NetKnow Corporate Blog | Entries from May 2022

Domain Name sale Google Spam

Posted by Dave Yadallee on Tuesday, May 31. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 31 May 2022 13:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nw7qK-000ELl-Ue

for dave@doctor.nl2k.ab.ca;

Tue, 31 May 2022 13:47:52 -0600

Resent-From: The Doctor

Resent-Date: Tue, 31 May 2022 13:47:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yb1-f177.google.com ([209.85.219.177]:42860)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1nw6j9-000Bop-7y

for sales@nk.ca;

Tue, 31 May 2022 12:36:27 -0600

Received: by mail-yb1-f177.google.com with SMTP id i11so25385302ybq.9

for ; Tue, 31 May 2022 11:36:01 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:references:in-reply-to:from:date:message-id:subject:to;

bh=F99v+3RrJdOjNF4Cn7QeW0XcUelzIaZ3obOcdXh9+z0=;

b=jkHkVPZIc8tKyHmOiVfaQj159jHQ1i8n0lS82pyirH48SV7eNFlBLcgcc6K4FzRspd

132I8eCEcOH1fqVLcwQ2KuCZtcMgUXVR4GlHhmJSPtRXUZB/jVaIrOVuGRAQnv8rs1Qs

cNEUnronPi0xVgE+DCGkOAYiU/PGT/w0VI6tuFs3cyK5Kl2Jng1cI/5fAWXl1cv7FMpk

UdpJbEGIim1NIue4yYP7rtSXOEh+LvzQ38yUrseyQX4cBxe8RWkJijcwM9KhPnSGHtCy

fTckiY9DxDF0PMaEFXbKQiYJr6koWwMto2kYdsGV9R9cgf4WUDN4YPEnKN96ecWO9VWK

RoBA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:references:in-reply-to:from:date

:message-id:subject:to;

bh=F99v+3RrJdOjNF4Cn7QeW0XcUelzIaZ3obOcdXh9+z0=;

b=LXKhMELKUmksXybrcENUvI0VCxQGY9+kjA/xJXLPCa26VMFiw1WjnDB+eqZBLFycis

e5V+MqQL9PMtvyYmknuTEGiRVEcdhzne036kbS6aSWyRaB6j2nMPv/4sa0f14S8YwLLZ

PzIuNlCAg58gIPEWzGow4gno9lNUJG0ImN0A2Lx0Je5R1YxkjwuoCl5x4wORs4Rev5Ha

UmTzosZDsvfVX4jGYPE1Q3+awekKVt0XU88obPyfXLszACqgbbH6Ex1Y6kEh8r1BDJ63

V9TrwDTXRzNfoV5IDY7VGyrWE+zi0lGuba5nYVPoQPyXHRjGj/+XA0qTw8XpkvGqJQbN

BoNw==

X-Gm-Message-State: AOAM532wYfjR62tu5jIMeTjICkgLOOyIYRt7g9F3I8GWVtyFBEOb5jeb

Va3XmONlxdFKR8KC6kvJosYocoAgWGZfITtqWjOvWTqdbak=

X-Google-Smtp-Source: ABdhPJzu9DDJsvUqPcD9rZf0GTf3z6exbfa+n/TO7YpgCXqVGfe+anCciqjOVhrNgjZ+PvPV1cwC+aECY6fvBf2R1dk=

X-Received: by 2002:a25:b90e:0:b0:64f:cda3:644f with SMTP id

x14-20020a25b90e000000b0064fcda3644fmr45072943ybj.595.1654022155931; Tue, 31

May 2022 11:35:55 -0700 (PDT)

MIME-Version: 1.0

References:

In-Reply-To:

From: Michael Davis

Date: Tue, 31 May 2022 19:35:27 +0100

Message-ID:

Subject: Re: Edmonton Broadband

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="0000000000000e15cd05e0530b91"

--0000000000000e15cd05e0530b91

Content-Type: text/plain; charset="UTF-8"

Hi,

We haven't heard back from you on EdmontonBroadband.com

The beneficial domain can be redirected to your primary website to capture

more clients for your business in Edmonton.

To purchase or submit an offer, visit: www.EdmontonBroadband.com

Best regards.

Michael.

On Mon, May 9, 2022, 6:49 PM Michael Davis wrote:

> Hello,

>

> EdmontonBroadband.com is listed for sale on Dan Domain Marketplace.

>

> The domain is often checked up on the internet in Edmonton. To capture

> more targeted customers for your business, redirect this massive domain to

> your primary website or build a new massive one on it.

>

> When you have 2 or more domains, it helps to throw a wider range and

> visibility than just 1.

>

> Go to www.EdmontonBroadband.com for immediate acquisition @ $499 only.

>

> Domain is also available @ GoDaddy.

>

> Best Regards,

> Michael Davis

> From Crown Domains.

>

--0000000000000e15cd05e0530b91

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Hi,

iv dir=3D"auto">We haven't heard back from you on EdmontonBroadband.com=

The beneficial domain c=

an be redirected to your primary website to capture more clients for your b=

usiness in Edmonton.

To =

purchase or submit an offer, visit:
.com">www.EdmontonBroadband.com

ir=3D"auto">Best regards.

Michael.=C2=A0

=

On Mon=

, May 9, 2022, 6:49 PM Michael Davis <
mail.com">michaeldav2559@gmail.com> wrote:

s=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;pad=

ding-left:1ex">
=C2=A0Hello,

iv dir=3D"auto">EdmontonBroadband.com is listed for sale on Dan Domain Mark=

etplace.=C2=A0

The domai=

n is often checked up on the internet in Edmonton. To capture more targeted=

customers for your business, redirect this massive domain to your primary =

website or build a new massive one on it.=C2=A0

=

When you have 2 or more domains, it helps to throw =

a wider range and visibility than just 1.=C2=A0

=

Go to
target=3D"_blank" rel=3D"noreferrer">www.EdmontonBroadband.com for imme=

diate acquisition @ $499 only.=C2=A0

dir=3D"auto">Domain is also available @ GoDaddy.=C2=A0

o">
Best Regards,
Michael=

Davis
From Crown Domains.

--0000000000000e15cd05e0530b91--

USPS Phishing attempt from Germany

Posted by Dave Yadallee on Tuesday, May 31. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 May 2022 18:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nvpgm-0008RH-GD

for dave@doctor.nl2k.ab.ca;

Mon, 30 May 2022 18:24:48 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 May 2022 18:24:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vsmx001.mijndomein.xion.oxcs.net ([157.97.78.141]:51191)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1nvpfZ-0008JF-QA

for doctor@doctor.nl2k.ab.ca;

Mon, 30 May 2022 18:23:38 -0600

Received: from vsmx001.mijndomein.xion.oxcs.net (unknown [10.93.2.1])

by mx-out.mijndomein.xion.oxcs.net (Postfix) with ESMTP id 3692D34D6939

for ; Tue, 31 May 2022 00:23:09 +0000 (UTC)

Received: from proxy-2.proxy.shared.ns.xion.oxcs.net (proxy-2.proxy.shared.ns.xion.oxcs.net [140.238.159.46])

by mx-out.mijndomein.xion.oxcs.net (Postfix) with ESMTPA id 7D58DA404DB

for ; Tue, 31 May 2022 00:23:08 +0000 (UTC)

DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=supportusps.store;

s=mail1; t=1653956589;

bh=5evGQtzieP9k9staXeRkVRCNzg5l9vz1ZokRkxwOkC0=;

h=From:To:Reply-To:Date:Subject:From;

b=cnMAwpj+iT0bcXkhwLUBbjU410bgqABNM8/N9xU9AYvZZOTG+Y8SuuWnDc5PhopN2

ADVar3UGh0z2CzfwvTbvpuYyvf848gVU7JE/MQB53iqrbvH/M5HGDaqamVApL1fDiX

Xpreuju4oEq3DPrN2PB1g3iZM0jZf211pHcyLsPI=

MIME-Version: 1.0

From: " "

To: doctor@doctor.nl2k.ab.ca

Reply-To: info@supportusps.store

Date: 31 May 2022 00:23:08 +0000

Subject: Reroute Reminder

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: base64

X-VadeSecure-Status: LEGIT

X-VADE-STATUS: LEGIT

X-VadeSecure-Status: LEGIT

X-VADE-STATUS: LEGIT

X-Spam_score: 6.7

X-Spam_score_int: 67

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dear Customer, Information on your shipment US/9514901185421

is still pending. You have received this email as a reminder for a package

that arrived at USA originating facility 05/27/2022.

Content analysis details: (6.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.4 NO_DNS_FOR_FROM DNS: Envelope sender has no MX or A DNS records

3.4 FROMSPACE Idiosyncratic "From" header format

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in

DNS

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML

tag

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.1 MISSING_MID Missing Message-Id: header

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal

information

0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was

blocked. See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[URIs: cgicrnesp.com, pngio.com]

Subject: {SPAM?} Reroute Reminder

PFA+DQo8UD4NCjxQPjxCUj48L1A+DQo8VEFCTEUgY2VsbFNwYWNpbmc9MCBjZWxsUGFk

ZGluZz00MCB3aWR0aD0iOTglIiBib3JkZXI9MD4NCjxUQk9EWT4NCjxUUj4NCjxURCBz

dHlsZT0iRk9OVC1GQU1JTFk6ICdsdWNpZGEmIzEzOyYjMTA7ICAgICAgICBncmFuZGUn

LHRhaG9tYSx2ZXJkYW5hLGFyaWFsLHNhbnMtc2VyaWYiIGJnQ29sb3I9I2Y3ZjdmNyB3

aWR0aD0iMTAwJSI+DQo8VEFCTEUgY2VsbFNwYWNpbmc9MCBjZWxsUGFkZGluZz0wIHdp

ZHRoPTU2MCBib3JkZXI9MD4NCjxUQk9EWT4NCjxUUj4NCjxURCBzdHlsZT0iRk9OVC1T

SVpFOiAxNnB4OyBGT05ULUZBTUlMWTogJ2x1Y2lkYSBncmFuZGUnLHRhaG9tYSx2ZXJk

YW5hLGFyaWFsLHNhbnMtc2VyaWY7IFZFUlRJQ0FMLUFMSUdOOiBtaWRkbGU7IEJBQ0tH

Uk9VTkQ6IHdoaXRlOyBGT05ULVdFSUdIVDogYm9sZDsgQ09MT1I6IGJsYWNrOyBQQURE

SU5HLUJPVFRPTTogNHB4OyBURVhULUFMSUdOOiBsZWZ0OyBQQURESU5HLVRPUDogNHB4

OyBQQURESU5HLUxFRlQ6IDhweDsgTEVUVEVSLVNQQUNJTkc6IC0wLjAzZW07IFBBRERJ

TkctUklHSFQ6IDhweCIgYm9yZGVyQ29sb3I9I2ZmMDAwMD48SU1HIGFsdD0iIiBzcmM9

Imh0dHBzOi8vaW1nLnBuZ2lvLmNvbS91c3BzLXBuZy1sb2dvLWZyZWUtdHJhbnNwYXJl

bnQtcG5nLWxvZ29zLXVzcHMtbG9nby1wbmctMTAyMF8yNjEucG5nIiB3aWR0aD00ODkg

aGVpZ2h0PTEyMCBtb3otZG8tbm90LXNlbmQ9InRydWUiPiA8L1REPg0KPFREIHN0eWxl

PSJGT05ULVNJWkU6IDEycHg7IEZPTlQtRkFNSUxZOiAnbHVjaWRhIGdyYW5kZScsdGFo

b21hLHZlcmRhbmEsYXJpYWwsc2Fucy1zZXJpZjsgVkVSVElDQUwtQUxJR046IG1pZGRs

ZTsgQkFDS0dST1VORDogd2hpdGU7IEZPTlQtV0VJR0hUOiBib2xkOyBDT0xPUjogcmdi

KDI1NSwyNTUsMjU1KTsgUEFERElORy1CT1RUT006IDRweDsgVEVYVC1BTElHTjogcmln

aHQ7IFBBRERJTkctVE9QOiA0cHg7IFBBRERJTkctTEVGVDogOHB4OyBQQURESU5HLVJJ

R0hUOiA4cHgiPjxCUj48L1REPjwvVFI+DQo8VFI+DQo8VEQgc3R5bGU9IkZPTlQtRkFN

SUxZOiAnbHVjaWRhJiMxMzsmIzEwOyAgICAgICAgICAgICAgICBncmFuZGUnLHRhaG9t

YSx2ZXJkYW5hLGFyaWFsLHNhbnMtc2VyaWY7IFBBRERJTkctQk9UVE9NOiAxNXB4OyBQ

QURESU5HLVRPUDogMTVweDsgUEFERElORy1MRUZUOiAxNXB4OyBQQURESU5HLVJJR0hU

OiAxNXB4OyBCQUNLR1JPVU5ELUNPTE9SOiByZ2IoMjU1LDI1NSwyNTUpIiBoZWlnaHQ9

MjkyIHZBbGlnbj10b3AgY29sU3Bhbj0yPg0KPFRBQkxFIHdpZHRoPSI5MCUiPg0KPFRC

T0RZPg0KPFRSPg0KPFREIHN0eWxlPSJGT05ULVNJWkU6IDEycHgiIGhlaWdodD0yNTYg

dkFsaWduPXRvcCB3aWR0aD01MjYgYWxpZ249bGVmdD4NCjxQPjxTUEFOPkRlYXIgQ3Vz

dG9tZXIsPC9TUEFOPjwvUD4NCjxQPjxTUEFOPjwvU1BBTj48U1BBTiBsYW5nPWVuIGNs

YXNzPVZJaXlpPjxTUEFOIGNsYXNzPSJKTHFKNGIgQ2hNazBiIiBkYXRhLWxhbmd1YWdl

LWZvci1hbHRlcm5hdGl2ZXM9ImVuIiBkYXRhLWxhbmd1YWdlLXRvLXRyYW5zbGF0ZS1p

bnRvPSJkZSIgZGF0YS1waHJhc2UtaW5kZXg9IjAiIGRhdGEtbnVtYmVyLW9mLXBocmFz

ZXM9IjMiPjxTUEFOIGNsYXNzPVE0aUFXYz5JbmZvcm1hdGlvbiBvbiB5b3VyIHNoaXBt

ZW50IFVTLzk1MTQ5MDExODU0MjEgaXMgc3RpbGwgcGVuZGluZy48L1NQQU4+PC9TUEFO

PjxTUEFOIGNsYXNzPUpMcUo0YiBkYXRhLWxhbmd1YWdlLWZvci1hbHRlcm5hdGl2ZXM9

ImVuIiBkYXRhLWxhbmd1YWdlLXRvLXRyYW5zbGF0ZS1pbnRvPSJkZSIgZGF0YS1waHJh

c2UtaW5kZXg9IjEiIGRhdGEtbnVtYmVyLW9mLXBocmFzZXM9IjMiPjxTUEFOIGNsYXNz

PVE0aUFXYz4gPEJSPjwvU1BBTj48L1NQQU4+PC9TUEFOPjwvUD4NCjxQPjxTUEFOIGxh

bmc9ZW4gY2xhc3M9VklpeWk+PFNQQU4gY2xhc3M9SkxxSjRiIGRhdGEtbGFuZ3VhZ2Ut

Zm9yLWFsdGVybmF0aXZlcz0iZW4iIGRhdGEtbGFuZ3VhZ2UtdG8tdHJhbnNsYXRlLWlu

dG89ImRlIiBkYXRhLXBocmFzZS1pbmRleD0iMSIgZGF0YS1udW1iZXItb2YtcGhyYXNl

cz0iMyI+PFNQQU4gY2xhc3M9UTRpQVdjPjwvU1BBTj48L1NQQU4+PFNQQU4gY2xhc3M9

IkpMcUo0YiBDaE1rMGIiIGRhdGEtbGFuZ3VhZ2UtZm9yLWFsdGVybmF0aXZlcz0iZW4i

IGRhdGEtbGFuZ3VhZ2UtdG8tdHJhbnNsYXRlLWludG89ImRlIiBkYXRhLXBocmFzZS1p

bmRleD0iMiIgZGF0YS1udW1iZXItb2YtcGhyYXNlcz0iMyI+PFNQQU4gY2xhc3M9UTRp

QVdjPllvdSBoYXZlIHJlY2VpdmVkIHRoaXMgZW1haWwgYXMgYSByZW1pbmRlciBmb3Ig

YSBwYWNrYWdlIHRoYXQgYXJyaXZlZCBhdCBVU0EmbmJzcDtvcmlnaW5hdGluZyBmYWNp

bGl0eSAwNS8yNy8yMDIyLjwvU1BBTj48L1NQQU4+PC9TUEFOPjwvUD4NCjxQPjxTUEFO

IGxhbmc9ZW4gY2xhc3M9VklpeWk+PFNQQU4gY2xhc3M9IkpMcUo0YiBDaE1rMGIiIGRh

dGEtbGFuZ3VhZ2UtZm9yLWFsdGVybmF0aXZlcz0iZW4iIGRhdGEtbGFuZ3VhZ2UtdG8t

dHJhbnNsYXRlLWludG89ImRlIiBkYXRhLXBocmFzZS1pbmRleD0iMiIgZGF0YS1udW1i

ZXItb2YtcGhyYXNlcz0iMyI+PFNQQU4gY2xhc3M9UTRpQVdjPlRoZSBwYXJjZWwgd2ls

bCBiZSByZXR1cm5lZCB0byB0aGUgc2VuZGVyIGFmdGVyIDA2LzAxLzIwMjIgMDk6MDAg

Q0VULjxCUj48L1A+PC9TUEFOPjwvU1BBTj48L1NQQU4+DQo8UD48U1RST05HPjwvU1RS

T05HPjxTVFJPTkc+PC9TVFJPTkc+PFNUUk9ORz48U1BBTiBsYW5nPWRlIGNsYXNzPVZJ

aXlpPjxTUEFOIGNsYXNzPSJKTHFKNGIgQ2hNazBiIiBkYXRhLWxhbmd1YWdlLWZvci1h

bHRlcm5hdGl2ZXM9ImRlIiBkYXRhLWxhbmd1YWdlLXRvLXRyYW5zbGF0ZS1pbnRvPSJm

ciIgZGF0YS1waHJhc2UtaW5kZXg9IjAiIGRhdGEtbnVtYmVyLW9mLXBocmFzZXM9IjEi

PjxTUEFOIGNsYXNzPVE0aUFXYz48L1NQQU4+PC9TUEFOPjwvU1BBTj48L1NUUk9ORz48

U1RST05HPjxTUEFOIGxhbmc9ZGUgY2xhc3M9VklpeWk+PFNQQU4gY2xhc3M9IkpMcUo0

YiBDaE1rMGIiIGRhdGEtbGFuZ3VhZ2UtZm9yLWFsdGVybmF0aXZlcz0iZGUiIGRhdGEt

bGFuZ3VhZ2UtdG8tdHJhbnNsYXRlLWludG89ImZyIiBkYXRhLXBocmFzZS1pbmRleD0i

MCIgZGF0YS1udW1iZXItb2YtcGhyYXNlcz0iMSI+PFNQQU4gY2xhc3M9UTRpQVdjPjxT

UEFOIGxhbmc9ZW4gY2xhc3M9VklpeWk+PFNQQU4gY2xhc3M9IkpMcUo0YiYjMTM7JiMx

MDsgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIENoTWswYiIgZGF0

YS1sYW5ndWFnZS1mb3ItYWx0ZXJuYXRpdmVzPSJlbiIgZGF0YS1sYW5ndWFnZS10by10

cmFuc2xhdGUtaW50bz0iZGUiIGRhdGEtcGhyYXNlLWluZGV4PSIwIiBkYXRhLW51bWJl

ci1vZi1waHJhc2VzPSIxIj48U1BBTiBjbGFzcz1RNGlBV2M+SG93IGRvIEkgY2FuY2Vs

IHRoZSByZXJvdXRlIDwvU1BBTj48L1NQQU4+PC9TUEFOPj88L1NQQU4+PC9TUEFOPjwv

U1BBTj48L1NUUk9ORz48L1A+DQo8RElWPg0KPFRBQkxFIHN0eWxlPSJCT1JERVItQ09M

TEFQU0U6IGNvbGxhcHNlIiBjZWxsU3BhY2luZz0wIGNlbGxQYWRkaW5nPTAgd2lkdGg9

NTIwPg0KPFRCT0RZPg0KPFRSPg0KPFREIHN0eWxlPSJQQURESU5HLUJPVFRPTTogMTBw

eDsgUEFERElORy1UT1A6IDEwcHg7IFBBRERJTkctTEVGVDogMTBweDsgUEFERElORy1S

SUdIVDogMTBweDsgQkFDS0dST1VORC1DT0xPUjogcmdiKDI1NSwyNDksMjE1KSIgYm9y

ZGVyQ29sb3I9I2ZmMDAwMD4NCjxESVYgY2xhc3M9ZWN4c3R5bGUyIHN0eWxlPSJGT05U

LVNJWkU6IDExcHg7IE1BUkdJTi1CT1RUT006IDJweCI+PEEgY2xhc3M9ZWN4c3R5bGUy

IGhyZWY9Imh0dHA6Ly9jZ2ljcm5lc3AuY29tL3UiIHRhcmdldD1fYmxhbmsgbW96LWRv

LW5vdC1zZW5kPSJ0cnVlIj48U1BBTiBsYW5nPWVuIGNsYXNzPVZJaXlpPjxTUEFOIGNs

YXNzPSJKTHFKNGIgQ2hNazBiIiBkYXRhLWxhbmd1YWdlLWZvci1hbHRlcm5hdGl2ZXM9

ImVuIiBkYXRhLWxhbmd1YWdlLXRvLXRyYW5zbGF0ZS1pbnRvPSJkZSIgZGF0YS1waHJh

c2UtaW5kZXg9IjAiIGRhdGEtbnVtYmVyLW9mLXBocmFzZXM9IjEiPjxTUEFOIGNsYXNz

PVE0aUFXYz5Db25maXJtIHNoaXBwaW5nIGZlZXMuPEJSPjwvU1BBTj48L1NQQU4+PC9T

UEFOPjwvQT48L0RJVj48L1REPjwvVFI+PC9UQk9EWT48L1RBQkxFPjwvRElWPg0KPFAg

Y2xhc3M9ZWN4c3R5bGU1PjxTVFJPTkc+T3VyIFRlYW08L1NUUk9ORz4gaXMgaGVyZSB0

byBoZWxwLjwvUD4NCjxQIGNsYXNzPWVjeHN0eWxlNT5BdCB5b3VyIHNlcnZpY2UhPC9Q

PjwvVEQ+PC9UUj48L1RCT0RZPjwvVEFCTEU+PC9URD48L1RSPg0KPFRSPg0KPFREIHN0

eWxlPSJGT05ULVNJWkU6IDExcHg7IEZPTlQtRkFNSUxZOiAnbHVjaWRhJiMxMzsmIzEw

OyAgICAgICAgICAgICAgICBncmFuZGUnLHRhaG9tYSx2ZXJkYW5hLGFyaWFsLHNhbnMt

c2VyaWY7IENPTE9SOiByZ2IoMTUzLDE1MywxNTMpOyBQQURESU5HLUJPVFRPTTogMTBw

eDsgUEFERElORy1UT1A6IDEwcHg7IFBBRERJTkctTEVGVDogMTBweDsgUEFERElORy1S

SUdIVDogMTBweCIgYm9yZGVyQ29sb3I9Izk5OTk5OSBjb2xTcGFuPTI+DQo8RElWPjxT

UEFOIGNsYXNzPWVjeHN0eWxlMTA+PEJSPjwvU1BBTj4NCjxQIHN0eWxlPSJGT05ULVNJ

WkU6IDlweDsgQ09MT1I6IGdyZXkiPlRoaXMgbWVzc2FnZSBpcyBzZW50IHRvIHlvdSBi

eSBVU1BTIGFuZCBpcyBpbnRlbmRlZCB0byBpbmZvcm0geW91IG9mIHRoZSBzdGF0dXMg

b2YgdGhlIGRlbGl2ZXJ5IG9mIHlvdXIgcGFja2FnZS4gWW91ciBjb250YWN0IGRldGFp

bHMgaGF2ZSBiZWVuIHRyYW5zbWl0dGVkIHRvIHVzLCBmb3IgdGhlIGV4Y2x1c2l2ZSBu

ZWVkcyBvZiB0aGUgZGVsaXZlcnksIGJ5IHRoZSBzZW5kZXIgb2YgeW91ciBwYWNrYWdl

LiBUaGV5IHdpbGwgYmUga2VwdCBmb3IgNiBtb250aHMgdGhlbiBhcmNoaXZlZCBmb3Ig

YSBtYXhpbXVtIHBlcmlvZCBvZiAzIHllYXJzLiBUaGV5IHdpbGwgbm90IGJlIHVzZWQg

Zm9yIGNvbW1lcmNpYWwgcHJvc3BlY3RpbmcgcHVycG9zZXMuIEluIGFjY29yZGFuY2Ug

d2l0aCB0aGUgcmVndWxhdGlvbnMgYXBwbGljYWJsZSB0byBwZXJzb25hbCBkYXRhLCB5

b3UgaGF2ZSB0aGUgcmlnaHQgdG8gYWNjZXNzLCByZWN0aWZ5IGFuZCBvcHBvc2UgeW91

ciBwZXJzb25hbCBkYXRhIGZvciBsZWdpdGltYXRlIHJlYXNvbnMgd2hpY2ggeW91IGNh

biBleGVyY2lzZSB2aWEgdGhlIGZvcm0gb24gd3d3LnVzcHMuY29tIGV4ZXJjaXNlLW9m

LXJpZ2h0cy1vbi1wZXJzb25hbC1kYXRhIG9yIGJ5IG1haWwgdG8gdGhlIGZvbGxvd2lu

ZyBhZGRyZXNzOiBVU1BTIFNBUyAtIENvbnRhY3QgSW5mb3JtYXRpcXVlIGV0IExpYmVy

dMOpcyAtIDMwMCBOIE5ldyBZb3JrIEF2ZSwgV2ludGVyIFBhcmssIEZMIDMyNzg5cywg

aW5kaWNhdGluZyB5b3VyIG5hbWUsIGZpcnN0IG5hbWUsIHBvc3RhbCBhZGRyZXNzIGFu

ZCBhdHRhY2hpbmcgYSBjb3B5IG9mIGJvdGggc2lkZXMgb2YgeW91ciBpZGVudGl0eSBk

b2N1bWVudC4gQW55IHJlcXVlc3QgcmVsYXRpbmcgdG8gdGhlIHBlcmZvcm1hbmNlIG9m

IHRoZSB0cmFuc3BvcnQgc2VydmljZSBtdXN0IGJlIGFkZHJlc3NlZCB0byBDdXN0b21l

ciBTZXJ2aWNlLiwqICJHcmVlbiBkZWxpdmVyeSIgem9uZXMgMTAwJSBvZiBsYXN0IG1p

bGUgZGVsaXZlcmllcyBpbiBlbGVjdHJpYyB2ZWhpY2xlcywgbmF0dXJhbCBnYXMgb3Ig

Y2FyZ28gYmlrZXM8L1A+PC9ESVY+PC9URD48L1RSPjwvVEJPRFk+PC9UQUJMRT48L1RE

PjwvVFI+PC9UQk9EWT48L1RBQkxFPiZuYnNwOyANCjxQPjwvUD4mbmJzcDsgDQo8UD48

L1A+

urgency donation spam from Google

Posted by Dave Yadallee on Monday, May 30. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 May 2022 15:08:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nvmbg-000OMB-VM

for dave@doctor.nl2k.ab.ca;

Mon, 30 May 2022 15:07:20 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 May 2022 15:07:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f169.google.com ([209.85.210.169]:34726)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1nvlfK-000KMw-Ht

for root@nk.ca;

Mon, 30 May 2022 14:07:07 -0600

Received: by mail-pf1-f169.google.com with SMTP id c65so10779278pfb.1

for ; Mon, 30 May 2022 13:06:42 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=1ekENgpX8Cgjx5WsmsOL8EBSQj4pgOnORW3v4jPhZ1M=;

b=n40rCywf1MAHWuRj4rWwqtbz4GvKmfSEbrKGZxG3kzzz4fHAYpp+z4qYvMPDVnfIN/

/LDyPSiou1k7u46ZXbkK0g34F4HdmXZbqI1aqX2Vac6qVfI26dvCZEbUvZ2apr1spI88

xsi8W7mERd59//Z9Mbgbs7bm7+xD7Q8L7XyWM8pVvBTjnWCL6UITnhcJnG+g4rP98IcB

ladZj3QIcbnD33YQLcSSq4nc/or3Q2xL83gncYOS9dPeALi4SinJkdy0NwHJyNBQDe2W

SHk/P8mMToe3kugSemBWAT0NKc/djq6+t6GPEEG010M2S/gnfZPpXchbKnMWTC98RK/m

3Krg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=1ekENgpX8Cgjx5WsmsOL8EBSQj4pgOnORW3v4jPhZ1M=;

b=exvLjVXxXSB9UWh9tY2/1Mro2ldJ+PO8k75Se1N5YhB7mTQ2eWuik91mhYLdS15eAD

za1opiLbTw4BVcnpnbSKLVpEFHnnZhpjCGmOqqk+k8ON2n68e+C2kyOJxYuwIwMy47hW

kY9dELMMeToF+rvRoFzcFnVpxDyXq84E5AAUZ8wpPhdHnFWZlwW2tIvau88f+UPEWIUp

UQvYnzsHGFn84E9grUaYookEdRaDBqr/LZZjvlGd5U6Gp/ZDrtZq48ju/lCxujFIndnV

VGQo1Sn5ZSFq1oNgM0qkQyNOIRXyTTOoQu6q0aPhKnpOksWQ21+xlNORAH0e3AA5i5Ga

/dSw==

X-Gm-Message-State: AOAM532CexdumixSjpKNTTo290HankZAqVVKaKhoRE7nQT8wcL8Zi9uV

5GJOf1+F6/AFLNHyyIyqhxaQfPEQHS0HoAaDZztwxtVuQ3AMSeYsRag=

X-Google-Smtp-Source: ABdhPJz2dnK2Wy0m81gndoy1bk2iOJMyRqNAZ1rXaozeW2vwCP9mEHoWD+2fH76pIA2rzigbXw7Q8Q2cAq4RjkstVN8=

X-Received: by 2002:a05:6102:f11:b0:337:d6b6:ebe6 with SMTP id

v17-20020a0561020f1100b00337d6b6ebe6mr12870472vss.40.1653941186491; Mon, 30

May 2022 13:06:26 -0700 (PDT)

MIME-Version: 1.0

Reply-To: johnsonelizabeth29@yahoo.com

From: Elizabeth Johnson

Date: Mon, 30 May 2022 13:05:02 -0700

Message-ID:

Subject: Thanks and Remain blessed

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000e67b7605e04030d6"

Bcc: root@nk.ca

X-Spam_score: 13.4

X-Spam_score_int: 134

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello My Beloved One. I greet you with the name of our Almighty

God; it is true that this letter may come to you as a surprise. Nevertheless,

I humbly ask you to give me your attention and hear me well.

Content analysis details: (13.4 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[elizyjohnson201819[at]gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.169 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[elizyjohnson201819[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[johnsonelizabeth29[at]yahoo.com]

1.3 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

0.0 HTML_MESSAGE BODY: HTML included in message

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.5 XFER_LOTSA_MONEY Transfer a lot of money

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal

information

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

Subject: {SPAM?} Thanks and Remain blessed

--000000000000e67b7605e04030d6

Content-Type: text/plain; charset="UTF-8"

Hello My Beloved One.

I greet you with the name of our Almighty God; it is true that this letter

may come to you as a surprise. Nevertheless, I humbly ask you to give me

your attention and hear me well.

My name is Mrs. Elizabeth Johnson from Germany. I was brought up from a

motherless babies home in my country and was married to my late husband Dr.

Abelerd Johnson who worked with our Embassy here in South Africa for a

period of 8 years before he died. We were married for 22 years without a

child before he died in a fatal car accident. Since his death I decided not

to remarry due to my religious belief. I am 59 years old, and am suffering

from a long time cancer of the breast which also affected my brain, from

all indication my conditions is really deteriorating and it is quite

obvious that, according to my doctors they have advised me that i may not

live for the next six months, this is because the cancer stage has gotten

to a very bad stage

When my late husband was alive he deposited the sum of US$5.6m (Five

Million Six Hundred United State American dollars ) with a Bank here in

South Africa. Presently this money is still in the custody of the Bank in

South Africa. Recently, my Doctor told me that I would not last for the

next six months due to cancer illness.

Having known my condition I decided to donate this money to Churches,

organizations or good person that will utilize this money the way I am

going to instruct herein.

I want you to use this money for Churches, Charity organizations,

orphanages, widows and other people that are in need. l took this decision

because I don't have any child that will inherit this money . Moreover, my

husband relatives are not close to me since I develop a Cancer problem and

it had been their wish to see me dead in order to inherit his wealth since

we have no Child. These people are not worthy of this inheritance. This is

why I am taking this decision.

I don't need any telephone communication in this regard because of my

ill-health. As soon as I receive your reply I will give you the contact of

the Bank in South Africa where this money is deposited. I will also issue a

letter of authorization to the bank that will prove you the present

beneficiary of this money. I also want you to always put me in prayer.

Please reply to me at my email address at (johnsonelizabeth29@yahoo.com)

Any delay in your reply may give me room to look for another good person

for this same purpose. Please assure me that you will act accordingly as I

stated herein.

Hoping to receive your response soonest at my private email address at (

johnsonelizabeth29@yahoo.com)

Thanks and Remain blessed

Your sister in the Lord

Mrs. Elizabeth Johnson

--000000000000e67b7605e04030d6

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Hello My Beloved One.

I greet you with the name of =

our Almighty God; it is true that this letter may come to you as a surprise=

. Nevertheless, I humbly ask you to give me your attention and hear me well=

.

My name is Mrs. Elizabeth Johnson from Germany. I was brought up f=

rom a motherless babies home in my country and was married to my late husba=

nd Dr. Abelerd Johnson who worked with our Embassy here in South Africa for=

a period of 8 years before he died. We were married for 22 years without a=

child before he died in a fatal car accident. Since his death I decided no=

t to remarry due to my religious belief. I am 59 years old, and am sufferin=

g from a long time cancer of the breast which also affected my brain, from =

all indication my conditions is really deteriorating and it is quite obviou=

s that, according to my doctors they have advised me that i may not live fo=

r the next six months, this is because the cancer stage has gotten to a ver=

y bad stage

When my late husband was alive he deposited the sum of U=

S$5.6m (Five Million Six Hundred United State American dollars ) with a Ban=

k here in South Africa. Presently this money is still in the custody of the=

Bank in South Africa. Recently, my Doctor told me that I would not last fo=

r the next six months due to cancer illness.

Having known my conditi=

on I decided to donate this money to Churches, organizations or good person=

that will utilize this money the way I am going to instruct herein.

>I want you to use this money for Churches, Charity organizations, orphanag=

es, widows and other people that are in need. l took this decision because =

I don't have any child that will inherit this money . Moreover, my husb=

and relatives are not close to me since I develop a Cancer problem and it h=

ad been their wish to see me dead in order to inherit his wealth since we h=

ave no Child. These people are not worthy of this inheritance. This is why =

I am taking this decision.

I don't need any telephone communicat=

ion in this regard because of my ill-health. As soon as I receive your repl=

y I will give you the contact of the Bank in South Africa where this money =

is deposited. I will also issue a letter of authorization to the bank that =

will prove you the present beneficiary of this money. I also want you to al=

ways put me in prayer.

Please reply to me at my email address at (
href=3D"mailto:johnsonelizabeth29@yahoo.com">johnsonelizabeth29@yahoo.com<=

/a>)

Any delay in your reply may give me room to look for another go=

od person for this same purpose. Please assure me that you will act accordi=

ngly as I stated herein.

Hoping to receive your response soonest at =

my private email address at (
">johnsonelizabeth29@yahoo.com)

Thanks and Remain blessed
You=

r sister in the Lord
Mrs. Elizabeth Johnson

--000000000000e67b7605e04030d6--

Netflix suspension spam from Microsoft Outlook server

Posted by Dave Yadallee on Monday, May 30. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 30 May 2022 15:07:04 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nvmbG-000OKQ-Qi

for dave@doctor.nl2k.ab.ca;

Mon, 30 May 2022 15:06:54 -0600

Resent-From: The Doctor

Resent-Date: Mon, 30 May 2022 15:06:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-psaapc01on2055.outbound.protection.outlook.com ([40.107.255.55]:53729 helo=APC01-PSA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1nvlOK-000JcJ-99

for doctor@doctor.nl2k.ab.ca;

Mon, 30 May 2022 13:49:34 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=LoxyeaBi5o3rYLHUKlNnCyAj66prdQEaefc+9liXs4EJpoLXfyRnFry53KB9Czt3xnQ9x2CYQhf5ZARjsPiP6Yg0s9pBirb1rc/Pb+XFgy6pk60voxsLT0SdI9l3WNsyFtsuH6ipuvBJ+USBvOf7YDjNhrsReoIiLjA2NOB808VjWzXTTmjYNzOrFVS2MWMwdt5QembcQVKuUVX7NXB7CD8UGq/zPxOi6eVcXW2Epeb9PidfNhGtbtKTqLZzQEVtym3csjGwtkPT8oI+B9O5R+ZD3jHcWgAPmd28Wl/kP+aX8/BvdNHGrfxwROU8Us+mP1L03eGQI/ieW9ahHUXYTQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=MOgiS2s2oXpN0q6AUAijeHNbwDBkBCpmrBWNmY54TqA=;

b=J1u8H+pm4XKnv7xRmG/kz0TgbQn7+x6UzG67cPznleid5wJUKmLHKV1bwFeQfKCa0l99RO80ZJ25ThfB1p6ZQ1bQoRoVa85LPUavdG1jJHVXdPZyESt4/m5Ia+ZuVGs4QIpDBF3B3gOXApkyUW6k8VEZjr9NvZjhSdTWN7Q6bY6sEMx+rW07PdHywtyR4LhQem46vMDd/Xm4BL9R4Ws7tV3h8cXrXsKJsXsFr9bS5zM1wYNtVD6xSRhiWxjmM4ZLgd13e4M51gUFtgZiTt6LbfWZzlT6AZpz0+EJewbZUmqwpXCpjR8kfEBdkTZrUlVwgsLgaORolzblcL8jqNqg4g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=drmmotors.in; dmarc=pass action=none header.from=drmmotors.in;

dkim=pass header.d=drmmotors.in; arc=none

Authentication-Results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=drmmotors.in;

Received: from SEYPR02MB5990.apcprd02.prod.outlook.com (2603:1096:101:82::11)

by SG2PR02MB4460.apcprd02.prod.outlook.com (2603:1096:0:e::8) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.5293.19; Mon, 30 May 2022 19:49:03 +0000

Received: from SEYPR02MB5990.apcprd02.prod.outlook.com

([fe80::a0c5:e97a:2882:9dac]) by SEYPR02MB5990.apcprd02.prod.outlook.com

([fe80::a0c5:e97a:2882:9dac%8]) with mapi id 15.20.5293.019; Mon, 30 May 2022

19:49:03 +0000

Content-Type: multipart/alternative;

boundary="--_NmP-2cdb5503a28e445f-Part_1"

From: "=?UTF-8?B?cGF5bWVudEBOZXRmbGl4LmNvbQ==?="

To: doctor@doctor.nl2k.ab.ca

Reply-To: BBNbCwwQbkXbbh-JHiYU-ZfcOjaYGVYQGraj@drmmotors.in

Subject: Alert : Your Account is on Hold

Message-ID:

Date: Mon, 30 May 2022 19:48:17 +0000

X-ClientProxiedBy: DM5PR06CA0047.namprd06.prod.outlook.com

(2603:10b6:3:5d::33) To SEYPR02MB5990.apcprd02.prod.outlook.com

(2603:1096:101:82::11)

Importance: high

X-Priority: 1

MIME-Version: 1.0

X-MS-PublicTrafficType: Email

X-MS-Office365-Filtering-Correlation-Id: 1373a566-95bd-4873-d1fc-08da42755af1

X-MS-TrafficTypeDiagnostic: SG2PR02MB4460:EE_

X-Microsoft-Antispam-PRVS:

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:SEYPR02MB5990.apcprd02.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230001)(366004)(66946007)(66556008)(66476007)(166002)(8676002)(38350700002)(86362001)(38100700002)(5660300002)(2616005)(36542004)(186003)(6666004)(508600001)(6486002)(40140700001)(52116002)(26005)(31696002)(33964004)(8936002)(6916009)(6506007)(786003)(6512007)(2906002)(316002)(31686004)(3450700001)(76236003)(83380400001)(66574015)(19627405001)(36756003)(15650500001)(56820400005)(42472002)(38122002)(39450500005)(45980500001)(54580400013);DIR:OUT;SFP:1101;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?UGFuSjA1OGxQTTJyQjMzNTMyZmw1MVNrMVJrUmRQQmEvd0pKSUppZzFKZTVr?=

=?utf-8?B?dUJReEluYWRUdjcrMk96MTBQakRSdlEvR1lOY0NScDZqM0hwYkFiY28vOXcw?=

=?utf-8?B?NDFyZjlLMys3NW9hN3g5b0RsTXJIMmpOL1ZuTUhZOUQ4c3hCYjF3cUV5TUFE?=

=?utf-8?B?ZGd3WDM2ekVFZThmS1ljTTBpT2ZMTzFqVnQvWmtidkx6S3lYUUIvRUZvcWY2?=

=?utf-8?B?SDhBZE1xQnJrdVl2REFrMVJwSU5GZW43bmQzY0Y1NUlFYi9lQzJhYU4yS2lE?=

=?utf-8?B?cTNQY2kvQTdCQzRDeTVub0JYSzlhV1llVDFTeWRWc3pvMEdtVFpiczRMYmlX?=

=?utf-8?B?blVDOHFnMDRhTHBuOGtoam5SNmhTWFM4N2IzS01pb3QvajRZeUl6NEVmd0V2?=

=?utf-8?B?STRKUXNxSE9SLy96OVZsM0VOb3p3RUpyaEVmUGlUcHpYMFRhSnFoSjdlNDl2?=

=?utf-8?B?akdxVm14d1d5cmo5ekloY0VmbjREOWFXSGFBVzhlam44UHNETVlBRVlOczlM?=

=?utf-8?B?OFRkdW5oTkdNVGlHbldhb3hSUDRmZWNPZlRwQy90RjR6b2R6ZTMzaUlWRG96?=

=?utf-8?B?ckc0MytYZzVNNFlCOXRkWG1HNmlMbWtIMitZZ3hMUlVIM2lPSmJJZFhzZHVI?=

=?utf-8?B?OHk5NjdKMzQyNUlMQ3JSMDdLaHFKdWd1aE9VVmN1RGdyeGdHVE0wWW1QYmNa?=

=?utf-8?B?REt3b2hSOTJ5ak9EQ0JCS3NSL0ZVWWpHNG50UHE5SzBueFY2aiswRFFWbFN6?=

=?utf-8?B?bSsrQlZpZ3ZESm44cGZ1eUxvNENaSkR2TFd2bTRNTmNqMWNaejFMUnRWSlBI?=

=?utf-8?B?K1BydFFOZnp3QnFvZmt6L29UQUhQK2ttZGt3R0VqeWlOekx0cVhaaUUwUHJX?=

=?utf-8?B?VjhJRDA2UWtxZWxsMnRlbjNLbEhpWm5pQjJodjFqZjBTWlRkdW5GbndiYy9o?=

=?utf-8?B?b3RmYkFKL2MvclhsNmFhYzRKQ1RpVzZMcnplTHVKUTJEU2NRaU4xMmFjcSt5?=

=?utf-8?B?OUFwcTRiYWlycndOdVd1VkpuRXc2YTFONGFoSGJ2Zm9EZDRac0FhRkJOcjZj?=

=?utf-8?B?T0QxSy9pdk02dUhQSkN3UkhFMFp6amtqYzRUbHI5Mkdpc1dPR3N6ZkYydlo2?=

=?utf-8?B?QlNCOEg0WEtKZ3pRb1lJZlZiNE45MzdUWkxFWWdVaTMxUzRESHVORmUwWkl3?=

=?utf-8?B?RDB6Um5qR2tBY3JBV2I0aHM0TS94eHcyelI0ZktqejV1NHh4NDVoL0NxMkRK?=

=?utf-8?B?NUZZek5xdzRQOU1wOGlqeExRUjdKdURXREp6R0VaUEJVbzlqMzVFQXVBTWpE?=

=?utf-8?B?RGtEQmY5Z3g3aStMbEhCNyt4cjhQNm9iZktVMSsrWjdCTHZoSzNVYjhZekI2?=

=?utf-8?B?bTRZZ3JmclBLQWd5aUc1Y3NGejBzQXJINE03YUtieVhybW9adldQWWZ1MmtP?=

=?utf-8?B?RXpoN3kyeVlLRTZocStHbW5oSU1VaHJTZDNucnc1cjBuNVh5RGE0SWhiZVJj?=

=?utf-8?B?b2Fqb2t3Y21KM04wNjc3Q1psOEpScE5DRzhpc21CVlZMcGtFeHE2V08yT1lH?=

=?utf-8?B?WkpXU29ZTlpzMjFZQnI0dkM3Tm9ybDErY1NnTC9icE1HS05XY3NxckR0L2tD?=

=?utf-8?B?Q3VJcCtsMmNJcllValBHSHhDNHQ5eDhYNGVGQ2VMNFFMN0JRWFNTakVkU2RW?=

=?utf-8?B?TStFeEdPZkN0cGlhc1RIUGhFd09UWklhazdoN2FyVTYrRWh2a2ZjTDlSUVdK?=

=?utf-8?B?clIyaDJZMEx2TVZCZ1NVWjhqa1NQd1k3Uk0zN0lQSVczN1JsSytUTlk2cUF0?=

=?utf-8?B?NmxIeS9Pc1I3OUZsQlZtbW5HdkRJdHcySWJzN0ZidkRDMjNjdHRPbTR6YWR6?=

=?utf-8?B?UEMrdlZjWUd3eSttRjZDNDBnTUNTSEtBcjg0T3kvUDVnWEgyUFZDS0lYd3Bv?=

=?utf-8?B?U0szcW1YRVVtK1hnd3d6THpaeVU1OFV2azBjcmN2N3V5YzJvMHU5aC9GaXFV?=

=?utf-8?B?QkVPVWUzNlJuQXQrVjZaZnh1NHNGcnErRVYxS21GZzZQRGtZTW9xSFJtZnc4?=

=?utf-8?B?WlRFSGViL1duK1p2dEMrOUtoNHlpZnJhM3l0RjRMYUx4NlFTYjdnSkpzUXpv?=

=?utf-8?B?eHhaeE5hK1hmZmJ2bkw4blgzeWMzOFV6ZTVsN1N1aEZZNyt4MklBYWt4cXVi?=

=?utf-8?B?V1RraGZmY3BoWWhMTHNWTGtkSGt3b3JSLys4SFJyRGg1RXRVUTk2ZmYxSVNF?=

=?utf-8?B?WGV5Qzk5cmpONytQUFMwVS9vZStWQm9yY1hMYTU4Tm9yeVIrUlZpYTJOMWJp?=

=?utf-8?B?YlQxVjBoU3d2YzVtaHJKWVNZTlZpZ2R6cWluVUt0THpyZzloS2tpK0Z4dFhW?=

=?utf-8?Q?S0NsCnRGKVk8Za1rI8rra4dyPsjToaIcCM4CMUnWFbq5m?=

X-MS-Exchange-AntiSpam-MessageData-1: yKhOmBqGlVDF6SKbxnk5Gymvh9bC/wmxqQw=

X-OriginatorOrg: drmmotors.in

X-MS-Exchange-CrossTenant-Network-Message-Id: 1373a566-95bd-4873-d1fc-08da42755af1

X-MS-Exchange-CrossTenant-AuthSource: SEYPR02MB5990.apcprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 May 2022 19:48:23.3875

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 0215ff7f-7906-4eee-8d99-3e4e1eb68ad5

X-MS-Exchange-CrossTenant-MailboxType: HOSTED

X-MS-Exchange-CrossTenant-UserPrincipalName: KNCtRoiwFkWDCYIplkCsv6qJXhfTRwpHs8hln+sacfcPZMAht8G8vWWTr71b2RY6sGftyphkxL/ttUp9r/NFJJIlkOPWM/NK1qz46Ya9ZXJTDbh1rGhmcYlJ+z6F6Dkinj2sJo2DiAPUqVZyF+0Ob7rl+GmHVz/hpsfZyWWiFVw=

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SG2PR02MB4460

X-Spam_score: 6.1

X-Spam_score_int: 61

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: 20220417_Photo_Base_ACQ_Control ð–¸ð…¸ð—ˆð…¸ð—Žð…¸ð—‹

ð–ºð–¼ð…¸ð–¼ð—ˆð—Žð…¸ð—‡ð— ð—‚ð—Œ ð—ˆð…¸ð—‡ ð—ð…¸ð—ˆð…¸ð—…ð–½,

please update your payment details. â€Œ â€Œ â€Œ â€Œ â€Œ â€Œ â€Œ â€Œ â€Œ â€Œ

â€Œ â€Œ â [...]

Content analysis details: (6.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.4 NO_DNS_FOR_FROM DNS: Envelope sender has no MX or A DNS records

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel

letters

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.107.255.55 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

1.1 TRACKER_ID BODY: Incorporates a tracking ID number

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or

identical to background

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 FORGED_SPF_HELO No description available.

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

-0.0 T_SCC_BODY_TEXT_LINE No description available.

2.5 DRUGS_MUSCLE Refers to a muscle relaxant

0.0 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} Alert : Your Account is on Hold

----_NmP-2cdb5503a28e445f-Part_1

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit

----_NmP-2cdb5503a28e445f-Part_1

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

=3Dedge">

20220417_Photo_Base_ACQ_Control

0">

al,wght@0,200;0,300;0,400;0,600;0,700;0,900;1,200;1,300;1,400;1,600;1,700;1=

,900&display=3Dswap" rel=3D"stylesheet">

lor:rgb(255, 255, 255);">=20

=20

=20

=20

=20

important" style=3D"border-spacing:0;background-color:rgb(234,234,234)" wid=

th=3D"100%" cellspacing=3D"0" cellpadding=3D"0" border=3D"0">=20

=20

ground-color:rgb(234,234,234)" align=3D"center">=20

=20

der-spacing:0;background-color:rgb(255,255,255)" width=3D"500" cellspacing=

=3D"0" cellpadding=3D"0" border=3D"0">=20

=20

=20

" cellspacing=3D"0" border=3D"0" style=3D"border-spacing:0;">=20

=20

=20

=20

ding-top:20px;padding-left:20px;padding-right:20px;" align=3D"left">=20

acing=3D"0" border=3D"0" style=3D"border-spacing:0;">=20

=20

=20

=20

=20

P&g=3D9AB74F4A9DE8D2943228AC555277E2E264558E67&lkid=3DURL_HOME" tar=

get=3D"_blank" style=3D"color:inherit;"> 3D"Netflix"

/assets.nflxext.com/us/email/gem/nflx.png" width=3D"24" border=3D"0" style=

=3D"-ms-interpolation-mode:bicubic;border:none;outline:none;border-collapse=

:collapse;border-style:none;">

x 20px;">=20

g: 0 0 0 0;border-spacing:0;" cellpadding=3D"0" cellspacing=3D"0" border=3D=

"0">=20

=20

=20

=20

=20

=20

=20

m-h4" style=3D"color: #000000;font-family:NetflixSans-Bold, Helvetica, Robo=

to, Segoe UI, sans-serif;font-weight:700;font-size:18px;line-height:22px;le=

tter-spacing:-0.35px;"> Netflix

m-p1" style=3D"color: #000000;font-size:14px;line-height:18px;letter-spacin=

g:-0.25px;font-family:NetflixSans-Light, Helvetica, Roboto, Segoe UI, sans-=

serif;font-weight:300;"> Payment Support

=20

le" align=3D"center" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" bor=

der=3D"0" style=3D"border-spacing:0;">=20

=20

=20

=20

style=3D"padding-top:20px;padding-left:20px;padding-right:20px;" align=3D"c=

enter">=20

style=3D"border-radius:12px 12px 8px 8px;border-spacing:0;" cellpadding=3D=

"0" cellspacing=3D"0" border=3D"0">=20

=20

=20

=20

=20

padding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"border-spacing:0;">=20

=20

=20

=20

=20

=20

ding:46px 0 0 0;">
co/9R00hlFQSc?type=3Dnews_kedqiwoxoxlowzr&page_id=3D413" style=3D"color=

:inherit;">

/images/30016814-e289-45d0-83ca-35f88cbf2530.png" alt=3D"Netflix" width=3D"=

145" align=3D"center" style=3D"border:none;outline:none;border-style:none;"=

>

align=3D"left" style=3D"padding:22px 90px 0 90px;font-family:Helvetica Neue=

, Helvetica, Roboto, Segoe UI, sans-serif;font-size:18px;line-height:24px;c=

olor:rgb(34, 31, 31);">

=20

ign=3D"center" width=3D"100%" bgcolor=3D"#000000" style=3D"border-radius:0p=

x 0px 8px 8px;border-spacing:0;" cellpadding=3D"0" cellspacing=3D"0" border=

=3D"0">=20

=20

=20

=20

ing" style=3D"padding-top:20px;padding-left:20px;padding-right:20px;padding=

-bottom:20px;">=20

=3D"0" border=3D"0" style=3D"border-spacing:0;">=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

=20

2px;">

=3D"color:#FFFFFF;font-family:NetflixSans-Bold, Helvetica, Roboto, Segoe UI=

, sans-serif;font-weight:700;font-size:18px;line-height:22px;letter-spacing=

:-0.35px;"> Payment Update

:#221F1F;padding-top:12px;font-size:14px;line-height:18px;letter-spacing:-0=

.25px;font-family:NetflixSans-Light, Helvetica, Roboto, Segoe UI, sans-seri=

f;font-weight:300;">
border:1px solid #434344;color:#F5F5F1;background-color:#434344;padding:2px=

4px 2px 4px;border-radius:4px;">Notifications

:#F5F5F1;padding-top:12px;font-family:NetflixSans-Bold, Helvetica, Roboto, =

Segoe UI, sans-serif;font-weight:700;font-size:14px;line-height:17px;letter=

-spacing:-0.2px;">

ding-top:12px;font-size:14px;line-height:18px;letter-spacing:-0.25px;font-f=

amily:NetflixSans-Light, Helvetica, Roboto, Segoe UI, sans-serif;font-weigh=

t:300;"> H=E1=9E=B4i=C2=AD =C2=ADC=E1=9E=B4o=CD=8Fs=E1=9E=B4t=E2=80=8Cu=C2=

=ADm=E1=9E=B4e=CD=8Fr=C2=AD,=E2=81=AA

:#F5F5F1;padding-top:12px;font-size:14px;line-height:18px;letter-spacing:-0=

.25px;font-family:NetflixSans-Light, Helvetica, Roboto, Segoe UI, sans-seri=

f;font-weight:300;"> W=E2=81=ADe=E1=9E=B4'=E2=81=ADr=E1=9E=B5e=C2=AD =E2=81=

=ADh=C2=ADa=E2=81=AAv=CD=8Fi=C2=ADn=E2=81=AAg=E1=9E=B4 =E2=80=8Cs=C2=ADo=C2=

=ADm=E1=9E=B5e=C2=AD =E2=81=ADt=E2=81=ADr=E2=80=8Co=E2=80=8Cu=E1=9E=B4b=E2=

=80=8Cl=C2=ADe=C2=AD =E1=9E=B4w=E2=81=AAi=E2=80=8Ct=C2=ADh=E2=81=AA =E1=9E=

=B4y=E2=81=ADo=E2=81=AAu=E1=9E=B4r=E1=9E=B4 =E2=81=ADc=E1=9E=B4u=CD=8Fr=CD=

=8Fr=E2=81=ADe=E1=9E=B4n=C2=ADt=E1=9E=B5 =E1=9E=B4b=E2=81=ADi=E2=81=ADl=C2=

=ADl=E2=81=ADi=E2=80=8Cn=C2=ADg=E2=81=AA =E2=81=AAi=E1=9E=B4n=E2=81=AAf=C2=

=ADo=CD=8Fr=E2=80=8Cm=E1=9E=B4a=E1=9E=B4t=E2=80=8Ci=E1=9E=B5o=E1=9E=B4n=C2=

=AD.=E2=80=8C =E1=9E=B4W=E2=80=8Ce=E2=81=AA'=E1=9E=B4l=E1=9E=B4l=C2=AD =CD=

=8Ft=E1=9E=B5r=E2=80=8Cy=C2=AD =E1=9E=B4a=C2=ADg=E2=80=8Ca=E2=81=AAi=E2=81=

=ADn=E2=81=AA,=E1=9E=B4 =CD=8Fb=E2=81=AAu=C2=ADt=C2=AD =E2=80=8Ci=E2=80=8Cn=

=E2=81=AD =E2=80=8Ct=CD=8Fh=E1=9E=B4e=E2=80=8C =E2=81=AAm=E2=81=AAe=C2=ADa=

=C2=ADn=E2=80=8Ct=C2=ADi=E2=81=ADm=E2=80=8Ce=E2=80=8C =E1=9E=B4y=CD=8Fo=E1=

=9E=B4u=C2=AD =C2=ADm=E2=80=8Ca=E2=80=8Cy=E2=81=AA =E2=81=ADw=E2=81=ADa=E2=

=80=8Cn=E1=9E=B5t=C2=AD =E2=80=8Ct=E1=9E=B4o=E1=9E=B5 =C2=ADu=E1=9E=B5p=E2=

=80=8Cd=C2=ADa=E1=9E=B5t=C2=ADe=E2=80=8C =E2=81=ADy=E2=81=AAo=E2=81=ADu=E1=

=9E=B4r=E1=9E=B4 =E1=9E=B4p=E1=9E=B4a=C2=ADy=E1=9E=B5m=E1=9E=B4e=CD=8Fn=E1=

=9E=B4t=C2=AD =C2=ADd=E1=9E=B4e=E1=9E=B4t=E1=9E=B4a=CD=8Fi=CD=8Fl=CD=8Fs=E1=

=9E=B4.=C2=AD

=20

%" cellpadding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"border-spacing=

:0;">=20

=20

=20

=20

yle=3D"padding-top:20px;" align=3D"center">=20

"100%" cellpadding=3D"0" cellspacing=3D"0" border=3D"0" style=3D"border-spa=

cing:0;">=20

=20

=20

=20

=20

=20

color=3D"#e50914" style=3D"border:solid 2px #e50914;border-radius:4px;text-=

decoration:none;width:100%;border-spacing:0;" cellpadding=3D"0" cellspacing=

=3D"0" border=3D"0">=20

=20

=20

=20

=3D"color:#F5F5F1;font-family:NetflixSans-Bold, Helvetica, Roboto, Segoe UI=

, sans-serif;font-weight:700;font-size:14px;line-height:17px;letter-spacing=

:-0.2px;" align=3D"center" height=3D"35">
c?type=3Dnews_hsyypheyqjjvpmi&page_id=3D111" style=3D"color:#F5F5F1;tex=

t-decoration:none;color:inherit;text-align:center;display:inline-block;">&n=

bsp;Update Payment

n=3D"left" style=3D"color:#F5F5F1;padding-top:12px;font-size:14px;line-heig=

ht:18px;letter-spacing:-0.25px;font-family:NetflixSans-Light, Helvetica, Ro=

boto, Segoe UI, sans-serif;font-weight:300;">

-info-table" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" border=3D"0=

">

p1" align=3D"left" style=3D"color:#F5F5F1;padding-top:12px;font-size:14px;l=

ine-height:18px;letter-spacing:-0.25px;font-family:NetflixSans-Light, Helve=

tica, Roboto, Segoe UI, sans-serif;font-weight:300;"> E=E1=9E=B4m=E2=81=AAa=

=E1=9E=B5i=C2=ADl=E2=80=8C :

-p1" align=3D"left" style=3D"color:#F5F5F1;padding-top:12px;font-size:14px;=

line-height:18px;letter-spacing:-0.25px;font-family:NetflixSans-Light, Helv=

etica, Roboto, Segoe UI, sans-serif;font-weight:300;"> doctor@doctor.nl2k.a=

b.ca

n=3D"left" style=3D"color:#F5F5F1;padding-top:12px;font-size:14px;line-heig=

ht:18px;letter-spacing:-0.25px;font-family:NetflixSans-Light, Helvetica, Ro=

boto, Segoe UI, sans-serif;font-weight:300;">

-info-table" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" border=3D"0=

">

-p1" align=3D"left" style=3D"color:#F5F5F1;padding-top:12px;font-size:14px;=

line-height:18px;letter-spacing:-0.25px;font-family:NetflixSans-Light, Helv=

etica, Roboto, Segoe UI, sans-serif;font-weight:300;"> Service Provider : <=

/td>

p1" align=3D"left" style=3D"color:#F5F5F1;padding-top:12px;font-size:14px;l=

ine-height:18px;letter-spacing:-0.25px;font-family:NetflixSans-Light, Helve=

tica, Roboto, Segoe UI, sans-serif;font-weight:300;"> =E2=80=AANetflix, Inc=

.=E2=80=AC

lign=3D"left" style=3D"color:#F5F5F1;padding-top:12px;font-size:14px;line-h=

eight:18px;letter-spacing:-0.25px;font-family:NetflixSans-Light, Helvetica,=

Roboto, Segoe UI, sans-serif;font-weight:300;"> W=E1=9E=B5e=C2=AD'=E1=9E=

=B4r=E2=80=8Ce=C2=AD =C2=ADh=E2=80=8Ce=C2=ADr=C2=ADe=C2=AD =E2=81=AAt=E1=9E=

=B4o=E2=80=8C =E2=80=8Ch=C2=ADe=C2=ADl=CD=8Fp=E1=9E=B4 =E2=81=AAi=E2=80=8Cf=

=E2=80=8C =CD=8Fy=CD=8Fo=E2=80=8Cu=E2=80=8C =E1=9E=B4n=C2=ADe=C2=ADe=C2=ADd=

=E2=81=AA =E2=81=ADi=E1=9E=B4t=E2=80=8C.=E1=9E=B5 =E2=80=8CV=E2=80=8Ci=E2=

=81=AAs=E1=9E=B4i=E2=80=8Ct=E1=9E=B5 =E1=9E=B5t=C2=ADh=E2=81=ADe=E1=9E=B4 <=

a href=3D"https://t.co/9R00hlFQSc?type=3Dnews_nggalewpqluifmm&page_id=

=3D241" style=3D"text-decoration:underline;color:inherit" target=3D"_blank"=

data-saferedirecturl=3D"https://t.co/9R00hlFQSc?type=3Dnews_uwpzatlwivfxjw=

d&page_id=3D232">H=E2=80=8Ce=E2=80=8Cl=C2=ADp=C2=AD =E2=80=8CC=E1=9E=B5=

e=E2=80=8Cn=C2=ADt=E2=81=AAe=E2=81=ADr=E2=81=AA f=E1=9E=B5o=CD=8Fr=E1=

=9E=B4 =C2=ADm=E2=80=8Co=E2=80=8Cr=E2=80=8Ce=E2=80=8C =E2=81=AAi=E2=80=8Cn=

=E1=9E=B4f=E1=9E=B5o=E1=9E=B4 =E1=9E=B4o=CD=8Fr=E2=81=AA
/t.co/9R00hlFQSc?type=3Dnews_khrfhpdekfeusfm&page_id=3D423" style=3D"te=

xt-decoration:underline;color:inherit" target=3D"_blank" data-saferedirectu=

rl=3D"https://t.co/9R00hlFQSc?type=3Dnews_nafusczvhgnyfam&page_id=3D422=

">c=E1=9E=B4o=E1=9E=B4n=C2=ADt=E1=9E=B5a=E1=9E=B4c=C2=ADt=C2=AD =E1=9E=B4u=

=E2=81=AAs=E1=9E=B4.=E2=80=AC

=20

h=3D"100%" align=3D"center" cellpadding=3D"0" cellspacing=3D"0" border=3D"0=

" style=3D"border-spacing:0;">=20

=20

=20

=20

style=3D"padding-top:20px;padding-left:20px;padding-right:20px;" align=3D"=

center">=20

g=3D"0" cellspacing=3D"0" border=3D"0" style=3D"border-spacing:0;width:100%=

;">=20

=20

=20

=20

-text-light" style=3D"background-color: #e50914; border:solid 1px #e50914;f=

ont-family:NetflixSans-Bold, Helvetica, Roboto, Segoe UI, sans-serif;font-w=

eight:700;color:rgb(255, 255, 255);-webkit-border-radius:4px;border-radius:=

4px;text-decoration:none;text-align:center;padding:13px 0 13px 0;width:100%=

;font-size:14px;line-height:17px;letter-spacing:-0.2px;">
ingle-button gem-filled-button-a button-text-light gem-h5" href=3D"https://=

t.co/9R00hlFQSc?type=3Dnews_rxjlmsrhzqxdkoo&page_id=3D131" style=3D"tex=

t-decoration:none;display:block;font-family:NetflixSans-Bold, Helvetica, Ro=

boto, Segoe UI, sans-serif;font-weight:700;color:inherit;color:rgb(255, 255=

, 255);font-size:14px;line-height:17px;letter-spacing:-0.2px;">View All TV =

Shows & Movies

=20

=3D"#ffffff" width=3D"100%" cellpadding=3D"0" cellspacing=3D"0" border=3D"0=

" style=3D"border-spacing:0;">=20

=20

=20

=3D"0" cellpadding=3D"0" border=3D"0">=20

=20

=20

=20

"padding-top:0;padding-left:40px;padding-right:40px">=20

ing=3D"0" cellpadding=3D"0" border=3D"0" align=3D"left">=20

=20

ng=3D"0" border=3D"0">=20

=20

owrap; font:15px courier; line-height:0;">

&=

nbsp; =

=20

=20

=

----_NmP-2cdb5503a28e445f-Part_1--

T-shirt spam from Google

Posted by Dave Yadallee on Monday, May 30. 2022

Return-path:

Envelope-to: dave@nl2k.ab.ca

Delivery-date: Mon, 30 May 2022 08:21:00 -0600

Received: from mail-ej1-f66.google.com ([209.85.218.66]:36557)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1nvgGG-000Num-QJ

for dave@nl2k.ab.ca;

Mon, 30 May 2022 08:20:54 -0600

Received: by mail-ej1-f66.google.com with SMTP id gi33so21163970ejc.3

for ; Mon, 30 May 2022 07:20:31 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=from:reply-to:mime-version:date:message-id:subject:to;

bh=b3l77aFk06Y3kbcezK+hh5vQkcuk279imsoNROHsv4c=;

b=jsLiP3yPtsZEqhBP9X4MCoZy49d1VbW4yVsghVLGcAUbLvQvJ0YBcIs7W8etPpa63J

aKIt1gBFWgYugZ4PfdpGvim8cf3935vjvat1GydW0yboPru8q8L9PF6v2KYNumJKpHDn

hiOsL1FSES9tMKmttux8+I52peMe42YIScOiY/zyQfUZNyXWUU3TY3vr8VBq1n5gByxS

tP3E+Rv6tioYZCFovy68xj5ezqXDJFWEaH/hto3LImjwRhrvKHlyWHY21+8T2LPDznzo

hBf71ccFVWMZ2maYCG5BSP33GIKyXPckNv/zyfuUs6gk5NHdQi9gqKn8woz3Op19NGy6

2Oyw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:from:reply-to:mime-version:date:message-id

:subject:to;

bh=b3l77aFk06Y3kbcezK+hh5vQkcuk279imsoNROHsv4c=;

b=vnybGSQJERMKaKG+DaTxYYG6EtCvH/6Rd2Qk29KT2uYAMRj/C13IzEJ7aYXohcrHpF

cnVD7WWcUR19jjuf47c9APRoV5/jEWTgGvN4y30wZkHBuznDtdfZ8MGRNjU0yEpzuf1g

cU3sMz9WQvM+JrIXgYMWVUSf3h4DtVK99efmUs5hAePf3lYJRaO31C24Wrzu6etn4E1S

6CVkTVLnuOokuA7ny0JWGIMCzL5LgfnEsH6rdMXVTAh6Mv+a/MmrO7z6+OloqZZo/yp2

9B6d3PI/bJpXMdBtPWU3clfVjerQtCNWMKgzJftE/RW1FybL91goGnUOvfevcBBPFu5E

9n+A==

X-Gm-Message-State: AOAM533e9pTt4Or9PRG4Ek3Phr6qTYZDQU12azRItnEXIRdD1SAMfauv

S7rqPRoU/jyt0hK1rXdEGAnq4f16T/+jw2hmCOc=

X-Google-Smtp-Source: ABdhPJxKaRVJGxEFoYiJvmwAbvgEuNh/Du/PERDSjb/3sFkzllaS6IDRam/b3/HxYJe/UOibd2+S4DKpbjNmemW6FRA=

X-Received: by 2002:a17:906:fa0e:b0:6fe:a41f:d395 with SMTP id

lo14-20020a170906fa0e00b006fea41fd395mr44060097ejb.201.1653920424938; Mon, 30

May 2022 07:20:24 -0700 (PDT)

Received: from 591598171709 named unknown by gmailapi.google.com with

HTTPREST; Mon, 30 May 2022 07:20:24 -0700

From: Custom Name Shirts

Reply-To: lucy@springtee.com

MIME-Version: 1.0

Date: Mon, 30 May 2022 07:20:23 -0700

Message-ID:

Subject: Attn: Meet your new Dave shirts!

To: dave@loonpatrol.org

Content-Type: multipart/alternative; boundary="0000000000006a4f6705e03b5b0c"

Bcc: dave@nl2k.ab.ca

X-Spam_score: 10.2

X-Spam_score_int: 102

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Awesome Gift Ideas For Dave And Family [image: Awesome Gift

Ideas For Dave And Family]

Be Unique. Shop Dave t-shirts created by independent artists from around

the globe. We print the highest quality Dave t-shirts on many sizes and colors!

[image: No I'm Not A Superhero I'm Dave NSD12 U [...]

Content analysis details: (10.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.218.66 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[danhquyen1987[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[danhquyen1987[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

-0.0 T_SCC_BODY_TEXT_LINE No description available.

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URIs: podbasez.cfd, tintucmedia.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL

blocklist

[URIs: podbasez.cfd, tintucmedia.com]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URIs: podbasez.cfd, tintucmedia.com]

Subject: {SPAM?} Attn: Meet your new Dave shirts!

--0000000000006a4f6705e03b5b0c

Content-Type: text/plain; charset="UTF-8"

Awesome Gift Ideas For Dave And Family

[image: Awesome Gift Ideas For Dave And Family]

Be Unique. Shop Dave t-shirts created by independent artists from around

the globe. We print the highest quality Dave t-shirts on many sizes and

colors!

[image: No I'm Not A Superhero I'm Dave NSD12 Unisex Short Sleeve Classic

Tee]

GET YOURS NOW

Recommendations for you:

[image: Best Dave In The Galaxy DSN06 Unisex Short Sleeve Classic Tee]

VIEW PRODUCT

[image: God Made The Strongest And Named Them Dave NSD30 Unisex Short

Sleeve Classic Tee]

VIEW PRODUCT

[image: It's A Dave Thing You Wouldn't Understand NSD50 Unisex Short Sleeve

Classic Tee]

VIEW PRODUCT

[image: God Made The Strongest And Named Them Dave NSD31 Unisex Short

Sleeve Classic Tee]

VIEW PRODUCT

You are receiving this email because you subscribed at our stores or

partners. To opt-out of receiving future emails, click the link below:

Unsubscribe

TronTee Store - 5570 West 1730 South, Suite 900, Salt Lake City UT, 84104

--0000000000006a4f6705e03b5b0c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

itial-scale=3D1">
v=3D"Content-Type"> Awesome Gift Ideas For Dave And Family</title= > <meta name=3D"viewport" content=3D"width=3Ddevice-width, initial-scale= =3D1.0 "></head><body bgcolor=3D"#efefef" style=3D"padding-bottom:10px"><ta= ble bgcolor=3D"#f9f9f9" align=3D"center" width=3D"100%" border=3D"0" cellsp= acing=3D"0" cellpadding=3D"0" style=3D"border:1px solid #cccccc;padding-top= :10px;max-width:700px"> <tr> <td valign=3D"top" align=3D"center">= <table width=3D"100%" cellspacing=3D"0" cellpadding=3D"0" borde= r=3D"0" align=3D"center"> <tbody> <tr> = <td valign=3D"top" align=3D"center"> <a href=3D"https://podbas= ez.cfd/VEeRVhN1653314564450tibo" target=3D"_blank" rel=3D"noopener noreferr= er"> <img alt=3D"Awesome Gift Ideas For Dave And Fam= ily" style=3D"padding-top:11px;padding-bottom:11px;padding-left:15px;paddin= g-right:15px;display:block; font-family:Arial, sans-serif; font-size:30px; = line-height:34px; color:#000000; max-width:700px;" src=3D"https://trello.co= m/1/cards/616860570d21aa08c9476fc1/attachments/616860e578efc22a3a4146a7/pre= views/616860e778efc22a3a414703/download/trontee.jpg" width=3D"200" border= =3D"0"> </a> </td> </tr> <= /tbody> </table> </td> </tr> <tr> <td style= =3D"table-layout:fixed;padding-top:0px;padding-bottom:0px;padding-left:14px= ;padding-right:14px"> <table border=3D"0" cellpadding=3D"0" cell= spacing=3D"0" width=3D"100%" style=3D"table-layout:fixed;border-top-width:4= px;border-top-style:solid;border-top-color:#444444"> <tbody>= <tr> <td style=3D"border-collapse:collap= se;table-layout:fixed"></td> </tr> </tbody> = </table> </td> </tr> <tr> <td style=3D"border= -collapse:collapse;table-layout:fixed;color:#222;font-family:"New York= ",Georgia;font-size:15px;line-height:1.4;letter-spacing:0;text-align:l= eft;max-width:100%;word-wrap:break-word;padding-top:0px;padding-bottom:0px;= padding-left:15px;padding-right:15px" valign=3D"top" align=3D"center"> = <table border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100= %"> <tbody> <tr> <td style= =3D"border-collapse:collapse;table-layout:fixed"> <p= style=3D"color:#222;display:block;font-family:"New York",Georgia= ;font-size:15px;font-style:normal;font-weight:normal;line-height:1.4;letter= -spacing:0;text-align:left"> Be Unique. Shop Dave t-shirts created by indep= endent artists from around the globe. We print the highest quality Dave t-s= hirts on many sizes and colors! </td> = </tr> </tbody> </table> </td> </tr> = <tr> <td style=3D"border-collapse:collapse;table-layout:fixed;padd= ing:0;font-size:0;padding-top:0px;padding-bottom:0;padding-left:9px;padding= -right:9px;text-align:center" valign=3D"top"> <table border=3D"0= " cellpadding=3D"0" cellspacing=3D"0" width=3D"100%"> <tbody= > <tr> <td style=3D"border-collapse:colla= pse;table-layout:fixed"> <a href=3D"https://podbasez= .cfd/hGKbWct1653314562949" style=3D"word-wrap:break-word;max-width:100%;col= or:#15c;font-weight:normal;text-decoration:underline" target=3D"_blank" rel= =3D"noopener noreferrer"> <img alt=3D"No I'm= Not A Superhero I'm Dave NSD12 Unisex Short Sleeve Classic Tee" src=3D= "https://img.cart-checkout.com/api/campaigns/CM_FWQ66VK/mockup.png?p=3DFRON= T&s=3Dhanes-5250&c=3DBlack&imageId=3DUnisexCrew_FRONT&u=3DF= RONT%3DwrdeZmCTzMmoNygGxPjV%252Fg%253D%253D-0.0-0.0-1.0-1430321158%26BACK%3= DwrdeZmCTzMmoNygGxPjV%252Fg%253D%253D-0.0-0.0-1.0-1430321158&ms=3DS" st= yle=3D"border:0;height:auto;line-height:100%;outline:none;text-decoration:n= one;max-width:100%;padding-bottom:0;display:inline;vertical-align:top;font-= size:12px;width:100%;max-width:650px;padding:0;border-width:0;" width=3D"54= 6px" align=3D"middle"> </a> </td>= </tr> </tbody> </table> </= td> </tr> <tr> <td style=3D"border-collapse:collapse;table-lay= out:fixed;color:#222;font-family:"New York",Georgia;font-size:14p= x;line-height:1.3;letter-spacing:0;text-align:left;max-width:100%;word-wrap= :break-word;padding-top:20px;padding-bottom:0px;padding-left:18px;padding-r= ight:18px" valign=3D"top"> <table cellspacing=3D"0" cellpadding= =3D"0" border=3D"0" align=3D"center" style=3D"border-collapse:separate;tabl= e-layout:fixed;border-top-left-radius:5px;border-top-right-radius:5px;borde= r-bottom-right-radius:5px;border-bottom-left-radius:5px;background-color:#9= 99;background-color:#35ae28;border-radius:3px;border-bottom-color:#28851e;b= order-bottom-width:2px;border-bottom-style:solid;border-collapse:separate">= <tbody> <tr> = <td style=3D"border-collapse:collapse;table-layout:fixed;color:whit= e;font-family:"New York",Georgia;font-size:16px;color:#ffffff;fon= t-weight:normal;font-size:16px;font-family:"New York",Georgia" va= lign=3D"middle" align=3D"center"> <a href=3D"https:/= /podbasez.cfd/hGKbWct1653314562949" style=3D"word-wrap:break-word;max-width= :100%;font-weight:normal;line-height:100%;text-align:center;text-decoration= :underline;color:#15c;font-family:"New York",Georgia;font-size:22= px;text-decoration:none;display:inline-block;padding-top:11px;padding-botto= m:11px;padding-left:20px;padding-right:20px;color:#ffffff;font-weight:norma= l;font-size:16px;font-family:"New York",Georgia" target=3D"_blank= " rel=3D"noopener noreferrer"> GET YOURS NOW = </a> </td> </tr> = </tbody> </table> </td> </tr> <tr> = <td style=3D"border-collapse:collapse;table-layout:fixed;color:#222;font-= family:"New York",Georgia;font-size:14px;line-height:1.3;letter-s= pacing:0;text-align:left;max-width:100%;word-wrap:break-word;padding-top:0p= x;padding-bottom:0px;padding-left:15px;padding-right:15px" valign=3D"top"> = <table border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D= "100%"> <tbody> <tr> <td s= tyle=3D"border-collapse:collapse;table-layout:fixed;text-align:left"> = w York",Georgia;font-size:15px;font-style:normal;font-weight:normal;li= ne-height:1.4;letter-spacing:0;text-align:left"> = </td> </tr>= </tbody> </table> </td> </tr> <tr> = <td valign=3D"top" align=3D"center" style=3D"border-collapse:collaps= e;table-layout:fixed;color:#222;font-family:"New York",Georgia;fo= nt-size:14px;line-height:1;letter-spacing:0;text-align:left;max-width:100%;= word-wrap:break-word;padding-top:0px;padding-bottom:0px;padding-left:18px;p= adding-right:18px"> <table cellspacing=3D"0" cellpadding=3D"0" b= order=3D"0" align=3D"left"> <tbody> <tr> = <td style=3D"color:#222;display:block;font-family:"New = York",Georgia;font-size:16px;font-style:normal;font-weight:bold;line-h= eight:1.1;letter-spacing:0;text-align:left;padding-top:0px;padding-bottom:2= 0px;padding-left:1px;padding-right:1px" valign=3D"middle" align=3D"left"> = Recommendations for you: </td> = </tr> </tbody> </table> </td> = </tr> <tr> <td style=3D"border-collapse:collapse;table-layout:= fixed" valign=3D"top" align=3D"center"> <table style=3D"border-c= ollapse:collapse;table-layout:fixed" width=3D"100%" cellspacing=3D"0" cellp= adding=3D"0" border=3D"0"> <tbody> <tr> = <td style=3D"border-collapse:collapse;table-layout:fixed" wid= th=3D"50%" valign=3D"top"> <table style=3D"border-co= llapse:collapse;table-layout:fixed;min-width:100%" width=3D"100%" cellspaci= ng=3D"0" cellpadding=3D"0" border=3D"0"> <tbody>= <tr> <td style= =3D"border-collapse:collapse;table-layout:fixed" valign=3D"top"> = <table style=3D"border-collapse:collapse;table-lay= out:fixed;min-width:100%" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0= " border=3D"0" align=3D"left"> <tbod= y> <tr> = <td style=3D"border-collapse:collapse;table-layout:fixed;pad= ding:0;font-size:0;padding-top:0px;padding-bottom:0;padding-left:9px;paddin= g-right:9px;text-align:center" valign=3D"top"> = <a href=3D"https://podbasez.cfd/OYAmrbR1653314559746" st= yle=3D"word-wrap:break-word;max-width:100%;color:#15c;font-weight:normal;te= xt-decoration:underline" target=3D"_blank" rel=3D"noopener noreferrer"> = <img alt=3D"Best Dave In Th= e Galaxy DSN06 Unisex Short Sleeve Classic Tee" src=3D"https://img.cart-che= ckout.com/api/campaigns/CM_FW104G0/mockup.png?p=3DFRONT&s=3Dhanes-5250&= amp;c=3DBlack&imageId=3DUnisexCrew_FRONT&u=3DFRONT%3DOq5PxcpQn%252B= 25BrI3tZxF2A%253D%253D-0.0-0.0-1.0-1430321158%26BACK%3DOq5PxcpQn%252B25BrI3= tZxF2A%253D%253D-0.0-0.0-1.0-1430321158&ms=3DS" style=3D"border:0;heigh= t:auto;line-height:100%;outline:none;text-decoration:none;max-width:100%;pa= dding-bottom:0;display:inline;vertical-align:top;font-size:12px;width:100%;= max-width:550px;padding:0;border-width:0;" width=3D"100%" align=3D"middle">= </a> = </td> </tr> = </tbody> = </table> </td> = </tr> </tbody> </table= > <table style=3D"border-collapse:collapse;table-lay= out:fixed" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0" border=3D"0">= <tbody> <tr> = <td style=3D"border-collapse:collapse;table-layout:= fixed" valign=3D"top"> <table style=3D"b= order-collapse:collapse;table-layout:fixed" width=3D"100%" cellspacing=3D"0= " cellpadding=3D"0" border=3D"0" align=3D"left"> = <tbody> <tr> = <td style=3D"border-collapse:collapse;tabl= e-layout:fixed;color:#222;font-family:"New York",Georgia;font-siz= e:14px;line-height:1.3;letter-spacing:0;text-align:left;max-width:100%;word= -wrap:break-word;padding-top:9px;padding-bottom:9px;padding-left:18px;paddi= ng-right:6px" valign=3D"top"> </= td> </tr> = </tbody> </table> = </td> </tr> = </tbody> </table> = <table style=3D"border-collapse:collapse;table-layout:fixed;width:100%!im= portant" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0" border=3D"0"> = <tbody> <tr> = <td style=3D"border-collapse:collapse;table-layout:fi= xed;min-width:60px;padding-left:10px;padding-right:10px" valign=3D"top" ali= gn=3D"center"> <table style=3D"border-co= llapse:separate;table-layout:fixed;border-top-left-radius:5px;border-top-ri= ght-radius:5px;border-bottom-right-radius:5px;border-bottom-left-radius:5px= ;background-color:#999;background-color:#35ae28;border-radius:3px;border-bo= ttom-color:#28851e;border-bottom-width:2px;border-bottom-style:solid;border= -collapse:separate" width=3D"" cellspacing=3D"0" cellpadding=3D"0" border= =3D"0"> <tbody> = <tr> = <td style=3D"border-collapse:collapse;t= able-layout:fixed;color:white;font-family:"New York",Georgia;font= -size:16px;color:#ffffff;font-weight:normal;font-size:16px;font-family:&quo= t;New York",Georgia" valign=3D"middle" align=3D"center"> = <a title=3D"View Product" href=3D"https:/= /podbasez.cfd/OYAmrbR1653314559746" style=3D"word-wrap:break-word;max-width= :100%;font-weight:normal;line-height:100%;text-align:center;text-decoration= :underline;color:#15c;font-family:"New York",Georgia;font-size:22= px;text-decoration:none;display:inline-block;padding-top:10px;padding-botto= m:10px;padding-left:10px;padding-right:10px;color:#ffffff;font-weight:norma= l;font-size:16px;font-family:"New York",Georgia" target=3D"_blank= " rel=3D"noopener noreferrer"> = VIEW PRODUCT </a> = </td> = </tr> </tbody> = </table> </td> = </tr> </tbody> = </table> </td> <td style= =3D"border-collapse:collapse;table-layout:fixed" width=3D"50%" valign=3D"to= p"> <table style=3D"border-collapse:collapse;table-l= ayout:fixed;min-width:100%" width=3D"100%" cellspacing=3D"0" cellpadding=3D= "0" border=3D"0"> <tbody> = <tr> <td style=3D"border-collapse:colla= pse;table-layout:fixed" valign=3D"top"> = <table style=3D"border-collapse:collapse;table-layout:fixed;min-width:100%"= width=3D"100%" cellspacing=3D"0" cellpadding=3D"0" border=3D"0" align=3D"l= eft"> <tbody> = <tr> <td style= =3D"border-collapse:collapse;table-layout:fixed;padding:0;font-size:0;paddi= ng-top:0px;padding-bottom:0;padding-left:9px;padding-right:9px;text-align:c= enter" valign=3D"top"> <a hr= ef=3D"https://podbasez.cfd/aGAJgih1653314551260" style=3D"word-wrap:break-w= ord;max-width:100%;color:#15c;font-weight:normal;text-decoration:underline"= target=3D"_blank" rel=3D"noopener noreferrer"> = <img alt=3D"God Made The Strongest And Named Them D= ave NSD30 Unisex Short Sleeve Classic Tee" src=3D"https://img.cart-checkout= .com/api/campaigns/CM_FWG12JC/mockup.png?p=3DFRONT&s=3Dhanes-5250&c= =3DBlack&imageId=3DUnisexCrew_FRONT&u=3DFRONT%3DtZAAqGgABQ6WsK4otj3= dzQ%253D%253D-0.0-0.0-1.0-1430321158%26BACK%3DtZAAqGgABQ6WsK4otj3dzQ%253D%2= 53D-0.0-0.0-1.0-1430321158&ms=3DS" style=3D"border:0;height:auto;line-h= eight:100%;outline:none;text-decoration:none;max-width:100%;padding-bottom:= 0;display:inline;vertical-align:top;font-size:12px;width:100%;max-width:550= px;padding:0;border-width:0;" width=3D"144" align=3D"middle"> = </a> = </td> </tr> = </tbody> </table> = </td> </tr> = </tbody> </table> = <table style=3D"border-collapse:collapse;table-layout:fixed" wid= th=3D"100%" cellspacing=3D"0" cellpadding=3D"0" border=3D"0"> = <tbody> <tr> = <td style=3D"border-collapse:collapse;table-layout:fixed" valign= =3D"top"> <table style=3D"border-collaps= e:collapse;table-layout:fixed" width=3D"100%" cellspacing=3D"0" cellpadding= =3D"0" border=3D"0" align=3D"left"> = <tbody> <tr> = <td style=3D"border-collapse:collapse;table-layout:fixe= d;color:#222;font-family:"New York",Georgia;font-size:14px;line-h= eight:1.3;letter-spacing:0;text-align:left;max-width:100%;word-wrap:break-w= ord;padding-top:9px;padding-bottom:9px;padding-left:18px;padding-right:6px"= valign=3D"top"> </td> = </tr> = </tbody> </table> = </td> </tr> = </tbody> </table> <table styl= e=3D"border-collapse:collapse;table-layout:fixed;width:100%!important" widt= h=3D"100%" cellspacing=3D"0" cellpadding=3D"0" border=3D"0"> = <tbody> <tr> = <td style=3D"border-collapse:collapse;table-layout:fixed;min-width= :60px;padding-top:0px;padding-right:10px;padding-left:10px;padding-bottom:0= px" valign=3D"top" align=3D"center"> <ta= ble style=3D"border-collapse:separate;table-layout:fixed;border-top-left-ra= dius:5px;border-top-right-radius:5px;border-bottom-right-radius:5px;border-= bottom-left-radius:5px;background-color:#999;background-color:#35ae28;borde= r-radius:3px;border-bottom-color:#28851e;border-bottom-width:2px;border-bot= tom-style:solid;border-collapse:separate" width=3D"" cellspacing=3D"0" cell= padding=3D"0" border=3D"0"> <tbody> = <tr> = <td style=3D"border= -collapse:collapse;table-layout:fixed;color:white;font-family:"New Yor= k",Georgia;font-size:16px;color:#ffffff;font-weight:normal;font-size:1= 6px;font-family:"New York",Georgia" valign=3D"middle" align=3D"ce= nter"> <a title=3D"View Prod= uct" href=3D"https://podbasez.cfd/aGAJgih1653314551260" style=3D"word-wrap:= break-word;max-width:100%;font-weight:normal;line-height:100%;text-align:ce= nter;text-decoration:underline;color:#15c;font-family:"New York",= Georgia;font-size:22px;text-decoration:none;display:inline-block;padding-to= p:10px;padding-bottom:10px;padding-left:10px;padding-right:10px;color:#ffff= ff;font-weight:normal;font-size:16px;font-family:"New York",Georg= ia" target=3D"_blank" rel=3D"noopener noreferrer"> = VIEW PRODUCT = </a> </td> = </tr> = </tbody> </table> = </td> </tr> = </tbody> </table> </td> = </tr> </tbody> </table> </td> </t= r> <tr> <td> <table> <tbody> = <tr> <td style=3D"border-collapse:collapse;table-la= yout:fixed;padding-top:5px;padding-bottom:5px" valign=3D"top" align=3D"cent= er"> </td> </tr> </tbody> </table>= </td> </tr> <tr> <td style=3D"border-collapse:collapse= ;table-layout:fixed" valign=3D"top" align=3D"center"> <table sty= le=3D"border-collapse:collapse;table-layout:fixed" width=3D"100%" cellspaci= ng=3D"0" cellpadding=3D"0" border=3D"0"> <tbody> = <tr> <td style=3D"border-collapse:collapse;table-lay= out:fixed" width=3D"50%" valign=3D"top"> <table styl= e=3D"border-collapse:collapse;table-layout:fixed;min-width:100%" width=3D"1= 00%" cellspacing=3D"0" cellpadding=3D"0" border=3D"0"> = <tbody> <tr> = <td style=3D"border-collapse:collapse;table-layout:fixed" valign=3D"top"= > <table style=3D"border-collapse:collap= se;table-layout:fixed;min-width:100%" width=3D"100%" cellspacing=3D"0" cell= padding=3D"0" border=3D"0" align=3D"left"> = <tbody> <tr> = <td style=3D"border-collapse:collapse;table-layo= ut:fixed;padding:0;font-size:0;padding-top:0px;padding-bottom:0;padding-lef= t:9px;padding-right:9px;text-align:center" valign=3D"top"> = <a href=3D"https://podbasez.cfd/UCGoIwW16533= 14558745" style=3D"word-wrap:break-word;max-width:100%;color:#15c;font-weig= ht:normal;text-decoration:underline" target=3D"_blank" rel=3D"noopener nore= ferrer"> <img alt=3D"It&= #39;s A Dave Thing You Wouldn't Understand NSD50 Unisex Short Sleeve Cl= assic Tee" src=3D"https://img.cart-checkout.com/api/campaigns/CM_FVW3VN5/mo= ckup.png?p=3DFRONT&s=3Dhanes-5250&c=3DBlack&imageId=3DUnisexCre= w_FRONT&u=3DFRONT%3DYnAUyepd7IKFcElvmlUS1g%253D%253D-0.0-0.0-1.0-143032= 1158%26BACK%3DYnAUyepd7IKFcElvmlUS1g%253D%253D-0.0-0.0-1.0-1430321158&m= s=3DS" style=3D"border:0;height:auto;line-height:100%;outline:none;text-dec= oration:none;max-width:100%;padding-bottom:0;display:inline;vertical-align:= top;font-size:12px;width:100%;max-width:550px;padding:0;border-width:0;" wi= dth=3D"100%" align=3D"middle"> = </a> </td> = </tr> </tbody> = </table> = </td> </tr> </tbody> = </table> <table style=3D"bord= er-collapse:collapse;table-layout:fixed" width=3D"100%" cellspacing=3D"0" c= ellpadding=3D"0" border=3D"0"> <tbody> = <tr> <td style=3D"border-c= ollapse:collapse;table-layout:fixed" valign=3D"top"> = <table style=3D"border-collapse:collapse;table-layout:fixed" w= idth=3D"100%" cellspacing=3D"0" cellpadding=3D"0" border=3D"0" align=3D"lef= t"> <tbody> = <tr> <td style=3D= "border-collapse:collapse;table-layout:fixed;color:#222;font-family:"N= ew York",Georgia;font-size:14px;line-height:1.3;letter-spacing:0;text-= align:left;max-width:100%;word-wrap:break-word;padding-top:9px;padding-bott= om:9px;padding-left:18px;padding-right:6px" valign=3D"top"> = </td> </= tr> </tbody> = </table> </td> = </tr> </tbody> = </table> <table style=3D"border-collapse:collapse;ta= ble-layout:fixed;width:100%!important" width=3D"100%" cellspacing=3D"0" cel= lpadding=3D"0" border=3D"0"> <tbody> = <tr> <td style=3D"border-col= lapse:collapse;table-layout:fixed;min-width:60px;padding-left:10px;padding-= right:10px" valign=3D"top" align=3D"center"> = <table style=3D"border-collapse:separate;table-layout:fixed;border-top= -left-radius:5px;border-top-right-radius:5px;border-bottom-right-radius:5px= ;border-bottom-left-radius:5px;background-color:#999;background-color:#35ae= 28;border-radius:3px;border-bottom-color:#28851e;border-bottom-width:2px;bo= rder-bottom-style:solid;border-collapse:separate" width=3D"" cellspacing=3D= "0" cellpadding=3D"0" border=3D"0"> = <tbody> <tr> = <td style= =3D"border-collapse:collapse;table-layout:fixed;color:white;font-family:&qu= ot;New York",Georgia;font-size:16px;color:#ffffff;font-weight:normal;f= ont-size:16px;font-family:"New York",Georgia" valign=3D"middle" a= lign=3D"center"> <a title=3D= "View Product" href=3D"https://podbasez.cfd/UCGoIwW1653314558745" style=3D"= word-wrap:break-word;max-width:100%;font-weight:normal;line-height:100%;tex= t-align:center;text-decoration:underline;color:#15c;font-family:"New Y= ork",Georgia;font-size:22px;text-decoration:none;display:inline-block;= padding-top:10px;padding-bottom:10px;padding-left:10px;padding-right:10px;c= olor:#ffffff;font-weight:normal;font-size:16px;font-family:"New York&q= uot;,Georgia" target=3D"_blank" rel=3D"noopener noreferrer"> = VIEW PRODUCT = </a> </td>= </tr> = </tbody> </table> = </td> </tr> = </tbody> </table> </td>= <td style=3D"border-collapse:collapse;table-layout:fixe= d" width=3D"50%" valign=3D"top"> <table style=3D"bor= der-collapse:collapse;table-layout:fixed;min-width:100%" width=3D"100%" cel= lspacing=3D"0" cellpadding=3D"0" border=3D"0"> <= tbody> <tr> <td s= tyle=3D"border-collapse:collapse;table-layout:fixed" valign=3D"top"> = <table style=3D"border-collapse:collapse;table= -layout:fixed;min-width:100%" width=3D"100%" cellspacing=3D"0" cellpadding= =3D"0" border=3D"0" align=3D"left"> = <tbody> <tr> = <td style=3D"border-collapse:collapse;table-layout:fixe= d;padding:0;font-size:0;padding-top:0px;padding-bottom:0;padding-left:9px;p= adding-right:9px;text-align:center" valign=3D"top"> = <a href=3D"https://podbasez.cfd/ipaDutd165331455676= 6" style=3D"word-wrap:break-word;max-width:100%;color:#15c;font-weight:norm= al;text-decoration:underline" target=3D"_blank" rel=3D"noopener noreferrer"= > <img alt=3D"God Made T= he Strongest And Named Them Dave NSD31 Unisex Short Sleeve Classic Tee" src= =3D"https://img.cart-checkout.com/api/campaigns/CM_FWKQ5Q9/mockup.png?p=3DF= RONT&s=3Dhanes-5250&c=3DBlack&imageId=3DUnisexCrew_FRONT&u= =3DFRONT%3Dbj%252B7gK5bn6ttH5dAOdlJng%253D%253D-0.0-0.0-1.0-1430321158%26BA= CK%3Dbj%252B7gK5bn6ttH5dAOdlJng%253D%253D-0.0-0.0-1.0-1430321158&ms=3DS= " style=3D"border:0;height:auto;line-height:100%;outline:none;text-decorati= on:none;max-width:100%;padding-bottom:0;display:inline;vertical-align:top;f= ont-size:12px;width:100%;max-width:550px;padding:0;border-width:0;" width= =3D"144" align=3D"middle"> <= /a> </td> = </tr> </tbody> = </table> </td= > </tr> </tbody> = </table> <table style=3D"border-c= ollapse:collapse;table-layout:fixed" width=3D"100%" cellspacing=3D"0" cellp= adding=3D"0" border=3D"0"> <tbody> = <tr> <td style=3D"border-colla= pse:collapse;table-layout:fixed" valign=3D"top"> = <table style=3D"border-collapse:collapse;table-layout:fixed" width= =3D"100%" cellspacing=3D"0" cellpadding=3D"0" border=3D"0" align=3D"left"> = <tbody> = <tr> <td style=3D"bor= der-collapse:collapse;table-layout:fixed;color:#222;font-family:"New Y= ork",Georgia;font-size:14px;line-height:1.3;letter-spacing:0;text-alig= n:left;max-width:100%;word-wrap:break-word;padding-top:9px;padding-bottom:9= px;padding-left:18px;padding-right:6px" valign=3D"top"> = </td> </tr> = </tbody> = </table> </td> = </tr> </tbody> </ta= ble> <table style=3D"border-collapse:collapse;table-= layout:fixed;width:100%!important" width=3D"100%" cellspacing=3D"0" cellpad= ding=3D"0" border=3D"0"> <tbody> = <tr> <td style=3D"border-collaps= e:collapse;table-layout:fixed;min-width:60px;padding-top:0px;padding-right:= 10px;padding-left:10px;padding-bottom:0px" valign=3D"top" align=3D"center">= <table style=3D"border-collapse:separat= e;table-layout:fixed;border-top-left-radius:5px;border-top-right-radius:5px= ;border-bottom-right-radius:5px;border-bottom-left-radius:5px;background-co= lor:#999;background-color:#35ae28;border-radius:3px;border-bottom-color:#28= 851e;border-bottom-width:2px;border-bottom-style:solid;border-collapse:sepa= rate" width=3D"" cellspacing=3D"0" cellpadding=3D"0" border=3D"0"> = <tbody> = <tr> = <td style=3D"border-collapse:collapse;table-layout:fixe= d;color:white;font-family:"New York",Georgia;font-size:16px;color= :#ffffff;font-weight:normal;font-size:16px;font-family:"New York"= ,Georgia" valign=3D"middle" align=3D"center"> = <a title=3D"View Product" href=3D"https://podbasez.cfd/ip= aDutd1653314556766" style=3D"word-wrap:break-word;max-width:100%;font-weigh= t:normal;line-height:100%;text-align:center;text-decoration:underline;color= :#15c;font-family:"New York",Georgia;font-size:22px;text-decorati= on:none;display:inline-block;padding-top:10px;padding-bottom:10px;padding-l= eft:10px;padding-right:10px;color:#ffffff;font-weight:normal;font-size:16px= ;font-family:"New York",Georgia" target=3D"_blank" rel=3D"noopene= r noreferrer"> VIEW PROD= UCT </a> = </td> </tr> = </tbody> = </table> </td> = </tr> </tbody> </ta= ble> </td> </tr> </tbody> = </table> </td> </tr> <tr> <td> <t= able> <tbody> <tr> <td sty= le=3D"border-collapse:collapse;table-layout:fixed;padding-top:5px;padding-b= ottom:5px" valign=3D"top" align=3D"center"> </td> </tr> = </tbody> </table> </td> </tr> <tr bgcolo= r=3D"#efefef"> <td> <table style=3D"border-collapse:colla= pse;table-layout:fixed" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0" = border=3D"0" align=3D"center"> <tbody> <tr> = <td style=3D"border-collapse:collapse;table-layout:fixed"= valign=3D"top" align=3D"center"> <table style=3D"bo= rder-collapse:collapse;table-layout:fixed" width=3D"100%" cellspacing=3D"0"= cellpadding=3D"0" border=3D"0" align=3D"center"> = <tbody> <tr> <t= d> <table cellspacing=3D"0" cellpadding= =3D"0" border=3D"0" align=3D"center"> = <tbody> <tr> = <td style=3D"color:#b7b7b7;padding-top:20px;padding-l= eft:15px;padding-right:15px;font-size:12px" valign=3D"middle" align=3D"cent= er"> You are receiving this email because you subscribed at our stores or p= artners. To opt-out of receiving future emails, click the link below: <a hr= ef=3D"https://podbasez.cfd/glnames2305bcam38423-unsub" target=3D"_blank" re= l=3D"noopener noreferrer" style=3D"color:#b7b7b7"> Unsubscribe </a> </td> = </tr> = </tbody> </table> = </td> </tr> = <tr> <td> = <table cellspacing=3D"0" cellpadding=3D"0" border=3D"0" align=3D"c= enter"> <tbody> = <tr> <td styl= e=3D"color:#b7b7b7;padding-top:5px;padding-left:15px;padding-right:15px;pad= ding-bottom:20px; font-size: 12px; tex" valign=3D"middle" align=3D"center">= TronTee Store - 5570 West 1730 South, Suite 900, Salt Lake City UT, 84104 = </td> </tr> = </tbody> </table> = </td> </tr> = </tbody> </table> = </td> </tr> </tbody> </table> = </td> </tr></table><img src=3D"https://tintucmedia.com/image/628bb07b= 5174913ac4b08fee" class=3D"CToWUd" height=3D"0" width=3D"1"></body></html> --0000000000006a4f6705e03b5b0c-- </div> <footer class="post-info"> <ul class="meta"> <li>Categories: <a href="https://www.nk.ca/blog/index.php?/categories/14-Google-Spam">Google Spam</a></li> <li><a href="/blog/index.php?/archives/2729-T-shirt-spam-from-Google.html#comments" title="0 Comments, 0 Trackbacks">0 Comments</a></li> </ul> </footer>  </article> <article class="post clearfix"> <header> <h2 class="post-title"><a href="/blog/index.php?/archives/2728-SEO-spam-from-Microsoft-Outlook-servers.html">SEO spam from Microsoft Outlook servers</a></h2> Posted by <a href="https://www.nk.ca/blog/index.php?/authors/1-Dave-Yadallee">Dave Yadallee</a> on <time datetime="2022-05-30T14:40:00+00:00">Monday, May 30. 2022</time> </header> <div class="clearfix"> Return-path: <doctor@doctor.nl2k.ab.ca> Envelope-to: dave@doctor.nl2k.ab.ca Delivery-date: Mon, 30 May 2022 07:06:00 -0600 Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD)) (envelope-from <doctor@doctor.nl2k.ab.ca>) id 1nvf5b-00030r-Bx for dave@doctor.nl2k.ab.ca; Mon, 30 May 2022 07:05:43 -0600 Resent-From: The Doctor <doctor@doctor.nl2k.ab.ca> Resent-Date: Mon, 30 May 2022 07:05:43 -0600 Resent-Message-ID: <YpTBJ4sal1beellg@doctor.nl2k.ab.ca> Resent-To: Dave Yadallee <dave@doctor.nl2k.ab.ca> Received: from mail-sgaapc01olkn2041.outbound.protection.outlook.com ([40.92.53.41]:5760 helo=APC01-SG2-obe.outbound.protection.outlook.com) by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95 (FreeBSD)) (envelope-from <webappsplan@outlook.com>) id 1nvd8M-000KOD-BM for sales@nk.ca; Mon, 30 May 2022 05:00:33 -0600 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=d+s+X6umQY6eRM9bXaggAdbcWXO88zF32F4HCiMpadY0k1ETVmAsYo1bTR9CI/rCopSu5+wHu9LskXAHUIn6Rj0zATiGDXPmFivgkXSpPe3GKd7Tbfpw7g18b+b1htQk9PO4fVOqbtV777dzTKkZjMrZdeTZ/I8gdc3z86GEqo9OUNELmFkf90v2BKPoDAlvKa8qtbs/qTDdv3MQJI9b3glSk9//LulfEZ2TpX63loEOmB+sFkf7JAc3d3o4gIlkowP3igMP5F/Hgw33+uP5+WJp++Lh3dE8lbODj9oEjI6YKJc2paf38i9h5fbO82jnO3aPhQ8KIqv6ytMfAjnm5Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=64GD8dAoSVF9VLkkR2Lta6XEg3tABmNR81VjHfrn5UI=; b=AX+I9CeGlAxFc+Ase8pHSLsxyjYmmzE1roVWAbwGD936PdtzlOPLpT9h9dq7yaGvs9CXvJf54qCj9dC6SDnPPclOvAqBxxU9Xpz6HziOWlHVljwNA2HfRn4646/1TVB9PExCJrnAZPdpjRG2d9POxCzy3djmr28ECN92JzpqvCNJm+ZeJAGoYlVGNvklULkewbVJKD1nmK4iwirgW+HbOh/bLa+G9zjIpOFheiAwlug1C6/PdilQcdqwobACxT5FKXeN19TlD2/Mw1KEpc8wWZKRNjf0iWLoPp2FrypFOLsT1d64S9shxz3Xkd7atZJQ2U3Lv1iBrn8tY4h+4s6VdA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=64GD8dAoSVF9VLkkR2Lta6XEg3tABmNR81VjHfrn5UI=; b=JgHoRBhOyLBNwUdmuNTiYR6HCU8bZwlS5ULRAky8YaxFFSnws3Ss1XpIy/repFx4sv5lcwCZJtf3pSiPN77vI3OtilVcHT09tT5+IoW4vhEaKEXeZNcdLXXNb0O9UwGGE+RxlBxqaUvFeroXSRelcaZOlUmuwhq6XkALb3zcqarrMDC+Zz8HMbsMp77r1gNAObO3LSMhi2YYVLBDSixVJZTNZ9Q2xy/x5RjgGh4zqZ/lMjhs+q3TghnV08mlAYP+ajp/BlX1kz/ZHNMC4RMDgHPSoGCwhqtiXXD1K4pcI8mRaiuXonu5b6O0vu7lRkD+1llQnPT0nKUi8qZxEdGyPQ== Received: from PS2PR04MB3702.apcprd04.prod.outlook.com (2603:1096:300:69::21) by PU1PR04MB2518.apcprd04.prod.outlook.com (2603:1096:803:2d::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5293.16; Mon, 30 May 2022 10:59:36 +0000 Received: from PS2PR04MB3702.apcprd04.prod.outlook.com ([fe80::754b:753e:14db:f836]) by PS2PR04MB3702.apcprd04.prod.outlook.com ([fe80::754b:753e:14db:f836%6]) with mapi id 15.20.5293.019; Mon, 30 May 2022 10:59:36 +0000 From: Smith Mario <webappsplan@outlook.com> Subject: Need Magento and WordPress expert at Lowest Price? Thread-Topic: Need Magento and WordPress expert at Lowest Price? Thread-Index: AQHYdBRZwiK8qIROlUOT0UYOCsMvDg== Date: Mon, 30 May 2022 10:59:35 +0000 Message-ID: <PS2PR04MB3702A2B6B1A2927DC40334A8ADDD9@PS2PR04MB3702.apcprd04.prod.outlook.com> Accept-Language: en-US, en-IN Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: x-tmn: [u9v4361dgFWOMaREHvT00O/fQTUHERzC] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 554094af-23b1-460a-f69f-08da422b7c23 x-ms-exchange-slblob-mailprops: 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 x-ms-traffictypediagnostic: PU1PR04MB2518:EE_ x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?iso-8859-1?Q?xvGXOeg8qTtUiUVKHV8I1ty7U16n2pOaybMq4xCHNNuu6YxZroCo1ah2c+?= =?iso-8859-1?Q?w5SKyNB0b4qL2QfmqUUHDgZ3p2yEYq2+K2QyenKIL/WtXrstCa30c+fobd?= =?iso-8859-1?Q?qdnPiuxkYL8tV5VQxuw7NIpBz7gKlueEt6ZBBm04g1s6xzFkw1ItD4WCHp?= =?iso-8859-1?Q?Mb4Xnqglwb0lObtOwhV2uEXEzEVR3u3KBVivwCOHPqEG5j7vwuorlv5lqd?= =?iso-8859-1?Q?KYh8xeEz5Pwrg1lSfpjunN+JJ9WYE5Nmx+S8QE3Zi+XNqC2VJsLLDVU32P?= =?iso-8859-1?Q?qFSv7OOy214j4w1gkNUS16T56dA/El3aYNbaKufE79Y+xq6zWqr16XxTMi?= =?iso-8859-1?Q?25rD8EtlsIfncj1N+FB9QVds5hHjrNDpYrd/I5cKDikXegd7GzVpsC09Fs?= =?iso-8859-1?Q?bfKQgpgE/FVVOkHq0x0fmrEbuqgA8gldxyAorrRAg9T2KRVUWDsKbXB7UB?= =?iso-8859-1?Q?zwHhKuZZjsTa+VorroHoPSK7BuF6KbuXkxJSxQZwEwj0tlG3XaCcZKpxo+?= =?iso-8859-1?Q?+K6XE/qfnHxiA31H9gSXgI7Az+RQt/MjfV8LHs1hZ4qN5wFd7noGgpYd7w?= =?iso-8859-1?Q?WSk43wYzvUMuIONZ83Pwr+iBpRy3vTRC5UBCvjMvDFAS6ii8R0Ds0lDNsI?= =?iso-8859-1?Q?Yvu0KXHq8AECUoK4kexOXbe8+A0DAfNACpYWmNTP90RUFS3spnwRAdlRgr?= =?iso-8859-1?Q?DlJHpTlzDaWJIHQS46x13O3Sxz/8J4YSCPyPWBIU2cupNftjFumLSF/CQZ?= =?iso-8859-1?Q?G6XsWKsiCFzzCght8tBjf+0MJ3OL4uLC/ZxIMX872Uc5qTKlbuEwpX4Ver?= =?iso-8859-1?Q?NKGrCg4B94JD3sO/9fVQfeb0etyseVfUrI/6IKLOQexmARjJ2PHrxxRrFh?= =?iso-8859-1?Q?N+UILoGE1cP9+C2KqiJYCoDQFeCAyKO2++m8HDFS/3PDej6kcA9rju1AH7?= =?iso-8859-1?Q?0ln1SwpIl2eKhPOYEBsbIG47W+ZTRV/GoR/l9RuVq4lXvXgNaMZbtPE9Cm?= =?iso-8859-1?Q?dO1DDn7pfUyp9k7CnBuLXsIegmsIVfAyNIjv/J0wLMfVYDY8ipvJ/6rl6X?= =?iso-8859-1?Q?y7NIeeu1BK7TUB6ZK90gDOw1TJYjazlny/q0zhskrlPJkcc2A2MAZ3X/B5?= =?iso-8859-1?Q?Ibj9g4JDoaXky9RbOC74HUsGuwmFIrkHmcXp1Sl6O7zXv9QEiI0R4BJMJx?= =?iso-8859-1?Q?Hnh+cDvqvNr7kRTXmWN2WvMSL+Gzuu2pxjKpxi2ULtqrMB0BL3CSBeryuP?= =?iso-8859-1?Q?eUcYx5xDTQgUzL5ivpo25b+EvTuEw2ZsaDVxTeBnxuIFNTxiRfjmIbx8TT?= =?iso-8859-1?Q?UEObEfWAF17cZTi2FJ63v8uGrOWawuyw0ShXdvVaTFAZ6dJs/U4GH+t3+z?= =?iso-8859-1?Q?fe44Qr8FEuxc1CZQnTrxMVIH9XHFuUMGEq+YlTuZBuB2INIcI7oSb4uo+O?= =?iso-8859-1?Q?WxzjLp12iubE2GrDv/zGoYr4DpDprRKvwBjSpw=3D=3D?= Content-Type: multipart/alternative; boundary="_000_PS2PR04MB3702A2B6B1A2927DC40334A8ADDD9PS2PR04MB3702apcp_" MIME-Version: 1.0 X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: PS2PR04MB3702.apcprd04.prod.outlook.com X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-CrossTenant-Network-Message-Id: 554094af-23b1-460a-f69f-08da422b7c23 X-MS-Exchange-CrossTenant-originalarrivaltime: 30 May 2022 10:59:35.9948 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: PU1PR04MB2518 --_000_PS2PR04MB3702A2B6B1A2927DC40334A8ADDD9PS2PR04MB3702apcp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hey, Magento and WordPress expert Team with 7+ years of experience in the web de= velopment industry. I have developed a wide range of websites using Magento= 1.x and Magento 2.x, Wordpress, Woocommerce and Web Designing. I make sure to maintain quality work, security points and also deliver bugs= free products to our valuable client. I always take the time to understand my client's requirements and provide g= ood solutions. Click here<https://drive.google.com/file/d/1xtOMhJn7U4_oAlVLSRYgX5djRUH2EhY= m/view> to see how we transform ideas into real time business: https://driv= e.google.com/file/d/1xtOMhJn7U4_oAlVLSRYgX5djRUH2EhYm/view My area of expertise: - Magento 1.x & 2.x - WordPress - Woocommerce - Codeigniter - Laravel - Mobile Application (Android & iOS ) My area of services: - Developing & Maintenance of eCommerce websites using Magento & Woocommerc= e - Building & Maintenance Custom CMS websites Using WordPress. - Developing & Maintenance of CMS websites using PHP and MYSQL. - Magento Extension & Themes Development/Customization. - WordPress Plugins & Themes Development/Customization. - Site Optimization - Web Services - Customization in Codeigniter and Laravel - Website Migration - Application Development May I know if you are interested in any of these services? It would be great if you share the details of your requirement so that I ca= n come up with my best solution accordingly. Best Regards, Smith Mario --_000_PS2PR04MB3702A2B6B1A2927DC40334A8ADDD9PS2PR04MB3702apcp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-= 1"> <style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;margin-bo= ttom:0;} </style> </head> <body dir=3D"ltr"> <div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size= : 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof"> ily:"Calibri", "sans-serif""> Hey, ily:"Calibri", "sans-serif""> Magento and WordPress expert Team with 7+ years of experience in the web de= velopment industry. I have developed a wide range of websites using Magento= 1.x and Magento 2.x, Wordpress, Woocommerce and Web Designing. ily:"Calibri", "sans-serif""> I make sure to maintain quality work, security points and also deliver bugs= free products to our valuable client. ily:"Calibri", "sans-serif""> I always take the time to understand my client's requirements and provide g= ood solutions. ily:"Calibri", "sans-serif";mso-margin-top-alt:auto;mso= -margin-bottom-alt:auto"> rif";color:#222222;background:white;mso-ansi-language:EN-ZA" lang=3D"E= N-ZA"><a href=3D"https://drive.google.com/file/d/1xtOMhJn7U4_oAlVLSRYgX5djR= UH2EhYm/view" id=3D"OWA4788a070-6f22-f2ad-84b3-16f38623fdcb" class=3D"OWAAu= toLink">Click here</a> to see how we transform ideas into real time business: <a hr= ef=3D"https://drive.google.com/file/d/1xtOMhJn7U4_oAlVLSRYgX5djRUH2EhYm/vie= w" id=3D"OWAae62b196-5ba9-08a9-cdfe-1723948d642d" class=3D"OWAAutoLink">htt= ps://drive.google.com/file/d/1xtOMhJn7U4_oAlVLSRYgX5djRUH2EhYm/view</a><o:p= > </o:p> ily:"Calibri", "sans-serif""> <o:p> </o:p> ily:"Calibri", "sans-serif""> My area of expertise:<o:p> </o:p> ily:"Calibri", "sans-serif""> - Magento 1.x & 2.x ily:"Calibri", "sans-serif""> - WordPress ily:"Calibri", "sans-serif""> - Woocommerce ily:"Calibri", "sans-serif""> - Codeigniter ily:"Calibri", "sans-serif""> - Laravel ily:"Calibri", "sans-serif""> - Mobile Application (Android & iOS ) ily:"Calibri", "sans-serif""> <o:p> </o:p> ily:"Calibri", "sans-serif""> My area of services:<o:p> </o:p> ily:"Calibri", "sans-serif""> - Developing & Maintenance of eCommerce websites using Magento & Wo= ocommerce ily:"Calibri", "sans-serif""> - Building & Maintenance Custom CMS websites Using WordPress. ily:"Calibri", "sans-serif""> - Developing & Maintenance of CMS websites using PHP and MYSQL. ily:"Calibri", "sans-serif""> - Magento Extension & Themes Development/Customization. ily:"Calibri", "sans-serif""> - WordPress Plugins & Themes Development/Customization. ily:"Calibri", "sans-serif""> - Site Optimization ily:"Calibri", "sans-serif""> - Web Services ily:"Calibri", "sans-serif""> - Customization in Codeigniter and Laravel ily:"Calibri", "sans-serif""> - Website Migration ily:"Calibri", "sans-serif""> - Application Development ily:"Calibri", "sans-serif";mso-margin-top-alt:auto"> ont-family:"Times New Roman";mso-hansi-font-family:Calibri;mso-bi= di-font-family:Calibri;color:black;mso-ansi-language:EN-AU" lang=3D"EN-AU">= May I know if you are interested in any of these services? It would be great if you share the details of your requirement so that I= can come up with my best solution accordingly. <span= style=3D"font-size:12.0pt;mso-ascii-font-family:Calibri;mso-fareast-font-f= amily:"Times New Roman";mso-hansi-font-family:Calibri;mso-bidi-fo= nt-family:Calibri;color:black;mso-ansi-language:EN-GB" lang=3D"EN-GB"> = ; y:"Times New Roman";mso-hansi-font-family:Calibri;mso-bidi-font-f= amily:Calibri;color:black;mso-ansi-language:EN-GB" lang=3D"EN-GB"> </s= pan> ,"serif";mso-fareast-font-family:"Times New Roman";colo= r:black"> es New Roman","serif";mso-fareast-font-family:"Times Ne= w Roman""><o:p> </o:p> ily:"Calibri", "sans-serif";mso-margin-top-alt:auto"> ont-family:"Times New Roman";mso-hansi-font-family:Calibri;mso-bi= di-font-family:Calibri;color:black;mso-ansi-language:EN-AU" lang=3D"EN-AU">= Best Regards, ont-family:Calibri;mso-fareast-font-family:"Times New Roman";mso-= hansi-font-family:Calibri;mso-bidi-font-family:Calibri;color:black;mso-ansi= -language:EN-GB" lang=3D"EN-GB"> family:Calibri;mso-fareast-font-family:"Times New Roman";mso-hans= i-font-family:Calibri;mso-bidi-font-family:Calibri;color:black;mso-ansi-lan= guage:EN-GB" lang=3D"EN-GB"> nt-family:"Times New Roman","serif";mso-fareast-font-fa= mily:"Times New Roman";color:black"> ont-size:12.0pt;font-family:"Times New Roman","serif";m= so-fareast-font-family:"Times New Roman""><o:p> </o:p></span= > ily:"Calibri", "sans-serif";mso-margin-top-alt:auto"> ont-family:"Times New Roman";mso-hansi-font-family:Calibri;mso-bi= di-font-family:Calibri;color:black;mso-ansi-language:EN-AU" lang=3D"EN-AU">= Smith Mario ew Roman","serif";mso-fareast-font-family:"Times New Ro= man""><o:p> </o:p> ily:"Calibri", "sans-serif""> <o:p> </o:p> </div> </body> </html> --_000_PS2PR04MB3702A2B6B1A2927DC40334A8ADDD9PS2PR04MB3702apcp_-- </div> <footer class="post-info"> <ul class="meta"> <li>Categories: <a href="https://www.nk.ca/blog/index.php?/categories/13-Microsoft-Outlook-Hotmail-Spam">Microsoft Outlook Hotmail Spam</a></li> <li><a href="/blog/index.php?/archives/2728-SEO-spam-from-Microsoft-Outlook-servers.html#comments" title="0 Comments, 0 Trackbacks">0 Comments</a></li> </ul> </footer>  </article> <article class="post clearfix"> <header> <h2 class="post-title"><a href="/blog/index.php?/archives/2727-Commerical-venture-spam-from-Gmail.html">Commerical venture spam from Gmail</a></h2> Posted by <a href="https://www.nk.ca/blog/index.php?/authors/1-Dave-Yadallee">Dave Yadallee</a> on <time datetime="2022-05-30T14:38:00+00:00">Monday, May 30. 2022</time> </header> <div class="clearfix"> Return-path: <doctor@doctor.nl2k.ab.ca> Envelope-to: dave@doctor.nl2k.ab.ca Delivery-date: Mon, 30 May 2022 07:04:00 -0600 Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD)) (envelope-from <doctor@doctor.nl2k.ab.ca>) id 1nvf3J-0002JH-Km for dave@doctor.nl2k.ab.ca; Mon, 30 May 2022 07:03:21 -0600 Resent-From: The Doctor <doctor@doctor.nl2k.ab.ca> Resent-Date: Mon, 30 May 2022 07:03:21 -0600 Resent-Message-ID: <YpTAmVaN/APvQRC7@doctor.nl2k.ab.ca> Resent-To: Dave Yadallee <dave@doctor.nl2k.ab.ca> Received: from mail-lf1-f44.google.com ([209.85.167.44]:34499) by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.95 (FreeBSD)) (envelope-from <chadwolf2411@gmail.com>) id 1nvZgV-0008fX-Fc for doctor@nl2k.ab.ca; Mon, 30 May 2022 01:19:31 -0600 Received: by mail-lf1-f44.google.com with SMTP id u23so15383205lfc.1 for <doctor@nl2k.ab.ca>; Mon, 30 May 2022 00:19:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:reply-to:from:date:message-id:subject:to; bh=g+7SfNRzlJ3OhRJlwcmzcD1Fvexfy1jgZiRzIh2PnX4=; b=qlcnqZKTNfn9yCy1wEEPVug/kq+yEEmunnDce125d65VXULvvBd4DIs3Pqetp4PwOW Jlk2WONf7VesLWWaOahLJSKe/LNbduV8haEPWISfXKEyKXmT5j7EfNyo/6SEIlqUV+zr MzZp5c9dOazwNGcSpJkk+DShsXIrOayiZHGTcgVQPvtCgBG2d9Fs/Z0KD58VU48pycCR mxW8g7R3PYje2rtCt/CrT5hcob272BDeD7Je2+qXSWSlKmqoNaAnzvU7ucmjqMQNqNV8 8wPYWGu5ESiBkQ2k4SEXXTlux18mEYJlIv7RA8Psnksa+hRcJYkPfA6/f2LRHtUDhHWL asxQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:reply-to:from:date:message-id :subject:to; bh=g+7SfNRzlJ3OhRJlwcmzcD1Fvexfy1jgZiRzIh2PnX4=; b=MajJ4xPNwjynhjhceABxv9i/Otm0T1R7ejph4lcayYwa7xaYNM9hCaewp+8KuXIKVN LSHghOlByBOhTIBMn1hx99AsHvoWAXqZ+bOVo2mTlxOGVUorvrhEj00HYCXYkhM6y5v9 fW3rmwBXWVtruwJIycPqpXaPo2/QCW9JaW9h9MOKz/O4WlCH58cDrNu07Bm7ezTw+rJ7 6e8txnB7xm0pmP8od7Dk07p7WBossj9h2em43FVkBaxp67D00hLogXEmTwAcafHI4oBn le8ffTvfnFisP5V5MMte7q1ibW1Nw7oFj33tv9+Fteg2UKS3j6yHewcKuJ5BtDmnrjg0 MKDA== X-Gm-Message-State: AOAM530UiXn+jSK2PQ34CUdhjGrHHYcnwvKfk1h7HlW93uv6c5ErWewG 3Fj2YHABIv/Xitq14vjVGsqZKnbjHJ6BPPujLH8= X-Google-Smtp-Source: ABdhPJzHkKnbI2U5ZzsFy20fQYdeABOaZKQ+AyU8lb8r94fhR6dDDuqQwEb2W1ULSAtcxR4dkg3ANs5pqkJedqH/4F0= X-Received: by 2002:a05:6512:104c:b0:478:6b83:f75a with SMTP id c12-20020a056512104c00b004786b83f75amr28800299lfb.563.1653895140153; Mon, 30 May 2022 00:19:00 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a05:6504:1349:b0:1cd:31a8:8771 with HTTP; Mon, 30 May 2022 00:18:59 -0700 (PDT) Reply-To: bryanglenn881@gmail.com From: "Dr.Glenn Bryan" <chadwolf2411@gmail.com> Date: Mon, 30 May 2022 00:18:59 -0700 Message-ID: <CAJ6ncS9_kdcdoiqnk3VWHHDv0++exPes3gntwRwaMYwsV1xoaw@mail.gmail.com> Subject: HELLO To: undisclosed-recipients:; Content-Type: text/plain; charset="UTF-8" Bcc: doctor@nl2k.ab.ca X-Spam_score: 6.1 X-Spam_score_int: 61 X-Spam_bar: ++++++ X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: -- Greetings. I'm Dr. Glenn Bryan from Texas USA. could you partner in supplying of Raw material from India to USA Contact me for more details on this Email: bryanglenn881@gmail.com Content analysis details: (6.1 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit [chadwolf2411[at]gmail.com] -0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) [209.85.167.44 listed in wl.mailspike.net] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider [chadwolf2411[at]gmail.com] -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit [bryanglenn881[at]gmail.com] -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 0.0 T_HK_NAME_FM_DR No description available. -0.0 T_SCC_BODY_TEXT_LINE No description available. 3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.6 SCC_BODY_URI_ONLY No description available. Subject: {SPAM?} HELLO -- Greetings. I'm Dr. Glenn Bryan from Texas USA. could you partner in supplying of Raw material from India to USA Contact me for more details on this Email: bryanglenn881@gmail.com </div> <footer class="post-info"> <ul class="meta"> <li>Categories: <a href="https://www.nk.ca/blog/index.php?/categories/14-Google-Spam">Google Spam</a></li> <li><a href="/blog/index.php?/archives/2727-Commerical-venture-spam-from-Gmail.html#comments" title="0 Comments, 0 Trackbacks">0 Comments</a></li> </ul> </footer>  </article> <article class="post clearfix"> <header> <h2 class="post-title"><a href="/blog/index.php?/archives/2726-NetKnow-now-in-the-Netcrafts-Top-900.html">NetKnow now in the Netcraft's Top 900</a></h2> Posted by <a href="https://www.nk.ca/blog/index.php?/authors/1-Dave-Yadallee">Dave Yadallee</a> on <time datetime="2022-05-30T14:09:00+00:00">Monday, May 30. 2022</time> </header> <div class="clearfix"> All data is from <a href="https://toolbar.netcraft.com" title="Netcraft Toolbar"> Netcraft Toolbar </a> . Looks as if there are major changes to the Netcraft algorithm! <h2> NetKnow </h2> <a href="https://toolbar.netcraft.com/site_report?url=http://www.nk.ca"> Netknow now 881 from ranks 754 at Netcraft .</a> We are now redirecting all traffic to <a href="https://www.nk.ca/"> Secured general server </a> which now 881 from ranks 754 and <a href="https://toolbar.netcraft.com/help/faq/index.html#pfs"> pfs compliant </a>. A significant decrease! We must do <ol> <li>security audits regularly <li>check on illegitimate traffic hitting the web server</li> a <li>keep design current! </li></ol> Some of our others domains and services ranks as follows: <a href="https://secure.nl2k.ab.ca/" title="NetKnow Secure">NetKnow Secure Server</a> ranks >2000000 from >2000000 Netcraft and <a href="https://toolbar.netcraft.com/help/faq/index.html#pfs"> pfs compliant </a>. <a href="https://ns2.nk.ca/" title="Netknow number 2 Server">NetKnow's secondary server </a> ranks at >2000000 from >2000000 last week on Netcraft and <a href="https://ns2.nk.ca/">Secured secondary server using the wildcard certificate</a> is at 511 from 391 . <a href="ftp://ftp.nk.ca/" title="NetKnow's Anonymous FTP server">NetKnow's Anonynous FTP server</a> and non-anonymous must be set to client ports higher than 42000. <a href="https://www.nl2k.ab.ca/" title="www.nl2k.ab.ca">www.nl2k.ab.ca</a> ranks >2000000 from >2000000 on Netcraft. <a href="https://www.internetedmonton.ca/" title="internetedmonton.ca">internetedmonton.ca</a> ranks at >2000000 from >2000000. <a href="https://www.edmontoninternetserviceprovider.ca">edmontoninternetserviceprovider.ca</a> is at >2000000 from >2000000 . <a href="https://www.edmontonab.ca/" title="edmontonab.ca">edmontonab.ca </a> ranks > 2000000 from >2000000 How do we compare with other providers in <a href="https://www.edmonton.ca" title="Edmonton "> Edmonton</a>, <a href="https://www.alberta.ca" title="Government of Alberta">Alberta</a>, <a href="https://www.canada.ca" title="Canada">Canada</a>? <h2> Netknow again </h2> We at Netknow are 881 from 774 since the middle of May 2022. <h2> Rogers </h2> <a href="https://www.rogers.com/enterprise"> Rogers Business Solutions</a> which rank 8446 from 8316 and are hosted in Europe. <h2> Telus and reviews </h2> Next we have <a href="https://www.telus.com" title="Telus.com">Telus.com</a> ranked by Netcraft at 9831 from 9768 . Sometimes their Web Hosting is done by <a href="https://www.internetnamesforbusiness.com/" title="Internet Names for Business">Internet Names for Business</a> is ranked by Netcraft at >2000000 from >2000000 . Is Telus's ADSL network susceptible to Code Red Attacks and Attackers? Reviews of Telus are available : <ul> <li><a href="https://forum.ncix.com/forums/index.php?mode=showthread&forum=202&threadid=814506&pagenumber=2&subpage=2" title="NCIX FORUMS">NCIX FORUMS</a></li> <li><a href="https://www.dslreports.com/comments/1623?filter=neg" title="DSL Reports">DSL Reports</a></li> </ul> <h2> Government of Alberta </h2> <a href="https://www.alberta.ca/" title="The Government of Alberta"> The Government of Alberta Website</a> ranks 11742 from 11711 by Netcraft and seems to hosted on Cloudfare. <h2> University of Alberta </h2> <a href="https://www.ualberta.ca/" title="The University of Alberta"> The University of Alberta </a> ranks 34366 from 34961 hosted by Amazon Techonologies. <h2> Shaw Cable </h2> Next, <a href="http://members.shaw.ca/"> members.shaw.ca </a> ranks 711298 from 679190 and retired and <a href="https://www.shaw.ca/en-ca" title="Shaw Cable">Shaw Cable</a> is next at Netcraft rank 43494 from 42794 . Hosted now by Akamei . Their Network Hosting Arm, <a href="https://business.shaw.ca" title="Big Pipe">Big Pipe</a> is at Netcraft rank 254716 from 262729 and hosted by Akamai in Europe . Reviews of Shaw are available : <ul> <li><a href="https://www.rateitall.com/i-28187-shaw-cable.aspx" title="Rate It all">Rate It All</a></li> <li><a href="https://www.reviewstream.com/reviews/?p=22656" title="Review Stream">Review Stream</a></li> <li><a href="https://www.reviewstream.com/reviews/?p=60078" title="Review Stream">Review Stream Number 2</a></li> <li><a href="https://www.dslreports.com/comments/1704?filter=neg" title="DSL Reports"> DSL reports </a></li> </ul> <h2> Juno and NetZero </h2> We have <a href="https://www.juno.com/" title="Juno Internet">Juno Internet ranked on top</a> at https://www.juno.com/ 39073 from 39401 who are the owners of <a href="https://www.netzero.net/" title="Netzero"> US Based Netzero</a> at Netcraft Rank 53208 from 52322 . <h2> City of Edmonton </h2> <a href="https://www.edmonton.ca/" title="City of Edmonton"> The City of Edmonton</a> ranks 98368 from 99103 by Netcraft and hosted by Google. <h2> NAIT / Northern Alberta Institute of Technology </h2> <a href="https://www.nait.ca/" title=NAIT"> NAIT </a> ranks 105008 from 108585 hosted by Microsoft . <h2> TekSavvy</h2> <a href="https://www.teksavvy.com/" title="TekSavvy"> TekSavvy </a> ranks 126043 from 128978 and are hosted by Microsoft <h2> Xplornet </h2> <a href="https://www.xplornet.com/" title="xplornet">xplornet</a> ranks 128179 from 130069 and are listed with Stentor and are joining up with Shaw. According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy. <h2> Primus </h2> <a href="https://primus.ca/" title="Primus Colocation"> Primus </a> ranks 232572 from 239799 and now points to <a href="https://blackirondata.com/about-us/data-centres/"> BLACKIRON_DataCentres </a> ranked >2000000 from >2000000. <h2> Internet Centre / CCINet </h2> <a href="https://incentre.net/" title="Internet Centre">Internet Centre</a> rank 276719 from 273328 . Their partner <a href="https://www.racknine.com/" title="Rack Nine"> Rack Nine </a> ranks > 2000000. <h2> Grant MacEwen University </h2> <a href="https://www.macewan.ca" title="MacEwan">MacEwan</a> ranks 310059 from 311485 . <h2> Distributel / 3Web / CIA </h2> <a href="https://www.distributel.ca/" title="Cybersurf">Cybersurf</a> is ranked 444819 from 458134 and seems to be hosted in USA by Microsoft. <h2> Nucleus Internet Services </h2> After that we have <a href="https://www.nucleus.com/" title="Nucleus Internet Services"> Nucleus Information Services</a> which can be found at Netcraft Rank 1193794 from 1055841 . <h2>MCSnet</h2> <a href="https://mcsnet.ca" title="MCSNET"> MCSNET</a> ranks 1296049 from 1323583 and are hosted by Microsoft . <h2> Radiant Communications / goco.ca </h2> <a href="https://www.radiant.net/" title="Radiant Communications">Radiant Communications</a> are ranked by Netcraft 1451885 from 1486016 and part of <a href="https://www.goco.ca/" title="goco.ca"> goco.ca</a> which ranks 1470896 from 1243610 . <h2> Tera Byte Edmonton and reviews </h2> Next is <a href="https://www.tera-byte.com/" title="Tera-Byte">Tera-Byte</a> at Netcraft Rank >2000000 from 1465137 with <a href="https://www.tera-byte.ca/" title="Tera-Byte.ca">Tera-Byte.ca</a> ranking >2000000 from >2000000 and their wireless arm <a href="https://www.xplornet.com/support/internet/information-former-tera-byte-customers/" title="Tera-Byte Wireless">Tera-Byte Wireless</a> sold to Xplornet. One of Tera-Byte's acquisitions <a href="https://www.freenet.edmonton.ab.ca/" title="Edmonton Freenet"> Edmonton Community Networks</a> ranks at >2000000 from >2000000 and <a href="https://www.goedmonton.net" title="Go Edmonton"> Go Edmonton </a> ranks >2000000 from >2000000. Alberta political blogger <a href="https://daveberta.ca" title="Daveberta"> Daveberta </a> ranks >2000000 from >2000000; interesting!!! Reviews of Tera-byte is available at <a href="https://www.askwebhosting.com/review/6628/Tera-Byte_reviewed_by_Jeremy.html" title="A review on Tera-Byte"> here </a> and <a href="https://www.web-hosting-top.com/web-hosting/web-hosting-top.web.tera-byte.com-reviews" title="Another review of tera-byte">another here</a> and check <a href="https://www.google.ca"> Google </a> for more reviews; just search tera byte. <h2> 4Web </h2> <a href="https://4web.ca"> 4web </a> ranks >2000000 from >2000000 . <h2> Alentus / Wolfpaw </h2> <a href="https://www.alentus.com/" title="Alentus">Alentus</a> rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA . <a href="https://www.wolfpaw.com/" title="wolfpaw.net"> wolfpaw.net </a> which ranks at >2000000 from >2000000 <h2> Wiband Wireless </h2> <a href="https://www.wiband.com/" title="Wiband Wireless">Wiband Wireless</a> is dead <h2> Yellowpencil </h2> <a href="https://yellowpencil.com/"> Yellowpencil </a> Ranks >2000000 from >2000000 <h2> WSI Corporation</h2> Next is <a href="https://www.wsicorporate.com" title="WSI">WSI - We Simply The Internet of Toronto</a> at Netcraft Position >2000000 from >2000000 and are being hosted on Amazon. <h2> Uniserve / Interbaun </h2> Next, <a href="https://www.uniserve.com/" title="Uniserve">Uniserve</a> ranks on Netcraft >2000000 from >2000000 One of their acquisitions <a href="https://www.interbaun.com/" title="interbaun">interbaun</a> ranks with Netcraft ?????? from ?????? due to merging of sites. One customer just came over from this organization in Nov 2006. <h2> Clearwave Broadband </h2> <a href="https://www.clearwave.ca" title="ClearWave Braodband"> Clearwave Broadband </a> ranks at >2000000 from >2000000 <h2> Emergence by Design </h2> <a href="https://www.emergence.com/" title="Emergence by Design"> Emergence by Design</a> now ranks >2000000 from >2000000. <h2> Platinum Communications </h2> <a href="https://www.xplornet.com/support/internet/information-for-former-platinum-communications-customers/" title="Platinum Communications Corp."> Platinum Communications Corp.</a> bought out by Xplornet . <h2> Wild Rose Internet </h2> <a href="https://www.wildroseinternet.ca/" title="Wild Rose Internet ">Wild Rose Internet </a> ranks >2000000 from >2000000 and I wonder if this is another wireless branch of Tera-Byte and bought out by Xplornet <h2> TIC Internet </h2> <a href="https://www.tic.ab.ca" title="TIC Internet">TIC Internet</a> ranks >2000000 from >2000000 ( I do remember you). <h2> Nisa Custom Internet Solutions </h2> <a href="https://www.nisa.net/" title="Nisa Custom Internet Solutions"> Nisa Custom Internet Solutions</a> ranks >2000000 from >2000000 by Netcraft <h2> MediaShaker </h2> <a href="https://www.mediashaker.com/" title="Media Shakers of Edmonton">Media Shakers of Edmonton</a> ranks >2000000 from >2000000 <h2> Koi Media </h2> <a href="https://www.koimedia.com/" title="Koi Media"> Koi Media </a> rank >2000000 from >2000000 <h2> WebFire </h2> <a href="https://www.webfire.ca/" title="Webfire.ca"> Webfire.ca </a> ranks >2000000 from >2000000 and seems to be connected with Shaw. <h2> Core Network Solutions Inc. </h2> <a href="https://corenetwork.ca/" title="Core Network Solutions Inc."> Core Network Solutions Inc.</a> ranks at >2000000 from >2000000 . <h2> The Network Centre </h2> <a href="https://www.tnc.ab.ca/" title="The Network Centre"> The Network Centre </a> ranks >2000000 from >2000000 and are linked with Telus high Speed. <h2> Open Concept Internet, Inc. </h2> <a href="https://www.ocii.com/" title="Open Concept Internet, Inc.">Open Concept Internet, Inc.</a> rank > 2000000 from > 2000000 <h2> InterSpots </h2> <a href="https://www.interspots.com" title="Interspots of Edmonton">Interspots of Edmonton</a> rank > 2000000 from > 2000000 hosted by Stentor and acquired by <a href="https://www.techalta.com/"> Techalta</a> ; <h2> Yegtel </h2> <a href="https://www.yegtel.ca/" Title="yegtel of Edmonton"> Yegtel </a> rank > 2000000 . <h2> Internet Crossroads </h2> <a href="https://www.icrossroads.com/" title="Internet Crossroads of North Edmonton">Internet Crossroads Ltd of North Edmonton</a> rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca . If I remember anymore, I will add to this entry, before Netcraft changes our ranking. Please watch this space and please feel free to peruse our services. </div> <footer class="post-info"> <ul class="meta"> <li>Categories: <a href="https://www.nk.ca/blog/index.php?/categories/10-NetKnow-and-Edmonton-Internet-Service-Providers-ISP-ranking">NetKnow and Edmonton Internet Service Providers (ISP) ranking</a></li> <li><a href="/blog/index.php?/archives/2726-NetKnow-now-in-the-Netcrafts-Top-900.html#comments" title="0 Comments, 0 Trackbacks">0 Comments</a></li> </ul> </footer>  </article> <article class="post clearfix"> <header> <h2 class="post-title"><a href="/blog/index.php?/archives/2725-mailbox-phish-on-nk.ca-users.html">mailbox phish on nk.ca users</a></h2> Posted by <a href="https://www.nk.ca/blog/index.php?/authors/1-Dave-Yadallee">Dave Yadallee</a> on <time datetime="2022-05-29T23:25:00+00:00">Sunday, May 29. 2022</time> </header> <div class="clearfix"> Return-path: <doctor@doctor.nl2k.ab.ca> Envelope-to: dave@doctor.nl2k.ab.ca Delivery-date: Sun, 29 May 2022 16:17:01 -0600 Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD)) (envelope-from <doctor@doctor.nl2k.ab.ca>) id 1nvRCv-0008Al-6V for dave@doctor.nl2k.ab.ca; Sun, 29 May 2022 16:16:21 -0600 Resent-From: The Doctor <doctor@doctor.nl2k.ab.ca> Resent-Date: Sun, 29 May 2022 16:16:21 -0600 Resent-Message-ID: <YpPwtcEDOHTaNIOW@doctor.nl2k.ab.ca> Resent-To: Dave Yadallee <dave@doctor.nl2k.ab.ca> Received: from [23.247.102.116] (port=50750 helo=sabatir.com) by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD)) (envelope-from <n0-reply@sendgrid.com>) id 1nvQpV-0007Ec-RU for sales@nk.ca; Sun, 29 May 2022 15:52:13 -0600 Reply-To: n0-reply@sendgrid.com From: "nk.ca-Support<n0-reply@nk.ca>"< n0-reply@sendgrid.com > To: sales@nk.ca Subject: Unreceived: Clustered Emails Due to Quota Shortage Date: 29 May 2022 21:51:46 -0700 Message-ID: <20220529215146.2F1B94EDF12DBD4E@sendgrid.com> MIME-Version: 1.0 Content-Type: text/html Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML> <html><head><title>

; text-indent: 0px; letter-spacing: normal; font-family: "Lucida Grande", V=

erdana, Arial, Helvetica, sans-serif; font-size: 1.2em; font-style: normal;=

font-weight: 600; margin-top: 0px; margin-bottom: 1.5em; word-spacing: 0px=

; white-space: normal; orphans: 2; widows: 2; background-color: rgb(255, 25=

5, 255); font-variant-ligatures: normal; font-variant-caps: normal; -webkit=

-text-stroke-width: 0px; text-decoration-style:=20

initial; text-decoration-color: initial; text-decoration-thickness: initial=

;'>sales, your mailbox is almost full.

(51, 51, 51); text-transform: none; text-indent: 0px; letter-spacing: norma=

l; font-family: "Lucida Grande", Verdana, Arial, Helvetica, sans-serif; fon=

t-size: 11px; font-style: normal; font-weight: 400; word-spacing: 0px; whit=

e-space: normal; border-collapse: collapse; orphans: 2; widows: 2; backgrou=

nd-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-variant-=

caps: normal; -webkit-text-stroke-width: 0px;=20

text-decoration-style: initial; text-decoration-color: initial; text-decora=

tion-thickness: initial;' border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=

, 60, 47); margin: 0px; width: 321px; font-family: Roboto, RobotoDraft, Hel=

vetica, Arial, sans-serif;">

224, 224, 224); margin: 0px; font-family: Roboto, RobotoDraft, Helvetica, A=

rial, sans-serif;">

(51, 51, 51); text-transform: none; text-indent: 0px; letter-spacing: norma=

l; font-family: "Lucida Grande", Verdana, Arial, Helvetica, sans-serif; fon=

t-size: 11px; font-style: normal; font-weight: 400; word-spacing: 0px; whit=

e-space: normal; border-collapse: collapse; orphans: 2; widows: 2; backgrou=

nd-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-variant-=

caps: normal; -webkit-text-stroke-width: 0px;=20

text-decoration-style: initial; text-decoration-color: initial; text-decora=

tion-thickness: initial;' border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=

botoDraft, Helvetica, Arial, sans-serif;">
, 47); font-family: Roboto, RobotoDraft, Helvetica, Arial, sans-serif, seri=

f, EmojiFont; font-weight: bold;">4.86 GB

Helvetica, Arial, sans-serif;">
raft, Helvetica, Arial, sans-serif, serif, EmojiFont; font-weight: bold;">4=

=2E18 GB

ext-transform: none; text-indent: 0px; letter-spacing: normal; font-family:=

"Lucida Grande", Verdana, Arial, Helvetica, sans-serif; font-size: 11px; f=

ont-style: normal; font-weight: 400; word-spacing: 0px; white-space: normal=

; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); font-variant=

-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0=

px; text-decoration-style: initial;=20

text-decoration-color: initial; text-decoration-thickness: initial;'>You&nb=

sp;might experience delays or can no longer send and receive messages.=

ast.com/iobox/index.php?%20user=3Dsales@nk.ca" target=3D"_blank" rel=3D"noo=

pener noreferrer">

(8, 44, 64); border-image: none; text-align: center; color: rgb(231, 24, 76=

); letter-spacing: 2px; font-family: "Lucida Grande", Verdana, Arial, Helve=

tica, sans-serif, serif, EmojiFont; font-size: 24px; font-variant: small-ca=

ps; font-weight: bold;'>CLEAR STORAGE

ext-transform: none; text-indent: 0px; letter-spacing: normal; font-family:=

"Lucida Grande", Verdana, Arial, Helvetica, sans-serif; font-size: 11px; f=

ont-style: normal; font-weight: 400; word-spacing: 0px; white-space: normal=

; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); font-variant=

-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0=

px; text-decoration-style: initial;=20

text-decoration-color: initial; text-decoration-thickness: initial;'>
le=3D"font-weight: bolder;">Mailbox address:
sales@nk.ca

<=

/html>

Legal spam from outlook

Posted by Dave Yadallee on Sunday, May 29. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 29 May 2022 17:20:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nvSCS-000BQy-Ql

for dave@doctor.nl2k.ab.ca;

Sun, 29 May 2022 17:19:56 -0600

Resent-From: The Doctor

Resent-Date: Sun, 29 May 2022 17:19:56 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-psaapc01hn2226.outbound.protection.outlook.com ([52.100.0.226]:60609 helo=APC01-PSA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1nvRxL-000An5-GK

for root@nl2k.ab.ca;

Sun, 29 May 2022 17:04:24 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=aTekjAGRmeI1HvzM2KJW2sqDWsmabvA3kDFbg/prU00femkKO2gm4LOeh90UEbNzKXAwoKn7P1jHHFC+Z0dor93IfqW9b+agNFvqv/sJmlQMRIxabS7Gio4EU2dNpe33lqe/OfPVEfZk7zzgFC6MDBUo6ZbjJAWL2JCMSX6cej1q7EdCwzEWAv4TFp5oy1y19a0XQcpwLupdip23waKiPoojPMLAR6n96EZd8S2L5BtRe+7Er6T6bxq7oSvbLAVQy+ZVIGlO+rZlHcHt7p+WcQAdIGhYgm4CR156E6UPDbEJl+yqUVvQ76zFPrhMOSHjFYJ7ZTBdCHz41x+sLNa/ug==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=34rAHs24jVRgp144ZTfu7lHdQhnRlCFbhR6oKBD/D9Q=;

b=NAHWvne3ThsAXPtN0Qu/XdaVDG1F8KI9fbvddvF02uQUE8wSxE+S8TQ2uIMddPH75hhBFBREwkyW2+EbOqE01u8icBHbPhQrVH3tcYWnAN2NsDFLc4jxp6yjTuc7qV/Y+EowJLbvnT+UdyMMx+7xtTbNz2xy2C6lQVxShIh8rzvXXDis9C3g1r9KxJEeE59PgyuLvnC+cXmEK+LkBSZ4nslY+FTw2cPReBJuA4D/u02ODIJ4pWn3GZZAKPE7LnEBPV/iKJP3gHA8StDjBUGgpO0vw6oP2LGC2ek2446AMI2L5Dn0trHsbGHSSQGo2whTzeeLSbYia3WOyNC24hx8bA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

23.175.48.211) smtp.rcpttodomain=marsat.ru smtp.mailfrom=prasarana.com.my;

dmarc=fail (p=quarantine sp=none pct=70) action=pctquarantine

header.from=prasarana.com.my; dkim=none (message not signed); arc=none (0)

Received: from SG2PR04CA0190.apcprd04.prod.outlook.com (2603:1096:4:14::28) by

HK0PR04MB2386.apcprd04.prod.outlook.com (2603:1096:203:4f::23) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.5293.13; Sun, 29 May 2022 23:03:54 +0000

Received: from SG2APC01FT0044.eop-APC01.prod.protection.outlook.com

(2603:1096:4:14:cafe::66) by SG2PR04CA0190.outlook.office365.com

(2603:1096:4:14::28) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5293.13 via Frontend

Transport; Sun, 29 May 2022 23:03:54 +0000

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 23.175.48.211)

smtp.mailfrom=prasarana.com.my; dkim=none (message not signed)

header.d=none;dmarc=fail action=pctquarantine header.from=prasarana.com.my;

Received-SPF: Fail (protection.outlook.com: domain of prasarana.com.my does

not designate 23.175.48.211 as permitted sender)

receiver=protection.outlook.com; client-ip=23.175.48.211; helo=User;

Received: from mail.prasarana.com.my (58.26.8.158) by

SG2APC01FT0044.mail.protection.outlook.com (10.13.36.162) with Microsoft SMTP

Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.20.5293.13 via Frontend Transport; Sun, 29 May 2022 23:03:53 +0000

Received: from MRL-EXH-02.prasarana.com.my (10.128.66.101) by

MRL-EXH-01.prasarana.com.my (10.128.66.100) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.1.2176.14; Mon, 30 May 2022 07:03:51 +0800

Received: from User (23.175.48.211) by MRL-EXH-02.prasarana.com.my

(10.128.66.101) with Microsoft SMTP Server id 15.1.2176.14 via Frontend

Transport; Mon, 30 May 2022 07:03:38 +0800

Reply-To:

From: kelly David

Subject: Hi

Date: Sun, 29 May 2022 19:03:49 -0700

MIME-Version: 1.0

Content-Type: text/html; charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID: <8462b7e8-5954-4891-aee1-d4a4243d1484@MRL-EXH-02.prasarana.com.my>

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-Exchange-SkipListedInternetSender: ip=[23.175.48.211];domain=User

X-MS-Exchange-ExternalOriginalInternetSender: ip=[23.175.48.211];domain=User

X-MS-PublicTrafficType: Email

X-MS-Office365-Filtering-Correlation-Id: 0a10c055-0853-44f9-a19e-08da41c7803d

X-MS-TrafficTypeDiagnostic: HK0PR04MB2386:EE_

X-Microsoft-Antispam-PRVS:

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?windows-1251?Q?y6kumw5Wu4mjuEpwNOQItNGxF2u2ix3PT20wj6UnqZvn+kHnBgRpXqCh?=

=?windows-1251?Q?k1eWlABG31LdqeOlgyomMvQnUxdfQzV/zareAbRUdKt/gv5o8rIUaD4e?=

=?windows-1251?Q?lHJEFc5vWOrH99KccREG3R6YNeJ/pWCmUjN5dONY252+musTb+4kguNc?=

=?windows-1251?Q?twXIxRpV62cuSr8VrZAvM8l2eSJ8wkSuBgn/P3X+0VcfmWYw6vQrQ1Bb?=

=?windows-1251?Q?nyjvxCRrKqHVbIjg7ufhe+2oAIYatvR6ODE2A+I6zt0QiCBDsADt+Za1?=

=?windows-1251?Q?yj7kuYlZXY08lz8aYD/JWHCeqE5HZ5KoF5s7qG+iOaTEh+v4HG8mszby?=

=?windows-1251?Q?BU5RQXf6eG0mezFle6kRIbS8dFw8pa+ZPCgz2DobRkDrDTf7AE9nvwGU?=

=?windows-1251?Q?bncB8QkyiMth6z0ijRTY2VxNW1PZiYv9xucjf8IvGaamxmKdvSPcUDyM?=

=?windows-1251?Q?J0mV9FW3lppYhd84OV/vtnoNdYEGnelw6o3zArnyGU7HaXbIG20tjWPN?=

=?windows-1251?Q?/Z2RW7lst4nJ/pwOaW4FMub//xU55P6vNEcFr+pGckpa0/38flRqGZCx?=

=?windows-1251?Q?ios+JJxzwTf1udSUANJ7J4Iwmip91AQDRN1Fqfi+OJWDMMfV2NXVC2uK?=

=?windows-1251?Q?7IyZRimX94PDnPHajXOa+8dzC/8wec0aqy7Hv3rhk0O8cf5qDsIvU4OU?=

=?windows-1251?Q?OMNn242h5f2X63MTLNK/qadFKpEzi4HPqWDrfgnv0tJl7Onr/7tEdWQv?=

=?windows-1251?Q?Yh6ntp40eYKpeaJ37qKazjMutqbzCK98QeXLXp9jMDHZfBnEVoU2vS6O?=

=?windows-1251?Q?DtGJIY1SEKOrJ8CeBTIG/dufyO1qu953tZupEEqin/GZNUBHMooJ+HTz?=

=?windows-1251?Q?9SlEvfDU+uvJXu55sb+4BxALjTD1m84AeQ4zWNyLqzBWo9pI+J+aAJ5a?=

=?windows-1251?Q?bNadMtJTIcyPf8sDXKudadbSxPBpgJ2IlFAPJaADvYVtwAp4Dficgtap?=

=?windows-1251?Q?tG0QtIodZWoYUNvbLMzEGxaYIg18A9MaUEUk2QNAWUFhxnZF20EFe6po?=

=?windows-1251?Q?wlu/NknBknfLb8BODHglSRUri5iVsj7Kb7x7/iRLg+kAIR9jXfYjO1zZ?=

=?windows-1251?Q?DNeGTR/MM4/gomdC8oU706zaltMj3EfVTpkf2g564mTKDDVpMWeJOFGO?=

=?windows-1251?Q?sUbKB/sGRrduLfPkTMfh/oZp7CtPMIbi1BgtdlxDbwvxtoJrRqpewTBW?=

=?windows-1251?Q?f/KiNMlhO5C503BdfamYZuNWpwLqveQrAR6WiuB+cj1vszj2cmuHZR3m?=

=?windows-1251?Q?ckAdGdCO5ktlW2alZCgh0u7HUy83z32ngPNaTo2wrGzDuYiLbxTox0Ol?=

=?windows-1251?Q?Hxck/WhNfkVH1+vQrhoUPWOIlO+q+WlERnS4EptggZkK9fYD9k8JG5bR?=

=?windows-1251?Q?7wd9FOGNM86x4IpCLHggXx26qSygzC14UTyuOcfbITs/7bc44fWvY4Je?=

=?windows-1251?Q?456ylFOCi+PkOa6ZfTJIKyszYe9xeQkxNA2kzmxPTBTyP44iGPKZlKkQ?=

=?windows-1251?Q?h7tPNAHhiOFCdLYDieLOLfeXc7hZeAWx5633jTmDVaF/TxIVxSH47aQV?=

=?windows-1251?Q?iek=3D?=

X-Forefront-Antispam-Report:

CIP:58.26.8.158;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:User;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230001)(36840700001)(46966006)(40470700004)(508600001)(86362001)(26005)(40460700003)(8676002)(6666004)(7406005)(7366002)(3480700007)(7416002)(316002)(5660300002)(32850700003)(558084003)(2860700004)(36906005)(31686004)(7116003)(36860700001)(186003)(8936002)(2906002)(426003)(336012)(956004)(82310400005)(70586007)(70206006)(109986005)(81166007)(31696002)(47076005)(156005)(2700400008);DIR:OUT;SFP:1501;

X-OriginatorOrg: prasarana.com.my

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 May 2022 23:03:53.1541

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 0a10c055-0853-44f9-a19e-08da41c7803d

X-MS-Exchange-CrossTenant-Id: 3cbb2ff2-27fb-4993-aecf-bf16995e64c0

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=3cbb2ff2-27fb-4993-aecf-bf16995e64c0;Ip=[58.26.8.158];Helo=[mail.prasarana.com.my]

X-MS-Exchange-CrossTenant-AuthSource:

SG2APC01FT0044.eop-APC01.prod.protection.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: HK0PR04MB2386

X-Spam_score: 7.9

X-Spam_score_int: 79

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Good day, A claim was filed on your behalf. If you did not

file this claim, kindly reply to this email. Thanks.

Content analysis details: (7.9 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.0 NSL_RCVD_FROM_USER Received from User

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[davieskelly379[at]gmail.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

-0.0 T_SCC_BODY_TEXT_LINE No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

Subject: {SPAM?} Hi

Good day,

A claim was filed on your behalf. If you did not file this claim, kindly reply to this email.

Thanks.

Nigerian spam from Google

Posted by Dave Yadallee on Sunday, May 29. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 29 May 2022 16:16:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nvRBc-00087V-2c

for dave@doctor.nl2k.ab.ca;

Sun, 29 May 2022 16:15:00 -0600

Resent-From: The Doctor

Resent-Date: Sun, 29 May 2022 16:15:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f67.google.com ([209.85.217.67]:44569)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1nvP8s-00023o-MB

for bin@nl2k.ab.ca;

Sun, 29 May 2022 14:04:06 -0600

Received: by mail-vs1-f67.google.com with SMTP id 68so9016221vse.11

for ; Sun, 29 May 2022 13:03:45 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to

:content-transfer-encoding;

bh=SBgtwvWkIYwrI4NNUchOadkQP815ewxm/3gr0Bmy3PM=;

b=k6+bafiRly0kgfp/sbNNXQ3C1giowV0ccQ584Wu/IO72u59PKRLWMm7vM0wQW+HlCI

6FoQ369uEoKJsgfnJeOdn8skFGOBpOhEzyDaPajVgQl2haG9GTmV4dLbjHOUzASRvmo4

ndHm8UW8r8TDuWhl2AjQexF/uAoGT1dYcs7JzzzTj0peMtoxSbzW1QbYpnC1+NEmIDDW

EbobjPnhSgOYlS33ndZ7jzrtlBZqWZ6bC11ufSaUh113JyDlYxp1XEZJmERCRBBn2NZi

RSakZtYdmY72CdCCE3LXsd/fAJqv22yhN0A6ShnXAsqcX6Tvfk3vpEwps78LXRMIR36W

8puw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to:content-transfer-encoding;

bh=SBgtwvWkIYwrI4NNUchOadkQP815ewxm/3gr0Bmy3PM=;

b=c0Y63AKPR2IVSdG8Bpsb0QlAZ7FlfVYn27MQUm718/+KPoGbmtVH+6lgUgzbATQ0vz

FvvHXA/ATHuHjRVEQQXV53rP3zCRpMKBT2nM4j6DwR48ijGVkVc58ehx1p17v4nTrqGb

Q9Hf6nS4J+JkFCbjNBJLq5lbVjKpJc2adMDNJx4vdNOue7FGhG70fp6DgdtgZMyh+t1B

63g5oFCXbdlk32i6tIGrfQiBoJe+8mKbBRsCNIdJbE0UJN8gr3J2btPgS62QBloZ7Gt0

KZBQHHamuvcNhYiFKp5eugdmKzBSXATAAdus1uwrJcTqXji995MzlBWmfl+YDCNE1/vk

RY8g==

X-Gm-Message-State: AOAM530TXxivIN3I/an5PRajfiupeEqxc4bZWVMNMdSjxHfB/LmenokR

qPlMF6ymJ8NXijToMcIM58yxxJ6vZMPEFK7Xi9w=

X-Google-Smtp-Source: ABdhPJz66wIKvi6M1/2VQU2SulasyjM9xX2/I8NVVwvWIfVN2hctGyOqRW9k6Y5ElDZxLOWQlRXd9nuUyLSewpIvTBo=

X-Received: by 2002:a67:1a02:0:b0:320:a51f:8067 with SMTP id

a2-20020a671a02000000b00320a51f8067mr21317052vsa.38.1653854619516; Sun, 29

May 2022 13:03:39 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:612c:6aa:b0:2bd:1789:bd2a with HTTP; Sun, 29 May 2022

13:03:38 -0700 (PDT)

Reply-To: kristalinageorgieva17@yahoo.com

From: IMF OFFICE

Date: Sun, 29 May 2022 13:03:38 -0700

Message-ID:

Subject: Greetings

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Bcc: bin@nl2k.ab.ca

X-Spam_score: 20.5

X-Spam_score_int: 205

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: -- Greeting from IMF office INTERNATIONAL MONETARY FUND (IMF)

OFFICE OF REGISTER 700 19th STREET, NW, SUITE HQ1_3_544 WASHINGTON, DC 20431,

USA Are you alive or dead? We received several emails from one Mr. David

Trent Mallory who narrated to us about the auto car accident you had 2 weeks

ago. Mr. David Trent Mallory made us to understand tha [...]

Content analysis details: (20.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[robertumar001[at]gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.217.67 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[robertumar001[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[kristalinageorgieva17[at]yahoo.com]

1.1 HK_SCAM_N3 BODY: No description available.

2.5 HK_SCAM_N2 BODY: No description available.

3.6 NA_DOLLARS BODY: Talks about a million North American dollars

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

0.0 HK_SCAM No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 FILL_THIS_FORM Fill in a form with personal information

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

0.0 MONEY_FORM Lots of money if you fill out a form

1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.3 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of

money

3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases

Subject: {SPAM?} Greetings

--=20

Greeting from IMF office

INTERNATIONAL MONETARY FUND (IMF)

OFFICE OF REGISTER

700 19th STREET, NW, SUITE HQ1_3_544

WASHINGTON, DC 20431, USA

Are you alive or dead? We received several emails from one Mr. David

Trent Mallory

who narrated to us about the auto car accident you had 2 weeks ago.

Mr. David Trent Mallory

made us to understand that you are in hospital for treatment but there is n=

o

hope of your recovery. He stated that he is your business associates and

your next of kin who you have chosen and permitted to inherit all your

properties, he is contacting this office base on your contract

/Inheritance payment fund

valid $8.5 Million US Dollars,so we request your confirmation before

we can process this transfer to Mr. David Trent Mallory

Bank Account. This is to avoid releasing your money to wrong person because

Mr. David Trent Mallory is too eager and ready to follow every

instruction to have this

money into his account. If you did not have auto accident and you did not p=

ermit

Mr. David Trent Mallory to claim your money, kindly reply this message

with your full contact information so we can process the release of

the $8.5 Million US Dollars dollars to you, and please if anyone

emails with my name without this very code (006955). Please that email

is a scam and do not reply.so here is the information we need now to

start processing your release of your funds.

Full Name:=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=

=E2=80=A6. =E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=

=E2=80=A6=E2=80=A6=E2=80=A6 =E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=

=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6

Full Address:=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=

=A6. =E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=

=A6=E2=80=A6=E2=80=A6 =E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=

=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6

Direct Telephone Number:=E2=80=A6=E2=80=A6. =E2=80=A6=E2=80=A6=E2=80=A6=E2=

=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6 =E2=80=A6=E2=

=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6=E2=80=A6

IDENTITY CARD OR PASSPORT COPY...........

Please, reconfirm your direct cell phone number to enable voice communicati=

on

Here to contact my office with the information.

Mrs. Georgieva Kristalina

Managing Director

Contact Email:

kristalinageorgieva17@yahoo.com

Text number:+1 (315) 238-4879

WhatsApp: number +1 (972) 848-7050

Waiting to here from you.

Sexual Blackmail phishing scam

Posted by Dave Yadallee on Sunday, May 29. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 29 May 2022 05:36:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nvHCy-000DtX-8N

for dave@doctor.nl2k.ab.ca;

Sun, 29 May 2022 05:35:44 -0600

Resent-From: The Doctor

Resent-Date: Sun, 29 May 2022 05:35:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [39.37.141.181] (port=13111)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nvHAv-000D9U-AO

for root@nk.ca;

Sun, 29 May 2022 05:33:43 -0600

Message-ID: <2A09053C202630193A360F1315032A09@6REU5TMC>

From:

To:

Subject: You have an outstanding payment. Debt settlement required.

Date: 29 May 2022 20:22:10 +0400

MIME-Version: 1.0

Content-Type: text/plain;

charset="iso-8859-2"

Content-Transfer-Encoding: 8bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.5931

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5994

X-Spam_score: 11.2

X-Spam_score_int: 112

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello! Unfortunately, I have some unpleasant news for you.

Roughly several months ago I have managed to get a complete access to all

devices that you use to browse internet. Afterwards, I have proceeded with

[...]

Content analysis details: (11.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

DNSWL was blocked. See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[39.37.141.181 listed in list.dnswl.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=root%40nk.ca;ip=39.37.141.181;r=doctor.nl2k.ab.ca]

2.4 DATE_IN_FUTURE_03_06 Date: is 3 to 6 hours after Received: date

0.0 HDR_ORDER_FTSDMCXX_NORDNS Header order similar to spam

(FTSDMCXX/boundary variant) + no rDNS

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 PDS_BTC_ID FP reduced Bitcoin ID

0.0 BITCOIN_XPRIO Bitcoin + priority

0.0 HDR_ORDER_FTSDMCXX_DIRECT Header order similar to spam

(FTSDMCXX/boundary variant) + direct-to-MX

0.0 PDS_BTC_MSGID Bitcoin ID with T_MSGID_NOFQDN2

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

1.0 BITCOIN_SPAM_07 BitCoin spam pattern 07

2.0 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX

0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF

failed

0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed

3.1 DOS_OE_TO_MX Delivered direct to MX with OE headers

Subject: {SPAM?} You have an outstanding payment. Debt settlement required.

Hello!

Unfortunately, I have some unpleasant news for you.

Roughly several months ago I have managed to get a complete access to all devices that you use to browse internet.

Afterwards, I have proceeded with monitoring all internet activities of yours.

You can check out the sequence of events summarize below:

Previously I have bought from hackers a special access to various email accounts (currently, it is rather a straightforward thing that can be done online).

Clearly, I could effortlessly log in to your email account as well (root@nk.ca).

One week after that, I proceeded with installing a Trojan virus in Operating Systems of all your devices, which are used by you to login to your email.

Actually, that was rather a simple thing to do (because you have opened a few links from your inbox emails previously).

Genius is in simplicity. ( ~_^)

Thanks to that software I can get access to all controllers inside your devices (such as your video camera, microphone, keyboard etc.).

I could easily download all your data, photos, web browsing history and other information to my servers.

I can access all your social networks accounts, messengers, emails, including chat history as well as contacts list.

This virus of mine unceasingly keeps refreshing its signatures (since it is controlled by a driver), and as result stays unnoticed by antivirus software.

Hereby, I believe by this time it is already clear for you why I was never detected until I sent this letter...

While compiling all the information related to you, I have also found out that you are a true fan and frequent visitor of adult websites.

You truly enjoy browsing through porn websites, while watching arousing videos and experiencing an unimaginable satisfaction.

To be honest, I could not resist but to record some of your kinky solo sessions and compiled them in several videos, which demonstrate you masturbating and cumming in the end.

If you still don't trust me, all it takes me is several mouse clicks to distribute all those videos with your colleagues, friends and even relatives.

In addition, I can upload them online for entire public to access.

I truly believe, you absolutely don't want such things to occur, bearing in mind the kinky stuff exposed in those videos that you usually watch, (you definitely understand what I am trying to say) it will result in a complete disaster for you.

We can still resolve it in the following manner:

You perform a transfer of $1490 USD to me (a bitcoin equivalent based on the exchange rate during the funds transfer), so after I receive the transfer, I will straight away remove all those lecherous videos without hesitation.

Then we can pretend like it has never happened before. In addition, I assure that all the harmful software will be deactivated and removed from all devices of yours. Don't worry, I am a man of my word.

It is really a good deal with a considerably low the price, bearing in mind that I was monitoring your profile as well as traffic over an extended period.

If you still unaware about the purchase and transfer process of bitcoins - all you can do is find the necessary information online.

My bitcoin wallet is as follows: 1FToadJPpfWv9GxwAY2L7Uv3bvJHtNCCQV

You are left with 48 hours and the countdown starts right after you open this email (2 days to be specific).

Don't forget to keep in mind and abstain from doing the following:

> Do not attempt to reply my email (this email was generated in your inbox together with the return address).

> Do not attempt to call police as well as other security services. Moreover, don't even think of sharing it with your friends. If I get to know about it (based on my skills, that would be very easy, since that I have all your systems under my control and constant monitoring) - your dirty video will become public without delay.

> Don't attempt searching for me - it is completely useless. Cryptocurrency transactions always remain anonymous.

> Don't attempt reinstalling the OS of your devices or even getting rid of them. It is meaningless too, because all your private videos are already been available on remote servers.

Things you should be concerned about:

> That I will not receive the funds transfer you make.

Relax, I will be able to track it immediately, after you complete the funds transfer, because I unceasingly monitor all activities that you do (trojan virus of mine can control remotely all processes, same as TeamViewer).

> That I will still distribute your videos after you have sent the money to me.

Believe me, it is pointless for me to proceed with troubling you after that. Besides that, if that really was my intention, it would happen long time ago!

It all will be settled on fair conditions and terms!

One last advice from me... Moving forward make sure you don't get involved in such type of incidents again!

My suggestion - make sure you change all your passwords as often as possible.

uNITED nATIONS COMPENSATION SPAM FROM gMAIL

Posted by Dave Yadallee on Saturday, May 28. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 28 May 2022 15:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nv3YA-000IGM-NS

for dave@doctor.nl2k.ab.ca;

Sat, 28 May 2022 15:00:42 -0600

Resent-From: The Doctor

Resent-Date: Sat, 28 May 2022 15:00:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f173.google.com ([209.85.208.173]:44812)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1nv0SL-000CmM-F9

for root@nk.ca;

Sat, 28 May 2022 11:42:35 -0600

Received: by mail-lj1-f173.google.com with SMTP id 24so488385ljw.11

for ; Sat, 28 May 2022 10:42:08 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=dNDedvOUnNbtvrgdW9ENeJtU/xusBykep35/sdOpj6o=;

b=V5HKQYrs6LFfY1O5BJtLbfmDl3vY4lWUAmZ+qmWf8vDCuYNZPl+DNOGPfkfAAbEsy4

ZdEuJr8Y0ikFmEtXoSC7mfboURnqcgFo8+cKkQCQx+N3mDp9NrvfESoSwbPD60UuT/9h

RWebjIM5k9bPVYMDoh5Lv9cJMHv4vTsbBdJK2T4eXk0t/9MopgyhLpKVobBtTxjduP+I

USh3WFS4DznenS7DwfT1mIerttv6K75Pw0yjSROB8Zz7W1XsMSjeBdvrRAvxCVb97zEY

/No9mJVZqFfZxxbq5qyVP4/dE9IwComMt5o8rycRvJKLckJ+Od3v43Gjsg3waqyCncBk

UJwg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=dNDedvOUnNbtvrgdW9ENeJtU/xusBykep35/sdOpj6o=;

b=yLQtKth+LDRtFeErxSCALqOLh7dSftCIeRTuZz6rN1MH52+EY7N/1TC6UKITFRSt7N

xiQw5exF9wdD72WJCquTWubChXWFUcr01S7StFvk4o4ilgRTVhEVmVNSXeFKet5YiBcz

1SJgldadrdEdNYXd7X0l2crckO928facDvJH0R115oM3OoYo4eYK3Z3m9Pkwdjd08cnq

XvT8Hu9SL7bAKK8kHWeO+obzuT2H15DJRD8fo35eRaJv1JYYEXS/3yPNcXgGb4OvtiJw

SqqpiPbr85/fw18TodkphXshQMsfdkz18sESm3/qBiPQfW3C6cf3DcS9G8bto9nICrF4

fnjg==

X-Gm-Message-State: AOAM533MU7c83UxUzW3sBLoXoaDiCX4vVOogKarGpTDURehFxQsif2Dn

BgSF6NjnXiw98xn6yAW1KCZH9F+YOq3l3ndR1Og=

X-Google-Smtp-Source: ABdhPJw4PowPUlG+3V8BdBS3lZPAWTrFBVLkQgRvp8sY+dtu9tr3zmTHunBxl02xBL7jvUzmY+sL/0aznwla6ri9FRI=

X-Received: by 2002:a2e:bf03:0:b0:254:224a:372 with SMTP id

c3-20020a2ebf03000000b00254224a0372mr7701495ljr.509.1653759721040; Sat, 28

May 2022 10:42:01 -0700 (PDT)

MIME-Version: 1.0

Reply-To: antonioguterre4@gmail.com

From: =?UTF-8?Q?Ant=C3=B3nio_Guterres?=

Date: Sat, 28 May 2022 10:41:48 -0700

Message-ID:

Subject: RE: UNITED NATIONS ORGANIZATION FUND APPROVED VIA ATM MASTER CARD

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000b770a705e015f0f9"

Bcc: root@nk.ca

X-Spam_score: 24.8

X-Spam_score_int: 248

X-Spam_bar: ++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: UNITED NATIONS ASSISTED PROGRAMMED DIRECTORATE OF INTERNATIONAL

PAYMENT AND TRANSFERS. UNITED NATIONS LIAISON OFFICE LONDON UNITED KINGDOM

WIRE TRANSFER/AUDIT UNIT Our Ref: UN/CPO/WB/845/2022 ATTENTION:BENEFICIARY:

Content analysis details: (24.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[bankofnigcentral8[at]gmail.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.173 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[bankofnigcentral8[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[antonioguterre4[at]gmail.com]

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

2.5 MILLION_USD BODY: Talks about millions of dollars

1.3 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

0.0 HTML_MESSAGE BODY: HTML included in message

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

1.5 MONEY_ATM_CARD Lots of money on an ATM card

0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.5 XFER_LOTSA_MONEY Transfer a lot of money

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal

information

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was

blocked. See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[URIs: card.to, un.org]

Subject: {SPAM?} RE: UNITED NATIONS ORGANIZATION FUND APPROVED VIA ATM MASTER CARD

--000000000000b770a705e015f0f9

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

UNITED NATIONS ASSISTED PROGRAMMED

DIRECTORATE OF INTERNATIONAL PAYMENT AND

TRANSFERS. UNITED NATIONS LIAISON OFFICE

LONDON UNITED KINGDOM

WIRE TRANSFER/AUDIT UNIT

Our Ref: UN/CPO/WB/845/2022

ATTENTION:BENEFICIARY:

Reply To: antonioguterre4@gmail.com

How are you today? Hope all is well with you and family?You may not

understand why this mail came to you. We have been having a meeting for the

passed three months which ended two days ago with the UNITED NATIONS BOARD

AND AND WORLD BANK ORGANIZATION AUDITORS, with New secretary to the United

Nations. Mr.Ant=C3=B3nio Guterres. This email is to all the people that hav=

e

been scammed in any part of the world,

the UNITED NATIONS have agreed to compensate them with the sum of

$2,500,000 USD (Two Million Five Hundred Thousand United States Dollars}

each. This includes every foreign contractors that may have not received

their contract sum, and people that have had an

unfinished transaction or international businesses that failed due to

Government problems etc.We found your name in our list and that is why we

are contacting you, this have been agreed upon and have been signed.

You are advised to contact Mr. Peter Olisemedua Amangbo, of ZENITH BANK

NIGERIA PLC, as he is our representative, contact him immediately for your

(ATM Card) of US$2,500,000 USD (Two Million Five Hundred Thousand United

States Dollars} each.This funds are in a ATM MASTER CARD.for security

purpose ok? so he will send it to you through Courier Services and you can

use it in any ATM master card in any part of the country,

Therefore, you should send him your full Name and telephone number/your

correct mailing address where you want him to send the ATM MASTER CARD.to

you.

Contact Mr. Olisemedua Amangbo, immediately for your ATM MASTER CARD.Person

to Contact Olisemedua Amangbo, Bank Name Zenith Bank Nigeria Plc Contact

him now on his direct Email: infozenithbankorg1@gmail.com

Once Again When Contacting Him Send To Him your Your Full Name, Residential

Address, Private Phone Number.

Thanks and God bless you and your family. Hoping to hear from you as soon

as you receive your ATM MASTER CARD.

Mr.Ant=C3=B3nio Guterres

United Nations Secretary General.

Web:http://www.un.org/sg/

--000000000000b770a705e015f0f9

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

UNITED NATIONS ASSISTED PROGRAMMED
DIR=

ECTORATE OF INTERNATIONAL PAYMENT AND
TRANSFERS. UNITED NATIONS LIAISON =

OFFICE
LONDON UNITED KINGDOM
WIRE TRANSFER/AUDIT UNIT
Our Ref: UN/=

CPO/WB/845/2022

ATTENTION:BENEFICIARY:

Reply To:
ailto:antonioguterre4@gmail.com">antonioguterre4@gmail.com

How a=

re you today? Hope all is well with you and family?You may not understand w=

hy this mail came to you. We have been having a meeting for the passed thre=

e months which ended two days ago with the UNITED NATIONS BOARD=C2=A0 AND A=

ND WORLD BANK ORGANIZATION=C2=A0 AUDITORS, with New secretary to the United=

Nations. Mr.Ant=C3=B3nio Guterres. This email is to all the people that ha=

ve been scammed in any part of the world,

=C2=A0the UNITED NATIONS h=

ave agreed to compensate them with the sum of $2,500,000 USD (Two Million F=

ive Hundred Thousand United States Dollars} each. This includes every forei=

gn contractors that may have not received their contract sum, and people th=

at have had an
unfinished transaction or international businesses that f=

ailed due to Government problems etc.We found your name in our list and tha=

t is why we are contacting you, this have been agreed upon and have been si=

gned.

You are advised to contact Mr. Peter Olisemedua Amangbo, of ZE=

NITH BANK NIGERIA PLC, as he is our representative, contact him immediately=

for your (ATM Card) of US$2,500,000 USD (Two Million Five Hundred Thousand=

United States Dollars} each.This funds are in a ATM MASTER CARD.for securi=

ty purpose ok? so he will send it to you through Courier Services and you c=

an use it in any ATM master card in any part of the country,

Therefo=

re, you should send him your full Name and telephone number/your correct ma=

iling address where you want him to send the ATM MASTER CARD.to you.

>Contact Mr. Olisemedua Amangbo, immediately for your ATM MASTER CARD.Perso=

n to Contact Olisemedua Amangbo, Bank Name Zenith Bank Nigeria Plc Contact =

him now on his direct Email:
">infozenithbankorg1@gmail.com

Once Again When Contacting Him Se=

nd To Him your Your Full Name, Residential Address, Private Phone Number.
r>Thanks and God bless you and your family. Hoping to hear from you as soon=

as you receive your ATM MASTER CARD.

Mr.Ant=C3=B3nio Guterres
Un=

ited Nations Secretary General.
Web:ht=

tp://www.un.org/sg/

--000000000000b770a705e015f0f9--

MOre gullibe money spam from GMail

Posted by Dave Yadallee on Saturday, May 28. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 28 May 2022 15:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nv3Xf-000HIi-VA

for dave@doctor.nl2k.ab.ca;

Sat, 28 May 2022 15:00:11 -0600

Resent-From: The Doctor

Resent-Date: Sat, 28 May 2022 15:00:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wr1-f67.google.com ([209.85.221.67]:46820)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1nuzYd-0000tQ-1n

for sales@nk.ca;

Sat, 28 May 2022 10:44:58 -0600

Received: by mail-wr1-f67.google.com with SMTP id d26so3865301wrb.13

for ; Sat, 28 May 2022 09:44:37 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=q0NOor8eIg/ea3rdbLnGhkBMqP4RNhpkxe1nfNB8SwY=;

b=e4/EGaMsSygaUfR52F8K1M/sX/tkaOcpgN7I2TNq9FQSeccYix8heiktbPUfFEsGHh

0I7lZTvpbO00hJ7Wp49kv6XuAjRr++xw2asGqhw8SjQuPunzEvi/ndBf/7pfREjyCDzo

jpKmN5HJ/aA5yftkKoJS0Ft6f5WiXZC8nWmCiybjoeApxIVjKoKkt9TujdIl6Xe8uEdl

SR5qiRu/9OFgKALU4T+q2zLCfKDADXSbUYG6Y8b1nSWrop4l6PogLaNn/cz5wvZkv10C

jAX+stdn7uLUX6Ksp3W/Ue/f/+c5xwVrNlWUEYWqkx3ZP8/Yc3rPagQ9dPk0SC9p25dE

yUSQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=q0NOor8eIg/ea3rdbLnGhkBMqP4RNhpkxe1nfNB8SwY=;

b=OdUpcbw49udXnw0Y/ZvyogmD6fe/OMlv8pxvEFut/AslOg2KYl0YTOZStEYH/LzdCW

DXexymC64fn4NJcevixkDbi9pjMB1wP94kX+gUJ8fp6GyeMgTf9pcFmmdKit9Sm1OWFu

L5Sfm1NO5h3WmL/X01kel7YAGaYJrUkrgPFNstZAa0BBjqROj7Zj07tbw2zV/+67MdHn

Gn3N5qAQl6ywxCJoAfcj3f7V29hPUu71GHvsjpm5uUFoAh6Z+PjwvnQCmRfGCmFRnVzR

TWtzMad9xBoekS+w1TRc9gLSfxJZTY1pCbw/HPp8/mKKxj7BZPpnnLWidEtggZvZ2FzR

tCfg==

X-Gm-Message-State: AOAM533DMhiE1+dVvvDLre3g+4VIn/45MwfEOO+NaVXP1svan0/FAFYV

18+xdX/AajW4sh6EccD/okYzBMLRyFcVHe1MgVU=

X-Google-Smtp-Source: ABdhPJw2Hwv+7TQMsFApNTRWvf9y0SCWeC+YVFA8muPz6GCbYdjIRc3vZURdxNVJJ4hFDugv0WTIcbksbLlqL0jw0ik=

X-Received: by 2002:a5d:610f:0:b0:210:e8b:7890 with SMTP id

v15-20020a5d610f000000b002100e8b7890mr9893058wrt.411.1653756271413; Sat, 28

May 2022 09:44:31 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:6000:1082:0:0:0:0 with HTTP; Sat, 28 May 2022 09:44:30

-0700 (PDT)

Reply-To: wallace.robert46@yahoo.com

From: "Robert Wallace."

Date: Sat, 28 May 2022 18:44:30 +0200

Message-ID:

Subject: Re: Re: Urgent Respond Needed.

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: sales@nk.ca

X-Spam_score: 7.6

X-Spam_score_int: 76

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: -- Hello. This is a personal email directed to you for your

consideration alone. I request that it remain and be treated as such only.

Content analysis details: (7.6 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.67 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[bryonhher[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[wallace.robert46[at]yahoo.com]

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Re: Re: Urgent Respond Needed.

--

Hello.

This is a personal email directed to you for your consideration alone.

I request that it remain and be treated as such only.

My name is Robert Wallace. I'm a Belgian/British Citizen an Attorney. I

have an interesting business proposal for you that will be of immense

benefit to both of us, although this may be hard for you to believe, we

stand to gain 9.7 Million Dollars between us in a matter of weeks. This is

fully legal and 100% genuine. I need you to signify your interest by

replying to my email. Most importantly, I need you to keep whatever

information between us confidential even if you decide not to go along with

me. I will make more details available to you on receipt of your positive

response.

Regards,

Robert Wallace.

More gullible money spam from GMail

Posted by Dave Yadallee on Saturday, May 28. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 28 May 2022 15:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nv3XC-000HAj-1P

for dave@doctor.nl2k.ab.ca;

Sat, 28 May 2022 14:59:42 -0600

Resent-From: The Doctor

Resent-Date: Sat, 28 May 2022 14:59:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f67.google.com ([209.85.218.67]:36554)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1nuzQU-0000GL-AH

for root@nk.ca;

Sat, 28 May 2022 10:36:33 -0600

Received: by mail-ej1-f67.google.com with SMTP id gi33so13863809ejc.3

for ; Sat, 28 May 2022 09:36:13 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=q0NOor8eIg/ea3rdbLnGhkBMqP4RNhpkxe1nfNB8SwY=;

b=ehGpa87Qqf9sBsup/6WMUDz+KBnBhfgRNTEJOyH31bIkGH2Rjny5he/8W+0ju2z05e

tEiq9uWOuM9n6eC+Kl8EofeaSKs5GI24ntHUbIHPlp8Wg4lU7t4e4lKSnXKuJLpl0Jev

blelXm+Cy+gb4JuLH9qo0atsorIoqvf/SW4WGB2sHxu1poHjaGYxiChuVS3JXU/wxYmr

FllNbWGLo8S+ITK2LzfuRKBZsuSo4MKCy3ZeqX93CPawVJjrydwGwz7PYvS23RhDEA7z

it6gp85YCzKwZ8BpzDb6zKOBWfMiWTBQSH14oKgJgi+uxmnnJBWzsZpKWAD6rd3Qdxav

0uFQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=q0NOor8eIg/ea3rdbLnGhkBMqP4RNhpkxe1nfNB8SwY=;

b=MdvabbQxx6Na19u0GRXTMZTcT50RTiDdV2454FrrdRaJ916Q/6Q0c0he/TdmGMvF2Q

hismcDLkiY2cGlSFRqI2un+uTTTCqm7GjY5764VrCcfXqNBWpz9MmuopRtUUYF8oZsuc

4mDFO2Tc/JNYqakgMY87CDPInu9ioONbYBrn0yOYO+dG2YPnmJejf375frqyryiYdoIg

ahAJMJIh3TIOJYCWwDasaU4xQmyIo/6G0CrZP+tp2DO7GO3WgK5hjaKMAicSYle/Rzxy

7BUqrBPmSski3RT+kJP80srq0rJb4oCHh8/B0FiKTa8EliFHAZZpYG7Z2bX9JsI8tGuO

Xatg==

X-Gm-Message-State: AOAM533Z7mFdWzX8+QOgKM7wBzUSd+KKK9Yimdh8bjrpGQ6Od0O1DdTj

jlHf7oqu7HszxphN0m1thCecdMiWIQmqzM7mW6s=

X-Google-Smtp-Source: ABdhPJyB/7Whi58H2Y618vVKt1sllNhZnORNd+VYQi1fMliCM+ti8B/ayxQrz1x8l3tisg1IVYbqLxAUmArsC/B82n8=

X-Received: by 2002:a17:906:58cb:b0:6ff:5282:dd83 with SMTP id

e11-20020a17090658cb00b006ff5282dd83mr1946652ejs.510.1653755766537; Sat, 28

May 2022 09:36:06 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:640c:e46:b0:153:17e3:9d0c with HTTP; Sat, 28 May 2022

09:36:05 -0700 (PDT)

Reply-To: robert_wallace12@yahoo.com

From: "Robert Wallace."

Date: Sat, 28 May 2022 18:36:05 +0200

Message-ID:

Subject: Re: Re: Urgent Respond Needed.

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: root@nk.ca

X-Spam_score: 7.8

X-Spam_score_int: 78

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: -- Hello. This is a personal email directed to you for your

consideration alone. I request that it remain and be treated as such only.

Content analysis details: (7.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.218.67 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[dwaynjson[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[robert_wallace12[at]yahoo.com]

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

3.4 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Re: Re: Urgent Respond Needed.

--

Hello.

This is a personal email directed to you for your consideration alone.

I request that it remain and be treated as such only.

My name is Robert Wallace. I'm a Belgian/British Citizen an Attorney. I

have an interesting business proposal for you that will be of immense

benefit to both of us, although this may be hard for you to believe, we

stand to gain 9.7 Million Dollars between us in a matter of weeks. This is

fully legal and 100% genuine. I need you to signify your interest by

replying to my email. Most importantly, I need you to keep whatever

information between us confidential even if you decide not to go along with

me. I will make more details available to you on receipt of your positive

response.

Regards,

Robert Wallace.