Canadian Tire Survey Phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Feb 2024 06:17:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rexJa-000000009zT-3T07

for dave@doctor.nl2k.ab.ca;

Tue, 27 Feb 2024 06:16:10 -0700

Resent-From: The Doctor

Resent-Date: Tue, 27 Feb 2024 06:16:10 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-mw2nam12on2121.outbound.protection.outlook.com ([40.107.244.121]:28065 helo=NAM12-MW2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1resxz-00000000CTn-0TWA

for sales@nk.ca;

Tue, 27 Feb 2024 01:37:39 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=PszAhvI4HSrGsTFf9QnAzA7AeV0yQZtX8xA7Fl/tUk8jw6QuQSzV6egVGFPsXyia5RT8k8aBXC6rOn3t8JPU+axeSh8fUg4FkuBxTo5nz2mVfnq0QW56fioW9OI/kHaWP7tceqb51s5Z8ZPHMr7/iyn9B8Hth45kruL20+t1jWMCEIszL/NGVXDdIYD70O7UJ3kofq/lXtu2ig2skMnRJnC0J/qatCnmgDq4EfwrXsnGO/JojiapGPzn03OThSCQrEsEvhEYHI56AHNm3qZ50vqJdMDfgZqBwq+T2yaF8vlrpK4QXQp3cgosx8Vb00XqYOA0w7fwzmW46DaZhfIstg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=i5S1uxn2Ec4KG4tBQFYKdE86U1M1DVD/UcCap9WFG9E=;

b=jloqzplcH82FhPxpp02/7KujdxaSuabO+hy0mFaMDxX98CnT3RddHFRZNhID+5kyRVDbXqzyN3SH59ro7Ylz77bipexEiRGe1wn6DB2bfk2bagPr7u/pSq8PKO1NZ/GV5DFismqr+vGADrTvbt7QpZLf437jhCpPpztXInwTWA3ofXtnzqAIfPspsb880tzwqCl5yxlThvyoOKsdSFxkbujFlZbHyRRPRMGu6eC8AOzDNBCWaWqnqs6jD/5BP6lPCslmLvqtFhNzB14baNH5sOx0zfGwMiO4fHaFRXZ8FTQfR8214TP/HEQnBWYXvZHJgphAVbiyO2QEga1EZ5efCA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=bujdzspqe.ierd.sbs; dmarc=pass action=none

header.from=bujdzspqe.ierd.sbs; dkim=pass header.d=bujdzspqe.ierd.sbs;

arc=none

Authentication-Results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=bujdzspqe.ierd.sbs;

From: "=?UTF-8?B?Q2FuYWRpYW4gVGlyZSBSZXdhcmRz?="

Subject: =?UTF-8?B?U2hhcmUgWW91ciBUaG91Z2h0cywgQ2xhaW0gWW91ciBSZXdhcmQ=?=

To: sales@nk.ca

Cc: sales@outlook.com

Content-Type: multipart/alternative;

boundary="_92714865-c9e0-4ac6-af43-1cf184727cb9_"

Date: Tue, 27 Feb 2024 08:25:22 +0000

X-ClientProxiedBy: CH0PR03CA0293.namprd03.prod.outlook.com

(2603:10b6:610:e6::28) To BYAPR04MB6231.namprd04.prod.outlook.com

(2603:10b6:a03:ef::25)

Message-ID:



X-Message-Flag: Flag for follow up

MIME-Version: 1.0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BYAPR04MB6231:EE_|SJ2PR04MB8895:EE_

X-MS-Office365-Filtering-Correlation-Id: edcb3087-4f3d-4313-8a8c-08dc376f0d21

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

DbZT+bju2sncbPdoqT3bPPKJdgHmZs5lX8+qNeOGXocLyEvcOstU6M0c1OBsq0IfRDw2GumLOFFkUFUvbwl04SPq1wnSZQoRR8xE+zKkNkhlW1bJoCzQo9prHBcSNQQqnpFY/bdNI0U8lIVCOJNYwgK4o1+sv/Cc5KeR3LfhEBPx7pdZOQ5CL5PJEP6Np5uOGOLc3W1q6StR9pH/QnD4DpnMFHyp9MrQ8SnqZ03rNsieSZttA8IWTxcY1bSjNXRAVFgRcur6cYf5Ek0V/D341TwBJFFETa3gUX+lJ8bxd6Xv7G3CvzO0fQMQZLHBvW7suBXOBamh7ain4/DWXswMZ3ymld2Y3xRbqRuXey2V/0h8ItvpR+u7svrnsIfILPZydHW99yduQ2ZcT3N6D193nwbxLUu/GhDyehZlXlV9LTDjjCOzmA4F755qQ+z3Ez89HMkCLU5Sp/QVB/XjOir/RMkI1FIWsE27lIqIsWem631zFd8lxD8zxJlrusK0QOTsq81NTJLroePIy/vooUNAHZz7l3wTQp/pSqWor8sw2SwdmcJxDjSquGit19ML4fWk6KqMDXYsz0NsVEQykb+1OpyL8FhJ53pVMrLbozUnN/iAusfak/UwIwoc/r/YAx3cz5aBOLev038CGGm3oFV6SOa8TyJBZs6AxhK1PTgWfT4Y9qYXPLqErYXinJ+vn7Rf

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BYAPR04MB6231.namprd04.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230031)(37730700002);DIR:OUT;SFP:1102;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?cnIrdVJpem9NZ2trZDhic1Z4S2kzS2VwRGZxOXNNcGJ3blpxNTZCbjhabUYw?=

=?utf-8?B?aGYrZmlFWk95ZVpaako0c0UzKzA3QnRYMWpzcmtWaVZPb1NoaEh5aDlvWHlJ?=

=?utf-8?B?RjVZOE9OSWNXRGZHZXNWQUowdGxGSm9JbEszbWNQcWlyMko0TWJSQ3p0VkY1?=

=?utf-8?B?OEN0a0IxaFBWMlRnOWkzeFhTNk1idnJLQ3lJTzFsbkFsV1dIdzBSRk5hL3Z4?=

=?utf-8?B?ZFBDVVl4RFk5U0xvWUhIUnlXcm8vZDFPQk1TWmdVR3prdmN4d05DeG5kaXVi?=

=?utf-8?B?MHhmUzRuSmQwdnk0ZHNNV2h4bHkwcGg3ZytqWTZFa2FTWXB5TklNM2pmSU5l?=

=?utf-8?B?bWF3T3o0V2VVejM5Yk4xNDR6a0pvOWNuYmdsbk5GQU9IYi9PRWgrSFVhVG05?=

=?utf-8?B?ZmVaa0VOSkdsajM3QkRZZHpvZVJEOE45LzBwYVJDRGFuTktpNjBBUlRuSkNE?=

=?utf-8?B?SnRlWGM3Mk1VQVowT0l3Y0FkbUoyZnBsMDA5UkxGYUk4TTh3ZTJIcXZJUnpZ?=

=?utf-8?B?SUhmWWl1c0tyOWhYd1pXK0dBZXAzZnlpK0Y4MjVhTGNxRG9Kaml4ZHV5SXp1?=

=?utf-8?B?NmVTMURsc1lNazZ5ODU1TklVZVdUQ3NQZUFTNTJoa3pOdkswcm5EZFJhS1Nv?=

=?utf-8?B?M0tFR0I0aE1kN2lQN0lQMitURGVwd1RTQ1N2OXFpNlEvV3ZadWcvRkVlYnpr?=

=?utf-8?B?MkJWNjBhRTUyTXlEUkFpY0Qyc2gxTGZ1dG82UzUwbUI1cFZ3eWpJblcySEl5?=

=?utf-8?B?RVJTNFJxaHFmU1BUM01XRWd5Zm0yZnNPOTV6NVduRk45cWRFV2haRElBV1Fw?=

=?utf-8?B?N3NLblVoemgyYnBLN0Zjak5ua2RuNDVNUTZzK2l5NlZPTVJNWmpQb1Bacmh3?=

=?utf-8?B?VTNES3NsdktXNmdKOW14aWdWREdyVC9OUU9sMjhISCtCc0NvbjNVc3dPaGNi?=

=?utf-8?B?QzNFYklwWkpJbkJwcit2dnhxN3d2NWxOS3J5dCsxeFgzQTJHaUVodm9uY0ox?=

=?utf-8?B?ODZvdktCUWhVNVV0Rkh4M1MvMDN5RENNZHo2dUY1SDZMTDBNUDVuY2VMNzNw?=

=?utf-8?B?TFRsS0tZWWIxRndLWUFDNDJJR0pZSTlkVDlTNUp4eDlaVnk4YWcydy94TFgz?=

=?utf-8?B?K01sYTRDaTVJQktTa1o0UVl6YVhidXVzVE9xVlFkRDIwOEdIVlpqanFGd0pG?=

=?utf-8?B?UzdTSlVLZ1cvV0hMTjBPV0lpZEMxM1l6ODl3cWk3NDZ4bVN2K1NIQjRBMDlm?=

=?utf-8?B?eTkvb3ZGRVF3QmFwSUhuTGxlc3ZGMHBucmgvdVA2VFp1d1AwZ0tTL2NDQ3d5?=

=?utf-8?B?eG5UN0Zqc0VrOE5lZCtpYW54NHljQlhneEkvc2kwbDl3TTlrc09Gc3czcjVV?=

=?utf-8?B?ZWoxRkVwb2h5d09na2oxaEwzSGhweDRlQW0zR05GSkkyWC9ock5qK1NZT2dO?=

=?utf-8?B?ZXk5TVlqcVRsZ0xVRjlVWVg5Slc0b2FzeW5EZGxpdHVVTHFFVXBPdUViV05w?=

=?utf-8?B?RktOaTFBSS8wZU1rWnU4N2dDZGxRNHJhanEyem1DaXNtSDJWVFoxdm12NC9h?=

=?utf-8?B?a1BVZlJhcUdBWDFwUStCVk1BaUJxcExhVm11ODNrT2N6c2Q2TW5HRFU4bWxY?=

=?utf-8?B?bXBnYjdNRDBGd3g1aE9nNGllT3VvQkxGdkpnNlN5anE2WUxkYURzM0prbE1W?=

=?utf-8?B?dkZLNGNkUFAzRXhteTlkTDFuUnQ0WTF0dEg0L3NVYUpWb2Q3SDBJWXVCNCt4?=

=?utf-8?B?NWpBc3oySGZKU1dQYUc2RlprbENLS0VDRENlL1FRSjRncnBMR2g4dHl0Y1hW?=

=?utf-8?B?YmdCYUo0K2RlWDVseTJqWUk5UDhYR2h3VEFLSW5WeHBRa2FJYW8xdXNWTFFm?=

=?utf-8?B?VFNUQWN2UnVIWE5xai90V0pQWjl2bmV5SzNRWENLakJEdG5kNk5vb0VBN044?=

=?utf-8?B?T3dNODVhem5reGlya29rWTV0eENla0xsZTBJMnJtNVVBSWlic0NKWm4zT2ln?=

=?utf-8?B?VmtVQUE5bHR3S0JhTzIvNXNhVnRTblFBaVhBK09TZ01QSXJtVFlqWUJRMEM2?=

=?utf-8?B?VlUyKzNHQ21YZlMrdlBaUGl2SFZOWDVEclk5Y1JERkowM1A4ZUNYajNvdEIv?=

=?utf-8?B?QnJ1dWNSWEZCUGQ3RVczcU1mWnR0TEU1ZTVqeTYvVER3SGtyMFJ6NG13U2h5?=

=?utf-8?B?QXc9PQ==?=

X-OriginatorOrg: bujdzspqe.ierd.sbs

X-MS-Exchange-CrossTenant-Network-Message-Id: edcb3087-4f3d-4313-8a8c-08dc376f0d21

X-MS-Exchange-CrossTenant-AuthSource: BYAPR04MB6231.namprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Feb 2024 08:35:28.2253

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 541aeacd-7c15-4844-bb27-4eda88b8ef2a

X-MS-Exchange-CrossTenant-MailboxType: HOSTED

X-MS-Exchange-CrossTenant-UserPrincipalName: ywgrNr9cZfZMR5wJsjE1b1Bmtc9MUI32m1IxGER7XoWS7Y0fpdrNt324iAdWRf+AdimtguVGtxC2ge3PNjhPLGf8XgxNI6k8fwyRaV6vnck=

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ2PR04MB8895

X-Spam_score: 9.8

X-Spam_score_int: 98

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Exclusive Rewards Await: Participate in Our Survey Your Say,

Your Reward: Take Our Survey Now



Content analysis details: (9.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.107.244.121 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.107.244.121 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

0.0 T_REMOTE_IMAGE Message contains an external image

2.7 SCC_BODY_URI_ONLY Very short body with something maybe clickable

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} =?UTF-8?B?U2hhcmUgWW91ciBUaG91Z2h0cywgQ2xhaW0gWW91ciBSZXdhcmQ=?=

X-Antivirus: AVG (VPS 240226-2, 2/26/2024), Inbound message

X-Antivirus-Status: Clean



--_92714865-c9e0-4ac6-af43-1cf184727cb9_

Content-Type: text/plain; charset="UTF-8";









--_92714865-c9e0-4ac6-af43-1cf184727cb9_

Content-Type: text/html; charset="UTF-8";





Exclusive Rewards Await: Participate in Our Survey


Your Say, Your Reward: Take Our Survey Now

















--_92714865-c9e0-4ac6-af43-1cf184727cb9_--

French language phish from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 26 Feb 2024 20:24:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1reo44-000000000dR-2U6T

for dave@doctor.nl2k.ab.ca;

Mon, 26 Feb 2024 20:23:32 -0700

Resent-From: The Doctor

Resent-Date: Mon, 26 Feb 2024 20:23:32 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f175.google.com ([209.85.208.175]:59689)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1reny5-000000000P0-4BPh

for doctor@doctor.nl2k.ab.ca;

Mon, 26 Feb 2024 20:17:25 -0700

Received: by mail-lj1-f175.google.com with SMTP id 38308e7fff4ca-2d27fef509eso31992171fa.3

for ; Mon, 26 Feb 2024 19:15:26 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1709003719; x=1709608519; darn=doctor.nl2k.ab.ca;

h=mime-version:list-unsubscribe:date:subject:to:reply-to:from

:message-id:from:to:cc:subject:date:message-id:reply-to;

bh=lALb0iL8ukRx/LM/hhF38GmKGTtmxG1l7ZIgCRbmjxA=;

b=cQURvsc48SzTMSbsTe7aVHQZ8+/oSKqfaKj+QrZgpxr0d9rqL7RwjmxhnVQKCHcV1p

JoROtq5hMOgvtQkdJQcrekeUGz/McmBdhMW5oohEXhjZlS9uNDt4Ko+5wF2cRTh2zzU0

Iw/wQOA3AdPqdojQqkecqbgogPKLns/49rlU9I2tS7D5zHejN0w0b13oJomMzb7iTk0G

KY87Go6z7p/sDLF16Bhqdb11Nmz/t8Myya8DS5Gw63waqHKOiEq8/7qLHuxf34PgLXyv

fee2pruOrHpU3vwabS3KKkCiV4XpnNfcr6nMHb3rr3LOWMRATI5HmrMj+4stSzyAi8ff

9rCg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1709003719; x=1709608519;

h=mime-version:list-unsubscribe:date:subject:to:reply-to:from

:message-id:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=lALb0iL8ukRx/LM/hhF38GmKGTtmxG1l7ZIgCRbmjxA=;

b=S2PtpbF8AWvIPTqb6bORX+HfzrnxMqntZRy+PPJBkH/S/ebNaJU+pvszG+nMNC+VBZ

7AY66dSux8KEzDaupYhus+qnU97a3L7yKehGdalY9Xdjejg2tqxo6+d9SEAzd4Ef9WPU

01G9YiZUli6odeeYm7+/jEWmvX5nVgyZ2kJOBihQjyk18Lt+RN3yaZx1PorPpSCvQs1d

WzbWdTul7myBTw3nriDDr/r/jauaUanNsuV7bgG0mn/ovktGUACwxkizWLcfpx8PU5sQ

8O3DCnV1crpdKu//It8mGr2MnZKEXkiXGNJD2Q9CjNe/wXk2pdAnvm4JaEspC8BY1zb5

JI3g==

X-Gm-Message-State: AOJu0YyJVB+omH6GHXkZCABt9xbtAk9WXoDx4KQXVV27X5yfJVaqkEdQ

Uj0+ci572aTJMfeeRZH0rMZYzjkqMJT/HE4Et+Ld1DZaF5/yKURdFvSI/yyG

X-Google-Smtp-Source: AGHT+IEZpnA6ctxeqZW1d9b0ulUeT+MmYvvq6owcH+eki0kIVWd0H5/I2v0B/DIomqh102A4EEdrSA==

X-Received: by 2002:a17:906:6dcf:b0:a3e:b3e6:5b71 with SMTP id j15-20020a1709066dcf00b00a3eb3e65b71mr5814816ejt.62.1709003249165;

Mon, 26 Feb 2024 19:07:29 -0800 (PST)

Received: from PC-PC ([156.0.212.34])

by smtp.gmail.com with ESMTPSA id qu25-20020a170907111900b00a434cae86ebsm307894ejb.219.2024.02.26.19.07.28

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Mon, 26 Feb 2024 19:07:28 -0800 (PST)

Message-ID: <65dd51f0.170a0220.64e37.171e@mx.google.com>

From: =?utf-8?B?Q2xvdmlzIEVUU09VQkFSSQ==?=

Reply-To: clovis025@outlook.fr

To: doctor@doctor.nl2k.ab.ca

Subject: =?utf-8?B?bWVyY2kgZGUgbWUgZmFpcmUgc2F2b2ly?=

Date: Tue, 27 Feb 2024 04:07:25 +0100

List-Unsubscribe:

X-Priority: 3

Mime-Version: 1.0

Content-Type: multipart/alternative; boundary="CE57E4C23768465AB9A7902270A0D128"

X-Antivirus: AVG (VPS 240226-2, 2/26/2024), Inbound message

X-Antivirus-Status: Clean



--CE57E4C23768465AB9A7902270A0D128

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable



=0D=0A
quiv=3DContent-type>=0D=0A=0D=0A=0D=0A
=3D"MSHTML=208.00.7601.17514">=0D=0A=0D=0A

"WIDOWS:=202;=20TEXT-TRANSFORM:=20none;=20BACKGROUND-COLOR:=20rgb(255,255,2=

55);=20FONT-STYLE:=20normal;=20TEXT-INDENT:=200px;=20DISPLAY:=20inline=20!i=

mportant;=20FONT-FAMILY:=20Segoe-UI;=20WHITE-SPACE:=20normal;=20ORPHANS:=20=

2;=20FLOAT:=20none;=20LETTER-SPACING:=20normal;=20COLOR:=20rgb(100,103,110)=

;=20FONT-SIZE:=2017px;=20FONT-WEIGHT:=20400;=20WORD-SPACING:=200px;=20font-=

variant-ligatures:=20normal;=20font-variant-caps:=20normal;=20-webkit-text-=

stroke-width:=200px;=20text-decoration-style:=20initial;=20text-decoration-=

color:=20initial">Bonjour doctor@doctor.nl2k.ab.ca,
=0D=0A=

 
=0D=0A
TEXT-TRANSFORM:=20none;=20FONT-STYLE:=20normal;=20TEXT-INDENT:=200px;=20MAR=

GIN:=200px;=20MIN-HEIGHT:=2010px;=20FONT-FAMILY:=20Segoe-UI;=20WHITE-SPACE:=

=20normal;=20ORPHANS:=202;=20LETTER-SPACING:=20normal;=20COLOR:=20rgb(100,1=

03,110);=20FONT-SIZE:=2017px;=20FONT-WEIGHT:=20400;=20WORD-SPACING:=200px;=20=

font-variant-ligatures:=20normal;=20font-variant-caps:=20normal;=20-webkit-=

text-stroke-width:=200px;=20text-decoration-style:=20initial;=20text-decora=

tion-color:=20initial">Je=20cherche=20un=20porteur=20de=20projets=20qui=20p=

eut=20m'aider=20=C3=A0=20investir=20mon=20argent=20dans=20des=20bons=20proj=

ets=20tels=20que=20:=20l'industrie,=20l'immobilier,=20l'h=C3=B4tellerie,=20=

la=20restauration,=20l'agriculture,=20l'=C3=A9levage,=20la=20pisciculture,=20=

la=20p=C3=AAche.=20Si=20vous=20avez=20des=20projets=20et=20que=20vous=20che=

rchez=20un=20investisseur,=20merci=20de=20me=20faire=20savoir.

=0D=0A
style=3D"PADDING-BOTTOM:=200px;=20WIDOWS:=202;=20TEXT-TRANSFORM:=20none;=20=

FONT-STYLE:=20normal;=20TEXT-INDENT:=200px;=20MARGIN:=200px;=20MIN-HEIGHT:=20=

10px;=20FONT-FAMILY:=20Segoe-UI;=20WHITE-SPACE:=20normal;=20ORPHANS:=202;=20=

LETTER-SPACING:=20normal;=20COLOR:=20rgb(100,103,110);=20FONT-SIZE:=2017px;=

=20FONT-WEIGHT:=20400;=20WORD-SPACING:=200px;=20font-variant-ligatures:=20n=

ormal;=20font-variant-caps:=20normal;=20-webkit-text-stroke-width:=200px;=20=

text-decoration-style:=20initial;=20text-decoration-color:=20initial">Clovi=

s

=0D=0A
FORM:=20none;=20FONT-STYLE:=20normal;=20TEXT-INDENT:=200px;=20MARGIN:=200px=

;=20MIN-HEIGHT:=2010px;=20FONT-FAMILY:=20Segoe-UI;=20WHITE-SPACE:=20normal;=

=20ORPHANS:=202;=20LETTER-SPACING:=20normal;=20COLOR:=20rgb(100,103,110);=20=

FONT-SIZE:=2017px;=20FONT-WEIGHT:=20400;=20WORD-SPACING:=200px;=20font-vari=

ant-ligatures:=20normal;=20font-variant-caps:=20normal;=20-webkit-text-stro=

ke-width:=200px;=20text-decoration-style:=20initial;=20text-decoration-colo=

r:=20initial">doctor@doctor.nl2k.ab.ca,doctor@doctor.nl2k.ab.ca,doctor@doct=

or.nl2k.ab.ca,doctor@doctor.nl2k.ab.ca,doctor@doctor.nl2k.ab.ca,

=



--CE57E4C23768465AB9A7902270A0D128--

Canadian Tire Survey Phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 26 Feb 2024 20:23:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1reo3R-000000000cJ-0NGw

for dave@doctor.nl2k.ab.ca;

Mon, 26 Feb 2024 20:22:53 -0700

Resent-From: The Doctor

Resent-Date: Mon, 26 Feb 2024 20:22:53 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn8nam11on2100.outbound.protection.outlook.com ([40.107.236.100]:24289 helo=NAM11-BN8-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from <6EVDJO496@khupsslg.uinunqg.motorcycles>)

id 1renEu-00000000P63-1kos

for sales@nk.ca;

Mon, 26 Feb 2024 19:30:44 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=dLHwMsJxlGMNExqJWaZSItVjSsOiUb/mjhpT1lzNXXKLYypxpzpk33+lE3ibJw1fT5fEgWDPTWIw4dcqABjk6F8ZLYNA92hRiH7tZ00n5wceJ6alzFBFSPvCgVNQMRa745pMWY0wIap+pX+wjnJo8kpyaFd59fXqZ+g9aR4LTwiqYDtxrv+oncVaLRDCSiOvvlkS1xEjAyfMppwi63tNXGmd6mtrBfAGEbwT3tpN1CE1UABgZrvX9oOTT4rfcf9YyeLrKFWXzYBMjTgQZ4P6wd+O60EeR0986cC9O2T8TOPlpzeheQtk9sabYarAPAfJOksmJXe6IrYgVEAJUKn9tQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=3b6hXxnb+F30Rjdg+gI9LHZ57829roTw7c/wkV2w0NI=;

b=IY2kUhlSNWZWiVwDLTL38q+vg9DLVruFqVdEtO3E+lzFSyDPw8F+todK6ZcVZ7TZnzYMJbXVpl/14Tql9qBH6TfVEkyg2+fGQXCfnHqWWyghJuMmO+e+yNQee7RKsTSFgO0LNsFbY/7/PS6TkYwMRJjTDx7+ebtKeE7YzbowJasMPwJQp/DX7RWy+02/A6x3+BTjP6jEHPFnl1VsjGIWWUOsWnyoEtQotXYMXBO7y08oUp7vEnuB5Vi02PxlU559dgAoYKR6exCnVgaOh9PHXajJUeQMdT9mgfq7DrimnYjCQljtvZrKv6U5z1bDAGQ0xSfhoXj2jOJEKWzfol5szg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=khupsslg.uinunqg.motorcycles; dmarc=pass action=none

header.from=khupsslg.uinunqg.motorcycles; dkim=pass

header.d=khupsslg.uinunqg.motorcycles; arc=none

Authentication-Results: dkim=none (message not signed)

header.d=none;dmarc=none action=none

header.from=khupsslg.uinunqg.motorcycles;

From: "=?UTF-8?B?Q2FuYWRpYW4gVGlyZSBSZXdhcmRz?=" <6EVDJO496@khupsslg.uinunqg.motorcycles>

Subject: =?UTF-8?B?U2hhcmUgWW91ciBUaG91Z2h0cywgQ2xhaW0gWW91ciBSZXdhcmQ=?=

To: sales@nk.ca

Cc: sales@outlook.com

Content-Type: multipart/alternative;

boundary="_3438a44d-9bcf-45eb-8035-32b909bbcb16_"

Date: Tue, 27 Feb 2024 02:28:31 +0000

X-ClientProxiedBy: CH5PR02CA0022.namprd02.prod.outlook.com

(2603:10b6:610:1ed::8) To BN7PR15MB4082.namprd15.prod.outlook.com

(2603:10b6:406:b5::11)

Message-ID:



X-Message-Flag: Flag for follow up

MIME-Version: 1.0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BN7PR15MB4082:EE_|SJ2PR15MB6442:EE_

X-MS-Office365-Filtering-Correlation-Id: 6f5abb49-dcc2-4f66-61ad-08dc373bce68

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BN7PR15MB4082.namprd15.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230031)(37730700002);DIR:OUT;SFP:1102;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?d3g1SzRPUXRDVGpBR0xvRXh1NUoyK2pXOE5WSmVKbHI2eEp4ZUtHbDRjOTBV?=

=?utf-8?B?c1I5K1hycFVyZHNZOGdDZGxPZU1jUGhoTnYra2tqSno2c29wdC9KZDFRTmF0?=

=?utf-8?B?a1JuNEp5b2pWQ2NONWtLSUNvaUxPcmZwZkVJMUJVYzkzMmp0QjM4Z2MwYk53?=

=?utf-8?B?K1MzdlppUXE5T3VlMGRicW91Zk9sYU01RGRzNUFpS3ZVeldWOW40SEpBVlhB?=

=?utf-8?B?VHRaTWJUTC94cko0LzZMQjlxNC9sMWxpZmw2ZExXVkJ4WmpQVXNOVlppR1hG?=

=?utf-8?B?ZnZ3UEg2SVVhc0ZkUnNxVGNyNnBJUDlVYlNRYWVNbG93VmxnVmtKczVObytx?=

=?utf-8?B?Y2FGVys2VHE2U05SdmczbEh6QWxvZmJPL3lIT21IZEtOUy9LNVlyL2tkUVky?=

=?utf-8?B?dGd5YTA4RHNGUXBrQzY3QXpubWY1T2pTNS82N0JqTWpHVkI0Ty9tTnBUNDB1?=

=?utf-8?B?RHI4dnZ2RU9GZXpYa1dSTE8yeGR6cmc1N2JHay9tUmc1N2lRaWgyQ1hFclRu?=

=?utf-8?B?eFdacHkrb0Q1RHAxdFhlaUwyWE9hVkZvc1Y5TlNKSVJuOUlOdm5QQ3NMY1U4?=

=?utf-8?B?TDk2dEZ1WHpETGZuVTRCem9wcVFpMWYzWmVHM2svZ2Z0RldRMkJKejlvOWc2?=

=?utf-8?B?MzZMcCtVaCtSYndJMk1lb01sc3ZiaVIrZllFTFpialpwSzgvUnJOY3VzdytU?=

=?utf-8?B?V2FzQXhtWjJjZU94aWlYbXVnekQ2aC8veGJhb0M1MzZXaEZzdHprSzdYM1ZY?=

=?utf-8?B?SzBCRlZseVFidE1VT3ppZ0g5ckw3VXlRRk9MU1NJQkdZS3dnV2xaMHE3MEgz?=

=?utf-8?B?M3NlcC96bStpUUtjWVhUMFExL3gyZjdqNnFmcHpmNExuK3JkWFNiOEN2akJI?=

=?utf-8?B?VHBrTVRac2M0a0RPZWVqRGhnSTY4am1VNU9qM1lUNVRBWXFjOGxkZzgzNnVU?=

=?utf-8?B?emxCZUYxK0NVcGZscFJ1RHRETHY1SjY3VkplbDE3eUtsRUZMTyszSE5KbWpt?=

=?utf-8?B?VDJraTFHQUhZMjFWUXlUV25xb21peXRCNWprNUdHdVlnTkozUHErdVlXT2hT?=

=?utf-8?B?aGgyZnNKSDRONjA5ZDFHcFNjNFhQeUE2R3dNSUI0aXRhaU9NUkFYRnFLU05s?=

=?utf-8?B?K21WYnlqK3BDODBESGNITG8walNYMXZsY25pR3ppQkp2R3gzVlpWYmdKbWRC?=

=?utf-8?B?c0ZQbjNMd3g1QitnUW9RVnBsSXRPMzE4RzFVay9hUEV3WHk0WWZjeEVhTTRM?=

=?utf-8?B?dERYZ3Zaa1JCVSt6bUJHUnBpL3FSWTY1T1laNWtRbElNNGdSOGtKV0UybW1E?=

=?utf-8?B?KzZXM3ozOUtQQkdMUklvSm0yZ1FLUXJsRVZxTWV1OEZuY3VjVHRVdjVzb1ZR?=

=?utf-8?B?THlvOWRxTFpoSnJxT2VUV3FPUVQ3WnBncFhRVkNBa3B0VDVpM2x5anNiSldR?=

=?utf-8?B?ODh0V0loUGUyUUhMa00xaGVLZGJBQUZHR0o2cFBqRzVKeDdZR1JEMlpOSm1C?=

=?utf-8?B?dkFPWVlzM3JCcUpGTUNINm5lQUlDajkyNjVobVg5QnY1TUlzQ2ZuWStZdUZ5?=

=?utf-8?B?eEd0ZktjczBWeUpaVzhEeTlONjhvMHdtNkpISC9ObHJVd2JhMWNQMnRzRG5N?=

=?utf-8?B?T1dZSTlNVEkxaDg5U1BpUXhqem4wZDBrMjFqUUlOazJzSi9sVzh3SE5GNGMx?=

=?utf-8?B?SHRRZXhkdDQwcFd4TTVWdUUxS0JudWVELzdxL2djVHUyK25BYzRVaWpEUjhV?=

=?utf-8?B?Vk9wdVhHd1JGNWdZaEZlUE5BSjlkTzMzT3NuN1I3K2JoOFlNczVudDJ0M3dV?=

=?utf-8?B?Q1R4WkFCTFpTUlVEdXpEU2U0MC93aFVNRkFKR3c3amlDdEEvL0lTdVlGUG8w?=

=?utf-8?B?QkdUTzluTGgycEdQMHpZOE5WelhqNUdwNll2U1VRaDkrVElES3dIRHpQeGNO?=

=?utf-8?B?UEI1UERlcmxPVlpKZ284d1FrVW15ZkQyc1N5eEFFRlkrOGM1RnJ3K01UNk0z?=

=?utf-8?B?cUcyNDdXWDB3L0kwcHZtTjZZc2FFUGgvRHRmYnhsNEkvYXUvMkMrWVZFYVNR?=

=?utf-8?B?K1hkcTZQdit4VURYeEg0dWFsVExQam95MEpBU1lRdzd4RHViN3J2OUI2TE5C?=

=?utf-8?B?Z1V6WVlQckpCQUtIQUlraVIyM3dKN0l0OHRUN2I3Y05DMzF2Y0tydmU2dmRa?=

=?utf-8?Q?Cphpc82n4tAsj6DvOigC+Qc=3D?=

X-OriginatorOrg: khupsslg.uinunqg.motorcycles

X-MS-Exchange-CrossTenant-Network-Message-Id: 6f5abb49-dcc2-4f66-61ad-08dc373bce68

X-MS-Exchange-CrossTenant-AuthSource: BN7PR15MB4082.namprd15.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Feb 2024 02:28:38.5963

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 81aa8351-cf71-4c52-8dd4-1746675dacdc

X-MS-Exchange-CrossTenant-MailboxType: HOSTED

X-MS-Exchange-CrossTenant-UserPrincipalName: Mmi7TQcKU9jeBP+HnIlIKVuPy3dc8uz3dIKgZ1w9CTKH5P+hKUV8PDkdRqBM77ZziTKzG1Lv59jjuk9zZEUtAR5TPcqMXLgZduYE78SsiK7pHM/JK1zuCimD1uEwicXg

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ2PR15MB6442

X-Spam_score: 9.8

X-Spam_score_int: 98

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Exclusive Rewards Await: Participate in Our Survey Your Say,

Your Reward: Take Our Survey Now



Content analysis details: (9.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.107.236.100 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.107.236.100 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

2.7 SCC_BODY_URI_ONLY Very short body with something maybe clickable

0.0 T_REMOTE_IMAGE Message contains an external image

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} =?UTF-8?B?U2hhcmUgWW91ciBUaG91Z2h0cywgQ2xhaW0gWW91ciBSZXdhcmQ=?=

X-Antivirus: AVG (VPS 240226-2, 2/26/2024), Inbound message

X-Antivirus-Status: Clean



--_3438a44d-9bcf-45eb-8035-32b909bbcb16_

Content-Type: text/plain; charset="UTF-8";









--_3438a44d-9bcf-45eb-8035-32b909bbcb16_

Content-Type: text/html; charset="UTF-8";





Exclusive Rewards Await: Participate in Our Survey


Your Say, Your Reward: Take Our Survey Now

















--_3438a44d-9bcf-45eb-8035-32b909bbcb16_--

X-rated Google Groups spam bj kh <khbj82943@gmail.com> from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Feb 2024 06:14:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rexGu-000000009D1-2Mw6

for dave@doctor.nl2k.ab.ca;

Tue, 27 Feb 2024 06:13:24 -0700

Resent-From: The Doctor

Resent-Date: Tue, 27 Feb 2024 06:13:24 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wr1-f63.google.com ([209.85.221.63]:51367)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1revZp-00000000KxU-46Ml

for root@nl2k.ab.ca;

Tue, 27 Feb 2024 04:24:54 -0700

Received: by mail-wr1-f63.google.com with SMTP id ffacd0b85a97d-33d51bb9353sf2261393f8f.2

for ; Tue, 27 Feb 2024 03:22:55 -0800 (PST)

ARC-Seal: i=2; a=rsa-sha256; t=1709032968; cv=pass;

d=google.com; s=arc-20160816;

b=r93mhQBA9r5YpaEZ1DKI8ZEKuTMPr/3leS3miTrjoiXtwF3s5v1Hp/ZWnYXbxqEjci

SyDKzK5HI+N2OzLuzbyD4BI0CrPje9juO2AYP/s5cMwZ1HjBDyQ5MmFzWqVcvTRRxRRn

ByZbtp33l7kluMqjfAId0KOCzeen/peaf7HNd0hIyhpL/IQWmyu75uv81gI1A/YvmNqD

RNCziFzljlyAd8VnbCS8D5cnuAyUVKxu6OzOgqCKYeCtAk6bfSmFkBOv33a3dVPZ77PO

4MZjk/yofmhhvrEqdnJrOD7RZBVHymqaTIoaTLDrFW1WLcOJvqas3YAJCdaFC4fSXb6M

qY5Q==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature:dkim-signature;

bh=9lx+S1qKa4/4CYzOKIKTLlfxF79OFZmQ6ZOZcKRw9XA=;

fh=ns1YdB9B5c6LA/Wj6jqBBAYr/J5SiwD94C+vSFYK3ys=;

b=NWhHSiWiIWcpc0it6DJR02jR7V0/+YgEmJ9S3FRoZInB/PEAGzhjkHmHd0hnMLFX9M

8Vwr/j3ypLbMjsH5sxhKcd8X7GrxEQajb4uv5zngF3PAI5K1ONUJRv/hUm+2sT7GdQpA

JIgmmZrxMVQwqG0jLhEVUlLweNxQZj3tjc9gj/sVKJtBBgimviV2NGcXe5euthGAbHNn

hdQkTLVLwSFxV2umHyemBZzXsps1xPK9bjDVcXNLqXFRa6ZyvJRA4vb056yn0FERk0gv

tVXPedzOc+6GFYO98gbwDX71y34X8O4ODrZNeMdVFLSkInNlsll8hOhDIo81c1U+jDm3

TVqA==;

darn=nl2k.ab.ca

ARC-Authentication-Results: i=2; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=LqojYa3a;

spf=pass (google.com: domain of khbj82943@gmail.com designates 2a00:1450:4864:20::531 as permitted sender) smtp.mailfrom=khbj82943@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=googlegroups.com; s=20230601; t=1709032968; x=1709637768; darn=nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=9lx+S1qKa4/4CYzOKIKTLlfxF79OFZmQ6ZOZcKRw9XA=;

b=rSY6AxOis4dY2Kw7pNQhNUmJOOw09J0wEKc+mxzAb2kvd0yPreU/X5d7W74CUgOolr

DKqY5dGg1PZGbo5PI7dv8R9sMycNDvE5aRRdGjjAHvbLDxpvCXrQw0fxpFtKTen0Dr4c

wwn6m3SZgexU1cpNGX2/diXlQc4kZx/vfEsfGv8wF2ThQeJgrmrr3cJjnWyIFaDZI5t4

oPC35W3wGsONNj7+OThxqhlyWra19suUIap6g3n9aDIl/27/KPKHGsIcjj/jZpEkD1+Q

fHSwTwnaEASKoBBS/5Zn/sZaYDOMVabB5OzREPJXA3C56H1eZM+veT5u34k20z7uHJyD

j2ww==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1709032968; x=1709637768; darn=nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=9lx+S1qKa4/4CYzOKIKTLlfxF79OFZmQ6ZOZcKRw9XA=;

b=eVPp+ac76XM161V5mL79r+Wywl1RrGxJd/qJne+zQi1QvehTMLRbgmfGU2NdBOY7hQ

R6IjYdCwqmKRgH7smp8zmAYdK/3sH0g0P0VZwid1Re+bx7CHe3WtcOUI8bcvVuYFnooD

f1ucJ947XQ4uad91I44WctOq3Lq1eruHir5Ot0lLxHDRF2L8cGU+oqsaKnfTpfQ1PHbL

oAqPz7kYqYepl/DWHqPoa4Xhgrafa7JHcJr3A8/6hQyHg6aSaF8CgPAksF5MoAHWM6hL

o5vMWmroZAyL8LvFEMA+2hfj/hhp95G91135S3M+iylRjLESKh9UR5hFYaXBHmKSYkTv

pYfA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1709032968; x=1709637768;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-beenthere:x-gm-message-state

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=9lx+S1qKa4/4CYzOKIKTLlfxF79OFZmQ6ZOZcKRw9XA=;

b=n7ZceOefXrLPZOqUsg4lSt5XkyorfT9yeDq99cWya0d8/XtCV3O3d0oMOlTI50u+BT

WVe45yvwCYNtxwXrSeu5J8sAVGUrHOJt5OIB2OavnslPcPe/vXRJDb7PT5gEwYdEwxIh

8xAaGZqsTxyLdb2rcmt5HZdhEA6vmfs3gtvn+o4QXb+lohEAyaY0uQ/8LsX8dDkVeqUX

KqEDaHt5SOvv4iZ8HYz9VGaT4QcChdIgu17+ngsLT4Fg370gxrzr2TDk+gMP8xJigdEA

eyrYkrAhjZ8mcpYHq62VveWN6GKh9nZbrwa0E3ic2CYwlTn7dlcJCxEGrOjF8rSaMx1j

3yxw==

Sender: dece15-912025586@googlegroups.com

X-Forwarded-Encrypted: i=2; AJvYcCUGi3p1yb2WG3hRepNVmxflbfSlPAdJDrxMvy4M79lPqiC1/kt8m05Y2NFMKIpjdTjqLxeFwN+F2HYGcPdZ95E=

X-Gm-Message-State: AOJu0YwvoqpGrv3BOmJxB2F1HCR3ENSTzQ03tFJlmPYaJ29MX+OI7BRb

RVWTUJ+EOEB3OQNkJx8SY0L5kcym14Eggvxe42lKkZA0A8R0EHHZ

X-Google-Smtp-Source: AGHT+IFNOreGypft8Jb78FIqFfjM7Oww8rUZwU0mWIqVfSnDF1gPbnD19TOzqXPnABM38EcU/fyLqw==

X-Received: by 2002:a5d:6d8b:0:b0:33d:d98c:ea09 with SMTP id l11-20020a5d6d8b000000b0033dd98cea09mr2260168wrs.53.1708967213873;

Mon, 26 Feb 2024 09:06:53 -0800 (PST)

X-BeenThere: dece15-912025586@googlegroups.com

Received: by 2002:a5d:598d:0:b0:33d:d932:800f with SMTP id n13-20020a5d598d000000b0033dd932800fls477308wri.1.-pod-prod-04-eu;

Mon, 26 Feb 2024 09:06:50 -0800 (PST)

X-Forwarded-Encrypted: i=2; AJvYcCU2TalJTRBBAUOPK/7b6TOdZs0Nio19UwOEb3NQTh903zyfZt36ipofOUzqMh1wO6rQT0rM0XvifnoIUWFtoHNKd4sXiCwOe7Bo2YSI9CcL4Ls=

X-Received: by 2002:a5d:58e6:0:b0:33d:1517:8dd7 with SMTP id f6-20020a5d58e6000000b0033d15178dd7mr5809095wrd.8.1708967210314;

Mon, 26 Feb 2024 09:06:50 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1708967210; cv=none;

d=google.com; s=arc-20160816;

b=EKz8vJQb51riagDgnL6sgqmt/tbk3N0W7teL6GmV9r4ZmNiCTmuDTr4IJ3I+uAF/Ld

laJq3fsNLJ4KfQhf8VGjMs9jfNzfz6pfopo+QeCwNsHPXayqGUjsHPpIzdtQB6ki3cFN

v9fMbDFJuIm6MEFa55S2YnG9wgeM2HwIdp98tcNbi1w/wQiCMlxI+O5qxNe2/JtI8lYA

/U/zc6FPSP3uIHGYvIrLPRD4g8YWf440U2BLHLvox0+9cK7//Bq6WNxum317mKcyLAfV

uo1LuQiv8c2y6lxJ39ow3Nlf15xAShvO00Jz0Sg///Xv3YsDB1UWet7uv8coofcmez83

dqZA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=3faCUbCKP0lIGRBuXG85Jw468KzA668l7CIix0BekoA=;

fh=yoc5N5//53JWQk8EV1b0UTfT3omWpmG3LVznFLuc1No=;

b=QzOLtPFQRmBCWI2GUwZHIzVF7EgZylQ91wlzsgDTHyckz/+niy0/1KB8jw9aeVSOpc

CnEUKk1c6LROM0d5arGSl/uWvKJJRKqlv+uVW5dPTOZt6qTzCUKm3DeC6ExPFjrZQE0v

/aDbFFx6TJPxMkziKVL3fBUd7cUmAhCPH8ZBcSdGroZSUaGFqjt56NLbTMikh0d8UEgD

xbg6FXzI4Enxqk131vG7usFWHMRcv4Bg2BLEk9N/TtrO6QCk0AtscnwJUbWHVqksqSAe

gPupW70j4nn422WgFtgqhKIYJsPZ/LXJpTlgCV/EMiT7UUiVQ/e4CQJjdhRkpDIoV+l1

SMdw==;

dara=google.com

ARC-Authentication-Results: i=1; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=LqojYa3a;

spf=pass (google.com: domain of khbj82943@gmail.com designates 2a00:1450:4864:20::531 as permitted sender) smtp.mailfrom=khbj82943@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Received: from mail-ed1-x531.google.com (mail-ed1-x531.google.com. [2a00:1450:4864:20::531])

by gmr-mx.google.com with ESMTPS id l5-20020adfe585000000b0033dcc1c847esi268303wrm.1.2024.02.26.09.06.50

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Mon, 26 Feb 2024 09:06:50 -0800 (PST)

Received-SPF: pass (google.com: domain of khbj82943@gmail.com designates 2a00:1450:4864:20::531 as permitted sender) client-ip=2a00:1450:4864:20::531;

Received: by mail-ed1-x531.google.com with SMTP id 4fb4d7f45d1cf-564fc495d83so3832475a12.0;

Mon, 26 Feb 2024 09:06:50 -0800 (PST)

X-Forwarded-Encrypted: i=1; AJvYcCUo4UYeH10Hwv3edfrjEvhnIsrUwEIj67/QJpJ+oJQCJeOy7S+EwBR42YqxvA29R6II7Ec6zJpVSev30XPr5c63HKUgboXbn49Jk1AIG31LImPE1etMl1/lGe7ap9ZMbBTa/SiFEwE9rULrHK8F+raHNz6a8vzVxtOKJdfVEYiHx4or96AuiA4bEuYBa1U9N8EOFZcN5y0V13QMv7uJbNO1giwL2lKcPqoQ3+okH5HqWqj2pro2OGUZ1A6rn4t6ONjRH9eaGq46a4T8CwQasfgqxnON8b5zwjpLZpPI9YtPp6OtT+P7zkxwRT1bESga14oVAklz5huL6h4rIls8CWuDtHDGlofkm0p9jGbyxjaIs2ExNK1V8i2fJ7YrllYA0XfizvTFzu/5CLzfTjQxBeefZ8UDAHEOtD9vNV8Bgz8l01SSqSSXSgv/I8vX3Xmh6TNYcKfEY7cDZT41wW5OB8A81a+Ssl4OfZaG

X-Received: by 2002:a17:907:101b:b0:a3f:2c1:9887 with SMTP id

ox27-20020a170907101b00b00a3f02c19887mr5180311ejb.21.1708967209457; Mon, 26

Feb 2024 09:06:49 -0800 (PST)

MIME-Version: 1.0

From: bj kh

Date: Mon, 26 Feb 2024 23:06:37 +0600

Message-ID:

Subject: Looking for a local guy for a night!

To: dece15-912016742@googlegroups.com, dece15-912016917@googlegroups.com,

dece15-912017260@googlegroups.com, dece15-912020230@googlegroups.com,

dece15-912020772@googlegroups.com, dece15-912025199@googlegroups.com,

dece15-912025586@googlegroups.com, dece15-912027395@googlegroups.com,

dece15-912027665@googlegroups.com, dece15-912027821@googlegroups.com

Content-Type: multipart/alternative; boundary="00000000000073dbeb06124befd1"

X-Original-Sender: khbj82943@gmail.com

X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass

header.i=@gmail.com header.s=20230601 header.b=LqojYa3a; spf=pass

(google.com: domain of khbj82943@gmail.com designates 2a00:1450:4864:20::531

as permitted sender) smtp.mailfrom=khbj82943@gmail.com; dmarc=pass

(p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Precedence: list

Mailing-list: list dece15-912025586@googlegroups.com; contact dece15-912025586+owners@googlegroups.com

List-ID:

X-Spam-Checked-In-Group: dece15-912025586@googlegroups.com

X-Google-Group-Id: 745700075957

List-Post: ,

List-Help: ,

List-Archive:
List-Unsubscribe: ,



X-Antivirus: AVG (VPS 240226-2, 2/26/2024), Inbound message

X-Antivirus-Status: Clean



--00000000000073dbeb06124befd1

Content-Type: text/plain; charset="UTF-8"



Hey,

I Live alone and feeling h0rny, I will totally nude when you come over my

place,

Hit me if you romantic> sites.google.com/view/nshy28



zero cost











































-----------------



--

You received this message because you are subscribed to the Google Groups "Dece15-912025586" group.

To unsubscribe from this group and stop receiving emails from it, send an email to dece15-912025586+unsubscribe@googlegroups.com.

To view this discussion on the web, visit https://groups.google.com/d/msgid/dece15-912025586/CANt8%3DPVmxN9mh%2BzdAcy2u5rDAaKCiOC-RS%2BJDnCY7uNjiO1nZA%40mail.gmail.com.



--00000000000073dbeb06124befd1

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hey,
I Live alone and feeling h0rny, I will totally nud=

e when you come over my place,
Hit me if you romantic> =C2=A0 =C2=A0<=

a href=3D"http://sites.google.com/view/nshy28">sites.google.com/view/nshy28=



zero cost













r>







-----------------








--


You received this message because you are subscribed to the Google Groups &=

quot;Dece15-912025586" group.


To unsubscribe from this group and stop receiving emails from it, send an e=

mail to de=

ce15-912025586+unsubscribe@googlegroups.com.


To view this discussion on the web, visit
com/d/msgid/dece15-912025586/CANt8%3DPVmxN9mh%2BzdAcy2u5rDAaKCiOC-RS%2BJDnC=

Y7uNjiO1nZA%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https:=

//groups.google.com/d/msgid/dece15-912025586/CANt8%3DPVmxN9mh%2BzdAcy2u5rDA=

aKCiOC-RS%2BJDnCY7uNjiO1nZA%40mail.gmail.com.




--00000000000073dbeb06124befd1--