Nigerian Spam from Microsoft outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 24 Mar 2024 12:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roSUt-00000000N32-1Nji

for dave@doctor.nl2k.ab.ca;

Sun, 24 Mar 2024 12:23:07 -0600

Resent-From: The Doctor

Resent-Date: Sun, 24 Mar 2024 12:23:07 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lo4gbr01rlhn2145.outbound.protection.outlook.com ([40.95.115.145]:3239 helo=GBR01-LO4-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roPQl-00000000G42-0Goe

for sales@nk.ca;

Sun, 24 Mar 2024 09:06:42 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=BXfg6JA+JAmsBfUvcZqd/Gfy7hwpH6DIJ9bjRi5/FRLxSSoQ2huzW8Kl3dX8DkLpoyXObZSfZ6hm0FZNKXdrdLaCoDu4Y2dzrzmr45zxT9mk6spa1sXXHelBYtPvsi2WgtoKYuYBVwWEaiBNGue4NUFEpXq5gJDmzr8zFIGqpzChjCskXIe0VQQD5L/GfkNhAmF0A0puIV2h9haHMhZDHHeVOya9tBXlIBaMiFZPLuSvx6IE4253hhwRwyRNbTsWH6DQODZL1yHF28wlQzxKHn41ha/q0Y5J91rhQaDqJre3bq2NbVJmzoKbWN8D/V/njcRDGtW5zBZW1Bin5cOucA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=KOYlofxoeno+mXY12bZn7zRugj7bRZ3E5xvL3LShNPo=;

b=N555ANbRiN1pYo/HBUPDvMV5vDg8u+gFeveu70m0MpB+wq9gGil5w+vOWtzA8/gQ0nX38uvsrHRTyg7Zw99rMlSNXNQcZLLaHQgjtbpLUvfV9+Bp1DfDoe5w+49XGisTJKkDK4K23FQuxJREv6FZNZXB30jWbs2M74YheuuHLQ+5W3d7rn2+cm5lXn80NSOp3huHNTD/+wtHMmno5UX4P0pzJw1Qrv14E2HWAegrJswHDDjOIUVyfwHX5jAVe9KzDj3rUZ/42C6cbBUTn4Ur2Nb4n7JxCbpR8pHwQuaxvCmhYLY4utzWtNh6IC5rHIn2zol7DrdxHWgBwOo20/Rx8w==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is

193.39.172.206) smtp.rcpttodomain=nisanthinc.com smtp.mailfrom=office.net;

dmarc=none action=none header.from=office.net; dkim=none (message not

signed); arc=none (0)

Received: from LO4P123CA0528.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:2c5::10)

by LO6P123MB7303.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:33c::16) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.31; Sun, 24 Mar

2024 15:04:35 +0000

Received: from LO1PEPF000022FD.GBRP265.PROD.OUTLOOK.COM

(2603:10a6:600:2c5:cafe::7b) by LO4P123CA0528.outlook.office365.com

(2603:10a6:600:2c5::10) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.13 via Frontend

Transport; Sun, 24 Mar 2024 15:04:35 +0000

X-MS-Exchange-Authentication-Results: spf=none (sender IP is 193.39.172.206)

smtp.mailfrom=office.net; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=office.net;

Received-SPF: None (protection.outlook.com: office.net does not designate

permitted sender hosts)

Received: from ebyst.gwynedd.llyw.cymru (193.39.172.206) by

LO1PEPF000022FD.mail.protection.outlook.com (10.167.240.21) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.7409.10 via Frontend Transport; Sun, 24 Mar 2024 15:04:35 +0000

Received: from HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3) by

HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.2.1258.28; Sun, 24 Mar 2024 15:04:32 +0000

Received: from User (172.18.4.86) by HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3)

with Microsoft SMTP Server id 15.2.1258.28 via Frontend Transport; Sun, 24

Mar 2024 15:04:30 +0000

Reply-To:

From: Federal Reserve Bank

Subject: Dead Or ALIVE....4s

Date: Sun, 24 Mar 2024 08:04:29 -0700

MIME-Version: 1.0

Content-Type: text/html; charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID: <11a10617-b4eb-4685-866e-2dc8ffee7ef7@HQ-EX19-1.gwynedd.rhwydwaith>

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: LO1PEPF000022FD:EE_|LO6P123MB7303:EE_

X-MS-Office365-Filtering-Correlation-Id: c9297250-8174-4635-acd4-08dc4c13b829

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 1

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?windows-1251?Q?dIyOeQ3nrogoZqKgwud3Od6wqLNT9DcZyVouLuvLO/3M2bYRwduhiHnA?=

=?windows-1251?Q?RUGrZD+qLAUlkCgE4V+lAB7nwP1qpX9IpTwwPNa4/Cys/2eBQ3fM7bDN?=

=?windows-1251?Q?fmQj2YrxN9unFe/NYavx64mDu8KgT2bzemsUoM6pS5XiPxHRiJCNUKuu?=

=?windows-1251?Q?5SwxvqcQGIDANWChaXWB8mwzcGI1kb0Ht6qKMVnFQDS3NrBBY/V83JYE?=

=?windows-1251?Q?QFTQiOKGodYDB9ort6uLNtlypxMnWb+NFeNLdo0SGzOgr5hl3plJfEh4?=

=?windows-1251?Q?5bh7467C0pH3cVw/ysDPTQ6fu56u5zy9SlLCSb6XoW0tRR2G33ALAZMB?=

=?windows-1251?Q?7GiwT01XqBgqMHSyLLPsKs54nJ01YLKlJEY9ZIoQIObGPudrZKJcVgG0?=

=?windows-1251?Q?5BwiIiRUO8Tvd9VGKQkuxDmctLe9KM8rJylgBWz2hRDSQWATD+QUtYg/?=

=?windows-1251?Q?BtfUBymk6J3qwlkJQsxVF7oF/yT2pWXrWGX6w7rgoOF4BL3ewkwIgLKp?=

=?windows-1251?Q?NIR7xH1XHlKukjlYkAsc4rddFtGjzbF2caWTAQ8OEvzP+c90ULqo8lvo?=

=?windows-1251?Q?UewADpanBoVGDkBm3hq9XZPB+alu6ZfJZ7goMQoPGivvhEWn92/qUWAb?=

=?windows-1251?Q?+QKzLZvxuWl0JTfoZrNht7EKX3BPe73FG6RH49DzUcfPxGnSL1IZMna9?=

=?windows-1251?Q?9yNpJLPiy5OTSkvFW8eres2Az/mrTr/BXkcXNaa93HYPFwDCdfh57DWL?=

=?windows-1251?Q?V8Ee/JjOMietf9q7nGWSXygHmPrtbf5VWAqYCzTV+Q0AD010G9i0oU3v?=

=?windows-1251?Q?248khS+3QmrAAtkS5rH6HRexadAm2DEL910xaXx54fxkNwqnFN529Uyb?=

=?windows-1251?Q?REG1gWd57ejpPDVGbMwobp1IIgbZQq1b1y8QTlYPVAiKwt3Cpj+N4cDy?=

=?windows-1251?Q?lRwquV8urPlbWKdhD/2+fldbS1cP44YkHy5M7hUKWjaThLq56yK1wPf0?=

=?windows-1251?Q?Iazkspb3ZTsICYH40i3jVK24Ehn62QzpDD9GpcOwk0i0vseZRn1r0bIr?=

=?windows-1251?Q?hcYH/xOpe3L9tP9FkVNOwmOiFnNqSWs/z3he9c1dx/gPnLCyZ8UO9Sui?=

=?windows-1251?Q?4GV+zXwnkkIQcLNcfjv3y6Zzslnbrz/SWIObRfGtWSZNhCaHdAtBwtkT?=

=?windows-1251?Q?09QUHAyKlvSH3ohOnJE7P7ULJ3BLrk6+g2nXI4fMPLE6iI3PUxaV2qu8?=

=?windows-1251?Q?U6w7X7V95OOcjKkxPA4=3D?=

X-Forefront-Antispam-Report:

CIP:193.39.172.206;CTRY:GB;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:ebyst.gwynedd.llyw.cymru;PTR:systemau.gwynedd.llyw.cymru;CAT:OSPM;SFS:(13230031)(61400799018)(82310400014)(7416005)(48200799009)(376005)(35950700004)(2700400011);DIR:OUT;SFP:1023;

X-OriginatorOrg: cyngorgwynedd.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Mar 2024 15:04:35.6658

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: c9297250-8174-4635-acd4-08dc4c13b829

X-MS-Exchange-CrossTenant-Id: 99841289-67fd-4e8e-b813-12b22f782ece

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=99841289-67fd-4e8e-b813-12b22f782ece;Ip=[193.39.172.206];Helo=[ebyst.gwynedd.llyw.cymru]

X-MS-Exchange-CrossTenant-AuthSource: LO1PEPF000022FD.GBRP265.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: LO6P123MB7303

X-Spam_score: 30.8

X-Spam_score_int: 308

X-Spam_bar: ++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Beneficiary, We wish to inform you that a power of attorney

was forwarded to our office this morning, by two gentlemen regarding your

unclaimed fund of $5.5 Million Dollar. One of them is an American citizen

named [...]



Content analysis details: (30.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=GBR01-LO4-obe.outbound.protection.outlook.com;ip=40.95.115.145;r=doctor.nl2k.ab.ca]

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam

0.0 NSL_RCVD_FROM_USER Received from User

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[williamtash1949(at)gmail.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.95.115.145 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[40.95.115.145 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.95.115.145 listed in wl.mailspike.net]

2.7 UNCLAIMED_MONEY BODY: People just leave money laying around

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

2.0 PDS_HELO_SPF_FAIL High profile HELO that fails SPF

1.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.2 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Dead Or ALIVE....4s













Dear Beneficiary,




 




We wish to inform you that a power of attorney was forwarded to our office this morning, by two gentlemen regarding your unclaimed fund of $5.5 Million Dollar. One of them is an American citizen named Mr. Robert Porter and the other is Mr. Wilhelm Berg a Swedish citizen.




 




The document claims these gentlemen to be your authorized representatives, and the power of attorney states that you are already deceased. It further states that your death was due to lung cancer, with your date of death being March 27th, 2019.




 




They have now submitted a new account to replace the receiving account that was in the original claim of funds. These funds have remained unclaimed for quite some time and the need for resolution is pressing.




 




Below is the new account they have submitted.




 




Account Name: Robert Porter /Wilhelm Berg




Account: 5007-29 438 66




IBAN-nr: SE4150000000050072943866




Bic-kod: ESSESESS




Skandinaviska Enskilda Banken. (SEB :-)




SWEDEN.




 




In the event that you are in fact still alive, we ask that you confirm your existence by responding to this email. You are to view this as a matter requiring immediately attention and response. We have 48 hours monitoring of all activities within Federal Reserve Bank.




 




We have contacted the bank in the Sweden asking them to wait for further directives from Federal Reserve Bank, prior to authorizing any withdrawals in any form. Our request is based entirely on our attempt to verify that you are in fact deceased, before money is wrongly disbursed.




 




Finally, we forewarn you that if we do not hear back from you shortly, we will have to assume that you are in fact deceased and Federal Reserve Bank will proceed with release funds to the above newly submitted account.




 




Sincerely,




 




Lorie K. Logan (frbdallasdistrict@outlook.com)




Federal Reserve System2200 N Pearl St, Dallas, TX 75201, USA




 




 




Nigerian Spam from Microsoft outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 24 Mar 2024 12:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roSUo-00000000N1Q-3AYi

for dave@doctor.nl2k.ab.ca;

Sun, 24 Mar 2024 12:23:02 -0600

Resent-From: The Doctor

Resent-Date: Sun, 24 Mar 2024 12:23:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-cwxgbr01rlhn2156.outbound.protection.outlook.com ([40.95.114.156]:25314 helo=GBR01-CWX-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roPKo-00000000FdT-3VeS

for root@nk.ca;

Sun, 24 Mar 2024 09:00:34 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=fwlnAHyk2yQaT1/JSsfT31KXE+Yz7puieZIE1BrjR8/k8O4Ql9S75lFGP4FfEtKKYCFtJ979sHA0EyUlTlnZTRlfHCrVKsXo9ae8ipolS+5M2YVfpfHWb2gx6KGI84+1WoCdfuJpt5wfkBkVlbJhPItiqIAWvydyBtdxO9/SFY1OAfRWlzAKdDf1A7sEcgr6r0Vz7z02WLDklaweUdxqfXo5ITqZMOfQ4OidbIVouPHFHhJGSMq/6s80mZAwa0kmc1UslVIDhGxxWPwFxlOT78Lw/DO9IP7r/ZwowTXwuYHvh3O6Kcpvb+z9/jub0QLbSU9Hntp5Qae+Ay9MLR0gKQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=KOYlofxoeno+mXY12bZn7zRugj7bRZ3E5xvL3LShNPo=;

b=oMqqzv2eEIAykOC5pQawUjKSTkVi/OJMHp4xXqx1DdLiO47kawSkvVgmZy0+62fxDyMWaWhNjUswVeajdutHzUuxngavbDaVcbBMbYSDHasZ2lwEqBfeBHICGc959Fxh+4AHfFG0blisLVv0ELMk8UWFYfrqepTSkRaD+h+jnyMsagPdf30dH4Nd0S0A1/NGzL8t7o6r83CR8rHwg6wBAQSjJmjqqWwZSXtofIRMZXY48pqFq084v5x6S71IXmngazbQjAwCjzDx+R+e61XddJWM6M/FndvfcaYV1AVtP37PYJHhZpnCyxd/5ByOGNNkHHtSgRK/xAzMnvVPNs7ysw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is

193.39.172.206) smtp.rcpttodomain=nfi.ren.nic.in smtp.mailfrom=office.net;

dmarc=none action=none header.from=office.net; dkim=none (message not

signed); arc=none (0)

Received: from LO4P265CA0279.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:37a::18)

by LO6P123MB6597.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:2b6::10) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.30; Sun, 24 Mar

2024 14:58:28 +0000

Received: from LN2PEPF000100CA.GBRP265.PROD.OUTLOOK.COM

(2603:10a6:600:37a:cafe::7c) by LO4P265CA0279.outlook.office365.com

(2603:10a6:600:37a::18) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.13 via Frontend

Transport; Sun, 24 Mar 2024 14:58:28 +0000

X-MS-Exchange-Authentication-Results: spf=none (sender IP is 193.39.172.206)

smtp.mailfrom=office.net; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=office.net;

Received-SPF: None (protection.outlook.com: office.net does not designate

permitted sender hosts)

Received: from ebyst.gwynedd.llyw.cymru (193.39.172.206) by

LN2PEPF000100CA.mail.protection.outlook.com (10.167.240.4) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.7409.10 via Frontend Transport; Sun, 24 Mar 2024 14:58:27 +0000

Received: from HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3) by

HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.2.1258.28; Sun, 24 Mar 2024 14:58:23 +0000

Received: from User (172.18.4.86) by HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3)

with Microsoft SMTP Server id 15.2.1258.28 via Frontend Transport; Sun, 24

Mar 2024 14:58:22 +0000

Reply-To:

From: Federal Reserve Bank

Subject: Dead Or ALIVE....4s

Date: Sun, 24 Mar 2024 07:58:21 -0700

MIME-Version: 1.0

Content-Type: text/html; charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID:

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: LN2PEPF000100CA:EE_|LO6P123MB6597:EE_

X-MS-Office365-Filtering-Correlation-Id: f7d09b9f-c5ad-4669-b1dc-08dc4c12dcd6

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 1

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?windows-1251?Q?Hg6rtWKZVcJ1PFdKmMUz2XqadsisPQYhRSOO/VQ7WeVRS3E8DBnaqcH5?=

=?windows-1251?Q?KZbGZqEctGFT1YCsbyeeMGr0nYk/O1iEtmOu4KXJQstSXAIOL0QhjOzy?=

=?windows-1251?Q?UgCxadT6LwYLuwYbz4jd9OgTCZNctNUZjTjx4p2Xx1UAeA2mFWUJ2G/i?=

=?windows-1251?Q?2Hr2njs88+L0Q5Pau8xj9CSmDfr9FUPFWpEPvYuVJ0adWgfenTeh0aG0?=

=?windows-1251?Q?jaXU9l5Uqxz5rO8N8+Mg604cZrMXPnj9Vti4kt5+Z4LE6KCuyFfGjcp9?=

=?windows-1251?Q?aHTVhTcAeZfX40l0zgyXHu7a7xl6Vp1LWeYOgBrBtn0dmVkLkUof+mSB?=

=?windows-1251?Q?m7lvbib+xknc8IEDQpMKO8M7vhTKAjB1CX7bEFCQPa+7fqmiU5isoQSl?=

=?windows-1251?Q?z1KlR80z+03wBwKBYRddsV7uqoguVdydETj30QDTdNNlF9HCWcDZB8AI?=

=?windows-1251?Q?2+0O6FnpCtjzQC0hBdWGQ5XMxuQ3Y0kCXYrLcJvJGu/HKtX7/IlPIxeI?=

=?windows-1251?Q?kooSfSUb0oXuLzt0sTAh3R5jDC3cfnLS4Bv3lzvB5EtIqvWgAV+aVhKT?=

=?windows-1251?Q?M3jCQEadFzCP6V55A5yzZAnijXYOpq0rJNs5i8oksQWfBgvxR8U/b4j3?=

=?windows-1251?Q?Ll990554J3953UMrDVjNiwlRrj4YO0HV/Jp8eJAe9DCy2mIDKHQSMWWy?=

=?windows-1251?Q?YYzGiOFH0xVl+FsbPbngp9eqnPKxhm0KzoNsFlVuO7zu9/xWPswYck+t?=

=?windows-1251?Q?1p5KgsBqgCsDQgW/dt3SsxAD/lIk4p5+aqHBNuz7CNi597cDW1xZzhuf?=

=?windows-1251?Q?GVb2F4MqM40KPkxYZRMvxa3cVv8b7y0oeQtVQqLsLxCSp/GICGwJvmyw?=

=?windows-1251?Q?aItqjceYb7bgmwnqSDiIozjB1aeFb+BZ5f46mUw5rbREA+38s+uMq7fS?=

=?windows-1251?Q?0WH/zB31QLf/91LeIE6wKyBRhgyAy5DEcdCmaJKQlVFN5JOflNo9W+VQ?=

=?windows-1251?Q?+Qz7soHxpzdQTY0p1hlToXhUNUnqTTpcYMQyBEH/f7N/zNB+BEdifSdT?=

=?windows-1251?Q?ucMGGJezMZ0Uo/Pvfjix84lWhhy7Kn8gKfkbgVyrwPv+0EGdUAQXpRmY?=

=?windows-1251?Q?iykFJH04VpdSVCukfn6zO9uaZBJQ3gVkBp2AMoQHTeciZcZGFvJhgmOJ?=

=?windows-1251?Q?/cZrte12PhZaRloaKa7Y1uUg9mtSm1mV2pQSSUvGd9IRhUvnc+7W5+RP?=

=?windows-1251?Q?hx/ej+pn/+jepo+pvaJ70eN0GvinP5EOy8Z1DKAG6OhIPsY8HaRk3Da0?=

=?windows-1251?Q?97DOOA=3D=3D?=

X-Forefront-Antispam-Report:

CIP:193.39.172.206;CTRY:GB;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:ebyst.gwynedd.llyw.cymru;PTR:systemau.gwynedd.llyw.cymru;CAT:OSPM;SFS:(13230031)(61400799018)(48200799009)(82310400014)(35950700004)(32650700005)(7416005)(376005)(2700400011);DIR:OUT;SFP:1023;

X-OriginatorOrg: cyngorgwynedd.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Mar 2024 14:58:27.7166

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: f7d09b9f-c5ad-4669-b1dc-08dc4c12dcd6

X-MS-Exchange-CrossTenant-Id: 99841289-67fd-4e8e-b813-12b22f782ece

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=99841289-67fd-4e8e-b813-12b22f782ece;Ip=[193.39.172.206];Helo=[ebyst.gwynedd.llyw.cymru]

X-MS-Exchange-CrossTenant-AuthSource: LN2PEPF000100CA.GBRP265.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: LO6P123MB6597

X-Spam_score: 30.8

X-Spam_score_int: 308

X-Spam_bar: ++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Beneficiary, We wish to inform you that a power of attorney

was forwarded to our office this morning, by two gentlemen regarding your

unclaimed fund of $5.5 Million Dollar. One of them is an American citizen

named [...]



Content analysis details: (30.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.95.114.156 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[40.95.114.156 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.95.114.156 listed in wl.mailspike.net]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=GBR01-CWX-obe.outbound.protection.outlook.com;ip=40.95.114.156;r=doctor.nl2k.ab.ca]

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam

0.0 NSL_RCVD_FROM_USER Received from User

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[williamtash1949(at)gmail.com]

2.7 UNCLAIMED_MONEY BODY: People just leave money laying around

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

2.0 PDS_HELO_SPF_FAIL High profile HELO that fails SPF

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.2 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

1.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Dead Or ALIVE....4s













Dear Beneficiary,




 




We wish to inform you that a power of attorney was forwarded to our office this morning, by two gentlemen regarding your unclaimed fund of $5.5 Million Dollar. One of them is an American citizen named Mr. Robert Porter and the other is Mr. Wilhelm Berg a Swedish citizen.




 




The document claims these gentlemen to be your authorized representatives, and the power of attorney states that you are already deceased. It further states that your death was due to lung cancer, with your date of death being March 27th, 2019.




 




They have now submitted a new account to replace the receiving account that was in the original claim of funds. These funds have remained unclaimed for quite some time and the need for resolution is pressing.




 




Below is the new account they have submitted.




 




Account Name: Robert Porter /Wilhelm Berg




Account: 5007-29 438 66




IBAN-nr: SE4150000000050072943866




Bic-kod: ESSESESS




Skandinaviska Enskilda Banken. (SEB :-)




SWEDEN.




 




In the event that you are in fact still alive, we ask that you confirm your existence by responding to this email. You are to view this as a matter requiring immediately attention and response. We have 48 hours monitoring of all activities within Federal Reserve Bank.




 




We have contacted the bank in the Sweden asking them to wait for further directives from Federal Reserve Bank, prior to authorizing any withdrawals in any form. Our request is based entirely on our attempt to verify that you are in fact deceased, before money is wrongly disbursed.




 




Finally, we forewarn you that if we do not hear back from you shortly, we will have to assume that you are in fact deceased and Federal Reserve Bank will proceed with release funds to the above newly submitted account.




 




Sincerely,




 




Lorie K. Logan (frbdallasdistrict@outlook.com)




Federal Reserve System2200 N Pearl St, Dallas, TX 75201, USA




 




 




Nigerian Spam from Microsoft outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 24 Mar 2024 05:43:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roMEz-00000000Ian-2DQS

for dave@doctor.nl2k.ab.ca;

Sun, 24 Mar 2024 05:42:17 -0600

Resent-From: The Doctor

Resent-Date: Sun, 24 Mar 2024 05:42:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lo4gbr01rlhn2167.outbound.protection.outlook.com ([40.95.115.167]:19175 helo=GBR01-LO4-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roLbI-00000000FGU-10SR

for doctor@nl2k.ab.ca;

Sun, 24 Mar 2024 05:01:20 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=GB+vzMQxplBPkTRFSMhwYnauhUN3RGrnw8VmSBbhGx4EJuLp3/L0P9ZhL8glGzB5Q5mGZS6G9FfWfsxEoMCzS7T8YpA0XmGrivhbpFh4PyHc4m8g7V5qbVjP/a12LNG0gB/IS3E4OKBPWYNuHs2+O9/m85qj/w+397yll/MeaROwbAJkjgEwDeZV4ErgKYqyg5JrmvzAqnyj4Gn7tRP0wgBo++RrlJrw7fEwttdPWWqRIBikcnJo8SFDT+Cke6lHzjp3wKIQ6Eyxd/39Vr/AQARnEsdbOrH2/X6grSdN205lF/g8JcGOzOxOrPWHZJrdSZe3RSi+DKqL8XVBUMFB+w==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=KOYlofxoeno+mXY12bZn7zRugj7bRZ3E5xvL3LShNPo=;

b=G5YA3RK0Wcfc4wimM4YizdULR0dmVpqbKQGAgP3ce0l5EsAh07XAy12Q3aBtakDXex1UdSoQdRHVZTr/ZMSx4N1ngtfPeb5xMnQPHit5fb9VY+xP/8vng2Wjh3r0Yayk9dBdkXz96NxcGWoLe4umFKK33OH7XfV3Eswg6NqUn6TbZJK4kDqg+khfRjVAyIGHIB0mdsPeVKSXzQk948/jlWDZxKnyxdRIDM43kXHV9MLhB640ESM1gIpIvveoNVCYATg54GndfYeFO6hGlWweKMdX9sIlxlM4jP+HunzzuKR/bSXVmwqoTJ/ZYNrn7nG7fUVoFhIoEybKsG+jrBhK9g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is

193.39.172.206) smtp.rcpttodomain=banque-france.fr smtp.mailfrom=office.net;

dmarc=none action=none header.from=office.net; dkim=none (message not

signed); arc=none (0)

Received: from LO2P265CA0499.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:13b::6)

by LO0P123MB3898.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:13f::9) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.31; Sun, 24 Mar

2024 10:59:14 +0000

Received: from LO1PEPF000022FF.GBRP265.PROD.OUTLOOK.COM

(2603:10a6:600:13b:cafe::fc) by LO2P265CA0499.outlook.office365.com

(2603:10a6:600:13b::6) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.13 via Frontend

Transport; Sun, 24 Mar 2024 10:59:14 +0000

X-MS-Exchange-Authentication-Results: spf=none (sender IP is 193.39.172.206)

smtp.mailfrom=office.net; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=office.net;

Received-SPF: None (protection.outlook.com: office.net does not designate

permitted sender hosts)

Received: from ebyst.gwynedd.llyw.cymru (193.39.172.206) by

LO1PEPF000022FF.mail.protection.outlook.com (10.167.240.23) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.7409.10 via Frontend Transport; Sun, 24 Mar 2024 10:59:14 +0000

Received: from HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3) by

HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.2.1258.28; Sun, 24 Mar 2024 10:59:13 +0000

Received: from User (172.18.4.86) by HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3)

with Microsoft SMTP Server id 15.2.1258.28 via Frontend Transport; Sun, 24

Mar 2024 10:59:12 +0000

Reply-To:

From: Federal Reserve Bank

Subject: Dead Or ALIVE....4s

Date: Sun, 24 Mar 2024 03:59:11 -0700

MIME-Version: 1.0

Content-Type: text/html; charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID:

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: LO1PEPF000022FF:EE_|LO0P123MB3898:EE_

X-MS-Office365-Filtering-Correlation-Id: a1b3f2eb-b1d9-48c9-8cf9-08dc4bf17173

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 1

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?windows-1251?Q?29cBUL7tUnQLaPygG4z81RRBITjvBOvdEKpg1AMc92tTPlaTmXXkfmiL?=

=?windows-1251?Q?eZg8kmL4/Owz87s2Pt7vat4oketmvH5H8IB8d78cQm82Oj7b9p/cuaGa?=

=?windows-1251?Q?KSQWVoWsFNqxuBcHDTyykbdb9oqR5UD/DTu8Ah8BZd3SDEhx3gHd7sxk?=

=?windows-1251?Q?NKVPWS3ijwl5g3hxgLnI5JMGRZsDRS6T+NxO3wUQMPo5KdUtcTaM4Lst?=

=?windows-1251?Q?mNcPHv8n+EGD/cZVGN6SWNLyiBzQeb9DMdBcO/7ZJQuMvM3MLFpKkRg3?=

=?windows-1251?Q?JtELPODmE4Ye9Rn0A5xFge8nIv7/YemTnqw0A8tUM8591yX+AGNits2f?=

=?windows-1251?Q?j7W93fChV+8vEzGFyB/CjWW23ZxD3A+WtfvYtx2DeS5bvYVUpCv0fLyC?=

=?windows-1251?Q?6Kul0RVztiLX0Zag+3SbmrtVeVxodQL8O9hYn7AF971EArBJ7V1fH+zG?=

=?windows-1251?Q?tiLDdqeK+7OrJfmPd3YIn07buyN6ksAu3ZKmlwvxx01mArQ/kmDIc0gC?=

=?windows-1251?Q?xEfgZ6RGQOczrWp0o+kmyHsaxASQwK5z3/rC2lQsPVvQLbQsHYU4XWRr?=

=?windows-1251?Q?NgtIXlU4QO0uOvGV7zz48OPrpQB7yBECxVaPlbqhAWFDvaUnUwVFiP46?=

=?windows-1251?Q?6wU6pRozNck2EXctnX4gSg6zldY0oGKq9FMFac2pzUzqELy2YvX8CLs6?=

=?windows-1251?Q?i+gvx7Gk82o7t7cfkqQTClfHQtv+k/1VvaCG7Hxo1j5vcZlvtw1cB3q+?=

=?windows-1251?Q?bApabNCPg4PCG+x9xsOX886UnoA3yv4iDGBnaEvsMBT3JX2Lu/+y8Nco?=

=?windows-1251?Q?WpaCRI5dl5ryIujJ/NTW6vyvvd2gZj2VHT8K7pIFZUm1HBC/CnlWUF1z?=

=?windows-1251?Q?VMf9IrYK0nvTdtcVdLLfpaTlqlWkCs7omWd+G7ScHlWdogwFgvs+GZvm?=

=?windows-1251?Q?L0bGrgfRmCsoZ2x7nLPqVLyCeoMzhykcNgOMFPII49UVuMbCg+f/LhLk?=

=?windows-1251?Q?m4FnygebgYJb87cEcfXoGnJLBRDZvP4GCNDw1g6KJS+UdiQDuJiLIdi5?=

=?windows-1251?Q?X/dVNBjJoaeBjHA3xoLCIgrv4Vm+Q/lPII3DWJ/JT2t/AdbReNjZv+E6?=

=?windows-1251?Q?N3snaKyp/Di85IGuLZ5duiBSHjAqDi1ba50LSJmbU1WZvxvmwu6xDB9X?=

=?windows-1251?Q?XyceEN4cyX14F1QKnEkcK2xFlJmBtZjH/x/cBdtN2szhoeT9UgbHIzDX?=

=?windows-1251?Q?H4j8CD6qA9MZJ3tEel8mhpsQiLCQ2w6TlQbHTOoMcBcwS+E+2tS6CRqO?=

=?windows-1251?Q?VvmUOg=3D=3D?=

X-Forefront-Antispam-Report:

CIP:193.39.172.206;CTRY:GB;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:ebyst.gwynedd.llyw.cymru;PTR:systemau.gwynedd.llyw.cymru;CAT:OSPM;SFS:(13230031)(61400799018)(48200799009)(376005)(82310400014)(35950700004)(32650700005)(7416005)(2700400011);DIR:OUT;SFP:1023;

X-OriginatorOrg: cyngorgwynedd.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Mar 2024 10:59:14.1429

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: a1b3f2eb-b1d9-48c9-8cf9-08dc4bf17173

X-MS-Exchange-CrossTenant-Id: 99841289-67fd-4e8e-b813-12b22f782ece

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=99841289-67fd-4e8e-b813-12b22f782ece;Ip=[193.39.172.206];Helo=[ebyst.gwynedd.llyw.cymru]

X-MS-Exchange-CrossTenant-AuthSource: LO1PEPF000022FF.GBRP265.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: LO0P123MB3898

X-Spam_score: 30.8

X-Spam_score_int: 308

X-Spam_bar: ++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Beneficiary, We wish to inform you that a power of attorney

was forwarded to our office this morning, by two gentlemen regarding your

unclaimed fund of $5.5 Million Dollar. One of them is an American citizen

named [...]



Content analysis details: (30.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.95.115.167 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.95.115.167 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[40.95.115.167 listed in bl.score.senderscore.com]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=GBR01-LO4-obe.outbound.protection.outlook.com;ip=40.95.115.167;r=doctor.nl2k.ab.ca]

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam

0.0 NSL_RCVD_FROM_USER Received from User

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[williamtash1949(at)gmail.com]

2.7 UNCLAIMED_MONEY BODY: People just leave money laying around

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

2.0 PDS_HELO_SPF_FAIL High profile HELO that fails SPF

1.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.2 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Dead Or ALIVE....4s













Dear Beneficiary,




 




We wish to inform you that a power of attorney was forwarded to our office this morning, by two gentlemen regarding your unclaimed fund of $5.5 Million Dollar. One of them is an American citizen named Mr. Robert Porter and the other is Mr. Wilhelm Berg a Swedish citizen.




 




The document claims these gentlemen to be your authorized representatives, and the power of attorney states that you are already deceased. It further states that your death was due to lung cancer, with your date of death being March 27th, 2019.




 




They have now submitted a new account to replace the receiving account that was in the original claim of funds. These funds have remained unclaimed for quite some time and the need for resolution is pressing.




 




Below is the new account they have submitted.




 




Account Name: Robert Porter /Wilhelm Berg




Account: 5007-29 438 66




IBAN-nr: SE4150000000050072943866




Bic-kod: ESSESESS




Skandinaviska Enskilda Banken. (SEB :-)




SWEDEN.




 




In the event that you are in fact still alive, we ask that you confirm your existence by responding to this email. You are to view this as a matter requiring immediately attention and response. We have 48 hours monitoring of all activities within Federal Reserve Bank.




 




We have contacted the bank in the Sweden asking them to wait for further directives from Federal Reserve Bank, prior to authorizing any withdrawals in any form. Our request is based entirely on our attempt to verify that you are in fact deceased, before money is wrongly disbursed.




 




Finally, we forewarn you that if we do not hear back from you shortly, we will have to assume that you are in fact deceased and Federal Reserve Bank will proceed with release funds to the above newly submitted account.




 




Sincerely,




 




Lorie K. Logan (frbdallasdistrict@outlook.com)




Federal Reserve System2200 N Pearl St, Dallas, TX 75201, USA




 




 




Nigerian Spam from Microsoft outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 24 Mar 2024 05:43:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roMEu-00000000IaE-0wyE

for dave@doctor.nl2k.ab.ca;

Sun, 24 Mar 2024 05:42:12 -0600

Resent-From: The Doctor

Resent-Date: Sun, 24 Mar 2024 05:42:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lo4gbr01rlhn2184.outbound.protection.outlook.com ([40.95.115.184]:52807 helo=GBR01-LO4-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roLbI-00000000FGW-35Ss

for doctor@doctor.nl2k.ab.ca;

Sun, 24 Mar 2024 05:01:20 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=GB+vzMQxplBPkTRFSMhwYnauhUN3RGrnw8VmSBbhGx4EJuLp3/L0P9ZhL8glGzB5Q5mGZS6G9FfWfsxEoMCzS7T8YpA0XmGrivhbpFh4PyHc4m8g7V5qbVjP/a12LNG0gB/IS3E4OKBPWYNuHs2+O9/m85qj/w+397yll/MeaROwbAJkjgEwDeZV4ErgKYqyg5JrmvzAqnyj4Gn7tRP0wgBo++RrlJrw7fEwttdPWWqRIBikcnJo8SFDT+Cke6lHzjp3wKIQ6Eyxd/39Vr/AQARnEsdbOrH2/X6grSdN205lF/g8JcGOzOxOrPWHZJrdSZe3RSi+DKqL8XVBUMFB+w==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=KOYlofxoeno+mXY12bZn7zRugj7bRZ3E5xvL3LShNPo=;

b=G5YA3RK0Wcfc4wimM4YizdULR0dmVpqbKQGAgP3ce0l5EsAh07XAy12Q3aBtakDXex1UdSoQdRHVZTr/ZMSx4N1ngtfPeb5xMnQPHit5fb9VY+xP/8vng2Wjh3r0Yayk9dBdkXz96NxcGWoLe4umFKK33OH7XfV3Eswg6NqUn6TbZJK4kDqg+khfRjVAyIGHIB0mdsPeVKSXzQk948/jlWDZxKnyxdRIDM43kXHV9MLhB640ESM1gIpIvveoNVCYATg54GndfYeFO6hGlWweKMdX9sIlxlM4jP+HunzzuKR/bSXVmwqoTJ/ZYNrn7nG7fUVoFhIoEybKsG+jrBhK9g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is

193.39.172.206) smtp.rcpttodomain=banque-france.fr smtp.mailfrom=office.net;

dmarc=none action=none header.from=office.net; dkim=none (message not

signed); arc=none (0)

Received: from LO2P265CA0499.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:13b::6)

by LO0P123MB3898.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:13f::9) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.31; Sun, 24 Mar

2024 10:59:14 +0000

Received: from LO1PEPF000022FF.GBRP265.PROD.OUTLOOK.COM

(2603:10a6:600:13b:cafe::fc) by LO2P265CA0499.outlook.office365.com

(2603:10a6:600:13b::6) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.13 via Frontend

Transport; Sun, 24 Mar 2024 10:59:14 +0000

X-MS-Exchange-Authentication-Results: spf=none (sender IP is 193.39.172.206)

smtp.mailfrom=office.net; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=office.net;

Received-SPF: None (protection.outlook.com: office.net does not designate

permitted sender hosts)

Received: from ebyst.gwynedd.llyw.cymru (193.39.172.206) by

LO1PEPF000022FF.mail.protection.outlook.com (10.167.240.23) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.7409.10 via Frontend Transport; Sun, 24 Mar 2024 10:59:14 +0000

Received: from HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3) by

HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.2.1258.28; Sun, 24 Mar 2024 10:59:13 +0000

Received: from User (172.18.4.86) by HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3)

with Microsoft SMTP Server id 15.2.1258.28 via Frontend Transport; Sun, 24

Mar 2024 10:59:12 +0000

Reply-To:

From: Federal Reserve Bank

Subject: Dead Or ALIVE....4s

Date: Sun, 24 Mar 2024 03:59:11 -0700

MIME-Version: 1.0

Content-Type: text/html; charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID:

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: LO1PEPF000022FF:EE_|LO0P123MB3898:EE_

X-MS-Office365-Filtering-Correlation-Id: a1b3f2eb-b1d9-48c9-8cf9-08dc4bf17173

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 1

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?windows-1251?Q?29cBUL7tUnQLaPygG4z81RRBITjvBOvdEKpg1AMc92tTPlaTmXXkfmiL?=

=?windows-1251?Q?eZg8kmL4/Owz87s2Pt7vat4oketmvH5H8IB8d78cQm82Oj7b9p/cuaGa?=

=?windows-1251?Q?KSQWVoWsFNqxuBcHDTyykbdb9oqR5UD/DTu8Ah8BZd3SDEhx3gHd7sxk?=

=?windows-1251?Q?NKVPWS3ijwl5g3hxgLnI5JMGRZsDRS6T+NxO3wUQMPo5KdUtcTaM4Lst?=

=?windows-1251?Q?mNcPHv8n+EGD/cZVGN6SWNLyiBzQeb9DMdBcO/7ZJQuMvM3MLFpKkRg3?=

=?windows-1251?Q?JtELPODmE4Ye9Rn0A5xFge8nIv7/YemTnqw0A8tUM8591yX+AGNits2f?=

=?windows-1251?Q?j7W93fChV+8vEzGFyB/CjWW23ZxD3A+WtfvYtx2DeS5bvYVUpCv0fLyC?=

=?windows-1251?Q?6Kul0RVztiLX0Zag+3SbmrtVeVxodQL8O9hYn7AF971EArBJ7V1fH+zG?=

=?windows-1251?Q?tiLDdqeK+7OrJfmPd3YIn07buyN6ksAu3ZKmlwvxx01mArQ/kmDIc0gC?=

=?windows-1251?Q?xEfgZ6RGQOczrWp0o+kmyHsaxASQwK5z3/rC2lQsPVvQLbQsHYU4XWRr?=

=?windows-1251?Q?NgtIXlU4QO0uOvGV7zz48OPrpQB7yBECxVaPlbqhAWFDvaUnUwVFiP46?=

=?windows-1251?Q?6wU6pRozNck2EXctnX4gSg6zldY0oGKq9FMFac2pzUzqELy2YvX8CLs6?=

=?windows-1251?Q?i+gvx7Gk82o7t7cfkqQTClfHQtv+k/1VvaCG7Hxo1j5vcZlvtw1cB3q+?=

=?windows-1251?Q?bApabNCPg4PCG+x9xsOX886UnoA3yv4iDGBnaEvsMBT3JX2Lu/+y8Nco?=

=?windows-1251?Q?WpaCRI5dl5ryIujJ/NTW6vyvvd2gZj2VHT8K7pIFZUm1HBC/CnlWUF1z?=

=?windows-1251?Q?VMf9IrYK0nvTdtcVdLLfpaTlqlWkCs7omWd+G7ScHlWdogwFgvs+GZvm?=

=?windows-1251?Q?L0bGrgfRmCsoZ2x7nLPqVLyCeoMzhykcNgOMFPII49UVuMbCg+f/LhLk?=

=?windows-1251?Q?m4FnygebgYJb87cEcfXoGnJLBRDZvP4GCNDw1g6KJS+UdiQDuJiLIdi5?=

=?windows-1251?Q?X/dVNBjJoaeBjHA3xoLCIgrv4Vm+Q/lPII3DWJ/JT2t/AdbReNjZv+E6?=

=?windows-1251?Q?N3snaKyp/Di85IGuLZ5duiBSHjAqDi1ba50LSJmbU1WZvxvmwu6xDB9X?=

=?windows-1251?Q?XyceEN4cyX14F1QKnEkcK2xFlJmBtZjH/x/cBdtN2szhoeT9UgbHIzDX?=

=?windows-1251?Q?H4j8CD6qA9MZJ3tEel8mhpsQiLCQ2w6TlQbHTOoMcBcwS+E+2tS6CRqO?=

=?windows-1251?Q?VvmUOg=3D=3D?=

X-Forefront-Antispam-Report:

CIP:193.39.172.206;CTRY:GB;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:ebyst.gwynedd.llyw.cymru;PTR:systemau.gwynedd.llyw.cymru;CAT:OSPM;SFS:(13230031)(61400799018)(48200799009)(376005)(82310400014)(35950700004)(32650700005)(7416005)(2700400011);DIR:OUT;SFP:1023;

X-OriginatorOrg: cyngorgwynedd.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Mar 2024 10:59:14.1429

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: a1b3f2eb-b1d9-48c9-8cf9-08dc4bf17173

X-MS-Exchange-CrossTenant-Id: 99841289-67fd-4e8e-b813-12b22f782ece

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=99841289-67fd-4e8e-b813-12b22f782ece;Ip=[193.39.172.206];Helo=[ebyst.gwynedd.llyw.cymru]

X-MS-Exchange-CrossTenant-AuthSource: LO1PEPF000022FF.GBRP265.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: LO0P123MB3898

X-Spam_score: 30.8

X-Spam_score_int: 308

X-Spam_bar: ++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Beneficiary, We wish to inform you that a power of attorney

was forwarded to our office this morning, by two gentlemen regarding your

unclaimed fund of $5.5 Million Dollar. One of them is an American citizen

named [...]



Content analysis details: (30.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.95.115.184 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.95.115.184 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[40.95.115.184 listed in bl.score.senderscore.com]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=GBR01-LO4-obe.outbound.protection.outlook.com;ip=40.95.115.184;r=doctor.nl2k.ab.ca]

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam

0.0 NSL_RCVD_FROM_USER Received from User

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[williamtash1949(at)gmail.com]

2.7 UNCLAIMED_MONEY BODY: People just leave money laying around

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait

0.0 LOTS_OF_MONEY Huge... sums of money

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

2.0 PDS_HELO_SPF_FAIL High profile HELO that fails SPF

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.2 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

1.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Dead Or ALIVE....4s













Dear Beneficiary,




 




We wish to inform you that a power of attorney was forwarded to our office this morning, by two gentlemen regarding your unclaimed fund of $5.5 Million Dollar. One of them is an American citizen named Mr. Robert Porter and the other is Mr. Wilhelm Berg a Swedish citizen.




 




The document claims these gentlemen to be your authorized representatives, and the power of attorney states that you are already deceased. It further states that your death was due to lung cancer, with your date of death being March 27th, 2019.




 




They have now submitted a new account to replace the receiving account that was in the original claim of funds. These funds have remained unclaimed for quite some time and the need for resolution is pressing.




 




Below is the new account they have submitted.




 




Account Name: Robert Porter /Wilhelm Berg




Account: 5007-29 438 66




IBAN-nr: SE4150000000050072943866




Bic-kod: ESSESESS




Skandinaviska Enskilda Banken. (SEB :-)




SWEDEN.




 




In the event that you are in fact still alive, we ask that you confirm your existence by responding to this email. You are to view this as a matter requiring immediately attention and response. We have 48 hours monitoring of all activities within Federal Reserve Bank.




 




We have contacted the bank in the Sweden asking them to wait for further directives from Federal Reserve Bank, prior to authorizing any withdrawals in any form. Our request is based entirely on our attempt to verify that you are in fact deceased, before money is wrongly disbursed.




 




Finally, we forewarn you that if we do not hear back from you shortly, we will have to assume that you are in fact deceased and Federal Reserve Bank will proceed with release funds to the above newly submitted account.




 




Sincerely,




 




Lorie K. Logan (frbdallasdistrict@outlook.com)




Federal Reserve System2200 N Pearl St, Dallas, TX 75201, USA




 




 




Chinese product spam from Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 23 Mar 2024 19:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roCQh-00000000N86-3WW6

for dave@doctor.nl2k.ab.ca;

Sat, 23 Mar 2024 19:13:43 -0600

Resent-From: The Doctor

Resent-Date: Sat, 23 Mar 2024 19:13:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-sgaapc01olkn2105.outbound.protection.outlook.com ([40.92.53.105]:26829 helo=APC01-SG2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roCJP-00000000MDS-1H8T

for sales@netknow.ca;

Sat, 23 Mar 2024 19:06:20 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=mw/t4w8+2Vl+ILMCRGe4fbOKME4dBB+QwI8wsV4WrahNTvki+VKnGtyU2+Fk53X9zpELR7Kg3Td84u6tMz2JbBVB+NE/ULmCtrERJ3YzWcy/5JarQFWJ1N1flSt6tJaodcyUKbn58w7WcHVpp++qYI180e3KYfTDEDDxv2eQV1XdGi6qJHDmYXti0n2UvxyO8YNj6Mq+sDvsOHnY0DxndvEBvBbJTVIPru4k6VMLf+Q6yS5CO3IfmBwRL6L2VmGVRYhBv/hkd7fBn8hAeYvY0HtZ3LB3bgJUEk9bmbxZ/3clefxrs58PYuDGrhWw0gDxvROQLpabEQNEbs/YAEj0dg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=+vbHePvb4XEACifHceCfnfTnRgdohs7lFr4PvY6gFbY=;

b=I+mPqLiNE0UfkZl6szcvN9hCULq+UX8cq0eN5Kvb0BsPIo1DCJJ6i3Hx9ceY5tehYAOe41rtMVsGvBacgBFsgyC7Gj9xEuUlFL/SDjZZ2A+JJK93Z8miNZiDN+p2GKYKoofv43plPctdJRUjdhiEVMMPMljQuYE0V5S512Ojhu7enwGRlpHaRuAIJCc/Yt16iMmc8OovV0Y8bX/TqZ3R8MjNEdCAo3DHk5OsSFdJ221m+8a9Cyw6n3jDERmX+81XGbBOpwzKlwjxaTCY2TZ0fHes7GJWDTqDuIMLtg5wN5ixu0ceesGtR47Xan5T4zq2AG2ExCTl1J+OHWnidbyD6w==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=+vbHePvb4XEACifHceCfnfTnRgdohs7lFr4PvY6gFbY=;

b=WTzs3vFHWOyLQEKugxhmJDgqqsvGWLbPIerwT+OkA8bTAQgP4OHs1toL8J0QjQzoeM3svHD9rW3aJmGxNupYgjLDYiWcDelbnp6ymNzW3sjKWOlsQ5AXBN9uqSy7g+Nk9tjjqxkAYnXuI0v8ZGAyzEPTCvcQV3Zvg+YJvSFfKpXEvdAgSzVPhwfkUkrIWxegmq5Wf4XVzvPJ82vg3pUeERLhcuD9ZPGyrISHw9LM3zFJxYJHboLK+R+mPxfgyrLIW1gvuZw664Kt9ceBuSPcezZ+J4lrLoJzNrG4T+I+O8KRSjfbyAnxsP23yChFVQYgjiqsjwE2DZ+facKvxYn9MA==

Received: from TYZPR02MB6333.apcprd02.prod.outlook.com (2603:1096:400:418::9)

by TYZPR02MB8057.apcprd02.prod.outlook.com (2603:1096:405:67::7) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.24; Sun, 24 Mar

2024 01:04:06 +0000

Received: from TYZPR02MB6333.apcprd02.prod.outlook.com

([fe80::e0fe:21bb:cd85:98d8]) by TYZPR02MB6333.apcprd02.prod.outlook.com

([fe80::e0fe:21bb:cd85:98d8%4]) with mapi id 15.20.7409.026; Sun, 24 Mar 2024

01:04:06 +0000

Reply-To: zcfxupvpm@hotmail.com

From: "aruta-liasha2024@hotmail.com"

To: rh

Subject: 889088666073367241512

Date: Sun, 24 Mar 2024 09:04:02 +0800

Message-ID:



Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: 7bit

X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180

X-TMN: [XyXga1LnrqHvnLlUm7BG7JRrx4arxE7tBwWtoSLLmOBYgxS5ZVJ+wHbkItzUY7pN]

X-ClientProxiedBy: TYCPR01CA0026.jpnprd01.prod.outlook.com

(2603:1096:405:1::14) To TYZPR02MB6333.apcprd02.prod.outlook.com

(2603:1096:400:418::9)

X-Microsoft-Original-Message-ID:



MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: TYZPR02MB6333:EE_|TYZPR02MB8057:EE_

X-MS-Office365-Filtering-Correlation-Id: 788f5c31-4266-4c5e-5419-08dc4b9e4cf8

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

qeVFxSFWQ43xYBbSIwjhkgjMZlGnSgewNcdooh2Ak5ZPqrtGuFDSpqGwN/a5gcQX7rtn83otDxOsYwGHovgt/LAn2ZRncXElq5R0jt2dtFw3D27RweEeFWAWuTeglK/qjusf1KLW7fsBoTWwluoQ1GkhKwQBaXGKGhnTKsmcAZXqAj/m5vv0YInfAdgvvMSkubu6IHXi1wUg4w39whd3Dm4AracgsA5j7OUs3KESQNj/G0mP2l6mnL8q4YPVRwGX3EAG59VRKKSmC5Cxkn1EHLdJ2S0cU1hDixJOr0cWCkK8RSmqwKaO29PGkUzQ26vyHS3iMzjKoEYjyF3l+wlVuUMXZjR1svbtQJWIqwLFxhqjUQOdI/z9gt+WJymKoWANekwCOhdurybri4WioD6a/hS+MyRbchYPTA9LIgMNcS9d2JvtOlkjzpChXtrjBGEPL/96Rp+TOqylwh1FTS4y3Nkx4aKsHGOLXv0MOpTo2+7JHvqjg1nZfueS+hXX4MbZVKwXLj3hj9W4865HDq41HF4U0enIFV0DMEKlxgWULwGmNvqTrpCrIhy7Ulbt7QAs

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?Wk0xMlhoWXUvQklqVmc4Wkd3SFlFeXk1QnY2MjZmQi9YcUNQT1JsSllpUUpn?=

=?utf-8?B?WWNaOXBZdkNDam5NcVZQKzdSUHhGcVRuUDhZRXE5eDl0NnBSS2ptbm1TOFIx?=

=?utf-8?B?OHF3ZFNpUVI2MXVCcVg2Q1lNQVVqaTB5UXJZeVZTS1FaU0R3eC9yOUlLVUdY?=

=?utf-8?B?emsyQVducGcwS1BIUW9oNldHVkJlTGVNVEU1czBydEpScnFaVTI5MWVwMnMz?=

=?utf-8?B?eGJaOUgxOEZsVXVpVDZEdFEvTHhidGJGWFpLdW91anBxcWdlWkFQNC91MGZH?=

=?utf-8?B?UjdTZGVnWVNMNU43WngrbGZwL1BFbXhYS1A3OHNKOFd3OFBvMWJWQjUyclIv?=

=?utf-8?B?Rkx6ZnpQcWZFTVJIUzRVSjBoeWtjRWRkdzk2NDIwOFVQTDgxVXovbjFNVFUy?=

=?utf-8?B?RnlJaTJxK3R0Q1hVbXpnSXJvanM5MlNqcXo4Mm92RjJBVHpIci9rbUVROTdW?=

=?utf-8?B?Q1ExdUVBanJ0Z0tKd3pjZnFDL1M0YjZ4UDVudG5Fc0t1MVFtRFpLOU5GVnJ5?=

=?utf-8?B?Y3hOYitseFM1eUpDbjZXNGVZYkpwZ3F0Q0dyazlmTlhpdnhtdGxONkpNUk9x?=

=?utf-8?B?MTc0K1ZEcXVGSDFCc09aSVBsdVcwZ0NmSStBM21tQ1RTZ3dHQUI3Zk1kNDRR?=

=?utf-8?B?QXR4aWhKamZMSXA3WlErVHVLNlNVdUtXcjZQenRCRGcvSWFJVk5NZFBJRnll?=

=?utf-8?B?NFZBdEJGUXlpSGcxcXFRMkVMK2xyRzk0MThwblJ3OE9iK003TU42c3c0a1po?=

=?utf-8?B?VFBZYVJhVy9JbmhqNVRGMlFlTThHdnJTNjZRamZTZnZJMzhjQjVJYzlJcTho?=

=?utf-8?B?Smd1SGlzdGY5S3FMOWR0RllFVUh2R1ZIS1dNWG1TM25DVGFnR3JrcjhvWG1X?=

=?utf-8?B?ZXpEaEYyaUxyclVzVHgzRjZXR3k2K3kzdHB1dFVIUVdJK0pOZVB1bjR2REw0?=

=?utf-8?B?UmJwdVk3Mmk5dlZsaDFnK0RFaVRnSTBLNkk0TjFVRFlDOVhSdGlrbE1WWHlm?=

=?utf-8?B?MVA4MTBnKzM3ZW8yeVJiT1JzSUY0UDVybUhGZnQwNU1CZHc4QmNKcHRBdW4v?=

=?utf-8?B?MlI0WmozcHZjM0YzUGRyeldlS2JnSVFBTFhZdVFhT09NUFdueHVxSURoV1Ew?=

=?utf-8?B?U2F1V3hHWlkxK3RvUVgwdDRvUEk2eEFZamMrM0ZhbkxCUThjcXFlQlA0ZmVM?=

=?utf-8?B?cEp3TlNRVUV0c0RRZ0czM0lPWm0vWC83QzhFWkdjRU81WWppcHNSMlE0TGJE?=

=?utf-8?B?TEVzR3puWlBhMmh6MEFPUzA2ZTc2NHkrWlVQYUVnMiszUVBuRjFybGlTckNS?=

=?utf-8?B?c3pGbGNJNUtheUdOakNFSnpRSEJpb2c5VU5BbjVmdEh6cWtucmpJaHhSSEx6?=

=?utf-8?B?SEJVOGhkOGxWbzc5bTQxdmRRZ1E2QnREVGx5TStEbHN2UXRPUGtmUHBjSHVN?=

=?utf-8?B?cTZMVUdZTGd0anp6M0kxYW1kc2xGcTNvdXNKYmV3TkUzRUlOSzV0Y25ObUUz?=

=?utf-8?B?aVJTOHpSNEdwM2NiWUhNSXk1NGZOM1dpUmQwVURnZEtuOHRjZGd2cjFGcEFa?=

=?utf-8?B?cWhwNUZzMzVMVnc2ZHVzaXNkVnZEYzdzb3hwYVI4SkNkOWFhcnV5TGFUYnUw?=

=?utf-8?B?TFhIRDZlSFE3blkycm9SQU5Ea0o3TW9BaGVxdHRsL0tkU1ZoUXg5MEc3UjYx?=

=?utf-8?B?cXRQUXc2bnRjZFk0VTljdmcyUEhMWTdtVld0Z2JJaVdaU0pqMWhBa2daMDNp?=

=?utf-8?Q?ALuMYPhFYL88JENPPOupr0khfGxW7QJ/F/G9hDe?=

X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-20e34.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: 788f5c31-4266-4c5e-5419-08dc4b9e4cf8

X-MS-Exchange-CrossTenant-AuthSource: TYZPR02MB6333.apcprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Mar 2024 01:04:05.0040

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR02MB8057

X-Spam_score: 6.1

X-Spam_score_int: 61

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: hello I will Do Verify the factory,Sample Collection, Negotiation,

Dropshipping, Shipping, After-Sales Follow-up, Search, Etc. Hope this finds

you well.



Content analysis details: (6.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.53.105 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.53.105 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_SIGNED Message has a ARC signature

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[aruta-liasha2024(at)hotmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[aruta-liasha2024(at)hotmail.com]

0.0 HTML_NONELEMENT_30_40 BODY: 30% to 40% of HTML elements are

non-standard

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.6 FORGED_MUA_OIMO Forged mail pretending to be from MS Outlook IMO

Subject: {SPAM?} 889088666073367241512



hello



I will Do Verify the factory,Sample Collection, Negotiation,

Dropshipping,

Shipping, After-Sales Follow-up, Search, Etc.
 
Hope this finds

you

well.
 
I can be your sourcing agent in China.



Tired of a middle-men charging your higher prices?



Lower effectively communication with factory or salesman?



Delay the factory delivery time one time and one time?



Manufacture can't accept your Mini order?



Why I am a professional China sourcing agent?



Procurement process:



1.MARKET INFORMATION COLLECTION
1>Sourcing consult 2>Trading

suggestions 3>Shipping suggestions 4>Industrial analysis



2.SOURCING REPORT WITH SUGGESTIONS
1>Sourcing report 2>

Production

time and shipping cost estimate 3>Product upgrade(Open mold)



3.SOURCING SAMPLE PRODUCTION SHIPPING
1>Sample collection and

review

2>Negotiation 3>Production arrange. 4>Shipping arrange.



Much appreciated if you could assign this to the responsible party.




We are dedicated to help small & medium overseas companies or

individual sourcing from China.



Instead of your company adjusting to the needs of a buying agent, I will

comply with



your demands so everything you want comes to fruition.



➤Just tell us what exactly you want, we can give you a satisfied result

or

plan !



For more infomation, Pls feel free to contact me



Lee



Skype:+86 15919103357



WhatsApp:+86 15919103357 



WeChat:15919103357















































‘Of course

you do; of course you know; you have known it all along; since that day in

the pony carriage. I knew that you knew it. You do not dare to mention his

name; would not that tell me that you know it? And I, I am hypocrite enough

for Mark; but my hypocrisy won’t pass muster before you. And, now,

had I not better go to Devonshire?’

SAN FRANCISCO has only one

drawback. ’Tis hard to leave. When like the pious Hans Breitmann I

‘cut that city by the sea’ it was with regrets for the pleasant

places left behind, for the men who were so clever, and the women who were

so witty, for the ‘dives,’ the beer-halls, the bucket-shops,

and the poker-hells where humanity was going to the Devil with shouting and

laughter and song and the rattle of dice-boxes. I would fain have stayed,

but I feared that an evil end would come to me when my money was all spent

and I descended to the street corner. A voice inside me said: ‘Get

out of this. Go north. Strike for Victoria and Vancouver. Bask for a day

under the shadow of the old flag.’ So I set forth from San Francisco

to Portland in Oregon: and that was a railroad run of thirty-six

hours.

"Most women like show, Eachin; but I think my daughter

Catharine be an exception. She would rejoice in the good fortune of her

household friend and playmate; but she would not value the splendid MacIan,

captain of Clan Quhele, more than the orphan Conachar."

"Admirable!"

said the Prince —"admirable! The old man will apply all this to the Duchess,

as they call her, of Rothsay. Dwining, thou shouldst be a secretis to his

Holiness the Pope, who sometimes, it is said, wants a scribe that can make

one word record two meanings. I will subscribe it, and have the praise of

the device."

The four now descended the hill, and in a few minutes

gained the theatre of the struggle. The wapitis had not moved. They were

pushing at each other like a couple of rams, and seemed to be inseparably

glued together.

There were no more incidents till I reached the

Palace Hotel, a seven-storied warren of humanity with a thousand rooms in

it. All the travel-books will tell you about hotel arrangements in this

country. They should be seen to be appreciated. Understand clearly — and

this letter is written after a thousand miles of experiences — that money

will not buy you service in the West.

‘I think they are taking

to it pretty freely then. We have unprotected young women all about the

world.’

‘Exactly,’ said Lord Lufton. ‘She

will do exceedingly well for Justinia.’ Now this was not good-natured

on the part of Lord Lufton; and his mother felt it the more strongly,

inasmuch as it seemed to signify that he was setting his back up against

the Lufton-Grantly alliance. She had been pretty sure that he would do so

in the event of his suspecting that a plot was being laid to catch him; and

now it almost appeared that he did suspect such a plot. Why else sarcasm as

to Griselda doing very well for his sister?

How indeed!

"Do you

find the defendant guilty or not guilty?"

There was a silence, then

the General said:

‘I can do without help, thank you.’

"And then you got rid of it?"

‘I cannot absolutely marry

the wife of her choosing, if you mean that,’ said Lord Lufton. They

went on walking about the garden for an hour, but they hardly got any

farther than the point to which we have now brought them. Mark Robarts

could not make up his mind on the spur of the moment; nor, as he said more

than once to Lord Lufton, could he be at all sure that Lucy would in any

way be guided by him. It was, therefore, at last settled between them that

Lord Lufton should come to the parsonage immediately after breakfast on the

following morning. It was agreed also that the dinner had better not come

off, and Robarts promised that he would, if possible, have determined by

the morning as to what advice he would give his sister. He went directly

home to the parsonage from Framley Court, feeling that he was altogether in

the dark till he should have consulted with his wife. How would he feel if

Lucy were to become Lady Lufton? And how would he look Lady Lufton in the

face in telling her that such was to be his sister’s destiny? On

returning home he immediately found his wife, and had not been closeted

with her five minutes before he knew, at any rate, all that she knew.

‘And you mean to say that she does love him?’ said

Mark.

Did she despair? Not yet. It was impossible to get back to the

American continent in the teeth of the terrible wind which was driving the

island before it at a rapid pace, taking it out two hundred miles in

thirty-six hours, and assisted by the current from the coast.



I am quite sure it is not that which hinders it. You would not call

yourself plain; and even plain women are married every day, and are loved

too, as well as pretty women.’

But as regards Mrs Grantly it

may be said that she moved in an unending procession of stately ovation. It

must not be supposed that she continually talked to her friends and

neighbours of Lord Dumbello and the marchioness. She was by far too wise

for such folly as that. The coming alliance having been once announced, the

name of Hartletop was hardly mentioned by her out of her own domestic

circle. But she assumed, with an ease that was surprising even to herself,

the airs and graces of a mighty woman. She went through her work of morning

calls as though it were her business to be affable to the country gentry.

She astonished her sister, the dean’s wife, by the simplicity of her

grandeur; and condescended to Mrs Proudie in a manner which nearly broke

that lady’s heart. ‘I shall be even with her yet,’ said

Mrs Proudie to herself, who had contrived to learn various very deleterious

circumstances respecting the Hartletop family since the news about Lord

Dumbello and Griselda had become known to her. Griselda herself was carried

about in the procession, taking but little part in it of her own, like an

Eastern god. She suffered her mother’s caresses and smiled in her

mother’s face as she listened to her own praises, but her triumph was

apparently within. To no one did she say much on the subject, and greatly

disgusted the old family housekeeper by declining altogether to discuss the

future Dumbello menage. To her aunt, Mrs Arabin, who strove hard to lead

her into some open-hearted speech as to her future aspirations, she was

perfectly impassive. ‘Oh, yes, aunt, of course,’ and ‘

I’ll think about it, Aunt Eleanor,’ or ‘Of course I shall

do that if Lord Dumbello wishes it.’ Nothing beyond this could be got

from her; and so, after a half dozen ineffectual attempts, Mrs Arabin

abandoned the matter.

‘Framley, July 185-‘MY DEAR SOWERBY,

‘I will sign no more bills on any consideration. ‘Yours truly,

MARK ROBARTS’

"Well, then, what has happened?" said the

Lieutenant in a broken voice, his eyes filling with tears.

The Court

of Quarter Sessions, Part I, where this trial was to take place, was held

in famous Independence Hall, at Sixth and Chestnut Streets, which was at

this time, as it had been for all of a century before, the center of local

executive and judicial life. It was a low two-story building of red brick,

with a white wooden central tower of old Dutch and English derivation,

compounded of the square, the circle, and the octagon. The total structure

consisted of a central portion and two T-shaped wings lying to the right

and left, whose small, oval-topped old-fashioned windows and doors were set

with those many-paned sashes so much admired by those who love what is

known as Colonial architecture. Here, and in an addition known as State

House Row (since torn down), which extended from the rear of the building

toward Walnut Street, were located the offices of the mayor, the chief of

police, the city treasurer, the chambers of council, and all the other

important and executive offices of the city, together with the four

branches of Quarter Sessions, which sat to hear the growing docket of

criminal cases. The mammoth city hall which was subsequently completed at

Broad and Market Streets was then building.

‘If I had not

learned it as a fact, I would not have believed it, even of Lord Brock,

’ said the archdeacon.

"There are no cards on you. What’s

your name?"

He had been found on the hearth-rug in his dressing-room;

having apparently been seized with a fit, in the act of burning some paper.

The ashes were discovered close by him, just inside the fender. On his

recovery, his first anxiety was to know if a letter had been burnt.

Satisfied on this point, he had ordered the servants to assemble round his

bed, and had peremptorily forbidden them to open the door to their mistress,

if she ever returned at any future time to the house. Regina’s

questions and remonstrances, when she was left alone with him, were

answered, once for all, in these pitiless terms:—"If you wish to deserve

the fatherly interest that I take in you, do as I do: forget that such a

person as your aunt ever existed. We shall quarrel, if you ever mention her

name in my hearing again." This said, he had instantly changed the subject;

instructing Regina to write an excuse to "Mr. Melton" (otherwise, the

middle-aged rival), with whom he had been engaged to dine that evening.

Relating this latter event, Regina’s ever-ready gratitude overflowed

in the direction of Mr. Melton. "He was so kind! he left his guests in the

evening, and came and sat with my uncle for nearly an hour." Amelius made

no remark on this; he led the conversation back to the subject of Mrs.

Farnaby. "She once spoke to me of her lawyers," he said. "Do they know

nothing about her?"

"Yes."

"Well, I can’t say that

myself. It’s fascinating, though. Your partner makes such a

difference. Mrs. Cowperwood doesn’t like it as much as I

do."

Let them look at the matter in any way the punishment was very

heavy.

"That may well be done," said Sir Patrick Charteris, "and yet

leave the Fair City rich enough to pay her debts to Henry Wynd, of which

every man of us is a better judge than him self, who is blinded with an

unavailing nicety, which men call modesty. And if the burgh be too poor for

this, the provost will bear his share. The Rover’s golden angels have

not all taken flight yet."

"Damn!" said Cowperwood gloomily. "I wish

I were out of this stock-jobbing business. I wish I had never gotten into

it." He returned to his drawing-room and scanned both accounts most

carefully.

MacLouis, with several of the guards, rushed into the

apartment.

He remained for a space silent, and intensely thoughtful,

with downcast eyes, a lowering brow, and folded arms. At length he raised

his hands, and said: "Father,— for such you have been to me — I am about to

tell you a secret. Reason and pride both advise me to be silent, but fate

urges me, and must be obeyed. I am about to lodge in you the deepest and

dearest secret that man ever confided to man. But beware — end this

conference how it will — beware how you ever breathe a syllable of what I

am now to trust to you; for know that, were you to do so in the most remote

corner of Scotland, I have ears to hear it even there, and a hand and

poniard to reach a traitor’s bosom. I am — but the word will not out!

"

‘They are making out a list of the things,’ said Mrs

Robarts.

"How much longer am I to be kept kicking my heels in this

wretched hole?" the woman asked sulkily.

‘Well, sir; I hope my

mode of life may not require it; but that is not exactly to the point; what

I wish to know is, whether you will speak to Mr Robarts?’

‘I believe my husband does as much of his own duty as any

clergyman in the whole diocese,’ said Mrs Robarts, now again in

tears.

‘Don’t let me alarm you,’ said Harold,

seeing that her face gathered solemnity from his. ‘I suppose I carry

the marks of a past agitation. It relates entirely to troubles of my own —

of my own family. No one beyond is involved in them.’

Butler

walked heavily in and took his seat.

"You have spoke a stinging word,

daughter; but you know not what has happened. Kiss him, Catharine, in token

of forgiveness."

Mr Lyon looked at the speaker with a pitying smile

and a subdued ‘h’m — m — m’, which Harold took for a sign

of satisfaction. He was soon undeceived.

But Mr Lyon was not alone

when Felix entered. Mr Nuttwood, the grocer, who was one of the deacons,

was complaining to him about the obstinate demeanour of the singers, who

had declined to change the tunes in accordance with a change in the

selection of hymns, and had stretched short metre into long out of pure

wilfulness and defiance, irreverently adapting the most sacred

monosyllables to a multitude of wandering quavers, arranged, it was to be

feared, by some musician who was inspired by conceit rather than by the

true spirit of psalmody.

"And many gentlemen are not better

off. Curates, for instance. Do you see what I am coming to, my darling?

"

Wilfrid had obeyed impulse when he ran down into Cork Street. Ever

since the sudden breaking off of that fierce undignified scuffle at Royston,

and the sight of Dinny standing in the car covering her eyes with a hand,

his feelings towards her had been terribly confused. Now at the sudden

sight, sound, scent of her, warmth had rushed up in him and spent itself in

kisses; but the moment she left him his insane feeling had returned and

hurled him down into a London where at least one could walk and meet no

one. He went south and became involved with a queue of people trying to get

into ‘His Majesty’s.’ He stood among them thinking:

‘As well in here as anywhere.’ But, just as his turn came, he

broke away and branched off eastward; passed through Covent Garden,

desolate and smelling of garbage; and came out into Ludgate Hill.

Hereabouts he was reminded by scent of fish that he had eaten nothing since

breakfast. And, going into a restaurant, he drank a cocktail and ate some

hors-d’oeuvre. Asking for a sheet of paper and envelope, he

wrote:



包厢内。



余明远见客人已到,立马起身相迎:“魏哥,多谢你昨天在货场不杀之恩啊。”



没错,来人正是闸南码帮坐堂—魏相佐。余明远今天能请得动他,是通过一区的一位朋友引荐,而这个人对魏相佐有些恩情。<

/P>

“你说大了。”魏相佐与余明远握手,话语简洁地回道:“昨天我走,是因为之前我不知道货被徐虎劫了,谈不上什么不杀之恩。”



“呵呵,魏哥快人快语,来来,请坐!”余明远硬着头皮找了个台阶下,伸手将对方请到了客座上。



苏天御打量着这个身材壮硕,面容刚毅的男子,站在东道主的立场,帮其摆了碗筷,倒了白酒。



“之前我就听说魏哥在码头的为人,但一直……。”余明远还想用商场的行酒令,捧对方几句。



魏相佐直接大咧咧地摆手,看着桌上的菜肴回道:“来这是吃饭的,不是相互拍马屁的。余总,有什么话,你就直说,有老许那边的关系,能办

的,我一定会办,这是我欠他的。”



余明远见对方如此直接,那也就调整了谈话思路,没有再绕弯子:“魏哥,那我就直说了。码帮,港口关系,现如今和我们公司闹成这样,那肯

定会影响到海上生意,所以我现在只能自己找出路,想问问你,咱们之间有没有合作的可能。”



魏相佐拿着筷子,毫不客气地吃着餐桌上的菜肴,轻笑着回道:“你是想跟码帮合作,还是想跟我合作?”



“当然想跟你合作啊!”余明远笑着回道。



“那不可能。”魏相佐吃相非常粗犷,两口鱼肉下嘴,嘴角已充满了油渍:“越过码帮,咱们单玩,这肯定不行。”







“我给你四成利,比之前唐柏青拿的还要多一成。”余明远继续说道:“活不用你干,你只要负责海面关系,让货安全落地就行。”



“不是这个事儿。”魏相佐摇头。



余明远看着他的表情,斟酌半晌后说道:“码帮是有组织的字头,里面规矩很多,如果你愿意跟我合作,回头你要想当帮带,进总工会,我也可

以给你找门路,给你钱和人脉的支持。”



“呵呵!”魏相佐听到这话,扭头看向余明远笑了笑:“你能给我开这么大的价码,那为啥不能跟徐虎服软呢?你要给他四成利,而且还不用他

干活,那我相信昨天的不愉快,他分分钟就能忘了。”



 



“不,这不一样。”余明远摆手:“徐虎跟我谈,是想压着我挣钱,今天能要四成,明天就能要六成。而且他准备让我把脏帮踢了,等于是替我

在做主,这么一块干买卖,那肯定是我接受不了的。”



“也有道理。”魏相佐夹了一块鱼肉:“但还是不行,我跟你合作不了。”



余明远看着他:“呵呵,魏哥,你是不是有些不放心我的为人啊?”



“这话怎么讲?”



“……据我所知,你和徐虎在码帮的一些事情上,也有不同想法。”余明远委婉地说道:“你这么抗拒我,不等于是在给徐虎抬价吗?放着四成

利不赚,却维护徐虎的面子,这……这我有点想不通啊。”



魏相佐双眼看着桌上的菜肴,用筷子指了一圈说道:“你看桌上这些菜,有素的,有荤的,有清汤的,也有干锅的,但你随便拿出一样,不管菜

品质量多高,它也不叫席啊!码帮虽然分支多,人也多,内部有些混乱,但它凑在一块,才能叫码帮。政F给我们面子,鬼佬给我们面子,海关,海警,警署也要给我们面子

,这是为啥啊?很简单,就四个字,人多势众!”



余明远听到这话,无言以对。



“徐虎这人做事,是不太讨我喜欢,但我和他是拜过一个门子,认过一个师傅的同门师兄弟。你们之间打起来了,回头我却把买卖接了,那不等

于是捅了徐虎一刀,挑起码帮内斗吗?”魏相佐放下筷子,扭头看着余明远反问。



“魏哥,我觉得……!”



“小余,从我个人的角度来讲,我觉得这事也没必要非得闹的你死我活。”魏相佐打断着余明远的话,低声继续说道:“……你还是去找徐虎谈

,如果你俩能达成某种共识,我愿意在中间调和一下。你走一批货,给码帮一次抽水的钱,咱们都收了刀,和气生财,也能让下面的兄弟过得好一点。”


余明远听到这里,已经知道自己无法说通魏相佐了。



“那就这样,”魏相佐起身:“我先走了。”



话音落,魏相佐孤身一人向外走去,而余明远皱着眉头,忍不住问了一句:“如果我和徐虎谈不妥呢?”



魏相佐回头,毫不犹豫地回道:“我们是靠港吃饭的,你踩线了,不交钱,肯定是不行的。”



说完,魏相佐推门离去。



余明远松了松领口,无语地骂道:“妈的,这还碰到个死脑筋!”



“是。”苏天御虽然嘴上附和了一句,但心里却对魏相佐这个人有了一些不同的看法。



谈崩了,余明远心情不太好,根本没心思吃桌上的酒席,伸手拿起外套,就奔着门外走去。



苏天御找来了经理结账,对方却告诉他,魏相佐已经买完单了。



……



走码帮内部这条线,很显然是行不通了,所以接下来的几天,苏天御,余明远二人都在忙着找新的官方关系,不过效果并不好。因为徐虎这几天

也啥都没干,专门拎着各种礼品打点港口黑白两道的关系,根本不给余明远切入的机会。



在海上做的生意,现在却被封港了。



货进不来,公司就没事干,所以明远公司几乎陷入到了绝境中。



不过令人意外的是,当公司面临倒闭的时候,余明远反而没有那么上火了,心也踏实了,因为最坏的结果已经出现了。



这天中午。



苏天御,苏天北,白宏伯,孔正辉四人来到了余家,准备找他聊聊,因为这几天苏天御没少打听港口的事,他心里已经多少有点想法了。



众人一进余家别苑,白宏伯就见到安七七等六七个姑娘,正坐在游泳池旁边聊天。



天空阳光绚丽,院内有山有水,绿植丰茂,微风徐徐吹过,一群姑娘们坐在草坪上吃着零食和冷餐,聊着天,画着写生,景色美不胜收。



白宏伯看到这个景象,当即作诗一首:“小桥流水,风向北,七位佳人,吃火腿,要问哥哥哪里美,我要伸手摸大腿。”



这个诗是即兴发挥的,完全没有任何征兆,所以另外三个人听完后,当场就懵了。



“……你是……真踏马……有才!”苏天北直接服了。