Web Link spam from Google

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 28 Feb 2023 08:08:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pX1ZK-0008Nr-0l

for dave@doctor.nl2k.ab.ca;

Tue, 28 Feb 2023 08:07:06 -0700

Resent-From: The Doctor

Resent-Date: Tue, 28 Feb 2023 08:07:06 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f48.google.com ([209.85.160.48]:46891)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pX16x-0006Qp-2A

for root@doctor.nl2k.ab.ca;

Tue, 28 Feb 2023 07:37:51 -0700

Received: by mail-oa1-f48.google.com with SMTP id 586e51a60fabf-172a623ad9aso11049032fac.13

for ; Tue, 28 Feb 2023 06:35:48 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=68SaLkzscEjxUnsCEiOnFcqdPYpBozMGiZefE4VIhT8=;

b=awr3TXEp6z5bfMA0IqpdyMQ6ECMBMZb7IJpA9AtfqdF4jc3iZU1lzWE0XP11F91zuf

H3xjRlXe+XSoIRLgh+kWb2gnsKLgGW8k9wS2dDRbvmD532ATYz3p4AYs1cELWwArJ79C

/4M7OPsiZKcWYpqazmxG1BsWvXr7828/oeqQrJGTYMl3qirk1TEgH54ZV0JF0zhqIWeg

e1nhstUNZqIkDDuxNyzJDhiy8xbgaWYqoB8sK9QT/U8KCl0RH02tgK3odUnKZRAo52gH

NsdofB381elYleTnW8B4yH0ToywTZTilEIbVcpLMqoFPv2DPTwRgW+qYhj87NSGFxKTe

jwQw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=68SaLkzscEjxUnsCEiOnFcqdPYpBozMGiZefE4VIhT8=;

b=RF3k2WCClJuhvB6TVzGvLTW57nbL3zzloVDJPPwGNwlXxvJM254SHrw22KFsetXVVn

lNWfz4thWneAbOsnLtr3qSQSJaCx/lPMcXAGXkkMpFkrcOfwbupa3aQVqwozpjbIPeZy

NvGPNJPjHW/HnSRoWwX9HAMW3EW7wScdtTnG5h4jjg5+zjNt/AfWapDR40PuprfcquTA

QwiCmKnYpYYG+LwNuJa5dRWacEE4/JY2tI5yuUj8UMFsOJ2xXgmDmwkvf/x+xHxxzaaM

1skHQKlDFui+5EpEZRZYMx6lya7FzBAm+ix7Hod254ip1KOOvY6q5YZJztsRMlrdAoVx

eJsQ==

X-Gm-Message-State: AO0yUKX5XSux9TAxlx6hJUN8QYkh+gNlowOR0pFtQUNDpI5PGVoFfb9K

9S9MsCAu28txqM8AUqtXpm69WK0yTBeI2hriH1I=

X-Google-Smtp-Source: AK7set80FmOAXS3xrDLmZoaD9ghmLMzQcTCNKo2jZUt3CCQE5nYmlOFdTqNNXTNB9Bm6snT1MtbjPaFPJJePPsRZZrI=

X-Received: by 2002:a05:6870:1a98:b0:172:4745:f576 with SMTP id

ef24-20020a0568701a9800b001724745f576mr801328oab.10.1677594942825; Tue, 28

Feb 2023 06:35:42 -0800 (PST)

MIME-Version: 1.0

From: "evs_idea@yahoo.com"

Date: Tue, 28 Feb 2023 14:35:42 +0000

Message-ID:

Subject:

To: nacyki , nlangmuir ,

patrickhenault1 ,

pierre tremblay , romarnal ,

romtrade mtl , root

Content-Type: multipart/alternative; boundary="000000000000a4e70505f5c38229"

X-Spam_score: 12.0

X-Spam_score_int: 120

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: https://rb5jc.app.link/gdyMmOYtMxb https://rb5jc.app.link/gdyMmOYtMxb





Content analysis details: (12.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.48 listed in list.dnswl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: rb5jc.app.link]

-0.0 SPF_PASS SPF: sender matches SPF record

2.5 SORTED_RECIPS Recipient list is sorted by address

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[ahmadruslan1970(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ahmadruslan1970(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address

0.0 TVD_SPACE_RATIO No description available.

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

2.0 FROM_2_EMAILS_SHORT Short body and From looks like 2 different emails

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.160.48 listed in wl.mailspike.net]

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

Subject: {SPAM?}



--000000000000a4e70505f5c38229

Content-Type: text/plain; charset="UTF-8"



https://rb5jc.app.link/gdyMmOYtMxb



--000000000000a4e70505f5c38229

Content-Type: text/html; charset="UTF-8"



https://rb5jc.app.link/gdyMmOYtMxb



--000000000000a4e70505f5c38229--

Web Link spam from Google

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 28 Feb 2023 04:02:00 -0700

Received: from mail-yw1-f195.google.com ([209.85.128.195]:42929)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pWxjj-000MzY-2A

for dave@doctor.nl2k.ab.ca;

Tue, 28 Feb 2023 04:01:39 -0700

Received: by mail-yw1-f195.google.com with SMTP id 00721157ae682-536bbef1c5eso259599907b3.9

for ; Tue, 28 Feb 2023 02:59:37 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=KsPRuWfQxMM2R4w9/omRwvqKK13Oz1eqnTpm/JAAKQ8=;

b=mM0IcTZYv4PlrTXXQIJOHpeNtgQ55eKzk5YCEfKVyPIpCwFkkphZAmrRTx6hn8DkZG

1SX6JX0ZbOCKbpfBj0bC0MfBnTtCsq9VN8xQ67X9K2BWSK0FcfmUtM+Czz3DTwEazpuM

ay5TuWHATMUVWumdIkm9Vlt8Q+np+2wmp4qJ8yRxjACVYTYIsm1TopCUw+bGQL+jXFe8

qV1Zo7SmvWyIL59veTxiO2Zha1zjUowqgjYOGFYNwg3OzhNAmwId4Jm/U9k7USBlWJ8A

F2Xs2kkwqCRRnqrq/R4S+B8AtTAmzGhRFtrhhn/tpG/pd3KGS0GZ7KMHLXrWd/Kd39uS

Zw4Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=KsPRuWfQxMM2R4w9/omRwvqKK13Oz1eqnTpm/JAAKQ8=;

b=FRcI0uXiiBEL5TKrwarjj8eyx0iNvOr601bjowZPMrH2sHj/+xlRp4b424lM7b9j58

aVZb5PK0Qw+zkG9z4uFz6/2rvdrkkxUC7LaS40GmbLwGzws6ipn1U679oIio+1bJiRGW

c6CYsMvVpmkSzEGK4DMXmDbVHkZ8MD7S3FxcbnXzEdwtN5y2slQLf3GQFKnFbtVH4LEc

2NwPol7gdVpJTcTOKqXZOL3tFw3lf212xuEn5bkow+jI8ftYto3hgS8u+Nt/+OJ68Fua

Nlw3xJYzvoSmA1PX8joLuXy85JgHLphNr7D5aGPD3TBtQV5JZTLEEJw1iMw1TCclVBV/

fmcw==

X-Gm-Message-State: AO0yUKXdUmS8e1r5DKNeSscPeu6kvbev3Y1KZbAAxKmYW41dGg2o0UsE

OFvvxEg9Uo4DzrglwuhUgB3PcmtL7BcWmB6xK54=

X-Google-Smtp-Source: AK7set/Yg5j0C1xPX0HdajFNdpBHsaNmcVc0XDtIhQMUmmRrBl3I/IibgCl+GdvlZZc7uqtlpMO9aUavxsLTGTE65t0=

X-Received: by 2002:a05:6902:1205:b0:a09:314f:9f09 with SMTP id

s5-20020a056902120500b00a09314f9f09mr2549426ybu.6.1677581971356; Tue, 28 Feb

2023 02:59:31 -0800 (PST)

MIME-Version: 1.0

From: "Dr.Charles Edward"

Date: Tue, 28 Feb 2023 10:59:31 +0000

Message-ID:

Subject:

To: datsit1968 , dave ,

davelongaphie5309 ,

david cameletti2 , david100 ,

david2divizio , davidbrunstein ,

davidpalmer23

Content-Type: multipart/alternative; boundary="0000000000007c003105f5c07db2"

X-Spam_score: 9.3

X-Spam_score_int: 93

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: https://ckcwb.app.link/32beRrduMxb https://ckcwb.app.link/32beRrduMxb





Content analysis details: (9.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_PASS SPF: sender matches SPF record

2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list

2.5 SORTED_RECIPS Recipient list is sorted by address

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[micael.rocha.silva(at)gmail.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.195 listed in list.dnswl.org]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 TVD_SPACE_RATIO No description available.

0.0 T_HK_NAME_FM_DR No description available.

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.195 listed in wl.mailspike.net]

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

Subject: {SPAM?}



--0000000000007c003105f5c07db2

Content-Type: text/plain; charset="UTF-8"



https://ckcwb.app.link/32beRrduMxb



--0000000000007c003105f5c07db2

Content-Type: text/html; charset="UTF-8"



https://ckcwb.app.link/32beRrduMxb



--0000000000007c003105f5c07db2--

Nigerian Spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 28 Feb 2023 08:04:03 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pX1Vu-0008DY-0x

for dave@doctor.nl2k.ab.ca;

Tue, 28 Feb 2023 08:03:34 -0700

Resent-From: The Doctor

Resent-Date: Tue, 28 Feb 2023 08:03:34 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f49.google.com ([209.85.167.49]:38545)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pWwvK-000KeZ-0z

for root@nl2k.ab.ca;

Tue, 28 Feb 2023 03:09:38 -0700

Received: by mail-lf1-f49.google.com with SMTP id m6so12424431lfq.5

for ; Tue, 28 Feb 2023 02:07:31 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=y473zhrUU1LTt1xiEp50XRjl9qC28TSC0JLn3SdjZWE=;

b=n27QXPiTvOil0afB1ktkLqndPxPI+oui0jvoI6Bz5s1Tz+Sv14dg4szsUmPtV0bgHC

jRk+ahV6UR6njvWqF1jDG9fyLrdmg2o81iWESQKexQDMBG27drTs5Tw08enHkMykMVoI

ZB1m+BLvnmztuejtH82fctJPNpwsUt4FmI1byk7st89yDfUBoNldjdzgtvVvBG8lIZEi

sxdKT0G/IdkUCZKzs5mmERiliV9p7pQuTjrmSTNNQF2j+t4tFa0Slhh0AXM3Ekg4zgPB

P+HFQ6SsdMrc3VsC+YYC+HUlxWmrblJtHyN9QV61Ht4pjSRGEtvCnuDv2PDS3ApZrYS9

UpdQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=y473zhrUU1LTt1xiEp50XRjl9qC28TSC0JLn3SdjZWE=;

b=aXTNbMGydxPZVjO3hE8mx+Af4WAV/D3fg0oY9IVp+Zzi8Einzab4alRVfSDbIiiek1

meVxUcEu7oJyrnyLtFNKM2Q/S/2BmMY4UqcJ1/NdXLXBE/trakWb0aZwEhcQrkYZjie4

6VAia7FNM8s92RmyzAke2Ltqcin3XAMBOPhjXl+NxJwk83IAD5cq1RCro16gS8c/2GJW

i3X40vTDODiTMYVK447Jq0nlIkerTPwuJOz+BnUVWNzKW5WkbQNvIFD9fmsJnnfvXUEl

nNG6cMI9WHpGJODFB2DCPvSSJOzDtfuclJihD6pQeRc1f6XmiCBopO55Syh9akplQBy/

lV7Q==

X-Gm-Message-State: AO0yUKUbc2d0YPWqPcLMu+7wruIqe+Iv4UjnOlzDzasiFD2CW7Nv8eSw

EDyZszqVCsdyz96AY8+XQW3AUrgOaHGFcIsAMw==

X-Google-Smtp-Source: AK7set9aLZ454OCkvJEG9fEfhWVDACSId7TwGyrWliN0qsnF9cNyBB+kV1YZWKAomiX24cLfFOQZCiIlLfXHG32pX90=

X-Received: by 2002:ac2:46f3:0:b0:4dd:a4c5:2b42 with SMTP id

q19-20020ac246f3000000b004dda4c52b42mr538102lfo.8.1677578844523; Tue, 28 Feb

2023 02:07:24 -0800 (PST)

MIME-Version: 1.0

From: Ernest Francis

Date: Tue, 28 Feb 2023 12:07:10 +0200

Message-ID:

Subject: Message.

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000001c513605f5bfc36f"

Bcc: root@nl2k.ab.ca

X-Spam_score: 17.8

X-Spam_score_int: 178

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Ref: Business Proposal. I hope my email finds you well. Firstly,

I must solicit for your confidence in this transaction; this is by virtue

of its nature as being utterly confidential.



Content analysis details: (17.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.49 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[bryan.g.lukas(at)gmail.com]

2.5 MILLION_USD BODY: Talks about millions of dollars

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

2.5 HK_SCAM_N2 BODY: No description available.

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.49 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 HK_SCAM No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLY From and body contain different freemails

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Message.



--0000000000001c513605f5bfc36f

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Ref: Business Proposal.







I hope my email finds you well.







Firstly, I must solicit for your confidence in this transaction; this is by

virtue of its nature as being utterly confidential.







You may be surprised to receive such an email from someone you barely know.

My name is Ernest Francis, a Business consultant and facilitator. A client

of mine died last year in 2022 from a heart attack. Few weeks before his

death, he needed to make an urgent investment requiring cash payment in

which he requested me to assist him move the sum of US$28,500,000.00 to an

open beneficiary account securely for the business deal. I personally

facilitated the moving of this fund through a special security firm in

Canada to the Bank as per his instruction. The Canadian firm is an

especially private firm that accepts deposits from high net worth

individuals and blue chip corporations.







None of my client=E2=80=99s family or associate is aware of this deal becau=

se he

used me as a proxy to move the funds; as it is, I have no knowledge of any

of his relatives or next of kin and how to locate them.







Before his untimely death, I had acted as his proxy for most of his

business dealings, especially those he wanted to remain anonymous; he was a

very meticulous person when it comes to business deals.







Having made the Bank aware of his death recently, they have mandated me to

present a member of his family (heir/inheritor) to make claim to the

deposited fund. Since I do not know any of his relatives and as such there

is no specific mentioning of a next of kin in all the documents we used for

the deposit with the Bank, and it is because of this I have obtained the

letter of probate for the administration of the said estate since I was

involved in the process of moving the funds from Canada and depositing it

with the Bank.







My proposal therefore is to seek your consent to present you as the next of

kin beneficiary for this claim so that the money would be released and

transferred to you. I have exclusive access to the documents of the fund

deposit with the Bank, you will be made the next of kin beneficiary of this

fund. It is my intention that we both benefit from this fund. I know of

someone who has pulled out a similar deal in the past, it is an

opportunity. If the money is not claimed, it will be escheat and nobody

benefits from this.







I suggest that we donate One Million USD of this money to a charity

organization of our choice after the deal and we will share the remaining

fund equal between us.







In order to come up with the bank pre-requisite for the claim, I will

explain to you the step by step process that we need to take before

presenting you to the bank with all the necessary documentation; what I

need from you is trust, confidentiality and your honest co-operation in

this transaction if you are interested. I guarantee you that this

transaction is 100% Risk free and would be executed under legitimate

arrangement.







Please contact me at your earliest convenience using my private email

ernestgframcis@usa.com if you are interested and willing to work with me,

send me your telephone number and name and I will reach you as soon as

possible.







Kindest Regards







Ernest Francis



--0000000000001c513605f5bfc36f

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




0cm 0cm 8pt;line-height:107%;font-size:11pt;font-family:Calibri,sans-serif"=

>Ref: Business Proposal.






height:107%;font-size:11pt;font-family:Calibri,sans-serif">=C2=A0






height:107%;font-size:11pt;font-family:Calibri,sans-serif">I hope my email =

finds you well.






height:107%;font-size:11pt;font-family:Calibri,sans-serif">=C2=A0






height:107%;font-size:11pt;font-family:Calibri,sans-serif">Firstly, I must =

solicit for your

confidence in this transaction; this is by virtue of its nature as being

utterly confidential.






height:107%;font-size:11pt;font-family:Calibri,sans-serif">=C2=A0






height:107%;font-size:11pt;font-family:Calibri,sans-serif">You may be surpr=

ised to receive

such an email from someone you barely know. My name is Ernest Francis, a

Business consultant and facilitator.=C2=A0 A

client of mine died last year in 2022 from a heart attack. Few weeks before=

his

death, he needed to make an urgent investment requiring cash payment in whi=

ch

he requested me to assist him move the sum of US$28,500,000.00 to an open

beneficiary account securely for the business deal. I personally facilitate=

d

the moving of this fund through a special security firm in Canada to the Ba=

nk

as per his instruction. The Canadian firm is an especially private firm tha=

t

accepts deposits from high net worth individuals and blue chip corporations=

.






height:107%;font-size:11pt;font-family:Calibri,sans-serif">=C2=A0






height:107%;font-size:11pt;font-family:Calibri,sans-serif">None of my clien=

t=E2=80=99s family or

associate is aware of this deal because he used me as a proxy to move the

funds; as it is, I have no knowledge of any of his relatives or next of kin=

and

how to locate them.






height:107%;font-size:11pt;font-family:Calibri,sans-serif">=C2=A0






height:107%;font-size:11pt;font-family:Calibri,sans-serif">Before his untim=

ely death, I had

acted as his proxy for most of his business dealings, especially those he

wanted to remain anonymous; he was a very meticulous person when it comes t=

o

business deals.






height:107%;font-size:11pt;font-family:Calibri,sans-serif">=C2=A0






height:107%;font-size:11pt;font-family:Calibri,sans-serif">Having made the =

Bank aware of his

death recently, they have mandated me to present a member of his family

(heir/inheritor) to make claim to the deposited fund. Since I do not know a=

ny

of his relatives and as such there is no specific mentioning of a next of k=

in

in all the documents we used for the deposit with the Bank, and it is becau=

se

of this I have obtained the letter of probate for the administration of the

said estate since I was involved in the process of moving the funds from Ca=

nada

and depositing it with the Bank.






height:107%;font-size:11pt;font-family:Calibri,sans-serif">=C2=A0






height:107%;font-size:11pt;font-family:Calibri,sans-serif">My proposal ther=

efore is to seek

your consent to present you as the next of kin beneficiary for this claim s=

o

that the money would be released and transferred to you. I have exclusive

access to the documents of the fund deposit with the Bank, you will be made=

the

next of kin beneficiary of this fund. It is my intention that we both benef=

it

from this fund. I know of someone who has pulled out a similar deal in the

past, it is an opportunity. If the money is not claimed, it will be escheat=

and

nobody benefits from this.






height:107%;font-size:11pt;font-family:Calibri,sans-serif">=C2=A0






height:107%;font-size:11pt;font-family:Calibri,sans-serif">I suggest that w=

e donate One

Million USD of this money to a charity organization of our choice after the

deal and we will share the remaining fund equal between us.






height:107%;font-size:11pt;font-family:Calibri,sans-serif">=C2=A0






height:107%;font-size:11pt;font-family:Calibri,sans-serif">In order to come=

up with the bank

pre-requisite for the claim, I will explain to you the step by step process

that we need to take before presenting you to the bank with all the necessa=

ry

documentation; what I need from you is trust, confidentiality and your hone=

st

co-operation in this transaction if you are interested. I guarantee you tha=

t

this transaction is 100% Risk free and would be executed under legitimate

arrangement.






height:107%;font-size:11pt;font-family:Calibri,sans-serif">=C2=A0






height:107%;font-size:11pt;font-family:Calibri,sans-serif">Please contact m=

e at your

earliest convenience using my private email
s@usa.com">ernestgframcis@usa.com if you are

interested and willing to work with me, send me your telephone number and n=

ame

and I will reach you as soon as possible.






height:107%;font-size:11pt;font-family:Calibri,sans-serif">=C2=A0






height:107%;font-size:11pt;font-family:Calibri,sans-serif">Kindest Regards<=

/p>




height:107%;font-size:11pt;font-family:Calibri,sans-serif">=C2=A0






height:107%;font-size:11pt;font-family:Calibri,sans-serif">Ernest Francis
p>





--0000000000001c513605f5bfc36f--

Nigerian partnership spam from gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Feb 2023 22:56:32 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pWsx6-0000UB-1k

for dave@doctor.nl2k.ab.ca;

Mon, 27 Feb 2023 22:55:04 -0700

Resent-From: The Doctor

Resent-Date: Mon, 27 Feb 2023 22:55:04 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f171.google.com ([209.85.128.171]:45741)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pWrzj-000Nkb-1b

for doctor@doctor.nl2k.ab.ca;

Mon, 27 Feb 2023 21:53:49 -0700

Received: by mail-yw1-f171.google.com with SMTP id 00721157ae682-536bf92b55cso238097937b3.12

for ; Mon, 27 Feb 2023 20:51:44 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112; t=1677559898;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=HkIRWt2gJ2izW5rnJjwC+HKh7WnZ+LYR4lvd5mQlpVI=;

b=i5bELqkdOW0jR4Cg74/q7F+bVUIMtLx3g4Ryal/FXt8B9hms8AQEdQXPE8gjEKPe7Y

KsZPTyas8ZYzCMJGDdWMf9ykMItZ3HwUoB/sbwxDmLKLaEnxqhLXDE1RtcvWoyRiUsGn

rfZKUCibDa26UTH8veXOB+2XKnCVCfkLKmz9sJuJBHioBLC+e8Fl/33vgPWvDWD3QhV2

2pM3/3X+5+EF93HQIc0tnUdofKWDI6Jxvax4wBhU0UZzdz0wp89EgZ1J7KewYcLCDZzO

OWfdbBWNi5/GATZ6VwkVxpEvoMCsUHHgr7m4s0WihbjIWUbHTTDQNrg/WZtZuyC3kS23

ZQYA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1677559898;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=HkIRWt2gJ2izW5rnJjwC+HKh7WnZ+LYR4lvd5mQlpVI=;

b=LVQgoWewLu3lBMra3bM3RAG9UGgyKCp5B9OCyqZXcxnvf2PM5b4Jx4SJTXfE1qCcVe

IdGnfY7QQNhnR4QgpgN4JBaE3FtWQOuQa2C5ES3QOQMT3yNH93w+F5OF63+fQ+ue5tRv

RCt3Qm5gz0PMxymfstW5D/HVm+1WP/6Hb+1k5tgf1UxKH6t1KnnJPw4uop7N27R0vaL+

Z+ArVX6wISxeKGJq4vN1xnCtw3t3Sij8WjA7vLKtsg5c+R4FqUulTd2ktQrZqlWBT82V

6SQSder36iI+NEtz/xfRSYQr5wlrpc+HnApeV252p9hBBEPSKkl3cO/TqM+6xUx8i4yc

pzVA==

X-Gm-Message-State: AO0yUKXgOFItoXAIi7XyDBHwOnUD8hLaFFvVaoXKgqwNi5mB3xeFv1H/

exHbyGJT7gzG8oyvcpuTE0b5A4bvOgSohqnZceM=

X-Google-Smtp-Source: AK7set9byEZg1xgvdLpvNADx6vX9jQofZy6I1evfJkvcw6vJZZMKbO19u1B4LNeRomFNTGFkRJFn44gEXgOjXU3ukgg=

X-Received: by 2002:a81:431c:0:b0:52e:b22b:f99 with SMTP id

q28-20020a81431c000000b0052eb22b0f99mr759374ywa.4.1677559898090; Mon, 27 Feb

2023 20:51:38 -0800 (PST)

MIME-Version: 1.0

Received: by 2002:a25:248d:0:b0:9ec:8219:f04a with HTTP; Mon, 27 Feb 2023

20:51:37 -0800 (PST)

From: Carron Tim

Date: Mon, 27 Feb 2023 20:51:37 -0800

Message-ID:

Subject: Re

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca



--

Hello.



Your partnership is needed to set up a project.reply back for more info

Thanks

Carron Tim

Nigerian Gmail spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 28 Feb 2023 08:03:01 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pX1VA-0008Ag-0W

for dave@doctor.nl2k.ab.ca;

Tue, 28 Feb 2023 08:02:48 -0700

Resent-From: The Doctor

Resent-Date: Tue, 28 Feb 2023 08:02:48 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f176.google.com ([209.85.128.176]:40813)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pWvhq-000GNS-0a

for doctor@doctor.nl2k.ab.ca;

Tue, 28 Feb 2023 01:51:33 -0700

Received: by mail-yw1-f176.google.com with SMTP id 00721157ae682-53916ab0c6bso251052647b3.7

for ; Tue, 28 Feb 2023 00:49:31 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=ai58wS/jZjPzl4HXvGIx1b94+4Wgl3f9Gtg7NuwFbF8=;

b=J36KgVXQ/C2Jqf2qMpE+c7DAwYbLCo/2Y00pk+iOceK5L0K0Fudz3Sq8auRyffeiSs

BK4xNl2sYcAVzIze7RSqLTGH68lRgIb5isctMKwovycmxSBFhcHEolKylVTl1hfdFLFP

cA3GTYJbGKT88Aozek8zzJWoT28r9j3+0FC0H1tdZzAGa8dMuHYjfehyypKX50EFcUxI

Wad+Fh6l1/THUaPC24X4xroKCNFrYk895OydnU5JohtWf39CPSkPmWbelRQWERs1Xq2V

VvXYaggpbBASeCC11ljzJL0qFzSxgVfD5mrkdEefhOg7akQVXgZpNxSW8YFPBizrSx6c

U5wA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=ai58wS/jZjPzl4HXvGIx1b94+4Wgl3f9Gtg7NuwFbF8=;

b=vLC9PzQ3Q/LyRMbXLGpdcAGPB02Btjdt+0AU9gSLMZ3djmBsCRJTTm8uedodndEFbw

54MRRULK6gg9Fm+ee5S1wUlBeztOYnrZMN77FsxBcF3qNtuH7f5RLP7ntC3DVa5POoCj

SyHUJvr40t3/nwNLCvP5W7Yx2F0FG5G805t3v/dkGgOz5+BG3jGZgKy6qdbCJcvKtkrL

L4RFV0Krt2zMSU9DqyWYSkJqu1JCfOytkyT77FWngrpSO2B689t1aZoc/3SZ6cwHtPmG

HPQnOlYCPQS9ZbEb6hL/gccq2SzILE2GFIP+VxFulHyoZQbfmVntXbj79B7V36iOZV1g

WBZw==

X-Gm-Message-State: AO0yUKUsbfhig2At2pC0gac9xdfffuBQYN/iXQ9FEqrxcK02N69P3Ybm

QOShQT4uKVjBXcrq6mWk9sBH4K8XiVGz/4yBz04=

X-Google-Smtp-Source: AK7set/rpN0ufxW6AbX8U3mHmLI8nopMffl5cPuCbJawkmw5NlZWA01uaThtKMFbh/iU4fOeK6/82/RFWoobTlresRc=

X-Received: by 2002:a81:ae0e:0:b0:534:7429:2eb4 with SMTP id

m14-20020a81ae0e000000b0053474292eb4mr1157071ywh.3.1677574165673; Tue, 28 Feb

2023 00:49:25 -0800 (PST)

MIME-Version: 1.0

Received: by 2002:a05:7110:65aa:b0:1bf:32b4:3309 with HTTP; Tue, 28 Feb 2023

00:49:24 -0800 (PST)

Reply-To: magrethmc68@gmail.com

From: Mrs Margreth Guimard

Date: Tue, 28 Feb 2023 08:49:24 +0000

Message-ID:

Subject: RELIEF FUND

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 10.4

X-Spam_score_int: 104

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: At the invitation of the International Labour Organization

(ILO) Workrelated injuries and diseases FOR COVID 19 & MONKEYPOX VIRUS Recovery,

PAYMENT APPROVAL FOR pending COVID 19 & MONKEYPOX VIRUS RELI [...]



Content analysis details: (10.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.176 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[magrethmc68(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[desouzajolymichaelweezy(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.176 listed in wl.mailspike.net]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 T_HK_NAME_FM_MR_MRS No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to

3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} RELIEF FUND



At the invitation of the International Labour Organization (ILO)

Workrelated injuries and diseases FOR COVID 19 & MONKEYPOX VIRUS

Recovery, PAYMENT APPROVAL FOR pending COVID 19 & MONKEYPOX VIRUS

RELIEF FUNDS







The World Bank & World Health Organization (WHO) in collaboration with

its Parent Organization United Nations Economic and Social Council

(ECO-SOC), has mandated this office to diligently disburse benefit

Funds mapped out to assist (you) persons affected by the economic

meltdown the virus has caused.



We are highly pleased to inform you that you have been chosen among

150 candidates to be benefited with the sum of $550,000.00 (Five

Hundred and Fifty Thousand Dollars). The World Bank in conjunction

with Union Togolaise Bank and International Monetary Fund (IMF) has

chosen to pay out all pending unpaid relief funds to 150 beneficiaries

around the world.



You are benefit of ($550,000.00) Five hundred and fifty thousand

United States dollars is ready for disbursement, payment method is via

Union Togolaise Bank (UTB) Visa Prepaid Cards account which will be

shipped to you via Courier, and you can only withdraw a maximum of

$3500 daily till the full funds are totally withdrawn.









Warm Regards,

Mrs Sonia Guimard

Foriegn Operational Manager

Web Link spam from Google

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Feb 2023 08:33:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pWfUU-0000yP-1W

for dave@doctor.nl2k.ab.ca;

Mon, 27 Feb 2023 08:32:38 -0700

Resent-From: The Doctor

Resent-Date: Mon, 27 Feb 2023 08:32:38 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f67.google.com ([209.85.208.67]:44764)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pWaXG-000IPr-07

for doctor@nl2k.ab.ca;

Mon, 27 Feb 2023 03:15:13 -0700

Received: by mail-ed1-f67.google.com with SMTP id s26so23356187edw.11

for ; Mon, 27 Feb 2023 02:13:11 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=iGbyWXWy7fG/GaMl7aTubyx7HLCOeE6yK8wEJ35uJVE=;

b=ATxrGTbJMi55iCveJBFDmS0LFp+vW9QQ5QgnMBz6w/vM3XNEVy4xixhoxwnG6OWA4a

e5QslTvPTj1zp5wG+bUtw614eOi7/kJGP0+W2TkQvKFt7L1BdxjT9s7/5s9W1OJT5Bn1

5X0YuKGCPOSx6CA1YTjzLFBBbrJm6wHwDp+W8EFcLbqUhmLXqkfMBxh84sUrVNnnUhPR

BeW92enp5rbEofVk/DlBssMZD1TZuWtmPwGHHjhXw3UHMuzMd9YPGYSgGDBRl8Vd72s5

DIWK5DEy4LyVIFwyVAiG541486uSGt8XIqi8aSbAJrRoXPfPy4FQ+9h7sutIwyxmYF0N

v1gA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=iGbyWXWy7fG/GaMl7aTubyx7HLCOeE6yK8wEJ35uJVE=;

b=P9R5GazJG+WDiLU7ZP6A+W/LqxAwOHToDiEdW9+YutzLC4gKOjbmHW1Q1UlAIeicu1

aB5/7aTO17Uiqtj2YiIgtpUShLvQB0aATfAvGAFKVWubUA09DfxEZrPioaTTUKbkiTQF

iWFmRH5HmN2LL9nTPCRrFaNE/W4E6w19iBWTFPUrM8iBAV6dhRKeneTmKG/A34/+Pp0y

bWzeywKNvyLqu8dx1Nq3ifsSA/5nqpXW6nVF0jtDeeYN8UiiDW1RKQJWpA5Pir5rC/JZ

PSMNIy4Mgdukwrs2zliuNVBWItRVOzKTx+Ev8kO9EHiap/GyyUGryQtLuizMy29j2huC

fHJw==

X-Gm-Message-State: AO0yUKXvpfal8LUhSs9Hep/WGxizt4/L58gWah3ylrOWuw5Zgm43+Yj7

5qYjw/1DYLiOmFlYSwoV0DZ8pOy26Oe10kjGDeM=

X-Google-Smtp-Source: AK7set+DNxlLdXfDDq0uGZMl8hKIXDJ0cgkTs/MUhvfCD4ENU/Ikx0LoHxiRD5+P4wSdjaBPkxcW137aqj0UKEOvx+0=

X-Received: by 2002:a17:906:698:b0:8ae:1078:722f with SMTP id

u24-20020a170906069800b008ae1078722fmr14723917ejb.9.1677492784476; Mon, 27

Feb 2023 02:13:04 -0800 (PST)

MIME-Version: 1.0

From: "dieudonnenzuzi07@yahoo.fr"

Date: Mon, 27 Feb 2023 10:13:02 +0000

Message-ID:

Subject:

To: dcreativ , deniscarole5 ,

denisefob1991 , desjar m ,

dianelefort , dleroux ,

doctor , dominique myre

Content-Type: multipart/alternative; boundary="00000000000088349b05f5abb906"

X-Spam_score: 10.1

X-Spam_score_int: 101

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: https://6qm62.app.link/b56FzOozJxb https://6qm62.app.link/b56FzOozJxb





Content analysis details: (10.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.67 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

2.5 SORTED_RECIPS Recipient list is sorted by address

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[petrtmavy80(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[petrtmavy80(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.67 listed in wl.mailspike.net]

0.0 TVD_SPACE_RATIO No description available.

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

2.0 FROM_2_EMAILS_SHORT Short body and From looks like 2 different emails

0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

Subject: {SPAM?}



--00000000000088349b05f5abb906

Content-Type: text/plain; charset="UTF-8"



https://6qm62.app.link/b56FzOozJxb



--00000000000088349b05f5abb906

Content-Type: text/html; charset="UTF-8"



https://6qm62.app.link/b56FzOozJxb



--00000000000088349b05f5abb906--

backlink spam from gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 26 Feb 2023 22:24:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pWVyh-0001O7-0o

for dave@doctor.nl2k.ab.ca;

Sun, 26 Feb 2023 22:23:11 -0700

Resent-From: The Doctor

Resent-Date: Sun, 26 Feb 2023 22:23:11 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f177.google.com ([209.85.210.177]:40558)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pWSuA-000LU5-1d

for sales@nk.ca;

Sun, 26 Feb 2023 19:06:26 -0700

Received: by mail-pf1-f177.google.com with SMTP id u20so2605072pfm.7

for ; Sun, 26 Feb 2023 18:04:19 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=reelgood.com; s=google;

h=to:subject:message-id:date:mime-version:reply-to:from:from:to:cc

:subject:date:message-id:reply-to;

bh=i4+as8qYEfg5jlMH3RCVRNzfeqr6q/EZo6HQth7XM/Y=;

b=Y7D/FjdqnHxDMqnhcmw3M2utdnBVXOiC+/HlhH3IBs+7PqQDezAZAzItTBFNeAycfK

ZUcpJr0/nlQTEwvzlOtMazwGXKK04neODG0XRSlPSbkXb6Ne9zj0kCAmJFPDe4bzoKHJ

/jiOWDDP3gUfLARufqh06m51pXGtPsB41mlFTB6TI/BiYfS7qUA+7lIqVG5ta1jsvRvc

CGd/LmSf8EaVgWS40PvGCZE7u0byxRQ51nI9B098tyHszl2Nhvk/87K+7rrqKANTI9T7

EU1cakrZccNJhhdlRU9qL2PTUkIJ9JZPIbWGqN23IzHH3lq6TKUAcHOtBmb8aA6180K+

XsLQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:mime-version:reply-to:from

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=i4+as8qYEfg5jlMH3RCVRNzfeqr6q/EZo6HQth7XM/Y=;

b=5UZbsQGgWBpPpS1B7ilXINftUCQFGW8/SZBIgudHCWyTmR2pbK33MpUkDPJNuWJAot

KooIuDg2bGG1c/5MX7klEDfz5qr6agMifucHg3cHxwxjJsy55ed5Nc4tFOQvNRxGTS9x

58fditbmrXHfKLfJTvX024v3xdKO4bcdNoYuuTpbsi81QWdEUb1WD6AYUZ/5Ec+Swm5t

1ycIN5mCzIzMDOSLT7ApKpwCRDj7aawsbzij74I6cI4Vbu6qNU2IckXq1+PEteqR0lKK

T0gPMan5QXaTXB4nb9acFmZGgn7FSAOjgoF6zElh4IrG/SNaySknW+/y7HwjXp5401b0

/nEA==

X-Gm-Message-State: AO0yUKVKIWqnX78cz8MZ2ZxhifOi2WvQpgAbMniHcAuAT279BAcd6743

5vsQu5zj3YWnJ6/O8YUSkmk0fTfByzDLk/7zIGRpcmDDvraSAA==

X-Google-Smtp-Source: AK7set/jjFXbpPgoH8VbW4mZHaP9tbiQP8WoU+gpn2AqWJxKPJzcuE0N8PDNe0Bk8yx4zmEB+0BNI5Uwu61ZABb25p4=

X-Received: by 2002:a63:3e06:0:b0:4fb:933a:91a with SMTP id

l6-20020a633e06000000b004fb933a091amr5224070pga.5.1677463453664; Sun, 26 Feb

2023 18:04:13 -0800 (PST)

Received: from 8447955724 named unknown by gmailapi.google.com with HTTPREST;

Sun, 26 Feb 2023 18:04:12 -0800

From: Justin Rabago

Reply-To: Justin Rabago

MIME-Version: 1.0

Date: Sun, 26 Feb 2023 18:04:12 -0800

Message-ID:

Subject: Team NetKnow, Check out this free movie streaming app

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000479e3905f5a4e5ec"



--000000000000479e3905f5a4e5ec

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello Team NetKnow,



My name is Justin from Reelgood. I=E2=80=99m writing you this email as I re=

cently

stumbled across this resource page "Our Links "

and noticed that it have mentioned several film-related resources.



In case you're unfamiliar with us, Reelgood is a 100% free streaming guide=



that offers a *wide range of Movies and TV Shows*. We also gives users a

personalized view where they can see all of the shows available to them

from different streaming services in one place.



If it's not too much of a bother, could you please consider including

Reelgood (https://reelgood.com/) on this list of resources? We think it

would make a great addition to the list and would be a helpful resource for

your audience. =F0=9F=98=87



Let me know what you think. Hope you find us useful!



Take care,



Justin Rabago



Marketing Assistant



justin@reelgood.com |







All your streaming in one place



2021 & 2020 Fast Company Most Innovative Companies in Video



2019 Webby Winner Best Entertainment App





If you don't want to receive emails like this from me, please let me know

here


172428.1547550.1677463452660%40ip-10-1-6-164&u=3D123089&g=3D60831>

.



--000000000000479e3905f5a4e5ec

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




t-family:Arial;color:#000000;background-color:transparent;font-weight:400;f=

ont-style:normal;font-variant:normal;text-decoration:none;vertical-align:ba=

seline">Hello Team NetKnow,




t-family:Arial;color:#000000;background-color:transparent;font-weight:400;f=

ont-style:normal;font-variant:normal;text-decoration:none;vertical-align:ba=

seline">My name is Justin from Reelgood. I=E2=80=99m writing you this email=

as I recently stumbled across this resource page "
nk.ca/links.html">Our Links" and noticed that it have mentioned se=

veral film-related resources.




-family:Arial;font-size:11pt">In case you're unfamiliar with us,
g>Reelgood is a 100% free streaming guide that offers a wi=

de range of Movies and TV Shows. We also gives users a personalize=

d view where they can see all of the shows available to them from different=

streaming services in one place.=C2=A0




pan style=3D"font-family:Arial;color:#000000;background-color:transparent;f=

ont-weight:400;font-style:normal;font-variant:normal;text-decoration:none;v=

ertical-align:baseline">If it's not too much of a bother, could you ple=

ase consider including Reelgood (
od.com/">https://reelgood.com/
olor:#000000;background-color:transparent;font-weight:400;font-style:normal=

;font-variant:normal;text-decoration:none;vertical-align:baseline">) on thi=

s list of resources? We think it would make a great addition to the list an=

d would be a helpful resource for your audience. =F0=9F=98=87=



Le=

t me know what you think. Hope you find us useful!



Ta=

ke care,




t-family:Arial;color:#000000;background-color:transparent;font-weight:bold;=

font-style:normal;font-variant:normal;text-decoration:none;vertical-align:b=

aseline">Justin Rabago




t-family:Arial;color:#000000;background-color:transparent;font-weight:400;f=

ont-style:normal;font-variant:normal;text-decoration:none;vertical-align:ba=

seline">Marketing Assistant




href=3D"mailto:justin@reelgood.com">
ily:Arial;color:#1155cc;background-color:transparent;font-weight:400;font-s=

tyle:normal;font-variant:normal;text-decoration:underline;vertical-align:ba=

seline">justin@reelgood.com
mily:Arial;color:#000000;background-color:transparent;font-weight:400;font-=

style:normal;font-variant:normal;text-decoration:none;vertical-align:baseli=

ne"> |=C2=A0




>
olor:transparent;font-weight:400;font-style:italic;font-variant:normal;text=

-decoration:none;vertical-align:baseline">
y:inline-block;overflow:hidden;width:138px;height:33px">
n-left: 0px; margin-top: 0px;" src=3D"https://lh6.googleusercontent.com/i3i=

iUK19OazJeRN8qYYppBtpX9VRQoddMk63lk_T_JS1-U3NJCsEBhimYfag19wnMQryl9LMQCiGth=

mSWUVxbpviN2JuKRb3fu3QZ8ANSRRhIvksenzNIJkLg18AGms6pcPgJ5593-1SulfAGQ" width=

=3D"138" height=3D"33">




t-family:Arial;color:#222222;background-color:#ffffff;font-weight:400;font-=

style:normal;font-variant:normal;text-decoration:none;vertical-align:baseli=

ne">All your streaming in one place




t-family:Arial;color:#222222;background-color:#ffffff;font-weight:bold;font=

-style:normal;font-variant:normal;text-decoration:none;vertical-align:basel=

ine">2021 & 2020 Fast Company Most Innovative Companies in Video=




t-family:Arial;color:#222222;background-color:#ffffff;font-weight:bold;font=

-style:normal;font-variant:normal;text-decoration:none;vertical-align:basel=

ine">2019 Webby Winner Best Entertainment App



=C2=A0


If you don't want to receive emails like this from me, please let me=

know
40nk.ca&i=3D1325172428.1547550.1677463452660%40ip-10-1-6-164&u=3D12=

3089&g=3D60831">here.





--000000000000479e3905f5a4e5ec--

German language spam from gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 25 Feb 2023 16:56:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pW4OO-000C9t-0N

for dave@doctor.nl2k.ab.ca;

Sat, 25 Feb 2023 16:55:52 -0700

Resent-From: The Doctor

Resent-Date: Sat, 25 Feb 2023 16:55:52 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f182.google.com ([209.85.215.182]:45576)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pW0fi-0004Bi-1E

for doctor@doctor.nl2k.ab.ca;

Sat, 25 Feb 2023 12:57:33 -0700

Received: by mail-pg1-f182.google.com with SMTP id d10so1433770pgt.12

for ; Sat, 25 Feb 2023 11:55:30 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112; t=1677354925;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=lJ6BnTakJT1YjOAEj9+Bx7HLVq7uisCM+YZ28LM75To=;

b=kqp+5mSo2xW1+CNcIxVOA5O9jQnSUYYvty2ASXYkFRdFT3E3XtHdEov9u8D791JG8K

fOl7ITAGY1v9HqcctIStllNWqX4yNWnjaJ/kLviTut8NDqn46dfPbil90KC5E5nFFQpV

5lhUhR2k6CuXLxkjPRW3XT1IySIrEIYG9dU7gX2CmpLSwSEXE0DhjqkFgRFZWXHmVrBM

6DycUf0R+TlnZn4hJv2D1yHCX22wLE/5giZwcWCBX5glRAroqRcRKIs2IoJhPnvt7e0O

DTRoA74l0EBhWEakctXDUAz25U2yDWgNtVW3IGRd8dxEqlNbCO1egEVM3bYsrC9DeCmg

eChA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1677354925;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=lJ6BnTakJT1YjOAEj9+Bx7HLVq7uisCM+YZ28LM75To=;

b=XxJuqlNDqv5io5GDYWNQyHQDa3STDYR1eUgnTh8wandngfsLlxuQ/eVpVZynvv6Xci

xLb14i9t2zuH3c7v1t3HQtJccVjIZ8PZdNsgMU+RtiP026vGNqDJjEDkuqSEF2HkJSjR

AXCrNECVZS25xbZl0ff7NthciMMkNl0Zthh0P27V/ws1K1kzsSyzaIiAOOqqSn4sSL0i

Ivg/SfktcxUuJGJjoLgG8tWy1yfVI3/5oa+LiLeNJJpeSAMJ3e5hfezzqbyAg93Nbu3i

86lvWbMPoVevwneI1+ChYFp3/gOaFzZRwgDwJQM+kpt/8HZBQ9/WprlZICpUjQzaxWJg

u+Tg==

X-Gm-Message-State: AO0yUKXV3EvLrooIAvlQSd+oKqu+o+2UQ44hGkZuV/27BjVHpnk1xf9C

ymu7P3eNfIFakDChHTRQ7v058zvBjeomHGihLXE=

X-Google-Smtp-Source: AK7set/UH5hzuBQfbrLRcMcq0QJxhcibT/ltlf5oBsuqoepv/uJL3e25VvtyR0KlNdELpUwjXY/+aM7zKbyR+HJA/9c=

X-Received: by 2002:aa7:848f:0:b0:590:3183:60eb with SMTP id

u15-20020aa7848f000000b00590318360ebmr4168785pfn.3.1677354924582; Sat, 25 Feb

2023 11:55:24 -0800 (PST)

MIME-Version: 1.0

Reply-To: info.ubabank.net01@gmail.com

From: "MRS. KRISTALINA GEORGIEVA"

Date: Sat, 25 Feb 2023 11:55:08 -0800

Message-ID:

Subject: =?UTF-8?Q?INTERNATIONALE_W=C3=84HRUNGSFONDS?=

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000712ae105f58ba0cf"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 17.0

X-Spam_score_int: 170

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Sehr geehrter E-Mail-Eigentümer/Fondsempfänger, Ich habe

Ihnen diesen Brief vor einem Monat geschickt, aber ich habe nichts von Ihnen

gehört, ich bin mir nicht sicher, ob Sie ihn erhalten haben, und deshalb

habe ich ihn erneut gesendet. Erstens, i [...]



Content analysis details: (17.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_PASS SPF: sender matches SPF record

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[emecoemeco9(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[info.ubabank.net01(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[emecoemeco9(at)gmail.com]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.182 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.215.182 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_HK_NAME_FM_MR_MRS No description available.

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 LOTTO_DEPT Claims Department

3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} =?UTF-8?Q?INTERNATIONALE_W=C3=84HRUNGSFONDS?=



--000000000000712ae105f58ba0cf

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Sehr geehrter E-Mail-Eigent=C3=BCmer/Fondsempf=C3=A4nger,



Ich habe Ihnen diesen Brief vor einem Monat geschickt, aber ich habe nichts

von Ihnen geh=C3=B6rt, ich bin mir nicht sicher, ob Sie ihn erhalten haben,=

und

deshalb habe ich ihn erneut gesendet. Erstens, ich bin Frau Kristalina

Georgieva, Gesch=C3=A4ftsf=C3=BChrerin und Vorsitzende des Internationalen

W=C3=A4hrungsfonds.



Die Weltbank konnte einige Betr=C3=BCger in verschiedenen Teilen der L=C3=

=A4nder

ausfindig machen, darunter (Nigeria, Republik Benin, Burkina Faso, Ghana

und Senegal, mit der Elfenbeink=C3=BCste, Amerika, USA, Gro=C3=9Fbritannien=

usw.),

und sie befinden sich jetzt in staatlichem Gewahrsam. Es wird bald vor dem

Internationalen Strafgerichtshof (IStGH) f=C3=BCr Gerechtigkeit erscheinen.



Im Laufe der Untersuchung konnten sie einige Gelder von diesen Betr=C3=BCge=

rn

zur=C3=BCckerhalten, und die IWF-Organisation ordnete an, dass die

wiedererlangten Gelder unter den 100 gl=C3=BCcklichen Menschen aufgeteilt

werden, die auf der Welt als Entsch=C3=A4digung aufgef=C3=BChrt sind. Diese

Benachrichtigung wurde an Sie gesendet, da Ihre E-Mail-Adresse w=C3=A4hrend=

der

Untersuchung in einer der Dateien des K=C3=BCnstlers und auf der Festplatte=

des

gl=C3=BCcklichen Computers gefunden wurde. M=C3=B6glicherweise wurden Sie z=

uvor

betrogen. Daher werden Sie mit einer Summe von ($2.600.000,00) zwei

Millionen sechshunderttausend US-Dollar entsch=C3=A4digt, die in einer

(Geldautomatenkarte) g=C3=BCltig sind.





Wir sind der Vorstand, die Weltbank und der Internationale W=C3=A4hrungsfon=

ds

(IWF) Washington, D.C. in Zusammenarbeit mit dem US-Finanzministerium und

einigen anderen relevanten Ermittlungsbeh=C3=B6rden hier in den Vereinigten

Staaten von Amerika. hat unsere Foreign Payment Remittance Unit, United

Bank of Africa Lome Togo, angewiesen, Ihnen eine VISA-Karte auszustellen,

auf die Ihr Guthaben in H=C3=B6he von 2,6 Millionen US-Dollar f=C3=BCr weit=

ere

Auszahlungen Ihres Guthabens hochgeladen wird.





Und heute benachrichtigen wir Sie, dass Ihr Geld von der Weltbank auf die

ATM Visa Card gutgeschrieben wurde und auch zur Auslieferung bereit ist.

Wenden Sie sich jetzt an den Pr=C3=A4sidenten der Weltbank, sein Name ist D=

r.

David Robert Malpass, Bank-E-Mail: info.ubabank.net01@gmail .com, senden

Sie ihm die folgenden Informationen f=C3=BCr die Lieferung Ihrer akkreditie=

rten

ATM-VISA-Karte an Ihre Adresse.

Dies sind die erforderlichen Informationen, die Sie =C3=BCbermitteln m=C3=

=BCssen:



(1) Ihr vollst=C3=A4ndiger Name:=3D=3D=3D=3D=3D=3D

(2) Ihre Heimatadresse:=3D=3D=3D=3D

(3) Ihr Land: =3D=3D=3D=3D=3D=3D

(4) Ihre Stadt; =3D=3D=3D=3D=3D=3D=3D=3D

(5) Und Ihre Durchwahlnummer: =3D=3D=3D=3D=3D

(6) Gescannte Kopie Ihres Ausweises;=3D=3D=3D=3D=3D=3D

(7) Postleitzahl;=3D=3D=3D=3D=3D=3D

(8) Ihr Beruf;=3D=3D=3D=3D=3D=3D



Aufrichtig,

Frau Kristalina Georgieva

Gesch=C3=A4ftsf=C3=BChrender Direktor des Internationalen W=C3=A4hrungsfond=

s



--000000000000712ae105f58ba0cf

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Sehr geehrter E-Mail-Eigent=C3=BCmer/Fondsempf=C3=A4nger,<=

br>
Ich habe Ihnen diesen Brief vor einem Monat geschickt, aber ich habe=

nichts von Ihnen geh=C3=B6rt, ich bin mir nicht sicher, ob Sie ihn erhalte=

n haben, und deshalb habe ich ihn erneut gesendet. Erstens, ich bin Frau Kr=

istalina Georgieva, Gesch=C3=A4ftsf=C3=BChrerin und Vorsitzende des Interna=

tionalen W=C3=A4hrungsfonds.

Die Weltbank konnte einige Betr=C3=BCge=

r in verschiedenen Teilen der L=C3=A4nder ausfindig machen, darunter (Niger=

ia, Republik Benin, Burkina Faso, Ghana und Senegal, mit der Elfenbeink=C3=

=BCste, Amerika, USA, Gro=C3=9Fbritannien usw.), und sie befinden sich jetz=

t in staatlichem Gewahrsam. Es wird bald vor dem Internationalen Strafgeric=

htshof (IStGH) f=C3=BCr Gerechtigkeit erscheinen.

Im Laufe der Unter=

suchung konnten sie einige Gelder von diesen Betr=C3=BCgern zur=C3=BCckerha=

lten, und die IWF-Organisation ordnete an, dass die wiedererlangten Gelder =

unter den 100 gl=C3=BCcklichen Menschen aufgeteilt werden, die auf der Welt=

als Entsch=C3=A4digung aufgef=C3=BChrt sind. Diese Benachrichtigung wurde =

an Sie gesendet, da Ihre E-Mail-Adresse w=C3=A4hrend der Untersuchung in ei=

ner der Dateien des K=C3=BCnstlers und auf der Festplatte des gl=C3=BCcklic=

hen Computers gefunden wurde. M=C3=B6glicherweise wurden Sie zuvor betrogen=

. Daher werden Sie mit einer Summe von ($2.600.000,00) zwei Millionen sechs=

hunderttausend US-Dollar entsch=C3=A4digt, die in einer (Geldautomatenkarte=

) g=C3=BCltig sind.


Wir sind der Vorstand, die Weltbank und der =

Internationale W=C3=A4hrungsfonds (IWF) Washington, D.C. in Zusammenarbeit =

mit dem US-Finanzministerium und einigen anderen relevanten Ermittlungsbeh=

=C3=B6rden hier in den Vereinigten Staaten von Amerika. hat unsere Foreign =

Payment Remittance Unit, United Bank of Africa Lome Togo, angewiesen, Ihnen=

eine VISA-Karte auszustellen, auf die Ihr Guthaben in H=C3=B6he von 2,6 Mi=

llionen US-Dollar f=C3=BCr weitere Auszahlungen Ihres Guthabens hochgeladen=

wird.


Und heute benachrichtigen wir Sie, dass Ihr Geld von der =

Weltbank auf die ATM Visa Card gutgeschrieben wurde und auch zur Auslieferu=

ng bereit ist. Wenden Sie sich jetzt an den Pr=C3=A4sidenten der Weltbank, =

sein Name ist Dr. David Robert Malpass, Bank-E-Mail: info.ubabank.net01@gma=

il .com, senden Sie ihm die folgenden Informationen f=C3=BCr die Lieferung =

Ihrer akkreditierten ATM-VISA-Karte an Ihre Adresse.
Dies sind die erfor=

derlichen Informationen, die Sie =C3=BCbermitteln m=C3=BCssen:

(1) I=

hr vollst=C3=A4ndiger Name:=3D=3D=3D=3D=3D=3D
(2) Ihre Heimatadresse:=3D=

=3D=3D=3D
(3) Ihr Land: =3D=3D=3D=3D=3D=3D
(4) Ihre Stadt; =3D=3D=3D=

=3D=3D=3D=3D=3D
(5) Und Ihre Durchwahlnummer: =3D=3D=3D=3D=3D
(6) Ges=

cannte Kopie Ihres Ausweises;=3D=3D=3D=3D=3D=3D
(7) Postleitzahl;=3D=3D=

=3D=3D=3D=3D
(8) Ihr Beruf;=3D=3D=3D=3D=3D=3D

Aufrichtig,
Frau=

Kristalina Georgieva
Gesch=C3=A4ftsf=C3=BChrender Direktor des Internat=

ionalen W=C3=A4hrungsfonds




--000000000000712ae105f58ba0cf--

Nigerian Gmail spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 25 Feb 2023 06:17:58 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pVuQu-000HnV-0d

for dave@doctor.nl2k.ab.ca;

Sat, 25 Feb 2023 06:17:48 -0700

Resent-From: The Doctor

Resent-Date: Sat, 25 Feb 2023 06:17:48 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f68.google.com ([209.85.217.68]:33586)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pVuNR-000HeX-0O

for doctor@doctor.nl2k.ab.ca;

Sat, 25 Feb 2023 06:14:16 -0700

Received: by mail-vs1-f68.google.com with SMTP id a3so3928978vsi.0

for ; Sat, 25 Feb 2023 05:12:14 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=y0wCvW7QItSrUPureQPz/2WWnHNH1II14F8C2BuvuiM=;

b=bkp2TJ863WqOLuuA8EvnvKJTP8gKo7WiT0OvCcl1qyTERtP0ybhf/USQbXWk9reSQW

ZnVYfoShWApQ/JwUWJdYyZJrfD8m1tjM5GpgDNlFn2PzdSsyonPFdYrI2cnKzLFBtHtD

sy+eKpusoOa5TOBU+lq4XPS8oC9fE9/dRhwx92KhUFAk39xnlp/ddyEUCiiRbjhN4YyQ

AAUDHh/kCUIGAUDMVLMwc7b/EVvkThEdLWQZGuItDFQFpgwOj0a2cysw9dGtGG62H0qp

SPqmeaH2cTqALxKA2nroDSmgbjoUl0iHRl3P5Hyk759pqzmPxrjPkO0smAGBEpTB8cU1

XzPA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=y0wCvW7QItSrUPureQPz/2WWnHNH1II14F8C2BuvuiM=;

b=ihX9MblBKvXLsOJO6LAgHg0clsXL7hwx3TzLiGZYPehF8z7weONR/yGU2/lnJa2UGB

FICNHcu89+zr2DGvjEEJJU3hRIgKFUkjdBJHWdscB6vRq37h6tHngka45VZvZDE70Prj

vOFC8Z75RYcsWaULELULgRy+w43biZBIsidv+BqJl46WlLOASwaD7E5CwylwwqSiWbr3

F1pGjPitPoKcYi0GRNtCanW+ovSz9QGt8WVWEsXFwAU4Yq0YHeGcu44b0exfbXOSjI65

jfo2IjWYl78+ClqijEcfhIXgXBharZdGI9/dAObgq3hpjvQd0xpHBBifaw88w5msyFLO

sYnw==

X-Gm-Message-State: AO0yUKVsmDntPG6/ZCh28ClS03GZhrsXQXyfzMGol3h2HChW0Peerb2B

NrNaSL8XszvPdMmBYzymaiMI3dCKz9aFzESN8LQ=

X-Google-Smtp-Source: AK7set8giDAL0Uhn9QhJ+jFacG+0o1MG8n+sjDF5o7MDP4DUuoXKNgcxHiWb2gzwThUXIwca3RqbvLrBwU8an1qzej4=

X-Received: by 2002:a1f:4505:0:b0:401:95ca:ea53 with SMTP id

s5-20020a1f4505000000b0040195caea53mr4527317vka.3.1677330728107; Sat, 25 Feb

2023 05:12:08 -0800 (PST)

MIME-Version: 1.0

Reply-To: mramosmanga9@gmail.com

From: "Mr.Amos Manga"

Date: Sat, 25 Feb 2023 05:11:53 -0800

Message-ID:

Subject: Greetings,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000038466105f585fe61"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 19.3

X-Spam_score_int: 193

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings, I write you this letter from the heart full of

sincerity and tension. I am Barrister Amos Manga, residing in Belgium. I am

the Legal Attorney to one Mr.Danilo Aleksander. A Ukrainian sunflower oil

and [...]



Content analysis details: (19.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.217.68 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[jessicahunt1385(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[mramosmanga9(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[jessicahunt1385(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.217.68 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

1.0 MONEY_BARRISTER Lots of money from a UK lawyer

0.0 T_MONEY_PERCENT X% of a lot of money for you

2.0 TVD_PH_BODY_META No description available.

3.1 RISK_FREE No risk!

3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Greetings,



--00000000000038466105f585fe61

Content-Type: text/plain; charset="UTF-8"



Greetings,



I write you this letter from the heart full of sincerity and tension. I am

Barrister Amos Manga, residing in Belgium. I am the Legal Attorney to one

Mr.Danilo Aleksander. A Ukrainian sunflower oil and wheat, maize farmer. My

client was murdered by the Russian Army troop because of the war between

Russia and Ukraine. it was so very terrible. He was a sunflower oil and

wheat and maize farmer who invested much in agriculture.



I acknowledged that my client deposited the sum of 6.5 Million Euros with a

Bank in Taiwan with the intention of using it for the purchase of new farm

machineries and chemicals in China. I am contacting you with great

confidence in the

hope of entrusting you with the care and custody of the fund for investment

purposes in your country.



Please, I would like to know how convenient it might be for you to assist

me claim the fund as a good business partner to my late

client. The bank where the fund is said that they want a business partner

to come forward with backed up documents on the funds then they will

release it to the partner. I want you to understand that this is a sure

deal which is 100% risk free.



I solicit for your honest assistance as I want this fund to be transferred

to your account with your partnership, I will

want to invest this fund in your country or we share the money and go our

separate ways. I look forward to

your reasonable response and in return I will provide you with more details.



Sharing formular: 60% for me, 40% for you.



Warm Regards,

Mr.Amos Manga.



--00000000000038466105f585fe61

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Greetings,

I write you this letter from the heart f=

ull of sincerity and tension. I am Barrister Amos Manga, residing in Belgiu=

m. I am the Legal Attorney to one Mr.Danilo Aleksander. A Ukrainian sunflow=

er oil and wheat, maize farmer. My client was murdered by the Russian Army =

troop because of the war between Russia and Ukraine. it was so very terribl=

e. He was a sunflower oil and wheat and maize farmer who invested much in a=

griculture.

I acknowledged that my client deposited the sum of 6.5 M=

illion Euros with a Bank in Taiwan with the intention of using it for the p=

urchase of new farm machineries and chemicals in China. I am contacting you=

with great confidence in the
hope of entrusting you with the care and c=

ustody of the fund for investment purposes in your country.

Please, =

I would like to know how convenient it might be for you to assist me claim =

the fund as a good business partner to my late
client. The bank where th=

e fund is said that they want a business partner to come forward with backe=

d up documents on the funds =C2=A0then they will release it to the partner.=

I want you to understand that this is a sure deal which is 100% risk free.=



I solicit for your honest assistance as I want this fund to be tran=

sferred to your account with your partnership, I will
want to invest thi=

s fund in your country or we share the money and go our separate ways. I lo=

ok forward to
your reasonable response and in return I will provide you =

with more details.

Sharing formular: 60% for me, 40% for you.

>Warm Regards,
Mr.Amos Manga.=C2=A0




--00000000000038466105f585fe61--

SEO spam from Gmail servers

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 25 Feb 2023 00:36:58 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pVp6A-000OW9-2Y

for dave@doctor.nl2k.ab.ca;

Sat, 25 Feb 2023 00:36:02 -0700

Resent-From: The Doctor

Resent-Date: Sat, 25 Feb 2023 00:36:02 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f47.google.com ([209.85.219.47]:45913)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pVoFo-000Lu4-0D

for sales@nk.ca;

Fri, 24 Feb 2023 23:42:01 -0700

Received: by mail-qv1-f47.google.com with SMTP id bo10so993992qvb.12

for ; Fri, 24 Feb 2023 22:39:56 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=03+60GLS4Res7fYqdbHC9WfRx1IJsV/zGM0NKUR/i6o=;

b=JcuEwS+JDXdOkyvuYFsQ6P53jCEUKuHAt8wC5OrZmk3ki5YUnLhziy07uuP3CvTGRQ

cBBwy5bemqoLt+CjU7P/hkZIF+kpEmsoANFPBX1KC2L5WwZZt1s7NnmY/Oox/ktPghcV

cZjDfdjfnTnjQ4QNJipqPtnu62fgktFiP4g8nYJLKjx64IftZRfE2PUO6L28+mOI/GVG

djg0IJwnEZLnLwFVLDGVEHwT5wKfjfJyU3+jml8KdaxzWDN/RC8tM2Rcw4hTezj942Yp

yGf53h1iV3E81Z31voyiVuDmSjpae5+kFTXMsMHaJGdlWf4CEDDHNcOGhEhUeXqmDKOj

DHoA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:sender:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=03+60GLS4Res7fYqdbHC9WfRx1IJsV/zGM0NKUR/i6o=;

b=lDFxRXx3mtpknoUonasMNIoOCxavKw0v2YFzjYru6/agYkObOEmx42P4QcEL1ug0g2

LBQcvSb16O2G+Nv1C0VzHWecScxf/ajB5xlF3s/b2Y66EBGrfxDjXj0yvqxU0MBmPhnT

StRh1Srkr8EcbUTOm/AFcm+eSqdTDd7dh8OUT4Eh9eJzxDdQ8du/Ob2N/y7ty4PVDlex

wZ0e2MS7Auy2wUmeDCE5/vunKcUY3JAixzgeWZF7HKknYUgBBerL3kurQWkQgq7B28bP

OaaPbUj1iR8S5OJdGXzjwZUYWC41T86e45dyLRIWkznd8GbrDrbpMrmfx+YlTLIsmK1/

5fUQ==

X-Gm-Message-State: AO0yUKUu1L9YgkpZhDDvuek4TPNVoxmnEAwpKBtvdXCFgQ5HqruB+YsP

4B7XB2uVNiHH7ejxaI/nwYkLjVODRwYyD6QFnErR3OVu

X-Google-Smtp-Source: AK7set+OknFXgfc4FJtMniFEvY8paMHv4zkxyoTE9qVBs/kd2gB9jq0bHKne1rcWW+s2pdu4x5jObj26rMpAaV72RAs=

X-Received: by 2002:a05:6214:1871:b0:56e:9aa4:57f7 with SMTP id

eh17-20020a056214187100b0056e9aa457f7mr3273235qvb.9.1677307190764; Fri, 24

Feb 2023 22:39:50 -0800 (PST)

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Fri, 24 Feb 2023 22:39:50 -0800

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Fri, 24 Feb 2023 22:39:50 -0800

MIME-Version: 1.0

Sender: Fritz Ueli

From: Fritz Ueli

Date: Fri, 24 Feb 2023 22:39:50 -0800

X-Google-Sender-Auth: e_b9DEghoLn1ENllFs_80ucIpFE

Message-ID:

Subject: Did you see this kitchenartcabinets.ca

To: Sales

Content-Type: multipart/alternative; boundary="00000000000048eb3c05f5808323"



--00000000000048eb3c05f5808323

Content-Type: text/plain; charset="UTF-8"



Hi kitchenartcabinets.ca



I have Hope everything is good at your end.



some interesting facts about your website. I can see some real effort done

on your website but you are missing on few updates which can help improving

your website visibility.





Your website needs attention with the followings:



- Use of low competitive keywords throughout the marketing strategy

- Persistent errors restricting your website being indexed.

- A meager social media presence is also a reason to ponder too.

- Lack of theme based content promotion castling web benefits.





We lead the race to get ahead of competition and algorithm updates with

early adoption of new strategies for the stabilized result.





Reply now and I will send you a clear analysis report absolutely free,

using my corporate e-mail id.







Warm Regards,

Fritz Ueli

Marketing Manager

-----------------------------------------------------------



[image: beacon]



--00000000000048eb3c05f5808323

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




n 0in 0.0001pt;line-height:normal">
=3D"">Hi

kitchenartcabinets.ca





I have Hope everything is good at your end.





some interesting facts about your website. I can see some real effort done =

on

your website but you are missing on few updates which can help improving yo=

ur

website visibility.








Your website needs attention with the followings:=C2=A0
font>







  • <=

    font face=3D"verdana, sans-serif">Use of low competitive keywords throughou=

    t the

    marketing strategy


  • <=

    font face=3D"verdana, sans-serif">Persistent errors restricting your websit=

    e

    being indexed.


  • <=

    font face=3D"verdana, sans-serif">A meager social media presence is also a

    reason to ponder too.


  • <=

    font face=3D"verdana, sans-serif">Lack of theme based content promotion cas=

    tling

    web benefits.







ine-height:normal">


We lead the race to get ahead of competition and algorithm updates with ear=

ly

adoption of new strategies for the stabilized result.








Reply now and I will send you a clear analysis report absolutely free, usin=

g my

corporate e-mail id.





=C2=A0


Warm Regards,
Fritz Ueli

style=3D"text-indent:0.5in">Marketing Manager

=3D"text-indent:0.5in">----------------------------------------------------=

-------


001pt;text-indent:0.5in;line-height:normal">
l,sans-serif;font-size:11pt">




XcYl8lE-QGXHUYJ8UITEfB6gWIXEvCEccm0yHhgHglj5Rg3zVTa8x9imCuX98xxl2UPRY_qxVBs=

uPvmrEGs3taFr8ZC6BxYuRMrZiJd8OWdHtRCdueCAI52pA1xpVGQpAORgaNXrvOlNJxkFbRop6x=

g" width=3D"1" height=3D"1" alt=3D"beacon" style=3D"display:none; display:n=

one!important;">



--00000000000048eb3c05f5808323--

McAfee Phish from gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 24 Feb 2023 13:04:16 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pVeHQ-000Ku5-2t

for dave@doctor.nl2k.ab.ca;

Fri, 24 Feb 2023 13:02:56 -0700

Resent-From: The Doctor

Resent-Date: Fri, 24 Feb 2023 13:02:56 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f44.google.com ([209.85.210.44]:43688)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pVdAl-000HAl-05

for support@nl2k.ab.ca;

Fri, 24 Feb 2023 11:52:04 -0700

Received: by mail-ot1-f44.google.com with SMTP id v17-20020a0568301bd100b0068dc615ee44so147422ota.10

for ; Fri, 24 Feb 2023 10:50:00 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=date:organization:mime-version:to:subject:from:message-id:from:to

:cc:subject:date:message-id:reply-to;

bh=X892sw6wjpd2RRfQ32xnymkcKRWzP7Ce1NBLqytXcqk=;

b=NuOSsukvN6kr8FijlhjGA5ZgRlxGsYgXekdphqhs0xGbeVfADJG17/Rpr9Meicp050

sOZ2SzdubGcodAkohftzO8/zEflj7xCVCufylqbHIha/TUHi6YKESNXzie9+zJglTCy9

jnMJfnHmvUlASGgFEXbp5Key25FR7AaIJwhjUT4Z7Ck0OSOjZdoHj9+F+zAdcqEQZAAa

QuJHku61Bra5iM2Zszz7yArFvGNLVxrJ7+6Ya0oyEhqGrnuaj/+CM22BP0oaCSwsqYyA

1N6GfMfahyAMr+zKY0Pb7g33s5qDqYjIuHIXeTYyJyiVrlWmNAmEKj5J+3ZwlJzQoFtR

9ANw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=date:organization:mime-version:to:subject:from:message-id

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=X892sw6wjpd2RRfQ32xnymkcKRWzP7Ce1NBLqytXcqk=;

b=gT5HhwThPJuuHcsUo3VtLDaJ4KvcefkMnZlD4enSMnITtWCkRHPoaYJ8fLAq9T1Euq

vE1m108+4AL0CuzYRZr0/WWT0b4kkMc64g8uDiN6egKsnmWF/UzD/v8LUHnHXoMFK1wr

Oz9/a8gTOePejpzfXyYEWiHuv7eomk0Qr2i+VSfl+2uJCyitdbReUWAJqW0HxZ0yeQ6a

oyTKU0BB18FqDgrjm7sJfRu617U3Du6QpYEEjKlSKBp4m8Ym3xdPTSexipeGwBeKRVGv

m/IQvnAztQvYq1w03WcOzE4FXvMy8NfoOG6rnBhDCODTQ3d8O7OFPMdslK7XJIpGuxaE

kL7A==

X-Gm-Message-State: AO0yUKXRwmECq9DK3Pa/SF4WtsacC8M2GNP0VGJaoFkbleZX3vuhhIBs

8uUPpq/YgwCDexEe4JqaJ9V+BTbZ7oYqmQ==

X-Google-Smtp-Source: AK7set88C7c2dDGl1w5utlYX6H0JeBqB0F4sj2YesWBG1g6O5IFc3SUttk6z9nb9BsJZC953gB6j0Q==

X-Received: by 2002:a05:6830:575:b0:68b:da6c:3ec6 with SMTP id f21-20020a056830057500b0068bda6c3ec6mr7967956otc.25.1677264594296;

Fri, 24 Feb 2023 10:49:54 -0800 (PST)

Received: from 64.44.87.244 ([64.44.87.244])

by smtp.gmail.com with ESMTPSA id d15-20020a9d72cf000000b0068bcb290a38sm3670504otk.55.2023.02.24.10.49.52

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 24 Feb 2023 10:49:54 -0800 (PST)

Message-ID: <63f906d2.9d0a0220.8a312.3470@mx.google.com>

From: "Allyson Toughill"

Subject: Transaction Alert__39229

To: "support"

Content-Type: multipart/alternative; boundary="DaPxKn3GYNuui8=_l1aWjEe8ietiakueB0"

MIME-Version: 1.0

Organization: Online McAfee Services

Date: Sat, 25 Feb 2023 00:19:53 +0530



This is a multi-part message in MIME format



--DaPxKn3GYNuui8=_l1aWjEe8ietiakueB0

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Date: 24 February, 2023



Order/Ref ID: DXY-#7013662061963



Regarding Your Annual PC Plan





Dear Client! support@nl2k.ab.ca



You were purchased a McAfee Total Protection Plan last year, as indica=

ted in this email.



You shouldn't experience any problems because today, (February 24, 202=

3), is the last day of its validity period.=20



The year of validity of your plan is therefore being rented once more.=

As soon as your plan is ready, we'll go to work on it.



We'll also deduct the same amount from your account over the next 24 h=

ours as we did for this sum last year.



Total Amount Charge : ($379.99)





Call us at +1 (888) 470 - 8105, our toll-free number, for further deta=

ils.





Sincerely,



Allyson Toughill=09

Online McAfee Services

Call us : +1 (888) 470 - 8105. Toll-free.





--DaPxKn3GYNuui8=_l1aWjEe8ietiakueB0

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline




"font-size: 14px;">Date: 24 February, 2023

Order/Ref ID: DXY-#7=

013662036449

=

Regarding Your Annual PC Plan





Dear C=

lient! support@nl2k.ab.ca



You we=

re purchased a McAfee =

Total Protection Plan last year, as indicated in this email.
>

You sh=

ouldn't experience any problems because today, (February 24, 2023), is=

the last day of its validity period. 

The year of validit=

y of your plan is therefore being rented once more. As soon as your pl=

an is ready, we'll go to work on it.



We'll also deduct the same amount from =

your account over the next 24 hours as we did for this sum last year.<=

/p>


font-size: 15px;">Total Amount Charge : ($379.99)
pan>



Call u=

s at +1 (888) 470 - =

8105, our toll-free number, for further details.
>





Faithf=

ully,




style=3D"color: rgb(41, 105, 176);">Carmelita Evans
Online =

McAfee Services
Call us : 
5px;">+1 (888) 470 - 8105. T=

oll-free.







--DaPxKn3GYNuui8=_l1aWjEe8ietiakueB0--



McAfee Phish from gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 24 Feb 2023 13:04:16 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pVeHQ-000Ku5-2t

for dave@doctor.nl2k.ab.ca;

Fri, 24 Feb 2023 13:02:56 -0700

Resent-From: The Doctor

Resent-Date: Fri, 24 Feb 2023 13:02:56 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f44.google.com ([209.85.210.44]:43688)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pVdAl-000HAl-05

for support@nl2k.ab.ca;

Fri, 24 Feb 2023 11:52:04 -0700

Received: by mail-ot1-f44.google.com with SMTP id v17-20020a0568301bd100b0068dc615ee44so147422ota.10

for ; Fri, 24 Feb 2023 10:50:00 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=date:organization:mime-version:to:subject:from:message-id:from:to

:cc:subject:date:message-id:reply-to;

bh=X892sw6wjpd2RRfQ32xnymkcKRWzP7Ce1NBLqytXcqk=;

b=NuOSsukvN6kr8FijlhjGA5ZgRlxGsYgXekdphqhs0xGbeVfADJG17/Rpr9Meicp050

sOZ2SzdubGcodAkohftzO8/zEflj7xCVCufylqbHIha/TUHi6YKESNXzie9+zJglTCy9

jnMJfnHmvUlASGgFEXbp5Key25FR7AaIJwhjUT4Z7Ck0OSOjZdoHj9+F+zAdcqEQZAAa

QuJHku61Bra5iM2Zszz7yArFvGNLVxrJ7+6Ya0oyEhqGrnuaj/+CM22BP0oaCSwsqYyA

1N6GfMfahyAMr+zKY0Pb7g33s5qDqYjIuHIXeTYyJyiVrlWmNAmEKj5J+3ZwlJzQoFtR

9ANw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=date:organization:mime-version:to:subject:from:message-id

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=X892sw6wjpd2RRfQ32xnymkcKRWzP7Ce1NBLqytXcqk=;

b=gT5HhwThPJuuHcsUo3VtLDaJ4KvcefkMnZlD4enSMnITtWCkRHPoaYJ8fLAq9T1Euq

vE1m108+4AL0CuzYRZr0/WWT0b4kkMc64g8uDiN6egKsnmWF/UzD/v8LUHnHXoMFK1wr

Oz9/a8gTOePejpzfXyYEWiHuv7eomk0Qr2i+VSfl+2uJCyitdbReUWAJqW0HxZ0yeQ6a

oyTKU0BB18FqDgrjm7sJfRu617U3Du6QpYEEjKlSKBp4m8Ym3xdPTSexipeGwBeKRVGv

m/IQvnAztQvYq1w03WcOzE4FXvMy8NfoOG6rnBhDCODTQ3d8O7OFPMdslK7XJIpGuxaE

kL7A==

X-Gm-Message-State: AO0yUKXRwmECq9DK3Pa/SF4WtsacC8M2GNP0VGJaoFkbleZX3vuhhIBs

8uUPpq/YgwCDexEe4JqaJ9V+BTbZ7oYqmQ==

X-Google-Smtp-Source: AK7set88C7c2dDGl1w5utlYX6H0JeBqB0F4sj2YesWBG1g6O5IFc3SUttk6z9nb9BsJZC953gB6j0Q==

X-Received: by 2002:a05:6830:575:b0:68b:da6c:3ec6 with SMTP id f21-20020a056830057500b0068bda6c3ec6mr7967956otc.25.1677264594296;

Fri, 24 Feb 2023 10:49:54 -0800 (PST)

Received: from 64.44.87.244 ([64.44.87.244])

by smtp.gmail.com with ESMTPSA id d15-20020a9d72cf000000b0068bcb290a38sm3670504otk.55.2023.02.24.10.49.52

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 24 Feb 2023 10:49:54 -0800 (PST)

Message-ID: <63f906d2.9d0a0220.8a312.3470@mx.google.com>

From: "Allyson Toughill"

Subject: Transaction Alert__39229

To: "support"

Content-Type: multipart/alternative; boundary="DaPxKn3GYNuui8=_l1aWjEe8ietiakueB0"

MIME-Version: 1.0

Organization: Online McAfee Services

Date: Sat, 25 Feb 2023 00:19:53 +0530



This is a multi-part message in MIME format



--DaPxKn3GYNuui8=_l1aWjEe8ietiakueB0

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Date: 24 February, 2023



Order/Ref ID: DXY-#7013662061963



Regarding Your Annual PC Plan





Dear Client! support@nl2k.ab.ca



You were purchased a McAfee Total Protection Plan last year, as indica=

ted in this email.



You shouldn't experience any problems because today, (February 24, 202=

3), is the last day of its validity period.=20



The year of validity of your plan is therefore being rented once more.=

As soon as your plan is ready, we'll go to work on it.



We'll also deduct the same amount from your account over the next 24 h=

ours as we did for this sum last year.



Total Amount Charge : ($379.99)





Call us at +1 (888) 470 - 8105, our toll-free number, for further deta=

ils.





Sincerely,



Allyson Toughill=09

Online McAfee Services

Call us : +1 (888) 470 - 8105. Toll-free.





--DaPxKn3GYNuui8=_l1aWjEe8ietiakueB0

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline




"font-size: 14px;">Date: 24 February, 2023

Order/Ref ID: DXY-#7=

013662036449

=

Regarding Your Annual PC Plan





Dear C=

lient! support@nl2k.ab.ca



You we=

re purchased a McAfee =

Total Protection Plan last year, as indicated in this email.
>

You sh=

ouldn't experience any problems because today, (February 24, 2023), is=

the last day of its validity period. 

The year of validit=

y of your plan is therefore being rented once more. As soon as your pl=

an is ready, we'll go to work on it.



We'll also deduct the same amount from =

your account over the next 24 hours as we did for this sum last year.<=

/p>


font-size: 15px;">Total Amount Charge : ($379.99)
pan>



Call u=

s at +1 (888) 470 - =

8105, our toll-free number, for further details.
>





Faithf=

ully,




style=3D"color: rgb(41, 105, 176);">Carmelita Evans
Online =

McAfee Services
Call us : 
5px;">+1 (888) 470 - 8105. T=

oll-free.







--DaPxKn3GYNuui8=_l1aWjEe8ietiakueB0--

I1.18KLLD1.09KIlwhoissourceRank7.60MPINSummary reportDiagnosisDensity00n/a

McAfee Phish from gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 24 Feb 2023 13:04:16 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pVeHC-000KtL-0r

for dave@doctor.nl2k.ab.ca;

Fri, 24 Feb 2023 13:02:42 -0700

Resent-From: The Doctor

Resent-Date: Fri, 24 Feb 2023 13:02:42 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f173.google.com ([209.85.215.173]:42835)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pVcXM-000FDS-2H

for support@netknow.ca;

Fri, 24 Feb 2023 11:11:20 -0700

Received: by mail-pg1-f173.google.com with SMTP id q189so9677pga.9

for ; Fri, 24 Feb 2023 10:09:17 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=date:organization:mime-version:to:subject:from:message-id:from:to

:cc:subject:date:message-id:reply-to;

bh=f2xtBDBuTWtp2ZWairAgJ6fZgiNIPtBAL0wokoZNDG0=;

b=mDfQYN654xUTziIe7dXTnFDqFAS9sS6xuig6umW+XWW6aya0LPW8WHbcSETozjDnyP

T8HkwMW7x7EX8nN8P4k1/SFPK0W/RpRcjSJwADeEDrEJS1mfS4//pUXPNYdVAvkkPTY+

XfRS9A3HYRxnA0aBmzdS+mQqTU/hWMzYALgW2RlYuhu7NAYciysPKIjdK0vWEgnVs4LR

AijCM/C/1qoEF5ni5A0Ga5MGn1niWQEUbq65mlJQ6iAdfySovUVlFNqoUETilytG68im

DgIyIFMwYLbwBS2ukxrEJxUMZmYz86QKycBJjFtEn6i2emR756nf8ZVCKqurVvkYR51B

Ylzg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=date:organization:mime-version:to:subject:from:message-id

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=f2xtBDBuTWtp2ZWairAgJ6fZgiNIPtBAL0wokoZNDG0=;

b=a8d+EEzPJN8HUfvZQmAYmXwyTyYqhoAM+3SWMEep0CyxI0LzQhOFCnOpu1oSelIJ7J

sOwtqLESmYq6taTZQebeH4z8KVFgNZtMqHEy30lcjcrVFtHMgTLU9SEIk+U4rd49630+

EcCRRhqtA4EFRg8Jvi5i+jCcDq0XI+E6ZOb4Vg628URWYbGP1qaRCPpGm208sSACi1SD

KXH/gC3RMwNHMDDCJtR2HX+yTEcvkLuGvtSvqEhz9HwrMfsPSNWufzkF+qoxZdg0Dvlw

kVh/CIfJbCbypV+nt5MSkRw2k5fDZ0TQE49uLIeDV5HCxSztMoHbcYr3VJXWKQULyCYF

BiEA==

X-Gm-Message-State: AO0yUKV/UAaged27WUOgM3ePTNpn9UCr5OzwgIiM0sWAUkXv9a+t8I3p

1dBTWK0klmI20rYklCcRQTg7Bv6I7/r4kw==

X-Google-Smtp-Source: AK7set+L0xG5eNN/PUFeTXoEM0Aum1hRkLm/BAN5k8WSSzoRw6/eHoFfJSVN+oP2yHTf3tTP1NBvUA==

X-Received: by 2002:a62:1d4b:0:b0:5a8:a250:bc16 with SMTP id d72-20020a621d4b000000b005a8a250bc16mr12525102pfd.3.1677262151882;

Fri, 24 Feb 2023 10:09:11 -0800 (PST)

Received: from 185.216.74.74 ([185.216.74.74])

by smtp.gmail.com with ESMTPSA id q22-20020a62ae16000000b005d6fcd8f9desm5287867pff.94.2023.02.24.10.09.09

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 24 Feb 2023 10:09:11 -0800 (PST)

Message-ID: <63f8fd47.620a0220.28cc3.aec9@mx.google.com>

From: "Gilbert"

Subject: Services Renewal Plan63681

To: "support"

Content-Type: multipart/alternative; boundary="xej4c3woOimB=_LKGha3RRuGvDZ2pkYZgQ"

MIME-Version: 1.0

Organization: Geek Billing Team

Date: Fri, 24 Feb 2023 23:39:11 +0530



This is a multi-part message in MIME format



--xej4c3woOimB=_LKGha3RRuGvDZ2pkYZgQ

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Date: 24 February, 2023



Order/Ref ID: DXY-#7013662000001



Regarding Your Annual PC Plan





Dear Subscriber, support@netknow.ca



You were purchased a McAfee Total Protection Plan last year, as indica=

ted in this email.



As today, February 24, 2023, is the last day of its validity period, y=

ou shouldn't have any issues.



The year of validity of your plan is therefore being rented once more.=

As soon as your plan is ready, we'll go to work on it.



We'll also deduct the same amount from your account over the next 24 h=

ours as we did for this sum last year.



Total Amount Charge : ($379.99)





Call us at +1 (888) 470 - 8105, Call our toll-free hotline for further=

information.





Thank you so much!



Franklin Schultz

McAfee Support Team

Call us : +1 (888) 470 - 8105.





--xej4c3woOimB=_LKGha3RRuGvDZ2pkYZgQ

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline




"font-size: 14px;">Date: 24 February, 2023

Order/Ref ID: DXY-#7=

013662000001

=

Regarding Your Annual PC Plan





Dear S=

ubscriber, support@netknow.ca



You we=

re purchased a McAfee =

Total Protection Plan last year, as indicated in this email.
>

As today, February 24, 2023, is the las=

t day of its validity period, you shouldn't have any issues.
e=3D"font-size: 15px;">

The year of validity of your plan is th=

erefore being rented once more. As soon as your plan is ready, we'll g=

o to work on it.



We'll also deduct the same amount from =

your account over the next 24 hours as we did for this sum last year.<=

/p>


font-size: 15px;">Total Amount Charge : ($379.99)
pan>



Call u=

s at +1 (888) 470 - =

8105, Call our toll-free hotline for further informati=

on.





Thank =

you so much!




style=3D"color: rgb(41, 105, 176);">Franklin Schultz
McAfee =

Support Team
Call us :
76);">+1 (888) 470 - 8105.







--xej4c3woOimB=_LKGha3RRuGvDZ2pkYZgQ--

I1.18KL0LD1.09KIn/aln/awhoissourceRank7.60MPIN0Summary reportDiagnosisDensity00n/a

link spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 23 Feb 2023 04:55:49 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pVACM-00025h-2J

for dave@doctor.nl2k.ab.ca;

Thu, 23 Feb 2023 04:55:42 -0700

Resent-From: The Doctor

Resent-Date: Thu, 23 Feb 2023 04:55:42 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f66.google.com ([209.85.208.66]:34385)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pV8jn-000GcG-0o

for doctor@doctor.nl2k.ab.ca;

Thu, 23 Feb 2023 03:22:34 -0700

Received: by mail-ed1-f66.google.com with SMTP id cq23so39991052edb.1

for ; Thu, 23 Feb 2023 02:20:07 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=7/5UroYmJBdCpOSXSW7edwAE3NJBiItYo321cwMPGJc=;

b=LhnII4knM/tyRnoglzIjwYMerLUtQBEqEhMX1Lsa83jEd2WHBfZnca1QEoNRsTZKLJ

Ycw9xZOxZ8Ic54tHWC9bwQNWE7QW0P0qJULr5AvgS8iwiWcLVaVxwYoNH+KTP7nU+fjx

uODeaLdIcgY/qT2lbiY0N1CJ/3AsXfcpqBsNDPlbiyEc4kWda0q98sbbpkoyjMJdEFYq

iVOCvGsDtgldiw0dZiz+q/i3hul2SPZznRXIuGETgK4OQOd9DTmeF3dqa2NNt37J/5FP

RIWK2mHGvOsA/nGrFs58C88l4TW2PTrSB7r4p2Y3Hf/RXLYYs3snisxww1D14o6H+2hv

MxlQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=7/5UroYmJBdCpOSXSW7edwAE3NJBiItYo321cwMPGJc=;

b=RqyVMp/eE/yXWCTyOLZvGnFyLQhyLepXNYNAItYQoKFFAzWthC/ve5eMu2JUCN6JVZ

Jp7DuAbkf358bhO6yJMwtn2vB7i7GNWhB0gFRdkSCcZDDWOIryIbcTEujxhE7V6f2KO6

BJQnwTdcXAoRUz+b0BAtuPlEfwhfOacgPzymIjlEb0p37Ggul1+0XrV67u7EXPmPqIT9

UzvYCCS4xt86+fbWUDekuNmknMrtrlaPjwYyCAYVdz+2F8QKsNqb7JtW1wA1aO2u+wN4

Upgq3IH1wIcRirCRt4PsYifYkpadiK0vMpD5gT/gNg1B95ymJlpWz2gG/Vvge1/eXcv/

623A==

X-Gm-Message-State: AO0yUKWUt87Qy0mo1iNz8En2CPF6r0flL0X3o3JjvKSJlXwpTLYBZtXt

NSblQoke8b6ZBiVu456Mzq+F8O9MvTccIKHiTbs=

X-Google-Smtp-Source: AK7set9wLXT2E45BQNPekwZbpFat49VFZS3Pu9QcnVCIYdYLgGDOa/V9tafEgEf00ud9tcMRDMMGFojzIhZx69VZ8fI=

X-Received: by 2002:a17:906:22db:b0:8ea:a647:ae5d with SMTP id

q27-20020a17090622db00b008eaa647ae5dmr1415774eja.13.1677147601523; Thu, 23

Feb 2023 02:20:01 -0800 (PST)

MIME-Version: 1.0

From: "Ms. Monica Rolland"

Date: Thu, 23 Feb 2023 10:19:57 +0000

Message-ID:

Subject:

To: david , david , david ,

deekoo , dkabura , dkg ,

doctor , dougm ,

dpchurch , dwegscheid

Content-Type: multipart/alternative; boundary="00000000000006594905f55b5b39"

X-Spam_score: 5.1

X-Spam_score_int: 51

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: https://cf062.app.link/Gd3MreHYCxb https://cf062.app.link/Gd3MreHYCxb





Content analysis details: (5.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.208.66 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[209.85.208.66 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.66 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.66 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[jeanbaran44(at)gmail.com]

2.5 SORTED_RECIPS Recipient list is sorted by address

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[jeanbaran44(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 TVD_SPACE_RATIO No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?}



--00000000000006594905f55b5b39

Content-Type: text/plain; charset="UTF-8"



https://cf062.app.link/Gd3MreHYCxb



--00000000000006594905f55b5b39

Content-Type: text/html; charset="UTF-8"



https://cf062.app.link/Gd3MreHYCxb



--00000000000006594905f55b5b39--

link spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 23 Feb 2023 04:56:16 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pVACC-00025B-0v

for dave@doctor.nl2k.ab.ca;

Thu, 23 Feb 2023 04:55:32 -0700

Resent-From: The Doctor

Resent-Date: Thu, 23 Feb 2023 04:55:31 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f179.google.com ([209.85.210.179]:42892)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pV8SV-000G8b-0n

for doctor@nl2k.ab.ca;

Thu, 23 Feb 2023 03:04:24 -0700

Received: by mail-pf1-f179.google.com with SMTP id a26so5838792pfo.9

for ; Thu, 23 Feb 2023 02:02:15 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=iDOKt2d0PIh+xIyiftZyx0p2/0RgejaPwjR0wtTfUKw=;

b=a1/P/tGR+Jlv+L6rvyaP/QKQgNWsnIvgsPfJt4Ur5D2/kpwtq+QO2H+aUsf9XiumOz

BBrXlTrR0PNdGI7zWbqgk1ygoIsvhRhrclxlYrSAH7IiCg+nVYGrzuf0boAjzsx6+yJm

PgKi8qnVrswkzE+ouSCvg9PxcxeYzi9e0Fk0oTs55VGOg6wuWpJhE4bj/dimQiYrMvnd

ckA3n8EfbGKkDXFPw2gmSozfnKnSUaPPUtBAcOQAG3TAVYxBqJ9LZ33YhWIKteIZW6U+

mm+bkyBoFKxGbmGiJfIFlpnilFrpMJq/lWaCdlnNncYg4Z5wAwL71q4eFogq1lQB6NiE

LxTw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=iDOKt2d0PIh+xIyiftZyx0p2/0RgejaPwjR0wtTfUKw=;

b=pp0S6eRZscHna4okFP7u+kZNFyV4oloIpTJJP8ux699lcnCLT4Z0g5Ve17RQFzVgiV

1ddT3+OLQHy3ac845joqH228BWXdyd36dVAbS/osytTs2c4Lp0EVCUUP3CT6SANnvrS2

kmGv+lfMNEQ1AU+x2L5JPijMCNyLORKE7KOcUUP1B9cuIV9onA8N2BIUHusyfh3679Zn

uXu/O0wqS3n2jeL06iKGBj8a3KxV8ixNTvDcg9jLLyBt79OF433RqNPEZAU1HH/7HFme

vxuhZKGLzn5aKGlO5bfzhc+V7N0L4KhZiLKzpkWitNvQIpkk9GSF+e8f6ISUFVZg7Qal

o6bg==

X-Gm-Message-State: AO0yUKXtQ1jjPNXgg2rr+ziXYbSUDAdv5XF5AqdPMz+/N8OrqXq8nmB3

9RGrfuZBGNoxnEZM8Wj/wFk9Fg4QrjxSrkwYcg==

X-Google-Smtp-Source: AK7set+iaG0RZUmLn9n2NkroWIb3/XrKhmwy8pkG2Ksk5CSVzNFGGGpt0URX+qtFNp/OPP4v6MwmKuMVjc5lwaBeTlM=

X-Received: by 2002:aa7:8752:0:b0:590:3182:9341 with SMTP id

g18-20020aa78752000000b0059031829341mr1686796pfo.0.1677146530120; Thu, 23 Feb

2023 02:02:10 -0800 (PST)

MIME-Version: 1.0

From: Dagmar Duerr

Date: Thu, 23 Feb 2023 10:02:06 +0000

Message-ID:

Subject:

To: dks , dkte ,

dkuberkar , dlama ,

dnath , doctor , dosani ,

dr

Content-Type: multipart/alternative; boundary="0000000000002a094605f55b1b04"



--0000000000002a094605f55b1b04

Content-Type: text/plain; charset="UTF-8"



https://82h0u.app.link/cHiSHakZCxb



--0000000000002a094605f55b1b04

Content-Type: text/html; charset="UTF-8"



https://82h0u.app.link/cHiSHakZCxb



--0000000000002a094605f55b1b04--