Urgency Loan spam from gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 14 Sep 2022 14:03:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oYYaB-0008gE-VP

for dave@doctor.nl2k.ab.ca;

Wed, 14 Sep 2022 14:02:03 -0600

Resent-From: The Doctor

Resent-Date: Wed, 14 Sep 2022 14:02:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-psaapc01hn2235.outbound.protection.outlook.com ([52.100.0.235]:50849 helo=APC01-PSA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oYXsr-00047F-FD

for doctor@doctor.nl2k.ab.ca;

Wed, 14 Sep 2022 13:17:22 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=Nxg9OpTRiUM489h8SMZMIZiRxXJeSVD1n9EiQQpKNKXB1LEvZHM+KY/t4vGXrkidO0/J8orECD0OiqcBMkwocNiiYN+FdfhTMgXFDGbZq2mHmKirRqIOq1gScArJ+4EEB0iXkOh7sMF/uGHkRA9Dsp75n6MelFHC9ztUhJq9mFOOWmZ/daqZNsIoDlfx/CIfeDJHqOIk7ykg9rpnv8+B6SNxB/8r/fGbTaTYtzNPZr0CtcJVkuDy5/uent1V/3cU/3JhX4lPA9+USZFJZ06mL3o53KqwzI7uW4kPzzXb1L9iZ7dyPVvWbw/aSvRmNq6Akxjn0G/+F+mKFWdu+E56/Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=Bs10Md+15nMnyayKLyd22Uv+/ZH79IcFcpzuzGLq1Fg=;

b=I8KK3QIaKyUpSo+bGEQKb9yJ/RsorM8F7l+ybBe2PXM50ROfZ/SDy2E/Ot6JcvLPnX6vEnq4u7fHT3JIAyrAXy1bnhCIpIwe7Iwm5RF4rrlbHIc9cwnsdIjCNCF4ctCMK5vNUN9QnTe/42UVT/iOqyetbfgpYRtUpD2VRf58qRm4YCACVs4AzSEjf/Dso7dYBzbIeVq1bpy5dQpZ33b3cybc0Ijq2Qn4t+2ZncYjd86NDIKhAfsXc6yEGJUh+P8hmMkeRWksq9CuPANXNlgs9MNzfSq9gF84wUbl25sqwLx9BCxdjgo2O+9e6lAVmfC1QkUtvSFgB7QX6Lvmpczmsw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is

37.19.199.139) smtp.rcpttodomain=hotmail.com smtp.mailfrom=t4.cims.jp;

dmarc=bestguesspass action=none header.from=t4.cims.jp; dkim=none (message

not signed); arc=none (0)

Received: from PU1PR06CA0022.apcprd06.prod.outlook.com (2603:1096:803:2a::34)

by SEZPR04MB6220.apcprd04.prod.outlook.com (2603:1096:101:cd::7) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5612.19; Wed, 14 Sep

2022 19:16:51 +0000

Received: from PSAAPC01FT038.eop-APC01.prod.protection.outlook.com

(2603:1096:803:2a:cafe::8f) by PU1PR06CA0022.outlook.office365.com

(2603:1096:803:2a::34) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5632.15 via Frontend

Transport; Wed, 14 Sep 2022 19:16:51 +0000

X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 37.19.199.139)

smtp.mailfrom=t4.cims.jp; dkim=none (message not signed)

header.d=none;dmarc=bestguesspass action=none header.from=t4.cims.jp;

Received-SPF: Pass (protection.outlook.com: domain of t4.cims.jp designates

37.19.199.139 as permitted sender) receiver=protection.outlook.com;

client-ip=37.19.199.139; helo=User; pr=M

Received: from mail.prasarana.com.my (58.26.8.158) by

PSAAPC01FT038.mail.protection.outlook.com (10.13.39.241) with Microsoft SMTP

Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.20.5632.12 via Frontend Transport; Wed, 14 Sep 2022 19:16:51 +0000

Received: from MRL-EXH-02.prasarana.com.my (10.128.66.101) by

MRL-EXH-01.prasarana.com.my (10.128.66.100) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.1.2176.14; Thu, 15 Sep 2022 03:16:09 +0800

Received: from User (37.19.199.139) by MRL-EXH-02.prasarana.com.my

(10.128.66.101) with Microsoft SMTP Server id 15.1.2176.14 via Frontend

Transport; Thu, 15 Sep 2022 03:15:36 +0800

Reply-To:

From: Consultant Swift Capital Loans Ltd

Subject: I hope you are doing well, and business is great!

Date: Thu, 15 Sep 2022 03:16:18 +0800

MIME-Version: 1.0

Content-Type: text/plain; charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID:

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-Exchange-SkipListedInternetSender: ip=[37.19.199.139];domain=User

X-MS-Exchange-ExternalOriginalInternetSender: ip=[37.19.199.139];domain=User

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: PSAAPC01FT038:EE_|SEZPR04MB6220:EE_

X-MS-Office365-Filtering-Correlation-Id: 765aaa2e-dfd8-48a6-0e82-08da9685adc9

X-MS-Exchange-AtpMessageProperties: SA|SL

X-MS-Exchange-SenderADCheck: 0

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?windows-1251?Q?hTBMruGaIZAy6Q6qKTjuZxzhgu21TT5bHZrJI1F0gBh2Gy1p+kkrl4OP?=

=?windows-1251?Q?BjooOJKRYtGcFGNMiVM5kIf29Gfuba0pfid13/zaVv5P1QrXuk/C0Mgc?=

=?windows-1251?Q?1eqKcrLWdRs+NsWCwjo267JFK0xR4X4mX52qjo+TcumqphanC5AKdnXF?=

=?windows-1251?Q?YpehBBldYpCd9KoMncUpplDKfMwtT1AUbdlv/pMZCAgqoi5DlmldvWnk?=

=?windows-1251?Q?7RD2ZuDWr3J3h8ULihqIyGUdnb5EHFxx4ojfaLnMjE6oM9uiGyqVMjJI?=

=?windows-1251?Q?BR2/++tuQhFW+2bz5URaRCokSo4Te/IxOX2VLu+xLRhsRrwahty0a1mm?=

=?windows-1251?Q?L7kj0CUWU4um7XeCFMCrcjAwSt8V6vuxIPXZ60SRHkNlIapJ+hATUrA8?=

=?windows-1251?Q?paGmCyjDH2HC/wnQO4h0INfjr6Lx+PrYgU+qzQG1pNq4KXiaBGoZMIA9?=

=?windows-1251?Q?YWsCO8l+Ytb4dAr/oqGqUTJoFala9VDcvX7ecDZJgVl77P1IfgOiDStY?=

=?windows-1251?Q?mc/+joQtMvZdgowmIoK989A7x1l70g+Vv5Uqt/Q2h42k5RvUXNgKn7sa?=

=?windows-1251?Q?VrtcV4R/zCL16CcOjJQylAGedG1SAGRuLojh8LA6bAD+xz+q06nmruf4?=

=?windows-1251?Q?iY8KnnU8juuLE3FUBqwdU+BoyauxlIbAudKHzvcRA4wHCp9LNrZksgph?=

=?windows-1251?Q?oyVadzksrmdQzVngUKIGQsUeQhKgxaAjpjyslOO0zPtf5ycS10WfxRI6?=

=?windows-1251?Q?u0YwW7hTdqtS6Mcrp6LWUNVnPicZPmqSJmOdsL5rvsFUmiDSDnjaAfAW?=

=?windows-1251?Q?yxw2YAJqM5II7C+cW7Bx6IjOqxcaKn8WrQ0sZrU5pFgv8pOxm6+bJ9ar?=

=?windows-1251?Q?etU01jdhdLezmxM3EYR3sPcykq+neKD6qOSJYm2Zg7pFdK4AYVbBtCxg?=

=?windows-1251?Q?qOhuxnBUsoQu1K3fLl1wjtDw537Aj8hemNCUBhPzcC0QU2JS5JjYqzCp?=

=?windows-1251?Q?i2Gim1Ic8TANO6AlZ5MqrCDfRtbHN7B3em7pLHWf0Sqiki/m15dXPA9k?=

=?windows-1251?Q?ATGbmnYVc/Yfu5/nkzFnYmotPSLcb600BrjJiazHXd27PshF9yf45cPi?=

=?windows-1251?Q?tHBcWRK0LQi77q17kPo80Gm3jEAv3ayNZHjaTbNfpu0Z+Ui7R/Lo5s5L?=

=?windows-1251?Q?YFII8Vnavg9CoVf3Ndmv1FrwieqWhKQBgHbW3WYqiExWww91PDwvFOEo?=

=?windows-1251?Q?ODruLM99Bh3zYdl7Ik8uQQ28qHvrt0UX7B8UCEHeQz+xXWtAj48CMrOD?=

=?windows-1251?Q?DqSv2UEZczb0o4loE8uBqedKijJyXS7lFxmAqvqVHL7N22PnVnPuk9ZY?=

=?windows-1251?Q?be5PNf18BQMtDj+wb89pFSEeGSL1Gdl/7xrbV9s+2PeaALpUVwHvJtFr?=

=?windows-1251?Q?TFVlQ66H9uF+yCq20v/XQmxHjXluuTO/HYflt7tYJ5s=3D?=

X-Forefront-Antispam-Report:

CIP:58.26.8.158;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:User;PTR:unn-37-19-199-139.datapacket.com;CAT:OSPM;SFS:(13230022)(4636009)(136003)(39860400002)(346002)(376002)(396003)(451199015)(40470700004)(81166007)(498600001)(4744005)(5660300002)(36906005)(7416002)(7366002)(109986005)(7406005)(35950700001)(9686003)(8936002)(316002)(32650700002)(41300700001)(40460700003)(82310400005)(956004)(336012)(32850700003)(31696002)(26005)(86362001)(82740400003)(8676002)(6666004)(31686004)(70586007)(156005)(40480700001)(2906002)(70206006)(2700400008);DIR:OUT;SFP:1501;

X-OriginatorOrg: myprasarana.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Sep 2022 19:16:51.5235

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 765aaa2e-dfd8-48a6-0e82-08da9685adc9

X-MS-Exchange-CrossTenant-Id: 3cbb2ff2-27fb-4993-aecf-bf16995e64c0

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=3cbb2ff2-27fb-4993-aecf-bf16995e64c0;Ip=[58.26.8.158];Helo=[mail.prasarana.com.my]

X-MS-Exchange-CrossTenant-AuthSource:

PSAAPC01FT038.eop-APC01.prod.protection.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR04MB6220



Hello,



I hope you are doing well, and business is great!

However, if you need working capital to further grow and expand your business, we may be a perfect fit for you. I am Ms. Kaori Ichikawa Swift Capital Loans Ltd Consultant, Our loans are NOT based on your personal credit, and NO collateral is required.



We are a Direct Lender who can approve your loan today, and fund as Early as Tomorrow.



Once your reply I will send you the official website to complete your application



Waiting for your reply.



Regards

Ms. Kaori Ichikawa

Consultant Swift Capital Loans Ltd

urgency spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 14 Sep 2022 14:02:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oYYZX-0008aF-Lw

for dave@doctor.nl2k.ab.ca;

Wed, 14 Sep 2022 14:01:23 -0600

Resent-From: The Doctor

Resent-Date: Wed, 14 Sep 2022 14:01:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f41.google.com ([209.85.216.41]:37393)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oYWQ0-000KIO-Us

for doctor@doctor.nl2k.ab.ca;

Wed, 14 Sep 2022 11:43:33 -0600

Received: by mail-pj1-f41.google.com with SMTP id n23-20020a17090a091700b00202a51cc78bso13531520pjn.2

for ; Wed, 14 Sep 2022 10:43:03 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date;

bh=g/tjtslk3YwUH9mq19cpjyvfihX0DkWPBq4jm0zgbOI=;

b=fD/cVIoROpplK3ORS84/gk+kX/+K3S5jywOfX+OQ/36vqSzN9qwssJCtpiy7rr+NPR

XKMjFYmy9V3PmgI2aPTjWoq+SKR9b0dAm2CiKWpmjFTGPnYQJwk2I5FU4pm0ZDS6WqTO

4/GeQi6/N+IW7zd8TsqoSYpn1MU/uPTTtFNAVNl7C0nqI+idzTa4VyLEB8OJ703W+AIN

fvtZO8FUnu+kH5t3xWTPUSQab8M+6OW7lHFWcKCCKdXFHS/fxZCgZm0IueTF1uTlJlsH

LQbpGL4hDCE54J8jROiJ5hh8d1HWDDh1tGGZlRja/GdtfaK0EVbesmI8BOY9qHYIXESY

imkQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date;

bh=g/tjtslk3YwUH9mq19cpjyvfihX0DkWPBq4jm0zgbOI=;

b=ebe4OrLPGE48a5CJvRssNcKR9lXPgsD42Dxrt9ZMXd9qG71gaugADCikI15MHdBNgE

PpQ0waOD+eHCmhUp2zVj29lhYRRrUOFhmzycSwv66X4j9TUEYwiJI4qNrD0GTmrm9LGp

i3B9dEr8euQfWlZIz5brMpqf8+8ymQDYmFYrc86pV4XYt+KXaHpnoZqvDOpW0xK4mZyK

s+nwwkSrlI3Q5Ij+QWmrX16EYsWnUs+kOln3Ye1qrdEmjCdPS6QN0GyrcljHc1BzeaDS

2OE4Gg0XJfE/iesbM80qSE2onITqcXqNyQnIRA6JV5Qoi/DfDNVFMpvn3qKUcp8JoeTC

9f7A==

X-Gm-Message-State: ACrzQf1tGC6AGdyBiMVg4kQZ/+RWt8PicA/yBMs1+pIKjzSZRaj2kesN

3hrNoN9vNpTeQRjZLpkX0d0vw3ZUQp+XpoxV7CU=

X-Google-Smtp-Source: AMsMyM7itZB0PLepWebZrYPSg9k6aQVjXvKE0Bp6o/wleMr57jUMiFWmiZgMKiiLEwI7YJ/s6TMR9OjdXRLl2s9Zldw=

X-Received: by 2002:a17:902:aa81:b0:173:3f68:e768 with SMTP id

d1-20020a170902aa8100b001733f68e768mr137320plr.80.1663177378341; Wed, 14 Sep

2022 10:42:58 -0700 (PDT)

MIME-Version: 1.0

From: Zotchi esq

Date: Wed, 14 Sep 2022 17:42:46 +0000

Message-ID:

Subject: care

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000d5a73b05e8a6a823"

Bcc: doctor@doctor.nl2k.ab.ca



--000000000000d5a73b05e8a6a823

Content-Type: text/plain; charset="UTF-8"



I sent this letter to you a month ago, but I'm not sure if you got it, I

did not hear from you.



Thanks and regards.



--000000000000d5a73b05e8a6a823

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






iv>

=C2=A0 I sent this letter to you a month ago, b=

ut I'm not sure if you got it, I did not hear from you.

=C2=A0 =

=C2=A0 Thanks and regards.=C2=A0 =C2=A0 =C2=A0=C2=A0




--000000000000d5a73b05e8a6a823--

even lottery spam from Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 14 Sep 2022 14:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oYYYz-0008V8-9r

for dave@doctor.nl2k.ab.ca;

Wed, 14 Sep 2022 14:00:49 -0600

Resent-From: The Doctor

Resent-Date: Wed, 14 Sep 2022 14:00:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-am7eur03olkn2034.outbound.protection.outlook.com ([40.92.59.34]:1921 helo=EUR03-AM7-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oYW3D-000HyE-6t

for root@doctor.nl2k.ab.ca;

Wed, 14 Sep 2022 11:19:56 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=h4+1ih5YCUDRxSzFGf4yPcPOooWJ3fwtgZ3ngAV4u46QDlvdJrsnN32+5CU/sswXdH08agVbocrvnvMeXiYweox4ELf+z9/gW5E2HjT1YY94a+THbeVK03/15aOEGksePn1rMnPveAkkzUJas01jiCaxJS96oZQRIdkFhM6Q1EhTeq6Jm3+F5NhMF9ke2/cctnI+l5i/RMzMG6pX7Qn/JQD2OtLPXbMrhBQ3qVS6npm/GaddxXPfXGaxm7Eg2lEkjO3X/OFIpW9ocZK0VHmX0ZIhmZ4n0V3HS5czVjXmwuLd11hdJzVziqQP1KqT4teDqD682lQPygtuKTVjL3WXKA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=7XBtHxp01DL1jRJZFi1TcQAzdkAKwQmuycYVzZel0lM=;

b=ahgRpkIh1j9zgfderR/Rb8vKNkupm3BfQR54je7EUWJ6/UkZcUPEcWJYFR4kjD37W3oRxTm0M9MiF+SKZFE774mgq5tI0BsMxzi1okZ+LUwy9dsujtyuNl2hz04HgM6qh4oalNxVh/Fzo6ZmXe69A0H9ImHBtyJo+i3ansXiUkiXNr0ymAp2jgdridj/W8M+2BAr1tzNP+mAnk8s2ecIa9w1/kvPlbuovoZ/VsT6NRl7KOxhH07c5Ro8GxVXjjgiOEZzrbU41IUHXiGnpMEymLvgPxzWz1NaD9Ozus7rGWv+66cItxEmdIykf0/0V9y7gBGAlAchwaRyaCb0YCYawQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=7XBtHxp01DL1jRJZFi1TcQAzdkAKwQmuycYVzZel0lM=;

b=cAi2ui7PrqKeoE5/HpWsB7F1bMyO0/mZZUvcZjy/bc8MU5gPVdelN0xYebF5AeaeHilOrUntes+GI3qqaC1sUC2Q4jjtd2wFEZSFcRPAFLZDgEUwS5s4WjvAyb30AA4YmMH0wAjBrOyZnSqvmNX7JLea3d+o2iaBqbXmrT3iltE/2cuPtnvGooq0w+Tyeq442LW63TGNlCzcF2gxbiO1vqi/YZRd+VZEYLU/sNlYDRsliWAJx47+ERhv55XBeVUPak25HF9GD14w3v6wW+MQ9YLzpI0ffa8osNoWMu/cI22smdacKh7k370kW8yvMOyVa1x7/WNiOb7djm7vrQonJA==

Received: from AM8P194MB0980.EURP194.PROD.OUTLOOK.COM (2603:10a6:20b:24a::11)

by AM8P194MB1579.EURP194.PROD.OUTLOOK.COM (2603:10a6:20b:36e::21) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5612.19; Wed, 14 Sep

2022 17:19:24 +0000

Received: from AM8P194MB0980.EURP194.PROD.OUTLOOK.COM

([fe80::5dda:deab:c453:d1fc]) by AM8P194MB0980.EURP194.PROD.OUTLOOK.COM

([fe80::5dda:deab:c453:d1fc%5]) with mapi id 15.20.5612.022; Wed, 14 Sep 2022

17:19:24 +0000

From: Microsoft- Corp.

Subject: Notification Email.

Thread-Topic: Notification Email.

Thread-Index: AQHYyF4Y/wT7Co4c70yv1PDEEroo+A==

Date: Wed, 14 Sep 2022 17:19:24 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [nSz8uPSlv+wEWG8u15pvSx53XmfiCH6L]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: AM8P194MB0980:EE_|AM8P194MB1579:EE_

x-ms-office365-filtering-correlation-id: c709be8a-86d8-4873-f4cb-08da96754510

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam: BCL:0;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?h6whK5MglHI6vkgZZWgugm1leQ4gmiOtkxdcKQfH6F3LDNqPkSXn810lQx?=

=?iso-8859-1?Q?b4cpWT7hDmMkeVqOw9nV+a7E7bHGcsotiyyR23CzUYLuM1mHLLfqcIi19H?=

=?iso-8859-1?Q?zdZQXIbGCvIkKN8gKGoGAwrZt14lTjcsxYsW8tCHiWPF03Rb+ATAjYOKRs?=

=?iso-8859-1?Q?iGx2FNql0819gne4qHn6MxBGmMECjCiUWeXNLerCUkF0tY1jXZttUSDC2l?=

=?iso-8859-1?Q?HZXzAaWN9mmOyb7wlf41BjzEB6Hxt+XWa6P/JRpBcTsUbrWntdZdzAU+YD?=

=?iso-8859-1?Q?MtX3nicbA4a7XIwqHlEesaUjYqiTK/4UCevWDekBYxouLbjqHi6zylmu8V?=

=?iso-8859-1?Q?O9GAiuVlDgdW7vPTeEO1ZXDYHKhgN1hdIE3cE2WWyXr1PgZ0TTUj3Rz24F?=

=?iso-8859-1?Q?Em3CnZbIPhHvylFocDcuEjh57uwN4thTesApINYfGllBWLJrk1y33FuAHL?=

=?iso-8859-1?Q?LfgOLoLGMgYruZP0nQ/djWZtcxFrRGVoMUBqtkvIypI/mD4NC5sjTOwF/8?=

=?iso-8859-1?Q?8UwHSXi2r9Z9m04Xd2+8i0mJ/jS+npB+6dxuRQ0RJSCvq1s3uVHK+MmVw5?=

=?iso-8859-1?Q?7GR6B5+kla5XD0e5YNUUv/wVUvCzRasReBNcvzhIvDYqNhf6AP5Amf5iR8?=

=?iso-8859-1?Q?aQdQw8O/aD2KbZBu3VMkwDjJB3Lkc8dH9emDAcxL7GuvkQxMlPJN10IDJD?=

=?iso-8859-1?Q?yxR5Ig4cBJUSKDT3iBmePkJTUCEvcHbV2jwKtoJ6XHYDGVZkTwblbu8BjZ?=

=?iso-8859-1?Q?EoFaUdVxDOOZI5xfX5OD5MznXgJ+WYf2LL5QRr/q7YmCCOlk6RrUnhzynz?=

=?iso-8859-1?Q?SrGRwbHi1ZHU2z7skPuriQKk4LcuQO0sVEJYf4tOUIgCT+trJo5YrC33tQ?=

=?iso-8859-1?Q?eGZsSFeHXlL4HlfvbWs7ixH4rhrc0NKL3JfG3Cg8Dj0SmIeHERu+ocKPuX?=

=?iso-8859-1?Q?YkhXZzfOip6cwxEtO2IKyzDjdTiWBDOYO92sBhR3kslN4lA2dP7Sgw6Uek?=

=?iso-8859-1?Q?2yYr+BJgn4aGL4xKMjnnufrv/TrkpOUPCq6/5d1zqb+hcWr7FaTF7LRzMv?=

=?iso-8859-1?Q?Jh9crGxQ4IYEos3sKMifUpfpYM66mBac2gMnhFKYyw3w/amCgeQ+CzZ2o0?=

=?iso-8859-1?Q?G/a2umVJPeHNVX8WzN7VcHYFpdMlWchASNlrmPlAGEK1Kuorvho9uJURuQ?=

=?iso-8859-1?Q?kOYYL7sLc3B2/HQZsiFWWQnKZhyyT7CNPHy22+k0RSzWI5j361Epmj0k3n?=

=?iso-8859-1?Q?J7EN2RddgWGvmmAsAGLNOBGC37DZ1+Y5ZBdLBa4iRoTa/8ug9PTiLjxf7K?=

=?iso-8859-1?Q?sOQP?=

Content-Type: multipart/alternative;

boundary="_000_AM8P194MB098081AB3140B5CA95DB4D69A7469AM8P194MB0980EURP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: AM8P194MB0980.EURP194.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: c709be8a-86d8-4873-f4cb-08da96754510

X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Sep 2022 17:19:24.0269

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM8P194MB1579

X-Spam_score: 13.2

X-Spam_score_int: 132

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Attn: Congratulation!!! Your e-mail address has won (US$2,000,000.00)

for 2022 Microsoft Award. Serial numbers MDB/002 0869958/09 Contact (ADVOCATE

FRANKLIN EDWARD) immediately; through his email address (f [...]



Content analysis details: (13.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[webkk38[at]outlook.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[webkk38[at]outlook.com]

1.2 MISSING_HEADERS Missing To: header

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email

service

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

3.0 BIGNUM_EMAILS Lots of email addresses/leads

0.0 LOTS_OF_MONEY Huge... sums of money

0.8 HK_LOTTO No description available.

1.0 FREEMAIL_REPLY From and body contain different freemails

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal

information

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Notification Email.



--_000_AM8P194MB098081AB3140B5CA95DB4D69A7469AM8P194MB0980EURP_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Attn:



Congratulation!!!

Your e-mail address has won (US$2,000,000.00) for 2022 Microsoft Award. Ser=

ial numbers MDB/002 0869958/09 Contact (ADVOCATE FRANKLIN EDWARD) immediate=

ly; through his email address (franklinedward44@aol.com) or phone number +2=

7736394004 and forward him your Winning No.(19-45-87-36-76-38(77), to redee=

m your winning prize, All participants were selected randomly from Worldwid=

e Web site through computer draw system and extracted from over 100,000 ema=

il addresses of companies and Individuals.



Sincerely,

Dr. Elizabeth Henning.



Copyright =A9 2022 Microsoft! Inc. All rights reserved.



--_000_AM8P194MB098081AB3140B5CA95DB4D69A7469AM8P194MB0980EURP_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Attn:






Congratulation!!!


Your e-mail address has won (US$2,000,000.00) for 2022 Microsoft Award=

. Serial numbers MDB/002 0869958/09 Contact (ADVOCATE FRANKLIN EDWARD) imme=

diately; through his email address (franklinedward44@aol.com) or phone numb=

er +27736394004 and forward him

your Winning No.(19-45-87-36-76-38(77), to redeem your winning prize, All =

participants were selected randomly from Worldwide Web site through compute=

r draw system and extracted from over 100,000 email addresses of companies =

and Individuals.







Sincerely,


Dr. Elizabeth Henning.







 Copyright =A9 2022 Microsoft! Inc. All rights reserved.










--_000_AM8P194MB098081AB3140B5CA95DB4D69A7469AM8P194MB0980EURP_--

lottery spam from Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 14 Sep 2022 14:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oYYYI-0008R0-HH

for dave@doctor.nl2k.ab.ca;

Wed, 14 Sep 2022 14:00:06 -0600

Resent-From: The Doctor

Resent-Date: Wed, 14 Sep 2022 14:00:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oln040092075094.outbound.protection.outlook.com ([40.92.75.94]:26852 helo=EUR04-VI1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oYVnE-000GIg-Qp

for doctor@netknow.ca;

Wed, 14 Sep 2022 11:03:25 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=UnweDs7GLjHfUiIFR2UTVgeUFx93pDs69atcV5r075+ANkVM404I2/6CO2YmG4gXM3wi6lZH1Uv7mGr+ycAB5PTAMLqyGKN9ozTz3OctZMcKyspIHz2WFL0/vePXzgNiHgTBexA/NKr3KP0jhFhhcjI3HXooar50oIM322T7ADterMnIE/ZX3dZkosyIU4HkLZeceIgr/sivS9WCEL9DWpHEWTHSckxIkH1fyO9rg+yRn3f1vUD+nuS0Q6sJ2MYvefTyGgcTVYfta58QSIBKRSDJipQCsnIVpCmzyoE9DsFml/q0zKnjYVFLvTVOeASIUygyGtSuZEsHlylsLYaH6Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=HnLZkHeA8fA0aMTwHJ0SdUhD/LN3rBV6W5Py+4DJ41Y=;

b=lfas8+WyTgiACOkSCaQIpdOVnfvdPmQgeKpmskBsV1LkGJB2W0v+lZJh32gSOavrx7wV6TAnidFEYUAvoc9KIURMs1VSNy8fciZPRHg9Ddty/mA1Vq0+vHFF5rBZGSqqp/3QbklsZYkhy97aQoDwnlnMV1iunXM1rH/GwKn9krqX4Ah496O1nigZle/YlJUwxfMHd29Uy9Y/At1UOzRfGmwqs84xW2usjRZFiY7A5rFm2CJt6y9KTr0ZdxyznLcrUe4ie9sjA2fHAt+Sv1iZ0hnlRfsjwNZxex3mOBftFsD7oqy0XETgn7bW/fdkusNFubuCOd06/XYGUkTPeWXYHQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=HnLZkHeA8fA0aMTwHJ0SdUhD/LN3rBV6W5Py+4DJ41Y=;

b=JIx5Mc2k8qRG46/lA68ZRZEXQHqGSNU8ozprqw29qqZftBhstgYHU5+E2Ck7Pb2QHxdMe0HG/Epcs2IdKAmpMa8UwdtMvn2cijykKTDfbblPzhDbNJ8Y39QX61ZjwktHIXO3NuSnHNQ+OinRifa2AwnerMrFoeX4Lt2MQyjKW4iPmhgWm2U10wPpXmVEu2OzxyO32kewOWoAZAkBmebsoeXO9WwEopRhm1xcrv97QQ/cVR+sHTWAMrP6i43pBegPx7Vo5Djapaw2PJkDEE3vfLa6to4oiNnGY3/2drPpxeyriNt70J7rVQEmLlBI+gqPnmNHMDQ7qzbX/52LPQNVqg==

Received: from DU2P193MB2321.EURP193.PROD.OUTLOOK.COM (2603:10a6:10:2fb::8) by

AS8P193MB2301.EURP193.PROD.OUTLOOK.COM (2603:10a6:20b:446::19) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.5612.18; Wed, 14 Sep 2022 17:02:53 +0000

Received: from DU2P193MB2321.EURP193.PROD.OUTLOOK.COM

([fe80::41ce:357d:db5c:3a6b]) by DU2P193MB2321.EURP193.PROD.OUTLOOK.COM

([fe80::41ce:357d:db5c:3a6b%4]) with mapi id 15.20.5612.022; Wed, 14 Sep 2022

17:02:53 +0000

From: Microsoft- Inc.

Subject: Notification Email.

Thread-Topic: Notification Email.

Thread-Index: AQHYyFvTcVV8RtGZY0uBJNEvIz9TIA==

Date: Wed, 14 Sep 2022 17:02:52 +0000

Message-ID:



Accept-Language: en-GB, en-US

Content-Language: en-GB

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [Kd6raBTIOz63w+YaPQcAKbIW6L3deAXw]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: DU2P193MB2321:EE_|AS8P193MB2301:EE_

x-ms-office365-filtering-correlation-id: 37d0a9e1-6c26-4538-9db2-08da9672f64a

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam: BCL:0;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?YfF7kBX6w4CxYs38lrd2nPY+rNoF3SGwLviOOxuJDMB2MZZeulCYw+MEHM?=

=?iso-8859-1?Q?CH9WsfbF2y4NEhtgX5J5tBD2yHyGTvJZCbpl5ggyerbi4Q9x+H9h2g5ZoG?=

=?iso-8859-1?Q?U9SSC+WaUlHIxMTqc4NCD4tSDZWspykGcII11oiMGL3mMeSl89Eq52laZ/?=

=?iso-8859-1?Q?AfAaTwQzQuFAUgLlgz9KyZsBSeUTaAiiPUn11F6am8Awjrc+7PtYTuTt2x?=

=?iso-8859-1?Q?nOjSCGQT5mj6zWi6/dyHVEuzKgO0mBiqYjsl4BtK8QhNG1p9t3wsEXoUGp?=

=?iso-8859-1?Q?/YhFUZzFn6x2KsxruJSu1gEGmAd1OLifRZc3iFMYt2DcenY4a8I50/GbO6?=

=?iso-8859-1?Q?9w2Hd5VTKO5HG4HSzW3NFHyH6Mj1OLw+ax60VylTRKEIIibj0kzod6J8v0?=

=?iso-8859-1?Q?FLLyjpHh/WKIgDAzmC3Z2pI10b3B2EKsLr4efDpBNOmeUeoY6LEin63NSE?=

=?iso-8859-1?Q?xPi3xpSp+QzXMpCIAY1fS9J5nsGR9+HXqSRnlwKGx4VI7DCEgrceMBmRCN?=

=?iso-8859-1?Q?VmJplKermvoHOgSmtMza/1gYZ9yfRPAr1+a8reqAbBqaMU3+fRWzyyfS5q?=

=?iso-8859-1?Q?QOPhdxTjRtKAaQp27sUhCsUKjMLRxJ0PN8Fc5SzegEkFrfjPAvHs2cYDAm?=

=?iso-8859-1?Q?dhLL+b7js0zDRkqVoHrmOHQfqOT0emh9Ph4q823OaVDzEAGIVMo69Qu3ZX?=

=?iso-8859-1?Q?HL9+9poiQ1sf/KYLnPAR6xnUYeLUXKnooI5777AHua7vgtPzy2kL0QK0YN?=

=?iso-8859-1?Q?5PmiRzpEAJ6UO6VNPR6unwgnyFgvWqF7ElSuaz5Xw25557NE3/Zzkvdm/l?=

=?iso-8859-1?Q?9XveA8a6xWHURr6mhPUai+Yh75EFSKvrb5gdQbP6api1NNRk+9zV+xfhLP?=

=?iso-8859-1?Q?ukk3II+C7i3IWMAOBZgRFOAynvHt4BQPmBHPzr0/1YtrQTZnVTJ5jJBLTV?=

=?iso-8859-1?Q?rBnvPx+qwC7ZCwoQuEUeNxretz9YFoJKrRptEDb6W+oW+LzX3aKQF1btbl?=

=?iso-8859-1?Q?lzgaP8Lk79HIpdQX5euuGPSxLOkcPQvB66c+hlKCxmF27esFgQ+MiPLh5L?=

=?iso-8859-1?Q?1jkf92NR3i/ZOaQt8RdPa0B87mSrp/YNXufamcJcMMFfIbUnd5fuuU3VDx?=

=?iso-8859-1?Q?dvUz+vOl82p3aOohbZCHrb4UTxLcrNAcI6pcG3UKTVW2MPN4ejAgrOb17B?=

=?iso-8859-1?Q?Hv85C6HWzoeIvgMmiDXP5HLaGx4U0V9TzRPLMiR/eSimgmd3rRwVBHyueY?=

=?iso-8859-1?Q?XdDh9kS6t0+S8bLrxwwNCl7ulCqFpf/o0zV0FfnSD+fd9GbhCLLOPcj0Aa?=

=?iso-8859-1?Q?fLo/?=

Content-Type: multipart/alternative;

boundary="_000_DU2P193MB232105AD26D2DD47EB6898DDDF469DU2P193MB2321EURP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: DU2P193MB2321.EURP193.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 37d0a9e1-6c26-4538-9db2-08da9672f64a

X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Sep 2022 17:02:52.8557

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8P193MB2301

X-Spam_score: 12.8

X-Spam_score_int: 128

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Attn: Congratulation!!! Your e-mail address has won (US$2,000,000.00)

for 2022 Microsoft Award. Serial numbers MDB/002 0869958/09 Contact (ADVOCATE

FRANKLIN EDWARD) immediately; through his email address (f [...]



Content analysis details: (12.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[wssswweb[at]outlook.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.75.94 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 MISSING_HEADERS Missing To: header

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email

service

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

3.0 BIGNUM_EMAILS Lots of email addresses/leads

0.0 LOTS_OF_MONEY Huge... sums of money

0.8 HK_LOTTO No description available.

1.0 FREEMAIL_REPLY From and body contain different freemails

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal

information

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Notification Email.



--_000_DU2P193MB232105AD26D2DD47EB6898DDDF469DU2P193MB2321EURP_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Attn:



Congratulation!!!

Your e-mail address has won (US$2,000,000.00) for 2022 Microsoft Award. Ser=

ial numbers MDB/002 0869958/09 Contact (ADVOCATE FRANKLIN EDWARD) immediate=

ly; through his email address (franklinedward44@aol.com) or phone number +2=

7736394004 and forward him your Winning No.(19-45-87-36-76-38(77), to redee=

m your winning prize, All participants were selected randomly from Worldwid=

e Web site through computer draw system and extracted from over 100,000 ema=

il addresses of companies and Individuals.



Sincerely,

Dr. Elizabeth Henning.



Copyright =A9 2022 Microsoft! Inc. All rights reserved.





--_000_DU2P193MB232105AD26D2DD47EB6898DDDF469DU2P193MB2321EURP_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Attn:






Congratulation!!!


Your e-mail address has won (US$2,000,000.00) for 2022 Microsoft Award=

. Serial numbers MDB/002 0869958/09 Contact (ADVOCATE FRANKLIN EDWARD) imme=

diately; through his email address (franklinedward44@aol.com) or phone numb=

er +27736394004 and forward him

your Winning No.(19-45-87-36-76-38(77), to redeem your winning prize, All =

participants were selected randomly from Worldwide Web site through compute=

r draw system and extracted from over 100,000 email addresses of companies =

and Individuals.







Sincerely,


Dr. Elizabeth Henning.







 Copyright =A9 2022 Microsoft! Inc. All rights reserved.













--_000_DU2P193MB232105AD26D2DD47EB6898DDDF469DU2P193MB2321EURP_--

Nigerian Gmail spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 09 Sep 2022 08:03:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oWdlO-000CdT-Ea

for dave@doctor.nl2k.ab.ca;

Fri, 09 Sep 2022 07:09:42 -0600

Resent-From: The Doctor

Resent-Date: Fri, 9 Sep 2022 07:09:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f169.google.com ([209.85.221.169]:44960)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oWcTa-0008s7-LW

for root@nl2k.ab.ca;

Fri, 09 Sep 2022 05:47:20 -0600

Received: by mail-vk1-f169.google.com with SMTP id 134so618947vkz.11

for ; Fri, 09 Sep 2022 04:46:57 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date;

bh=wcSJ2UlmxX2c22GD/G38iY1BHpOyN/j+NagbeGKSeKU=;

b=DAhYBIS6f8MfAcN6kJk3wOrD+RrpZPKhqI13F/uYftQf1wNmeyFEVfrjVj/5J+ISyb

4gKrASztBp4ltBD4KLdbkHJHwgn+d/RDZ5HFg62WMMFUYi8/THkS++sKUbFUhFTbD63I

14ToeUmEDruz3E2bGzQxA8g3XsRcD3ZOdxoAkRj6glASfMYTND2GXEdAUaHuYJIs93XU

riTAexA+l/+XSz6b8AeNah9klsjWJdrP4BWzez+hsYDkj1DTfuMHTTOHT/eUCnE6USa8

yujzUkvM+/IySQcjE1ymDbj4/48IeF6JuNyjxyZIPUwTfU56C+5VhILsobwox5hJlggK

+OAQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date;

bh=wcSJ2UlmxX2c22GD/G38iY1BHpOyN/j+NagbeGKSeKU=;

b=YDOoE+a76MHFHrVLFwMtfkmGjBWO7u/u7QsCnr9RxGUgO1RMERNy8k56Kdsr7FjMIe

QT6PJtY8q9dLFyAi9oa9ON9jhj0coCFES0T++Qjzsy28mmEzAp1Xb80v5JbKg0bOjxsN

Q75z6jYiJ7GgGdEwkfFG9bdIwAOIJuyTtlObDdqzmQCZs0fwc35InKIPgYAkCq+AVilJ

iwjSSeiO3uMmpFXQpQIqf90VdYqcuPbrRIIjhnPW9DjZ6Dg7uk4F0oUrdn2OOLHFhY+y

1PBGzhjbdNWLf/q1FbrnBj8nAHKbMtsZehB5AoaoEsePChCJnwumK7JA/HgP5AXDVuT/

gMdA==

X-Gm-Message-State: ACgBeo0l0Qdxsgl262Jxpe0pAj8/6e6zugmhoXsOmqx5X8yhkpFrlJC2

MZiGm6eqCA1yWoCxTKjcTgIiVf79UMH9PVKoyuM=

X-Google-Smtp-Source: AA6agR6XCYHHE7PfUWf6ngZ2WF8CBixOVtaUOE1xkZ3NfqPC+5YaL9LTBURLZZNrEJoUqtvx1SQ5ANAfLejCTFAhN6w=

X-Received: by 2002:a1f:249:0:b0:3a1:e0fb:5402 with SMTP id

70-20020a1f0249000000b003a1e0fb5402mr2061979vkc.24.1662724011151; Fri, 09 Sep

2022 04:46:51 -0700 (PDT)

MIME-Version: 1.0

Reply-To: bricelodugnon188@gmail.com

From: "Mr. Brice LODUGNON"

Date: Mon, 5 Sep 2022 21:26:13 +0000

Message-ID:

Subject:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000000b57f905e83d1ae4"

Bcc: root@nl2k.ab.ca

X-Spam_score: 18.7

X-Spam_score_int: 187

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello Peace be to your home and your family I wish to inform

you that it was not by mistake that I contacted you in this transaction because

I was left with no other option than this.



Content analysis details: (18.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[bricelodugnon188[at]gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.169 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[edwarddavid3301[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[edwarddavid3301[at]gmail.com]

0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

2.5 MILLION_USD BODY: Talks about millions of dollars

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 T_MONEY_PERCENT X% of a lot of money for you

0.0 XFER_LOTSA_MONEY Transfer a lot of money

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?}



--0000000000000b57f905e83d1ae4

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello



Peace be to your home and your family



I wish to inform you that it was not by mistake that I contacted you in

this transaction because I was left with no other option than this.



I think you're a respected, considering the fact that I got your email

address from internet, database of people search the Internet during my

research for a discrete foreign partner who can help me to do in the event

of its success.



I am Mr. Brice LODUGNON, a banker by profession, In my previous email, I

was referring to my deceased client=E2=80=99s fund with his bank of which I=

have

received several messages from the bank asking me to present a closest

relative of my client for the claiming of the fund abandoned in the bank

totaling to the value of US$3,500,000.00 (Three Million Five Hundred

Thousand United States Dollars Only) from Account N=C2=B0: 2047086137



There's no doubt that the bank will sit on the money if I don't locate any

of his family members or close associates so after giving thoughts about

this, I decided to utilize this opportunity by bringing you in as the

relative or associate to enable them release the funds to you under the

probate rule and you received the money, you and I will share it

conventionally. Hence, my reason for contacting you with this urgent

message.



You must understand that in the banking industry, chances or opportunities

like this are common but not heard. People put their monies in banks and

some of these accounts are either coded or confidentially operated,

therefore, when such people die what do you think that happens to these

monies when nobody comes for their claims? Well, this is one of the

numerous avenues good "free" monies are made within and amongst the bankers=

.



Please I want you to observe my statements carefully; this fund is real and

is lying in the bank as I am talking to you right now, and with my position

as the Senior Accountant Auditor; I will do all within my powers to get

this fund approved in your name as the inheritor/beneficiary of the fund.



The truth is that I physically do not know you before but I am aware that a

transaction of this nature and volume of the fund to be a success requires

trust, confidence.



Your contact was an act of God and why I had to choose you are divine and I

cannot question the Almighty



This is risk-free and legitimate so, we'll not have any legal trouble

executing this transaction. At your response, I will provide more details

and procedures of the transaction.



For this success of this business, I agree to offer you 50% and 50% will be

for me. Please, note that I put so many things into consideration before

agreeing on his terms and I hope that you will appreciate it Please, If

this business proposition offends your moral and ethical values, do accept

my sincere apology. I must use this opportunity to implore you to exercise

the utmost indulgence to keep this matter extraordinary confidential,

whatever your decision, while I await your prompt



Response.



Sincerely,



Mr. Brice LODUGNON



--0000000000000b57f905e83d1ae4

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




ily:Helvetica,sans-serif;color:rgb(38,40,42)">Hello






-size:initial;background-repeat:initial;background-origin:initial;backgroun=

d-clip:initial">
rif;color:rgb(38,40,42)">Peace

be to your home and your family






-size:initial;background-repeat:initial;background-origin:initial;backgroun=

d-clip:initial">
rif;color:rgb(38,40,42)">I

wish to inform you that it was not by mistake that I contacted you in this

transaction because I was left with no other option than this.=






-size:initial;background-repeat:initial;background-origin:initial;backgroun=

d-clip:initial">
rif;color:rgb(38,40,42)">I

think you're a respected, considering the fact that I got your email ad=

dress

from internet, database of people search the Internet during my research fo=

r a

discrete foreign partner who can help me to do in the event of its success.=






-size:initial;background-repeat:initial;background-origin:initial;backgroun=

d-clip:initial">
rif;color:rgb(38,40,42)">I

am Mr. Brice LODUGNON, a banker by profession, In my previous email, I was

referring to my deceased client=E2=80=99s fund with his bank of which I hav=

e received

several messages from the bank asking me to present a closest relative of m=

y

client for the claiming of the fund abandoned in the bank totaling to the v=

alue

of US$3,500,000.00 (Three Million Five Hundred Thousand United States Dolla=

rs

Only) from Account N=C2=B0: 2047086137






-size:initial;background-repeat:initial;background-origin:initial;backgroun=

d-clip:initial">
rif;color:rgb(38,40,42)">There's

no doubt that the bank will sit on the money if I don't locate any of h=

is

family members or close associates so after giving thoughts about this, I

decided to utilize this opportunity by bringing you in as the relative or

associate to enable them release the funds to you under the probate rule an=

d

you received the money, you and I will share it conventionally. Hence, my

reason for contacting you with this urgent message.






-size:initial;background-repeat:initial;background-origin:initial;backgroun=

d-clip:initial">
rif;color:rgb(38,40,42)">You

must understand that in the banking industry, chances or opportunities like

this are common but not heard. People put their monies in banks and some of

these accounts are either coded or confidentially operated, therefore, when

such people die what do you think that happens to these monies when nobody

comes for their claims? Well, this is one of the numerous avenues good

"free" monies are made within and amongst the bankers.
n>






-size:initial;background-repeat:initial;background-origin:initial;backgroun=

d-clip:initial">
rif;color:rgb(38,40,42)">Please

I want you to observe my statements carefully; this fund is real and is lyi=

ng

in the bank as I am talking to you right now, and with my position as the

Senior Accountant Auditor; I will do all within my powers to get this fund

approved in your name as the inheritor/beneficiary of the fund.
>






-size:initial;background-repeat:initial;background-origin:initial;backgroun=

d-clip:initial">
rif;color:rgb(38,40,42)">The

truth is that I physically do not know you before but I am aware that a

transaction of this nature and volume of the fund to be a success requires

trust, confidence.






-size:initial;background-repeat:initial;background-origin:initial;backgroun=

d-clip:initial">
rif;color:rgb(38,40,42)">Your

contact was an act of God and why I had to choose you are divine and I cann=

ot

question =C2=A0the Almighty






-size:initial;background-repeat:initial;background-origin:initial;backgroun=

d-clip:initial">
rif;color:rgb(38,40,42)">=C2=A0This

is risk-free and legitimate so, we'll not have any legal trouble execut=

ing this

transaction. At your response, I will provide more details and procedures o=

f

the transaction.






-size:initial;background-repeat:initial;background-origin:initial;backgroun=

d-clip:initial">
rif;color:rgb(38,40,42)">For

this success of this business, I agree to offer you 50% and 50% will be for=

me.

Please, note that I put so many things into consideration before agreeing o=

n

his terms and I hope that you will appreciate it Please, If this business

proposition offends your moral and ethical values, do accept my sincere

apology. I must use this opportunity to implore you to exercise the utmost

indulgence to keep this matter extraordinary confidential, whatever your

decision, while I await your prompt






-size:initial;background-repeat:initial;background-origin:initial;backgroun=

d-clip:initial">
rif;color:rgb(38,40,42)">Response.






-size:initial;background-repeat:initial;background-origin:initial;backgroun=

d-clip:initial">
rif;color:rgb(38,40,42)">Sincerely,






-size:initial;background-repeat:initial;background-origin:initial;backgroun=

d-clip:initial">
rif;color:rgb(38,40,42)">Mr.

Brice LODUGNON





--0000000000000b57f905e83d1ae4--

Canadian Who's who spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 14 Sep 2022 08:12:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oYT6w-000JxG-4F

for dave@doctor.nl2k.ab.ca;

Wed, 14 Sep 2022 08:11:30 -0600

Resent-From: The Doctor

Resent-Date: Wed, 14 Sep 2022 08:11:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f197.google.com ([209.85.128.197]:49082)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oYSik-000DS8-4w

for sales@nk.ca;

Wed, 14 Sep 2022 07:46:35 -0600

Received: by mail-yw1-f197.google.com with SMTP id 00721157ae682-349b78c177eso17304147b3.15

for ; Wed, 14 Sep 2022 06:46:10 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=thecbrb-ca.20210112.gappssmtp.com; s=20210112;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date;

bh=Px7ysOYvGJzgUsftH0ckNd3kNWQ0qdHfiJzkcQN2qxQ=;

b=zn2TMx1d3qJ6D8eSErB0pjtRLVzLIQieJQQeBXgW6k26IsIZ9cVzh6mT4UGzrB/xgq

WgY968Wti2/VodlqmraTWKwnmyMoPhwxjJPpMfXEIqAhmnCdAQc356Ddz+1ejV64u4c7

L6MyTdFVVpIIEO8nyT57ot4NxGkmznBIZjtDrk4FtS99BhZUo0WnVDN6aFqPbBSN/YyM

GbJ/Q1weoTs49ZtTThHU1vS4Ztq7qgObep/LZc/Qp42J5G3cNnVya0/hosU0cwfsWnDW

NowAvW7KcgfcTo6XU3p+F7ax3hFpjv94hxM5s2NMEa3bpyILOhw+XHQ3/u/puHqrlS8p

5uOw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date;

bh=Px7ysOYvGJzgUsftH0ckNd3kNWQ0qdHfiJzkcQN2qxQ=;

b=bzZtxJ47aBDE4mqpF44rr8O+23KhnJL5jB5+oKEcclRxGwc0bhz1NjWGL2C9YgN+73

sLhGCtZY7YdRCozH7Q+0c5U7N7l5AQe+0k6Ip056MVKn5IZWuvknziZb+IgKYr1qL76U

46RLIDe+6y6zeurJ0oJVoFvs8n96afY1tKd8s0GpPA+r+kcoVXDVyQ17ChYjUsCxWXWa

e5Woyr5m1SVEcdjlFTWolLUQtiZfTvk6NZDJbrjIrvR71eMl2923gdIcWkyN0mbt+wnJ

qnuLbhE6OUs/qLzCQviMyitXppk8zVtgxCxTesJa3Oi4+l2YXpRolQxb4Q4EtJceZpfp

dW7Q==

X-Gm-Message-State: ACgBeo2yLWxTBv+I7UbP0m6VKNcAOMab4G6ljjpYePdiRlV0IWqwCTNs

1648M6UBBgRDWqWjhBT7J8RK642psHrM

X-Google-Smtp-Source: AA6agR6XQzmU6Q5H34caWlU0pKEx15FKfrcdJI0XlDAKz0rOr6NHAK4kBJHbc9/jB5eLbvbgJlWIm3Q+ZA==

MIME-Version: 1.0

X-Received: by 2002:a05:6902:1148:b0:6ae:d92e:603e with SMTP id

p8-20020a056902114800b006aed92e603emr15252540ybu.97.1663163164043; Wed, 14

Sep 2022 06:46:04 -0700 (PDT)

Message-ID: <00000000000098b04605e8a359f2@google.com>

Date: Wed, 14 Sep 2022 13:46:04 +0000

Subject: Synergy selected for CBRB Best Businesses In Canada 2022

From: businessreviewboardoffice@thecbrb.ca

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hello,



Congratulations on being selected and approved for the CBRB Best Businesses

In Canada 2022.



This offer is presented only to businesses that have maintained a 4+ star

Google review rating or equivalent proof of customer satisfaction.



Representing the Best Businesses in Canada, the CBRB Canadian Business

Review Board Inc. has found that your business meets strong consumer

satisfaction standards and we look forward to recommending your services.



Membership in the CBRB Best Businesses In Canada 2022 includes listing in

the exclusive Best Businesses In Canada 2022 Directory, CBRB Best

Businesses Canada 2022 Verification Certificate & Badge, and promotional

content to promote Synergy commitment to upholding:



- Strong Vision

- Customer-centric Approach

- Customer Satisfaction

- Business Leadership



Following registration, you will receive:



-CBRB Best Businesses In Canada 2022 Verification Certificate



-CBRB Best Businesses In Canada 2022 Verification Badge



-CBRB Best Businesses In Canada 2022 Directory Listing & Profile Page



-CBRB Canadian Business Review Board Inc will promote your business

excellence on social media and multiple marketing platforms including ads

targeting specific clients in your city and surrounding areas.



To accept your CBRB Best Businesses In Canada Membership & Verification,

please submit the following form:

https://forms.gle/9yLsYYsX9YigxT1z8



If you have any questions, feel free to let us know!



Tara Peters

CBRB Canadian Business Review Board Inc

Membership Committee

Best Businesses In Canada

1-855-222-5550

www.thecbrb.ca

@thecbrb

@thecbrb_canada











If you would like to unsubscribe from future correspondence, please email

your request to unsubscribe@thecbrb.com

Sexual blackmail Phish from Indonesia

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Tue, 13 Sep 2022 23:38:00 -0600

Received: from [112.215.65.12] (port=60924 helo=[140.213.15.14])

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oYL5O-000Ixw-KU

for dave@nk.ca;

Tue, 13 Sep 2022 23:37:30 -0600

Message-ID: <0E9BA9E4433CD60E9BA9E4433CD60E9B@4UAA6B94UAA>

From:

To:

Subject: Payment from your account.

Date: 14 Sep 2022 18:00:58 +0600

MIME-Version: 1.0

Content-Type: text/plain;

charset="windows-1250"

Content-Transfer-Encoding: 8bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.5931

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5931

X-Spam_score: 10.9

X-Spam_score_int: 109

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings! I have to share bad news with you. Approximately

few months ago I have gained access to your devices, which you use for internet

browsing. After that, I have started tracking your internet activities.



Content analysis details: (10.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[112.215.65.12 listed in bb.barracudacentral.org]

0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server

[112.215.65.12 listed in dnsbl.sorbs.net]

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 HDR_ORDER_FTSDMCXX_NORDNS Header order similar to spam

(FTSDMCXX/boundary variant) + no rDNS

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 PDS_BTC_MSGID Bitcoin ID with T_MSGID_NOFQDN2

0.5 PDS_BTC_ID FP reduced Bitcoin ID

0.0 HDR_ORDER_FTSDMCXX_DIRECT Header order similar to spam

(FTSDMCXX/boundary variant) + direct-to-MX

0.0 BITCOIN_XPRIO Bitcoin + priority

0.0 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX

1.0 BITCOIN_MALWARE BitCoin + malware bragging

3.1 DOS_OE_TO_MX Delivered direct to MX with OE headers

1.0 MALWARE_NORDNS Malware bragging + no rDNS

1.7 BITCOIN_ONAN BitCoin + [censored]

Subject: {SPAM?} Payment from your account.



Greetings!



I have to share bad news with you.

Approximately few months ago I have gained access to your devices, which you use for internet browsing.

After that, I have started tracking your internet activities.



Here is the sequence of events:

Some time ago I have purchased access to email accounts from hackers (nowadays, it is quite simple to purchase such thing online).

Obviously, I have easily managed to log in to your email account (dave@nk.ca).



One week later, I have already installed Trojan virus to Operating Systems of all the devices that you use to access your email.

In fact, it was not really hard at all (since you were following the links from your inbox emails).

All ingenious is simple. ;-)



This software provides me with access to all the controllers of your devices (e.g., your microphone, video camera and keyboard).

I have downloaded all your information, data, photos, web browsing history to my servers.

I have access to all your messengers, social networks, emails, chat history and contacts list.

My virus continuously refreshes the signatures (it is driver-based), and hence remains invisible for antivirus software.



Likewise, I guess by now you understand why I have stayed undetected until this letter...



While gathering information about you, I have discovered that you are a big fan of adult websites.

You really love visiting porn websites and watching exciting videos, while enduring an enormous amount of pleasure.

Well, I have managed to record a number of your dirty scenes and montaged a few videos, which show the way you masturbate and reach orgasms.



If you have doubts, I can make a few clicks of my mouse and all your videos will be shared to your friends, colleagues and relatives.

I have also no issue at all to make them available for public access.

I guess, you really don't want that to happen, considering the specificity of the videos you like to watch, (you perfectly know what I mean) it will cause a true catastrophe for you.



Let's settle it this way:

You transfer $1650 USD to me (in bitcoin equivalent according to the exchange rate at the moment of funds transfer), and once the transfer is received, I will delete all this dirty stuff right away.

After that we will forget about each other. I also promise to deactivate and delete all the harmful software from your devices. Trust me, I keep my word.



This is a fair deal and the price is quite low, considering that I have been checking out your profile and traffic for some time by now.

In case, if you don't know how to purchase and transfer the bitcoins - you can use any modern search engine.



Here is my bitcoin wallet: 1ND3JTwUaYWhDjTuaAK8idmpmuRQGqAkB1



You have less than 48 hours from the moment you opened this email (precisely 2 days).



Things you need to avoid from doing:

*Do not reply me (I have created this email inside your inbox and generated the return address).

*Do not try to contact police and other security services. In addition, forget about telling this to you friends. If I discover that (as you can see, it is really not so hard, considering that I control all your systems) - your video will be shared to public right away.

*Don't try to find me - it is absolutely pointless. All the cryptocurrency transactions are anonymous.

*Don't try to reinstall the OS on your devices or throw them away. It is pointless as well, since all the videos have already been saved at remote servers.



Things you don't need to worry about:

*That I won't be able to receive your funds transfer.

- Don't worry, I will see it right away, once you complete the transfer, since I continuously track all your activities (my trojan virus has got a remote-control feature, something like TeamViewer).

*That I will share your videos anyway after you complete the funds transfer.

- Trust me, I have no point to continue creating troubles in your life. If I really wanted that, I would do it long time ago!



Everything will be done in a fair manner!



One more thing... Don't get caught in similar kind of situations anymore in future!

My advice - keep changing all your passwords on a frequent basis



Sexual blackmail Phish from Italy

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 14 Sep 2022 07:07:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oYS5g-000MOx-Cz

for dave@doctor.nl2k.ab.ca;

Wed, 14 Sep 2022 07:06:08 -0600

Resent-From: The Doctor

Resent-Date: Wed, 14 Sep 2022 07:06:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [151.43.62.77] (port=54982)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oYLbs-0006oX-S5

for usenet@nl2k.ab.ca;

Wed, 14 Sep 2022 00:11:01 -0600

Message-ID: <85ED78DC9A10493E56C36721ABF285ED@YY4P59H58>

From:

To:

Subject: Payment from your account.

Date: 14 Sep 2022 09:03:22 +0100

MIME-Version: 1.0

Content-Type: text/plain;

charset="windows-1250"

Content-Transfer-Encoding: 8bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.2509

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2509

X-Spam_score: 8.6

X-Spam_score_int: 86

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings! I have to share bad news with you. Approximately

few months ago I have gained access to your devices, which you use for internet

browsing. After that, I have started tracking your internet activities.



Content analysis details: (8.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 HDR_ORDER_FTSDMCXX_NORDNS Header order similar to spam

(FTSDMCXX/boundary variant) + no rDNS

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 PDS_BTC_MSGID Bitcoin ID with T_MSGID_NOFQDN2

0.5 PDS_BTC_ID FP reduced Bitcoin ID

0.0 HDR_ORDER_FTSDMCXX_DIRECT Header order similar to spam

(FTSDMCXX/boundary variant) + direct-to-MX

0.0 BITCOIN_XPRIO Bitcoin + priority

0.0 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX

1.0 BITCOIN_MALWARE BitCoin + malware bragging

3.1 DOS_OE_TO_MX Delivered direct to MX with OE headers

1.0 MALWARE_NORDNS Malware bragging + no rDNS

1.7 BITCOIN_ONAN BitCoin + [censored]

Subject: {SPAM?} Payment from your account.



Greetings!



I have to share bad news with you.

Approximately few months ago I have gained access to your devices, which you use for internet browsing.

After that, I have started tracking your internet activities.



Here is the sequence of events:

Some time ago I have purchased access to email accounts from hackers (nowadays, it is quite simple to purchase such thing online).

Obviously, I have easily managed to log in to your email account (usenet@nl2k.ab.ca).



One week later, I have already installed Trojan virus to Operating Systems of all the devices that you use to access your email.

In fact, it was not really hard at all (since you were following the links from your inbox emails).

All ingenious is simple. ;-)



This software provides me with access to all the controllers of your devices (e.g., your microphone, video camera and keyboard).

I have downloaded all your information, data, photos, web browsing history to my servers.

I have access to all your messengers, social networks, emails, chat history and contacts list.

My virus continuously refreshes the signatures (it is driver-based), and hence remains invisible for antivirus software.



Likewise, I guess by now you understand why I have stayed undetected until this letter...



While gathering information about you, I have discovered that you are a big fan of adult websites.

You really love visiting porn websites and watching exciting videos, while enduring an enormous amount of pleasure.

Well, I have managed to record a number of your dirty scenes and montaged a few videos, which show the way you masturbate and reach orgasms.



If you have doubts, I can make a few clicks of my mouse and all your videos will be shared to your friends, colleagues and relatives.

I have also no issue at all to make them available for public access.

I guess, you really don't want that to happen, considering the specificity of the videos you like to watch, (you perfectly know what I mean) it will cause a true catastrophe for you.



Let's settle it this way:

You transfer $1650 USD to me (in bitcoin equivalent according to the exchange rate at the moment of funds transfer), and once the transfer is received, I will delete all this dirty stuff right away.

After that we will forget about each other. I also promise to deactivate and delete all the harmful software from your devices. Trust me, I keep my word.



This is a fair deal and the price is quite low, considering that I have been checking out your profile and traffic for some time by now.

In case, if you don't know how to purchase and transfer the bitcoins - you can use any modern search engine.



Here is my bitcoin wallet: 1ND3JTwUaYWhDjTuaAK8idmpmuRQGqAkB1



You have less than 48 hours from the moment you opened this email (precisely 2 days).



Things you need to avoid from doing:

*Do not reply me (I have created this email inside your inbox and generated the return address).

*Do not try to contact police and other security services. In addition, forget about telling this to you friends. If I discover that (as you can see, it is really not so hard, considering that I control all your systems) - your video will be shared to public right away.

*Don't try to find me - it is absolutely pointless. All the cryptocurrency transactions are anonymous.

*Don't try to reinstall the OS on your devices or throw them away. It is pointless as well, since all the videos have already been saved at remote servers.



Things you don't need to worry about:

*That I won't be able to receive your funds transfer.

- Don't worry, I will see it right away, once you complete the transfer, since I continuously track all your activities (my trojan virus has got a remote-control feature, something like TeamViewer).

*That I will share your videos anyway after you complete the funds transfer.

- Trust me, I have no point to continue creating troubles in your life. If I really wanted that, I would do it long time ago!



Everything will be done in a fair manner!



One more thing... Don't get caught in similar kind of situations anymore in future!

My advice - keep changing all your passwords on a frequent basis



Business deal spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 14 Sep 2022 07:07:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oYS5Y-000MNT-OH

for dave@doctor.nl2k.ab.ca;

Wed, 14 Sep 2022 07:06:00 -0600

Resent-From: The Doctor

Resent-Date: Wed, 14 Sep 2022 07:06:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f173.google.com ([209.85.208.173]:42621)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oYN5B-0009Jh-Sc

for doctor@doctor.nl2k.ab.ca;

Wed, 14 Sep 2022 01:45:21 -0600

Received: by mail-lj1-f173.google.com with SMTP id l12so17202468ljg.9

for ; Wed, 14 Sep 2022 00:45:00 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date;

bh=fI8FVxk8qFBjRisSy+R5dbptBQHa/0ksyQMmVsF1ZSQ=;

b=D9SnrBoPpOqxRea1Y9nsb0xaaBH0xt47j3s/pc3AaqRVYmFRRcITbxYXo7YhGB3CTa

QeSPIjQx1OVkDWRI1/FewLt/RH+KfW/FZG9uuGPRKCrKkywVm7DE331SGMhTAA1iXlv5

AhRzaS49aYnEjw7EZGVJRY7rBYMeVeNLZ12rfHUmzodu6Yzny1C+UH1JCEtpSbhdVltE

5DIqo+ENLJvHoPOFYRlTe8ujJfj5Nmo7vUvE3Ij8DrW2NvFMnQnVEbrmU4Y896QfSZy7

uIrvqUR5MDU5/8jII283Si681jdCGdCKSpSXgyeqM05qycv8S656rRm05J2WQTx0LeV0

33AA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date;

bh=fI8FVxk8qFBjRisSy+R5dbptBQHa/0ksyQMmVsF1ZSQ=;

b=PaFlzSzM8gzswTxR9J4VlsVpx4QVsXNxvGcyq8/1H7+wA6B/j2s6JtH56jDFsqG/Kk

P6t0Mg09I4gt3m1SphD0i87HlZCUv4W+jaSxDP5c36TIdzxZZAkcDIc5rjOqz7yFNDdL

+N4NoXgaIQvXiBQn0jI2sUuJsG/Qr2d2BriVzX+GVug9oNPmwgPmocukBw46bYft4vVW

zgybtbYfaicASUH615nrh4n7qnNJ1Jd6FFql++crE950K+2Nr0b5Cc50UyV/VKxdYDwA

KgMbPfiIRNQFw83/ALeXXhdZlSKuL+6iBqwDvtwtnIhk3JdK0mahgG1ujOAV+HDYJAOI

zxeQ==

X-Gm-Message-State: ACgBeo1r3OA0h6rei/3mBBiJZaG70QTsSRre+9hcnrIiscUxDZkXFnye

msZ9IfG1UpqQxV/djITNXKbuQ9262kclGyQE1UY=

X-Google-Smtp-Source: AA6agR5LTeCOfUDolh9m//jEr6E+RsiAveD69Hh8ysAWqb91XATj2GPKGD1d4Jp2QWLYPZ7VvE5//CDT7fqWEXO50lU=

X-Received: by 2002:a2e:97d5:0:b0:26c:1d93:1a0 with SMTP id

m21-20020a2e97d5000000b0026c1d9301a0mr1656639ljj.322.1663141493816; Wed, 14

Sep 2022 00:44:53 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a2e:be14:0:0:0:0:0 with HTTP; Wed, 14 Sep 2022 00:44:53

-0700 (PDT)

Reply-To: tonybanneth@gmail.com

From: "Mr. Tony Banneth"

Date: Wed, 14 Sep 2022 00:44:53 -0700

Message-ID:

Subject: hello

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 16.7

X-Spam_score_int: 167

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: DEAR FRIEND I am(Mr.Tony Banneth),With the business proposal

deal of US(US$10.5 million) to transfer into your account, if you are interested

get back to me for more detail at my E-Your Urgent,my private Email Address,(

tonybanneth@gmail.com )



Content analysis details: (16.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.173 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[rnandluise552[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[rnandluise552[at]gmail.com]

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal

information

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} hello



DEAR FRIEND



I am(Mr.Tony Banneth),With the business proposal deal of US(US$10.5

million) to transfer into your account, if you are interested get back

to me for more detail at my E-Your



Urgent,my private Email Address,( tonybanneth@gmail.com )







Thanks with my Best Regards







Thanks

Mr.Tony Banneth

Sexual blackmail Phish from rain in Johannesburg

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 14 Sep 2022 07:06:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oYS5R-000MLJ-3M

for dave@doctor.nl2k.ab.ca;

Wed, 14 Sep 2022 07:05:53 -0600

Resent-From: The Doctor

Resent-Date: Wed, 14 Sep 2022 07:05:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [197.184.164.103] (port=54553 helo=reverse.rain.network)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oYLCc-0002zg-00

for mailer-daemon@nk.ca;

Tue, 13 Sep 2022 23:44:57 -0600

From:

To:

Date: 14 Sep 2022 08:39:21 +0100

MIME-Version: 1.0

Subject: Payment from your account.

Message-ID: <63218655.0879.13BF93@us2-3249c4da0b-43eec7177c.inbound.mailchimp.com>

Priority: normal

X-mailer: Pegasus Mail for Windows (4.52)

Content-type: text/plain; charset="windows-1250"

Content-transfer-encoding: 8BIT

Content-description: Mail message body



Greetings!



I have to share bad news with you.

Approximately few months ago I have gained access to your devices, which you use for internet browsing.

After that, I have started tracking your internet activities.



Here is the sequence of events:

Some time ago I have purchased access to email accounts from hackers (nowadays, it is quite simple to purchase such thing online).

Obviously, I have easily managed to log in to your email account (mailer-daemon@nk.ca).



One week later, I have already installed Trojan virus to Operating Systems of all the devices that you use to access your email.

In fact, it was not really hard at all (since you were following the links from your inbox emails).

All ingenious is simple. ;-)



This software provides me with access to all the controllers of your devices (e.g., your microphone, video camera and keyboard).

I have downloaded all your information, data, photos, web browsing history to my servers.

I have access to all your messengers, social networks, emails, chat history and contacts list.

My virus continuously refreshes the signatures (it is driver-based), and hence remains invisible for antivirus software.



Likewise, I guess by now you understand why I have stayed undetected until this letter...



While gathering information about you, I have discovered that you are a big fan of adult websites.

You really love visiting porn websites and watching exciting videos, while enduring an enormous amount of pleasure.

Well, I have managed to record a number of your dirty scenes and montaged a few videos, which show the way you masturbate and reach orgasms.



If you have doubts, I can make a few clicks of my mouse and all your videos will be shared to your friends, colleagues and relatives.

I have also no issue at all to make them available for public access.

I guess, you really don't want that to happen, considering the specificity of the videos you like to watch, (you perfectly know what I mean) it will cause a true catastrophe for you.



Let's settle it this way:

You transfer $1650 USD to me (in bitcoin equivalent according to the exchange rate at the moment of funds transfer), and once the transfer is received, I will delete all this dirty stuff right away.

After that we will forget about each other. I also promise to deactivate and delete all the harmful software from your devices. Trust me, I keep my word.



This is a fair deal and the price is quite low, considering that I have been checking out your profile and traffic for some time by now.

In case, if you don't know how to purchase and transfer the bitcoins - you can use any modern search engine.



Here is my bitcoin wallet: 1ND3JTwUaYWhDjTuaAK8idmpmuRQGqAkB1



You have less than 48 hours from the moment you opened this email (precisely 2 days).



Things you need to avoid from doing:

*Do not reply me (I have created this email inside your inbox and generated the return address).

*Do not try to contact police and other security services. In addition, forget about telling this to you friends. If I discover that (as you can see, it is really not so hard, considering that I control all your systems) - your video will be shared to public right away.

*Don't try to find me - it is absolutely pointless. All the cryptocurrency transactions are anonymous.

*Don't try to reinstall the OS on your devices or throw them away. It is pointless as well, since all the videos have already been saved at remote servers.



Things you don't need to worry about:

*That I won't be able to receive your funds transfer.

- Don't worry, I will see it right away, once you complete the transfer, since I continuously track all your activities (my trojan virus has got a remote-control feature, something like TeamViewer).

*That I will share your videos anyway after you complete the funds transfer.

- Trust me, I have no point to continue creating troubles in your life. If I really wanted that, I would do it long time ago!



Everything will be done in a fair manner!



One more thing... Don't get caught in similar kind of situations anymore in future!

My advice - keep changing all your passwords on a frequent basis



X-rated spam from Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 14 Sep 2022 06:44:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oYRjx-000ETX-22

for dave@doctor.nl2k.ab.ca;

Wed, 14 Sep 2022 06:43:41 -0600

Resent-From: The Doctor

Resent-Date: Wed, 14 Sep 2022 06:43:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-tyzapc01olkn2107.outbound.protection.outlook.com ([40.92.107.107]:26948 helo=APC01-TYZ-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oYKz3-000IAP-4n

for doctor@doctor.nl2k.ab.ca;

Tue, 13 Sep 2022 23:30:55 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=L6T3XKwePwRCQayb/dwtGmTnVFkAkp1bUJAuyy2py5SmqViNr1nTlb5Xg1PnQpPxIyt3uUjIw4t4WvcPfyR5Uk01sDAD/vfmsbuhm2dZRztV8V7wVtc8HrnKIiTSB6GBAa5dXRAGW8nekMorAi3ZwyhopYKM6P0vpwH58+xYRVnL8n5qVZzjdv+RClMkdZlJ2le8VPuGv/G1sssjIppf5vfj4FrrQQIffstubFEAsmgATCcsDDzRDoTT5KDW+/SF+VGvT2zpCvUj6B7Gy19pbaUogPfUd8FwlaZroXOLwf9rqTr6dM0vlfkSh3xePHL6EoEsePJPxihvOUwsJcvqmw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=WtsItjbTCyT7ACHQ6I/E3TUuowfXWgUsy9adD05qE3I=;

b=iLc3Amwmt3UbWm42ts2/wf0tul5PzLAgzSaylki0sYaXBDU1EDTA9cV1ZmKYQxMbgo5VKDLcht+9lzafjbVHKTt1iJlouksia/eugUo1X5TDFP1ce1bA2oaFNkoVn+hql7Jrb+O9BuYYkwPF4bTequjqypmSUkNa2BKLkNyCcr/aSkxRdUC709jw3PQG4dbJDDVNk1OnTpM4zL4yPjCgghphYddKVf1wy5/6xuWyS6cw3+ICWHpB3xBsBy3TwhDt08amuwN1qAbf9BCKgzg6WRwZ2M3P5XVW+t/7hPFZimmspYFWvQHMuGTI56U17JpvUjR+JQK+XntFtYOvdeqSMg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=WtsItjbTCyT7ACHQ6I/E3TUuowfXWgUsy9adD05qE3I=;

b=U7F52kbakJ3ek9+XUVm+cF1MVeBTneXPejBQexsnOY2EuPOUHmlQl6IPagDb9n9gVDj6fTyr2HZ44a74l6okVrZ64w3oZr3LmOELW6RYtASiIhegpja1IYO9M+8yLyDscCC9oMNyGIdVSTD7W3gfCYsYcocTrZEr2YUXQh4mHwiHwVjbyEgjDOi7qXvugStnzWufZgFCCHhCRmuxT0eUN4dsHhksKCVb55bdgeD7spiXURfy2DSZA0cYLBQduL9WgkZihaMRikgn4SjmTX4IJ7SJz9Rj/iRrDha7izREcthNuSHAKP5Qd8s8PvpIfh2+0smBK9cOQB6rUyft9yDDVg==

Received: from PS2PR06MB2454.apcprd06.prod.outlook.com (2603:1096:300:45::15)

by KL1PR0601MB4404.apcprd06.prod.outlook.com (2603:1096:820:76::7) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5612.14; Wed, 14 Sep

2022 05:29:33 +0000

Received: from PS2PR06MB2454.apcprd06.prod.outlook.com

([fe80::81d5:1d10:d44e:8edd]) by PS2PR06MB2454.apcprd06.prod.outlook.com

([fe80::81d5:1d10:d44e:8edd%6]) with mapi id 15.20.5612.022; Wed, 14 Sep 2022

05:29:33 +0000

X-Mailer: MailBee.NET 11.2.0.590

From: "mcsyhegrqnx@outlook.com"

Subject: You've come to the right place ;-)

Reply-To: "mcsyhegrqnx@outlook.com"

Date: Wed, 14 Sep 2022 07:29:23 +0200

Message-ID:



Content-Type: multipart/alternative;

boundary="----=_NextPart_000_16B5_9F4A6328.365551AD"

To: Undisclosed recipients:;

X-TMN: [PxivzVl0QvE91ResoZOrHhgZZwp9ese5]

X-ClientProxiedBy: AM5PR0502CA0023.eurprd05.prod.outlook.com

(2603:10a6:203:91::33) To PS2PR06MB2454.apcprd06.prod.outlook.com

(2603:1096:300:45::15)

X-Microsoft-Original-Message-ID: <1.8f6e591134874643c426@DESKTOP-1SRV5V9>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: PS2PR06MB2454:EE_|KL1PR0601MB4404:EE_

X-MS-Office365-Filtering-Correlation-Id: 554c897a-ea5e-46cc-902b-08da96121a27

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?RUs2cDBrdVRWeWJ5L09kRHp4cTJpcFk4T1V4a2Z1SHduTW5uaEQ1dnFhVFRQ?=

=?utf-8?B?YkllM1NJdURpZVBuYlBSSmdCcnJiNUc4MFRtbVIxemJneW85YnAyL29JTHRY?=

=?utf-8?B?eExQOERzTUlpMDYydVVQQ2E3aXd6aHhicFJiTGdGRkJvNmVlSnJSOXRTRGx6?=

=?utf-8?B?WmtacDZHQ3RSU3hPdDBOektFYUZMT1Q1bitQZmRlK3IwNEFsZWEvQnVuQjRD?=

=?utf-8?B?VkV3OFpZcHZsNUJLTjVRWHIxQ1VtU08rVTV4YUYvNFIwaE9oZ0FiWW8xbTc3?=

=?utf-8?B?b21WS3VZT2VuYUJqcTFWVHBKUnByeERyUGlWVWZWS25zbDRIU0o5eWMzMmVm?=

=?utf-8?B?Uml4dUVpOWx6VWJ6MlRWU21QeHNtVVdUUURjaHpFWUtYQlJhaDFseWVVSzJl?=

=?utf-8?B?UjdMRTFvSHhrdkNXejVyYVBEbkZJUDdxU2xWcnlPdXl1Z2VYVXNlU3ZIc3c0?=

=?utf-8?B?bW1ucjBIR2k5NDl4M3hLQ2VZYWxYQ1BuM1hnZ3ppU0dEcE5VMkhwRlRCWlIv?=

=?utf-8?B?c3dxeE1vT0t4ZVBjdm51TnIzT1B1RDJCS0Q3N003c3BCTTZXMEZVS2NiOXNU?=

=?utf-8?B?UWRCdlZXcmVvdXhnb0RHbkU0ekVBQ3NKVHpJU0ZqN2taZlRFTGxrSXo5WVdk?=

=?utf-8?B?OWtIQnRTWlZ5bmh2U2dqYWF6RGZUU2thaFVTVERrZFgvRXU4Ny9ZS0dsVmF4?=

=?utf-8?B?UGJacTFoeFVYNGU5TjdIa0YxRFE1MGEzTTd6SFM2NUxQeXJFUmwyTjE3bHhv?=

=?utf-8?B?TFk4dGJwTlRJQUhzS3YwalB5VlZLOXhSV3BGWXpxZjlyN2d0ZnVGMGhhMFJu?=

=?utf-8?B?V0M1TUI1eSsxVTByOUtnZE5zQzFQck1HUVV4SnVTSEFnL3Z3TE4rc21rNTRa?=

=?utf-8?B?OW5Oa1FtaitBaUhGTUpFNzkvWWE1K3dOSFh6NDJLM05ITVpqT3NEc05RSFlq?=

=?utf-8?B?US9QaG5wc2NyZGNudWh5Q1JtOXRUUWNFYmp3dzNqKzNINXkydUVta2dkempQ?=

=?utf-8?B?eXptV3Y4QmFNVjRnZStDZ21aRkdKMERxandHNkJqaGl1bkhqcXQ0bXY2ZXVH?=

=?utf-8?B?UWtmSG1XN3ZvRUt3Nmw3a05HemE4SnR6UlJIUzNsa2hKN0xkT1J4WHNQMVR5?=

=?utf-8?B?TGNpT2h3NjhIWHBteWtDVUVRRXZDUzNrNGp0ejhGQmh4c2llMDJNMjV2R1Fy?=

=?utf-8?B?UE82Zm1wc0RwcjJxNDBGZFRuVGVXaWh0N0pBcXZQR0xhVlpqUlJhUHV1UVJL?=

=?utf-8?B?YWJPNzF3TWt0MW43bVIxTWVOZ2xqRHVXWmM5MVZYZG9zZXZBak5UVmNUV1BV?=

=?utf-8?B?Wi9yWXFQQzlONVZDTjVkMDVFZ1NqZ2dHZ3I1aWxsVmE4bjMrN0U1RWtGNG96?=

=?utf-8?B?bVpTSFoxY0ZmemRnZ2tBUzE2VGZYQSs4ZEtsaHRidXNmakFnUUFXc1JHa0x3?=

=?utf-8?B?TlpQSThEQytDMTNOeGRVTitoVU9nbVBiR1NPc2Z6MDRwaWROdmdkZWE2TVpl?=

=?utf-8?B?QjRRaVk1S1phQTE2MUNCbmZGcC9mS0djSU01aU9UekZUVG9JK2luOXVBaXJ3?=

=?utf-8?B?RlZTOEpsYVlqQ25naHdxUXVya1JCSFVwTTR5Q0J0allHS2swRTlXbnhmSjdy?=

=?utf-8?B?T3hRZXJETGdGRzBJNk5YRzFCcHAzblgyMWhKM1B2ZFhrQ254anlxRVd6UjUr?=

=?utf-8?B?Q0xqVWNoc3lvdkM0Y1I5UUFrdGpxRG54TzdrRkZZNW9XRkptOVZLUDB3PT0=?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: 554c897a-ea5e-46cc-902b-08da96121a27

X-MS-Exchange-CrossTenant-AuthSource: PS2PR06MB2454.apcprd06.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Sep 2022 05:29:32.9505

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: KL1PR0601MB4404



------=_NextPart_000_16B5_9F4A6328.365551AD

Content-Type: text/plain;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Are you ready for SEX with an older woman?





If your answer is YES, you've come to the right place cause this is a websi=

te full of mature women looking for hot, steaming SEX!



Read below why I started this SEX CLUB for ELDERLY PEOPLE.



Young people seem to think older women only want to knit scarfs and bake c=

akes but that isn't true at all. WE WANT HARD SEX JUST LIKE YOU MEN!



But we found that on most dating apps like TINDER, there is just no place =

for PEOPLE ABOVE 50.



That's why I started this website, especially for OLDER WOMEN LOOKING FOR =

LIKEMINDED HORNY MEN! As you can see from my pictures, we're NOT SHY, but w=

e keep our identities PRIVATE AND SECURE.



So why don't you come and join me and my girlfriends? We won't bite (unles=

s you want us to ;-))







SIGN UP NOW FOR A HORNY CHAT





http://backdoorflirts.matchflirt.live















































































Still want to unsubscribe entirely? Click below to unsubscribe.



UNSUBSCRIBE











































=



------=_NextPart_000_16B5_9F4A6328.365551AD

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




style=3D"font-weight:normal;" id=3D"docs-internal-guid-7c4048cf-7fff-5207-=

f5a8-191a978b5c35">=0A=


margin-bottom:12pt;">=0A=


000;background-color:transparent;font-weight:400;font-style:normal;font-var=

iant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wr=

ap;"> 
0000;background-color:transparent;font-weight:700;font-style:normal;font-va=

riant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-w=

rap;">Are you ready for SEX with an older woman?=0A=

=0A=


=0A=


margin-bottom:12pt;">=0A=


olor:transparent;font-weight:400;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">If your ans=

wer is YES, you've come to the right place cause this is a
le=3D"font-size:13pt;font-family:Arial;color:#000000;background-color:trans=

parent;font-weight:700;font-style:normal;font-variant:normal;text-decoratio=

n:none;vertical-align:baseline;white-space:pre-wrap;">website full of matur=

e women looking for hot, steaming SEX!=0A=

=0A=


margin-bottom:12pt;">=0A=


olor:transparent;font-weight:700;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">Read below =

why I started this SEX CLUB for ELDERLY PEOPLE.=0A=

=0A=


;margin-bottom:12pt;">=0A=


olor:transparent;font-weight:400;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">Young peopl=

e seem to think older women only want to knit scarfs and bake cakes but tha=

t isn't true at all.
;color:#000000;background-color:transparent;font-weight:700;font-style:norm=

al;font-variant:normal;text-decoration:none;vertical-align:baseline;white-s=

pace:pre-wrap;">WE WANT HARD SEX JUST LIKE YOU MEN!=0A=

=0A=


;margin-bottom:12pt;">=0A=


olor:transparent;font-weight:400;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">But we foun=

d that on most dating apps like
amily:Arial;color:#000000;background-color:transparent;font-weight:700;font=

-style:normal;font-variant:normal;text-decoration:none;vertical-align:basel=

ine;white-space:pre-wrap;">TINDER
family:Arial;color:#000000;background-color:transparent;font-weight:400;fon=

t-style:normal;font-variant:normal;text-decoration:none;vertical-align:base=

line;white-space:pre-wrap;">, there is just no place for
=3D"font-size:13pt;font-family:Arial;color:#000000;background-color:transpa=

rent;font-weight:700;font-style:normal;font-variant:normal;text-decoration:=

none;vertical-align:baseline;white-space:pre-wrap;">PEOPLE ABOVE 50<=

span style=3D"font-size:13pt;font-family:Arial;color:#000000;background-col=

or:transparent;font-weight:400;font-style:normal;font-variant:normal;text-d=

ecoration:none;vertical-align:baseline;white-space:pre-wrap;">.=0A=

=0A=


;margin-bottom:12pt;">=0A=


olor:transparent;font-weight:400;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">That's why =

I started this website, especially for
;font-family:Arial;color:#000000;background-color:transparent;font-weight:7=

00;font-style:normal;font-variant:normal;text-decoration:none;vertical-alig=

n:baseline;white-space:pre-wrap;">OLDER WOMEN LOOKING FOR LIKEMINDED HORNY =

MEN!
ckground-color:transparent;font-weight:400;font-style:normal;font-variant:n=

ormal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;"> =

As you can see from my pictures, we're NOT SHY, but we keep our identities =


ound-color:transparent;font-weight:700;font-style:normal;font-variant:norma=

l;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">PRIVA=

TE AND SECURE
000000;background-color:transparent;font-weight:400;font-style:normal;font-=

variant:normal;text-decoration:none;vertical-align:baseline;white-space:pre=

-wrap;">.=0A=

=0A=


margin-bottom:12pt;">=0A=


olor:transparent;font-weight:400;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">So why don'=

t you come and join me and my girlfriends? We won't bite (unless you want u=

s to ;-))=0A=

=0A=


margin-bottom:12pt;">=0A=


olor:transparent;font-weight:400;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;"> 
n>=0A=

=0A=


margin-bottom:12pt;">=0A=


olor:transparent;font-weight:400;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">SIGN UP NOW=

FOR A HORNY CHAT =0A=

=0A=


=0A=


:#ffffff;margin-top:0pt;margin-bottom:0pt;">=0A=


:none;">
kground-color:#ffffff;font-weight:700;font-style:normal;font-variant:normal=

;text-decoration:underline;-webkit-text-decoration-skip:none;text-decoratio=

n-skip-ink:none;vertical-align:baseline;white-space:pre-wrap;">http://backd=

oorflirts.matchflirt.live=0A=

=0A=


:#ffffff;margin-top:0pt;margin-bottom:0pt;padding:12pt 0pt 0pt 0pt;">=0A=

 =0A=

=0A=


:#ffffff;margin-top:0pt;margin-bottom:0pt;padding:12pt 0pt 0pt 0pt;">=0A=

 =0A=

=0A=


:#ffffff;margin-top:0pt;margin-bottom:0pt;padding:12pt 0pt 0pt 0pt;">=0A=

 =0A=

=0A=


:#ffffff;margin-top:0pt;margin-bottom:0pt;padding:12pt 0pt 0pt 0pt;">=0A=

 =0A=

=0A=


:#ffffff;margin-top:0pt;margin-bottom:0pt;padding:12pt 0pt 0pt 0pt;">=0A=

 =0A=

=0A=


=0A=


=0A=


argin-bottom:0pt;">=0A=


:none;">
round-color:transparent;font-weight:700;font-style:normal;font-variant:norm=

al;text-decoration:underline;-webkit-text-decoration-skip:none;text-decorat=

ion-skip-ink:none;vertical-align:baseline;white-space:pre-wrap;">
e=3D"border:none;display:inline-block;overflow:hidden;width:210px;height:34=

4px;">
NTRnpCbKQTVc-aPNGH47fOgjoirKAhiQPx8pGY4Xz99KQsEid65_6wbKEnXvkfQUUXYLstvofFK=

5psWxC-w6MOQR6KhV8gKOOX0nmdo83KgbEfjMpO0jTEvcRHnHYlMgk8m-vh4xErV6IoDnX3tUex=

7_7DymNYjnrUA" style=3D"margin-left:0px;margin-top:0px;" width=3D"210" heig=

ht=3D"344">
lor:#1155cc;background-color:transparent;font-weight:700;font-style:normal;=

font-variant:normal;text-decoration:underline;-webkit-text-decoration-skip:=

none;text-decoration-skip-ink:none;vertical-align:baseline;white-space:pre-=

wrap;">
h:256px;height:340px;">
WPcgkOfob5od0ww7QyT4ugTfi02P85leHSpZXGrJQ2fey8Gk5fBVrBJCYPJDlYvZJlFvDwRbd77=

jbnnGWGdpIpkW1QbqYn5AA9G-aTWNBsUDQI35h36QR_evnaM-SR1nd0vBTZLx-W_bAwG30-ius-=

oB88Il1jrf40cKTc-M4uRKtH2u71wA" style=3D"margin-left:0px;margin-top:0px;" w=

idth=3D"256" height=3D"340">
t-family:Arial;color:#1155cc;background-color:transparent;font-weight:700;f=

ont-style:normal;font-variant:normal;text-decoration:underline;-webkit-text=

-decoration-skip:none;text-decoration-skip-ink:none;vertical-align:baseline=

;white-space:pre-wrap;">
rflow:hidden;width:266px;height:320px;">
ontent.com/nRUvQmSysFAID-mgldf9nsegS3NRl085YEYYL0A-fJ7hqLjXww4GQDIoKZfuAL_y=

5VXe-HhEYZgj1UI3hX5gdsUaIMmXOmfAnqPOrJzDYK6IRJogLNSH4q0c0FAnADmoiuetDEPQV27=

7KM9XTQUhTP9zTUp0MuylBOFmNlHgyVSLNvGp1hq9U2S0qw" style=3D"margin-left:0px;m=

argin-top:0px;" width=3D"266" height=3D"320">=0A=

=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


argin-bottom:12pt;">=0A=


lor:transparent;font-weight:400;font-style:normal;font-variant:normal;text-=

decoration:none;vertical-align:baseline;white-space:pre-wrap;"> Still =

want to unsubscribe entirely? Click below to unsubscribe.=0A=

=0A=


argin-bottom:12pt;">=0A=

<=

span style=3D"font-size:6pt;font-family:Arial;color:#1155cc;background-colo=

r:transparent;font-weight:400;font-style:normal;font-variant:normal;text-de=

coration:underline;-webkit-text-decoration-skip:none;text-decoration-skip-i=

nk:none;vertical-align:baseline;white-space:pre-wrap;">UNSUBSCRIBE
a>=0A=

=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=



------=_NextPart_000_16B5_9F4A6328.365551AD--

proposal spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 13 Sep 2022 18:13:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oYG0c-0005Sj-2Q

for dave@doctor.nl2k.ab.ca;

Tue, 13 Sep 2022 18:12:06 -0600

Resent-From: The Doctor

Resent-Date: Tue, 13 Sep 2022 18:12:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wr1-f66.google.com ([209.85.221.66]:39592)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oYEjp-000M4T-QH

for doctor@doctor.nl2k.ab.ca;

Tue, 13 Sep 2022 16:50:45 -0600

Received: by mail-wr1-f66.google.com with SMTP id cc5so13132868wrb.6

for ; Tue, 13 Sep 2022 15:50:24 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date;

bh=1x0Cq7lfVVVx7CAYGc036970eQK8+V/x2PMgt04SGrA=;

b=Upw3fmGKON4cR+7J3KSSWGZ2Lgmsv90wEJKPjDikzaGc9Ljk7NP6maUA2zDy9kiXLx

E4KSyY+ihel6uiGT4/uKFUctZjh8eUzMhzV8R53PvRi2EsEZB8rJUknvjHAi+7BX0Or9

dWExRL9F8wNvDUlHCY3kuOGy98+mE0UeDPWjfFr1f2vlM3Y4AF6KGb8Pir3QlU0LGWqO

pk9a16wIuRY3qvkBfMxSGJPtXxARwCSDKdgLcSUdEh1Ow2bvrX8/hlK/QNxSEBC5MlR0

2HLGAM/+mytWFma5XEQqgD3Zq8dPSxh4uN+BL85Uo1DMiR9sTM2LOJNpB4Eo869EQHf6

Ylhw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date;

bh=1x0Cq7lfVVVx7CAYGc036970eQK8+V/x2PMgt04SGrA=;

b=6h8KdSKaHnnODSGfUnoLdSqduVCCz7mk/actpzenlDDxIX/BFJNnW2TArPdwlP91Oz

B+0FXUUTNNnhiR1T47FQEGLViW4UcWU0m22lK+ZDblVvvKs3qxOICAXsvFdBi0fPzLU6

s9sBj2n/dqF/XcqzQyqdGcoPNk/ByiRP82IwPLpfSb9/3Wjgg1qSBQPME2gTogCOhMR0

YR4vH5AVdPNapY+1tbyHs2yljD0ko2mAcdohtL7Wo2GdwfkgAqis9qy8wYiACNyW4rGm

h+UhkNLrVVBj0JDZjdCLX9v5xNbYaft43I7emdDwXmpEXQfBMWqKbd4HFvFDmX13AVfb

7gSA==

X-Gm-Message-State: ACgBeo2ExXBZZ3v2+q/y/zdEGQ2W/r6fqXnHSOA7CwXhxqK2ntVYx2a9

CpORYMFUnheEjG37TzLwGulWKj27FFpCZOpfHa0=

X-Google-Smtp-Source: AA6agR47wna9WvwAiv0I1z17/Ek4qxzOFgv4nLoJaBLTPNZrc8s2SNri00IkGRfJVK6haDsvhHDcsms59qB8ArJzyaE=

X-Received: by 2002:a05:6000:1aca:b0:22a:50bc:8c6c with SMTP id

i10-20020a0560001aca00b0022a50bc8c6cmr9984107wry.166.1663109418209; Tue, 13

Sep 2022 15:50:18 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:6000:1f95:0:0:0:0 with HTTP; Tue, 13 Sep 2022 15:50:17

-0700 (PDT)

Reply-To: engr.jakabdullahfraam@gmail.com

From: "ENGR. JAK ABDULLAH FRAAM"

Date: Tue, 13 Sep 2022 15:50:17 -0700

Message-ID:

Subject: I have a proposal for you.

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 8.0

X-Spam_score_int: 80

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Hello Dear, I am contacting you to inform you about my

interest on business partnership with you in Agro and Real Estate Developing

and marketing investment, i saw your contact details on the net.



Content analysis details: (8.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.66 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[zarashippingcompany[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)

1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} I have a proposal for you.



--

Hello Dear,



I am contacting you to inform you about my interest on business

partnership with you in Agro and Real Estate Developing and marketing

investment, i saw your contact details on the net.



This is how I got interested in contacting you, i am sincerely

interested to invest my money in this specified investment, if your

interest to collaborate with me is accepted, I will get back to you

with more

details of my plans to expedite action in this partnership with you.





Thank you, I wait for your concept to proceed.



Yours faithfully,



Engr. Jak Abdullah Fraam



Managing Director



Deir Ez Zor Petroleum Company



Villat Gharbia Dar Es Saada, 16



Aleppo - Syria.