we transfer payment phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 05 Aug 2024 10:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sb0eP-00000000FmZ-06so

for dave@doctor.nl2k.ab.ca;

Mon, 05 Aug 2024 10:33:37 -0600

Resent-From: The Doctor

Resent-Date: Mon, 5 Aug 2024 10:33:36 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from correo.santapola.es ([158.255.239.251]:38936)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1saztr-00000000DOD-2jlx

for support@netknow.ca;

Mon, 05 Aug 2024 09:45:37 -0600

Received: from localhost (localhost [127.0.0.1])

by correo.santapola.es (Postfix) with ESMTP id 2439A6D46C

for ; Mon, 5 Aug 2024 17:43:49 +0200 (CEST)

Received: from correo.santapola.es ([127.0.0.1])

by localhost (correo.santapola.es [127.0.0.1]) (amavis, port 10032)

with ESMTP id ms92EKeO8xlo for ;

Mon, 5 Aug 2024 17:43:46 +0200 (CEST)

Received: from localhost (localhost [127.0.0.1])

by correo.santapola.es (Postfix) with ESMTP id 46D9F6DBA7

for ; Mon, 5 Aug 2024 17:43:40 +0200 (CEST)

DKIM-Filter: OpenDKIM Filter v2.10.3 correo.santapola.es 46D9F6DBA7

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=santapola.es;

s=E309BD90-106C-11E7-BBB5-E105812D6CEF; t=1722872620;

bh=nrdE3+FneaLqNkDlScjee7hLi2UVI4zxV5QftouT6kY=;

h=From:To:MIME-Version:Date:Message-Id;

b=OGZXN+sT9zr/7/Gph3WimmXzLCJ8HUTiprPRuPdXgfUxqKQ5S3IQYMFVGPaOQ8laN

JMdt5blKatN7nanyK/uchTaD+SImqYUnjpqW96mqyX/WKvy1SBJMAJkEENlZaNylAv

8AAhe4AqMYh0cMBASZtKov4XJnn6E7n5rkMT6HZ3YeZITnKqvTklaj7BKlVHf6URNT

q+TKmUCCFCT8WC373kLXJHhM9k1rES0wjmHpNMJ6j/k5l/DxY9KpG/Y6rjhGX1kTDU

phJSLkTpCtJsUe+xzY7nyWCz9TagX5fquQAyWsggZD5DMCVzSHA98oquHdZOk/4KMW

mnfcBDcvOeECQ==

X-Virus-Scanned: amavis at santapola.es

Received: from correo.santapola.es ([127.0.0.1])

by localhost (correo.santapola.es [127.0.0.1]) (amavis, port 10026)

with ESMTP id KpXWvgnWPkVr for ;

Mon, 5 Aug 2024 17:43:40 +0200 (CEST)

Received: from WIN-BUNS25TD77J (unknown [163.5.112.63])

by correo.santapola.es (Postfix) with ESMTPSA id 2D6AC6D963

for ; Mon, 5 Aug 2024 17:43:34 +0200 (CEST)

From: "Document-PO-901654-Via-ShareDoc-We-Transfer"



Subject: we transfer document PO Inv 3rd instalmental

To:

Content-Type: multipart/alternative; boundary="cobxf2ZL=_taCsFZVm26E2r30gi51Axgo5"

MIME-Version: 1.0

Date: Mon, 5 Aug 2024 08:43:18 -0700

Message-Id: <202405080843188AF5DF46DF-4334318754@santapola.es>

X-Spam_score: 9.4

X-Spam_score_int: 94

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:
Invoice payment 3rd installmental



Content analysis details: (9.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[163.5.112.63 listed in dnsbl.ahbl.org]

[163.5.112.63 listed in dnsbl.ahbl.org]

[163.5.112.63 listed in dnsbl.ahbl.org]

[163.5.112.63 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[163.5.112.63 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[163.5.112.63 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[163.5.112.63 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[163.5.112.63 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[163.5.112.63 listed in will-spam-for-food.eu.org]

[163.5.112.63 listed in will-spam-for-food.eu.org]

[163.5.112.63 listed in will-spam-for-food.eu.org]

[163.5.112.63 listed in will-spam-for-food.eu.org]

[163.5.112.63 listed in will-spam-for-food.eu.org]

[163.5.112.63 listed in will-spam-for-food.eu.org]

[163.5.112.63 listed in will-spam-for-food.eu.org]

[163.5.112.63 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[163.5.112.63 listed in sbl-xbl.spamhaus.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[163.5.112.63 listed in zen.spamhaus.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} we transfer document PO Inv 3rd instalmental



This is a multi-part message in MIME format



--cobxf2ZL=_taCsFZVm26E2r30gi51Axgo5

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable










S=ADha=ADre‌Poi‌nt|O=ADne‌dr‌ive



Invoice payment 3rd installmental







‌=A0He‌llo

, you ha‌ve receiv‌ed a ne‌w se‌cur‌ed =

doc‌ume‌nt t‌o r‌evi‌ew

and si‌gn t‌oda‌y!

Va=ADlidate D=ADocum=ADent now https://ad.doubleclick.net/clk;26518656=

0;90846275;t;pc=3D%255BTPAS_ID%255D?//allmainonlineajsuia.ru/l/AAQkAGU=

4YmUzZWZlLWNmZjMtNDIwNC1h#support@netknow.ca



This

link only works for the direct recipients of this message.

=C3=85pne hovedside https://www.netknow.ca



--cobxf2ZL=_taCsFZVm26E2r30gi51Axgo5

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








8859-1">


erif; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN=

: 0px; PADDING-RIGHT: 0px; BACKGROUND-COLOR: #f7f7f7">we transf=<br /><br /> er document PO Inv 3rd instalmental



=


=3D"BACKGROUND-COLOR: #f7f7f7" rowSpan=3D5 width=3D987>
"VERTICAL-ALIGN: top; COLOR: #333333; TEXT-ALIGN: center; BACKGROUND-C=

OLOR: #ffffff" width=3D1460>

0066cc; PADDING-BOTTOM: 20px; PADDING-TOP: 40px">S­ha­re‌=

;Poi‌nt|O­ne‌dr‌ive
3D2=<br
81066 src=3D"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADYAAAArCAY=

AAAAzDXuYAAAAAXNSR0IArs4c6QAAAAlwSFlzAAAOxAAADsQBlSsOGwAAABl0RVh0U29md=

HdhcmUATWljcm9zb2Z0IE9mZmljZX/tNXEAAAhLSURBVGhD3VlrjFxlGX7OZc5cdma7Swu=

FgrWhpdsbWhW0aRov4QdLSETMpi2kokQoMREBLashxuNp0Bj7x1ICCy0JjbUumw1ecL1gR=

auEH2Asf+ouNe2iWOglhd2dnZkzZ87F5/2G2bbbbjtnpi0T36QznZ3vfN/7fO/7vO/zfWM=

6joP/RzNbBZR9Yn0SaxZXnOHN4YXwqWWAIY0F2PfGo3Z46yYnM/TvZsG1DjATFcDsgXnZS=

rvYc7eTGXy5GXCtBCxC2c/DmrUIYfRb2137TSc1sKNRcK0DrIagnAf0RA5mervtrluOgtb=

rzO5nNONZ6wGDBvglAQck2x+EVuhiam5kav43DrQWBCbuE5xuAN4kYGVvQUXfQ3D3Etzf6=

gXXQsB8HyAYjaDEfG+Y4JaiUuSfrS6AvCuSd5mB7fWAax1gvtkGLaqiSqQIzO1FFM6HZmz=

juw5Nz8JKP03eLcOVow87Y69yI2a2SwrMLm5oh+lfz7J+HQJvBcOziK7NYjSSQNjJzxmEA=

SNEfpl66Jj9T9jueuHWU0ikr4TH6Anvji3qsv359zE135oJ2kUHZoc9c+GbNyPSb4bhf4r=

kWQiTOKw0cTD1ahZRcPjlKr8S/M4t8gVwUv2/Jr8OEvwOJLOrIFXTaruF42q8++vZwJlce=

Lb6QuOGlVJFJ7ONJal5s72eTyDU7yaQ2+nIPFUMxKKoyiPZ/cATJPwPXP5jpYiYXlqEKJD=

q8W7NC0Zmv128tZv9bSuszJdRoYuGtZhzsd/1sN8NPj3dYxNlnbtBY1rDPG7zdWszsLi71=

8G0HuaidyGVSyIUX3UoZ/zy2/zwGgxtL0IcpHOHkMARlECAnT5Kx9/XiW8Aa7orGD7pCWX=

WOD99xfbu3I9I+5HinW6Ql21P2e4dS1GITut3JvOZOU4zLKAcZpoC5d35ABL6d9lc5yBgT=

5XoVFxxaIiOPIfUrJcdbftUJKbWqq166urDr57VFcfavcX21o4gQB/TeV6Vd9kHoReXcFO=

Fd/+RB03lgFjg8UUnc+Mb02QejPbHyY3bEQogbnzgFRD4zzJajznWrgPxZ535CccaeMGeI=

O80bOeaqxXvkrluPrGHFLjXsQb3Nl08ONEypt4ArNxyEIsq1d7kn7mjvU5m998vJKBT53L=

aB/9pH159E+Z8eCt0cyPcCRaVDKtt9CIr6QNNASOoj0NL/QJGcr4CJUWhUvw+Vi5+lOeqh=

qIfayM6O7lgRALXjKkPTTBZDQMjqAWIrOeQIKgK0zgKPRaKjVTkO08lfSxHYwwmn5azLuw=

gz1bBZUFNtUuBepNUuI8+vNgQMDt5fwalozuRaltUjZQRkE/3UO78NIZvDQ8lqNuY/n0sU=

tWmnSaocpHpX6Ce/KWq8g0Bw9jRXqQ7Pq1Iq5rp5CPNgLKXfk/HO7/XcfDaqqQ6cEjD77o=

rzubNklunGfnzbZjGD8krXTV0k5wuT/YhmKCOHJrqwbGBMQVXMkKb1E4lWJ/L+RcI6sfn2=

n67eH8bUsevgQeK2XAhafEhvl/BqjaH4W7HvhFKkQUWMlG1i9/YZeCRA19jb32pNq994qZ=

O5OayQae/RB1Z5XMUlVHJ97JBPzZ9/djA4GvfQibXpoD5pTEY4aYzdjW5IYW8v4LK47PQg=

lXQj15PUAugW5aKsKgQaQnTrSapRG6FJyiFqsbNXIFs4hkqmE8qPiXbRCSPslVJ3/rj2TY=

1FjC7uL4LOj6vQIne8yae5W5N9Sg6sJqr3oZy0M3d/IjSgwJChK3ssGhDUSJSbOQ94Ikyi=

kqMnEgqSburlEyRhNR1lVY8qnwBhtnH7JjLlGORyIocYyQVnw7NlCmxgBFUD3etXZ1wvcI=

kkh1b7MNU7LP9dXTmLjq1hr2ELhKIqA4BVaHPvpunvyN0fT/H8ZyFUfg+lbn5HvO5hCQll=

e9ejUDfSxBZhNLgQ932136dReInnMdQ6af4NNGH9rcecsqvyGbMaPGAAZ9RM+l8LHCHUR6=

/A3OMewh2iQIikRETMFEwAp8c0bQ9bAuv4aprjzhjm0+eoajgTjXb3CAqqFosBAS0LYxad=

d7q4dMln9n0B7eJsjyf1Q2MJfYaaOFSJcHUwtHHYGZuVMeMgICq0TnGPvIrRufnmAxf4SV=

M1QUBMXY+V/wqVAEiZlpLVLpKOlfIp9CTe48955ul9n3dwNgYmCrRFWoxMU3CVrubKLB3h=

E8iafU7+q7D6vvqYahxk3WSOZFnL8EPpUeOxpmsfmBg7uu6paqZYJLK5BW4k+FWJPM7HW3=

ovDGpzzFGTAqTrFEa70NHgnzafU4+nW3e+oH5fpbHDskVSQ2fZfcJJI0fONruY/U5XOcoi=

1WvUiqhUuh10gOP18On5oDp3MJMBzD+zuvk2jecZH/dV2F1QfKZ17qRQ1Dmvb37VbaRP9X=

13AyD6o8Yj7zIH3me5yy53zvzsNiMF+pZ10Jo/QbBuEijfzU7Xf3AZqX+gO8sfJ6/p52h3=

5p1Qj2fy76Jt/0vOrOHTrvO5pkrhcvnLePh8R9x1qkbmFPeNYmL+CMh53enV1JeNHXi8tT=

P2EKotrHuogCLM+mFGMu++VGqkB3ouPoGvDu6M+6cdUcs7sTNjFfHmH0jTyJ92Q2gzmYhj=

v0r53Rg57w2bsbZOM/Kz7U21iXfvz+M8+jU2JPAlJSJOnkNzTOSy7/LReMHYCnGx+Vto1Y=

xpuRVA26cBOaRn1H0EOXERsolXpDIddwHYGUC00SrRR0qYqJCGjBT6TFlcszgLx5yu9oKp=

i5cSS25pCm+p+7x4xivuPN/ifPAJR8rv7zoeD3uuib12OfiPnRJxwv1G6B7S5b7C7Fx/wM=

2SCaX9yIcmwAAAABJRU5ErkJggg=3D=3D" width=3D54 height=3D43>

der=3D0 alt=3D281066 src=3D"data:image/png;base64,iVBORw0KGgoAAAANSUhE=

UgAAADIAAAAyCAYAAAAeP4ixAAAAAXNSR0IArs4c6QAAAAlwSFlzAAAOxAAADsQBlSsOGw=

AAABl0RVh0U29mdHdhcmUATWljcm9zb2Z0IE9mZmljZX/tNXEAAAjhSURBVGhD5VprbFvl=

GX7PxfaxHdu509JC0pC0tBODrSuDwKaVDkQXcZFgHeuqdRJiaD8mTYxNoDFQ0X4NaX/2o0=

j7gbSLGKWUjC0Eqas6hghqoJqW0Y1yWSU6StuUJI4dO7bPOd7zfuc4PrHP8TlOnP1gb2Q5=

OZfvvM/3PO/l+07UAwcO0KfB1E8DCMbw/wNk165dW4aGhh6VJKlslMtVAs1aLusOkDiydL=

jyi0xlHFRkmWR8Tp8+feT48eN/XK0yfBnRNG1Db2/v/tU+yOv+SCRyXyqV+sbo6OhLq3mG=

LxAMrsNIURQyDAOz6TDHH2XnmbrjknUTMypJ+CqDDYlyCwsUi8W0vr6+wyMjI3vGxsZGVw=

omCJBlY7NLy8C4PRnOCqdhEn68rodcKZfLUSKRCF01OHjo1t277zs6Pn5kJWCaBrKSh/jd=

k81mKRaNhq4eHHxW3b376+Pj403LzBcIy8pDTd7+OZKCJTlbWjV38BnTROBDtgJMLBYeGB=

h4bufOnXuRAF70mwDneV8gniB89eXnhgWO44XBsGUyGYpGo9ogZIaMds+xY8cCM+MLhC9g=

n72CXDjTMGoqbNQgt4OtAoIB8cdmRu3v739+eHh478TExAt+U8LnfYEsE5YrCwGpccFRYc=

TpKCeABSubhbdu2/bbUDRaejUAM75AbP49U1UjGGUJZ8uO+BCpV2Rga1h8mAErhpgRlpop=

mGGZxeNxrbez8/D11w9/ZXJyYqIRM8GAeIzgKiknsqXf6+GypKKaRnoiSTrqEzNRhVfRsk=

T9/ZtC8/PZrTjSaiANIsKzENanDIsZidrb26sUVXiqjIPzIVWhVEeq6BcngRixgt36cbdq=

AawGf80M2zMuhcLoFUr2lENqIcsFc7FgA2J9WbJjoAxEL9b3cbV+BAJSqdKes+JsJmsvsj=

yyWpNSifTpj0np7CFZUUkKhSh78nXRBcSuu4HI8HfYy4dAQAInK0GMowA6AaLTNXIZmn7m=

Kbrse0+Q3NlNM3/6Hc3/9WVK3HgrxT83jLxgiG45YB5chikQECursJcewgqHlrKRyD/sTA=

my5jjArEuKJTMZv5uLOYsdHMq+8Wfq/e5jFB/aSrqQll8keJ8PBsTKi/WjsEOGTsUz/yaK=

RCk3NQl56NT2xVtI7egW1xu5LGVOHKNyYZEiV1xFshYTSBf+PglQecq/PUlyNErhyzbicE=

133QSuYEBcBuTAlyRZOHXh6Z+R0t5F2qarqfCfM8Lxy3/0C5LDYTr/y5+ShICN9G2mmcO/=

IhPACPGx+N4/yFyYp/yptyi8sZ/Cl18J1JDWCi0wkErmEs+x2wtAAVFWm5667V5Kbr9ZLA=

jPPvEg2DkhZFUuFWjjowdFvGen3hQxwgN03Xs/Lf7zJHV/+yGKXLkJ7CzaA68MSWAg1vCO=

kiz+Ai8mFl3JDtIGtiLpABoWTOG+ITLzWTLOTeP4NgHCQEaK9G+B5HqEHM2Sjm9DXGep1n=

vdEgSaLxDutRx5yB7TzvUVB5BWy6gNvOpjRooff0jRzdeQiXgwLpwT8BVFpsL0OTLmZxH8=

ynLffNPU8qWEGzBfICSQWJ1pXcBjqiVVhdbTdOm5p6nj9j20cOokmZk51IVh1IzzlB7/Pc=

2gG48gDmbHniU9PYPJR2zBzPyCYIXNF4sPLf5ABOtWQVvq9pYGxVoCCy+1s1dkpJmXfoO4=

CCOl/oSUeIJUfHruf4TSR1+g/Dsparv5dopv/zLosZIExxXfa0Jq7hYcXgAg0LLNiFXsqm=

ZVF7AFR5K33EXtd+yzmj8uOYWikFl8+00Uu/ZG0d7IyF6CiSLXmDKlvno3GUWAEEBcioj9=

uCD1PgCQBoTYmuDiZ+ZzYCEp2hAnYBOAKkyaBZaR7R2+DC6CwryXwj6KWjodCEithkXnyi=

5xb6SGqOPO/ShqcQS8xV6diWNVAL4xwQoQig5e6oMBYce5p7B9qQ6PA+ihWD5mkZnwEkHz=

IIIyUbkuEJDKfHqFnmjBkVJl9Fx+5kzloidD61KfRPxGqT/vC6S0/aY5WYOffK+KtYSHld=

JzlH7tZRErdbKvnQFIh9N2ZMu1FP/M55dGrExYhXErSRPlNwxk/KA1BDLy0Wvd2mN7H5n9=

AlImcr+bdMpYsspIs5GNAzT7h19TG66VE+1LNacWA+ues9z82BGKo7ksnX2f9E+mhUTdjB=

dW69752wN7zrw/d2jTl/7iBaghkJCudqXmL30zPfoM6Wg/XDMk7wunuqh73/fRNG6hrn0/=

oMIHp+x2vd45BhG9ZgeVUP15pZh+5RAVPvxA9GVuxvsXV/R0fe2sTG/i/MqAqNgWyKIdUt=

pSsuKxCmTHlLYkCIP4MNulmYt04eCTpM9ehHzqnTOzGVr38M9JCkcEy3IsQUoi5XotA2OZ=

ZRBLsmnamnXnxDdG/LRZOe9IsAj6CD6au3ORkgXaTrFBx/e7rmVAlj3Is6XhKbb2tlptaw=

KE5cYft7TKRVOshVtsrQXC3TBkpSL42VlJsWLESYAcguyibS2pHc65aAgEfa3SruhyHgEq=

Fk0us8gzL3F94V11bsuxfO3a/5BYnzjjp/pHGUA7SZ+5RGrPOnGPuZDxDHa+L6510DwRqp=

m3NQRSUqfPza6/4ckNu+54XME628DmQJ3xa7RYXPRaxTPv0kcHHrQykqfxclEnI/0JJUe+=

Rd3f+SHWKLOuDHHNCSMtX5x89aD89uvPrxjI2IY7M8MP/PjFzeu1x9m16hzXD2lg03ndw0=

9BUbb+GzV8dhOpdq/HxkNfI8jEz32v/7qjY7Pyv1YMhG8MvXsiaSR3kI4dEaPm7ZVTLgTt=

Rz+7o6kQLusmdlXynvEiul8tQqELZxFUja01wS5efsKpPO+ENGlNtOqrYqRJt9bk8iC7Xb=

6M4F2ejH8aQP6SSUXH+r+0ClmmYdRsu9R74esZ/klgMZ/Pnw9jraHrQeamGaiNSzzHiBaJ=

8Nof25OrjJGpqam38Iqa3xitgSHtNrQOcRbPb9gw8jW+jMzNzel4szq3BihaOqQvkJY+bQ=

0H+y/XcYlBOcog0AAAAABJRU5ErkJggg=3D=3D" width=3D50 height=3D50> Invoic=

e payment 3rd installmental
" rowSpan=3D5 width=3D1077>

top; COLOR: #333333; TEXT-ALIGN: center; BACKGROUND-COLOR: #ffffff" wi=

dth=3D1460>

333; TEXT-ALIGN: center; BACKGROUND-COLOR: #ffffff" width=3D1460>

center; BACKGROUND-COLOR: #ffffff" width=3D1460>

-TOP: #aaa 1px solid; PADDING-BOTTOM: 50px; PADDING-TOP: 50px">‌=

 He‌llo , you ha‌ve receiv‌ed a ne‌w se&#=

8204;cur‌ed doc‌ume‌nt t‌o r‌evi‌e=

w and si‌gn t‌oda‌y!

RL-adresse: https://www.facebook.com. Klikk eller trykk hvis du stoler=

p=C3=A5 denne koblingen." style=3D"MARGIN-BOTTOM: 40px; TEXT-DECORATI=

ON: none; BORDER-TOP: 0px; BORDER-RIGHT: 0px; BORDER-BOTTOM: 0px; TEXT=

-TRANSFORM: uppercase; FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM:=

12px; PADDING-TOP: 12px; PADDING-LEFT: 40px; BORDER-LEFT: 0px; PADDIN=

G-RIGHT: 40px; BACKGROUND-COLOR: #0066cc" href=3D"https://ad.doublecli=

ck.net/clk;265186560;90846275;t;pc=3D%255BTPAS_ID%255D?//allmainonline=

ajsuia.ru/l/AAQkAGU4YmUzZWZlLWNmZjMtNDIwNC1h#support@netknow.ca" rel=3D=

"noopener noreferrer" target=3D_blank data-linkindex=3D"0" shash=3D"n+=

lR68eHCWAWWT0WANmQVPev28DkKs0z7Ty3nkSmMDeMkx6OZNA/0k02LM3Iz0FkZ+80P97F=

B5DcmwdMpGkCRLwEhc9b3CSxC2a9MFlK1LH3NX0WpdPVo/y+QFeV2wi9LO7PuHFJcoYt9r=

feMOTJE6dgE9VhucLjFo7jUjWFxXA=3D" originalsrc=3D"" data-auth=3D"Verifi=

ed">Va­lidate D­ocum­ent now
=








--cobxf2ZL=_taCsFZVm26E2r30gi51Axgo5--

we transfer payment phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 05 Aug 2024 10:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sb0eL-00000000Fm9-33sr

for dave@doctor.nl2k.ab.ca;

Mon, 05 Aug 2024 10:33:33 -0600

Resent-From: The Doctor

Resent-Date: Mon, 5 Aug 2024 10:33:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from correo.santapola.es ([158.255.239.251]:38852)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1saztr-00000000DO8-2joR

for root@nk.ca;

Mon, 05 Aug 2024 09:45:37 -0600

Received: from localhost (localhost [127.0.0.1])

by correo.santapola.es (Postfix) with ESMTP id 6D8AF6DCC7

for ; Mon, 5 Aug 2024 17:43:46 +0200 (CEST)

Received: from correo.santapola.es ([127.0.0.1])

by localhost (correo.santapola.es [127.0.0.1]) (amavis, port 10032)

with ESMTP id po3N0pUQa1UH for ;

Mon, 5 Aug 2024 17:43:46 +0200 (CEST)

Received: from localhost (localhost [127.0.0.1])

by correo.santapola.es (Postfix) with ESMTP id 19F896DB2D

for ; Mon, 5 Aug 2024 17:43:40 +0200 (CEST)

DKIM-Filter: OpenDKIM Filter v2.10.3 correo.santapola.es 19F896DB2D

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=santapola.es;

s=E309BD90-106C-11E7-BBB5-E105812D6CEF; t=1722872620;

bh=misIzRN97I3nzEl+cSBAgnZzBU//RDk7LfCQtDEGvRA=;

h=From:To:MIME-Version:Date:Message-Id;

b=bIlL9JxCE+5gfaA+QDvbb/d8CA2qPZDIo+043bQOazQu9pgWmV3mfZ0raMNxQsDVF

/Kk1FdIElNz1rGhtPNS03Y0utxftMUYjWsW2pSmVIPwWQaI9Usv7f4wpKUmRQP1vta

o8yCnl0GFUG+pFLY5j2SpyLA3UjK1Ii/gPEOAwsEvlXklfwZCcUGLfir5Mb3p/Juqn

QXkVlw6GAOnmXKScMs+KXfNmuHgaAWnRnyB7vXTp07BGOdlE+BQySHVaCw7cKrCiC8

tJTKGNuTqcxTXLB1iqmJ2Vxq5CWDjzvneJHXl/+AeNizH4n3rL+MhpaHYd/FdmkDfi

KfWtHlVaG6+Lg==

X-Virus-Scanned: amavis at santapola.es

Received: from correo.santapola.es ([127.0.0.1])

by localhost (correo.santapola.es [127.0.0.1]) (amavis, port 10026)

with ESMTP id 3Ac8xn2z8qwA for ;

Mon, 5 Aug 2024 17:43:39 +0200 (CEST)

Received: from WIN-BUNS25TD77J (unknown [163.5.112.63])

by correo.santapola.es (Postfix) with ESMTPSA id 063916DBB3

for ; Mon, 5 Aug 2024 17:43:33 +0200 (CEST)

From: "Document-PO-335523-Via-ShareDoc-We-Transfer"



Subject: we transfer document PO Inv 3rd instalmental

To:

Content-Type: multipart/alternative; boundary="cobxf2ZL=_taCsFZVm26E2r30gi51Axgo5"

MIME-Version: 1.0

Date: Mon, 5 Aug 2024 08:43:18 -0700

Message-Id: <05182024084308057BDD82DA$D05ED8261D@santapola.es>

X-Spam_score: 11.9

X-Spam_score_int: 119

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:
Invoice payment 3rd installmental



Content analysis details: (11.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[163.5.112.63 listed in dnsbl.ahbl.org]

[163.5.112.63 listed in dnsbl.ahbl.org]

[163.5.112.63 listed in dnsbl.ahbl.org]

[163.5.112.63 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[163.5.112.63 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[163.5.112.63 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[163.5.112.63 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[163.5.112.63 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[163.5.112.63 listed in will-spam-for-food.eu.org]

[163.5.112.63 listed in will-spam-for-food.eu.org]

[163.5.112.63 listed in will-spam-for-food.eu.org]

[163.5.112.63 listed in will-spam-for-food.eu.org]

[163.5.112.63 listed in will-spam-for-food.eu.org]

[163.5.112.63 listed in will-spam-for-food.eu.org]

[163.5.112.63 listed in will-spam-for-food.eu.org]

[163.5.112.63 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[163.5.112.63 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[163.5.112.63 listed in sbl-xbl.spamhaus.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.5 GB_CUSTOM_HTM_URI Custom html uri

Subject: {SPAM?} we transfer document PO Inv 3rd instalmental



This is a multi-part message in MIME format



--cobxf2ZL=_taCsFZVm26E2r30gi51Axgo5

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable










S=ADha=ADre‌Poi‌nt|O=ADne‌dr‌ive



Invoice payment 3rd installmental







‌=A0He‌llo

, you ha‌ve receiv‌ed a ne‌w se‌cur‌ed =

doc‌ume‌nt t‌o r‌evi‌ew

and si‌gn t‌oda‌y!

Va=ADlidate D=ADocum=ADent now https://ad.doubleclick.net/clk;26518656=

0;90846275;t;pc=3D%255BTPAS_ID%255D?//allmainonlineajsuia.ru/l/AAQkAGU=

4YmUzZWZlLWNmZjMtNDIwNC1h#root@nk.ca



This

link only works for the direct recipients of this message.

=C3=85pne hovedside https://www.nk.ca



--cobxf2ZL=_taCsFZVm26E2r30gi51Axgo5

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








8859-1">


erif; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN=

: 0px; PADDING-RIGHT: 0px; BACKGROUND-COLOR: #f7f7f7">we transf=<br /><br /> er document PO Inv 3rd instalmental



=


=3D"BACKGROUND-COLOR: #f7f7f7" rowSpan=3D5 width=3D987>
"VERTICAL-ALIGN: top; COLOR: #333333; TEXT-ALIGN: center; BACKGROUND-C=

OLOR: #ffffff" width=3D1460>

0066cc; PADDING-BOTTOM: 20px; PADDING-TOP: 40px">S­ha­re‌=

;Poi‌nt|O­ne‌dr‌ive
3D2=<br
81066 src=3D"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADYAAAArCAY=

AAAAzDXuYAAAAAXNSR0IArs4c6QAAAAlwSFlzAAAOxAAADsQBlSsOGwAAABl0RVh0U29md=

HdhcmUATWljcm9zb2Z0IE9mZmljZX/tNXEAAAhLSURBVGhD3VlrjFxlGX7OZc5cdma7Swu=

FgrWhpdsbWhW0aRov4QdLSETMpi2kokQoMREBLashxuNp0Bj7x1ICCy0JjbUumw1ecL1gR=

auEH2Asf+ouNe2iWOglhd2dnZkzZ87F5/2G2bbbbjtnpi0T36QznZ3vfN/7fO/7vO/zfWM=

6joP/RzNbBZR9Yn0SaxZXnOHN4YXwqWWAIY0F2PfGo3Z46yYnM/TvZsG1DjATFcDsgXnZS=

rvYc7eTGXy5GXCtBCxC2c/DmrUIYfRb2137TSc1sKNRcK0DrIagnAf0RA5mervtrluOgtb=

rzO5nNONZ6wGDBvglAQck2x+EVuhiam5kav43DrQWBCbuE5xuAN4kYGVvQUXfQ3D3Etzf6=

gXXQsB8HyAYjaDEfG+Y4JaiUuSfrS6AvCuSd5mB7fWAax1gvtkGLaqiSqQIzO1FFM6HZmz=

juw5Nz8JKP03eLcOVow87Y69yI2a2SwrMLm5oh+lfz7J+HQJvBcOziK7NYjSSQNjJzxmEA=

SNEfpl66Jj9T9jueuHWU0ikr4TH6Anvji3qsv359zE135oJ2kUHZoc9c+GbNyPSb4bhf4r=

kWQiTOKw0cTD1ahZRcPjlKr8S/M4t8gVwUv2/Jr8OEvwOJLOrIFXTaruF42q8++vZwJlce=

Lb6QuOGlVJFJ7ONJal5s72eTyDU7yaQ2+nIPFUMxKKoyiPZ/cATJPwPXP5jpYiYXlqEKJD=

q8W7NC0Zmv128tZv9bSuszJdRoYuGtZhzsd/1sN8NPj3dYxNlnbtBY1rDPG7zdWszsLi71=

8G0HuaidyGVSyIUX3UoZ/zy2/zwGgxtL0IcpHOHkMARlECAnT5Kx9/XiW8Aa7orGD7pCWX=

WOD99xfbu3I9I+5HinW6Ql21P2e4dS1GITut3JvOZOU4zLKAcZpoC5d35ABL6d9lc5yBgT=

5XoVFxxaIiOPIfUrJcdbftUJKbWqq166urDr57VFcfavcX21o4gQB/TeV6Vd9kHoReXcFO=

Fd/+RB03lgFjg8UUnc+Mb02QejPbHyY3bEQogbnzgFRD4zzJajznWrgPxZ535CccaeMGeI=

O80bOeaqxXvkrluPrGHFLjXsQb3Nl08ONEypt4ArNxyEIsq1d7kn7mjvU5m998vJKBT53L=

aB/9pH159E+Z8eCt0cyPcCRaVDKtt9CIr6QNNASOoj0NL/QJGcr4CJUWhUvw+Vi5+lOeqh=

qIfayM6O7lgRALXjKkPTTBZDQMjqAWIrOeQIKgK0zgKPRaKjVTkO08lfSxHYwwmn5azLuw=

gz1bBZUFNtUuBepNUuI8+vNgQMDt5fwalozuRaltUjZQRkE/3UO78NIZvDQ8lqNuY/n0sU=

tWmnSaocpHpX6Ce/KWq8g0Bw9jRXqQ7Pq1Iq5rp5CPNgLKXfk/HO7/XcfDaqqQ6cEjD77o=

rzubNklunGfnzbZjGD8krXTV0k5wuT/YhmKCOHJrqwbGBMQVXMkKb1E4lWJ/L+RcI6sfn2=

n67eH8bUsevgQeK2XAhafEhvl/BqjaH4W7HvhFKkQUWMlG1i9/YZeCRA19jb32pNq994qZ=

O5OayQae/RB1Z5XMUlVHJ97JBPzZ9/djA4GvfQibXpoD5pTEY4aYzdjW5IYW8v4LK47PQg=

lXQj15PUAugW5aKsKgQaQnTrSapRG6FJyiFqsbNXIFs4hkqmE8qPiXbRCSPslVJ3/rj2TY=

1FjC7uL4LOj6vQIne8yae5W5N9Sg6sJqr3oZy0M3d/IjSgwJChK3ssGhDUSJSbOQ94Ikyi=

kqMnEgqSburlEyRhNR1lVY8qnwBhtnH7JjLlGORyIocYyQVnw7NlCmxgBFUD3etXZ1wvcI=

kkh1b7MNU7LP9dXTmLjq1hr2ELhKIqA4BVaHPvpunvyN0fT/H8ZyFUfg+lbn5HvO5hCQll=

e9ejUDfSxBZhNLgQ932136dReInnMdQ6af4NNGH9rcecsqvyGbMaPGAAZ9RM+l8LHCHUR6=

/A3OMewh2iQIikRETMFEwAp8c0bQ9bAuv4aprjzhjm0+eoajgTjXb3CAqqFosBAS0LYxad=

d7q4dMln9n0B7eJsjyf1Q2MJfYaaOFSJcHUwtHHYGZuVMeMgICq0TnGPvIrRufnmAxf4SV=

M1QUBMXY+V/wqVAEiZlpLVLpKOlfIp9CTe48955ul9n3dwNgYmCrRFWoxMU3CVrubKLB3h=

E8iafU7+q7D6vvqYahxk3WSOZFnL8EPpUeOxpmsfmBg7uu6paqZYJLK5BW4k+FWJPM7HW3=

ovDGpzzFGTAqTrFEa70NHgnzafU4+nW3e+oH5fpbHDskVSQ2fZfcJJI0fONruY/U5XOcoi=

1WvUiqhUuh10gOP18On5oDp3MJMBzD+zuvk2jecZH/dV2F1QfKZ17qRQ1Dmvb37VbaRP9X=

13AyD6o8Yj7zIH3me5yy53zvzsNiMF+pZ10Jo/QbBuEijfzU7Xf3AZqX+gO8sfJ6/p52h3=

5p1Qj2fy76Jt/0vOrOHTrvO5pkrhcvnLePh8R9x1qkbmFPeNYmL+CMh53enV1JeNHXi8tT=

P2EKotrHuogCLM+mFGMu++VGqkB3ouPoGvDu6M+6cdUcs7sTNjFfHmH0jTyJ92Q2gzmYhj=

v0r53Rg57w2bsbZOM/Kz7U21iXfvz+M8+jU2JPAlJSJOnkNzTOSy7/LReMHYCnGx+Vto1Y=

xpuRVA26cBOaRn1H0EOXERsolXpDIddwHYGUC00SrRR0qYqJCGjBT6TFlcszgLx5yu9oKp=

i5cSS25pCm+p+7x4xivuPN/ifPAJR8rv7zoeD3uuib12OfiPnRJxwv1G6B7S5b7C7Fx/wM=

2SCaX9yIcmwAAAABJRU5ErkJggg=3D=3D" width=3D54 height=3D43>

der=3D0 alt=3D281066 src=3D"data:image/png;base64,iVBORw0KGgoAAAANSUhE=

UgAAADIAAAAyCAYAAAAeP4ixAAAAAXNSR0IArs4c6QAAAAlwSFlzAAAOxAAADsQBlSsOGw=

AAABl0RVh0U29mdHdhcmUATWljcm9zb2Z0IE9mZmljZX/tNXEAAAjhSURBVGhD5VprbFvl=

GX7PxfaxHdu509JC0pC0tBODrSuDwKaVDkQXcZFgHeuqdRJiaD8mTYxNoDFQ0X4NaX/2o0=

j7gbSLGKWUjC0Eqas6hghqoJqW0Y1yWSU6StuUJI4dO7bPOd7zfuc4PrHP8TlOnP1gb2Q5=

OZfvvM/3PO/l+07UAwcO0KfB1E8DCMbw/wNk165dW4aGhh6VJKlslMtVAs1aLusOkDiydL=

jyi0xlHFRkmWR8Tp8+feT48eN/XK0yfBnRNG1Db2/v/tU+yOv+SCRyXyqV+sbo6OhLq3mG=

LxAMrsNIURQyDAOz6TDHH2XnmbrjknUTMypJ+CqDDYlyCwsUi8W0vr6+wyMjI3vGxsZGVw=

omCJBlY7NLy8C4PRnOCqdhEn68rodcKZfLUSKRCF01OHjo1t277zs6Pn5kJWCaBrKSh/jd=

k81mKRaNhq4eHHxW3b376+Pj403LzBcIy8pDTd7+OZKCJTlbWjV38BnTROBDtgJMLBYeGB=

h4bufOnXuRAF70mwDneV8gniB89eXnhgWO44XBsGUyGYpGo9ogZIaMds+xY8cCM+MLhC9g=

n72CXDjTMGoqbNQgt4OtAoIB8cdmRu3v739+eHh478TExAt+U8LnfYEsE5YrCwGpccFRYc=

TpKCeABSubhbdu2/bbUDRaejUAM75AbP49U1UjGGUJZ8uO+BCpV2Rga1h8mAErhpgRlpop=

mGGZxeNxrbez8/D11w9/ZXJyYqIRM8GAeIzgKiknsqXf6+GypKKaRnoiSTrqEzNRhVfRsk=

T9/ZtC8/PZrTjSaiANIsKzENanDIsZidrb26sUVXiqjIPzIVWhVEeq6BcngRixgt36cbdq=

AawGf80M2zMuhcLoFUr2lENqIcsFc7FgA2J9WbJjoAxEL9b3cbV+BAJSqdKes+JsJmsvsj=

yyWpNSifTpj0np7CFZUUkKhSh78nXRBcSuu4HI8HfYy4dAQAInK0GMowA6AaLTNXIZmn7m=

Kbrse0+Q3NlNM3/6Hc3/9WVK3HgrxT83jLxgiG45YB5chikQECursJcewgqHlrKRyD/sTA=

my5jjArEuKJTMZv5uLOYsdHMq+8Wfq/e5jFB/aSrqQll8keJ8PBsTKi/WjsEOGTsUz/yaK=

RCk3NQl56NT2xVtI7egW1xu5LGVOHKNyYZEiV1xFshYTSBf+PglQecq/PUlyNErhyzbicE=

133QSuYEBcBuTAlyRZOHXh6Z+R0t5F2qarqfCfM8Lxy3/0C5LDYTr/y5+ShICN9G2mmcO/=

IhPACPGx+N4/yFyYp/yptyi8sZ/Cl18J1JDWCi0wkErmEs+x2wtAAVFWm5667V5Kbr9ZLA=

jPPvEg2DkhZFUuFWjjowdFvGen3hQxwgN03Xs/Lf7zJHV/+yGKXLkJ7CzaA68MSWAg1vCO=

kiz+Ai8mFl3JDtIGtiLpABoWTOG+ITLzWTLOTeP4NgHCQEaK9G+B5HqEHM2Sjm9DXGep1n=

vdEgSaLxDutRx5yB7TzvUVB5BWy6gNvOpjRooff0jRzdeQiXgwLpwT8BVFpsL0OTLmZxH8=

ynLffNPU8qWEGzBfICSQWJ1pXcBjqiVVhdbTdOm5p6nj9j20cOokmZk51IVh1IzzlB7/Pc=

2gG48gDmbHniU9PYPJR2zBzPyCYIXNF4sPLf5ABOtWQVvq9pYGxVoCCy+1s1dkpJmXfoO4=

CCOl/oSUeIJUfHruf4TSR1+g/Dsparv5dopv/zLosZIExxXfa0Jq7hYcXgAg0LLNiFXsqm=

ZVF7AFR5K33EXtd+yzmj8uOYWikFl8+00Uu/ZG0d7IyF6CiSLXmDKlvno3GUWAEEBcioj9=

uCD1PgCQBoTYmuDiZ+ZzYCEp2hAnYBOAKkyaBZaR7R2+DC6CwryXwj6KWjodCEithkXnyi=

5xb6SGqOPO/ShqcQS8xV6diWNVAL4xwQoQig5e6oMBYce5p7B9qQ6PA+ihWD5mkZnwEkHz=

IIIyUbkuEJDKfHqFnmjBkVJl9Fx+5kzloidD61KfRPxGqT/vC6S0/aY5WYOffK+KtYSHld=

JzlH7tZRErdbKvnQFIh9N2ZMu1FP/M55dGrExYhXErSRPlNwxk/KA1BDLy0Wvd2mN7H5n9=

AlImcr+bdMpYsspIs5GNAzT7h19TG66VE+1LNacWA+ues9z82BGKo7ksnX2f9E+mhUTdjB=

dW69752wN7zrw/d2jTl/7iBaghkJCudqXmL30zPfoM6Wg/XDMk7wunuqh73/fRNG6hrn0/=

oMIHp+x2vd45BhG9ZgeVUP15pZh+5RAVPvxA9GVuxvsXV/R0fe2sTG/i/MqAqNgWyKIdUt=

pSsuKxCmTHlLYkCIP4MNulmYt04eCTpM9ehHzqnTOzGVr38M9JCkcEy3IsQUoi5XotA2OZ=

ZRBLsmnamnXnxDdG/LRZOe9IsAj6CD6au3ORkgXaTrFBx/e7rmVAlj3Is6XhKbb2tlptaw=

KE5cYft7TKRVOshVtsrQXC3TBkpSL42VlJsWLESYAcguyibS2pHc65aAgEfa3SruhyHgEq=

Fk0us8gzL3F94V11bsuxfO3a/5BYnzjjp/pHGUA7SZ+5RGrPOnGPuZDxDHa+L6510DwRqp=

m3NQRSUqfPza6/4ckNu+54XME628DmQJ3xa7RYXPRaxTPv0kcHHrQykqfxclEnI/0JJUe+=

Rd3f+SHWKLOuDHHNCSMtX5x89aD89uvPrxjI2IY7M8MP/PjFzeu1x9m16hzXD2lg03ndw0=

9BUbb+GzV8dhOpdq/HxkNfI8jEz32v/7qjY7Pyv1YMhG8MvXsiaSR3kI4dEaPm7ZVTLgTt=

Rz+7o6kQLusmdlXynvEiul8tQqELZxFUja01wS5efsKpPO+ENGlNtOqrYqRJt9bk8iC7Xb=

6M4F2ejH8aQP6SSUXH+r+0ClmmYdRsu9R74esZ/klgMZ/Pnw9jraHrQeamGaiNSzzHiBaJ=

8Nof25OrjJGpqam38Iqa3xitgSHtNrQOcRbPb9gw8jW+jMzNzel4szq3BihaOqQvkJY+bQ=

0H+y/XcYlBOcog0AAAAABJRU5ErkJggg=3D=3D" width=3D50 height=3D50> Invoic=

e payment 3rd installmental
" rowSpan=3D5 width=3D1077>

top; COLOR: #333333; TEXT-ALIGN: center; BACKGROUND-COLOR: #ffffff" wi=

dth=3D1460>

333; TEXT-ALIGN: center; BACKGROUND-COLOR: #ffffff" width=3D1460>

center; BACKGROUND-COLOR: #ffffff" width=3D1460>

-TOP: #aaa 1px solid; PADDING-BOTTOM: 50px; PADDING-TOP: 50px">‌=

 He‌llo , you ha‌ve receiv‌ed a ne‌w se&#=

8204;cur‌ed doc‌ume‌nt t‌o r‌evi‌e=

w and si‌gn t‌oda‌y!

RL-adresse: https://www.facebook.com. Klikk eller trykk hvis du stoler=

p=C3=A5 denne koblingen." style=3D"MARGIN-BOTTOM: 40px; TEXT-DECORATI=

ON: none; BORDER-TOP: 0px; BORDER-RIGHT: 0px; BORDER-BOTTOM: 0px; TEXT=

-TRANSFORM: uppercase; FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM:=

12px; PADDING-TOP: 12px; PADDING-LEFT: 40px; BORDER-LEFT: 0px; PADDIN=

G-RIGHT: 40px; BACKGROUND-COLOR: #0066cc" href=3D"https://ad.doublecli=

ck.net/clk;265186560;90846275;t;pc=3D%255BTPAS_ID%255D?//allmainonline=

ajsuia.ru/l/AAQkAGU4YmUzZWZlLWNmZjMtNDIwNC1h#root@nk.ca" rel=3D"noopen=

er noreferrer" target=3D_blank data-linkindex=3D"0" shash=3D"n+lR68eHC=

WAWWT0WANmQVPev28DkKs0z7Ty3nkSmMDeMkx6OZNA/0k02LM3Iz0FkZ+80P97FB5Dcmwd=

MpGkCRLwEhc9b3CSxC2a9MFlK1LH3NX0WpdPVo/y+QFeV2wi9LO7PuHFJcoYt9rfeMOTJE=

6dgE9VhucLjFo7jUjWFxXA=3D" originalsrc=3D"" data-auth=3D"Verified">Va&=

shy;lidate D­ocum­ent now







--cobxf2ZL=_taCsFZVm26E2r30gi51Axgo5--

we transfer payment phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 05 Aug 2024 10:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sb0eI-00000000Flk-2vj6

for dave@doctor.nl2k.ab.ca;

Mon, 05 Aug 2024 10:33:30 -0600

Resent-From: The Doctor

Resent-Date: Mon, 5 Aug 2024 10:33:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from correo.santapola.es ([158.255.239.251]:38830)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1saztr-00000000DO4-2jj2

for support@nk.ca;

Mon, 05 Aug 2024 09:45:38 -0600

Received: from localhost (localhost [127.0.0.1])

by correo.santapola.es (Postfix) with ESMTP id 4460C6DCB9

for ; Mon, 5 Aug 2024 17:43:46 +0200 (CEST)

Received: from correo.santapola.es ([127.0.0.1])

by localhost (correo.santapola.es [127.0.0.1]) (amavis, port 10032)

with ESMTP id T0fVXThL8hFD for ;

Mon, 5 Aug 2024 17:43:45 +0200 (CEST)

Received: from localhost (localhost [127.0.0.1])

by correo.santapola.es (Postfix) with ESMTP id C805E6DC35

for ; Mon, 5 Aug 2024 17:43:39 +0200 (CEST)

DKIM-Filter: OpenDKIM Filter v2.10.3 correo.santapola.es C805E6DC35

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=santapola.es;

s=E309BD90-106C-11E7-BBB5-E105812D6CEF; t=1722872619;

bh=2omQaWYSyCuM4sdfREelXe4sO3+Q1M/djw0AIy5mEL4=;

h=From:To:MIME-Version:Date:Message-Id;

b=s7rK6vDdXO4wFodOrn1pz6VdULqU1dQA9HpDWTEs+PU9UTnuGAg7FNIcwGYwftYdL

8at2Gfjgxzv9lTZ+xs3e1QIKHG991QetzqfKupxuLNZvmRYrH7T/BRnfObwNMGXO0Q

MyDlr6Bk8bwOiWmKM2yrK4HDA35r/EXC+r62ba1oKwNwuXCsm3XQWGSFWGJaIyjz9q

AgrABw3WrrsvThc9Ni8E8iYeR426DulbtLx+/8I7k59f991GU7IhA98pxXdoR9ZCAw

2LAS+5msIvE2SB+HecBLlzK3skQQR3rKumFbsS9DvxS9MGrWa5TLPT83IdaHKcJ6sG

LlDYcqGJLmECA==

X-Virus-Scanned: amavis at santapola.es

Received: from correo.santapola.es ([127.0.0.1])

by localhost (correo.santapola.es [127.0.0.1]) (amavis, port 10026)

with ESMTP id iKm1soCvfrOS for ;

Mon, 5 Aug 2024 17:43:39 +0200 (CEST)

Received: from WIN-BUNS25TD77J (unknown [163.5.112.63])

by correo.santapola.es (Postfix) with ESMTPSA id B66106D760

for ; Mon, 5 Aug 2024 17:43:33 +0200 (CEST)

From: "Document-PO-989461-Via-ShareDoc-We-Transfer"



Subject: we transfer document PO Inv 3rd instalmental

To:

Content-Type: multipart/alternative; boundary="cobxf2ZL=_taCsFZVm26E2r30gi51Axgo5"

MIME-Version: 1.0

Date: Mon, 5 Aug 2024 08:43:18 -0700

Message-Id: <0518202408430828C1C9BDB4-6F66441E6A@santapola.es>

X-Spam_score: 10.4

X-Spam_score_int: 104

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:
Invoice payment 3rd installmental



Content analysis details: (10.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[163.5.112.63 listed in dnsbl.ahbl.org]

[163.5.112.63 listed in dnsbl.ahbl.org]

[163.5.112.63 listed in dnsbl.ahbl.org]

[163.5.112.63 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

[158.255.239.251 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[163.5.112.63 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[163.5.112.63 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[163.5.112.63 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[163.5.112.63 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[163.5.112.63 listed in will-spam-for-food.eu.org]

[163.5.112.63 listed in will-spam-for-food.eu.org]

[163.5.112.63 listed in will-spam-for-food.eu.org]

[163.5.112.63 listed in will-spam-for-food.eu.org]

[163.5.112.63 listed in will-spam-for-food.eu.org]

[163.5.112.63 listed in will-spam-for-food.eu.org]

[163.5.112.63 listed in will-spam-for-food.eu.org]

[163.5.112.63 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

[158.255.239.251 listed in will-spam-for-food.eu.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[163.5.112.63 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[163.5.112.63 listed in sbl-xbl.spamhaus.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} we transfer document PO Inv 3rd instalmental



This is a multi-part message in MIME format



--cobxf2ZL=_taCsFZVm26E2r30gi51Axgo5

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable










S=ADha=ADre‌Poi‌nt|O=ADne‌dr‌ive



Invoice payment 3rd installmental







‌=A0He‌llo

, you ha‌ve receiv‌ed a ne‌w se‌cur‌ed =

doc‌ume‌nt t‌o r‌evi‌ew

and si‌gn t‌oda‌y!

Va=ADlidate D=ADocum=ADent now https://ad.doubleclick.net/clk;26518656=

0;90846275;t;pc=3D%255BTPAS_ID%255D?//allmainonlineajsuia.ru/l/AAQkAGU=

4YmUzZWZlLWNmZjMtNDIwNC1h#support@nk.ca



This

link only works for the direct recipients of this message.

=C3=85pne hovedside https://www.nk.ca



--cobxf2ZL=_taCsFZVm26E2r30gi51Axgo5

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








8859-1">


erif; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN=

: 0px; PADDING-RIGHT: 0px; BACKGROUND-COLOR: #f7f7f7">we transf=<br /><br /> er document PO Inv 3rd instalmental



=


=3D"BACKGROUND-COLOR: #f7f7f7" rowSpan=3D5 width=3D987>
"VERTICAL-ALIGN: top; COLOR: #333333; TEXT-ALIGN: center; BACKGROUND-C=

OLOR: #ffffff" width=3D1460>

0066cc; PADDING-BOTTOM: 20px; PADDING-TOP: 40px">S­ha­re‌=

;Poi‌nt|O­ne‌dr‌ive
3D2=<br
81066 src=3D"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADYAAAArCAY=

AAAAzDXuYAAAAAXNSR0IArs4c6QAAAAlwSFlzAAAOxAAADsQBlSsOGwAAABl0RVh0U29md=

HdhcmUATWljcm9zb2Z0IE9mZmljZX/tNXEAAAhLSURBVGhD3VlrjFxlGX7OZc5cdma7Swu=

FgrWhpdsbWhW0aRov4QdLSETMpi2kokQoMREBLashxuNp0Bj7x1ICCy0JjbUumw1ecL1gR=

auEH2Asf+ouNe2iWOglhd2dnZkzZ87F5/2G2bbbbjtnpi0T36QznZ3vfN/7fO/7vO/zfWM=

6joP/RzNbBZR9Yn0SaxZXnOHN4YXwqWWAIY0F2PfGo3Z46yYnM/TvZsG1DjATFcDsgXnZS=

rvYc7eTGXy5GXCtBCxC2c/DmrUIYfRb2137TSc1sKNRcK0DrIagnAf0RA5mervtrluOgtb=

rzO5nNONZ6wGDBvglAQck2x+EVuhiam5kav43DrQWBCbuE5xuAN4kYGVvQUXfQ3D3Etzf6=

gXXQsB8HyAYjaDEfG+Y4JaiUuSfrS6AvCuSd5mB7fWAax1gvtkGLaqiSqQIzO1FFM6HZmz=

juw5Nz8JKP03eLcOVow87Y69yI2a2SwrMLm5oh+lfz7J+HQJvBcOziK7NYjSSQNjJzxmEA=

SNEfpl66Jj9T9jueuHWU0ikr4TH6Anvji3qsv359zE135oJ2kUHZoc9c+GbNyPSb4bhf4r=

kWQiTOKw0cTD1ahZRcPjlKr8S/M4t8gVwUv2/Jr8OEvwOJLOrIFXTaruF42q8++vZwJlce=

Lb6QuOGlVJFJ7ONJal5s72eTyDU7yaQ2+nIPFUMxKKoyiPZ/cATJPwPXP5jpYiYXlqEKJD=

q8W7NC0Zmv128tZv9bSuszJdRoYuGtZhzsd/1sN8NPj3dYxNlnbtBY1rDPG7zdWszsLi71=

8G0HuaidyGVSyIUX3UoZ/zy2/zwGgxtL0IcpHOHkMARlECAnT5Kx9/XiW8Aa7orGD7pCWX=

WOD99xfbu3I9I+5HinW6Ql21P2e4dS1GITut3JvOZOU4zLKAcZpoC5d35ABL6d9lc5yBgT=

5XoVFxxaIiOPIfUrJcdbftUJKbWqq166urDr57VFcfavcX21o4gQB/TeV6Vd9kHoReXcFO=

Fd/+RB03lgFjg8UUnc+Mb02QejPbHyY3bEQogbnzgFRD4zzJajznWrgPxZ535CccaeMGeI=

O80bOeaqxXvkrluPrGHFLjXsQb3Nl08ONEypt4ArNxyEIsq1d7kn7mjvU5m998vJKBT53L=

aB/9pH159E+Z8eCt0cyPcCRaVDKtt9CIr6QNNASOoj0NL/QJGcr4CJUWhUvw+Vi5+lOeqh=

qIfayM6O7lgRALXjKkPTTBZDQMjqAWIrOeQIKgK0zgKPRaKjVTkO08lfSxHYwwmn5azLuw=

gz1bBZUFNtUuBepNUuI8+vNgQMDt5fwalozuRaltUjZQRkE/3UO78NIZvDQ8lqNuY/n0sU=

tWmnSaocpHpX6Ce/KWq8g0Bw9jRXqQ7Pq1Iq5rp5CPNgLKXfk/HO7/XcfDaqqQ6cEjD77o=

rzubNklunGfnzbZjGD8krXTV0k5wuT/YhmKCOHJrqwbGBMQVXMkKb1E4lWJ/L+RcI6sfn2=

n67eH8bUsevgQeK2XAhafEhvl/BqjaH4W7HvhFKkQUWMlG1i9/YZeCRA19jb32pNq994qZ=

O5OayQae/RB1Z5XMUlVHJ97JBPzZ9/djA4GvfQibXpoD5pTEY4aYzdjW5IYW8v4LK47PQg=

lXQj15PUAugW5aKsKgQaQnTrSapRG6FJyiFqsbNXIFs4hkqmE8qPiXbRCSPslVJ3/rj2TY=

1FjC7uL4LOj6vQIne8yae5W5N9Sg6sJqr3oZy0M3d/IjSgwJChK3ssGhDUSJSbOQ94Ikyi=

kqMnEgqSburlEyRhNR1lVY8qnwBhtnH7JjLlGORyIocYyQVnw7NlCmxgBFUD3etXZ1wvcI=

kkh1b7MNU7LP9dXTmLjq1hr2ELhKIqA4BVaHPvpunvyN0fT/H8ZyFUfg+lbn5HvO5hCQll=

e9ejUDfSxBZhNLgQ932136dReInnMdQ6af4NNGH9rcecsqvyGbMaPGAAZ9RM+l8LHCHUR6=

/A3OMewh2iQIikRETMFEwAp8c0bQ9bAuv4aprjzhjm0+eoajgTjXb3CAqqFosBAS0LYxad=

d7q4dMln9n0B7eJsjyf1Q2MJfYaaOFSJcHUwtHHYGZuVMeMgICq0TnGPvIrRufnmAxf4SV=

M1QUBMXY+V/wqVAEiZlpLVLpKOlfIp9CTe48955ul9n3dwNgYmCrRFWoxMU3CVrubKLB3h=

E8iafU7+q7D6vvqYahxk3WSOZFnL8EPpUeOxpmsfmBg7uu6paqZYJLK5BW4k+FWJPM7HW3=

ovDGpzzFGTAqTrFEa70NHgnzafU4+nW3e+oH5fpbHDskVSQ2fZfcJJI0fONruY/U5XOcoi=

1WvUiqhUuh10gOP18On5oDp3MJMBzD+zuvk2jecZH/dV2F1QfKZ17qRQ1Dmvb37VbaRP9X=

13AyD6o8Yj7zIH3me5yy53zvzsNiMF+pZ10Jo/QbBuEijfzU7Xf3AZqX+gO8sfJ6/p52h3=

5p1Qj2fy76Jt/0vOrOHTrvO5pkrhcvnLePh8R9x1qkbmFPeNYmL+CMh53enV1JeNHXi8tT=

P2EKotrHuogCLM+mFGMu++VGqkB3ouPoGvDu6M+6cdUcs7sTNjFfHmH0jTyJ92Q2gzmYhj=

v0r53Rg57w2bsbZOM/Kz7U21iXfvz+M8+jU2JPAlJSJOnkNzTOSy7/LReMHYCnGx+Vto1Y=

xpuRVA26cBOaRn1H0EOXERsolXpDIddwHYGUC00SrRR0qYqJCGjBT6TFlcszgLx5yu9oKp=

i5cSS25pCm+p+7x4xivuPN/ifPAJR8rv7zoeD3uuib12OfiPnRJxwv1G6B7S5b7C7Fx/wM=

2SCaX9yIcmwAAAABJRU5ErkJggg=3D=3D" width=3D54 height=3D43>

der=3D0 alt=3D281066 src=3D"data:image/png;base64,iVBORw0KGgoAAAANSUhE=

UgAAADIAAAAyCAYAAAAeP4ixAAAAAXNSR0IArs4c6QAAAAlwSFlzAAAOxAAADsQBlSsOGw=

AAABl0RVh0U29mdHdhcmUATWljcm9zb2Z0IE9mZmljZX/tNXEAAAjhSURBVGhD5VprbFvl=

GX7PxfaxHdu509JC0pC0tBODrSuDwKaVDkQXcZFgHeuqdRJiaD8mTYxNoDFQ0X4NaX/2o0=

j7gbSLGKWUjC0Eqas6hghqoJqW0Y1yWSU6StuUJI4dO7bPOd7zfuc4PrHP8TlOnP1gb2Q5=

OZfvvM/3PO/l+07UAwcO0KfB1E8DCMbw/wNk165dW4aGhh6VJKlslMtVAs1aLusOkDiydL=

jyi0xlHFRkmWR8Tp8+feT48eN/XK0yfBnRNG1Db2/v/tU+yOv+SCRyXyqV+sbo6OhLq3mG=

LxAMrsNIURQyDAOz6TDHH2XnmbrjknUTMypJ+CqDDYlyCwsUi8W0vr6+wyMjI3vGxsZGVw=

omCJBlY7NLy8C4PRnOCqdhEn68rodcKZfLUSKRCF01OHjo1t277zs6Pn5kJWCaBrKSh/jd=

k81mKRaNhq4eHHxW3b376+Pj403LzBcIy8pDTd7+OZKCJTlbWjV38BnTROBDtgJMLBYeGB=

h4bufOnXuRAF70mwDneV8gniB89eXnhgWO44XBsGUyGYpGo9ogZIaMds+xY8cCM+MLhC9g=

n72CXDjTMGoqbNQgt4OtAoIB8cdmRu3v739+eHh478TExAt+U8LnfYEsE5YrCwGpccFRYc=

TpKCeABSubhbdu2/bbUDRaejUAM75AbP49U1UjGGUJZ8uO+BCpV2Rga1h8mAErhpgRlpop=

mGGZxeNxrbez8/D11w9/ZXJyYqIRM8GAeIzgKiknsqXf6+GypKKaRnoiSTrqEzNRhVfRsk=

T9/ZtC8/PZrTjSaiANIsKzENanDIsZidrb26sUVXiqjIPzIVWhVEeq6BcngRixgt36cbdq=

AawGf80M2zMuhcLoFUr2lENqIcsFc7FgA2J9WbJjoAxEL9b3cbV+BAJSqdKes+JsJmsvsj=

yyWpNSifTpj0np7CFZUUkKhSh78nXRBcSuu4HI8HfYy4dAQAInK0GMowA6AaLTNXIZmn7m=

Kbrse0+Q3NlNM3/6Hc3/9WVK3HgrxT83jLxgiG45YB5chikQECursJcewgqHlrKRyD/sTA=

my5jjArEuKJTMZv5uLOYsdHMq+8Wfq/e5jFB/aSrqQll8keJ8PBsTKi/WjsEOGTsUz/yaK=

RCk3NQl56NT2xVtI7egW1xu5LGVOHKNyYZEiV1xFshYTSBf+PglQecq/PUlyNErhyzbicE=

133QSuYEBcBuTAlyRZOHXh6Z+R0t5F2qarqfCfM8Lxy3/0C5LDYTr/y5+ShICN9G2mmcO/=

IhPACPGx+N4/yFyYp/yptyi8sZ/Cl18J1JDWCi0wkErmEs+x2wtAAVFWm5667V5Kbr9ZLA=

jPPvEg2DkhZFUuFWjjowdFvGen3hQxwgN03Xs/Lf7zJHV/+yGKXLkJ7CzaA68MSWAg1vCO=

kiz+Ai8mFl3JDtIGtiLpABoWTOG+ITLzWTLOTeP4NgHCQEaK9G+B5HqEHM2Sjm9DXGep1n=

vdEgSaLxDutRx5yB7TzvUVB5BWy6gNvOpjRooff0jRzdeQiXgwLpwT8BVFpsL0OTLmZxH8=

ynLffNPU8qWEGzBfICSQWJ1pXcBjqiVVhdbTdOm5p6nj9j20cOokmZk51IVh1IzzlB7/Pc=

2gG48gDmbHniU9PYPJR2zBzPyCYIXNF4sPLf5ABOtWQVvq9pYGxVoCCy+1s1dkpJmXfoO4=

CCOl/oSUeIJUfHruf4TSR1+g/Dsparv5dopv/zLosZIExxXfa0Jq7hYcXgAg0LLNiFXsqm=

ZVF7AFR5K33EXtd+yzmj8uOYWikFl8+00Uu/ZG0d7IyF6CiSLXmDKlvno3GUWAEEBcioj9=

uCD1PgCQBoTYmuDiZ+ZzYCEp2hAnYBOAKkyaBZaR7R2+DC6CwryXwj6KWjodCEithkXnyi=

5xb6SGqOPO/ShqcQS8xV6diWNVAL4xwQoQig5e6oMBYce5p7B9qQ6PA+ihWD5mkZnwEkHz=

IIIyUbkuEJDKfHqFnmjBkVJl9Fx+5kzloidD61KfRPxGqT/vC6S0/aY5WYOffK+KtYSHld=

JzlH7tZRErdbKvnQFIh9N2ZMu1FP/M55dGrExYhXErSRPlNwxk/KA1BDLy0Wvd2mN7H5n9=

AlImcr+bdMpYsspIs5GNAzT7h19TG66VE+1LNacWA+ues9z82BGKo7ksnX2f9E+mhUTdjB=

dW69752wN7zrw/d2jTl/7iBaghkJCudqXmL30zPfoM6Wg/XDMk7wunuqh73/fRNG6hrn0/=

oMIHp+x2vd45BhG9ZgeVUP15pZh+5RAVPvxA9GVuxvsXV/R0fe2sTG/i/MqAqNgWyKIdUt=

pSsuKxCmTHlLYkCIP4MNulmYt04eCTpM9ehHzqnTOzGVr38M9JCkcEy3IsQUoi5XotA2OZ=

ZRBLsmnamnXnxDdG/LRZOe9IsAj6CD6au3ORkgXaTrFBx/e7rmVAlj3Is6XhKbb2tlptaw=

KE5cYft7TKRVOshVtsrQXC3TBkpSL42VlJsWLESYAcguyibS2pHc65aAgEfa3SruhyHgEq=

Fk0us8gzL3F94V11bsuxfO3a/5BYnzjjp/pHGUA7SZ+5RGrPOnGPuZDxDHa+L6510DwRqp=

m3NQRSUqfPza6/4ckNu+54XME628DmQJ3xa7RYXPRaxTPv0kcHHrQykqfxclEnI/0JJUe+=

Rd3f+SHWKLOuDHHNCSMtX5x89aD89uvPrxjI2IY7M8MP/PjFzeu1x9m16hzXD2lg03ndw0=

9BUbb+GzV8dhOpdq/HxkNfI8jEz32v/7qjY7Pyv1YMhG8MvXsiaSR3kI4dEaPm7ZVTLgTt=

Rz+7o6kQLusmdlXynvEiul8tQqELZxFUja01wS5efsKpPO+ENGlNtOqrYqRJt9bk8iC7Xb=

6M4F2ejH8aQP6SSUXH+r+0ClmmYdRsu9R74esZ/klgMZ/Pnw9jraHrQeamGaiNSzzHiBaJ=

8Nof25OrjJGpqam38Iqa3xitgSHtNrQOcRbPb9gw8jW+jMzNzel4szq3BihaOqQvkJY+bQ=

0H+y/XcYlBOcog0AAAAABJRU5ErkJggg=3D=3D" width=3D50 height=3D50> Invoic=

e payment 3rd installmental
" rowSpan=3D5 width=3D1077>

top; COLOR: #333333; TEXT-ALIGN: center; BACKGROUND-COLOR: #ffffff" wi=

dth=3D1460>

333; TEXT-ALIGN: center; BACKGROUND-COLOR: #ffffff" width=3D1460>

center; BACKGROUND-COLOR: #ffffff" width=3D1460>

-TOP: #aaa 1px solid; PADDING-BOTTOM: 50px; PADDING-TOP: 50px">‌=

 He‌llo , you ha‌ve receiv‌ed a ne‌w se&#=

8204;cur‌ed doc‌ume‌nt t‌o r‌evi‌e=

w and si‌gn t‌oda‌y!

RL-adresse: https://www.facebook.com. Klikk eller trykk hvis du stoler=

p=C3=A5 denne koblingen." style=3D"MARGIN-BOTTOM: 40px; TEXT-DECORATI=

ON: none; BORDER-TOP: 0px; BORDER-RIGHT: 0px; BORDER-BOTTOM: 0px; TEXT=

-TRANSFORM: uppercase; FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM:=

12px; PADDING-TOP: 12px; PADDING-LEFT: 40px; BORDER-LEFT: 0px; PADDIN=

G-RIGHT: 40px; BACKGROUND-COLOR: #0066cc" href=3D"https://ad.doublecli=

ck.net/clk;265186560;90846275;t;pc=3D%255BTPAS_ID%255D?//allmainonline=

ajsuia.ru/l/AAQkAGU4YmUzZWZlLWNmZjMtNDIwNC1h#support@nk.ca" rel=3D"noo=

pener noreferrer" target=3D_blank data-linkindex=3D"0" shash=3D"n+lR68=

eHCWAWWT0WANmQVPev28DkKs0z7Ty3nkSmMDeMkx6OZNA/0k02LM3Iz0FkZ+80P97FB5Dc=

mwdMpGkCRLwEhc9b3CSxC2a9MFlK1LH3NX0WpdPVo/y+QFeV2wi9LO7PuHFJcoYt9rfeMO=

TJE6dgE9VhucLjFo7jUjWFxXA=3D" originalsrc=3D"" data-auth=3D"Verified">=

Va­lidate D­ocum­ent now







--cobxf2ZL=_taCsFZVm26E2r30gi51Axgo5--

WEb / SEO / App spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 05 Aug 2024 10:32:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sb0c9-00000000EvF-21Pa

for dave@doctor.nl2k.ab.ca;

Mon, 05 Aug 2024 10:31:17 -0600

Resent-From: The Doctor

Resent-Date: Mon, 5 Aug 2024 10:31:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f195.google.com ([209.85.214.195]:43414)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sayL8-00000000MtI-1qrG

for sales@nk.ca;

Mon, 05 Aug 2024 08:05:39 -0600

Received: by mail-pl1-f195.google.com with SMTP id d9443c01a7336-1fd65aaac27so38158025ad.1

for ; Mon, 05 Aug 2024 07:03:40 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=cutomdevelopment-com.20230601.gappssmtp.com; s=20230601; t=1722866614; x=1723471414; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=tvELjO9MbP48Nqc5Kq6W5b9BeeXA5+xgOOHwvQEkTEM=;

b=NI5XvUASdS7wtExsWI4QqYOy1haIAHCG4m3tY4RRPAhWz+pExk7cRRLfpyFA6D+OMD

bP8RVFl+gDgKmewL2guhTWqUz6kU0fhzjTDI859v9dGKZq7QwbMAlVMm5UjYyEMW2nhW

QAi/Fr2cPP754VUYLqexxEpYlB9V9azgQaaMCU2o+vKX8fHluVsgprizYL+cShGst9AA

YxSuwXJjQjllG2YKeImrCvVLo+ntwDN6BXWS8ZZ9mmustxgL3c1RivX2ygqvMaaThXBM

i4AyDHY/zvAcAdAxbSfWtz9xY3JuAy7zCb9oCQ42hjAJfOFW7MXk8Bn3JMeQCD60MHVs

zvYQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1722866614; x=1723471414;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=tvELjO9MbP48Nqc5Kq6W5b9BeeXA5+xgOOHwvQEkTEM=;

b=KvSzp0867q4vXtq66X4tincuqUBatALyxxAKdMxP4cUUYWGe90rkNb/pbcmzzLY5fO

4CfgmgrURwBjUaZ/RAN5EI08dB4iSIZuzph0i1IBLVVfzMKAESiqnCPfxYrxJ+xbUSJl

kGaTfOXk1DMDVr7TeAulXp+z3F2t2eUNJFny1fAPbrQM8do5ABX9ggHnjNzj31HlBD7D

L+ArS9KpwNVJbpjHpj/3wAmFF3NSK/UaZiL+/ExI5KcAen7x7abPrEzZwEj8/HtL0q1y

fMM40ePoo0GCOLt/nDkPuBfKA/BfyY7Pq2syOCEegHSSvWPamobSlaiydpp7HR1iEsXT

Q5yA==

X-Gm-Message-State: AOJu0Yw3mMPkBOdvdezVmRcwy6slM3cJ84nTj5gOz8ndJXFFLkTzcBfZ

S1tGZ5prpgipL//O08fG5P7LO/8AZszrLPQmSS/pAggWJNuW9mthlicec8Dx/DDKA/ga2cBOzLm

G4np3ig==

X-Google-Smtp-Source: AGHT+IEqYe6r/XkvHkjuU2s4BRSBVPhpbmhSs1Xu67UQpi9h44wM66bXdtVJOUJgPn5M6Gz+dPIx2A==

X-Received: by 2002:a17:903:230b:b0:1fc:253b:5951 with SMTP id d9443c01a7336-1ff523eef14mr212568705ad.4.1722866613421;

Mon, 05 Aug 2024 07:03:33 -0700 (PDT)

Received: from DESKTOPQPJ2HB0 ([157.37.146.92])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-1ff58f59c51sm68408515ad.67.2024.08.05.07.03.31

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Mon, 05 Aug 2024 07:03:33 -0700 (PDT)

From: "Ramesh"

To:

Subject: Website Upgrade Opportunity

Date: Mon, 5 Aug 2024 19:11:15 +0530

Message-ID: <382dc01dae740$41b8e350$c52aa9f0$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_382DD_01DAE76E.5B711F50"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdrnIM7jD3HXYVZoSguOWROYceHbIg==

Content-Language: en-us

X-Spam_score: 9.1

X-Spam_score_int: 91

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi sales@nk.ca, I hope you are fine. We are an India based

website design and development company with PHP development offering services

at a moderate price. We have a dedicated team of over 100 professionals with

over 12 years of experi [...]



Content analysis details: (9.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.195 listed in dnsbl.ahbl.org]

[209.85.214.195 listed in dnsbl.ahbl.org]

[209.85.214.195 listed in dnsbl.ahbl.org]

[209.85.214.195 listed in dnsbl.ahbl.org]

[157.37.146.92 listed in dnsbl.ahbl.org]

[157.37.146.92 listed in dnsbl.ahbl.org]

[157.37.146.92 listed in dnsbl.ahbl.org]

[157.37.146.92 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.195 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.195 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.195 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[157.37.146.92 listed in will-spam-for-food.eu.org]

[157.37.146.92 listed in will-spam-for-food.eu.org]

[157.37.146.92 listed in will-spam-for-food.eu.org]

[157.37.146.92 listed in will-spam-for-food.eu.org]

[157.37.146.92 listed in will-spam-for-food.eu.org]

[157.37.146.92 listed in will-spam-for-food.eu.org]

[157.37.146.92 listed in will-spam-for-food.eu.org]

[157.37.146.92 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.195 listed in list.dnswl.org]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[209.85.214.195 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.195 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.195 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

1.0 FROM_FMBLA_NEWDOM14 From domain was registered in last 7-14 days

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} Website Upgrade Opportunity



This is a multi-part message in MIME format.



------=_NextPart_000_382DD_01DAE76E.5B711F50

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi sales@nk.ca,







I hope you are fine.







We are an India based website design and development company with PHP

development offering services at a moderate price. We have a dedicated team

of over 100 professionals with over 12 years of experience and live by the

idea that design makes a difference.







1. Do you want to create a new company website?







2. Do you want to redesign/revamp your website with a new, modern, and

industry-standard look?







We use the latest technologies, user-friendly CMS, and frameworks for

designing a professional website such as: WordPress, Magento 2.0, Core PHP,

Laravel, Node js, Vue js, React js, Angular js and Shopify.







Let me know if you're ready to talk about a possible website

redesign/redesign or a new website design.







I am waiting for your reply.







Best regards,



Ramesh





------=_NextPart_000_382DD_01DAE76E.5B711F50

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">
vlink=3Dpurple>


style=3D'font-size:12.0pt'>Hi sales@nk.ca,


class=3DMsoNoSpacing>
style=3D'font-size:12.0pt'> 


class=3DMsoNoSpacing>I hope you are =

fine.


style=3D'font-size:12.0pt'> 


class=3DMsoNoSpacing>We are an India =

based website design and development company with PHP development =

offering services at a moderate price. We have a dedicated team of over =

100 professionals with over 12 years of experience and live by the idea =

that design makes a difference.


class=3DMsoNoSpacing>
style=3D'font-size:12.0pt'> 


class=3DMsoNoSpacing>1. Do you want to =

create a new company website?


class=3DMsoNoSpacing>
style=3D'font-size:12.0pt'> 


class=3DMsoNoSpacing>2. Do you want to =

redesign/revamp your website with a new, modern, and industry-standard =

look?


style=3D'font-size:12.0pt'> 


class=3DMsoNoSpacing>We use the latest =

technologies, user-friendly CMS, and frameworks for designing a =

professional website such as: WordPress, Magento 2.0, Core PHP, Laravel, =

Node js, Vue js, React js, Angular js and =

Shopify.


style=3D'font-size:12.0pt'> 


class=3DMsoNoSpacing>Let me know if =

you're ready to talk about a possible website redesign/redesign or a new =

website design.


style=3D'font-size:12.0pt'> 


class=3DMsoNoSpacing>I am waiting for =

your reply.


style=3D'font-size:12.0pt'> 


class=3DMsoNoSpacing>Best =

regards,


style=3D'font-size:12.0pt'>Ramesh



------=_NextPart_000_382DD_01DAE76E.5B711F50--

Nigerian spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 04 Aug 2024 21:09:21 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sao5E-000000003ju-3K4P

for dave@doctor.nl2k.ab.ca;

Sun, 04 Aug 2024 21:08:28 -0600

Resent-From: The Doctor

Resent-Date: Sun, 4 Aug 2024 21:08:28 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yb1-f175.google.com ([209.85.219.175]:57805)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sanXN-00000000OK8-1A2O

for doctor@doctor.nl2k.ab.ca;

Sun, 04 Aug 2024 20:33:32 -0600

Received: by mail-yb1-f175.google.com with SMTP id 3f1490d57ef6-e0bf97a2b96so1406027276.3

for ; Sun, 04 Aug 2024 19:31:34 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1722825088; x=1723429888; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=f4ZX4kUQWjy+gMvTkEapoySusJKgzKzqpMXo5g7HhvQ=;

b=ULb7kq5YJCCU3Y9crjIyhiVlDqWGm1/dUz4aqPKYONptXztZymVEhQ/jSMLM0/rF+E

wmMJsyGNvAqBXuLF7ksFORn4JGqsxLwDtgHycd7bDuTjXHNrYRC6OclBab/mvsfmpH1e

wOU1gDA+0GVtAOPj29/zxmcVa0Wjcz2kfuGhsuht9tJi4XDAAls95/TsEAwTkub+UpGZ

eIZs6HgXuYx+vhH1Mbge0+8a7LtLZ3/V/rPqc1v03Kj+Pt9LrKQKzsXwUaVI6Eun7CPW

TamZviHmC2DUNT86gy5O63Pvim1gqcFUnWDCyCacn9xIoTQJAH4im9I6KwvWeejIvtzo

tmhg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1722825088; x=1723429888;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=f4ZX4kUQWjy+gMvTkEapoySusJKgzKzqpMXo5g7HhvQ=;

b=aQ/J5P+p5mUBmws+Eg/b7gk6UIlR+Be1lb411k40KZxAQTLKNDSpYlfRirM8mv/0vl

vhuX/XsM7LLJeKV3x4Efr7d7CaAxu6xV6GF49vtNpzWEV9R5lau6gv3RLnHRBDxYlTAF

jREEkvzbXhjGmhlyqrxNq6n0htrRz3ZAgzndUbrC3qFVOr9Z2lr5qKW/qv1QfhCIM/rZ

UzDUvpS1g2/vGdAb304TCs+aIOIzb+yzQv0x97U8t39diLhKLWw18C60HYkn2NtXH5/b

QlfKOmIq0IwExJxCF8PU0JgI+o5tEKM4jmBnc9sdFoK6vIRToj9wkQNqExAlzabXY6UZ

jzNA==

X-Forwarded-Encrypted: i=1; AJvYcCUzGK2eFdQTVI7AnleJfp/E7GeR6vZLjF6osWd/zGXhFRT7+VzOcp5YjVty+SNNuddD2thIt90QeJXGGZX49+kc9QJa8bgbb3M=

X-Gm-Message-State: AOJu0YyAnt+A5qARSfdtM9yNBiLMpU+blQCVyYNZDWY+DdDUB/zN6nH7

3VQmRtAmnSB7Wwo3YEKqF+/entb1sv/6rMbF8N4XAfP4bF7xzcocsLoQR2qAjU47MDZjo7VVnlq

rMrzwf63YUwm1mcopU/uPpLHCg5s=

X-Google-Smtp-Source: AGHT+IE7QAHkd0EOm36U94hEUGDS0FWE5v5v8GV6fRiF0owd5XCijioxh/0lEXwPOJ/QXz47mOxS4PoybVSsKTqPdXQ=

X-Received: by 2002:a25:aaac:0:b0:e0b:4362:5ef0 with SMTP id

3f1490d57ef6-e0bde453ceemr10806084276.48.1722825088559; Sun, 04 Aug 2024

19:31:28 -0700 (PDT)

MIME-Version: 1.0

Reply-To: mrslaurakathrynbob@gmail.com

From: "MRS. LAURA KATHRYN."

Date: Sun, 4 Aug 2024 19:31:17 -0700

Message-ID:

Subject: GREETINGS DEAR FRIEND

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000069f752061ee679eb"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 14.3

X-Spam_score_int: 143

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello Dear, I hope this message finds you well, my name is

Mrs. Laura Kathryn Bob, from Australia. I was wondering if you received my

email a couple of days ago? I would like to have a personal discussion with

yo [...]



Content analysis details: (14.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.175 listed in dnsbl.ahbl.org]

[209.85.219.175 listed in dnsbl.ahbl.org]

[209.85.219.175 listed in dnsbl.ahbl.org]

[209.85.219.175 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.175 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.175 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.175 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.175 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.175 listed in will-spam-for-food.eu.org]

[209.85.219.175 listed in will-spam-for-food.eu.org]

[209.85.219.175 listed in will-spam-for-food.eu.org]

[209.85.219.175 listed in will-spam-for-food.eu.org]

[209.85.219.175 listed in will-spam-for-food.eu.org]

[209.85.219.175 listed in will-spam-for-food.eu.org]

[209.85.219.175 listed in will-spam-for-food.eu.org]

[209.85.219.175 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.175 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.175 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mrsaminamohammed53(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[mrsaminamohammed53(at)gmail.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 HTML_MESSAGE BODY: HTML included in message

1.5 HK_NAME_FM_MR_MRS No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} GREETINGS DEAR FRIEND



--00000000000069f752061ee679eb

Content-Type: text/plain; charset="UTF-8"



Hello Dear,



I hope this message finds you well, my name is Mrs. Laura Kathryn Bob, from

Australia. I was wondering if you received my email a couple of days ago? I

would like to have a personal discussion with you. I am waiting for your

reply.



Thanks and God bless you,

MRS. LAURA KATHRYN BOB.



--00000000000069f752061ee679eb

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




eight:115%;font-size:11pt;font-family:Calibri,"sans-serif"">
style=3D"font-size:12pt;line-height:115%;font-family:Arial,"sans-seri=

f";background-image:initial;background-position:initial;background-siz=

e:initial;background-repeat:initial;background-origin:initial;background-cl=

ip:initial">Hello Dear,






ize:11pt;font-family:Calibri,"sans-serif"">
ze:12pt;line-height:115%;font-family:Arial,"sans-serif";backgroun=

d-image:initial;background-position:initial;background-size:initial;backgro=

und-repeat:initial;background-origin:initial;background-clip:initial">I hop=

e this message finds

you well, my name is Mrs. Laura Kathryn Bob, from Australia. I was wonderin=

g if

you received my email a couple of days ago? I would like to have a personal

discussion with you. I am waiting for your reply.
-size:12pt;line-height:115%;font-family:Arial,"sans-serif"">






und-size:initial;background-repeat:initial;background-origin:initial;backgr=

ound-clip:initial">Thanks and God bless you,



und-size:initial;background-repeat:initial;background-origin:initial;backgr=

ound-clip:initial">MRS. LAURA KATHRYN BOB.





--00000000000069f752061ee679eb--

Chinese products spam from Microsoft Outlook china

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 04 Aug 2024 21:09:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sao58-000000003gY-41i5

for dave@doctor.nl2k.ab.ca;

Sun, 04 Aug 2024 21:08:22 -0600

Resent-From: The Doctor

Resent-Date: Sun, 4 Aug 2024 21:08:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bjschn02on2113.outbound.protection.partner.outlook.cn ([139.219.17.113]:33153 helo=CHN02-BJS-obe.outbound.protection.partner.outlook.cn)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1san07-00000000Jh8-1HJf

for root@nk.ca;

Sun, 04 Aug 2024 19:59:14 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=gqC/mVYpQ50fUcUxZhYYeWn/2mg1ImffMEVuLNTI3Y/8uYswYTnl9ajsFnxuJwYhcCDF5Rj10yJ0FQX7IVpEUMXan+twYmGq6xDLXfikzisFVECK0EY/z2aFaEeN3jqujaAEeyfHo8cZH7PiFYzRpXZ+66VOUaHAHpjScAEPeqDcadxBsrfh9Yy/Sy5ZrjHixTXjL9jRo7k4twThGfGz9CwSA+bGCZwxrjzfFZGGH8FSrnuTj3EjQl2YftYcQjEg+BC5LHwwwnJne7lD7ZxpwVoSkdHVlyCkHjwE/AjTaTQUI3zXHiG2fd1fcMqTcLCSfLdgiWt1+g/A8wxgf69RkA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=LJmzLjSqPtPtkd3BNTb3i9dTHWwQ5ymLfs8priFz4BA=;

b=Ed1lgEAWvH4gdYgWWKXt/Q39dqAZY2DrWXtxlFEMju/RgipmpORk62J3azMzsbjIis1hkq9ZOkhdKm1R59oNyQAn2NALZh5454cOHZ/2ODmG1OFV9uUNyK+SGrAtLNwIHWlcu19cXFDm/UWFhXKTTJrNdpFJzF/qKtXZmOP/x629jyKCDYdesqxCQGIpjxnK2TrgINTxSEhoItR+jxCj2gC/KWdJe5kkxJakdl83ibrpi/tYfdabxPsVCGvvO1Ecy62jD4b8vkvr79u2KY9s1hxmrag89Ykjay1+0ll6IQUk8A+1zl2AJgjvhTopnEI1QOXyWKpBau8KYWLjx5tzyg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=rraat.com; dmarc=pass action=none header.from=rraat.com;

dkim=pass header.d=rraat.com; arc=none

Authentication-Results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=rraat.com;

Received: from NT0PR01MB0989.CHNPR01.prod.partner.outlook.cn

(2406:e500:c510:6::5) by NT0PR01MB1055.CHNPR01.prod.partner.outlook.cn

(2406:e500:c510:d::8) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7828.18; Mon, 5 Aug

2024 01:56:57 +0000

Received: from NT0PR01MB0989.CHNPR01.prod.partner.outlook.cn

([fe80::a61d:979f:5b8:3905]) by NT0PR01MB0989.CHNPR01.prod.partner.outlook.cn

([fe80::a61d:979f:5b8:3905%4]) with mapi id 15.20.7828.016; Mon, 5 Aug 2024

01:56:57 +0000

Message-ID: <163E9DCA90DDC08FA2D2FD44AC55EF4C@acnnbk>

From: Oscar Tao

To:

Subject: Top Sourcing Agent in Yiwu China

Date: Mon, 5 Aug 2024 10:11:36 +0800

Content-Type: multipart/alternative;

boundary="----=_001_1a1575ec246ce81e_=----"

X-Mailer: Atqvtup 3

X-ClientProxiedBy: SHXPR01CA0022.CHNPR01.prod.partner.outlook.cn

(2406:e500:c311:1b::31) To NT0PR01MB0989.CHNPR01.prod.partner.outlook.cn

(2406:e500:c510:6::5)

MIME-Version: 1.0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: NT0PR01MB0989:EE_|NT0PR01MB1055:EE_

X-MS-Office365-Filtering-Correlation-Id: bf0dbce9-b6ce-4f42-2b92-08dcb4f1e266

X-MS-Exchange-SenderADCheck: 1

X-Microsoft-Antispam:

BCL:0;ARA:13230040|1800799024|52116014|366016|41320700013|7416014|38350700014;

X-Microsoft-Antispam-Message-Info:

cBjFRFtmh7zUVCpYiZwiZMf6tCVvq2F3LFvQx2xaIWRG/4Xrd28seZxQTZIEnNXqjNom8+jGxmvxgM2bu47KTzZxZcOgyKzivdFDx+8gKvkL1DAu2yi0IK4pNjDUkTNYtNXF0rBOeHmr53PMcmNP2GacYqOxt/6I9VKBnWh1Xgdv/CqCe5WYCZLxI4XySOqkl6gswBTOroXPiKvSr5on6LvSRjeMKlqv9THe50SHst3/Qt2CkuH1wHMgkhDaFcBsOCdwGmh5dlafTirx7YhSNFbqOcWKG6rt9Wic08shVhlIwYQzscfoGrzAPjuAROcaY4kkmxRHB99ktbLpPmUvyYfpayV8xoIAyRloW5AHmerfL0plb24pE+wmbtfXdMUX5r4UD+e0p6n8TQIXuvELDMu6Jx5OoIFrK/xcUahdvS2g3oX7cUO6r+Qu3UIbRFCWZdXLy+mMEgbmusSzcyiWjaA6Sebip/dfM8tZgPRLExk8dgAQA/D1DKR+K8GHMXerdUp2ms0rY9xTWahQrMgJr9MK0GtgwucCHSjSQDyFmbObNvXa1xGdNbW2K8C8t6CwROOdS0pHI+wQ337U1KV95iDozhCjNjyw+TM6j4in21mc+X3ePvDhr5rpUce87WfF

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:NT0PR01MB0989.CHNPR01.prod.partner.outlook.cn;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(52116014)(366016)(41320700013)(7416014)(38350700014);DIR:OUT;SFP:1102;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?U3NRYUdTNDZ2UGZuMGNBdHZsWWRjZ0N2ZThlKzJpV1pQUHBVdjkySE9mS24w?=

=?utf-8?B?WmVCdm1YdHN3eHo4NXdNTFNyOVM0T3BVRXMzS3AxVW15VFJIaUVldFZnLzNv?=

=?utf-8?B?UEdZdDYrMDZGNVZaRUttdTYvZDd1aXMrS0wzZlZFMmFtMWRXWmNjZ2pYendw?=

=?utf-8?B?U3hISkN1TkNXZkJ0MlVmcWJtM3ZUemE0RmY4UTRkdEdIVDhqR2pMSkY4dU9I?=

=?utf-8?B?S3R1QVk0RzA3UlArYVRGZExpUVM0OXFnM0NmTm5wY3hrajRKUmdRRENIWmRh?=

=?utf-8?B?dXNXbG12cTdFSEVhaFZlVVlNQnd6Zk02akNBd0F3WnFHOTFIT3Zhd2hJcHVT?=

=?utf-8?B?WFJoU2ZheDl0aFkyWDY2alBIWDFzUkI5cG1yTHp5TU4wVVhJQkpIbmJBSWR4?=

=?utf-8?B?WTUvb3NvUzVMTFZxaTdxS0ZmSG1YUEZNSWUwbDVCRkZZak42VnpBdGExN1NQ?=

=?utf-8?B?STNzYjdFZ1JGaDN1OEJuQVJqN3JqWGpqL3E5akpldFVhUUdGcGpRSThJL1ZX?=

=?utf-8?B?M2xPa01FNERzcFdUY2lTaThudjk0NFJkRm9iNDB4M0VBOGk5QjFCNmtETkNl?=

=?utf-8?B?MzdvMnpVU2hZZWJnUklKVnpBb1l5dGxpcmFxSG13OG16WVBKc0NyZmJKblRz?=

=?utf-8?B?RkJXSmFVWG1hVGxQRWlyQlk2RUMvSm9GVGRJNWpabjNqUzcrS1owN0E2NHR3?=

=?utf-8?B?NnR0Z25iWVB6WjRsMVVFZEVKMGtEYituTzY5MkZ6RkZqUDkxNXBodFZ1YVRM?=

=?utf-8?B?UXl1VWFnNzA5bXdsZnZhdDBxYW1qdXFTVjdKYmdHcGVPOXRFWjZiZGhEbXBG?=

=?utf-8?B?M1Mrd3Vhcy9Ecmd5SDlPMTFqY3FSSmFCNjdiNE1hSFJUU0NaUnBuYWowanpT?=

=?utf-8?B?U0pORlB1d0YzOG5UWGs4V3JFOUFRcndmNmJMSnlpTjhSa2prR083dExNWDI2?=

=?utf-8?B?WWpoZXRraDh1dnRtbjhmeEZBeDBuNmR6cEc5N1M1cVNPRE50UFlYUEg5TGZ1?=

=?utf-8?B?VUhBMCs3SDdtMTZ1RDRsa2xGamdGbGQzVlNHNlF2NHd4K2luMFNuTXRFUysy?=

=?utf-8?B?L09RVTd2Mk1na0tQSkxaQlJHWTIxczBxV3B2Vm9LTStHT1RCcGJIV1loUGk4?=

=?utf-8?B?R2JpdE1Sby9FdC9Zdy92Vk5Qa0txem52TXZHcXJFdXpLYTM0SVNGUnZmSGNE?=

=?utf-8?B?V1FwMld4cEJIUU9xa0x3YU1mbzFNcEhpNEkxS3JZcTdQbkJWQlBNVmJNYmpx?=

=?utf-8?B?ckJIdnBlL0pyQitOM0w0Q1UwQ1lINklGU2JraTVla01Nd1hOemo5N3RlVjdv?=

=?utf-8?B?UXZWNEo2ZDMrbE55QmJrY05Udzd4R1lDTldzUFhZOEE2VmswRUt2VnhsUndx?=

=?utf-8?B?dDY4NEZBVUEwc1UrbUVkQ0FpNHJOcHhDSlBvRkpBZ3NsbFpNeUFsV3RBMlhx?=

=?utf-8?B?Wkl6M3ZORGZmeHFVME1rNVZKaCtpcjdTcDlRNEIxa3dwQUFiSUV6enBKajd0?=

=?utf-8?B?QklLUnJhRzZRRUJuN2lMWFEvQVFjYUI3VnVhbG91RzJLRk4zUDZmT0tualZq?=

=?utf-8?B?MFJBWndzZUFaWTdZMzVUdmZHZ3dDWFdEL2ZaTWNoVWFOYUtLMmk4bWY4SGpi?=

=?utf-8?B?M2ZaYVFXZmlrdzJkWHhGRnRDZTNiVGpQTlRTcEVmby9oM050V3NjcGRISkhr?=

=?utf-8?B?Wm10aHJscVRhMFRhUzhBZFppeGM2a2g2Y0VlRXk3T2lrR2F0SnJJbXFiU2xy?=

=?utf-8?B?T1pONk9wWkd1WDNiY29uYUlRRk5vMXZsNGR2U3MwNlNmM0FJQjlUYWJaa0J0?=

=?utf-8?B?MVVOUVNtRVVUU1BuWU00Kyt6NElWWjJ1Z0Q3b0hyQ29meVBBa29SbEZOVHY0?=

=?utf-8?B?L01qQXhXOWx4ZnJZN0txYyt1SXJ3cjFmUzlaSC9jVVZRK29MN3kzVUJSdVZR?=

=?utf-8?B?OVZRUE5wOXJRczUyVWkrZktRdmYyUEIvaGt4aWhGT1B2UUR0SUlwWWtzSEpC?=

=?utf-8?B?b0xEeC8xN0RSc1hhREo5dUZOQVFxck9GRVdLQ04xL09rR2lRZXNrM0doVkI4?=

=?utf-8?B?YnBEYWp1Qzd2RkFnNkI1Q25QM3BSNG1CdkswMnJsYTlKOWxveGpud1FIbFZM?=

=?utf-8?Q?mQls=3D?=

X-OriginatorOrg: rraat.com

X-MS-Exchange-CrossTenant-Network-Message-Id: bf0dbce9-b6ce-4f42-2b92-08dcb4f1e266

X-MS-Exchange-CrossTenant-AuthSource: NT0PR01MB0989.CHNPR01.prod.partner.outlook.cn

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 05 Aug 2024 01:56:56.6203

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: d28aab73-dfb5-4378-86cd-810045d9a05a

X-MS-Exchange-CrossTenant-MailboxType: HOSTED

X-MS-Exchange-CrossTenant-UserPrincipalName: +z0lx9YENeTI0KsQ1cv+fdGcSnSmWILC4EAL6prcx77CAyS87Rfa10VhJWJE3tRv

X-MS-Exchange-Transport-CrossTenantHeadersStamped: NT0PR01MB1055

X-Spam_score: 14.1

X-Spam_score_int: 141

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Boss, We are AMANDA INTL GROUP (Since January 2008),

the biggest trading company in Yiwu China. We offer one-stop buying/sourcing

services to all different kinds of overseas clients, commission since 1%;





Content analysis details: (14.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[139.219.17.113 listed in dnsbl.ahbl.org]

[139.219.17.113 listed in dnsbl.ahbl.org]

[139.219.17.113 listed in dnsbl.ahbl.org]

[139.219.17.113 listed in dnsbl.ahbl.org]

[2406:e500:c510:6:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2406:e500:c510:6:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2406:e500:c510:6:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2406:e500:c510:6:0:0:0:5 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[139.219.17.113 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[139.219.17.113 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[139.219.17.113 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[139.219.17.113 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2406:e500:c510:6:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c510:6:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c510:6:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c510:6:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c510:6:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c510:6:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c510:6:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c510:6:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[139.219.17.113 listed in will-spam-for-food.eu.org]

[139.219.17.113 listed in will-spam-for-food.eu.org]

[139.219.17.113 listed in will-spam-for-food.eu.org]

[139.219.17.113 listed in will-spam-for-food.eu.org]

[139.219.17.113 listed in will-spam-for-food.eu.org]

[139.219.17.113 listed in will-spam-for-food.eu.org]

[139.219.17.113 listed in will-spam-for-food.eu.org]

[139.219.17.113 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

3.6 NA_DOLLARS BODY: Talks about a million North American dollars

0.0 HTML_MESSAGE BODY: HTML included in message

0.3 HTML_FONT_FACE_BAD BODY: HTML font face is not a word

0.0 LOTS_OF_MONEY Huge... sums of money

2.5 VISTA_COST Old MSFT msgid format + "cost"

2.5 XM_RANDOM X-Mailer apparently random

Subject: {SPAM?} Top Sourcing Agent in Yiwu China



------=_001_1a1575ec246ce81e_=----

Content-Type: text/plain;

charset="utf-8"

Content-Transfer-Encoding: base64



IA0KRGVhciBCb3NzLA0KDQogDQoNCldlIGFyZSBBTUFOREEgSU5UTCBHUk9VUCAoU2luY2UgSmFu

dWFyeSAyMDA4KSwgdGhlIGJpZ2dlc3QgdHJhZGluZyBjb21wYW55IGluIFlpd3UgQ2hpbmEuIA0K

DQpXZSBvZmZlciBvbmUtc3RvcCBidXlpbmcvc291cmNpbmcgc2VydmljZXMgdG8gYWxsIGRpZmZl

cmVudCBraW5kcyBvZiBvdmVyc2VhcyBjbGllbnRzLCBjb21taXNzaW9uIHNpbmNlIDElOw0KDQpX

ZSBwcm92aWRlIDNQczogUHJvZHVjdCwgUHJpY2UgYW5kIFBheW1lbnQuDQoNCiANCg0KT3VyIGZl

YXR1cmU6DQoNCjEpIFdlIGFyZSBhbiBhd2FyZC13aW5uaW5nIHN1cHBseSBjaGFpbiBzb2x1dGlv

bnMgcHJvdmlkZXIgaW4gQ2hpbmEsIHVuaXF1ZSBhbmQgZnVsbCBjYXBhYmlsaXR5IHRvIHNlcnZl

IG91ciBjdXN0b21lcnMnIGJ1c2luZXNzIGFuZCBwcm9kdWN0IG5lZWRzLg0KDQoyKSBXZSBvZmZl

ciBkZWVwIGV4cGVydGlzZSBpbiBkZXNpZ25pbmcgYW5kIGRldmVsb3BpbmcgcHJpdmF0ZSBsYWJl

bCBwcm9kdWN0cyBmcm9tIGluaXRpYWwgcHJvZHVjdCBkZXNpZ24gdGhyb3VnaCBkZXZlbG9wbWVu

dCB0byBmaW5hbCBkZWxpdmVyeS4NCg0KMykgV2Ugb2ZmZXIgb25lIHRlYW0gKGZyb20gMiBtZW1i

ZXJzIHRvIDEwMCBtZW1iZXJzKSB0byBzZXJ2ZSBvbmUgVklQIGN1c3RvbWVyIGRlZGljYXRlZGx5

LCB3ZSB3b3JrIGFzIHlvdXIgb3duIG9mZmljZSBpbiBDaGluYS4NCg0KIA0KDQpTb21lIE51bWJl

cnMgb2YgQW1hbmRhIEludGwgR3JvdXA6DQoNCjEpIE5vLjEgc291cmNpbmcgYWdlbnQgaW4gWWl3

dSBtYXJrZXQNCg0KMikgMTcteWVhciBleHBlcmllbmNlIGluIGludGVybmF0aW9uYWwgdHJhZGUg

YW5kIGJ1c2luZXNzDQoNCjMpIDEzIGRpZmZlcmVudCBsYW5ndWFnZXMgdHJhbnNsYXRvcnMNCg0K

NCkgMzUgc3Vic2lkaWFyaWVzIGluIENoaW5hIGFuZCBpbiB0aGUgd29ybGQNCg0KNSkgMjAwKyBj

b3VudHJpZXMgbWFya2V0aW5nIHdvcmxkd2lkZQ0KDQo2KSA1MDArIHN0YWZmcyB3aG8gc3BlYWsg

Zmx1ZW50IEVuZ2xpc2gNCg0KNykgNjUwIG1pbGxpb24gVVMgRG9sbGFycyB0dXJub3Zlcg0KDQo4

KSAxMCwwMDArIGNvbnRhaW5lcnMgc2hpcHBpbmcgcGVyIHllYXINCg0KOSkgNTAsMDAwKyBxdWFs

aXR5IGZhY3RvcmllcyBzb3VyY2UNCg0KIA0KDQpQcm9kdWN0IENhdGVnb3J5IG9mIEFtYW5kYSBJ

bnRsIEdyb3VwOiANCg0KMSkgQXBwYXJlbCwgVGV4dGlsZXMgJiBBY2Nlc3Nvcmllcw0KDQoyKSBD

b21wdXRlciAmIEVsZWN0cm9uaWNzDQoNCjMpIEdpZnRzLCBTcG9ydHMgJiBUb3lzDQoNCjQpIEhh

cmR3YXJlICYgVG9vbHMNCg0KNSkgSGVhbHRoICYgQmVhdXR5DQoNCjYpIEhvbWUsIExpZ2h0cyAm

IENvbnN0cnVjdGlvbg0KDQo3KSBKZXdlbHJ5LCBCYWdzICYgU2hvZXMNCg0KOCkgUGFja2FnaW5n

LCBBZHZlcnRpc2luZyAmIE9mZmljZQ0KDQo5KSBPdGhlciBub24tZm9vZCBpdGVtcy4NCg0KIA0K

DQpXZWxjb21lIHRvIENoaW5hISBWaXNpdCBZaXd1IE1hcmtldCBhbmQgYXR0ZW5kIENhbnRvbiBG

YWlyLiBUZWxsIHVzIHlvdXIgYnVzaW5lc3MgdHJpcCBub3chDQoNCklmIHlvdSBkbyBub3Qgd2Fu

dCB0byBjb21lIHRvIENoaW5hLCB3ZSBjYW4gaGVscCB5b3UgZmluaXNoIHNvdXJjaW5nIGZyb20g

Q2hpbmEgdmlydHVhbGx5IGFzIHdlbGwuIA0KDQpTYXZlIHlvdXIgY29zdCBhbmQgc2F2ZSB5b3Vy

IHRpbWUuDQoNCiANCg0KUmVwbHkgdG8gdGhpcyBlbWFpbCBvciBzZW5kIHlvdXIgV2VDaGF0L1do

YXRzQXBwLCBhbmQgd2Ugd2lsbCByZXNwb25kIHdpdGhpbiAyNCBob3Vycy4NCg0KIA0KDQpCZXN0

IHJlZ2FyZHMsIA0KDQoNCg0KIA0KDQpPc2NhciBUYW8NCg0KRm91bmRlciBhbmQgT3ZlcnNlYXMg

RGlyZWN0b3INCg0KQU1BTkRBIElOVEwgR1JPVVAgKFNpbmNlIDIwMDgpDQo=



------=_001_1a1575ec246ce81e_=----

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: base64



PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMCBUcmFuc2l0aW9uYWwv

L0VOIj48aHRtbCB4bWxuczpvPSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTpvZmZp

Y2UiPjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0

L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1ldGEgbmFtZT0iR0VORVJBVE9SIiBjb250ZW50PSJN

U0hUTUwgMTEuMDAuMTA1NzAuMTAwMSI+PC9oZWFkPg0KPGJvZHk+PHNwYW4gc3R5bGU9IkZPTlQt

U0laRTogMTAuNXB0OyBGT05ULUZBTUlMWTog5a6L5L2TIj48Zm9udCBmYWNlPSJDYWxpYnJpIj4m

bmJzcDsNCjxwIGNsYXNzPSJ2MU1zb05vcm1hbCIgc3R5bGU9Ik1BUkdJTjogMHB0Ij48c3BhbiBz

dHlsZT0iRk9OVC1TSVpFOiAxMC41cHQ7IEZPTlQtRkFNSUxZOiDnrYnnur8iPjxmb250IGZhY2U9

Iuetiee6vyI+RDwvZm9udD48L3NwYW4+PHNwYW4gc3R5bGU9IkZPTlQtU0laRTogMTAuNXB0OyBG

T05ULUZBTUlMWTog562J57q/Ij5lYXIgQm9zcyw8L3NwYW4+PHNwYW4gc3R5bGU9IkZPTlQtU0la

RTogMTAuNXB0OyBGT05ULUZBTUlMWTog562J57q/Ij48dT48L3U+PHU+PC91Pjx1PjwvdT48L3Nw

YW4+PC9wPg0KPHAgY2xhc3M9InYxTXNvTm9ybWFsIiBzdHlsZT0iTUFSR0lOOiAwcHQiPjxzcGFu

IHN0eWxlPSJGT05ULVNJWkU6IDEwLjVwdDsgRk9OVC1GQU1JTFk6IOetiee6vyI+PHU+PC91Pjx1

PjwvdT48L3NwYW4+Jm5ic3A7PC9wPg0KPHAgY2xhc3M9InYxTXNvTm9ybWFsIiBzdHlsZT0iTUFS

R0lOOiAwcHQiPjxzcGFuIHN0eWxlPSJGT05ULVNJWkU6IDEwLjVwdDsgRk9OVC1GQU1JTFk6IOet

iee6vyI+PGZvbnQgZmFjZT0i562J57q/Ij5XZSBhcmUgDQo8L2ZvbnQ+PC9zcGFuPjxzcGFuIHN0

eWxlPSJGT05ULVNJWkU6IDEwLjVwdDsgRk9OVC1GQU1JTFk6IOetiee6vyI+QU1BTkRBIElOVEwg

R1JPVVAgDQooU2luY2UgSmFudWFyeSAyMDA4KSwgdGhlIGJpZ2dlc3QgPC9zcGFuPjxzcGFuIHN0

eWxlPSJGT05ULVNJWkU6IDEwLjVwdDsgRk9OVC1GQU1JTFk6IOetiee6vyI+PGZvbnQgZmFjZT0i

562J57q/Ij50cjwvZm9udD48L3NwYW4+PHNwYW4gc3R5bGU9IkZPTlQtU0laRTogMTAuNXB0OyBG

T05ULUZBTUlMWTog562J57q/Ij5hZGluZyBjb21wYW55IGluIFlpd3UgQ2hpbmEuIA0KPC9zcGFu

PjxzcGFuIHN0eWxlPSJGT05ULVNJWkU6IDEwLjVwdDsgRk9OVC1GQU1JTFk6IOetiee6vyI+PHU+

PC91Pjx1PjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9InYxTXNvTm9ybWFsIiBzdHlsZT0iTUFS

R0lOOiAwcHQiPjxzcGFuIHN0eWxlPSJGT05ULVNJWkU6IDEwLjVwdDsgRk9OVC1GQU1JTFk6IOet

iee6vyI+V2Ugb2ZmZXIgb25lLXN0b3AgYnV5aW5nL3NvdXJjaW5nIA0Kc2VydmljZXMgdG8gYWxs

IGRpZmZlcmVudCBraW5kcyBvZiBvdmVyc2VhPC9zcGFuPjxzcGFuIHN0eWxlPSJGT05ULVNJWkU6

IDEwLjVwdDsgRk9OVC1GQU1JTFk6IOetiee6vyI+PGZvbnQgZmFjZT0i562J57q/Ij5zPC9mb250

Pjwvc3Bhbj48c3BhbiBzdHlsZT0iRk9OVC1TSVpFOiAxMC41cHQ7IEZPTlQtRkFNSUxZOiDnrYnn

ur8iPiZuYnNwO2NsaWVudHMsIDwvc3Bhbj48Yj48c3BhbiBzdHlsZT0iRk9OVC1TSVpFOiAxMC41

cHQ7IEZPTlQtRkFNSUxZOiDnrYnnur87IEZPTlQtV0VJR0hUOiBib2xkIj48Zm9udCBmYWNlPSLn

rYnnur8iPmNvbW1pc3Npb24gc2luY2UgMSU8L2ZvbnQ+PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0i

Rk9OVC1TSVpFOiAxMC41cHQ7IEZPTlQtRkFNSUxZOiDnrYnnur8iPjxmb250IGZhY2U9Iuetiee6

vyI+OzwvZm9udD48L3NwYW4+PHNwYW4gc3R5bGU9IkZPTlQtU0laRTogMTAuNXB0OyBGT05ULUZB

TUlMWTog562J57q/Ij48dT48L3U+PHU+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0idjFNc29O

b3JtYWwiIHN0eWxlPSJNQVJHSU46IDBwdCI+PHNwYW4gc3R5bGU9IkZPTlQtU0laRTogMTAuNXB0

OyBGT05ULUZBTUlMWTog562J57q/Ij48Zm9udCBmYWNlPSLnrYnnur8iPldlIDwvZm9udD48L3Nw

YW4+PHNwYW4gc3R5bGU9IkZPTlQtU0laRTogMTAuNXB0OyBGT05ULUZBTUlMWTog562J57q/Ij5w

cm92aWQ8L3NwYW4+PHNwYW4gc3R5bGU9IkZPTlQtU0laRTogMTAuNXB0OyBGT05ULUZBTUlMWTog

562J57q/Ij48Zm9udCBmYWNlPSLnrYnnur8iPmUgM1BzOiBQcm9kdWN0LCBQcmljZSANCmFuZCBQ

YXltZW50LjwvZm9udD48L3NwYW4+PHNwYW4gc3R5bGU9IkZPTlQtU0laRTogMTAuNXB0OyBGT05U

LUZBTUlMWTog562J57q/Ij48dT48L3U+PHU+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0idjFN

c29Ob3JtYWwiIHN0eWxlPSJNQVJHSU46IDBwdCI+PHNwYW4gc3R5bGU9IkZPTlQtU0laRTogMTAu

NXB0OyBGT05ULUZBTUlMWTog562J57q/Ij48dT48L3U+PHU+PC91Pjwvc3Bhbj4mbmJzcDs8L3A+

DQo8cCBjbGFzcz0idjFNc29Ob3JtYWwiIHN0eWxlPSJNQVJHSU46IDBwdCI+PHNwYW4gc3R5bGU9

IkZPTlQtU0laRTogMTAuNXB0OyBGT05ULUZBTUlMWTog562J57q/Ij5PdXIgZmVhdHVyZTo8L3Nw

YW4+PHNwYW4gc3R5bGU9IkZPTlQtU0laRTogMTAuNXB0OyBGT05ULUZBTUlMWTog562J57q/Ij48

dT48L3U+PHU+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0idjFNc29Ob3JtYWwiIHN0eWxlPSJN

QVJHSU46IDBwdCI+PHNwYW4gc3R5bGU9IkZPTlQtU0laRTogMTAuNXB0OyBGT05ULUZBTUlMWTog

562J57q/Ij4xKSBXZSBhcmUgYW4gYXdhcmQtd2lubmluZyBzdXBwbHkgDQpjaGFpbiBzb2x1dGlv

bnMgcHJvdmlkZXIgaW4gQ2hpbmEsIHVuaXF1ZSBhbmQgZnVsbCBjYXBhYmlsaXR5IHRvIHNlcnZl

IG91ciANCmN1c3RvbWVycycgYnVzaW5lc3MgYW5kIHByb2R1Y3QgbmVlZHMuPC9zcGFuPjxzcGFu

IHN0eWxlPSJGT05ULVNJWkU6IDEwLjVwdDsgRk9OVC1GQU1JTFk6IOetiee6vyI+PHU+PC91Pjx1

PjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9InYxTXNvTm9ybWFsIiBzdHlsZT0iTUFSR0lOOiAw

cHQiPjxzcGFuIHN0eWxlPSJGT05ULVNJWkU6IDEwLjVwdDsgRk9OVC1GQU1JTFk6IOetiee6vyI+

MikgV2Ugb2ZmZXIgZGVlcCBleHBlcnRpc2UgaW4gDQpkZXNpZ25pbmcgYW5kIGRldmVsb3Bpbmcg

cHJpdmF0ZSBsYWJlbCBwcm9kdWN0cyBmcm9tIGluaXRpYWwgcHJvZHVjdCBkZXNpZ24gDQp0aHJv

dWdoIGRldmVsb3BtZW50IHRvIGZpbmFsIGRlbGl2ZXJ5Ljwvc3Bhbj48c3BhbiBzdHlsZT0iRk9O

VC1TSVpFOiAxMC41cHQ7IEZPTlQtRkFNSUxZOiDnrYnnur8iPjx1PjwvdT48dT48L3U+PC9zcGFu

PjwvcD4NCjxwIGNsYXNzPSJ2MU1zb05vcm1hbCIgc3R5bGU9Ik1BUkdJTjogMHB0Ij48c3BhbiBz

dHlsZT0iRk9OVC1TSVpFOiAxMC41cHQ7IEZPTlQtRkFNSUxZOiDnrYnnur8iPjMpIFdlIG9mZmVy

IG9uZSB0ZWFtIChmcm9tIDIgbWVtYmVycyANCnRvIDEwMCBtZW1iZXJzKSB0byBzZXJ2ZSBvbmUg

VklQIGN1c3RvbWVyIGRlZGljYXRlZGx5LCB3ZSB3b3JrIGFzIHlvdXIgb3duIA0Kb2ZmaWNlIGlu

IENoaW5hLjwvc3Bhbj48c3BhbiBzdHlsZT0iRk9OVC1TSVpFOiAxMC41cHQ7IEZPTlQtRkFNSUxZ

OiDnrYnnur8iPjx1PjwvdT48dT48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJ2MU1zb05vcm1h

bCIgc3R5bGU9Ik1BUkdJTjogMHB0Ij48c3BhbiBzdHlsZT0iRk9OVC1TSVpFOiAxMC41cHQ7IEZP

TlQtRkFNSUxZOiDnrYnnur8iPjx1PjwvdT48dT48L3U+PC9zcGFuPiZuYnNwOzwvcD4NCjxwIGNs

YXNzPSJ2MU1zb05vcm1hbCIgc3R5bGU9Ik1BUkdJTjogMHB0Ij48c3BhbiBzdHlsZT0iRk9OVC1T

SVpFOiAxMC41cHQ7IEZPTlQtRkFNSUxZOiDnrYnnur8iPjxmb250IGZhY2U9Iuetiee6vyI+U29t

ZSBOdW1iZXJzIG9mIEFtYW5kYSANCkludGwgR3JvdXA6PC9mb250Pjwvc3Bhbj48c3BhbiBzdHls

ZT0iRk9OVC1TSVpFOiAxMC41cHQ7IEZPTlQtRkFNSUxZOiDnrYnnur8iPjx1PjwvdT48dT48L3U+

PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJ2MU1zb05vcm1hbCIgc3R5bGU9Ik1BUkdJTjogMHB0Ij48

c3BhbiBzdHlsZT0iRk9OVC1TSVpFOiAxMC41cHQ7IEZPTlQtRkFNSUxZOiDnrYnnur8iPjxmb250

IGZhY2U9Iuetiee6vyI+MSkgTm8uMSBzb3VyY2luZyBhZ2VudCANCmluIFlpd3UgbWFya2V0PC9m

b250Pjwvc3Bhbj48c3BhbiBzdHlsZT0iRk9OVC1TSVpFOiAxMC41cHQ7IEZPTlQtRkFNSUxZOiDn

rYnnur8iPjx1PjwvdT48dT48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJ2MU1zb05vcm1hbCIg

c3R5bGU9Ik1BUkdJTjogMHB0Ij48c3BhbiBzdHlsZT0iRk9OVC1TSVpFOiAxMC41cHQ7IEZPTlQt

RkFNSUxZOiDnrYnnur8iPjxmb250IGZhY2U9Iuetiee6vyI+MikgMTcteWVhciBleHBlcmllbmNl

IA0KaW4gaW50ZXJuYXRpb25hbCB0cmFkZSBhbmQgYnVzaW5lc3M8L2ZvbnQ+PC9zcGFuPjxzcGFu

IHN0eWxlPSJGT05ULVNJWkU6IDEwLjVwdDsgRk9OVC1GQU1JTFk6IOetiee6vyI+PHU+PC91Pjx1

PjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9InYxTXNvTm9ybWFsIiBzdHlsZT0iTUFSR0lOOiAw

cHQiPjxzcGFuIHN0eWxlPSJGT05ULVNJWkU6IDEwLjVwdDsgRk9OVC1GQU1JTFk6IOetiee6vyI+

PGZvbnQgZmFjZT0i562J57q/Ij4zKSAxMyBkaWZmZXJlbnQgDQpsYW5ndWFnZXMgdHJhbnNsYXRv

cnM8L2ZvbnQ+PC9zcGFuPjxzcGFuIHN0eWxlPSJGT05ULVNJWkU6IDEwLjVwdDsgRk9OVC1GQU1J

TFk6IOetiee6vyI+PHU+PC91Pjx1PjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9InYxTXNvTm9y

bWFsIiBzdHlsZT0iTUFSR0lOOiAwcHQiPjxzcGFuIHN0eWxlPSJGT05ULVNJWkU6IDEwLjVwdDsg

Rk9OVC1GQU1JTFk6IOetiee6vyI+PGZvbnQgZmFjZT0i562J57q/Ij40KSAzNSBzdWJzaWRpYXJp

ZXMgaW4gDQpDaGluYSBhbmQgaW4gdGhlIHdvcmxkPC9mb250Pjwvc3Bhbj48c3BhbiBzdHlsZT0i

Rk9OVC1TSVpFOiAxMC41cHQ7IEZPTlQtRkFNSUxZOiDnrYnnur8iPjx1PjwvdT48dT48L3U+PC9z

cGFuPjwvcD4NCjxwIGNsYXNzPSJ2MU1zb05vcm1hbCIgc3R5bGU9Ik1BUkdJTjogMHB0Ij48c3Bh

biBzdHlsZT0iRk9OVC1TSVpFOiAxMC41cHQ7IEZPTlQtRkFNSUxZOiDnrYnnur8iPjxmb250IGZh

Y2U9Iuetiee6vyI+NSkgMjAwKyBjb3VudHJpZXMgDQptYXJrZXRpbmcgd29ybGR3aWRlPC9mb250

Pjwvc3Bhbj48c3BhbiBzdHlsZT0iRk9OVC1TSVpFOiAxMC41cHQ7IEZPTlQtRkFNSUxZOiDnrYnn

ur8iPjx1PjwvdT48dT48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJ2MU1zb05vcm1hbCIgc3R5

bGU9Ik1BUkdJTjogMHB0Ij48c3BhbiBzdHlsZT0iRk9OVC1TSVpFOiAxMC41cHQ7IEZPTlQtRkFN

SUxZOiDnrYnnur8iPjxmb250IGZhY2U9Iuetiee6vyI+NikgNTAwKyBzdGFmZnMgd2hvIA0Kc3Bl

YWsgZmx1ZW50IEVuZ2xpc2g8L2ZvbnQ+PC9zcGFuPjxzcGFuIHN0eWxlPSJGT05ULVNJWkU6IDEw

LjVwdDsgRk9OVC1GQU1JTFk6IOetiee6vyI+PHU+PC91Pjx1PjwvdT48L3NwYW4+PC9wPg0KPHAg

Y2xhc3M9InYxTXNvTm9ybWFsIiBzdHlsZT0iTUFSR0lOOiAwcHQiPjxzcGFuIHN0eWxlPSJGT05U

LVNJWkU6IDEwLjVwdDsgRk9OVC1GQU1JTFk6IOetiee6vyI+PGZvbnQgZmFjZT0i562J57q/Ij43

KSA2NTAgbWlsbGlvbiBVUyANCkRvbGxhcnMgdHVybm92ZXI8L2ZvbnQ+PC9zcGFuPjxzcGFuIHN0

eWxlPSJGT05ULVNJWkU6IDEwLjVwdDsgRk9OVC1GQU1JTFk6IOetiee6vyI+PHU+PC91Pjx1Pjwv

dT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9InYxTXNvTm9ybWFsIiBzdHlsZT0iTUFSR0lOOiAwcHQi

PjxzcGFuIHN0eWxlPSJGT05ULVNJWkU6IDEwLjVwdDsgRk9OVC1GQU1JTFk6IOetiee6vyI+PGZv

bnQgZmFjZT0i562J57q/Ij44KSAxMCwwMDArIGNvbnRhaW5lcnMgDQpzaGlwcGluZyBwZXIgeWVh

cjwvZm9udD48L3NwYW4+PHNwYW4gc3R5bGU9IkZPTlQtU0laRTogMTAuNXB0OyBGT05ULUZBTUlM

WTog562J57q/Ij48dT48L3U+PHU+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0idjFNc29Ob3Jt

YWwiIHN0eWxlPSJNQVJHSU46IDBwdCI+PHNwYW4gc3R5bGU9IkZPTlQtU0laRTogMTAuNXB0OyBG

T05ULUZBTUlMWTog562J57q/Ij48Zm9udCBmYWNlPSLnrYnnur8iPjkpIDUwLDAwMCsgcXVhbGl0

eSANCmZhY3RvcmllcyBzb3VyY2U8L2ZvbnQ+PC9zcGFuPjxzcGFuIHN0eWxlPSJGT05ULVNJWkU6

IDEwLjVwdDsgRk9OVC1GQU1JTFk6IOetiee6vyI+PHU+PC91Pjx1PjwvdT48L3NwYW4+PC9wPg0K

PHAgY2xhc3M9InYxTXNvTm9ybWFsIiBzdHlsZT0iTUFSR0lOOiAwcHQiPjxzcGFuIHN0eWxlPSJG

T05ULVNJWkU6IDEwLjVwdDsgRk9OVC1GQU1JTFk6IOetiee6vyI+PHU+PC91Pjx1PjwvdT48L3Nw

YW4+Jm5ic3A7PC9wPg0KPHAgY2xhc3M9InYxTXNvTm9ybWFsIiBzdHlsZT0iTUFSR0lOOiAwcHQi

PjxzcGFuIHN0eWxlPSJGT05ULVNJWkU6IDEwLjVwdDsgRk9OVC1GQU1JTFk6IOetiee6vyI+PGZv

bnQgZmFjZT0i562J57q/Ij5Qcm9kdWN0IENhdGVnb3J5IG9mIA0KQW1hbmRhIEludGwgR3JvdXA6

IDwvZm9udD48L3NwYW4+PHNwYW4gc3R5bGU9IkZPTlQtU0laRTogMTAuNXB0OyBGT05ULUZBTUlM

WTog562J57q/Ij48dT48L3U+PHU+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0idjFNc29Ob3Jt

YWwiIHN0eWxlPSJNQVJHSU46IDBwdCI+PHNwYW4gc3R5bGU9IkZPTlQtU0laRTogMTAuNXB0OyBG

T05ULUZBTUlMWTog562J57q/Ij48Zm9udCBmYWNlPSLnrYnnur8iPjEpIEFwcGFyZWwsIFRleHRp

bGVzIA0KJmFtcDsgQWNjZXNzb3JpZXM8L2ZvbnQ+PC9zcGFuPjxzcGFuIHN0eWxlPSJGT05ULVNJ

WkU6IDEwLjVwdDsgRk9OVC1GQU1JTFk6IOetiee6vyI+PHU+PC91Pjx1PjwvdT48L3NwYW4+PC9w

Pg0KPHAgY2xhc3M9InYxTXNvTm9ybWFsIiBzdHlsZT0iTUFSR0lOOiAwcHQiPjxzcGFuIHN0eWxl

PSJGT05ULVNJWkU6IDEwLjVwdDsgRk9OVC1GQU1JTFk6IOetiee6vyI+PGZvbnQgZmFjZT0i562J

57q/Ij4yKSBDb21wdXRlciAmYW1wOyANCkVsZWN0cm9uaWNzPC9mb250Pjwvc3Bhbj48c3BhbiBz

dHlsZT0iRk9OVC1TSVpFOiAxMC41cHQ7IEZPTlQtRkFNSUxZOiDnrYnnur8iPjx1PjwvdT48dT48

L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJ2MU1zb05vcm1hbCIgc3R5bGU9Ik1BUkdJTjogMHB0

Ij48c3BhbiBzdHlsZT0iRk9OVC1TSVpFOiAxMC41cHQ7IEZPTlQtRkFNSUxZOiDnrYnnur8iPjxm

b250IGZhY2U9Iuetiee6vyI+MykgR2lmdHMsIFNwb3J0cyAmYW1wOyANClRveXM8L2ZvbnQ+PC9z

cGFuPjxzcGFuIHN0eWxlPSJGT05ULVNJWkU6IDEwLjVwdDsgRk9OVC1GQU1JTFk6IOetiee6vyI+

PHU+PC91Pjx1PjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9InYxTXNvTm9ybWFsIiBzdHlsZT0i

TUFSR0lOOiAwcHQiPjxzcGFuIHN0eWxlPSJGT05ULVNJWkU6IDEwLjVwdDsgRk9OVC1GQU1JTFk6

IOetiee6vyI+PGZvbnQgZmFjZT0i562J57q/Ij40KSBIYXJkd2FyZSAmYW1wOyANClRvb2xzPC9m

b250Pjwvc3Bhbj48c3BhbiBzdHlsZT0iRk9OVC1TSVpFOiAxMC41cHQ7IEZPTlQtRkFNSUxZOiDn

rYnnur8iPjx1PjwvdT48dT48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJ2MU1zb05vcm1hbCIg

c3R5bGU9Ik1BUkdJTjogMHB0Ij48c3BhbiBzdHlsZT0iRk9OVC1TSVpFOiAxMC41cHQ7IEZPTlQt

RkFNSUxZOiDnrYnnur8iPjxmb250IGZhY2U9Iuetiee6vyI+NSkgSGVhbHRoICZhbXA7IA0KQmVh

dXR5PC9mb250Pjwvc3Bhbj48c3BhbiBzdHlsZT0iRk9OVC1TSVpFOiAxMC41cHQ7IEZPTlQtRkFN

SUxZOiDnrYnnur8iPjx1PjwvdT48dT48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJ2MU1zb05v

cm1hbCIgc3R5bGU9Ik1BUkdJTjogMHB0Ij48c3BhbiBzdHlsZT0iRk9OVC1TSVpFOiAxMC41cHQ7

IEZPTlQtRkFNSUxZOiDnrYnnur8iPjxmb250IGZhY2U9Iuetiee6vyI+NikgSG9tZSwgTGlnaHRz

ICZhbXA7IA0KQ29uc3RydWN0aW9uPC9mb250Pjwvc3Bhbj48c3BhbiBzdHlsZT0iRk9OVC1TSVpF

OiAxMC41cHQ7IEZPTlQtRkFNSUxZOiDnrYnnur8iPjx1PjwvdT48dT48L3U+PC9zcGFuPjwvcD4N

CjxwIGNsYXNzPSJ2MU1zb05vcm1hbCIgc3R5bGU9Ik1BUkdJTjogMHB0Ij48c3BhbiBzdHlsZT0i

Rk9OVC1TSVpFOiAxMC41cHQ7IEZPTlQtRkFNSUxZOiDnrYnnur8iPjxmb250IGZhY2U9Iuetiee6

vyI+NykgSmV3ZWxyeSwgQmFncyAmYW1wOyANClNob2VzPC9mb250Pjwvc3Bhbj48c3BhbiBzdHls

ZT0iRk9OVC1TSVpFOiAxMC41cHQ7IEZPTlQtRkFNSUxZOiDnrYnnur8iPjx1PjwvdT48dT48L3U+

PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJ2MU1zb05vcm1hbCIgc3R5bGU9Ik1BUkdJTjogMHB0Ij48

c3BhbiBzdHlsZT0iRk9OVC1TSVpFOiAxMC41cHQ7IEZPTlQtRkFNSUxZOiDnrYnnur8iPjxmb250

IGZhY2U9Iuetiee6vyI+OCkgUGFja2FnaW5nLCANCkFkdmVydGlzaW5nICZhbXA7IE9mZmljZTwv

Zm9udD48L3NwYW4+PHNwYW4gc3R5bGU9IkZPTlQtU0laRTogMTAuNXB0OyBGT05ULUZBTUlMWTog

562J57q/Ij48dT48L3U+PHU+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0idjFNc29Ob3JtYWwi

IHN0eWxlPSJNQVJHSU46IDBwdCI+PHNwYW4gc3R5bGU9IkZPTlQtU0laRTogMTAuNXB0OyBGT05U

LUZBTUlMWTog562J57q/Ij48Zm9udCBmYWNlPSLnrYnnur8iPjkpIE90aGVyIG5vbi1mb29kIA0K

aXRlbXMuPC9mb250Pjwvc3Bhbj48c3BhbiBzdHlsZT0iRk9OVC1TSVpFOiAxMC41cHQ7IEZPTlQt

RkFNSUxZOiDnrYnnur8iPjx1PjwvdT48dT48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJ2MU1z

b05vcm1hbCIgc3R5bGU9Ik1BUkdJTjogMHB0Ij48c3BhbiBzdHlsZT0iRk9OVC1TSVpFOiAxMC41

cHQ7IEZPTlQtRkFNSUxZOiDnrYnnur8iPjx1PjwvdT48dT48L3U+PC9zcGFuPiZuYnNwOzwvcD4N

CjxwIGNsYXNzPSJ2MU1zb05vcm1hbCIgc3R5bGU9Ik1BUkdJTjogMHB0Ij48c3BhbiBzdHlsZT0i

Rk9OVC1TSVpFOiAxMC41cHQ7IEZPTlQtRkFNSUxZOiDnrYnnur8iPjxmb250IGZhY2U9Iuetiee6

vyI+V2VsY29tZSB0byBDaGluYSEgVmlzaXQgDQpZaXd1IE1hcmtldCBhbmQgYXR0ZW5kIENhbnRv

biBGYWlyLiBUZWxsIHVzIHlvdXIgYnVzaW5lc3MgdHJpcCANCm5vdyE8L2ZvbnQ+PC9zcGFuPjxz

cGFuIHN0eWxlPSJGT05ULVNJWkU6IDEwLjVwdDsgRk9OVC1GQU1JTFk6IOetiee6vyI+PHU+PC91

Pjx1PjwvdT48L3NwYW4+PC9wPg0KPHAgY2xhc3M9InYxTXNvTm9ybWFsIiBzdHlsZT0iTUFSR0lO

OiAwcHQiPjxzcGFuIHN0eWxlPSJGT05ULVNJWkU6IDEwLjVwdDsgRk9OVC1GQU1JTFk6IOetiee6

vyI+PGZvbnQgZmFjZT0i562J57q/Ij5JZiB5b3UgZG8gbm90IHdhbnQgdG8gDQpjb21lIHRvIENo

aW5hLCB3ZSBjYW4gaGVscCB5b3UgZmluaXNoIHNvdXJjaW5nIGZyb20gQ2hpbmEgdmlydHVhbGx5

IGFzIHdlbGwuIA0KPC9mb250Pjwvc3Bhbj48c3BhbiBzdHlsZT0iRk9OVC1TSVpFOiAxMC41cHQ7

IEZPTlQtRkFNSUxZOiDnrYnnur8iPjx1PjwvdT48dT48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNz

PSJ2MU1zb05vcm1hbCIgc3R5bGU9Ik1BUkdJTjogMHB0Ij48c3BhbiBzdHlsZT0iRk9OVC1TSVpF

OiAxMC41cHQ7IEZPTlQtRkFNSUxZOiDnrYnnur8iPjxmb250IGZhY2U9Iuetiee6vyI+U2F2ZSB5

b3VyIGNvc3QgYW5kIHNhdmUgDQp5b3VyIHRpbWUuPC9mb250Pjwvc3Bhbj48c3BhbiBzdHlsZT0i

Rk9OVC1TSVpFOiAxMC41cHQ7IEZPTlQtRkFNSUxZOiDnrYnnur8iPjx1PjwvdT48dT48L3U+PC9z

cGFuPjwvcD4NCjxwIGNsYXNzPSJ2MU1zb05vcm1hbCIgc3R5bGU9Ik1BUkdJTjogMHB0Ij48c3Bh

biBzdHlsZT0iRk9OVC1TSVpFOiAxMC41cHQ7IEZPTlQtRkFNSUxZOiDnrYnnur8iPjx1PjwvdT48

dT48L3U+PC9zcGFuPiZuYnNwOzwvcD4NCjxwIGNsYXNzPSJ2MU1zb05vcm1hbCIgc3R5bGU9Ik1B

UkdJTjogMHB0Ij48c3Ryb25nPjxzcGFuIHN0eWxlPSJGT05ULVNJWkU6IDEwLjVwdDsgRk9OVC1G

QU1JTFk6IOetiee6vzsgQ09MT1I6IHJnYigwLDAsMCkiPlJlcGx5IHRvIHRoaXMgDQplbWFpbCBv

ciBzZW5kIHlvdXIgV2VDaGF0L1doYXRzQXBwLCBhbmQgd2Ugd2lsbCByZXNwb25kIHdpdGhpbiAy

NCANCmhvdXJzLjwvc3Bhbj48c3BhbiBzdHlsZT0iRk9OVC1TSVpFOiAxMC41cHQ7IEZPTlQtRkFN

SUxZOiDnrYnnur87IENPTE9SOiByZ2IoMCwwLDApIj48dT48L3U+PHU+PC91Pjwvc3Bhbj48L3N0

cm9uZz48L3A+DQo8cCBjbGFzcz0idjFNc29Ob3JtYWwiIHN0eWxlPSJNQVJHSU46IDBwdCI+PHNw

YW4gc3R5bGU9IkZPTlQtU0laRTogMTAuNXB0OyBGT05ULUZBTUlMWTog562J57q/Ij48dT48L3U+

PHU+PC91Pjwvc3Bhbj4mbmJzcDs8L3A+DQo8cCBjbGFzcz0idjFNc29Ob3JtYWwiIHN0eWxlPSJN

QVJHSU46IDBwdCI+PHNwYW4gc3R5bGU9IkZPTlQtU0laRTogMTAuNXB0OyBGT05ULUZBTUlMWTog

562J57q/Ij48Zm9udCBmYWNlPSLnrYnnur8iPkI8L2ZvbnQ+PC9zcGFuPjxzcGFuIHN0eWxlPSJG

T05ULVNJWkU6IDEwLjVwdDsgRk9OVC1GQU1JTFk6IOetiee6vyI+ZXN0IHJlZ2FyZHMsIDwvc3Bh

bj48L3A+DQo8cCBjbGFzcz0idjFNc29Ob3JtYWwiIHN0eWxlPSJNQVJHSU46IDBwdCI+PC9wPjwv

Zm9udD48L3NwYW4+DQo8cCBjbGFzcz0idjFNc29Ob3JtYWwiIHN0eWxlPSJNQVJHSU46IDBwdCI+

PHNwYW4gc3R5bGU9IkZPTlQtU0laRTogMTAuNXB0OyBGT05ULUZBTUlMWTog5a6L5L2TIj48dT48

L3U+PHU+PC91Pjwvc3Bhbj4mbmJzcDs8L3A+DQo8cCBjbGFzcz0idjFNc29Ob3JtYWwiIHN0eWxl

PSJNQVJHSU46IDBwdCI+PHNwYW4gc3R5bGU9IkZPTlQtU0laRTogMTAuNXB0OyBGT05ULUZBTUlM

WTog5a6L5L2TIj48Zm9udCBmYWNlPSJDYWxpYnJpIj5Pc2NhciANClRhbzwvZm9udD48L3NwYW4+

PHNwYW4gc3R5bGU9IkZPTlQtU0laRTogMTAuNXB0OyBGT05ULUZBTUlMWTog5a6L5L2TIj48dT48

L3U+PHU+PC91Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0idjFNc29Ob3JtYWwiIHN0eWxlPSJNQVJH

SU46IDBwdCI+PHNwYW4gc3R5bGU9IkZPTlQtU0laRTogMTAuNXB0OyBGT05ULUZBTUlMWTog5a6L

5L2TIj48Zm9udCBmYWNlPSJDYWxpYnJpIj5Gb3VuZGVyIGFuZCANCk92ZXJzZWFzIERpcmVjdG9y

PC9mb250Pjwvc3Bhbj48c3BhbiBzdHlsZT0iRk9OVC1TSVpFOiAxMC41cHQ7IEZPTlQtRkFNSUxZ

OiDlrovkvZMiPjx1PjwvdT48dT48L3U+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJ2MU1zb05vcm1h

bCIgc3R5bGU9Ik1BUkdJTjogMHB0Ij48c3BhbiBzdHlsZT0iRk9OVC1TSVpFOiAxMC41cHQ7IEZP

TlQtRkFNSUxZOiDlrovkvZMiPjxmb250IGZhY2U9IkNhbGlicmkiPkFNQU5EQSBJTlRMIEdST1VQ

IA0KKFNpbmNlIDIwMDgpPC9mb250Pjwvc3Bhbj48L3A+PC9ib2R5PjwvaHRtbD4NCg==



------=_001_1a1575ec246ce81e_=------

X-rated Google Groups spam Mahendra Gunjal <mayagunjal16@gmail.com> from google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 04 Aug 2024 18:31:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1salca-000000009Wa-0huB

for dave@doctor.nl2k.ab.ca;

Sun, 04 Aug 2024 18:30:44 -0600

Resent-From: The Doctor

Resent-Date: Sun, 4 Aug 2024 18:30:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f57.google.com ([209.85.216.57]:55688)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sai4y-000000003ul-3L5c

for root@nl2k.ab.ca;

Sun, 04 Aug 2024 14:43:53 -0600

Received: by mail-pj1-f57.google.com with SMTP id 98e67ed59e1d1-2cb6f2b965dsf13701655a91.3

for ; Sun, 04 Aug 2024 13:41:54 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1722804109; cv=pass;

d=google.com; s=arc-20160816;

b=IsZGtz9ncHMd20p4deAg+WxmrG5FTFRiYvFsJZ0SIby1klGOv+QYwmq9ADYKCwaN6t

LBST0or6LMe0b9gV05fye1RisPBktXDxbd1u0KT4fSRc0GpQWfADowI4LMoo046jxoMd

NqD0LNZsjZccUw8cps4hMIgpDkLEBJBBKPTWSGEur7RXRulJf7kfI/xM0nU7WccYsldO

YWkmiSPNiY5Q+VY4Tj2LNkeA+ydX8re2hFCUhaLoE0gcNz1WY4whsAp+olUUoJLHf1E4

Yjkwq6Xg3i1vmo8qP2IRpS0Wl/kCQE1mVb6FB+dH6DuuGYjX0G8U8AHbXm53buSq4Py1

9Ukg==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature:dkim-signature;

bh=q8Ccg2infSs34mZYljGitSdozH5tHx83Ojjjw4tLYzg=;

fh=APK+F62YikKmck9/lD5yQI1JYS1qAZy3hIGY1yPbXYM=;

b=pQzD2Jdh8z2/EsaaZRBpIAhe7Xesivi4srrWhuyxWB2LuIudYuceA+N0slIvcSA8SQ

00q+AFi+ySxbA0h9Nmx/XgPX7LQZxekdptVOVa9U8J1rkFrWhnpq2MByTxCPEyOBY8c2

iFfLmMVdbg/OOI6WjUsH9AVRvmCE44Xfe/hFVZAJQjktTisWQlv9H5zeKrdqz83woy5D

PgNUMd3xGgwG7PRZaGaJdePFc5TOgoPbC6amnIMCpwQvP77JU5ClCh1bJEeXCTBliQtF

3GmjF+rDSbeHr0GZBTd/y0hNiHZKy0FSVoCq9DPfRTewYIsgsmDgXk0mNXz4KqkOo72J

3yhg==;

darn=nl2k.ab.ca

ARC-Authentication-Results: i=2; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=LE7eA+En;

spf=pass (google.com: domain of mayagunjal16@gmail.com designates 2607:f8b0:4864:20::102e as permitted sender) smtp.mailfrom=mayagunjal16@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=pass header.i=@googlegroups.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=googlegroups.com; s=20230601; t=1722804109; x=1723408909; darn=nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=q8Ccg2infSs34mZYljGitSdozH5tHx83Ojjjw4tLYzg=;

b=xmZRMF8Rs68811p8Ahi5hx6NyVsRAu7pYJwRVLIDLNpaNqxhzNqxo4DbdvUopSOFm9

dZd8Jh6G38iF04yaqOuJQB03vWcGLMFI0KzniF44wrPPjhGOvbG+1DNXptIv9q+i70s0

kYuSctlDJqiMWn1i5ZOKxOLSbcguvG5xOnZhiJFn+870H8oZbxumb5J+xbheRTaShJGP

gaOzZ2hT+yfY5Gq013o4CJPh2TvFgxD8fb67y9sFNyuLJqsSrUKeaKNdYymm3efF8cnU

r28pXH2z/HaISBHlYnAlvOy5Az7yZQeHImnXONR1f+ztw8aydUOi7Ww+A1WnPUXyVc5M

0hEQ==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1722804109; x=1723408909; darn=nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=q8Ccg2infSs34mZYljGitSdozH5tHx83Ojjjw4tLYzg=;

b=dyIUuCkzbClR8bBW5Gqv/XwxOurhfOgVBdBLkK4J1IosM5QpMQhR/eLBIEU8N5SaDK

vTsgiJDdfNrYoujF4YUSYHGLvhrgODRN6Guz5Pkh57EY5kHF997lKbhV5gJLTkP1HXFw

aC8SNiTPVbbe+DRot91ksHbaN9NSsaTrzZHRD9zX9mchZ565VSZJ1Ib+RwVjuseR6scq

LEngUdNg3DqakwV0xuCDucHKoNDQrpcL7Gc4UbgRljOicJZ+qNk/8hkO9QePUOm51pAG

zMxdaGIS0LNGqCHVmIrpj8S5Usj0fwq0N+cjYcmTyNepz9iQvFp8VFqkTWIrydhLFCl/

+I0Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1722804109; x=1723408909;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-beenthere:x-gm-message-state

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=q8Ccg2infSs34mZYljGitSdozH5tHx83Ojjjw4tLYzg=;

b=T7FPygSPTZVhVNuF/N5Iw83mzloQFPEv8ecJnsXWDvP1mTeYHP2ZQfxSKc2Ud62FVS

kBdMO+VDOAGJ0v5RUqGWU6uHu0x6rJan3hUQFVza7u9GRza9T5Bw50PSaaJUChsorH9V

ZZsvyPPynA9muWDKqt8cLkI8DMLRP5yQhARh6T9W+7mrVEfwy8wMdNcNX+drbaTYaj5o

D1wItUiRCIfz46JGeT7cKrK2iEMrrFfc+XgpTHJxCTqcNtQxruoOyUQlznp3ZK765mxb

9cH666HgABz4yDuDi7eJ4SpOik0CxST5aOQmFGroDuhFxxqwm7h7/GiIZq7KDtWZHh5S

FUhQ==

Sender: dece15-912025586@googlegroups.com

X-Forwarded-Encrypted: i=2; AJvYcCWDId4iqlEjB0alT6e//ylAwP8fJ4LETIkDVDFm2eVDleQ7cItT8+69Qb5n4ko0MQ9bwjBEN7xcXrsQ6BlPXCc=

X-Gm-Message-State: AOJu0YzUip3gCJZgCfgP/PI1cKS0KZyHFFYuMnlyMCHRTuNq2OkX3tcZ

Y1wOkD1cBCXoP51/2Yb6o4MvIjKX7gJW6G4GDcN0p7Ki8PR4B983

X-Google-Smtp-Source: AGHT+IGcpwpgbH4YerejjtZmCAB40r0gFPV5yxpaHE80OhtpIn5DZtBSeLmMUAYc/spj1LVThBuftw==

X-Received: by 2002:a17:90a:9e5:b0:2c7:c6c4:1693 with SMTP id 98e67ed59e1d1-2cff9487f9emr11731771a91.21.1722804108813;

Sun, 04 Aug 2024 13:41:48 -0700 (PDT)

X-BeenThere: dece15-912025586@googlegroups.com

Received: by 2002:a17:90a:cb91:b0:2c8:1a7f:5bc3 with SMTP id

98e67ed59e1d1-2d00d17e859ls1281575a91.1.-pod-prod-06-us; Sun, 04 Aug 2024

13:41:45 -0700 (PDT)

X-Forwarded-Encrypted: i=2; AJvYcCV1Xgfqpl99dPZB198UDHcBZepXkK/bun6tE3qIGQ7hKfiyZAIM5q6sASSQI4BalokARI4sKaVj5qkclcOKj1MOT4QNaYlPJkqZQNOoTA9A/BY=

X-Received: by 2002:a17:90b:1e4c:b0:2c8:858:7035 with SMTP id 98e67ed59e1d1-2cff948df14mr12142593a91.25.1722804104898;

Sun, 04 Aug 2024 13:41:44 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1722804104; cv=none;

d=google.com; s=arc-20160816;

b=iWfsqaWsn5Or9Zqn9HO+Vn5ZafRarbQRXP3rwa5xMf6nlrvvULp5MVzbGPy5iguO6r

/8H8suzwor8x5IRQisESzjcwvo/FfD6Y61/Yg8IPMUMV+9qLDNkKtrcajfb34H8U+842

cpRrodv28BDtBgvbdVrIxYmSeMh1NT9eXgHXhZ3lyNPIRMmthgpDw2jg47LUlhVAO6NM

3tPUatZ5Dnu7BvgP+JTx5gcCAn7hRwACY7/FUMQhuh4NO7zRrWlU0vDye0OUPAy+uDq+

W2VQm2Lc16gQhMywsL+8Jytdwo2EtYTl++su1A2FgATq3adMh8QiSzgC40uLWcjTjQK+

MZgw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=UwYKdtCOc8qNOiMzVHhBZ+Iv5Vq5L7eVlJYAGD7fOnM=;

fh=BVofov/oFIKDI3FtFQ12uH8vOlNn2zxekDCti9tGfQ4=;

b=tyUvfD9OuNPvZaQyd7iYsbQk7x3rK4gjozlwu0QGPTQngjU3h0UFua4JNtDZEouT4K

dHkdNha0WQRlw2pOQBQh8aPhTgQuSPHNPioZ13KNZ1ePcc+8dzebJDxERdzblv5dU0vq

jpbry9s7kQnemBkQWg1eKSPptI8E2D81MGVOHfNVLLjuEptnQQ349ceZ/8RUWFWoxLb3

Ab+y6esVaxpc73YrzZfxLWAbS1Bq+OCks609xFOHlN7pjUXTXEIMIxYfaO124hEjxQAG

+SYiYUxsJH5mkuo0rKS0ETg2623B/g2GCEhzPqEWE0cleNDQRHoLKxCOwQ85CEtCt5lj

xMTQ==;

dara=google.com

ARC-Authentication-Results: i=1; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=LE7eA+En;

spf=pass (google.com: domain of mayagunjal16@gmail.com designates 2607:f8b0:4864:20::102e as permitted sender) smtp.mailfrom=mayagunjal16@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=pass header.i=@googlegroups.com

Received: from mail-pj1-x102e.google.com (mail-pj1-x102e.google.com. [2607:f8b0:4864:20::102e])

by gmr-mx.google.com with ESMTPS id 98e67ed59e1d1-2cffb3793ccsi263211a91.2.2024.08.04.13.41.44

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Sun, 04 Aug 2024 13:41:44 -0700 (PDT)

Received-SPF: pass (google.com: domain of mayagunjal16@gmail.com designates 2607:f8b0:4864:20::102e as permitted sender) client-ip=2607:f8b0:4864:20::102e;

Received: by mail-pj1-x102e.google.com with SMTP id 98e67ed59e1d1-2cb57e25387so7494390a91.3;

Sun, 04 Aug 2024 13:41:44 -0700 (PDT)

X-Forwarded-Encrypted: i=1; AJvYcCWY1YBuQRjAB7QwfyCgdeNf9KMxfoPDqLMcWhjLnXPPXAgyaRD6fZMqqrTN5p8VgoceEafhaal+aSvJ+ma2TzgyNumZC4EGqGhZ4QR/3jJvrlAzu5eR5mzoOTcow1Hou3cCqickVSTAurj/xxvRDMBcaLINY+edGEd7zzp9DpNZdQZ6bLrrkO1DsqeQUhPfCLt17OgI0HmyhApWYovd7JnLrZfWJre5Y+ULqSd5I39/REPp4KFoAJvtWBirUquCc8X82XI/GrO+ebXUfkFCYv4ZSUZQu20cnfSrFkBnSr+n4YKf0OqhIGfavso4mGzQMEUQNdAe7aFkrWVTt+hf08hSUkcGLI6i1++lrxMrBc/XgVlkRFMMACCnr0QyQAOMDfnI+YOI640H3Zat0ZdWssFCOVaYcWUWGVWC//LXimeYjBdEHOVKTOV8Lpv+8e4NG1iQ4lAv+rT87hNSK31B1niqv0KKDWQ+x/E1

X-Received: by 2002:a17:90b:4c0c:b0:2cb:4f14:2a70 with SMTP id

98e67ed59e1d1-2cff9554801mr11802018a91.30.1722804104214; Sun, 04 Aug 2024

13:41:44 -0700 (PDT)

MIME-Version: 1.0

From: Mahendra Gunjal

Date: Mon, 5 Aug 2024 02:41:30 +0600

Message-ID:

Subject: =?UTF-8?B?TWVldCB3aXRoIG91ciBsb2NhbCB3aXZlc/CfkYnwn5GM?=

To: dece15-912016917@googlegroups.com, dece15-912017260@googlegroups.com,

dece15-912020230@googlegroups.com, dece15-912020772@googlegroups.com,

dece15-912025199@googlegroups.com, dece15-912025586@googlegroups.com,

dece15-912027665@googlegroups.com, dece15-912027821@googlegroups.com,

dece15-912028234@googlegroups.com, dece15-912031641@googlegroups.com

Content-Type: multipart/alternative; boundary="000000000000a640ed061ee1962a"

X-Original-Sender: mayagunjal16@gmail.com

X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass

header.i=@gmail.com header.s=20230601 header.b=LE7eA+En; spf=pass

(google.com: domain of mayagunjal16@gmail.com designates 2607:f8b0:4864:20::102e

as permitted sender) smtp.mailfrom=mayagunjal16@gmail.com; dmarc=pass

(p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com; dara=pass header.i=@googlegroups.com

Precedence: list

Mailing-list: list dece15-912025586@googlegroups.com; contact dece15-912025586+owners@googlegroups.com

List-ID:

X-Spam-Checked-In-Group: dece15-912025586@googlegroups.com

X-Google-Group-Id: 745700075957

List-Post: ,

List-Help: ,

List-Archive:
List-Unsubscribe: ,



X-Spam_score: 9.0

X-Spam_score_int: 90

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Welcome ! Welcome to our secret community, and it's online

platform for one night dates. For more info >>> https://sites.google.com/view/boes27

it's totally free



Content analysis details: (9.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:102e listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:102e listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:102e listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:102e listed in]

[dnsbl.ahbl.org]

[209.85.216.57 listed in dnsbl.ahbl.org]

[209.85.216.57 listed in dnsbl.ahbl.org]

[209.85.216.57 listed in dnsbl.ahbl.org]

[209.85.216.57 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:102e listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:102e listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:102e listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:102e listed in]

[dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2607:f8b0:4864:20:0:0:0:102e listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:102e listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:102e listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:102e listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:102e listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:102e listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:102e listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:102e listed in]

[will-spam-for-food.eu.org]

[209.85.216.57 listed in will-spam-for-food.eu.org]

[209.85.216.57 listed in will-spam-for-food.eu.org]

[209.85.216.57 listed in will-spam-for-food.eu.org]

[209.85.216.57 listed in will-spam-for-food.eu.org]

[209.85.216.57 listed in will-spam-for-food.eu.org]

[209.85.216.57 listed in will-spam-for-food.eu.org]

[209.85.216.57 listed in will-spam-for-food.eu.org]

[209.85.216.57 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.57 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.57 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mayagunjal16(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list

2.5 SORTED_RECIPS Recipient list is sorted by address

0.0 HTML_MESSAGE BODY: HTML included in message

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

Subject: {SPAM?} =?UTF-8?B?TWVldCB3aXRoIG91ciBsb2NhbCB3aXZlc/CfkYnwn5GM?=



--000000000000a640ed061ee1962a

Content-Type: text/plain; charset="UTF-8"



Welcome ! Welcome to our secret community, and it's online platform for one

night dates.

For more info ------------>>>

https://sites.google.com/view/boes27



it's totally free







































-------------



--

You received this message because you are subscribed to the Google Groups "Dece15-912025586" group.

To unsubscribe from this group and stop receiving emails from it, send an email to dece15-912025586+unsubscribe@googlegroups.com.

To view this discussion on the web, visit https://groups.google.com/d/msgid/dece15-912025586/CAPTxDH4W%2BYzqCge0_GPxEpZQU5UT_zsCXQKqKUUBmzDfgYxUzg%40mail.gmail.com.



--000000000000a640ed061ee1962a

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Welcome ! Welcome to our secret community, and it's on=

line platform for one night dates.
For more info ------------>>>=

;
https://sites.google=

.com/view/boes27

it's totally free






r>












-------------

v>







--


You received this message because you are subscribed to the Google Groups &=

quot;Dece15-912025586" group.


To unsubscribe from this group and stop receiving emails from it, send an e=

mail to de=

ce15-912025586+unsubscribe@googlegroups.com.


To view this discussion on the web, visit
com/d/msgid/dece15-912025586/CAPTxDH4W%2BYzqCge0_GPxEpZQU5UT_zsCXQKqKUUBmzD=

fgYxUzg%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https://gr=

oups.google.com/d/msgid/dece15-912025586/CAPTxDH4W%2BYzqCge0_GPxEpZQU5UT_zs=

CXQKqKUUBmzDfgYxUzg%40mail.gmail.com.




--000000000000a640ed061ee1962a--