Nigerian Spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 14 Oct 2024 13:45:00 -0600

Received: from mail-oa1-f43.google.com ([209.85.160.43]:53253)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1t0QzB-00000000GId-35Rx

for dave@doctor.nl2k.ab.ca;

Mon, 14 Oct 2024 13:44:13 -0600

Received: by mail-oa1-f43.google.com with SMTP id 586e51a60fabf-2884e7fadb8so2381801fac.2

for ; Mon, 14 Oct 2024 12:42:18 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1728934932; x=1729539732; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=8GP4XUzIxxhyy5jTmoLl86hCnQAONPCksrJ6hmWv2Yc=;

b=YAdCoxCssE5XKRnzV1yNEdoaRL24u6psMpQRKo7dwp/HpY/h5LEhZT4e5PrXMD6uAW

W6TUonxLW7R9EqXCBZEXAWSiZfYFnYcjDee7EDQPNFosI8dQzoMMvwI6hYTefNeWZCOs

hLX5VoOFFLoAlwwXrs7JzJxTXAbbq6/lXtlBwUVfRfLrD+0pLF+3i2jLtkcZmBimv2Nm

ICGCIwggfCRxkiv3ykRJq4VeJ29zV7sM3SXouolD4UFD4oglzATqeqZIfpveNRIM8Nc7

x2QLahecSdZDgRks/zpgvVXlEYBwNZRBIIE0HU1iMRFh3T64M/XaqBIvMocLchKznjkn

/wpg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1728934932; x=1729539732;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=8GP4XUzIxxhyy5jTmoLl86hCnQAONPCksrJ6hmWv2Yc=;

b=PJNsQv8swJX3VeJg5WMpH8hcMDmUUfbeSO180UlcqckR36q9fCSszBlWb0qgF00if6

gwsdz2Bv9pm35L7s0Z5yXD2O72rVctrYfvy2NomY0AR31UluXkilDTp33egAHeYBCF8Z

TG6+e1wG+UbTTIJuALjEN2k0sdLcOgy6+g7U63ZaA7MnURAKKSu5U2WCHHHpGciK0N9H

godKLVeatm/st01qKJrar85Mr2llzRaqLnyUNj3p0Pq7fnW41ZzGXqVu0B1HssRWhCd7

KLlBtA4cgsCsZpjft22tEv0uUGi0FBvFZB4Ol9vPDLrTciTa7mJXGWNCgOBkzZMcRVh0

BLyg==

X-Forwarded-Encrypted: i=1; AJvYcCWL1Hbn5/jXamYek8B8lS3n3mxuePFlnw2lA3nfVmBoFK0ZIeNDpkifjc6B3LYfmkRY352E@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0Yz5d2PTV/DZ91Cpfq9xEcuYIGQPqIgaW0GYtIfKJhZu9FhvYXc7

jinISETqhKfd8c4v1OnzQr1U+M+TSAkJWOY7wGta/oICJQbySgfQn5aTZt9a0UUidWztuSeP+tE

AumJzuuDRdvM1hxy+8/k/dQNsT5SiJ2GXdLE=

X-Google-Smtp-Source: AGHT+IEd9/p5pwnAGSEcEdWJDe5Xca9rCSKeIg+2ukof2okOM3Bg0Uev0IyMHXji/PPmv/EyYtpFQs7d8Hv9KSqknXw=

X-Received: by 2002:a17:902:d509:b0:20b:6d82:acb with SMTP id

d9443c01a7336-20cbb19ce4dmr145498045ad.23.1728932880500; Mon, 14 Oct 2024

12:08:00 -0700 (PDT)

MIME-Version: 1.0

Reply-To: kk.bfk@aol.com

From: Toma Karim

Date: Mon, 14 Oct 2024 19:06:41 -1000

Message-ID:

Subject: Immediate Reply ,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000002ed1080624748ec1"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 18.2

X-Spam_score_int: 182

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Friend, I know that this letter will come to you as surprise,

I got your contact address while searching for foreign partner to assist

me in this business transaction that is present in our favor, My name is [...]





Content analysis details: (18.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.43 listed in will-spam-for-food.eu.org]

[209.85.160.43 listed in will-spam-for-food.eu.org]

[209.85.160.43 listed in will-spam-for-food.eu.org]

[209.85.160.43 listed in will-spam-for-food.eu.org]

[209.85.160.43 listed in will-spam-for-food.eu.org]

[209.85.160.43 listed in will-spam-for-food.eu.org]

[209.85.160.43 listed in will-spam-for-food.eu.org]

[209.85.160.43 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.43 listed in dnsbl.ahbl.org]

[209.85.160.43 listed in dnsbl.ahbl.org]

[209.85.160.43 listed in dnsbl.ahbl.org]

[209.85.160.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.43 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.43 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.43 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.43 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.160.43 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[e2ksd2(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[e2ksd2(at)gmail.com]

0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date

2.6 HK_SCAM_N13 BODY: No description available.

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.0 HTML_MESSAGE BODY: HTML included in message

0.3 HTML_FONT_FACE_BAD BODY: HTML font face is not a word

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.6 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

1.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

1.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

Subject: {SPAM?} Immediate Reply ,



--0000000000002ed1080624748ec1

Content-Type: text/plain; charset="UTF-8"



Dear Friend,



I know that this letter will come to you as surprise, I got your contact

address while searching for foreign partner to assist me in this business

transaction that is present in our favor, My name is Mr. TOMA KARIM, I am

the Bill and Exchange (assistant) Manager (BOA) BANK OF AFRICA. I'm

proposing to transfer out in your name (US$16.5 Million Dollars) that

belongs to our later customer, MR. GORPUN VLADIMIR From Oblast Russia who

died in Siber airline that crashed into sea at Israel on 4th October 2001.



I want to present you to my bank here as the beneficiary to this fund, am

waiting for your response for more details, as you are willing to execute

this business opportunity with me.



Yours Sincerely,

Mr. Toma Karim



--0000000000002ed1080624748ec1

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




mail-XbIp4 gmail-jmmB7 gmail-GNqVo gmail-allowTextSelection gmail-OuGoX" id=

=3D"gmail-UniqueMessageBody_12">

v dir=3D"ltr">

x_gmail-XbIp4 gmail-x_gmail-jmmB7 gmail-x_gmail-GNqVo gmail-x_gmail-allowTe=

xtSelection gmail-x_gmail-OuGoX" aria-label=3D"Message body" tabindex=3D"0"=

>

ndex=3D"-1" aria-label=3D"Message body" class=3D"gmail-x_gmail-x_gmail-XbIp=

4 gmail-x_gmail-x_gmail-jmmB7 gmail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_g=

mail-allowTextSelection gmail-x_gmail-x_gmail-OuGoX" id=3D"gmail-x_gmail-x_=

gmail-UniqueMessageBody_1">

1">

sageBody_2" class=3D"gmail-x_gmail-x_gmail-x_gmail-XbIp4 gmail-x_gmail-x_gm=

ail-x_gmail-jmmB7 gmail-x_gmail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_gmail=

-x_gmail-allowTextSelection gmail-x_gmail-x_gmail-x_gmail-OuGoX" aria-label=

=3D"Message body" tabindex=3D"-1">

x_gmail-rps_6161">

gmail-x_gmail-UniqueMessageBody_5" class=3D"gmail-x_gmail-x_gmail-x_gmail-x=

_gmail-XbIp4 gmail-x_gmail-x_gmail-x_gmail-x_gmail-jmmB7 gmail-x_gmail-x_gm=

ail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_gmail-x_gmail-x_gmail-allowTextSe=

lection gmail-x_gmail-x_gmail-x_gmail-x_gmail-OuGoX" aria-label=3D"Message =

body" tabindex=3D"-1">

ail-rps_58ac">

l-x_gmail-x_gmail-UniqueMessageBody_6" class=3D"gmail-x_gmail-x_gmail-x_gma=

il-x_gmail-x_gmail-XbIp4 gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-jmmB=

7 gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_gmail=

-x_gmail-x_gmail-x_gmail-allowTextSelection gmail-x_gmail-x_gmail-x_gmail-x=

_gmail-x_gmail-OuGoX" aria-label=3D"Message body" tabindex=3D"-1">

class=3D"gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-rps_c3ab">

dir=3D"ltr">

l-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-XbIp4 gmail-x_gmail-x_gma=

il-x_gmail-x_gmail-x_gmail-x_gmail-jmmB7 gmail-x_gmail-x_gmail-x_gmail-x_gm=

ail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_g=

mail-allowTextSelection gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gma=

il-OuGoX" id=3D"gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-Uniqu=

eMessageBody_1">

gmail-x_gmail-rps_b570">

ail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-UniqueMessageBody_7" class=3D"g=

mail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-XbIp4 gmail-x_=

gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-jmmB7 gmail-x_gmail-x=

_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_gmail-=

x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-allowTextSelection gmail-x_gmail-x_=

gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-OuGoX" aria-label=3D"Message =

body" tabindex=3D"-1">

ail-x_gmail-x_gmail-x_gmail-rps_fd2e">

mail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmai=

l_signature" dir=3D"ltr">

t-stretch:inherit;font-size:15px;line-height:inherit;margin:0px;padding:0px=

;vertical-align:baseline;color:rgb(36,36,36)">

-stretch:inherit;line-height:inherit;margin:0px;padding:0px;vertical-align:=

baseline">
<=

div dir=3D"ltr">

nt-stretch:inherit;line-height:inherit;margin:0px;padding:0px;vertical-alig=

n:baseline">
-apple-system, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" col=

or=3D"#242424">Dear=C2=A0 Friend,

;font-stretch:inherit;line-height:inherit;margin:0px;padding:0px;vertical-a=

lign:baseline">
UI, -apple-system, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" =

color=3D"#242424">

ch:inherit;line-height:inherit;margin:0px;padding:0px;vertical-align:baseli=

ne">
system, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" color=3D"#2=

42424">=C2=A0

I know that this letter will come to you as surprise, I got your=20

contact address while searching for foreign partner to assist me in this

business transaction that is present in our favor, My name is Mr. TOMA=20

KARIM, I am the Bill and Exchange (assistant)=C2=A0 Manager (BOA) BANK OF=

=20

AFRICA. I'm proposing to transfer out in your name (US$16.5 Million=20

Dollars) that belongs to our later customer, MR. GORPUN VLADIMIR From=20

Oblast Russia who died in Siber airline that crashed into sea at Israel=20

on 4th October 2001.

:inherit;line-height:inherit;margin:0px;padding:0px;vertical-align:baseline=

">
stem, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" color=3D"#242=

424">

ne-height:inherit;margin:0px;padding:0px;vertical-align:baseline">
e=3D"Segoe UI, Segoe UI Web (West European), Segoe UI, -apple-system, Blink=

MacSystemFont, Roboto, Helvetica Neue, sans-serif" color=3D"#242424">I

want to present you to my bank here as the beneficiary to this fund, am

waiting for your response for more details, as you are willing to=20

execute this business opportunity with me.

:0px none;font-stretch:inherit;line-height:inherit;margin:0px;padding:0px;v=

ertical-align:baseline">

h:inherit;line-height:inherit;margin:0px;padding:0px;vertical-align:baselin=

e">
ystem, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" color=3D"#24=

2424">Yours Sincerely,

ch:inherit;line-height:inherit;margin:0px;padding:0px;vertical-align:baseli=

ne">
system, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" color=3D"#2=

42424">Mr. Toma Karim

>

div>

>

div>

>



--0000000000002ed1080624748ec1--

Nigerian Spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 14 Oct 2024 17:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t0UY7-00000000BCT-1H5G

for dave@doctor.nl2k.ab.ca;

Mon, 14 Oct 2024 17:32:27 -0600

Resent-From: The Doctor

Resent-Date: Mon, 14 Oct 2024 17:32:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f43.google.com ([209.85.219.43]:56811)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1t0SND-00000000K67-1hYR

for sales@nk.ca;

Mon, 14 Oct 2024 15:13:11 -0600

Received: by mail-qv1-f43.google.com with SMTP id 6a1803df08f44-6cbe8119e21so38546616d6.1

for ; Mon, 14 Oct 2024 14:11:06 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1728940260; x=1729545060; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=liCV05mpz0YJKRgIJVSOANq5nA0svYOkd/iUiXiJGdw=;

b=F5eE88Z4SGG0GzlGsIZv1+xTSc29JOKZ7RxXiNlQPKCjFwIQGLwXokMTA+qwhWmOka

XwaMWKnDi6O3QPx3b8C0SvNxl9eHR3fSzJp005TN5EY1hlBSmudUIF0lVcnSFY8+D9Vq

qk8YduYWxNmtP1KHKjX63kody/mpJM9vTO/+W9ppSu0svPUfqOevtZreW2nZ9Nr62Ott

gnZvIx8pm1YLK2hfWJkEqw/jzDc2iSSHhxp2XVrTwtQCqzX776dfZfEcsECB4ghhywC3

fioSA78PTOvkqFVd9musap9n/CdFr3a8JdZremUeWAays/BlKDq7SSleoW7xmWKj3Y/f

1u1Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1728940260; x=1729545060;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=liCV05mpz0YJKRgIJVSOANq5nA0svYOkd/iUiXiJGdw=;

b=CbqUhSiaihAUQXEm9mkVgAN+m+Kwnf4LDXDJXcRmrLabX3qLvGOtR5Cni/pIVcEtsL

RPFOm92mslRU7MnU1PubcQ2E0JyR+uKRYytwvdLJA25pAeHmGRXrV0ILMr4rYETzF6zn

1FfrYVt7Iwmc/30cy/L4apUy05Bo2ZH7glUh5e/EnvskG8UmjyTdsGZ9JyyUxb2SQsby

2vYC9gBGDHc5c/rjw5vqQpYQLcRhhcqjl9eqB+7CtzO0SMnF96vfM8Zd3J4sqbob8rM4

p58er42w29GpDh4wVZB6OIj+5XiH32fANDbknWznqXEVoEdzoLOVBayRO7n/ynfsyPHy

Phhw==

X-Forwarded-Encrypted: i=1; AJvYcCVVeBP3sQMl2DgU16Lh/gXYFNbiPktdcuduPQebmmmMu5jbeNZdgB8kjPn2pimmG6qKyheGag==@nk.ca

X-Gm-Message-State: AOJu0YzWg/VgYodpekK6HBfti4tr1Fl5uuxTkBdn609sY4wj5WPBm0LN

ewIQ6PH+fL+7OLPMgP9ILAki2VYRs4bJ0XrEgf8csgkAr/xnmE+U5eJWlKTOUgpRBK/tAkAMZ/t

G0D3TVSji3Lm3ZsDNqTrlTp/4er4=

X-Google-Smtp-Source: AGHT+IFuGsuGiSDgTXjYSJRL/Kk8GafsVEByIWR6usI22Z5PosnLdTf3pkJrVCHfteg80ZwQGzkyyNNofFYj01Z9eJI=

X-Received: by 2002:a0c:e78f:0:b0:6cb:f5fc:1c4b with SMTP id

6a1803df08f44-6cbf5fc1d41mr163403186d6.10.1728940260169; Mon, 14 Oct 2024

14:11:00 -0700 (PDT)

MIME-Version: 1.0

From: Lil Baby

Date: Mon, 14 Oct 2024 22:10:40 +0100

Message-ID:

Subject: I NEED ONLY YOUR ALT-MOST SINCERITY.

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000000b9ea30624764623"

Bcc: sales@nk.ca

X-Spam_score: 12.9

X-Spam_score_int: 129

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello! Good Day, My name is Mrs. Cecilia Hormos, I am a widow

from Bulgaria. I actually got your email address from the international commerce

directory on my search for a sincere partnership on business investment.

I [...]



Content analysis details: (12.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.43 listed in dnsbl.ahbl.org]

[209.85.219.43 listed in dnsbl.ahbl.org]

[209.85.219.43 listed in dnsbl.ahbl.org]

[209.85.219.43 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.43 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.43 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.43 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.43 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[joneslilbaby0(at)gmail.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[joneslilbaby0(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 FREEMAIL_REPLY From and body contain different freemails

1.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)

Subject: {SPAM?} I NEED ONLY YOUR ALT-MOST SINCERITY.



--0000000000000b9ea30624764623

Content-Type: text/plain; charset="UTF-8"



Hello! Good Day,



My name is Mrs. Cecilia Hormos, I am a widow from Bulgaria. I actually got

your email address from the international commerce directory on my search

for a sincere partnership on business investment. I am indeed in need of

only a God fearing partner who will sincerely take possession of my late

husband's deposited fund and invest it for both our mutual benefits due to

my health right now.



And Note, you will determine the right/best projects to invest this fund

upon, and you will also take full supervision and running of the investment

project which shall be under your total care/watch for our mutual benefits.



Please, if you are interested in SINCERELY partnering with me on this

project, and will not betray my trust. Get back to me immediately for

further details and clarifications on the immediate take-off proceedings.

thank you

*Via Email:{hormoscecilia@gmail.com}



Warmest Regards,

Mrs Cecilia Hormos



--0000000000000b9ea30624764623

Content-Type: text/html; charset="UTF-8"





Hello! Good Day,

My name is Mrs. Cecilia Hormos, I am a widow

from Bulgaria. I actually got your email address from the international

commerce directory on my search for a sincere partnership on business

investment. I am indeed in need of only a God fearing partner who will

sincerely take possession of my late husband's deposited fund and invest

it for both our mutual benefits due to my health right now.

And

Note, you will determine the right/best projects to invest this fund

upon, and you will also take full supervision and running of the

investment project which shall be under your total care/watch for our

mutual benefits.

Please, if you are interested in SINCERELY

partnering with me on this project, and will not betray my trust. Get

back to me immediately for further details and clarifications on the

immediate take-off proceedings. thank you
*Via Email:{hormoscecilia@gmail.com}

Warmest Regards,
Mrs Cecilia Hormos







--0000000000000b9ea30624764623--

Instagram spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 14 Oct 2024 17:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t0UY7-00000000BCT-1H5G

for dave@doctor.nl2k.ab.ca;

Mon, 14 Oct 2024 17:32:27 -0600

Resent-From: The Doctor

Resent-Date: Mon, 14 Oct 2024 17:32:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f43.google.com ([209.85.219.43]:56811)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1t0SND-00000000K67-1hYR

for sales@nk.ca;

Mon, 14 Oct 2024 15:13:11 -0600

Received: by mail-qv1-f43.google.com with SMTP id 6a1803df08f44-6cbe8119e21so38546616d6.1

for ; Mon, 14 Oct 2024 14:11:06 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1728940260; x=1729545060; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=liCV05mpz0YJKRgIJVSOANq5nA0svYOkd/iUiXiJGdw=;

b=F5eE88Z4SGG0GzlGsIZv1+xTSc29JOKZ7RxXiNlQPKCjFwIQGLwXokMTA+qwhWmOka

XwaMWKnDi6O3QPx3b8C0SvNxl9eHR3fSzJp005TN5EY1hlBSmudUIF0lVcnSFY8+D9Vq

qk8YduYWxNmtP1KHKjX63kody/mpJM9vTO/+W9ppSu0svPUfqOevtZreW2nZ9Nr62Ott

gnZvIx8pm1YLK2hfWJkEqw/jzDc2iSSHhxp2XVrTwtQCqzX776dfZfEcsECB4ghhywC3

fioSA78PTOvkqFVd9musap9n/CdFr3a8JdZremUeWAays/BlKDq7SSleoW7xmWKj3Y/f

1u1Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1728940260; x=1729545060;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=liCV05mpz0YJKRgIJVSOANq5nA0svYOkd/iUiXiJGdw=;

b=CbqUhSiaihAUQXEm9mkVgAN+m+Kwnf4LDXDJXcRmrLabX3qLvGOtR5Cni/pIVcEtsL

RPFOm92mslRU7MnU1PubcQ2E0JyR+uKRYytwvdLJA25pAeHmGRXrV0ILMr4rYETzF6zn

1FfrYVt7Iwmc/30cy/L4apUy05Bo2ZH7glUh5e/EnvskG8UmjyTdsGZ9JyyUxb2SQsby

2vYC9gBGDHc5c/rjw5vqQpYQLcRhhcqjl9eqB+7CtzO0SMnF96vfM8Zd3J4sqbob8rM4

p58er42w29GpDh4wVZB6OIj+5XiH32fANDbknWznqXEVoEdzoLOVBayRO7n/ynfsyPHy

Phhw==

X-Forwarded-Encrypted: i=1; AJvYcCVVeBP3sQMl2DgU16Lh/gXYFNbiPktdcuduPQebmmmMu5jbeNZdgB8kjPn2pimmG6qKyheGag==@nk.ca

X-Gm-Message-State: AOJu0YzWg/VgYodpekK6HBfti4tr1Fl5uuxTkBdn609sY4wj5WPBm0LN

ewIQ6PH+fL+7OLPMgP9ILAki2VYRs4bJ0XrEgf8csgkAr/xnmE+U5eJWlKTOUgpRBK/tAkAMZ/t

G0D3TVSji3Lm3ZsDNqTrlTp/4er4=

X-Google-Smtp-Source: AGHT+IFuGsuGiSDgTXjYSJRL/Kk8GafsVEByIWR6usI22Z5PosnLdTf3pkJrVCHfteg80ZwQGzkyyNNofFYj01Z9eJI=

X-Received: by 2002:a0c:e78f:0:b0:6cb:f5fc:1c4b with SMTP id

6a1803df08f44-6cbf5fc1d41mr163403186d6.10.1728940260169; Mon, 14 Oct 2024

14:11:00 -0700 (PDT)

MIME-Version: 1.0

From: Lil Baby

Date: Mon, 14 Oct 2024 22:10:40 +0100

Message-ID:

Subject: I NEED ONLY YOUR ALT-MOST SINCERITY.

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000000b9ea30624764623"

Bcc: sales@nk.ca

X-Spam_score: 12.9

X-Spam_score_int: 129

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello! Good Day, My name is Mrs. Cecilia Hormos, I am a widow

from Bulgaria. I actually got your email address from the international commerce

directory on my search for a sincere partnership on business investment.

I [...]



Content analysis details: (12.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.43 listed in dnsbl.ahbl.org]

[209.85.219.43 listed in dnsbl.ahbl.org]

[209.85.219.43 listed in dnsbl.ahbl.org]

[209.85.219.43 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.43 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.43 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.43 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.43 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[joneslilbaby0(at)gmail.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[joneslilbaby0(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 FREEMAIL_REPLY From and body contain different freemails

1.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)

Subject: {SPAM?} I NEED ONLY YOUR ALT-MOST SINCERITY.



--0000000000000b9ea30624764623

Content-Type: text/plain; charset="UTF-8"



Hello! Good Day,



My name is Mrs. Cecilia Hormos, I am a widow from Bulgaria. I actually got

your email address from the international commerce directory on my search

for a sincere partnership on business investment. I am indeed in need of

only a God fearing partner who will sincerely take possession of my late

husband's deposited fund and invest it for both our mutual benefits due to

my health right now.



And Note, you will determine the right/best projects to invest this fund

upon, and you will also take full supervision and running of the investment

project which shall be under your total care/watch for our mutual benefits.



Please, if you are interested in SINCERELY partnering with me on this

project, and will not betray my trust. Get back to me immediately for

further details and clarifications on the immediate take-off proceedings.

thank you

*Via Email:{hormoscecilia@gmail.com}



Warmest Regards,

Mrs Cecilia Hormos



--0000000000000b9ea30624764623

Content-Type: text/html; charset="UTF-8"





Hello! Good Day,

My name is Mrs. Cecilia Hormos, I am a widow

from Bulgaria. I actually got your email address from the international

commerce directory on my search for a sincere partnership on business

investment. I am indeed in need of only a God fearing partner who will

sincerely take possession of my late husband's deposited fund and invest

it for both our mutual benefits due to my health right now.

And

Note, you will determine the right/best projects to invest this fund

upon, and you will also take full supervision and running of the

investment project which shall be under your total care/watch for our

mutual benefits.

Please, if you are interested in SINCERELY

partnering with me on this project, and will not betray my trust. Get

back to me immediately for further details and clarifications on the

immediate take-off proceedings. thank you
*Via Email:{hormoscecilia@gmail.com}

Warmest Regards,
Mrs Cecilia Hormos







--0000000000000b9ea30624764623--

Instagram spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 14 Oct 2024 17:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t0UXj-00000000B4e-1qA0

for dave@doctor.nl2k.ab.ca;

Mon, 14 Oct 2024 17:32:03 -0600

Resent-From: The Doctor

Resent-Date: Mon, 14 Oct 2024 17:32:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f200.google.com ([209.85.214.200]:58522)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1t0Qor-00000000FrB-3noE

for sales@nk.ca;

Mon, 14 Oct 2024 13:33:34 -0600

Received: by mail-pl1-f200.google.com with SMTP id d9443c01a7336-204e310e050so59525255ad.0

for ; Mon, 14 Oct 2024 12:31:35 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1728934289; x=1729539089; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=BD0n1FxsvRexqOr/udWImix9YNJgb+qvnV6k5Uuyx98=;

b=GDdjZ3yMC5/FIySF+w04UYCpiVIHEbOnPciaff8rmHTViiWjXj6oc4cplvS+6GKavU

bRUQjjLXkLANupv2ert3K0lSVA8IotUr+LxE/6LntPrrulLHYboSccymNmR1rJ4SukvO

nyoMEibY7dSRHu9kapLL4m477OCQbQV6Vnhlg+w/rcG614Va6Sa/gkQqPtIZ0y+DJtJB

ycablBJu+y1TpPDly/khxq56FSU8CduqOY+7fopXCjc8me1l9uWhuq+NOcgP1CMsLz1b

VKVzImRkEfJnlRPko+AkIOzVpW2KntxyvN/LcNrRdUDEvIAh9F3MYPgC8/bkZn3ZZvwU

c+ZA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1728934289; x=1729539089;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=BD0n1FxsvRexqOr/udWImix9YNJgb+qvnV6k5Uuyx98=;

b=OH3N7GYOJQkWnQVK7SaKHJSl31zXzCx5OOD4j/UTN4mtDXK5+XWa9rz5DSx2y0+5c4

rAyAc1ReOt3pumxoKLg1DPNFGQ18lXV+/KOJZKCanjKtIQyDbDjaENSbBYLagvjL/McO

pbqe4zweAiUggwEO9B7q2JZaxbGTw9NmOsDgTfzujY4L1IVlTtWVvTubJFEfLb79Uzh+

NdLxFFccweh3RgHIKY0+LgUKPiozb61UCQ3eJlgQzN5kD94MO+W61dz0B7w7eWnc0b7B

3P6y+4kmxIlXVzj1kc9jnObxFDg+AZueWWG4e1WUMY7oYPs2PPJo3r4V2bosYTz+fBY8

Y0aA==

X-Gm-Message-State: AOJu0Yz5Oj0VIrMsNdAFgP1fIaoSrLfUv1kWRtEUJv5uceRuPJwWrg27

xCkLuWe8geQGrzLidyQ5HS3Qvin6Ee3ZHUfcPT2WHnyVATE6HKkhTysfHCgtSDIhHQr1ta3nnOs

=

X-Google-Smtp-Source: AGHT+IHLTjmp+EGGVlNPLiR/kfMvaMtSZ0NFgkyiXqcWd5p5MqiiDmoLvbfysmIZCLC8nn7pg7Fh+GuH4Q==

MIME-Version: 1.0

X-Received: by 2002:a17:903:298d:b0:20c:5e86:9b68 with SMTP id

d9443c01a7336-20ca1429fe7mr194688975ad.4.1728934289387; Mon, 14 Oct 2024

12:31:29 -0700 (PDT)

Message-ID:

Date: Mon, 14 Oct 2024 19:31:29 +0000

Subject: netknowyeg, Get More Instagram Followers and Reels Views here

From: socialhilo@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

X-Spam_score: 6.8

X-Spam_score_int: 68

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello Netknow Internet Service, Do you want to get more followers

on Instagram We found your email on your Instagram Account @netknowyeg and

you have about 936 Followers. Our company offers Buy Instagram Followers

services. This is the best way to gain more followers fast and easily.



Content analysis details: (6.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.200 listed in dnsbl.ahbl.org]

[209.85.214.200 listed in dnsbl.ahbl.org]

[209.85.214.200 listed in dnsbl.ahbl.org]

[209.85.214.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.200 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.200 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.200 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[socialhilo(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} netknowyeg, Get More Instagram Followers and Reels Views here



Hello Netknow Internet Service,



Do you want to get more followers on Instagram

We found your email on your Instagram Account @netknowyeg and you have

about 936 Followers.



Our company offers Buy Instagram Followers services.

This is the best way to gain more followers fast and easily.



Our price:



Buy 1,000 Instagram Followers: $29 USD

Buy 2,000 Instagram Followers: $39 USD



We can add up to 1 Million Followers.



Buy Instagram Followers can help attract thousands of followers that you

can keep informed about any of your product or service offerings instantly.

Branding is also another successful, important marketing factor that

Instagram can provide for your business.



We also have other services like YouTube, TikTok, Threads, and Twitter.



See all packages here: https://bit.ly/2n0y4Bj





Thank you,







Best regards,

General Marketing,

Instasocial Corp.

Netflix PHish from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 14 Oct 2024 17:31:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t0UWX-00000000ATu-23co

for dave@doctor.nl2k.ab.ca;

Mon, 14 Oct 2024 17:30:49 -0600

Resent-From: The Doctor

Resent-Date: Mon, 14 Oct 2024 17:30:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-co1nam11hn2234.outbound.protection.outlook.com ([52.100.173.234]:19937 helo=NAM11-CO1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

id 1t0Qzj-00000000GJQ-1fLx

for doctor@doctor.nl2k.ab.ca;

Mon, 14 Oct 2024 13:44:52 -0600

ARC-Seal: i=3; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=pass;

b=WWiPetkrs07CiHPIVyVB3TULKcnYMZWgp/vPeYGnDsNGdvS69tWlsHeqohBtVGcgUfaCMhGM6DvLCQcr/au2cQdLfTk4BhJReJh/8t+v8x2zzdWTmFIHQ7lfWKWZLegDHnsY+nXTO9ESORoxS1L0mbWZoV0O4/ZMzySebNruJ3I3CXK4l4i4ow1OExXI9KxU8odc4R2r/XQqrqfsc+eDqmDydHgDVfkPugIJQPfdDoWsS7/mgdFpC/Ld3n7whDF8Y9i0WnseI3c38AB6R1sbhVXtJ/1P2aBLvvh+IvissG0m47vybgEvXIj2d00mgEH/XMxE0z+twLI39WznysiwUw==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=No5c0BZCoa3RV1WlMfU0FA19uq8IoRbPJIKlAb2vQxw=;

b=SksrVWpfpWWlOOXKbV1RmNYWvpikU5BrUHq7Bu8Uw77RgbTflEljaaRgcP8AA6WpyUael1R3bI9SRL7KBhz1PyzOyTHligmCF7eqV1c/7uOBMVB5/Zwd7O+jJxs9THaGUJ3wVNPJ9dQRQIVuYauUHkFbpXR1SNXFuQ0aZB4pvRLkbAVsEshDRGCHrB8ckNN9HlsYT/2ydUiHoTpNeAGd0fNp54pb1eWIoAiBuSQewlituotDl8GLm0dYhk/GnLW+jxCGtHrfdFFxhP/kOnS2bVevpQDFvDUOTeS72AitI1O/DuCqkLrmrQsthYOHGvnFi8JkWdrrtGgdnV1qWQC0eg==

ARC-Authentication-Results: i=3; mx.microsoft.com 1; spf=fail (sender ip is

40.95.32.140) smtp.rcpttodomain=transbirday.com.br

smtp.helo=nam10-dm6-obe.outbound.protection.outlook.com; dmarc=pass (p=none

sp=none pct=100) action=none header.from=hotmail.nl; dkim=pass (signature was

verified) header.d=hotmail.nl; arc=pass (0 oda=0 ltdi=1)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=HOTMAIL.NL;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=No5c0BZCoa3RV1WlMfU0FA19uq8IoRbPJIKlAb2vQxw=;

b=JczqOUl9wWqfV5eeUWtxqrEGqx6ECWK/bQq/WBN0IOq8gsPGR87fwYX0gQbBG5EMaxOE0Zx8/ZEm1Sw01c3sBVWbn/DZD7bhtFkOVZf60pH9NO1dLIDMSptzMLQ/ipOmAdLiRL4JD5kzvhnUGrCOGQu1b13q4oPp6wzGKCPz99o4MXR2nXe0mNQyoLHynsOq2pYsuqczUzlUiR0fXUjAdKBqUDO4XzBFkl/WN9/gH6IoVkP9wiwEi43E8Y//0gUSS1FI3yL7d7uwmnG8TsZibOTHK/1azx3lNC62EUpOILvmqwLmhuI6zVJ67QcaPW9+CPeAjEXwR9vYYouwy6F4oQ==

Received: from CPWPR80MB6847.lamprd80.prod.outlook.com (2603:10d6:103:1d2::7)

by CPWPR80MB6396.lamprd80.prod.outlook.com (2603:10d6:103:e6::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8048.20; Mon, 14 Oct

2024 12:41:28 +0000

ARC-Seal: i=2; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=pass;

b=O3HQyaJ4Wj30+5QnZ/Pa7WQq0JSdqrshJkKF2OXsMkz1cGSQI6vVjQK3AHU9A/qL1xyLM+ZNq1hLBMHFk/yhKogIkmriBbl6OBHuuQDIdNiGWHnCemCyRxYuw0o3DjHnZEW9jk0pL86yinDlOM0iu3E0AG8wJCPRBII7PUqEAnybVSc69fIhk9C7lWGvpmBzSTmXQwHE0HsvNbhmN7YLCwfE1rx5pUTTAAh7gfGvk6nB0KNJlXI1CVebdpPpJRhmJEloBnr9sI5xX0DAAPF/kc9737ENnG9v+ZeV6AGKFpKcpF0E8wm7lgyhcG3qYCquDLw+TWPKktVtX2Yvcr7zfw==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=No5c0BZCoa3RV1WlMfU0FA19uq8IoRbPJIKlAb2vQxw=;

b=jXf08iXL9ZmZI/BoNz39NGIxrx/jH8dTpIt9GRwZVLBDdcJZ+naeWXBJtlaXQKWBqXXU3ayDQs6EQXrU9e/Ifp0yTVQyl5b19hC6lUW+PDGdNzy/A7OABJfxZ51Dh+iHZ0CLzxXdd80l7aN4BnmVIbRHzPV62vrWcB51fUdH+8TCXmsmrcWZ/1mlc8/VEgPrnTuH3B9EqZCvOMroLETFkJbCEy2Vw1Ky7v6hacxvt7/kKBwtJbzuCf0hfhw4MdpclIRmTfPNH0Al1Dabve1vU0bWEC5mrFKSJiMPVmMgqBFwjytv9oHzMRMZGElDds6ASuGknFZcfoP/vOG3biYfYw==

ARC-Authentication-Results: i=2; mx.microsoft.com 1; spf=fail (sender ip is

40.95.32.140) smtp.rcpttodomain=transbirday.com.br

smtp.helo=nam10-dm6-obe.outbound.protection.outlook.com; dmarc=pass (p=none

sp=none pct=100) action=none header.from=hotmail.nl; dkim=pass (signature was

verified) header.d=hotmail.nl; arc=pass (0 oda=0 ltdi=1)

Received: from BN9PR03CA0498.namprd03.prod.outlook.com (2603:10b6:408:130::23)

by CPWPR80MB6847.lamprd80.prod.outlook.com (2603:10d6:103:1d2::7) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8048.25; Mon, 14 Oct

2024 12:39:45 +0000

Received: from BL6PEPF0001AB59.namprd02.prod.outlook.com

(2603:10b6:408:130:cafe::7a) by BN9PR03CA0498.outlook.office365.com

(2603:10b6:408:130::23) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8048.27 via Frontend

Transport; Mon, 14 Oct 2024 12:39:44 +0000

Authentication-Results: spf=fail (sender IP is 40.95.32.140)

smtp.helo=NAM10-DM6-obe.outbound.protection.outlook.com; dkim=pass (signature

was verified) header.d=HOTMAIL.NL;dmarc=pass action=none

header.from=hotmail.nl;

Received-SPF: Fail (protection.outlook.com: domain of

NAM10-DM6-obe.outbound.protection.outlook.com does not designate 40.95.32.140

as permitted sender) receiver=protection.outlook.com; client-ip=40.95.32.140;

helo=NAM10-DM6-obe.outbound.protection.outlook.com;

Received: from NAM10-DM6-obe.outbound.protection.outlook.com (40.95.32.140) by

BL6PEPF0001AB59.mail.protection.outlook.com (10.167.241.11) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.8069.17 via Frontend Transport; Mon, 14 Oct 2024 12:39:43 +0000

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=KK8UnwpVVia+/RXkFNM2VGfJn3cdn85hFxQzlRqjczMRP07wIeBP79lvJShCSPt3JcoSgrMKjKpnxNRmFgivcobodgOeeBJ/CTbmUPaKWfJrEXc7y2h5li1LXfW+3KVAs5DXOBLV4yp2C8maIOL9CzCpQOGtKU6WOqpic+Cw+2RMT7BhSapmuTjJysam35Adc0UvgTJTiljUf1/Z9YAqel+xmVQD+2R6lSCzbLrPpJZzwDOofd+FaISCqkOsJm9urLJEy8e+xSPdOI4q6xtqI+IJh+H8AOL5589xRKgYaESWkksbmyELDYHuIlfrbfYwANe17xG8PPu+1tKCjUdYQw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=No5c0BZCoa3RV1WlMfU0FA19uq8IoRbPJIKlAb2vQxw=;

b=Uzoi5ATTdHLjRRnDOZAr16ZWP0Vp6tW4zlwsVtxg2Bl0i+Fi7shaK3uTqt9yGr3NUnj3m1X3q8yvOQEGKAwg9LdFEf43/T0+f7bqnobWs3J5El5AEB/H3xHRM42ToiPjqa+Nj4CqbdnsZoyS+2/rOM0C7MSCMsvdpmIJVtvCtpXmRRpPk57URMjhttvC7ScjChYnMUC/94UTk7DFhD8Bstvj9JLcypJhnaY3FHxs0qWKGJogZfZpb+T/nplwRrQc2PTEcXcKzbvjjhQmtKyiFMSom3Rm/BxFIqnEcMdHo67y9oGERecFFwQGhNyoFe0/jU0wn82Td5UbwXzg5OfyBg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

185.127.94.22) smtp.rcpttodomain=transbirday.com.br smtp.helo=imagecars.com;

dmarc=fail (p=none sp=none pct=100) action=none header.from=hotmail.nl;

dkim=none (message not signed); arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=HOTMAIL.NL;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=No5c0BZCoa3RV1WlMfU0FA19uq8IoRbPJIKlAb2vQxw=;

b=bg1grxq/Pt2W1Bb1Vs490atqF37Ct0YbOmTd2HoVfd0UR3XU9F8XCD2eBjZku07mmBhig5Vf0tB4pnL1cxOdCBPZBvZiI/FDRSFO2TA1t4yNga+gZNke9a++R4xRqV8nzpR2HEvAyG8rr0eC6CX2OYCDpv/NFSOaePQdsFr48KEg3etlhnWLKHNEYtQso8cdzXMdpbiCYMtibKfKr5lxC+MP1qvVDep9Qd69a6DTt4zFEQnv7L0xqXb4uqLdLTyH1PKhlXzCQSBtoosYCJScXB4yyrOmCDPmb0njsWLMBY/2avKJ4T91fBnK3tLmDdcUqYUUy1RGzKHebKH4HURhmA==

Received: from SJ2PR07CA0001.namprd07.prod.outlook.com (2603:10b6:a03:505::11)

by SCYP152MB6572.LAMP152.PROD.OUTLOOK.COM (2603:10d6:300:ff::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8048.26; Mon, 14 Oct

2024 12:39:36 +0000

Received: from SJ1PEPF000023D4.namprd21.prod.outlook.com

(2603:10b6:a03:505:cafe::c) by SJ2PR07CA0001.outlook.office365.com

(2603:10b6:a03:505::11) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8048.27 via Frontend

Transport; Mon, 14 Oct 2024 12:39:35 +0000

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 185.127.94.22)

smtp.helo=imagecars.com; dkim=none (message not signed)

header.d=none;dmarc=fail action=none header.from=hotmail.nl;

Received-SPF: Fail (protection.outlook.com: domain of imagecars.com does not

designate 185.127.94.22 as permitted sender) receiver=protection.outlook.com;

client-ip=185.127.94.22; helo=imagecars.com;

Received: from imagecars.com (185.127.94.22) by

SJ1PEPF000023D4.mail.protection.outlook.com (10.167.244.69) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.8093.1 via Frontend Transport; Mon, 14 Oct 2024 12:39:34 +0000

Content-Type: multipart/alternative; boundary="a37c8235046de7023791f56c6a35d7e8fa67e9fbb5e06a2b5d0be3c96a8a"

From: "NETFLI-X"

To: chaybilwarga1@transbirday.com.br

Subject: We have a surprise from Netflix

Date: Mon, 14 Oct 2024 12:39:32 +0000

MIME-Version: Version-HTML

Message-ID:

<56333db5-d7ae-4a0b-a548-7e188c73213b@SJ1PEPF000023D4.namprd21.prod.outlook.com>

X-EOPAttributedMessage: 1

X-MS-TrafficTypeDiagnostic:

SJ1PEPF000023D4:EE_|SCYP152MB6572:EE_|BL6PEPF0001AB59:EE_|CPWPR80MB6847:EE_|CPWPR80MB6396:EE_

X-MS-Office365-Filtering-Correlation-Id: 620fb29d-f6a1-418d-a478-08dcec4d47c1

X-MS-Exchange-SenderADCheck: 0

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam-Untrusted:

BCL:0;ARA:13230040|69100299015|82310400026|35950700016|34020700016|376014|61400799027|1032899013|4022899009|7093399012|48200799018|15920700032;

X-Microsoft-Antispam-Message-Info-Original:

=?us-ascii?Q?cHGM70+p16bUSOAXI2wo0Jzzu+qMiaro2KV0iE2rb4Mbpl3+T+QPJuETdXME?=

=?us-ascii?Q?/XJY0uH4nb4ZirlCKduRMBCfMP06x4DcXmBJsu9Qfrumu91Pybf1Mvh/dGle?=

=?us-ascii?Q?3XFXn2hGfgycBbc5epAl75r6hZFzpbPPDDKPL2bMnnqX5WrV38zyZ4a5Hr3F?=

=?us-ascii?Q?O4i4ZpT/5jy4QyNRqDv33dqia4sGT02twQuXfYuySJFhDWCKzT58Mxd7Srk+?=

=?us-ascii?Q?0LMZLuV0rMU6H19Uv+FimnUNQgpWzLYj0h5ntJOqDRpt3l2GYFRpyiTtOlrm?=

=?us-ascii?Q?34VVpxff3ccsqvmZsUepXmcHva6MzHwWIG8ignwLz2oaxDua700QeLJv5KU+?=

=?us-ascii?Q?R2gITyrrXSvNXN0hzIbd37GXBrV5OBG5trm/1qA+y7+F/Z2cil9ULTqP8KNc?=

=?us-ascii?Q?J4skV7NK5AdrQZEItnU6KtOu6kMRiRLmgiJFkQsmW+f6G+qOK+CD6vDjnQ1L?=

=?us-ascii?Q?ZkrxqvdXNyNmF2sjSqHerLsM0rXnQOtQFiyvqHbHhF7eyrXX7Kr02wWUGyQg?=

=?us-ascii?Q?IuRnkIZEzc0L1L/TqjomrvbqA+/2d5tDCZqBjTqTqJM/pzBVGwpN+QW7EYXF?=

=?us-ascii?Q?lfqPiENElXEy0TDbJ1UVzn+wFwnynIIfHidBn2yrPeWLk3v33PsehS7qsgJu?=

=?us-ascii?Q?2A2/PD4VIazUTALDeY802Mg/ebl6sj3lMO5O7XZLLCQ1/SfrDLwVpsBbRuFb?=

=?us-ascii?Q?WYkK/0n2+PNOaHM1JTGlq1lxue5oOKBQ+anzKFlo7aUD1CgUlAnxjadE1c6L?=

=?us-ascii?Q?lkr+IMD1RWqL+tIZFsLfgsU0r675ao5KEmgb/VIAlcBFca8dMFmZlcKkeC/C?=

=?us-ascii?Q?u4wLu+tXxPXNyheww+bElXggH0j8hYkUdg2UWJqlewL36T4t+M9TLPpyqpts?=

=?us-ascii?Q?MODKXAeaQVUIU6gg7loLxEsj0fElwRejtDz9bvCCEldApbjd4/HMKoJPLCy1?=

=?us-ascii?Q?gWfE5O595cXXY/2VlKtGmiHqyyiQ00xfUHbKUgy0dtUtBEu+nlg9cxqZ0wVT?=

=?us-ascii?Q?JwCdBxQz7/TrAUCiql2Xx/BVSecAXpe31jWa9ATrpgr00ISLI80FOIq4hnnr?=

=?us-ascii?Q?htJar5q2GlwBEpnOfTMFeJGTTOTrB4WxAyPEwO2P6P/d7rUMEn8VFdV6FAvM?=

=?us-ascii?Q?NU8iBkrMXAI4tfwgkrSpPgoljTWlA9khLOWC84ltbZE+pOoP/jK3xZv0OWhd?=

=?us-ascii?Q?eRXiDftpmFOE/rmdUHaR6yazHjShW4bpP3zzwA8HhiyKlVANWDIgeINmNiGf?=

=?us-ascii?Q?fKw3HHbVX+gGyM/brrqdyD2J3iMJM9HpE6acu3InB9Rau7BPsnXefNs1o/h1?=

=?us-ascii?Q?3vg3FAsMf/Us/ViprKmNV1yn?=

X-Forefront-Antispam-Report-Untrusted:

CIP:185.127.94.22;CTRY:DE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:imagecars.com;PTR:smart1.mysynology.net;CAT:NONE;SFS:(13230040)(69100299015)(82310400026)(35950700016)(34020700016)(376014)(61400799027)(1032899013)(4022899009)(7093399012)(48200799018)(15920700032);DIR:OUT;SFP:1023;

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SCYP152MB6572

X-EOPTenantAttributedMessage: 81b3d8e6-e3de-49dc-ad15-2a2a056137a8:0

X-MS-Exchange-Transport-CrossTenantHeadersStripped:

BL6PEPF0001AB59.namprd02.prod.outlook.com

X-MS-Exchange-Transport-CrossTenantHeadersPromoted:

BL6PEPF0001AB59.namprd02.prod.outlook.com

X-MS-PublicTrafficType: Email

X-MS-Office365-Filtering-Correlation-Id-Prvs:

4640c653-7515-4799-1ffa-08dcec4d4269

X-LD-Processed: 81b3d8e6-e3de-49dc-ad15-2a2a056137a8,ExtAddr

X-Microsoft-Antispam:

BCL:0;ARA:13230040|61400799027|376014|7416014|48200799018|35042699022|9140799003|7093399012|69100299015|4022899009|1032899013|47022699003|15920700032;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?QWJ1THNwTjhRZU5KdWJKVnpuYTFzb2pnWUpmTnJSamtFMW40Qk9zT01sT3Nn?=

=?utf-8?B?Mk9CR3JTdnF4RURhci9uMFBKQjlnT1RmQzdkcUxzanU3ZjlKT0lyL3VjQVRa?=

=?utf-8?B?bDh2cS9xWHNpVmsrOFdXTHQ5VDBwc2kvcElPSm1leFFac29KVHpUUXUvTUhi?=

=?utf-8?B?Y1UyUE11K1FuVkJ4bTRWeTZXV2g0UkxuR3pkT3RvU3ljTm1GVnR1ZVRHeDNx?=

=?utf-8?B?MHVZVGxjOXhjNTQvNitzck1vRDhBZFZYdnQ3MzZNbjdCMW9kRysramRKbmJv?=

=?utf-8?B?NVNLaHBaN1hVK1kzdDR4cG5sTTh0N3Rub2lrbzVZZGY1a3A3Q2h2VHk5d2F2?=

=?utf-8?B?UnBNdkE5SW1jWUpBVGg2U29YamdRbGYwVEk0azNzQ1YrL1Y2NGFkSFcxUCtV?=

=?utf-8?B?SzRrZThDK3RhUmNZdExqakNxQllZWk45MUdaZCtMS3paczRLSFJ6VEh3ZWZZ?=

=?utf-8?B?V2plVGhwQlQ4MTB5Wk83dUg1SjROelJJM2FvNVFzek9kYXFLdFE0bEJXZm1o?=

=?utf-8?B?cEhPb2h6TXRVSGE4K0N2ZGJpcXU4Z25rM25pUFRyZ0lOaU5xaEQyTjBSNm5F?=

=?utf-8?B?V0xvMjlaTjhYWjJOSnl3WTZDNnZkVVJtZThYeWdHM2V5RmVhZi9JaVk0ajJz?=

=?utf-8?B?QUV3V281VUUzODBFWTFTNzJHMStER1FyRTBhd01yZXRpOGFheU9TR2l6a1Jq?=

=?utf-8?B?aW1aaWR1Wml4NVdCOTJwRnZjbElIMEUwS1JtMyt3VTJNcjlKVzVDV2ZLS2Mv?=

=?utf-8?B?eFN5SThFc3BndGZ4MzQ3QVAraEpaQXpEOEZoVWtKeEVzN25aMXZLSUdlY3BM?=

=?utf-8?B?ekdtSXM2LzM5ODN5R1l2N0plWGRIb2RkM3ZZdnlKem01NzBwTEVWRjdPMUhl?=

=?utf-8?B?YnhoS3pLSCtFVjhLY0ZEVTZMUXFTLzZ0RldqbW02QVFaV1Z0ZnBiRDRZK2Ez?=

=?utf-8?B?bHZSU3k4Rnd6UjdSQXA5UGFwejBpUG9INGxnN20ybEVqVHptYWUyZlpDUEU4?=

=?utf-8?B?STg2RTR6NU90eWVSRUxUZlJ1bGJSTnJ0djFDZDRuWmU3bVdoZkN4Tlhsc1dY?=

=?utf-8?B?bmFGUnprZVZDbkFPaVpUem5QRDBaa2dKd2h6WmRKMEJJT1BMTlBnS3BmUFNy?=

=?utf-8?B?ZUVJM0ViNUpoemZzS3BNeEh5QWxUM2t4bjNBZTlERzBCV2I1SzNaellydXZy?=

=?utf-8?B?dWVyYVRTV0VtL3llMmM5cTFjTVFqa2g3NjdPaExWUmNsVDBVR2UwWHAxbGhK?=

=?utf-8?B?bHBRRVlZWXFDMGo4c0ZSbm5ZSDZXSmlvZkFqMzhMcEg2YUx5WjRtWDZqZXYw?=

=?utf-8?B?c1FDbWtFR3NnMkVhcXMxUFd1WmJnbHk0NzA3NWo4NXFBWFd1ZEVqNnJ3MWVS?=

=?utf-8?B?YUQzMzdldTJLYlBXZ1FUV1RzYTltU2p4RitxTGUzbTE5Z0ZhRUpIeGkrSDg3?=

=?utf-8?B?bnVHRm9rME9CWTVlaUVaMGdMaW1aYTVwSU1qenUrR2gvV05vQktRTmVPWHVS?=

=?utf-8?B?UGNYd1RFL3ZaOWIybm5jdUwyVnREYXkyb2FsUlVHWlRmL3BVZmNIQ0VHV0VH?=

=?utf-8?B?R0dwSVlwRGhuZlFIekdtN1RCUUtwTm5yM3B4UnIzaCtiVytudXdLUml4T0Fr?=

=?utf-8?B?OGptUFNVRlpGRGxuVWltSjJ1UExYUWdWTWJNRXh0NFBObktFUDQzeCt6aWg5?=

=?utf-8?B?c1UxUnZNS0VuNDZKdE1hVHNRZ0ZYZDZKV2dlT3F2WW5PUU50QmhHMVdLWU1D?=

=?utf-8?B?RTgzVmdodnNBY3dsWFZ6NGY3TnBGb1RxdlowU015anM4ZllNRGFqSDk3aS9T?=

=?utf-8?Q?9vb8Yre3BwtmbXqnfkygjaLE2AFWWcC2lGnb4=3D?=

X-Forefront-Antispam-Report:

CIP:40.95.32.140;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:NAM10-DM6-obe.outbound.protection.outlook.com;PTR:mail-dm6nam10rlhn2140.outbound.protection.outlook.com;CAT:NONE;SFS:(13230040)(61400799027)(376014)(7416014)(48200799018)(35042699022)(9140799003)(7093399012)(69100299015)(4022899009)(1032899013)(47022699003)(15920700032);DIR:OUT;SFP:1501;

X-ExternalRecipientOutboundConnectors: 81b3d8e6-e3de-49dc-ad15-2a2a056137a8

X-Auto-Response-Suppress: DR, OOF, AutoReply

X-OriginatorOrg: transbirday.com.br

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Oct 2024 12:39:43.3246

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 620fb29d-f6a1-418d-a478-08dcec4d47c1

X-MS-Exchange-CrossTenant-Id: 81b3d8e6-e3de-49dc-ad15-2a2a056137a8

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=2d839883-f656-4852-9564-089c314ebb96;Ip=[185.127.94.22];Helo=[imagecars.com]

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-CrossTenant-AuthSource:

BL6PEPF0001AB59.namprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-Transport-CrossTenantHeadersStamped: CPWPR80MB6396

X-Spam_score: 14.3

X-Spam_score_int: 143

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: View this post on the web at https://maryamhenein.substack.com/p/paradise-lost-and-other-news-with

Follow: Twitter [ https://substack.com/redirect/92b9306d-5476-4e51-bad5-9e07dcdcd2f9?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw

] | Instagram [ https://substack.com/redirect/fa1 [...]



Content analysis details: (14.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.127.94.22 listed in will-spam-for-food.eu.org]

[185.127.94.22 listed in will-spam-for-food.eu.org]

[185.127.94.22 listed in will-spam-for-food.eu.org]

[185.127.94.22 listed in will-spam-for-food.eu.org]

[185.127.94.22 listed in will-spam-for-food.eu.org]

[185.127.94.22 listed in will-spam-for-food.eu.org]

[185.127.94.22 listed in will-spam-for-food.eu.org]

[185.127.94.22 listed in will-spam-for-food.eu.org]

[2603:10b6:a03:505:cafe:0:0:c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:cafe:0:0:c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:cafe:0:0:c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:cafe:0:0:c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:cafe:0:0:c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:cafe:0:0:c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:cafe:0:0:c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:cafe:0:0:c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[40.95.32.140 listed in will-spam-for-food.eu.org]

[40.95.32.140 listed in will-spam-for-food.eu.org]

[40.95.32.140 listed in will-spam-for-food.eu.org]

[40.95.32.140 listed in will-spam-for-food.eu.org]

[40.95.32.140 listed in will-spam-for-food.eu.org]

[40.95.32.140 listed in will-spam-for-food.eu.org]

[40.95.32.140 listed in will-spam-for-food.eu.org]

[40.95.32.140 listed in will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:7a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:7a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:7a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:7a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:7a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:7a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:7a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:7a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:1d2:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:1d2:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:1d2:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:1d2:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:1d2:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:1d2:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:1d2:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:1d2:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[52.100.173.234 listed in will-spam-for-food.eu.org]

[52.100.173.234 listed in will-spam-for-food.eu.org]

[52.100.173.234 listed in will-spam-for-food.eu.org]

[52.100.173.234 listed in will-spam-for-food.eu.org]

[52.100.173.234 listed in will-spam-for-food.eu.org]

[52.100.173.234 listed in will-spam-for-food.eu.org]

[52.100.173.234 listed in will-spam-for-food.eu.org]

[52.100.173.234 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.127.94.22 listed in dnsbl.ahbl.org]

[185.127.94.22 listed in dnsbl.ahbl.org]

[185.127.94.22 listed in dnsbl.ahbl.org]

[185.127.94.22 listed in dnsbl.ahbl.org]

[40.95.32.140 listed in dnsbl.ahbl.org]

[40.95.32.140 listed in dnsbl.ahbl.org]

[40.95.32.140 listed in dnsbl.ahbl.org]

[40.95.32.140 listed in dnsbl.ahbl.org]

[52.100.173.234 listed in dnsbl.ahbl.org]

[52.100.173.234 listed in dnsbl.ahbl.org]

[52.100.173.234 listed in dnsbl.ahbl.org]

[52.100.173.234 listed in dnsbl.ahbl.org]

[2603:10d6:103:1d2:0:0:0:7 listed in]

[dnsbl.ahbl.org]

[2603:10d6:103:1d2:0:0:0:7 listed in]

[dnsbl.ahbl.org]

[2603:10d6:103:1d2:0:0:0:7 listed in]

[dnsbl.ahbl.org]

[2603:10d6:103:1d2:0:0:0:7 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:0:0:0:23 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:0:0:0:23 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:0:0:0:23 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:0:0:0:23 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:505:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:505:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:505:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:505:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:505:cafe:0:0:c listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:505:cafe:0:0:c listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:505:cafe:0:0:c listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:505:cafe:0:0:c listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:cafe:0:0:7a listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:cafe:0:0:7a listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:cafe:0:0:7a listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:cafe:0:0:7a listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.127.94.22 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.127.94.22 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.127.94.22 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.127.94.22 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.100.173.234 listed in list.dnswl.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.100.173.234 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[hugodeodc_tm2009(at)hotmail.nl]

0.3 LONGWORD BODY: Uses overlong words

0.6 MEGALONGWORD BODY: Uses really overlong words

0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags

1.5 MPART_ALT_DIFF_COUNT BODY: HTML and text parts are different

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.0 BOGUS_MIME_VERSION Mime version header is bogus

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.7 FORGED_SPF_HELO No description available.

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} We have a surprise from Netflix



--a37c8235046de7023791f56c6a35d7e8fa67e9fbb5e06a2b5d0be3c96a8a

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable



View this post on the web at https://maryamhenein.substack.com/p/paradise-lost-and-other-news-with



Follow: Twitter [ https://substack.com/redirect/92b9306d-5476-4e51-bad5-9e07dcdcd2f9?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ] | Instagram [ https://substack.com/redirect/fa101819-410a-494a-bf52-3d790642fa9f?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ] | Telegram [ https://substack.com/redirect/43a44c10-cd80-4a75-bd06-31fdc9b6a2da?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ] | Gab [ https://substack.com/redirect/3eb2e703-3447-4207-95a8-b06f0fc5508b?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ] | Facebook [ https://substack.com/redirect/bd396917-824e-4c52-b2d1-af649b8302e2?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ]

Truth Lives Here: Rumble [ https://substack.com/redirect/31001862-eb2c-4ca7-afea-9710ed4b4e1f?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ] | Rokfin [ https://substack.com/redirect/303055d2-2f6c-4d81-893e-3414eaaab0bd?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ] | Odysee [ https://substack.com/redirect/b6daa9fb-871e-497a-bf7a-94cc418afd77?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ] | Brighteon [ https://substack.com/redirect/0142855a-ebe0-478e-a731-718278adf03d?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ] | Bitchute [ https://substack.com/redirect/2df6377c-bdd3-4477-8d94-49b312eb0ae4?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ] | YouTube [ https://substack.com/redirect/bc120b83-f427-461e-8c82-b4261e641cbc?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ]

Websites: MaryamHenein.com [ https://substack.com/redirect/baf631e6-c113-449c-988d-76a22e4dc20b?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ] | HoneyColony.com [ https://substack.com/redirect/9c3d81c8-3d76-4d37-9095-cb830991fe69?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ]

Chef and independent news stalwart Ryan Cristián of The Last American Vagabond [ https://substack.com/redirect/783eabd8-d237-4fb7-9fa5-3d80857416fa?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ] will join me on Truth Lives Here [ https://substack.com/redirect/31001862-eb2c-4ca7-afea-9710ed4b4e1f?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ]on Friday, October 11, 2024, at 3 EST. Join us!! Cristian has been on the front lines, reporting the ongoing Rona Regime with detail and consistency. Like me, he has a passion for the Truth.

As a recipient of the Serena Shim Award For Uncompromising Integrity In Journalism, he understands that Americans want their news to be transparent, devoid of the opulence frothed out by today’s corporate media. A cultured and insightful man with a worldly sense, Ryan’s unjaded approach offers common sense to the individual racked by the ambiguous news cycle. This vicious and manipulative merry-go-round keeps trenchant minds at a manageable distance from the truth. Avid writer & editor by day and truth seeker by night, Ryan’s reality defines what it means to be current.

Cristian has experience with weather warfare and the undeniable reality of geoengineering in all its forms, including nanotechnology, particularly smart dust.

In 2020, a virus kept us indoors. In 2025, if you still have a home left, you will want to stay indoors as they turn up their climate change hoax, grab land, mess with the elections, and turn cities into smart cities. Consider that Tampa had plans to become a smart city. Mayor Jane Castor recently told a CNN reporter that if people don’t evacuate, they can prepare to die.

Wow.

And why is the National Oceanic and Atmospheric Administration (NOAA) removing information from its website if weather modification isn’t happening? They’ve removed at least 103 pages of weather modification reports that were previously listed on their site. In addition, they removed access to the NEXRAD radar inventory, which listed the locations and information for all of the NEXRAD stations throughout the US.

There is also a Weather Modification Association. [ https://substack.com/redirect/9cac758f-5d5d-47c3-a06b-c98af0dfa9fa?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ]

We will cover the news tomorrow with Cristian to see what is on his radar and speak about how weather events are being manufactured utilizing this technology to justify climate action when it’s really experimentation. For some, this may seem outlandish, but I challenge you to look at the reality of the scientific literature, the verifiable programs in place, and the countless public admissions from those in positions of power, and realize just how many now admitted “conspiracy theories” were denied as false, up until they weren’t.

I briefly wrote about weather warfare and HAARP in my Substack Post.



Unsubscribe https://substack.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.1vHGymWE21soWWVOJg5eDN9w31aljGOo6QQ04aZEJe4?

--a37c8235046de7023791f56c6a35d7e8fa67e9fbb5e06a2b5d0be3c96a8a

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable




llbar-width: thin;">Paradise Lost &=<br /><br /> ; Other News With Ryan Christian of TLAV






Your Netflix account has expired






=09






3D""
"#map1707127651310">


>

=09=09=09=09=09
t=3D"" href=3D"https://dyos0x2kt1xcm.cloudfront.net/yuutazw5a0onfkmreyuutazw5a0onfk32imrew5a0onfkmreyuutazw5a0o#cl/4452_md/1/10218/129/0/0" target=3D"_self">

=09=09=09=09=09
" alt=3D"" href=3D"https://dyos0x2kt1xcm.cloudfront.net/yuutazw5a0onfkmreyuutazw5a0onfk32imrew5a0onfkmreyuutazw5a0o#oop/4452_md/1/10218/129/0/0" target=3D"_self">

=09=09=09=09=09