Grant/Funds spam
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 01 Feb 2026 18:23:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vmide-00000000A7h-1agd
for dave@doctor.nl2k.ab.ca;
Sun, 01 Feb 2026 18:22:02 -0700
Resent-From: The Doctor
Resent-Date: Sun, 1 Feb 2026 18:22:02 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [103.59.65.10] (port=55553 helo=mail.tn.gov.in)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vmgSH-00000000Pz4-3gwR
for sales@nk.ca;
Sun, 01 Feb 2026 16:02:21 -0700
Received: from tn.gov.in (mail.tn.gov.in [10.236.242.143])
by mail.tn.gov.in (Postfix) with ESMTPSA id 9B728140095B7;
Mon, 2 Feb 2026 04:30:55 +0530 (IST)
DKIM-Filter: OpenDKIM Filter v2.11.0 mail.tn.gov.in 9B728140095B7
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=tn.gov.in; s=default;
t=1769986856; bh=nkzjBdPpYVspX/4IGaUW4DVGbnzP3nAej3izIX21yHw=;
h=Date:From:To:Subject:Reply-To:From;
b=lSayqi0If07gm3tlYkEsFHPtGZoQwp7EpHr7xj72emj/woLCC/gv1VzDbDOBaRIy6
1p1iDeLSiRzFT2ahFCEuc0VKE7Ny0nRjhrWbgvEIJOxeBcgw13KWklkWssXxiET10S
b4OKJ7GNsdfa6FayxkKDs20HiEPn/F8r7YZtmZ3QIjfgp2Kg085HFwtiHWcwxjKQHK
TkBObjamtzfRg7pXJ+swKTQ/NKMZbMSKdoCV17b6sYgphKJ/d4Y3U/MtxI+dBov+rU
nSa7kha00HBd7vgFJhZHL6XJk9m0DEjG2PsdvEk4yUDrRW74fnd2k5IAA2UtYP/pZ1
xNQBgSDtaanFg==
MIME-Version: 1.0
Date: Mon, 02 Feb 2026 07:00:55 +0800
From: The Asia Foundation
To: undisclosed-recipients:;
Subject: CONGRATULATIONS
Reply-To: the-asiafoundation2026@wellsadmusr.com
Mail-Reply-To: the-asiafoundation2026@wellsadmusr.com
Message-ID:
X-Sender: tsocud.thittakudi@tn.gov.in
Organization: Revanue
Content-Type: multipart/alternative;
boundary="=_6cd530effcbc020381e6923172d00080"
X-Secretariat-MailScanner-Information: Please contact the ISP for more information
X-Secretariat-MailScanner-ID: 9B728140095B7.AB22B
X-Secretariat-MailScanner: Found to be clean
X-Secretariat-MailScanner-SpamCheck: not spam, SpamAssassin (not cached,
score=4.001, required 5, autolearn=disabled,
ADVANCE_FEE_2_NEW_MONEY 2.00, ALL_TRUSTED -1.00, DKIM_SIGNED 0.10,
DKIM_VALID -0.10, DKIM_VALID_AU -0.10, HTML_MESSAGE 0.00,
LOTS_OF_MONEY 0.00, UNDISC_MONEY 3.10, URIBL_BLOCKED 0.00)
X-Secretariat-MailScanner-SpamScore: 4.00
X-Secretariat-MailScanner-From: tsocud.thittakudi@tn.gov.in
X-Spam-Status: No
X-Spam_score: 9.3
X-Spam_score_int: 93
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- The Asia Foundation Pay-Out Office : KUALA LUMPUR, MALAYSIA
Your Reference Number is : TAF/WU407/2026/ASIA - YOU'VE BEEN APPROVED TO
RECEIVE $850,000.00 USD GRANT -
Content analysis details: (9.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[103.59.65.10 listed in will-spam-for-food.eu.org]
[103.59.65.10 listed in will-spam-for-food.eu.org]
[103.59.65.10 listed in will-spam-for-food.eu.org]
[103.59.65.10 listed in will-spam-for-food.eu.org]
[103.59.65.10 listed in will-spam-for-food.eu.org]
[103.59.65.10 listed in will-spam-for-food.eu.org]
[103.59.65.10 listed in will-spam-for-food.eu.org]
[103.59.65.10 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[103.59.65.10 listed in dnsbl.ahbl.org]
[103.59.65.10 listed in dnsbl.ahbl.org]
[103.59.65.10 listed in dnsbl.ahbl.org]
[103.59.65.10 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[103.59.65.10 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[103.59.65.10 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[103.59.65.10 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[103.59.65.10 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[103.59.65.10 listed in sa-accredit.habeas.com]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[103.59.65.10 listed in sa-trusted.bondedsender.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |]
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[103.59.65.10 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[103.59.65.10 listed in bl.score.senderscore.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} CONGRATULATIONS
--=_6cd530effcbc020381e6923172d00080
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII;
format=flowed
--
The Asia Foundation
Pay-Out Office : KUALA LUMPUR, MALAYSIA
Your Reference Number is : TAF/WU407/2026/ASIA
- YOU'VE BEEN APPROVED TO RECEIVE $850,000.00 USD GRANT -
To Claim your Grant Funds, kindly contact MR CHRISTOPHER WONG :
E-mail : the-asiafoundation2026@wellsadmusr.com
CALL / WHATSAPP / TELEGRAM : (+601) 4986 8900
Congratulations once again !
--=_6cd530effcbc020381e6923172d00080
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset=UTF-8
=3DUTF-8" />
eva,sans-serif'>
--=_6cd530effcbc020381e6923172d00080--
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 01 Feb 2026 18:23:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vmide-00000000A7h-1agd
for dave@doctor.nl2k.ab.ca;
Sun, 01 Feb 2026 18:22:02 -0700
Resent-From: The Doctor
Resent-Date: Sun, 1 Feb 2026 18:22:02 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [103.59.65.10] (port=55553 helo=mail.tn.gov.in)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vmgSH-00000000Pz4-3gwR
for sales@nk.ca;
Sun, 01 Feb 2026 16:02:21 -0700
Received: from tn.gov.in (mail.tn.gov.in [10.236.242.143])
by mail.tn.gov.in (Postfix) with ESMTPSA id 9B728140095B7;
Mon, 2 Feb 2026 04:30:55 +0530 (IST)
DKIM-Filter: OpenDKIM Filter v2.11.0 mail.tn.gov.in 9B728140095B7
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=tn.gov.in; s=default;
t=1769986856; bh=nkzjBdPpYVspX/4IGaUW4DVGbnzP3nAej3izIX21yHw=;
h=Date:From:To:Subject:Reply-To:From;
b=lSayqi0If07gm3tlYkEsFHPtGZoQwp7EpHr7xj72emj/woLCC/gv1VzDbDOBaRIy6
1p1iDeLSiRzFT2ahFCEuc0VKE7Ny0nRjhrWbgvEIJOxeBcgw13KWklkWssXxiET10S
b4OKJ7GNsdfa6FayxkKDs20HiEPn/F8r7YZtmZ3QIjfgp2Kg085HFwtiHWcwxjKQHK
TkBObjamtzfRg7pXJ+swKTQ/NKMZbMSKdoCV17b6sYgphKJ/d4Y3U/MtxI+dBov+rU
nSa7kha00HBd7vgFJhZHL6XJk9m0DEjG2PsdvEk4yUDrRW74fnd2k5IAA2UtYP/pZ1
xNQBgSDtaanFg==
MIME-Version: 1.0
Date: Mon, 02 Feb 2026 07:00:55 +0800
From: The Asia Foundation
To: undisclosed-recipients:;
Subject: CONGRATULATIONS
Reply-To: the-asiafoundation2026@wellsadmusr.com
Mail-Reply-To: the-asiafoundation2026@wellsadmusr.com
Message-ID:
X-Sender: tsocud.thittakudi@tn.gov.in
Organization: Revanue
Content-Type: multipart/alternative;
boundary="=_6cd530effcbc020381e6923172d00080"
X-Secretariat-MailScanner-Information: Please contact the ISP for more information
X-Secretariat-MailScanner-ID: 9B728140095B7.AB22B
X-Secretariat-MailScanner: Found to be clean
X-Secretariat-MailScanner-SpamCheck: not spam, SpamAssassin (not cached,
score=4.001, required 5, autolearn=disabled,
ADVANCE_FEE_2_NEW_MONEY 2.00, ALL_TRUSTED -1.00, DKIM_SIGNED 0.10,
DKIM_VALID -0.10, DKIM_VALID_AU -0.10, HTML_MESSAGE 0.00,
LOTS_OF_MONEY 0.00, UNDISC_MONEY 3.10, URIBL_BLOCKED 0.00)
X-Secretariat-MailScanner-SpamScore: 4.00
X-Secretariat-MailScanner-From: tsocud.thittakudi@tn.gov.in
X-Spam-Status: No
X-Spam_score: 9.3
X-Spam_score_int: 93
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- The Asia Foundation Pay-Out Office : KUALA LUMPUR, MALAYSIA
Your Reference Number is : TAF/WU407/2026/ASIA - YOU'VE BEEN APPROVED TO
RECEIVE $850,000.00 USD GRANT -
Content analysis details: (9.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[103.59.65.10 listed in will-spam-for-food.eu.org]
[103.59.65.10 listed in will-spam-for-food.eu.org]
[103.59.65.10 listed in will-spam-for-food.eu.org]
[103.59.65.10 listed in will-spam-for-food.eu.org]
[103.59.65.10 listed in will-spam-for-food.eu.org]
[103.59.65.10 listed in will-spam-for-food.eu.org]
[103.59.65.10 listed in will-spam-for-food.eu.org]
[103.59.65.10 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[103.59.65.10 listed in dnsbl.ahbl.org]
[103.59.65.10 listed in dnsbl.ahbl.org]
[103.59.65.10 listed in dnsbl.ahbl.org]
[103.59.65.10 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[103.59.65.10 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[103.59.65.10 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[103.59.65.10 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[103.59.65.10 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[103.59.65.10 listed in sa-accredit.habeas.com]
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[103.59.65.10 listed in sa-trusted.bondedsender.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[103.59.65.10 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[103.59.65.10 listed in bl.score.senderscore.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} CONGRATULATIONS
--=_6cd530effcbc020381e6923172d00080
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII;
format=flowed
--
The Asia Foundation
Pay-Out Office : KUALA LUMPUR, MALAYSIA
Your Reference Number is : TAF/WU407/2026/ASIA
- YOU'VE BEEN APPROVED TO RECEIVE $850,000.00 USD GRANT -
To Claim your Grant Funds, kindly contact MR CHRISTOPHER WONG :
E-mail : the-asiafoundation2026@wellsadmusr.com
CALL / WHATSAPP / TELEGRAM : (+601) 4986 8900
Congratulations once again !
--=_6cd530effcbc020381e6923172d00080
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset=UTF-8
=3DUTF-8" />
eva,sans-serif'>
--
=
The Asia Foundation
Pay-Out Office : KUALA LUMPUR, MALAYSIA
>Your Reference Number is : TAF/WU407/2026/ASIA
- YOU'VE B=
EEN APPROVED TO RECEIVE $850,000.00 USD GRANT -
To Claim your Gr=
ant Funds, kindly contact MR CHRISTOPHER WONG :
E-mail :
=3D"mailto:the-asiafoundation2026@wellsadmusr.com">the-asiafoundation2026@w=
ellsadmusr.com
CALL / WHATSAPP / TELEGRAM : (+601) 4986 8900
=
Congratulations once again !
The Asia Foundation
Pay-Out Office : KUALA LUMPUR, MALAYSIA
>Your Reference Number is : TAF/WU407/2026/ASIA
- YOU'VE B=
EEN APPROVED TO RECEIVE $850,000.00 USD GRANT -
To Claim your Gr=
ant Funds, kindly contact MR CHRISTOPHER WONG :
E-mail :
=3D"mailto:the-asiafoundation2026@wellsadmusr.com">the-asiafoundation2026@w=
ellsadmusr.com
CALL / WHATSAPP / TELEGRAM : (+601) 4986 8900
=
Congratulations once again !
--=_6cd530effcbc020381e6923172d00080--
