Netflix PHish from Russia

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 15 Oct 2024 14:10:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t0nqu-000000005E7-1d6M

for dave@doctor.nl2k.ab.ca;

Tue, 15 Oct 2024 14:09:08 -0600

Resent-From: The Doctor

Resent-Date: Tue, 15 Oct 2024 14:09:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [95.213.139.113] (port=49683 helo=quihkboe.my-coral-iun-shop.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1t0n9X-0000000030W-0tfQ

for doctor@doctor.nl2k.ab.ca;

Tue, 15 Oct 2024 13:24:23 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=doctor.nl2k.ab.ca;

h=Date:To:From:Subject:Content-Type:Mime-Version; i=doctor@doctor.nl2k.ab.ca;

bh=Xu7iukk7ukIlLRFi9mgDPvnYDPI=;

b=VRiWx0eG6UdTC/edEbAZBJlby0U5Zuoxb/33iXPNM/B/7O6VevkDC8SYUNp/uIHSTyPwcGhsZLWb

aCTgbO0R5vhblS5dZFPj7DSiZ0n+AKXloNAOQc+VskqKE1JYWY9pbRAKfw5CuXqVYGrUZE4CODzL

V1Xwriw/5qyG9xU87OE=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=doctor.nl2k.ab.ca;

b=Y4KPlyGqjzFSEzm+WBpp7JiotHMyZRNj0S6qE7wqJprConQ79ASVRcLqBU/VQfh2vMeHtqJD3krH

FcodxxlyP21UJy7VrqL+Ic/U712X719tiMXFF+yYufJoCk+FnJXFiJr6p/B6lJ+vkTtnByTda7EK

smv1WjHgJ4TCPaimLkM=;

Date: Tue, 15 Oct 2024 18:40:35 +0000

To: doctor@doctor.nl2k.ab.ca

From: Netflix

Subject: Your Netflix subscription has been cancelled! Please respond!

Content-Type: text/html

Mime-Version: 1.0

X-Spam_score: 21.8

X-Spam_score_int: 218

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: your Netflix Subscription has been Canceled Dear doctor,



Content analysis details: (21.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[95.213.139.113 listed in will-spam-for-food.eu.org]

[95.213.139.113 listed in will-spam-for-food.eu.org]

[95.213.139.113 listed in will-spam-for-food.eu.org]

[95.213.139.113 listed in will-spam-for-food.eu.org]

[95.213.139.113 listed in will-spam-for-food.eu.org]

[95.213.139.113 listed in will-spam-for-food.eu.org]

[95.213.139.113 listed in will-spam-for-food.eu.org]

[95.213.139.113 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[95.213.139.113 listed in dnsbl.ahbl.org]

[95.213.139.113 listed in dnsbl.ahbl.org]

[95.213.139.113 listed in dnsbl.ahbl.org]

[95.213.139.113 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[95.213.139.113 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[95.213.139.113 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[95.213.139.113 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[95.213.139.113 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[95.213.139.113 listed in bb.barracudacentral.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: 185.95.84.78]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: 185.95.84.78]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: 185.95.84.78]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: 185.95.84.78]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.6 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

Subject: {SPAM?} Your Netflix subscription has been cancelled! Please respond!

































your Netflix Subscription has been Canceled



Dear doctor,



Your Subscription Has Expired On: 10-15-2024.


unfortunately we have never been able to solve the payment problem and pay your subscription.













NETFLIX - The Netflix team



we would obviously be very happy to be here, all you have to do is reactivate your subscription







Read More:

NETFLIX.com | Deluxe | Contact us| Advantage | FAQ








































Unsubscribe here













Compensation spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 15 Oct 2024 11:25:00 -0600

Received: from mail-qt1-f170.google.com ([209.85.160.170]:51696)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1t0lHl-00000000Mb3-2QFl

for dave@doctor.nl2k.ab.ca;

Tue, 15 Oct 2024 11:24:46 -0600

Received: by mail-qt1-f170.google.com with SMTP id d75a77b69052e-46045199e4dso61044711cf.3

for ; Tue, 15 Oct 2024 10:22:46 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1729012960; x=1729617760; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=sDAjzDch2M/Q1vSaH3gt0fOh9Cbuqh6orI08G8AWeSE=;

b=hSTbkTBucK0NCuHb80Fy6vD4zbNUYPnE/IdsZi8kMKegaNHPSIEHg1aGSBpUDO0SAG

yJ0HxVmrYGjEREQpIdbVKqfn5MkuBO4LJ6d+6NJN++zl7gmaU03ysLyMY6hfO0HjCaCW

pI0hq2bjD09Uf3PnyEULLRU7c476pRIF2/fZT9tfpNhVpUIwa9omSyh/IAMc29H/wqob

+mV0YwksWPksO2jeCMUqEadqzCamZFdwEBFD2Ba5LiWcJnPHKm4FSsgaqwnLFiT5X6O+

oc07OhaR6I9mPnqinBgIkdETqo92YDQ3/aT0eBILL1SxQOzVNuFWPa1NVsZ0UywIpVfU

QxZg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1729012960; x=1729617760;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=sDAjzDch2M/Q1vSaH3gt0fOh9Cbuqh6orI08G8AWeSE=;

b=itZZXLlLgIKa0AvJxgaR7yi3EhS6+IwT2j99O55oc+9s+10xrJH8CtsI5fgilXOBMN

Ky3liGGZZzrwWh0Ael6ae/MX9GSiDY7vNLRrNapewDCVfDsFrfKmsKSc6eJVxRRiCmYm

5rxRbcWy17d1zsClpK49AiryFrJGGjh7YwfAJiHFiWMFbgtCmH3M6dbXgUVC1YV/biyv

inSLQ/e3VihA1KJZkFUWcLnV7TMQjlv1a8VZevBi9nAVSmN3BKSvB+9M664ToommgBDD

OgJupuEMMuLzG9UPj7FGHt5yEbXrT8TBVN6bt3ZF1J0cwtq4a9XHbKYQ88rCym/jMHv8

9G0g==

X-Forwarded-Encrypted: i=1; AJvYcCX/kEHa+FKLnkggrO6OuLFAoEMCJzvWEiEGVGjpk8PAVitcr8LN2OuJPbyjB+g82kkhBCbw@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0Yw7dpQsU5H0VEACpWW4VRQy8/JDRrJ8kvgJc5L6UcbYNWqbSupb

Grij/bc6eWTNYVAd+AB0nt3psGvCE0vM8TDbTtpfWIPD5Ds/32s7V0iRsskhTCzSuEW7vBUkN2d

W/QPQQFAf9+vT5mdVcG6X/SAENJlkdidAhpmWuw==

X-Google-Smtp-Source: AGHT+IGPFJAAmgMa2jj1sUUnzQH7sNXbDoaT/P2ftb3k/GYB2/aCXHcQ7Sr9JxTTXVYfl3AfPsXDOzBk8dAx2kTZkHY=

X-Received: by 2002:a05:6602:3d1:b0:835:4b2a:e52b with SMTP id

ca18e2360f4ac-83a64d5f185mr1248976139f.10.1729005522449; Tue, 15 Oct 2024

08:18:42 -0700 (PDT)

MIME-Version: 1.0

Reply-To: edwardrevjamessi@gmail.com

From: Marka E Johna

Date: Tue, 15 Oct 2024 16:18:28 +0100

Message-ID:

Subject: Your compensation payment is approved!

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000fafd200624857773"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 16.3

X-Spam_score_int: 163

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your compensation payment is approved! I would like to inform

you that your total payment of 2.5 million USD approved by the central bank

through Visa ATM card which allows you to withdraw all your money from any

ATM CARD Machine anywhere [...]



Content analysis details: (16.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.170 listed in will-spam-for-food.eu.org]

[209.85.160.170 listed in will-spam-for-food.eu.org]

[209.85.160.170 listed in will-spam-for-food.eu.org]

[209.85.160.170 listed in will-spam-for-food.eu.org]

[209.85.160.170 listed in will-spam-for-food.eu.org]

[209.85.160.170 listed in will-spam-for-food.eu.org]

[209.85.160.170 listed in will-spam-for-food.eu.org]

[209.85.160.170 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.170 listed in dnsbl.ahbl.org]

[209.85.160.170 listed in dnsbl.ahbl.org]

[209.85.160.170 listed in dnsbl.ahbl.org]

[209.85.160.170 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.170 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.170 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.170 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.170 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.170 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.170 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[vostokovamrsanna(at)gmail.com]

1.5 HK_SCAM_N8 BODY: No description available.

2.5 MILLION_USD BODY: Talks about millions of dollars

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 HK_SCAM No description available.

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.6 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

1.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

1.5 MONEY_ATM_CARD Lots of money on an ATM card

1.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Your compensation payment is approved!



--000000000000fafd200624857773

Content-Type: text/plain; charset="UTF-8"



Your compensation payment is approved!



I would like to inform you that your total payment of 2.5 million USD

approved by the central bank through Visa ATM card which allows you to

withdraw all your money from any ATM CARD Machine anywhere in the world, we

have authorized United Bank U B A to send you an ATM and PIN CARD, Please

contact Rev. James Edwards at edwardrevjamessi@gmail.com,Let him know that

you received this message from the office of Mr. Mark E. John.



Thank you for following this instruction and congratulations again.



Mr Mark E John

For your compensation fund.



--000000000000fafd200624857773

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Your compensation payment is approved!

I would like=

to inform you that your total payment of 2.5 million USD approved by the c=

entral bank through Visa ATM card which allows you to withdraw all your mon=

ey from any ATM CARD Machine anywhere in the world, we have authorized Unit=

ed Bank U B A to send you an ATM and PIN CARD, Please contact Rev. James Ed=

wards at edwardrevjamessi@gma=

il.com,Let him know that you received this message from the office of M=

r. Mark E. John.

Thank you for following this instruction and congra=

tulations again.

Mr Mark E John
For your compensation fund.

div>



--000000000000fafd200624857773--

Nigerian Spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 14 Oct 2024 13:45:00 -0600

Received: from mail-oa1-f43.google.com ([209.85.160.43]:53253)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1t0QzB-00000000GId-35Rx

for dave@doctor.nl2k.ab.ca;

Mon, 14 Oct 2024 13:44:13 -0600

Received: by mail-oa1-f43.google.com with SMTP id 586e51a60fabf-2884e7fadb8so2381801fac.2

for ; Mon, 14 Oct 2024 12:42:18 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1728934932; x=1729539732; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=8GP4XUzIxxhyy5jTmoLl86hCnQAONPCksrJ6hmWv2Yc=;

b=YAdCoxCssE5XKRnzV1yNEdoaRL24u6psMpQRKo7dwp/HpY/h5LEhZT4e5PrXMD6uAW

W6TUonxLW7R9EqXCBZEXAWSiZfYFnYcjDee7EDQPNFosI8dQzoMMvwI6hYTefNeWZCOs

hLX5VoOFFLoAlwwXrs7JzJxTXAbbq6/lXtlBwUVfRfLrD+0pLF+3i2jLtkcZmBimv2Nm

ICGCIwggfCRxkiv3ykRJq4VeJ29zV7sM3SXouolD4UFD4oglzATqeqZIfpveNRIM8Nc7

x2QLahecSdZDgRks/zpgvVXlEYBwNZRBIIE0HU1iMRFh3T64M/XaqBIvMocLchKznjkn

/wpg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1728934932; x=1729539732;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=8GP4XUzIxxhyy5jTmoLl86hCnQAONPCksrJ6hmWv2Yc=;

b=PJNsQv8swJX3VeJg5WMpH8hcMDmUUfbeSO180UlcqckR36q9fCSszBlWb0qgF00if6

gwsdz2Bv9pm35L7s0Z5yXD2O72rVctrYfvy2NomY0AR31UluXkilDTp33egAHeYBCF8Z

TG6+e1wG+UbTTIJuALjEN2k0sdLcOgy6+g7U63ZaA7MnURAKKSu5U2WCHHHpGciK0N9H

godKLVeatm/st01qKJrar85Mr2llzRaqLnyUNj3p0Pq7fnW41ZzGXqVu0B1HssRWhCd7

KLlBtA4cgsCsZpjft22tEv0uUGi0FBvFZB4Ol9vPDLrTciTa7mJXGWNCgOBkzZMcRVh0

BLyg==

X-Forwarded-Encrypted: i=1; AJvYcCWL1Hbn5/jXamYek8B8lS3n3mxuePFlnw2lA3nfVmBoFK0ZIeNDpkifjc6B3LYfmkRY352E@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0Yz5d2PTV/DZ91Cpfq9xEcuYIGQPqIgaW0GYtIfKJhZu9FhvYXc7

jinISETqhKfd8c4v1OnzQr1U+M+TSAkJWOY7wGta/oICJQbySgfQn5aTZt9a0UUidWztuSeP+tE

AumJzuuDRdvM1hxy+8/k/dQNsT5SiJ2GXdLE=

X-Google-Smtp-Source: AGHT+IEd9/p5pwnAGSEcEdWJDe5Xca9rCSKeIg+2ukof2okOM3Bg0Uev0IyMHXji/PPmv/EyYtpFQs7d8Hv9KSqknXw=

X-Received: by 2002:a17:902:d509:b0:20b:6d82:acb with SMTP id

d9443c01a7336-20cbb19ce4dmr145498045ad.23.1728932880500; Mon, 14 Oct 2024

12:08:00 -0700 (PDT)

MIME-Version: 1.0

Reply-To: kk.bfk@aol.com

From: Toma Karim

Date: Mon, 14 Oct 2024 19:06:41 -1000

Message-ID:

Subject: Immediate Reply ,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000002ed1080624748ec1"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 18.2

X-Spam_score_int: 182

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Friend, I know that this letter will come to you as surprise,

I got your contact address while searching for foreign partner to assist

me in this business transaction that is present in our favor, My name is [...]





Content analysis details: (18.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.43 listed in will-spam-for-food.eu.org]

[209.85.160.43 listed in will-spam-for-food.eu.org]

[209.85.160.43 listed in will-spam-for-food.eu.org]

[209.85.160.43 listed in will-spam-for-food.eu.org]

[209.85.160.43 listed in will-spam-for-food.eu.org]

[209.85.160.43 listed in will-spam-for-food.eu.org]

[209.85.160.43 listed in will-spam-for-food.eu.org]

[209.85.160.43 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.43 listed in dnsbl.ahbl.org]

[209.85.160.43 listed in dnsbl.ahbl.org]

[209.85.160.43 listed in dnsbl.ahbl.org]

[209.85.160.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.43 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.43 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.43 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.43 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.160.43 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[e2ksd2(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[e2ksd2(at)gmail.com]

0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date

2.6 HK_SCAM_N13 BODY: No description available.

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.0 HTML_MESSAGE BODY: HTML included in message

0.3 HTML_FONT_FACE_BAD BODY: HTML font face is not a word

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.6 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

1.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

1.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

Subject: {SPAM?} Immediate Reply ,



--0000000000002ed1080624748ec1

Content-Type: text/plain; charset="UTF-8"



Dear Friend,



I know that this letter will come to you as surprise, I got your contact

address while searching for foreign partner to assist me in this business

transaction that is present in our favor, My name is Mr. TOMA KARIM, I am

the Bill and Exchange (assistant) Manager (BOA) BANK OF AFRICA. I'm

proposing to transfer out in your name (US$16.5 Million Dollars) that

belongs to our later customer, MR. GORPUN VLADIMIR From Oblast Russia who

died in Siber airline that crashed into sea at Israel on 4th October 2001.



I want to present you to my bank here as the beneficiary to this fund, am

waiting for your response for more details, as you are willing to execute

this business opportunity with me.



Yours Sincerely,

Mr. Toma Karim



--0000000000002ed1080624748ec1

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




mail-XbIp4 gmail-jmmB7 gmail-GNqVo gmail-allowTextSelection gmail-OuGoX" id=

=3D"gmail-UniqueMessageBody_12">

v dir=3D"ltr">

x_gmail-XbIp4 gmail-x_gmail-jmmB7 gmail-x_gmail-GNqVo gmail-x_gmail-allowTe=

xtSelection gmail-x_gmail-OuGoX" aria-label=3D"Message body" tabindex=3D"0"=

>

ndex=3D"-1" aria-label=3D"Message body" class=3D"gmail-x_gmail-x_gmail-XbIp=

4 gmail-x_gmail-x_gmail-jmmB7 gmail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_g=

mail-allowTextSelection gmail-x_gmail-x_gmail-OuGoX" id=3D"gmail-x_gmail-x_=

gmail-UniqueMessageBody_1">

1">

sageBody_2" class=3D"gmail-x_gmail-x_gmail-x_gmail-XbIp4 gmail-x_gmail-x_gm=

ail-x_gmail-jmmB7 gmail-x_gmail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_gmail=

-x_gmail-allowTextSelection gmail-x_gmail-x_gmail-x_gmail-OuGoX" aria-label=

=3D"Message body" tabindex=3D"-1">

x_gmail-rps_6161">

gmail-x_gmail-UniqueMessageBody_5" class=3D"gmail-x_gmail-x_gmail-x_gmail-x=

_gmail-XbIp4 gmail-x_gmail-x_gmail-x_gmail-x_gmail-jmmB7 gmail-x_gmail-x_gm=

ail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_gmail-x_gmail-x_gmail-allowTextSe=

lection gmail-x_gmail-x_gmail-x_gmail-x_gmail-OuGoX" aria-label=3D"Message =

body" tabindex=3D"-1">

ail-rps_58ac">

l-x_gmail-x_gmail-UniqueMessageBody_6" class=3D"gmail-x_gmail-x_gmail-x_gma=

il-x_gmail-x_gmail-XbIp4 gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-jmmB=

7 gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_gmail=

-x_gmail-x_gmail-x_gmail-allowTextSelection gmail-x_gmail-x_gmail-x_gmail-x=

_gmail-x_gmail-OuGoX" aria-label=3D"Message body" tabindex=3D"-1">

class=3D"gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-rps_c3ab">

dir=3D"ltr">

l-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-XbIp4 gmail-x_gmail-x_gma=

il-x_gmail-x_gmail-x_gmail-x_gmail-jmmB7 gmail-x_gmail-x_gmail-x_gmail-x_gm=

ail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_g=

mail-allowTextSelection gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gma=

il-OuGoX" id=3D"gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-Uniqu=

eMessageBody_1">

gmail-x_gmail-rps_b570">

ail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-UniqueMessageBody_7" class=3D"g=

mail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-XbIp4 gmail-x_=

gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-jmmB7 gmail-x_gmail-x=

_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-GNqVo gmail-x_gmail-x_gmail-=

x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-allowTextSelection gmail-x_gmail-x_=

gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-OuGoX" aria-label=3D"Message =

body" tabindex=3D"-1">

ail-x_gmail-x_gmail-x_gmail-rps_fd2e">

mail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmail-x_gmai=

l_signature" dir=3D"ltr">

t-stretch:inherit;font-size:15px;line-height:inherit;margin:0px;padding:0px=

;vertical-align:baseline;color:rgb(36,36,36)">

-stretch:inherit;line-height:inherit;margin:0px;padding:0px;vertical-align:=

baseline">
<=

div dir=3D"ltr">

nt-stretch:inherit;line-height:inherit;margin:0px;padding:0px;vertical-alig=

n:baseline">
-apple-system, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" col=

or=3D"#242424">Dear=C2=A0 Friend,

;font-stretch:inherit;line-height:inherit;margin:0px;padding:0px;vertical-a=

lign:baseline">
UI, -apple-system, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" =

color=3D"#242424">

ch:inherit;line-height:inherit;margin:0px;padding:0px;vertical-align:baseli=

ne">
system, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" color=3D"#2=

42424">=C2=A0

I know that this letter will come to you as surprise, I got your=20

contact address while searching for foreign partner to assist me in this

business transaction that is present in our favor, My name is Mr. TOMA=20

KARIM, I am the Bill and Exchange (assistant)=C2=A0 Manager (BOA) BANK OF=

=20

AFRICA. I'm proposing to transfer out in your name (US$16.5 Million=20

Dollars) that belongs to our later customer, MR. GORPUN VLADIMIR From=20

Oblast Russia who died in Siber airline that crashed into sea at Israel=20

on 4th October 2001.

:inherit;line-height:inherit;margin:0px;padding:0px;vertical-align:baseline=

">
stem, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" color=3D"#242=

424">

ne-height:inherit;margin:0px;padding:0px;vertical-align:baseline">
e=3D"Segoe UI, Segoe UI Web (West European), Segoe UI, -apple-system, Blink=

MacSystemFont, Roboto, Helvetica Neue, sans-serif" color=3D"#242424">I

want to present you to my bank here as the beneficiary to this fund, am

waiting for your response for more details, as you are willing to=20

execute this business opportunity with me.

:0px none;font-stretch:inherit;line-height:inherit;margin:0px;padding:0px;v=

ertical-align:baseline">

h:inherit;line-height:inherit;margin:0px;padding:0px;vertical-align:baselin=

e">
ystem, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" color=3D"#24=

2424">Yours Sincerely,

ch:inherit;line-height:inherit;margin:0px;padding:0px;vertical-align:baseli=

ne">
system, BlinkMacSystemFont, Roboto, Helvetica Neue, sans-serif" color=3D"#2=

42424">Mr. Toma Karim

>

div>

>

div>

>



--0000000000002ed1080624748ec1--

Nigerian Spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 14 Oct 2024 17:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t0UY7-00000000BCT-1H5G

for dave@doctor.nl2k.ab.ca;

Mon, 14 Oct 2024 17:32:27 -0600

Resent-From: The Doctor

Resent-Date: Mon, 14 Oct 2024 17:32:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f43.google.com ([209.85.219.43]:56811)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1t0SND-00000000K67-1hYR

for sales@nk.ca;

Mon, 14 Oct 2024 15:13:11 -0600

Received: by mail-qv1-f43.google.com with SMTP id 6a1803df08f44-6cbe8119e21so38546616d6.1

for ; Mon, 14 Oct 2024 14:11:06 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1728940260; x=1729545060; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=liCV05mpz0YJKRgIJVSOANq5nA0svYOkd/iUiXiJGdw=;

b=F5eE88Z4SGG0GzlGsIZv1+xTSc29JOKZ7RxXiNlQPKCjFwIQGLwXokMTA+qwhWmOka

XwaMWKnDi6O3QPx3b8C0SvNxl9eHR3fSzJp005TN5EY1hlBSmudUIF0lVcnSFY8+D9Vq

qk8YduYWxNmtP1KHKjX63kody/mpJM9vTO/+W9ppSu0svPUfqOevtZreW2nZ9Nr62Ott

gnZvIx8pm1YLK2hfWJkEqw/jzDc2iSSHhxp2XVrTwtQCqzX776dfZfEcsECB4ghhywC3

fioSA78PTOvkqFVd9musap9n/CdFr3a8JdZremUeWAays/BlKDq7SSleoW7xmWKj3Y/f

1u1Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1728940260; x=1729545060;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=liCV05mpz0YJKRgIJVSOANq5nA0svYOkd/iUiXiJGdw=;

b=CbqUhSiaihAUQXEm9mkVgAN+m+Kwnf4LDXDJXcRmrLabX3qLvGOtR5Cni/pIVcEtsL

RPFOm92mslRU7MnU1PubcQ2E0JyR+uKRYytwvdLJA25pAeHmGRXrV0ILMr4rYETzF6zn

1FfrYVt7Iwmc/30cy/L4apUy05Bo2ZH7glUh5e/EnvskG8UmjyTdsGZ9JyyUxb2SQsby

2vYC9gBGDHc5c/rjw5vqQpYQLcRhhcqjl9eqB+7CtzO0SMnF96vfM8Zd3J4sqbob8rM4

p58er42w29GpDh4wVZB6OIj+5XiH32fANDbknWznqXEVoEdzoLOVBayRO7n/ynfsyPHy

Phhw==

X-Forwarded-Encrypted: i=1; AJvYcCVVeBP3sQMl2DgU16Lh/gXYFNbiPktdcuduPQebmmmMu5jbeNZdgB8kjPn2pimmG6qKyheGag==@nk.ca

X-Gm-Message-State: AOJu0YzWg/VgYodpekK6HBfti4tr1Fl5uuxTkBdn609sY4wj5WPBm0LN

ewIQ6PH+fL+7OLPMgP9ILAki2VYRs4bJ0XrEgf8csgkAr/xnmE+U5eJWlKTOUgpRBK/tAkAMZ/t

G0D3TVSji3Lm3ZsDNqTrlTp/4er4=

X-Google-Smtp-Source: AGHT+IFuGsuGiSDgTXjYSJRL/Kk8GafsVEByIWR6usI22Z5PosnLdTf3pkJrVCHfteg80ZwQGzkyyNNofFYj01Z9eJI=

X-Received: by 2002:a0c:e78f:0:b0:6cb:f5fc:1c4b with SMTP id

6a1803df08f44-6cbf5fc1d41mr163403186d6.10.1728940260169; Mon, 14 Oct 2024

14:11:00 -0700 (PDT)

MIME-Version: 1.0

From: Lil Baby

Date: Mon, 14 Oct 2024 22:10:40 +0100

Message-ID:

Subject: I NEED ONLY YOUR ALT-MOST SINCERITY.

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000000b9ea30624764623"

Bcc: sales@nk.ca

X-Spam_score: 12.9

X-Spam_score_int: 129

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello! Good Day, My name is Mrs. Cecilia Hormos, I am a widow

from Bulgaria. I actually got your email address from the international commerce

directory on my search for a sincere partnership on business investment.

I [...]



Content analysis details: (12.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.43 listed in dnsbl.ahbl.org]

[209.85.219.43 listed in dnsbl.ahbl.org]

[209.85.219.43 listed in dnsbl.ahbl.org]

[209.85.219.43 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.43 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.43 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.43 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.43 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[joneslilbaby0(at)gmail.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[joneslilbaby0(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 FREEMAIL_REPLY From and body contain different freemails

1.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)

Subject: {SPAM?} I NEED ONLY YOUR ALT-MOST SINCERITY.



--0000000000000b9ea30624764623

Content-Type: text/plain; charset="UTF-8"



Hello! Good Day,



My name is Mrs. Cecilia Hormos, I am a widow from Bulgaria. I actually got

your email address from the international commerce directory on my search

for a sincere partnership on business investment. I am indeed in need of

only a God fearing partner who will sincerely take possession of my late

husband's deposited fund and invest it for both our mutual benefits due to

my health right now.



And Note, you will determine the right/best projects to invest this fund

upon, and you will also take full supervision and running of the investment

project which shall be under your total care/watch for our mutual benefits.



Please, if you are interested in SINCERELY partnering with me on this

project, and will not betray my trust. Get back to me immediately for

further details and clarifications on the immediate take-off proceedings.

thank you

*Via Email:{hormoscecilia@gmail.com}



Warmest Regards,

Mrs Cecilia Hormos



--0000000000000b9ea30624764623

Content-Type: text/html; charset="UTF-8"





Hello! Good Day,

My name is Mrs. Cecilia Hormos, I am a widow

from Bulgaria. I actually got your email address from the international

commerce directory on my search for a sincere partnership on business

investment. I am indeed in need of only a God fearing partner who will

sincerely take possession of my late husband's deposited fund and invest

it for both our mutual benefits due to my health right now.

And

Note, you will determine the right/best projects to invest this fund

upon, and you will also take full supervision and running of the

investment project which shall be under your total care/watch for our

mutual benefits.

Please, if you are interested in SINCERELY

partnering with me on this project, and will not betray my trust. Get

back to me immediately for further details and clarifications on the

immediate take-off proceedings. thank you
*Via Email:{hormoscecilia@gmail.com}

Warmest Regards,
Mrs Cecilia Hormos







--0000000000000b9ea30624764623--

Instagram spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 14 Oct 2024 17:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t0UY7-00000000BCT-1H5G

for dave@doctor.nl2k.ab.ca;

Mon, 14 Oct 2024 17:32:27 -0600

Resent-From: The Doctor

Resent-Date: Mon, 14 Oct 2024 17:32:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f43.google.com ([209.85.219.43]:56811)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1t0SND-00000000K67-1hYR

for sales@nk.ca;

Mon, 14 Oct 2024 15:13:11 -0600

Received: by mail-qv1-f43.google.com with SMTP id 6a1803df08f44-6cbe8119e21so38546616d6.1

for ; Mon, 14 Oct 2024 14:11:06 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1728940260; x=1729545060; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=liCV05mpz0YJKRgIJVSOANq5nA0svYOkd/iUiXiJGdw=;

b=F5eE88Z4SGG0GzlGsIZv1+xTSc29JOKZ7RxXiNlQPKCjFwIQGLwXokMTA+qwhWmOka

XwaMWKnDi6O3QPx3b8C0SvNxl9eHR3fSzJp005TN5EY1hlBSmudUIF0lVcnSFY8+D9Vq

qk8YduYWxNmtP1KHKjX63kody/mpJM9vTO/+W9ppSu0svPUfqOevtZreW2nZ9Nr62Ott

gnZvIx8pm1YLK2hfWJkEqw/jzDc2iSSHhxp2XVrTwtQCqzX776dfZfEcsECB4ghhywC3

fioSA78PTOvkqFVd9musap9n/CdFr3a8JdZremUeWAays/BlKDq7SSleoW7xmWKj3Y/f

1u1Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1728940260; x=1729545060;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=liCV05mpz0YJKRgIJVSOANq5nA0svYOkd/iUiXiJGdw=;

b=CbqUhSiaihAUQXEm9mkVgAN+m+Kwnf4LDXDJXcRmrLabX3qLvGOtR5Cni/pIVcEtsL

RPFOm92mslRU7MnU1PubcQ2E0JyR+uKRYytwvdLJA25pAeHmGRXrV0ILMr4rYETzF6zn

1FfrYVt7Iwmc/30cy/L4apUy05Bo2ZH7glUh5e/EnvskG8UmjyTdsGZ9JyyUxb2SQsby

2vYC9gBGDHc5c/rjw5vqQpYQLcRhhcqjl9eqB+7CtzO0SMnF96vfM8Zd3J4sqbob8rM4

p58er42w29GpDh4wVZB6OIj+5XiH32fANDbknWznqXEVoEdzoLOVBayRO7n/ynfsyPHy

Phhw==

X-Forwarded-Encrypted: i=1; AJvYcCVVeBP3sQMl2DgU16Lh/gXYFNbiPktdcuduPQebmmmMu5jbeNZdgB8kjPn2pimmG6qKyheGag==@nk.ca

X-Gm-Message-State: AOJu0YzWg/VgYodpekK6HBfti4tr1Fl5uuxTkBdn609sY4wj5WPBm0LN

ewIQ6PH+fL+7OLPMgP9ILAki2VYRs4bJ0XrEgf8csgkAr/xnmE+U5eJWlKTOUgpRBK/tAkAMZ/t

G0D3TVSji3Lm3ZsDNqTrlTp/4er4=

X-Google-Smtp-Source: AGHT+IFuGsuGiSDgTXjYSJRL/Kk8GafsVEByIWR6usI22Z5PosnLdTf3pkJrVCHfteg80ZwQGzkyyNNofFYj01Z9eJI=

X-Received: by 2002:a0c:e78f:0:b0:6cb:f5fc:1c4b with SMTP id

6a1803df08f44-6cbf5fc1d41mr163403186d6.10.1728940260169; Mon, 14 Oct 2024

14:11:00 -0700 (PDT)

MIME-Version: 1.0

From: Lil Baby

Date: Mon, 14 Oct 2024 22:10:40 +0100

Message-ID:

Subject: I NEED ONLY YOUR ALT-MOST SINCERITY.

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000000b9ea30624764623"

Bcc: sales@nk.ca

X-Spam_score: 12.9

X-Spam_score_int: 129

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello! Good Day, My name is Mrs. Cecilia Hormos, I am a widow

from Bulgaria. I actually got your email address from the international commerce

directory on my search for a sincere partnership on business investment.

I [...]



Content analysis details: (12.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.43 listed in dnsbl.ahbl.org]

[209.85.219.43 listed in dnsbl.ahbl.org]

[209.85.219.43 listed in dnsbl.ahbl.org]

[209.85.219.43 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.43 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.43 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.43 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.43 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[joneslilbaby0(at)gmail.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[joneslilbaby0(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 FREEMAIL_REPLY From and body contain different freemails

1.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)

Subject: {SPAM?} I NEED ONLY YOUR ALT-MOST SINCERITY.



--0000000000000b9ea30624764623

Content-Type: text/plain; charset="UTF-8"



Hello! Good Day,



My name is Mrs. Cecilia Hormos, I am a widow from Bulgaria. I actually got

your email address from the international commerce directory on my search

for a sincere partnership on business investment. I am indeed in need of

only a God fearing partner who will sincerely take possession of my late

husband's deposited fund and invest it for both our mutual benefits due to

my health right now.



And Note, you will determine the right/best projects to invest this fund

upon, and you will also take full supervision and running of the investment

project which shall be under your total care/watch for our mutual benefits.



Please, if you are interested in SINCERELY partnering with me on this

project, and will not betray my trust. Get back to me immediately for

further details and clarifications on the immediate take-off proceedings.

thank you

*Via Email:{hormoscecilia@gmail.com}



Warmest Regards,

Mrs Cecilia Hormos



--0000000000000b9ea30624764623

Content-Type: text/html; charset="UTF-8"





Hello! Good Day,

My name is Mrs. Cecilia Hormos, I am a widow

from Bulgaria. I actually got your email address from the international

commerce directory on my search for a sincere partnership on business

investment. I am indeed in need of only a God fearing partner who will

sincerely take possession of my late husband's deposited fund and invest

it for both our mutual benefits due to my health right now.

And

Note, you will determine the right/best projects to invest this fund

upon, and you will also take full supervision and running of the

investment project which shall be under your total care/watch for our

mutual benefits.

Please, if you are interested in SINCERELY

partnering with me on this project, and will not betray my trust. Get

back to me immediately for further details and clarifications on the

immediate take-off proceedings. thank you
*Via Email:{hormoscecilia@gmail.com}

Warmest Regards,
Mrs Cecilia Hormos







--0000000000000b9ea30624764623--

Instagram spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 14 Oct 2024 17:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t0UXj-00000000B4e-1qA0

for dave@doctor.nl2k.ab.ca;

Mon, 14 Oct 2024 17:32:03 -0600

Resent-From: The Doctor

Resent-Date: Mon, 14 Oct 2024 17:32:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f200.google.com ([209.85.214.200]:58522)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1t0Qor-00000000FrB-3noE

for sales@nk.ca;

Mon, 14 Oct 2024 13:33:34 -0600

Received: by mail-pl1-f200.google.com with SMTP id d9443c01a7336-204e310e050so59525255ad.0

for ; Mon, 14 Oct 2024 12:31:35 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1728934289; x=1729539089; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=BD0n1FxsvRexqOr/udWImix9YNJgb+qvnV6k5Uuyx98=;

b=GDdjZ3yMC5/FIySF+w04UYCpiVIHEbOnPciaff8rmHTViiWjXj6oc4cplvS+6GKavU

bRUQjjLXkLANupv2ert3K0lSVA8IotUr+LxE/6LntPrrulLHYboSccymNmR1rJ4SukvO

nyoMEibY7dSRHu9kapLL4m477OCQbQV6Vnhlg+w/rcG614Va6Sa/gkQqPtIZ0y+DJtJB

ycablBJu+y1TpPDly/khxq56FSU8CduqOY+7fopXCjc8me1l9uWhuq+NOcgP1CMsLz1b

VKVzImRkEfJnlRPko+AkIOzVpW2KntxyvN/LcNrRdUDEvIAh9F3MYPgC8/bkZn3ZZvwU

c+ZA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1728934289; x=1729539089;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=BD0n1FxsvRexqOr/udWImix9YNJgb+qvnV6k5Uuyx98=;

b=OH3N7GYOJQkWnQVK7SaKHJSl31zXzCx5OOD4j/UTN4mtDXK5+XWa9rz5DSx2y0+5c4

rAyAc1ReOt3pumxoKLg1DPNFGQ18lXV+/KOJZKCanjKtIQyDbDjaENSbBYLagvjL/McO

pbqe4zweAiUggwEO9B7q2JZaxbGTw9NmOsDgTfzujY4L1IVlTtWVvTubJFEfLb79Uzh+

NdLxFFccweh3RgHIKY0+LgUKPiozb61UCQ3eJlgQzN5kD94MO+W61dz0B7w7eWnc0b7B

3P6y+4kmxIlXVzj1kc9jnObxFDg+AZueWWG4e1WUMY7oYPs2PPJo3r4V2bosYTz+fBY8

Y0aA==

X-Gm-Message-State: AOJu0Yz5Oj0VIrMsNdAFgP1fIaoSrLfUv1kWRtEUJv5uceRuPJwWrg27

xCkLuWe8geQGrzLidyQ5HS3Qvin6Ee3ZHUfcPT2WHnyVATE6HKkhTysfHCgtSDIhHQr1ta3nnOs

=

X-Google-Smtp-Source: AGHT+IHLTjmp+EGGVlNPLiR/kfMvaMtSZ0NFgkyiXqcWd5p5MqiiDmoLvbfysmIZCLC8nn7pg7Fh+GuH4Q==

MIME-Version: 1.0

X-Received: by 2002:a17:903:298d:b0:20c:5e86:9b68 with SMTP id

d9443c01a7336-20ca1429fe7mr194688975ad.4.1728934289387; Mon, 14 Oct 2024

12:31:29 -0700 (PDT)

Message-ID:

Date: Mon, 14 Oct 2024 19:31:29 +0000

Subject: netknowyeg, Get More Instagram Followers and Reels Views here

From: socialhilo@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

X-Spam_score: 6.8

X-Spam_score_int: 68

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello Netknow Internet Service, Do you want to get more followers

on Instagram We found your email on your Instagram Account @netknowyeg and

you have about 936 Followers. Our company offers Buy Instagram Followers

services. This is the best way to gain more followers fast and easily.



Content analysis details: (6.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

[209.85.214.200 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.200 listed in dnsbl.ahbl.org]

[209.85.214.200 listed in dnsbl.ahbl.org]

[209.85.214.200 listed in dnsbl.ahbl.org]

[209.85.214.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.200 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.200 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.200 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[socialhilo(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} netknowyeg, Get More Instagram Followers and Reels Views here



Hello Netknow Internet Service,



Do you want to get more followers on Instagram

We found your email on your Instagram Account @netknowyeg and you have

about 936 Followers.



Our company offers Buy Instagram Followers services.

This is the best way to gain more followers fast and easily.



Our price:



Buy 1,000 Instagram Followers: $29 USD

Buy 2,000 Instagram Followers: $39 USD



We can add up to 1 Million Followers.



Buy Instagram Followers can help attract thousands of followers that you

can keep informed about any of your product or service offerings instantly.

Branding is also another successful, important marketing factor that

Instagram can provide for your business.



We also have other services like YouTube, TikTok, Threads, and Twitter.



See all packages here: https://bit.ly/2n0y4Bj





Thank you,







Best regards,

General Marketing,

Instasocial Corp.

Netflix PHish from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 14 Oct 2024 17:31:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t0UWX-00000000ATu-23co

for dave@doctor.nl2k.ab.ca;

Mon, 14 Oct 2024 17:30:49 -0600

Resent-From: The Doctor

Resent-Date: Mon, 14 Oct 2024 17:30:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-co1nam11hn2234.outbound.protection.outlook.com ([52.100.173.234]:19937 helo=NAM11-CO1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

id 1t0Qzj-00000000GJQ-1fLx

for doctor@doctor.nl2k.ab.ca;

Mon, 14 Oct 2024 13:44:52 -0600

ARC-Seal: i=3; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=pass;

b=WWiPetkrs07CiHPIVyVB3TULKcnYMZWgp/vPeYGnDsNGdvS69tWlsHeqohBtVGcgUfaCMhGM6DvLCQcr/au2cQdLfTk4BhJReJh/8t+v8x2zzdWTmFIHQ7lfWKWZLegDHnsY+nXTO9ESORoxS1L0mbWZoV0O4/ZMzySebNruJ3I3CXK4l4i4ow1OExXI9KxU8odc4R2r/XQqrqfsc+eDqmDydHgDVfkPugIJQPfdDoWsS7/mgdFpC/Ld3n7whDF8Y9i0WnseI3c38AB6R1sbhVXtJ/1P2aBLvvh+IvissG0m47vybgEvXIj2d00mgEH/XMxE0z+twLI39WznysiwUw==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=No5c0BZCoa3RV1WlMfU0FA19uq8IoRbPJIKlAb2vQxw=;

b=SksrVWpfpWWlOOXKbV1RmNYWvpikU5BrUHq7Bu8Uw77RgbTflEljaaRgcP8AA6WpyUael1R3bI9SRL7KBhz1PyzOyTHligmCF7eqV1c/7uOBMVB5/Zwd7O+jJxs9THaGUJ3wVNPJ9dQRQIVuYauUHkFbpXR1SNXFuQ0aZB4pvRLkbAVsEshDRGCHrB8ckNN9HlsYT/2ydUiHoTpNeAGd0fNp54pb1eWIoAiBuSQewlituotDl8GLm0dYhk/GnLW+jxCGtHrfdFFxhP/kOnS2bVevpQDFvDUOTeS72AitI1O/DuCqkLrmrQsthYOHGvnFi8JkWdrrtGgdnV1qWQC0eg==

ARC-Authentication-Results: i=3; mx.microsoft.com 1; spf=fail (sender ip is

40.95.32.140) smtp.rcpttodomain=transbirday.com.br

smtp.helo=nam10-dm6-obe.outbound.protection.outlook.com; dmarc=pass (p=none

sp=none pct=100) action=none header.from=hotmail.nl; dkim=pass (signature was

verified) header.d=hotmail.nl; arc=pass (0 oda=0 ltdi=1)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=HOTMAIL.NL;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=No5c0BZCoa3RV1WlMfU0FA19uq8IoRbPJIKlAb2vQxw=;

b=JczqOUl9wWqfV5eeUWtxqrEGqx6ECWK/bQq/WBN0IOq8gsPGR87fwYX0gQbBG5EMaxOE0Zx8/ZEm1Sw01c3sBVWbn/DZD7bhtFkOVZf60pH9NO1dLIDMSptzMLQ/ipOmAdLiRL4JD5kzvhnUGrCOGQu1b13q4oPp6wzGKCPz99o4MXR2nXe0mNQyoLHynsOq2pYsuqczUzlUiR0fXUjAdKBqUDO4XzBFkl/WN9/gH6IoVkP9wiwEi43E8Y//0gUSS1FI3yL7d7uwmnG8TsZibOTHK/1azx3lNC62EUpOILvmqwLmhuI6zVJ67QcaPW9+CPeAjEXwR9vYYouwy6F4oQ==

Received: from CPWPR80MB6847.lamprd80.prod.outlook.com (2603:10d6:103:1d2::7)

by CPWPR80MB6396.lamprd80.prod.outlook.com (2603:10d6:103:e6::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8048.20; Mon, 14 Oct

2024 12:41:28 +0000

ARC-Seal: i=2; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=pass;

b=O3HQyaJ4Wj30+5QnZ/Pa7WQq0JSdqrshJkKF2OXsMkz1cGSQI6vVjQK3AHU9A/qL1xyLM+ZNq1hLBMHFk/yhKogIkmriBbl6OBHuuQDIdNiGWHnCemCyRxYuw0o3DjHnZEW9jk0pL86yinDlOM0iu3E0AG8wJCPRBII7PUqEAnybVSc69fIhk9C7lWGvpmBzSTmXQwHE0HsvNbhmN7YLCwfE1rx5pUTTAAh7gfGvk6nB0KNJlXI1CVebdpPpJRhmJEloBnr9sI5xX0DAAPF/kc9737ENnG9v+ZeV6AGKFpKcpF0E8wm7lgyhcG3qYCquDLw+TWPKktVtX2Yvcr7zfw==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=No5c0BZCoa3RV1WlMfU0FA19uq8IoRbPJIKlAb2vQxw=;

b=jXf08iXL9ZmZI/BoNz39NGIxrx/jH8dTpIt9GRwZVLBDdcJZ+naeWXBJtlaXQKWBqXXU3ayDQs6EQXrU9e/Ifp0yTVQyl5b19hC6lUW+PDGdNzy/A7OABJfxZ51Dh+iHZ0CLzxXdd80l7aN4BnmVIbRHzPV62vrWcB51fUdH+8TCXmsmrcWZ/1mlc8/VEgPrnTuH3B9EqZCvOMroLETFkJbCEy2Vw1Ky7v6hacxvt7/kKBwtJbzuCf0hfhw4MdpclIRmTfPNH0Al1Dabve1vU0bWEC5mrFKSJiMPVmMgqBFwjytv9oHzMRMZGElDds6ASuGknFZcfoP/vOG3biYfYw==

ARC-Authentication-Results: i=2; mx.microsoft.com 1; spf=fail (sender ip is

40.95.32.140) smtp.rcpttodomain=transbirday.com.br

smtp.helo=nam10-dm6-obe.outbound.protection.outlook.com; dmarc=pass (p=none

sp=none pct=100) action=none header.from=hotmail.nl; dkim=pass (signature was

verified) header.d=hotmail.nl; arc=pass (0 oda=0 ltdi=1)

Received: from BN9PR03CA0498.namprd03.prod.outlook.com (2603:10b6:408:130::23)

by CPWPR80MB6847.lamprd80.prod.outlook.com (2603:10d6:103:1d2::7) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8048.25; Mon, 14 Oct

2024 12:39:45 +0000

Received: from BL6PEPF0001AB59.namprd02.prod.outlook.com

(2603:10b6:408:130:cafe::7a) by BN9PR03CA0498.outlook.office365.com

(2603:10b6:408:130::23) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8048.27 via Frontend

Transport; Mon, 14 Oct 2024 12:39:44 +0000

Authentication-Results: spf=fail (sender IP is 40.95.32.140)

smtp.helo=NAM10-DM6-obe.outbound.protection.outlook.com; dkim=pass (signature

was verified) header.d=HOTMAIL.NL;dmarc=pass action=none

header.from=hotmail.nl;

Received-SPF: Fail (protection.outlook.com: domain of

NAM10-DM6-obe.outbound.protection.outlook.com does not designate 40.95.32.140

as permitted sender) receiver=protection.outlook.com; client-ip=40.95.32.140;

helo=NAM10-DM6-obe.outbound.protection.outlook.com;

Received: from NAM10-DM6-obe.outbound.protection.outlook.com (40.95.32.140) by

BL6PEPF0001AB59.mail.protection.outlook.com (10.167.241.11) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.8069.17 via Frontend Transport; Mon, 14 Oct 2024 12:39:43 +0000

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=KK8UnwpVVia+/RXkFNM2VGfJn3cdn85hFxQzlRqjczMRP07wIeBP79lvJShCSPt3JcoSgrMKjKpnxNRmFgivcobodgOeeBJ/CTbmUPaKWfJrEXc7y2h5li1LXfW+3KVAs5DXOBLV4yp2C8maIOL9CzCpQOGtKU6WOqpic+Cw+2RMT7BhSapmuTjJysam35Adc0UvgTJTiljUf1/Z9YAqel+xmVQD+2R6lSCzbLrPpJZzwDOofd+FaISCqkOsJm9urLJEy8e+xSPdOI4q6xtqI+IJh+H8AOL5589xRKgYaESWkksbmyELDYHuIlfrbfYwANe17xG8PPu+1tKCjUdYQw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=No5c0BZCoa3RV1WlMfU0FA19uq8IoRbPJIKlAb2vQxw=;

b=Uzoi5ATTdHLjRRnDOZAr16ZWP0Vp6tW4zlwsVtxg2Bl0i+Fi7shaK3uTqt9yGr3NUnj3m1X3q8yvOQEGKAwg9LdFEf43/T0+f7bqnobWs3J5El5AEB/H3xHRM42ToiPjqa+Nj4CqbdnsZoyS+2/rOM0C7MSCMsvdpmIJVtvCtpXmRRpPk57URMjhttvC7ScjChYnMUC/94UTk7DFhD8Bstvj9JLcypJhnaY3FHxs0qWKGJogZfZpb+T/nplwRrQc2PTEcXcKzbvjjhQmtKyiFMSom3Rm/BxFIqnEcMdHo67y9oGERecFFwQGhNyoFe0/jU0wn82Td5UbwXzg5OfyBg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

185.127.94.22) smtp.rcpttodomain=transbirday.com.br smtp.helo=imagecars.com;

dmarc=fail (p=none sp=none pct=100) action=none header.from=hotmail.nl;

dkim=none (message not signed); arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=HOTMAIL.NL;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=No5c0BZCoa3RV1WlMfU0FA19uq8IoRbPJIKlAb2vQxw=;

b=bg1grxq/Pt2W1Bb1Vs490atqF37Ct0YbOmTd2HoVfd0UR3XU9F8XCD2eBjZku07mmBhig5Vf0tB4pnL1cxOdCBPZBvZiI/FDRSFO2TA1t4yNga+gZNke9a++R4xRqV8nzpR2HEvAyG8rr0eC6CX2OYCDpv/NFSOaePQdsFr48KEg3etlhnWLKHNEYtQso8cdzXMdpbiCYMtibKfKr5lxC+MP1qvVDep9Qd69a6DTt4zFEQnv7L0xqXb4uqLdLTyH1PKhlXzCQSBtoosYCJScXB4yyrOmCDPmb0njsWLMBY/2avKJ4T91fBnK3tLmDdcUqYUUy1RGzKHebKH4HURhmA==

Received: from SJ2PR07CA0001.namprd07.prod.outlook.com (2603:10b6:a03:505::11)

by SCYP152MB6572.LAMP152.PROD.OUTLOOK.COM (2603:10d6:300:ff::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8048.26; Mon, 14 Oct

2024 12:39:36 +0000

Received: from SJ1PEPF000023D4.namprd21.prod.outlook.com

(2603:10b6:a03:505:cafe::c) by SJ2PR07CA0001.outlook.office365.com

(2603:10b6:a03:505::11) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8048.27 via Frontend

Transport; Mon, 14 Oct 2024 12:39:35 +0000

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 185.127.94.22)

smtp.helo=imagecars.com; dkim=none (message not signed)

header.d=none;dmarc=fail action=none header.from=hotmail.nl;

Received-SPF: Fail (protection.outlook.com: domain of imagecars.com does not

designate 185.127.94.22 as permitted sender) receiver=protection.outlook.com;

client-ip=185.127.94.22; helo=imagecars.com;

Received: from imagecars.com (185.127.94.22) by

SJ1PEPF000023D4.mail.protection.outlook.com (10.167.244.69) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.8093.1 via Frontend Transport; Mon, 14 Oct 2024 12:39:34 +0000

Content-Type: multipart/alternative; boundary="a37c8235046de7023791f56c6a35d7e8fa67e9fbb5e06a2b5d0be3c96a8a"

From: "NETFLI-X"

To: chaybilwarga1@transbirday.com.br

Subject: We have a surprise from Netflix

Date: Mon, 14 Oct 2024 12:39:32 +0000

MIME-Version: Version-HTML

Message-ID:

<56333db5-d7ae-4a0b-a548-7e188c73213b@SJ1PEPF000023D4.namprd21.prod.outlook.com>

X-EOPAttributedMessage: 1

X-MS-TrafficTypeDiagnostic:

SJ1PEPF000023D4:EE_|SCYP152MB6572:EE_|BL6PEPF0001AB59:EE_|CPWPR80MB6847:EE_|CPWPR80MB6396:EE_

X-MS-Office365-Filtering-Correlation-Id: 620fb29d-f6a1-418d-a478-08dcec4d47c1

X-MS-Exchange-SenderADCheck: 0

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam-Untrusted:

BCL:0;ARA:13230040|69100299015|82310400026|35950700016|34020700016|376014|61400799027|1032899013|4022899009|7093399012|48200799018|15920700032;

X-Microsoft-Antispam-Message-Info-Original:

=?us-ascii?Q?cHGM70+p16bUSOAXI2wo0Jzzu+qMiaro2KV0iE2rb4Mbpl3+T+QPJuETdXME?=

=?us-ascii?Q?/XJY0uH4nb4ZirlCKduRMBCfMP06x4DcXmBJsu9Qfrumu91Pybf1Mvh/dGle?=

=?us-ascii?Q?3XFXn2hGfgycBbc5epAl75r6hZFzpbPPDDKPL2bMnnqX5WrV38zyZ4a5Hr3F?=

=?us-ascii?Q?O4i4ZpT/5jy4QyNRqDv33dqia4sGT02twQuXfYuySJFhDWCKzT58Mxd7Srk+?=

=?us-ascii?Q?0LMZLuV0rMU6H19Uv+FimnUNQgpWzLYj0h5ntJOqDRpt3l2GYFRpyiTtOlrm?=

=?us-ascii?Q?34VVpxff3ccsqvmZsUepXmcHva6MzHwWIG8ignwLz2oaxDua700QeLJv5KU+?=

=?us-ascii?Q?R2gITyrrXSvNXN0hzIbd37GXBrV5OBG5trm/1qA+y7+F/Z2cil9ULTqP8KNc?=

=?us-ascii?Q?J4skV7NK5AdrQZEItnU6KtOu6kMRiRLmgiJFkQsmW+f6G+qOK+CD6vDjnQ1L?=

=?us-ascii?Q?ZkrxqvdXNyNmF2sjSqHerLsM0rXnQOtQFiyvqHbHhF7eyrXX7Kr02wWUGyQg?=

=?us-ascii?Q?IuRnkIZEzc0L1L/TqjomrvbqA+/2d5tDCZqBjTqTqJM/pzBVGwpN+QW7EYXF?=

=?us-ascii?Q?lfqPiENElXEy0TDbJ1UVzn+wFwnynIIfHidBn2yrPeWLk3v33PsehS7qsgJu?=

=?us-ascii?Q?2A2/PD4VIazUTALDeY802Mg/ebl6sj3lMO5O7XZLLCQ1/SfrDLwVpsBbRuFb?=

=?us-ascii?Q?WYkK/0n2+PNOaHM1JTGlq1lxue5oOKBQ+anzKFlo7aUD1CgUlAnxjadE1c6L?=

=?us-ascii?Q?lkr+IMD1RWqL+tIZFsLfgsU0r675ao5KEmgb/VIAlcBFca8dMFmZlcKkeC/C?=

=?us-ascii?Q?u4wLu+tXxPXNyheww+bElXggH0j8hYkUdg2UWJqlewL36T4t+M9TLPpyqpts?=

=?us-ascii?Q?MODKXAeaQVUIU6gg7loLxEsj0fElwRejtDz9bvCCEldApbjd4/HMKoJPLCy1?=

=?us-ascii?Q?gWfE5O595cXXY/2VlKtGmiHqyyiQ00xfUHbKUgy0dtUtBEu+nlg9cxqZ0wVT?=

=?us-ascii?Q?JwCdBxQz7/TrAUCiql2Xx/BVSecAXpe31jWa9ATrpgr00ISLI80FOIq4hnnr?=

=?us-ascii?Q?htJar5q2GlwBEpnOfTMFeJGTTOTrB4WxAyPEwO2P6P/d7rUMEn8VFdV6FAvM?=

=?us-ascii?Q?NU8iBkrMXAI4tfwgkrSpPgoljTWlA9khLOWC84ltbZE+pOoP/jK3xZv0OWhd?=

=?us-ascii?Q?eRXiDftpmFOE/rmdUHaR6yazHjShW4bpP3zzwA8HhiyKlVANWDIgeINmNiGf?=

=?us-ascii?Q?fKw3HHbVX+gGyM/brrqdyD2J3iMJM9HpE6acu3InB9Rau7BPsnXefNs1o/h1?=

=?us-ascii?Q?3vg3FAsMf/Us/ViprKmNV1yn?=

X-Forefront-Antispam-Report-Untrusted:

CIP:185.127.94.22;CTRY:DE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:imagecars.com;PTR:smart1.mysynology.net;CAT:NONE;SFS:(13230040)(69100299015)(82310400026)(35950700016)(34020700016)(376014)(61400799027)(1032899013)(4022899009)(7093399012)(48200799018)(15920700032);DIR:OUT;SFP:1023;

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SCYP152MB6572

X-EOPTenantAttributedMessage: 81b3d8e6-e3de-49dc-ad15-2a2a056137a8:0

X-MS-Exchange-Transport-CrossTenantHeadersStripped:

BL6PEPF0001AB59.namprd02.prod.outlook.com

X-MS-Exchange-Transport-CrossTenantHeadersPromoted:

BL6PEPF0001AB59.namprd02.prod.outlook.com

X-MS-PublicTrafficType: Email

X-MS-Office365-Filtering-Correlation-Id-Prvs:

4640c653-7515-4799-1ffa-08dcec4d4269

X-LD-Processed: 81b3d8e6-e3de-49dc-ad15-2a2a056137a8,ExtAddr

X-Microsoft-Antispam:

BCL:0;ARA:13230040|61400799027|376014|7416014|48200799018|35042699022|9140799003|7093399012|69100299015|4022899009|1032899013|47022699003|15920700032;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?QWJ1THNwTjhRZU5KdWJKVnpuYTFzb2pnWUpmTnJSamtFMW40Qk9zT01sT3Nn?=

=?utf-8?B?Mk9CR3JTdnF4RURhci9uMFBKQjlnT1RmQzdkcUxzanU3ZjlKT0lyL3VjQVRa?=

=?utf-8?B?bDh2cS9xWHNpVmsrOFdXTHQ5VDBwc2kvcElPSm1leFFac29KVHpUUXUvTUhi?=

=?utf-8?B?Y1UyUE11K1FuVkJ4bTRWeTZXV2g0UkxuR3pkT3RvU3ljTm1GVnR1ZVRHeDNx?=

=?utf-8?B?MHVZVGxjOXhjNTQvNitzck1vRDhBZFZYdnQ3MzZNbjdCMW9kRysramRKbmJv?=

=?utf-8?B?NVNLaHBaN1hVK1kzdDR4cG5sTTh0N3Rub2lrbzVZZGY1a3A3Q2h2VHk5d2F2?=

=?utf-8?B?UnBNdkE5SW1jWUpBVGg2U29YamdRbGYwVEk0azNzQ1YrL1Y2NGFkSFcxUCtV?=

=?utf-8?B?SzRrZThDK3RhUmNZdExqakNxQllZWk45MUdaZCtMS3paczRLSFJ6VEh3ZWZZ?=

=?utf-8?B?V2plVGhwQlQ4MTB5Wk83dUg1SjROelJJM2FvNVFzek9kYXFLdFE0bEJXZm1o?=

=?utf-8?B?cEhPb2h6TXRVSGE4K0N2ZGJpcXU4Z25rM25pUFRyZ0lOaU5xaEQyTjBSNm5F?=

=?utf-8?B?V0xvMjlaTjhYWjJOSnl3WTZDNnZkVVJtZThYeWdHM2V5RmVhZi9JaVk0ajJz?=

=?utf-8?B?QUV3V281VUUzODBFWTFTNzJHMStER1FyRTBhd01yZXRpOGFheU9TR2l6a1Jq?=

=?utf-8?B?aW1aaWR1Wml4NVdCOTJwRnZjbElIMEUwS1JtMyt3VTJNcjlKVzVDV2ZLS2Mv?=

=?utf-8?B?eFN5SThFc3BndGZ4MzQ3QVAraEpaQXpEOEZoVWtKeEVzN25aMXZLSUdlY3BM?=

=?utf-8?B?ekdtSXM2LzM5ODN5R1l2N0plWGRIb2RkM3ZZdnlKem01NzBwTEVWRjdPMUhl?=

=?utf-8?B?YnhoS3pLSCtFVjhLY0ZEVTZMUXFTLzZ0RldqbW02QVFaV1Z0ZnBiRDRZK2Ez?=

=?utf-8?B?bHZSU3k4Rnd6UjdSQXA5UGFwejBpUG9INGxnN20ybEVqVHptYWUyZlpDUEU4?=

=?utf-8?B?STg2RTR6NU90eWVSRUxUZlJ1bGJSTnJ0djFDZDRuWmU3bVdoZkN4Tlhsc1dY?=

=?utf-8?B?bmFGUnprZVZDbkFPaVpUem5QRDBaa2dKd2h6WmRKMEJJT1BMTlBnS3BmUFNy?=

=?utf-8?B?ZUVJM0ViNUpoemZzS3BNeEh5QWxUM2t4bjNBZTlERzBCV2I1SzNaellydXZy?=

=?utf-8?B?dWVyYVRTV0VtL3llMmM5cTFjTVFqa2g3NjdPaExWUmNsVDBVR2UwWHAxbGhK?=

=?utf-8?B?bHBRRVlZWXFDMGo4c0ZSbm5ZSDZXSmlvZkFqMzhMcEg2YUx5WjRtWDZqZXYw?=

=?utf-8?B?c1FDbWtFR3NnMkVhcXMxUFd1WmJnbHk0NzA3NWo4NXFBWFd1ZEVqNnJ3MWVS?=

=?utf-8?B?YUQzMzdldTJLYlBXZ1FUV1RzYTltU2p4RitxTGUzbTE5Z0ZhRUpIeGkrSDg3?=

=?utf-8?B?bnVHRm9rME9CWTVlaUVaMGdMaW1aYTVwSU1qenUrR2gvV05vQktRTmVPWHVS?=

=?utf-8?B?UGNYd1RFL3ZaOWIybm5jdUwyVnREYXkyb2FsUlVHWlRmL3BVZmNIQ0VHV0VH?=

=?utf-8?B?R0dwSVlwRGhuZlFIekdtN1RCUUtwTm5yM3B4UnIzaCtiVytudXdLUml4T0Fr?=

=?utf-8?B?OGptUFNVRlpGRGxuVWltSjJ1UExYUWdWTWJNRXh0NFBObktFUDQzeCt6aWg5?=

=?utf-8?B?c1UxUnZNS0VuNDZKdE1hVHNRZ0ZYZDZKV2dlT3F2WW5PUU50QmhHMVdLWU1D?=

=?utf-8?B?RTgzVmdodnNBY3dsWFZ6NGY3TnBGb1RxdlowU015anM4ZllNRGFqSDk3aS9T?=

=?utf-8?Q?9vb8Yre3BwtmbXqnfkygjaLE2AFWWcC2lGnb4=3D?=

X-Forefront-Antispam-Report:

CIP:40.95.32.140;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:NAM10-DM6-obe.outbound.protection.outlook.com;PTR:mail-dm6nam10rlhn2140.outbound.protection.outlook.com;CAT:NONE;SFS:(13230040)(61400799027)(376014)(7416014)(48200799018)(35042699022)(9140799003)(7093399012)(69100299015)(4022899009)(1032899013)(47022699003)(15920700032);DIR:OUT;SFP:1501;

X-ExternalRecipientOutboundConnectors: 81b3d8e6-e3de-49dc-ad15-2a2a056137a8

X-Auto-Response-Suppress: DR, OOF, AutoReply

X-OriginatorOrg: transbirday.com.br

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Oct 2024 12:39:43.3246

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 620fb29d-f6a1-418d-a478-08dcec4d47c1

X-MS-Exchange-CrossTenant-Id: 81b3d8e6-e3de-49dc-ad15-2a2a056137a8

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=2d839883-f656-4852-9564-089c314ebb96;Ip=[185.127.94.22];Helo=[imagecars.com]

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-CrossTenant-AuthSource:

BL6PEPF0001AB59.namprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-Transport-CrossTenantHeadersStamped: CPWPR80MB6396

X-Spam_score: 14.3

X-Spam_score_int: 143

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: View this post on the web at https://maryamhenein.substack.com/p/paradise-lost-and-other-news-with

Follow: Twitter [ https://substack.com/redirect/92b9306d-5476-4e51-bad5-9e07dcdcd2f9?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw

] | Instagram [ https://substack.com/redirect/fa1 [...]



Content analysis details: (14.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.127.94.22 listed in will-spam-for-food.eu.org]

[185.127.94.22 listed in will-spam-for-food.eu.org]

[185.127.94.22 listed in will-spam-for-food.eu.org]

[185.127.94.22 listed in will-spam-for-food.eu.org]

[185.127.94.22 listed in will-spam-for-food.eu.org]

[185.127.94.22 listed in will-spam-for-food.eu.org]

[185.127.94.22 listed in will-spam-for-food.eu.org]

[185.127.94.22 listed in will-spam-for-food.eu.org]

[2603:10b6:a03:505:cafe:0:0:c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:cafe:0:0:c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:cafe:0:0:c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:cafe:0:0:c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:cafe:0:0:c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:cafe:0:0:c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:cafe:0:0:c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:cafe:0:0:c listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:505:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[40.95.32.140 listed in will-spam-for-food.eu.org]

[40.95.32.140 listed in will-spam-for-food.eu.org]

[40.95.32.140 listed in will-spam-for-food.eu.org]

[40.95.32.140 listed in will-spam-for-food.eu.org]

[40.95.32.140 listed in will-spam-for-food.eu.org]

[40.95.32.140 listed in will-spam-for-food.eu.org]

[40.95.32.140 listed in will-spam-for-food.eu.org]

[40.95.32.140 listed in will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:7a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:7a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:7a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:7a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:7a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:7a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:7a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:cafe:0:0:7a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:130:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:1d2:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:1d2:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:1d2:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:1d2:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:1d2:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:1d2:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:1d2:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:1d2:0:0:0:7 listed in]

[will-spam-for-food.eu.org]

[52.100.173.234 listed in will-spam-for-food.eu.org]

[52.100.173.234 listed in will-spam-for-food.eu.org]

[52.100.173.234 listed in will-spam-for-food.eu.org]

[52.100.173.234 listed in will-spam-for-food.eu.org]

[52.100.173.234 listed in will-spam-for-food.eu.org]

[52.100.173.234 listed in will-spam-for-food.eu.org]

[52.100.173.234 listed in will-spam-for-food.eu.org]

[52.100.173.234 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.127.94.22 listed in dnsbl.ahbl.org]

[185.127.94.22 listed in dnsbl.ahbl.org]

[185.127.94.22 listed in dnsbl.ahbl.org]

[185.127.94.22 listed in dnsbl.ahbl.org]

[40.95.32.140 listed in dnsbl.ahbl.org]

[40.95.32.140 listed in dnsbl.ahbl.org]

[40.95.32.140 listed in dnsbl.ahbl.org]

[40.95.32.140 listed in dnsbl.ahbl.org]

[52.100.173.234 listed in dnsbl.ahbl.org]

[52.100.173.234 listed in dnsbl.ahbl.org]

[52.100.173.234 listed in dnsbl.ahbl.org]

[52.100.173.234 listed in dnsbl.ahbl.org]

[2603:10d6:103:1d2:0:0:0:7 listed in]

[dnsbl.ahbl.org]

[2603:10d6:103:1d2:0:0:0:7 listed in]

[dnsbl.ahbl.org]

[2603:10d6:103:1d2:0:0:0:7 listed in]

[dnsbl.ahbl.org]

[2603:10d6:103:1d2:0:0:0:7 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:0:0:0:23 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:0:0:0:23 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:0:0:0:23 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:0:0:0:23 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:505:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:505:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:505:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:505:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:505:cafe:0:0:c listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:505:cafe:0:0:c listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:505:cafe:0:0:c listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:505:cafe:0:0:c listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:cafe:0:0:7a listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:cafe:0:0:7a listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:cafe:0:0:7a listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:130:cafe:0:0:7a listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.127.94.22 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.127.94.22 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.127.94.22 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.127.94.22 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.100.173.234 listed in list.dnswl.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.100.173.234 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[hugodeodc_tm2009(at)hotmail.nl]

0.3 LONGWORD BODY: Uses overlong words

0.6 MEGALONGWORD BODY: Uses really overlong words

0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags

1.5 MPART_ALT_DIFF_COUNT BODY: HTML and text parts are different

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.0 BOGUS_MIME_VERSION Mime version header is bogus

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.7 FORGED_SPF_HELO No description available.

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} We have a surprise from Netflix



--a37c8235046de7023791f56c6a35d7e8fa67e9fbb5e06a2b5d0be3c96a8a

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable



View this post on the web at https://maryamhenein.substack.com/p/paradise-lost-and-other-news-with



Follow: Twitter [ https://substack.com/redirect/92b9306d-5476-4e51-bad5-9e07dcdcd2f9?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ] | Instagram [ https://substack.com/redirect/fa101819-410a-494a-bf52-3d790642fa9f?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ] | Telegram [ https://substack.com/redirect/43a44c10-cd80-4a75-bd06-31fdc9b6a2da?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ] | Gab [ https://substack.com/redirect/3eb2e703-3447-4207-95a8-b06f0fc5508b?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ] | Facebook [ https://substack.com/redirect/bd396917-824e-4c52-b2d1-af649b8302e2?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ]

Truth Lives Here: Rumble [ https://substack.com/redirect/31001862-eb2c-4ca7-afea-9710ed4b4e1f?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ] | Rokfin [ https://substack.com/redirect/303055d2-2f6c-4d81-893e-3414eaaab0bd?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ] | Odysee [ https://substack.com/redirect/b6daa9fb-871e-497a-bf7a-94cc418afd77?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ] | Brighteon [ https://substack.com/redirect/0142855a-ebe0-478e-a731-718278adf03d?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ] | Bitchute [ https://substack.com/redirect/2df6377c-bdd3-4477-8d94-49b312eb0ae4?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ] | YouTube [ https://substack.com/redirect/bc120b83-f427-461e-8c82-b4261e641cbc?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ]

Websites: MaryamHenein.com [ https://substack.com/redirect/baf631e6-c113-449c-988d-76a22e4dc20b?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ] | HoneyColony.com [ https://substack.com/redirect/9c3d81c8-3d76-4d37-9095-cb830991fe69?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ]

Chef and independent news stalwart Ryan Cristián of The Last American Vagabond [ https://substack.com/redirect/783eabd8-d237-4fb7-9fa5-3d80857416fa?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ] will join me on Truth Lives Here [ https://substack.com/redirect/31001862-eb2c-4ca7-afea-9710ed4b4e1f?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ]on Friday, October 11, 2024, at 3 EST. Join us!! Cristian has been on the front lines, reporting the ongoing Rona Regime with detail and consistency. Like me, he has a passion for the Truth.

As a recipient of the Serena Shim Award For Uncompromising Integrity In Journalism, he understands that Americans want their news to be transparent, devoid of the opulence frothed out by today’s corporate media. A cultured and insightful man with a worldly sense, Ryan’s unjaded approach offers common sense to the individual racked by the ambiguous news cycle. This vicious and manipulative merry-go-round keeps trenchant minds at a manageable distance from the truth. Avid writer & editor by day and truth seeker by night, Ryan’s reality defines what it means to be current.

Cristian has experience with weather warfare and the undeniable reality of geoengineering in all its forms, including nanotechnology, particularly smart dust.

In 2020, a virus kept us indoors. In 2025, if you still have a home left, you will want to stay indoors as they turn up their climate change hoax, grab land, mess with the elections, and turn cities into smart cities. Consider that Tampa had plans to become a smart city. Mayor Jane Castor recently told a CNN reporter that if people don’t evacuate, they can prepare to die.

Wow.

And why is the National Oceanic and Atmospheric Administration (NOAA) removing information from its website if weather modification isn’t happening? They’ve removed at least 103 pages of weather modification reports that were previously listed on their site. In addition, they removed access to the NEXRAD radar inventory, which listed the locations and information for all of the NEXRAD stations throughout the US.

There is also a Weather Modification Association. [ https://substack.com/redirect/9cac758f-5d5d-47c3-a06b-c98af0dfa9fa?j=eyJ1IjoiMmlxYjd4In0.QfEe3Y0QHGJsIv0wHqHHnu9dStmJtnDISFXUoFed4nw ]

We will cover the news tomorrow with Cristian to see what is on his radar and speak about how weather events are being manufactured utilizing this technology to justify climate action when it’s really experimentation. For some, this may seem outlandish, but I challenge you to look at the reality of the scientific literature, the verifiable programs in place, and the countless public admissions from those in positions of power, and realize just how many now admitted “conspiracy theories” were denied as false, up until they weren’t.

I briefly wrote about weather warfare and HAARP in my Substack Post.



Unsubscribe https://substack.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.1vHGymWE21soWWVOJg5eDN9w31aljGOo6QQ04aZEJe4?

--a37c8235046de7023791f56c6a35d7e8fa67e9fbb5e06a2b5d0be3c96a8a

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable




llbar-width: thin;">Paradise Lost &=<br /><br /> ; Other News With Ryan Christian of TLAV






Your Netflix account has expired






=09






3D""
"#map1707127651310">


>

=09=09=09=09=09
t=3D"" href=3D"https://dyos0x2kt1xcm.cloudfront.net/yuutazw5a0onfkmreyuutazw5a0onfk32imrew5a0onfkmreyuutazw5a0o#cl/4452_md/1/10218/129/0/0" target=3D"_self">

=09=09=09=09=09
" alt=3D"" href=3D"https://dyos0x2kt1xcm.cloudfront.net/yuutazw5a0onfkmreyuutazw5a0onfk32imrew5a0onfkmreyuutazw5a0o#oop/4452_md/1/10218/129/0/0" target=3D"_self">

=09=09=09=09=09




Technorati Profile







AddThis Feed Button

Remote RSS/OPML-Blogroll Feed

No RSS/OPML feed selected

Error

serendipity error: could not include serendipity_plugin_statistics:9cbc0e29a86fd9359ac6748399d6ba5b - exiting.

addthis





AddThis Social Bookmark Button









Blog Grade for www.nk.ca/blog

Empire Avenue





Error

serendipity error: could not include serendipity_plugin_freetag:6c39baf097de002d8b1c2e33b9661474 - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:f520e0fa688ba61bd1ed85c0fd80d550 - exiting.

Error

serendipity error: could not include serendipity_plugin_twitter:b18e142d4998b6b0092d068ad858683d - exiting.

Syndicate This Blog

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:7aefbb7ca9b764849be35e938b6fc9b2 - exiting.

Error

serendipity error: could not include serendipity_plugin_twitter:c7a92f670894afa9e3097574359fe38d - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:8b72cc4261ddc7ff15df253b17c29c23 - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:a0bd1a65cd9ff1c3e289829cc26557c4 - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:dcd26c048e45c234c054530ef1492953 - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:6d4c66aeb83aeb9524a7cc609051cf0f - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:acc1042e790905e499445a6890081492 - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:158fb50035b12269ec43107b29253af3 - exiting.

Error

serendipity error: could not include serendipity_plugin_topreferers:6b7e3336713d0a60294c7e310ca5cf1a - exiting.

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:d3f047ee6f925c138fae56dcd7a99400 - exiting.

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:5544ace5c8b19bb8592464810b48df10 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_quicksearch:5624ac0b69cdbe32d0cdc40814d7eb41 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_quicksearch:b8387d3a378247c1c9ede46fffb084e1 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_last_query:bacdc0652131449ebc68ebde2bcb9ce2 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_last_query:8c84ca587b64b627d986e9d5ce98ead1 - exiting.