Ukrainian dating spam from Microsoft Outlook

Posted by Dave Yadallee on Saturday, April 20. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 20 Apr 2024 08:58:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ryBv2-000000003U9-1PPb

for dave@doctor.nl2k.ab.ca;

Sat, 20 Apr 2024 08:42:20 -0600

Resent-From: The Doctor

Resent-Date: Sat, 20 Apr 2024 08:42:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dbaeur03olkn2058.outbound.protection.outlook.com ([40.92.58.58]:11940 helo=EUR03-DBA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ryAFD-00000000I5e-1brk

for doctor@nk.ca;

Sat, 20 Apr 2024 06:55:09 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=i3scNIljt7US69oybkePSVx36CNgB1eyGFKph6GdHX8pXqU+mPD1Go6gWzespJHd1l3UE6Tw3JlUTMP42pSrE9RjE6fUcPfZk91olfwuOLE5AQbxLYaFh5V7ELYXQWozLkkctU1eFUtmTYB6pBQLnwOgNqjS5g74A1u3W8oDtFrGfz2WI/6ocz+NL/kZbDy4TQ4JMMe3BJPHZ1yiykmaRlxcmAm5h5t5mBSvfFri91JZlXxwXFgUTppDaiMo24rwqzG6HNui24zynY0DafN9vomn+aNhV1i7h0ia7gH90OpqrBRVqAYuOZ/arNSS/Ui6/FVeqL1BQNJ2K+C21bAMEw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=ROHKyA7bKeY9iE0QP4CaCQrlsXNdCAewYpjRKyxy6OE=;

b=ZXmB2vj125qCuxYKYCAaTjv+cG9jaIgrVXszPoXbbWk/5T3QuZdk6g+fEyrfUn9Z1QiMTj3gK7TpMlU7UeKNPj/opU0YlaC3wMDpW2ae+bGN2u4Q4XWfrLldFi/+Ljq4AySKZc/jQuqhDdJ+QNE/29kskPMw7PBOJ8A1skjcpw+2jvxsaOQov8rH6Vi4WAuQIrX6CuG1BXhrPj1m0sqAcFPPQqNc2h3PusRZ6f+TlzX9F5pBKUm4yd1u+Hh0ORA38W0qnl4bT9pBFJ8fuay/IxMq1LmKTNehh0Dd7zHVrpb7GssNnsMJ0m2SvZoDf4kBF3Y8EaVywbSderNJlq6onQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=ROHKyA7bKeY9iE0QP4CaCQrlsXNdCAewYpjRKyxy6OE=;

b=JvMkLgwsHzeTDW2ubUn7qAnX2LWIGqg6KK/7U9pUhH3Igy+vU9e7UIMFiPplzcj+xmP3Pm/riheQnszSZboFXYMD8RFqSSedloPtDFwfe7h1LDwogdgTbWECkSFNPWgBWUk2qfXmM1OdczfQa5FlwLjkic/D9KtrXnyyEvf3IM5ej7q3yji6AyRZNoPqqiN4IhifbjdOJTXxzhEk27VhOJLAw/NDrnpZp+miSiTX7fL2U4hg5muHI/X3KG5fplbGH1LJ5hqjAM3GssHgNgavZxw6McPS/Ju8Ej5dgGcAnqaiZCYzjYK7IgajRsvsXjNWNQuJZX4JYBQQeau9C7nxIQ==

Received: from PA4PR03MB8160.eurprd03.prod.outlook.com (2603:10a6:102:2a3::19)

by PA4PR03MB7517.eurprd03.prod.outlook.com (2603:10a6:102:bc::17) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7472.44; Sat, 20 Apr

2024 12:52:52 +0000

Received: from PA4PR03MB8160.eurprd03.prod.outlook.com

([fe80::a558:14e3:b9f9:d241]) by PA4PR03MB8160.eurprd03.prod.outlook.com

([fe80::a558:14e3:b9f9:d241%6]) with mapi id 15.20.7472.044; Sat, 20 Apr 2024

12:52:52 +0000

From: "gee.alexis.69@outlook.com"

Subject: Date Ukrainian woman near you in Canada!

Reply-To: "gee.alexis.69@outlook.com"

X-Mailer: Microsoft Outlook

Date: Sat, 20 Apr 2024 14:52:49 +0200

Message-ID:

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_6F44_AFD56FA0.B15D39D6"

To: Undisclosed recipients:;

X-TMN: [NSqVGWY3TCHu8fASrfhsNspMq8DrLpu/]

X-ClientProxiedBy: VI1PR06CA0226.eurprd06.prod.outlook.com

(2603:10a6:802:2c::47) To PA4PR03MB8160.eurprd03.prod.outlook.com

(2603:10a6:102:2a3::19)

X-Microsoft-Original-Message-ID: <1.a0a4a54e3e11ed57193a@DESKTOP-7K7S413>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: PA4PR03MB8160:EE_|PA4PR03MB7517:EE_

X-MS-Office365-Filtering-Correlation-Id: fb130171-ba12-4bb0-3b86-08dc6138c95c

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

pT+NMpo1FL7/qnq5P1x0Y8OGYT2PNkzf7SnFqsTuJ76LM8zyxW3uPtzXnYFSmuSLWiDRmopraJPIHag0SlDw3pR/ki9Qv+gd6+U54rQeTBsQMmEK2QVlOyZPDq+SVUx/pEghmDMMnWvtDxpiefMtMhTcYdM2Ek3WPmm5dYABQ70NJA6WORXdncz/3055HjMbUMr+4tGMlRgRd29Ky7wHw5GSzaZI4b0urlVvOW3pYt/Gf1GKETaKmAXcdYOR4IQxddLQro5S9f8Qk+tFYlEtGBPzH50sn2ZwZEFKbhrG2mB+BcDPLFBlZJfmLGseVY5EQl/aib31cPJ+iv5T4ExN13SIiq+k+AlMgAsgGMEqWKqdVr9+BR6YfqtLDrkhhdtQnBWnn3VFBtEWenfVTZN/lRjiqc5SuE8bBqMe+A9lgOjbI7Aq8N3Aw4zltSxHzK3W2mvVhGmY1AfPcKb2NDz1sOx6wDO4kbiQQYosWiXkq+ZplPC8p9O8ODxJhwR5BxCDwccWKwzIRGj5sBsg6WjqiBLw/K3onNjvw6uKlSepH533qlGGpzpu0PynoF7DO7c9G+t1i3w5eTkLkFXJYX3ReMyPuC4/bLjawTKtMp1Db4CSvrwB/uhoVU1gwh836EHP+TL5B3acn4wqWI2MtTlabYVMQ7PamJavlbfctzghNx/yP4BBBComt42sPez/PUivgv7qvEWwgiqakyjkqRYhkVtRjxhwYYUh4rWQVDOvhONZDy4JiwpBg/Enf/NIXmIEQxFK7N/wNfUXlfUBhfDQQ0fffmm7K+z2At2o+n8NfN7CrXQUApv3mgvTyFCxpmf6

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?RndEZ0RqSnE5Y25hVWlJRjZaTytNd0hpVWZUbUNhNVZvK3dLNWc5a3crbFZj?=

=?utf-8?B?Q085anlsZkJtcVl1TFVOM2FQNWJzbU56L21qYVlaQlhoVmRzVFVoZTVYQWwy?=

=?utf-8?B?VUUvSHUwQmtBTGx5bWErV1B5dDdQRGFYME10UGVqUVRIVjFCcmR1OHVCY1A0?=

=?utf-8?B?d0hFV01tYXVuWk1nREpMWVRrci9YTWhObUhoQjRGZmlKVTFzVWdRc1pUZWN6?=

=?utf-8?B?ejB3d1k3ZUo1MTRVSk1jNk1PRlhnU3Nkek1IZ3hSby9SSzZtL0V2U1lub05o?=

=?utf-8?B?NG5EZVd5blF3SHh4ckFIVnZacDIxcHVob1FpcURIRHp1Tms2SEVVdDd6YWVR?=

=?utf-8?B?NVJPRG1uQWd1eS90TlhoSkZ1VDVkUlJqUktwdU92SUpmU3A2WEdXK0NjZXRB?=

=?utf-8?B?UHE3OEI2N0grcng3eXlVM1hLOUU2R1JrMUFodEMyTlA0M3VVQlBHUTgzY240?=

=?utf-8?B?Z1lvdmFCcS9MWHNCU1dET3BuOEVDNEZlSzFwZXZCSWVkeTRjMXlUb3NBaU41?=

=?utf-8?B?d0hldFgvYVlVWEZSck9nN1JVNEFaQytWWWJYMjFpRXdLajIvaTVnSzU3WHh3?=

=?utf-8?B?UkhhTEU2bndUamxMZ0Y3a1o3SFBiQzFaSmlYVE9JM0FvNjYwa1FVUnlYakpa?=

=?utf-8?B?UVVMbGlremlUcTJDSWpUbng1a1crR2FZaGViem1peFlGaVh2dlpETk96UjNw?=

=?utf-8?B?ZVFXMk5sZUJ0M0p0MVhwS0xrY1hJanUrOW5zdnZyMXNpdWZHVmVrRGNURzgz?=

=?utf-8?B?bklWMGdRUFBCL1hxTlZtLzdoMVBEV1RDWmxaMXdtbjI1REI4b3d4c3Zvb3hE?=

=?utf-8?B?UHBjS09JZVV1SnFTbnJYNnVBVkxDR1pHL2JMaVlMNG1NMmp3a1VuZC8ydjZH?=

=?utf-8?B?UkpaaWhROVVQTjdIR1Bkdzc4QzIrR3M0ZFEzYlpSdzBGVWpQTzZRUCtUV2Jx?=

=?utf-8?B?eHB6M3pudktMbnRiNFg1SnNjRTlKdm1VSHJKSFBuZjYwU1p0UDVFSUxVdlZI?=

=?utf-8?B?WWNialZzY2U0U09EOEI0UXhFamJBd0pZaGJSSnBpUzdiWC9BRWxuNENXU0t3?=

=?utf-8?B?enc1Umhqa2ROcHN0b1ZrZUJQMGxKeWlKRHFxRG15djJWRXMvNUZ1UVlMd2ZG?=

=?utf-8?B?d1NadGJEYTRMaEt6MXU0eHJpMGxpdU5Qd0hnUThDbVEwNG1PeUJ4UHZST2U2?=

=?utf-8?B?NWgzMVV4Zm1UTmFhemduSzFYUnB3VHQ0N2tjcjRDZmlBeHJBdlVucllwN1ds?=

=?utf-8?B?Q014Z3JOQkNZY0dqUWdmL3F6SHR1aFN1TVBtYThOQ2FoVVQrcUJOZmR2VENk?=

=?utf-8?B?WitrSjhRQ2xSWmsrZDVmY2JxeWxGSFpSRjJnTmtwRUxEdkNHYy9LRFZrbGY2?=

=?utf-8?B?Ky94U0R4eUNzOWhzRkwySFFDaEVHQU5zcHdheWpXSFBmSFdmRnBGSFNoNHFL?=

=?utf-8?B?cDhaY1pnN2xVbUwyYm9WQ3d4RExkcW5SQjRaZWJFUDBjNFpZZ3pBZFNxNXRi?=

=?utf-8?B?M1BMcjVHV3R3QWNMZVRWdFh5K3UrSCtsdmxlZXc4ZE9UZ2szVkxOc3F1Q2R3?=

=?utf-8?B?ai9rem9JUWliT0Nvb0drVkE1UmZWeXRHRWFaSnRsQTlyUVlpL3YvT0RsVnpY?=

=?utf-8?B?Y1VFTWp4TmNUZzliUm9WNm9WUkFTNW9oM3ZDWmZUc2hncmpVUTNPc0ZobGs3?=

=?utf-8?Q?+PTDGXGywlKKT3DSei+x?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: fb130171-ba12-4bb0-3b86-08dc6138c95c

X-MS-Exchange-CrossTenant-AuthSource: PA4PR03MB8160.eurprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Apr 2024 12:52:52.1094

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PA4PR03MB7517

X-Spam_score: 8.1

X-Spam_score_int: 81

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Do you live in Canada and would like to meet a Ukrainian woman

near you? A new site has just been opened where you can meet and meet Ukrainian

women who have moved to all these countries because of th [...]

Content analysis details: (8.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2603:10a6:102:2a3:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:10a6:102:2a3:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:10a6:102:2a3:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:10a6:102:2a3:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[40.92.58.58 listed in dnsbl.ahbl.org]

[40.92.58.58 listed in dnsbl.ahbl.org]

[40.92.58.58 listed in dnsbl.ahbl.org]

[40.92.58.58 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2603:10a6:102:2a3:0:0:0:19 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2603:10a6:102:2a3:0:0:0:19 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2603:10a6:102:2a3:0:0:0:19 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2603:10a6:102:2a3:0:0:0:19 listed in]

[dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10a6:102:2a3:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:2a3:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:2a3:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:2a3:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:2a3:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:2a3:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:2a3:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:2a3:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[40.92.58.58 listed in will-spam-for-food.eu.org]

[40.92.58.58 listed in will-spam-for-food.eu.org]

[40.92.58.58 listed in will-spam-for-food.eu.org]

[40.92.58.58 listed in will-spam-for-food.eu.org]

[40.92.58.58 listed in will-spam-for-food.eu.org]

[40.92.58.58 listed in will-spam-for-food.eu.org]

[40.92.58.58 listed in will-spam-for-food.eu.org]

[40.92.58.58 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.58.58 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.58.58 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[gee.alexis.69(at)outlook.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[gee.alexis.69(at)outlook.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[gee.alexis.69(at)outlook.com]

0.3 OFFER BODY: Offers you Something

0.6 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image area

0.0 HTML_MESSAGE BODY: HTML included in message

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

Subject: {SPAM?} Date Ukrainian woman near you in Canada!

------=_NextPart_000_6F44_AFD56FA0.B15D39D6

Content-Type: text/plain;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Do you live in Canada and would like to meet a Ukrainian woman near you? A =

new site has just been opened where you can meet and meet Ukrainian women w=

ho have moved to all these countries because of the situation there!

Our site has over 250,000 users, most of whom are women, we are only looki=

ng for male members!

UkraineBrides4you

UkraineBrides4you

=E2=9C=94=EF=B8=8F Registration is free. =E2=9C=94=EF=B8=8F

=E2=9C=94=EF=B8=8FAll members are verified and genuine. =E2=9C=94=EF=B8=8F

=E2=9C=94=EF=B8=8FMore than 100,000 Ukrainian women on the site =E2=9C=94=

=EF=B8=8F

The site offers many features, chat, camera, calls, stickers and many more =

options that you can try today!

Sign up for free today with this exclusive limited offer

All users are verified and authentic. Register for free today

stop receiving messages

here

=

------=_NextPart_000_6F44_AFD56FA0.B15D39D6

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

style=3D"font-weight:normal;" id=3D"docs-internal-guid-33b533b4-7fff-0031-=

8f1f-36d85958f364">=0A=

argin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Do you live in Canada and would like to meet a Ukrainian woman near you? A =

new site has just been opened where you can meet and meet Ukrainian women w=

ho have moved to all these countries because of the situation there!=

=0A=

=0A=

=0A=

=0A=

rgin-top:0pt;margin-bottom:0pt;">=0A=

le=3D"font-size:18pt;font-family:Arial,sans-serif;color:#1155cc;background-=

color:transparent;font-weight:700;font-style:normal;font-variant:normal;tex=

t-decoration:underline;-webkit-text-decoration-skip:none;text-decoration-sk=

ip-ink:none;vertical-align:baseline;white-space:pre-wrap;">UkraineBrides4yo=

u=0A=

=0A=

pt;margin-bottom:0pt;">=0A=

ackground-color:#c9daf8;font-weight:700;font-style:normal;font-variant:norm=

al;text-decoration:underline;-webkit-text-decoration-skip:none;text-decorat=

ion-skip-ink:none;vertical-align:baseline;white-space:pre-wrap;">
e=3D"border:none;display:inline-block;overflow:hidden;width:624px;height:26=

4px;">
2wdVqFpiMoqAZ3t_w1lRzIuVqKaITGqhMx5Q2qhSQZM0HtvUrTm7PfEjLONYwZ1rQJ0PyvgAhHb=

fZSJRS0CNOiz6GOg-IxuR5sCneJ7pPUX-T-VH5QdBJ0H8VG1GzCwxg7M" style=3D"margin-l=

eft:0px;margin-top:0px;" width=3D"624" height=3D"264">=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

argin-bottom:0pt;">=0A=

ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

The site offers many features, chat, camera, calls, stickers and many more =

options that you can try today!=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

rgin-top:0pt;margin-bottom:0pt;">=0A=

le=3D"font-size:10pt;font-family:Arial,sans-serif;color:#1155cc;background-=

color:#ffffff;font-weight:700;font-style:normal;font-variant:normal;text-de=

coration:underline;-webkit-text-decoration-skip:none;text-decoration-skip-i=

nk:none;vertical-align:baseline;white-space:pre-wrap;"> here
>=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=0A=

=

------=_NextPart_000_6F44_AFD56FA0.B15D39D6--

Apple Device Phish

Posted by Dave Yadallee on Saturday, April 20. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 20 Apr 2024 06:43:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ryA3G-00000000Glh-1m52

for dave@doctor.nl2k.ab.ca;

Sat, 20 Apr 2024 06:42:42 -0600

Resent-From: The Doctor

Resent-Date: Sat, 20 Apr 2024 06:42:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [109.71.254.134] (port=59905 helo=emeraldhost.de)

by doctor.nl2k.ab.ca with esmtp (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ry8lK-000000006hq-1bJ2

for root@nl2k.ca;

Sat, 20 Apr 2024 05:20:11 -0600

From: Apple Pay

To: root@nl2k.ca

Subject: Apple Pay was suspended on your Device

Date: 20 Apr 2024 13:18:06 +0200

Message-ID: <20240420131805.4A2FFC9F97FD1AC3@apple-pay.network>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 12.4

X-Spam_score_int: 124

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Apple Pay was suspended on your Device. Apple Pay was suspended

on your Device at 10:07 AM on April 19, 2024

Content analysis details: (12.4 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[109.71.254.134 listed in will-spam-for-food.eu.org]

[109.71.254.134 listed in will-spam-for-food.eu.org]

[109.71.254.134 listed in will-spam-for-food.eu.org]

[109.71.254.134 listed in will-spam-for-food.eu.org]

[109.71.254.134 listed in will-spam-for-food.eu.org]

[109.71.254.134 listed in will-spam-for-food.eu.org]

[109.71.254.134 listed in will-spam-for-food.eu.org]

[109.71.254.134 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[109.71.254.134 listed in wl.mailspike.net]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[109.71.254.134 listed in dnsbl.ahbl.org]

[109.71.254.134 listed in dnsbl.ahbl.org]

[109.71.254.134 listed in dnsbl.ahbl.org]

[109.71.254.134 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[109.71.254.134 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[109.71.254.134 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[109.71.254.134 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[109.71.254.134 listed in dnsbl.ahbl.org]

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

3.3 WIKI_IMG URI: Image from wikipedia

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 HTML_FONT_TINY_NORDNS Font too small to read, no rDNS

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 HREF_EMPTY_NORDNS Empty href + no rDNS

Subject: {SPAM?} Apple Pay was suspended on your Device

' xmlns:o=3D"urn:schemas-microsoft-com:office:office" xmlns=3D"http://www.w=

3.org/1999/xhtml">=20

=20

>=20

=20

=20

=

=20

=20=20=20=20=20=20

=20

"helvetica neue", helvetica, sans-serif; -ms-text-size-adjust: 100%; -webki=

t-text-size-adjust: 100%;'>

0);">=20

p; margin: 0px; padding: 0px; width: 100%; height: 100%; border-collapse: c=

ollapse; border-spacing: 0px; background-repeat: repeat; background-color: =

rgb(250, 250, 250); mso-table-lspace: 0pt; mso-table-rspace: 0pt;" cellspac=

ing=3D"0" cellpadding=3D"0">

ion: top; width: 100%; border-collapse: collapse; table-layout: fixed !impo=

rtant; border-spacing: 0px; background-repeat: repeat; background-color: tr=

ansparent; mso-table-lspace: 0pt; mso-table-rspace: 0pt;" cellspacing=3D"0"=

cellpadding=3D"0">

dy>

: 600px; border-collapse: collapse; border-spacing: 0px; background-color: =

transparent; mso-table-lspace: 0pt; mso-table-rspace: 0pt;" bgcolor=3D"#fff=

fff" cellspacing=3D"0" cellpadding=3D"0">

;">

border-spacing: 0px; mso-table-lspace: 0pt; mso-table-rspace: 0pt;" cellsp=

acing=3D"0" cellpadding=3D"0">

" style=3D"margin: 0px; padding: 0px; width: 560px;">

=3D"border-collapse: collapse; border-spacing: 0px; mso-table-lspace: 0pt; =

mso-table-rspace: 0pt;" cellspacing=3D"0" cellpadding=3D"0">

=

ing: 0px 0px 20px; font-size: 0px;"> 3D"Logo"
=3D"border: 0px currentColor; border-image: none; font-size: 12px; text-dec=

oration: none; display: block; -ms-interpolation-mode: bicubic;" alt=3D"Log=

o" src=3D"https://upload.wikimedia.org/wikipedia/commons/thumb/b/b0/Apple_P=

ay_logo.svg/1280px-Apple_Pay_logo.svg.png" height=3D"45">

rder-collapse: collapse; table-layout: fixed !important; border-spacing: 0p=

x; mso-table-lspace: 0pt; mso-table-rspace: 0pt;" cellspacing=3D"0" cellpad=

ding=3D"0">

tr>

h: 600px; border-collapse: collapse; border-spacing: 0px; background-color:=

rgb(255, 255, 255); mso-table-lspace: 0pt; mso-table-rspace: 0pt;" bgcolor=

=3D"#ffffff" cellspacing=3D"0" cellpadding=3D"0">

10px;">
acing: 0px; mso-table-lspace: 0pt; mso-table-rspace: 0pt;" cellspacing=3D"0=

" cellpadding=3D"0">

ble>

0px; padding: 0px; width: 560px;">

=3D"border-collapse: collapse; border-spacing: 0px; mso-table-lspace: 0pt; =

mso-table-rspace: 0pt;" cellspacing=3D"0" cellpadding=3D"0">

=3D"margin: 0px; padding: 0px 0px 10px;">

, 105); line-height: 30px; font-family: arial, "helvetica neue", helvetica,=

sans-serif; font-size: 30px; font-style: normal; font-weight: bold; mso-li=

ne-height-rule: exactly;'>Apple=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

Pay was suspended on=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

your=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20

Device.

ing: 5px 0px;">

1); line-height: 21px; font-family: arial, "helvetica neue", helvetica, san=

s-serif; font-size: 14px; -ms-text-size-adjust: none; -webkit-text-size-adj=

ust: none; mso-line-height-rule: exactly;'>
Apple=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

Pay was suspended on=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

your Device at =

10:07=20

AM
on=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

April 19,=20=

=20=20=20=20=20=20=20=20

2024

ing: 5px 0px;">

1); line-height: 21px; font-family: arial, "helvetica neue", helvetica, san=

s-serif; font-size: 14px; -ms-text-size-adjust: none; -webkit-text-size-adj=

ust: none; mso-line-height-rule: exactly;'>
Your=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

Apple ID cannot be=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

used=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20

to make paym=

ents=20

with=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

Appl=

e=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

Pay
u=

ntil=20

you re-active y=

our=20

Apple=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

ID.

ing: 5px 0px;">

1); line-height: 21px; font-family: arial, "helvetica neue", helvetica, san=

s-serif; font-size: 14px; -ms-text-size-adjust: none; -webkit-text-size-adj=

ust: none; mso-line-height-rule: exactly;'>

href=3D"https://pagead2.googlesyndication.com/pcs/click?xai=3DAKAOjstqODA3D=

CQ0k8HQXHR6ciJkvK710X76nKoJHiIRNl-HFrcPtL4tWgqVsIgccf9l4jyOmCpWD4F2-RfHmkYr=

MCASQBNNpJKF-raCi0QY6sl7LXWez8Dj8Xw-basrFw6CSDLqoanRUgNq4YiXf6AgQNISmE3-r73=

XVf9CJw0StPZh3tqT5LM0Gs8MV6RK126Y46UxqqtR2N_8VOYbIwVS1u5pI6_07jTCkWofvd9wFt=

n04jDDubOlgzEMhEzdfiIm39-T3j4G_uvE7_9IXRc_D70dmV6bofQAhONWobKJgjS6PBbUkwKwu=

Q-GpUN0GuQ_OIVCqs58I164rRH9oAENFtJo4vKxFfSE_hasQEaNz99klRkBNhOhm67GBQ5UkfpJ=

DVPytLmPISbQqPjZjGPP1ygcguGHJL3ROHbReQ&sig=3DCg0ArKJ

SzHWTcu9tyQwr&fbs_aeid=3D%5Bgw_fbsaeid%5D&adurl=3Dhttps://factory.g=

lamouride.org/longitudal">Re-activate=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

your Apple=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

ID=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

>=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20

ing: 0px; font-size: 0px;">

: 640px; border-collapse: collapse; border-spacing: 0px; background-color: =

transparent; mso-table-lspace: 0pt; mso-table-rspace: 0pt;" cellspacing=3D"=

0" cellpadding=3D"0">

border-spacing: 0px; mso-table-lspace: 0pt; mso-table-rspace: 0pt;" cellsp=

acing=3D"0" cellpadding=3D"0">

=

; width: 600px;">

=3D"border-collapse: collapse; border-spacing: 0px; mso-table-lspace: 0pt; =

mso-table-rspace: 0pt;" cellspacing=3D"0" cellpadding=3D"0">

tr>

=3D"presentation" style=3D"border-collapse: collapse; border-spacing: 0px; =

mso-table-lspace: 0pt; mso-table-rspace: 0pt;" cellspacing=3D"0" cellpaddin=

g=3D"0">

ing: 0px 0px 35px;">

1); line-height: 18px; font-family: arial, "helvetica neue", helvetica, san=

s-serif; font-size: 12px; -ms-text-size-adjust: none; -webkit-text-size-adj=

ust: none; mso-line-height-rule: exactly;'>
Copyright .=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

2024 Apple Inc. All=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20

Rights=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=

=20=20=20=20=20=20=20=20=20=20=20

Reserved.

X-Rated Google Groups Spam =?UTF-8?B?4Lie4LieIOC4meC4mQ==?= <nnp60248@gmail.com> from Google Gmail

Posted by Dave Yadallee on Saturday, April 20. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 20 Apr 2024 06:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ryA1U-00000000GaE-32bd

for dave@doctor.nl2k.ab.ca;

Sat, 20 Apr 2024 06:40:52 -0600

Resent-From: The Doctor

Resent-Date: Sat, 20 Apr 2024 06:40:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wr1-f57.google.com ([209.85.221.57]:53390)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ry5i1-0000000094C-31gT

for root@nl2k.ab.ca;

Sat, 20 Apr 2024 02:04:34 -0600

Received: by mail-wr1-f57.google.com with SMTP id ffacd0b85a97d-349d779625esf2056180f8f.2

for ; Sat, 20 Apr 2024 01:02:26 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1713600139; cv=pass;

d=google.com; s=arc-20160816;

b=FdsNH878GMHrpsNq55moNWzf1KBL0Ld5ZCYDZba9NR/kN8/yRYxYBkUGRrkSOO142s

HjidFOI3N7cXkiXqFCJH1QZBWglxxX+8qMARKwd9S0fYhNIXx/+5GxCFffxsfSqbhjhQ

SVJ/XKFlhOoAPmaQ7PZs9Oo5LxiZZCT6fJDvJFANj2A78I8yGKOgj9Qvo82yaO0wbeR/

Wms0vM4X6QTEy0hFWwwg5COk0oK23Mnydm37/1RJrrzJPjQ90kGgkuAzq5Xij5Vl346I

hdR3dVpql02H2icjE3mJHMhTsgXrEdPhO6eIejEwXCh7m6ub+7S7V8utX5nAHcitCRwX

BSRg==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature:dkim-signature;

bh=3cIK1yXG8AmN6ByZtcZCF+CQ7BzOlc2TD/3d7Mzcupk=;

fh=7SGqfX/en89Pke+5wGsK50xfacprDzzUYeaCSk8ie9Q=;

b=bwOu2Izm2U/FLB5AGs/EELywrXohrP9Ra9viVWFvejSOHlVzqsWflMs5EjgNjDDUaV

jBZtR3Xi+K7D0Xi9HBa0X3o5ahz0hzGw6SG2bIZ7nOKyqo5loXPDkbdKXynIA5wSwG5h

B9LcdhKblh++RwOKcM3E132XpVqd4pf9fihT6+pq5AGUJB7QFwsu4MprrgXbXHDw22Ly

6ViklOZRm8+JvmGbcJBuh9LJO+WgP548WU1jXsPLX8oxUs4jaPwF2MdIqIx0OAavI81g

HqZNRJ6Zvd1c0wOCEhYoTpf0kj5PONUs6rFzq5eEQnHKASe4tejo4Iq7joAhoWMiQPTu

bDwA==;

darn=nl2k.ab.ca

ARC-Authentication-Results: i=2; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=ZKzsgG0B;

spf=pass (google.com: domain of nnp60248@gmail.com designates 2a00:1450:4864:20::431 as permitted sender) smtp.mailfrom=nnp60248@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=googlegroups.com; s=20230601; t=1713600139; x=1714204939; darn=nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=3cIK1yXG8AmN6ByZtcZCF+CQ7BzOlc2TD/3d7Mzcupk=;

b=CJx1PgCw7LMu+vdI9cihE98Syje4oLC/OoMSBwdT9mTDABPA8ZYUEiw4ebFA4ZjIZG

DQ96vxZ2Tauxw7+35WnTzZCU3ILQGrF0lBv6u7KatW3AGX63LEsk6CNH3m+zcpSq+Mdr

cz3Y2lZ7IG9DEaDIsV94Kzadyxi/vXocRfgbLunh68vRfqwpFmfBNzIMTyHQ+CbSq8yA

dItF+xc7GHGPR/eDrPzLdY4tqOnmtM37uIcHG0PasYTXc1S6vYY+WIfwjJm+5vPvWlIG

3qowEK3seUDZ8Wa2dI5abkJJOMaalDv4+7FQ1Ni5a9d7ExprjM/fqEBjwnEJfUxkLqCu

D/JQ==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1713600139; x=1714204939; darn=nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=3cIK1yXG8AmN6ByZtcZCF+CQ7BzOlc2TD/3d7Mzcupk=;

b=SPJM81vYpCj8xcvqMrABpNnUb53ngRdhLv4DMrVgvC9SoTbGz5z7yNJLRf949wsdqC

uR/P1KuqvfmNJzfbSxa2SDSGp8lhy7+1hu3sDsa6t4C9kach2IRptTX/y8AxuBDfrpl4

wNTteDQfYkbujUrLivR8W7hA6SIuLsjIiLKuYEi2zoPkPn03gH0+BvT6z5oywkgqh5T9

UfudXWns7LiqSoS91/wEqgpc8HjOpnaeVAWwrYxZS03GCxINVtIkrz6K3ugBU55y6vdf

USjvbOBMILHySMY6WARpkJOn94WfPPOVQMCOvlLFFavJeaC51ZlH9qZLwKzgD+wNOli/

MR6A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1713600139; x=1714204939;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-beenthere:x-gm-message-state

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=3cIK1yXG8AmN6ByZtcZCF+CQ7BzOlc2TD/3d7Mzcupk=;

b=oE5p285FXLje0AE+DOkp9WbDKP7oxxmWIen6C1Idz4L0e3sXzY52IKT6PP0NgHsrVl

vaZAZI+VWWnAyl3ZdW3B4XOtU18BAif2+FneXjbe/JYZRpzf8O1+ia2tim5YnemtJPgB

dyOyJ+yV5mLxxy77xz9gUNvQIoAEGvLeEkIogA9X2AeXFvB+J7GoBC4CpC/nM/3IYXjs

PduAJ7OAuRNvEjNUawN+V7RhrFdmTcYnnVeRjre6Ne52HdodNnPNEOOPJMGJA/If26Ql

NqWAOkRKZCPT3mS/ex6K6+t3Lxwf+5GoJVMKaRpolQTnsmamgrvhKf6ED53ElIzfuOzX

mkIQ==

Sender: dece15-912025586@googlegroups.com

X-Forwarded-Encrypted: i=2; AJvYcCU0nxRi6Fu7BssTp2hL93OxxLFvV1F8WKHXtRLZ5YdDHMzk43vX01KxBKIIE9Vi0j0+5Ftm1m4v+ejMRA5mHbw=

X-Gm-Message-State: AOJu0YzdqRgocYMmdoNxHHHVkGBgvfU/tPnNeKuDjgj5vWPSX2rNQCl9

DTz7jUjBzA21keXJA2RhVUsRZmP19gHwa4swFYyphHG/RNqtR/yT

X-Google-Smtp-Source: AGHT+IHweQSJNj9FAbRBC4Wyb6XX4iIJumNmKV299eMYo8LgLQcvmVVbryxgHnjovwAsWOdfNwx1Tw==

X-Received: by 2002:adf:f751:0:b0:347:f26d:c183 with SMTP id z17-20020adff751000000b00347f26dc183mr3464827wrp.45.1713600139362;

Sat, 20 Apr 2024 01:02:19 -0700 (PDT)

X-BeenThere: dece15-912025586@googlegroups.com

Received: by 2002:a5d:5983:0:b0:345:6bf9:a5e1 with SMTP id ffacd0b85a97d-34a436aef68ls921114f8f.2.-pod-prod-05-eu;

Sat, 20 Apr 2024 01:02:15 -0700 (PDT)

X-Forwarded-Encrypted: i=2; AJvYcCUVQftx0X5TrIqvncWloMtkAOlsNU0pz+Dog3PV3Oi98GWuFd0VhkNha04LdMAPsQzmtqWFbx2FD1d33mPu04BJer8ZM58EX/D6coQqzMgb4Xs=

X-Received: by 2002:a5d:460f:0:b0:349:cc8c:56ed with SMTP id t15-20020a5d460f000000b00349cc8c56edmr3349540wrq.6.1713600134708;

Sat, 20 Apr 2024 01:02:14 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1713600134; cv=none;

d=google.com; s=arc-20160816;

b=QVdoerZ/hvXtPNS2NvJ6j0OcIy3NDyQpTezH/3LpX2AGsIc1Krt9+4LId127BuAJVa

4EURb7FVlz6zPQ4DfjcugN5CU7+eNAT6IXQ8MeQ+ZFIk+MTvw6UEPAXKHODKfeQO28bW

lIWTJOGO7lvk2ckIP0uYezIx3j5VqtLhKZHPsFlpun/xu2Xy5pCo4LOJFo8pxMizqFqy

CH2ZKzJmQ3IoORREW+8OTWVjCcuHh/+5V9HDZHzZeLwK/0TQr3ORy89Ybhv/yZ7+aQSn

NfJx4UqefbZlrieb4UZQM4PnWMq9ETE9HHBPno37Nf4If/JkJ60Z/sFrSsPzUL9P5I9D

DSmQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=uRuVolpddPtFqSj5e5t9TPL8nGelRvrvdpvg+djgrkM=;

fh=sxDqO3rSN3GylOHQBYBIhhSHrGAsD8kRIsXn2U2nngA=;

b=O1n6fUea6hgkJ9wGgVE+86Dh8ZdPXVZrvUtYGme0duFJ5PlK7INOMUFIRvc0eX+wyr

aiibGnqo+zVmeWcT2OcwcB/LVXRsIPdNfB21mcZhiuHCkLvgmKg/u4bFHz90R+F/ujXE

Co0NfjAfSLqM+jpPa59VUBE+IIJsVjZuTaX6/SGjCMJKkxMOEzHhik7zMaxMfLNSwKHp

fZgdegwXh91+F7kiMC6FdB0I9A4pdLSogFVUnk3knUs9rJd6WCDoewEJs3FmJ9cCZXNN

tFE2vrFEtVe0vzRKCghBo2V8uO08neRMsqmZmzHGD2E6o37kUat5IncDKjA1Bsy5YEdf

P1Vw==;

dara=google.com

ARC-Authentication-Results: i=1; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=ZKzsgG0B;

spf=pass (google.com: domain of nnp60248@gmail.com designates 2a00:1450:4864:20::431 as permitted sender) smtp.mailfrom=nnp60248@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Received: from mail-wr1-x431.google.com (mail-wr1-x431.google.com. [2a00:1450:4864:20::431])

by gmr-mx.google.com with ESMTPS id q23-20020adfb197000000b003457720cd34si340472wra.4.2024.04.20.01.02.14

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Sat, 20 Apr 2024 01:02:14 -0700 (PDT)

Received-SPF: pass (google.com: domain of nnp60248@gmail.com designates 2a00:1450:4864:20::431 as permitted sender) client-ip=2a00:1450:4864:20::431;

Received: by mail-wr1-x431.google.com with SMTP id ffacd0b85a97d-34782453ffdso2518880f8f.1;

Sat, 20 Apr 2024 01:02:14 -0700 (PDT)

X-Forwarded-Encrypted: i=1; AJvYcCUi9ThkHFKydFauAXDoELFubZ3U8qpAgseqCuO9ToKTPDQ8p7xc2UlqHmVxw4hFip568wKp+G7BgsXHsHVxzbB8OdOnEow7Jp7JlgaSUV6cQNT3IeBZ1UAJFbs3sr7vQBRK8A4uTIwJiiIlPH1Km0UEh3GURuONSmBgvlV4JTQ0Xyfk3Nu8rc5sqHw3Jg0vxTIMceHl7WQznFl6hWYfmTiD7HGVuzUdAEkJzhDDU0JtgH9i77bfttCF4TrnCz8wa2+avWawYdmCVyfvKWPO6YDPzdPbxEnKdCmMfeZsa08ix2OPIo9UPEIjcNoixrjdFkxT7aITd7RE1SIbRh9+9sGWWjjHh9CEENd9gr1GscgkfSLRP5wV03NnFQKHmalynxfDhC7Okkn+aToTPt0tMMQdigfS8+wiTYh7nk5d1+Cs9mOtWLtXOcfTPu8tfZMSFqrgPXOpBWIXGGl/ipQaynF9bXHmY91TzO2Q

X-Received: by 2002:adf:e044:0:b0:34a:4ded:4db0 with SMTP id

w4-20020adfe044000000b0034a4ded4db0mr3369038wrh.49.1713600133489; Sat, 20 Apr

2024 01:02:13 -0700 (PDT)

MIME-Version: 1.0

From: =?UTF-8?B?4Lie4LieIOC4meC4mQ==?=

Date: Sat, 20 Apr 2024 14:02:06 +0600

Message-ID:

Subject: =?UTF-8?B?T2xkZXIgbGFkeSB3YW50cyBob29rdXBzIfCfkYnwn5GM?=

To: dece15-912016742@googlegroups.com, dece15-912016917@googlegroups.com,

dece15-912017260@googlegroups.com, dece15-912020230@googlegroups.com,

dece15-912020772@googlegroups.com, dece15-912025199@googlegroups.com,

dece15-912025586@googlegroups.com, dece15-912027395@googlegroups.com,

dece15-912027665@googlegroups.com, dece15-912027821@googlegroups.com

Content-Type: multipart/alternative; boundary="0000000000003e718b0616829fee"

X-Original-Sender: nnp60248@gmail.com

X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass

header.i=@gmail.com header.s=20230601 header.b=ZKzsgG0B; spf=pass

(google.com: domain of nnp60248@gmail.com designates 2a00:1450:4864:20::431

as permitted sender) smtp.mailfrom=nnp60248@gmail.com; dmarc=pass

(p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Precedence: list

Mailing-list: list dece15-912025586@googlegroups.com; contact dece15-912025586+owners@googlegroups.com

List-ID:

X-Spam-Checked-In-Group: dece15-912025586@googlegroups.com

X-Google-Group-Id: 745700075957

List-Post: ,

List-Help: ,

List-Archive:
List-Unsubscribe: ,

X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Welcome ! Welcome to our secret community, and it's online

platform for one night dates. For more info >>> https://sites.google.com/view/hswe21

it's totally free --

Content analysis details: (8.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.221.57 listed in dnsbl.ahbl.org]

[209.85.221.57 listed in dnsbl.ahbl.org]

[209.85.221.57 listed in dnsbl.ahbl.org]

[209.85.221.57 listed in dnsbl.ahbl.org]

[2a00:1450:4864:20:0:0:0:431 listed in]

[dnsbl.ahbl.org]

[2a00:1450:4864:20:0:0:0:431 listed in]

[dnsbl.ahbl.org]

[2a00:1450:4864:20:0:0:0:431 listed in]

[dnsbl.ahbl.org]

[2a00:1450:4864:20:0:0:0:431 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.221.57 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.221.57 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.221.57 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.221.57 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2a00:1450:4864:20:0:0:0:431 listed in]

[will-spam-for-food.eu.org]

[2a00:1450:4864:20:0:0:0:431 listed in]

[will-spam-for-food.eu.org]

[2a00:1450:4864:20:0:0:0:431 listed in]

[will-spam-for-food.eu.org]

[2a00:1450:4864:20:0:0:0:431 listed in]

[will-spam-for-food.eu.org]

[2a00:1450:4864:20:0:0:0:431 listed in]

[will-spam-for-food.eu.org]

[2a00:1450:4864:20:0:0:0:431 listed in]

[will-spam-for-food.eu.org]

[2a00:1450:4864:20:0:0:0:431 listed in]

[will-spam-for-food.eu.org]

[2a00:1450:4864:20:0:0:0:431 listed in]

[will-spam-for-food.eu.org]

[209.85.221.57 listed in will-spam-for-food.eu.org]

[209.85.221.57 listed in will-spam-for-food.eu.org]

[209.85.221.57 listed in will-spam-for-food.eu.org]

[209.85.221.57 listed in will-spam-for-food.eu.org]

[209.85.221.57 listed in will-spam-for-food.eu.org]

[209.85.221.57 listed in will-spam-for-food.eu.org]

[209.85.221.57 listed in will-spam-for-food.eu.org]

[209.85.221.57 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.221.57 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.57 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[nnp60248(at)gmail.com]

2.5 SORTED_RECIPS Recipient list is sorted by address

0.0 HTML_MESSAGE BODY: HTML included in message

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

Subject: {SPAM?} =?UTF-8?B?T2xkZXIgbGFkeSB3YW50cyBob29rdXBzIfCfkYnwn5GM?=

--0000000000003e718b0616829fee

Content-Type: text/plain; charset="UTF-8"

Welcome ! Welcome to our secret community, and it's online platform for one

night dates.

For more info ------------>>>

https://sites.google.com/view/hswe21

it's totally free

--

--

You received this message because you are subscribed to the Google Groups "Dece15-912025586" group.

To unsubscribe from this group and stop receiving emails from it, send an email to dece15-912025586+unsubscribe@googlegroups.com.

To view this discussion on the web, visit https://groups.google.com/d/msgid/dece15-912025586/CAL6zHotUXZZkK95pgw3BK3MQ1B3myOk8iMsWaV%3DzuuHW21wDKQ%40mail.gmail.com.

--0000000000003e718b0616829fee

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Welcome ! Welcome to our secret community, and it's on=

line platform for one night dates.
For more info ------------>>>=

;
https://sites.google=

.com/view/hswe21

it's totally free

r>

--

--

You received this message because you are subscribed to the Google Groups &=

quot;Dece15-912025586" group.

To unsubscribe from this group and stop receiving emails from it, send an e=

mail to de=

ce15-912025586+unsubscribe@googlegroups.com.

To view this discussion on the web, visit
com/d/msgid/dece15-912025586/CAL6zHotUXZZkK95pgw3BK3MQ1B3myOk8iMsWaV%3DzuuH=

W21wDKQ%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https://gr=

oups.google.com/d/msgid/dece15-912025586/CAL6zHotUXZZkK95pgw3BK3MQ1B3myOk8i=

MsWaV%3DzuuHW21wDKQ%40mail.gmail.com.

--0000000000003e718b0616829fee--

2FA Metamask Phish

Posted by Dave Yadallee on Saturday, April 20. 2024

Urgent Two-Factor Authentication Activation

Your account security is at risk! We've detected suspicious activity on your account.

To secure your account immediately, please activate Two-Factor Authentication (2FA) by clicking the button below:

Activate 2FA Now

If you need any assistance or have questions, please contact our support team immediately.

Thank you for your prompt attention to this matter.

--1f911cb55121551547d7cb505d3ef3887--

I2.03KL0LD37.0KI2.21KwhoissourceRank12.9MPIN0Summary reportDiagnosisDensity00n/a

Nigerian spam from Digital Ocean

Posted by Dave Yadallee on Saturday, April 20. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 19 Apr 2024 21:19:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ry1FY-000000006OY-0leK

for dave@doctor.nl2k.ab.ca;

Fri, 19 Apr 2024 21:18:48 -0600

Resent-From: The Doctor

Resent-Date: Fri, 19 Apr 2024 21:18:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.toolfor.ru ([31.148.13.220]:58762)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rxyyJ-00000000BxH-3ecn

for doctor@nl2k.ab.ca;

Fri, 19 Apr 2024 18:52:57 -0600

Received: from localhost (localhost [127.0.0.1])

by mail.toolfor.ru (Postfix) with ESMTP id 6A80BD3AF4A;

Sat, 20 Apr 2024 02:22:07 +0300 (MSK)

Received: from mail.toolfor.ru ([127.0.0.1])

by localhost (mail.toolfor.ru [127.0.0.1]) (amavisd-new, port 10032)

with ESMTP id EwalstJ-75SI; Sat, 20 Apr 2024 02:22:07 +0300 (MSK)

Received: from mail.toolfor.ru (localhost [127.0.0.1])

by mail.toolfor.ru (Postfix) with ESMTPS id 0F8BBD3AF68;

Sat, 20 Apr 2024 02:22:07 +0300 (MSK)

Received: from [169.254.124.168] (unknown [46.101.113.182])

by mail.toolfor.ru (Postfix) with ESMTPSA id 6EBE7D3AF4A;

Sat, 20 Apr 2024 02:22:02 +0300 (MSK)

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: =?utf-8?b?RG9uYXRpb24gb2Yg4oKsMyw2MDAsMDAwLjAw?=

To: Recipients

From: "Schaeffler Group AG"

Date: Fri, 19 Apr 2024 16:21:57 -0700

Reply-To: schaefflerariaelisabeth@outlook.de

Message-Id: <20240419232202.6EBE7D3AF4A@mail.toolfor.ru>

X-Spam_score: 14.5

X-Spam_score_int: 145

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello, I'm Ms. Maria Elisabeth Schaeffler, a German business

magnate, Investor and philanthropist. I am the chairman of Wipro Limited.

25 percent of my personal wealth is spent on charity. And I also [...]

Content analysis details: (14.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[31.148.13.220 listed in dnsbl.ahbl.org]

[31.148.13.220 listed in dnsbl.ahbl.org]

[31.148.13.220 listed in dnsbl.ahbl.org]

[31.148.13.220 listed in dnsbl.ahbl.org]

[46.101.113.182 listed in dnsbl.ahbl.org]

[46.101.113.182 listed in dnsbl.ahbl.org]

[46.101.113.182 listed in dnsbl.ahbl.org]

[46.101.113.182 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[31.148.13.220 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[31.148.13.220 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[31.148.13.220 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[31.148.13.220 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[31.148.13.220 listed in will-spam-for-food.eu.org]

[31.148.13.220 listed in will-spam-for-food.eu.org]

[31.148.13.220 listed in will-spam-for-food.eu.org]

[31.148.13.220 listed in will-spam-for-food.eu.org]

[31.148.13.220 listed in will-spam-for-food.eu.org]

[31.148.13.220 listed in will-spam-for-food.eu.org]

[31.148.13.220 listed in will-spam-for-food.eu.org]

[31.148.13.220 listed in will-spam-for-food.eu.org]

[46.101.113.182 listed in will-spam-for-food.eu.org]

[46.101.113.182 listed in will-spam-for-food.eu.org]

[46.101.113.182 listed in will-spam-for-food.eu.org]

[46.101.113.182 listed in will-spam-for-food.eu.org]

[46.101.113.182 listed in will-spam-for-food.eu.org]

[46.101.113.182 listed in will-spam-for-food.eu.org]

[46.101.113.182 listed in will-spam-for-food.eu.org]

[46.101.113.182 listed in will-spam-for-food.eu.org]

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[31.148.13.220 listed in psbl.surriel.com]

1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)

[31.148.13.220 listed in ix.dnsbl.manitu.net]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 LOTS_OF_MONEY Huge... sums of money

1.3 MONEY_NOHTML Lots of money in plain text

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

Subject: {SPAM?} =?utf-8?b?RG9uYXRpb24gb2Yg4oKsMyw2MDAsMDAwLjAw?=

Hello,

I'm Ms. Maria Elisabeth Schaeffler, a German business magnate, Investor and=

philanthropist. I am the chairman of Wipro Limited. 25 percent of my perso=

nal wealth is spent on charity. And I also promised to give the rest of 25%=

away to individuals this year 2024 . I have decided to donate =E2=82=AC3,=

600,000.00 euros to you. If you are interested in my donation, contact me f=

or more information.

You can also read more about me using the link below

https://en.wikipedia.org/wiki/Maria-Elisabeth_Schaeffler

Contact me via my email:: schaefflerariaelisabeth@outlook.de

Greetings

Managing Director Wipro Limited

Maria Elisabeth Schaeffler

Canada Post Phish

Posted by Dave Yadallee on Saturday, April 20. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 19 Apr 2024 18:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rxyXW-000000009SS-3RFS

for dave@doctor.nl2k.ab.ca;

Fri, 19 Apr 2024 18:25:10 -0600

Resent-From: The Doctor

Resent-Date: Fri, 19 Apr 2024 18:25:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [41.61.20.138] (port=41200 helo=irodahost.hu)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rxy0o-000000005Ji-2aQb

for doctor@nk.ca;

Fri, 19 Apr 2024 17:51:29 -0600

Received: by irodahost.hu (Postfix, from userid 33)

id 8142676ED71; Fri, 19 Apr 2024 17:52:49 +0200 (SAST)

To: doctor@nk.ca

Subject: New parcel awaiting delivery due to missing informations! / Nouveau colis en attente de livraison par manques d'informations!

Date: Fri, 19 Apr 2024 17:52:49 +0200

From: Intelcom | Package delivery across Canada

Reply-To: dask1337@abv.bg

Message-ID: <30d59fef665081bb46c641c63b452d4c@41.61.20.138>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_30d59fef665081bb46c641c63b452d4c"

Content-Transfer-Encoding: 8bit

X-Spam_score: 17.8

X-Spam_score_int: 178

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dear doctor@nk.ca, A parcel belonging to you has been declared

by customs. We kindly ask you to pay the taxes and duties of 5.86 CAD in

order to receive your package as soon as possible before it is returned to

sender [...]

Content analysis details: (17.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

[41.61.20.138 listed in dnsbl.ahbl.org]

[41.61.20.138 listed in dnsbl.ahbl.org]

[41.61.20.138 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)

[41.61.20.138 listed in ix.dnsbl.manitu.net]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=no_reply%40intelcom.ca;ip=41.61.20.138;r=doctor.nl2k.ab.ca]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[dask1337(at)abv.bg]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

3.3 WIKI_IMG URI: Image from wikipedia

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.2 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +

no rDNS

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 NORDNS_LOW_CONTRAST No rDNS + hidden text

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} New parcel awaiting delivery due to missing informations! / Nouveau colis en attente de livraison par manques d'informations!

This is a multi-part message in MIME format.

--b1_30d59fef665081bb46c641c63b452d4c

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit

Â

Â

Â

Dear doctor@nk.ca,

A parcel belonging to you has been declared by customs. We kindly ask you to pay the taxes and duties ofÂ 5.86Â CADÂ in order to receive your package as soon as possible before it is returned to sender in accordance with our terms and conditions.

Receive my delivery

Once your payment has been made, you will receive a payment confirmation by e-mail and we will call you on your phone number to deliver your parcel according to your availability.

This message is intended for the addressee only. It may contain proprietary or confidential information. Any unauthorized dissemination, distribution or copying of this message is strictly prohibited. If you have received this message in error, please inform us immediately and delete the original message.

Â

Do not reply to this e-mail. We cannot receive or respond to replies to this e-mail. If you have any questions or comments, please contact us online or call 1-514-807-6086.

This email has been sent toÂ doctor@nk.ca

intelcom.ca

1380 William St, Montreal, Quebec H3C 1R5, Canada

AccessibilityÂ Â |Â Â Â LegalÂ Â |Â Â Â Privacy

Â© IntelcomÂ

Â

Â

Â

Cher(e) doctor@nk.ca,

Un colis vous appartenant a Ã©tÃ© dÃ©clarÃ© par les douanes. Nous vous demandons de bien vouloir acquitter les taxes et droits deÂ 5.86Â CADÂ afin de recevoir votre colis dans les meilleurs dÃ©lais avant qu'il ne soit renvoyÃ© Ã l'expÃ©diteur conformÃ©ment Ã nos conditions d'utilisation.

Recevoir ma livraison

Une fois votre paiement effectuÃ©, vous recevrez une confirmation de paiement par e-mail et nous vous appellerons sur votre numÃ©ro de tÃ©lÃ©phone pour livrer votre colis selon vos disponibilitÃ©s.

Ce message est destinÃ© uniquement au destinataire. Il peut contenir des informations exclusives ou confidentielles. Toute diffusion, distribution ou copie non autorisÃ©e de ce message est strictement interdite. Si vous avez reÃ§u ce message par erreur, veuillez nous en informer immÃ©diatement et supprimer le message original.

Â Â Â

Ne rÃ©pondez pas Ã cet e-mail. Nous ne pouvons ni recevoir ni rÃ©pondre aux rÃ©ponses Ã ce courriel. Si vous avez des questions ou des commentaires, contactez-nous en ligne ou appelez leÂ 1-514-807-6086.

Ce courriel a Ã©tÃ© envoyÃ© Ã doctor@nk.ca

intelcom.ca

1380 William St, Montreal, Quebec H3C 1R5, Canada

AccessibilitÃ©Â |Â JuridiqueÂ |Â Vie privÃ©e

Â© IntelcomÂ

--b1_30d59fef665081bb46c641c63b452d4c

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

=09

, Arial; font-size: 16px; word-spacing: normal;">

und-size: initial; background-repeat: initial; background-attachment: initi=

al; background-origin: initial; background-clip: initial; margin: 0px auto;=

max-width: 600px;">=C2=A0

und-size: initial; background-repeat: initial; background-attachment: initi=

al; background-origin: initial; background-clip: initial; margin: 0px auto;=

max-width: 600px;">

id=3D"m_6847154231841864878x_x_ENGLISH_VERSION" style=3D"border-width: 0px=

; margin: 0px auto; padding: 0px; color: rgb(85, 85, 85); font-family: helv=

etica, arial, verdana, sans-serif; font-size: 14px; vertical-align: baselin=

e; border-collapse: collapse; border-spacing: 0px; background-color: rgb(24=

0, 240, 240);" width=3D"100%">

=09
lign: baseline; box-sizing: border-box;">

=09=09
lign: baseline; box-sizing: border-box;">

=09=09=09

=09=09

=09=09
lign: baseline; box-sizing: border-box;">

=09=09=09

=09=09

=09=09
lign: baseline; box-sizing: border-box;">

=09=09=09

=09=09

=09

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; box-sizing: border-box;">

=09=09=09
order-width: 0px; margin: 0px auto; padding: 0px; vertical-align: baseline;=

border-collapse: collapse; max-width: 600px; border-spacing: 0px;" width=

=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
adding: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

border-width: 2px 0px 1px; padding: 24px; line-height: 24px; letter-spacin=

g: 0.03em; vertical-align: baseline; border-top-color: rgb(202, 38, 26); bo=

rder-bottom-color: rgb(203, 203, 203); border-top-style: solid; border-bott=

om-style: solid; float: none; box-sizing: border-box;"> 3D"Canada<br

Post" class=3D"CToWUd" data-bit=3D"iit" height=

=3D"37" src=3D"https://ci3.googleusercontent.com/meips/ADKq_NbXjCZvAlSvBqyY=

iivSfupXAUCqmKgOzeix2sRI_xXbqfdUVTjKtLAPK7crB-xi6HuSvp2Lca4OVGD4fmYwaP4azrn=

6x1euJsErwcr5DudJh6PqBKE4HtW-jdvFrgiRSIBn7Bbi4zT7ACQ9v0CcBfk-dSz4tvC2RMAra6=

9nfg=3Ds0-d-e1-ft#https://upload.wikimedia.org/wikipedia/commons/thumb/6/66=

/Intelcom_logo.svg/2560px-Intelcom_logo.svg.png" style=3D"border-width: 0px=

; margin: 0px; padding: 0px; vertical-align: bottom; max-width: 100%; box-s=

izing: border-box;" width=3D"136" />
google.com/url?q=3Dhttps://t.notifications.canadapost-postescanada.ca/info5=

/r/?id=3Dh8bf38d8,8ded733,4500553&source=3Dgmail&ust=3D1711917960748000&usg=

=3DAOvVaw0hM8r4CJ57F291S0m9gesk" href=3D"https://t.notifications.canadapost=

-postescanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500553" style=3D"color: rg=

b(4, 103, 198); background-image: initial; background-position: 0px 0px; ba=

ckground-size: initial; background-repeat: initial; background-attachment: =

initial; background-origin: initial; background-clip: initial; border-width=

: 0px; margin: 0px; padding: 0px; box-sizing: border-box; text-decoration-l=

ine: none;" target=3D"_blank" title=3D"https://t.notifications.canadapost-p=

ostescanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500553"> 3D"Canada<br

Post" class=3D"CToWUd" data-bit=3D"iit" src=

=3D"https://ci3.googleusercontent.com/meips/ADKq_NbSezd7qL1wADgqu05VSUF6iML=

L7Ge9OrKW2KBZoxBP2HPMavRazzBCzTA6SKvY9rJ-n6nM16a6mLGlC3oolUNJ8u5sTHULmVa-nq=

OzYuvvCUM-vqNFCkwxDRiQ=3Ds0-d-e1-ft#https://www.canadapost.ca/cpo/mc/emails=

/cpc/images/mobile_cpc_logo.png" style=3D"border-width: 0px; margin: 0px; p=

adding: 0px; vertical-align: bottom; max-width: 100%; box-sizing: border-bo=

x;" width=3D"0" />

(255, 255, 255); border-width: 2px 0px 1px; padding: 24px; line-height: 24p=

x; letter-spacing: 0.03em; vertical-align: baseline; border-top-color: rgb(=

202, 38, 26); border-bottom-color: rgb(203, 203, 203); border-top-style: so=

lid; border-bottom-style: solid; float: none; box-sizing: border-box;">=

=C2=A0

=09=09=09

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; box-sizing: border-box;">

=09=09=09
order-width: 0px; margin: 0px auto; padding: 0px; vertical-align: baseline;=

border-collapse: collapse; max-width: 600px; border-spacing: 0px;" width=

=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

h: 0px; padding: 48px 24px 64px; line-height: 24px; letter-spacing: 0.03em;=

vertical-align: middle; box-sizing: border-box;">

=09=09=09=09=09=09

mily: tahoma, geneva, sans-serif;">Dear doctor@nk.ca
ont-family: tahoma, geneva, sans-serif;">,

=09=09=09=09=09=09

A parcel belonging to=

you has been declared by customs. We kindly ask you to pay the taxes and d=

uties of=C2=A05.86=

=C2=A0
n>CAD=C2=A0in order to rece=

ive your package as soon as possible before it is returned to sender in acc=

ordance with our terms and conditions.

=09=09=09=09=09=09

q=3Dhttps://=D1=8A=D1=8B=D1=8A.=D1=80=D1=84/=D0=B0=D0=A3=D0=AA=D0=95&source=

=3Dgmail&ust=3D1711917960748000&usg=3DAOvVaw2DyArZA8YbF40_kvowD5vA" href=3D=

"https://=D1=8A=D1=8B=D1=8A.=D1=80=D1=84/=D1=83=D0=AB=D0=AA=D0=B0" style=3D=

"color: rgb(255, 87, 51); background: rgb(255, 87, 51); border-width: 15px =

60px; border-style: solid; border-color: rgb(255, 87, 51); border-radius: 3=

0px; width: auto; text-align: center; line-height: 19px; letter-spacing: 0p=

x; font-family: InterRegular, Helvetica, Arial, sans-serif; font-weight: bo=

ld; display: block; text-decoration-line: none;" target=3D"_blank">
yle=3D"color: rgb(255, 255, 255);">Receive my delivery
ng>

=09=09=09=09=09=09

amily: tahoma, geneva, sans-serif;">On=

ce your payment has been made, you will receive a payment confirmation by e=

-mail and we will call you on your phone number to deliver your parcel acco=

rding to your availability.

=09=09=09=09=09=09
cellspacing=3D"0" style=3D"border-width: 0px; margin: 0px auto; padding: 0=

px; letter-spacing: 0px; vertical-align: baseline; border-collapse: collaps=

e; max-width: 600px; border-spacing: 0px;" width=3D"100%">

=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09

=09=09=09=09=09=09

dding: 48px 24px 24px; color: rgb(240, 240, 240); line-height: 24px; letter=

-spacing: 0.03em; vertical-align: middle; border-bottom-color: rgb(203, 203=

, 203); border-top-width: 0px; border-right-width: 0px; border-left-width: =

0px; border-bottom-style: solid; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-size: 14px;">This message is intended for the addressee only. I=

t may contain proprietary or confidential information. Any unauthorized dis=

semination, distribution or copying of this message is strictly prohibited.=

If you have received this message in error, please inform us immediately a=

nd delete the original message.

=09=09=09=09=09=09=09=09=09=C2=A0

=09=09=09=09=09=09=09=09=09

4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-size: 14px;">Do not reply to this e-mail. We cannot receive or =

respond to replies to this e-mail. If you have any questions or comments, p=

lease contact us online or call 1-514-807-6086.

=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 48px 24px 0px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">

=09=09=09=09=09=09=09=09=09
This email h=

as been sent to=C2=A0doctor@nk.ca

=09=09=09=09=09=09=09=09=09

=3D"font-size: 14px;">
f;">
om.ca&source=3Dgmail&ust=3D1711917960749000&usg=3DAOvVaw33uqjroZtbWOGEkWFj_=

7KG" href=3D"http://intelcom.ca/" style=3D"color: rgb(17, 85, 204);" target=

=3D"_blank">intelcom.ca

=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">1380 William St, Montreal, Quebe=

c H3C 1R5, Canada

rder-width: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">
ma, geneva, sans-serif;">Accessibility=C2=A0=C2=A0|=C2=A0=C2=A0=

=C2=A0Legal=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0Privacy
n>

rder-width: 0px; padding: 0px 24px 48px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;" valign=3D"bottom">
"font-family: tahoma, geneva, sans-serif;">
; margin: 0px; padding: 0px; display: inline-block; box-sizing: border-box;=

">=C2=A9 Intelcom=C2=A0
.com/url?q=3Dhttps://t.notifications.canadapost-postescanada.ca/info5/r/?id=

=3Dh8bf38d8,8ded733,4500559&source=3Dgmail&ust=3D1711917960749000&usg=3DAOv=

Vaw3Mc_Q_L0njln9ok13_tmxp" href=3D"https://t.notifications.canadapost-poste=

scanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559" style=3D"color: rgb(240,=

240, 240); background-image: initial; background-position: 0px 0px; backgr=

ound-size: initial; background-repeat: initial; background-attachment: init=

ial; background-origin: initial; background-clip: initial; border-width: 0p=

x; margin: 0px; padding: 0px; display: inline-block; box-sizing: border-box=

;" target=3D"_blank" title=3D"https://t.notifications.canadapost-postescana=

da.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559">
CToWUd" data-bit=3D"iit" src=3D"https://ci3.googleusercontent.com/meips/ADK=

q_NZSdC50LJxq6jpldVGo2o34fAxaoWvWVreYWvzzdgacdK3a8w6e58CrEXpx35h5qAG9wVVKl7=

aUwLXrW4hWiZrUh85qCOD0d4z9dtgLkIWB-eAgL4BH_AvFHKpb3DDGsw=3Ds0-d-e1-ft#https=

://www.canadapost.ca/cpo/mc/emailcampaigns/cpc/images/canada_logo.png" styl=

e=3D"border-width: 0px; margin: 0px; padding: 0px; vertical-align: bottom; =

float: right; max-width: 100%; box-sizing: border-box;" width=3D"78" />=

=09=09=09=09=09=09

=09=09=09

id=3D"m_6847154231841864878x_x_ENGLISH_VERSION" style=3D"border-width: 0px=

; margin: 0px auto; padding: 0px; color: rgb(85, 85, 85); font-family: helv=

etica, arial, verdana, sans-serif; font-size: 14px; vertical-align: baselin=

e; border-collapse: collapse; border-spacing: 0px; background-color: rgb(24=

0, 240, 240);" width=3D"100%">

=09
lign: baseline; box-sizing: border-box;">

=09=09
lign: baseline; box-sizing: border-box;">

=09=09=09

=09=09

=09=09
lign: baseline; box-sizing: border-box;">

=09=09=09

=09=09

=09=09
lign: baseline; box-sizing: border-box;">

=09=09=09

=09=09

=09

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; box-sizing: border-box;">

=09=09=09
order-width: 0px; margin: 0px auto; padding: 0px; vertical-align: baseline;=

border-collapse: collapse; max-width: 600px; border-spacing: 0px;" width=

=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

padding: 24px; line-height: 24px; letter-spacing: 0.03em; vertical-align: =

baseline; border-top: 2px solid rgb(202, 38, 26); border-bottom-color: rgb(=

203, 203, 203); border-right-width: 0px; border-left-width: 0px; border-bot=

tom-style: solid; float: none; box-sizing: border-box;"> 3D"Canada

Post" class=3D"CToWUd" data-bit=3D"iit" height=3D"37" src=3D"https://ci3.go=

ogleusercontent.com/meips/ADKq_NbXjCZvAlSvBqyYiivSfupXAUCqmKgOzeix2sRI_xXbq=

fdUVTjKtLAPK7crB-xi6HuSvp2Lca4OVGD4fmYwaP4azrn6x1euJsErwcr5DudJh6PqBKE4HtW-=

jdvFrgiRSIBn7Bbi4zT7ACQ9v0CcBfk-dSz4tvC2RMAra69nfg=3Ds0-d-e1-ft#https://upl=

oad.wikimedia.org/wikipedia/commons/thumb/6/66/Intelcom_logo.svg/2560px-Int=

elcom_logo.svg.png" style=3D"border-width: 0px; margin: 0px; padding: 0px; =

vertical-align: bottom; max-width: 100%; box-sizing: border-box;" width=3D"=

136" />
notifications.canadapost-postescanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,450=

0553&source=3Dgmail&ust=3D1711917960749000&usg=3DAOvVaw0BIJtZBrO9SUJHNhb547=

nm" href=3D"https://t.notifications.canadapost-postescanada.ca/info5/r/?id=

=3Dh8bf38d8,8ded733,4500553" style=3D"color: rgb(4, 103, 198); background-i=

mage: initial; background-position: 0px 0px; background-size: initial; back=

ground-repeat: initial; background-attachment: initial; background-origin: =

initial; background-clip: initial; border-width: 0px; margin: 0px; padding:=

0px; box-sizing: border-box; text-decoration-line: none;" target=3D"_blank=

" title=3D"https://t.notifications.canadapost-postescanada.ca/info5/r/?id=

=3Dh8bf38d8,8ded733,4500553">=C2=A0 3D"Canada<br

(255, 255, 255); padding: 24px; line-height: 24px; letter-spacing: 0.03em; =

vertical-align: baseline; border-top: 2px solid rgb(202, 38, 26); border-bo=

ttom-color: rgb(203, 203, 203); border-right-width: 0px; border-left-width:=

0px; border-bottom-style: solid; float: none; box-sizing: border-box;">=

=C2=A0

=09=09=09

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; box-sizing: border-box;">

=09=09=09
order-width: 0px; margin: 0px auto; padding: 0px; vertical-align: baseline;=

border-collapse: collapse; max-width: 600px; border-spacing: 0px;" width=

=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

h: 0px; padding: 48px 24px 64px; line-height: 24px; letter-spacing: 0.03em;=

vertical-align: middle; box-sizing: border-box;">

=09=09=09=09=09=09

mily: tahoma, geneva, sans-serif;">Cher(e) doctor@nk.ca
=3D"font-family: tahoma, geneva, sans-serif;">,

=09=09=09=09=09=09

Un colis vous apparte=

nant a =C3=A9t=C3=A9 d=C3=A9clar=C3=A9 par les douanes. Nous vous demandons=

de bien vouloir acquitter les taxes et droits de
border-box;">=C2=A05.86
tahoma, geneva, sans-serif;">=C2=A0
0px;">CAD=C2=A0afin de recevoir votre colis dans les meilleurs d=

=C3=A9lais avant qu'il ne soit renvoy=C3=A9 =C3=A0 l'exp=C3=A9diteur confor=

m=C3=A9ment =C3=A0 nos conditions d'utilisation.

=09=09=09=09=09=09

q=3Dhttps://=D1=8A=D1=8B=D1=8A.=D1=80=D1=84/=D0=B0=D0=A3=D0=AA=D0=95&source=

=3Dgmail&ust=3D1711917960749000&usg=3DAOvVaw3D4GIL24u38-K3kyUeU9o8" href=3D=

"https://=D1=8A=D1=8B=D1=8A.=D1=80=D1=84/=D1=83=D0=AB=D0=AA=D0=B0" style=3D=

"color: rgb(255, 87, 51); background: rgb(255, 87, 51); border-width: 15px =

60px; border-style: solid; border-color: rgb(255, 87, 51); border-radius: 3=

0px; width: auto; text-align: center; line-height: 19px; letter-spacing: 0p=

x; font-family: InterRegular, Helvetica, Arial, sans-serif; font-weight: bo=

ld; display: block; text-decoration-line: none;" target=3D"_blank">
yle=3D"color: rgb(255, 255, 255);">Recevoir ma livraison
rong>

=09=09=09=09=09=09

amily: tahoma, geneva, sans-serif;">Un=

e fois votre paiement effectu=C3=A9, vous recevrez une confirmation de paie=

ment par e-mail et nous vous appellerons sur votre num=C3=A9ro de t=C3=

=A9l=C3=A9phone pour livrer votre colis selon vos disponibilit=C3=A9s.
n>

=09=09=09=09=09=09
cellspacing=3D"0" style=3D"border-width: 0px; margin: 0px auto; padding: 0=

px; letter-spacing: 0px; vertical-align: baseline; border-collapse: collaps=

e; max-width: 600px; border-spacing: 0px;" width=3D"100%">

=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09

=09=09=09=09=09=09

dding: 48px 24px 24px; color: rgb(240, 240, 240); line-height: 24px; letter=

-spacing: 0.03em; vertical-align: middle; border-bottom-color: rgb(203, 203=

, 203); border-top-width: 0px; border-right-width: 0px; border-left-width: =

0px; border-bottom-style: solid; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-family: tahoma, geneva, sans-serif;">
14px;">Ce message est destin=C3=A9 uniquement au destinataire. Il peut cont=

enir des informations exclusives ou confidentielles. Toute diffusion, distr=

ibution ou copie non autoris=C3=A9e de ce message est strictement interdite=

. Si vous avez re=C3=A7u ce message par erreur, veuillez nous en informer i=

mm=C3=A9diatement et supprimer le message original.

=09=09=09=09=09=09=09=09=09=C2=A0=C2=A0=C2=A0

=09=09=09=09=09=09=09=09=09

4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-size: 14px;">Ne r=C3=A9pondez pas =C3=A0 cet e-mail. Nous ne po=

uvons ni recevoir ni r=C3=A9pondre aux r=C3=A9ponses =C3=A0 ce courriel. Si=

vous avez des questions ou des commentaires, contactez-nous en ligne ou ap=

pelez le=C2=A0
n style=3D"border-width: 0px; margin: 0px; padding: 0px; box-sizing: border=

-box;">
: inline-block; box-sizing: border-box;">1-514-807-6086.
n>

=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 48px 24px 0px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">

=09=09=09=09=09=09=09=09=09
Ce courriel =

a =C3=A9t=C3=A9 envoy=C3=A9 =C3=A0 doctor@nk.ca

=09=09=09=09=09=09=09=09=09

=3D"font-size: 14px;">
f;">
om.ca&source=3Dgmail&ust=3D1711917960749000&usg=3DAOvVaw33uqjroZtbWOGEkWFj_=

7KG" href=3D"http://intelcom.ca/" style=3D"color: rgb(17, 85, 204);" target=

=3D"_blank">intelcom.ca

=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">1380 William St, Montreal, Quebe=

c H3C 1R5, Canada

rder-width: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">Accessibilit=C3=A9=C2=

=A0|=C2=A0Juridique=C2=A0|=C2=A0Vie priv=C3=A9e

rder-width: 0px; padding: 0px 24px 48px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;" valign=3D"bottom">
"font-family: tahoma, geneva, sans-serif;">
; margin: 0px; padding: 0px; display: inline-block; box-sizing: border-box;=

">=C2=A9 Intelcom=C2=A0
.com/url?q=3Dhttps://t.notifications.canadapost-postescanada.ca/info5/r/?id=

=3Dh8bf38d8,8ded733,4500559&source=3Dgmail&ust=3D1711917960749000&usg=3DAOv=

Vaw3Mc_Q_L0njln9ok13_tmxp" href=3D"https://t.notifications.canadapost-poste=

scanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559" style=3D"color: rgb(240,=

240, 240); background-image: initial; background-position: 0px 0px; backgr=

ound-size: initial; background-repeat: initial; background-attachment: init=

ial; background-origin: initial; background-clip: initial; border-width: 0p=

x; margin: 0px; padding: 0px; display: inline-block; box-sizing: border-box=

;" target=3D"_blank" title=3D"https://t.notifications.canadapost-postescana=

da.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559">
CToWUd" data-bit=3D"iit" src=3D"https://ci3.googleusercontent.com/meips/ADK=

q_NZSdC50LJxq6jpldVGo2o34fAxaoWvWVreYWvzzdgacdK3a8w6e58CrEXpx35h5qAG9wVVKl7=

aUwLXrW4hWiZrUh85qCOD0d4z9dtgLkIWB-eAgL4BH_AvFHKpb3DDGsw=3Ds0-d-e1-ft#https=

://www.canadapost.ca/cpo/mc/emailcampaigns/cpc/images/canada_logo.png" styl=

e=3D"border-width: 0px; margin: 0px; padding: 0px; vertical-align: bottom; =

float: right; max-width: 100%; box-sizing: border-box;" width=3D"78" />=

=09=09=09=09=09=09

=09=09=09

--b1_30d59fef665081bb46c641c63b452d4c--

Canada Post Phish

Posted by Dave Yadallee on Saturday, April 20. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 19 Apr 2024 17:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rxxbc-000000002uD-3SPU

for dave@doctor.nl2k.ab.ca;

Fri, 19 Apr 2024 17:25:20 -0600

Resent-From: The Doctor

Resent-Date: Fri, 19 Apr 2024 17:25:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [41.61.20.138] (port=51522 helo=irodahost.hu)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rxxL4-000000000pk-40kg

for www@nl2k.ab.ca;

Fri, 19 Apr 2024 17:08:22 -0600

Received: by irodahost.hu (Postfix, from userid 33)

id E49BA734BF5; Fri, 19 Apr 2024 14:30:19 +0200 (SAST)

To: www@nl2k.ab.ca

Subject: New parcel awaiting delivery due to missing informations! / Nouveau colis en attente de livraison par manques d'informations!

Date: Fri, 19 Apr 2024 14:30:19 +0200

From: Intelcom | Package delivery across Canada

Reply-To: dask1337@abv.bg

Message-ID: <94985b4d6669033e96ba7df76d96728c@41.61.20.138>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_94985b4d6669033e96ba7df76d96728c"

Content-Transfer-Encoding: 8bit

X-Spam_score: 16.3

X-Spam_score_int: 163

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dear www@nl2k.ab.ca, A parcel belonging to you has been declared

by customs. We kindly ask you to pay the taxes and duties of 5.86 CAD in

order to receive your package as soon as possible before it is returned to

sender [...]

Content analysis details: (16.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

[41.61.20.138 listed in dnsbl.ahbl.org]

[41.61.20.138 listed in dnsbl.ahbl.org]

[41.61.20.138 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=no_reply%40intelcom.ca;ip=41.61.20.138;r=doctor.nl2k.ab.ca]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[dask1337(at)abv.bg]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

3.3 WIKI_IMG URI: Image from wikipedia

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

1.2 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +

no rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 NORDNS_LOW_CONTRAST No rDNS + hidden text

Subject: {SPAM?} New parcel awaiting delivery due to missing informations! / Nouveau colis en attente de livraison par manques d'informations!

This is a multi-part message in MIME format.

--b1_94985b4d6669033e96ba7df76d96728c

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit

Â

Â

Â

Dear www@nl2k.ab.ca,

A parcel belonging to you has been declared by customs. We kindly ask you to pay the taxes and duties ofÂ 5.86Â CADÂ in order to receive your package as soon as possible before it is returned to sender in accordance with our terms and conditions.

Receive my delivery

Once your payment has been made, you will receive a payment confirmation by e-mail and we will call you on your phone number to deliver your parcel according to your availability.

This message is intended for the addressee only. It may contain proprietary or confidential information. Any unauthorized dissemination, distribution or copying of this message is strictly prohibited. If you have received this message in error, please inform us immediately and delete the original message.

Â

Do not reply to this e-mail. We cannot receive or respond to replies to this e-mail. If you have any questions or comments, please contact us online or call 1-514-807-6086.

This email has been sent toÂ www@nl2k.ab.ca

intelcom.ca

1380 William St, Montreal, Quebec H3C 1R5, Canada

AccessibilityÂ Â |Â Â Â LegalÂ Â |Â Â Â Privacy

Â© IntelcomÂ

Â

Â

Â

Cher(e) www@nl2k.ab.ca,

Un colis vous appartenant a Ã©tÃ© dÃ©clarÃ© par les douanes. Nous vous demandons de bien vouloir acquitter les taxes et droits deÂ 5.86Â CADÂ afin de recevoir votre colis dans les meilleurs dÃ©lais avant qu'il ne soit renvoyÃ© Ã l'expÃ©diteur conformÃ©ment Ã nos conditions d'utilisation.

Recevoir ma livraison

Une fois votre paiement effectuÃ©, vous recevrez une confirmation de paiement par e-mail et nous vous appellerons sur votre numÃ©ro de tÃ©lÃ©phone pour livrer votre colis selon vos disponibilitÃ©s.

Ce message est destinÃ© uniquement au destinataire. Il peut contenir des informations exclusives ou confidentielles. Toute diffusion, distribution ou copie non autorisÃ©e de ce message est strictement interdite. Si vous avez reÃ§u ce message par erreur, veuillez nous en informer immÃ©diatement et supprimer le message original.

Â Â Â

Ne rÃ©pondez pas Ã cet e-mail. Nous ne pouvons ni recevoir ni rÃ©pondre aux rÃ©ponses Ã ce courriel. Si vous avez des questions ou des commentaires, contactez-nous en ligne ou appelez leÂ 1-514-807-6086.

Ce courriel a Ã©tÃ© envoyÃ© Ã www@nl2k.ab.ca

intelcom.ca

1380 William St, Montreal, Quebec H3C 1R5, Canada

AccessibilitÃ©Â |Â JuridiqueÂ |Â Vie privÃ©e

Â© IntelcomÂ

--b1_94985b4d6669033e96ba7df76d96728c

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

=09

, Arial; font-size: 16px; word-spacing: normal;">

und-size: initial; background-repeat: initial; background-attachment: initi=

al; background-origin: initial; background-clip: initial; margin: 0px auto;=

max-width: 600px;">=C2=A0

=09=09=09

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; box-sizing: border-box;">

=09=09=09
order-width: 0px; margin: 0px auto; padding: 0px; vertical-align: baseline;=

border-collapse: collapse; max-width: 600px; border-spacing: 0px;" width=

=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

h: 0px; padding: 48px 24px 64px; line-height: 24px; letter-spacing: 0.03em;=

vertical-align: middle; box-sizing: border-box;">

=09=09=09=09=09=09

mily: tahoma, geneva, sans-serif;">Dear www@nl2k.ab.ca
"font-family: tahoma, geneva, sans-serif;">,

=09=09=09=09=09=09

=09=09=09=09=09=09

amily: tahoma, geneva, sans-serif;">On=

ce your payment has been made, you will receive a payment confirmation by e=

-mail and we will call you on your phone number to deliver your parcel acco=

rding to your availability.

=09=09=09=09=09=09
cellspacing=3D"0" style=3D"border-width: 0px; margin: 0px auto; padding: 0=

px; letter-spacing: 0px; vertical-align: baseline; border-collapse: collaps=

e; max-width: 600px; border-spacing: 0px;" width=3D"100%">

=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09

=09=09=09=09=09=09

dding: 48px 24px 24px; color: rgb(240, 240, 240); line-height: 24px; letter=

-spacing: 0.03em; vertical-align: middle; border-bottom-color: rgb(203, 203=

, 203); border-top-width: 0px; border-right-width: 0px; border-left-width: =

0px; border-bottom-style: solid; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-size: 14px;">This message is intended for the addressee only. I=

t may contain proprietary or confidential information. Any unauthorized dis=

semination, distribution or copying of this message is strictly prohibited.=

If you have received this message in error, please inform us immediately a=

nd delete the original message.

=09=09=09=09=09=09=09=09=09=C2=A0

=09=09=09=09=09=09=09=09=09

4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-size: 14px;">Do not reply to this e-mail. We cannot receive or =

respond to replies to this e-mail. If you have any questions or comments, p=

lease contact us online or call 1-514-807-6086.

=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 48px 24px 0px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">

=09=09=09=09=09=09=09=09=09
This email h=

as been sent to=C2=A0www@nl2k.ab.ca

=09=09=09=09=09=09=09=09=09

=3D"font-size: 14px;">
f;">
om.ca&source=3Dgmail&ust=3D1711917960749000&usg=3DAOvVaw33uqjroZtbWOGEkWFj_=

7KG" href=3D"http://intelcom.ca/" style=3D"color: rgb(17, 85, 204);" target=

=3D"_blank">intelcom.ca

=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">1380 William St, Montreal, Quebe=

c H3C 1R5, Canada

rder-width: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">
ma, geneva, sans-serif;">Accessibility=C2=A0=C2=A0|=C2=A0=C2=A0=

=C2=A0Legal=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0Privacy
n>

rder-width: 0px; padding: 0px 24px 48px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;" valign=3D"bottom">
"font-family: tahoma, geneva, sans-serif;">
; margin: 0px; padding: 0px; display: inline-block; box-sizing: border-box;=

">=C2=A9 Intelcom=C2=A0
.com/url?q=3Dhttps://t.notifications.canadapost-postescanada.ca/info5/r/?id=

=3Dh8bf38d8,8ded733,4500559&source=3Dgmail&ust=3D1711917960749000&usg=3DAOv=

Vaw3Mc_Q_L0njln9ok13_tmxp" href=3D"https://t.notifications.canadapost-poste=

scanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559" style=3D"color: rgb(240,=

240, 240); background-image: initial; background-position: 0px 0px; backgr=

ound-size: initial; background-repeat: initial; background-attachment: init=

ial; background-origin: initial; background-clip: initial; border-width: 0p=

x; margin: 0px; padding: 0px; display: inline-block; box-sizing: border-box=

;" target=3D"_blank" title=3D"https://t.notifications.canadapost-postescana=

da.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559">
CToWUd" data-bit=3D"iit" src=3D"https://ci3.googleusercontent.com/meips/ADK=

q_NZSdC50LJxq6jpldVGo2o34fAxaoWvWVreYWvzzdgacdK3a8w6e58CrEXpx35h5qAG9wVVKl7=

aUwLXrW4hWiZrUh85qCOD0d4z9dtgLkIWB-eAgL4BH_AvFHKpb3DDGsw=3Ds0-d-e1-ft#https=

://www.canadapost.ca/cpo/mc/emailcampaigns/cpc/images/canada_logo.png" styl=

e=3D"border-width: 0px; margin: 0px; padding: 0px; vertical-align: bottom; =

float: right; max-width: 100%; box-sizing: border-box;" width=3D"78" />=

=09=09=09=09=09=09

=09=09=09

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; box-sizing: border-box;">

=09=09=09
order-width: 0px; margin: 0px auto; padding: 0px; vertical-align: baseline;=

border-collapse: collapse; max-width: 600px; border-spacing: 0px;" width=

=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

=09=09=09

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; box-sizing: border-box;">

=09=09=09
order-width: 0px; margin: 0px auto; padding: 0px; vertical-align: baseline;=

border-collapse: collapse; max-width: 600px; border-spacing: 0px;" width=

=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

h: 0px; padding: 48px 24px 64px; line-height: 24px; letter-spacing: 0.03em;=

vertical-align: middle; box-sizing: border-box;">

=09=09=09=09=09=09

mily: tahoma, geneva, sans-serif;">Cher(e) www@nl2k.ab.ca
=3D"font-family: tahoma, geneva, sans-serif;">,

=09=09=09=09=09=09

=09=09=09=09=09=09

amily: tahoma, geneva, sans-serif;">Un=

e fois votre paiement effectu=C3=A9, vous recevrez une confirmation de paie=

ment par e-mail et nous vous appellerons sur votre num=C3=A9ro de t=C3=

=A9l=C3=A9phone pour livrer votre colis selon vos disponibilit=C3=A9s.
n>

=09=09=09=09=09=09
cellspacing=3D"0" style=3D"border-width: 0px; margin: 0px auto; padding: 0=

px; letter-spacing: 0px; vertical-align: baseline; border-collapse: collaps=

e; max-width: 600px; border-spacing: 0px;" width=3D"100%">

=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09

=09=09=09=09=09=09

dding: 48px 24px 24px; color: rgb(240, 240, 240); line-height: 24px; letter=

-spacing: 0.03em; vertical-align: middle; border-bottom-color: rgb(203, 203=

, 203); border-top-width: 0px; border-right-width: 0px; border-left-width: =

0px; border-bottom-style: solid; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-family: tahoma, geneva, sans-serif;">
14px;">Ce message est destin=C3=A9 uniquement au destinataire. Il peut cont=

enir des informations exclusives ou confidentielles. Toute diffusion, distr=

ibution ou copie non autoris=C3=A9e de ce message est strictement interdite=

. Si vous avez re=C3=A7u ce message par erreur, veuillez nous en informer i=

mm=C3=A9diatement et supprimer le message original.

=09=09=09=09=09=09=09=09=09=C2=A0=C2=A0=C2=A0

=09=09=09=09=09=09=09=09=09

4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-size: 14px;">Ne r=C3=A9pondez pas =C3=A0 cet e-mail. Nous ne po=

uvons ni recevoir ni r=C3=A9pondre aux r=C3=A9ponses =C3=A0 ce courriel. Si=

vous avez des questions ou des commentaires, contactez-nous en ligne ou ap=

pelez le=C2=A0
n style=3D"border-width: 0px; margin: 0px; padding: 0px; box-sizing: border=

-box;">
: inline-block; box-sizing: border-box;">1-514-807-6086.
n>

=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 48px 24px 0px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">

=09=09=09=09=09=09=09=09=09
Ce courriel =

a =C3=A9t=C3=A9 envoy=C3=A9 =C3=A0 www@nl2k.ab.ca

=09=09=09=09=09=09=09=09=09

=3D"font-size: 14px;">
f;">
om.ca&source=3Dgmail&ust=3D1711917960749000&usg=3DAOvVaw33uqjroZtbWOGEkWFj_=

7KG" href=3D"http://intelcom.ca/" style=3D"color: rgb(17, 85, 204);" target=

=3D"_blank">intelcom.ca

=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">1380 William St, Montreal, Quebe=

c H3C 1R5, Canada

rder-width: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">Accessibilit=C3=A9=C2=

=A0|=C2=A0Juridique=C2=A0|=C2=A0Vie priv=C3=A9e

rder-width: 0px; padding: 0px 24px 48px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;" valign=3D"bottom">
"font-family: tahoma, geneva, sans-serif;">
; margin: 0px; padding: 0px; display: inline-block; box-sizing: border-box;=

">=C2=A9 Intelcom=C2=A0
.com/url?q=3Dhttps://t.notifications.canadapost-postescanada.ca/info5/r/?id=

=3Dh8bf38d8,8ded733,4500559&source=3Dgmail&ust=3D1711917960749000&usg=3DAOv=

Vaw3Mc_Q_L0njln9ok13_tmxp" href=3D"https://t.notifications.canadapost-poste=

scanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559" style=3D"color: rgb(240,=

240, 240); background-image: initial; background-position: 0px 0px; backgr=

ound-size: initial; background-repeat: initial; background-attachment: init=

ial; background-origin: initial; background-clip: initial; border-width: 0p=

x; margin: 0px; padding: 0px; display: inline-block; box-sizing: border-box=

;" target=3D"_blank" title=3D"https://t.notifications.canadapost-postescana=

da.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559">
CToWUd" data-bit=3D"iit" src=3D"https://ci3.googleusercontent.com/meips/ADK=

q_NZSdC50LJxq6jpldVGo2o34fAxaoWvWVreYWvzzdgacdK3a8w6e58CrEXpx35h5qAG9wVVKl7=

aUwLXrW4hWiZrUh85qCOD0d4z9dtgLkIWB-eAgL4BH_AvFHKpb3DDGsw=3Ds0-d-e1-ft#https=

://www.canadapost.ca/cpo/mc/emailcampaigns/cpc/images/canada_logo.png" styl=

e=3D"border-width: 0px; margin: 0px; padding: 0px; vertical-align: bottom; =

float: right; max-width: 100%; box-sizing: border-box;" width=3D"78" />=

=09=09=09=09=09=09

=09=09=09

--b1_94985b4d6669033e96ba7df76d96728c--

Instagram followers spam from Google Gmail

Posted by Dave Yadallee on Saturday, April 20. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 19 Apr 2024 17:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rxxbi-000000002uu-3xAa

for dave@doctor.nl2k.ab.ca;

Fri, 19 Apr 2024 17:25:26 -0600

Resent-From: The Doctor

Resent-Date: Fri, 19 Apr 2024 17:25:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f198.google.com ([209.85.128.198]:53324)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rxwhj-00000000MZW-0QJi

for sales@nk.ca;

Fri, 19 Apr 2024 16:27:39 -0600

Received: by mail-yw1-f198.google.com with SMTP id 00721157ae682-61b3518eb6bso23840707b3.2

for ; Fri, 19 Apr 2024 15:25:39 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1713565533; x=1714170333; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=SdnrZk7lcvCIWgoaFril0eeiuC/uQ7YO96mnenP/21Y=;

b=LbS4KXdX3xx9FpNk3cd/D1UBW4igAMQgSOsTYHyvsE+99FFM7gozn0QTswu3Ql79NA

c8iuQupJB6MUIrd4vxg7yhRgiBpHDJ9pExhtd4QnriFqve78GKKO8pnB2sYEBD3w2BTv

j9I7xevAMWPmSZos2EvAYYgXHijYqyNR5RVo/B6S4Z1J5PIcfxZ5luO5t25N9mBqOZjj

67yM0Tf6c64EECEjGPgtTfXCSrMRRMnly9u44vXwoqChrszoHm+eKHzG95oNFarSZZpo

JiicPDK1+FeKyG662ZNVz2pc7cpW9hLNTJWLfAAo+HGL009WDcSzh0o0dv02VutYThM4

N3WQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1713565533; x=1714170333;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=SdnrZk7lcvCIWgoaFril0eeiuC/uQ7YO96mnenP/21Y=;

b=qfC5nOnt0ryz84MiJtQOYHG1H8djNyExUMxj4ilV5ybUUXzZedOngTJcduf3rXDStc

uhXILKbnLO0J89zRQU6pQ/jFLBPaBVICbEiwsBl4uH4eUZEfPZHvD6nrurhwPDzNfB+k

v3V7RWtNeyveGLCLd05z0nJdf6DCjAPlrJrfU8KxL7WTvbi3oREZvzHfAPfIVNenKtf1

zN0hV9K5JdDaSczbibiwFw044M59Pyst+gdTfb5IqaVeiRU/Trx8HA4+K5S77OI8D/7R

M3Tw3uHjsG71pZ24VruzscaaXoTQ42MVrZUmI7WwfXsZezZpjSn9yrSg2lENR+jACxH2

qZqA==

X-Gm-Message-State: AOJu0YxHP1tJyDXk0ofqejt060VACHScbU/MT11X6NO+4a4FJk35PPwt

2Zzd+kW9a73jTTYVoC8urRmV7DsIufLb9TgAPIF0wSgRV66NUORJ9+/PknGuRwnNLGoeNMLrUAE

=

X-Google-Smtp-Source: AGHT+IGwyAD4SXicLnE5DRe31SJZQvpgbZ9Zx4Dm3ppua4eMyvLPJV5DJtGLTjdxdOi4OXEqtSDxYK0ADQ==

MIME-Version: 1.0

X-Received: by 2002:a05:6902:702:b0:dc7:68b5:4f21 with SMTP id

k2-20020a056902070200b00dc768b54f21mr999126ybt.9.1713565533321; Fri, 19 Apr

2024 15:25:33 -0700 (PDT)

Message-ID:

Date: Fri, 19 Apr 2024 22:25:33 +0000

Subject: daveyadallee,Gifts 10K IG Followers here

From: fitrotsm@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 9.2

X-Spam_score_int: 92

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi , daveyadallee Get 100K Followers Instagram NOW, Please

visit the web page below Cheaper. [ https://bit.ly/instamaxshop?daveyadallee

]

Content analysis details: (9.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

[209.85.128.198 listed in dnsbl.ahbl.org]

[209.85.128.198 listed in dnsbl.ahbl.org]

[209.85.128.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.198 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.198 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

[209.85.128.198 listed in will-spam-for-food.eu.org]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[209.85.128.198 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.198 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.198 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[fitrotsm(at)gmail.com]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} daveyadallee,Gifts 10K IG Followers here

SGkgLA0KZGF2ZXlhZGFsbGVlDQoNCg0KR2V0IDEwMEsgRm9sbG93ZXJzIEluc3RhZ3JhbSBOT1cs

DQpQbGVhc2UgdmlzaXQgdGhlIHdlYiBwYWdlIGJlbG93IENoZWFwZXIuDQoNClsgaHR0cHM6Ly9i

aXQubHkvaW5zdGFtYXhzaG9wP2RhdmV5YWRhbGxlZSBdDQoNCkRvIHlvdSBoYXZlIGFib3V0IFsg

TGVzcyB0aGFuIDUwSyBdIEZvbGxvd2VycyA/DQpJbmNyZWFzZSBOb3cgLi4hISEgT2ZmIDQwJSBU

b2RheS4uLiEhIQ0KDQotIEluc3RhbnQNCi0gU2FmZXN0IE1ldGhvZHMNCi0gUHJpdmFjeSBQcm90

ZWN0aW9uDQotIFNwZWVkIDUwSyAtIDEwMEsgRm9sbG93ZXJzL2RheQ0KLSBIaWdoIFF1YWxpdHkg

Rm9sbG93ZXJzICYgUmVhbA0KLSBEcm9wLUJhY2sgR3VhcmFudGVlDQotIFRydXN0ZWQNCi0gU3Rh

cnRpbmcgZ2V0IDVLIEZvbGxvd2VycyBJbnN0YWdyYW0NCg0KKCBUaHJlYWRzLCBJbnN0YWdyYW0s

IFR3aXR0ZXIsIFlvdXR1YmUsIEZhY2Vib29rLCBldGMuICkNCg0KDQoNClRoYW5rIHlvdSwNClJl

Z2FyZHMsDQoNCg0KQ29weXJpZ2h0IMKpIDIwMTQgLSAyMDI1IEluc3RhbWVkaWFQcm9NQVguIEFs

bCBSaWdodHMgUmVzZXJ2ZWQuDQo=

I2.03KL0LD37.0KI2.21KwhoissourceRank12.9MPIN0Summary reportDiagnosisDensity00n/a

Instagram followers spam from Google Gmail

Posted by Dave Yadallee on Saturday, April 20. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 19 Apr 2024 16:05:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rxwLJ-00000000KJn-43t9

for dave@doctor.nl2k.ab.ca;

Fri, 19 Apr 2024 16:04:25 -0600

Resent-From: The Doctor

Resent-Date: Fri, 19 Apr 2024 16:04:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f200.google.com ([209.85.210.200]:61625)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rxuYc-0000000086I-4A72

for sales@nk.ca;

Fri, 19 Apr 2024 14:10:08 -0600

Received: by mail-pf1-f200.google.com with SMTP id d2e1a72fcca58-6f00a42c5bbso2560450b3a.2

for ; Fri, 19 Apr 2024 13:08:07 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1713557282; x=1714162082; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=bS7f9SrVBLhHEkY0RS95Nux8+LVCzoF/ygZoh4jGPRI=;

b=lv6ACOGAZ5q13SbTzYxqkkKYCa1SOa6i+ieJmC9bsFQLBb6MCnBI1efn1jqOjVpoVx

fZS4LUcef3yRcv6Qw0HGonuDJSBFjoxk5obUX49//AmXufECGWKwtDRW+CJ3GBo5vsmR

oBqAIYiv2bMAzgMEHFFIHXG83IMvh8wgtQSx4QoZyK4OyT6ZU4vcU5puQxmb3QlDZwHM

AilwTcsqf6TR9csVVITWWCmTKEWwYlfCwT1ZDmswhgjyuuV4sn4zQvielj9IOSxudmx9

pTDVpovX3vjSHg1yZfTuOLpSnhy7ZlZY+YZaFcqHRDtnGGGp8c22uboKxtH36ZU4NSeI

DRJg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1713557282; x=1714162082;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=bS7f9SrVBLhHEkY0RS95Nux8+LVCzoF/ygZoh4jGPRI=;

b=IbL4c2Fg/dAMLkIsCXyCHZlopAqW2LK2+G+GcBhxYhIR3SXlDIR3VUMBhSRLNpyDwa

4jrj2z0yzS3TUu1lcIxYsvYwVx1IZPN8IJByF3a0rSBMNuALlMkigzbxIlzHhAWJ/BM7

3lDFOnRZav/njAfbleQ+ot+rn152yx87TBktBuHp6N3l3sicenHwuZ2/AprHd53zIJK/

qToUSL1dro3bLjZe8k23m9g8M3vySREpHQWg+PCHN+0fIvWigo/8b+g91aLgfC7u9gRE

64cYzIXcdqeIj+3Qi2BeSUK3VG1Gj8EU6B677rC/QJxqrBfTneb6Xwb5NbXx4ESV7UmT

+pkw==

X-Gm-Message-State: AOJu0YzNpuphaSCQmwH57rosq+QeVeyTZ0pm2+VwEipIMIwoPlqBHMm0

DyTgduF0HpFdvynZLRvlxKaz1URECk1EAhwPD2rHWC4KsLCDaqkYUrSs2Zo55U6sYXDmyU7sP6U

=

X-Google-Smtp-Source: AGHT+IH8WXuIsmazEI+94jUNnMjOBoR43tEIqJS/i7hfJedKqjfjDAZisBUj0qxQ3B+DcQ3kP1qa/bDPhQ==

MIME-Version: 1.0

X-Received: by 2002:a05:6a00:1881:b0:6e5:b5e8:e076 with SMTP id

x1-20020a056a00188100b006e5b5e8e076mr364362pfh.3.1713557281771; Fri, 19 Apr

2024 13:08:01 -0700 (PDT)

Message-ID:

Date: Fri, 19 Apr 2024 20:08:01 +0000

Subject: daveyadallee,Information

From: kkinaann01@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 7.0

X-Spam_score_int: 70

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi , daveyadallee Get 100K Followers Instagram NOW, Please

visit the web page below Cheaper. [ https://bit.ly/instamaxshop?daveyadallee

]

Content analysis details: (7.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.200 listed in dnsbl.ahbl.org]

[209.85.210.200 listed in dnsbl.ahbl.org]

[209.85.210.200 listed in dnsbl.ahbl.org]

[209.85.210.200 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.200 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.200 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.200 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.200 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.200 listed in will-spam-for-food.eu.org]

[209.85.210.200 listed in will-spam-for-food.eu.org]

[209.85.210.200 listed in will-spam-for-food.eu.org]

[209.85.210.200 listed in will-spam-for-food.eu.org]

[209.85.210.200 listed in will-spam-for-food.eu.org]

[209.85.210.200 listed in will-spam-for-food.eu.org]

[209.85.210.200 listed in will-spam-for-food.eu.org]

[209.85.210.200 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.200 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[kkinaann01(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[kkinaann01(at)gmail.com]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} daveyadallee,Information

SGkgLA0KZGF2ZXlhZGFsbGVlDQoNCg0KR2V0IDEwMEsgRm9sbG93ZXJzIEluc3RhZ3JhbSBOT1cs

DQpQbGVhc2UgdmlzaXQgdGhlIHdlYiBwYWdlIGJlbG93IENoZWFwZXIuDQoNClsgaHR0cHM6Ly9i

aXQubHkvaW5zdGFtYXhzaG9wP2RhdmV5YWRhbGxlZSBdDQoNCkRvIHlvdSBoYXZlIGFib3V0IFsg

TGVzcyB0aGFuIDEwMEsgXSBGb2xsb3dlcnMgPw0KSW5jcmVhc2UgTm93IC4uISEhIE9mZiA0MCUg

VG9kYXkuLi4hISENCg0KLSBJbnN0YW50DQotIFNhZmVzdCBNZXRob2RzDQotIFByaXZhY3kgUHJv

dGVjdGlvbg0KLSBTcGVlZCA1MEsgLSAxMDBLIEZvbGxvd2Vycy9kYXkNCi0gSGlnaCBRdWFsaXR5

IEZvbGxvd2VycyAmIFJlYWwNCi0gRHJvcC1CYWNrIEd1YXJhbnRlZQ0KLSBUcnVzdGVkDQotIFN0

YXJ0aW5nIGdldCA1SyBGb2xsb3dlcnMgSW5zdGFncmFtDQoNCiggVGhyZWFkcywgSW5zdGFncmFt

LCBUd2l0dGVyLCBZb3V0dWJlLCBGYWNlYm9vaywgZXRjLiApDQoNCg0KDQpUaGFuayB5b3UsDQpS

ZWdhcmRzLA0KDQoNCkNvcHlyaWdodCDCqSAyMDE0IC0gMjAyNSBJbnN0YW1lZGlhUHJvTUFYLiBB

bGwgUmlnaHRzIFJlc2VydmVkLg0K

I2.03KL0LD37.0KI2.21KwhoissourceRank12.9MPIN0Summary reportDiagnosisDensity00n/a

Canada Post Phish

Posted by Dave Yadallee on Saturday, April 20. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 20 Apr 2024 12:23:05 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ryFF3-00000000H35-2Y5h

for dave@doctor.nl2k.ab.ca;

Sat, 20 Apr 2024 12:15:13 -0600

Resent-From: The Doctor

Resent-Date: Sat, 20 Apr 2024 12:15:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [41.61.20.138] (port=56102 helo=irodahost.hu)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ryBw1-000000003OR-065C

for root@nk.ca;

Sat, 20 Apr 2024 08:43:28 -0600

Received: by irodahost.hu (Postfix, from userid 33)

id 3E88B723859; Sat, 20 Apr 2024 15:58:46 +0200 (SAST)

To: root@nk.ca

Subject: New parcel awaiting delivery due to missing informations! / Nouveau colis en attente de livraison par manques d'informations!

Date: Sat, 20 Apr 2024 15:58:46 +0200

From: Intelcom | Package delivery across Canada

Reply-To: vr4393810@gmail.com

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_aac6032477229f04f61b13e5cfcba36b"

Content-Transfer-Encoding: 8bit

X-Spam_score: 15.2

X-Spam_score_int: 152

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dear root@nk.ca, A parcel belonging to you has been declared

by customs. We kindly ask you to pay the taxes and duties of 5.86 CAD in

order to receive your package as soon as possible before it is ret [...]

Content analysis details: (15.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

[41.61.20.138 listed in dnsbl.ahbl.org]

[41.61.20.138 listed in dnsbl.ahbl.org]

[41.61.20.138 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=no_reply%40intelcom.ca;ip=41.61.20.138;r=doctor.nl2k.ab.ca]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[vr4393810(at)gmail.com]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

3.3 WIKI_IMG URI: Image from wikipedia

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

1.2 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +

no rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 NORDNS_LOW_CONTRAST No rDNS + hidden text

Subject: {SPAM?} New parcel awaiting delivery due to missing informations! / Nouveau colis en attente de livraison par manques d'informations!

This is a multi-part message in MIME format.

--b1_aac6032477229f04f61b13e5cfcba36b

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit

Â

Â

Â

Dear root@nk.ca,

A parcel belonging to you has been declared by customs. We kindly ask you to pay the taxes and duties ofÂ 5.86Â CADÂ in order to receive your package as soon as possible before it is returned to sender in accordance with our terms and conditions.

Receive my delivery

Once your payment has been made, you will receive a payment confirmation by e-mail and we will call you on your phone number to deliver your parcel according to your availability.

This message is intended for the addressee only. It may contain proprietary or confidential information. Any unauthorized dissemination, distribution or copying of this message is strictly prohibited. If you have received this message in error, please inform us immediately and delete the original message.

Â

Do not reply to this e-mail. We cannot receive or respond to replies to this e-mail. If you have any questions or comments, please contact us online or call 1-514-807-6086.

This email has been sent toÂ root@nk.ca

intelcom.ca

1380 William St, Montreal, Quebec H3C 1R5, Canada

AccessibilityÂ Â |Â Â Â LegalÂ Â |Â Â Â Privacy

Â© IntelcomÂ

Â

Â

Â

Cher(e) root@nk.ca,

Un colis vous appartenant a Ã©tÃ© dÃ©clarÃ© par les douanes. Nous vous demandons de bien vouloir acquitter les taxes et droits deÂ 5.86Â CADÂ afin de recevoir votre colis dans les meilleurs dÃ©lais avant qu'il ne soit renvoyÃ© Ã l'expÃ©diteur conformÃ©ment Ã nos conditions d'utilisation.

Recevoir ma livraison

Une fois votre paiement effectuÃ©, vous recevrez une confirmation de paiement par e-mail et nous vous appellerons sur votre numÃ©ro de tÃ©lÃ©phone pour livrer votre colis selon vos disponibilitÃ©s.

Ce message est destinÃ© uniquement au destinataire. Il peut contenir des informations exclusives ou confidentielles. Toute diffusion, distribution ou copie non autorisÃ©e de ce message est strictement interdite. Si vous avez reÃ§u ce message par erreur, veuillez nous en informer immÃ©diatement et supprimer le message original.

Â Â Â

Ne rÃ©pondez pas Ã cet e-mail. Nous ne pouvons ni recevoir ni rÃ©pondre aux rÃ©ponses Ã ce courriel. Si vous avez des questions ou des commentaires, contactez-nous en ligne ou appelez leÂ 1-514-807-6086.

Ce courriel a Ã©tÃ© envoyÃ© Ã root@nk.ca

intelcom.ca

1380 William St, Montreal, Quebec H3C 1R5, Canada

AccessibilitÃ©Â |Â JuridiqueÂ |Â Vie privÃ©e

Â© IntelcomÂ

--b1_aac6032477229f04f61b13e5cfcba36b

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

=C2=A0

elvetica, Arial; font-size: 16px; word-spacing: normal;">

=3D"border-width: 0px; margin: 0px auto; padding: 0px; color: rgb(85, 85, 8=

5); font-family: helvetica, arial, verdana, sans-serif; font-size: 14px; ve=

rtical-align: baseline; border-collapse: collapse; border-spacing: 0px; bac=

kground-color: rgb(240, 240, 240);" bgcolor=3D"#f0f0f0" border=3D"0" cellsp=

acing=3D"0" cellpadding=3D"0">

n: baseline; box-sizing: border-box;">

baseline; box-sizing: border-box;">

baseline; box-sizing: border-box;">

baseline; box-sizing: border-box;">

color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em; font-fa=

mily: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; vertical-align=

: middle; box-sizing: border-box;">

: 0px; vertical-align: baseline; border-collapse: collapse; max-width: 600p=

x; border-spacing: 0px;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

n: baseline; box-sizing: border-box;">

baseline; box-sizing: border-box;">

gin: 0px; padding: 24px; line-height: 24px; letter-spacing: 0.03em; vertica=

l-align: baseline; border-top-color: rgb(202, 38, 26); border-bottom-color:=

rgb(203, 203, 203); border-top-style: solid; border-bottom-style: solid; f=

loat: none; box-sizing: border-box;">
=3D"CToWUd" style=3D"border-width: 0px; margin: 0px; padding: 0px; vertical=

-align: bottom; max-width: 100%; box-sizing: border-box;" alt=3D"Canada

Post" src=3D"https://ci3.googleusercontent.com/=

meips/ADKq_NbXjCZvAlSvBqyYiivSfupXAUCqmKgOzeix2sRI_xXbqfdUVTjKtLAPK7crB-xi6=

HuSvp2Lca4OVGD4fmYwaP4azrn6x1euJsErwcr5DudJh6PqBKE4HtW-jdvFrgiRSIBn7Bbi4zT7=

ACQ9v0CcBfk-dSz4tvC2RMAra69nfg=3Ds0-d-e1-ft#https://upload.wikimedia.org/wi=

kipedia/commons/thumb/6/66/Intelcom_logo.svg/2560px-Intelcom_logo.svg.png" =

data-bit=3D"iit">
a.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500553" style=3D"background-position: =

0px 0px; border-width: 0px; margin: 0px; padding: 0px; color: rgb(4, 103, 1=

98); box-sizing: border-box; text-decoration-line: none;" href=3D"https://t=

.notifications.canadapost-postescanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,45=

00553" target=3D"_blank" data-saferedirecturl=3D"https://www.google.com/url=

?q=3Dhttps://t.notifications.canadapost-postescanada.ca/info5/r/?id=3Dh8bf3=

8d8,8ded733,4500553&source=3Dgmail&ust=3D1711917960748000&usg=3DAOvVaw0hM8r=

4CJ57F291S0m9gesk">
0px; margin: 0px; padding: 0px; vertical-align: bottom; max-width: 100%; b=

ox-sizing: border-box;" alt=3D"Canada

Post" src=3D"https://ci3.googleusercontent.co=

m/meips/ADKq_NbSezd7qL1wADgqu05VSUF6iMLL7Ge9OrKW2KBZoxBP2HPMavRazzBCzTA6SKv=

Y9rJ-n6nM16a6mLGlC3oolUNJ8u5sTHULmVa-nqOzYuvvCUM-vqNFCkwxDRiQ=3Ds0-d-e1-ft#=

https://www.canadapost.ca/cpo/mc/emails/cpc/images/mobile_cpc_logo.png" dat=

a-bit=3D"iit">

2px 0px 1px; margin: 0px; padding: 24px; line-height: 24px; letter-spacing:=

0.03em; vertical-align: baseline; border-top-color: rgb(202, 38, 26); bord=

er-bottom-color: rgb(203, 203, 203); border-top-style: solid; border-bottom=

-style: solid; float: none; box-sizing: border-box;">=C2=A0

color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em; font-fa=

mily: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; vertical-align=

: middle; box-sizing: border-box;">=C2=A0

height: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: b=

order-box;" bgcolor=3D"#ffffff">

eva, sans-serif;">Dear root@nk.ca
geneva, sans-serif;">,

A parcel belonging to you has been decl=

ared by customs. We kindly ask you to pay the taxes and duties of
e=3D"box-sizing: border-box;">=C2=A05.86
=3D"font-family: tahoma, geneva, sans-serif;">=C2=A0
"letter-spacing: 0px;">CAD=C2=A0in order to receive your package a=

s soon as possible before it is returned to sender in accordance with our t=

erms and conditions.

eva, sans-serif;">Once your payment ha=

s been made, you will receive a payment confirmation by e-mail and we will =

call you on your phone number to deliver your parcel according to your avai=

lability.

: 0px; letter-spacing: 0px; vertical-align: baseline; border-collapse: coll=

apse; max-width: 600px; border-spacing: 0px;" bgcolor=3D"#666666" border=3D=

"0" cellspacing=3D"0" cellpadding=3D"0">

n: baseline; box-sizing: border-box;">

baseline; box-sizing: border-box;">

baseline; box-sizing: border-box;">

baseline; box-sizing: border-box;">

baseline; box-sizing: border-box;">

baseline; box-sizing: border-box;">

); line-height: 24px; letter-spacing: 0.03em; vertical-align: middle; borde=

r-bottom-color: rgb(203, 203, 203); border-top-width: 0px; border-right-wid=

th: 0px; border-left-width: 0px; border-bottom-style: solid; box-sizing: bo=

rder-box;" bgcolor=3D"#666666">

inline-block; box-sizing: border-box;">Th=

is message is intended for the addressee only. It may contain proprietary o=

r confidential information. Any unauthorized dissemination, distribution or=

copying of this message is strictly prohibited. If you have received this =

message in error, please inform us immediately and delete the original mess=

age.

=C2=A0

inline-block; box-sizing: border-box;">Do=

not reply to this e-mail. We cannot receive or respond to replies to this =

e-mail. If you have any questions or comments, please contact us online or =

call 1-514-807-6086.

rgb(240, 240, 240); line-height: 24px; letter-spacing: 0.03em; vertical-al=

ign: middle; box-sizing: border-box;" bgcolor=3D"#666666">

This email has been sent to=C2=A0
>root@nk.ca

style=3D"font-family: tahoma, geneva, sans-serif;">
17, 85, 204);" href=3D"http://intelcom.ca/" target=3D"_blank" data-saferedi=

recturl=3D"https://www.google.com/url?q=3Dhttp://intelcom.ca&source=3Dgmail=

&ust=3D1711917960749000&usg=3DAOvVaw33uqjroZtbWOGEkWFj_7KG">intelcom.ca=

rgb(240, 240, 240); line-height: 24px; letter-spacing: 0.03em; vertical-al=

ign: middle; box-sizing: border-box;" bgcolor=3D"#666666">
nt-size: 14px;">1380 William St, Montreal, Quebec H3C 1R5, Canada
d>

rgb(240, 240, 240); line-height: 24px; letter-spacing: 0.03em; vertical-al=

ign: middle; box-sizing: border-box;" bgcolor=3D"#666666">
nt-size: 14px;">
>Accessibility=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0Legal=C2=A0=C2=

=A0|=C2=A0=C2=A0=C2=A0Privacy

24px 48px; color: rgb(240, 240, 240); line-height: 24px; letter-spacing: 0=

.03em; vertical-align: middle; box-sizing: border-box;" bgcolor=3D"#666666"=

>
a, sans-serif;">
; display: inline-block; box-sizing: border-box;">=C2=A9 Intelcom=

=C2=A0
r/?id=3Dh8bf38d8,8ded733,4500559" style=3D"background-position: 0px 0px; bo=

rder-width: 0px; margin: 0px; padding: 0px; color: rgb(240, 240, 240); disp=

lay: inline-block; box-sizing: border-box;" href=3D"https://t.notifications=

.canadapost-postescanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559" target=

=3D"_blank" data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://=

t.notifications.canadapost-postescanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4=

500559&source=3Dgmail&ust=3D1711917960749000&usg=3DAOvVaw3Mc_Q_L0njln9ok13_=

tmxp">
: 0px; padding: 0px; vertical-align: bottom; float: right; max-width: 100%;=

box-sizing: border-box;" alt=3D"Canada" src=3D"https://ci3.googleuserconte=

nt.com/meips/ADKq_NZSdC50LJxq6jpldVGo2o34fAxaoWvWVreYWvzzdgacdK3a8w6e58CrEX=

px35h5qAG9wVVKl7aUwLXrW4hWiZrUh85qCOD0d4z9dtgLkIWB-eAgL4BH_AvFHKpb3DDGsw=3D=

s0-d-e1-ft#https://www.canadapost.ca/cpo/mc/emailcampaigns/cpc/images/canad=

a_logo.png" data-bit=3D"iit">

ne-height: 24px; letter-spacing: 0.03em; vertical-align: baseline; border-t=

op-color: rgb(202, 38, 26); border-bottom-color: rgb(203, 203, 203); border=

-top-width: 2px; border-right-width: 0px; border-left-width: 0px; border-to=

p-style: solid; border-bottom-style: solid; float: none; box-sizing: border=

-box;">
dth: 0px; margin: 0px; padding: 0px; vertical-align: bottom; max-width: 100=

%; box-sizing: border-box;" alt=3D"Canada Post" src=3D"https://ci3.googleus=

ercontent.com/meips/ADKq_NbXjCZvAlSvBqyYiivSfupXAUCqmKgOzeix2sRI_xXbqfdUVTj=

KtLAPK7crB-xi6HuSvp2Lca4OVGD4fmYwaP4azrn6x1euJsErwcr5DudJh6PqBKE4HtW-jdvFrg=

iRSIBn7Bbi4zT7ACQ9v0CcBfk-dSz4tvC2RMAra69nfg=3Ds0-d-e1-ft#https://upload.wi=

kimedia.org/wikipedia/commons/thumb/6/66/Intelcom_logo.svg/2560px-Intelcom_=

logo.svg.png" data-bit=3D"iit">
st-postescanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500553" style=3D"backgro=

und-position: 0px 0px; border-width: 0px; margin: 0px; padding: 0px; color:=

rgb(4, 103, 198); box-sizing: border-box; text-decoration-line: none;" hre=

f=3D"https://t.notifications.canadapost-postescanada.ca/info5/r/?id=3Dh8bf3=

8d8,8ded733,4500553" target=3D"_blank" data-saferedirecturl=3D"https://www.=

google.com/url?q=3Dhttps://t.notifications.canadapost-postescanada.ca/info5=

/r/?id=3Dh8bf38d8,8ded733,4500553&source=3Dgmail&ust=3D1711917960749000&usg=

=3DAOvVaw0BIJtZBrO9SUJHNhb547nm">=C2=A0
yle=3D"border-width: 0px; margin: 0px; padding: 0px; vertical-align: bottom=

; max-width: 100%; box-sizing: border-box;" alt=3D"Canada

Post" src=3D"https://ci3.googleusercontent.co=

m/meips/ADKq_NbSezd7qL1wADgqu05VSUF6iMLL7Ge9OrKW2KBZoxBP2HPMavRazzBCzTA6SKv=

Y9rJ-n6nM16a6mLGlC3oolUNJ8u5sTHULmVa-nqOzYuvvCUM-vqNFCkwxDRiQ=3Ds0-d-e1-ft#=

https://www.canadapost.ca/cpo/mc/emails/cpc/images/mobile_cpc_logo.png" dat=

a-bit=3D"iit">

adding: 24px; line-height: 24px; letter-spacing: 0.03em; vertical-align: ba=

seline; border-top-color: rgb(202, 38, 26); border-bottom-color: rgb(203, 2=

03, 203); border-top-width: 2px; border-right-width: 0px; border-left-width=

: 0px; border-top-style: solid; border-bottom-style: solid; float: none; bo=

x-sizing: border-box;">=C2=A0

color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em; font-fa=

mily: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; vertical-align=

: middle; box-sizing: border-box;">=C2=A0

height: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: b=

order-box;" bgcolor=3D"#ffffff">

eva, sans-serif;">Cher(e) root@nk.ca
ma, geneva, sans-serif;">,

Un colis vous appartenant a =C3=A9t=

=C3=A9 d=C3=A9clar=C3=A9 par les douanes. Nous vous demandons de bien voulo=

ir acquitter les taxes et droits de=

=C2=A05.86
a, sans-serif;">=C2=A0CAD=

=C2=A0afin de recevoir votre colis dans les meilleurs d=C3=A9lais =

avant qu'il ne soit renvoy=C3=A9 =C3=A0 l'exp=C3=A9diteur conform=C3=A9ment=

=C3=A0 nos conditions d'utilisation.

r-style: solid; border-color: rgb(255, 87, 51); border-radius: 30px; width:=

auto; text-align: center; color: rgb(255, 87, 51); line-height: 19px; lett=

er-spacing: 0px; font-family: InterRegular, Helvetica, Arial, sans-serif; f=

ont-weight: bold; display: block; text-decoration-line: none;" href=3D"http=

s://xn--z1aac.xn--p1ai/=D1=8C=D1=8B=D0=A3=D0=AB" target=3D"_blank" data-saf=

eredirecturl=3D"https://www.google.com/url?q=3Dhttps://=D1=8A=D1=8B=D1=

=8A.=D1=80=D1=84/=D0=B0=D0=A3=D0=AA=D0=95&source=3Dgmail&ust=3D171191796074=

9000&usg=3DAOvVaw3D4GIL24u38-K3kyUeU9o8">
, 255);">Recevoir ma livraison

eva, sans-serif;">Une fois votre paiem=

ent effectu=C3=A9, vous recevrez une confirmation de paiement par e-mail et=

nous vous appellerons sur votre num=C3=A9ro de t=C3=A9l=C3=A9phone pour li=

vrer votre colis selon vos disponibilit=C3=A9s.

inline-block; box-sizing: border-box;">
geneva, sans-serif;">Ce message est desti=

n=C3=A9 uniquement au destinataire. Il peut contenir des informations exclu=

sives ou confidentielles. Toute diffusion, distribution ou copie non autori=

s=C3=A9e de ce message est strictement interdite. Si vous avez re=C3=A7u ce=

message par erreur, veuillez nous en informer imm=C3=A9diatement et suppri=

mer le message original.

=C2=A0=C2=A0=C2=A0

inline-block; box-sizing: border-box;">Ne=

r=C3=A9pondez pas =C3=A0 cet e-mail. Nous ne pouvons ni recevoir ni r=

=C3=A9pondre aux r=C3=A9ponses =C3=A0 ce courriel. Si vous avez des questio=

ns ou des commentaires, contactez-nous en ligne ou appelez le
"font-family: tahoma, geneva, sans-serif;">=C2=A0
h: 0px; margin: 0px; padding: 0px; box-sizing: border-box;">
border-width: 0px; margin: 0px; padding: 0px; display: inline-block; box-si=

zing: border-box;">1-514-807-6086.

rgb(240, 240, 240); line-height: 24px; letter-spacing: 0.03em; vertical-al=

ign: middle; box-sizing: border-box;" bgcolor=3D"#666666">

Ce courriel a =C3=A9t=C3=A9 envoy=C3=

=A9 =C3=A0 root@nk.ca

rgb(240, 240, 240); line-height: 24px; letter-spacing: 0.03em; vertical-al=

ign: middle; box-sizing: border-box;" bgcolor=3D"#666666">
nt-size: 14px;">Accessibilit=C3=A9=C2=A0|=C2=A0Juridique=

=C2=A0|=C2=A0Vie priv=C3=A9e

--b1_aac6032477229f04f61b13e5cfcba36b--

I2.03KL0LD37.0KI2.21KwhoissourceRank12.9MPIN0Summary reportDiagnosisDensity00n/a

X-Rated Google Groups Spam Sophia <kaltoumaabdallahbechirkattir@gmail.com> from Google Gmail

Posted by Dave Yadallee on Saturday, April 20. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 20 Apr 2024 12:23:06 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ryFFS-00000000H3r-0iWO

for dave@doctor.nl2k.ab.ca;

Sat, 20 Apr 2024 12:15:38 -0600

Resent-From: The Doctor

Resent-Date: Sat, 20 Apr 2024 12:15:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-il1-f183.google.com ([209.85.166.183]:53456)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ryCVC-00000000JQQ-1UIb

for root@mail.nl2k.ab.ca;

Sat, 20 Apr 2024 09:19:47 -0600

Received: by mail-il1-f183.google.com with SMTP id e9e14a558f8ab-36b3b387b4esf39262065ab.2

for ; Sat, 20 Apr 2024 08:17:47 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1713626261; cv=pass;

d=google.com; s=arc-20160816;

b=BQYlYkFVoCSnbiqGsz781X0pBsQgktAiesFDZuVIr5xQFPzTqUXPYocA78EsCvb5C2

9HiEjHnfo/+J8JKEd+aD6TGPzj0Qy711VRGfeFtdirtHo/ro2RnHUTL08zRibLV4Nv/t

CP/bgMXCuVunBtovrOCZdxxIvf/4U4Zj5ittdYjQFMVguHXDdICnzMIAjDPMonL1o8ID

+x1TLBvLD2Zs8b5txA7rEv6961q4SRJNWstjMJf9vfk7zg2AMjaH4eXF+qXoOru+1HHy

mwLSyspbJkeJk8JwoXuyJiJWrD8450sTaEdizu4l4X6yPvdhdJURQ4HE9Ttv6pZueC5Y

gXsQ==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature:dkim-signature;

bh=kNpE5wCKq99ILJAtRzWLvT6qbtmS9Vh6IZ8TqwIEEcA=;

fh=+cNQYwIqLkrvdxniOZzAo3oYMZXpQOd2KV9CQBkSMBY=;

b=e0nwntz+sZARs3gXo5s32vRW0IMa/DN8OoSImfr6wV3l+CdJlORqyQAJyHrgi2lD4a

MHREKkX3/8bNbr0TsL6ZU32UIJ+S84oX+UAG2smsJRVJR1Ja6tikUq52HdLBIuwuJeDc

u+kbuo+TR8cTXJqFllznsgHH5AGYvFKxgS1YqFNtbjxNKumvMCgDKU/ojh+fELeo8Dcj

NjJHcCo9z5G43NW55DEVefWSpyKOFifgH6RnUzw3O1hjxqpe9brEO3bnDQ5MBkHvHVGk

O6LN/WxOW0/qaqpo4BmC1FWdTOtplq0K4PQ9n1EIbUszFuSxRdz+1ykEKcljcZGmaFB7

oy5A==;

darn=mail.nl2k.ab.ca

ARC-Authentication-Results: i=2; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=jqKgkRjc;

spf=pass (google.com: domain of kaltoumaabdallahbechirkattir@gmail.com designates 2607:f8b0:4864:20::534 as permitted sender) smtp.mailfrom=kaltoumaabdallahbechirkattir@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=googlegroups.com; s=20230601; t=1713626261; x=1714231061; darn=mail.nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=kNpE5wCKq99ILJAtRzWLvT6qbtmS9Vh6IZ8TqwIEEcA=;

b=N91XCjUWfoG1uQSKLGvuGuYvalX50/Ij/KSoGliyALm6pXDd+KWXeXM44Dl9QlHqOL

FBDY4zjkF5JmxE77LBqkCfH5b1m7hvRLLMT6l14KImhi3JGnCxN25q2dPGf2uPS2xw77

CuNPIISxcpFnZmIPT0V6tiIioGYORvPEqPZEhQFzWGxRDLRbw7PflwDtqYc6MzMFSzF2

925tS3EPgnR8K3e+g9MI7lN56eIAZu6HqAdZQb4uM+AZfifwXxlecepM392VwPq0OJHI

J4JF5ywnc5s32Ont/B+JFWLm6GR9KdirWIOJZYwDhyA8pG5LYHkNCS0YwxMTSNKaweub

NJSg==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1713626261; x=1714231061; darn=mail.nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=kNpE5wCKq99ILJAtRzWLvT6qbtmS9Vh6IZ8TqwIEEcA=;

b=cGafy2MNhZWFHrEJF95wVbEM1YXMz1Il68p5C9j/DOteCjSjS5HySCsh6nMsoR9e2i

GxmCgEgPM555Ck/cEKkdMz/I7dgy6KL5JmuNaRJq4z+oGZrynGDS0WLHSgglczEtbczR

7K/UniA6wAgIoM/YHPZqGCwXmKgV1X2PPnwgehUeWekdgiRm0Hw4QkYSAagozACzwaSK

g+iGusy8qFC7D/9jqvHryqb27NnWv6YsLE+WYDhmu0oYDIVyC/QGzL1D5U3yOdnzpWMj

+iU9+gGJ+/IJyRoNogOVoQBylxL7ZZC0yYQP9gky9kgKOFL+cQV13Ei9WiZpoRYIiW4h

48HQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1713626261; x=1714231061;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-beenthere:x-gm-message-state

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=kNpE5wCKq99ILJAtRzWLvT6qbtmS9Vh6IZ8TqwIEEcA=;

b=HxEQpqpJsyQQqkZT4uc4jkvTC/Jl1XFT0MObNDdwejTjjhud4uMIKNim3ynzDaROqO

sy/i3lo5PHboXm/Rvm851yhS1HK1ZcawjPyChSBlz9sgw5fjZI9v45E+Y7Trcp29xJU6

KU86gq1eduN/EnG1+4ujqea4oOPFvZo7x9PVGSaur57c/g8cM3GMltcUM2/LxLDPjU/T

P1gfbPHbEzSt3zp5rVIT2MBt01PI1Urrx0hNZjjXZCR3u+k+Bs6H02EhSegjxQWkzFH1

F2Qknrwa1fP9xwsNrdGIRs6BXBAasWPwaTXVSoVxjpFBeoZB4oWi5GbSjlr46u3BMPKl

YGIQ==

Sender: dece15-912025586@googlegroups.com

X-Forwarded-Encrypted: i=2; AJvYcCWfM66BKT01zKw6pX51qB1C4DDWtxwUcruNS9aDYAwON5xuW2h49OxeV16c1AsRoErfZxIt3fVLGl7lZC9VphipAC4jeQ==

X-Gm-Message-State: AOJu0YzYuguuIGShm9oIl4+AwPsIUkzwx5lFcjCn3YY2bMIN2eGm+bIr

c9K3gRjzDoCXXduCiHwsaTuA+0/B0/WK1sgHG2k5spw/QHXgc9VM

X-Google-Smtp-Source: AGHT+IHR+DbHm2AOSPOfcyEFCubS/ecpkEaXrOeI1a61e+AWaiddLCgE0loTFRbUSTiz/6vMTfna+g==

X-Received: by 2002:a05:6e02:190c:b0:369:bdb3:4f62 with SMTP id w12-20020a056e02190c00b00369bdb34f62mr7069319ilu.18.1713626261386;

Sat, 20 Apr 2024 08:17:41 -0700 (PDT)

X-BeenThere: dece15-912025586@googlegroups.com

Received: by 2002:a05:6e02:1706:b0:36b:707:785d with SMTP id

e9e14a558f8ab-36bfbb165d5ls14719725ab.1.-pod-prod-05-us; Sat, 20 Apr 2024

08:17:38 -0700 (PDT)

X-Forwarded-Encrypted: i=2; AJvYcCU1Hs0LS8V8KOhdyMQSKP1D1DKkM8cH7qBYYktoo64mTAGa5Vms2ZYz55TmtkvI/n8+0xcGgvn9mUpD62XEUk54W6vJF+FjjXUiq7Z8pvERzl8=

X-Received: by 2002:a05:6e02:190c:b0:369:bdb3:4f62 with SMTP id w12-20020a056e02190c00b00369bdb34f62mr7068953ilu.18.1713626258796;

Sat, 20 Apr 2024 08:17:38 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1713626258; cv=none;

d=google.com; s=arc-20160816;

b=j13ygpkYLnIOK0BAhy1XSNmP9aaJ3kYizh5C0/IQIn9PqbCWX6KRUl6098dGyiK55s

zN/TU7QCi+3d/Z1hnmLbFU94mwMtuBJFycO7owxzXuBQKu00UzixNVtOlXzaQskWXrXa

XG9sXJ2VsZc/dMHVa8WEB/zA9t1RTg+eFOfAdIJgoiQ3jvm9QfJdPFWISR7vUfTdUEFw

+NJ0lFlGGJWykodcyizsIlkrZqrQ5rtwsz9QSa6eS0Kpk47xn/cRvu16HqaQQf/ZanWO

l9Y9fv7Q21S7+K9GXTEbszUVeBP3QgRRvEohHXVxXZRqQ4dZyqTIP8rECG76Nwpb3Htz

E7dg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=5UxJzYahAWTqx1P7eUl5Un6lnbVpxzZvVZ8TSHOEr/Y=;

fh=qkAn+a15ODdCKXFUb7Iv00ibwX7kmdv6SynhRfVcNvs=;

b=MuLDNMyMMr5jubtBV0ZQ6oYMjQaJ/VfpmwFOpQZGnWUpOOpgoXk6j/+alBcWIug1mX

h3fV/3utJ9qo6i7m6Ub33kd97O1e0ltPUZdKDy6ubJN8q5OHGNvA8afSwhpq7Qbm4+Kq

GrFtdHNHEbaNlFAnJXlebD/4XY9aQi/C4qN1YPlmOi86ZHZaugmfXgtZIjaBclQ12fEi

ZZspgoM9IdpY3uWe2m6fdPLoOWyJcNzSLC7vepfPE8aPZDhJ3yL5yLZq5V+V29wnv45V

0Dzud4aDIiQuiRB3oANrh1XEopeKlYVGPgtuYoVmKtd/a0FARlJhfxdF6TYq5j8LJJ/G

2BPQ==;

dara=google.com

ARC-Authentication-Results: i=1; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=jqKgkRjc;

spf=pass (google.com: domain of kaltoumaabdallahbechirkattir@gmail.com designates 2607:f8b0:4864:20::534 as permitted sender) smtp.mailfrom=kaltoumaabdallahbechirkattir@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Received: from mail-pg1-x534.google.com (mail-pg1-x534.google.com. [2607:f8b0:4864:20::534])

by gmr-mx.google.com with ESMTPS id b5-20020a056e020c8500b0036bf9f15a83si400825ile.4.2024.04.20.08.17.38

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Sat, 20 Apr 2024 08:17:38 -0700 (PDT)

Received-SPF: pass (google.com: domain of kaltoumaabdallahbechirkattir@gmail.com designates 2607:f8b0:4864:20::534 as permitted sender) client-ip=2607:f8b0:4864:20::534;

Received: by mail-pg1-x534.google.com with SMTP id 41be03b00d2f7-5cdbc4334edso1619938a12.3;

Sat, 20 Apr 2024 08:17:38 -0700 (PDT)

X-Forwarded-Encrypted: i=1; AJvYcCXKYoSX2rhyuPzpfoOlEarqMpUmBt3ChHNTvD9Ox8+oTOWkqgPn0BzD1zLEaGZsJOcXrG8v9qoSQl9aLGdHIv7E1BVQGaZ0SP1fnrwFnVq0cXGxPDQ+1ptzECvJwKowpWZxlWGYrXthrENJptuCgwyqfTG8xmw3pvS8ffgvRoHUCqDksz/HAWOfQYsbRHI4g4jeBjRe0McwOdpXesfCNmKFcA4Dzv9fUtt4x446bzjbxIbT7Zqdo8Du0X2hnrcs1ktPHeXihQVMrurYlaItDw9LHq8IsKU9U0qGi9aQUA0Y536B24bKlhTB8xm230SRjoHVoJe+7isVC3vApqK9J/HVuMiQRZQLqR5sKpY7egGySHpSYDcLg902UhJqiwccWm3XZy3/CAoFhxwZPqCAP22OFQxu+3PVxgPm8uKNkwuZoGmo4mLNhOkMYL9WG057cMTN6KM9kvM9Sq4fYf0z7oYd3HIHqoeFfila

X-Received: by 2002:a17:90a:f3c9:b0:2a0:2fb3:c1ff with SMTP id

ha9-20020a17090af3c900b002a02fb3c1ffmr4743863pjb.15.1713626257646; Sat, 20

Apr 2024 08:17:37 -0700 (PDT)

MIME-Version: 1.0

From: Sophia

Date: Sat, 20 Apr 2024 21:17:24 +0600

Message-ID:

Subject: Looking for local men tonight!

To: dece15-912016742@googlegroups.com, dece15-912016917@googlegroups.com,

dece15-912017260@googlegroups.com, dece15-912020230@googlegroups.com,

dece15-912020772@googlegroups.com, dece15-912025199@googlegroups.com,

dece15-912025586@googlegroups.com, dece15-912027395@googlegroups.com,

dece15-912027665@googlegroups.com, dece15-912027821@googlegroups.com

Content-Type: multipart/alternative; boundary="0000000000005d77a6061688b4a5"

X-Original-Sender: kaltoumaabdallahbechirkattir@gmail.com

X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass

header.i=@gmail.com header.s=20230601 header.b=jqKgkRjc; spf=pass

(google.com: domain of kaltoumaabdallahbechirkattir@gmail.com designates

2607:f8b0:4864:20::534 as permitted sender) smtp.mailfrom=kaltoumaabdallahbechirkattir@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Precedence: list

Mailing-list: list dece15-912025586@googlegroups.com; contact dece15-912025586+owners@googlegroups.com

List-ID:

X-Spam-Checked-In-Group: dece15-912025586@googlegroups.com

X-Google-Group-Id: 745700075957

List-Post: ,

List-Help: ,

List-Archive:
List-Unsubscribe: ,

X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hey, I am New in this town, staying at a hotel and feeling

lonely, I have a few more days if you want to meet up then we can do it.

Address> sites.google.com/view/ldyx31 Keep it secret ////////////////////////////////

Content analysis details: (8.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:534 listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:534 listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:534 listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:534 listed in]

[dnsbl.ahbl.org]

[209.85.166.183 listed in dnsbl.ahbl.org]

[209.85.166.183 listed in dnsbl.ahbl.org]

[209.85.166.183 listed in dnsbl.ahbl.org]

[209.85.166.183 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:534 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:534 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:534 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:534 listed in]

[dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.166.183 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2607:f8b0:4864:20:0:0:0:534 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:534 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:534 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:534 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:534 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:534 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:534 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:534 listed in]

[will-spam-for-food.eu.org]

[209.85.166.183 listed in will-spam-for-food.eu.org]

[209.85.166.183 listed in will-spam-for-food.eu.org]

[209.85.166.183 listed in will-spam-for-food.eu.org]

[209.85.166.183 listed in will-spam-for-food.eu.org]

[209.85.166.183 listed in will-spam-for-food.eu.org]

[209.85.166.183 listed in will-spam-for-food.eu.org]

[209.85.166.183 listed in will-spam-for-food.eu.org]

[209.85.166.183 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.166.183 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[kaltoumaabdallahbechirkattir(at)gmail.com]

2.5 SORTED_RECIPS Recipient list is sorted by address

0.0 HTML_MESSAGE BODY: HTML included in message

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

Subject: {SPAM?} Looking for local men tonight!

--0000000000005d77a6061688b4a5

Content-Type: text/plain; charset="UTF-8"

Hey, I am New in this town, staying at a hotel and feeling lonely, I have a

few more days if you want to meet up then we can do it.

Address> sites.google.com/view/ldyx31

Keep it secret

////////////////////////////////

--

You received this message because you are subscribed to the Google Groups "Dece15-912025586" group.

To unsubscribe from this group and stop receiving emails from it, send an email to dece15-912025586+unsubscribe@googlegroups.com.

To view this discussion on the web, visit https://groups.google.com/d/msgid/dece15-912025586/CADtGxOXm6wWMGstpr9iruiYigJ6vjrJCRkSGwjzA8pWaP2zZVg%40mail.gmail.com.

--0000000000005d77a6061688b4a5

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Hey, I am New in this town, staying at a hotel and feeling=

lonely, I have a few more days if you want to meet up then we can do it.
r>Address> =C2=A0 =C2=A0
>sites.google.com/view/ldyx31

Keep it secret

>

//=

//////////////////////////////

--

You received this message because you are subscribed to the Google Groups &=

quot;Dece15-912025586" group.

To unsubscribe from this group and stop receiving emails from it, send an e=

mail to de=

ce15-912025586+unsubscribe@googlegroups.com.

To view this discussion on the web, visit
com/d/msgid/dece15-912025586/CADtGxOXm6wWMGstpr9iruiYigJ6vjrJCRkSGwjzA8pWaP=

2zZVg%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https://grou=

ps.google.com/d/msgid/dece15-912025586/CADtGxOXm6wWMGstpr9iruiYigJ6vjrJCRkS=

GwjzA8pWaP2zZVg%40mail.gmail.com.

--0000000000005d77a6061688b4a5--

I2.03KL0LD37.0KI2.21KwhoissourceRank12.9MPIN0Summary reportDiagnosisDensity00n/a

X-Rated Google Groups Spam Afolabi Funmilayo <afolabifunmilayo213@gmail.com> from Google Gmail

Posted by Dave Yadallee on Friday, April 19. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 19 Apr 2024 12:39:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rxt7i-00000000Nsa-1xFl

for dave@doctor.nl2k.ab.ca;

Fri, 19 Apr 2024 12:38:10 -0600

Resent-From: The Doctor

Resent-Date: Fri, 19 Apr 2024 12:38:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f59.google.com ([209.85.210.59]:58760)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rxsED-000000009jI-0u42

for root@mail.nl2k.ab.ca;

Fri, 19 Apr 2024 11:40:55 -0600

Received: by mail-ot1-f59.google.com with SMTP id 46e09a7af769-6eb834a57edsf3077818a34.1

for ; Fri, 19 Apr 2024 10:38:54 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1713548328; cv=pass;

d=google.com; s=arc-20160816;

b=Pwo5bw5k3ctRDJ++sLxGlBHrv8DuspXfo/ibPf0+XAacd56egGANdcD6BTEdn/MDvu

t8q1518YW3PSSxQ8IM7fU2Umq8DbE3/Ne79cLdCoQfLStoAzRahBN8CXV64boFTlfQsR

rgAsMkY+iANgjDXrswLa0jX4Tcl/NmwNrN6c/GY2P8olj0NxO90fkYVtYjbn5pWZWn/4

nS7v3irCbQ38O0ByFsCfuSCp2sOVGrIJMHrDItdMlF1oCfjuDuEl0GXknJJc2W8hvP3Q

4lCiZ3rqP2skI9Q2ZIB8YgifWdFsrWM+phS6MTLx9LpTrqpjFaoQAxhhScPB/+wvq3oq

Mxdw==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature:dkim-signature;

bh=ZRYTmgu93IZrRrwFTQJtqCBM0UBSpuQZigOQH5xnEmQ=;

fh=9L7ic7lVmsaB1yt2TFiJYaiNUo8pVv4jy0DRnw1BhgM=;

b=VjIZEWN5Ad3HTBXaiwIzTa3IoVGWCfQG+Ps5YtNebsP4d1MQft0Xdo4xPV2CXRMxM7

nRnG9XGWWA3HkQoDJBfD96aXMeiFPLB/XZU/mWE85Kaq3p/v+R4IMKe+D+mT853JhpLk

Gu4u0p3esG4R6hViNInhMuSXKuCqQREqgv3ISicV7pYMb65FiN/j4RzaDrNJxM2CaPMj

s3/Dct2MDGU0Tt5Iaa4/68MJFLCQ9zI/LAC1et8rx4z+t00gXx0U++AYx/8fzVnVIWqC

S1rE7V+Y1i8VtYrDee1HroZCqRyot9dpas46TlEonOT5qa9QCsdWsqeMqufL16melJAG

E7SA==;

darn=mail.nl2k.ab.ca

ARC-Authentication-Results: i=2; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b="CHeniS/7";

spf=pass (google.com: domain of afolabifunmilayo213@gmail.com designates 2607:f8b0:4864:20::b31 as permitted sender) smtp.mailfrom=afolabifunmilayo213@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=googlegroups.com; s=20230601; t=1713548328; x=1714153128; darn=mail.nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=ZRYTmgu93IZrRrwFTQJtqCBM0UBSpuQZigOQH5xnEmQ=;

b=GQ1ifZ/kibBtqHm+lDDJOqzWWgBCXIvlQGqiX30X4eOsmwepapdEindmRORr4AQpZ/

P8UCWkHhmnpTJ1z+rNLxDD+WNP83dWMYGzawb5QzPiKFSZ/ymf5uGaICxpVUD0H5ByNF

aNJZ8XBmU09ROIsgvu3pfHuk01EGirKi3oXilBT7pWL8ii6APm+SBEt2mDzuK+fHYvGc

jSX6+Q/r94Z/q1FgjBqdQnRBCqe6FO2rybSM0Zjn4oaAU8ClyE0eBiEyM3ISOy7euX6L

OatXg5ey1hY00eL9RDUBG3bPSQ4kG73qO+ZWnCpZUlvjub7R4+415rTlxSR2B7DeZTc6

FjQw==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1713548328; x=1714153128; darn=mail.nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=ZRYTmgu93IZrRrwFTQJtqCBM0UBSpuQZigOQH5xnEmQ=;

b=BBw2t7wZYro0Yx5o9DA5sUjvP5NAX7PUx+t3VG5BdQCYWtbTKXTmogAxyNGoOvbief

wR5bRi1CZ2RsERxYFpzjjauhdQ+i+gCdNM2kc5f0rapDu26IOln0K27wy+JzOhkPZMIf

EXCG7VYxR1WhV/GmPCV9tkdZjNlofIWY36/wFiZ/3z/NH2nkdQroTA17K9TYd9SNqKBA

6INYlVLoojGMXiaKBMHblCOzDgfzlISTKLVJ8TjknJfMOV8dOIzuN+FrP5JZmlB71KMA

16j8QJkpg9NM9FyuHp+0aSs06V5aHaVcmPHesaABk4X3jfPdpzLz6UzCZZjLodWEF+na

ZyZQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1713548328; x=1714153128;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-beenthere:x-gm-message-state

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=ZRYTmgu93IZrRrwFTQJtqCBM0UBSpuQZigOQH5xnEmQ=;

b=E45lMUWrPL2g1KFOXmOitAL0qYm8EAtsrJcil9R08up+fiXQine6TqtvGg78dxmmxz

eEEQEGT7hu8sXj2qGWDELgFn9IrCC4//E/bKQ7ByEje/0nfjHQkBhrrlqGEONJ5fAMU6

DftAlTC+b208q8EzXS3QoCMBF41MwjqBGjfusgE6ipdWTFihOdmNkqdL///loOHsBfoa

1H0Ii3wairZfbdXgm8wA+BSvKd1cPV8iLknJIK2c3dzXDWPZ24osMYHtJVfnLaTFUUwY

3zDg1n+z3Cz27V3CRqn/uJW8scbHF1dTc5cfMZVAsFWfR/EJ8UVzj0Ld80cFPTMPIfp5

q1qA==

Sender: dece15-912025586@googlegroups.com

X-Forwarded-Encrypted: i=2; AJvYcCXqvKFJAMIBKFd3sIjGY3GvGnYBuXltPPIOrilEh0dYW9mq/Fy27kN/sOKW8tuF6Qvo3cgsUxTteDQZxtDbIxtuz3g3hA==

X-Gm-Message-State: AOJu0YzZIQA/cVNHhVjUdEQlTAEcgdbvUxhzQJ3ptlvryJ+rbf5wmS1+

xjbYJ7W74WjPojX6FY9YSPo6sUNJrqRNjcvaLgKbfaU5jBkF8Ogw

X-Google-Smtp-Source: AGHT+IGeQveoLk19VqRp0ABOJwhA7vjLLv6jnQMu2bcOGXt0MX5M/Pg4cy8U6ihl34Cr9orWAWWQKw==

X-Received: by 2002:a05:6870:c1cf:b0:21f:d2a2:7ff4 with SMTP id i15-20020a056870c1cf00b0021fd2a27ff4mr3550023oad.17.1713548328251;

Fri, 19 Apr 2024 10:38:48 -0700 (PDT)

X-BeenThere: dece15-912025586@googlegroups.com

Received: by 2002:a05:6871:79b:b0:238:dd56:cbc6 with SMTP id

586e51a60fabf-23935b58821ls1288566fac.1.-pod-prod-08-us; Fri, 19 Apr 2024

10:38:46 -0700 (PDT)

X-Forwarded-Encrypted: i=2; AJvYcCWaLa9SxM3hfvvcp+iQ1IDc1EGjgydwQIorFJovdaa7SNCc0cHlzuwaJ9Z4b+96p8hXzC5kuODxYggD8W9VUwLdgad/dZPbZp77xAJkgAAkPWY=

X-Received: by 2002:a05:6870:890a:b0:235:453b:be89 with SMTP id i10-20020a056870890a00b00235453bbe89mr3553463oao.44.1713548325758;

Fri, 19 Apr 2024 10:38:45 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1713548325; cv=none;

d=google.com; s=arc-20160816;

b=OlPl2HC79J/+HpfO/ZnuURNGKSilVRcYr7sXo88YPsrO0G+VS13WfVOH0yBFOnp+rf

rgiz5E4B5El+aPFvrcuZPQ2j6jb+i3Nh0jJUhgst9S94V0xNnnv4XWWmbYjrNBgZo/r3

eevT1qbdwnb8lbdDN9GwA2aX1lKOm2tcpErwnWW63+7hWqY6VU6rHr5UwBKySsBVLkCO

sJSIdtWrvEtR6zFwqbHqUomCjGdvaMPRclfLOAY2l3U5pz7AB3nS3q4MnEjs886dek5d

dT6HH6GTptJUNz5EsOyTOFyd0j+/87/AcVmAv1fHfJsXSUchSh+0jPaiqdFSZkT8KjOq

umMQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=9dxOXAmTTGF2m9E1ySlMiDgTuGL78KB4eJ6p4hYRrG0=;

fh=Q7sGSPW1jyflVr9pTF/oqirhIlEs4L/u0QXupqzb6KU=;

b=F0kG2FRT10nwkFwDtdwslE7SaYlI33yO44UoK98P61L/oUQOTLnAAhvslL+agfQ9yo

nJ6PKgiYB3qXp7cdU4vbew4rSCNgyg2Y6edm1hARtVig+mKxKL0AkiBbROmc/tgIN9HN

7WxZ4s4EgOE95rctFfOK91VACjKHpBzSD1I65VGmRU5J+7Ocb5ZsEPEeYDzzfTwaBAsV

r/2BikWu7sih52zE02W69/2hNdXLA+/+wfD66JvaMWkNAwgUPlVQ6VLoYUOR+RU/tALM

CSyyNvb1qRsipL09jVhfCNWHrepuGGnVSa3FqLjWf/p9zvSEgPmOTdlssLiHP3dJ96c2

oDKQ==;

dara=google.com

ARC-Authentication-Results: i=1; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b="CHeniS/7";

spf=pass (google.com: domain of afolabifunmilayo213@gmail.com designates 2607:f8b0:4864:20::b31 as permitted sender) smtp.mailfrom=afolabifunmilayo213@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Received: from mail-yb1-xb31.google.com (mail-yb1-xb31.google.com. [2607:f8b0:4864:20::b31])

by gmr-mx.google.com with ESMTPS id hu9-20020a056871528900b0023926381441si320129oac.3.2024.04.19.10.38.45

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Fri, 19 Apr 2024 10:38:45 -0700 (PDT)

Received-SPF: pass (google.com: domain of afolabifunmilayo213@gmail.com designates 2607:f8b0:4864:20::b31 as permitted sender) client-ip=2607:f8b0:4864:20::b31;

Received: by mail-yb1-xb31.google.com with SMTP id 3f1490d57ef6-ddda842c399so2363575276.3;

Fri, 19 Apr 2024 10:38:45 -0700 (PDT)

X-Forwarded-Encrypted: i=1; AJvYcCVsi/hZB60j/CQhDycH4SAS1Ocac1lZQqJpMVfLvR5Z6oQxWds2ZlIyMrEQtfPXdHk5FWF2/5bzNQC05KMriRDO5X361MXqs3l0VwYblOOsFmlf2nr3p6KCmbkD3ojwHmrytRJFDyhQgNlGa61vkQ4ds5yOHFWi3whTXzOJtC12tPniP9Zl4TluMLrBvhTQHZy42M73qcM2qVho1Mmll0U+2pC7GU2st1eP1WUPW/Q7t/SOKJ6Gd3rEPWhrTxcyCJZ4l9oJKovpIPYjpH2ONIqLW56n6wvlB8JBixSFVDgxGBfNke24yMmoF8/6t2Ibb/JTHzVET2FHkjBkLdtUGZIu8mCg45WP7FcufJe8U00jefZd5mxAXloLhxIsZmhtpzEwDBFpbvf5H9dWIkW71xVtycGiYRVI2UDrBURo1dmCa0qcVA60UyP+7f8YvE5R1C2VNGkvdQRQL5l53/ZC1WaTF+GGiuEZQW38

X-Received: by 2002:a25:bfc3:0:b0:dcf:309d:cc2b with SMTP id

q3-20020a25bfc3000000b00dcf309dcc2bmr3030548ybm.18.1713548324966; Fri, 19 Apr

2024 10:38:44 -0700 (PDT)

MIME-Version: 1.0

From: Afolabi Funmilayo

Date: Fri, 19 Apr 2024 23:38:33 +0600

Message-ID:

Subject: =?UTF-8?B?V2FubmEgaG9va3VwIHRvbmlnaHTinaTvuI8=?=

To: dece15-912016742@googlegroups.com, dece15-912016917@googlegroups.com,

dece15-912017260@googlegroups.com, dece15-912020230@googlegroups.com,

dece15-912020772@googlegroups.com, dece15-912025199@googlegroups.com,

dece15-912025586@googlegroups.com, dece15-912027395@googlegroups.com,

dece15-912027665@googlegroups.com, dece15-912027821@googlegroups.com

Content-Type: multipart/alternative; boundary="000000000000371c540616768fa9"

X-Original-Sender: afolabifunmilayo213@gmail.com

X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass

header.i=@gmail.com header.s=20230601 header.b="CHeniS/7"; spf=pass

(google.com: domain of afolabifunmilayo213@gmail.com designates

2607:f8b0:4864:20::b31 as permitted sender) smtp.mailfrom=afolabifunmilayo213@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Precedence: list

Mailing-list: list dece15-912025586@googlegroups.com; contact dece15-912025586+owners@googlegroups.com

List-ID:

X-Spam-Checked-In-Group: dece15-912025586@googlegroups.com

X-Google-Group-Id: 745700075957

List-Post: ,

List-Help: ,

List-Archive:
List-Unsubscribe: ,

X-Spam_score: 9.0

X-Spam_score_int: 90

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hey, I'm here in town for the week for work. I'm a really

sweet, down-to-earth kinda mom looking for somebody to chat with and more.

i'm HERE> sites.google.com/view/jsery21 No need cc ////////////////////////////////

Content analysis details: (9.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2607:f8b0:4864:20:0:0:0:b31 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:b31 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:b31 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:b31 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:b31 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:b31 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:b31 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:b31 listed in]

[will-spam-for-food.eu.org]

[209.85.210.59 listed in will-spam-for-food.eu.org]

[209.85.210.59 listed in will-spam-for-food.eu.org]

[209.85.210.59 listed in will-spam-for-food.eu.org]

[209.85.210.59 listed in will-spam-for-food.eu.org]

[209.85.210.59 listed in will-spam-for-food.eu.org]

[209.85.210.59 listed in will-spam-for-food.eu.org]

[209.85.210.59 listed in will-spam-for-food.eu.org]

[209.85.210.59 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:b31 listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:b31 listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:b31 listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:b31 listed in]

[dnsbl.ahbl.org]

[209.85.210.59 listed in dnsbl.ahbl.org]

[209.85.210.59 listed in dnsbl.ahbl.org]

[209.85.210.59 listed in dnsbl.ahbl.org]

[209.85.210.59 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:b31 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:b31 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:b31 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:b31 listed in]

[dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.59 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.59 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[afolabifunmilayo213(at)gmail.com]

2.5 SORTED_RECIPS Recipient list is sorted by address

0.0 HTML_MESSAGE BODY: HTML included in message

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

Subject: {SPAM?} =?UTF-8?B?V2FubmEgaG9va3VwIHRvbmlnaHTinaTvuI8=?=

--000000000000371c540616768fa9

Content-Type: text/plain; charset="UTF-8"

Hey, I'm here in town for the week for work. I'm a really sweet,

down-to-earth kinda mom looking for somebody to chat with and more.

i'm HERE> sites.google.com/view/jsery21

No need cc

////////////////////////////////

--

You received this message because you are subscribed to the Google Groups "Dece15-912025586" group.

To unsubscribe from this group and stop receiving emails from it, send an email to dece15-912025586+unsubscribe@googlegroups.com.

To view this discussion on the web, visit https://groups.google.com/d/msgid/dece15-912025586/CACrG-2M9j0g3Brmg%2BL07-FLvHeXiVgHjyjjj3CfcfOX4KFoj-g%40mail.gmail.com.

--000000000000371c540616768fa9

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Hey, I'm here in town for the week for work. I'm a=

really sweet, down-to-earth kinda mom looking for somebody to chat with an=

d more.
i'm HERE> =C2=A0
jsery21">sites.google.com/view/jsery21

No need cc

>

r>////////////////////////////////

--

You received this message because you are subscribed to the Google Groups &=

quot;Dece15-912025586" group.

To unsubscribe from this group and stop receiving emails from it, send an e=

mail to de=

ce15-912025586+unsubscribe@googlegroups.com.

To view this discussion on the web, visit
com/d/msgid/dece15-912025586/CACrG-2M9j0g3Brmg%2BL07-FLvHeXiVgHjyjjj3CfcfOX=

4KFoj-g%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https://gr=

oups.google.com/d/msgid/dece15-912025586/CACrG-2M9j0g3Brmg%2BL07-FLvHeXiVgH=

jyjjj3CfcfOX4KFoj-g%40mail.gmail.com.

--000000000000371c540616768fa9--

I2.03KL0LD37.0KI2.21KwhoissourceRank12.9MPIN0Summary reportDiagnosisDensity00n/a

German Language Spam from OVH

Posted by Dave Yadallee on Friday, April 19. 2024

Canada Post Phish

Posted by Dave Yadallee on Friday, April 19. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 19 Apr 2024 12:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rxt75-00000000NoE-3b4j

for dave@doctor.nl2k.ab.ca;

Fri, 19 Apr 2024 12:37:31 -0600

Resent-From: The Doctor

Resent-Date: Fri, 19 Apr 2024 12:37:31 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [41.61.20.138] (port=45836 helo=irodahost.hu)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rxrnm-00000000PKY-05Oq

for doctor@netknow.ca;

Fri, 19 Apr 2024 11:13:37 -0600

Received: by irodahost.hu (Postfix, from userid 33)

id A36D65B7A68; Fri, 19 Apr 2024 17:03:11 +0200 (SAST)

To: doctor@netknow.ca

Subject: New parcel awaiting delivery due to missing informations! / Nouveau colis en attente de livraison par manques d'informations!

Date: Fri, 19 Apr 2024 17:03:11 +0200

From: Intelcom | Package delivery across Canada

Reply-To: dask1337@abv.bg

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_e76db4fe45ce87d51b866f4845f10b75"

Content-Transfer-Encoding: 8bit

X-Spam_score: 15.2

X-Spam_score_int: 152

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dear doctor@netknow.ca, A parcel belonging to you has been

declared by customs. We kindly ask you to pay the taxes and duties of 5.86

CAD in order to receive your package as soon as possible before it is returned

to sender [...]

Content analysis details: (15.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

[41.61.20.138 listed in dnsbl.ahbl.org]

[41.61.20.138 listed in dnsbl.ahbl.org]

[41.61.20.138 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=no_reply%40intelcom.ca;ip=41.61.20.138;r=doctor.nl2k.ab.ca]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[dask1337(at)abv.bg]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

3.3 WIKI_IMG URI: Image from wikipedia

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_REMOTE_IMAGE Message contains an external image

1.2 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +

no rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 NORDNS_LOW_CONTRAST No rDNS + hidden text

Subject: {SPAM?} New parcel awaiting delivery due to missing informations! / Nouveau colis en attente de livraison par manques d'informations!

This is a multi-part message in MIME format.

--b1_e76db4fe45ce87d51b866f4845f10b75

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit

Â

Â

Â

Dear doctor@netknow.ca,

A parcel belonging to you has been declared by customs. We kindly ask you to pay the taxes and duties ofÂ 5.86Â CADÂ in order to receive your package as soon as possible before it is returned to sender in accordance with our terms and conditions.

Receive my delivery

Once your payment has been made, you will receive a payment confirmation by e-mail and we will call you on your phone number to deliver your parcel according to your availability.

This message is intended for the addressee only. It may contain proprietary or confidential information. Any unauthorized dissemination, distribution or copying of this message is strictly prohibited. If you have received this message in error, please inform us immediately and delete the original message.

Â

Do not reply to this e-mail. We cannot receive or respond to replies to this e-mail. If you have any questions or comments, please contact us online or call 1-514-807-6086.

This email has been sent toÂ doctor@netknow.ca

intelcom.ca

1380 William St, Montreal, Quebec H3C 1R5, Canada

AccessibilityÂ Â |Â Â Â LegalÂ Â |Â Â Â Privacy

Â© IntelcomÂ

Â

Â

Â

Cher(e) doctor@netknow.ca,

Un colis vous appartenant a Ã©tÃ© dÃ©clarÃ© par les douanes. Nous vous demandons de bien vouloir acquitter les taxes et droits deÂ 5.86Â CADÂ afin de recevoir votre colis dans les meilleurs dÃ©lais avant qu'il ne soit renvoyÃ© Ã l'expÃ©diteur conformÃ©ment Ã nos conditions d'utilisation.

Recevoir ma livraison

Une fois votre paiement effectuÃ©, vous recevrez une confirmation de paiement par e-mail et nous vous appellerons sur votre numÃ©ro de tÃ©lÃ©phone pour livrer votre colis selon vos disponibilitÃ©s.

Ce message est destinÃ© uniquement au destinataire. Il peut contenir des informations exclusives ou confidentielles. Toute diffusion, distribution ou copie non autorisÃ©e de ce message est strictement interdite. Si vous avez reÃ§u ce message par erreur, veuillez nous en informer immÃ©diatement et supprimer le message original.

Â Â Â

Ne rÃ©pondez pas Ã cet e-mail. Nous ne pouvons ni recevoir ni rÃ©pondre aux rÃ©ponses Ã ce courriel. Si vous avez des questions ou des commentaires, contactez-nous en ligne ou appelez leÂ 1-514-807-6086.

Ce courriel a Ã©tÃ© envoyÃ© Ã doctor@netknow.ca

intelcom.ca

1380 William St, Montreal, Quebec H3C 1R5, Canada

AccessibilitÃ©Â |Â JuridiqueÂ |Â Vie privÃ©e

Â© IntelcomÂ

--b1_e76db4fe45ce87d51b866f4845f10b75

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

=09

, Arial; font-size: 16px; word-spacing: normal;">

und-size: initial; background-repeat: initial; background-attachment: initi=

al; background-origin: initial; background-clip: initial; margin: 0px auto;=

max-width: 600px;">=C2=A0

=09=09=09

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; box-sizing: border-box;">

=09=09=09
order-width: 0px; margin: 0px auto; padding: 0px; vertical-align: baseline;=

border-collapse: collapse; max-width: 600px; border-spacing: 0px;" width=

=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

h: 0px; padding: 48px 24px 64px; line-height: 24px; letter-spacing: 0.03em;=

vertical-align: middle; box-sizing: border-box;">

=09=09=09=09=09=09

mily: tahoma, geneva, sans-serif;">Dear doctor@netknow.ca
=3D"font-family: tahoma, geneva, sans-serif;">,

=09=09=09=09=09=09

=09=09=09=09=09=09

amily: tahoma, geneva, sans-serif;">On=

ce your payment has been made, you will receive a payment confirmation by e=

-mail and we will call you on your phone number to deliver your parcel acco=

rding to your availability.

=09=09=09=09=09=09
cellspacing=3D"0" style=3D"border-width: 0px; margin: 0px auto; padding: 0=

px; letter-spacing: 0px; vertical-align: baseline; border-collapse: collaps=

e; max-width: 600px; border-spacing: 0px;" width=3D"100%">

=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09

=09=09=09=09=09=09

dding: 48px 24px 24px; color: rgb(240, 240, 240); line-height: 24px; letter=

-spacing: 0.03em; vertical-align: middle; border-bottom-color: rgb(203, 203=

, 203); border-top-width: 0px; border-right-width: 0px; border-left-width: =

0px; border-bottom-style: solid; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-size: 14px;">This message is intended for the addressee only. I=

t may contain proprietary or confidential information. Any unauthorized dis=

semination, distribution or copying of this message is strictly prohibited.=

If you have received this message in error, please inform us immediately a=

nd delete the original message.

=09=09=09=09=09=09=09=09=09=C2=A0

=09=09=09=09=09=09=09=09=09

4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-size: 14px;">Do not reply to this e-mail. We cannot receive or =

respond to replies to this e-mail. If you have any questions or comments, p=

lease contact us online or call 1-514-807-6086.

=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 48px 24px 0px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">

=09=09=09=09=09=09=09=09=09
This email h=

as been sent to=C2=A0doctor@netknow.ca

=09=09=09=09=09=09=09=09=09

=3D"font-size: 14px;">
f;">
om.ca&source=3Dgmail&ust=3D1711917960749000&usg=3DAOvVaw33uqjroZtbWOGEkWFj_=

7KG" href=3D"http://intelcom.ca/" style=3D"color: rgb(17, 85, 204);" target=

=3D"_blank">intelcom.ca

=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">1380 William St, Montreal, Quebe=

c H3C 1R5, Canada

rder-width: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">
ma, geneva, sans-serif;">Accessibility=C2=A0=C2=A0|=C2=A0=C2=A0=

=C2=A0Legal=C2=A0=C2=A0|=C2=A0=C2=A0=C2=A0Privacy
n>

rder-width: 0px; padding: 0px 24px 48px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;" valign=3D"bottom">
"font-family: tahoma, geneva, sans-serif;">
; margin: 0px; padding: 0px; display: inline-block; box-sizing: border-box;=

">=C2=A9 Intelcom=C2=A0
.com/url?q=3Dhttps://t.notifications.canadapost-postescanada.ca/info5/r/?id=

=3Dh8bf38d8,8ded733,4500559&source=3Dgmail&ust=3D1711917960749000&usg=3DAOv=

Vaw3Mc_Q_L0njln9ok13_tmxp" href=3D"https://t.notifications.canadapost-poste=

scanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559" style=3D"color: rgb(240,=

240, 240); background-image: initial; background-position: 0px 0px; backgr=

ound-size: initial; background-repeat: initial; background-attachment: init=

ial; background-origin: initial; background-clip: initial; border-width: 0p=

x; margin: 0px; padding: 0px; display: inline-block; box-sizing: border-box=

;" target=3D"_blank" title=3D"https://t.notifications.canadapost-postescana=

da.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559">
CToWUd" data-bit=3D"iit" src=3D"https://ci3.googleusercontent.com/meips/ADK=

q_NZSdC50LJxq6jpldVGo2o34fAxaoWvWVreYWvzzdgacdK3a8w6e58CrEXpx35h5qAG9wVVKl7=

aUwLXrW4hWiZrUh85qCOD0d4z9dtgLkIWB-eAgL4BH_AvFHKpb3DDGsw=3Ds0-d-e1-ft#https=

://www.canadapost.ca/cpo/mc/emailcampaigns/cpc/images/canada_logo.png" styl=

e=3D"border-width: 0px; margin: 0px; padding: 0px; vertical-align: bottom; =

float: right; max-width: 100%; box-sizing: border-box;" width=3D"78" />=

=09=09=09=09=09=09

=09=09=09

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; box-sizing: border-box;">

=09=09=09
order-width: 0px; margin: 0px auto; padding: 0px; vertical-align: baseline;=

border-collapse: collapse; max-width: 600px; border-spacing: 0px;" width=

=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

=09=09=09

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; box-sizing: border-box;">

=09=09=09
order-width: 0px; margin: 0px auto; padding: 0px; vertical-align: baseline;=

border-collapse: collapse; max-width: 600px; border-spacing: 0px;" width=

=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

h: 0px; padding: 48px 24px 64px; line-height: 24px; letter-spacing: 0.03em;=

vertical-align: middle; box-sizing: border-box;">

=09=09=09=09=09=09

mily: tahoma, geneva, sans-serif;">Cher(e) doctor@netknow.ca
yle=3D"font-family: tahoma, geneva, sans-serif;">,

=09=09=09=09=09=09

=09=09=09=09=09=09

amily: tahoma, geneva, sans-serif;">Un=

e fois votre paiement effectu=C3=A9, vous recevrez une confirmation de paie=

ment par e-mail et nous vous appellerons sur votre num=C3=A9ro de t=C3=

=A9l=C3=A9phone pour livrer votre colis selon vos disponibilit=C3=A9s.
n>

=09=09=09=09=09=09
cellspacing=3D"0" style=3D"border-width: 0px; margin: 0px auto; padding: 0=

px; letter-spacing: 0px; vertical-align: baseline; border-collapse: collaps=

e; max-width: 600px; border-spacing: 0px;" width=3D"100%">

=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09

=09=09=09=09=09=09

dding: 48px 24px 24px; color: rgb(240, 240, 240); line-height: 24px; letter=

-spacing: 0.03em; vertical-align: middle; border-bottom-color: rgb(203, 203=

, 203); border-top-width: 0px; border-right-width: 0px; border-left-width: =

0px; border-bottom-style: solid; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-family: tahoma, geneva, sans-serif;">
14px;">Ce message est destin=C3=A9 uniquement au destinataire. Il peut cont=

enir des informations exclusives ou confidentielles. Toute diffusion, distr=

ibution ou copie non autoris=C3=A9e de ce message est strictement interdite=

. Si vous avez re=C3=A7u ce message par erreur, veuillez nous en informer i=

mm=C3=A9diatement et supprimer le message original.

=09=09=09=09=09=09=09=09=09=C2=A0=C2=A0=C2=A0

=09=09=09=09=09=09=09=09=09

4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-size: 14px;">Ne r=C3=A9pondez pas =C3=A0 cet e-mail. Nous ne po=

uvons ni recevoir ni r=C3=A9pondre aux r=C3=A9ponses =C3=A0 ce courriel. Si=

vous avez des questions ou des commentaires, contactez-nous en ligne ou ap=

pelez le=C2=A0
n style=3D"border-width: 0px; margin: 0px; padding: 0px; box-sizing: border=

-box;">
: inline-block; box-sizing: border-box;">1-514-807-6086.
n>

=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 48px 24px 0px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">

=09=09=09=09=09=09=09=09=09
Ce courriel =

a =C3=A9t=C3=A9 envoy=C3=A9 =C3=A0 doctor@netknow.ca

=09=09=09=09=09=09=09=09=09

=3D"font-size: 14px;">
f;">
om.ca&source=3Dgmail&ust=3D1711917960749000&usg=3DAOvVaw33uqjroZtbWOGEkWFj_=

7KG" href=3D"http://intelcom.ca/" style=3D"color: rgb(17, 85, 204);" target=

=3D"_blank">intelcom.ca

=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">1380 William St, Montreal, Quebe=

c H3C 1R5, Canada

rder-width: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">Accessibilit=C3=A9=C2=

=A0|=C2=A0Juridique=C2=A0|=C2=A0Vie priv=C3=A9e

rder-width: 0px; padding: 0px 24px 48px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;" valign=3D"bottom">
"font-family: tahoma, geneva, sans-serif;">
; margin: 0px; padding: 0px; display: inline-block; box-sizing: border-box;=

">=C2=A9 Intelcom=C2=A0
.com/url?q=3Dhttps://t.notifications.canadapost-postescanada.ca/info5/r/?id=

=3Dh8bf38d8,8ded733,4500559&source=3Dgmail&ust=3D1711917960749000&usg=3DAOv=

Vaw3Mc_Q_L0njln9ok13_tmxp" href=3D"https://t.notifications.canadapost-poste=

scanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559" style=3D"color: rgb(240,=

240, 240); background-image: initial; background-position: 0px 0px; backgr=

ound-size: initial; background-repeat: initial; background-attachment: init=

ial; background-origin: initial; background-clip: initial; border-width: 0p=

x; margin: 0px; padding: 0px; display: inline-block; box-sizing: border-box=

;" target=3D"_blank" title=3D"https://t.notifications.canadapost-postescana=

da.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559">
CToWUd" data-bit=3D"iit" src=3D"https://ci3.googleusercontent.com/meips/ADK=

q_NZSdC50LJxq6jpldVGo2o34fAxaoWvWVreYWvzzdgacdK3a8w6e58CrEXpx35h5qAG9wVVKl7=

aUwLXrW4hWiZrUh85qCOD0d4z9dtgLkIWB-eAgL4BH_AvFHKpb3DDGsw=3Ds0-d-e1-ft#https=

://www.canadapost.ca/cpo/mc/emailcampaigns/cpc/images/canada_logo.png" styl=

e=3D"border-width: 0px; margin: 0px; padding: 0px; vertical-align: bottom; =

float: right; max-width: 100%; box-sizing: border-box;" width=3D"78" />=

=09=09=09=09=09=09

=09=09=09

--b1_e76db4fe45ce87d51b866f4845f10b75--

I2.03KL0LD37.0KI2.21KwhoissourceRank12.9MPIN0Summary reportDiagnosisDensity00n/a

Canada Post Phish

Posted by Dave Yadallee on Friday, April 19. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 19 Apr 2024 07:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rxoWc-00000000I8D-36A4

for dave@doctor.nl2k.ab.ca;

Fri, 19 Apr 2024 07:43:34 -0600

Resent-From: The Doctor

Resent-Date: Fri, 19 Apr 2024 07:43:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [41.61.20.138] (port=33896 helo=irodahost.hu)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rxmbq-000000005ZB-2LWi

for doctor@nl2k.ab.ca;

Fri, 19 Apr 2024 05:40:58 -0600

Received: by irodahost.hu (Postfix, from userid 33)

id 1843B5B4633; Fri, 19 Apr 2024 03:16:21 +0200 (SAST)

To: doctor@nl2k.ab.ca

Subject: New parcel awaiting delivery due to missing informations! / Nouveau colis en attente de livraison par manques d'informations!

Date: Fri, 19 Apr 2024 03:16:21 +0200

From: Intelcom | Package delivery across Canada

Reply-To: dask1337@abv.bg

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_bdea7ccafa84a58786aa87f7e587ea89"

Content-Transfer-Encoding: 8bit

X-Spam_score: 18.3

X-Spam_score_int: 183

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview:

Content analysis details: (18.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

[41.61.20.138 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

[41.61.20.138 listed in dnsbl.ahbl.org]

[41.61.20.138 listed in dnsbl.ahbl.org]

[41.61.20.138 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[41.61.20.138 listed in dnsbl.ahbl.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=no_reply%40intelcom.ca;ip=41.61.20.138;r=doctor.nl2k.ab.ca]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[dask1337(at)abv.bg]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

3.3 WIKI_IMG URI: Image from wikipedia

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

2.0 US_8BIT US-ASCII isn't an eight bit charset

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.2 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +

no rDNS

0.0 NORDNS_LOW_CONTRAST No rDNS + hidden text

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} New parcel awaiting delivery due to missing informations! / Nouveau colis en attente de livraison par manques d'informations!

This is a multi-part message in MIME format.

--b1_bdea7ccafa84a58786aa87f7e587ea89

Content-Type: text/plain; charset=us-ascii

Dear doctor@nl2k.ab.ca,

A parcel belonging to you has been declared by customs. We kindly ask you to pay the taxes and duties of 5.86 CAD in order to receive your package as soon as possible before it is returned to sender in accordance with our terms and conditions.

Receive my delivery

Once your payment has been made, you will receive a payment confirmation by e-mail and we will call you on your phone number to deliver your parcel according to your availability.

This message is intended for the addressee only. It may contain proprietary or confidential information. Any unauthorized dissemination, distribution or copying of this message is strictly prohibited. If you have received this message in error, please inform us immediately and delete the original message.

Do not reply to this e-mail. We cannot receive or respond to replies to this e-mail. If you have any questions or comments, please contact us online or call 1-514-807-6086.

This email has been sent to doctor@nl2k.ab.ca

intelcom.ca

1380 William St, Montreal, Quebec H3C 1R5, Canada

Accessibility | Legal | Privacy

© Intelcom

Cher(e) doctor@nl2k.ab.ca,

Un colis vous appartenant a été déclaré par les douanes. Nous vous demandons de bien vouloir acquitter les taxes et droits de 5.86 CAD afin de recevoir votre colis dans les meilleurs délais avant qu'il ne soit renvoyé à l'expéditeur conformément à nos conditions d'utilisation.

Recevoir ma livraison

Une fois votre paiement effectué, vous recevrez une confirmation de paiement par e-mail et nous vous appellerons sur votre numéro de téléphone pour livrer votre colis selon vos disponibilités.

Ce message est destiné uniquement au destinataire. Il peut contenir des informations exclusives ou confidentielles. Toute diffusion, distribution ou copie non autorisée de ce message est strictement interdite. Si vous avez reçu ce message par erreur, veuillez nous en informer immédiatement et supprimer le message original.

Ne répondez pas à cet e-mail. Nous ne pouvons ni recevoir ni répondre aux réponses à ce courriel. Si vous avez des questions ou des commentaires, contactez-nous en ligne ou appelez le 1-514-807-6086.

Ce courriel a été envoyé à doctor@nl2k.ab.ca

intelcom.ca

1380 William St, Montreal, Quebec H3C 1R5, Canada

Accessibilité | Juridique | Vie privée

© Intelcom

--b1_bdea7ccafa84a58786aa87f7e587ea89

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

=09

, Arial; font-size: 16px; word-spacing: normal;">

und-size: initial; background-repeat: initial; background-attachment: initi=

al; background-origin: initial; background-clip: initial; margin: 0px auto;=

max-width: 600px;">

Post" class=3D"CToWUd" data-bit=3D"iit" height=

=3D"37" src=3D"https://ci3.googleusercontent.com/meips/ADKq_NbXjCZvAlSvBqyY=

iivSfupXAUCqmKgOzeix2sRI_xXbqfdUVTjKtLAPK7crB-xi6HuSvp2Lca4OVGD4fmYwaP4azrn=

6x1euJsErwcr5DudJh6PqBKE4HtW-jdvFrgiRSIBn7Bbi4zT7ACQ9v0CcBfk-dSz4tvC2RMAra6=

9nfg=3Ds0-d-e1-ft#https://upload.wikimedia.org/wikipedia/commons/thumb/6/66=

/Intelcom_logo.svg/2560px-Intelcom_logo.svg.png" style=3D"border-width: 0px=

; margin: 0px; padding: 0px; vertical-align: bottom; max-width: 100%; box-s=

izing: border-box;" width=3D"136" />
google.com/url?q=3Dhttps://t.notifications.canadapost-postescanada.ca/info5=

/r/?id=3Dh8bf38d8,8ded733,4500553&source=3Dgmail&ust=3D171191796074=

8000&usg=3DAOvVaw0hM8r4CJ57F291S0m9gesk" href=3D"https://t.notification=

s.canadapost-postescanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500553" style=

=3D"color: rgb(4, 103, 198); background-image: initial; background-position=

: 0px 0px; background-size: initial; background-repeat: initial; background=

-attachment: initial; background-origin: initial; background-clip: initial;=

border-width: 0px; margin: 0px; padding: 0px; box-sizing: border-box; text=

-decoration-line: none;" target=3D"_blank" title=3D"https://t.notifications=

.canadapost-postescanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500553">
t=3D"Canada

Post" class=3D"CToWUd" data-bit=3D"iit" src=

=3D"https://ci3.googleusercontent.com/meips/ADKq_NbSezd7qL1wADgqu05VSUF6iML=

L7Ge9OrKW2KBZoxBP2HPMavRazzBCzTA6SKvY9rJ-n6nM16a6mLGlC3oolUNJ8u5sTHULmVa-nq=

OzYuvvCUM-vqNFCkwxDRiQ=3Ds0-d-e1-ft#https://www.canadapost.ca/cpo/mc/emails=

/cpc/images/mobile_cpc_logo.png" style=3D"border-width: 0px; margin: 0px; p=

adding: 0px; vertical-align: bottom; max-width: 100%; box-sizing: border-bo=

x;" width=3D"0" />

=09=09=09

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; box-sizing: border-box;">

=09=09=09
order-width: 0px; margin: 0px auto; padding: 0px; vertical-align: baseline;=

border-collapse: collapse; max-width: 600px; border-spacing: 0px;" width=

=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

h: 0px; padding: 48px 24px 64px; line-height: 24px; letter-spacing: 0.03em;=

vertical-align: middle; box-sizing: border-box;">

=09=09=09=09=09=09

mily: tahoma, geneva, sans-serif;">Dear doctor@nl2k.ab.ca
=3D"font-family: tahoma, geneva, sans-serif;">,

=09=09=09=09=09=09

A parcel belonging to=

you has been declared by customs. We kindly ask you to pay the taxes and d=

uties of 5.86=

n>CAD in order to rece=

ive your package as soon as possible before it is returned to sender in acc=

ordance with our terms and conditions.

=09=09=09=09=09=09

q=3Dhttps://=D1=8A=D1=8B=D1=8A.=D1=80=D1=84/=D0=B0=D0=A3=D0=AA=D0=95&so=

urce=3Dgmail&ust=3D1711917960748000&usg=3DAOvVaw2DyArZA8YbF40_kvowD=

5vA" href=3D"https://=D1=8A=D1=8B=D1=8A.=D1=80=D1=84/=D0=B0=D0=95=D0=B5=

=D0=AB" style=3D"color: rgb(255, 87, 51); background: rgb(255, 87, 51); bor=

der-width: 15px 60px; border-style: solid; border-color: rgb(255, 87, 51); =

border-radius: 30px; width: auto; text-align: center; line-height: 19px; le=

tter-spacing: 0px; font-family: InterRegular, Helvetica, Arial, sans-serif;=

font-weight: bold; display: block; text-decoration-line: none;" target=3D"=

_blank">Receive my de=

livery

=09=09=09=09=09=09

amily: tahoma, geneva, sans-serif;">On=

ce your payment has been made, you will receive a payment confirmation by e=

-mail and we will call you on your phone number to deliver your parcel acco=

rding to your availability.

=09=09=09=09=09=09
cellspacing=3D"0" style=3D"border-width: 0px; margin: 0px auto; padding: 0=

px; letter-spacing: 0px; vertical-align: baseline; border-collapse: collaps=

e; max-width: 600px; border-spacing: 0px;" width=3D"100%">

=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09
g: 0px; vertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09

=09=09=09=09=09=09

dding: 48px 24px 24px; color: rgb(240, 240, 240); line-height: 24px; letter=

-spacing: 0.03em; vertical-align: middle; border-bottom-color: rgb(203, 203=

, 203); border-top-width: 0px; border-right-width: 0px; border-left-width: =

0px; border-bottom-style: solid; box-sizing: border-box;">

=09=09=09=09=09=09=09=09=09

4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-size: 14px;">This message is intended for the addressee only. I=

t may contain proprietary or confidential information. Any unauthorized dis=

semination, distribution or copying of this message is strictly prohibited.=

If you have received this message in error, please inform us immediately a=

nd delete the original message.

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-size: 14px;">Do not reply to this e-mail. We cannot receive or =

respond to replies to this e-mail. If you have any questions or comments, p=

lease contact us online or call 1-514-807-6086.

=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 48px 24px 0px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">

=09=09=09=09=09=09=09=09=09

This email h=

as been sent to doctor@nl2k.ab.ca

=09=09=09=09=09=09=09=09=09

=3D"font-size: 14px;">
f;">
om.ca&source=3Dgmail&ust=3D1711917960749000&usg=3DAOvVaw33uqjro=

ZtbWOGEkWFj_7KG" href=3D"http://intelcom.ca/" style=3D"color: rgb(17, 85, 2=

04);" target=3D"_blank">intelcom.ca

=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">1380 William St, Montreal, Quebe=

c H3C 1R5, Canada

rder-width: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">
ma, geneva, sans-serif;">Accessibility | =

;Legal | Privacy
pan>

rder-width: 0px; padding: 0px 24px 48px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;" valign=3D"bottom">
"font-family: tahoma, geneva, sans-serif;">
; margin: 0px; padding: 0px; display: inline-block; box-sizing: border-box;=

">© Intelcom
.com/url?q=3Dhttps://t.notifications.canadapost-postescanada.ca/info5/r/?id=

=3Dh8bf38d8,8ded733,4500559&source=3Dgmail&ust=3D1711917960749000&a=

mp;usg=3DAOvVaw3Mc_Q_L0njln9ok13_tmxp" href=3D"https://t.notifications.cana=

dapost-postescanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559" style=3D"col=

or: rgb(240, 240, 240); background-image: initial; background-position: 0px=

0px; background-size: initial; background-repeat: initial; background-atta=

chment: initial; background-origin: initial; background-clip: initial; bord=

er-width: 0px; margin: 0px; padding: 0px; display: inline-block; box-sizing=

: border-box;" target=3D"_blank" title=3D"https://t.notifications.canadapos=

t-postescanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,4500559"> 3D"Canad=<br

a" class=3D"CToWUd" data-bit=3D"iit" src=3D"https://ci3.googleusercontent.c=

om/meips/ADKq_NZSdC50LJxq6jpldVGo2o34fAxaoWvWVreYWvzzdgacdK3a8w6e58CrEXpx35=

h5qAG9wVVKl7aUwLXrW4hWiZrUh85qCOD0d4z9dtgLkIWB-eAgL4BH_AvFHKpb3DDGsw=3Ds0-d=

-e1-ft#https://www.canadapost.ca/cpo/mc/emailcampaigns/cpc/images/canada_lo=

go.png" style=3D"border-width: 0px; margin: 0px; padding: 0px; vertical-ali=

gn: bottom; float: right; max-width: 100%; box-sizing: border-box;" width=

=3D"78" />

=09=09=09=09=09=09

=09=09=09

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; box-sizing: border-box;">

=09=09=09
order-width: 0px; margin: 0px auto; padding: 0px; vertical-align: baseline;=

border-collapse: collapse; max-width: 600px; border-spacing: 0px;" width=

=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

Post" class=3D"CToWUd" data-bit=3D"iit" height=3D"37" src=3D"https://ci3.go=

ogleusercontent.com/meips/ADKq_NbXjCZvAlSvBqyYiivSfupXAUCqmKgOzeix2sRI_xXbq=

fdUVTjKtLAPK7crB-xi6HuSvp2Lca4OVGD4fmYwaP4azrn6x1euJsErwcr5DudJh6PqBKE4HtW-=

jdvFrgiRSIBn7Bbi4zT7ACQ9v0CcBfk-dSz4tvC2RMAra69nfg=3Ds0-d-e1-ft#https://upl=

oad.wikimedia.org/wikipedia/commons/thumb/6/66/Intelcom_logo.svg/2560px-Int=

elcom_logo.svg.png" style=3D"border-width: 0px; margin: 0px; padding: 0px; =

vertical-align: bottom; max-width: 100%; box-sizing: border-box;" width=3D"=

136" />
notifications.canadapost-postescanada.ca/info5/r/?id=3Dh8bf38d8,8ded733,450=

0553&source=3Dgmail&ust=3D1711917960749000&usg=3DAOvVaw0BIJtZBr=

O9SUJHNhb547nm" href=3D"https://t.notifications.canadapost-postescanada.ca/=

info5/r/?id=3Dh8bf38d8,8ded733,4500553" style=3D"color: rgb(4, 103, 198); b=

ackground-image: initial; background-position: 0px 0px; background-size: in=

itial; background-repeat: initial; background-attachment: initial; backgrou=

nd-origin: initial; background-clip: initial; border-width: 0px; margin: 0p=

x; padding: 0px; box-sizing: border-box; text-decoration-line: none;" targe=

t=3D"_blank" title=3D"https://t.notifications.canadapost-postescanada.ca/in=

fo5/r/?id=3Dh8bf38d8,8ded733,4500553"> 3D"Canada<br

=09=09=09

ing: 0px; color: rgb(51, 51, 51); line-height: 24px; letter-spacing: 0.03em=

; font-family: Roboto, Helvetica, Arial, sans-serif; font-size: 16px; verti=

cal-align: middle; box-sizing: border-box;">

=09=09=09
order-width: 0px; margin: 0px auto; padding: 0px; vertical-align: baseline;=

border-collapse: collapse; max-width: 600px; border-spacing: 0px;" width=

=3D"100%">

=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09
ertical-align: baseline; box-sizing: border-box;">

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

h: 0px; padding: 48px 24px 64px; line-height: 24px; letter-spacing: 0.03em;=

vertical-align: middle; box-sizing: border-box;">

=09=09=09=09=09=09

mily: tahoma, geneva, sans-serif;">Cher(e) doctor@nl2k.ab.ca
yle=3D"font-family: tahoma, geneva, sans-serif;">,

=09=09=09=09=09=09

Un colis vous apparte=

nant a été déclaré par les douanes. Nous vous d=

emandons de bien vouloir acquitter les taxes et droits de
-sizing: border-box;"> 5.86
-family: tahoma, geneva, sans-serif;">
spacing: 0px;">CAD afin de recevoir votre colis dans les meil=

leurs délais avant qu'il ne soit renvoyé à l'e=

xpéditeur conformément à nos conditions d'utilisat=

ion.

=09=09=09=09=09=09

q=3Dhttps://=D1=8A=D1=8B=D1=8A.=D1=80=D1=84/=D0=B0=D0=A3=D0=AA=D0=95&so=

urce=3Dgmail&ust=3D1711917960749000&usg=3DAOvVaw3D4GIL24u38-K3kyUeU=

9o8" href=3D"https://=D1=8A=D1=8B=D1=8A.=D1=80=D1=84/=D0=B0=D0=95=D0=B5=

=D0=AB" style=3D"color: rgb(255, 87, 51); background: rgb(255, 87, 51); bor=

der-width: 15px 60px; border-style: solid; border-color: rgb(255, 87, 51); =

border-radius: 30px; width: auto; text-align: center; line-height: 19px; le=

tter-spacing: 0px; font-family: InterRegular, Helvetica, Arial, sans-serif;=

font-weight: bold; display: block; text-decoration-line: none;" target=3D"=

_blank">Recevoir ma l=

ivraison

=09=09=09=09=09=09

amily: tahoma, geneva, sans-serif;">Un=

e fois votre paiement effectué, vous recevrez une confirmation de pa=

iement par e-mail et nous vous appellerons sur votre numéro de t&eac=

ute;léphone pour livrer votre colis selon vos disponibilités.=

4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-family: tahoma, geneva, sans-serif;">
14px;">Ce message est destiné uniquement au destinataire. Il peut co=

ntenir des informations exclusives ou confidentielles. Toute diffusion, dis=

tribution ou copie non autorisée de ce message est strictement inter=

dite. Si vous avez reçu ce message par erreur, veuillez nous en info=

rmer immédiatement et supprimer le message original.
p>

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

4px; padding: 0px; display: inline-block; box-sizing: border-box;">
yle=3D"font-size: 14px;">Ne répondez pas à cet e-mail. Nous n=

e pouvons ni recevoir ni répondre aux réponses à ce co=

urriel. Si vous avez des questions ou des commentaires, contactez-nous en l=

igne ou appelez le=

ng: border-box;">
x; display: inline-block; box-sizing: border-box;">1-514-807-6086
pan>.

=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 48px 24px 0px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">

=09=09=09=09=09=09=09=09=09

Ce courriel =

a été envoyé à doctor@nl2k.ab.ca

=09=09=09=09=09=09=09=09=09

rder-width: 0px; padding: 0px 24px 16px; color: rgb(240, 240, 240); line-he=

ight: 24px; letter-spacing: 0.03em; vertical-align: middle; box-sizing: bor=

der-box;">Accessibilité =

;| Juridique | Vie privée

=09=09=09=09=09=09

=09=09=09

--b1_bdea7ccafa84a58786aa87f7e587ea89--

I2.03KL0LD37.0KI2.21KwhoissourceRank12.9MPIN0Summary reportDiagnosisDensity00n/a