Web Design / App / SEO spam from Hotmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 22 May 2023 13:57:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1q1Bdv-0008RG-QW

for dave@doctor.nl2k.ab.ca;

Mon, 22 May 2023 13:56:31 -0600

Resent-From: The Doctor

Resent-Date: Mon, 22 May 2023 13:56:31 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-me3aus01olkn2146.outbound.protection.outlook.com ([40.92.63.146]:10816 helo=AUS01-ME3-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1q17Ol-00001V-2X

for info@nk.ca;

Mon, 22 May 2023 09:24:39 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=m6ERzfpemEcMrC9CNFBPKG9l06CCf2vOdIIQYvxyGH8ktl3/Zmbw/7sGE70EuwCJSH2Acad8M1gogDHQVzwNhWNGAc6Ff+cHd+p+K5pPa5k136kq+7LsRJ6Ez8fuvFt8VYFZwtjBzRxTttg5/2RutVsjSMeIQeUQOSl1Ecp0HbPVr/U5GNBQmPHDIpO+ldsUR2rcC78XNMg5LkKHqsC5ir09MpqWbAxS3ApMgGauEFu5mU049E72kneoV4JIUFtK5KsHn57CiQf2tl/5d2c1x+DccOaZFWSwZoz8yC+WzBmnMWNjuOcl5oG0FkU6DaGv94mOY8OoIpuUiZHHIOLtPA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=eoebY1juRPvjtTByq+A0iuPqZY8HL4KfE0cT93WXgtI=;

b=bvYathIXQvsLKuumnDlJxgX44OJxs+2qmwiJKBZSokHNfpmQjRaxKE47c/sCoyxnQj+BZ6JQh0e/do7iLIfwevbrNAy4S5QsDVdDL55mjpxkOJvKScC3gW+FmY3OmDC6aJBimpdvugQTiJCIVe9d1wR6fhyeUVZqRU6oXTxnSguM6uiz4TuH6sosvalPZrmsdNxpPWHi+uwu9AEEjZgjRAUm1aVqATgfA5EDluOahFDS8Iaxu8OF35WH0FiffQApCe0RlvpprQeKCtchuTkLwCdREZ+qWnkhWesd+FEMbEvcrcSa2a37fkgKlhfmKcMoYhwXs2lHMkz9xEKFgzpuSg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=eoebY1juRPvjtTByq+A0iuPqZY8HL4KfE0cT93WXgtI=;

b=fLFLCe/+JqbLsGI4vl74GuK0UK7WTKuzOKwELlg35K9sy+w0cq+UyG4J3zPhWQpgLtYvM9Dp4/WbFiwaDY07yG5VjUIodBUvl8J7ILLjjUW7MPF7tjrVs987WDBXQl06MN1u2fkqIl/+v1MAhlxw+focgLsIYd32pqhWNQJTCr5BHTmqiMgFbibUeuDDoLShfcAiDbaeGGSF9Fm1x/e9EMNNpez2LAAOaIuspE8rr637lsKMjv0xfol/+/weDAvpxaKzXdFUjVZP5xLI82bDnzCkk5681eFS7sTJyAWR18DeGhlk8eX+w/iscZCO6N13EMGJcvQggqYgCQwwzwTaZA==

Received: from MEYP282MB2718.AUSP282.PROD.OUTLOOK.COM (2603:10c6:220:14d::12)

by SY6P282MB3845.AUSP282.PROD.OUTLOOK.COM (2603:10c6:10:1d0::8) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6411.28; Mon, 22 May

2023 15:21:32 +0000

Received: from MEYP282MB2718.AUSP282.PROD.OUTLOOK.COM

([fe80::e080:33a9:2be3:46f9]) by MEYP282MB2718.AUSP282.PROD.OUTLOOK.COM

([fe80::e080:33a9:2be3:46f9%7]) with mapi id 15.20.6411.028; Mon, 22 May 2023

15:21:32 +0000

From: Daniel Smith

Subject: 1st Page on Google

Thread-Topic: 1st Page on Google

Thread-Index: AQHZjMDZ/gJfFqz9GUCOSjTnOSS4RA==

Date: Mon, 22 May 2023 15:21:32 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [AYE0HrGzybRh0Diw5cCyKqtZ8PQVcbzV]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: MEYP282MB2718:EE_|SY6P282MB3845:EE_

x-ms-office365-filtering-correlation-id: 1901a8b8-3997-4ea5-1b0e-08db5ad8394c

x-microsoft-antispam: BCL:0;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?Jc7io1w9x6ao8imoMTdvXTpH6B2J6BG4YGY5K1JX3nYb2lR8ZjJ2H/M1oO?=

=?iso-8859-1?Q?JREhkQPNHwxQ9lQ4X8aEURgwm4l+dcrgpYw5g8UKykffjuJSHOWSsKxGpo?=

=?iso-8859-1?Q?hms3uMMDixBiU7zMdzPRmkxnlKnJshA+E7cQt2f9KBxTW1kuW72QdreovT?=

=?iso-8859-1?Q?a/zJ1KVs/xfAfe0F9TQx/ly8VoaDc+QKVLzYoaDuTN+u4ObEhVl2PuQ20f?=

=?iso-8859-1?Q?bSV1kotFuaRn5OKBrh7NOSwFC2bWW8/nk3WylbTaqbrUwypt0wMAji/pXc?=

=?iso-8859-1?Q?CX4dbZl1MmQMjVxUHLfb9WC3fo+4InYYJ9fvQyQZ/4sXEdBITCytVbnTTe?=

=?iso-8859-1?Q?1GzjY0WNgs59kbwc3Q23cMWAGFlmNaMx2qhkjtRLM9Dy6jCtYqZfyVbNp+?=

=?iso-8859-1?Q?dpd/tkOzoRS8y0JckqYzpJ2bkZn+cO7Pev0UyN2bbdzjYmGyX7kquiFJlv?=

=?iso-8859-1?Q?sOULrw1ARZqX+nucpGu4CM+qTnjiSm41Wa49cXsRiBQMo+blJJv7Uc3eWS?=

=?iso-8859-1?Q?7W49T38nk//Gcb3SF0RhS0/bRPNIbDx6OChETGXD78Lv8nHgxnm4r+Suhk?=

=?iso-8859-1?Q?NYyixwHPDOsMppqH8IbhlRfA6XCAeOfcpuyubARxVijbSbvzo8q7Ep3mAd?=

=?iso-8859-1?Q?+ImQ5nz4XbbPryF0k6h/cPpCIcQuyJTje7qTkGNp9s05zQgB9O7rUupurZ?=

=?iso-8859-1?Q?07w6QJDN0Pkr4fS8c0xnm4QIZiHSmNog3+zI3YtIURqkhm0b3WyCC54Eq8?=

=?iso-8859-1?Q?Xpm3Yp+qe5mcLFPIQMSiOvjg1DpIaQIpJ7pRLaA9BX/Cssp9GzDRdydWyg?=

=?iso-8859-1?Q?VDx30qGuSD4o7qoM+9PfdQK9zBfBPl3do8yamOHVul1CtOwwmrPWzugDyq?=

=?iso-8859-1?Q?L/W+cJd1ZGRT4Mn1xCR8U7vN2eUO08KOj2mb/ZbRolMvN4DanDpb8oxXGN?=

=?iso-8859-1?Q?LZNnwi0hsnmtudhGrGS15gO2JN7YgnJn5/zuS3Cr6HZhVgJe6BsFxzRpBY?=

=?iso-8859-1?Q?tgZ2+5PXMBmf/GOy/jozNaOuMlveczU1HSUfbwovbgcPfKqAI8EyL9XgFN?=

=?iso-8859-1?Q?fVe1dLMxPdNlRDCaiIsJPFxzl3rXo5hSFAs1XXJuGsTfVUCYavmapRyeEb?=

=?iso-8859-1?Q?UsknTJNg/oopcVEihu0eywWNkSFPxHLti/5nd1YhjXXmLr6++Zelf9pLeB?=

=?iso-8859-1?Q?Sojn0XTKt7xPfLwlfG+9ag9ea8nHTwzuONufmPKpNY+yajBuc2TDFwFLau?=

=?iso-8859-1?Q?/g82LtopVnuYl6BvVXJtvsi2c7sxDSRf3oh0pN3d8=3D?=

Content-Type: multipart/alternative;

boundary="_000_MEYP282MB27183D63FF5C551B28F8D570B8439MEYP282MB2718AUSP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: MEYP282MB2718.AUSP282.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 1901a8b8-3997-4ea5-1b0e-08db5ad8394c

X-MS-Exchange-CrossTenant-originalarrivaltime: 22 May 2023 15:21:32.3442

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SY6P282MB3845



--_000_MEYP282MB27183D63FF5C551B28F8D570B8439MEYP282MB2718AUSP_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,



I was going through your website & I personally see a lot of potential in y=

our website & business.



With your permission I would like to send you a SEO Proposal with prices sh=

owing you a few things to greatly improve these search results for you.



Let me know if you are interested.



Looking to hearing from you.



Kind Regards,

Daniel Smith

Business Development Manager

******************************************************************





--_000_MEYP282MB27183D63FF5C551B28F8D570B8439MEYP282MB2718AUSP_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








color: rgb(0, 0, 0);" class=3D"elementToProof ContentPasted0">

Hi,






I was going through your website & I pers=

onally see a lot of potential in your website & business.







With your permission I would like to send you=

a SEO Proposal with prices showing you a few things to greatly improve the=

se search results for you.







Let me know if you are interested.







Looking to hearing from you.







Kind Regards,


Daniel Smith


Business Development Manager


*********************************************=

*********************













--_000_MEYP282MB27183D63FF5C551B28F8D570B8439MEYP282MB2718AUSP_--

Phish spam from Indonesia

Posted by Dave Yadallee on
Return-path: <>

Envelope-to: dave@nl2k.ab.ca

Delivery-date: Mon, 22 May 2023 10:09:01 -0600

Received: from [103.193.176.243] (port=33007 helo=mdpsupplies.co.uk)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

id 1q183s-000Cu6-9R

for dave@nl2k.ab.ca;

Mon, 22 May 2023 10:07:14 -0600

Date: Mon, 22 May 2023 15:59:56 +0200

From: =?UTF-8?B?Tm90aWZpY2E=?=

Reply-To: =?UTF-8?B?dHJhemFiaWxpZGFkIGRlbCBlbnbDrW8=?=

To: dave@nl2k.ab.ca

Message-ID:

Subject: =?UTF-8?B?IkxBLU5PVElGSUNBIERFTCBUVU8tUEFDQ08i?=

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

List-Id: "0" <4.CgeKMmuqYWcuAkuJuAwyejeiESP4UCzE.localhost>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-ID: xpro-9985-1488:xpro-9985:MAILING:inxmailde

X-CSA-Complaints: csa-complaints@ional.co.uk

X-Mailer: Inxmail EE 4.8.48.825













Track & Trace





















 






















































































imageTraccia il tuo pacco: notifica di consegna n.34632900-371?




Track Packages Anytime, Anywhere | Register / Sign In | Register / Sign In image
































































ID DI TRACCIAMENTO 58412233520000 image



TRACCIA image


image Non siamo stati in grado di consegnare il tuo pacco in quanto non c'era nessuno che potesse firmare la ricevuta di consegna.



image Siamo qui per informarti che abbiamo bisogno di una conferma dell'indirizzo per rispedire nuovamente il pacco.


CONTROLLA QUI




 




Se non desideri più ricevere queste e-mail, puoi annullare l'iscrizione tramite clicking here or by writing to
6705 W Highway 290 Suite 502 PMB 3219 Austin, TX 78735



 











Nigerian Gmail spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 22 May 2023 07:36:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1q15hE-0005Zo-Ey

for dave@doctor.nl2k.ab.ca;

Mon, 22 May 2023 07:35:32 -0600

Resent-From: The Doctor

Resent-Date: Mon, 22 May 2023 07:35:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yb1-f182.google.com ([209.85.219.182]:59646)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1q15cR-000ABG-Uu

for root@nk.ca;

Mon, 22 May 2023 07:30:39 -0600

Received: by mail-yb1-f182.google.com with SMTP id 3f1490d57ef6-ba81deea9c2so5278311276.2

for ; Mon, 22 May 2023 06:28:37 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1684762111; x=1687354111;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=wHYlecEDrlbFEmnSgJ9ODi4u30t/3IwuJr8OYHwROlo=;

b=b4tL7na2pOny0YQW8MoLMHHGV4SFbwpHcIGHXNTTYXQSgVP/F+RYfFzRmWKH3sUvVQ

7EV8laVxN5SkdHUBYwX4vmGAhQnfMOhZKBe04+lMsyIjkTcyqx6GAbaxo7D2Tu5IUbyi

YIRDEZC+W1QtqSzVau+u5H99aQCyCx9/truNlM4JE2FuouPo/U7P0ktATYntrSupmZaS

D+JrJKIKVhYat50EEa17MzFlfgHLNx7BdvkfJiC4CJKT3SnyspwTbDvtcNCCBg37BEYt

Q5e0ZVuzg+RPdipCBlpk7vs8rEdqbS/g9DbNDHnj4ghUlGaw/gl/ANF6cLxDnh7SkODx

LHWQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1684762111; x=1687354111;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=wHYlecEDrlbFEmnSgJ9ODi4u30t/3IwuJr8OYHwROlo=;

b=efEag0rxv5ddvvkQCwkOgnIZGS8h1fAHhddzcw63H3oV0do5ym6WXEwE9PO4UPxhCD

5u7K4ANIZfXDXlUXPixweuKAle6OJOCydimETqwnirgcIHOX/wgRIQJpn8OyFrm6Vt5G

3QH1sxtsHjcB+1XGNe0uI7EwyCEui48AduJs/qoQ2xzgssI1okhWQbomT3T9SonamwgG

a7oAfDgiSQSZ9jHu0FiauMxTdXgor9ISFBluNDyIgzhoM5C/UQOk6r6h+6Yc8/y0x/q3

5F4pm1K+qDvg5OK4UqdiRVLkzOI81cuwO58VQtkqv9Oi2ZiadH/SRzqUZMGG/F6jUNBi

uszA==

X-Gm-Message-State: AC+VfDyOAClUvue8vtDsZZjoFDIR9YvxBRUkA6kFGavGq6ERf+ggYeaC

EBNZreLiIUQyPvGARuZQJO87DUrfddq0CobrJDc=

X-Google-Smtp-Source: ACHHUZ6wXEv02aXDqt8zln05nYKLn/M7iF617QoUKnqcwRisETreanpZFuMiZWyESR1B0bSQEViIlBFn+pLkp/y6xnI=

X-Received: by 2002:a25:c187:0:b0:ba7:2d19:2430 with SMTP id

r129-20020a25c187000000b00ba72d192430mr9953511ybf.28.1684762110550; Mon, 22

May 2023 06:28:30 -0700 (PDT)

MIME-Version: 1.0

Reply-To: sjc.bfs00@msn.com

From: Matt Falla

Date: Mon, 22 May 2023 21:28:08 +0800

Message-ID:

Subject: Re: Payment Ready

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000216a6705fc483f70"

Bcc: root@nk.ca

X-Spam_score: 18.5

X-Spam_score_int: 185

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Beneficiary of Funds, I am wondering why you left your

funds unclaimed for this long, However,I am in the right position to process

the release of your funds within a couple of days without any d [...]



Content analysis details: (18.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.182 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[pc40162051(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[sjc.bfs00(at)msn.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[pc40162051(at)gmail.com]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.182 listed in wl.mailspike.net]

Subject: {SPAM?} Re: Payment Ready



--000000000000216a6705fc483f70

Content-Type: text/plain; charset="UTF-8"



Dear Beneficiary of Funds,

I am wondering why you left your funds unclaimed for this long, However,I

am in the right position to process the release of your funds within a

couple of days without any delay or breach of the law. The sum of

US$4,650,000 was approved to be released to you within a couple of days.





Kindly get back to me as soon as possible with your full details for more

information. Do take note that I am contacting you in a private capacity.



Yours Faithfully ,



Mr. Matt Falla.



--000000000000216a6705fc483f70

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Beneficiary of Funds,
I am wondering why you left =

your funds unclaimed for this long, =C2=A0However,I am in the right positio=

n to process the release of your funds within a couple of days without any =

delay or breach of the law. The sum of US$4,650,000 was approved to be rele=

ased to you within a couple of days.


Kindly get back to me as so=

on as possible with your full details for more information. Do take note th=

at I am contacting you in a private capacity.

Yours Faithfully ,
=


Mr. Matt Falla.




--000000000000216a6705fc483f70--

Nigerian Spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 22 May 2023 07:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1q15gP-0003Rp-SL

for dave@doctor.nl2k.ab.ca;

Mon, 22 May 2023 07:34:41 -0600

Resent-From: The Doctor

Resent-Date: Mon, 22 May 2023 07:34:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f169.google.com ([209.85.210.169]:48519)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1q12hv-0007hW-VZ

for root@nl2k.ab.ca;

Mon, 22 May 2023 04:24:09 -0600

Received: by mail-pf1-f169.google.com with SMTP id d2e1a72fcca58-64d5b4c400fso1676901b3a.1

for ; Mon, 22 May 2023 03:22:04 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1684750918; x=1687342918;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=+YpGm1Tyd3+VliptUWBbv9bL/rjxhPUqKgTiTWNnKvU=;

b=LV9DIpUx+riI3pPjmz55L8DIwta+3BclHltlGcsqN8E0pHbtBEdv+7whbKJfnImM9F

4hKTaaLVxOQWxWAcQdrktvvuj2i3jTF/+7H8++PEtOcd+PSgB1V780lquxgkbfGS1mwD

N6b/uTQBJ+voRRZsLTd3oocV0Oj+smNaHVlR3mhwjWe3xxu7sFM8FrvASyqSL1AUmEO0

tZ3mjUpS2w9Ih6h+Ze/fCSzXxd73H//eQdAnXbK43oaKhTp0OTBzRIDWiaBqd1hn6OFO

FVGCyZoCaHtto1Ja3knXFZT04W7rFZRXYrzXtLTcMsQtWe5OWznMzWZd6nPiLTGDtaXh

x+4w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1684750918; x=1687342918;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=+YpGm1Tyd3+VliptUWBbv9bL/rjxhPUqKgTiTWNnKvU=;

b=MQhjSTJ4oWyU4zWhLyOG004Xq1HjBCBpAzy5z3e17ecz1c+fwUput4gpNJL8ilo/nD

6zzkf9vZ4sp0YSFUvRe8r218kRQPFyRG+juCPPWbzpaDRYvZE9oM5oTVpP88dcDqKm+l

NsCPqz1/JHhTaNY5EPHy2Akx5k1xGF0tztdFjkQbwqjB5oqxtf5PEknC36Cu9vjhcDaO

XZPnMisr0Fbdab79OsYRfU5eaH8X+ybNY2nZvYzJy2e8Er7sujRUx4MBnaAADHfne5pI

G/WyS7eNTosaJXn0JjBqzwKY+ulX+KZusvWFS8ay1WB6VfxZ3Eh0v0zP1tYNycZnooqv

PlcQ==

X-Gm-Message-State: AC+VfDxoWyrUo5/8uav7XvftWXPwvaX9O0x9DbH2xdJ6k1SiB084Xw6P

Kr0TxB0vYhz3FhgrawAFL5ZkJGGYm6agKFvXMvLALLen1jfPUklw

X-Google-Smtp-Source: ACHHUZ7FCJmec/vMA5LHBXI6fdnl9oHC0LP5q3hN+pblKBMqxe1bWVdrIGkF3VByO8YAxXUZJdOPPk6zUGvr9GwiLQU=

X-Received: by 2002:a05:6a20:5489:b0:100:7ac0:b32d with SMTP id

i9-20020a056a20548900b001007ac0b32dmr12404734pzk.44.1684750452698; Mon, 22

May 2023 03:14:12 -0700 (PDT)

MIME-Version: 1.0

Reply-To: lmorrison101231@gmail.com

From: Linda Morrison

Date: Mon, 22 May 2023 06:13:45 -0400

Message-ID:

Subject: From: Mrs. Linda Morrison

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000044b22105fc458804"

Bcc: root@nl2k.ab.ca

X-Spam_score: 16.3

X-Spam_score_int: 163

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: From: Mrs. Linda Morrison My name is Mrs. Linda Morrison,

a widow and a devoted Christian from Australia. I am married to Late Mr. Keith

Donald Morrison who worked with the Australian Embassy for 20 years before

he died in 201 [...]



Content analysis details: (16.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.169 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[dr.davidnellor02(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[lmorrison101231(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[dr.davidnellor02(at)gmail.com]

2.5 MILLION_USD BODY: Talks about millions of dollars

1.1 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.169 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} From: Mrs. Linda Morrison



--00000000000044b22105fc458804

Content-Type: text/plain; charset="UTF-8"



From: Mrs. Linda Morrison



My name is Mrs. Linda Morrison, a widow and a devoted Christian from

Australia. I am married to Late Mr. Keith Donald Morrison who worked with

the Australian Embassy for 20 years before he died in 2010. We were married

for 15 years without a child. He died after a brief illness that lasted for

only four days. Before his death we were both born again Christians and we

lived happily.



Since the Death of my late husband, I decided not to re-marry or get a

child outside my matrimonial home which the Bible is really against. When

my late husband was alive he secured US$11.6M (Eleven Million Six Hundred

Thousand United States Dollars) with the reserved Bank here in Australia.

Presently, this money is still with the financial institution. After the

death of my late husband, I have been suffering from arthritis. Two months

ago, my doctor diagnosed me with terminal cancer and stroke; I have

approximately twelve months to live. But what disturbs me most now is

stroke. I am currently confined to a wheelchair, and am being cared for by

a nurse.



Before the Death of my late husband, he made it clear to me that %40 should

be given to you for receiving the funds in your Bank Account while %60

should be used for Orphanages and Widows (humanitarian work).We have no

children and my husband didn't want his brothers to inherit the fund. My

Bible made us understand that blessed is the hand that giveth. My late

husband and I made this decision because we don't have any child that will

inherit this money.



I am not afraid of death hence I know where I am going. I know that I am

going to be in the bosom of the Lord. Exodus 14 VS 14 says that the lord

will fight my case and I shall hold my peace. As soon as I receive your

reply I shall give you the contact of the reserved Bank where the fund was

deposited. I will also give you all information regarding the deposit of

this fund. I want you and your family to always pray for me because God

works in mysterious ways. My happiness is that I lived the life of a worthy

Christian. Whoever that wants to serve the Lord must serve him in spirit

and truth. Please always be prayerful all through your life.



Please assure me that you will act accordingly as I stated herein %60 of

US$11.6M (Eleven Million Six Hundred Thousand United States Dollars) for

humanitarian purposes %40 for you.



Hoping to hear from you soon via email (lmorrison101231@gmail.com), Remain

blessed in the name of the Lord.



Yours in Christ,

Mrs. Linda Morrison



--00000000000044b22105fc458804

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





nature" data-smartmail=3D"gmail_signature">
From: Mrs.=

Linda Morrison

My name is Mrs. Linda Morrison, a =

widow and a devoted Christian from Australia. I am married to Late Mr. Keit=

h Donald Morrison=C2=A0 who worked with the Australian Embassy for 20 years=

before he died in 2010. We were married for 15 years without a child. He d=

ied after a brief illness that lasted for only four days. Before his death =

we were both born again Christians and we lived happily.


v>
Since the Death of my late husband, I decided not to re-marry or get=

a child outside my matrimonial home which the Bible is really against. Whe=

n my late husband was alive he secured US$11.6M (Eleven Million Six Hundred=

Thousand United States Dollars) with the reserved Bank here in Australia. =

Presently, this money is still with the financial institution. After the de=

ath of my late husband, I have been suffering from arthritis. Two months ag=

o, my doctor diagnosed me with terminal cancer and stroke; I have approxima=

tely twelve months to live. But what disturbs me most now is stroke. I am c=

urrently confined to a wheelchair, and am being cared for by a nurse.
=


Before the Death of my late husband, he made it clear t=

o me that %40 should be given to you for receiving the funds in your Bank A=

ccount while %60 should be used for Orphanages and Widows (humanitarian wor=

k).We have no children and my husband didn't want his brothers to inher=

it the fund. My Bible made us understand that blessed is the hand that give=

th. My late husband and I made this decision because we don't have any =

child that will inherit this money.

I am not afrai=

d of death hence I know where I am going. I know that I am going to be in t=

he bosom of the Lord. Exodus 14 VS 14 says that the lord will fight my case=

and I shall hold my peace. As soon as I receive your reply I shall give yo=

u the contact of the reserved Bank where the fund was deposited. I will als=

o give you all information regarding the deposit of this fund. I want you a=

nd your family to always pray for me because God works in mysterious ways. =

My happiness is that I lived the life of a worthy Christian. Whoever that w=

ants to serve the Lord must serve him in spirit and truth. Please always be=

prayerful all through your life.

Please assure me=

that you will act accordingly as I stated herein %60 of US$11.6M (Eleven M=

illion Six Hundred Thousand=C2=A0 United States Dollars) for humanitarian p=

urposes %40 for you.

Hoping to hear from you soon =

via email (l=

morrison101231@gmail.com), Remain blessed in the name of the Lord.
>

Yours in Christ,
Mrs. Linda Morrison

div>




--00000000000044b22105fc458804--

Web Design / App / SEO spam from Hotmail

Posted by Dave Yadallee on