x-rated Google Gmail spam Melena <mohammeddoe56@gmail.com> from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 24 Jan 2024 18:49:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rSoqh-000000008oV-1J73

for dave@doctor.nl2k.ab.ca;

Wed, 24 Jan 2024 18:48:12 -0700

Resent-From: The Doctor

Resent-Date: Wed, 24 Jan 2024 18:48:11 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f58.google.com ([209.85.210.58]:43262)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rSnRP-00000000JRe-1UEh

for root@doctor.nl2k.ab.ca;

Wed, 24 Jan 2024 17:18:03 -0700

Received: by mail-ot1-f58.google.com with SMTP id 46e09a7af769-6dde7840866sf226171a34.0

for ; Wed, 24 Jan 2024 16:16:05 -0800 (PST)

ARC-Seal: i=2; a=rsa-sha256; t=1706141759; cv=pass;

d=google.com; s=arc-20160816;

b=DJkDA0zmat9A0ZDwnNKUJqcAF8wDs8KS/O92THPzFIGsZoC9CKN0X9N/9Iwz/CctJ/

j3TsDkJJj+odYv8incGpFZzzFAwd0diWE5LD1gHh6u7zkHMlB08mYn52PkePN2oZKVyV

rL35TZUTLI8MLqImhDRqEUhbRRZMkmdCMBDA90frWBnkPAKZ3czWrfRHK4knUbH/W/XC

9clE76aWvqGv34kbmzJHErp1UlMy4Yp13PoJs9rPaXdMGE72hORfqCNVRBTNcQ5MiiJn

U1ntosiRojNGMoIOKbgNMTaH9GHwe38k/VQJdLhPkZ5+n40jZcnVr0VgkMcg0eghpspV

LwWA==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature:dkim-signature;

bh=8mvIx+ekvWcgBjRJmJPTPIfaLLQ1TVDcYmq5/GlXNes=;

fh=F6LXu5JUuF5LO0wWrbknmVPEH4Mex6Ocv1WiJdmBxVE=;

b=j1q+wLp9vn65lqH/S0wVD+2CjoMCujlK8YCmqDv4y/7NAnuVm4C67oed3OxaijSYlq

QNIRI7nHCyx2COukOlSIHMLlQ2u2ZI58BijqaZaFcDn4oV0H6b4O9JcEjgDaPbJowAhj

Cvq2RgFJ1YZGzLSRN/fgY5WXcVrprkuNyKY4GT2UzsQA3U3cjEP2nWjHuLrFXOEB4jQk

x8XH647DQEQS/+ouLHUlDT2hSFei0LTRcTt5jUHV6u0QgrtQ1UhYK1r+D8o2b9fn8Fqo

w4aZ6FKdxNQiiODRabjDgEOzzrFMLFAvlm6nodlREnlVxDYxiHvDcJdtZGkjuVBnC6aF

LiTA==

ARC-Authentication-Results: i=2; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=cOK57IPD;

spf=pass (google.com: domain of mohammeddoe56@gmail.com designates 2607:f8b0:4864:20::f43 as permitted sender) smtp.mailfrom=mohammeddoe56@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=googlegroups.com; s=20230601; t=1706141759; x=1706746559; darn=doctor.nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=8mvIx+ekvWcgBjRJmJPTPIfaLLQ1TVDcYmq5/GlXNes=;

b=v/2W8exLf0WE1XRmijv2zTBfmHyBQRFnzjLW1uPm7gq8jisuk794Od+WCo+GP/JrQD

3IQAOs1KMa2mMzBuXewOBLqnlffKnyTpO0hcbnCVfM23M6959wn07HaeO4Nf3qbpmWfJ

zFX+s3Kxexc0OiTho1iZsxU8797N1ZpELVa6NwaO7zWgRbp83jzdbHPeAP6H1NvS+zXr

wZXYf/KBLwtEtL1l1iY1h4G857BLWrKZsuaUOKQh77OJwH6WTYGeW0+5N3gJr/XzbJMf

VVhSgZSUN4dQZiRcf8QJW4Ec2gH53UhKIx0hunKHnTjwyFm+4KjJw6jh+IjbHb86JUAt

cp/A==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1706141759; x=1706746559; darn=doctor.nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=8mvIx+ekvWcgBjRJmJPTPIfaLLQ1TVDcYmq5/GlXNes=;

b=e0m9+Fk3QSk5EXhGzenh9ngzAtbVKWuyLo8D4o7J27e6g9ct77DkYD3MA4w6ilpwBZ

w0PI6DB8Rv9iUd5UHkm7hGX1AQ2HDQ0p1cX+H4zm7xaC13hQqjLNC00dW70Q9wJAxAGk

XuOGP3+ShDDFKnse6+dVKZ8y+gvkm2naOAfXAjALOy3/xwjkuu02uafkplUeoWGDL9yR

BkO3fMnLTOt/qMfArfJVb+yV05HfP8E3ACIbPPBHqReIaVfa9y/yPQ43Bp9j2IzSLbWc

UdFtz+e+FsueJQazPbi1x5oJ265iWKJZNgCKFvEt6DLYLrBuGi7gdcp8bB2e0x8HUNYb

XR4Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1706141759; x=1706746559;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-beenthere:x-gm-message-state

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=8mvIx+ekvWcgBjRJmJPTPIfaLLQ1TVDcYmq5/GlXNes=;

b=ws8vL1dlOCC1gBo5Ya+OBotjsXTqyi3yE2I+qP52JxjIWOQezlLou2f2yk2W3sWl1z

K5skiKmWH207Wou6zMGQFMoU+BF2Bml3UAbWxV/OJxpuB5d471zqJY2vSPZf9ppM+WVe

zYqHhN3334X7NNVrbh9quMNj56grfnWZCBcnA2WWrgWx+OnzW2xnDwl7BWx2XlX7sHTV

C4GWQvTNf9ntvXcnmCe81qgUGJwfK7sI26zS2i0SryrDXeMEcwNYIUT0B+o5waoWTOlB

EvDT0+VOYcqyrb5u01hzU1dNrFbSWgGDfLxApPyck+fZn5X1cx5CN0Zirz4ePpyQDtFc

GMWg==

Sender: fresh_01_58528212485814@googlegroups.com

X-Gm-Message-State: AOJu0YxKdjbwe/Y6ZpigD/ULctKX4cMYzFFDpgdwDgh20BsLb7ELyTNL

1QyFTIaB2hjzO3D2yIhUKqNjfSo1aiFua5ljxFGg7y7YL7bBBUf3

X-Google-Smtp-Source: AGHT+IFsj9Jh4tUM0FJTx57LB5iMgy04+NPW+UgyK2oWK6lUUK2MjeBMwze+IrRtND6wMxZuXrns+g==

X-Received: by 2002:ac8:57c3:0:b0:42a:52b1:55db with SMTP id w3-20020ac857c3000000b0042a52b155dbmr2053108qta.35.1706107939031;

Wed, 24 Jan 2024 06:52:19 -0800 (PST)

X-BeenThere: fresh_01_58528212485814@googlegroups.com

Received: by 2002:ac8:7dcb:0:b0:42a:5d08:436c with SMTP id c11-20020ac87dcb000000b0042a5d08436cls315248qte.2.-pod-prod-00-us;

Wed, 24 Jan 2024 06:52:18 -0800 (PST)

X-Received: by 2002:ac8:4e89:0:b0:42a:322d:d812 with SMTP id 9-20020ac84e89000000b0042a322dd812mr2486355qtp.1.1706107937803;

Wed, 24 Jan 2024 06:52:17 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1706107937; cv=none;

d=google.com; s=arc-20160816;

b=Fyw+vDz8ukk8+wRbPYkQX1vM8fhLGzuf1mjsObLtro4jFLIvRZwOQqxJk7ePFrJYVU

oW30iQCEtnf+Qdct2HovkZ0TGEsewYRAOQIMzJtqMfnvaKtrRqzO1AATfGeutMunALGQ

/c192XNwyS7Z1QnkH/SVcaswzkxnGmjVUvIUTcdlSZIWmpjCKl+/NhIgYDz2MjdwBPWL

TQ7pdOmn1sdT7zCLRxpWyakCaAKfEUEcCEPkis6zTaNS6loHUTMG9z1E2y7ERfiw7cjd

tJT+GehdhRCi5V3pDiNl0PIlKorpiaigQkIYxzgD8AxL5FB6XAojOVAxuVOEBSQwULfj

R5VA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=9KnSWuwKvknB0j6bHxiHVdmMRONeQnjrh849caSGgPc=;

fh=F6LXu5JUuF5LO0wWrbknmVPEH4Mex6Ocv1WiJdmBxVE=;

b=omc3wSwj/9Hth5WHRdGJRM0+hW3JLHT+5UCqRQJHo0MI+lSR+je9pLjLBsuJaO9UQk

fKgSfc3ccyXlzcm0IswX4URqMsCwjluv5nEHHyokMq/w8ZT3ix+dr0QtQ5TOhjRep6hm

gnP9uh8GZMM2MB6Wf6SLchZtwBUi7F1DI03bxwMbWEGzqqQC34dUJpvewkvC1FOgIhO7

+pekYi0wzfUgpE86wwefpzsMwio06JjTaw9pFrYwr3BL8YKOrtfZF0+4dswduRuzvlu9

Ew2yNaR+rwCFdIM5lvNGV7vT8Esw3xJUihqv/d1UIg1Oqoam+Up3Ioeuo8sxRuHdplNr

211g==

ARC-Authentication-Results: i=1; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=cOK57IPD;

spf=pass (google.com: domain of mohammeddoe56@gmail.com designates 2607:f8b0:4864:20::f43 as permitted sender) smtp.mailfrom=mohammeddoe56@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Received: from mail-qv1-xf43.google.com (mail-qv1-xf43.google.com. [2607:f8b0:4864:20::f43])

by gmr-mx.google.com with ESMTPS id t5-20020ac865c5000000b0042973718d3esi709780qto.0.2024.01.24.06.52.17

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Wed, 24 Jan 2024 06:52:17 -0800 (PST)

Received-SPF: pass (google.com: domain of mohammeddoe56@gmail.com designates 2607:f8b0:4864:20::f43 as permitted sender) client-ip=2607:f8b0:4864:20::f43;

Received: by mail-qv1-xf43.google.com with SMTP id 6a1803df08f44-686b7f2c535so836326d6.0;

Wed, 24 Jan 2024 06:52:17 -0800 (PST)

X-Received: by 2002:a05:6214:e46:b0:681:557a:c080 with SMTP id

o6-20020a0562140e4600b00681557ac080mr2352760qvc.28.1706107937322; Wed, 24 Jan

2024 06:52:17 -0800 (PST)

MIME-Version: 1.0

From: Melena

Date: Wed, 24 Jan 2024 20:52:06 +0600

Message-ID:

Subject: Can you come this weekend?

To: fresh_01_5852821245961@googlegroups.com,

fresh_01_5852821245963@googlegroups.com,

fresh_01_5852821245967@googlegroups.com,

fresh_01_585282124596@googlegroups.com, fresh_01_5852821245@googlegroups.com,

fresh_01_58528212485814@googlegroups.com,

fresh_01_5852821249@googlegroups.com, fresh_01_5852821250@googlegroups.com,

fresh_01_585282125480@googlegroups.com, fresh_01_58528212549@googlegroups.com

Content-Type: multipart/alternative; boundary="0000000000008d7b16060fb23508"

X-Original-Sender: mohammeddoe56@gmail.com

X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass

header.i=@gmail.com header.s=20230601 header.b=cOK57IPD; spf=pass

(google.com: domain of mohammeddoe56@gmail.com designates 2607:f8b0:4864:20::f43

as permitted sender) smtp.mailfrom=mohammeddoe56@gmail.com; dmarc=pass

(p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Precedence: list

Mailing-list: list fresh_01_58528212485814@googlegroups.com; contact fresh_01_58528212485814+owners@googlegroups.com

List-ID:

X-Spam-Checked-In-Group: fresh_01_58528212485814@googlegroups.com

X-Google-Group-Id: 128202668634

List-Post: ,

List-Help: ,

List-Archive:
List-Unsubscribe: ,





--0000000000008d7b16060fb23508

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hey Babe, The weekend is around the corner, and I'm in the mood to

celebrate! =F0=9F=98=84 Got any fun plans?

view pics> sites.google.com/view/uijk24



No need any cc













































////////////////



--=20

You received this message because you are subscribed to the Google Groups "=

fresh_01_58528212485814" group.

To unsubscribe from this group and stop receiving emails from it, send an e=

mail to fresh_01_58528212485814+unsubscribe@googlegroups.com.

To view this discussion on the web, visit https://groups.google.com/d/msgid=

/fresh_01_58528212485814/CADbHFPc2mFziNeOdy62SSeweV%2BoPvwSeJRHm_2xCr7MViDP=

nFg%40mail.gmail.com.



--0000000000008d7b16060fb23508

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hey Babe, The weekend is around the corner, and I'm in=

the mood to celebrate! =F0=9F=98=84 Got any fun plans?
view pics> =

=C2=A0 =C2=A0 sites.google.=

com/view/uijk24

No need any cc








r>













////////////////<=

br>








--


You received this message because you are subscribed to the Google Groups &=

quot;fresh_01_58528212485814" group.


To unsubscribe from this group and stop receiving emails from it, send an e=

mail to
com">fresh_01_58528212485814+unsubscribe@googlegroups.com.


To view this discussion on the web, visit
com/d/msgid/fresh_01_58528212485814/CADbHFPc2mFziNeOdy62SSeweV%2BoPvwSeJRHm=

_2xCr7MViDPnFg%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">htt=

ps://groups.google.com/d/msgid/fresh_01_58528212485814/CADbHFPc2mFziNeOdy62=

SSeweV%2BoPvwSeJRHm_2xCr7MViDPnFg%40mail.gmail.com.




--0000000000008d7b16060fb23508--

Fedex Phish from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 25 Jan 2024 05:35:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rSywD-00000000C77-0lpC

for dave@doctor.nl2k.ab.ca;

Thu, 25 Jan 2024 05:34:33 -0700

Resent-From: The Doctor

Resent-Date: Thu, 25 Jan 2024 05:34:33 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wr1-f49.google.com ([209.85.221.49]:42009)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rStzQ-00000000K28-0ez4

for doctor@doctor.nl2k.ab.ca;

Thu, 25 Jan 2024 00:17:35 -0700

Received: by mail-wr1-f49.google.com with SMTP id ffacd0b85a97d-3392b15ca41so241506f8f.0

for ; Wed, 24 Jan 2024 23:15:38 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1706166931; x=1706771731; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=c7mby8xMvJhPNqxeIDlacUwQ/EiNRfuuotjvE131qTg=;

b=QHwW865V/k2ZeVsW8gP0/qcVFWXU6tJzwZs7SghjxJHXqPL1hKOu2H21Ul8m6s+Mnh

dyo2sPzZVXGLd+4GBAweOMs8toBvWwiwtNhlxZzqR2zrQ3e82eBI03gyZsp4o/R8/tdr

g7mg3lICI0qSflk7jwq+yW9zISoCOjxcXntnsBknFM2DDQ/j09T2uImrk9edWyEtHwcx

/Cf8KMLvFhqMVP0Ad2glmZn9/3kWowyfu3qOmaYLMTtvaIRN2ePP0OuQEiqCmaSVo9ea

DcZZwJh1cbnKR7ABB/6KJLcOEaa1nIM42lZQTu7R1OXuYjnNMSwGHq9QFTGJRONFEtY2

k0PQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1706166931; x=1706771731;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=c7mby8xMvJhPNqxeIDlacUwQ/EiNRfuuotjvE131qTg=;

b=o3T6UEfTQvpsAOqpRncagRH66tWD7Kl6Tyyv6ypSP6RRxEhPJuAimoZeoxjFH6WyP8

WWKQ1rQLy81LwzVwkJs5diDEz8KlDtjGpniVDzNRggz2CWFsESqdiMAtrX2XsY8wdox+

mktEhvpTonDHIR3xSROStwCuBNuhauTi4XQpFXOqP3+bh9FTGSDnYR2Fu6wAQNeE2V72

xAvwaB5BIZ2jTQ8Ep2/tlqpo9YXCav5x0/0uuFMevlD4d8HPGZF4gQSRCa1PcV6eAtYB

59pE1gLmG7LBGqLLwVTYM1Prs0ZJ2pbqgMar/5VyTtMmNNFtSwHFP8YuI/9vR/Iho7b0

wfRQ==

X-Gm-Message-State: AOJu0YzicHP9hhMmD5L849+kwgAlU+NDHwHiOAlFKy0sHFVspSI+ywxm

b0GqL6xL2kJ4m55VirlCVS511bY3ZE43bgUl5IwwW2CYYdk3+kkqKW2JWVh5GgoVOaV2F7NPvVW

ypmd3GBdVy+ZNoA4UWDoZlKfoXwcorjYxzho=

X-Google-Smtp-Source: AGHT+IH5h/gdXGRKWXJzuWw9HTnbVBrtdpxK61R20bJcSy4UXeASlvn1RumEOPJgqHk62jpro3PjcrvKz4md25aQtQA=

X-Received: by 2002:adf:e60a:0:b0:33a:1fa:c868 with SMTP id

p10-20020adfe60a000000b0033a01fac868mr205653wrm.28.1706166931397; Wed, 24 Jan

2024 23:15:31 -0800 (PST)

MIME-Version: 1.0

Received: by 2002:a5d:5648:0:b0:336:a125:141e with HTTP; Wed, 24 Jan 2024

23:15:31 -0800 (PST)

From: fedexcouriers57

Date: Thu, 25 Jan 2024 08:15:31 +0100

Message-ID:

Subject: Attention

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 10.8

X-Spam_score_int: 108

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Attention: Dear Beneficiary This is to bring to your notice

that we have credited your total sum of $5.500.000.00 USD into an ATM VISA

card and we have deposited it with DHL Express Company to deliver it to you.

We paid all the [...]



Content analysis details: (10.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.221.49 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[fedexcouriers57(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[fedexcouriers57(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.49 listed in wl.mailspike.net]

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.1 MONEY_NOHTML Lots of money in plain text

0.0 FILL_THIS_FORM Fill in a form with personal information

1.0 FREEMAIL_REPLY From and body contain different freemails

0.0 MONEY_FORM Lots of money if you fill out a form

2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Attention



Attention: Dear Beneficiary



This is to bring to your notice that we have credited your total sum of

$5.500.000.00 USD into an ATM VISA card and we have deposited it with DHL

Express Company to deliver it to you. We paid all the necessary charges

such as Company registration and delivery fee.



The only money you will send to them is the security keeping charges of your

ATM VISA card $35.00 dollars. We tried to pay that but they complained that

they don't know when you will contact them for the delivery and the demurrage

might have increased by then. I deposited it on 25/01/2024. Therefore, contact

them now with Your:



Your Full Name........

Your Country............

Your City Airport........

Your Home Address........

Telephone Number.........

Gender...................



DHL Express

Email address: deploymentagent711@gmail.com

Tel/+22964083699

Domain Name sale spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 25 Jan 2024 13:34:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rT6Q9-00000000NFI-1XCK

for dave@doctor.nl2k.ab.ca;

Thu, 25 Jan 2024 13:33:57 -0700

Resent-From: The Doctor

Resent-Date: Thu, 25 Jan 2024 13:33:57 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f180.google.com ([209.85.222.180]:45109)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rT2e6-00000000Meq-1evJ

for sales@nk.ca;

Thu, 25 Jan 2024 09:32:10 -0700

Received: by mail-qk1-f180.google.com with SMTP id af79cd13be357-783c5a73797so34348985a.2

for ; Thu, 25 Jan 2024 08:30:08 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1706200202; x=1706805002; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=FJS36nfTPEKSSPgBpIaqsHb6tqMiwh50n5+vX5QruRE=;

b=Oo7vIJKqFNGe4PItrw6MEDKdEwLsyGwohOG6bYonKfSC4ACi/W+eZrUQ8QycuCRaLf

x23EQ8t0e3IFGzpwqa//e9FfdLc4VGzcqwV6DWgS6ZkGtT4/uCSusw9CVTXYC1WnhuFo

CPPXXcfgt/humlsV0Vpb0gBfAtwyE+ca/AT+mi0HDhkcb6H2SFmPmI9/vIbzwtu+o+dd

05z11hseSDxbCW4bUCLVS5vz7vn2XEVNJjg0oquhjPX0MoD+1dVFN9pobhrblwl3f4L+

AtN64wec2i5hhlZ8sCkeqQFYkq3MCUmyR4l4dTiAfLVod/wd0/V6iyNuRO7GQXKTeZSR

JY+A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1706200202; x=1706805002;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=FJS36nfTPEKSSPgBpIaqsHb6tqMiwh50n5+vX5QruRE=;

b=C2aiOwLbpO/KyVoMgVer5Wzfj6vV7OxU+Vxyv/WEZP2AERIP7gED0O50fpo5qnezSa

lmd01REmKmOSGNT/eLApMYVLFGNusO8/CxHO2jQ52dvF0/VUoA+5VNqmqmSHaskbL3b2

lfKw7BaM+3VfuptBmW9SQfYytrNj/2hzrXAV7swvWhRLI88IHWJoqOZNM4ToLTa0w5gZ

2W8dBgAphHtspBlRVXAV0HU06K3dGoSENHXFdQ2X0bYQ21oFfRgUed8JYum4e95bFJVZ

WkNaRFS7d+L0xVI8dv3JwC15O7L8kOFS9urlvzuvurOK7Mvqt7gDMR1/CKQBn40/ELXP

uw+w==

X-Gm-Message-State: AOJu0Yyf/j76M3kAn9+RdNtRiw9hnTEQQNGkrTCIb+1C/TlOUU9lCtJT

Bf635A0wl4OJTrr+3zalKlLdx806Hmtopxv69T9V0ozOpOsaUV9EC/T8T0uoIk8lfDeagVRElpB

J1StK2nHO1Uk7OGtrV8pT34uyFzyLNWdBR6U=

X-Google-Smtp-Source: AGHT+IG/iD/wBX295df6WRcg/NxSqopkcgxpgAi/A3qCid0PSzfGUQpgD9ppc5a3tbyCmwn1Cg0wdwYpATEa0Wu0Bso=

X-Received: by 2002:a05:6102:19d4:b0:46a:fa5d:2027 with SMTP id

jn20-20020a05610219d400b0046afa5d2027mr1002857vsb.49.1706198344105; Thu, 25

Jan 2024 07:59:04 -0800 (PST)

Received: from 326440123436 named unknown by gmailapi.google.com with

HTTPREST; Thu, 25 Jan 2024 07:59:03 -0800

MIME-Version: 1.0

From: Vivian Rhodes

X-Streak-Sequence-Data: action-key=acn_B06xJj7qKs-bwxmJOw; recipient-key=rcp_B06vtZJ6OjNGiS-4Nw

Date: Thu, 25 Jan 2024 07:59:03 -0800

Message-ID:

Subject: Alberta Broadband

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000378851060fc74218"



--000000000000378851060fc74218

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,



Trust this email finds you well



We currently own the domain name www.BroadbandAlberta.com and we are

reaching out to explore a possible sale of the name to you



We'd like to know if you would love to own this domain for your

business/company?



Regards

Vivian

=E1=90=A7



--000000000000378851060fc74218

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,

Trust this email finds you well

We cu=

rrently own the domain name www=

.BroadbandAlberta.com and we are reaching out to explore a possible sal=

e of the name to you

We'd like to know if you would love to own =

this domain for your business/company?

Regards
Vivian=C2=A0<=

/div>


3D""
=3D"width:0px;max-height:0px;overflow:hidden" src=3D"https://mailfoogae.app=

spot.com/t?sender=3DacmhvZGVzdml2aWFuMTBAZ21haWwuY29t&type=3Dzeroconten=

t&guid=3D024607d5-39aa-44fa-9008-12a5a72a44d4">
size=3D"1">=E1=90=A7




--000000000000378851060fc74218--

Nigerian spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 25 Jan 2024 13:35:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rT6R7-00000000NGG-2VPY

for dave@doctor.nl2k.ab.ca;

Thu, 25 Jan 2024 13:34:57 -0700

Resent-From: The Doctor

Resent-Date: Thu, 25 Jan 2024 13:34:57 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f174.google.com ([209.85.208.174]:46212)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rT4bw-00000000L2p-2QTe

for MAILER-DAEMON@doctor.nl2k.ab.ca;

Thu, 25 Jan 2024 11:38:03 -0700

Received: by mail-lj1-f174.google.com with SMTP id 38308e7fff4ca-2cdfa8e69b5so77217301fa.0

for ; Thu, 25 Jan 2024 10:36:06 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1706207759; x=1706812559; darn=doctor.nl2k.ab.ca;

h=cc:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=HtNnoRTl92TrFGZFTa7sMmuhIIzNospyRBtPc0txftg=;

b=dfks4Aqc5bMznHHmA0B/jReFqUCX4y75/v3hntd4xxQIGC2afZ2BhtF0sEne+h+jFC

0wA9r/Epih+RNZF0vJfFe51EuayrvqkStHAQO1Sh9jChFKGUQhQmBtpTtJvFVUCbRqGv

1GMD+xzW2TWJ56Q3zyjIIb0wrX3iweed35OWmmUWXlLOsGML8QyPhGcsctkbDR81JKNF

g7coZXLGImhemdCjW4mNZWCRlLoIAH7sesELrasbmMS8oX1wExmIB1ei2gHpmuJSotZl

U1bkuB8lLcugofg/7tsXCHjYQxrTQJfL1bAvHEhVO1AYyGm/fcnACZwqyYz8lbtQq+zQ

72GA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1706207759; x=1706812559;

h=cc:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=HtNnoRTl92TrFGZFTa7sMmuhIIzNospyRBtPc0txftg=;

b=wTCkFlwI/JWitOZOZE0UFq6N4wIUAoCzdhXh+/MliP3XmQBonLYcL1eXxLLRMnukUF

CIumdfyk/wSQtPaZIPLeRKdPd/zspzN604ynyiqO4Aq8HnLg09ZTAopgSxYpU8ouneJ2

PzXsd/gS8DJBg6zEDRCLFue98hHUsX0t4XByYLQUcg355BxVsnCd0fFQNXBqA4E7RQSd

CcMwkRqBhat9WmDZliyRz68f7WthMEq4KFfLz1AFT6R7lBwIy5ZEfMUdor21JgGn5+CQ

Wgb7mWrWzAkMt/x+YeeU2BdhRg1PMYQjktQyvNW6N9uGWIYelg7AXwSKycUMj0smrY9T

SrtA==

X-Gm-Message-State: AOJu0YzpZhvU4KGSF1HiiYh1OxIKsvmKVkjVjWQaddXHK9gxeIiTLgJB

rbpjzUWoMS/VHGCvu5fQ7COjhW4rmJM45XIfHb1FkaJYE4ETANPYJXQ50UkB8cB6+iD+JmTt33m

CI5300MtCVmoSzhJH+TWXnT3ZoIONvvcD7y0=

X-Received: by 2002:a2e:2e1a:0:b0:2cf:33b9:81e with SMTP id

u26-20020a2e2e1a000000b002cf33b9081emt38143lju.38.1706207386006; Thu, 25 Jan

2024 10:29:46 -0800 (PST)

MIME-Version: 1.0

Reply-To: austinmusa220@gmail.com

From: Austin musa

Date: Thu, 25 Jan 2024 10:29:31 -0800

Message-ID:

Subject: Greetings Lucky Person,

Cc: MAILER-DAEMON@doctor.nl2k.ab.ca

Content-Type: multipart/alternative; boundary="000000000000649db8060fc9732e"

X-Spam_score: 18.8

X-Spam_score_int: 188

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Greetings Lucky Person, I'm sorry to invade your privacy

in such a manner. But I actually have a good reason for springing up this

connection. I contacted you specifically regarding an important piece of

information I intend [...]



Content analysis details: (18.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.174 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[evangelistruthikejehovah6(at)gmail.com]

1.2 MISSING_HEADERS Missing To: header

1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[evangelistruthikejehovah6(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[austinmusa220(at)gmail.com]

2.5 SORTED_RECIPS Recipient list is sorted by address

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.174 listed in wl.mailspike.net]

2.5 MILLION_USD BODY: Talks about millions of dollars

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

1.6 TVD_PH_BODY_META_ALL No description available.

0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)

2.2 FILL_THIS_FORM_LOAN Answer loan question(s)

2.0 TVD_PH_BODY_META No description available.

1.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 FILL_THIS_FORM Fill in a form with personal information

0.0 MONEY_FORM Lots of money if you fill out a form

0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)

0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)

0.0 T_MONEY_PERCENT X% of a lot of money for you

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

1.8 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money

Subject: {SPAM?} Greetings Lucky Person,



--000000000000649db8060fc9732e

Content-Type: text/plain; charset="UTF-8"



--



Greetings Lucky Person,



I'm sorry to invade your privacy in such a manner. But I actually have a

good reason for springing up this connection. I contacted you specifically

regarding an important piece of information I intend sharing with you.



I got your email address from Internet computerized search so I decided to

contact you for this great opportunity.



Let me officially introduce myself to you. I am Austin Musa, from Burkina

Faso, I work with (B.O.A) Bank of Africa Burkina Faso As an account officer.



This is a great opportunity transaction which I notify from our bank an

abandon fund which belongs to our late foreign customer who deposited the

sum of $10.2 million United States dollars, but he died out of cancer and

ever since then no one has applied to claim the fund so I write to you with

confidence that you can be a help so we can get the fund out of the bank as

his foreign business partner note that once the fund is been released to

your wish bank account in your country it will be shared among us in the

ratio of 50 % 50 so if you are interested please kindly forward your

details so we can move towards it.



Your full Name.....



Your Bank Name....



Your Telephone Number....



Your Age And Sex.......



Your Marital Status......



Your Occupation.........



Your Country City........



A Copy Of Your International Passport or Working ID Card or Drivers

License...



Thanks

Mr, Austin Musa



--000000000000649db8060fc9732e

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






ature_prefix">--

-smartmail=3D"gmail_signature">

Greetin=

gs Lucky Person,

I'm sorry to invade your priv=

acy in such a manner. But I actually have a good reason for springing up th=

is connection. I contacted you specifically regarding an important piece of=

information I intend sharing with you.

I got your=

email address from Internet computerized search so I decided to contact yo=

u for this great opportunity.

Let me officially in=

troduce myself to you. I am Austin Musa, from Burkina Faso, I work with (B.=

O.A) Bank of Africa Burkina Faso As an account officer.


>
This is a great opportunity=C2=A0 transaction which I notify from our=

bank an abandon fund which belongs to our late foreign customer who deposi=

ted the sum of $10.2 million United States dollars, but he died out of canc=

er and ever since then no one has applied to claim the fund so I write to y=

ou with confidence that you can be a help so we can get the fund out of the=

bank as his foreign business partner note that once the fund is been relea=

sed to your wish bank account in your country it will be shared among us in=

the ratio of 50 % 50 so if you are interested please kindly forward your d=

etails so we can move towards it.

Your full Name..=

...

Your Bank Name....

Yo=

ur Telephone Number....

Your Age And Sex.......
iv>

Your Marital Status......

Y=

our Occupation.........

Your Country City........<=

/div>

A Copy Of Your International Passport or Working I=

D Card or Drivers License...

Thanks
Mr, =

Austin Musa




--000000000000649db8060fc9732e--