Fedex Phish from France

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 15 Jul 2024 11:14:00 -0600

Received: from mtaout2.ac-mayotte.fr ([193.55.5.84]:33570)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sTPGR-00000000Nyw-0wQY

for dave@doctor.nl2k.ab.ca;

Mon, 15 Jul 2024 11:13:32 -0600

Received: from mta2.ac-mayotte.fr (mta2.ac-mayotte.fr [193.55.5.85])

by mtaout2.ac-mayotte.fr (Postfix) with ESMTP id BBABC61870;

Mon, 15 Jul 2024 20:11:21 +0300 (EAT)

Received: from imsva2.ac-mayotte.fr (imsva2.ac-mayotte.fr [193.55.5.86])

by mta2.ac-mayotte.fr (Postfix) with ESMTP id 9FAC273B35;

Mon, 15 Jul 2024 20:11:21 +0300 (EAT)

DKIM-Filter: OpenDKIM Filter v2.11.0 mta2.ac-mayotte.fr 9FAC273B35

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ac-mayotte.fr;

s=default; t=1721063481;

bh=e+WN9G9ffGMtfzqcOF6o2iwrx0eoItmvp+FE74gdanU=;

h=From:Date:Subject:Message-ID:To:From;

b=DNHT4M5E8FdWrx53GtIyYLC1eFOqg0pIShf/b5hvAgoXnzWkGl86hS3/KJeIDemz1

OnginyfjUwq9wSvUHHF1pRdDmnRnk2CAGvNgrbJptgYa/PF59a6+5GQl9QFQ19+u74

gN2aENGVIa4BthZWR2u6jBufZe5/9zWv+wRfELpM=

Received: from imsva2.ac-mayotte.fr (unknown [127.0.0.1])

by IMSVA (Postfix) with ESMTP id 96AB62A074;

Mon, 15 Jul 2024 20:11:20 +0300 (EAT)

X-IMSS-DKIM-Authentication-Result: imsva2.ac-mayotte.fr; sigcount=0

Received: from imsva2.ac-mayotte.fr (unknown [127.0.0.1])

by IMSVA (Postfix) with ESMTP id 745812A069;

Mon, 15 Jul 2024 20:11:20 +0300 (EAT)

Received: from mta.ac-mayotte.fr (unknown [193.55.5.53])

by imsva2.ac-mayotte.fr (Postfix) with ESMTP;

Mon, 15 Jul 2024 20:11:20 +0300 (EAT)

Received: from goodies.in.ac-mayotte.fr (unknown [192.168.205.176])

by mta.ac-mayotte.fr (Postfix) with ESMTP id 4A5F4264;

Mon, 15 Jul 2024 20:11:20 +0300 (EAT)

Received: from localhost (localhost [127.0.0.1])

by goodies.in.ac-mayotte.fr (Postfix) with ESMTP id 40E0F2075F;

Mon, 15 Jul 2024 20:10:40 +0300 (EAT)

From: "Krasnopolski Catherine"

User-Agent: SOGoMail 5.5.1

MIME-Version: 1.0

Date: Mon, 15 Jul 2024 20:10:39 +0300

Subject: Tentative de Livraison 352500025******

Message-ID: <4bf5-66955800-97-240891c0@155378267>

X-Forward: 92.204.188.251, 193.55.5.88

Content-Type: multipart/alternative; boundary="----=_=-_OpenGroupware_org_NGMime-19445-1721063439.632443-62------"

To: undisclosed-recipients:;

X-TM-AS-GCONF: 00

X-TM-AS-Product-Ver: IMSVA-9.1.0.2090-9.0.0.1002-28532.000

X-TM-AS-User-Blocked-Sender: No

X-TMASE-Version: IMSVA-9.1.0.2090-9.0.1002-28532.000

X-TMASE-Result: 10--8.534200-10.000000

X-TMASE-MatchedRID: oQHFeo+4SgP2yqGJlQHq6K62z4+8dpAFtbLlbs/3Cv2/pHiYrM9G1rgm

iO1rViu17HCQH/qsu2xg3TjfmZVG9O9b3TQ8/fJw8cfJvU1opSHw15MRBftBYxPUw43ywkSuU3q

d9N3PT4CnFEO890veouadXXcOleEbRTRS0AqU+a9N4vORKHc+/9AlffzmZ4IJjQO5NdQoousoT7

ZlgKsKE8hFQ8bAnuqbreGs31se9yF35e7W/7qt1BRCvG+7JPYwOo74i8pSTyH/KVtfZiSDplc5q

H3r1S6/NPJZVpuc40oM6z3iDvziB4KDuFd6JY26g+SfCo2ztGuNejW/sHdeENDaNZpK9gNY9kS3

NoOwnpL3ZAk/wknRaqmvdEdMifXcthi8f+6A0cjWmzrn0M04MJDlC245bmzIWORIf0s6Ilb8dKO

anNddHlLpblRP8vf05BgEdUqqANQXHdPqyeIpHoDOA+9qZWYnPSvy+zNS+cl+70G49UYf86qOU5

AOJ1/gET2lQJzKXBueAiCmPx4NwGmRqNBHmBve1B0Hk1Q1KyINQQtC+dSpF7XwHj/AmsmGmmjYo

zW/8hKzXat2cXufPNKt9c7HBnTpavP8b9lJtWr+efAnnZBiL8z+Ba7+nv3uxVJUxfMUsGx90Va5

fTp73KVgw9jnwKX2BDyUjaLLpZd+3BndfXUhXQ==

X-IMSS-DKIM-White-List: No

X-TMASE-SNAP-Result: 1.821001.0001-0-1-22:0,33:0,34:1,35:0,36:0,37:0,40:0-0

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: FedEx Bonjour, Tentative de livraison infructueuse Type de

colis : Grande lettre Date de livraison : Lundi 15 juillet 2024 Nous avons

tenté de livrer votre colis à 09h35 le lundi 15 juillet 2024, mais personne

n'était disponible. Votre colis a été retourné à notre dépôt et vous

devez reprogrammer la livraison de [...]



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[193.55.5.84 listed in dnsbl.ahbl.org]

[193.55.5.84 listed in dnsbl.ahbl.org]

[193.55.5.84 listed in dnsbl.ahbl.org]

[193.55.5.84 listed in dnsbl.ahbl.org]

[193.55.5.53 listed in dnsbl.ahbl.org]

[193.55.5.53 listed in dnsbl.ahbl.org]

[193.55.5.53 listed in dnsbl.ahbl.org]

[193.55.5.53 listed in dnsbl.ahbl.org]

[193.55.5.86 listed in dnsbl.ahbl.org]

[193.55.5.86 listed in dnsbl.ahbl.org]

[193.55.5.86 listed in dnsbl.ahbl.org]

[193.55.5.86 listed in dnsbl.ahbl.org]

[193.55.5.85 listed in dnsbl.ahbl.org]

[193.55.5.85 listed in dnsbl.ahbl.org]

[193.55.5.85 listed in dnsbl.ahbl.org]

[193.55.5.85 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[193.55.5.84 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[193.55.5.84 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[193.55.5.84 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[193.55.5.84 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[193.55.5.86 listed in will-spam-for-food.eu.org]

[193.55.5.86 listed in will-spam-for-food.eu.org]

[193.55.5.86 listed in will-spam-for-food.eu.org]

[193.55.5.86 listed in will-spam-for-food.eu.org]

[193.55.5.86 listed in will-spam-for-food.eu.org]

[193.55.5.86 listed in will-spam-for-food.eu.org]

[193.55.5.86 listed in will-spam-for-food.eu.org]

[193.55.5.86 listed in will-spam-for-food.eu.org]

[193.55.5.85 listed in will-spam-for-food.eu.org]

[193.55.5.85 listed in will-spam-for-food.eu.org]

[193.55.5.85 listed in will-spam-for-food.eu.org]

[193.55.5.85 listed in will-spam-for-food.eu.org]

[193.55.5.85 listed in will-spam-for-food.eu.org]

[193.55.5.85 listed in will-spam-for-food.eu.org]

[193.55.5.85 listed in will-spam-for-food.eu.org]

[193.55.5.85 listed in will-spam-for-food.eu.org]

[193.55.5.84 listed in will-spam-for-food.eu.org]

[193.55.5.84 listed in will-spam-for-food.eu.org]

[193.55.5.84 listed in will-spam-for-food.eu.org]

[193.55.5.84 listed in will-spam-for-food.eu.org]

[193.55.5.84 listed in will-spam-for-food.eu.org]

[193.55.5.84 listed in will-spam-for-food.eu.org]

[193.55.5.84 listed in will-spam-for-food.eu.org]

[193.55.5.84 listed in will-spam-for-food.eu.org]

[193.55.5.53 listed in will-spam-for-food.eu.org]

[193.55.5.53 listed in will-spam-for-food.eu.org]

[193.55.5.53 listed in will-spam-for-food.eu.org]

[193.55.5.53 listed in will-spam-for-food.eu.org]

[193.55.5.53 listed in will-spam-for-food.eu.org]

[193.55.5.53 listed in will-spam-for-food.eu.org]

[193.55.5.53 listed in will-spam-for-food.eu.org]

[193.55.5.53 listed in will-spam-for-food.eu.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: compuper.com.pe]

-2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, medium

trust

[193.55.5.84 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

Subject: {SPAM?} Tentative de Livraison 352500025******



------=_=-_OpenGroupware_org_NGMime-19445-1721063439.632443-62------

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable

Content-Length: 593





FedEx

Bonjour,

Tentative de livraison infructueuse

=C2=A0

Type de colis : Grande lettre

Date de livraison : Lundi 15 juillet 2024

=C2=A0

Nous avons tent=C3=A9 de livrer votre colis =C3=A0 09h35 le lundi 15 ju=

illet 2024, mais personne n'=C3=A9tait disponible.

Votre colis a =C3=A9t=C3=A9 retourn=C3=A9 =C3=A0 notre d=C3=A9p=C3=B4t =

et vous devez reprogrammer la livraison de votre colis.

Veuillez reprogrammer votre colis en appuyant sur "Reprogrammer mainten=

ant" et l'un de nos conducteurs tentera de livrer votre colis.

Reprogrammer maintenant

Merci,

L'=C3=A9quipe FedEx Mail

=C2=A0



------=_=-_OpenGroupware_org_NGMime-19445-1721063439.632443-62------

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

Content-Length: 7026



<=

strong>Fed
"#ff5300">Ex


flex-col relative items-end">

v class=3D"gizmo-bot-avatar flex h-6 w-6 items-center justify-center ov=

erflow-hidden rounded-full juice:h-8 juice:w-8">

p-1 rounded-sm flex items-center justify-center bg-token-main-surface-p=

rimary text-token-text-primary h-8 w-8">
/2000/svg" class=3D"icon-md" role=3D"img" fill=3D"none" viewbox=3D"0 0 =

41 41" width=3D"41" height=3D"41">=


.1363 14.0974 37.9886 12.6859 C 37.8409 11.2744 37.3934 9.91076 36.676 =

8.68622 C 35.6126 6.83404 33.9882 5.3676 32.0373 4.4985 C 30.0864 3.629=

41 27.9098 3.40259 25.8215 3.85078 C 24.8796 2.7893 23.7219 1.94125 22.=

4257 1.36341 C 21.1295 0.785575 19.7249 0.491269 18.3058 0.500197 C 16.=

1708 0.495044 14.0893 1.16803 12.3614 2.42214 C 10.6335 3.67624 9.34853=

5.44666 8.6917 7.47815 C 7.30085 7.76286 5.98686 8.3414 4.8377 9.17505=

C 3.68854 10.0087 2.73073 11.0782 2.02839 12.312 C 0.956464 14.1591 0.=

498905 16.2988 0.721698 18.4228 C 0.944492 20.5467 1.83612 22.5449 3.26=

8 24.1293 C 2.81966 25.4759 2.66413 26.9026 2.81182 28.3141 C 2.95951 2=

9.7256 3.40701 31.0892 4.12437 32.3138 C 5.18791 34.1659 6.8123 35.6322=

8.76321 36.5013 C 10.7141 37.3704 12.8907 37.5973 14.9789 37.1492 C 15=

.9208 38.2107 17.0786 39.0587 18.3747 39.6366 C 19.6709 40.2144 21.0755=

40.5087 22.4946 40.4998 C 24.6307 40.5054 26.7133 39.8321 28.4418 38.5=

772 C 30.1704 37.3223 31.4556 35.5506 32.1119 33.5179 C 33.5027 33.2332=

34.8167 32.6547 35.9659 31.821 C 37.115 30.9874 38.0728 29.9178 38.775=

2 28.684 C 39.8458 26.8371 40.3023 24.6979 40.0789 22.5748 C 39.8556 20=

.4517 38.9639 18.4544 37.5324 16.8707 Z M 22.4978 37.8849 C 20.7443 37.=

8874 19.0459 37.2733 17.6994 36.1501 C 17.7601 36.117 17.8666 36.0586 1=

7.936 36.0161 L 25.9004 31.4156 C 26.1003 31.3019 26.2663 31.137 26.381=

3 30.9378 C 26.4964 30.7386 26.5563 30.5124 26.5549 30.2825 V 19.0542 L=

29.9213 20.998 C 29.9389 21.0068 29.9541 21.0198 29.9656 21.0359 C 29.=

977 21.052 29.9842 21.0707 29.9867 21.0902 V 30.3889 C 29.9842 32.375 2=

9.1946 34.2791 27.7909 35.6841 C 26.3872 37.0892 24.4838 37.8806 22.497=

8 37.8849 Z M 6.39227 31.0064 C 5.51397 29.4888 5.19742 27.7107 5.49804=

25.9832 C 5.55718 26.0187 5.66048 26.0818 5.73461 26.1244 L 13.699 30.=

7248 C 13.8975 30.8408 14.1233 30.902 14.3532 30.902 C 14.583 30.902 14=

.8088 30.8408 15.0073 30.7248 L 24.731 25.1103 V 28.9979 C 24.7321 29.0=

177 24.7283 29.0376 24.7199 29.0556 C 24.7115 29.0736 24.6988 29.0893 2=

4.6829 29.1012 L 16.6317 33.7497 C 14.9096 34.7416 12.8643 35.0097 10.9=

447 34.4954 C 9.02506 33.9811 7.38785 32.7263 6.39227 31.0064 Z M 4.297=

07 13.6194 C 5.17156 12.0998 6.55279 10.9364 8.19885 10.3327 C 8.19885 =

10.4013 8.19491 10.5228 8.19491 10.6071 V 19.808 C 8.19351 20.0378 8.25=

334 20.2638 8.36823 20.4629 C 8.48312 20.6619 8.64893 20.8267 8.84863 2=

0.9404 L 18.5723 26.5542 L 15.206 28.4979 C 15.1894 28.5089 15.1703 28.=

5155 15.1505 28.5173 C 15.1307 28.5191 15.1107 28.516 15.0924 28.5082 L=

7.04046 23.8557 C 5.32135 22.8601 4.06716 21.2235 3.55289 19.3046 C 3.=

03862 17.3858 3.30624 15.3413 4.29707 13.6194 Z M 31.955 20.0556 L 22.2=

312 14.4411 L 25.5976 12.4981 C 25.6142 12.4872 25.6333 12.4805 25.6531=

12.4787 C 25.6729 12.4769 25.6928 12.4801 25.7111 12.4879 L 33.7631 17=

.1364 C 34.9967 17.849 36.0017 18.8982 36.6606 20.1613 C 37.3194 21.424=

4 37.6047 22.849 37.4832 24.2684 C 37.3617 25.6878 36.8382 27.0432 35.9=

743 28.1759 C 35.1103 29.3086 33.9415 30.1717 32.6047 30.6641 C 32.6047=

30.5947 32.6047 30.4733 32.6047 30.3889 V 21.188 C 32.6066 20.9586 32.=

5474 20.7328 32.4332 20.5338 C 32.319 20.3348 32.154 20.1698 31.955 20.=

0556 Z M 35.3055 15.0128 C 35.2464 14.9765 35.1431 14.9142 35.069 14.87=

17 L 27.1045 10.2712 C 26.906 10.1554 26.6803 10.0943 26.4504 10.0943 C=

26.2206 10.0943 25.9948 10.1554 25.7963 10.2712 L 16.0726 15.8858 V 11=

.9982 C 16.0715 11.9783 16.0753 11.9585 16.0837 11.9405 C 16.0921 11.92=

25 16.1048 11.9068 16.1207 11.8949 L 24.1719 7.25025 C 25.4053 6.53903 =

26.8158 6.19376 28.2383 6.25482 C 29.6608 6.31589 31.0364 6.78077 32.20=

44 7.59508 C 33.3723 8.40939 34.2842 9.53945 34.8334 10.8531 C 35.3826 =

12.1667 35.5464 13.6095 35.3055 15.0128 Z M 14.2424 21.9419 L 10.8752 1=

9.9981 C 10.8576 19.9893 10.8423 19.9763 10.8309 19.9602 C 10.8195 19.9=

441 10.8122 19.9254 10.8098 19.9058 V 10.6071 C 10.8107 9.18295 11.2173=

7.78848 11.9819 6.58696 C 12.7466 5.38544 13.8377 4.42659 15.1275 3.82=

264 C 16.4173 3.21869 17.8524 2.99464 19.2649 3.1767 C 20.6775 3.35876 =

22.0089 3.93941 23.1034 4.85067 C 23.0427 4.88379 22.937 4.94215 22.866=

8 4.98473 L 14.9024 9.58517 C 14.7025 9.69878 14.5366 9.86356 14.4215 1=

0.0626 C 14.3065 10.2616 14.2466 10.4877 14.2479 10.7175 L 14.2424 21.9=

419 Z M 16.071 17.9991 L 20.4018 15.4978 L 24.7325 17.9975 V 22.9985 L =

20.4018 25.4983 L 16.071 22.9985 V 17.9991 Z">
=


-full min-w-0 flex-col agent-turn">

3">

h-[20px] text-message flex flex-col items-start whitespace-pre-wrap bre=

ak-words [.text-message+&]:mt-5 juice:w-full juice:items-end overfl=

ow-x-auto gap-2" dir=3D"auto" data-message-id=3D"6838a8cb-dd1c-4834-99b=

2-4e66773920c0" data-message-author-role=3D"assistant">

ex w-full flex-col gap-1 juice:empty:hidden juice:first:pt-[3px]">

class=3D"markdown prose w-full break-words dark:prose-invert light">

=

Bonjour,

=

Tentative de livraison infructueuse
ong>

 

Type de colis : Grande lettre =

Date de livraison : Lundi 15 juillet 2024


> 

Nous avons tent=C3=A9 de livrer votre colis =C3=A0 09h35 =

le lundi 15 juillet 2024, mais personne n'=C3=A9tait disponible.

=

Votre colis a =C3=A9t=C3=A9 retourn=C3=A9 =C3=A0 notre d=C3=A9p=C3=B4t =

et vous devez reprogrammer la livraison de votre colis.

Veuillez =

reprogrammer votre colis en appuyant sur "Reprogrammer maintenant" et l=

'un de nos conducteurs tentera de livrer votre colis.


nt size=3D"6">
html">Reprogrammer maintenant<=

/a>

Merci,

L'=C3=A9quipe FedEx Mail=

 





------=_=-_OpenGroupware_org_NGMime-19445-1721063439.632443-62--------

Ukrainian dating spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 15 Jul 2024 10:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sTOUR-00000000Gj7-07uE

for dave@doctor.nl2k.ab.ca;

Mon, 15 Jul 2024 10:23:51 -0600

Resent-From: The Doctor

Resent-Date: Mon, 15 Jul 2024 10:23:50 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westeuropeazolkn19010010.outbound.protection.outlook.com ([52.103.33.10]:10130 helo=AM0PR83CU005.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sTNOS-000000000Xt-30Mp

for doctor@doctor.nl2k.ab.ca;

Mon, 15 Jul 2024 09:13:40 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=kRkrSD/EHxyi2K8uM0qpyubxaIgLIDRfEGQescfJayUDK0vfuLgLn4CpFdH/9y4P/5V7YC6j4z7TGi4AF48DsAUvpCpAB8HLlPVUute+MIjsEtrtuGsgJU9MKnFn5n/V1Y8JfIkUDgUsAr9o4kS7gkmKMDI81LZTN0SEUMlr0LBK1kkrDkLA4cT3F/s6HF36XKhpojTyRn0Ec3GPnu0sjOlnSInnyTCL4g3vl1rWBbPc/Mb0cHRyGd+YGN8hx1OKng3YDdXAbwpQAO2+Cko5U//PC3T87Bc2gDQqJX9VJu/PRnt6mxKI1QunJEN8ofPsq2Y4OasZDP6HTf0F3bb/HQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=b28Enfb22ab3LN9oydnIF8sXLvlN2eUPmz0uhDrm8Ko=;

b=U65Ca7f7wfuzMBseGYyz+RJAlu6sY8xv/gFnPw+GSWnsjU0McGnlEr1ufVyQ9BNHnBd4GAvOehtw7KD5lHC/c+1vdYTx4BrbuXVYeOBxnh/9KqqMtxeQNFs1tR6R/bnx8i5HonRPc1y78MaHrxNXNsOxiSSW92cQibTcxLSdWVwtMdL4wJE+VAQL1Ah92NoNn/OZ26Dd1u45sDXVLUky2jwnqr+/gjlqDV0OLj/OMQvAfZ9/O6G/LL+BShDFMC170tPSW6pjY4640qwNDqr5tUjb8+dAHBQ02yadWW39Fgya7UlJmuE5lwckhooWvOtWlR1NWQ/tcNh9SpzFDghD1w==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=b28Enfb22ab3LN9oydnIF8sXLvlN2eUPmz0uhDrm8Ko=;

b=DjpiU5HkPbh4p9T1Sz6TtKK9v74WkCS9yeackso/GyvnVEfGDO+NdB2Fds0rR+BE7OPhGRcUUJq/G9l+CmBMR/BTX4DGoT4IE8koVtxCoGrIFQSbpU4j4rucVNnOPFG0I7utaEHgTpjUljXjKzXC+JAiTStGCc1uFpBFva6OqCU5dwNCGMHvDOQgKzGduNXtKjqER7h7w/qO5aHekV1P8bg1OH3geBXeU5pTqBTsw4Vy6IU5CVP6wuSvdALNuUyyKQGVw5RD5wWS2bqDRUEjHT64jLfeE4vSshgt1S3Ghw8bIsowUYxCktFg2kqpfrGl84nsddBLgJ5NF56uwKib3Q==

Received: from GV1PR02MB10383.eurprd02.prod.outlook.com (2603:10a6:150:a5::20)

by DB4PR02MB8509.eurprd02.prod.outlook.com (2603:10a6:10:38f::17) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7719.37; Mon, 15 Jul

2024 15:11:24 +0000

Received: from GV1PR02MB10383.eurprd02.prod.outlook.com

([fe80::d62b:31a:2051:f606]) by GV1PR02MB10383.eurprd02.prod.outlook.com

([fe80::d62b:31a:2051:f606%5]) with mapi id 15.20.7762.027; Mon, 15 Jul 2024

15:11:24 +0000

From: "katricebrickner1991@hotmail.com"

Subject: Date single UA woman in your area today!

Reply-To: "katricebrickner1991@hotmail.com"

X-Mailer: RoundCube Webmail

Date: Mon, 15 Jul 2024 17:11:21 +0200

Message-ID:



Content-Type: multipart/alternative;

boundary="----=_NextPart_000_906B_D6071A97.A1D0239D"

To: Undisclosed recipients:;

X-TMN: [TjlDgDvBZ58BsGky7F79keaSXsY/p5KZ]

X-ClientProxiedBy: ZR0P278CA0060.CHEP278.PROD.OUTLOOK.COM

(2603:10a6:910:21::11) To GV1PR02MB10383.eurprd02.prod.outlook.com

(2603:10a6:150:a5::20)

X-Microsoft-Original-Message-ID: <1.55d8507e47e8f9442d61@DESKTOP-7K7S413>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: GV1PR02MB10383:EE_|DB4PR02MB8509:EE_

X-MS-Office365-Filtering-Correlation-Id: 240ce79b-f6f2-4db3-5d4e-08dca4e063b1

X-Microsoft-Antispam:

BCL:0;ARA:14566002|461199028|42300799015|9400799024|8060799006|12050799009|19110799003|4601999012|440099028|4302099013|56899033|3412199025|1602099012;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?WGE3eWhTN3UvZXl4TWJkbU9mQ2o0czhlREl1RFZHLzNzV0lvS0w3L0tmcFNS?=

=?utf-8?B?UUIyWC85aXliTm1mbnNPMldXRU04QVRDS1pHbUFwNVZZRkJFNnRaUXRsM2Z4?=

=?utf-8?B?bnBUUTBBTnBSa3VqM0lyQzBmcGZMRG9TT01BZkJVVEFRaTN2VGN5REVRZ0lW?=

=?utf-8?B?MlVmc3Bad0lRSGhUdis3VEk4dmhTMUQ4bnJaOVRBR2JjY1BMaTMzVGpQeVAy?=

=?utf-8?B?cCtNVTZ0Tmc1MWxwMFhwTm50K09wNjJkY1RNeTNyYmJ3WGJCZHNoUkRqV1ZK?=

=?utf-8?B?U0JxZG05VUYxYi9JVmFic2pXZEFLTktvSmtmemVsNVJXK2MrNmtlaDliK01J?=

=?utf-8?B?UHJOUmpkOUdqVHUxeWtSeDVYeVZMVThEWW1PdWZ2VmR6NStkUU5uZExTVGNw?=

=?utf-8?B?YWpZUEk1UnJSM3JrYUFtdFZpRm90YlpOS2dBQzRLY09BZnBCMTFhNEFHVnM0?=

=?utf-8?B?WUJYSVVSRzdGM2I3ajUxZC9vM1p6STJGa2NTaS9kYkFXd0lxSXl4RUQ4MjJp?=

=?utf-8?B?KzlaaGhmSEUrYWp3bXBsb2E3bmJoNW5za3dhQWo2aWozbUhMaHdnNFpUMWZH?=

=?utf-8?B?S1VBMnpYSmppdHNJZ2JkNkFJY3hFTEhKOHhCY1FSZFhKcGczUytLbG1RQnpJ?=

=?utf-8?B?RkhGOVQ2RjlZRVBLZEM3RmJ3RnZ5WSt5Q3Z5Q2tIbFBXVHJGTEQrUnpMK2JJ?=

=?utf-8?B?NkpDYnIyeWxyeWJEYmlIZzdxNWVlRm5ycW9WVFd4YkM2Q1puRnB1UXhrSE9m?=

=?utf-8?B?ZkFwUlZMd2h5Q1RLUE5kWXg0eTMybWo0cHI0WmZleklaUVZtQ3VOb0RqUDRr?=

=?utf-8?B?WDZhUklRTEtDSVYxcDVXRnI3MWJpdTRXY09iMDlDZVg5MFZUS3Q2cVNlK1JG?=

=?utf-8?B?TzRmcXQ3c2h5amsxSk00b0Y3WmxEdnBaSnR1QjlkdVV5NWFiMjY0SlQ2ODhz?=

=?utf-8?B?R1BiUmNxK2pDdFdkbkZKSzM1eVlNZzAzaVB5eGxyZjBlaTFSNEF3VlpMWUZM?=

=?utf-8?B?R0FxeHdTOUIxRWNzZXhadS9QNmtEaGpySU5iQU0zK0xpRzlaaE5kMFRJQU1K?=

=?utf-8?B?bzRzS2xPSVNmKytuY1pvZjVZTWhWb0FnNGZ3QWpFOWU1cWZDeUJjZnE5Q1hq?=

=?utf-8?B?V0NhdWF0NlRaS3R3bWtaRis4VmZMMkpmcXBpRm90SVpzVDdmNDZzSEhCS2NP?=

=?utf-8?B?TGFNK0h1bVJZT2M1eE9WeWZIR1FjaXRzanRralhuZ2tJaVZOTjhZSU1JVGts?=

=?utf-8?B?N3FuREcvOHJzcEtZaEtjcGhuUTQ2YnRGVXBxSjI3NDJLYXN0VTc5Y2o4QXc4?=

=?utf-8?B?aUc5QlUvMzVDdElRWS8rQW1sZ0szQTNDRGx0SDd2THNWeXNJMVVYVStrMHlq?=

=?utf-8?B?dGFrYkxBTGtLMzN3ak1ZRXNEekZXVzdaYWpUbEhoaWNFbHZmQTFSaTcwZ1Vk?=

=?utf-8?B?YU1BbGFRaWVldi9MdG56VUF1Mm50Nnl4aHh0bjY1cVVwWlVpV1cxZmxpL1RO?=

=?utf-8?B?RVpwWmNUWFNxUURYZnBlTkZ0d2hRNkVQRVZVTnh5aDRrakZmaVM2c2o1bTc2?=

=?utf-8?B?RFZlaXM2ak0rdityT0VoS1hjTUZVVVViZi9NdDVuanJrZ0huZ3g3VGk1cisx?=

=?utf-8?B?Q2R0ZWlPcUhhSVpBTHNRTUdVZ1JkSE9XM2xuYXdwdXE3eEY2aEorR1h5WFJ1?=

=?utf-8?B?VjNYVU0yMVVZbW5DZTVzYm5xRWNNbnQ1VDFsdHY2TjlENW55ajdSc0t2M0NO?=

=?utf-8?Q?5JN7aLo/AtQ8o9re5Q=3D?=

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?RlZibURMS1p3UGNRRDlSN3drVjByNkRRTjVpSzNBZk1wQithTjgxVkxadkxH?=

=?utf-8?B?UVY4SHpJdUM3TDdDaVZDYkF5LzJDL2hyWFVKT3JaOVZ0aTRwMGt5ckNFNEdt?=

=?utf-8?B?aG9uYUUzanZRZmgzS3hubjM1K1A5R2h0d2hkaVoxOGRYcHZsbVQxN2xpT3Y2?=

=?utf-8?B?UkF1Zjk4Y1FvMzhGZUIrVGttL0IxOXRjRXZmcjRyRklsdlZYTDM4SURocmlD?=

=?utf-8?B?RHRxeWhQREVhOW1iSVM1V1J1T2dOTXYrSEprTnMvaWpJeGZOYVU3TjRqdW9n?=

=?utf-8?B?dnZIY1NOTlNFY21ReWNzdTVpZnhSNHVoTlFWYTdvNWltODRwRm5DcXBSRko5?=

=?utf-8?B?RWNvcjA2bWExWWcveXdFSTgyZG42SnlXQW5kZllmK0IvcitkWXhIcTRlOE84?=

=?utf-8?B?SXdYaG4rNHF5cHZWazBWNHpsNWdpYndEcWFCSHJDNnJXZzkyd2dxZnE4aHVG?=

=?utf-8?B?MmhJamIvT0RPQUdjdGNGYW5IRzdvOFRGTWxQM2ZOdHBmOHhLdDMybU91a1hF?=

=?utf-8?B?OVV5R0pWNU1XTUpmSXZiemZCVjBHM052R1JEeHhCNytQakg0dWNibTZpNUty?=

=?utf-8?B?SmRnbS9MdkN1ZWhlSEFnRUJOYkpMWkh5RDBYbVdUQmpiRTlyblhndWlVMXR6?=

=?utf-8?B?TzRiQzBtZTJ0ZnJvUTU0WGVOTUZqT1AxOGpsOEhGT0Y5c0dtWW1HZ2hNNEpp?=

=?utf-8?B?UVpmdkQvcmo4eVcyVHRnbE0ybWdqenEvVXpqaktvcjJFcmNKVXNnYkZFUFNT?=

=?utf-8?B?UVExVy93OWd3SHhNM2RSVWh5OU9PUmJZbnl5MHUxQ1A1dWxGbzA4eDZraUp2?=

=?utf-8?B?T1V6VCtmcWJiUFZCdStnZExRMjdabjM1VXpXbFB1S2cyVXE2dlh4d3ZnWmp2?=

=?utf-8?B?bzdXUHRCN2xtYndHQ05LekZsQlNHLzBDSzVzQXlUQ2o5NWRldEVkd2JCdEVh?=

=?utf-8?B?YVh5bDhDdVp6UWJaWk0rWVBwWE1Ia05OYXJtdkVBOGpNY2V1cXFRYXI3eXhF?=

=?utf-8?B?OEM3TWtYQkxTc1hMWkUwOERXZ2NyUFZndGFLM0h6a05JR24wQ0VkWnQxOWM0?=

=?utf-8?B?UGV4Nm0va0F0eUtGQ0VwcHl0WVpoSm5GR1poSmY5d3d0YjBOWWRVQUZycmxE?=

=?utf-8?B?YVZSbi9TYkltd0RURGQwcWRScUpaNkcrdWowNVJCUG5iQVlUbENRVnF5d3g1?=

=?utf-8?B?c21sVjRLYXpOeEZJK3BENDgycEVXY0lpbzU5aUNrRy9KZUl5YmIrT1RUTTQ2?=

=?utf-8?B?eThQVENqYVhJSTVpU09SMTJGVE5oRVlTR0NudE0zQnVicnplNlUxZnNrbUlw?=

=?utf-8?B?VE5WQnNZQ1FpWmQxS0FPaWFKYUJzZzJGaGRZdFZmODlmU1VGeGNETXU4RTVt?=

=?utf-8?B?WXdYL2crWUJ0ZTVHWGhKNVB6RDh3amkrVXdqYzhtZFJ6ZmNoblBCL2Q0MEN0?=

=?utf-8?B?UDI1dithYThVTzE0cERRNXdiRkhubUNkMWtydWM3czh5Ym10VkhsaWphemRF?=

=?utf-8?B?MFR4SVgwNjgxNkxubkxzRnZuSEJMeTloZDJMSDZwYTgvdzhZTFJiYi9LeERo?=

=?utf-8?B?MEY1U0lHSGdXWGc0RjZ2Wnc1V25PVUd3RjdOaERIdnRXcndxdmlGSGdKTWdq?=

=?utf-8?B?K3A3WmQxb3Z3WlFjZ3E4RXc4RzU5SDZGejdRR3pIZS94VEk0dENZdkVxcU04?=

=?utf-8?B?T3l0VDlleWI0Z1hqNC81STBSRVhTTDVVVmdsUURodklSWnNwNFRSbnlRPT0=?=

X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-ab7de.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: 240ce79b-f6f2-4db3-5d4e-08dca4e063b1

X-MS-Exchange-CrossTenant-AuthSource: GV1PR02MB10383.eurprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Jul 2024 15:11:23.6605

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB4PR02MB8509

X-Spam_score: 6.6

X-Spam_score_int: 66

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: SingleUkrainianBeauty Are you living in the United Kingdom,

United States, Canada, Australia, or New Zealand and eager to meet a Ukrainian

woman near you? We are excited to announce our new website designed to help

you con [...]



Content analysis details: (6.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.33.10 listed in dnsbl.ahbl.org]

[52.103.33.10 listed in dnsbl.ahbl.org]

[52.103.33.10 listed in dnsbl.ahbl.org]

[52.103.33.10 listed in dnsbl.ahbl.org]

[2603:10a6:150:a5:0:0:0:20 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:a5:0:0:0:20 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:a5:0:0:0:20 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:a5:0:0:0:20 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.33.10 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.33.10 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.33.10 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.33.10 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10a6:150:a5:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:a5:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:a5:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:a5:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:a5:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:a5:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:a5:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:a5:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[52.103.33.10 listed in will-spam-for-food.eu.org]

[52.103.33.10 listed in will-spam-for-food.eu.org]

[52.103.33.10 listed in will-spam-for-food.eu.org]

[52.103.33.10 listed in will-spam-for-food.eu.org]

[52.103.33.10 listed in will-spam-for-food.eu.org]

[52.103.33.10 listed in will-spam-for-food.eu.org]

[52.103.33.10 listed in will-spam-for-food.eu.org]

[52.103.33.10 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.33.10 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.33.10 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[katricebrickner1991(at)hotmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[katricebrickner1991(at)hotmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[katricebrickner1991(at)hotmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} Date single UA woman in your area today!



------=_NextPart_000_906B_D6071A97.A1D0239D

Content-Type: text/plain;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



SingleUkrainianBeauty





Are you living in the United Kingdom, United States, Canada, Australia, or =

New Zealand and eager to meet a Ukrainian woman near you? We are excited to=

announce our new website designed to help you connect and date Ukrainian w=

omen who have relocated to these countries due to recent events.



Our platform boasts a thriving community with over 250,000 users, mainly w=

omen. We are actively seeking men to join and become part of this vibrant c=

ommunity.





Join for Free





SingleUkrainianBeauty





Our site is equipped with a variety of features such as chat, video calls, =

phone calls, stickers, and many more options for you to explore. Sign up fo=

r free now with this exclusive limited-time offer. All users are verified a=

nd authentic. Join us today!





Remove me here



































=



------=_NextPart_000_906B_D6071A97.A1D0239D

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




style=3D"font-weight:normal;" id=3D"docs-internal-guid-e09d433a-7fff-c070-=

5047-0b40ff6e1eb0">=0A=


argin-bottom:0pt;">=0A=


=3D"font-size:15pt;font-family:Arial,sans-serif;color:#1155cc;background-co=

lor:transparent;font-weight:700;font-style:normal;font-variant:normal;text-=

decoration:underline;-webkit-text-decoration-skip:none;text-decoration-skip=

-ink:none;vertical-align:baseline;white-space:pre-wrap;">SingleUkrainianBea=

uty=0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Are you living in the United Kingdom, United States, Canada, Australia, or =

New Zealand and eager to meet a Ukrainian woman near you? We are excited to=

announce our new website designed to help you connect and date Ukrainian w=

omen who have relocated to these countries due to recent events.=0A=

=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Our platform boasts a thriving community with over 250,000 users, mainly wo=

men. We are actively seeking men to join and become part of this vibrant co=

mmunity.=0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Join for Free=0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


=3D"font-size:15pt;font-family:Arial,sans-serif;color:#1155cc;background-co=

lor:transparent;font-weight:700;font-style:normal;font-variant:normal;text-=

decoration:underline;-webkit-text-decoration-skip:none;text-decoration-skip=

-ink:none;vertical-align:baseline;white-space:pre-wrap;">SingleUkrainianBea=

uty=0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:400;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Our site is equipped with a variety of features such as chat, video calls, =

phone calls, stickers, and many more options for you to explore. Sign up fo=

r free now with this exclusive limited-time offer. All users are verified a=

nd authentic. Join us today!=0A=

=0A=


=0A=


t;margin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:700;font-style:italic;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Remove me
e;">
c;background-color:transparent;font-weight:700;font-style:italic;font-varia=

nt:normal;text-decoration:underline;-webkit-text-decoration-skip:none;text-=

decoration-skip-ink:none;vertical-align:baseline;white-space:pre-wrap;"> he=

re =0A=

=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=



------=_NextPart_000_906B_D6071A97.A1D0239D--

Web / SEO/ App spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 15 Jul 2024 08:15:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sTMSx-000000005cw-1a9g

for dave@doctor.nl2k.ab.ca;

Mon, 15 Jul 2024 08:14:11 -0600

Resent-From: The Doctor

Resent-Date: Mon, 15 Jul 2024 08:14:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f46.google.com ([209.85.216.46]:56490)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sTLN9-00000000JCq-2buH

for sales@nk.ca;

Mon, 15 Jul 2024 07:04:15 -0600

Received: by mail-pj1-f46.google.com with SMTP id 98e67ed59e1d1-2c964f5a037so2714576a91.0

for ; Mon, 15 Jul 2024 06:02:13 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=revupgrowth-com.20230601.gappssmtp.com; s=20230601; t=1721048527; x=1721653327; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=jWI7KtosLoEwlWy+S1lohoN87VZkA8kLNTYfNlG1vMQ=;

b=TG5bZ6q4KKSjAmo6mvy91wZrMBlakjeRftbAlbEQMp9QufGZ5L+M9JfUipHmFg2mPn

hTqBhGeBqeYRc1YVVUwlO4/vDLvlm2Jd55gTenw90G6YVX+Q6ZSiB3PEduuJvaheC2O2

jQCN3Ezv97cZw2kd/Bxq9Bemr53qisnoFDt5SPfShftqOVyy81ncjSIl7A/o+N7YPKeM

02sL+Avj0RH6pw82i+QCuwvKkefBC+8C+N72hokr0GE7+08hTToGFHw4ubVXCPQAT4+c

oaYkPShQV7Oq8F4qnWJ3OgMt+qm7An/zks/8N939bD2SmozXjxh9vQ+zPhh5uhDLNzT4

sGFA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1721048527; x=1721653327;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=jWI7KtosLoEwlWy+S1lohoN87VZkA8kLNTYfNlG1vMQ=;

b=quPNwfJgvc4+HFWv2Ie2gm5A5jYSlV3KZAhO1kJP7o07nCvjwazfgWiDkAslbb8uAI

bOQj3zuI+eHQ8cNt4tQ/xMqtHmtiF4K/il6iYLS2ALkoKjhGEpZJ5DSw+l8mcPPD92vO

AhB/Zx8kbHHpuSdAKE0si99DLiQh4sZqGN7Pukp6FUSwoQeqeXzle8id4zXco5Ws820q

58vBWSDo+ZntErIYjIu00zJf5bfqeGWpqgZfLO3y3mXnL5neyY9NfrVCJz4Bk+DqNwDP

5jLqkXt/84SH1GRafd2A8BDPMzM8k8XfSMqCo/xgp28GmX2gbcdZAUUncgUvkjULWiBN

/9yg==

X-Gm-Message-State: AOJu0YwjHEPgy19Rs98YYyWlXKwE4nQA9iOFQINzO6AE0RmkaPMH4f6/

3sLd3UPzXMSVKykqCHIc+OcRNZC7a7VHcP78WDmQK61B17z5OKPD49ANe2oRe0VTQSFK7P5wEgl

c99U=

X-Google-Smtp-Source: AGHT+IEl0T2p5dYvCoxlIYJ4BVRts4KOgm/VkY5Mabs2B/uNXyJKg7+jGhGTT9yhGmydmbGB9/gbZQ==

X-Received: by 2002:a17:90b:148c:b0:2c9:7616:dec7 with SMTP id 98e67ed59e1d1-2ca35be1c77mr12940330a91.6.1721048526834;

Mon, 15 Jul 2024 06:02:06 -0700 (PDT)

Received: from DESKTOP3QQRH3B ([2409:40d0:103d:467d:8cc2:4b0f:435b:5981])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-2caedc92cc3sm4231694a91.43.2024.07.15.06.02.04

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Mon, 15 Jul 2024 06:02:05 -0700 (PDT)

From: "Naveen"

To:

Subject: Re: Cost?

Date: Mon, 15 Jul 2024 18:25:26 +0530

Message-ID: <140501dad6b7$31bb5210$9531f630$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_1406_01DAD6E5.4B738E10"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdrWtjizB1SfswCmQrCdyF8bKKP7ig==

Content-Language: en-in

X-Spam_score: 5.5

X-Spam_score_int: 55

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, sales@nk.ca I was checking your website. It looks great,

but it's not ranking on Google's 1st page. With your permission I would like

to send you a Price List of your website?



Content analysis details: (5.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.46 listed in dnsbl.ahbl.org]

[209.85.216.46 listed in dnsbl.ahbl.org]

[209.85.216.46 listed in dnsbl.ahbl.org]

[209.85.216.46 listed in dnsbl.ahbl.org]

[2409:40d0:103d:467d:8cc2:4b0f:435b:5981 listed]

[in dnsbl.ahbl.org]

[2409:40d0:103d:467d:8cc2:4b0f:435b:5981 listed]

[in dnsbl.ahbl.org]

[2409:40d0:103d:467d:8cc2:4b0f:435b:5981 listed]

[in dnsbl.ahbl.org]

[2409:40d0:103d:467d:8cc2:4b0f:435b:5981 listed]

[in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.46 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.46 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.46 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.46 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.216.46 listed in will-spam-for-food.eu.org]

[209.85.216.46 listed in will-spam-for-food.eu.org]

[209.85.216.46 listed in will-spam-for-food.eu.org]

[209.85.216.46 listed in will-spam-for-food.eu.org]

[209.85.216.46 listed in will-spam-for-food.eu.org]

[209.85.216.46 listed in will-spam-for-food.eu.org]

[209.85.216.46 listed in will-spam-for-food.eu.org]

[209.85.216.46 listed in will-spam-for-food.eu.org]

[2409:40d0:103d:467d:8cc2:4b0f:435b:5981 listed]

[in will-spam-for-food.eu.org]

[2409:40d0:103d:467d:8cc2:4b0f:435b:5981 listed]

[in will-spam-for-food.eu.org]

[2409:40d0:103d:467d:8cc2:4b0f:435b:5981 listed]

[in will-spam-for-food.eu.org]

[2409:40d0:103d:467d:8cc2:4b0f:435b:5981 listed]

[in will-spam-for-food.eu.org]

[2409:40d0:103d:467d:8cc2:4b0f:435b:5981 listed]

[in will-spam-for-food.eu.org]

[2409:40d0:103d:467d:8cc2:4b0f:435b:5981 listed]

[in will-spam-for-food.eu.org]

[2409:40d0:103d:467d:8cc2:4b0f:435b:5981 listed]

[in will-spam-for-food.eu.org]

[2409:40d0:103d:467d:8cc2:4b0f:435b:5981 listed]

[in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.46 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.46 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} Re: Cost?



This is a multipart message in MIME format.



------=_NextPart_000_1406_01DAD6E5.4B738E10

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hello, sales@nk.ca







I was checking your website. It looks great, but it's not ranking on

Google's 1st page.







With your permission I would like to send you a Price List of your website?







We can place your website on Google's 1st page (Yahoo, etc.)







May I send you a quote.?







Thank You,



Naveen





------=_NextPart_000_1406_01DAD6E5.4B738E10

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">






charset=3Dus-ascii">




















style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:

normal'>Hello,
style=3D'color:#0070C0'>sales@nk.ca






style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:

normal'> 






style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:

normal'>I was checking your website. It looks great, but it’s not =

ranking

on Google's 1st page.






style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:

normal'> 






style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:

normal'>With your permission I would like to send you a Price List of =

your

website?






style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:

normal'> 






style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:

normal'>We can place your website on Google's 1st page (Yahoo, etc.)






style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:

normal'> 






style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:

normal'>May I =

send you

a quote.?






style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:

normal'> 






style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:

normal'>Thank You,






style=3D'margin-bottom:0cm;margin-bottom:.0001pt;line-height:

normal'>Naveen

















------=_NextPart_000_1406_01DAD6E5.4B738E10--

Philantropic spam from sendgrid

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 15 Jul 2024 06:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sTL2o-00000000HyZ-21ud

for dave@doctor.nl2k.ab.ca;

Mon, 15 Jul 2024 06:43:06 -0600

Resent-From: The Doctor

Resent-Date: Mon, 15 Jul 2024 06:43:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wfbtzhsb.outbound-mail.sendgrid.net ([159.183.224.107]:45368)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sTKIJ-00000000G4g-2jIq

for root@nk.ca;

Mon, 15 Jul 2024 05:55:08 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=drew-pearson.com;

h=content-type:mime-version:content-transfer-encoding:

content-description:subject:from:reply-to:to:cc:content-type:from:subject:to;

s=s1; bh=LdHLPM2sroAIbTJ3tG1WsDDGHnIQjD7A6zu0qm1QJAw=;

b=8puWDNGTTM1hywTipvuIZDoUpV9ys0zzFZiidrA+dMfR0JjS9sIrFwVA/FjrZ4ws70fE

DIUldsqVlNeIq5ljU63oMxO9o/BrBbdZZbIzGkbGIQ/BdEhwApmP9D2PZS+IJKr5eubWoG

NabIg+Z7Avk9eJF98RUnBdBVa1s6RmIkDGwn+EZVjyQyy9z2CAA+T/CRX41tF5Wxld8QiZ

0AcvMlSt2GSWWthCaR10NYPs15/UIrQldguZgN71Ozv+IFzihPKXJWJWwGJdd01aJuXjp5

teHwMGlDNy7QvHvIHHxiDHQBQ2ZPWEzBHtfPmf0N3EgE34ICPiKEhu6idLfrw0xQ==

Received: by recvd-f549d465d-wplm9 with SMTP id recvd-f549d465d-wplm9-1-66950D9B-2B

2024-07-15 11:52:59.536286291 +0000 UTC m=+1536102.593572587

Received: from [10.102.37.150] (unknown)

by geopod-ismtpd-15 (SG) with ESMTP

id YcxxRNzDRESCr15YWL2a8A

Mon, 15 Jul 2024 11:52:59.409 +0000 (UTC)

Content-Type: text/plain; charset=utf-8

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: From a dreamer!!

From: Jeff Rothschild

Date: Mon, 15 Jul 2024 11:53:01 +0000 (UTC)

Message-ID:

Reply-To: orangebluemoon@naver.com

X-SG-EID:

=?us-ascii?Q?u001=2E6XgS+aMGExnB1bqZZrdrz9csChZfh9avhNnUZtsaNyvJNh7IiPg0spDJI?=

=?us-ascii?Q?o7l0sTko1RUJBNy1Dm8ZJ4WfREjBB1e6MrvKmgQ?=

=?us-ascii?Q?Ues6vLs4elVGim1wHqW=2F72Bfaa2m5CifNEHRaAF?=

=?us-ascii?Q?YJSwOFw=2F6PJXYgCHEiJmAbWEG=2Fl+Vwc5kSAnnDN?=

=?us-ascii?Q?0Q6uJlQPWnZ3MDPJ7o4dbmIjJY2P6yxkmH8Wp+h?=

=?us-ascii?Q?g2hP7p4JR7VEdY1dQK3ikaFrNHESS4SxsCDL+=2FX?= =?us-ascii?Q?AXQz?=

To: YOU

X-Entity-ID: u001.oPe5PDTkHFo7FEUB1JI2PQ==

X-Spam_score: 29.7

X-Spam_score_int: 297

X-Spam_bar: +++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Friend, I hope this letter finds you well, surrounded

by the warmth of loved ones and the promise of a new day. My name is Jeff

Rothschild, and I am writing to you today with a heart full of excitement

and a [...]



Content analysis details: (29.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.183.224.107 listed in dnsbl.ahbl.org]

[159.183.224.107 listed in dnsbl.ahbl.org]

[159.183.224.107 listed in dnsbl.ahbl.org]

[159.183.224.107 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.183.224.107 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.183.224.107 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.183.224.107 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.183.224.107 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.224.107 listed in will-spam-for-food.eu.org]

[159.183.224.107 listed in will-spam-for-food.eu.org]

[159.183.224.107 listed in will-spam-for-food.eu.org]

[159.183.224.107 listed in will-spam-for-food.eu.org]

[159.183.224.107 listed in will-spam-for-food.eu.org]

[159.183.224.107 listed in will-spam-for-food.eu.org]

[159.183.224.107 listed in will-spam-for-food.eu.org]

[159.183.224.107 listed in will-spam-for-food.eu.org]

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[159.183.224.107 listed in psbl.surriel.com]

1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)

[159.183.224.107 listed in ix.dnsbl.manitu.net]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[159.183.224.107 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} From a dreamer!!



Dear Friend,



I hope this letter finds you well, surrounded by the warmth of loved ones a=

nd the promise of a new day. My name is Jeff Rothschild, and I am writing t=

o you today with a heart full of excitement and a vision for a different ki=

nd of philanthropy.



Below is a profile of me:

www.forbes.com/profile/jeff-rothschild/?sh=3D457d14d2c87a



For many years, I have dedicated myself to supporting various charities and=

causes that are dear to my heart. While I am proud of the impact we have m=

ade together, I have come to realize that there is more to giving than simp=

ly writing a check.



Recently, I had a dream=E2=80=94a vivid, inspiring dream that left me with =

a sense of clarity and purpose. In that dream, I saw the faces of ordinary =

people like you and me, each with their own hopes, dreams, and struggles. A=

nd in that moment, I knew that I needed to be more personal with my giving,=

to touch lives in a way that has never been done before.



That is why I am reaching out to you today, not as a distant benefactor, bu=

t as a fellow traveler on this journey we call life. I want to invite you t=

o be a part of something truly special, something that goes beyond traditio=

nal philanthropy and connects us on a deeper, more personal level.



Consider this letter your golden ticket to a brighter future. You've been s=

elected as the recipient of a generous donation from me., This is my apprec=

iation for your presence in this world. But this gift is more than just a m=

aterial offering; it is an invitation to join me in a shared mission of com=

passion, empathy, and human connection.



Together, we can make a difference in the lives of ordinary people in ways =

that are both meaningful and profound. Whether it's lending a listening ear=

to a friend in need, offering a helping hand to a neighbor facing adversit=

y, or simply sharing a smile with a stranger, every act of kindness has the=

power to create ripple effects of love and positivity.



So please, accept this gift with an open heart and know that it comes with =

no expectations or obligations. Consider it a gesture of friendship, a symb=

ol of our shared humanity, and a catalyst for the extraordinary things we c=

an achieve when we come together with purpose and passion.



Kindly provide your full name and address, and I will guide you on how to r=

eceive this donation..



Thank you for being a part of this journey with me. May our shared vision o=

f a kinder, more compassionate world inspire us to take bold action and spr=

ead love wherever we go.



With warmest regards,



Jeff Rothschild

Lottery Spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 15 Jul 2024 06:31:00 -0600

Received: from mail-pj1-f54.google.com ([209.85.216.54]:50523)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sTKqN-00000000HP2-2How

for dave@doctor.nl2k.ab.ca;

Mon, 15 Jul 2024 06:30:19 -0600

Received: by mail-pj1-f54.google.com with SMTP id 98e67ed59e1d1-2c98b080012so2674421a91.1

for ; Mon, 15 Jul 2024 05:28:21 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1721046495; x=1721651295; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=sXQ4UWUwMpBERZeqCvzlrfshFF4hvz3ZNQtr7559xF8=;

b=Pm5zslJsAwQGd8uM4CoJRp64m65mZKFA50c+MnJsVCHE7bSIKvzzEXMXBzdXiX0Iyi

lTDwXxao04GUyQY26/yFJHFN52yWiSiJGvH85Cu8qXCKZgmcE19HXWU3e+Nk71Lruney

VpcNWwp99qWykgGTdvBqtYsWjPcJSGDj354p2XCifMiaP55evO3NL27HC1ZqaO8pKmJW

pzp7Sdoyw0wk/lheto7ED39NFzxPmcK+Bsj5uDDzly6CtJ1oPbiEjTHVYtM+h14is35j

IW+9mERCLLf7yvaFZud55k9VXIrQGJxdmjJDF5esuBpKsx0DC7izTKdIJ03QJHSd2ZSd

5apg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1721046495; x=1721651295;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=sXQ4UWUwMpBERZeqCvzlrfshFF4hvz3ZNQtr7559xF8=;

b=w97sOFiU+KHiE4L0sqqoVRP2h+CRZA2J6yCQfZTOMJPs/+okkFnKNVUcTD60oc9FU1

Sw+6W937QyF+EGEI0VPT9gef69485KRynxqYkbXZOpBuv0l1btoabSQ1JZTN09iPPaKq

tGiE1kWLtlt5vMAGCGa16/LH7NclBa2Wdgfe6opRLOnlfVlRERZ5cPGkvvb2vi8s7T6Z

oekgLShNJY5XjGrOLVQRTPikblCEc7eEAQ7pZAL5tGrMK/QdVKWSwYvhMLNI1XyCYuYI

vMc3e5Cm0OIYtkIvf0qA/nE8lLtNwUz4U2k79hTHqB01pN//uelxCQAwjECF16EgJG3Y

i1TA==

X-Forwarded-Encrypted: i=1; AJvYcCUkArx7iDLqDHTJyQ5//aCLFHVNE4sFlvbbBDRom815L7Yj2OJPjieG8GLeUfkOWQo+QpJZhUPb5S28K9SARQKIEW0VoRxH

X-Gm-Message-State: AOJu0YwPgsGqlBo2ELVOirV5philcsNT9dKa92b+ua/c4Vd4S3BJN6vD

/w199l8yiCEC2+KV0JSaLdu7c7RTrZV/LrhUZjHVBGJMqck9k+Na5a2cjdivhDW6VRT3bC9aPnb

xrxSKYrtrXfBagnnMB6TvIJwYSxo=

X-Google-Smtp-Source: AGHT+IELkULI2VsiClsVSpxd3lC81bVDo+E5PfDILInfZcUCfu2VGvr22PWr8wqUMpKKH0bvhcpbTo8J/KBGOcA6K8s=

X-Received: by 2002:a17:90a:a78a:b0:2c9:8f14:c02e with SMTP id

98e67ed59e1d1-2ca35be93cbmr12867452a91.1.1721046494959; Mon, 15 Jul 2024

05:28:14 -0700 (PDT)

MIME-Version: 1.0

Reply-To: stevcampbell01@yandex.com

From: James Adams

Date: Mon, 15 Jul 2024 14:28:01 +0200

Message-ID:

Subject: Re

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000f95ee5061d485cbc"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 23.9

X-Spam_score_int: 239

X-Spam_bar: +++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Attention: Beneficiary. Welcome to the 2024 World Bank/Paris

Club & British CFP Global Financial SET-UP. The Camelot National Lottery

Group has noted the wide spread of fraud activities that are being committed

by charlatans [...]



Content analysis details: (23.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.54 listed in dnsbl.ahbl.org]

[209.85.216.54 listed in dnsbl.ahbl.org]

[209.85.216.54 listed in dnsbl.ahbl.org]

[209.85.216.54 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.54 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.54 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.54 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.54 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.216.54 listed in will-spam-for-food.eu.org]

[209.85.216.54 listed in will-spam-for-food.eu.org]

[209.85.216.54 listed in will-spam-for-food.eu.org]

[209.85.216.54 listed in will-spam-for-food.eu.org]

[209.85.216.54 listed in will-spam-for-food.eu.org]

[209.85.216.54 listed in will-spam-for-food.eu.org]

[209.85.216.54 listed in will-spam-for-food.eu.org]

[209.85.216.54 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.54 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.54 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ayandamabatha23(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[ayandamabatha23(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[stevcampbell01(at)yandex.com]

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

1.5 HK_SCAM_N8 BODY: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HK_SCAM No description available.

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.8 HK_LOTTO No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

0.0 LOTTO_DEPT Claims Department

0.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Re



--000000000000f95ee5061d485cbc

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Attention: Beneficiary.



Welcome to the 2024 World Bank/Paris Club & British CFP Global Financial

SET-UP. The Camelot National Lottery Group has noted the wide spread of

fraud activities that are being committed by charlatans & impostures within

the United Kingdom, Africa & the World in general. Because of this reason,

the World Bank/Paris Club & British CFP in collaboration with the Camelot

National Lottery has set up a welfare program to compensate all those that

have fallen victims and lost their money in transactions of this nature

within the UK, Africa & World wide. You have been approved to receive a

compensation fund of =C2=A3 500,000.00 British Pound as one of the scam vic=

tims

who qualified for 2024 annual program, your reference number are:

XVX189298, send your details as stated below to following email address:

stevcampbell01@yandex.com



An arrangement has been made to pay your funds through (ATM Credit Card or

bank transfer) to enable you receive your compensation fund without any

interference.



1) Full Name:

2) Physical Address:

3) Mobile Number:

4) Your reference number:

5) Occupation:

6) Age:



Best Regards

Mr. James Adams

Gambling Commission Chief Executive



--000000000000f95ee5061d485cbc

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



=C2=A0


































;serif"">Attention: Beneficiary.





Welcome to the 2024 World Bank/Paris Club & British CFP Global Financia=

l

SET-UP. The Camelot National Lottery Group has noted the wide spread of fra=

ud

activities that are being committed by charlatans & impostures within t=

he

United Kingdom, Africa & the World in general. Because of this reason, =

the

World Bank/Paris Club & British CFP in collaboration with the Camelot

National Lottery has set up a welfare program to compensate all those that =

have

fallen victims and lost their money in transactions of this nature within t=

he

UK, Africa & World wide. You have been approved to receive a compensati=

on

fund of =C2=A3 500,000.00 British Pound as one of the scam victims who qual=

ified for

2024 annual program, your reference number are: XVX189298, send your detail=

s as

stated below to following email address:
andex.com">stevcampbell01@yandex.com


=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0


An arrangement has been made to pay your funds through (ATM Credit Card or =

bank

transfer) to enable you receive your compensation fund without any

interference.





1) Full Name:


2) Physical Address:


3) Mobile Number:


4) =C2=A0Your reference number:


=C2=A05) Occupation: =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=

=A0

=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=

=A0

=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0


6) Age:





Best Regards =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0

=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=

=A0

=C2=A0 =C2=A0 =C2=A0 =C2=A0


Mr.=C2=A0 James Adams =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=

=A0

=C2=A0 =C2=A0 =C2=A0 =C2=A0


Gambling Commission Chief Executive











--000000000000f95ee5061d485cbc--

Philantropic spam from sendgrid

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 15 Jul 2024 06:43:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sTL2g-00000000HxT-1uv2

for dave@doctor.nl2k.ab.ca;

Mon, 15 Jul 2024 06:42:58 -0600

Resent-From: The Doctor

Resent-Date: Mon, 15 Jul 2024 06:42:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wfbtzhss.outbound-mail.sendgrid.net ([159.183.224.102]:32890)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sTKIB-00000000G3u-08Wc

for root@doctor.nl2k.ab.ca;

Mon, 15 Jul 2024 05:54:59 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=drew-pearson.com;

h=content-type:mime-version:content-transfer-encoding:

content-description:subject:from:reply-to:to:cc:content-type:from:subject:to;

s=s1; bh=LdHLPM2sroAIbTJ3tG1WsDDGHnIQjD7A6zu0qm1QJAw=;

b=8puWDNGTTM1hywTipvuIZDoUpV9ys0zzFZiidrA+dMfR0JjS9sIrFwVA/FjrZ4ws70fE

DIUldsqVlNeIq5ljU63oMxO9o/BrBbdZZbIzGkbGIQ/BdEhwApmP9D2PZS+IJKr5eubWoG

NabIg+Z7Avk9eJF98RUnBdBVa1s6RmIkDGwn+EZVjyQyy9z2CAA+T/CRX41tF5Wxld8QiZ

0AcvMlSt2GSWWthCaR10NYPs15/UIrQldguZgN71Ozv+IFzihPKXJWJWwGJdd01aJuXjp5

teHwMGlDNy7QvHvIHHxiDHQBQ2ZPWEzBHtfPmf0N3EgE34ICPiKEhu6idLfrw0xQ==

Received: by recvd-85955b6b-wcrzz with SMTP id recvd-85955b6b-wcrzz-1-66950D94-30

2024-07-15 11:52:52.580497653 +0000 UTC m=+1536314.648192969

Received: from [10.102.37.150] (unknown)

by geopod-ismtpd-15 (SG) with ESMTP

id YxTqQBR8S9yQ9Me5hrEM7g

Mon, 15 Jul 2024 11:52:52.472 +0000 (UTC)

Content-Type: text/plain; charset=utf-8

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: From a dreamer!!

From: Jeff Rothschild

Date: Mon, 15 Jul 2024 11:52:53 +0000 (UTC)

Message-ID:

Reply-To: orangebluemoon@naver.com

X-SG-EID:

=?us-ascii?Q?u001=2E6XgS+aMGExnB1bqZZrdrz9csChZfh9avhNnUZtsaNyvJNh7IiPg0spDJI?=

=?us-ascii?Q?o7l0sTko1RUJBNy1Dm8ZJ4WfREjBB1e6MrvKmgQ?=

=?us-ascii?Q?Ues6vLs4elX0UQbLLHrrOMY9IQm84UFlX1P26Hz?=

=?us-ascii?Q?nU5klwj8ncOarthBg4FGruf7WxD4KuCSABP2T5R?=

=?us-ascii?Q?8Og3XPoNkJ4xW9z3rDV8S62c=2F6WhuZCay=2Fng9wl?=

=?us-ascii?Q?KHauXXVKZkmeekycm5xAi3Kc+fxQMI=2FQX4je1tB?=

=?us-ascii?Q?cT6tCZNy=2Fvp2WExl=2Fz7=2FF1G55g=3D=3D?=

To: YOU

X-Entity-ID: u001.oPe5PDTkHFo7FEUB1JI2PQ==

X-Spam_score: 26.8

X-Spam_score_int: 268

X-Spam_bar: ++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Friend, I hope this letter finds you well, surrounded

by the warmth of loved ones and the promise of a new day. My name is Jeff

Rothschild, and I am writing to you today with a heart full of excitement

and a [...]



Content analysis details: (26.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.183.224.102 listed in dnsbl.ahbl.org]

[159.183.224.102 listed in dnsbl.ahbl.org]

[159.183.224.102 listed in dnsbl.ahbl.org]

[159.183.224.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.183.224.102 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.183.224.102 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.183.224.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.183.224.102 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[159.183.224.102 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)

[159.183.224.102 listed in ix.dnsbl.manitu.net]

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} From a dreamer!!



Dear Friend,



I hope this letter finds you well, surrounded by the warmth of loved ones a=

nd the promise of a new day. My name is Jeff Rothschild, and I am writing t=

o you today with a heart full of excitement and a vision for a different ki=

nd of philanthropy.



Below is a profile of me:

www.forbes.com/profile/jeff-rothschild/?sh=3D457d14d2c87a



For many years, I have dedicated myself to supporting various charities and=

causes that are dear to my heart. While I am proud of the impact we have m=

ade together, I have come to realize that there is more to giving than simp=

ly writing a check.



Recently, I had a dream=E2=80=94a vivid, inspiring dream that left me with =

a sense of clarity and purpose. In that dream, I saw the faces of ordinary =

people like you and me, each with their own hopes, dreams, and struggles. A=

nd in that moment, I knew that I needed to be more personal with my giving,=

to touch lives in a way that has never been done before.



That is why I am reaching out to you today, not as a distant benefactor, bu=

t as a fellow traveler on this journey we call life. I want to invite you t=

o be a part of something truly special, something that goes beyond traditio=

nal philanthropy and connects us on a deeper, more personal level.



Consider this letter your golden ticket to a brighter future. You've been s=

elected as the recipient of a generous donation from me., This is my apprec=

iation for your presence in this world. But this gift is more than just a m=

aterial offering; it is an invitation to join me in a shared mission of com=

passion, empathy, and human connection.



Together, we can make a difference in the lives of ordinary people in ways =

that are both meaningful and profound. Whether it's lending a listening ear=

to a friend in need, offering a helping hand to a neighbor facing adversit=

y, or simply sharing a smile with a stranger, every act of kindness has the=

power to create ripple effects of love and positivity.



So please, accept this gift with an open heart and know that it comes with =

no expectations or obligations. Consider it a gesture of friendship, a symb=

ol of our shared humanity, and a catalyst for the extraordinary things we c=

an achieve when we come together with purpose and passion.



Kindly provide your full name and address, and I will guide you on how to r=

eceive this donation..



Thank you for being a part of this journey with me. May our shared vision o=

f a kinder, more compassionate world inspire us to take bold action and spr=

ead love wherever we go.



With warmest regards,



Jeff Rothschild