Older women sex spam from Hotmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Aug 2022 13:17:53 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSkFs-0007X8-Ik

for dave@doctor.nl2k.ab.ca;

Mon, 29 Aug 2022 13:17:04 -0600

Resent-From: The Doctor

Resent-Date: Mon, 29 Aug 2022 13:17:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oln040092066023.outbound.protection.outlook.com ([40.92.66.23]:29982 helo=EUR01-VE1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSgkc-000AB4-Eg

for doctor@doctor.nl2k.ab.ca;

Mon, 29 Aug 2022 09:32:40 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=Yz198MBQ19vE7LyU0BCo5DK+/U2nOkzOHF+k0dRb7QsA6vYBPloJCWcmw04E2DXcoJiNDkbC0t+yXSDBqLbgWbsVXAUZF4C2TzkK3iXpOp1V+Z8n0It20aSNzoEWuvbRFoWpJIWR6D1bcbE1cVwaeiU22ASAgQicVILBdPgQyAmBGDh87iXX6ggANtRmYttX2zAzHWnb1UFJqr3xh36KyQt9X0JBXgm2mDRgXwvNZxVVUnlXxS9wya+Cool8Z7jz9VoqaSfT3Z2QPSVkelaVV7PYEe4XX5H5aDvKG6XIhXEEwuoTvdnpHZSL+7G7VZoxW74kaDteqKbJYJSxLHRl8g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=phH8r5OFzkuoalHNgzR8eNyLyvZeBkJtgAIqZxjhqjo=;

b=WJioUJgQOoHpU50Yz7IhrMZX8u2E8U5w0khH9yamv6ItBI6VY8Eb3fd3jZHrwIfwIs4EqUlx3lYHXHQdoqtR2Jg2tYD0E9SpwKkvKj/uKgUQEz8D7zAgWSeEg5AtM5e3m/Jq39t0ua63SPmwLv2aJD6NJGZm7HWERoTCJT6V7NdxzveQEShE54Vmen3PrihVESpMfHad+Aek+ATxN2aWvoame9XS5Jr9Nm8R4njS85sU84jzIG14XQdHNQYAN/yM3W9vdFU6JmNiH/gvlrSmMcrKqxVyHJKXBcuxlPmvJXWAgPc8KwAOD+qEiTp72/sEzfzb5NrRo4vtdULfMid9Sw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=phH8r5OFzkuoalHNgzR8eNyLyvZeBkJtgAIqZxjhqjo=;

b=gzS3ZQi362d5pk/sE09gRviWImgRFR77tv5h9sLKUkSVwR+RvkJlWeCc9OPONa+jJinyAmh6TYSqRoFHaJVan7l1nc0iU62+Tm1Jylm7AIRUKFYhETtu0ehHeN34Vi6bWUiWbnUVobsoJEwYpU5YoEiyzHymznkfVRMJ7F33YqQ2kPmiUu6pLn3HNCCS11sP+VEjtHU49ofopw8nGDMHORmYwhveVK/O555c+nJjsxjNnax7FVHqPbtw9zdTSp3qaryVMSTMhUFrZ+wveV+nRXXQwagiTdaRmV0ej9+uv7fyXI0VB+D7ICEvce1sKW4hAo8AIhgTJ882ln8P/dLWHQ==

Received: from VI1PR0902MB1949.eurprd09.prod.outlook.com (2603:10a6:802:9::28)

by DB8PR09MB4360.eurprd09.prod.outlook.com (2603:10a6:10:154::14) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5566.15; Mon, 29 Aug

2022 15:32:04 +0000

Received: from VI1PR0902MB1949.eurprd09.prod.outlook.com

([fe80::6985:f6f2:76e:9909]) by VI1PR0902MB1949.eurprd09.prod.outlook.com

([fe80::6985:f6f2:76e:9909%3]) with mapi id 15.20.5566.021; Mon, 29 Aug 2022

15:32:04 +0000

X-Mailer: MailBee.NET 11.2.0.590

From: "stevenburton197@hotmail.com"

Subject: Website full of mature

Reply-To: "stevenburton197@hotmail.com"

Date: Mon, 29 Aug 2022 17:31:59 +0200

Message-ID:



Content-Type: multipart/alternative;

boundary="----=_NextPart_000_321C_FC8602DB.A8FD1B80"

To: Undisclosed recipients:;

X-TMN: [YkIs1tSJw67eDNR6C1t6kSUjybYj5SFF]

X-ClientProxiedBy: FR0P281CA0053.DEUP281.PROD.OUTLOOK.COM

(2603:10a6:d10:48::17) To VI1PR0902MB1949.eurprd09.prod.outlook.com

(2603:10a6:802:9::28)

X-Microsoft-Original-Message-ID: <1.bc2e570c7a326cb10c36@DESKTOP-1SRV5V9>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-Office365-Filtering-Correlation-Id: f01bbdac-b0e5-44c2-1cb3-08da89d39f1f

X-MS-TrafficTypeDiagnostic: DB8PR09MB4360:EE_

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?cVluWjBVNU5PeTZiNmlrNFMyNlZWU25SQ2tJN2F6aWJkendEY1VPSGR0ckVM?=

=?utf-8?B?MjBUdVRoK0V5TStpVC91RE9PSjU2V1ZLckN5bmNaZVI1Uzh5THVnOTB2M1BD?=

=?utf-8?B?dkc0M1RVcG8yeGhhN3JvSVJVcyttNnBNZGRDWS8wa0FTaHEyLzRFdm5XTlll?=

=?utf-8?B?SE85VTl4T3NVRi9wSHRDckQvNnVsS21GOFRXazVjVGh2ZzQ5VU1PRWFSVTZq?=

=?utf-8?B?UU53dGdsa1Z4bG9KQWRCMVN6cy9Scmh0NWUxUDhSMGRpdFN2ZkhxQWxzYnll?=

=?utf-8?B?R1VDYzhtOWlOdUoxSHB1cjhFbStzVm8vOW1MOG1qMDVYcVdPOU52UHlFN0s2?=

=?utf-8?B?bDhCVjQ1TmF0c1QwVklRc0daT1R0bkduazlmWmRVRkdYczVna3U4a2NENjAr?=

=?utf-8?B?dStudFpnNlduQ3dtOVYrbURyS25iR3RKTHdTbnl3VkpUNjBCazhBbm5lenhr?=

=?utf-8?B?V3RLUXZ4R3dualZ5bXNoTE9lbk5ibDk3eU5McHUvT1Frb2tyVHdRSklBQ25N?=

=?utf-8?B?MVlQKzV2a0FQV3dNdFU4bmh6a3lQNEJnNGgyT0lqcXBqeUM0dWZsRWgyL0RX?=

=?utf-8?B?dExZNUNNaDlDaVJTUWdRMW9nZUEvNmh2bC9JNlY0RVc2cmQ0VWtYU0VwdkQw?=

=?utf-8?B?NHFMZXUwMS96U2g3YWdJbzFLU3dGdFN1aHRpTmYxTHRkTXdja1FUOEFaUHBy?=

=?utf-8?B?Q09TV2d4RnptdzhGeFNDS0liTmxXMHNQNlBUVmlPNWlkQndmd3VGbnprUy9K?=

=?utf-8?B?UVFJOEd4R2F0MGhDN1pId202bFZFdDk2bGcyVEpINVNRRDlrbkxUWUVjdXhs?=

=?utf-8?B?eERPTHRqNFcyY3orK2JuUFF2QzNiVmNERkd5WlI4enFzdnpZS29zYkRoMVZP?=

=?utf-8?B?OG05SDd2bTR2KzRocnU3bTZYSUcyVk9jRlRVTWlpN2l4VGJMZy84NEJKUTN6?=

=?utf-8?B?djl4OEhQS0FuN0xObkE3Mmw2WDZHUXdzaS9JdnJMek9HaGlyUEZ3OEVFYXR2?=

=?utf-8?B?c3Vtd3JXSEg4TjI2dlpZc1A2NlFFYld4YUZxeE9PUUwvbDdiMGpkR2lkWVdR?=

=?utf-8?B?RmZOSThORlhZRXBZbjQwQmtodVhwdkQ1SGtJL1FwVHJKdnB4dzBpcm8yZ3p2?=

=?utf-8?B?YVNkSEJNdU9VWXlib25IWFRnc1RBL0ZYR2lKR3NpSXZyZGM0L1oreEFpUy9p?=

=?utf-8?B?aG5vbVRZaE5VdWp6MEVBbVhFNEthZHZYSGM3MVBFcXBHQVkvUE9lN1ZsdmdJ?=

=?utf-8?B?aiszV0dlcjUwYVJQb3liTVZHRU5qSEVPY0ZnY21sSXpXYkJmSkxNcWp5amFP?=

=?utf-8?B?VFRtNENxVnFENkQ1SktJYUJLV1krYUNFaFpjRTlSYlNqbjlVWlliVWM4Q2k0?=

=?utf-8?B?cHNIb0NyTkpsREpITGUwOTNXZllqenFPdWxESkJjcE12UFdGOUE0VXA5empy?=

=?utf-8?B?ZmdBUzA2aERGaTREOWFoL3FwZzFhUGFDS3IvTm14aXhtYmxkLysyb1VNL0Fk?=

=?utf-8?B?TEFZWWFVbkpTOVRwdzBwMm1Vb3hlZTdacFVrNzUrSUQzZE5McDJ0MVFyQUpK?=

=?utf-8?B?T1Z2QTBnOFJxQTNCbjRoS0VHT2Q5VGdRQk1DRFM3SkxvYzc3ZTJ3NFNGeXJH?=

=?utf-8?B?bk9Fc0RrTGpZb3NpWmhyZEc5eTZhRmRXR0YyYXhiMTBzZks0K3cvMTYyWjNa?=

=?utf-8?B?Y0R6S1k2UlIrUExQdlk3QUp3THNuc2U3Sk5KR3UxYW81ZEIxVUtJWXRKMitz?=

=?utf-8?Q?aOV4aAj3q81utFRfRs=3D?=

X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-64da6.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: f01bbdac-b0e5-44c2-1cb3-08da89d39f1f

X-MS-Exchange-CrossTenant-AuthSource: VI1PR0902MB1949.eurprd09.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Aug 2022 15:32:03.9097

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB8PR09MB4360

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Are you ready for SEX with an older woman? If your answer

is YES, you've come to the right place cause this is a website full of mature

women looking for hot, steaming SEX! Read below why I started this SEX CLUB

for ELDERLY PEOPLE.



Content analysis details: (5.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URIs: ladyforfun.club]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL

blocklist

[URIs: ladyforfun.club]

0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was

blocked. See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[URIs: ladyforfun.club]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[stevenburton197[at]hotmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[stevenburton197[at]hotmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[stevenburton197[at]hotmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

0.6 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image

area

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or

Formatted Colors in HTML

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 T_SCC_BODY_TEXT_LINE No description available.

Subject: {SPAM?} Website full of mature



------=_NextPart_000_321C_FC8602DB.A8FD1B80

Content-Type: text/plain;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Are you ready for SEX with an older woman?





If your answer is YES, you've come to the right place cause this is a websi=

te full of mature women looking for hot, steaming SEX!



Read below why I started this SEX CLUB for ELDERLY PEOPLE.



Young people seem to think older women only want to knit scarfs and bake c=

akes but that isn't true at all. WE WANT HARD SEX JUST LIKE YOU MEN!



But we found that on most dating apps like TINDER, there is just no place =

for PEOPLE ABOVE 50.



That's why I started this website, especially for OLDER WOMEN LOOKING FOR =

LIKEMINDED HORNY MEN! As you can see from my pictures, we're NOT SHY, but w=

e keep our identities PRIVATE AND SECURE.



So why don't you come and join me and my girlfriends? We won't bite (unles=

s you want us to ;-))







SIGN UP NOW FOR A HORNY CHAT





http://backdoorflirts.ladyforfun.club



































































Still want to unsubscribe entirely? Click below to unsubscribe.



UNSUBSCRIBE











































=



------=_NextPart_000_321C_FC8602DB.A8FD1B80

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




style=3D"font-weight:normal;" id=3D"docs-internal-guid-1d3b78d4-7fff-f53b-=

141a-2dcc3650a8df">=0A=


margin-bottom:12pt;">=0A=


000;background-color:transparent;font-weight:400;font-style:normal;font-var=

iant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wr=

ap;"> 
0000;background-color:transparent;font-weight:700;font-style:normal;font-va=

riant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-w=

rap;">Are you ready for SEX with an older woman?=0A=

=0A=


=0A=


margin-bottom:12pt;">=0A=


olor:transparent;font-weight:400;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">If your ans=

wer is YES, you've come to the right place cause this is a
le=3D"font-size:13pt;font-family:Arial;color:#000000;background-color:trans=

parent;font-weight:700;font-style:normal;font-variant:normal;text-decoratio=

n:none;vertical-align:baseline;white-space:pre-wrap;">website full of matur=

e women looking for hot, steaming SEX!=0A=

=0A=


margin-bottom:12pt;">=0A=


olor:transparent;font-weight:700;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">Read below =

why I started this SEX CLUB for ELDERLY PEOPLE.=0A=

=0A=


;margin-bottom:12pt;">=0A=


olor:transparent;font-weight:400;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">Young peopl=

e seem to think older women only want to knit scarfs and bake cakes but tha=

t isn't true at all.
;color:#000000;background-color:transparent;font-weight:700;font-style:norm=

al;font-variant:normal;text-decoration:none;vertical-align:baseline;white-s=

pace:pre-wrap;">WE WANT HARD SEX JUST LIKE YOU MEN!=0A=

=0A=


;margin-bottom:12pt;">=0A=


olor:transparent;font-weight:400;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">But we foun=

d that on most dating apps like
amily:Arial;color:#000000;background-color:transparent;font-weight:700;font=

-style:normal;font-variant:normal;text-decoration:none;vertical-align:basel=

ine;white-space:pre-wrap;">TINDER
family:Arial;color:#000000;background-color:transparent;font-weight:400;fon=

t-style:normal;font-variant:normal;text-decoration:none;vertical-align:base=

line;white-space:pre-wrap;">, there is just no place for
=3D"font-size:13pt;font-family:Arial;color:#000000;background-color:transpa=

rent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:=

none;vertical-align:baseline;white-space:pre-wrap;">PEOPLE ABOVE 50<=

span style=3D"font-size:13pt;font-family:Arial;color:#000000;background-col=

or:transparent;font-weight:400;font-style:normal;font-variant:normal;text-d=

ecoration:none;vertical-align:baseline;white-space:pre-wrap;">.=0A=

=0A=


;margin-bottom:12pt;">=0A=


olor:transparent;font-weight:400;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">That's why =

I started this website, especially for
;font-family:Arial;color:#000000;background-color:transparent;font-weight:7=

00;font-style:normal;font-variant:normal;text-decoration:none;vertical-alig=

n:baseline;white-space:pre-wrap;">OLDER WOMEN LOOKING FOR LIKEMINDED HORNY =

MEN!
ckground-color:transparent;font-weight:400;font-style:normal;font-variant:n=

ormal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;"> =

As you can see from my pictures, we're NOT SHY, but we keep our identities =


ound-color:transparent;font-weight:700;font-style:normal;font-variant:norma=

l;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">PRIVA=

TE AND SECURE
000000;background-color:transparent;font-weight:400;font-style:normal;font-=

variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre=

-wrap;">.=0A=

=0A=


margin-bottom:12pt;">=0A=


olor:transparent;font-weight:400;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">So why don'=

t you come and join me and my girlfriends? We won't bite (unless you want u=

s to ;-))=0A=

=0A=


margin-bottom:12pt;">=0A=


olor:transparent;font-weight:400;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;"> 
n>=0A=

=0A=


margin-bottom:12pt;">=0A=


olor:transparent;font-weight:400;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">SIGN UP NOW=

FOR A HORNY CHAT =0A=

=0A=


=0A=


:#ffffff;margin-top:0pt;margin-bottom:0pt;">=0A=


:none;">
kground-color:#ffffff;font-weight:700;font-style:normal;font-variant:normal=

;text-decoration:underline;-webkit-text-decoration-skip:none;text-decoratio=

n-skip-ink:none;vertical-align:baseline;white-space:pre-wrap;">http://backd=

oorflirts.ladyforfun.club=0A=

=0A=


:#ffffff;margin-top:0pt;margin-bottom:0pt;padding:12pt 0pt 0pt 0pt;">=0A=

 =0A=

=0A=


:#ffffff;margin-top:0pt;margin-bottom:0pt;padding:12pt 0pt 0pt 0pt;">=0A=

 =0A=

=0A=


=0A=


=0A=


argin-bottom:0pt;">=0A=


:none;">
round-color:transparent;font-weight:700;font-style:normal;font-variant:norm=

al;text-decoration:underline;-webkit-text-decoration-skip:none;text-decorat=

ion-skip-ink:none;vertical-align:baseline;white-space:pre-wrap;">
e=3D"border:none;display:inline-block;overflow:hidden;width:210px;height:34=

4px;">
9bytz8CJSCTfiFNA_cJjt0OtKlN2EhNsisbJAMEQyT0Ykvmf1SQKxlueI-w-d_-NAXv_aFriNdA=

q4sh4j1AlmZC0u9Kj_UMkeF80_1DETSyyYAADGhOwztgjMKUwIH20" style=3D"margin-left=

:0px;margin-top:0px;" width=3D"210" height=3D"344">
e=3D"font-size:18pt;font-family:Arial;color:#1155cc;background-color:transp=

arent;font-weight:700;font-style:normal;font-variant:normal;text-decoration=

:underline;-webkit-text-decoration-skip:none;text-decoration-skip-ink:none;=

vertical-align:baseline;white-space:pre-wrap;">
isplay:inline-block;overflow:hidden;width:256px;height:340px;">
https://lh6.googleusercontent.com/FqnZV67xMtclHvenkpwhoJbwaCu9hfNfw5mrOtJgL=

uutosodXXGbsyA-8PWHL4MHlbhMEHC-Z1CzH4HzaQJgu_CtjJvPjuJWDfIsvfrH9nUBOG0xRZu3=

eNcil_JpelZwUCFM5RsPf1TQgvbAwif1_rA" style=3D"margin-left:0px;margin-top:0p=

x;" width=3D"256" height=3D"340">
t;font-family:Arial;color:#1155cc;background-color:transparent;font-weight:=

700;font-style:normal;font-variant:normal;text-decoration:underline;-webkit=

-text-decoration-skip:none;text-decoration-skip-ink:none;vertical-align:bas=

eline;white-space:pre-wrap;">
k;overflow:hidden;width:266px;height:320px;">
usercontent.com/gqeBUQqXWEizEkLewwNTNqJeLzGzDlb6WXsUc3lL5B8H5ne1Mbz3xEwGxNm=

q-bqL-eJZxqAPtEMEYskN0eZN_O89JbW-6awomuENE_ol2CFX6zEK5YvRnecYgftw0ZU1xG9Yvu=

y2kVsGr_wkRYkPcmo" style=3D"margin-left:0px;margin-top:0px;" width=3D"266" =

height=3D"320">=0A=

=0A=


=0A=


=0A=


=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=


b-141a-2dcc3650a8df">
=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


argin-bottom:12pt;">=0A=


lor:transparent;font-weight:400;font-style:normal;font-variant:normal;text-=

decoration:none;vertical-align:baseline;white-space:pre-wrap;"> Still =

want to unsubscribe entirely? Click below to unsubscribe.=0A=

=0A=


argin-bottom:12pt;">=0A=

<=

span style=3D"font-size:6pt;font-family:Arial;color:#1155cc;background-colo=

r:transparent;font-weight:400;font-style:normal;font-variant:normal;text-de=

coration:underline;-webkit-text-decoration-skip:none;text-decoration-skip-i=

nk:none;vertical-align:baseline;white-space:pre-wrap;">UNSUBSCRIBE
a>=0A=

=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=



------=_NextPart_000_321C_FC8602DB.A8FD1B80--

missing package spam from Google

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Aug 2022 13:16:56 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSjvO-0004uT-AD

for dave@doctor.nl2k.ab.ca;

Mon, 29 Aug 2022 12:55:54 -0600

Resent-From: The Doctor

Resent-Date: Mon, 29 Aug 2022 12:55:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f194.google.com ([209.85.128.194]:38527)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSeiK-000FKx-NI

for root@nk.ca;

Mon, 29 Aug 2022 07:22:09 -0600

Received: by mail-yw1-f194.google.com with SMTP id 00721157ae682-3321c2a8d4cso194710397b3.5

for ; Mon, 29 Aug 2022 06:21:47 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:from:to:cc;

bh=zBsuMTBIQFTiCQaQT/lPnRwAVPSE/xl96YwZmqcRBf4=;

b=K2zUPaSS1D8UoDht4UVsnhWqS2WRSPvQpVdWNPFVaI/OLuvOnxx7F2hrxsvkd/z42E

ENnSj+7xBU7rIoI4HKo+Zm4r/iGcJPvUKZ9UXCBt/n36RSgTn74Wto2bEwd86RMsEzm7

S1IvGhao+YzsHqBmhRYDvNeVIUT22Dys1vsIt3XBEMvgVg7JhHfV+3l3RqInnlcpb6dk

b2+2JZ88z+numbF4UIqZfkelghLx4f5l7u+YIMt0fgdYNlz67+iGccF15OTuQMKDHf+g

yWVXFeAACHuLCkXMEGsLr0kk6zHseNzv4uXzture7A6LXu6wPSH2+TOk5lFAkB/QPb+I

+1YA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:x-gm-message-state:from:to:cc;

bh=zBsuMTBIQFTiCQaQT/lPnRwAVPSE/xl96YwZmqcRBf4=;

b=rvedpv2KNNRwNlnpMKRhVI08hQ2Wz6hGc8L7OlrFatcqhXJ0LC2TWKNSMLIXiYYIRE

Grd6y/rPKu9fo1ElrJuuhx+OOOYW4yQTN7fvHVXuaHD2E4Nar9r3pBzBE9hmM9QHydid

iqfxOi9MMg9PqdnSE7w7DtJ+OfdnE1bNFqXInooRu4Q7ziXVr+4FIl/ZSAbC5nSUAzg8

ytOTNb+hj/BvkPhkwx+HgVpAWipBYAeKcKImElyBemFwQmAnDCAGK07soSddkPZCMo3z

wB8ZiZrKzZw5N1q0kPxPrbqtWYx+PwgwO8jtNqWxQLvxdnAzbMzKBAdw/R0WU7JvqvVR

DdvA==

X-Gm-Message-State: ACgBeo2ZIwluCFeHpt0Wq0zMF5CoTigKDv5ne6+6h1cId3XD3migb5eK

oOHX9VSDj/QsLflR2+GE7wgvEN4Mc75bcXc44Kw=

X-Google-Smtp-Source: AA6agR6n5SAUrHT4CvsUkDPwViBkTg4Zo20WSwOWkvIlKtYrzPurhTksY+6BBxZLG7ejoZ9QQWuTW7RUGDcSjgM3GOs=

X-Received: by 2002:a25:1641:0:b0:684:d31a:feff with SMTP id

62-20020a251641000000b00684d31afeffmr8768329ybw.538.1661779301276; Mon, 29

Aug 2022 06:21:41 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:7010:ee4c:b0:2d6:50e8:7824 with HTTP; Mon, 29 Aug 2022

06:21:40 -0700 (PDT)

Reply-To: josephscottok@gmail.com

From: "Mr.Joseph Scott"

Date: Mon, 29 Aug 2022 06:21:40 -0700

Message-ID:

Subject: Re: Your Abandoned Package For Delivery

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Bcc: root@nk.ca

X-Spam_score: 11.0

X-Spam_score_int: 110

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Assistant Inspection Director McCarran International Airport

Las Vegas Nevada, WMO 72386, United State Date: 08/29/2022 Hello: My Good

Friend Re: Your Abandoned Package For Delivery



Content analysis details: (11.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.194 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[japhetanbua[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal

information

2.7 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

Subject: {SPAM?} Re: Your Abandoned Package For Delivery



Assistant Inspection Director

McCarran International Airport

Las Vegas Nevada,

WMO 72386, United State

Date: 08/29/2022



Hello: My Good Friend



Re: Your Abandoned Package For Delivery



I have very vital information to give to you, but first I must have

your trust before I review it to you because it may cause me my job,

so I need somebody that I can trust for me to be able to review the

secret to you.



I am Mr Joseph Scott, head of luggage/baggage storage facilities here

at the McCarran International Airport,Nevada USA. During my recent

withheld package routine check at the Airport Storage Vault, I

discovered an abandoned shipment from a Diplomat from London and when

scanned it revealed an undisclosed sum of money in a metal trunk box.

The consignment was abandoned because the Contents of the consignment

was not properly declared by the consignee as =E2=80=9CMONEY=E2=80=9D rathe=

r it was

declared as personal effect to avoid interrogation and also the

inability of the diplomat to pay for the United States Non Inspection

Charges which is $3,700USD. On my assumption the consignment is still

left in our Storage House here at the International Airport Nevada

till date. The details of the consignment including your name, your

email address and the official documents from the United Nations

office in Geneva are tagged on the Trunk box.



However, to enable me confirm if you are the actual recipient of this

consignment as the assistant director of the Inspection Unit, I will

advise you provide your current Phone Number and Full Address, to

enable me cross check if it corresponds with the address on the

official documents including the name of nearest Airport around your

city. Please note that this consignment is supposed to have been

returned to the United States Treasury Department as unclaimed

delivery due to the delays in concluding the clearance processes so as

a result of this, I will not be able to receive your details on my

official email account. So in order words to enable me cross check

your details, I will advise you send the required details to my

private email address for quick processing and response. Once I

confirm you as the actual recipient of the trunk box, I can get

everything concluded within 48hours upon your acceptance and proceed

to your address for delivery.



Lastly, be informed that the reason I have taken it upon myself to

contact you personally about this abandoned consignment is because I

want us to transact this business and share the money 80% for you and

20% for me since the consignment has not yet been returned to the

United States Treasury Department after being abandoned by the

diplomat so immediately the confirmation is made, I will go ahead and

pay for the United States Non Inspection Fee of $3,700 dollars and

arrange for the box to be delivered to your doorstep Or I can bring it

by myself to avoid any more trouble but you have to assure me of my

20% share.



I wait to hear from you urgently if you are still alive and I will

appreciate if we can keep this deal confidential. Please get back to

me via my private Email:(josephscottok@gmail.com) for further

directives:



Thank you.

Mr.Joseph Scott

Assistance Inspection Director

McCarran International Airport

Las Vegas Nevada,

WMO 72386, United States.

Western union phish from Google Mail Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Aug 2022 08:27:02 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSeob-000Fx1-9G

for dave@doctor.nl2k.ab.ca;

Mon, 29 Aug 2022 07:28:33 -0600

Resent-From: The Doctor

Resent-Date: Mon, 29 Aug 2022 07:28:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f171.google.com ([209.85.128.171]:46809)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSc9k-0001UC-FC

for root@nk.ca;

Mon, 29 Aug 2022 04:38:17 -0600

Received: by mail-yw1-f171.google.com with SMTP id 00721157ae682-3413ad0640dso28750487b3.13

for ; Mon, 29 Aug 2022 03:37:55 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:from:to:cc;

bh=PEmB3x6VdXcWnJW7B80xYuqe+o1lnmoF5m750WPXd4U=;

b=nYj9gBRWPgSOBAvmmyesuBlxqtBPzdEyJu7ZvcnruuLDKzC/csrkIALZe4z5WUO5z6

sr+Ruck9S6trg4HK0LFDm+gU6JHg3Ei9/HVZ/upSDOFCnz/GIZe5MC0vH4RMw3AFDa+A

tIeynFPNF+OenzHFHzKOqwbLIkcvGJZlfss0xkuJuCCzUCA+zEvNy8b7a4I1rq0p9flF

tHUgaRlDiHy82rCM7XIB4T6znRKQco3Jnr6pPk12sNYvuUefNTWJBiybWOe0G9iQ2SYf

U5Feer3SkreBT3zVqtZearaKGSBLCJgrZvpBanKPLXssOY32lFp1F92FGUXufcyHXA0I

dQXA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:x-gm-message-state:from:to:cc;

bh=PEmB3x6VdXcWnJW7B80xYuqe+o1lnmoF5m750WPXd4U=;

b=7ypbdQ8ggeNqIP1PajWd9XMTRql7Mwx+ECQmGdeXWirt9ARQkR/3XfkCAjpyP/UqS1

+rL84SeYkDMHQKYcrqv/rP2yMbYSSfEGVk3VzbJMNzpglg3QQoLWpa0r+eiMliVaN2vs

bWqB0hZ2xJb1jdHyrqwqUOVrLpjFBqfCGyAKY1TyHwW1jurohdHxKf1UnXIPxhvBt0KC

XNsUwmy0pmSRfsZNPMhb/Yvg+juOm7Vy563jhWOqLJKzr0KIaMRyU2b1ZYgNaD6Ak6gT

KLILtrD5e488k31JMIeYmlG4Jjv0sz1423ulFLsR+d+CXc2HlTYvo7xz4WQ7WCKTLi9v

KpZQ==

X-Gm-Message-State: ACgBeo1vWWbyoR3sjTeItue6qdhagBmVEZWyFZgjSdim8WgK/VuhPajY

gRrblJSqo1gYgDoQe7hnB3djU6uASJyjHi4nUlg=

X-Google-Smtp-Source: AA6agR7U4DY0i7U3U95CetGH/RXGLyT8COaJfa5ZjPuNQe/tGOTCAw7SfOqzxe7O3dDJlfvLTSpsJJzMy8lVDvxqq44=

X-Received: by 2002:a25:eb0d:0:b0:696:436e:c833 with SMTP id

d13-20020a25eb0d000000b00696436ec833mr7262617ybs.574.1661769469214; Mon, 29

Aug 2022 03:37:49 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:7010:4848:b0:2ef:b4be:b855 with HTTP; Mon, 29 Aug 2022

03:37:48 -0700 (PDT)

Reply-To: wesernunion.179@yahoo.com

From: Western Union Money Transfer

Date: Mon, 29 Aug 2022 03:37:48 -0700

Message-ID:

Subject: Available Money To Pick Up

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Bcc: root@nk.ca

X-Spam_score: 21.0

X-Spam_score_int: 210

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Attention E-mail Address Owner: Sequel to the first edition

2022 meeting held yesterday with Federal Bureau of Investigation, The International

Monetary Fund (IMF) is compensating all the scam victims and your email address

was foun [...]



Content analysis details: (21.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was

blocked. See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[URIs: westernunion.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.171 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[africateam397[at]gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[africateam397[at]gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[wesernunion.179[at]yahoo.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 HK_SCAM_N8 BODY: No description available.

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 HK_SCAM No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 FILL_THIS_FORM Fill in a form with personal information

2.2 FILL_THIS_FORM_LOAN Answer loan question(s)

0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)

0.0 MONEY_FORM Lots of money if you fill out a form

0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)

0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.3 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of

money

3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases

Subject: {SPAM?} Available Money To Pick Up



Attention E-mail Address Owner:



Sequel to the first edition 2022 meeting held yesterday with Federal

Bureau of Investigation, The International Monetary Fund (IMF) is

compensating all the scam victims and your email address was found in

the scam victims list and selected to be compensated. This Western

Union office has been mandated by the IMF to transfer your

compensation to you via Western Union Money Transfer.



However, we have concluded to effect your payment through Western Union

Money Transfer, $3,500,00. twice per day until your total sum of $3.500,000=

.00.

is completely transferred to you. We have made your first payment this morn=

ing

but you can't pick it because your payment file need to activate and renewe=

d

before you could pick up the payment today and it will cost you $75. only t=

o

activate and renewed your payment file.



THIS IS YOUR FIRST PAYMENT INFORMATION; visit Western Union Website on.



https://www.westernunion.com/global-service/track-transfer

[https://www.westernunion.com/global-service/track-transfer]



MTCN: 770-413-6000.

SENDERS NAME: PETER MOORE

SENDERS COUNTRY: BENIN REPUBLIC

TEXT QUESTION: IN GOD

TEXT ANS: WE TRUST

AMOUNT: $3,500.00



Note that your payment files will be returned to the IMF within 72 hours if

we did not hear from you, this was the instruction given to us by the IMF.



Send the $75. with this information below.



Receiver Name =3D=3D=3D=3D DANIEL CHRISTIAN

Country =3D=3D=3D=3D Benin Republic

City =3D=3D=3D=3D Cotonou

Test Question =3D=3D=3D=3D=3D When

Answer =3D=3D=3D Now

Amount =3D=3D=3D=3D $75



SINCERELY,

MR. ROBERT SMITH

Telephone: +229-60333897

Western Union=C2=AE Money Transfer,

Head Office Benin Republic

Business proposal spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Aug 2022 09:28:03 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSenk-000FsX-E6

for dave@doctor.nl2k.ab.ca;

Mon, 29 Aug 2022 07:27:40 -0600

Resent-From: The Doctor

Resent-Date: Mon, 29 Aug 2022 07:27:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ua1-f67.google.com ([209.85.222.67]:43977)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSan2-000HOB-LK

for root@nk.ca;

Mon, 29 Aug 2022 03:10:44 -0600

Received: by mail-ua1-f67.google.com with SMTP id z14so2855124uam.10

for ; Mon, 29 Aug 2022 02:10:19 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;

bh=u4ux40pLfc9JCwhXa0iXIqaNwXoEyUtPQwkKPM3Hooc=;

b=VEDQPQve9R1VYTKUAkEJJR3uQ5+HZTRdvY6dKPQh6O6uI/4UlD410fUPznp1/T/d21

yjt0NlSCZjaMipR5PULuZbcCaq7NtxPx8hpeFUqdn33T9awyP3E6WHiCn1WcPPuS4+ta

SEpkcSayBe1eH3mdlC1sXjiAo0P+PvgnLxX12yavQtVfwiqkK8iZlJqb9itE+nv82xs+

NxMPYdgF51TxYKnYWWm4rLVzlxn+8uW1LEl5jQw7H+nbw8jdRg8jNbEOhQl9n/hFHdM1

IVd4snyVyt0oCIxukw6PqwKXLcW+d4oC/RwygP8LG7XtWpTvFlWvWS1EZ/1zRQLR78LB

WSbQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc;

bh=u4ux40pLfc9JCwhXa0iXIqaNwXoEyUtPQwkKPM3Hooc=;

b=d/h7JlpRU6AGp06yjE2aRAld9NELVxfB1LvSjI7M02F/XlvQbyruNrK07wjBzg7yjg

Hj9JTePqWiOhzpfi495ETHpJIN3ZNPFCHHgdboVjr2j0Tyu7TNPS6t3g+1Ugk3n7U8Sz

AczOe1nz3McVhz6O+NDBS9rdj2ZmsoXr4GkqBEIRofgkMPSYxNLipR74HXVOTRxoMHKr

OVEJh9EH53fwK4W93tyToXOlvl2bsl7tmRjS4EWV6inog9lQfJitxaVTauMzh5+OwXtm

A0+XmVFv76xMtVgN0IYeM0+wmec/3AKZH6N1PT7g2vuDAtOAIvSZUW1K4xO8XWO41h0+

d4XQ==

X-Gm-Message-State: ACgBeo0h6od2mBn6iyDDyxyIAEK9GUO55kAKsIblIIazuS2QS0EzBq+T

QhutVT7bDMrLP6BcZc93TGY/QpwD1akS48LN/3M=

X-Google-Smtp-Source: AA6agR6pTompcAGgj+Aw86cvGbQbWJCcmpt4FltNdMz+GUG/gWqcGruRTii2gjVzd7v35tRHCZs7Oq3VSHiZNgJL5k0=

X-Received: by 2002:ab0:548e:0:b0:39f:9349:bbed with SMTP id

p14-20020ab0548e000000b0039f9349bbedmr1021176uaa.42.1661764213353; Mon, 29

Aug 2022 02:10:13 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a59:ada8:0:b0:2d6:fb61:7eb5 with HTTP; Mon, 29 Aug 2022

02:10:12 -0700 (PDT)

Reply-To: zebulonmatsiattorney@gmail.com

From: Zebulon Matsi

Date: Mon, 29 Aug 2022 11:10:12 +0200

Message-ID:

Subject: Thank You.

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: root@nk.ca



Hi

I am writing to inform you that I have a business proposal for you

Kindly confirm your willingness to partner with me so That I can

furnish You with the full details,Thanks



Yours Sincerely

Barr. Zebulon Matsi

zebulonmatsiattorney@gmail.com

Urgency spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 28 Aug 2022 23:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSUba-000OKs-FA

for dave@doctor.nl2k.ab.ca;

Sun, 28 Aug 2022 20:34:26 -0600

Resent-From: The Doctor

Resent-Date: Sun, 28 Aug 2022 20:34:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f47.google.com ([209.85.167.47]:34425)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSQBA-000Goz-Im

for doctor@doctor.nl2k.ab.ca;

Sun, 28 Aug 2022 15:50:57 -0600

Received: by mail-lf1-f47.google.com with SMTP id bt10so8840838lfb.1

for ; Sun, 28 Aug 2022 14:50:35 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;

bh=er/LsCFGnglHbssr+g8ELSIClTaWwfUGaB/KaUC2bII=;

b=ZOViw+Bdqg12lpsUteNBl+B+v84BWfkFoenYnTHIuSeQGVdIbvB/CaudmqiXfnyGuM

EV5D8JABGbuuAiDUIRbA+nJB3y3cmZWy8HJmFA3RyLsCiF+KpfUn1wla0aJkLeOrqcXT

c5f4ugvo4IHB2LHl4JNt83u/gR1dYAR9Y6dZWQg9Bkr1aFH3CKLzM6fI2IgvPoXBCm4e

C40c0sWabQ+KxClluiCtGxYB/60rHg9mTBn3KeesaG2F8cq0sUtZin5gRNYal6A9hrcO

jYgCSUCiKcSAoktmIiZag3CRUuPcLNXa353bL2/zuTMBjpdvv/SyXLTX95cofF7iOI37

S6HQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc;

bh=er/LsCFGnglHbssr+g8ELSIClTaWwfUGaB/KaUC2bII=;

b=IkjBMfzzL9UqGFjoP9vreF7yYIMTKjt6SgeIV/EwtT4+HTffPPpo/o424FUHzOSpeu

Uf1pqGSUYGOW2WUrllCspeo8U0U8iAeJBvW4IJ+KNLlx1Z3YY7stgMQp/JJeGPgb4Pvy

So56CZ7VqJKq2jC9gPeHtDFxC5GOB9Hhgxjw/FZl/tUBbgMRSq+ZnJ74z9acY6I0PFtD

fZ0JsrtXTiWOBGgMTEZvpIMCM5v7ZvRC1U8/777D1s6jNUKtHmmdeCWnkuiFz9ewublI

u2u+azPezjWNVFxLKJeNE+STX2HQW8fSSxPk/PfcX8nuyzx97AXYqrZbezh4OZWlzdL/

mN+w==

X-Gm-Message-State: ACgBeo3eg2NUaKfo5RA24A6+ZEQSqVD2pGhTlc5mxhJaH63uV0b3ek/+

vD01DEIUe9Huq+M/I1BGDm9Sepej6E9VeN4lPCg=

X-Google-Smtp-Source: AA6agR6ocAN2E3tBTh4mIOxNezxSD8pqJgJnefThCuYuaNfyJn9AdpJZQ7CyRvXeXb0n2Fj8OM02Cds+K9lUILFDU60=

X-Received: by 2002:a19:505b:0:b0:494:6549:ade7 with SMTP id

z27-20020a19505b000000b004946549ade7mr1862056lfj.62.1661723428200; Sun, 28

Aug 2022 14:50:28 -0700 (PDT)

MIME-Version: 1.0

Reply-To: drrhahassancom@gmail.com

From: Dr Rhama

Date: Sun, 28 Aug 2022 21:50:23 -0700

Message-ID:

Subject: Please read carefully,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000a726ce05e7542281"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 13.4

X-Spam_score_int: 134

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: From: Dr Rhama_______ Please read carefully, This message

might meet you in utmost surprise. However, it's just my urgent need for

foreign partner that made me contact you for this transaction. I got your

contact from yahoo tourist search while [...]



Content analysis details: (13.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.47 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[jbsamsunghuit[at]gmail.com]

0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_HK_NAME_FM_DR No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal

information

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Please read carefully,



--000000000000a726ce05e7542281

Content-Type: text/plain; charset="UTF-8"



From: Dr Rhama_______

Please read carefully,



This message might meet you in utmost surprise. However, it's just my

urgent need for foreign partner that made me contact you for this

transaction. I got your contact from yahoo tourist search while I was

searching for a foreign partner. I am assured of your capability and

reliability to champion this business opportunity when I prayed about you.



I am a banker by profession in Burkina-Faso, West Africa and currently

holding the post of manager in account and auditing department in our

bank. I have the opportunity of transferring the left over funds ($5.5

Million Dollars) belonging to our deceased customer who died along

with his entire family in a plane crash



Hence; I am inviting you for a business deal where this money can be

shared between us in the ratio of 60/40 if you agree to my business

proposal. Further details of the transfer will be forwarded to you as

soon as I receive your return mail as soon as you receive this letter.



Please indicate your willingness by sending the below information for

more clarification and easy communication. For more details, Contact

me for more details.



For the Expenses, I will be the one to take care of the expenses, if

the bank asks

you for any money, do not pay, inform me in time i will pay it.

I will take care of expenses.



(1) YOUR FULL NAME...

(2) YOUR CONTACT ADDRESS....

(3) YOUR PRIVATE PHONE N0..........

(4) YOUR COUNTRY OF ORIGIN..................

(5) YOUR OCCUPATION.........................



Trusting to hear from you immediately.

Thanks & Best Regards,

Dr Rhama.



--000000000000a726ce05e7542281

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable








ont-size:small;font-style:normal;font-variant-ligatures:normal;font-variant=

-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-in=

dent:0px;text-transform:none;white-space:normal;word-spacing:0px;background=

-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color=

:initial;display:inline;float:none">From: Dr Rhama_______

=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:sm=

all;font-style:normal;font-variant-ligatures:normal;font-variant-caps:norma=

l;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;te=

xt-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(=

255,255,255);text-decoration-style:initial;text-decoration-color:initial"><=

span style=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;fo=

nt-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-=

caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-ind=

ent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-=

color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:=

initial;display:inline;float:none">Please read carefully,

=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:sm=

all;font-style:normal;font-variant-ligatures:normal;font-variant-caps:norma=

l;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;te=

xt-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(=

255,255,255);text-decoration-style:initial;text-decoration-color:initial"><=

br style=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font=

-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-ca=

ps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-inden=

t:0px;text-transform:none;white-space:normal;word-spacing:0px;background-co=

lor:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:in=

itial">
serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-=

variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;=

text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;bac=

kground-color:rgb(255,255,255);text-decoration-style:initial;text-decoratio=

n-color:initial;display:inline;float:none">This message might meet you in u=

tmost surprise. However, it's just my

4,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:nor=

mal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;=

letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;=

white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-=

decoration-style:initial;text-decoration-color:initial">
r:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font=

-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-w=

eight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-trans=

form:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,=

255);text-decoration-style:initial;text-decoration-color:initial;display:in=

line;float:none">urgent need for foreign partner that made me contact you f=

or this

sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;=

font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:s=

tart;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0p=

x;background-color:rgb(255,255,255);text-decoration-style:initial;text-deco=

ration-color:initial">
Helvetica,sans-serif;font-size:small;font-style:normal;font-variant-ligatur=

es:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;te=

xt-align:start;text-indent:0px;text-transform:none;white-space:normal;word-=

spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial=

;text-decoration-color:initial;display:inline;float:none">transaction. I go=

t your contact from yahoo tourist search while I was

or:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;fon=

t-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-=

weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-tran=

sform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255=

,255);text-decoration-style:initial;text-decoration-color:initial">
yle=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size=

:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:no=

rmal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px=

;text-transform:none;white-space:normal;word-spacing:0px;background-color:r=

gb(255,255,255);text-decoration-style:initial;text-decoration-color:initial=

;display:inline;float:none">searching for a foreign partner. I am assured o=

f your capability and

ial,Helvetica,sans-serif;font-size:small;font-style:normal;font-variant-lig=

atures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:norma=

l;text-align:start;text-indent:0px;text-transform:none;white-space:normal;w=

ord-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:ini=

tial;text-decoration-color:initial">
-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-v=

ariant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spa=

cing:normal;text-align:start;text-indent:0px;text-transform:none;white-spac=

e:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration=

-style:initial;text-decoration-color:initial;display:inline;float:none">rel=

iability to champion this business opportunity when I prayed about you.
an>

font-size:small;font-style:normal;font-variant-ligatures:normal;font-varian=

t-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-i=

ndent:0px;text-transform:none;white-space:normal;word-spacing:0px;backgroun=

d-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-colo=

r:initial">

s-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;fon=

t-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:star=

t;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;b=

ackground-color:rgb(255,255,255);text-decoration-style:initial;text-decorat=

ion-color:initial">
vetica,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:=

normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-=

align:start;text-indent:0px;text-transform:none;white-space:normal;word-spa=

cing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;te=

xt-decoration-color:initial;display:inline;float:none">I am a banker by pro=

fession in Burkina-Faso, West Africa and currently

:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-=

style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-we=

ight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transf=

orm:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,2=

55);text-decoration-style:initial;text-decoration-color:initial">
e=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:s=

mall;font-style:normal;font-variant-ligatures:normal;font-variant-caps:norm=

al;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;t=

ext-transform:none;white-space:normal;word-spacing:0px;background-color:rgb=

(255,255,255);text-decoration-style:initial;text-decoration-color:initial;d=

isplay:inline;float:none">holding the post of manager in account and auditi=

ng department in our

al,Helvetica,sans-serif;font-size:small;font-style:normal;font-variant-liga=

tures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal=

;text-align:start;text-indent:0px;text-transform:none;white-space:normal;wo=

rd-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:init=

ial;text-decoration-color:initial">
family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-va=

riant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spac=

ing:normal;text-align:start;text-indent:0px;text-transform:none;white-space=

:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-=

style:initial;text-decoration-color:initial;display:inline;float:none">bank=

. I have the opportunity of transferring the left over funds ($5.5
r style=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-=

size:small;font-style:normal;font-variant-ligatures:normal;font-variant-cap=

s:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent=

:0px;text-transform:none;white-space:normal;word-spacing:0px;background-col=

or:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:ini=

tial">
erif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-v=

ariant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;t=

ext-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;back=

ground-color:rgb(255,255,255);text-decoration-style:initial;text-decoration=

-color:initial;display:inline;float:none">Million Dollars) belonging to our=

deceased customer who died along

nt-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font=

-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-s=

pacing:normal;text-align:start;text-indent:0px;text-transform:none;white-sp=

ace:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decorati=

on-style:initial;text-decoration-color:initial">
,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:n=

ormal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:40=

0;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:non=

e;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);tex=

t-decoration-style:initial;text-decoration-color:initial;display:inline;flo=

at:none">with his entire family in a plane crash

gb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-st=

yle:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weig=

ht:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transfor=

m:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255=

);text-decoration-style:initial;text-decoration-color:initial">

"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small=

;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;f=

ont-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-=

transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255=

,255,255);text-decoration-style:initial;text-decoration-color:initial">
n style=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-=

size:small;font-style:normal;font-variant-ligatures:normal;font-variant-cap=

s:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent=

:0px;text-transform:none;white-space:normal;word-spacing:0px;background-col=

or:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:ini=

tial;display:inline;float:none">Hence; I am inviting you for a business dea=

l where this money can be

y:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-variant=

-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:n=

ormal;text-align:start;text-indent:0px;text-transform:none;white-space:norm=

al;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style=

:initial;text-decoration-color:initial">
font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;fo=

nt-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter=

-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-=

space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decora=

tion-style:initial;text-decoration-color:initial;display:inline;float:none"=

>shared between us in the ratio of 60/40 if you agree to my business=



t-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-c=

aps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-inde=

nt:0px;text-transform:none;white-space:normal;word-spacing:0px;background-c=

olor:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:i=

nitial">
-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font=

-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start=

;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;ba=

ckground-color:rgb(255,255,255);text-decoration-style:initial;text-decorati=

on-color:initial;display:inline;float:none">proposal. Further details of th=

e transfer will be forwarded to you as

4);font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal=

;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;let=

ter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;whi=

te-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-dec=

oration-style:initial;text-decoration-color:initial">
gb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-st=

yle:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weig=

ht:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transfor=

m:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255=

);text-decoration-style:initial;text-decoration-color:initial;display:inlin=

e;float:none">soon as I receive your return mail as soon as you receive thi=

s letter.

a,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:norma=

l;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align=

:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:=

0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-de=

coration-color:initial">

Helvetica,sans-serif;font-size:small;font-style:normal;font-variant-ligatur=

es:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;te=

xt-align:start;text-indent:0px;text-transform:none;white-space:normal;word-=

spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial=

;text-decoration-color:initial">
ily:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-varia=

nt-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing=

:normal;text-align:start;text-indent:0px;text-transform:none;white-space:no=

rmal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-sty=

le:initial;text-decoration-color:initial;display:inline;float:none">Please =

indicate your willingness by sending the below information for

yle=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size=

:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:no=

rmal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px=

;text-transform:none;white-space:normal;word-spacing:0px;background-color:r=

gb(255,255,255);text-decoration-style:initial;text-decoration-color:initial=

">
;font-size:small;font-style:normal;font-variant-ligatures:normal;font-varia=

nt-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-=

indent:0px;text-transform:none;white-space:normal;word-spacing:0px;backgrou=

nd-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-col=

or:initial;display:inline;float:none">more clarification and easy communica=

tion. For more details, Contact

-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-v=

ariant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spa=

cing:normal;text-align:start;text-indent:0px;text-transform:none;white-spac=

e:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration=

-style:initial;text-decoration-color:initial">
4,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:nor=

mal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;=

letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;=

white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-=

decoration-style:initial;text-decoration-color:initial;display:inline;float=

:none">me for more details.

ily:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-varia=

nt-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing=

:normal;text-align:start;text-indent:0px;text-transform:none;white-space:no=

rmal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-sty=

le:initial;text-decoration-color:initial">

font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;fo=

nt-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter=

-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-=

space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decora=

tion-style:initial;text-decoration-color:initial">
34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-style=

:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:=

400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:n=

one;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);t=

ext-decoration-style:initial;text-decoration-color:initial;display:inline;f=

loat:none">For the Expenses, I will be the one to take care of the expenses=

, if

s-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;fon=

t-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:star=

t;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;b=

ackground-color:rgb(255,255,255);text-decoration-style:initial;text-decorat=

ion-color:initial">
vetica,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:=

normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-=

align:start;text-indent:0px;text-transform:none;white-space:normal;word-spa=

cing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;te=

xt-decoration-color:initial;display:inline;float:none">the bank asks=



t-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-c=

aps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-inde=

nt:0px;text-transform:none;white-space:normal;word-spacing:0px;background-c=

olor:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:i=

nitial">
-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font=

-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start=

;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;ba=

ckground-color:rgb(255,255,255);text-decoration-style:initial;text-decorati=

on-color:initial;display:inline;float:none">you for any money, do not pay, =

inform me in time i will pay it.

t-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-=

variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-sp=

acing:normal;text-align:start;text-indent:0px;text-transform:none;white-spa=

ce:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoratio=

n-style:initial;text-decoration-color:initial">
34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:no=

rmal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400=

;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none=

;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text=

-decoration-style:initial;text-decoration-color:initial;display:inline;floa=

t:none">I will take care of =C2=A0expenses.

,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:n=

ormal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:40=

0;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:non=

e;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);tex=

t-decoration-style:initial;text-decoration-color:initial">

r:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font=

-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-w=

eight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-trans=

form:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,=

255);text-decoration-style:initial;text-decoration-color:initial">
le=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:=

small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:nor=

mal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;=

text-transform:none;white-space:normal;word-spacing:0px;background-color:rg=

b(255,255,255);text-decoration-style:initial;text-decoration-color:initial;=

display:inline;float:none">(1) YOUR FULL NAME...

gb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-st=

yle:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weig=

ht:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transfor=

m:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255=

);text-decoration-style:initial;text-decoration-color:initial">
=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:sm=

all;font-style:normal;font-variant-ligatures:normal;font-variant-caps:norma=

l;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;te=

xt-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(=

255,255,255);text-decoration-style:initial;text-decoration-color:initial;di=

splay:inline;float:none">(2) YOUR CONTACT ADDRESS....

lor:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;fo=

nt-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font=

-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-tra=

nsform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,25=

5,255);text-decoration-style:initial;text-decoration-color:initial">
tyle=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-siz=

e:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:n=

ormal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0p=

x;text-transform:none;white-space:normal;word-spacing:0px;background-color:=

rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initia=

l;display:inline;float:none">(3) YOUR PRIVATE PHONE N0..........

style=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-si=

ze:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:=

normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0=

px;text-transform:none;white-space:normal;word-spacing:0px;background-color=

:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initi=

al">
if;font-size:small;font-style:normal;font-variant-ligatures:normal;font-var=

iant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;tex=

t-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;backgr=

ound-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-c=

olor:initial;display:inline;float:none">(4) YOUR COUNTRY OF ORIGIN.........=

.........

a,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:norma=

l;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align=

:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:=

0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-de=

coration-color:initial">
l,Helvetica,sans-serif;font-size:small;font-style:normal;font-variant-ligat=

ures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;=

text-align:start;text-indent:0px;text-transform:none;white-space:normal;wor=

d-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initi=

al;text-decoration-color:initial;display:inline;float:none">(5) YOUR OCCUPA=

TION....................
ly:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-varian=

t-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:=

normal;text-align:start;text-indent:0px;text-transform:none;white-space:nor=

mal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-styl=

e:initial;text-decoration-color:initial;display:inline;float:none">.....
pan>

;font-size:small;font-style:normal;font-variant-ligatures:normal;font-varia=

nt-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-=

indent:0px;text-transform:none;white-space:normal;word-spacing:0px;backgrou=

nd-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-col=

or:initial">

ns-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;fo=

nt-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:sta=

rt;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;=

background-color:rgb(255,255,255);text-decoration-style:initial;text-decora=

tion-color:initial">
lvetica,sans-serif;font-size:small;font-style:normal;font-variant-ligatures=

:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text=

-align:start;text-indent:0px;text-transform:none;white-space:normal;word-sp=

acing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;t=

ext-decoration-color:initial;display:inline;float:none">Trusting to hear fr=

om you immediately.

l,Helvetica,sans-serif;font-size:small;font-style:normal;font-variant-ligat=

ures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;=

text-align:start;text-indent:0px;text-transform:none;white-space:normal;wor=

d-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initi=

al;text-decoration-color:initial">
amily:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-var=

iant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spaci=

ng:normal;text-align:start;text-indent:0px;text-transform:none;white-space:=

normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-s=

tyle:initial;text-decoration-color:initial;display:inline;float:none">Thank=

s & Best Regards,

ial,Helvetica,sans-serif;font-size:small;font-style:normal;font-variant-lig=

atures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:norma=

l;text-align:start;text-indent:0px;text-transform:none;white-space:normal;w=

ord-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:ini=

tial;text-decoration-color:initial">
-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-v=

ariant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spa=

cing:normal;text-align:start;text-indent:0px;text-transform:none;white-spac=

e:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration=

-style:initial;text-decoration-color:initial;display:inline;float:none">Dr =

Rhama.







--000000000000a726ce05e7542281--

Urgency spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Aug 2022 05:25:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSXHM-000D7T-4O

for dave@doctor.nl2k.ab.ca;

Sun, 28 Aug 2022 23:25:44 -0600

Resent-From: The Doctor

Resent-Date: Sun, 28 Aug 2022 23:25:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f49.google.com ([209.85.218.49]:45671)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSV9i-0001RZ-61

for doctor@doctor.nl2k.ab.ca;

Sun, 28 Aug 2022 21:09:45 -0600

Received: by mail-ej1-f49.google.com with SMTP id lx1so13063639ejb.12

for ; Sun, 28 Aug 2022 20:09:25 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;

bh=9IBKKLgkfhER1wfKS3CqqCBd7PzkoxFQ7y7PLeB7PlI=;

b=YoATawWjhvJI7g3ouyz/CRbYO24XVDwIf+6T1iU2/cQ3kl46N7S/CUkBdQMLAA+tXz

K/xvVsv2wqbIzrUyMRo37zgmEuJOqeCpDi53ybamDYSjj0Gmo+gsb9zC4pCYnKXRxIJy

m/wTkHIqKXPEfw2VhE8JruX2RTBbnYvxksMEgQQqLotoIcY1aYR4wjVuArxNzKYZuqEW

EtGhiPmp3JQj5X5nnQL4wahAQhqd0dE0FIcvi+NV/jX1l72Nt2Oua3s8W1M8vRAQg9jN

WXjdp3mkDZYDxzOLdGDf2/EePSeQdu+qqu01VIshjNX55y6deodgInbAxst2hG2R1QzQ

HOfQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc;

bh=9IBKKLgkfhER1wfKS3CqqCBd7PzkoxFQ7y7PLeB7PlI=;

b=E9vVmDV+LDyxGenQMIxvU09MhjMF/iS+tDkS2swQIKuRaInm5fUil0nezwXHzkKfBY

1k7n7ejE/Noo9RKAzDYyDkksjMvAIdCCRuAt51zWG4UzH7OOW7qYcKrnI/vU9Q+bUUnx

ey/LqOToQ9QkxKZ3jatzX808u6xo18VbttTBiL4lceEC5a4AP9aDExQ/6jT2ORu5T7pc

T4y93GmcXelliu8gt1+ONvmbWDkTtCRHbk5G2YoMy7zYO/aCYDMiTjFNZTh6k5lv3AHk

aYq3C83jV/3Ch5HpC98SG+v75HizZ+2f/EBt6YoA6eeqGRP4wNXBkTur1llzbfiwTa49

DMAA==

X-Gm-Message-State: ACgBeo1V7yX/rIcFWmWJVKVYb1OawoQn5CcQ/0zl+8Dzn8pBdc70uRr4

Aoc1bSL65lZ3agezbCeetf+StqVBaE1P6KKqK9g=

X-Google-Smtp-Source: AA6agR4OxazLTN2h0/13IRjnuB5IUylSTggwWLbbqBtE8EhWmiMXA65u8HaXtzFlR8cePX3u6ZTwdKEZ2OXBSTScsts=

X-Received: by 2002:a17:907:608b:b0:731:8a9d:5a2d with SMTP id

ht11-20020a170907608b00b007318a9d5a2dmr12037934ejc.443.1661742558681; Sun, 28

Aug 2022 20:09:18 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a17:906:b04:b0:73d:fcdd:ecdd with HTTP; Sun, 28 Aug 2022

20:09:17 -0700 (PDT)

Reply-To: mrsaifemohammed2018@outlook.fr

From: Mr Saife Mohammed

Date: Mon, 29 Aug 2022 03:09:17 +0000

Message-ID:

Subject: VERY URGENT

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 24.0

X-Spam_score_int: 240

X-Spam_bar: ++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Friend, How are you today?. Please, I would like you

to give an urgent attention to this proposal. I have a very lucrative business

transaction which requires your utmost discretion. Though, I know it would

c [...]



Content analysis details: (24.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.218.49 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[mrezekieljeremiah21[at]gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[mrezekieljeremiah21[at]gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[mrsaifemohammed2018[at]outlook.fr]

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.0 SPF_PASS SPF: sender matches SPF record

0.9 URG_BIZ BODY: Contains urgent matter

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

2.6 HK_SCAM_N13 BODY: No description available.

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 T_MONEY_PERCENT X% of a lot of money for you

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal

information

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

Subject: {SPAM?} VERY URGENT



Dear Friend,



How are you today?. Please, I would like you to give an urgent

attention to this proposal.

I have a very lucrative business transaction which requires your

utmost discretion.

Though, I know it would come to you at uttermost surprise. I am Mr.

Saife Mohammed, A banker by profession.



Please, I want to transfer the sum of ($15.5M) dollars into your bank

account. This business is 100% risk free.

Your share will be 40% while 60% for me.



Full details will be send to you on the receipt of your urgent

response by forwarding the following details bellow:



Here is my private E-mail Address: (mrsaifemohammed2018@outlook.fr)



1. Your Full Name................

2. Your Telephone No..........

3. Your Receiving Country................

4. Your Home Address........



Thanks.



Mr. Saife Mohammed,

Beneficiary spam from Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Aug 2022 01:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSXH0-000D5t-MO

for dave@doctor.nl2k.ab.ca;

Sun, 28 Aug 2022 23:25:22 -0600

Resent-From: The Doctor

Resent-Date: Sun, 28 Aug 2022 23:25:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-sgaapc01rlhn2140.outbound.protection.outlook.com ([40.95.54.140]:26255 helo=APC01-SG2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSTtJ-000K83-MV

for root@nl2k.ab.ca;

Sun, 28 Aug 2022 19:48:48 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=LwGYqRQHkUFIhwcmiQdywkMCIv/rszmAb5ORMB2LZ0PRBAAbeEJjPSTEhkoeDOX4SIpT4MNB37aPxhWk5EBT+IZ/sN3u2r7Ds5z+8KBo5PIvkoEMQ/umNa+HKtfhgwTJS9FgF8mG3xOuLaqnZgCKgJJ2HrLc5rijNE5nyUbj5ovrNQfxdcvPvMwyYJdZjCF8z+MVEx004Y7eIUZ+//D5N/+WHMMaPTljHQxHilbq01RSHod7cQsyKnERLBT8JdMppZP1eslnwRDHH50JVbf1BkohPEglAs1KwFr/14gnsZrJgVi7rrEfJt9ntbPcHUeRD/CFNmlP2O3e5Tik2y2Nkg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=g2v0lH7IlDiqRi0zRrz2XoYkrDxMr5/d+iWsUIghS+A=;

b=WpaoU6BWGphwbIRafHTxmvarYDQ5faF4zo9ZjgUf5zEPgqOVPhp6nXc3/FmaPrhjn86SSfNW6JjSVR/r+/UphIl7PadLEoqcdJjvat5UsfxoIfIGm0XRPKm8A55g/ayhoIEcuhvkHINCSPdLrwngciXmfRX6m3pJoiuTvceUnqVA8XlJCOw1oFSzREiIF3eNIF2NcpZ3ktHX4eSZVs4pCsh24Zp8dMpfmCrTRNx0g0wd6CNPVMje1WySjY5RdmWCht1UiALRHfqfLF7toeFn2T0zRz0PqZHvFT+V/O4XiagSC0pOMcmd9E5tbw2cSDXXckpfe7FwTO2hOR/hjBWXTg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

203.189.69.107) smtp.rcpttodomain=hullnissan.com smtp.mailfrom=acens.com;

dmarc=fail (p=none sp=none pct=100) action=none header.from=acens.com;

dkim=none (message not signed); arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=hemascol.onmicrosoft.com; s=selector2-hemascol-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=g2v0lH7IlDiqRi0zRrz2XoYkrDxMr5/d+iWsUIghS+A=;

b=qoOFMY5TWvn1u914TGo8cDvzBMg3I7pjIYUhL5wGivqvPa1i/35xDmvDC/YC8GEXo4OFClndzfIOqadOmIrx3N4RZD0R/gni3z45BXyPhT15aLXLFP2ZshqrDlDgYNH8Ye2n8ML587zvrOS2O9qkTHoA1isA1Mhg4Bbx6c+JJ10=

Received: from TYWPR01CA0045.jpnprd01.prod.outlook.com (2603:1096:400:17f::15)

by SG2PR06MB2219.apcprd06.prod.outlook.com (2603:1096:4:c::11) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.5566.15; Mon, 29 Aug 2022 01:48:15 +0000

Received: from TYZAPC01FT021.eop-APC01.prod.protection.outlook.com

(2603:1096:400:17f:cafe::b5) by TYWPR01CA0045.outlook.office365.com

(2603:1096:400:17f::15) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5566.15 via Frontend

Transport; Mon, 29 Aug 2022 01:48:14 +0000

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 203.189.69.107)

smtp.mailfrom=acens.com; dkim=none (message not signed)

header.d=none;dmarc=fail action=none header.from=acens.com;

Received-SPF: Fail (protection.outlook.com: domain of acens.com does not

designate 203.189.69.107 as permitted sender)

receiver=protection.outlook.com; client-ip=203.189.69.107;

helo=mail.atlas.lk;

Received: from mail.atlas.lk (203.189.69.107) by

TYZAPC01FT021.mail.protection.outlook.com (10.118.152.130) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id

15.20.5566.15 via Frontend Transport; Mon, 29 Aug 2022 01:48:14 +0000

Received: from cpcex01.cpc.local (192.168.13.16) by cpcex01.cpc.local

(192.168.13.16) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 29 Aug

2022 05:35:43 +0530

Received: from User (2.56.58.78) by cpcex01.cpc.local (192.168.13.16) with

Microsoft SMTP Server id 15.0.1473.3 via Frontend Transport; Mon, 29 Aug 2022

05:35:33 +0530

Reply-To:

From: Mrs.Juan Henry

Subject: Attention: Beneficiary

Date: Sun, 28 Aug 2022 17:06:08 -0700

MIME-Version: 1.0

Content-Type: text/plain; charset="Windows-1251"

Content-Transfer-Encoding: quoted-printable

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID: <2bd8768a72c649e2b17157e244655ac4@cpcex01.cpc.local>

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-Office365-Filtering-Correlation-Id: 809e56e6-e952-4042-bff4-08da896089b4

X-MS-TrafficTypeDiagnostic: SG2PR06MB2219:EE_

X-Hemas-MessageTracker: #G01

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 1

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?windows-1251?Q?/dtgMiAMlQjT0wMjw0iOdtWXlKPUAWR7KyfTtDMCUkQVQoQQs/GLISh4?=

=?windows-1251?Q?Sy7rjQL4mS2wVHpOAErEr+GdyVPebnEdq9yjBjkNP3xitGKmFx0oxU5c?=

=?windows-1251?Q?y4DhffyQi9zy0p1/Q6AgX6A37HRox45SyPUXa+3gg2ljQ4+xrifLhn0V?=

=?windows-1251?Q?ZxTtGr/avPY8TnDDEDp+ZcowMi9XbhILvIw2xFRCXZo8Op8laiPfGjwY?=

=?windows-1251?Q?QmExzY9R3g4PN6yYKckaH+ORGyVAxTNt0MiwW8HVA60ucKXtJFvMQ2IU?=

=?windows-1251?Q?SXWjVo3nHMpi7M9jrOHph8Fw82sEW432szb41dgZh8cmzKz6FQbY2Opg?=

=?windows-1251?Q?WuCE6lcA4NfhcL9yGXAIbHgUgHT1OeGoi/zoQh4LSUqpj5kMwVCuLEZh?=

=?windows-1251?Q?Xev7JHDtkJahfFCAaAkBmAabcXrhTC4wXGQ+R1tyQCtUi5HqJrSKLZt2?=

=?windows-1251?Q?H30XZbNtqztW+qq/ynVTnfa5OkklsL/tSLNDF5Ht1OKO5zXi01GE20sv?=

=?windows-1251?Q?jb67MlOrSV8qBkh788HciFu33JBzBkf6neCkyMck05gyuDRZGp4HrLSO?=

=?windows-1251?Q?uXMOh6XlPoN8SnLtAN+oeYL1VpfTjRda+Lo0OSAlIPIDAbJRbZHu6ETr?=

=?windows-1251?Q?avyi2lX6x781GnBc8ou95MMsEiMGvvyB9PSlkWCqdqe4OzalopbT3sNy?=

=?windows-1251?Q?ZFoS//MdqUNk/cNkjgk8I8CtYDqOSvGEbFwu4Se9rDzGLToMCc2689SB?=

=?windows-1251?Q?ogaJdy0ke8J67QTm4EsMQo6SGqFe/17XT8w2H6dT4rFV3oWAv/KL9orv?=

=?windows-1251?Q?MQ1tkPXRttmnHsjVcbrxNDd5R+1XetlEvNGEIgGrMcZt/b2KHFPYmOLn?=

=?windows-1251?Q?gxQr0wgsbL8l8CbRt13026zt6QcdEe4wB0S2Xwi9JW+uej7yvXLF9bsE?=

=?windows-1251?Q?TZdCU2f4/jLajL1T/78yaKBlOWyaezeAz2LFK4bKXEI/ngBjhFT3vGJB?=

=?windows-1251?Q?hhsGOvbNujQwhIb00ZDkOCTX+r8v2fok94PgYm63huuEfdnoWClW6jIk?=

=?windows-1251?Q?ydvKIUl22VFnXC6+VKEyY/bOMFdScxi08OEG4487Cko/aKwe84/OzqgM?=

=?windows-1251?Q?eAB7eD7H1EHkXpev2cOu8nHSm+ElwHy8U84uKsEkfGs7OFxnlEh9ugXV?=

=?windows-1251?Q?H7q915Resb2sg9eAq1gBxMv5ddb+gI9ZYxYFrE4lB+BqEqcdQMP0c9BX?=

=?windows-1251?Q?IgTQbIHz+4a6HJg4KVhyXq/IF5dZAwAZ03Y5MMY8?=

X-Forefront-Antispam-Report:

CIP:203.189.69.107;CTRY:LK;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail.atlas.lk;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230016)(136003)(346002)(396003)(376002)(39860400002)(40470700004)(82740400003)(70586007)(70206006)(8676002)(356005)(86362001)(81166007)(32650700002)(66574015)(109986005)(83380400001)(9686003)(35950700001)(108616005)(24736004)(26005)(41300700001)(498600001)(7366002)(316002)(82310400005)(336012)(2860700004)(40460700003)(40480700001)(6666004)(2906002)(956004)(7406005)(5660300002)(7416002)(8936002)(362954009);DIR:OUT;SFP:1023;

X-OriginatorOrg: hemascol.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Aug 2022 01:48:14.2943

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 809e56e6-e952-4042-bff4-08da896089b4

X-MS-Exchange-CrossTenant-Id: 0b2ad702-c4fe-4319-a94f-4c01f321d5e7

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=0b2ad702-c4fe-4319-a94f-4c01f321d5e7;Ip=[203.189.69.107];Helo=[mail.atlas.lk]

X-MS-Exchange-CrossTenant-AuthSource:

TYZAPC01FT021.eop-APC01.prod.protection.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SG2PR06MB2219

X-Spam_score: 24.6

X-Spam_score_int: 246

X-Spam_bar: ++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: ATTENTION: This email came from an external source. Do not

open attachments or click on links from unknown senders or unexpected emails.

Attention: Beneficiary We are not sure you received our previous message

but we wish to us this medium to officially inform you that following the

ongoing review of all unclaimed and delayed funds by the United Nations and

[...]



Content analysis details: (24.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.0 NSL_RCVD_FROM_USER Received from User

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[40.95.54.140 listed in psbl.surriel.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[jjjuan429[at]gmail.com]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=info%40acens.com;ip=40.95.54.140;r=doctor.nl2k.ab.ca]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=APC01-SG2-obe.outbound.protection.outlook.com;ip=40.95.54.140;r=doctor.nl2k.ab.ca]

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 PDS_HELO_SPF_FAIL High profile HELO that fails SPF

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 HK_NAME_MR_MRS No description available.

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 XFER_LOTSA_MONEY Transfer a lot of money

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

Subject: {SPAM?} Attention: Beneficiary





ATTENTION: This email came from an external source. Do not open attachments=

or click on links from unknown senders or unexpected emails.





Attention: Beneficiary





We are not sure you received our previous message but we wish to us this me=

dium to officially inform you that following the ongoing review of all uncl=

aimed and delayed funds by the United Nations and the World Bank, your paym=

ent file was forwarded to our office for immediate payment of your long del=

ayed funds starting with a first transfer of US$10,000,000.00 with referenc=

e No. NG/FM14FGN, to your bank account.



However, we are surprised to receive another application this morning from =

your representative, MR.KRAUS MULLER,stating that you authorized him to tra=

nsfer the funds to another bank account in Germany and that you were recent=

ly involved in an auto accident and cannot walk right now.





Could you please confirm immediately, your relationship with MR.KRAUS MULLE=

R and also, confirm if the bank account in Germany as shown below is now yo=

ur new bank account information to receive your funds this week from our pa=

ying bank





ACCOUNT NO: 098-11180933-109

IBAN: CH55 0910 3045 6011 91110 0

SWIFT CODE: AREZCHZZ8OU



Kindly get in touch with us today by email with your telephone number to co=

nfirm this information to avoid wrong transfer of your funds, so that we ca=

n proceed with the transfer of the US$10,000,000.00 to your correct bank ac=

count as scheduled.





Yours sincerely,



MRS.JUAN HENRY

Director,Anti-Fraud Unit.

Financial Services Regulation Committee

Plot 33,ATB Way Cadastral Zone,Abuja,NG



________________________________



CONFIDENTIALITY



This message contains confidential information and is intended only for the=

individual named herein. Any attachment transmitted with this email is con=

fidential and intended solely for the use of the individual or entity to wh=

om this email is addressed. If you are not the named addressee you should n=

ot disseminate, distribute or copy this e-mail. Please notify the sender im=

mediately by e-mail if you have received this e-mail by mistake and delete =

this e-mail from your system or please notify the system manager. If you ar=

e not the intended recipient you are hereby notified that disclosing, copyi=

ng, distributing or taking any action in reliance on the contents of this i=

nformation is strictly prohibited and in the event of any unauthorized disc=

losure, copying and/or distribution of the contents the generating entity a=

nd/or the sender reserves the right to take any action against such unautho=

rized use in law, equity or otherwise.

The recipient should check this email and any attachments for the presence =

of viruses. The sender accepts no liability for any damage caused by any vi=

rus transmitted by this email, delays, data corruption, unauthorized access=

or unauthorized amendments.



________________________________

NetKnow still in the Netcraft's Top 500

Posted by Dave Yadallee on
All data is from Netcraft Toolbar . Looks as if there are major changes to the Netcraft algorithm!



NetKnow







Netknow now 487 from ranks 483 at Netcraft .



We are now redirecting all traffic to Secured general server which now 483 from ranks 531 and pfs compliant .



A significant increase! We must do
  1. security audits regularly
  2. check on illegitimate traffic hitting the web server
    3. a
  3. keep design current!




Some of our others domains and services ranks as follows:



NetKnow Secure Server

ranks >2000000 from >2000000 Netcraft and pfs compliant .

NetKnow's secondary server

ranks at >2000000 from >2000000 last week on Netcraft and Secured secondary server using the wildcard certificate is at 1024 from 997 .

NetKnow's Anonynous FTP server

and non-anonymous must be set to client ports higher than 42000.

www.nl2k.ab.ca

ranks >2000000 from >2000000 on Netcraft.

internetedmonton.ca

ranks at >2000000 from >2000000.

edmontoninternetserviceprovider.ca

is at >2000000 from >2000000 .

edmontonab.ca

ranks > 2000000 from >2000000



How do we compare with other providers in

Edmonton, Alberta, Canada?



Netknow again





We at Netknow are 487 from 774 since the middle of May 2022.



Rogers





Rogers Business Solutions

which rank 7082 from 7174 and are hosted in Europe.



Telus and reviews





Next we have Telus.com

ranked by Netcraft at 9952 from 9784 .

Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business

is ranked by Netcraft at >2000000 from >2000000 .



Is Telus's ADSL network susceptible to Code Red Attacks and Attackers?

Reviews of Telus are available :





Government of Alberta



The Government of Alberta Website

ranks 17217 from 17499 by Netcraft and seems to hosted on Cloudfare.



Juno and NetZero





We have Juno Internet ranked on top

at https://www.juno.com/ 38697 from 39467 who are the owners of

US Based Netzero at Netcraft Rank 67170 from 64240 .





University of Alberta







The University of Alberta ranks 38855 from 38855 hosted by Amazon Techonologies.



Shaw Cable





Next,

members.shaw.ca

ranks 1047055 from 1049171 and retired and

Shaw Cable

is next at Netcraft rank 58707 from 61694 . Hosted now by Akamei .

Their Network Hosting Arm,

Big Pipe is at

Netcraft rank 324345 from 334623 and hosted by Akamai in Europe .



Reviews of Shaw are available :





NAIT / Northern Alberta Institute of Technology



NAIT ranks 66892 from 67901 hosted by Microsoft .



Xplornet



xplornet

ranks 90487 from 93093 and are listed with

Stentor and are joining up with Shaw.

According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy.



City of Edmonton







The City of Edmonton ranks 99816 from 100022 by Netcraft and hosted by Google.



TekSavvy



TekSavvy ranks 162463 from 154006 and are hosted by Microsoft



Primus



Primus

ranks 251013 from 251483 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.



Internet Centre / CCINet



Internet Centre

rank 284646 from 285299 . Their partner Rack Nine ranks > 2000000.



Distributel / 3Web / CIA



Cybersurf

is ranked 375683 from 389798 and seems to be hosted in USA by Microsoft.



Grant MacEwen University





MacEwan

ranks 388229 from 375780 .



Radiant Communications / goco.ca





Radiant Communications

are ranked by Netcraft >2000000 from >2000000 and part of goco.ca

which ranks 594291 from 636821 .



MCSnet





MCSNET ranks 1344728 from 1342978 and are hosted by Microsoft .



Nucleus Internet Services





After that we have

Nucleus Information Services which can be found at Netcraft Rank >2000000 from >2000000 .



Tera Byte Edmonton and reviews





Next is Tera-Byte

at Netcraft Rank >2000000 from >2000000 with

Tera-Byte.ca

ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless

sold to Xplornet.

One of Tera-Byte's acquisitions

Edmonton Community Networks

ranks at >2000000 from >2000000 and

Go Edmonton ranks >2000000 from >2000000.

Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!

Reviews of Tera-byte is available at

here

and another here

and check Google for more reviews; just search tera byte.



4Web





4web ranks >2000000 from >2000000 .



Alentus / Wolfpaw





Alentus

rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA .

wolfpaw.net

which ranks at >2000000 from >2000000



Wiband Wireless





Wiband Wireless

is dead



Yellowpencil





Yellowpencil Ranks >2000000 from >2000000



WSI Corporation





Next is WSI - We Simply The Internet of Toronto

at Netcraft Position >2000000 from >2000000 and are being hosted on Amazon.



Uniserve / Interbaun





Next, Uniserve

ranks on Netcraft >2000000 from >2000000

One of their acquisitions

interbaun

ranks with Netcraft ?????? from ?????? due to merging of sites.

One customer just came over from this organization in Nov 2006.



Clearwave Broadband





Clearwave Broadband ranks

at >2000000 from >2000000



Emergence by Design





Emergence by Design

now ranks >2000000 from >2000000.



Platinum Communications





Platinum Communications Corp.

bought out by Xplornet .



Wild Rose Internet





Wild Rose Internet

ranks >2000000 from >2000000 and I wonder if this is another wireless branch of Tera-Byte and bought out by Xplornet





TIC Internet





TIC Internet

ranks >2000000 from >2000000 ( I do remember you).







Nisa Custom Internet Solutions





Nisa Custom Internet Solutions

ranks >2000000 from >2000000 by Netcraft



MediaShaker





Media Shakers of Edmonton

ranks >2000000 from >2000000





Koi Media





Koi Media

rank >2000000 from >2000000



WebFire





Webfire.ca

ranks >2000000 from >2000000 and seems to be connected with Shaw.



Core Network Solutions Inc.





Core Network Solutions Inc.

ranks at >2000000 from >2000000 .



The Network Centre





The Network Centre

ranks >2000000 from >2000000 and are linked with Telus high Speed.





Open Concept Internet, Inc.





Open Concept Internet, Inc.

rank > 2000000 from > 2000000





InterSpots





Interspots of Edmonton

rank > 2000000 from > 2000000 hosted by Stentor and acquired by Techalta ;



Yegtel





Yegtel rank > 2000000 .



Internet Crossroads





Internet Crossroads Ltd of North Edmonton

rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca .



If I remember anymore, I will add to this entry, before Netcraft changes our ranking. Please watch this space and please feel free to peruse

our services.