DHL Phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Apr 2024 07:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s1Qyp-000000006kp-3Xa9

for dave@doctor.nl2k.ab.ca;

Mon, 29 Apr 2024 07:23:39 -0600

Resent-From: The Doctor

Resent-Date: Mon, 29 Apr 2024 07:23:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cloudhost-10613980.us-midwest-2.nxcli.net ([199.189.225.34]:55042 helo=cloudhost-11099524.us-midwest-2.nxcli.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s1MZm-00000000NJT-02Is

for doctor@doctor.nl2k.ab.ca;

Mon, 29 Apr 2024 02:41:35 -0600

Received: (qmail 22521 invoked by uid 10093); 29 Apr 2024 08:37:44 +0000

Date: 29 Apr 2024 08:37:44 +0000

Message-ID: <20240429083744.22514.qmail@cloudhost-11099524.us-midwest-2.nxcli.net>

To: doctor@doctor.nl2k.ab.ca

Subject: Update: Shipping Status - CN - 20585915 - Monday, April 29, 2024 - Your shipment is in customs clearance.

X-PHP-Originating-Script: 10093:wp-admin.php

MIME-Version: 1.0

Content-type: text/html; charset=UTF-8

From: Express Package Shipping

X-Spam_score: 7.6

X-Spam_score_int: 76

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Outstanding Delivery Important Notice: Outstanding Delivery





Content analysis details: (7.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[199.189.225.34 listed in dnsbl.ahbl.org]

[199.189.225.34 listed in dnsbl.ahbl.org]

[199.189.225.34 listed in dnsbl.ahbl.org]

[199.189.225.34 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[199.189.225.34 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[199.189.225.34 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[199.189.225.34 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[199.189.225.34 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[199.189.225.34 listed in will-spam-for-food.eu.org]

[199.189.225.34 listed in will-spam-for-food.eu.org]

[199.189.225.34 listed in will-spam-for-food.eu.org]

[199.189.225.34 listed in will-spam-for-food.eu.org]

[199.189.225.34 listed in will-spam-for-food.eu.org]

[199.189.225.34 listed in will-spam-for-food.eu.org]

[199.189.225.34 listed in will-spam-for-food.eu.org]

[199.189.225.34 listed in will-spam-for-food.eu.org]

1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)

[199.189.225.34 listed in ix.dnsbl.manitu.net]

0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} Update: Shipping Status - CN - 20585915 - Monday, April 29, 2024 - Your shipment is in customs clearance.















Outstanding Delivery









Important Notice: Outstanding Delivery






Dear Customer,



We would like to urgently inform you that your shipment cannot be delivered at the moment. It is currently in the processing stage and will be dispatched to you shortly.



Please note that there has been an unexpected delay. We sincerely apologize for any inconvenience caused and thank you for your understanding and patience.



Check Shipment Status >>>





















Delivery Time A new delivery date will be updated
Amount Due EUR 1.85 (One Euro and Eighty-Five Cents) or the equivalent amount in your local currency


Note: We are making every effort to deliver your shipment as quickly as possible. Please check the shipment status regularly for further updates.





International GmbH | Charles-de-Gaulle-Straße 20 | 53113 Bonn, Germany | © 2024 EXPRESS International GmbH. All rights reserved.






Web Design / App / SEO spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Apr 2024 07:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s1QzM-000000006qq-3GEY

for dave@doctor.nl2k.ab.ca;

Mon, 29 Apr 2024 07:24:12 -0600

Resent-From: The Doctor

Resent-Date: Mon, 29 Apr 2024 07:24:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f173.google.com ([209.85.214.173]:42218)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s1Nky-0000000077A-2ecQ

for sales@nk.ca;

Mon, 29 Apr 2024 03:57:13 -0600

Received: by mail-pl1-f173.google.com with SMTP id d9443c01a7336-1e4c4fb6af3so28238765ad.0

for ; Mon, 29 Apr 2024 02:55:14 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dmatexas-com.20230601.gappssmtp.com; s=20230601; t=1714384508; x=1714989308; darn=nk.ca;

h=message-id:content-transfer-encoding:mime-version:subject:date

:reply-to:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=RyRutx6RXytuvTpPzmqNXa2CxZbwk7M96RXAq//WY9g=;

b=FeXTkF/vGiIMLco9ZPLuKR3Q9eRNnRppplijF/fqv8r7y+UYUSZshAMj+CWLUhrs+l

DUgWrBCB0XzJG0m8NGTGXJfc3oscd96SUxlnMEPxmDViAIwmda0zDcIzS9G97P3MRKyK

Aiqm6fGgEvyh8s1QjVMgEBmsmM34JU4g61QHXbfo2qZGy6o/PmMbyWB3tAX2j9gh/Kt0

dcdYLH/AbWkxOiYfGXzK+4uudvETZ78mTTT72uF+jhBDK9tKmef3kR0IKEOqhUeUAhK3

5lQ5BtKJ60MUMUht+ZjdqXE+D1SmppJ599jBxacDlZlZxX4k/VbWoxa6FcZfLpMpfu0s

ZRrw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1714384508; x=1714989308;

h=message-id:content-transfer-encoding:mime-version:subject:date

:reply-to:to:from:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=RyRutx6RXytuvTpPzmqNXa2CxZbwk7M96RXAq//WY9g=;

b=QIx14oxjevfZHEd/8B0z7RwxPebrCQg/S8qrmIYLHwNY/PPD/A9Fsg2RgKulDBPNQB

1J2UYqvtFh3MrhrLEsMDeIrYnjHVYkp+keW7XAIlHnBkvhFK/gU8iUfrvEmNBEH3oVj0

PHQ7OuhzudZ2rE5tGvxoKnhZ1TpEc4XnNxCeVbCQSry6R0rzVU8tKRzsg/sDno/QKQJ5

a8ZwUXsZLeyXfYyjVqvmmJviKB3UIvgZXLnauJuHRoJfIr+Q/TXBQtpdnhvuIvpWrcOQ

D7sLqbP4HNwBJon0x2aIobl6dGu0lKvbmUQHwq82NDVSQ4z+dPDzlL2LIuJBbbKT4Rqw

vBwA==

X-Gm-Message-State: AOJu0YzMC6Pq2JsyUhXf0qEyCklbVU7O/G5/3OVEC/waSjH//3WbjLek

TkyYJ0GHdnPnebz1RAawHtOHfo8np0Ymg6zC9iH7BfUqGcJa93LSlx0FZ7AlLI5Kiqg5L4ebKZY

P

X-Google-Smtp-Source: AGHT+IF1Q2t6XPM49Zwl2i2EGxXXuSBbW/p5JK8Y6ipBFbLeHBu0g2HPYOQpWPXWGm+HaLAVnrjCwQ==

X-Received: by 2002:a17:902:ecc4:b0:1e2:58b7:2dd6 with SMTP id a4-20020a170902ecc400b001e258b72dd6mr9027695plh.21.1714384507911;

Mon, 29 Apr 2024 02:55:07 -0700 (PDT)

Received: from DESKTOP6QH7NHO ([103.165.168.59])

by smtp.gmail.com with ESMTPSA id b1-20020a170902d30100b001e451abffebsm19935969plc.86.2024.04.29.02.55.06

for

(version=TLS1 cipher=ECDHE-ECDSA-AES128-SHA bits=128/128);

Mon, 29 Apr 2024 02:55:07 -0700 (PDT)

From: Tom Marcus

X-Google-Original-From: "Tom Marcus"

To: "sales@nk.ca"

Reply-To: tom@bluemez.com

Date: Mon, 29 Apr 2024 15:24:55 +0530

Subject: Re: nk.ca errors !!!

MIME-Version: 1.0

Content-Type: text/plain; charset=iso-8859-1

Content-Transfer-Encoding: quoted-printable

Message-ID:

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Team of nk.ca, I hope you are doing great today! I'm

not sure if you knew that your website nk.ca has some problems that you might

need to consider looking into. I spent 5-6 minutes on your website and found

those errors, which I have listed below:



Content analysis details: (6.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.173 listed in dnsbl.ahbl.org]

[209.85.214.173 listed in dnsbl.ahbl.org]

[209.85.214.173 listed in dnsbl.ahbl.org]

[209.85.214.173 listed in dnsbl.ahbl.org]

[103.165.168.59 listed in dnsbl.ahbl.org]

[103.165.168.59 listed in dnsbl.ahbl.org]

[103.165.168.59 listed in dnsbl.ahbl.org]

[103.165.168.59 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.173 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.173 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.173 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.173 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.214.173 listed in will-spam-for-food.eu.org]

[209.85.214.173 listed in will-spam-for-food.eu.org]

[209.85.214.173 listed in will-spam-for-food.eu.org]

[209.85.214.173 listed in will-spam-for-food.eu.org]

[209.85.214.173 listed in will-spam-for-food.eu.org]

[209.85.214.173 listed in will-spam-for-food.eu.org]

[209.85.214.173 listed in will-spam-for-food.eu.org]

[209.85.214.173 listed in will-spam-for-food.eu.org]

[103.165.168.59 listed in will-spam-for-food.eu.org]

[103.165.168.59 listed in will-spam-for-food.eu.org]

[103.165.168.59 listed in will-spam-for-food.eu.org]

[103.165.168.59 listed in will-spam-for-food.eu.org]

[103.165.168.59 listed in will-spam-for-food.eu.org]

[103.165.168.59 listed in will-spam-for-food.eu.org]

[103.165.168.59 listed in will-spam-for-food.eu.org]

[103.165.168.59 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.173 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.173 listed in wl.mailspike.net]

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} Re: nk.ca errors !!!



Dear Team of nk=2Eca,=0D=0AI hope you are doing great today=21=0D=0A=0D=0A=

I=27m not sure if you knew that your website nk=2Eca has some problems th=

at you might need to consider looking into=2E I spent 5-6 minutes on your=

website and found those errors, which I have listed below:=0D=0A=0D=0A- =

The loading speed of the site is less ( Slow loading speed can lead to hi=

gh bounce rates )=2E Check on your Google Analytics for the same=2E=0D=0A=

- It=27s not fully optimized for all type of mobile screens ( Affecting u=

ser experience )=2E=0D=0A- Cross-browser compatibility issues found=2E It=

doesn=27t adjust properly when you resize the page on different browsers=

=A0(Affecting user experience)=2E=0D=0A- Non-functional contact form as t=

he server rejects SMTP connections sometime=2E( You might be losing a pot=

ential client/visitor on your site as the submission fails sometime=2E)=0D=

=0A- The design can be improved to put the site ahead of your competitors=

=2E=0D=0A=0D=0AAn incredible site can be a great source of business devel=

opment=2E A poor site can cause harm to your brand=27s reputation=2E=0D=0A=

=0D=0AI actually do web design for living, so I figured to reach out and =

let you know that there is serious room for dead easy and affordable impr=

ovement=2E=0D=0A=0D=0AI can develop the website on a more advanced platfo=

rm at an affordable price=2E That price also includes making it fully mob=

ile responsive, which will support all modern device screens=2E=0D=0A=0D=0A=

Is that something you=27d be interested in? Reply =22YES=22 to get the de=

tailed plan/proposal to fix the above mentioned issues=2E=0D=0A=0D=0A=0D=0A=

Best regards,=0D=0A=0D=0ATom Marcus=0D=0ABusiness Development Manager=0D=0A=

Phone: +1(408) 600-2830=0D=0ASkype: business=40bluemez=2Ecom =0D=0ABlueme=

z Inc=2E =7C www=2Ebluemez=2Ecom=0D=0A-----------------------------------=

-------------------------=0D=0AP=2ES-1: If you want to receive detailed p=

roposal, please feel free to reply =22YES=22, We will get back to you wit=

h details=2E=0D=0A=0D=0AP=2ES-2: If you find this email unsolicited, plea=

se reply with =22REMOVE=22 in the subject line and we will take care that=

you don=27t receive any further promotional mail=2E You can also unsubsc=

ribe your email using the the below link:=0D=0A=0D=0AUnsubscribe here: ht=

tps://bluemez=2Ecom/un/

Web Design / App / SEO spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Apr 2024 07:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s1R08-000000006wp-03X4

for dave@doctor.nl2k.ab.ca;

Mon, 29 Apr 2024 07:25:00 -0600

Resent-From: The Doctor

Resent-Date: Mon, 29 Apr 2024 07:24:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dbaeur03olkn2091.outbound.protection.outlook.com ([40.92.58.91]:59745 helo=EUR03-DBA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s1QX6-000000002xW-2AHP

for root@nk.ca;

Mon, 29 Apr 2024 06:55:05 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=gTQ4B6ZBvKTtX4zKaSDEJGRekBZKQbCG9J6Qf7ymrsdQNG1Rw2P7aUnhXGxMSUmpHuTHinGGKMwmTrQ9sQbgcNTA4JOg003RN62v9ikKkL50xnssa2T3qpYbUnJFd6MwjuOfXyCzqzLb/uUx1NZsG742LKppIde+KU/LEMJdo+x8kTFV3yH9U2v2hMyO0hGYC80qaFfbvT+DttmKgFJt4VSAywxR2am7jW9+lvlZ6Vd6FxlfJswWEnU4X+N2UitaK9QUaKPoBrKSFA6Ppx5qYt6aafzoZeWzdzoHuHoz6EQdMWAmm31TepxaVmZRtwBOGxAWrrFmpLldov9IHERd/g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=EWFIdl5baqax351PBNRvmK9sAwvIT/QipY4MqZhUNFk=;

b=layXKn8SsrEor/JzP8ITaY9Jqw2MEZHDy76mCUPs5UIqJYFUG4ARR/m6HpcpDltG6zz2ueiHcg/4keZ9hGvD5Z+bJnHHKX0H4kBaFEOPBkvoPiY4n2ESXzjcuzsteNPFMjzWGhyXtrRGsAXqFQl7z8n6Gj1JHX/oFNTeYL8Lw7xp3Xim9tp7aGxbmK6fYKOkxetiyCRE0gFEJEb7+FY56/rr9o++Ne1LG+/Oi/Q8iZvK8BhVAfX+/C0CjJNyFc0KX8cKgh+SSSA73l+Ljyo/16LZpd5hIxA5B0mdAotnGj9BnDOAZ/NEwtrxaLln9SZHP+lTpV/f8k8+Ip+DuZw3vw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=EWFIdl5baqax351PBNRvmK9sAwvIT/QipY4MqZhUNFk=;

b=E4W5Bm/0lb/KPbcVnwdjEcejTL3ux4+W8wMPaxunn8R8gSRTJHz3nK4fDx6bKn1+HadYWlSA46WhaQ4QwpY3ILeNGl0f/+/rhTMvzWXtrqO6Khsqxaa33tuNx+49UNw+SrF81Y0GO7PmUWZpPoKfI5PHmut7f+pAv8NYGo7iLjRvUvwU9Z8/o4FsSHI+REpKNbeVPECxPQBiGcpWLOJs+Cex3zHN/NA+r5FHAzICr2rFUP3jps20HXc7xh2yowH8XuKfE3Z8PxMdd4WUiNRs+6KqzrfbiddYmAjETVTVJhWFw1EZB7eNVgkqyBA+CqBsQVUqg/wyPwlpZlfKrLxI/w==

Received: from DB9PR10MB5164.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:326::14)

by DB8PR10MB3531.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:13f::11) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7519.22; Mon, 29 Apr

2024 12:52:48 +0000

Received: from DB9PR10MB5164.EURPRD10.PROD.OUTLOOK.COM

([fe80::ddd0:626c:bf5b:4b5]) by DB9PR10MB5164.EURPRD10.PROD.OUTLOOK.COM

([fe80::ddd0:626c:bf5b:4b5%6]) with mapi id 15.20.7519.031; Mon, 29 Apr 2024

12:52:48 +0000

From: Jullianna Klingensmith

Subject: Proposal

Thread-Topic: Proposal

Thread-Index: AQHamjQNWq4v5qxgnEOtSXiTSG4WDg==

Date: Mon, 29 Apr 2024 12:52:47 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [GSrVYIdhIsiFTzLCUr+EDLqaguS8/cq+]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: DB9PR10MB5164:EE_|DB8PR10MB3531:EE_

x-ms-office365-filtering-correlation-id: dd8908fc-8642-46fa-0458-08dc684b4578

x-microsoft-antispam:

BCL:0;ARA:14566002|461199019|102099023|3412199016|440099019;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?11FiRKxsU0zJ4O2S8dfkqoKz9UwAa9/bCukG0T5BFtsb6mJQFNaHyJcM?=

=?Windows-1252?Q?EKaZJsL8i5lUU7c9sb9h9irVhBKRa/iiAk0eVVuhjUR/PoZmcg4DNdjg?=

=?Windows-1252?Q?4syjaFusUmn8OriaVwPf+k4sgzzvAPsvyyK/S82ooPtBBBUSI0Z01iI/?=

=?Windows-1252?Q?yZX6gCUOvp2PpSVz0LxvO91wKVldqvZhPvhfEKvOiM+CHHh8G63Bc1tF?=

=?Windows-1252?Q?VdUZz/1lScein0IK89nUdnr3v8T9udOhB691tDG6qKlqxq9nno2iBCS1?=

=?Windows-1252?Q?xVL28OVije1KoB7ybjs2PivOSecSjEfYGbjLqx8ptxB0+V7uqWxXfIgM?=

=?Windows-1252?Q?WBGd9L6fzLxD13BsHSTFwsfeTIyANMgLwFrFOZiK+E3Zh4grca6mxHf6?=

=?Windows-1252?Q?4pYeFxL6HINDiZkWIWBIq2S0TJAhKS45AugeYfNE5zfakbTfCuz8jg6V?=

=?Windows-1252?Q?+sOxXiZuGNDlT8nQY3IV/RWnlIf+eY29UGot3jfPJnF4kyxrfzvFWPwZ?=

=?Windows-1252?Q?c1kIloJUxo5lbufNmPvsvK1Rpm7lAAZkvriAVFJLJoOfHj+i1Koi7z7M?=

=?Windows-1252?Q?8KHOoBWh57I/L5LIiWffxd1eHdGCoiyL7nFWGHTCGiAnVujuJYW4NxFf?=

=?Windows-1252?Q?NOrCMCPVZP9isCZ740lP8sw7L5jJMvnOnggCgb/RznZBxyAgxjlmY++8?=

=?Windows-1252?Q?3XSGhjrNZAe/JvJwPIXXxtunJB7cnWWGDT6Z6/ytyLE0N8J8+SrqYC6X?=

=?Windows-1252?Q?FB0gEZopWwdhKFgaQtv6kP4tRBD+xER8uq7bRBHrMQ0cgckxVGLj5gQd?=

=?Windows-1252?Q?npCtFI9+wLBJUMn/vVGezm/Lyj8Srphl6J5LYdHmbwO3CY0bbdqFxyaz?=

=?Windows-1252?Q?M9YUEPCy86r7QIoU2n7GjpOzL+2s4iL9akZv7t542cSBRmcwApKd1yyE?=

=?Windows-1252?Q?Rv8iOmDY12ltNwIBWyMVBdlXo8UWwaxBNHIBI6Q9xRrKM4pKktDp9N9z?=

=?Windows-1252?Q?IRAHo0SYZTCAtqIOxtH8XylCbkl2O/IKhv8XvvdunwVY9VCkGQwZWnvd?=

=?Windows-1252?Q?YxBZB37oLJEu6OeNGXqAkz0aBeEEe7OfIiooyEzmptyiS/9mzf8whx/S?=

=?Windows-1252?Q?f5ynTsgw6Txk9f7rMn7kvFqhPETcYmvKxFQfj710dEEnoA9KadeMwYKB?=

=?Windows-1252?Q?srN9swDRXIawYPOWY7f2KezOrvIbg6cLm36ve+JTuNfYYjBt6G2QLowk?=

=?Windows-1252?Q?m6GlSXsJdJuxrYjzt0vfTcw3rh8/wpARMbTAX8wykf+pOBqB6MUUssZt?=

=?Windows-1252?Q?+ZzIHPKtn/zv6QmhOiJmRZJjpzQ=3D?=

Content-Type: multipart/alternative;

boundary="_000_DB9PR10MB5164A98E697D4AE473BAE930C11B2DB9PR10MB5164EURP_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-6b909.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: DB9PR10MB5164.EURPRD10.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: dd8908fc-8642-46fa-0458-08dc684b4578

X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Apr 2024 12:52:47.7013

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB8PR10MB3531

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Hope you are well. I am affiliated with an SEO company

that has helped over 200 businesses rank on the 1st Page of GOOGLE for even

the most competitive Industries.



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.58.91 listed in dnsbl.ahbl.org]

[40.92.58.91 listed in dnsbl.ahbl.org]

[40.92.58.91 listed in dnsbl.ahbl.org]

[40.92.58.91 listed in dnsbl.ahbl.org]

[2603:10a6:10:326:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:326:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:326:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:326:0:0:0:14 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.58.91 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.58.91 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.58.91 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.58.91 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[40.92.58.91 listed in will-spam-for-food.eu.org]

[40.92.58.91 listed in will-spam-for-food.eu.org]

[40.92.58.91 listed in will-spam-for-food.eu.org]

[40.92.58.91 listed in will-spam-for-food.eu.org]

[40.92.58.91 listed in will-spam-for-food.eu.org]

[40.92.58.91 listed in will-spam-for-food.eu.org]

[40.92.58.91 listed in will-spam-for-food.eu.org]

[40.92.58.91 listed in will-spam-for-food.eu.org]

[2603:10a6:10:326:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:326:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:326:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:326:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:326:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:326:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:326:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:326:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.58.91 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.58.91 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[julliannawakli(at)hotmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Proposal



--_000_DB9PR10MB5164A98E697D4AE473BAE930C11B2DB9PR10MB5164EURP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,







Hope you are well.







I am affiliated with an SEO company that has helped over 200 businesses ran=

k on the 1st Page of GOOGLE for even the most competitive Industries.







Let me know if you are interested and we will send you a Full proposal and =

price list .







Which will not only improve your sales but website visitors too.







We look forward to your mail.



=97=97=97=97=97=97=97=97=97=97=97=97=97=97=97







Thanks & Regards,







Jullianna







SEO-Consultant











If you have any SEO need and share your website URL sample keywords and tar=

get market so that we can review and come up with our suggestions.



--_000_DB9PR10MB5164A98E697D4AE473BAE930C11B2DB9PR10MB5164EURP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








=3D"font-family: "Times New Roman", "serif"; font-size:=

12pt; color: black;">Hi,




mes New Roman", "serif"; font-size: 12pt; color: black;">&nb=

sp;




mes New Roman", "serif"; font-size: 12pt; color: black;">Hop=

e you are well.




mes New Roman", "serif"; font-size: 12pt; color: black;">&nb=

sp;




mes New Roman", "serif"; font-size: 12pt; color: black;">I a=

m affiliated with an SEO company that has helped over 200 businesses rank o=

n the

1st Page of GOOGLE for even the most competitive Industries.<=

/p>


mes New Roman", "serif"; font-size: 12pt; color: black;">&nb=

sp;




mes New Roman", "serif"; font-size: 12pt; color: black;">Let=

me know if you are interested and we will send you a


2pt; color: black; background-color: lime;">Full proposal and price list


e: 12pt; color: black;">.




mes New Roman", "serif"; font-size: 12pt; color: black;">&nb=

sp;




mes New Roman", "serif"; font-size: 12pt; color: black;">Whi=

ch will not only improve your sales but website visitors too.




mes New Roman", "serif"; font-size: 12pt; color: black;">&nb=

sp;




mes New Roman", "serif"; font-size: 12pt; color: black;">We =

look forward to your mail.




mes New Roman", "serif"; font-size: 12pt; color: black;">=97=

=97=97=97=97=97=97=97=97=97=97=97=97=97=97




mes New Roman", "serif"; font-size: 12pt; color: black;">&nb=

sp;




mes New Roman", "serif"; font-size: 12pt; color: black;">Tha=

nks & Regards,




mes New Roman", "serif"; font-size: 12pt; color: black;">&nb=

sp;




=3D"font-family: "Segoe UI", "sans-serif"; font-size: 1=

0.5pt; color: black; background-color: rgb(243, 243, 243);">Jullianna
>




a, "sans-serif"; font-size: 10pt; color: black;"> 
pan>




a, "sans-serif"; font-size: 10pt; color: black;">SEO-Consultant
span>




a, "sans-serif"; font-size: 10pt; color: black;"> 
>


a, "sans-serif"; font-size: 10pt; color: black;"> 
pan>




=3D"font-family: "Segoe UI", "sans-serif"; font-size: 1=

0.5pt; color: black; background-color: rgb(243, 243, 243);">If you have =

any SEO need and share your website URL sample keywords and

target market so that we can review and come up with our suggestions.<=

/span>









--_000_DB9PR10MB5164A98E697D4AE473BAE930C11B2DB9PR10MB5164EURP_--

German language spam from google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Apr 2024 14:13:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s1XMw-000000000Gj-2QFe

for dave@doctor.nl2k.ab.ca;

Mon, 29 Apr 2024 14:12:58 -0600

Resent-From: The Doctor

Resent-Date: Mon, 29 Apr 2024 14:12:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f67.google.com ([209.85.160.67]:52606)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s1WXf-00000000J5D-1ikD

for doctor@doctor.nl2k.ab.ca;

Mon, 29 Apr 2024 13:20:02 -0600

Received: by mail-oa1-f67.google.com with SMTP id 586e51a60fabf-22fa7e4b0beso1852632fac.1

for ; Mon, 29 Apr 2024 12:18:02 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1714418276; x=1715023076; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=FOdHUMwSw7eCD7W9k6lJx+Ly0UUsy47wz6GrPwdDl0s=;

b=SF38pUYOQm17Lce8Y1ZiECN2iWA2vVet1O1B228Z8NLP58NirYSLJzlqbo0m6HTFt/

1b1aGsoUHGjtRFdLaN/Avb+Im5olGYp1NBM/qSRZTlynw9fMpYjxKx3oDBQTK88K2A/0

2oORU6alN17+txzpAkJG/g0MiIoFVRcBa4LUwyoaHtbDZk4elIkFHx5Y+ZjjCFxiJv/S

wC2N39Zw7ualwTEOVzIHfzHNejy3po9tDSyR0ma6To2CDFnbd/F5C8B6hYfPaLpaMkih

gMEDmoYK/WiI/XUIRghotj5pnykAq5jxC5F2AUJ7ufuzqWaqDCNUo52TxB4cdqqOhbg+

Sn0A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1714418276; x=1715023076;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=FOdHUMwSw7eCD7W9k6lJx+Ly0UUsy47wz6GrPwdDl0s=;

b=avnhcXgbpWVZyPbSKLU5tCyOXomCTmywI2sDRTS0e0nmSC0hoxxHNN5GsBLB4dxHxG

Ljk7dMdkKVtOeA5WAR17kFBvdHIG02EK5HrYnB9e1EmkKgtkzTlsU/QftxW7FppVyGv/

0DSk4N6HK1gKtOj4MpKTJCRno7LW6LMNbYLCYTjPkEaY8rlRxNxmUSDMKBtAq6B0aORu

U95E/N8GeUhNnlJ2JlKEKexpZT4XxrptKn2m+Yf0qK10omWCthtR94aWGBPO4WRl+s3h

k1SHWlBdgz2HShZIULfycb6EXtJo+aTVDCZA4Lg/naX7f9Xv3zDVYXgIKi3UtT4Flh1r

25eA==

X-Forwarded-Encrypted: i=1; AJvYcCV/JElBkFSI/AGYSkGVbQCJudpLtMaxLIXlBBo80NSFupbV19e8iCflwuE/7KTIWQaJD8K3lt+bQq9r9jKQkXpHbRJ7Q1z37mQ=

X-Gm-Message-State: AOJu0Yzu86sKiReizf5MIXlIdU2pwRpcmqENhQQN5Sj0f05H4LRrjOko

CW5vbmdpQldH9aevwDR0mHmVRFurSd96Y8dnXNOrzsf6CG/1S6MnoFho3/dCGpTAPyN+6rLcFwK

e+wYzjqTe9GE7/1ZsDwWJcgsCXGs=

X-Google-Smtp-Source: AGHT+IHnZKbmYxQ4Wij6G68VVHMaS5giz4e1jZl96E78odFyneUvrzBJn+VcQ15RY5HX2EGhXwKQ6kAnus2BTJxae5M=

X-Received: by 2002:a05:6871:79a5:b0:239:876b:b23d with SMTP id

pb37-20020a05687179a500b00239876bb23dmr12397816oac.24.1714418275818; Mon, 29

Apr 2024 12:17:55 -0700 (PDT)

MIME-Version: 1.0

Reply-To: im346331@gmail.com

From: Isabella Mario

Date: Mon, 29 Apr 2024 19:17:20 +0000

Message-ID:

Subject: Dringend

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000053a97e0617411c9c"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 13.7

X-Spam_score_int: 137

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Lieber geliebter, Ich schreibe Ihnen diese E-Mail mit schweren

Tränen in den Augen und großer Trauer im Herzen. Ich bin Frau Isabella

Mario. Eine Witwe des verstorbenen Herrn Rodriguez Mario; Ich bin 63 Jahre

alt und [...]



Content analysis details: (13.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.67 listed in dnsbl.ahbl.org]

[209.85.160.67 listed in dnsbl.ahbl.org]

[209.85.160.67 listed in dnsbl.ahbl.org]

[209.85.160.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.67 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.67 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.67 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.67 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.67 listed in will-spam-for-food.eu.org]

[209.85.160.67 listed in will-spam-for-food.eu.org]

[209.85.160.67 listed in will-spam-for-food.eu.org]

[209.85.160.67 listed in will-spam-for-food.eu.org]

[209.85.160.67 listed in will-spam-for-food.eu.org]

[209.85.160.67 listed in will-spam-for-food.eu.org]

[209.85.160.67 listed in will-spam-for-food.eu.org]

[209.85.160.67 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.67 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[koneablo0605(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[koneablo0605(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[im346331(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

Subject: {SPAM?} Dringend



--00000000000053a97e0617411c9c

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Lieber geliebter,



Ich schreibe Ihnen diese E-Mail mit schweren Tr=C3=A4nen in den Augen und g=

ro=C3=9Fer

Trauer im Herzen. Ich bin Frau Isabella Mario. Eine Witwe des verstorbenen

Herrn Rodriguez Mario; Ich bin 63 Jahre alt und leide seit langem an

Brustkrebs.



Alle Anzeichen deuten darauf hin, dass sich mein Zustand verschlechtert und

es ist ziemlich offensichtlich, dass ich laut meinen =C3=84rzten nicht l=C3=

=A4nger

als zwei Monate leben werde. Ich habe etwas Geld, das ich von meinem

verstorbenen lieben Ehemann, Herrn Rodriguez, geerbt habe, die Summe von

8.700.000,00 (Acht Millionen, Siebenhunderttausend Euro), die er hier bei

einer Bank eingezahlt hat, und ich brauche eine ehrliche, ehrliche und

gottesf=C3=BCrchtige Person, unabh=C3=A4ngig davon Religion, die diese Geld=

er f=C3=BCr

wohlt=C3=A4tige Zwecke verwenden kann, um den weniger Privilegierten zu hel=

fen,

und 30% dieses Geldes werden f=C3=BCr Ihre Zeit und M=C3=BChe verwendet, w=

=C3=A4hrend 70 %

an Wohlt=C3=A4tigkeitsorganisationen gehen.



1) F=C3=BCr Kranke, weniger Privilegierte

2) F=C3=BCr die Witwen und die mutterlosen Babys

3) Waisenh=C3=A4user oder Wohlt=C3=A4tigkeits Heime.



Ich freue mich auf Ihre zeitnahe Antwort f=C3=BCr weitere Einzelheiten.



Deine Schwester

Frau Isabella Mario



--00000000000053a97e0617411c9c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Lieber geliebter,

Ich schreibe Ihnen diese E-Mail m=

it schweren Tr=C3=A4nen in den Augen und gro=C3=9Fer Trauer im Herzen. Ich =

bin Frau Isabella Mario. Eine Witwe des verstorbenen Herrn Rodriguez Mario;=

Ich bin 63 Jahre alt und leide seit langem an Brustkrebs.

Alle Anze=

ichen deuten darauf hin, dass sich mein Zustand verschlechtert und es ist z=

iemlich offensichtlich, dass ich laut meinen =C3=84rzten nicht l=C3=A4nger =

als zwei Monate leben werde. Ich habe etwas Geld, das ich von meinem versto=

rbenen lieben Ehemann, Herrn Rodriguez, geerbt habe, die Summe von 8.700.00=

0,00 (Acht Millionen, Siebenhunderttausend Euro), die er hier bei einer Ban=

k eingezahlt hat, und ich brauche eine ehrliche, ehrliche und gottesf=C3=BC=

rchtige Person, unabh=C3=A4ngig davon Religion, die diese Gelder f=C3=BCr w=

ohlt=C3=A4tige Zwecke verwenden kann, um den weniger Privilegierten zu helf=

en, und 30% dieses Geldes werden f=C3=BCr Ihre Zeit und M=C3=BChe verwendet=

, w=C3=A4hrend 70 % an Wohlt=C3=A4tigkeitsorganisationen gehen.

1) F=

=C3=BCr Kranke, weniger Privilegierte
2) F=C3=BCr die Witwen und die mut=

terlosen Babys
3) Waisenh=C3=A4user oder Wohlt=C3=A4tigkeits Heime.
<=

br>Ich freue mich auf Ihre zeitnahe Antwort f=C3=BCr weitere Einzelheiten.<=

br>
Deine Schwester
Frau Isabella Mario




--00000000000053a97e0617411c9c--

Attempted spamjack on nk.ca account

Posted by Dave Yadallee on
Subject Dearest

From Mrs Joeline

To dc3006@telus.net

Date Sun 14:49



I am writing to seek your attention to retrieve and confirm you as next of kin to my late husbands funds $75.6 Million USD to be distributed for humanitarian work and charity around the globe . Please kindly reply for more details , I am presently suffering from pancreatic cancer in the hospital please your urgent response is needed .



Thank you .



Point of origin 91.224.92.11

X-rated Google Groups spam "Maria B. Jones" <maskheylihleh@gmail.com> from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Apr 2024 10:55:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s1UHE-0000000065d-0IQ8

for dave@doctor.nl2k.ab.ca;

Mon, 29 Apr 2024 10:54:52 -0600

Resent-From: The Doctor

Resent-Date: Mon, 29 Apr 2024 10:54:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-il1-f184.google.com ([209.85.166.184]:42111)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s1U3s-000000003v6-47MV

for root@nl2k.ab.ca;

Mon, 29 Apr 2024 10:41:52 -0600

Received: by mail-il1-f184.google.com with SMTP id e9e14a558f8ab-36c510983e2sf7413675ab.0

for ; Mon, 29 Apr 2024 09:39:07 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1714408741; cv=pass;

d=google.com; s=arc-20160816;

b=brtVRgu/rU1gxb8NKLxFhgNvy8j5+JtIwJveECtTkYnPrEzLUCZTrXXItYm+Yj1tw2

YATL6Ds1KN1lt5sSS6IPafIekSbWnLBGG/EWK2bqbRE2oGIw7O05rPVSLdFQnqlbMOQd

P0y9v+eNpXW5oSlwyIXnDp/rFJbYY0rzXwVv+3nrsiXj3LUc2Uf/7aeZwVDJ6V0Fp+VK

SGqcGUrg6XXpsyO1uIbPwG99Am1pYosnQZSJFyjFKMmZx6mkcLLWTbJ3YKYpo4Qp7mr1

w7qJSFS0nMd9qBXD/BMmhCG5lv78b3hTy0s3Qwb+2dFDd4xyWOSeFLUv9+t624AWh6Uj

t/Bw==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature:dkim-signature;

bh=shKZ8P0c3Ii3brXN+Js6hsXkrvUdYjvR4qEfaMfJ6fM=;

fh=n88kraCrX6lZf0KqCJK/Ah5lmSjdcIUdB8xP56t5qUA=;

b=cl3FFnN32TL3bLtVPUd0qAXEhAMiVUTIPI3OGpQAHz3WvLZxDisKEiwstCYZPs0qKh

lzvFioD2nPtNQIAnbys40DWxUC+HbXODJ91mjOAQ0R6zapf05h8K8qW6zshTBS5fUtzb

xWAvGHO00ixFpEzeNdiUvUPKTe7UKQeDujZxkKwTEilMrIJLWZ5kpu7c2f2vgugsh7B/

LaEPDC4BqJVqzS7G2xDdREQmaREHUkEaBj5UjSz1XuJ/fp61wSQXsXkqmC5w5RwYxcIB

a5CmeKnus6FTkWGrWDiEauMiF1p9esrFrBZVnIXw11EBGDf567jiJ0HtQmWZc1TSocNE

TKhg==;

darn=nl2k.ab.ca

ARC-Authentication-Results: i=2; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=QVqEegos;

spf=pass (google.com: domain of maskheylihleh@gmail.com designates 2607:f8b0:4864:20::a36 as permitted sender) smtp.mailfrom=maskheylihleh@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=googlegroups.com; s=20230601; t=1714408741; x=1715013541; darn=nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=shKZ8P0c3Ii3brXN+Js6hsXkrvUdYjvR4qEfaMfJ6fM=;

b=gQ7U1U0y5PENirP4/s+FwmIJvaguNiYZBG23J2WgbJZanEYv0gfJ8NZJrUfEPaVMee

paySzLEC1wSmGrvico3e+Hg3oIlFXBHJ9/XKSKK/1pmtbFjY+W5o9ekNNF8kq8DC3pzi

QFnF6gxDlSycJ6EWPipFrt+rEvoXMtB9IvFPI3ZqHh50BMQpsG+caLpl6gPIFEreaUtk

euwRGjpdHRUziKAArUtpHWQzsGN/v4v4P6DFiKXu7qEzWuoujYcqReGGOmIvDiudw6Wo

sNyJEPoDKrLS2RIcOtjyhnPHa2XX+DV4uZhHT84fuEM7mrqp93Kh9FK95zuOY4UtxctM

mE5w==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1714408741; x=1715013541; darn=nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=shKZ8P0c3Ii3brXN+Js6hsXkrvUdYjvR4qEfaMfJ6fM=;

b=FiDmk2pM7ZN49qE/83qPdVGwgnTD5rhH8Fbn8f+dwYJ2vU/z8XjPVe5fp8O66yXZvr

b8nZ7b1cWcBbv5kASsiCyilJykZROIP4k/xzeREbazaZLQTE+45q/yxsYKL804RGjujy

hRxTKeNsDyBm4LEpXtIKUeKiaUaFiI/uAHL2HR3ku+vd8sxA/lV7QOKU98z13ZZ2e55j

ffdOWyqF3AGRDvFlGAkcJ8qzfXJA9Y5dzS5JPPmWifCpvOtcQrgsJY/eRt0S/XEUX/wm

kupr7PCWZv49tW7sj2LDjR1Myx+xOrTzF7eMSIxqk7b1xqtHKdGWB6sTd4GKCr8CO6fY

OvFg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1714408741; x=1715013541;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-beenthere:x-gm-message-state

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=shKZ8P0c3Ii3brXN+Js6hsXkrvUdYjvR4qEfaMfJ6fM=;

b=UODC2pbbwyXeyrOLqTNNPW34PbIgG60g6MPvPGPTIlEc8i4lVWlr+YH2C1o/bplz6m

rJV11ydpi+lSBapygJtk9RmzsSVc+19bulK5rcKh4KBM7svZWyuaMAXKEZ4vMvyCDPGS

7UL9ZU3KbwNOWgRL7pn1p6aHTtODEz2eK9JEHw5l5jKFVnmtszeCnxgZsw68XPb/TJnr

KBZlcM75BByIUxTnfn0SAKjiRcJMHgFRWTJqJ97yffeFi5eYk1+eg1qPxRr33+e77fEq

BN2RuN2ljz9x2u/qDKImnp2Du2DmhV1iGUJNDGNw0+zK37zNcK/NORh4B5pN9fxAPb5H

WNVQ==

Sender: dece15-912025586@googlegroups.com

X-Forwarded-Encrypted: i=2; AJvYcCXAratj2Vv8Z0ddmDHHNpA2jqDa/QtAJuIExvBzY2s+33msETtoWQGkWWHG6NigURn08pnQmtV+Pq/E6RVqwTM=

X-Gm-Message-State: AOJu0YxISUpGH2Ms5tXhR5l3umx9rS6sD43fto4NynpIXB6Q71pnL6WI

oRLALbpt2XeZjZyNwI8L1q/uGjVBJdBMnlw+xZ/MkMAN5s6EKW35

X-Google-Smtp-Source: AGHT+IF/0u1K/M4sIqktLQrBDQfyRWfENEV/eXW9tIirGYp1fjc11QDPOvWANwobre5FOm4mbrh0SQ==

X-Received: by 2002:a05:6e02:1b07:b0:36c:10b9:a040 with SMTP id i7-20020a056e021b0700b0036c10b9a040mr212017ilv.0.1714408740472;

Mon, 29 Apr 2024 09:39:00 -0700 (PDT)

X-BeenThere: dece15-912025586@googlegroups.com

Received: by 2002:a05:6e02:3108:b0:36c:41cb:4c21 with SMTP id

e9e14a558f8ab-36c41cb4ee2ls2402605ab.2.-pod-prod-00-us; Mon, 29 Apr 2024

09:38:58 -0700 (PDT)

X-Forwarded-Encrypted: i=2; AJvYcCWzrgArzFSQ2unFchX6TGS0OgFB8ujjok0Ty284Nsf+mWAHjURU+7bYSff0GygsfRffFBwgRnbUhcL3Xl0//tOzGV9ZLKubP7OsA01rdv5R6lk=

X-Received: by 2002:a05:6e02:1c42:b0:36b:3bed:fdd with SMTP id d2-20020a056e021c4200b0036b3bed0fddmr195435ilg.2.1714408737922;

Mon, 29 Apr 2024 09:38:57 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1714408737; cv=none;

d=google.com; s=arc-20160816;

b=wyNbl/7blC7sZXwQchxiI95I9E6ntr9ZvJDKQP795XgZ/nEWUieEQseT5Viai6e5qj

UImX2Dv1z5b547wza08PmS+yI/0AkeMK0ym/WVFS+MjI42UeIlBa12qbpU2hcLsXjvFt

hE3vWkRr/TkW2/YIjGP8RxYNzktP05bFugjNsW+qte9mQ2zTZgFUieBqQVnj1iiu3Qcc

sPdBgJ9sJ+GjmjSMcH2fWXbNvlvfVO8fChZ2ss2rfkNln463wQz9auGdtUqgbQ73lwNM

o89orupzTi9zrrKqHPzc01Rshi7cuujZlmi7R5Cj8aA0GV4Vy/kY6f+nclPyXb5+TFwN

K0yA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=FNCPZDG0INldVWgiEyrW+8O1e483y3+w+bSbD8Mse6w=;

fh=MBmPexHU2h197d246lbb02OxQkm1LWr4j3aoX+kvfdo=;

b=ZP79cBEKNeHrQoquKxMzp6he2mBYDJHoF0TKgmyIKtPm6Co9YqI8VpulZgRS4i3g5O

18Ppx7grCdjskU2dXANl0CVAv+sPTEMbPN5OUMsrP1GglyKlfYL2TPLdYNtuKZKP3njs

RxDREOcnWc3CLR0dh7fjHf7soO8OQLx4e6d0b+/7oOynTF0bXVgKbJWHGcN8Iz0HJJZ7

JDoakiptD0EyBrAe2YtLB85A/wSmeRxqZn8XRRculWsqKQOs9XVso0wMtenL4kLmHkb6

DIWFOVAyeV9fgsDo4pHFd+nTfM817jjNx+7WNo5xnDXoioQplT7uCTjnBVeRef/8O3BV

zSGA==;

dara=google.com

ARC-Authentication-Results: i=1; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=QVqEegos;

spf=pass (google.com: domain of maskheylihleh@gmail.com designates 2607:f8b0:4864:20::a36 as permitted sender) smtp.mailfrom=maskheylihleh@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Received: from mail-vk1-xa36.google.com (mail-vk1-xa36.google.com. [2607:f8b0:4864:20::a36])

by gmr-mx.google.com with ESMTPS id e1-20020a921e01000000b0036c48cb7522si299477ile.1.2024.04.29.09.38.57

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Mon, 29 Apr 2024 09:38:57 -0700 (PDT)

Received-SPF: pass (google.com: domain of maskheylihleh@gmail.com designates 2607:f8b0:4864:20::a36 as permitted sender) client-ip=2607:f8b0:4864:20::a36;

Received: by mail-vk1-xa36.google.com with SMTP id 71dfb90a1353d-4dcbf770c24so2522318e0c.1;

Mon, 29 Apr 2024 09:38:57 -0700 (PDT)

X-Forwarded-Encrypted: i=1; AJvYcCUoxRbtYQ9SZE6SAnRhD6EWbX3VID7+PONaXuRu5b7Ge24Zun7qZzEQJrf2g0MguUf9c4shKqX4675AMFK/IJPbq3qrB3qNaS4FC5PSbqudTqD28Ik2UQ/W8PnvMpUIG3RyMGMeesKO2Myo4AkSVx3Zuv10VcvSsJmJmy55Hf1PzdCui9keBWYpvceIsLkw81TOgG9ly4dtgdpckxfYPYDebWu9pZ0YLB9TsCPz+8AG+mVl19fVSM9vnRj24B42G+UAGDiUnTBdgJAOw6MY6UulJoAbtWkEyZ0SF821WxRtBlb0oI0MfSjaIg4XKa7i6k/5GyaQhWmg559e2M2sALUDdDRoRkErHEnvt5BKkgo5V91k3H+jbqgdAVMN9YCuWX1jrek/9TbLzOe/BfwmyQhZr3qyoInRT4X21WRnrsqzxIH4jBoygJNuctclmwJbLl6o4/z5ahs/iKdKAK34mQuP6SaYeN7d9u3x

X-Received: by 2002:a1f:7dc8:0:b0:4d8:7d49:18fe with SMTP id

y191-20020a1f7dc8000000b004d87d4918femr240069vkc.4.1714408737019; Mon, 29 Apr

2024 09:38:57 -0700 (PDT)

MIME-Version: 1.0

From: "Maria B. Jones"

Date: Mon, 29 Apr 2024 22:38:45 +0600

Message-ID:

Subject: Looking for hookups regularly

To: dece15-912016742@googlegroups.com, dece15-912016917@googlegroups.com,

dece15-912017260@googlegroups.com, dece15-912020230@googlegroups.com,

dece15-912020772@googlegroups.com, dece15-912025199@googlegroups.com,

dece15-912025586@googlegroups.com, dece15-912027395@googlegroups.com,

dece15-912027665@googlegroups.com, dece15-912027821@googlegroups.com

Content-Type: multipart/alternative; boundary="000000000000c52fe306173ee309"

X-Original-Sender: maskheylihleh@gmail.com

X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass

header.i=@gmail.com header.s=20230601 header.b=QVqEegos; spf=pass

(google.com: domain of maskheylihleh@gmail.com designates 2607:f8b0:4864:20::a36

as permitted sender) smtp.mailfrom=maskheylihleh@gmail.com; dmarc=pass

(p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Precedence: list

Mailing-list: list dece15-912025586@googlegroups.com; contact dece15-912025586+owners@googlegroups.com

List-ID:

X-Spam-Checked-In-Group: dece15-912025586@googlegroups.com

X-Google-Group-Id: 745700075957

List-Post: ,

List-Help: ,

List-Archive:
List-Unsubscribe: ,



X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hey, How are you doing today, I am new here, looking for a

friendship that can lead to a long term or relationship, View pics> sites.google.com/view/ywhe42

No need cc ////////////////////////////////



Content analysis details: (8.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2607:f8b0:4864:20:0:0:0:a36 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:a36 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:a36 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:a36 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:a36 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:a36 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:a36 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:a36 listed in]

[will-spam-for-food.eu.org]

[209.85.166.184 listed in will-spam-for-food.eu.org]

[209.85.166.184 listed in will-spam-for-food.eu.org]

[209.85.166.184 listed in will-spam-for-food.eu.org]

[209.85.166.184 listed in will-spam-for-food.eu.org]

[209.85.166.184 listed in will-spam-for-food.eu.org]

[209.85.166.184 listed in will-spam-for-food.eu.org]

[209.85.166.184 listed in will-spam-for-food.eu.org]

[209.85.166.184 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.166.184 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.166.184 listed in wl.mailspike.net]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:a36 listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:a36 listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:a36 listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:a36 listed in]

[dnsbl.ahbl.org]

[209.85.166.184 listed in dnsbl.ahbl.org]

[209.85.166.184 listed in dnsbl.ahbl.org]

[209.85.166.184 listed in dnsbl.ahbl.org]

[209.85.166.184 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:a36 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:a36 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:a36 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:a36 listed in]

[dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[maskheylihleh(at)gmail.com]

2.5 SORTED_RECIPS Recipient list is sorted by address

0.0 HTML_MESSAGE BODY: HTML included in message

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

Subject: {SPAM?} Looking for hookups regularly



--000000000000c52fe306173ee309

Content-Type: text/plain; charset="UTF-8"



Hey, How are you doing today, I am new here, looking for a friendship that

can lead to a long term or relationship,

View pics> sites.google.com/view/ywhe42



No need cc













































////////////////////////////////



--

You received this message because you are subscribed to the Google Groups "Dece15-912025586" group.

To unsubscribe from this group and stop receiving emails from it, send an email to dece15-912025586+unsubscribe@googlegroups.com.

To view this discussion on the web, visit https://groups.google.com/d/msgid/dece15-912025586/CANmHZ4k9p51SvH42S1Pz6sVnVP8uvcQcuuhBo_JL%2BU-ONtU0ZQ%40mail.gmail.com.



--000000000000c52fe306173ee309

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hey, How are you doing today, I am new here, looking for a=

friendship that can lead to a long term or relationship,
View pics>=

=C2=A0 =C2=A0sites.google.=

com/view/ywhe42

No need cc









r>












/////////////////////=

///////////








--


You received this message because you are subscribed to the Google Groups &=

quot;Dece15-912025586" group.


To unsubscribe from this group and stop receiving emails from it, send an e=

mail to de=

ce15-912025586+unsubscribe@googlegroups.com.


To view this discussion on the web, visit
com/d/msgid/dece15-912025586/CANmHZ4k9p51SvH42S1Pz6sVnVP8uvcQcuuhBo_JL%2BU-=

ONtU0ZQ%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https://gr=

oups.google.com/d/msgid/dece15-912025586/CANmHZ4k9p51SvH42S1Pz6sVnVP8uvcQcu=

uhBo_JL%2BU-ONtU0ZQ%40mail.gmail.com.




--000000000000c52fe306173ee309--