NetKnow Corporate Blog | Entries from August 2022

Urgency spam from Gmail

Urgency spam from Gmail

Beneficiary spam from Outlook

NetKnow still in the Netcraft's Top 500

NetKnow

Netknow again

Rogers

Telus and reviews

Government of Alberta

Juno and NetZero

University of Alberta

Shaw Cable

NAIT / Northern Alberta Institute of Technology

Xplornet

City of Edmonton

TekSavvy

Primus

Internet Centre / CCINet

Distributel / 3Web / CIA

Grant MacEwen University

Radiant Communications / goco.ca

MCSnet

Nucleus Internet Services

Tera Byte Edmonton and reviews

4Web

Alentus / Wolfpaw

Wiband Wireless

Yellowpencil

WSI Corporation

Uniserve / Interbaun

Clearwave Broadband

Emergence by Design

Platinum Communications

Wild Rose Internet

TIC Internet

Nisa Custom Internet Solutions

MediaShaker

Koi Media

WebFire

Core Network Solutions Inc.

The Network Centre

Open Concept Internet, Inc.

InterSpots

Yegtel

Internet Crossroads

Urgency Spam from Google

Connector spam from Outlook

donation spam from Gmail

Ukrainian Wife Phishing from Vietnam

Investment spam from outlook

Urgency Spam from Outlook

SEO spam from Gmail

Nigerian Gmail spam

Business deal spam from Gmail

Posted by Dave Yadallee on Monday, August 29. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 28 Aug 2022 23:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSUba-000OKs-FA

for dave@doctor.nl2k.ab.ca;

Sun, 28 Aug 2022 20:34:26 -0600

Resent-From: The Doctor

Resent-Date: Sun, 28 Aug 2022 20:34:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f47.google.com ([209.85.167.47]:34425)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSQBA-000Goz-Im

for doctor@doctor.nl2k.ab.ca;

Sun, 28 Aug 2022 15:50:57 -0600

Received: by mail-lf1-f47.google.com with SMTP id bt10so8840838lfb.1

for ; Sun, 28 Aug 2022 14:50:35 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;

bh=er/LsCFGnglHbssr+g8ELSIClTaWwfUGaB/KaUC2bII=;

b=ZOViw+Bdqg12lpsUteNBl+B+v84BWfkFoenYnTHIuSeQGVdIbvB/CaudmqiXfnyGuM

EV5D8JABGbuuAiDUIRbA+nJB3y3cmZWy8HJmFA3RyLsCiF+KpfUn1wla0aJkLeOrqcXT

c5f4ugvo4IHB2LHl4JNt83u/gR1dYAR9Y6dZWQg9Bkr1aFH3CKLzM6fI2IgvPoXBCm4e

C40c0sWabQ+KxClluiCtGxYB/60rHg9mTBn3KeesaG2F8cq0sUtZin5gRNYal6A9hrcO

jYgCSUCiKcSAoktmIiZag3CRUuPcLNXa353bL2/zuTMBjpdvv/SyXLTX95cofF7iOI37

S6HQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc;

bh=er/LsCFGnglHbssr+g8ELSIClTaWwfUGaB/KaUC2bII=;

b=IkjBMfzzL9UqGFjoP9vreF7yYIMTKjt6SgeIV/EwtT4+HTffPPpo/o424FUHzOSpeu

Uf1pqGSUYGOW2WUrllCspeo8U0U8iAeJBvW4IJ+KNLlx1Z3YY7stgMQp/JJeGPgb4Pvy

So56CZ7VqJKq2jC9gPeHtDFxC5GOB9Hhgxjw/FZl/tUBbgMRSq+ZnJ74z9acY6I0PFtD

fZ0JsrtXTiWOBGgMTEZvpIMCM5v7ZvRC1U8/777D1s6jNUKtHmmdeCWnkuiFz9ewublI

u2u+azPezjWNVFxLKJeNE+STX2HQW8fSSxPk/PfcX8nuyzx97AXYqrZbezh4OZWlzdL/

mN+w==

X-Gm-Message-State: ACgBeo3eg2NUaKfo5RA24A6+ZEQSqVD2pGhTlc5mxhJaH63uV0b3ek/+

vD01DEIUe9Huq+M/I1BGDm9Sepej6E9VeN4lPCg=

X-Google-Smtp-Source: AA6agR6ocAN2E3tBTh4mIOxNezxSD8pqJgJnefThCuYuaNfyJn9AdpJZQ7CyRvXeXb0n2Fj8OM02Cds+K9lUILFDU60=

X-Received: by 2002:a19:505b:0:b0:494:6549:ade7 with SMTP id

z27-20020a19505b000000b004946549ade7mr1862056lfj.62.1661723428200; Sun, 28

Aug 2022 14:50:28 -0700 (PDT)

MIME-Version: 1.0

Reply-To: drrhahassancom@gmail.com

From: Dr Rhama

Date: Sun, 28 Aug 2022 21:50:23 -0700

Message-ID:

Subject: Please read carefully,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000a726ce05e7542281"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 13.4

X-Spam_score_int: 134

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: From: Dr Rhama_______ Please read carefully, This message

might meet you in utmost surprise. However, it's just my urgent need for

foreign partner that made me contact you for this transaction. I got your

contact from yahoo tourist search while [...]

Content analysis details: (13.4 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.47 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[jbsamsunghuit[at]gmail.com]

0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_HK_NAME_FM_DR No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal

information

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Please read carefully,

--000000000000a726ce05e7542281

Content-Type: text/plain; charset="UTF-8"

From: Dr Rhama_______

Please read carefully,

This message might meet you in utmost surprise. However, it's just my

urgent need for foreign partner that made me contact you for this

transaction. I got your contact from yahoo tourist search while I was

searching for a foreign partner. I am assured of your capability and

reliability to champion this business opportunity when I prayed about you.

I am a banker by profession in Burkina-Faso, West Africa and currently

holding the post of manager in account and auditing department in our

bank. I have the opportunity of transferring the left over funds ($5.5

Million Dollars) belonging to our deceased customer who died along

with his entire family in a plane crash

Hence; I am inviting you for a business deal where this money can be

shared between us in the ratio of 60/40 if you agree to my business

proposal. Further details of the transfer will be forwarded to you as

soon as I receive your return mail as soon as you receive this letter.

Please indicate your willingness by sending the below information for

more clarification and easy communication. For more details, Contact

me for more details.

For the Expenses, I will be the one to take care of the expenses, if

the bank asks

you for any money, do not pay, inform me in time i will pay it.

I will take care of expenses.

(1) YOUR FULL NAME...

(2) YOUR CONTACT ADDRESS....

(3) YOUR PRIVATE PHONE N0..........

(4) YOUR COUNTRY OF ORIGIN..................

(5) YOUR OCCUPATION.........................

Trusting to hear from you immediately.

Thanks & Best Regards,

Dr Rhama.

--000000000000a726ce05e7542281

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

ont-size:small;font-style:normal;font-variant-ligatures:normal;font-variant=

-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-in=

dent:0px;text-transform:none;white-space:normal;word-spacing:0px;background=

-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color=

:initial;display:inline;float:none">From: Dr Rhama_______

=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:sm=

all;font-style:normal;font-variant-ligatures:normal;font-variant-caps:norma=

l;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;te=

xt-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(=

255,255,255);text-decoration-style:initial;text-decoration-color:initial"><=

span style=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;fo=

nt-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-=

caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-ind=

ent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-=

color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:=

initial;display:inline;float:none">Please read carefully,

=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:sm=

all;font-style:normal;font-variant-ligatures:normal;font-variant-caps:norma=

l;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;te=

xt-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(=

255,255,255);text-decoration-style:initial;text-decoration-color:initial"><=

br style=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font=

-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-ca=

ps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-inden=

t:0px;text-transform:none;white-space:normal;word-spacing:0px;background-co=

lor:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:in=

itial">
serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-=

variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;=

text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;bac=

kground-color:rgb(255,255,255);text-decoration-style:initial;text-decoratio=

n-color:initial;display:inline;float:none">This message might meet you in u=

tmost surprise. However, it's just my

4,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:nor=

mal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;=

letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;=

white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-=

decoration-style:initial;text-decoration-color:initial">
r:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font=

-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-w=

eight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-trans=

form:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,=

255);text-decoration-style:initial;text-decoration-color:initial;display:in=

line;float:none">urgent need for foreign partner that made me contact you f=

or this

sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;=

font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:s=

tart;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0p=

x;background-color:rgb(255,255,255);text-decoration-style:initial;text-deco=

ration-color:initial">
Helvetica,sans-serif;font-size:small;font-style:normal;font-variant-ligatur=

es:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;te=

xt-align:start;text-indent:0px;text-transform:none;white-space:normal;word-=

spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial=

;text-decoration-color:initial;display:inline;float:none">transaction. I go=

t your contact from yahoo tourist search while I was

or:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;fon=

t-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-=

weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-tran=

sform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255=

,255);text-decoration-style:initial;text-decoration-color:initial">
yle=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size=

:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:no=

rmal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px=

;text-transform:none;white-space:normal;word-spacing:0px;background-color:r=

gb(255,255,255);text-decoration-style:initial;text-decoration-color:initial=

;display:inline;float:none">searching for a foreign partner. I am assured o=

f your capability and

ial,Helvetica,sans-serif;font-size:small;font-style:normal;font-variant-lig=

atures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:norma=

l;text-align:start;text-indent:0px;text-transform:none;white-space:normal;w=

ord-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:ini=

tial;text-decoration-color:initial">
-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-v=

ariant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spa=

cing:normal;text-align:start;text-indent:0px;text-transform:none;white-spac=

e:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration=

-style:initial;text-decoration-color:initial;display:inline;float:none">rel=

iability to champion this business opportunity when I prayed about you.
an>

font-size:small;font-style:normal;font-variant-ligatures:normal;font-varian=

t-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-i=

ndent:0px;text-transform:none;white-space:normal;word-spacing:0px;backgroun=

d-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-colo=

r:initial">

s-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;fon=

t-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:star=

t;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;b=

ackground-color:rgb(255,255,255);text-decoration-style:initial;text-decorat=

ion-color:initial">
vetica,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:=

normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-=

align:start;text-indent:0px;text-transform:none;white-space:normal;word-spa=

cing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;te=

xt-decoration-color:initial;display:inline;float:none">I am a banker by pro=

fession in Burkina-Faso, West Africa and currently

:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-=

style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-we=

ight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transf=

orm:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,2=

55);text-decoration-style:initial;text-decoration-color:initial">
e=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:s=

mall;font-style:normal;font-variant-ligatures:normal;font-variant-caps:norm=

al;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;t=

ext-transform:none;white-space:normal;word-spacing:0px;background-color:rgb=

(255,255,255);text-decoration-style:initial;text-decoration-color:initial;d=

isplay:inline;float:none">holding the post of manager in account and auditi=

ng department in our

al,Helvetica,sans-serif;font-size:small;font-style:normal;font-variant-liga=

tures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal=

;text-align:start;text-indent:0px;text-transform:none;white-space:normal;wo=

rd-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:init=

ial;text-decoration-color:initial">
family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-va=

riant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spac=

ing:normal;text-align:start;text-indent:0px;text-transform:none;white-space=

:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-=

style:initial;text-decoration-color:initial;display:inline;float:none">bank=

. I have the opportunity of transferring the left over funds ($5.5
r style=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-=

size:small;font-style:normal;font-variant-ligatures:normal;font-variant-cap=

s:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent=

:0px;text-transform:none;white-space:normal;word-spacing:0px;background-col=

or:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:ini=

tial">
erif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-v=

ariant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;t=

ext-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;back=

ground-color:rgb(255,255,255);text-decoration-style:initial;text-decoration=

-color:initial;display:inline;float:none">Million Dollars) belonging to our=

deceased customer who died along

nt-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font=

-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-s=

pacing:normal;text-align:start;text-indent:0px;text-transform:none;white-sp=

ace:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decorati=

on-style:initial;text-decoration-color:initial">
,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:n=

ormal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:40=

0;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:non=

e;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);tex=

t-decoration-style:initial;text-decoration-color:initial;display:inline;flo=

at:none">with his entire family in a plane crash

gb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-st=

yle:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weig=

ht:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transfor=

m:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255=

);text-decoration-style:initial;text-decoration-color:initial">

"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small=

;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;f=

ont-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-=

transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255=

,255,255);text-decoration-style:initial;text-decoration-color:initial">
n style=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-=

size:small;font-style:normal;font-variant-ligatures:normal;font-variant-cap=

s:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent=

:0px;text-transform:none;white-space:normal;word-spacing:0px;background-col=

or:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:ini=

tial;display:inline;float:none">Hence; I am inviting you for a business dea=

l where this money can be

y:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-variant=

-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:n=

ormal;text-align:start;text-indent:0px;text-transform:none;white-space:norm=

al;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style=

:initial;text-decoration-color:initial">
font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;fo=

nt-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter=

-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-=

space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decora=

tion-style:initial;text-decoration-color:initial;display:inline;float:none"=

>shared between us in the ratio of 60/40 if you agree to my business=

t-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-c=

aps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-inde=

nt:0px;text-transform:none;white-space:normal;word-spacing:0px;background-c=

olor:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:i=

nitial">
-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font=

-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start=

;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;ba=

ckground-color:rgb(255,255,255);text-decoration-style:initial;text-decorati=

on-color:initial;display:inline;float:none">proposal. Further details of th=

e transfer will be forwarded to you as

4);font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal=

;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;let=

ter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;whi=

te-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-dec=

oration-style:initial;text-decoration-color:initial">
gb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-st=

yle:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weig=

ht:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transfor=

m:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255=

);text-decoration-style:initial;text-decoration-color:initial;display:inlin=

e;float:none">soon as I receive your return mail as soon as you receive thi=

s letter.

a,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:norma=

l;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align=

:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:=

0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-de=

coration-color:initial">

Helvetica,sans-serif;font-size:small;font-style:normal;font-variant-ligatur=

es:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;te=

xt-align:start;text-indent:0px;text-transform:none;white-space:normal;word-=

spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial=

;text-decoration-color:initial">
ily:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-varia=

nt-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing=

:normal;text-align:start;text-indent:0px;text-transform:none;white-space:no=

rmal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-sty=

le:initial;text-decoration-color:initial;display:inline;float:none">Please =

indicate your willingness by sending the below information for

yle=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size=

:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:no=

rmal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px=

;text-transform:none;white-space:normal;word-spacing:0px;background-color:r=

gb(255,255,255);text-decoration-style:initial;text-decoration-color:initial=

">
;font-size:small;font-style:normal;font-variant-ligatures:normal;font-varia=

nt-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-=

indent:0px;text-transform:none;white-space:normal;word-spacing:0px;backgrou=

nd-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-col=

or:initial;display:inline;float:none">more clarification and easy communica=

tion. For more details, Contact

-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-v=

ariant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spa=

cing:normal;text-align:start;text-indent:0px;text-transform:none;white-spac=

e:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration=

-style:initial;text-decoration-color:initial">
4,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:nor=

mal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;=

letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;=

white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-=

decoration-style:initial;text-decoration-color:initial;display:inline;float=

:none">me for more details.

ily:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-varia=

nt-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing=

:normal;text-align:start;text-indent:0px;text-transform:none;white-space:no=

rmal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-sty=

le:initial;text-decoration-color:initial">

font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;fo=

nt-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter=

-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-=

space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decora=

tion-style:initial;text-decoration-color:initial">
34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-style=

:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:=

400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:n=

one;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);t=

ext-decoration-style:initial;text-decoration-color:initial;display:inline;f=

loat:none">For the Expenses, I will be the one to take care of the expenses=

, if

s-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;fon=

t-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:star=

t;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;b=

ackground-color:rgb(255,255,255);text-decoration-style:initial;text-decorat=

ion-color:initial">
vetica,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:=

normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-=

align:start;text-indent:0px;text-transform:none;white-space:normal;word-spa=

cing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;te=

xt-decoration-color:initial;display:inline;float:none">the bank asks=

t-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-c=

aps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-inde=

nt:0px;text-transform:none;white-space:normal;word-spacing:0px;background-c=

olor:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:i=

nitial">
-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font=

-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start=

;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;ba=

ckground-color:rgb(255,255,255);text-decoration-style:initial;text-decorati=

on-color:initial;display:inline;float:none">you for any money, do not pay, =

inform me in time i will pay it.

t-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-=

variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-sp=

acing:normal;text-align:start;text-indent:0px;text-transform:none;white-spa=

ce:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoratio=

n-style:initial;text-decoration-color:initial">
34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:no=

rmal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400=

;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none=

;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text=

-decoration-style:initial;text-decoration-color:initial;display:inline;floa=

t:none">I will take care of =C2=A0expenses.

,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-style:n=

ormal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:40=

0;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:non=

e;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);tex=

t-decoration-style:initial;text-decoration-color:initial">

r:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font=

-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-w=

eight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-trans=

form:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,=

255);text-decoration-style:initial;text-decoration-color:initial">
le=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:=

small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:nor=

mal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;=

text-transform:none;white-space:normal;word-spacing:0px;background-color:rg=

b(255,255,255);text-decoration-style:initial;text-decoration-color:initial;=

display:inline;float:none">(1) YOUR FULL NAME...

gb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-st=

yle:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weig=

ht:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transfor=

m:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255=

);text-decoration-style:initial;text-decoration-color:initial">
=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:sm=

all;font-style:normal;font-variant-ligatures:normal;font-variant-caps:norma=

l;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;te=

xt-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(=

255,255,255);text-decoration-style:initial;text-decoration-color:initial;di=

splay:inline;float:none">(2) YOUR CONTACT ADDRESS....

lor:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;fo=

nt-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font=

-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-tra=

nsform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,25=

5,255);text-decoration-style:initial;text-decoration-color:initial">
tyle=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-siz=

e:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:n=

ormal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0p=

x;text-transform:none;white-space:normal;word-spacing:0px;background-color:=

rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initia=

l;display:inline;float:none">(3) YOUR PRIVATE PHONE N0..........

style=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-si=

ze:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:=

normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0=

px;text-transform:none;white-space:normal;word-spacing:0px;background-color=

:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initi=

al">
if;font-size:small;font-style:normal;font-variant-ligatures:normal;font-var=

iant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;tex=

t-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;backgr=

ound-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-c=

olor:initial;display:inline;float:none">(4) YOUR COUNTRY OF ORIGIN.........=

.........

a,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:norma=

l;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align=

:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:=

0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-de=

coration-color:initial">
l,Helvetica,sans-serif;font-size:small;font-style:normal;font-variant-ligat=

ures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;=

text-align:start;text-indent:0px;text-transform:none;white-space:normal;wor=

d-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initi=

al;text-decoration-color:initial;display:inline;float:none">(5) YOUR OCCUPA=

TION....................
ly:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-varian=

t-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:=

normal;text-align:start;text-indent:0px;text-transform:none;white-space:nor=

mal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-styl=

e:initial;text-decoration-color:initial;display:inline;float:none">.....
pan>

;font-size:small;font-style:normal;font-variant-ligatures:normal;font-varia=

nt-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-=

indent:0px;text-transform:none;white-space:normal;word-spacing:0px;backgrou=

nd-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-col=

or:initial">

ns-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;fo=

nt-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:sta=

rt;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;=

background-color:rgb(255,255,255);text-decoration-style:initial;text-decora=

tion-color:initial">
lvetica,sans-serif;font-size:small;font-style:normal;font-variant-ligatures=

:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text=

-align:start;text-indent:0px;text-transform:none;white-space:normal;word-sp=

acing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;t=

ext-decoration-color:initial;display:inline;float:none">Trusting to hear fr=

om you immediately.

l,Helvetica,sans-serif;font-size:small;font-style:normal;font-variant-ligat=

ures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;=

text-align:start;text-indent:0px;text-transform:none;white-space:normal;wor=

d-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initi=

al;text-decoration-color:initial">
amily:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-var=

iant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spaci=

ng:normal;text-align:start;text-indent:0px;text-transform:none;white-space:=

normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-s=

tyle:initial;text-decoration-color:initial;display:inline;float:none">Thank=

s & Best Regards,

ial,Helvetica,sans-serif;font-size:small;font-style:normal;font-variant-lig=

atures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:norma=

l;text-align:start;text-indent:0px;text-transform:none;white-space:normal;w=

ord-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:ini=

tial;text-decoration-color:initial">
-family:Arial,Helvetica,sans-serif;font-size:small;font-style:normal;font-v=

ariant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spa=

cing:normal;text-align:start;text-indent:0px;text-transform:none;white-spac=

e:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration=

-style:initial;text-decoration-color:initial;display:inline;float:none">Dr =

Rhama.

--000000000000a726ce05e7542281--

Posted by Dave Yadallee on Monday, August 29. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Aug 2022 05:25:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSXHM-000D7T-4O

for dave@doctor.nl2k.ab.ca;

Sun, 28 Aug 2022 23:25:44 -0600

Resent-From: The Doctor

Resent-Date: Sun, 28 Aug 2022 23:25:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f49.google.com ([209.85.218.49]:45671)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSV9i-0001RZ-61

for doctor@doctor.nl2k.ab.ca;

Sun, 28 Aug 2022 21:09:45 -0600

Received: by mail-ej1-f49.google.com with SMTP id lx1so13063639ejb.12

for ; Sun, 28 Aug 2022 20:09:25 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;

bh=9IBKKLgkfhER1wfKS3CqqCBd7PzkoxFQ7y7PLeB7PlI=;

b=YoATawWjhvJI7g3ouyz/CRbYO24XVDwIf+6T1iU2/cQ3kl46N7S/CUkBdQMLAA+tXz

K/xvVsv2wqbIzrUyMRo37zgmEuJOqeCpDi53ybamDYSjj0Gmo+gsb9zC4pCYnKXRxIJy

m/wTkHIqKXPEfw2VhE8JruX2RTBbnYvxksMEgQQqLotoIcY1aYR4wjVuArxNzKYZuqEW

EtGhiPmp3JQj5X5nnQL4wahAQhqd0dE0FIcvi+NV/jX1l72Nt2Oua3s8W1M8vRAQg9jN

WXjdp3mkDZYDxzOLdGDf2/EePSeQdu+qqu01VIshjNX55y6deodgInbAxst2hG2R1QzQ

HOfQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc;

bh=9IBKKLgkfhER1wfKS3CqqCBd7PzkoxFQ7y7PLeB7PlI=;

b=E9vVmDV+LDyxGenQMIxvU09MhjMF/iS+tDkS2swQIKuRaInm5fUil0nezwXHzkKfBY

1k7n7ejE/Noo9RKAzDYyDkksjMvAIdCCRuAt51zWG4UzH7OOW7qYcKrnI/vU9Q+bUUnx

ey/LqOToQ9QkxKZ3jatzX808u6xo18VbttTBiL4lceEC5a4AP9aDExQ/6jT2ORu5T7pc

T4y93GmcXelliu8gt1+ONvmbWDkTtCRHbk5G2YoMy7zYO/aCYDMiTjFNZTh6k5lv3AHk

aYq3C83jV/3Ch5HpC98SG+v75HizZ+2f/EBt6YoA6eeqGRP4wNXBkTur1llzbfiwTa49

DMAA==

X-Gm-Message-State: ACgBeo1V7yX/rIcFWmWJVKVYb1OawoQn5CcQ/0zl+8Dzn8pBdc70uRr4

Aoc1bSL65lZ3agezbCeetf+StqVBaE1P6KKqK9g=

X-Google-Smtp-Source: AA6agR4OxazLTN2h0/13IRjnuB5IUylSTggwWLbbqBtE8EhWmiMXA65u8HaXtzFlR8cePX3u6ZTwdKEZ2OXBSTScsts=

X-Received: by 2002:a17:907:608b:b0:731:8a9d:5a2d with SMTP id

ht11-20020a170907608b00b007318a9d5a2dmr12037934ejc.443.1661742558681; Sun, 28

Aug 2022 20:09:18 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a17:906:b04:b0:73d:fcdd:ecdd with HTTP; Sun, 28 Aug 2022

20:09:17 -0700 (PDT)

Reply-To: mrsaifemohammed2018@outlook.fr

From: Mr Saife Mohammed

Date: Mon, 29 Aug 2022 03:09:17 +0000

Message-ID:

Subject: VERY URGENT

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 24.0

X-Spam_score_int: 240

X-Spam_bar: ++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dear Friend, How are you today?. Please, I would like you

to give an urgent attention to this proposal. I have a very lucrative business

transaction which requires your utmost discretion. Though, I know it would

c [...]

Content analysis details: (24.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.218.49 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[mrezekieljeremiah21[at]gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[mrezekieljeremiah21[at]gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[mrsaifemohammed2018[at]outlook.fr]

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.0 SPF_PASS SPF: sender matches SPF record

0.9 URG_BIZ BODY: Contains urgent matter

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

2.6 HK_SCAM_N13 BODY: No description available.

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 T_MONEY_PERCENT X% of a lot of money for you

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal

information

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

Subject: {SPAM?} VERY URGENT

Dear Friend,

How are you today?. Please, I would like you to give an urgent

attention to this proposal.

I have a very lucrative business transaction which requires your

utmost discretion.

Though, I know it would come to you at uttermost surprise. I am Mr.

Saife Mohammed, A banker by profession.

Please, I want to transfer the sum of ($15.5M) dollars into your bank

account. This business is 100% risk free.

Your share will be 40% while 60% for me.

Full details will be send to you on the receipt of your urgent

response by forwarding the following details bellow:

Here is my private E-mail Address: (mrsaifemohammed2018@outlook.fr)

1. Your Full Name................

2. Your Telephone No..........

3. Your Receiving Country................

4. Your Home Address........

Thanks.

Mr. Saife Mohammed,

Posted by Dave Yadallee on Monday, August 29. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Aug 2022 01:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSXH0-000D5t-MO

for dave@doctor.nl2k.ab.ca;

Sun, 28 Aug 2022 23:25:22 -0600

Resent-From: The Doctor

Resent-Date: Sun, 28 Aug 2022 23:25:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-sgaapc01rlhn2140.outbound.protection.outlook.com ([40.95.54.140]:26255 helo=APC01-SG2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSTtJ-000K83-MV

for root@nl2k.ab.ca;

Sun, 28 Aug 2022 19:48:48 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=LwGYqRQHkUFIhwcmiQdywkMCIv/rszmAb5ORMB2LZ0PRBAAbeEJjPSTEhkoeDOX4SIpT4MNB37aPxhWk5EBT+IZ/sN3u2r7Ds5z+8KBo5PIvkoEMQ/umNa+HKtfhgwTJS9FgF8mG3xOuLaqnZgCKgJJ2HrLc5rijNE5nyUbj5ovrNQfxdcvPvMwyYJdZjCF8z+MVEx004Y7eIUZ+//D5N/+WHMMaPTljHQxHilbq01RSHod7cQsyKnERLBT8JdMppZP1eslnwRDHH50JVbf1BkohPEglAs1KwFr/14gnsZrJgVi7rrEfJt9ntbPcHUeRD/CFNmlP2O3e5Tik2y2Nkg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=g2v0lH7IlDiqRi0zRrz2XoYkrDxMr5/d+iWsUIghS+A=;

b=WpaoU6BWGphwbIRafHTxmvarYDQ5faF4zo9ZjgUf5zEPgqOVPhp6nXc3/FmaPrhjn86SSfNW6JjSVR/r+/UphIl7PadLEoqcdJjvat5UsfxoIfIGm0XRPKm8A55g/ayhoIEcuhvkHINCSPdLrwngciXmfRX6m3pJoiuTvceUnqVA8XlJCOw1oFSzREiIF3eNIF2NcpZ3ktHX4eSZVs4pCsh24Zp8dMpfmCrTRNx0g0wd6CNPVMje1WySjY5RdmWCht1UiALRHfqfLF7toeFn2T0zRz0PqZHvFT+V/O4XiagSC0pOMcmd9E5tbw2cSDXXckpfe7FwTO2hOR/hjBWXTg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

203.189.69.107) smtp.rcpttodomain=hullnissan.com smtp.mailfrom=acens.com;

dmarc=fail (p=none sp=none pct=100) action=none header.from=acens.com;

dkim=none (message not signed); arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=hemascol.onmicrosoft.com; s=selector2-hemascol-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=g2v0lH7IlDiqRi0zRrz2XoYkrDxMr5/d+iWsUIghS+A=;

b=qoOFMY5TWvn1u914TGo8cDvzBMg3I7pjIYUhL5wGivqvPa1i/35xDmvDC/YC8GEXo4OFClndzfIOqadOmIrx3N4RZD0R/gni3z45BXyPhT15aLXLFP2ZshqrDlDgYNH8Ye2n8ML587zvrOS2O9qkTHoA1isA1Mhg4Bbx6c+JJ10=

Received: from TYWPR01CA0045.jpnprd01.prod.outlook.com (2603:1096:400:17f::15)

by SG2PR06MB2219.apcprd06.prod.outlook.com (2603:1096:4:c::11) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.5566.15; Mon, 29 Aug 2022 01:48:15 +0000

Received: from TYZAPC01FT021.eop-APC01.prod.protection.outlook.com

(2603:1096:400:17f:cafe::b5) by TYWPR01CA0045.outlook.office365.com

(2603:1096:400:17f::15) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5566.15 via Frontend

Transport; Mon, 29 Aug 2022 01:48:14 +0000

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 203.189.69.107)

smtp.mailfrom=acens.com; dkim=none (message not signed)

header.d=none;dmarc=fail action=none header.from=acens.com;

Received-SPF: Fail (protection.outlook.com: domain of acens.com does not

designate 203.189.69.107 as permitted sender)

receiver=protection.outlook.com; client-ip=203.189.69.107;

helo=mail.atlas.lk;

Received: from mail.atlas.lk (203.189.69.107) by

TYZAPC01FT021.mail.protection.outlook.com (10.118.152.130) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id

15.20.5566.15 via Frontend Transport; Mon, 29 Aug 2022 01:48:14 +0000

Received: from cpcex01.cpc.local (192.168.13.16) by cpcex01.cpc.local

(192.168.13.16) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Mon, 29 Aug

2022 05:35:43 +0530

Received: from User (2.56.58.78) by cpcex01.cpc.local (192.168.13.16) with

Microsoft SMTP Server id 15.0.1473.3 via Frontend Transport; Mon, 29 Aug 2022

05:35:33 +0530

Reply-To:

From: Mrs.Juan Henry

Subject: Attention: Beneficiary

Date: Sun, 28 Aug 2022 17:06:08 -0700

MIME-Version: 1.0

Content-Type: text/plain; charset="Windows-1251"

Content-Transfer-Encoding: quoted-printable

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID: <2bd8768a72c649e2b17157e244655ac4@cpcex01.cpc.local>

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-Office365-Filtering-Correlation-Id: 809e56e6-e952-4042-bff4-08da896089b4

X-MS-TrafficTypeDiagnostic: SG2PR06MB2219:EE_

X-Hemas-MessageTracker: #G01

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 1

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?windows-1251?Q?/dtgMiAMlQjT0wMjw0iOdtWXlKPUAWR7KyfTtDMCUkQVQoQQs/GLISh4?=

=?windows-1251?Q?Sy7rjQL4mS2wVHpOAErEr+GdyVPebnEdq9yjBjkNP3xitGKmFx0oxU5c?=

=?windows-1251?Q?y4DhffyQi9zy0p1/Q6AgX6A37HRox45SyPUXa+3gg2ljQ4+xrifLhn0V?=

=?windows-1251?Q?ZxTtGr/avPY8TnDDEDp+ZcowMi9XbhILvIw2xFRCXZo8Op8laiPfGjwY?=

=?windows-1251?Q?QmExzY9R3g4PN6yYKckaH+ORGyVAxTNt0MiwW8HVA60ucKXtJFvMQ2IU?=

=?windows-1251?Q?SXWjVo3nHMpi7M9jrOHph8Fw82sEW432szb41dgZh8cmzKz6FQbY2Opg?=

=?windows-1251?Q?WuCE6lcA4NfhcL9yGXAIbHgUgHT1OeGoi/zoQh4LSUqpj5kMwVCuLEZh?=

=?windows-1251?Q?Xev7JHDtkJahfFCAaAkBmAabcXrhTC4wXGQ+R1tyQCtUi5HqJrSKLZt2?=

=?windows-1251?Q?H30XZbNtqztW+qq/ynVTnfa5OkklsL/tSLNDF5Ht1OKO5zXi01GE20sv?=

=?windows-1251?Q?jb67MlOrSV8qBkh788HciFu33JBzBkf6neCkyMck05gyuDRZGp4HrLSO?=

=?windows-1251?Q?uXMOh6XlPoN8SnLtAN+oeYL1VpfTjRda+Lo0OSAlIPIDAbJRbZHu6ETr?=

=?windows-1251?Q?avyi2lX6x781GnBc8ou95MMsEiMGvvyB9PSlkWCqdqe4OzalopbT3sNy?=

=?windows-1251?Q?ZFoS//MdqUNk/cNkjgk8I8CtYDqOSvGEbFwu4Se9rDzGLToMCc2689SB?=

=?windows-1251?Q?ogaJdy0ke8J67QTm4EsMQo6SGqFe/17XT8w2H6dT4rFV3oWAv/KL9orv?=

=?windows-1251?Q?MQ1tkPXRttmnHsjVcbrxNDd5R+1XetlEvNGEIgGrMcZt/b2KHFPYmOLn?=

=?windows-1251?Q?gxQr0wgsbL8l8CbRt13026zt6QcdEe4wB0S2Xwi9JW+uej7yvXLF9bsE?=

=?windows-1251?Q?TZdCU2f4/jLajL1T/78yaKBlOWyaezeAz2LFK4bKXEI/ngBjhFT3vGJB?=

=?windows-1251?Q?hhsGOvbNujQwhIb00ZDkOCTX+r8v2fok94PgYm63huuEfdnoWClW6jIk?=

=?windows-1251?Q?ydvKIUl22VFnXC6+VKEyY/bOMFdScxi08OEG4487Cko/aKwe84/OzqgM?=

=?windows-1251?Q?eAB7eD7H1EHkXpev2cOu8nHSm+ElwHy8U84uKsEkfGs7OFxnlEh9ugXV?=

=?windows-1251?Q?H7q915Resb2sg9eAq1gBxMv5ddb+gI9ZYxYFrE4lB+BqEqcdQMP0c9BX?=

=?windows-1251?Q?IgTQbIHz+4a6HJg4KVhyXq/IF5dZAwAZ03Y5MMY8?=

X-Forefront-Antispam-Report:

CIP:203.189.69.107;CTRY:LK;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail.atlas.lk;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230016)(136003)(346002)(396003)(376002)(39860400002)(40470700004)(82740400003)(70586007)(70206006)(8676002)(356005)(86362001)(81166007)(32650700002)(66574015)(109986005)(83380400001)(9686003)(35950700001)(108616005)(24736004)(26005)(41300700001)(498600001)(7366002)(316002)(82310400005)(336012)(2860700004)(40460700003)(40480700001)(6666004)(2906002)(956004)(7406005)(5660300002)(7416002)(8936002)(362954009);DIR:OUT;SFP:1023;

X-OriginatorOrg: hemascol.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Aug 2022 01:48:14.2943

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 809e56e6-e952-4042-bff4-08da896089b4

X-MS-Exchange-CrossTenant-Id: 0b2ad702-c4fe-4319-a94f-4c01f321d5e7

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=0b2ad702-c4fe-4319-a94f-4c01f321d5e7;Ip=[203.189.69.107];Helo=[mail.atlas.lk]

X-MS-Exchange-CrossTenant-AuthSource:

TYZAPC01FT021.eop-APC01.prod.protection.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SG2PR06MB2219

X-Spam_score: 24.6

X-Spam_score_int: 246

X-Spam_bar: ++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: ATTENTION: This email came from an external source. Do not

open attachments or click on links from unknown senders or unexpected emails.

Attention: Beneficiary We are not sure you received our previous message

but we wish to us this medium to officially inform you that following the

ongoing review of all unclaimed and delayed funds by the United Nations and

[...]

Content analysis details: (24.6 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.0 NSL_RCVD_FROM_USER Received from User

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[40.95.54.140 listed in psbl.surriel.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[jjjuan429[at]gmail.com]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=info%40acens.com;ip=40.95.54.140;r=doctor.nl2k.ab.ca]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=APC01-SG2-obe.outbound.protection.outlook.com;ip=40.95.54.140;r=doctor.nl2k.ab.ca]

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 PDS_HELO_SPF_FAIL High profile HELO that fails SPF

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 HK_NAME_MR_MRS No description available.

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 XFER_LOTSA_MONEY Transfer a lot of money

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

Subject: {SPAM?} Attention: Beneficiary

ATTENTION: This email came from an external source. Do not open attachments=

or click on links from unknown senders or unexpected emails.

Attention: Beneficiary

We are not sure you received our previous message but we wish to us this me=

dium to officially inform you that following the ongoing review of all uncl=

aimed and delayed funds by the United Nations and the World Bank, your paym=

ent file was forwarded to our office for immediate payment of your long del=

ayed funds starting with a first transfer of US$10,000,000.00 with referenc=

e No. NG/FM14FGN, to your bank account.

However, we are surprised to receive another application this morning from =

your representative, MR.KRAUS MULLER,stating that you authorized him to tra=

nsfer the funds to another bank account in Germany and that you were recent=

ly involved in an auto accident and cannot walk right now.

Could you please confirm immediately, your relationship with MR.KRAUS MULLE=

R and also, confirm if the bank account in Germany as shown below is now yo=

ur new bank account information to receive your funds this week from our pa=

ying bank

ACCOUNT NO: 098-11180933-109

IBAN: CH55 0910 3045 6011 91110 0

SWIFT CODE: AREZCHZZ8OU

Kindly get in touch with us today by email with your telephone number to co=

nfirm this information to avoid wrong transfer of your funds, so that we ca=

n proceed with the transfer of the US$10,000,000.00 to your correct bank ac=

count as scheduled.

Yours sincerely,

MRS.JUAN HENRY

Director,Anti-Fraud Unit.

Financial Services Regulation Committee

Plot 33,ATB Way Cadastral Zone,Abuja,NG

________________________________

CONFIDENTIALITY

This message contains confidential information and is intended only for the=

individual named herein. Any attachment transmitted with this email is con=

fidential and intended solely for the use of the individual or entity to wh=

om this email is addressed. If you are not the named addressee you should n=

ot disseminate, distribute or copy this e-mail. Please notify the sender im=

mediately by e-mail if you have received this e-mail by mistake and delete =

this e-mail from your system or please notify the system manager. If you ar=

e not the intended recipient you are hereby notified that disclosing, copyi=

ng, distributing or taking any action in reliance on the contents of this i=

nformation is strictly prohibited and in the event of any unauthorized disc=

losure, copying and/or distribution of the contents the generating entity a=

nd/or the sender reserves the right to take any action against such unautho=

rized use in law, equity or otherwise.

The recipient should check this email and any attachments for the presence =

of viruses. The sender accepts no liability for any damage caused by any vi=

rus transmitted by this email, delays, data corruption, unauthorized access=

or unauthorized amendments.

________________________________

Posted by Dave Yadallee on Monday, August 29. 2022

All data is from Netcraft Toolbar . Looks as if there are major changes to the Netcraft algorithm!

Netknow now 487 from ranks 483 at Netcraft .

We are now redirecting all traffic to Secured general server which now 483 from ranks 531 and pfs compliant .

A significant increase! We must do

security audits regularly
check on illegitimate traffic hitting the web server
keep design current!

Some of our others domains and services ranks as follows:

NetKnow Secure Server

ranks >2000000 from >2000000 Netcraft and pfs compliant .

NetKnow's secondary server

ranks at >2000000 from >2000000 last week on Netcraft and Secured secondary server using the wildcard certificate is at 1024 from 997 .

NetKnow's Anonynous FTP server

and non-anonymous must be set to client ports higher than 42000.

www.nl2k.ab.ca

ranks >2000000 from >2000000 on Netcraft.

internetedmonton.ca

ranks at >2000000 from >2000000.

edmontoninternetserviceprovider.ca

is at >2000000 from >2000000 .

edmontonab.ca

ranks > 2000000 from >2000000

How do we compare with other providers in

Edmonton, Alberta, Canada?

We at Netknow are 487 from 774 since the middle of May 2022.

Rogers Business Solutions

which rank 7082 from 7174 and are hosted in Europe.

Next we have Telus.com

ranked by Netcraft at 9952 from 9784 .

Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business

is ranked by Netcraft at >2000000 from >2000000 .

Is Telus's ADSL network susceptible to Code Red Attacks and Attackers?

Reviews of Telus are available :

NCIX FORUMS

DSL Reports

The Government of Alberta Website

ranks 17217 from 17499 by Netcraft and seems to hosted on Cloudfare.

We have Juno Internet ranked on top

at https://www.juno.com/ 38697 from 39467 who are the owners of

US Based Netzero at Netcraft Rank 67170 from 64240 .

The University of Alberta ranks 38855 from 38855 hosted by Amazon Techonologies.

Next,

members.shaw.ca

ranks 1047055 from 1049171 and retired and

Shaw Cable

is next at Netcraft rank 58707 from 61694 . Hosted now by Akamei .

Their Network Hosting Arm,

Big Pipe is at

Netcraft rank 324345 from 334623 and hosted by Akamai in Europe .

Reviews of Shaw are available :

Rate It All

Review Stream

Review Stream Number 2

DSL reports

NAIT ranks 66892 from 67901 hosted by Microsoft .

xplornet

ranks 90487 from 93093 and are listed with

Stentor and are joining up with Shaw.

According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy.

The City of Edmonton ranks 99816 from 100022 by Netcraft and hosted by Google.

TekSavvy ranks 162463 from 154006 and are hosted by Microsoft

Primus

ranks 251013 from 251483 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.

Internet Centre

rank 284646 from 285299 . Their partner Rack Nine ranks > 2000000.

Cybersurf

is ranked 375683 from 389798 and seems to be hosted in USA by Microsoft.

MacEwan

ranks 388229 from 375780 .

Radiant Communications

are ranked by Netcraft >2000000 from >2000000 and part of goco.ca

which ranks 594291 from 636821 .

MCSNET ranks 1344728 from 1342978 and are hosted by Microsoft .

After that we have

Nucleus Information Services which can be found at Netcraft Rank >2000000 from >2000000 .

Next is Tera-Byte

at Netcraft Rank >2000000 from >2000000 with

Tera-Byte.ca

ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless

sold to Xplornet.

One of Tera-Byte's acquisitions

Edmonton Community Networks

ranks at >2000000 from >2000000 and

Go Edmonton ranks >2000000 from >2000000.

Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!

Reviews of Tera-byte is available at

here

and another here

and check Google for more reviews; just search tera byte.

4web ranks >2000000 from >2000000 .

Alentus

rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA .

wolfpaw.net

which ranks at >2000000 from >2000000

Wiband Wireless

is dead

Yellowpencil Ranks >2000000 from >2000000

Next is WSI - We Simply The Internet of Toronto

at Netcraft Position >2000000 from >2000000 and are being hosted on Amazon.

Next, Uniserve

ranks on Netcraft >2000000 from >2000000

One of their acquisitions

interbaun

ranks with Netcraft ?????? from ?????? due to merging of sites.

One customer just came over from this organization in Nov 2006.

Clearwave Broadband ranks

at >2000000 from >2000000

Emergence by Design

now ranks >2000000 from >2000000.

Platinum Communications Corp.

bought out by Xplornet .

Wild Rose Internet

ranks >2000000 from >2000000 and I wonder if this is another wireless branch of Tera-Byte and bought out by Xplornet

TIC Internet

ranks >2000000 from >2000000 ( I do remember you).

Nisa Custom Internet Solutions

ranks >2000000 from >2000000 by Netcraft

Media Shakers of Edmonton

ranks >2000000 from >2000000

Koi Media

rank >2000000 from >2000000

Webfire.ca

ranks >2000000 from >2000000 and seems to be connected with Shaw.

Core Network Solutions Inc.

ranks at >2000000 from >2000000 .

The Network Centre

ranks >2000000 from >2000000 and are linked with Telus high Speed.

Open Concept Internet, Inc.

rank > 2000000 from > 2000000

Interspots of Edmonton

rank > 2000000 from > 2000000 hosted by Stentor and acquired by Techalta ;

Yegtel rank > 2000000 .

Internet Crossroads Ltd of North Edmonton

rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca .

If I remember anymore, I will add to this entry, before Netcraft changes our ranking. Please watch this space and please feel free to peruse

our services.

Posted by Dave Yadallee on Sunday, August 28. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 28 Aug 2022 06:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSGK4-000DuC-3x

for dave@doctor.nl2k.ab.ca;

Sun, 28 Aug 2022 05:19:24 -0600

Resent-From: The Doctor

Resent-Date: Sun, 28 Aug 2022 05:19:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f196.google.com ([209.85.215.196]:46734)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSDwE-0008dN-Vb

for doctor@nl2k.ab.ca;

Sun, 28 Aug 2022 02:46:44 -0600

Received: by mail-pg1-f196.google.com with SMTP id 69so3529823pgb.13

for ; Sun, 28 Aug 2022 01:46:18 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;

bh=zFNPgCQQuPirtCid6JZ9SsJxmL/jY5vx7kry258o1GM=;

b=dUxmaZLSkerlN4q0zYhtvvoYWPQRhgM76HmoJ6sKDfxyk1Vn+WkcDaLhmgHpHLBGMQ

x/XXKbI7Gkaybn4l3T23LSZrSeMaMJKJUSu8u8jzzW60N7V7+AzB03gyBRM0c2FDVYNF

m+D+hdz/iBdcS/wTHSpHaBFkpoxlhvnbBkGSARZNng0+AVvuifchxfgzZ4qwSv34JMOn

5rWI/HVG9W6k8n68P+MCS0QzKYhThmv9EhnGAs4WGJo8NgTDOA8xHfeaEEjX1JCaqQ5u

w8seG86atGHl692H1fuhtZjIu/NqONzV6GUaufmnQTlGv3u/JjGnrsebbUGtFOdhvMWG

HdyA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc;

bh=zFNPgCQQuPirtCid6JZ9SsJxmL/jY5vx7kry258o1GM=;

b=WJL1cS6+8PHtDqRI7OgWTh1czLLKlqdfxqdo4kuzezbieEYVhv5/ZFDM/X+cQd9WTq

Srs0o9dnLrQdrBMyCq3XU2QOfUeGfjUk7s5ZtOOtusz1ucbUi0pqKwR8Ad9OchMSgoUD

VqGPbm3UW1usll8X36Uzor/wYgdVHHGRbeMG54uLdsWNyRfxJ3lLTCIuYy0xAWM2qQlI

ddkN3q81+oUWzLiOcxdDPp6Nicl9Np3H3fs24vv8UGE/ixD56BHoa0RPvalu88jroTOL

VXpsg/e3U7dGH545SZFk2iclYXbQ793wUe/9raefQuUmCp8Dfoq7kQ0Hgt4d3SNH7qic

fUPw==

X-Gm-Message-State: ACgBeo3RUxDTLRJ3vmAZRoORvM6Ddp7VXPGhBUkQv0NtBde5YFbi8qn7

yGWA2ZmAnkUZe/m75/lYBb53rSFa3XMtylaNZKU=

X-Google-Smtp-Source: AA6agR7unJYV6/IgeldBfT7fZMiy5yEPnadZuvHu6mRCddCivesp+NDYL6rdsJN+GuZvUj8eBQ+i1KtYRwWduduwlt8=

X-Received: by 2002:a63:2582:0:b0:42b:aacc:807f with SMTP id

l124-20020a632582000000b0042baacc807fmr3874362pgl.120.1661676373040; Sun, 28

Aug 2022 01:46:13 -0700 (PDT)

MIME-Version: 1.0

Reply-To: katebaronlawsfirm@gmail.com

From: KATE BARON

Date: Sun, 28 Aug 2022 09:27:04 +0100

Message-ID:

Subject: PLEASE I NEED YOUR URGENT RESPONSE

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000f2672605e7492d8c"

Bcc: doctor@nl2k.ab.ca

X-Spam_score: 22.9

X-Spam_score_int: 229

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello Dear, I am Kate Baron, the personal attorney to Robert

Fitzpatrick, an American who was a consultant with Shell UK LTD here in London,

who shall be referred to as my client. Unfortunately my client lost his [...]

Content analysis details: (22.9 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.215.196 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[nailatuabdul6[at]gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[nailatuabdul6[at]gmail.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.0 SPF_PASS SPF: sender matches SPF record

3.6 NA_DOLLARS BODY: Talks about a million North American dollars

0.9 URG_BIZ BODY: Contains urgent matter

2.5 HK_SCAM_N2 BODY: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 HK_SCAM No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

1.0 MONEY_BARRISTER Lots of money from a UK lawyer

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 T_MONEY_PERCENT X% of a lot of money for you

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} PLEASE I NEED YOUR URGENT RESPONSE

--000000000000f2672605e7492d8c

Content-Type: text/plain; charset="UTF-8"

Hello Dear,

I am Kate Baron, the personal attorney to Robert Fitzpatrick, an American

who was a consultant with Shell UK LTD here in London, who shall be

referred to as my client. Unfortunately my client lost his life on Boeing

Egypt Air Flight 990, which crashed into the Atlantic Ocean on October

31st, 1999 and left no clear beneficiary as Next of Kin except some vital

documents related to the deposit still with me.

All efforts by me to trace his Next of Kin proved abortive because he did

not make any will prior to his death. Since then I have made several

inquiries to locate any of my late clients' extended relatives and this has

proved unsuccessful. After my several unsuccessful attempts to locate any

member of his family hence I contacted you.

I am contacting you to assist in claiming the money left behind by my

client before they get confiscated or declared unclaimed by the security

company where this huge sum was deposited. Particularly, the finance

company where the deceased had the said fund valued at USD 11 Million

dollars has issued me a notice to provide the next of kin.

Consequent upon this, my idea is that we can have a deal/agreement and I am

going to do this legally with your name as the bonafide beneficiary of the

amount in question as I have all legal document to back our claim, I seek

your consent to present you as the next of kin to the deceased so that the

proceeds of this account valued at $11 Million US dollars can be paid to

your account abroad. Note that 40% of this money will be for you, in

respect to the provision of a foreign account and 50% for me, 10% will be

used for the reimbursement of any expenditure we may incur in the cause of

the transaction.

I guarantee that this will be executed under a legitimate arrangement that

will protect you from any breach of the law, all I need from you is your

utmost collaboration and sincerity for us to thrive in this deal. Please

get back to me if you are ready to assist me.

Barr. Kate Baron.

--000000000000f2672605e7492d8c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Hello Dear,

I am Kate Baron, the personal attorney =

to Robert Fitzpatrick, an American who was a consultant with Shell UK LTD h=

ere in London, who shall be referred to as my client. Unfortunately my clie=

nt lost his life on Boeing Egypt Air Flight 990, which crashed into the Atl=

antic Ocean on October 31st, 1999 and left no clear beneficiary as Next of =

Kin except some vital documents related to the deposit still with me.

r>All efforts by me to trace his Next of Kin proved abortive because he did=

not make any will prior to his death. Since then I have made several inqui=

ries to locate any of my late clients' extended relatives and this has =

proved unsuccessful. After my several unsuccessful attempts to locate any m=

ember of his family hence I contacted you.

I am contacting you to as=

sist in claiming the money left behind by my client before they get confisc=

ated or declared unclaimed by the security company where this huge sum was =

deposited. Particularly, the finance company where the deceased had the sai=

d fund valued at USD 11 Million dollars has issued me a notice to provide t=

he next of kin.

Consequent upon this, my idea is that we can have a =

deal/agreement and I am going to do this legally with your name as the bona=

fide beneficiary of the amount in question as I have all legal document to =

back our claim, I seek your consent to present you as the next of kin to th=

e deceased so that the proceeds of this account valued at $11 Million US do=

llars can be paid to your account abroad. Note that 40% of this money will =

be for you, in respect to the provision of a foreign account and 50% for me=

, 10% will be used for the reimbursement of any expenditure we may incur in=

the cause of the transaction.

I guarantee that this will be execute=

d under a legitimate arrangement that will protect you from any breach of t=

he law, all I need from you is your utmost collaboration and sincerity for =

us to thrive in this deal. Please get back to me if you are ready to assist=

me.

Barr. Kate Baron.

--000000000000f2672605e7492d8c--

Posted by Dave Yadallee on Sunday, August 28. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 28 Aug 2022 05:20:02 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oSGEd-000DRT-Nz

for dave@doctor.nl2k.ab.ca;

Sun, 28 Aug 2022 05:13:47 -0600

Resent-From: The Doctor

Resent-Date: Sun, 28 Aug 2022 05:13:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-tycjpn01olkn2047.outbound.protection.outlook.com ([40.92.99.47]:56130 helo=JPN01-TYC-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oS70s-0005rh-3r

for doctor@nl2k.ab.ca;

Sat, 27 Aug 2022 19:23:02 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=jZMJB1mF5rNMObbt1H/LQr6w03vKTFJRgi7qwxZqiTWH4+Fp9rWCyrE0gSBiE5mGm4n91lThSHtBVtFHzZf3Ym0bmL6+VHcDUY3OUjTlCv7sI3ZtpmZLuqLJnZLzxHxyzbbtIrV7/Eu1kQPXyxQVDgPP76G6QVzUOvvqX2bVHWKCcx/ZsHrkeeRzAyTvPVIKjWqEkvFQHXJFREAeVM5EHodpb4Z1ZUdxZzjJo9JErK5EKQBdhwtK5klp0oWcOw3jCi2qy2NIzYd6alf8BgYV0JygAL/wZVcGjNxeodCRWhoTxEZMh76SIRD5KxKpdDaWsridwMG6dSXVO3wZ2XIgYQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=P0Nuyh4WRS74j52b8qkENLRhi4Bf89YVmrnI4JURLU8=;

b=BPtwgdaXQM63lcchwD36ncC6UyLcu9Br+Ngx+G57oBHBqb/jM1LPPLc3cSsuN1tT/wBXtSh+SMiBNc5yK+Akfd5xNvOx3oj96sw7FT1qJR9N6cZ+DjzJEzHsxGr34iptNCLALYBCIwFTYF6XMU+F6qBHvLfr/VR6PTQbj7s+vgMjDFKq96++Dya7E2bK1oNum1TsoRaVW1TzjwYAzbDno8CQiBlYoLR/HujHG7xkKvgjLaBM1dctGDni6o8ziGbZfRgP/rODZsTL08l003rxJk51Xbtk3OlZmr21zWeSr1IXoUeTx3sipgPUgXjyX3J9ejPC5UPBKUEtSW+ZHXa4/Q==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=P0Nuyh4WRS74j52b8qkENLRhi4Bf89YVmrnI4JURLU8=;

b=nvCwMKCW7uNMlAQxRf4qqre9lwBgiQd6XMMyvVwOYaJknwM8QWXn3scbXI9iXXIrbl13DzPwiWyLj0Y0ZMaTxxoYL8nnrYFPP2s9lK+20sb5PiI0qBzyNZosUMIXiSu1I1TDENuKMaqVUQkD52VAEHBswMVGDZGHQjv4R9rDHkqvbiYhlAGDq2CLHbaOarUux8VBXCzPaL+B/K1aZJyqXKqgQPLPZFXsBkmkufheTC1p9aLTloSq7Ta7dkpkp9+rjX6NhkieGtcnJ12tzpFn/4w9NjH2vmKW0j6yQaFti8AxgvtAAjUqZKqoF1qoGlFQZMCuruKV7SZlAg0V1wyTzg==

Received: from OS3P286MB1096.JPNP286.PROD.OUTLOOK.COM (2603:1096:604:126::13)

by OSZP286MB1535.JPNP286.PROD.OUTLOOK.COM (2603:1096:604:1b3::14) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5566.15; Sun, 28 Aug

2022 01:22:11 +0000

Received: from OS3P286MB1096.JPNP286.PROD.OUTLOOK.COM

([fe80::a0d8:a92b:3fd3:716e]) by OS3P286MB1096.JPNP286.PROD.OUTLOOK.COM

([fe80::a0d8:a92b:3fd3:716e%9]) with mapi id 15.20.5566.019; Sun, 28 Aug 2022

01:22:11 +0000

From: top top

Subject: Connector Sales,

Thread-Topic: Connector Sales,

Thread-Index: AQHYunyZIye1YNJVA0OTzBTET16tFg==

Date: Sun, 28 Aug 2022 01:22:11 +0000

Message-ID:

Accept-Language: zh-CN, en-US

Content-Language: zh-CN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [9ZgP2dmm5964g3Rj+akUVGqmhkHDvC3T]

x-ms-publictraffictype: Email

x-ms-office365-filtering-correlation-id: 514883ed-288d-44b6-8189-08da8893bb84

x-ms-traffictypediagnostic: OSZP286MB1535:EE_

x-microsoft-antispam: BCL:0;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?gb2312?B?cW1KOEc0dkRUaDhlZlZSamFaMDdzOHdnSlNPUFRvVHY1eUZHU0toVjZKbWZK?=

=?gb2312?B?WTIyVDc0NnZObWI2Mnl2azczN0FEZFVlZmcvZXF1dUtoK1VPbWtsUGdHWnJ4?=

=?gb2312?B?RFhad0paRWo5M1g1YmFoelBTZU40RWprR0ZxbWlZYTI3eklaRlZqVjJQdFBw?=

=?gb2312?B?UC9EeCsvenVod0pTS1hzT2RVVWFrd3hLRnRaK0RmcVVid3Z6ZkxIZ3B4c2JN?=

=?gb2312?B?YWF1eUpCaVZxRmthVmMzRVMzOURDVExZaVYrOWVBWU43dlBIdEwzekRuaGV4?=

=?gb2312?B?VndFd3lyc04xcXlVdDNJSFlMZldaSkw3aXh1WUhIQVRWVkhjTWVkb2JRMzlU?=

=?gb2312?B?c3RiM0VtR2Jhc1F2MnJBeDJSeUpIeVUrUkhaeWUxeVBVbjgrUEVOVUtXRkZv?=

=?gb2312?B?N3M5L0tzK1NnZXBTamYwSE5MQ1B4b1dGUmI1MktFMW82L1p5azJpSWpDT25n?=

=?gb2312?B?cEx4OXNnVStzS1V1NmtYSmplZ0RoblBCLzZRc0lNQlpxOExjVFlTcUZRWUNF?=

=?gb2312?B?S3lEeTFsZ08wWER1bXcxNU1qaTJCaTFNbWZ2aVFndGw3MU9id21iN0NRVTRz?=

=?gb2312?B?RmwyTG40KytSK3h0bElIVDlpaVcwY2VJVExXOEl6a0svSy9GZC9Da3BoV0dP?=

=?gb2312?B?N3NCWmZPc0RDRXJrOTU3OC9zSnJJT3JDVThKTmMwcU02RXd1OFNLQ2IvSGUv?=

=?gb2312?B?bFl2TGM5U0R1L1ZCWjZKK3lUNDhsMDdhM3BLc0FEZk9HeXhWZ2ZRS05SdVdJ?=

=?gb2312?B?SmN0KzR4TkVtbTVuUXF4ZU1EK3V2eFhzRGFGbmE5T01UVFh3cWF1cW8xWjhh?=

=?gb2312?B?dXhVUjFVUU44a0JQajRpaEc0MHhWbHcvWW5TeFUxcGpjbTVneUtUMWJjRE5T?=

=?gb2312?B?YmcwWXBtaHVBaU0zSE84WDl6UDdvL2ZsNTE0T1NDang4UENjbnB6Qmg3OXFU?=

=?gb2312?B?anVTRGNnRFJ6a0lHL3lGSlRBc29lTGUwdi9wNHNBRDdsbFlYRU02azVyTHdi?=

=?gb2312?B?Nk9mWGJFbHdQL2hCc0c5Ylk3UW4wZ0FQMFRGaXNvalVnbVZIa3Q0K1pPc3Vt?=

=?gb2312?B?Y3g3ZXgydDFCRXdrL1ZuSTFaYzB6ZFFhOTkxamJyN2srcDNodytNcFJaUlVX?=

=?gb2312?B?Y3lMZXlkY21CM2JtZjFoQXUxWVBlWnJBZXdYSUQvdEExM0FDR3h3N2dmdkhJ?=

=?gb2312?B?R0lWTWFOdDh0S3Q4YmNIRDQvQldmMmVVZXdiMXhuTW1mNmxKSDM1eXJxTXo4?=

=?gb2312?B?RnNJbGg1ejlzM0tvVTJtSkVsQVIzSHFFUnR0TER2U0owbUczVko4Z2pmc3Rs?=

=?gb2312?B?eE8yN0JUZ05Yd2lWS09kYk5WU1RyOWs4NUNTQVJSVnluNnU5Rks2akt1UGhM?=

=?gb2312?B?YU05SkpQRWw3YUlhQ1lCRGE4TStZbmFhN21LMGtxUFVwN2o5cGNjMnM5dU9t?=

=?gb2312?B?dUpGZmRodFFpeGRYczlnbGhHRm1LV3JCZ3dRYTV1eGx3Ymg5bkhCcDVyZ2ky?=

=?gb2312?B?SGE0SkNIZUdyNThteFI0RFVJanh2Q3Y2S3ptSDVQanljRjhvcnVwemM5QlZt?=

=?gb2312?B?MjRrMkRlcDR3dno3bjhxYk9Rd3B0K0tmQW9nYy80R3JsL2tOODF1U0ZxbEw4?=

=?gb2312?B?ZURoYmRuWGxNT2RSRkd3NTF4YXJsaU1obzJqOThyV1BJZSt2MlE0ZEllNlgv?=

=?gb2312?B?aytnUzh4OWJnektXRmxnRDdCcDJ4aTBXZzVNUkpkVC9XcCtZZHFtRVhnPT0=?=

Content-Type: multipart/alternative;

boundary="_000_OS3P286MB1096EE43D942394FA1D075B894779OS3P286MB1096JPNP_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-05f45.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: OS3P286MB1096.JPNP286.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 514883ed-288d-44b6-8189-08da8893bb84

X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Aug 2022 01:22:11.3627

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: OSZP286MB1535

--_000_OS3P286MB1096EE43D942394FA1D075B894779OS3P286MB1096JPNP_

Content-Type: text/plain; charset="gb2312"

Content-Transfer-Encoding: base64

SGVsbG8sDQpHb29kIGRheSENCkRvIHlvdSBoYXZlIG5lZWQgQ29ubmVjdG9yIGluIHJlY2VudGx5

Pw0KV2UgY2FuIGJhc2Ugb24geW91IGRlc2lnbiB0byBlc3RpbWF0ZSBjb3N0aW5nLiBJIGJlbGll

dmUgb3VyIGZhY3RvcnkgY2FuIGdpdmUgeW91IHJlYXNvbmFibGUgcHJpY2UgYW5kIGdvb2QgcXVh

bGl0eS4NCg0KV2UgYXJlIHZlcnkgcHJvZmVzc2lvbmFsIENvbm5lY3RvciBmYWN0b3J5cyBoYXZl

IG1vcmUgdGhlbiAxMiB5ZWFycy4NCg0KTG9va2luZyBmb3J3YXJkIHRvIGhlYXJpbmcgZnJvbSB5

b3Ugc29vbi4NCkJlc3QgUmVnYXJkcywNCkFuZHkNCg==

--_000_OS3P286MB1096EE43D942394FA1D075B894779OS3P286MB1096JPNP_

Content-Type: text/html; charset="gb2312"

Content-Transfer-Encoding: quoted-printable

: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Hello,

Good day!

Do you have need Connector in recently?

We can base on you design to estimate costing. I believe our factory c=

an give you reasonable price and good quality.

We are very professional Connector factorys have more then 12 years.
div>

Looking forward to hearing from you soon.

Best Regards,

Andy

--_000_OS3P286MB1096EE43D942394FA1D075B894779OS3P286MB1096JPNP_--

Posted by Dave Yadallee on Saturday, August 27. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 27 Aug 2022 14:17:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oS1S8-000IEH-3Y

for dave@doctor.nl2k.ab.ca;

Sat, 27 Aug 2022 13:26:44 -0600

Resent-From: The Doctor

Resent-Date: Sat, 27 Aug 2022 13:26:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f50.google.com ([209.85.160.50]:46947)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oS0tZ-000Eil-Eb

for doctor@nl2k.ab.ca;

Sat, 27 Aug 2022 12:51:05 -0600

Received: by mail-oa1-f50.google.com with SMTP id 586e51a60fabf-11c5505dba2so6032981fac.13

for ; Sat, 27 Aug 2022 11:50:43 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc;

bh=onAkx+shiWrYY6L6/IV7g7skzN0SAGwVGnmRJfCTi+E=;

b=ckg5qrEWXp6Z0Nlv/kxoKc7JqmAnglTpnCF2KlWQHmzz0CLmkP/tWMZ5YfyVv4jRJv

+ExVn54ZJQ+tqzBkfCK96kCB8/CfJBk4hOg1Vkh2jgfX3Tby7qqvLs2481N/JTcbWBWD

O0bFXHXUTiQLnTJNjlBh7qjC/Z+WCwBPKl4pyWiqwDjzhUwU9gtjfWGDqE9Xv2j9dqy5

pWAuQHaEchXegX2fQlv58rj0aY+iEdh7osfNVzRHCrALTDnaXrFQGPe/kmX3kfAY5ca2

9QBxj4oGmYY25TDzMLHlPd2yGPem3r7+ZwxntzROG8HV/YKBTVqKFeouKTYP2hU5iU0K

Ic7A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc;

bh=onAkx+shiWrYY6L6/IV7g7skzN0SAGwVGnmRJfCTi+E=;

b=6dD/aYOv4wnvnd0bMQi4Zzn9HZJWH0sUrPrJLWm3h5Kc85e1gRXaokNdu+iXe2VJEf

Tr5y+fmCmJ0oycp6s0C0VnePiBXe8z48HxcUWJiH4WNPp2eZm8gpqftOwIcgfulUVvHl

xzAON+fpQh8djyWtqx9uBTH4OnIet6y9LRUIuwZppjXCzE14vTgUtQ4idFzrflZRG+IZ

12MUpIQOBb4FSvHO1q6YHwI3ZZaB7WMgf4EYKgKx7aDYwJQ5jk11v0+h2EMQB+g/QMAA

6xb4TQBYCi92oLouo2ILL/P5QHNLL03aL/6XRRQsxlXs2PyXv9O1Wtf7jF/FKAD7Oy+q

R+dw==

X-Gm-Message-State: ACgBeo0SMsTBNtAXGA5v+HmS3rAcPAqfpWmko+y+a18qKHSjG3HRDX0q

OH1L0sxTcBiFcnXemGLZMEjwS1Wy/aHmIv+BhAM=

X-Google-Smtp-Source: AA6agR4orjZRUuM251Vm17F6In6zs6niTuQ53NunrxW2zEtC+v0EM5SFFj5rvqz+vtCFFrluV8hgod6glKb0keksERE=

X-Received: by 2002:a05:6870:7386:b0:11e:cf33:9023 with SMTP id

z6-20020a056870738600b0011ecf339023mr613130oam.86.1661626237998; Sat, 27 Aug

2022 11:50:37 -0700 (PDT)

MIME-Version: 1.0

Reply-To: fcpdonations2020@gmail.com

From: "Mr & Mrs Frances & Patrick Connolly"

Date: Sat, 27 Aug 2022 18:50:25 +0000

Message-ID:

Subject: voluntary donation

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000aa601e05e73d81bf"

Bcc: doctor@nl2k.ab.ca

X-Spam_score: 10.7

X-Spam_score_int: 107

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: PLEASE READ: We are Mr & Mrs Frances & Patrick Connolly, we

live in Moira, Northern Ireland and we are the successful winner of Â£115m

Euro Millions win who have decided to choose you as one of the 50 [...]

Content analysis details: (10.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.50 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[obedtetteh241[at]gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[obedtetteh241[at]gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[fcpdonations2020[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} voluntary donation

--000000000000aa601e05e73d81bf

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

PLEASE READ: We are Mr & Mrs Frances & Patrick Connolly, we live in Moira,

Northern Ireland and we are the successful winner of =C2=A3115m Euro Millio=

ns

win who have decided to choose you as one of the 50 lucky winners to

receive this month of August, 2022 Donation which happens to be =C2=A3925,0=

00.

For more information on this please reach out to this email:

fcpdonations2020@gmail.com

--000000000000aa601e05e73d81bf

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

PLEASE READ: We are Mr & Mrs Frances & Patrick Con=

nolly, we live in Moira, Northern Ireland and we are the successful winner =

of =C2=A3115m Euro Millions win who have decided to choose you as one of th=

e 50 lucky winners to receive this month of August, 2022 Donation which hap=

pens to be =C2=A3925,000. For more information on this please reach out to =

this email: fcpdonations2020@=

gmail.com

--000000000000aa601e05e73d81bf--

Posted by Dave Yadallee on Saturday, August 27. 2022

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Sat, 27 Aug 2022 08:01:00 -0600

Received: from [14.166.141.48] (port=53500 helo=static.vnpt.vn)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oRwMa-00080I-Ai

for dave@nk.ca;

Sat, 27 Aug 2022 08:00:47 -0600

Message-ID: <054D89B7.260774@vnpt.vn>

List-Unsubscribe:

Date: Sat, 27 Aug 2022 21:00:35 +0700

From: Bettine S. Brueggemann

MIME-Version: 1.0

To: Dave

Subject: Find a perfect Ukrainian wife.

Content-Type: multipart/alternative;

boundary="7C4F0A708A0752151ED09CD010B2CF876"

X-Spam_score: 39.2

X-Spam_score_int: 392

X-Spam_bar: +++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Noone backcomb photosensitise because of poisonous overtrump,

no honors. By bus scarlet, as loggia?Take that sexy cat :-0My name is Bettine

from Moldova. I found you on facebook :)I am a simple woman [...]

Content analysis details: (39.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was

blocked. See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[URIs: life.my]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URIs: beautywoman.cn]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL

blocklist

[URIs: beautywoman.cn]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of

words

1.0 J_WEEDS_V FULL: Dec/Hex char Enc [Vv]

1.0 J_WEEDS_O FULL: Dec/Hex char Enc [Oo]

1.0 J_WEEDS_E FULL: Dec/Hex char Enc [Ee]

1.0 J_WEEDS_R FULL: Dec/Hex char Enc [Rr]

1.0 J_WEEDS_M FULL: Dec/Hex char Enc [Mm]

1.0 J_WEEDS_P FULL: Dec/Hex char Enc [Pp]

1.0 J_WEEDS_C FULL: Dec/Hex char Enc [Cc]

1.0 J_WEEDS_D FULL: Dec/Hex char Enc [Dd]

1.0 J_WEEDS_Y FULL: Dec/Hex char Enc [Yy]

1.0 J_WEEDS_H FULL: Dec/Hex char Enc [Hh]

1.0 J_WEEDS_J FULL: Dec/Hex char Enc [Jj]

1.0 J_WEEDS_I FULL: Dec/Hex char Enc [Ii]

1.0 J_WEEDS_U FULL: Dec/Hex char Enc [Uu]

1.0 J_WEEDS_A FULL: Dec/Hex char Enc [Aa]

1.0 J_WEEDS_G FULL: Dec/Hex char Enc [Gg]

1.0 J_WEEDS_F FULL: Dec/Hex char Enc [Ff]

1.0 J_WEEDS_W FULL: Dec/Hex char Enc [Ww]

1.0 J_WEEDS_N FULL: Dec/Hex char Enc [Nn]

1.0 J_WEEDS_S FULL: Dec/Hex char Enc [Ss]

1.0 J_WEEDS_T FULL: Dec/Hex char Enc [Tt]

1.0 J_WEEDS_L FULL: Dec/Hex char Enc [Ll]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

3.2 FOUND_YOU I found you...

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_REMOTE_IMAGE Message contains an external image

3.0 HTML_ENTITY_ASCII Obfuscated ASCII

Subject: {SPAM?} Find a perfect Ukrainian wife.

This is a multi-part message in MIME format.

--7C4F0A708A0752151ED09CD010B2CF876

Content-Type: text/plain; charset="UTF-8"; format=flowed

Content-Transfer-Encoding: quoted-printable

Noone backcomb photosensitise because of poisonous overtrump, no honors. =

By bus scarlet, as loggia?Take that sexy cat :-0My name is Bettine from =

Moldova. I found you on facebook :)I am a simple woman with a big dream =

to create a happy loving family and I will work hard for it. I am a very =

optimistic and positive person. I consider that every problem has a =

solution. I am a very easy going person, I love meeting people and just =

enjoying the simple things in life.my account is over there: =

http://BettineXX.beautywoman.cnIt is me-I hope you will find me there =

and we will become friends

Call me!

--7C4F0A708A0752151ED09CD010B2CF876

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

UTF-8">Noone backcomb photosensitise because of poisonous =<br /><br /> overtrump, no honors. By bus scarlet, as loggia?

Take that =

sexy cat :-0

My name is =

Bettine from Moldova. I =

found you on faٗcebook =

I am a =

simp͝le woman with a =

big dream to create a =

happy loving =

famȉly aٟnd I will =

work hard for it. I ảm a =

very optimistiٝc and =

positiv֕e person. I =

consider that every =

problem has a =

s֭oluti̢onٍ. I am a =

very ea֥s͡y going =

pe֕rson, I lͅove =

meeti̿ng people =

anَd just enjoying =

the simple things in =

life.

my =

account is over =

theٙre:
"http://BettineXX.beautywoman.cn">
"text-decoration:underline; color:#0701FD; =

font-size:22pt">http://BettineXX.beautywoman.cn

It is =

me- 3D=<br

"Bettine96" src=3D"http://BettineXX.beautywoman.cn/f/676.jpg">

I hope you =

will find me ther֨e =

and we will become =

frie͜nds 8-) Call =

me!

--7C4F0A708A0752151ED09CD010B2CF876--

Posted by Dave Yadallee on Saturday, August 27. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 27 Aug 2022 05:37:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oRu6r-0005B2-Lq

for dave@doctor.nl2k.ab.ca;

Sat, 27 Aug 2022 05:36:17 -0600

Resent-From: The Doctor

Resent-Date: Sat, 27 Aug 2022 05:36:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn7nam10hn2231.outbound.protection.outlook.com ([52.100.155.231]:27781 helo=NAM10-BN7-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oRrn7-000GFh-Gz

for doctor@netknow.ca;

Sat, 27 Aug 2022 03:07:54 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=jpnieAtg6myc4XE258MP168OkW+zrSbS0S8KZcXAoHcaalPcP+z/xrQw7cHDYqkQN3fAbT3YjjmwPvqSp2YrihsPGPDQ4c+v6rmZmlwN0/eTPCuPdKvbrEKO4l8mnu1KFPmSMeMNiITEC4r05fySxMHWQf7tqwTnWqGvUsHCsvC4VQKqqfxSFY1WuJQNzE8kZwyJITJi+n3C5r0pt/VcWz+SGro5/kTDUusoZx14/5dG4TqZt9atrxBB78N01YFG8+bnLnY16jaKQ5LriNtlbargtgCMH00a2rUJ7NC7d14e+l+nEY7w4zM6bMkllErYHYpWLUfP27lGRUDU3oGsZQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=NHevMeavkGecYRbCvmrsqgknaD2yS1YgrYARupDO5yw=;

b=bDoHf/ZwLLKZ7kXm7PXEloej1HLfei601LnOxbf6LcgfA/aZruT7ibjuoPwe19q8KBEcTqr0Cmw8fC4kETtNSxjiqxi12FVMTj/v1w7Vlr5rzn/2/mSwdpDLoJ+mriiURjiaXxIPUcEjNE9bc7USZ4Nqini3MBo2sNrohfNz+41pgd5QkBkXaMI4HDkxcJ1fR3ikWeQciFA10dSY1AxBeLcW0V7t/JCvyk8ko8NCLtSTeB1cCIcr/e4rK9nNsGBg07UAhRC++SLdiQoVKOAKBV3zRVwH2sIQhgNwDmiMbz3kfTMp6j3sBuoOgudZhCLoyp2ZQw/8N1dam+5qTxQkEg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is

40.123.37.200) smtp.rcpttodomain=aol.com smtp.mailfrom=protege.cll;

dmarc=none action=none header.from=protege.cll; dkim=none (message not

signed); arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=cpncorp.onmicrosoft.com; s=selector1-cpncorp-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=NHevMeavkGecYRbCvmrsqgknaD2yS1YgrYARupDO5yw=;

b=UnD8zfdhvRMpRCFNvMedtQqXk3mSzwWS0WYBN0/pqWdQIZRDHPWenDVXwBejzXAT6DCZfV7P8Vyx0pcLsG4yiGqHEoAPLxprFsSeBYpfBaGmwFRnWIjgJzmfre4hMP0g30gmSUhwqMnpqsV1q+c8zI6cp5+MZz8K9imo5CKHZYY=

Received: from MW4PR04CA0194.namprd04.prod.outlook.com (2603:10b6:303:86::19)

by DM6PR18MB3052.namprd18.prod.outlook.com (2603:10b6:5:167::19) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5566.16; Sat, 27 Aug

2022 09:07:14 +0000

Received: from MW2NAM04FT064.eop-NAM04.prod.protection.outlook.com

(2603:10b6:303:86:cafe::5e) by MW4PR04CA0194.outlook.office365.com

(2603:10b6:303:86::19) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5566.15 via Frontend

Transport; Sat, 27 Aug 2022 09:07:14 +0000

X-MS-Exchange-Authentication-Results: spf=none (sender IP is 40.123.37.200)

smtp.mailfrom=protege.cll; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=protege.cll;

Received-SPF: None (protection.outlook.com: protege.cll does not designate

permitted sender hosts)

Received: from mailedge.calpine.com (40.123.37.200) by

MW2NAM04FT064.mail.protection.outlook.com (10.13.30.189) with Microsoft SMTP

Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.5566.15 via Frontend Transport; Sat, 27 Aug 2022 09:07:14 +0000

Received: from PZPWEXCAS04.na.calpine.com (10.221.16.100) by

PZPWEXEDGE02.calpine.com (10.221.8.135) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.1.2375.31; Sat, 27 Aug 2022 04:06:53 -0500

Received: from PZPWEXCAS04.na.calpine.com (10.221.116.146) by

PZPWEXCAS04.na.calpine.com (10.221.116.146) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.1.2375.28; Sat, 27 Aug 2022 04:06:53 -0500

Received: from User (10.221.98.196) by relay.calpine.com (10.221.116.146) with

Microsoft SMTP Server id 15.1.2375.28 via Frontend Transport; Sat, 27 Aug

2022 04:06:48 -0500

Reply-To:

From: "Mrs. Shaidi Hashmatullah"

Subject: My capital re-investment.

Date: Sat, 27 Aug 2022 02:06:53 -0700

MIME-Version: 1.0

Content-Type: text/plain; charset="Windows-1251"

Content-Transfer-Encoding: quoted-printable

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID: <4685aa71-13d2-4e3c-b5d8-bad6574a0bd3@PZPWEXCAS04.na.calpine.com>

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-Office365-Filtering-Correlation-Id: fda97fe7-7165-45d4-d004-08da880b8897

X-MS-TrafficTypeDiagnostic: DM6PR18MB3052:EE_

CPN-SPAM: Auth Check Pass

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?windows-1251?Q?PmDr1+aMQT1qkhjtwVbjmW/UIlDoVe7VO/nvoMpFX5RL2sOgCT3Dul+3?=

=?windows-1251?Q?c2z6fNNAoAR64yDM/0wVqyMSswozCtWoDGOWBiOynb87qZ8g3hg/ZnWt?=

=?windows-1251?Q?2erZ2rVNT4KWhL+w2U+BwMuaP0eb5MzQH6mLA7u5ra9vAyITq6MNPK5N?=

=?windows-1251?Q?4y/po00SWv5H85FEWkZphLyjZnixsQcjszvi30tDVU2x+psOLP9qpRfb?=

=?windows-1251?Q?yKweoilDYNlr39WSR78T90duuTyEgzRGoGe254Di2exmx4o/9sETYSnw?=

=?windows-1251?Q?moS+Fs4mYNyBom1WfVTHP6fVt4b9j29oedXDyMPvPvHPztsI2vIqxVGE?=

=?windows-1251?Q?Fe5IvrI3N6BqW808KRCIL2gQfQxmX3Yotib0HWN+CjY3KWvoHzFQm8Cp?=

=?windows-1251?Q?KGCPzvusCNJ45+5NCmTRvekxm4Z1AW919xsGWewJVjGJ7607dsttct5i?=

=?windows-1251?Q?MxdW5Y4n2DtQE+eFJ2zCUOTzw2Us5B+Ov+Bd+mWwFyuYHN7N1AyHG+3E?=

=?windows-1251?Q?9QjgqQ3mpRx6qv7YUMPGJSqg6qHtFbel48HzPmYmKY1c00qFzivvHTO3?=

=?windows-1251?Q?y1l/Eu+D57W3R8mV2kaoA0yv35YvCaJwRtXLra3FDo5cKLMdlFzR+ZO5?=

=?windows-1251?Q?ayY67fHDS7Ne+/8U8ax8bXn0k21RAZH97Nk621rb31M6ve4bMvCeJKVQ?=

=?windows-1251?Q?mZJKgGKBqGNfyFfDaffwQhFOQpCQrKu8fbI9zywsuthY3KOm5/eqMdQe?=

=?windows-1251?Q?FD4g8ID9KdB8S6kZLjUgzhIqtwUEA/+l2NHNuJ0xcD0X0DAW3F5L0Q+K?=

=?windows-1251?Q?CNzNuHM7mUBYg18tVirzdrrvIpObtO+cUU0Ii4YZGeiiBrS2/L/4Bvgf?=

=?windows-1251?Q?afCUrdtc/OszEIQI5DYjh/1F4S2HvDzqx5jWXbg24gVbDJu+c6LMsmS9?=

=?windows-1251?Q?5Dze9wB1GenOEh5l/aaQgHkWFyu8/bX8sN2QTV6QoQlndMAXgSZ82lyR?=

=?windows-1251?Q?nBH4DWy3wPBGgbtXkvY4oU5zxG+cX1Grm3Xuh8W/vz1BRaf7H0E73HRM?=

=?windows-1251?Q?CJQERAfVAt9q1fOcaCC3Ch2O2PE6AQXDhkPQW9B7sWv/Sfx0Fd0F95qJ?=

=?windows-1251?Q?uwWBbu7XmLe2d53wJTC6CK/dPpcyvw+VeGoCYncc6WlTcTSqxB/ZL5U3?=

=?windows-1251?Q?iU3x4//7+obnz5pXhm77JGFtOdPfyd6wajqTz9R9zMLyS1URXX1tvyb5?=

=?windows-1251?Q?uZpLYQrlWawMS8v2FJ/8go697vu+Lgzxl9lfPhLm?=

X-Forefront-Antispam-Report:

CIP:40.123.37.200;CTRY:US;LANG:en;SCL:5;SRV:;IPV:CAL;SFV:SPM;H:mailedge.calpine.com;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230016)(4636009)(346002)(396003)(39860400002)(136003)(376002)(46966006)(40470700004)(86362001)(31696002)(3480700007)(81166007)(40460700003)(356005)(2860700004)(82740400003)(316002)(7366002)(7416002)(8936002)(7406005)(70586007)(5660300002)(8676002)(70206006)(35950700001)(83380400001)(336012)(47076005)(41300700001)(40480700001)(9686003)(498600001)(26005)(82310400005)(6666004)(109986005)(2906002)(31686004)(4001630100005);DIR:OUT;SFP:1501;

X-OriginatorOrg: cpncorp.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Aug 2022 09:07:14.2296

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: fda97fe7-7165-45d4-d004-08da880b8897

X-MS-Exchange-CrossTenant-Id: 7406f7f1-ef6e-49f3-a9c0-002b8bc12056

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=7406f7f1-ef6e-49f3-a9c0-002b8bc12056;Ip=[40.123.37.200];Helo=[mailedge.calpine.com]

X-MS-Exchange-CrossTenant-AuthSource:

MW2NAM04FT064.eop-NAM04.prod.protection.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR18MB3052

X-Spam_score: 7.0

X-Spam_score_int: 70

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello my friend, I am Mrs. Shaidi Hashmatullah, from Kabul,

Capital of Afghanistan. With due respect I contact you due to the crisis

in Afghanistan, i am looking to co-operate with you on a mutually interesting

and re [...]

Content analysis details: (7.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.0 NSL_RCVD_FROM_USER Received from User

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.100.155.231 listed in wl.mailspike.net]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[shaidihashmatullah01[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level

mail domains are different

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 HK_NAME_MR_MRS No description available.

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} My capital re-investment.

Hello my friend,

I am Mrs. Shaidi Hashmatullah, from Kabul, Capital of Afghanistan. With due=

respect I contact you due to the crisis in Afghanistan, i am looking to co=

-operate with you on a mutually interesting and rewarding project and/or tr=

ansaction with you, I desire to relocate my investment capital abroad where=

it will generate more returns.

I will appreciate your response. Please let me know your ideas and knowledg=

e regarding this investment offer. Any viable investment idea you suggest t=

o me will be considered.

Looking forward to hearing from you.

Best regards,

Mrs. Shaidi Hashmatullah

COMPANY CONFIDENTIALITY NOTICE: The information in this e-mail may be confi=

dential and/or privileged and protected by work product immunity or other l=

egal rules. No confidentiality or privilege is waived or lost by mis-transm=

ission. If you are not the intended recipient or an authorized representati=

ve of the intended recipient, you are hereby notified that any review, diss=

emination, or copying of this e-mail and its attachments, if any, or the in=

formation contained herein is prohibited. If you have received this e-mail =

in error, please immediately notify the sender by return e-mail and delete =

this e-mail from your computer system.

Posted by Dave Yadallee on Saturday, August 27. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 26 Aug 2022 18:59:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oRk9i-000NTr-5F

for dave@doctor.nl2k.ab.ca;

Fri, 26 Aug 2022 18:58:34 -0600

Resent-From: The Doctor

Resent-Date: Fri, 26 Aug 2022 18:58:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-tyzapc01hn2225.outbound.protection.outlook.com ([52.100.223.225]:26254 helo=APC01-TYZ-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oRjGH-000IVj-Py

for root@doctor.nl2k.ab.ca;

Fri, 26 Aug 2022 18:01:23 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=lopZBzwPElu2ZIP5p9Bii/IucbJPo/tV5iEuZzFHdUd3pIUoXTfowYQlGSjUk4+mvQa5wE5Zf2g04JBehtzrqNpCgWPPtFZazmzZPdaBStxJUNNtznq4c6rCJRKZXB2b/ailkEK4jEgzu/W0CsrLu5D3cm8sMDvjogv+mety2rrySsGne79n81oFYmcC+8J+sh2qWCE7pB5xZSBlTtlQoot6VcSQk6wcm9mcD2K2UhctxJy6AAfXWuRlsUYW0hPIq5P+3IblGLkgqvdoEpvDxbTj9UH9RmiTejiZIqn+hSnfj1BWdqRMsdVZrlQpM/QFHWdtAR+SpDqK+B8XqMmz+g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=8/EKDgDFlelzveFN4ZSvpNtzC3KZ4k5UxzwLD1haQU8=;

b=XvcMyNjOzyEKk8dGHdhs1zeTN0VkPLEqYZHd2VMhQprZWH6I+7R6Be8IMWoBrQQA6vrjurMY10g3RFUY/P0IMc9wPQYCtyouxjPDWZ4c8lV+/BHbjau7fOl1KUlK1c6F3wDC5qk+8vOZbiuisTw8+fsIIuFCnFf+9ozQOxAkHyqw4/SvVZjxLintLPCZGFXaOa+S5inrg6pWMDESFc5AUwJecswnjbufmB9DqXY9wmwTTY670w0KF3Dy337Ojo8XWJT3dd6S2WTULIISMH+JG34uAGoeWed3FA+p29hTYvLwTqxxM3kfn3+lJ2sq1sD30R/gmKKDJ0ZWn6T3SIypCQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is

185.222.58.60) smtp.rcpttodomain=cpart.kz smtp.mailfrom=t4.cims.jp;

dmarc=bestguesspass action=none header.from=t4.cims.jp; dkim=none (message

not signed); arc=none (0)

Received: from SGAP274CA0016.SGPP274.PROD.OUTLOOK.COM (2603:1096:4:b6::28) by

SG2PR04MB5429.apcprd04.prod.outlook.com (2603:1096:4:172::8) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.5525.10; Sat, 27 Aug 2022 00:00:48 +0000

Received: from SG2APC01FT0031.eop-APC01.prod.protection.outlook.com

(2603:1096:4:b6:cafe::e1) by SGAP274CA0016.outlook.office365.com

(2603:1096:4:b6::28) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5566.15 via Frontend

Transport; Sat, 27 Aug 2022 00:00:48 +0000

X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 185.222.58.60)

smtp.mailfrom=t4.cims.jp; dkim=none (message not signed)

header.d=none;dmarc=bestguesspass action=none header.from=t4.cims.jp;

Received-SPF: Pass (protection.outlook.com: domain of t4.cims.jp designates

185.222.58.60 as permitted sender) receiver=protection.outlook.com;

client-ip=185.222.58.60; helo=User; pr=M

Received: from mail.prasarana.com.my (58.26.8.159) by

SG2APC01FT0031.mail.protection.outlook.com (10.13.36.89) with Microsoft SMTP

Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.20.5566.15 via Frontend Transport; Sat, 27 Aug 2022 00:00:48 +0000

Received: from MRL-EXH-02.prasarana.com.my (10.128.66.101) by

MRL-EXH-02.prasarana.com.my (10.128.66.101) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.1.2176.14; Sat, 27 Aug 2022 08:00:33 +0800

Received: from User (185.222.58.60) by MRL-EXH-02.prasarana.com.my

(10.128.66.101) with Microsoft SMTP Server id 15.1.2176.14 via Frontend

Transport; Sat, 27 Aug 2022 08:00:23 +0800

Reply-To:

From: "Mrs. Ann Zainab Abdullah"

Subject: Re: Did You Receive My last Email?

Date: Sat, 27 Aug 2022 02:00:33 +0200

MIME-Version: 1.0

Content-Type: text/html; charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID: <655ffa6f-c65b-4aa1-84e0-3678a3a8aa3e@MRL-EXH-02.prasarana.com.my>

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-Exchange-SkipListedInternetSender: ip=[185.222.58.60];domain=User

X-MS-Exchange-ExternalOriginalInternetSender: ip=[185.222.58.60];domain=User

X-MS-PublicTrafficType: Email

X-MS-Office365-Filtering-Correlation-Id: e159c72a-67cc-41c6-87b4-08da87bf3278

X-MS-TrafficTypeDiagnostic: SG2PR04MB5429:EE_

X-MS-Exchange-AtpMessageProperties: SA|SL

X-MS-Exchange-SenderADCheck: 0

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?windows-1251?Q?2AoYbKIN9rN0MwmKq8rhynvjKeWQH1pHqLDuioOkFJywsBZ1l7QPSns2?=

=?windows-1251?Q?lj8NumZqwxEU5Q0kWSeT2uWekyLWqjDhMc0onnIZs/f255cRuOpX97M9?=

=?windows-1251?Q?MzlOjYIS7h3CZ42CC5F+/2+etRX1q5Yp1Pz8Mkm4IinG0L4lHChhCEhr?=

=?windows-1251?Q?bTaS2saQ1e1u7IhcxC6Ity1aICJdrDMEKjU5+ig9jYPVlg6tqYRf0S0q?=

=?windows-1251?Q?w9yADQuGM2DYyiyNdrBsVLPhGS0p3ESGkyH4aJ+WThZFnQGIXJWzAJXN?=

=?windows-1251?Q?7JIpnf56x5U0EWu6ZR1gvKKvNdsNZqDRvj9eUwBqBF5odqfIx1nte0cQ?=

=?windows-1251?Q?Lr369x43CESJw4mCC54IMa+Mgz8A0FT5eUmbBnKT6okbJdRdkC2ZJha6?=

=?windows-1251?Q?2gvewAPRRV69PKfRfe3oYqIOUsCF9KLoLO+xa7CJFDzJeAIQGM55VF/w?=

=?windows-1251?Q?oB5uuk/auxQJJj5jzmivMDW20meBrbnsqs+e6a7tM5fsHBDrAyMR0Q9m?=

=?windows-1251?Q?tAknM9dym8WAVNa2+bPrAvndxRZSwbYm2ZFWvEJp0kzKOHd4BW4rB7Al?=

=?windows-1251?Q?pYD2D14yoNxI4Ov+artjRfgfgotNEcQunFvkH0O9nztPEHOTwOK3anJB?=

=?windows-1251?Q?JGDxygNIfoDqHmhnbwemzuRzpmZhjZl4qAJEWKpgtYPCWjLs+1n8czHP?=

=?windows-1251?Q?GiwwGF1tFfxgf0zoA9nwPhzzT3b6OsNtAPkhTyITDY4e02sWBZTic9vl?=

=?windows-1251?Q?bEhbgMuxv7A+5c88dfX3R0+XziqNaB5kFCLL2A4YRESkHunrawpZvgtm?=

=?windows-1251?Q?vhctbCtyzqrgj82j3jUhuBzXDEXAt8jL7Zr0u7ENPCzidsu+RDLyyR41?=

=?windows-1251?Q?d3HEmitIR1F97elXPRbG5mKxQkR5KJYCs+bpVMqV1Lzo+MT64sBIjOj5?=

=?windows-1251?Q?0XzPMSb32WolkvM6ioceN4q2JQnZ7iEKWI2s48oZx3lWk8BKqQLf+/Wc?=

=?windows-1251?Q?DEvAdGMSYp8tVpkSL9g/tlBbJV3AAUKKI/oAy2s5aJF70FwBjCrdSL8Q?=

=?windows-1251?Q?IYVX3Hsh61fryKgn7sYqwoiqp46E61U/X81y4JEflisIzoQxLxKeHSbV?=

=?windows-1251?Q?YBrLtingwoPZDEzhwma/cQNcWlzUGj1XLCluveqa0PRS1Z5k8/wo1TGA?=

=?windows-1251?Q?ML45ioTL0HUQkOpMgp7AhLFZIjUUo0c6s0yLX/mA/O90CE708hhot1fy?=

=?windows-1251?Q?sKquhyFHiP9yoIxYejIbOyMmxR7JfQ1Z2OSOLK0q/yNCvDXxjbv4PiAU?=

=?windows-1251?Q?KqDho8IgR14VikjGtg3UouTW/Wc54q3wVNUePPDjB2V8KWezH010kowD?=

=?windows-1251?Q?62vcBsK0hlkYW5YUnjnFXQOKVNr+AB6EpDDwRiuFok8yeB/7p4l5PfDY?=

=?windows-1251?Q?7dd495qw6zm4tvrGKIrxcufll9oAKxcu2Q7a25JGlEfNNR/yF6BD06cg?=

=?windows-1251?Q?nElLbyArn0tl1m/SU3ceU0vVCMKPr5vwTDdenZSTLnjXXYmi/7hH96XI?=

=?windows-1251?Q?UF8OOBtp0jcFsheUOL7pbI8U/sHX2xB1Kv8jNQbL7ZxRzLkMJd5xuVxD?=

=?windows-1251?Q?NlrdZindHSMj/lnm/ZXcwBEoUp54Pkbody0Ucmwd+n2LR39gs/4KxI+g?=

=?windows-1251?Q?pti1Z+wWoUkK58S++yukNp89xuCQRM90Oe6m9MMYyNKdyXhZ2LWUNAv4?=

=?windows-1251?Q?skvCPnWpTRH2eCeF7KLTfX9clptSeIouaO3U7MqDmWNke7xHzm3RE/Ki?=

=?windows-1251?Q?rWgkcA=3D=3D?=

X-Forefront-Antispam-Report:

CIP:58.26.8.159;CTRY:NL;LANG:en;SCL:9;SRV:;IPV:NLI;SFV:SPM;H:User;PTR:modularisation.naturescar.com;CAT:OSPM;SFS:(13230016)(39860400002)(376002)(396003)(136003)(346002)(46966006)(40470700004)(31696002)(109986005)(86362001)(70206006)(8936002)(70586007)(156005)(32850700003)(36906005)(82740400003)(2906002)(40460700003)(316002)(7416002)(7406005)(956004)(8676002)(41300700001)(336012)(47076005)(5660300002)(83380400001)(9686003)(81166007)(35950700001)(26005)(82310400005)(40480700001)(6666004)(558084003)(498600001)(31686004)(2700400008);DIR:OUT;SFP:1501;

X-OriginatorOrg: myprasarana.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Aug 2022 00:00:48.0672

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: e159c72a-67cc-41c6-87b4-08da87bf3278

X-MS-Exchange-CrossTenant-Id: 3cbb2ff2-27fb-4993-aecf-bf16995e64c0

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=3cbb2ff2-27fb-4993-aecf-bf16995e64c0;Ip=[58.26.8.159];Helo=[mail.prasarana.com.my]

X-MS-Exchange-CrossTenant-AuthSource:

SG2APC01FT0031.eop-APC01.prod.protection.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SG2PR04MB5429

X-Spam_score: 6.5

X-Spam_score_int: 65

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: I look forward to your response and cooperation toward this

great charity work. Truly Yours, Mrs. Ann Zainab

Content analysis details: (6.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.0 NSL_RCVD_FROM_USER Received from User

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.100.223.225 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level

mail domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.0 HK_NAME_MR_MRS No description available.

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML

tag

0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait

0.0 FAKE_REPLY_C No description available.

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} Re: Did You Receive My last Email?

I look forward to your response and cooperation toward this great charity work.

Truly Yours,

Mrs. Ann Zainab

Posted by Dave Yadallee on Friday, August 26. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 26 Aug 2022 14:55:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oRgLV-000NID-AE

for dave@doctor.nl2k.ab.ca;

Fri, 26 Aug 2022 14:54:29 -0600

Resent-From: The Doctor

Resent-Date: Fri, 26 Aug 2022 14:54:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f176.google.com ([209.85.208.176]:38674)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oRe5E-000AbG-1i

for sales@nk.ca;

Fri, 26 Aug 2022 12:29:37 -0600

Received: by mail-lj1-f176.google.com with SMTP id s8so2368654ljj.5

for ; Fri, 26 Aug 2022 11:29:10 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=webdesignoutsourcers-com.20210112.gappssmtp.com; s=20210112;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc;

bh=Cy8D8sK1/xLxTFOHJjlt1cRkN5XE1wBgRPoU2ENtT58=;

b=DF4qnd5ZQZkPhTEjCsCJi0Odqo3S29CmnXIOOtmua6ys/NsdSOEUIG2G+UPW6voneX

FHPL2wMoqYIxWkEk6769H9v0zboPYXm97TfZo8tt454pCmhTHvqmIf8KmSSioChFI5bJ

E+49iHKoczHwFMslhY4KsCt/ZzGvRCCWGQDVwp1DpPiPfTS+axVR9rfQl0rRqTIr+j5a

QpVcprOtkHYdvVevuH9U82UDoR8AQBYukZJ+I6nGSeN9vgDSUxnd9Ehkp8PfbX1i+0B8

jAVNdyDhiF+imYOjVZ6/fUbWw4V5Vb1Ua5tbtMTCDAk2kwsnFrmqP8qeXBrQfFSAZNi4

1/3w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:sender:mime-version

:x-gm-message-state:from:to:cc;

bh=Cy8D8sK1/xLxTFOHJjlt1cRkN5XE1wBgRPoU2ENtT58=;

b=q7wLgDsQdWPOiO/gru6N4mLvajAkEkWMBOwE1sf/p0cMWspCUcA4O4BPTk5iJuOzxO

gc/sY5M8UsEx85MA4AYj5eA/5TVGYvhFNwcAigcYiZSdgl6SrnxKL46xt9b0QoSBEMeU

mv6RwZtVICljStSHQeTGR7wDqTPK+9c/bQ1r44h7aqFUFmykDB2Si4We7XkXTJAi9ZhG

wukSKqp9ecTTsjI4IOlnl31wtgpEnQu9M8WjygKXocp2VGmcGFbz2R5oKI7+uu1WJmnw

9jpUdSWa6KWE/QbfxX5s+TSZ8bRjpKmAtVJSsmyqIsDhCL0/zGfNgilZ4UkkdOMTrcMW

/UBw==

X-Gm-Message-State: ACgBeo1khzlnUUVa7FAvV33cGvBsbk2WQGVnpP1tB3lanFg1bhswYPUm

JNaewm1RsNorx/fKptCnqmW+ek8IoKzbNOYCoHUgbzO0Z8qcog==

X-Google-Smtp-Source: AA6agR6KEgtF92VcollSKULUOHlyvog9xf751fkTTW3UMGXbRgN84ZMMOGb1wpWg+smfID6CZXtotirHf4UyH/Nt6Yc=

X-Received: by 2002:a05:651c:238c:b0:261:d468:d633 with SMTP id

bk12-20020a05651c238c00b00261d468d633mr2636239ljb.479.1661538543455; Fri, 26

Aug 2022 11:29:03 -0700 (PDT)

Received: from 586015324275 named unknown by gmailapi.google.com with

HTTPREST; Fri, 26 Aug 2022 14:29:02 -0400

MIME-Version: 1.0

Sender: Fahad Hassen

From: Fahad Hassen

Date: Fri, 26 Aug 2022 14:29:02 -0400

X-Google-Sender-Auth: H5yvPH2XgWbqv68Xj56cgyZvHAE

Message-ID:

Subject: mypaintsshop website question - Google Business Profile

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000a9d63505e7291610"

--000000000000a9d63505e7291610

Content-Type: text/plain; charset="UTF-8"

Hi,

I found your email from mypaintsshop.com and would like to ask if anyone is

handling your digital marketing as a whole? If not, I am eager to take this

up for you and can guarantee results - I am really enthusiastic about this

and if you too are excited to discuss, I can send you my strategy for your

quick review, of course under no obligation. Who knows - it could be a game

changer if everything strikes up right and if no action taken, no reward

can be expected anyway.

A little about me - I am Fahad Hassen, and I am a Google certified "Google

My Business" specialist, and "Google Ads" specialist - I will give you

verifiable references upon interest. With "Google My Business", you will

not pay anything to Google and with the correct setup, you can get very

good results. But with Google Ads of course, you can get quick results but

it comes at a cost, and if you have a good process to handle the traffic,

you could strike it big.

If I send you a small overview report, will you give it 10min to read? That

is all I want to know and if you say "Yes", I will send it in

Fahad Hassen

(Google My Business/Google Ads specialist, certified by Google Inc)

Note - I'll send in my contact details, LinkedIn, website and work samples

upon your interest. I have been working with local businesses on their

digital marketing for the past 20 years and I am sure you will be impressed

with what I can do for you. I get the certifications renewed every year

from Google, and will present it to you upon reply. Thank you.

--000000000000a9d63505e7291610

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Hi,

I found your email from
ntsshop.com">mypaintsshop.com and would like to ask if anyone is handli=

ng your digital marketing as a whole? If not, I am eager to take this up fo=

r you and can guarantee results - I am really enthusiastic about this and i=

f you too are excited to discuss, I can send you my strategy for your quick=

review, of course under no obligation. Who knows - it could be a game chan=

ger if everything strikes up right and if no action taken, no reward can be=

expected anyway.

A little about me - I am Fahad Hassen, and I am a =

Google certified "Google My Business" specialist, and "Googl=

e Ads" specialist - I will give you verifiable references upon interes=

t. With "Google My Business", you will not pay anything to Google=

and with the correct setup, you can get very good results. But with Google=

Ads of course, you can get quick results but it comes at a cost, and if yo=

u have a good process to handle the traffic, you could strike it big.

r>If I send you a small overview report, will you give it 10min to read? Th=

at is all I want to know and if you say "Yes", I will send it in =

Fahad Hassen
(Google My Business/Google Ads specialist, certif=

ied by Google Inc)
=C2=A0
Note - I'll send in my contact details,=

LinkedIn, website and work samples upon your interest. I have been working=

with local businesses on their digital marketing for the past 20 years and=

I am sure you will be impressed with what I can do for you. I get the cert=

ifications renewed every year from Google, and will present it to you upon =

reply. Thank you.

--000000000000a9d63505e7291610--

Posted by Dave Yadallee on Friday, August 26. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 26 Aug 2022 10:31:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oRcDu-000PwA-2z

for dave@doctor.nl2k.ab.ca;

Fri, 26 Aug 2022 10:30:22 -0600

Resent-From: The Doctor

Resent-Date: Fri, 26 Aug 2022 10:30:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f68.google.com ([209.85.210.68]:34452)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oRbJd-000KVt-QN

for doctor@doctor.nl2k.ab.ca;

Fri, 26 Aug 2022 09:32:18 -0600

Received: by mail-ot1-f68.google.com with SMTP id q39-20020a056830442700b0063889adc0ddso1242330otv.1

for ; Fri, 26 Aug 2022 08:31:56 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc;

bh=45M5w7GXGhDaHEQwL25lX9CTGRVaeOJaQXcMnDBQBJA=;

b=Whwrk+Tv0ND8qfQnhD3YJZWKo48t/V5ocNnwxwyc6meJJT809NuIRKF73pVANvmWzg

Yuit4rPF1uD3qDggQObwTX9nEbPY1bxmkjXI7fNzqOtQfXPsxAn7ZZK+y7Nndlsxas0B

tnASJkA7MlxW98AzcDrEIQkcA09/0fXTvPiIRILh0PMrFjTG9obguUTSICVUztUm0B+d

YPZdiW0YX1i1jYcLvSWQpDnd6k907IuhP5k8MPDO012rclyIW4zS0czIAFYwZc8Ryc8D

OBsSxHfEMAO01B1d6ma2JEIwTRjZL4TJNJOu9H1bpvib0VgdtqmB0xkB6JqhI3wh0Fs1

xkdg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc;

bh=45M5w7GXGhDaHEQwL25lX9CTGRVaeOJaQXcMnDBQBJA=;

b=eNdrdge7FIIpILeSQrb7Me+uP1yVZTUozXD3uQZAWiDCRJ/DQaFS8etNGCbieAJKKx

xqyXa58VwLkA2/HTujNltMdr7gSovxSPhN5+anvfvFsl+KW0PotTvnlE/tao4p5Pj88Q

u6ZM75L5ttZTuc01Xot7I8fIYTTq22YE8JvvalSSgYZKy+WlNZBb1/N+Fyf1/tFqpdW7

Hiwnbh1PUzJF+5KGss7xH/rD27/nbs5s+smjoR+MSAmbuYFQbf2YSKjcQmRzNcpF1lLU

LOg/z/bh0GFB//qBJHc1P8RMtQ317Scx/EGS789iaOFGuu0eUGQ2votFnfbBPUfcdMML

+8Vw==

X-Gm-Message-State: ACgBeo0yp+tUXFx1ypGDKCUHNKYVCielt6/eI08jn5QUmU/gz0+/X+h8

y5c04JlcGqjqlyj7NulMn+Hqxie8x7TflrR41yk=

X-Google-Smtp-Source: AA6agR4kZ80nVwiXnJ6iiNX83SE85pNMZcw4p426vCh/hpFY2lTOgx5dWBiCWNZz1flUbelddWcFszSCKlCHFn7e73I=

X-Received: by 2002:a05:6830:18c4:b0:636:ee33:158e with SMTP id

v4-20020a05683018c400b00636ee33158emr1590921ote.239.1661527910426; Fri, 26

Aug 2022 08:31:50 -0700 (PDT)

MIME-Version: 1.0

From: Mrs Aisha Al-Qaddafi

Date: Fri, 26 Aug 2022 08:31:30 -0700

Message-ID:

Subject: MY Beloved one, i need your assistance

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000e2af6305e7269c88"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 11.8

X-Spam_score_int: 118

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: MY Beloved one, i need your assistance Please bear with me.

I am writing this letter to you with tears and sorrow from my heart. I am

Aisha Muammar Gaddafi, the only daughter of the embattled president of Libya,

Hon. Muammar Gaddafi. I know my mail might come to you as a surprise because

you donâ€™t know me, but due to the unso [...]

Content analysis details: (11.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

DNSWL was blocked. See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[209.85.210.68 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.68 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[leahsamson87[at]gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[leahsamson87[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

2.5 HK_SCAM_N2 BODY: No description available.

0.1 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

1.0 HK_SCAM_N15 BODY: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 HK_SCAM No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 XFER_LOTSA_MONEY Transfer a lot of money

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} MY Beloved one, i need your assistance

--000000000000e2af6305e7269c88

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

MY Beloved one, i need your assistance

Please bear with me. I am writing this letter to you with tears and sorrow

from my heart.

I am Aisha Muammar Gaddafi, the only daughter of the embattled president of

Libya, Hon. Muammar Gaddafi. I know my mail might come to you as a surprise

because you don=E2=80=99t know me, but due to the unsolicited nature of my

situation here in Refugee camp Ouagadougou Burkina Faso i decided to

contact you for help. I have passed through pains and sorrowful moments

since the death of my father. At the same time, my family is the target of

Western nations led by Nato who want to destroy my father at all costs. Our

investments and bank accounts in several countries are their targets to

freeze.

My Father of blessed memory deposited the sum of $27.5M (Twenty Seven

Million Five Hundred Thousand Dollars) in a Bank at Burkina Faso which he

used my name as the next of kin. I have been commissioned by the (BOA) bank

to present an interested foreign investor/partner who can stand as my

trustee and receive the fund in his account for a possible investment in

his country due to my refugee status here in Burkina Faso.

I am in search of an honest and reliable person who will help me and stand

as my trustee so that I will present him to the Bank for the transfer of

the fund to his bank account overseas. I have chosen to contact you after

my prayers and I believe that you will not betray my trust but rather take

me as your own sister or daughter. If this transaction interests you, you

don't have to disclose it to anybody because of what is going on with my

entire family, if the United nation happens to know this account, they will

freeze it as they freeze others, so please keep this transaction only to

yourself until we finalize it.

Sorry for my pictures. I will enclose it in my next mail and more about me

when I hear from you okay.

Yours Sincerely

Best Regard,

Aisha Gaddafi

--000000000000e2af6305e7269c88

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

MY Beloved one, i need your assistance

Please bear =

with me. I am writing this letter to you with tears and sorrow from my hear=

t.

I am Aisha Muammar Gaddafi, the only daughter of the embattled pr=

esident of Libya, Hon. Muammar Gaddafi. I know my mail might come to you as=

a surprise because you don=E2=80=99t know me, but due to the unsolicited n=

ature of my situation here in Refugee camp Ouagadougou Burkina Faso i decid=

ed to contact you for help. I have passed through pains and sorrowful momen=

ts since the death of my father. At the same time, my family is the target =

of Western nations led by Nato who want to destroy my father at all costs. =

Our investments and bank accounts in several countries are their targets to=

freeze.

My Father of blessed memory deposited the sum of $27.5M (Tw=

enty Seven Million Five Hundred Thousand Dollars) in a Bank at Burkina Faso=

which he used my name as the next of kin. I have been commissioned by the =

(BOA) bank to present an interested foreign investor/partner who can stand =

as my trustee and receive the fund in his account for a possible investment=

in his country due to my refugee status here in Burkina Faso.

I am =

in search of an honest and reliable person who will help me and stand as my=

trustee so that I will present him to the Bank for the transfer of the fun=

d to his bank account overseas. I have chosen to contact you after my praye=

rs and I believe that you will not betray my trust but rather take me as yo=

ur own sister or daughter. If this transaction interests you, you don't=

have to disclose it to anybody because of what is going on with my entire =

family, if the United nation happens to know this account, they will freeze=

it as they freeze others, so please keep this transaction only to yourself=

until we finalize it.

Sorry for my pictures. I will enclose it in m=

y next mail and more about me when I hear from you okay.

Yours Since=

rely
Best Regard, =C2=A0
Aisha Gaddafi

--000000000000e2af6305e7269c88--

August '22

Posted by Dave Yadallee on Friday, August 26. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 26 Aug 2022 08:03:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oRZuT-000BwN-Pt

for dave@doctor.nl2k.ab.ca;

Fri, 26 Aug 2022 08:02:09 -0600

Resent-From: The Doctor

Resent-Date: Fri, 26 Aug 2022 08:02:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f174.google.com ([209.85.210.174]:44622)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oRYOo-0008dq-4D

for doctor@doctor.nl2k.ab.ca;

Fri, 26 Aug 2022 06:25:26 -0600

Received: by mail-pf1-f174.google.com with SMTP id f17so1385155pfk.11

for ; Fri, 26 Aug 2022 05:25:04 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc;

bh=4IAVCA2gJTTjDt5CBjLggMJFJuBSUP41/Lvi+HTqvVI=;

b=Hi2HpAK1yqHNv8ZJAjUUQVvu/VaJoMdZP2U9qLSSsp0N3GQr63+HtJflOqAV3+Wqkv

zPmAIFZEVisSDLO3fSN6070WHOvnD3aycgWBHN0+z95yLo2vzcctR7T96v+6vlENjQMG

CeMjes9YEs9eN0lphxJR7avwLJofMPQGj0u2qVd0aaEfEAZOnB/pB4k6ok9lEnN/NOnh

d8t6PHKzP467hp0YG0w8MJ4/bMrnYfE7VCKImQVRvcB2YJNQ/ueB5xQSA+gBneEAtRkG

12X49/kNYrE/vLATGkEnucplZ+gRdvlQCXTtiHAMWsKwZRIY6kuU7b6rb+3h4R+uZT40

2krQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc;

bh=4IAVCA2gJTTjDt5CBjLggMJFJuBSUP41/Lvi+HTqvVI=;

b=Rr3uBf9+BmM2grdqv4OZY5AWqiqMAp9NM8UjcBkx+AtdUMJr9bGtJsK1/nJjFt38x9

0pfq41X2uIMYenLoTenlyX7faMm+ArDuKSwL0d+8DX/yVgeoqSzaN4990VTWHeNWqiQt

esohKyQqUhTLH4xwPYNBmUeyZyn6chV+siWyrqGgfRrz3j+j3cJl4TKVkMfJgFlp6jnU

wdWXIgCVKIu2YgmqvlapJLWLuvAobcPV4l0LvLJX208PPT2mOX6DtfJGQBm4tHw4B315

7Ao7CBLax3mQ1CsufCfvwVw02USE/FWSuRAB6H7D6SiiIWcDuXBw3mf27wNDpCfh/ItM

DrbQ==

X-Gm-Message-State: ACgBeo1jX2QzHinQMK6Wq4FMFxa1m1+FQdxMdw2inWF4xysiNEP9PZhj

jQY3sVXyugIpyOX0u/gzT+IiIUlfz8Pph8n3C6U=

X-Google-Smtp-Source: AA6agR6xvnytaeYdZtNYeqXPsePMrnbBVDx55vnGbLoW8Uts2rwTaJUif96M+Y6Cs+oO3uwBZiH44IALgPGc0RnLfgw=

X-Received: by 2002:a65:6755:0:b0:41d:70c1:be0 with SMTP id

c21-20020a656755000000b0041d70c10be0mr3145387pgu.99.1661516699418; Fri, 26

Aug 2022 05:24:59 -0700 (PDT)

MIME-Version: 1.0

From: "Dr. Umar Bello"

Date: Fri, 26 Aug 2022 05:24:45 -0700

Message-ID:

Subject: Greetings dear Friend:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000a846f905e7240097"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 13.3

X-Spam_score_int: 133

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Greetings dear Friend: I am contacting you on a business deal

of $19.5 Million US Dollars, ready for transfer into your account if we make

this claim, we will share it 60%/40%.100% risk free and it will be legally

backed up with government approved If you are interested reply for more details.

Content analysis details: (13.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.174 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[a0sis4ite31[at]gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[a0sis4ite31[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

3.6 NA_DOLLARS BODY: Talks about a million North American dollars

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_HK_NAME_FM_DR No description available.

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

3.1 RISK_FREE No risk!

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Greetings dear Friend:

--000000000000a846f905e7240097

Content-Type: text/plain; charset="UTF-8"

Greetings dear Friend:

I am contacting you on a business deal of $19.5 Million US Dollars,

ready for transfer into your account

if we make this claim, we will share it 60%/40%.100% risk free and it

will be legally backed up with government approved If you are

interested reply for more details.

Kindly reply for more details Waiting for your reply Make Sure You

Write To My Via E-mail Address...(umarbellod46@gmail.com)

Best regards

Dr.Umar Bello,

--000000000000a846f905e7240097

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Greetings dear Friend:
=C2=A0 =C2=A0
=C2=A0 I am co=

ntacting you on a business deal of $19.5 Million US Dollars,
ready for t=

ransfer into your account

if we make this claim, we will share it 60=

%/40%.100% risk free and it
will be legally backed up with government ap=

proved If you are
interested reply for more details.

Kindly reply=

=C2=A0for more details Waiting for your reply =C2=A0Make Sure You
Write=

To My Via E-mail Address...(umar=

bellod46@gmail.com)

Best regards
Dr.Umar Bello,

--000000000000a846f905e7240097--