Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 25 Apr 2022 16:36:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from )
id 1nj7Iu-0000s0-NE
for dave@doctor.nl2k.ab.ca;
Mon, 25 Apr 2022 16:35:36 -0600
Resent-From: The Doctor
Resent-Date: Mon, 25 Apr 2022 16:35:36 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f68.google.com ([209.85.218.68]:41561)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from )
id 1nj677-000MkJ-HL
for doctor@nl2k.ab.ca;
Mon, 25 Apr 2022 15:19:26 -0600
Received: by mail-ej1-f68.google.com with SMTP id dk23so8795100ejb.8
for ; Mon, 25 Apr 2022 14:19:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=p1ezrjCIwvHcj/9iMkEpsL23IcuURvOXCdC78oGP9Ow=;
b=HhQKACVzdxhsm5keDPj4DFOgZFBgfyAynetSVPLKhZZ0oqcxEojuFS/rJcduOqiXDD
+VveF2y5YD/F5mobu4+PSf5IMVAVSyOBczF+d1C+pa8760q+0EQ5YBpxmcwu+jyeEaE3
4pZC80Xo7rkvSTYad0cbiiYm56GuEohqKudRmySQC3JNEtD6JssYjvqmpSsWlbRx9MMz
jZ9QgxeJbgI3vBxjxseHbBwiObQjnPRdGdzes8wnjdkQMauRXjPH5HcJOn2cTIlbNb6B
ZBNNiCuSKgiCXKqoo0VQ8S2JvCNgCYbcNZ5CVlWniFsVjsras1N0EwJqSg45fO5ceWCc
YBog==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=p1ezrjCIwvHcj/9iMkEpsL23IcuURvOXCdC78oGP9Ow=;
b=d1bEYRZBHzEp5WLjEkwRCRA7RksXuXy/IGSgUMhRz64IC5dTZWLnLRHusl+h0Nl1oK
deO5dSVmUdz8ILahrPSwKaMXI8pa+fBaMFVsWDZyCUBl6qAWvVfeFmZrqzBM3NHCGdiJ
jjHWZ4r4S3D/imXc8NQKbdzQ+yOtHhRfSUdij2bOavrHQj2G3xpNcQ6KKRCe+LuICqHs
8xn/qutlfBoFnDnnf5w8kh3tIgxrJYAILzghwQkiVEzYw6y6vBOBFjVvr+OCTgZxRDHd
5kBE+QCC4oRtaPn/N3u2gvd+A5W/dKNtNQXHve18MPjeoVnwtGMPJIGUcOzLvsa3E97H
GY0Q==
X-Gm-Message-State: AOAM531odHSm8Zq2GPa/bLsQO6Ax5SCj2XI4S7Y8SlypPIiTLHSv+5gP
q/3pr15XXlm9Gk/sYXbdbf5/9wl6/1y9k16CDk0=
X-Google-Smtp-Source: ABdhPJwE1cxn3mU12ycF/3o0QnxZ0k++/HuiDZW3McZVRdvR8wS8ZQN9cmZrPgv4VJBtlrITWP3NkStRZjwi6KCYJmQ=
X-Received: by 2002:a17:907:3e10:b0:6ef:f04b:c21e with SMTP id
hp16-20020a1709073e1000b006eff04bc21emr18162002ejc.747.1650921537850; Mon, 25
Apr 2022 14:18:57 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6f02:6153:b0:1a:6e12:94e1 with HTTP; Mon, 25 Apr 2022
14:18:56 -0700 (PDT)
Reply-To: mrpeterfranklin12@gmail.com
From: Peter franklin
Date: Mon, 25 Apr 2022 14:18:56 -0700
Message-ID:
Subject: Re. Your financial activities.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@nl2k.ab.ca
X-Spam_score: 11.2
X-Spam_score_int: 112
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- peter franklin (head and chief constable ) the international
police(Interpol) national central bureau (NCB UK) http://www.interpol.int/
NCJ Number: 47731 Re. Your financial activities. I am peter franklin head
and chief constable. international police(Interpol UK}. This organization
is set up to fight against, corruption, crime against children, cybercrime,
drugs, environmental fast [...]
Content analysis details: (11.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.68 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[mrpeterfranklin12[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[johnfranciskellywhitehouse34[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[johnfranciskellywhitehouse34[at]gmail.com]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
3.6 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Re. Your financial activities.
--
peter franklin (head and chief constable )
the international police(Interpol)
national central bureau (NCB UK)
http://www.interpol.int/
NCJ Number: 47731
Re. Your financial activities.
I am peter franklin head and chief constable. international police(Interpol UK}.
This organization is set up to fight against, corruption, crime
against children, cybercrime, drugs, environmental fasted, financial
crime, fugitives, maritime Piracy, organized crime, people smuggling,
pharmaceutical crime, terrorism, trafficking in human beings,
trafficking in illicit goods, vehicle crime, wanted person, war crime,
weapon, works of art etc. in the global community.
Recently, we have been working closely with secret agencies around the
globe trying to stop internet fraud that is aimed at unsuspected
victims in the United States of America, Canada and other parts of the
Europe and Asia
We have been informed that you have been wiring out money just to
receive huge funds.
>From our investigations we suspected that you have been dealing with
some fraudster. they will disappear once they are done collecting all
your money. an example of their fraudulent operations includes:
Check fraud
lottery promotion
online dating scam
online sales scam
online loan fraud
and the like of impersonation
e.t.c
Recent review has it that this office is been impersonated and we
really need your assistance to figure things out and help you receive
your long awaiting fund. I therefore oblige that you respond to this
e-mail, Your money could be paid back to you , if only you are ready
to co-operate with us by given us more information on the activities.
more details would be given to you once your response is received.
Peter franklin
International police UK(Interpol)
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 25 Apr 2022 15:06:04 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from )
id 1nj5tr-000MAI-V5
for dave@doctor.nl2k.ab.ca;
Mon, 25 Apr 2022 15:05:39 -0600
Resent-From: The Doctor
Resent-Date: Mon, 25 Apr 2022 15:05:39 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yb1-f181.google.com ([209.85.219.181]:44024)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from )
id 1nj1EV-00083N-48
for sales@nk.ca;
Mon, 25 Apr 2022 10:06:44 -0600
Received: by mail-yb1-f181.google.com with SMTP id g28so8537298ybj.10
for ; Mon, 25 Apr 2022 09:06:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:references:in-reply-to:from:date:message-id:subject:to;
bh=X4ysV4AaYEHv6/VoP/Wo5N+lM4+DT6Z4u2Kxmv0bvY8=;
b=a//nE72k7XQDQ4PMhrnZo0FTazdQhDm7CpL4MllcyEW76muVbUb3yINbuDE+1+ODZo
7oixlQRaqu3WLg8PY30eQD4cl3bC/E4Hben5lH/HQOoJWf94wYiC5dpXzHBjVZxc2Qcp
eYQ4fQ5AMBiJIpKLP9Py2IM1V4FYSvkoeFy7AS3sPoJhOTP0Y2e9Mk1apSkCQJxGhM2R
jslHHQAAluMscAIsj78exfrv32XVdmRP7eWqQl5p0mMvYAMuPhSE2Z0qs9WTzafY+OqJ
LFWu0Jyg7kFQOjx2J1L4G7kMSaDY3u/tUqADxuNjp/yBZfbDy58TjG97rSxi380nju3H
8tNQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:references:in-reply-to:from:date
:message-id:subject:to;
bh=X4ysV4AaYEHv6/VoP/Wo5N+lM4+DT6Z4u2Kxmv0bvY8=;
b=4WVMnLHdpfkd2tac3B0GGHSVR5joTsZ0qm6JjtGWwNDDesFP5/5ajcnEFFvZU+BDzg
5adn37rgItYK/CnY9k9seNOKqC2HG57MXAp/dXAkX2Hnza17P9vT7tv/jIZoH4uuD1fp
FS64/G8c4yQPkFvIoqM57uniMjxh6K5M8uz1f7Izt0IDyYlZ6neEmkReC1LoVDwFHLWQ
8UChgl/CmjX3EtqcDrgobFHsZE9b6lcstXPCDujo8a5uWNM8teZVTIpLc3/KZCWFGlJT
DxsvbVjODXXbVnreUBg8x04TTijgWBgIaRFaH5sRK0wFvwRkxl/r+na/lS8s1AUdNHEM
3q6w==
X-Gm-Message-State: AOAM531L44gKIGbit0eQd874UGriSILa5+pl00WjvNTPJHnJS0svvCxv
B+ssZql4AHSmBOFDrjA/Ujpny7cRxUJPvlAG+OHe942DPXE4
X-Google-Smtp-Source: ABdhPJzUFxmzNklXbdWMyOr/mlZTfOA5X7d3n2G3LKhyTbEF5ZoLrUAW5YWnf3ExxY3j/8+BN8QnRUzW+k4L8+uBM6s=
X-Received: by 2002:a25:1f0a:0:b0:645:75c7:52d5 with SMTP id
f10-20020a251f0a000000b0064575c752d5mr15934545ybf.440.1650902755477; Mon, 25
Apr 2022 09:05:55 -0700 (PDT)
MIME-Version: 1.0
References:
In-Reply-To:
From: ANTHONY KENNETH
Date: Mon, 25 Apr 2022 17:05:43 +0100
Message-ID:
Subject: Re: Edmonton Computer Support
To: sales@nk.ca
Content-Type: multipart/alternative; boundary="0000000000004c8c5705dd7cc06d"
--0000000000004c8c5705dd7cc06d
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hello
Good morning
This is the final mail from our side on web domain
www.EdmontonComputerSupport.com
Our team has reviewed the price of the domain.
You can now get the domain for $300 as a final offer .
To get the domain now, Go to www.EdmontonComputerSupport.com
Regards
On Fri, 22 Apr 2022, 7:25 pm ANTHONY KENNETH,
wrote:
> Hello,
> I hope all is well with you.
>
> I sent you an email yesterday, but received no response. We'd like to kno=
w
> if there's any interest in this.
>
> The domain can be developed or redirected to your primary website to
> increase exposure with its keywords and extend online presence in Edmonto=
n
> and its surroundings.
>
> We've also slashed the price to just $400.To get it now, go to
> www.EdmontonComputerSupport.com
>
> Please contact me if you have any more questions!
>
> I eagerly anticipate your response .
>
> Regards
>
> On Thu, 21 Apr 2022, 6:06 pm ANTHONY KENNETH,
m>
> wrote:
>
>> Hello,
>> Good morning
>>
>> The premium domain name www.EdmontonComputerSupport.com is now
>> available for sale through the domain marketplaces (Dan.com and GoDaddy.=
com)
>>
>> The domain can be developed or linked to your current website to improve
>> online visibility and capture more targeted clients in Edmonton and
>> surrounding areas.
>>
>> Additionally, if someone searches for "Edmonton Computer Support" in
>> their browser, your firm will appear first.
>>
>> It is available for $499
>>
>> You can take immediate ownership by visiting
>> www.EdmontonComputerSupport.com
>>
>> Best Regards,
>> Anthony Kenneth
>> Geo Domain Expert
>> =E1=90=A7
>>
>
--0000000000004c8c5705dd7cc06d
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Hello
Good morni=
ng=C2=A0
This is the fin=
al mail from our side on web domain
upport.com">www.EdmontonComputerSupport.com=C2=A0
">
Our team has reviewed the price of the domain=
.
You can now get the do=
main for=C2=A0 $300 as a final offer .=C2=A0 =C2=A0 =C2=A0
"auto">
To get the domain now, Go to
http://www.EdmontonComputerSupport.com">www.EdmontonComputerSupport.com=
=C2=A0
Regards
v>
On F=
ri, 22 Apr 2022, 7:25 pm ANTHONY KENNETH, <
eth748@gmail.com">anthonykenneth748@gmail.com> wrote:
kquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #cc=
c solid;padding-left:1ex">
Hello,
<=
div dir=3D"auto">I hope all is well with you.
=
div>
I sent you an email yesterday, but received no respon=
se. We'd like to know if there's any interest in this.
r=3D"auto">
The domain can be developed or redir=
ected to your primary website to increase exposure with its keywords and ex=
tend online presence in Edmonton and its surroundings.
o">
We've also slashed the price to just $40=
0.To get it now, go to
arget=3D"_blank" rel=3D"noreferrer">www.EdmontonComputerSupport.com=C2=
=A0
Please contact me if=
you have any more questions!
auto">I eagerly anticipate your response .
>=C2=A0Regards
=
On Thu, 21 Apr 2022, 6:06 pm ANTHONY =
KENNETH, <
k" rel=3D"noreferrer">anthonykenneth748@gmail.com> wrote:
<=
blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px=
#ccc solid;padding-left:1ex">
Hello,
Good morning
<=
br>The premium domain name
m" rel=3D"noreferrer noreferrer" target=3D"_blank">www.EdmontonComputerSupp=
ort.com =C2=A0is now available for sale through the domain marketplaces=
(Dan.com and GoDaddy.com)
The domain can be developed or linked to =
your current website to improve online visibility and capture more targeted=
clients in Edmonton and surrounding areas.
Additionally, if someone=
searches for "Edmonton Computer Support" in their browser, your =
firm will appear first.
It is available for $499
You can take=
immediate ownership by visiting
ort.com" rel=3D"noreferrer noreferrer" target=3D"_blank">www.EdmontonComput=
erSupport.com =C2=A0
Best Regards,
Anthony Kenneth=C2=A0
iv>
Geo Domain Expert
=3D"width:0px;max-height:0px;overflow:hidden" src=3D"https://mailfoogae.app=
spot.com/t?sender=3DaYW50aG9ueWtlbm5ldGg3NDhAZ21haWwuY29t&type=3Dzeroco=
ntent&guid=3Dde38c1db-94a0-42a9-87af-112b9271d45e">
ff" size=3D"1">=E1=90=A7
--0000000000004c8c5705dd7cc06d--
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 24 Apr 2022 16:17:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from )
id 1nikXL-000PLH-RO
for dave@doctor.nl2k.ab.ca;
Sun, 24 Apr 2022 16:16:59 -0600
Resent-From: The Doctor
Resent-Date: Sun, 24 Apr 2022 16:16:59 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pg1-f178.google.com ([209.85.215.178]:37853)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from )
id 1nieuw-000JQZ-1Z
for root@nk.ca;
Sun, 24 Apr 2022 10:17:04 -0600
Received: by mail-pg1-f178.google.com with SMTP id 15so3075649pgf.4
for ; Sun, 24 Apr 2022 09:16:20 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=Sz/uTvOc0gNmc74MGKA7yKeLqyFqD/joiI1SxwVZLms=;
b=U8HCIrKeXgcOVOE47Ipc/hUV2Cg/I8qn5IkL3l/5FdhMQTXOgaIfQPO+pDwCpvT+vk
ltLGo+777rnU5ZQfhjdJYM80RL7yp7NYL9u1wyRUd5Q6rNmTx52Eo6A0W7yQd3q/v/kN
SW4YnaH/EOnYeDovYY1+tiOXyaKChfYepi0a0k/V5yLnlqlram4SSJ51NghR7cRdW6Qc
EuY25eoCZAqHOAbctj8X2Are5uec9SmPPQuHZ3kcH6Ke7CozBIAPIAZYrAQJR0ru5l0F
URaT4Kx6HrMg0aHKIN7fMcyau+ybLE+ioDlOmIsWQ6gHkNznYujcqcZEIImGJVndjKq4
jFUA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=Sz/uTvOc0gNmc74MGKA7yKeLqyFqD/joiI1SxwVZLms=;
b=POPqTuw4uP+ItmFMDabbXHfm2837es5O2sZudGkcit6NFqf0TRglJldGyIxrYDvW0G
pGwuxryX0Vx+vJaw539z04qH90ymc/FmJcpIleQD6+eNibVE5XYOIU5HV16rYi/UnR4h
cQ+G0AirpOflci8a7RbnyYLae+Tef+RVOqYTulI6Su9l3Gc4kQtbUdKekatAIv+ropkp
tdHZSdu1KJtzkjCB0GfVowTmOaHppUhnj2wIeDzP9epybyMEB09oUZx6z0lAf8T7OlVb
slax5oNixqHyar53a0CoZ3lg1dDYfckRpgwyKPFR7EdyFa8XsxS0YgosyKEXUbbhVSuT
6itA==
X-Gm-Message-State: AOAM532XQiPz31DtflGtvxJ/wttn0IirMaKPXOrGoRquzCuYq8qIAKba
A0N8L+bW/sDCflU0U03bkJxYMM4JnryPM9uroys=
X-Google-Smtp-Source: ABdhPJw0CFWelt5Hkq6UfJVF4Idw6t8EvcWZnwgLpiBN7R5Z+C/J1cqieBHkqr5nepfBChq9wDvb82LrAK8TNtkDvmQ=
X-Received: by 2002:a05:6a00:1c5c:b0:505:7469:134a with SMTP id
s28-20020a056a001c5c00b005057469134amr14896085pfw.16.1650816974746; Sun, 24
Apr 2022 09:16:14 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:6a10:8e86:0:0:0:0 with HTTP; Sun, 24 Apr 2022 09:16:14
-0700 (PDT)
Reply-To: rihabmanyang1993@gmail.com
From: Rihab Manyang
Date: Sun, 24 Apr 2022 16:16:14 +0000
Message-ID:
Subject: From Rihab Manyang.
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: root@nk.ca
X-Spam_score: 5.1
X-Spam_score_int: 51
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- My name is Rihab Manyang,i am here to search for a business
partner and friend who will help me to invest my fund in his country.
Content analysis details: (5.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.215.178 listed in wl.mailspike.net]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[rihabmanyang1993[at]gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[syllamodou120[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[syllamodou120[at]gmail.com]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
-0.0 T_SCC_BODY_TEXT_LINE No description available.
3.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
Subject: {SPAM?} From Rihab Manyang.
--
My name is Rihab Manyang,i am here to search for a business partner and
friend who will help me to invest my fund in his country.