVB7w9G6m/GSKw5UyXDY/3Yc6GkP0iX2qn8Eqcm99m/RCvIXniGBi8P/1R0A==
Received: from [194.156.79.64] ([194.156.79.64]) by
webmail.etud.u-picardie.fr (Horde Framework) with HTTPS; Mon, 16 Mar 2026
22:13:28 +0100
Date: Mon, 16 Mar 2026 22:13:28 +0100
Message-ID: <20260316221328.Horde.jMMaShOMX6oA4blxKCM_LAz@webmail.etud.u-picardie.fr>
From: Naseer Kamel Muhammed
To: mohamed122@cmgfinancialconsultant.com
Subject: GOOD PROJECT FUNDING
Reply-to: mohammed@cmgfinancialconsultant.com
User-Agent: Horde Application Framework 5
Content-Type: text/plain; charset=utf-8; format=flowed; DelSp=Yes
MIME-Version: 1.0
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
X-Spamd-Bar: ++++++
Authentication-Results: smtp.u-picardie.fr;
auth=pass smtp.auth=f22403923 smtp.mailfrom=tristan.favier@etud.u-picardie.fr
X-Rspamd-Server: passoire-03
X-Rspamd-Queue-Id: 4fZSVx0Bp5z40Ty
X-Spamd-Result: default: False [6.70 / 1000.00];
BAYES_SPAM(5.30)[98.45%];
SUBJ_ALL_CAPS(1.50)[20];
MIME_GOOD(-0.10)[text/plain];
DKIM_SIGNED(0.00)[u-picardie.fr:s=smtp];
R_RATELIMIT(0.00)[user(RLb3z1dxaaytrnfq),from(RLqhtiropebtitk8fxn97pyjeu),user(RLkfua44y9omsymm),user(RLoqiesnykz9e8h8)];
MID_RHS_MATCH_FROMTLD(0.00)[];
ARC_NA(0.00)[];
FROM_EQ_ENVFROM(0.00)[];
NEURAL_HAM(-0.00)[-0.999];
MIME_TRACE(0.00)[0:+];
RCPT_COUNT_ONE(0.00)[1];
ETUD_FROM(0.00)[etud.u-picardie.fr];
TO_DN_NONE(0.00)[];
FROM_HAS_DN(0.00)[];
RCVD_VIA_SMTP_AUTH(0.00)[];
HAS_REPLYTO(0.00)[mohammed@cmgfinancialconsultant.com];
RCVD_COUNT_TWO(0.00)[2];
FREEMAIL_ENVRCPT(0.00)[gmail.com,inbox.ru,wp.pl,free.fr,yahoo.com,centrum.sk,gmx.net,hotmail.com,fastmail.fm,yandex.ru,protonmail.com,compuserve.com,hushmail.com,yahoo.com.au,yahoo.co.uk,gmx.de,web.de,phreaker.net,operamail.com,earthlink.net,mail.com,gmx.us,mac.com,bellsouth.net,club-internet.fr,me.com,xtra.co.nz,xs4all.nl,arcor.de,iname.com,sci.fi,outlook.com,bigfoot.com,engineer.com,juno.com];
TAGGED_RCPT(0.00)[];
TO_MATCH_ENVRCPT_ALL(0.00)[];
REPLYTO_DOM_NEQ_FROM_DOM(0.00)[];
RCVD_TLS_ALL(0.00)[]
X-Spam: Yes
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.