Nigerian spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 08 Oct 2024 12:27:01 -0600

Received: from mail-ej1-f68.google.com ([209.85.218.68]:59898)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1syEtO-00000000H1F-1FCM

for dave@doctor.nl2k.ab.ca;

Tue, 08 Oct 2024 12:26:22 -0600

Received: by mail-ej1-f68.google.com with SMTP id a640c23a62f3a-a9960371b62so225232566b.3

for ; Tue, 08 Oct 2024 11:23:11 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1728411785; x=1729016585; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=x9RElXgXFP3Y5kjIgR6CqP8wrj3FOFk8cQWJbpcziy0=;

b=PmxWtHWUl1IJ1bfjUYZ0iiyyZM10kNYf8pIBY6CJKceWFtaUBsB12In3/f4B8BDfMs

QOCkWcvWoMkG3e5q3aqIPvEPoTaew3HmAuQzSFOUbRfDnIFyvyAkM6S5v/0W/GkbGNpA

mnkyYu03o2A7kHUgAA/biexzKkcdGRw7AfS4SY/bzzw29vEhdhEDbJP0cttyl/2kjAHb

+xTBv+8E8ldWRbD+ehGrJd1dDibuQLQg77Fujqmd+lUSrwEjzf/s8wAftY5zSRu5pB1l

HNI9Vx2kch+cwk2U6Guge/V7KjHhQKEzFpBRv8LJSmwZFaKqRBi7r8wRSnWulyYAHUdi

E1qg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1728411785; x=1729016585;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=x9RElXgXFP3Y5kjIgR6CqP8wrj3FOFk8cQWJbpcziy0=;

b=FNQwD+LGL2xMf2TUHShWpoLoX3jjk8W6+sG9T4KwhLqTsDcv1e7kuKjHzWyzPyNpMF

RD3BNLDrtzCRA7heHAKSSkwZ0uXjOQHS1w5Y+IMpoPvY3uj1zyA3YqEZ/qSyCSZZRjtu

JSA6lw52i5EN3FGfV+IWu17UjISC4r4+CNp919yoTHqHA8EIWrLwjv7p4QWk2A8Cxz9O

thuPPyU/xhyMH+OUngAIdBCEi0TfDCKo9HEC5rRxXLE1w5S3BUBFt5jfS3wnsxIOUXg+

17/XqsaK3McfBIEI0B9KWG4uePIjR+O8WZXf9TxuyX68k+bjP5vxsTIxmdCuEmmOFEta

8suA==

X-Forwarded-Encrypted: i=1; AJvYcCUsFYmC1W0FdRg45MyVUDWi3ZSNqeKMExqn3qz1DQLaMgbzR1w3XUfoIb3tjeUyEF4iutkd@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YzO9maZegdeGgdMxe6Ea0loY6ONkjkXVgehYYPGsB1gXDv3I0eG

K5sD5/okzk3OXax4WHg0bqqnViBNt8HpMSAltVVSaohN1FpMmrdAfECjoEpimNDj8w/mjKf51+S

I5iD798pBlujJOEu/YR3eMOS9pQ==

X-Google-Smtp-Source: AGHT+IE18mQ97p7O8G6xptuNKe47m3dge0V5KyQsj9Ybptj69Dqu0CemIrfC3t5SIu5NIkSmHVBZcoh9V+aJ8tdl8D0=

X-Received: by 2002:a05:600c:1daa:b0:42f:8515:e482 with SMTP id

5b1f17b1804b1-42f85ab59b8mr131229635e9.9.1728411129644; Tue, 08 Oct 2024

11:12:09 -0700 (PDT)

MIME-Version: 1.0

From: Aisha Gaddafi

Date: Tue, 8 Oct 2024 11:11:56 -0700

Message-ID:

Subject: dearest beloved friend,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000688f7f0623fb1383"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 19.6

X-Spam_score_int: 196

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: dearest beloved friend, Please forgive me for stressing you

with my predicaments and I am sorry to approach you through this media. It

is because it serves as the fastest means of communication. I came across

your email from my personal search and I decided to contact you. Mrs. Aisha

Al-Gaddafi is my name, the only biological daughter of the Former late Libyan

president, Col. Muammar Gaddafi. [...]



Content analysis details: (19.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.218.68 listed in wl.mailspike.net]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.218.68 listed in will-spam-for-food.eu.org]

[209.85.218.68 listed in will-spam-for-food.eu.org]

[209.85.218.68 listed in will-spam-for-food.eu.org]

[209.85.218.68 listed in will-spam-for-food.eu.org]

[209.85.218.68 listed in will-spam-for-food.eu.org]

[209.85.218.68 listed in will-spam-for-food.eu.org]

[209.85.218.68 listed in will-spam-for-food.eu.org]

[209.85.218.68 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.218.68 listed in dnsbl.ahbl.org]

[209.85.218.68 listed in dnsbl.ahbl.org]

[209.85.218.68 listed in dnsbl.ahbl.org]

[209.85.218.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.218.68 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.218.68 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.218.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.218.68 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.218.68 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[nancylee7153(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[nancylee7153(at)gmail.com]

0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

2.5 MILLION_USD BODY: Talks about millions of dollars

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLY From and body contain different freemails

0.0 T_MONEY_PERCENT X% of a lot of money for you

2.5 BODY_EMAIL_419_FRAUD_GM Email address in body is likely advance fee

fraud collector mailbox

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

1.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

Subject: {SPAM?} dearest beloved friend,



--000000000000688f7f0623fb1383

Content-Type: text/plain; charset="UTF-8"



dearest beloved friend,



Please forgive me for stressing you with my predicaments and I am sorry to

approach you through this media. It is because it serves as the fastest

means of communication.



I came across your email from my personal search and I decided to contact

you. Mrs. Aisha Al-Gaddafi is my name, the only biological daughter of the

Former late Libyan president, Col. Muammar Gaddafi. I am a single mother

and a widow. I have investment funds worth the sum of Twenty-seven million

Two hundred thousand United States Dollars ($27,200,000.00 million USD) for

investment. I am interested in you for investment project assistance in

your country because of my current refugee status here in Oman. I shall

compensate you with 30% of the total sum after the funds have been

successfully transferred into your account. I am also willing to negotiate

an investment/business profit sharing ratio with you based on the future

investment earning profits.



If you are interested, reply to me urgently for more details on my private

email address below (aishagaddafilibya5@gmail.com).



Best Regards,

Yours Truly,

Aisha Gaddafi.



--000000000000688f7f0623fb1383

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



dearest beloved friend,

Please forgive me for stres=

sing you with my predicaments and I am sorry to approach you through this m=

edia. It is because it serves as the fastest means of communication.

>I came across your email from my personal search and I decided to contact =

you. Mrs. Aisha Al-Gaddafi is my name, the only biological daughter of the =

Former late Libyan president, Col. Muammar Gaddafi. I am a single mother an=

d a widow. I have investment funds worth the sum of Twenty-seven million Tw=

o hundred thousand United States Dollars ($27,200,000.00 million USD) for i=

nvestment. I am interested in you for investment project assistance in your=

country because of my current refugee status here in Oman. I shall compens=

ate you with 30% of the total sum after the funds have been successfully tr=

ansferred into your account. I am also willing to negotiate an investment/b=

usiness profit sharing ratio with you based on the future investment earnin=

g profits.

If you are interested, reply to me urgently for more deta=

ils on my private email address below (
@gmail.com">aishagaddafilibya5@gmail.com
).

Best Regards,
Your=

s Truly,
Aisha Gaddafi.




--000000000000688f7f0623fb1383--

Compensation spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 08 Oct 2024 12:10:03 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1syEdq-00000000GbT-2jFy

for dave@doctor.nl2k.ab.ca;

Tue, 08 Oct 2024 12:09:02 -0600

Resent-From: The Doctor

Resent-Date: Tue, 8 Oct 2024 12:09:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f176.google.com ([209.85.167.176]:60772)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1syC1a-00000000Aej-1Si0

for root@doctor.nl2k.ab.ca;

Tue, 08 Oct 2024 09:21:26 -0600

Received: by mail-oi1-f176.google.com with SMTP id 5614622812f47-3e3a47ae905so3175555b6e.1

for ; Tue, 08 Oct 2024 08:19:29 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=unpad-ac-id.20230601.gappssmtp.com; s=20230601; t=1728400763; x=1729005563; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=d3/Vi59kbcqHAgRN8ADKChDk/457D0kHOHd6Xv3C38k=;

b=RmL+k/eiJcmofZukgujL+Ju9wbg3sXG5tjrfAa2tj0LiuO4rVb2GjZddbUHPtrIPL4

xwAXVwkX4cTEcux/LsD/V26vNtwanYK4d306uGThtVWUdMSW0xcWlYESpNHAZuroAs3Q

XHrOirDbyzI26OkFbf43RRfMt14sVDho3pXia8CgtHgNfwOddcHgy1qzTG3DG2A5qhBB

HF4gWrUtJpRnpVNxSsKhE0N0m2a/lmkJKu2+lIKvRsOtnPok/Xww171NLkrVDW7mVWEj

saIk5ZSeqS1DBpTf89Co2mbplca1SypxbuuJvEnXw9RArLr5qQ2f0+nfFRtwONThvnVH

+EmA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1728400763; x=1729005563;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=d3/Vi59kbcqHAgRN8ADKChDk/457D0kHOHd6Xv3C38k=;

b=klh2Oe+GPjNgVHj1SaHQUsMaaWdVWYQOJXq55EKgoHEznvQzJGgetl7YuaD+pnGE6X

5A9wKPItrDfAYff6ct78ZxGAi4d3B0lIpsxk1xbruyxDqfhFnr5wcG8klpHeuDOFaDFD

uvhoRMXEei0TCgOikTqN7MOQHo5OXSEoOgR2WjJ6jYQViI8PsbN230/FTVHz38dKx6QM

riqCqNFtBCcZV4YPDU3BSu37uSLI8ojkh00LpvKiwqK2gaK4I4FLeiAbmV94DUNS0Ro0

Xpw4zcCX7lqPjc0uqT0VZOHpnbk5fIyfA7nhk5jAGmdoiPKlJPumqiqJT/bJHZ40/yEz

LG2w==

X-Forwarded-Encrypted: i=1; AJvYcCU6MeZDWzC/AQmh8EJYvG6OH3cBcoXnoa711rqMC0Jz8fFpXbD3Kr1t9pxezl5m0wyvk/qs@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0Yy5PSWba67hmLpiadWG0qc4Wsy7mKm67HLV7GLZqxtQvM+qHgMx

1QUPNo+oEzlaIS5lMDTxvdr1yfvUTDNR3p8JanFCRL1eBiPmEjq7DzVcG236bYRNRcg/PfEOrQU

G6oWzi4O9z0qi6or3ALMixCA2QWQGBbqidb+sEIyzNWbEclRrdqA3pOZxnP+qzQ==

X-Google-Smtp-Source: AGHT+IHTT8ufoNV82y5Bd7nVnYqFCY32pJ/O3npRRtcpyIFfYbDTBtmJQf7vwp68zFitGCkC6usVHcn73/1Q2tpIOrs=

X-Received: by 2002:a05:6808:2002:b0:3da:ab89:a805 with SMTP id

5614622812f47-3e3c1326afamr10607534b6e.16.1728396297180; Tue, 08 Oct 2024

07:04:57 -0700 (PDT)

MIME-Version: 1.0

Reply-To: donaldfrank133@gmail.com

From: "mr. david edeard"

Date: Tue, 8 Oct 2024 14:04:45 +0000

Message-ID:

Subject:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000532fa10623f79fb8"

Bcc: root@doctor.nl2k.ab.ca

X-Spam_score: 9.1

X-Spam_score_int: 91

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good morning, have you received the compensation money I sent

to you through my Secretary Good morning, have you received the compensation

money I sent to you through my Secretary



Content analysis details: (9.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.176 listed in will-spam-for-food.eu.org]

[209.85.167.176 listed in will-spam-for-food.eu.org]

[209.85.167.176 listed in will-spam-for-food.eu.org]

[209.85.167.176 listed in will-spam-for-food.eu.org]

[209.85.167.176 listed in will-spam-for-food.eu.org]

[209.85.167.176 listed in will-spam-for-food.eu.org]

[209.85.167.176 listed in will-spam-for-food.eu.org]

[209.85.167.176 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.176 listed in dnsbl.ahbl.org]

[209.85.167.176 listed in dnsbl.ahbl.org]

[209.85.167.176 listed in dnsbl.ahbl.org]

[209.85.167.176 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.176 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.176 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.176 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.176 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.176 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.176 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[donaldfrank133(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HK_NAME_MR_MRS No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?}



--000000000000532fa10623f79fb8

Content-Type: text/plain; charset="UTF-8"



Good morning, have you received the compensation money I sent to you

through my Secretary



--000000000000532fa10623f79fb8

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Good morning, have you received the compensation money I s=

ent to you through my Secretary=C2=A0




--000000000000532fa10623f79fb8--

Nigerian spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 08 Oct 2024 12:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1syEe2-00000000Gbh-11RS

for dave@doctor.nl2k.ab.ca;

Tue, 08 Oct 2024 12:09:14 -0600

Resent-From: The Doctor

Resent-Date: Tue, 8 Oct 2024 12:09:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-io1-f43.google.com ([209.85.166.43]:48172)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1syCIi-00000000BNh-0Kjg

for root@nl2k.ab.ca;

Tue, 08 Oct 2024 09:39:09 -0600

Received: by mail-io1-f43.google.com with SMTP id ca18e2360f4ac-82ce603d8daso212994939f.0

for ; Tue, 08 Oct 2024 08:37:09 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1728401823; x=1729006623; darn=nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=04Mk9QZq7WK9CpwwgUOptYa6v9VVQnk+nOVMrKQfyD8=;

b=iGi9FPEA9mP2kOfZuESMxtGj+PZv+P4oi7LXvIG512jEHyggj6O/3bXqv154/XAf12

DRdsWqdBYhmyHbdVBjWKQOtWdQdGfZHFEdagoQWQKYJc0Mgi22L0GLO3CZgWRqqCpuBV

m3VKUAlQMnkQRj9khAVr2iDct1YBEsQGheivJ2U5qi2xH1u+c3neMr77q2FdvmD7ovzt

qiN01jSydTGJ0W4ZiXAtVCAOPc+FrJIPLFj0DQr2ZxFVSQ2WUc94fBNwuCR0SjHH7q0X

OXrp3vBTy3GkBiNR0s+z/74VYd2Y1df7A1QxjXQYhUzngV4mM1uu1Sy7ZfF8OcHO/qe2

xjtw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1728401823; x=1729006623;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=04Mk9QZq7WK9CpwwgUOptYa6v9VVQnk+nOVMrKQfyD8=;

b=C14aAQuO1JfBlsINvDr+51onYLp64qAoJveyzZGZvCD199r2X4Gf/p6Dp/Nd95g8eh

3X4Ky/xuwchXKkudGxy9PW8iD9hal1KTbitIGxTE1anf7ejZGv92+vIpCoVa75jmYR2g

ORtp/K1NZTIrNU3y2q0eS+b20j2eUsVWyrVbA41CjXBA92YvxAlbyekToqIp2jND4/It

CZgCtVkxkZTZ/GycH7gvxioMzhiU8Q69bNP/iLsyhEp4CPT6R7Z+0UNuac+yJMMm63F8

GynAo22M/lFqVYVHQURXw3R7oqNpFujZcn8LidzjW9aU3o4S55zZx5OagYedwzfJcTj9

1c3Q==

X-Forwarded-Encrypted: i=1; AJvYcCV0sIE9EWV/CM77c80WkUatPIEvrLc9poJ+fzlINsXbwTExiysXi2VMURLSA5Z0JxoP8Pn4@nl2k.ab.ca

X-Gm-Message-State: AOJu0Yw3VttyQBRvhNEC+f831tL5LWzdohNBs0yJvw0P+QfXzn6YsCa9

KKtYenff+wWKmwYTavU5R19F83R/O19/cYnqdKzOYi7tBKvYpE4Ewp5lYvidSwEHW7ACKVW81r6

nY9brGNjAvyiC/G5I5wq3/VN7iXk=

X-Google-Smtp-Source: AGHT+IF1o7rJ6pmpCOd54+Y4zxzdEmH3iN6Gl+iqF7MLJUsWTKR85ZJ7VCY+4mrWIj3pM7o01OKecU/tgmaLL2yd6CE=

X-Received: by 2002:a05:6e02:1fc8:b0:3a0:aa15:3497 with SMTP id

e9e14a558f8ab-3a375976e55mr150239215ab.1.1728401822251; Tue, 08 Oct 2024

08:37:02 -0700 (PDT)

MIME-Version: 1.0

Reply-To: mariarodrigues33yt@gmail.com

From: "Mrs.Maria Rodrigues"

Date: Tue, 8 Oct 2024 15:36:49 +0000

Message-ID:

Subject:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000a50af30623f8e866"

Bcc: root@nl2k.ab.ca

X-Spam_score: 20.2

X-Spam_score_int: 202

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings beloved, I know this message might meet you in utmost

surprise. However, it's just my urgent need for a foreign partner. I would

like to know if this proposal will be worthwhile for your acceptance. I need

you [...]



Content analysis details: (20.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.166.43 listed in will-spam-for-food.eu.org]

[209.85.166.43 listed in will-spam-for-food.eu.org]

[209.85.166.43 listed in will-spam-for-food.eu.org]

[209.85.166.43 listed in will-spam-for-food.eu.org]

[209.85.166.43 listed in will-spam-for-food.eu.org]

[209.85.166.43 listed in will-spam-for-food.eu.org]

[209.85.166.43 listed in will-spam-for-food.eu.org]

[209.85.166.43 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.166.43 listed in dnsbl.ahbl.org]

[209.85.166.43 listed in dnsbl.ahbl.org]

[209.85.166.43 listed in dnsbl.ahbl.org]

[209.85.166.43 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.166.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.166.43 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.166.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.166.43 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.166.43 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.166.43 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[loglokokou(at)gmail.com]

0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

2.5 MILLION_USD BODY: Talks about millions of dollars

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 LOTS_OF_MONEY Huge... sums of money

1.5 HK_NAME_FM_MR_MRS No description available.

0.6 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

1.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

1.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 XFER_LOTSA_MONEY Transfer a lot of money

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?}



--000000000000a50af30623f8e866

Content-Type: text/plain; charset="UTF-8"



Greetings beloved,



I know this message might meet you in utmost surprise. However, it's just

my urgent need for a foreign partner. I would like to know if this proposal

will be worthwhile for your acceptance. I need your honest assistance to

actualize my humanitarian project. Sadly, I am critically down with

terminal sickness and on the verge of death. I want you to utilize my

inheritance funds, Three million one hundred and Fifty thousand united

states dollars ($3,150,000.00) for a charity purpose in your country as

soon as you receive these funds. It will be my greatest joy to conclude

this project with you before I die. Further details shall be provided to

you upon your response to my proposal.



Your positive response shall be appreciated. Contact my private email

address below for more details on (mariarodrigues33yt@gmail.com).



Your sister,



Mrs. Maria Rodrigues



--000000000000a50af30623f8e866

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Greetings beloved,

I know this message might meet y=

ou in utmost surprise. However, it's just my urgent need for a foreign =

partner. I would like to know if this proposal will be worthwhile for your =

acceptance. I need your honest assistance to actualize my humanitarian proj=

ect. Sadly, I am critically down with terminal sickness and on the verge of=

death. I want you to utilize my inheritance funds, Three million one hundr=

ed and Fifty thousand united states dollars ($3,150,000.00) for a charity p=

urpose in your country as soon as you receive these funds. It will be my gr=

eatest joy to conclude this project with you before I die. Further details =

shall be provided to you upon your response to my proposal.

Your pos=

itive response shall be appreciated. Contact my private email address below=

for more details on (maria=

rodrigues33yt@gmail.com
).

=C2=A0Your sister,

Mrs. Maria R=

odrigues




--000000000000a50af30623f8e866--

Business proposition spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 08 Oct 2024 09:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1syC1G-00000000AiP-0EEv

for dave@doctor.nl2k.ab.ca;

Tue, 08 Oct 2024 09:21:02 -0600

Resent-From: The Doctor

Resent-Date: Tue, 8 Oct 2024 09:21:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f50.google.com ([209.85.219.50]:58582)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1syBkk-00000000A4c-1gc4

for root@nk.ca;

Tue, 08 Oct 2024 09:04:02 -0600

Received: by mail-qv1-f50.google.com with SMTP id 6a1803df08f44-6c5acb785f2so32295486d6.0

for ; Tue, 08 Oct 2024 08:02:03 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1728399717; x=1729004517; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=9mtj9rGPZc8LARMxXSi3MRMqrIT/idqgLsg5S96qfYU=;

b=AswltL9z0dkPZnVRcsRO21oQU0coKFtYGsDj8GD3Se2XEJIxJjUjBsZQqDdaSj8mtE

AjbagLEbPxMM6LJEXDx1bxSPcW021vMa0JpCxi9X1RoI1BGOhZBYjNrE9WQ+tu7Yg9lX

Ix980ykZhDMssqI3K1GaP9+43u+rfDVD6ZMjXMbrlSbs/b5qE6SYOi1IEZq7bLykdiyA

9yz4pfw7SwdOZwVrp7uEnuiBzqacP1vUpRFvNGZh3YWUyD7bh+Kyhh/rMl6N406jgtWX

u+tn6Pw2n6NCQefN/0uYGd1vURMFE9+AU7h+iQrmi577USgXPezX+GkNkWgf3NpqgEcM

kAwg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1728399717; x=1729004517;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=9mtj9rGPZc8LARMxXSi3MRMqrIT/idqgLsg5S96qfYU=;

b=jmVMaKHj35eNVLlkGNzxNo74wjaSQH1l05w1lfGkA5EN08uVwyEG1vHPDP3Geyp0ZH

5DZY2Bm+mJyDtQ4bR7DKT4b02/6eywmPSJSfAWtRf3TAnSFLG9XHuNFMRVIVbx93xg8S

GbH229Wcowh2eMkzJ9zdM2CZT4XQEMLNQRNJXpMRHUfhjS6hygMltniCxru183AOgS+c

K9+x4H5MooRyznA23+Ji5Va5MDaL5gQt+eKeJBdpCR8hHNpr6Ujij57USMTBCbGHyUS6

vkERa7Tth8peswubfYYbnOn0udWmubRleMenEYs9zNseQ+L2P0acMdfpGN9KBDQPloMR

lLqQ==

X-Gm-Message-State: AOJu0YzkPjhNm6EDbQ639md0ARKB3uC2+Ha8nl30lEnwdy/NMhpiQKzz

5h1jEpOwZ8SWZn0UPgx3O/8KsTBfib4WInVIjMQ/+GTiikWUVfaHzXFCwqJTH/AM9DtqOmWTlgv

JpGHYaPkIKkNl94nLEE+zrX9nl54k2Z8x

X-Google-Smtp-Source: AGHT+IFFgrm8fezAs/6NArVYnq0BxlhF++0/whvWrE6gwaE7OrJEF7MqhFYBuVQ04PvBsdEmoGnDWPXfw8L3oEJ2gk8=

X-Received: by 2002:a05:6870:eca8:b0:288:29ae:c981 with SMTP id

586e51a60fabf-28829af2476mr590550fac.43.1728395700858; Tue, 08 Oct 2024

06:55:00 -0700 (PDT)

MIME-Version: 1.0

From: Charlotte Dennery

Date: Tue, 8 Oct 2024 13:54:48 +0000

Message-ID:

Subject: RE: FEEDBACK

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000c7f5360623f77b62"



--000000000000c7f5360623f77b62

Content-Type: text/plain; charset="UTF-8"



--



Good day,







I hope this message finds you well, Would you be open to discussing a

potential business proposal with me? I wanted to confirm if this email

address is appropriate to get in touch with you. I appreciate your timely

response












Warm regards,

Charlotte Dennery



--000000000000c7f5360623f77b62

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






ature_prefix">--


-smartmail=3D"gmail_signature">

34,34)">


nt-family:"Courier New"">Good day,

>


nt color=3D"#666666">=C2=A0


oNormal">
=3D"#666666">I hope this message finds you well,=C2=A0Would you be open to =

discussing a potential business proposal with me?=C2=A0I wanted to confirm =

if this email address is appropriate to get in touch with you. I appreciate=

your timely response


le=3D"font-family:"Courier New"">
<=

/font>


t;Courier New"">

<=

p class=3D"MsoNormal"><=

b>

=


66">

Warm regards,

ng=3D"0" cellspacing=3D"0" style=3D"color:rgb(0,0,0);font-family:Arial;font=

-size:16px;border-collapse:collapse">

2;padding:0.01px">
lor:rgb(69,102,142);letter-spacing:0px;line-height:1.2">
ical-align:inherit">
ertical-align:inherit">
=3D"vertical-align:inherit">
yle=3D"vertical-align:inherit">
style=3D"color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-s=

ize:small;font-weight:400">Charlotte Dennery

ont>

v>




--000000000000c7f5360623f77b62--

Nigerian spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 08 Oct 2024 09:40:00 -0600

Received: from mail-il1-f173.google.com ([209.85.166.173]:49268)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1syCIh-00000000BNg-0XYd

for dave@doctor.nl2k.ab.ca;

Tue, 08 Oct 2024 09:39:08 -0600

Received: by mail-il1-f173.google.com with SMTP id e9e14a558f8ab-3a3636ddad6so20483315ab.2

for ; Tue, 08 Oct 2024 08:37:09 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1728401823; x=1729006623; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=04Mk9QZq7WK9CpwwgUOptYa6v9VVQnk+nOVMrKQfyD8=;

b=F9CArlX+/gaZEnmAR1dlNLhqmKWKYJVxz4xNlSlwq7T5VG9eFK1INVBs4UUUwfCUjg

f/fgtIK3d7bQevlrBM2Qf6cd1AAMth8waM/H9AuWqucZPvXYfxwYvbWryzgpEr7c0sGk

tvgtoZU88Yj5glFhpvwgPZ0aJRrU7QDR5Z0FnNT2Y3XalcKoa6QcuFM0sHH7XdbOtfVR

adSFPDxcDoIMoleh8vuTsk0fVWTbXM4A4JLqRPMMD4G/QydJ9ckNNCUXllh9sdgz39Qn

7Mt82K/pjEg2vqRwtzMQIL8Q0zquu9MKB9qXBQUSP2CmMp4o8TW3+4jKtnKI52ICec2n

QgpQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1728401823; x=1729006623;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=04Mk9QZq7WK9CpwwgUOptYa6v9VVQnk+nOVMrKQfyD8=;

b=B7K5ZTdRei1TbpG9H3ROQl6U7JnbYb41mvYuu9MJR5qN2v2WZyMwY/1b4vo/oHwliB

tayK7sKJNtsLJ8UXCS+vRrFmddmsv1B48ULl2MKKmYCM8+EEbPbSqxAlH11+WqcKVJjK

mC3R1/S3lNXZWaVhnk1f/EXZy1Xf6G7LX+M8HoOHkWzNbvIllAmOWJIcHjAcSa16oFnO

qs8qUMouqrkJMHExuE5BAEjQ/cqfwY7Eq1wDyvXDlilhD38NAolU4mpUoaK+WNE3Cp+p

FDdmjngBbdoUwUnXBTOdryyJrNFpox++ztaTNTrPEz1dV9lsWNEbgIEMtGd29Ouuf+rn

uTgg==

X-Forwarded-Encrypted: i=1; AJvYcCUjMy64mynLMPwjhfFf4NMBti4+eO7Uz/p+6vhiEDk8AG2EPp4mRRvt0pZ0Sg24HyxsG9OT@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YyKsFiu9npo2OEtPvWf2EFpfzhzk0mo/ZnlpfyRApN5asFZJcrP

pPuyN7WiTLSDFALm+4d0uzzs8GqJ3Qw82hdl7zMxO/Lff+P0nBsQCjdvZ1Y5ZMJnV2PgAaYnpCq

Zl0eY+tIJGHcbpWvDiz4WX6w6HPI=

X-Google-Smtp-Source: AGHT+IF1o7rJ6pmpCOd54+Y4zxzdEmH3iN6Gl+iqF7MLJUsWTKR85ZJ7VCY+4mrWIj3pM7o01OKecU/tgmaLL2yd6CE=

X-Received: by 2002:a05:6e02:1fc8:b0:3a0:aa15:3497 with SMTP id

e9e14a558f8ab-3a375976e55mr150239215ab.1.1728401822251; Tue, 08 Oct 2024

08:37:02 -0700 (PDT)

MIME-Version: 1.0

Reply-To: mariarodrigues33yt@gmail.com

From: "Mrs.Maria Rodrigues"

Date: Tue, 8 Oct 2024 15:36:49 +0000

Message-ID:

Subject:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000a50af30623f8e866"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 20.2

X-Spam_score_int: 202

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings beloved, I know this message might meet you in utmost

surprise. However, it's just my urgent need for a foreign partner. I would

like to know if this proposal will be worthwhile for your acceptance. I need

you [...]



Content analysis details: (20.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.166.173 listed in will-spam-for-food.eu.org]

[209.85.166.173 listed in will-spam-for-food.eu.org]

[209.85.166.173 listed in will-spam-for-food.eu.org]

[209.85.166.173 listed in will-spam-for-food.eu.org]

[209.85.166.173 listed in will-spam-for-food.eu.org]

[209.85.166.173 listed in will-spam-for-food.eu.org]

[209.85.166.173 listed in will-spam-for-food.eu.org]

[209.85.166.173 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.166.173 listed in dnsbl.ahbl.org]

[209.85.166.173 listed in dnsbl.ahbl.org]

[209.85.166.173 listed in dnsbl.ahbl.org]

[209.85.166.173 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.166.173 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.166.173 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.166.173 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.166.173 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.166.173 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.166.173 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[loglokokou(at)gmail.com]

0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

2.5 MILLION_USD BODY: Talks about millions of dollars

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

1.5 HK_NAME_FM_MR_MRS No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

1.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 XFER_LOTSA_MONEY Transfer a lot of money

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

1.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.6 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

Subject: {SPAM?}



--000000000000a50af30623f8e866

Content-Type: text/plain; charset="UTF-8"



Greetings beloved,



I know this message might meet you in utmost surprise. However, it's just

my urgent need for a foreign partner. I would like to know if this proposal

will be worthwhile for your acceptance. I need your honest assistance to

actualize my humanitarian project. Sadly, I am critically down with

terminal sickness and on the verge of death. I want you to utilize my

inheritance funds, Three million one hundred and Fifty thousand united

states dollars ($3,150,000.00) for a charity purpose in your country as

soon as you receive these funds. It will be my greatest joy to conclude

this project with you before I die. Further details shall be provided to

you upon your response to my proposal.



Your positive response shall be appreciated. Contact my private email

address below for more details on (mariarodrigues33yt@gmail.com).



Your sister,



Mrs. Maria Rodrigues



--000000000000a50af30623f8e866

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Greetings beloved,

I know this message might meet y=

ou in utmost surprise. However, it's just my urgent need for a foreign =

partner. I would like to know if this proposal will be worthwhile for your =

acceptance. I need your honest assistance to actualize my humanitarian proj=

ect. Sadly, I am critically down with terminal sickness and on the verge of=

death. I want you to utilize my inheritance funds, Three million one hundr=

ed and Fifty thousand united states dollars ($3,150,000.00) for a charity p=

urpose in your country as soon as you receive these funds. It will be my gr=

eatest joy to conclude this project with you before I die. Further details =

shall be provided to you upon your response to my proposal.

Your pos=

itive response shall be appreciated. Contact my private email address below=

for more details on (maria=

rodrigues33yt@gmail.com
).

=C2=A0Your sister,

Mrs. Maria R=

odrigues




--000000000000a50af30623f8e866--

Web / SEO/ App spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 08 Oct 2024 07:50:01 -0600

Received: from mail-psaapc01olkn2052.outbound.protection.outlook.com ([40.92.52.52]:14816 helo=APC01-PSA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1syAaE-000000007Vc-1EJF

for dave@doctor.nl2k.ab.ca;

Tue, 08 Oct 2024 07:49:11 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=nbOltgBavoP5OtaqwzPzJys+NbvNv2LpEx/wsXMutoUrkNGeL0lVmoID/07lefl9vrhvPwOAA4Pd8l8rnyfVmjF3GEoswN9EqhkRxAXsEGmIZILXYdg3YWaXyeoIG2wTWZXTMTmY++QE5fE5yTpD5CMVcAktisw/DeFJGbMATyvAlST80ZGwghbrYa0vI0/zaBVKALMfo7OP8BBjf0HE5PcXQ5cbMY5eJ8X1TfArlaSQzxs/n0wRzIt9GT/f1b0oUt0sy7ckDMHfy5RGP6lZDBOd/q1+RkJy9KOb9eorIF2ejAot+ZV8k1NGp6Mdp8yJ17hdOcA39Dd0LlLY49u5Uw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=Ax1mHQSQF22xOusBsbXrTweMj4xzVxUm8AHL9P8NQ10=;

b=lNjfc6LT1HA8JpZNu+r8b+vz//Z03b31FDjIjtDE7e5yYRWC1LoIgK2kO0k6Ibjr5VKa3ObYGQNgL/N9BbVQhWMm0YjwDkVMIblffzJdufAZith5lvgL4QYXPst5dk3OechSS1086lNlZAqUzAGCxdqnxkG0j28mxQcVAI0i0DqH1f4Cjhmql0YRozOSldCTlrO6NHWzS3hJxop7xlPzabHgEUT0FQC+ZafDv2DDD5AYgCJxNIF60vLujQf2GY14vPRliWfcBNRNULERCccI4jZ9eip0ZHG2WnoL5WDAZd7EfkdQL46S5g1uKnta2J9En4U7Vm7xYyfRMhNGV5HygA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=Ax1mHQSQF22xOusBsbXrTweMj4xzVxUm8AHL9P8NQ10=;

b=bSkVjgHFzOP5dvrd1zjJy7+h6r//adjjXKt+ITZgWHpsKWklEmByiKOvS+5bnXcDMf5SFarHmHvg/LGhHdnVLOjOola542XtuTKn7ZafrPSPiwYzVECbAAGuCD+hiBiiqdlxPoOKgEI04vn9H2vaPE0d+YsNwfdi82mkDjZ2mH+UC9kUn0XW+KJg+DjanF2HNNarn3XhkYaCc5ffHYAqz+tdGpUdqBf8GTdvbpHmthyankBIpicWpyA/UKxM91k+XUgH5rdlkJD1mwbIuIpp9xJEwdNjyTggJuLob+bK6maRP3yCXpNUHzg7/saPqOqNFBA5YzY7p4PqBPEHFM80aw==

Received: from SEYPR06MB6482.apcprd06.prod.outlook.com (2603:1096:101:178::11)

by JH0PR06MB6703.apcprd06.prod.outlook.com (2603:1096:990:36::10) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7982.27; Tue, 8 Oct

2024 12:00:00 +0000

Received: from SEYPR06MB6482.apcprd06.prod.outlook.com

([fe80::224c:2941:e9e8:3950]) by SEYPR06MB6482.apcprd06.prod.outlook.com

([fe80::224c:2941:e9e8:3950%4]) with mapi id 15.20.8005.020; Tue, 8 Oct 2024

12:00:00 +0000

From: Willyim Hofffa

Subject: CREATIVE WEBSITE DESIGNS.!

Thread-Topic: CREATIVE WEBSITE DESIGNS.!

Thread-Index: AQHbGXmTReeJYruFXEC1EpCA6YuOZg==

Date: Tue, 8 Oct 2024 12:00:00 +0000

Message-ID:



Accept-Language: en-IN, en-US

Content-Language: en-IN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SEYPR06MB6482:EE_|JH0PR06MB6703:EE_

x-ms-office365-filtering-correlation-id: ba3b4fc2-f907-47a2-3ffa-08dce790bcbb

x-microsoft-antispam:

BCL:0;ARA:14566002|19110799003|15030799003|36102599003|8062599003|15080799006|461199028|8060799006|3412199025|440099028|56899033|102099032;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?fgNTr7In84yDpKBb6ZRGZ1n6FNEE738keu0s3Ft+GSm1MIGXh3UJvR0y?=

=?Windows-1252?Q?MsmPimz/wsfI1eCQqVF46ZNRgwNWvYjmiQpb17hIbzlQJRyQmzpZ9uj9?=

=?Windows-1252?Q?Dkp3po7omuwGTivPqcEaL0jffZx5dvRSvzRhd8XawcGMr53v4HtTjJFl?=

=?Windows-1252?Q?+j5rGbfZM6V7aK6AttWJQegjDAFLe51Scz/J8sgBFwPr4b923mvtkcC4?=

=?Windows-1252?Q?qpnJa0ys1TafV0npU1PHanqhrItZCI7j+v18KRpUY7UiF+LFy1QLIcIG?=

=?Windows-1252?Q?Vai2Be6CcLVuOd1BoV9uV4M17gNv3VCnG1CY3Afh3Dk0Ts40bp0yGyJc?=

=?Windows-1252?Q?fjxCW0MFkk3qgqiDJKkabOPZPjxygvMVFS2LM1AnAMR4uPd2DW2XuWiO?=

=?Windows-1252?Q?OKNLgEdVn79l7LKAxJbCzD0nW7zQhWFhJ9QNgNhHnzVVBdbVIly8GqpB?=

=?Windows-1252?Q?wIJpfVEw2ef+wq2CjX9bZ8Irlyx4ZLe6/gI+eU70CjSalnyW4Lutmxy+?=

=?Windows-1252?Q?F7726T/N4+tKZNubVfFe6pMFJYjvwQmHWIThGUfQdIjwnfLJFM1opL4U?=

=?Windows-1252?Q?H8gonaYbb96lWY9RecxQiqCusTfBMxdH9d2u1M4qjtXRbbJEWP+MmRN3?=

=?Windows-1252?Q?5mthezkJ/hGW581b5A0G4Bxx3HcX3YxBN7rYPL9THbsjshhEZXVA+Yv3?=

=?Windows-1252?Q?UhufiVRMEXkE+bhwPs+j5RSVwO5YENhpRUHWmkqWnMJ86tEGHTepufAH?=

=?Windows-1252?Q?/t8OAci+6gjaZSUxM4M7C+WByOwhHixbZGBPPjJ2QmY/DKkW0FFzCE/h?=

=?Windows-1252?Q?3vlC3XQh4zyo9j93U0p5yyAJUa5X508sOSIS2BDg4TMkoFt83gDk+SpF?=

=?Windows-1252?Q?WvNsc0sRUPwi8W3+X+Q0bH69uV/VWyi3NIvoQ3aFuJ6uCEYHdMF6kZBL?=

=?Windows-1252?Q?eGdbn7EnstXHJg4L+jhI0e1ixgv8LisvArF7mYFqVCiI5HIp6NNjAGGu?=

=?Windows-1252?Q?Aa4JBn01M+aHiaUw1lYQOdfsDnZIYAig7fPgtTWQhY7cZhRT5kgUhUk2?=

=?Windows-1252?Q?L+M6p7vSxCcDu5zltvtTMLdDKJed1Kmf3dkkOWMw8KmWZpuBtSNWiMWS?=

=?Windows-1252?Q?mMce+EbtFtUk0yJDxpqlncy0GhWeWchV/6/dIa7dGv2eowFMQuwX1O20?=

=?Windows-1252?Q?ozC++ieSqymfDiB+VnQLW2ekLIGOX0dTntwh2y5/nS3VHWjF5kaNa3Q/?=

=?Windows-1252?Q?JNx4uCIxdaRKN5u3z4zO+aKcClIOfUe3eTcF0icT1Z5pN3dvd3Gxr9VY?=

=?Windows-1252?Q?r2QY/EQSgDPVNdNKrN8dxMZ1b7ybvG2uhxalIIVC2IICTkptAuqlHBb+?=

=?Windows-1252?Q?5mqS78XIKTFbD9oRXIxll1Wtse1AekH5h4O/YbLRusi7bxIn+SsIMDta?=

Content-Type: multipart/alternative;

boundary="_000_SEYPR06MB64829744AC82223C9291A65B847E2SEYPR06MB6482apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SEYPR06MB6482.apcprd06.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: ba3b4fc2-f907-47a2-3ffa-08dce790bcbb

X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Oct 2024 12:00:00.6906

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: JH0PR06MB6703

X-Spam_score: 9.0

X-Spam_score_int: 90

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I hope my mail finds you in the- best of your health,

We are a Web Design & Development firm, with over 12+ years of experience

in the field of Website Designing & Development.



Content analysis details: (9.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:101:178:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:178:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:178:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:178:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:178:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:178:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:178:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:178:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[40.92.52.52 listed in will-spam-for-food.eu.org]

[40.92.52.52 listed in will-spam-for-food.eu.org]

[40.92.52.52 listed in will-spam-for-food.eu.org]

[40.92.52.52 listed in will-spam-for-food.eu.org]

[40.92.52.52 listed in will-spam-for-food.eu.org]

[40.92.52.52 listed in will-spam-for-food.eu.org]

[40.92.52.52 listed in will-spam-for-food.eu.org]

[40.92.52.52 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.52.52 listed in dnsbl.ahbl.org]

[40.92.52.52 listed in dnsbl.ahbl.org]

[40.92.52.52 listed in dnsbl.ahbl.org]

[40.92.52.52 listed in dnsbl.ahbl.org]

[2603:1096:101:178:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:178:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:178:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:178:0:0:0:11 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.52.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.52.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.52.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.52.52 listed in dnsbl.ahbl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.52.52 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[willyimhofffa658(at)outlook.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[willyimhofffa658(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} CREATIVE WEBSITE DESIGNS.!



--_000_SEYPR06MB64829744AC82223C9291A65B847E2SEYPR06MB6482apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



I hope my mail finds you in the- best of your health,



We are a Web Design & Development firm, with over 12+ years of experience i=

n the field of Website Designing & Development.



We proffer following services at competitive charges:





Website Designing =96 Responsive

Website Re-Designing

* Word press Websites







Kindly revert back if you are interested.



Awaiting your response and looking forward to a long term association with =

you!



Many thanks,



Willyim







--_000_SEYPR06MB64829744AC82223C9291A65B847E2SEYPR06MB6482apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








y: Cambria, Georgia, serif; font-size: 11pt; color: rgb(0, 36, 81);">

Hi,



f; font-size: 11pt; color: rgb(0, 36, 81);">

 



f; font-size: 11pt; color: rgb(0, 36, 81);">

I hope my mail finds you in the- best of your health,



f; font-size: 11pt; color: rgb(0, 36, 81);">

 



f; font-size: 11pt; color: rgb(0, 36, 81);">

We are a Web Design & Development firm, with over 12+ years of experien=

ce in the field of Website Designing & Development.



f; font-size: 11pt; color: rgb(0, 36, 81);">

 



f; font-size: 11pt; color: rgb(0, 36, 81);">

We proffer following services at competitive charges:



f; font-size: 11pt; color: rgb(0, 36, 81);">

 





  • rgb(0, 36, 81); margin: 0in 0in 0.0001pt 0.5in;">

    Website Designing =96 Responsive

  • ia, Georgia, serif; font-size: 11pt; color: rgb(0, 36, 81); margin: 0in 0in=

    0.0001pt 0.5in;">

    Website Re-Designing

  • serif; font-size: 11pt; color: rgb(0, 36, 81); margin: 0in 0in 0.0001pt 0.=

    5in;">

    Word press Websites



f; font-size: 11pt; color: rgb(0, 36, 81);">

 



f; font-size: 11pt; color: rgb(0, 36, 81);">

 



f; font-size: 11pt; color: rgb(0, 36, 81);">

Kindly revert back if you are interested.



f; font-size: 11pt; color: rgb(0, 36, 81);">

 



f; font-size: 11pt; color: rgb(0, 36, 81);">

Awaiting your response and looking forward to a long term association with =

you!



f; font-size: 11pt; color: rgb(0, 36, 81);">

 



f; font-size: 11pt; color: rgb(0, 36, 81);">

Many thanks,



f; font-size: 11pt; color: rgb(0, 36, 81);">

 



f; font-size: 11pt; color: rgb(0, 36, 81);">

Willyim



, Georgia, serif; font-size: 11pt; color: rgb(0, 36, 81);">

 



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">












--_000_SEYPR06MB64829744AC82223C9291A65B847E2SEYPR06MB6482apcp_--