mail phishing credentials

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 29 Jan 2023 05:21:29 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pM6fh-000Lna-1f

for dave@doctor.nl2k.ab.ca;

Sun, 29 Jan 2023 05:20:33 -0700

Resent-From: The Doctor

Resent-Date: Sun, 29 Jan 2023 05:20:33 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from omrs04.pc3.atmailcloud.com ([3.226.13.77]:42996)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from )

id 1pLyxu-000GQ3-14;

Sat, 28 Jan 2023 21:06:54 -0700

Received: from MRR.i-0ec3a420a7257558f

by OMR.i-0239dec18e1875a7a with esmtps

(envelope-from )

id 1pLyw2-0007IH-Hw; Sun, 29 Jan 2023 04:04:54 +0000

Received: from CMR.i-03f26429bc668704e by MRR.i-0ec3a420a7257558f with esmtps

(envelope-from )

id 1pLyw2-0008KO-Do; Sun, 29 Jan 2023 04:04:54 +0000

Received: from [185.238.231.78] (helo=[192.168.1.100])

by CMR.i-03f26429bc668704e with esmtpsa

(envelope-from )

id 1pLyvz-000557-6b; Sun, 29 Jan 2023 04:04:52 +0000

Content-Type: multipart/alternative; boundary="===============0063061164=="

MIME-Version: 1.0

Subject: Network Storage Maintenance Notification

To: Recipients

From: "Technical Support"

Date: Sun, 29 Jan 2023 13:04:08 +0900

X-Antivirus: Avast (VPS 230128-10, 1/29/2023), Outbound message

X-Antivirus-Status: Clean

X-Atmail-Id: schwahnelectric@bugnet.net

X-atmailcloud-spam-score: 20

X-atmailcloud-spam-bar: ++

X-atmailcloud-spam-action: add header



You will not see this in a MIME-aware mail reader.

--===============0063061164==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



Dear @ Users,

Your account has failed the verification/update process. Account holders a=

re required to update their accounts. If you do not comply with this notice=

within the specified time, you may not be able to send or receive all mess=

ages, and the owner of the message may risk losing your account. To upgrade=

your account.

KINDLY CLICK HERE FOR VERIFICATION

NOTE!! If you do not update your account, your account will automatica=

lly be removed from our system.

We apologies for any inconvenience this may cause.

Regards, Customer care Technical Support Team.



--

This email has been checked for viruses by Avast antivirus software.

www.avast.com

--===============0063061164==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body




=3Diso-8859-1"/>

(0,0,0)">



Dear @=

Users,





Your a=

ccount has failed the verification/update process. Account holders are requ=

ired to update their accounts. If you do not comply with this notice within=

the specified time, you may not be able to send or receive all messages, a=

nd the owner of the message may risk losing your account. To upgrade your a=

ccount.











SIZE: medium; FONT-FAMILY: times new roman; COLOR: #800000">NOT=

E!!











SIZE: medium; FONT-FAMILY: times new roman">If you do not update your a=

ccount, your account will automatically be removed from our system.
PAN>





We apologies for any incon=

venience this may cause.






SIZE: medium; FONT-FAMILY: times new roman">Regards,



SIZE: medium; FONT-FAMILY: times new roman">Customer care
DIV>


SIZE: medium; FONT-FAMILY: times new roman">Technical Support Team.
>

2AA1F9FDF2">

able>
=3D"1">

--===============0063061164==--

SEO spam from Gmail servers

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 28 Jan 2023 14:54:27 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pLt9T-0003DU-2G

for dave@doctor.nl2k.ab.ca;

Sat, 28 Jan 2023 14:54:23 -0700

Resent-From: The Doctor

Resent-Date: Sat, 28 Jan 2023 14:54:23 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f67.google.com ([209.85.216.67]:33620)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pLou3-000KiZ-3B

for sales@nk.ca;

Sat, 28 Jan 2023 10:22:16 -0700

Received: by mail-pj1-f67.google.com with SMTP id v6-20020a17090ad58600b00229eec90a7fso10508529pju.0

for ; Sat, 28 Jan 2023 09:20:13 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=46XBPxWhv+4l8W+xFuFyYSDPWuUWJ+DErJ4wqXmS500=;

b=TAUCHHfghG86+bQ8bfIqO1qiVnWYgsMpGH9jIi2ETNQXSoPP0VM2Patiq3I5tQ8c4K

rFjo9ALBQwHoemOT2DXXP55ddt5Tme4pwAZRuTJKwP5W9kMbLGOlNV9xNhNqSna6ThL5

b9mBzhEz3w+3H7rWp05rdvy/dc6BsKYygRFwK5qW6/0wllEq0MjXdp3fRah3SdjtVmHG

iQUK1Pn3WAWxtwb6D1vWH7PD2F5y1LJd1ZhTY99n7mMEBWchir146NhVGKWI6iiv2Wwa

Z7OfFNpV/kzwCUEGEeGreRicez9sFB4/8zSC/VAgKsoKt2zrQ3lz2JBVM2I9HSuPKhB5

7WKg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=46XBPxWhv+4l8W+xFuFyYSDPWuUWJ+DErJ4wqXmS500=;

b=pMg0VlK9LLbaP/2HCflGZxvQ8336OhoLFy7weiqusXYJqdkyZiAgXjA0XhXnC8gOSo

2hGS0ZK6nv2cVbk/BZf4MdOlCZFstDBd+flBf6IiOCUlg3RL3eLjD03tAbYxNM7sZS8S

gmY4JMQ4bJ3MxJfJ/nJniYkT2bnd3rADpp0SEPKvZCFzpnhzbAU9jMuIzeX4uTH/za05

EmoN4FTXCo8jnsm5d8pBWTgbYIFr+rJ1+xuNdlVwSoFJdR5mkhh25mKAFvfCnNmRXbrF

eWeAD8z1WpuDeStelogrz4K7viPhVHLw9K16Lj1+2pUBeYYYFMdFMYTN9afDDAZIwC+x

oriw==

X-Gm-Message-State: AO0yUKWwg+wrmxEl53Hwee5ZMEP4Cpk6IEnvxF0MwkN5RPrTjsNbm/oB

7DClp8mxjHw6kAfkf6FPXaKK2GHNFSc=

X-Google-Smtp-Source: AK7set/gVgeH1TJqFOUo4aNiUgjE0YRzCcwYHAy5NtLJmgfdl3ceBYyhK1UoYg5J2Kz88HDU8sic3Q==

X-Received: by 2002:a05:6a21:7886:b0:bc:7b98:5c0a with SMTP id bf6-20020a056a21788600b000bc7b985c0amr5242279pzc.38.1674926407459;

Sat, 28 Jan 2023 09:20:07 -0800 (PST)

Received: from SsPC ([103.15.254.64])

by smtp.gmail.com with ESMTPSA id n29-20020a638f1d000000b004d3f518eea7sm4007924pgd.94.2023.01.28.09.20.06

for

(version=TLS1 cipher=ECDHE-ECDSA-AES128-SHA bits=128/128);

Sat, 28 Jan 2023 09:20:06 -0800 (PST)

From: "Yash"

To:

Subject: Rank Number One in Google

Date: Sat, 28 Jan 2023 22:49:23 +0530

Message-ID: <0acd01d9333c$bc42f7a0$34c8e6e0$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0ACE_01D9336A.D5FB33A0"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdkzPHndsu2MTMTGRj21prQU/TBcGw==

Content-Language: en-us



This is a multipart message in MIME format.



------=_NextPart_000_0ACE_01D9336A.D5FB33A0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi Netknow Internet Service,





Greeting of the day!



I was checking your website on behalf this

''https://www.rochaintheorchards.ca/ '' with your permission I would like to

send you a SEO report with prices showing you a few things to greatly

improve these search results for you.

These things are not difficult, and my report will be very specific. It will

show you exactly what needs to be done to move you up in the rankings

dramatically.



So " sales@nk.ca "



Can, we send you the full proposal..?



Thanks in advance!



Yash















------=_NextPart_000_0ACE_01D9336A.D5FB33A0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">






charset=3Dus-ascii">




















style=3D'font-family:"Candara","sans-serif";color:black;

background:white'>Hi     Netknow Internet =

Service,



style=3D'font-family:"Candara","sans-serif";color:black'>





Greeting of the day!





I was checking your website on behalf =

this

‘’https://www.rochaintheorchards.ca/ =

‘’ with

your permission I would like to send you a SEO report with prices =

showing

you a few things to greatly improve these search results for =

you.


These things are not difficult, and my =

report

will be very specific. It will show you exactly what needs to be done to =

move

you up in the rankings dramatically.





So   “ sales@nk.ca  “





Can, we send you the full =

proposal..?





Thanks in advance!





Yash






























------=_NextPart_000_0ACE_01D9336A.D5FB33A0--



Funds spam from Google

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 28 Jan 2023 08:09:04 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pLmow-000IFK-04

for dave@doctor.nl2k.ab.ca;

Sat, 28 Jan 2023 08:08:46 -0700

Resent-From: The Doctor

Resent-Date: Sat, 28 Jan 2023 08:08:46 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f169.google.com ([209.85.208.169]:33618)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pLjQt-0003Ux-2R

for doctor@mail.nl2k.ab.ca;

Sat, 28 Jan 2023 04:31:47 -0700

Received: by mail-lj1-f169.google.com with SMTP id a37so8214131ljq.0

for ; Sat, 28 Jan 2023 03:29:44 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=IO1Ax5Q/UX0v2nvWW8kBvLAsjMgcbGsWEoygKBReL4I=;

b=jSjoVEJIQJmBJIdWlo+BdG82UO44kEYKT52AjZN/G6xTeLY2VWdbrMUHw8F5g8QWuY

L5iagq72i8Bytq/ufa2HpXBLmLA0tOxh/M9bBTabtqbWi2TPiCcNOYuiJRA5CE0o55Q2

fouMJlvRkzE2wnra1NukOVvPE9cCPv5Peqe8v9M6yi1NLDQe/2RfQ5gKtr7GyHzthjhJ

XDCmBxDaPoLNThwpCyqoMcz662IKozPuNIxwci3MstZY+KW3u2e2z1Wy35vRuI70KAin

AGh0cARA4uIQqlJj7hbUhNoHDERgf3GnDGmjZZSWCjh7ZwkmPlvv0SJkWgU0L5fHrHGS

sh8g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=IO1Ax5Q/UX0v2nvWW8kBvLAsjMgcbGsWEoygKBReL4I=;

b=5JskUbqLJ7HIO8/1XjHYoEQMlhTWrhvriE9op7Kdd/IJnNG05utXUDNR78qaOoWSHg

Xuzor8aGAXkcz/tsztd2JeUh7fo8z8WJnAE4HEQoXRcln6f3RScWP08mqVH3vu2OZaeZ

YxcLbjgUtJ2/mHG7IXAqPeZ6qRzt1NJG136VDX4P+3enwFlFeDoToglxS16+y2CdKcG0

ueu3aKQT416rWiZ0FA1t0UZySYI/sBsbPq/IZbbZQSI9fCT3dsjZbeVl3cmNDG1kfplM

A4bp0qjFyyNCZu66N1cYK3NDg5y1z4cpM6wSXzvI4SLtgzgLLN88MU3+eHkL6vJBj1AU

dGOw==

X-Gm-Message-State: AO0yUKUul4dwDpdDSDxoy+du4DMMH9Xu/ZrX0aP2Cbl2Fq8nQCbLuIrA

pl/GYTj7AHnaX3lnGqfzveejwsgO9Nxl/Ns07y0=

X-Google-Smtp-Source: AK7set/uALgLzGrhQ3V34Peuy4SkP1B30YQrvKu7laKJc38IvJ9anpNdnKB3zXeOiOtyCfaZTceGvjueWxdcPb8deGQ=

X-Received: by 2002:a2e:804b:0:b0:28d:c987:3e5b with SMTP id

p11-20020a2e804b000000b0028dc9873e5bmr1239314ljg.264.1674905377406; Sat, 28

Jan 2023 03:29:37 -0800 (PST)

MIME-Version: 1.0

Received: by 2002:a2e:a915:0:0:0:0:0 with HTTP; Sat, 28 Jan 2023 03:29:36

-0800 (PST)

Reply-To: anndla1967@gmail.com

From: PostNet

Date: Sat, 28 Jan 2023 13:29:36 +0200

Message-ID:

Subject: GREETINGS

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@mail.nl2k.ab.ca

X-Spam_score: 18.5

X-Spam_score_int: 185

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I am aware that this letter had come to you as a surprise

as we had not met before or handled any business deal in the past. Nevertheless,

I have contacted you with genuine intentions, and I hope I ca [...]



Content analysis details: (18.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.169 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[anndla1967(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[intomowh24(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[intomowh24(at)gmail.com]

2.5 MILLION_USD BODY: Talks about millions of dollars

2.5 HK_SCAM_N2 BODY: No description available.

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.169 listed in wl.mailspike.net]

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 HK_SCAM No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} GREETINGS



Hello,



I am aware that this letter had come to you as a surprise as we had

not met before or handled any business deal in the past. Nevertheless,

I have contacted you with genuine intentions, and I hope I can trust

you with this Inheritance opportunity which I explain below.



My name is Mr. Larry Anderson, an account manager with a reputable

bank here in South Africa. I retrieved your contact address in my

search for the next of kin to a deceased customer of our bank, a

citizen of your country, lived and died in South Africa from Cardiac

Arrest in 2016. Unfortunately, this customer died intestate, leaving

his bank account with an open beneficiary status. All efforts made by

our bank to locate his relatives have been unsuccessful, so I decided

to write to you as I have monitored this account in the bank for

almost ten years now and no one has come forth with any claim. I want

to present you to our bank as his next of kin to claim this dormant

account worth USD$30 Million (Thirty Million United States Dollars

Only).



You will apply to the bank as an extended relative to the deceased

customer while I work from the inside to ensure all needed information

and evidence is provided to you to back up your claim. The account has

an open beneficiary status, which is why I have contacted you to come

forth and claim the funds as the next of kin and beneficiary. Since he

is from your country, it is easy for you to become his official next

of kin. If we do not claim the funds now, the funds would be reverted

to the system as unclaimed estate at the expiration of a 10-year

dormancy period.



I assure you that this transaction will be handled under due

inheritance procedures, and every necessary legitimate arrangement

will be put in place to make you the real beneficiary of the

inheritance funds. It also requires all confidentiality at this stage,

and I believe you are ready to keep this discreet until you can claim

the funds from the bank here in South Africa. Once the funds are

released to you, they will be shared between the two of us.



Send your response indicating readiness to proceed with this

transaction. Thereafter I will give you more details, and we shall

have an in-depth discussion regarding the successful completion of

this transaction.



I await your immediate response to my direct email account below



Sincerely Yours,

Larry Anderson (Mr)

Email: anderla833@gmail.com

Funds spam from Google

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 28 Jan 2023 08:08:26 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pLmnj-000Hxe-0G

for dave@doctor.nl2k.ab.ca;

Sat, 28 Jan 2023 08:07:31 -0700

Resent-From: The Doctor

Resent-Date: Sat, 28 Jan 2023 08:07:31 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f68.google.com ([209.85.160.68]:45728)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pLgVd-000Nom-0Q

for doctor@nl2k.ab.ca;

Sat, 28 Jan 2023 01:24:33 -0700

Received: by mail-oa1-f68.google.com with SMTP id 586e51a60fabf-15eec491b40so9368619fac.12

for ; Sat, 28 Jan 2023 00:22:26 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=8ZpRWllAZfKhKqzCI8SWeHEBFxHqYEPSl9hnYPZZiSA=;

b=oTAf1CYkC0TwnbQKq+D99/yV3Qwh+z1cQ5RYBF0sTFhPnrJJjeztzENybRWA9rZpYb

QPwzCVazbtAi0OjF03D+U/w+GeokMllrUlGS3P4rdU5YYVpe9k+md8VPiFEeCBN94qwi

6akLecvknSdOVZEVu+uxfmXaRiEvak+48WC7h1B1Xbsy/ejq+MaM35oF+fyt2Zbd7Ff6

464IQkJ8rpaHprlw9vSVeJFJs2VpAqBH+qth53gLPqD0ZG5KhTg9BgoMBezLka8MDHgo

niHcZ+p8YYntFvxAn0mzHAO4U+0gjrNgs0jIsxtets/fa0NiX/IKgWZ0EQgSlj1IcAW4

IsIA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=8ZpRWllAZfKhKqzCI8SWeHEBFxHqYEPSl9hnYPZZiSA=;

b=u4O63u7JS7+/k9l/IFxdeY0eXwXl4VSkgeYUBLmdVpMZI9PBgVCAqlO0KMBqjIDCjZ

QqRhxtHbyiz8WqlaYSLtdnYoEEbHZcjkOtu/hrfZsEtRvFBsgXJ1uWtR09lWhXPIxYwD

opwaGQ4KbHt7I6ngqFyf0gmZOU79+zloGmxz15EGXILUFzB6rUNDhskyL979u4YJVr1G

hLERK8YzO/ce9LjSQmEQZS897YMw6Bj0tNPLr63UAvT2li9uJcK0RyZOSng8E0u7xf4U

jLoGXlHXwfzdIYkrtPHO+BulfPWEbFkM4qBPu6Cl4Z4XYZ3OnV+NeEsUWPPl323DhHy8

nTCA==

X-Gm-Message-State: AO0yUKUh8XETh8jLu0KCb24NCa+bjXYsafvliL9fpzDfDeFgqubS0JdM

vZlCXcGQBecFwC8/kO0Zge/TlOgiTIL1cgTcNZs=

X-Google-Smtp-Source: AK7set+Hk+D4PONybtjZQu08RlxgTlldCvFRNn0TkGL32goI6Ujf7RFqeYHXWTs20/z2gdKWRZVIsLY2Jl3m0/dZSjE=

X-Received: by 2002:a05:6870:ecac:b0:163:5250:d148 with SMTP id

eo44-20020a056870ecac00b001635250d148mr707546oab.192.1674894140480; Sat, 28

Jan 2023 00:22:20 -0800 (PST)

MIME-Version: 1.0

From: "Mrs.Amalia Abel"

Date: Sat, 28 Jan 2023 09:22:08 +0100

Message-ID:

Subject: Remain blessed.

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000479f5605f34eae38"

Bcc: doctor@nl2k.ab.ca



--000000000000479f5605f34eae38

Content-Type: text/plain; charset="UTF-8"



Remain blessed.



It is with profound respect for your time, that I plead to state the

following few lines for your kind consideration, and I hope you will spare

some of your valuable minutes to read the following appeal with sympathetic

mind and understanding.



I am Mrs Amalia Abel, I am 52 years old, I am dropping this short message

from my sick bed after been diagnosed from a long time cancer of the blood.



>From all indication my condition is really deteriorating, and my doctor has

courageously advised that I may not live beyond the next two months, this

is because the Seriousness of the cancer has reached a critical stage. I am

looking for a trust and Good someone to confide on.



I have a fortune/Project ($10.5M) I want to entrust into your care you will

use this money to help the needy, motherless, orphans and widows because I

am one . Please respond to me if you will promise to see that my last wish

is been accomplish to the Glory of God and humanity.



As soon as I hear from you, I will give you more information on this.



Best Regards,



Mrs Amalia Abel.



--000000000000479f5605f34eae38

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Remain blessed.

It is with profound respect for you=

r time, that I plead to state the following few lines for your kind conside=

ration, and I hope you will spare some of your valuable minutes to read the=

following appeal with sympathetic mind and understanding.

I am Mrs =

Amalia Abel, I am 52 years old, I am dropping this short message from my si=

ck bed after been diagnosed from a long time cancer of the blood.

Fr=

om all indication my condition is really deteriorating, and my doctor has c=

ourageously advised that I may not live beyond the next two months, this is=

because the Seriousness of the cancer has reached a critical stage. I am l=

ooking for a trust and Good someone to confide on.

I have a fortune/=

Project ($10.5M) I want to entrust into your care you will use this money t=

o help the needy, motherless, orphans and widows because I am one . Please =

respond to me if you will promise to see that my last wish is been accompli=

sh to the Glory of God and humanity.

As soon as I hear from you, I w=

ill give you more information on this.

Best Regards,

Mrs Amal=

ia Abel.




--000000000000479f5605f34eae38--

Nigerian spam from Microsoft Outlook servers

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 27 Jan 2023 14:11:23 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pLW08-000JTV-2l

for dave@doctor.nl2k.ab.ca;

Fri, 27 Jan 2023 14:11:12 -0700

Resent-From: The Doctor

Resent-Date: Fri, 27 Jan 2023 14:11:12 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-psaapc01rlhn2154.outbound.protection.outlook.com ([40.95.53.154]:6283 helo=APC01-PSA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from )

id 1pLSsd-0007dW-2s

for root@nk.ca;

Fri, 27 Jan 2023 10:51:20 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=ZsKg6fedF8d0KWbSnJNWdHxw4MsHOyOObynWgr3cyeySO5R//VJqOK4AfEoaJ8OsBBg6noBe262K5zxd6yvZD9uexeVm6JI+yA0jDRNS9qyI1J6q/Tjif+ptaVJoCfL7p7duulaojPYR09+szUQ3OsoxL5a987PxLq/eO+8gVWDtrLZ7iBpDGZ2hpGVd38SgAgKxZNZ0PVh8pSWsP4LEL89cttQoftttIvI9xLOmejVcLaeonJbDwatAe7cpsLCW0gYcSNtiIHg/9DZp7tJkUVq64WOCZWqqoIYSBhrWn54kb2A6FdI4Z4riFA5ZKA1l1TiONtTxbvcP9YIF7cQbVQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=wMqN4IgIVB5cA9bM1tfm59ZDPh4sDdbzgvC95pr0WVA=;

b=gV9OXb+pI2Nyw/Eaz7MAadu6F11SVxYcR1X5GX1RUcx2gJlcLEHexV4bmEuNrcZNWv+ZSOsWR0gKvoBPoQPD7sXty3/z7BW8FMP2mJ4yvLbwfbZpYLSAKWjRm8hVlvM+QkLy9ILSMvm4ZPy7taD5rRmkDZ/czCCTemdo2JvyMNin20D2tlAfUH5ra321nuXSf+5n/+Jk/mnzmgHX/Yi668lwsS8SNiUOA9uY1beiVUas8tSH1NKoS+9v9lqY+ZLLjUhYbEQNtmHkAeTgFnzaI+CibUxUksJQKZGA8Xoc1ULj8/h3y304JluOgUMWAdS0RSK6yMo3MCSE6BEQSVByHw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

114.6.82.34) smtp.rcpttodomain=hotmail.com smtp.mailfrom=godaddy.com;

dmarc=fail (p=reject sp=reject pct=100) action=oreject

header.from=godaddy.com; dkim=none (message not signed); arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=toyotaastra.onmicrosoft.com; s=selector2-toyotaastra-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=wMqN4IgIVB5cA9bM1tfm59ZDPh4sDdbzgvC95pr0WVA=;

b=VpQA6HPwlxISEhXwPAZkRHbLhvOmx0mM9N7yBpaoY4qYjOVBf4Wbt1zZNmSbpL/zHytevFK79p2oFMKrHqU2u79pGXE0NzrXDqjxA9K/rJaAVMeExiqNEekJK8MiQLfw7IoY5o7dHDpDwNeTdCuDJBY8tgHEL4CIWPlop2e0WJ0=

Received: from PS2PR01CA0001.apcprd01.prod.exchangelabs.com

(2603:1096:300:2d::13) by TY2PR02MB4304.apcprd02.prod.outlook.com

(2603:1096:404:800d::15) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6043.25; Fri, 27 Jan

2023 17:49:08 +0000

Received: from PSAAPC01FT008.eop-APC01.prod.protection.outlook.com

(2603:1096:300:2d:cafe::6c) by PS2PR01CA0001.outlook.office365.com

(2603:1096:300:2d::13) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6043.25 via Frontend

Transport; Fri, 27 Jan 2023 17:49:07 +0000

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 114.6.82.34)

smtp.mailfrom=godaddy.com; dkim=none (message not signed)

header.d=none;dmarc=fail action=oreject header.from=godaddy.com;

Received-SPF: Fail (protection.outlook.com: domain of godaddy.com does not

designate 114.6.82.34 as permitted sender) receiver=protection.outlook.com;

client-ip=114.6.82.34; helo=toyota.astra.co.id;

Received: from toyota.astra.co.id (114.6.82.34) by

PSAAPC01FT008.mail.protection.outlook.com (10.13.38.114) with Microsoft SMTP

Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id

15.20.6043.22 via Frontend Transport; Fri, 27 Jan 2023 17:49:07 +0000

Received: from User (10.85.28.198) by VSV-C002-002006.toyota.astra.co.id

(10.185.48.40) with Microsoft SMTP Server id 15.0.1497.28; Sat, 28 Jan 2023

00:48:57 +0700

Reply-To:

From: Pah Sami

Subject: 27/1/2023

Date: Fri, 27 Jan 2023 09:49:02 -0800

MIME-Version: 1.0

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID: <5baaab7e98404f0f81946a315bda2057@VSV-C002-002006.toyota.astra.co.id>

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: PSAAPC01FT008:EE_|TY2PR02MB4304:EE_

X-MS-Office365-Filtering-Correlation-Id: 00c5bf71-c563-4a94-3efd-08db008ec9d5

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 1

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?windows-1251?Q?n23qtW0OEGM05awh/n1oC6nO6mAEjChnya5NMOZfGU88wa9babYtr6qn?=

=?windows-1251?Q?596/Mx/KbWxqdhyPnl+AXPMNcN15SUiyqdsYQZpAV0m2qgiqfrbDp0es?=

=?windows-1251?Q?Pdg/9kQxJk1CArnRb/+lc40yVn4RV/t9WknEIGohpkJhLv57t0d/TwOt?=

=?windows-1251?Q?eoinI2UDzGmR4BuLKV4Cm1c0pW+h4yvAnWC9XGV76v75vuQvEbqdWoKf?=

=?windows-1251?Q?GGQnWKiw6icoMS/dlGFCVx/2LWVv1E8UwQgO96mEJEe4OJpq/lYAGi1E?=

=?windows-1251?Q?Oe8+g3Hhy9JDvOeYWawsEfkij7IWcAd51fUn5zOve5a+Aq+PTO6nOH1h?=

=?windows-1251?Q?YPEYps+pZGk43s3uGUWtwYZVb8tI7agc7XdBr8YguiHNNtCeN0EbjZpE?=

=?windows-1251?Q?EI70ZX8xvpV2hiBa/02jeqAtzn6D89yvts6Q2KkqgZlyU2XQO/F3u0zd?=

=?windows-1251?Q?LbHR4HL9EagrLsjTuX7CXmgktK1mYtOMpn/A2qlWNb/bZ0Yck1fNLLS2?=

=?windows-1251?Q?0mw1qdJngYX3HCxh7bASnKfiYtfCnbKzdBPbyCGGC05qGQDW8fFVV5gY?=

=?windows-1251?Q?BBTyjRdPrsQFMb4ym0EoShToREDL0V+4mFrMq6IqpAXSOi8AcL4S3ggO?=

=?windows-1251?Q?Oz5a40XiD10ITQfb8WKnmUGtSRy53c19AnZ4oKyA+iDCRhNIq7u2E0yw?=

=?windows-1251?Q?JjiBcYCzriB6y8bH91gsQUvXRl5vNoo8D7Y7QRc08JmGHGYzMcGSaJC1?=

=?windows-1251?Q?snOWVp+I6dU9WaU8+yyvlcG62c9Qn6v0e0hazCeeaUJeVPaqg/MTrtMj?=

=?windows-1251?Q?BCKJkjUcrrcYm5i6vx0SybD36290wn6PZwU86dg0/7fluAVRaUcUjwRF?=

=?windows-1251?Q?ltGAdfXbgYwRHEz2U9sezZFKIz+OTxk6Q3UHhryp4KtXSHG5C177T1gh?=

=?windows-1251?Q?VWipxKjyNee5MXtEjAnFFZfVJ2KyV0wOXye92PQL5MpHYTePjj4ThfqF?=

=?windows-1251?Q?WrDoXzG80m1TEblfi7zSRmeBYRIYmWig9QOHhGWirz/CqF3ZYBImnKkw?=

=?windows-1251?Q?s2kQUnMm2gZUWzFmzqy3AolqA4sdZj74OyOySwHXPPcEALbBLcNTxZzo?=

=?windows-1251?Q?ZyFakw9ei87B9m+36trYrNhZ2w9qVaIpd0BMx1OVlgmKh2k2Pd2ajtsB?=

=?windows-1251?Q?5VP+OK9uH6Oj0IqcEEtUtAHcVDiaXTq5LiPMdyaPYsz9ofhQrerjGsF1?=

=?windows-1251?Q?3DDRRHO8cPH2FzASlsI=3D?=

X-Forefront-Antispam-Report:

CIP:114.6.82.34;CTRY:ID;LANG:en;SCL:5;SRV:;IPV:CAL;SFV:SPM;H:toyota.astra.co.id;PTR:114-6-82-34.resources.indosat.com;CAT:OSPM;SFS:(13230025)(4636009)(396003)(136003)(346002)(39860400002)(376002)(451199018)(109986016)(40470700004)(81166007)(24736004)(108616005)(2906002)(82740400003)(26005)(3480700007)(82310400005)(356005)(9686003)(498600001)(8936002)(41300700001)(70586007)(41110700001)(70206006)(2860700004)(336012)(32650700002)(316002)(8676002)(86362001)(40460700003)(83380400001)(6666004)(35950700001)(5660300002)(7406005)(40480700001)(7416002)(7366002)(4001630100005);DIR:OUT;SFP:1023;

X-OriginatorOrg: toyota.astra.co.id

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Jan 2023 17:49:07.3046

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 00c5bf71-c563-4a94-3efd-08db008ec9d5

X-MS-Exchange-CrossTenant-Id: 52d4e358-2ecb-48e2-bad4-d3c62441ff17

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=52d4e358-2ecb-48e2-bad4-d3c62441ff17;Ip=[114.6.82.34];Helo=[toyota.astra.co.id]

X-MS-Exchange-CrossTenant-AuthSource:

PSAAPC01FT008.eop-APC01.prod.protection.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TY2PR02MB4304

X-Spam_score: 14.9

X-Spam_score_int: 149

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: âš [IMPORTANT CAUTION!]: This is e-mail from outside. Please

verify e-mail sender and subject carefully, Do not open unknown links, attachments

or non-related with your business e-mail and report sus [...]



Content analysis details: (14.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=pahsamil5969%40godaddy.com;ip=40.95.53.154;r=doctor.nl2k.ab.ca]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=APC01-PSA-obe.outbound.protection.outlook.com;ip=40.95.53.154;r=doctor.nl2k.ab.ca]

0.0 NSL_RCVD_FROM_USER Received from User

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[pahsami140(at)gmail.com]

1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)

[40.95.53.154 listed in ix.dnsbl.manitu.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 PDS_HELO_SPF_FAIL High profile HELO that fails SPF

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

0.0 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} 27/1/2023














" bottommargin=3D"5">


tyle=3D"width: 55px; padding-top: 13px;">
ig-email?utm_medium=3Demail&utm_source=3Dlink&utm_campaign=3Dsig-email&utm_=

content=3Demailclient" target=3D"_blank">
n.net/ipm/preview/icons/icon-envelope-tick-round-orange-animated-no-repeat-=

v1.gif" alt=3D"" width=3D"46" height=3D"29" style=3D"width: 46px; height: 2=

9px;"/>
e; font-size: 13px; font-family: Arial, Helvetica, sans-serif; line-height:=

18px;">Virus-free.
email&utm_source=3Dlink&utm_campaign=3Dsig-email&utm_content=3Demailclient"=

target=3D"_blank" style=3D"color: #4453ea;">www.avast.com

n" style=3D"max-width: 800px; width: 100%; border:#FF0000 1px solid;">














font-size: 14px; font-family: 'Segoe UI', Arial, Helvetica, sans-serif;;pad=

ding:5px;">

=E2=9A=A0
; font-family: 'Segoe UI', Arial, Helvetica, sans-serif;padding:10px;">

[IMPORTANT CAUTION!]: This is e-mail from outside. Please =

verify e-mail sender and subject carefully, Do not open unknown links, atta=

chments or non-related with your business e-mail and report suspicious e-ma=

il to

it.helpdesk@toyota.astra.co.id




Good Katrina Lucas,


 


I am Pah Sami. I work with a financial company here in the United King=

dom. I have high-value clients looking to invest in your country. The areas=

to be considered for the venture are as follows: Real estate, oil and gas,=

agriculture, health, aviation,

tourism, retail, construction, IT & communications, technology, educat=

ion, energy, engineering, utilities, telecommunications, mining, maritime, =

sustainable energy, and a host of other profitable ventures. I asked you if=

you were willing to partner with the

investor. The investor is also given loans with low-interest rates to comp=

anies or individuals who need loans for the business. Contact me if you fit=

into any of these profiles so we can talk more.


 


Thank you,


Pah Sami




------------------------------------------------=

---------------------------------------------------------------------------=

-------------




This e-mail and any attachment may contain confidential or legally privileg=

ed information for use of PT. Toyota-Astra Motor (TAM) only. If you are not=

the intended recipient, you are not authorized to copy or disclose all or =

any part of it without the prior

written consent of the company.





Each e-mail that is sent to internal or external organizations are logged a=

nd can be used as evidence in case of rule violation.


---------------------------------------------------------------------------=

-------------------------------------------------------------









X-rated Ukrainian Women spam from Outlook Mail servers

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 27 Jan 2023 17:31:04 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pLZ6u-00016G-2i

for dave@doctor.nl2k.ab.ca;

Fri, 27 Jan 2023 17:30:24 -0700

Resent-From: The Doctor

Resent-Date: Fri, 27 Jan 2023 17:30:24 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-mw2nam12olkn2066.outbound.protection.outlook.com ([40.92.23.66]:3169 helo=NAM12-MW2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from )

id 1pLYMY-000PcK-0k

for doctor@nk.ca;

Fri, 27 Jan 2023 16:42:33 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=U+74iMWV3n8X87/2a8UH1f3bUhbLUUu9Vjltkqr3XHbIWXERU6z1+15i3MEL1Lj6LT6vcKz14n7ZU80iogGnPdmTx6KOXQAdML7gXvnMg+/pMDYmPBUzbxhE5grgs2iyXJYN6P8Dd0KvJmg1g3usLQl/2qhm8uIB29XSLp3FbmyYyF/Bx9mL+3JObXF0vIDspYvwtcsxXATqlgHe5oM76p8xerQQJElJTXOn4nkTwtIlRS1IFFgWlaW06hjSsAiWDCMQa3iZm7vXIU0Y9t7EVdMR8T4ZbUiAszHp2dp7hT2SWfdpGfZek2EQ33b8bAx3z1cJxoeiUPvxz9FSxqS6gA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=PF+jZ1QRkXkUmHaxFOFcUzAlxiVvI/ZuvfijlAFa8Bg=;

b=J55ukEslWTIC/lxRJ2K9F+Qhk7JwegbG5jX7SgPcGBfMloAGfaDKsYagMG72t7PoxPHseFPGVsQHasK+DkGtonwelkcWsNyvKXDkVhObpDSy/CgXf1EN2ehguP17q3YZGeErSgUtfjPBCrE5xo0Emzggcq42YKxtYldCC6B01yxEtw38MKueUTbCZFjdcVjS+1+MBYSuEETZ1ZHMfLOSNTWt9pmsWcqH0LXwtC1p/XpKaS+XDPNUFdJHdiw/q+St8SR5DmIahGNNTD8jdgkVdXinsX9A+6hSkgVUSmdjwBa0jthzf3et3xvfJU+q240P03VSSy9YX2KzfWlhxjjR5g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=PF+jZ1QRkXkUmHaxFOFcUzAlxiVvI/ZuvfijlAFa8Bg=;

b=E9D2qZ9aVwfd04V5BYJoccFRSzpObrw51vZOEfAnH6u7zQtBzbQnJrh2guMzdDPSk12WEd/TqD0bbeFsoPnf3dsBbq2SyobO8pt5Jxr4OmLKqL4O4KFlN/ethLq1gK3HyKfHGZwwGwgsw4X9Sw1ZnBLhnCQOwfw1EfVe19sF5ccydcsKSBsBgcIh2RrZBqy+ViQOy5OmlnKrpPq4JlXKqBFEGPRbmXfjZRkvjIuADuvaLQs5KsAOtn5n/6ZrHYZEniFhHcZpOjARHm2knbqN87d5VLZfWzS2wxwQ+O0g3V8d75dkWiyWCNMmCMDXX2Ty6bREYJfQdDrUxbllmR3Arw==

Received: from CPUP152MB4322.LAMP152.PROD.OUTLOOK.COM (2603:10d6:103:bc::13)

by CPTP152MB4375.LAMP152.PROD.OUTLOOK.COM (2603:10d6:103:fb::11) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6043.22; Fri, 27 Jan

2023 23:39:46 +0000

Received: from CPUP152MB4322.LAMP152.PROD.OUTLOOK.COM

([fe80::6fc:6d0e:6465:f0a5]) by CPUP152MB4322.LAMP152.PROD.OUTLOOK.COM

([fe80::6fc:6d0e:6465:f0a5%3]) with mapi id 15.20.6043.021; Fri, 27 Jan 2023

23:39:46 +0000

X-Mailer: MailBee.NET 11.2.0.590

From: "DucceschiAyedin@outlook.com"

Subject: Ukrainian woman are in Canada!

Reply-To: "DucceschiAyedin@outlook.com"

Date: Sat, 28 Jan 2023 00:39:39 +0100

Message-ID:



Content-Type: multipart/alternative;

boundary="----=_NextPart_000_A623_0381EE8D.DCF765DA"

To: Undisclosed recipients:;

X-TMN: [3ZrLFcOhCH1+fQHyhf6IOanELyw6gGl9]

X-ClientProxiedBy: FR3P281CA0182.DEUP281.PROD.OUTLOOK.COM

(2603:10a6:d10:a4::17) To CPUP152MB4322.LAMP152.PROD.OUTLOOK.COM

(2603:10d6:103:bc::13)

X-Microsoft-Original-Message-ID: <1.c6d4d2fc513c377fb5d3@DESKTOP-JGF09DC>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: CPUP152MB4322:EE_|CPTP152MB4375:EE_

X-MS-Office365-Filtering-Correlation-Id: d6fc3ab3-7705-4cd6-8384-08db00bfc52b

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?VkN0dkVkOXVFc3FRa0IzSjZkSmFIa0t2bE13Yy9SWWI0T2VTWDg3ZGNjb1ZG?=

=?utf-8?B?eEVwbS9uRjFWalhMeW80VXRGc2RFL0N5a0ZRUDVFTytOenMvZUdxalVjMkFl?=

=?utf-8?B?Y25mdGxJNC9uUzdRNEQ2RTAvMTZHUDJjYmV1eDd4UGRtOUo3VW5WYjl2Rklo?=

=?utf-8?B?aGVoWlhUaWZlV0JJMTNCNTNOaU5yMzR6SGw3T3hicXRNdytnTEFmUEM0bnlP?=

=?utf-8?B?d1pJbzkxcXVMUjBXOU9ETEV4aU95WmRIdkZwQlg3OGZ3d05lN3FWam1PNzEz?=

=?utf-8?B?YmtSRWhTWVFUY25uOXlmTElxMHgySGFKSVlyYnN6eG5XeG03MkxwOHRHUHlT?=

=?utf-8?B?S2lMUm5MM3NEdjJwVjZJTHE3bWEyMlVIYkRRNnhSZ1NteU5FL0dKa05lejNq?=

=?utf-8?B?SHZLbzI3ZDRWN0U2cEN6UHM4TTNSclJ5QXJWaXBTL0Y3Rm5XUjBoa2JEY3Yv?=

=?utf-8?B?N3hrdjhZemZjSWdOZnp3L0M5T3VaQ0FBRVB1bWFBZkpMa0oxdXNKTEYxNVBq?=

=?utf-8?B?OG9RZ05IZFhaangyNXZYVmJlREVxSm01bmlXOXBJRlJQaVovVXNRWnRFQU5U?=

=?utf-8?B?KzNxYU1waWlIMmZkYU9zaFEwdkhzMnhYRmFpd01RQmMxTlAzRFFvem9JcTg1?=

=?utf-8?B?MklxUnBQSzlubTM0TTFxK3gvS1AvZyt6QXkxZHBydWxNTzZOeHY1eWMrN2gr?=

=?utf-8?B?MUhrVG45NytNQ3RaK1FOY1FHUkJydGNzSUxqQzVGRDcrR0hGZS9HRHBXeG1N?=

=?utf-8?B?NERscFhuMVdqKzdVMHdCVzVjRUhsSVEvV1dhU2xxTytaNmF0bWk2dzdtREt2?=

=?utf-8?B?SVdpa2h0YVNZWXlwK1FLMzdPT0JwWUFxRUNXL1AxWGRyUEhaVi9pMlA0NkxK?=

=?utf-8?B?bXY0M01vV3Irc1Qvck5BR294bzNEMmF1OC9Ha3hEYWRLMkU3alFkYUFxUkty?=

=?utf-8?B?Ym5HUGtvQXQvSHppY3RTOFFRd05HZ2YwY3lSNGZqMFlmWWtYL2xhMS96ZDM4?=

=?utf-8?B?TjhTVThJSU03bmorTEl2dkk4STZjY3VnSURybzV3OExyREYwQkFma3U3OFFZ?=

=?utf-8?B?RkxxMlNrUDZwSm4yMXU0TEJrTXFKUUZBUVgwSWsyVkErM3JhT2NjRDJrcHk5?=

=?utf-8?B?SDJONDZkeXFtY2ZFWmhOK1F3ZjgyZXEvOXBadmtBcE1idTBGbEFlb2dkZzBG?=

=?utf-8?B?bnl6eWhvV3NzWEpEOWhGL2U1QjBhZUZJZ0JUSm4xTGdUSDBERWhpUXp0RkpZ?=

=?utf-8?B?a3ZaekQ2OCtBSEZRQWJJZ1hIOE1GUElLQllFNis0aGFiVHpScVk5dlNMT1I5?=

=?utf-8?B?bGNQYi93RkdFRkp5c0NVZU8wdnhBT3RnZ0JlTmFUTVVCaVNQUXNzTUNYZjBY?=

=?utf-8?B?RlRNaUVHb1ZyM2Z4TVlJdzJld0ZKb2UvOVZpUHhNQVEzY2kvQ2E3T0dKTG1U?=

=?utf-8?B?ZTZZVWpWZHJmRDRORzRJdW5RRFE1d3lvMmhjR0lkU215Zmx0UHZzaFBhRWpB?=

=?utf-8?B?TmpuQ2FyLzlSd3gvTEhEeExEOE9RSk9SdnEyY2ZnNmFLaHRkdXpLMUxoU0Yr?=

=?utf-8?B?dXBsTnhkQktnZnVjeVlaYjk1MkltN09iTWdOWCtES2NVM2VlNC9JTFVIQ2NQ?=

=?utf-8?B?NEE2VVJUb3htbU93U2R6ZSt5UVM3MjBwZ0JxRndtT1NPU0tldFJLTWEvTUVJ?=

=?utf-8?B?a1R3ZjdXRkFaYzRiNUFHeVo1dHg3S3RWV3JMR1Byd0xhTVlLaERjckdwZERN?=

=?utf-8?Q?WQxdsB87x8yv9SlPOc=3D?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: d6fc3ab3-7705-4cd6-8384-08db00bfc52b

X-MS-Exchange-CrossTenant-AuthSource: CPUP152MB4322.LAMP152.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Jan 2023 23:39:45.9633

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: CPTP152MB4375



------=_NextPart_000_A623_0381EE8D.DCF765DA

Content-Type: text/plain;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Are you living in Canada and want to date and meet the most beautiful women=

in the world!



Since the war in Ukraine has started over 8.000.000 people left Ukraine an=

d move all around the world



Over 1.000.000 did move to Canada and Ireland and because of that we creat=

ed a site where you can meet single Ukrainian women and show them around Ca=

nada!







On our site we have over 45.000 single Ukrainian women who are interested t=

o chat and date today with people from Canada!



Join today and find yourself the most beautiful woman in the world! Ukrain=

ian women!





FindUkrainianGirl



Registration is free!



All women are verified and real!



25.000 Ukrainian women on the site!

















If you want to delete yourself from the base, do it here













































































=



------=_NextPart_000_A623_0381EE8D.DCF765DA

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




iv align=3D"center">=0A=


3a-c83d-dea199b5d757"> =0A=


margin-bottom:0pt;">=0A=


color:transparent;font-weight:400;font-style:normal;font-variant:normal;tex=

t-decoration:none;vertical-align:baseline;white-space:pre-wrap;">Are you li=

ving in Canada and want to date and meet the most beautiful women in the wo=

rld! =0A=

=0A=


margin-bottom:0pt;">=0A=


color:transparent;font-weight:400;font-style:normal;font-variant:normal;tex=

t-decoration:none;vertical-align:baseline;white-space:pre-wrap;">Since the =

war in Ukraine has started over 8.000.000 people left Ukraine and move all =

around the world =0A=

=0A=


margin-bottom:0pt;">=0A=


color:transparent;font-weight:400;font-style:normal;font-variant:normal;tex=

t-decoration:none;vertical-align:baseline;white-space:pre-wrap;">Over 1.000=

.000 did move to Canada and Ireland and because of that we created a site w=

here you can meet single Ukrainian women and show them around Canada!
> =0A=

=0A=


=0A=


a-c83d-dea199b5d757"> =0A=


argin-top:0pt;margin-bottom:0pt;">=0A=


color:transparent;font-weight:700;font-style:normal;font-variant:normal;tex=

t-decoration:none;vertical-align:baseline;white-space:pre-wrap;">
e=3D"border:none;display:inline-block;overflow:hidden;width:674px;height:28=

6px;">
2RJeKnGHYaowPLwl4bRKRyjCElzW-Dc47fiIQVAieFAb2PpyT2GTZ5TZ_CX8gCkM70rgKEfxcR5=

ezi0eKrixlLxpvVbj491eyBjv-rS5Jvt4ZEk8JZMskZw8TnhHcuvgRCZwdWrS1iHcSGT3qjv2ix=

6Y847ihFIhFVDav7g" style=3D"margin-left:0px;margin-top:0px;" width=3D"674" =

height=3D"286"> =0A=

=0A=


=0A=


a-c83d-dea199b5d757"> =0A=


margin-bottom:0pt;">=0A=


color:transparent;font-weight:700;font-style:normal;font-variant:normal;tex=

t-decoration:none;vertical-align:baseline;white-space:pre-wrap;">On our sit=

e we have over 45.000 single Ukrainian women who are interested to chat and=

date today with people from Canada!  =0A=

=0A=


margin-bottom:0pt;">=0A=


color:transparent;font-weight:700;font-style:normal;font-variant:normal;tex=

t-decoration:none;vertical-align:baseline;white-space:pre-wrap;">Join today=

and find yourself the most beautiful woman in the world! Ukrainian women!<=

/span> =0A=

=0A=


=0A=


a-c83d-dea199b5d757"> =0A=


rgin-top:0pt;margin-bottom:0pt;">=0A=


style=3D"font-size:21pt;font-family:Arial;color:#1155cc;background-color:tr=

ansparent;font-weight:700;font-style:normal;font-variant:normal;text-decora=

tion:underline;-webkit-text-decoration-skip:none;text-decoration-skip-ink:n=

one;vertical-align:baseline;white-space:pre-wrap;">FindUkrainianGirl=

 =0A=

=0A=


margin-bottom:0pt;">=0A=


color:transparent;font-weight:700;font-style:normal;font-variant:normal;tex=

t-decoration:none;vertical-align:baseline;white-space:pre-wrap;">Registrati=

on is free! =0A=

=0A=


margin-bottom:0pt;">=0A=


color:transparent;font-weight:700;font-style:normal;font-variant:normal;tex=

t-decoration:none;vertical-align:baseline;white-space:pre-wrap;">All women =

are verified and real! =0A=

=0A=


margin-bottom:0pt;">=0A=


color:transparent;font-weight:700;font-style:normal;font-variant:normal;tex=

t-decoration:none;vertical-align:baseline;white-space:pre-wrap;">25.000 Ukr=

ainian women on the site! =0A=

=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


a-c83d-dea199b5d757"> =0A=


rgin-top:0pt;margin-bottom:0pt;">=0A=


color:transparent;font-weight:700;font-style:normal;font-variant:normal;tex=

t-decoration:none;vertical-align:baseline;white-space:pre-wrap;">If you wan=

t to delete yourself from the base, do it
r8FTs" style=3D"text-decoration:none;">
amily:Arial;color:#1155cc;background-color:transparent;font-weight:700;font=

-style:normal;font-variant:normal;text-decoration:underline;-webkit-text-de=

coration-skip:none;text-decoration-skip-ink:none;vertical-align:baseline;wh=

ite-space:pre-wrap;"> here  =0A=

=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=

=0A=


=0A=


=



------=_NextPart_000_A623_0381EE8D.DCF765DA--

X-rated spam from Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 27 Jan 2023 17:30:24 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pLZ6o-00015v-2b

for dave@doctor.nl2k.ab.ca;

Fri, 27 Jan 2023 17:30:18 -0700

Resent-From: The Doctor

Resent-Date: Fri, 27 Jan 2023 17:30:18 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-tyzapc01olkn2067.outbound.protection.outlook.com ([40.92.107.67]:10680 helo=APC01-TYZ-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from )

id 1pLYHs-000PUR-0J

for doctor@doctor.nl2k.ab.ca;

Fri, 27 Jan 2023 16:37:44 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=lGt1a3IcE2fuDsYTjRWoANgz+J+lIzp9uuqddP8EoO3yQsxt/g/nW9IlMmQwzmmUvTCn94yW0ezrOW9ujG8EM6UbvI19MQhHmz3I5HTS/uAQomDXdSc0Dtu3s1HJybS37jJEHJsK4f1+WsKTGxNyqNP6TMVCKl3MMqjVnjdf8CijMKFl8pSgqMqHQ0GvQ/PSjrwWBYj41dtSw+9laPicxkCuay2br0CSJ2fLFYTFkSb6UHD5pl8ONFdLvGI2nVgy9Xfg48u4VnaOMXxM7yfvdcn6j99uSAE0EhXsOwXJti9temECTzlsFatcNK2RXEi+3zj1NfCnvFYlgYTQVw9hZQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=+Ic2f+btLIEoc6fNCsXJ5zVP9W2WyN1t+vsIujgyJAA=;

b=S2PLJn81137eva2mis4xyX1cV8cdtbiALLhDvbN/ucCySuT3YbyaJIEVGbR7AhHvos1k4OHEKcPgl0OVHuGGJLOoaQ32PUFh1YABJJNebJUYVcvvf8zMHlkQ+KKKT72ZzO4OxPD8iAg1NnrwTXr/ap3GaEbijuXw+prH2S15jW8iPBkTOUh1g7FTEMhg6pfduSCTpPM8vvRv1txe3mTvOZFHVdDe07+DGub/pkzeRt7BfVA8CjvwCXPDAJsY9jfV+W3tw3NcwIurHkHpKdX4yAeJKVhnslKMboqOxiYhuRtRfb/cd535fiNYZ3G9UD+cJNwl515sCHJobtQzRBIInw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=+Ic2f+btLIEoc6fNCsXJ5zVP9W2WyN1t+vsIujgyJAA=;

b=iZOq7I8QPzQIadI8BbeMT8sCYOMcUHkuxl8OLUQA5/DIKRFR/oMzasX6jrDZwiVKy/jVm0yiCfZSYi7eKkxPcw6FqvJuoRNkIAzje/jO/bsI3UwSDTHE5nIJiZ96/GvE2RWeOS+Si1xh4QXX/+eN8wdHDmZECprV8dXoZe78Vr+65gEDeaLYDn0qUEqKgjIrMA3QqCddpw4vn7nYDKy3N+0J5/A3NdaeW+7gl5kqjQ1tzdipNi4kzypOXWm9wGvjStn254gUxLWzFKdk0sQKAfcjcdOQkJCA1MXU4xJNehTCUZxFA9+FuEyy1NXlJ0g0b3fVwMCI4JE6caYNqnQAWw==

Received: from SI2PR03MB6054.apcprd03.prod.outlook.com (2603:1096:4:14a::5) by

PUZPR03MB6019.apcprd03.prod.outlook.com (2603:1096:301:b6::14) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.6043.25; Fri, 27 Jan 2023 23:34:54 +0000

Received: from SI2PR03MB6054.apcprd03.prod.outlook.com

([fe80::a668:5fc4:2327:a42c]) by SI2PR03MB6054.apcprd03.prod.outlook.com

([fe80::a668:5fc4:2327:a42c%8]) with mapi id 15.20.6043.025; Fri, 27 Jan 2023

23:34:54 +0000

X-Mailer: MailBee.NET 11.2.0.590

From: "Aleny J."

Subject: =?UTF-8?Q?You_know_what_I_me?=

=?UTF-8?Q?an._=F0=9F=99=82?=

Reply-To: "seenetomwrter@outlook.com"

Date: Sat, 28 Jan 2023 00:34:46 +0100

Message-ID:



Content-Type: multipart/alternative;

boundary="----=_NextPart_000_E4A5_33CEC291.ADF0FE32"

To: Undisclosed recipients:;

X-TMN: [Vpeqg/0T5st7uEFunnsZWo1D6qCNTtli]

X-ClientProxiedBy: VI1PR09CA0096.eurprd09.prod.outlook.com

(2603:10a6:803:78::19) To SI2PR03MB6054.apcprd03.prod.outlook.com

(2603:1096:4:14a::5)

X-Microsoft-Original-Message-ID: <1.bb692442846351127d46@DESKTOP-1SRV5V9>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: SI2PR03MB6054:EE_|PUZPR03MB6019:EE_

X-MS-Office365-Filtering-Correlation-Id: dee3f7d0-8810-4b7e-57ae-08db00bf1725

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

n8MzqEPWoJGoctP01UN5uFHnCnIh4r9gwuwaUxDO9dvmHgNNUdkPtZfjlW9ei/ZVYLxGWrDLsQ80r8Ke+H5FuhofwykAQt1cxJIzCCxjO5ogFPZWMN72z1O28urEmD4i2visbpeAJmIFbSV3v+i62ASQ4ZDjgh4QJuVna0ma+APYfJmo10Sc5Xxv8WDLfLkxtwj3aPzq3jnELTRooI0owcCYIbnpUNA9IdH7YIWt9Ot8DfdNX3gJbbJqb6KIVO5wIxlc81n9+Fa9kdCjk0nLzwXV3XtU62vTRgLLukku1RCgCilpD9jeSxOBdFQIWNLa/ZSE7tzP2R3zF1WTg6JTrwqon6cr720LMKCE3UZjC7CCN1bqJHiCxlw6mV/dZqKgLBxG+G5DmT8vwGc3+x6tpf7dxC2j16XCP2fR9ya2yDmE0MLjc8olwb9h/jcei72AA81ExZ+qYEvHlVb1yN7iyK+5VLbD3XG+22ZdpE0mkD4MoLtQUfZ2ba79GxXDV1u4xgRYWiJWxpa69WfKScs/mj1NTrgowY0OXelUb/OeN0U0HzfybVsv2aaTgz6FJSr1EtY/4h/ujCrtoTtwApiy3wEycGSR61OCgxqcOpxMfx0PDbalP3wsqNAxuw0fJUB/zTXLXmKU4+l/1lILg2f+kZ8O+q9o1e0KZOF+Bwqw5F+HTqf3vXCcNBGBchrdLHDyODzisvicw9CRWSshYSLQ4WXSu5k1cjldKKFzOqA9qcE=

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?c2VuSDdkT2oyazZRc0xNZ1RhMXlENkk1c3pJZFduZ1ladkIwRWpuaDFGaE10?=

=?utf-8?B?b3Mzd1FwMURUMzNXMFVDZ3BVYUVUeXBsU0dha3p3K1A2bUlRRy9hRVlZcmpY?=

=?utf-8?B?QlJORnhyZDkwc0szcFFwQlA5dVR5Zmp3RXdpejZYTFVrTUp2QzlacmFPalND?=

=?utf-8?B?bDh2TzlsdXk5TXBKQllYak16SjFoQU5LOHdZK0tPNkRBcW1SbmE1TkhxWDdV?=

=?utf-8?B?ZGRjU3R5S2pQcllxZXE3dzFhNm16SDZZYzN6OHp4K2xVekIxN3RXaXlTRlNx?=

=?utf-8?B?ZWdMdUY0SFBCdWtiOHhsWktCTUs0bDByZVVEQmhPaE82UWdVS0I2RStiSEt5?=

=?utf-8?B?NDRsaEJuRy8xWTV0YlJyTTRXVXArVGUreG4yRmdtVGNvVTNqNkxhL1l0Umw1?=

=?utf-8?B?VlZBak9iTEowZitYcExWQ3pwNE5Yc0EzaWxub1p0NHdqUElBa2pPd1Ewb2g3?=

=?utf-8?B?UWY5WWt3MWlkZ2ZFeGNZTVZjL0sxRWFLOFIydUFZSXQ1bmZibXYvdzZ0aGpi?=

=?utf-8?B?bU1EUmpxYVBoak5oQjZRRU5WZUJMQUZlMXI2c0FndEJJMVFZUitPdFdVbVF5?=

=?utf-8?B?SUp4ak12SlpaMk5ybGozbjZ2bTArWFZrSTVobGtWMnpjVHo3TjhJZUFLajdZ?=

=?utf-8?B?UW4vQVkrVlRmZ3VpT2FkSk9zVC9uTTZ6Ky9CNitHL091VXhMZE5LODRsK1ph?=

=?utf-8?B?aHZFSGJ5VDJFRUs4dEJFWDMxR1AwSndyVXZVY2pQWjhvN1BMc1hSZmovcXJv?=

=?utf-8?B?cERaTEYwVUFPK2FyS1RIYXExMTRiZUFHYThSV1dtc25ZZkRuc1Mvc1IreDRl?=

=?utf-8?B?VWJCQldaTjlzdW9LVWZ4UXFVYkVQT1kyNmZ4eTNpWmJsYk51YzlKTFc4TzNE?=

=?utf-8?B?YVFZTGZQaWVlOFVRcm8yM3MvTEllZHlWRU1ObmsrUDIyOU5vaFNHUldZd0Nx?=

=?utf-8?B?cFhNMlAwdW9MKytOeStnZ3NmQjMvSkZWdm5QbmRHaDd5ZXVLY3c1TUNnckUx?=

=?utf-8?B?ZHdMUXBBSU4vQitaRkNhY1JFN2pXd2VITVR2R0ZsTUQrdVBnaWhiVGFJaHcz?=

=?utf-8?B?UldmcTFtR3BsU1grOHBuelh3OVlTN09Za2NFeDFOYUJlUityKzg4WG1vbDlP?=

=?utf-8?B?MFpCVUl3UE1RaGhyeUJBa2M3MG5PWVV5UU9VcjZBSkdxZjRHRCtVMENVcVhX?=

=?utf-8?B?RSsvMUh4MlZnWmZUUml6cHNRY1VVNUlnOVZmb1NGVFhwZW9DSTY1TGNnYm9x?=

=?utf-8?B?RHNsRk1HaXlDaFM5cUduRjErb2NNS0ZBYU9YMkNaQ2tKbm1GWUVmL0pOZTBv?=

=?utf-8?B?K29aMVQxZURWY0VZRVNzTG1vOEJHOVE3UDFZckMwM0YrUVlTRFYvaDBBRmp1?=

=?utf-8?B?QnZwN29HaTM1eHRtN1Vuak9ycFBWYzFneTR1TnE0SExFMy9yak1rNFVJN0dl?=

=?utf-8?B?SjZPbFJjYjJrc1ZGRVR4UHppeEFDY25aYzZIS3d0Q1dBRGtnSXBUQUw2WXFa?=

=?utf-8?B?Mm5jSUNGWGdYM2daWDVOSjRtaS9SaGJWekpWdHV0RGlKTFQvRnk0T2t0bHo0?=

=?utf-8?B?RzVNUlhZZEdOOWQ2WWJoSFF1My9jQ3U2dXM4ZkcrU0pVNGdpZE9vN0p3RW9l?=

=?utf-8?B?OXYzVGduSU9lQ3QyZ2NzQXRDMWlGNVhEU3ZBZWNYaWNxNTI2NHRlUWxnenVB?=

=?utf-8?B?cXBlc3BqQjYwN2FwNExidmFPb1c1b0ZLRGQ0Tm1hWG9ZbXlZN3lVTmpBPT0=?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: dee3f7d0-8810-4b7e-57ae-08db00bf1725

X-MS-Exchange-CrossTenant-AuthSource: SI2PR03MB6054.apcprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Jan 2023 23:34:54.2031

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PUZPR03MB6019



------=_NextPart_000_E4A5_33CEC291.ADF0FE32

Content-Type: text/plain;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hey. Do you want to meet a charming woman?



I came here a couple of years ago. I need company. You know what I mean.=

=F0=9F=99=82





I am very lonely. I attended the Faculty of Economics, I currently work i=

n an office.





I'm alone all day. Maybe you want to come to my office?



I need a person with whom I can realize my wildest fantasies. Even in t=

he workplace. Wouldn't that be good?





Get in touch if you want





charmwoman







































































































Do you want to unsubscribe? Why? If you are persistent, fine. CLICK HERE







=



------=_NextPart_000_E4A5_33CEC291.ADF0FE32

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




style=3D"font-weight:normal;" id=3D"docs-internal-guid-96209a24-7fff-8602-=

32ab-55425c7d47f6">=0A=


argin-bottom:0pt;">=0A=


olor:transparent;font-weight:400;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">Hey.  =

Do you want to meet a charming woman?=0A=

=0A=


argin-bottom:0pt;">=0A=


olor:transparent;font-weight:400;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;"> I cam=

e here a couple of years ago. I need company.  You know what I mean. =

=F0=9F=99=82=0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


olor:transparent;font-weight:400;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;"> I am =

very lonely.  I attended the Faculty of Economics, I currently work in=

an office. =0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


olor:transparent;font-weight:400;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;"> I'm a=

lone all day.  Maybe you want to come to my office?=0A=

=0A=


argin-bottom:0pt;">=0A=


olor:transparent;font-weight:400;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">  =

;I need a person with whom I can realize my wildest fantasies.  Even i=

n the workplace.  Wouldn't that be good?  =0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


olor:transparent;font-weight:400;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">Get in touc=

h if you want=0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


>
olor:transparent;font-weight:700;font-style:normal;font-variant:normal;text=

-decoration:underline;-webkit-text-decoration-skip:none;text-decoration-ski=

p-ink:none;vertical-align:baseline;white-space:pre-wrap;">charmwoman=

=0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


>
olor:transparent;font-weight:400;font-style:normal;font-variant:normal;text=

-decoration:underline;-webkit-text-decoration-skip:none;text-decoration-ski=

p-ink:none;vertical-align:baseline;white-space:pre-wrap;">
rder:none;display:inline-block;overflow:hidden;width:356px;height:433px;"><=

img src=3D"https://lh6.googleusercontent.com/-d8DYEGucqa0aNxTZNz5apgkRvfyhC=

gI7Ncz6YfViOo5YkuqNpdhzNxwJ9ftlYVldr_7W_z_oTxiD0ucnD8T4uET2Zy4IMH7NxDGN_l8p=

qsgsNAdp8afqvHhlhqA9VSmm_eN49QDhGSE397pPgeCsFWXh18wf968LHbSjd8Aqsp4DiZ6syJJ=

EscyOJbYdw" style=3D"margin-left:0px;margin-top:0px;" width=3D"356" height=

=3D"433">
color:#000000;background-color:transparent;font-weight:400;font-style:norma=

l;font-variant:normal;text-decoration:none;vertical-align:baseline;white-sp=

ace:pre-wrap;"> =0A=

=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


rgin-bottom:0pt;">=0A=


olor:transparent;font-weight:400;font-style:normal;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">
=3D"Apple-tab-span" style=3D"white-space:pre;">
=3D"font-size:6pt;font-family:Arial;color:#000000;background-color:transpar=

ent;font-weight:400;font-style:normal;font-variant:normal;text-decoration:n=

one;vertical-align:baseline;white-space:pre-wrap;">Do you want to unsubscri=

be? Why? If you are persistent, fine.
b123" style=3D"text-decoration:none;">
ily:Arial;color:#1155cc;background-color:transparent;font-weight:400;font-s=

tyle:normal;font-variant:normal;text-decoration:underline;-webkit-text-deco=

ration-skip:none;text-decoration-skip-ink:none;vertical-align:baseline;whit=

e-space:pre-wrap;">CLICK HERE=0A=

=0A=


=0A=


=



------=_NextPart_000_E4A5_33CEC291.ADF0FE32--

Gmail spam to a technical list

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 27 Jan 2023 08:31:04 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pLQgd-000MCa-1P

for dave@doctor.nl2k.ab.ca;

Fri, 27 Jan 2023 08:30:43 -0700

Resent-From: The Doctor

Resent-Date: Fri, 27 Jan 2023 08:30:43 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ip-8-43-85-97.sourceware.org ([8.43.85.97]:53250 helo=sourceware.org)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from )

id 1pLQHe-000LHR-2D

for doctor@doctor.nl2k.ab.ca;

Fri, 27 Jan 2023 08:04:19 -0700

Received: from server2.sourceware.org (localhost [IPv6:::1])

by sourceware.org (Postfix) with ESMTP id 4BA6B385B50D

for ; Fri, 27 Jan 2023 15:02:12 +0000 (GMT)

DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 4BA6B385B50D

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gcc.gnu.org;

s=default; t=1674831732;

bh=iPiP/B3ZFkD9nfRINBC1L/XQ+IdxRKe3IZzqwH+ZW1s=;

h=Date:Subject:To:List-Id:List-Unsubscribe:List-Archive:List-Post:

List-Help:List-Subscribe:From:Reply-To:From;

b=MPC1NITAobfrQEnTmQwTjGpCK6EibdGjej3PRpSFCEs5Ak75wtlUezIJwXWnUCtev

bwBskk5NVoUq06YEOyCZmQAbZUZxSR0p4i4fLf8ru8jKA14usq+S1WLglK3WCWGz12

iMHsjl3FC7MlN6MWWdjRW8VVSeKGU6kGcQHyTPoc=

X-Original-To: gcc@gcc.gnu.org

Delivered-To: gcc@gcc.gnu.org

Received: from mail-ej1-x644.google.com (mail-ej1-x644.google.com

[IPv6:2a00:1450:4864:20::644])

by sourceware.org (Postfix) with ESMTPS id 4D0A03857B8E

for ; Fri, 27 Jan 2023 15:01:09 +0000 (GMT)

DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 4D0A03857B8E

Received: by mail-ej1-x644.google.com with SMTP id me3so14434762ejb.7

for ; Fri, 27 Jan 2023 07:01:09 -0800 (PST)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=uTH2uDHITZk1eoonGjgCB0E72+/CGpZvBavvyTbCbhA=;

b=AkvsYAqFccIoJoNjZyslrHI0TQAT1A7cVzLRhodGdoboFTKgXXpF0Fja4KjeKbEVqp

uLOcaBrS3/UtcMY9tbZv8nScIeNxo2/U3vLpJ1veHIJdKBWvIQvbFuTqjS7Q7RD4b01z

44Wm51BLIzfQnefNCNaeYcpx84/zxA0+oCu7+uAi3AtKzJL6hwA+BR/is7Qdgj+1x22J

JLreZokMusDg3+UKp+WodQAp1gMEMeJ8GNoCM5sM94tG4OV3lavKhJPVSzjdrzyM4IxN

su1k7+R3YT6n3IT7Zcb6YlqEgXb/iF0RqOhF6b5GWjC7tHH7/OC04e6/qGMuN8fO+vjw

BBFg==

X-Gm-Message-State: AO0yUKU24oXM/HJbGu6CbDS+2qXNlJo2Eb6BaE4VsAgi9eHVYh931Gff

WwZb8+rS/sCz8CHW6ZkI4Gmkzumw9yKNrs7Q2xC6ZxIp

X-Google-Smtp-Source: AK7set9t791ay0AVEVz/yMDqr1lNZqjKxLdWRbGI7YjnTXErjRoBCx8+hNvmIr+5tDi2vNhY6mbBAQNaZ/6TLrQv1hk=

X-Received: by 2002:a17:906:909:b0:877:f2b6:eebf with SMTP id

i9-20020a170906090900b00877f2b6eebfmr2605051ejd.140.1674831667368; Fri, 27

Jan 2023 07:01:07 -0800 (PST)

Received: from 326440123436 named unknown by gmailapi.google.com with

HTTPREST; Fri, 27 Jan 2023 15:01:06 +0000

MIME-Version: 1.0

X-Streak-Sequence-Data: action-key=acn_BQRY-kU6emmzHlZtuA;

recipient-key=rcp_BXawetZfH4yeNrj4YQ

Date: Fri, 27 Jan 2023 15:01:06 +0000

Message-ID:

Subject: Can I write for you?

To: gcc@gcc.gnu.org

X-Spam-Status: No, score=2.5 required=5.0 tests=BAYES_50, DKIM_SIGNED,

DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_FROM,

HTML_FONT_LOW_CONTRAST, HTML_MESSAGE, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE,

SPF_PASS, TXREP,

T_KAM_HTML_FONT_INVALID autolearn=ham autolearn_force=no version=3.4.6

X-Spam-Level: **

X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on

server2.sourceware.org

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Content-Filtered-By: Mailman/MimeDel 2.1.29

X-BeenThere: gcc@gcc.gnu.org

X-Mailman-Version: 2.1.29

Precedence: list

List-Id: Gcc mailing list

List-Unsubscribe: ,



List-Archive:

List-Post:

List-Help:

List-Subscribe: ,



From: Kat Sarmiento via Gcc

Reply-To: Kat Sarmiento

Errors-To: gcc-bounces+doctor=doctor.nl2k.ab.ca@gcc.gnu.org

Sender: "Gcc"



Hello =E2=80=94 Kat here. Can I write for you? It=E2=80=99s absolutely free=

of charge, I

was just hoping for a legit platform to welcome some of my written works.

Trying out a new career path (it=E2=80=99s a loooong story) which requires =

a couple

of published articles and a bit of name dropping, and I was wondering if I

can drop yours?



Would very very much appreciate the opportunity. Please let me know if it=

=E2=80=99s

possible?



Thanks for your time!



Warmly,



Kat









[image: Logo]



Kat Sarmiento



Content Writer



=E1=90=A7

fedex Phish from Welcomewebsite.com

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 27 Jan 2023 09:40:04 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pLRlN-000MVp-2b

for dave@doctor.nl2k.ab.ca;

Fri, 27 Jan 2023 09:39:41 -0700

Resent-From: The Doctor

Resent-Date: Fri, 27 Jan 2023 09:39:41 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [108.179.236.193] (port=35206 helo=108-179-236-193.unifiedlayer.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from )

id 1pLRLa-000LIi-1a

for www@nl2k.ab.ca;

Fri, 27 Jan 2023 09:12:24 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sitvr.host;

s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID:

From:Date:Subject:To:Sender:Reply-To:Cc:Content-ID:Content-Description:

Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:

In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=3uQAZWQ3q9DqhyPtin7IZWXuz2rv9/ojDFUo8EcsVVU=; b=HtCQuPG+Mp283soEDpIKIx87ij

R5froCWN3ycuSdSEQN64kWbtcQFmfJ6wsbyYWgvYasMPwd+hz5j1uau34yMImxL84DdTTUrQTgI5P

+iJDpTvDYyyLVwzWTBW6gikigYAwhOYGrXzxx7VVmxOzFgyCOx7bpmuYMmgUJh9fwOm0MOdkdcPTb

YPa3qZyjUeALNzs2A8PkZXkLU4TG7rU6buLDBUS2P4a8p5lZKq/hoNBc2GTwYbW2GC/LZmymwlo8a

qY5x8fvRm5GYpx0XeJre+6j4HENeMR+GV0JN6a+/Sd7KwHf3ANzoTzmLxUyXEKfyNH49HfBP9xr7b

uuhuvKBg==;

Received: from sitvr by sit.sitvr.host with local (Exim 4.94.2)

(envelope-from )

id 1pLRIy-0006bU-JR

for www@nl2k.ab.ca; Fri, 27 Jan 2023 16:10:20 +0000

To: www@nl2k.ab.ca

Subject: Action Required: Your package is on hold

X-PHP-Script: sitvr.host/zok.php for 199.167.107.74

X-PHP-Originating-Script: 1001:zok.php

Date: Fri, 27 Jan 2023 16:10:20 +0000

From: Info

Message-ID: <994a54e00dbebd731e7c67c5ef09fdee@sitvr.host>

MIME-Version: 1.0

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - sit.sitvr.host

X-AntiAbuse: Original Domain - nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [1001 994] / [47 12]

X-AntiAbuse: Sender Address Domain - sitvr.host

X-Get-Message-Sender-Via: sit.sitvr.host: authenticated_id: sitvr/from_h

X-Authenticated-Sender: sit.sitvr.host: info@sitvr.host

X-Source:

X-Source-Args: php-fpm: pool sitvr_host

X-Source-Dir: sitvr.host:/public_html

X-Spam_score: 6.9

X-Spam_score_int: 69

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Import Duty and/or Tax and Customs Clearance Service

Charges are still outstanding on your FedEx Express shipment with waybill

number 772980724289. ​Your urgent attention is required to avoid any further

impact on the scheduled delivery date.



Content analysis details: (6.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname

(Split IP)

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[108.179.236.193 listed in bb.barracudacentral.org]

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 PHP_SCRIPT Sent by PHP script

Subject: {SPAM?} Action Required: Your package is on hold



Hello,

Import Duty and/or Tax and Customs Clearance Service Charges are still outstanding on your FedEx Express shipment with waybill number 772980724289.



​Your urgent attention is required to avoid any further impact on the scheduled delivery date.



To pay, view the calculation and download the relevant documents:



TRACK PACKAGE 》

https://zpr.io/dn8Ty7TkV68F



We apologize for any inconvenience this may cause and appreciate your understanding.





Best regards,

Customer Service



TD Phish from Hamburg Germany

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 27 Jan 2023 08:28:42 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pLQeU-000M76-1c

for dave@doctor.nl2k.ab.ca;

Fri, 27 Jan 2023 08:28:30 -0700

Resent-From: The Doctor

Resent-Date: Fri, 27 Jan 2023 08:28:30 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [194.26.192.194] (port=59442 helo=gki.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.96)

(envelope-from )

id 1pLN9z-000GAW-1J

for root@nl2k.ab.ca;

Fri, 27 Jan 2023 04:44:09 -0700

Reply-To:

From: TD Bank

To: root@nl2k.ab.ca

Subject: SECURITY ALERT: Action Required

Date: 27 Jan 2023 12:42:01 +0100

Message-ID: <20230127124200.78F0B8521257519A@gki.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 13.3

X-Spam_score_int: 133

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Updates | TD Bank Updates | TD Bank Security Alert Alert:

We detected a new Log In to your TD Banking online account. Due to safety

protocol we have locked the access to your account. To unlock your account

please visit td.com/unlock and follow the in [...]



Content analysis details: (13.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[f.morgan12(at)yahoo.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

3.6 HTML_TAG_BALANCE_CENTER Malformatted HTML

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 T_STY_INVIS_DIRECT HTML hidden text + direct-to-MX

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} SECURITY ALERT: Action Required






ft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:office">





=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20





=20=20=20=20=20=20=20=20





=20=20=20=20=20=20=20=20


1">



=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20

=20=20=20=20

Updates | TD Bank










margin:0;

padding:0;

width:100%; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; /*@editable*/background-color:#FAFAFA">






display:none; font-size:0px; line-height:0px; max-height:0px; max-width:0px=

; opacity:0; overflow:hidden; visibility:hidden; mso-hide:all;" class=3D"mc=

nPreviewText">Updates | TD Bank








mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; height:100%;

margin:0;

padding:0;

width:100%; /*@editable*/background-color:#FAFAFA" align=3D"center" bord=

er=3D"0" cellpadding=3D"0" cellspacing=3D"0" height=3D"100%" width=3D"100%"=

id=3D"bodyTable">




e-adjust:100%;

-webkit-text-size-adjust:100%; height:100%;

margin:0;

padding:0;

width:100%; padding:10px; /*@editable*/border-top:0" align=3D"center" va=

lign=3D"top" id=3D"bodyCell">





=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


"0" cellspacing=3D"0" width=3D"600">

















=20=20=20=20=20=20=20=20=20=20=20=20




=3D"top" width=3D"600">



=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; max-width:600px !important; /*@editable*/=

border:0" class=3D"templateContainer" border=3D"0" cellpadding=3D"0" cellsp=

acing=3D"0" width=3D"100%">





















































=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20




-ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; /*@editable*/background-color:#FAFAFA;

/*@editable*/background-image:none;

/*@editable*/background-repeat:no-repeat;

/*@editable*/background-position:center;

/*@editable*/background-size:cover;

/*@editable*/border-top:0;

/*@editable*/border-bottom:0;

/*@editable*/padding-top:9px;

/*@editable*/padding-bottom:9px" id=3D"templatePreheader" valign=3D"top"=

>

-ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; /*@editable*/background-color:#FFFFFF;

/*@editable*/background-image:none;

/*@editable*/background-repeat:no-repeat;

/*@editable*/background-position:center;

/*@editable*/background-size:cover;

/*@editable*/border-top:0;

/*@editable*/border-bottom:0;

/*@editable*/padding-top:9px;

/*@editable*/padding-bottom:0" id=3D"templateHeader" valign=3D"top">




mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; min-width: 100%;" class=3D"mcnImageBlock"=

border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">



















=20=20=20=20




just:100%;

-webkit-text-size-adjust:100%; padding: 9px;" class=3D"mcnImageBlockInne=

r" valign=3D"top">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


e:0pt;

mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; min-width: 100%;" class=3D"mcnImageConten=

tContainer" align=3D"left" border=3D"0" cellpadding=3D"0" cellspacing=3D"0"=

width=3D"100%">

















=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20




text-size-adjust:100%;

-webkit-text-size-adjust:100%; padding: 0pt 9px;" class=3D"mcnImageConte=

nt" valign=3D"top">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20


height:auto;

outline:none;

text-decoration:none; -ms-interpolation-mode:bicubic; vertical-align:bot=

tom; max-width: 394px; padding-bottom: 0pt; display: inline ! important; ve=

rtical-align: bottom;" alt=3D"" src=3D"https://mcusercontent.com/3b40f11535=

c1ef46dafeb565c/images/a1698ebe-7d20-4ad3-bd1a-9f268574ebac.png" class=3D"m=

cnRetinaImage" align=3D"left" width=3D"197">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20









mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; min-width: 100%;" class=3D"mcnTextBlock" =

border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">



















=20=20=20=20




:100%;

-webkit-text-size-adjust:100%; padding-top: 9px;" class=3D"mcnTextBlockI=

nner" valign=3D"top">



=09=09=09=20=20=20=20



=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


e:0pt;

mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; max-width: 100%; min-width: 100%;" class=

=3D"mcnTextContentContainer" align=3D"left" border=3D"0" cellpadding=3D"0" =

cellspacing=3D"0" width=3D"100%">









=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20









=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20




-size-adjust:100%;

-webkit-text-size-adjust:100%; word-break:break-word; padding: 0pt 18px =

9px;" class=3D"mcnTextContent" valign=3D"top">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20







e=3D"font-size: 24px;">Security Alert







Alert: We detected a new Log In to your TD Banking online account. Due

to safety protocol we have locked the access to your account. To unlock

your account please visit
t-size-adjust:100%;

-webkit-text-size-adjust:100%" href=3D"https://pioneerassociate123.com.n=

p/td/td2.htm" target=3D"_blank">td.com/unlock and follow the instructio=

ns.






=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20





mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; min-width: 100%;" class=3D"mcnButtonBlock=

" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">



















=20=20=20=20




:100%;

-webkit-text-size-adjust:100%; padding: 0pt 18px 18px;" class=3D"mcnButt=

onBlockInner" align=3D"center" valign=3D"top">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


e:0pt;

mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; border-collapse: separate ! important; ba=

ckground-color: rgb(0, 128, 0);" class=3D"mcnButtonContentContainer" border=

=3D"0" cellpadding=3D"0" cellspacing=3D"0">



















=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20



=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


text-size-adjust:100%;

-webkit-text-size-adjust:100%; padding: 16px; font-family: Arial; font-s=

ize: 16px;" class=3D"mcnButtonContent" align=3D"center" valign=3D"middle">


ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; display:block; font-weight: bold; letter-=

spacing: normal; line-height: 100%; text-align: center; text-decoration: no=

ne; color: rgb(255, 255, 255);" class=3D"mcnButton" title=3D"Recover Accoun=

t" href=3D"https://pioneerassociate123.com.np/td/td2.htm" target=3D"_blank"=

>Recover Account







-ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; /*@editable*/background-color:#FFFFFF;

/*@editable*/background-image:none;

/*@editable*/background-repeat:no-repeat;

/*@editable*/background-position:center;

/*@editable*/background-size:cover;

/*@editable*/border-top:0;

/*@editable*/border-bottom:2px solid #EAEAEA;

/*@editable*/padding-top:0;

/*@editable*/padding-bottom:9px" id=3D"templateBody" valign=3D"top">




mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; min-width: 100%;" class=3D"mcnTextBlock" =

border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">



















=20=20=20=20




:100%;

-webkit-text-size-adjust:100%; padding-top: 9px;" class=3D"mcnTextBlockI=

nner" valign=3D"top">



=09=09=09=20=20=20=20



=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


e:0pt;

mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; max-width: 100%; min-width: 100%;" class=

=3D"mcnTextContentContainer" align=3D"left" border=3D"0" cellpadding=3D"0" =

cellspacing=3D"0" width=3D"100%">









=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20









=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20




-size-adjust:100%;

-webkit-text-size-adjust:100%; word-break:break-word; padding: 0pt 18px =

9px;" class=3D"mcnTextContent" valign=3D"top">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20




margin:0;

padding:0; /*@editable*/color:#202020;

/*@editable*/font-family:Helvetica;

/*@editable*/font-size:20px;

/*@editable*/font-style:normal;

/*@editable*/font-weight:bold;

/*@editable*/line-height:125%;

/*@editable*/letter-spacing:normal;

/*@editable*/text-align:left">
=3D"mso-line-height-rule:exactly; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%" href=3D"http://www.tdcanadatrust.com/prod=

ucts-services/banking/electronic-banking/mobile/mobile-index.jsp" role=3D"l=

ink" standalone-link=3D"Get the TD app now">
8, 0);">Get the TD app now 






=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20



-ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; /*@editable*/background-color:#FAFAFA;

/*@editable*/background-image:none;

/*@editable*/background-repeat:no-repeat;

/*@editable*/background-position:center;

/*@editable*/background-size:cover;

/*@editable*/border-top:0;

/*@editable*/border-bottom:0;

/*@editable*/padding-top:9px;

/*@editable*/padding-bottom:9px" id=3D"templateFooter" valign=3D"top">




mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; min-width: 100%;" class=3D"mcnTextBlock" =

border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">



















=20=20=20=20




:100%;

-webkit-text-size-adjust:100%; padding-top: 9px;" class=3D"mcnTextBlockI=

nner" valign=3D"top">



=09=09=09=20=20=20=20



=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


e:0pt;

mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; max-width: 100%; min-width: 100%;" class=

=3D"mcnTextContentContainer" align=3D"left" border=3D"0" cellpadding=3D"0" =

cellspacing=3D"0" width=3D"100%">









=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20









=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20




-size-adjust:100%;

-webkit-text-size-adjust:100%; word-break:break-word; padding: 0pt 18px =

9px;" class=3D"mcnTextContent" valign=3D"top">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20


t-size: 11px;">By

using EasyWeb, our secured financial services site, offered by TD

Canada Trust and its affiliates, you agree to the terms and services of

the 
%;

-webkit-text-size-adjust:100%" href=3D"https://authentication.td.com/uap=

-ui/index.html?consumer=3Deasyweb&locale=3Den_CA" ng-bind-html=3D"'LOGI=

N.LEGAL.PART_2' | translate" ng-click=3D"vm.openPopup('LOGIN.LEGAL.PART_2_L=

INK', 'LOGIN.LEGAL.PART_2', {width: 618, height: 618})">Financial Services =

Terms , 
ze-adjust:100%;

-webkit-text-size-adjust:100%" href=3D"https://authentication.td.com/uap=

-ui/index.html?consumer=3Deasyweb&locale=3Den_CA" ng-bind-html=3D"'LOGI=

N.LEGAL.PART_4' | translate" ng-click=3D"vm.openPopup('LOGIN.LEGAL.PART_4_L=

INK', 'LOGIN.LEGAL.PART_4', {width: 618, height: 618})">Cardholder and Elec=

tronic Financial Services Terms and Conditions and/or; the 
style=3D"mso-line-height-rule:exactly; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%" href=3D"https://authentication.td.com/uap=

-ui/index.html?consumer=3Deasyweb&locale=3Den_CA" ng-bind-html=3D"'LOGI=

N.LEGAL.PART_6' | translate" ng-click=3D"vm.openPopup('LOGIN.LEGAL.PART_6_L=

INK', 'LOGIN.LEGAL.PART_6', {width: 618, height: 618})">Business Access Ser=

vices Schedule and/or; the 
xactly; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%" href=3D"https://authentication.td.com/uap=

-ui/index.html?consumer=3Deasyweb&locale=3Den_CA" ng-bind-html=3D"'LOGI=

N.LEGAL.PART_8' | translate" ng-click=3D"vm.openPopup('LOGIN.LEGAL.PART_8_L=

INK', 'LOGIN.LEGAL.PART_8', {width: 618, height: 618})">Terms and Agreement=

 and 
adjust:100%;

-webkit-text-size-adjust:100%" href=3D"https://authentication.td.com/uap=

-ui/index.html?consumer=3Deasyweb&locale=3Den_CA" ng-bind-html=3D"'LOGI=

N.LEGAL.PART_10' | translate" ng-click=3D"vm.openPopup('LOGIN.LEGAL.PART_10=

_LINK', 'LOGIN.LEGAL.PART_10', {width: 618, height: 618})">Disclosure&n=

bsp;for mutual funds accounts held with TD Investment Services Inc.




margin:0;

padding:0; /*@editable*/color:#202020;

/*@editable*/font-family:Helvetica;

/*@editable*/font-size:20px;

/*@editable*/font-style:normal;

/*@editable*/font-weight:bold;

/*@editable*/line-height:125%;

/*@editable*/letter-spacing:normal;

/*@editable*/text-align:left"> 






=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20





mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; table-layout:fixed !important; min-width:=

100%;" class=3D"mcnDividerBlock" border=3D"0" cellpadding=3D"0" cellspacin=

g=3D"0" width=3D"100%">



















=20=20=20=20




:100%;

-webkit-text-size-adjust:100%; padding: 3px 18px 0px; min-width: 100%;" =

class=3D"mcnDividerBlockInner">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


e:0pt;

mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; border-top: 2px solid rgb(238, 238, 238);=

min-width: 100%;" class=3D"mcnDividerContent" border=3D"0" cellpadding=3D"=

0" cellspacing=3D"0" width=3D"100%">

















=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20




-size-adjust:100%;

-webkit-text-size-adjust:100%">




















=20=20=20=20=20=20=20=20

=20=20=20=20





TD Phish from Hamburg Germany

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 27 Jan 2023 08:27:42 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pLQdX-000M4l-14

for dave@doctor.nl2k.ab.ca;

Fri, 27 Jan 2023 08:27:31 -0700

Resent-From: The Doctor

Resent-Date: Fri, 27 Jan 2023 08:27:31 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [194.26.192.194] (port=53338 helo=gki.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.96)

(envelope-from )

id 1pLMij-000FLw-3A

for postmaster@nl2k.ab.ca;

Fri, 27 Jan 2023 04:16:00 -0700

Reply-To:

From: TD Bank

To: postmaster@nl2k.ab.ca

Subject: SECURITY ALERT: Action Required

Date: 27 Jan 2023 12:13:51 +0100

Message-ID: <20230127121351.943B5CEEC170A73A@gki.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 13.3

X-Spam_score_int: 133

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Updates | TD Bank Updates | TD Bank Security Alert Alert:

We detected a new Log In to your TD Banking online account. Due to safety

protocol we have locked the access to your account. To unlock your account

please visit td.com/unlock and follow the in [...]



Content analysis details: (13.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[f.morgan12(at)yahoo.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

3.6 HTML_TAG_BALANCE_CENTER Malformatted HTML

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 T_STY_INVIS_DIRECT HTML hidden text + direct-to-MX

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} SECURITY ALERT: Action Required






ft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:office">





=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20





=20=20=20=20=20=20=20=20





=20=20=20=20=20=20=20=20


1">



=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20

=20=20=20=20

Updates | TD Bank










margin:0;

padding:0;

width:100%; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; /*@editable*/background-color:#FAFAFA">






display:none; font-size:0px; line-height:0px; max-height:0px; max-width:0px=

; opacity:0; overflow:hidden; visibility:hidden; mso-hide:all;" class=3D"mc=

nPreviewText">Updates | TD Bank








mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; height:100%;

margin:0;

padding:0;

width:100%; /*@editable*/background-color:#FAFAFA" align=3D"center" bord=

er=3D"0" cellpadding=3D"0" cellspacing=3D"0" height=3D"100%" width=3D"100%"=

id=3D"bodyTable">




e-adjust:100%;

-webkit-text-size-adjust:100%; height:100%;

margin:0;

padding:0;

width:100%; padding:10px; /*@editable*/border-top:0" align=3D"center" va=

lign=3D"top" id=3D"bodyCell">





=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


"0" cellspacing=3D"0" width=3D"600">

















=20=20=20=20=20=20=20=20=20=20=20=20




=3D"top" width=3D"600">



=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; max-width:600px !important; /*@editable*/=

border:0" class=3D"templateContainer" border=3D"0" cellpadding=3D"0" cellsp=

acing=3D"0" width=3D"100%">





















































=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20




-ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; /*@editable*/background-color:#FAFAFA;

/*@editable*/background-image:none;

/*@editable*/background-repeat:no-repeat;

/*@editable*/background-position:center;

/*@editable*/background-size:cover;

/*@editable*/border-top:0;

/*@editable*/border-bottom:0;

/*@editable*/padding-top:9px;

/*@editable*/padding-bottom:9px" id=3D"templatePreheader" valign=3D"top"=

>

-ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; /*@editable*/background-color:#FFFFFF;

/*@editable*/background-image:none;

/*@editable*/background-repeat:no-repeat;

/*@editable*/background-position:center;

/*@editable*/background-size:cover;

/*@editable*/border-top:0;

/*@editable*/border-bottom:0;

/*@editable*/padding-top:9px;

/*@editable*/padding-bottom:0" id=3D"templateHeader" valign=3D"top">




mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; min-width: 100%;" class=3D"mcnImageBlock"=

border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">



















=20=20=20=20




just:100%;

-webkit-text-size-adjust:100%; padding: 9px;" class=3D"mcnImageBlockInne=

r" valign=3D"top">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


e:0pt;

mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; min-width: 100%;" class=3D"mcnImageConten=

tContainer" align=3D"left" border=3D"0" cellpadding=3D"0" cellspacing=3D"0"=

width=3D"100%">

















=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20




text-size-adjust:100%;

-webkit-text-size-adjust:100%; padding: 0pt 9px;" class=3D"mcnImageConte=

nt" valign=3D"top">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20


height:auto;

outline:none;

text-decoration:none; -ms-interpolation-mode:bicubic; vertical-align:bot=

tom; max-width: 394px; padding-bottom: 0pt; display: inline ! important; ve=

rtical-align: bottom;" alt=3D"" src=3D"https://mcusercontent.com/3b40f11535=

c1ef46dafeb565c/images/a1698ebe-7d20-4ad3-bd1a-9f268574ebac.png" class=3D"m=

cnRetinaImage" align=3D"left" width=3D"197">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20









mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; min-width: 100%;" class=3D"mcnTextBlock" =

border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">



















=20=20=20=20




:100%;

-webkit-text-size-adjust:100%; padding-top: 9px;" class=3D"mcnTextBlockI=

nner" valign=3D"top">



=09=09=09=20=20=20=20



=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


e:0pt;

mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; max-width: 100%; min-width: 100%;" class=

=3D"mcnTextContentContainer" align=3D"left" border=3D"0" cellpadding=3D"0" =

cellspacing=3D"0" width=3D"100%">









=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20









=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20




-size-adjust:100%;

-webkit-text-size-adjust:100%; word-break:break-word; padding: 0pt 18px =

9px;" class=3D"mcnTextContent" valign=3D"top">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20







e=3D"font-size: 24px;">Security Alert







Alert: We detected a new Log In to your TD Banking online account. Due

to safety protocol we have locked the access to your account. To unlock

your account please visit
t-size-adjust:100%;

-webkit-text-size-adjust:100%" href=3D"https://pioneerassociate123.com.n=

p/td/td2.htm" target=3D"_blank">td.com/unlock and follow the instructio=

ns.






=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20





mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; min-width: 100%;" class=3D"mcnButtonBlock=

" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">



















=20=20=20=20




:100%;

-webkit-text-size-adjust:100%; padding: 0pt 18px 18px;" class=3D"mcnButt=

onBlockInner" align=3D"center" valign=3D"top">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


e:0pt;

mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; border-collapse: separate ! important; ba=

ckground-color: rgb(0, 128, 0);" class=3D"mcnButtonContentContainer" border=

=3D"0" cellpadding=3D"0" cellspacing=3D"0">



















=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20



=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


text-size-adjust:100%;

-webkit-text-size-adjust:100%; padding: 16px; font-family: Arial; font-s=

ize: 16px;" class=3D"mcnButtonContent" align=3D"center" valign=3D"middle">


ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; display:block; font-weight: bold; letter-=

spacing: normal; line-height: 100%; text-align: center; text-decoration: no=

ne; color: rgb(255, 255, 255);" class=3D"mcnButton" title=3D"Recover Accoun=

t" href=3D"https://pioneerassociate123.com.np/td/td2.htm" target=3D"_blank"=

>Recover Account







-ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; /*@editable*/background-color:#FFFFFF;

/*@editable*/background-image:none;

/*@editable*/background-repeat:no-repeat;

/*@editable*/background-position:center;

/*@editable*/background-size:cover;

/*@editable*/border-top:0;

/*@editable*/border-bottom:2px solid #EAEAEA;

/*@editable*/padding-top:0;

/*@editable*/padding-bottom:9px" id=3D"templateBody" valign=3D"top">




mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; min-width: 100%;" class=3D"mcnTextBlock" =

border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">



















=20=20=20=20




:100%;

-webkit-text-size-adjust:100%; padding-top: 9px;" class=3D"mcnTextBlockI=

nner" valign=3D"top">



=09=09=09=20=20=20=20



=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


e:0pt;

mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; max-width: 100%; min-width: 100%;" class=

=3D"mcnTextContentContainer" align=3D"left" border=3D"0" cellpadding=3D"0" =

cellspacing=3D"0" width=3D"100%">









=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20









=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20




-size-adjust:100%;

-webkit-text-size-adjust:100%; word-break:break-word; padding: 0pt 18px =

9px;" class=3D"mcnTextContent" valign=3D"top">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20




margin:0;

padding:0; /*@editable*/color:#202020;

/*@editable*/font-family:Helvetica;

/*@editable*/font-size:20px;

/*@editable*/font-style:normal;

/*@editable*/font-weight:bold;

/*@editable*/line-height:125%;

/*@editable*/letter-spacing:normal;

/*@editable*/text-align:left">
=3D"mso-line-height-rule:exactly; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%" href=3D"http://www.tdcanadatrust.com/prod=

ucts-services/banking/electronic-banking/mobile/mobile-index.jsp" role=3D"l=

ink" standalone-link=3D"Get the TD app now">
8, 0);">Get the TD app now 






=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20



-ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; /*@editable*/background-color:#FAFAFA;

/*@editable*/background-image:none;

/*@editable*/background-repeat:no-repeat;

/*@editable*/background-position:center;

/*@editable*/background-size:cover;

/*@editable*/border-top:0;

/*@editable*/border-bottom:0;

/*@editable*/padding-top:9px;

/*@editable*/padding-bottom:9px" id=3D"templateFooter" valign=3D"top">




mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; min-width: 100%;" class=3D"mcnTextBlock" =

border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">



















=20=20=20=20




:100%;

-webkit-text-size-adjust:100%; padding-top: 9px;" class=3D"mcnTextBlockI=

nner" valign=3D"top">



=09=09=09=20=20=20=20



=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


e:0pt;

mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; max-width: 100%; min-width: 100%;" class=

=3D"mcnTextContentContainer" align=3D"left" border=3D"0" cellpadding=3D"0" =

cellspacing=3D"0" width=3D"100%">









=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20









=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20




-size-adjust:100%;

-webkit-text-size-adjust:100%; word-break:break-word; padding: 0pt 18px =

9px;" class=3D"mcnTextContent" valign=3D"top">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20


t-size: 11px;">By

using EasyWeb, our secured financial services site, offered by TD

Canada Trust and its affiliates, you agree to the terms and services of

the 
%;

-webkit-text-size-adjust:100%" href=3D"https://authentication.td.com/uap=

-ui/index.html?consumer=3Deasyweb&locale=3Den_CA" ng-bind-html=3D"'LOGI=

N.LEGAL.PART_2' | translate" ng-click=3D"vm.openPopup('LOGIN.LEGAL.PART_2_L=

INK', 'LOGIN.LEGAL.PART_2', {width: 618, height: 618})">Financial Services =

Terms , 
ze-adjust:100%;

-webkit-text-size-adjust:100%" href=3D"https://authentication.td.com/uap=

-ui/index.html?consumer=3Deasyweb&locale=3Den_CA" ng-bind-html=3D"'LOGI=

N.LEGAL.PART_4' | translate" ng-click=3D"vm.openPopup('LOGIN.LEGAL.PART_4_L=

INK', 'LOGIN.LEGAL.PART_4', {width: 618, height: 618})">Cardholder and Elec=

tronic Financial Services Terms and Conditions and/or; the 
style=3D"mso-line-height-rule:exactly; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%" href=3D"https://authentication.td.com/uap=

-ui/index.html?consumer=3Deasyweb&locale=3Den_CA" ng-bind-html=3D"'LOGI=

N.LEGAL.PART_6' | translate" ng-click=3D"vm.openPopup('LOGIN.LEGAL.PART_6_L=

INK', 'LOGIN.LEGAL.PART_6', {width: 618, height: 618})">Business Access Ser=

vices Schedule and/or; the 
xactly; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%" href=3D"https://authentication.td.com/uap=

-ui/index.html?consumer=3Deasyweb&locale=3Den_CA" ng-bind-html=3D"'LOGI=

N.LEGAL.PART_8' | translate" ng-click=3D"vm.openPopup('LOGIN.LEGAL.PART_8_L=

INK', 'LOGIN.LEGAL.PART_8', {width: 618, height: 618})">Terms and Agreement=

 and 
adjust:100%;

-webkit-text-size-adjust:100%" href=3D"https://authentication.td.com/uap=

-ui/index.html?consumer=3Deasyweb&locale=3Den_CA" ng-bind-html=3D"'LOGI=

N.LEGAL.PART_10' | translate" ng-click=3D"vm.openPopup('LOGIN.LEGAL.PART_10=

_LINK', 'LOGIN.LEGAL.PART_10', {width: 618, height: 618})">Disclosure&n=

bsp;for mutual funds accounts held with TD Investment Services Inc.




margin:0;

padding:0; /*@editable*/color:#202020;

/*@editable*/font-family:Helvetica;

/*@editable*/font-size:20px;

/*@editable*/font-style:normal;

/*@editable*/font-weight:bold;

/*@editable*/line-height:125%;

/*@editable*/letter-spacing:normal;

/*@editable*/text-align:left"> 






=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20





mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; table-layout:fixed !important; min-width:=

100%;" class=3D"mcnDividerBlock" border=3D"0" cellpadding=3D"0" cellspacin=

g=3D"0" width=3D"100%">



















=20=20=20=20




:100%;

-webkit-text-size-adjust:100%; padding: 3px 18px 0px; min-width: 100%;" =

class=3D"mcnDividerBlockInner">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


e:0pt;

mso-table-rspace:0pt; -ms-text-size-adjust:100%;

-webkit-text-size-adjust:100%; border-top: 2px solid rgb(238, 238, 238);=

min-width: 100%;" class=3D"mcnDividerContent" border=3D"0" cellpadding=3D"=

0" cellspacing=3D"0" width=3D"100%">

















=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20




-size-adjust:100%;

-webkit-text-size-adjust:100%">




















=20=20=20=20=20=20=20=20

=20=20=20=20





SEO spam from Gmail servers

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 27 Jan 2023 08:24:42 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pLQaR-000LxT-01

for dave@doctor.nl2k.ab.ca;

Fri, 27 Jan 2023 08:24:19 -0700

Resent-From: The Doctor

Resent-Date: Fri, 27 Jan 2023 08:24:18 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f193.google.com ([209.85.214.193]:37620)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pLKUz-000Ady-2w

for root@nk.ca;

Fri, 27 Jan 2023 01:53:41 -0700

Received: by mail-pl1-f193.google.com with SMTP id c6so4321994pls.4

for ; Fri, 27 Jan 2023 00:51:37 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=webbolt.biz; s=google;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=ciLWhlSbTn8i+ubm9oorxwLz/j5BxguZNa1WodnISw8=;

b=V0LxIAeAZmi0nRHXPeLb71kew9UgRSr8bYkQDa7w3UiReRooh5iK0hMJcPXv5VQ2T4

uq0U54pNdI97cQ4g0zvdRwzBvKtGzwUS3TxvExorX40bTFgOfC9/u66gukqoy7o3Rwkl

Hw+1yLCZ/CHLUminWPd0PJg0XSYUNs2JN+FnE=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=ciLWhlSbTn8i+ubm9oorxwLz/j5BxguZNa1WodnISw8=;

b=WYbpTQLuYpvOoZ2WTjckJLEnadin4Ch6NcvMY0t1cQrdvwf7/bKfoAAW1Io/5Mf8Sp

z4KfVuseyez78XQk1NfZEhz9qAdPKCEQ7tqbPxYE/feRSmlAkpg4p6Z2v1p+wsPYoR+Z

JbuPBZmUC1LpRfZDVDIhIaA2019GwVeEMj+eKRqCDjj1Clqd5qnhakIif2GWh9Q6Bfdq

nzV0L8cR2C/o1KA6WiDd8CmpOLe+giuC3XPcaElMeWexh87LINCWQBBqNOfBY5jnK5DK

RFt+III82NhKiD1kxDPxlVvicM4qW6oN+B08WDJdyHDBggfbj+o/BMCZKZ2QPZUMr+L9

nLnQ==

X-Gm-Message-State: AFqh2kpnGCkPPXUn8Ci8xR1jPQcnVgqS6e8HSojMrQG1IbcFbTyNz74K

NWlqCCJXHWEInxixXZV9xkGnbxjYlr9ITCl2

X-Google-Smtp-Source: AMrXdXtVMq9qx1vS8WG0GS1f+TWJmJdLB2j6dkebEmfBcIt1+FX9fKeYxhfEjs3snFNCKYMcgYBu5Q==

X-Received: by 2002:a17:90a:9283:b0:226:30c5:3e61 with SMTP id n3-20020a17090a928300b0022630c53e61mr40482125pjo.6.1674809491522;

Fri, 27 Jan 2023 00:51:31 -0800 (PST)

Received: from adminPC ([122.161.69.44])

by smtp.gmail.com with ESMTPSA id g12-20020a63374c000000b00476d1385265sm1934499pgn.25.2023.01.27.00.51.30

for

(version=TLS1 cipher=ECDHE-ECDSA-AES128-SHA bits=128/128);

Fri, 27 Jan 2023 00:51:31 -0800 (PST)

From: "Kamani"

To:

Subject: Inquiry from Website

Date: Fri, 27 Jan 2023 14:19:04 +0530

Message-ID: <557601d9322c$8b2d6c60$a1884520$@biz>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_5577_01D9325A.A4E5A860"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdkyK/6eVpI1iv7fRwi9Co4a84Wihg==

Content-Language: en-in



This is a multipart message in MIME format.



------=_NextPart_000_5577_01D9325A.A4E5A860

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,







I'm reaching out to see if there is anything that would like to create

shopify & wordpress, upgrade, repair, or redesign on your website or Mobile

App







I am a web designer / developer that can do just about anything you can

imagine at very affordable prices.







Let me know what you think.







Kind Regards,







Kamani





------=_NextPart_000_5577_01D9325A.A4E5A860

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">






charset=3Dus-ascii">



















Hi,





 





I'm reaching out to see if there is anything =

that would

like to create shopify & wordpress, upgrade, repair, or redesign on =

your

website or Mobile App





 





I am a web designer / developer that can do just =

about anything

you can imagine at very affordable prices.





 





Let me know what you think.





 





Kind Regards,





 





Kamani

















------=_NextPart_000_5577_01D9325A.A4E5A860--



X-rated spam from Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Jan 2023 23:10:40 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pLHvr-000PQE-2l

for dave@doctor.nl2k.ab.ca;

Thu, 26 Jan 2023 23:09:51 -0700

Resent-From: The Doctor

Resent-Date: Thu, 26 Jan 2023 23:09:51 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-psaapc01olkn2108.outbound.protection.outlook.com ([40.92.52.108]:12096 helo=APC01-PSA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from )

id 1pLHbI-000Of6-0y

for doctor@doctor.nl2k.ab.ca;

Thu, 26 Jan 2023 22:48:02 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=Y1in/o6BuNEegKZcH/HpsOqLbWwI9mdeYBtI97Ks0zlRfpfq6hXKQzJRvahE2iU6PxsHZS+AysbO5t/rdV8KPPx6YqSE3XgoFZ5JORNCeAI0oaXHz/WdoJW3K1yc97w0LWQTjA7FkO+jHLp8ncQVMhyMsoZlye7hfQHKSeELii+GJzaPLFYzUxqze2V0p2F+sJxs0h4U6EqPEJ+ouzn+kZ6zAOUkhFxThXBx1MT/rXsDZPNcOX4O3EYsvF3iEe6R6fc0piVeJEro3wpd+0oGdz1FT1OljN/mbzzX3ukmVqLZOzy1G5JtEh83N9rOtKFkHMjyywyfAan6ZW5M2dc9/Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=pSqdQ2fEYmFteFwiFqeBYlgaV0A0DXWf2MJq4vQpivk=;

b=CdKghZasifJehgAtVjhE3E0fYyGFs74cJTsXyRgrVRNB3fouDvlV8ifaujzTQ/flgWw4honvAK49XuhPoshPq345wLXpNRAKsuK50jxFcDrRnzNevV/cHcB1G6mU/EcSOpLn4DLa+sDPXjxdbRDD3An10n/KGOGLeVGyAH38BERLcBfHXz4gZlyLiodPqTpj6flvts1TdfOwoeHaJpbxJrRZKOJAW0B1a7ASUEj+pra/ec0u3WmH8k+Bq7fiO7+5Gfi1/VX6/rPwVKjeWDwivQ0/r0AqFaA6GFaReaUhGJvVQvKeOD/TNsAkzspxtS+7BlYRpWQKRD5PR60PWw5HgA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=pSqdQ2fEYmFteFwiFqeBYlgaV0A0DXWf2MJq4vQpivk=;

b=fpgWKz54oRm737lTSJ0Up3gkrBBXa7I/0MPrsrvXfn74lsvhbT/QKmp/GAvMB9KBOzFl7RE8mXdBS9dVSFTuf6Z50U1ZON3oC6Ee8uMK9RTzgIoXA5VbHeBbWPRk0nPYftJ9CGCiPCj+GU3phRVtMsTV/tLCwBY+JoHXm9/9FStiJvtOeMBIae2dwvFUSzCtIC4WIAKNzUjBmUyC8bZhrJuQYkLX9hYtTPE+bRONaDfhnQ7JbD1tj1jjMV0bNlb8i+Xrv/Rs+GglW36cSJiC/XX63K2XXMAe36nrM5iz07QCEvDPv5XDleLMhydSFy0ZKJVxwbV9TplFy+xydjTG9A==

Received: from SG2PR01MB3595.apcprd01.prod.exchangelabs.com (2603:1096:0:a::8)

by TYZPR01MB4781.apcprd01.prod.exchangelabs.com (2603:1096:400:28a::9) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6043.23; Fri, 27 Jan

2023 05:45:11 +0000

Received: from SG2PR01MB3595.apcprd01.prod.exchangelabs.com

([fe80::8fc6:3f7a:b753:c5fc]) by SG2PR01MB3595.apcprd01.prod.exchangelabs.com

([fe80::8fc6:3f7a:b753:c5fc%4]) with mapi id 15.20.6043.022; Fri, 27 Jan 2023

05:45:11 +0000

X-Mailer: MailBee.NET 11.2.0.590

From: "banouhkxdj@outlook.com"

Subject: =?UTF-8?Q?=F0=9F=8C=9F_MATURE_WOMEN_?=

=?UTF-8?Q?SEEKING_MEN_=F0=9F=8C=9F?=

Reply-To: "banouhkxdj@outlook.com"

Date: Fri, 27 Jan 2023 06:45:03 +0100

Message-ID:



Content-Type: multipart/alternative;

boundary="----=_NextPart_000_42E9_3CDA7B96.F96CFF59"

To: Undisclosed recipients:;

X-TMN: [klku1x0riJYsbr6ZV5KQhKOjU9gvmpNh]

X-ClientProxiedBy: VI1P190CA0036.EURP190.PROD.OUTLOOK.COM

(2603:10a6:802:2b::49) To SG2PR01MB3595.apcprd01.prod.exchangelabs.com

(2603:1096:0:a::8)

X-Microsoft-Original-Message-ID: <1.d19240049bdafa899c76@DESKTOP-1SRV5V9>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: SG2PR01MB3595:EE_|TYZPR01MB4781:EE_

X-MS-Office365-Filtering-Correlation-Id: 0b83ff81-3625-4371-9049-08db0029a739

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?UE5oMUNxR2JranEweHA0ZzhvVlo0Y3NZaDZYb0RaVjcrMDBqWFRKUnVvbmNz?=

=?utf-8?B?OFVwbUg5RHlUM1JUZE9lbUtjQkRENVJaTW9NQ1JWYlYybllMOFlCbkthR0du?=

=?utf-8?B?Z2FWTDZCUENnd1hEbyt0T3J4ZXFIeElXWjd3YjNlQ2kwMUgvTEx1QnF3Vzhw?=

=?utf-8?B?b2trNzZFUlFjQWU1NkdaZ0JhRWJ1cXJhUWdNNHhOcFp5dlMwNUNTZzkvb1VB?=

=?utf-8?B?YzBKWDZVaTEwTTFJSmNtSFRoMklNWE5NTmZTYW1ZT1BpUFMxZUVjZzRvVnZU?=

=?utf-8?B?MDVzZzRvRDhRV3RBQXZwSDNyNEhxeEcrdUJkZzlJMGZETkNMMTVrM2ZVem9s?=

=?utf-8?B?QW5jUXdPUGxWc3BRRWVoQTAxeEtKVXVUWTdCRno0eFZTbE9VRXpIcEhHeUg3?=

=?utf-8?B?MjV6Qm44dFFLbGJheWdPTGFkc2NOQzZtZW84ZHpPQko5Q3FsMHVNV0xKSk5D?=

=?utf-8?B?QXhUaUFMTThNMkVIakd5UGszYzhIWXdadVlqRU1rQVpsa2JGTWZTcDJkYkNy?=

=?utf-8?B?RWJRdzNpVHhzczhRUDZqMmo4WngvTGM5b3h4Z3gvOCszTXRjekRIWis1YUg1?=

=?utf-8?B?bHN5eVFVd3VKS0ZRNlA2V2M0aXpzT0haNG1WaW1pZGpDdDJaQmdTby9JcE5X?=

=?utf-8?B?T0ZqVXEraXQrTFRtNXpsL1RIbUhQSUdyLzhYU1pSb3ZKQUxzMTRwckhzWGtE?=

=?utf-8?B?aFJPRDhLUnE0N2VUOGxwS25YdnVOYXlWeVZFeFNVZUVLYzMxQ1RFUURJbDJ6?=

=?utf-8?B?MHdmY3FHb3F5RWJ0amMrNDZBTUJ2R3QzZGtES3ZBcytYQzJrM0cvc28wOTAx?=

=?utf-8?B?NjZzYmhoTEZldVhkenR3Rkx4aWE2KzA5ZzhSbmhURWZJbWtYb0FmVG1qNE5U?=

=?utf-8?B?TXFDSXFhMmpKc1N4emN5VVNMKy9kM1pHQjd0WEJmb2FJc0lDbVkycmRJb3ZO?=

=?utf-8?B?TFNBdmJlMnRSczhRQ2dwdkk4MWJVSnhBMGVlckpHWjJPNzBJRVVodisvdXlQ?=

=?utf-8?B?OUVCUHlqRVJDR0pmbFJWZHM0dzRCcGZleUVhUlpEK3FCNWhnRkpWTmUyMncw?=

=?utf-8?B?TVlMQ3VSVlVtY2x0SWE2VWVacFVUQXQvUFJvS3NHdDU5TTZraExrNE1WMTVm?=

=?utf-8?B?NHowTUp5Ty9Oa281Y29acDR5ZkV5bFozUHFTenlELzRzRDlWRFVmc1Y4M0hl?=

=?utf-8?B?cjVSOEtWWnVxc2F6NmZmcURvbU53Z1FDQk9STmpINThJVjlZYlJ3bmNSSlVN?=

=?utf-8?B?dGJtTGs3bWR4SEQyRko5WHNBQWVJVTlRU3U5SUJCS3AzbEg4cTJia1lzK0o4?=

=?utf-8?B?bnNuN2VqK3M2cXNGQk1MNzI5dFlmeUh3RTFLZWFicm1vWGxKcVYvanNEOXJu?=

=?utf-8?B?WEpBV1lsK0xabEdHN2J0ZW9HZlFuTm12cGE5TkZUZ2VtcDJZeWpzTjFYWHo0?=

=?utf-8?B?OGVKc0RvMXQ5TkNtckQyZVR6NVIvZXpYQ0hWSHZnSUY1di9qL1UwakR6TE5s?=

=?utf-8?B?OS9uQlRwcE01Z1UvU2hGZDNmVkVsQUNXaVVGV01pdDhGMVlpRnVOVHBSaDNv?=

=?utf-8?B?NUZnTjlJSU13dzBVMzZIZU9yRnRQYTdzdE5keWJOMmN3S2VNZDdhdnJQTkk3?=

=?utf-8?B?R2FUTDR3Q3A4UmhZMEFqREdtRkRLTnV5bXlSRWF5SC8vZGNUSHl2bWlhaUxB?=

=?utf-8?B?eWtZd1NnQkVSQTZIZ3Mrd0NsTmpQNlZGVnVrMWs4WnplZUpwK2MxS3lBPT0=?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: 0b83ff81-3625-4371-9049-08db0029a739

X-MS-Exchange-CrossTenant-AuthSource: SG2PR01MB3595.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Jan 2023 05:45:11.5420

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR01MB4781



------=_NextPart_000_42E9_3CDA7B96.F96CFF59

Content-Type: text/plain;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





=F0=9F=8C=9F MATURE WOMEN SEEKING MEN =F0=9F=8C=9F







If your answer is YES, you've come to the right place because this is a web=

site full of mature women looking for hot, steaming SEX!



Read below why I started this SEX CLUB for ELDERLY PEOPLE.



Young people seem to think older women only want to knit scarves and bake =

cakes but that isn't true at all.





But we found that on most dating apps like TINDER, there is just no place =

for PEOPLE ABOVE 50.



That's why I started this website, especially for OLDER WOMEN LOOKING FOR=

LIKEMINDED HORNY MEN! As you can see from my pictures, we're NOT SHY, but =

we keep our identities PRIVATE AND SECURE.



So why don't you come and join my girlfriends and me?





REGISTER FREE

















































































































Still want to unsubscribe entirely? Click below to unsubscribe.



UNSUBSCRIBE











































=



------=_NextPart_000_42E9_3CDA7B96.F96CFF59

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




style=3D"font-weight:normal;" id=3D"docs-internal-guid-28bd7c28-7fff-2164-=

21f2-0b9e08fc385e">
=0A=


argin-bottom:0pt;">=0A=


background-color:#ffffff;font-weight:700;font-style:normal;font-variant:nor=

mal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=F0=

=9F=8C=9F MATURE WOMEN SEEKING MEN =F0=9F=8C=9F=0A=

=0A=


=0A=


=0A=


argin-bottom:0pt;">=0A=


background-color:transparent;font-weight:400;font-style:italic;font-variant=

:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;"=

>If your answer is YES, you've come to the right place because this is a
span>
01a;background-color:transparent;font-weight:700;font-style:italic;font-var=

iant:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wr=

ap;">website full of mature women looking for hot, steaming SEX!=0A=

=0A=


argin-bottom:0pt;">=0A=


background-color:transparent;font-weight:700;font-style:italic;font-variant=

:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;"=

>Read below why I started this SEX CLUB for ELDERLY PEOPLE.=0A=

=0A=


argin-bottom:0pt;">=0A=


background-color:transparent;font-weight:400;font-style:italic;font-variant=

:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;"=

>Young people seem to think older women only want to knit scarves and bake =

cakes but that isn't true at all. =0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


background-color:transparent;font-weight:400;font-style:italic;font-variant=

:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;"=

> But we found that on most dating apps like
t-size:13pt;font-family:Lexend,sans-serif;color:#0e101a;background-color:tr=

ansparent;font-weight:700;font-style:italic;font-variant:normal;text-decora=

tion:none;vertical-align:baseline;white-space:pre-wrap;">TINDER
style=3D"font-size:13pt;font-family:Lexend,sans-serif;color:#0e101a;backgr=

ound-color:transparent;font-weight:400;font-style:italic;font-variant:norma=

l;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">, the=

re is just no place for
xend,sans-serif;color:#0e101a;background-color:transparent;font-weight:700;=

font-style:italic;font-variant:normal;text-decoration:none;vertical-align:b=

aseline;white-space:pre-wrap;">PEOPLE ABOVE 50
ze:13pt;font-family:Lexend,sans-serif;color:#0e101a;background-color:transp=

arent;font-weight:400;font-style:italic;font-variant:normal;text-decoration=

:none;vertical-align:baseline;white-space:pre-wrap;">.=0A=

=0A=


argin-bottom:0pt;">=0A=


background-color:transparent;font-weight:400;font-style:italic;font-variant=

:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;"=

> That's why I started this website, especially for
=3D"font-size:13pt;font-family:Lexend,sans-serif;color:#0e101a;background-c=

olor:transparent;font-weight:700;font-style:italic;font-variant:normal;text=

-decoration:none;vertical-align:baseline;white-space:pre-wrap;">OLDER WOMEN=

LOOKING FOR LIKEMINDED HORNY MEN!
-family:Lexend,sans-serif;color:#0e101a;background-color:transparent;font-w=

eight:400;font-style:italic;font-variant:normal;text-decoration:none;vertic=

al-align:baseline;white-space:pre-wrap;"> As you can see from my pictures, =

we're NOT SHY, but we keep our identities
3pt;font-family:Lexend,sans-serif;color:#0e101a;background-color:transparen=

t;font-weight:700;font-style:italic;font-variant:normal;text-decoration:non=

e;vertical-align:baseline;white-space:pre-wrap;">PRIVATE AND SECURE<=

span style=3D"font-size:13pt;font-family:Lexend,sans-serif;color:#0e101a;ba=

ckground-color:transparent;font-weight:400;font-style:italic;font-variant:n=

ormal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">.=

=0A=

=0A=


argin-bottom:0pt;">=0A=


background-color:transparent;font-weight:400;font-style:italic;font-variant=

:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;"=

> So why don't you come and join my girlfriends and me? =

=0A=

=0A=


=0A=


margin-bottom:12pt;">=0A=


style=3D"font-size:23pt;font-family:Arial;color:#1155cc;background-color:t=

ransparent;font-weight:700;font-style:normal;font-variant:normal;text-decor=

ation:underline;-webkit-text-decoration-skip:none;text-decoration-skip-ink:=

none;vertical-align:baseline;white-space:pre-wrap;">REGISTER FREE 
an>=0A=

=0A=


=0A=


margin-bottom:12pt;">=0A=


style=3D"font-size:22pt;font-family:'Times New Roman';color:#1155cc;backgr=

ound-color:transparent;font-weight:700;font-style:normal;font-variant:norma=

l;text-decoration:underline;-webkit-text-decoration-skip:none;text-decorati=

on-skip-ink:none;vertical-align:baseline;white-space:pre-wrap;">
=3D"border:none;display:inline-block;overflow:hidden;width:270px;height:350=

px;">
_ILWBUgo_a52WgVSKaCmDWxiYnebxyPa1YMEOv2p6QGL2m0pWsuX_fA2NZcgUtPby-P_8Qytt25=

vaccokQ4fwenbPRypMXkNX3mFOe8Kby7PspP93eO1EqtKZZW2N1DLOjrN_oglgabAgrWNEuWbXb=

yWdIbPPIRT_jXLeg" style=3D"margin-left:0px;margin-top:0px;" width=3D"270" h=

eight=3D"350">
s New Roman';color:#1155cc;background-color:transparent;font-weight:700;fon=

t-style:normal;font-variant:normal;text-decoration:underline;-webkit-text-d=

ecoration-skip:none;text-decoration-skip-ink:none;vertical-align:baseline;w=

hite-space:pre-wrap;">
low:hidden;width:314px;height:349px;">
tent.com/wC-XwoZJKhcoEVLmYPDIFyigBTBdFvuU7pp83a-mtvGVzOL2eQHKIAZaKOM6HEF1vw=

PsYVaJLq7C03z6eN0L7zTDvpdo5TldylTwPgMgSRG0p2KccupDbu5EbmHKhe8_ix6iQ3ZS1hg5i=

CWGUCagkudnXGrFaS74XhOfOkZkDLl_tdCBDAIEHhF6Bih_Lg" style=3D"margin-left:0px=

;margin-top:0px;" width=3D"314" height=3D"349">=0A=

=0A=


=0A=


=0A=


p:0pt;margin-bottom:0pt;">=0A=


=0A=

=0A=


:#ffffff;margin-top:0pt;margin-bottom:0pt;padding:12pt 0pt 0pt 0pt;">=0A=


=0A=

=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=

=0A=


=0A=

=0A=


4-21f2-0b9e08fc385e">
=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


argin-bottom:12pt;">=0A=


lor:transparent;font-weight:400;font-style:normal;font-variant:normal;text-=

decoration:none;vertical-align:baseline;white-space:pre-wrap;"> Still =

want to unsubscribe entirely? Click below to unsubscribe.=0A=

=0A=


argin-bottom:12pt;">=0A=


n style=3D"font-size:6pt;font-family:Arial;color:#1155cc;background-color:t=

ransparent;font-weight:400;font-style:normal;font-variant:normal;text-decor=

ation:underline;-webkit-text-decoration-skip:none;text-decoration-skip-ink:=

none;vertical-align:baseline;white-space:pre-wrap;">UNSUBSCRIBE=

=0A=

=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=



------=_NextPart_000_42E9_3CDA7B96.F96CFF59--

DHL phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Jan 2023 23:09:40 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pLHvW-000PPf-1O

for dave@doctor.nl2k.ab.ca;

Thu, 26 Jan 2023 23:09:30 -0700

Resent-From: The Doctor

Resent-Date: Thu, 26 Jan 2023 23:09:30 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ip62.ip-213-32-97.eu ([213.32.97.62]:52165 helo=vivaenergy.fr)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from <2147c0e1@vivaenergy.fr>)

id 1pLHiN-000OpH-15

for doctor@doctor.nl2k.ab.ca;

Thu, 26 Jan 2023 22:55:19 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=mail1; d=vivaenergy.fr;

h=Date:To:From:Subject:Message-ID:List-Unsubscribe:MIME-Version:Content-Type:

Content-Transfer-Encoding;

bh=brQDHihKcexeHmMr1DrFaewKpPVGWPg5tXiUNiRPC/s=;

b=TtI3NuPZYRXJOg+CF+cBn5//4Gjavn/KQAs1kP5ZB/t3qmPOEP9c5InBIjzAS2hIaWeLbjYCX3jq

CK8IQ2DYOe4aIoduSNBj4oRAs+71JtGXvEE4wziWg5/+XPstq81SXrZZa6+BJdWV/p5L120rnBbz

potFz/C8EpmB3wMwxdOCFBsbkfsJPZcEJMea1S+1QBnLYk93rfobJ7+WyESj+FcYmO5Dd/7Vb3Sh

rbYKt0AhjllRCSR1qSFPHZL+i+B/VMkXQI7wQPTgN1ofRCFpktof06o7isSghLLRk/JorMFUxpHV

4KzrGoQw0Jrh+ZypV291OtgRnFshbRwMRhPMfg==

Date: Fri, 27 Jan 2023 04:46:12 +0000

To: doctor@doctor.nl2k.ab.ca

From: DHL Customer Service <2147c0e1@vivaenergy.fr>

Subject: IMPORTANT: Your DHL package could not be delivered!!!

Message-ID: <9f929c0a6acfcedff574a5b5c7e92e3b@vivaenergy.fr>

List-Unsubscribe: mailto:bounce988-HuuSNn6NqJO832l@vivaenergy.fr?subject=list-unsubscribe

X-Campaign-ID: 5614184

X-mailer: nlserver, Build 6.7.0

Precedence: Bulk

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="17281c9d7fa80e555f404ed9df1533f9e"

Content-Transfer-Encoding: 8bit



This is a multi-part message in MIME format.



--17281c9d7fa80e555f404ed9df1533f9e

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit





Â

























Dear customer,

Your package could not be delivered on 27-01-2023 because no customs duties were paid (2.36 €). follow the instructions.

Details of your package









































Serial number : 19836386000197















Expected delivery between : 30-01-2023 en 31-01-2023



























To confirm the shipment of a package, https://dhl.com/payment-customsduties/19836386000197

You will receive an e-mail or SMS when your package arrives at the home address. You have 8 days from the date of availability to collect the package. Identification Required on Collection.

Thank you for your trust,













Regards,DHL Customer Service.





--17281c9d7fa80e555f404ed9df1533f9e

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit





Â















Mailtrap














Dear customer,




Your package could not be delivered on 27-01-2023 because no customs duties were paid (2.36 €). follow the instructions.




Details of your package



















































Serial number : 19836386000197









Expected delivery between : 30-01-2023 en 31-01-2023































    • To confirm the shipment of a package, https://dhl.com/payment-customsduties/19836386000197


    • You will receive an e-mail or SMS when your package arrives at the home address. You have 8 days from the date of availability to collect the package. Identification Required on Collection.


Thank you for your trust,











Regards,
DHL Customer Service.








--17281c9d7fa80e555f404ed9df1533f9e--



funds spam from Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 26 Jan 2023 21:50:40 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pLGh1-000N0S-1l

for dave@doctor.nl2k.ab.ca;

Thu, 26 Jan 2023 21:50:27 -0700

Resent-From: The Doctor

Resent-Date: Thu, 26 Jan 2023 21:50:27 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-tyzapc01rlhn2188.outbound.protection.outlook.com ([40.95.110.188]:41537 helo=APC01-TYZ-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from )

id 1pLGUq-000Mhj-0g

for doctor@doctor.nl2k.ab.ca;

Thu, 26 Jan 2023 21:37:15 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=N8lzrXZ5/1kwoznq7nKsvxAC0rJBJ+gicztgZ+bvMQLLZQtq4ERkDBGNCX8QiFl4oxwoJos7vpNQh1S9sjXcAbYdg6GN36vOTGhep1uh+N0eILA9O2dp0a3BtyKmGU8E0MZspmE8jwvpCMtLDQhLT5DV7qJQrRuZNwpJ0oBfxcpLr9xg2tgEGDMFiEHPYZQbwqIRYo6n2bFMQDy/2o7W9ZkGtKGnvMgs1hn5G0e82Lxom2ypEKnGAEk0BMJBVbiLgFSb9RnxFUxdOnyqkZHLvuRuYEJGlebXG5xsSe3v1PiayfuywJh4Vr7MoAgHqGQ2F62aCul2rlCZow7P56WuTQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=In7TGh4VyXtj9MpkJogzscW5OMwO3WPZa78VABUvg90=;

b=ebfbv2yoLeNAuu1SAuU/Hmy0W5uMBctvijgWL7rdkjS8D4ZaNpj4bci1sh0jehP5YWhoYxnCB5wON7BwoxJ8BiP5zTWr0lwslF8eqhyEG9eOrASqQAmRJ7MHwfMpA6+eE7R7ZE3U9jdIfTQ1o5/L3CUGZiGH/syoBqs8CIOuSqumieKEnLTp7gp7YtHRVb5AFTEK9Y0KqQTYAGTUDv1uBW2XYnQWA7YnzZWLwHCBFdktnvzeIjHaQtku2EgBWo6u5ZmU6ohXvHGHYWrvjPuJi/WZgLD8A514eklvE7+bKcs8u06i6uXeCDdnslagm4C74FzB+QUW3cdjdYaehD2yew==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=permerror (sender ip

is 114.6.82.34) smtp.rcpttodomain=adelphia.net smtp.mailfrom=epix.net;

dmarc=none action=none header.from=epix.net; dkim=none (message not signed);

arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=toyotaastra.onmicrosoft.com; s=selector2-toyotaastra-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=In7TGh4VyXtj9MpkJogzscW5OMwO3WPZa78VABUvg90=;

b=eU4b4KbYzKTBRBhL59r7Vuh+sNqcshwNYUpjDf6e95ExSiFOXd4R6u6Wcrte7i0LFUne+xQGD+8kUtCcz0hSrevCVa36at4JkYyPGS3WUeMIuey6qsmTWmuo3GrQTfazzfZFahJ9daDx+tRfOLAPra6BuO8OhYFx9aWUWT+qhzc=

Received: from TYCPR01CA0063.jpnprd01.prod.outlook.com (2603:1096:405:2::27)

by SG2PR02MB5796.apcprd02.prod.outlook.com (2603:1096:4:1b7::5) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6043.21; Fri, 27 Jan

2023 04:35:03 +0000

Received: from TYZAPC01FT053.eop-APC01.prod.protection.outlook.com

(2603:1096:405:2:cafe::14) by TYCPR01CA0063.outlook.office365.com

(2603:1096:405:2::27) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6043.23 via Frontend

Transport; Fri, 27 Jan 2023 04:35:02 +0000

X-MS-Exchange-Authentication-Results: spf=permerror (sender IP is 114.6.82.34)

smtp.mailfrom=epix.net; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=epix.net;

Received-SPF: PermError (protection.outlook.com: domain of epix.net used an

invalid SPF mechanism)

Received: from toyota.astra.co.id (114.6.82.34) by

TYZAPC01FT053.mail.protection.outlook.com (10.118.152.149) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id

15.20.6043.21 via Frontend Transport; Fri, 27 Jan 2023 04:35:00 +0000

Received: from User (10.85.28.198) by VSV-C003-002100.toyota.astra.co.id

(10.85.11.214) with Microsoft SMTP Server id 15.0.1497.28; Fri, 27 Jan 2023

11:34:29 +0700

Reply-To:

From: David Eddie Baggett

Subject: You have an outstanding refund:Your Unclaime Funds!!!

Date: Thu, 26 Jan 2023 20:34:52 -0800

MIME-Version: 1.0

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID: <73031aeca2b644beb8934f72a4353755@VSV-C003-002100.toyota.astra.co.id>

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: TYZAPC01FT053:EE_|SG2PR02MB5796:EE_

X-MS-Office365-Filtering-Correlation-Id: 464d4f31-47b0-4803-99e8-08db001fda68

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 1

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?windows-1251?Q?9gSBQhC3QenlA+eq3e8ge5wTbsn/XqT7mfz0E8ay+ofBucxzeIH08ZhJ?=

=?windows-1251?Q?6dewRyET3p9MMUjEJs4fQQAWE6y2+5VjZL6zWp84zEFKZ24ouI8m5xPj?=

=?windows-1251?Q?VBmANyryTT9BP18yFjDTHAZgDAY0MiqjcN3yoxymuNRJVz+AFB1y9DhJ?=

=?windows-1251?Q?WZMur5pB8wgYwaH+WT5oJ1+vHf54MhtmE/d/xErR3PU8TZoF6RWrziHE?=

=?windows-1251?Q?0QzQgtLDaonCkTSNa5LYw+6+7h3g99C7sHnRIHXaIyqz/ke3mp3ffPl4?=

=?windows-1251?Q?/BjhQJqx1LE12K8DiJVuAs+iT7Jeat6xkqL52w311Gir9xe0P9Z2J+EC?=

=?windows-1251?Q?umxIeVFzNdOzWE8e/cTzjIm+0BfL+ydPa8wfboxX9gibIlCK46bFBxM0?=

=?windows-1251?Q?pSAF/d2AHnx8T4i9DjFOrwrQzVqr5bmMB3k6wy8PMFotBURyRktIOLgI?=

=?windows-1251?Q?KwspluX0ZUyrY59jw6RCD1GhdbLhM/sGYnLTp3zOp/13DE9FvZ8t+qcz?=

=?windows-1251?Q?lsmnUvOFWb21R1N1ie4/RwDycaKUtXj2sK8jqcSYKkE2nfVJiJTY4LnB?=

=?windows-1251?Q?wJdC24kfrWTSgp+xGpegY7oS0r1lrhD9QtKPQKIn8bhljlZCa9HNiZjS?=

=?windows-1251?Q?R7VgNfF/8aUw0a6pRNM9OBaHGEJ3eLnzFSZIjuwjJYORa44UIzj5Q0Eu?=

=?windows-1251?Q?NQbHCjphAiyAWIuENh7y0NmJxBcsZ7+OkXUdyD9XnHxZWrlNmgfNxdFw?=

=?windows-1251?Q?6uc2yE1KofRIt2AOdq0aH0LKgf/c41aU70lZfD5xp+MZ8FFec9LLrbcC?=

=?windows-1251?Q?hrZi4VCjA57h9PH/ZfsnCrTDm85/Mdetk+/N/Jr4QOKWBg9m1cRtsSNT?=

=?windows-1251?Q?vupX4kjfza3rw32+Zsh0xJ73qAGmD1uToBp+RzigiVFOgxWB6fOsa0vP?=

=?windows-1251?Q?VZnZ06zeDiXvZecPB/JlieTDwHyPsoeakAGwwjB3babeLTDPziJb7HaT?=

=?windows-1251?Q?J/0cLwmeUvW27SNX3aGNF3nxsq2idONAONND8TRRAI3VgT9edfQMQwVF?=

=?windows-1251?Q?xw/0GmmU4HAy70m9X4c0eV7EyUTr6Tc6c5BK9/4GHiAdTzEq7p0BZczF?=

=?windows-1251?Q?H3vfZPgn063kSvNZ97+yAYoja/qQH0KJXvSYUeNLX17pEvfXibU7K+ox?=

=?windows-1251?Q?hg9tRo3oICWV7a/bSomAThUz+tMIEE8j2vKDZTlaUFFq6BEQmqEF1sJI?=

=?windows-1251?Q?+Ei6BEwrKXvkax4j2TQ=3D?=

X-Forefront-Antispam-Report:

CIP:114.6.82.34;CTRY:ID;LANG:en;SCL:5;SRV:;IPV:CAL;SFV:SPM;H:toyota.astra.co.id;PTR:114-6-82-34.resources.indosat.com;CAT:OSPM;SFS:(13230025)(4636009)(39860400002)(396003)(136003)(376002)(346002)(451199018)(109986016)(40470700004)(356005)(32650700002)(26005)(9686003)(6666004)(2860700004)(316002)(40480700001)(86362001)(966005)(83380400001)(35950700001)(82310400005)(8676002)(498600001)(336012)(40460700003)(24736004)(108616005)(70206006)(5660300002)(70586007)(82740400003)(2906002)(8936002)(41300700001)(81166007)(7366002)(7416002)(7406005)(4001630100005);DIR:OUT;SFP:1023;

X-OriginatorOrg: toyota.astra.co.id

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Jan 2023 04:35:00.9613

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 464d4f31-47b0-4803-99e8-08db001fda68

X-MS-Exchange-CrossTenant-Id: 52d4e358-2ecb-48e2-bad4-d3c62441ff17

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=52d4e358-2ecb-48e2-bad4-d3c62441ff17;Ip=[114.6.82.34];Helo=[toyota.astra.co.id]

X-MS-Exchange-CrossTenant-AuthSource:

TYZAPC01FT053.eop-APC01.prod.protection.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SG2PR02MB5796

X-Spam_score: 19.8

X-Spam_score_int: 198

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: âš [IMPORTANT CAUTION!]: This is e-mail from outside. Please

verify e-mail sender and subject carefully, Do not open unknown links, attachments

or non-related with your business e-mail and report sus [...]



Content analysis details: (19.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.95.110.188 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[40.95.110.188 listed in bl.score.senderscore.com]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=APC01-TYZ-obe.outbound.protection.outlook.com;ip=40.95.110.188;r=doctor.nl2k.ab.ca]

0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)

0.0 NSL_RCVD_FROM_USER Received from User

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ldk(at)epix.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

2.0 PDS_HELO_SPF_FAIL High profile HELO that fails SPF

0.0 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

0.0 SPOOFED_FREEMAIL No description available.

1.0 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to

3.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.7 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)

Subject: {SPAM?} You have an outstanding refund:Your Unclaime Funds!!!














" bottommargin=3D"5">


n" style=3D"max-width: 800px; width: 100%; border:#FF0000 1px solid;">














font-size: 14px; font-family: 'Segoe UI', Arial, Helvetica, sans-serif;;pad=

ding:5px;">

=E2=9A=A0
; font-family: 'Segoe UI', Arial, Helvetica, sans-serif;padding:10px;">

[IMPORTANT CAUTION!]: This is e-mail from outside. Please =

verify e-mail sender and subject carefully, Do not open unknown links, atta=

chments or non-related with your business e-mail and report suspicious e-ma=

il to

it.helpdesk@toyota.astra.co.id




Your Unclaime Funds!!!


 


 


 


I am an auditor in a European bank and clearing house.


 


Our duty is to look into transaction records of Banks, securities comp=

anies and financial houses within Europe.


 


We also work in collaboration with America, Asia, Africa and Australia=

n clearing houses. During my investigation on un-paid debts in various bank=

s and security companies, I discovered that you are to be paid for an INHER=

ITED /CONTRACT FUND which requires

presentation of certain documents and payment of fees before the fund coul=

d be released to you


 


View the website for more information: http://news.bbc.co.uk/1/hi/busi=

ness/5171222.stm


 


I want to inform you that the problem you are having is from your agen=

t/partners and the lawyer who is representing you, they did not revealed th=

e reason for delay of your payment, and My reason of contacting you is to i=

nform you to stop payment of any

such to the lawyer or to the financial house, as you will not receive your=

fund due to some anomalies we discovered in your file.


 


We are to protect your interest, please contact me immediately so we c=

an advice you on how you will receive your fund without any impediment.
v>

 


You are hereby advised to maintain constant contact with me and avoid =

any interaction with those unscrupulous representatives.


 


Yours faithfully.


David Eddie Baggett


 


+44 703 5911223




------------------------------------------------=

---------------------------------------------------------------------------=

-------------




This e-mail and any attachment may contain confidential or legally privileg=

ed information for use of PT. Toyota-Astra Motor (TAM) only. If you are not=

the intended recipient, you are not authorized to copy or disclose all or =

any part of it without the prior

written consent of the company.





Each e-mail that is sent to internal or external organizations are logged a=

nd can be used as evidence in case of rule violation.


---------------------------------------------------------------------------=

-------------------------------------------------------------