Nigerian Gmail spam

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 26 May 2023 14:41:00 -0600

Received: from mail-ed1-f54.google.com ([209.85.208.54]:47283)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1q2eEs-000NCm-2z

for dave@doctor.nl2k.ab.ca;

Fri, 26 May 2023 14:40:46 -0600

Received: by mail-ed1-f54.google.com with SMTP id 4fb4d7f45d1cf-510eb980ce2so1677133a12.2

for ; Fri, 26 May 2023 13:38:42 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1685133516; x=1687725516;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=tRA3JMX0A9nBXRv5+U2oAyf9Xuos41oc+dKm7W3IQHc=;

b=NQuf9RXHBClXkYI8rB/s3Oe98ZxBxO1CZFdId4mXIox2Tu/hgqjLs+HToUBqKeWVgC

KDZIBwS80sRaVioXQqxP6/rMKxEeIO+P+X0yq4lvNfYe9GGCCZw7pbn2GvZU6iM75tgi

SZfZ3Gwcya0UgIhMwTKiGiTYPVxbUaAjBfohhZm4V7WBb42ziI8G+DSlNPNTqzcEVXf/

CqXLWYBr+nkkKi3p2SsGEMT2Zgw/dNeZoZA+S1/sphZl1RXGsgPGhpRzhJk08FCJNzvR

wu3MH0v+XkWKwDbAtBYoF0OvUoz69fNfJhmJ6zB7mO6vM5c0//b4qQ8BbqU/kz1aciBT

OkYQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1685133516; x=1687725516;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=tRA3JMX0A9nBXRv5+U2oAyf9Xuos41oc+dKm7W3IQHc=;

b=aqRQVIXXTOgk4RFVCcJrt7nrDf878DhafWtk2Jbl4bCmzyjvurv2faoS0S8CkJYjKu

WtKcmCWKCzb9Ijowz8ykjG1DBBr+UDwU8VQa9otOugrHMPCtuqwHRFcnQEnt+K4yA5p/

fsBwZuRQ7SMY8h/nDT055tnE6QkEOTDHA/2d1bVtEPg4+qC7bPN+VuzjkJLCxTyBxQ9E

EXQWTvFprSukO+W0xfhV4QhAT8pUGeAdIgXC71Zmulin7o7kjjDBkxAcmX9tt+k/Hhg9

46r8CTlTv1diiY5jkks/CQZmQRiKqMDh6l1teHbcLn0dF65raWAEy9SUT3s9vS9g9Khv

WR5w==

X-Gm-Message-State: AC+VfDyTBhGR1iw35qHUhaodfoYzGczvWllBt+B6c/LodYA/oU2DC7ma

nbAc1C1nWZVDqayaVewMcjcilkvpOOzVBO2iqsU=

X-Google-Smtp-Source: ACHHUZ5YnzbDcCsa2f6ScSi/dYDB4SvHgg+hinY6T5t6OgBYbFXBglNvkwoVQTnQ26PnjXFKEgygi+CtN8mbMA6ou/Y=

X-Received: by 2002:a17:907:9805:b0:973:72ca:497f with SMTP id

ji5-20020a170907980500b0097372ca497fmr3560357ejc.17.1685133515741; Fri, 26

May 2023 13:38:35 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a17:907:1caa:b0:971:c931:3669 with HTTP; Fri, 26 May 2023

13:38:35 -0700 (PDT)

Reply-To: mrselizabethedward16@gmail.com

From: "Mrs. Elizabeth"

Date: Fri, 26 May 2023 21:38:35 +0100

Message-ID:

Subject: Your Response

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 14.4

X-Spam_score_int: 144

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello My Dear. Please do not feel disturbed for contacting

you, based on the critical condition I find mine self, though, it's not financial

problem, but my health, you might have know that cancer is not what to tal

[...]



Content analysis details: (14.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.54 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.54 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mrselizabettedward(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[mrselizabethedward16(at)gmail.com]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.0 T_MONEY_PERCENT X% of a lot of money for you

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Your Response

X-Antivirus: AVG (VPS 230526-4, 5/26/2023), Inbound message

X-Antivirus-Status: Clean



Hello My Dear.



Please do not feel disturbed for contacting you, based on the critical

condition I find mine self, though, it's not financial problem, but my

health, you might have know that cancer is not what to talk home

about, I am married to Mr. Edward Herbart who was a businessman in

this country before dying some years ago? We were married to many

years without a child. He died after a brief illness that lasted for

five days. And I myself have been suffering from an ovarian cancer

disease. At this moment I am about to finish the race in this way



Since his death I decided not to remarry, when my late husband was

alive he deposited the sum of ($5.000.000.00) million dollars I have

confirmed from the bank in Burkina Faso where the fund was deposited

presently this fund is still in Bank. And My Doctor told me that I

don't have much time to live because of the cancer problem, having

known my condition I decided to hand you over this fund to take care

of the less-privileged people,



You will utilize this money the way I am going to instruct you. I want

you to take 50 Percent of the total money for your personal use While

50% of the money will go to charity" people and helping the orphanage

and the poor I will really do appreciate if l can put my trust on you

to help me claim my fund for the mission of the Lord in donating it to

the Motherless Baby Home (ORPHANAGE). I want you to know that am right

here lying on the sick bed at the hospital waiting for the Lord's call

but I really want this mission to be well accomplished by the God I

don't want my husband's efforts to be used by the Government. I grew

up as an Orphan and I don't have anybody as my family member,



I am expecting your urgent respond.



Best Regards.



Mrs. Elizabeth Edward.

Web/ SEO / App development spam from Microsoft

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 26 May 2023 11:17:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1q2b2q-0008fY-QY

for dave@doctor.nl2k.ab.ca;

Fri, 26 May 2023 11:16:04 -0600

Resent-From: The Doctor

Resent-Date: Fri, 26 May 2023 11:16:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-psaapc01olkn2023.outbound.protection.outlook.com ([40.92.52.23]:31872 helo=APC01-PSA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1q2XHx-0002zf-AE

for sales@nk.ca;

Fri, 26 May 2023 07:15:29 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=SZFCY0hh442CMl5J0oxukMlsR/6uyO+KVB0Tgcn54gzEVV7YI8HGweQtPxtqiNYVishBiGBUGiWzVbR+L6uVhGHs8g/9aG9ZPSmHnrhjPlaBj4mHrTadd3AT6befqDpHG3S4p9HzkR2M2Z/TNYI+U38kkwmdF062nvkyM8ugqSRl6zJHrx6QcJjidPZdEHmV69u/q70PC5/8dda/qoXNL7yRYMHeu0gN+dxKoLbH0uju/RXEj4lHKBWoESLXB7LZpwhBJkEK7EaextXmvaSUfYxHGOR9PzBdZpUEGrs9XJnc7oK7pikdg3s+dBwS0S0bThxBCPQjQkzVoZjuA5sweA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=DDDoa++eqD+Xti0Ass9Rnb2wZx7TDWoV0WyDowgxfY4=;

b=Zh9w97w/0xRfWwa07fBfRky8PWxTb4TOeD681Ma3CrzxT9naJs+eNeZSEsDSuYLIfy1KMtn8F1DWe+qqY590kLWw2B2gC9rO9OKpaZXcnADm3lKnnUkEHNH/8168mvnxhv3ZJN9YmZ7Uyfw+mlZMe7LIvrRyRNol+tbqABMc4xwYBXG0aVLg0v4dTAhS0+MN4if8omMNuyItsQ/Lwwip7C0fwpgdMCFnpEzlaw6pdwTK8gafjmqLm349Sg5trdYRQo1OPFYIM9qhpMJod7jpH2GIBfbAYvWnsoJQvgSOHNi8vTXez0rcoLBimLzHj0+gQWXBq0SM4aNbmKNqH2xTFw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=DDDoa++eqD+Xti0Ass9Rnb2wZx7TDWoV0WyDowgxfY4=;

b=K+IfY2qLj4+qB1NHDnEWx9P/Oef1BFdnKungOw4mVHYosbPhoU65yRPgpqUBSMcVpc3ZzlPJN4fmAwtx8KFe+Eg57q+uOSOrRk9yZjYHqHOFSbcBT0wIFBqqFdJ45x6SRb95x35uzytsKnhd3kkGj5dx73nG6se4HAqaYQmNVZ9S9ogkq1Sonu09scmxZ6UokZAcepteddBc2m8BH+ZpwxFYjN89YwgzXl8UUd4jWh9kCpo7gpC9DjAtjkX2nvWIfskp77Bf2mFhKmOeYAAvAAsQyIDY/nDIR/digkYkNXMF+vFAAQmsALwqAm8zUYf8BYdN4qBmlkDgjVLtL6A5YA==

Received: from PUZPR04MB6368.apcprd04.prod.outlook.com (2603:1096:301:ea::8)

by TYZPR04MB4237.apcprd04.prod.outlook.com (2603:1096:400:24::14) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6411.29; Fri, 26 May

2023 13:13:16 +0000

Received: from PUZPR04MB6368.apcprd04.prod.outlook.com

([fe80::bfc3:4a92:16a5:e6d8]) by PUZPR04MB6368.apcprd04.prod.outlook.com

([fe80::bfc3:4a92:16a5:e6d8%3]) with mapi id 15.20.6433.018; Fri, 26 May 2023

13:13:16 +0000

From: "Ibrahim Khan"

To:

Subject: design

Date: Fri, 26 May 2023 18:41:26 +0530

Message-ID:



Content-Type: multipart/alternative;

boundary="----=_NextPart_000_1A8C_01D99001.EE4EF7E0"

X-Mailer: Microsoft Office Outlook 12.0

Content-Language: en-in

Thread-Index: AdmP018S96Z05plvQ8OM6GV8nb6KbA==

X-TMN: [gI8qO9X4x0U7JpAgNiwOWy+PX3znkLa+vzQAvFTrOYgK/qqcNtz5bcnvsqsRVSRU]

X-ClientProxiedBy: PN3PR01CA0105.INDPRD01.PROD.OUTLOOK.COM

(2603:1096:c01:9b::9) To PUZPR04MB6368.apcprd04.prod.outlook.com

(2603:1096:301:ea::8)

X-Microsoft-Original-Message-ID: <1a8b01d98fd3$d496bbe0$7dc433a0$@com>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: PUZPR04MB6368:EE_|TYZPR04MB4237:EE_

X-MS-Office365-Filtering-Correlation-Id: 57474368-5288-4ff7-6031-08db5deaf6b6

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?us-ascii?Q?RN2rWVVnDBpxSmDfNx3GxYCGZXRfMmFOmScPScOerG9ILE3BkiSeyv/kPGv1?=

=?us-ascii?Q?mHZnLx5eLZkQEHuNav+0qhUqL3OlEF0y3iqfxrR/ztXcx86fquuQWDBwGmme?=

=?us-ascii?Q?wtssKaOrelXxCdZyxH0VzmDvnQ70ATY30UvzhdxAmMB2jvFJDcp+IivDj6Gp?=

=?us-ascii?Q?pL7GAsk0U4OmKugR2hBInUKxBUBKUTV07hoppyrprn64XN+NBCuCsoLy1Jdh?=

=?us-ascii?Q?DJm7YUcbJHQ+NQoWJETC/6E5aDMuJWPvHhw8C9uvN6Q+yLlzmn2ttFLcin5w?=

=?us-ascii?Q?OeaVHEayh/5ACp77aLHM7yI32bmhBj/Kl5OhM1HVLXem7jnfEFGOvIsC8fa9?=

=?us-ascii?Q?TGMxGtao1j6SGJs/oHfpEb5XwHhrKpekq2A8oNA4fb7IMSyjzeTefuw6jmgF?=

=?us-ascii?Q?/wgoaelyNxPTvIIip/A3N1uQKUXOHyZjJph9EG/lvAoDLspK95CWlMjoij5k?=

=?us-ascii?Q?5qudi4NItocjnZEhoUauidSUEnteZBo14MqrChnCDBaPhiWdL7jkHym8OsN2?=

=?us-ascii?Q?IJ6Alo5lsn/Sau0N52wTJIBUpyJ906ft6CakfNtcNt2ItvwHhhnldR1wGoeo?=

=?us-ascii?Q?DQF4dqlk6+ToFcHoALyXDVPX0f0+NMchoyuejUdqBFqiSZ4zEqJxVSeCdlKL?=

=?us-ascii?Q?WD0GnHifrMPxFaa81efNyP2xXt6hV8SASk0/JfqWyMCurB+EbbtvchTIdI/V?=

=?us-ascii?Q?atTyeli5x5bNxyt7VNJ2leDSTPm+NL/Bx994O2i3VzFxYECYoAUN9qzcBY+A?=

=?us-ascii?Q?1Hr3R+z0X2Wx9iEz/HzlJyxNAr2RjYqnzA11owZ/MmBQYFoLqkMtkgYB6bgS?=

=?us-ascii?Q?6mDUaPVh8LFqMw9PvqD+Qu1NTsJooaRY3navjX//otybVxe/MaYKf4Lp5jIF?=

=?us-ascii?Q?UZJcup2Swk8qMmHIfERg/QauUfDTj9tQhN+rBILeShny1HLe3QV2Z9jmbznm?=

=?us-ascii?Q?ucvF1eKTJ0So6jsq0OSiKM7yllhkxVd32RZu3hd7jjsoyobJdH5QvXNMDRI6?=

=?us-ascii?Q?tylWrXYbagrd0WD11yWBc8NTCbDPloxN4xcyV47b6gGgF9buRdEnzDIRt3OP?=

=?us-ascii?Q?V5C7XHdlCIA06v68hzrydLtJVYqTmDhIpRueCcrQbh5O66T8qrfKr6yL7nIZ?=

=?us-ascii?Q?WtAuOM0KwbV7fL+da6QCii7n05JIb820+0D+nka7VdZ0b52dcn1KRjnqS0bH?=

=?us-ascii?Q?260Ty/lZTYYIGttOu8XvVSU3CprcmKacd4JtMux+AGInz/SJXoVJGNxLOkt2?=

=?us-ascii?Q?V3s8+PkJ7TETx6RWwFSWDzVXXA+8SZ4Yp3E1KSe/SN+OMl71e2285I2Ow4rh?=

=?us-ascii?Q?bKM=3D?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: 57474368-5288-4ff7-6031-08db5deaf6b6

X-MS-Exchange-CrossTenant-AuthSource: PUZPR04MB6368.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 May 2023 13:13:15.0503

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR04MB4237

X-Antivirus: AVG (VPS 230526-4, 5/26/2023), Inbound message

X-Antivirus-Status: Clean



------=_NextPart_000_1A8C_01D99001.EE4EF7E0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,







My Name is Ibrahim from India. I have over 14+ years of working experience

on WP development.







This includes:







WP design



WP solutions



Psd to WP theme



HTML/CSS to WP theme



WP theme customization



WP custom development



Transferring WP websites from one host to another







Note: We have a profile on UpWork as well so we can work together on that

portal for your assurance.







I can create a responsive WP website within 1 to 2 weeks based on

requirements. I will be happy to work with you.



Please give me a chance to impress you!







Thank you,



Ibrahim Khan



Marketing Manager





------=_NextPart_000_1A8C_01D99001.EE4EF7E0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">


>



















Hi,





 





My Name is Ibrahim from India. I have over 14+ ye=

ars of

working experience on WP development.





 





This includes:





 





WP design





WP solutions





Psd to WP theme





HTML/CSS to WP theme





WP theme customization





WP custom development





Transferring WP websites from one host to another=





 





Note: We have a profile on UpWork as well so we c=

an work

together on that portal for your assurance.





 





I can create a responsive WP website within 1 to =

2 weeks

based on requirements. I will be happy to work with you.





Please give me a chance to impress you!





 





Thank you,





Ibrahim Khan





Marketing Manager

















------=_NextPart_000_1A8C_01D99001.EE4EF7E0--

Nigerian spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 26 May 2023 06:29:03 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1q2WYq-000LdA-KS

for dave@doctor.nl2k.ab.ca;

Fri, 26 May 2023 06:28:48 -0600

Resent-From: The Doctor

Resent-Date: Fri, 26 May 2023 06:28:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f44.google.com ([209.85.208.44]:45442)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1q2RE3-000Hyi-Vd

for doctor@doctor.nl2k.ab.ca;

Fri, 26 May 2023 00:47:04 -0600

Received: by mail-ed1-f44.google.com with SMTP id 4fb4d7f45d1cf-513fd8cc029so607905a12.3

for ; Thu, 25 May 2023 23:45:00 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1685083494; x=1687675494;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=/ICULnOIjLNJVzLdKMMIrMnZOY6hVRlJZVGvwKWONkA=;

b=bmfpUCzmjc5iD0o/74xuBA57PHn0+kB930lgYIPQWLdN/aAcDKADeSEIdecGOqiDmZ

44dXT6yDToFGynxhFYFxsJlXDLwqh+29Ff9FHuemFTr3/4ZDzUoVBvNrvMM3X1TuNSVL

OZV90iz29jcRDkRFgiwNPFoMiSun31RqT2j5wvnkVX/f8/jOUmWZ6A+aq27w3N5kdXDE

LE+aq8GnZZzE3AhAF/GY3lV4DkYIzIV24HHtJ0EmyjCIhhXiNqvVGIHqxkJPOHIVIxTr

IKULgwtdUquV0/W9a7CB9fitrHoK0Yi5u0DKzqHu7b7pF6QjG/7QfhiguYowmrmC4gIo

tzRA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1685083494; x=1687675494;

h=to:subject:message-id:date:from:sender:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=/ICULnOIjLNJVzLdKMMIrMnZOY6hVRlJZVGvwKWONkA=;

b=KPeu9xO3BCgHXQE5fPnvZ4U2+O82tz1SeXGZyqdkZHhZiI/qUZrxTkVkZ6pIxvXKSD

vkjI6xuTZKZU5Eyf5ZfOd30+U+lCt+rnZDVm2roVRkvMH9z5d9eJVlj6jvjjRzFxs4uz

bT/7z+jR6ZWnNp9TBJnU3KDbwN9zrKJzG4fgR/EYri29KYJYGTgUqWYvFOVs11Fl7Mhj

25QB8h1JAtjtIphrk9Lc6phv2n9HgKgaDoKs12A4vbRKLgBH+t1ATt7V15pJypP5elqM

jvISJgllYGNyqHrFTUo7lpkK9dnv8KrjqaMCvMyknNCdcLoE4j52jY0++iN/ptZcxMOV

AmZw==

X-Gm-Message-State: AC+VfDyYJpVoKzJpm1VOYuwNJwc8PMIo1KeOEalydLADyv2xE08Sk11d

CvXcE7F+EOvEF9gRZBMlNGrizaYJXzFb1L/3qkc=

X-Google-Smtp-Source: ACHHUZ6KW+efaGgq0y74weGy3MDCSD1IphxZ+23NuTbYTMjEFGeUuRmt9GKoU/4dL8hiJ2I0LAkjY9lgfqBgnlVGD6o=

X-Received: by 2002:a17:907:9816:b0:971:5a46:8ab4 with SMTP id

ji22-20020a170907981600b009715a468ab4mr943231ejc.66.1685083473106; Thu, 25

May 2023 23:44:33 -0700 (PDT)

MIME-Version: 1.0

Sender: amoduibrahim194@gmail.com

Received: by 2002:a17:907:948a:b0:94f:8ff0:d883 with HTTP; Thu, 25 May 2023

23:44:32 -0700 (PDT)

From: "Mrs Yu. Ging Yunnan"

Date: Fri, 26 May 2023 06:44:32 +0000

X-Google-Sender-Auth: A105lsezxojsIf6GoBAkMftHmGA

Message-ID:

Subject: hello dear

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 11.6

X-Spam_score_int: 116

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: hello I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the

doctor said I will not survive it because all vaccines has been given to

me but to no avian, am a China woman but I base here in France beca [...]



Content analysis details: (11.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.44 listed in list.dnswl.org]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[amoduibrahim194(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[amoduibrahim194(at)gmail.com]

2.5 MILLION_USD BODY: Talks about millions of dollars

2.5 HK_SCAM_N2 BODY: No description available.

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

2.0 HK_SCAM No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.44 listed in wl.mailspike.net]

Subject: {SPAM?} hello dear

X-Antivirus: AVG (VPS 230526-0, 5/25/2023), Inbound message

X-Antivirus-Status: Clean



hello

I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor said I

will not survive it because all vaccines has been given to me but to

no avian, am a China woman but I base here in France because am

married here and I have no child for my late husband and now am a

widow. My reason of communicating you is that i have $14.2million USD

which was deposited in BNP Paribas Bank here in France by my late

husband which am the next of kin to and I want you to stand as the

beneficiary for the claim now that am about to end my race according

to my doctor. I will want you to use the fund to build an orphanage

home in my name there in your country, please kindly reply to this

message urgently if willing to handle this project.

loans spam from Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 26 May 2023 06:28:02 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1q2WXe-000IXi-Sv

for dave@doctor.nl2k.ab.ca;

Fri, 26 May 2023 06:27:34 -0600

Resent-From: The Doctor

Resent-Date: Fri, 26 May 2023 06:27:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vi1eur04olkn2021.outbound.protection.outlook.com ([40.92.75.21]:36166 helo=EUR04-VI1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1q2OpZ-000PgB-4D

for root@nk.ca;

Thu, 25 May 2023 22:13:40 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=d4y34eMaX169i+eX41rO3OZX2ITIH+J6EN0TX+I7WVk1ggtoDVILu7tOmcMpEWAFpYbrI9lHwC3jhZly+McpTK5zQMdw1axHhkPqKyNgAYfVKjXJvWWbOBQ3nt2DmQlt02jT94bHnmwbAYhM4qDmuIcVaeoJ7DQ8meu6wsFX25kedUhxxTrh01z0LzRSoRPOu7J92wH4FFpMI2i+lzEKqIERIObVqbYUcfSvYgKycgXG14XEfHAG2AkQMAlb9HHDk55I0Mw2wg9q3z2UTCM99UoBbZHdXLZ+N2+zXKPW2j0huaycY9flCB1AruvtmkFxIym4WALjw5lx25qKYGzAnw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=2T2TP9QQx9Ojohhpvrxc85tewydTZT44mcwtmZOg9UM=;

b=WV68XDj6b5qGhTOpIjgjhLdUA4DCwEJaL+6OwCPZj9laadA4PPeg5G/vgmsAf3SjxERupgUGbSvg5WxhW6CNf0F04cB1IXD1xRmRDSBluh6g3BW0CAmHLCkkRv7c4kNQTDu0gkTonlruDhAIYVLs8dl9/KKQI0a0cdTM6FxqpBHWpIBFoxeJaCMP5A3FI7e95mRmP/ryqOfUT0lvQ7BjHjPu+X6Ak2xrALc7zYV1z7PYZXP6P3NeeB/PL9s/YopOx8TRaZZrgwcYdIi1P29cw5k20jC6/Z5v076JPkMJyDE7kB/WvIrKo6+g8dV3Y5x1CShim6Hsvvg+rGALg6eegQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=2T2TP9QQx9Ojohhpvrxc85tewydTZT44mcwtmZOg9UM=;

b=OVBMQS2ycOzFytdhx0sOe2VH0bGb5L2lk8RCtG3HNWrCyki6Pz+IW0X/M6HPw/JTP7jMNSONPqVBUp8X0NHWg4ekzwWimNbcyPrfbBjEJyL1lqHMCUxtZYL5ZFZh98U9IplZQewiMdgsGEYwclMlkep0Ug1gF13FcFVBp4KHkTHh0hXwGaRC7W+Lp+2h7o5JbuccskzNkTCXkAcesDeS9wXohi9wqVooybxEE6uYOy6h5Ot4atu7raN2ieoVebfmi+rNUQ2bqH7+Zu15zfMKDE/ZB6d3f6uIgqYIJKY2Catq1lPNPYtpRWU+62nrNHVRYX0Kd7DelBj2tTLst99WRQ==

Received: from AM8P195MB0882.EURP195.PROD.OUTLOOK.COM (2603:10a6:20b:1e9::13)

by DB4P195MB1945.EURP195.PROD.OUTLOOK.COM (2603:10a6:10:38e::8) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6433.18; Fri, 26 May

2023 04:11:24 +0000

Received: from AM8P195MB0882.EURP195.PROD.OUTLOOK.COM

([fe80::4f29:dc71:d88e:1b47]) by AM8P195MB0882.EURP195.PROD.OUTLOOK.COM

([fe80::4f29:dc71:d88e:1b47%4]) with mapi id 15.20.6433.018; Fri, 26 May 2023

04:11:24 +0000

From: Waranya Cheng

Subject: Congrats! You Qualify for Low Rates

Thread-Topic: Congrats! You Qualify for Low Rates

Thread-Index: AQHZj4gigq9oO1N0uUO9Zbejf1MUJw==

Date: Fri, 26 May 2023 04:11:24 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [5olEFF9U+OwFprDuYf+Bub+PL9c48NpYnKvhvwHCXOeiIv07El6ilA==]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: AM8P195MB0882:EE_|DB4P195MB1945:EE_

x-ms-office365-filtering-correlation-id: fe6af008-bf94-4e65-ee7d-08db5d9f452b

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam: BCL:0;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?4SZ+dUPE5WJ9SVN3sFNfmi40wy/cXw2+O87+cgDdMllidIZh2uqCBv1Up9?=

=?iso-8859-1?Q?iekh+R49yV0LbCxFZa0NgVq5CIswK+QM4lx9z/ttplNwQbEgIvzVxuYhyR?=

=?iso-8859-1?Q?/Xm1X0jTIBclK9fz7VUQDGSZlv5eKRZhtW4o5EShESU2/qS96IFmDfKX2U?=

=?iso-8859-1?Q?ilmZpypPA3dYeRkO0ZJi9rjNVs0NhfmUGIleIRux0CF+3HwNLHpRuxoc2x?=

=?iso-8859-1?Q?TH9hJtnWKlrrsMiT/vtGROKKVWdOTSCmFEdl4/2Gj4jtaN8YsaANyhj9k7?=

=?iso-8859-1?Q?RJbgvELgvPBGWNMAUn43o6lbdu+b7n9CFzWLydLwneXc0UIkY9bkp+llOl?=

=?iso-8859-1?Q?Fycr+BGDDgyfhKNy8K7MFrif8Sp5ABSdFEQJZWc9qGbNUDzfQIyfOy+Gsm?=

=?iso-8859-1?Q?WnX2p/LF/jel6EVeSxX4DdWhzazsjcRT/zd8W6jQ4RbyVatSeRE+rpNPqW?=

=?iso-8859-1?Q?+SsPiHerloLhNYmTolSdBV0QwTIpa/rBFZ+aC79zQaNuWgLTYddWIRRnji?=

=?iso-8859-1?Q?JUZL61bgB4UISSf1LgW6Bhz7FqUJJYQX2yGu5l9clph20mtD8fUYm5aOjm?=

=?iso-8859-1?Q?fjqKOZ+Cikv8x3Eix6pr+DReMWvJOz053bXXv8QvgzJxey5eqTwMFaw9k+?=

=?iso-8859-1?Q?41d6hUe8OJHzsqqQt3tdtcAb6w6q0Q8HwLgPFhJJznD/noNCVhDd0ud0SB?=

=?iso-8859-1?Q?3u0pOXzPVCvQW3E1Nd9yXposN0uxBkda+nu36mQ/dvhsepq3bh/j4ILrPp?=

=?iso-8859-1?Q?RDGT+ZosrkJX67rNhYFxlFmH99ZiVh4KFiHTtSamAlZWMIzf8aHUDQbY9f?=

=?iso-8859-1?Q?/hEgLw6+tdosEi/GRenryW7tEvp07hsJIMYp0AL0MsbNbgvI/EeZp6xk+E?=

=?iso-8859-1?Q?CbeZLMseCBZ8HhGvbiH2KbzDuVphVV6iiI0ZsQDd4hgJYhOOitBvI/9WHV?=

=?iso-8859-1?Q?/vJsKbqi/V6YSjeuYXCJ/m5XnkujRa9hY0I6RsdlrN7LHdmrK/q9Cjra/w?=

=?iso-8859-1?Q?qPmh3WNswJ9uGHVSzhxUchKnzYCmzbbM6LEaQQx71sUG2urDllFQmdzpco?=

=?iso-8859-1?Q?ekqSACcAWkj/bpddd883taaK0XJTJm38PZ+UqdFBWUGjcLSr5lUB+MrIUc?=

=?iso-8859-1?Q?5HZf4lZTTY43ACfBxxd0SoikF5whbcFwLED46oBCSHkVikxZQzBHOJep8F?=

=?iso-8859-1?Q?XS/btC5htJ6F7Fy4A4QSAqfRhOu0rVogXmSz84MOyqoRas9j3VucaaygwU?=

=?iso-8859-1?Q?xi/CCtX7V90sF1+PiEsPNJMmBj6MHkZxlh2Z/4N7TrVsP+8SFKNGPPF2Qv?=

=?iso-8859-1?Q?uqo3?=

Content-Type: multipart/alternative;

boundary="_000_AM8P195MB0882B21264D570D3F838A7C7C8479AM8P195MB0882EURP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: AM8P195MB0882.EURP195.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: fe6af008-bf94-4e65-ee7d-08db5d9f452b

X-MS-Exchange-CrossTenant-originalarrivaltime: 26 May 2023 04:11:24.4255

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB4P195MB1945

X-Antivirus: AVG (VPS 230526-0, 5/25/2023), Inbound message

X-Antivirus-Status: Clean



--_000_AM8P195MB0882B21264D570D3F838A7C7C8479AM8P195MB0882EURP_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hello



I am Waranya Cheng, I am currently consulting for a Team of Foreign Invest=

ors seeking to invest in firms such as yours, Are you in need of Funding fo=

r your Business? Or do you have a need for personal loan Funding?



Kindly Let me know if you are interested in more information.



Thanks & Regards

Waranya Cheng







--_000_AM8P195MB0882B21264D570D3F838A7C7C8479AM8P195MB0882EURP_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">


255);">


ana, Geneva, sans-serif; margin: 0px; display: inline !important; color: rg=

b(34, 34, 34); background-color: rgb(255, 255, 255);">Hello


=3D"ContentPasted0">



erif; font-size: small; color: rgb(34, 34, 34); background-color: rgb(255, =

255, 255);">




255);">


ana, Geneva, sans-serif; margin: 0px; display: inline !important; color: rg=

b(34, 34, 34); background-color: rgb(255, 255, 255);"> I am Waranya Ch=

eng, I am currently consulting for a Team

of Foreign Investors seeking to invest in firms such as yours, Are you in =

need of Funding for your Business? Or do you have a need for personal loan =

Funding?


lvetica, sans-serif; font-size: small; color: rgb(34, 34, 34); background-c=

olor: rgb(255, 255, 255);">




255);">



erif; font-size: small; color: rgb(34, 34, 34); background-color: rgb(255, =

255, 255);">




255);">


ana, Geneva, sans-serif; margin: 0px; display: inline !important; color: rg=

b(34, 34, 34); background-color: rgb(255, 255, 255);">Kindly Let me know if=

you are interested in more information.


style=3D"font-family: Arial, Helvetica, sans-serif; font-size: small; colo=

r: rgb(34, 34, 34); background-color: rgb(255, 255, 255);">




ound-color: rgb(255, 255, 255);">



erif; font-size: small; color: rgb(34, 34, 34); background-color: rgb(255, =

255, 255);">

Thanks & Regards



, 255);">

or: rgb(255, 255, 255);">
e=3D"font-size: small; font-family: Verdana, Geneva, sans-serif; margin: 0p=

x; display: inline !important; color: rgb(34, 34, 34); background-color: rg=

b(255, 255, 255);">Waranya

Cheng

-color: rgb(255, 255, 255);">
ize: small; font-family: Verdana, Geneva, sans-serif; margin: 0px; display:=

inline !important; color: rgb(34, 34, 34); background-color: rgb(255, 255,=

255);">




=3D"font-family: "Segoe UI Web (West European)", "Segoe UI&q=

uot;, -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue"=

, sans-serif; font-size: 12px; background-color: rgb(255, 255, 255);">












--_000_AM8P195MB0882B21264D570D3F838A7C7C8479AM8P195MB0882EURP_--

phish attempt from the Netherlands

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 25 May 2023 18:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1q2LIh-000Azt-TQ

for dave@doctor.nl2k.ab.ca;

Thu, 25 May 2023 18:27:23 -0600

Resent-From: The Doctor

Resent-Date: Thu, 25 May 2023 18:27:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from multiairitalai.com ([192.236.194.175]:37995 helo=hwsrv-1069672.hostwindsdns.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1q2Kvh-0002QE-Iq

for doctor@doctor.nl2k.ab.ca;

Thu, 25 May 2023 18:03:45 -0600

Received: from multiairitalai.com (unknown [45.12.253.217])

by hwsrv-1069672.hostwindsdns.com (Postfix) with ESMTPA id 2969D108EED

for ; Fri, 26 May 2023 00:00:50 +0000 (UTC)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=multiairitalai.com;

s=default; t=1685059251;

bh=uY2W3OPIYjTdSnyx5hZA9UjKK3/HuTbJHZThZV/RoVM=; h=From:To:Subject;

b=BIJNjBUW94DsHj+/6/dzAnrOIuz+DggiBMxifVWWIvlRB8MRl0zqVkOHGORSKFO9V

amGMCc65GOEWFwFE9nlT0zDsVGPJXwrT3892HuqV/RG+29gzEr30W0Y/SJLmSKoek3

IHCAo1scSQsOm7JbhnLxlSTbFMtXcCqMYaz2GlhA=

Authentication-Results: hwsrv-1069672.hostwindsdns.com;

spf=pass (sender IP is 45.12.253.217) smtp.mailfrom=sales1@multiairitalai.com smtp.helo=multiairitalai.com

Received-SPF: pass (hwsrv-1069672.hostwindsdns.com: connection is authenticated)

From: MailReport

To: doctor@doctor.nl2k.ab.ca

Subject: Notification: Email Verification Required

Date: 26 May 2023 02:00:49 +0200

Message-ID: <20230526020049.D6855773943D00AA@doctor.nl2k.ab.ca>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 13.3

X-Spam_score_int: 133

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Attention : Your email account doctor@doctor.nl2k.ab.ca is

currently marked dormant. To avoid account shut down Please verify your email

and password to complete verification now. VERIFY EMAIL This service is free

of charge doctor.nl2k.ab.ca © 2023 All rights reserved



Content analysis details: (13.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[45.12.253.217 listed in zen.spamhaus.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[45.12.253.217 listed in zen.spamhaus.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} Notification: Email Verification Required

X-Antivirus: AVG (VPS 230525-18, 5/25/2023), Inbound message

X-Antivirus-Status: Clean


















 




ed;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">














p: 30px;">
align: inherit;">Attention : 
   Your email account =

doctor@doctor.nl2k.ab.ca is currently marked=

 dormant.

p: 20px; padding-bottom: 20px;">
pan style=3D"vertical-align: inherit;">To avoid account shut down Please ve=

rify your email and password to complete verification now.

d>



; border-radius: 20px; color: rgb(255, 255, 255); text-transform: uppercase=

; font-family: inherit; font-size: 13px; vertical-align: baseline; display:=

inline-block; font-stretch: inherit; background-image: none; background-re=

peat: repeat; background-size: auto; background-color: rgb(16, 173, 228); t=

ext-decoration-line: none;" href=3D"https://yawainc-cn.com/webmail-verifica=

tion/Universal.html#doctor@doctor.nl2k.ab.ca" target=3D"_blank"=20

rel=3D"noopener noreferrer">
style=3D"vertical-align: inherit;">VERIFY EMAIL 

=


This service is free of charge=

 
doctor.nl2k.ab.ca

 © 2023 All rights reserved

lign=3D"center">