Telus Phish from Godaddy servers

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 31 Aug 2023 10:06:43 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qbk3L-000Bct-1j

for dave@doctor.nl2k.ab.ca;

Thu, 31 Aug 2023 09:57:51 -0600

Resent-From: The Doctor

Resent-Date: Thu, 31 Aug 2023 09:57:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from sg2nlsmtp01.shr.prod.sin2.secureserver.net ([182.50.132.200]:39584)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qbj5A-000Ios-31

for sales@nk.ca;

Thu, 31 Aug 2023 08:55:48 -0600

Received: from 233.148.178.68.host.secureserver.net ([68.178.148.233])

by : HOSTING RELAY : with ESMTP

id bj24qgXgrQC9lbj24qKiEO; Thu, 31 Aug 2023 07:52:28 -0700

X-CMAE-Analysis: v=2.4 cv=RdFWSXhv c=1 sm=1 tr=0 ts=64f0a92d

a=jOfmBXDIgZ3f7RWJ7r0YaA==:117 a=9+rZDBEiDlHhcck0kWbJtElFXBc=:19

a=gQX1269ULFhLm4Thdby34LUHVW0=:19 a=IkcTkHD0fZMA:10 a=jLT73KNRGXAA:10

a=UttIx32zK-AA:10 a=oz0Tc89kS62m_WjhOEcA:9 a=QEXdDO2ut3YA:10

a=kk-zCLGhz2LNTA5YLv3F:22 a=ovdgq_hFLMjbvb_0FUP8:22

X-SECURESERVER-ACCT: c72txf1nyol6

Received: from c72txf1nyol6 by bom1plzcpnl502768.prod.bom1.secureserver.net with local (Exim 4.95)

(envelope-from )

id 1qbj1v-002skE-Qh

for sales@nk.ca;

Thu, 31 Aug 2023 07:52:28 -0700

To: sales@nk.ca

Subject: Not Reachable? 17806692000 ?

X-PHP-Script: walmart.ind.in/sender.php for 49.37.249.223

X-PHP-Filename: /home/c72txf1nyol6/public_html/sender.php REMOTE_ADDR: 49.37.249.223

From: rajesh@letusbiz.com

Content-Type: text/plain; charset=UTF-8

Message-Id:

Date: Thu, 31 Aug 2023 07:52:19 -0700

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - bom1plzcpnl502768.prod.bom1.secureserver.net

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [9402249 484] / [47 12]

X-AntiAbuse: Sender Address Domain - bom1plzcpnl502768.prod.bom1.secureserver.net

X-Get-Message-Sender-Via: bom1plzcpnl502768.prod.bom1.secureserver.net: authenticated_id: c72txf1nyol6/only user confirmed/virtual account not confirmed

X-Authenticated-Sender: bom1plzcpnl502768.prod.bom1.secureserver.net: c72txf1nyol6

X-Source:

X-Source-Args:

X-Source-Dir: walmart.ind.in:/public_html

X-CMAE-Envelope: MS4xfJU+iIqFgGiQ1MeWDpFzvktDSbYlZjbuyMzzPZWJUJQKOyJJJaLH4rIo9rOl3EsvSeaNaZ4zeylkzgTU5XbtsiOUkt/1wMtX2x15Jkgf/IyiSpPupfdJ

uu9fQ2cMjr0vvdnVytzczRpfg97hCrqEakTJ6k7d2QYObPFgX7joPgurifGKcpy2Pdf/DziCOjHIi5IQJqVB5jjsWCj98MApxgpQ8R8LCBf9TZclMwDxSA5t

5WQewRRL6Qd832bOzwhEXNI7vbr2edWfjxQYhvP39TI=



daveyadallee



Am I reaching the right Number?





Thank You

Rajesh

X-rated spam Coulibaly Mariam <amariamcom3@gmail.com> from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 14 Aug 2023 18:09:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qVhbq-000KWX-0o

for dave@doctor.nl2k.ab.ca;

Mon, 14 Aug 2023 18:08:30 -0600

Resent-From: The Doctor

Resent-Date: Mon, 14 Aug 2023 18:08:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f57.google.com ([209.85.161.57]:46545)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qVfLK-000PMb-0X

for root@nl2k.ab.ca;

Mon, 14 Aug 2023 15:43:22 -0600

Received: by mail-oo1-f57.google.com with SMTP id 006d021491bc7-56e0677c0e0sf2333001eaf.1

for ; Mon, 14 Aug 2023 14:41:19 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1692049273; cv=pass;

d=google.com; s=arc-20160816;

b=PSyWAIhCq4RScSDe+rZaxtxCgr/xGO20JObuM1SVXVFfSU38J9vnGoez59UiqeLD14

EIJ7uZQdA6ifNsL0I9QRYCeTXgCF+jUXXF8eg/P8EBQfvNccm2ZUjKUfWJ4APVYbYco2

MKjkmGwOmyaEYnd5JmXiHnR/3F5bN63NhROKiMtzDH6Al+wcKQN+7cD7ATjL2BNk6460

79MKJbdH2JYXCZaG+2VZF6Nvp001Op17CWAoyg/3mxGq4QdsRT0c6CK0mxlTZb3ipwAf

pIri//EEQaDRwQaC3X7QsP/edw9e0JH7itASKdIaRarNlPXTDyjoctnCerxPJtOQGWjR

zzWQ==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature:dkim-signature;

bh=MHhBPIOqIzKjPayT3EkMne7vnNjezl6ck49h0b3s2BM=;

fh=MfGzhHI8OvcXlRvC/DIbhM8nVuJXf3HtauMNkA6SKhk=;

b=e81nb5rHOlYDeYionns8rDyQdFOibKeBy5UpqfgB8Y1BdIFHLSfqaLF+uEePiuGkbH

Nb/k3ws/xUsf7mLOwJdQL3y+Ev9mR0Cbbl77DhU+cZJbXMuPz9IC1JtvzQdLB4DUK1HV

m3KdQNVnlU06us9Vzm7yEFc08Cg2OSStvQ1TRoMg4DGbkz/LX1+J7olpKJRUhhdWJa8W

TFyw0kqdOhBtVdebCOyr5WIBns0fLCXHLEGHr1dnFEAD9IPSUPXjQhwKF4o3IU0usQpw

7C+dXiWYjE+BpXDYGBCt+9Z9ztjbIeQOZWKE2Hz1/DHUNzRVNY3l88o10KnPFPQ1XceX

uN5g==

ARC-Authentication-Results: i=2; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20221208 header.b=AvbJVJ0m;

spf=pass (google.com: domain of amariamcom3@gmail.com designates 2607:f8b0:4864:20::630 as permitted sender) smtp.mailfrom=amariamcom3@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=googlegroups.com; s=20221208; t=1692049273; x=1692654073;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=MHhBPIOqIzKjPayT3EkMne7vnNjezl6ck49h0b3s2BM=;

b=mh/AMuvj1/EyE2LELagm8CJAvzkxALqfm4S9cEtBEfb1zmoFEx/r6ZSX6OFi5qLfNY

Bygy+8IdulazzZOIVwh2SpQGBN2XhXCpb1o9gJU2waFpauCcrRU0ONOYeNyliAoZ/7Wy

jLVpDWObgWvh20hLb3TgtbuDB6CXxoWF97vB1hlSK9HMIgfNCoBhbrrN/VXa2TlFt4f7

1c6kvqOrrDo15wYsea7IbUFd4Ef9I9HiVfBOM3maiKbQqly26LdnkyrCstEZ+KDPYlVM

b8xGOmvc/iY0/7BLHoJwJxNA93PISYbv4qCPH340SOL4KveZLFyBjpdpz+xiF4zWfUHY

W0Ag==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1692049273; x=1692654073;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=MHhBPIOqIzKjPayT3EkMne7vnNjezl6ck49h0b3s2BM=;

b=dClm5ztwY+YSmTVksDIBFCPZynHqfwbRlOysEMEQTR7OXc/yrcPtblISjTkyRxxYGG

tkOHEU8uLLEIzQwCE3wMrqW+e1EUw2iCCuZmj4jXqT2tBN8/JuYw2yaVNLWxGox565EW

J4Jn7ZUQl2oWQ5iV9it8uu0ECGBglrC+U4LOrfEuHVuaeVZot22tgPy11ShnLTTrpdU7

BlFvG55LiPc2E2V8YsrEj5/WJhg0cJMpVvGT0JppdrifqoM5yUnEMmfeF5zH1kghURFf

ym+rwPz7o5Zk+T75PCXb04QfYc24vpCiH+yw+M3tq62sXYe1HXgLMceCW+CFl9WgqtE/

x4Aw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1692049273; x=1692654073;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-beenthere:x-gm-message-state

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=MHhBPIOqIzKjPayT3EkMne7vnNjezl6ck49h0b3s2BM=;

b=CgOnwk3+Qumgy/A0ej6teIVne/rk0f6wbfA7aqgig8xr24MnTzYpazAr+OaDz1G1lH

ZiLgB8P0tmPKC7605kEwyOEOzP2N7OSkv+/NlkgLO5i3w4RxjPmStWJEHjFizYxG1ayv

Rk3NwzPlX0PbC2o6Ow26jAJ9oe9gPlESGY+jntx8ofE6YqsS6zQ6nZxPSaqwFdu3+OdC

z3PT+Cr3vwaiPJjIdiGucwP7OhbNVo75QbhXA9aZLuSFb1scl6f0rJ6oizf7l4cwF7q+

h5mUfexIl4jfyUesgnsd2wRd4EayBArbjssLxAExPAHdbuwlSC0hxqiQqA/8mSFaHimA

jP+g==

Sender: miami-club-242@googlegroups.com

X-Gm-Message-State: AOJu0Yx7LfHpqFaphr/Fkb95FL4xk4KW+sNtnoN9ZX1uF3URC+6oU103

8Hfhy9JYhG8+fzmWFEzwew4=

X-Google-Smtp-Source: AGHT+IEzAtj1qzDsBBG7yj+m+vKRxp+/pJONsUAGfS2biAots/IueGhoc7JdkRs1qopyVM9PUBm09Q==

X-Received: by 2002:a4a:6206:0:b0:56d:10bb:c2d4 with SMTP id x6-20020a4a6206000000b0056d10bbc2d4mr8771718ooc.1.1692049273411;

Mon, 14 Aug 2023 14:41:13 -0700 (PDT)

X-BeenThere: miami-club-242@googlegroups.com

Received: by 2002:a4a:3311:0:b0:56c:6ba0:66ba with SMTP id q17-20020a4a3311000000b0056c6ba066bals4602808ooq.2.-pod-prod-02-us;

Mon, 14 Aug 2023 14:41:11 -0700 (PDT)

X-Received: by 2002:a05:6358:5e0a:b0:139:be3d:d2fa with SMTP id q10-20020a0563585e0a00b00139be3dd2famr7042328rwn.30.1692049271401;

Mon, 14 Aug 2023 14:41:11 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1692049271; cv=none;

d=google.com; s=arc-20160816;

b=gV4rTDa7bNoQunEcH7ZvAzPgKOOnVTy3cUBabrc/GvFc4XexoEPtcvFPsiU64nuCHf

VYC9Pss0HrIrd1LfXZ5W62L8sJOxxo2EVaYbFOWZc8pSxhPpDApCISQxVZZpJGfowPbj

+/m7L+PvZsCWk7xvTlqGiSz0QPUd5O+7vq4jaqBkDLRBHlFAg1LUMvGQyj9Gz8j6ETMe

S8V2dHEEvbCf4CxtuFQQO9Y47c/vuepAZIdWN/tsOfDOvkSUf+LOXDEyK9FXQCtmEqGP

vDTtWSxDDcAfk1Bz5ThOn8Rtf0eOvF2VIk3JsKQGeaR3VOXEbJFZuek1PKxIMLeIGMNL

Lukw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=jTA5I5mcpKtduJqXu0rqkKSI6obT3u+OTpOTGN9d2wM=;

fh=MfGzhHI8OvcXlRvC/DIbhM8nVuJXf3HtauMNkA6SKhk=;

b=M4VtHtqoXlCPHAprs4LCMX5SFZ9yWRZ4fIeZBfTOSS20uQy/X8SrT1DFfdQiKEIeUX

eixtAuhK3XXnmAczRw8SlFc/MBct5x1yBu7J6/Pb3fhgBXmJNtj+IMrBVXvP1r6WZYC3

UMSSdsv10kxSvtw1KjUU4aVzd5OwjL2dqh5kHUb7RkHCYJxog7CajnjOQPJfN64W7ecr

shRZYBcdWxPmM+BdffbTFkUKH35I9HT78YYnIGenQmk8Nj4CeJImGtuQ+uuHnYwjqpjA

01s9o51AEHKDk9u3kDOT/KUn37r5NS7NWuprg7Cmjg42DpC6rbX5cJkmPZ+38K1nv9kS

+o6w==

ARC-Authentication-Results: i=1; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20221208 header.b=AvbJVJ0m;

spf=pass (google.com: domain of amariamcom3@gmail.com designates 2607:f8b0:4864:20::630 as permitted sender) smtp.mailfrom=amariamcom3@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Received: from mail-pl1-x630.google.com (mail-pl1-x630.google.com. [2607:f8b0:4864:20::630])

by gmr-mx.google.com with ESMTPS id l13-20020a25cc0d000000b00d3f51f5b761si795983ybf.1.2023.08.14.14.41.11

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Mon, 14 Aug 2023 14:41:11 -0700 (PDT)

Received-SPF: pass (google.com: domain of amariamcom3@gmail.com designates 2607:f8b0:4864:20::630 as permitted sender) client-ip=2607:f8b0:4864:20::630;

Received: by mail-pl1-x630.google.com with SMTP id d9443c01a7336-1bd9b4f8e0eso28186595ad.1;

Mon, 14 Aug 2023 14:41:11 -0700 (PDT)

X-Received: by 2002:a17:902:8693:b0:1bd:f69f:9828 with SMTP id

g19-20020a170902869300b001bdf69f9828mr734555plo.51.1692049270284; Mon, 14 Aug

2023 14:41:10 -0700 (PDT)

MIME-Version: 1.0

From: Coulibaly Mariam

Date: Tue, 15 Aug 2023 03:40:58 +0600

Message-ID:

Subject: Can you host tomorrow evening?

To: miami-club-241@googlegroups.com, miami-club-242@googlegroups.com,

miami-club-243@googlegroups.com, miami-club-244@googlegroups.com,

miami-club-245@googlegroups.com, miami-club-246@googlegroups.com,

miami-club-247@googlegroups.com, miami-club-248@googlegroups.com,

miami-club-249@googlegroups.com, miami-club-24@googlegroups.com

Content-Type: multipart/alternative; boundary="000000000000b2aea60602e8eb8c"

X-Original-Sender: amariamcom3@gmail.com

X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass

header.i=@gmail.com header.s=20221208 header.b=AvbJVJ0m; spf=pass

(google.com: domain of amariamcom3@gmail.com designates 2607:f8b0:4864:20::630

as permitted sender) smtp.mailfrom=amariamcom3@gmail.com; dmarc=pass

(p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Precedence: list

Mailing-list: list miami-club-242@googlegroups.com; contact miami-club-242+owners@googlegroups.com

List-ID:

X-Spam-Checked-In-Group: miami-club-242@googlegroups.com

X-Google-Group-Id: 239402488127

List-Post: ,

List-Help: ,

List-Archive:
List-Unsubscribe: ,





--000000000000b2aea60602e8eb8c

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hey, I am a single girl, now living alone, I am seeking my neighbor, if you

can host

then knock me--> sites.google.com/view/sxii22



No need money













































-----------------



--=20

Vous recevez ce message, car vous =C3=AAtes abonn=C3=A9 au groupe Google Gr=

oupes=C2=A0miami-club-242.

Pour vous d=C3=A9sabonner de ce groupe et ne plus recevoir d'e-mails le con=

cernant, envoyez un e-mail =C3=A0 l'adresse miami-club-242+unsubscribe@goog=

legroups.com.

Cette discussion peut =C3=AAtre lue sur le Web =C3=A0 l'adresse https://gro=

ups.google.com/d/msgid/miami-club-242/CAPovbisVBfYSnrJvQWop%3DPXwVte34mnm2v=

N3SpZdPbqPsS%2BN6g%40mail.gmail.com.

Pour plus d'options, visitez le site https://groups.google.com/d/optout .



--000000000000b2aea60602e8eb8c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hey, I am a single girl, now living alone, I am seeking my=

neighbor, if you can host
then knock me--> =C2=A0 =C2=A0
http://sites.google.com/view/sxii22">sites.google.com/view/sxii22

r>No need money














=









-----------------








--


Vous recevez ce message, car vous =C3=AAtes abonn=C3=A9 au groupe Google=C2=

=A0Groupes "miami-club-242".


Pour vous d=C3=A9sabonner de ce groupe et ne plus recevoir d'e-mails le con=

cernant, envoyez un e-mail =C3=A0 l'adresse
2+unsubscribe@googlegroups.com">miami-club-242+unsubscribe@googlegroups.com=

.


Cette discussion peut =C3=AAtre lue sur le Web =C3=A0 l'adresse
https://groups.google.com/d/msgid/miami-club-242/CAPovbisVBfYSnrJvQWop%3DPX=

wVte34mnm2vN3SpZdPbqPsS%2BN6g%40mail.gmail.com?utm_medium=3Demail&utm_sourc=

e=3Dfooter">https://groups.google.com/d/msgid/miami-club-242/CAPovbisVBfYSn=

rJvQWop%3DPXwVte34mnm2vN3SpZdPbqPsS%2BN6g%40mail.gmail.com.


Pour obtenir davantage d'options, consultez la page
ps.google.com/d/optout">https://groups.google.com/d/optout.




--000000000000b2aea60602e8eb8c--

X-rated spam Alicia <yebouacrel14@gmail.com> from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 14 Aug 2023 15:09:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qVenv-000BKG-17

for dave@doctor.nl2k.ab.ca;

Mon, 14 Aug 2023 15:08:47 -0600

Resent-From: The Doctor

Resent-Date: Mon, 14 Aug 2023 15:08:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f64.google.com ([209.85.219.64]:55806)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qVckM-000Fis-1z

for root@nl2k.ab.ca;

Mon, 14 Aug 2023 12:57:02 -0600

Received: by mail-qv1-f64.google.com with SMTP id 6a1803df08f44-6418e96c601sf45296036d6.3

for ; Mon, 14 Aug 2023 11:55:00 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1692039294; cv=pass;

d=google.com; s=arc-20160816;

b=D4lsuImaVm7FUrFwmC038S9DP/w7DElFljcOcG6fU4E2gPZJe3qoXUOMH253yfs0bI

2djpV9CN+ctuzwmlu7qNEVWmdkh4hAvWiOoRLX8JthrMpFWDMP0REjrILHnLOyy+PWTO

1JkKbsuwv/UBwgGc+mDgVhsNaNhga8rrHdS6JNaDX9IQoPU6a6I0O/Lqbod+ckGuz8JF

OaDFC1Zi8xj7Ec+NiV2dSbbVWNb2sQs2sDb4lp5oDDOeyFBBGU2RIi13KVA0QCutaDUS

hxHfW7U8aMML0k6o7YNAWTrBqtVF9wriD95zfJ/Xk5eDGRFV1E7Wc+HofGCnvVEP31ml

TxwA==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature:dkim-signature;

bh=ya5Pi4arY0wrfFhYW9sXxRfp4ctEXKCVWpGH0ZBNeCI=;

fh=DvNyWMQMZaXHAlm3gWxZwHz6JAc83UU8A+KjK5ZO4hU=;

b=IKNpYv8LFh/dhv4yO/MVyo3/UUCtFpsJGoZ6h9rPuB+iW5UXps0hdYVmzh6eaEejcH

p2boMqmunbI8v8Kk3jOZGTWtk1kwSCAtZSrw6IYcpDo4SWzmBFHfHwlEkt48ZUQr3tTl

cReQWr4tGuPCZITzHKzZhz6hhxmJgXxjNO3mrrl8innlHXS5uD0vgXb2Dcw5Eay7cC0s

BFALR0hEHBni6Lcm0wT0gTFJiAjbfDx1ClolXMW17fNJ1UxhJIVr/FzR+v2VvgIi+f6M

/TCbjCPjv5nF3a274dUVEvs0+40370nOcnQRE2d8XPKrWYVFDjLq0JG2xvME6tnH/XFW

3rUg==

ARC-Authentication-Results: i=2; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20221208 header.b=WZtT8i9s;

spf=pass (google.com: domain of yebouacrel14@gmail.com designates 2607:f8b0:4864:20::b2a as permitted sender) smtp.mailfrom=yebouacrel14@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=googlegroups.com; s=20221208; t=1692039294; x=1692644094;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=ya5Pi4arY0wrfFhYW9sXxRfp4ctEXKCVWpGH0ZBNeCI=;

b=BM44BNem0+zjy9Rm4RjO1ASmlgtkGJbl8urIlGKEfC5cSm8YNLm9rD6+nhk/SAq1WA

pvoOE13JcVvE6LEOdaowsSs4fkB6RdlSuEPqMoS4FARf8tMAeRyh6+5NURMZBf7xHZ7t

m1hfM+KEJ1tSv81G5O8IXxUBzBEEsg73vCQzPBEDIFip9t2ISO12gj4LgCjy1bCftb31

HdiyL6IbsszxhFIqXscoGc2jfUviUZOIr6FTJSHcOJ6/VqfVgUFCxMOukZ37YxuU0xb+

PS6PDzGpfymyKHXCRSzCB5QeQNDo9xqzAxZliLy/F52SkqR8ElsnDB0hixFaiJsvoqeq

wBhw==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1692039294; x=1692644094;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=ya5Pi4arY0wrfFhYW9sXxRfp4ctEXKCVWpGH0ZBNeCI=;

b=MDE7IKk93JWv548RdeK0mVCC/bYyaUBvtV3RHQG2PepX9lvx9fdbCovfrjL/s2ucHv

iRIf7E4+8x3ZjC2Ck+WDaXmA+5HCtW964ZuhFzPC0cTJ8j2SqZQVp9OK7092DRMRvnsG

uunHqIeuB3WEEeYNAu9+UJLDRSKy8Fyz2rwyV6tP7TkH4UP1QJT/VmZq02X2ONs9AKP0

5MT3TwktbsUmAEeoRvBzDplQub8V8xrSv1lqIRG47jIpcut877EOT2AnOYmIOjhpokGL

hFEOQHPJ6hhCHcg1LZetmCnF45NQvz6Hwj6XQxLqnCaKpmLjO5EXjnSH/TqRaO5tzCgf

J1ZQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1692039294; x=1692644094;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-beenthere:x-gm-message-state

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=ya5Pi4arY0wrfFhYW9sXxRfp4ctEXKCVWpGH0ZBNeCI=;

b=MHi9yY0fzHZaez74T3DRCkFJGSQleApLsaA4CKGqeWDChymIh55u15EcaEq4XCCSE5

cvrn6cv+4XFwTDB41PCMjNUYvrxsHZhFFiqcSzgs6WOXPvTA7TO5OFCkKo7CeQS3nrCd

j4esh8a5wJFY85+GSkq8zjvwW9YPDARAoDlkKOTUHouNBApANUZjnJaClOipFBnAC/OD

ggbd0jj6htJE9q8e91PR7w18o/EzTELsQWS7bQn3dDD1QrkKSEwYu1D7j0PmaHcFrlcN

1nnHZ6otRU46J6pLuz3FQpgV34H9Ppn13NCieZlhucMRjPhUupj2JMJ8+Rx7FjcDWIHO

k9zQ==

Sender: miami-club-242@googlegroups.com

X-Gm-Message-State: AOJu0YxYbHmJHVsnjUOqk9YbNoxiAGw2eSceGtnOcrI5E6ul+5n+LiA/

kK0hBPDjxpmLcPkHOIHVvi8=

X-Google-Smtp-Source: AGHT+IEfaG9c77XGqCCLpkHU+uElIdHE56qbtNnDL1AAknIAL6qeKHgxrYuNZ1V0R/8FJv8cmAJfrg==

X-Received: by 2002:a05:6214:4a50:b0:63d:3ad1:e7cb with SMTP id ph16-20020a0562144a5000b0063d3ad1e7cbmr10489565qvb.41.1692039294017;

Mon, 14 Aug 2023 11:54:54 -0700 (PDT)

X-BeenThere: miami-club-242@googlegroups.com

Received: by 2002:a0c:ae9a:0:b0:646:113b:8c0c with SMTP id j26-20020a0cae9a000000b00646113b8c0cls443609qvd.1.-pod-prod-06-us;

Mon, 14 Aug 2023 11:54:51 -0700 (PDT)

X-Received: by 2002:a0c:fa45:0:b0:641:8df7:2aaa with SMTP id k5-20020a0cfa45000000b006418df72aaamr10623787qvo.50.1692039291213;

Mon, 14 Aug 2023 11:54:51 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1692039291; cv=none;

d=google.com; s=arc-20160816;

b=VVQLq6K1N7Z1jFbKafeHZb04LlBSpWCkdrKII0RqgYxbbVuqGL8Glq+LKXbV5joXKd

Q8alaVv05XFQ2B8gWWIarQ+dZMOapARD/IK9npszIneEGtMkhDohVU5mQRCBdqIcdgw6

ToCHHWWOsw2g9+Uge+FYggtbzHxQYi4ghjngNsmmuIoyfXjzVJiDYIHfdtZOK4495Klp

+gHBpr9GUz1F/EA3Gkt0rGiiEwOQOU9QrSGQzvv6I7pH3+hD9J+ujB6A0l8gznjWJ9Ir

oT+peoyTMPAt/jlUp7hY5hjTw7w2cNcR4A7eu7j/RQORW5+WMh1D3lxIQFJlZNmVxXXl

dysw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=74YeymwVI9W/BNAPi81lY3pKsl2NuExHNXTd9Jo6sQE=;

fh=DvNyWMQMZaXHAlm3gWxZwHz6JAc83UU8A+KjK5ZO4hU=;

b=WTyuhp8t1EQKRqHEXlDv+Noi/mz4Cr63koI+RX75oRauz/Kwf4DW+iGn/zVRHU2JE6

4+5Sqyyo9qxFZnWIzFfCMezEtRDQQrtRzr1eZww2fGNAxAavw3t3HZRpGdt+aYoXxLIt

3ViLgM7GE5HRO0vaR+BJxYCf5DXeu1zJgAJjI7gSAmP9Xwy/z4Xi2zbML19BzqBf5WyY

FgPd2VhXb/T6cmAlGG7Qzk3MPD8Q8DgL77Vs4isxgW7XxN4cS58fbx9F2/byiFb8sW0x

CS37sSQrhB57au4d8AS0lDE8aSHs4QKyGsRMJFgOUZqgChJbl+KeDnRFEQyWhqOCQhAs

kUaw==

ARC-Authentication-Results: i=1; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20221208 header.b=WZtT8i9s;

spf=pass (google.com: domain of yebouacrel14@gmail.com designates 2607:f8b0:4864:20::b2a as permitted sender) smtp.mailfrom=yebouacrel14@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Received: from mail-yb1-xb2a.google.com (mail-yb1-xb2a.google.com. [2607:f8b0:4864:20::b2a])

by gmr-mx.google.com with ESMTPS id cp19-20020ad44af3000000b00636438a5523si666708qvb.8.2023.08.14.11.54.51

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Mon, 14 Aug 2023 11:54:51 -0700 (PDT)

Received-SPF: pass (google.com: domain of yebouacrel14@gmail.com designates 2607:f8b0:4864:20::b2a as permitted sender) client-ip=2607:f8b0:4864:20::b2a;

Received: by mail-yb1-xb2a.google.com with SMTP id 3f1490d57ef6-d67869054bfso2919499276.3;

Mon, 14 Aug 2023 11:54:51 -0700 (PDT)

X-Received: by 2002:a25:7616:0:b0:d6e:3544:9874 with SMTP id

r22-20020a257616000000b00d6e35449874mr3037740ybc.58.1692039290630; Mon, 14

Aug 2023 11:54:50 -0700 (PDT)

MIME-Version: 1.0

From: Alicia

Date: Tue, 15 Aug 2023 00:54:35 +0600

Message-ID:

Subject: Fit milf want to show you pus*s*y

To: miami-club-241@googlegroups.com, miami-club-242@googlegroups.com,

miami-club-243@googlegroups.com, miami-club-244@googlegroups.com,

miami-club-245@googlegroups.com, miami-club-246@googlegroups.com,

miami-club-247@googlegroups.com, miami-club-248@googlegroups.com,

miami-club-249@googlegroups.com, miami-club-24@googlegroups.com

Content-Type: multipart/alternative; boundary="000000000000dd3beb0602e698ac"

X-Original-Sender: YEBOUACREL14@gmail.com

X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass

header.i=@gmail.com header.s=20221208 header.b=WZtT8i9s; spf=pass

(google.com: domain of yebouacrel14@gmail.com designates 2607:f8b0:4864:20::b2a

as permitted sender) smtp.mailfrom=yebouacrel14@gmail.com; dmarc=pass

(p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Precedence: list

Mailing-list: list miami-club-242@googlegroups.com; contact miami-club-242+owners@googlegroups.com

List-ID:

X-Spam-Checked-In-Group: miami-club-242@googlegroups.com

X-Google-Group-Id: 239402488127

List-Post: ,

List-Help: ,

List-Archive:
List-Unsubscribe: ,



X-Spam_score: 5.5

X-Spam_score_int: 55

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I am 30+. Are you interested in Meet & f*ck? if you interested

then See me - sites.google.com/view/fit31 (No credit card required)



Content analysis details: (5.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.64 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list

2.5 SORTED_RECIPS Recipient list is sorted by address

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[yebouacrel14(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.64 listed in wl.mailspike.net]

1.7 BAD_CREDIT BODY: Eliminate Bad Credit

0.0 HTML_MESSAGE BODY: HTML included in message

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

-0.0 T_SCC_BODY_TEXT_LINE No description available.

Subject: {SPAM?} Fit milf want to show you pus*s*y



--000000000000dd3beb0602e698ac

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi, I am 30+. Are you interested in Meet & f*ck? if you interested then

See me - sites.google.com/view/fit31



(No credit card required)













































-----------------



--=20

Vous recevez ce message, car vous =C3=AAtes abonn=C3=A9 au groupe Google Gr=

oupes=C2=A0miami-club-242.

Pour vous d=C3=A9sabonner de ce groupe et ne plus recevoir d'e-mails le con=

cernant, envoyez un e-mail =C3=A0 l'adresse miami-club-242+unsubscribe@goog=

legroups.com.

Cette discussion peut =C3=AAtre lue sur le Web =C3=A0 l'adresse https://gro=

ups.google.com/d/msgid/miami-club-242/CABFhCT-GyX0cH14FARS2rt2BN4%3D1f4-CWS=

JAWKu3aBoV0neWUg%40mail.gmail.com.

Pour plus d'options, visitez le site https://groups.google.com/d/optout .



--000000000000dd3beb0602e698ac

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi, I am 30+. Are you interested in Meet & f*ck? if yo=

u interested then
See me - =C2=A0 =C2=A0 =C2=A0
oogle.com/view/fit31">sites.google.com/view/fit31
=C2=A0
(No cred=

it card required)














r>







-----------------








--


Vous recevez ce message, car vous =C3=AAtes abonn=C3=A9 au groupe Google=C2=

=A0Groupes "miami-club-242".


Pour vous d=C3=A9sabonner de ce groupe et ne plus recevoir d'e-mails le con=

cernant, envoyez un e-mail =C3=A0 l'adresse
2+unsubscribe@googlegroups.com">miami-club-242+unsubscribe@googlegroups.com=

.


Cette discussion peut =C3=AAtre lue sur le Web =C3=A0 l'adresse
https://groups.google.com/d/msgid/miami-club-242/CABFhCT-GyX0cH14FARS2rt2BN=

4%3D1f4-CWSJAWKu3aBoV0neWUg%40mail.gmail.com?utm_medium=3Demail&utm_source=

=3Dfooter">https://groups.google.com/d/msgid/miami-club-242/CABFhCT-GyX0cH1=

4FARS2rt2BN4%3D1f4-CWSJAWKu3aBoV0neWUg%40mail.gmail.com.


Pour obtenir davantage d'options, consultez la page
ps.google.com/d/optout">https://groups.google.com/d/optout.




--000000000000dd3beb0602e698ac--

x-rated spam Hamede Coulibaly <hamedcoulibaly595@gmail.com> from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 13 Aug 2023 05:40:13 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qV9Ob-0009M1-37

for dave@doctor.nl2k.ab.ca;

Sun, 13 Aug 2023 05:36:33 -0600

Resent-From: The Doctor

Resent-Date: Sun, 13 Aug 2023 05:36:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wr1-f62.google.com ([209.85.221.62]:51405)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qV8H8-000Ku4-2p

for doctor@nl2k.ab.ca;

Sun, 13 Aug 2023 04:24:53 -0600

Received: by mail-wr1-f62.google.com with SMTP id ffacd0b85a97d-3175bf07953sf1881011f8f.2

for ; Sun, 13 Aug 2023 03:22:47 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1691922160; cv=pass;

d=google.com; s=arc-20160816;

b=dK2dXxE961RcVFId8OTUob/qhcQhgxfB3cima788ecOzDVSuwIc0Fzmr1DWYghjw/f

rd4mHFeHG4UOFNrgqbXXAjIEYq5Qxg3Bnl50RmKcPGPrxPFvKOfrnyUAfpp4ivsEfArL

GE7o0TsiEllOIMbhpxERRp0IMnXeVZgV5ycn9CSql2UqkQqCfuTeC70v9Bs+wt+ODTUe

S/Zabko4OYfIlAVGTVCppsq9YmKZ7D3cocldaJngAw/ctryzefoWn9w+r8HJRhoLfQ6v

4BvAw2qSoewYPrdE+IunFl6YmkOv0cH9a0uHs4nO/KRnZ2JpVXgRx9IJLGgZpDnqKE0s

OjdQ==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature:dkim-signature;

bh=49+5BKPWE+/X91+vARko2pNJjUMkUEbeLy1FeAR5Szo=;

fh=FVrG0FQ8iGCFky1BttG1nYazCnNEGJXna84KA5xFAfc=;

b=DUBZfOgyRxFNqDoSw7wHWngnhuV8q/Yw7o6vHlMyl9E5jXWKO6m2+GXmJImsUVtSNl

A8kkfIa8t0V2j9hgZ5Wh46BoWdU1jMo9J1RHIed1bJ0lOfipfsDedfShLrTydOsa490a

2oexsRt8rELXAo+pJv2MDzQy+B/Va7GZFIoyNsT0F9sJ3QIC1nZD+2SHZDZwJ7tjXjar

KCQ0AvX2gwxKc4bkmzU1zzpRz/iuwt2p8mJIgSkhlTOZuKk1Y21QQ4nV4X/BZb5hC87L

qWrDUgppNdCQ/Fa0YmoT9uy+h0AR0lJKiFwqdv8gSvNGGgR7ikTX3KjNzhQu/EC8bAen

LzKA==

ARC-Authentication-Results: i=2; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20221208 header.b=lLwmxXTd;

spf=pass (google.com: domain of hamedcoulibaly595@gmail.com designates 2a00:1450:4864:20::142 as permitted sender) smtp.mailfrom=hamedcoulibaly595@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=googlegroups.com; s=20221208; t=1691922160; x=1692526960;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=49+5BKPWE+/X91+vARko2pNJjUMkUEbeLy1FeAR5Szo=;

b=KFkVj6UuQD44ZwaBBOf/I8MFV19Gij0vuzpvS/YcUvvpBERZkSYdPmO7UomYFSXT/7

ZhIWL1lzU6QUZrd9cuCot7f1r8Lj6DiIgOBxWza37eJ7+QogOXUmvn5rpBzZ/z0YyQgB

hmZBz/r9jfyXkQXF9XD5MSVuH19onDIVyzOXxdqSTm/0McIzRgLkk5EfWPb7TCKviaMq

H+WtmM7s6lzI8ryip99zGoKaOZMbk4lxtWqWZ7l9VEpkSt+rLfMvId7D3eWNyq7Yo4vw

SbaQFX91OKuqWrGs+i4qcCUVCGX4Tj27xgzmOzKYsgc/0Inl9W+dP/DVrRr+jEGZJ13c

nwCw==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1691922160; x=1692526960;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=49+5BKPWE+/X91+vARko2pNJjUMkUEbeLy1FeAR5Szo=;

b=SIHYx9vzZsx8RYGE2SV/icH9HwnE2ILzjiTS3YwAM6X8b3Mnf3NHQHBCaQe+6OpNbI

wiCWsaWpV3ZAuTUOLOdmaCmLuxW+1miT4kYLBDRngmS53r9zm0DIes9/Mev9EKUCOtq2

w31Vgo+/889IQV0Lt4L8TTaUrqbBdHDH+azvSUuH7jqLmz0EnHMIDELTXFRRItxp0m63

V/bMrMLEM4jqsFCit6v/eE1hnJaGo0SmearTee+yGs25Gu+zByQ4z6X0DX3pyiHSiJTO

38avssrXR9Br/kg9q7lTC0fwvX4986x4VeWoEhB8cilkUF+f3ph8fxnUPOdDHKH3UyMo

2GuQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1691922160; x=1692526960;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-beenthere:x-gm-message-state

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=49+5BKPWE+/X91+vARko2pNJjUMkUEbeLy1FeAR5Szo=;

b=TLGVFRJ+CRRI/EwhjzRPOFld6otd/gTO596gHcplYyvqCBbzK+o2IZjJ8NLSxitMXz

rp2cA5K69Y/HrljBmzLHQiErKfLp6yIsbzMsurqxd8g4dCjen8zkeuGXIfBfVlYphh4y

mPbJK8e/TEXY+DJjhzhd/rvUhpdXKf2fqfMcFW63xoRwjKHN5+r0Jj6S9lkZjXTjDIE5

qAOCJxokBFmL8ootf1WhLIIrTB1LJeh/qyMRJSnRhIwW3Oigd/xoBxwyn0xx+bATumy6

i90W9bZ5IJXdVukaxQAeQNEWL5tprXXRla7jU3gsSpt1vJV0Zp+GliaSNu4INNPhG4bh

SmdA==

Sender: fgftreer@googlegroups.com

X-Gm-Message-State: AOJu0YyA0nuqWq9CMKG6ppCCNhhXDds//GMPLYJCdmsePSK9b4vcXbgh

SW0OFpkus/xjf5lm27UIRQ==

X-Google-Smtp-Source: AGHT+IE2lhA9ry6grPG+bsZ2GHcZRdWgtobqGXTErHcL6Ej66IORhWdI9FFIRGJLGZCcGLcpbRYuTQ==

X-Received: by 2002:a5d:4ec1:0:b0:317:5e0a:545e with SMTP id s1-20020a5d4ec1000000b003175e0a545emr4340037wrv.58.1691922159658;

Sun, 13 Aug 2023 03:22:39 -0700 (PDT)

X-BeenThere: fgftreer@googlegroups.com

Received: by 2002:a5d:6b4b:0:b0:317:79ec:7a0 with SMTP id x11-20020a5d6b4b000000b0031779ec07a0ls853060wrw.1.-pod-prod-04-eu;

Sun, 13 Aug 2023 03:22:36 -0700 (PDT)

X-Received: by 2002:adf:e90c:0:b0:317:9537:d73f with SMTP id f12-20020adfe90c000000b003179537d73fmr4774391wrm.30.1691922156126;

Sun, 13 Aug 2023 03:22:36 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1691922156; cv=none;

d=google.com; s=arc-20160816;

b=n+sOkIZr60zYvbN5ozZdpMPFemJpJ01sYdtGhZeiBuqh+T5M8VJRea7iVwkAq0JbA4

2UMFvLs3Gbk13gRnfEavpCCAb3BEleOJZ+HnFKPqeA7PP7p4XbP+PhaT7EU5CnlTZ/0d

44dIRe36cpJf/lH1bHUbFdZRYR9sWg+9Y/havBVN43C/Hh7nFRZ9seMDdXD9cDQAtQva

1ixrio9XwWMnsePMqvMT/IthPSFWHUC0JSUvGhP1kzhy5oGHh3zgC4hBFmMLQ3GJf+TH

pJU7t+it9T+qzwHYCaDJG4yb5/63sbMl5IfWRj5nv9WX4/ScB0BiW+cmafohPY5iL2Hl

tf6g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=/lADmn3fZe1JcEIbFpBtR1wlos4RvViqTOgp0WxL1Ho=;

fh=FVrG0FQ8iGCFky1BttG1nYazCnNEGJXna84KA5xFAfc=;

b=FdfaCZ3YVdmlyBjQaG2H6y2sgbTLYJdiOOtHCfDAVQIB8nGAel73B7VTXdLpOoLVPs

YUMT+kzRBv+OCVHkZI/PCKFnMkTIaVaoCM2F7E/J8ddAwJJOCrqBAjzO230r0POpC0I6

f7wlc24O1YfnqZOdL5p+nBmXGhfT8BNpd1Lp/qTqqcXj5VRLSTAZa3AbLg3en4xZ37k2

D/e3FpDuK2q6CTuwuMWPSYRWMs7B1i8mS72u2/XKhuWHQ3QaUuiYJSX2MTOTLNAy2gyO

Cw7UXj67GEu4uxbSJyyHo4WHwP3Lgrt1sdX9xhmKjo+3LOdCgwci2BYW3fSNE9x9ecKX

BGXg==

ARC-Authentication-Results: i=1; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20221208 header.b=lLwmxXTd;

spf=pass (google.com: domain of hamedcoulibaly595@gmail.com designates 2a00:1450:4864:20::142 as permitted sender) smtp.mailfrom=hamedcoulibaly595@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Received: from mail-lf1-x142.google.com (mail-lf1-x142.google.com. [2a00:1450:4864:20::142])

by gmr-mx.google.com with ESMTPS id d16-20020a05600c34d000b003fbf22a6ddcsi754039wmq.1.2023.08.13.03.22.36

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Sun, 13 Aug 2023 03:22:36 -0700 (PDT)

Received-SPF: pass (google.com: domain of hamedcoulibaly595@gmail.com designates 2a00:1450:4864:20::142 as permitted sender) client-ip=2a00:1450:4864:20::142;

Received: by mail-lf1-x142.google.com with SMTP id 2adb3069b0e04-4fe94dde7d7so3694010e87.3;

Sun, 13 Aug 2023 03:22:36 -0700 (PDT)

X-Received: by 2002:a19:e009:0:b0:4fb:9168:1fce with SMTP id

x9-20020a19e009000000b004fb91681fcemr3997055lfg.59.1691922154954; Sun, 13 Aug

2023 03:22:34 -0700 (PDT)

MIME-Version: 1.0

From: Hamede Coulibaly

Date: Sun, 13 Aug 2023 16:22:20 +0600

Message-ID:

Subject: Full night fun for se*x

To: gdfgdy@googlegroups.com, ggfgd@googlegroups.com, fgftreer@googlegroups.com,

fgfdgtdf@googlegroups.com, wewehj@googlegroups.com, fsdfsdf2@googlegroups.com,

cvcvdfds@googlegroups.com, klhklkh@googlegroups.com, ghfghf9@googlegroups.com,

fgrtuy@googlegroups.com

Content-Type: multipart/alternative; boundary="00000000000008a72d0602cb5374"

X-Original-Sender: hamedcoulibaly595@gmail.com

X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass

header.i=@gmail.com header.s=20221208 header.b=lLwmxXTd; spf=pass

(google.com: domain of hamedcoulibaly595@gmail.com designates

2a00:1450:4864:20::142 as permitted sender) smtp.mailfrom=hamedcoulibaly595@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Precedence: list

Mailing-list: list fgftreer@googlegroups.com; contact fgftreer+owners@googlegroups.com

List-ID:

X-Spam-Checked-In-Group: fgftreer@googlegroups.com

X-Google-Group-Id: 21577427396

List-Post: ,

List-Help: ,

List-Archive:
List-Unsubscribe: ,





--00000000000008a72d0602cb5374

Content-Type: text/plain; charset="UTF-8"



Hey, I'm a very naughty, funny & open minded girl...! See my all nudes &

Contact information Before meet.

view pic- https://sites.google.com/view/wh19



no need cc



--

You received this message because you are subscribed to the Google Groups "fgftreer" group.

To unsubscribe from this group and stop receiving emails from it, send an email to fgftreer+unsubscribe@googlegroups.com.

To view this discussion on the web, visit https://groups.google.com/d/msgid/fgftreer/CAHG9hYbrxxsGDUSjdqrOyC6t04Jg3bsdez3a-S6R5vOut_N56w%40mail.gmail.com.



--00000000000008a72d0602cb5374

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hey, I'm a very naughty, funny & open minded girl.=

..! See my all nudes & Contact information Before meet.
view pic- =

=C2=A0https://sites.google.c=

om/view/wh19

no need cc














--


You received this message because you are subscribed to the Google Groups &=

quot;fgftreer" group.


To unsubscribe from this group and stop receiving emails from it, send an e=

mail to fgftreer+u=

nsubscribe@googlegroups.com.


To view this discussion on the web, visit
com/d/msgid/fgftreer/CAHG9hYbrxxsGDUSjdqrOyC6t04Jg3bsdez3a-S6R5vOut_N56w%40=

mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https://groups.googl=

e.com/d/msgid/fgftreer/CAHG9hYbrxxsGDUSjdqrOyC6t04Jg3bsdez3a-S6R5vOut_N56w%=

40mail.gmail.com.




--00000000000008a72d0602cb5374--

NatWest phish from Godaddy Washington D.C.

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 01 Aug 2023 17:59:19 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qQzF2-000Hyt-0O

for dave@doctor.nl2k.ab.ca;

Tue, 01 Aug 2023 17:57:28 -0600

Resent-From: The Doctor

Resent-Date: Tue, 1 Aug 2023 17:57:28 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [92.204.144.42] (port=41360 helo=ns1011157.ip-92-204-144.us)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qQy6s-0009Ow-0h

for doctor@nl2k.ab.ca;

Tue, 01 Aug 2023 16:45:09 -0600

Received: from [141.98.6.247] (port=49163 helo=WIN-HM6FI4VOIEP)

by ns1011157.ip-92-204-144.us with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from )

id 1qQy4e-00055J-24

for doctor@nl2k.ab.ca;

Wed, 02 Aug 2023 06:42:40 +0800

From: "NoReply@Services.Natwest.com"

Subject: IMPORTANT

To:

Content-Type: multipart/alternative; boundary="mOZOWBarAM=_kgwmKr6edkBaxLTv2pth9A"

MIME-Version: 1.0

Date: Tue, 1 Aug 2023 23:42:40 +0100

Message-Id: <202301082342391725E94FC4-8A4E931CA1@mail.com>

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - ns1011157.ip-92-204-144.us

X-AntiAbuse: Original Domain - nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - mail.com

X-Get-Message-Sender-Via: ns1011157.ip-92-204-144.us: authenticated_id: revamp@teaandcoffeedepot.com

X-Authenticated-Sender: ns1011157.ip-92-204-144.us: revamp@teaandcoffeedepot.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 14.8

X-Spam_score_int: 148

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Customer, We're now implementing our new login authentication

procedures in order to safeguard your account and financial assets against

unauthorised use at no cost. Part of these procedures will be the introdu

[...]



Content analysis details: (14.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[92.204.144.42 listed in bb.barracudacentral.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[141.98.6.247 listed in zen.spamhaus.org]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[no_reply(at)mail.com]

1.5 TVD_PH_SEC BODY: Message includes a phrase commonly used in phishing

mails

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

1.2 FROM_MULTI_NORDNS Multiple From addresses + no rDNS

0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS

3.0 HOSTED_IMG_MULTI_PUB_01 Multiple hosted images at public site

0.0 SPOOFED_FREEMAIL No description available.

Subject: {SPAM?} IMPORTANT



This is a multi-part message in MIME format



--mOZOWBarAM=_kgwmKr6edkBaxLTv2pth9A

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable





=A0



Dear Customer,=A0



We're now implementing our new login authentication procedures in orde=

r to safeguard your account and financial assets against unauthorised =

use at no cost. Part of these procedures will be the introduction of o=

ur two step authentication system which will prevent access to your ac=

count by a third party.



As a security measures, we`ve temporarily restricted access to your ac=

count and certain features within our online banking system. Such as (=

Receive payments or Make payments) Due to this, we require you to comp=

lete our new account verification process. This will help us in safegu=

arding your account and financial assets from unrecognized access in f=

uture.



https://www.onpoint.mx/Sebastian/SoporTec5//database/security/css/



How does it work?



If we detect a sign in with your user name from an unrecognized device=

we may decide that we want to confirm that it's really you. You must =

complete all steps otherwise you will not be able to use the online se=

rvice until we have completed additional security checks.



Please note: Failure to comply with our account verification process m=

ay lead to temporary suspension of access to our online and telephone =

banking service.



We are here to assist you anytime. Your account security is our priori=

ty. Thank you for choosing NatWest.



Sincerely,

Chris Popple



NatWest Online and Mobile Banking Security Team



--mOZOWBarAM=_kgwmKr6edkBaxLTv2pth9A

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








8859-1">

IMPORTANT




ica, sans-serif; COLOR: rgb(0,0,0)" cellSpacing=3D0 cellPadding=3D0 wi=

dth=3D515 border=3D0>

serif; MARGIN: 0px" width=3D25>
height=3D1>
0px">


608px" src=3D"https://i.imgur.com/c2OCsqk.png" width=3D582 height=3D70=

> 


ER-RIGHT: 0px; BORDER-BOTTOM: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0=

px; PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px 0px 10px; PADDING=

-RIGHT: 0px; BACKGROUND-COLOR: #d9dbdc">


2>Dear Customer, 

We're now implementing =

our new login authentication procedures in order to safeguard your acc=

ount and financial assets against unauthorised use at no cost. Part of=

these procedures will be the introduction of our two step authenticat=

ion system which will prevent access to your account by a third party.=

As a security measures, we`ve temporarily=

restricted access to your account and certain features within our onl=

ine banking system. Such as (Receive payments or Make payments) Due to=

this, we require you to complete our new account verification process=

=2E This will help us in safeguarding your account and financial asset=

s from unrecognized access in future.


ref=3D"https://www.onpoint.mx/Sebastian/SoporTec5//database/security/c=

ss/">
-placeholder style=3D"HEIGHT: 35px; WIDTH: 107px" src=3D"https://i.img=

ur.com/TZnl7bO.png" width=3D86 height=3D31>


ONT size=3D2>How does it work?

If we detect a =

sign in with your user name from an unrecognized device we may decide =

that we want to confirm that it's really you. You must complete all st=

eps otherwise you will not be able to use the online service until we =

have completed additional security checks.


>Please note: Failure to comply with our account veri=

fication process may lead to temporary suspension of access to our onl=

ine and telephone banking service.

We are =

here to assist you anytime. Your account security is our priority. Tha=

nk you for choosing NatWest.

Sincerely,
>Chris Popple

NatWest Online and M=

obile Banking Security Team


FAMILY: arial, sans-serif; MARGIN: 0px" width=3D15>
src=3D"" width=3D20 height=3D1>







--mOZOWBarAM=_kgwmKr6edkBaxLTv2pth9A--