Quicksearch: Your search for Software returned 0 results:

Remittance Phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 27 Mar 2024 20:06:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpf8h-000000007Es-2P25

for dave@doctor.nl2k.ab.ca;

Wed, 27 Mar 2024 20:05:11 -0600

Resent-From: The Doctor

Resent-Date: Wed, 27 Mar 2024 20:05:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ded4927.inmotionhosting.com ([192.249.121.37]:47143)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpdEb-00000000MxT-20pU

for www@doctor.nl2k.ab.ca;

Wed, 27 Mar 2024 18:03:17 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=wasender.my

; s=default; h=Content-Type:MIME-Version:Message-ID:Date:Subject:To:From:

Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:

Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:

In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=PCxFbp6om2WrjKNuDYm+4clIZeyl/UWI0CNDEGqXbMQ=; b=Bxx4rJ6WGsi3FsEheC41mCJuUb

CsZqiCM16ljVHjhDlk+XfE6peR02REERGmBDYTzBTkzcYL5vv68N+rlYcQN7080HrLZdY75dX55Sj

/vIsnny4Hv7b7Nmef8LG3/Ks8lgJSKm53QmenKA5KXi9rCeCma1BJYJbeaRWF4dA5E818SIYyGd48

t32f6X5nM6EHJaGr+aKU/OYgfK9FzqTx4LYwXYSb09VdMAcyY9Dk3lTAI7M6JUpgnfu+bichJ1V8K

Hr1kcTtWSEzn8F4gp2G/+A/21ms/XC9KzTp0YtVfa0GUepWq9gM1JirM/8ehJlqQWLAeTXgkRmN8R

j7IbD4Bw==;

Received: from [69.172.233.31] (port=53322 helo=wasender.my)

by ded4927.inmotionhosting.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96.2)

(envelope-from )

id 1rpdCf-0005oh-31

for www@doctor.nl2k.ab.ca;

Thu, 28 Mar 2024 08:01:09 +0800

From: www

To: www@doctor.nl2k.ab.ca

Subject: ** VIRUS ***=?UTF-8?B?RG9jdVNpZ24gUmVjZWl2ZWQ=?= 3/28/2024 12:58:02 a.m.

Date: 28 Mar 2024 00:58:02 +0100

Message-ID: <20240328005802.AB0D40673E06B21A@wasender.my>

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_NextPart_000_0012_E7660089.3DF79FB1"

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - ded4927.inmotionhosting.com

X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - wasender.my

X-Get-Message-Sender-Via: ded4927.inmotionhosting.com: authenticated_id: admin@wasender.my

X-Authenticated-Sender: ded4927.inmotionhosting.com: admin@wasender.my

X-Spam_score: 6.3

X-Spam_score_int: 63

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello www, See attached for remittance advice. This payment

will available in your account in 2-3 business days.



Content analysis details: (6.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[192.249.121.37 listed in psbl.surriel.com]

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

2.7 FROM_WSP_TRAIL Trailing whitespace before '>' in From header field

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_OBFU_HTML_ATTACH HTML attachment with non-text MIME type

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_HTML_ATTACH HTML attachment to bypass scanning?

Subject: **
VIRUS ***{SPAM?} =?UTF-8?B?RG9jdVNpZ24gUmVjZWl2ZWQ=?= 3/28/2024 12:58:02 a.m.

X-Antivirus: AVG (VPS 240327-4, 3/27/2024), Inbound message

X-Antivirus-Status: Infected

X-Attachment: STATEMENT.html#4234116485 Virus: Other:SNH-gen [Phish] Moved to chest



This is a multi-part message in MIME format.



------=_NextPart_000_0012_E7660089.3DF79FB1

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable


















ntColor; border-image: none; color: rgb(0, 0, 0); line-height: inherit; fon=

t-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetic=

a, sans-serif; font-size: 12pt; font-style: inherit; font-variant: inherit;=

font-weight: inherit; vertical-align: baseline; font-stretch: inherit; fon=

t-feature-settings: inherit; font-optical-sizing: inherit; font-kerning: in=

herit; font-variation-settings: inherit;">

Hello www,

tColor; border-image: none; color: rgb(0, 0, 0); line-height: inherit; font=

-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica=

, sans-serif; font-size: 12pt; font-style: inherit; font-variant: inherit; =

font-weight: inherit; vertical-align: baseline; font-stretch: inherit; font=

-feature-settings: inherit; font-optical-sizing: inherit; font-kerning: inh=

erit; font-variation-settings: inherit;">



rder-image: none; color: rgb(0, 0, 0); line-height: inherit; font-family: A=

ptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-ser=

if; font-size: 12pt; font-style: inherit; font-variant: inherit; font-weigh=

t: inherit; vertical-align: baseline; font-stretch: inherit; font-feature-s=

ettings: inherit; font-optical-sizing: inherit; font-kerning: inherit; font=

-variation-settings: inherit;">

See attached for remittance advice.



mage: none; color: rgb(0, 0, 0); line-height: inherit; font-family: Aptos, =

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; font-style: inherit; font-variant: inherit; font-weight: inh=

erit; vertical-align: baseline; font-stretch: inherit; font-feature-setting=

s: inherit; font-optical-sizing: inherit; font-kerning: inherit; font-varia=

tion-settings: inherit;"> 



mage: none; color: rgb(0, 0, 0); line-height: inherit; font-family: Aptos, =

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; font-style: inherit; font-variant: inherit; font-weight: inh=

erit; vertical-align: baseline; font-stretch: inherit; font-feature-setting=

s: inherit; font-optical-sizing: inherit; font-kerning: inherit; font-varia=

tion-settings: inherit;">

This payment will available in your account in 2-3 business days. 
v>


mage: none; color: rgb(0, 0, 0); line-height: inherit; font-family: Aptos, =

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; font-style: inherit; font-variant: inherit; font-weight: inh=

erit; vertical-align: baseline; font-stretch: inherit; font-feature-setting=

s: inherit; font-optical-sizing: inherit; font-kerning: inherit; font-varia=

tion-settings: inherit;">



mage: none; color: rgb(0, 0, 0); line-height: inherit; font-family: Aptos, =

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; font-style: inherit; font-variant: inherit; font-weight: inh=

erit; vertical-align: baseline; font-stretch: inherit; font-feature-setting=

s: inherit; font-optical-sizing: inherit; font-kerning: inherit; font-varia=

tion-settings: inherit;">Keep in touch 



mage: none; color: rgb(0, 0, 0); line-height: inherit; font-family: Aptos, =

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; font-style: inherit; font-variant: inherit; font-weight: inh=

erit; vertical-align: baseline; font-stretch: inherit; font-feature-setting=

s: inherit; font-optical-sizing: inherit; font-kerning: inherit; font-varia=

tion-settings: inherit;">



mage: none; color: rgb(0, 0, 0); line-height: inherit; font-family: Aptos, =

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; font-style: inherit; font-variant: inherit; font-weight: inh=

erit; vertical-align: baseline; font-stretch: inherit; font-feature-setting=

s: inherit; font-optical-sizing: inherit; font-kerning: inherit; font-varia=

tion-settings: inherit;">Thank you, 



mage: none; color: rgb(0, 0, 0); line-height: inherit; font-family: Aptos, =

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; font-style: inherit; font-variant: inherit; font-weight: inh=

erit; vertical-align: baseline; font-stretch: inherit; font-feature-setting=

s: inherit; font-optical-sizing: inherit; font-kerning: inherit; font-varia=

tion-settings: inherit;">Jordon Duce



mage: none; color: rgb(0, 0, 0); line-height: inherit; font-family: Aptos, =

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; font-style: inherit; font-variant: inherit; font-weight: inh=

erit; vertical-align: baseline; font-stretch: inherit; font-feature-setting=

s: inherit; font-optical-sizing: inherit; font-kerning: inherit; font-varia=

tion-settings: inherit;">

Senior Office Accounting 



mage: none; color: rgb(0, 0, 0); line-height: inherit; font-family: Aptos, =

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; font-style: inherit; font-variant: inherit; font-weight: inh=

erit; vertical-align: baseline; font-stretch: inherit; font-feature-setting=

s: inherit; font-optical-sizing: inherit; font-kerning: inherit; font-varia=

tion-settings: inherit;">





Sent from Mail for Windows

t>

 



------=_NextPart_000_0012_E7660089.3DF79FB1--



Dating solicitation spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 27 Mar 2024 09:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpVLM-000000008Ft-32w7

for dave@doctor.nl2k.ab.ca;

Wed, 27 Mar 2024 09:37:36 -0600

Resent-From: The Doctor

Resent-Date: Wed, 27 Mar 2024 09:37:36 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn8nam12olkn2092.outbound.protection.outlook.com ([40.92.21.92]:58241 helo=NAM12-BN8-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpUkP-00000000ONk-31s1

for support@nk.ca;

Wed, 27 Mar 2024 08:59:30 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=QAB8w2vhiTAxyu5luih2KXypaXamRUcNHVvTNlSrZS6my5ySAIqcfZsvj0IBG6X6/FJhYJV0etrqGlckgl/5nU/DdK+NS49Z0O9Q9Dr8BLfvpNuHgG6jNshicY5Xz6onf93ri88Vxxtxw+YEI3F5NmMwMiQqNIx3Lni1sAtGZUde8qmU4DFyPQBmCGg2qiSYDraKD81LfrVHZshOyl7W26ZoDbza1olz9x7eGNoyfZBh0EVKIKW6139XMQiSj4l/R/vUkf8kLUKSsonmbrELp+4wlZjtZsygVIHFyGV1QVoGsYc2bLXqk4XTw2OLfyr1pvquuEOWTYL5fS6smEAIrQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=CGYi6HnCstnrYFKFmSfwF6bEt5V3GxGW/MoMeiOsFl0=;

b=Dpe/MRKSM1WEWjEIsgF64FoW43onZIWGOeaoPNuGdtlHEf7cUvemOa3Kx2AICttvrYG5sFrsxXSus0XCtaqzkU0YZwBOX1W9N1ofNywEiV57akl60U40mwPmicVdq4w1RIF717mVoqAAdQCEwSFlzpRHxkmths9FztWDn6YuI99WAJ8RwzLMDSwxhmWar2tYRwUblv+1PqwCxaMI9a3COM87TrCj5l++XKiVt1AfvNgJZG2YXSvrh6rIhZXedq7d8yMAQDOkx/oRQ935K4zWYkwN+js7Ao147ne/1kgO4ov1k4Zv9nULIXrifw7qm3tCpT80oEGg+S2LLYmGrmds1g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=CGYi6HnCstnrYFKFmSfwF6bEt5V3GxGW/MoMeiOsFl0=;

b=kRfLANOlP524RzDRzjipkN3efhaK6y/CmmfOqCdLM2reKcMo0U5nV/dmdLnt0u6tk7SY/zZPQVoyA6pNPPpfYfh+CZ2zG27MkdoRkpKRUzF7mpJYclS8+hbL5jYSQvz/LhkbafIU8oCtOSrv44+86kOuA+bLD35A4+KB88yu4OWfMFy70AK3bG1DtHlD6LCPs4fWBrB77XV1e7+XNLVwOFbkn+T97uSf7rJwX/u8gTFeWS2xTGe2q3h8bUcDBp/2syOQnyutz4+qohOva9TRPuaxtNvFmX+Px8qxfEnvF/d9hM/ZOi60DiVSh0e+PyeuzB4RtX410ncpR4UZ0LuY6g==

Received: from SA1PR19MB8071.namprd19.prod.outlook.com (2603:10b6:806:37c::22)

by MN2PR19MB4014.namprd19.prod.outlook.com (2603:10b6:208:1e2::9) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.32; Wed, 27 Mar

2024 14:57:11 +0000

Received: from SA1PR19MB8071.namprd19.prod.outlook.com

([fe80::eb39:40bd:8d9b:ca43]) by SA1PR19MB8071.namprd19.prod.outlook.com

([fe80::eb39:40bd:8d9b:ca43%5]) with mapi id 15.20.7409.028; Wed, 27 Mar 2024

14:57:11 +0000

Content-Type: multipart/alternative; boundary="===============2398250120347260698=="

Subject: =?utf-8?b?TGlrZWQgeW91ciBzdG9yeSDinaTvuI8=?=

From: DateFlix

CC: DateFlix

Date: Wed, 27 Mar 2024 14:56:05 +0000

X-TMN: [m81md0hQOZtvX5X7dPIs3lPSqpqWR22z]

X-ClientProxiedBy: VI1PR09CA0129.eurprd09.prod.outlook.com

(2603:10a6:803:12c::13) To SA1PR19MB8071.namprd19.prod.outlook.com

(2603:10b6:806:37c::22)

Message-ID:



MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: SA1PR19MB8071:EE_|MN2PR19MB4014:EE_

X-MS-Office365-Filtering-Correlation-Id: c7154470-f72a-4f62-55c8-08dc4e6e2d0a

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?RGwySG5XTGZUa2VYc2tWMHZSbW5vT3ljMlZocnhTRkdFc0RBbHpxWER2NmJH?=

=?utf-8?B?aUdsR2ZoNE5PSGVkQkFnL0p4RWZvaEc4bFFieWVKaHFWWjhvSFloUCtMN3Uv?=

=?utf-8?B?MVFvanAvbkYrc25zVUxySDRobUgwbUw4UTNTblE5YUovYUpvT1JmNEZxcEhU?=

=?utf-8?B?Vkd5ZGhNejN0Umlrb29Ka1JtWFdDK0FZTklzVnJ5SzlkUWxlTWQxNm1FV0cy?=

=?utf-8?B?QlZ2SDlMcXF4czErTWhOeXN1Y3ZkckJKd25YeUx1dHRiRElNNEZYbldIRGNp?=

=?utf-8?B?K1hOWG9DYWVVTnZGaUpmZDlRUml4d0RXZ0daeXdDd1ErU0lDK2VodHFHdS9O?=

=?utf-8?B?WXF0dXJKMkdLd3kyM3dGbWt4c3h4V2l6Yy94R1c1RzdtQU5aZXd5QU9kUzBG?=

=?utf-8?B?dGdDRjY1ZWRGYUZJNDNBNEN4aC9vVVJBZ0RIN2ZLNklEcitDZmFBdDRsTHd5?=

=?utf-8?B?QkRKS0FaT0hhenJQOHJCNEJkT0plZ2s0YmY0TEZqS2FUM0VKVCtyc2pxcGtJ?=

=?utf-8?B?aFFqdU5FK3hWbk5xQko1Sit0WXF2VUpSMENBN0EwcTlGRURzT2N6RDJPbGwz?=

=?utf-8?B?ZlpENXFwVnRiaW03S2l6Q0pMTGVackRydG5BU2F1KysybWVZWHFPMlFzUkNP?=

=?utf-8?B?aGpkdFhER3NydERqRnh0ZnpLNDBwQ2QwelN4dG5Jb3p2WUY5WkVUNGhrT3JE?=

=?utf-8?B?dU0wZGtCM1M3T3U0VGJlMFNZUHFibHVOUWNhNHljOGVhTkJxRlZtWk5zM1hX?=

=?utf-8?B?cGl5RUxlRkR3bFUxQUtsSlk2M0dKUlQxa0kxOFVIaWVYNU9kdDhiR1FCbkxy?=

=?utf-8?B?bUlhaFRDOWpOcjhSdU1Mc0N6U3UyS3FSMnowOUZ6NGoyRDN1L2JEWmlRb2FI?=

=?utf-8?B?ZEpkSldYZjlFaEJvdXZZTDNPS2xaL3UrN25IcFR6UVBqZWptaHZQK2pmOGpI?=

=?utf-8?B?azFaUE13VmRqaXowME1NOGcySWRxSlViSy96TzRmcjJUY1A4VC9jQXduR0hz?=

=?utf-8?B?Yk5WbjdQeis5ajdQdnUwRkt5azB0eHRONHo1NGwxRStCaEtpNDV4VzZKa3Nh?=

=?utf-8?B?c3A2UlRTM0RyckRsZ1NMZGpMbGFqdE9lQzhBaUFqZThMMWNRK0VYOHhNRU1t?=

=?utf-8?B?dmFQdmZYSkNodmFnVHczVlN0b2MvT2pjdk52K0wyMUNScGkrZ2NFbU1UQjJj?=

=?utf-8?B?YlFPaC9hRmtLb1NhRXkwRzRFdzFGSW5RRkorWUtsREM5d0VjcnoxdHZMUnYz?=

=?utf-8?B?YjU0NFYyWlpaVzRmVXMwVnhyMXE0UFNJZ3dzMVpiOUJBVFJyYXBkWlJNeFk4?=

=?utf-8?B?QXhmWUNBaHQzSWtUYWtndGJGZjNjaXBON0Rld2hXc1NVTFdnNW96aFVpcy9x?=

=?utf-8?B?b2MvZUJjN1Q0VkhPU042QTZOWC9NTDZTbmVjVXZ6cjRKMi9vYzZrYkM3S1B2?=

=?utf-8?B?ZEZUaVJMYzBXeUlFZlJQbG9ZMXcyRFp3ZDg1d1l4Y1d0a0hsVGJiUHdhamkr?=

=?utf-8?B?VUVwbEZ2WHBTaHVoK3ZEaU4vYTJlZGlxYlhEUkRRb2cycWRMMTN2Q21wSE53?=

=?utf-8?B?ZGFhbnFrYmFiQ1lXc2IxaWd5NWRVWm1OME5zdllZMG9ubC9WTEFocGlpUnNt?=

=?utf-8?B?M2tYWnFlR0dZNytzN3hIbWI1WHAvYklKZUNQOStyeUVOTmpDblpISTU0ZU1H?=

=?utf-8?B?UnJDak1TcktGMmloL2NKMWljcmNGa0N2aFkwUm9TUGE1c0V4by8rV25nPT0=?=

X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-e7757.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: c7154470-f72a-4f62-55c8-08dc4e6e2d0a

X-MS-Exchange-CrossTenant-AuthSource: SA1PR19MB8071.namprd19.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Mar 2024 14:57:10.7524

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR19MB4014

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Document Are you interested in making connections with new

women nearby? Are you seeking a distinctive platform to meet singles? Discover

NewGirl, where you can indulge in meaningful conversations unlike those found

on conventional dating sites!



Content analysis details: (5.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.21.92 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.21.92 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[courtlinbrackemyre41(at)hotmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[courtlinbrackemyre41(at)hotmail.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

-0.0 T_SCC_BODY_TEXT_LINE No description available.

Subject: {SPAM?} =?utf-8?b?TGlrZWQgeW91ciBzdG9yeSDinaTvuI8=?=

X-Antivirus: AVG (VPS 240327-2, 3/27/2024), Inbound message

X-Antivirus-Status: Clean



--===============2398250120347260698==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



PCFET0NUWVBFIGh0bWw+PGh0bWwgbGFuZz0iZW4iPjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVpdj0i

Q29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPgo8bWV0YSBu

YW1lPSJ2aWV3cG9ydCIgY29udGVudD0id2lkdGg9ZGV2aWNlLXdpZHRoLCBpbml0aWFsLXNjYWxl

PTEuMCI+Cjx0aXRsZT5Eb2N1bWVudDwvdGl0bGU+CjwvaGVhZD4KPGJvZHk+CjxwIHN0eWxlPSJ0

ZXh0LWFsaWduOmNlbnRlciI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMy45OTk5OTk5OTk5OTk5

OThwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFsLHNhbnMtc2VyaWYiPjxzcGFuIHN0

eWxlPSJjb2xvcjojMDAwMDAwIj48c3Ryb25nPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTZweCI+

QXJlIHlvdSBpbnRlcmVzdGVkIGluIG1ha2luZyBjb25uZWN0aW9ucyB3aXRoIG5ldyB3b21lbiBu

ZWFyYnk/PC9zcGFuPjxicj4KPGJyPgo8aW1nIHNyYz0iaHR0cHM6Ly9saDctdXMuZ29vZ2xldXNl

cmNvbnRlbnQuY29tL21mUFljeFVibThUUzJIUFNwdnFodFpEYXV3R240YXJkNFpkdF9HM0x4Ymxa

R25tOTBadDJXa3N3dDJMX2p6UDhPbEFvUEMtYmdBYnhzMjZKc2U4Z0ZiazhudGdRdmM1N0ZsOE16

TWd1R2ZXR2FKQlpmbHZWZGpGMTBNNXlRUzQxdUJKVE1fWTl4TnJCWUFzZnE4bXFlN28iIHN0eWxl

PSJoZWlnaHQ6MjY1cHg7IHdpZHRoOjYyNHB4Ij48L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwvc3Bh

bj48L3A+Cgo8cCBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXIiPjxzcGFuIHN0eWxlPSJmb250LXNp

emU6MTZweCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFsLHNhbnMtc2VyaWYiPjxzcGFu

IHN0eWxlPSJjb2xvcjojMDAwMDAwIj48c3Ryb25nPkFyZSB5b3Ugc2Vla2luZyBhIGRpc3RpbmN0

aXZlIHBsYXRmb3JtIHRvIG1lZXQgc2luZ2xlcz8gRGlzY292ZXIgPGEgaHJlZj0iaHR0cHM6Ly9y

Yi5neS9kZnFoaGoiPk5ld0dpcmw8L2E+LCB3aGVyZSB5b3UgY2FuIGluZHVsZ2UgaW4gbWVhbmlu

Z2Z1bCBjb252ZXJzYXRpb25zIHVubGlrZSB0aG9zZSBmb3VuZCBvbiBjb252ZW50aW9uYWwgZGF0

aW5nIHNpdGVzITwvc3Ryb25nPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvcD4KCjxwPiZuYnNwOzwv

cD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PHN0cm9uZz48c3BhbiBzdHlsZT0iZm9u

dC1zaXplOjEwcHgiPuKsh+KshyZuYnNwOzxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpBcmlhbCxz

YW5zLXNlcmlmIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMDAwMCI+QnJvd3NlIHByb2ZpbGVzIG9m

IHRoZXNlIHRocmVlIGxhZGllcyBhbmQgbW9yZSB2aWEgdGhpcyBsaW5rIDwvc3Bhbj48L3NwYW4+

4qyH4qyHPC9zcGFuPjwvc3Ryb25nPjwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+

PGEgaHJlZj0iaHR0cDovL3QubHkvcEV3aEgiIHN0eWxlPSJ0ZXh0LWRlY29yYXRpb246bm9uZSI+

PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxOHB0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6QXJp

YWwsc2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxMTU1Y2MiPjxzdHJvbmc+RGF0ZUZs

aXg8L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L2E+PC9wPgoKPHA+Jm5ic3A7PC9wPgoK

PHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjE4cHgi

PjxzdHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFsLHNhbnMtc2VyaWYiPjxzcGFu

IHN0eWxlPSJjb2xvcjojMDAwMDAwIj48c3Ryb25nPlJlZ2lzdGVyIGZvciBmcmVlLCBmb3IgYSBs

aW1pdGVkIHRpbWUgb25seSEgU2VpemUgdGhpcyBvcHBvcnR1bml0eSBiZWZvcmUgaXQgZGlzYXBw

ZWFycyE8L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwvc3Ryb25nPjwvc3Bhbj48YnI+CiZuYnNwOzwv

cD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+Jm5ic3A7PC9wPgoKPHAgc3R5bGU9InRl

eHQtYWxpZ246Y2VudGVyIj48YnI+Cjxicj4KVG8gc3RvcCByZWNlaXZpbmcgcHJvbW8sIGNsaWNr

IHRoZSA8YSBocmVmPSJodHRwOi8vdC5seS9IRVVkdCI+dW5zdWJzY3JpYmUgbGluazwvYT4uPHNw

YW4gc3R5bGU9ImZvbnQtc2l6ZToyMnB4Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6QXJpYWws

c2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPiA8L3NwYW4+PC9zcGFuPjwv

c3Bhbj48L3A+Cgo8cD4mbmJzcDs8L3A+Cgo8cD4mbmJzcDs8L3A+Cgo8cD48c3Ryb25nPjxzdHJv

bmc+Jm5ic3A7PC9zdHJvbmc+PC9zdHJvbmc+PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2Vu

dGVyIj48c3Ryb25nPjxzdHJvbmc+Jm5ic3A7PC9zdHJvbmc+PC9zdHJvbmc+PC9wPgoKPHAgc3R5

bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3Ryb25nPjxzdHJvbmc+Jm5ic3A7PC9zdHJvbmc+PC9z

dHJvbmc+PC9wPgo8L2JvZHk+CjwvaHRtbD4=



--===============2398250120347260698==--

Web / App / SEO Spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 26 Mar 2024 18:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpH8M-000000004Ms-3U3v

for dave@doctor.nl2k.ab.ca;

Tue, 26 Mar 2024 18:27:14 -0600

Resent-From: The Doctor

Resent-Date: Tue, 26 Mar 2024 18:27:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dbaeur03olkn2108.outbound.protection.outlook.com ([40.92.58.108]:45409 helo=EUR03-DBA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpFjI-00000000NnV-3Njn

for root@nl2k.ca;

Tue, 26 Mar 2024 16:57:20 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=mU5G9dgMse2oyuDpBBZ1wFXU5RA7GCMbv4aE/yd1FIyqFMd6+1CStSqWNqhg4U2xv0AoCn/217WmLj0hzmfzxhbo0B+HHwpO+pAD7dFydq5MCb0VqiRrqPXwtBz/Mv849LE/uq4hldYAiwYLT4Vx2BnUTK+wv+z2bpHKPfo2h5AAqMRySrujrHc5tWUlCQ0grT6B+HWqeoFzn4+lcxF/gV/n73ti4KhVePugY5+fAmoeAnvz6WqDheO5wAM3+LQb0aWCDJ5+NdO7eeKuxOEHTwdOFpfplmbXJ0Z2eYOFQ43qoJFD1xh/OCkKLJNoow/C+0lw6TRL1cV8gRjV4ydh9Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=aoUe9G2kV7uQECBgK8u3d+ed4ZfsQMaB1zAX3nL3TVg=;

b=BB8CvWChzMgPKwfiYuT3Oiztr6K1Uh0lH+lUenoFZdbhcn2ncaoyQEq4+oD5R46mZenEifgYchJCCw2hGrvp9/Gn6WoqzCQkTlvdz3r+5k/noUutFWeRuh7SfjUqo/XY0XQBM6JkVDZPFQZw8lOM1lP8VYlrmc7qUSxK8FtirxXWvFqbRo+WCXsyv5U6g5/mRvgjp2s8Y+Nxc+FGImbXuaN/0LauZSxuKGdHKIDwUhNHQJR1aoXASHa5jPtoIKJ20ILhutvdnxxbm989i1VcNQUkZatsJeO3QlEwEzhBRusu+yXRDFAZwgvTSteGJtU+xOZGb6+TqEXCvoZj79niEA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=aoUe9G2kV7uQECBgK8u3d+ed4ZfsQMaB1zAX3nL3TVg=;

b=aZqpkOo1OFLZMSfmWXDPFQyfjgMaVwGt6opu1P8WOSDjfYq6fODuFfdOrf0gsnI0RMWb3eURxlQ95i8jft9Jx+QqIQWF4lQxGg6+gYas0C+4IBe8BCrUVBBQqnW7Td8p+/vJbS9AC3utFdc6t7A+TXSPotSTQtrBYlSAIpGcXg0T10SjKmiuxPjARopIUknqcclmaQrpwfPArxI5S10q8DDYOAei4DkReZ4bzsPRvPU4JTQPO56xKjzTjdpJFldVFL/QnZGJ5jLQ0igoISd6qb9jeU3Evu7Ux6JkynFX/6tJUuyqW6O5KSFl6REmvjW5/JZwlNzLbe4e0+0g1SNchg==

Received: from DU2P193MB2273.EURP193.PROD.OUTLOOK.COM (2603:10a6:10:2fa::20)

by DU2P193MB2340.EURP193.PROD.OUTLOOK.COM (2603:10a6:10:2f4::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.32; Tue, 26 Mar

2024 22:55:06 +0000

Received: from DU2P193MB2273.EURP193.PROD.OUTLOOK.COM

([fe80::de5a:491c:970b:5468]) by DU2P193MB2273.EURP193.PROD.OUTLOOK.COM

([fe80::de5a:491c:970b:5468%5]) with mapi id 15.20.7409.028; Tue, 26 Mar 2024

22:55:06 +0000

Content-Type: multipart/alternative; boundary="===============8629757955455392012=="

Subject: =?utf-8?q?Snapchat_from_a_friend_=F0=9F=93=B8?=

From: SparkMatch

CC: SparkMatch

Date: Tue, 26 Mar 2024 22:54:46 +0000

X-TMN: [FNxTmKU6XMkqkps7WLLBfk3qdxJ3abC5]

X-ClientProxiedBy: FR4P281CA0356.DEUP281.PROD.OUTLOOK.COM

(2603:10a6:d10:f4::20) To DU2P193MB2273.EURP193.PROD.OUTLOOK.COM

(2603:10a6:10:2fa::20)

Message-ID:



MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DU2P193MB2273:EE_|DU2P193MB2340:EE_

X-MS-Office365-Filtering-Correlation-Id: 890ca41c-90ad-4228-d3d5-08dc4de7c722

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

0xpbbXMO4MhyLxL6KcyeAprucb+ltHbtTUyqYdBEYntpLHf6aS0nAG55wDlpT3wXtWpHWfdDK4+1NEHl07k/3HrxQNRsTk2f57+ddCaQayDQ9ipLoWLuScJW/YQ6YdWJDa2vl5SCgYheaXwL2LN9pdg0/pHssbqP7vFqC96zalcVcMMPYHuavX6KChiwhm652ttEAw/pfhLlwB5p9E+FaGKWVpBa+ow19hk7qZtKHQjJC5s/nd+XiRr/euIt5cFKKDOgc05Nf/JeVKAGEwXrys+QoGZHwzB2mO/ptzCsHeJ4EHSieXSxcp3pYfFvmGV49qTdjypV+wABTt1gbgY4leL4rfD8hQNtQyS5C2ugUoJSDlQqN6hJ+mL7DqVcCzPceaxhcs5tCzHBSXUW6hlVhFyp1joL3d06eU2BGTb+ZgN5IvsuNi+KiE9666HcA2so4fqnsWIjeJ0SZ+eNq3aTGbGnHKJr9Y0vRsxCsnuxTLEqZtwVYF/N8F+BV6N3x5SAcIuPyvp3ZNaeq97KgqSGwg0IjE5+qyh5CwkWJAW59UeRAbOcgaslHMo+T/RBtj2dc2P0S9wqgv+SimCAPUcNqvyFmfdw4F4nEX2MiQR938OTQUjsBSMIrfvXjUPQjDa/B9jUZ8T35+7JgmTWmxZkiFsvxKKmIM1gh1WeljMVnj0thD7CWTvMRGNuxd7wtFgIY6yLGATbHvSxIqTWvEE6P1/nulEIMaiKpRHPzCYFpB9aFvo9TtFhlhMmzR1SSJzxnsuAf47OY9wsJHWkMaxzjQRxfDXFmnfWSrcq7xr/sygLG2lClm57cUIoTWECtKqf

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?bXFWUlVjUHN4bDk5RDd3WUJsRVRXWXlLUXhmVmJxREtKcTlWckxZMzFsWUJk?=

=?utf-8?B?cVR3Z3Fac2JiejNjM2wyUlVkQzlpK3VXdnk4ajlxSjN3MmpoL1ZmUEJUdG1o?=

=?utf-8?B?eFRvTHBIeTR3ejhmaFk3d3RLS212Um1UQmhQczRMODhCY2JZVGlTamJzRllj?=

=?utf-8?B?N29Zc0hEUUx1VHBDclpIbldzZUJ1SUVzY2grWDFCd0g5ZHVOL2xvNWZMK3V1?=

=?utf-8?B?Nk1Kd0xGMTV1czRFeXVtVkNZSEIxSHlWZlJXYVdBTU9qK0xtc2xkQUw4c0ln?=

=?utf-8?B?aUJueTA0OTllNHpjM3hMQXdXMXZlU1R3c1FNTXJMR2pKK3VDTzhMSU9xREFk?=

=?utf-8?B?S1FxaHZkam9nWUptd1BCS2RxVlBDWUMwRmxpSXR6YXdZdHpOSkFtWHV6dzcx?=

=?utf-8?B?OW1oQjFjWFFaSHREbTNnZGJGdmJnZEdRaDBSdjFFQjBpMzVuU29jeVpLK2hV?=

=?utf-8?B?Umhab2lvVHQrVHdLaHIxMVR1TTd2cXpER2VkZzZTcHlwVmtnVzd0R1BtOXhp?=

=?utf-8?B?aFladmhUYVBOQjNpSFMrTDJ4SWlVWS9ZMGxIVVI5VDYwTkhQRHlUSjM3QTNn?=

=?utf-8?B?c0t6dVdVUjMvR3o3ZnBkdmxaVEdQUUxhZHQ3aTR5SitIVlV6RUFCU29ad05S?=

=?utf-8?B?d0FvekpUK3FYeHlSTFAyZm9ENFNYK0QwWXNxRGVoSlRZUWFqaURWbW05V3JY?=

=?utf-8?B?dFE5UlJFWlRadjFoT1ZsSk9IcS9oUGNEeElvdmcwRUYzQUF5WU8wL3laNEV6?=

=?utf-8?B?VW15Um5LcUxScytqbkpTK3FqZDVPdDlLdWRYTjRzZFdERndsa2daU2dpV0VQ?=

=?utf-8?B?d2dpZVJJWldDSjB1dDE1ci83WUprVWhMcWFTSURTZXYwOUdybW9pa1hGeDRD?=

=?utf-8?B?OHV5Vm92QmZWSVRwWmRtdzdoeVpvcGk4RXd1UmFidGZtTHBTK2ZGT1JjRzlx?=

=?utf-8?B?S2duZCt5M0VhUGNrVzBNQThYSUx3ei9DSDJja3Rtbml5cWNZbDJ3cGRLek9n?=

=?utf-8?B?RUl5SDJkdXB4WFZuNVhnQWxYd3JTbmFndksxT05CSGQwZitPOEVmM1NUNXI4?=

=?utf-8?B?b2REVjVObGtSaFk3cURPYk8rdkhwRWJDdTVIWlBKVGQrWTBDWVhMYlQ3aHNU?=

=?utf-8?B?N3VRSk9kNXJKSm9zYUVONnJlUCt2OExmci9yWmFpUEdrQnA2Um1DOVRPMkNi?=

=?utf-8?B?UkthTGovRTNPczdxSk9LTFM2ZDFHa3VVM2RUdTdKZmZKNG5LUHRxVWcybVUy?=

=?utf-8?B?czZ6MHhNNlRCRFlUd1ZnUC9LdXBiN3N4WDAwMkJzWjBCb2g3eVhzb1N0a1Vt?=

=?utf-8?B?SXBjaUNHVWRQd3FaT0RUa3Vjb3lvNDRLdThVVi9UYS9aNENtU2I0c01NQnha?=

=?utf-8?B?K041ejNXVVp0UXJSd1p4OEJiNU9WYUVtMzZIWHRtVUFuMlZidlpmQjlpYmNF?=

=?utf-8?B?ZTB1RXhnczQ4NEdKdHFyRHJFS1lKRjJHdlpKSkpxYm93Zkx6aUNuek9rUFZ6?=

=?utf-8?B?RXQzK3hkTVo1bnRHVGZaNUxuN1Z3U2FnVDM5Yzc0bzJSdWRMaTFYQ3pSaTF2?=

=?utf-8?B?UVRMYnVHdWFMckVaTzRsSldmbEdQcTdiL21rZGtlcTRvVm4rbWpMU3JNY3lV?=

=?utf-8?B?empRaThuL21kN3lFck5wZmd5UkIrRzlaeXNRV0VsejlsZ1QyZno1VER2b2h2?=

=?utf-8?Q?KxUjbzWeZM04BE1FCvkn?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: 890ca41c-90ad-4228-d3d5-08dc4de7c722

X-MS-Exchange-CrossTenant-AuthSource: DU2P193MB2273.EURP193.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Mar 2024 22:55:05.7747

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU2P193MB2340

X-Spam_score: 12.2

X-Spam_score_int: 122

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Curious about connecting with Ukrainian women in your area?

Seeking a fresh, exciting avenue to meet singles? Discover UkrainianGirls,

where authentic conversations await unlike any other platform! ⬇⬇ Explore

profiles of these 3 ladies and more via this link ⬇⬇



Content analysis details: (12.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.58.108 listed in list.dnswl.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: shorturl.ac]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.58.108 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[dania.wolfi(at)outlook.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} =?utf-8?q?Snapchat_from_a_friend_=F0=9F=93=B8?=

X-Antivirus: AVG (VPS 240325-8, 3/25/2024), Inbound message

X-Antivirus-Status: Clean



--===============8629757955455392012==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



PG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJz

ZXQ9dXRmLTgiPjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PHNwYW4gc3R5bGU9ImZvbnQt

c2l6ZToxMy45OTk5OTk5OTk5OTk5OThwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFs

LHNhbnMtc2VyaWYiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAwMDAwIj48c3Ryb25nPjxzcGFuIHN0

eWxlPSJmb250LXNpemU6MTZweCI+Q3VyaW91cyBhYm91dCBjb25uZWN0aW5nIHdpdGggVWtyYWlu

aWFuIHdvbWVuIGluIHlvdXIgYXJlYT88L3NwYW4+PGJyPgo8YnI+CjxpbWcgc3JjPSJodHRwczov

L2xoNy11cy5nb29nbGV1c2VyY29udGVudC5jb20vcURaNzBicEUtZTJpbWJGSHM0T2htOWVNdzhB

Y3k4VzE5Y3h4SmV0bjRlNXJESUJLWmNmMUc0dW1SUEwzcXBEWkRPeXBVbVlMRHBqYi1NX2Z4Rllf

VjdOQ2FhQnpDLXFsRWZFQVpuTXpTY3hlY18wVWJSZEp5RXlMTjlUV29fNUFVMXFNRzl2d3pqd3VP

ZVBSaWRYVGJWRSIgc3R5bGU9ImhlaWdodDoyNjVweDsgd2lkdGg6NjI0cHgiPjwvc3Ryb25nPjwv

c3Bhbj48L3NwYW4+PC9zcGFuPjwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PHNw

YW4gc3R5bGU9ImZvbnQtc2l6ZToxNnB4Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6QXJpYWws

c2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPjxzdHJvbmc+U2Vla2luZyBh

IGZyZXNoLCBleGNpdGluZyBhdmVudWUgdG8gbWVldCBzaW5nbGVzPyBEaXNjb3ZlciA8YSBocmVm

PSJodHRwczovL3Nob3J0dXJsLmFjLzdkaDFyIj5Va3JhaW5pYW5HaXJsczwvYT4sIHdoZXJlIGF1

dGhlbnRpYyBjb252ZXJzYXRpb25zIGF3YWl0IHVubGlrZSBhbnkgb3RoZXIgcGxhdGZvcm0hIDwv

c3Ryb25nPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvcD4KCjxwPiZuYnNwOzwvcD4KCjxwIHN0eWxl

PSJ0ZXh0LWFsaWduOmNlbnRlciI+PHN0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwcHgi

PuKsh+KshyZuYnNwOzxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpBcmlhbCxzYW5zLXNlcmlmIj48

c3BhbiBzdHlsZT0iY29sb3I6IzAwMDAwMCI+RXhwbG9yZSBwcm9maWxlcyBvZiB0aGVzZSAzIGxh

ZGllcyBhbmQgbW9yZSB2aWEgdGhpcyBsaW5rIDwvc3Bhbj48L3NwYW4+4qyH4qyHPC9zcGFuPjwv

c3Ryb25nPjwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PGEgaHJlZj0iaHR0cDov

L3Nob3J0dXJsLmFjLzdkaDFvIiBzdHlsZT0idGV4dC1kZWNvcmF0aW9uOm5vbmUiPjxzcGFuIHN0

eWxlPSJmb250LXNpemU6MThwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFsLHNhbnMt

c2VyaWYiPjxzcGFuIHN0eWxlPSJjb2xvcjojMTE1NWNjIj48c3Ryb25nPlNwYXJrTWF0Y2g8L3N0

cm9uZz48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L2E+PC9wPgoKPHA+Jm5ic3A7PC9wPgoKPHAgc3R5

bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjE4cHgiPjxzdHJv

bmc+PHN0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6QXJpYWwsc2Fucy1zZXJpZiI+PHNw

YW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPjxzdHJvbmc+Q2xhaW0geW91ciBmcmVlIHNpZ24tdXAg

bm93LCBmb3IgYSBsaW1pdGVkIHRpbWUgb25seSEgRG9uJ3QgbGV0IHRoaXMgY2hhbmNlIHNsaXAg

YXdheSE8L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwvc3Ryb25nPjwvc3Ryb25nPjwvc3Bhbj48YnI+

CiZuYnNwOzwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+Jm5ic3A7PC9wPgoKPHAg

c3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48YnI+Cjxicj4KVG8gb3B0LW91dCBmcm9tIG91ciBl

bWFpbHMgYW5kIHNwZWNpYWwgb2ZmZXJzLCBjbGljayA8YSBocmVmPSJodHRwOi8vdC5seS9HVnJC

SSI+aGVyZTwvYT4uPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToyMnB4Ij48c3BhbiBzdHlsZT0iZm9u

dC1mYW1pbHk6QXJpYWwsc2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPiA8

L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3A+Cgo8cD4mbmJzcDs8L3A+Cgo8cD4mbmJzcDs8L3A+Cgo8

cD48c3Ryb25nPjxzdHJvbmc+Jm5ic3A7PC9zdHJvbmc+PC9zdHJvbmc+PC9wPgoKPHAgc3R5bGU9

InRleHQtYWxpZ246Y2VudGVyIj48c3Ryb25nPjxzdHJvbmc+Jm5ic3A7PC9zdHJvbmc+PC9zdHJv

bmc+PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3Ryb25nPjxzdHJvbmc+Jm5i

c3A7PC9zdHJvbmc+PC9zdHJvbmc+PC9wPg==



--===============8629757955455392012==--

Ukrainian dating spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 26 Mar 2024 18:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpH8M-000000004Ms-3U3v

for dave@doctor.nl2k.ab.ca;

Tue, 26 Mar 2024 18:27:14 -0600

Resent-From: The Doctor

Resent-Date: Tue, 26 Mar 2024 18:27:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dbaeur03olkn2108.outbound.protection.outlook.com ([40.92.58.108]:45409 helo=EUR03-DBA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpFjI-00000000NnV-3Njn

for root@nl2k.ca;

Tue, 26 Mar 2024 16:57:20 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=mU5G9dgMse2oyuDpBBZ1wFXU5RA7GCMbv4aE/yd1FIyqFMd6+1CStSqWNqhg4U2xv0AoCn/217WmLj0hzmfzxhbo0B+HHwpO+pAD7dFydq5MCb0VqiRrqPXwtBz/Mv849LE/uq4hldYAiwYLT4Vx2BnUTK+wv+z2bpHKPfo2h5AAqMRySrujrHc5tWUlCQ0grT6B+HWqeoFzn4+lcxF/gV/n73ti4KhVePugY5+fAmoeAnvz6WqDheO5wAM3+LQb0aWCDJ5+NdO7eeKuxOEHTwdOFpfplmbXJ0Z2eYOFQ43qoJFD1xh/OCkKLJNoow/C+0lw6TRL1cV8gRjV4ydh9Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=aoUe9G2kV7uQECBgK8u3d+ed4ZfsQMaB1zAX3nL3TVg=;

b=BB8CvWChzMgPKwfiYuT3Oiztr6K1Uh0lH+lUenoFZdbhcn2ncaoyQEq4+oD5R46mZenEifgYchJCCw2hGrvp9/Gn6WoqzCQkTlvdz3r+5k/noUutFWeRuh7SfjUqo/XY0XQBM6JkVDZPFQZw8lOM1lP8VYlrmc7qUSxK8FtirxXWvFqbRo+WCXsyv5U6g5/mRvgjp2s8Y+Nxc+FGImbXuaN/0LauZSxuKGdHKIDwUhNHQJR1aoXASHa5jPtoIKJ20ILhutvdnxxbm989i1VcNQUkZatsJeO3QlEwEzhBRusu+yXRDFAZwgvTSteGJtU+xOZGb6+TqEXCvoZj79niEA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=aoUe9G2kV7uQECBgK8u3d+ed4ZfsQMaB1zAX3nL3TVg=;

b=aZqpkOo1OFLZMSfmWXDPFQyfjgMaVwGt6opu1P8WOSDjfYq6fODuFfdOrf0gsnI0RMWb3eURxlQ95i8jft9Jx+QqIQWF4lQxGg6+gYas0C+4IBe8BCrUVBBQqnW7Td8p+/vJbS9AC3utFdc6t7A+TXSPotSTQtrBYlSAIpGcXg0T10SjKmiuxPjARopIUknqcclmaQrpwfPArxI5S10q8DDYOAei4DkReZ4bzsPRvPU4JTQPO56xKjzTjdpJFldVFL/QnZGJ5jLQ0igoISd6qb9jeU3Evu7Ux6JkynFX/6tJUuyqW6O5KSFl6REmvjW5/JZwlNzLbe4e0+0g1SNchg==

Received: from DU2P193MB2273.EURP193.PROD.OUTLOOK.COM (2603:10a6:10:2fa::20)

by DU2P193MB2340.EURP193.PROD.OUTLOOK.COM (2603:10a6:10:2f4::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.32; Tue, 26 Mar

2024 22:55:06 +0000

Received: from DU2P193MB2273.EURP193.PROD.OUTLOOK.COM

([fe80::de5a:491c:970b:5468]) by DU2P193MB2273.EURP193.PROD.OUTLOOK.COM

([fe80::de5a:491c:970b:5468%5]) with mapi id 15.20.7409.028; Tue, 26 Mar 2024

22:55:06 +0000

Content-Type: multipart/alternative; boundary="===============8629757955455392012=="

Subject: =?utf-8?q?Snapchat_from_a_friend_=F0=9F=93=B8?=

From: SparkMatch

CC: SparkMatch

Date: Tue, 26 Mar 2024 22:54:46 +0000

X-TMN: [FNxTmKU6XMkqkps7WLLBfk3qdxJ3abC5]

X-ClientProxiedBy: FR4P281CA0356.DEUP281.PROD.OUTLOOK.COM

(2603:10a6:d10:f4::20) To DU2P193MB2273.EURP193.PROD.OUTLOOK.COM

(2603:10a6:10:2fa::20)

Message-ID:



MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DU2P193MB2273:EE_|DU2P193MB2340:EE_

X-MS-Office365-Filtering-Correlation-Id: 890ca41c-90ad-4228-d3d5-08dc4de7c722

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?bXFWUlVjUHN4bDk5RDd3WUJsRVRXWXlLUXhmVmJxREtKcTlWckxZMzFsWUJk?=

=?utf-8?B?cVR3Z3Fac2JiejNjM2wyUlVkQzlpK3VXdnk4ajlxSjN3MmpoL1ZmUEJUdG1o?=

=?utf-8?B?eFRvTHBIeTR3ejhmaFk3d3RLS212Um1UQmhQczRMODhCY2JZVGlTamJzRllj?=

=?utf-8?B?N29Zc0hEUUx1VHBDclpIbldzZUJ1SUVzY2grWDFCd0g5ZHVOL2xvNWZMK3V1?=

=?utf-8?B?Nk1Kd0xGMTV1czRFeXVtVkNZSEIxSHlWZlJXYVdBTU9qK0xtc2xkQUw4c0ln?=

=?utf-8?B?aUJueTA0OTllNHpjM3hMQXdXMXZlU1R3c1FNTXJMR2pKK3VDTzhMSU9xREFk?=

=?utf-8?B?S1FxaHZkam9nWUptd1BCS2RxVlBDWUMwRmxpSXR6YXdZdHpOSkFtWHV6dzcx?=

=?utf-8?B?OW1oQjFjWFFaSHREbTNnZGJGdmJnZEdRaDBSdjFFQjBpMzVuU29jeVpLK2hV?=

=?utf-8?B?Umhab2lvVHQrVHdLaHIxMVR1TTd2cXpER2VkZzZTcHlwVmtnVzd0R1BtOXhp?=

=?utf-8?B?aFladmhUYVBOQjNpSFMrTDJ4SWlVWS9ZMGxIVVI5VDYwTkhQRHlUSjM3QTNn?=

=?utf-8?B?c0t6dVdVUjMvR3o3ZnBkdmxaVEdQUUxhZHQ3aTR5SitIVlV6RUFCU29ad05S?=

=?utf-8?B?d0FvekpUK3FYeHlSTFAyZm9ENFNYK0QwWXNxRGVoSlRZUWFqaURWbW05V3JY?=

=?utf-8?B?dFE5UlJFWlRadjFoT1ZsSk9IcS9oUGNEeElvdmcwRUYzQUF5WU8wL3laNEV6?=

=?utf-8?B?VW15Um5LcUxScytqbkpTK3FqZDVPdDlLdWRYTjRzZFdERndsa2daU2dpV0VQ?=

=?utf-8?B?d2dpZVJJWldDSjB1dDE1ci83WUprVWhMcWFTSURTZXYwOUdybW9pa1hGeDRD?=

=?utf-8?B?OHV5Vm92QmZWSVRwWmRtdzdoeVpvcGk4RXd1UmFidGZtTHBTK2ZGT1JjRzlx?=

=?utf-8?B?S2duZCt5M0VhUGNrVzBNQThYSUx3ei9DSDJja3Rtbml5cWNZbDJ3cGRLek9n?=

=?utf-8?B?RUl5SDJkdXB4WFZuNVhnQWxYd3JTbmFndksxT05CSGQwZitPOEVmM1NUNXI4?=

=?utf-8?B?b2REVjVObGtSaFk3cURPYk8rdkhwRWJDdTVIWlBKVGQrWTBDWVhMYlQ3aHNU?=

=?utf-8?B?N3VRSk9kNXJKSm9zYUVONnJlUCt2OExmci9yWmFpUEdrQnA2Um1DOVRPMkNi?=

=?utf-8?B?UkthTGovRTNPczdxSk9LTFM2ZDFHa3VVM2RUdTdKZmZKNG5LUHRxVWcybVUy?=

=?utf-8?B?czZ6MHhNNlRCRFlUd1ZnUC9LdXBiN3N4WDAwMkJzWjBCb2g3eVhzb1N0a1Vt?=

=?utf-8?B?SXBjaUNHVWRQd3FaT0RUa3Vjb3lvNDRLdThVVi9UYS9aNENtU2I0c01NQnha?=

=?utf-8?B?K041ejNXVVp0UXJSd1p4OEJiNU9WYUVtMzZIWHRtVUFuMlZidlpmQjlpYmNF?=

=?utf-8?B?ZTB1RXhnczQ4NEdKdHFyRHJFS1lKRjJHdlpKSkpxYm93Zkx6aUNuek9rUFZ6?=

=?utf-8?B?RXQzK3hkTVo1bnRHVGZaNUxuN1Z3U2FnVDM5Yzc0bzJSdWRMaTFYQ3pSaTF2?=

=?utf-8?B?UVRMYnVHdWFMckVaTzRsSldmbEdQcTdiL21rZGtlcTRvVm4rbWpMU3JNY3lV?=

=?utf-8?B?empRaThuL21kN3lFck5wZmd5UkIrRzlaeXNRV0VsejlsZ1QyZno1VER2b2h2?=

=?utf-8?Q?KxUjbzWeZM04BE1FCvkn?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: 890ca41c-90ad-4228-d3d5-08dc4de7c722

X-MS-Exchange-CrossTenant-AuthSource: DU2P193MB2273.EURP193.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Mar 2024 22:55:05.7747

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU2P193MB2340

X-Spam_score: 12.2

X-Spam_score_int: 122

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Curious about connecting with Ukrainian women in your area?

Seeking a fresh, exciting avenue to meet singles? Discover UkrainianGirls,

where authentic conversations await unlike any other platform! ⬇⬇ Explore

profiles of these 3 ladies and more via this link ⬇⬇



Content analysis details: (12.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.58.108 listed in list.dnswl.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: shorturl.ac]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.58.108 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[dania.wolfi(at)outlook.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} =?utf-8?q?Snapchat_from_a_friend_=F0=9F=93=B8?=

X-Antivirus: AVG (VPS 240325-8, 3/25/2024), Inbound message

X-Antivirus-Status: Clean



--===============8629757955455392012==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



PG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJz

ZXQ9dXRmLTgiPjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PHNwYW4gc3R5bGU9ImZvbnQt

c2l6ZToxMy45OTk5OTk5OTk5OTk5OThwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFs

LHNhbnMtc2VyaWYiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAwMDAwIj48c3Ryb25nPjxzcGFuIHN0

eWxlPSJmb250LXNpemU6MTZweCI+Q3VyaW91cyBhYm91dCBjb25uZWN0aW5nIHdpdGggVWtyYWlu

aWFuIHdvbWVuIGluIHlvdXIgYXJlYT88L3NwYW4+PGJyPgo8YnI+CjxpbWcgc3JjPSJodHRwczov

L2xoNy11cy5nb29nbGV1c2VyY29udGVudC5jb20vcURaNzBicEUtZTJpbWJGSHM0T2htOWVNdzhB

Y3k4VzE5Y3h4SmV0bjRlNXJESUJLWmNmMUc0dW1SUEwzcXBEWkRPeXBVbVlMRHBqYi1NX2Z4Rllf

VjdOQ2FhQnpDLXFsRWZFQVpuTXpTY3hlY18wVWJSZEp5RXlMTjlUV29fNUFVMXFNRzl2d3pqd3VP

ZVBSaWRYVGJWRSIgc3R5bGU9ImhlaWdodDoyNjVweDsgd2lkdGg6NjI0cHgiPjwvc3Ryb25nPjwv

c3Bhbj48L3NwYW4+PC9zcGFuPjwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PHNw

YW4gc3R5bGU9ImZvbnQtc2l6ZToxNnB4Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6QXJpYWws

c2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPjxzdHJvbmc+U2Vla2luZyBh

IGZyZXNoLCBleGNpdGluZyBhdmVudWUgdG8gbWVldCBzaW5nbGVzPyBEaXNjb3ZlciA8YSBocmVm

PSJodHRwczovL3Nob3J0dXJsLmFjLzdkaDFyIj5Va3JhaW5pYW5HaXJsczwvYT4sIHdoZXJlIGF1

dGhlbnRpYyBjb252ZXJzYXRpb25zIGF3YWl0IHVubGlrZSBhbnkgb3RoZXIgcGxhdGZvcm0hIDwv

c3Ryb25nPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvcD4KCjxwPiZuYnNwOzwvcD4KCjxwIHN0eWxl

PSJ0ZXh0LWFsaWduOmNlbnRlciI+PHN0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwcHgi

PuKsh+KshyZuYnNwOzxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpBcmlhbCxzYW5zLXNlcmlmIj48

c3BhbiBzdHlsZT0iY29sb3I6IzAwMDAwMCI+RXhwbG9yZSBwcm9maWxlcyBvZiB0aGVzZSAzIGxh

ZGllcyBhbmQgbW9yZSB2aWEgdGhpcyBsaW5rIDwvc3Bhbj48L3NwYW4+4qyH4qyHPC9zcGFuPjwv

c3Ryb25nPjwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PGEgaHJlZj0iaHR0cDov

L3Nob3J0dXJsLmFjLzdkaDFvIiBzdHlsZT0idGV4dC1kZWNvcmF0aW9uOm5vbmUiPjxzcGFuIHN0

eWxlPSJmb250LXNpemU6MThwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFsLHNhbnMt

c2VyaWYiPjxzcGFuIHN0eWxlPSJjb2xvcjojMTE1NWNjIj48c3Ryb25nPlNwYXJrTWF0Y2g8L3N0

cm9uZz48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L2E+PC9wPgoKPHA+Jm5ic3A7PC9wPgoKPHAgc3R5

bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjE4cHgiPjxzdHJv

bmc+PHN0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6QXJpYWwsc2Fucy1zZXJpZiI+PHNw

YW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPjxzdHJvbmc+Q2xhaW0geW91ciBmcmVlIHNpZ24tdXAg

bm93LCBmb3IgYSBsaW1pdGVkIHRpbWUgb25seSEgRG9uJ3QgbGV0IHRoaXMgY2hhbmNlIHNsaXAg

YXdheSE8L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwvc3Ryb25nPjwvc3Ryb25nPjwvc3Bhbj48YnI+

CiZuYnNwOzwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+Jm5ic3A7PC9wPgoKPHAg

c3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48YnI+Cjxicj4KVG8gb3B0LW91dCBmcm9tIG91ciBl

bWFpbHMgYW5kIHNwZWNpYWwgb2ZmZXJzLCBjbGljayA8YSBocmVmPSJodHRwOi8vdC5seS9HVnJC

SSI+aGVyZTwvYT4uPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToyMnB4Ij48c3BhbiBzdHlsZT0iZm9u

dC1mYW1pbHk6QXJpYWwsc2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPiA8

L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3A+Cgo8cD4mbmJzcDs8L3A+Cgo8cD4mbmJzcDs8L3A+Cgo8

cD48c3Ryb25nPjxzdHJvbmc+Jm5ic3A7PC9zdHJvbmc+PC9zdHJvbmc+PC9wPgoKPHAgc3R5bGU9

InRleHQtYWxpZ246Y2VudGVyIj48c3Ryb25nPjxzdHJvbmc+Jm5ic3A7PC9zdHJvbmc+PC9zdHJv

bmc+PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3Ryb25nPjxzdHJvbmc+Jm5i

c3A7PC9zdHJvbmc+PC9zdHJvbmc+PC9wPg==



--===============8629757955455392012==--

Ukrainian dating spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 26 Mar 2024 18:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpH8D-000000004M6-1Zqb

for dave@doctor.nl2k.ab.ca;

Tue, 26 Mar 2024 18:27:05 -0600

Resent-From: The Doctor

Resent-Date: Tue, 26 Mar 2024 18:27:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-db5eur01olkn2089.outbound.protection.outlook.com ([40.92.64.89]:21729 helo=EUR01-DB5-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpFdS-00000000NNS-39bj

for root@nl2k.ca;

Tue, 26 Mar 2024 16:51:18 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=ToN4gmgpAmlgw2dJx6jGtPP4ktF8B/4x3O1pyZ3ssJkeK/JlDZ5CQwQo/A2PIjZZv4vjyCkUa+SB170McWuiQmXYT9iMozYcEx+UqUxgDAhMyXneJheNpM7nonxLvncs6SxfcMfKDniI88SxGSqaPeVUETOJUOm7k+5vszJgUVWjN6DTEI7GMLrj5xqIpUFi7qPtqMkpt2apWc/2ZabQaJ879vrnoAhCpBMsXGd3Z2IHCLHOhuJiEUi54H/fWPwzqVS4PHTSeqbj85H6b1oQBjBvLyUyuszgjoF+fPKSwSEoWei18T4dwPsoZSXT23o/72z4q259zIhDOr50DnMqcQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=oTCykOaLlBXRBx4l/x1kCAXexuTIgKAP6R2R94yO41Y=;

b=jxOt20AsjMeT2yzLJX7TetfFCetIPIVez4ZpAMQdRDQcDGbNyBo+YXTsBaVqULnlIXHh+79JEyGAkxpQZ4QcYwpoQCLerJa3gaTX1N9nqNsv6Iy5ei7CACvJNTYvV1026guHqHSXzGaNx5jtPOCtQdQVMoHhazZuMOMC8O+M6k4DVzOG1lWxkKFGfhixDbP3IxlAF7oVzqMIgNT0Vpxf6aLjLnGsYEwrNdoVfojvCkYPjiR6QaFj5PyLIyfLdGPVzxi1eLE6493LHCQkBey0tHzir63hXoSpVeiCz1JsZxjnEQ+4srfbY1mLsGtsxXLdsVf+O7m3wBPkQ5FylxIMdA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=oTCykOaLlBXRBx4l/x1kCAXexuTIgKAP6R2R94yO41Y=;

b=h5DVCj9slVdNAfUq95HAH0gSTc9Tote/rgao90pfka2SYCxvDeV7O/VRyiKB/nvhEJsqGFBtwTlqOrivfNu3+2Ud8hjUg6yeLKkvD08EtEkCi5CNOiUxYs+qSCzbSFe/9Av1/+BplHy66E3JzDLlSMhXcEuaoW4KaeESfpoTKTfPoTfc27TYHTok4ydgHv1f1J2xJK6Uk1SspR2pxOJDdq4u9ZcYcCKwOiooBBGdhL4+WW4BtnoNqAGOiwIXaJQGJbUewxzZ5i/vu3j43yolF++AQGbRb+bC/AhQ/O6UW1XGps7B9tKzhUIrkEP8iV+ezxxINO7lnfq9o4sY7K9ujw==

Received: from PAWP194MB2079.EURP194.PROD.OUTLOOK.COM (2603:10a6:102:338::13)

by DU0P194MB1952.EURP194.PROD.OUTLOOK.COM (2603:10a6:10:410::17) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.31; Tue, 26 Mar

2024 22:49:02 +0000

Received: from PAWP194MB2079.EURP194.PROD.OUTLOOK.COM

([fe80::6ec4:701:8778:5151]) by PAWP194MB2079.EURP194.PROD.OUTLOOK.COM

([fe80::6ec4:701:8778:5151%4]) with mapi id 15.20.7409.031; Tue, 26 Mar 2024

22:49:02 +0000

Content-Type: multipart/alternative; boundary="===============1944107661305265478=="

Subject: =?utf-8?q?Comment_on_your_photo_=F0=9F=92=AC?=

From: CharmJunction

CC: CharmJunction

Date: Tue, 26 Mar 2024 22:48:49 +0000

X-TMN: [tD2eU67oEY96b11ffFwfFmLI/ktBzf0N]

X-ClientProxiedBy: FR0P281CA0106.DEUP281.PROD.OUTLOOK.COM

(2603:10a6:d10:a8::7) To PAWP194MB2079.EURP194.PROD.OUTLOOK.COM

(2603:10a6:102:338::13)

Message-ID:



MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: PAWP194MB2079:EE_|DU0P194MB1952:EE_

X-MS-Office365-Filtering-Correlation-Id: f397e7aa-4ae3-4d50-60f0-08dc4de6ee29

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?eURnZVJVRW5FSVhXZ1N5ZVN6b3RkLzltZWhQdDM5OWlWTXhEK0NKQWRZTExG?=

=?utf-8?B?R0dmYThUYlI2U1lHKzlKQmFGN0hScEhuVGV3MHRSV2RHMDMxeHU0eGdnYjdu?=

=?utf-8?B?bFVyVzlaYzFJakdjVUpiZ2Q2L3pZcXd0bUQ1bC9RSUFJVU0zSU5zN09CZElV?=

=?utf-8?B?MFZLUHloWHNTNDZ4TVJoNGhtTmg4MmJEaVJyV2VSd1FyK3BEN0tyR2JGSlFw?=

=?utf-8?B?RkNuR01GZGU2S3ZmekRRdkR5TzIxL2tkN2l2UUMzWXlMbVdqNWNVdlZwNlNm?=

=?utf-8?B?SG1aMmszanUyd3R6ejk5dERLYkhmUCtZaTV5YTlLT1ZCTG9obzRvRzJMSVhF?=

=?utf-8?B?SG5Fbm5Hc0NNRUVJdDB3eFc0cWMxbUcvUFBZaTlqaEkyb3hpRmNPNCtTZUpG?=

=?utf-8?B?UExUM3RBQW9TcGprQ3ZXQVQyWUVLN2laZ3Z3U1UxRG1xNlBaRnU1aTJmeXox?=

=?utf-8?B?YWNMUklUYk1RdnQ3Mk10TEVUSXRnQW5TYjlpRExNei9VQmFaZFhWUUlFOXU4?=

=?utf-8?B?UVNCaExOUnlwYi9wdHpIbVVpSFp2N214SlF4T1QxTGFkbUUzRlRwVGEwb2d0?=

=?utf-8?B?VWJUcHZUZExIUENrdmxxQ2k4THN6VDh5aDBLQUsrM2tIMmJ1WGMrU3NjRTdx?=

=?utf-8?B?ejJFeUFzMi9waWc0Vy9IZGJHVmxTT2w2RVk2WXp1cDN1bkQ2V2tMOEg4UWpx?=

=?utf-8?B?eE1EeXNYK1VtTW9kM3ZPUms1dDRWdkpkbDF5TlZyeXFCck94ZGwyVnVwb0c2?=

=?utf-8?B?eTNlaUJ2QWE4UXRQL2orbUl4MUpHUGdrWlhMbXdqbkV2SUh0bUpGRHhGV1Js?=

=?utf-8?B?djg1Z1B6RWZBQzMzRDg1WVpVM25UUTgxMnErZlNGUUFMdEV4ckhFSmt2RVBk?=

=?utf-8?B?c0U2ZURXcktySDlHaUZsQ0FJeVZQUlg2cGx6dzl2RGdkZk0yVy9sM0oxUVZX?=

=?utf-8?B?b2p4U3dCakVRK3A1TFoxNHRPOTFiR1IvMTJ0VDh5SDFTMVFINEIvOENtSE1v?=

=?utf-8?B?U1RlSDVSckx2TUpEdEp0dkJpaG1TcExFektaVG5tbGxKWEhoczVXTTRPdFJi?=

=?utf-8?B?TGREZkhEMXZLTUZHdFg4NU9DOTZhcWwxc05QZHc0SVpXbk9obi9pQ2FBVi9Z?=

=?utf-8?B?b2lDWGtqRktNZng3bTB2Nmg2NkRGOGZKR2lPK1BlM01QbXh0bmoyR3dTZWlM?=

=?utf-8?B?Z2crWU1jNnJVek5uOEFIcWxZbzRMVkN3bm9lVk93ZnRiOW1jRU5pYzhsd1dy?=

=?utf-8?B?OEJzZmlkUXBFRG1WRTZuMUM1NWhnaG1sV2JMNTlxNFU1K1lKYlZWa29qRGlM?=

=?utf-8?B?Skt2WWU2SmY4SEs5UGh4bisrWG13MUpOZjQySWFoN2dXWlRCRUhoNXR6SitJ?=

=?utf-8?B?eEI4czFDSGNLVjNXMjA3TmFBTm5jYzhGbjdzeTZDc3V5VSsxK2dBTjhUZUZR?=

=?utf-8?B?WWZ4YW9ab2x4Rk92UFlYKzN5RFJ4TnlIanVnRGVWZjdVVGpyUU9YUEdhQzl2?=

=?utf-8?B?ZXpoaVB4VkhpRE5xTDFNOThIdEJ4ckNTVkRTR0dyMUREV09SNnlLbkJRTStx?=

=?utf-8?B?bzJIckxTQ1NSUU5YR0ZBbklzeFlYZHFpaUpPbUxSQ0xHdHR4MU01U29ta0gz?=

=?utf-8?Q?gUrOkHEv6oKzMnpE++OSWF/P0QXvuMchX17rn8sQ8Mps=3D?=

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?d0JLaGN2SkhIM0ozUTRuRnlsWElaOElHK1R2YlYwWlpDbkh1T05EdE94R2ZJ?=

=?utf-8?B?WThvYm95QTBKSEhscFRwaW8vZDlzWUJ4SHREOExQTU5FRk1xbnFwQWVsVFVQ?=

=?utf-8?B?ZzI3NlRjWG83QzIvL1dya2JYeHl5RzY5RWQ1bzBpY2tSWTkzaGpYcmZQTGRB?=

=?utf-8?B?eDNoVWZjY3UyVitZdkFJNG1kN09USE1rSE93UFVlTktUZ1Znc3AvUDJrdUtv?=

=?utf-8?B?WnVBd0VaTDhNYUg0MGkwM1lVMGxzaXcycnUrUkhzU3IvV3hBUWlIY29rK2pt?=

=?utf-8?B?TlJvTEtBdm1QUXVrd3BQUHdzUVdzYzZDRW02QmdoYm9jZlpDQm5EbitrSGUz?=

=?utf-8?B?MUFZbVJtMXFsZkIvYjIrS3pMT1VINTFGc3N2Z21Ka241cEltbCs2WFVBZ3Zs?=

=?utf-8?B?My9vbHFSQ2RDRzByZ2MxWU4rQ01hSWRmVVZ4YWpjM3gwSXpvMmpXTTJxREM2?=

=?utf-8?B?dE1KcjR3b1NvRnRObnh2KzAwTWtEWlN4MzI2WGIrdEJuTENTVlJNTjV1dUNF?=

=?utf-8?B?UW9Mb0djUXNEd3VxWFNRQkxLWWp1R3RPSzVWMWN4NkU2UVlYamFxbUthRmxa?=

=?utf-8?B?eHdibHpVTUNPV3I4NytvWmNGMjliei9VY0lSbWNpSlNaVTdiMmNWNSthWXU4?=

=?utf-8?B?d0hQQTIvZ2Zkc05vTk5yaDB5SGZUMnk5ZzRNeDd2Vm53TWZtZVZHWmFEdk5B?=

=?utf-8?B?Tk9ZcEthQzlBSy9wQWZHTGU4OFFKd1hQakVTdXdYV3oyQnlxWHJ2SW5tb3FR?=

=?utf-8?B?ZnhnZHYvNWhJdnhhNHRDN3RCN3dhNDVqWlZrbjBOazBaWnVRTmJQY2VOeUN2?=

=?utf-8?B?SElybjF5eXVWNmwxTk5EeDl2T2tGT2RkcE1uM1VYczZYL1hBV01oMVVOOXRh?=

=?utf-8?B?elVZSXI1amtCWjFUWkw2RFNxakNVdWU1REdPYWRaVndvSVhrdnJKVEVkdDdF?=

=?utf-8?B?QjY4cUgySGRBeHBFV04rdWg0Mnlob0RqUTNpSExvcWFTbFRGTmUrUGd4dGxE?=

=?utf-8?B?MUtzNVRUbnJ4REZpMmc2K0swK0RmOUpHZzV5WTk2YytGUERjSktEU0hnQUtq?=

=?utf-8?B?WmVEVWFiR3lOZG41azJLa1VKSVhkOHFFeTJpaFNFc2t4emlZamZKRVFhcUVC?=

=?utf-8?B?b1dIM2dHZ1Z2WHIyd1V6S3puVktuS1B6b01nYmN5OVFQcm43blB2QzE2cEVI?=

=?utf-8?B?SWt6cUU2MkcwU09JQkwweHZvZGY4VTBjcThvaThiLzhET2VZSUdPNWtFbnVt?=

=?utf-8?B?LzNFNmliMUU0eTcwWmIwOGFBcDRnSW8xMndQUUNVTjZtZi9RbCtPSEk1UGRa?=

=?utf-8?B?dGRsL3ovZk1lbE50MEY0bVBucmhUZGNPN2VwMHY3YmxKMy85enU2THlYTjd6?=

=?utf-8?B?UlFPZHZsNjN3UDFmSHBObXV1WjlXVm5Yejl0cUN6NUVaU21abGxsNE9hK3Fa?=

=?utf-8?B?VnYwT0pxL1llZGdqL0NER0tPV1ZnVVA5ckdsdFVJMmlKT3QvNHNBVmFkYVpp?=

=?utf-8?B?b1BQUDViNjRJaHNIVlBVdkp6L3NTd0N1VmpDZWF5dzBUU3BYOXZ6UVZSMGFZ?=

=?utf-8?B?VzZkdDNIWEt2OTdmbE5tTURCdk02NnVEa1ptTTMvRXNnSlJWUVRBYitMUzl6?=

=?utf-8?B?YmZQSHQ3R1VEV0lLOGRwdHlPa25GUnZWaXpFUGlseC93cXpQZEU0VlMwRGRi?=

=?utf-8?Q?cRFCSGnGGWpKSMu1ABd6?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: f397e7aa-4ae3-4d50-60f0-08dc4de6ee29

X-MS-Exchange-CrossTenant-AuthSource: PAWP194MB2079.EURP194.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Mar 2024 22:49:01.6122

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU0P194MB1952

X-Spam_score: 12.4

X-Spam_score_int: 124

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Curious about connecting with Ukrainian women in your area?

Seeking a fresh, exciting avenue to meet singles? Discover UkrainianGirls,

where authentic conversations await unlike any other platform! ⬇⬇ Explore

profiles of these 3 ladies and more via this link ⬇⬇



Content analysis details: (12.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.64.89 listed in list.dnswl.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: shorturl.ac]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.64.89 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[crumblayne00(at)outlook.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[crumblayne00(at)outlook.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} =?utf-8?q?Comment_on_your_photo_=F0=9F=92=AC?=

X-Antivirus: AVG (VPS 240325-8, 3/25/2024), Inbound message

X-Antivirus-Status: Clean



--===============1944107661305265478==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



PG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJz

ZXQ9dXRmLTgiPjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PHNwYW4gc3R5bGU9ImZvbnQt

c2l6ZToxMy45OTk5OTk5OTk5OTk5OThwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFs

LHNhbnMtc2VyaWYiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAwMDAwIj48c3Ryb25nPjxzcGFuIHN0

eWxlPSJmb250LXNpemU6MTZweCI+Q3VyaW91cyBhYm91dCBjb25uZWN0aW5nIHdpdGggVWtyYWlu

aWFuIHdvbWVuIGluIHlvdXIgYXJlYT88L3NwYW4+PGJyPgo8YnI+CjxpbWcgc3JjPSJodHRwczov

L2xoNy11cy5nb29nbGV1c2VyY29udGVudC5jb20vcURaNzBicEUtZTJpbWJGSHM0T2htOWVNdzhB

Y3k4VzE5Y3h4SmV0bjRlNXJESUJLWmNmMUc0dW1SUEwzcXBEWkRPeXBVbVlMRHBqYi1NX2Z4Rllf

VjdOQ2FhQnpDLXFsRWZFQVpuTXpTY3hlY18wVWJSZEp5RXlMTjlUV29fNUFVMXFNRzl2d3pqd3VP

ZVBSaWRYVGJWRSIgc3R5bGU9ImhlaWdodDoyNjVweDsgd2lkdGg6NjI0cHgiPjwvc3Ryb25nPjwv

c3Bhbj48L3NwYW4+PC9zcGFuPjwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PHNw

YW4gc3R5bGU9ImZvbnQtc2l6ZToxNnB4Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6QXJpYWws

c2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPjxzdHJvbmc+U2Vla2luZyBh

IGZyZXNoLCBleGNpdGluZyBhdmVudWUgdG8gbWVldCBzaW5nbGVzPyBEaXNjb3ZlciA8YSBocmVm

PSJodHRwczovL3Nob3J0dXJsLmFjLzdkaDFyIj5Va3JhaW5pYW5HaXJsczwvYT4sIHdoZXJlIGF1

dGhlbnRpYyBjb252ZXJzYXRpb25zIGF3YWl0IHVubGlrZSBhbnkgb3RoZXIgcGxhdGZvcm0hIDwv

c3Ryb25nPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvcD4KCjxwPiZuYnNwOzwvcD4KCjxwIHN0eWxl

PSJ0ZXh0LWFsaWduOmNlbnRlciI+PHN0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwcHgi

PuKsh+KshyZuYnNwOzxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpBcmlhbCxzYW5zLXNlcmlmIj48

c3BhbiBzdHlsZT0iY29sb3I6IzAwMDAwMCI+RXhwbG9yZSBwcm9maWxlcyBvZiB0aGVzZSAzIGxh

ZGllcyBhbmQgbW9yZSB2aWEgdGhpcyBsaW5rIDwvc3Bhbj48L3NwYW4+4qyH4qyHPC9zcGFuPjwv

c3Ryb25nPjwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PGEgaHJlZj0iaHR0cDov

L3Nob3J0dXJsLmFjLzdkOXdkIiBzdHlsZT0idGV4dC1kZWNvcmF0aW9uOm5vbmUiPjxzcGFuIHN0

eWxlPSJmb250LXNpemU6MThwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFsLHNhbnMt

c2VyaWYiPjxzcGFuIHN0eWxlPSJjb2xvcjojMTE1NWNjIj48c3Ryb25nPkNoYXJtSnVuY3Rpb248

L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L2E+PC9wPgoKPHA+Jm5ic3A7PC9wPgoKPHAg

c3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjE4cHgiPjxz

dHJvbmc+PHN0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6QXJpYWwsc2Fucy1zZXJpZiI+

PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPjxzdHJvbmc+Q2xhaW0geW91ciBmcmVlIHNpZ24t

dXAgbm93LCBmb3IgYSBsaW1pdGVkIHRpbWUgb25seSEgRG9uJ3QgbGV0IHRoaXMgY2hhbmNlIHNs

aXAgYXdheSE8L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwvc3Ryb25nPjwvc3Ryb25nPjwvc3Bhbj48

YnI+CiZuYnNwOzwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+Jm5ic3A7PC9wPgoK

PHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48YnI+Cjxicj4KVG8gb3B0LW91dCBmcm9tIG91

ciBlbWFpbHMgYW5kIHNwZWNpYWwgb2ZmZXJzLCBjbGljayA8YSBocmVmPSJodHRwOi8vdC5seS9H

VnJCSSI+aGVyZTwvYT4uPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToyMnB4Ij48c3BhbiBzdHlsZT0i

Zm9udC1mYW1pbHk6QXJpYWwsc2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAi

PiA8L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3A+Cgo8cD4mbmJzcDs8L3A+Cgo8cD4mbmJzcDs8L3A+

Cgo8cD48c3Ryb25nPjxzdHJvbmc+Jm5ic3A7PC9zdHJvbmc+PC9zdHJvbmc+PC9wPgoKPHAgc3R5

bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3Ryb25nPjxzdHJvbmc+Jm5ic3A7PC9zdHJvbmc+PC9z

dHJvbmc+PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3Ryb25nPjxzdHJvbmc+

Jm5ic3A7PC9zdHJvbmc+PC9zdHJvbmc+PC9wPg==



--===============1944107661305265478==--

Desparation spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 26 Mar 2024 07:59:00 -0600

Received: from mail-lf1-f67.google.com ([209.85.167.67]:49635)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rp7CN-000000008vK-0RFy

for dave@doctor.nl2k.ab.ca;

Tue, 26 Mar 2024 07:50:46 -0600

Received: by mail-lf1-f67.google.com with SMTP id 2adb3069b0e04-51588f70d2dso6612895e87.3

for ; Tue, 26 Mar 2024 06:48:48 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1711460922; x=1712065722; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=tiTgx0ORE0gBp0oYWKJklyQkiZBjAINbFGMu+CEvo18=;

b=B4IWy9xhCv4HzVL3YiOhZLDtVqGdZAjEeG7upBFwjnDi19YP0iNy97rRjxBetKlR4x

sZxA93nxebqj7CKm0k5LKvRP3ArcAnp6MMje5+c9inKChWarK7VXR7Y8I7Cqs0C0oW00

SIbj9ketq8YxId29S9L4ssRCMRa7NBUFOzUxFB4zKj2dA+rCIP8Pl/TsTjkGWZXKtSdO

JWx7bMI5RRSLgQ8nncf60BXRt6qRnC6SvDM5houtm9gqf9jwJgCSvQ6kZfl5wT4J0UVP

q5/JVrNoLSoj20xc+GCcW9M6jx9zGj8Ayg91tlLYmXXNlZTtOYm9cFCdjq52p8kKqbIx

pE7Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1711460922; x=1712065722;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=tiTgx0ORE0gBp0oYWKJklyQkiZBjAINbFGMu+CEvo18=;

b=II98DDJfshbiFFO9WKfsLM7PkB72r5Iukekay8yyWPn5Gx3DBQB/OEwG7E7lidot+W

GZCLnPgWqzg93wSwTv2me90yb9TzAm4C2nPG1Mwcoxa3P5MdXnQx9zM0RsAd1Q5rGIxa

g3IeWWbbQ20Xdvy9zLfFHovwoKmBnU5qYvflha85zJd8xkTB/fhDSCuJJYXCly1dKv3K

yUkQeowTyN4XIuo8ZULEwDJ1b5e+utWBu4RJ4cPiBvvjncESkFAHAAOYzzNq1VYoD5KO

daSAIHwiOVbOUfjLVNpsPZRfnbKEToayK2OeFrQoQ1kD5msfnm7FjxcPvZ7BVIdH1Iph

NdAQ==

X-Forwarded-Encrypted: i=1; AJvYcCUrlkOzxIGEBJ4HMaEZbRi3XNT6+m5zdjukIWV64HfWPoUDq2PisWf529B3YqaolrjHwaU1CqAEaQMbYUb+z+PADs8mAKhm

X-Gm-Message-State: AOJu0YwDJqd0+r4MnokMeyTyxZNwBqxFk8yW/nrWLw5sT//rglKRdHqI

gXVoOGdQiqJ4tSQ0lW1coPdk4IJV7Cg8FdUz02wZ/qmsC5jaKinNQVayXiJwvzDxxUUNgCis+Ky

BgLuUlLacbbOzr6Xs3GsvPSYrxEs=

X-Google-Smtp-Source: AGHT+IG+FfChWzCgiyttDKzaq2IDyd5sm6ZzBmcILHx/p9FVsjuUojb8qs/PI/10teozKCNIJhfYuuBdyTaXDgUzOe4=

X-Received: by 2002:a05:6512:3694:b0:513:cd70:8db0 with SMTP id

d20-20020a056512369400b00513cd708db0mr879991lfs.65.1711460921491; Tue, 26 Mar

2024 06:48:41 -0700 (PDT)

MIME-Version: 1.0

Reply-To: kl145177@gmail.com

From: Ken Lawson

Date: Tue, 26 Mar 2024 05:48:34 -0800

Message-ID:

Subject: Am still expecting your response, Please get back to me as soon as possible.

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000045d05d0614908c5e"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 6.1

X-Spam_score_int: 61

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:



Content analysis details: (6.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.3 EMPTY_MESSAGE Message appears to have no textual parts and no

Subject: text

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.67 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.67 listed in wl.mailspike.net]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[kl145177(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[lussken821(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[lussken821(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

Subject: {SPAM?} Am still expecting your response, Please get back to me as soon as possible.



--00000000000045d05d0614908c5e

Content-Type: text/plain; charset="UTF-8"







--00000000000045d05d0614908c5e

Content-Type: text/html; charset="UTF-8"








--00000000000045d05d0614908c5e--

X-rated Google Groups spam Charlotte <bacarycoulibaly76@gmail.com> from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 25 Mar 2024 10:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ronAp-00000000Dro-3QAI

for dave@doctor.nl2k.ab.ca;

Mon, 25 Mar 2024 10:27:47 -0600

Resent-From: The Doctor

Resent-Date: Mon, 25 Mar 2024 10:27:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f62.google.com ([209.85.167.62]:49428)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1romNB-00000000Nm3-0rqg

for root@doctor.nl2k.ab.ca;

Mon, 25 Mar 2024 09:36:35 -0600

Received: by mail-lf1-f62.google.com with SMTP id 2adb3069b0e04-51596f968c1sf3290183e87.3

for ; Mon, 25 Mar 2024 08:34:33 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1711380866; cv=pass;

d=google.com; s=arc-20160816;

b=z6cKqKcm0xaxtSF+dIbQtj1g71sOdI8TC5bmIbucye2/QLILSB+8ZJPh1ajO4E2hKP

eXTy6glwBqbMZzyYGLy6Lasqe8acp0teGgjDNtWkmlGqFVHjc63rjG9Lq7iTBujGyjEN

9oPnOtIQtchYspUgJpoxE/U1VDvhDtH1xk/9IhG5cOp/9Ar8n58aTKic7oVsM0U1fGCT

5lmfoOthV9VORje9R/1JN5lt3be6lb7LUnzhCtt+hxERKGF9E566cy8c8NVD9DZhR57s

84//xriQLeqDFOuMwJIMIzFpZO7B8U87hSJsgg69Z+j9qRrbRkZ+qFxx5zeeBTwFHEYU

LPlg==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature:dkim-signature;

bh=mmErNE7AVk7ir4LCVm+HCVrqoh3mZhuIU5W4uhsr5SY=;

fh=cw4101TzAd5/LYZ0VRlcufa6tTbPBhuMZ/9AuetF73g=;

b=G+9PanvZlJ9CSceACFwnW7LUrwjtJ7coXnsMA85muqfI/Njvr3JLEN0xKQutRpB5Ob

O0moU165QaTj8S0IohxB2/cHKG1HK8R52RrfdlnqJtn0+6XFMoKR+rxPcCOLZuZ5Zbuc

GLgmmEl6vOlKj5BjzeftcMpzG8r7V+PTSar7GCPJIPZ1ZzsLjOWNx4+erFEv6SFCbDys

hyZ1ntGv0IZVzs6ncbish5GTCYTjzc4Bt20iWbBJzb81Cetg2r+2kYbdEY02vVM8S4Jg

7WhmRevFHmpnjB3+O3j4PPQFLC47dD0PiG/LtOJIRJ0qRvxg2R75IM6b578PcxWxyQdD

dMQQ==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=2; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=B+FIoWsm;

spf=pass (google.com: domain of bacarycoulibaly76@gmail.com designates 2a00:1450:4864:20::32e as permitted sender) smtp.mailfrom=bacarycoulibaly76@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=googlegroups.com; s=20230601; t=1711380866; x=1711985666; darn=doctor.nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=mmErNE7AVk7ir4LCVm+HCVrqoh3mZhuIU5W4uhsr5SY=;

b=AAbWfd+wqYOPsMNzBywbUKobONR4mCr8Ad7TTfoWDSik+A4yZNJkYsgd9lxjLGGHzB

GwslaBbcAVgAXbxAIbBQDAGWkfxsMeS0zJFqD4VDFTlt95G9eCuhgwK4i+uHNEol40NE

JeLw+X0FSYlhf20mPH1OlWdEwVEjaU7yYGqQq00oPT8jIJ3+Qv9ew3E/vDAPKvWrg1VX

XHeLEu2Obuecc+Vq4G1MiFAZlxXaywh8V+/zkOwYRUB9VQ7nZeGbe1CEcieZzd+wM2XJ

Oy2THEwVDI4qjHM3N7H9qTAaHgJxhCAzpB2hmzKKS7RNSYc14wi9g16biOLMCheYMZQ9

CEkA==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1711380866; x=1711985666; darn=doctor.nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=mmErNE7AVk7ir4LCVm+HCVrqoh3mZhuIU5W4uhsr5SY=;

b=m4uWkBCE6rxA50eil2yF1pdKbXQPwS3E2CMNsetghMMDunLI0XZG1hCg0Lk9t3z5lR

rM+m3NyhP6MU6C07XEXpesnk46aSL9FCn+7nAGPhohM6g6fhWWFceMcADwT4RwI3rYNk

9JTenN1Z5W9vCv22nQHnD4lJgvxDMfpWZZzKWNCqs+2OKUc5P7Gw1RMj1V0GyDzWF5cp

YS/m6Bk9L587gKidzJ9Iyp7Oe6f23WTK//I4nkQNdu7mV+QO+cAWH4+FhHfI+S01EmZn

fvR3/TCIZGtPBYUdsJjncP5VI9rGYPgA1DZj3vx7pDm2X28hAjK9I3m6xr84pNy5e+Y4

9+Aw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1711380866; x=1711985666;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-beenthere:x-gm-message-state

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=mmErNE7AVk7ir4LCVm+HCVrqoh3mZhuIU5W4uhsr5SY=;

b=sB4wkMaTGJidhgyC3XSpDKrEu6JqyYvMq/HgkvotlWLPLzmrFG0Oku601cDWEbwKag

2kN/ZTtiNBfNBMTiI9Im8jQcgm+AS8Q9v16SImJWfDYeW1MEH8ylNuB0IgneCCxJ7oz6

XLKSfXO+MuVwZ3eYQ88184lUxKIbCwdxAxM2he16Oec5PMl3opFAadr3/b1Hsyj9MaxL

VnFDEKqpPzzCV40wFJvm6Vo7O+PWWf0qqZGd6k82ksst0lOj9Dk1ea2L9J3SPq9es1Ub

a92qCPSaGDs+D9Ner+kfK1XVYGE2bBnAMJrTuSgt2spxMyz65p7wXQOhmKZIKL3dAyk8

WjcA==

Sender: dece15-912025586@googlegroups.com

X-Forwarded-Encrypted: i=2; AJvYcCU719AovOFqO0/pYyAFwRablbF1fW0qGLLmg1mrYQbyWUVorH0Bs5GGskIah16HiiQ8T+xaBq96LDYOq1hIiMzdtL5hwCbE

X-Gm-Message-State: AOJu0YzkNhR4dc7Zo5YK5O9BDwCr216ffQ17ZSyaMmA3OzxgIqh0D6z9

Fg0SbUAdLrgrHsigjXYdRjtXeIWDgNAsA92x2fmWmeRpEfc71C4k

X-Google-Smtp-Source: AGHT+IHQ0QaGuoLplqwASNj0R9ZTE0LlVZh3v2cF3gLXHXaVcGwcws405z4JPcAssKOag+TfkpfkzA==

X-Received: by 2002:a05:6512:538:b0:515:8b52:ece5 with SMTP id o24-20020a056512053800b005158b52ece5mr4724653lfc.46.1711380866017;

Mon, 25 Mar 2024 08:34:26 -0700 (PDT)

X-BeenThere: dece15-912025586@googlegroups.com

Received: by 2002:a05:6512:3b9d:b0:515:a995:6ba2 with SMTP id

g29-20020a0565123b9d00b00515a9956ba2ls164520lfv.0.-pod-prod-03-eu; Mon, 25

Mar 2024 08:34:23 -0700 (PDT)

X-Forwarded-Encrypted: i=2; AJvYcCWOnRiAglh73M+kPh4/xovuUPcLxPCaUPWZnEpYRr+KSif81ZcDcK5Qkxnb3sHA4hO2EMLgtGcz52JgXc3YKU19VsM5ktjnTtAMdM593ReLsY8=

X-Received: by 2002:a2e:9182:0:b0:2d4:a041:874d with SMTP id f2-20020a2e9182000000b002d4a041874dmr4583587ljg.48.1711380862563;

Mon, 25 Mar 2024 08:34:22 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1711380862; cv=none;

d=google.com; s=arc-20160816;

b=sLHJ+U6nRBiDmWYGyFfbGa08iGjM3TIh8HNQJSBTWDAHjl0qtA/5mQxIeSAOW3+pPD

WVwJmrhhMAD8/Bm1smzPTe+hJily0g7O2nNowMMMy3o0Bf5/w5knAyNq5TjbWT78eBWG

3PQ2OxxDhkSQw1SP3Ivc3nugRZKJ9i+hvwPmFd5dMBOQFEKIL6kGxkAnfd/HiaMPpEd8

DZR19hTNaC5yi7iKOthT0+kUoPfO6kk3jgEjB2oKCBkoxBOwIJdPvfyrs9u+tq+qrmUa

kflx+Q055PDM/ziNzBa1eHebAWEvxrl44v1zqKAvMaXXLj6f3d/Gm3teHqO+LrT6jHlb

DxdQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=6ihfqvCu1FzMLDboWhGNsTBGY0c/I+DAqYeWYcbc354=;

fh=jEWuvUJrqTk0wmQIC4FLaUOPleyCHiy3BGL5saHE7qA=;

b=kkfXwbTYoPkrytX7ILdDFEddaGWp+9TT5fRVWmHaAaz3AqCv/WUxrf4FkY+ubIcR1H

g+p+7e1mBW2m6t0cmqxsIpVpv1AZUnxc/4Ac/QkUKeOxollK9eBf7nFGBh19d5GUpkul

PM+ERfSmhSP2AphzN6XDOAdsjeuTPz4yWxC7JrA4cvTqGUFezTtBSwofdPL8jynFqNBm

zDR6bqruA54f5evUrC8VWnevFx1+7Jc+FI26FuqsSEFVR9LJz5yZxtBRsuTrQfddhId4

HzjYPw3LIf9/0UxIvg2IrmEBIe84HZEebs16KrRpGos5+ONX1bDgS+x1Rnw40t/BpXYS

A9tA==;

dara=google.com

ARC-Authentication-Results: i=1; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=B+FIoWsm;

spf=pass (google.com: domain of bacarycoulibaly76@gmail.com designates 2a00:1450:4864:20::32e as permitted sender) smtp.mailfrom=bacarycoulibaly76@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Received: from mail-wm1-x32e.google.com (mail-wm1-x32e.google.com. [2a00:1450:4864:20::32e])

by gmr-mx.google.com with ESMTPS id x9-20020a2e9dc9000000b002d22c31334fsi266707ljj.4.2024.03.25.08.34.22

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Mon, 25 Mar 2024 08:34:22 -0700 (PDT)

Received-SPF: pass (google.com: domain of bacarycoulibaly76@gmail.com designates 2a00:1450:4864:20::32e as permitted sender) client-ip=2a00:1450:4864:20::32e;

Received: by mail-wm1-x32e.google.com with SMTP id 5b1f17b1804b1-4148ca200a7so456045e9.0;

Mon, 25 Mar 2024 08:34:22 -0700 (PDT)

X-Forwarded-Encrypted: i=1; AJvYcCWUYbh4/pqCK6xWZXIRsA8pUukCqOvvsZZk0nCbGWaqaK7RVZhrgq/uH21QXMfx1hUlTl6DsDy7Mhb1bDsqLcc9ATWUZpZeoylsQqXvmilsUo0qzOzAoAaHDQwCKIIXQPfjDzrKhJfHbWIhNTHwPTvgHBFbdItBiLm8rmHxeoGRsRMRboWmONeX8zYMFfCNIYoL4SNpVb1M7thpmycJbEWwlLLwBORGH1iwvO0Sr3lc0VvSAQHj4u2cHOxtKIBcuqvBV2tsH4eVa7w8mi1FKRUtBRG0cFYQg/KKELLDvTAJv4BbY168j2qmCKHmnPJKc1x4SHomSG0Kl+QR5L2QOmzcCK4y5BLtAWHo6TAqu3a7KnsHkPQ7amRF6sw3I4rGk8Oeth0BAX0vwq4qrMTOUFdVf3fw7gAQbmiZY8LZngTKNruZzNJLUo1FjzSbag1zwedFDia+kg541qTNUgBDdiNrhyBClUBgxC5P

X-Received: by 2002:adf:ed90:0:b0:341:c5cf:6cf5 with SMTP id

c16-20020adfed90000000b00341c5cf6cf5mr4242231wro.51.1711380861472; Mon, 25

Mar 2024 08:34:21 -0700 (PDT)

MIME-Version: 1.0

From: Charlotte

Date: Mon, 25 Mar 2024 21:34:06 +0600

Message-ID:

Subject: Discreet hookup with separated woman!

To: dece15-912016742@googlegroups.com, dece15-912016917@googlegroups.com,

dece15-912017260@googlegroups.com, dece15-912020230@googlegroups.com,

dece15-912020772@googlegroups.com, dece15-912025199@googlegroups.com,

dece15-912025586@googlegroups.com, dece15-912027395@googlegroups.com,

dece15-912027665@googlegroups.com, dece15-912027821@googlegroups.com

Content-Type: multipart/alternative; boundary="00000000000052e6d306147de877"

X-Original-Sender: bacarycoulibaly76@gmail.com

X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass

header.i=@gmail.com header.s=20230601 header.b=B+FIoWsm; spf=pass

(google.com: domain of bacarycoulibaly76@gmail.com designates

2a00:1450:4864:20::32e as permitted sender) smtp.mailfrom=bacarycoulibaly76@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Precedence: list

Mailing-list: list dece15-912025586@googlegroups.com; contact dece15-912025586+owners@googlegroups.com

List-ID:

X-Spam-Checked-In-Group: dece15-912025586@googlegroups.com

X-Google-Group-Id: 745700075957

List-Post: ,

List-Help: ,

List-Archive:
List-Unsubscribe: ,



X-Spam_score: 5.5

X-Spam_score_int: 55

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I am 30+. Are you interested in Meet & f*ck? If you interested

then just join here -> sites.google.com/view/hwfe21 (No credit card required)

////////////////////////////////



Content analysis details: (5.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.62 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.62 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[bacarycoulibaly76(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

2.5 SORTED_RECIPS Recipient list is sorted by address

1.7 BAD_CREDIT BODY: Eliminate Bad Credit

0.0 HTML_MESSAGE BODY: HTML included in message

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

-0.0 T_SCC_BODY_TEXT_LINE No description available.

Subject: {SPAM?} Discreet hookup with separated woman!

X-Antivirus: AVG (VPS 240325-0, 3/24/2024), Inbound message

X-Antivirus-Status: Clean



--00000000000052e6d306147de877

Content-Type: text/plain; charset="UTF-8"



Hi, I am 30+. Are you interested in Meet & f*ck? If you interested then

just join here -> sites.google.com/view/hwfe21



(No credit card required)















































////////////////////////////////



--

You received this message because you are subscribed to the Google Groups "Dece15-912025586" group.

To unsubscribe from this group and stop receiving emails from it, send an email to dece15-912025586+unsubscribe@googlegroups.com.

To view this discussion on the web, visit https://groups.google.com/d/msgid/dece15-912025586/CA%2BW17WT03U8v-j7M4xc4YY9EqEPScx5%2BiLMUSvvM_jE1_m45Dg%40mail.gmail.com.



--00000000000052e6d306147de877

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi, I am 30+. Are you interested in Meet & f*ck? If yo=

u interested then
just join here -> =C2=A0 =C2=A0
ites.google.com/view/hwfe21">sites.google.com/view/hwfe21

=C2=A0
=

(No credit card required)












r>










/////////////////////////////=

///








--


You received this message because you are subscribed to the Google Groups &=

quot;Dece15-912025586" group.


To unsubscribe from this group and stop receiving emails from it, send an e=

mail to de=

ce15-912025586+unsubscribe@googlegroups.com
.


To view this discussion on the web, visit
com/d/msgid/dece15-912025586/CA%2BW17WT03U8v-j7M4xc4YY9EqEPScx5%2BiLMUSvvM_=

jE1_m45Dg%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https://=

groups.google.com/d/msgid/dece15-912025586/CA%2BW17WT03U8v-j7M4xc4YY9EqEPSc=

x5%2BiLMUSvvM_jE1_m45Dg%40mail.gmail.com
.




--00000000000052e6d306147de877--

Nigerian spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 25 Mar 2024 08:07:00 -0600

Received: from mail-pg1-f196.google.com ([209.85.215.196]:59803)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rokyK-00000000HFj-0gao

for dave@doctor.nl2k.ab.ca;

Mon, 25 Mar 2024 08:06:53 -0600

Received: by mail-pg1-f196.google.com with SMTP id 41be03b00d2f7-5d3907ff128so3238505a12.3

for ; Mon, 25 Mar 2024 07:04:49 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1711375484; x=1711980284; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=kbmkvkNbBqjlGX8aa7wRHqiwWTrtRjcep8LAj9udQQM=;

b=MX102fFvJKC76jnR3z9WZDdoGfLmoitPpV+2qtAPDv7L8IxxbEuINhDMkc7nQDauXq

f62NXZS3+2KCZHVpUJxkI7sux8uil8GghQVdMndNddhcARW0dArdWU9dw9VVuC4apEQF

Z2IsZLaIlMyVsc0Z+lQa12Z+bpjOzy1KSyi6SDupnZ1BfStI5MbUNhJr2bx7DxDjZ1Or

5dVFDPZu3mrkv3k3C7gZjyzFw0KcJWTHSUz+OA4MkWLCURtDa8mKV3q9aj+AxJOWAv+2

lSiL9S9mzY54ix7bkwZiZbfC10/nVI8rsGqn7mTbapwr7vI0Od5i9sRK2fLXO6LSlSLr

eDRw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1711375484; x=1711980284;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=kbmkvkNbBqjlGX8aa7wRHqiwWTrtRjcep8LAj9udQQM=;

b=EawmbbHqhdNBDwnzz3AtES6lHWNE8t248h08+Y88J66somNU9/izrWuagCAVF2I2fC

hs+AisP7pP/tXcrnjMaQV9138F1+iyEFvN+9FS8jbkyRjEPPZXX5GxpWemG0CgpZEQET

9860tSPNYAR1MA5i25mH/cYsqWyOmWnDvtYEsNPpMV75ZAhc2hTBCa07CG7ajIPF2Kgx

lJCl8XUNOU8S4hHbrnJK+hBgpJb08F1MOF2SOnAMZXooS+oXBGIAt6o2UbvvSzKkpKQt

KH8xcvNzSCwh+A/Ky7auao0sjI28PEHd6QqsML1zYQKk4cE6H2yAhHIkNZMXSA83viUh

Ttgw==

X-Forwarded-Encrypted: i=1; AJvYcCVyrmyfp9nhptq1wxf1zYBToD/IjVcOCIor52tUIltJ1zyoUVEiKromCw9NhErruK/+bzaSztMTrLVsgQpI1jIPqxB3gK/H

X-Gm-Message-State: AOJu0YxwAYLeYwaOzYKfk/PUQbuBXqj3Q9plRCVQvvRFmCFHfg6k9RBU

aFXPHP5yat2S3Jhn0O+QEVOw3JnqcDp5uIws+SIdTYkHK5pGDZ2Ui1EoJEBjr0Vri15YszIwFR5

csj+m9qBFksLQTENe17qA8PI2gzk=

X-Google-Smtp-Source: AGHT+IHaULLcCYgVGQDccai0DGVC5KhXO1BDFICKvMGsUBNjQsMJVwtHeYGTOpnwqGiQXgtVMA0sBG8Diy55sLHhmJI=

X-Received: by 2002:a17:90a:d3cd:b0:29a:46d2:e877 with SMTP id

d13-20020a17090ad3cd00b0029a46d2e877mr5967955pjw.48.1711375483515; Mon, 25

Mar 2024 07:04:43 -0700 (PDT)

MIME-Version: 1.0

Reply-To: mrsaishagaddafi76@hotmail.com

From: Mrs Aisha Al-Qaddafi

Date: Mon, 25 Mar 2024 07:04:22 -0700

Message-ID:

Subject: business

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000c5bfbc06147ca7a3"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 22.1

X-Spam_score_int: 221

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please bear with me. I am writing this letter to you with

tears of sorrow from my heart.I am Aisha Muammar Gaddafi, the only daughter

of the embattled president of Libya, Hon. Muammar Gaddafi. I knowm [...]



Content analysis details: (22.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.196 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.215.196 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[209.85.215.196 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.215.196 listed in wl.mailspike.net]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[mrsaishagaddafi76(at)hotmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mohaiyanibintishamsudin22(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[mohaiyanibintishamsudin22(at)gmail.com]

0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

2.5 HK_SCAM_N2 BODY: No description available.

1.0 HK_SCAM_N15 BODY: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

2.0 HK_SCAM No description available.

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.5 HK_NAME_FM_MR_MRS No description available.

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 XFER_LOTSA_MONEY Transfer a lot of money

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} business

X-Antivirus: AVG (VPS 240325-0, 3/24/2024), Inbound message

X-Antivirus-Status: Clean



--000000000000c5bfbc06147ca7a3

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Please bear with me. I am writing this letter to you with tears of sorrow

from my heart.I am Aisha Muammar Gaddafi, the only daughter of the

embattled president of Libya, Hon. Muammar Gaddafi. I knowmymailmight



Come to you as a surprise because you don=E2=80=99t know me, but due to the

unsolicited nature of my situation here inRefugeecampOuagadougouBurkina

Faso I decided to contact you for help.I have passed through pains and

sorrowful moments since the death



of my father. At the same time, my family is the target Western Nations led

by Nato who want to destroy my father at all costs.Our Investments and bank

accounts in several countries are their targets to freeze.



My Father of blessed memory deposited the sum of$27.5M(TwentySevenMillion

Five Hundred Thousand Dollars) in a BankBurkina Faso which he used my name

as the next of kin. I have been commissioned by the (BBc) bank to present

an interested foreign investor/partner who can stand as my trustee and

receive the fund in his account for a

possible investment in his country due to my refugee status here inBurkina

Faso.



I am in search of an honest and reliable person who will help me understand

as my trustee so that I will present him to theBank for the transfer of the

fund to his bank account overseas. I have chosen to contact you after my

prayers and I believe that you will not betray my trust but rather take me

as your own sister or daughter. If this transaction interests you, you

don't have to disclose it to anybody because of what is going on with my

entire family, if the United Nations happens to know this account,they will

freeze it as they freeze others,so please keep this transaction only to

yourself until we finalize



it.Sorry for my pictures. I will enclose it in my next mail and more about

me when I hear from you okay.



Yours Sincerely

Best Regard,

Aisha Gaddafi



mrsaishagaddafi76@hotmail.com



--000000000000c5bfbc06147ca7a3

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Please bear with me. I am writing this letter to you with =

tears of sorrow from my heart.I am Aisha Muammar Gaddafi, the only daughter=

of the embattled president of Libya, Hon. Muammar Gaddafi. I knowmymailmig=

ht

Come to you as a surprise because you don=E2=80=99t know me, but =

due to the unsolicited nature of my situation here inRefugeecampOuagadougou=

Burkina Faso I decided to contact you for help.I have passed through pains =

and sorrowful moments since the death

of my father. At the same time=

, my family is the target Western Nations led by Nato who want to destroy m=

y father at all costs.Our Investments and bank accounts in several countrie=

s are their targets to freeze.

My Father of blessed memory deposited=

the sum of$27.5M(TwentySevenMillion Five Hundred Thousand Dollars) in a Ba=

nkBurkina Faso which he used my name as the next of kin. I have been commis=

sioned by the (BBc) bank to present an interested foreign investor/partner =

who can stand as my trustee and receive the fund in his account for a
po=

ssible investment in his country due to my refugee status here inBurkina Fa=

so.

I am in search of an honest and reliable person who will help me=

understand as my trustee so that I will present him to theBank for the tra=

nsfer of the fund to his bank account overseas. I have chosen to contact yo=

u after my prayers and I believe that you will not betray my trust but rath=

er take me as your own sister or daughter. If this transaction interests yo=

u, you don't have to disclose it to anybody because of what is going on=

with my entire family, if the United Nations happens to know this account,=

they will freeze it as they freeze others,so please keep this transaction o=

nly to yourself until we finalize

it.Sorry for my pictures. I will e=

nclose it in my next mail and more about me when I hear from you okay.
<=

br>Yours Sincerely
Best Regard,
Aisha Gaddafi


o:mrsaishagaddafi76@hotmail.com">mrsaishagaddafi76@hotmail.com


>



--000000000000c5bfbc06147ca7a3--

Ukrainian dating spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 25 Mar 2024 08:12:12 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rol3P-00000000Hmt-1xIb

for dave@doctor.nl2k.ab.ca;

Mon, 25 Mar 2024 08:11:59 -0600

Resent-From: The Doctor

Resent-Date: Mon, 25 Mar 2024 08:11:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-db5eur01olkn2058.outbound.protection.outlook.com ([40.92.64.58]:57902 helo=EUR01-DB5-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rog4j-00000000L4J-1gdC

for doctor@nl2k.ab.ca;

Mon, 25 Mar 2024 02:53:05 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=MH7bkGjiyQSl20J7qV8QpHgH5aevdQFFGkkDhzG7/odU5rpedljKILBKIEhtzbXIUb8NU8CL8LoIJAGqs+gFpfQQi9yuLrzMd26iwMMMkPSUadpRzROgE8H0x7BXPyS5uYngTTIozuAxNsqJktVwSmi4AEYeB89JPhov3Lv2KLph+Bl8WBYuJEo8zi5+GzUnBzJxz9g8JO2XOvdSTr1FCZYjKsCLJ73gxkg8GrJnfeGQjj3rZxpWYgrNa1h4OTWTyD1+0UJXMVcVcSmxBafRQkDZjrv/wy19vMqBN9xxeL+ZVDNMe8xQkzck+hqhWmGuwJAJ3XMppJBkK8J39B+0pA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=qR7O3vY1cVzhLsLbI1IBsSHgkINLGqo+GAH9XJ5LYHY=;

b=fFtDUl5R4GkUJiCkHtC5qsxftRMoGZdXtb6BLjFto+gn34vBM8ULOWekxMa9sDfvmY+U3XiRqMwbGRnv+UNmrf3bhRDkGTQnB/YZr+JkO1kUBBJfSL9bDekgMb/QcUEteaVxyL0u2cFUQ1iIo0xvTRzRW6Go0+wc1Xd3566cSILiYCaHXJVlvOFlX3KVeNlbM/v1bVZJhmDpUZZQtcGfpE751FYdsd1dRRAgicBBHuJoJe6Dw+3bcP2wkFqAicCpPaEZAL/00W+Ze5pQUr3xcd1X1L8kleXpzVZDh1Q3hAwUwEQvQ0fUoxcynvwSNeGHOU33ui966c86McEV4u7HtQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=qR7O3vY1cVzhLsLbI1IBsSHgkINLGqo+GAH9XJ5LYHY=;

b=kBDHxpJ4DgtTd8/URJ4D7/ANhz1/Ei1OkyjNmgPkU88mln+lKe+rND+og2kpMm9XcPzyvVZWxRCRj8s5g13nZlUS/vyObr8x2tJs8iv3ILM3LP8DQv8iLWjiAzZTwJXM/q8MjRT9RRHHtd3HcHsSsaAr8CLa9MJcj1NFLHm+lkeV+QXAgs47L4NuBf0GbKmaVXv0GgPIBjiMaLMrlOHcrkRlEOOQiYzgjxvR4IuyuicnbHvrX52+zZcM9hdXV1624OVy8uI8zna/18xTiN0QroXEPCkH8VpWRnIJvUiu1qqtrKQGlUok0eplEmG6E/pBiTibtjoI2ajQS3YI+N5cUw==

Received: from PRAP250MB0687.EURP250.PROD.OUTLOOK.COM (2603:10a6:102:29d::17)

by AS1P250MB0456.EURP250.PROD.OUTLOOK.COM (2603:10a6:20b:4a6::20) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.31; Mon, 25 Mar

2024 08:50:54 +0000

Received: from PRAP250MB0687.EURP250.PROD.OUTLOOK.COM

([fe80::13f9:9138:f4aa:8fc3]) by PRAP250MB0687.EURP250.PROD.OUTLOOK.COM

([fe80::13f9:9138:f4aa:8fc3%6]) with mapi id 15.20.7386.025; Mon, 25 Mar 2024

08:50:54 +0000

Content-Type: multipart/alternative; boundary="===============7290883388350981176=="

Subject: =?utf-8?q?New_like_on_your_post_=F0=9F=91=8D?=

From: LoveLinkr

CC: LoveLinkr

Date: Mon, 25 Mar 2024 08:50:40 +0000

X-TMN: [vjvXAHOtCxUjbOhaVt3AODAKivFvM5Lj]

X-ClientProxiedBy: FR3P281CA0094.DEUP281.PROD.OUTLOOK.COM

(2603:10a6:d10:a1::9) To PRAP250MB0687.EURP250.PROD.OUTLOOK.COM

(2603:10a6:102:29d::17)

Message-ID:



MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: PRAP250MB0687:EE_|AS1P250MB0456:EE_

X-MS-Office365-Filtering-Correlation-Id: be952cfe-3e5d-4b0c-57ac-08dc4ca8ae1d

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

2fv9r8YYEofUFZbUyvmC/awKav6yzNBjMKZA2EzFbivjdFXeu2OpJ5q9EYkVqdEO82U7H9L32bDHfm1IZIOyiW7rQRu3gBz+iP+byVzG+Q+xPAo1Jh6YOtFoffo9cNpVspwlso+mtipTCnkDc6zmczCs0UzADvIT70Yu/VMFXIWCN2N/AekFy5UzCRGNHtKd3gzzahU+VwtE+RlTnZHt52K/drsCHtO7sL3Y7m/f0IET4efYGNzzC/2norBdAAxK7IdXXo3U5/lKSnP/LSuCBvi/D8nfTneY0hTH4yrIRuc+QIfkh2lTCTfU6w+HRlAC/VmkREzCAOJ9x7E3VIlaHkp1Z5U0jlLy5wYh4tBhxyGM2fgO+kSWvuafCOLrF5VF97sPxHfUq1sT8VmnFAX+4ymtmhkIOlPvqusC8LOvEeft5sDo3KVCqIEOv71hvQT88JLzNJMWrvIl3hVCuFzIPV/Cc8jq4N6tVWxCSPwAeC+OWpBV6T4VJw9SbKxfvIdvcb89lSdeGd02l+RRSOtCmlFJk8WOCnYURJT+4hye8WYROxCU+8KwXgTiwB40RFX2hK+uF+kgBaI3VnN7ez/hmibpd0sjXhWAWH7QBJ6r4xukEZFmSEktqqfzYXzIKMNznmpDkWHGs1lypx34bEI06fTIG4sIu4zGUWX2uwSNE2MQzdeJITvWTBBMWX7eS6S1mfYUyQjVjPcY9hushuUJ16+dYdW1WfxHEzJGJO0WNITe4dxT/UzkAPkJZ55m2hLRTFKN6Zwl6fYErwPN9Pk9Wg==

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?TU1lOFF3c3JZMDJKMFFremNzZlZWaDhqb2lqdldqWFRLcHdMU09WL2hsdTRI?=

=?utf-8?B?MmJmV004V0VyVWxkc0VFcVBOV0ZucVdCNzI3a01RMWl5dm1oam5mM1VsRmdN?=

=?utf-8?B?ZHVSbStqeDJUK1VCV1YweEU2QVVOd1kyQXZJeEF6TlozemIyYkVGY09VbTkw?=

=?utf-8?B?WHVJT21wMW4zaEM2Z1hWZnlBUGlXYTVpSENyWjNsR2I2UHZudFExR2JzcW9O?=

=?utf-8?B?ME9PKzZ4V2Y1TzJYSHNvZEQ1SEVFNWlDL3QxYTFLRlV0RmpoK3FKTjFOYTVR?=

=?utf-8?B?VHRKK0JqdU9oVi93M2htVWdWR1pQanNmc0lEY2JlclA3YzZneUFmYlM2NEs5?=

=?utf-8?B?cTBKSFZIQ1BmdkNCMGo2czJWM0s5MzV2ak1zVGZzVHZTTVdaVzNFQ0JiZUl4?=

=?utf-8?B?ZU9Ud0MxSVpBV2Zkb2RuazNWZm9sR0l1aEUzeUZmVUtoNzNOSTFlTEFwWWpk?=

=?utf-8?B?dHFZb0ZPeXUyTk1Sdkc5eWIrNFpCd1RLMUlLbk54eEVOWTdCRkNGcXJRQlBp?=

=?utf-8?B?RDJIU202eGhDQlN1alpEWks0czJIdXVlNnF0bGxHVk5qcElVRkt3VGY1anpD?=

=?utf-8?B?ZUM1eVNYemF2MmQvT2lTcS96Y2RTbFNRNzlubzFsUm9pT0lDb3hja3pySnBs?=

=?utf-8?B?Q3JFWmtwSlRlSjhZZUJITTBBNmxlRGVBb2w5T2dnaHBDY3B6SzE5b1ovckE1?=

=?utf-8?B?VnZDNHlWZFYvdFVyZyttSHIzVDFhWnRsZjVCT296Yi9EaWUvVitFTHFwdmVq?=

=?utf-8?B?WXdjZitwRzlEWTIyclpCc2YwSTR2SXE2dkY5N1ozYU8vaXpiZ3RyMFBXZHhm?=

=?utf-8?B?VlRwTjVtNmJxbXhPQmFPUlB4alNEWisrd2NVenFDNWJOY1pDUUNWM0o2QW03?=

=?utf-8?B?YWtkcVNRbjZIb1Z1cUZCS005SnVJSzB6YzFuUWpZT3dzUWVZbVNWODNlV013?=

=?utf-8?B?a1BpcUFWblk4ZU5zV1BUZmNSWFhUUFoyeG4wSUphOHFTcCtmK20rNjdTQ0F6?=

=?utf-8?B?dXdRWFoxMi9OdTgzaXR4OUkvbngzckZKU3hyNWpRZDFvRnBROWI1ZFE4TzVJ?=

=?utf-8?B?SHRrNDlXTHRZWVoza05SKzFueE9ycDZKYWZ6NlVjd1Z1WjJWMXJzVm91b3ZB?=

=?utf-8?B?SGR3YVMrTlBLTnpaYVc4R1lXaVlHOE94VGlrRm1WTldlbURMcjZOSm5mL1Nj?=

=?utf-8?B?NklkSld3OXJ6VVFaeEFvN2VnN2FhVWF0eTZkUm1IT0ZYRml1ZXlvaVRvSWhW?=

=?utf-8?B?QjFHSFpob0cwd0FQRW1lYnJiNytDbkJ4QmpRSlJhb3h6YVl4bkxUTFNmank0?=

=?utf-8?B?aC9PYVFNa2ZPN1RhZThYcXNWK1YzU0xoUHpiVHZxZEFkTmZyc2s1MkZkK0s1?=

=?utf-8?B?YjBHc0VzUVJpRXNtb1BRMkh2T3NYdE1MbUh1Rkoyclhjdkx0QlFSQS9kNW9U?=

=?utf-8?B?bUo0K084a1RpZngzc1JiOHVveXg3ZTk3RzBNSllQN2JoZTFxU1BjSzgxaHdS?=

=?utf-8?B?UHBWRm9pSEN1alVVSWFqVFhNMUpTT1NNZy9kbUV0Mk4xMzZGblIrYnh4RzZl?=

=?utf-8?B?Q01teTJ5eGJPSzBnd1FsOXdMWlFXN0poRC9zQ21jN3JOWTNzbzJyaW02cERO?=

=?utf-8?B?cTZUNmMyVElld1RCb2pPc3pUWUZlS0t1WVI0ZktVUnRuUUVCc2ZxcmxWalVD?=

=?utf-8?B?d3hIL0N3dGpuOXd3dHpkNmdMQ3lZTjkvK0Z3RnpkSmphYVNGVnJHN3dRPT0=?=

X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-e3d53.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: be952cfe-3e5d-4b0c-57ac-08dc4ca8ae1d

X-MS-Exchange-CrossTenant-AuthSource: PRAP250MB0687.EURP250.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 25 Mar 2024 08:50:54.5292

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS1P250MB0456

X-Spam_score: 6.7

X-Spam_score_int: 67

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Document Are you interested in making connections with Ukrainian

women nearby? Are you seeking a distinctive platform to meet singles? Discover

UkrainianGirls, where you can indulge in meaningful conversations unlike

those found on conventional dating sites!



Content analysis details: (6.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.64.58 listed in list.dnswl.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: shorturl.ac]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.64.58 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[kearstynriccardo1988696(at)hotmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[kearstynriccardo1988696(at)hotmail.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} =?utf-8?q?New_like_on_your_post_=F0=9F=91=8D?=

X-Antivirus: AVG (VPS 240325-0, 3/24/2024), Inbound message

X-Antivirus-Status: Clean



--===============7290883388350981176==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



PCFET0NUWVBFIGh0bWw+PGh0bWwgbGFuZz0iZW4iPjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVpdj0i

Q29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPgo8bWV0YSBu

YW1lPSJ2aWV3cG9ydCIgY29udGVudD0id2lkdGg9ZGV2aWNlLXdpZHRoLCBpbml0aWFsLXNjYWxl

PTEuMCI+Cjx0aXRsZT5Eb2N1bWVudDwvdGl0bGU+CjwvaGVhZD4KPGJvZHk+CjxwIHN0eWxlPSJ0

ZXh0LWFsaWduOmNlbnRlciI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMy45OTk5OTk5OTk5OTk5

OThwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFsLHNhbnMtc2VyaWYiPjxzcGFuIHN0

eWxlPSJjb2xvcjojMDAwMDAwIj48c3Ryb25nPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTZweCI+

QXJlIHlvdSBpbnRlcmVzdGVkIGluIG1ha2luZyBjb25uZWN0aW9ucyB3aXRoIFVrcmFpbmlhbiB3

b21lbiBuZWFyYnk/PC9zcGFuPjxicj4KPGJyPgo8aW1nIHNyYz0iaHR0cHM6Ly9saDctdXMuZ29v

Z2xldXNlcmNvbnRlbnQuY29tL21mUFljeFVibThUUzJIUFNwdnFodFpEYXV3R240YXJkNFpkdF9H

M0x4YmxaR25tOTBadDJXa3N3dDJMX2p6UDhPbEFvUEMtYmdBYnhzMjZKc2U4Z0ZiazhudGdRdmM1

N0ZsOE16TWd1R2ZXR2FKQlpmbHZWZGpGMTBNNXlRUzQxdUJKVE1fWTl4TnJCWUFzZnE4bXFlN28i

IHN0eWxlPSJoZWlnaHQ6MjY1cHg7IHdpZHRoOjYyNHB4Ij48L3N0cm9uZz48L3NwYW4+PC9zcGFu

Pjwvc3Bhbj48L3A+Cgo8cCBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXIiPjxzcGFuIHN0eWxlPSJm

b250LXNpemU6MTZweCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFsLHNhbnMtc2VyaWYi

PjxzcGFuIHN0eWxlPSJjb2xvcjojMDAwMDAwIj48c3Ryb25nPkFyZSB5b3Ugc2Vla2luZyBhIGRp

c3RpbmN0aXZlIHBsYXRmb3JtIHRvIG1lZXQgc2luZ2xlcz8gRGlzY292ZXIgPGEgaHJlZj0iaHR0

cHM6Ly9yYi5neS85ZDN5OW4iPlVrcmFpbmlhbkdpcmxzPC9hPiwgd2hlcmUgeW91IGNhbiBpbmR1

bGdlIGluIG1lYW5pbmdmdWwgY29udmVyc2F0aW9ucyB1bmxpa2UgdGhvc2UgZm91bmQgb24gY29u

dmVudGlvbmFsIGRhdGluZyBzaXRlcyE8L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3A+

Cgo8cD4mbmJzcDs8L3A+Cgo8cCBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXIiPjxzdHJvbmc+PHNw

YW4gc3R5bGU9ImZvbnQtc2l6ZToxMHB4Ij7irIfirIcmbmJzcDs8c3BhbiBzdHlsZT0iZm9udC1m

YW1pbHk6QXJpYWwsc2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPkJyb3dz

ZSBwcm9maWxlcyBvZiB0aGVzZSB0aHJlZSBsYWRpZXMgYW5kIG1vcmUgdmlhIHRoaXMgbGluayA8

L3NwYW4+PC9zcGFuPuKsh+Kshzwvc3Bhbj48L3N0cm9uZz48L3A+Cgo8cCBzdHlsZT0idGV4dC1h

bGlnbjpjZW50ZXIiPjxhIGhyZWY9Imh0dHA6Ly9zaG9ydHVybC5hYy83ZGcwaCIgc3R5bGU9InRl

eHQtZGVjb3JhdGlvbjpub25lIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjE4cHQiPjxzcGFuIHN0

eWxlPSJmb250LWZhbWlseTpBcmlhbCxzYW5zLXNlcmlmIj48c3BhbiBzdHlsZT0iY29sb3I6IzEx

NTVjYyI+PHN0cm9uZz5Mb3ZlTGlua3I8L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L2E+

PC9wPgoKPHA+Jm5ic3A7PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3BhbiBz

dHlsZT0iZm9udC1zaXplOjE4cHgiPjxzdHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFy

aWFsLHNhbnMtc2VyaWYiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAwMDAwIj48c3Ryb25nPlJlZ2lz

dGVyIG5vdyBhdCBubyBjb3N0LCBmb3IgYSBsaW1pdGVkIHRpbWUgb25seSEgU2VpemUgdGhpcyBv

cHBvcnR1bml0eSBiZWZvcmUgaXQgZGlzYXBwZWFycyE8L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwv

c3Ryb25nPjwvc3Bhbj48YnI+CiZuYnNwOzwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRl

ciI+Jm5ic3A7PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48YnI+Cjxicj4KVG8g

b3B0IG91dCBvZiByZWNlaXZpbmcgb3VyIHVwY29taW5nIHByb21vdGlvbnMsIGNsaWNrIHRoZSA8

YSBocmVmPSJodHRwOi8vdC5seS9IRVVkdCI+dW5zdWJzY3JpYmUgbGluazwvYT4uPHNwYW4gc3R5

bGU9ImZvbnQtc2l6ZToyMnB4Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6QXJpYWwsc2Fucy1z

ZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPiA8L3NwYW4+PC9zcGFuPjwvc3Bhbj48

L3A+Cgo8cD4mbmJzcDs8L3A+Cgo8cD4mbmJzcDs8L3A+Cgo8cD48c3Ryb25nPjxzdHJvbmc+Jm5i

c3A7PC9zdHJvbmc+PC9zdHJvbmc+PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48

c3Ryb25nPjxzdHJvbmc+Jm5ic3A7PC9zdHJvbmc+PC9zdHJvbmc+PC9wPgoKPHAgc3R5bGU9InRl

eHQtYWxpZ246Y2VudGVyIj48c3Ryb25nPjxzdHJvbmc+Jm5ic3A7PC9zdHJvbmc+PC9zdHJvbmc+

PC9wPgo8L2JvZHk+CjwvaHRtbD4=



--===============7290883388350981176==--

Ukrainian dating spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 25 Mar 2024 08:13:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rol3V-00000000HnK-2Aox

for dave@doctor.nl2k.ab.ca;

Mon, 25 Mar 2024 08:12:05 -0600

Resent-From: The Doctor

Resent-Date: Mon, 25 Mar 2024 08:12:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn7nam10olkn2088.outbound.protection.outlook.com ([40.92.40.88]:18849 helo=NAM10-BN7-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rogBq-00000000LWu-0xyu

for doctor@nl2k.ab.ca;

Mon, 25 Mar 2024 03:00:26 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=kjFDo04M3SBhaG5hDHrJ/b/Kk3+ske4HiE5zv4RTAUTEHguL+oAaGeuZ7XHB8KElVGGTBNrrLefAKblA5cRkr0QFsdZKqfhpw4DqaByHJJDDM5zvDpuiCw2M8+cnwCsV0CLVkG/HE1VXZBGjf9SyI2uaK9GIafffxu42/YF0CTI/xYVJ7lJLA9EhDRi99l4rYLlAL7ivBXcZJPpJK4xXjXXtB9R+CV9dirZ07vU7hhIdnGh9iQM/c02IYzEeZuyJtu9oliY8UPcmBuLK0EtYHVnAw+RFpFje2DLBxNWE1CUHuP3aI3nvjjTo9UzRzK38dVQHnifFwl7jWyDu07XXKg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=seJ6Sdk87eq3Tut9JCUqvrH3vmS2lsc5mwkPCZVoFU4=;

b=lFnFsxoHRxQAOHSm7iFJbjXzux1CV7dvpwDAmrUsxsIFVxdID/xqRDMkU7m9GUsGq6vmcZ61DsJpZhTAAUyW0fR0p7723WDiDa8xEVDi9m/hAM3+wTSY2lzASbMaG7JZxJt1Hjp/7ApAeXMVTsZfwzgTeRuamzgkMGG5sa3/MLF7RMPzWUCBna744gF7BX7Ovh4smFg+OsYFQLyaJG3shJnFmPiw2kj9XntqzvtruCLXAkZ7Z0Dfv3FvhEJGpQNXFyZSAASo93PfRZKdKmtxSNqWVE0mcUQdKlcF1XfoonpxgTsSJ53H+qFWBPEmWq9Mc4/ya4OoXW0OTMdlEljXag==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=seJ6Sdk87eq3Tut9JCUqvrH3vmS2lsc5mwkPCZVoFU4=;

b=F0pC6w3sh8Q0mFvtqSA0CTQtF4Ykn6lBNuNyYDJYd0x4QPP0ConYjW4ckyBp65m8jfpHYxlqhrBwnFluOklTk3PdjzaYirsLcNfJBdj0FLvEAK6BR9k/s+2jNVLo6xBrd6a9uLS4s5IQ48zDXKEUmWdmRJoqpbsA9RKdPas1JvEr6/9NfHrP8FJz88i6IvQRuR3+g+rDj09TFdf3EsqSNTghV5Nq65CaLGA01C+djDJwUapSUswLFOn4Y4Zk0ewxHBhCv3NtK52Yx7TkV+lBQ4xAbb8vEiZLDNZWrgqFFRGc62jBuhP4In9Xd6HS7zI2dqF2d9bEMFnAfOUMshLuhw==

Received: from BN8PR12MB3010.namprd12.prod.outlook.com (2603:10b6:408:63::32)

by MN0PR12MB5977.namprd12.prod.outlook.com (2603:10b6:208:37c::22) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.31; Mon, 25 Mar

2024 08:58:08 +0000

Received: from BN8PR12MB3010.namprd12.prod.outlook.com

([fe80::6cc4:f48b:8f41:596a]) by BN8PR12MB3010.namprd12.prod.outlook.com

([fe80::6cc4:f48b:8f41:596a%6]) with mapi id 15.20.7409.031; Mon, 25 Mar 2024

08:58:08 +0000

Content-Type: multipart/alternative; boundary="===============8701990277900836242=="

Subject: =?utf-8?q?New_post_in_your_area_=F0=9F=93=8D?=

From: LoveLinkr

CC: LoveLinkr

Date: Mon, 25 Mar 2024 08:57:22 +0000

X-TMN: [k4V18d7GlcsJQt8TkfFJsk8q3d3sX2C+]

X-ClientProxiedBy: FR4P281CA0290.DEUP281.PROD.OUTLOOK.COM

(2603:10a6:d10:e7::20) To BN8PR12MB3010.namprd12.prod.outlook.com

(2603:10b6:408:63::32)

Message-ID:



MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BN8PR12MB3010:EE_|MN0PR12MB5977:EE_

X-MS-Office365-Filtering-Correlation-Id: 647e0b3f-6574-4941-fe3e-08dc4ca9aefa

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?bUJFblF1M3cwalE3Nmp6aVpzVzlKUGttZGRhc2lBdlV1NGZlVEZMVnJLTUFK?=

=?utf-8?B?K2NBMy82Sm1zZlNuM2ZEWnhFVXUzMkhXQ0hWeUdvRjlVbnVXcFcwNmxaTncy?=

=?utf-8?B?RVd2NWNxbWt6YytjRnl2OUZ6ME93UzhGdjFDMm0xNVRuTUJZaTVmOXNZV2NT?=

=?utf-8?B?ZzFOeWVxaHVRanNKb1d1T2hFQ1dqSDY1eWhJeTlWZjIwNFVpbW1GR3p0VmRl?=

=?utf-8?B?K1hrb2tDZlBURUluVUh4aXRKemg5cWdIUGlGVnJJc1YrTlhsdEFxVjkxUm5I?=

=?utf-8?B?SkdRQ1hJbEJUYzBkbFRpVnIxdG5xQklBa0xOVW9TcmxJcEE1T3p5d09pcjgv?=

=?utf-8?B?Z1FDdmlJcVdTVUIwbm1wN1d4eHN1b29JSTU2YW5JRmVoeW1TMytxTXI5STZE?=

=?utf-8?B?QmM4aWxOek9LQlRWQkZHOTBGU0R3WjRJYXFRMFZ1dWlKZ0R3RkE0U0dFV0Jq?=

=?utf-8?B?ZHIySzM1OUFJcEZEdFQzYmVMWkwzSDBPZEVYVnp4KzU4c29yUXVlRy9ib1dI?=

=?utf-8?B?RnJ1S3hVRS9iVVBuWGk1aGY0REJGY2Y1NVRvNVZDQWxTMkV2OW83bk52dW01?=

=?utf-8?B?MEVvSTRMK2MweHlmaHkzQVg1bUh6RzFieXBYUUpEWVJiYnRNTEIwTWdKSity?=

=?utf-8?B?NVFWUHI1Tnd3ZEFqUk1zOU93YnpuL0o0b1NOT2pUTkJHZEgwcFdGQU9qV0Yz?=

=?utf-8?B?cGx4UWFHUkNjcExja1lpazQvcEIxa1dTSDdOMnB2bnRnUy9jeW5GbWR0TjN2?=

=?utf-8?B?Ujg3a0l1N0xaZjZSWTQyZ3lSeVJMVFdHbmtsSzhkYytRRW5vZjhJWWVOSTJS?=

=?utf-8?B?bzJIWWQ5QXI4VEtyL0t3TGRTVnFLRjdyQXBvV21sMFlFMXdsclZlczFVeUU1?=

=?utf-8?B?Y29OcjZncTVtakdWemZRWExoVEVadUc4YWNQWFYzK1NDMlFlREg0eVRpT2pa?=

=?utf-8?B?eDN1ZEJoaDJJTDRUTHB5bCt2a21PUENBelF0bk85U21UN3cwSjd1bSt4L09R?=

=?utf-8?B?SkpGSGhZQ3RHNkZ1Q1JoTGZORnBzdlROUHZMTXcwTDM3WTBYYWRjWXZKQ3Br?=

=?utf-8?B?cERhbVMxTzJIYlptR244M2MrVnREaUViS1NBZ0RqRlRqU21jazdSOHRETXRv?=

=?utf-8?B?WDZwOXd1TWd5TFBXT2dWaWlOR29XS1dKbVVvMDdXQlVUdWFMQzJLdjF6ZEx6?=

=?utf-8?B?SUttcGRDcStvU1BWZXNKa3hyZjNnYWE3TWhoLzNWTXNjd0RlaWx6bnNTNXo0?=

=?utf-8?B?VTN5U0FLMmFYNTdxZ2lQdmpKQWdnRTN5SlNEN3Q3dVlLYk56azNPSlVRc3cv?=

=?utf-8?B?N3AzSWxiV2pETUVITjFFWVpUODE2dlVlOWhIaWVIMHdaaXpiN0dUV2NBTnRL?=

=?utf-8?B?OGxrdHdNNFdQQXBSYmsybnhHSVpTR2NBTi9Ud01vVjAyN0crZDVseEx0bTdu?=

=?utf-8?B?N2o1ZkErUHZhWnl4N2gya0x0QnJ5V3JEVXdnQTJHbVJpN3ZrNk1CWGlYNWpu?=

=?utf-8?B?MXV2MnhYNE9RS21Qc0FGYTRZTWJWcGFGbUcwN203M1d3T2cyVFNRS0x2T2g2?=

=?utf-8?B?bnV3RDJ1Z2xCWEZYKyt6Vlp2TVdvbGZMUEZZb1ZycEE4eE5ra2ZVTHZpOGFU?=

=?utf-8?B?QXdZWFpXOFh5eGhmMEFqQlRUdzFUZ2lPbVJLVW1idkxoSGlyZlQ2bFRNYVBt?=

=?utf-8?Q?ljaAznAIjowbjNVokGTQ?=

X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-71ea3.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: 647e0b3f-6574-4941-fe3e-08dc4ca9aefa

X-MS-Exchange-CrossTenant-AuthSource: BN8PR12MB3010.namprd12.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 25 Mar 2024 08:58:07.3650

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN0PR12MB5977

X-Spam_score: 6.7

X-Spam_score_int: 67

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Document Are you interested in making connections with Ukrainian

women nearby? Are you seeking a distinctive platform to meet singles? Discover

UkrainianGirls, where you can indulge in meaningful conversations unlike

those found on conventional dating sites!



Content analysis details: (6.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: shorturl.ac]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.40.88 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.40.88 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[pitzerdiya666(at)hotmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[pitzerdiya666(at)hotmail.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

Subject: {SPAM?} =?utf-8?q?New_post_in_your_area_=F0=9F=93=8D?=

X-Antivirus: AVG (VPS 240325-0, 3/24/2024), Inbound message

X-Antivirus-Status: Clean



--===============8701990277900836242==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



PCFET0NUWVBFIGh0bWw+PGh0bWwgbGFuZz0iZW4iPjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVpdj0i

Q29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPgo8bWV0YSBu

YW1lPSJ2aWV3cG9ydCIgY29udGVudD0id2lkdGg9ZGV2aWNlLXdpZHRoLCBpbml0aWFsLXNjYWxl

PTEuMCI+Cjx0aXRsZT5Eb2N1bWVudDwvdGl0bGU+CjwvaGVhZD4KPGJvZHk+CjxwIHN0eWxlPSJ0

ZXh0LWFsaWduOmNlbnRlciI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMy45OTk5OTk5OTk5OTk5

OThwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFsLHNhbnMtc2VyaWYiPjxzcGFuIHN0

eWxlPSJjb2xvcjojMDAwMDAwIj48c3Ryb25nPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTZweCI+

QXJlIHlvdSBpbnRlcmVzdGVkIGluIG1ha2luZyBjb25uZWN0aW9ucyB3aXRoIFVrcmFpbmlhbiB3

b21lbiBuZWFyYnk/PC9zcGFuPjxicj4KPGJyPgo8aW1nIHNyYz0iaHR0cHM6Ly9saDctdXMuZ29v

Z2xldXNlcmNvbnRlbnQuY29tL21mUFljeFVibThUUzJIUFNwdnFodFpEYXV3R240YXJkNFpkdF9H

M0x4YmxaR25tOTBadDJXa3N3dDJMX2p6UDhPbEFvUEMtYmdBYnhzMjZKc2U4Z0ZiazhudGdRdmM1

N0ZsOE16TWd1R2ZXR2FKQlpmbHZWZGpGMTBNNXlRUzQxdUJKVE1fWTl4TnJCWUFzZnE4bXFlN28i

IHN0eWxlPSJoZWlnaHQ6MjY1cHg7IHdpZHRoOjYyNHB4Ij48L3N0cm9uZz48L3NwYW4+PC9zcGFu

Pjwvc3Bhbj48L3A+Cgo8cCBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXIiPjxzcGFuIHN0eWxlPSJm

b250LXNpemU6MTZweCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFsLHNhbnMtc2VyaWYi

PjxzcGFuIHN0eWxlPSJjb2xvcjojMDAwMDAwIj48c3Ryb25nPkFyZSB5b3Ugc2Vla2luZyBhIGRp

c3RpbmN0aXZlIHBsYXRmb3JtIHRvIG1lZXQgc2luZ2xlcz8gRGlzY292ZXIgPGEgaHJlZj0iaHR0

cHM6Ly9yYi5neS85ZDN5OW4iPlVrcmFpbmlhbkdpcmxzPC9hPiwgd2hlcmUgeW91IGNhbiBpbmR1

bGdlIGluIG1lYW5pbmdmdWwgY29udmVyc2F0aW9ucyB1bmxpa2UgdGhvc2UgZm91bmQgb24gY29u

dmVudGlvbmFsIGRhdGluZyBzaXRlcyE8L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3A+

Cgo8cD4mbmJzcDs8L3A+Cgo8cCBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXIiPjxzdHJvbmc+PHNw

YW4gc3R5bGU9ImZvbnQtc2l6ZToxMHB4Ij7irIfirIcmbmJzcDs8c3BhbiBzdHlsZT0iZm9udC1m

YW1pbHk6QXJpYWwsc2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPkJyb3dz

ZSBwcm9maWxlcyBvZiB0aGVzZSB0aHJlZSBsYWRpZXMgYW5kIG1vcmUgdmlhIHRoaXMgbGluayA8

L3NwYW4+PC9zcGFuPuKsh+Kshzwvc3Bhbj48L3N0cm9uZz48L3A+Cgo8cCBzdHlsZT0idGV4dC1h

bGlnbjpjZW50ZXIiPjxhIGhyZWY9Imh0dHA6Ly9zaG9ydHVybC5hYy83ZGcwaCIgc3R5bGU9InRl

eHQtZGVjb3JhdGlvbjpub25lIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjE4cHQiPjxzcGFuIHN0

eWxlPSJmb250LWZhbWlseTpBcmlhbCxzYW5zLXNlcmlmIj48c3BhbiBzdHlsZT0iY29sb3I6IzEx

NTVjYyI+PHN0cm9uZz5Mb3ZlTGlua3I8L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L2E+

PC9wPgoKPHA+Jm5ic3A7PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3BhbiBz

dHlsZT0iZm9udC1zaXplOjE4cHgiPjxzdHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFy

aWFsLHNhbnMtc2VyaWYiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAwMDAwIj48c3Ryb25nPlJlZ2lz

dGVyIG5vdyBhdCBubyBjb3N0LCBmb3IgYSBsaW1pdGVkIHRpbWUgb25seSEgU2VpemUgdGhpcyBv

cHBvcnR1bml0eSBiZWZvcmUgaXQgZGlzYXBwZWFycyE8L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwv

c3Ryb25nPjwvc3Bhbj48YnI+CiZuYnNwOzwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRl

ciI+Jm5ic3A7PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48YnI+Cjxicj4KVG8g

b3B0IG91dCBvZiByZWNlaXZpbmcgb3VyIHVwY29taW5nIHByb21vdGlvbnMsIGNsaWNrIHRoZSA8

YSBocmVmPSJodHRwOi8vdC5seS9IRVVkdCI+dW5zdWJzY3JpYmUgbGluazwvYT4uPHNwYW4gc3R5

bGU9ImZvbnQtc2l6ZToyMnB4Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6QXJpYWwsc2Fucy1z

ZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPiA8L3NwYW4+PC9zcGFuPjwvc3Bhbj48

L3A+Cgo8cD4mbmJzcDs8L3A+Cgo8cD4mbmJzcDs8L3A+Cgo8cD48c3Ryb25nPjxzdHJvbmc+Jm5i

c3A7PC9zdHJvbmc+PC9zdHJvbmc+PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48

c3Ryb25nPjxzdHJvbmc+Jm5ic3A7PC9zdHJvbmc+PC9zdHJvbmc+PC9wPgoKPHAgc3R5bGU9InRl

eHQtYWxpZ246Y2VudGVyIj48c3Ryb25nPjxzdHJvbmc+Jm5ic3A7PC9zdHJvbmc+PC9zdHJvbmc+

PC9wPgo8L2JvZHk+CjwvaHRtbD4=



--===============8701990277900836242==--

Nigerian Spam from Microsoft outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 24 Mar 2024 12:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roSUt-00000000N32-1Nji

for dave@doctor.nl2k.ab.ca;

Sun, 24 Mar 2024 12:23:07 -0600

Resent-From: The Doctor

Resent-Date: Sun, 24 Mar 2024 12:23:07 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lo4gbr01rlhn2145.outbound.protection.outlook.com ([40.95.115.145]:3239 helo=GBR01-LO4-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roPQl-00000000G42-0Goe

for sales@nk.ca;

Sun, 24 Mar 2024 09:06:42 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=BXfg6JA+JAmsBfUvcZqd/Gfy7hwpH6DIJ9bjRi5/FRLxSSoQ2huzW8Kl3dX8DkLpoyXObZSfZ6hm0FZNKXdrdLaCoDu4Y2dzrzmr45zxT9mk6spa1sXXHelBYtPvsi2WgtoKYuYBVwWEaiBNGue4NUFEpXq5gJDmzr8zFIGqpzChjCskXIe0VQQD5L/GfkNhAmF0A0puIV2h9haHMhZDHHeVOya9tBXlIBaMiFZPLuSvx6IE4253hhwRwyRNbTsWH6DQODZL1yHF28wlQzxKHn41ha/q0Y5J91rhQaDqJre3bq2NbVJmzoKbWN8D/V/njcRDGtW5zBZW1Bin5cOucA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=KOYlofxoeno+mXY12bZn7zRugj7bRZ3E5xvL3LShNPo=;

b=N555ANbRiN1pYo/HBUPDvMV5vDg8u+gFeveu70m0MpB+wq9gGil5w+vOWtzA8/gQ0nX38uvsrHRTyg7Zw99rMlSNXNQcZLLaHQgjtbpLUvfV9+Bp1DfDoe5w+49XGisTJKkDK4K23FQuxJREv6FZNZXB30jWbs2M74YheuuHLQ+5W3d7rn2+cm5lXn80NSOp3huHNTD/+wtHMmno5UX4P0pzJw1Qrv14E2HWAegrJswHDDjOIUVyfwHX5jAVe9KzDj3rUZ/42C6cbBUTn4Ur2Nb4n7JxCbpR8pHwQuaxvCmhYLY4utzWtNh6IC5rHIn2zol7DrdxHWgBwOo20/Rx8w==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is

193.39.172.206) smtp.rcpttodomain=nisanthinc.com smtp.mailfrom=office.net;

dmarc=none action=none header.from=office.net; dkim=none (message not

signed); arc=none (0)

Received: from LO4P123CA0528.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:2c5::10)

by LO6P123MB7303.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:33c::16) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.31; Sun, 24 Mar

2024 15:04:35 +0000

Received: from LO1PEPF000022FD.GBRP265.PROD.OUTLOOK.COM

(2603:10a6:600:2c5:cafe::7b) by LO4P123CA0528.outlook.office365.com

(2603:10a6:600:2c5::10) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.13 via Frontend

Transport; Sun, 24 Mar 2024 15:04:35 +0000

X-MS-Exchange-Authentication-Results: spf=none (sender IP is 193.39.172.206)

smtp.mailfrom=office.net; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=office.net;

Received-SPF: None (protection.outlook.com: office.net does not designate

permitted sender hosts)

Received: from ebyst.gwynedd.llyw.cymru (193.39.172.206) by

LO1PEPF000022FD.mail.protection.outlook.com (10.167.240.21) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.7409.10 via Frontend Transport; Sun, 24 Mar 2024 15:04:35 +0000

Received: from HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3) by

HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.2.1258.28; Sun, 24 Mar 2024 15:04:32 +0000

Received: from User (172.18.4.86) by HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3)

with Microsoft SMTP Server id 15.2.1258.28 via Frontend Transport; Sun, 24

Mar 2024 15:04:30 +0000

Reply-To:

From: Federal Reserve Bank

Subject: Dead Or ALIVE....4s

Date: Sun, 24 Mar 2024 08:04:29 -0700

MIME-Version: 1.0

Content-Type: text/html; charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID: <11a10617-b4eb-4685-866e-2dc8ffee7ef7@HQ-EX19-1.gwynedd.rhwydwaith>

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: LO1PEPF000022FD:EE_|LO6P123MB7303:EE_

X-MS-Office365-Filtering-Correlation-Id: c9297250-8174-4635-acd4-08dc4c13b829

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 1

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?windows-1251?Q?dIyOeQ3nrogoZqKgwud3Od6wqLNT9DcZyVouLuvLO/3M2bYRwduhiHnA?=

=?windows-1251?Q?RUGrZD+qLAUlkCgE4V+lAB7nwP1qpX9IpTwwPNa4/Cys/2eBQ3fM7bDN?=

=?windows-1251?Q?fmQj2YrxN9unFe/NYavx64mDu8KgT2bzemsUoM6pS5XiPxHRiJCNUKuu?=

=?windows-1251?Q?5SwxvqcQGIDANWChaXWB8mwzcGI1kb0Ht6qKMVnFQDS3NrBBY/V83JYE?=

=?windows-1251?Q?QFTQiOKGodYDB9ort6uLNtlypxMnWb+NFeNLdo0SGzOgr5hl3plJfEh4?=

=?windows-1251?Q?5bh7467C0pH3cVw/ysDPTQ6fu56u5zy9SlLCSb6XoW0tRR2G33ALAZMB?=

=?windows-1251?Q?7GiwT01XqBgqMHSyLLPsKs54nJ01YLKlJEY9ZIoQIObGPudrZKJcVgG0?=

=?windows-1251?Q?5BwiIiRUO8Tvd9VGKQkuxDmctLe9KM8rJylgBWz2hRDSQWATD+QUtYg/?=

=?windows-1251?Q?BtfUBymk6J3qwlkJQsxVF7oF/yT2pWXrWGX6w7rgoOF4BL3ewkwIgLKp?=

=?windows-1251?Q?NIR7xH1XHlKukjlYkAsc4rddFtGjzbF2caWTAQ8OEvzP+c90ULqo8lvo?=

=?windows-1251?Q?UewADpanBoVGDkBm3hq9XZPB+alu6ZfJZ7goMQoPGivvhEWn92/qUWAb?=

=?windows-1251?Q?+QKzLZvxuWl0JTfoZrNht7EKX3BPe73FG6RH49DzUcfPxGnSL1IZMna9?=

=?windows-1251?Q?9yNpJLPiy5OTSkvFW8eres2Az/mrTr/BXkcXNaa93HYPFwDCdfh57DWL?=

=?windows-1251?Q?V8Ee/JjOMietf9q7nGWSXygHmPrtbf5VWAqYCzTV+Q0AD010G9i0oU3v?=

=?windows-1251?Q?248khS+3QmrAAtkS5rH6HRexadAm2DEL910xaXx54fxkNwqnFN529Uyb?=

=?windows-1251?Q?REG1gWd57ejpPDVGbMwobp1IIgbZQq1b1y8QTlYPVAiKwt3Cpj+N4cDy?=

=?windows-1251?Q?lRwquV8urPlbWKdhD/2+fldbS1cP44YkHy5M7hUKWjaThLq56yK1wPf0?=

=?windows-1251?Q?Iazkspb3ZTsICYH40i3jVK24Ehn62QzpDD9GpcOwk0i0vseZRn1r0bIr?=

=?windows-1251?Q?hcYH/xOpe3L9tP9FkVNOwmOiFnNqSWs/z3he9c1dx/gPnLCyZ8UO9Sui?=

=?windows-1251?Q?4GV+zXwnkkIQcLNcfjv3y6Zzslnbrz/SWIObRfGtWSZNhCaHdAtBwtkT?=

=?windows-1251?Q?09QUHAyKlvSH3ohOnJE7P7ULJ3BLrk6+g2nXI4fMPLE6iI3PUxaV2qu8?=

=?windows-1251?Q?U6w7X7V95OOcjKkxPA4=3D?=

X-Forefront-Antispam-Report:

CIP:193.39.172.206;CTRY:GB;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:ebyst.gwynedd.llyw.cymru;PTR:systemau.gwynedd.llyw.cymru;CAT:OSPM;SFS:(13230031)(61400799018)(82310400014)(7416005)(48200799009)(376005)(35950700004)(2700400011);DIR:OUT;SFP:1023;

X-OriginatorOrg: cyngorgwynedd.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Mar 2024 15:04:35.6658

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: c9297250-8174-4635-acd4-08dc4c13b829

X-MS-Exchange-CrossTenant-Id: 99841289-67fd-4e8e-b813-12b22f782ece

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=99841289-67fd-4e8e-b813-12b22f782ece;Ip=[193.39.172.206];Helo=[ebyst.gwynedd.llyw.cymru]

X-MS-Exchange-CrossTenant-AuthSource: LO1PEPF000022FD.GBRP265.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: LO6P123MB7303

X-Spam_score: 30.8

X-Spam_score_int: 308

X-Spam_bar: ++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Beneficiary, We wish to inform you that a power of attorney

was forwarded to our office this morning, by two gentlemen regarding your

unclaimed fund of $5.5 Million Dollar. One of them is an American citizen

named [...]



Content analysis details: (30.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=GBR01-LO4-obe.outbound.protection.outlook.com;ip=40.95.115.145;r=doctor.nl2k.ab.ca]

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam

0.0 NSL_RCVD_FROM_USER Received from User

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[williamtash1949(at)gmail.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.95.115.145 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[40.95.115.145 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.95.115.145 listed in wl.mailspike.net]

2.7 UNCLAIMED_MONEY BODY: People just leave money laying around

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

2.0 PDS_HELO_SPF_FAIL High profile HELO that fails SPF

1.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.2 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Dead Or ALIVE....4s













Dear Beneficiary,




 




We wish to inform you that a power of attorney was forwarded to our office this morning, by two gentlemen regarding your unclaimed fund of $5.5 Million Dollar. One of them is an American citizen named Mr. Robert Porter and the other is Mr. Wilhelm Berg a Swedish citizen.




 




The document claims these gentlemen to be your authorized representatives, and the power of attorney states that you are already deceased. It further states that your death was due to lung cancer, with your date of death being March 27th, 2019.




 




They have now submitted a new account to replace the receiving account that was in the original claim of funds. These funds have remained unclaimed for quite some time and the need for resolution is pressing.




 




Below is the new account they have submitted.




 




Account Name: Robert Porter /Wilhelm Berg




Account: 5007-29 438 66




IBAN-nr: SE4150000000050072943866




Bic-kod: ESSESESS




Skandinaviska Enskilda Banken. (SEB :-)




SWEDEN.




 




In the event that you are in fact still alive, we ask that you confirm your existence by responding to this email. You are to view this as a matter requiring immediately attention and response. We have 48 hours monitoring of all activities within Federal Reserve Bank.




 




We have contacted the bank in the Sweden asking them to wait for further directives from Federal Reserve Bank, prior to authorizing any withdrawals in any form. Our request is based entirely on our attempt to verify that you are in fact deceased, before money is wrongly disbursed.




 




Finally, we forewarn you that if we do not hear back from you shortly, we will have to assume that you are in fact deceased and Federal Reserve Bank will proceed with release funds to the above newly submitted account.




 




Sincerely,




 




Lorie K. Logan (frbdallasdistrict@outlook.com)




Federal Reserve System2200 N Pearl St, Dallas, TX 75201, USA




 




 




Nigerian Spam from Microsoft outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 24 Mar 2024 12:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roSUo-00000000N1Q-3AYi

for dave@doctor.nl2k.ab.ca;

Sun, 24 Mar 2024 12:23:02 -0600

Resent-From: The Doctor

Resent-Date: Sun, 24 Mar 2024 12:23:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-cwxgbr01rlhn2156.outbound.protection.outlook.com ([40.95.114.156]:25314 helo=GBR01-CWX-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roPKo-00000000FdT-3VeS

for root@nk.ca;

Sun, 24 Mar 2024 09:00:34 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=fwlnAHyk2yQaT1/JSsfT31KXE+Yz7puieZIE1BrjR8/k8O4Ql9S75lFGP4FfEtKKYCFtJ979sHA0EyUlTlnZTRlfHCrVKsXo9ae8ipolS+5M2YVfpfHWb2gx6KGI84+1WoCdfuJpt5wfkBkVlbJhPItiqIAWvydyBtdxO9/SFY1OAfRWlzAKdDf1A7sEcgr6r0Vz7z02WLDklaweUdxqfXo5ITqZMOfQ4OidbIVouPHFHhJGSMq/6s80mZAwa0kmc1UslVIDhGxxWPwFxlOT78Lw/DO9IP7r/ZwowTXwuYHvh3O6Kcpvb+z9/jub0QLbSU9Hntp5Qae+Ay9MLR0gKQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=KOYlofxoeno+mXY12bZn7zRugj7bRZ3E5xvL3LShNPo=;

b=oMqqzv2eEIAykOC5pQawUjKSTkVi/OJMHp4xXqx1DdLiO47kawSkvVgmZy0+62fxDyMWaWhNjUswVeajdutHzUuxngavbDaVcbBMbYSDHasZ2lwEqBfeBHICGc959Fxh+4AHfFG0blisLVv0ELMk8UWFYfrqepTSkRaD+h+jnyMsagPdf30dH4Nd0S0A1/NGzL8t7o6r83CR8rHwg6wBAQSjJmjqqWwZSXtofIRMZXY48pqFq084v5x6S71IXmngazbQjAwCjzDx+R+e61XddJWM6M/FndvfcaYV1AVtP37PYJHhZpnCyxd/5ByOGNNkHHtSgRK/xAzMnvVPNs7ysw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is

193.39.172.206) smtp.rcpttodomain=nfi.ren.nic.in smtp.mailfrom=office.net;

dmarc=none action=none header.from=office.net; dkim=none (message not

signed); arc=none (0)

Received: from LO4P265CA0279.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:37a::18)

by LO6P123MB6597.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:2b6::10) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.30; Sun, 24 Mar

2024 14:58:28 +0000

Received: from LN2PEPF000100CA.GBRP265.PROD.OUTLOOK.COM

(2603:10a6:600:37a:cafe::7c) by LO4P265CA0279.outlook.office365.com

(2603:10a6:600:37a::18) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.13 via Frontend

Transport; Sun, 24 Mar 2024 14:58:28 +0000

X-MS-Exchange-Authentication-Results: spf=none (sender IP is 193.39.172.206)

smtp.mailfrom=office.net; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=office.net;

Received-SPF: None (protection.outlook.com: office.net does not designate

permitted sender hosts)

Received: from ebyst.gwynedd.llyw.cymru (193.39.172.206) by

LN2PEPF000100CA.mail.protection.outlook.com (10.167.240.4) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.7409.10 via Frontend Transport; Sun, 24 Mar 2024 14:58:27 +0000

Received: from HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3) by

HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.2.1258.28; Sun, 24 Mar 2024 14:58:23 +0000

Received: from User (172.18.4.86) by HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3)

with Microsoft SMTP Server id 15.2.1258.28 via Frontend Transport; Sun, 24

Mar 2024 14:58:22 +0000

Reply-To:

From: Federal Reserve Bank

Subject: Dead Or ALIVE....4s

Date: Sun, 24 Mar 2024 07:58:21 -0700

MIME-Version: 1.0

Content-Type: text/html; charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID:

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: LN2PEPF000100CA:EE_|LO6P123MB6597:EE_

X-MS-Office365-Filtering-Correlation-Id: f7d09b9f-c5ad-4669-b1dc-08dc4c12dcd6

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 1

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?windows-1251?Q?Hg6rtWKZVcJ1PFdKmMUz2XqadsisPQYhRSOO/VQ7WeVRS3E8DBnaqcH5?=

=?windows-1251?Q?KZbGZqEctGFT1YCsbyeeMGr0nYk/O1iEtmOu4KXJQstSXAIOL0QhjOzy?=

=?windows-1251?Q?UgCxadT6LwYLuwYbz4jd9OgTCZNctNUZjTjx4p2Xx1UAeA2mFWUJ2G/i?=

=?windows-1251?Q?2Hr2njs88+L0Q5Pau8xj9CSmDfr9FUPFWpEPvYuVJ0adWgfenTeh0aG0?=

=?windows-1251?Q?jaXU9l5Uqxz5rO8N8+Mg604cZrMXPnj9Vti4kt5+Z4LE6KCuyFfGjcp9?=

=?windows-1251?Q?aHTVhTcAeZfX40l0zgyXHu7a7xl6Vp1LWeYOgBrBtn0dmVkLkUof+mSB?=

=?windows-1251?Q?m7lvbib+xknc8IEDQpMKO8M7vhTKAjB1CX7bEFCQPa+7fqmiU5isoQSl?=

=?windows-1251?Q?z1KlR80z+03wBwKBYRddsV7uqoguVdydETj30QDTdNNlF9HCWcDZB8AI?=

=?windows-1251?Q?2+0O6FnpCtjzQC0hBdWGQ5XMxuQ3Y0kCXYrLcJvJGu/HKtX7/IlPIxeI?=

=?windows-1251?Q?kooSfSUb0oXuLzt0sTAh3R5jDC3cfnLS4Bv3lzvB5EtIqvWgAV+aVhKT?=

=?windows-1251?Q?M3jCQEadFzCP6V55A5yzZAnijXYOpq0rJNs5i8oksQWfBgvxR8U/b4j3?=

=?windows-1251?Q?Ll990554J3953UMrDVjNiwlRrj4YO0HV/Jp8eJAe9DCy2mIDKHQSMWWy?=

=?windows-1251?Q?YYzGiOFH0xVl+FsbPbngp9eqnPKxhm0KzoNsFlVuO7zu9/xWPswYck+t?=

=?windows-1251?Q?1p5KgsBqgCsDQgW/dt3SsxAD/lIk4p5+aqHBNuz7CNi597cDW1xZzhuf?=

=?windows-1251?Q?GVb2F4MqM40KPkxYZRMvxa3cVv8b7y0oeQtVQqLsLxCSp/GICGwJvmyw?=

=?windows-1251?Q?aItqjceYb7bgmwnqSDiIozjB1aeFb+BZ5f46mUw5rbREA+38s+uMq7fS?=

=?windows-1251?Q?0WH/zB31QLf/91LeIE6wKyBRhgyAy5DEcdCmaJKQlVFN5JOflNo9W+VQ?=

=?windows-1251?Q?+Qz7soHxpzdQTY0p1hlToXhUNUnqTTpcYMQyBEH/f7N/zNB+BEdifSdT?=

=?windows-1251?Q?ucMGGJezMZ0Uo/Pvfjix84lWhhy7Kn8gKfkbgVyrwPv+0EGdUAQXpRmY?=

=?windows-1251?Q?iykFJH04VpdSVCukfn6zO9uaZBJQ3gVkBp2AMoQHTeciZcZGFvJhgmOJ?=

=?windows-1251?Q?/cZrte12PhZaRloaKa7Y1uUg9mtSm1mV2pQSSUvGd9IRhUvnc+7W5+RP?=

=?windows-1251?Q?hx/ej+pn/+jepo+pvaJ70eN0GvinP5EOy8Z1DKAG6OhIPsY8HaRk3Da0?=

=?windows-1251?Q?97DOOA=3D=3D?=

X-Forefront-Antispam-Report:

CIP:193.39.172.206;CTRY:GB;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:ebyst.gwynedd.llyw.cymru;PTR:systemau.gwynedd.llyw.cymru;CAT:OSPM;SFS:(13230031)(61400799018)(48200799009)(82310400014)(35950700004)(32650700005)(7416005)(376005)(2700400011);DIR:OUT;SFP:1023;

X-OriginatorOrg: cyngorgwynedd.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Mar 2024 14:58:27.7166

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: f7d09b9f-c5ad-4669-b1dc-08dc4c12dcd6

X-MS-Exchange-CrossTenant-Id: 99841289-67fd-4e8e-b813-12b22f782ece

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=99841289-67fd-4e8e-b813-12b22f782ece;Ip=[193.39.172.206];Helo=[ebyst.gwynedd.llyw.cymru]

X-MS-Exchange-CrossTenant-AuthSource: LN2PEPF000100CA.GBRP265.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: LO6P123MB6597

X-Spam_score: 30.8

X-Spam_score_int: 308

X-Spam_bar: ++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Beneficiary, We wish to inform you that a power of attorney

was forwarded to our office this morning, by two gentlemen regarding your

unclaimed fund of $5.5 Million Dollar. One of them is an American citizen

named [...]



Content analysis details: (30.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.95.114.156 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[40.95.114.156 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.95.114.156 listed in wl.mailspike.net]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=GBR01-CWX-obe.outbound.protection.outlook.com;ip=40.95.114.156;r=doctor.nl2k.ab.ca]

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam

0.0 NSL_RCVD_FROM_USER Received from User

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[williamtash1949(at)gmail.com]

2.7 UNCLAIMED_MONEY BODY: People just leave money laying around

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

2.0 PDS_HELO_SPF_FAIL High profile HELO that fails SPF

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.2 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

1.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Dead Or ALIVE....4s













Dear Beneficiary,




 




We wish to inform you that a power of attorney was forwarded to our office this morning, by two gentlemen regarding your unclaimed fund of $5.5 Million Dollar. One of them is an American citizen named Mr. Robert Porter and the other is Mr. Wilhelm Berg a Swedish citizen.




 




The document claims these gentlemen to be your authorized representatives, and the power of attorney states that you are already deceased. It further states that your death was due to lung cancer, with your date of death being March 27th, 2019.




 




They have now submitted a new account to replace the receiving account that was in the original claim of funds. These funds have remained unclaimed for quite some time and the need for resolution is pressing.




 




Below is the new account they have submitted.




 




Account Name: Robert Porter /Wilhelm Berg




Account: 5007-29 438 66




IBAN-nr: SE4150000000050072943866




Bic-kod: ESSESESS




Skandinaviska Enskilda Banken. (SEB :-)




SWEDEN.




 




In the event that you are in fact still alive, we ask that you confirm your existence by responding to this email. You are to view this as a matter requiring immediately attention and response. We have 48 hours monitoring of all activities within Federal Reserve Bank.




 




We have contacted the bank in the Sweden asking them to wait for further directives from Federal Reserve Bank, prior to authorizing any withdrawals in any form. Our request is based entirely on our attempt to verify that you are in fact deceased, before money is wrongly disbursed.




 




Finally, we forewarn you that if we do not hear back from you shortly, we will have to assume that you are in fact deceased and Federal Reserve Bank will proceed with release funds to the above newly submitted account.




 




Sincerely,




 




Lorie K. Logan (frbdallasdistrict@outlook.com)




Federal Reserve System2200 N Pearl St, Dallas, TX 75201, USA




 




 




Nigerian Spam from Microsoft outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 24 Mar 2024 05:43:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roMEz-00000000Ian-2DQS

for dave@doctor.nl2k.ab.ca;

Sun, 24 Mar 2024 05:42:17 -0600

Resent-From: The Doctor

Resent-Date: Sun, 24 Mar 2024 05:42:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lo4gbr01rlhn2167.outbound.protection.outlook.com ([40.95.115.167]:19175 helo=GBR01-LO4-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roLbI-00000000FGU-10SR

for doctor@nl2k.ab.ca;

Sun, 24 Mar 2024 05:01:20 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=GB+vzMQxplBPkTRFSMhwYnauhUN3RGrnw8VmSBbhGx4EJuLp3/L0P9ZhL8glGzB5Q5mGZS6G9FfWfsxEoMCzS7T8YpA0XmGrivhbpFh4PyHc4m8g7V5qbVjP/a12LNG0gB/IS3E4OKBPWYNuHs2+O9/m85qj/w+397yll/MeaROwbAJkjgEwDeZV4ErgKYqyg5JrmvzAqnyj4Gn7tRP0wgBo++RrlJrw7fEwttdPWWqRIBikcnJo8SFDT+Cke6lHzjp3wKIQ6Eyxd/39Vr/AQARnEsdbOrH2/X6grSdN205lF/g8JcGOzOxOrPWHZJrdSZe3RSi+DKqL8XVBUMFB+w==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=KOYlofxoeno+mXY12bZn7zRugj7bRZ3E5xvL3LShNPo=;

b=G5YA3RK0Wcfc4wimM4YizdULR0dmVpqbKQGAgP3ce0l5EsAh07XAy12Q3aBtakDXex1UdSoQdRHVZTr/ZMSx4N1ngtfPeb5xMnQPHit5fb9VY+xP/8vng2Wjh3r0Yayk9dBdkXz96NxcGWoLe4umFKK33OH7XfV3Eswg6NqUn6TbZJK4kDqg+khfRjVAyIGHIB0mdsPeVKSXzQk948/jlWDZxKnyxdRIDM43kXHV9MLhB640ESM1gIpIvveoNVCYATg54GndfYeFO6hGlWweKMdX9sIlxlM4jP+HunzzuKR/bSXVmwqoTJ/ZYNrn7nG7fUVoFhIoEybKsG+jrBhK9g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is

193.39.172.206) smtp.rcpttodomain=banque-france.fr smtp.mailfrom=office.net;

dmarc=none action=none header.from=office.net; dkim=none (message not

signed); arc=none (0)

Received: from LO2P265CA0499.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:13b::6)

by LO0P123MB3898.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:13f::9) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.31; Sun, 24 Mar

2024 10:59:14 +0000

Received: from LO1PEPF000022FF.GBRP265.PROD.OUTLOOK.COM

(2603:10a6:600:13b:cafe::fc) by LO2P265CA0499.outlook.office365.com

(2603:10a6:600:13b::6) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.13 via Frontend

Transport; Sun, 24 Mar 2024 10:59:14 +0000

X-MS-Exchange-Authentication-Results: spf=none (sender IP is 193.39.172.206)

smtp.mailfrom=office.net; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=office.net;

Received-SPF: None (protection.outlook.com: office.net does not designate

permitted sender hosts)

Received: from ebyst.gwynedd.llyw.cymru (193.39.172.206) by

LO1PEPF000022FF.mail.protection.outlook.com (10.167.240.23) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.7409.10 via Frontend Transport; Sun, 24 Mar 2024 10:59:14 +0000

Received: from HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3) by

HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.2.1258.28; Sun, 24 Mar 2024 10:59:13 +0000

Received: from User (172.18.4.86) by HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3)

with Microsoft SMTP Server id 15.2.1258.28 via Frontend Transport; Sun, 24

Mar 2024 10:59:12 +0000

Reply-To:

From: Federal Reserve Bank

Subject: Dead Or ALIVE....4s

Date: Sun, 24 Mar 2024 03:59:11 -0700

MIME-Version: 1.0

Content-Type: text/html; charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID:

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: LO1PEPF000022FF:EE_|LO0P123MB3898:EE_

X-MS-Office365-Filtering-Correlation-Id: a1b3f2eb-b1d9-48c9-8cf9-08dc4bf17173

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 1

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?windows-1251?Q?29cBUL7tUnQLaPygG4z81RRBITjvBOvdEKpg1AMc92tTPlaTmXXkfmiL?=

=?windows-1251?Q?eZg8kmL4/Owz87s2Pt7vat4oketmvH5H8IB8d78cQm82Oj7b9p/cuaGa?=

=?windows-1251?Q?KSQWVoWsFNqxuBcHDTyykbdb9oqR5UD/DTu8Ah8BZd3SDEhx3gHd7sxk?=

=?windows-1251?Q?NKVPWS3ijwl5g3hxgLnI5JMGRZsDRS6T+NxO3wUQMPo5KdUtcTaM4Lst?=

=?windows-1251?Q?mNcPHv8n+EGD/cZVGN6SWNLyiBzQeb9DMdBcO/7ZJQuMvM3MLFpKkRg3?=

=?windows-1251?Q?JtELPODmE4Ye9Rn0A5xFge8nIv7/YemTnqw0A8tUM8591yX+AGNits2f?=

=?windows-1251?Q?j7W93fChV+8vEzGFyB/CjWW23ZxD3A+WtfvYtx2DeS5bvYVUpCv0fLyC?=

=?windows-1251?Q?6Kul0RVztiLX0Zag+3SbmrtVeVxodQL8O9hYn7AF971EArBJ7V1fH+zG?=

=?windows-1251?Q?tiLDdqeK+7OrJfmPd3YIn07buyN6ksAu3ZKmlwvxx01mArQ/kmDIc0gC?=

=?windows-1251?Q?xEfgZ6RGQOczrWp0o+kmyHsaxASQwK5z3/rC2lQsPVvQLbQsHYU4XWRr?=

=?windows-1251?Q?NgtIXlU4QO0uOvGV7zz48OPrpQB7yBECxVaPlbqhAWFDvaUnUwVFiP46?=

=?windows-1251?Q?6wU6pRozNck2EXctnX4gSg6zldY0oGKq9FMFac2pzUzqELy2YvX8CLs6?=

=?windows-1251?Q?i+gvx7Gk82o7t7cfkqQTClfHQtv+k/1VvaCG7Hxo1j5vcZlvtw1cB3q+?=

=?windows-1251?Q?bApabNCPg4PCG+x9xsOX886UnoA3yv4iDGBnaEvsMBT3JX2Lu/+y8Nco?=

=?windows-1251?Q?WpaCRI5dl5ryIujJ/NTW6vyvvd2gZj2VHT8K7pIFZUm1HBC/CnlWUF1z?=

=?windows-1251?Q?VMf9IrYK0nvTdtcVdLLfpaTlqlWkCs7omWd+G7ScHlWdogwFgvs+GZvm?=

=?windows-1251?Q?L0bGrgfRmCsoZ2x7nLPqVLyCeoMzhykcNgOMFPII49UVuMbCg+f/LhLk?=

=?windows-1251?Q?m4FnygebgYJb87cEcfXoGnJLBRDZvP4GCNDw1g6KJS+UdiQDuJiLIdi5?=

=?windows-1251?Q?X/dVNBjJoaeBjHA3xoLCIgrv4Vm+Q/lPII3DWJ/JT2t/AdbReNjZv+E6?=

=?windows-1251?Q?N3snaKyp/Di85IGuLZ5duiBSHjAqDi1ba50LSJmbU1WZvxvmwu6xDB9X?=

=?windows-1251?Q?XyceEN4cyX14F1QKnEkcK2xFlJmBtZjH/x/cBdtN2szhoeT9UgbHIzDX?=

=?windows-1251?Q?H4j8CD6qA9MZJ3tEel8mhpsQiLCQ2w6TlQbHTOoMcBcwS+E+2tS6CRqO?=

=?windows-1251?Q?VvmUOg=3D=3D?=

X-Forefront-Antispam-Report:

CIP:193.39.172.206;CTRY:GB;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:ebyst.gwynedd.llyw.cymru;PTR:systemau.gwynedd.llyw.cymru;CAT:OSPM;SFS:(13230031)(61400799018)(48200799009)(376005)(82310400014)(35950700004)(32650700005)(7416005)(2700400011);DIR:OUT;SFP:1023;

X-OriginatorOrg: cyngorgwynedd.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Mar 2024 10:59:14.1429

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: a1b3f2eb-b1d9-48c9-8cf9-08dc4bf17173

X-MS-Exchange-CrossTenant-Id: 99841289-67fd-4e8e-b813-12b22f782ece

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=99841289-67fd-4e8e-b813-12b22f782ece;Ip=[193.39.172.206];Helo=[ebyst.gwynedd.llyw.cymru]

X-MS-Exchange-CrossTenant-AuthSource: LO1PEPF000022FF.GBRP265.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: LO0P123MB3898

X-Spam_score: 30.8

X-Spam_score_int: 308

X-Spam_bar: ++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Beneficiary, We wish to inform you that a power of attorney

was forwarded to our office this morning, by two gentlemen regarding your

unclaimed fund of $5.5 Million Dollar. One of them is an American citizen

named [...]



Content analysis details: (30.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.95.115.167 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.95.115.167 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[40.95.115.167 listed in bl.score.senderscore.com]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=GBR01-LO4-obe.outbound.protection.outlook.com;ip=40.95.115.167;r=doctor.nl2k.ab.ca]

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam

0.0 NSL_RCVD_FROM_USER Received from User

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[williamtash1949(at)gmail.com]

2.7 UNCLAIMED_MONEY BODY: People just leave money laying around

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

2.0 PDS_HELO_SPF_FAIL High profile HELO that fails SPF

1.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.2 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Dead Or ALIVE....4s













Dear Beneficiary,




 




We wish to inform you that a power of attorney was forwarded to our office this morning, by two gentlemen regarding your unclaimed fund of $5.5 Million Dollar. One of them is an American citizen named Mr. Robert Porter and the other is Mr. Wilhelm Berg a Swedish citizen.




 




The document claims these gentlemen to be your authorized representatives, and the power of attorney states that you are already deceased. It further states that your death was due to lung cancer, with your date of death being March 27th, 2019.




 




They have now submitted a new account to replace the receiving account that was in the original claim of funds. These funds have remained unclaimed for quite some time and the need for resolution is pressing.




 




Below is the new account they have submitted.




 




Account Name: Robert Porter /Wilhelm Berg




Account: 5007-29 438 66




IBAN-nr: SE4150000000050072943866




Bic-kod: ESSESESS




Skandinaviska Enskilda Banken. (SEB :-)




SWEDEN.




 




In the event that you are in fact still alive, we ask that you confirm your existence by responding to this email. You are to view this as a matter requiring immediately attention and response. We have 48 hours monitoring of all activities within Federal Reserve Bank.




 




We have contacted the bank in the Sweden asking them to wait for further directives from Federal Reserve Bank, prior to authorizing any withdrawals in any form. Our request is based entirely on our attempt to verify that you are in fact deceased, before money is wrongly disbursed.




 




Finally, we forewarn you that if we do not hear back from you shortly, we will have to assume that you are in fact deceased and Federal Reserve Bank will proceed with release funds to the above newly submitted account.




 




Sincerely,




 




Lorie K. Logan (frbdallasdistrict@outlook.com)




Federal Reserve System2200 N Pearl St, Dallas, TX 75201, USA




 




 




Nigerian Spam from Microsoft outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 24 Mar 2024 05:43:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roMEu-00000000IaE-0wyE

for dave@doctor.nl2k.ab.ca;

Sun, 24 Mar 2024 05:42:12 -0600

Resent-From: The Doctor

Resent-Date: Sun, 24 Mar 2024 05:42:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lo4gbr01rlhn2184.outbound.protection.outlook.com ([40.95.115.184]:52807 helo=GBR01-LO4-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roLbI-00000000FGW-35Ss

for doctor@doctor.nl2k.ab.ca;

Sun, 24 Mar 2024 05:01:20 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=GB+vzMQxplBPkTRFSMhwYnauhUN3RGrnw8VmSBbhGx4EJuLp3/L0P9ZhL8glGzB5Q5mGZS6G9FfWfsxEoMCzS7T8YpA0XmGrivhbpFh4PyHc4m8g7V5qbVjP/a12LNG0gB/IS3E4OKBPWYNuHs2+O9/m85qj/w+397yll/MeaROwbAJkjgEwDeZV4ErgKYqyg5JrmvzAqnyj4Gn7tRP0wgBo++RrlJrw7fEwttdPWWqRIBikcnJo8SFDT+Cke6lHzjp3wKIQ6Eyxd/39Vr/AQARnEsdbOrH2/X6grSdN205lF/g8JcGOzOxOrPWHZJrdSZe3RSi+DKqL8XVBUMFB+w==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=KOYlofxoeno+mXY12bZn7zRugj7bRZ3E5xvL3LShNPo=;

b=G5YA3RK0Wcfc4wimM4YizdULR0dmVpqbKQGAgP3ce0l5EsAh07XAy12Q3aBtakDXex1UdSoQdRHVZTr/ZMSx4N1ngtfPeb5xMnQPHit5fb9VY+xP/8vng2Wjh3r0Yayk9dBdkXz96NxcGWoLe4umFKK33OH7XfV3Eswg6NqUn6TbZJK4kDqg+khfRjVAyIGHIB0mdsPeVKSXzQk948/jlWDZxKnyxdRIDM43kXHV9MLhB640ESM1gIpIvveoNVCYATg54GndfYeFO6hGlWweKMdX9sIlxlM4jP+HunzzuKR/bSXVmwqoTJ/ZYNrn7nG7fUVoFhIoEybKsG+jrBhK9g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is

193.39.172.206) smtp.rcpttodomain=banque-france.fr smtp.mailfrom=office.net;

dmarc=none action=none header.from=office.net; dkim=none (message not

signed); arc=none (0)

Received: from LO2P265CA0499.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:13b::6)

by LO0P123MB3898.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:13f::9) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.31; Sun, 24 Mar

2024 10:59:14 +0000

Received: from LO1PEPF000022FF.GBRP265.PROD.OUTLOOK.COM

(2603:10a6:600:13b:cafe::fc) by LO2P265CA0499.outlook.office365.com

(2603:10a6:600:13b::6) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.13 via Frontend

Transport; Sun, 24 Mar 2024 10:59:14 +0000

X-MS-Exchange-Authentication-Results: spf=none (sender IP is 193.39.172.206)

smtp.mailfrom=office.net; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=office.net;

Received-SPF: None (protection.outlook.com: office.net does not designate

permitted sender hosts)

Received: from ebyst.gwynedd.llyw.cymru (193.39.172.206) by

LO1PEPF000022FF.mail.protection.outlook.com (10.167.240.23) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.7409.10 via Frontend Transport; Sun, 24 Mar 2024 10:59:14 +0000

Received: from HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3) by

HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.2.1258.28; Sun, 24 Mar 2024 10:59:13 +0000

Received: from User (172.18.4.86) by HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3)

with Microsoft SMTP Server id 15.2.1258.28 via Frontend Transport; Sun, 24

Mar 2024 10:59:12 +0000

Reply-To:

From: Federal Reserve Bank

Subject: Dead Or ALIVE....4s

Date: Sun, 24 Mar 2024 03:59:11 -0700

MIME-Version: 1.0

Content-Type: text/html; charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID:

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: LO1PEPF000022FF:EE_|LO0P123MB3898:EE_

X-MS-Office365-Filtering-Correlation-Id: a1b3f2eb-b1d9-48c9-8cf9-08dc4bf17173

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 1

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?windows-1251?Q?29cBUL7tUnQLaPygG4z81RRBITjvBOvdEKpg1AMc92tTPlaTmXXkfmiL?=

=?windows-1251?Q?eZg8kmL4/Owz87s2Pt7vat4oketmvH5H8IB8d78cQm82Oj7b9p/cuaGa?=

=?windows-1251?Q?KSQWVoWsFNqxuBcHDTyykbdb9oqR5UD/DTu8Ah8BZd3SDEhx3gHd7sxk?=

=?windows-1251?Q?NKVPWS3ijwl5g3hxgLnI5JMGRZsDRS6T+NxO3wUQMPo5KdUtcTaM4Lst?=

=?windows-1251?Q?mNcPHv8n+EGD/cZVGN6SWNLyiBzQeb9DMdBcO/7ZJQuMvM3MLFpKkRg3?=

=?windows-1251?Q?JtELPODmE4Ye9Rn0A5xFge8nIv7/YemTnqw0A8tUM8591yX+AGNits2f?=

=?windows-1251?Q?j7W93fChV+8vEzGFyB/CjWW23ZxD3A+WtfvYtx2DeS5bvYVUpCv0fLyC?=

=?windows-1251?Q?6Kul0RVztiLX0Zag+3SbmrtVeVxodQL8O9hYn7AF971EArBJ7V1fH+zG?=

=?windows-1251?Q?tiLDdqeK+7OrJfmPd3YIn07buyN6ksAu3ZKmlwvxx01mArQ/kmDIc0gC?=

=?windows-1251?Q?xEfgZ6RGQOczrWp0o+kmyHsaxASQwK5z3/rC2lQsPVvQLbQsHYU4XWRr?=

=?windows-1251?Q?NgtIXlU4QO0uOvGV7zz48OPrpQB7yBECxVaPlbqhAWFDvaUnUwVFiP46?=

=?windows-1251?Q?6wU6pRozNck2EXctnX4gSg6zldY0oGKq9FMFac2pzUzqELy2YvX8CLs6?=

=?windows-1251?Q?i+gvx7Gk82o7t7cfkqQTClfHQtv+k/1VvaCG7Hxo1j5vcZlvtw1cB3q+?=

=?windows-1251?Q?bApabNCPg4PCG+x9xsOX886UnoA3yv4iDGBnaEvsMBT3JX2Lu/+y8Nco?=

=?windows-1251?Q?WpaCRI5dl5ryIujJ/NTW6vyvvd2gZj2VHT8K7pIFZUm1HBC/CnlWUF1z?=

=?windows-1251?Q?VMf9IrYK0nvTdtcVdLLfpaTlqlWkCs7omWd+G7ScHlWdogwFgvs+GZvm?=

=?windows-1251?Q?L0bGrgfRmCsoZ2x7nLPqVLyCeoMzhykcNgOMFPII49UVuMbCg+f/LhLk?=

=?windows-1251?Q?m4FnygebgYJb87cEcfXoGnJLBRDZvP4GCNDw1g6KJS+UdiQDuJiLIdi5?=

=?windows-1251?Q?X/dVNBjJoaeBjHA3xoLCIgrv4Vm+Q/lPII3DWJ/JT2t/AdbReNjZv+E6?=

=?windows-1251?Q?N3snaKyp/Di85IGuLZ5duiBSHjAqDi1ba50LSJmbU1WZvxvmwu6xDB9X?=

=?windows-1251?Q?XyceEN4cyX14F1QKnEkcK2xFlJmBtZjH/x/cBdtN2szhoeT9UgbHIzDX?=

=?windows-1251?Q?H4j8CD6qA9MZJ3tEel8mhpsQiLCQ2w6TlQbHTOoMcBcwS+E+2tS6CRqO?=

=?windows-1251?Q?VvmUOg=3D=3D?=

X-Forefront-Antispam-Report:

CIP:193.39.172.206;CTRY:GB;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:ebyst.gwynedd.llyw.cymru;PTR:systemau.gwynedd.llyw.cymru;CAT:OSPM;SFS:(13230031)(61400799018)(48200799009)(376005)(82310400014)(35950700004)(32650700005)(7416005)(2700400011);DIR:OUT;SFP:1023;

X-OriginatorOrg: cyngorgwynedd.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Mar 2024 10:59:14.1429

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: a1b3f2eb-b1d9-48c9-8cf9-08dc4bf17173

X-MS-Exchange-CrossTenant-Id: 99841289-67fd-4e8e-b813-12b22f782ece

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=99841289-67fd-4e8e-b813-12b22f782ece;Ip=[193.39.172.206];Helo=[ebyst.gwynedd.llyw.cymru]

X-MS-Exchange-CrossTenant-AuthSource: LO1PEPF000022FF.GBRP265.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: LO0P123MB3898

X-Spam_score: 30.8

X-Spam_score_int: 308

X-Spam_bar: ++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Beneficiary, We wish to inform you that a power of attorney

was forwarded to our office this morning, by two gentlemen regarding your

unclaimed fund of $5.5 Million Dollar. One of them is an American citizen

named [...]



Content analysis details: (30.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.95.115.184 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.95.115.184 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[40.95.115.184 listed in bl.score.senderscore.com]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=GBR01-LO4-obe.outbound.protection.outlook.com;ip=40.95.115.184;r=doctor.nl2k.ab.ca]

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam

0.0 NSL_RCVD_FROM_USER Received from User

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[williamtash1949(at)gmail.com]

2.7 UNCLAIMED_MONEY BODY: People just leave money laying around

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait

0.0 LOTS_OF_MONEY Huge... sums of money

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

2.0 PDS_HELO_SPF_FAIL High profile HELO that fails SPF

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.2 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

1.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Dead Or ALIVE....4s













Dear Beneficiary,




 




We wish to inform you that a power of attorney was forwarded to our office this morning, by two gentlemen regarding your unclaimed fund of $5.5 Million Dollar. One of them is an American citizen named Mr. Robert Porter and the other is Mr. Wilhelm Berg a Swedish citizen.




 




The document claims these gentlemen to be your authorized representatives, and the power of attorney states that you are already deceased. It further states that your death was due to lung cancer, with your date of death being March 27th, 2019.




 




They have now submitted a new account to replace the receiving account that was in the original claim of funds. These funds have remained unclaimed for quite some time and the need for resolution is pressing.




 




Below is the new account they have submitted.




 




Account Name: Robert Porter /Wilhelm Berg




Account: 5007-29 438 66




IBAN-nr: SE4150000000050072943866




Bic-kod: ESSESESS




Skandinaviska Enskilda Banken. (SEB :-)




SWEDEN.




 




In the event that you are in fact still alive, we ask that you confirm your existence by responding to this email. You are to view this as a matter requiring immediately attention and response. We have 48 hours monitoring of all activities within Federal Reserve Bank.




 




We have contacted the bank in the Sweden asking them to wait for further directives from Federal Reserve Bank, prior to authorizing any withdrawals in any form. Our request is based entirely on our attempt to verify that you are in fact deceased, before money is wrongly disbursed.




 




Finally, we forewarn you that if we do not hear back from you shortly, we will have to assume that you are in fact deceased and Federal Reserve Bank will proceed with release funds to the above newly submitted account.




 




Sincerely,




 




Lorie K. Logan (frbdallasdistrict@outlook.com)




Federal Reserve System2200 N Pearl St, Dallas, TX 75201, USA




 




 




Chinese product spam from Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 23 Mar 2024 19:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roCQh-00000000N86-3WW6

for dave@doctor.nl2k.ab.ca;

Sat, 23 Mar 2024 19:13:43 -0600

Resent-From: The Doctor

Resent-Date: Sat, 23 Mar 2024 19:13:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-sgaapc01olkn2105.outbound.protection.outlook.com ([40.92.53.105]:26829 helo=APC01-SG2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roCJP-00000000MDS-1H8T

for sales@netknow.ca;

Sat, 23 Mar 2024 19:06:20 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=mw/t4w8+2Vl+ILMCRGe4fbOKME4dBB+QwI8wsV4WrahNTvki+VKnGtyU2+Fk53X9zpELR7Kg3Td84u6tMz2JbBVB+NE/ULmCtrERJ3YzWcy/5JarQFWJ1N1flSt6tJaodcyUKbn58w7WcHVpp++qYI180e3KYfTDEDDxv2eQV1XdGi6qJHDmYXti0n2UvxyO8YNj6Mq+sDvsOHnY0DxndvEBvBbJTVIPru4k6VMLf+Q6yS5CO3IfmBwRL6L2VmGVRYhBv/hkd7fBn8hAeYvY0HtZ3LB3bgJUEk9bmbxZ/3clefxrs58PYuDGrhWw0gDxvROQLpabEQNEbs/YAEj0dg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=+vbHePvb4XEACifHceCfnfTnRgdohs7lFr4PvY6gFbY=;

b=I+mPqLiNE0UfkZl6szcvN9hCULq+UX8cq0eN5Kvb0BsPIo1DCJJ6i3Hx9ceY5tehYAOe41rtMVsGvBacgBFsgyC7Gj9xEuUlFL/SDjZZ2A+JJK93Z8miNZiDN+p2GKYKoofv43plPctdJRUjdhiEVMMPMljQuYE0V5S512Ojhu7enwGRlpHaRuAIJCc/Yt16iMmc8OovV0Y8bX/TqZ3R8MjNEdCAo3DHk5OsSFdJ221m+8a9Cyw6n3jDERmX+81XGbBOpwzKlwjxaTCY2TZ0fHes7GJWDTqDuIMLtg5wN5ixu0ceesGtR47Xan5T4zq2AG2ExCTl1J+OHWnidbyD6w==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=+vbHePvb4XEACifHceCfnfTnRgdohs7lFr4PvY6gFbY=;

b=WTzs3vFHWOyLQEKugxhmJDgqqsvGWLbPIerwT+OkA8bTAQgP4OHs1toL8J0QjQzoeM3svHD9rW3aJmGxNupYgjLDYiWcDelbnp6ymNzW3sjKWOlsQ5AXBN9uqSy7g+Nk9tjjqxkAYnXuI0v8ZGAyzEPTCvcQV3Zvg+YJvSFfKpXEvdAgSzVPhwfkUkrIWxegmq5Wf4XVzvPJ82vg3pUeERLhcuD9ZPGyrISHw9LM3zFJxYJHboLK+R+mPxfgyrLIW1gvuZw664Kt9ceBuSPcezZ+J4lrLoJzNrG4T+I+O8KRSjfbyAnxsP23yChFVQYgjiqsjwE2DZ+facKvxYn9MA==

Received: from TYZPR02MB6333.apcprd02.prod.outlook.com (2603:1096:400:418::9)

by TYZPR02MB8057.apcprd02.prod.outlook.com (2603:1096:405:67::7) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.24; Sun, 24 Mar

2024 01:04:06 +0000

Received: from TYZPR02MB6333.apcprd02.prod.outlook.com

([fe80::e0fe:21bb:cd85:98d8]) by TYZPR02MB6333.apcprd02.prod.outlook.com

([fe80::e0fe:21bb:cd85:98d8%4]) with mapi id 15.20.7409.026; Sun, 24 Mar 2024

01:04:06 +0000

Reply-To: zcfxupvpm@hotmail.com

From: "aruta-liasha2024@hotmail.com"

To: rh

Subject: 889088666073367241512

Date: Sun, 24 Mar 2024 09:04:02 +0800

Message-ID:



Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: 7bit

X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180

X-TMN: [XyXga1LnrqHvnLlUm7BG7JRrx4arxE7tBwWtoSLLmOBYgxS5ZVJ+wHbkItzUY7pN]

X-ClientProxiedBy: TYCPR01CA0026.jpnprd01.prod.outlook.com

(2603:1096:405:1::14) To TYZPR02MB6333.apcprd02.prod.outlook.com

(2603:1096:400:418::9)

X-Microsoft-Original-Message-ID:



MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: TYZPR02MB6333:EE_|TYZPR02MB8057:EE_

X-MS-Office365-Filtering-Correlation-Id: 788f5c31-4266-4c5e-5419-08dc4b9e4cf8

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?Wk0xMlhoWXUvQklqVmc4Wkd3SFlFeXk1QnY2MjZmQi9YcUNQT1JsSllpUUpn?=

=?utf-8?B?WWNaOXBZdkNDam5NcVZQKzdSUHhGcVRuUDhZRXE5eDl0NnBSS2ptbm1TOFIx?=

=?utf-8?B?OHF3ZFNpUVI2MXVCcVg2Q1lNQVVqaTB5UXJZeVZTS1FaU0R3eC9yOUlLVUdY?=

=?utf-8?B?emsyQVducGcwS1BIUW9oNldHVkJlTGVNVEU1czBydEpScnFaVTI5MWVwMnMz?=

=?utf-8?B?eGJaOUgxOEZsVXVpVDZEdFEvTHhidGJGWFpLdW91anBxcWdlWkFQNC91MGZH?=

=?utf-8?B?UjdTZGVnWVNMNU43WngrbGZwL1BFbXhYS1A3OHNKOFd3OFBvMWJWQjUyclIv?=

=?utf-8?B?Rkx6ZnpQcWZFTVJIUzRVSjBoeWtjRWRkdzk2NDIwOFVQTDgxVXovbjFNVFUy?=

=?utf-8?B?RnlJaTJxK3R0Q1hVbXpnSXJvanM5MlNqcXo4Mm92RjJBVHpIci9rbUVROTdW?=

=?utf-8?B?Q1ExdUVBanJ0Z0tKd3pjZnFDL1M0YjZ4UDVudG5Fc0t1MVFtRFpLOU5GVnJ5?=

=?utf-8?B?Y3hOYitseFM1eUpDbjZXNGVZYkpwZ3F0Q0dyazlmTlhpdnhtdGxONkpNUk9x?=

=?utf-8?B?MTc0K1ZEcXVGSDFCc09aSVBsdVcwZ0NmSStBM21tQ1RTZ3dHQUI3Zk1kNDRR?=

=?utf-8?B?QXR4aWhKamZMSXA3WlErVHVLNlNVdUtXcjZQenRCRGcvSWFJVk5NZFBJRnll?=

=?utf-8?B?NFZBdEJGUXlpSGcxcXFRMkVMK2xyRzk0MThwblJ3OE9iK003TU42c3c0a1po?=

=?utf-8?B?VFBZYVJhVy9JbmhqNVRGMlFlTThHdnJTNjZRamZTZnZJMzhjQjVJYzlJcTho?=

=?utf-8?B?Smd1SGlzdGY5S3FMOWR0RllFVUh2R1ZIS1dNWG1TM25DVGFnR3JrcjhvWG1X?=

=?utf-8?B?ZXpEaEYyaUxyclVzVHgzRjZXR3k2K3kzdHB1dFVIUVdJK0pOZVB1bjR2REw0?=

=?utf-8?B?UmJwdVk3Mmk5dlZsaDFnK0RFaVRnSTBLNkk0TjFVRFlDOVhSdGlrbE1WWHlm?=

=?utf-8?B?MVA4MTBnKzM3ZW8yeVJiT1JzSUY0UDVybUhGZnQwNU1CZHc4QmNKcHRBdW4v?=

=?utf-8?B?MlI0WmozcHZjM0YzUGRyeldlS2JnSVFBTFhZdVFhT09NUFdueHVxSURoV1Ew?=

=?utf-8?B?U2F1V3hHWlkxK3RvUVgwdDRvUEk2eEFZamMrM0ZhbkxCUThjcXFlQlA0ZmVM?=

=?utf-8?B?cEp3TlNRVUV0c0RRZ0czM0lPWm0vWC83QzhFWkdjRU81WWppcHNSMlE0TGJE?=

=?utf-8?B?TEVzR3puWlBhMmh6MEFPUzA2ZTc2NHkrWlVQYUVnMiszUVBuRjFybGlTckNS?=

=?utf-8?B?c3pGbGNJNUtheUdOakNFSnpRSEJpb2c5VU5BbjVmdEh6cWtucmpJaHhSSEx6?=

=?utf-8?B?SEJVOGhkOGxWbzc5bTQxdmRRZ1E2QnREVGx5TStEbHN2UXRPUGtmUHBjSHVN?=

=?utf-8?B?cTZMVUdZTGd0anp6M0kxYW1kc2xGcTNvdXNKYmV3TkUzRUlOSzV0Y25ObUUz?=

=?utf-8?B?aVJTOHpSNEdwM2NiWUhNSXk1NGZOM1dpUmQwVURnZEtuOHRjZGd2cjFGcEFa?=

=?utf-8?B?cWhwNUZzMzVMVnc2ZHVzaXNkVnZEYzdzb3hwYVI4SkNkOWFhcnV5TGFUYnUw?=

=?utf-8?B?TFhIRDZlSFE3blkycm9SQU5Ea0o3TW9BaGVxdHRsL0tkU1ZoUXg5MEc3UjYx?=

=?utf-8?B?cXRQUXc2bnRjZFk0VTljdmcyUEhMWTdtVld0Z2JJaVdaU0pqMWhBa2daMDNp?=

=?utf-8?Q?ALuMYPhFYL88JENPPOupr0khfGxW7QJ/F/G9hDe?=

X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-20e34.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: 788f5c31-4266-4c5e-5419-08dc4b9e4cf8

X-MS-Exchange-CrossTenant-AuthSource: TYZPR02MB6333.apcprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Mar 2024 01:04:05.0040

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR02MB8057

X-Spam_score: 6.1

X-Spam_score_int: 61

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: hello I will Do Verify the factory,Sample Collection, Negotiation,

Dropshipping, Shipping, After-Sales Follow-up, Search, Etc. Hope this finds

you well.



Content analysis details: (6.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.53.105 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.53.105 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_SIGNED Message has a ARC signature

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[aruta-liasha2024(at)hotmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[aruta-liasha2024(at)hotmail.com]

0.0 HTML_NONELEMENT_30_40 BODY: 30% to 40% of HTML elements are

non-standard

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.6 FORGED_MUA_OIMO Forged mail pretending to be from MS Outlook IMO

Subject: {SPAM?} 889088666073367241512



hello



I will Do Verify the factory,Sample Collection, Negotiation,

Dropshipping,

Shipping, After-Sales Follow-up, Search, Etc.
 
Hope this finds

you

well.
 
I can be your sourcing agent in China.



Tired of a middle-men charging your higher prices?



Lower effectively communication with factory or salesman?



Delay the factory delivery time one time and one time?



Manufacture can't accept your Mini order?



Why I am a professional China sourcing agent?



Procurement process:



1.MARKET INFORMATION COLLECTION
1>Sourcing consult 2>Trading

suggestions 3>Shipping suggestions 4>Industrial analysis



2.SOURCING REPORT WITH SUGGESTIONS
1>Sourcing report 2>

Production

time and shipping cost estimate 3>Product upgrade(Open mold)



3.SOURCING SAMPLE PRODUCTION SHIPPING
1>Sample collection and

review

2>Negotiation 3>Production arrange. 4>Shipping arrange.



Much appreciated if you could assign this to the responsible party.




We are dedicated to help small & medium overseas companies or

individual sourcing from China.



Instead of your company adjusting to the needs of a buying agent, I will

comply with



your demands so everything you want comes to fruition.



➤Just tell us what exactly you want, we can give you a satisfied result

or

plan !



For more infomation, Pls feel free to contact me



Lee



Skype:+86 15919103357



WhatsApp:+86 15919103357 



WeChat:15919103357















































‘Of course

you do; of course you know; you have known it all along; since that day in

the pony carriage. I knew that you knew it. You do not dare to mention his

name; would not that tell me that you know it? And I, I am hypocrite enough

for Mark; but my hypocrisy won’t pass muster before you. And, now,

had I not better go to Devonshire?’

SAN FRANCISCO has only one

drawback. ’Tis hard to leave. When like the pious Hans Breitmann I

‘cut that city by the sea’ it was with regrets for the pleasant

places left behind, for the men who were so clever, and the women who were

so witty, for the ‘dives,’ the beer-halls, the bucket-shops,

and the poker-hells where humanity was going to the Devil with shouting and

laughter and song and the rattle of dice-boxes. I would fain have stayed,

but I feared that an evil end would come to me when my money was all spent

and I descended to the street corner. A voice inside me said: ‘Get

out of this. Go north. Strike for Victoria and Vancouver. Bask for a day

under the shadow of the old flag.’ So I set forth from San Francisco

to Portland in Oregon: and that was a railroad run of thirty-six

hours.

"Most women like show, Eachin; but I think my daughter

Catharine be an exception. She would rejoice in the good fortune of her

household friend and playmate; but she would not value the splendid MacIan,

captain of Clan Quhele, more than the orphan Conachar."

"Admirable!"

said the Prince —"admirable! The old man will apply all this to the Duchess,

as they call her, of Rothsay. Dwining, thou shouldst be a secretis to his

Holiness the Pope, who sometimes, it is said, wants a scribe that can make

one word record two meanings. I will subscribe it, and have the praise of

the device."

The four now descended the hill, and in a few minutes

gained the theatre of the struggle. The wapitis had not moved. They were

pushing at each other like a couple of rams, and seemed to be inseparably

glued together.

There were no more incidents till I reached the

Palace Hotel, a seven-storied warren of humanity with a thousand rooms in

it. All the travel-books will tell you about hotel arrangements in this

country. They should be seen to be appreciated. Understand clearly — and

this letter is written after a thousand miles of experiences — that money

will not buy you service in the West.

‘I think they are taking

to it pretty freely then. We have unprotected young women all about the

world.’

‘Exactly,’ said Lord Lufton. ‘She

will do exceedingly well for Justinia.’ Now this was not good-natured

on the part of Lord Lufton; and his mother felt it the more strongly,

inasmuch as it seemed to signify that he was setting his back up against

the Lufton-Grantly alliance. She had been pretty sure that he would do so

in the event of his suspecting that a plot was being laid to catch him; and

now it almost appeared that he did suspect such a plot. Why else sarcasm as

to Griselda doing very well for his sister?

How indeed!

"Do you

find the defendant guilty or not guilty?"

There was a silence, then

the General said:

‘I can do without help, thank you.’

"And then you got rid of it?"

‘I cannot absolutely marry

the wife of her choosing, if you mean that,’ said Lord Lufton. They

went on walking about the garden for an hour, but they hardly got any

farther than the point to which we have now brought them. Mark Robarts

could not make up his mind on the spur of the moment; nor, as he said more

than once to Lord Lufton, could he be at all sure that Lucy would in any

way be guided by him. It was, therefore, at last settled between them that

Lord Lufton should come to the parsonage immediately after breakfast on the

following morning. It was agreed also that the dinner had better not come

off, and Robarts promised that he would, if possible, have determined by

the morning as to what advice he would give his sister. He went directly

home to the parsonage from Framley Court, feeling that he was altogether in

the dark till he should have consulted with his wife. How would he feel if

Lucy were to become Lady Lufton? And how would he look Lady Lufton in the

face in telling her that such was to be his sister’s destiny? On

returning home he immediately found his wife, and had not been closeted

with her five minutes before he knew, at any rate, all that she knew.

‘And you mean to say that she does love him?’ said

Mark.

Did she despair? Not yet. It was impossible to get back to the

American continent in the teeth of the terrible wind which was driving the

island before it at a rapid pace, taking it out two hundred miles in

thirty-six hours, and assisted by the current from the coast.



I am quite sure it is not that which hinders it. You would not call

yourself plain; and even plain women are married every day, and are loved

too, as well as pretty women.’

But as regards Mrs Grantly it

may be said that she moved in an unending procession of stately ovation. It

must not be supposed that she continually talked to her friends and

neighbours of Lord Dumbello and the marchioness. She was by far too wise

for such folly as that. The coming alliance having been once announced, the

name of Hartletop was hardly mentioned by her out of her own domestic

circle. But she assumed, with an ease that was surprising even to herself,

the airs and graces of a mighty woman. She went through her work of morning

calls as though it were her business to be affable to the country gentry.

She astonished her sister, the dean’s wife, by the simplicity of her

grandeur; and condescended to Mrs Proudie in a manner which nearly broke

that lady’s heart. ‘I shall be even with her yet,’ said

Mrs Proudie to herself, who had contrived to learn various very deleterious

circumstances respecting the Hartletop family since the news about Lord

Dumbello and Griselda had become known to her. Griselda herself was carried

about in the procession, taking but little part in it of her own, like an

Eastern god. She suffered her mother’s caresses and smiled in her

mother’s face as she listened to her own praises, but her triumph was

apparently within. To no one did she say much on the subject, and greatly

disgusted the old family housekeeper by declining altogether to discuss the

future Dumbello menage. To her aunt, Mrs Arabin, who strove hard to lead

her into some open-hearted speech as to her future aspirations, she was

perfectly impassive. ‘Oh, yes, aunt, of course,’ and ‘

I’ll think about it, Aunt Eleanor,’ or ‘Of course I shall

do that if Lord Dumbello wishes it.’ Nothing beyond this could be got

from her; and so, after a half dozen ineffectual attempts, Mrs Arabin

abandoned the matter.

‘Framley, July 185-‘MY DEAR SOWERBY,

‘I will sign no more bills on any consideration. ‘Yours truly,

MARK ROBARTS’

"Well, then, what has happened?" said the

Lieutenant in a broken voice, his eyes filling with tears.

The Court

of Quarter Sessions, Part I, where this trial was to take place, was held

in famous Independence Hall, at Sixth and Chestnut Streets, which was at

this time, as it had been for all of a century before, the center of local

executive and judicial life. It was a low two-story building of red brick,

with a white wooden central tower of old Dutch and English derivation,

compounded of the square, the circle, and the octagon. The total structure

consisted of a central portion and two T-shaped wings lying to the right

and left, whose small, oval-topped old-fashioned windows and doors were set

with those many-paned sashes so much admired by those who love what is

known as Colonial architecture. Here, and in an addition known as State

House Row (since torn down), which extended from the rear of the building

toward Walnut Street, were located the offices of the mayor, the chief of

police, the city treasurer, the chambers of council, and all the other

important and executive offices of the city, together with the four

branches of Quarter Sessions, which sat to hear the growing docket of

criminal cases. The mammoth city hall which was subsequently completed at

Broad and Market Streets was then building.

‘If I had not

learned it as a fact, I would not have believed it, even of Lord Brock,

’ said the archdeacon.

"There are no cards on you. What’s

your name?"

He had been found on the hearth-rug in his dressing-room;

having apparently been seized with a fit, in the act of burning some paper.

The ashes were discovered close by him, just inside the fender. On his

recovery, his first anxiety was to know if a letter had been burnt.

Satisfied on this point, he had ordered the servants to assemble round his

bed, and had peremptorily forbidden them to open the door to their mistress,

if she ever returned at any future time to the house. Regina’s

questions and remonstrances, when she was left alone with him, were

answered, once for all, in these pitiless terms:—"If you wish to deserve

the fatherly interest that I take in you, do as I do: forget that such a

person as your aunt ever existed. We shall quarrel, if you ever mention her

name in my hearing again." This said, he had instantly changed the subject;

instructing Regina to write an excuse to "Mr. Melton" (otherwise, the

middle-aged rival), with whom he had been engaged to dine that evening.

Relating this latter event, Regina’s ever-ready gratitude overflowed

in the direction of Mr. Melton. "He was so kind! he left his guests in the

evening, and came and sat with my uncle for nearly an hour." Amelius made

no remark on this; he led the conversation back to the subject of Mrs.

Farnaby. "She once spoke to me of her lawyers," he said. "Do they know

nothing about her?"

"Yes."

"Well, I can’t say that

myself. It’s fascinating, though. Your partner makes such a

difference. Mrs. Cowperwood doesn’t like it as much as I

do."

Let them look at the matter in any way the punishment was very

heavy.

"That may well be done," said Sir Patrick Charteris, "and yet

leave the Fair City rich enough to pay her debts to Henry Wynd, of which

every man of us is a better judge than him self, who is blinded with an

unavailing nicety, which men call modesty. And if the burgh be too poor for

this, the provost will bear his share. The Rover’s golden angels have

not all taken flight yet."

"Damn!" said Cowperwood gloomily. "I wish

I were out of this stock-jobbing business. I wish I had never gotten into

it." He returned to his drawing-room and scanned both accounts most

carefully.

MacLouis, with several of the guards, rushed into the

apartment.

He remained for a space silent, and intensely thoughtful,

with downcast eyes, a lowering brow, and folded arms. At length he raised

his hands, and said: "Father,— for such you have been to me — I am about to

tell you a secret. Reason and pride both advise me to be silent, but fate

urges me, and must be obeyed. I am about to lodge in you the deepest and

dearest secret that man ever confided to man. But beware — end this

conference how it will — beware how you ever breathe a syllable of what I

am now to trust to you; for know that, were you to do so in the most remote

corner of Scotland, I have ears to hear it even there, and a hand and

poniard to reach a traitor’s bosom. I am — but the word will not out!

"

‘They are making out a list of the things,’ said Mrs

Robarts.

"How much longer am I to be kept kicking my heels in this

wretched hole?" the woman asked sulkily.

‘Well, sir; I hope my

mode of life may not require it; but that is not exactly to the point; what

I wish to know is, whether you will speak to Mr Robarts?’

‘I believe my husband does as much of his own duty as any

clergyman in the whole diocese,’ said Mrs Robarts, now again in

tears.

‘Don’t let me alarm you,’ said Harold,

seeing that her face gathered solemnity from his. ‘I suppose I carry

the marks of a past agitation. It relates entirely to troubles of my own —

of my own family. No one beyond is involved in them.’

Butler

walked heavily in and took his seat.

"You have spoke a stinging word,

daughter; but you know not what has happened. Kiss him, Catharine, in token

of forgiveness."

Mr Lyon looked at the speaker with a pitying smile

and a subdued ‘h’m — m — m’, which Harold took for a sign

of satisfaction. He was soon undeceived.

But Mr Lyon was not alone

when Felix entered. Mr Nuttwood, the grocer, who was one of the deacons,

was complaining to him about the obstinate demeanour of the singers, who

had declined to change the tunes in accordance with a change in the

selection of hymns, and had stretched short metre into long out of pure

wilfulness and defiance, irreverently adapting the most sacred

monosyllables to a multitude of wandering quavers, arranged, it was to be

feared, by some musician who was inspired by conceit rather than by the

true spirit of psalmody.

"And many gentlemen are not better

off. Curates, for instance. Do you see what I am coming to, my darling?

"

Wilfrid had obeyed impulse when he ran down into Cork Street. Ever

since the sudden breaking off of that fierce undignified scuffle at Royston,

and the sight of Dinny standing in the car covering her eyes with a hand,

his feelings towards her had been terribly confused. Now at the sudden

sight, sound, scent of her, warmth had rushed up in him and spent itself in

kisses; but the moment she left him his insane feeling had returned and

hurled him down into a London where at least one could walk and meet no

one. He went south and became involved with a queue of people trying to get

into ‘His Majesty’s.’ He stood among them thinking:

‘As well in here as anywhere.’ But, just as his turn came, he

broke away and branched off eastward; passed through Covent Garden,

desolate and smelling of garbage; and came out into Ludgate Hill.

Hereabouts he was reminded by scent of fish that he had eaten nothing since

breakfast. And, going into a restaurant, he drank a cocktail and ate some

hors-d’oeuvre. Asking for a sheet of paper and envelope, he

wrote:



包厢内。



余明远见客人已到,立马起身相迎:“魏哥,多谢你昨天在货场不杀之恩啊。”



没错,来人正是闸南码帮坐堂—魏相佐。余明远今天能请得动他,是通过一区的一位朋友引荐,而这个人对魏相佐有些恩情。<

/P>

“你说大了。”魏相佐与余明远握手,话语简洁地回道:“昨天我走,是因为之前我不知道货被徐虎劫了,谈不上什么不杀之恩。”



“呵呵,魏哥快人快语,来来,请坐!”余明远硬着头皮找了个台阶下,伸手将对方请到了客座上。



苏天御打量着这个身材壮硕,面容刚毅的男子,站在东道主的立场,帮其摆了碗筷,倒了白酒。



“之前我就听说魏哥在码头的为人,但一直……。”余明远还想用商场的行酒令,捧对方几句。



魏相佐直接大咧咧地摆手,看着桌上的菜肴回道:“来这是吃饭的,不是相互拍马屁的。余总,有什么话,你就直说,有老许那边的关系,能办

的,我一定会办,这是我欠他的。”



余明远见对方如此直接,那也就调整了谈话思路,没有再绕弯子:“魏哥,那我就直说了。码帮,港口关系,现如今和我们公司闹成这样,那肯

定会影响到海上生意,所以我现在只能自己找出路,想问问你,咱们之间有没有合作的可能。”



魏相佐拿着筷子,毫不客气地吃着餐桌上的菜肴,轻笑着回道:“你是想跟码帮合作,还是想跟我合作?”



“当然想跟你合作啊!”余明远笑着回道。



“那不可能。”魏相佐吃相非常粗犷,两口鱼肉下嘴,嘴角已充满了油渍:“越过码帮,咱们单玩,这肯定不行。”







“我给你四成利,比之前唐柏青拿的还要多一成。”余明远继续说道:“活不用你干,你只要负责海面关系,让货安全落地就行。”



“不是这个事儿。”魏相佐摇头。



余明远看着他的表情,斟酌半晌后说道:“码帮是有组织的字头,里面规矩很多,如果你愿意跟我合作,回头你要想当帮带,进总工会,我也可

以给你找门路,给你钱和人脉的支持。”



“呵呵!”魏相佐听到这话,扭头看向余明远笑了笑:“你能给我开这么大的价码,那为啥不能跟徐虎服软呢?你要给他四成利,而且还不用他

干活,那我相信昨天的不愉快,他分分钟就能忘了。”



 



“不,这不一样。”余明远摆手:“徐虎跟我谈,是想压着我挣钱,今天能要四成,明天就能要六成。而且他准备让我把脏帮踢了,等于是替我

在做主,这么一块干买卖,那肯定是我接受不了的。”



“也有道理。”魏相佐夹了一块鱼肉:“但还是不行,我跟你合作不了。”



余明远看着他:“呵呵,魏哥,你是不是有些不放心我的为人啊?”



“这话怎么讲?”



“……据我所知,你和徐虎在码帮的一些事情上,也有不同想法。”余明远委婉地说道:“你这么抗拒我,不等于是在给徐虎抬价吗?放着四成

利不赚,却维护徐虎的面子,这……这我有点想不通啊。”



魏相佐双眼看着桌上的菜肴,用筷子指了一圈说道:“你看桌上这些菜,有素的,有荤的,有清汤的,也有干锅的,但你随便拿出一样,不管菜

品质量多高,它也不叫席啊!码帮虽然分支多,人也多,内部有些混乱,但它凑在一块,才能叫码帮。政F给我们面子,鬼佬给我们面子,海关,海警,警署也要给我们面子

,这是为啥啊?很简单,就四个字,人多势众!”



余明远听到这话,无言以对。



“徐虎这人做事,是不太讨我喜欢,但我和他是拜过一个门子,认过一个师傅的同门师兄弟。你们之间打起来了,回头我却把买卖接了,那不等

于是捅了徐虎一刀,挑起码帮内斗吗?”魏相佐放下筷子,扭头看着余明远反问。



“魏哥,我觉得……!”



“小余,从我个人的角度来讲,我觉得这事也没必要非得闹的你死我活。”魏相佐打断着余明远的话,低声继续说道:“……你还是去找徐虎谈

,如果你俩能达成某种共识,我愿意在中间调和一下。你走一批货,给码帮一次抽水的钱,咱们都收了刀,和气生财,也能让下面的兄弟过得好一点。”


余明远听到这里,已经知道自己无法说通魏相佐了。



“那就这样,”魏相佐起身:“我先走了。”



话音落,魏相佐孤身一人向外走去,而余明远皱着眉头,忍不住问了一句:“如果我和徐虎谈不妥呢?”



魏相佐回头,毫不犹豫地回道:“我们是靠港吃饭的,你踩线了,不交钱,肯定是不行的。”



说完,魏相佐推门离去。



余明远松了松领口,无语地骂道:“妈的,这还碰到个死脑筋!”



“是。”苏天御虽然嘴上附和了一句,但心里却对魏相佐这个人有了一些不同的看法。



谈崩了,余明远心情不太好,根本没心思吃桌上的酒席,伸手拿起外套,就奔着门外走去。



苏天御找来了经理结账,对方却告诉他,魏相佐已经买完单了。



……



走码帮内部这条线,很显然是行不通了,所以接下来的几天,苏天御,余明远二人都在忙着找新的官方关系,不过效果并不好。因为徐虎这几天

也啥都没干,专门拎着各种礼品打点港口黑白两道的关系,根本不给余明远切入的机会。



在海上做的生意,现在却被封港了。



货进不来,公司就没事干,所以明远公司几乎陷入到了绝境中。



不过令人意外的是,当公司面临倒闭的时候,余明远反而没有那么上火了,心也踏实了,因为最坏的结果已经出现了。



这天中午。



苏天御,苏天北,白宏伯,孔正辉四人来到了余家,准备找他聊聊,因为这几天苏天御没少打听港口的事,他心里已经多少有点想法了。



众人一进余家别苑,白宏伯就见到安七七等六七个姑娘,正坐在游泳池旁边聊天。



天空阳光绚丽,院内有山有水,绿植丰茂,微风徐徐吹过,一群姑娘们坐在草坪上吃着零食和冷餐,聊着天,画着写生,景色美不胜收。



白宏伯看到这个景象,当即作诗一首:“小桥流水,风向北,七位佳人,吃火腿,要问哥哥哪里美,我要伸手摸大腿。”



这个诗是即兴发挥的,完全没有任何征兆,所以另外三个人听完后,当场就懵了。



“……你是……真踏马……有才!”苏天北直接服了。