SEO spam from Microsoft Outlook servers

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Aug 2022 16:41:03 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oMdK6-0008pR-KX

for dave@doctor.nl2k.ab.ca;

Fri, 12 Aug 2022 16:40:10 -0600

Resent-From: The Doctor

Resent-Date: Fri, 12 Aug 2022 16:40:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dm6nam04olkn2097.outbound.protection.outlook.com ([40.92.45.97]:10073 helo=NAM04-DM6-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oMVHr-000POk-9A

for root@nk.ca;

Fri, 12 Aug 2022 08:05:24 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=XxNOYugZNHt3qr1knt6Nen68YxfIehZCdkPgKtOaXoc4GsBoCMK8GwD5uqrNXkyH+IFS+yGc+UbHOjFDhMy6bb+WzBi24alEIt4uMNGjnVpTYoHPwYqNdA/ytKqTKubeBIpMW0CadHoIL2EcWR+5NXr4ppKDWOXjU+Wfu2rYBrBNeH/3sgncHQdLgIlLeZaxsq8l8dQytBU+GehIDjNrg8AyQ+5n49XiOH0+mM9ymYE9zmqG+SYiA81T/kiqtsb1NfcECTjXxB6bthlpdLYBGjEXFVepEE3iz/iO5E9vGMn8eHvM7JP3dmeJBmee+ZPgQwz/lDOO4emttbH4swk9Vw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=AKkrNjR9xAv1DeS3q9fOUQVlYV23/2S4ChZLYIMgYI8=;

b=dweVJMyGSBxzGJDvxJkE7zwt5HATcbm12WKfc5qYY+GnVE9joCKXaHuMPuCWIyTMazMsXNN/nNwUYZIMptjc2UOCZEn33XpQu0b53uSdGICtzbxlH/tlJEDnKvYqnEDX4mUX5z8Kwt4kQohVCAKQdSpz8APLDIXMg8dm9CkM0rmYzkP7Dcqugs/lzPcgKB/e+H6Cw9ebWws7mhbMIWdfAEZfHccIHumLn747y/UaPtuiDFXUd4bd5j6RoI4m16PhHBhEg/dNAV9kihjbnLG7Kgqw4P8Y9q5nOUuRDCSnFDsBfNII/nzdlfsK+vbIiqosFPhyJAUmWACpWjahmDe4pA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=AKkrNjR9xAv1DeS3q9fOUQVlYV23/2S4ChZLYIMgYI8=;

b=OuriVkunM267k2Nle6sKMIc/YBuxhe4c3An1W17HnvRDibZyzWD4ESez82QWUcgdB6lnQnjDH8coWbY/rifJF2wLFMVG04l2QuxnjOpPSFkj7RQhsPULJocnqOc87up0Hqc8UGS5arGvQvnjVqkry+Az/Z7CfUKL4mrKC0a/itTvWORvslD8B1bULuWmiCAMZ37YFR6emm/mBZDJ4pTomN5wfIm5drJV1RCRQ92nUl36C4YFU5OwkjOhmQYXeAKADfP32P2gYyUE9EgcUkxkIsxrvXrcNYdJC2aLKIQdcNmP0h2QsVTqDFs7FSNQD4fr4AZAtFJyJpcAaW+MEbW81w==

Received: from MWHPR15MB1552.namprd15.prod.outlook.com (2603:10b6:300:b2::19)

by BY3PR15MB4913.namprd15.prod.outlook.com (2603:10b6:a03:3c0::15) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5504.25; Fri, 12 Aug

2022 14:04:37 +0000

Received: from MWHPR15MB1552.namprd15.prod.outlook.com

([fe80::58ef:6678:ca0e:9319]) by MWHPR15MB1552.namprd15.prod.outlook.com

([fe80::58ef:6678:ca0e:9319%12]) with mapi id 15.20.5525.010; Fri, 12 Aug

2022 14:04:37 +0000

From: Mike Smith

Subject: Website Design & Maintenance

Thread-Topic: Website Design & Maintenance

Thread-Index: AQHYrlQ1UxCIlQxK6E+vvNUEb+eF/w==

Date: Fri, 12 Aug 2022 14:04:36 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [v2c2GDgP4/xoTicjrC2l6b+F60g83CdM]

x-ms-publictraffictype: Email

x-ms-office365-filtering-correlation-id: e18a2aad-4b43-4525-98a4-08da7c6b9722

x-ms-exchange-slblob-mailprops:

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

x-ms-traffictypediagnostic: BY3PR15MB4913:EE_

x-microsoft-antispam: BCL:0;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?La9z7dpwh7PSriAmJoA24ij6MouWeqIwxK151DRpz5jKUyxOsp43g3YABi?=

=?iso-8859-1?Q?er1U+WILoN8ZrRwim1gmGRHOCQy6Xuu9LdWDLU8mjxQECDBB7uAHddwv8O?=

=?iso-8859-1?Q?vDUcpsWTg/23219UV5AavktA80OQZuOTAb1DEB0tVlSzyaEgF9nKhg1oyb?=

=?iso-8859-1?Q?+9tPzAQHqTd20A0WPSXCNyB1dig9jbN98V+WpcocJXUdto9CXwfNbizOPK?=

=?iso-8859-1?Q?THxCQTMefrnYg7VEnrprZgoQgIBUbI6ImQJj0hSn/bMD4CybxRgAbx0iIx?=

=?iso-8859-1?Q?YqTqf1Y2CpbSWqiCoFUYITLcqUm66xyBEie/0upEFPfyHE9IFoB3ktgrfP?=

=?iso-8859-1?Q?uvuzcWsNpKc+Za/djeQHvDc/txO1ZEd581NmOczAY9p/ZKKuQilTkYAJRE?=

=?iso-8859-1?Q?W5c3LRXPNXMiSx4gcQDB4YIERtLMy29NAmGPcD0+dLT9frA2mJ7SJR/uWm?=

=?iso-8859-1?Q?LxMEkSu1SiExZyB9mchmqJwWzTU4QI4KH8w0iNacrrfWz/TMTo9HHZ4Fy8?=

=?iso-8859-1?Q?RP0NGNaeVjK4r3R/ySxMVx4gXsE04mOcw/YOuUgE1ysJjCmtxi/p88W8Fx?=

=?iso-8859-1?Q?Lb8t+xom9XrQ4cc5M6qT/mH9I3NjORsoX6cGTTu4dXepxFzj4plsOhtPIo?=

=?iso-8859-1?Q?T2rZCKOQI9gmVRsYRCb0zReYCNGLMuZnYQyC+q1XFYbctU55Rup0aoXXuv?=

=?iso-8859-1?Q?OIxKer4DZ0VWwlRNWHqo+Yggbr7wYJmY7n8Bfeng3KhRNN5E7Wm/o60pjv?=

=?iso-8859-1?Q?gZgrVEQJ6dzu37IFDjojkXYtS/R4/ASVuCQivm4vY58b+sjvYrl8NFp4qD?=

=?iso-8859-1?Q?J0yeudm9whc109BilTed6NB+d/GUyShRAH2fd3oGFi7uIri/MjXFhFNQWG?=

=?iso-8859-1?Q?RXl6PmocB1rTO7f080z6m8JyFBtoUCphPSci57P6MJNvqHjEnS+tI2VfBI?=

=?iso-8859-1?Q?jBsQR2nsVMse5+617sIiExCgCUt3diZTrvRuBo417v9vcuP9sOCgIVMtzt?=

=?iso-8859-1?Q?Fe6ibMvIEAywgSmcpJE6biRy8HKDaet0af0ChQw91QAZRCJ5Ax2ALleoFw?=

=?iso-8859-1?Q?UIRdqXyAdeM8Akap7AvSTL07Uv6fvEHeorp0pkof0YYH2dgsNstdo59yzK?=

=?iso-8859-1?Q?Q9LsiTSOHjMzGwff5guPcg7KK1/nlvhw+yIpulVVNbKYXeRgBXUp3J8MCO?=

=?iso-8859-1?Q?/3PVXGow2LhTGNoTuaw7whfHyzYTEXkNcoeu6lgcPF82QmhI8Q486Z5j4H?=

=?iso-8859-1?Q?xf9nAM0a765RLT+BxEw1yq5U7UFXj5gWDdXCgAq6dr01Me8x/EqlsL0ZRr?=

=?iso-8859-1?Q?tGO3?=

Content-Type: multipart/alternative;

boundary="_000_MWHPR15MB155238CE6C737FE73E71EF85D4679MWHPR15MB1552namp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: MWHPR15MB1552.namprd15.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: e18a2aad-4b43-4525-98a4-08da7c6b9722

X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Aug 2022 14:04:36.5005

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY3PR15MB4913



--_000_MWHPR15MB155238CE6C737FE73E71EF85D4679MWHPR15MB1552namp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,



I am reaching out to see if there is anything that would like to upgrade, r=

epair or redesign on your site. I am a web designer/developer that can do j=

ust about anything you can imagine at very affordable prices.



Our Services:-



1. E-commerce Websites

2. WordPress Websites

3. Shopify Websites

4. Magento Websites

5. Drupal Websites

6. Joomla Websites

7. CMS Websites

8. PHP Websites



I'd be happy to send some of our Designing and Development samples & price =

list, if you'd like to assess our work. Please feel free to share your requ=

irements and queries.



Let me know what you think.



Kind Regards,

Mike Smith

Web Designer/Developer

***********************************************





--_000_MWHPR15MB155238CE6C737FE73E71EF85D4679MWHPR15MB1552namp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Hi,






I am reaching out to see if there is anything that would like to upgra=

de, repair or redesign on your site. I am a web designer/developer that can=

do just about anything you can imagine at very affordable prices.







Our Services:-







1.  E-commerce Websites


2.  WordPress Websites


3.  Shopify Websites


4.  Magento Websites


5.  Drupal Websites


6.  Joomla Websites


7.  CMS Websites


8.  PHP Websites







I'd be happy to send some of our Designing and Development samples &am=

p; price list, if you'd like to assess our work. Please feel free to share =

your requirements and queries.







Let me know what you think.







Kind Regards,


Mike Smith


Web Designer/Developer


***********************************************













--_000_MWHPR15MB155238CE6C737FE73E71EF85D4679MWHPR15MB1552namp_--

Nigerian based Burkina Faso spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Aug 2022 16:16:00 -0600

Received: from mail-io1-f50.google.com ([209.85.166.50]:33419)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oMcwT-0005oP-Ai

for dave@doctor.nl2k.ab.ca;

Fri, 12 Aug 2022 16:15:49 -0600

Received: by mail-io1-f50.google.com with SMTP id g15so1897061iob.0

for ; Fri, 12 Aug 2022 15:15:25 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;

bh=bhgwPLak6PLqVIKIKMKyPTn+CTI+DSJfTHg4k66VdNw=;

b=ZYKmD6t5P/GSS8de4gcYmlMbW1u0TmirgJN72otMPKZuAfCFTLp+Xr9HoHT9O/GD0E

cQZ5FvlBcUoV1/8Tnc3tmvfXRQwkBCURlkSsGMLR3uhAepXBPmDoLkm4u8SkVGcf4eW9

Vgc52fuTz370KqK7GqpVQ3igTTvkWWmrQB9d/pKMoFwoq1qBwUpDA9eXJSFqZRq9C7GN

DEYaniq4VDEwIkIzIdXksSUCOW48wViQe7/0rUwRJIklaJmiMIrmwFXQSFlKlhULGTDj

6/9paFobXsBmJlG+/sWGKvaI+Wky5MUyWowf6DXyKRHsTLX/A8/A96+aJ6eSnmLuWhUK

nmog==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc;

bh=bhgwPLak6PLqVIKIKMKyPTn+CTI+DSJfTHg4k66VdNw=;

b=5N+J5nmwjQHWXawRGe2ojRTmCw7fjdvvQO28wV7GWv5r9nwzbuEXmXbeqZ9pnd6gZF

Xynw206LYfNrun7sdUIndbVXwxXuTZsczS+knwDu4PoKD2VC3Bb/noXCcUwEadvg7TUV

Nmq3feHCq/hoJjxzO6hrwUJPk6H3nrY2+kLfQ7RyfTde5P+9Sahv+ymKKaFWOYeJC9D5

aXzYMDpfKBKLgzCXivW2Lsec7hzQbfwyGcoU7z7zk8+38+hIsZHuyGuQv6XXH96dDmZJ

UUwgm1ywsaczZu4xkOqsLYGczff4DLWnVlakPr5iXkKkX16qLn7TvSa+F49wnsFeyw7A

BmoQ==

X-Gm-Message-State: ACgBeo06S9sxmHzNA8AdJ6S/VazTtJp948Og9U/9fFpHL0Z5630ogSTS

P3TvFeHyR7b6aAXt2pfotkMBsCbh51YtJYMupzk=

X-Google-Smtp-Source: AA6agR6eDs0ENYS0oWV6TO6XpD7Vdu58qa97xduErlo7XEveMx/bDrA97qKnLzTtSLBm7ui9Xwa1fYQSL4bBiM1yaHc=

X-Received: by 2002:a02:c7c2:0:b0:342:8a79:3b53 with SMTP id

s2-20020a02c7c2000000b003428a793b53mr2841792jao.164.1660342519310; Fri, 12

Aug 2022 15:15:19 -0700 (PDT)

MIME-Version: 1.0

Reply-To: mrsnicoleapollonia92@gmail.com

From: mrsnicole apollonia

Date: Fri, 12 Aug 2022 22:15:02 +0000

Message-ID:

Subject: i need your urgent Response,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000011b02605e6129e9b"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 14.7

X-Spam_score_int: 147

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings, I hope that this message will reach you in good

health! I’m Mrs. Nicole Apollonia, the widow of late Dr. Benoit kabore,

from France.



Content analysis details: (14.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.166.50 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[amrsnicole[at]gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[mrsnicoleapollonia92[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.9 URG_BIZ BODY: Contains urgent matter

2.7 HK_SCAM_N1 BODY: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 T_MONEY_PERCENT X% of a lot of money for you

0.0 XFER_LOTSA_MONEY Transfer a lot of money

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} i need your urgent Response,



--00000000000011b02605e6129e9b

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Greetings,



I hope that this message will reach you in good health! I=E2=80=99m Mrs.



Nicole Apollonia, the widow of late Dr. Benoit kabore, from France.



Base in Burkina Faso; I=E2=80=99m 56,years old, suffering from ovarian can=

cer and

from all medical indications my condition has really deteriorated and my

doctor told me that I may not last long because of my health.



Based on this I have decided to donate the sum of ($4.5 Million US



Dollars) for Charity work,In my next email, I will send you the copy of the

Certificate of Deposit which will enable you apply to the bank and receive

the money with no case,but you will assure me that you will take 50% of the

fund and give 50% to the orphanages home in your country for my soul to

rest after i have gone,







Thanks



Mrs. Nicole Apollonia,,



--00000000000011b02605e6129e9b

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



=C2=A0
Greetings,

I hope that this message will =

reach you in good health! I=E2=80=99m Mrs.

Nicole Apollonia, the wid=

ow of late Dr. Benoit kabore, from France.

Base in Burkina Faso; I=

=E2=80=99m 56,years old, suffering from =C2=A0ovarian cancer and =C2=A0from=

all medical indications my condition has really deteriorated and my doctor=

told me that I may not last long because of my health.

Based on thi=

s I have decided to donate the sum of ($4.5 Million US

Dollars) for =

Charity work,In my next email, I will send you the copy of the Certificate =

of Deposit which will enable you apply to the bank and receive the money wi=

th no case,but you will assure me that you will take 50% of the fund and gi=

ve 50% to the orphanages home in your country for my soul to rest after i h=

ave gone,

=C2=A0

Thanks

Mrs. Nicole Apollonia,,
=C2=

=A0




--00000000000011b02605e6129e9b--

Urgency Spam from gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Aug 2022 07:40:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oMUsg-000LRU-V8

for dave@doctor.nl2k.ab.ca;

Fri, 12 Aug 2022 07:39:18 -0600

Resent-From: The Doctor

Resent-Date: Fri, 12 Aug 2022 07:39:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f53.google.com ([209.85.208.53]:42529)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oMUYR-000I0E-1p

for doctor@doctor.nl2k.ab.ca;

Fri, 12 Aug 2022 07:18:29 -0600

Received: by mail-ed1-f53.google.com with SMTP id z20so1292664edb.9

for ; Fri, 12 Aug 2022 06:18:02 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;

bh=IkSe8Ybk+NQ1nTev6i6fqLrcb+1xrUc4kshJwGEUimk=;

b=comdHxZsFvky8qcH+rJ+pNuaUdhOuDf+iYrfrafy4CKov6puOXHm9zUoYtdEwnz4IQ

kYTx8Z4Rbi3hQXV8nlR+sGOgsKaitupZfd6wYO0nFYwr5j9tmnETBqKwlfgaqUamqo+3

/JJStdGkP4LlyxV3xjCKZEiPBelO1daBXUDGWZxqA9LHp9qJKUtXJo1sWTdf6ouR9wZI

IRPAD7dItP09KUMKsOgkvzotu7/e+DwHhZXCqYXjpgUklTNLB/ki7iDE3cAInLacPAgv

aPJmM/XEPyCIAzdNrNqAu7RHzw/jYFbYpmzF9olX+pSL/OIzpE5yw2BaguKXbQ8x4nYE

1bfw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc;

bh=IkSe8Ybk+NQ1nTev6i6fqLrcb+1xrUc4kshJwGEUimk=;

b=M5yeOvnx1fTvePvmCXZPiI/yDdz9An8Z+n4l5EhTJT6LUqUsJyLiX0f5yRNgLRPc2W

JOLgELcyMMvbJZFYuyJAyimSFlndfuehWa+oWf9MsYgpl7qgZUh+dpzXdps0fJDgFH2o

TFEYaOMCqbPwbtVmJi4t8J2gMtbalnZa/wNAkpUJML8W136QtIHXZPl/Cg8U8WC1tAiJ

nfHE4QVrp5Mp8VxtjsT9yXe4OcLMWxBgFRasPSblBvJZqGJ6Dtdinuou2xjqp3Sn3WQ0

IEMHYa85BEWasC0aAxczZ9MHkODB/xc6ny9bm369T6KvG1EnMZc8JPXMm9llMmpAh6FS

8zGw==

X-Gm-Message-State: ACgBeo3wKoRaOlTP79dO/eBBWgnGPqPybwp7DmcxudUS/IkYM7if4Iqp

atiyl3zOpv65gDFA0J50RJ94W884MoMmOq9wM0g=

X-Google-Smtp-Source: AA6agR4a5QGS84Y3sGpMER1nsN0AkawBo1MysdvhkSfY18IsvYk4FYuE+H5+SvZw6oyO4QHCYaUVJ4zfuYhTYlN4T48=

X-Received: by 2002:a05:6402:5384:b0:431:6d84:b451 with SMTP id

ew4-20020a056402538400b004316d84b451mr3626016edb.46.1660310276033; Fri, 12

Aug 2022 06:17:56 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a17:906:2f97:0:0:0:0 with HTTP; Fri, 12 Aug 2022 06:17:55

-0700 (PDT)

Reply-To: mrsaifemohammed2018@outlook.fr

From: Mr Saife Mohammed

Date: Fri, 12 Aug 2022 13:17:55 +0000

Message-ID:

Subject: VERY URGENT

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 23.5

X-Spam_score_int: 235

X-Spam_bar: +++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Friend, How are you today?. Please, I would like you

to give an urgent attention to this proposal. I have a very lucrative business

transaction which requires your utmost discretion. Though, I know it would

c [...]



Content analysis details: (23.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.53 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[westernunion5000k[at]gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[mrsaifemohammed2018[at]outlook.fr]

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.0 SPF_PASS SPF: sender matches SPF record

0.9 URG_BIZ BODY: Contains urgent matter

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

2.6 HK_SCAM_N13 BODY: No description available.

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 T_MONEY_PERCENT X% of a lot of money for you

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal

information

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

Subject: {SPAM?} VERY URGENT



Dear Friend,



How are you today?. Please, I would like you to give an urgent

attention to this proposal.

I have a very lucrative business transaction which requires your

utmost discretion.

Though, I know it would come to you at uttermost surprise. I am Mr.

Saife Mohammed, A banker by profession.



Please, I want to transfer the sum of ($15.5M) dollars into your bank

account. This business is 100% risk free.

Your share will be 40% while 60% for me.



Full details will be send to you on the receipt of your urgent

response by forwarding the following details bellow:



Here is my private E-mail Address: (mrsaifemohammed2018@outlook.fr)



1. Your Full Name................

2. Your Telephone No..........

3. Your Receiving Country................

4. Your Home Address........



Thanks for your anticipated co-operation.

Best regards.



Mr. Saife Mohammed,

SEO spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Aug 2022 06:43:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oMTzv-0003xH-ML

for dave@doctor.nl2k.ab.ca;

Fri, 12 Aug 2022 06:42:43 -0600

Resent-From: The Doctor

Resent-Date: Fri, 12 Aug 2022 06:42:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f65.google.com ([209.85.216.65]:46903)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oMQsK-000LJn-O2

for root@nk.ca;

Fri, 12 Aug 2022 03:22:46 -0600

Received: by mail-pj1-f65.google.com with SMTP id q7-20020a17090a7a8700b001f300db8677so381205pjf.5

for ; Fri, 12 Aug 2022 02:22:23 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=questweb-info.20210112.gappssmtp.com; s=20210112;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc;

bh=W5GxgMqZH+vG8XHS3fbWchaowwsubkS4+SZOFB0bDak=;

b=skap3+csOpJHJHjWrM+XNN6PjmcTOZnli0fEfLdRY/7pjWQKw67klpl/m0axg2sUcA

dqYDCHujA6QzrkXfIqBQGSNZoCelFbWH9HUEy9aTpFVO1d348w5lPeSb1ygDXEP+s92G

5rZiiX0FzGk1Z9ZjlZj0O3LHj5aCS9zN5HxHxE3D6/JfIpNroRSEQ1CbKyo+gWUcUhhz

Et/ijxZlyuRj3Rhe79XRSKX0pYqPMUv3E6/Hfk22Pi34QVHCAJdzeWV11B9iw96cHlAD

paOWzbzFTPsqoZnVi1tc1X8qsyhlr1QFJcTFIeUFmRYKrWzLmNyY4k40gzCN9HMBDAjc

2b5g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc;

bh=W5GxgMqZH+vG8XHS3fbWchaowwsubkS4+SZOFB0bDak=;

b=dgKqDevLGk70pirs6kyLYqVO2DaGwCFGhT1Fh2u/S2bCu+6tCt95dq5ATa//elZcM/

LcFAIgsYZktv3sghPF1g7INo6PD7gerD40zswfnYfmWgAcub01xcFhvwC/JYztKrX0+Z

2Z/dI86Kln+aWwF4q6bkTaHhlJfdirbD+cZz8RvOS7wBQYp8+foFYGslSV/IhCueOLuf

CfdMRalMCE41Jqol/P8g+PeEd5eNldADFkUOHVWoKJarqqJHEIbdbVuPehOWzLED1yfs

FVL54nAY8f/OgfSwLxsqrcPknO/QUdztkJOzQTnNXJvKpbaqlyf+vo8hSTwu/GSpdCbr

xlig==

X-Gm-Message-State: ACgBeo0c6CrcXcclxDNSYFq0j57cIJbjC7NL8cV+uNa7/s0a/dMgNjzc

yrb4ICoEeIx7w+kdlPGjlWieIcup3TKahQ==

X-Google-Smtp-Source: AA6agR6KuDKmH/6Fp05B9x4G/kyhYvfuB2fw3YkfZd7OVGW/M1e5PH3pbghworcTNSbI15vSyTWIew==

X-Received: by 2002:a17:90a:eb16:b0:1f4:df89:edac with SMTP id j22-20020a17090aeb1600b001f4df89edacmr12977610pjz.54.1660296137660;

Fri, 12 Aug 2022 02:22:17 -0700 (PDT)

Received: from DESKTOP9RQVMI3 ([2405:201:402b:2065:4d15:7093:941f:3b1a])

by smtp.gmail.com with ESMTPSA id o26-20020aa7979a000000b0052efc57c48dsm1122566pfp.104.2022.08.12.02.22.16

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 12 Aug 2022 02:22:17 -0700 (PDT)

From: "Frankie"

To:

Subject: Google Top First Position

Date: Fri, 12 Aug 2022 14:50:21 +0530

Message-ID: <7c4201d8ae2d$04153650$0c3fa2f0$@questweb.info>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_7C43_01D8AE5B.1DCFBC40"

X-Mailer: Microsoft Outlook 15.0

Thread-Index: AdiuKZtJpnIlsemgQnGzgUd1EFlcHA==

Content-Language: en-us



This is a multipart message in MIME format.



------=_NextPart_000_7C43_01D8AE5B.1DCFBC40

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,



I hope you are doing well. I am Business Development Manager at an India

based IT firm. We are the group of 100+experienced IT professionals who are

into: Website Designing/Redesigning, Web Development, responsive websites,

PHP development, e-commerce services, SEO Services, Content Writing Services

and Mobile Applications development.



Our main services are listed here:



A. Full SEO package (with plan and activities)



B. SMO (Facebook, Twitter, LinkedIn, etc).



C. Website Designing Services.



D. Website Development Services



E. Website Re-Designing Services



F. iPhone and Android App Development



If you are interested in any of our services, please let us know your

requirement. I would be happy to provide you our company information and a

competitive quote. I look forward to your reply.



Note-:-Please Share your contact details (Skype ID or Phone Number) and let

us know your convenient time for the call/call so our seniors can contact

you directly for further discussion.



Thanks & Regards

Frankie

Business Consultant

Services:- SEO |SMO|

Website Design | Development | Mobile Application







We are not spammers, in case, if you don't want us to contact you again,

please respond with "REMOVE"









------=_NextPart_000_7C43_01D8AE5B.1DCFBC40

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">
vlink=3Dpurple>


class=3DMsoNormal>
style=3D'font-family:"Calibri","sans-serif";color:black;font-weight:norma=

l'>Hi, 
style=3D'font-family:"Calibri","sans-serif";font-weight:normal'>
p>


style=3D'font-family:"Calibri","sans-serif";color:black;font-weight:norma=

l'>I hope you are doing well. I am Business Development Manager at an =

India based IT firm. We are the group of 100+experienced IT =

professionals who are into: Website Designing/Redesigning, Web =

Development, responsive websites, PHP development, e-commerce services, =

SEO Services, Content Writing Services and Mobile Applications =

development. 


class=3DMsoNormal>
style=3D'font-family:"Calibri","sans-serif";color:black;font-weight:norma=

l'>Our main services are listed here:


class=3DMsoListParagraphCxSpFirst =

style=3D'margin-left:.75in;mso-add-space:auto;text-indent:-.25in;mso-list=

:l3 level1 lfo8'>
style=3D'mso-list:Ignore'>A.
Roman"'>      =

Full SEO =

package (with plan and activities)
style=3D'color:black'>


class=3DMsoListParagraphCxSpMiddle =

style=3D'margin-left:.75in;mso-add-space:auto;text-indent:-.25in;mso-list=

:l3 level1 lfo8'>
style=3D'mso-list:Ignore'>B.
Roman"'>      =

SMO =

(Facebook, Twitter, LinkedIn, etc).
style=3D'color:black'>


class=3DMsoListParagraphCxSpMiddle =

style=3D'margin-left:.75in;mso-add-space:auto;text-indent:-.25in;mso-list=

:l3 level1 lfo8'>
style=3D'mso-list:Ignore'>C.
Roman"'>      =

Website =

Designing Services.
style=3D'color:black'>


class=3DMsoListParagraphCxSpMiddle =

style=3D'margin-left:.75in;mso-add-space:auto;text-indent:-.25in;mso-list=

:l3 level1 lfo8'>
style=3D'mso-list:Ignore'>D.
Roman"'>      =

Website =

Development Services   
style=3D'color:black'>


class=3DMsoListParagraphCxSpMiddle =

style=3D'margin-left:.75in;mso-add-space:auto;text-indent:-.25in;mso-list=

:l3 level1 lfo8'>
style=3D'mso-list:Ignore'>E.
Roman"'>       =

Website =

Re-Designing Services
style=3D'color:black'>


class=3DMsoListParagraphCxSpLast =

style=3D'margin-left:.75in;mso-add-space:auto;text-indent:-.25in;mso-list=

:l3 level1 lfo8'>
style=3D'mso-list:Ignore'>F.
Roman"'>       =

iPhone and =

Android App Development


class=3DMsoNormal>
style=3D'font-family:"Calibri","sans-serif";color:black;font-weight:norma=

l'>If you are interested in any of our services, please let us know your =

requirement. I would be happy to provide you our company information and =

a competitive quote. I look forward to your =

reply. 
style=3D'color:black'>


style=3D'font-family:"Calibri","sans-serif";font-weight:normal'>Note-:-Pl=

ease Share your contact details (Skype ID or Phone Number) and let us =

know your convenient time for the call/call so our seniors can contact =

you directly for further discussion.
style=3D'color:black'>


class=3DMsoNormal>
style=3D'font-family:"Calibri","sans-serif";color:black;font-weight:norma=

l'>Thanks & Regards
style=3D'color:black'>

style=3D'color:black'>Frankie

style=3D'font-family:"Calibri","sans-serif";color:black;font-weight:norma=

l'>Business Consultant
style=3D'color:black'>

style=3D'font-family:"Calibri","sans-serif";font-weight:normal'>Services:=

- SEO |SMO|
style=3D'color:black'>

style=3D'font-family:"Calibri","sans-serif";color:black;font-weight:norma=

l'>Website Design | Development | Mobile =

Application


class=3DMsoNormal>
style=3D'font-family:"Calibri","sans-serif";color:black;font-weight:norma=

l'> 


style=3D'color:black'>We are not spammers, in case, if you don't want us =

to contact you again, please respond with =

"REMOVE"


class=3DMsoNormal> 



------=_NextPart_000_7C43_01D8AE5B.1DCFBC40--



Australian lottery Nigerian Spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 11 Aug 2022 18:25:02 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oMITJ-0003zY-DG

for dave@doctor.nl2k.ab.ca;

Thu, 11 Aug 2022 18:24:17 -0600

Resent-From: The Doctor

Resent-Date: Thu, 11 Aug 2022 18:24:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f52.google.com ([209.85.218.52]:35446)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oMGHf-000CEi-B3

for doctor@doctor.nl2k.ab.ca;

Thu, 11 Aug 2022 16:04:10 -0600

Received: by mail-ej1-f52.google.com with SMTP id a7so35844725ejp.2

for ; Thu, 11 Aug 2022 15:03:49 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;

bh=45VN1phn8AdYL/9rTUUvb3IiVF8YXNFJxYN7idZW85w=;

b=blyvGIRzUeSCyyX4S6EzWws3fKUcbFAcSTDyrmcEvFRE4d7JbKYe5cy4NY3RkPd5dS

afL6YhuCJxxj1myHZL2YM0x/hzTFjYOUl26FukTAStAST4bGhDm5ne6RwDSROFGa7hKA

mbJSlt/zg+v9uhvq18oCEx3/KjABjorUrVcEIxbmxUNxtaNEPXMs5UD+/fnDUTrzOaO/

ApzGcv6tD29kSc/7tCN8pMMQ0qbXF+ZdJf2x+ynafdfJmd6tohvmpXdzPW0++xiQLLjP

ghUbTVD2mPC5Z8Vm3THF0R8G+ZFEcUfMpceuZcptZZEZY9Jnp8rsqDtktZrb5loDeMm/

Ridg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc;

bh=45VN1phn8AdYL/9rTUUvb3IiVF8YXNFJxYN7idZW85w=;

b=kXRnDA0svuBFSGfmumSOMjQ3B1FsBiH4WI3djP02xMMkxJ32haERXeazSMjApXL6iM

C0tmOc1diNzEAwUMAeQS7aWaneOJRYjYbYlEJXbLv9D7CYvyZoB/QL9CcoSjMWM4HiZb

0bZ5Lf0wuBhdEfklcq0s0Jbsx0Ky75g/fYbkUK498UVolm3jXWv3ePEziL3B4E1HH8jf

GNkw+i9cl9obAfc9/OdYhTrnMY3Fv/ibrJOPRj1aqyWyh4EtL3kC0FsamMcpeWwIlX3g

6KeufZLcswp6ev4lq8WgbNixh2bwRTzHn+bJ6kcik2vX+p34G1CyyztThUzDFmXhdb/d

B0Lg==

X-Gm-Message-State: ACgBeo2sqwKFM066N28cHp0bQSEysOCqQuD7swl6NwQq8M4mg+d5yzD3

wcNDzSRiZoyrLGSuWI5NdrKGIfJhXMcb6O3acqQ=

X-Google-Smtp-Source: AA6agR5Y/qIEPp4J13ZWUlVac+21B+xogtM/8YIKP57hx2KhukpA5Zopikt6cwTkVvqoaq6ZlTG16eOroW4V76CugDY=

X-Received: by 2002:a17:906:7309:b0:731:5c2:a9a6 with SMTP id

di9-20020a170906730900b0073105c2a9a6mr742809ejc.486.1660255423439; Thu, 11

Aug 2022 15:03:43 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:6400:2584:0:0:0:0 with HTTP; Thu, 11 Aug 2022 15:03:43

-0700 (PDT)

Reply-To: ubacustomerservice101@gmail.com

From: AUSTRALIA LOTTERY INC

Date: Thu, 11 Aug 2022 15:03:43 -0700

Message-ID:

Subject: CONGRATULATIONS YOU HAVE WON THE LOTTERY ($750,000 USD)

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 13.9

X-Spam_score_int: 139

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Your email has won $750,000USD from Australia Lottery has

been accredited in a United Bank For Africa to your favor.contact the office

via email for claim details, Email: ubacustomerservice101@gmail.com



Content analysis details: (13.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 HK_LOTTO_NAME No description available.

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.218.52 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[hanstillmanns112[at]gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[hanstillmanns112[at]gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[ubacustomerservice101[at]gmail.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} CONGRATULATIONS YOU HAVE WON THE LOTTERY ($750,000 USD)



--

Your email has won $750,000USD from Australia Lottery has been

accredited in a United Bank For Africa to your favor.contact the

office via email for claim details,



Email: ubacustomerservice101@gmail.com



Person to contact is: Mr. Mark Rennison...



Australia Lottery Agent



Mr. Mark Rennison



CONGRATULATIONS YOU HAVE WON AUSTRALIA LOTTERY.