More sexual blackmail phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 17 Sep 2022 16:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oZftB-0002B5-8g

for dave@doctor.nl2k.ab.ca;

Sat, 17 Sep 2022 16:02:17 -0600

Resent-From: The Doctor

Resent-Date: Sat, 17 Sep 2022 16:02:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from static-host119-73-102-216.link.net.pk ([119.73.102.216]:15539)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oZcXn-0005ZS-9U

for games@nl2k.ab.ca;

Sat, 17 Sep 2022 12:28:05 -0600

Message-ID: <1EF1754FAC9ACB9679FDC72412431EF1@WKG47VVKUV>

From:

To:

Subject: You have outstanding debt.

Date: 18 Sep 2022 02:48:31 +0400

MIME-Version: 1.0

Content-Type: text/plain;

charset="iso-8859-3"

Content-Transfer-Encoding: 8bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.2180

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180

X-Spam_score: 16.4

X-Spam_score_int: 164

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello there! Unfortunately, there are some bad news for you.

Around several months ago I have obtained access to your devices that you

were using to browse internet. Subsequently, I have proceeded with tracking

do [...]



Content analysis details: (16.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or

Generic rPTR

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[119.73.102.216 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=games%40nl2k.ab.ca;ip=119.73.102.216;r=doctor.nl2k.ab.ca]

2.4 DATE_IN_FUTURE_03_06 Date: is 3 to 6 hours after Received: date

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 PDS_BTC_MSGID Bitcoin ID with T_MSGID_NOFQDN2

0.5 PDS_BTC_ID FP reduced Bitcoin ID

0.0 HDR_ORDER_FTSDMCXX_DIRECT Header order similar to spam

(FTSDMCXX/boundary variant) + direct-to-MX

3.2 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP

addr 1)

0.0 STATIC_XPRIO_OLE Static RDNS + X-Priority + MIMEOLE

0.0 BITCOIN_XPRIO Bitcoin + priority

1.0 BITCOIN_YOUR_INFO BitCoin with your personal info

1.0 BITCOIN_SPAM_07 BitCoin spam pattern 07

0.0 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed

1.0 BITCOIN_MALWARE BitCoin + malware bragging

0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF

failed

3.1 DOS_OE_TO_MX Delivered direct to MX with OE headers

0.0 NO_FM_NAME_IP_HOSTN No From name + hostname using IP address

Subject: {SPAM?} You have outstanding debt.



Hello there!



Unfortunately, there are some bad news for you.

Around several months ago I have obtained access to your devices that you were using to browse internet.

Subsequently, I have proceeded with tracking down internet activities of yours.



Below, is the sequence of past events:

In the past, I have bought access from hackers to numerous email accounts (today, that is a very straightforward task that can be done online).

Clearly, I have effortlessly logged in to email account of yours (games@nl2k.ab.ca).



A week after that, I have managed to install Trojan virus to Operating Systems of all your devices that are used for email access.

Actually, that was quite simple (because you were clicking the links in inbox emails).

All smart things are quite straightforward. (^-^)



The software of mine allows me to access to all controllers in your devices, such as video camera, microphone and keyboard.

I have managed to download all your personal data, as well as web browsing history and photos to my servers.

I can access all messengers of yours, as well as emails, social networks, contacts list and even chat history.

My virus unceasingly refreshes its signatures (since it is driver-based), and hereby stays invisible for your antivirus.



So, by now you should already understand the reason why I remained unnoticed until this very moment...



While collecting your information, I have found out that you are also a huge fan of websites for adults.

You truly enjoy checking out porn websites and watching dirty videos, while having a lot of kinky fun.

I have recorded several kinky scenes of yours and montaged some videos, where you reach orgasms while passionately masturbating.



If you still doubt my serious intentions, it only takes couple mouse clicks to share your videos with your friends, relatives and even colleagues.

It is also not a problem for me to allow those vids for access of public as well.

I truly believe, you would not want this to occur, understanding how special are the videos you love watching, (you are clearly aware of that) all that stuff can result in a real disaster for you.



Let's resolve it like this:

All you need is $1450 USD transfer to my account (bitcoin equivalent based on exchange rate during your transfer), and after the transaction is successful, I will proceed to delete all that kinky stuff without delay.

Afterwards, we can pretend that we have never met before. In addition, I assure you that all the harmful software will be deleted from all your devices. Be sure, I keep my promises.



That is quite a fair deal with a low price, bearing in mind that I have spent a lot of effort to go through your profile and traffic for a long period.

If you are unaware how to buy and send bitcoins - it can be easily fixed by searching all related information online.



Below is bitcoin wallet of mine: 1C2ek9b57xdVY9rPUaUnczxN5vGjVS8EhA



You are given not more than 48 hours after you have opened this email (2 days to be precise).



Below is the list of actions that you should not attempt doing:

> Do not attempt to reply my email (the email in your inbox was created by me together with return address).

> Do not attempt to call police or any other security services. Moreover, don't even think to share this with friends of yours. Once I find that out (make no doubt about it, I can do that effortlessly, bearing in mind that I have full control over all your systems) - the video of yours will become available to public immediately.

> Do not attempt to search for me - there is completely no point in that. All cryptocurrency transactions remain anonymous at all times.

> Do not attempt reinstalling the OS on devices of yours or get rid of them. It is meaningless too, because all your videos are already available at remote servers.



Below is the list of things you don't need to be concerned about:

> That I will not receive the money you transferred.

- Don't you worry, I can still track it, after the transaction is successfully completed, because I still monitor all your activities (trojan virus of mine includes a remote-control option, just like TeamViewer).

> That I still will make your videos available to public after your money transfer is complete.

- Believe me, it is meaningless for me to keep on making your life complicated. If I indeed wanted to make it happen, it would happen long time ago!



Everything will be carried out based on fairness!



Before I forget...moving forward try not to get involved in this kind of situations anymore!

An advice from me - regularly change all the passwords to your accounts.



SEO spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 17 Sep 2022 16:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oZfo5-0000yX-Ez

for dave@doctor.nl2k.ab.ca;

Sat, 17 Sep 2022 15:57:01 -0600

Resent-From: The Doctor

Resent-Date: Sat, 17 Sep 2022 15:57:01 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f195.google.com ([209.85.215.195]:37674)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oZWv5-0008lN-Py

for sales@nk.ca;

Sat, 17 Sep 2022 06:27:45 -0600

Received: by mail-pg1-f195.google.com with SMTP id bh13so22778853pgb.4

for ; Sat, 17 Sep 2022 05:27:18 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=oxigensoftsol-co-in.20210112.gappssmtp.com; s=20210112;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date;

bh=OhCimc40yvKWgiQTzmwWtcHqJOI7NRu8GcAdcJPBn44=;

b=7NJkhpuR5K6PkibqcgHd5woPyrWOmwgq843W1yi61/bu18Q1bL8tSWW6bqbyCLVEDg

qchzW4/bABdW/FyFaOR7MaLOykMyv18PSYLe0yht+FDGNw+WuZGhLFflRUIxZGFD2HgJ

l7xSmVfUALr4+SuRxFFbNHyxjrII/1lQhlilTRSqZpEHN2U3jxbDybbHSfxvKwyyNb+E

naQFfye52Fb62UgM4attqijJm23QafJ/XBCcUNUIhB+YHj3jQVbS+f53CIL/I2yaAIob

DWl1SRvgDcjLPKHU76Yw2V6rHUrcM6WRn9xFcnUgy4QJfDl7/8kUiy1XSZCxybibKkDQ

OzaA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date;

bh=OhCimc40yvKWgiQTzmwWtcHqJOI7NRu8GcAdcJPBn44=;

b=7Nq1RGewKncCHhpWJE50P8XambQHZEPBLQK89qX+GKfWKmbYd1tWvVIsXMv64yzlRt

MlFdJXS2WCU21I1Rvp7thJrQWhOvxlzCl2DtzanLUwHjfUo/VPqJW6G89AN/0cMD2aFA

xOD+QAmq220ZfIWX9iA5+buENrv6hdKiqWIAExY/U8C69ztZknVbCborB1s9oAuXKeiT

70G/tqpMfEHuzc4gOpcdWeOa8+I2YuC4tyUKcPG/lYe2J52bk7Z0VN6+B/TTXNmi32le

mY0azdU4qX0wTtiGS4W7cAvrti3LNpn41bnX+wNynRRMRLK9XVn/qGIawIedaLC8adFn

8Mvw==

X-Gm-Message-State: ACrzQf3riF1jVaddOCDTWb7F02ESZbKqseAnF28jJIbYx03jgFLHy+kg

GGr1c849Kn9Ihtg1B0KfPnZhfQ4iugFp2Q==

X-Google-Smtp-Source: AMsMyM6wL8AaNTKIuL8AAn/tfZGfdPpIIq5JHNCl+KpBrjPit9zLmqii0DyCfsFjhmWHapnQRE/Isw==

X-Received: by 2002:a05:6a02:4c:b0:435:176d:2a18 with SMTP id az12-20020a056a02004c00b00435176d2a18mr8494746pgb.577.1663417632829;

Sat, 17 Sep 2022 05:27:12 -0700 (PDT)

Received: from LAPTOPKSMA357N ([103.46.201.246])

by smtp.gmail.com with ESMTPSA id f7-20020a633807000000b004390b40b4a1sm11467385pga.23.2022.09.17.05.27.11

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Sat, 17 Sep 2022 05:27:12 -0700 (PDT)

From: "Anil"

To:

Subject: Let's Discuss- SEO...

Date: Sat, 17 Sep 2022 17:54:50 +0530

Message-ID: <06f901d8ca90$cfc53960$6f4fac20$@co.in>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_06FA_01D8CABE.E97D7560"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdjKhr3Hykub4FuSQYiKxcLX6/obTA==

Content-Language: en-in



This is a multipart message in MIME format.



------=_NextPart_000_06FA_01D8CABE.E97D7560

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,



I was going through your website and I found it impressive!! However, when I

search for your business keywords I see your competitors ranked on 1st page

whereas I am unable to see your website anywhere on the first page of search

engine results.



Would you be interested in a possible promote your website and business with

latest technology of SEO Campaign.



I have done a detailed research of your website.



I'd be happy to share our past work and client testimonials.



Thanks,



Anil









------=_NextPart_000_06FA_01D8CABE.E97D7560

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">






charset=3Dus-ascii">




















style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>
lang=3DEN-IN style=3D'font-size:10.0pt;color:#222222'>Hi,






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>
style=3D'font-size:10.0pt;color:#222222'>I was going through your =

website and I

found it impressive!! However, when I search for your business keywords =

I see

your competitors ranked on 1st page whereas I am unable to see your =

website

anywhere on the first page of search engine results.
lang=3DAR-SA

dir=3DRTL>






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>
style=3D'font-size:10.0pt;color:#222222'>Would you be interested in a =

possible

promote your website and business with latest technology of SEO =

Campaign.






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>
style=3D'font-size:10.0pt;color:#222222'>I have done a detailed research =

of your

website.






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>
style=3D'font-size:10.0pt;color:#222222'>I'd be happy to share our past =

work and

client testimonials.






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>
style=3D'font-size:10.0pt;color:#222222'>Thanks,






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>
style=3D'font-size:10.0pt;color:#222222'>Anil





 

















------=_NextPart_000_06FA_01D8CABE.E97D7560--



Charity Spam from Google

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 17 Sep 2022 08:20:00 -0600

Received: from mail-pj1-f51.google.com ([209.85.216.51]:38715)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oZXWY-000FGt-P9

for dave@doctor.nl2k.ab.ca;

Sat, 17 Sep 2022 07:06:27 -0600

Received: by mail-pj1-f51.google.com with SMTP id x1-20020a17090ab00100b001fda21bbc90so2405284pjq.3

for ; Sat, 17 Sep 2022 06:06:05 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc

:subject:date;

bh=0jXLGOm62no2twBHthemuyF9+WZL4G+MIF4fHt71vhc=;

b=qLe8LGzO98sERQQKNaNpv4MUDfcAh45Q0qi6WWT+Bff5Qhe1tVlq/pBR/YPwhhREr8

kgsdxBPQiAzquPEaRe4oxN3GktuvLhHvEG/x8V7lxpakDSiQ1I2CPcNtj8K3ePOLWh1C

GeBBNRD8XMKw1xlt4ShDFL78gU5GiyNB6tJ3pM8jYy1ci9S/yGQRltqR6TjiPj6g3Fmj

CvDT0ZNoZxbdLJ6URMx71nyEhrGP/iKWg7PvzODGO/vev5dREEr/bGVadt1TG3b6DQjp

Jag9nB7MvXtqQ/ssbZa2Vmh8Fft6H9+OWNb6A2NpHICR0wyocnkXNiWAfkIg/9+7igGu

1tgw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:sender:mime-version

:x-gm-message-state:from:to:cc:subject:date;

bh=0jXLGOm62no2twBHthemuyF9+WZL4G+MIF4fHt71vhc=;

b=uQaP3l5xBh32ouJTRlTF8CpCelm6DDTOj+Zkr7g+g0ER5VKDs17uqo0L6Jps/bdzMp

9ABNAhDUPfB+NBrq22L/xn4Rw6sGCLLsVqPx5BpaoRdCDNE6JiF77r7dEbVBNd2OO36y

QPOmPhS+51JVqVHs6muo9psPqukm8kOHeghWFRMTxMubZfzL4hcTV56QP7I0F12udokH

K4SOaZ6jq4+Tf2SQC0JdrL9/K36yXf+osAmGxycxERTJTKnzzHqUMm0UFi6Fj4YDIUrr

8u3ghqQMK2k+pQnM+u7+/2uEn9iuZ3Vjs7EXIgaNQdGhq5J1F0V2tGgTVUSSNYyB2+lD

N0lw==

X-Gm-Message-State: ACrzQf3wQKY0ZZqxEJS1KfFEwKHU3ZFDJjaXgRfDcUSUd279STkXBNuW

2WR3vSuu0GNBoY3U8ayIUAhFd6I1+nhdtDcJ1x8=

X-Google-Smtp-Source: AMsMyM7hfrxlXuaddTGyJCvOK/ZQ3urOcR+8NdWjSf+Qgp433X47NakoAAhfvZMhUItegxGdqxZGsAhGBYWT6LbuaTg=

X-Received: by 2002:a17:90b:314b:b0:203:41c:2dbb with SMTP id

ip11-20020a17090b314b00b00203041c2dbbmr10432473pjb.18.1663419960062; Sat, 17

Sep 2022 06:06:00 -0700 (PDT)

MIME-Version: 1.0

Sender: jesusdaivd38@gmail.com

Received: by 2002:a05:7300:434e:b0:77:bc01:7322 with HTTP; Sat, 17 Sep 2022

06:05:59 -0700 (PDT)

From: "Mrs.Jackie Grayson"

Date: Sat, 17 Sep 2022 01:05:59 -1200

X-Google-Sender-Auth: 7QwY87CH_1F7Bn6K9zlpVQxfe6A

Message-ID:

Subject: Gooday my beloved,

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 17.2

X-Spam_score_int: 172

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good day my beloved. I sent this mail praying it will get

to you in a good condition of health, My name is Mrs. Grayson Jackie. I am

a Norway Citizen, I am married to, late Mr. Jackie Robinson. a small gold

company owner; [...]



Content analysis details: (17.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[jesusdaivd38[at]gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.51 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[jesusdaivd38[at]gmail.com]

2.7 UNCLAIMED_MONEY BODY: People just leave money laying around

2.5 HK_SCAM_N2 BODY: No description available.

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

-0.0 T_SCC_BODY_TEXT_LINE No description available.

2.0 HK_SCAM No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Gooday my beloved,



Good day my beloved.



I sent this mail praying it will get to you in a good condition of

health, My name is Mrs. Grayson Jackie. I am a Norway Citizen, I am

married to, late Mr. Jackie Robinson. a small gold company owner; My

late husband died on an airline crash, in the year February 2010,

During his lifetime he deposited the sum of ($11,500,000.00 Dollars),

in the bank The money was from the sale of his company and death

benefits payment and entitlements of my late husband by his company. I

am sending you this message with heavy tears in my eyes and great

sorrow in my heart, and also praying that it will reach you in good

health because I am not in good health, I sleep every night without

knowing if I may be alive to see the next day. I am suffering from

long time cancer and presently I am partially suffering from Leprosy,

which has become difficult for me to move around.I was married to my

late husband for more than 6 years without having a child and my

doctor confided that I have less chance to live, having to know when

the cup of death will come, I decided to contact you to claim the fund

since I don't have any relation.I grew up from an orphanage home.



I have decided to donate this money for the support of helping

Motherless babies, Less privileged/Widows and churches also to build

the house of God because I am dying and diagnosed with cancer for

about 3 years ago.I have decided to donate from what I have inherited

from my late husband to you for the good work of Almighty God. I will

be going in for an operation surgery soon. Now I want you to stand as

my next of kin to claim the funds for charity purposes. Because of

this money remains unclaimed after my death, the bank executives or

the government will take the money as unclaimed fund and maybe use it

for selfishness and worthless ventures, I need a very honest person

who can claim this money and use it for Charity works, for orphanages,

widows and also build schools and churches for less privilege that

will be named after my late husband and my name. Please I'm waiting

for your prompt response if only you are interested. I will send you

further details and the bank contact details where the fund has been

deposited for you to contact the Bank for immediate release and

transfer of the fund into your bank account as my rightful

beneficiary.

May god bless you and your family.

Sincerly, Mrs, Grayson Jackie.

Written from the Hospital.

Machining parts spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 17 Sep 2022 05:49:32 -0600

Received: from mail-pj1-f65.google.com ([209.85.216.65]:35829)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oZVva-0001uL-P3

for dave@doctor.nl2k.ab.ca;

Sat, 17 Sep 2022 05:24:14 -0600

Received: by mail-pj1-f65.google.com with SMTP id m10-20020a17090a730a00b001fa986fd8eeso2293331pjk.0

for ; Sat, 17 Sep 2022 04:23:46 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=goodbomold.com; s=google;

h=mime-version:returnreceipt:disposition-notification-to:reply-to

:date:subject:to:from:message-id:from:to:cc:subject:date;

bh=mFMILMSBS2bqsMfJg071/mOcpYitdVsASfcY/crca5w=;

b=sJb4myu9n2+kzwbWT70pMPy2a6t/de8huKjU7NWnMtBW1VT74qDNdmKEpTHC6e7O2p

Ig1URvbTq7uCSAl6dzwXmlKqPCjccp/kVGKARCCMTiiXQIQT4sHxNd0oPwoFnZhEKNgC

PJ7TInrhtEEIcbOj4C2hB1Yh5zvRD/gz1uZJg=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=mime-version:returnreceipt:disposition-notification-to:reply-to

:date:subject:to:from:message-id:x-gm-message-state:from:to:cc

:subject:date;

bh=mFMILMSBS2bqsMfJg071/mOcpYitdVsASfcY/crca5w=;

b=qRscxYwolha5PpXK6fUKVkDt2WA83lo2+liwmWcjUCLwi2LPEVbKI7Z8tHqwWgK/5P

6va3O7gtD92SQc8BKxMH4NhbVq7siAcORJUXMrda7WqCSCxnw9Rj4g3MSB+wHpxZCxr8

KdunC97FlUn/ZR59BWWUWf9ApFVIXV5UrR8ZtMGZlpLHMhYj6mM8gum5Jab4JHGkp0GS

iNktXgSeS0PI1p0E5ry4SPeB0XfG4fZFy/SD5Lzqn3eMxh7JrE5eDcbaH1TfEmU6Vcx5

ISyJBWaK8Ux7srbssr7eXlDixzaZbSKeBh7sX1CjkAGGMZSV5pDOQS1h8Su+GQjCUY51

4XdA==

X-Gm-Message-State: ACrzQf3jUIzg5qs3OWJw7CnH2SzaavVoUw6dyg0lfLTr654cjIlNuK4h

Low+Y4jaNn1xkwF44Jda9KNJFWVjPqEovHMV

X-Google-Smtp-Source: AMsMyM74bPeo/bASu3w6uezAkPudnzL15I+gRMOpwIqR2+hJXYaYDYB9YIPNrBIdKmEZVLpFjswaQQ==

X-Received: by 2002:a17:902:a388:b0:176:e571:4923 with SMTP id x8-20020a170902a38800b00176e5714923mr4035334pla.6.1663413820864;

Sat, 17 Sep 2022 04:23:40 -0700 (PDT)

Received: from ksupn (awork116068.netvigator.com. [203.198.99.68])

by smtp.gmail.com with ESMTPSA id y34-20020a631822000000b0041d6d37deb5sm15082743pgl.81.2022.09.17.04.23.38

for

(version=TLS1 cipher=ECDHE-ECDSA-AES128-SHA bits=128/128);

Sat, 17 Sep 2022 04:23:40 -0700 (PDT)

Message-ID: <6325ae3c.630a0220.44f38.93b7@mx.google.com>

X-Google-Original-Message-ID: 890F1A5F04DE42DF81EC0ED8D9092BFE@ksupn

From: "emma@blueskyalloy.com"

To:

Subject: First Choise for Precision Machining Parts

Date: Sat, 17 Sep 2022 19:23:40 +0800

Reply-To: emma@blueskyalloy.com

Disposition-Notification-To: emma@blueskyalloy.com

ReturnReceipt: 1

X-Priority: 3

X-MSMail-Priority: Normal

MIME-Version: 1.0

Content-type: multipart/alternative; boundary=20175fdafb161659694f02ed3eaf3ee7

X-Mailer: Microsoft Outlook Express 6.00.3790.4657

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4913

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:

Dear Manager,

Nice to meet you.

Please allow

me to introduce our factory------Shenzhen Blue Sky Precision Technology

Co.,Ltd 
shortly.

Why can we become your first [...]



Content analysis details: (7.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 HK_RANDOM_FROM From username looks random

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.65 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line

length greater than 79 characters

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

Subject: {SPAM?} First Choise for Precision Machining Parts



This is a multi-part message in MIME format.



--20175fdafb161659694f02ed3eaf3ee7

Content-type: text/plain;

charset=gb2312

content-transfer-encoding:base64



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

--20175fdafb161659694f02ed3eaf3ee7

Content-type: text/html;

charset=gb2312

content-transfer-encoding:base64



PFA+RGVhciBNYW5hZ2VyLDwvUD4NCjxQPk5pY2UgdG8gbWVldCB5b3UuIDwvUD4NCjxQPlBsZWFzZSBhbGxvdyBtZSB0byBpbnRyb2R1Y2Ugb3VyIGZhY3RvcnktLS0tLS08VT5TaGVuemhlbiBCbHVlIFNreSBQcmVjaXNpb24gVGVjaG5vbG9neSBDby4sTHRkJm5ic3A7IDwvVT5zaG9ydGx5LjwvUD4NCjxQPldoeSBjYW4gd2UgYmVjb21lIHlvdXIgZmlyc3QgY2hvaXNlIGZvciBwcmVjaXNpb24gbWFjaGluaW5nIHBhcnRzPzwvUD4NCjxQPjEpIDxTVFJPTkc+UHJvZmVzc2lvbmFsIFByb2Nlc3NpbmcuIDwvU1RST05HPjxCUj5TcGVjaWFsaXppbmcgaW4gcHJlY2lzaW9uIG1lY2hhbmljYWwgcGFydHMgcHJvY2Vzc2luZywgbm9uLXN0YW5kYXJkIHBhcnRzIHByb2Nlc3NpbmcsIHRpdGFuaXVtIGFsbG95IDxCUj5wcm9jZXNzaW5nLCB2YXJpb3VzIGNhc3RpbmcgcHJvY2Vzc2luZywgc2hlZXQgbWV0YWwgcHJvY2Vzc2luZy48L1A+DQo8UD4yKSA8U1RST05HPk9uZS1zdG9wIGZhY3RvcnkuIDwvU1RST05HPjxCUj5Qcm9mZXNzaW9uYWwgc3VyZmFjZSB0cmVhdG1lbnQgc3VwcGxpZXIsIGluY2x1ZGluZyBlbGVjdHJvcGxhdGluZywgb3hpZGF0aW9uLCBvaWwgc3ByYXlpbmcsIHBvd2RlciBzcHJheWluZzwvUD4NCjxQPjMpIDxTVFJPTkc+SGlnaC1RdWFsaXR5IFNldmljZS4gPC9TVFJPTkc+PEJSPkdldHRpbmcgR0IvVDE5MDAxLTIwMTYgaWR0IElTTzkwMDE6MjAxNSwgR0IvVDI0MDAxLTIwMTYgaWR0IElTTzE0MDAxOjIwMTUgY2VydGlmaWNhdGlvbi48L1A+DQo8UD40KSA8U1RST05HPkNvbXBldGl0aXZlIFByaWNlLjwvU1RST05HPjxCUj5FdmFsdWF0aW5nIHRoZSBxdW90YXRpb24gYnkgb3VyIHJpY2ggZXhwZXJpZW5jZSBlbmdpbmVlcmluZyB0ZWFtLjwvUD4NCjxQPjUpIDxTVFJPTkc+UHJlY2lzaW9uIEVxdWlwcG1lbnRzLjwvU1RST05HPjxCUj5DTkMgbWFjaGluaW5nIGNlbnRlciwgQ05DIGxhdGhlLCB3aXJlIGN1dHRpbmcsIGhpZ2gtcHJlY2lzaW9uIGludGVybmFsICZhbXA7IGV4dGVybmFsIGdyaW5kaW5nLjwvUD4NCjxQPklmIHlvdSBoYXZlIGFueSBwcm9qZWN0IG9uIGhhbmQsIHBsZWFzZSBkb24ndCBoZXNpdGF0ZSB0byBjb250YWN0IHVzLiBXZSB3aWxsIHByb3ZpZGUgeW91IHRoZSBtb3N0IGZhdm9yYWJsZTxCUj5wcmljZSBhbmQgdGhlIGJlc3Qgc2VydmljZS48L1A+DQo8UD5Mb29raW5nIGZvcndhcmQgdG8geW91ciBzb29uIHJlcGx5LjwvUD4NCjxQPlNpbmNlcmVseSB5b3Vycyw8QlI+RW1tYTwvUD4NCjxQPjxCUj5TaGVuemhlbiBCbHVlIFNreSBQcmVjaXNpb24gVGVjaG5vbG9neSBDby4sTHRkPEJSPkhvdWdhbmcgWGluZ3hpYW4gSW5kdXN0cmlhbCBab25lLCBTaGlzaGFuIHRvd24sIDxCUj5OYW5oYWkgZGlzdHJpY3QsIEZvc2hhbiBjaXR5LCBHdWFuZ2RvbmcgcHJvdmluY2UuPC9QPg0KPFA+VGVsOiArODYtMDc1Ny04MTc5MjE2OTxCUj5GYXg6ICs4Ni0wNzU3LTg1NTA1OTQ4PEJSPkVtYWlsOiA8QSBocmVmPSJtYWlsdG86ZW1tYUBibHVlc2t5YWxsb3kuY29tIj5lbW1hQGJsdWVza3lhbGxveS5jb208L0E+PEJSPldlYjogPEEgaHJlZj0iaHR0cDovL3d3dy5ibHVlc2t5YWxsb3kuY29tIj53d3cuYmx1ZXNreWFsbG95LmNvbTwvQT4mbmJzcDsgPC9QPg0KDQoNCjxici8+PGJyLz48YnIvPiA8YSBocmVmPSdVbnN1YnNjcmliZS5hc3A/bWFpbD1kYXZlQGRvY3Rvci5ubDJrLmFiLmNhJyB0YXJnZXQ9X2JsYW5rPlVuc3Vic2NyaWJlLmFzcD9tYWlsPWRhdmVAZG9jdG9yLm5sMmsuYWIuY2E8L2E+

--20175fdafb161659694f02ed3eaf3ee7--



French DHL Phish from Website welcome

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 17 Sep 2022 06:17:53 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oZWSe-000893-CK

for dave@doctor.nl2k.ab.ca;

Sat, 17 Sep 2022 05:58:16 -0600

Resent-From: The Doctor

Resent-Date: Sat, 17 Sep 2022 05:58:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from gateway34.websitewelcome.com ([192.185.148.104]:17989)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oZVhT-0000Fn-2h

for doctor@doctor.nl2k.ab.ca;

Sat, 17 Sep 2022 05:09:36 -0600

Received: from cm10.websitewelcome.com (cm10.websitewelcome.com [100.42.49.4])

by gateway34.websitewelcome.com (Postfix) with ESMTP id 1A58C452DD

for ; Sat, 17 Sep 2022 06:09:13 -0500 (CDT)

Received: from web2.mwp104.cmh.pro1.webhostingservices.com ([162.214.59.22])

by cmsmtp with SMTP

id ZVhAoUwiXQLX5ZVhAoLVag; Sat, 17 Sep 2022 06:09:13 -0500

X-Authority-Reason: nr=8

Received: by web2.mwp104.cmh.pro1.webhostingservices.com (Postfix, from userid 1388)

id D5607104766; Sat, 17 Sep 2022 11:04:50 +0000 (UTC)

To: doctor@doctor.nl2k.ab.ca

Subject: Status : shipment arrived.

Date: Sat, 17 Sep 2022 11:04:50 +0000

From: "Dhl.com"

Message-ID: <7d8732e854f13abee19de87f75f63749@youresportshome.net>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_7d8732e854f13abee19de87f75f63749"

Content-Transfer-Encoding: 8bit



This is a multi-part message in MIME format.



--b1_7d8732e854f13abee19de87f75f63749

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit





Â

Cher client [ doctor@doctor.nl2k.ab.ca ]Â ,

Â

 Le colis qui vous a été envoyé par nos services a été livré au bureau du DHLÂ

et en attente de traitement en raison : frais du livraison impayés



Â

Avis d'arrivée :





Tracking ID : #7140012563



Expected health medical today-marketthehealth medical todayDelivery health medical today-marketthehealth medical todayDate : 17 / 09 / 2022



Shipping health medical today-marketthehealth medical todayCosts :Â ( 2,56 CAD)Â

Â

Que devrais-je faire ?



Veuillez consulter le lien sécurisé ci-dessous pour confirmer votre adresse et payer les frais de livraison impayés

  Veuillez authentifier votre carte via l'authentification de l'application ou en recevant l'authentification OTP par SMS

Â

Suivez health medical today-marketmon health medical today-marketcolis

Â

Â

Noter : Veuillez compléter la vérification en ligne pour faire livrer votre colis à votre domicile

Â

Salutations,

MyDHL

______________________________________________________________________________________________________________

2022 © Dhealth HL International GmbH





--b1_7d8732e854f13abee19de87f75f63749

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable



3D=<br
"Logo DHL" src=3D"https://th.bing.com/th/id/OIP.kAyFTsYHFu05mQPrHFR53wHaBD?=

w=3D394&h=3D56&c=3D7&r=3D0&o=3D5&dpr=3D1.5&pid=3D1.7" width=3D382 align=3Db=

aseline height=3D73>



=C2=A0



Cher client [ doct=

or@doctor.nl2k.ab.ca ]
=C2=A0,



=C2=A0




BOTTOM: 10px" align=3Dleft>
ze=3D5>=C2=A0 Le colis qui vous a =C3=A9t=C3=A9 envoy=C3=A9 par nos=

services a =C3=A9t=C3=A9 livr=C3=A9 au bureau du
DHL
ONG>
=C2=A0



BOTTOM: 10px" align=3Dleft>
ze=3D5>e

UI">t en attente de traitement en raison=C2=A0:=

=C2=A0frais du livraison
impay=C3=A9s

T>



BOTTOM: 10px" align=3Dleft>
>



BOTTOM: 10px" align=3Dleft>
egoe UI">
=C2=A0



BOTTOM: 10px" align=3Dleft>=

Avis d'arriv=C3=A9e :







  • BOTTOM: 10px" align=3Dleft>
    ONG>Tracking ID
    :
    color=3D#c0c0c0 size=3D4>#7140012563





  • BOTTOM: 10px" align=3Dleft>
    ONG>Expected

    ">health medical today-marketthe

    style=3D"FONT-SIZE: 0px">health medical today
    Deliver=

    y
    health me=

    dical today-marketthe

    ONT-SIZE: 0px">health medical today
    Date
    T> :
    17 / 09 / 2022<=

    /FONT>





  • BOTTOM: 10px" align=3Dleft>
    ONG>Shipping
    tyle=3D"FONT-SIZE: 0px">health medical today-market=

    the
    health medical today=

    Costs
    :=C2=A0

    c0c0 size=3D3>( 2,56 CAD)

    =3D"PADDING-LEFT: 10px">
    ,0)">=C2=A0
    <=

    /FONT>

    0>



ONT face=3DArial>
=C2=A0


r=3D#000000>


azHf tw-nfl" style=3D"OVERFLOW: hidden; POSITION: relative; OUTLINE-WIDTH: =

0px; OUTLINE-STYLE: none; OUTLINE-COLOR: invert">Que devrais-je =

faire ?



azHf tw-nfl" style=3D"OVERFLOW: hidden; POSITION: relative; OUTLINE-WIDTH: =

0px; OUTLINE-STYLE: none; OUTLINE-COLOR: invert">

ass=3D"tw-data-placeholder tw-text-small tw-ta" style=3D"FONT-SIZE: 16px; O=

VERFLOW: hidden; BORDER-TOP: medium none; FONT-FAMILY: inherit; BORDER-RIGH=

T: medium none; WIDTH: 270px; WHITE-SPACE: pre-wrap; BORDER-BOTTOM: medium =

none; POSITION: relative; FONT-WEIGHT: normal; COLOR: black; PADDING-BOTTOM=

: 0px; TEXT-ALIGN: left; PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: =

medium none; MARGIN: 0px; LINE-HEIGHT: 24px; PADDING-RIGHT: 0.14em; BACKGRO=

UND-COLOR: transparent; resize: none; overflow-wrap: break-word" dir=3Dltr =

data-placeholder=3D"">



ADDING-LEFT: 10px">Veuillez consulter le lien s=C3=A9cur=

is=C3=A9 ci-dessous pour confirmer votre adresse et payer les frais de livr=

aison impay=C3=A9s




=3D"PADDING-LEFT: 10px">=C2=A0=C2=A0 Veuillez authentifier votre c=

arte via l'authentification de l'application ou en recevant l'authentificat=

ion OTP par SMS




le=3D"PADDING-LEFT: 10px">
=C2=A0


000>
=3DArial>
10px">


KGROUND: #d40511; MARGIN-TOP: 20px; FONT-WEIGHT: bold; COLOR: #fff; PADDING=

-BOTTOM: 6px; PADDING-TOP: 6px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px; bo=

rder-radius: 2px" href=3D"http://bitly.ws/unxA">
2px; FONT-FAMILY: Verdana; VERTICAL-ALIGN: baseline; WHITE-SPACE: normal; F=

ONT-WEIGHT: 700; COLOR: rgb(255,255,255); FONT-STYLE: normal; ORPHANS: 2; W=

IDOWS: 2; BACKGROUND-COLOR: rgb(212,5,17); hyphens: manual; text-decoration=

-line: none">Suivez

ana; VERTICAL-ALIGN: baseline; WHITE-SPACE: normal; FONT-WEIGHT: 700; COLOR=

: rgb(255,255,255); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-C=

OLOR: rgb(212,5,17); hyphens: manual; text-decoration-line: none">health me=

dical today-market

na; VERTICAL-ALIGN: baseline; WHITE-SPACE: normal; FONT-WEIGHT: 700; COLOR:=

rgb(255,255,255); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-CO=

LOR: rgb(212,5,17); hyphens: manual; text-decoration-line: none">mon
>
ine; WHITE-SPACE: normal; FONT-WEIGHT: 700; COLOR: rgb(255,255,255); FONT-S=

TYLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(212,5,17); hyphe=

ns: manual; text-decoration-line: none">health medical today-market
<=

SPAN style=3D"FONT-SIZE: 12px; FONT-FAMILY: Verdana; VERTICAL-ALIGN: baseli=

ne; WHITE-SPACE: normal; FONT-WEIGHT: 700; COLOR: rgb(255,255,255); FONT-ST=

YLE: normal; ORPHANS: 2; WIDOWS: 2; BACKGROUND-COLOR: rgb(212,5,17); hyphen=

s: manual; text-decoration-line: none">colis


ZE: 16px; FONT-FAMILY: Verdana; VERTICAL-ALIGN: baseline; WHITE-SPACE: norm=

al; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); FONT-STYLE: normal; ORPHANS: 2; WI=

DOWS: 2; hyphens: manual; text-decoration-line: none">



WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(68,68,68); PADDING-BOTT=

OM: 0px; FONT-STYLE: normal; PADDING-TOP: 0px; PADDING-LEFT: 0px; ORPHANS: =

2; WIDOWS: 2; MARGIN: 0px; LETTER-SPACING: normal; LINE-HEIGHT: 33px; PADDI=

NG-RIGHT: 0px; TEXT-INDENT: 0px; font-variant-ligatures: normal; font-varia=

nt-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness:=

initial; text-decoration-style: initial; text-decoration-color: initial" a=

lign=3Dleft>=

=C2=A0


face=3DArial>


PADDING-LEFT: 10px">
AN>
=C2=A0




DDING-LEFT: 10px">
0>Noter
: Veuillez compl=C3=A9ter la v=C3=A9rification en lig=

ne pour faire livrer votre colis =C3=A0 votre domicile
=




WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(68,68,68); PADDING-BOTT=

OM: 0px; FONT-STYLE: normal; PADDING-TOP: 0px; PADDING-LEFT: 0px; ORPHANS: =

2; WIDOWS: 2; MARGIN: 0px; LETTER-SPACING: normal; LINE-HEIGHT: 33px; PADDI=

NG-RIGHT: 0px; TEXT-INDENT: 0px; font-variant-ligatures: normal; font-varia=

nt-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness:=

initial; text-decoration-style: initial; text-decoration-color: initial" a=

lign=3Dleft>
10px">
=C2=A0




WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(68,68,68); PADDING-BOTT=

OM: 0px; FONT-STYLE: normal; PADDING-TOP: 0px; PADDING-LEFT: 0px; ORPHANS: =

2; WIDOWS: 2; MARGIN: 0px; LETTER-SPACING: normal; LINE-HEIGHT: 33px; PADDI=

NG-RIGHT: 0px; TEXT-INDENT: 0px; font-variant-ligatures: normal; font-varia=

nt-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness:=

initial; text-decoration-style: initial; text-decoration-color: initial" a=

lign=3Dleft>
10px">Salutations,




WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(68,68,68); PADDING-BOTT=

OM: 0px; FONT-STYLE: normal; PADDING-TOP: 0px; PADDING-LEFT: 0px; ORPHANS: =

2; WIDOWS: 2; MARGIN: 0px; LETTER-SPACING: normal; LINE-HEIGHT: 33px; PADDI=

NG-RIGHT: 0px; TEXT-INDENT: 0px; font-variant-ligatures: normal; font-varia=

nt-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness:=

initial; text-decoration-style: initial; text-decoration-color: initial" a=

lign=3Dleft>
10px">MyDHL




WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(68,68,68); PADDING-BOTT=

OM: 0px; FONT-STYLE: normal; PADDING-TOP: 0px; PADDING-LEFT: 0px; ORPHANS: =

2; WIDOWS: 2; MARGIN: 0px; LETTER-SPACING: normal; LINE-HEIGHT: 33px; PADDI=

NG-RIGHT: 0px; TEXT-INDENT: 0px; font-variant-ligatures: normal; font-varia=

nt-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness:=

initial; text-decoration-style: initial; text-decoration-color: initial" a=

lign=3Dleft>
10px">_____________________________________________________________________=

_________________________________________

>




ace=3D"Segoe UI">2022 =C2=A9 D
=3D"FONT-SIZE: 0px">health
HL International=

GmbH







--b1_7d8732e854f13abee19de87f75f63749--



SEO spam from Microsoft Outlook servers

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 17 Sep 2022 06:18:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oZWRR-0007PW-79

for dave@doctor.nl2k.ab.ca;

Sat, 17 Sep 2022 05:57:01 -0600

Resent-From: The Doctor

Resent-Date: Sat, 17 Sep 2022 05:57:01 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-sgaapc01olkn2037.outbound.protection.outlook.com ([40.92.53.37]:21825 helo=APC01-SG2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oZSpq-0005RP-JT

for root@nk.ca;

Sat, 17 Sep 2022 02:06:03 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=ONuih2ulxV2q/ecFwSTP1zEGhDcZXA3wgEx3tjF/Ve6YmFx3BRG8Qn72Kz0UVw0XE8ueLYmHm+N/h3ue5WVbTgcidcAdBIrjOnbaUYbLG+mhOD/XLgavue8k3TMPmHQwaoqMdpf2wwGXahiPqPjOL+1aUBz5+eQ+EllfegMJdM7NjjBGf1Bb4kgiVxNy3Gp38dvD1Lz5TI6gatxi+49KMl3dcDO+p9fPAqNoUFCZSWFMaIj3BXKqMahPLKQQHCpPQxJ5GKRo0S1hFleGXdz8Lr3FJDSlK+hIgqeNSdzyJHLaIIa5s+bbZThBPhX8LieyjlzBRlWkJFOfywAqeGPuCA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=Xuif0NnOqclC0ZxKBt+F4mOFfum2ntrX/VC6KAwddlU=;

b=WAA7q1B2jSz68nLic3x8Ra4KqyO50K+k6/SmlUPGLdkeQpEFu4gUOFw1BKfN7N6U6RrHaMtg6RlsqEWtuy+fnGVbU9M9GG69GyPYxcFW2mANYa3y0Z/irfPaTSEWJRpgPhg3G1/jCjhWvLf96hgxXNWdJggCo45fXnLTbpCfXvupwfcRlhUbU8Dt9tYVG+Yl7Qtfucq5QcZYrHzX0hajzxlKrw5AogM1yVuYFPysmzCejgXWsgDlME9WTIW7VGXlMAABWJ5EY6pJvIiwC8yr3Yi1P4LmBe+pNVCAxQHy556nkks9XHmyxlzw1zbD10n3slT3/wqeZDkD5Yp9X2yRAw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=Xuif0NnOqclC0ZxKBt+F4mOFfum2ntrX/VC6KAwddlU=;

b=DwD0knK94iBVCgb3ava0z4ovPGMhIHAY14Z6xNW1MsBHsZJ/d5Msus5hhJJcYHHbq16VcqFf+WzV0cIgoYVTHM1F9BNer0X/W6ZGSNz3OHY+tJmvsKSgI/W2JyHmJn+5JCKK+x0t2gnCy0WalJTZabu8SmZp2cWUKi5FuKiuzQHzsaQV3AYq94ts280NO6hcMctA1pSha2xlVbWgFKNI4HukdgnGoPt+aqbfYEBozB+Hh6/n7JtWFbhHKN817rJ6N9Bvh6tGQ6UH4DlW6/Nhp0RgMJZEfZtRifAUcz80AuEdxKc5ToiJRZMGX12+g+8QSOXCLEW4ic5aG7i83w7p9Q==

Received: from TY0PR0101MB4384.apcprd01.prod.exchangelabs.com

(2603:1096:400:1b7::14) by PUZPR01MB4659.apcprd01.prod.exchangelabs.com

(2603:1096:301:ef::8) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5632.16; Sat, 17 Sep

2022 08:05:12 +0000

Received: from TY0PR0101MB4384.apcprd01.prod.exchangelabs.com

([fe80::252c:4657:f4e7:9eac]) by

TY0PR0101MB4384.apcprd01.prod.exchangelabs.com

([fe80::252c:4657:f4e7:9eac%4]) with mapi id 15.20.5612.022; Sat, 17 Sep 2022

08:05:12 +0000

From: Abhay Gangwar

Subject: Web Service Audit

Thread-Topic: Web Service Audit

Thread-Index: AQHYymw2bvn4sxZB0UC+/5eJZz7CCA==

Date: Sat, 17 Sep 2022 08:05:12 +0000

Message-ID:



Accept-Language: en-US, en-IN

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [GJe+4/2RsTV8yTelm3BxQ0JCTC1nwI/V2uDcFmbTvb0=]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TY0PR0101MB4384:EE_|PUZPR01MB4659:EE_

x-ms-office365-filtering-correlation-id: 31aaaf18-c71e-469c-1033-08da988358b7

x-microsoft-antispam: BCL:0;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?fuh92csZMaTwRxFPtDaYg2R+AH6NM6CKJLVAIdf0JyUZME6M9ex9Te9ygr?=

=?iso-8859-1?Q?yEoW25zO8EyGiID8vWGrlu5j6AIhb+9KMx+EbdD/pMbgDXilE6kdZuCDkY?=

=?iso-8859-1?Q?oO2fxLsKvWSqQloFl4twbkwnPt0U6pmQIhA1TpQKV2qnleDpS+Yr8ajR41?=

=?iso-8859-1?Q?e3BVuKOnleBm05GO00du2K//RMpG/Ofql0ok/0erruKtIwdpESyo1EA1JX?=

=?iso-8859-1?Q?0OwIswo8MExbIQF5gvrZ+xFHRp3jbegeX2UPLtxVYdcs8J5S+gHSS0R0uj?=

=?iso-8859-1?Q?gyQqf/Y65vK3LywfOFvdynbTckT9QiJfM95WcRCVjMhcUJ7ggbg2ADRldI?=

=?iso-8859-1?Q?hVMW03j5Al4b0Thx2TRioeq3E8TW0lkn7mCgN5vl2c65dbgfwokPGqB/Zu?=

=?iso-8859-1?Q?MHNZjdcCp3rApdolFQe+rREgLsAY31TOoh9u44c+1gt+S8QRIpqc2y51ZK?=

=?iso-8859-1?Q?t7TiG2/kJSfN9tclO5rfjkuQoco/ydOqVhb03Lqmt53RNizyPWHmepFyIY?=

=?iso-8859-1?Q?0v/dybivYy8ZgXA6iRywY8/WbG6beSxiQETlz0Wuqep8ImNkvVcw9l95IK?=

=?iso-8859-1?Q?NucOV0H5CRGtYk7PYDEdvKybEy4m0xcEZxigNOv6xKFJvW+ohywbf3DTKe?=

=?iso-8859-1?Q?3RMSDLBjheQr4EzqhQIxOHuUicGLWv233mXr+IN7VZk6RkHmfcuzAPksnW?=

=?iso-8859-1?Q?7I/9tf1t+XFl/bAHiUYdSfAz7nH/TIm0KFt09PGZrRFXFH85CVXVriDkaw?=

=?iso-8859-1?Q?w8s8lNNO8OKKApkEyqhxWJPq8o/VPr8MFg/yEBDltRQr+mkTPHHNOUVI/G?=

=?iso-8859-1?Q?Lq2yw92oWRtrT+qhaHQOjwkXrCUYhirjXRYCndexjvhIqOmbdMRB+t79be?=

=?iso-8859-1?Q?h3CA/97AmP1P67HX/0dS22qlNyq5nuWybhHrJBnvtroyP4IknK9KZRrnf0?=

=?iso-8859-1?Q?FOk/DSm6D7zLFwbmXzi6T0bF+1iU4t9/rl/BJ8AnxN1zmGAvPFPwDTO24b?=

=?iso-8859-1?Q?AXQGvIYYYxr4RGvQgmxTDfZ9cmJDFqirFJZ7mXkcQIwdIflr2EMo1D5kHV?=

=?iso-8859-1?Q?OF8ewtPWMvgDGr9N9T4s742TZc9rjVx5sUVOFj812ssFE5RnnEfuZXBomj?=

=?iso-8859-1?Q?R5RqV0CSeX0rO5f8SR0mq5siy+oAlgx1pQn4IM7q2EqZMEYuSjEO7nQQnk?=

=?iso-8859-1?Q?DPsR9M69WMbNhSoofzkEflob6Jlvr9AviBv1iw91UlLfuRPPHYwqv9Dkpp?=

=?iso-8859-1?Q?kb2UDzCfqC+FSCNSnXFfDlUs53Yryc2kFvof+LN27PotxtpZ5W04H04a2T?=

=?iso-8859-1?Q?O7pfU7LLb8JD8S+igCdfQoSamQ=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_TY0PR0101MB438443C949F7E9A2EFF68F8ED44B9TY0PR0101MB4384_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-d8e84.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TY0PR0101MB4384.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 31aaaf18-c71e-469c-1033-08da988358b7

X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Sep 2022 08:05:12.2407

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PUZPR01MB4659



--_000_TY0PR0101MB438443C949F7E9A2EFF68F8ED44B9TY0PR0101MB4384_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hello,



Hope you are doing well.



I'm a web designer; I work with an IT company and I design/Re-design websit=

es for business owners at a very effective cost.



I have some amazing skills and can develop anything you want at a very affo=

rdable price.



If you are interested then, I will send you website quotes & prices.



Thanks





--_000_TY0PR0101MB438443C949F7E9A2EFF68F8ED44B9TY0PR0101MB4384_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">


ont-family:Calibri, "sans-serif"">

Hello,  




ont-family:Calibri, "sans-serif"">

Hope you are doing well.  




ont-family:Calibri, "sans-serif"">

I'm a web designer; I work with an IT company and I design/Re-design websit=

es for business owners at a very effective cost.  




ont-family:Calibri, "sans-serif"">

I have some amazing skills and can develop anything you want at a very affo=

rdable price. 




ont-family:Calibri, "sans-serif"">

If you are interested then, I will send you website quotes & prices.&nb=

sp; 




ont-family:Calibri, "sans-serif"">

Thanks














--_000_TY0PR0101MB438443C949F7E9A2EFF68F8ED44B9TY0PR0101MB4384_--

Credential phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 16 Sep 2022 22:03:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oZP2N-00024b-GT

for dave@doctor.nl2k.ab.ca;

Fri, 16 Sep 2022 22:02:39 -0600

Resent-From: The Doctor

Resent-Date: Fri, 16 Sep 2022 22:02:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [59.61.79.94] (port=52128 helo=cxmsmtp.cgmh.com.cn)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oZOhN-000PA4-Ao

for sales@nk.ca;

Fri, 16 Sep 2022 21:41:08 -0600

Received: from adm.cgmh.com.cn (unknown [10.36.11.108])

by cxmsmtp.cgmh.com.cn (Postfix) with ESMTP id C257910097E3;

Sat, 17 Sep 2022 11:36:59 +0800 (CST)

From: "Account Email Administration"

To: info@accountupgrade.com

Reply-To: belmontrichard0@gmail.com

Subject: Pending Mails Recovery Portal.

Date: Sat, 17 Sep 2022 11:36:59 +0800

Message-Id: <20220917033634.M83766@adm.cgmh.com.cn>

X-Mailer: OpenWebMail 2.54

X-OriginatingIP: 189.191.190.199 (chenzz)

MIME-Version: 1.0

Content-Type: text/html;

charset=gb2312

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 9.7

X-Spam_score_int: 97

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Pending Mails Recovery Portal Access expiration counter to

your pending mails. To continue using your account you need to confirm your

mailbox. Enter your password below.



Content analysis details: (9.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 HK_RANDOM_FROM From username looks random

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[belmontrichard0[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[ailacctdministration[at]hotmail.com]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS

0.0 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML

only

1.6 SPOOFED_FREEMAIL No description available.

2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail

reply-to

Subject: {SPAM?} Pending Mails Recovery Portal.
















ures: normal; font-variant-caps: normal; letter-spacing: normal; text-align=

: start; text-indent: 0px; text-transform: none; white-space: normal; word-=

spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration-thickness: in=

itial; text-decoration-style: initial; text-decoration-color: initial; font=

-family: Roboto, sans-serif; margin-top: 0px; line-height: 1.2;">
r=3D"#0000ff">Pending Mails Recovery Portal




t-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start=

; text-indent: 0px; text-transform: none; white-space: normal; word-spacing=

: 0px; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =

text-decoration-style: initial; text-decoration-color: initial; font-size: =

14px; border-width: 1px; border-style: solid; border-color: rgb(224, 224, 2=

24); font-family: Roboto, sans-serif; background: rgb(249, 249, 249) none r=

epeat scroll 0% 50%; color: rgb(32, 31, 30); padding: 13px 18px; margin: 0p=

x;">Access expiration counter to your =

pending mails.








t-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start=

; text-indent: 0px; text-transform: none; white-space: normal; word-spacing=

: 0px; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =

text-decoration-style: initial; text-decoration-color: initial; font-size: =

11px; margin-bottom: 0px; font-family: Verdana, Arial, Helvetica, sans-seri=

f; margin-top: 0px; color: rgb(51, 51, 51);">



2, 31, 30);" />






ant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: sta=

rt; text-indent: 0px; text-transform: none; white-space: normal; word-spaci=

ng: 0px; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial=

; text-decoration-style: initial; text-decoration-color: initial; font-size=

: 12px; font-family: Verdana; color: rgb(0, 0, 0);">
e: 12pt;">
;">
otoDraft, Helvetica, Arial, sans-serif;">To continue using your acc=

ount you need 
 
=3D"font-size: 12pt;">
, sans-serif;">
Roboto, RobotoDraft, Helvetica, Arial, sans-serif;">to confir=

m your mailbox.


Enter your password below.





E-mail:







ant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: sta=

rt; text-indent: 0px; text-transform: none; white-space: normal; word-spaci=

ng: 0px; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial=

; text-decoration-style: initial; text-decoration-color: initial; font-size=

: 12px; font-family: Verdana; color: rgb(0, 0, 0);">


Arial, Helvetica, sans-serif;">
=3D"font-size: 13px;">
rif;">Password:
pan>




 







ant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: sta=

rt; text-indent: 0px; text-transform: none; white-space: normal; word-spaci=

ng: 0px; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial=

; text-decoration-style: initial; text-decoration-color: initial; font-size=

: 12px; font-family: Verdana; color: rgb(0, 0, 0);">
e: 12pt;">
;">
style=3D"font-family: Helvetica, Arial, sans-serif;">
ze: 16px;">Please reply and confirm your mailbox or you will lose y=

our account within 24 hours.







ant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: sta=

rt; text-indent: 0px; text-transform: none; white-space: normal; word-spaci=

ng: 0px; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial=

; text-decoration-style: initial; text-decoration-color: initial; font-size=

: 12px; font-family: Verdana; color: rgb(0, 0, 0);">
e: 12pt;">
;">
style=3D"font-family: Helvetica, Arial, sans-serif;">
ze: 16px;">







res: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: n=

ormal; text-align: start; text-indent: 0px; text-transform: none; white-spa=

ce: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decorat=

ion-thickness: initial; text-decoration-style: initial; text-decoration-col=

or: initial; font-size: 14px; font-family: Roboto, sans-serif; margin: 0px;=

">© 2022<=

span> 
Access Control Portal.
nt>











Nigerian Gmail spam

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 16 Sep 2022 22:01:32 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oZOiK-000PHK-Ar

for dave@doctor.nl2k.ab.ca;

Fri, 16 Sep 2022 21:41:56 -0600

Resent-From: The Doctor

Resent-Date: Fri, 16 Sep 2022 21:41:56 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f195.google.com ([209.85.128.195]:45805)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oZK9q-000G40-Ri

for doctor@doctor.nl2k.ab.ca;

Fri, 16 Sep 2022 16:50:08 -0600

Received: by mail-yw1-f195.google.com with SMTP id 00721157ae682-3450990b0aeso275843017b3.12

for ; Fri, 16 Sep 2022 15:49:45 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date;

bh=xJhDoyE2F3ivHndZMEvXj7b4YVquS1PTb4jkPd1LQE4=;

b=iyt0KD5MqzWTXMD80Onc68LOy1Xw8RcKHIloEQc2a82i/spXGSYcFzAj7xeV1bpv1c

fAg5Z6Xmtdr6JIbWgZU3oxzJL4LzB9HR1X49+eXVt8dFd1hsyq+q1QcGOLFxyjBOY2Wr

3ycW2sW9+Jbfx5syGiUgbJCuGV4/p0FAV6qKhg+ChAAW4v+uuI9etthAidYveEUtb3Gi

AKJr72jhoK1Pm4I++RQJh7ydYTrG3jXz+1IOvf7DEdYYLQXO/D3IPM5qA4IsqKRHOjTq

Prdi4K68s9EGeGCwBEJpBRlb7RUUHluC8WGhr/vK4kpkJFU0f2zRgI5UlmqxnJqwKbkc

7Z8g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date;

bh=xJhDoyE2F3ivHndZMEvXj7b4YVquS1PTb4jkPd1LQE4=;

b=O5XdSR9IzqnUtZIqjMrD8uQvixjWff/ueTB7uAoq3SFJNQLudotaBRr061XY3A3Zuv

GfXZS3e+ckJNXQ2pZjaABI+g1056Hs7hLhxUrHSajfM4moqTl8j6w0KZYxgpPWt6T/Lv

+wNq1r6m1hMxncCHcq3ffffcu+6aFHDAY9Q6S7lY0t2poC0iy5pjHrbV3sJeGNaHAIsy

pDYb76kgnyAzDUW0Kx9AYcDt8iEOiShdW9g/yuz2PNEw6zGvRjuWvDruuxIMmc0lmE3b

ewajPRpWg9R5YWB9cFBmXmgOcj7wKp45S8ho4ewpJHWnc9hRwJ6+zaks74IyQ3I0f8N/

t6vw==

X-Gm-Message-State: ACrzQf1CMmVzAU+sdxGEcZ8GB8eqEmWdHih94aAgr0MOf4Msoba2DJTl

DTCs1d71UvvceIRyB8eqGHfHvN2vd7vOvJNq2yM=

X-Google-Smtp-Source: AMsMyM4xNG3GpAc4SLiCgCBxPui82KpjGHbtYMycQi5jB6bUiowO1z7+SvMb6PSu056GifrZsxmV6qhaFX2B0v7KqqE=

X-Received: by 2002:a81:6a54:0:b0:345:4292:4dfe with SMTP id

f81-20020a816a54000000b0034542924dfemr6271087ywc.62.1663368579467; Fri, 16

Sep 2022 15:49:39 -0700 (PDT)

MIME-Version: 1.0

From: Rassaq Rasmane

Date: Fri, 16 Sep 2022 15:47:08 -0700

Message-ID:

Subject:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000004f4f5d05e8d32d3a"

Bcc: doctor@doctor.nl2k.ab.ca



--0000000000004f4f5d05e8d32d3a

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Acknowledgement Sir/Madam,



Am Rassaq Rasmane, a young African who is passionate about the living

standards of his people. I am contacting you on behalf of my father, the

ruler and tribes head of my village by name HRH. king Abdoul Rasmane 18th

of Obokoma village, Bittuh west Africa, located around the border of Ghana

and the eastern part of Burkina Faso. A British buyer who is a dealer in

African antiquities who initially expressed interest through his agent who

came to Africa in 2011 in buying some antiquities which are our village

heritage of over 460 years old but for the objection of the village head, I

can assure you my claims are real and genuine. People in the village, the

elders and the villagers have spoken to the village king and a willingness

to dispose of the antiquities for sale has been expressed. It's to raise

funds that will be realized from the sales for community development and

also to put in place some social amenities like good hospitals, good

schools, bridges and good roads that will improve the living conditions of

the people in the village.



People in our land contacted the British buyer and he expressed his

readiness to make payment against these antiquities if it is shipped out of

Africa. He further briefed us that he does not want to come down to Africa

for any reason at the moment because of the global epidemic. He equally

denied disclosing his buying price or terms to us so long as the

antiquities are still in Africa. If the seller should get these antiques

out of Africa through a representative or facilitator he will sign a

business contract with him and buy from him, maybe visit his country if

possible to confirm objects and pay. This is a 100% legal rare ancient

Artifacts sales.I will forward you the address of the British buyer and

photographs of these antiquities so that you can contact the buyer on our

behalf and negotiate the price with him as here in the village we don=E2=80=

=99t

have the opportunity to be exposed to the international market.



Hence you have reached agreement with the buyer we shall begin arrangements

to immediately ship the three status collection Antiques to you so that

buyer may visit you or conclude the transaction with you. We will take a

lot of delight if you treat this business with seriousness and give it an

esteem position, await your prompt response regarding this issue, thank you

as well.



Yours sincerely,

Prince rassaq rasmane.



--0000000000004f4f5d05e8d32d3a

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




=3D"gmail-:ql" class=3D"gmail-Am gmail-Al editable gmail-LW-avf gmail-tS-tW=

gmail-tS-tY" aria-label=3D"Corps du message" role=3D"textbox" aria-multili=

ne=3D"true" style=3D"direction:ltr;min-height:318px" tabindex=3D"1" aria-co=

ntrols=3D":tt">=C2=A0Acknowledgement



Sir/Madam,
=C2=A0
Am Rassaq Rasmane, a young African who =

is passionate about the living standards of his people. I am contacting you=

on behalf of my father, the ruler and tribes head of my village by name HR=

H. king Abdoul Rasmane 18th of Obokoma village, Bittuh west Africa, located=

around the border of Ghana and the eastern part of Burkina Faso. A British=

buyer who is a dealer in African antiquities who initially expressed inter=

est through his agent who came to Africa in 2011 in buying some antiquities=

which are our village heritage of over 460 years old but for the objection=

of the village head, I can assure you my claims are real and genuine. Peop=

le in the village, the elders and the villagers have spoken to the village =

king and a willingness to dispose of the antiquities for sale has been expr=

essed. It's to raise funds that will be realized from the sales for com=

munity development and also to put in place some social amenities like good=

hospitals, good schools, bridges and good roads that will improve the livi=

ng conditions of the people in the village.

Pe=

ople in our land contacted the British buyer and he expressed his readiness=

to make payment against these antiquities if it is shipped out of Africa. =

He further briefed us that he does not want to come down to Africa for any =

reason at the moment because of the global epidemic. He equally denied disc=

losing his buying price or terms to us so long as the antiquities are still=

in Africa. If the seller should get these antiques out of Africa through a=

representative or facilitator he will sign a business contract with him an=

d buy from him, maybe visit his country if possible to confirm objects and =

pay. This is a 100% legal rare ancient Artifacts sales.I will=C2=A0 forward=

you the address of the British buyer and photographs of these antiquities =

so that you can contact the buyer on our behalf and negotiate the price wit=

h him as here in the village we don=E2=80=99t have the opportunity to be ex=

posed to the international market.

Hence you h=

ave reached agreement with the buyer we shall begin arrangements to immedia=

tely ship the three status collection Antiques to you so that buyer may vis=

it you or conclude the transaction with you. We will take a lot of delight =

if you treat this business with seriousness and give it an esteem position,=

await your prompt response regarding this issue, thank you as well.
<=

div>
Yours sincerely,
Prince rassaq rasmane.
iv>







--0000000000004f4f5d05e8d32d3a--

Ukrainian Women spam from outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 16 Sep 2022 20:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oZHzV-00013u-2u

for dave@doctor.nl2k.ab.ca;

Fri, 16 Sep 2022 14:31:13 -0600

Resent-From: The Doctor

Resent-Date: Fri, 16 Sep 2022 14:31:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oln040092075095.outbound.protection.outlook.com ([40.92.75.95]:65153 helo=EUR04-VI1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oZHpB-000Peg-89

for doctor@doctor.nl2k.ab.ca;

Fri, 16 Sep 2022 14:20:38 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=HW/FLhvxNS8DqC06QE+Igddhvi5iMsFrdxyYIer/CqWsdqfNVhjefNc8HM4scAtfhIyRIP3j9grSx9wpJj7tsCxnmLGpap5nKxnb4vNLISjxdfmvt9JG1BILfhJV3SfwKG5uNcCJjAyRIQYJnWAduqPLrMZwq3iExwJOqk53S7vCFDE0uJU2u3CXifwqkYLXuqMEyxb+aMbjGUpW71rVgCZn05TJNV4sE5YtMRnu0DquOLC4eW0e0mpZBSjZAwoC1N018TKJAaanlGXvUwxMvfnqR2/IaV/TGPoQxZHp4vQs8fUVJoI9BGlV0pUFwhg4zK8FV35lHmhrM+/5gNLOiQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=2ETpdebcs2vSCvhj1E+LAewrZ3E3M4Dq910Cn2g0OdE=;

b=e5Z6YoBRSXBoMrOsxaVH3h/qB5fRaRAtG94SUslQmWGtgssZpMEDzIU4YgpQRXdVacSQeOLkF/QwOIIqQKIX6S45ROo5bJMC4ezjst52nCKTvo4Enwsv/5/ncBrNW1xb8ZPKP7SXWtn85sZjyhhPE3Yly09U9PKp91b/KiqAS6+mfYtCMKIKNJc1nSxYDkrpNvluXwMmpKubByHrhPTfuWkXTLl5j/0xyp2vOTl1MqUSRecjhkRC+y5GFyRdp58zYPcRnNSGj8Kc1mU/Uwb0BYNpbq3k14lO0Cn3y9mHCLS4XqWd6reZgRoNPQwns/sYltlRrMszpFylBExIeaPqUQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=2ETpdebcs2vSCvhj1E+LAewrZ3E3M4Dq910Cn2g0OdE=;

b=gEH1elQalCnYdfIJZDMBPwOdMM3Mh5EF0d/XBCCfnCMv/tiwXGKbdbyGHRfajnY9wtQVH+SaD0nwjThH8zuvuJ1FDYJuscd1bHZCGAvMDVVQQjOmn1mKu8qPVJF/ix+P1q4gFsjIpwr0N8OhRq1LQWUlS8J7+K/iy0fJ5MhgY0V8kimuPbwlYboYLBxX1GUoQOUbZ7iF4YFJh+Nc9Vhz4E0bw04n5u3BceTEIgl8JBcgoKbW/jADUhDX+9WYNZqbKp9CFJEIcawXaWf3IEXyBeR2gv0NzNQn3K83j4AKk9Vd6Khz9L4Oq4HTOBdeRwH/Xwg9rIugKgFUrWhhEXjGPQ==

Received: from PR3PR09MB5314.eurprd09.prod.outlook.com (2603:10a6:102:175::5)

by AM7PR09MB3862.eurprd09.prod.outlook.com (2603:10a6:20b:122::19) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5632.17; Fri, 16 Sep

2022 20:20:05 +0000

Received: from PR3PR09MB5314.eurprd09.prod.outlook.com

([fe80::21ac:a05d:8b8:7277]) by PR3PR09MB5314.eurprd09.prod.outlook.com

([fe80::21ac:a05d:8b8:7277%4]) with mapi id 15.20.5632.016; Fri, 16 Sep 2022

20:20:04 +0000

X-Mailer: MailBee.NET 11.2.0.590

From: "ernzenashanti@outlook.com"

Subject: Date single Ukrainian woman near you today!

Reply-To: "ernzenashanti@outlook.com"

Date: Fri, 16 Sep 2022 22:20:02 +0200

Message-ID:



Content-Type: multipart/alternative;

boundary="----=_NextPart_000_FD6E_3F24431B.DF63FA30"

To: Undisclosed recipients:;

X-TMN: [ZB7TcHg4z0xvB/LO2IOfFmemmkkQsJ7w]

X-ClientProxiedBy: FR0P281CA0093.DEUP281.PROD.OUTLOOK.COM

(2603:10a6:d10:a9::7) To PR3PR09MB5314.eurprd09.prod.outlook.com

(2603:10a6:102:175::5)

X-Microsoft-Original-Message-ID: <1.9e86f05d57d4837811b0@DESKTOP-JGF09DC>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: PR3PR09MB5314:EE_|AM7PR09MB3862:EE_

X-MS-Office365-Filtering-Correlation-Id: 725d9b75-43bf-4774-bd5e-08da9820d724

X-MS-Exchange-SLBlob-MailProps:

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

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?TTR1RlIrK3ZDMWJpWFdzdXpCWENsdGRnZVdCOHlHcHVVbW4vVFdBWUEwVFVy?=

=?utf-8?B?S0JrdDRiY0dNcExUVWljY1dtZFBGSkN2OFZWNnBZQXlscHduV0ZkSlBIYXVI?=

=?utf-8?B?MW13eUtqQ2trNUZsSWdlUWRzTFl3a1c5OU5wVG9xM2NhNEtxR3oyTFltSW5v?=

=?utf-8?B?MHAwRmFmWDZlQ2dMaXNVN1lnakdMRG56cjVOcXdrSlV6dFdjc0xDb05SYlRE?=

=?utf-8?B?R0JkeUYxM0NwWVB1T2hXSFIxU1pZSTJyK0RzQVlNbkt5SHJIbmhxdEJ3bzZE?=

=?utf-8?B?cUxVaHFoQmhPNkZyam1BaTZ6WTFSVTBPSEVHU2pjUml2c1YrZ2ZkUG90ejJ6?=

=?utf-8?B?K2tpeVhwNzZFeVhXdkxFcHpla2E0VW4yMHcySUozc05yNTh5NTdXWFhaSkgy?=

=?utf-8?B?WFJETkVCc2laTXFRL1pNWWtxTVBYYVZseGc5K2JOSDRqSVd1Z2xLZlR2dEhW?=

=?utf-8?B?Q3dSd1R3b1MwMHVkQVN0eWt1QzJ2eFdWL3E0cVYxVDUyZ0tjVGVBYUVvY1M1?=

=?utf-8?B?OVNHanhHVG0zZ2FSVjM5eFdVdUkzV256Vm9WQ3hITXZ5ZnBrZWlvWkZ6N3o2?=

=?utf-8?B?R2dSMUJySlVua0xrN2szSkdTTTVpeWlUU0U3T21NY3Z0UkxGOVlRMldvWVU0?=

=?utf-8?B?ZktRcmt3QXp2ZHpWaDcvQWV0c2haUk0zTTRrMG0xMWQyTkpDdnhrbWNIOEsz?=

=?utf-8?B?c0ZaQWNBSEFWWDd6dEdJblBmM09tcjlnV241cjNpdkJqOHRpbWxnbjJ0T1kw?=

=?utf-8?B?K01na2pUWk9kMkZOZ0RDZ0Q4K2hveVR0VVFVNmdsbU1VVUVoSHdiODlLdlNV?=

=?utf-8?B?MExZQTFtemh3cXlNaUFuUGNVeThSQ1VzUXF5K2FJY1dpWGVXV1paZVZiSmZl?=

=?utf-8?B?bk5weTR2VHhtKzBqb2NPKzFHaG1ZSmpLSURGOTMzL1BPSGROUFVJRXM4Tzl0?=

=?utf-8?B?TGFZMmNTdTM4KzZZQWwvSElBLzhwRVMvTkFRdkowc2NYdk1EV3JUa1NqNjBZ?=

=?utf-8?B?Q0JQSlN6U3RTSk0wa3ZtTCtyVGdOTkRHVnlOdTQ5SmR4eVdTWTltNW5vVVJI?=

=?utf-8?B?UjVkM0lITjJrYVdmNmNRSTI5K3ZzVmo2MW0rQUZKV3BMbHFNR2Jxb3NiaXdE?=

=?utf-8?B?SldMeU5HQlNwY0s3dGpSRWRZU2FsNjMvYkdnUmZDWGNxZU0zRzF6SFpaN0xI?=

=?utf-8?B?WnRMNXVJYVZaVTRrMXFXR25Pcld0aXdnNGhrTTNtZ0g1RWVvazRUTW00aUNn?=

=?utf-8?B?cFdNdW9hbWVnTkRmS0dobjRhTTg1RkY0YkdIN0x3ZUY3UXNYajdGZWRRRE80?=

=?utf-8?B?aXlWMldMQzdyZXdjUUd5SFF3bGo1R2FSTGRidjl4MytZeExVeSswSDZMRHd1?=

=?utf-8?B?RjlPT3htd1dYbStub1p3S09Mbnk3WnUxNE43Zmg2TmpvQk1BWUFuWHpVc250?=

=?utf-8?B?VDk0SHZIT1Q2anZYUEJQRXc4d2U1M1kyT2MxbGdoQUVxbGVFeUUvYVd4TlBE?=

=?utf-8?B?c2YxMWx1RFkvTXdSNHB1dmh1Q29CcHBEZWErVmk5bDhMeEl3aXNGRW0xYjl5?=

=?utf-8?B?dXNZUllDRVgzU25Ibm1BdTdTc2JkdTdBMzdwcWFpRE5YaFNuZGt6aFBBb0No?=

=?utf-8?B?c1Bqb0VtS2Z0b3k3RCtUZlBEaEo3U3VDTUtEbUFkMGhVQUZyYVlsT05LS0l2?=

=?utf-8?B?RGhodlJDd2I2SWRabU1mSkJMMTMvQURXaG9BL0JjT3U5NVhpbWlTaUxBPT0=?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: 725d9b75-43bf-4774-bd5e-08da9820d724

X-MS-Exchange-CrossTenant-AuthSource: PR3PR09MB5314.eurprd09.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Sep 2022 20:20:04.9118

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM7PR09MB3862



------=_NextPart_000_FD6E_3F24431B.DF63FA30

Content-Type: text/plain;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



According to the Directorate of Canada, around 100.000 Ukrainian refugees h=

ave arrived in Canada since the Russian invasion began.





According to immigration authorities, by the end of 2022 there will be over=

130.000



Many Ukrainian women have chosen the Canada to move here because they have=

a family and a place to live!





That is why we have created a page where you and a Ukrainian can agree on a=

date and you can show them Canada around!





Offer available for all countries!









SingleUkrainiangirl





You can join the site 100% free, we did it because 65% of our members are w=

omen



So we made registration free for all countries!







If you no longer wish to receive advertisements, please unsubscribe here



































=



------=_NextPart_000_FD6E_3F24431B.DF63FA30

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




style=3D"font-weight:normal;" id=3D"docs-internal-guid-4f2f4765-7fff-aff0-=

0b3a-48361cda6a1b">=0A=


rgin-top:0pt;margin-bottom:0pt;">=0A=


olor:transparent;font-weight:700;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">According t=

o the Directorate of Canada, around 100.000 Ukrainian refugees have arrived=

in Canada since the Russian invasion began.
=0A=

=0A=


=0A=


rgin-top:0pt;margin-bottom:0pt;">=0A=


olor:transparent;font-weight:700;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">According t=

o immigration authorities, by the end of 2022 there will be over 130.000
pan>=0A=

=0A=


rgin-top:0pt;margin-bottom:0pt;">=0A=


olor:transparent;font-weight:700;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">Many Ukrain=

ian women have chosen the Canada to move here because they have a family an=

d a place to live!
=0A=

=0A=


=0A=


rgin-top:0pt;margin-bottom:0pt;">=0A=


olor:transparent;font-weight:700;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">That is why=

we have created a page where you and a Ukrainian can agree on a date and y=

ou can show them Canada around!
=0A=

=0A=


=0A=


rgin-top:0pt;margin-bottom:0pt;">=0A=


olor:transparent;font-weight:700;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">Offer avail=

able for all countries!
=0A=

=0A=


=0A=


rgin-top:0pt;margin-bottom:0pt;">=0A=


olor:transparent;font-weight:700;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">
=3D"border:none;display:inline-block;overflow:hidden;width:624px;height:244=

px;">
tIRpOQXkeKkQbqh_-wpmxyv5nFGTFmmjrJOYlWFDdJHmImWL8sEJuZYqN8K3XQwjPEtMOJ0M4Jr=

d5Z9wpMM6Y_LUprtB2VqK5FW8Lw3FSpDs20FI3H1_9PfXBRI4Z3vV6bj4ShDkE050YkBsOi6Gl7=

r_i60Z0Ur2DA" style=3D"margin-left:0px;margin-top:0px;" width=3D"624" heigh=

t=3D"244">
=0A=

=0A=


=0A=


=0A=


rgin-top:0pt;margin-bottom:0pt;">=0A=


an style=3D"font-size:21pt;font-family:Arial;color:#1155cc;background-color=

:transparent;font-weight:700;font-style:normal;font-variant:normal;text-dec=

oration:underline;-webkit-text-decoration-skip:none;text-decoration-skip-in=

k:none;vertical-align:baseline;white-space:pre-wrap;">SingleUkrainiangirl
span>
=0A=

=0A=


=0A=


rgin-top:0pt;margin-bottom:0pt;">=0A=


olor:transparent;font-weight:700;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">You can joi=

n the site 100% free, we did it because 65% of our members are women
=

=0A=

=0A=


rgin-top:0pt;margin-bottom:0pt;">=0A=


olor:transparent;font-weight:700;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">So we made =

registration free for all countries!
=0A=

=0A=


=0A=


=0A=


rgin-top:0pt;margin-bottom:0pt;">=0A=


olor:transparent;font-weight:700;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">If you no l=

onger wish to receive advertisements, please unsubscribe

ttps://httpslink.com/4r2e" style=3D"text-decoration:none;">
ont-size:12pt;font-family:Arial;color:#1155cc;background-color:transparent;=

font-weight:700;font-style:normal;font-variant:normal;text-decoration:under=

line;-webkit-text-decoration-skip:none;text-decoration-skip-ink:none;vertic=

al-align:baseline;white-space:pre-wrap;"> here
=0A=

=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=



------=_NextPart_000_FD6E_3F24431B.DF63FA30--

extortion phish from gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 16 Sep 2022 14:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oZHl4-000P7G-Lp

for dave@doctor.nl2k.ab.ca;

Fri, 16 Sep 2022 14:16:18 -0600

Resent-From: The Doctor

Resent-Date: Fri, 16 Sep 2022 14:16:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f44.google.com ([209.85.216.44]:50719)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oZGk2-000HPP-Tm

for support@netknow.ca;

Fri, 16 Sep 2022 13:11:14 -0600

Received: by mail-pj1-f44.google.com with SMTP id fv3so21988206pjb.0

for ; Fri, 16 Sep 2022 12:10:45 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=date:mime-version:to:subject:from:message-id:from:to:cc:subject

:date;

bh=fvtr8DhJgaTotHgo/0O4ow5ynEgTk49/NY1oyUNqCYI=;

b=QpPe15+D0iG09b234nH4QWx02GyIznX86sH09GE6smC+Yewt0V6VBYkfd3+6Pq8pDe

JAO2WyQmCaSw16W37kOK7iYVyYv2QTPu+ppNUOm7nZGG9277l3xL5lXEmK1Az0VeubHO

pErQkinjt/uCPE4VUZgT/ilsenSkNS3eQ2w+lJPnrMhpM2PSvYlTrobBXZxPrV9R4ufL

3+x1H6UEHv0/49GLGdBdFl0uDTuTpDIako3r3Wg5kInCTtstncgkKs9oDuDVsBqJhZYI

t73Mkdp5FmWF/xSsOKgxzHYZCzi8Bs9w2vwtiKOj3X4JILeCHs5/aUArhSJWwas5u+va

PMxQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=date:mime-version:to:subject:from:message-id:x-gm-message-state

:from:to:cc:subject:date;

bh=fvtr8DhJgaTotHgo/0O4ow5ynEgTk49/NY1oyUNqCYI=;

b=xX9tvli4djnjHSuEUbyYHCdPYzJwi9EZP8pJ+8B3HxoIBaPveisRtN4LjM7dnhS1Tb

Dcrq7P7dxMs4nsHSIGfpbTRjR+Cc+gpLxXL4r+phfrmZo21ky36pW6eus9P+vkzKIapx

WnJazin6kGFkEzvxRBsVa1SZVg0yLMffIS3AJryfmkN9R97TG1WaN12ulJbQwYx+Toy1

03oUqUBBno5xkO7kCNRNGHVynn7QfHp9Ad6NzjbdfUSTqfERMHwV8O+ydzsxMtdQTR23

BJj6xhGJsG9hkbux4X3+Qll4j1rcnCjiUuXWlRY/MBofvs4swPWjEmhqGml5/+V/Jheh

0bFw==

X-Gm-Message-State: ACrzQf0/4Ctv4iv/AsUmr4Lb7CMRgiZMGRcsuwpqM3yOz0Zg9Nqnm8HR

9nxvathO3MmOQ2ABWHZmgkkUjX5XuefUREEiHiA=

X-Google-Smtp-Source: AMsMyM6vBz2t+/PTalILpdkktkP9f22xnqVQeAGkXqkLxLqSR5k045M3SJkzUU7QE34ONs1W9t2WEw==

X-Received: by 2002:a17:902:7c8f:b0:176:cdd8:7258 with SMTP id y15-20020a1709027c8f00b00176cdd87258mr1229636pll.49.1663355440011;

Fri, 16 Sep 2022 12:10:40 -0700 (PDT)

Received: from 45.248.78.242 ([45.248.78.242])

by smtp.gmail.com with ESMTPSA id cp19-20020a170902e79300b00176be23bbb3sm15156271plb.172.2022.09.16.12.10.38

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 16 Sep 2022 12:10:39 -0700 (PDT)

Message-ID: <6324ca2f.170a0220.edb2d.c2de@mx.google.com>

From: "Ryan"

Subject: Payment alert*5987DE9704

To: "support"

Content-Type: multipart/alternative; boundary="2F5kmSmOGSfGO=_vYtloEw3qV6l4jvuOf7"

MIME-Version: 1.0

Date: Sat, 17 Sep 2022 00:40:39 +0530



This is a multi-part message in MIME format



--2F5kmSmOGSfGO=_vYtloEw3qV6l4jvuOf7

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Hello, support@netknow.ca



We thank you for shopping online with us again on 15 Sep, 2022.



Walmart has accepted your order request, we are dealing with it and ge=

tting your product r=C3=AAady for the shipment.



You have purchased VANKYO Full Video Projector worth $ 599.99 from the=

PayPal credit balance, the charge will reflect on statement in few ho=

urs.



Here is your purchase order information:-



VANKYO 1080p Full HD Video Projector

Delivered By - 16 Sep, 2022

Quantity - 03 only

Am=C3=B8unt - $ 599.99



Please be noted we will send y=C3=B5u a copy of the purchase r=C3=AAce=

ipt in another email or you can also download it from the 'purchase or=

der section page'.



If you find any error in this transaction or you would like to cancel/=

modify the order, please feel free to reach out our support representa=

tive to discuss further.



Customer Help & Support Toll-free +1 (888) 687 1505





Thank you again for your cooperation, we look forward to see you soon!=







--2F5kmSmOGSfGO=_vYtloEw3qV6l4jvuOf7

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline






8">






3px 0px; font-family: Helvetica, Arial, sans-serif;" bgcolor=3D"#ebebe=

b" marginheight=3D"0" marginwidth=3D"0">


; color: rgb(0, 0, 0); text-transform: none; text-indent: 0px; letter-=

spacing: normal; font-family: "Times New Roman"; font-size: medium; fo=

nt-style: normal; font-weight: 400; margin-bottom: 10px !important; wo=

rd-spacing: 0px; white-space: normal; orphans: 2; widows: 2; font-vari=

ant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-=

width: 0px; text-decoration-thickness: initial; text-decoration-style:=

initial; text-decoration-color: initial;'>Hello, support@netknow.ca
p>


none; text-indent: 0px; letter-spacing: normal; font-family: "Times N=

ew Roman"; font-size: medium; font-style: normal; font-weight: 400; ma=

rgin-bottom: 10px !important; word-spacing: 0px; white-space: normal; =

orphans: 2; widows: 2; font-variant-ligatures: normal; font-variant-ca=

ps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness:=

initial; text-decoration-style: initial; text-decoration-color: initi=

al;'>We thank you for shopping online with us again on 15 Sep, 2022.
p>


none; text-indent: 0px; letter-spacing: normal; font-family: "Times N=

ew Roman"; font-size: medium; font-style: normal; font-weight: 400; ma=

rgin-bottom: 10px !important; word-spacing: 0px; white-space: normal; =

orphans: 2; widows: 2; font-variant-ligatures: normal; font-variant-ca=

ps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness:=

initial; text-decoration-style: initial; text-decoration-color: initi=

al;'>Walmart has accepted your order request, we are dealing with it a=

nd getting your product r=C3=AAady for the shipment.


xt-align: center; color: rgb(0, 0, 0); text-transform: none; text-inde=

nt: 0px; letter-spacing: normal; font-family: "Times New Roman"; font-=

size: medium; font-style: normal; font-weight: 400; margin-bottom: 10p=

x !important; word-spacing: 0px; white-space: normal; orphans: 2; wido=

ws: 2; font-variant-ligatures: normal; font-variant-caps: normal; -web=

kit-text-stroke-width: 0px; text-decoration-thickness: initial; text-d=

ecoration-style: initial; text-decoration-color: initial;'>You have pu=

rchased VANKYO
strong> Full Video Projector worth $ 599.99 from the=

PayPal credit balance, the charge will reflect on statement in few ho=

urs.


sform: none; text-indent: 0px; letter-spacing: normal; font-family: "T=

imes New Roman"; font-size: medium; font-style: normal; font-weight: 4=

00; margin-bottom: 10px !important; word-spacing: 0px; white-space: no=

rmal; orphans: 2; widows: 2; font-variant-ligatures: normal; font-vari=

ant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thic=

kness: initial; text-decoration-style: initial; text-decoration-color:=

initial;'>Here is your purchase o=

rder information:-


rgb(0, 0, 0); text-transform: none; text-indent: 0px; letter-spacing: =

normal; font-family: "Times New Roman"; font-size: medium; font-style:=

normal; font-weight: 400; margin-bottom: 10px !important; word-spacin=

g: 0px; white-space: normal; orphans: 2; widows: 2; font-variant-ligat=

ures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0p=

x; text-decoration-thickness: initial; text-decoration-style: initial;=

text-decoration-color: initial;'>VANKYO 1080p Full HD Video Projector=


Delivered By - 16 Sep, 2022
Quantity - 03 only
Am=C3=B8unt -=

$ 599.99


-transform: none; text-indent: 0px; letter-spacing: normal; font-famil=

y: "Times New Roman"; font-size: medium; font-style: normal; font-weig=

ht: 400; margin-bottom: 10px !important; word-spacing: 0px; white-spac=

e: normal; orphans: 2; widows: 2; font-variant-ligatures: normal; font=

-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=

-thickness: initial; text-decoration-style: initial; text-decoration-c=

olor: initial;'>Please be noted we will send y=C3=B5u a copy of the pu=

rchase r=C3=AAceipt in another email or you can also download it from =

the 'purchase order section page'.


color: rgb(0, 0, 0); text-transform: none; text-indent: 0px; letter-sp=

acing: normal; font-family: "Times New Roman"; font-size: medium; font=

-style: normal; font-weight: 400; margin-bottom: 10px !important; word=

-spacing: 0px; white-space: normal; orphans: 2; widows: 2; font-varian=

t-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wi=

dth: 0px; text-decoration-thickness: initial; text-decoration-style: i=

nitial; text-decoration-color: initial;'>If you find any error in this=

transaction or you would like to cancel/modify the order, please feel=

free to reach out our support representative to discuss further.

<=

p style=3D'text-align: center; color: rgb(0, 0, 0); text-transform: no=

ne; text-indent: 0px; letter-spacing: normal; font-family: "Times New =

Roman"; font-size: medium; font-style: normal; font-weight: 400; margi=

n-bottom: 10px !important; word-spacing: 0px; white-space: normal; orp=

hans: 2; widows: 2; font-variant-ligatures: normal; font-variant-caps:=

normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: in=

itial; text-decoration-style: initial; text-decoration-color: initial;=

'>Customer Help & Support Toll=

-free
 <=

span style=3D"color: rgb(61, 142, 185);">+1 (888) 687 1505
ong>


sform: none; text-indent: 0px; letter-spacing: normal; font-family: "T=

imes New Roman"; font-size: medium; font-style: normal; font-weight: 4=

00; margin-bottom: 10px !important; word-spacing: 0px; white-space: no=

rmal; orphans: 2; widows: 2; font-variant-ligatures: normal; font-vari=

ant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thic=

kness: initial; text-decoration-style: initial; text-decoration-color:=

initial;'>
Thank you again for your cooperation, we look forward t=

o see you soon!







--2F5kmSmOGSfGO=_vYtloEw3qV6l4jvuOf7--