link spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 Mar 2023 05:12:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1paF7K-000JrZ-2x

for dave@doctor.nl2k.ab.ca;

Thu, 09 Mar 2023 05:11:30 -0700

Resent-From: The Doctor

Resent-Date: Thu, 9 Mar 2023 05:11:30 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yb1-f176.google.com ([209.85.219.176]:35513)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1paEN7-000B5k-2I;

Thu, 09 Mar 2023 04:23:50 -0700

Received: by mail-yb1-f176.google.com with SMTP id v101so1503001ybi.2;

Thu, 09 Mar 2023 03:21:46 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112; t=1678360900;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=aK241zxUJjC9FBgpiE6GHXIuA8lPNMBpS1+P2xyalkU=;

b=EA+b6o0bibgO7r04ZVk6+blwIq1fUWkL5RDRNBZzaKeSNYRkYqm9bFfCdORiD9AaXL

PD4jBo9G0Oc5DmKA9/ObuSfKJiWipz5K2mgHAFAc6HHQKnk4+WAlfJipKYqvh5ibE8KN

vYzsmFBTAenAJc2tTSYvZ8LNwc8XEYWfXAcDOunsQ2w34VGvbQOlYWpuP5VKcgHlhGUC

QaOsLYJ7C7QBkO0WuaRDqoeC1MBYvl+CIfoD94mwwnx92elUJ2fursn133POPRXgi+E7

9katat7IYgi0G35LaPh4I/4awQLZzRto0+qj5bVbkgC26o4WMhVF9FE/24IdmTttOdz7

tnnQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1678360900;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=aK241zxUJjC9FBgpiE6GHXIuA8lPNMBpS1+P2xyalkU=;

b=fwPBz9GWbS4TXvsFhqkLdk5N7oFIp+Aw/wYpXgYHxJOG78qgcZHXjt/qmAdpWDGJxC

qdkPwLYvAPPeEHN/79ps5dYN2vXfxspbVF8h2WSUDVxf0oILOnGg5RdALwEjwzqTsmEs

nhQ1rnN94vjUPJRzJf0Yro5GXLJibi1H5Cna7P01BVUfZX1yfOUmUKiOoIisFixlx4hE

KE1d+GVnFth5bJt0GVs3HSVT2kKua+VNU7+B4WEbvFNFTIS5lB4GPWd/7vnYmu11/pOI

emSmQ8yII15frumAYmIj/dia1cTz4CUi1ItqYk/+fLbkOPz1aBOjzcjrAJwQ7vGgmrI7

pViQ==

X-Gm-Message-State: AO0yUKV+OSs7RI0BlX2mLmlGf52Wb1t5PeyqFtFnqX00/LgdNdTH0XxH

8ojeTOT/rvEYQMoiysVTiGqejM2lLj+o9Qo3wi8=

X-Google-Smtp-Source: AK7set/KvBYmTFvMkco/sj00BAVIhU2Ax618iChAIsABgneKbtuvOsh1X6M5K/EuN+zPOTDfK49Qpn/yehJFaTqXSec=

X-Received: by 2002:a25:e90b:0:b0:9fc:e3d7:d60f with SMTP id

n11-20020a25e90b000000b009fce3d7d60fmr10121511ybd.5.1678360900492; Thu, 09

Mar 2023 03:21:40 -0800 (PST)

MIME-Version: 1.0

From: John

Date: Thu, 9 Mar 2023 11:21:45 +0000

Message-ID:

Subject:

To: ritzholidayinn , root , sales ,

salifrasaki , sanni adamu2004 ,

scbklcom

Content-Type: multipart/alternative; boundary="00000000000047603e05f675d957"



--00000000000047603e05f675d957

Content-Type: text/plain; charset="UTF-8"



https://rebrand.ly/4e40c1



--00000000000047603e05f675d957

Content-Type: text/html; charset="UTF-8"



https://rebrand.ly/4e40c1



--00000000000047603e05f675d957--

Desparation spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 Mar 2023 04:18:00 -0700

Received: from mail-ot1-f44.google.com ([209.85.210.44]:39879)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1paEHL-000A6Z-1W

for dave@doctor.nl2k.ab.ca;

Thu, 09 Mar 2023 04:17:52 -0700

Received: by mail-ot1-f44.google.com with SMTP id o4-20020a9d6d04000000b00694127788f4so808393otp.6

for ; Thu, 09 Mar 2023 03:15:47 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112; t=1678360542;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=Rw0+1JiOd7I/TO1Pznbjy4asg9BlvqEU48j466uhhF8=;

b=Ep5ey3o2kuNTe8OMlovOPqxRFP7SWuDdeghhXA7gy1NNwxsxfPGi6+5miducfOM3jD

eSDXaQshN6m+3uQlMxHUzKyY/Ufzl3InF7MhqV5lGfnDHcT4GuZA5f8MJlMPXKwofCqc

1LlCoIBVl7XTSdwP1jwpWx2+VguhKrV/8ID9nedGV0syO1In2Hr6B/hUtCeVR9o+HAu1

cbutuSTnbvE/nBxsuinGLlQUh868yzc94iqXto42udbRSciDj6ZPYkOcr50kwxZlPsGS

1FKDvTuXAEw01LBeHWpgd1D9j6EHbKkQEFvDrF7doGOXIwITxxNckezPGZE99nsHjiD7

Ittg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1678360542;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=Rw0+1JiOd7I/TO1Pznbjy4asg9BlvqEU48j466uhhF8=;

b=t6bqv7KhFUJml9TNAQ2/MzoJYMkDLtwQLBX27kOF7daE4dGVYb8BYu5Br174yc1f8v

CdpRH4DFW17tyAAMj47n5ySWddJPmpDnBfX6Hcnx9hw0UstJIbjAal0uVcHj+59OvZwA

g22EmsJqExlnkT8doA4SPfOQ1EXDSCdO0jpvH61N0XCee/4CkO++BtEDhJ22T1HSJXgC

Zpq8sb4jTmiU4nsaG63Pu7M+2I9GVDfWKmHnzJwm41NtqDIWzbx4wGV4NsM8RvMapEnp

oU9ezeqZ9nJ55v4roFZMu/CrMWVk4FBrSyjKvGhWh9pOcw04PS5wBkzl0UkTKCfUsBnG

YxZg==

X-Gm-Message-State: AO0yUKWKIYBJ/5RjY6RF5Y1aQ+mcJORE9etTDTS9mX3M7MtQ6Y2L907J

4eQgTm/gijy4N9FaRktxt+il7NbMp03SQZ1Foes=

X-Google-Smtp-Source: AK7set9TloLlOvQtGiTm/zH9hjI1c7Ypnz8E1SN5++JBpJy2EVXZIic0ayBwCPBP93p/wALzgVcpBmTZ1XLCur3da08=

X-Received: by 2002:a05:6830:2464:b0:694:39ee:5f4a with SMTP id

x36-20020a056830246400b0069439ee5f4amr7071123otr.2.1678360542020; Thu, 09 Mar

2023 03:15:42 -0800 (PST)

MIME-Version: 1.0

Received: by 2002:a05:6358:e928:b0:107:5ac1:3dfa with HTTP; Thu, 9 Mar 2023

03:15:41 -0800 (PST)

Reply-To: mamunasambo@aol.com

From: Miss mamuna sambo

Date: Thu, 9 Mar 2023 12:15:41 +0100

Message-ID:

Subject: Miss mamuna sambo

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 5.7

X-Spam_score_int: 57

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Hello, Dear Friend, I am Miss mamuna sambo , I have a discussion

to have with you sincerely. Please kindly respond for more details. Best

Regards. Faithful Miss mamuna sambo



Content analysis details: (5.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.44 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[hamiisabela612(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[hamiisabela612(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.44 listed in wl.mailspike.net]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

Subject: {SPAM?} Miss mamuna sambo



--

Hello, Dear Friend,

I am Miss mamuna sambo , I have a discussion to have with you

sincerely. Please kindly respond for more details.

Best Regards.

Faithful

Miss mamuna sambo

Donation spam from gmail from another gmail account

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 Mar 2023 05:12:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1paF70-000Jpa-0t

for dave@doctor.nl2k.ab.ca;

Thu, 09 Mar 2023 05:11:10 -0700

Resent-From: The Doctor

Resent-Date: Thu, 9 Mar 2023 05:11:10 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f65.google.com ([209.85.208.65]:42861)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1paDb2-0007xS-0P

for doctor@doctor.nl2k.ab.ca;

Thu, 09 Mar 2023 03:34:08 -0700

Received: by mail-ed1-f65.google.com with SMTP id o12so4972986edb.9

for ; Thu, 09 Mar 2023 02:32:05 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112; t=1678357919;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=GFMCgT7r9is+gB2C5n2JQKgYnYAOXfWpBz3o9k2fHNQ=;

b=D5D4wNEfR91l9/D1csSnaoDeo2aWZ2VfEKecUlvhh3AybZT690LDXYXphGWeJ87YqX

K0Dz7CbxylQEOSEpCU376cjxjxZzQVaFOwZ+cLy4fATDUYzC7w10p5xoazLOzcbetsxQ

y+O3emQxorW29g8JmRsrF8+SlczIAjSp8Dtb5BvRzENu3EbF7AUwTtb/EBb6xkMuiXiR

sjaBiFMvE/8CihyOoKG+ZgWcOJtIp6HzScpLSmdgF/JqgydtWVcj9NTi/MuRyqm24ajn

GUzVVS4zTc6qJc0r02RZKsrRG77hHFUoXEf3OxO18gTsLwjscvtIUXx/ZF1tt4FnAWy+

BGfQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1678357919;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=GFMCgT7r9is+gB2C5n2JQKgYnYAOXfWpBz3o9k2fHNQ=;

b=hKHOE1AcaOFOEk67EZZNboA2ao9E7eFMFnA6bc5Zz3S7NK+PQbotgXNYrulUncvnjw

iyzaqBIYS00GitvKb2DOXMdX92TX3sKFyTeV8ULIRlG0AIt/wsKK29mfUPWc0EAcz6os

+Ih20ADcoVo8H/5zFenH3G74Tm33C6T14yYs92tXiIhMDNx3MFX+DnLNEWoW7uFrmYpE

q/WPi4n32dZVIKoTVVZX4A9iGi/ebbzjVuadPIokgo1l0tPED9Te9J7Rmia04iWYoxE4

0tKtsuPv7Jo1MghXpOpZJ0MDhg9dRuMbNxIVT03E+U2Gwf3HQNTRAuNCgKp9byTrTqee

dYqA==

X-Gm-Message-State: AO0yUKUB9RqFw0DafRkdtqp66sAuyfMmSD3wr84zzPZOXheMEmJKyxjI

LM1W1MZKohznz0WYLGjTgv5oWQR4/GYAmeEM8is=

X-Google-Smtp-Source: AK7set+Vk3z1xskS9spS3OfjL45gfj7BqtiOIaWgp2qKLkSwNvGRjSjTgQC0itxPC9BBezL7jDFEhsKICDFY+w5LMFs=

X-Received: by 2002:a17:906:4997:b0:8ee:babc:d3f8 with SMTP id

p23-20020a170906499700b008eebabcd3f8mr10853383eju.3.1678357918594; Thu, 09

Mar 2023 02:31:58 -0800 (PST)

MIME-Version: 1.0

Received: by 2002:a17:907:d090:b0:8e5:d99d:230f with HTTP; Thu, 9 Mar 2023

02:31:57 -0800 (PST)

Reply-To: stefanopessia755@hotmail.com

From: Stefano Pessina

Date: Thu, 9 Mar 2023 13:31:57 +0300

Message-ID:

Subject: =?UTF-8?B?ZG9uYcibaWUgw65uIG51bWVyYXI=?=

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Bcc: doctor@doctor.nl2k.ab.ca



--=20

STEFANO PESSINA =C8=9Bi-a donat 1.000.000,00 =E2=82=AC. V=C4=83 rug=C4=83m =

s=C4=83 m=C4=83 contacta=C8=9Bi

pentru mai multe informa=C8=9Bii la stefanopessia755@hotmail.com









The sum of =E2=82=AC1,000,000.00 has been donated to you by STEFANO PESSINA=

.

Kindly get back for more info via stefanopessia755@hotmail.com

Abandoned fund spam from gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 Mar 2023 05:12:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1paF6s-000JoE-2G

for dave@doctor.nl2k.ab.ca;

Thu, 09 Mar 2023 05:11:02 -0700

Resent-From: The Doctor

Resent-Date: Thu, 9 Mar 2023 05:11:02 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f181.google.com ([209.85.210.181]:37450)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1paDYN-0007ot-0C

for sales@nk.ca;

Thu, 09 Mar 2023 03:31:23 -0700

Received: by mail-pf1-f181.google.com with SMTP id z11so1164139pfh.4

for ; Thu, 09 Mar 2023 02:29:20 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112; t=1678357754;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=nE+i8K/vDNvH13o2fSnMLx7ZDm4jlaxHNlkGXw+1/Hc=;

b=LIAr2VOJ5TaJkuIFC0QTC37MSyqHLLgxRHkILbZso2oZ03BrDywcpjaJ3kOskwowhV

GF6Z1qctSYUgy7cVBQSvE9SK9x9B4rPHBfCco3dLqB9eAGqDUBcMPjgNgaDsYs5yKxh4

0QTqXI2M9qKr52PCP3s9DdyJ2/AjDU4V9V0m/O0vfoGzBZWZKX28Spj7Bxk3piXkrDBM

HmVoDh18TPg6ISZyRW1EHWmmConCalxMZINYv5vCvxOjWD0w3TYu8NaHHhRBxu5zvnIB

41HLPJRJUPlKKC+ScaDZebwZO2pphkmjCJ4mGHfUK4C/bF4OgAnHqPjlEw7NbE4VJA8q

uEMA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1678357754;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=nE+i8K/vDNvH13o2fSnMLx7ZDm4jlaxHNlkGXw+1/Hc=;

b=42ceb+nxpeRo/a5h/t3ulvkbkuSTBtSrR1MQuApml/kt+5UJVhJdxH2yv7uZmy44oi

2XBTzR/kG4SnAqVqVX2LzUukHm/ChbygSgblfQOmP+Ytz6YgrvF35iGjw+f0EqHdTiz+

o9U175PV96Eqp9VBBvwCjjuSchIcDSpBsCWOcciy1OXpEZiSvZf/hNDY+xj3cv/jNPQu

JJEOFj59pQuxtVQh4n00JyEG6jdaO1Ll5TmgAafT6nd2uz/qj1G1FeRXvef7Ipq1fu66

ryRi2qqsDQ1A+8JuVF9q6sE6B8gWwAIIR6F+jIspLJvwNg/dEJ5OYZvtzUM53g1hpu5F

lE+w==

X-Gm-Message-State: AO0yUKW9yofKfk9Sr4zPybaKNJa5JgrH6XjU31rIdwxGhDs2Lmr1olLM

7YVovzTXx6N9hYdNmA+9n0NefXeT7qnMWD1ZjWs=

X-Google-Smtp-Source: AK7set8kG5DeaUuRC+JWWKooWuX5uqnMV0Mc3SkG1O7LuKaHcql5J8R0at7Ifiew33y1nEQEC+guSsq8zUIqhOzeNC8=

X-Received: by 2002:a62:8645:0:b0:5d9:27a5:619e with SMTP id

x66-20020a628645000000b005d927a5619emr8917678pfd.4.1678357754487; Thu, 09 Mar

2023 02:29:14 -0800 (PST)

MIME-Version: 1.0

Reply-To: davidmoonass@gmail.com

From: "Mr. David Moon"

Date: Thu, 9 Mar 2023 10:28:54 +0000

Message-ID:

Subject: Dear Friend,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000c329df05f6751dac"

Bcc: sales@nk.ca

X-Spam_score: 19.4

X-Spam_score_int: 194

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Friend, I know this means of communication may not be

morally right to you as a person but I also have had a great thought about

it and I have come to this conclusion which I am about to share with you.





Content analysis details: (19.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mrdavidmoondm(at)gmail.com]

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.181 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.181 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 T_MONEY_PERCENT X% of a lot of money for you

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

Subject: {SPAM?} Dear Friend,



--000000000000c329df05f6751dac

Content-Type: text/plain; charset="UTF-8"



Dear Friend,



I know this means of communication may not be morally right to you as

a person but I also have had a great thought about it and I have come

to this conclusion which I am about to share with you.



I am Mr.David Moon, the auditing director of International Bank

Burkina Faso. I hope you will cooperate with me as a partner in a

project of transferring an abandoned fund of a late customer of the

bank worth $18,000,000 (Eighteen Million Dollars only).



This will be disbursed or shared between the both of us in these

percentages, 55% for me and 45% for you. Contact me immediately if

that is alright for you so that we can enter into an agreement before

we start processing for the transfer of the funds. If you are

satisfied with this proposal, please provide the below details for the

Mutual Confidentiality Agreement



1. Full Name and Address

2. Occupation and Country of Origin

3. Telephone Number



I wait for your response so that we can commence on this project as

soon as possible.



Regards,

Mr. David Moon



--000000000000c329df05f6751dac

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



=C2=A0 =C2=A0 =C2=A0 Dear Friend,

I know this means=

of communication may not be morally right to you as
a person but I also=

have had a great thought about it and I have come
to this conclusion wh=

ich I am about to share with you.

I am Mr.David Moon, the auditing d=

irector of International Bank
Burkina Faso. I hope you will cooperate wi=

th me as a partner in a
project of transferring an abandoned fund of a l=

ate customer of the
bank worth $18,000,000 (Eighteen Million Dollars onl=

y).

This will be disbursed or shared between the both of us in these=


percentages, 55% for me and 45% for you. Contact me immediately if
t=

hat is alright for you so that we can enter into an agreement before
we =

start processing for the transfer of the funds. If you are
satisfied wit=

h this proposal, please provide the below details for the
Mutual Confide=

ntiality Agreement

1. Full Name and Address
2. Occupation and Cou=

ntry of Origin
3. Telephone Number

I wait for your response so th=

at we can commence on this project as
soon as possible.

Regards,<=

br>Mr. David Moon=C2=A0 =C2=A0 =C2=A0=C2=A0




--000000000000c329df05f6751dac--

Yet another Donation spam from gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 Mar 2023 05:11:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1paF6o-000JnJ-0y

for dave@doctor.nl2k.ab.ca;

Thu, 09 Mar 2023 05:10:58 -0700

Resent-From: The Doctor

Resent-Date: Thu, 9 Mar 2023 05:10:58 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f194.google.com ([209.85.167.194]:33512)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1paDY2-0007oF-1v

for doctor@doctor.nl2k.ab.ca;

Thu, 09 Mar 2023 03:31:04 -0700

Received: by mail-oi1-f194.google.com with SMTP id be16so1300996oib.0

for ; Thu, 09 Mar 2023 02:28:59 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112; t=1678357733;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=3ddSPrOCqkDMVGFbvBq0uHF1kaM6q2jktxQt85PFito=;

b=K3y8fwd480qa2Hy0EaULgS6+yLVLfsacQTfZ0puCaTYGodQLRF5DzUFE6Qrh19Ce6+

GimWhfVd2Ot1ET9/U/M6g6c/nEyb1v/fSrXo0FKuQAPkWPPXRS4uOEgdym/hoyIFy2GL

50CnLTaP6C4QhotKABD4hiht+8kMS+Axn2Dj4x3zhIDL2dZ20vHAuEI/9p5NseWFqyMo

I85zcZNN2QdnR0TwJV+5inaDUCNpcEXoULrf8l7lac4c6xe45WAs1AbTjHwYg4KRobET

gaStGx/iHPZ0tDjW+OsApiY7hTXIQisheraas5KcQ531U9zl1qKZk1DRiMd9PROw57Yv

tZ3w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1678357734;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=3ddSPrOCqkDMVGFbvBq0uHF1kaM6q2jktxQt85PFito=;

b=h1gD/Y58Nxh1PmFlGqY0GjWsNw7jwrLDPFEoSHzdPaoeBmy+Y2/KZIAXcEwlzXappW

ocHiTEQ0wE7FbeLasv1ECD/pyJyw1LSwfVOiXAFl+NqDKFmSwTR26aGSQAt5re6tTwMs

G1jZ759sVP46osoeKzerr9UFGScVKF/dg/5F1YyKv2EhfRqFUQRElySpToMuPZFhwEaF

YriPgcjrrE4scnGtGN9dKaOQhnjnXaxtw/q1yf6VFLcQgdg3myK4sFK5Gpr4SDRJpDKB

22PYuksumS6BALLXo6IgYjrVBWkS3V3o/5IauuOfIPP07A8f8aF8zRVRBxcaFC4uNIiW

C77w==

X-Gm-Message-State: AO0yUKXDhNygZcQf0IFDmsYX27nN6/hpjz2K6tym4ox3O+oH0tL9/DAz

MTSePd+TWIj/JW87R6+ssFBVaGPThH4FoQjexd4=

X-Google-Smtp-Source: AK7set+eGy2Va3QCtR6TUor8QkBxTHyAAv0thi5Lv+g6vs1My8tnPQunWn+hQ0F9nlbiQZdGaq/9z/N7Ot1G8nuAM4c=

X-Received: by 2002:aca:1201:0:b0:37f:9a63:cdf8 with SMTP id

1-20020aca1201000000b0037f9a63cdf8mr6413852ois.2.1678357733633; Thu, 09 Mar

2023 02:28:53 -0800 (PST)

MIME-Version: 1.0

Received: by 2002:a05:6359:d17:b0:105:65e3:a2 with HTTP; Thu, 9 Mar 2023

02:28:52 -0800 (PST)

Reply-To: stefanopessia755@hotmail.com

From: Stefano Pessina

Date: Thu, 9 Mar 2023 13:28:52 +0300

Message-ID:

Subject: =?UTF-8?B?ZG9uYcibaWUgw65uIG51bWVyYXI=?=

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Bcc: doctor@doctor.nl2k.ab.ca



--=20

STEFANO PESSINA =C8=9Bi-a donat 1.000.000,00 =E2=82=AC. V=C4=83 rug=C4=83m =

s=C4=83 m=C4=83 contacta=C8=9Bi

pentru mai multe informa=C8=9Bii la stefanopessia755@hotmail.com











The sum of =E2=82=AC1,000,000.00 has been donated to you by STEFANO PESSINA=

.

Kindly get back for more info via stefanopessia755@hotmail.com

Donation spam from gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 Mar 2023 05:09:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1paF4b-000Jcl-1P

for dave@doctor.nl2k.ab.ca;

Thu, 09 Mar 2023 05:08:41 -0700

Resent-From: The Doctor

Resent-Date: Thu, 9 Mar 2023 05:08:41 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f66.google.com ([209.85.217.66]:36524)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pa7qx-000FVu-1q

for sales@nk.ca;

Wed, 08 Mar 2023 21:26:14 -0700

Received: by mail-vs1-f66.google.com with SMTP id by13so543347vsb.3

for ; Wed, 08 Mar 2023 20:24:09 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112; t=1678335843;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=nYQwpPwceaCmWKtuw/AFT4LOokbCGQJeexzC5UoPQWE=;

b=NE9kdYG9FtxF18HXIF95me9Tm74dxCZ6X91psMfFftZcnfFYgg1rz/ZvgWZ9hl7Zby

aePFc4RFOxgI/Ve/+IXCBE8TBaxLQB55We0cW/836FP6Jz84FfgSPyv31tASMkDq1pAU

5G+vN80f7U5zccWy/tHuplsxXzjkRKPyIy7AvAVfqD6pCQnBXJa/w9OSsZbWjLqP3mAB

xjDNZmYCtHl5YzqsCPYOo9IcunhowkVWZYOdcMSvRmp8IaZF/YFA6auCaBiUuXFu1jnX

/lpcXtKFQLK2pdbOMVih+TSVMx3KwfPVhzFVBWYOEqKnTj37jD3fbNPe/UO879ec1tAc

1lNg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1678335843;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=nYQwpPwceaCmWKtuw/AFT4LOokbCGQJeexzC5UoPQWE=;

b=OkkDu1vP5Sv3Wfw/zdZ4B2STV1k/JvpExoMiM01TdNRwfNrUNnuAhZGlc9gU9LnaGp

Vp5u0wMDuLfZT+6g3Oahx1T1CA7o26cPU8hF4CGOI07u0vPQIryC4juA2X/DMNtMEH4C

8++83Ro8khIKtF962K6RNA8miqOhEatpvpGoj3OwxkmZ4d3KOPhDGwPWiy89132dr/ki

5hTOpkqB5BSgrUkPAUCnixp6GIVG4AqGYquK6NNp2l/ghd0PwIrQNxT//GS8RJimq7YQ

2i3a0xLuYeo1kkzIyOQpCOFnfomGobE4HRae5K3p18xR4etYs6iaR1rj+B5+2FuxnpEl

wK8A==

X-Gm-Message-State: AO0yUKWQR9aRGsYwxHOTowxwYjsjzzPTPSNBjOyWWA0jydGr1FmdcrNh

AUNRdu++7pLxJ8vTWWUoQfit3Jj3g9//l9fZRVU=

X-Google-Smtp-Source: AK7set+z4c4WRQhCTGsq5cw9qGS3K5tb26fv69b30HRXokXgxvDq8riiMJzJ6BdggpgLv6/U4V2ELbDTFDiuJAYfp5Q=

X-Received: by 2002:a05:6102:5599:b0:421:c4a3:b607 with SMTP id

dc25-20020a056102559900b00421c4a3b607mr14773827vsb.3.1678335843348; Wed, 08

Mar 2023 20:24:03 -0800 (PST)

MIME-Version: 1.0

Received: by 2002:ab0:3151:0:0:0:0:0 with HTTP; Wed, 8 Mar 2023 20:24:03 -0800 (PST)

Reply-To: richardwahl1031@gmail.com

From: Richard Wahl

Date: Wed, 8 Mar 2023 20:24:03 -0800

Message-ID:

Subject: DID YOU RECEIVE MY MESSAGE?

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Bcc: sales@nk.ca

X-Spam_score: 10.2

X-Spam_score_int: 102

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Hello, I have sent you more than 3 emails regarding your

donation of €1,200,000.00. Did you get my message I sent you? Your email

won a donation, so I'm sending you messages. Do not ignore this m [...]



Content analysis details: (10.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.217.66 listed in list.dnswl.org]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[songdavid717(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[richardwahl1031(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[songdavid717(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.217.66 listed in wl.mailspike.net]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

1.0 REPTO_419_FRAUD_GM_LOOSE Ends-in-digits Reply-To is similar to known

advance fee fraud collector mailbox

3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to

3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} DID YOU RECEIVE MY MESSAGE?



--=20

Hello,

I have sent you more than 3 emails regarding your donation of

=E2=82=AC1,200,000.00. Did you get my message I sent you? Your email won a

donation, so I'm sending you messages. Do not ignore this message as

this is not a scam. Please reply me urgently for more information



Your name:

Your country:

WhatsApp number:

Your answer is required.