Fedex Phish from France

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 22 Jul 2024 11:29:00 -0600

Received: from mtaout2.ac-mayotte.fr ([193.55.5.84]:53564)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVwpH-000000005Cv-3mmU

for dave@doctor.nl2k.ab.ca;

Mon, 22 Jul 2024 11:28:48 -0600

Received: from mta2.ac-mayotte.fr (mta2.ac-mayotte.fr [193.55.5.85])

by mtaout2.ac-mayotte.fr (Postfix) with ESMTP id 7ABE6619D4;

Mon, 22 Jul 2024 20:25:32 +0300 (EAT)

Received: from imsva2.ac-mayotte.fr (imsva2.ac-mayotte.fr [193.55.5.86])

by mta2.ac-mayotte.fr (Postfix) with ESMTP id 5E4D873B37;

Mon, 22 Jul 2024 20:25:32 +0300 (EAT)

DKIM-Filter: OpenDKIM Filter v2.11.0 mta2.ac-mayotte.fr 5E4D873B37

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ac-mayotte.fr;

s=default; t=1721669132;

bh=0+FwZWsQDUuZfMaR8f7oEcYOUpmczg1BeDSmln4HFGs=;

h=From:Date:Subject:Message-ID:To:From;

b=PQysEI48CxAmB9ttSqjySJE2WNJnJukhAG+i4iJO5rrdHCHYnr1yNNAIoPaZS62AB

EOSNRRrPfbtdft8loI4QbOySY/E1+tVCs86AA/8JiQPee636hOVVS/7Ga9zZZDPAsy

VhInAS+SoawWMGTm1WS//xFFSeG2akXWM5LO21M8=

Received: from imsva2.ac-mayotte.fr (unknown [127.0.0.1])

by IMSVA (Postfix) with ESMTP id B6BEA2A07D;

Mon, 22 Jul 2024 20:25:31 +0300 (EAT)

X-IMSS-DKIM-Authentication-Result: imsva2.ac-mayotte.fr; sigcount=0

Received: from imsva2.ac-mayotte.fr (unknown [127.0.0.1])

by IMSVA (Postfix) with ESMTP id CB3362A081;

Mon, 22 Jul 2024 20:25:30 +0300 (EAT)

Received: from mta.ac-mayotte.fr (unknown [193.55.5.53])

by imsva2.ac-mayotte.fr (Postfix) with ESMTP;

Mon, 22 Jul 2024 20:25:30 +0300 (EAT)

Received: from goodies.in.ac-mayotte.fr (unknown [192.168.205.176])

by mta.ac-mayotte.fr (Postfix) with ESMTP id B326CA95;

Mon, 22 Jul 2024 20:25:30 +0300 (EAT)

Received: from localhost (localhost [127.0.0.1])

by goodies.in.ac-mayotte.fr (Postfix) with ESMTP id A856C1FF93;

Mon, 22 Jul 2024 20:24:50 +0300 (EAT)

From: "Kennel-Kamardine Florence"

User-Agent: SOGoMail 5.5.1

MIME-Version: 1.0

Date: Mon, 22 Jul 2024 20:24:50 +0300

Subject: Action =?utf-8?q?Required=3A?= Reschedule Your Package Delivery

Message-ID: <5d88-669e9600-2b-40ea1f00@26834783>

X-Forward: 138.199.26.69, 193.55.5.88

Content-Type: multipart/alternative; boundary="----=_=-_OpenGroupware_org_NGMime-23944-1721669090.071578-15------"

To: undisclosed-recipients:;

X-TM-AS-GCONF: 00

X-TM-AS-Product-Ver: IMSVA-9.1.0.2090-9.0.0.1002-28546.001

X-TM-AS-User-Blocked-Sender: No

X-TMASE-Version: IMSVA-9.1.0.2090-9.0.1002-28546.001

X-TMASE-Result: 10-7.102000-10.000000

X-TMASE-MatchedRID: zRq+SEqfCYr2qfT+71kiasDSXNqUn2gQihaVLlzDjtUM1uAoS31c898j

pw2ubxBm94K/U9yoT96z8d6zvo5NkMO+wkQncuC8bsHtQ0J95tRR7ICSj3pZJwTcgpiKKJNHDHy

53Gz9GZbmEVp5St5EyklyMZ48GKwUfMYfI9HGb6qysPB8dBBorUt74jQGCXFZEqDF0Gw3p2GTfQ

sCWRU4SDujhx+Xr3WAxjmDsee4erK0iI+wT19SJ9abOufQzTgwkOULbjlubMhlFSORUVE4Xo2vS

QWzRZoTqXBKZ8lojyvOj/hxK35Y1cSSYvOBTYp6Ik2vj5lWfcVm8m+0mUIqu1vCSEocHOzkHWm5

UoWAU16EbZFeOJ6AEp4CIKY/Hg3AaZGo0EeYG95lgn288nW9IE1j0vwmQbGYtfAeP8CayYYkPzS

nXRhxeRAdRtDHVTk1GkD3PO4z7u9ITuBOdZ5ew/oLR4+zsDTthUfR2rvBju5TPivRykGajiRrbY

K4e9FfomrmkT49zxoI1nM6bYyB0eppcByQXFvs

X-IMSS-DKIM-White-List: No

X-TMASE-SNAP-Result: 1.821001.0001-0-1-22:0,33:0,34:1,35:0,36:0,37:0,40:0-0



------=_=-_OpenGroupware_org_NGMime-23944-1721669090.071578-15------

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable

Content-Length: 534





FedEx

=C2=A0

Hello,

=C2=A0

Delivery Attempt Failed

Package Type: Standard Package

Delivery Date: July 22, 2024

We attempted to deliver your package at 11:20 AM on Monday, July 22, 20=

24, but no one was available to receive it.

Your package has been returned to our distribution center. To receive y=

our package, you need to reschedule a new delivery.

Please reschedule your delivery by clicking on "Reschedule Delivery" an=

d one of our couriers will deliver your package.

Reschedule Delivery

=C2=A0

Thank you,

FedEx Team

=C2=A0



------=_=-_OpenGroupware_org_NGMime-23944-1721669090.071578-15------

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

Content-Length: 1082



<=

font size=3D"6">Fed
"#e2341b">Ex

 


lor=3D"#ff0000">Hello,

 

Deliv=

ery Attempt Failed

Package Type: Standard Packag=

e

Delivery Date: July 22, 2024

We attempted to del=

iver your package at 11:20 AM on Monday, July 22, 2024, but no one was =

available to receive it.

Your package has been returned to our di=

stribution center. To receive your package, you need to reschedule a ne=

w delivery.

Please reschedule your delivery by clicking on "Resch=

edule Delivery" and one of our couriers will deliver your package.

<=

p>
dbhbvhbhvbhh.html">Reschedule Delivery<=

/strong>

 

Thank you,


g>FedEx Team

 





------=_=-_OpenGroupware_org_NGMime-23944-1721669090.071578-15--------

Fedex Phish from France

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 22 Jul 2024 11:29:00 -0600

Received: from mtaout2.ac-mayotte.fr ([193.55.5.84]:54184)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVwpH-000000005Dm-3mmo

for dave@doctor.nl2k.ab.ca;

Mon, 22 Jul 2024 11:28:48 -0600

Received: from mta2.ac-mayotte.fr (mta2.ac-mayotte.fr [193.55.5.85])

by mtaout2.ac-mayotte.fr (Postfix) with ESMTP id 07CF361861;

Mon, 22 Jul 2024 20:25:33 +0300 (EAT)

Received: from imsva2.ac-mayotte.fr (imsva2.ac-mayotte.fr [193.55.5.86])

by mta2.ac-mayotte.fr (Postfix) with ESMTP id D4F9073B54;

Mon, 22 Jul 2024 20:25:32 +0300 (EAT)

DKIM-Filter: OpenDKIM Filter v2.11.0 mta2.ac-mayotte.fr D4F9073B54

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ac-mayotte.fr;

s=default; t=1721669132;

bh=KuwSJq/Lamjz65UFeU0xBRjycA9CZCzUcWeHIjOjxjo=;

h=From:Date:Subject:Message-ID:To:From;

b=TtwbTBF2iT+vyFWZcBHxKH54TOI/Et3H+yZZAY5CNaAkt2u1BnMOPkuZJZERLnP4g

KEbO1urS8eQDCCvEqU4b0kgn3U+w5h1ga7lpa8flnVwyVgrZDDbnv7OO+87zhpNlbv

Oscs/GfgV5VaqHloJSyec0YksyyD8KTf6CVpP7gs=

Received: from imsva2.ac-mayotte.fr (unknown [127.0.0.1])

by IMSVA (Postfix) with ESMTP id 001342A078;

Mon, 22 Jul 2024 20:25:32 +0300 (EAT)

X-IMSS-DKIM-Authentication-Result: imsva2.ac-mayotte.fr; sigcount=0

Received: from imsva2.ac-mayotte.fr (unknown [127.0.0.1])

by IMSVA (Postfix) with ESMTP id 296EF2A08B;

Mon, 22 Jul 2024 20:25:31 +0300 (EAT)

Received: from mta.ac-mayotte.fr (unknown [193.55.5.53])

by imsva2.ac-mayotte.fr (Postfix) with ESMTP;

Mon, 22 Jul 2024 20:25:30 +0300 (EAT)

Received: from goodies.in.ac-mayotte.fr (unknown [192.168.205.176])

by mta.ac-mayotte.fr (Postfix) with ESMTP id EF98AA79;

Mon, 22 Jul 2024 20:25:29 +0300 (EAT)

Received: from localhost (localhost [127.0.0.1])

by goodies.in.ac-mayotte.fr (Postfix) with ESMTP id EAD921FF92;

Mon, 22 Jul 2024 20:24:49 +0300 (EAT)

From: "Kennel-Kamardine Florence"

User-Agent: SOGoMail 5.5.1

MIME-Version: 1.0

Date: Mon, 22 Jul 2024 20:24:49 +0300

Subject: Action =?utf-8?q?Required=3A?= Reschedule Your Package Delivery

Message-ID: <5d8c-669e9600-73-30064240@257674936>

X-Forward: 138.199.26.69, 193.55.5.88

Content-Type: multipart/alternative; boundary="----=_=-_OpenGroupware_org_NGMime-23948-1721669089.348555-36------"

To: undisclosed-recipients:;

X-TM-AS-GCONF: 00

X-TM-AS-Product-Ver: IMSVA-9.1.0.2090-9.0.0.1002-28546.001

X-TM-AS-User-Blocked-Sender: No

X-TMASE-Version: IMSVA-9.1.0.2090-9.0.1002-28546.001

X-TMASE-Result: 10-7.102000-10.000000

X-TMASE-MatchedRID: zRq+SEqfCYr2qfT+71kiasDSXNqUn2gQihaVLlzDjtUM1uAoS31c898j

pw2ubxBm94K/U9yoT96z8d6zvo5NkMO+wkQncuC8bsHtQ0J95tRR7ICSj3pZJwTcgpiKKJNHDHy

53Gz9GZbmEVp5St5EyklyMZ48GKwUfMYfI9HGb6qysPB8dBBorUt74jQGCXFZEqDF0Gw3p2GTfQ

sCWRU4SDujhx+Xr3WAxjmDsee4erK0iI+wT19SJ9abOufQzTgwkOULbjlubMhlFSORUVE4Xo2vS

QWzRZoTqXBKZ8lojyvOj/hxK35Y1cSSYvOBTYp6Ik2vj5lWfcVm8m+0mUIqu1vCSEocHOzkHWm5

UoWAU16EbZFeOJ6AEp4CIKY/Hg3AaZGo0EeYG95lgn288nW9IE1j0vwmQbGYtfAeP8CayYYkPzS

nXRhxeRAdRtDHVTk1GkD3PO4z7u9ITuBOdZ5ew/oLR4+zsDTthUfR2rvBju5TPivRykGajiRrbY

K4e9FfomrmkT49zxoI1nM6bYyB0eppcByQXFvs

X-IMSS-DKIM-White-List: No

X-TMASE-SNAP-Result: 1.821001.0001-0-1-22:0,33:0,34:1,35:0,36:0,37:0,40:0-0



------=_=-_OpenGroupware_org_NGMime-23948-1721669089.348555-36------

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable

Content-Length: 534





FedEx

=C2=A0

Hello,

=C2=A0

Delivery Attempt Failed

Package Type: Standard Package

Delivery Date: July 22, 2024

We attempted to deliver your package at 11:20 AM on Monday, July 22, 20=

24, but no one was available to receive it.

Your package has been returned to our distribution center. To receive y=

our package, you need to reschedule a new delivery.

Please reschedule your delivery by clicking on "Reschedule Delivery" an=

d one of our couriers will deliver your package.

Reschedule Delivery

=C2=A0

Thank you,

FedEx Team

=C2=A0



------=_=-_OpenGroupware_org_NGMime-23948-1721669089.348555-36------

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

Content-Length: 1082



<=

font size=3D"6">Fed
"#e2341b">Ex

 


lor=3D"#ff0000">Hello,

 

Deliv=

ery Attempt Failed

Package Type: Standard Packag=

e

Delivery Date: July 22, 2024

We attempted to del=

iver your package at 11:20 AM on Monday, July 22, 2024, but no one was =

available to receive it.

Your package has been returned to our di=

stribution center. To receive your package, you need to reschedule a ne=

w delivery.

Please reschedule your delivery by clicking on "Resch=

edule Delivery" and one of our couriers will deliver your package.

<=

p>
dbhbvhbhvbhh.html">Reschedule Delivery<=

/strong>

 

Thank you,


g>FedEx Team

 





------=_=-_OpenGroupware_org_NGMime-23948-1721669089.348555-36--------

Web / SEO/ App spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 22 Jul 2024 09:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVufO-00000000Che-3R7q

for dave@doctor.nl2k.ab.ca;

Mon, 22 Jul 2024 09:09:34 -0600

Resent-From: The Doctor

Resent-Date: Mon, 22 Jul 2024 09:09:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-tyzapc01olkn2100.outbound.protection.outlook.com ([40.92.107.100]:63807 helo=APC01-TYZ-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVtIM-000000003cz-1NL7

for root@nk.ca;

Mon, 22 Jul 2024 07:41:47 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Bh7B4su2ntkf+pU/9C6j6+jq4TduHwOX5ThFsDc1j+oE7N0wYGiAh83bV97Ng3FE2jIMhKrVN+WWtUXK60SFlUDMayMo7yy5BEkzadbVZrmajQ6kYGqFcNh2wMrWYmCC011Q1IwQshyl8G5f1pbFViI1+NZJle6Vi/fEB6expwD1MtQzJB1hcOeM9WWSiEcRQDUxBy3qLNKlK/dhnwyUxGMmFalkOiHKM/3WbTFW2v11jBBYAcZaPgLjmYH+bfSNIttd78CqMkQIED7IngBIFtwxKlKJKA9gnXoWQwt6N1ikMHJSfFOYlee6PccA7SeES2dshFboFW5iz5crrx7yLA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=8SNX04K86bDmewWwnAOI99TGpljHJvNTykKRuonx10g=;

b=v39dFa4PQfY0iG55CpizACyt9hBUaGwhsON6JSf2pIZS6OHHY0sXHJvtLKRoEUngPZZhd0ITdnE+3syzE3rwZHYq98iQuC5LcdHCEdv/M1sigiXvH/+M2sae9UZm0dbIcM1Zr7AJXWbkHTgDQuQpup/VojDaZvMojEcp6ixKvn+U0nCKQrSELPFm/JF6l/gZWNxPTdxrdukyYRtIafPhqh6u5qPzbSLWD5D/fArupwj6kzrKMYtAOZEb2I0prLqdoiGA033/CfEwqFTcZuKlOKRQQFfx1fvJlbI19C2Vn5x0whuMbIF6puzBkuvKWqNRrkagGrVSh3DFZTJwVdz7IQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=8SNX04K86bDmewWwnAOI99TGpljHJvNTykKRuonx10g=;

b=jMbekxvt1e60lw6ykHxUEUEyD7TIlnLjeJ0XaHinNoskhgLoyWhyy9Y243RGIgvdL9Bryvu28MIfGmSVecfYGdShAsOBvBnj3z0VngOJ3Xi1V2pjT64Q27GmjezD9ZOFd/mMoAG0OLqfwdKn39hxHK306QxbT5Gj5WwfH1YIJVWZL37srNZthXyI68rKSNWGqqz1OuypCbvlJ6aey8lmbJgWQFQUXIe3zFLRr7WoMh1P9kEKPCewPAaOugPAXvEVTI8AIuXC2xKff9xcsajQwtEb9hPEM/6omD6kdXW0P2z/FQ3dj1kedLeStQBpfrxs1lpm0GnfMFp9CKlwdP+WzQ==

Received: from KL1PR02MB6260.apcprd02.prod.outlook.com (2603:1096:820:dd::5)

by TY0PR02MB6740.apcprd02.prod.outlook.com (2603:1096:405:18::14) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7784.20; Mon, 22 Jul

2024 13:38:42 +0000

Received: from KL1PR02MB6260.apcprd02.prod.outlook.com

([fe80::117d:a790:7f1c:effc]) by KL1PR02MB6260.apcprd02.prod.outlook.com

([fe80::117d:a790:7f1c:effc%4]) with mapi id 15.20.7762.027; Mon, 22 Jul 2024

13:38:42 +0000

From: "somya"

To: "somya"

Subject: Google's 1st page ..?

Date: Mon, 22 Jul 2024 19:07:58 +0530

Message-ID:



Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0060_01DADC6A.93A32E40"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdrcO+qJF7MVGRoURIGh+D4ACIxx3g==

Content-Language: en-us

X-TMN: [e6H5er16AwM3GfeCq0E+0FGNBnXCNpzV]

X-ClientProxiedBy: BMXPR01CA0088.INDPRD01.PROD.OUTLOOK.COM

(2603:1096:b00:54::28) To KL1PR02MB6260.apcprd02.prod.outlook.com

(2603:1096:820:dd::5)

X-Microsoft-Original-Message-ID: <005f01dadc3c$79eaf240$6dc0d6c0$@com>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: KL1PR02MB6260:EE_|TY0PR02MB6740:EE_

X-MS-Office365-Filtering-Correlation-Id: c38a5b58-8ddb-464a-6951-08dcaa5399ac

X-Microsoft-Antispam:

BCL:0;ARA:14566002|19110799003|461199028|8060799006|3412199025|440099028|1710799026;

X-Microsoft-Antispam-Message-Info:

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

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?us-ascii?Q?FwXCBUj0cmwDeR7DLFwPWlWICczk/kfA83OzZU/f/K3LMMUiZHGFb2rYAihB?=

=?us-ascii?Q?bOCRRP/7v0nx7L4F4x13coLWaSlRlkj/8ba235VcNMwTMqOvXAqSyUJ/HVfY?=

=?us-ascii?Q?s9POz9qzVBDjQZ6oZuVbpy0kFFI/2InvsShYMnpgVshEqw+PoXbEDOMSbzLb?=

=?us-ascii?Q?FJ6PbX/n1K8yV9B+BRH1QYjdAsgci69YbgDbERUJoWGZFqpWgp6LpCkqDT4Y?=

=?us-ascii?Q?yUyb7PNUsLlE0t0nJSWcy+0yJqc2ReSLLlpMuxEJqXlcTi11zeK9mbH7K7JQ?=

=?us-ascii?Q?jCd/qGCen/LP6xyo+GzmXjQOmYonfdLp9GoMH79SoSj3ZrbKKoFc1M/Jru2K?=

=?us-ascii?Q?i6Z0RHmlYX4ciJJtdUTCwV/Vq0nOEGDTtO5mWsssaTWk+ctZCG1FZdaF+QTP?=

=?us-ascii?Q?+0ytNB8zPt8AZsgxEGcJVJyRiTQzymmrK1nhDRwVDT1vgIjZp0ZIVvMLL9/Y?=

=?us-ascii?Q?5ohWfPf0fSq/QUUTYGemftdqLpEExYerp+9WTqFhjCUxRJ4EyobITW4S+fmT?=

=?us-ascii?Q?Xjk9daYlT+GSDdUJAmmwVYOgFA2Uwp/9kXzSKxqgbh26nAhZN8omJHl80HFK?=

=?us-ascii?Q?fGjTiFfMJAoHqDjtHk3JxllxK/gZmz3QAp5VqMdK2TXF5d6efc3495gFQOAk?=

=?us-ascii?Q?+PBlKrBcX/zhzAJ4RQZa+Awkq5vivxa4uKeBInizbINGOu9cGPaCYXiCC6X6?=

=?us-ascii?Q?+dApzx2/aQxrPWmyOpXwIZmP7o8AyBkrW/uYJcO8K8qIIljKcudrNVKWfdib?=

=?us-ascii?Q?Fhc+RRAHhM15ES1uWDDyKdhDakxOE7t5RrIWCT7bDRnvi/o9y3KODGGG5CKR?=

=?us-ascii?Q?K+4E2zDmuWEVn0tb5QvSfNhs0DaL3Ee9wkeLrCz6ndqTrHcxqEj97D70n2Sm?=

=?us-ascii?Q?jqXUF6tOPp6uJ86PxVSb0eFu37SGQFpwCRr1zr1ooChbDgZx0+qswzQGUhuN?=

=?us-ascii?Q?RmdnFZmwmYSlnQ7bFAe2PATOjUplaVck6BzaxvSwKgM9f1pAvPiIJEvE+IZE?=

=?us-ascii?Q?76vKLRvG4Y0j9CaEXsRvWBr9r4dzGGkqAQhuPpTsppQpVo1DXmG9+PFCOzgC?=

=?us-ascii?Q?F8aw96qykP2LCRxVoGZanyOzw6JVAvZzFlBBRegczcxHs4ci5EyuZaxBgEZ/?=

=?us-ascii?Q?SnWUdpURjfpqy6fBr4fHQ+F16C8v8x+b2R/zjtWuZs4RBhhP915xs+L4BepI?=

=?us-ascii?Q?JhOLbJzyNVC5j/A2XKr17IWUhP7wN7m8PT2e/vQmyCz+uIeksP29430q6POg?=

=?us-ascii?Q?AvLq0DpQeYCvkl6uX/PNhX88W8WWfM3ibY2Kc4BWhw=3D=3D?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: c38a5b58-8ddb-464a-6951-08dcaa5399ac

X-MS-Exchange-CrossTenant-AuthSource: KL1PR02MB6260.apcprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Jul 2024 13:38:41.9783

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TY0PR02MB6740



------=_NextPart_000_0060_01DADC6A.93A32E40

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,

I found your detail on Google.com and I have looked at your website and

realize your website is great design but your website ranking not good all

search engine Google, AOL, Yahoo, and Bing.

Do you want more targeted visitors on your website?

We can place your website on Google's 1st page. Yahoo, etc.).

May I send you quote? If interested.

Regards,

somya



------=_NextPart_000_0060_01DADC6A.93A32E40

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable






>


00">

Google's 1st page ..?










=3D"#26282A" face=3D"Helvetica">Hi, 

>






=3D"#201F1E" face=3D"Helvetica">I found your detail on

ang=3D"en-us">

face=3D"Helvetica"> 

pan>G
ont>
<=

font color=3D"#FF0000" face=3D"Helvetica">o

en-us">

=3D"Helvetica">o

lang=3D"en-us">g
span>
=3D"#00B050" face=3D"Helvetica">l
=


a">e

s">.

ang=3D"en-us">

elvetica">com and I have looked at your website and realize your website is=

great design but your website ranking not good all search engine

pan>
=3D"#201F1E" face=3D"Helvetica"> 

">

vetica">G

"en-us">o

pan lang=3D"en-us">

C000" face=3D"Helvetica">o

pan>g
ont>
<=

font color=3D"#00B050" face=3D"Helvetica">l

en-us">

=3D"Helvetica">e

"en-us">,

g=3D"en-us">

ace=3D"Helvetica"> AOL

pan lang=3D"en-us">,
n>
"#201F1E" face=3D"Helvetica"> 
<=

b>

ica">Yahoo,

s"> and

lang=3D"en-us">

" face=3D"Helvetica"> Bing

n>
font>






=3D"#201F1E" face=3D"Helvetica">Do you want more targeted visitors on your =

website? 

">






=3D"#201F1E" face=3D"Helvetica">We can place your website on
<=

span lang=3D"en-us">
01F1E" face=3D"Helvetica"> 
<=

/b>

">G

">o

ng=3D"en-us">

face=3D"Helvetica">o

pan lang=3D"en-us">g
b>
olor=3D"#00B050" face=3D"Helvetica">l

>

etica">e
=

's 1st page. Yahoo,  etc.).=

 

>






=3D"#201F1E" face=3D"Helvetica">May I send you quote? If interested. <=

/font>






=3D"#201F1E" face=3D"Helvetica">Regards, 

n-us">





<=

font color=3D"#002060" face=3D"Helvetica">somya

=3D"en-us">







=



------=_NextPart_000_0060_01DADC6A.93A32E40--

Amazon Prime membership phish from Microsoft outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 22 Jul 2024 06:36:57 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVsHA-00000000LTt-0Adj

for dave@doctor.nl2k.ab.ca;

Mon, 22 Jul 2024 06:36:24 -0600

Resent-From: The Doctor

Resent-Date: Mon, 22 Jul 2024 06:36:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn1nam02hn2233.outbound.protection.outlook.com ([52.100.160.233]:48006 helo=NAM02-BN1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVqaZ-000000006Pc-0laM

for sales@nk.ca;

Mon, 22 Jul 2024 04:48:31 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=U+FWPa5pQJ50z/DxRRkEjCgFapl+bCWedBTEsyAVSZALwQz7cmxXzRRwIKgAgNikf1j6GOyLHUZtxnvv+Clchrr5Mjo0uh3j6mGKXXzhEKlLuS2sWUSRPpQINZanR5U4EKUEZV+VJqdj3yQNvjh3G3+ro9xHV/pMRRKMY0J8nugRmNM8SbvI1X3vixnyp4zHmOh/LylpYbPH7XOK+qOU0Aw3vqYqbtT2snSB8cRkdzOzlCLo06l2S4BHmH2In43Eus3BKnTMFZJNF5esflcX9btNvx4Kxr9dqC6Y5HZ7lOUALQGDB+tzs+VWVCqiT81S9c9lNCicu7/5TOgJKX17Sg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=pMkoXmIOxrpG1wCFw0KYyrocgbchQubJUlwA7BxEWK0=;

b=kIadvelKQYeqOJi+hZq9SSBzuH1xq8popQRBSvNHlQBXtVOglgcmMArxeilfrNXWGkb7rUUzyB6m4mntTmn4HO50vRXPnNW2CzA+FLIGv/nqp6VIfSMU5qVipeSxlSyBV/cRS1yFRCwp/mgQ0u7fvyzbT4Kt1PNPWRZcTB5wpzj+qygEn6cv3mQ24Wpby6tyvlj0v/WDaovRg5+PDDexvR01/pBquWY75HRJKDX61PfW2QMOhXEDBKiUAJikwghVqlcIeTEXl1b0TkiabNFDImWJb7RN1/x/HL4FiccmXS/5OaYsHRqVaU9sgp8zNkIoaqnRc2Fger3EB2lqzIlZjA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=newscap-dispenserufr2.villaricaconstrucao.com.br; dmarc=pass

action=none header.from=newscap-dispenserufr2.villaricaconstrucao.com.br;

dkim=pass header.d=newscap-dispenserufr2.villaricaconstrucao.com.br; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ufrr.onmicrosoft.com;

s=selector2-ufrr-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=pMkoXmIOxrpG1wCFw0KYyrocgbchQubJUlwA7BxEWK0=;

b=2xUsOHkILD46pJPKZYctOZPYBEfPgYs6vFqaQ38RS0oI4iZMymkQyAkTfFabA/5GH4qsPNgzFRVycLcFyZI9X2DHAbrdGRNE+YUznVZxLJmHyeHeYddW6C0P9q0LmWW+lJ3/mLAI0xtwz8xYkebOSFyzZRwLo/dzUgbgKwf4NY99H+57l4aVofYYenodUPTRNc/ugpuX+lbSntP0EZYGzyzXkvFoWYH+o10HI8Wiwbt1p8lCrhNftfN2WrFvCaPDE/hDA/5p9I6rUO26rbMDedlhy1eUEgAn+kWsUnZOwzdc5YozTeGYciigOH83GSiTqXLDGJBOJf3WJqB12eEhYg==

Authentication-Results: dkim=none (message not signed)

header.d=none;dmarc=none action=none

header.from=newscap-dispenserufr2.villaricaconstrucao.com.br;

Received: from CPUPR80MB8376.lamprd80.prod.outlook.com (2603:10d6:103:2c0::6)

by CPWPR80MB6732.lamprd80.prod.outlook.com (2603:10d6:103:17b::5) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7807.6; Mon, 22 Jul

2024 10:46:15 +0000

Received: from CPUPR80MB8376.lamprd80.prod.outlook.com

([fe80::f6c4:c163:15e8:2427]) by CPUPR80MB8376.lamprd80.prod.outlook.com

([fe80::f6c4:c163:15e8:2427%4]) with mapi id 15.20.7807.005; Mon, 22 Jul 2024

10:46:14 +0000

Content-Type: multipart/alternative;

boundary="--_NmP-aa60d2874966556d-Part_1"

From: =?UTF-8?Q?Am=F3=A0=84=82=F3=A0=84=82az=F3=A0=84=82?=

=?UTF-8?Q?on=F3=A0=84=82=F3=A0=84=82_Pr?=

=?UTF-8?Q?=F3=A0=84=82i=F3=A0=84=82me?=



To: sales@nk.ca

Subject: =?UTF-8?Q?Y=E2=80=8Cour_Pr=E2=80=8Cime_Me=E2=80=8C?=

=?UTF-8?Q?mb=E2=80=8Cer=E2=80=8Cship_st=E2=80=8Cat?=

=?UTF-8?Q?em=E2=80=8Cent_wa=E2=80=8Cs_en=E2=80=8Cd?=

=?UTF-8?Q?=E2=80=8Ced_-_Y=E2=80=8Cour_re=E2=80=8Cn?=

=?UTF-8?Q?e=E2=80=8Cwal_sch=E2=80=8Ced=E2=80=8Cul?=

=?UTF-8?Q?=E2=80=8Ced_on_July_22=2C_2024=2E_=23AJP?=

=?UTF-8?Q?X-8601662=2E?=

Message-ID:



Date: Mon, 22 Jul 2024 10:46:09 +0000

X-ClientProxiedBy: FR3P281CA0113.DEUP281.PROD.OUTLOOK.COM

(2603:10a6:d10:a3::12) To CPUPR80MB8376.lamprd80.prod.outlook.com

(2603:10d6:103:2c0::6)

MIME-Version: 1.0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: CPUPR80MB8376:EE_|CPWPR80MB6732:EE_

X-MS-Office365-Filtering-Correlation-Id: fb164c53-e3e9-43d1-4303-08dcaa3b8162

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|1800799024|52116014|366016|69100299015|376014|41320700013|38350700014|95630200002;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?YmhCZTJyYVNZa2pwWTVjaXRxWmIzb0pMVlhwTE1BUWVHSUd0NmtIaWZFY3V6?=

=?utf-8?B?NDcwU0swV3R1a2E3QlVMN0JtN2Y4dDNxSHdEVnk4ZVZpZzNoTDMyZTdSQW5y?=

=?utf-8?B?V3VKTWRBMWpwVTRyZlVXSHBOR3g1RmZ5WGVZQ1E0RWhiQS9LOXZlVDJIU1hr?=

=?utf-8?B?YjRrczNCTGE3TTlIVkNTNVgwWmNRcVNSVm9UVC9rWFA2NnZ0aGRqc01Xd1JP?=

=?utf-8?B?RlEzTDhNVU1UbVpod0lVcGhnNjEyYkU5NTdpbnpIT0UrbUI4ZXFTcEh1UHJO?=

=?utf-8?B?NVExVm1hc1E1T25mZXl4b2hmUm9McWNGYWMrekRhSGxKdHhlQk83YmwvNFI4?=

=?utf-8?B?SEQwZDhTMW9IZC9FY0JCLys0N3h2WTIxOGJQNmkzMExqMVNBckJscjZ5WW94?=

=?utf-8?B?M3BuOFFhNU1MMDdzaHBOL3FCSmwzeTVPcDExbDgrK05WWGV3dEZUQkhXTkJP?=

=?utf-8?B?WGZMVmpyUUd2UHJhT3A3WnVzV3RYNGxpT0M5blhpMWJTaFdOZlZ4eS8yaDRO?=

=?utf-8?B?dHNUUEhnYnZSbEEyR3JwdU95QnVPUTFIaHFTd0VDNHFzeEMyc3Q4dGZra3Jz?=

=?utf-8?B?TVJ5TlZUY1FpMFlsODdta0wrMzVSNjVOVHkrdXlOVGc4NTQ1UmRoUzlYZlBv?=

=?utf-8?B?RTFtdk42b1RDdGxHamN1Ny9SanZwelBQNkZ5SWFMWXQrbW0vZnl5U1o4cmdM?=

=?utf-8?B?VkhTejVNWVBlZTJNWXMzSmlaVFpMUFFrRUY5UUR5TlR6ZUxSajhsTmVtRzFu?=

=?utf-8?B?SEFESjFEQk5HakcxVXNOQ2tUSmU5V2dTdHFaRGh4ZmJEZEo4OFRvb3RHR2xu?=

=?utf-8?B?V0tEMjZwcmtKTXB5SG10d3IydEtZeGhUVkFETHZSMDU3Q2VtVjc0ckdvWVF5?=

=?utf-8?B?V0VpaTRBblIxSkkyYmVySkp5b1Z2Zk5NZXZ6YU5oR2c1UjQwSU9zRDR2MFhG?=

=?utf-8?B?d3FTK0JDYzY5dXl3aUdFTEt5bzVBVDVhVFNSRGVSZ1RqclNhQWJuRHI1YXpP?=

=?utf-8?B?c01QSG5jZGl3eVBHdktpa3JXUlNOaytpeHlVVU5Kem5lUXBUQ2tSUzZHak1I?=

=?utf-8?B?K2hqOFJLcW1EYzN3eTRqWkJRdTh1by9wMWcyNUNDZGlIRFYyL3BkNkdsRjF1?=

=?utf-8?B?dGRWczNtNzVpclRZUUs2bFdrY1c0a3M5N1VIWDNlektxSmFmODRGYlVSVEZG?=

=?utf-8?B?eno4TzRoVlZmaG1QaGNYbjlmMW4zL0hwUHVRSjlVdlBhTWdEUXJVYWtyM2F6?=

=?utf-8?B?c1EzVVJtakdIWURPWXJVTHJpb2cxVDJPcmxRK2VHRXNYY3VEOEJSQWNqakJx?=

=?utf-8?B?N3VPTXI4OGp6aGhSWHJydDluOUhmc2ZrUjFsM2dTbGw3WkNJVWp6UDg0aUV1?=

=?utf-8?B?MHVNK2xLdkxFR0t4VFVETSt1blh1bTBYbnhvY1E5bnhkK3F3a3Ziek9CdHZU?=

=?utf-8?B?NEtKNkZodlZlQjhhb2g4Y2dESlZ5KzloRGpEWWhJV090dnBYbmltOWcxdUc0?=

=?utf-8?B?UWlLYlVnOGwwMjNCMGhMcDQzUWFqVjlPZm9yQ1lYNGMvRDlCQTlCNG9ITUpm?=

=?utf-8?B?MHBJckZ0TjZCWDJYaUF5M0lZRGhmWlNSK0ZBMlVvTkZ4Smc3UFMvTXhlaG9k?=

=?utf-8?B?aG1lODRxV1N2RWlENDdhT21MSDlVSlY4dHhpKzAxU0JrWTVSMTV0UDdFTFNj?=

=?utf-8?B?NmduTnpQOVl1ZVJSN0JKbERUcitrN1NURlFnOGRWb25PbjV6cDBtRWNubm95?=

=?utf-8?B?MDVlOG1jNC9YVXdHbUhiRUpEamNCbTN2ZzZCTStLZ2IvRmoyMStuR3UxZjkv?=

=?utf-8?B?cUpuUGtlU1RaakUwUmhoVmpSL0RNUXk4M0VWcDlJZWFVcFJrYURaRW5LRnFr?=

=?utf-8?B?Vjhua2M3Vnc5enhjNS9kR3A0dC9nZnIzNm1uMkxrbENsSzhpNEVvNW1HTEpI?=

=?utf-8?B?UGJkUGxlYjc5anlHNXdDSk5obFFEZ0VGZkxIaEpXM0lFdk81WThiRU1NVGY3?=

=?utf-8?B?RFc1REtsOWxlTVVmYWxlOGZuWFhZUEo1QUlmVFdLOVNoMDJtZXUzcUNLOTU5?=

=?utf-8?B?NktYeVhzZHBkWWJQK2crRm5CNVdPYzFmbWNscHU1MDRxTnkwSlBDYi94SFNq?=

=?utf-8?B?OFB5a2JBZCtPdEhHSlFLWndtTW1MM2dwb2VNRWw3Q2NJem5oSTNiUjRSckxo?=

=?utf-8?B?cGkzM01GOWNjekhzbXkrYnV5WDFNVW5kRU1uQ2g1NkNrUTV6TkFxUHoyTjg3?=

=?utf-8?B?ZzVhdmVGSnE4TkZUMWVJNi9La0Z5OHFIK2RCWmFDOVZLZDVIRVJGK3MyeUs4?=

=?utf-8?B?dytNMkJzT2t0eW5QcFV3c01ob1I5aXZYY0tyVzhwOTlYdHBybHRXenRQcjQy?=

=?utf-8?B?V0d3MXZPYnRwNGpheGtrOXpLS09KUnpIOTNsY3UrWERSNVliQTZaYVAvUW0w?=

=?utf-8?B?Qjc1OHB1QkJ6K3o4WHliV1kxRWdzQ0lwU1ZRNTQxS1NpR2hJUjJHSUxkK3hl?=

=?utf-8?B?STMrL00rU3FyNnAvZWF6NFpQNklnbkxPbkNqT0FnQ05GLzJyZEZRSENTUUJv?=

=?utf-8?B?QWx6dlJRdFVEMDNzMGVsZXNFN25rTGNwQWJvcmx0RnljNHFsMWR3aGNTck9o?=

=?utf-8?B?ZFcvSENiM2NHck9DUWRiNHc5eFZuck1ORGxDY0Zkc3lQK0c5am5XajZRWnFq?=

=?utf-8?B?bUdFMkFFQ3RBYWxCZUVHNjd0OFJFYWt4YUFBNTMxSmduVkluMkRLeUoxcEtn?=

=?utf-8?B?TDd2RFBEZDdDeHFONVRDT1E1UERVdFYyRy9JbVRpYVA2YVlOcEhBVzNnbHVV?=

=?utf-8?B?L0NZcDI5anAxUU1OUk1KanhxU201aFhaam45OHVFRDREdGhaVFRQOEJHRURn?=

=?utf-8?B?Vkt6UHZsSmZWTWpNQUVHVjZ2TlplOGs5VmF4cU9VUXVFT1EwaUl1OFF3TGRP?=

=?utf-8?B?MTk0TEkvYXV1N1dGd3lRQWpxa1NoTEpjdWhHbW4zNVNhWURHclNCTTZJWDV1?=

=?utf-8?B?Q0xFaHEra0NvUnZoczJncUdHb01VbkE4cm5ONC9Db1kxeWJ1ci9zNzZ1cEtG?=

=?utf-8?B?TjNJdUc5Y1l0SlhrbG9HY1kvVkpITGFKTVVYU3p1ZC9uR1hUOUE0YUxUZGhw?=

=?utf-8?B?V0ZQLyt1UklBRXlCaFRtdXowYlB1WHBmMEJqTVpqaGZ5bzVJdUxnUEhvZlho?=

=?utf-8?B?cytxTWp6RWhyQXVsRWd0Z2VrczJkMkxlazJUNHJkQ1NobnovR20zOWZqRlBX?=

=?utf-8?B?WFViYkdNd3ROVk5RL1FZcEVGSXJjV1lxM0xRcXIzNmdoU2ZMUVhvekFSb2tU?=

=?utf-8?B?U21yWFpwNU1oUTJQTzNCeWdtV2VLdUVnPT0=?=

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:9;SRV:;IPV:NLI;SFV:SPM;H:CPUPR80MB8376.lamprd80.prod.outlook.com;PTR:;CAT:OSPM;SFS:(13230040)(1800799024)(52116014)(366016)(69100299015)(376014)(41320700013)(38350700014)(95630200002);DIR:OUT;SFP:1501;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?S3M4cEo5YUMxc2MxZXg2VmwrK0JGRGFzSUcrbzIwZ2UwQ0RuUHA1Yll5bE92?=

=?utf-8?B?SFBCL3pyZ0o4aHc4anVmT082bm5hc3BNV1NmRlkweFQ2VXIwVG1sdWVZbXND?=

=?utf-8?B?T2h2dnNwcWxlT1NVclRCaWliSGpiWUxXOFB4RGNzc1JRT1ZHSzd0MDlwT2hY?=

=?utf-8?B?MThsR0xGRHd5YjVEMEUrQkZnVlJmN0NpaFFiOGJ1cmlPTVRrd1luVXRJODFw?=

=?utf-8?B?eHUrd0ZJa01NbDBnQVk4RlFCb2hjUlRzWDdvSzIrQVAvaUVIWVRLSGRhVkhD?=

=?utf-8?B?WFhVOFI0bDhIQlhSVnlsYm1NS2dJREpwV3VjQk1xYzhOWHJWWTZ3clpSeWdJ?=

=?utf-8?B?Qm1ZeTJpbzBxQklBaEpsTXA0R3RzbTBCWkRBS0hsUWF3bytXeVRLRTRPaTUy?=

=?utf-8?B?VTM0dDEvSnRXVnA2by9IMXFBSFIrS25KRUt4OUUwbFVZSWpGYjh3NGNKYWQ5?=

=?utf-8?B?YWJianJVa1JMbTJaeSswNTViL3hqQ2ZhMXZjN0Z4Y0ZPU3pxcXplNGZpRUxo?=

=?utf-8?B?MTdlYTZHUFVNcU5RQWdwSWVhNXhvWTQ5cFVLVHBrR2gvSGhhNFJ6NGhGdEtp?=

=?utf-8?B?NTVsdWo1aFd0U0FuVVRzYzJCRVhDeWlIWmZWOVZLcDhKb1d0VzMyRG5TejQ3?=

=?utf-8?B?ZkZ3WU9iTlJGQmYrZWhVSjFFZENkMHVRMCtVMHA2MnJiQTJtYlZCSndpM1RG?=

=?utf-8?B?NHNOVCtyY281cXh3R3dVdEZDZFFSMkdCZFBpVHhCWk1UYzFOUkVlRHozcHlQ?=

=?utf-8?B?aENLcUwyYi85a0NYQ3N1YmovNVE1SmRFMklvOEJpN2d5blc0STdVOEd0MzhL?=

=?utf-8?B?aDdUM1pPdUdOMCtqamphc0IwVDJ4RHI3UzUrcGI2VVFnREptM0hEK3FwTnht?=

=?utf-8?B?SUt2UDdqUEFrYjdxRW5KVGVLQ1R6YVdhY254cjNmZ0xiODhvdUg5YlBTNlJv?=

=?utf-8?B?WU5YZjNzNmhScVpvVC9BQ2FxbUVibEFqLzMvdG4vYVRmUlhheG9xdkxiKzNw?=

=?utf-8?B?Mm1JNDViNHF0eVMzV1FHZjc3V1FhbGZGRkRTekpCVzZLdWh4WGxUWXhZWjlR?=

=?utf-8?B?U2NYdEdWb3lxNEQvdlM5TkJ4WnBQK0kyUmRkdis3bmk0UzhyelZ5ak8wejFu?=

=?utf-8?B?QnVWWG8zZ3pGWThzc1pjL2xLVG5PODhwbllmbkltYnpIQ3JFYzZIbjlQeEdx?=

=?utf-8?B?bW1weE5nZjllZ2k5Yk5mYnhmYm5JUk44c3RkUFQzVzZjWjdvenF1c21JdUV5?=

=?utf-8?B?Q1lzVTFLaXBYbXB2ZmlneWVYSitQRHRTV2JHeXoyazgyU3J0M0MraC9mNmM0?=

=?utf-8?B?OXlZeVJKZUo0T0NpVGRKVXlOdllvRjlrWlIzZkUzVnA5blFNMVJ1QjlyZUg0?=

=?utf-8?B?YkMxUHFFdzI3OEhvQ0h5TjVGVm5HZ3l1QTlpaW5LQnR5Tm1YUGdsZEJjWlF0?=

=?utf-8?B?UUQxbUZSRURwdGtxZVJaK0wvZDZERzdjRmhUditNL2NTaGI5RmtuaTVUZ1RO?=

=?utf-8?B?WG5rYzhlZTRxM1RjWDZabzV1SFUveGVZWVVKckR1OGxNOGE5akszM3ZlWWFC?=

=?utf-8?B?aXRWRGFTekNkblliMFdNb2lZUDFTbDEyWlFuTDdNd1FHSERvUmJsb0lCZWd3?=

=?utf-8?B?bmU1bG1iVEtyZS9sL01aM1pRd29tdXI2UFlTTGJadEczUkp3QVBvSStBRVh5?=

=?utf-8?B?WDJ1VjBmbjJVb2YvRjRzV2lSd2F3dDZwK0w2M1pzdjM2OFpjL21MUHN1M2tN?=

=?utf-8?B?U1ltNWRVZjVZS2FoM3IzdmRBYk9zZkJBRkVvT1FoZzVZaC85ZFRBbndNSnU2?=

=?utf-8?B?OTY2TW0vYnZZenB2amJ0a1g4Vm1UdGlDUk5mUyszNVBaMjBRL2JiZUo3cUV6?=

=?utf-8?B?Nk93a0pvQlAxU3ltcGtlMmJQU0ViUGR5UlNWNHlSTGhKOFEzZFFReTlQczgy?=

=?utf-8?B?T3I0NmtBa2pYN2FERzRSU3lpYmhKTGdLNThScmU1WTVWSXF1MlpsL2ZLeDFa?=

=?utf-8?B?OXVRelJ0RzdZSFJSYlRoNURJYWFkbC8yZlh0OUVydGxuQkN0WjVSdGNIMWQ2?=

=?utf-8?B?Q09FazhPVTVvTGg3OGdDMFZxZ2tVaG9udEhtRERINEltZmZaRTJvNnpCZnY4?=

=?utf-8?B?dWY5NGlXdjlkTEZ0ZXg4aU4vNlY5a0V4UU9KRzV2bXhGMEx4a1ROL1JUdDhk?=

=?utf-8?B?bUttQUtJdTNtdkpjZHRWZ3lyb1dXcGZQakljcy9mT3dQQ3I1VDFzR1dYQW1x?=

=?utf-8?B?V09HdytBQ1BNaWlRT29HV1ZSbldPYk41Uk1yWGdUMStXTDRmZlcvQURBVDdS?=

=?utf-8?B?T0hOOWpFK1JHZm05ck10WFNtSk1QRCsvUkJ1c20zMGtIelkzNHlXcTVyZnNv?=

=?utf-8?Q?1Idht6UoRmj7KbRk=3D?=

X-OriginatorOrg: newscap-dispenserufr2.villaricaconstrucao.com.br

X-MS-Exchange-CrossTenant-Network-Message-Id: fb164c53-e3e9-43d1-4303-08dcaa3b8162

X-MS-Exchange-CrossTenant-AuthSource: CPUPR80MB8376.lamprd80.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Jul 2024 10:46:13.3064

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: f3cf7a8a-f412-47a1-9ee9-3f27c6cf9872

X-MS-Exchange-CrossTenant-MailboxType: HOSTED

X-MS-Exchange-CrossTenant-UserPrincipalName: 3mFrtn2JIlta+SLkJTNZnTiqNEBjsNG8bizqB1v8Xj8QICcSCPzCq7urOOPvTwa7KdP99RNBsuiLmNhXK16CmwjXKX+LlE3VlN4x6EY2tQvhScvDoBtNqZVf7mHCUfcj3ZXnBUif89qzCTN3c/mTOS04kmnQ2Aaisxn9wR00J5dduDCiXp4jI2ZZCL7Lr7CzHHs3O9D2X72Ss/3C4hPE9AvViHxmgBR6s6YoBWcKGpaoX+RJTN6Jbt09beF3cGBn

X-MS-Exchange-Transport-CrossTenantHeadersStamped: CPWPR80MB6732

X-Spam_score: 13.4

X-Spam_score_int: 134

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: normal Hi Customer, Your Amazon Prime Membership is set to

renew on July 22, 2024. However, we've noticed that the payment method associated

with your Prime membership is no longer valid. To prevent interruption of

your benefits, we will try charging other active cards associated with your

Amazon account if we can't charge your default card. If we are still unable

to process the charge [...]



Content analysis details: (13.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.100.160.233 listed in dnsbl.ahbl.org]

[52.100.160.233 listed in dnsbl.ahbl.org]

[52.100.160.233 listed in dnsbl.ahbl.org]

[52.100.160.233 listed in dnsbl.ahbl.org]

[2603:10d6:103:2c0:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:10d6:103:2c0:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:10d6:103:2c0:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:10d6:103:2c0:0:0:0:6 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.100.160.233 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.100.160.233 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.100.160.233 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.100.160.233 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.100.160.233 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10d6:103:2c0:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:2c0:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:2c0:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:2c0:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:2c0:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:2c0:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:2c0:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:2c0:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[52.100.160.233 listed in will-spam-for-food.eu.org]

[52.100.160.233 listed in will-spam-for-food.eu.org]

[52.100.160.233 listed in will-spam-for-food.eu.org]

[52.100.160.233 listed in will-spam-for-food.eu.org]

[52.100.160.233 listed in will-spam-for-food.eu.org]

[52.100.160.233 listed in will-spam-for-food.eu.org]

[52.100.160.233 listed in will-spam-for-food.eu.org]

[52.100.160.233 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.3 MANGLED_YOUR BODY: mangled your

0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

2.5 AMAZON_IMG_NOT_RCVD_AMZN Amazon hosted image but message not from

Amazon

Subject: {SPAM?} =?UTF-8?Q?Y=E2=80=8Cour_Pr=E2=80=8Cime_Me=E2=80=8C?=

=?UTF-8?Q?mb=E2=80=8Cer=E2=80=8Cship_st=E2=80=8Cat?=

=?UTF-8?Q?em=E2=80=8Cent_wa=E2=80=8Cs_en=E2=80=8Cd?=

=?UTF-8?Q?=E2=80=8Ced_-_Y=E2=80=8Cour_re=E2=80=8Cn?=

=?UTF-8?Q?e=E2=80=8Cwal_sch=E2=80=8Ced=E2=80=8Cul?=

=?UTF-8?Q?=E2=80=8Ced_on_July_22=2C_2024=2E_=23AJP?=

=?UTF-8?Q?X-8601662=2E?=



----_NmP-aa60d2874966556d-Part_1

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit



normal

----_NmP-aa60d2874966556d-Part_1

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable




iv>


















=3D"100%" class=3D"x_main-container" style=3D"width:100%; max-width:578px; =

min-width:343px">


; , helvetica , sans-serif;padding: 0;font-size: 12.0px;">
src=3D"https://www.amazon.com/gp/r.html?C=3D22OZ1BEB03QU3&K=3D3AOGK6FW=

83WY&M=3Durn:rtn:msg:202305112313078945fe3526264cb392d42c60efb0p0na&=

;R=3D2TYJQXXU3SPJM&T=3DO&U=3Dhttps%3A%2F%2Fimages-na.ssl-images-ama=

zon.com%2Fimages%2FG%2F01%2Fnav%2Ftransp.gif&H=3DHCCAVLQJETEG009VAJNSWW=

MC3YAA&ref_=3Dpe_5453880_722419830_opens" width=3D"1">


6);">


=3D"border-collapse: collapse;border-spacing: 0.0px;padding: 0;Margin: 0;wi=

dth: 100.0%;height: 100.0%;background-repeat: repeat;background-position: c=

enter top;background-color: rgb(246,246,246);" width=3D"100%">








=3D"0" cellspacing=3D"0" class=3D"es-content-body" style=3D"border-collapse=

: collapse;border-spacing: 0.0px;background-color: rgb(255,255,255);width: =

600.0px;">






padding-top: 20.0px;padding-left: 20.0px;padding-right: 20.0px;">


e=3D"border-collapse: collapse;border-spacing: 0.0px;" width=3D"100%">












Margin: 0;width: 560.0px;" valign=3D"top">


"0" style=3D"border-collapse: collapse;border-spacing: 0.0px;" width=3D"100=

%">












ding: 20;Margin: 0;font-size: 0.0px;">3D""
=3D"https://m.media-amazon.com/images/G/46/e-mail/logos/amzn_logo_primev2_1=

10x48._CB663794352_.png" style=3D"display: block;border: 0;outline: none;te=

xt-decoration: none;" width=3D"124">



"background-color:#ffffff; text-align:center; padding-bottom:52px">


32" width=3D"100%" style=3D"padding-top:7px; width:100%; border-top:1px sol=

id #e5e5e5">



>








=3D"100%">


















ss=3D"x_email-content" align=3D"left" style=3D"font-family:CircularStd,Aria=

l; font-size:16px; line-height:1.5; letter-spacing:0.2px; color:#171731; te=

xt-align:left">


" width=3D"100%" style=3D"padding-bottom:32px; font-size:18px; color:#00405=

D">
















b-12" align=3D"left" style=3D"padding-bottom:12px; font-family:CircularStd,=

Arial; font-size:15px; font-weight:bold; line-height:1.67; letter-spacing:0=

.38px; color:#13126c; text-align:left; margin:0">Hi Customer,




raph" style=3D"margin-bottom:24px">Your Amazon Prime Membership is set to r=

enew on July 22, 2024. However, we've noticed that the payment method assoc=

iated with your Prime membership is no longer valid.



ss=3D"x_email-content" align=3D"left" style=3D"font-family:CircularStd,Aria=

l; font-size:16px; line-height:1.5; letter-spacing:0.2px; color:#171731; te=

xt-align:left">


raph" style=3D"margin-bottom:24px">To prevent interruption of your benefits=

, we will try charging other active cards associated with your Amazon accou=

nt if we can't charge your default card. If we are still unable to process =

the charge for your membership fee, your Amazon Prime benefits will be paus=

ed.













<=

img height=3D"0" style=3D"visibility: hidden;overflow: hidden;border: 0;" w=

idth=3D"0">





















"top" width=3D"480">














.0px;">
r: 0;" width=3D"1">





llspacing=3D"0" width=3D"280">












style=3D"color: rgb(48,57,66);display: block;">
ncia.regioncusco.gob.pe/attach" style=3D"color: rgb(48,57,66);font-size: 14=

.0px;font-weight: bold;font-family: Arial , sans-serif;text-decoration: non=

e;line-height: 40.0px;width: 100.0%;display: inline-block;" target=3D"_blan=

k">Update payment information




















<=

img height=3D"0" src=3D"https://images-na.ssl-images-amazon.com/images/G/01=

/e-mail/img14/shards/img/bfd/sp.gif" style=3D"visibility: hidden;overflow: =

hidden;border: 0;" width=3D"1">





th330" width=3D"500">












op" width=3D"493">


ly: Arial , Helvetica , sans-serif;font-size: 12.0px;line-height: 16.0px;co=

lor: rgb(51,51,51);">














idth330" width=3D"500">












llstripe" width=3D"500">






















e-height: 30.0px;">
hidden;border: 0;" width=3D"1">















=3D"3" style=3D"line-height: 3.0px;" width=3D"500">
=3D"visibility: hidden;overflow: hidden;border: 0;" width=3D"1">














=


width=3D"1">





















op" width=3D"480">


sans-serif;font-size: 10.0px;line-height: 12.0px;color: rgb(102,102,102);fo=

nt-weight: normal;">=C2=A9 Amazon.com, Inc. or its affiliates. All rights r=

eserved. Amazon, Amazon.com, Prime, the Amazon.com logo and 1-Click are reg=

istered trademarks of Amazon.com, Inc. or its affiliates.





Amazon.com, 410 Terry Avenue N., Seattle, WA =

98109-5210.





















=3D"line-height: 1.0px;">
flow: hidden;border: 0;" width=3D"1">


=



----_NmP-aa60d2874966556d-Part_1--

Web / SEO/ App spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 21 Jul 2024 12:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVbRH-00000000K4O-2sKe

for dave@doctor.nl2k.ab.ca;

Sun, 21 Jul 2024 12:37:43 -0600

Resent-From: The Doctor

Resent-Date: Sun, 21 Jul 2024 12:37:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-sgaapc01olkn2026.outbound.protection.outlook.com ([40.92.53.26]:9090 helo=APC01-SG2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVYFT-00000000FHx-024l

for sales@nk.ca;

Sun, 21 Jul 2024 09:13:23 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=ZKp1ApuecV48QG4ssVoNa6wxbjcn083Z6pD1uPG2AQ2uY7scNxrPDIGSFlSNZE2MItWTYFQWX8rRIjjpDwwQAOd2Dj22t+3HQt1R0119YVVHaCjNDuhiUu6mVAsIDlw9BXqsJIuh4OAy0irK78Jeiqx3H5NfuggeeOoCnVOeEe7Oh3ePC35nPbrDFHWrXBOkMt6O3pAg7zwzRhu+cU9ID5GIPpCQ4tFKlDO2yfpRCWfy4dXPkHBV66McjLXVUY6BGFFPfSsKArd78ePrj3A+aJB2vIgKbAO+EwZiQGUoJpCR0KYL5X77m5lVTobJL3saVo2Sv/e8DYMjvGPdWPmZww==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=eFZCb64vaWOd84/E+jnzbYoST4mWScF0RvFxjOFjXZ8=;

b=sX8iiVobTSGF3t7RAUO78XTME4XzzbsAFUOMtf0cIXjAUI137ut+DbDUal5K7/f9+tXaTequJKNm64rg3/1WK7ws9f+fBO6irg1q/ADj/Tb1dlKE85bCVrc1WOXVdB6X5vL4qN81aC1aXyV0HgUPyz3J7Cfj04awidqhWAZa1MGfncNzJugu7mTg1007IVJlkX1mxWekpRRsXjCQfgEDnVuSLCaQN+iehHQB+KJmKEKhlfactQC6f7o1EU7qJgWX3JfwyvaATsx/YsyWsdCH70kCEnvY4461yy1kMGuHuFVU2CClsYJdiars4j27SFgBR0T9J/xa0eUrQiD+Oij83A==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=eFZCb64vaWOd84/E+jnzbYoST4mWScF0RvFxjOFjXZ8=;

b=ELb65bMkfNkZWnYKQPdKnrLrQwEMiiZpgqcVUzJEyJC9QeV/du9ZQ8WPvgka3249S8deHlkxOWP1PqDJCn+4oUu7IAroYSg4IFMeq184oEK2Xr8vfpVn7hDeJmffEiW/09HLPQlZmH5OZJSME6Vis4VwL8q3U5o8UYMQY0yL8DGNiMrr46n0srMyOJf9redwvFfY8P96iXZ51eAGDzcgt+7oBC8N68n2Yd8PAbhMQEwYxVROsuT2Y9MD7a49JOsYR4aHmkLVOXb0bxOlH813BP859KxHf1hHQSav1FfsDfWLBQiQOc50oPcl8g+RDbP2ClW/WNQUh7XA7w5FFoIHcw==

Received: from SEZPR03MB8868.apcprd03.prod.outlook.com (2603:1096:101:250::10)

by SI2PR03MB6857.apcprd03.prod.outlook.com (2603:1096:4:19e::13) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7784.20; Sun, 21 Jul

2024 15:10:55 +0000

Received: from SEZPR03MB8868.apcprd03.prod.outlook.com

([fe80::24ac:3e1f:1b4f:437c]) by SEZPR03MB8868.apcprd03.prod.outlook.com

([fe80::24ac:3e1f:1b4f:437c%4]) with mapi id 15.20.7762.027; Sun, 21 Jul 2024

15:10:55 +0000

From: Jone Eliya

Subject: Re: Yes

Thread-Topic: Yes

Thread-Index: AQHa24Aeain/XonDy02dJDhNwzwy6Q==

Date: Sun, 21 Jul 2024 15:10:55 +0000

Message-ID:



Accept-Language: en-GB, en-US

Content-Language: en-GB

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [X5AOdTxFex6vFlXuOk2hX1xKy8sbVJNIgwJcfsRqSHQKMgD7+5MTSq9fTIaEh0yp]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SEZPR03MB8868:EE_|SI2PR03MB6857:EE_

x-ms-office365-filtering-correlation-id: fce9bb2c-86a0-4b95-ba32-08dca9975178

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|8060799006|461199028|19110799003|3412199025|440099028|102099032;

x-microsoft-antispam-message-info:

Ke0rPBjM8B9wPbShipFpNIgBGjqyYA972DdN1RfSYTQysI9cAd/8rd895p9E/bbXajMlYk14cszdc5fcMf2uIHV1PrtsLpO9CRGuv0xpQrJ2g1+Ev8yuKELnHCNSkquWMfnEBqCs6VT15TlMxe16rxJJyhlx22Ob9rkxPyza8c9hiVMVkrWMdP+WupW4b76boAlW0OveVCyTrchbpvWvg4EV5itGy2tNobai3iZ1wVHbBnDtup41u8JqV2QYUssk3Mf7WtgSg0Xp9LQsvSGjxXicKF8AkkqKmviDvnIQuXGL0s7aWXaQOCax/VJWCGGqW9RTj2GbkVKYpKf50z7XN0KvMea06cY0/Tx8cl7kuY0wWSPpxuv0dGIw7TVRsgsgvxAtz/Ph39bEC5spqK3jajSh4GwyLrBjmJpmg969TmSmKoUsCUduQRrePzs4f/gIx7+gsGxmmHPY4LLkurre4K7voGyNVckHt4CQjDIFxtbTVjemvDvv9rYW5hqrSMaIj/BJKkJfRnneFvUwK7KjWu/FOL5O+sU1IUpl3VwCccl0GeY6KDA5alUhfU9zOmW8vpJXgMldu+T4NmYB7oUMu5QgmgpD6RFUwas9OfV9FEh018Kvu7eQsO6v+cvXx/fexNOga+Xia/DHpn34Y9Mqeg==

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?uCFtLBH60ZPYZGQQHa7FhDFuonDJkh1QOsHcAeAtd75Q3ne60WUoCoX/?=

=?Windows-1252?Q?TqoOsTRIQ4//RBif1vhkywOAMSkdWl4sD1GqdgUQT3MBVayvsSer7NFz?=

=?Windows-1252?Q?sdlmY+jYXGMpxCaQz5C8p+SRNXHKY4tSkv/e0ajrCLAeNMoF/bifpbMu?=

=?Windows-1252?Q?Jw+xvMp1GTBgdfTlJJLJ+OebdTCrbSL/zSElANOFq+VlC6lMCzIHNgFD?=

=?Windows-1252?Q?S1TLX/e0mHMuyJvYLFI8D47+x4SRQrcA2nx6tXFBU05/BS0PttSe0vCa?=

=?Windows-1252?Q?gwOV1oJ1KbXCVGYC5khK7PKcDS3AE8RRBrSkT/BYLOaV94Aqw50hxRp4?=

=?Windows-1252?Q?3gnWMmPngq9YIuJHmxSCj9oUcTtS3+BrlPNq1qIhDajNmqHWJjlXckD/?=

=?Windows-1252?Q?BVNioNsNJqoVNxnacg2dCDCi+8K0yg9VwxA2V6Y2a8W+4dRdB9rxS3XB?=

=?Windows-1252?Q?Ug+y8KjlxOn/e8ksdocCJbOHv4mZol12d5k28n7GzeabbHQ46VM7Yu5k?=

=?Windows-1252?Q?o1LHJPO43Gwj7L6yyz2MepuX2srIM48Gov0fWhY26pSmisE4Z3xHzx/s?=

=?Windows-1252?Q?hh5zz4voR5XYTTO3t+3FQ6dmYcxA1MTMgjaF2+/oQ66UszBi+ejMSO7k?=

=?Windows-1252?Q?yHC6kRn+1FZjPhikRAEqIh9OadyXqXh+BwOg9eWsylrglxWQK+v3urjR?=

=?Windows-1252?Q?UekUWZhvvnwRbz9odQslxrmZysyI3EIfveQw0oe6qnMzaEExvLAeYbN7?=

=?Windows-1252?Q?JTIRItTMROzPH56wxG52exlhtugnv6VJAe+E0RUEp0U3l8PYopzBeTUk?=

=?Windows-1252?Q?tAb9bTSYAnl96i0hDYFDrKOBGSEqnTn+zcjWqA4Rg+DWhWqGZG/dEHw/?=

=?Windows-1252?Q?BnMTpBsbRQLG1KO5wwzZeA6jqJxJCbyGzik9XZAmNiYsspNsDq6b+5+1?=

=?Windows-1252?Q?kDVgnBpw+bCP+FOe9EXRXiDMtP3Rz8XT2ZFOMZXN3m6+W8VCAhuEmATv?=

=?Windows-1252?Q?cnGyIkS11yljrI7DWZ6Nvd7Z4LWTs4ulmVmomz5VPU1fCozBrok7J2nE?=

=?Windows-1252?Q?iyKlhQ8+MIFTJnfJjT1JUgu4HvcjYzsh1rYuYkuOFVK8/inBS5S/2Scj?=

=?Windows-1252?Q?DivASB2P/ZxwkfwPs26yRpOl5PS3yfNdh34mjR1fs160nGNmVWiybLBN?=

=?Windows-1252?Q?6TPqsKTKbo1N0J/Pljr46PidmTKSzKxHgAIrJ98mhgEG4CQoDy40Cwha?=

=?Windows-1252?Q?ZWzpbvqKQEcWG6cojex+FFBH1t9L1AITMDhOaESfb24gXhwZz6Je+48h?=

=?Windows-1252?Q?hD3UnJfBRMFrRpMH+v1eeHd3p/yIZtA9TAPt4pcIOqn1Qw4hRos7Ytfv?=

=?Windows-1252?Q?3osbYcUqA664Br/nTu5/th2F3J/YNU/YNzv+ooah7+Mn6klXGnjmWtxv?=

Content-Type: multipart/alternative;

boundary="_000_SEZPR03MB88683464A777BA9529A1479684AF2SEZPR03MB8868apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-7741-18-msonline-outlook-a0ec3.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SEZPR03MB8868.apcprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: fce9bb2c-86a0-4b95-ba32-08dca9975178

X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Jul 2024 15:10:55.1394

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SI2PR03MB6857

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I was checking your website. It looks great, but it’s

not ranking on Google's 1st page. While browsing through your site, I came

across a few errors.



Content analysis details: (7.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.53.26 listed in dnsbl.ahbl.org]

[40.92.53.26 listed in dnsbl.ahbl.org]

[40.92.53.26 listed in dnsbl.ahbl.org]

[40.92.53.26 listed in dnsbl.ahbl.org]

[2603:1096:101:250:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:250:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:250:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:250:0:0:0:10 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.53.26 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.53.26 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.53.26 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.53.26 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:101:250:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:250:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:250:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:250:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:250:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:250:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:250:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:250:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[40.92.53.26 listed in will-spam-for-food.eu.org]

[40.92.53.26 listed in will-spam-for-food.eu.org]

[40.92.53.26 listed in will-spam-for-food.eu.org]

[40.92.53.26 listed in will-spam-for-food.eu.org]

[40.92.53.26 listed in will-spam-for-food.eu.org]

[40.92.53.26 listed in will-spam-for-food.eu.org]

[40.92.53.26 listed in will-spam-for-food.eu.org]

[40.92.53.26 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.53.26 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[webdesignerservices132(at)hotmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[webdesignerservices132(at)hotmail.com]

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Re: Yes



--_000_SEZPR03MB88683464A777BA9529A1479684AF2SEZPR03MB8868apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hello,



I was checking your website. It looks great, but it=92s not ranking on Goog=

le's 1st page.



While browsing through your site, I came across a few errors.



With your permissions: Would it be helpful if I share a Screenshot of these=

issues?



Can I show you the errors.?



Thank you....



--_000_SEZPR03MB88683464A777BA9529A1479684AF2SEZPR03MB8868apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hello,



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I was checking your website. It looks great, but it=92s not ranking on Goog=

le's 1st page.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

While browsing through your site, I came across a few errors.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

With your permissions: Would it be helpful if I share a Screenshot of these=

issues?



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Can I show you the errors.?



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Thank you....








--_000_SEZPR03MB88683464A777BA9529A1479684AF2SEZPR03MB8868apcp_--

Ukrainian dating spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 21 Jul 2024 06:13:03 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVVQG-000000003be-0Yaa

for dave@doctor.nl2k.ab.ca;

Sun, 21 Jul 2024 06:12:16 -0600

Resent-From: The Doctor

Resent-Date: Sun, 21 Jul 2024 06:12:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-psaapc01olkn2106.outbound.protection.outlook.com ([40.92.52.106]:42734 helo=APC01-PSA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVUiC-00000000Mw9-3Isg

for doctor@doctor.nl2k.ab.ca;

Sun, 21 Jul 2024 05:26:55 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=WiWup1wXw2Op+TBgXxfXyl5vOiPVsE2VM71wpn7F8rpqRAp7Ae77CURUcmlFm4NmPyUSZA1n99sJm6Vphoa1iVRe5ERLRWvavQ7/nKNrvUPBbvDHO2T9omOClYQteFn4Fs9YB93hIxjp5Bi1B7lGHM+QocVGfV6lBqotqn71kloFKU2TDbSDYMA2ZnODc1sdgOliFory8UBJ099L4jsXcNgYF4sA49FdJ5bShTpbzbgIgL+dVUNAUlzfeEv2EHq6Y2+on8iXFY+S3A/TbKvJJD85SbVvqzXywYlvxoELd9v6NK2k0DYvDSN2YJVQj16AjETXXoWaXBk4Ga71E7X3Kw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=bOIe3nVEC43wsODtnc7kv2aeXjrRvQBQD/gF+h3NXtg=;

b=L5ckaOfxq+ocH+KarV0ccalCptaX/Kde4Y1YAqIRRh03TlGCnjgxQMLuMx2lSFS8sfgoqpTUKq2Mgkbp0mifvQWvBAs7XfVTi5YL6Y9Rg8HNzOPxWu6EHkdZLYlJ3jDDtz5Y0/mXSr8YL/oUDbrhxD44EXtTZuo1MFdO9Vyw+rvoZllJTDsZcsP03QHldq9u5G/mhDImPJB1qq8eNc+85ihBvRi0In+9OyU6PsCTrwKSb2VeYcFnUn0aSLlwzHDGoxUJRpMqIbl5BtgI5QjKHPcloe0cB8dvxgCAdHDzI72OJxpd+nVmp1AYq9YvhYVG5E4G78qaf20OVY1G2/fLbw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=bOIe3nVEC43wsODtnc7kv2aeXjrRvQBQD/gF+h3NXtg=;

b=jPXY+r3zyi6aT8qqfUvQy/aferbDhWGcPUiprGxF+Ksh2UkoZm6f9TmqFHdIcMnfE/rtG0oit0txnMBt7KcZRt1Mwu7FWoqRy6nMnTPO192j/ROIJMSYdSNCXE4qJhmMRdklNIEOPiDoPqw3Z7szfd7X5yJDXPe+kCC6dUxQEDKKoBaaYpAIW+bJbySqS5s2+A0P6p3EIYlaiO4rE1uxuIiMc+JMTRuBthAzj4kU0nexDgA2JfRkgn/Hm+moEP0QkdXXDPrRtWL3yGzjmZlnQvLYkp8cwpjIFywqUBHmGSP+0SAPeLnEZFcRnwfS/OYpEsN/NwamKDytv1jnHo7tNQ==

Received: from SEZPR01MB5319.apcprd01.prod.exchangelabs.com

(2603:1096:101:ef::14) by SI2PR01MB4345.apcprd01.prod.exchangelabs.com

(2603:1096:4:1ad::8) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7762.28; Sun, 21 Jul

2024 11:23:23 +0000

Received: from SEZPR01MB5319.apcprd01.prod.exchangelabs.com

([fe80::9b17:e363:96fc:f8f1]) by SEZPR01MB5319.apcprd01.prod.exchangelabs.com

([fe80::9b17:e363:96fc:f8f1%6]) with mapi id 15.20.7762.025; Sun, 21 Jul 2024

11:23:23 +0000

From: "sidotiqekappetc@hotmail.com"

Subject: SingleUkrainianBeauty site is out now, join today for free!

Reply-To: "sidotiqekappetc@hotmail.com"

X-Mailer: Evolution

Date: Sun, 21 Jul 2024 13:23:16 +0200

Message-ID:



Content-Type: multipart/alternative;

boundary="----=_NextPart_000_C938_39314D7A.CCCB4C77"

To: Undisclosed recipients:;

X-TMN: [omt63XsyiX1qvToiU9fqOgXNwHMhs2+S]

X-ClientProxiedBy: VI1PR04CA0082.eurprd04.prod.outlook.com

(2603:10a6:803:64::17) To SEZPR01MB5319.apcprd01.prod.exchangelabs.com

(2603:1096:101:ef::14)

X-Microsoft-Original-Message-ID: <1.c56a977aa7cddb039edb@DESKTOP-7K7S413>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: SEZPR01MB5319:EE_|SI2PR01MB4345:EE_

X-MS-Office365-Filtering-Correlation-Id: 7a011072-814f-47c0-622a-08dca9778677

X-Microsoft-Antispam:

BCL:0;ARA:14566002|9400799024|461199028|8060799006|19110799003|42300799015|12050799009|56899033|4302099013|3412199025|1602099012|440099028|4601999012;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?VTlVaHRxN0kxRXpYcEFsM3I5Z3VOK0tMYVBuMGtlOXF6Q1pQWld1R3NjRUZz?=

=?utf-8?B?cFVVSDJYYndoeXl0VG1QV3RCM3g3YlpOQWVVYnoxeDVkSUxpVHptaFpxTnFk?=

=?utf-8?B?V20vOGo1U1JQSzZZUWlEMGVlN1BOWEpRNVVBdUkyR1hvRTd5dzhhT2Z5NEtQ?=

=?utf-8?B?c3lzb3ZneTF3bjluTjAwNUx4aHRkejFEbTNKVTEvak1ycDlOeG9pOVJSZmE2?=

=?utf-8?B?U0FMR0gwYlBXZTZObWM3c0R3a3BsTkhQY1BJZ01ueFMwNGpucUN0TGVQMUFJ?=

=?utf-8?B?SkNwWk9oWVhrcHk0WW9icVBMcnEwS3pKT05PbW14cGtOK2tQcHpqcTI1VCtR?=

=?utf-8?B?Qml3ZWs4QWk5ZXRQTzduZ2IranFCTmV4RllOM2tiNk55Qk5OLzdPMVhCSDBk?=

=?utf-8?B?U1AwMWRYOCtGdFY3WnplU0hBMEJUK3d6d0FXVTlDUFZXazY3RkdiRmpqRlVT?=

=?utf-8?B?R1prL254ZXVNbHlEQ1JpRkU0ZkxJRFB3UnkvbytBRzV4QklaZlREaDFsWGRF?=

=?utf-8?B?OEhocFhZVTlReE9TdSt3d2hUS1c4S09NN3dNUHNOZ0JhOERlUUUvdFFXaGJC?=

=?utf-8?B?MExhM0pnUkgrdVYxOVVVRVZaSUgxMFRlVDBrL0RIQWxzYVVSRG0zZnUra0w4?=

=?utf-8?B?Y2tZSUdLaFRuZmM3OStza1J6dzNxOGhudUxZTjN3U2lueldXSnRkZVdQYTZ4?=

=?utf-8?B?Uzl4U2ZKblJlcG85c1JCU2VOSUFuNUZjZ2RnVGVqSU1mcWtoVk9ibFlvcXZw?=

=?utf-8?B?azFaOERWVGxPNFNLbjVLYVp3ZzdpcFdmSjZERU05SElDWDNJNDQ2WW1TcTVZ?=

=?utf-8?B?QzBaZjNxQUI4eTYxODhXemNLNmdGc3hVV3JPRGRHbkpJOHNWOW9MamdkWk9s?=

=?utf-8?B?blhJYUdaLzRqTkJRWXdNcjlwZ3ZtSC8yamxYSlFlTXpTZC90ZXBhN1plUE1M?=

=?utf-8?B?Tmx0SzlibXl6TGhLR04razRRK0ltVHZjVHdHekxXY09YckpseGtPc2lNd2hG?=

=?utf-8?B?QXplbFFXRy9aamdsY0EvUDZqcTkvK2xwbWxjbkljcytaMytUcG1aSkxYTXp1?=

=?utf-8?B?NU52ZzlKaWJiYlVmUTRkZUhUMnYyOS9UV0k0K1V3ak82d1R1ejR1S3kydnl4?=

=?utf-8?B?WmplR0ZrVjF0S1E5dFcwVDRuZUM2QUNoMzhZRnFOOHRjdGJlOE5QZ1d2RkxZ?=

=?utf-8?B?dkh3SzNQZlNLOWZXcURzK3JOY3lteDhKQS9NS1NaSWlWSVZlb3Y0bTFZOS80?=

=?utf-8?B?Tmp3ZW1QQkt3Rmx3RGtuL0o1bHgwUEg2YzdsLytxNCtPNVl0VmdROEZKMVVK?=

=?utf-8?B?TDB1YS83RzFWNHJnaGdZV0s3d0NRVFRycXpmUmU5c08waENKYmxpaHhMUC9p?=

=?utf-8?B?elBMY2tYb2NhRlRVQVlVZ0gvOVpFQVNYUmZWMXRKdTRqU1ZjeDlaL0IwSVB1?=

=?utf-8?B?L3ppL2MzTUxQUDA3WEtPUXpDUldzcUYvQ2RudkdtSGNVTTZwMWNyWXlHRThh?=

=?utf-8?B?WkdRVG9tMnFBdXpaY0VRYlRjajZpQ1U4bkY1YWsydUoycENyTGlvVnJPMXE5?=

=?utf-8?B?YlZ2a25LaHFFVHhPZjM1am1SdVg2WDNkTFptdXl2aUtreXhXN2VuZVp5emFL?=

=?utf-8?B?MEhpcXkwbnBJQktvZmJBV09jbEl6Y1F1SHc0cEl1QXpvUnNBMnpTWWpLSlpY?=

=?utf-8?B?aGI3ekVPTExlSXRiaWlmL0lSNDJxWFl6ZkJlZkhZcE1KY1BEUXRObnk3d21T?=

=?utf-8?B?SHNsQ05wUkxldWNNSngyUjhsUlo3OGVHZVcrYU1uWlV1YnA4ei8zcDRFM2xx?=

=?utf-8?B?WGVNb3Q3ZUtoZUlUWkJBZUZwdGc0dDdnMVhkVENoc20vZWdlVTR1ZWZvMGZT?=

=?utf-8?B?czhXQ0ZNbWFmUGp4a0pCcnNSekZ0ZkJDVDNpV0JsWXRNa2c9PQ==?=

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?YUtCQWlJNGZ4ZERIbUZzUnhsQVB1L1Zzd2N6U1ZkbWl2dlZYcDFYWEEreGNx?=

=?utf-8?B?RE9renRqM1BjdVFTMWhMVGs3MHk1UUdjOGlWcVRPWWNuWGJNbUtrQm93ME1o?=

=?utf-8?B?UU5JYWNncWwxSnNvY2RIQ0ZMNExNZlZHc2I1OWsrNkJuOHk3K1VUb3I3RWw3?=

=?utf-8?B?MFB1S1ExS2M2YklYclJPVVRQK1ZDVER2RVVJQVg3eDkrOWMvRWFuRlErZWJs?=

=?utf-8?B?NE1id1RQcXg4bm10SUQwdkFCdmpCeDVaNmhuNzZXTXVMZkQ0TmxQYTVWZXA2?=

=?utf-8?B?WFdJczJDUzh4RzZVbDU0UjVXNjFjVzk5dmJKNWVSemhNNDJaZkx1OG8wZlpi?=

=?utf-8?B?Q1MxMG9uNENFbTdGeVNubnlhUUgwSFhlc2wrdGsxNFUvRGdIdXJXS3VXT0J2?=

=?utf-8?B?RUhXa3lhNkhLWWZUOTBaTG5EcWJWeUdVL3o0UDk1cG9WMmJnb2RCV3JHOHln?=

=?utf-8?B?eUxuVmw1dWJHSUpZMTdJZS9CQUQ4MVZlbXJGM1hNYlFTRjBMS2FRdHJrK09I?=

=?utf-8?B?UStVaHRpcGFSMVBtUXd4QUVpK2VndXZaSnhtMGRSMnNzSk1mVmplc0NWbE92?=

=?utf-8?B?ODkveHc1OWxQY0p4K0hYNC9FUVgyVC9JcW1qYWg5d0NOZWp6RG1MSTdpM3pr?=

=?utf-8?B?Z3ZHZlpaMm9Xb2ZwVkdxbndUemErdzc2ZThHMWlSbEZxbHVSdjhwdTZNWjdM?=

=?utf-8?B?bTZzLzBWdTVrMDVlSzZKS29aNEJZRkJIVU5GTk9QOURJdlgwQ0JXTUJ2cEdu?=

=?utf-8?B?THUxclA3bzhFNzFQRDZLVHlIMjExYWhjNERZcVM3REVPY21QR3psWnNkaENz?=

=?utf-8?B?R0VvNjBWeVJzai9OaExNQVNOL3huVWd6ZFduVGpRRjYzUEtTT1AzWXc0Yk1P?=

=?utf-8?B?M1llWk10SVFYNXM2MjZVRUp6K0ZhT0xiT2FxSWs5VUJ4a1ZmWHh3Tm5qN2RR?=

=?utf-8?B?Wnp0MlZrcFdvVjVhc3hxL1RUcHhqdzhySlh6NVV5QlF2dFNZbVc4ZHFaRk9r?=

=?utf-8?B?bmlnZW5nTHBxWG9hTDc5dHJPekFKY0RKcjFLcVVvZFlqVVJEQ3hCa3hoMnl2?=

=?utf-8?B?Wk1HeTFXRUovRHQrZ3hsVjlBWXlCQnViUnhIeGovMWY1MHhOQnIwbHhRdHRk?=

=?utf-8?B?UTRqS3dlV2laNmNVYlVyR05MQTZ6VTB0aWJpTDdTYnIyOE5jYjNyV1VjMEVw?=

=?utf-8?B?Z09yOWI0UGxQOXpTbVpBcFZSanVFU2UvMUFVM3RZQ1BFdlFZL29oUjZoL2JU?=

=?utf-8?B?MUkxK2VWcmE5VnRqTk1kVnB3M0RncEJmL2tZRFQzY25nbENrTUVvNmQzR2NP?=

=?utf-8?B?bXBJYlRuUlpKS1hGRjQ4UDNDV1lsM2I3Mmo0bHhQQXNTZnBWYTlna3pFYkR5?=

=?utf-8?B?SzZueTZDcmZIZS9DZFRiTEdqdUx6UndwMXBVeWxUYlV6RjVYMjhFTEYyWDlJ?=

=?utf-8?B?OERic3FRVHpBbkk1bHhvaFU0azdrdFBiT0t6bFZ0R0hhVHVpeU9BaGI2Y3Rq?=

=?utf-8?B?dlgwRXBBUm5SMU1jbytxRHFnWWd6aWEyTmJleEVoTWg5YTVqMnlHNTRja2VC?=

=?utf-8?B?RDFaTkZ6bzNoMm9qa3dwN2hrZzlMMklBY1doR0V2UXZ1UWpPUVpJakV4alRw?=

=?utf-8?B?QmFxa2JzNkE1RHhDZVlITlpDM3ZneDNlbVhNYmhyc2VjS2wzM2VKSFVVSXdy?=

=?utf-8?Q?2IKiFxpRuHNRLbYSjvps?=

X-OriginatorOrg: sct-15-20-7719-20-msonline-outlook-b4c57.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: 7a011072-814f-47c0-622a-08dca9778677

X-MS-Exchange-CrossTenant-AuthSource: SEZPR01MB5319.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Jul 2024 11:23:21.7371

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SI2PR01MB4345

X-Spam_score: 6.1

X-Spam_score_int: 61

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: NiceUkrainian Are you living in the United Kingdom, United

States, Canada, Australia, or New Zealand and eager to meet a Ukrainian woman

near you? We are excited to announce our new website designed to help you

con [...]



Content analysis details: (6.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.52.106 listed in dnsbl.ahbl.org]

[40.92.52.106 listed in dnsbl.ahbl.org]

[40.92.52.106 listed in dnsbl.ahbl.org]

[40.92.52.106 listed in dnsbl.ahbl.org]

[2603:1096:101:ef:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:ef:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:ef:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:ef:0:0:0:14 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.52.106 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.52.106 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.52.106 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.52.106 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:101:ef:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:ef:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:ef:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:ef:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:ef:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:ef:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:ef:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:ef:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[40.92.52.106 listed in will-spam-for-food.eu.org]

[40.92.52.106 listed in will-spam-for-food.eu.org]

[40.92.52.106 listed in will-spam-for-food.eu.org]

[40.92.52.106 listed in will-spam-for-food.eu.org]

[40.92.52.106 listed in will-spam-for-food.eu.org]

[40.92.52.106 listed in will-spam-for-food.eu.org]

[40.92.52.106 listed in will-spam-for-food.eu.org]

[40.92.52.106 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.52.106 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.52.106 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[sidotiqekappetc(at)hotmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} SingleUkrainianBeauty site is out now, join today for free!



------=_NextPart_000_C938_39314D7A.CCCB4C77

Content-Type: text/plain;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



NiceUkrainian





Are you living in the United Kingdom, United States, Canada, Australia, or =

New Zealand and eager to meet a Ukrainian woman near you? We are excited to=

announce our new website designed to help you connect and date Ukrainian w=

omen who have relocated to these countries due to recent events.



Our platform boasts a thriving community with over 250,000 users, mainly w=

omen. We are actively seeking men to join and become part of this vibrant c=

ommunity.





Join for Free





NiceUkrainian





Our site is equipped with a variety of features such as chat, video calls, =

phone calls, stickers, and many more options for you to explore. Sign up fo=

r free now with this exclusive limited-time offer. All users are verified a=

nd authentic. Join us today!





Remove me here



































=



------=_NextPart_000_C938_39314D7A.CCCB4C77

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




style=3D"font-weight:normal;" id=3D"docs-internal-guid-a33d45c8-7fff-e6fb-=

c4cb-6c9a00956b74">=0A=


argin-bottom:0pt;">=0A=


=3D"font-size:15pt;font-family:Arial,sans-serif;color:#1155cc;background-co=

lor:transparent;font-weight:700;font-style:normal;font-variant:normal;text-=

decoration:underline;-webkit-text-decoration-skip:none;text-decoration-skip=

-ink:none;vertical-align:baseline;white-space:pre-wrap;">NiceUkrainian
n>
=0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Are you living in the United Kingdom, United States, Canada, Australia, or =

New Zealand and eager to meet a Ukrainian woman near you? We are excited to=

announce our new website designed to help you connect and date Ukrainian w=

omen who have relocated to these countries due to recent events.
=0A=

=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Our platform boasts a thriving community with over 250,000 users, mainly wo=

men. We are actively seeking men to join and become part of this vibrant co=

mmunity.
=0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Join for Free
=0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


=3D"font-size:15pt;font-family:Arial,sans-serif;color:#1155cc;background-co=

lor:transparent;font-weight:700;font-style:normal;font-variant:normal;text-=

decoration:underline;-webkit-text-decoration-skip:none;text-decoration-skip=

-ink:none;vertical-align:baseline;white-space:pre-wrap;">NiceUkrainian
n>
=0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:400;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Our site is equipped with a variety of features such as chat, video calls, =

phone calls, stickers, and many more options for you to explore. Sign up fo=

r free now with this exclusive limited-time offer. All users are verified a=

nd authentic. Join us today!
=0A=

=0A=


=0A=


t;margin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:700;font-style:italic;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Remove me

e;">
c;background-color:transparent;font-weight:700;font-style:italic;font-varia=

nt:normal;text-decoration:underline;-webkit-text-decoration-skip:none;text-=

decoration-skip-ink:none;vertical-align:baseline;white-space:pre-wrap;"> he=

re 
=0A=

=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=



------=_NextPart_000_C938_39314D7A.CCCB4C77--

United Nations compensation spam from Google

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 21 Jul 2024 06:13:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVVQA-000000003ar-1HYI

for dave@doctor.nl2k.ab.ca;

Sun, 21 Jul 2024 06:12:10 -0600

Resent-From: The Doctor

Resent-Date: Sun, 21 Jul 2024 06:12:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f170.google.com ([209.85.208.170]:57360)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVUYH-00000000Lbc-1AXB

for doctor@nl2k.ab.ca;

Sun, 21 Jul 2024 05:16:34 -0600

Received: by mail-lj1-f170.google.com with SMTP id 38308e7fff4ca-2eeb1ba0481so50906151fa.2

for ; Sun, 21 Jul 2024 04:14:34 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1721560467; x=1722165267; darn=nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=6Im437OQJ5jcU6uStxCiX43EVubDGPwR09PJ9h141p8=;

b=QdVz0CIJrCqmZrmLSbh2Dg6xgwKdUS6Xq7DWdKSAke8ZeqL9kzUXud6ZYLwhlHdiDV

FBxbOIf26znK/GL/MD0IJbB1vh73jwX4ZsQCV8OrBIXlPu8vP+EdW/dAikW9DPPnewQ3

siMHZi5ysT5POpB4uK32wqp54PXM141gJEFBXbtLAAmZRbC5xFXHhCw05uYixFjzag2Y

fJyb8DdC4q/YSEcI6VF7aj6E64OSqYBTwmiDoS/c+FBES5S7vEQBm6wsRq43qz44WtSj

/t+qiG/JkiUMv7Rd85A/NF130lvlJlasG+8UA5XrFwjecqEFdceesY1jYmLlu4M4uNX4

uhkg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1721560467; x=1722165267;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=6Im437OQJ5jcU6uStxCiX43EVubDGPwR09PJ9h141p8=;

b=V3pS+vn9SvgMSi2WvGTVGlPfPlxWEHKJpAFgrevuhlrc0Uj10Ki9wbQvtBbXR5F10i

qjYeyUHlVzCOJgMwENnHyDl3X2LialuqQDpuUlXUWg4BQ5l9EQOiChVQfa24Djz3fB5Z

YbbhVpFgMj89XpIJwg9qMEXWT1z4vtLzNp8qWzrB5VYThfIqGEy5VrbZ33oGJ9Io6m3z

6ffI3EB5Rx+9D2ywFXMruYPwmXc0wYmcFQxajp3ynq2ERtqfNhu7TVsSsnojG5rkAiAf

p5tzZoZ1WrIJ5pNkkHsDO3ZEYnRbzjMsRqmWuWki9C4iAdxepBbnjkH9hFhlwX5adP1Z

Ko3g==

X-Forwarded-Encrypted: i=1; AJvYcCUf8u8EuKQozrpGyEaC7NFUrPDNNTp7aL0nlpasSf1KaCWTBo4oSgAUMeqjIwmiD+vevxydI51LDC2pc7tMqgaxDg==

X-Gm-Message-State: AOJu0Yyc670FUFmHGy4sj0E5T7dgWFzN2DUZadDrXdBskccWBP70wB1z

sTL8JFEJvQCnV9Smyfb5Tqewt3BxAHQT7/2rnvs+I1kMu93q0p+EOjzotFIyVXET/RBQY+UD6ES

XR9QiFGziQC0U5HNoPexpmWL7UVg=

X-Google-Smtp-Source: AGHT+IHXVncN8YJw5WOgSirsCni01TGtFIj2Of5oOTZFSJzZbPaIlE4rrm3YShf3tOTbYo44dOhkQC6U70l4Yfi0cfI=

X-Received: by 2002:ac2:4c53:0:b0:52e:9b4f:cfdc with SMTP id

2adb3069b0e04-52efb7c83ecmr2363344e87.26.1721560467021; Sun, 21 Jul 2024

04:14:27 -0700 (PDT)

MIME-Version: 1.0

From: "unitedstatesbankusa5@gmail.com"

Date: Sun, 21 Jul 2024 04:13:36 -0700

Message-ID:

Subject: UNITED NATIONS FUNDS COMPENSATION DEPARTMENT:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000018a78b061dc0083c"

Bcc: doctor@nl2k.ab.ca

X-Spam_score: 18.4

X-Spam_score_int: 184

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: UNITED NATIONS FUNDS COMPENSATION DEPARTMENT: 3 WHITEHALL

COURT LONDON SW1A2THE UNITED KINGDOM. Your email was received and acknowledged.

I am very happy about inform you that the sum of $15,000,000.00USD has been

approved for your name and I have instructions to your funds without further

dela [...]



Content analysis details: (18.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.170 listed in dnsbl.ahbl.org]

[209.85.208.170 listed in dnsbl.ahbl.org]

[209.85.208.170 listed in dnsbl.ahbl.org]

[209.85.208.170 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.170 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.170 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.170 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.170 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.208.170 listed in will-spam-for-food.eu.org]

[209.85.208.170 listed in will-spam-for-food.eu.org]

[209.85.208.170 listed in will-spam-for-food.eu.org]

[209.85.208.170 listed in will-spam-for-food.eu.org]

[209.85.208.170 listed in will-spam-for-food.eu.org]

[209.85.208.170 listed in will-spam-for-food.eu.org]

[209.85.208.170 listed in will-spam-for-food.eu.org]

[209.85.208.170 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.170 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.170 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[unitednations610020(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[unitednations610020(at)gmail.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

0.7 PDS_FROM_2_EMAILS No description available.

0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address

1.0 FREEMAIL_REPLY From and body contain different freemails

0.0 LOTTO_DEPT Claims Department

0.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases

Subject: {SPAM?} UNITED NATIONS FUNDS COMPENSATION DEPARTMENT:



--00000000000018a78b061dc0083c

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



UNITED NATIONS FUNDS COMPENSATION DEPARTMENT:

3 WHITEHALL COURT LONDON SW1A2THE UNITED KINGDOM.





Your email was received and acknowledged. I am very happy about

inform you that the sum of $15,000,000.00USD has been approved for your

name and I have instructions to your funds without further delay.



To proceed with the final release of its Fund today, the (UN) Board has

approved Three forms of payment in your favor that you are entitled to

to decide on one of them.



(1) Let us know if you want your funds in a cashier's check

as the first option.



(2) If you prefer to have the fund through a Master Card ATM.



(3) Via wire transfer to your designated bank account within

48hrs Any of the three payment options will be made

within 24 hours of your consent, as we do not intend to have your

the payment was submitted late as we work within a time frame.





Please contact us with your choice of option to thi email (

unitedstatesbankusa5@gmail.com) allow us

proceed with the final release of your funds.



Greetings, we inform you that the sum of $15,000,000.00USD has been approve=

d

in your name and I have instructions for your funds to you without any

Greater delay.





MISS LYNDA GREEN

UN SPECIAL AGENT

Express yourself with emojis

=F0=9F=92=96 =F0=9F=91=8D =F0=9F=98=82 =F0=9F=8E=89

Respond quickly and add fun and personality to your emails

t



--00000000000018a78b061dc0083c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



UNITED NATIONS FUNDS COMPENSATION DEPARTMENT:
3 WHITEHA=

LL COURT LONDON SW1A2THE UNITED KINGDOM.


=C2=A0Your email was re=

ceived and acknowledged. I am very happy about
inform you that the sum o=

f $15,000,000.00USD has been approved for your
name and I have instructi=

ons to your funds without further delay.

To proceed with the final r=

elease of its Fund today, the (UN) Board has
approved Three forms of pay=

ment in your favor that you are entitled to
to decide on one of them.
>
(1) Let us know if you want your funds in a cashier's check
as =

the first option.

(2) If you prefer to have the fund through a Maste=

r Card ATM.

(3) Via wire transfer to your designated bank account wi=

thin
48hrs Any of the three payment options will be made
within 24 ho=

urs of your consent, as we do not intend to have your
the payment was su=

bmitted late as we work within a time frame.


Please contact us w=

ith your choice of option to thi email (
sa5@gmail.com">unitedstatesbankusa5@gmail.com
) allow us
proceed with=

the final release of your funds.

Greetings, we inform you that the =

sum of $15,000,000.00USD has been approved
in your name and I have instr=

uctions for your funds to you without any
Greater delay.


MISS=

LYNDA GREEN
UN SPECIAL AGENT
Express yourself with emojis
=F0=9F=

=92=96 =F0=9F=91=8D =F0=9F=98=82 =F0=9F=8E=89
Respond quickly and add fu=

n and personality to your emails
t




--00000000000018a78b061dc0083c--

Wikipedia Page spam

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 21 Jul 2024 04:57:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVUEk-00000000FJ1-3iq7

for dave@doctor.nl2k.ab.ca;

Sun, 21 Jul 2024 04:56:18 -0600

Resent-From: The Doctor

Resent-Date: Sun, 21 Jul 2024 04:56:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f172.google.com ([209.85.167.172]:44419)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVSgN-00000000108-1nPF

for sales@nk.ca;

Sun, 21 Jul 2024 03:16:54 -0600

Received: by mail-oi1-f172.google.com with SMTP id 5614622812f47-3d9de9f8c8dso1846094b6e.1

for ; Sun, 21 Jul 2024 02:14:49 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=diginworldpro.tech; s=google; t=1721553283; x=1722158083; darn=nk.ca;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=ClT1Udo+7g4fM4iffCm78HdsuiSjCSHOPZKxqEkQEjM=;

b=Y8EVwIJYX4+sj4ImWA6BdIzZGSdFBkCthiYXtaEWcFdZ+NYQzF3NMBOUuSL2yiuZCH

IPBXIA+db3HfaiHI4DqJ8vRoNgqXXROle7sn42wDArnhaScFxwXeH5xuwNNQfRkM352f

Ni6N+MwCMrOfxMXfhEeNzK5ob7puTjrryr7/8=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1721553283; x=1722158083;

h=to:subject:message-id:date:from:sender:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=ClT1Udo+7g4fM4iffCm78HdsuiSjCSHOPZKxqEkQEjM=;

b=coJCN2w1rBhrFC0gsMh3WskMxvBYLvszOVyyq/t6SV1phTgGQ/I3lTLbFMWGjYciwe

tHo2qTSs4fKtgGHWw0qPtN++hVBmZ1enoXDvFustNADsnU2t6sHnvD1PezvC5k7A5Anm

l9hOWpdjJ9B646TKw3cugA2yzff5dy0MfI99ozCIvyaN3yy0p6y3sdpV4ZG26QOfyn+3

uAadoL1rdlg01Zz1MdA/Ers/graeMA463OudsIgmEpiWqiWsU20uyuNPrLk7i7rwJyXY

i3GjHaW+ig+UfvfXUnExMJJI8o2kis26qcLBuaQTkppFtNLl5+iR2LDkbmpE/iLOY0M9

JKaA==

X-Gm-Message-State: AOJu0YyJnnk0xYhQCTcyndsDz0h46sfh71uGYuqx5oAbuLP5eSPWyUbO

P0GvOSfwlQo0s6erFbuwxQlTzqXOmdpasVvXqxntuWwGa4FShUbF47VrM53D0IuKPea3wwEayMy

1HfynK53mmjHnXAXc35/N5evqk9GdxNI2hCpYse365n9VtCwZ

X-Google-Smtp-Source: AGHT+IFMNeHe6YsUMNT+YvVo5JTvNSXljrNYPTsjl3XszSLvZus8zIBjo3T+gzFMt8SOVik6Gq2riys/TDXHhgS9Rqw=

X-Received: by 2002:a05:6808:d50:b0:3d9:2ab5:c697 with SMTP id

5614622812f47-3dae9743c26mr4689012b6e.20.1721553282823; Sun, 21 Jul 2024

02:14:42 -0700 (PDT)

Received: from 91302273949 named unknown by gmailapi.google.com with HTTPREST;

Sun, 21 Jul 2024 02:14:42 -0700

Received: from 91302273949 named unknown by gmailapi.google.com with HTTPREST;

Sun, 21 Jul 2024 02:14:42 -0700

MIME-Version: 1.0

Sender: Cacilie Jones

From: Cacilie Jones

Date: Sun, 21 Jul 2024 02:14:42 -0700

X-Google-Sender-Auth: rrvjgerp27yDVsS6EOFhQArJizM

Message-ID:

Subject: Re: nk.ca: Build Trust and Increase Sales with a Wikipedia Page

To: Sales

Content-Type: multipart/alternative; boundary="000000000000e28fc1061dbe5b9e"

X-Spam_score: 5.1

X-Spam_score_int: 51

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello nk.ca owner, How are you? I hope this email finds you

well. I wanted to reach out to you about the benefits of having a Wikipedia

page for your business. As a professional Wikipedia writer, I have seen firsthand

the positive i [...]



Content analysis details: (5.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.172 listed in dnsbl.ahbl.org]

[209.85.167.172 listed in dnsbl.ahbl.org]

[209.85.167.172 listed in dnsbl.ahbl.org]

[209.85.167.172 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.172 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.172 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.172 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.172 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.172 listed in will-spam-for-food.eu.org]

[209.85.167.172 listed in will-spam-for-food.eu.org]

[209.85.167.172 listed in will-spam-for-food.eu.org]

[209.85.167.172 listed in will-spam-for-food.eu.org]

[209.85.167.172 listed in will-spam-for-food.eu.org]

[209.85.167.172 listed in will-spam-for-food.eu.org]

[209.85.167.172 listed in will-spam-for-food.eu.org]

[209.85.167.172 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.172 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.172 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 HTML_MESSAGE BODY: HTML included in message

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

Subject: {SPAM?} Re: nk.ca: Build Trust and Increase Sales with a Wikipedia Page



--000000000000e28fc1061dbe5b9e

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello nk.ca owner,



How are you?



I hope this email finds you well. I wanted to reach out to you about the

benefits of having a Wikipedia page for your business. As a professional

Wikipedia writer, I have seen firsthand the positive impact that a

well-written page can have on a company's credibility and sales.



Having a Wikipedia page not only boosts your business's authority and

credibility, but it also increases search engine visibility and helps build

trust with potential customers. By having a presence on Wikipedia, you are

able to showcase your brand to a wider audience, ultimately leading to

increased brand recognition and customer engagement. I truly believe that

having a Wikipedia page for your business can significantly enhance your

reputation and ultimately lead to more sales.



One of the key advantages of having a Wikipedia page is the backlinks it

provides for your website. These backlinks are invaluable for SEO, as they

can improve your search engine rankings and drive more organic traffic to

your site.



I'm confident that this will not only help build trust with your audience

but also increase your sales. The best part is, once we create the page, it

will be valid for a *lifetime guarantee*. So you can sit back, relax, and

watch your online presence soar.



If you=E2=80=99re interested to create a Wikipedia page for you or your b=

usiness

then please let me know, I will assign you to our digital marketing manager

to move forward the discussion.



Looking forward to hearing from you.



Best regards,



Cacilie Jones



Wikipedia Content Writer



________________________________________________________________________



(Cost: Our team can help create a professional Wikipedia page for your

business for a one-time cost of $120. This small investment can have a big

impact on your brand's reputation and bottom line.)




--000000000000e28fc1061dbe5b9e

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




editable gmail-LW-avf gmail-tS-tW gmail-tS-tY" aria-label=3D"Message Body"=

role=3D"textbox" aria-multiline=3D"true" tabindex=3D"1" style=3D"direction=

:ltr;min-height:247px" aria-controls=3D":i8" aria-expanded=3D"false">


ss=3D"MsoNormal" style=3D"margin:0in 0in 8pt;line-height:107%;font-family:C=

alibri,sans-serif">Hello nk.ca owner,






mily:Calibri,sans-serif">How are you?






mily:Calibri,sans-serif">I hope this email finds you well. I wanted to reac=

h out to

you about the benefits of having a Wikipedia page for your business. As a

professional Wikipedia writer, I have seen firsthand the positive impact th=

at a

well-written page can have on a company's credibility and sales.






mily:Calibri,sans-serif">Having a Wikipedia page not only boosts your busin=

ess's

authority and credibility, but it also increases search engine visibility a=

nd

helps build trust with potential customers. By having a presence on Wikiped=

ia,

you are able to showcase your brand to a wider audience, ultimately leading=

to

increased brand recognition and customer engagement. I truly believe that

having a Wikipedia page for your business can significantly enhance your

reputation and ultimately lead to more sales.






mily:Calibri,sans-serif">One of the key advantages of having a Wikipedia pa=

ge is the

backlinks it provides for your website. These backlinks are invaluable for =

SEO,

as they can improve your search engine rankings and drive more organic traf=

fic

to your site.






mily:Calibri,sans-serif">I'm confident that this will not only help bui=

ld trust with

your audience but also increase your sales. The best part is, once we creat=

e

the page, it will be valid for a life=

time guarantee
. So you can sit back,

relax, and watch your online presence soar.






mily:Calibri,sans-serif">If you=E2=80=99re
,96)">interested
to create a Wikipedia page for you

or your business then please let me know, I will assign you to our digital

marketing manager to move forward the discussion.






mily:Calibri,sans-serif">Looking forward to hearing from you.






mily:Calibri,sans-serif">Best regards=

,






mily:Calibri,sans-serif">Cacilie Jones






mily:Calibri,sans-serif">Wikipedia Co=

ntent Writer






mily:Calibri,sans-serif">_______________________________________________=

_________________________






mily:Calibri,sans-serif">(Cost: Our team can

help create a professional Wikipedia page for your business for a one-time =

cost

of $120. This small investment can have a big impact on your brand's re=

putation

and bottom line.)





--000000000000e28fc1061dbe5b9e--

Instagram followers spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 20 Jul 2024 19:06:56 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVL1r-00000000B14-1Gmt

for dave@doctor.nl2k.ab.ca;

Sat, 20 Jul 2024 19:06:23 -0600

Resent-From: The Doctor

Resent-Date: Sat, 20 Jul 2024 19:06:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f197.google.com ([209.85.160.197]:43245)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVKWy-0000000069s-3HMl

for sales@nk.ca;

Sat, 20 Jul 2024 18:34:32 -0600

Received: by mail-qt1-f197.google.com with SMTP id d75a77b69052e-44f76198e97so49609301cf.0

for ; Sat, 20 Jul 2024 17:32:34 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1721521948; x=1722126748; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=6nKAQwA/lzc6on8N6Ne2R17lKWbF5IGtkGNoq8cNivg=;

b=UTLHG5ycjdaPWsLiEuJDpaT9iOgFA/brvcGYD8+Nu2ohthASJJHiG0En11EM7B5j5j

Gu4dtPGimKbK73l2TAiSC+7GvOvccfX56GLg058NJW3bCv0NOURPXfJ++RNajkqIOTdr

f+Ru6qlJRJDfLB4WsgGa2FU5TkeOil4Gc9gjyEFhoNCvsRr2HZ3ogxC/7IJgOXonhLmG

Pgqvaxb8i3psSwAAfbyDw586eOovC7b9LSOUr4ZUDebo9d37oNe1AV9VpaoVHPdBYZmp

cgtZwF+EpKEvSx4vHiiQpwpbSCVUor4M6X02K/aKGNiD8JgoTWPi3CXvGBmeIZJSR5tH

fu9A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1721521948; x=1722126748;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=6nKAQwA/lzc6on8N6Ne2R17lKWbF5IGtkGNoq8cNivg=;

b=UxdLIWJJ8P6fvq6kOgLIzw+SLXapdrfsi8SuFDpswPQLgCNdqOLbUttOtvHNq0MAWb

MFN1AZxatWq7ly3XglILwEiVXm2zgXMvDlNwsAMDeNZUdtDZHytJYCfsofY8+Yk9/fKQ

GnK2T/8H6e6fTzy2yode3ghgQBNQPvIGNmNojj8KS9fIJ3WeCuKk4UY9LAevkhmlB94b

Abp9SZbIpM4HvJ+uRsQIFmkBZQtAUsfGgoWu+5Ypc/jI3KMwf142pkLL3zWXA5nzAZuA

zBMBlf4J1BsJQ0G+ToxrxMYv+7L/70D46jQeWc/Xjh0IbUNDJJexQ+gQ6meKqf8CWi8D

AQYw==

X-Gm-Message-State: AOJu0YyTNdnToDwh9xIhp9lWrJ5G3werCEIfN+6Cdh/KPCur8TQzuBev

tXAGd2kGuRfWPB2aYYXvcqMA4k2t+5RHSaD4Tg7133UiSIfKQiD3pj/5kSzdQUzsJqxoeWtD2e4

=

X-Google-Smtp-Source: AGHT+IHPDP94a2IKsM5yTma1+cGTB0v74063hFhkMNWUnfZuOl9oPVx4zFR5DWD7YqeP4QjhRERX5vsS1A==

MIME-Version: 1.0

X-Received: by 2002:a05:622a:1346:b0:447:f292:e4b5 with SMTP id

d75a77b69052e-44f96a3aa45mr148348301cf.9.1721521948095; Sat, 20 Jul 2024

17:32:28 -0700 (PDT)

Message-ID:

Date: Sun, 21 Jul 2024 00:32:28 +0000

Subject: netknowyeg, Get More 2,000 Instagram Followers and 2,000 Twitter

Followers here

From: lauragreen5203046@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

X-Spam_score: 7.0

X-Spam_score_int: 70

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi Netknow Internet Service, We are from Instasocial. We found

your Email address on your Instagram page @netknowyeg. We Offers Instagram

Followers, Likes and Views services.



Content analysis details: (7.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.197 listed in dnsbl.ahbl.org]

[209.85.160.197 listed in dnsbl.ahbl.org]

[209.85.160.197 listed in dnsbl.ahbl.org]

[209.85.160.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.197 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.197 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.197 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[lauragreen5203046(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[lauragreen5203046(at)gmail.com]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} netknowyeg, Get More 2,000 Instagram Followers and 2,000 Twitter

Followers here



Hi Netknow Internet Service,



We are from Instasocial. We found your Email address on your Instagram page

@netknowyeg.



We Offers Instagram Followers, Likes and Views services.



The price is:



-$29 USD for 1,000 Instagram Followers and

- $9 USD For Instagram Post Likes.

- $7 USD For Instagram Video Views



Now you have Limited Followers, maybe you are Interested?



DIY enthusiasts, crafters, and makers may use a growing follower count to

share creative tutorials, connect with like-minded individuals, and attract

opportunities for collaborations with craft brands..



You can See all packages here :



https://bit.ly/SmmMarketing



If you have any questions, feel free to ask them here.

I apologize if this message bothers you,





Also, We have Youtube, Tiktok and Twitter services too, Please check it now.

Thank you,

Regards,

CRA PHish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 21 Jul 2024 04:56:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVUDe-00000000F0n-0L9N

for dave@doctor.nl2k.ab.ca;

Sun, 21 Jul 2024 04:55:10 -0600

Resent-From: The Doctor

Resent-Date: Sun, 21 Jul 2024 04:55:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail1.bellabeal.online ([86.48.6.240]:45805)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVMHS-00000000Lcf-02RF

for sales@nk.ca;

Sat, 20 Jul 2024 20:26:38 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=s1; d=bellabeal.online;

h=MIME-Version:From:To:Date:Subject:Content-Type:Content-Transfer-Encoding:

Message-ID; i=support@bellabeal.online;

bh=5Tf8ffBn+QI7pe7ZJsaBtkJ1KoW2q/NzFXJ5vJvDSFU=;

b=OxpMOgxiIZ2Rn3QM+/xdWqLeI57NkuaQqq1mCv0PJlGYX6lm9rl4/BFYp7FJUpP7OSBPvBTU4dLq

xeZzDGjV8dAlKQq0OOlbcsA5+MidnTMWsose3T5oo53JzaHR27+zJQcf1HPo3VHYV563LsmyMyir

gl+DP2xt8/8W50fnHTsIyQ61Uocfu2qvW5OakDObmkGrJsNvEOq6TnhGdizg6a1anMJqF4Qz8mTT

xwL+ucJbLtDqJk+gxsmO0pAXQLfQpqARFlyOD5uVZq/bWeIQQPap70eCIRNTSAXXUC1LoSe06zmB

ZYnk3wq+XnLiehjo3updINRD003VpL6CPJQmEA==

MIME-Version: 1.0

From: "GST/HSTC notice"

To: sales@nk.ca

Date: 20 Jul 2024 16:59:44 -0400

Subject: The Canada Revenue Agency sent you new mail

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: base64

Message-ID: <0.0.2.1B3.1DADAE7BFD649A4.0@mail1.bellabeal.online>

X-Spam_score: 20.7

X-Spam_score_int: 207

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: English version ** La version française suit ** Dear :





Content analysis details: (20.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

[86.48.6.240 listed in dnsbl.ahbl.org]

[86.48.6.240 listed in dnsbl.ahbl.org]

[86.48.6.240 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: shamooo.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: shamooo.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: shamooo.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: bellabeal.online (online)]

1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

2.0 MIXED_HREF_CASE Has href in mixed case

Subject: {SPAM?} The Canada Revenue Agency sent you new mail



PFAgbGFuZz1lbiBzdHlsZT0iTUFSR0lOLUJPVFRPTTogNXB4OyBNQVJHSU4tVE9QOiAxMnB4

OyBDT0xPUjogYmx1ZSAhaW1wb3J0YW50OyBURVhULUFMSUdOOiBjZW50ZXIiPjxTVFJPTkc+

RW5nbGlzaCB2ZXJzaW9uIDwvU1RST05HPjxTUEFOIHN0eWxlPSJDT0xPUjogIj48U1BBTiBs

YW5nPWZyIHN0eWxlPSJCT1JERVItTEVGVC1XSURUSDogMHB4OyBCT1JERVItUklHSFQtV0lE

VEg6IDBweDsgVkVSVElDQUwtQUxJR046IGJhc2VsaW5lOyBCT1JERVItQk9UVE9NLVdJRFRI

OiAwcHg7IFBBRERJTkctQk9UVE9NOiAwcHg7IFBBRERJTkctVE9QOiAwcHg7IFBBRERJTkct

TEVGVDogMHB4OyBNQVJHSU46IDBweDsgUEFERElORy1SSUdIVDogMHB4OyBCT1JERVItVE9Q

LVdJRFRIOiAwcHgiIGRpcj1sdHI+PFNUUk9ORz4qKiogTGEgdmVyc2lvbiBmcmFuw6dhaXNl

IHN1aXQgKioqPC9TVFJPTkc+PC9TUEFOPjwvU1BBTj48L1A+DQo8UCBsYW5nPWVuPjxTUEFO

IHN0eWxlPSJDT0xPUjogIj48U1BBTiBzdHlsZT0iQk9SREVSLUxFRlQtV0lEVEg6IDBweDsg

Qk9SREVSLVJJR0hULVdJRFRIOiAwcHg7IFZFUlRJQ0FMLUFMSUdOOiBiYXNlbGluZTsgQk9S

REVSLUJPVFRPTS1XSURUSDogMHB4OyBQQURESU5HLUJPVFRPTTogMHB4OyBQQURESU5HLVRP

UDogMHB4OyBQQURESU5HLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7IFBBRERJTkctUklHSFQ6

IDBweDsgQk9SREVSLVRPUC1XSURUSDogMHB4Ij5EZWFyIDo8L1NQQU4+PC9TUEFOPjxCUj48

QlI+PFNQQU4gc3R5bGU9IkNPTE9SOiAiPjxTUEFOIHN0eWxlPSJCT1JERVItTEVGVC1XSURU

SDogMHB4OyBCT1JERVItUklHSFQtV0lEVEg6IDBweDsgVkVSVElDQUwtQUxJR046IGJhc2Vs

aW5lOyBCT1JERVItQk9UVE9NLVdJRFRIOiAwcHg7IFBBRERJTkctQk9UVE9NOiAwcHg7IFBB

RERJTkctVE9QOiAwcHg7IFBBRERJTkctTEVGVDogMHB4OyBNQVJHSU46IDBweDsgUEFERElO

Ry1SSUdIVDogMHB4OyBCT1JERVItVE9QLVdJRFRIOiAwcHgiPlRoZSBDYW5hZGEgUmV2ZW51

ZSBBZ2VuY3kgKENSQSkgc2VudCB5b3UgbmV3IG1haWwgb25saW5lIGNhbGxlZDo8L1NQQU4+

PC9TUEFOPjxCUj48QlI+PFNQQU4gc3R5bGU9IkZPTlQtRkFNSUxZOiBpbmhlcml0OyBDT0xP

UjogIj48U1BBTiBzdHlsZT0iQk9SREVSLUxFRlQtV0lEVEg6IDBweDsgQk9SREVSLVJJR0hU

LVdJRFRIOiAwcHg7IFZFUlRJQ0FMLUFMSUdOOiBiYXNlbGluZTsgQk9SREVSLUJPVFRPTS1X

SURUSDogMHB4OyBQQURESU5HLUJPVFRPTTogMHB4OyBQQURESU5HLVRPUDogMHB4OyBQQURE

SU5HLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7IFBBRERJTkctUklHSFQ6IDBweDsgQk9SREVS

LVRPUC1XSURUSDogMHB4OyBmb250LWZlYXR1cmUtc2V0dGluZ3M6IGluaGVyaXQ7IGZvbnQt

a2VybmluZzogaW5oZXJpdDsgZm9udC1vcHRpY2FsLXNpemluZzogaW5oZXJpdDsgZm9udC1z

dHJldGNoOiBpbmhlcml0OyBmb250LXZhcmlhdGlvbi1zZXR0aW5nczogaW5oZXJpdCI+PFNU

Uk9ORz5HU1QvSFNUQyBub3RpY2U8L1NUUk9ORz48L1NQQU4+PC9TUEFOPjxCUj48QlI+PFNQ

QU4gc3R5bGU9IkNPTE9SOiAiPjxTUEFOIHN0eWxlPSJCT1JERVItTEVGVC1XSURUSDogMHB4

OyBCT1JERVItUklHSFQtV0lEVEg6IDBweDsgVkVSVElDQUwtQUxJR046IGJhc2VsaW5lOyBC

T1JERVItQk9UVE9NLVdJRFRIOiAwcHg7IFBBRERJTkctQk9UVE9NOiAwcHg7IFBBRERJTkct

VE9QOiAwcHg7IFBBRERJTkctTEVGVDogMHB4OyBNQVJHSU46IDBweDsgUEFERElORy1SSUdI

VDogMHB4OyBCT1JERVItVE9QLVdJRFRIOiAwcHgiPlRoaXMgbWFpbCBtYXkgcmVxdWlyZSB5

b3VyIGF0dGVudGlvbi48L1NQQU4+PC9TUEFOPjxCUj48QlI+PEEgaHJlZj0iaHR0cHM6Ly9z

aGFtb29vLmNvbS8iIHJlbD0ibm9vcGVuZXIgbm9yZWZlcnJlciIgdGFyZ2V0PV9ibGFuaz5W

aWV3IERlcG9zaXQ8L0E+PC9QPg0KPFAgbGFuZz1lbj48QlI+PFNQQU4gc3R5bGU9IkNPTE9S

OiAiPjxTUEFOIHN0eWxlPSJCT1JERVItTEVGVC1XSURUSDogMHB4OyBCT1JERVItUklHSFQt

V0lEVEg6IDBweDsgVkVSVElDQUwtQUxJR046IGJhc2VsaW5lOyBCT1JERVItQk9UVE9NLVdJ

RFRIOiAwcHg7IFBBRERJTkctQk9UVE9NOiAwcHg7IFBBRERJTkctVE9QOiAwcHg7IFBBRERJ

TkctTEVGVDogMHB4OyBNQVJHSU46IDBweDsgUEFERElORy1SSUdIVDogMHB4OyBCT1JERVIt

VE9QLVdJRFRIOiAwcHgiPllvdSBjYW4gc2lnbi1pbiB0byBNeSBBY2NvdW50IGFuZCBjbGlj

ayBvbiAiTWFpbCIgdG8gcmVhZCB5b3VyIG1haWwuIElmIHlvdSBkb24ndCBoYXZlIE15IEFj

Y291bnQsIHJlZ2lzdGVyIGF0IGNhbmFkYVsuY2FdL2NyYS1teS1hY2NvdW50LjwvU1BBTj48

L1NQQU4+PEJSPjxCUj48U1BBTiBzdHlsZT0iQ09MT1I6ICI+PFNQQU4gc3R5bGU9IkJPUkRF

Ui1MRUZULVdJRFRIOiAwcHg7IEJPUkRFUi1SSUdIVC1XSURUSDogMHB4OyBWRVJUSUNBTC1B

TElHTjogYmFzZWxpbmU7IEJPUkRFUi1CT1RUT00tV0lEVEg6IDBweDsgUEFERElORy1CT1RU

T006IDBweDsgUEFERElORy1UT1A6IDBweDsgUEFERElORy1MRUZUOiAwcHg7IE1BUkdJTjog

MHB4OyBQQURESU5HLVJJR0hUOiAwcHg7IEJPUkRFUi1UT1AtV0lEVEg6IDBweCI+VGhpcyBp

cyBhbiA8L1NQQU4+PFNQQU4gY2xhc3M9bWFya2xkY3ZhbmM4bSBzdHlsZT0iQk9SREVSLUxF

RlQtV0lEVEg6IDBweDsgQk9SREVSLVJJR0hULVdJRFRIOiAwcHg7IFZFUlRJQ0FMLUFMSUdO

OiBiYXNlbGluZTsgQk9SREVSLUJPVFRPTS1XSURUSDogMHB4OyBQQURESU5HLUJPVFRPTTog

MHB4OyBQQURESU5HLVRPUDogMHB4OyBQQURESU5HLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7

IFBBRERJTkctUklHSFQ6IDBweDsgQk9SREVSLVRPUC1XSURUSDogMHB4IiBkYXRhLW9nc2I9

IiIgZGF0YS1vZ3NjPSIiIGRhdGEtb2dhYj0iIiBkYXRhLW9nYWM9IiIgZGF0YS1tYXJranM9

InRydWUiPmF1dG88L1NQQU4+PFNQQU4gc3R5bGU9IkJPUkRFUi1MRUZULVdJRFRIOiAwcHg7

IEJPUkRFUi1SSUdIVC1XSURUSDogMHB4OyBWRVJUSUNBTC1BTElHTjogYmFzZWxpbmU7IEJP

UkRFUi1CT1RUT00tV0lEVEg6IDBweDsgUEFERElORy1CT1RUT006IDBweDsgUEFERElORy1U

T1A6IDBweDsgUEFERElORy1MRUZUOiAwcHg7IE1BUkdJTjogMHB4OyBQQURESU5HLVJJR0hU

OiAwcHg7IEJPUkRFUi1UT1AtV0lEVEg6IDBweCI+bWF0ZWQgZW1haWwgbWVzc2FnZS4gUGxl

YXNlIGRvIG5vdCByZXBseS48L1NQQU4+PC9TUEFOPjwvUD4NCjxQIGxhbmc9ZnIgc3R5bGU9

Ik1BUkdJTi1CT1RUT006IDVweDsgTUFSR0lOLVRPUDogMTJweDsgQ09MT1I6IGJsdWUgIWlt

cG9ydGFudDsgVEVYVC1BTElHTjogY2VudGVyIj48U1RST05HPlZlcnNpb24gZnJhbsOnYWlz

ZTwvU1RST05HPjxTUEFOIHN0eWxlPSJDT0xPUjogIj48U1BBTiBsYW5nPWVuIHN0eWxlPSJC

T1JERVItTEVGVC1XSURUSDogMHB4OyBCT1JERVItUklHSFQtV0lEVEg6IDBweDsgVkVSVElD

QUwtQUxJR046IGJhc2VsaW5lOyBCT1JERVItQk9UVE9NLVdJRFRIOiAwcHg7IFBBRERJTkct

Qk9UVE9NOiAwcHg7IFBBRERJTkctVE9QOiAwcHg7IFBBRERJTkctTEVGVDogMHB4OyBNQVJH

SU46IDBweDsgUEFERElORy1SSUdIVDogMHB4OyBCT1JERVItVE9QLVdJRFRIOiAwcHgiIGRp

cj1sdHI+PFNUUk9ORz4gKioqIFRoZSBFbmdsaXNoIHZlcnNpb24gcHJlY2VkZXMgKioqPC9T

VFJPTkc+PC9TUEFOPjwvU1BBTj48L1A+DQo8UCBsYW5nPWZyPjxTUEFOIHN0eWxlPSJDT0xP

UjogIj48U1BBTiBzdHlsZT0iQk9SREVSLUxFRlQtV0lEVEg6IDBweDsgQk9SREVSLVJJR0hU

LVdJRFRIOiAwcHg7IFZFUlRJQ0FMLUFMSUdOOiBiYXNlbGluZTsgQk9SREVSLUJPVFRPTS1X

SURUSDogMHB4OyBQQURESU5HLUJPVFRPTTogMHB4OyBQQURESU5HLVRPUDogMHB4OyBQQURE

SU5HLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7IFBBRERJTkctUklHSFQ6IDBweDsgQk9SREVS

LVRPUC1XSURUSDogMHB4Ij5DaGVyL0Now6hyZSA6PC9TUEFOPjwvU1BBTj48QlI+PEJSPjxT

UEFOIHN0eWxlPSJDT0xPUjogIj48U1BBTiBzdHlsZT0iQk9SREVSLUxFRlQtV0lEVEg6IDBw

eDsgQk9SREVSLVJJR0hULVdJRFRIOiAwcHg7IFZFUlRJQ0FMLUFMSUdOOiBiYXNlbGluZTsg

Qk9SREVSLUJPVFRPTS1XSURUSDogMHB4OyBQQURESU5HLUJPVFRPTTogMHB4OyBQQURESU5H

LVRPUDogMHB4OyBQQURESU5HLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7IFBBRERJTkctUklH

SFQ6IDBweDsgQk9SREVSLVRPUC1XSURUSDogMHB4Ij5MJ0FnZW5jZSBkdSByZXZlbnUgZHUg

Q2FuYWRhIChBUkMpIHZvdXMgYSBlbnZvecOpIGR1IG5vdXZlYXUgY291cnJpZXIgZW4gbGln

bmUgaW50aXR1bMOpIDo8L1NQQU4+PC9TUEFOPjxCUj48QlI+PFNQQU4gc3R5bGU9IkZPTlQt

RkFNSUxZOiBpbmhlcml0OyBDT0xPUjogIj48U1BBTiBzdHlsZT0iQk9SREVSLUxFRlQtV0lE

VEg6IDBweDsgQk9SREVSLVJJR0hULVdJRFRIOiAwcHg7IFZFUlRJQ0FMLUFMSUdOOiBiYXNl

bGluZTsgQk9SREVSLUJPVFRPTS1XSURUSDogMHB4OyBQQURESU5HLUJPVFRPTTogMHB4OyBQ

QURESU5HLVRPUDogMHB4OyBQQURESU5HLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7IFBBRERJ

TkctUklHSFQ6IDBweDsgQk9SREVSLVRPUC1XSURUSDogMHB4OyBmb250LWZlYXR1cmUtc2V0

dGluZ3M6IGluaGVyaXQ7IGZvbnQta2VybmluZzogaW5oZXJpdDsgZm9udC1vcHRpY2FsLXNp

emluZzogaW5oZXJpdDsgZm9udC1zdHJldGNoOiBpbmhlcml0OyBmb250LXZhcmlhdGlvbi1z

ZXR0aW5nczogaW5oZXJpdCI+PFNUUk9ORz5BdmlzIGR1IENUUFMvVFZIPC9TVFJPTkc+PC9T

UEFOPjwvU1BBTj48QlI+PEJSPjxTUEFOIHN0eWxlPSJDT0xPUjogIj48U1BBTiBzdHlsZT0i

Qk9SREVSLUxFRlQtV0lEVEg6IDBweDsgQk9SREVSLVJJR0hULVdJRFRIOiAwcHg7IFZFUlRJ

Q0FMLUFMSUdOOiBiYXNlbGluZTsgQk9SREVSLUJPVFRPTS1XSURUSDogMHB4OyBQQURESU5H

LUJPVFRPTTogMHB4OyBQQURESU5HLVRPUDogMHB4OyBQQURESU5HLUxFRlQ6IDBweDsgTUFS

R0lOOiAwcHg7IFBBRERJTkctUklHSFQ6IDBweDsgQk9SREVSLVRPUC1XSURUSDogMHB4Ij5D

ZSBjb3VycmllciBwZXV0IG7DqWNlc3NpdGVyIHZvdHJlIGF0dGVudGlvbi48L1NQQU4+PC9T

UEFOPjxCUj48QlI+PEEgaHJlZj0iaHR0cHM6Ly9zaGFtb29vLmNvbS8iIHJlbD0ibm9vcGVu

ZXIgbm9yZWZlcnJlciIgdGFyZ2V0PV9ibGFuaz48U1BBTiBzdHlsZT0iQ09MT1I6ICI+PFNQ

QU4gc3R5bGU9IkJPUkRFUi1MRUZULVdJRFRIOiAwcHg7IEJPUkRFUi1SSUdIVC1XSURUSDog

MHB4OyBWRVJUSUNBTC1BTElHTjogYmFzZWxpbmU7IEJPUkRFUi1CT1RUT00tV0lEVEg6IDBw

eDsgUEFERElORy1CT1RUT006IDBweDsgUEFERElORy1UT1A6IDBweDsgUEFERElORy1MRUZU

OiAwcHg7IE1BUkdJTjogMHB4OyBQQURESU5HLVJJR0hUOiAwcHg7IEJPUkRFUi1UT1AtV0lE

VEg6IDBweCI+VmlldyBEZXBvc2l0PC9TUEFOPjwvU1BBTj48L0E+PEJSPjxTUEFOIHN0eWxl

PSJCT1JERVItTEVGVC1XSURUSDogMHB4OyBCT1JERVItUklHSFQtV0lEVEg6IDBweDsgVkVS

VElDQUwtQUxJR046IGJhc2VsaW5lOyBCT1JERVItQk9UVE9NLVdJRFRIOiAwcHg7IENPTE9S

OiA7IFBBRERJTkctQk9UVE9NOiAwcHg7IFBBRERJTkctVE9QOiAwcHg7IFBBRERJTkctTEVG

VDogMHB4OyBNQVJHSU46IDBweDsgUEFERElORy1SSUdIVDogMHB4OyBCT1JERVItVE9QLVdJ

RFRIOiAwcHgiPjwvU1BBTj48QlI+PFNQQU4gc3R5bGU9IkNPTE9SOiAiPjxTUEFOIHN0eWxl

PSJCT1JERVItTEVGVC1XSURUSDogMHB4OyBCT1JERVItUklHSFQtV0lEVEg6IDBweDsgVkVS

VElDQUwtQUxJR046IGJhc2VsaW5lOyBCT1JERVItQk9UVE9NLVdJRFRIOiAwcHg7IFBBRERJ

TkctQk9UVE9NOiAwcHg7IFBBRERJTkctVE9QOiAwcHg7IFBBRERJTkctTEVGVDogMHB4OyBN

QVJHSU46IDBweDsgUEFERElORy1SSUdIVDogMHB4OyBCT1JERVItVE9QLVdJRFRIOiAwcHgi

PlZvdXMgcG91dmV6IHZvdXMgY29ubmVjdGVyIMOgIE1vbiBkb3NzaWVyIGV0IGNsaXF1ZXIg

c3VyICJjb3VycmllciIgcG91ciBsaXJlIHZvdHJlIGNvdXJyaWVyLiBTaSB2b3VzIG4nYXZl

eiBwYXMgTW9uIGRvc3NpZXIsIGluc2NyaXZlei12b3VzIMOgIGNhbmFkYVsuY2FdL2FyYy1t

b24tZG9zc2llci48L1NQQU4+PC9TUEFOPjxCUj48QlI+PFNQQU4gc3R5bGU9IkNPTE9SOiAi

PjxTUEFOIHN0eWxlPSJCT1JERVItTEVGVC1XSURUSDogMHB4OyBCT1JERVItUklHSFQtV0lE

VEg6IDBweDsgVkVSVElDQUwtQUxJR046IGJhc2VsaW5lOyBCT1JERVItQk9UVE9NLVdJRFRI

OiAwcHg7IFBBRERJTkctQk9UVE9NOiAwcHg7IFBBRERJTkctVE9QOiAwcHg7IFBBRERJTkct

TEVGVDogMHB4OyBNQVJHSU46IDBweDsgUEFERElORy1SSUdIVDogMHB4OyBCT1JERVItVE9Q

LVdJRFRIOiAwcHgiPkNlY2kgZXN0IHVuIG1lc3NhZ2Ugw6lsZWN0cm9uaXF1ZSA8L1NQQU4+

PFNQQU4gY2xhc3M9bWFya2xkY3ZhbmM4bSBzdHlsZT0iQk9SREVSLUxFRlQtV0lEVEg6IDBw

eDsgQk9SREVSLVJJR0hULVdJRFRIOiAwcHg7IFZFUlRJQ0FMLUFMSUdOOiBiYXNlbGluZTsg

Qk9SREVSLUJPVFRPTS1XSURUSDogMHB4OyBQQURESU5HLUJPVFRPTTogMHB4OyBQQURESU5H

LVRPUDogMHB4OyBQQURESU5HLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7IFBBRERJTkctUklH

SFQ6IDBweDsgQk9SREVSLVRPUC1XSURUSDogMHB4IiBkYXRhLW9nc2I9IiIgZGF0YS1vZ3Nj

PSIiIGRhdGEtb2dhYj0iIiBkYXRhLW9nYWM9IiIgZGF0YS1tYXJranM9InRydWUiPmF1dG88

L1NQQU4+PFNQQU4gc3R5bGU9IkJPUkRFUi1MRUZULVdJRFRIOiAwcHg7IEJPUkRFUi1SSUdI

VC1XSURUSDogMHB4OyBWRVJUSUNBTC1BTElHTjogYmFzZWxpbmU7IEJPUkRFUi1CT1RUT00t

V0lEVEg6IDBweDsgUEFERElORy1CT1RUT006IDBweDsgUEFERElORy1UT1A6IDBweDsgUEFE

RElORy1MRUZUOiAwcHg7IE1BUkdJTjogMHB4OyBQQURESU5HLVJJR0hUOiAwcHg7IEJPUkRF

Ui1UT1AtV0lEVEg6IDBweCI+bWF0aXPDqS4gVmV1aWxsZXogbmUgcGFzIHkgcsOpcG9uZHJl

LjwvU1BBTj48L1NQQU4+PC9QPg==

Nigerian spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 20 Jul 2024 10:50:00 -0600

Received: from mail-ed1-f51.google.com ([209.85.208.51]:46086)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVDGa-000000009ez-1WgV

for dave@doctor.nl2k.ab.ca;

Sat, 20 Jul 2024 10:49:08 -0600

Received: by mail-ed1-f51.google.com with SMTP id 4fb4d7f45d1cf-5a10bb7b237so2119266a12.0

for ; Sat, 20 Jul 2024 09:47:09 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1721494023; x=1722098823; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:in-reply-to:references

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=ZEgpHqie6U1sGpAclZpzBQxoImQkUb7xbRzzbn1gez4=;

b=GXyMrxFE1kg1FBPtz8XVmAldClc4bN3/Ulsh/+JmP6YaiCOQPZ4K6HQnkxejRW2ekW

/afpkjUZ5vi9O0E4lYbPTq1lkmTe6H8TIJcNtPDub7rkpYCLtfxqvzQyZVOqimGKqfHY

5qmIuX0tI9BXDQZAQg8ochyqfR0MhtQV2JgspqD0xVb2JoPXuASv6Uh95feylYLucLq5

aKtA5HfSJj5HXrpuLxVV03DAS365tRHIjTsOPB3mXA0rjNM9vurDorgtFJQbDf7mwY2K

tu7f00y+1+131/VbQOs7O8ZZY2H7l5yL8iK8viSGFUfnZSnoCsuk1WCHXxWfFTIdszSf

O0Og==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1721494023; x=1722098823;

h=to:subject:message-id:date:from:reply-to:in-reply-to:references

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=ZEgpHqie6U1sGpAclZpzBQxoImQkUb7xbRzzbn1gez4=;

b=Yddyy1OJs8D2o9bt1HBCO8QYslnlKAey6QT9gDGbZWmZNSKR6WHEohYAVi0tpGpxvV

axsrE/kCW1lgBHfFavcDF31x3dUC9Cqi/UJl0LXCGSbylDQOjK7qIovlNv9DNT8KMlV3

0A5/jphnJCIC4wwTJNwcwC3r+A3zVtt68Lp0JSCuhClVWE0j429PIKzryASkU2bmC8q4

8MRIjD7ID8QgoNOStTO+lTS2gKisNQT7/KocmtWhWKsRrINkjMAuJnLoH9HO50YYE7e0

g3OK3yxROObnR2utLh8TN0GfqffyDAxiCz9vr63G4pZQ/4G26+/i0eHZ6EaLCLuW4307

hDNQ==

X-Forwarded-Encrypted: i=1; AJvYcCVBCigEhcK4XxsJo0ejNm05RRiJviPbDNf94uWBSjfjSFcSoZ4Vm5ILA+Y5j1kWt0WcI1ih8O3JPvbhxQRc/JKbBAOBeofi

X-Gm-Message-State: AOJu0YyLO+6uaE0JlRW8PChSgQzrhJVcaEQLYCtn/uYHGr0MOij6WCN8

/BNXPPUWMjmYR80dfCLGWTQF17IxQllNJbInIFCqfSSDu99/eOQ3KP12fyNuEzCmaztQFME0jNQ

wymD8bvvnlDNvA0xwFWpoZ3bYumA=

X-Google-Smtp-Source: AGHT+IEqIbiU6vNlo/v+FHQxOo9QnJDL/E5HMLZUwxUYFvhAJ7TylaAz0tU64fvQCmic749YA+9byNCeH/QXCuvXpWY=

X-Received: by 2002:a50:bb6c:0:b0:5a2:c750:f47d with SMTP id

4fb4d7f45d1cf-5a479f562c6mr1110720a12.12.1721494022742; Sat, 20 Jul 2024

09:47:02 -0700 (PDT)

MIME-Version: 1.0

References:

In-Reply-To:

Reply-To: cfc.ubagroup02@gmail.com

From: kristalina georgieva

Date: Sat, 20 Jul 2024 17:44:03 +0100

Message-ID:

Subject: Attention please

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000b569ed061db08f30"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 16.0

X-Spam_score_int: 160

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Beneficiary, I sent this letter to you a month ago, but

I did not hear from you, I'm not sure if you got it, And that is why I sent

it again, Firstly, I'm Mrs. Kristalina Georgieva, Managing Dire [...]



Content analysis details: (16.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

[209.85.208.51 listed in dnsbl.ahbl.org]

[209.85.208.51 listed in dnsbl.ahbl.org]

[209.85.208.51 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.51 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.51 listed in list.dnswl.org]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[carlsmith3241(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[carlsmith3241(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[cfc.ubagroup02(at)gmail.com]

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 LOTS_OF_MONEY Huge... sums of money

3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

0.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Attention please



--000000000000b569ed061db08f30

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Beneficiary,

I sent this letter to you a month ago, but I did not hear from you, I'm not

sure if you got it, And that is why I sent it again, Firstly, I'm Mrs.

Kristalina Georgieva, Managing Director and Chairwoman of the International

Monetary Fund.



Indeed We have reviewed all the obstacles and problems surrounded your

uncompleted transaction and your inability to meet up with transfer charges

levied, against you, for the past transfer options, view our site for your

confirmation 38=C2=B053=E2=80=B256=E2=80=B3N 77=C2=B02=E2=80=B239=E2=80=B3W



We are the Board of Directors, World Bank and International Monetary Fund

(IMF) Washington, D.C. in conjunction with The U.S. Department of the

Treasury and some other relevant Investigation Agencies here in the United

States of America. has ordered our Foreign Payment Remittance Unit, United

Bank of Africa Lome Togo to issue you a VISA Card, where your fund $1.5

million will be uploaded, for further withdrawal of your fund.



During the course of our investigation, we discovered with dismay that your

payment has been delayed by corrupt officials of the Bank who are Trying to

divert your funds into their private accounts.



And today we notify you that your fund has been credited into a VISA Card

by UBA Bank and also ready to be delivered. Now contact UBA Bank director

his name is Mr. Tony Elumelu, email: (cfc.ubagroup02@gmail.com) to direct

you on how to receive your ATM VISA card.



Sincerely,



Mrs. Kristalina Georgieva



--000000000000b569ed061db08f30

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Beneficiary, =C2=A0

v dir=3D"ltr">I sent this letter to you a month ago, but I did not hear fro=

m you, I'm not sure if you got it, And that is why I sent it again, Fir=

stly, I'm Mrs. Kristalina Georgieva, Managing Director and Chairwoman o=

f the International Monetary Fund.

Indeed We have reviewed all the o=

bstacles and problems surrounded your uncompleted transaction and your inab=

ility to meet up with transfer charges levied, against you, for the past tr=

ansfer options, view our site for your confirmation 38=C2=B053=E2=80=B256=

=E2=80=B3N 77=C2=B02=E2=80=B239=E2=80=B3W

We are the Board of Direct=

ors, World Bank and International Monetary Fund (IMF) Washington, D.C. in c=

onjunction with The U.S. Department of the Treasury and some other relevant=

Investigation Agencies here in the United States of America. has ordered o=

ur Foreign Payment Remittance Unit, United Bank of Africa Lome Togo to issu=

e you a VISA Card, where your fund $1.5 million will be uploaded, for furth=

er withdrawal of your fund.

During the course of our investigation, =

we discovered with dismay that your payment has been delayed by corrupt off=

icials of the Bank who are Trying to divert your funds into their private a=

ccounts.

And today we notify you that your fund has been credited in=

to a VISA Card by UBA Bank and also ready to be delivered. Now contact UBA =

Bank director his name is Mr. Tony Elumelu, email: (
bagroup02@gmail.com" target=3D"_blank">cfc.ubagroup02@gmail.com
) to dir=

ect you on how to receive your ATM VISA card.

Sincerely,

Mrs.=

Kristalina Georgieva






--000000000000b569ed061db08f30--

Ukrainian dating spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 20 Jul 2024 07:35:00 -0600

Received: from mail-psaapc01olkn2043.outbound.protection.outlook.com ([40.92.52.43]:9647 helo=APC01-PSA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVADj-000000005UH-2yGi

for dave@doctor.nl2k.ab.ca;

Sat, 20 Jul 2024 07:34:00 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=L2MHaHbXMX2Fo9zaXWl2/cWgQMQXc7/T7WTsWpn7m7t24OK+/UvKFUZiQM8NJ+11lY5axEk+vB7GZOnd8pymilZE5KUVxAmaeFe7+DTefNowetF7gwXEH3HxeLrrc9MVDl5eILiiAFAtoODux1wUxc7nRlf8izKs80o0d0lRlQg6LhmUQHcc9Z0RqFhYueVJcz8UFBABNbtDIkLkNVTXWLWD09ZEMUSJlu4EDcVm1YqQkbnGtctof9GhiDCFs9FFMH7xVl9xCYSOmLsrn4XRnUM+7u8OUUc+eRE90I39Ws919lhhnjqcXbyLYu0JV4j0OT/hcveakSJgEXoxv7Pf2Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=2iYhFcEUL6BnQW3oCkBwrRl8mIeYNB75blXFxJGnEjg=;

b=qslm7vt0+GY/PD2pR/NNaKR59SbGyYhDu+z3SNhxVLbJuq4vX4vLId0kNgu/nrmUSC7XMqecswhuNSCHJzAeHrq3eozC72mbTNpPiE3xZl0vVv7jvxSNV8n2mFPdZLsjimwPLcV7epfuin5bBOkyKHO2GQ8slDhaTVpGr8g5e6O0crtPv8airzurOgBVZCRCcBa0Vf1iomJHaDomd4DTLL87Y9x0xPKIegHNPNkCpRd7slCvFYW7MIW6+ShfCEhbVsBh+9cxn8hbGRn0CfXklKBbSAJMyzacNHEC1v33X9FTAJr//bupqBTyp8xuMuIM9HPInSES5K9r7jBCRqpwKw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=2iYhFcEUL6BnQW3oCkBwrRl8mIeYNB75blXFxJGnEjg=;

b=MrK/EoDofCxYpZZOEq12/KcK1u00UGs+1hdAQQ5r3cal1F63uc0epefjLvKUE+OFA63w7gHX6TcxhT+IXRJaVVVTIpYzOEskvXzckQARAuaMV5g7qekP4l2CtL77Bt3zV25lvZ6XBv5iY/vC06vYWEBv1sW9w9Sd61pkZWRYkOj0tFMcXjV6PzV3Tc/5XghEHZ9rQoa2Txefg6SqKl4nDZ5f3T33uAytHitwQ68mB/c3vi0/cWPCesI1IvnoxueUXP8SsSS15WKzDfQfln7LW5L3wHeKLE85OyR7HqHeV4zBOH0jXBkb+aCQ0yxWbxfaE5WCw497y/8M3Qqxsm11fw==

Received: from PUZPR04MB5397.apcprd04.prod.outlook.com (2603:1096:301:a4::13)

by SEZPR04MB7902.apcprd04.prod.outlook.com (2603:1096:101:231::9) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7807.8; Sat, 20 Jul

2024 13:30:51 +0000

Received: from PUZPR04MB5397.apcprd04.prod.outlook.com

([fe80::d620:5644:2d5d:96a8]) by PUZPR04MB5397.apcprd04.prod.outlook.com

([fe80::d620:5644:2d5d:96a8%5]) with mapi id 15.20.7807.005; Sat, 20 Jul 2024

13:30:51 +0000

Content-Type: multipart/alternative; boundary="===============3823538353311800247=="

Subject: Your Perfect Match Is Waiting

From:

CC:

Date: Sat, 20 Jul 2024 13:29:15 +0000

X-TMN: [z+kFWRs+RQqYj0VQAYYXk+PGVAoUAhgZ]

X-ClientProxiedBy: VI1PR02CA0053.eurprd02.prod.outlook.com

(2603:10a6:802:14::24) To PUZPR04MB5397.apcprd04.prod.outlook.com

(2603:1096:301:a4::13)

Message-ID:



MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: PUZPR04MB5397:EE_|SEZPR04MB7902:EE_

X-MS-Office365-Filtering-Correlation-Id: 4a8291ee-e197-47a0-a9ae-08dca8c02b2d

X-Microsoft-Antispam:

BCL:0;ARA:14566002|1680799051|8060799006|9000799047|9400799024|19110799003|461199028|42300799015|12050799009|56899033|3412199025|4302099013|1602099012|440099028|4601999012|2406899039|1710799026;

X-Microsoft-Antispam-Message-Info:

=?us-ascii?Q?Gl+665Klf/UCIW2QCGcnFt2aSYO65mYTSyX564SbskPXRVanoVYV4NJMk6Ja?=

=?us-ascii?Q?X7zLxHUe9NmJVbABNA0wtI5fJOM0wCJiWjyXI1vX6xkeOt8JlcziHUmvM3qL?=

=?us-ascii?Q?s1ZPYs74GWx3zgemPzTDjPKolOjAhkqYXCdBbgoPw01DeV2aWPafm+tBaSOs?=

=?us-ascii?Q?g86PL++J3X4vHhKByjyMR3bwg9wYJZlsAexRJmtwSnRoWiAEEGsvi7Zq2+tf?=

=?us-ascii?Q?uJE70haMKWGhsFjXuEacJCoJNvrOJ50R/lCWeY+FQJmSAy9aLmj4DdY+jlTT?=

=?us-ascii?Q?gkYDs/2qs61iqvGclr3VoMaC2465ryzVnli1vfhx4SW7ew0TVb+g62rJ2pFC?=

=?us-ascii?Q?4sEThI69uct6FqdQthSB6VA5SGYM/lTStDFOvsubMlScYLo5Cj6U/YcMgAjc?=

=?us-ascii?Q?xnHze7Yx48AW6HXCehE+bcag8KZY7/nvpve83JvKT8Z4tN2k2ZgqeHkik7fV?=

=?us-ascii?Q?2fe7mB+7I+zJV4q5askVG4PWR68RbPpqDxurNJRZhrNFoAxyXPW5HZgS161t?=

=?us-ascii?Q?x7FBuGF8kAg6jph8JDIiAsdAfOfTAVaw7iwzHf+XkOHlYVKvh9XL8W2phJ4o?=

=?us-ascii?Q?JtoJcdfUo8KPR+i/MVAtJmM7kjd+vEhJTyycIXJwNYlG94G6QrLMX7Mi2VMe?=

=?us-ascii?Q?HXDHyzWwQkMKxlTn8GcXcp+BXdluwEGZbABdILyYDBRWD+qgYlsclQsBZ7kS?=

=?us-ascii?Q?o2BcAoLMtDp+sIE0MWwGJqOYejcE2BnyuHjYOumcrmAmmuWuYXlTrG2a+8f/?=

=?us-ascii?Q?sWuUg/VgQ6CdjzGNsvqsuBrMv0rhKHO8P6ZHQnfxNwNWqfLlOdwdz3eg1J3M?=

=?us-ascii?Q?FzpVRqn5uRKyDEibn47lq7X0FbKps/vXxrk5VAdkq9IhMdrjzK/nPknztxjx?=

=?us-ascii?Q?55ZfwlQluH7rlr/R8DiDchH6PUUU3maP2XwVm4IMMYsQ70OXYFP6JvxNzFTV?=

=?us-ascii?Q?HyF+r45tJ3TSGU0Cq7hZLg=3D=3D?=

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?us-ascii?Q?0juiwWPWlI81mskFHR9mODU6ejq/f2iTHNPwO3uf9uI/9UtTHXR50JCrHsgW?=

=?us-ascii?Q?1AFLE8/TtSvWiwOO1YZxgnoxXUtAwV54Sl+uh5wyWwxiJqlysI3R2mcbw+ZT?=

=?us-ascii?Q?35F3J+sJoYDvrkOQMoHz0/Qk8uWSk2eTyasSFmoF3X1CHcvGBup4NrSc8Q0R?=

=?us-ascii?Q?kEWblaCJgStt6zD3ZdtvAT4h6FE6XZ+qp3qDThKCRWDMyocKwU9+noaZtsOv?=

=?us-ascii?Q?jFZXxxAurkIKo5ZnrqqLxAQSO20rhLlN62ZxdATIV9RhSYzcwxIAC+jPvrz9?=

=?us-ascii?Q?hFXkPCXf+tvuuEe9OLYSdmHQde5tOXKoPqbsKe44Wgh9SPRvvJ/pChx40J1U?=

=?us-ascii?Q?hvLAMdN3elXJTOgt7dwW25/Pkgoew6qpyfEGRXMEQKQmuBg6czjXGK3+FK1G?=

=?us-ascii?Q?QRtXoc6PBOgwoVNCKGMaensr5h0KKiE48Rvw9zz+4W/KUmCM/FkqwtnhzKZ/?=

=?us-ascii?Q?OAf9c1P9+CKzZ4cc3pA04vaXwPGymb1tWHqhb8d/uKDOInjh/iPK+U4M8ts2?=

=?us-ascii?Q?OUZqLx2O5TAyvo4PlXNXD2TzbyShmF7NpQVZCKdF7UkQW6eN7zSdOwMusta6?=

=?us-ascii?Q?P5TYC9lRFIdtFFVnV8SrFs90cDKmwZ2SX5p8gg1GJJixfB3zhCnAyBwq3XIu?=

=?us-ascii?Q?qm/l1MVSqKhs7MhVjc4B8HWWxgX7YB3MQtKpC5O3WDGv6NNBIrIsk0prsPuY?=

=?us-ascii?Q?hqiGmydLMjjLpaqds2Ubxr7kljhFSlpza70hgbS4veOASKUvrkGtfwG5VXjT?=

=?us-ascii?Q?Fl+4XyWI3mquMJLmWWXWRR724kTb/VPV/AmxPpbuDoKdoGjGrbUrVsYPL2p5?=

=?us-ascii?Q?o9q8mNT0vGYmEgmrj7jj07u65LG68z6U7mkGy7/6e1jAwkmNYmdytQ/G2k1d?=

=?us-ascii?Q?iDUsi8Erl9ukNSQ5z+CwPhn3dQMimpCUzFivkmhkCxY3Abey/rtr1OZRWsca?=

=?us-ascii?Q?CWsrDhtHBFAoTv/ZRqZRk6RXmerTpc5dJZf4QY4oDyx7Fd8vDAXvpqwCDdEj?=

=?us-ascii?Q?YsPLoYxMA6MRomYx7kgzrsvXdXTy1dM8HVb07LrnHR09nBja/vCwKQFyuXBO?=

=?us-ascii?Q?YuH7owyM8vJ8sqSrOJJQeM+7qdSYr0KEB0EIE4KL9dcm9ZI/5zOgOr+YMkv5?=

=?us-ascii?Q?AS/dYD7nNAX3K8/03rkUyO7n4DvAqwfJathoOAMcf9RxDCDp2yBKIPvs50cy?=

=?us-ascii?Q?NCRT9H4dWpMsli/i9g1aNa+zqjR3KnbR5T30hO/8dgnUk9QCevnLDR8rgYoV?=

=?us-ascii?Q?LJHnMhP6docx/wb6v3Ys?=

X-OriginatorOrg: sct-15-20-7719-19-msonline-outlook-4bae0.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: 4a8291ee-e197-47a0-a9ae-08dca8c02b2d

X-MS-Exchange-CrossTenant-AuthSource: PUZPR04MB5397.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Jul 2024 13:30:50.1860

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR04MB7902

X-Spam_score: 16.0

X-Spam_score_int: 160

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: If you are looking for a Ukrainian woman to start a relationship

with, you are in luck! Many Ukrainian women turn to online dating sites to

find a compatible partner. These women are intelligent, attr [...]



Content analysis details: (16.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.52.43 listed in dnsbl.ahbl.org]

[40.92.52.43 listed in dnsbl.ahbl.org]

[40.92.52.43 listed in dnsbl.ahbl.org]

[40.92.52.43 listed in dnsbl.ahbl.org]

[2603:1096:301:a4:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:1096:301:a4:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:1096:301:a4:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:1096:301:a4:0:0:0:13 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.52.43 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.52.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.52.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.52.43 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[40.92.52.43 listed in will-spam-for-food.eu.org]

[40.92.52.43 listed in will-spam-for-food.eu.org]

[40.92.52.43 listed in will-spam-for-food.eu.org]

[40.92.52.43 listed in will-spam-for-food.eu.org]

[40.92.52.43 listed in will-spam-for-food.eu.org]

[40.92.52.43 listed in will-spam-for-food.eu.org]

[40.92.52.43 listed in will-spam-for-food.eu.org]

[40.92.52.43 listed in will-spam-for-food.eu.org]

[2603:1096:301:a4:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:a4:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:a4:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:a4:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:a4:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:a4:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:a4:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:a4:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.52.43 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.52.43 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[garretmarch6oj(at)hotmail.com]

1.2 MISSING_HEADERS Missing To: header

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.6 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image area

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: clck.ru]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: clck.ru]

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} Your Perfect Match Is Waiting



--===============3823538353311800247==

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: 7bit



If you are looking for a Ukrainian woman to start a relationship with, you are in luck! Many Ukrainian women turn to online dating sites to find a compatible partner. These women are intelligent, attractive and have strong family values. They are looking for men who share their interests and are ready to enter into a serious relationship. On our dating site you can browse the profiles of these beautiful women and start a conversation with them. Your perfect partner could be just a click away!

 

CHAT NOW 

 

 

 

 

 

 

 

 

 

Click hereto unsubscribe.



--===============3823538353311800247==--

Nigerian spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 20 Jul 2024 10:50:00 -0600

Received: from mail-ed1-f51.google.com ([209.85.208.51]:46086)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVDGa-000000009ez-1WgV

for dave@doctor.nl2k.ab.ca;

Sat, 20 Jul 2024 10:49:08 -0600

Received: by mail-ed1-f51.google.com with SMTP id 4fb4d7f45d1cf-5a10bb7b237so2119266a12.0

for ; Sat, 20 Jul 2024 09:47:09 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1721494023; x=1722098823; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:in-reply-to:references

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=ZEgpHqie6U1sGpAclZpzBQxoImQkUb7xbRzzbn1gez4=;

b=GXyMrxFE1kg1FBPtz8XVmAldClc4bN3/Ulsh/+JmP6YaiCOQPZ4K6HQnkxejRW2ekW

/afpkjUZ5vi9O0E4lYbPTq1lkmTe6H8TIJcNtPDub7rkpYCLtfxqvzQyZVOqimGKqfHY

5qmIuX0tI9BXDQZAQg8ochyqfR0MhtQV2JgspqD0xVb2JoPXuASv6Uh95feylYLucLq5

aKtA5HfSJj5HXrpuLxVV03DAS365tRHIjTsOPB3mXA0rjNM9vurDorgtFJQbDf7mwY2K

tu7f00y+1+131/VbQOs7O8ZZY2H7l5yL8iK8viSGFUfnZSnoCsuk1WCHXxWfFTIdszSf

O0Og==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1721494023; x=1722098823;

h=to:subject:message-id:date:from:reply-to:in-reply-to:references

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=ZEgpHqie6U1sGpAclZpzBQxoImQkUb7xbRzzbn1gez4=;

b=Yddyy1OJs8D2o9bt1HBCO8QYslnlKAey6QT9gDGbZWmZNSKR6WHEohYAVi0tpGpxvV

axsrE/kCW1lgBHfFavcDF31x3dUC9Cqi/UJl0LXCGSbylDQOjK7qIovlNv9DNT8KMlV3

0A5/jphnJCIC4wwTJNwcwC3r+A3zVtt68Lp0JSCuhClVWE0j429PIKzryASkU2bmC8q4

8MRIjD7ID8QgoNOStTO+lTS2gKisNQT7/KocmtWhWKsRrINkjMAuJnLoH9HO50YYE7e0

g3OK3yxROObnR2utLh8TN0GfqffyDAxiCz9vr63G4pZQ/4G26+/i0eHZ6EaLCLuW4307

hDNQ==

X-Forwarded-Encrypted: i=1; AJvYcCVBCigEhcK4XxsJo0ejNm05RRiJviPbDNf94uWBSjfjSFcSoZ4Vm5ILA+Y5j1kWt0WcI1ih8O3JPvbhxQRc/JKbBAOBeofi

X-Gm-Message-State: AOJu0YyLO+6uaE0JlRW8PChSgQzrhJVcaEQLYCtn/uYHGr0MOij6WCN8

/BNXPPUWMjmYR80dfCLGWTQF17IxQllNJbInIFCqfSSDu99/eOQ3KP12fyNuEzCmaztQFME0jNQ

wymD8bvvnlDNvA0xwFWpoZ3bYumA=

X-Google-Smtp-Source: AGHT+IEqIbiU6vNlo/v+FHQxOo9QnJDL/E5HMLZUwxUYFvhAJ7TylaAz0tU64fvQCmic749YA+9byNCeH/QXCuvXpWY=

X-Received: by 2002:a50:bb6c:0:b0:5a2:c750:f47d with SMTP id

4fb4d7f45d1cf-5a479f562c6mr1110720a12.12.1721494022742; Sat, 20 Jul 2024

09:47:02 -0700 (PDT)

MIME-Version: 1.0

References:

In-Reply-To:

Reply-To: cfc.ubagroup02@gmail.com

From: kristalina georgieva

Date: Sat, 20 Jul 2024 17:44:03 +0100

Message-ID:

Subject: Attention please

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000b569ed061db08f30"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 16.0

X-Spam_score_int: 160

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Beneficiary, I sent this letter to you a month ago, but

I did not hear from you, I'm not sure if you got it, And that is why I sent

it again, Firstly, I'm Mrs. Kristalina Georgieva, Managing Dire [...]



Content analysis details: (16.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

[209.85.208.51 listed in dnsbl.ahbl.org]

[209.85.208.51 listed in dnsbl.ahbl.org]

[209.85.208.51 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.51 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.51 listed in list.dnswl.org]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[carlsmith3241(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[carlsmith3241(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[cfc.ubagroup02(at)gmail.com]

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 LOTS_OF_MONEY Huge... sums of money

3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

0.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Attention please



--000000000000b569ed061db08f30

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Beneficiary,

I sent this letter to you a month ago, but I did not hear from you, I'm not

sure if you got it, And that is why I sent it again, Firstly, I'm Mrs.

Kristalina Georgieva, Managing Director and Chairwoman of the International

Monetary Fund.



Indeed We have reviewed all the obstacles and problems surrounded your

uncompleted transaction and your inability to meet up with transfer charges

levied, against you, for the past transfer options, view our site for your

confirmation 38=C2=B053=E2=80=B256=E2=80=B3N 77=C2=B02=E2=80=B239=E2=80=B3W



We are the Board of Directors, World Bank and International Monetary Fund

(IMF) Washington, D.C. in conjunction with The U.S. Department of the

Treasury and some other relevant Investigation Agencies here in the United

States of America. has ordered our Foreign Payment Remittance Unit, United

Bank of Africa Lome Togo to issue you a VISA Card, where your fund $1.5

million will be uploaded, for further withdrawal of your fund.



During the course of our investigation, we discovered with dismay that your

payment has been delayed by corrupt officials of the Bank who are Trying to

divert your funds into their private accounts.



And today we notify you that your fund has been credited into a VISA Card

by UBA Bank and also ready to be delivered. Now contact UBA Bank director

his name is Mr. Tony Elumelu, email: (cfc.ubagroup02@gmail.com) to direct

you on how to receive your ATM VISA card.



Sincerely,



Mrs. Kristalina Georgieva



--000000000000b569ed061db08f30

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Beneficiary, =C2=A0

v dir=3D"ltr">I sent this letter to you a month ago, but I did not hear fro=

m you, I'm not sure if you got it, And that is why I sent it again, Fir=

stly, I'm Mrs. Kristalina Georgieva, Managing Director and Chairwoman o=

f the International Monetary Fund.

Indeed We have reviewed all the o=

bstacles and problems surrounded your uncompleted transaction and your inab=

ility to meet up with transfer charges levied, against you, for the past tr=

ansfer options, view our site for your confirmation 38=C2=B053=E2=80=B256=

=E2=80=B3N 77=C2=B02=E2=80=B239=E2=80=B3W

We are the Board of Direct=

ors, World Bank and International Monetary Fund (IMF) Washington, D.C. in c=

onjunction with The U.S. Department of the Treasury and some other relevant=

Investigation Agencies here in the United States of America. has ordered o=

ur Foreign Payment Remittance Unit, United Bank of Africa Lome Togo to issu=

e you a VISA Card, where your fund $1.5 million will be uploaded, for furth=

er withdrawal of your fund.

During the course of our investigation, =

we discovered with dismay that your payment has been delayed by corrupt off=

icials of the Bank who are Trying to divert your funds into their private a=

ccounts.

And today we notify you that your fund has been credited in=

to a VISA Card by UBA Bank and also ready to be delivered. Now contact UBA =

Bank director his name is Mr. Tony Elumelu, email: (
bagroup02@gmail.com" target=3D"_blank">cfc.ubagroup02@gmail.com
) to dir=

ect you on how to receive your ATM VISA card.

Sincerely,

Mrs.=

Kristalina Georgieva






--000000000000b569ed061db08f30--

Ukrainian dating spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 19 Jul 2024 09:13:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sUpHV-00000000HEB-3e50

for dave@doctor.nl2k.ab.ca;

Fri, 19 Jul 2024 09:12:25 -0600

Resent-From: The Doctor

Resent-Date: Fri, 19 Jul 2024 09:12:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dbaeur03olkn2052.outbound.protection.outlook.com ([40.92.58.52]:17505 helo=EUR03-DBA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sUol7-000000006bT-0kNQ

for doctor@doctor.nl2k.ab.ca;

Fri, 19 Jul 2024 08:39:02 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=XrHZD7T8vYFXejjk6bt2tDvauyRdDDIYOX0spN2rf1RbS2MgiWZHgXRXGLSNhlAnou68PNB5vphH5a3+18U3kPeiFtzLVrxiYHCcuens1++ylr0+GbQMMpvVFo9ppAvqgcPpTPzConuGh7TXNt5KYWlP9grCWLgOXSlHPJBvwmZYMB6iWKOFAnSD+L7jPb8AdO6LsoS4Fd7y1W/fHH08rCPWJEhqtNkWe0ZoxrUJ8/DhKalGIo/iD8SeeALPQECC4bWDuGNjO2qYXi01FlpOPpvqU+TMclHS7Km9m+m2KoHCD5tJUz2ByKcsfSofgc2m8kMGAiVXNIGZBGjPU7aujg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=UbylyuHc8OcpU/uYZSepv0/JMYndanO50rLHvLMy3bo=;

b=eZ3EXpUHnXKWbjpuzDnEmTHKZw/13kjFkvw3SxH+Ibb6zIhXupVsSU2n+NS771ZGPI5cJyI0K3al4H6QCDJJuj8fY/TvynUFgVNM044c4sE+zR+9Cvdc7odZu0/X+IM+ZZQXobsm1gBt6aYwcNQ2NZvQodMa6t8uCcYD74L/LqXDFV6yFPuj295LVBy0kThck+YVPCXPNAxDxg2Cipiph0WFyf1rVBHnG202qDjyQCH4ad69BSfhWnZC7rSS7G0RyDnEAnXR24w2fp0LalCgt88DEagvNvS6x7odtrgwvhIXG9M4x+0JpKEUIESMKHPTD1HQaCJPEkZS3VmV8OIzbg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=UbylyuHc8OcpU/uYZSepv0/JMYndanO50rLHvLMy3bo=;

b=UMBUfPLvj5wG2nNlx40ivhEpzDBoFx9iS92Kj/qMXwzPUskufD03+cXzAZ+AoieGJpgjU3N4vT9AjgQ3xrUhq2JD/jXwXbHo9q92PNJIPtWgV4ZUDL5yx13d3yJYFyF5LhWLFM8dodHn2tjwuKy9SHeGsWdOxlKetbSwDWprceK6I3RKu6dTmnReW+NRguelSuk8wHFWXsMW7QTpV/TRpbi3g3IeRtyKQJPF2H+30JWDi+wHouIvj5DtzmAyN4qyH/uVaEJ6anoUFhcK1nERhaiO1lhHIoKdQ8nsX6bWSbopS6ICRJiVeE3WkdGBAkDXogwb2/GtYss/sewU7c1jOA==

Received: from GV2PR10MB6695.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:150:b3::6)

by GV1PR10MB8319.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:150:1d3::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7784.16; Fri, 19 Jul

2024 14:36:41 +0000

Received: from GV2PR10MB6695.EURPRD10.PROD.OUTLOOK.COM

([fe80::52a5:f1e7:f579:95ab]) by GV2PR10MB6695.EURPRD10.PROD.OUTLOOK.COM

([fe80::52a5:f1e7:f579:95ab%7]) with mapi id 15.20.7784.017; Fri, 19 Jul 2024

14:36:41 +0000

From: "rodak.trena932@hotmail.com"

Subject: Single Ukrainian woman are in your area!

Reply-To: "rodak.trena932@hotmail.com"

X-Mailer: Mozilla Thunderbird

Date: Fri, 19 Jul 2024 16:36:37 +0200

Message-ID:



Content-Type: multipart/alternative;

boundary="----=_NextPart_000_8B09_B0560863.AB61A63A"

To: Undisclosed recipients:;

X-TMN: [pZREfhx9WBKQLnGw96DheogamDpVMncG]

X-ClientProxiedBy: MI2P293CA0002.ITAP293.PROD.OUTLOOK.COM

(2603:10a6:290:45::17) To GV2PR10MB6695.EURPRD10.PROD.OUTLOOK.COM

(2603:10a6:150:b3::6)

X-Microsoft-Original-Message-ID: <1.986b9beaa67f292f93b4@DESKTOP-7K7S413>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: GV2PR10MB6695:EE_|GV1PR10MB8319:EE_

X-MS-Office365-Filtering-Correlation-Id: c893f4a2-6e48-4b3f-9fdf-08dca8003321

X-Microsoft-Antispam:

BCL:0;ARA:14566002|42300799015|12050799009|19110799003|461199028|9400799024|8060799006|4601999012|440099028|3412199025|4302099013|56899033|1602099012;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?eXNkTGNhdWQwUjNFSFJxeEhVSHhzTE9CU3RmOWhFNDNESDcwUFdGNlcwTjhL?=

=?utf-8?B?a2VnSXJWVGlSdHRJRW9NcW85MzVkbDNXUlVkN3JTMENpaTYyajRZalorTmVX?=

=?utf-8?B?Vm94U29mcHczYWtyTXd6VVh3UE1UdnZtMGE5SWEyaW9JY1RVczkzTVFwWmo1?=

=?utf-8?B?bWd6blBSWnM1YTE3dE1Tb2JIN1BBQjBFbVJycE5jay94TDdFdnhzRmdsTmJH?=

=?utf-8?B?VE4wM3lhMFNOMm13NUNmdkFWdGowKzFDQmlGNUQ2eGkxQ0RkYllJaVRyK2l4?=

=?utf-8?B?WkJja2RjYTlKL2hvR29pS1YrdlNNQ3JYSVVlZjBHOTMwUEFXY0pNVDgweUVu?=

=?utf-8?B?N3dWTDZTeWlyYUd5YjlzdTJTYzNhWTdSMUpkTEs5RjA1c05hRkU3b1QxQzla?=

=?utf-8?B?M0RGMEpmWWYyajhPZyswZFhoOUpnei9ZVXlxaXBjT0syYVh0V0pIREk5YWpx?=

=?utf-8?B?OWNXaEhaNEJ1cGpoSmhZeldqUDFTR1BUV2tkZW93cHVGcGc0ajdEbTBTcW11?=

=?utf-8?B?UXFXbkFKQUczQmF2M1BrVzltbktSeFA2NkdYV3hVVmVkbzZQMUI4Sno5OHFG?=

=?utf-8?B?WXhJMy8vcDJjYmF1Z1RmR1AzNDZUMU0zTllxVWZLWHc4WGRNTlFhVGoyZkND?=

=?utf-8?B?M2ljMTZCanVUUGFTbzVpQVRCNWN6aXpIc0xJRUxtaFhMSy9NWjFNa05Kd1Fa?=

=?utf-8?B?cGVWdFZONWJjdkNoNGNlbW8yaHRwMmx5bitGRDFrS3dxMzkxZllGSFQ4THZa?=

=?utf-8?B?NFNsY0I1S0t1RVNjRTEyWFlneTgwTWw1REJCTkp3b3lrbmtOdlN2dUIwL1Zu?=

=?utf-8?B?OGlxTVcyYTFIbjE3dG5kMGtyajF3N1JBRWxXZyszdXZxcm9aWDhZZTg2YXU2?=

=?utf-8?B?Zm9wbTcvbnFlZDRYejhGYnpOczJITDVoM24vOVJIRWc2Y2pHMzNDVmRwOS9Q?=

=?utf-8?B?UDB2MmhHT2o1cGpjTU5qbUhnZ2dXdnR5VzRBbWRPV1B0RWJSblVUbG80N29E?=

=?utf-8?B?UWQrQ1plS3BjT21SY0dtQzBTOElWVkhGSzJCNFRMNVpna0tCSzJZaFYvdVA5?=

=?utf-8?B?SFFRSUNSb1NhcWRaSXF5Q1p2cWwzNmhMTE03YjFLWS91TVF0YStmTHh3QU5h?=

=?utf-8?B?L1kyWm1TdGUrK2hydGVYR0dBVXQ2RXZ6aTUzZzlVTEpwLzBBTys3bExGUXM0?=

=?utf-8?B?S0NKK3V4THh1WUJ4VGdXR0JGam1qamZ0eDNHKzdQTGN1NDVnMFBITTJPUTVj?=

=?utf-8?B?WmFJOWF1OGdEWVU5L2Zwb05iTXFXQXdNalZGaWNHOThNY0JyWk1mcVFncVBx?=

=?utf-8?B?cHhvMVh4SW9DclU5ejVUb2t6SmozVTlnQWhWbUk2TU9mb1RjWFBYWFpqK1ll?=

=?utf-8?B?dVM4cnVjQVVvZ0F6ZTk5QW4ycndCNGVwTTY2NDdCeVZjSmEwdU9VT0F4UGRn?=

=?utf-8?B?bWtmTzBaQ2pvU2ZOS3NBOVpxdHhxRVVsRnFOVUIxUnRHTGhDY3NSVitRbWsv?=

=?utf-8?B?RGxLRGdTa3RkMERMVkpCZ0xPT1BKOUgyU3B4b2dlSFNJMTF6aWp5blpKL1dJ?=

=?utf-8?B?RHIxRHcwbGdWTnhQaDdqdHNldlRibUVhWkhkMVRwckgyNEptQUNuUTRFcXo4?=

=?utf-8?B?U0ZuMHVIYXV4MUZtUzNaSVVlMlE5Qmk1bjIxMDkwU1drU251SHdFR1htK3Zs?=

=?utf-8?B?L0s2YWFYcGNsUTU5b2RpSDQ1ZkZvenNVdS9JME1RalFCalgzKzYrWkM2NHNG?=

=?utf-8?B?STFnOVVSNEhNaGVNdDJab3psRCtTQjcycGVyOEI2UE1FbTJLTXJNaXZWakxS?=

=?utf-8?B?a0xXdjhXdnRvTHhvRzBiRkFCRndCWjl2VGs2SzVTZjdCVWoreGZSVEt2MXBx?=

=?utf-8?B?eFVMVmxtd25EeFlka25ZMUZ4Wnc2QzZrTFhzSGxMR3E3Ui9HUEVZR0RiL1lS?=

=?utf-8?B?YjVzMGFZblI1N3BSdCs1SFY0WHFpQVpsN0xzWW51ajlXSTY5bko2bWQxSGlV?=

=?utf-8?B?MEgyb0IwRzRSYTV5WVV4L2o4M1V6MnZjMXA4Y3A1S1FsZ3JkQndYb3JUWUpR?=

=?utf-8?B?aHYyd2xNMTh0OXRVT3dmV0xOY1BvM2Vob2w0WEhiYmdpU3NJOHFBUmVjUDdR?=

=?utf-8?B?Zm1sWXhkYjlWOXFqamNyR2hVb1RtSGw5OHpaZjc1bnphWXJKb0paRHFJK1BS?=

=?utf-8?Q?73AGD9/d8Yq0n38mJsasC9s=3D?=

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?KzNlbEZid01DMU0rVGdyRnBzNEhTYWQxMXFNU0RMVFk1NFJPcnR2QVdrUytr?=

=?utf-8?B?N043U2dYZ3dRSlFpcmZ0VzBXanRnQ3A0MW9pdlRJR3hUUXJaRGtDZnZUdWEr?=

=?utf-8?B?UmdyTHJUUHg1RVgxMlI1eVFkeTFmbk9hY1NwTUhkOUFLWmNjNG96S3hXVm5q?=

=?utf-8?B?endCY1AyUW5aaEdScVAxQkRsWG16SnZEY1BEMjYrWFRDb1FoSy9YcXhaN3JB?=

=?utf-8?B?Q2ZtQjVORHF3eXdwM0VyS09uOEdpditnY0hRQmtRSkVpUk1mUnlyRkkzb3Ir?=

=?utf-8?B?aWRIRWxOQXN4a2diOWFYN2NCZk9aMnRybkFFOTN5QnBKblVRZjVjTGo1V0ZE?=

=?utf-8?B?V09IRld3ZDlXRURLcnBrR3pzM2E0cGFhT090OTNFclBQb3pjSFYyaGJGQkVh?=

=?utf-8?B?Q3NzM1FTV0g5V3dWdFJwN0VOdVFSNHN3UVRjc2lCZWdFNmtxcC9iVFRNclpC?=

=?utf-8?B?cGhSdm84blBuUlhCRnJ5RlNlWUFMMFFxWmpFN1dtcC9RWFY0NStHMDh4cDVB?=

=?utf-8?B?bzRYOWU2NHgzWEFPQXVSMWVURlNkTnFucjNIZHlHbTlFcUV6ekZPT3JicnNj?=

=?utf-8?B?Tm5sRUdENjVsWHhZM1lhOTZJUXBvVUFISUNtUUtwU0Z1SllqM2QvUHlKbmtv?=

=?utf-8?B?ZGNma1VTVjM5VjhPc1U4S0FDWHYwVy9NMzVkbUw5RHJ3TEZzOEZTaXhxTkRy?=

=?utf-8?B?ek55ZkZNSkRKOS9rMXl2bENxM3pGUks3YUp0bEtuaTZVL1BHb0t6Ymt5RGRP?=

=?utf-8?B?TVg5NEVQNnZoY1JPZXdyZzUvbTNrVTlmSnBXVU5LekFsamllV2FiYzI4YWlw?=

=?utf-8?B?YXF3UGZiWGhJbUNIQmZMSnpuU2NKZDRIVmd1ejBwc0VvVUxueEpoWmFKcC9p?=

=?utf-8?B?NzRHL01sRDkyMnMwTEVTbHZZWXgwMzE4aWZhcTZocTVJV3hDdWVXSkloWHF1?=

=?utf-8?B?WG8zRGlhODNPRExlV1oxREpSeVl2NXloYkR0ZVRFVXh0OE1hK2RyTzJvcENj?=

=?utf-8?B?cmN4eFQ1N3hZRXZrYTNLelc1YSsxVmdQaWJkSW5aRGh2T1dGajhuaHEyRlQ3?=

=?utf-8?B?Yzd2RUFSUEd3ak8wd1FrNy8wRHJJZk5PN0hhWW5tOGlJdkJzcmZSQ2ZweVUx?=

=?utf-8?B?UWplMnBrSmY1RlgzUU9oQXhnaGxDTkJqK0VqMTk4Rkp0N2JhOGpneXIxRHZj?=

=?utf-8?B?QVg0S0E3ZkRXcWpyczRHUlU4dDliZXFsbXlVem9EZFROZEFybHRReTkvOHJD?=

=?utf-8?B?ZDM3a3R0SG1ZbGhGYmlIZGo2ZmpVNDU4MmlSRzRvVGhGQzdkTkM3ZjdVa0tD?=

=?utf-8?B?RW9lTHN1NElLOGkvMGZCVWJSWFBjTWZlNHV1bWc0OXlUOXMzc1cwczJ1bnlQ?=

=?utf-8?B?ZDYzclcvRHpKOXJsdi83ck5wLytXTkNlSzVFL2pRRDJRQmhrQ011UzQyYnhk?=

=?utf-8?B?QVNkNXRLK3IzNDFhOGd1b2licWVhRlRmTFhxTkd3ZjhNWUtsaWkwM0g1dkx2?=

=?utf-8?B?YXh1UFYrYytpeHFrRkNFMGdVa2hlL1ZlajJnS1hhNEd6VE1QMVRoU0xuNHMr?=

=?utf-8?B?V2k4T09kN0dMVVR2RHZ3cEwrUy90elBNWWJrV2JnTkFnVUdIRHlUSXhUMjhn?=

=?utf-8?B?MTdXTjJIWUlvZjRsSGxwTHNGWCtyblU0eVJvaHE4TFZkcmkxVzZlbldZc2Fo?=

=?utf-8?Q?K9OUlvcZyPhfwL3u4Iq7?=

X-OriginatorOrg: sct-15-20-7719-20-msonline-outlook-4359a.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: c893f4a2-6e48-4b3f-9fdf-08dca8003321

X-MS-Exchange-CrossTenant-AuthSource: GV2PR10MB6695.EURPRD10.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Jul 2024 14:36:40.8509

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV1PR10MB8319

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: FindUkrainianGirl Are you living in the United Kingdom, United

States, Canada, Australia, or New Zealand and eager to meet a Ukrainian woman

near you? We are excited to announce our new website designed to help you

con [...]



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.58.52 listed in dnsbl.ahbl.org]

[40.92.58.52 listed in dnsbl.ahbl.org]

[40.92.58.52 listed in dnsbl.ahbl.org]

[40.92.58.52 listed in dnsbl.ahbl.org]

[2603:10a6:150:b3:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:b3:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:b3:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:b3:0:0:0:6 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.58.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.58.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.58.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.58.52 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10a6:150:b3:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:b3:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:b3:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:b3:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:b3:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:b3:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:b3:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:b3:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[40.92.58.52 listed in will-spam-for-food.eu.org]

[40.92.58.52 listed in will-spam-for-food.eu.org]

[40.92.58.52 listed in will-spam-for-food.eu.org]

[40.92.58.52 listed in will-spam-for-food.eu.org]

[40.92.58.52 listed in will-spam-for-food.eu.org]

[40.92.58.52 listed in will-spam-for-food.eu.org]

[40.92.58.52 listed in will-spam-for-food.eu.org]

[40.92.58.52 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.58.52 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.58.52 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[rodak.trena932(at)hotmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[rodak.trena932(at)hotmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[rodak.trena932(at)hotmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.6 FORGED_MUA_MOZILLA Forged mail pretending to be from Mozilla

Subject: {SPAM?} Single Ukrainian woman are in your area!



------=_NextPart_000_8B09_B0560863.AB61A63A

Content-Type: text/plain;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



FindUkrainianGirl





Are you living in the United Kingdom, United States, Canada, Australia, or =

New Zealand and eager to meet a Ukrainian woman near you? We are excited to=

announce our new website designed to help you connect and date Ukrainian w=

omen who have relocated to these countries due to recent events.



Our platform boasts a thriving community with over 250,000 users, mainly w=

omen. We are actively seeking men to join and become part of this vibrant c=

ommunity.





Join for Free





FindUkrainianGirl





Our site is equipped with a variety of features such as chat, video calls, =

phone calls, stickers, and many more options for you to explore. Sign up fo=

r free now with this exclusive limited-time offer. All users are verified a=

nd authentic. Join us today!





Remove me here



































=



------=_NextPart_000_8B09_B0560863.AB61A63A

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




style=3D"font-weight:normal;" id=3D"docs-internal-guid-7013a564-7fff-cdc8-=

5a08-a30bf9bcc9df">=0A=


argin-bottom:0pt;">=0A=


=3D"font-size:15pt;font-family:Arial,sans-serif;color:#1155cc;background-co=

lor:transparent;font-weight:700;font-style:normal;font-variant:normal;text-=

decoration:underline;-webkit-text-decoration-skip:none;text-decoration-skip=

-ink:none;vertical-align:baseline;white-space:pre-wrap;">FindUkrainianGirl<=

/span>
=0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Are you living in the United Kingdom, United States, Canada, Australia, or =

New Zealand and eager to meet a Ukrainian woman near you? We are excited to=

announce our new website designed to help you connect and date Ukrainian w=

omen who have relocated to these countries due to recent events.
=0A=

=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Our platform boasts a thriving community with over 250,000 users, mainly wo=

men. We are actively seeking men to join and become part of this vibrant co=

mmunity.
=0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Join for Free
=0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


=3D"font-size:15pt;font-family:Arial,sans-serif;color:#1155cc;background-co=

lor:transparent;font-weight:700;font-style:normal;font-variant:normal;text-=

decoration:underline;-webkit-text-decoration-skip:none;text-decoration-skip=

-ink:none;vertical-align:baseline;white-space:pre-wrap;">FindUkrainianGirl<=

/span>
=0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:400;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Our site is equipped with a variety of features such as chat, video calls, =

phone calls, stickers, and many more options for you to explore. Sign up fo=

r free now with this exclusive limited-time offer. All users are verified a=

nd authentic. Join us today!
=0A=

=0A=


=0A=


t;margin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:700;font-style:italic;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Remove me

e;">
c;background-color:transparent;font-weight:700;font-style:italic;font-varia=

nt:normal;text-decoration:underline;-webkit-text-decoration-skip:none;text-=

decoration-skip-ink:none;vertical-align:baseline;white-space:pre-wrap;"> he=

re 
=0A=

=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=



------=_NextPart_000_8B09_B0560863.AB61A63A--

Web / SEO/ App spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 19 Jul 2024 00:31:00 -0600

Received: from mail-pl1-f180.google.com ([209.85.214.180]:59705)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sUh8N-000000006MB-2d9S

for dave@doctor.nl2k.ab.ca;

Fri, 19 Jul 2024 00:30:32 -0600

Received: by mail-pl1-f180.google.com with SMTP id d9443c01a7336-1fbe6f83957so14287995ad.3

for ; Thu, 18 Jul 2024 23:28:33 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1721370508; x=1721975308; darn=doctor.nl2k.ab.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=AkRKQ9TxjTpj7HC0Qnugo2DrQQbYMO9jZZx1BEenzzc=;

b=Td+DBkF0JMDl0Krvi2OO6v6+6ftFHae+v5Tz2pFeaohsFi0/TTG7By2hiV7DC1fqPw

ueUpE3ENWywood4sALJeDN1ijGPzeIFR9mq8/Wy1S041T0zMlTnsq+rADcNnDv6U9w+F

jFDZvBYKQTiSqAPEdk4cPDEqmJWg/jzfRze+lxBjUabw7cARBe+WZbtToDXx4sj2kVk1

KR0/H74GDBnu2U3RmooJjzBrBxpSamCD5SDN9573r+jXBe9Hv5juXxlGyqCbbigqvRfc

A1XCBtoQRW64P4UDizhhk/GxY90LrVUo9KIvXmI7BG8Q2S5PA6uUExqcpMFTG2qM6O9W

y1mQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1721370508; x=1721975308;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=AkRKQ9TxjTpj7HC0Qnugo2DrQQbYMO9jZZx1BEenzzc=;

b=O4ruMKD9pQhVpmVu+6A5e++EyAfvWZExfrWET/XLjapmMzd7hOupKg/oGhJKUv/i19

qoxCF/dXx0VuhooEdqnhlmamosxj9BnMLDFGdCEoT946OvnInsrYJAWuW1TXzxn4WPJa

ymB0zmK3STLYUxNTq5x9UEd/S0IDGL1n3PVJJoRmhAVX9oekTJIeoIE6kYYpjRBsI0g0

YtjP5o+WfAISRyVRGxzpTsD7ERw9x8tuey6yoS7RNTdw5rOniVC4aKpV3OqAQrurnUL1

RBwH6QEuwT9QYeER4NLzlCsgVwI6YTuZ4TBofro9Kx2HuwpKLwvnc2BHhsHLloBalqTC

EgoA==

X-Gm-Message-State: AOJu0YznCelWE21PBJ8NSINpYmBukQRB5ptXzmthDwDzxYnaeaOUQMvQ

GQgFPB0XzCtJ7lHKTLAT/Q9Zh3mXm+t8IPZMEGMDThMjkBgRHWn6117kIg==

X-Google-Smtp-Source: AGHT+IFrk3Xppoxuy+0ysSW2t4C1DKPC3J/fkyTsI2kWof1rODYfZaN4nG6hysu5Km79GOqIVG0gLw==

X-Received: by 2002:a17:903:1205:b0:1f7:123e:2c6f with SMTP id d9443c01a7336-1fc4e15ef13mr61259555ad.37.1721370507010;

Thu, 18 Jul 2024 23:28:27 -0700 (PDT)

Received: from adminPC ([122.161.76.139])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-1fd64d1a18dsm6334305ad.207.2024.07.18.23.28.25

for

(version=TLS1 cipher=ECDHE-ECDSA-AES128-SHA bits=128/128);

Thu, 18 Jul 2024 23:28:26 -0700 (PDT)

From: "Nancy"

To:

Subject: quote

Date: Fri, 19 Jul 2024 11:58:11 +0530

Message-ID: <030601dad9a4$de28ca10$9a7a5e30$@com>

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_0307_01DAD9D2.F7E10610"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdrZpGPqz1jA0dO3QIGQ8BchGw5+BA==

Content-Language: en-us

X-Spam_score: 5.5

X-Spam_score_int: 55

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I was Checking your website on behalf of this email 'dave@doctor.nl2k.ab.ca'

and saw you have a good design and it looks good, but it's not ranking on

Google. I want your permission I would like to send you a SEO report with

packages showing you a few things to improve these search results. These

things are not difficult, and my report will be very specific [...]



Content analysis details: (5.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.180 listed in dnsbl.ahbl.org]

[209.85.214.180 listed in dnsbl.ahbl.org]

[209.85.214.180 listed in dnsbl.ahbl.org]

[209.85.214.180 listed in dnsbl.ahbl.org]

[122.161.76.139 listed in dnsbl.ahbl.org]

[122.161.76.139 listed in dnsbl.ahbl.org]

[122.161.76.139 listed in dnsbl.ahbl.org]

[122.161.76.139 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.180 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.180 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.180 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.180 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.214.180 listed in will-spam-for-food.eu.org]

[209.85.214.180 listed in will-spam-for-food.eu.org]

[209.85.214.180 listed in will-spam-for-food.eu.org]

[209.85.214.180 listed in will-spam-for-food.eu.org]

[209.85.214.180 listed in will-spam-for-food.eu.org]

[209.85.214.180 listed in will-spam-for-food.eu.org]

[209.85.214.180 listed in will-spam-for-food.eu.org]

[209.85.214.180 listed in will-spam-for-food.eu.org]

[122.161.76.139 listed in will-spam-for-food.eu.org]

[122.161.76.139 listed in will-spam-for-food.eu.org]

[122.161.76.139 listed in will-spam-for-food.eu.org]

[122.161.76.139 listed in will-spam-for-food.eu.org]

[122.161.76.139 listed in will-spam-for-food.eu.org]

[122.161.76.139 listed in will-spam-for-food.eu.org]

[122.161.76.139 listed in will-spam-for-food.eu.org]

[122.161.76.139 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.180 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.5 ONE_WORD_SUBJECT Subject with only one lower-case word

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.180 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[chepngetichsharoo(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} quote



This is a multi-part message in MIME format.



------=_NextPart_000_0307_01DAD9D2.F7E10610

Content-Type: multipart/alternative;

boundary="----=_NextPart_001_0308_01DAD9D2.F7E10610"





------=_NextPart_001_0308_01DAD9D2.F7E10610

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,



I was Checking your website on behalf of this email

'dave@doctor.nl2k.ab.ca' and saw you have a good design and it looks good,

but it's not ranking on Google.



I want your permission I would like to send you a SEO report with packages

showing you a few things to improve these search results. These things are

not difficult, and my report will be very specific. It will show you what

needs to be done to move you up in the high rankings.



Would that be okay? If yes, I'd be happy to send you Packages.



Thanks

Nancy



































--



























Reply Forward



























































































































------=_NextPart_001_0308_01DAD9D2.F7E10610

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">






charset=3Dus-ascii">






















style=3D'font-size:11.0pt;font-family:"Georgia","serif";

color:#26282A;background:#F9FAFB'>Hi,

style=3D'font-size:11.0pt;

font-family:"Georgia","serif";color:#26282A'>





I was 
class=3Dyiv6376417716gmail-bg-yellow-100>
#E5E7EB 1.0pt;

padding:0in'>Checking
=

your  we

style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#26282=

A;

background:#F9FAFB'>bsi
style=3D'font-size:11.0pt;font-family:"Georgia","serif";

color:#26282A;background:#F9FAFB'>te on behalf of this email =

‘dave@doctor.nl2k.ab.ca’

and saw you have a good design and it looks good, but it’s not =

ranking on

G

MT","serif";color:#26282A;

background:#F9FAFB'>oog

style=3D'font-size:11.0pt;font-family:"Georgia","serif";

color:#26282A;background:#F9FAFB'>le.

style=3D'font-size:11.0pt;

font-family:"Georgia","serif";color:#26282A'>





I want your per

style=3D'font-size:11.0pt;font-family:DotumChe;color:#26282A;background:#=

F9FAFB'>mission
style=3D'font-size:11.0pt;font-family:"Georgia","serif";color:#26282A;bac=

kground:

#F9FAFB'> I would
style=3D'font-size:10.5pt;font-family:"Georgia","serif";

color:#26282A;background:#F9FAFB'>like to send

style=3D'font-size:

11.0pt;font-family:"Georgia","serif";color:#26282A;background:#F9FAFB'> =

you a

SEO report with pa

style=3D'font-size:11.0pt;font-family:"Arial Rounded MT =

Bold","sans-serif";

color:#26282A;background:#F9FAFB'>cka

style=3D'font-size:11.0pt;

font-family:"Georgia","serif";color:#26282A;background:#F9FAFB'>ges =

show

class=3Dyiv6376417716gmail-bg-yellow-100>
style=3D'font-size:11.0pt;

font-family:"Georgia","serif";color:#26282A;border:solid #E5E7EB 1.0pt;

padding:0in'>in

style=3D'font-size:11.0pt;font-family:"Georgia","serif";

color:#26282A;background:#F9FAFB'>g you a few things to improve these =

search

results. These th

style=3D'font-size:11.0pt;font-family:"Courier New";

color:#26282A;background:#F9FAFB'>ing

style=3D'font-size:11.0pt;

font-family:"Georgia","serif";color:#26282A;background:#F9FAFB'>s are =

not di

style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#26282=

A;

background:#F9FAFB'>fficult
style=3D'font-size:11.0pt;font-family:

"Georgia","serif";color:#26282A;background:#F9FAFB'>, and my report will =

be

very specific. It will show you what needs

style=3D'font-size:11.0pt;

font-family:"Bookman Old =

Style","serif";color:#26282A;background:#F9FAFB'>to be

done

style=3D'font-size:11.0pt;font-family:"Georgia","serif";

color:#26282A;background:#F9FAFB'> to move you up in the high =


style=3D'font-size:11.0pt;font-family:"Bell =

MT","serif";color:#26282A;background:

#F9FAFB'>rankings.
style=3D'font-size:11.0pt;font-family:"Georgia","serif";

color:#26282A'>





Would that be okay? If yes, I'd be =


style=3D'font-size:11.0pt;font-family:"Book =

Antiqua","serif";color:#26282A;

background:#F9FAFB'>happy to send

style=3D'font-size:11.0pt;

font-family:"Georgia","serif";color:#26282A;background:#F9FAFB'> you =

Packages.

style=3D'font-size:11.0pt;font-family:"Georgia","serif";color:#26282A'>
r>


style=3D'font-size:11.0pt;font-family:"Georgia","serif";

color:#26282A'>


Thanks


Nancy





 





 





 





 





 





 





 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>
style=3D'font-family:"Baskerville Old Face","serif"'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>
class=3D"m-4606421222128777855m-2772129916170501847m430087061070871432m24=

63740414869080667gmailsignatureprefix">
style=3D'font-family:"Constantia","serif"'>--






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal>
style=3D'font-size:10.0pt;font-family:"Georgia","serif";color:black'>&nbs=

p;






class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal>
style=3D'font-family:"Cambria =

Math","serif";color:black'> 






class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal>
style=3D'font-family:"Calibri","sans-serif";color:black'> =


style=3D'font-family:"Calibri","sans-serif"'>
id=3D"_x0000_i1027" =

src=3D"cid:image001.jpg@01DAD9D2.7DA0CA20">






class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal>
style=3D'font-size:1.0pt;font-family:"Calibri","sans-serif"'> 
>
style=3D'font-size:1.0pt;font-family:"Calibri","sans-serif"'>
width=3D274

height=3D5 id=3D"_x0000_i1026" =

src=3D"cid:image002.jpg@01DAD9D2.7DA0CA20">






class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal

style=3D'line-height:15.0pt;background:white'>
style=3D'font-family:"Calibri","sans-serif"'>   
style=3D'color:#444746'>Reply Forward






class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal>
style=3D'font-family:"Calibri","sans-serif"'> 






class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal>
style=3D'font-family:"Cambria","serif"'>
id=3D"_x0000_i1025"

src=3D"cid:image003.jpg@01DAD9D2.7DA0CA20">






class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal>
style=3D'font-size:10.0pt;font-family:"Cambria","serif"'> 
>




class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal>
style=3D'font-size:10.0pt;font-family:"Cambria","serif"'> 
>




class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal>
style=3D'font-family:"Cambria","serif"'> 






class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal>
style=3D'font-family:"Cambria","serif"'> 






class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal>
style=3D'font-family:"Cambria","serif"'> 






class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal>
style=3D'font-family:"Cambria","serif"'> 






class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal>
style=3D'font-family:"Cambria","serif"'> 






class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>
style=3D'color:white'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 












 





 





 





 

















------=_NextPart_001_0308_01DAD9D2.F7E10610--



------=_NextPart_000_0307_01DAD9D2.F7E10610

Content-Type: image/jpeg;

name="image001.jpg"

Content-Transfer-Encoding: base64

Content-ID:



/9j/4AAQSkZJRgABAQEAYABgAAD/2wBDAAoHBwgHBgoICAgLCgoLDhgQDg0NDh0VFhEYIx8lJCIf

IiEmKzcvJik0KSEiMEExNDk7Pj4+JS5ESUM8SDc9Pjv/2wBDAQoLCw4NDhwQEBw7KCIoOzs7Ozs7

Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozv/wAARCAAFAAgDASIA

AhEBAxEB/8QAHwAAAQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUFBAQA

AAF9AQIDAAQRBRIhMUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkKFhcYGRolJicoKSo0NTY3

ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWm

p6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QAHwEA

AwEBAQEBAQEBAQAAAAAAAAECAwQFBgcICQoL/8QAtREAAgECBAQDBAcFBAQAAQJ3AAECAxEEBSEx

BhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElK

U1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3

uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEAPwDO0YrB

pMhjBVNg3IDw2R3oooq+SLexg6k+5//Z



------=_NextPart_000_0307_01DAD9D2.F7E10610

Content-Type: image/jpeg;

name="image002.jpg"

Content-Transfer-Encoding: base64

Content-ID:



/9j/4AAQSkZJRgABAQEAYABgAAD/2wBDAAoHBwgHBgoICAgLCgoLDhgQDg0NDh0VFhEYIx8lJCIf

IiEmKzcvJik0KSEiMEExNDk7Pj4+JS5ESUM8SDc9Pjv/2wBDAQoLCw4NDhwQEBw7KCIoOzs7Ozs7

Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozv/wAARCAAFARIDASIA

AhEBAxEB/8QAHwAAAQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUFBAQA

AAF9AQIDAAQRBRIhMUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkKFhcYGRolJicoKSo0NTY3

ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWm

p6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QAHwEA

AwEBAQEBAQEBAQAAAAAAAAECAwQFBgcICQoL/8QAtREAAgECBAQDBAcFBAQAAQJ3AAECAxEEBSEx

BhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElK

U1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3

uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEAPwD1AIo7

UEAjHI+hoorYyAKBS7RkH0oooAWmgAUUUALjjGM/WkCqOgAoooAXFLRRQAgABJA69aCaKKAAcdKD

2oooAKDwelFFAAKWiigBO2aM0UUABOKTPtRRQAoOadtyhbPQUUUARl8dqUNntRRQMXNMWTJIx0NF

FAEg5Bpu6iigQ4DKhs0YoooAiEh81kxwDipM/Ix9BRRQBD5zegooooGf/9k=



------=_NextPart_000_0307_01DAD9D2.F7E10610

Content-Type: image/jpeg;

name="image003.jpg"

Content-Transfer-Encoding: base64

Content-ID:



/9j/4AAQSkZJRgABAQEAYABgAAD/2wBDAAoHBwgHBgoICAgLCgoLDhgQDg0NDh0VFhEYIx8lJCIf

IiEmKzcvJik0KSEiMEExNDk7Pj4+JS5ESUM8SDc9Pjv/wAALCAAFAQwBAREA/8QAHwAAAQUBAQEB

AQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUFBAQAAAF9AQIDAAQRBRIhMUEGE1Fh

ByJxFDKBkaEII0KxwRVS0fAkM2JyggkKFhcYGRolJicoKSo0NTY3ODk6Q0RFRkdISUpTVFVWV1hZ

WmNkZWZnaGlqc3R1dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXG

x8jJytLT1NXW19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/9oACAEBAAA/APV8Rj+Fv++v/rUuU/un

8/8A61G5R/CfzpDKB/D+tNMw/ufrTDcD+5+tILkf88/1p4uB/wA8x+dL9oH/ADzFKLkf881pwuB/

zzH50ouB/wA8x+dO88f3BS+eP7g/Ok88f3P1o88f3B+dL5w/uD86Tzx/c/Wjzh/c/Wk88f3P1pDP

/sfrSfaP9gfnTTc/7A/OkN2f+eY/Omm8P/PNaPtp/wCeY/Oj7Z/0zH50fbP+mY/OnC6/2B+dOFxn

+AfnTvN9v1o8z2/Wmlge360mR6V//9k=



------=_NextPart_000_0307_01DAD9D2.F7E10610--