Home Depot Dewalt Phish from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 28 Feb 2024 13:34:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rfQcd-00000000MUZ-1c9c

for dave@doctor.nl2k.ab.ca;

Wed, 28 Feb 2024 13:33:47 -0700

Resent-From: The Doctor

Resent-Date: Wed, 28 Feb 2024 13:33:47 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-mw2nam10hn2208.outbound.protection.outlook.com ([52.100.157.208]:19040 helo=NAM10-MW2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rfNH6-00000000EX0-1K6p

for sales@nk.ca;

Wed, 28 Feb 2024 09:59:24 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=mI8p+84TFaQruXJedEOt7vToHBBa7Rj3M4L3s8Pp8BJ45NiwVPSx0GqQF2OG7dq3Qb4vZNOuObm26ozPrneHJFLKbcOui7txLnfQ11SNUSaBbRg1h1o7DUFGylv2A0kdqceSoex0F2UtB19+oSM5kakskflXOKuDM2l8QHyjOprh3UnC5y70/9QU64htqky0oeftecPph25zdP5cgWcxaCJWxmGjScluY1gVeIVsfnRY0YD5lVgA35H2o0lI17U6qS3MWnf80P+fg6CmgyFHbxtrKliA1bdxaI/VM4c5yhdqtX6nxQlMiEhHkAC2PV7xDMH8+muXwgr+HIW3w4jFlQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=H6IvHJuLbLqzljHAzDtikQngcgQ4i9E6gbMf4qZfQMk=;

b=AJ1U4qrdq+JYEy/7dv+GFj5EBkFCer/LPw52UlpPUdLD6QIMzHRvtjJUPCaw9T3gV1xEyCJI4+0Hw1EQZNEV/hgk/0aW0O9vaEOM9bcG6SFkjwlnujj13Tv4L2Fi7WPYYYlqk9hfatgf+gLa7TmadpBk72i3+1cguQBpFCUyijL/Lidt+aCfI6YKhXfB2cfQxlH1BH/FnKhJMh6sOqm5nYfyab8NliXbFPubY+POADqOOpyBK80FgV35Tzo0iijqjZr4VIU/YjNhdGhchtqkAtORcwvEh3B/rHo18iL64Sn3UJIg9YXs8MuL50ODvGwXNQhR4xGvUvlwI/QHhoGpqA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=hnfvdancnq.ygdr.sbs; dmarc=pass action=none

header.from=hnfvdancnq.ygdr.sbs; dkim=pass header.d=hnfvdancnq.ygdr.sbs;

arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=VanAldershof.onmicrosoft.com; s=selector1-VanAldershof-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=H6IvHJuLbLqzljHAzDtikQngcgQ4i9E6gbMf4qZfQMk=;

b=hxBv+j6wVzSmPUDzdglwLc5x5j7e96ad1/F6Sb6Kbq598zIYlsaMUHocyahyRHHKp/0R+6oAwlCa0/wVUPAKs+b58ocuLDSpe5TbRMCSXc6pTovSSHrqszg+vSSRYtXng7husn4YD82uk0GaYUdwBgSBlxkEqMKwBJegoY0DC3tDQukPapwzFKuFxLExVmZmpcJ1j0jXBgIb/Dc/lCrx4Pf9D7itcNFdj+0EmjuQxQWOGhJDSm/zn2w7s6Igmekt/EH1O+Cop2yfNNaDhVNAnl8eKp8LKOp9Vggep1IYDDznVNE8numddQVsQWDelmGmTRC/c9AIBAOY9hq0Feh5Wg==

Authentication-Results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=hnfvdancnq.ygdr.sbs;

Subject: 𝑪𝒐𝒏𝒇𝒊𝒓𝒎𝒂𝒕𝒊𝒐𝒏 𝑵𝒆𝒆𝒅𝒆𝒅

X-TOI-MSGID: <877592241292200.EV113D490055C.3886255060917F32HHK479@hnfvdancnq.ygdr.sbs>

From: 𝑯𝒐𝒎𝒆 𝑯𝒂𝒓𝒅𝒘𝒂𝒓𝒆 𝑺𝒖𝒓𝒑𝒓𝒊𝒔𝒆

In-Reply-To:

To: sales@nk.ca

Content-Transfer-Encoding: 8bit

Content-Type: text/html; charset="UTF-8"

CC: sales@nk.ca

Date: Wed, 28 Feb 2024 16:57:18 +0000

X-ClientProxiedBy: BL0PR05CA0018.namprd05.prod.outlook.com

(2603:10b6:208:91::28) To DM6PR04MB3899.namprd04.prod.outlook.com

(2603:10b6:5:b9::32)

Message-ID:



MIME-Version: 1.0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DM6PR04MB3899:EE_|SA1PR04MB8782:EE_

X-MS-Office365-Filtering-Correlation-Id: b0f8ca74-00ca-4cfa-7d83-08dc387e5288

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?Z2xEQnR4WjE2aUhFTXQ4ZUlaMitBOUZpaC9waEhEZHluTU04UE4yb2hHcms5?=

=?utf-8?B?R1phTlJ5N2sxYVp2aWwzRUxsR2tqM2NRRnNwT1BZcFNpRkd5Wk01cDI4RElp?=

=?utf-8?B?blhiamczSTVXV0UyandYWVlQZ0VNaFJQMElzcnhuVjlhNkdkLzVNVklYakww?=

=?utf-8?B?dDdUUE5CUW41MGZTWXF5WlN5UDdvQ2RMR2RjRXQrZm1FMUVwa1VyNXBrcFB0?=

=?utf-8?B?NFRRb09CeXBaRHJqaDd5WUZ4NnFsMEo1TTd4WEpjczZoemV2S2UvUG0xb25l?=

=?utf-8?B?eTkreUpxVGJ3WmVVNmFiU0lVOUwrYW5jT00xMk42TzY3NnlJcmF6Q1NOUzVj?=

=?utf-8?B?UDdjYWlaTjVVWm55a0Y0WWQvdU1sdGx2RDFxd05zMktBcmUzNVJtTmNVeUpq?=

=?utf-8?B?bi93SVJDNnM1eDhadGRhdDdUbjN3a1N6R3NKUXF2NjNpd0xDamtINmNxSmlJ?=

=?utf-8?B?M2hGZURkMWxyM0hiallJeXBraXBHcTRyaDZ0N1gzM1dDdVNvSXU0YTl4cGMz?=

=?utf-8?B?UnZ4N2FkK1V1SklUMW54dTk1bzg0Ujc2dG0yd0V6cUdnVnV4MGh4UFM4NXh5?=

=?utf-8?B?SFpVaEg2dkhVejZaUlRhaCtoTGxmT3JxYi9rcmozSm9rR09SY2c1dHhMa2Jn?=

=?utf-8?B?d01oWDlXYUs3bXZXckJPUk9Sd3FKN2o3TnRUN3N4YWpTRnlmZnZPY0FGV2sw?=

=?utf-8?B?dmNLb2FCMC9CQ2Zaclo4WWJUNlBrQlFnOVA4alpiY0cwYnRVQjRub3BHQ0Iz?=

=?utf-8?B?RjZMa08wRm5kVDVRZjh0aVgxaHNJa2d2dUpYWUJ6K216OGV2TFUwNE1XTk1w?=

=?utf-8?B?TWJvL2MxN2t0M2d6RERTRlZMa3cvYitMbTlrMFZ0cG9wZzU1OGhuajJNYitv?=

=?utf-8?B?RkFObkF5Z0VSakFIUFIyRUtqVGhUREJNcldvRGJLeVNhVWJpdWlRSVVUcDB4?=

=?utf-8?B?NU0yZitITUlwVUZQUFoyd0JTQ2RrM0w5Qnl4SW1ieS9uaFUrZXIxRVJueDNR?=

=?utf-8?B?d3gyV0lEUnRwbW1NdDdxdHV5ZUtsd3JqRVA2NG5KZzdQc1hxaFl4dTdmWTZ1?=

=?utf-8?B?dzNNWlhoaFRyWFdEMVB2VGVPTURwNXM3c1NwUm8yVEVIbFNHN2xtcHNYNVFC?=

=?utf-8?B?b3J6R2l4WndlNFJvNDl6OTYvR1NNRzVRa20wT25NR25UTTRVbFg1aVhvYnN0?=

=?utf-8?B?YktMN0swS0gzZmhCYmJ6Qis2Y3ZSK2lIOXl3dXUyaUxPN2VMYWFhQXM4aFVW?=

=?utf-8?B?aUcvQ2xLdHlqYkpTbnN2eTg4T1E2M2NCNS9uR2VLWG9xUkVCS0k4aFh2bHky?=

=?utf-8?B?Q1M2VjhSNkJmNlNYNmJNRVBYQ3FMNzJwWDh2Wmc4dGRjQnZiTWk3dzNOSG1N?=

=?utf-8?B?NVZJbTJkcHVMSHdtanNGK0VIcjR6azN5MW5MYnJ4dFNraWRJb3kxZHZibnZR?=

=?utf-8?B?V3hibEwxbWtIT2loOGN0bGo5Q3E3ckpZcUVOSGpXbjExc1RueFQ4SDV0RFNN?=

=?utf-8?B?Nk1nVnh5NEMvNHJGWmYwbFZzckR0ZmRRQUc3QlFjbTk3L3FwV2lKclg4YlNp?=

=?utf-8?Q?bk7bJXj2I+/lvmQBNMAnGij5RBFmoOLyG2IBz99eebnZwx?=

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:7;SRV:;IPV:NLI;SFV:SPM;H:DM6PR04MB3899.namprd04.prod.outlook.com;PTR:;CAT:OSPM;SFS:(13230031)(37730700002);DIR:OUT;SFP:1501;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?WUF0b0dlYkQvR2c1cUh0Yi9tdmQrN0JSQU9hQ0xIUTNjck0vSHRMZXlZNmlh?=

=?utf-8?B?dmVYQW9GVWlSNFBGMEhNeXlITXpla2hCM0F3SkJxemhYWjJFWmVPT2N4SWZI?=

=?utf-8?B?eDU0cW1GTWhLbmpZR3dKa0k1NVdpNXZCeFFXN1FpWEpIV1I1N25mZGVYRXA1?=

=?utf-8?B?VmJ0cHhOZktScm9EWjY4eFR6cjZsa1NNeXRQWHh6cWxMSGx3NnZ6U0QwajlM?=

=?utf-8?B?L2VwakpjRXZUbThNdk81RDZpRTZBTDFTaUUzTW4xVUlQSzl1Wk5Wa3M5a085?=

=?utf-8?B?VC9vOFhOK3lZTXhscmNZYU9aa2t6cWxwSzNteDFNbmJBSU5QSjdqQzFvNWZo?=

=?utf-8?B?UHh2c2czc3RvaWgvRzArV0E5Q09YUnh3ZTBBOWZoS3k0dTBITExSODROYWp3?=

=?utf-8?B?ZFhvS0NOSGtEa3RUdnJIL0V5c1ZKc1dFNHliUm0zWXBJcnVvQ0NSTTErL2NX?=

=?utf-8?B?UWpSbElDME5OV3dMcDNNZldWR3pVWU9DYkRHdWlyMHFLcU5rV0paUFZuUVls?=

=?utf-8?B?bjlBb0p6SWwwMmZ2YlN3MmcrekRqYjBTL3lveDBIK0hEV2phd0hvUUtWV0FR?=

=?utf-8?B?cjJBdW5kL0FUUjhhcTNMSVJwbnNKM2tBV0RUZ1UxN3Blb0o0MFZ6YXpkSnBx?=

=?utf-8?B?MTdCeXpnMUdKN04wUmpHajVuMWltTm8wME5nT3lVa1ZjcDczKzRwU3dOalp6?=

=?utf-8?B?VkFWWVlEdTVGY1NvUk9KWmI2ZHV1SHJGWGprR1VrbUtOeW1ieWxTdFAzU0dM?=

=?utf-8?B?MlA0QzBmNEw5WTRSSFF2NlcwZjBRSEMyczR2ZEdCSEFSM2N4bU1LVElaRTdh?=

=?utf-8?B?Y2tTMVMwS2ZpT2NlRUlDN0M2VDZKek8vTEhiV2I0R3ZCU0QveFZ1c1dMUElM?=

=?utf-8?B?WFdmRUZwNy9pVnN3T1pWSDRTcjRQZUNpY3ZjZ3BMWGpuSy8zNW5qZm9KaU1Q?=

=?utf-8?B?dmE4elFSN0kvS2x6cTZ4UU1xL2dsQWxPWTRJQ1M5WjlJajF5eE5rWnA1aGNO?=

=?utf-8?B?dkYzbmtZU09keVdPdnRBSWJCdDlxWEFpYUQwMlBoVnZVS3dYZGJPSTdFU2o4?=

=?utf-8?B?aFZKRzVaM3c0ZzRORnFQNDdkUVBaRFppMTNuUU01UHVIY2RpNG1TSDRXUm5m?=

=?utf-8?B?MndPNmcyMDNmc0thMzNsaFRmSUlZcXZLZ1QwdWM4MWFXODl4eE8yM01nbDc2?=

=?utf-8?B?RHc3YWwzRmd0NzBpaE9ZM3FIQ1hLR3U5SmlxSXVSUy9DQXJBekROOGV6L2lS?=

=?utf-8?B?Y1RPQTRsbVhTcjVMNXA5N2NUdDVXZnN2K1BUbVc4blBmQldwci8vRUFvTXRP?=

=?utf-8?B?bjN3L0VSakZOZDV0UWdHcTZMMmNDMnpSTzhiN0o3VXA4NW56RjZsTDJVaENk?=

=?utf-8?B?WG4wTVVuYU9OWkNkcFEyVTRuSVdkcW5uYkxWcFpxc0VWV1dPMDV6WWIrSHR4?=

=?utf-8?B?bm82MkNPS2NDeDNtSnppMll5Y3ZsM2k0N2p3WUZuczNDZENhclBVNnZpeG1p?=

=?utf-8?B?UXVFc0FQcjNNT0xYb2xIeGZOV0lXcmxodTgrT3FzMitiRmJ5WFNnYUx6WVFr?=

=?utf-8?B?Y01ja2hzS1REM1JFQWh4c1c2WlFmQTNPUEdMNEhtS014bjVyVEkybHk4Sm0x?=

=?utf-8?B?dkUyTnhZYi9VZ0pGUTMxVStRM0pjK1B2RDBGZXB2NzIwMDBwc01tMC9qUXpq?=

=?utf-8?B?QWtuenVaQVZMdCszQlJZYUhUb2h5SG9SMzlQUTkzbU5ZaE1CM24vUXk0OUtq?=

=?utf-8?B?QXhlQXA0QTJuTVZGNlNuNWNXdUlGRU11c0FhdE1YbFVYeGU2NHhoWnpkWEJS?=

=?utf-8?B?M1RzV0EwaUNIVUhNRVltZzQ2ZDB6enBwcXBYMEQvdXE3L0xUa1hqOGI3YXNY?=

=?utf-8?B?VXMwNDhzUE1hVURpU0FFNGNzRmhTMTl0d25TazQ1NWp4OUVWUHdTak56S3Iy?=

=?utf-8?B?QmtDTXJlcTNvaUVWQzdZUGlBeWNGTU5aeUtCWFpSWXFnK2hzdUpOTGZsTTJY?=

=?utf-8?B?ZXNWT2syL0IyM3UrSDEwQ21ER2NKVHpxYmsyb29uOFFDcndXV0d4Mmc4VXhi?=

=?utf-8?B?dEIyZWZDQlJuSnUvbS9WMTNFOUNzS3RtYnRqVkV2Smc5Ny95Vk1QSE95T3Nu?=

=?utf-8?B?RVZDbTRmRU13QVdvWEpJWEtBOGQzQ3JnMWRvNVhOYjYyZC9KVDN6ellVYlg1?=

=?utf-8?B?OHc9PQ==?=

X-OriginatorOrg: hnfvdancnq.ygdr.sbs

X-MS-Exchange-CrossTenant-Network-Message-Id: b0f8ca74-00ca-4cfa-7d83-08dc387e5288

X-MS-Exchange-CrossTenant-AuthSource: DM6PR04MB3899.namprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Feb 2024 16:57:18.2200

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: a1a78feb-190a-4c7f-bf84-24d64250e4b5

X-MS-Exchange-CrossTenant-MailboxType: HOSTED

X-MS-Exchange-CrossTenant-UserPrincipalName: UAFVARyFEdn2ItHV8ulm2uwYLobjj49YxEgv7iDZixVCIg9gU1gADjkpOsOcIZWSiXfK27V0lalTnwAhSrqipj2jBPsYtHk6wQqX/VQxfHQ=

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR04MB8782





(1) Notifications





















































ℂ𝕖𝕝𝕖𝕓𝕣𝕒𝕥𝕚𝕟𝕘 ℍ𝕠𝕞𝕖 ℍ𝕒𝕣𝕕𝕨𝕒𝕣𝕖 𝕒𝕟𝕟𝕚𝕧𝕖𝕣𝕤𝕒𝕣𝕪 𝕨𝕚𝕥𝕙 𝕒𝕟 𝔻𝕖𝕨𝕒𝕝𝕥 𝔼𝕏𝕋ℝ𝔼𝕄𝔼 𝔻𝕣𝕚𝕝𝕝







t𝒀𝒐𝒖 𝒉𝒂𝒗𝒆 𝒘𝒐𝒏 𝒂𝒏 𝑫𝒆𝒘𝒂𝒍𝒕 𝑬𝑿𝑻𝑹𝑬𝑴𝑬 𝑫𝒓𝒊𝒍𝒍


































































Nija Air Fryer spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Feb 2024 20:51:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rfAxw-000000000lR-1ueC

for dave@doctor.nl2k.ab.ca;

Tue, 27 Feb 2024 20:50:44 -0700

Resent-From: The Doctor

Resent-Date: Tue, 27 Feb 2024 20:50:44 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-co1nam11hn2235.outbound.protection.outlook.com ([52.100.173.235]:1632 helo=NAM11-CO1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rf5Bg-00000000Pvy-3tGI

for root@nk.ca;

Tue, 27 Feb 2024 14:40:36 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=kDKUYW5aWpIC+ZvxZxHlFfcc78YH1zRnUYJBpIDGS2LNIsXxNhJq833l6GNoUzeKFwTk2Uvhrr4Dvafpfec4hDnirmAITx60Bc8gZV0ZZmjFxmYpCHRIAaRgOlIGDlI/HJHuUa/zpZX6V07KaScTKmG8AynyW70OZhMgTmmy3Omltn3m5nE/8AlRtQzmsuVsILx+ILvm97l5+Ta0BaGhNgUGCJkD3Ih/5nbh5pFoppEW82gaN/BMoketdqYDI+KbRw3MrDSf3FnvaI6WqLRGYenKbuc+GnPfDB0LspYTfivU9zNH8Wob+z4lL3tHxl9m7OsUpdr4kuFI68MyvztPQQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=FYnbg0F6cchzQaTNwexSsoCoTeCIGXl7ct1UDV5X8ec=;

b=KacXWdQJ9aUXpi3SeGMOK+edJnkpXOuQS1lRVsvo0ntyxiICrXmCUGB7ZZNCAS45BD2/wsOjo087FivHF/E5JtsviwMSkocM3K+89MiPb0puVKvw7NLXmixaKRFj8M8EiCGYvrmVAtREfHuw3ih0tauBSUkhgW2v1hLoVynzi6zp5o5aPhBlkmY4mV4+Dul5kWAwu3mVvJQC/Wn4FeMGaIhGRP5mL8FQSSmVKw4AjfJ4wJXs2wqj0LwR5jG9p9mnKg5G2Upzyar4gKq+eW3xYcvdpAAb0V3OGB2WV8YRDUP9yLc4PsaDyKjPvi/L3YdwLE3lvNAxRcpQ3Mq4bho06w==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=muoiwfghu.krsy.bio; dmarc=pass action=none

header.from=muoiwfghu.krsy.bio; dkim=pass header.d=muoiwfghu.krsy.bio;

arc=none

Authentication-Results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=muoiwfghu.krsy.bio;

From: "=?UTF-8?B?TmluamEgQWlyIEZyeWVy?="

Subject: =?UTF-8?B?8J2WtvCdlr4g8J2WtvCdl4jwnZeO8J2XhfCdlr0g8J2XhfCdl4LwnZeE8J2WviDwnZeN8J2XiCDwnZaz8J2XgfCdlrrwnZeH8J2XhCDwnZeS8J2XiPCdl44=?=

To: root@nk.ca

Cc: root@outlook.com

Content-Type: multipart/alternative;

boundary="_528f1973-bedd-4725-872b-49e02cc868d8_"

Date: Tue, 27 Feb 2024 21:38:28 +0000

X-ClientProxiedBy: YT4PR01CA0480.CANPRD01.PROD.OUTLOOK.COM

(2603:10b6:b01:d6::20) To LV3P222MB0886.NAMP222.PROD.OUTLOOK.COM

(2603:10b6:408:1de::8)

Message-ID:



X-Message-Flag: Flag for follow up

MIME-Version: 1.0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: LV3P222MB0886:EE_|SA1P222MB0997:EE_

X-MS-Office365-Filtering-Correlation-Id: e27b389f-8946-4a38-f8ec-08dc37dc7047

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?MVlYWHlLWG1yOFJoczJjODY4Zmloa0EzZnJTWkR3NUlDdmhtYXpqRGwxbjhn?=

=?utf-8?B?YThaL2czWmNVcHlBUWplbDNYOVBxcE1KOE05OVh2UStHTll3cFlaaXB0N1Y3?=

=?utf-8?B?Rm5xSllhNjR0YnkyUmdJS1dJdGI1ZTVZT2hSbjNmN2h2MjVzSmdxaG9keWs2?=

=?utf-8?B?UmxYTVozSFQ1OCtyTHRHR2l1WnQrdDdQZHg0N0pxWEhuUEowV1M4K3NITXBi?=

=?utf-8?B?WmxnbnpJZkdLQ1p0ZkZvTWdFWXN0RjFtekNTTnpJcE1BK1hjRnlzdWYyUmJx?=

=?utf-8?B?STh2WE45UnA4V2NEYkF5a1l1am1JZlhabEQzY2labW5uVzhOcjhQT0o1WWJm?=

=?utf-8?B?VGIvZ3hrZlRHcmdYSUFRRUZDcHFHdXhXbElrdG9SSGFpWlZ1eVJ1ejdORnQ3?=

=?utf-8?B?dE13NTBxU2F3NkR6dWttdlcrRFFLaXNhUGM5N2cveGV2WXZnTzNOZ0RCamwr?=

=?utf-8?B?M081RTBEYUcxYjhUdjQrdW9qZVNET3VoWGtHa0R6cmNGNjYxUG0xdk8zU2cr?=

=?utf-8?B?cVROV2VuK0dIcUZPVThCN0RtTSswU3JORzZsSHh2MWxnWG5UMjUrWFh1ZFdn?=

=?utf-8?B?a1RwME9IWU02aUFDRmVxVkJ2dWpUR2lwR3A0L0xYajVxSEtYWFlZemlBUlYw?=

=?utf-8?B?b0owdGIzNVNic1BQYm1TbnR0a2JwUnprNzFsSkUzYXBnYWNSci9DeFRVdUN0?=

=?utf-8?B?T3V6d3l3ZFB3OFpPOHVxbEFRTTg3SU10KzA3UnR0aHc3eGtWZGROeU9ZZGZq?=

=?utf-8?B?ekEwOW5YU29wSlJnMVBBQ21BaWlKVTBYSTlEMS9LMXNyMjZtM1VHeEhIOU1F?=

=?utf-8?B?UkZkVnpUdFdLTVRtZzR4VDRjRnM4UmdldDFQMGNTdGR6bDNOQUl0M3UwS1VP?=

=?utf-8?B?SnpsUVRYMThKYkNoYmRTUzZuUXRYVzh3ejBDbWErS1BpeENUemluSDQ2Q0Z4?=

=?utf-8?B?OHNVdDJ5eFJHcGlJOC9ydHhYM2doWGg2SnFhdFlVeWRqUFZwak1IaWtLNHJE?=

=?utf-8?B?eTJRdFN1c0RCQ29yb3VHc2piMnM3OHlXQ3dUd3dMQUd0UE5MUk1QUzVWWEt4?=

=?utf-8?B?YVE0UFU4ZU9xbVMwVWdFcDZWRHBqZXhnQ3dIMHdMMUM0OXBGM3c5bzVUS1hQ?=

=?utf-8?B?ZHhYajMzNWNSQTFDOEx0MEJLS0JnZkw4bWQzUmpUblIzaFlxQ2dSNXloSS91?=

=?utf-8?B?QllGVUE2TzhuWk5lUzJGWUM5ZWhFVEpOTDd6MnI1WE1rdm5MZkZKQWV4b3lO?=

=?utf-8?B?SU40U0dtby9STlpzbksrMnRCMjRhVkZoRXNuckM5eEc0VVNtTUZKQjZCbHF5?=

=?utf-8?B?WDZDY0Z2WTZFWmxPU3FmcHRuZXpKTFBFb2sraVdSbWljZmI3ejZNdXUzanJ0?=

=?utf-8?B?cjdwOUlNaTBpbUE2Q2oxTkZQWU9lZHlFNW9ua0JLbUdISmpEOUI2NFJrUEFj?=

=?utf-8?B?ZXczckdKRVNsbmlmUDhXTHJWcjlWK3ZiYnFrS3QwOU4rZlh6VzN5dlJaQzF1?=

=?utf-8?B?YmRYZ3M5WkNoRUFyVytvaHdxYy9CaldVd2N2U0xYWHAxcjBRRmpUc1B5dWpm?=

=?utf-8?B?R0tMY0tjVW51RzY4WlArblpqdjZuTjM1SmNGVnNtVnBTY0tiaHpsT3c2Wm1n?=

=?utf-8?Q?rCv0JB/oXILiK+d4cI25SkGBPdhzL1WMhLSlF/1XRges=3D?=

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:9;SRV:;IPV:NLI;SFV:SPM;H:LV3P222MB0886.NAMP222.PROD.OUTLOOK.COM;PTR:;CAT:OSPM;SFS:(13230031)(37730700002);DIR:OUT;SFP:1501;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?TlNwYkdaV2ZDdDFyWndGVUdibFBXTlA4NHFWVnBKRG9BeHlxTmhWeWVZVk1P?=

=?utf-8?B?VEU1QUNlcmhEMTloQnVEWTJ1VnRMUi9uV3hnNzE0TVhHZ3pEeFRVWnFKMGpX?=

=?utf-8?B?K1BtVDhLSXBUMGVBWTJkUXNQTWpwcWd5UGNQbXZreVRjZWpoZHJZbVd4dnhP?=

=?utf-8?B?RXpWZEJZMSt6N0JLR0MyK21wbytrZWY2bjZKUTd5N1k3Y09NZm9rV2lVZTA1?=

=?utf-8?B?SDk2UmpqaXdwakRvSktiUnJ3MkRyZ3pseHFHdy9hSTVPSE5RT2t4aDRNcS9s?=

=?utf-8?B?MWhscVdVZlcrdXVoZjdBc2JJaUR4WlZLdWRRWHVCU1VwSU03cjBVN0VMMW03?=

=?utf-8?B?KzJxWjdnQUpYNUNTdnV1SkZTNGYwR25YeUx6b2ZtdFNGa3JsRmtmSFhvRzRV?=

=?utf-8?B?elc0T0I1STNYdzNCUHk5aGlsN2tlYWtOTFpkVnZpVGsvSnJGd0pBdFJManJP?=

=?utf-8?B?NmdySlRVWnlERTJQd1gvT1JDOGY3ODlpSk1FU1o3QXVrWkVWbzhoNGNkYWFl?=

=?utf-8?B?c0crTERsUnRlVmdKb1pyMXZ0ZFlrdHNPM1Q0QmFidmhid3JGWkV3U0p6R095?=

=?utf-8?B?UktyYUFkSzBNMHpaTWhDTHV6MnRSekp5MjVzNndvL0NLMmNuZ28yOEVlTUNu?=

=?utf-8?B?bzA3ekFwWEZUcTdRcGFXcDB0bmpyNmRBdVFxdkFMbGNNYmNrRzNaOVp6UE0y?=

=?utf-8?B?dVZwWEFVSEoxQmZQOXBqbktNalA2VWsyelBVSUdUeXVEU3dpL3BIU1NtSUpJ?=

=?utf-8?B?RnEydStkaWJUeXBwVGh6R1hSYTFiMlpDZVhvaXAxcXVHVG12K3d4YXBYcEhx?=

=?utf-8?B?dTdIRkg4TXMxT0xVYy9uemN4bnRCak01SkliSGdCejdqRU45SnZuZTl0OGFx?=

=?utf-8?B?bTlDcG1HSTRKNDZhbmpHeU9saTMyY1Y1NU1aUStTNllIR21ZVlJOMlYrS2Zn?=

=?utf-8?B?ZVNlWkh4ejhXZU4vWWdYVU0vb2dkVzBVZE9LY1I4YWJKMjk3Y2hBcWYwNEJT?=

=?utf-8?B?Y0Y2eEl3ZmJxcTkwbnI2anljbmdwZ2F5WHRNUjV1NUpJV2lJUzh2S0d1c0pm?=

=?utf-8?B?WldPdGlTRGRYaGJMMWxqVHJPTllzRjBINWFReHcvN2tKRitnVU9HblBKVGx2?=

=?utf-8?B?WjFjdFlpL2VkelpWWWI1ZHZzemtsTmFMcUdtOEFwUWtYVXAzcjR1RzAwTWtR?=

=?utf-8?B?VTFlT3d0b2xIVmlHR0NHVndHZis5amZhNSt1YjhiUkd1eWlYQnlCNUhvdzhU?=

=?utf-8?B?aC95NkIwUE5TMXBnZURaZE5iM052NnA5U3dRR3dUTXlaKzVIY1FNaUNtUVFY?=

=?utf-8?B?Ulk1cU04dHlQY0ZiSHZ4OVV6anNTeEU3dVVrSDlRUzlwS3laRE1aR3VRaEk1?=

=?utf-8?B?Ky92aFlKSGNaejlvZ0w5TElob0RkZ0lORzQ4LzhTR3lHK2VPR3MzQkJQNnZo?=

=?utf-8?B?d2hQa1h2Z2lvcHhNZCtyUUFSbU9JU3VTY3lSMmhvVGt5Q3NtVlo0eFc2YmpL?=

=?utf-8?B?VDlyYzJybS90UnZmdkpvYkpaVkpCM2Z5a1FRSUI2NDBVRDdQMEEyUnZDMitZ?=

=?utf-8?B?OWRIczFxcVpHSG9keXlrSUhzRG44MEROTXRUY0xQaHB4bHNPNVd6UVpqZWVG?=

=?utf-8?B?dDFGck1QaEtMbi9hOElnWU5IVlVQSHN3VytzT1M0QnlFbXlVL1BkVHBwcEV4?=

=?utf-8?B?V3l3TkFsZzZIcURnN041SlIyNUlMVUtqdzlJOCt0RHdDQ3dHdXBML1AvbFRZ?=

=?utf-8?B?SlBhMU5PbkpxbmxHYkFtckFFZ2NNMy82Tk9OL21lNmZsUkdiS09iNEpwVGRp?=

=?utf-8?B?TE5UbFJZdzRkR1ZGODVGYlUzbjlsanVvMmtlcTlFL0ZqNEtkY1JPOUxVQ0NB?=

=?utf-8?B?T1JQcUdGaTNvUnZUMUhSd1FuMkRsbnZUS1hVNDdZUGdHNGdEK3NlUHdPR3d1?=

=?utf-8?B?cTlZUGRjWE96Vy9TYm96MVE5b29hckR5RHZabExKcjNhczFzdzlMME5iaEk2?=

=?utf-8?B?cWltVCtWZnZRTng3USs2V25KSmFLOWpYcUFFTFVFMFJHcnYwN1VIRVJxdktX?=

=?utf-8?B?NDJLSDVFOW92VTF4bnZSdjhYUmozakpReVBPQnBKREpyUmhqRHFva2syNmQz?=

=?utf-8?B?bmppQWpmS0k3OE9nZzkrNUxVNkI2Y2dab21EYk00WG9nbHJLMkVnaGZ2Wmcr?=

=?utf-8?B?bWc9PQ==?=

X-OriginatorOrg: muoiwfghu.krsy.bio

X-MS-Exchange-CrossTenant-Network-Message-Id: e27b389f-8946-4a38-f8ec-08dc37dc7047

X-MS-Exchange-CrossTenant-AuthSource: LV3P222MB0886.NAMP222.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Feb 2024 21:38:29.6326

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 5d1fbd5f-716e-4834-8178-1edf4520fb2e

X-MS-Exchange-CrossTenant-MailboxType: HOSTED

X-MS-Exchange-CrossTenant-UserPrincipalName: RYGn9g9cmhW9KCLJUyaQDEvOG5K3PZnANzuu9vFOX9Nq/nha/7mOuZuxNKKlWi16I+nctISqD6e+5tfARjeYTekknmxhB9zDWUojvjS4ASA=

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1P222MB0997

X-Spam_score: 13.3

X-Spam_score_int: 133

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: 𝖸𝗈𝗎'𝗅𝗅 𝗅𝗈𝗌𝖾 𝗇𝗈𝗍𝗁𝗂𝗇𝗀

𝗂𝖿 𝗒𝗈𝗎 𝗈𝗉𝖾𝗇 𝗂𝗍 𝖭𝗂𝗇𝗃𝖺 𝖠𝗂𝗋

𝖥𝗋𝗒𝖾𝗋 - 𝖲𝗁𝗂𝗉𝗆𝖾ð [...]



Content analysis details: (13.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.100.173.235 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.100.173.235 listed in list.dnswl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: gfjmghbjgfjtygfhyugtf.page.link]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

1.0 HK_RANDOM_FROM From username looks random

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

-0.0 T_SCC_BODY_TEXT_LINE No description available.

2.7 SCC_BODY_URI_ONLY Very short body with something maybe clickable

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} =?UTF-8?B?8J2WtvCdlr4g8J2WtvCdl4jwnZeO8J2XhfCdlr0g8J2XhfCdl4LwnZeE8J2WviDwnZeN8J2XiCDwnZaz8J2XgfCdlrrwnZeH8J2XhCDwnZeS8J2XiPCdl44=?=



--_528f1973-bedd-4725-872b-49e02cc868d8_

Content-Type: text/plain; charset="UTF-8";









--_528f1973-bedd-4725-872b-49e02cc868d8_

Content-Type: text/html; charset="UTF-8";





𝖸𝗈𝗎'𝗅𝗅 𝗅𝗈𝗌𝖾 𝗇𝗈𝗍𝗁𝗂𝗇𝗀 𝗂𝖿 𝗒𝗈𝗎 𝗈𝗉𝖾𝗇 𝗂𝗍


𝖭𝗂𝗇𝗃𝖺 𝖠𝗂𝗋 𝖥𝗋𝗒𝖾𝗋 - 𝖲𝗁𝗂𝗉𝗆𝖾𝗇𝗍 𝖯𝖾𝗇𝖽𝗂𝗇𝗀

















--_528f1973-bedd-4725-872b-49e02cc868d8_--

X-Rated Google Groups Spam Lozalia Msigwa <lozaliamsigwa@gmail.com> from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Feb 2024 20:51:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rfAxd-000000000Xb-19dW

for dave@doctor.nl2k.ab.ca;

Tue, 27 Feb 2024 20:50:25 -0700

Resent-From: The Doctor

Resent-Date: Tue, 27 Feb 2024 20:50:25 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f59.google.com ([209.85.210.59]:55309)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rf6mm-000000002jc-13rv

for root@doctor.nl2k.ab.ca;

Tue, 27 Feb 2024 16:23:00 -0700

Received: by mail-ot1-f59.google.com with SMTP id 46e09a7af769-6dbdc7135bfsf5761990a34.2

for ; Tue, 27 Feb 2024 15:21:01 -0800 (PST)

ARC-Seal: i=2; a=rsa-sha256; t=1709076055; cv=pass;

d=google.com; s=arc-20160816;

b=HfAgqEzjrYAQnGqSxTj2wGvyc3aFpdoCyo/GL0fOfEQg70Ea0cKq6wKfBGEbSzrGpP

9KAUjMK2/QZ1NRS1ufzZgzT00Ay34vqMpHllZe0m/G2loYMO9llI/TA02+dLczzG2lYN

cByDMYB20i4rZ5zmlfoXJMT+6iAtFpGrm+kuEovdmlRVd0MRMz8CCpgN4omCs2UJhbs4

ZlJHp7gNVR2swkOPPUw7FZm3KqhH4XBbpgNov/r4cyD0hQQqoFwgB3QHTz6z4leluY2u

SJIPpf4ePEV5tkopADd6ZPMSxkJwWVBtIEK+DJHO7aA0lZI42dWVGFeFXgiphlGFg3rU

KrTA==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature:dkim-signature;

bh=8ryo69XcPzccx+Hu4T+j2wABpWm1K+K5F5W5r/Imjo4=;

fh=1kYqQYl0vxdhXZh1cI3cxntchILwt/9pXwfRXnljBSs=;

b=akJQ17S/kCdBfJMxpgBpmXkD7xK+mWBRWZdGhHE9Yr7RKPf5kawZXHCWeZXZcV9xqf

T1L/PTCvSP/5rJ1Gm31CtAF9pCeRNX1T1CUUS5fZ+dm9OuR+UUtUpiVDm5rTwSgc9pYN

UVJS2fNbWzwf4PVWO6y5ItUmGwvCk38ZDVzYNPpsLTv1xh8w2k64qtRqgxdRDvMcAakz

Knzmg9TrgjPUCyyqBM3bqIqpDKMcgMoOMC9+2t5FeOAw71+i1sNE3iiOkigjP7QjaEQt

E4GDKHTef1P3V0SFEuAMXmCAYMyKBywSgHzX5EFluqqsfMMUJEMMV1AokzwN7h9I71XU

aS7A==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=2; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b="Qu/FfR8t";

spf=pass (google.com: domain of lozaliamsigwa@gmail.com designates 2607:f8b0:4864:20::52b as permitted sender) smtp.mailfrom=lozaliamsigwa@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=googlegroups.com; s=20230601; t=1709076055; x=1709680855; darn=doctor.nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=8ryo69XcPzccx+Hu4T+j2wABpWm1K+K5F5W5r/Imjo4=;

b=wSHrBxDV60wyLob+e/F8Fj9tlaQsu34XAt9m/lzIa/QElXenrbp/1CxNgp50lQXnx4

JkoRMvLYntwgGfWvvR5el8E/EEbXv3LIN7ClKMoRxvgSQNnCmIRpQgxdTF3E7m5gb66p

PEnrXHSS4Whw+aiwviN6QjHjo3cp+vk8EnaekFb2wUlmdseK6neYutTg7Ngop+/FDNSf

6FIZb8XYfw1jToP4tT3+YKkmaQxxSCC3B34z8KK04hfznMIBUUlnqbWUxtOLQXG0g00q

1vlOQWkVAYfoQByxjL8xaCbsmi+484l5TvvcbqRGoHtyTzbs/sL7U03Z3alVHKWxLYam

8FCw==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1709076055; x=1709680855; darn=doctor.nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=8ryo69XcPzccx+Hu4T+j2wABpWm1K+K5F5W5r/Imjo4=;

b=i6lCuTYH74IqftW4LbLt8MPVpXzPy7+QQXmmEOGl6SWjjm2Qd5Y1tLw033YSdcsigy

Ppk3oyluzUwEYv0pVtaC9WDLGGEJkOtVAg9ZA/Z2PgWuMHBpGSnQTtB1pqPCMaPysQHU

osmspeM1l1nHUQyR19fc3jyq9kZMU1oFR866X814RUjDgxZkNG8Xo4NSqGFmItwsuJwO

G16RPt4QoyYpb6FX+3BkXCYTMBoyUXhnI+EkajHAG7rcui+4LB71zn/kdfcZ6ps6abiz

tvMDLVxSHJrpaiaKE3lBgJHczbvRmKGsvSx+CyuO1MNaeVKxNVcSEsM/nnYFhGeHuChf

9b4A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1709076055; x=1709680855;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-beenthere:x-gm-message-state

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=8ryo69XcPzccx+Hu4T+j2wABpWm1K+K5F5W5r/Imjo4=;

b=HU82QXsy1awMaX9wf202QfUCZiO304K66Ns1NIBbmUU2rr4DnUQv6nbfE3sI+mDDB4

FycHkhy2MEmMGF4YdRFcJTOJZFmaNnNpL6JHLDkDGTh3JNndSKxw8Q10lM96+p50bYJq

ZFuzzjTVD4rAcZ1terFtAUggfE5W0gXhR+0kwU6zNnrHc/a5Mo5HwuiDU24jYR2YErqT

DRyM4tp7mnMI1JxsKuGw5VDVWiX983yhhByoPNKBzG4fVRotGy6dd6SoY2BrEn1Hg+Ns

b3hDmO09eo0c77cgZcy0+NzZtI+Q8Ap2VhoY3tJdWE7oZ/psiiYl1qw8lNzkZ5GinEYx

/ZCA==

Sender: fresh_01_58528212485814@googlegroups.com

X-Forwarded-Encrypted: i=2; AJvYcCXqQFcn9cYCtHESbs3IFbCQG/s1Ag6nTrRig2DFCdFZbRVz1ewUk5Sb45MxxhCJ4fbDzu69B/E0jKEFZIYcoCK1gsu5XsKh

X-Gm-Message-State: AOJu0Ywi5PQjr3Q0yRzPtKHIlY5+N/W1ejt6YumxNiXApCy/LDJuEnu8

AdU61sYolDZ0/3kwX+3hW+XjpvjByyxxWjkUFF6NKnf7BsYOlQcQ

X-Google-Smtp-Source: AGHT+IG+VsoNiw0/KWAo8LeVwxzpm4YaxydC1gB73oOfozbZAFFGsoPFJ97DqRcfEKlsIrm0BsEkdg==

X-Received: by 2002:ac8:7fcc:0:b0:42e:7a36:989b with SMTP id b12-20020ac87fcc000000b0042e7a36989bmr10716838qtk.40.1709042531087;

Tue, 27 Feb 2024 06:02:11 -0800 (PST)

X-BeenThere: fresh_01_58528212485814@googlegroups.com

Received: by 2002:ac8:5951:0:b0:42e:814f:f4b8 with SMTP id 17-20020ac85951000000b0042e814ff4b8ls2779949qtz.1.-pod-prod-06-us;

Tue, 27 Feb 2024 06:02:09 -0800 (PST)

X-Forwarded-Encrypted: i=2; AJvYcCV/br2j+2+fNuRdj/fTfhQbpsjVKIrCW2rlAZ7agChk2qgqODTQB2e2UMh295/a49n++IZ/g+Wf/hNG6dvIlTQLsfd3LCqHLDsoGAHaioiclRxdqcDEcAMh

X-Received: by 2002:ac8:5952:0:b0:42e:5c3a:8b2d with SMTP id 18-20020ac85952000000b0042e5c3a8b2dmr13425713qtz.1.1709042528774;

Tue, 27 Feb 2024 06:02:08 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1709042528; cv=none;

d=google.com; s=arc-20160816;

b=VLkWOYay9j4dHZbdjR6WRQUL55hwQEaBTbQgw4Nzp+JqbzIwXtAqDZ7A28Cr0kPo/p

9SLSf6fJ+WG13E64CAOAQT+violB6xwcaytiqodoUWcsSUD6mz16QybQbQBnMnCcsVB1

QLzvcXZwKL2aY50dOi3FvFfo5FzBgrJsz/QOoR8UQBNB6h4PLp6Xu++3RSlrjedbtvrL

I59qO6zKSDv6i4mFl+I5kv0Ap22T31RoJUEE30+Zj7fZRqFHqTqgrMVhtclimQy2Ezjj

/DZaBXV2lO+WRnGbmphSI7PjHGVJj36ylFZJaLjn1Os6IUKw9v1c8lqOzy7GWmRg7y+n

20Dg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=YL6TJW1Yo6W2yPZsvSmUhtNqDKfeXDfNZokToVAaINY=;

fh=jPQo6qNWHGpbHtj22dwRX//MgOoMa0uF5zmcZhradfE=;

b=t0ELVqm20HHZiCE0UCOB2K3/ij4P8yCNOPx0wuPYecVBtNlmTSBB4kTOOyey6hOt+e

gL9XwzlIQ7xpVzRArhzZlRhAxuMlLyPhN1Q6CmSiLjrxfXP0g2kDl4isRszjLmJr1rrY

jzn/wF9RYThlF3+gzRPCL6ds7u1USjKfCkAWNY0VbGRKQ/LkuUUyNCT3X2sVE9C3BfOE

jqmiz84fd9NVW1h5MPupqMnUTzgMz9R/ykyAsZykBfaBwGJel6vau5a8DX6011YgV6cY

vQhKxT2sDcfgXpNliGlrVmhU1nk1mt2A7daf4sqqdOk9czoJm8qt3wZWlqXIwdl8ELHM

Ka1A==;

dara=google.com

ARC-Authentication-Results: i=1; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b="Qu/FfR8t";

spf=pass (google.com: domain of lozaliamsigwa@gmail.com designates 2607:f8b0:4864:20::52b as permitted sender) smtp.mailfrom=lozaliamsigwa@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Received: from mail-pg1-x52b.google.com (mail-pg1-x52b.google.com. [2607:f8b0:4864:20::52b])

by gmr-mx.google.com with ESMTPS id v8-20020ac85788000000b0042ea549172esi21998qta.4.2024.02.27.06.02.08

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 27 Feb 2024 06:02:08 -0800 (PST)

Received-SPF: pass (google.com: domain of lozaliamsigwa@gmail.com designates 2607:f8b0:4864:20::52b as permitted sender) client-ip=2607:f8b0:4864:20::52b;

Received: by mail-pg1-x52b.google.com with SMTP id 41be03b00d2f7-5ce9555d42eso3644784a12.2;

Tue, 27 Feb 2024 06:02:08 -0800 (PST)

X-Forwarded-Encrypted: i=1; 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

X-Received: by 2002:a17:90a:fd8c:b0:299:d17:a558 with SMTP id

cx12-20020a17090afd8c00b002990d17a558mr8524797pjb.21.1709042527488; Tue, 27

Feb 2024 06:02:07 -0800 (PST)

MIME-Version: 1.0

From: Lozalia Msigwa

Date: Tue, 27 Feb 2024 20:01:55 +0600

Message-ID:

Subject: Finding Free Hookups Near Me (Feb. 2024)

To: fresh_01_5852821245961@googlegroups.com,

fresh_01_5852821245963@googlegroups.com,

fresh_01_5852821245967@googlegroups.com,

fresh_01_585282124596@googlegroups.com, fresh_01_5852821245@googlegroups.com,

fresh_01_58528212485814@googlegroups.com,

fresh_01_5852821249@googlegroups.com, fresh_01_5852821250@googlegroups.com,

fresh_01_585282125480@googlegroups.com, fresh_01_58528212549@googlegroups.com

Content-Type: multipart/alternative; boundary="000000000000c1dab706125d78ad"

X-Original-Sender: lozaliamsigwa@gmail.com

X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass

header.i=@gmail.com header.s=20230601 header.b="Qu/FfR8t"; spf=pass

(google.com: domain of lozaliamsigwa@gmail.com designates 2607:f8b0:4864:20::52b

as permitted sender) smtp.mailfrom=lozaliamsigwa@gmail.com; dmarc=pass

(p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Precedence: list

Mailing-list: list fresh_01_58528212485814@googlegroups.com; contact fresh_01_58528212485814+owners@googlegroups.com

List-ID:

X-Spam-Checked-In-Group: fresh_01_58528212485814@googlegroups.com

X-Google-Group-Id: 128202668634

List-Post: ,

List-Help: ,

List-Archive:
List-Unsubscribe: ,





--000000000000c1dab706125d78ad

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hey, I=E2=80=99m available for hookup and I=E2=80=99m not a cops or anythin=

g scam. I=E2=80=99m not

here to hurt anybody, so just text me if you=E2=80=99re interested.

View pic> sites.google.com/view/ssa26



Zero cost)













































-----------------



--=20

You received this message because you are subscribed to the Google Groups "=

fresh_01_58528212485814" group.

To unsubscribe from this group and stop receiving emails from it, send an e=

mail to fresh_01_58528212485814+unsubscribe@googlegroups.com.

To view this discussion on the web, visit https://groups.google.com/d/msgid=

/fresh_01_58528212485814/CANbRQM4rztWAfE%2BM%3DWO%3DaTRn4pVKyjXuoVv4OzzYH-p=

YiDbizg%40mail.gmail.com.



--000000000000c1dab706125d78ad

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hey, I=E2=80=99m available for hookup and I=E2=80=99m not =

a cops or anything scam. I=E2=80=99m not here to hurt anybody, so just text=

me if you=E2=80=99re interested.
View pic> =C2=A0
/sites.google.com/view/ssa26">sites.google.com/view/ssa26


Zero c=

ost)

















>




-----------------








--


You received this message because you are subscribed to the Google Groups &=

quot;fresh_01_58528212485814" group.


To unsubscribe from this group and stop receiving emails from it, send an e=

mail to
com">fresh_01_58528212485814+unsubscribe@googlegroups.com
.


To view this discussion on the web, visit
com/d/msgid/fresh_01_58528212485814/CANbRQM4rztWAfE%2BM%3DWO%3DaTRn4pVKyjXu=

oVv4OzzYH-pYiDbizg%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter"=

>https://groups.google.com/d/msgid/fresh_01_58528212485814/CANbRQM4rztWAfE%=

2BM%3DWO%3DaTRn4pVKyjXuoVv4OzzYH-pYiDbizg%40mail.gmail.com
.




--000000000000c1dab706125d78ad--

X-Rated Google Groups Spam "Lillian P. Johnson" <kyawookhing6@gmail.com> from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Feb 2024 20:51:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rfAxk-000000000cD-3B0O

for dave@doctor.nl2k.ab.ca;

Tue, 27 Feb 2024 20:50:32 -0700

Resent-From: The Doctor

Resent-Date: Tue, 27 Feb 2024 20:50:32 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f60.google.com ([209.85.167.60]:61729)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rf6sA-000000004IS-0Zku

for doctor@mail.nl2k.ab.ca;

Tue, 27 Feb 2024 16:28:34 -0700

Received: by mail-lf1-f60.google.com with SMTP id 2adb3069b0e04-512e58cf80esf3441017e87.3

for ; Tue, 27 Feb 2024 15:26:35 -0800 (PST)

ARC-Seal: i=2; a=rsa-sha256; t=1709076389; cv=pass;

d=google.com; s=arc-20160816;

b=di3CN63Y5fc8veSZU50TlgY55WZR4ZFI/yK0jV/gplRYDTrUzyOvMmEs388GwGCf3z

lEKkKSck+wA5RgED3mc+VyuZLB2RZY1C68b0ztsaR3NM/QKHVpcicyS421I9bI2uobHA

aPlkXQHFuy1YBcR4ems3XYkrIyR63OdbdbOogar7Rdf2y/YngZb4VN4zcIOXjyoyd7wA

3L95x20tqKBNe/n7cc7/s8Bj3vc0RE+y5/kYWLDQzaBfH9r1uRukyCfpBLG0aqObEzE1

aZb7hVQiQ1EbXha5ck+NdQGfd4fxpQjDa9eYIRyqf2xdNmGj2s/xbenuFJRZ9AcLq+3F

NKDg==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature:dkim-signature;

bh=RWdbLluoHuvFpUEBA/952lR500kcF0XiAwLBKmUuIGw=;

fh=ISL+JK8HdHfhf3A+nriiKJvuU1QDJWJzFURmE0V2nEc=;

b=Nu2KUfdSnwJl3lnTgNvpOMpv9FZ7Hgxh8skyfP+B1xuFRYQ+KK9ytYKEv7VqjO4Q5J

CseXy2uvPT/bnUaz288W90HAIyQJdq0KlPAkyUHhF9/WP7wNTcq2U8QRpOSbamGR+D4B

LyGnQwKwqlVFmy3DGcHyG38FdRmvLrMRIQHkxyFeptyJ8rUwJhFHUNKHhV6Y2qakoV7h

UBmXJiRIpTsvFRI9TLUcRnx+8HWsIU4JfEROnF+nKhwVSzHGqsNUS7lFraxJU2X1A0Qv

crbQ0Xm6W7Ji6b7H4yOiAeIhd5yD2uCNnfQ+W7sPnnxWTTxV2uph/Zl1173hRKR+7+5O

NDhA==;

darn=mail.nl2k.ab.ca

ARC-Authentication-Results: i=2; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=fKCYR9LU;

spf=pass (google.com: domain of kyawookhing6@gmail.com designates 2a00:1450:4864:20::12b as permitted sender) smtp.mailfrom=kyawookhing6@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=googlegroups.com; s=20230601; t=1709076389; x=1709681189; darn=mail.nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=RWdbLluoHuvFpUEBA/952lR500kcF0XiAwLBKmUuIGw=;

b=P77/w5Fusww3apH3+xcsI59MPcKkCxWIp3oo/QI3wbBsirRFG+/mg7hVDhNjjdU8iv

IVWowddiQ/QkQkWBwovy4QJc3Jb+WsVdlLsJO0OcsEUmqtigAdzwrBo7QMnxA+fdxR5h

efahn+I8j5vUs9Ygu3a667WPF/EJdYfIwyvIzycJrSZgSGMT1saI+VB07jOUL7s0jgT5

Ye2CkXpW1VjPpzfSXoOYk03NIpdZDCfahF9+HfXW+eYL8JUkUfeO6O4r4wwLaQF1vc3o

3SFJtDlr7Dd3N6l9XU86FQw/3SYqvcQogCIY27u4GB73orCOwLGDABfKDD1RS/SacGEn

1tHQ==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1709076389; x=1709681189; darn=mail.nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=RWdbLluoHuvFpUEBA/952lR500kcF0XiAwLBKmUuIGw=;

b=ALGiU+/FT6sbQmVvcdYBONsISwaO8keHpdpcFR9JzyXCBKbz8hvyBiw1g8cVoiCzWO

3zeLDFVMzBP6C8jsJWLgIV/Uz4GMws2nCpnvfS8gAjiVc8OOcyaDX/8bRKAAhTTOJtJ8

B+WFhs01wZVajJcg0adE4aeoKPiHrWXSGhwGyE+p2LicB1EbevlMGyW+GTzKf++fuMqE

y5NqnKGQasIf4NxCQBdfB8GqISiPS2uy0kxuC1osWikPzhRUcrZkFtky9S2on5MooYrw

dH5S56LxcvQac71G2vzlG6QniHipRjjf9nTyIvTolu3mnhRCddcBe6mK3l/Tr7kIEqU3

Lv7w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1709076389; x=1709681189;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-beenthere:x-gm-message-state

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=RWdbLluoHuvFpUEBA/952lR500kcF0XiAwLBKmUuIGw=;

b=QdSk+cVOvbUlmx3zuk7TgxaA80u0I+PrOpCtYGk7RqetuN/St7+30QIw2nShzBhbUg

BUI6ixIFpNiOdqKa7oPOuXeJbawVWu0Gop/IoBei5t0/pXhd7S8nladlqeJIkstEXOXn

fF5dTW/5UL2N3qx8XakDMNPYlvccgjKrcAc24cLhZtoBc8osfYxIU+mNI449z4pGmnrc

i+QffapLcpjjKnp0HZ6R6ynayyAuaFYGQCrfoUAhsrwfP14FwNQydpUorEC9d0ivOK58

jSYVXruk3M4b1eBghr8Q0n2G0sMrxmr2qF1SiTOddUR+I52vEHGD9ve5EpjE2+WH34zo

0Xsg==

Sender: fresh_02_918554@googlegroups.com

X-Forwarded-Encrypted: i=2; AJvYcCVXD/K54P2T40l3UmVuumttb0BLErG30Hynbn750dmlhzqeE/pRp6SmS8ZTTeskKN8VFAq5eW0CpUzm7jfHFmuahg8cnnTn

X-Gm-Message-State: AOJu0YwBEjo8yPiWbIwI6EJZaeMreSar2BMPqnZZtsMFY9bJ/dEUZ/tw

x8Fl6GdnmLCkXNloBJLsK0WE58w782QMCjMImn/toPNKbnO9ryplb6c=

X-Google-Smtp-Source: AGHT+IGmiST6Seu6TYERj2JDxNMTpLSFAdV/KfIdFa1ovrmwXsoi36tXeUesPbSmVfAV9nCKpE/Hgg==

X-Received: by 2002:ac2:4833:0:b0:512:ccd2:5cb0 with SMTP id 19-20020ac24833000000b00512ccd25cb0mr6429939lft.29.1709043292066;

Tue, 27 Feb 2024 06:14:52 -0800 (PST)

X-BeenThere: fresh_02_918554@googlegroups.com

Received: by 2002:a05:600c:3ac8:b0:412:ad33:647b with SMTP id

d8-20020a05600c3ac800b00412ad33647bls318941wms.1.-pod-prod-09-eu; Tue, 27 Feb

2024 06:14:48 -0800 (PST)

X-Forwarded-Encrypted: i=2; AJvYcCV4HElpR/u8gBK3ZZ3xl9LuM58/loHqycKxn4csvvbxVYyFj4npRnjGacQFBGMsTfIf4zEVKO4VywTUQSYUiUA5DCPmk4LPGOVBnxl7KzF3+g==

X-Received: by 2002:a05:600c:4f42:b0:412:ad64:cc64 with SMTP id m2-20020a05600c4f4200b00412ad64cc64mr1253614wmq.1.1709043288549;

Tue, 27 Feb 2024 06:14:48 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1709043288; cv=none;

d=google.com; s=arc-20160816;

b=o/K2FIFc0+whKxn6YTHjTYwQ8hfQunOzd4o3n7a2AxCcbNBtkG4C6QO604RAIqaYvk

C4BxUFZf0Gw9PlEL4wJqOJlkDCTb/+ZWH/Sea1FT9IM2N6Nk9AwmE2394Cc4xDChvEMP

gIdCtt7C3mF9JBb7HUXtVNCnBwc0FE+7/vgciZ1SMUogGkz3KZ811Zlp9479xLQyT8oE

DWNaLQLY2ieYXhf5jNfg8L7ToHBGZw3NmYvRiyUGNkX+/MruEwgxBfVpYAwItiY/qzcZ

3cEsmNgYYwQLo4FXPuk2zp2qTdjmof+rS8qqOhlZIt7n0kp6wkAwDDW5xwGitnvjg8lb

52Vg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=ZLfedECM+cV95Y1idBsA1FvXRKfPw+MhrX2xH3V5aTo=;

fh=dUnyqGOwwmeR03ZwlUeHpGHCz9eCD6pCNPk1pAO16uQ=;

b=pNrNoBruPvZ9YHhoprmf26CZzM+Dq3RN24qImu1S9AEb0m6SITMOvNz6J8qfHQLDW7

s/IZwncqpkSte5ydqQKN/nLrlhCU6o6tYE7wus912N08VDVi6pfbFamC8zVPXNF+kD6E

Fdtz+JMOvIQ2DwvkV/TFsSKhn4mwEi/rJQe701s39ykqZnLr3xpQ7XlH6T01QuyGImt0

FJ1ldS00NJV9/1NtfB/G0EmUyj+wUJ7YcMTDmqcryFoGwOpJCNipVvW5qPCSKCCzhCgT

FXSMd9aPW6i9tEp/d9t3XW8MAigzeRs7kWsXzTh5fQ4AvvbkdI5xR04U/xUJ9fqXyXVR

WtGw==;

dara=google.com

ARC-Authentication-Results: i=1; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=fKCYR9LU;

spf=pass (google.com: domain of kyawookhing6@gmail.com designates 2a00:1450:4864:20::12b as permitted sender) smtp.mailfrom=kyawookhing6@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Received: from mail-lf1-x12b.google.com (mail-lf1-x12b.google.com. [2a00:1450:4864:20::12b])

by gmr-mx.google.com with ESMTPS id v24-20020a05600c4d9800b00412acafecafsi106844wmp.0.2024.02.27.06.14.48

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 27 Feb 2024 06:14:48 -0800 (PST)

Received-SPF: pass (google.com: domain of kyawookhing6@gmail.com designates 2a00:1450:4864:20::12b as permitted sender) client-ip=2a00:1450:4864:20::12b;

Received: by mail-lf1-x12b.google.com with SMTP id 2adb3069b0e04-512cc3ea7a5so4451972e87.3;

Tue, 27 Feb 2024 06:14:48 -0800 (PST)

X-Forwarded-Encrypted: i=1; AJvYcCVdImbvKhmh1XDbNveu3vIIg9Iy6eCt19SId9y2d3JLeOfzPhPlDx7m8Auw5J+Hkdzs3wVoKlLn6ypkne9t3gPjjSvXyLpAcTH/d8Gj8n89dae397mMyKb4LQjTBkCS0aN4pRYemvjUMx33WtueUFavniRdUIbIduFJiGyVVY2SzjoUvS8pWa+knPk+TUQjOAZldidYgt24qMjLBrLVjfCXv6jE3SD13o6U22C/RABqEJ6LEGn6uEcyDpbWVLDg1bnXueTHpYPsx9uHXx+4T4yuZLCuklQ98WXE82vL9nYp0esWe08KAtrJE0zXt4mBubzHkCkZeKHYCnKcecU1dFUaUpy7bn1eAWVCFbpdQp6PXxDFFU99tPtuafGiWBlxjwTcVeh/YwyIDwX8xX4IHDCRcQhtiVrsmLIBHoO92Yix1Dcuvv7UoZiuXQE=

X-Received: by 2002:a05:6512:20b:b0:513:4b6:b600 with SMTP id

a11-20020a056512020b00b0051304b6b600mr1433468lfo.59.1709043287295; Tue, 27

Feb 2024 06:14:47 -0800 (PST)

MIME-Version: 1.0

From: "Lillian P. Johnson"

Date: Tue, 27 Feb 2024 20:14:34 +0600

Message-ID:

Subject: Finding Free Hookups Near Me (Feb. 2024)

To: fresh_02_9129966@googlegroups.com, fresh_02_9129987@googlegroups.com,

fresh_02_912@googlegroups.com, fresh_02_91522544@googlegroups.com,

fresh_02_918554@googlegroups.com, fsgfdgsg@googlegroups.com,

gkjyufui@googlegroups.com, gssgwgg@googlegroups.com,

helpcenter7624313sxqst@googlegroups.com, hfhjyxnb@googlegroups.com

Content-Type: multipart/alternative; boundary="0000000000000b8a4e06125da6a4"

X-Original-Sender: kyawookhing6@gmail.com

X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass

header.i=@gmail.com header.s=20230601 header.b=fKCYR9LU; spf=pass

(google.com: domain of kyawookhing6@gmail.com designates 2a00:1450:4864:20::12b

as permitted sender) smtp.mailfrom=kyawookhing6@gmail.com; dmarc=pass

(p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Precedence: list

Mailing-list: list fresh_02_918554@googlegroups.com; contact fresh_02_918554+owners@googlegroups.com

List-ID:

X-Spam-Checked-In-Group: fresh_02_918554@googlegroups.com

X-Google-Group-Id: 229846020773

List-Post: ,

List-Help: ,

List-Archive:
List-Unsubscribe: ,





--0000000000000b8a4e06125da6a4

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hey, I=E2=80=99m available for hookup and I=E2=80=99m not a cops or anythin=

g scam. I=E2=80=99m not

here to hurt anybody, so just text me if you=E2=80=99re interested.

View pic> sites.google.com/view/ssa24



Zero cost)













































-----------------



--=20

You received this message because you are subscribed to the Google Groups "=

fresh_02_912447" group.

To unsubscribe from this group and stop receiving emails from it, send an e=

mail to fresh_02_918554+unsubscribe@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/=

fresh_02_918554/CA%2B67r4C4Jd_r6EzHDC3vdZWencU4aU_kG06wq6bCjyP9ZQRrMA%40mai=

l.gmail.com.



--0000000000000b8a4e06125da6a4

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hey, I=E2=80=99m available for hookup and I=E2=80=99m not =

a cops or anything scam. I=E2=80=99m not here to hurt anybody, so just text=

me if you=E2=80=99re interested.
View pic> =C2=A0 =C2=A0
http://sites.google.com/view/ssa24">sites.google.com/view/ssa24


=

Zero cost)















<=

br>





-----------------








--


You received this message because you are subscribed to the Google Groups &=

quot;fresh_02_912447" group.


To unsubscribe from this group and stop receiving emails from it, send an e=

mail to fre=

sh_02_918554+unsubscribe@googlegroups.com
.


To view this discussion on the web visit
om/d/msgid/fresh_02_918554/CA%2B67r4C4Jd_r6EzHDC3vdZWencU4aU_kG06wq6bCjyP9Z=

QRrMA%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https://grou=

ps.google.com/d/msgid/fresh_02_918554/CA%2B67r4C4Jd_r6EzHDC3vdZWencU4aU_kG0=

6wq6bCjyP9ZQRrMA%40mail.gmail.com
.




--0000000000000b8a4e06125da6a4--

Nija Air Fryer spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Feb 2024 20:51:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rfAy2-000000000qr-0Yuk

for dave@doctor.nl2k.ab.ca;

Tue, 27 Feb 2024 20:50:50 -0700

Resent-From: The Doctor

Resent-Date: Tue, 27 Feb 2024 20:50:50 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn8nam12on2133.outbound.protection.outlook.com ([40.107.237.133]:36161 helo=NAM12-BN8-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from <2DZ48T476@minhtu.oiko.sbs>)

id 1rf5GR-000000001QC-3mca

for root@nk.ca;

Tue, 27 Feb 2024 14:45:31 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=YvWZCsf5/y0YFf8Lj56yzs09lWKTs+QFgAYLpYCdt5S0tpAyL3/FddMUWLvcklojxaKcH6c8pRaaXBxCLQW1ZyT824UZXNmRBJCslm2g7p9OvVOw4Qm+xmIV+FU5OxcAspBn/+LTiww/PVYS3poyh9+oSqgDeep/U4dKXSIm2HrXuG3avFWFuf4Mq1TrY5s26r5DaZv7XqvbROYyw64o86DntzJLZ5GP5gIAzYRZ2YeL5R4Hvl26pv/VjW4lBxljpu9xIDGuLbQsIEHiec51SuAEI6d1ddcqooalFdnitqtzD3Ef5+rzYDvVAvi4V/gry963g1PsH/u4GTfO9rpkaQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=5734AxxWWey/WHhkSWGuQIuAomjqLdYpYgI4qB2uVG0=;

b=fKPms/ZeNxkpdf3wzAMr40y/GXlqGtOzq5Fm8At26/uuyV6EVutec/+xKIuYCnstvUYNR+H9ev7CTXn2z5ds8z4FYETYLdAZREQCiO+9/UbyabYCy+04yshkGnu+j0P4wOreFN5SNGqfNmGNmrZoO+xm29ybK3NGSQuD/yl/OZBfUDgyRo3adiiq+RTVPzuHiYpLqvFKNURSXWeDgbjkXXwSSgVhvGvL6pKE/REP8XibcW7bgqMNrcCVYZqa1k9sijz7Mnf1ZgnDhDGQ+FKR+8jBCSlI4ma7QwvQN5UmvFO+HGV8WggnnCPYbhwAaDA/jubdndIb8ZB92Uriylvv/Q==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=minhtu.oiko.sbs; dmarc=pass action=none

header.from=minhtu.oiko.sbs; dkim=pass header.d=minhtu.oiko.sbs; arc=none

Authentication-Results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=minhtu.oiko.sbs;

From: "=?UTF-8?B?TmluamEgQWlyIEZyeWVy?=" <2DZ48T476@minhtu.oiko.sbs>

Subject: =?UTF-8?B?8J2WtvCdlr4g8J2WtvCdl4jwnZeO8J2XhfCdlr0g8J2XhfCdl4LwnZeE8J2WviDwnZeN8J2XiCDwnZaz8J2XgfCdlrrwnZeH8J2XhCDwnZeS8J2XiPCdl44=?=

To: root@nk.ca

Cc: root@outlook.com

Content-Type: multipart/alternative;

boundary="_033775c1-df1b-4d55-83ab-143fee910cb7_"

Date: Tue, 27 Feb 2024 21:43:22 +0000

X-ClientProxiedBy: YQBPR0101CA0181.CANPRD01.PROD.OUTLOOK.COM

(2603:10b6:c01:f::24) To DM6PR04MB4044.namprd04.prod.outlook.com

(2603:10b6:5:a9::30)

Message-ID:



X-Message-Flag: Flag for follow up

MIME-Version: 1.0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DM6PR04MB4044:EE_|MW6PR04MB8841:EE_

X-MS-Office365-Filtering-Correlation-Id: 45fa460e-9d68-4d12-7644-08dc37dd206a

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DM6PR04MB4044.namprd04.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230031)(37730700002);DIR:OUT;SFP:1102;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?RWljNm9qUGxldlJkYk1CbTV5a2pkYTBBZ2lpQzlhdUdjZDBLbDRBTWFIN0Zn?=

=?utf-8?B?d3kwa0RRVzkwSUE0L0puR25hejB3OGpIM3ljZ3BvYXk1RlVCMkJ0eHd4eHls?=

=?utf-8?B?YXFmbThVaCtwRzFHa3JJNjFVdDVoVS9VN0ZQdnZXbVdqREFrdkt6aEk2djRN?=

=?utf-8?B?MWprcGtIOUJUaUowVVF2TVFwVDhuZWJaQ2N2V1Q1cGlLRGFSTEJ6Z3FwZFhl?=

=?utf-8?B?SVBMTVhRQWxuNTdQeW1XQ3l1MUJENk1Sd2RWQnJ6eEFxMXpmdkFJRHhZYSta?=

=?utf-8?B?aVE0UDN2QjNoMEo1VEJ1dGZ2Y2twaVk2YlRqQ2FqQVQzMGxoQlgxU3laVjE5?=

=?utf-8?B?NitPcVB1amRwN2VrZUlnaW5VdTdHckgvSk4rWVhZcHBMUEpIeTZGTStjcW91?=

=?utf-8?B?ZTRMNENBNDlsYmFVOC9vSEo2OTY3RTNJdkcyZVpLUVJ3NGQ2Q3VHZ1FCTE9i?=

=?utf-8?B?WFVNd2dWSGF5T29ZMEpBQnRTdmhDWk1vSkJiLyswbXJydDdHdm5JREZZaTZ3?=

=?utf-8?B?cGlqODFwd0h5clBITHVWQjBmUEZRYmVOTzhmemlINzN0aHJzVkdDTisyRUpa?=

=?utf-8?B?Y0xBNm50bkJnMCtjcTdKMFJoYnBPTmdBNEZzNThEa3ZVcTRqdVJmWGVqNHNH?=

=?utf-8?B?eUhoNDVEemNwUC90aGV5MFQyK3ZNYWVVK1lsL3ZralpaN3htbW05T3JBMHc4?=

=?utf-8?B?eS9yQWd5VWR0OXRzTmkyREl0d21FbUtlSlNiV3dVbkNpUmxPeFlMenpBYm8z?=

=?utf-8?B?VnJRM3hrZGJ3UExCd0ZKTmw2bS8xK1JNcHJGTzRKdU5OSkNBanhjOUZIeEwy?=

=?utf-8?B?cWo2cjNjS0JnSW5aaDBjLzBjSE4zUmlITFlWR3Iya0tzaWxJYkFtUnZ6RjM0?=

=?utf-8?B?Y1RCallsS0V5RzRMM2RlUGxwYWNuNENFZW0vbE5KL1Z3Z1RJMVU2RWoyZWpH?=

=?utf-8?B?YlpUTSs4R0V2ZVd1ZG4rR0VyRW0rcXFKOXRFZ0NSdG00UXJ6WDZNQlRuVTE4?=

=?utf-8?B?RXdRWjFiMzdYMWRJekVmbmg5TGNycytudytZeGF6c1NWUlZpRmFQa2xzZTZD?=

=?utf-8?B?N3NnZFZxMmhTa2QxS1ZwRDg4OXNnb2E0Tkc2RXJJYlc4WGhxVXM4aFh3ZzdG?=

=?utf-8?B?YWZZOXVLSzN1WlRXUzJQdVJQOXlnWURXN2pCT21STnUzUnE2Q05Hd0FJWGQx?=

=?utf-8?B?VjhGdEQrTjAyZDk4bmllN2xOK0FZNnRLdGZsK2FtdnViVEVMaFl1cUMwTGls?=

=?utf-8?B?NHpmQmNwbjZYTkxXdmFwWklQY2pzd1k3SmduTDg5RHlUTnVhVC91M0c4NHNx?=

=?utf-8?B?SklXbWFDSGlCM2JMWk9VYWd0bGUxbldvNTRzUFdZN1d0Z2VqZVBja1Z4VCtK?=

=?utf-8?B?Mm10dHJITHUxaTFJY1R4bjVMcjJQRVhoQk1kcENDMEIwZ1FPcW40dXpDOElj?=

=?utf-8?B?bXhlcC80QmdQVG15enY1cDhOUko3YTQ1SldKMWVFMm5aS0xPcDJvRGhNUjNr?=

=?utf-8?B?MSsxYWl2NmZlMGFXMmMyYVN6WG9ycGgyS3ZSd2FYVDNmYjJVRWFuV2J5QWxu?=

=?utf-8?B?NkNhc2ZoZVhKWmFFSE5RcGlmNUZpOGdqb3J1aC85bTdvMnpLeEYrY0F1ZUJG?=

=?utf-8?B?QkNkbGJzTy94NVR0d1J1cWZWRWlMblBEWml0SEM3cXZPajZObTZQclRWckMx?=

=?utf-8?B?MTlXbXNOdFRTYWd1RWFSaGdkeGE3NU1mMjQyZGVaYlBmdVBYMkpiL2NuNHl1?=

=?utf-8?B?ZHBCWUVVand4bjVqbStkZ2h1SEQwMlVVODlROXNTdHZkKzdjeW1PSXZBRSta?=

=?utf-8?B?aTdVTTVXNFp1bFBiL0llUG9JcHVLYUZNQUFYYk5IWXZuN1JBcWJsczNzWjJ5?=

=?utf-8?B?YjMrZUYrQjVuTzVZMXRQT1d2dzlidHFONEJzN0JwamY5UXBOR3J5OE5NaEcr?=

=?utf-8?B?RUI1MTFiTGtSQm9ZQXZmSXhSTkcvblR3ODJYZjNXQ0dCT1lRWGZPZitqcHRK?=

=?utf-8?B?alIwNnliU2l6WmFyMll6SnRTWWNlZHdUTjhzeURjdG13TjJqanlPSWo3ZE9Z?=

=?utf-8?B?VGFuUWE3cndsTjVPaFZkWGZVV3RiUUVHN3RYeVhJdm5IajhXaVcycUxnZjg1?=

=?utf-8?B?Tnl0N1Z5Umd6aWhBZlJBbUhZYzViL1dpNVRLQlEwdDdBVW5BdzBZOElyRjFM?=

=?utf-8?B?SFE9PQ==?=

X-OriginatorOrg: minhtu.oiko.sbs

X-MS-Exchange-CrossTenant-Network-Message-Id: 45fa460e-9d68-4d12-7644-08dc37dd206a

X-MS-Exchange-CrossTenant-AuthSource: DM6PR04MB4044.namprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Feb 2024 21:43:25.2182

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 99b68662-d18b-418c-9a5f-8af2c455b602

X-MS-Exchange-CrossTenant-MailboxType: HOSTED

X-MS-Exchange-CrossTenant-UserPrincipalName: 3UMZ3t8o1z4+vPqsZTOYuOZ0XiR0qRdBHFGXLTj9h3QEv3/vqC6d+2B4MO2kL2RjwkPqPQ8N4uz63C6mXA4wUhd7cBjt9imxScm90v6nwwI=

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW6PR04MB8841

X-Spam_score: 9.8

X-Spam_score_int: 98

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: 𝖸𝗈𝗎'𝗅𝗅 𝗅𝗈𝗌𝖾 𝗇𝗈𝗍𝗁𝗂𝗇𝗀

𝗂𝖿 𝗒𝗈𝗎 𝗈𝗉𝖾𝗇 𝗂𝗍 𝖭𝗂𝗇𝗃𝖺 𝖠𝗂𝗋

𝖥𝗋𝗒𝖾𝗋 - 𝖲𝗁𝗂𝗉𝗆𝖾ð [...]



Content analysis details: (9.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.107.237.133 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.107.237.133 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

2.7 SCC_BODY_URI_ONLY Very short body with something maybe clickable

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} =?UTF-8?B?8J2WtvCdlr4g8J2WtvCdl4jwnZeO8J2XhfCdlr0g8J2XhfCdl4LwnZeE8J2WviDwnZeN8J2XiCDwnZaz8J2XgfCdlrrwnZeH8J2XhCDwnZeS8J2XiPCdl44=?=



--_033775c1-df1b-4d55-83ab-143fee910cb7_

Content-Type: text/plain; charset="UTF-8";









--_033775c1-df1b-4d55-83ab-143fee910cb7_

Content-Type: text/html; charset="UTF-8";





𝖸𝗈𝗎'𝗅𝗅 𝗅𝗈𝗌𝖾 𝗇𝗈𝗍𝗁𝗂𝗇𝗀 𝗂𝖿 𝗒𝗈𝗎 𝗈𝗉𝖾𝗇 𝗂𝗍


𝖭𝗂𝗇𝗃𝖺 𝖠𝗂𝗋 𝖥𝗋𝗒𝖾𝗋 - 𝖲𝗁𝗂𝗉𝗆𝖾𝗇𝗍 𝖯𝖾𝗇𝖽𝗂𝗇𝗀

















--_033775c1-df1b-4d55-83ab-143fee910cb7_--

German Language Spam from Microsoft

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Feb 2024 20:52:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rfAyR-000000001AQ-3NCh

for dave@doctor.nl2k.ab.ca;

Tue, 27 Feb 2024 20:51:15 -0700

Resent-From: The Doctor

Resent-Date: Tue, 27 Feb 2024 20:51:15 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-mw2nam12on2100.outbound.protection.outlook.com ([40.107.244.100]:5409 helo=NAM12-MW2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rf5m8-00000000Aaa-45WS

for root@nk.ca;

Tue, 27 Feb 2024 15:18:20 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=AyMx2QnEYMFs7NS1rX/OuteKFCU1DGQr+fXa9efVj491qjxJ/ksyXVdMzupnT0htl/2Z2aSQEZeyKll2EAKFykAYf0yTimECTenLsd53c8YM/NjmMidCb0NJNeyIWFCCT/dHAy6TWepMvBx4F4iQUCXQI6zXbeqmqYV3y3b/278mJf2KtT8PBNjB2FrMbik/fAp6DDORRyTYXnAyB4558ETnTMuWHGmJH0guKpJvv6NxHgK2ljsLgtQjI9iT+aZe6EBzZ+FIvzH2iEQnL4NB4z0WHros+NVFfYwbpb4cDzu/CQ9dvN6xhKBzaH/Th1awREbnsiMUqvzrkkthrgQs9Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=JpJiYbDLw57tf6bnUPkZdAPhLjZwTj57dFKvYRGa2Gw=;

b=Gfn65sb9RgzHhY2lzrGfosTC38IDLEUstsuHxbPzSuBHEUT+aG3IlGw6a8BcjoeKVYqCfFsHpkQo6B9+Ed5OxQRGFYdgdR3MUPFte//T5NMGJaXRpj68G3NHqwBaZPE3SM9+BUb05uQMDNIq9NcHfyN6lJk1+MlR6VQqmhgFV35mNlNZUBAtxkkYc3A4s3TOxpipEEbyEJuLIeL/62b384Qxth1Ijed/4bGWhmfHTxgDorqinn6BYmle1u8LEOQQkau2sxNrwZFz15nsHFwFn1rzg04VB+V62tzD9qAU50g7GeUwGJ5GANIQMwJwfJH0CroUqJi9Hco9Cvh3tQLGAw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=lfyipqgdy.oujdf.sbs; dmarc=pass action=none

header.from=lfyipqgdy.oujdf.sbs; dkim=pass header.d=lfyipqgdy.oujdf.sbs;

arc=none

Authentication-Results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=lfyipqgdy.oujdf.sbs;

From: "=?UTF-8?B?S2V0byBCYXNlIEd1bW1pZXM=?="

Subject: =?UTF-8?B?8J2Wp/Cdl4jwnZeF8J2WvvCdl4cg8J2WsvCdl4LwnZa+IPCdl4zwnZeC8J2WvPCdl4Eg8J2WqPCdl4HwnZeL8J2WvvCdl4cg8J2WqsO28J2Xi/Cdl4nwnZa+8J2XiyDwnZeT8J2XjvCdl4vDvPCdlrzwnZeEIPCdl4bwnZeC8J2XjSDwnZaq8J2WvvCdl43wnZeI?=

To: root@nk.ca

Cc: root@outlook.com

Content-Type: multipart/alternative;

boundary="_c756175e-e8b4-4c6d-8c49-28611765eb7a_"

Date: Tue, 27 Feb 2024 22:16:10 +0000

X-ClientProxiedBy: YT4PR01CA0469.CANPRD01.PROD.OUTLOOK.COM

(2603:10b6:b01:d6::7) To MN2PR19MB3390.namprd19.prod.outlook.com

(2603:10b6:208:13d::20)

Message-ID:



X-Message-Flag: Flag for follow up

MIME-Version: 1.0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: MN2PR19MB3390:EE_|BY5PR19MB3747:EE_

X-MS-Office365-Filtering-Correlation-Id: 189bd2a3-b71b-469b-cb01-08dc37e1b44b

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MN2PR19MB3390.namprd19.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230031)(37730700002);DIR:OUT;SFP:1102;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?NFowZjcvcGpTMzNlZ3pNVzYwalJINE5HRzBWYlhxUW9qU1pYNkFUb3J6SGw0?=

=?utf-8?B?WEdlc2dWaWVSd0l0cnVtcUFJQ1YramF0SHdZL0lLN2JvMThERURGazRYd0g4?=

=?utf-8?B?d1lXQlMxYVJCbUlOUzlHeFJnUm43TnU3Y0ZuUGQ3d2lJZmZQWFdkMng4citw?=

=?utf-8?B?N1gyTUdQL25mWVdmaDlZYm5vd25aSktobk9Xc09MVlJBUFpZQmR5U0JDRjJv?=

=?utf-8?B?T3NJM01lUWc3Mm9ubWhJckFaS05EaTZnVTYwRTNSSXFodVdTdVJITm5OY1Rr?=

=?utf-8?B?SUlLS1RqR2lIQkZiUU9mQnBQeitOS3lsLy93dk5QZ2l6ZVRVZkFQWlRzNUNQ?=

=?utf-8?B?dEthSTNQRHVCRDZ4Zm9pZmdtNktxcFl0NFdlaTBFVGlSSDEzeVFvTEZ3c3J6?=

=?utf-8?B?cjg2RmdVQ0g3aWxvYm9wY1VJWU04YVZDM3N0Znp1RnM5bFBHWWMxWHhqMnBU?=

=?utf-8?B?dWZZRkpvY1E5Z0RKbWIzSkpDdGFsUm5qYmxnTERDUm8vRlY4dndPa1FMZlBJ?=

=?utf-8?B?clQrL010R20rZDg1U3J5My9USjJpbWd4a3l2OTByTlpkY0QzVVBsQnY3Vllo?=

=?utf-8?B?SHJQZndXN0VrYjBiUkM0TVNFSG54REhQYTYxMXdEUFJraGlhd3IrT0Y2Szdq?=

=?utf-8?B?N01nRFlhRTQrMlQxdFJrenluQzBGakJXNWp4WFRCdytKVkdEYmF5SW5RTnhZ?=

=?utf-8?B?RXdmcjhyV3l6VDZGWWJxN3k2UjVkQ2ZTUUZWTTRUaUwvbURZaVByU2pEOHBH?=

=?utf-8?B?dHNoK2p5Sll0SmYySHdySzJhY1VoTmgxWDFWdFkvRDBlVHhHR3B4cmcwS2Jy?=

=?utf-8?B?dHZxbmd3S2tTUkFkTTRHU2JXbm5xS21hRi9LSzYyclpCYnQyYzd3YkxyQkll?=

=?utf-8?B?WUcwM0NhNVJwcHp0QW1HOHA2aDFLYWgxVWxxeGRoa2F5dXY0SmlqNDdFU1dD?=

=?utf-8?B?SGtSM2hxUmxDM1VsN0JZTitYTnhsQ3hTUTAyeHdxUTNYZGtXbkFMZlhoOGFC?=

=?utf-8?B?Vis2dDBZYTRwU2JRd2YrQWluNVZ6ajU4Zlp0UjFubWlxWnNhU0ZybVdBMFN0?=

=?utf-8?B?OGorcWZPVk1Db3huUXBWYW1iSldqUjhNeStWVC9RZGZSL3hIMjkvMEMvS3VQ?=

=?utf-8?B?ZUVzUitVWGExcmN2d2g3UW43VURKVm4xKy91RXNRQXg2b2x0VEQ1aXFPUWFD?=

=?utf-8?B?dlFtWnBXSDFsamdWQld4aC9oWGcvREFZUDBMeG1zcDFCYnZ4bkxWS0JVNjQy?=

=?utf-8?B?YVNBM0Zzd3Y0VXJWZW1MU2tvbW13TnFNMXVIbThyeHdFbjZrN3pmaVNJbXUw?=

=?utf-8?B?TytJM2NGN29xRUhqbmZpTzduRzZuYVJvcHlQSWlVSk1SUm1QNWppSEVvUm5u?=

=?utf-8?B?VlhvMGl2NzZReHdLM2V6aFphWCtQaWRaWmtFMnBROEFKeHhUZ2FaOFF0Nk5x?=

=?utf-8?B?RER0R1lxdUtCaEhicmtHSjF0d2Z5QUNHSzlzVFJKVUhHQUltS0FOcmJCalV0?=

=?utf-8?B?Vjd2dlhsU28wNHhZZXNFWEZJQk5sb0lxOWdYSzJXNng1dU5MalUzdkt0TEdU?=

=?utf-8?B?aXZ0L1d3UVQzcXVaOSswM0ZZRkFjSGxhdXlkU3hLTG1nMzZ5cjY5SXlxb1Y0?=

=?utf-8?B?MG1kQTg3TXVlNUxyc1NBT0NXb0Nqc29ZUTI2YWptSFNQMGdUbW9kZjBlcm9C?=

=?utf-8?B?dHdZNHlkRVY0UU9rUjI5WHY4ZFg4Q1BhVzhtb2o1VGRLMU1IUkw3Ni9MRkY0?=

=?utf-8?B?MHQ1QmZhWjFRUWpwWFF5dnNOeWtVODNlZmtjcmc1VUdmWEVHbTMxL3ppZG5H?=

=?utf-8?B?bDdHSjBpZjhFWjFxZGpCTnZ0N2NTZ2NwZmo0WkFpRnpVdTNNNWtQRzVtYmhq?=

=?utf-8?B?SksyU2U0ay9qY0U4UzBiNzhpU3MyaW5hcnV0bkZzejQwelQ5Y1JlNlF3eWlO?=

=?utf-8?B?YmxuR3RsNDNrb01DcTc4ZzVObytSTzUyNElJOWtGQ09HMGhqTmdkQzh5d0RI?=

=?utf-8?B?cTZHL0NGWDNaRWlaL3kxRE9hdXpUM29LOThTamdjeS9CUU4vTUs5SlorOEVK?=

=?utf-8?B?T2FvNEF0ZDQ5NlJldEI2RlZMR0QxdjY5Zk9QNXdJblpDbllUM3VxUWlTY1Jr?=

=?utf-8?B?dmhranA0anZiWHJtRjFlazZiZEtNRjZER05RZWcwcWZubDdodWhnUVdSelpx?=

=?utf-8?B?MEE9PQ==?=

X-OriginatorOrg: lfyipqgdy.oujdf.sbs

X-MS-Exchange-CrossTenant-Network-Message-Id: 189bd2a3-b71b-469b-cb01-08dc37e1b44b

X-MS-Exchange-CrossTenant-AuthSource: MN2PR19MB3390.namprd19.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Feb 2024 22:16:11.2583

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 938a54b3-2dde-40ef-a804-53b28e405dac

X-MS-Exchange-CrossTenant-MailboxType: HOSTED

X-MS-Exchange-CrossTenant-UserPrincipalName: W3HsBJsX7I6zO45QaYDWHDeAB8Eau6+orv2AzV5iCseQVakgb6KUmnCY5luVMF/IhVjYg5N8CgnhECw6DwpJtB8UCdNjcnCBIJSdrXiOZ94=

X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY5PR19MB3747

X-Spam_score: 9.8

X-Spam_score_int: 98

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: 𝖥𝖾𝗍𝗍 𝗏𝖾𝗋𝖻𝗋𝖾𝗇𝗇𝖾𝗇

𝗌𝖼𝗁𝗇𝖾𝗅𝗅, 𝗄𝖾𝗂𝗇𝖾 𝖣𝗂𝖺𝗍 𝗈𝖽𝖾𝗋

𝖴𝖻𝗎𝗇𝗀 𝖧𝗈𝗅𝖾𝗇 𝖲𝗂𝖾 ð [...]



Content analysis details: (9.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.107.244.100 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.107.244.100 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

2.7 SCC_BODY_URI_ONLY Very short body with something maybe clickable

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} =?UTF-8?B?8J2Wp/Cdl4jwnZeF8J2WvvCdl4cg8J2WsvCdl4LwnZa+IPCdl4zwnZeC8J2WvPCdl4Eg8J2WqPCdl4HwnZeL8J2WvvCdl4cg8J2WqsO28J2Xi/Cdl4nwnZa+8J2XiyDwnZeT8J2XjvCdl4vDvPCdlrzwnZeEIPCdl4bwnZeC8J2XjSDwnZaq8J2WvvCdl43wnZeI?=



--_c756175e-e8b4-4c6d-8c49-28611765eb7a_

Content-Type: text/plain; charset="UTF-8";









--_c756175e-e8b4-4c6d-8c49-28611765eb7a_

Content-Type: text/html; charset="UTF-8";





𝖥𝖾𝗍𝗍 𝗏𝖾𝗋𝖻𝗋𝖾𝗇𝗇𝖾𝗇 𝗌𝖼𝗁𝗇𝖾𝗅𝗅, 𝗄𝖾𝗂𝗇𝖾 𝖣𝗂𝖺𝗍 𝗈𝖽𝖾𝗋 𝖴𝖻𝗎𝗇𝗀


𝖧𝗈𝗅𝖾𝗇 𝖲𝗂𝖾 𝗌𝗂𝖼𝗁 𝖽𝖾𝗇 𝖺𝗆 𝖻𝖾𝗌𝗍𝖾𝗇 𝖻𝖾𝗐𝖾𝗋𝗍𝖾𝗍𝖾𝗇 𝖥𝖺𝗍𝖻𝗎𝗋𝗇𝖾𝗋

















--_c756175e-e8b4-4c6d-8c49-28611765eb7a_--

Canadian Tire Dewalt Phishing Contest from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Feb 2024 20:52:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rfAyJ-0000000014Z-0MHa

for dave@doctor.nl2k.ab.ca;

Tue, 27 Feb 2024 20:51:07 -0700

Resent-From: The Doctor

Resent-Date: Tue, 27 Feb 2024 20:51:07 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dm6nam12on2138.outbound.protection.outlook.com ([40.107.243.138]:25185 helo=NAM12-DM6-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from <4O4OY8430@etfvbypq.iode.sbs>)

id 1rf5YG-000000006WO-0jxb

for sales@nk.ca;

Tue, 27 Feb 2024 15:03:56 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=Xwx9QPOlYovFrLFLoj0jZWKWS5tduXUApCLBbJQ+J7C6tReAustYt0sPdV1bVpwTH60SyEKq3akNj7cZ0f6rW11VfH0zUISyA0U8AR7EVzaRTxxBAvzO/kDby6IU9hP72hz16i7Gkv24lwYa1qZNTPYzbT2f87Yd74okfGr4dM4kFhJFiHcArrqB6ySypVGyUohMrR6nJEERcHZwQ2PEcU+ukCsj6BBsZL4XDF+ZyrKUmo3aRNUoqmVJfurw7v7vdkWQgaXmiq/cerUkNykfNhCz+Kc9RQtMuxc1N15Lln+0VmaZvpOl/3TaPDo37c6kTSK2+r8Hnm9dwzVEkwQJng==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=a3EBv0M5RCMe6s80tO87UTO6yl2LGNGWLg7ZkqJtJgM=;

b=F0UoB+bMqTAHFZJ3XkjcQmYmDGcqVLwLWCxfJoO/jV7aZSpvtBI5iUUmyEsanzmlMgAjR4FQSbEg0zBO4IEf8SATrf0rrogNYEhp8rFhx39H3W1keA2yt/56dJDCfHz0NOEXdnRUwK0xxNw9w5/Nm6clM3DUAZgl2TTMl9N/DOIqvLpofyiCVxGCZxIZGpPDgprgi+p4/DoL+BUlfBdVpzS7ZCBTmWgHqwYIJMG1Hl/flYW+6p2+HPQTEZ+aw1FsHml3Oz1++XRanPWX/CsDGxWAgU/iAUYJ7soBVLxagmWBKDnqP1nLxadf6qqGR+atqNc12w4YCP63EsptIFRomw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=etfvbypq.iode.sbs; dmarc=pass action=none

header.from=etfvbypq.iode.sbs; dkim=pass header.d=etfvbypq.iode.sbs; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=rdhdfhsddbhsdgbdgd.onmicrosoft.com;

s=selector1-rdhdfhsddbhsdgbdgd-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=a3EBv0M5RCMe6s80tO87UTO6yl2LGNGWLg7ZkqJtJgM=;

b=kqMNkED6g2HFasZ9w9jN+iPA9kUYQRAXAvXDtAq667DJ9jGS3Rmbeeb6N8Pn02rgrzzE1JgA2n4/ReL/+lZP5y999jERtolvuOKUgNiyogW2JAIPcDlubskn9CkTWtnMTPIAWISwrPhOBu6wPP15niimNdwE2RFi5hglyXy9PjoloB36ElDrbdLL5XGOQETSVD3IEQaZllAcqN3ow2dS+h3vqaESzq8hCgsMdbmmZ95o0eHrXpbSOiYbO2ztAh+wlFsiOXbLvJwACPMxK0LYSu71LqGwNZa9NKQR6La/getQdGx0T+fKZAIoAmZPTyexoqgXGazBZC2gZX5hdWaXHQ==

Authentication-Results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=etfvbypq.iode.sbs;

From: "Todays Winner!" <4O4OY8430@etfvbypq.iode.sbs>

Subject: Please verify

To: sales@nk.ca

Cc: sales@outlook.com

Content-Type: multipart/alternative;

boundary="_642e65c6-fb11-498f-860c-d409ff26a76a_"

Date: Tue, 27 Feb 2024 22:01:45 +0000

X-ClientProxiedBy: YT4PR01CA0382.CANPRD01.PROD.OUTLOOK.COM

(2603:10b6:b01:fd::19) To SJ2P221MB1276.NAMP221.PROD.OUTLOOK.COM

(2603:10b6:a03:575::15)

Message-ID:



X-Message-Flag: Flag for follow up

MIME-Version: 1.0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: SJ2P221MB1276:EE_|CH3P221MB1119:EE_

X-MS-Office365-Filtering-Correlation-Id: 406981a8-d521-4c62-c5c5-08dc37dfb20b

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:SJ2P221MB1276.NAMP221.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230031)(37730700002);DIR:OUT;SFP:1102;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?eVRIVVZPTjdCUmZRTndoUVp6UTJLQkE4N0xKalhZbHUvT29SWkd0MGYyOXhh?=

=?utf-8?B?NHFyZU9tVFRFN2k1Qkd0cUY1TjN4Q3p0OHhjQTNiZU9xNU1SOXpvMDdLRStk?=

=?utf-8?B?N01WdlhyTWJoYndOdGdraTFaMHE1UFFtRUFQQnAwN1JYN1pJMFFjVmdiS3F0?=

=?utf-8?B?alJ2L0w0TTNSTCtVeWhjUitpbjBXQ0hBNnRqOWU0SFlMWmlNTUxUVERNY1Zm?=

=?utf-8?B?Y2RETnVlVVVMWEthNENCTzk1V1ZxUnQxNlZJVm5tMTV0dEJ2bkNIa1J5UTJy?=

=?utf-8?B?UGZGUWNKYzR4UXp6Kys1UUJ0ckd5Z2FWV0xUbHFyaUp3b0FaL1FnR3Fmc1BN?=

=?utf-8?B?NVphV2ZDTlRpOERTWFVXNElWb29kTlhMNlNmbCsvL1hOU3A4SklXaFFWQkkx?=

=?utf-8?B?M3BxUS9XRHlvb2tJTkc2NjZzbjVoeGhjcHhib3JRaFVwNzljTDQva2I1QXA5?=

=?utf-8?B?VEhlWWtreTdsNVdEOTZSWWsreGQ0dzlVN3ZNYjRoS2ZRMGEwUVl0OTZXVWpW?=

=?utf-8?B?T0NkOWpzNGdVM0tYOUFvU2pXaW00T2RuUkhnU0JmcWFob2ExV0oyMTNEcVNu?=

=?utf-8?B?Q2N0SDQzNThXZ0tDbXlOMEoyU3M4c0RReWxkRzcrNVNEYWYvQVBEZ3NPQTlm?=

=?utf-8?B?azhqQTJSRWZpYnpDT2ZPdDlSWlh0cDVVVGk1OXNheE5hUU1EYnFpc0UwOVNS?=

=?utf-8?B?OFgra2U0VTNxTU5aUXUxczg3ZWRDbVhQeWxRekI4alJRRTZXSmFhTUlTK0ZT?=

=?utf-8?B?YjhkMmt6N2NiY0MzTjJMSythcHFXMlpJS0k3NmZtayt5MmhMYUVpWnVmVy92?=

=?utf-8?B?SkZNUk9MOTRuMk42OUNDdGt6ODM4LzFFS1REcXpubXFRWFE2ckZwRU9lVWFZ?=

=?utf-8?B?Qk5FVHF1TVhiZDhxOWhLeTNZSHUrTXFwUU9DUjRMNWY5R25qbTdVWHM3bVVN?=

=?utf-8?B?bnNWMTY3OW5oL0FFRjFaMGVoNjB0L0V6VUdjd0FiKzJ6eE1PVjFlamphUkpR?=

=?utf-8?B?YlNsVUc1bzJYcEFuNDZ1UU5HSUhPRkVhcENuUkIyNlBSRm1FaWZKQ2U0bVFI?=

=?utf-8?B?dFJaWFdGSVJXZDdKRWlVUUszSDFZdXdNRkZXZXFoY3hKM1kxTFFEcC9BL0Nv?=

=?utf-8?B?NGRCdzN5TmRXTUFJQTl1ZVBXOEE3L0VrSkxrb3VvaXorNXFnMCtFdmQ4dUd2?=

=?utf-8?B?V1hNZ0N0cU53Q1Bla1F5Y2I1cE95Zmd3MjV4NWJnRnFEeDdpS0o4YWhRRCsw?=

=?utf-8?B?d2NrajExSmROZUFkMTRiTHNqYWRGSkNzZ1hkaEgzdWF0R01ZcGtNWXRUWkhP?=

=?utf-8?B?RHZTNjZTYzhTTWI3S3N5SUxLci9vV3pkeFZoVHR6dytyRnNQa1VlZkk3QnMw?=

=?utf-8?B?akdUZGo2ZHFoYkhQTlhkaXZaUkRsNDZpekFIYzg1aWZ0ckpwQ20yTHlZT2tT?=

=?utf-8?B?NUQvS2V6OFNBa1Zqc1loTkI3SHVXL3hYY1VCK3lMV0tyNW4wYWNlVnNGNHJq?=

=?utf-8?B?cXZ3MkpvU2xXM240RFA0Ykx6MG5uRWZBSTQ4aTE0THdzbHAyd0RFeTRBWDJa?=

=?utf-8?B?RElvMDRLdnlTVnpxdXl4U0ZIWllXWnRIQktpbHNTcG9GTmt2dVYrY3FvQjd3?=

=?utf-8?B?cjB2YkNUSjJ0QkVyMitpY1hCNXN2VGFQSGQ0YnE3bDdoSFRTRjBUN2FLc3d0?=

=?utf-8?B?VUU4TTliSUtjZ0UyQTJMdVArV3hNQ2FIMEdtMXpKZW9iYWI3YklKNW0yc3B2?=

=?utf-8?B?OUw2dUVWaEtlV1BBVVgvOFltWnM5dnc4NGhOZFh5b3hlVjRPS2JBVGVqNEI0?=

=?utf-8?B?TlRsUzdWMWtCTmRMYlFBQUg0bXFtTUtYVVBJQjRuMVc5anUrUGYwWGNuTUJm?=

=?utf-8?B?NVhVOUdJWkU1NFZtRVloS1RWYUN0enhUeUZNQmJnUjlBR2Y4UXBCc0g5UUJL?=

=?utf-8?B?UWl5UUdOYWxYRGJvNjZXekJLV1pYQUM1dTBCMW5tTzQ4STl5NWV5QVRiT0pI?=

=?utf-8?B?ZW8xdHF6TldVei9mZ2FFcjduNTV1WlVVRVhSVmxwMWtXTXJUMVp2NkIvNjFL?=

=?utf-8?B?bEROT3FqczZIMEpjTWgwRzg1TlZmcDBsTnppY0pIdXp0eHNBZm53bExoUXd5?=

=?utf-8?B?RXpsSmliOWJkOStUZWhUTm1aVDIzd1NrZHY3TXZQdm1kOFNQSDNTajJkUEtQ?=

=?utf-8?B?Ymc9PQ==?=

X-OriginatorOrg: etfvbypq.iode.sbs

X-MS-Exchange-CrossTenant-Network-Message-Id: 406981a8-d521-4c62-c5c5-08dc37dfb20b

X-MS-Exchange-CrossTenant-AuthSource: SJ2P221MB1276.NAMP221.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Feb 2024 22:01:48.5175

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: d105c4c4-d029-4c45-9d3a-f6dcf1abd65e

X-MS-Exchange-CrossTenant-MailboxType: HOSTED

X-MS-Exchange-CrossTenant-UserPrincipalName: 1Q9vbbpdsl6kxUQ0EetUIhm8vFymWrYmnW0jgmFveqcAZ29jBVFFPb/QhqYEb74IeTUgPH2VHHr5XhtIW21OhqMVGlhUJ9uwFPbCTkX2MAM=

X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH3P221MB1119

X-Spam_score: 11.2

X-Spam_score_int: 112

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Make an Impact, Get a DEWALT 200 Piece Mechanics Tool Set

Today Make an Impact, Get a DEWALT 200 Piece Mechanics Tool Set Today



Content analysis details: (11.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.107.243.138 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.107.243.138 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_SIGNED Message has a ARC signature

1.0 HK_LOTTO_NAME No description available.

0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

-0.0 T_SCC_BODY_TEXT_LINE No description available.

2.7 SCC_BODY_URI_ONLY Very short body with something maybe clickable

0.0 T_REMOTE_IMAGE Message contains an external image

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} Please verify



--_642e65c6-fb11-498f-860c-d409ff26a76a_

Content-Type: text/plain; charset="UTF-8";









--_642e65c6-fb11-498f-860c-d409ff26a76a_

Content-Type: text/html; charset="UTF-8";





Make an Impact, Get a DEWALT 200 Piece Mechanics Tool Set Today


Make an Impact, Get a DEWALT 200 Piece Mechanics Tool Set Today

















--_642e65c6-fb11-498f-860c-d409ff26a76a_--

Investment funds phish from Microsoft outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Feb 2024 20:52:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rfAyc-000000001HZ-1dDT

for dave@doctor.nl2k.ab.ca;

Tue, 27 Feb 2024 20:51:26 -0700

Resent-From: The Doctor

Resent-Date: Tue, 27 Feb 2024 20:51:26 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bl0gcc02hn2204.outbound.protection.outlook.com ([52.100.153.204]:8032 helo=GCC02-BL0-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rf6C3-00000000ICH-2Kfc

for doctor@nl2k.ab.ca;

Tue, 27 Feb 2024 15:45:03 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=jzKEkuK4LLlvTbsg3XWcW5ERt0Zg1lt5VjWIdjZG4zNBzQ8tDuptqb9Vm9BwJ8opsIHP7kBAD+ea9BsZzjmtwQV8u1DZO5ylop6r/QVCPAVqlE1ys6eME8Mx44OIF7vfOL7gSLumH03eowePz7irOshdpRbbiHYYct5FLMs0F9lp7/M7RHtUSZzxnGyKs6QTM4e9+7RpQ6740hx3JambbXYYX/WWk1M2nDVNShGV6aspxg32HXAIDLIBCBE4megde92F5FYHbW7gO2vVSCKlyAJA2F3EoQRU4YkYjorEVFpFYisB7ELVcBNSWDuOzKXhleGo7159D2dexLCyjd7Ckw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=9AteQQUJdjEMydWLnIY87EVUxTMicr5DNNLILhu/Bds=;

b=Y9zYEk6Wkuu8bam/VPT9v5brToHnmweJpctGeC/36YWqwdvXz5SYWB0Te8EIrQJGdkdJAsSFtMVJjm1BtMP55FsWlPmLmXBC1E4VzKgOj2OTY85JDGSK7QDEhs4uYMKdr+1xNgREFhmZLO5rW+Mwz4OZPIa1YeM2cbA1HOpWMB46nSv2pkpswu1wbso3B+mJkpmGcTsd6adduhgU1r1VTZ/uqfrtfFosTzOUsgQ2UiCd2m4nuiIHc8NS3p/XChx22hUX2Zg+YD8i7YpGKuwoIyExIpYTPhUFVL6CFJV0ORFloJNx6w9Icbz+hzE4zhVdr/NsZ3ufGemPwWFb6RIepg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=softfail (sender ip

is 204.235.229.21) smtp.rcpttodomain=hotmail.com smtp.mailfrom=gmail.com;

dmarc=fail (p=none sp=quarantine pct=100) action=none header.from=gmail.com;

dkim=none (message not signed); arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=houstonpolice.onmicrosoft.com; s=selector2-houstonpolice-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=9AteQQUJdjEMydWLnIY87EVUxTMicr5DNNLILhu/Bds=;

b=kWUUikBAOW5+ga58AYIi0O/XyHj/Yi39pvaGGPN6BGwjUAHMg97+ENXrMkPMoUD4AnJoRQ/b5EJiYTTur/DNL8mcq+TIrWonhaJoQYnn2wgUMTMIrgh/UWlVxA/AnF4J3GAbFCYiawb+ha9S8522iHSuDJ4o7V2Q1HpQaohlMFs=

Received: from BL0PR0901CA0008.namprd09.prod.outlook.com

(2603:10b6:208:1c0::18) by DM8PR09MB6455.namprd09.prod.outlook.com

(2603:10b6:5:2ec::23) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7316.33; Tue, 27 Feb

2024 22:42:56 +0000

Received: from DS1PEPF00017E09.namprd09.prod.outlook.com

(2603:10b6:208:1c0:cafe::26) by BL0PR0901CA0008.outlook.office365.com

(2603:10b6:208:1c0::18) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7292.49 via Frontend

Transport; Tue, 27 Feb 2024 22:42:56 +0000

X-MS-Exchange-Authentication-Results: spf=softfail (sender IP is

204.235.229.21) smtp.mailfrom=gmail.com; dkim=none (message not signed)

header.d=none;dmarc=fail action=none header.from=gmail.com;

Received-SPF: SoftFail (protection.outlook.com: domain of transitioning

gmail.com discourages use of 204.235.229.21 as permitted sender)

Received: from mail.houstonpolice.org (204.235.229.21) by

DS1PEPF00017E09.mail.protection.outlook.com (10.167.18.166) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.20.7292.25 via Frontend Transport; Tue, 27 Feb 2024 22:42:56 +0000

Received: from PHSHPDCLSTR000B.HPDWINAD.HPD (10.10.132.103) by

PHSHPDCLSTR000B.HPDWINAD.HPD (10.10.132.103) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.1.2507.35; Tue, 27 Feb 2024 16:42:43 -0600

Received: from User (10.10.132.248) by PHSHPDCLSTR000B.HPDWINAD.HPD

(10.10.132.103) with Microsoft SMTP Server id 15.1.2507.35 via Frontend

Transport; Tue, 27 Feb 2024 16:42:37 -0600

Reply-To:

From: Ivan Glasenberg

To:

Subject: Hello. My Friend. Funds Investment. Reply.

Date: Tue, 27 Feb 2024 14:42:43 -0800

MIME-Version: 1.0

Content-Type: text/html; charset="Windows-1251"

Content-Transfer-Encoding: quoted-printable

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID: <87f3e33b-f2dc-464b-84a2-2e61e8f224a6@PHSHPDCLSTR000B.HPDWINAD.HPD>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DS1PEPF00017E09:EE_|DM8PR09MB6455:EE_

X-MS-Office365-Filtering-Correlation-Id: d3f4206a-b177-4f9c-9e2e-08dc37e57136

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?windows-1251?Q?kubI6x/8ZA/lWigdvPds5zzFwFLk+prSQWiH9QX3dI/Wd0YSA8oUc72l?=

=?windows-1251?Q?Ox/dG2nYrRCNNkmxIttYkXR2F3VXZGiCH3IwpPOo5A29sOer7mV+xD2I?=

=?windows-1251?Q?ACePpnYLbIjbGJzgYCfCaXNEAIxRlw6iPiqtm5pPE7kNprZgfRDjzLVN?=

=?windows-1251?Q?Nt8EqZPkjk2iKZylgJObiKnXgqu87prr+LbR67+Qck1sTRH++Jf5B7Qj?=

=?windows-1251?Q?Kd/jTfpzJhjrJ23clU7IAeObhNQAzlYAoQvY2Q1rikYFSP4fVZ47oZQE?=

=?windows-1251?Q?J9+G+Zc5vLJRt2n+PfYTzmuxiyRv7wHQwZR+giP4IQBBFQtOAyLlDIAZ?=

=?windows-1251?Q?df5dcAem6hfXbv+hn0MKJWOEoxmMgO7oLmcrio91tKQRzXondNQ3P5AB?=

=?windows-1251?Q?ZOqIHTrrcbK5l6/Qsuo4bc1hU3HcTq5xHg7ZJ5iqUJjs5HTp/esXD2g9?=

=?windows-1251?Q?KCOBF5ZlUcP9zBZZkvCdBmF7KuAWKcsLYXN5+qNG6aV2OvFeM0UfLU5t?=

=?windows-1251?Q?EaBpXk2iS7ZIMpIl99zabq7CcQm3mUCMsnlet7D5fmTk8aVQo1IqqhA1?=

=?windows-1251?Q?SHegpajblwZgFNrPFpUTgp4UTSXEB+chFIMJjT8bMti87t+T7AsrLVF9?=

=?windows-1251?Q?66KBD3K2FKi2nrtTi7w+a/LGl8sVpv3nsA09TCx3DYyGb2arAEy6yjK3?=

=?windows-1251?Q?KINqr0KCS8n/UWAu2lEA5d/edFxKTjF+NeRIoEW/raDGFV7nAgsEBWfs?=

=?windows-1251?Q?LvLPbTM1E3W49NIrLkoQ7daBzE2wO5US7FeNEJX5njm6KZ4eUAL5ukRd?=

=?windows-1251?Q?XNjaX2o3CQBrAUveht0BLVtmhaPZxYH3rHICatLAAO0/+7KxEowd0jpX?=

=?windows-1251?Q?fu+0oXQc/pANpsGyNXsvf4EBs4Vq9vBnU1QNXYD4pvfkjR/tytD1yCnG?=

=?windows-1251?Q?oXym71dDUBpjg4uZmyvY3sCrxljAswqN1D5lHmT5miX38fi/yvTDJOH7?=

=?windows-1251?Q?stcuS5oDPkkA+rtv/NW/q3dpJr+tYdVyLOIr/tPK2YO5Mawgwwxi9zxi?=

=?windows-1251?Q?TWnBmon4mfZm5Db5WTjpMNlpuDT8nfwl2L8YoV+YQfjDAlOFmPiUXesT?=

=?windows-1251?Q?noKXJE2TG2So2JS47QbEW1OK2/+cecfb6vi8rmpYLJdod7xvk++Ypunt?=

=?windows-1251?Q?N7lvWBqbHvmGk5kO3UFvdUer4835xlRRnlcQj+zPJLttw/8o+uJiRZm+?=

=?windows-1251?Q?atNG/9FtcV45xuJ4tPvP4EZdgdgbXBq6TC3BOPUgr9CVsM4t9/dRcxn2?=

=?windows-1251?Q?uOVteQ=3D=3D?=

X-Forefront-Antispam-Report:

CIP:204.235.229.21;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail.houstonpolice.org;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230031)(82310400014)(35950700004)(32650700005)(23876011);DIR:OUT;SFP:1501;

X-OriginatorOrg: houstonpolice.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Feb 2024 22:42:56.5429

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: d3f4206a-b177-4f9c-9e2e-08dc37e57136

X-MS-Exchange-CrossTenant-Id: 64c753ca-2ec6-4981-81e7-5c7597f9e7d8

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=64c753ca-2ec6-4981-81e7-5c7597f9e7d8;Ip=[204.235.229.21];Helo=[mail.houstonpolice.org]

X-MS-Exchange-CrossTenant-AuthSource:

DS1PEPF00017E09.namprd09.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM8PR09MB6455

X-Spam_score: 15.6

X-Spam_score_int: 156

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: [Message Came from Outside the Houston Police Department Mail

System] Greetings. I am Ivan Glasenberg, Manager in Charge of Sovereign Wealth

Funds; I propose to arrange a grant of at least USD65 Million to you for

business investment.



Content analysis details: (15.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.100.153.204 listed in list.dnswl.org]

0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is

CUSTOM_MED

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam

0.0 NSL_RCVD_FROM_USER Received from User

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.100.153.204 listed in wl.mailspike.net]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[glasenbergivan21(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[glasenbergivan21(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 XPRIO Has X-Priority header

1.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list

0.0 FILL_THIS_FORM Fill in a form with personal information

2.3 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money

3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases

0.0 MONEY_FORM Lots of money if you fill out a form

0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)

0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)

Subject: {SPAM?} Hello. My Friend. Funds Investment. Reply.








251">






" bottommargin=3D"5">




n style=3D"font-size:8.0pt;color:black">[Message Came from Outside the Hous=

ton Police Department Mail System]





 





Greetings.


 


I am Ivan Glasenberg, Manager in Charge of Sovereign =

Wealth Funds; I propose to arrange a grant of at least USD65 Million to you=

for business investment.


 


Can we partner in Business or can you manage funds US=

D65 Million?



 


Do not hesitate to respond back if you are interested=

to be my future investment manager as I plan to retire from active busines=

s.


 


If you are interested, then respond ONLY via my priva=

te email. Please clearly indicate the following. Considering the volume of =

discretion required for the success of this project, I ask for your reply t=

o my private email: iglasenberg941@gmail.com


 


Therefore I advise you should forward your informatio=

n to me as to enable us to proceed on the transaction immediately.

div>

 


{1} Full Name:


{2} Sex:


{3} Company Name:


{4} Position in the Company:


{5} Business Address:


{6} Years of Business Experience:


{7} Mobile Phone:


{8} Date of Birth:


{9} Country of Origin:


(10) copy of your international passport


 


Thanks for your anticipated cooperation.


Thank you my friend


Yours Sincerely,


Ivan Glasenberg


Reply My e-mail: iglasenberg941@gmail.com
>







Walmart Samsung Phish from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Feb 2024 20:54:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rfB0M-000000002WD-49jo

for dave@doctor.nl2k.ab.ca;

Tue, 27 Feb 2024 20:53:14 -0700

Resent-From: The Doctor

Resent-Date: Tue, 27 Feb 2024 20:53:14 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn7nam10hn2247.outbound.protection.outlook.com ([52.100.155.247]:3361 helo=NAM10-BN7-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rfA1l-000000008sm-0qrW

for root@nk.ca;

Tue, 27 Feb 2024 19:50:42 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=MV6VzMyLXepryhy2FxKldn6RyEagpzhKyW9XAZosoPpK1pw9yaQCaStHOVwTcjxLWHhCrFljzva97FRWl8c6cksHQfYvGN2/3G6N2ZrLFKoC5xEoyHBBXLwzunDYk9FtqU1hfPV/sdElEpvT+uxy2NcxxMXNeMFi/IKTQR/eAgoWrLsOegjAI724zv3ATSsjy4IEMDbs+8+Zu1HhTkZhHTqd7aRsUbwXEnZ7ORMmxvDkVA3PsgKQrcJDZKoLbnBeqbYIhmJvawftqXRDOGz3K0uzOfXmkLUQ5OQ8yS4yrue5nc+2BCvVDhykUr5Nj5D5235v1bTgQIY+N9Uy43n+aQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=bC4Domvb3t4rmBaKUTp4O8NUZURMTBRKmPpWyqrTGKI=;

b=PODi1yl/CVcDQ6O0jbir0YpVTdoNHdreq6I7VvZNe1Ww1zUBU/UyPtpbS+NtJNFjBt6Q6D4oiDyLK7V/cpxA2Qv/7SdjhTIKdGB6Zptrb0ngTqmCgm8TREDIuVSBoTygFtKK/M+cft+najyjybEe96X+yy6NM5V2+BhfQsv62/tqeiJYUgC4biQ/Cn22p68Atj7aoOf6D359d+BhxoowNQA2SMmqwAAkW70BW/6UDTs7OiqgbV1O9NbsowASENj0hhWijDPBXOjfgA/7ijdgvvV6zGgAu+5fBrro67koywbF1knlPu+xdBedR0qNog9Pw0MUNCwsvWiOaQixZXtrXA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=teaioj.qxan.sbs; dmarc=pass action=none

header.from=teaioj.qxan.sbs; dkim=pass header.d=teaioj.qxan.sbs; arc=none

Authentication-Results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=teaioj.qxan.sbs;

From: "Samsung S22"

Subject: Lucky chance to receive a FREE Samsung s22

To: root@nk.ca

Cc: root@outlook.com

Content-Type: multipart/alternative;

boundary="_380e2bf2-d5ce-42e8-b747-e45dbf9d85cd_"

Date: Wed, 28 Feb 2024 02:48:22 +0000

X-ClientProxiedBy: MW4PR04CA0084.namprd04.prod.outlook.com

(2603:10b6:303:6b::29) To SA0PR19MB4491.namprd19.prod.outlook.com

(2603:10b6:806:b6::8)

Message-ID:



X-Message-Flag: Flag for follow up

MIME-Version: 1.0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: SA0PR19MB4491:EE_|PH8PR19MB6595:EE_

X-MS-Office365-Filtering-Correlation-Id: 9ad06bd0-cde5-45ee-e1c5-08dc3807bbc8

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?NEdVZncxd0lOc25rMVRtTkIzQjFGUjZwSUs0c01PNFAvRXYzdDN2K2MyaHg4?=

=?utf-8?B?Skt5QURKQ09nTzZWUG5pK3d6QWZ2Zmo3dFppS0lZSHhrRHVFRS9LOVNKUDlQ?=

=?utf-8?B?OVFkNVJ1TkhCRHorK3FSVWg0dldrWmVtalNKOFNLd2Rqb2twbWZjQzQrU1Fj?=

=?utf-8?B?aWlDamI1SXQxYVdLak84dXFTMWY1TTh1K2V4Qnlad2kvSkZXWUxQNjRXQW96?=

=?utf-8?B?a2tralRQNERWMnQvclJ6NFY4T1VKVUZCZUNUR1JJMEx6TVpHdE9LU0s0U0JP?=

=?utf-8?B?dGI4U0RCVTBEMkg4amk0bUpkcFZUN3M1NE0yM3Q3V1hyOERQaFZpaHQzWUd3?=

=?utf-8?B?TjdMUGo4QitsemxyRHFxNENZMzNVMGYyQXhab2R5ajl2RzdhaXhBZHRoUG8x?=

=?utf-8?B?OThWelA0VUEzZlRRUWxGMndGb1Zra2NVVzQzOEp6Z1BLaGU2MTFXdnpReUww?=

=?utf-8?B?NnpGK2FTR2R3aXZaQUhhLzk2ZUVJUk1MQkNVZlFIU1AvR3NHYnlWT2RQRWZY?=

=?utf-8?B?TE9jYjdxNFQ3aUNUN1doUVQwOE0rR3NFK3R2WmpTU1U3SjRqWThkVDV0Zmd3?=

=?utf-8?B?OG9TRnRaL2R2UVgvakFYME9FSzJNZm1Dem00ellqTnRJQk5wd1dkdlhuM2lB?=

=?utf-8?B?MFg0M2Nud2NFaUIvVjZvVWtZRTdxMmdWZWZvY1Jiblkxcm9IZ0lOTWpNSU0v?=

=?utf-8?B?ZjlJbjdwQTQyYmFOSkRUWjBsaUVFV09ZaXU4TkFHTUxFV1BxYVY5dUJvWndk?=

=?utf-8?B?dXovQm1mSTZCU3BLdlA2NlUza05uZUNSVFE1V1RXVzVvbTg2V1VzbUxtUUp4?=

=?utf-8?B?V3UzTlFxbmZSQzdmZlo5KytUcGVaVTRtWEhTRUtjU0ovUnc3dW5DWHZEV2Rw?=

=?utf-8?B?M0VKbVdFcjFtYUZPK3BoRFpMdzVCZVN5UnAwNkUyWGhYMmozdGVmWnpYWDZS?=

=?utf-8?B?RmFwMzZqc3FDSEpJZFM2WUlqcnRNT1NNOEdtVUlzT2o4UmVSaWhncUxNYzhM?=

=?utf-8?B?QTBET2MvWnVicHBTSWhxVUhTdDQzZ3ZTTXh5UU1LRWpVa0pySHFlZXFNdkFp?=

=?utf-8?B?ZzM0Qk9aYWhuaGFMa0JtOTR4VVQ4SzJlVCtMMVJxaGkzYkp5ZUROWkxHSVZM?=

=?utf-8?B?Z25MY2NTTkowU29MeHdKSHE4cFlzQnQ5UjZJRFIxNjVwUGxZcUdUcGYxOWRB?=

=?utf-8?B?S0lKRFBTYjlVbDhYUkZ5aFZVTG1aRWwvUXRnQk9EN0RucWRiOHE0MmN3c3VU?=

=?utf-8?B?dVpqYXVIcEpiQmtzL3ZDV1VyTWVPbXFmNDhkUVNYemFmYVowcy9xS1pHWEpK?=

=?utf-8?B?MTZZM2lQSnFFUG5nelYwY0wwM1Z2S0dvNXN2d0Y5OWxzb0ZMUzJJN3lpTldE?=

=?utf-8?B?VTJmaVlUOFhqV1ZPWHBkaHlEWnFMK3krWjdLeDFvaTBBT3dVYUV5dEhlNG5J?=

=?utf-8?B?THdSOWQ2SitCdFpaZkVERTB4RDFjSEpMRG41Ni95VngwVER5MGdPTk9LNnFr?=

=?utf-8?B?ZklPQXFza3FVSEJMU2tCV3o4Y3RaWVVTdTVRRGxCdnBXMjJ3ZXcwWHBIRTZj?=

=?utf-8?Q?eSHhLHLbthThqbJlkBzqriiqiOK8ZHLIT+4Bpaz/tbmJXG?=

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:9;SRV:;IPV:NLI;SFV:SPM;H:SA0PR19MB4491.namprd19.prod.outlook.com;PTR:;CAT:OSPM;SFS:(13230031)(37730700002);DIR:OUT;SFP:1501;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?eVBlTFZaTktQRzFydFA4NkdQdjd6SER6K3hGaG8wMkZRWFN5SEt4QjVsRm9P?=

=?utf-8?B?MnJCN2diQlZCbHJpM0RoM3doTVhkK01vS29wMmd2NmtQUERGQWRtT1J0KzJX?=

=?utf-8?B?c1NlZlpZaU1DZFQ2TXIzVjhyeWp2WXM4aE9IWlFheXlDWlV5R3U0Q29CY2xX?=

=?utf-8?B?UnBUVlNsMnp6Yk9GR3dNajhyZ2lLYUpacnN0ZzFScWx1c3EvWjJoR213RWVk?=

=?utf-8?B?NXdnMmMvMm9EQVZWTVdmTTdSd0VZVml3UEltUEh1bXc3VHFRcE55UHZIMXFr?=

=?utf-8?B?R21GbjNuaW9FaUpFZVNsNTVaOXNqSlBvZk16bFpKR3BJeGUrcXBZU2dETEJk?=

=?utf-8?B?OTBMWXJxMkZpeFkwcU1hYmN6UnRiNVBlZXB0THY2S2Rpekd4RHBseGkzU1gw?=

=?utf-8?B?OTZRQ29JTndSV3NYWkF5eThSSlltOGxjalhJZXFQWHZRWk01WUt1eGVPcURS?=

=?utf-8?B?dGRid2hpaDEzc0pKMGxpVE1YaUJqUmh6ekk4ajJ3MFd3ZGFzbmdFZTR0ZTY2?=

=?utf-8?B?THdmczJaUndMMmIxSkNDV1lzSnVZaWpTZ2Rzc3k0dWh5UFZFQnA1cWhkV3VS?=

=?utf-8?B?azdNZjIrcUpZck9zYkVoUHFEOVBLNEhiWm13YWJ5WkhqOGl4UVViczF5SnI0?=

=?utf-8?B?VU9NQ3E5dlpHQVVacmM0a3hFUVl3VWc5Tmt2MDczbmF5WTZORElmUlM2Y081?=

=?utf-8?B?b0YzM1pxQjR2SG1yaHdkWkxXNS9pT3BqRlBjakdSelQrN1NEWDN3Tkc2SWxq?=

=?utf-8?B?ZHpmQXB5QnhKdGRYTGJYTjdCTEtoTzF1Qk5CK2l3bGNRdzFNWTR1OUlUWlhq?=

=?utf-8?B?RUh1eFU0SWJ2Z0J6c2NLTGd3KzdZUHVCRkQ2ZldmdU4xejJ5VFVsYVJLeENQ?=

=?utf-8?B?dU4raWVLVjlmK2xDK3NJd1dqR3o2RzU2R3g2TWJTYzgrdTVyR2VRbHFIN3Vv?=

=?utf-8?B?UkFxWHBIaTJmV3RJWWs0ZXNxeEJOWDhuTEIzRld3VGNKeEY5Z0c1VEcvcVFE?=

=?utf-8?B?aWhZNnN2NWx6TTJnbUFuOG1zeDVVeW5qN0F2aFlLQytTR3Exdk0wSFBVQ2Rq?=

=?utf-8?B?MFh5dElHczJOUHYzUWtyQXBrY3JpeWtqZmRHS3lzYnZ5amRqTzQ5WWlkdDl4?=

=?utf-8?B?SGFWT0paZWExRitZV2xja2ZSc2dBeVZpY1RZb1JVUk0xMEtpMjRlOEtzN3g5?=

=?utf-8?B?RzI3TmVWeU1vKzE4QUMvcklSL3UyeVNJdWpjcnFGbGVYODVTZWovamJUeXJp?=

=?utf-8?B?ci9XMjUvUUNvRnZXa3FqSjl2UUNxZGxkNEpoLzVidnlRWDkySElWd0NzOHpU?=

=?utf-8?B?TFlPSGwwV1RlSG5idFhEblE0RFFpRWUyb0l4SllPR2dQMGhEUzhrRHdIcHZp?=

=?utf-8?B?dU5TNkpYeHVtcnEydWpwZXBIT3pmeHlwajlLR0M1MXlUWHpnY1ZnS21BeFFX?=

=?utf-8?B?NDUvd21LYityem1JTFJrQ2t6dWRISERndGJTRTlWSytsSlAyUGFMTWRmUjdB?=

=?utf-8?B?bnlHd2dSSVFHNEJ2QTBJaFZ1WUMrZEdxaXFKWjFNbUkyMGhpbERxZEdoUFVR?=

=?utf-8?B?dkhFSXVyRWw0VXVmaDV3OVppdGtKYjlSRXU2Vmp4NFVwMWoyY1FFdWtsQkFw?=

=?utf-8?B?UG8vQTV3RHlqQmJWN1NjMWhQQkc5YnRNUlBZdkJncVhKNTJMT3RRcWR2MXdM?=

=?utf-8?B?ZFlzTFF5S1N0SEJPaXNYQkdWcmRPT0hNaUlPZnhBMDNtT0hrd3IzVW0ybTlG?=

=?utf-8?B?OFVKM1JJeG5IdVlrVW9UVmJsTllEZXVORk9YMVV3K21BNzBNYjYzQWZOd3cv?=

=?utf-8?B?SDhOQ2UzY3BKWnplbExaelhIUktUZmN5UDdzUm9KenpOalpVQ0xpa1d2eUE1?=

=?utf-8?B?V2NHWXVqQncxVGpNSkNHOFRQU2FjcnBSa291blFEMGpzZXdpb043K0I3TkVo?=

=?utf-8?B?OFdjTnViSkRpOUZEVFI4OUdJWTZNOHdPazZiUWpHUWJtSkxsdnMxS3RVeUhw?=

=?utf-8?B?bVB2V01NMklybnhURU11cDFrRTNSN2h1bVFmNUJYUlN6V29zZ1lUTUpmUi9H?=

=?utf-8?B?czhBWC83OFh2WlRhTXUzcjFHckF6NHoxMkwvaG9uMTVjOFJ0UHZueHdXUHpa?=

=?utf-8?B?TkN5UHFrSmdDUzB2c2hvdnZHY2lkNENWNVBXTVpwK090VU9TTWxlUmRvYXIz?=

=?utf-8?B?T2c9PQ==?=

X-OriginatorOrg: teaioj.qxan.sbs

X-MS-Exchange-CrossTenant-Network-Message-Id: 9ad06bd0-cde5-45ee-e1c5-08dc3807bbc8

X-MS-Exchange-CrossTenant-AuthSource: SA0PR19MB4491.namprd19.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Feb 2024 02:48:24.7414

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: ccad54f1-2d89-48a4-ae39-652ebdb8a017

X-MS-Exchange-CrossTenant-MailboxType: HOSTED

X-MS-Exchange-CrossTenant-UserPrincipalName: DQH9gwJtu8RmC77QEe3OL1bpvVX1HEnIFIrTLHPCFweJWx2cJy9Ym8fcONa4ImnsrBvd2a84LbtKv+K4VQeGyAMSDpEf/XedwF7+ZQjUI6s=

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH8PR19MB6595

X-Spam_score: 13.2

X-Spam_score_int: 132

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Welcome [Samsung s22 customer, Exclusive Rewards For you

Your Name Came Up For a Samsung s22 customer Survey



Content analysis details: (13.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: ggfhdfhfghdfg45ghdgf.page.link]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.100.155.247 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.100.155.247 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

1.0 HK_RANDOM_FROM From username looks random

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

-0.0 T_SCC_BODY_TEXT_LINE No description available.

2.7 SCC_BODY_URI_ONLY Very short body with something maybe clickable

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} Lucky chance to receive a FREE Samsung s22



--_380e2bf2-d5ce-42e8-b747-e45dbf9d85cd_

Content-Type: text/plain; charset="UTF-8";









--_380e2bf2-d5ce-42e8-b747-e45dbf9d85cd_

Content-Type: text/html; charset="UTF-8";





Welcome [Samsung s22 customer, Exclusive Rewards For you


Your Name Came Up For a Samsung s22 customer Survey

















--_380e2bf2-d5ce-42e8-b747-e45dbf9d85cd_--

Canadian Tire Dewalt Phishing Contest from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Feb 2024 22:38:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rfCdN-000000007Vh-3sKl

for dave@doctor.nl2k.ab.ca;

Tue, 27 Feb 2024 22:37:37 -0700

Resent-From: The Doctor

Resent-Date: Tue, 27 Feb 2024 22:37:37 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn8nam12hn2218.outbound.protection.outlook.com ([52.100.165.218]:38928 helo=NAM12-BN8-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rfC0W-00000000Jo1-428y

for root@nk.ca;

Tue, 27 Feb 2024 21:57:32 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=QVThtycCy7+UsHCh6TYl/g+R1g5lAX4BbFN3hvrn1MrlGI+SYOSYcgg/oEb5hOEcXDIjtrhQKUn5jz8iwIQm46j34mwJDYC74UEF6lqXuk/c4fKO43Ry03Ya6BJoX4J2lyPvHCBBi8Mn86l78aAeNrIryQ4wEG1ioPTzObZDyQke9IR7NDTRKNkx4gnxLR+VH1cnH0WaoahxEwTnS4MOQKrDttI+X/LOvz2AWepKFBSzuDD0I25YjiPIeLVpCymovuSAxUeqn7LD/gvNHTzgsehBfisev19IH8fi7FpCt27An4DkS6YWYuLjDilpbIu0Bt7XQgGL2x7uODC6GQF5Aw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=ukNoTOvg5arcVpzF7RI2JwteUxVRHA71NUgRmZ70qYg=;

b=nruRCBK0rjui5N2Lg7hANB6c6EQz1tfmYynx34zBJNmnCq/qpDA5lT4w8Vuq+FLfcWww9vqtuavNQk7Fm7oSBAasuYU5k6AqipwedpmYxpXfXqyk85xvdKwfB8aN1YsdBy69QxKR7ZJQuk8aQGPGtiGKcZ8zpWCmu+eiQcAiIPbF2bw44U5HYa1jF9IAKXgc9tfcoMnv8VctnyU7e/o4Yerud8O7xi7yHoM+EK4PctsR9YVrJAbKuaLFrk36uv4bee/rov69hw6nvc02tGN4VWfL/zbhDvUJol3ev4hNLNNvwslz+hdzlJMHcKZKzZiEfvSK0iHxrfPVAPU9dxLN0g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=ydlpolq.pokl.sbs; dmarc=pass action=none

header.from=ydlpolq.pokl.sbs; dkim=pass header.d=ydlpolq.pokl.sbs; arc=none

Authentication-Results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=ydlpolq.pokl.sbs;

From: "Todays Winner!"

Subject: Please verify

To: root@nk.ca

Cc: root@outlook.com

Content-Type: multipart/alternative;

boundary="_d58efc02-0739-4689-a14f-193728d7249e_"

Date: Wed, 28 Feb 2024 04:50:23 +0000

X-ClientProxiedBy: YT2PR01CA0009.CANPRD01.PROD.OUTLOOK.COM

(2603:10b6:b01:38::14) To SA1P220MB1240.NAMP220.PROD.OUTLOOK.COM

(2603:10b6:806:3c8::17)

Message-ID:



X-Message-Flag: Flag for follow up

MIME-Version: 1.0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: SA1P220MB1240:EE_|BL1P220MB0852:EE_

X-MS-Office365-Filtering-Correlation-Id: de438a50-4c8d-4fa9-ad67-08dc38197ad6

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?NThJSXJha2R0azc2dThDYVhwVzJ2MHZYSlA2a2N2dEFQVXp4OXdFOWlrVjZj?=

=?utf-8?B?TmdjN1BOSXMzeXZpZGIwRVZxYzBKWkNwWEdBZkg1VXlPS2YyZ1JiM2ovdzhm?=

=?utf-8?B?Z3JXRXhnOXNrUXE4Q3F1TGtkUjRtWHJLQW5rUzBTOGp3VmZsYmdYQ1JBQ1VK?=

=?utf-8?B?S2UwMHdlcnI3Q28wUHh3a3FhRlhmVTlSWEhlKzJUU2lNblFpVW1pQjZoS3dG?=

=?utf-8?B?NmVCNFl3TldvRVhTM0dFUXQ2cFpHZ2ttaDAvd0h5N3hwcThhUXoxTGhxVHox?=

=?utf-8?B?V09seTZSSDIwOXhhRk9TamNDdjFuaDdsaFRReWVzbHdYd1NLMkdqUEF0Z1dP?=

=?utf-8?B?OFBzRmFyaUQyd3RzSmtVVHQ3bjZId1pRVnRVSk13SkRrdEU4NzM1YXpNaVhz?=

=?utf-8?B?ZW1kL0tqNXBpbDVOdTA5MDVkZGNvcXlkYWpsQm1BYlZxVnhUUzJPQlNTemFu?=

=?utf-8?B?dUZmM3FEME0xUWtaUnh1d0o3cVJPOFJXZmdpRzg0THVNczlwOU0wVWF0YXVy?=

=?utf-8?B?cEIrK2JvR1hwTEQ2dnRDK2pSYmYzZW5lRzBTdGNYSmdHMS95SGlEVGRZU0VQ?=

=?utf-8?B?dkMvSElUMzV2ODNQdFlHNFRCZFBRT1ljSHFKdVk5cE1BUDNFclo1SDJSRnRD?=

=?utf-8?B?SDE4RCtLaG1OckNKcS9vdmFDT1ZOVGtMNXJDNkpQNXVVRnNNbFJueXhwUFE4?=

=?utf-8?B?Z2s2bTE3M2tiemh2SktTOUh5b2RUVVBqMEsxOXJhV2o3MnZpckxqdTlsbHly?=

=?utf-8?B?M29qdlN4eUdWMmtpc1pmYk1QSEpaNVIrbmpRWlcwNFc2VldGdVpzL1U3SlpH?=

=?utf-8?B?Qk1XUGtKeXBsZlFWbWVuWjlOQUdpV1BFbFlGTWdLMTArL3AxZ2xoMjRKREMx?=

=?utf-8?B?L3hZZjZUZVhHSU16Q3BNSFV5Y2U3UG9LNjlwbXA3dXhUMDMweE92eDM1VWZP?=

=?utf-8?B?YWFrSUdSVEJjd2I0SmhvTHFVcEdXMVVtVWRaRmU0K0gyOHhUQ3RBU2JOV29i?=

=?utf-8?B?OVJmU1lTTlpQdUNHQ2U2dno3MXNnUVJqeDJzcWp6QkFJUG83SWJXTi9zR1cv?=

=?utf-8?B?RUtGdkxkbUpXU1FMUDN5a1ZhaU1uS1pKeE9UYUFVaW5YV1R2U2tTQk9NZGk4?=

=?utf-8?B?M21sUXNkQWg5V01ZWXBvTFFsTUNETWlQL25TZjlINDNSTmFyUm9qeWp3ZXQz?=

=?utf-8?B?clAwSFFrOElLQzBKSEZuZUNEUHVjMzN1Zkk0T0xHdW03UkVvU2NXNG84UWJl?=

=?utf-8?B?N0lUVmNrWVk1SElDVE44U0hQV2xYY1hXNGVOOUJvR01FQS96M3Y4S1dyeENn?=

=?utf-8?B?b1NiYktvVk4vSUd0UTYzeFNENkNnYWFaRWZOeVZiZ0xVNFFKVXVvUkNLcnJO?=

=?utf-8?B?enZoT3ladG1hbWpuKzdhNUlTWkVEVkt4aUZWcUdpUUZZaFoyODBvU0RwanRN?=

=?utf-8?B?VWpzQWNoU1dnS0g4RTBKcWdyVzFuaDVzVVpDenNpZjBOdXFReVZuZ0lCWHFa?=

=?utf-8?B?VHdoWDh4aXBsYlhLL21acDVxdVo2MHkyeVNiOXdEbjdNUlhDSXVUak1XNUR6?=

=?utf-8?B?Wm9DbEJEcERBS2lMNHhVMnpmY0ppc0NJcFI1b3BCTG04LzZ5d1duOXZ1MkdS?=

=?utf-8?B?VHFaQmZ6TEhhbGFVK3ppY0NNeXduYzI0YXZ5MkZWV0txUzBjd0I3R2tXM2lm?=

=?utf-8?B?akl0enF3eU0yeEdZRDk2Z2VyS0RpSEpaNmlwSU50RVh1RGRBeGwzVys0UGJP?=

=?utf-8?B?N25SSndQUGRra05tSTdRNXFmY0NJM1FVMGlTa1VoK2hCM21PRXVqM0xDVlBE?=

=?utf-8?Q?0pOdNrcCBFrPZ9v+9W/tyAvnRb3Vita3QDDIo=3D?=

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:9;SRV:;IPV:NLI;SFV:SPM;H:SA1P220MB1240.NAMP220.PROD.OUTLOOK.COM;PTR:;CAT:OSPM;SFS:(13230031)(37730700002);DIR:OUT;SFP:1501;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?RmhwMFh1YTJOdGpPYjNaZSt6UndRQndBR3Jlck1sMUJTOFc0N1FJTEkybXZT?=

=?utf-8?B?RmRFZWlBZDk5eHdrU05iL1NKVERjVjBsUlV4eFFvVC8vOGF1aG9pREJYdkgw?=

=?utf-8?B?TnB5MHhPb21LZzJUV3pJUHhjQWI2VnUzZ0JzbmNSUjhicW9hNU5QY2NtU014?=

=?utf-8?B?WU1RQk1GcitGd2JhOVRkZUFmclp2MElmM0NOZVFzZmc0MXlJVjJoMHBXU01m?=

=?utf-8?B?a2l4ZlJza2NxQmMwQVlYSWc5TEhuN3ppN01mYTN1VkowNGx4WEpwamNOSU5u?=

=?utf-8?B?Y2pQNXhjT0EzalB5dGpCQ1JwdDBNS2NoYnVFS1ViUkRiSDhnZW5UZjJ0K2tm?=

=?utf-8?B?TDhiSXRNcllyNUJPZUdMbjZyaCtwZFc5SWJ1OTRYT2xhbzFjZ3UyVTZmbitN?=

=?utf-8?B?enhGWDJsVUtHNmo0VmpSZ0NPek80NkhpcjR6R2hvd2dqOS94WG44NnY0Z0xq?=

=?utf-8?B?V3FGY3FiOXFzM3JOQUdoZUFpZDV5b2lxN2lyTEcvZVRrYXFobkplNS9Cc3hD?=

=?utf-8?B?Y0RjdjFBazl1biswR2FTZElsdVY2NzlJTkg2VmRSS295WWw0ck80U3Q3SXhC?=

=?utf-8?B?emcrZjlUdjJ4WjZ4Q3QxTUM5LzEyUkFYZjk4R2NBQk1vNUxUdUgvKzUxY3k2?=

=?utf-8?B?L3FjVEhYR0tqZWMrVnRsVUljeU5zS3k2RTR5QUZtYWY1ZkpJZkh4anVoOWJV?=

=?utf-8?B?YmNmMjVNR2p2Y1d1VXBqT1dvdmFWZVVQUTZncEZUR1crZENXMGdDMk9xbEFG?=

=?utf-8?B?elltemN3emx6TnIvZnhrRkJmcWllZGtKMU5EZEVBQS9DN0F2V3pmRjgyWlEx?=

=?utf-8?B?enA0YTVjTllLU1lSTis1RFdZbytRd1hjOTBCclhTVUVhZzR2NzFrNk9VMVAz?=

=?utf-8?B?UStxVFhJeHlRYzhqak8xQVYxSm5mNzdUSzhlUlhZVHBpT3dCMDl6WEFOai9o?=

=?utf-8?B?M2NyUGRFYmdYdFVTSURkRndrNytvelVQR2ZONllvSExObkNwbWVRY1hJaC9U?=

=?utf-8?B?UUtHeWxMQzllL3llcE1tRjJVWmNIZmNCTnB3N3VKRGtWUDljRzJ0SGh3aW4y?=

=?utf-8?B?aG85TkdSTkR1MXNjNFBIUS81WGd5VU5MSkFwQ2R3bXdTWXR6RVlRbG5WZCty?=

=?utf-8?B?czNZTkF2RkdHSEo0QWJQMWswTWRUbU9CNVBEYWQrZitUcmcwaWdMMENvQkUz?=

=?utf-8?B?NWJPcG4yazVINUFNZkJ2ZytXcTAzSC8yQTF2cU9XQWxjdVRTTnhtZ3hoVDlm?=

=?utf-8?B?dkVqK0U0L0tQK09oY1JRV0lWTWdCeFlMM0NWdTc1eGpYcGthNzAybW1CeEJ6?=

=?utf-8?B?RGpUMjZZbFpzdUowaDBMZ0RCVnhqS0ZZd2t2U3dLS1ltWjc4TDJIcWpxdVRu?=

=?utf-8?B?aDd0aldvendUYWJqK2w2NGYxblFxQTk5Wng1U25WYXlmKzNEbUpaaFR5NkdZ?=

=?utf-8?B?dTFhWm03YjZlR01wVnlDenVpb25ESkozb1NTY1RCNEU3NVMvWUJjR1B4cmZ3?=

=?utf-8?B?dlNYQjNvZ2o3MzUwUGRlNFFVQ3BiQS9qeUFxbWMxQzVCeFp4WnBMdzFyUmdQ?=

=?utf-8?B?VUhsT1NpMUZwcjlEVTdLQ0ZvbjBKZ1Z2dCs3MXpsKzY4R3o5cWFHUGV5VXg4?=

=?utf-8?B?aGUwOXFoYmdQcTNhZmdSZWFsQ0Q4OU1OL1I2djRIYjFCbUZGM0VhMkFXaGFR?=

=?utf-8?B?SHBtT1VWcTA0Tlc3OEJkdkVqdDFSci9oY1B3UWZrUHNYaUFtL2R0MjZ0N1FH?=

=?utf-8?B?STF0SlIyUzlYL0djTm8vUjBmMGYxVkIwWVhoYlRwam1CUmZSKzJpRnJIVjFH?=

=?utf-8?B?VjZmN0FGNEFaNXBlWER1S2tkSzBPM2xTbE43ZEl0WFA0U3ZJNGEzQi9Mb1B1?=

=?utf-8?B?QVZVZTNUSTRXS3hXSVVNcllyNzBrSk14dTByZnBiWUY2WkRONDA0MWgrNHVS?=

=?utf-8?B?Nm5KNWtYYk9Gb1d4MnBFV2pwV1pmL0xWTUo0RHdUcGxub3pJa3pIRSt2Tzlz?=

=?utf-8?B?K3lLRVZCbHQvQmFQZWM5dkFESm44TG5nbkozMzN2RHBXUkpKamJWem1XMW5s?=

=?utf-8?B?QlZ6dWZoTS9seEVzMlhOZ0JENS9qcDB5dWgrL1B4TmJyU2lCY3dOckk5eDJh?=

=?utf-8?B?VWVqUnRRZHhjcGpGWENYbndnSjMrNHl1aHJDa0padjUrVWluOElVeTVnQmda?=

=?utf-8?B?MFE9PQ==?=

X-OriginatorOrg: ydlpolq.pokl.sbs

X-MS-Exchange-CrossTenant-Network-Message-Id: de438a50-4c8d-4fa9-ad67-08dc38197ad6

X-MS-Exchange-CrossTenant-AuthSource: SA1P220MB1240.NAMP220.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Feb 2024 04:55:26.6402

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: f476fd8b-85fe-48a7-bdab-a8d9c3125079

X-MS-Exchange-CrossTenant-MailboxType: HOSTED

X-MS-Exchange-CrossTenant-UserPrincipalName: SGWGsSvjBuyCkuNeLF5m/jR10JllSB9+EUxIbvWD6/7nR0/swajRuruXT9hXtD3JEPGjN3Sw7PKcJ+42G+xFVQmesWLA1RFiOiHBhoWauFk=

X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL1P220MB0852

X-Spam_score: 13.1

X-Spam_score_int: 131

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Make an Impact, Get a DEWALT 200 Piece Mechanics Tool Set

Today Make an Impact, Get a DEWALT 200 Piece Mechanics Tool Set Today



Content analysis details: (13.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.100.165.218 listed in list.dnswl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: abdelali5hju4gt54g.page.link]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.100.165.218 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

1.0 HK_LOTTO_NAME No description available.

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

2.7 SCC_BODY_URI_ONLY Very short body with something maybe clickable

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} Please verify



--_d58efc02-0739-4689-a14f-193728d7249e_

Content-Type: text/plain; charset="UTF-8";









--_d58efc02-0739-4689-a14f-193728d7249e_

Content-Type: text/html; charset="UTF-8";





Make an Impact, Get a DEWALT 200 Piece Mechanics Tool Set Today


Make an Impact, Get a DEWALT 200 Piece Mechanics Tool Set Today

















--_d58efc02-0739-4689-a14f-193728d7249e_--

Nigerian spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 28 Feb 2024 07:31:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rfKwr-000000000zN-3DKq

for dave@doctor.nl2k.ab.ca;

Wed, 28 Feb 2024 07:30:17 -0700

Resent-From: The Doctor

Resent-Date: Wed, 28 Feb 2024 07:30:17 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f45.google.com ([209.85.160.45]:51619)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rfGZ9-00000000OX2-2AMZ

for doctor@doctor.nl2k.ab.ca;

Wed, 28 Feb 2024 02:49:40 -0700

Received: by mail-oa1-f45.google.com with SMTP id 586e51a60fabf-21433afcc53so2781875fac.3

for ; Wed, 28 Feb 2024 01:47:35 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1709113650; x=1709718450; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=zOua8FOlUzGw6N9IIAo8hxNQGqeesl+LZz9J1bkoeSc=;

b=gKMzqZAfI5e9z5g6nbzZpGznbeO4o8j2QXCgetwvQNXU3pfr+Lds+EzdpXKD6yxS/U

/ErbcNv43QqH/FlGIeU/p/U9dN0jakEPYyj9gcAeznHj/lleTZ5W86k+0fG/jkpRUbAv

Jb+FpLFkazrAwsZUwzP5BZweJKDvhunD1JjCYS9WihuBCTLqN1Mpsht3vgjE5//5fDrE

4VosNyWd+yfaeM5je0lm1dchiJ1wrpeulDAIoyZpxk/gSoXIs5xmYZ+PVUhiJRFDPksm

ohwSSisWP2/lkADb9NJDAauiuB4gI/sqO/LHLEfBCsi/rLtvLAB4NBBVsjEU+DiAk6TP

n3Dw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1709113650; x=1709718450;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=zOua8FOlUzGw6N9IIAo8hxNQGqeesl+LZz9J1bkoeSc=;

b=Tud/h5KqvEmbVM9kR9xn27b4C8W4pPqdueVm7PLeY5N1S38ZfKOXoIRuYW+kjVYhdL

TCeD9uEf8zA7cnEsLWypTPWi9jcTJD1c/UGYs9yxk46J1wYY5OsZYJERQJG3cePUSndh

aPCwJwdV2xqBn42hnGvRRSBKvzNQKkVAgiolLn0llQtKckZOAhLm9xNUBAnTyCfMcZg7

LD6sBa2ejSAigIF1aNEjuy8u0W+d48eJLfvr9NYP455dYz2w225xoVkKGNCSuhZk6RPK

iZCBCT4+5sjea9/xplEM1gVHsqDAkP4h/wZzGPL7bnzv7VRegSPY8/5GLQbXOf1TtuZz

tP7g==

X-Forwarded-Encrypted: i=1; AJvYcCXmehPTIBBCjkOBlm0T2JT1bRkD3HN356qRPUWGtaxgn/fb4VcqKVwADKype9E/iIacWRqErvRHPUHJoTZy0ZEaujTtOkCE+Z8=

X-Gm-Message-State: AOJu0YzX5CI30NFxrXGZvvRdnBPnJL+bZtMAojvGh/4e26sqxruarpeT

vHbKYN6R4cpTY+EVqxj1wZiNtLFnVEKO8rGxiOpzqztaC5dlpeqTgG9SdAvnqqVO30johzyU1qO

gkvEcdKTc+Usnp3P1BstI9/VMp3zS1UtYFaVt0Q==

X-Google-Smtp-Source: AGHT+IFS5IVn8TnvqHf4H1BQdEwBqM9muMCHbsgZk5WNBkMIVgB/51PON5dPliRyZcS0V0tuP5NktTBZPFqY/OWT5CQ=

X-Received: by 2002:a05:6102:809:b0:470:432c:282e with SMTP id

g9-20020a056102080900b00470432c282emr8986209vsb.18.1709103026560; Tue, 27 Feb

2024 22:50:26 -0800 (PST)

MIME-Version: 1.0

From: "Mrs Yu. Ging Yunnan"

Date: Wed, 28 Feb 2024 06:50:13 +0000

Message-ID:

Subject: hello dear

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000c8711106126b8e16"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 10.6

X-Spam_score_int: 106

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: hello dear I am Mrs Yu. Ging Yunnan, and i have Covid-19 and

the doctor said I will not survive it because all vaccines has been given

to me but to no avian, am a China woman but I base here in France because

am married here and I have no child for my late husband and now am a widow.





Content analysis details: (10.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[samirakonfe2001(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[samirakonfe2001(at)gmail.com]

2.5 MILLION_USD BODY: Talks about millions of dollars

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.45 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.45 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.5 HK_NAME_FM_MR_MRS No description available.

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} hello dear



--000000000000c8711106126b8e16

Content-Type: text/plain; charset="UTF-8"



hello dear



I am Mrs Yu. Ging Yunnan, and i have Covid-19 and the doctor said I will

not survive it because all vaccines has been given to me but to no avian,

am a China







woman but I base here in France because am married here and I have no child

for my late husband and now am a widow.







My reason of communicating you is that i have $23 .3 million USD which was

deposited in BNP Paribas Bank here in France by my late husband which am

the next of







kin to and I want you to stand as the beneficiary for the claim now that am

about to end my race according to my doctor.







I will want you to use the fund to build an orphanage home in my name there

in your country, please kindly reply to this message urgently if willing to

handle this project.







God bless you and i wait your swift response asap.







Yours fairly friend,







Mrs Yu. Ging Yunnan.



--000000000000c8711106126b8e16

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable
















































ize:11pt;font-family:"Calibri","sans-serif"">hello dear=






ize:11pt;font-family:"Calibri","sans-serif"">I am Mrs Y=

u. Ging=C2=A0 =C2=A0Yunnan, and i have Covid-19 a=

nd the doctor

said I will not survive it because all vaccines has been given to me but to=

no

avian, am a China






ize:11pt;font-family:"Calibri","sans-serif"">=C2=

=A0






ize:11pt;font-family:"Calibri","sans-serif"">woman but =

I base here in France because am married here and

I have no child for my late husband and now am a widow.






ize:11pt;font-family:"Calibri","sans-serif"">=C2=

=A0






ize:11pt;font-family:"Calibri","sans-serif"">My reason =

of communicating you is that i have $23 .3 million

USD which was deposited in BNP Paribas Bank here in France by my late husba=

nd

which am the next of






ize:11pt;font-family:"Calibri","sans-serif"">=C2=

=A0






ize:11pt;font-family:"Calibri","sans-serif"">kin to and=

I want you to stand as the beneficiary for the

claim now that am about to end my race according to my doctor.=






ize:11pt;font-family:"Calibri","sans-serif"">=C2=

=A0






ize:11pt;font-family:"Calibri","sans-serif"">I will wan=

t you to use the fund to build an orphanage home

in my name there in your country, please kindly reply to this message urgen=

tly

if willing to handle this project.






ize:11pt;font-family:"Calibri","sans-serif"">=C2=

=A0






ize:11pt;font-family:"Calibri","sans-serif"">God bless =

you and i wait your swift response asap.






ize:11pt;font-family:"Calibri","sans-serif"">=C2=

=A0






ize:11pt;font-family:"Calibri","sans-serif"">Yours fair=

ly friend,






ize:11pt;font-family:"Calibri","sans-serif"">=C2=

=A0






ize:11pt;font-family:"Calibri","sans-serif"">Mrs Yu. Gi=

ng Yunnan.





















--000000000000c8711106126b8e16--

Nigerian spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 28 Feb 2024 07:31:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rfKxU-000000001A8-1P8G

for dave@doctor.nl2k.ab.ca;

Wed, 28 Feb 2024 07:30:56 -0700

Resent-From: The Doctor

Resent-Date: Wed, 28 Feb 2024 07:30:56 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f52.google.com ([209.85.167.52]:52293)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rfHKA-00000000DzU-1gyN

for doctor@doctor.nl2k.ab.ca;

Wed, 28 Feb 2024 03:38:09 -0700

Received: by mail-lf1-f52.google.com with SMTP id 2adb3069b0e04-512d19e2cb8so7684874e87.0

for ; Wed, 28 Feb 2024 02:36:11 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1709116565; x=1709721365; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=why7A0OBNRUH/W+n+q2V3CWOI1jgi8RqqMdTJ+TLIlY=;

b=Po0CyA0EYuNyDdsri42wbumznJTY1TInLOLz6vbtyxdfAiOf2c3jSydzX/J+CPH32Q

taHfE+tnxyNHy8owpP99ziCLBmmyt/mh+Fhr5mT4Ihd7KT5mTY798XY7ThbsBks/wXLl

m+k9xJO4F/VtxNwIiKNLhOXJ+vWhee0gBay1WfjHpp/b8dNuLN+RgLcYSJsEDQWoOal+

mdEGprLJ9tEfC/LE1OxQLByKTytbLJC6CySJXQeX1E4lFNgRm40EuWZzCP/181X6BZLb

Xz3++PcJ8ZoozbgH89zlJpFocW8CqtFQ/IIp93gWFk6NV3q4KUKUKSDyRtsNyTQA3vcJ

X18Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1709116565; x=1709721365;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=why7A0OBNRUH/W+n+q2V3CWOI1jgi8RqqMdTJ+TLIlY=;

b=HvDfCwll/v3uQqM4U+roG0itbbbJRCggIGUmOU85KwKT4UUMy16wG1Eb/yY/iGAq+b

ms8fi/XVA/y1ihCIFo6ATjp9aY/RFSnKFaQfRexWeuUvT+m8eKJWyYVhqUSjyZIhrQJo

RpzE1NDxQwF5XOk2ikheTYJ5wei+Fdk6F7KAkJgEWK9ZqLm4aUx0iexUzwnxSY34CaMg

jm5hp9TLYLzReiuwV7yLXSbA8hqH56XCf2+ZFAFJcxNqtEJC1I+w+p8UJorwD7gjECtc

zLdDhFd2bkxHH0guYZTv8kVWlOwxjBv9Nfzjl1758IEP5yw0N9lJYD5O6x6/lxY/1KZB

8+kQ==

X-Forwarded-Encrypted: i=1; AJvYcCVWeUYCo520qYk1NQ03s03BHXTJiSHBRX/McF1Em9rKycAg9YKPcqowXUAxflvwk2qsz81tN84TG+N8zFckoPpcbTxkS8qyMzs=

X-Gm-Message-State: AOJu0YzS0L1mpvZAUiQrVbuhe/PyqyLyyNVbKDfjH6Xc/EKLO8Et7VAc

aemmKmx0gFoNqhtqD1Yc3T3FWoap8Yo/w6HOFmsmvDQQAIzBcnLk7TzM/bipoyDsimGX/qiYPpD

tss2w+Z3buKPF8eBFXhMfnrYYTW3uhrUq3Gn0Tkqidxs=

X-Google-Smtp-Source: AGHT+IGboe1Jvlzml86DQ9aH2R5Azsaz6xF3DJQXvMEleg3MDnEyBYZ9aFwCN6Pb3GN6Mpijopa4lhgilcjgCsESXso=

X-Received: by 2002:a05:651c:b08:b0:2d2:dd39:ecee with SMTP id

b8-20020a05651c0b0800b002d2dd39eceemr7962ljr.7.1709113034696; Wed, 28 Feb

2024 01:37:14 -0800 (PST)

MIME-Version: 1.0

From: Brian Kawakami

Date: Wed, 28 Feb 2024 01:36:30 -0800

Message-ID:

Subject: GOOD DAY 01

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000506d6c06126de3a7"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 10.7

X-Spam_score_int: 107

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Attention This is to officially inform you that United Nations

Secretary general Mr. António Guterres has advised my office for an immediate

release of your unpaid Contract/inheritance funds without any delay, [...]





Content analysis details: (10.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.52 listed in list.dnswl.org]

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[briankawakami101(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[briankawakami101(at)gmail.com]

0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

2.5 MILLION_USD BODY: Talks about millions of dollars

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.52 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

0.0 LOTTO_DEPT Claims Department

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} GOOD DAY 01



--000000000000506d6c06126de3a7

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Attention





This is to officially inform you that United Nations Secretary

general Mr. Ant=C3=B3nio Guterres has advised my office for an immediate

release of your unpaid Contract/inheritance funds without any delay,

Kindly forward Your Full Name: Your Address: Your Mobile Number: A

copy of your verifiable Identity document for more verification to

avoid any wrong payment all the legal documents will be provided to

you immediately for the release of your $1,500,000.00 One Million Five

Hundred Thousand United States Dollars.



Yours Sincerely

Brian Kawakami



International Payment Department

United Nations Headquarters New York, United States

Equity Bank



--000000000000506d6c06126de3a7

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Attention =C2=A0


This is to officially inform =

you that United Nations Secretary
general Mr. Ant=C3=B3nio Guterres has =

advised my office for an immediate
release of your unpaid Contract/inher=

itance funds without any delay,
Kindly forward Your Full Name: Your Addr=

ess: Your Mobile Number: A
copy of your verifiable Identity document for=

more verification to
avoid any wrong payment all the legal documents wi=

ll be provided to
you immediately for the release of your $1,500,000.00 =

One Million Five
Hundred Thousand United States Dollars.

Yours Si=

ncerely
Brian Kawakami

International Payment Department
United=

Nations Headquarters =C2=A0New York, United States
=C2=A0 =C2=A0 Equity=

Bank




--000000000000506d6c06126de3a7--

Canadian Tire Mechanic Tool set Phishing Contest from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 28 Feb 2024 07:34:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rfL0A-000000001xI-1nA0

for dave@doctor.nl2k.ab.ca;

Wed, 28 Feb 2024 07:33:42 -0700

Resent-From: The Doctor

Resent-Date: Wed, 28 Feb 2024 07:33:42 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dm6nam11rlnn2073.outbound.protection.outlook.com ([40.95.38.73]:29518 helo=NAM11-DM6-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

id 1rfJ3b-00000000Inq-1awv

for games@nl2k.ab.ca;

Wed, 28 Feb 2024 05:29:11 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=dlryVpMxh2IJpeNjfLtiGv8pYskHjS2KEEnnjIQFebNxwEVZMqzeG9H08fFqP88lxYAXu03dI0XOCA6yJnwzIXO7wvMihqFIfIQY67Q/8o54QOHB26mk3yrKBzbBgzW81osaOl3R36RnCOdR50XWoJ7ZIpT33SJd8T3N4y6Jx9F5oX+895YYA2AZwKIXGa32ynfntzpBH6Aw+ftZc9UGtFByDo1lDJgej7lHBJ20gLjbHnFvWl3c7vpSCqt2Tby+4BMa3LnDESt78SKyL/0AGc0fyABlBVOD86ntgUauAc6oASkNiYcxHl2pFFXQDaGVb8vV7K0QWPD2LT3M4OBCBA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=tfYpexrvbVid6MS2zxHSUiWJTukRDlyLmnIk5ni1gxs=;

b=NZMfG4fuRbQW+ANZxkf4BaLKAJRNTZ3F9ITzazTJT0w+QGmzmTdwOpzhySKpt2mFh7r4c6ENonlVFdZ3XfEARxLRzkow/UFQJZ96ib2wO8SAjQnH9a38t6XQTDKwiY87dj+3ZeRGVzSWYodC3ypR1boBLrfjfKNxSQoU8z5aRTfynFj0EdMLBKZXAeEZZDddlha9L0c+VKe4sNDoiC1i7gz4bSXu6KgSM7YwThBWgivv+bb6+rUk4fuad6BBCxpKaNO5E7xL8ZcqVTEEKngjxDXn3AO/G7ROHVR1ze7WZOOjaZMCE7rUYbFM7qXMAq35AZz1ERRKH3x9j4iUvYtstg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

45.79.109.171) smtp.rcpttodomain=nl2k.ab.ca smtp.helo=fghytmlo.kfdf.sbs;

dmarc=none action=none header.from=fghytmlo.kfdf.sbs; dkim=none (message not

signed); arc=none (0)

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 45.79.109.171)

smtp.helo=fghytmlo.kfdf.sbs; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=fghytmlo.kfdf.sbs;

Subject: "message for games"

MIME-Version: 1.0

X-TOI-MSGID: <101741417077062.AC354F821938C.1705442930402@fghytmlo.kfdf.sbs>

From: Canadian Tire Department

In-Reply-To:

To: games@nl2k.ab.ca

Content-Transfer-Encoding: 8bit

Content-Type: text/html; charset="UTF-8"

CC: games@nl2k.ab.ca

Date: Wed, 28 Feb 2024 12:27:02 +0000

Message-ID:

<0f240ea9-6039-472c-a9e6-f6f652424ca8@DM6NAM12FT068.eop-nam12.prod.protection.outlook.com>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DM6NAM12FT068:EE_|PH7PR20MB6353:EE_

X-MS-Office365-Filtering-Correlation-Id: 77fcec19-cbbb-4774-d093-08dc38589171

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 1

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:45.79.109.171;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:fghytmlo.kfdf.sbs;PTR:45-79-109-171.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(35950700004)(82310400014);DIR:OUT;SFP:1022;

X-OriginatorOrg: fghytmlo.kfdf.sbs

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Feb 2024 12:27:02.6794

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 77fcec19-cbbb-4774-d093-08dc38589171

X-MS-Exchange-CrossTenant-Id: f55e1df8-735b-45e3-bec7-b3d3e251697f

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f55e1df8-735b-45e3-bec7-b3d3e251697f;Ip=[45.79.109.171];Helo=[fghytmlo.kfdf.sbs]

X-MS-Exchange-CrossTenant-AuthSource:

DM6NAM12FT068.eop-nam12.prod.protection.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH7PR20MB6353















(1) Notifications





















































▂▃Welcome ▃▂







🅲🅾🅽🅶🆁🅰🆃🆄🅻🅰🆃🅸🅾🅽🆂!
































































e-bike phishing from Ashburn, Virginia, United States

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 28 Feb 2024 07:34:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rfL0O-0000000021O-0ErA

for dave@doctor.nl2k.ab.ca;

Wed, 28 Feb 2024 07:33:56 -0700

Resent-From: The Doctor

Resent-Date: Wed, 28 Feb 2024 07:33:55 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from fujisushingrill.com ([194.213.18.180]:57063)

by doctor.nl2k.ab.ca with esmtp (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rfJYA-000000001PV-2ptU

for support@nk.ca;

Wed, 28 Feb 2024 06:00:46 -0700

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=mail; d=jyy0591.com;

h=To:Subject:Message-ID:Date:From:Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding;

bh=VvvdZWTQwkOLCQW/wW3HqTIpznE=;

b=O1GdrqK+T7OTGPsGsKR0y79TjDc4F3fum5pHWR/0uZgSOro7NJiiIeb+lfNkW+SuNVT17o3ZcR6f

hjXQOsS2JpyXg0EOGwAogCDhmtcf85V++cY6FltaMfW7pijemEuG/U4c3FwXI6IktPAbK1h4HF+i

3dc1wmlma/nrZMwPBo8=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=mail; d=jyy0591.com;

b=YWdWkyu1Bnp9yXWFnycURLBoi4c9kwdV+AiEgtx8mnCNFlAJpTWDeH6MQAmmlzMq3usIwwlXc3Q4

m+ApSOzTn6bn3YYbDCFNtuqKPp1/FGU8PqWmWKYSTG9DjOQdtLNxZaghfnxBjdLbeMneohuSJOxx

nlbUsIxILextwYHby30=;

To: support@nk.ca

Subject: new ebikes arrived in our warehouse

Message-ID: <9cd6e34484c7e598a91998d952dada96@jyy0591.com>

Date: Wed, 28 Feb 2024 13:44:22 +0100

From: "Jason Garrison"

Reply-To: jasonebike@jyy0591.com

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: 8bit

X-Spam_score: 9.0

X-Spam_score_int: 90

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Our factory specializes in manufacturing electric bicycles.

We are excited to introduce our 20-inch 500W ebike, designed to make your

road trips easier and safer. This ebike features a base of a 500W motor folding

design, equipped with a hydraulic shock absorb [...]



Content analysis details: (9.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: jyy0591.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 SPF_HELO_NEUTRAL SPF: HELO does not match SPF record (neutral)

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[194.213.18.180 listed in wl.mailspike.net]

1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)

[194.213.18.180 listed in ix.dnsbl.manitu.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.6 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image area

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} new ebikes arrived in our warehouse











Hi,

Our factory specializes in manufacturing electric

bicycles.

We are excited to introduce our 20-inch 500W ebike,

designed to make your road trips easier and safer.
This ebike

features a base of a 500W motor folding design, equipped with a hydraulic

shock absorber front fork and oil disc brakes to ensure your daily riding

safety.
Its 20×4.0-inch fat tires are perfect for various

riding terrains, coupled with an upgraded SHIMANO 7-speed system allowing

speeds of up to 28 MPH.

Our electric mountain bike promises a

comfortable riding experience for you.
It boasts a 500W High-Speed

Brushless Gear Motor, removable 48V 10Ah lithium battery, and front and

rear oil disc brakes. Charging takes just 4-6 hours,
with a top

speed of 28MPH. The bike also offers 3 Working Modes to suit your

preferences.



src="https://www.ouhepower.com/wp-content/uploads/2021/11/leopard-fat-tyre-ebike-1.jpg"

width="1020" height="767" />



Should you require a

sample of this E-bike, we can ship from our warehouse in Germany to all

Europe countries. 
Prices vary based on the shipping address, so

please confirm accordingly.

For those interested in purchasing

container loads of our ebikes, we can provide FOB prices.
Kindly

inform us of your destination port. A 20ft container loads 95 pcs, a 40ft

container loads 200 pcs, and a 40ft HQ loads 250 pcs.


Our

electric bike is equipped with a powerful 48V 500W brushless gear motor,

capable of assisting you to travel at 28 MPH,
making it ideal for

conquering any road on your trip.
Featuring a foldable fat tire

design and a 10Ah battery, this ebike can travel up to 30 miles on a full

charge in pure electric mode.
The battery is conveniently removable

for recharging at home or the office.

With high-quality oil

brakes and a Shimano 7-speed system, you can easily adjust speeds for any

road type. Additionally,
our ebike includes smart cruise control,

maintaining a constant speed in electric mode for 8 seconds.
Equipped

with a high-quality LCD display, our mountain ebike provides accurate

power, speed, and travel distance readings.
Safety features include

a bright headlight and rear brake light for night riding.

Our

city commuter electric bike features a stylish 6061 aluminum alloy frame

with adjustable handlebars and seat height for a customized riding

experience.
Its foldable design makes it convenient to transport in

your car, while the 20×4.0-inch fat tire is suitable for various

environments.
Our mountain folding electric bicycle comes 95 percent

pre-assembled for easy assembly.
It also includes a one-year

warranty on the electric motor and battery.

Thanks,


Jason Garrison
The Electric Bike Manufacture



/>











/>











/>











/>











/>











/>











/>











/>











/>











/>











/>











/>











/>











/>











/>











/>











/>











/>











/>











/>











/>











/>






welcome





Nigerian Lottery spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 28 Feb 2024 08:24:00 -0700

Received: from mail-qv1-f51.google.com ([209.85.219.51]:43283)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rfLmf-00000000Fnb-1o1I

for dave@doctor.nl2k.ab.ca;

Wed, 28 Feb 2024 08:23:52 -0700

Received: by mail-qv1-f51.google.com with SMTP id 6a1803df08f44-68f5cdca7a3so7122306d6.1

for ; Wed, 28 Feb 2024 07:21:54 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1709133709; x=1709738509; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=xIoqboe6/GxI/068kRfvKcnwveLkkoihJHX8PPeKYmE=;

b=cigezN2y4pMbGZg2mo1qyGJKG4rDfYDD3fAFXe87ue17XUUce+dYvpSOQPcl1WN0O/

q/J2d+9Nn0VvMOACuDvW7fUcLZbgo3+CtFLtDA2nYQmwJBUYlOySbwd7RuinDqVWf8Rh

YjHGXB2NcrTVXoUrN0W2lENU+YHGiaSUgdMhtZVvmpdxFRYTQjiSDUZ0R3OXXylFa/6R

Y1GHEFS25Z0WZmuOZ3QWP3wrx2M2oyUZKFoySHs3UPLJjDO7E43i8k+z3jQsaUM7bWWP

HNyUa86rr/p+wKgADAUMGxqvYbF3W6KtsXQHKt9oHyadeM64imOtI7iXmrKuZhu7zG72

ebnw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1709133709; x=1709738509;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=xIoqboe6/GxI/068kRfvKcnwveLkkoihJHX8PPeKYmE=;

b=AJvjjcNmAQGah0xgvkoNuQhPbrTBQaDPKQRv4VbLVRPItSiAXJZRI4DMsfkJaEwekb

pgjD53+OY8lOQCQ/setyIhEP+NcxAzbRLAPWrokoECtb6gZvie7h6fCDmOPHNs2OM4rd

2vEv75B1fa7Rq2sgBDcjBeEXLkMuj649Mw1Q/7VFsWaI3m9O7ens+xUFTMa7ODclTBeS

vFQrucwiSaGECQhUbUnAPf/HK97rgZDzGSNXfaJ64wWs+SqaD+ETVOolPg+6YfSoZaoC

MJSl1Q8xNzTrlFc7Y7a4g/CSbgI5z5LpST1Ssk0cJqOTOFQ+HqQIqrbL3WZlDmaorHeX

42EA==

X-Forwarded-Encrypted: i=1; AJvYcCXjFt4YuPeK9nxRSmTVyjr43ivHUejL0r3SuBxVtc7v9Gx9+ySazvmdr8K+euFeLR9m+m0Vgpft66J9FuL0yS+FLt0dmPgN

X-Gm-Message-State: AOJu0YyyMfA9jJstXU6bLW6azg0LXYNOvBrz6VCtdmh7ZqgZ8Doc000K

xW7FSU5EPB99aYvZeY0XBI9YXD+cImP5sFDfTKaxXBHKEYqUab8Pd+sxLas1XuqXvyxSvdfsBCB

E4g+XPqAzB0fhxj48YdI6KiFv9fg=

X-Google-Smtp-Source: AGHT+IEbzNigep5QJCPIvL2L6RUJz5o2Uudq7V0fatQpS4xighEV2wx1r9/R/mfB4m00bA0cROdczlgNELcUpsJjVb0=

X-Received: by 2002:a05:6214:319d:b0:68f:5d7f:6a8d with SMTP id

lb29-20020a056214319d00b0068f5d7f6a8dmr4700864qvb.3.1709133708694; Wed, 28

Feb 2024 07:21:48 -0800 (PST)

MIME-Version: 1.0

Reply-To: ramesursolicitors@gmail.com

From: MR STANLEY EDWARD

Date: Wed, 28 Feb 2024 07:21:37 -0800

Message-ID:

Subject: HELLO

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000949b46061272b304"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 19.3

X-Spam_score_int: 193

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: HELLO EMAIL OWNER, This mail is to inform you that the Pennsylvania

Lottery organization has drawn winning lottery global awards in the regional

and national centers . They said that after the final draw your email emer

[...]



Content analysis details: (19.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.51 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.51 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[idrissourabi1960(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[idrissourabi1960(at)gmail.com]

2.5 MILLION_USD BODY: Talks about millions of dollars

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.5 HK_NAME_FM_MR_MRS No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

1.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 FILL_THIS_FORM Fill in a form with personal information

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases

1.8 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} HELLO



--000000000000949b46061272b304

Content-Type: text/plain; charset="UTF-8"



HELLO EMAIL OWNER,



This mail is to inform you that the Pennsylvania Lottery organization has

drawn winning lottery global awards in the regional and national centers

. They said that after the final draw your email emerged as the winner

award price of 2,800,000.00 million united states dollars. Consequently the

said amount has been deposited in the bank custody in Greece as directed by

the lottery company.



Contact this email here ( sanjairamessu7@gmail.com ) and he will direct you

to the bank where your money is deposited to claim your winning fund,

contact him with your details as follows : your full name, your country,

your home address and your phone number.



Sincerely,

Mr Stanley Edward.



--000000000000949b46061272b304

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



HELLO EMAIL OWNER,

This mail is to inform you that =

the Pennsylvania Lottery organization =C2=A0has drawn =C2=A0winning lottery=

global awards in =C2=A0the regional and national centers . They said that =

after the final draw your email emerged as the winner award price of 2,800,=

000.00 million united states dollars. Consequently the said amount has been=

deposited in the bank custody in Greece as directed by the lottery company=

.

Contact this email here (
om">sanjairamessu7@gmail.com
) and he will direct you to the bank where=

your money is deposited to claim your winning fund, contact him with your =

details as follows : your full name, your country, your home address and yo=

ur phone number.

Sincerely,
Mr Stanley Edward.




--000000000000949b46061272b304--