Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 28 Mar 2023 14:37:50 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from )
id 1phG40-000NXh-0p
for dave@doctor.nl2k.ab.ca;
Tue, 28 Mar 2023 14:37:04 -0600
Resent-From: The Doctor
Resent-Date: Tue, 28 Mar 2023 14:37:04 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f67.google.com ([209.85.208.67]:39521)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from )
id 1phE6H-0001qE-0J
for doctor@doctor.nl2k.ab.ca;
Tue, 28 Mar 2023 12:31:21 -0600
Received: by mail-ed1-f67.google.com with SMTP id ek18so53484547edb.6
for ; Tue, 28 Mar 2023 11:29:18 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1680028151;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=NYkqZpzRf5lC4Lh2QzUQ6GfsR8Pf1jLj0uDXMj2+D/Y=;
b=hfUsjnxBVSEsFnFT97rWuB3UcEJ0ftMogXz1PITnZaqnShAlOEoAlaZPw5/LbfdZdN
iE5cb2z/Hx1zbI6ZN+ItubhjuzHxI8o1wspMraZnmy1qb3gEj7cNmLCZVSWtT7cMUdQi
lDCyrLPCf1LhHgErlvqSSSgZ+24bMUQTN9aBTQJTCDh/iEuiTXcQ6UcD2GEFWxsgH700
N1o8pRjIYEBoXQ+LgGnZ7XB+TP13t3t5YU5X2syoMzy9scfXKngHRq/XEbitAh8FpLIs
TfGoDyQU2iVW48it73qhnom9dwjUNYgELwp2/MHi4t2qdiky+dVrP79kVzVr/B9WmRO+
B6Og==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1680028151;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=NYkqZpzRf5lC4Lh2QzUQ6GfsR8Pf1jLj0uDXMj2+D/Y=;
b=0/iCmOhNhxDgiOkg9nv1T8Ov29bbEeVLUGJdsCEOXEobFr3qVox7glc7Qfp4oE4Ljf
ZHKONkMPauYXjfbBZituzjOUFb4DiOmORZLHWaa/nCZFqbMtiBzzKj+l4Hh7dCJOn0FL
T/ij1jxJYbvtXd0QR4BdvuDZtIutXge46mEP17hGmzUM5iFhL3rluQlfDdrJCUaLP+N7
rhuM/H+yGeIk+e79V8SmhaauujSxBIiFq6BFo5gah+V5KGwIyDU2IBsGXYLUbcuvu8DL
r3MUqcFUPS8XFrr2bIMyKpr74YJ6uRKeULzvm1uGOr85ri3YS0zQvcc4Rflana2FM0bZ
KLXg==
X-Gm-Message-State: AAQBX9d1GN53GDaoAACAGzbsAGXQ5dEPUC1pjwcVgbFXwpFoJO8bIo5c
d+F6N9cd91UU+sH9WtZ3JVcHgxxtodGL6AHTIjg=
X-Google-Smtp-Source: AKy350aOsVh/+LKgAcdDzSggggy4QIKxnVJsyWtFVGyz1QqB+mTMU1GAXDGx4XKkHMtjKyRuRL6jtmZTuTuGr2lQwS4=
X-Received: by 2002:a17:906:94c2:b0:930:f984:c56f with SMTP id
d2-20020a17090694c200b00930f984c56fmr7572672ejy.12.1680028151583; Tue, 28 Mar
2023 11:29:11 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a98:d7cb:0:b0:1b5:d82c:f6 with HTTP; Tue, 28 Mar 2023
11:29:11 -0700 (PDT)
From: =?UTF-8?B?4pm7?=
Date: Tue, 28 Mar 2023 15:29:11 -0300
Message-ID:
Subject: [Ms. Monica Rolland] invites you!
To: d s virk , dan boo ,
david , david , david ,
david , deekoo , dkabura ,
dkg , doctor
Content-Type: text/plain; charset="UTF-8"
X-Spam_score: 8.7
X-Spam_score_int: 87
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello there! [Ms. Monica Rolland]:It's time to act https://rc8d4.app.link/ucUIsOI9vyb
Yours truly Ms. Monica Rolland
Content analysis details: (8.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.67 listed in list.dnswl.org]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: rc8d4.app.link]
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 SORTED_RECIPS Recipient list is sorted by address
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[jonathan.lopes.ext(at)gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.67 listed in wl.mailspike.net]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
Subject: {SPAM?} [Ms. Monica Rolland] invites you!
Hello there!
[Ms. Monica Rolland]:It's time to act https://rc8d4.app.link/ucUIsOI9vyb
Yours truly
Ms. Monica Rolland
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 28 Mar 2023 14:36:50 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from )
id 1phG35-000NM1-02
for dave@doctor.nl2k.ab.ca;
Tue, 28 Mar 2023 14:36:07 -0600
Resent-From: The Doctor
Resent-Date: Tue, 28 Mar 2023 14:36:06 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-sgaapc01olkn2084.outbound.protection.outlook.com ([40.92.53.84]:52833 helo=APC01-SG2-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96)
(envelope-from )
id 1phCfP-000H5N-0F
for root@nk.ca;
Tue, 28 Mar 2023 10:59:32 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=Ul31w5YvFS+8BOx2otDDCBwcxLGmERAXVNtNavJGwN/Gzibm6Xf6+LOPErHBzOWepprb2YBDq7gHtHlz2a511AsbuInKOZTxxFHSPlmsFPiZdagGrfj/8tVcNfDPToZoWr2kGj4rqKl2Y5+gzTRWEOv0iBmfJZECn/jGBqFgaG7LhXZHhek/msVZoydZRCITnRnhRbueX8Vkd8h7S6QFXpAQR8upCCZoR44Sv9NKRgnkM2reac49nUjU9t5ZIMZBb5l1x11zoPOrlaCGpbTI6ypL0HnESkidDpmSSN4TnHT6RgfaLZcOeQBCvtL2+IW7PX2+D8kq1/6ZtLG8A4/cRw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=tk5s2vyY2SZSGwTwkNhzBSPHxl1Ebe5jKKD0WtUu6g4=;
b=lZxHhdgsucMwD9t8GbxOfebgjYR2iGee4SfZ6SAhjZJK6R+vWI7i+yKOzKdkoka6kQK60zqSnpvuePGBe4LddUbn73JfJKiRRELvGFu9X6A6r0z0Z2kgymxxMUxp7HJJvi5oBvGP7Lyf6PFynZyNPrPX/m1FZxANEQs8U5nWkRa9uJHIotBMaVHqLlX+OxFWSwTzrHURRfMyTRMPHg+xilLaHJZcZAQoG2wok0jZYxjsYBhRJCGFQp04kPN+TLVhM4pSLn6FG3GzpQG8Ec2ATXBsYK5J9ML7KxQUDhL+kB8JgowyNb9QPhrkkCKWKSxQSpPFIYwAR76FhyluALWjKQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=tk5s2vyY2SZSGwTwkNhzBSPHxl1Ebe5jKKD0WtUu6g4=;
b=d7kOxSdw18GclFI1aFjQl/x0q1Qf8RvPwt8Zfn7TbvttuPYUSi95B59JX4E91hEUMAI4VlHswxRzuv12JWNMidimD7L2UQUN2JvLJM6E+I02ziQljrJU77+pgDrKT9eC96xytQyiaJEqoTO+B2o0EoolJqK6rmXFwmEIkN3/rvXjA+BXyEwew0MBTk2Qz7j9wcU4RpaMFP9SvoyE4vawJYSxfZlqkWOYoShlMF5dDboUwYEF1FfmnhaCf+mg0pDEk/ys4wQZ31Js05nB/G2N3Dr1vR64wMwEEhGe7FPa6KJLNHur7yZATfKt2QDds8iiDYk57WXTQfbzZjyivmoAHg==
Received: from TYZPR04MB4288.apcprd04.prod.outlook.com (2603:1096:400:26::6)
by PSAPR04MB4149.apcprd04.prod.outlook.com (2603:1096:301:38::11) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6178.41; Tue, 28 Mar
2023 16:56:03 +0000
Received: from TYZPR04MB4288.apcprd04.prod.outlook.com
([fe80::946b:ed51:102:378f]) by TYZPR04MB4288.apcprd04.prod.outlook.com
([fe80::946b:ed51:102:378f%8]) with mapi id 15.20.6222.033; Tue, 28 Mar 2023
16:56:03 +0000
From: "Anamika singh"
To: "Anamika singh"
Subject: Proposal
Date: Tue, 28 Mar 2023 09:54:37 -0700
Message-ID:
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_003D_01D9615B.83926D30"
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: AdlhkOD/S3xnBtOmTjiim7fPQpIGog==
Content-Language: en-us
X-TMN: [bh1sBRmYZzaUvCXWYulI3YAOf6psRrFX]
X-ClientProxiedBy: BM1P287CA0020.INDP287.PROD.OUTLOOK.COM
(2603:1096:b00:40::23) To TYZPR04MB4288.apcprd04.prod.outlook.com
(2603:1096:400:26::6)
X-Microsoft-Original-Message-ID: <003c01d96196$2ff14530$8fd3cf90$@com>
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: TYZPR04MB4288:EE_|PSAPR04MB4149:EE_
X-MS-Office365-Filtering-Correlation-Id: 4f7672e0-1405-4ba4-507a-08db2fad5070
X-MS-Exchange-SLBlob-MailProps:
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
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
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
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0:
=?us-ascii?Q?62cXn+uyNFrPUo7Jo4O7iCok9bn4pB4haUuZDDonxVyEGQFqKVaWXa/VmiGh?=
=?us-ascii?Q?GRljT8qu/X6OA9d8fdAnhejrNZcld8dEnduUjedsfhSVFn/mHzIO4j4LHjKC?=
=?us-ascii?Q?pGXrwTh1yOoq/Hq3lQB7V2InZxKVpXyTd34fit3ideW/yUGxmth8ZdMyo1W/?=
=?us-ascii?Q?xJtMySoIzy0kxwrjgOeFKJ2p31MVdiG12hlknXhWKp2n7OEAfLQ0QOxvSr+1?=
=?us-ascii?Q?zq4Th52g13zE5F70Kb9dGmSXeAopmd8vG7901Yrqs4fBtsY1j7rLNuVzwg+e?=
=?us-ascii?Q?o3ch3W58I5MRU7Sr8HD2vtidecixrE9ubZEaIwDJHyxGcE5zhvJ+Ku/5PgtR?=
=?us-ascii?Q?ZekSM8zhtaelvyvgQvfSGjyYHRnJsXr9e84ymY63bQok6mwCd4nkmRUnJNOo?=
=?us-ascii?Q?oP9tvP8CBRZ6H6JhaKAuJxeCkvA1A7XLZpzUn9B3vHcytZjKuKFrj28Tnk2W?=
=?us-ascii?Q?d3/x36jkzOLLBblCwABYg9oWDkI2XdLWiHfND3pAEf+UaVo0F6Bg4N8ym5XV?=
=?us-ascii?Q?jSPbCF4msPYrihWnjBabk+KAA+/av0cGO48CnOc/BGZ0uHvqhWs4ANxM2hYk?=
=?us-ascii?Q?l8j7QcvIeSX0TQGABagL26h7xLPiwJPzHxOOV/TKmohBHOdDvDSdeFwTK+gb?=
=?us-ascii?Q?L/s1Z4lJljt4OeqGOSVJoKRbtVp48ANapm55XjdGNsZcNOdaeW5oOQTflG9b?=
=?us-ascii?Q?FcvsrBxFFxvGThEu8hUoGHS5O3Doja0dOsjUG4Oi6Zg/aqBa/FbVCwBJFqGE?=
=?us-ascii?Q?jPvwhOu0ejn/BlQS+4mpzW4Yhi8Kus8DCM4Dny7jL5+TPJXyN+a+qCrywq8J?=
=?us-ascii?Q?f3xOPpa7FlYIJcHPz6ImkrSC+3YyDDw962l4Cyj0zsOfns453FFRK97Goq0x?=
=?us-ascii?Q?5YWlzSWcLcSlPesLCUE3zBszdWRRz6VEZeIeNwcAqEbA8oq7aEd+YvBlLuWq?=
=?us-ascii?Q?FHqt1oQBiHl7cnF3rJXn5Kr30h8jtuZPkWH9pchsWGbQ6XmWOCztx1kmwenz?=
=?us-ascii?Q?hktecdwqbxGCynGeN+IIG6tyKe/NmaqCxtlM8CC6K12dsLhu4S0zs8HIXyXH?=
=?us-ascii?Q?3WZphWvKtmwI7S8VID6himmwNKiFdStK0YLx/3YbmjHu5AFe89a5kU6tBANF?=
=?us-ascii?Q?e78621vtZKI1Nc3hNFqieaCCxrYpYFQAtsOD6oQtvP24OHzowTAtql7+Johd?=
=?us-ascii?Q?A/4kZHsTDusmumN7LnGXtatc/PZgDD31TfMaowDhleLJklwQwVr8RgAc1NMW?=
=?us-ascii?Q?4NqPnCDHdnvw7Y1YEc2J?=
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 4f7672e0-1405-4ba4-507a-08db2fad5070
X-MS-Exchange-CrossTenant-AuthSource: TYZPR04MB4288.apcprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Mar 2023 16:56:03.3993
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PSAPR04MB4149
------=_NextPart_000_003D_01D9615B.83926D30
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Hi,
I found your detail on Google.com and I have looked at your website and
realize your website is great design but your website ranking not good all
search engine Google, AOL, Yahoo, and Bing.
Do you want more targeted visitors on your website?
We can place your website on Google's 1st page. Yahoo, etc.).
May I send you quote? If interested.
Regards,
Anamika singh
------=_NextPart_000_003D_01D9615B.83926D30
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
>
00">
Proposal
=3D"#26282A" face=3D"Cambria">Hi, <=
/span>
=3D"#201F1E" face=3D"Cambria">I found your detail on
g=3D"en-us">
ace=3D"Cambria"> =
G=
b>
olor=3D"#FF0000" face=3D"Cambria">o<=
b>
a">o
s">g
g=3D"en-us">
ace=3D"Cambria">l
lang=3D"en-us">e
pan>
=3D"#201F1E" face=3D"Cambria">.
n>com and I h=
ave looked at your website and realize your website is great design but you=
r website ranking not good all search engine
us">
ambria">
ng=3D"en-us">G
>
#FF0000" face=3D"Cambria">o=
span>o
nt>
ont color=3D"#00B0F0" face=3D"Cambria">g
us">
ambria">l
"en-us">e
n lang=3D"en-us">
=3D"Cambria">,
=3D"en-us"> AOL=
F1E" face=3D"Cambria">,
an lang=3D"en-us"> =
color=3D"#0070C0" face=3D"Cambria">Yahoo,
n-us">=
and
us"> Bing
>
ace=3D"Cambria">.
=3D"en-us">
=3D"#201F1E" face=3D"Cambria">Do you want more targeted visitors on your we=
bsite? =
=3D"#201F1E" face=3D"Cambria">We can place your website on
an lang=3D"en-us">
F1E" face=3D"Cambria"> <=
/span>G
ont><=
font color=3D"#FF0000" face=3D"Cambria">o
-us">
Cambria">o
=3D"en-us">g<=
span lang=3D"en-us">
0B050" face=3D"Cambria">l
an>e
>
"#201F1E" face=3D"Cambria">'s 1st page. Yahoo, etc.).
pan>
=3D"#201F1E" face=3D"Cambria">May I send you quote? If interested.
ont>
=3D"#201F1E" face=3D"Cambria">Regards,
us">
an>Anamika=
singh=
span>
=
------=_NextPart_000_003D_01D9615B.83926D30--
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 28 Mar 2023 14:35:50 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from )
id 1phG2J-000NDC-2q
for dave@doctor.nl2k.ab.ca;
Tue, 28 Mar 2023 14:35:19 -0600
Resent-From: The Doctor
Resent-Date: Tue, 28 Mar 2023 14:35:19 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-bn8nam11rlhn2140.outbound.protection.outlook.com ([40.95.36.140]:6613 helo=NAM11-BN8-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96)
(envelope-from )
id 1phBd6-0004rc-1I
for doctor@nl2k.ab.ca;
Tue, 28 Mar 2023 09:53:08 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=QG2pTDeo4L+Q/6GMTuXJfooKj0Gb+h5dsYGtms0JJHOASmamzHUJU45ggusZRBonOZKGcxxvtjhph33rEG1CCI1WBtUzPV8XQkpG06si54rIBCILa4QVS/b0gupr+usLbbXNTdOhSPOGqEX/HLpBGvueIYzQQEwpBqgCMHi70MXKVJHJp5jq5zB7dFy4vIwiOBjIQitUnOipUp5go29bH5qXTSMD0YVGP5ewG8jzYIq19Qhn94cDNEJIAGUWzWhY56GlcnYXaMtWvypGz0/nuT3P7psX7opvtwm/TuU9Vyy2DTH4hCA1V9amqlw4bYe1yNXOFmXUlCef2IFpmXYduA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=lzpBd0Yk08e2zNv9q53Dux4YO7UZMWHKXeLu63EVRu0=;
b=UB2MidakJthlydEbZTxjG/DVKlvX8MBT90zhzAEzAHSNnfE9pIx8vKi9pF4aIdJ/cjoHKO0yaL84qH27NZuTX6zxO/rymVtXTDNi4A1C6Drr9G8siS7Eva51P1T3vYm5Wk8AhxdpRHpJfk/OscEKcql4hiKnl0wXUBEUczuQz948qqjiDYkXmVEOj2+quGlL76TEM+3khUhsM6Kvwy62HmQIiBDCurf3lKu+1a68h9tK0IDTJwFnII0i8taX/bmBPeRTXbjXX5XWwzOgvNvbQH7scly/RG1Ixh/uee5pY6+XXOQv5g8p24V9tF3464ikAgNjbb/wRM6chV5PtP6ACQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is
8.42.207.80) smtp.rcpttodomain=yam.com.tw smtp.mailfrom=kimo.com.tw;
dmarc=fail (p=reject sp=reject pct=100) action=oreject
header.from=kimo.com.tw; dkim=none (message not signed); arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=wwjwm.onMicrosoft.com;
s=selector2-wwjwm-onMicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=lzpBd0Yk08e2zNv9q53Dux4YO7UZMWHKXeLu63EVRu0=;
b=j9b947ul7tGIb/DvMptK9NeIBmsOSJDqJgAiK5764bu6yQfnk2+IVjPOOrVp9hzPWQz8hIsZVmo71ljA2E6L8z6BmWcOuJs8kDAW7k1PyMqMnxbFlpMdST9I1+cQUBb8GrH6Ez+9SPa9wXZyrTF7am5gtkH8wlfU2CvcoaU8AeU=
Received: from BN0PR04CA0130.namprd04.prod.outlook.com (2603:10b6:408:ed::15)
by BY3PR01MB6692.prod.exchangelabs.com (2603:10b6:a03:36a::10) with Microsoft
SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.6254.18; Tue, 28 Mar 2023 15:50:53 +0000
Received: from BN8NAM12FT100.eop-nam12.prod.protection.outlook.com
(2603:10b6:408:ed:cafe::be) by BN0PR04CA0130.outlook.office365.com
(2603:10b6:408:ed::15) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6178.43 via Frontend
Transport; Tue, 28 Mar 2023 15:50:52 +0000
X-MS-Exchange-Authentication-Results: spf=none (sender IP is 8.42.207.80)
smtp.mailfrom=kimo.com.tw; dkim=none (message not signed)
header.d=none;dmarc=fail action=oreject header.from=kimo.com.tw;
Received-SPF: None (protection.outlook.com: kimo.com.tw does not designate
permitted sender hosts)
Received: from mail1.jas.com (8.42.207.80) by
BN8NAM12FT100.mail.protection.outlook.com (10.13.183.34) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.6254.9 via Frontend Transport; Tue, 28 Mar 2023 15:50:52 +0000
Received: from USBCDPSMBX01.jas1.ds.Jas.com (172.29.10.51) by
USBCDPSMBX02.jas1.ds.Jas.com (172.29.10.52) with Microsoft SMTP Server
(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.2.1118.26; Tue, 28 Mar 2023 11:50:21 -0400
Received: from User (147.78.103.204) by USBCDPSMBX01.jas1.ds.Jas.com
(172.29.10.51) with Microsoft SMTP Server id 15.2.1118.26 via Frontend
Transport; Tue, 28 Mar 2023 11:50:14 -0400
Reply-To:
From: "Mr. Williams Townsend"
Subject: I am Williams Townsend
Date: Tue, 28 Mar 2023 08:50:21 -0700
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <4b96b8b7-3b10-4e4b-a3f1-eb67bdc7f6b7@USBCDPSMBX01.jas1.ds.Jas.com>
To: Undisclosed recipients:;
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: BN8NAM12FT100:EE_|BY3PR01MB6692:EE_
X-MS-Office365-Filtering-Correlation-Id: 823948b9-c871-4a7b-2880-08db2fa435b4
X-MS-Exchange-SenderADCheck: 2
X-MS-Exchange-AntiSpam-Relay: 1
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
=?windows-1251?Q?BXeAO5wnRJWECrZ3L2+q5qajV/ZgyAcTXOYBCQjLWUR/pMcBWar3BC6l?=
=?windows-1251?Q?4Lgy5d7J52hTp2PPg38sCa5hJ+1lxp9ovK9XhlwXGWW3Nxz+u7jqwP+D?=
=?windows-1251?Q?wGzWbiW8YwLFgXC4kB0/vO9ihxsFYZyDm19cZ51+e2Kq9kFmTD0JxI0V?=
=?windows-1251?Q?mMzphWEIPvLT4oUssM22p2keSMACypFX+ZKWg5NzYD9BlX9NGtQzeaL8?=
=?windows-1251?Q?WAH3US4HcZJWPl9fWb+WfYdedVWXT2dNcMHD1o7ot8PpOP3z7mwt72z8?=
=?windows-1251?Q?Pdjg7T6GhH4lUaO05+FPYojoZD7uFBxC+71SyunQI4jd7ejVcn0s6ZYa?=
=?windows-1251?Q?g5HUI2exM0L/gUyDuoSRzQqwVgUCyeUlNN0Gx1N3MdHLGoZo2//ZwHhs?=
=?windows-1251?Q?1uWE92BlL2fvxc3qZiDpvAtAuD2vkWk+u+kZNMKfpjU0T9FrmaLgKkT/?=
=?windows-1251?Q?iQQmu5L7x9rjJJZb6Hntfz1RguVid/TSuyaPKaS0swNM3ylwgZA3Wi+a?=
=?windows-1251?Q?0WbMyRsQWvc6WL+fcE6VqEth4zlXQIKKVdG1zumT9GvPWrUuRWxLdgov?=
=?windows-1251?Q?yqqjFIrvkbXREfwR6OW754tdX5s1fOwRP7+9hohB59gwUj3NnvXZWPtA?=
=?windows-1251?Q?eJQiFxlP2Gb2xcA18DMrwO4x6RBqWL5pvDwl7c0o/C1cAHvuedo5PeDW?=
=?windows-1251?Q?Qtp62zrbzcsQ5WcmEe1Zr+LTDp83vEfjhKH+DonxZtmoMccnIrWjgO3v?=
=?windows-1251?Q?eAgeZAUc5QYJDA/M+CCiRhlqtb9BIVsp5SJ1tGie4p8PmNMbbKAOiEym?=
=?windows-1251?Q?XkM+n/8th8KED2xBs7nnWZhbBNlspx3sk7i+3nKGZRdFkZBny3X1Y8gi?=
=?windows-1251?Q?dMKpcoWZ0ozmGxClKLJNfj0j/Keq9YMApy8UBjw+pcrZTZAp8C/Ggm9L?=
=?windows-1251?Q?iMJkWH9dwrsTF8vyDqckd/5EsXgeSuScAgonCO6zjAvVLB6/XsvGKYKR?=
=?windows-1251?Q?FDnQ7h5l7Pb0278PViOyLufkeAkmFPYixgirbmfBFGqeP68ycT1lgorM?=
=?windows-1251?Q?3yE6NGU3IGJGGZEp+ZOeRSfdIQZ3L/7kWb/Z6V8iRRjAl8N2PwlyDSTt?=
=?windows-1251?Q?wHzXCIBKlvMV6uF9ZZmBhJyBQ8iHlM3kpgI/w6YoKVy414W5i4nm37Hw?=
=?windows-1251?Q?m7BYQOZcV5RC9aMNNs001Hxf9mUmPugK?=
X-Forefront-Antispam-Report:
CIP:8.42.207.80;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail1.jas.com;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230028)(4636009)(136003)(376002)(39860400002)(346002)(396003)(109986019)(451199021)(46966006)(40470700004)(8936002)(7416002)(7366002)(7406005)(356005)(70586007)(81166007)(70206006)(8676002)(5660300002)(82740400003)(41300700001)(86362001)(31696002)(82310400005)(40480700001)(2906002)(40460700003)(498600001)(2860700004)(26005)(3480700007)(9686003)(6666004)(35950700001)(336012)(31686004)(47076005)(956004)(66899021)(83380400001)(316002)(2700400008);DIR:OUT;SFP:1023;
X-OriginatorOrg: WWJWM.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Mar 2023 15:50:52.4573
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 823948b9-c871-4a7b-2880-08db2fa435b4
X-MS-Exchange-CrossTenant-Id: fa3414ca-197f-48b7-8ff3-892f8bdd8e93
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=fa3414ca-197f-48b7-8ff3-892f8bdd8e93;Ip=[8.42.207.80];Helo=[mail1.jas.com]
X-MS-Exchange-CrossTenant-AuthSource:
BN8NAM12FT100.eop-nam12.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY3PR01MB6692
X-Spam_score: 22.8
X-Spam_score_int: 228
X-Spam_bar: ++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Senior Officer at Los Angeles International Airport (CA) California,
USA Hello Good Friend First and foremost, I am sorry for reaching out to
you with this medium.
Content analysis details: (22.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)
[147.78.103.204 listed in ix.dnsbl.manitu.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[40.95.36.140 listed in list.dnswl.org]
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[147.78.103.204 listed in zen.spamhaus.org]
2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[147.78.103.204 listed in zen.spamhaus.org]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see ]
0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=NAM11-BN8-obe.outbound.protection.outlook.com;ip=40.95.36.140;r=doctor.nl2k.ab.ca]
0.0 AXB_X_FF_SEZ_S Forefront sez this is spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[williamstoo777(at)gmail.com]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 CTE_8BIT_MISMATCH Header says 7bits but body disagrees
0.0 T_HK_NAME_MR_MRS No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 HK_NAME_MR_MRS No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.6 FSL_NEW_HELO_USER Spam's using Helo and User
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.3 PDS_HELO_SPF_FAIL High profile HELO that fails SPF
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} I am Williams Townsend
Senior Officer at Los Angeles International Airport
(CA) California, USA
Hello Good Friend
First and foremost, I am sorry for reaching out to you with this medium.
However, I am Willam Townsend by name. A senior officer at Los Angeles
International Airport (CA) California. USA
I am contacting you about an abandoned diplomatic consignment box the
x-ray scan report revealed an undisclosed sum of money in a metal
trunk box approximately 12.5 million dollars. and the box indicates
your contact email address the consignment was abandoned because the
Contents of the consignment were not properly declared by the
consignee as “MONEY” rather it was declared as a personal effect to
avoid interrogation. meanwhile, The Diplomat was in transit to your
location 3 weeks before the coronavirus pandemic crisis that shook the
world started. The Diplomat fails to pay for the United States
Non-Inspection and airport clearance fee to the US Customs border and
protection he abandoned the consignment and left without notifying the
authority anything of his arrival for declaration of clearance. To
confirm you as the authentic beneficiary, do send me your full name,
your home address, your mobile
Furthermore, I have taken it upon myself to contact you personally
about this abandoned box so that we can transact this as a deal and
share the total money 70% for you and 30% for me. My primary purpose
for contacting you The U.S. Customs Border and Protection is on
clearance for the year 2022 for some abandoned beneficiaries'
consignments to be listed among the list of consignment boxes that
will be confiscated and get transferred to the US Treasury storage
facility for the year 2023.
However, I want both of us to transact this as a deal all I want is
your trust as the arrangement for the box to be delivered to you which
can be concluded within 1-2 working days after confirmation is made
and upon your acceptance and willingness to co-operate.
I will appreciate it if we can keep this deal confidential. Please get
back to me via this email for further directives: You can not call me
on my telephone number, for now, to avoid the authorities raising
their eyebrows at me. Please send your response to my private email.
Thank you.
Mr. Williams Townsend
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 28 Mar 2023 08:06:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from )
id 1ph9xW-000JBE-0r
for dave@doctor.nl2k.ab.ca;
Tue, 28 Mar 2023 08:05:58 -0600
Resent-From: The Doctor
Resent-Date: Tue, 28 Mar 2023 08:05:58 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from ec2-54-229-85-128.eu-west-1.compute.amazonaws.com ([54.229.85.128]:53413 helo=VPC-GT2.GT.CLOUD)
by doctor.nl2k.ab.ca with esmtp (Exim 4.96)
(envelope-from )
id 1ph9rj-000I4A-2t;
Tue, 28 Mar 2023 08:00:02 -0600
Received: from [85.217.144.227] ([85.217.144.227]) by VPC-GT2.GT.CLOUD with Microsoft SMTPSVC(8.5.9600.16384);
Tue, 28 Mar 2023 13:57:49 +0000
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Re: Greetings
To: Recipients
From: "Engr. Gordon Hirschy"
Date: Tue, 28 Mar 2023 06:57:48 -0700
Reply-To: hirschy.e@yahoo.com
Message-ID:
X-OriginalArrivalTime: 28 Mar 2023 13:57:49.0249 (UTC) FILETIME=[48182B10:01D9617D]
X-Spam_score: 24.9
X-Spam_score_int: 249
X-Spam_bar: ++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings, My name is Engr. Gordon Hirschy, I am a citizen
of U.S.A, a business man specialized in Real Estate; but now I am critically
sick with esophageal cancer which has damaged almost all the cells in my
bo [...]
Content analysis details: (24.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[54.229.85.128 listed in bl.score.senderscore.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[54.229.85.128 listed in bl.score.senderscore.com]
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[85.217.144.227 listed in zen.spamhaus.org]
2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[85.217.144.227 listed in zen.spamhaus.org]
1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[54.229.85.128 listed in bb.barracudacentral.org]
1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[engr.gordon.hirschy(at)yandex.com]
0.9 URG_BIZ BODY: Contains urgent matter
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.4 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 LOTS_OF_MONEY Huge... sums of money
1.5 AC_FROM_MANY_DOTS Multiple periods in From user name
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.0 TVD_PH_BODY_META No description available.
0.0 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS
1.0 XFER_LOTSA_MONEY Transfer a lot of money
0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps
0.0 T_MONEY_PERCENT X% of a lot of money for you
0.0 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Re: Greetings
Greetings,
My name is Engr. Gordon Hirschy, I am a citizen of U.S.A, a business
man specialized in Real Estate; but now I am critically sick with
esophageal cancer which has damaged almost all the cells in my body
system.
>From all medical indications my condition has really deteriorated and
it=E2=80=99s pretty obvious that I may not live for more than six months
because of the rapid growth stage and the excruciating pain that
accrues to it.
My wife was killed during the Gulf War, and our long years of marriage
were not blessed with children. My wife was very wealthy, after her
death I inherited all her business and funds. My doctor has diagnosed
and told me privately that I may not last for more than six months,
based on this I have taken the decision to share part of my funds and
wealth in contribution to the development of the Church and society
with major focus on the poor and needy.
I am willing to donate the sum of $10,000,000USD to you for the work
in developing the Church and to help the needy, and less privileged
among your congregations/society.
As soon as the fund is transferred to your own bank account, you shall
take 30% of the total amount transferred to your account as my
representative and the manager of the fund and use 70% for the
assignment.
In my next message, I will send you my identification and picture for
your confidence.
Please reply immediately with your full data if you agree my proposal
so that we can arrange for the transfer of the fund to your own bank
account before anything happens to me, because I will undergo surgery
by next week, and I do not know what will be the result of the surgery
as doctor has told me already that I may not survive.
May the grace and blessings of God be and remain with you.
I am waiting for your urgent response.
Yours Sincerely,
Engr. Gordon Hirschy
Reply to my private email: hirschy.e@yahoo.com
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 28 Mar 2023 08:05:48 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from )
id 1ph9wn-000J5F-2L
for dave@doctor.nl2k.ab.ca;
Tue, 28 Mar 2023 08:05:13 -0600
Resent-From: The Doctor
Resent-Date: Tue, 28 Mar 2023 08:05:13 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs1-f42.google.com ([209.85.217.42]:34472)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from )
id 1ph8Ko-000Cnf-0e
for doctor@doctor.nl2k.ab.ca;
Tue, 28 Mar 2023 06:22:00 -0600
Received: by mail-vs1-f42.google.com with SMTP id h27so10217155vsa.1
for ; Tue, 28 Mar 2023 05:19:55 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1680005989;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:from:to:cc:subject:date:message-id:reply-to;
bh=MZGkP1BUlOY2PzisEl9Hu8MJQ+xJG4yujvwatFxenWo=;
b=ETQSvmiA2g0QpnCHXRo0N2s6q66TREcPk6btrTdjTCkU3IPuZ/XE9c7kx94MVkGt7r
dZ850o2+xwbw7af3nbxTLdJotOhhx8w4W+QUQD5llydQBEYfe5IzaKwsM17TvNmcLhUV
7FzhGoY53dvqnZP/8EnoupLrzVtJ9LblFsvaekI6e1rZGAWk1PXBsM/Qa/ptAvN8Z/Fk
4VY4QuZ/+em/7lxM/B0G/vm6HMCTgTOSBd/JjWguyi3pGxZ7rllBPHZDhU6y+8CafIs9
8D8550ywlA8sfKVvY7U1CMZfeVEf2RfN770WmruIabzHYqBQfShlmURkm3FnyXJG8wiP
9i/Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1680005989;
h=content-transfer-encoding:to:subject:message-id:date:from:reply-to
:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=MZGkP1BUlOY2PzisEl9Hu8MJQ+xJG4yujvwatFxenWo=;
b=kmV5cBZQAWmuwozdtY64fbj5+q/sU2P/AfuLC6Dhojqvfd3d/PByToUtRHyStN5rD3
XoBxk/bmQtY8SznLCXvN173ONa1YYJYy1ZM5HcNW/6C8iIJLUNoI50rXZu0rGru1UWsr
f8g2/YcaUwTplKIzHArcpmAdBaLtMdaxh/lRTQTOmvb/5xnDasESURmx6IqsArgRRjK9
PbB5K7NXYHBGR4RTENAXQ6VBrzcCbugczRbkJv55O2cTIr11PdB75VYcJncys5yPEDvW
ywhY3Qg0x1bcOYW8kLOMqZZYW8UOhP+IXwPtpK57agOuB1Qqcj7F4hcS0OEH9TWn9wJc
qYUw==
X-Gm-Message-State: AAQBX9fRwB1fcwkbT5a+2Vuh5KMFKHCnNaVK/PdFn7xr/fHTl/1bQke9
kdniItnlaIu1rfB406EmdlZLBjAF1ePKHJ2hrTU=
X-Google-Smtp-Source: AKy350b49PAqStUgadaFORs+5LTeL3eLdXseTES206gdphlhn312NiM+nvurXR9xWnFD8MPxLhi1lJ6U+IJdFIG04q8=
X-Received: by 2002:a67:d484:0:b0:425:87ab:c386 with SMTP id
g4-20020a67d484000000b0042587abc386mr8584450vsj.3.1680005989029; Tue, 28 Mar
2023 05:19:49 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a59:d7ab:0:b0:3b2:6a8e:fdfc with HTTP; Tue, 28 Mar 2023
05:19:48 -0700 (PDT)
Reply-To: mr_a.m_70@aol.com
From: Issa Isman
Date: Tue, 28 Mar 2023 05:19:48 -0700
Message-ID:
Subject: Good Day
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 13.8
X-Spam_score_int: 138
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, How are you doing Today, My name is Mr.ssa Isman,
and I am the Bill and Exchange Assistant Manager BOA Bank of Afrlca. I have
a business deal worth ( US$18.3 Million Dollars )to execute with you, it'
[...]
Content analysis details: (13.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[info.bfinfo14(at)gmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[mr_a.m_70(at)aol.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[info.bfinfo14(at)gmail.com]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.217.42 listed in list.dnswl.org]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.217.42 listed in wl.mailspike.net]
Subject: {SPAM?} Good Day
Dear Friend,
=C2=A0 How are you doing Today, My name is Mr.ssa Isman, and I am the Bill
and Exchange Assistant Manager BOA Bank of Afrlca. I have a business
deal worth ( US$18.3 Million Dollars )to execute with you, it's
legitimate' legal and your personal Identity will not be compromised,
Will I have your support to achieve this great opportunity
Yours Sincerely,
Mr.Issa Isman
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 28 Mar 2023 08:04:48 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from )
id 1ph9vt-000IyS-2w
for dave@doctor.nl2k.ab.ca;
Tue, 28 Mar 2023 08:04:17 -0600
Resent-From: The Doctor
Resent-Date: Tue, 28 Mar 2023 08:04:17 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f193.google.com ([209.85.210.193]:41270)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from )
id 1ph7oa-000ABb-0h
for sales@nk.ca;
Tue, 28 Mar 2023 05:48:48 -0600
Received: by mail-pf1-f193.google.com with SMTP id d2e1a72fcca58-62810466cccso590526b3a.1
for ; Tue, 28 Mar 2023 04:46:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=redesign-asia.20210112.gappssmtp.com; s=20210112; t=1680003991;
h=content-language:thread-index:mime-version:message-id:date:subject
:to:from:reply-to:from:to:cc:subject:date:message-id:reply-to;
bh=b42kp0440q37+KKz3HTBFyUBAZcN1pGvrrSCBBvwaNA=;
b=yZrvO2z3Rix5CCV71fiycc/EI/Pvz/8aP5PX9R3jA/LxYkUEXtHjrLLNmtUe1FMmAK
N8WpgfOxSkFDI8m3zS5lM3+d55v8i/ohGNqKb2t3UxL/6V2SzOmdR3Krqzatn61HJAzh
ba0tIOpDsRhJAZ7uNkZ92sywDNJa5ts0pezNLIyqydIBl43J5F4/Z36Bpi/DujL82tOb
OLst2knmS2F/NxxwczdPgbYsh/8/aBLSoVodj27/bFfQ6hssqYdExCC+C2IZBI7/HtBy
nM3hpRymLIMh9SxkpEhzbz6X4/s9+9JvzKQG/AVuJ9ViTjpgIUjjZUj9GODdQHDd6sKn
+UUA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1680003991;
h=content-language:thread-index:mime-version:message-id:date:subject
:to:from:reply-to:x-gm-message-state:from:to:cc:subject:date
:message-id:reply-to;
bh=b42kp0440q37+KKz3HTBFyUBAZcN1pGvrrSCBBvwaNA=;
b=i4x/ufEuQ6vkYpd++yz0/L0KPZMkLp5PLmnA7mCF5rKXqKqXKeD6fb1cmUe5WqsdEZ
JZZ6gVHYrg3oNTh/xVF6G6Lnp/hx+iqCkuT6zkcc0beYDo2SJxln8Hjm9VEx4qm2RRqL
NbnQeuu3p9C8eWBdahMUBBL9zOcU5jCn5+/NQTQQNf4kQCWKFtBQ0yvS0pBXehoYO9HJ
yIWk7f4E6d/ypseJYFVdJYYOqPoSuxqRMYrCnUPNtE1oHbIKz5VGQdRIK2qFXGWM7W2K
q62P1G+kkM/OhUtij8ffVdGoN1YyUkU/MBsyxsrKqydNjDSmt+l1xcobLYRbb6uiBXPR
bv/g==
X-Gm-Message-State: AAQBX9ea11raEj+SE/bFQ/GNPKZdgqGcXjTJLNitUKNxWMNBiPpSEay4
mrVdMQkdtFo+qAosA8ZQMD7v9bD5wLUeg5U1MjwjCw==
X-Google-Smtp-Source: AKy350Zm6KlS0945vulXcrSPYrQj+SKSczQQh8GcB/kf/lEnjo10eas7ccsagKjQxw8cjZoQI05kpQ==
X-Received: by 2002:a05:6a00:1894:b0:626:62f:38d8 with SMTP id x20-20020a056a00189400b00626062f38d8mr13046163pfh.3.1680003991355;
Tue, 28 Mar 2023 04:46:31 -0700 (PDT)
Received: from om ([122.161.75.185])
by smtp.gmail.com with ESMTPSA id l9-20020a62be09000000b0062a54ce6b2bsm9868777pff.108.2023.03.28.04.46.29
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Tue, 28 Mar 2023 04:46:30 -0700 (PDT)
Reply-To:
From: "Rafael"
To:
Subject: App's requirement
Date: Tue, 28 Mar 2023 17:15:09 +0530
Message-ID: <78c301d9616a$ef16d960$cd448c20$@asia>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_78C4_01D96199.08CF1560"
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: AdlhMTWbiYGlLUyETsuwxlT0lLAd4A==
Content-Language: en-us
This is a multi-part message in MIME format.
------=_NextPart_000_78C4_01D96199.08CF1560
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
I hope you are good..!
I am a professional Web Design & Mobile App, Developer, with 7 years of
experience.
I can send you our Pricelist, past Work, Portfolio & Details. If interested?
If you are interested these services so give me your contact number or drop
me a Phone number/email/Skype ID.
So that we can discuss the possible synergies between us.
Let me know what you think.
Kind Regards, (India)
Rafael
------=_NextPart_000_78C4_01D96199.08CF1560
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">
(filtered medium)">
class=3DMsoNormal =
style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>I hope you =
are good..!
style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>I am a =
professional Web Design & Mobile App, Developer, with 7 years of =
experience.
style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>I can send =
you our Pricelist, past Work, Portfolio & Details. If =
interested?
style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>If you are =
interested these services so give me your contact number or drop me a =
Phone number/email/Skype ID.
style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>So that we =
can discuss the possible synergies between us.
style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Let me know =
what you think.
style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Kind =
Regards, (India)
class=3DMsoNormal>
Rafael
------=_NextPart_000_78C4_01D96199.08CF1560--
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 28 Mar 2023 08:02:48 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from )
id 1ph9tg-000IZl-1I
for dave@doctor.nl2k.ab.ca;
Tue, 28 Mar 2023 08:02:00 -0600
Resent-From: The Doctor
Resent-Date: Tue, 28 Mar 2023 08:02:00 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-dm6nam04rlhn2175.outbound.protection.outlook.com ([40.95.46.175]:10956 helo=NAM04-DM6-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96)
(envelope-from )
id 1ph3pY-000KlK-2Q
for doctor@nl2k.ab.ca;
Tue, 28 Mar 2023 01:33:25 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=H61F6RfkjmCE4erdlDHTvuFsWlk2ziYgMU5JSdiOkosPMUzv9ZfKpQlyQt3P0MH7vq7bJ7MTg0ql1eIiLXFOvJ8GnoqVS/PXMeZBt62lZHI4TnEoXUTQ9AhAV3awyj6NmyAvNz3y+ceFkaBlMeqgdq3Af/7aMFR5hD6km6hw04s3TIbAsqQ8BSlZ3VoNO1cd7qDd0rnFhP3EKLK7ImdqY9zCG3xjmGq+lNvw6yiYMZlodIue0doby2Wo6kRf8OZNvv0sJM+EYTT3fZzTDMbolR75cVhMjSAir2/sRFJqd9sWx9A7erlfmvaEAU3oPE1BH5Z8gkQffTox0TRoULMGbw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=f4G6aAVpszwHzFpgYTV9KsgCGsA0Vk6QFaE3bzLst2w=;
b=n2q8oi7XgycLAqiODDo7k78sKIKZ8XHWCyttc8l4vr9E7N+tCTcaytSEtsgTJ9Ux6rFX+WSMBRrYiG5PIKDmj9ZcZLOx/Y11FFAK1SuENBu8ZETX+M1IEBKtpjHW79Czsj+BTTE33mQrwMCOLxLOQ4tX4zHA299H5D9RRS8Px27AWEUZFFV9pLEouJ9y317lwmxtTP9ZzCsKUxsbI7u71zxoF/F62GFIdVAGQ2okmCCQZrDsHo10/dLiYqWkwuG3p1VitjAHrQLLfa41xK0gTyHdXmXWCsg5QCuYC432zgUnGU6RAuCLWssvZkpTyMg04dYYGDw2diXjA2Gu9jGK7Q==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is
8.42.207.81) smtp.rcpttodomain=hargray.com smtp.mailfrom=mail.sirius.tel;
dmarc=fail (p=none sp=none pct=100) action=none header.from=mail.sirius.tel;
dkim=none (message not signed); arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=wwjwm.onMicrosoft.com;
s=selector2-wwjwm-onMicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=f4G6aAVpszwHzFpgYTV9KsgCGsA0Vk6QFaE3bzLst2w=;
b=TTn61s64ITJzbd82toyN0dwy+Ey6c4JO30cTaV7jTbA5KhVK4NqtZiWS0dlertVV67B5pzaEDxyHubNUdWm/5wVeAx/3P3sJyYiI+qrHRSCZde2kUcTS+U9rW3syq4hQe5eT2pTd3rGzB/gC7qczuVkWlPuWG7fjoED+mxYd2Uw=
Received: from BN9PR03CA0581.namprd03.prod.outlook.com (2603:10b6:408:10d::16)
by MN2PR01MB5581.prod.exchangelabs.com (2603:10b6:208:11d::27) with Microsoft
SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.6254.16; Tue, 28 Mar 2023 07:31:13 +0000
Received: from BN8NAM12FT057.eop-nam12.prod.protection.outlook.com
(2603:10b6:408:10d:cafe::2d) by BN9PR03CA0581.outlook.office365.com
(2603:10b6:408:10d::16) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6178.43 via Frontend
Transport; Tue, 28 Mar 2023 07:31:13 +0000
X-MS-Exchange-Authentication-Results: spf=none (sender IP is 8.42.207.81)
smtp.mailfrom=mail.sirius.tel; dkim=none (message not signed)
header.d=none;dmarc=fail action=none header.from=mail.sirius.tel;
Received-SPF: None (protection.outlook.com: mail.sirius.tel does not designate
permitted sender hosts)
Received: from mail1.jas.com (8.42.207.81) by
BN8NAM12FT057.mail.protection.outlook.com (10.13.182.192) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.6254.9 via Frontend Transport; Tue, 28 Mar 2023 07:31:13 +0000
Received: from USBCDPSMBX02.jas1.ds.Jas.com (172.29.10.52) by
USBCDPSMBX01.jas1.ds.Jas.com (172.29.10.51) with Microsoft SMTP Server
(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.2.1118.26; Tue, 28 Mar 2023 03:30:55 -0400
Received: from User (93.157.59.3) by USBCDPSMBX02.jas1.ds.Jas.com
(172.29.10.52) with Microsoft SMTP Server id 15.2.1118.26 via Frontend
Transport; Tue, 28 Mar 2023 03:30:43 -0400
Reply-To: ,
From: Maureen SHORELIN
Subject: GOD'S WORK
Date: Tue, 28 Mar 2023 00:30:55 -0700
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID:
To: Undisclosed recipients:;
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: BN8NAM12FT057:EE_|MN2PR01MB5581:EE_
X-MS-Office365-Filtering-Correlation-Id: 1f16951d-a74c-40ed-2b77-08db2f5e68ba
X-MS-Exchange-SenderADCheck: 2
X-MS-Exchange-AntiSpam-Relay: 1
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
=?windows-1251?Q?VcREznCpAx5RS2BkzqT+Q+M+YQwjEHoZSZqifgD/kmvMHSYASAG1p18r?=
=?windows-1251?Q?PCOVz84UCkGpeIhy6A4qdHgIvTDVx6l7TiDSQVEjszQ8soBwRD1BOMxj?=
=?windows-1251?Q?7Qpr0I5v1bJMe3VAsiATbvIyS2fTfFh+lC2NdcUT3VJHFf67Ip51rizU?=
=?windows-1251?Q?ZYrQXwVolYLB2u1rvWA+XyFUPTvr8NVpEwvH6PqG2fSg2iDqRNA9ia+p?=
=?windows-1251?Q?hNWhjr3GOzfkaZ76yCB5O9Qf8/DQtXxx/t7p3LD9swKDNY5pZAhGNwGh?=
=?windows-1251?Q?54GJiUg14PAtougBIaITEY+C+ad1NQL0w3jbn8lE5DH8KxPWoItyx1vo?=
=?windows-1251?Q?kCdFgpxpZjU1cOQdBY8H2/YVKQub8MEKYlhhq3e7BdZx/ykANaYG7lr3?=
=?windows-1251?Q?ICRWsO2Li4SfyVkP4ef1Oww68DU2VzE9unPByCgzQZuIuYJtuA16rIoh?=
=?windows-1251?Q?+oblbdw1MJIJOcHIQu0Ge0TSY2vhCgtSvaTDtXbTKhlN07VP5UKBGDjP?=
=?windows-1251?Q?WSJW8IOHHbPi1Gl7rwqMbWWYvErZBGThIlreZEDGE9w3hWtf1+zpTV6v?=
=?windows-1251?Q?IurGeG//l/oRCCAbpdm2sJ64GhO8U9RaggruiR2enU/0KUlWw06GHESS?=
=?windows-1251?Q?ox50rotTZYv9MIH6C+SdrTFPJ5JfghsxltekVN0rrHB+s7sNYLQKlIjP?=
=?windows-1251?Q?9KXss4EV6qBJ/M7eI480C4N1Q7Lg6YaJOcpSnqs2saDQ6dIpzIPUGS2D?=
=?windows-1251?Q?jU9IHovyI6n7Az3k+gYbKF/aZ/Q2FJXmbVhift96G90PKoyF5dxl4iJO?=
=?windows-1251?Q?/yOTVCewdploRDVcOJzYehUqMIifyzmWWYNFotH4BwGjv298JP9vKeHz?=
=?windows-1251?Q?DdBWmLqhz8LuBXFQ1P8MuEKnUd/DNnxTvOvID3TAvAr/49tCBZ0KkuDz?=
=?windows-1251?Q?OWZBeKj1XWIJhT/4OvdB9VcjVP7Fc9aA8v8zb9LxVjYjowr9stRD6Jan?=
=?windows-1251?Q?L0T5tiI6Cl6ECb7eMCOZUBb7lDTkLXfSP4SLBe+iupj4AvXkwXMBSmPG?=
=?windows-1251?Q?YNujZHlmEeT2KJK3hq9sq65xIUY+MFxI7xE6VgxTJtFrJ0ogCqruUrZd?=
=?windows-1251?Q?D/CAmndeXE7jnDMSafrnERuvJ+LW4Dg7NUVu7IOhwl/pfB42+3b/ygpG?=
=?windows-1251?Q?u82QJarS3N+GhU/Qw74h8Os4q5T5BSMi?=
X-Forefront-Antispam-Report:
CIP:8.42.207.81;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail1.jas.com;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230028)(4636009)(376002)(346002)(39860400002)(136003)(396003)(451199021)(109986019)(40470700004)(66899021)(32650700002)(40480700001)(70586007)(8676002)(70206006)(40460700003)(316002)(2860700004)(498600001)(3480700007)(2906002)(9686003)(26005)(35950700001)(7366002)(7416002)(7406005)(83380400001)(956004)(86362001)(336012)(31686004)(31696002)(82310400005)(81166007)(6666004)(5660300002)(41300700001)(356005)(82740400003)(8936002)(2700400008);DIR:OUT;SFP:1023;
X-OriginatorOrg: WWJWM.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Mar 2023 07:31:13.2894
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 1f16951d-a74c-40ed-2b77-08db2f5e68ba
X-MS-Exchange-CrossTenant-Id: fa3414ca-197f-48b7-8ff3-892f8bdd8e93
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=fa3414ca-197f-48b7-8ff3-892f8bdd8e93;Ip=[8.42.207.81];Helo=[mail1.jas.com]
X-MS-Exchange-CrossTenant-AuthSource:
BN8NAM12FT057.eop-nam12.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR01MB5581
X-Spam_score: 15.7
X-Spam_score_int: 157
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Chosen One, The time has come for Christians to worship
God in spirit and in truth according to the book of John chapter 4:vs23-24.But
the hour cometh and now is when the true worshipers shall worship the Father
[...]
Content analysis details: (15.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[93.157.59.3 listed in zen.spamhaus.org]
0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=NAM04-DM6-obe.outbound.protection.outlook.com;ip=40.95.46.175;r=doctor.nl2k.ab.ca]
0.0 AXB_X_FF_SEZ_S Forefront sez this is spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 CTE_8BIT_MISMATCH Header says 7bits but body disagrees
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.3 PDS_HELO_SPF_FAIL High profile HELO that fails SPF
0.0 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS
0.6 FSL_NEW_HELO_USER Spam's using Helo and User
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} GOD'S WORK
Dear Chosen One,
The time has come for Christians to worship God in spirit and in truth
according to the book of John chapter 4:vs23-24.But the hour cometh
and now is when the true worshipers shall worship the Father in spirit
and in truth: for the Father seeketh such to worship him . God is a
spirit,and they that worship him must worship him in spirit and in
truth. Based on this scripture, it became obvious that I should do the
right thing if I must enter into the kingdom of God.I am writing this
mail to you with serious tears in my eyes and great sorrow in my heart,
I decided to contact you due to the urgency of my situation.
Would you devote your time and be totally committed and devoted to run
multi-million Dollars humanitarian charity project sponsored totally
by me; with an incentive/compensation accrual to you for your time and
effort and at no cost to you.
If Lead by God, get back to me to enable us to discuss in a more
clarifying manner to the best of your understanding. I must say that
I'm very uncomfortable sending this message to you without knowing
truly if you would misconstrue the importance and decide to go public.
In this regard, I will not hold back to say that the essence of this
message is strictly for Charity. May God bless you as you make up your
mind to work for God.
hoping to hear from you soon. Send Text to +44-7418368449
Not all of us can do great things. But we can do small things with great love.” – Mother Teresa
Thanks and Remain blessed in the Lord.
l remain your sister in Christ.
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 27 Mar 2023 17:12:43 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from )
id 1pgw0U-00082w-0E
for dave@doctor.nl2k.ab.ca;
Mon, 27 Mar 2023 17:12:06 -0600
Resent-From: The Doctor
Resent-Date: Mon, 27 Mar 2023 17:12:06 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from 211-75-101-153.hinet-ip.hinet.net ([211.75.101.153]:44344 helo=mail.mariavon.com.tw)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.96)
(envelope-from )
id 1pguA0-0002rl-1P
for doctor@doctor.nl2k.ab.ca;
Mon, 27 Mar 2023 15:13:52 -0600
Authenticated-By:
X-SpamFilter-By: ArmorX SpamTrap 5.77 with qID 32RL9PB90014244, This message is accepted by code: ctloc85258
Received: from [95.214.24.48] ([10.0.0.1])
by mail.mariavon.com.tw (8.15.2/2.80/5.90) with ESMTP id 32RL9PB90014244;
Tue, 28 Mar 2023 05:09:26 +0800
Message-Id: <202303272109.32RL9PB90014244@mail.mariavon.com.tw>
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Congratulations On Your New Porshe
To: Recipients
From: "Mr. Oliver Blume"
Date: Mon, 27 Mar 2023 14:08:54 -0700
Reply-To: porsche_groups982@usako.net
X-Spam_score: 7.2
X-Spam_score_int: 72
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Porsche Groups LLC 300 Stuttgart, Baden-wüttemberg, Germany.
Dear , This is a congratulatory mail informing you that you have been selected
as one of the lucky winners for our Annual OMAZE Raffle Draw for an honor
of a brand new Porsche Mecan S and a check worth of $ [...]
Content analysis details: (7.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 TVD_RCVD_IP Message was received from an IP address
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_MR_MRS No description available.
0.4 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 HK_NAME_MR_MRS No description available.
0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps
0.0 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 MONEY_FORM Lots of money if you fill out a form
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
Subject: {SPAM?} Congratulations On Your New Porshe
Porsche Groups LLC 300 =
Stuttgart, Baden-w=FCttemberg,
Germany.
Dear ,
This is a congratulatory mail informing you that you have been selected=
as one of the lucky winners for our Annual OMAZE Raffle Draw for an honor =
of a brand new Porsche Mecan S and a check worth of $2,000,000.00 USD in th=
e draws from the worldwide balloting program held in the UNITED STATES OF A=
MERICA, by the OMAZE COMPANY.
=
Portrayal of prize vehicle; =
Model: Porsche Mecan S
280kW/380 PS Power (kw)/Power (PS)
4.8 s Acceleration 0-100km/h
259 km/h Maximum velocity
375 hp Max Power
4,6s 0 - 60 mph
160 mph Top track (speed with summer tires)
The raffle cycle was assisted through sporadic decision in our compute=
rized email decision structure (ESS) from an informational index of over he=
aps of email addresses. The Porsche Lottery is upheld by the English Gaming=
Board and also Licensed by the Global Relationship of Gaming Controllers (=
IAGR). Kindly contact our fiduciary claim division for additional informati=
on as regarded strategies to the claim of your honor.
Email: porsche_groups982@usako.net
=
=
Kindly provide the following below with your lucky raffle Reg. pin code =
Number: DGH/OMAZEPSH/2023. We expect your swift response so we can forward =
it to legal advisor who will put you through the neccessary steps on how to=
get your check and car. =
1. Name In Full :
2. DOB:
3. Age :
4. Sex :
5. Occupation :
6. Direct Phone :
7. Present Country :
8. Reg pin code Number: DGH/OMAPSH2023
Congratulations from all our staffs, and thank you for being =
part of our extraordinary program.
Regards,
Chief Executive Officer Porsche Groups.
Mr. Oliver Blume
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 27 Mar 2023 17:11:43 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from )
id 1pgvzm-00080L-11
for dave@doctor.nl2k.ab.ca;
Mon, 27 Mar 2023 17:11:22 -0600
Resent-From: The Doctor
Resent-Date: Mon, 27 Mar 2023 17:11:22 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f174.google.com ([209.85.214.174]:45608)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from )
id 1pgscG-000O4S-1D
for root@nk.ca;
Mon, 27 Mar 2023 13:34:55 -0600
Received: by mail-pl1-f174.google.com with SMTP id le6so9442424plb.12
for ; Mon, 27 Mar 2023 12:32:53 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1679945568;
h=content-language:thread-index:mime-version:message-id:date:subject
:to:from:from:to:cc:subject:date:message-id:reply-to;
bh=atn/N/h7Khv/2lGC+kGwv9wN5N0pjJ7lq7BEMvW8DDg=;
b=OcrzCR17Jt/y+nBB/Xbi7A/6oXvGlL3Ne4h+A6gVsA6V32YNkem8VUoakqu1NQU5DP
xN69+Oo81Vg+zxmGDObgN0ic3ff80MuGYyuslYKBiB5sLiUpV+LrQDk2RFxmUdQ9phG1
/bR2A84H1wxToss02Syvg/svFAFa31XxowtEhr5nFxCwg2kKUEtMGfAPPNyS9Xijm0C1
fUXFs1Var7WAb0y+L7bl0XZz+KC7m2CcK5i3e4yPTvY7eUdtQB7uJg+AXz6z81Zr7uFq
I3JEHEHrNdFX/drjyVRcv/dwldzw1bz3PsxahWqk2vpCU0A2x08UzZllVbaSsccuZnJQ
p/yg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1679945568;
h=content-language:thread-index:mime-version:message-id:date:subject
:to:from:x-gm-message-state:from:to:cc:subject:date:message-id
:reply-to;
bh=atn/N/h7Khv/2lGC+kGwv9wN5N0pjJ7lq7BEMvW8DDg=;
b=Luu52B6FRCoLmH/ttu6xEWoYXl4bLpTZgO3a7ZXoWtbI2yatvtstoNwtqYkss1JdQ9
0KXEuwqvjSFRRP7iQ04eXm3b0sO3tlqbb65hkqbs5VM9mIi30hssa+sdasYLra8xOI68
1/9fJnmJScTDU5C2jUXy9R17LvJbhSbrUFd7oM8O9WTyoBqOL8ErFFpd7JaV6ZSlNDPf
aJ/K7ihYdlUHq6orNakqD/C7evOIWsCGqXLTBcU5jNQ8OOv9eveJu5gF6Eo7k6XW04M/
zXfuS+z+fVpjMcuelb8OZY+rGujKLU3MqIZ+w6Wjdw7DYPZivpaFG4jas1zeGXSN7OIj
t7wQ==
X-Gm-Message-State: AO0yUKVja+kWxzIdJepjmMoHswXvRQYFhmgKYMyurx1HayNwmmoSgG/n
ldtaHSr8wfKRVhOk/5XLZBhNIpkOUYRPiQ==
X-Google-Smtp-Source: AK7set9G3GGruLftwndy8MK2Z2KRhcjtIErTjPtaSDhdSPkFswWzq4VxfqVB/ayZWUctHndYm2f/Xw==
X-Received: by 2002:a05:6a20:8b03:b0:db:1d43:18fe with SMTP id l3-20020a056a208b0300b000db1d4318femr11466795pzh.8.1679945567743;
Mon, 27 Mar 2023 12:32:47 -0700 (PDT)
Received: from DESKTOPRS1EI06 ([2409:4064:2500:d381:dc65:4d84:3b99:d604])
by smtp.gmail.com with ESMTPSA id t13-20020a62ea0d000000b005a87d636c70sm19328268pfh.130.2023.03.27.12.32.45
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Mon, 27 Mar 2023 12:32:47 -0700 (PDT)
From: "Kautesv"
To:
Subject: Re: Website design?
Date: Tue, 28 Mar 2023 01:02:31 +0530
Message-ID: <045101d960e2$e8ec3590$bac4a0b0$@com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0452_01D96111.02A47190"
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: Adlg4sC03a2BMZVtSQGILjys/d/QzQ==
Content-Language: en-us
This is a multipart message in MIME format.
------=_NextPart_000_0452_01D96111.02A47190
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Hey! root@nk.ca
Good Morning.
Are you looking for web design and mobile app development services (such as
an upgrade, repair, or redesign)?
As per your requirements, we are ready to go:
(1) Apps for Business (Similar to Uber, Food-panda, OLX, Find-Job etc.)
(2) GPS-Related Applications
(3) Apps for delivery
(4) Logistics Apps
(5) Social Media Apps
(6) Appointment / Booking Apps more.
(7) Development of custom apps, etc.
Design & Development Services:-
1. Website design & development
2. Ecommerce development
3. Custom website development
4. Mobile App development
5. Graphics Design
6. Mockup/workflow design
7. Logo/brochure design
Digital Marketing Services:-
1. Search Engine Optimization (SEO)
2. Social Media Optimization (SMO)
3. PPC (Google Ads, Facebook Ads, Instagram Ads
If you're interested, Please send us an email with your requirements and
time frames.
Please reply as soon as possible.
Thanks & Regards,
Kautesv
------=_NextPart_000_0452_01D96111.02A47190
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40">
charset=3Dus-ascii">
Hey! root@nk.ca
Good Morning.
Are you looking for web design and mobile app =
development
services (such as an upgrade, repair, or redesign)?
As per your requirements, we are ready to go:
(1) Apps for Business =
(Similar to Uber, Food-panda,
OLX, Find-Job etc.)
(2) GPS-Related =
Applications
(3) Apps for delivery
(4) Logistics Apps
(5) Social Media Apps
(6) Appointment / Booking =
Apps more.
(7) Development of custom =
apps, etc.
Design & Development Services:-
1. =
Website design & development
2. Ecommerce =
development
3. Custom =
website development
4. Mobile App =
development
5. Graphics =
Design
6. =
Mockup/workflow design
7. =
Logo/brochure design
Digital Marketing Services:-
1. Search =
Engine Optimization (SEO)
2. Social Media =
Optimization (SMO)
3. PPC (Google =
Ads, Facebook Ads, Instagram Ads
If you're interested, Please send us an email =
with your
requirements and time frames.
Please reply as soon as possible.
Thanks & Regards,
Kautesv
------=_NextPart_000_0452_01D96111.02A47190--
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 27 Mar 2023 17:10:43 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from )
id 1pgvye-0007xS-1J
for dave@doctor.nl2k.ab.ca;
Mon, 27 Mar 2023 17:10:12 -0600
Resent-From: The Doctor
Resent-Date: Mon, 27 Mar 2023 17:10:12 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from 211-75-101-153.hinet-ip.hinet.net ([211.75.101.153]:55596 helo=mail.mariavon.com.tw)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.96)
(envelope-from )
id 1pgr9Y-000KFE-1Y
for doctor@nl2k.ab.ca;
Mon, 27 Mar 2023 12:01:15 -0600
X-SpamFilter-By: ArmorX SpamTrap 5.77 with qID 32RDoxZS3000836, This message is accepted by code: ctloc85258
Received: from [95.214.24.48] ([10.0.0.1])
by mail.mariavon.com.tw (8.15.2/2.80/5.90) with ESMTP id 32RDoxZS3000836;
Mon, 27 Mar 2023 21:51:01 +0800
Message-Id: <202303271351.32RDoxZS3000836@mail.mariavon.com.tw>
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Congatulations On Your Winnings!!
To: Recipients
From: "Mr.Oliver Blume "
Date: Mon, 27 Mar 2023 06:50:07 -0700
Reply-To: andrewfabianforporcshe205@gmail.com
X-Spam_score: 13.4
X-Spam_score_int: 134
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Porsche Groups LLC 300 Stuttgart, Baden-wüttemberg, Germany.
Dear Beneficiary, This is a congratulatory mail informing you that you have
been selected as one of the lucky winners for our Annual OMAZE Raffle Draw
for an honor of a brand new Porsche Mecan S and a check worth of $ [...]
Content analysis details: (13.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 TVD_RCVD_IP Message was received from an IP address
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[andrewfabianforporcshe205(at)gmail.com]
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 T_HK_NAME_MR_MRS No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 HK_NAME_MR_MRS No description available.
0.4 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps
0.0 FILL_THIS_FORM Fill in a form with personal information
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 FORM_FRAUD Fill a form and a fraud phrase
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
Subject: {SPAM?} Congatulations On Your Winnings!!
Porsche Groups LLC 300 =
Stuttgart, Baden-w=FCttemberg,
Germany.
Dear Beneficiary,
This is a congratulatory mail informing you that you have been selected=
as one of the lucky winners for our Annual OMAZE Raffle Draw for an honor =
of a brand new Porsche Mecan S and a check worth of $2,000,000.00 USD in th=
e draws from the worldwide balloting program held in the UNITED STATES OF A=
MERICA, by the OMAZE COMPANY.
=
Portrayal of prize vehicle; =
Model: Porsche Mecan S
280kW/380 PS Power (kw)/Power (PS)
4.8 s Acceleration 0-100km/h
259 km/h Maximum velocity
375 hp Max Power
4,6s 0 - 60 mph
160 mph Top track (speed with summer tires)
The raffle cycle was assisted through sporadic decision in our compute=
rized email decision structure (ESS) from an informational index of over he=
aps of email addresses. The Porsche Lottery is upheld by the English Gaming=
Board and also Licensed by the Global Relationship of Gaming Controllers (=
IAGR). Kindly contact our fiduciary claim division for additional informati=
on as regarded strategies to the claim of your honor.
Email: andrewfabianforporcshe205@gmail.com
=
=
Kindly provide the following below with your lucky raffle Reg. pin code =
Number: DGH/OMAZEPSH/2023. We expect your swift response so we can forward =
it to legal advisor who will put you through the neccessary steps on how to=
get your check and car. =
1. Name In Full :
2. DOB:
3. Age :
4. Sex :
5. Occupation :
6. Direct Phone :
7. Present Country :
8. Reg pin code Number: DGH/OMAPSH2023
Congratulations from all our staffs, and thank you for being =
part of our extraordinary program.
Regards,
Chief Executive Officer Porsche Groups.
Mr. Oliver Blume
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 27 Mar 2023 10:31:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from )
id 1pgpk4-000Fvu-0K
for dave@doctor.nl2k.ab.ca;
Mon, 27 Mar 2023 10:30:44 -0600
Resent-From: The Doctor
Resent-Date: Mon, 27 Mar 2023 10:30:44 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-bn8nam11rlhn2140.outbound.protection.outlook.com ([40.95.36.140]:26932 helo=NAM11-BN8-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96)
(envelope-from )
id 1pgpaB-000FKo-0t
for doctor@doctor.nl2k.ab.ca;
Mon, 27 Mar 2023 10:20:39 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=W/cZbnIShvs94Z+pGtoTLWSwRFlFx0C6atghIor4Iw5Uy93pdOfI24NrqNW6swNKMN2aTRBvKbikQbO2pVbLzVC/AydwuWsepfdYZIxRkltKjjm5Fx9k7t71ic+bG+H9ivNG6am7+539w55ADGBpjcEgNF1Cc7WJLLuV1RUONAJYtzonu/DiiKpgPaifM4P4O4Km/bIvJyQ5jT/ZKRig4BkvaAKlteq51nUkkvNdHftTRzBnwymzQtkvAq/u0c6wBDoEKmYLQJlBwIh1ezOTrU8HFGIKjNz+x2u1n1cohl4KycVBFlLaUcAgXHEpSoVF9LHW8+no/fmyMBHPDfvpEg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=789dYlevivqsOU6Ejuhs9d5cpYe+OjNRKQc47MUbiHU=;
b=MBvNX/6sqPftFSZy4DMj+2ZSV2sjYMosKQNxJVTvuNyE045arZ1D7EPrUk6oKCf+H3fmFP4M0j79EymdBEJG56jLwyVORDtn2Kzg6DUC91KA1rVP5kPjP8mfYNVx9aYvKq39ifY2r3Kqj1bvKQ0JccHLtyqtmuBEh1psN+CVN0KX+s+WpFdK14epkhxu0r0hJtfyz88Si+uxQtQgbMr4ujVRsjIatjc+qnclXPxtfkkrxYKKujMhCVdhrM/w+psn0LXoxWVQwCNmVJcXh/5tW5BXTsx8LDg563i51QeMraIRmsORvJek0rbAUQsmUFdcC7hylKWS5RN+zMfCByofKQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is
8.42.207.81) smtp.rcpttodomain=bosheng.net smtp.mailfrom=kimo.com.tw;
dmarc=fail (p=reject sp=reject pct=100) action=oreject
header.from=kimo.com.tw; dkim=none (message not signed); arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=wwjwm.onMicrosoft.com;
s=selector2-wwjwm-onMicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=789dYlevivqsOU6Ejuhs9d5cpYe+OjNRKQc47MUbiHU=;
b=DJx5nI76kHr3uYMV8f6lYrDS4NTienaqhjZ1LSUcT4p7HhIYVmRWgcw0/PO24wzcTZYdzPwJFkavQsYldsfEgJ5sb9pS3NtaLqzzGJN1MCQ2u96mhniObfbhIZMotsqoqDTaYsanduYZd6K7M1WPG31UumQYXhplvZO5zhLvIzg=
Received: from DM6PR06CA0067.namprd06.prod.outlook.com (2603:10b6:5:54::44) by
DM6PR01MB5913.prod.exchangelabs.com (2603:10b6:5:1db::29) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.6254.16; Mon, 27 Mar 2023 16:18:23 +0000
Received: from DM6NAM12FT087.eop-nam12.prod.protection.outlook.com
(2603:10b6:5:54:cafe::bf) by DM6PR06CA0067.outlook.office365.com
(2603:10b6:5:54::44) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6178.42 via Frontend
Transport; Mon, 27 Mar 2023 16:18:21 +0000
X-MS-Exchange-Authentication-Results: spf=none (sender IP is 8.42.207.81)
smtp.mailfrom=kimo.com.tw; dkim=none (message not signed)
header.d=none;dmarc=fail action=oreject header.from=kimo.com.tw;
Received-SPF: None (protection.outlook.com: kimo.com.tw does not designate
permitted sender hosts)
Received: from mail1.jas.com (8.42.207.81) by
DM6NAM12FT087.mail.protection.outlook.com (10.13.179.155) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.6254.9 via Frontend Transport; Mon, 27 Mar 2023 16:18:21 +0000
Received: from USBCDPSMBX01.jas1.ds.Jas.com (172.29.10.51) by
USBCDPSMBX01.jas1.ds.Jas.com (172.29.10.51) with Microsoft SMTP Server
(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.2.1118.26; Mon, 27 Mar 2023 12:17:57 -0400
Received: from User (147.78.103.204) by USBCDPSMBX01.jas1.ds.Jas.com
(172.29.10.51) with Microsoft SMTP Server id 15.2.1118.26 via Frontend
Transport; Mon, 27 Mar 2023 12:17:51 -0400
Reply-To:
From: "Mr. Williams Townsend"
Subject: I am Willam Townsend
Date: Mon, 27 Mar 2023 09:17:57 -0700
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <1668b5a9-2c07-43f3-bdd4-21f007324f8f@USBCDPSMBX01.jas1.ds.Jas.com>
To: Undisclosed recipients:;
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: DM6NAM12FT087:EE_|DM6PR01MB5913:EE_
X-MS-Office365-Filtering-Correlation-Id: a29dca16-28b0-4cc5-5681-08db2edee23f
X-MS-Exchange-SenderADCheck: 2
X-MS-Exchange-AntiSpam-Relay: 1
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
=?windows-1251?Q?l/M9BYAmw2hRI2a9ySz30qcpaEA+i1fYOfNO47QrWGE8KlWi2mb+6aTJ?=
=?windows-1251?Q?wenFHW5PM4bZGlyoUu8y0FZNbWETW5O4fQa9591KwxMT7LtqS9cbsJWB?=
=?windows-1251?Q?rlCnZtO6cOLBrqvBXDVIoss1VIsYv7bF9p74zKC+jkdvrTiDkxT25ww6?=
=?windows-1251?Q?Mrzfyn9lTEFIehhKf8mYM72dUNG8IR8OtTvIE8Q0USKKIqJJCETXDtqu?=
=?windows-1251?Q?5GUejI96sRTmFM+UQWA861RwE2FFsR1AMu3BG8PY/tKACwfHRk0TGNkl?=
=?windows-1251?Q?3RN5YZZmVOzN7LDd+gEb/9fqIr/MLclkfYe91EgFwWmw/x6fSyG6LZ2I?=
=?windows-1251?Q?8hDAFrsUb4k+HyIEsuxMZnDCHEYOXaNPtQzuRMAS5wS7gsaCQbaTf9yo?=
=?windows-1251?Q?BSzuqmUEA6qy2uYPTAMINz/uKiJTeKws13SArEEU7IQIH82G8V1ofX+f?=
=?windows-1251?Q?/mVP3ngL0Po3GrfnTtBBf+xeoJcCP+iGzQ9C6ik1m7D2VGKF5YvOeJam?=
=?windows-1251?Q?4HT6SoR+EEb8k2UUJ08mxTJE/cD0a6OU7psyhQCF/d6xMno9XPHLQgli?=
=?windows-1251?Q?cEeXmtu3KCvVjGfNCrEZbdzwFMrvu4KYyAlSwY8Y4Hqr+4QQNKsVytIM?=
=?windows-1251?Q?r1NkNhZLgZC00DPiiu/rm7RtGi2Y7JCz3NE372SEzt/EzxMhH9GxM94A?=
=?windows-1251?Q?9D5Da88UQSouwy8viQeIvWw/vUoRJTSgAMiOiDBJGlh2SpnY8b/ihr/0?=
=?windows-1251?Q?vYdBJa9YzjvlcRfrwPx/RnPxA6lYf3y64El/mv7hGIMWs1a/i4BzBiMN?=
=?windows-1251?Q?DVl3sAYvPMX0r+HkK7HuzaX3Y1y53bYNXxmWcCt5MSA1V3tC+tn+KAXT?=
=?windows-1251?Q?rCuZ9VkdBca7aEO4rFJxpS1iTETT6xiu08FD8XTmMMvy3v07kfZdKKaa?=
=?windows-1251?Q?R+Xu5NL90ixnA6GJmFDDACY/rkanBZkJI3EQzT0JCcEYdBQVwgrOExEl?=
=?windows-1251?Q?vAY4YPljGIIoE8tMeQ7Gs3ICAI4vUWGSTcLMMnZ+FT48WrcWqGysOxQN?=
=?windows-1251?Q?MejZ3cqAFav7ikvhAaVF4wVkpfX238d2rCX5ZR3uOhaYFCgZ3E0/+HQz?=
=?windows-1251?Q?AwcJqECovBtvbOG+3OF8Pxmk4QQ4zlPngWq96tB25eCcX+D6BPL3KS8j?=
=?windows-1251?Q?F2EiQMyH/LBAu+RW7zVAuK9T1FFemMK3?=
X-Forefront-Antispam-Report:
CIP:8.42.207.81;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail1.jas.com;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230028)(4636009)(39860400002)(376002)(346002)(396003)(136003)(451199021)(109986019)(46966006)(40470700004)(316002)(2860700004)(40460700003)(3480700007)(498600001)(356005)(81166007)(82740400003)(8936002)(5660300002)(31696002)(82310400005)(86362001)(7406005)(7416002)(7366002)(2906002)(8676002)(70206006)(70586007)(41300700001)(40480700001)(4743002)(35950700001)(26005)(9686003)(336012)(83380400001)(31686004)(47076005)(956004)(66899021)(2700400008);DIR:OUT;SFP:1023;
X-OriginatorOrg: WWJWM.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Mar 2023 16:18:21.5695
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: a29dca16-28b0-4cc5-5681-08db2edee23f
X-MS-Exchange-CrossTenant-Id: fa3414ca-197f-48b7-8ff3-892f8bdd8e93
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=fa3414ca-197f-48b7-8ff3-892f8bdd8e93;Ip=[8.42.207.81];Helo=[mail1.jas.com]
X-MS-Exchange-CrossTenant-AuthSource:
DM6NAM12FT087.eop-nam12.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR01MB5913
X-Spam_score: 21.9
X-Spam_score_int: 219
X-Spam_bar: +++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Senior Officer at Los Angeles International Airport (CA) California,
USA Hello Good Friend First and foremost, I am sorry for reaching out to
you with this medium.
Content analysis details: (21.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[147.78.103.204 listed in zen.spamhaus.org]
2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[147.78.103.204 listed in zen.spamhaus.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[40.95.36.140 listed in list.dnswl.org]
0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=NAM11-BN8-obe.outbound.protection.outlook.com;ip=40.95.36.140;r=doctor.nl2k.ab.ca]
0.0 AXB_X_FF_SEZ_S Forefront sez this is spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[godsspower002(at)outlook.com]
0.6 FSL_NEW_HELO_USER Spam's using Helo and User
1.3 PDS_HELO_SPF_FAIL High profile HELO that fails SPF
0.0 T_HK_NAME_MR_MRS No description available.
0.0 CTE_8BIT_MISMATCH Header says 7bits but body disagrees
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 HK_NAME_MR_MRS No description available.
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 T_MONEY_PERCENT X% of a lot of money for you
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} I am Willam Townsend
Senior Officer at Los Angeles International Airport
(CA) California, USA
Hello Good Friend
First and foremost, I am sorry for reaching out to you with this medium.
However, I am Willam Townsend by name. A senior officer at Los Angeles International Airport (CA) California. USA
I am contacting you about an abandoned diplomatic consignment box the x-ray scan report revealed an undisclosed sum of money in a metal trunk box approximately 12.5 million dollars. and the box indicates your contact email address the consignment was abandoned because the Contents of the consignment were not properly declared by the consignee as “MONEY” rather it was declared as a personal effect to avoid interrogation. meanwhile, The Diplomat was in transit to your location 3 weeks before the coronavirus pandemic crisis that shook the world started. The Diplomat fails to pay for the United States Non-Inspection and airport clearance fee to the US Customs border and protection he abandoned the consignment and left without notifying the authority anything of his arrival for declaration of clearance. To confirm you as the authentic beneficiary, do send me your full name, your home address, your mobile
Furthermore, I have taken it upon myself to contact you personally about this abandoned box so that we can transact this as a deal and share the total money 70% for you and 30% for me. My primary purpose for contacting you The U.S. Customs Border and Protection is on clearance for the year 2022 for some abandoned beneficiaries' consignments to be listed among the list of consignment boxes that will be confiscated and get transferred to the US Treasury storage facility for the year 2023.
However, I want both of us to transact this as a deal all I want is your trust as the arrangement for the box to be delivered to you which can be concluded within 1-2 working days after confirmation is made and upon your acceptance and willingness to co-operate.
I will appreciate it if we can keep this deal confidential. Please get back to me via this email for further directives: You can not call me on my telephone number, for now, to avoid the authorities raising their eyebrows at me. Please send your response to my private
Thank you.
Mr. Williams Townsend
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 27 Mar 2023 08:43:39 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from )
id 1pgo47-000A2V-1P
for dave@doctor.nl2k.ab.ca;
Mon, 27 Mar 2023 08:43:19 -0600
Resent-From: The Doctor
Resent-Date: Mon, 27 Mar 2023 08:43:19 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f170.google.com ([209.85.214.170]:38409)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from )
id 1pgnvC-0009WK-00
for sales@nk.ca;
Mon, 27 Mar 2023 08:34:15 -0600
Received: by mail-pl1-f170.google.com with SMTP id ja10so8620550plb.5
for ; Mon, 27 Mar 2023 07:32:07 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1679927521;
h=content-language:thread-index:sensitivity:importance:mime-version
:message-id:date:subject:to:from:from:to:cc:subject:date:message-id
:reply-to;
bh=WKL0e4JeOS3AgZTdzv3rdJUU9TGMt0n0GhzQ6q0tGwk=;
b=SXCVxyGsIxi3XXPHBFRIqxZzCMbI0F4pY8fy1ZUjxTfVeV3yPCnBH3Y9FwOfkSq58z
ASjRDHLNWGsBcuNFJgsW6bD4nbF6TPhb1B/SjhWKH4JvfZVRFNDIKahnEV+DmuY5CjVO
maGa+jT6o1grZ6K0VlVsgoBEmes2BYPhEOt9+RTxd+jgf8ujqqvgRf3UpqtiO+hYI8bq
Fxdh1vh+JiaIDzeASGHCPiewIhhJ9To4TsyLYaqQ+4FCJ+DjymEIFNFI9aFVIoIAOB/Y
AABFYAvA9sGwRmJZa9KH+ZJsiI3kpIfRYHuVgR5bX/Vd6l2qltUVdHmy9Qnr1sc0kP1D
70ig==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1679927521;
h=content-language:thread-index:sensitivity:importance:mime-version
:message-id:date:subject:to:from:x-gm-message-state:from:to:cc
:subject:date:message-id:reply-to;
bh=WKL0e4JeOS3AgZTdzv3rdJUU9TGMt0n0GhzQ6q0tGwk=;
b=oP1qIR+j7dEPUe4xiym6ZdhTYDJ67qWYAghqobXabkbbRxPETjnYLNuf4lQUZowwE9
S9sz2x3AUCBR/7iXVE+xETaKBeNKFpQ680oI3GnAIFRIFKXtSObljLCvDm2A8MSNK8l5
QZ1MBp7wi09wnPWS/Vd2a0I4x5lOkHv13t41EPj185PASzqkyHJ9sAn1ajgyYkqgBc5j
1aBDaagIHreEu3alChTUgIvLuzYXvHg71ImFXkzTJ2BymjYXcHRRVj0CauPsAwoJdKt3
XqmFJBJhRcvaKH2ptV/3bWCLM2fn9zwQGswmwsQNzOQS10N6X2H5DG+zhNzOPQjZqVlt
7orw==
X-Gm-Message-State: AO0yUKUFekYAJAToXpBmrcqx04GiFPWu/WKGBWcHeRLzxG/pcTyj6Kfz
rSeFCsNIKMZqpGHI7N+PnGDXSWsxtCKoug==
X-Google-Smtp-Source: AK7set/lXFhEEKTpuj1r8ictThYN6E74wDUSniV9iNCQ7876P4i1S22MK1Dk3BWrc6WghiosXiLTMA==
X-Received: by 2002:a05:6a20:4b12:b0:d7:6b87:94b8 with SMTP id fp18-20020a056a204b1200b000d76b8794b8mr10943671pzb.18.1679927521407;
Mon, 27 Mar 2023 07:32:01 -0700 (PDT)
Received: from GalaxyGOV3EF1 ([205.254.174.81])
by smtp.gmail.com with ESMTPSA id c21-20020a62e815000000b005a8dcd32851sm2239591pfi.11.2023.03.27.07.32.00
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Mon, 27 Mar 2023 07:32:01 -0700 (PDT)
From: Koliya Brown
X-Google-Original-From: "Koliya Brown"
To:
Subject: Front Page-On Google ?
Date: Mon, 27 Mar 2023 20:01:48 +0530
Message-ID: <111701d960b8$e42acf00$ac806d00$@gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_1118_01D960E6.FDE30B00"
X-Priority: 1 (Highest)
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook 16.0
Importance: High
Sensitivity: Personal
Thread-Index: AdlguMNaHOdIV88aSv+AtsYYzFBi4g==
Content-Language: en-in
This is a multipart message in MIME format.
------=_NextPart_000_1118_01D960E6.FDE30B00
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Hi sales@nk.ca, I hope you are doing well!
Do you want to see your website 1st Page in Google or another major search
engine? Do you want more targeted visitors on your website?
There could be many reasons behind not getting enough visitors on your
website.
. Do you have 1st page ranking on Google?
. Are you using RIGHT keywords?
. Is your website content properly optimized?
. Is your current marketing agency doing enough to get more ROI?
. Do you have your website mobile friendly?
Do let us know. If you are interested to know more about our client's
testimonials, services methodology and pricing details.
I hope, you will be Interested in my services so I await your reply.
Thanks & Regards
Koliya Brown
Marketing Manager
Note: May I send you a quote? If you are interested!
------=_NextPart_000_1118_01D960E6.FDE30B00
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">
(filtered medium)">
style=3D'word-wrap:break-word'>
class=3DMsoNoSpacing>Hi sales@nk.ca, I hope you are doing well!
class=3DMsoNoSpacing>
Do you =
want to see your website 1st Page in Google or another major search =
engine? Do you want more targeted visitors on your website?
class=3DMsoNoSpacing>
class=3DMsoNoSpacing>
There could be many reasons behind not getting =
enough visitors on your website.
class=3DMsoNoSpacing>• &nb=
sp; Do you have 1st page ranking on =
Google?
class=3DMsoNoSpacing>• &nb=
sp; Are you using RIGHT =
keywords?
class=3DMsoNoSpacing>• &nb=
sp; Is your website content properly =
optimized?
class=3DMsoNoSpacing>• &nb=
sp; Is your current marketing agency doing =
enough to get more ROI?
class=3DMsoNoSpacing>• &nb=
sp; Do you have your website mobile =
friendly?
class=3DMsoNoSpacing>
Do let us know. If you are interested to know =
more about our client’s testimonials, services methodology and =
pricing details.
class=3DMsoNoSpacing>
I =
hope, you will be Interested in my services so I await your reply.
class=3DMsoNoSpacing>
Thanks =
& Regards
Koliya =
Brown
Marketing Manager
class=3DMsoNoSpacing>
class=3DMsoNoSpacing>
Note: May I send you a quote? If you are =
interested!
------=_NextPart_000_1118_01D960E6.FDE30B00--
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 27 Mar 2023 10:30:40 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from )
id 1pgpjr-000FvE-2Z
for dave@doctor.nl2k.ab.ca;
Mon, 27 Mar 2023 10:30:31 -0600
Resent-From: The Doctor
Resent-Date: Mon, 27 Mar 2023 10:30:31 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from 211-75-101-153.hinet-ip.hinet.net ([211.75.101.153]:44672 helo=mail.mariavon.com.tw)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.96)
(envelope-from )
id 1pgpOH-000EiR-1V
for doctor@doctor.nl2k.ab.ca;
Mon, 27 Mar 2023 10:08:17 -0600
X-SpamFilter-By: ArmorX SpamTrap 5.77 with qID 32RDooZS3000836, This message is accepted by code: ctloc85258
Received: from [95.214.24.48] ([10.0.0.1])
by mail.mariavon.com.tw (8.15.2/2.80/5.90) with ESMTP id 32RDooZS3000836;
Mon, 27 Mar 2023 21:50:50 +0800
Message-Id: <202303271350.32RDooZS3000836@mail.mariavon.com.tw>
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Congatulations On Your Winnings!!
To: Recipients
From: "Mr.Oliver Blume "
Date: Mon, 27 Mar 2023 06:50:03 -0700
Reply-To: andrewfabianforporcshe205@gmail.com
X-Spam_score: 13.4
X-Spam_score_int: 134
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Porsche Groups LLC 300 Stuttgart, Baden-wüttemberg, Germany.
Dear Beneficiary, This is a congratulatory mail informing you that you have
been selected as one of the lucky winners for our Annual OMAZE Raffle Draw
for an honor of a brand new Porsche Mecan S and a check worth of $ [...]
Content analysis details: (13.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 TVD_RCVD_IP Message was received from an IP address
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[andrewfabianforporcshe205(at)gmail.com]
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_MR_MRS No description available.
0.4 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 HK_NAME_MR_MRS No description available.
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps
0.0 MONEY_FORM Lots of money if you fill out a form
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 FORM_FRAUD Fill a form and a fraud phrase
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
Subject: {SPAM?} Congatulations On Your Winnings!!
Porsche Groups LLC 300 =
Stuttgart, Baden-w=FCttemberg,
Germany.
Dear Beneficiary,
This is a congratulatory mail informing you that you have been selected=
as one of the lucky winners for our Annual OMAZE Raffle Draw for an honor =
of a brand new Porsche Mecan S and a check worth of $2,000,000.00 USD in th=
e draws from the worldwide balloting program held in the UNITED STATES OF A=
MERICA, by the OMAZE COMPANY.
=
Portrayal of prize vehicle; =
Model: Porsche Mecan S
280kW/380 PS Power (kw)/Power (PS)
4.8 s Acceleration 0-100km/h
259 km/h Maximum velocity
375 hp Max Power
4,6s 0 - 60 mph
160 mph Top track (speed with summer tires)
The raffle cycle was assisted through sporadic decision in our compute=
rized email decision structure (ESS) from an informational index of over he=
aps of email addresses. The Porsche Lottery is upheld by the English Gaming=
Board and also Licensed by the Global Relationship of Gaming Controllers (=
IAGR). Kindly contact our fiduciary claim division for additional informati=
on as regarded strategies to the claim of your honor.
Email: andrewfabianforporcshe205@gmail.com
=
=
Kindly provide the following below with your lucky raffle Reg. pin code =
Number: DGH/OMAZEPSH/2023. We expect your swift response so we can forward =
it to legal advisor who will put you through the neccessary steps on how to=
get your check and car. =
1. Name In Full :
2. DOB:
3. Age :
4. Sex :
5. Occupation :
6. Direct Phone :
7. Present Country :
8. Reg pin code Number: DGH/OMAPSH2023
Congratulations from all our staffs, and thank you for being =
part of our extraordinary program.
Regards,
Chief Executive Officer Porsche Groups.
Mr. Oliver Blume
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 27 Mar 2023 08:37:39 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from )
id 1pgny0-0009od-1l
for dave@doctor.nl2k.ab.ca;
Mon, 27 Mar 2023 08:37:00 -0600
Resent-From: The Doctor
Resent-Date: Mon, 27 Mar 2023 08:37:00 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ed1-f45.google.com ([209.85.208.45]:35358)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from )
id 1pgkCG-000Bov-2E
for doctor@nl2k.ab.ca;
Mon, 27 Mar 2023 04:35:33 -0600
Received: by mail-ed1-f45.google.com with SMTP id y4so34065201edo.2
for ; Mon, 27 Mar 2023 03:33:29 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1679913203;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=Hs1PTHblO2AXgpKzQQ/c9ZMopbP9mOiZXWrX+k4RxDY=;
b=o60nsi5Dt2FU5Ua+Oi8GRaMCAbNixE6Cz2hM554+6dknXIBLMK890vqYKK40vuiv/U
DA/w4SRBM7Xksz3tAq1Kz2wpf/np30KUGRKKtNVqWca46VyHgk3fy4wXDP+V/RBWCOjE
HAcTrcXqpbhXYJqHfhCTgKeV42gPcXIzngLJGtffqosyIeytoAYpLL3aXFlMwCll/EWk
teGqON9EWdNmKO1fOMi179BXEbiJhxwSVu+UcJX4gnOqk+CjDRXRYkzOse2CADLHhBP1
byDdL720bXWElOZBlNYVD5jsHbHRyPPryGIWAGaHM2THo+h6Ba9Oxz3WtPoB1iL8DjMZ
QAkQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1679913203;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=Hs1PTHblO2AXgpKzQQ/c9ZMopbP9mOiZXWrX+k4RxDY=;
b=bViZZs6uPEIthnkq0eJHyy+J+J/1xT3bqalqvf3O6T1FzwFeTEorEjimhx8WZYM8Cv
1NK/7t1yXHPrwSnfxPBWm3t3Fjn7j7fPa/xg/mDJOKXuuIms9EmG6WQHAzQWmFSK8zKB
f+J7r2ls39fx89fjq2bx590XJZO1GA5eGdrTkd4TtzkQayoaS77gwTSFhAgKORt62i6W
UE3uMZ6X5Q3vWsTXamfn2ooI92JlMxI/4irP/ItSMNWXDYQ8C1/uNoWTw2FEW6m0i87u
humm8oXxMWavET6h60d6hdmnG5Ltg+BxjOA+Eb3bQstzQZQWYYAPCTt33p4sL/vWsLeY
8s5w==
X-Gm-Message-State: AAQBX9cHaAmdCToYSoukIOtK83fJJOnAlauf/aAopx/UP0UQVEp5gjrp
0QnzidszJTNg3HXlw+Bx5OYuxKjIUWucDu1znTQ=
X-Google-Smtp-Source: AKy350YtSDFacShdvQpW9BkKnngCZeakzo+YjWVD1xKw5qols35Zf0FfRHdbRTWLw1xX/+YOQ0mCEer0gAmWDogT/RQ=
X-Received: by 2002:a17:906:9244:b0:8e3:da0f:f3ea with SMTP id
c4-20020a170906924400b008e3da0ff3eamr4836378ejx.7.1679913203552; Mon, 27 Mar
2023 03:33:23 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:7208:7054:b0:65:74fb:ecc8 with HTTP; Mon, 27 Mar 2023
03:33:23 -0700 (PDT)
From: bola17
Date: Mon, 27 Mar 2023 16:03:23 +0530
Message-ID:
Subject:
To: dmillar , doconnor ,
doctor , dolores32 ,
domenic rubino , donahued ,
dorlovic , dossantos , doug ,
douglas palframan
Content-Type: text/plain; charset="UTF-8"
X-Spam_score: 5.0
X-Spam_score_int: 50
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://bit.ly/3Kjpx4R
Content analysis details: (5.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.45 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list
2.5 SORTED_RECIPS Recipient list is sorted by address
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[balajiramesh12345(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[balajiramesh12345(at)gmail.com]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 T_TONOM_EQ_TOLOC_SHRT_PSHRTNER Short subject with potential shortener
and To:name eq To:local
0.0 TVD_SPACE_RATIO No description available.
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.45 listed in wl.mailspike.net]
Subject: {SPAM?}
https://bit.ly/3Kjpx4R
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 27 Mar 2023 04:39:38 -0600
Received: from mail-qk1-f182.google.com ([209.85.222.182]:36470)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from )
id 1pgkFL-000Buo-0L
for dave@doctor.nl2k.ab.ca;
Mon, 27 Mar 2023 04:38:45 -0600
Received: by mail-qk1-f182.google.com with SMTP id q2so2303171qki.3
for ; Mon, 27 Mar 2023 03:36:40 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112; t=1679913394;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=gL8kfg1F1gaSs/nk9qDNndtKkIcSa3jpfgKcHExTPcw=;
b=WXOP357uAvf6TJXM9kbgBSOpj0Tdngkz7hunrxGIHkItMfdHZQ+rFYSiDrtBEAMMBJ
YffXhs4kHjdX91kjXSUOjK571L6f4nbfAoCQ0PLu+YiiN6nXiHd10H858A4N8fvNmrKJ
vkhjKCXN3FAih74s5ryv/G6+C0B+QAivPhUJo377tjk8zElyTBtXsqmvaxxjj+/ax3zP
JLzmJSDfICnCgthBHXx94orl/3D2d+KvbtfixAwCRLNMGsKKXQ2u640joBSzXwPCoL7W
KFivM0lMxMQkVn+iqMAc8tFy+r5MngGewk6BWU48oUVaFY2rP4uHJBkIGPYwbwdaqaZ+
mQ7g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112; t=1679913394;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=gL8kfg1F1gaSs/nk9qDNndtKkIcSa3jpfgKcHExTPcw=;
b=gq3CI8BD9r48tiu3vI589f6hWeBI23+7L/xYyUEBHyGJMAc+Plr3FXgKdOMeGr88bN
qO+lljElYDuk3WJacmyc4HntxFTXltu7pTCASUNKDW6nUbcpp6Hhwjor+0dbr0pl8sTv
rICIKkWJ2bAuMhuMXK1iFub4XXOGC4rCOelWb7jNNKvv8FujjRX9TuTrvUH7WsMvz7/I
HlQW0u7znY3obgJPEGjfJr8SEOxmNUXWiWtBim5m2UH+pyRoE+AQjUkIiaWnPwRzBMkm
Aa2g8kfCVZDB3u5fwLIJOdaFoX7d/D/Rgqw5lMSiTPSKaLYwFYbfZbuYPGNucAv2IOMf
Au/w==
X-Gm-Message-State: AO0yUKU7byeDMcYYrsvJUT90fpIPywFesCQo+A0BuOZYqC+7BM9fKapa
lmrCeKlsuCTk0PYDId6SJLK5bYlCrJMic52Ssyk=
X-Google-Smtp-Source: AK7set9K6Ub2g0ArciJ4P8izE5hpLk4/BvsC7o72VYUS5Pj/DuXxOqyw63SCKKQsjO+ukFVRSPUNETaII8gJmWlsC6w=
X-Received: by 2002:a37:6386:0:b0:745:da3d:cd0a with SMTP id
x128-20020a376386000000b00745da3dcd0amr2746619qkb.12.1679913394185; Mon, 27
Mar 2023 03:36:34 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:ac8:5803:0:b0:3e3:92ce:cce2 with HTTP; Mon, 27 Mar 2023
03:36:33 -0700 (PDT)
From: "Dr.Charles Edward"
Date: Mon, 27 Mar 2023 16:06:33 +0530
Message-ID:
Subject:
To: daria b55 ,
darnaque leschats2011 , datok jp ,
datsit1968 , dave ,
davelongaphie5309 ,
david cameletti2 , david100 ,
david2divizio , davidbrunstein
Content-Type: text/plain; charset="UTF-8"
X-Spam_score: 5.0
X-Spam_score_int: 50
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: https://bit.ly/3noHupD
Content analysis details: (5.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.222.182 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list
2.5 SORTED_RECIPS Recipient list is sorted by address
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[sahilarya50906(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[sahilarya50906(at)gmail.com]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 T_HK_NAME_FM_DR No description available.
0.0 TVD_SPACE_RATIO No description available.
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.222.182 listed in wl.mailspike.net]
Subject: {SPAM?}
https://bit.ly/3noHupD