Vietnamese romance phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Mon, 08 Aug 2022 02:24:01 -0600

Received: from [14.188.118.52] (port=55858 helo=static.vnpt.vn)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oKy32-0009lI-D6

for dave@nk.ca;

Mon, 08 Aug 2022 02:23:47 -0600

Message-ID:

List-Unsubscribe:

Date: Mon, 8 Aug 2022 15:23:38 +0700

From: Mrs. Bobina Hosse

MIME-Version: 1.0

To: Dave

Subject: I came to your town and there's nothing I do not know, for a walk?

Content-Type: multipart/alternative;

boundary="===============12d9888da902da0ff46=="

X-Spam_score: 37.1

X-Spam_score_int: 371

X-Spam_bar: +++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: He is an heresy buoy including beguile for a dance trail inspector

above sheathe. They're ceramics with doormat!Bonjour my superstarMy name

is Bobina from Moldova. I saw you on instagram!!Life is wond [...]



Content analysis details: (37.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URIs: beatydate.cn]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL

blocklist

[URIs: beatydate.cn]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URIs: beatydate.cn]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of

words

1.0 J_WEEDS_E FULL: Dec/Hex char Enc [Ee]

1.0 J_WEEDS_T FULL: Dec/Hex char Enc [Tt]

1.0 J_WEEDS_F FULL: Dec/Hex char Enc [Ff]

1.0 J_WEEDS_G FULL: Dec/Hex char Enc [Gg]

1.0 J_WEEDS_N FULL: Dec/Hex char Enc [Nn]

1.0 J_WEEDS_S FULL: Dec/Hex char Enc [Ss]

1.0 J_WEEDS_O FULL: Dec/Hex char Enc [Oo]

1.0 J_WEEDS_Y FULL: Dec/Hex char Enc [Yy]

1.0 J_WEEDS_H FULL: Dec/Hex char Enc [Hh]

1.0 J_WEEDS_K FULL: Dec/Hex char Enc [Kk]

1.0 J_WEEDS_I FULL: Dec/Hex char Enc [Ii]

1.0 J_WEEDS_M FULL: Dec/Hex char Enc [Mm]

1.0 J_WEEDS_W FULL: Dec/Hex char Enc [Ww]

1.0 J_WEEDS_B FULL: Dec/Hex char Enc [Bb]

1.0 J_WEEDS_P FULL: Dec/Hex char Enc [Pp]

1.0 J_WEEDS_D FULL: Dec/Hex char Enc [Dd]

1.0 J_WEEDS_V FULL: Dec/Hex char Enc [Vv]

1.0 J_WEEDS_A FULL: Dec/Hex char Enc [Aa]

1.0 J_WEEDS_U FULL: Dec/Hex char Enc [Uu]

1.0 J_WEEDS_R FULL: Dec/Hex char Enc [Rr]

1.0 J_WEEDS_L FULL: Dec/Hex char Enc [Ll]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

0.0 HK_NAME_MR_MRS No description available.

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

3.0 HTML_ENTITY_ASCII Obfuscated ASCII

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} I came to your town and there's nothing I do not know, for a walk?



This is a multi-part message in MIME format.

--===============12d9888da902da0ff46==

Content-Type: text/plain; charset="windows-1252"; format=flowed

Content-Transfer-Encoding: quoted-printable



He is an heresy buoy including beguile for a dance trail inspector above =

sheathe. They're ceramics with doormat!Bonjour my superstarMy name is =

Bobina from Moldova. I saw you on instagram!!Life is wonderful if you =

have somebody to share your blessings. I want to inspire you every day =

with love and delight in my eyes! Do you want to feel the best man on =

earth with me? I am ready to try everything that does not harm my =

health!my account - http://Bobina89.beatydate.cnIt's my photo-I hope =

you will find me there and we will become friends . I'm ready for chat!=

If you think I'm wrong follow here



--===============12d9888da902da0ff46==

Content-Type: text/html; charset="windows-1252"

Content-Transfer-Encoding: quoted-printable








windows-1252">

He is an heresy buoy including beguile for a dance trail =<br /><br /> inspector above sheathe. They're ceramics with doormat!







Bonjo̗ur =

my superstar


My name is =

Bobina from =

Moldova. I saw =

you on instagram!!




Life is =

wonderful if you have =

so̷mebody to share your =

blessings. I wa̘nt to =

in̵spire you every =

day wٟith love and =

delight in my eyes! Do you want =

t͛o feͤel the best =

man oֻn earth with me? I am =

ready to tͥry =

everything that d͎oes =

not harm my health!


<=

br>







I hope =

you will find me there =

and we will become =

friends . I'm ready for =

chat!










--===============12d9888da902da0ff46==--

Charitable phish from Mimecast

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 07 Aug 2022 22:20:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oKuF1-0008N3-7n

for dave@doctor.nl2k.ab.ca;

Sun, 07 Aug 2022 22:19:47 -0600

Resent-From: The Doctor

Resent-Date: Sun, 7 Aug 2022 22:19:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from us-smtp-delivery-195.mimecast.com ([170.10.129.195]:51573)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oKpzY-000BNn-KO

for doctor@nk.ca;

Sun, 07 Aug 2022 17:47:37 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yakama.com;

s=mimecast20201117; t=1659916031;

h=from:from:reply-to:subject:subject:date:date:message-id:message-id:to:

cc:mime-version:mime-version:content-type:content-type;

bh=ypsg2GS8yn6cYQiVhrEhJmHfznQW8bvOSqU/xtNqBto=;

b=hcHdKhOS2JDZATWFRSG/KM7U7TsCcEti3cPzfypa6KPB/r+JhOJpWoKD0FFcGObQoWyBwQ

JoIavH9VGavHKmj0b1ocZsgvsE13ojR7mhTCA1wBmva4glKbqN3g4GEz0S7SEKP7t6eqj7

//GHc63INfZq+aTVPH1f4h5aF+oq0nM=

Received: from es01.YakamaNation.local (207.32.199.18 [207.32.199.18]) by

relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

us-mta-2-yuOB6911OwKJrCoKsmSP6w-7; Sun, 07 Aug 2022 19:47:01 -0400

X-MC-Unique: yuOB6911OwKJrCoKsmSP6w-7

Received: from es01.YakamaNation.local (10.1.12.100) by

es01.YakamaNation.local (10.1.12.100) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.2.792.15; Sun, 7 Aug 2022 16:37:02 -0700

Received: from es01.YakamaNation.local ([fe80::ad9c:d7ec:f551:f9ab]) by

es01.YakamaNation.local ([fe80::ad9c:d7ec:f551:f9ab%8]) with mapi id

15.02.0792.015; Sun, 7 Aug 2022 16:37:02 -0700

From: Roger Fiander

Subject: Re: Maria Charitable Project - 07/08/2022

Thread-Topic: Re: Maria Charitable Project - 07/08/2022

Thread-Index: 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

Date: Sun, 7 Aug 2022 23:37:02 +0000

Message-ID: <49c34d2ed3ea4afa844b74282e616dde@Yakama.com>

Accept-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [85.203.34.74]

MIME-Version: 1.0

X-Mimecast-Spam-Score: 3

X-Mimecast-Originator: yakama.com

Content-Language: en-US

Content-Type: multipart/alternative;

boundary="_000_49c34d2ed3ea4afa844b74282e616ddeYakamacom_"



--_000_49c34d2ed3ea4afa844b74282e616ddeYakamacom_

Content-Type: text/plain; charset=WINDOWS-1252

Content-Transfer-Encoding: quoted-printable



Hi ,



I trust this finds you in good standing. Please accept my sincere apology f=

or this unexpected e-mail. I had no option than to help search for credible=

person to carry out Mrs Maria philanthropy project on her behalf. She was =

diagnosed with cancer few months ago, all efforts to fight and resist it ha=

s proved abortive and as such, she is left with no other option than to giv=

e out financial donations to people that are inclined with charitable dispo=

sitions, so that they can also reach out to the less privileged in their im=

mediate environment.



She has therefore bequeathed part of her fortune (Total sum of =A31,963,920=

.00 Great Britain Pounds) to you in cash for your personal and charitable g=

oals. I know I have never met you in person, but instincts tell me to conta=

ct you in good faith and I hope you act sincerely. Kindly note that this is=

solely a charity donation to you, for your personal and charitable goals. =

Please kindly contact her directly for more details if interested. Best and=

only email to reach her: maclennetth@gmail.com
m>



She is expecting your email. All the best!



Best regards,



--_000_49c34d2ed3ea4afa844b74282e616ddeYakamacom_

Content-Type: text/html; charset=WINDOWS-1252

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




1">








break-word">



Hi ,



 



I trust this finds you in good standing. Please acce=

pt my sincere apology for this unexpected e-mail. I had no option than to h=

elp search for credible person to carry out Mrs Maria philanthropy project =

on her behalf. She was diagnosed with

cancer few months ago, all efforts to fight and resist it has proved abort=

ive and as such, she is left with no other option than to give out financia=

l donations to people that are inclined with charitable dispositions, so th=

at they can also reach out to the

less privileged in their immediate environment.



 



She has therefore bequeathed part of her fortune (To=

tal sum of =A31,963,920.00 Great Britain Pounds) to you in cash for your pe=

rsonal and charitable goals. I know I have never met you in person, but ins=

tincts tell me to contact you in good

faith and I hope you act sincerely. Kindly note that this is solely a char=

ity donation to you, for your personal and charitable goals. Please kindly =

contact her directly for more details if interested. Best and only email to=

reach her:

maclen=

netth@gmail.com



 



She is expecting your email. All the best!
>



 



Best regards,











--_000_49c34d2ed3ea4afa844b74282e616ddeYakamacom_--



Canadian Pharmaceutical phish from comcast

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 07 Aug 2022 22:20:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oKuEI-0008Ka-PI

for dave@doctor.nl2k.ab.ca;

Sun, 07 Aug 2022 22:19:02 -0600

Resent-From: The Doctor

Resent-Date: Sun, 7 Aug 2022 22:19:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from 162-17-31-137-static.hfc.comcastbusiness.net ([162.17.31.137]:11340 helo=162-17-31-139-static.hfc.comcastbusiness.net)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oKs2D-000OJo-2y

for doctor@nk.ca;

Sun, 07 Aug 2022 19:58:29 -0600

Message-ID: <583B9DA8.383775B9@comcastbusiness.net>

Date: Mon, 08 Aug 2022 00:58:16 +0300

From: "CanadaPharmacy"

X-Accept-Language: en-us

MIME-Version: 1.0

To:

Subject: Make your sexual fantasies true!

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit

X-Spam_score: 11.9

X-Spam_score_int: 119

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your productivity is lifelong and wonderful with Cialis Daily!

If you really choose to feel females' fine figures, make the right choice:

buy in our online store! Shining moments as part of your sexua [...]



Content analysis details: (11.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname

(Split IP)

0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or

Generic rPTR

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[162.17.31.137 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date

2.2 DRUGS_ERECTILE Refers to an erectile drug

3.9 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP

addr 2)

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

0.0 NO_FM_NAME_IP_HOSTN No From name + hostname using IP address

Subject: {SPAM?} Make your sexual fantasies true!



Your productivity is lifelong and wonderful with Cialis Daily! If you really

choose to feel females' fine figures, make the right choice: buy in our

online store! Shining moments as part of your sexual life should be

right from that fantastic second of purchase! Buy our stuff - switch on the

light of your sexual life just now!!!



http://asdscha.ru.net/hyqevtisx/





SEO spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 07 Aug 2022 15:03:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oKnQB-0000CE-LJ

for dave@doctor.nl2k.ab.ca;

Sun, 07 Aug 2022 15:02:51 -0600

Resent-From: The Doctor

Resent-Date: Sun, 7 Aug 2022 15:02:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-psaapc01olkn2081.outbound.protection.outlook.com ([40.92.52.81]:40224 helo=APC01-PSA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oKkJ9-000EB7-DV

for root@nk.ca;

Sun, 07 Aug 2022 11:43:27 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=Zz6FXZrYY8u5/Ndyo9P1NlQFqhSe9lERzyPZahkKDBlpbGm+iKFmX/q9pccbQrHcwf9N6iphDep+awIMh/F+KhwvEoC8hXmZJoClqFbSgr8/ghlYwb5yUn5YPjkWAKPk9cDuHAuwM9bQoxT5ahib+LN7Y7RcxbnaTk/FjGCdu/yCBDmKCyeshmuFfqOcwIgp9oGK9PrtzEsf6MZf6c2O1tkkg8z7PurxXTMRCpdnX0Lsd9ctpNEMgXaQxzAikUwNnsJHAbFXLvi0x0pwdxueWF7UR4XAf4+quH6VdiMDUGbp6+nVAKL7Xp2O37zHsG9oKkKmPB15SfHCXCl4BZid4Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=WwxMAejRTdowr2tlUxclMgbXPXHOf+ttao+1s/sEtfo=;

b=VC/3UwQhuAx7Sf2O8ZRmhkKxh6laJj7+t1sLPbk+/qjS+aYKX0w9DmOHkmvfFnrmyxAvje2v9HkHhrVvI+OpVpJH9vtqDTCHDDNrOLfVBcQ+8dwaxkGpB9sKkEG4ZXbildn+b9t8tBIB0IvwJtGA5+CG1huqKTRkejhsY+WpIl3SMWbpi4cVeIXDC+boafUX+dd7O750iV8ySaztxzSY+1CjYG70ZAdzrZAP5eXpAICHTwfMxpI5WB8RpmS0FacE5mv7Rp/ZBjWC3wK3Gwm2+oIwdovqOF7P9cRx7UzM9nN9Pq3LyUB7qcsacmCJ4DVzVSQS80HY3KxUxHSaX9e4VA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=WwxMAejRTdowr2tlUxclMgbXPXHOf+ttao+1s/sEtfo=;

b=YXrkw1cPigXP3HCWHah2/XpjPE052ZAgFHJ3UogUfNeacyp1RTB7QwGGDL7vVOCoME153Jxq3tbQpJN+ytVZL1bFJW2BrpsvJZ+IT7LPY1x1pkutnwov+sIHDyFnTNQpGocmUfkdb0lSfDfhZdhuNmSYQ26A6vtx5AdJ4AunNAXK7gVXWRwMUsH4bzXqCB8fxrVRIO9oo/pnnauG5sYOGawu1pZuS8rvPErfZFMKZEAU11fEb8kJkk1p83Z6sYGdOV5YX6nZkx8Myw+iEtq7Bo3sBFvuODpCEvajGD+AK++9i++7ZJkJyVdEZ7mGuFAaKK7A8OIaKVhqoIgmdouOPA==

Received: from TY0PR04MB5791.apcprd04.prod.outlook.com (2603:1096:400:205::11)

by SG2PR04MB2780.apcprd04.prod.outlook.com (2603:1096:4:19::14) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5482.15; Sun, 7 Aug

2022 17:41:36 +0000

Received: from TY0PR04MB5791.apcprd04.prod.outlook.com

([fe80::d571:431d:ee9c:2db2]) by TY0PR04MB5791.apcprd04.prod.outlook.com

([fe80::d571:431d:ee9c:2db2%3]) with mapi id 15.20.5504.017; Sun, 7 Aug 2022

17:41:36 +0000

From: Satyaprakash Singh

Subject: Get Ranked On Page 1

Thread-Topic: Get Ranked On Page 1

Thread-Index: AQHYqoTFIjxdz/u6hUq16fBVtnp9Nw==

Date: Sun, 7 Aug 2022 17:41:36 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [+8uid8tyyLXvP/oJUO8Kon177lQ/hr+u]

x-ms-publictraffictype: Email

x-ms-office365-filtering-correlation-id: 9d41fa62-b4c0-4e9a-f847-08da789c1384

x-ms-exchange-slblob-mailprops:

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

x-ms-traffictypediagnostic: SG2PR04MB2780:EE_

x-microsoft-antispam: BCL:0;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?EWtVCWAygwXwF8GIyxRfvjYpK36bJBpRnqdnPSg69wZOm51NfJ9FWqaY?=

=?Windows-1252?Q?8OOGy5qkXmTNkv8FQvPfOZBwKJDvW8jVAqT0+Np6NgFG7RKuUaODCIx5?=

=?Windows-1252?Q?jTPUBCaJonvp2I3SG6NnA/r4OWqyC4TZQo2xzlfgGSd1BuKjm/aTv1v6?=

=?Windows-1252?Q?vmacDpQmZWZw+9x2fV902eVt2QyXIuj19TJZ6ijr0Vuos1GG5o8vEYUB?=

=?Windows-1252?Q?GkMtH/E2N5tiB5PpRa7FL5/VWNgh9UjRrLsf6i3A+TCx6/Z8pw4XmDXF?=

=?Windows-1252?Q?DqWhpcNjG/viuF5COyNftwMvbS7pNl8Z+7Z+xoL3rXiEvIpvvOwyIB7P?=

=?Windows-1252?Q?ID5zWjHzLiwpKNPq4naA5rcg1p6CPldBjPbg8GozCdBJhT2QPuxa4g/0?=

=?Windows-1252?Q?/5ywbd3hkI6Sj+vv8pFAOBwpBWAZg1pTm96CrJMLw/CCIiMa6jok0//A?=

=?Windows-1252?Q?ZVR3aU9qISPebgYnSGZmURXK8H4A3R58X8PfdA+tB/dPpAxi+AEXrK8C?=

=?Windows-1252?Q?uFKMd6qjMA8jrY2Bu0ULIiy1VceOuTIb5MtLLIndYXnBV9EmYRiHrQ85?=

=?Windows-1252?Q?lwGZncrhtPy9KOeRx/xIqkzN+2ZnXpI0dTOMQ4qLl9Zh4TIPHhN3bXGl?=

=?Windows-1252?Q?ijWcbLZynG9xTjWJiYAnik8W5fEp1YWteQkOPdMQreMaES3vF/3W9mSo?=

=?Windows-1252?Q?31YWGC2z2RUurI/S9j/M4std3FJL591rft4LitkCmwDzBSauNYORLFU3?=

=?Windows-1252?Q?sj3fkEDNKkPFW6Vn7O/ZKjoARUinHvFqo4HPwFDSiFqXGZaLKxpGcQna?=

=?Windows-1252?Q?WpDlhaMxE57UXjI/Y0QqrU3UZAcLiWawGNyu+HpX0Ugbe3qCB8NsZ/ne?=

=?Windows-1252?Q?IZdwHJZa/rQAG2n4J0H+kCV3eCHVCQoRXvERBYs6TPMNuPlKHtfRyiV6?=

=?Windows-1252?Q?TnjuMtSds+ZnrxbzgZSvACh5rbzn+bdAg8e2e6tuxst06I3Hn/lAcmi5?=

=?Windows-1252?Q?XKhoz59dBGkAXqqdCtbdlXvLzrwFb5rs9XJMk+muzI+B6tUWsNZTjUyz?=

=?Windows-1252?Q?gymxeEbbZW+KQT02vzsAam7XP6GrDbI6lmDDUBXLiBNytxoNDu18Ilc7?=

=?Windows-1252?Q?Ookaqz11H445S19Uq1tgZJMWyp98+355gH8PhZVn14CK11s1Mt093nkF?=

=?Windows-1252?Q?7HPJtQzMey97Wrb7r6Qbr6uwHtvvUA7PQ+uD1wF8Batj/Mokz3F2iJhV?=

=?Windows-1252?Q?GkLvQSKYFQbqelUeJxk0T+S9Y3mlM+OdweXM6EyM/u3o0p3unuJPS+gc?=

=?Windows-1252?Q?xY9j3DrnNv0FdhUD1H0aEBoozCnIxpuWIoXZryu30XhzLhlptgqku6BZ?=

=?Windows-1252?Q?NeDSj3d86887Xw=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_TY0PR04MB579144C0642D5DA97D4F1527AA609TY0PR04MB5791apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-6ea25.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TY0PR04MB5791.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 9d41fa62-b4c0-4e9a-f847-08da789c1384

X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Aug 2022 17:41:36.3746

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SG2PR04MB2780



--_000_TY0PR04MB579144C0642D5DA97D4F1527AA609TY0PR04MB5791apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



Hope you are doing well!



I was surfing through your website and realized that it was not ranking on =

any of the search engines for most of the keywords. I was wondering if you =

would be interested in getting the SEO done for your website. There is a si=

mple equation that is applicable to the online world.



Ethical SEO -> Better Traffic -> Higher Sales



Let me know if you are interested I will be happy to send the =93SEO Propos=

al=94 and =93Pricing=94 furthermore...





Kind regards,



Satya





--_000_TY0PR04MB579144C0642D5DA97D4F1527AA609TY0PR04MB5791apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">


-family:"Times New Roman", "serif";mso-margin-top-alt:a=

uto;mso-margin-bottom-alt:auto">

Hi,




-family:"Times New Roman", "serif";mso-margin-top-alt:a=

uto;mso-margin-bottom-alt:auto">

 




-family:"Times New Roman", "serif";mso-margin-top-alt:a=

uto;mso-margin-bottom-alt:auto">

Hope you are doing well!




-family:"Times New Roman", "serif";mso-margin-top-alt:a=

uto;mso-margin-bottom-alt:auto">

 




-family:"Times New Roman", "serif";mso-margin-top-alt:a=

uto;mso-margin-bottom-alt:auto">

I was surfing through your website and realized that it was not ranking on =

any of the search engines for most of the keywords. I was wondering if you =

would be interested in getting the SEO done for your website. There is a si=

mple equation that is applicable

to the online world.




-family:"Times New Roman", "serif";mso-margin-top-alt:a=

uto;mso-margin-bottom-alt:auto">

 




-family:"Times New Roman", "serif";mso-margin-top-alt:a=

uto;mso-margin-bottom-alt:auto">

Ethical SEO -> Better Traffic -> Higher Sales




-family:"Times New Roman", "serif";mso-margin-top-alt:a=

uto;mso-margin-bottom-alt:auto">

 




-family:"Times New Roman", "serif";mso-margin-top-alt:a=

uto;mso-margin-bottom-alt:auto">

Let me know if you are interested I will be happy to send the =93SEO Propos=

al=94 and =93Pricing=94 furthermore...




-family:"Times New Roman", "serif";mso-margin-top-alt:a=

uto;mso-margin-bottom-alt:auto">

 




-family:"Times New Roman", "serif";mso-margin-top-alt:a=

uto;mso-margin-bottom-alt:auto">

 




-family:"Times New Roman", "serif";mso-margin-top-alt:a=

uto;mso-margin-bottom-alt:auto">

Kind regards,




-family:"Times New Roman", "serif";mso-margin-top-alt:a=

uto;mso-margin-bottom-alt:auto">

 




-family:"Times New Roman", "serif";mso-margin-top-alt:a=

uto;mso-margin-bottom-alt:auto">

Satya














--_000_TY0PR04MB579144C0642D5DA97D4F1527AA609TY0PR04MB5791apcp_--

SEO spam from Microsoft

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 07 Aug 2022 15:03:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oKnPw-0000BP-S0

for dave@doctor.nl2k.ab.ca;

Sun, 07 Aug 2022 15:02:36 -0600

Resent-From: The Doctor

Resent-Date: Sun, 7 Aug 2022 15:02:36 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-mw2nam04olkn2030.outbound.protection.outlook.com ([40.92.46.30]:38241 helo=NAM04-MW2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oKkDj-000DrC-NY

for sales@nk.ca;

Sun, 07 Aug 2022 11:37:52 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=RumflFscV8+hGVmxWjVE03kEWVUyNtdSlgXx+hc/Vn10AqaD42Jj7M/kFc3YpWOSX9DtTO/TlpJ/ebe41cBS72yDq3uoQ8JpjFbLq2n3xK7v08DtDpkAZchAXm4KVQsFt/OezHrAffRkv3cm9bnhj8YfKgpYP30JGbKsfbpuSld7r8FErJ20uH/1l4HTDsGD6DQ+Mja9Ssxz6TDVYKO8a0EyNi//cw0PCjaSo736ZIvzJ6qkuOSnGwsVdhI6EV825gHRqqS4JHBnIDXAORvrwcKPnokIRIK3kgkmYgZwHIzdm519h1kQgFPbxo/BeHfKJL0zgQfupC+NWbSGgD051A==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=9Jv0YUlOyil3EQP8ElOlsWpJnJAZ/gumtpsMQpnyrqA=;

b=Ex4Zlw3t30brjDTtF6XC3raS/QvxNf+xU7xB0v9tH/aeNT+5vA0RykUMbYc5CeioUxfQYt+zCCPAg9VhWTCW7qoNGBJwPog+oGxqkYUl0C6GzFkDRoGpQrfOxmm0w+EKx5W4KhKf/M4TYvtOUFNA4dNCSOxMln7nAHH82zg9QhfDVlwzeIq0TOZzXBDYu3w+oDjIpBz9x1GCmugRvJfIvy/7mxc5dYj2QjcayYbTf3hOpMEfLM6Aa93H9xYjc4tYwOziNkQE1Lb9lAr6NQdKMJfl6/iZn+O+EN8Bi+Yz83gX+LS/7btvopIq3lsZeluq3i+sXB8VA0pkXMOJ55Z1cQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=9Jv0YUlOyil3EQP8ElOlsWpJnJAZ/gumtpsMQpnyrqA=;

b=lb9kTyGc8qeMnx4FfRE759gPGd8WaEOVXJxBYtlm51ELnS5hQ3JJsIxSKhsH+t0z/6kQK+xLCCNYOD3zZKqzc4pigehGZDY/iV0TkdCO1Nls6xbGCPgltsxXkosTY6jh/BWe5z1GNL275dfqSQQZa/MV094yzDFtfqsmNrKWpbL0Eh3hkO4gRlcn2DT3PB8khHxRzln77nxjLN8SpI2QHiZgjV1kB5VX2fcZiXFAe2CGb51xUoKjd+0gwFDCEU2YhzPiDEvngsfPQNgj47PSbR/qJKNTmRngLwk1Vrd6wKsQ00SpcCKANe4pAd8vWewguWrW2bIzMok7x+c8fHVV6A==

Received: from SA1PR06MB8022.namprd06.prod.outlook.com (2603:10b6:806:1d1::5)

by CY4PR06MB3317.namprd06.prod.outlook.com (2603:10b6:910:52::14) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5504.17; Sun, 7 Aug

2022 17:37:14 +0000

Received: from SA1PR06MB8022.namprd06.prod.outlook.com

([fe80::9459:f8d0:be22:817a]) by SA1PR06MB8022.namprd06.prod.outlook.com

([fe80::9459:f8d0:be22:817a%5]) with mapi id 15.20.5504.019; Sun, 7 Aug 2022

17:37:13 +0000

From: Hard Kaur

Subject: Get Ranked On Page 1

Thread-Topic: Get Ranked On Page 1

Thread-Index: AQHYqoQNaWcnoYMe2UuHT8YZI3//gg==

Date: Sun, 7 Aug 2022 17:37:13 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [cC3ARsk+Ef8ti6MLYSunGWMhF0nNbIS+]

x-ms-publictraffictype: Email

x-ms-office365-filtering-correlation-id: 4d4d1e03-f1e8-49ca-76d9-08da789b7700

x-ms-exchange-slblob-mailprops:

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

x-ms-traffictypediagnostic: CY4PR06MB3317:EE_

x-microsoft-antispam: BCL:0;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?dNQ7t2Iin7YIdOMIRP7NsPWk/gIfk79fE6ti8xTOXE5K/w97g4Aw8k3k?=

=?Windows-1252?Q?KF3N2TLmTcX0ERTgxzPzLdKdOY8l/qfTKsVV3DgAxzDh2uYpJMfxHC2m?=

=?Windows-1252?Q?aiipsRshG3ERQS8N3iJd7/V1X0tq3gf8QfEpN9WGg05Da1OQUYfOsL3k?=

=?Windows-1252?Q?P+pItnMyRdgnX/cI7fQ8EOwBHbuqXEH+Qszk4FowKqrIByEv8RAPTY53?=

=?Windows-1252?Q?7d23Z6dmRDnvMFG02BoNJG2w0tan5Q/LXE7i7qIvXMES3odFDEZxy3Dm?=

=?Windows-1252?Q?mRiMm+3KxOQDduaJemq7roAiQ8Tj6JQxjX5pt/98TL7EVNM+Y9xWr5EV?=

=?Windows-1252?Q?o4NbzdRiybm7OaeHs8dZFqpPRdOS2gxSTFu93UiGz3Pd0x5c6K+LNJNS?=

=?Windows-1252?Q?iPCogSKOyO9QO1Xv/pueh+zlMadIF/KYFhj2JsczH/iOCm76vr6W0bXb?=

=?Windows-1252?Q?qX+drcoGWVRB+bzAYQH+iWo9lgTryKMTfNejvM7P9UwMSo8Cest1gmBj?=

=?Windows-1252?Q?NF6tq+4VSYq6N95Wf2qQCLh6Bqd2UXyQe/MBiPpH49FRxwttmiw9N6kl?=

=?Windows-1252?Q?VtxN4crIfIgyDGjFRCSjPScK2Gg7Bgb+0Gz/BWlRoYtzp1Y/ca3ngwhT?=

=?Windows-1252?Q?fCha/lBG68Ge9VgE3FIeqg5Il3aVTRcESI/LDg+sIypnUJ4f2OaRCuaA?=

=?Windows-1252?Q?vv49NAvIcZ/37jwYe2tk9MK5NEh6ERgqAiD8OT7qb5vfO25li0J7vEBb?=

=?Windows-1252?Q?8nQXGxDN2KgrlnsGgHAvT6+l9UnuMAW3+LheaLAOT0XpYRAP7C6EJA1h?=

=?Windows-1252?Q?0uT+axHx83MECct6qWYAP4AMPyWbV3Bn2XbaZ7F37LGVv3wWdLjBYt6y?=

=?Windows-1252?Q?67bC8Wc2Lp5EWopf/M8IUZJKwUlFP7yxXtMET3HdCy5A6lyRpGn7Sicv?=

=?Windows-1252?Q?pWTunWml55e5oZGkhwSyDFdACCxED4t0jbIXf3zSph189MFJaexTmKWY?=

=?Windows-1252?Q?6/xiCqtnrqfxO2ldYEpdhgCiaNhSTjtqk1Y5Jpcd/QnsC9Qt+Qx8ZI3g?=

=?Windows-1252?Q?oPRDtTQ1VXfumbJ+6gvIf6Rb3H3K2y0Wj+XZcYddt+T9AycjSQtg9Aas?=

=?Windows-1252?Q?7Udyz7M0ER16fOh9zMdfLBeZWbpgEWbCILRGuWQHRyU2YHaiTwEnmNeV?=

=?Windows-1252?Q?5jrDrx1BtBAMpQ8/NOu8iZ6aZT6wt78reb1Jwuum+NO6tUZWWCmKmvJQ?=

=?Windows-1252?Q?b1QQ2zfjn8ze+NMDnvkqvyTYsjJVvs9xa+ZMDtgFIbac+ynWLsYfXtXa?=

=?Windows-1252?Q?1/9mXuo5jWj2eW6Hd9FrB7oj2cOAnPPs88p/owF1wDk3T8wqm+/gt35I?=

=?Windows-1252?Q?4lLnJ4/eUXeDzg=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_SA1PR06MB802218843C88AA20EA60C840C7609SA1PR06MB8022namp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SA1PR06MB8022.namprd06.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 4d4d1e03-f1e8-49ca-76d9-08da789b7700

X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Aug 2022 17:37:13.7504

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR06MB3317



--_000_SA1PR06MB802218843C88AA20EA60C840C7609SA1PR06MB8022namp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



Hope you are doing well!



I was surfing through your website and realized that it was not ranking on =

any of the search engines for most of the keywords. I was wondering if you =

would be interested in getting the SEO done for your website. There is a si=

mple equation that is applicable to the online world.



Ethical SEO -> Better Traffic -> Higher Sales



Let me know if you are interested I will be happy to send the =93SEO Propos=

al=94 and =93Pricing=94 furthermore...





Kind regards,



Molly





--_000_SA1PR06MB802218843C88AA20EA60C840C7609SA1PR06MB8022namp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">


-family:"Times New Roman", "serif"">


:black">Hi, 




-family:"Times New Roman", "serif"">


:black">  




-family:"Times New Roman", "serif"">


:black">Hope you are doing well! 




-family:"Times New Roman", "serif"">


:black">  




-family:"Times New Roman", "serif"">


:black">I was surfing through your website and realized that it was not ran=

king on any of the search engines for most of the keywords. I was wondering=

if you would be interested in getting the SEO done for

your website. There is a simple equation that is applicable to the online =

world. 




-family:"Times New Roman", "serif"">


:black">  




-family:"Times New Roman", "serif"">


:black">Ethical SEO -> Better Traffic -> Higher Sales 
>




-family:"Times New Roman", "serif"">


:black">  




-family:"Times New Roman", "serif"">


:black">Let me know if you are interested I will be happy to send the =93SE=

O Proposal=94 and =93Pricing=94 furthermore... 




-family:"Times New Roman", "serif"">


:black">  




-family:"Times New Roman", "serif"">


:black">  




-family:"Times New Roman", "serif"">


:black">Kind regards, 




-family:"Times New Roman", "serif"">


:black">  




-family:"Times New Roman", "serif"">


:black">Molly














--_000_SA1PR06MB802218843C88AA20EA60C840C7609SA1PR06MB8022namp_--

Crypto currency spam from Amazon

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 07 Aug 2022 04:22:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oKdPh-000Ojs-Qp

for dave@doctor.nl2k.ab.ca;

Sun, 07 Aug 2022 04:21:41 -0600

Resent-From: The Doctor

Resent-Date: Sun, 7 Aug 2022 04:21:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ec2-3-13-125-39.us-east-2.compute.amazonaws.com ([3.13.125.39]:56872)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oKXPh-000GTC-6G

for doctor@doctor.nl2k.ab.ca;

Sat, 06 Aug 2022 21:57:22 -0600

Received: from lifewise by hosting.247webhostingservice.com with local (Exim 4.95)

(envelope-from )

id 1oKXPG-0001gO-3o

for doctor@doctor.nl2k.ab.ca;

Sat, 06 Aug 2022 23:56:50 -0400

To: doctor@doctor.nl2k.ab.ca

Subject: CRYPTOCURRENCY WILL MAKE YOU A MILLIONAIRE

X-PHP-Script: lifewiselearningcenter.com/index.php for 156.146.63.156

X-PHP-Originating-Script: 1028:PHPMailer.php

Date: Sun, 7 Aug 2022 03:56:50 +0000

From: EducationWP

Reply-To: admin@educationwp.thimpress.com

Message-ID:

X-Mailer: PHPMailer 6.6.0 (https://github.com/PHPMailer/PHPMailer)

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_avqtgc8hYkFaIQtaGNs1KJFGAsLe1R7jBgLQgDuSVQ"

Content-Transfer-Encoding: 8bit

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - hosting.247webhostingservice.com

X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [1028 993] / [47 12]

X-AntiAbuse: Sender Address Domain - hosting.247webhostingservice.com

X-Get-Message-Sender-Via: hosting.247webhostingservice.com: authenticated_id: lifewise/only user confirmed/virtual account not confirmed

X-Authenticated-Sender: hosting.247webhostingservice.com: lifewise

X-Source:

X-Source-Args: php-fpm: pool lifewiselearningcenter_com

X-Source-Dir: lifewiselearningcenter.com:/public_html

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Message Body: THE WORLD FINANCIAL CRISIS CAN MAKE YOU RICH!

https://telegra.ph/Cryptocurrency-makes-people-millionaires-at-15-people-per-hour---Page-484685-08-02

-- This e-mail was sent from a contact form on EducationWP (http://educationwp.thimpress.com/demo-el-3/)





Content analysis details: (7.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was

blocked. See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[URIs: thimpress.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level

mail domains are different

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

2.5 PHP_SCRIPT Sent by PHP script

3.2 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP

addr 1)

Subject: {SPAM?} CRYPTOCURRENCY WILL MAKE YOU A MILLIONAIRE



This is a multi-part message in MIME format.



--b1_avqtgc8hYkFaIQtaGNs1KJFGAsLe1R7jBgLQgDuSVQ

Content-Type: text/plain; charset=us-ascii



Message Body:

THE WORLD FINANCIAL CRISIS CAN MAKE YOU RICH! https://telegra.ph/Cryptocurrency-makes-people-millionaires-at-15-people-per-hour---Page-484685-08-02



--

This e-mail was sent from a contact form on EducationWP (http://educationwp.thimpress.com/demo-el-3/)



--b1_avqtgc8hYkFaIQtaGNs1KJFGAsLe1R7jBgLQgDuSVQ

Content-Type: text/html; charset=us-ascii



Message Body:


THE WORLD FINANCIAL CRISIS CAN MAKE YOU RICH! https://telegra.ph/Cryptocurrency-makes-people-millionaires-at-15-people-per-hour---Page-484685-08-02



--


This e-mail was sent from a contact form on EducationWP (http://educationwp.thimpress.com/demo-el-3/)







--b1_avqtgc8hYkFaIQtaGNs1KJFGAsLe1R7jBgLQgDuSVQ--



Instragram spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 07 Aug 2022 04:22:02 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oKdPJ-000Ogx-Ku

for dave@doctor.nl2k.ab.ca;

Sun, 07 Aug 2022 04:21:17 -0600

Resent-From: The Doctor

Resent-Date: Sun, 7 Aug 2022 04:21:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f50.google.com ([209.85.210.50]:43753)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oKW7f-000BOT-C5

for sales@nk.ca;

Sat, 06 Aug 2022 20:34:40 -0600

Received: by mail-ot1-f50.google.com with SMTP id cm4-20020a056830650400b0063675a4dd74so4376057otb.10

for ; Sat, 06 Aug 2022 19:34:14 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=grammertime-co.20210112.gappssmtp.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc;

bh=ErXYDAOTi55cTe7iyDwcrn98socHsCf4VjDzay5RUoQ=;

b=1sa537bCR1U/1MVg0CGuclm+fKbFfT6TFoJWR8elqZaIVTm950jAIcpXh4YhKFvgGD

gvjEEbA40Ihya2acfMG9xx8wf7spdIFmsZxXGfFhhG8r3MgFcGaucX7/4Q00iJWQRd7I

k4aVnGg/Ir0gOq4Z2TU7n9fXTFjEdT4oKHJVQO6X0RCC3jd07wS8APliOMJZ51LlwHYp

u835I4LoR6sq8/+joFMn6P7bFvSxJkwXicKqPKlQSxnvyCTTsjTBiiMYHw0cZpi+Raqy

EZTuY1vRPhK49ZMfISg1KeQyOb1AykFdJFZopKiNLUsZ0lMy5R/4H6P/rq0RgfHhr3/e

2zmg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc;

bh=ErXYDAOTi55cTe7iyDwcrn98socHsCf4VjDzay5RUoQ=;

b=0oTxomyzD037iKDIUHCGGtFQ8aGW06dIFjBHwH7ZSDAGU4KxNEmL5Lz9GOJYvuBCpy

BG1d9Qtk5gc4T29FmCFNOEH9MGdWg89tuipZWu1e0zUiljsbF3kGV4+yvIBaKgxPjKpx

iB5zjGzAqz0PSM2rLS2VejiuPzRZd1cqhoeZcw1Ws428vk7EBlcTd+1/u5aqCy4KS5+j

qIax+EndK/uyb3NaFEHtTaWOLk5xqlu09ReA7YM1xIERVk/VNL1AoxVjMC69ggsu2fdQ

BW0atzM2Iu4JifRhTFSpEFmvqaSWq3Zxtyb109awKZY1c6WtLtwYPZrV0gDVbwVAFTUP

9FPA==

X-Gm-Message-State: ACgBeo06OGRtJIlVsVfiY99X+H28MwEaq9gPbryWtBYV5hYc0EluJjhD

E1ktVCv5mT1/AnrBWByd/AcO4wkeTXcwRtXEa5Ymkl1xYhTNOQ==

X-Google-Smtp-Source: AA6agR7tcP+inMZ1dNyMOg5Fib/SAYypp4/KZ47QJCAsjzmvLi4DFYKT9lChQ1Pckv+LlY+o8ZA2VAXxUJCJ+mXuS5k=

X-Received: by 2002:a05:6830:620d:b0:61c:165a:3d5e with SMTP id

cd13-20020a056830620d00b0061c165a3d5emr4937746otb.152.1659839648857; Sat, 06

Aug 2022 19:34:08 -0700 (PDT)

Received: from 1008170693301 named unknown by gmailapi.google.com with

HTTPREST; Sat, 6 Aug 2022 19:34:08 -0700

MIME-Version: 1.0

From: Vivian Kyleigh

Date: Sat, 6 Aug 2022 19:34:08 -0700

Message-ID:

Subject: @Daveyadallee ; FIX Your Instagram Account

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000a79aa105e59d887f"



--000000000000a79aa105e59d887f

Content-Type: text/plain; charset="UTF-8"



Hi there,



Our team just had a look at your Instagram page @Daveyadallee



We had an in depth discussion and we all agreed on something - your account

has serious potential! Although, we noticed an issue with your page.



With the content you're posting, you should be getting far more likes,

comments & followers.



This issue may be caused by a service which gave you fake followers - or

your page is followed by inactive users.



We'd like to partner with you and help you fix this issue.. We can replace

them and get you ~1-10k REAL followers a month. These are targeted people

who will actually like and comment on your posts.



You can try our platform for 7 days (without paying):



We've made a link for your account, valid for a short time:





> Jumpgram <

Best regards,



Vivian





Unsubscribe



--000000000000a79aa105e59d887f

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





Hi there,

Our team just had a look at your Instagram page=C2=A0@D=

aveyadallee

We had an in depth discussion and we all agreed on somet=

hing - your account has serious potential!=C2=A0Although, we noticed an =

issue with your page.

With the content you're posting, you s=

hould be getting far more likes, comments & followers.

This issu=

e may be caused by a service which gave you fake followers -=C2=A0or your p=

age is followed by inactive users.

We'd like to partner with you =

and help you fix this issue..=C2=A0We can replace them and get you ~1-10=

k REAL followers a month.=C2=A0These are targeted people who will actua=

lly like and comment on your posts.

You can try our platform for 7 d=

ays (without paying):

We've made a link for your account, valid f=

or a short time:

>=C2=A0Ju=

mpgram=C2=A0<=C2=A0

Best regards,

Vivian


r>
html">Unsubscribe







--000000000000a79aa105e59d887f--

german spam from gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 06 Aug 2022 15:12:00 -0600

Received: from mail-yw1-f171.google.com ([209.85.128.171]:44895)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oKR5A-000ET1-Mq

for dave@doctor.nl2k.ab.ca;

Sat, 06 Aug 2022 15:11:45 -0600

Received: by mail-yw1-f171.google.com with SMTP id 00721157ae682-31f661b3f89so50962747b3.11

for ; Sat, 06 Aug 2022 14:11:23 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:from:to:cc;

bh=RvdQ906vmAsHM3vSNsGsYeTEGGwLdGBea9cqTj0+nWc=;

b=MNAV1gEt3mDKXcGi9dfro3TsWaQ/6nB3x3/UxoJTozeseL4NW8THNwb9JlA6J7kB1J

a0M7VRMZFQlDQd7Bek3RvJzaqx6EqE03aHc6J1kEJl4fltXdmZutXEiKQALA2Xp3s4/G

YMKswiB7UO0ObBAb7u4IeegZEh3RGu5sqLbIUYGe/L8L5RzKSWAIf/TdZmjp2lcxSAa/

yy/xtIf2ScFYJy50E54sOZg4oO9bvnSHkxoXSGBPoQ9+RPlvL+NT9Jikm+VEL5AiRl0V

RQ3rp3U/rYx7iwZt9WfJli19unzZ5ONssvC8qE+Ys8PPYtoFjHUzcvF2SCmbIyLcrMYH

+G5w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:x-gm-message-state:from:to:cc;

bh=RvdQ906vmAsHM3vSNsGsYeTEGGwLdGBea9cqTj0+nWc=;

b=xNmGyLHTLTmsdg7gq3usVqE5+jqqwGgZvOE/3pEvL12xhxNbj6DKbRlYlJti0u6yPn

Bbq6xQ1W84BNN7c/Rj1zT2KQh3+kOJJDqsdG+9k1n1aVOXmqm5Y7IWPf9FUTSuiWc40c

N5LdADDP7C4tnzM5l9Lm0IdrxLl3DyacZwunqFRR5yFOgnRmOPkfECoFjLHF+2MmlkgI

8BW1PuLcGyzY0iD2iSJQu2A9//sFftqnv5MP+UUv3Cz8JQdwFrf992vq5WGUIfO4VMGS

7naqS2EKBipF9Q5ShE7iJpr+cTgulWqT9wZR8K5WdPk6GfchHmemutpIgJAIQ0Bo0y6C

KiHw==

X-Gm-Message-State: ACgBeo1tHkgOXucpR/Wws+AL8Gq+0dt/gRDX0kjQu4+zFIZ/GALiwT5+

Tli+Rvj+xaWDzFncphIBAeEl65oYYVlS1NfKjeI=

X-Google-Smtp-Source: AA6agR79Gqekj91wuaRULpOgCkJuJrrWJTL5HcF0gfJH5nrYmqxOFrVJHJYLZfoS6P7VQ/EjrAnK4wX/7sjTUuIIyeY=

X-Received: by 2002:a0d:cc96:0:b0:31f:5ca7:a2ae with SMTP id

o144-20020a0dcc96000000b0031f5ca7a2aemr12133606ywd.76.1659820277666; Sat, 06

Aug 2022 14:11:17 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:7110:2047:b0:185:cc53:38a with HTTP; Sat, 6 Aug 2022

14:11:17 -0700 (PDT)

Reply-To: robertbailey_foundation@aol.com

From: Mr Robert Bailey

Date: Sat, 6 Aug 2022 22:11:17 +0100

Message-ID:

Subject: Spende

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 11.8

X-Spam_score_int: 118

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- -- Hallo liebe Empfänger, Sie haben diese E-Mail von der

Robert Bailey Foundation erhalten. l Ich bin ein pensionierter Beamter aus

Harlem and a Gewinner des Jackpots der Powerball-Lotterie in Höhe von 343,8

Millionen Euro. l [...]



Content analysis details: (11.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.171 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[mosesgeorge033[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[mosesgeorge033[at]gmail.com]

1.1 TRACKER_ID BODY: Incorporates a tracking ID number

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Spende



--=20

--

Hallo liebe Empf=C3=A4nger,



Sie haben diese E-Mail von der Robert Bailey Foundation erhalten. l

Ich bin ein pensionierter Beamter aus Harlem and a

Gewinner des Jackpots der Powerball-Lotterie in H=C3=B6he von 343,8

Millionen Euro. l =C3=BCber den Gewinner des gr=C3=B6=C3=9Ften Jackpots in =

der

Geschichte der Lotterie in New York in Amerika. Ich habe diesen

Wettbewerb am 27. Oktober 2018 gewonnen und m=C3=B6chte Sie dar=C3=BCber

informieren, dass Google in Zusammenarbeit mit Microsoft Ihre

=E2=80=9EE-Mail-Adresse=E2=80=9C auf meine Anfrage erhalten hat. Es kostet =

Millionen

Euro. Ich gebe Ihnen diese 3 Millionen Euro, einschlie=C3=9Flich

Wohlt=C3=A4tigkeitsorganisationen und armen Menschen in Ihrer Kirche, um

dazu beizutragen, die Welt zu einem besseren Ort f=C3=BCr alle zu machen.

F=C3=BCr weitere Informationen besuchen Sie bitte die folgende Website, um

nicht skeptisch gegen=C3=BCber dieser 3-Millionen-Euro-Ver=C3=B6ffentlichun=

g zu

sein.



https://nypost.com/2018/11/14/meet-the-winner-of-the-biggest-lottery-jackpo=

t-in-new-york-history/you



Ich kann auch eine andere Best=C3=A4tigung auf YouTube =C3=BCberpr=C3=BCfen=

:



https://www.youtube.com/watch?v=3DH5vT18Ysavc



Bitte antworten Sie mir per E-Mail (robertbailey_foundation@aol.com).

Sie m=C3=BCssen sofort auf diese E-Mail antworten, um nach Erhalt dieses

Geschenks in H=C3=B6he von 3.000.000,00 EUR einen Vermittler zur Bank zu

schicken. Um dieses Geschenk von der sendenden Bank zu erhalten,

wenden Sie sich f=C3=BCr weitere Informationen bitte an die untenstehende

E-Mail-Adresse. E-Mail: robertbailey_foundation@aol.com



Mit freundlichen Gr=C3=BC=C3=9Fen,

Robert Bailey

######



Powerball-Jackpot-Gewinner

Bill Gates foundation gmail spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 06 Aug 2022 18:24:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oKU4t-0001TX-Hz

for dave@doctor.nl2k.ab.ca;

Sat, 06 Aug 2022 18:23:35 -0600

Resent-From: The Doctor

Resent-Date: Sat, 6 Aug 2022 18:23:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f179.google.com ([209.85.128.179]:39441)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oKRY7-000GDn-GR

for doctor@doctor.nl2k.ab.ca;

Sat, 06 Aug 2022 15:41:40 -0600

Received: by mail-yw1-f179.google.com with SMTP id 00721157ae682-328a1cff250so51525297b3.6

for ; Sat, 06 Aug 2022 14:41:18 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:from:to:cc;

bh=jVyRigUGkDrn2RGeSZeMM7L8uRqhPnvYoEXaOb2eX5g=;

b=gfPY5q9O4OvrksOloL8Sn4EEacwjmzLhDxffWRBep9EUEVhVGaqpOouI5V017o3m17

0Oo7Vwdw5KRNHtBv5ZME1J3XCYps3Epfb8AJgK3Ju465l8wHOycIq4PzpoH++Otdl21M

eJNuyGtefIzfFXPlrgOufO9jZ5ln7ijTGhEkSt6i8yuJXpVwplKuudO50act+5xzVowm

E8tI7UMtrEAkvL9NKK3AoAXdSWEM3CV1seWyizV9J25hCQc325WD8BJFMknTuifFIELM

6mKjLfjmu219nwdD+F7zu/1drUEC+Btg01P6tGWsRo233wlaQnvRzwiX4ogSOLjTgUk4

4UpQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:x-gm-message-state:from:to:cc;

bh=jVyRigUGkDrn2RGeSZeMM7L8uRqhPnvYoEXaOb2eX5g=;

b=x3GyYRyESLXtDEJoWYId3a8NgqqKMsotFflj+WVEBflPt0ccyE/pi7PJtf5jHCWMxx

8tJNwVeE2f+4pE+GuxtdFs+8sV4jalMPIRHqCLWv241D4FXSs/WLLyBRYQgA+DyJ6V1Q

NIDdJafsrSB8eIyNTKQITGNCs3+yEzOiW7hZcoCBdF8gLhzv+ZAt3JdMbbBoNK+LjXAv

e36YeKAAoE3Gxv68RCPPdJrKfeZEBI8SqSfYIbE0umlMUbOvNILiVz50iQ9tiutV7BCr

SFwb+Zvj622yz+w56PlOSatk6gamegWSOhLPjmv+DU67VRjzTNCzR0WLA1KGflODQoBs

jHSw==

X-Gm-Message-State: ACgBeo0q2rNm8cWp1FQj3a3salVS6TYUzNbaJQeOYrI+Tpw75OvX/ppF

gKy42cc0y6Qu8q3kwiJYTEuZUCVoDRj4IKFIvzE=

X-Google-Smtp-Source: AA6agR5JlM6xF8kubm+T6q9qY7HsFDCfebN9HK8I2DpDJYRQIL00SA+CCUUoPtTrLV0+XaCR6zx2VdcnsvHjcjGkego=

X-Received: by 2002:a81:8886:0:b0:31f:639:8b97 with SMTP id

y128-20020a818886000000b0031f06398b97mr11987363ywf.192.1659822072348; Sat, 06

Aug 2022 14:41:12 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:7010:398b:b0:2ec:cd84:12ce with HTTP; Sat, 6 Aug 2022

14:41:12 -0700 (PDT)

Reply-To: billgates_foundatoin@aol.com

From: Bill Gates Donation

Date: Sat, 6 Aug 2022 22:41:12 +0100

Message-ID:

Subject: Spende

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Bcc: doctor@doctor.nl2k.ab.ca



--=20

Nehmen Sie an unseren kostenlosen Diensten teil, da die Bill Gates

Foundation zusagt, praktisch den gesamten Betrag von 113 Milliarden

US-Dollar weltweit zu spenden. Folgen Sie dem Link zur Best=C3=A4tigung.

Sie werden per E-Mail unten f=C3=BCr die Teilnahme ausgew=C3=A4hlt.

https://www.theguardian.com/us-news/2022/jul/15/bill-gates-billions-fotune-=

donate-foundation



https://en-m-wikipedia-org.translate.goog/wiki/Bill_Gates?

Wir gew=C3=A4hren 100 der Teilnehmer 200.000,00 EURO als Spende unseres

Vereins im Rahmen unseres Charity-Projekts. Wenn Sie diesen Beitrag

gesehen haben, kontaktieren Sie uns bitte umgehend



Ihre Referenz: A22159841

Ihre Brosche: 1713

Kontakt

E-Mail: billgates_foundatoin@aol.com

Ukrainian Women spam from outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 06 Aug 2022 18:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oKU3d-0001OF-7E

for dave@doctor.nl2k.ab.ca;

Sat, 06 Aug 2022 18:22:17 -0600

Resent-From: The Doctor

Resent-Date: Sat, 6 Aug 2022 18:22:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-db8eur05olkn2035.outbound.protection.outlook.com ([40.92.89.35]:19680 helo=EUR05-DB8-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oKKo9-0009B1-KM

for doctor@doctor.nl2k.ab.ca;

Sat, 06 Aug 2022 08:29:47 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=Os72YaT/5usUF2AX8vVjt13b7zyLjypKLlTDMUAID/eTMKICvjW8gvBfCd6ng54QJRJ6tFvPI9hZoRbRuJ7LZcnCsvDFCrgYAi1Wfgo3v8+Io2Rv1DjZzgPIH5PyCGTbpPwHZhW2m8ySMcZ2duOi+DCtO4fnhORqe/t0tgjeqmoOUkBqPKXrl1IA9GKQaEyCmCyofwO3UBtgiSO/O1lzWLbD58vgpbHDMpqGZMtQB7FC/RImw4kiXFpEbZa2kqS2Y9DOZE1G63XrV9GQ5kSe0uDWu+C3dKhsSC/JW/M81tSRvilZTJZvjhnPAJYYC/AMcwUqzK3PWkRQg4fSYXGn8Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=Mlt8IWuJ/3XFe04q3x8G310eW410E2tp6b90S6ShjLE=;

b=iyCHoG70tzqHNsMblUddUr5Tpk3/r9P3TtvdAEpzZQTBw2aH/oOV+CjQaTNajRHK5cbhr+JXxs9NIzjpNo4XSz1PislAV1uZYnBfzaUFMfdnTVmJPR+458ctInE0ko78E776V3oP8lakEwDuu+s03lfkWIX9nH42kNQZJPXgG852cMAy5rDhADSdSqUio6VpQxXhAWDwvnHvGL4/675T5QAn2E9xUiD18bzCwJUJKNGybVWp25FrOFlRpxgxp4duCrC4dvqfsmgY5CMIwIGGvX4xZxfAqalaU/+e+kHgxTkDCnMR0oGRSQAZBqY+Yt0UXtWtDrEZEP5xurYNUJJshQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=Mlt8IWuJ/3XFe04q3x8G310eW410E2tp6b90S6ShjLE=;

b=hcv9CI8+FhRI6egIGSo1j9ovrEt6Tocp7OiIeEZU72iyVTFT4ITB8I56q84Uuh2ZyjnTMBb7NdtRmXjs0s/ZVXY7IZtEe42deg/UGIawbZDJRROfH7pVbp23hY3K//wY7rM/KURMLs3fMkmQlhLliApb/31OHECAwaRL2Zm076HWu2cuVQuyK4i8txoGG1EcFS25s8g4zP9XJth5KsfJUAlXCNHWN3ztIqxSOAphxj3fJz0OK+oEye6BFR8N4zbH5jU90RVS1ddb+HfKTJGxdsIJy58rwnZ/k/h2s8d+nIKPcg5BX0WLipA8XEp8+ml2Blkg0lJLsVdmZmCZLz2fvg==

Received: from AS8P193MB2061.EURP193.PROD.OUTLOOK.COM (2603:10a6:20b:44d::22)

by PR3P193MB0635.EURP193.PROD.OUTLOOK.COM (2603:10a6:102:27::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5504.16; Sat, 6 Aug

2022 14:29:13 +0000

Received: from AS8P193MB2061.EURP193.PROD.OUTLOOK.COM

([fe80::842:3207:18a3:c19e]) by AS8P193MB2061.EURP193.PROD.OUTLOOK.COM

([fe80::842:3207:18a3:c19e%4]) with mapi id 15.20.5504.017; Sat, 6 Aug 2022

14:29:13 +0000

X-Mailer: MailBee.NET 11.2.0.590

From: "sheardpetrino5248@hotmail.com"

Subject: Ukrainian woman are in Canada!

Reply-To: "sheardpetrino5248@hotmail.com"

Date: Sat, 06 Aug 2022 16:29:09 +0200

Message-ID:



Content-Type: multipart/alternative;

boundary="----=_NextPart_000_FDA3_1E3F1392.7CB6E2BF"

To: Undisclosed recipients:;

X-TMN: [rFN2OJe3Sj6mN51h2pVTaYVCe2KxUehI]

X-ClientProxiedBy: VI1PR04CA0099.eurprd04.prod.outlook.com

(2603:10a6:803:64::34) To AS8P193MB2061.EURP193.PROD.OUTLOOK.COM

(2603:10a6:20b:44d::22)

X-Microsoft-Original-Message-ID: <1.bdb5d163a78becd5e6af@DESKTOP-3LTJNO3>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-Office365-Filtering-Correlation-Id: 6b612d1a-8a89-4487-256a-08da77b80895

X-MS-TrafficTypeDiagnostic: PR3P193MB0635:EE_

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?andkTTZZWUFvMFgzWUt1UXd6U0VvL0NIYXBkZkZiQmtLbWhOWHJXRGRXRXFB?=

=?utf-8?B?L2FiVXRMdXErT0JTY0MyenJoWTBQRDBzMlBxWlhkRVlFU0ZVcEN1WVNyZFFi?=

=?utf-8?B?R2pKVGV2L2p1Vm5SdUQ0WFFwKzEvd2xab1hRbll2QVR5ZW5OaVNFMmNYZkht?=

=?utf-8?B?Y2tVaEkvWGxKejhHbDNhZ25LeFN5enBpQUhKeTA2bVBIRmpUK2pVK0lhWTk4?=

=?utf-8?B?QXZMeVV5MHpkVW5TRlNSTnRiSFI5d2VmemNLalZXY0lkM1VXOStaVm1PR2Ft?=

=?utf-8?B?OGNkUVg5QldQaTdpVTZ6VU1JZGo2SURLREFvQ3pmVEltYmxxU1R2c1RHa251?=

=?utf-8?B?UkNoSVh4YkdLWk8wSHZwS05SeFVsenhrakRJWkNkTC9nYUVuN2o1WVQ1ZFlI?=

=?utf-8?B?TzRKVmtJVEFjUWZRbkZ3WXAvNVZsaE5GUHJRSlB6VmR0eHRYRGgxSHQ0TDdJ?=

=?utf-8?B?bm9KWWp2UGJzNVRDdGR5cEdtdHV1UzE0R1pwVXFIOXFwM0o1ckpKZWxjQkNS?=

=?utf-8?B?UXgzWFFSSWtQc2Rtb3lZc1dWQ0gyN25WMjFlcjd5Rkt4SHdqbStXVHpxWUZp?=

=?utf-8?B?UnBTaTVtZG04cml6YlpnS2dNdDRNQU1rNTg3R1NBbEZpYWhublV6SnJTZlBE?=

=?utf-8?B?MDdRZ1d2a2R1ejlRSXgwWUZvN3FReW9xVzMwR0EvMkhyT2t5OC9reERUUEk1?=

=?utf-8?B?QTN0LzdkN3dQWXE0bGoxMnB6bHBKZy9HeTRBVGlHOFQzRG5weXpFYk9oVWp3?=

=?utf-8?B?anFtQ1JENjhzTi94eWdCbEx1aGtscTcrbmtJUmpwZE9tT1ZsTzl4S241YUJy?=

=?utf-8?B?bU5XUXRncHgrYlg3TW1BOGw5N0ZaK3Q4MWNRQmZ6UzZqYmFrUjR6UXhCUVJ1?=

=?utf-8?B?bngrY3kwTXJsdkFGWHlFbXQ0R25RallPYVNPSnl3eWtUYlFnUmxwQnFEKzhk?=

=?utf-8?B?bWFWZUozNXRlNzRKVUpPOEpCKzBJdk1vUEUwVC8wbVFNbEYzVGppWlAxWU9T?=

=?utf-8?B?Q1UxZUViN0NteWZxN0xST1RTcGxpd0Y5M0M0eXViKzhtKytKWGl5M3RFOUox?=

=?utf-8?B?STVkcmRJckhjVlRhakg2aTNOTjZOdnlNZlJTM2dmVDd1aFduT25rNUZTTFpo?=

=?utf-8?B?ZXk4YTBVd2RQK2ozNElxbFVzbWdTTytlVXZ2MStxRzZQWHJwSTZoMXhqQmVs?=

=?utf-8?B?RTBXUk1kUS9RRmJJVTBob0pncEEyUnVNcmV5TGFmTHV6cTRWTUdvTTN0alFL?=

=?utf-8?B?b1h4QkxNYXVHY0ZQMFpadERrdkpIM2tUZTlNK0QvRlRTOXBJOHVkaEduQXZq?=

=?utf-8?B?ZkxwdnNpcytPMDk4UXVrQ0xxM0lZUGNvd1pJa05JRUdoQy9YWENab3BvT0tD?=

=?utf-8?B?QUlPU0dzUHpVcEtQOW9HSjRBSXVGQVRTZ1JNakhyVnl0RHA3QjFKc2UvWUFI?=

=?utf-8?B?bUJ6Y0dLSjQrVy9ZdXI3alNRSm5OVG1JZmNveGtoVTdvTGt5VTBWT1lXLzFw?=

=?utf-8?B?RTFad3dFajVRODJ6YlE1L0dUMjlvbFpvMVpmK2xLaW82VEZyM1JMS2xNQnly?=

=?utf-8?B?WUdOL3BZZ1ZpNUJPWi8xcDkvWEQ5dGNJakFhV2RGbURXbjY5L0tZODBJTDVj?=

=?utf-8?B?UmpwT0dzK0VUMmx0YVJHNjFUNVpNeTlMVE5aQkZMcFozS3ZPOGhJTFkxQTIz?=

=?utf-8?B?S0ZrbkRncEJDd0dkQURHZEVEaEZiTmlDSElHZi8xWTFwei9PTmVkMDIrejc5?=

=?utf-8?Q?MZv91Gmq1kS65B1coc=3D?=

X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-80ceb.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: 6b612d1a-8a89-4487-256a-08da77b80895

X-MS-Exchange-CrossTenant-AuthSource: AS8P193MB2061.EURP193.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Aug 2022 14:29:13.7087

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PR3P193MB0635



------=_NextPart_000_FDA3_1E3F1392.7CB6E2BF

Content-Type: text/plain;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



More than 10,000,000 Ukrainians have left their homes and relocated across =

the world.



Most of them moved to Canada, United States, Australia or the UK



Thanks to this information, we have created a site where you can meet Ukra=

inian women who are now living and working in these countries!



If you are interested in webcam dating, chatting and chatting with Ukraini=

an women, visit this brand new site!





UkrainianGirlDating







UkrainianGirlDating





Don't miss this limited-time special and sign up today!





Registration is free!



Verified users!



More than 200,000 members (50,000 Slavic women)



Possibility of chat, camera and phone calls







If you wish to opt out, do so



here



































=



------=_NextPart_000_FDA3_1E3F1392.7CB6E2BF

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




style=3D"font-weight:normal;" id=3D"docs-internal-guid-62501390-7fff-09b5-=

9b8b-dcba9c76ff18">=0A=


rgin-top:0pt;margin-bottom:0pt;">=0A=


;background-color:transparent;font-weight:700;font-style:normal;font-varian=

t:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;=

">More than 10,000,000 Ukrainians have left their homes and relocated acros=

s the world.=0A=

=0A=


rgin-top:0pt;margin-bottom:0pt;">=0A=


;background-color:transparent;font-weight:700;font-style:normal;font-varian=

t:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;=

">Most of them moved to Canada, United States, Australia or the UK=

=0A=

=0A=


rgin-top:0pt;margin-bottom:0pt;">=0A=


;background-color:transparent;font-weight:700;font-style:normal;font-varian=

t:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;=

">Thanks to this information, we have created a site where you can meet Ukr=

ainian women who are now living and working in these countries!=0A=

=0A=


rgin-top:0pt;margin-bottom:0pt;">=0A=


;background-color:transparent;font-weight:700;font-style:normal;font-varian=

t:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;=

">If you are interested in webcam dating, chatting and chatting with Ukrain=

ian women, visit this brand new site!=0A=

=0A=


=0A=


rgin-top:0pt;margin-bottom:0pt;">=0A=


n style=3D"font-size:13.999999999999998pt;font-family:Impact;color:#1155cc;=

background-color:transparent;font-weight:400;font-style:normal;font-variant=

:normal;text-decoration:underline;-webkit-text-decoration-skip:none;text-de=

coration-skip-ink:none;vertical-align:baseline;white-space:pre-wrap;">Ukrai=

nianGirlDating=0A=

=0A=


=0A=


rgin-top:0pt;margin-bottom:0pt;">=0A=


olor:transparent;font-weight:400;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">
=3D"border:none;display:inline-block;overflow:hidden;width:624px;height:235=

px;">
wbnon6SigVcldAj0rMMkruTt2I3jC7ptJ_CdAclnW612eHB7NIFzfjnT8ymfYrTxJgMBF7nXIPt=

Ahezv3VQK6W7CM17wQLgRE3C6RnfpLsEa6zTcqPCLcoAUFIf8NZc" style=3D"margin-left:=

0px;margin-top:0px;" width=3D"624" height=3D"235">=0A=

=0A=


=0A=


rgin-top:0pt;margin-bottom:0pt;">=0A=


n style=3D"font-size:13.999999999999998pt;font-family:Impact;color:#1155cc;=

background-color:transparent;font-weight:400;font-style:normal;font-variant=

:normal;text-decoration:underline;-webkit-text-decoration-skip:none;text-de=

coration-skip-ink:none;vertical-align:baseline;white-space:pre-wrap;">Ukrai=

nianGirlDating=0A=

=0A=


=0A=


rgin-top:0pt;margin-bottom:0pt;">=0A=


000;background-color:transparent;font-weight:400;font-style:normal;font-var=

iant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wr=

ap;">Don't miss this limited-time special and sign up today!=0A=

=0A=


=0A=


rgin-top:0pt;margin-bottom:0pt;">=0A=


000;background-color:transparent;font-weight:400;font-style:normal;font-var=

iant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wr=

ap;">Registration is free!=0A=

=0A=


rgin-top:0pt;margin-bottom:0pt;">=0A=


000;background-color:transparent;font-weight:400;font-style:normal;font-var=

iant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wr=

ap;">Verified users!=0A=

=0A=


rgin-top:0pt;margin-bottom:0pt;">=0A=


000;background-color:transparent;font-weight:400;font-style:normal;font-var=

iant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wr=

ap;">More than 200,000 members (50,000 Slavic women)=0A=

=0A=


rgin-top:0pt;margin-bottom:0pt;">=0A=


000;background-color:transparent;font-weight:400;font-style:normal;font-var=

iant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wr=

ap;">Possibility of chat, camera and phone calls=0A=

=0A=


=0A=


=0A=


rgin-top:0pt;margin-bottom:0pt;">=0A=


000;background-color:transparent;font-weight:400;font-style:normal;font-var=

iant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wr=

ap;">If you wish to opt out, do so=0A=

=0A=


rgin-top:0pt;margin-bottom:0pt;">=0A=


tyle=3D"font-size:13.999999999999998pt;font-family:Arial;color:#1155cc;back=

ground-color:transparent;font-weight:400;font-style:normal;font-variant:nor=

mal;text-decoration:underline;-webkit-text-decoration-skip:none;text-decora=

tion-skip-ink:none;vertical-align:baseline;white-space:pre-wrap;">here
n>=0A=

=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=



------=_NextPart_000_FDA3_1E3F1392.7CB6E2BF--

Beneficiary spam from Google

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 05 Aug 2022 17:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oK6dJ-000Bxy-9c

for dave@doctor.nl2k.ab.ca;

Fri, 05 Aug 2022 17:21:33 -0600

Resent-From: The Doctor

Resent-Date: Fri, 5 Aug 2022 17:21:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wr1-f48.google.com ([209.85.221.48]:37417)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oK6AO-0009te-HP

for root@nk.ca;

Fri, 05 Aug 2022 16:51:46 -0600

Received: by mail-wr1-f48.google.com with SMTP id z17so4701743wrq.4

for ; Fri, 05 Aug 2022 15:51:23 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=oROvtpfjD9ceAZLRNaTLS6SjnHNJkAKjGkw6xTJdiDA=;

b=UyhKPU5QWtnubKM0zjcL7yttSP+6dflnmd0Qx7ZoRdw9as/mSpEQNn9zU6ICnxfZzZ

iLUfKPtGZ2SIP29CuY+xnRnleDYoH1nWtYLKRClnRi606szYfxgrX5hTqO6Hk8yJkyae

MO698qlJn4qXAXg0cXDnPJ9PbLKNCKuwYd2QYHhOHgEKc3cHRewt2zlFrcUV/CN6Amk4

UDEPouaKYozqy8VwKkpixbrXACICzcJT0xnRD5qkOAlJK4qULnj2z+ubRsbLnfLodvTk

fIPo9I4o2Ti0mzamHBkr0r0f9i8bdJgMNJBfv4xv6grhg2vqZG5685Bl7cZPgwiQDQ/I

l2zg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=oROvtpfjD9ceAZLRNaTLS6SjnHNJkAKjGkw6xTJdiDA=;

b=fAU1s6KDwG8Dnk3r42WxYybi/e9R+jFufSJ8t6lmKHuiUo7ZR7XiH5aGWbpOfnLOHZ

bGNlKgKyx6E7l++d5fsq2ZesqlPBSovs1Oza89rv6TVIG16EWRB78OzWbjSNOyHwSUY+

r0TT5d2uiHfiz6M1INCAXSuvgSReQnWnuKVV6TrYUX5OqE/pIPgoKjZVxAd6VJ3J360t

k7IkIHqaEwbe172R8GcXtdbJP+mcWsTh/L5kPgp+phD8G7e9Lcg74MvVMDJnRzjAZohf

g1TpqThEfBgkvDeu9J/jNL9RB8NdoiFlXXXrxn130fFkYe67pQP5M7VVInZMRgg3UvOA

bcwg==

X-Gm-Message-State: ACgBeo30DCXmbjd+wMqXIz0CCWjZOEuLLE0JKOCoqP5JG5IuRUCU/bii

j6SJXvJtolfJju7aroBFIsMMQKzh7uvJticBrqA=

X-Google-Smtp-Source: AA6agR5lLXPb8Z2CBGAtydfY7bksvlpO5eyyHVkaDtR41dJ6b3gZM3A/S7WEPLLeFXf9/JSslkYS2uk/J5IhCZAVjRs=

X-Received: by 2002:a05:6000:1704:b0:220:69a7:ec2b with SMTP id

n4-20020a056000170400b0022069a7ec2bmr5695461wrc.436.1659739876362; Fri, 05

Aug 2022 15:51:16 -0700 (PDT)

MIME-Version: 1.0

Reply-To: stephen.acheampong@indamail.hu

From: Stephen Acheampong

Date: Fri, 5 Aug 2022 23:48:20 +0100

Message-ID:

Subject: Your Urgent Reply

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000c01d9305e5864d9f"

Bcc: root@nk.ca

X-Spam_score: 18.2

X-Spam_score_int: 182

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Attn: Beneficiary Are you alive or dead? We received several

emails from one Mr. Lionel Newman who informed us about the car accident

you were involved in 2 month ago. Mr. Lionel Newman made us understand that

you are [...]



Content analysis details: (18.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.48 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[johndagogo4040[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[johndagogo4040[at]gmail.com]

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

2.5 HK_SCAM_N2 BODY: No description available.

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.9 URG_BIZ BODY: Contains urgent matter

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 HK_SCAM No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 LOTTO_DEPT Claims Department

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Your Urgent Reply



--000000000000c01d9305e5864d9f

Content-Type: text/plain; charset="UTF-8"



Attn: Beneficiary



Are you alive or dead? We received several emails from one Mr. Lionel

Newman who informed us about the car accident you were involved in 2 month

ago. Mr. Lionel Newman made us understand that you are in hospital in a

critical situation in coma.



He stated that he is your only living relative and your next of kin who is

to inherit all your properties. He is contacting this office based on your

outstanding payment valid at USD$10,500,000.00 which is deposited with our

bank and requesting that the payment should now be transferred into his own

personal account as he stated below.



Bank Name : Citibank

Bank Address: 388 Greenwich St, New York, NY 10013, USA

Account Name :Lionel Newman

Routing Number: 021000089

Account Number: 5944130210



We request your confirmation before we can process this transfer to

Mr.Lionel Newman bank account so as to avoid releasing your money to the

wrong person because Mr. Lionel Newman is too eager and ready to follow

every instruction to have this money paid into his account.



Kindly reply to this message if you are alive so as to enable us process

the release of the $10.5 million dollars to you.



Waiting to hear from you



Mr. Stephen Acheampong

Foreign Remittance Department

Bank of Africa (Ghana) Ltd .



--000000000000c01d9305e5864d9f

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




=3D"ltr" style=3D"box-sizing:border-box">Attn: Beneficiary

sizing:border-box">
<=

br style=3D"box-sizing:border-box">

ng:border-box">Are you alive or dead? We received several emails from one M=

r. Lionel Newman who informed us about the car accident you were involved i=

n 2 month ago. Mr. Lionel Newman made us understand that you are in hospita=

l in a critical situation in coma.

g:border-box">

yle=3D"box-sizing:border-box">He stated that he is your only living relativ=

e and your next of kin who is to inherit all your properties. He is contact=

ing this office based on your outstanding payment valid at=C2=A0 USD$10,500=

,000.00 which is deposited with our bank and requesting that the payment sh=

ould now be transferred into his own personal account as he stated below.
div>


g:border-box">
Bank N=

ame : Citibank

yle=3D"box-sizing:border-box">Bank Address: 388 Greenwich St, New York, NY =

10013, USA

=3D"box-sizing:border-box">Account Name :Lionel Newman

ng:border-box">
Routi=

ng Number: 021000089

tr" style=3D"box-sizing:border-box">Account Number: 5944130210

box-sizing:border-box">

x">

sizing:border-box">We request your confirmation before we can process this =

transfer to Mr.Lionel Newman bank account so as to avoid releasing your mon=

ey to the wrong person because Mr. Lionel Newman is too eager and ready to =

follow every instruction to have this money paid into his account.

v dir=3D"ltr" style=3D"box-sizing:border-box">

r-box">
Kindly reply =

to this message if you are alive so as to enable us=C2=A0 process the relea=

se of the $10.5 million dollars to you.

sizing:border-box">

r" style=3D"box-sizing:border-box">Waiting to hear from you

-sizing:border-box">
=



ing:border-box">Mr. Stephen Acheampong
<=

/div>
Foreign Remittance De=

partment

"box-sizing:border-box">Bank of Africa (Ghana) Ltd .

:border-box">


le=3D"box-sizing:border-box;color:rgb(85,85,85);font-family:Arial,Verdana,H=

elvetica,sans-serif;font-size:14.6667px">




--000000000000c01d9305e5864d9f--

Charity Spam from Google

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 05 Aug 2022 14:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oK3ze-000PRE-BG

for dave@doctor.nl2k.ab.ca;

Fri, 05 Aug 2022 14:32:26 -0600

Resent-From: The Doctor

Resent-Date: Fri, 5 Aug 2022 14:32:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f48.google.com ([209.85.208.48]:42658)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oK3Kr-000M6s-72

for doctor@nl2k.ab.ca;

Fri, 05 Aug 2022 13:50:21 -0600

Received: by mail-ed1-f48.google.com with SMTP id z20so2717035edb.9

for ; Fri, 05 Aug 2022 12:49:59 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:sender:from:date:message-id:subject:to;

bh=xM+CWVWz8lA6IulW4NrBBWJxCv0hpnpQmbgpf9YhGjo=;

b=Su1w1HLqg9UiJV9TwJrAI/uI23fW2RIgxSPTAb3byfn+TTAoTJY3SGtHGPv9uD9oXS

/Lfnen9jwV7fGlIB2r8i6BmZA8LzGvADGqq/zwhpKPJ2wgD+hGQbTYMzmC5l/4olmgg8

1807+33pA6gwAmG9DhQY7OfekrzqM5cxiKutuylIrXIO9Ej3T2ja/8/i77PGpDJByMql

mE3ANKGP9NO8TailprDjgPNlSItWwYIYteLT6/yAM2477evXu6M1qUeHsAnPYAbDdbsi

MkW+pakK0EbpO15eN9zTU+LRk7qe4eXDaFrPTRHYJkp3vp1DOUq3h9/WWBlmFH/WHSgK

zD1w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:sender:from:date:message-id:subject

:to;

bh=xM+CWVWz8lA6IulW4NrBBWJxCv0hpnpQmbgpf9YhGjo=;

b=b0a6VKmdISVTX97s7UVlbpOc08IOz7MaRIEDJCfW1+g/xuNo+UqEvwoLYZoKPxWoXo

Kp9XwAslfUvPL6BnEdyTymnuz/D/gW3Lczjl5IG5YklpJV4kFfG430wcsmiBjXOVuim1

W12oK1qWFktFCB9VYHffPOLZPs30Z+tlMhSGtzUJcWX0pCOt/BQAvod3jcAbCAHi9mFZ

CN5Nbikynr/9zil7NbZI24RB++vdWACT64ItEaKm+zZNIW1qHQq1+qgzfZuartBwIkC9

jPYJteIjaKoY2DIfWeHL1sNR/aAsdLzlhaorbIZ8ssFhesO9GhmHVjs+xFLSV6VItQo+

e7vw==

X-Gm-Message-State: ACgBeo2tVUtqof1H9XqqFePL7qPdpForTiQDYHsDVEwtj7V1ARKp/2wW

7+CVHDcRdtaQSp9En6QazUXCA85kXKHEXuV5Rzw=

X-Google-Smtp-Source: AA6agR74T1t+37tsHbhGi3X8JbUAW4jR895ckCNm1LbC1OaxnG0/jYyynUrbXtEL3pusN9/3hEm13Pd1SC+PRagIYUY=

X-Received: by 2002:a05:6402:2b8d:b0:43a:5410:a9fc with SMTP id

fj13-20020a0564022b8d00b0043a5410a9fcmr8156085edb.99.1659728993470; Fri, 05

Aug 2022 12:49:53 -0700 (PDT)

MIME-Version: 1.0

Sender: koalasalam79@gmail.com

Received: by 2002:a05:6f02:a277:b0:20:8ba4:d884 with HTTP; Fri, 5 Aug 2022

12:49:52 -0700 (PDT)

From: "carlsen.monika"

Date: Fri, 5 Aug 2022 20:49:52 +0100

X-Google-Sender-Auth: c53T7MKH7Q2sNJxxeTs2cF1TLKI

Message-ID:

Subject: Hello

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@nl2k.ab.ca

X-Spam_score: 14.5

X-Spam_score_int: 145

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, CHARITY DONATION Please read carefully, I know it is

true that this letter may come to you as a surprise. I came across your e-mail

contact through a private search while in need of your assistance. [...]



Content analysis details: (14.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.48 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[koalasalam79[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[carlsen.monika[at]gmail.com]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

2.7 HK_SCAM_N1 BODY: No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

2.0 TVD_PH_BODY_META No description available.

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Hello



Hello,



CHARITY DONATION Please read carefully, I know it is true that

this letter may come to you as a surprise. I came across your e-mail

contact through a private search while in need of your assistance. i'm

writing this mail to you with heavy sorrow in my heart, I have chose

to reach out to you through Internet because it still remains the

fastest medium of communication. I sent this mail praying it will

found you in a good condition of health, since I myself are in a very

critical health condition in which I sleep every night without knowing

if I may be alive to see the next day.



I'm Mrs.Monika John Carlsen, wife of late Mr John Carlsen, a widow

suffering from long time illness. I have some funds I inherited from

my late husband, the sum of ($11.000.000,eleven million dollars) my

Doctor told me recently that I have serious sickness which is cancer

problem. What disturbs me most is my stroke sickness. Having known my

condition, I decided to donate this fund to a good person that will

utilize it the way I'm going to instruct herein. I need a very honest

and God fearing person who can claim this money and use it for Charity

works, for orphanages, widows and also build schools for less

privileges that will be named after my late husband if possible and to

promote the word of God and the effort that the house of God is

maintained.



I do not want a situation where this money will be used in an ungodly

manners. That's why I'm taking this decision. I'm not afraid of death

so I know where I'm going. I accept this decision because I do not

have any child who will inherit this money after I die. Please I want

your sincerely and urgent answer to know if you will be able to

execute this project, and I will give you more information on how the

fund will be transferred to your bank account. I'm waiting for your

reply,



Best Regards

Mrs.Monika John Carlsen,

advertisement spam coming from gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 05 Aug 2022 06:36:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oJwYF-000HDN-HQ

for dave@doctor.nl2k.ab.ca;

Fri, 05 Aug 2022 06:35:39 -0600

Resent-From: The Doctor

Resent-Date: Fri, 5 Aug 2022 06:35:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f67.google.com ([209.85.160.67]:42499)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oJuOx-000EW5-AU

for sales@nk.ca;

Fri, 05 Aug 2022 04:18:01 -0600

Received: by mail-oa1-f67.google.com with SMTP id 586e51a60fabf-f2a4c51c45so2433861fac.9

for ; Fri, 05 Aug 2022 03:17:35 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc;

bh=n8gtYFet8wKidPwFTPUn69qEjP/63LBKgswlbG4Yrk4=;

b=GXIRVH785qWebj8zca8D+Kri7Z9bzlI6sssMGyPshb+7wMdvv/1Gi7IkXIlVtkyUDk

w03eWqOV01P3Q3qsrkK0WVDyUzPHlDSdbJPf8Xg2nMS/ATQv8YAfgBPnTyxANW7qZwBY

YNgm6UiWXvQ5kXFfYog55L0yq056t39SppzlBudoOTGiQPmh51ofMQlk0/SN2R/Cbz1R

uCEn58Bk7Bffllq9zSG9VlNx4fOJnQhzwjpLIJQfhx4l5VR2fq47QRX02rnqFjRvqe7f

wcm9R7fElvnUUuRN4wAomhuRS7u/uFqShyXaTRGw8AHjqJ0Kd/JSKfugSdXposaXY6BS

XNgQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc;

bh=n8gtYFet8wKidPwFTPUn69qEjP/63LBKgswlbG4Yrk4=;

b=vVrQnpaiAyI4gpINeG1rrQs7CMggL2jj/4Q9OShVG4oZO7UAoQCdkh2/tkt/UTrpSA

8iNUWsBtPWOhzVkyUBtOaT3tSDqTjNenxGK0lt1Ujsc6WLn7D0ld1JVDUq6SiBGGGQgm

ivgV772CIH84bhNOesA+WBQUIoso4ve48/sxarIjxPOvfbZeSZoW/LG/zUK6yqmbmHip

u/9xIpD4nb1+p4bVdnb7iBDl+WzVdUhGQsQolv/czkgsNFbPV19eQvH4DCGOHkn6eCf2

1wtKICUvTRgRM84qTK9A8STjyBtp7AKo5VaK5hsxIynEFA1oh71WftT2ToAbLfv0czLj

5sQw==

X-Gm-Message-State: ACgBeo3UE8ZacpUTgxOp9OGsJloyyPSSLPYAU360oQ9GAwC85WOfY3ye

Dxw1HmQCX2GDMiluYsjNd46WkiPpZBZvtS23JD77ZEapfis=

X-Google-Smtp-Source: AA6agR6vn09X8Ru2fVYbhS5DaFnwDSnxJH9ASC0MK9yTRcxHwB970oHa4zj/6JwW/En9LY11QxoJFAIbMt1mgQzN97M=

X-Received: by 2002:a17:90b:8c6:b0:1f4:e3d6:cc9c with SMTP id

ds6-20020a17090b08c600b001f4e3d6cc9cmr15275065pjb.167.1659694638132; Fri, 05

Aug 2022 03:17:18 -0700 (PDT)

MIME-Version: 1.0

From: Allen Joseph

Date: Fri, 5 Aug 2022 15:47:06 +0530

Message-ID:

Subject: Paid advertise on www.nk.ca [Price ?]

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="00000000000057702205e57bc531"



--00000000000057702205e57bc531

Content-Type: text/plain; charset="UTF-8"



Hello ,



I see your website www.nk.ca and its impressive. I wonder if

advertising options like guest post, ad content are available on your site?



What's the price if we want to advertise on your site?



Note : Article must not be any mark as sponsored or advertise.

Cheers

Allen joseph



--00000000000057702205e57bc531

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






:block">

avf gmail-tS-tW gmail-tS-tY" aria-label=3D"Message Body" role=3D"textbox" a=

ria-multiline=3D"true" style=3D"direction:ltr;min-height:280px" tabindex=3D=

"1" aria-controls=3D":g3">Hello ,

=C2=A0 =C2=A0 I see your website =

=C2=A0www.nk.ca =C2=A0 and its impressive.=

I wonder if advertising options like guest post, ad content are available =

on your site?

What's the price if we want to advertise on your s=

ite?

Note : Article must not be any mark as =C2=A0sponsored or adver=

tise.
Cheers
Allen joseph=C2=A0








--00000000000057702205e57bc531--

Nigerian Gmail spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 05 Aug 2022 06:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oJwX0-000H6p-1v

for dave@doctor.nl2k.ab.ca;

Fri, 05 Aug 2022 06:34:22 -0600

Resent-From: The Doctor

Resent-Date: Fri, 5 Aug 2022 06:34:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f179.google.com ([209.85.215.179]:37430)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oJrex-0001Ss-LU

for doctor@doctor.nl2k.ab.ca;

Fri, 05 Aug 2022 01:22:20 -0600

Received: by mail-pg1-f179.google.com with SMTP id bh13so1989452pgb.4

for ; Fri, 05 Aug 2022 00:21:58 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:from:to:cc;

bh=fwXc0OJnNRCwuTBqyoYTqhr98uaAzxJ37q1I2vExlb0=;

b=IF20+UcrGa2iLbPPHMWzprpvOj4olMjvseYtndomHiCQ7mxDNEX2cLg+9pOiH/nvlp

jiCgW5wOPa+sf8j+ouL7HlLFgZHyQwFBmHtfzHGsXBfOuPTSBVzaGxvlCb9lKycql4wK

vCabvnIIG2zNLOX0oTjUKsltq7iSLxU8PwI+icUbJpkuss+0avh5BoJFocg9lZ/yIYbd

Pvl2OVb0zJqCDxGHpmW11t9vnnsMNz6s2v0rbIcvCHMcR0uR1gyNbIK7xHvGwnA/nsqt

T3/vnmQRrCSYEFsAoXfORiLNErBzUb+kMq9og73DBQEmxJNwj2rCg5S39v7MLQpCjkVa

5Q/w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:x-gm-message-state:from:to:cc;

bh=fwXc0OJnNRCwuTBqyoYTqhr98uaAzxJ37q1I2vExlb0=;

b=rME6T+aLREES5qI8wjuym3FJq0uuF2nCBobH3LSgnYQLRytvR5byzDj4Io2kOBPwrG

eKRYMX/UXDH4gUXZuJ8DNtTcdwVB6daYDnDPD063l98V+w3XH/Swy27XCvq3I9LX1WXe

61ekM88RAD1r1sbPEU0oRWVnLEoudizEmpnCe2vef140FE0J/KRe/899ZevpoC1FKAx4

s9GI/yHuPHJ0Yp4IUX2ANOHb5GOOODsaegFmY9VEjg/6sGfIGkm5iTWBWRleoni5pzEY

dj/2E90nqNuYrAsTXwhDFgiNlQySqW+HCIhFgpMif9SweZzvLW1E2Eq4kM4zHNkID4xW

30SQ==

X-Gm-Message-State: ACgBeo2UbOaKx1f32FNVY10rAr63ybrsGDk579l4HBhjp0iKja4YoEWj

Cj3b0JAJf8NUdyQZdqn6VvNpIjQhruHszJXG6nI=

X-Google-Smtp-Source: AA6agR7Dxl/Xzw6jS4bmbhdTnBpqwzgCF7L0nc+Z2Aw622u9rMpiQqLDqPh8Z8TuWY7qzzFaRvpbU1U3vw+Dnsmli+g=

X-Received: by 2002:a63:4608:0:b0:41a:617f:e194 with SMTP id

t8-20020a634608000000b0041a617fe194mr4918498pga.152.1659684112256; Fri, 05

Aug 2022 00:21:52 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:6a21:3292:b0:8d:630b:494 with HTTP; Fri, 5 Aug 2022

00:21:51 -0700 (PDT)

Reply-To: cliffordrufus55@gmail.com

From: Clifford Rufus

Date: Fri, 5 Aug 2022 07:21:51 +0000

Message-ID:

Subject: Greetings ,

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 23.0

X-Spam_score_int: 230

X-Spam_bar: +++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Friend, I am Mr. Clifford Rufus and I have emailed you

earlier a few weeks ago without any response from you. I am sending you this

second Email in respect of my late client that bears the same last name with

[...]



Content analysis details: (23.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.215.179 listed in wl.mailspike.net]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[cliffordrufus55[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[paul.koffi60[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[paul.koffi60[at]gmail.com]

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

2.5 HK_SCAM_N2 BODY: No description available.

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

2.0 HK_SCAM No description available.

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Greetings ,



Dear Friend,



I am Mr. Clifford Rufus and I have emailed you earlier a few weeks ago

without any response from you. I am sending you this second Email in

respect of my late client that bears the same last name with you, an

Independent Contractor in the Republic of Ivory Coast. On the 1st of

December 2012, my client, his wife and only daughter were involved in

fatal road crash while visiting a neighboring country on vacation; am

compelled to do this because I would not want the bank to push my

client=E2=80=99s funds into the bank treasury as unclaimed inheritance and =

the

amount involved is US$13,700,000.00 Million.



He died together with his next of kin and as such the funds now have

an open beneficiary mandate. Fortunately both of you have the same

last name so it will be very easy to make you his official next of kin

and the money will released to you and we share according to our

agreed sharing ratio. If you are interested kindly get back to me so

that i can give you Comprehensive details,



Yours faithfully,

Clifford Rufus

Attendees list spam from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 04 Aug 2022 17:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oJkM2-000Ia8-5V

for dave@doctor.nl2k.ab.ca;

Thu, 04 Aug 2022 17:34:14 -0600

Resent-From: The Doctor

Resent-Date: Thu, 4 Aug 2022 17:34:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f178.google.com ([209.85.208.178]:35686)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oJjqf-000F2v-2R

for doctor@netknow.ca;

Thu, 04 Aug 2022 17:01:52 -0600

Received: by mail-lj1-f178.google.com with SMTP id r14so1389668ljp.2

for ; Thu, 04 Aug 2022 16:01:31 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=globistictec.com; s=google;

h=to:subject:message-id:date:from:mime-version:from:to:cc;

bh=vSOHleRNhbSTQbazSe3aUG/Z53iJJdYSACAi2NP9gPw=;

b=phfOe3NcxGB88ljaBiWVyGny6GhDjQX9lgCASAJ3T2mZSNEQnmFypuO1noATBMPcBO

0VZcX4oVjdE3qbyOCfXpxo4YAy6PXVHr/5578jG/3ACyrn//+iTLiAL8QhCtxwWiqh2J

HTJGxyUm6o72J9ABqEZdYgvKPMvS+8hQZnF/qZDzRl38zQLyrNX1Nf3XV+om1xk2VJJ/

4xQx/BfrX/X27Ti/UtIL9FsAPxbATbKjfkglEeibq/Fy1Hc5qu8Sr6nYfgrxc0tGIOEo

r8Uw/Dp1APej+8UnakNsgVX8OOEKr0VmOv8F77zX5NNwfWDH78POFZiEVSc8GNHUGbb+

8vvQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc;

bh=vSOHleRNhbSTQbazSe3aUG/Z53iJJdYSACAi2NP9gPw=;

b=1GTc2t28igW5xRrZc+FM1aMX24D28ZIkwh4PvaPrS2DvwSDHMDH2TJyd+P7LKCBqHl

qAzM0Vb0cc+43CVToAXwUoz1vA6HaGdkGXL8mGOFYXu6LtDQ16omcNswg4CiiooYrWRn

Kdz28sNwOn+ID5WKiSkrZTqIDHsXiWB9ntME3ATvONfTnbp6xviZgU3rRshgFfTf+Lg6

oqPK4vybqWJ/sFxPW9CjLtnnIABleEHoc+gwOzsQSQGKoxdWTvqFtoxtl9YSlH1DwNvz

tna1ePWQ8E29gGlJJnRWw57SzVSw4vb4TECDvfyy1E77hGbN0LK9ZKX+xnefFTlW9KVO

dkGQ==

X-Gm-Message-State: ACgBeo2qt5wiAwTINBHpVkPukNl6jDmUmp/GhKi+kXs7yVSRxQQA2Es5

8QMVIgKdUvFWsyh/YMWVELbUQCQ/AMhNMWxMF6jCdQ==

X-Google-Smtp-Source: AA6agR61j/GwvhVdWUOd4b2LJRJ6wW7gZ7PLAcf1jtp0lmj9r+UqQrTvislm9SuI9PieCcfCD1dlhYlxX0LD/meyp3c=

X-Received: by 2002:a05:651c:1796:b0:25d:7288:ed0b with SMTP id

bn22-20020a05651c179600b0025d7288ed0bmr1188132ljb.228.1659654084224; Thu, 04

Aug 2022 16:01:24 -0700 (PDT)

MIME-Version: 1.0

From: Katrina Bowden

Date: Fri, 5 Aug 2022 04:30:00 +0530

Message-ID:

Subject: NACDS Total Store Expo 2022 Attendees list

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000002402b705e57254b3"

Bcc: doctor@netknow.ca



--0000000000002402b705e57254b3

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Exhibitor,



NACDS Total Store Expo 2022 - attendees list is available now at a

discounted price.



Could you let me know if you want to receive the Attendee List by emails?



You can use this list for your booth invitation, pre-show marketing

campaigns, and appointment setting.



Interested =E2=80=94 just reply back as =E2=80=9CSend Counts and Cost"



Thank you.







Katrina Bowden



Marketing Manager



--0000000000002402b705e57254b3

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




ight:13.91px">Dear Exh=

ibitor,


eight:13.91px">NACD=

S Total Store Expo=C2=A02022=C2=A0- attendees list is available now at =

a discounted price.


m 8pt;line-height:13.91px">
763">Could you let me know if you want to receive the Attendee List by emai=

ls?


t:13.91px">You can use=

this list for your booth invitation, pre-show marketing campaigns, and app=

ointment setting.


8pt;line-height:13.91px">
3">Interested =E2=80=94 just reply back as =E2=80=9CSend Counts and Cost&qu=

ot;


t:normal">Thank you.
font>


nt face=3D"verdana, sans-serif" color=3D"#073763">=C2=A0


=3D"MsoNormal" style=3D"margin:0cm;line-height:normal">
dana, sans-serif" color=3D"#073763">Katrina Bowden


=3D"MsoNormal" style=3D"margin:0cm;line-height:normal">
dana, sans-serif" color=3D"#073763">Marketing Manager





--0000000000002402b705e57254b3--