X-rated Google Groups spam Jerry Dorlean <jeydorlean@gmail.com> from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 26 Jul 2024 13:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sXQgG-00000000FdX-3KVd

for dave@doctor.nl2k.ab.ca;

Fri, 26 Jul 2024 13:32:44 -0600

Resent-From: The Doctor

Resent-Date: Fri, 26 Jul 2024 13:32:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f192.google.com ([209.85.210.192]:42380)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sXNuu-00000000OvR-1sO7

for root@mail.nl2k.ab.ca;

Fri, 26 Jul 2024 10:35:46 -0600

Received: by mail-pf1-f192.google.com with SMTP id d2e1a72fcca58-70d19a4137dsf1111551b3a.1

for ; Fri, 26 Jul 2024 09:33:46 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1722011621; cv=pass;

d=google.com; s=arc-20160816;

b=enJx4dKf+v47lPVQrCuPNpI2O9sLj4vJRUajj0cPs55VMkQGW/EpsZ0GgmFw41Rfym

hee2m2O+e+L70hWffhs+Z3z5uH5MxPIMe6oRLtjcoITNmLMPYH5p0+71YNHbFxNy+dMr

t2X8ouM8qYlj7bHZ/t4J0CNbwdcARph6/gWZ/UNQl94A8VDSkqvjSgDDfNyQVwheB5lQ

+TBZ7vjWd5q68F+QGwL+k6PB0+OoeubN7tBU9gGgAfEUoBpYo8iL2NcBE4egftqNK2pK

g5H+j3vt3N4hBIDy/RrF2cFHBk/dk+ZoNopwSNpfu902w6v9odfRgs5CbD53AC2rTnpE

oe2A==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature:dkim-signature;

bh=EgjFj8fG36APXkQC9T2Rbdv24NbL1ctw73lq6IaIADY=;

fh=W3hgI4TTNiLvnYtX8woC7fE/Y/d44LNi4hBCfxDSr4M=;

b=AMMS0mp0apgOz+Ud9D/6wqtYenZmzi0vvMRt0OfeGhA6sFHahyyEN/vZlKfKwDsAxt

ZaxBlr165dF/fhfBEpcM17z9JHflLEyw3QBPz0jxFamrBhdoiCyItvnk8K7v6L4at9dA

u4dB0UNdSBhKCVpzGztrW+qYeCVhzNEUev2WSdWbtGXohdp8tlCuH8RVVYlXRYN8WpQw

zMLLS+dusYRvChcKhW8is8zvX2gT7d6kIpyvDItyw4fWXEcShUqvuyf0LyBOzaZhNKnj

uTpkGdCIEh+wf7LBHJlDjV8GUsJs6XNc5VObG0GfPFRJv+4p46z5MXOTe9xQNNOvJX3s

mZNw==;

darn=mail.nl2k.ab.ca

ARC-Authentication-Results: i=2; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=OlFD7slc;

spf=pass (google.com: domain of jeydorlean@gmail.com designates 2607:f8b0:4864:20::334 as permitted sender) smtp.mailfrom=jeydorlean@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=pass header.i=@googlegroups.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=googlegroups.com; s=20230601; t=1722011621; x=1722616421; darn=mail.nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=EgjFj8fG36APXkQC9T2Rbdv24NbL1ctw73lq6IaIADY=;

b=I1HwEE00az3Ykejy/jliswPTDXuH/Zrq7J6ucIUK0h7O3b2oeyhMuUys65RA/bRRU3

lzVWYndrBy4dfVef9p5mrgTxubhskKko4LQat+xpkU9DHU+Jbfe4ebd3CkCoFQxTF+2F

mj7k2yA2JmjuGFArirvZO8n1wGnr16SZVhr5O0Rj6LDGI5EZUSfRrQjLJTYWHxhGLev/

TuaR8c3jbq5o8Rs8drsu/9g/mNy4CPvjMubhtez1izmXDxjkEqBHTYR8bvCJTMy1lmCz

pBU4R0Lcc1MWgeLPV74i8lkR7XnHh82uF4cajdKcsMu226x++dE3u+tqoSbkNSBnIMsc

8aUQ==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1722011621; x=1722616421; darn=mail.nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=EgjFj8fG36APXkQC9T2Rbdv24NbL1ctw73lq6IaIADY=;

b=CYYDXALlCEgbW8dq4AhTRZgppifHhAskOqYy9EKJNVaQz+VXii+Y61wWCDem7VzNQI

LDDspvP6pHOA6/30kfaJL3s+//PQsg1d5xzAuSGE6XpKXxBUJWOE/0Dy7B/wSdUcNQI7

0bm4XS2mor73TlBJ17r+NtpR5C4I8b2u8ioWSkwdj64oPOuk7BQFQjc7rmyv8OKqSz1+

5NGu/ZEmbCfo9N0sIu1M+WlBYAufCsJB71K88jJr7y8Wo0fRwYzy8mMTC7G66ZaaY+b4

g7GM9SMlOaUBRw+/coiuU5kLS6YIsoQvddTMUrRPulh4vZkXWba+V51qCuvCqG/e8GsU

Q+jQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1722011621; x=1722616421;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-beenthere:x-gm-message-state

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=EgjFj8fG36APXkQC9T2Rbdv24NbL1ctw73lq6IaIADY=;

b=GTMIEEAfM8Kcf+wKeT8rD4N2JNHDk+ezScI+F6rnbNMItaBYoeHno+N2M70XmGfgQ/

6BA8zyJOSVMqt8eM1AHP5UbhJo2hD/krcqTEixrlKdjbb189RsE476U3hnIGGTSPj3h6

1DyuFTA7TAcae32a/wyRaV8zifkMTpX8IOIsB9fOYastUsdpSM3MZHd+fEqVOoOXRceV

iTqz099DlmYzJvL79fvAylyELX0MYwtV7IyXZViELbVmnnkZYzLK1sQJaDLrHfkFwM2x

Tvi12dtvkKsNvukGFo0mdWdk6w/g02rGIEq09bdjy0epwegIkEyn2qw7yO2OqpObq11a

XJlQ==

Sender: dece15-912025586@googlegroups.com

X-Forwarded-Encrypted: i=2; AJvYcCXDmw8WrtKtpqaOmIJG6kaCtfN01O+ljoaM76Bon2IY+fM6FYnqz0XUxJTfiTXlh4KwsjkAvmGYI+BPvcioTfa3jJhPCA==

X-Gm-Message-State: AOJu0Yz5Ze01aGtv0/NPZhCr/BTr8AO1Fmvk9gNAoTXkKdlZHxP+SEg5

i7mhhqxsLPEk/LcBM40KUiXSSwCMVCwZmJ/nzqxZ529LtyP5MTRh

X-Google-Smtp-Source: AGHT+IG47Nw4iyaU3QEL/yA/HTCeZgEAirNA+nd0Rg6lyw7JFn3fVOfF68GRT5XqqhFxXVhiNp5nZA==

X-Received: by 2002:a05:6a00:9a6:b0:70d:2208:c98e with SMTP id d2e1a72fcca58-70ece541cacmr251933b3a.0.1722011620499;

Fri, 26 Jul 2024 09:33:40 -0700 (PDT)

X-BeenThere: dece15-912025586@googlegroups.com

Received: by 2002:a05:6a00:26c1:b0:706:7718:ce64 with SMTP id

d2e1a72fcca58-70ea99a260dls1273871b3a.0.-pod-prod-00-us; Fri, 26 Jul 2024

09:33:35 -0700 (PDT)

X-Forwarded-Encrypted: i=2; AJvYcCVMqKtVCjRKDmbt4/iUmud18yChB1z4/d+3mG6Wn0/hfWwXK16GpZfeTPkZFRL2ag7zQ+RBrLsQhikWwhVPMZ/fg9p+w/lAb8ANUDO1X5sLHB4=

X-Received: by 2002:a05:6a20:7fa8:b0:1c0:f0af:60d with SMTP id adf61e73a8af0-1c4a0e0d70fmr195519637.6.1722011615332;

Fri, 26 Jul 2024 09:33:35 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1722011615; cv=none;

d=google.com; s=arc-20160816;

b=P6WOHRFPkDDYzKtHCA8zJVGYTqgdwXlsr/9TWNSUjDFz95YELBHygPdki7dz/N9E1J

aFQJ3K4K1GK3vJ59qoiQ3E03J20DDB0nkEnrwGl6Ws0mkgJpew3zvqf4fWdQJMun5BCf

JIYxFHTet58+xIk6lT/LhpOib6/EhU/+eIqOZhCB9DsBTNwWPVZ9GJoaQ1RHmtLNEVCp

frYRiMVo/23+f+U5QDg+4s0KmCmYWOYISSuiTGJ6MHnV56TsRTM+ytq9gMmbHqxTxKnN

S8noauP52JYtknNzEL+JC0oBFxKcLxcha1+oIYa85ijHWaAiOFLEWDZdDp0sPSS0l1hO

9W8A==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=q/f0CtpSY05NgPSiwHaODDoP5N9KFezd8XN5X0VrUkU=;

fh=UIrWyaeA0/XXY+MjM93jKbXoT5amD4lIJ3SBEGwU67k=;

b=P6zFyivKna4upUfNq0ZvBvw0RiqEXyKH1o7fvn00w3p/Cs0eQHrcweX5b1Ev6ioV6v

g2uOiouvbISXbU/TwuNR9nkt7zn9UaE09cn/pDBVb9CPFIQnwCD1HQM+iP8VTT/ckS2j

P6GxTCn6QnQme56KMIMzeJwtrdDh3bf41KKuRTbfg63YBtEo5fAvQL4V8QwaNozeAFs+

MFjEJxvpT5zskKtb2gsoglMmBYo+RoUQs15V1Kda36Iy1NeD6vvUDU0jk0TMKe53dWXX

G/Si4cfIDcP7lTnZOTwsoUt7E0w0Rl4WMLdRHE/N5rbHeDwGwS3/KH56OrGErRRYF5Rt

eryg==;

dara=google.com

ARC-Authentication-Results: i=1; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=OlFD7slc;

spf=pass (google.com: domain of jeydorlean@gmail.com designates 2607:f8b0:4864:20::334 as permitted sender) smtp.mailfrom=jeydorlean@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=pass header.i=@googlegroups.com

Received: from mail-ot1-x334.google.com (mail-ot1-x334.google.com. [2607:f8b0:4864:20::334])

by gmr-mx.google.com with ESMTPS id 41be03b00d2f7-7a9f8653ae7si250232a12.3.2024.07.26.09.33.35

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Fri, 26 Jul 2024 09:33:35 -0700 (PDT)

Received-SPF: pass (google.com: domain of jeydorlean@gmail.com designates 2607:f8b0:4864:20::334 as permitted sender) client-ip=2607:f8b0:4864:20::334;

Received: by mail-ot1-x334.google.com with SMTP id 46e09a7af769-70361745053so533190a34.0;

Fri, 26 Jul 2024 09:33:35 -0700 (PDT)

X-Forwarded-Encrypted: i=1; AJvYcCXCpa7eJEtlKjOK3B9h66U2ozNmAMpEPrzaya19beVNX6ROna5JrkZT6//CymoMlh8kSR/qDdX8ZDZeVDux7bWHHWeEfJ/w8isIXdTIr4IzM4wI1yek5xVEhuC/sXjZm2viXrbSH9dwa9ejk3svna+fbUhEgdGP0/oS5cXu8oyaJcfY34nlqyYml2+D9/uO2KfU14EdFa8Cy4xiHjhEejiXvpySGU7aO7OAYa35BL7xB6i8H0c5/2Y3HrF756D1E8VZ9NN+Es9FZiXUkZFXumIYYIQkUAprsZjk0cSw5Ol2ndvAbomikuBRNv6Dx4lRdA0WHKzTs8NJFkJ0KLXitDkfQYfmP2mGk9x5gQdXyQNJPnzEr9iWiH6Lo4ThaUxXpF/BPE/wrhV9Aa4gBKskSCjLAMQycEcupDoLc65b3tj/REtTF6CZm1Z9oSdbdyKtuPVV8ZCawUsjlz/k+Dfwyu49IrnbCT9m+W1K

X-Received: by 2002:a05:6830:2a89:b0:703:a35e:a87f with SMTP id

46e09a7af769-70940c102cbmr108006a34.2.1722011614480; Fri, 26 Jul 2024

09:33:34 -0700 (PDT)

MIME-Version: 1.0

From: Jerry Dorlean

Date: Fri, 26 Jul 2024 22:33:22 +0600

Message-ID:

Subject: Urgent: We seeking fit guy !

To: dece15-912016917@googlegroups.com, dece15-912017260@googlegroups.com,

dece15-912020230@googlegroups.com, dece15-912020772@googlegroups.com,

dece15-912025199@googlegroups.com, dece15-912025586@googlegroups.com,

dece15-912027665@googlegroups.com, dece15-912027821@googlegroups.com,

dece15-912028234@googlegroups.com, dece15-912031641@googlegroups.com

Content-Type: multipart/alternative; boundary="000000000000948f6e061e291292"

X-Original-Sender: jeydorlean@gmail.com

X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass

header.i=@gmail.com header.s=20230601 header.b=OlFD7slc; spf=pass

(google.com: domain of jeydorlean@gmail.com designates 2607:f8b0:4864:20::334

as permitted sender) smtp.mailfrom=jeydorlean@gmail.com; dmarc=pass

(p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com; dara=pass header.i=@googlegroups.com

Precedence: list

Mailing-list: list dece15-912025586@googlegroups.com; contact dece15-912025586+owners@googlegroups.com

List-ID:

X-Spam-Checked-In-Group: dece15-912025586@googlegroups.com

X-Google-Group-Id: 745700075957

List-Post: ,

List-Help: ,

List-Archive:
List-Unsubscribe: ,



X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: We have HQ escorts & 5252 active female members. For more

>>> https://sites.google.com/view/ysgh22 it's totally free



Content analysis details: (8.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:334 listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:334 listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:334 listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:334 listed in]

[dnsbl.ahbl.org]

[209.85.210.192 listed in dnsbl.ahbl.org]

[209.85.210.192 listed in dnsbl.ahbl.org]

[209.85.210.192 listed in dnsbl.ahbl.org]

[209.85.210.192 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:334 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:334 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:334 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:334 listed in]

[dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2607:f8b0:4864:20:0:0:0:334 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:334 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:334 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:334 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:334 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:334 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:334 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:334 listed in]

[will-spam-for-food.eu.org]

[209.85.210.192 listed in will-spam-for-food.eu.org]

[209.85.210.192 listed in will-spam-for-food.eu.org]

[209.85.210.192 listed in will-spam-for-food.eu.org]

[209.85.210.192 listed in will-spam-for-food.eu.org]

[209.85.210.192 listed in will-spam-for-food.eu.org]

[209.85.210.192 listed in will-spam-for-food.eu.org]

[209.85.210.192 listed in will-spam-for-food.eu.org]

[209.85.210.192 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.192 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.210.192 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[jeydorlean(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list

2.5 SORTED_RECIPS Recipient list is sorted by address

0.0 HTML_MESSAGE BODY: HTML included in message

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

Subject: {SPAM?} Urgent: We seeking fit guy !



--000000000000948f6e061e291292

Content-Type: text/plain; charset="UTF-8"



We have HQ escorts & 5252 active female members.

For more ------------>>>

https://sites.google.com/view/ysgh22



it's totally free







































-------------



--

You received this message because you are subscribed to the Google Groups "Dece15-912025586" group.

To unsubscribe from this group and stop receiving emails from it, send an email to dece15-912025586+unsubscribe@googlegroups.com.

To view this discussion on the web, visit https://groups.google.com/d/msgid/dece15-912025586/CAOY83nam5_FFZaF2c3nggdPY1QA3hmtYDnXoQhgCYHE_ZLwiDQ%40mail.gmail.com.



--000000000000948f6e061e291292

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



We have HQ escorts & 5252 active female members.
Fo=

r more ------------>>>

/ysgh22">https://sites.google.com/view/ysgh22

it's totally f=

ree

















=



-------------








--


You received this message because you are subscribed to the Google Groups &=

quot;Dece15-912025586" group.


To unsubscribe from this group and stop receiving emails from it, send an e=

mail to de=

ce15-912025586+unsubscribe@googlegroups.com.


To view this discussion on the web, visit
com/d/msgid/dece15-912025586/CAOY83nam5_FFZaF2c3nggdPY1QA3hmtYDnXoQhgCYHE_Z=

LwiDQ%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https://grou=

ps.google.com/d/msgid/dece15-912025586/CAOY83nam5_FFZaF2c3nggdPY1QA3hmtYDnX=

oQhgCYHE_ZLwiDQ%40mail.gmail.com.




--000000000000948f6e061e291292--

X-rated Google Groups spam Alison <xuthisphicarchoti@gmail.com> from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 26 Jul 2024 13:31:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sXQdz-00000000FMN-2p1U

for dave@doctor.nl2k.ab.ca;

Fri, 26 Jul 2024 13:30:23 -0600

Resent-From: The Doctor

Resent-Date: Fri, 26 Jul 2024 13:30:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wm1-f62.google.com ([209.85.128.62]:43393)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sXLvY-00000000702-1SGS

for root@nl2k.ab.ca;

Fri, 26 Jul 2024 08:28:16 -0600

Received: by mail-wm1-f62.google.com with SMTP id 5b1f17b1804b1-427a7a65e7dsf14977725e9.1

for ; Fri, 26 Jul 2024 07:26:18 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1722003971; cv=pass;

d=google.com; s=arc-20160816;

b=UOzlo0BlptYq3R2pFdcuKvrIdZDLL55AxRRGAssCV7ZS4A4NoyLWVtWZB8ItBSnzdL

79dd91GzM6fZGyCpxxmcNKZZzuJ03/2t+U9EgUaHlC1rmOklY7Io+Ce36iLlG5tRt2ZG

v0M/WWx0CJcFEZXz6RuppwXsZ/RbzRlzbF24iy+/lZuqJbZ6ATDOqOAO19ZlIHuDU8f3

Hmh66QCudh4SjI+NpzcaBhfdOt3xbx6lt+BGlueYFuT18EBpqi8m5732H9g5BhAhaeD3

ddcLY4IWIvTGXPbfcEZc7NE54osiVykXM3Z6m/tNOTx363k2wmCyAsIW67OKJyvAAh6U

aSfQ==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature:dkim-signature;

bh=wIVmYcYfBMNbSVdhDirA+5QERzjEy5DYmQGEL2znoUc=;

fh=vra+G8dYYcXqIOmofFXe0hdDsExOsUO+VrZ3H/7hvio=;

b=nWLY3QTjpRpf9X3CYI9bDu80VO4/EiLDY66GY04iDTX+sM3vBrU8KEQvx+0nqmCoCg

cgn5KpSJSUS7lxi/zCyACpskti4F81dL2+i5saBPCmBXy8OLmI3QKWsNVgy9OfKvyZP5

JOrg4NzFUSET2MqEV5ZGf7e38uc4Q//PFCsmJw/7jB0fDkLYhEe1SD/4xe1wDF7rM8kS

TTdS5ctgK1+Ooxi7pb6Ma0L+Th6PpwocaYio2xhDvSwvEmaA7Qqg027JcUXSoHQWxLqL

Y1ZUJHkx7viYLbfmLxe/z/Pa4nLLI5ews8tEAgQqRjm7PZKSBSi3jBHxim6sMGDRCyKr

GS7Q==;

darn=nl2k.ab.ca

ARC-Authentication-Results: i=2; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=XZjd3M0b;

spf=pass (google.com: domain of xuthisphicarchoti@gmail.com designates 2a00:1450:4864:20::233 as permitted sender) smtp.mailfrom=xuthisphicarchoti@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=pass header.i=@googlegroups.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=googlegroups.com; s=20230601; t=1722003971; x=1722608771; darn=nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=wIVmYcYfBMNbSVdhDirA+5QERzjEy5DYmQGEL2znoUc=;

b=I3lBW0rMDmMFhvEgzcWJgaN7e1r/N0pk/y1WFRkFq0LXpzsZCgNgCaBDipoFiLwlb8

fRVnXDyd2olndeWuTj3Tam0qRHxJu/ti+mIorLCPyeeBM6cVzcezHzPWHA/lUzLrAIgN

XRU79IHFrVXmrks/0c3TNCBQbsz5DArkIJXZiSBeE7U/rtZ3COIZEgjPCF8zXd46ff1/

RL0AHhb0Sf7iwAP8vuW6dDY8kpIBD7oUQ6W262l7VpJ44LI2AVTYidUFBxjkjNzIPJoe

TsuhMwr5OglLpqP3JE5ZFjAKCf4XTe6WgD1RfatCYCjb9ybkYzmNLN/OM+U9RGV4tTqM

neiQ==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1722003971; x=1722608771; darn=nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=wIVmYcYfBMNbSVdhDirA+5QERzjEy5DYmQGEL2znoUc=;

b=DDiTHhbhsFjFgljJufc0HXwBxWOQtM3IweoRBcefWFBWO9VzicznD/C841UISTewy6

eeOIjC9QvcfanGNP3AKLNDadnGUKeQSom59ptFxzWvO1ab6VrGeWH+dMFMYFFwAYxmqV

RVv54TP1xF7w73Rn+K80xhNP6OipSRhqMjRk7pCTFXAKYv/mMEyKDdaWqXilJFsqFCNW

NVxA3ua0yClF6FWslFJRuqGAuoH9MnazOIG4EcrMahiFM1XXLC7gO0IpbK8FyyS/G9lu

byGCeMAj17FW3g44spKnNAOqAbAupBlG3wkGywNtvS5/JwPPbd5qh0G9/basLJhB9ZP+

Nx+A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1722003971; x=1722608771;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-beenthere:x-gm-message-state

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=wIVmYcYfBMNbSVdhDirA+5QERzjEy5DYmQGEL2znoUc=;

b=JdL83DEI/iihUkR+iPQlHeNVa8beN2hnSG6q7xAEM/wxISiEAmNWJfJjxzeQodSkCR

B+rYP+pIujLENUDI7VwUzdC+Dc1iZupsy/2T1up4NBk0SQkBtxUl6Z7TD4Wbo23NoiUL

N0YHMn1Harkqs70D8G88b7Rz5rcF5C0hPmoWCXYyFvqgqUqcNsVfNsD3TRjhD4q21j9H

stpqvWp48xxRhlhFa1FGPJNqOiwwbUUuk/7DFY+Ut6juzzWKsdLjAZDKzqLU22tASoz/

OIIylWHMwz3hv1WPH9NXmyeOiqD5PUx59KOjQjQvDNfNMbLqVO/fQMXxSPL6V59rdm2m

adNQ==

Sender: dece15-912025586@googlegroups.com

X-Forwarded-Encrypted: i=2; AJvYcCXNVlpne2Sn0a60tVP8a0w0e+R4IZ9/N0o9HEftW47XJhlJKATnzrTaIL0c7u7tYMLCrZfPKNl3wkO/jI9NXJg=

X-Gm-Message-State: AOJu0YyTtmrLfUZuQE8iiSXr4x5d4br8g+lHeFiad28LR+lCFygXPlVr

4g5+x3E01XSjUhcBxLWAB6Ga2Z3oZ2pKGBnnh7afgFfpVbeLPi1a

X-Google-Smtp-Source: AGHT+IFAdCSlzh024VKeBg6e38CI9wEyJsP51wOpWkZdha59vcdaeM8XnIdOrrh2sA2+Vdx75VqBVw==

X-Received: by 2002:a05:600c:5126:b0:428:29e:67cc with SMTP id 5b1f17b1804b1-42803b09634mr51283115e9.10.1722003970497;

Fri, 26 Jul 2024 07:26:10 -0700 (PDT)

X-BeenThere: dece15-912025586@googlegroups.com

Received: by 2002:a05:600c:3ca2:b0:426:ab3f:fafd with SMTP id

5b1f17b1804b1-42803abfdf0ls9537615e9.0.-pod-prod-00-eu; Fri, 26 Jul 2024

07:26:05 -0700 (PDT)

X-Forwarded-Encrypted: i=2; AJvYcCUAkKYWdQ2XQb1z8lY0zShbZ/ATV5vgYKzCtcqcktjnFJQ5T4Hs1TizevEeTtCNP0MYdRMd8/cFVPUJNkxwDVTx3po85PTSxJvDKUuBHEEHL7Q=

X-Received: by 2002:a05:600c:4fc9:b0:426:6fb1:6b64 with SMTP id 5b1f17b1804b1-427f99f99f5mr67000055e9.7.1722003965181;

Fri, 26 Jul 2024 07:26:05 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1722003965; cv=none;

d=google.com; s=arc-20160816;

b=dCcOee8Q22DeHOfZPLPHjuY8InmLb3wEZsxmQTxvOe+yDHFDNlqnkUgh15ynOo5uSE

ygXodxtOxd2ySykjZulHTLHCyqs6aOLXwvPhsYM5lKln7Go6KCd5lBOVbTD+nS61FgcM

yP+JLRWoVtJX9xjF/Tq3FB8MWorUSm/c2pmYiDoo2NKSMAMSmGOGFFBL1KhZD8SqhH4J

H/Mkb2oYUqK24dY4sbCV4QNGUkk4Ch8Avcf90gRlbf3hvJRl5w8tHCEAXyvkB2k1KFYv

WvuEBagWtIKpOcmPBTWd76pXPoQQBoj5e/uTcd2+PAya7obKN5y40wIxxf8lPCQMQi9a

lnzg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=4/6j8iZq99Z4CiyMFLjAnW+Cwhy40cRZT1PFhB8XAgg=;

fh=+ouDwoyc6udhY0Hwn87p85F1MvH0Zhvh/Ec3VqHnsFo=;

b=1Eov8Tm2QKkX2FQwGc06dxqRqjtZZxHnLlvzHeCS7gRRvdTpgstl94IwUSxWInenOz

3ZAcBduCWSsF8hOY5FFFI/h/FaWN/42dtziw48ZWEfCGWJytTh0wiDOndn1ytihUFYjF

bF+jjBIokPBrjxqrsOeFOEvWAj7gsX3AxgcrM3JBOeAx7lIP8mOKI/nxzDVliTeMNGKe

ku9NUSLvZLB9zv9yvrNc9+GSs6NTyefISKr9HMsVjFc3reT3CYtJXONQMbQWPwqI/dg2

JduSQd3WTHQgIe09cj3DSHFnbAMEb7Q2Ko9uLZCZ8KBN2eKGRciggUsX+g9ycGNTRV8F

wvRw==;

dara=google.com

ARC-Authentication-Results: i=1; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=XZjd3M0b;

spf=pass (google.com: domain of xuthisphicarchoti@gmail.com designates 2a00:1450:4864:20::233 as permitted sender) smtp.mailfrom=xuthisphicarchoti@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=pass header.i=@googlegroups.com

Received: from mail-lj1-x233.google.com (mail-lj1-x233.google.com. [2a00:1450:4864:20::233])

by gmr-mx.google.com with ESMTPS id 5b1f17b1804b1-427ff751fc4si2925355e9.1.2024.07.26.07.26.05

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Fri, 26 Jul 2024 07:26:05 -0700 (PDT)

Received-SPF: pass (google.com: domain of xuthisphicarchoti@gmail.com designates 2a00:1450:4864:20::233 as permitted sender) client-ip=2a00:1450:4864:20::233;

Received: by mail-lj1-x233.google.com with SMTP id 38308e7fff4ca-2f035ae0ff1so11841621fa.0;

Fri, 26 Jul 2024 07:26:05 -0700 (PDT)

X-Forwarded-Encrypted: i=1; AJvYcCVtTr++uR1QpgIAv53uq1eCQSJcHY25gx+vAKrtwsAaJjFJU3zyIjhCcV/qwNWsmh+dlJVwmMdhz4PB3IZLrXGHpwii9EpFvLf4ktYLXLwY6QB73XV0enf8/dQQduYKp28wkNbTRAZjs+u69F1/9upmGINz2uKofMOWAJhhN0qs++BQYW+N29LZ/tXM4SDT+IFgigj1VNecPFe6vaiXoau/LT3cwzDH2R22C4nb07MS5n0aajU6GcJmFgOh+CdyKtDgyKxJx7DoJwuMwaQQhH1/R13/SiNTJ8KWoha/rIZUWHmoZCiG/vt6xDuKZUfvPo7m22uPZlVGeV4b422jCWYJSV3GoE6pmr+xnktm29gjNH2NGqow/KY3FMjvLTXl2dP70NJ9ImmMrWFw86qdtYKeht7bYFRsQ7Awk7YIK8BIt1KdP/xoEHfO7DmVB1ENFpXeLqnyGaKZZduK5chYsbq/cjXIpbQWzZps

X-Received: by 2002:a2e:9b14:0:b0:2ef:28db:97c0 with SMTP id

38308e7fff4ca-2f03aa1ff5cmr19039201fa.4.1722003963782; Fri, 26 Jul 2024

07:26:03 -0700 (PDT)

MIME-Version: 1.0

From: Alison

Date: Fri, 26 Jul 2024 20:25:51 +0600

Message-ID:

Subject: Craigslist hookups for free

To: dece15-912016917@googlegroups.com, dece15-912017260@googlegroups.com,

dece15-912020230@googlegroups.com, dece15-912020772@googlegroups.com,

dece15-912025199@googlegroups.com, dece15-912025586@googlegroups.com,

dece15-912027665@googlegroups.com, dece15-912027821@googlegroups.com,

dece15-912028234@googlegroups.com, dece15-912031641@googlegroups.com

Content-Type: multipart/alternative; boundary="000000000000902e97061e274ad6"

X-Original-Sender: xuthisphicarchoti@gmail.com

X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass

header.i=@gmail.com header.s=20230601 header.b=XZjd3M0b; spf=pass

(google.com: domain of xuthisphicarchoti@gmail.com designates

2a00:1450:4864:20::233 as permitted sender) smtp.mailfrom=xuthisphicarchoti@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=pass header.i=@googlegroups.com

Precedence: list

Mailing-list: list dece15-912025586@googlegroups.com; contact dece15-912025586+owners@googlegroups.com

List-ID:

X-Spam-Checked-In-Group: dece15-912025586@googlegroups.com

X-Google-Group-Id: 745700075957

List-Post: ,

List-Help: ,

List-Archive:
List-Unsubscribe: ,



X-Spam_score: 9.4

X-Spam_score_int: 94

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Find best teens, hot wives, neighbours milf. these women are

f*ck for free. see here> https://sites.google.com/view/hiya27 it's totally

free



Content analysis details: (9.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2a00:1450:4864:20:0:0:0:233 listed in]

[dnsbl.ahbl.org]

[2a00:1450:4864:20:0:0:0:233 listed in]

[dnsbl.ahbl.org]

[2a00:1450:4864:20:0:0:0:233 listed in]

[dnsbl.ahbl.org]

[2a00:1450:4864:20:0:0:0:233 listed in]

[dnsbl.ahbl.org]

[209.85.128.62 listed in dnsbl.ahbl.org]

[209.85.128.62 listed in dnsbl.ahbl.org]

[209.85.128.62 listed in dnsbl.ahbl.org]

[209.85.128.62 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2a00:1450:4864:20:0:0:0:233 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2a00:1450:4864:20:0:0:0:233 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2a00:1450:4864:20:0:0:0:233 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2a00:1450:4864:20:0:0:0:233 listed in]

[dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2a00:1450:4864:20:0:0:0:233 listed in]

[will-spam-for-food.eu.org]

[2a00:1450:4864:20:0:0:0:233 listed in]

[will-spam-for-food.eu.org]

[2a00:1450:4864:20:0:0:0:233 listed in]

[will-spam-for-food.eu.org]

[2a00:1450:4864:20:0:0:0:233 listed in]

[will-spam-for-food.eu.org]

[2a00:1450:4864:20:0:0:0:233 listed in]

[will-spam-for-food.eu.org]

[2a00:1450:4864:20:0:0:0:233 listed in]

[will-spam-for-food.eu.org]

[2a00:1450:4864:20:0:0:0:233 listed in]

[will-spam-for-food.eu.org]

[2a00:1450:4864:20:0:0:0:233 listed in]

[will-spam-for-food.eu.org]

[209.85.128.62 listed in will-spam-for-food.eu.org]

[209.85.128.62 listed in will-spam-for-food.eu.org]

[209.85.128.62 listed in will-spam-for-food.eu.org]

[209.85.128.62 listed in will-spam-for-food.eu.org]

[209.85.128.62 listed in will-spam-for-food.eu.org]

[209.85.128.62 listed in will-spam-for-food.eu.org]

[209.85.128.62 listed in will-spam-for-food.eu.org]

[209.85.128.62 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.62 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.62 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[xuthisphicarchoti(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list

2.5 SORTED_RECIPS Recipient list is sorted by address

0.6 J_CHICKENPOX_12 BODY: 1alpha-pock-2alpha

0.0 HTML_MESSAGE BODY: HTML included in message

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

Subject: {SPAM?} Craigslist hookups for free



--000000000000902e97061e274ad6

Content-Type: text/plain; charset="UTF-8"



Find best teens, hot wives, neighbours milf.

these women are f*ck for free.

see here> https://sites.google.com/view/hiya27



it's totally free







































-------------



--

You received this message because you are subscribed to the Google Groups "Dece15-912025586" group.

To unsubscribe from this group and stop receiving emails from it, send an email to dece15-912025586+unsubscribe@googlegroups.com.

To view this discussion on the web, visit https://groups.google.com/d/msgid/dece15-912025586/CADfKbYLU5pqwPcmTkF3LbqV5yyWX0%3D%2BGephCpkzoyvy04TGaHA%40mail.gmail.com.



--000000000000902e97061e274ad6

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Find best teens, hot wives, neighbours milf.
these wome=

n are f*ck for free.
see here> =C2=A0 =C2=A0
.google.com/view/hiya27">https://sites.google.com/view/hiya27

it=

's totally free













=







-------------








--


You received this message because you are subscribed to the Google Groups &=

quot;Dece15-912025586" group.


To unsubscribe from this group and stop receiving emails from it, send an e=

mail to de=

ce15-912025586+unsubscribe@googlegroups.com.


To view this discussion on the web, visit
com/d/msgid/dece15-912025586/CADfKbYLU5pqwPcmTkF3LbqV5yyWX0%3D%2BGephCpkzoy=

vy04TGaHA%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https://=

groups.google.com/d/msgid/dece15-912025586/CADfKbYLU5pqwPcmTkF3LbqV5yyWX0%3=

D%2BGephCpkzoyvy04TGaHA%40mail.gmail.com.




--000000000000902e97061e274ad6--

Amazon phish from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 25 Jul 2024 13:36:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sX4FG-000000005Hr-21FJ

for dave@doctor.nl2k.ab.ca;

Thu, 25 Jul 2024 13:35:22 -0600

Resent-From: The Doctor

Resent-Date: Thu, 25 Jul 2024 13:35:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f67.google.com ([209.85.167.67]:57567)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sX3t9-000000002M3-3sfa

for root@nk.ca;

Thu, 25 Jul 2024 13:12:37 -0600

Received: by mail-lf1-f67.google.com with SMTP id 2adb3069b0e04-52efaae7edfso684220e87.2

for ; Thu, 25 Jul 2024 12:10:37 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=unauthorizerd-com.20230601.gappssmtp.com; s=20230601; t=1721934631; x=1722539431; darn=nk.ca;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=BD+s0tZ3djbUXnLbgbU12wN8XPOLGHTYXsCxw/KBikE=;

b=JxLgBa8DXy9WEaUfGH2v9LHoSEbj5+5vllMuXgfPo2tkSn4yUY+SBgHwUN8xGRWzBB

MnA1ToWGFBnUtaPV8NMohTY9PdvOLDW0FxfoJ9yCbPV/U3rI7feKHsXLtcT3JCxXrL2C

fTWNjVRcvHsxOyhjxS8C9DJgVfmTnGYT/FP5Dk5KjI67NhfmZe+0w85sx2ftvt74OLq0

qMJVvVtDNNLtXCPdwUIJefxBIttUTGp3K80ywaTiGYpH7vedLXXf++KgRMlqqIMMBqXR

QnrKnmGun/OYtQu8fkUf2yc1CJiRLKBwddw3YfGHwcdokbL2Tkr9zrNCYj3Eb7f0DodS

XOxQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1721934631; x=1722539431;

h=to:subject:message-id:date:from:sender:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=BD+s0tZ3djbUXnLbgbU12wN8XPOLGHTYXsCxw/KBikE=;

b=SwL0Cbj5nYFTzlz4NgNPgN6MrQM4RaM4uMjdTjIEyeYJOP+2SjflRwj2iFzJfWhYzd

uF3tunx++rs+ZdyrXLuo3YUwUElk/d5jAQuQnuSyxSIwPTGyWPOuzWCPudUCXT3EUOwe

yJsQSgJZ87BLHE+dA0TpG6Hd2KLkTKvlVgnKovYp0jSEVl6A15AI5DufQ1kZPaX6Xy5i

AeSUiDz7Iq9rB1rL2jDpI5FTjD40NZpiIz7Y9JKzFUpjAqus/mUg0tnXzaecIoZcDxXH

uqKk+B4Po5RujYaK8ng4jhMeM+532NHF2mk5+c6UghXPDOaaAe/zjV3TNxU9DXQsLHyP

deGg==

X-Gm-Message-State: AOJu0YzExLHDs8llSZPNxzJHpr6ww4+y+382WgILwmnHh7pN23HDWYYa

a1nYyeH94MM0o6WiAsvB+PQobNPTbyOFsjs9l29jMhhtGjkl/429q/KZvKUe3yKR3rCnDIX4k16

OxfxMvus8cWyGzWN9S3V6rRE/APgucZXrtCop6cJV6ZIkc/ISvjBYp+Ax

X-Google-Smtp-Source: AGHT+IFrLwepYEdY/UOZ7i2EEmSVXsA6pZgVvtLPc9cvaYJzLJcfpwEyYuuHZTVrmE3ynTrwLZ6Uu5AFEXVChJQ4cIA=

X-Received: by 2002:a19:ee0b:0:b0:52c:db04:5a57 with SMTP id

2adb3069b0e04-52fd60355b7mr1748163e87.31.1721934630642; Thu, 25 Jul 2024

12:10:30 -0700 (PDT)

Received: from 64342736533 named unknown by gmailapi.google.com with HTTPREST;

Thu, 25 Jul 2024 12:10:30 -0700

MIME-Version: 1.0

Sender: Amazon Security

From: Amazon Security

Date: Thu, 25 Jul 2024 12:10:30 -0700

X-Google-Sender-Auth: 6BuaolYUpXmG2yWonpS-rPv-MXk

Message-ID:

Subject: Re: [Amazon Notifications] Your Amazon account is temporarily on hold

because of an unusual login. (Thursday, July 23, 2024 04:47 PM) - CASE#871JSSFBC

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000fc750d061e1725db"

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Costumer, Your Amazon account is temporarily on hold

because of an unusual login. About this activity Thursday, July 23, 2024

04:47 PM Around Florida, United States iPhone ( Mozilla/5.0 (iPhone [...]





Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.67 listed in dnsbl.ahbl.org]

[209.85.167.67 listed in dnsbl.ahbl.org]

[209.85.167.67 listed in dnsbl.ahbl.org]

[209.85.167.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.67 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.67 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.67 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.67 listed in will-spam-for-food.eu.org]

[209.85.167.67 listed in will-spam-for-food.eu.org]

[209.85.167.67 listed in will-spam-for-food.eu.org]

[209.85.167.67 listed in will-spam-for-food.eu.org]

[209.85.167.67 listed in will-spam-for-food.eu.org]

[209.85.167.67 listed in will-spam-for-food.eu.org]

[209.85.167.67 listed in will-spam-for-food.eu.org]

[209.85.167.67 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.67 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.67 listed in wl.mailspike.net]

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 FROM_FMBLA_NEWDOM From domain was registered in last 7 days

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

Subject: {SPAM?} Re: [Amazon Notifications] Your Amazon account is temporarily on hold

because of an unusual login. (Thursday, July 23, 2024 04:47 PM) - CASE#871JSSFBC



--000000000000fc750d061e1725db

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Costumer,

Your Amazon account is temporarily on hold because of an unusual login.

About this activity

Thursday, July 23, 2024 04:47 PM

Around Florida, United States

iPhone ( Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X)

AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Mobile/15E148

Safari/604.1 )

Check Activity

Please verify and change your password to reactivate your Amazon account.

If we are unable to complete this action within 24 hours, all pending

orders will be canceled, and you won't be able to access your account until

this process is complete.

Thank You,

Security Team

[image: Meta]

=C2=A9 Amazon, Inc., Attention: Community Support, 1 Prime Way, Menlo Park,=

CA

94025

This message was sent to membership .

To help keep your account safe, please do not forward this email. Learn mor=

e





--000000000000fc750d061e1725db

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




ellspacing=3D"0" cellpadding=3D"0" align=3D"center" style=3D"border-collaps=

e:collapse">

x-width:630px;margin:0" dir=3D"ltr" bgcolor=3D"#ffffff">
cellspacing=3D"0" cellpadding=3D"0" align=3D"center" id=3D"m_-419099353300=

0013413email_table" style=3D"border-collapse:collapse;max-width:630px;margi=

n:0">
ody>

t-family:Helvetica">
llpadding=3D"0" style=3D"border-collapse:collapse">

"20" style=3D"line-height:20px" colspan=3D"3">

" colspan=3D"3" style=3D"line-height:1px">

yle=3D"display:block;width:15px">
" cellspacing=3D"0" cellpadding=3D"0" style=3D"border-collapse:collapse">
body>
tr>
tr>

;line-height:0px">
class=3D"CToWUd">		<=

/td>

:15px" colspan=3D"3">

=3D"display:block;width:15px">

ay:block;width:15px">
g=3D"0" cellpadding=3D"0" style=3D"border-collapse:collapse">
height=3D"20" style=3D"line-height:20px">
tr>=


m_-4190993533000013413mb_text" style=3D"font-family:Helvetica">Dear Costume=

r,

ly:Helvetica">Your Amazon account is temporarily on hold because of an unus=

ual login.

>

ont-family:Helvetica">About this activity

order=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0" style=3D"bor=

der-collapse:collapse">
style=3D"height:44px;vertical-align:center">
:44px"><=

/table>
>
>
ca">Thank You,
Security Team

ps://static.xx.fbcdn.net/rsrc.php/v3/yD/r/KJyTP_2W_qx.png" style=3D"border:=

0" class=3D"CToWUd">		Thursday, July 23, 2024 04:47 PM

xx.fbcdn.net/rsrc.php/v3/yK/r/EYwma6hBA2v.png" style=3D"border:0" class=3D"=

CToWUd">		Around Florida, United States

Hw7A.png" style=3D"border:0" class=3D"CToWUd">		iPhone ( Mozilla/5.0=

(iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, =

like Gecko) Version/17.4.1 Mobile/15E148 Safari/604.1 )

=3D"0" style=3D"border-collapse:collapse">

=3D"line-height:7px">

me-qr.com/Lsme1S1q" style=3D"color:#1b74e4;text-decoration:none" target=3D"=

_blank">
"0" style=3D"border-collapse:collapse">

pse:collapse;border-radius:6px;text-align:center;display:block;background:#=

f1c65d;padding:8px">
1b74e4;text-decoration:none;display:block" target=3D"_blank">

size=3D"3">Check Activity
t>

style=3D"line-height:8px">

ight:13px">

=3D"line-height:15px">

13mb_text" style=3D"font-family:Helvetica">Please verify and change your pa=

ssword to reactivate your Amazon account. If we are unable to complete this=

action within 24 hours, all pending orders will be canceled, and you won&#=

39;t be able to access your account until this process is complete.<=

/td>

=3D"line-height:15px">

=3D"display:block;width:15px">

ay:block;width:15px">
g=3D"0" cellpadding=3D"0" align=3D"left" style=3D"border-collapse:collapse"=

>

ht:19px">

e-system,BlinkMacSystemFont,Helvetica">
" cellpadding=3D"0" style=3D"border-collapse:collapse;color:#8a8d91;text-al=

ign:center;font-size:12px;font-weight:400;font-family:Roboto-Regular,Roboto=

,-apple-system,BlinkMacSystemFont,Helvetica">

" style=3D"font-size:12px;font-family:Roboto-Regular,Roboto,-apple-system,B=

linkMacSystemFont,Helvetica">

nt-size:12px;font-family:Roboto-Regular,Roboto,-apple-system,BlinkMacSystem=

Font,Helvetica">3D"Meta"
acebook.com/images/email/meta_logo.png" style=3D"border:0" class=3D"CToWUd"=

>

oto-Regular,Roboto,-apple-system,BlinkMacSystemFont,Helvetica">=C2=A9 Amazo=

n, Inc., Attention: Community Support, 1 Prime Way, Menlo Park, CA 94025
d>

Regular,Roboto,-apple-system,BlinkMacSystemFont,Helvetica">This message was=

sent to
blank">membership.
To help keep your account safe, please do not fo=

rward this email.
arget=3D_blank">Learn more

eight=3D"10" style=3D"line-height:10px">

width=3D"15" style=3D"display:block;width:15px">

"20" style=3D"line-height:20px" colspan=3D"3">

an>
3f4faaeG5b0581311d19G5fe13ed8afd80G18e" style=3D"border:0;width:1px;height:=

1px" class=3D"CToWUd">




--000000000000fc750d061e1725db--

x-rated google Groups spam MARY <petionjreynold@gmail.com> frm Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 25 Jul 2024 08:52:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sWzoJ-000000002B2-3Ttz

for dave@doctor.nl2k.ab.ca;

Thu, 25 Jul 2024 08:51:15 -0600

Resent-From: The Doctor

Resent-Date: Thu, 25 Jul 2024 08:51:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f188.google.com ([209.85.221.188]:56418)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sWysQ-00000000LJk-1T2F

for root@nl2k.ab.ca;

Thu, 25 Jul 2024 07:51:57 -0600

Received: by mail-vk1-f188.google.com with SMTP id 71dfb90a1353d-4ef016f967bsf391792e0c.0

for ; Thu, 25 Jul 2024 06:49:31 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1721915365; cv=pass;

d=google.com; s=arc-20160816;

b=qi7ZsI/WBBN/1j8XcB+S0UmCObsDPBN1krKu3KAqItebQR7gD8AUb6+EOlxnjbCALm

5Y1JzyPOVQxUHxNTSELchc/Adw2DzMBAFOn2N9r19l0czTWAB39Tzzcmygbrrigt0oR+

K/KNw1biPdxeWvD6NE77I+Rn2LQZDUq2w14d6KI/W/BSCqdGRDCk+rxUcXCfmcL+fIcg

qA7BwIcSaUXY7fo7+y/8fhBLH79xKs9oDLsK2OlW0ZBLeeWwKFDK4PTstE3hIi12lM3Q

/MEYOoGagHn0DiRf6Sru1j9miiaFxMj42s2Qy94GPM0GJfQZNFxhBZNGZ3vDu7PsWs69

MuLA==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature:dkim-signature;

bh=ZWp3ql1+mURIwVO8csYvj4FDtUXOrmJ+ZT5va0rSurQ=;

fh=2ZM6AgMpO+FljO4jPY4idSeI7ctGi1BO8iB8MMLXxNc=;

b=xoS6StXUe581rCNd6btojzwkh06Bu/S6Y3DewSmgwrzqi9q/pvC1+rtOQjwz1NIjx3

NVwqEOdGsOf9QoCdITZYySGaWzpIHea4aBRxUNDUQ7FJvalntScKto4DXJqMrbMT+A6c

WIw6uLZYzi7wqHQTh0pCFI4wcY/zihLzIDW/jTenz/Rr3RPvJdLbWiofMzVhWr5i+lw4

FNSuVQserFke4kqQvJQTmrjPisKDxJ/rFqGcVdO9SPfU5BY47OWUVPu0ygfsKI7YabIe

ZIO69lSzXdCWwzZmUfp3qZa4TTmKvN6eQ7SdQgKvWWlbXIamDePaRM4RCplk3er8YGhQ

LNww==;

darn=nl2k.ab.ca

ARC-Authentication-Results: i=2; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b="CBwY/u5R";

spf=pass (google.com: domain of petionjreynold@gmail.com designates 2607:f8b0:4864:20::52f as permitted sender) smtp.mailfrom=petionjreynold@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=pass header.i=@googlegroups.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=googlegroups.com; s=20230601; t=1721915365; x=1722520165; darn=nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=ZWp3ql1+mURIwVO8csYvj4FDtUXOrmJ+ZT5va0rSurQ=;

b=RsIKuTqAY7ghtcEboDm7bMHW8d1r0xOt3HOJH6Ro7/0vqmUbCNzV2ckkuazqjInTp5

WcivoZNdgG/XVOHRaMCaOtwOt5r6Yi44w1VujXmQNfj9pdEZ4wisb8s0LpftaHd+aIXu

ht1Xioc9rD3a+0pBRcHp/ZRAPM/vpMWUqjohZjgEJkAtctbcDs+VMmaVbe93CKrUs6Gi

K+5DI7XWT2w2ki7I30sYg0gv8i8apyZ0nT2nFZRbDa2Can1JPomxpv2HrfN2LysXnXgI

Dk9QEtVF2SxXVblN/0W3nsFGY2iYy2BWSnKG9imeEkHwzk5+DEv+cxTYvxgHDl/BuYax

Hy0w==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1721915365; x=1722520165; darn=nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=ZWp3ql1+mURIwVO8csYvj4FDtUXOrmJ+ZT5va0rSurQ=;

b=GxwjKtB3fiG+3JBG3AmWim09ZOcZu0QqXJcwwUlOISaH1laxs3DMp9FrqcWCRiEZ3/

MMG66aPt+BomSlw8cbdicqEbZPbVXR0CgWQ8W647YnwM8yrKXDeC/oB2um6bsaXMCQiZ

mGrh/4B+ZCii0jgnnKI3coJ9GsL7UlFHD3lzlOZsDTF2B6JTIYT8iBgnxjG7FDxUBQMK

TXowED9okTTlENW3zt82rajwRCD+c1eRCweJ8sucu2QNWYD0y+PtaanpRfJCO4WDimeL

srgxVYaTp/6RRVXS8LgV5/YSOU5/+JS6cJ+11yFyrtbq6FUF9WOHEO+rraA/FHcJOtlv

z/DQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1721915365; x=1722520165;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-beenthere:x-gm-message-state

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=ZWp3ql1+mURIwVO8csYvj4FDtUXOrmJ+ZT5va0rSurQ=;

b=Av5WZYKZWMnBAnoAneUxaXGGfo3rMY2Tk0xs0iy02wc6x+BjZW4QAb14nL3EakeUiP

pS5fUtHRike4cysm+Dr0uP7WvYjKGgDi0XYu2CQnheTYoTuCMGRWbVuaK7AbWIOGbzKP

N40gh3/kbK/AQtMUu2Y2NiPAJS9VkBKzohXs0czF/GhOmJR585f2tbx7yYhIlq4McMkP

2zZ+E1u/IO7AxF/fckLxHsIP1HIDVtXVInVR8DkNzIbMAZpV0XFOw6N6RRPHAW1+jypH

oe1+oUd4t1ZgpN9ZPaCcddxrAoD2WqGqlVLtVAfCljP8TmQjymMVgKWfZ2qcrp+h6naH

QSDw==

Sender: dece15-912025586@googlegroups.com

X-Forwarded-Encrypted: i=2; AJvYcCUSWjgA4sE6k7bFyIwe2Ia6Yfbfq1pGWFeJApLflqDspNTvz/bx1uU0+xPsTXuyT2Kq4KJyCXAxKJ1ip9dC9AA=

X-Gm-Message-State: AOJu0YypGrTy7fb1JZdlx+VvPcjRSE2gVq3iNRrC2/ivqeMy+I88leeV

qbGRFdz+E6yOGPd13XiyKMxDEPA5mWWCQJQRbVJJcgLRLUbaASRx

X-Google-Smtp-Source: AGHT+IFsoV/pIMrH9Z7NRcVBV9pFKOwzvzkUK/xl5SkRx7MQo4a2ZawcS50AvpTTKFzCwZX6N72/eA==

X-Received: by 2002:a05:6122:1681:b0:4f5:1d9a:ad5c with SMTP id 71dfb90a1353d-4f6ca386e24mr1853961e0c.14.1721915364831;

Thu, 25 Jul 2024 06:49:24 -0700 (PDT)

X-BeenThere: dece15-912025586@googlegroups.com

Received: by 2002:a05:622a:28e:b0:444:b60d:daa5 with SMTP id

d75a77b69052e-44fe3184980ls16102981cf.1.-pod-prod-07-us; Thu, 25 Jul 2024

06:49:22 -0700 (PDT)

X-Forwarded-Encrypted: i=2; AJvYcCWBF/Z/W7TQKilz6BrsuiI7gUW9W/Eb6i2MsFynQmyKRzimXo1x9VAveSpZMoWmQOK2mBNRVX6pdM+XkPEHRDptQjeDJddNd9cnScDvWEMNcx8=

X-Received: by 2002:a05:620a:d8b:b0:79f:38e:c03c with SMTP id af79cd13be357-7a1d7e13c67mr201431285a.11.1721915361969;

Thu, 25 Jul 2024 06:49:21 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1721915361; cv=none;

d=google.com; s=arc-20160816;

b=NGkj7g1Nvxz+idgJzkCYy7ra0tw6oe21ajwTt6j1wD+KLOJsnfHIN2XLX4ZNqWwrmM

XU8cAYMN75SZZes6XTj0SSVwxoR6m2a1eWNcbEZhDUeOf2fKdQXU9cW5cBB62R8/HuVB

5PHxm0hl4F6dliX/5sLCgcb0xoWG2vAFn7ZDwCMY81r5hSPmU/+Ic5LN73Bv5ThmY2JQ

w397zAXFX3KUwfL/edsiCD405KCXFFD2usKF1T33HMaEt0GMgg1Tz6K0Jx5vyQ1gN8An

x38D0FgRQL/2WynqIHbnLjKzs3Bwa0cVezB/B51Uv/k1Jz64LYvG49kgK33D8L9N2vSU

/1wg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=T4gX8fhnzARPiNzzXcX6lNXA3m28ozlbiZ5tp0FEFJ0=;

fh=F0fOEPxa8z6u1lYaJSQvogWZdrBtg+pvVAoqOXxt4yc=;

b=eDV5YdqoAZUAsh49l4HSF/hnU/r22qjQM0WuS1P+6Agl8Tu9FcbQ2V5GND//k/qK93

6P0SLZe0bdnITdm4vg9oHDaPOzodK756ZF+3HcHmUBbAhPBPOQbCe8GQEnJ9frpkG8/C

e3n8xbKYyPDDfYk9uvC1xhFOTSPWPXdH/bf6MHPKsXlu0Ul2hlmw+gbhFlYU3gEnVt/k

X07QGsR8koZfTadPk9Q116lqZ1TwKNssPWikd5aEDqbTCi2DaLDXvvOF2JCOMBdbSOa6

AIxjxkAgGyrnX1N88/SvI5exze5fJ61RfZHkX67K94DKWIFWu7I2YSEJN7tP/+927DhQ

Hb8g==;

dara=google.com

ARC-Authentication-Results: i=1; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b="CBwY/u5R";

spf=pass (google.com: domain of petionjreynold@gmail.com designates 2607:f8b0:4864:20::52f as permitted sender) smtp.mailfrom=petionjreynold@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=pass header.i=@googlegroups.com

Received: from mail-pg1-x52f.google.com (mail-pg1-x52f.google.com. [2607:f8b0:4864:20::52f])

by gmr-mx.google.com with ESMTPS id af79cd13be357-7a1d74363dbsi6185985a.4.2024.07.25.06.49.21

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Thu, 25 Jul 2024 06:49:21 -0700 (PDT)

Received-SPF: pass (google.com: domain of petionjreynold@gmail.com designates 2607:f8b0:4864:20::52f as permitted sender) client-ip=2607:f8b0:4864:20::52f;

Received: by mail-pg1-x52f.google.com with SMTP id 41be03b00d2f7-79b530ba612so669049a12.2;

Thu, 25 Jul 2024 06:49:21 -0700 (PDT)

X-Forwarded-Encrypted: i=1; AJvYcCWiU02CT+jvnkZspkGaX5L6vK+pRpmpkvzwP6pSEakCSvP0j/i04oMyEWVq4R+9HrK720JMsw8RCaibhtE78DitoRAQSSw0nsKhqwIZAA0Raw3xWDsSjXXkfUMc4henzl4xF3160fNURoY1Yjg1YuVQMLoNjBt+Xm/g91L8CnjCd65ra+T3ZeGDIXsVETp/IkZpLDrpPcvEeEpDuNYpApSpTnUPcouXJF+bOvXU4Ev/RIsaNHkLr2j96U6TIp4hnOtjiN9vknqb4s0WgcfxaHzK8TbiaVavP99lec32arD6GzehjpqYzQobn6NnGMCuKNheDpKAA29207ksHYLdGRl0FdXjlDAT0TkbOnJP9w3J8yKUVKsEDdqeLrrm8I65PcJcfVk9MdYYn8Q++50doZWlWiX2WY6u0KUK+/S3eaEtl2R/vLLEeDKCPugTvAlXQCUfJUXcX8n8EeuohTkcTTYzqqRdcIL+kSsD

X-Received: by 2002:a17:90b:1643:b0:2cd:410a:b010 with SMTP id

98e67ed59e1d1-2cf2e9b3207mr2016747a91.2.1721915360467; Thu, 25 Jul 2024

06:49:20 -0700 (PDT)

MIME-Version: 1.0

From: MARY

Date: Thu, 25 Jul 2024 19:49:09 +0600

Message-ID:

Subject: Cute Girl Looking for older

To: dece15-912016917@googlegroups.com, dece15-912017260@googlegroups.com,

dece15-912020230@googlegroups.com, dece15-912020772@googlegroups.com,

dece15-912025199@googlegroups.com, dece15-912025586@googlegroups.com,

dece15-912027665@googlegroups.com, dece15-912027821@googlegroups.com,

dece15-912028234@googlegroups.com, dece15-912031641@googlegroups.com

Content-Type: multipart/alternative; boundary="00000000000064f07b061e12a979"

X-Original-Sender: petionjreynold@gmail.com

X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass

header.i=@gmail.com header.s=20230601 header.b="CBwY/u5R"; spf=pass

(google.com: domain of petionjreynold@gmail.com designates

2607:f8b0:4864:20::52f as permitted sender) smtp.mailfrom=petionjreynold@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=pass header.i=@googlegroups.com

Precedence: list

Mailing-list: list dece15-912025586@googlegroups.com; contact dece15-912025586+owners@googlegroups.com

List-ID:

X-Spam-Checked-In-Group: dece15-912025586@googlegroups.com

X-Google-Group-Id: 745700075957

List-Post: ,

List-Help: ,

List-Archive:
List-Unsubscribe: ,



X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hey, Are U free tomorrow? Maybe we could go on a nice romantic

date together? See my photos> sites.google.com/view/hudx21 it's safe. ////////////////////





Content analysis details: (8.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.221.188 listed in dnsbl.ahbl.org]

[209.85.221.188 listed in dnsbl.ahbl.org]

[209.85.221.188 listed in dnsbl.ahbl.org]

[209.85.221.188 listed in dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:52f listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:52f listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:52f listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:52f listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.221.188 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.221.188 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.221.188 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.221.188 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2607:f8b0:4864:20:0:0:0:52f listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:52f listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:52f listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:52f listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:52f listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:52f listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:52f listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:52f listed in]

[will-spam-for-food.eu.org]

[209.85.221.188 listed in will-spam-for-food.eu.org]

[209.85.221.188 listed in will-spam-for-food.eu.org]

[209.85.221.188 listed in will-spam-for-food.eu.org]

[209.85.221.188 listed in will-spam-for-food.eu.org]

[209.85.221.188 listed in will-spam-for-food.eu.org]

[209.85.221.188 listed in will-spam-for-food.eu.org]

[209.85.221.188 listed in will-spam-for-food.eu.org]

[209.85.221.188 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.221.188 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.188 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[petionjreynold(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list

2.5 SORTED_RECIPS Recipient list is sorted by address

0.0 HTML_MESSAGE BODY: HTML included in message

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

Subject: {SPAM?} Cute Girl Looking for older



--00000000000064f07b061e12a979

Content-Type: text/plain; charset="UTF-8"



Hey, Are U free tomorrow? Maybe we could go on a nice romantic date

together?

See my photos> sites.google.com/view/hudx21



it's safe.













































////////////////////



--

You received this message because you are subscribed to the Google Groups "Dece15-912025586" group.

To unsubscribe from this group and stop receiving emails from it, send an email to dece15-912025586+unsubscribe@googlegroups.com.

To view this discussion on the web, visit https://groups.google.com/d/msgid/dece15-912025586/CAKHgHW5fi42cEDWch%2BTd3Z29enEgR_M6OOp0HVZiVTYKpjHLng%40mail.gmail.com.



--00000000000064f07b061e12a979

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hey, Are U free tomorrow? Maybe we could go on a nice roma=

ntic date together?
See my photos> =C2=A0
ogle.com/view/hudx21">sites.google.com/view/hudx21

it's safe=

.


















r>



////////////////////








--


You received this message because you are subscribed to the Google Groups &=

quot;Dece15-912025586" group.


To unsubscribe from this group and stop receiving emails from it, send an e=

mail to de=

ce15-912025586+unsubscribe@googlegroups.com.


To view this discussion on the web, visit
com/d/msgid/dece15-912025586/CAKHgHW5fi42cEDWch%2BTd3Z29enEgR_M6OOp0HVZiVTY=

KpjHLng%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https://gr=

oups.google.com/d/msgid/dece15-912025586/CAKHgHW5fi42cEDWch%2BTd3Z29enEgR_M=

6OOp0HVZiVTYKpjHLng%40mail.gmail.com.




--00000000000064f07b061e12a979--

DHL Phish from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 25 Jul 2024 11:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sX2VL-00000000NWr-3DVg

for dave@doctor.nl2k.ab.ca;

Thu, 25 Jul 2024 11:43:51 -0600

Resent-From: The Doctor

Resent-Date: Thu, 25 Jul 2024 11:43:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f41.google.com ([209.85.208.41]:56806)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sX0mJ-000000008Bo-1T97

for root@nk.ca;

Thu, 25 Jul 2024 09:53:22 -0600

Received: by mail-ed1-f41.google.com with SMTP id 4fb4d7f45d1cf-5a1fcb611baso1340541a12.1

for ; Thu, 25 Jul 2024 08:51:20 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1721922674; x=1722527474; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=gyxYQsFWdkfpywXJjdnbyvk/cH5m7HZhDfeUKE4ZVKI=;

b=bFE8LNvFby0rkRLQJkOBj8DwWg9p4XBT+Ky3lrIK8gsvOHuqUzAbUASRMW35Kq/4eR

UIS0QMGVyPVwyMDvoVOyZvbhr/Nb77+lshCAzx6Q7UaDH7LKC9qUZLBSnLOvH0Uzl6g0

k/i+O4h84NQ01QDTcrhb0oH5SoCYjYSPpA6Xq5w4et6WTg3AXQfPtOLpOyQD7xU9IYFp

hEDJrLUIC7NlR3grVqQtIFG6GSgTqHU5GWQ3UGYp7XN6xesnQhtL7ghh5kn8lfVPBWlp

tL9r7IoBd2j/B6ajaJHMKltZwroFgtvtdY/t25ZDK1r3B7oSU7J5JWC7+wcAFb2/Iegb

+arA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1721922674; x=1722527474;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=gyxYQsFWdkfpywXJjdnbyvk/cH5m7HZhDfeUKE4ZVKI=;

b=tF9Y7REtyEV/NqUQuOShPSEYZzK9tU16YLqoEkLDT6bkvG6iuDUBccdUuULRyw12pm

2UCefcXi8jCS0IxnCPxnKyiyRi7qUqeQQp7TK+Qq4bNubJo1bafiDRhoHR9G3WZ+SDlA

Igspz7XCjDoQ2HHYofOlSqUz+8rQL62aM5775m1vQN0t6bcBkHlIGw3kcvXVfJSdCoux

iu4PFeRfcqEPo59dw4LoatTfanLMzB+CO0cbtBQuiWcvX+pX7Zmm4IQk40fyUuYBPUjC

eEzo46D/T/4jLCTl6lx1ImA3OEkjwmryWVs+0RF6r8BYrvWJ8jTdsTNA/LT68KnSzWzi

lAOw==

X-Forwarded-Encrypted: i=1; AJvYcCX00TlxctCBPt79EhXqPnclM0i0HolF8lrycvOF+TP+GYKpUXzd+GnQ7Tv14ZCjH7nrJVPDoY9OcwOM

X-Gm-Message-State: AOJu0YxYxwGmhqNuaK2ox/Mp+y29tr+MOsyw58QXgmEvMlo3B4cwh7Kc

jNIVCne8qAFhmAZdUl01U5VNXhOZaLxv/KJ+25H/nYML7gzuyimzDBRlFghLcPHZa1yOS1+YUtG

mng5Buj4puvGkDlzj1lLr2Vj5ijw=

X-Google-Smtp-Source: AGHT+IHlZ88XtDq++WQWDZJNBzv79l4VuE+Wg+sgMN/EbVboaxsqgQSbV7txkJWevL8r/ekqG7QYbx6TAPHnx9qoUuU=

X-Received: by 2002:a50:d4de:0:b0:5a2:abcb:c4d1 with SMTP id

4fb4d7f45d1cf-5ac6412904emr1930854a12.34.1721922673471; Thu, 25 Jul 2024

08:51:13 -0700 (PDT)

MIME-Version: 1.0

From: BRYAN DAWSON

Date: Thu, 25 Jul 2024 16:50:50 -0400

Message-ID:

Subject: YOUR PACKAGE DELIVERY IS DELAYED

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000004878a8061e145d76"

Bcc: root@nk.ca

X-Spam_score: 11.4

X-Spam_score_int: 114

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: [image: On Demand Delivery - E-commerce - DHL Express Belgium]

Dear Customer We hope this message finds you well.



Content analysis details: (11.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.41 listed in dnsbl.ahbl.org]

[209.85.208.41 listed in dnsbl.ahbl.org]

[209.85.208.41 listed in dnsbl.ahbl.org]

[209.85.208.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.41 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.41 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.41 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.208.41 listed in will-spam-for-food.eu.org]

[209.85.208.41 listed in will-spam-for-food.eu.org]

[209.85.208.41 listed in will-spam-for-food.eu.org]

[209.85.208.41 listed in will-spam-for-food.eu.org]

[209.85.208.41 listed in will-spam-for-food.eu.org]

[209.85.208.41 listed in will-spam-for-food.eu.org]

[209.85.208.41 listed in will-spam-for-food.eu.org]

[209.85.208.41 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.41 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.41 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[bryan.dawson72(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[bryan.dawson72(at)gmail.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

2.4 DATE_IN_FUTURE_03_06 Date: is 3 to 6 hours after Received: date

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 FREEMAIL_REPLY From and body contain different freemails

Subject: {SPAM?} YOUR PACKAGE DELIVERY IS DELAYED



--0000000000004878a8061e145d76

Content-Type: text/plain; charset="UTF-8"



[image: On Demand Delivery - E-commerce - DHL Express Belgium]



Dear Customer



We hope this message finds you well.



We regret to inform you that your recent shipment 5564920325 with DHL

Express is pending due to an unpaid duty of $170.



Unfortunately, we were unable to deliver your ATM CARD package on July 25th

2024 at 2:00 pm.. Please find the details of your shipment below:



Tracking No: 5564920325



Item No: 6788008



Weight: 1.5kg



Item: ATM CARD PACKAGE.



Sender: Fifth Third Bank



Purpose: Inheritance funds compensation payment.



Status: Pending



To ensure prompt delivery, kindly settle the outstanding duty of $170 and

also stay available for your shipment within 24-hours to your doorstep.



For further communication or assistant kindly Email us at

dhldeliveryservices355@gmail.com







DHL EXPRESS ON DEMAND DELIVERY







Thank you for using the On Demand Delivery service. Your satisfaction is

our priority, and we appreciate your prompt attention to this matter. If

you have any questions or require assistance, please do not hesitate to

contact our customer support team.



Warm regards,



Mr. Stephen Vanhossen



Service Center Manager at DHL Express. New York City, NY 10017



DHL Express - Excellence. Simply delivered



Address: 886 2nd Ave, New York, NY 10017, United States



--0000000000004878a8061e145d76

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



3D"On
ce - DHL Express Belgium" src=3D"https://www.dhlexpress.be/wp-content/uploa=

ds/2018/04/Picture5-e1523612615883.png" class=3D"gmail-CToWUd" style=3D"out=

line: 0px; font-family: verdana; border-width: 0px; margin: 10px 0px; width=

: 352px; height: auto; max-width: 352px;">
a">


if">Dear Customer=C2=A0


:rgb(51,51,51);font-family:arial,sans-serif">We hope this =

message finds you well.


ly:arial,sans-serif">We regret to inform you that your rec=

ent=C2=A0 shipment 5564920325 with DHL Express is pending due to an unpaid =

duty of $170.


ans-serif">Unfortunately, we were unable to deliver your A=

TM CARD package on July 25th 2024 at 2:00 pm.. Please find the details of y=

our shipment below:


ly:arial,sans-serif">Tracking No: 5564920325


style=3D"color:rgb(51,51,51);font-family:arial,sans-serif">
>Item No: 6788008


al,sans-serif">Weight: 1.5kg


gb(51,51,51);font-family:arial,sans-serif">Item: ATM CARD =

PACKAGE.


erif">Sender: Fifth Third Bank


:rgb(51,51,51);font-family:arial,sans-serif">Purpose: Inhe=

ritance funds compensation payment.


1);font-family:arial,sans-serif">Status: Pending
>


=3D"4">To ensure prompt delivery, kindly settle the outstanding duty of $17=

0 and also stay available for your shipment within 24-hours to your doorste=

p.


an style=3D"color:rgb(51,51,51)">For further communication or assistant kin=

dly=C2=A0Email=C2=A0
lor:rgb(51,51,51)">us at=C2=A0=C2=A0
,Helvetica,sans-serif">
veryservices355@gmail.com" target=3D"_blank">dhldeliveryservices355@gmail.c=

om


llspacing=3D"0" width=3D"100%" style=3D"color:rgb(17,17,17);font-family:ari=

al,tahoma,verdana,helvetica,sans-serif">
=C2=

=A0

ellspacing=3D"0" width=3D"100%" style=3D"color:rgb(17,17,17);font-family:ar=

ial,tahoma,verdana,helvetica,sans-serif">

valign=3D"middle" style=3D"background-position:100% 50%">
0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">=


=3D"20">
);line-height:22px;font-family:arial,helvetica,sans-serif">

nt-family:arial,tahoma,verdana,helvetica,sans-serif;margin-top:2px;border-t=

op-width:0px;border-top-style:none">DHL EXPRESS=C2=

=A0ON DEMAND DELIVERY

rdana,helvetica,sans-serif;vertical-align:middle">

ight" width=3D"136">

ing=3D"0" cellspacing=3D"0" width=3D"100%" style=3D"color:rgb(17,17,17);fon=

t-family:arial,tahoma,verdana,helvetica,sans-serif">

ze=3D"4">=C2=A0


,51);font-family:arial,sans-serif">Thank you for using the=

On Demand Delivery service. Your satisfaction is our priority, and we appr=

eciate your prompt attention to this matter. If you have any questions or r=

equire assistance, please do not hesitate to contact our customer support t=

eam.


">Warm regards,


font-family:arial,sans-serif">Mr. Stephen Vanhossen=C2=A0<=

/font>


nt size=3D"4">Service Center Manager at DHL Express. New York City, NY 1001=

7

<=

span style=3D"color:rgb(214,4,17);font-family:arial,helvetica,sans-serif;fo=

nt-weight:700">DHL Express - Excellence. Simply delivered<=

/font>


=3D"#cc0000" size=3D"4">Address: 886 2nd Ave, New York, NY 10017, United St=

ates





--0000000000004878a8061e145d76--

Web / SEO/ App spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 25 Jul 2024 11:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sX2VC-00000000Mwk-2oJz

for dave@doctor.nl2k.ab.ca;

Thu, 25 Jul 2024 11:43:42 -0600

Resent-From: The Doctor

Resent-Date: Thu, 25 Jul 2024 11:43:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yb1-f169.google.com ([209.85.219.169]:46282)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sX28v-00000000GUa-0EiK

for sales@nk.ca;

Thu, 25 Jul 2024 11:20:45 -0600

Received: by mail-yb1-f169.google.com with SMTP id 3f1490d57ef6-e05e4c3228bso1109798276.0

for ; Thu, 25 Jul 2024 10:18:45 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1721927919; x=1722532719; darn=nk.ca;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=ljiCZzloRN/F2u2H1Kn2URD8544yfP1pqUaL0vn+Bl8=;

b=DK7gYRcCyQkS12O8DXZE2unkekmYwkBJlnCoPPfDZI7+pBzT+QrSEGsLckxVskgmSH

9aNxY7151lTovOd7eOJBes4b6gEsekzryZjflyqVm9zhACrbuXjpMXyM4V5FRoj5rgVF

AOFJD8rdPGujWGh6hrNGxQhV1cat3cxtiQt/26dmvCLRH8p+lGf9frUvbJ/GJog8Z1NY

q5rcWQwc4REILYMoapRwynMl4If2O/Q+ctmCiNv7VxWJco3Ar2fNGlcbAJ0n0E7SUjrX

TU9Q9ytQjtgipbfB/fVEzw9vHRtrV7ghD+iMJn881BzBIu6QHpACu3vOkrX5iHzm954P

MxmQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1721927919; x=1722532719;

h=to:subject:message-id:date:from:sender:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=ljiCZzloRN/F2u2H1Kn2URD8544yfP1pqUaL0vn+Bl8=;

b=ZPs8Tm00sYa2h4JYtbCGAOj4kN1TKkZfrSnRA79YCRjIMywG7r7PspMr595QJjMzuN

RRijL34qUEF1qxwAkhAXZE1mHP0N593VrhW/rKtsgLZn516XCPw7xY7EUflWcKumyTrX

eP/978WSM7e5wLikgOG/Sk6xkrplf9y0Z1teW9wj20/Fu2fiBFMgmMx4GKQGFKS/MKwp

ScCgyNnfOi5nCrybROUxPNKkzaWaCIRx2/94JR5hIE/dut5rSmSzlyKcN4Zlye3iXVLY

XDs+rDwH3lYfrvoAINVHYuQNBPKuawb6gYKL2au6ia0yzuVghe/W7/mv5jagPeApJliS

tnfg==

X-Gm-Message-State: AOJu0YwSTOyB5vLWfD8m7ZceY+3LeiCYdedvia9naR8bee433Sbw1woe

Jo9fcmuQ4GqIYS1lDoFmSnSPOq07MqBJ5txidA1Yfb3qMg2PMbeveKlbgkiHvOa5cOJgxNOLMb/

4OXH225B/N+8ZQ/pn3a0CLY52/R0Whg==

X-Google-Smtp-Source: AGHT+IHI4soW56I+FkxPvUSbNGPjJElgaxvNfgf0SAMI35+GtSSJ8huYxCqzPxFHPbIreRRfj9bA3BMZkPZsGCHX3u0=

X-Received: by 2002:a05:6902:2084:b0:e05:930d:8682 with SMTP id

3f1490d57ef6-e0b230f363bmr3955947276.24.1721927919520; Thu, 25 Jul 2024

10:18:39 -0700 (PDT)

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Thu, 25 Jul 2024 17:18:39 +0000

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Thu, 25 Jul 2024 19:18:38 +0200

MIME-Version: 1.0

Sender: George Shertiverer

From: George Shertiverer

Date: Thu, 25 Jul 2024 17:18:39 +0000

X-Google-Sender-Auth: r32Tk7u56CzjStKno0AORfPYPaw

Message-ID:

Subject: SEO - Complete Digital Marketing Services..

To: Sales

Content-Type: multipart/alternative; boundary="000000000000f8d29b061e1595a4"

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, If you are looking to outsource your SEO projects offshore,

I have something really cool for you today. A NEW 15 day’s trial offer

on any of your projects!



Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.169 listed in dnsbl.ahbl.org]

[209.85.219.169 listed in dnsbl.ahbl.org]

[209.85.219.169 listed in dnsbl.ahbl.org]

[209.85.219.169 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.169 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.169 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.169 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.169 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.169 listed in will-spam-for-food.eu.org]

[209.85.219.169 listed in will-spam-for-food.eu.org]

[209.85.219.169 listed in will-spam-for-food.eu.org]

[209.85.219.169 listed in will-spam-for-food.eu.org]

[209.85.219.169 listed in will-spam-for-food.eu.org]

[209.85.219.169 listed in will-spam-for-food.eu.org]

[209.85.219.169 listed in will-spam-for-food.eu.org]

[209.85.219.169 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.169 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.169 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[georgeshertiverer80(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[georgeshertiverer80(at)gmail.com]

0.6 J_CHICKENPOX_102 BODY: 10alpha-pock-2alpha

0.3 OFFER BODY: Offers you Something

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} SEO - Complete Digital Marketing Services..



--000000000000f8d29b061e1595a4

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,







If you are looking to outsource your SEO projects offshore, I have

something really cool for you today.







A NEW 15 day=E2=80=99s trial offer on any of your projects!







If this hasn=E2=80=99t enticed you yet, let me give you the top highlights =

of our

Outsource Program:







- Free Site Audit Reports and SEO Proposals for your clients



- Regular Keyword Rankings Reports (Weekly) and Performance

Reports (Monthly)



- Creation of rich backlink profile by acquiring links for

contextual sites with high DA and TF



- Paid access to all the SEO tools such as SEMrush, MOZ, Raven

SEO, Ahrefs, Majestic, Serpbook, Seoreports.me (our proprietary tool) and

more.



- Discounts on bulk offers







We also assure you that all our reports will be 100% white labelled under

your brand name and logo.







If you are interested, I would be happy to share our Methodologies, past

work details and client Testimonials and Prices.







I look forward to it. Please let me know.







Thanks Regards,



George Shertiverer



Business Development Executive





[image: beacon]



--000000000000f8d29b061e1595a4

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




0001pt;font-size:11pt;font-family:Calibri,sans-serif">
ize:10pt;font-family:Verdana,sans-serif">Hello,






11pt;font-family:Calibri,sans-serif">
ily:Verdana,sans-serif">=C2=A0






11pt;font-family:Calibri,sans-serif">
ily:Verdana,sans-serif">If

you are looking to outsource your SEO projects offshore, I have something

really cool for you today.






11pt;font-family:Calibri,sans-serif">
ily:Verdana,sans-serif">=C2=A0






11pt;font-family:Calibri,sans-serif">
ily:Verdana,sans-serif">A

NEW 15 day=E2=80=99s trial offer on any of your projects!






11pt;font-family:Calibri,sans-serif">
ily:Verdana,sans-serif">=C2=A0






11pt;font-family:Calibri,sans-serif">
ily:Verdana,sans-serif">If

this hasn=E2=80=99t enticed you yet, let me give you the top highlights of =

our

Outsource Program:






11pt;font-family:Calibri,sans-serif">
ily:Verdana,sans-serif">=C2=A0






11pt;font-family:Calibri,sans-serif">
ily:Verdana,sans-serif">-=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=

=C2=A0 Free Site Audit Reports and SEO

Proposals for your clients






11pt;font-family:Calibri,sans-serif">
ily:Verdana,sans-serif">-=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=

=C2=A0 Regular Keyword Rankings Reports

(Weekly) and Performance Reports (Monthly)






11pt;font-family:Calibri,sans-serif">
ily:Verdana,sans-serif">-=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=

=C2=A0 Creation of rich backlink profile by

acquiring links for contextual sites with high DA and TF






11pt;font-family:Calibri,sans-serif">
ily:Verdana,sans-serif">-=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=

=C2=A0 Paid access to all the SEO tools such

as SEMrush, MOZ, Raven SEO, Ahrefs, Majestic, Serpbook, Seoreports.me (our

proprietary tool) and more.






11pt;font-family:Calibri,sans-serif">
ily:Verdana,sans-serif">-=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=

=C2=A0 Discounts on bulk offers






11pt;font-family:Calibri,sans-serif">
ily:Verdana,sans-serif">=C2=A0






11pt;font-family:Calibri,sans-serif">
ily:Verdana,sans-serif">We

also assure you that all our reports will be 100% white labelled under your

brand name and logo.






11pt;font-family:Calibri,sans-serif">
ily:Verdana,sans-serif">=C2=A0






=3D"">If

you are interested, I would be happy to share our Methodologies, past work

details and client Testimonials and Prices.






11pt;font-family:Calibri,sans-serif">
ily:Verdana,sans-serif">=C2=A0






11pt;font-family:Calibri,sans-serif">
ily:Verdana,sans-serif">I

look forward to it. Please let me know.






11pt;font-family:Calibri,sans-serif">
ily:Verdana,sans-serif">=C2=A0






11pt;font-family:Calibri,sans-serif">
ily:Verdana,sans-serif">Thanks

Regards,






11pt;font-family:Calibri,sans-serif">
tica,sans-serif;font-size:small">George Shertiverer


ss=3D"gmail-MsoNoSpacing" style=3D"margin:0cm 0cm 0.0001pt;font-size:11pt;f=

ont-family:Calibri,sans-serif">
f;font-size:10pt">Business

Development Executive






11pt;font-family:Calibri,sans-serif">
ily:Verdana,sans-serif">=C2=A0




s9aZXlhs74RTKCLOketwfbjBYnbRlhsfWHwZX5ObqkAG5cEYMzzt7uV7vC-OOl9uTXlGdLPcp6N=

OMPL4grWTLzTbpNRZzXCjwJqYbcp_8cYscPNX0EHAUhsTeaKbrODWE6xesnqu5vybVrirK0tD97=

Ig" width=3D"1" height=3D"1" alt=3D"beacon" style=3D"display:none; display:=

none!important;">



--000000000000f8d29b061e1595a4--

Shopify spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: sales@nk.ca

Delivery-date: Thu, 25 Jul 2024 12:14:00 -0600

Received: from mail-pl1-f172.google.com ([209.85.214.172]:61916)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sX2xw-00000000GVV-3ZSw

for sales@nk.ca;

Thu, 25 Jul 2024 12:13:30 -0600

Received: by mail-pl1-f172.google.com with SMTP id d9443c01a7336-1fc49c0aaffso10206425ad.3

for ; Thu, 25 Jul 2024 11:11:30 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1721931084; x=1722535884; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:reply-to:from:to:cc:subject:date:message-id:reply-to;

bh=1PJwYvGQESL7GlBJhj00qb2GG1Nd7NirIQZHjX2rzTc=;

b=NOIT9pR9lhGDU6DRhN+oelc0RMpyQGy0XmtnT3WbSrw8d/3+Rc2BsnxPcBvQ3IN4QR

bHfVH07x+k7WcQ5WNoEIV90I6lejCJntT0sAOlVirzm6lb8QtJLxS2zGX5pXHUl3Ur4+

LX6nuw6edAmy/GB5I6fjs6EZ6BPZupiYMAcjKMsIK8O/yB10cjBdifWz/Hb4LkcN6F8s

Lfo9V6sd8izIQpHTmMJcKODm92rojRY2ZUZOsVe+7KtTjfE19l1xt7IYFBIG3F8ngYW7

CGqE08CvNrO25mVkRsP7m+3yqL3yjq9aNMDa9GTSbwGnWNk+USMcFgf1PcXgKDEUolfd

Lv5A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1721931084; x=1722535884;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:reply-to:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=1PJwYvGQESL7GlBJhj00qb2GG1Nd7NirIQZHjX2rzTc=;

b=gEqZZbO5NJqW6oydSUkvkWSTi9x16LGaSSofpXbXk/p3giCCx2JfPLtt72GPUBVojl

R0CLEM9X5rEdI34/s9j0jC8EhVRjf/UQtJ+XUgrksE7+UMHZZaKBLhil9LE9cAlm1ENq

XrFVtlZroM5DJVYxXlGHZFPoSv2K5jXiqsoMh+280T5/cBamnyeuKlhihPf9b1APzd5A

SHeDWO6zhiLDzyLnt4fDXdB2cQ0Rz2aS/oQBTfY8/lcBTT+QjeywvdvUB8NIEicXVWUJ

tkQFXkvqiCJLaP4IvRtJhI2qndVcTEDEexkZDvZeF124kG6jW0g8YvwjGkTqKR693o4Q

8wAw==

X-Gm-Message-State: AOJu0Yz0xa/8qml7GGDtkpHugRl7Tia3AOybBw4wC0yqTGwVbaV7zj8b

n6byAAE1v1Vt7xED2lPy1SDX3Ox6ER7sIttrSshOKnbXtUn8qfSC9AgUWw==

X-Google-Smtp-Source: AGHT+IElUj+IuJkbNJYzy0hdxpfHFOnnYdzuZpQEFRE1LwwD/sf+ZcZlZFm+e/t11IeG5QBdMb4b4Q==

X-Received: by 2002:a17:902:da91:b0:1fb:8f72:d5ea with SMTP id d9443c01a7336-1fed92d3de4mr27706415ad.50.1721931084271;

Thu, 25 Jul 2024 11:11:24 -0700 (PDT)

Received: from DESKTOPVPB935C ([45.117.182.210])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-1fed7ee4e92sm17188015ad.120.2024.07.25.11.11.22

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Thu, 25 Jul 2024 11:11:23 -0700 (PDT)

Reply-To:

From: "Rima Singh"

To:

Subject: RE: Shopify Services With Affordable Price

Date: Thu, 25 Jul 2024 23:41:07 +0530

Message-ID: <029201dadebe$0e5cb480$2b161d80$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0293_01DADEEC.2814F080"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdrevM63jfMvDndFSb2i8kGw1RvyzQ==

Content-Language: en-us

X-Antivirus: AVG (VPS 240725-6, 7/25/2024), Inbound message

X-Antivirus-Status: Clean



This is a multipart message in MIME format.



------=_NextPart_000_0293_01DADEEC.2814F080

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,



How are you doing?



My name is Rima Singh, Representing India's best Shopify Ecommerce Company,

We have done 450+ Shopify Store design and Development work, and we do have

our Specific expertise in Shopify Store. We have exclusively excelled our

proficiency in Shopify eCommerce store development, website customisation,

themes customisation, Extensions Integration, 3rd party APIs Integration,

Payment Gateway Integration, Module development & Integration, Mobile Apps

development, along with the Search Engine Optimisation, Social Media

Marketing, PPC services.



We are not only a Shopify store template designer but are also engaged in

delivering outstanding services for super advanced Level of customization of

Shopify Stores. In addition, we are known in the Industry for generating

sales from Shopify stores as we have developed an Advanced level of Skills

for Shopify Store SEO. We can make your Website Responsive to ensure the

Mobile user friendliness.



We offer following Services:



A. Shopify SEO



B. Shopify Setup And Configuration



C. Shopify Integration



D. Shopify Migration



E. Shopify Upgrade & Maintenance



F. Shopify App Development



G. Shopify Store Development



H. Shopify Store Re-Development



I. Shopify Store Design



J. Shopify Store Re-Design



K. Shopify Plus Services



L. Shopify Extension Development



M. Shopify Customization



N. Shopify Theme Development



We have a three tier quality check system so there is No chances of

compromise on quality. We assured you will get the quality work from us & we

will have the long term working relationship too.



May I know if you are interested in any of these services? Based on your

response, one of our Expert Shopify Store Consultant will be scheduled for

further communications.



Looking forward to start working with you.



Kind Regards,







Rima Singh









------=_NextPart_000_0293_01DADEEC.2814F080

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">






charset=3Dus-ascii">



















Hi,





How are you doing?





My name is Rima Singh, Representing India’s =

best

Shopify Ecommerce Company, We have done 450+ Shopify Store design and

Development work, and we do have our Specific expertise in Shopify =

Store. We

have exclusively excelled our proficiency in Shopify eCommerce store

development, website customisation, themes customisation, Extensions

Integration, 3rd party APIs Integration, Payment Gateway Integration, =

Module

development & Integration, Mobile Apps development, along with the =

Search

Engine Optimisation, Social Media Marketing, PPC services.





We are not only a Shopify store template designer =

but are

also engaged in delivering outstanding services for super advanced Level =

of

customization of Shopify Stores. In addition, we are known in the =

Industry for

generating sales from Shopify stores as we have developed an Advanced =

level of

Skills for Shopify Store SEO. We can make your Website Responsive to =

ensure the

Mobile user friendliness.





We offer following Services:






style=3D'margin-left:22.5pt;text-indent:-.25in;

mso-list:l0 level1 lfo1'>
style=3D'mso-list:Ignore'>A.
style=3D'font:7.0pt "Times New Roman"'>      =

Shopify

SEO






style=3D'margin-left:22.5pt;text-indent:-.25in;

mso-list:l0 level1 lfo1'>
style=3D'mso-list:Ignore'>B.
style=3D'font:7.0pt "Times New Roman"'>      =

Shopify

Setup And Configuration






style=3D'margin-left:22.5pt;text-indent:-.25in;

mso-list:l0 level1 lfo1'>
style=3D'mso-list:Ignore'>C.
style=3D'font:7.0pt "Times New Roman"'>      =

Shopify

Integration






style=3D'margin-left:22.5pt;text-indent:-.25in;

mso-list:l0 level1 lfo1'>
style=3D'mso-list:Ignore'>D.
style=3D'font:7.0pt "Times New Roman"'>      =

Shopify

Migration






style=3D'margin-left:22.5pt;text-indent:-.25in;

mso-list:l0 level1 lfo1'>
style=3D'mso-list:Ignore'>E.
style=3D'font:7.0pt "Times New =

Roman"'>       =

Shopify

Upgrade & Maintenance






style=3D'margin-left:22.5pt;text-indent:-.25in;

mso-list:l0 level1 lfo1'>
style=3D'mso-list:Ignore'>F.
style=3D'font:7.0pt "Times New =

Roman"'>       =

Shopify

App Development






style=3D'margin-left:22.5pt;text-indent:-.25in;

mso-list:l0 level1 lfo1'>
style=3D'mso-list:Ignore'>G.
style=3D'font:7.0pt "Times New Roman"'>     =

Shopify

Store Development






style=3D'margin-left:22.5pt;text-indent:-.25in;

mso-list:l0 level1 lfo1'>
style=3D'mso-list:Ignore'>H.
style=3D'font:7.0pt "Times New Roman"'>      =

Shopify

Store Re-Development






style=3D'margin-left:22.5pt;text-indent:-.25in;

mso-list:l0 level1 lfo1'>
style=3D'mso-list:Ignore'>I.
style=3D'font:7.0pt "Times New =

Roman"'>       

Shopify Store Design






style=3D'margin-left:22.5pt;text-indent:-.25in;

mso-list:l0 level1 lfo1'>
style=3D'mso-list:Ignore'>J.
style=3D'font:7.0pt "Times New =

Roman"'>       

Shopify Store Re-Design






style=3D'margin-left:22.5pt;text-indent:-.25in;

mso-list:l0 level1 lfo1'>
style=3D'mso-list:Ignore'>K.
style=3D'font:7.0pt "Times New Roman"'>      =

Shopify

Plus Services






style=3D'margin-left:22.5pt;text-indent:-.25in;

mso-list:l0 level1 lfo1'>
style=3D'mso-list:Ignore'>L.
style=3D'font:7.0pt "Times New =

Roman"'>       =

Shopify

Extension Development






style=3D'margin-left:22.5pt;text-indent:-.25in;

mso-list:l0 level1 lfo1'>
style=3D'mso-list:Ignore'>M.
style=3D'font:7.0pt "Times New Roman"'>    =

Shopify

Customization






style=3D'margin-left:22.5pt;text-indent:-.25in;

mso-list:l0 level1 lfo1'>
style=3D'mso-list:Ignore'>N.
style=3D'font:7.0pt "Times New Roman"'>     =

Shopify

Theme Development





We have a three tier quality check system so there =

is No

chances of compromise on quality. We assured you will get the quality =

work from

us & we will have the long term working relationship too.





May I know if you are interested in any of these =

services?

Based on your response, one of our Expert Shopify Store Consultant will =

be

scheduled for further communications.





Looking forward to start working with you.





Kind Regards,





 





Rima Singh





 

















------=_NextPart_000_0293_01DADEEC.2814F080--



Funds spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 24 Jul 2024 01:23:00 -0600

Received: from mail-lj1-f193.google.com ([209.85.208.193]:52636)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sWWKb-00000000JSz-2Fz2

for dave@doctor.nl2k.ab.ca;

Wed, 24 Jul 2024 01:22:47 -0600

Received: by mail-lj1-f193.google.com with SMTP id 38308e7fff4ca-2f01e9f53e3so31813101fa.1

for ; Wed, 24 Jul 2024 00:20:43 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1721805636; x=1722410436; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=DBlws5l7dHXCz7yQPJwSqUHJlLRA4gr/7bew7wmMKLU=;

b=Dms5esHzPr/IpylxPdmqEHDbEtR77faBmQKzGwQjbEqTRoD97CAuTBUuLv0cWmcOdv

7BwN8MDeAHsI9NOaxim9czdMTclHiwNyb1n/+yiZpE6p/eEqfpokgKk59xY7Vi2SVd3W

Xca8k5mJDLVCVtjeCdT1qwYyyt6K0W0UFZKFFhM7FfaxigXxlCp7HSOqcbAMy1FS3V0+

6/MMFp3LF9U9/1jDXgtTMbqmg0RlzAciuOcXXbsBLoe2gBx44tSBSA1JUVcbTmbR8ufI

qSQDyl46rxIzGS4+P+LmCBG8j5dtHdQHLk247Xf601SFVHGofU9iUBU6PHEv8ocZe+Vy

iRVg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1721805636; x=1722410436;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=DBlws5l7dHXCz7yQPJwSqUHJlLRA4gr/7bew7wmMKLU=;

b=MZkXKGd94546O8IXPpTbBytqTvLgMxEs028/7xcd9yzva94fLRR7UE6/FFWU15ncDs

NXo34iYpgugS8/QJZAyMsYz2vRJPZti4bMYTAwi31Ht6urU11Yp9UhZWyPmQZT95bmjW

glVlD+RGVCRjLHM3sk12l8MO1XQmGM8WejzUK1CrT9WfHH3EJ6IX58FWgeV7QwzgNAPz

zYwYg74SnuVKMF43owr/Jw6yayqmv6fc6wAw+0PW6WZKBQ2AI6OAWMFJ+yYdOgwXQQhX

mTrsKGhXNBJJFcVSzm7e53jZFwrFo/y2xyiAJnDXSU9aNxh9R/rzzRM69d4BiZhMDudJ

7hJA==

X-Forwarded-Encrypted: i=1; AJvYcCXmUQ4X5S70jLI8+58TKROqdQZypzcRukBLHciyQDIJcyE0CqdtiCFbHNHBqyVigGHqKhuoh2qu8eN8iz1CzmLMFDYDgYWy

X-Gm-Message-State: AOJu0YwtAqS3aicAoOhQK65HY9Qfb0mGDq1RBnttIMD6KY6dfy31uI0D

FmEl5h4E4u7YwFKM/5525IwhWtvtGx4VxsauVwVISzGmj3T63TTVXbPJGSgUz/cU+NBsiCPEViw

uVd5oaqL3y7VIHqdHtUn/wPd5kUo=

X-Google-Smtp-Source: AGHT+IF5dob3X1JCR1QNOyN55+x07BtK2FcOLCWEPfFIBNHC2rQsjEbAOCHp7/WBovViIsNJFRqZOBzq1bei7w389NU=

X-Received: by 2002:a2e:b8c1:0:b0:2ef:2d3a:e700 with SMTP id

38308e7fff4ca-2f02b72286cmr20358771fa.18.1721805635775; Wed, 24 Jul 2024

00:20:35 -0700 (PDT)

MIME-Version: 1.0

Reply-To: van133abram@yandex.com

From: Service Center

Date: Wed, 24 Jul 2024 00:20:24 -0700

Message-ID:

Subject: Unclaimed Fund Give Away 2024

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000004af73b061df91d10"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 26.1

X-Spam_score_int: 261

X-Spam_bar: ++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Attention: Beneficiary. Welcome to the 2024 World Bank/Paris

Club & British CFP Global Financial SET-UP. The Camelot National Lottery

Group has noted the wide spread of fraud activities that are being committed

by charlatans [...]



Content analysis details: (26.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.193 listed in dnsbl.ahbl.org]

[209.85.208.193 listed in dnsbl.ahbl.org]

[209.85.208.193 listed in dnsbl.ahbl.org]

[209.85.208.193 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.193 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.193 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.193 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.193 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.208.193 listed in will-spam-for-food.eu.org]

[209.85.208.193 listed in will-spam-for-food.eu.org]

[209.85.208.193 listed in will-spam-for-food.eu.org]

[209.85.208.193 listed in will-spam-for-food.eu.org]

[209.85.208.193 listed in will-spam-for-food.eu.org]

[209.85.208.193 listed in will-spam-for-food.eu.org]

[209.85.208.193 listed in will-spam-for-food.eu.org]

[209.85.208.193 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.193 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.193 listed in list.dnswl.org]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[sawebun018(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[sawebun018(at)gmail.com]

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

1.5 HK_SCAM_N8 BODY: No description available.

2.7 UNCLAIMED_MONEY BODY: People just leave money laying around

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 HK_LOTTO No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 HK_SCAM No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 LOTTO_DEPT Claims Department

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

0.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Unclaimed Fund Give Away 2024



--0000000000004af73b061df91d10

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Attention: Beneficiary.



Welcome to the 2024 World Bank/Paris Club & British CFP Global Financial

SET-UP. The Camelot National Lottery Group has noted the wide spread of

fraud activities that are being committed by charlatans & impostures within

the United Kingdom, Africa & the World in general.



Because of this reason, the World Bank/Paris Club & British CFP in

collaboration with the Camelot National Lottery has set up a welfare

program to compensate all those that have fallen victims and lost their

money in transactions of this nature within the UK, Africa & World wide.



You have been approved to receive a compensation fund of =C2=A3500,000.00

British Pound as one of the scam victims who qualified for 2024 annual

program, your reference number are: XVX189298,



send your details as stated below to following email address:

van132abram@yandex.com:



An arrangement has been made to pay your funds through (ATM Credit Card or

bank transfer) to enable you receive your compensation fund without any

interference.



1) Full Name:

2) Physical Address:

3) Mobile Number:

4) Your reference number:

5) Occupation:

6) Age:



Best Regards,

Mr. Hendric Gyan.

Gambling Commission Chief Executive.



--0000000000004af73b061df91d10

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Attention: Beneficiary.

Welcome to the 2024 World B=

ank/Paris Club & British CFP Global Financial SET-UP. The Camelot Natio=

nal Lottery Group has noted the wide spread of fraud activities that are be=

ing committed by charlatans & impostures within the United Kingdom, Afr=

ica & the World in general.

Because of this reason, the World Ba=

nk/Paris Club & British CFP in collaboration with the Camelot National =

Lottery has set up a welfare program to compensate all those that have fall=

en victims and lost their money in transactions of this nature within the U=

K, Africa & World wide.

You have been approved to receive a comp=

ensation fund of =C2=A3500,000.00 British Pound as one of the scam victims =

who qualified for 2024 annual program, your reference number are: XVX189298=

,

send your details as stated below to following email address:
<=

a href=3D"mailto:van132abram@yandex.com">van132abram@yandex.com:

>An arrangement has been made to pay your funds through (ATM Credit Card or=

bank transfer) to enable you receive your compensation fund without any in=

terference.

1) Full Name:
2) Physical Address:
3) Mobile Numbe=

r:
4) =C2=A0Your reference number:
5) Occupation:
6) Age:

B=

est Regards,
Mr. Hendric Gyan.
Gambling Commission Chief Executive.
div>



--0000000000004af73b061df91d10--

Web / SEO/ App spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 23 Jul 2024 14:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sWM4G-000000004Nq-1mWe

for dave@doctor.nl2k.ab.ca;

Tue, 23 Jul 2024 14:25:04 -0600

Resent-From: The Doctor

Resent-Date: Tue, 23 Jul 2024 14:25:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f52.google.com ([209.85.216.52]:61847)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sWJQZ-00000000ObC-0ZlE

for root@nk.ca;

Tue, 23 Jul 2024 11:35:59 -0600

Received: by mail-pj1-f52.google.com with SMTP id 98e67ed59e1d1-2cb5789297eso2964682a91.3

for ; Tue, 23 Jul 2024 10:34:00 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1721756035; x=1722360835; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=yAJe7PrXdpAuoSJNj731lb6B1HIndTDNjIWOt1i1aP8=;

b=lmQkSz7FBQree0EBk5HGKBk1RODttIfIFazE2W35nShYU9dfPgkDFmLCiGyG5mktB+

sxV+KCS7NB0u6/AiLtH4weJ7U3cc4KoGWkJthou7kaHIX71o5896G/UtL5ppxbA0YXst

eUonOeoIC00YPLFbBPv757QKqfD2VI6/MFSlt91xV9IVZPrxGPGu82mrC8od+dd4Rxul

j7wRUXPWfeGfmKlrSGg8V8oDH7Whgfawn9roGWFj9trXeczhoeMVEcft4Jf0MsTd22Ma

EkK6zTKq+njUYGJXiu2eQSkY2EEqqrH8rJ2mSTeCzD6bUXRqCPaHSSCsySdhZhlwjt0J

nsuw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1721756035; x=1722360835;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=yAJe7PrXdpAuoSJNj731lb6B1HIndTDNjIWOt1i1aP8=;

b=fplqo8uUV6SvSjguzCoYoOysWAoG2KpUUUYPWBYc9AIy99qr7PywhmIghEnjgHwN5a

2JBkyWHRdgSrFcczljD7hA3Wnske1XV5LEvx19JvHsNlIfU1v+l9fyALUdMEfPv/jJo3

dkI2Y1R+KegEFETCe9+QJEOB5oIH7KoGVptyy+6AznqB07+qTxinTjpnOu0bgR3GqnQh

CbQp3B8BOke8VOnKKOjIWBu/UHL7W6p5q9P3lWtFJEBb6H5Rdx9TIaj4pROCr9OfX5Ht

1N8DcxpWRVciDvgmWQ8ujyTpifgSjOgN08jxGqG21shEM4CD4fug0a7m9t4F3yRH13Bj

yz/Q==

X-Gm-Message-State: AOJu0YwvhefBEcRdOfKgkw9PegazWKsLRh52ZEX1sjXdIzSJa7tx8q1R

XX0MM3o2TqfLfYOoduo3pLfSACapm9khW8NJCpMbTGJVBXTLnK9Zm3jRw4jM

X-Google-Smtp-Source: AGHT+IHl0ksjh0PF6ODdW0lSqSBJVMq8usly3VgadCOYZuhNvMAFH1PN0V6W1e8WDMNtQnSZy0BVTg==

X-Received: by 2002:a17:90a:c68d:b0:2c9:8105:483 with SMTP id 98e67ed59e1d1-2cd27416869mr6823240a91.14.1721756026463;

Tue, 23 Jul 2024 10:33:46 -0700 (PDT)

Received: from DESKTOPD3JR8PE ([2401:4900:7037:f61f:ac45:a356:de2a:c7b9])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-2cb79d622b3sm10544943a91.4.2024.07.23.10.33.44

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 23 Jul 2024 10:33:46 -0700 (PDT)

From: "Atharv"

To:

Subject: Re:Can I send you a price list?

Date: Tue, 23 Jul 2024 23:03:35 +0530

Message-ID: <0c1701dadd26$78a313a0$69e93ae0$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0C18_01DADD54.925B4FA0"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdrdJmuR8ZZ/BxuKRKqyB1KbkahI3Q==

Content-Language: en-us

x-cr-hashedpuzzle: H6E= dXA= ANpg BUcd CrFm E8jc FS+N FZby GVOt GYo+ G8HV H7tC IaH9 Ig7m I6DK KLKd;1;cgBvAG8AdABAAG4AawAuAGMAYQA=;Sosha1_v1;7;{766FCEC3-6C03-4186-B285-94F61256A809};YQB0AGgAYQByAHYAcABhAHQAdwBhADYANQA0ADMANgBAAGcAbQBhAGkAbAAuAGMAbwBtAA==;Tue, 23 Jul 2024 17:33:24 GMT;UgBlADoAQwBhAG4AIABJACAAcwBlAG4AZAAgAHkAbwB1ACAAYQAgAHAAcgBpAGMAZQAgAGwAaQBzAHQAPwA=

x-cr-puzzleid: {766FCEC3-6C03-4186-B285-94F61256A809}

X-Spam_score: 5.7

X-Spam_score_int: 57

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, root@nk.ca I reach out to see if there is something you

want to repair or redesign on your site. We are experts in - Word Press,

Magento, PHP, CMS-Based, E-Commerce redesigning/redevelopment, UX/UI design,

and more etc.



Content analysis details: (5.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.52 listed in dnsbl.ahbl.org]

[209.85.216.52 listed in dnsbl.ahbl.org]

[209.85.216.52 listed in dnsbl.ahbl.org]

[209.85.216.52 listed in dnsbl.ahbl.org]

[2401:4900:7037:f61f:ac45:a356:de2a:c7b9 listed]

[in dnsbl.ahbl.org]

[2401:4900:7037:f61f:ac45:a356:de2a:c7b9 listed]

[in dnsbl.ahbl.org]

[2401:4900:7037:f61f:ac45:a356:de2a:c7b9 listed]

[in dnsbl.ahbl.org]

[2401:4900:7037:f61f:ac45:a356:de2a:c7b9 listed]

[in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.52 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.52 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2401:4900:7037:f61f:ac45:a356:de2a:c7b9 listed]

[in will-spam-for-food.eu.org]

[2401:4900:7037:f61f:ac45:a356:de2a:c7b9 listed]

[in will-spam-for-food.eu.org]

[2401:4900:7037:f61f:ac45:a356:de2a:c7b9 listed]

[in will-spam-for-food.eu.org]

[2401:4900:7037:f61f:ac45:a356:de2a:c7b9 listed]

[in will-spam-for-food.eu.org]

[2401:4900:7037:f61f:ac45:a356:de2a:c7b9 listed]

[in will-spam-for-food.eu.org]

[2401:4900:7037:f61f:ac45:a356:de2a:c7b9 listed]

[in will-spam-for-food.eu.org]

[2401:4900:7037:f61f:ac45:a356:de2a:c7b9 listed]

[in will-spam-for-food.eu.org]

[2401:4900:7037:f61f:ac45:a356:de2a:c7b9 listed]

[in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

[209.85.216.52 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.52 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[atharvpatwa65436(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[atharvpatwa65436(at)gmail.com]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Re:Can I send you a price list?



This is a multipart message in MIME format.



------=_NextPart_000_0C18_01DADD54.925B4FA0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi, root@nk.ca



I reach out to see if there is something you want to repair or redesign on

your site.



We are experts in - Word Press, Magento, PHP, CMS-Based, E-Commerce

redesigning/redevelopment, UX/UI design, and more etc.



Can I send you a price list?



Thanks,



Atharv,



P.S. If you are not interested in our services, please write Unsubscribe in

the subject line and send it to us.





------=_NextPart_000_0C18_01DADD54.925B4FA0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">






charset=3Dus-ascii">



















Hi, root@nk.ca





I reach out to see if there is something you want =

to repair

or redesign on your site.





We are experts in – Word Press, Magento, PHP,

CMS-Based, E-Commerce redesigning/redevelopment, UX/UI design, and more =

etc.






style=3D'background:lime;mso-highlight:lime'>Can I send

you a price list?





Thanks,





Atharv,





P.S. If you are not interested in our services, =

please write

Unsubscribe in the subject line and send it to us.

















------=_NextPart_000_0C18_01DADD54.925B4FA0--

Web / SEO/ App spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 23 Jul 2024 08:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sWG3w-000000006aj-1Oze

for dave@doctor.nl2k.ab.ca;

Tue, 23 Jul 2024 08:00:20 -0600

Resent-From: The Doctor

Resent-Date: Tue, 23 Jul 2024 08:00:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f194.google.com ([209.85.167.194]:42036)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sWCv3-00000000IgW-0P8A

for root@nk.ca;

Tue, 23 Jul 2024 04:39:06 -0600

Received: by mail-oi1-f194.google.com with SMTP id 5614622812f47-3d92e1bc90dso2145675b6e.0

for ; Tue, 23 Jul 2024 03:37:02 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=web4you-in.20230601.gappssmtp.com; s=20230601; t=1721731016; x=1722335816; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=l5cQu2vhyW1Mzz+UKCkPy+UZB7U4YII2rhrPbI0U68Y=;

b=acPrYiyJpw16+l+0TVHUuDpI1pulwRb8n9n2+QoPVTF98IQehYD6wSWn5eTQPIRCXZ

7QFQAqjEsOPVFGKJeqORZDFRlSz8IY3ekNKPNRz1NFT+SaFXp23aeMnW3OxrxNWiA2u5

XQLKtSNOB5eYjvNTPcJ0baRFmdoG3z8HUCfFVMFITDqfuB27lML3Ro9C21bgKnrigMvL

v5IqV0OGLY07aQXrb3/tPohSsN2Iif/QoAZUqQy/tIWOvKR0So6FJqNlqpREK3SIvAwO

7755GWjn8DIZ1fjBISO4NGCSg1vdD/vwEx70Z8OBjz1o/TLlYfIHyHwZAf3PqdNdqTt0

kc/A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1721731016; x=1722335816;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=l5cQu2vhyW1Mzz+UKCkPy+UZB7U4YII2rhrPbI0U68Y=;

b=cn5TpJ5emIFFNtN4vQxWeuIbznjCJ7LeVOyxYFfYENKKDI3D2bHHAURV6GlsjuzZTG

4k9inya35PIMUKMfJjwT2kkjZDKdzBspoueKJjhEqEhPJrzTnQHo3tMhpIakXKFEx3ts

MEoQHEX8Xk0F40z3itoVtTErw/ng2n7fLOZEypE9m0xPry0DPpgUFKnb9PGYjzJXYe2O

/MQNGlpK/kzIxSEFAn1yHgbR20SjKRrL5nGqHTzn4OBgurYBLgEsxH4dv0odqP2L9B2X

DCeNU3kCyhUswj8lkCneZ9i/kgJP7j8b1W9vLjE189LUHHjVK36UhEEQ02uYUf78OfNi

fcyg==

X-Gm-Message-State: AOJu0YwKdh/UxXeWa+MkxQZbD76QP1gHJXU+rNK7h2ESarsyEA8pC8eE

QOs/pyzxNhcjhmKYMvWK4MOSVyMW2v1tsGSS5CqDtCrneNdxVeGZ2emqgiqAgT74XygW0eBgTmX

7ki8=

X-Google-Smtp-Source: AGHT+IFgQ8b0yvrRAnuEH6z1thwhhNP2cZx0ew7BpVgyF5hcCTJBEOgjo/nDRBsDoSGm6jSSQW6eKQ==

X-Received: by 2002:a17:903:41cf:b0:1fb:2ebc:d16b with SMTP id d9443c01a7336-1fdb94d14eemr30664175ad.7.1721729022593;

Tue, 23 Jul 2024 03:03:42 -0700 (PDT)

Received: from admin ([122.161.78.172])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-1fd6f48f58bsm70690265ad.300.2024.07.23.03.03.41

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 23 Jul 2024 03:03:42 -0700 (PDT)

From: "Cowan"

To:

Subject: Design/Developer

Date: Tue, 23 Jul 2024 15:28:11 +0530

Message-ID: <66df01dadce7$9a13dcc0$ce3b9640$@in>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_66E0_01DADD15.B3CC18C0"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: Adrc2iOPzKxdQGjQS6C8oGomoUFLkw==

Content-Language: en-in

X-Spam_score: 8.4

X-Spam_score_int: 84

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I'm reaching out to see if there is anything that would

like to create Shopify & Wordpress, upgrade, repair, or redesign on your

website or Mobile App. I am a web designer/developer that can do just about

anything you can imagine at very affordable prices.



Content analysis details: (8.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.194 listed in dnsbl.ahbl.org]

[209.85.167.194 listed in dnsbl.ahbl.org]

[209.85.167.194 listed in dnsbl.ahbl.org]

[209.85.167.194 listed in dnsbl.ahbl.org]

[122.161.78.172 listed in dnsbl.ahbl.org]

[122.161.78.172 listed in dnsbl.ahbl.org]

[122.161.78.172 listed in dnsbl.ahbl.org]

[122.161.78.172 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.194 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.194 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.194 listed in will-spam-for-food.eu.org]

[209.85.167.194 listed in will-spam-for-food.eu.org]

[209.85.167.194 listed in will-spam-for-food.eu.org]

[209.85.167.194 listed in will-spam-for-food.eu.org]

[209.85.167.194 listed in will-spam-for-food.eu.org]

[209.85.167.194 listed in will-spam-for-food.eu.org]

[209.85.167.194 listed in will-spam-for-food.eu.org]

[209.85.167.194 listed in will-spam-for-food.eu.org]

[122.161.78.172 listed in will-spam-for-food.eu.org]

[122.161.78.172 listed in will-spam-for-food.eu.org]

[122.161.78.172 listed in will-spam-for-food.eu.org]

[122.161.78.172 listed in will-spam-for-food.eu.org]

[122.161.78.172 listed in will-spam-for-food.eu.org]

[122.161.78.172 listed in will-spam-for-food.eu.org]

[122.161.78.172 listed in will-spam-for-food.eu.org]

[122.161.78.172 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.194 listed in list.dnswl.org]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[209.85.167.194 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.167.194 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.194 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.9 PRICES_ARE_AFFORDABLE BODY: Message says that prices aren't too

expensive

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} Design/Developer



This is a multi-part message in MIME format.



------=_NextPart_000_66E0_01DADD15.B3CC18C0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hello,







I'm reaching out to see if there is anything that would like to create

Shopify & Wordpress, upgrade, repair, or redesign on your website or Mobile

App.







I am a web designer/developer that can do just about anything you can

imagine at very affordable prices.







Let me know what you think.







Please share your WhatsApp or Skype for quick conversations.







Kind Regards,



Cowan





------=_NextPart_000_66E0_01DADD15.B3CC18C0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>

Hello,


class=3DMsoNoSpacing> 

I'm =

reaching out to see if there is anything that would like to create =

Shopify & Wordpress, upgrade, repair, or redesign on your website or =

Mobile App.

 


class=3DMsoNoSpacing>I am a web designer/developer that can do just =

about anything you can imagine at very affordable prices.


class=3DMsoNoSpacing> 

Let me =

know what you think.

 


class=3DMsoNoSpacing>Please share your WhatsApp or Skype for quick =

conversations.

 


class=3DMsoNoSpacing>Kind Regards,


class=3DMsoNormal>Cowan



------=_NextPart_000_66E0_01DADD15.B3CC18C0--

United Nations compensation spam from Google

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 21 Jul 2024 06:13:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVVQA-000000003ar-1HYI

for dave@doctor.nl2k.ab.ca;

Sun, 21 Jul 2024 06:12:10 -0600

Resent-From: The Doctor

Resent-Date: Sun, 21 Jul 2024 06:12:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f170.google.com ([209.85.208.170]:57360)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVUYH-00000000Lbc-1AXB

for doctor@nl2k.ab.ca;

Sun, 21 Jul 2024 05:16:34 -0600

Received: by mail-lj1-f170.google.com with SMTP id 38308e7fff4ca-2eeb1ba0481so50906151fa.2

for ; Sun, 21 Jul 2024 04:14:34 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1721560467; x=1722165267; darn=nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=6Im437OQJ5jcU6uStxCiX43EVubDGPwR09PJ9h141p8=;

b=QdVz0CIJrCqmZrmLSbh2Dg6xgwKdUS6Xq7DWdKSAke8ZeqL9kzUXud6ZYLwhlHdiDV

FBxbOIf26znK/GL/MD0IJbB1vh73jwX4ZsQCV8OrBIXlPu8vP+EdW/dAikW9DPPnewQ3

siMHZi5ysT5POpB4uK32wqp54PXM141gJEFBXbtLAAmZRbC5xFXHhCw05uYixFjzag2Y

fJyb8DdC4q/YSEcI6VF7aj6E64OSqYBTwmiDoS/c+FBES5S7vEQBm6wsRq43qz44WtSj

/t+qiG/JkiUMv7Rd85A/NF130lvlJlasG+8UA5XrFwjecqEFdceesY1jYmLlu4M4uNX4

uhkg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1721560467; x=1722165267;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=6Im437OQJ5jcU6uStxCiX43EVubDGPwR09PJ9h141p8=;

b=V3pS+vn9SvgMSi2WvGTVGlPfPlxWEHKJpAFgrevuhlrc0Uj10Ki9wbQvtBbXR5F10i

qjYeyUHlVzCOJgMwENnHyDl3X2LialuqQDpuUlXUWg4BQ5l9EQOiChVQfa24Djz3fB5Z

YbbhVpFgMj89XpIJwg9qMEXWT1z4vtLzNp8qWzrB5VYThfIqGEy5VrbZ33oGJ9Io6m3z

6ffI3EB5Rx+9D2ywFXMruYPwmXc0wYmcFQxajp3ynq2ERtqfNhu7TVsSsnojG5rkAiAf

p5tzZoZ1WrIJ5pNkkHsDO3ZEYnRbzjMsRqmWuWki9C4iAdxepBbnjkH9hFhlwX5adP1Z

Ko3g==

X-Forwarded-Encrypted: i=1; AJvYcCUf8u8EuKQozrpGyEaC7NFUrPDNNTp7aL0nlpasSf1KaCWTBo4oSgAUMeqjIwmiD+vevxydI51LDC2pc7tMqgaxDg==

X-Gm-Message-State: AOJu0Yyc670FUFmHGy4sj0E5T7dgWFzN2DUZadDrXdBskccWBP70wB1z

sTL8JFEJvQCnV9Smyfb5Tqewt3BxAHQT7/2rnvs+I1kMu93q0p+EOjzotFIyVXET/RBQY+UD6ES

XR9QiFGziQC0U5HNoPexpmWL7UVg=

X-Google-Smtp-Source: AGHT+IHXVncN8YJw5WOgSirsCni01TGtFIj2Of5oOTZFSJzZbPaIlE4rrm3YShf3tOTbYo44dOhkQC6U70l4Yfi0cfI=

X-Received: by 2002:ac2:4c53:0:b0:52e:9b4f:cfdc with SMTP id

2adb3069b0e04-52efb7c83ecmr2363344e87.26.1721560467021; Sun, 21 Jul 2024

04:14:27 -0700 (PDT)

MIME-Version: 1.0

From: "unitedstatesbankusa5@gmail.com"

Date: Sun, 21 Jul 2024 04:13:36 -0700

Message-ID:

Subject: UNITED NATIONS FUNDS COMPENSATION DEPARTMENT:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000018a78b061dc0083c"

Bcc: doctor@nl2k.ab.ca

X-Spam_score: 18.4

X-Spam_score_int: 184

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: UNITED NATIONS FUNDS COMPENSATION DEPARTMENT: 3 WHITEHALL

COURT LONDON SW1A2THE UNITED KINGDOM. Your email was received and acknowledged.

I am very happy about inform you that the sum of $15,000,000.00USD has been

approved for your name and I have instructions to your funds without further

dela [...]



Content analysis details: (18.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.170 listed in dnsbl.ahbl.org]

[209.85.208.170 listed in dnsbl.ahbl.org]

[209.85.208.170 listed in dnsbl.ahbl.org]

[209.85.208.170 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.170 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.170 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.170 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.170 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.208.170 listed in will-spam-for-food.eu.org]

[209.85.208.170 listed in will-spam-for-food.eu.org]

[209.85.208.170 listed in will-spam-for-food.eu.org]

[209.85.208.170 listed in will-spam-for-food.eu.org]

[209.85.208.170 listed in will-spam-for-food.eu.org]

[209.85.208.170 listed in will-spam-for-food.eu.org]

[209.85.208.170 listed in will-spam-for-food.eu.org]

[209.85.208.170 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.170 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.170 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[unitednations610020(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[unitednations610020(at)gmail.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

0.7 PDS_FROM_2_EMAILS No description available.

0.4 NAME_EMAIL_DIFF Sender NAME is an unrelated email address

1.0 FREEMAIL_REPLY From and body contain different freemails

0.0 LOTTO_DEPT Claims Department

0.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases

Subject: {SPAM?} UNITED NATIONS FUNDS COMPENSATION DEPARTMENT:



--00000000000018a78b061dc0083c

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



UNITED NATIONS FUNDS COMPENSATION DEPARTMENT:

3 WHITEHALL COURT LONDON SW1A2THE UNITED KINGDOM.





Your email was received and acknowledged. I am very happy about

inform you that the sum of $15,000,000.00USD has been approved for your

name and I have instructions to your funds without further delay.



To proceed with the final release of its Fund today, the (UN) Board has

approved Three forms of payment in your favor that you are entitled to

to decide on one of them.



(1) Let us know if you want your funds in a cashier's check

as the first option.



(2) If you prefer to have the fund through a Master Card ATM.



(3) Via wire transfer to your designated bank account within

48hrs Any of the three payment options will be made

within 24 hours of your consent, as we do not intend to have your

the payment was submitted late as we work within a time frame.





Please contact us with your choice of option to thi email (

unitedstatesbankusa5@gmail.com) allow us

proceed with the final release of your funds.



Greetings, we inform you that the sum of $15,000,000.00USD has been approve=

d

in your name and I have instructions for your funds to you without any

Greater delay.





MISS LYNDA GREEN

UN SPECIAL AGENT

Express yourself with emojis

=F0=9F=92=96 =F0=9F=91=8D =F0=9F=98=82 =F0=9F=8E=89

Respond quickly and add fun and personality to your emails

t



--00000000000018a78b061dc0083c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



UNITED NATIONS FUNDS COMPENSATION DEPARTMENT:
3 WHITEHA=

LL COURT LONDON SW1A2THE UNITED KINGDOM.


=C2=A0Your email was re=

ceived and acknowledged. I am very happy about
inform you that the sum o=

f $15,000,000.00USD has been approved for your
name and I have instructi=

ons to your funds without further delay.

To proceed with the final r=

elease of its Fund today, the (UN) Board has
approved Three forms of pay=

ment in your favor that you are entitled to
to decide on one of them.
>
(1) Let us know if you want your funds in a cashier's check
as =

the first option.

(2) If you prefer to have the fund through a Maste=

r Card ATM.

(3) Via wire transfer to your designated bank account wi=

thin
48hrs Any of the three payment options will be made
within 24 ho=

urs of your consent, as we do not intend to have your
the payment was su=

bmitted late as we work within a time frame.


Please contact us w=

ith your choice of option to thi email (
sa5@gmail.com">unitedstatesbankusa5@gmail.com) allow us
proceed with=

the final release of your funds.

Greetings, we inform you that the =

sum of $15,000,000.00USD has been approved
in your name and I have instr=

uctions for your funds to you without any
Greater delay.


MISS=

LYNDA GREEN
UN SPECIAL AGENT
Express yourself with emojis
=F0=9F=

=92=96 =F0=9F=91=8D =F0=9F=98=82 =F0=9F=8E=89
Respond quickly and add fu=

n and personality to your emails
t




--00000000000018a78b061dc0083c--

Wikipedia Page spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 21 Jul 2024 04:57:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVUEk-00000000FJ1-3iq7

for dave@doctor.nl2k.ab.ca;

Sun, 21 Jul 2024 04:56:18 -0600

Resent-From: The Doctor

Resent-Date: Sun, 21 Jul 2024 04:56:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f172.google.com ([209.85.167.172]:44419)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVSgN-00000000108-1nPF

for sales@nk.ca;

Sun, 21 Jul 2024 03:16:54 -0600

Received: by mail-oi1-f172.google.com with SMTP id 5614622812f47-3d9de9f8c8dso1846094b6e.1

for ; Sun, 21 Jul 2024 02:14:49 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=diginworldpro.tech; s=google; t=1721553283; x=1722158083; darn=nk.ca;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=ClT1Udo+7g4fM4iffCm78HdsuiSjCSHOPZKxqEkQEjM=;

b=Y8EVwIJYX4+sj4ImWA6BdIzZGSdFBkCthiYXtaEWcFdZ+NYQzF3NMBOUuSL2yiuZCH

IPBXIA+db3HfaiHI4DqJ8vRoNgqXXROle7sn42wDArnhaScFxwXeH5xuwNNQfRkM352f

Ni6N+MwCMrOfxMXfhEeNzK5ob7puTjrryr7/8=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1721553283; x=1722158083;

h=to:subject:message-id:date:from:sender:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=ClT1Udo+7g4fM4iffCm78HdsuiSjCSHOPZKxqEkQEjM=;

b=coJCN2w1rBhrFC0gsMh3WskMxvBYLvszOVyyq/t6SV1phTgGQ/I3lTLbFMWGjYciwe

tHo2qTSs4fKtgGHWw0qPtN++hVBmZ1enoXDvFustNADsnU2t6sHnvD1PezvC5k7A5Anm

l9hOWpdjJ9B646TKw3cugA2yzff5dy0MfI99ozCIvyaN3yy0p6y3sdpV4ZG26QOfyn+3

uAadoL1rdlg01Zz1MdA/Ers/graeMA463OudsIgmEpiWqiWsU20uyuNPrLk7i7rwJyXY

i3GjHaW+ig+UfvfXUnExMJJI8o2kis26qcLBuaQTkppFtNLl5+iR2LDkbmpE/iLOY0M9

JKaA==

X-Gm-Message-State: AOJu0YyJnnk0xYhQCTcyndsDz0h46sfh71uGYuqx5oAbuLP5eSPWyUbO

P0GvOSfwlQo0s6erFbuwxQlTzqXOmdpasVvXqxntuWwGa4FShUbF47VrM53D0IuKPea3wwEayMy

1HfynK53mmjHnXAXc35/N5evqk9GdxNI2hCpYse365n9VtCwZ

X-Google-Smtp-Source: AGHT+IFMNeHe6YsUMNT+YvVo5JTvNSXljrNYPTsjl3XszSLvZus8zIBjo3T+gzFMt8SOVik6Gq2riys/TDXHhgS9Rqw=

X-Received: by 2002:a05:6808:d50:b0:3d9:2ab5:c697 with SMTP id

5614622812f47-3dae9743c26mr4689012b6e.20.1721553282823; Sun, 21 Jul 2024

02:14:42 -0700 (PDT)

Received: from 91302273949 named unknown by gmailapi.google.com with HTTPREST;

Sun, 21 Jul 2024 02:14:42 -0700

Received: from 91302273949 named unknown by gmailapi.google.com with HTTPREST;

Sun, 21 Jul 2024 02:14:42 -0700

MIME-Version: 1.0

Sender: Cacilie Jones

From: Cacilie Jones

Date: Sun, 21 Jul 2024 02:14:42 -0700

X-Google-Sender-Auth: rrvjgerp27yDVsS6EOFhQArJizM

Message-ID:

Subject: Re: nk.ca: Build Trust and Increase Sales with a Wikipedia Page

To: Sales

Content-Type: multipart/alternative; boundary="000000000000e28fc1061dbe5b9e"

X-Spam_score: 5.1

X-Spam_score_int: 51

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello nk.ca owner, How are you? I hope this email finds you

well. I wanted to reach out to you about the benefits of having a Wikipedia

page for your business. As a professional Wikipedia writer, I have seen firsthand

the positive i [...]



Content analysis details: (5.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.172 listed in dnsbl.ahbl.org]

[209.85.167.172 listed in dnsbl.ahbl.org]

[209.85.167.172 listed in dnsbl.ahbl.org]

[209.85.167.172 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.172 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.172 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.172 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.172 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.172 listed in will-spam-for-food.eu.org]

[209.85.167.172 listed in will-spam-for-food.eu.org]

[209.85.167.172 listed in will-spam-for-food.eu.org]

[209.85.167.172 listed in will-spam-for-food.eu.org]

[209.85.167.172 listed in will-spam-for-food.eu.org]

[209.85.167.172 listed in will-spam-for-food.eu.org]

[209.85.167.172 listed in will-spam-for-food.eu.org]

[209.85.167.172 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.172 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.172 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 HTML_MESSAGE BODY: HTML included in message

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

Subject: {SPAM?} Re: nk.ca: Build Trust and Increase Sales with a Wikipedia Page



--000000000000e28fc1061dbe5b9e

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello nk.ca owner,



How are you?



I hope this email finds you well. I wanted to reach out to you about the

benefits of having a Wikipedia page for your business. As a professional

Wikipedia writer, I have seen firsthand the positive impact that a

well-written page can have on a company's credibility and sales.



Having a Wikipedia page not only boosts your business's authority and

credibility, but it also increases search engine visibility and helps build

trust with potential customers. By having a presence on Wikipedia, you are

able to showcase your brand to a wider audience, ultimately leading to

increased brand recognition and customer engagement. I truly believe that

having a Wikipedia page for your business can significantly enhance your

reputation and ultimately lead to more sales.



One of the key advantages of having a Wikipedia page is the backlinks it

provides for your website. These backlinks are invaluable for SEO, as they

can improve your search engine rankings and drive more organic traffic to

your site.



I'm confident that this will not only help build trust with your audience

but also increase your sales. The best part is, once we create the page, it

will be valid for a *lifetime guarantee*. So you can sit back, relax, and

watch your online presence soar.



If you=E2=80=99re interested to create a Wikipedia page for you or your b=

usiness

then please let me know, I will assign you to our digital marketing manager

to move forward the discussion.



Looking forward to hearing from you.



Best regards,



Cacilie Jones



Wikipedia Content Writer



________________________________________________________________________



(Cost: Our team can help create a professional Wikipedia page for your

business for a one-time cost of $120. This small investment can have a big

impact on your brand's reputation and bottom line.)



--000000000000e28fc1061dbe5b9e

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




editable gmail-LW-avf gmail-tS-tW gmail-tS-tY" aria-label=3D"Message Body"=

role=3D"textbox" aria-multiline=3D"true" tabindex=3D"1" style=3D"direction=

:ltr;min-height:247px" aria-controls=3D":i8" aria-expanded=3D"false">


ss=3D"MsoNormal" style=3D"margin:0in 0in 8pt;line-height:107%;font-family:C=

alibri,sans-serif">Hello nk.ca owner,






mily:Calibri,sans-serif">How are you?






mily:Calibri,sans-serif">I hope this email finds you well. I wanted to reac=

h out to

you about the benefits of having a Wikipedia page for your business. As a

professional Wikipedia writer, I have seen firsthand the positive impact th=

at a

well-written page can have on a company's credibility and sales.






mily:Calibri,sans-serif">Having a Wikipedia page not only boosts your busin=

ess's

authority and credibility, but it also increases search engine visibility a=

nd

helps build trust with potential customers. By having a presence on Wikiped=

ia,

you are able to showcase your brand to a wider audience, ultimately leading=

to

increased brand recognition and customer engagement. I truly believe that

having a Wikipedia page for your business can significantly enhance your

reputation and ultimately lead to more sales.






mily:Calibri,sans-serif">One of the key advantages of having a Wikipedia pa=

ge is the

backlinks it provides for your website. These backlinks are invaluable for =

SEO,

as they can improve your search engine rankings and drive more organic traf=

fic

to your site.






mily:Calibri,sans-serif">I'm confident that this will not only help bui=

ld trust with

your audience but also increase your sales. The best part is, once we creat=

e

the page, it will be valid for a life=

time guarantee. So you can sit back,

relax, and watch your online presence soar.






mily:Calibri,sans-serif">If you=E2=80=99re
,96)">interested to create a Wikipedia page for you

or your business then please let me know, I will assign you to our digital

marketing manager to move forward the discussion.






mily:Calibri,sans-serif">Looking forward to hearing from you.






mily:Calibri,sans-serif">Best regards=

,






mily:Calibri,sans-serif">Cacilie Jones






mily:Calibri,sans-serif">Wikipedia Co=

ntent Writer






mily:Calibri,sans-serif">_______________________________________________=

_________________________






mily:Calibri,sans-serif">(Cost: Our team can

help create a professional Wikipedia page for your business for a one-time =

cost

of $120. This small investment can have a big impact on your brand's re=

putation

and bottom line.)





--000000000000e28fc1061dbe5b9e--

Instagram followers spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 20 Jul 2024 19:06:56 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVL1r-00000000B14-1Gmt

for dave@doctor.nl2k.ab.ca;

Sat, 20 Jul 2024 19:06:23 -0600

Resent-From: The Doctor

Resent-Date: Sat, 20 Jul 2024 19:06:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f197.google.com ([209.85.160.197]:43245)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVKWy-0000000069s-3HMl

for sales@nk.ca;

Sat, 20 Jul 2024 18:34:32 -0600

Received: by mail-qt1-f197.google.com with SMTP id d75a77b69052e-44f76198e97so49609301cf.0

for ; Sat, 20 Jul 2024 17:32:34 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1721521948; x=1722126748; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=6nKAQwA/lzc6on8N6Ne2R17lKWbF5IGtkGNoq8cNivg=;

b=UTLHG5ycjdaPWsLiEuJDpaT9iOgFA/brvcGYD8+Nu2ohthASJJHiG0En11EM7B5j5j

Gu4dtPGimKbK73l2TAiSC+7GvOvccfX56GLg058NJW3bCv0NOURPXfJ++RNajkqIOTdr

f+Ru6qlJRJDfLB4WsgGa2FU5TkeOil4Gc9gjyEFhoNCvsRr2HZ3ogxC/7IJgOXonhLmG

Pgqvaxb8i3psSwAAfbyDw586eOovC7b9LSOUr4ZUDebo9d37oNe1AV9VpaoVHPdBYZmp

cgtZwF+EpKEvSx4vHiiQpwpbSCVUor4M6X02K/aKGNiD8JgoTWPi3CXvGBmeIZJSR5tH

fu9A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1721521948; x=1722126748;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=6nKAQwA/lzc6on8N6Ne2R17lKWbF5IGtkGNoq8cNivg=;

b=UxdLIWJJ8P6fvq6kOgLIzw+SLXapdrfsi8SuFDpswPQLgCNdqOLbUttOtvHNq0MAWb

MFN1AZxatWq7ly3XglILwEiVXm2zgXMvDlNwsAMDeNZUdtDZHytJYCfsofY8+Yk9/fKQ

GnK2T/8H6e6fTzy2yode3ghgQBNQPvIGNmNojj8KS9fIJ3WeCuKk4UY9LAevkhmlB94b

Abp9SZbIpM4HvJ+uRsQIFmkBZQtAUsfGgoWu+5Ypc/jI3KMwf142pkLL3zWXA5nzAZuA

zBMBlf4J1BsJQ0G+ToxrxMYv+7L/70D46jQeWc/Xjh0IbUNDJJexQ+gQ6meKqf8CWi8D

AQYw==

X-Gm-Message-State: AOJu0YyTNdnToDwh9xIhp9lWrJ5G3werCEIfN+6Cdh/KPCur8TQzuBev

tXAGd2kGuRfWPB2aYYXvcqMA4k2t+5RHSaD4Tg7133UiSIfKQiD3pj/5kSzdQUzsJqxoeWtD2e4

=

X-Google-Smtp-Source: AGHT+IHPDP94a2IKsM5yTma1+cGTB0v74063hFhkMNWUnfZuOl9oPVx4zFR5DWD7YqeP4QjhRERX5vsS1A==

MIME-Version: 1.0

X-Received: by 2002:a05:622a:1346:b0:447:f292:e4b5 with SMTP id

d75a77b69052e-44f96a3aa45mr148348301cf.9.1721521948095; Sat, 20 Jul 2024

17:32:28 -0700 (PDT)

Message-ID:

Date: Sun, 21 Jul 2024 00:32:28 +0000

Subject: netknowyeg, Get More 2,000 Instagram Followers and 2,000 Twitter

Followers here

From: lauragreen5203046@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

X-Spam_score: 7.0

X-Spam_score_int: 70

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi Netknow Internet Service, We are from Instasocial. We found

your Email address on your Instagram page @netknowyeg. We Offers Instagram

Followers, Likes and Views services.



Content analysis details: (7.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.197 listed in dnsbl.ahbl.org]

[209.85.160.197 listed in dnsbl.ahbl.org]

[209.85.160.197 listed in dnsbl.ahbl.org]

[209.85.160.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.197 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.197 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.197 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[lauragreen5203046(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[lauragreen5203046(at)gmail.com]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} netknowyeg, Get More 2,000 Instagram Followers and 2,000 Twitter

Followers here



Hi Netknow Internet Service,



We are from Instasocial. We found your Email address on your Instagram page

@netknowyeg.



We Offers Instagram Followers, Likes and Views services.



The price is:



-$29 USD for 1,000 Instagram Followers and

- $9 USD For Instagram Post Likes.

- $7 USD For Instagram Video Views



Now you have Limited Followers, maybe you are Interested?



DIY enthusiasts, crafters, and makers may use a growing follower count to

share creative tutorials, connect with like-minded individuals, and attract

opportunities for collaborations with craft brands..



You can See all packages here :



https://bit.ly/SmmMarketing



If you have any questions, feel free to ask them here.

I apologize if this message bothers you,





Also, We have Youtube, Tiktok and Twitter services too, Please check it now.

Thank you,

Regards,

Nigerian spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 20 Jul 2024 10:50:00 -0600

Received: from mail-ed1-f51.google.com ([209.85.208.51]:46086)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVDGa-000000009ez-1WgV

for dave@doctor.nl2k.ab.ca;

Sat, 20 Jul 2024 10:49:08 -0600

Received: by mail-ed1-f51.google.com with SMTP id 4fb4d7f45d1cf-5a10bb7b237so2119266a12.0

for ; Sat, 20 Jul 2024 09:47:09 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1721494023; x=1722098823; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:in-reply-to:references

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=ZEgpHqie6U1sGpAclZpzBQxoImQkUb7xbRzzbn1gez4=;

b=GXyMrxFE1kg1FBPtz8XVmAldClc4bN3/Ulsh/+JmP6YaiCOQPZ4K6HQnkxejRW2ekW

/afpkjUZ5vi9O0E4lYbPTq1lkmTe6H8TIJcNtPDub7rkpYCLtfxqvzQyZVOqimGKqfHY

5qmIuX0tI9BXDQZAQg8ochyqfR0MhtQV2JgspqD0xVb2JoPXuASv6Uh95feylYLucLq5

aKtA5HfSJj5HXrpuLxVV03DAS365tRHIjTsOPB3mXA0rjNM9vurDorgtFJQbDf7mwY2K

tu7f00y+1+131/VbQOs7O8ZZY2H7l5yL8iK8viSGFUfnZSnoCsuk1WCHXxWfFTIdszSf

O0Og==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1721494023; x=1722098823;

h=to:subject:message-id:date:from:reply-to:in-reply-to:references

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=ZEgpHqie6U1sGpAclZpzBQxoImQkUb7xbRzzbn1gez4=;

b=Yddyy1OJs8D2o9bt1HBCO8QYslnlKAey6QT9gDGbZWmZNSKR6WHEohYAVi0tpGpxvV

axsrE/kCW1lgBHfFavcDF31x3dUC9Cqi/UJl0LXCGSbylDQOjK7qIovlNv9DNT8KMlV3

0A5/jphnJCIC4wwTJNwcwC3r+A3zVtt68Lp0JSCuhClVWE0j429PIKzryASkU2bmC8q4

8MRIjD7ID8QgoNOStTO+lTS2gKisNQT7/KocmtWhWKsRrINkjMAuJnLoH9HO50YYE7e0

g3OK3yxROObnR2utLh8TN0GfqffyDAxiCz9vr63G4pZQ/4G26+/i0eHZ6EaLCLuW4307

hDNQ==

X-Forwarded-Encrypted: i=1; AJvYcCVBCigEhcK4XxsJo0ejNm05RRiJviPbDNf94uWBSjfjSFcSoZ4Vm5ILA+Y5j1kWt0WcI1ih8O3JPvbhxQRc/JKbBAOBeofi

X-Gm-Message-State: AOJu0YyLO+6uaE0JlRW8PChSgQzrhJVcaEQLYCtn/uYHGr0MOij6WCN8

/BNXPPUWMjmYR80dfCLGWTQF17IxQllNJbInIFCqfSSDu99/eOQ3KP12fyNuEzCmaztQFME0jNQ

wymD8bvvnlDNvA0xwFWpoZ3bYumA=

X-Google-Smtp-Source: AGHT+IEqIbiU6vNlo/v+FHQxOo9QnJDL/E5HMLZUwxUYFvhAJ7TylaAz0tU64fvQCmic749YA+9byNCeH/QXCuvXpWY=

X-Received: by 2002:a50:bb6c:0:b0:5a2:c750:f47d with SMTP id

4fb4d7f45d1cf-5a479f562c6mr1110720a12.12.1721494022742; Sat, 20 Jul 2024

09:47:02 -0700 (PDT)

MIME-Version: 1.0

References:

In-Reply-To:

Reply-To: cfc.ubagroup02@gmail.com

From: kristalina georgieva

Date: Sat, 20 Jul 2024 17:44:03 +0100

Message-ID:

Subject: Attention please

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000b569ed061db08f30"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 16.0

X-Spam_score_int: 160

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Beneficiary, I sent this letter to you a month ago, but

I did not hear from you, I'm not sure if you got it, And that is why I sent

it again, Firstly, I'm Mrs. Kristalina Georgieva, Managing Dire [...]



Content analysis details: (16.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

[209.85.208.51 listed in dnsbl.ahbl.org]

[209.85.208.51 listed in dnsbl.ahbl.org]

[209.85.208.51 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.51 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.51 listed in list.dnswl.org]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[carlsmith3241(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[carlsmith3241(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[cfc.ubagroup02(at)gmail.com]

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 LOTS_OF_MONEY Huge... sums of money

3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

0.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Attention please



--000000000000b569ed061db08f30

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Beneficiary,

I sent this letter to you a month ago, but I did not hear from you, I'm not

sure if you got it, And that is why I sent it again, Firstly, I'm Mrs.

Kristalina Georgieva, Managing Director and Chairwoman of the International

Monetary Fund.



Indeed We have reviewed all the obstacles and problems surrounded your

uncompleted transaction and your inability to meet up with transfer charges

levied, against you, for the past transfer options, view our site for your

confirmation 38=C2=B053=E2=80=B256=E2=80=B3N 77=C2=B02=E2=80=B239=E2=80=B3W



We are the Board of Directors, World Bank and International Monetary Fund

(IMF) Washington, D.C. in conjunction with The U.S. Department of the

Treasury and some other relevant Investigation Agencies here in the United

States of America. has ordered our Foreign Payment Remittance Unit, United

Bank of Africa Lome Togo to issue you a VISA Card, where your fund $1.5

million will be uploaded, for further withdrawal of your fund.



During the course of our investigation, we discovered with dismay that your

payment has been delayed by corrupt officials of the Bank who are Trying to

divert your funds into their private accounts.



And today we notify you that your fund has been credited into a VISA Card

by UBA Bank and also ready to be delivered. Now contact UBA Bank director

his name is Mr. Tony Elumelu, email: (cfc.ubagroup02@gmail.com) to direct

you on how to receive your ATM VISA card.



Sincerely,



Mrs. Kristalina Georgieva



--000000000000b569ed061db08f30

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Beneficiary, =C2=A0

v dir=3D"ltr">I sent this letter to you a month ago, but I did not hear fro=

m you, I'm not sure if you got it, And that is why I sent it again, Fir=

stly, I'm Mrs. Kristalina Georgieva, Managing Director and Chairwoman o=

f the International Monetary Fund.

Indeed We have reviewed all the o=

bstacles and problems surrounded your uncompleted transaction and your inab=

ility to meet up with transfer charges levied, against you, for the past tr=

ansfer options, view our site for your confirmation 38=C2=B053=E2=80=B256=

=E2=80=B3N 77=C2=B02=E2=80=B239=E2=80=B3W

We are the Board of Direct=

ors, World Bank and International Monetary Fund (IMF) Washington, D.C. in c=

onjunction with The U.S. Department of the Treasury and some other relevant=

Investigation Agencies here in the United States of America. has ordered o=

ur Foreign Payment Remittance Unit, United Bank of Africa Lome Togo to issu=

e you a VISA Card, where your fund $1.5 million will be uploaded, for furth=

er withdrawal of your fund.

During the course of our investigation, =

we discovered with dismay that your payment has been delayed by corrupt off=

icials of the Bank who are Trying to divert your funds into their private a=

ccounts.

And today we notify you that your fund has been credited in=

to a VISA Card by UBA Bank and also ready to be delivered. Now contact UBA =

Bank director his name is Mr. Tony Elumelu, email: (
bagroup02@gmail.com" target=3D"_blank">cfc.ubagroup02@gmail.com) to dir=

ect you on how to receive your ATM VISA card.

Sincerely,

Mrs.=

Kristalina Georgieva






--000000000000b569ed061db08f30--

Nigerian spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 20 Jul 2024 10:50:00 -0600

Received: from mail-ed1-f51.google.com ([209.85.208.51]:46086)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sVDGa-000000009ez-1WgV

for dave@doctor.nl2k.ab.ca;

Sat, 20 Jul 2024 10:49:08 -0600

Received: by mail-ed1-f51.google.com with SMTP id 4fb4d7f45d1cf-5a10bb7b237so2119266a12.0

for ; Sat, 20 Jul 2024 09:47:09 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1721494023; x=1722098823; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:in-reply-to:references

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=ZEgpHqie6U1sGpAclZpzBQxoImQkUb7xbRzzbn1gez4=;

b=GXyMrxFE1kg1FBPtz8XVmAldClc4bN3/Ulsh/+JmP6YaiCOQPZ4K6HQnkxejRW2ekW

/afpkjUZ5vi9O0E4lYbPTq1lkmTe6H8TIJcNtPDub7rkpYCLtfxqvzQyZVOqimGKqfHY

5qmIuX0tI9BXDQZAQg8ochyqfR0MhtQV2JgspqD0xVb2JoPXuASv6Uh95feylYLucLq5

aKtA5HfSJj5HXrpuLxVV03DAS365tRHIjTsOPB3mXA0rjNM9vurDorgtFJQbDf7mwY2K

tu7f00y+1+131/VbQOs7O8ZZY2H7l5yL8iK8viSGFUfnZSnoCsuk1WCHXxWfFTIdszSf

O0Og==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1721494023; x=1722098823;

h=to:subject:message-id:date:from:reply-to:in-reply-to:references

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=ZEgpHqie6U1sGpAclZpzBQxoImQkUb7xbRzzbn1gez4=;

b=Yddyy1OJs8D2o9bt1HBCO8QYslnlKAey6QT9gDGbZWmZNSKR6WHEohYAVi0tpGpxvV

axsrE/kCW1lgBHfFavcDF31x3dUC9Cqi/UJl0LXCGSbylDQOjK7qIovlNv9DNT8KMlV3

0A5/jphnJCIC4wwTJNwcwC3r+A3zVtt68Lp0JSCuhClVWE0j429PIKzryASkU2bmC8q4

8MRIjD7ID8QgoNOStTO+lTS2gKisNQT7/KocmtWhWKsRrINkjMAuJnLoH9HO50YYE7e0

g3OK3yxROObnR2utLh8TN0GfqffyDAxiCz9vr63G4pZQ/4G26+/i0eHZ6EaLCLuW4307

hDNQ==

X-Forwarded-Encrypted: i=1; AJvYcCVBCigEhcK4XxsJo0ejNm05RRiJviPbDNf94uWBSjfjSFcSoZ4Vm5ILA+Y5j1kWt0WcI1ih8O3JPvbhxQRc/JKbBAOBeofi

X-Gm-Message-State: AOJu0YyLO+6uaE0JlRW8PChSgQzrhJVcaEQLYCtn/uYHGr0MOij6WCN8

/BNXPPUWMjmYR80dfCLGWTQF17IxQllNJbInIFCqfSSDu99/eOQ3KP12fyNuEzCmaztQFME0jNQ

wymD8bvvnlDNvA0xwFWpoZ3bYumA=

X-Google-Smtp-Source: AGHT+IEqIbiU6vNlo/v+FHQxOo9QnJDL/E5HMLZUwxUYFvhAJ7TylaAz0tU64fvQCmic749YA+9byNCeH/QXCuvXpWY=

X-Received: by 2002:a50:bb6c:0:b0:5a2:c750:f47d with SMTP id

4fb4d7f45d1cf-5a479f562c6mr1110720a12.12.1721494022742; Sat, 20 Jul 2024

09:47:02 -0700 (PDT)

MIME-Version: 1.0

References:

In-Reply-To:

Reply-To: cfc.ubagroup02@gmail.com

From: kristalina georgieva

Date: Sat, 20 Jul 2024 17:44:03 +0100

Message-ID:

Subject: Attention please

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000b569ed061db08f30"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 16.0

X-Spam_score_int: 160

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Beneficiary, I sent this letter to you a month ago, but

I did not hear from you, I'm not sure if you got it, And that is why I sent

it again, Firstly, I'm Mrs. Kristalina Georgieva, Managing Dire [...]



Content analysis details: (16.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

[209.85.208.51 listed in dnsbl.ahbl.org]

[209.85.208.51 listed in dnsbl.ahbl.org]

[209.85.208.51 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.51 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

[209.85.208.51 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.51 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.51 listed in list.dnswl.org]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[carlsmith3241(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[carlsmith3241(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[cfc.ubagroup02(at)gmail.com]

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 LOTS_OF_MONEY Huge... sums of money

3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

0.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Attention please



--000000000000b569ed061db08f30

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Beneficiary,

I sent this letter to you a month ago, but I did not hear from you, I'm not

sure if you got it, And that is why I sent it again, Firstly, I'm Mrs.

Kristalina Georgieva, Managing Director and Chairwoman of the International

Monetary Fund.



Indeed We have reviewed all the obstacles and problems surrounded your

uncompleted transaction and your inability to meet up with transfer charges

levied, against you, for the past transfer options, view our site for your

confirmation 38=C2=B053=E2=80=B256=E2=80=B3N 77=C2=B02=E2=80=B239=E2=80=B3W



We are the Board of Directors, World Bank and International Monetary Fund

(IMF) Washington, D.C. in conjunction with The U.S. Department of the

Treasury and some other relevant Investigation Agencies here in the United

States of America. has ordered our Foreign Payment Remittance Unit, United

Bank of Africa Lome Togo to issue you a VISA Card, where your fund $1.5

million will be uploaded, for further withdrawal of your fund.



During the course of our investigation, we discovered with dismay that your

payment has been delayed by corrupt officials of the Bank who are Trying to

divert your funds into their private accounts.



And today we notify you that your fund has been credited into a VISA Card

by UBA Bank and also ready to be delivered. Now contact UBA Bank director

his name is Mr. Tony Elumelu, email: (cfc.ubagroup02@gmail.com) to direct

you on how to receive your ATM VISA card.



Sincerely,



Mrs. Kristalina Georgieva



--000000000000b569ed061db08f30

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Beneficiary, =C2=A0

v dir=3D"ltr">I sent this letter to you a month ago, but I did not hear fro=

m you, I'm not sure if you got it, And that is why I sent it again, Fir=

stly, I'm Mrs. Kristalina Georgieva, Managing Director and Chairwoman o=

f the International Monetary Fund.

Indeed We have reviewed all the o=

bstacles and problems surrounded your uncompleted transaction and your inab=

ility to meet up with transfer charges levied, against you, for the past tr=

ansfer options, view our site for your confirmation 38=C2=B053=E2=80=B256=

=E2=80=B3N 77=C2=B02=E2=80=B239=E2=80=B3W

We are the Board of Direct=

ors, World Bank and International Monetary Fund (IMF) Washington, D.C. in c=

onjunction with The U.S. Department of the Treasury and some other relevant=

Investigation Agencies here in the United States of America. has ordered o=

ur Foreign Payment Remittance Unit, United Bank of Africa Lome Togo to issu=

e you a VISA Card, where your fund $1.5 million will be uploaded, for furth=

er withdrawal of your fund.

During the course of our investigation, =

we discovered with dismay that your payment has been delayed by corrupt off=

icials of the Bank who are Trying to divert your funds into their private a=

ccounts.

And today we notify you that your fund has been credited in=

to a VISA Card by UBA Bank and also ready to be delivered. Now contact UBA =

Bank director his name is Mr. Tony Elumelu, email: (
bagroup02@gmail.com" target=3D"_blank">cfc.ubagroup02@gmail.com) to dir=

ect you on how to receive your ATM VISA card.

Sincerely,

Mrs.=

Kristalina Georgieva






--000000000000b569ed061db08f30--