Exciting Project spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Sep 2024 06:57:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1so0QW-0000000032N-2NMV

for dave@doctor.nl2k.ab.ca;

Tue, 10 Sep 2024 06:57:00 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Sep 2024 06:57:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f50.google.com ([209.85.217.50]:45353)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1snzDu-00000000OSi-1tda

for root@nk.ca;

Tue, 10 Sep 2024 05:39:58 -0600

Received: by mail-vs1-f50.google.com with SMTP id ada2fe7eead31-49bd3bf3b4cso1961380137.3

for ; Tue, 10 Sep 2024 04:37:59 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1725968273; x=1726573073; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=WsZ5AnthdFteghvEn3Q9K0NbE78LaUpFILkYBoeaIBs=;

b=U+fwBGR5OkooNDGdt4y1F8G0vHhvAvAFOSq81KxBTw33Xv45bnLCVi2MpsdPY9nLhZ

gVc3WYNvxHfV+o+HPnAFTFJSAOnY0HoyGBOu6IGCWkoMuyLVjsGw27z2nsp+kLR+vs4v

Mx7ZkcMTcLMXZnEkmMn3yxbvkP4qXFW5P0nlKEaoBE9LI7uGiRBYMXLv7YR/q9jI44zA

N02OCR/PiZ1w1jvE9x/QCG/9so10IU3uG9QXs0KJMCG7Ijt3a2FXC6ktgHVlVH8T4oD9

MbkWs1IUBK+IBIm8nEBWnMZ1F+BjEg0Ly4/eAeYezahQmF2Jap7cacrOIk2GqkLtLWyZ

BKsA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1725968273; x=1726573073;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=WsZ5AnthdFteghvEn3Q9K0NbE78LaUpFILkYBoeaIBs=;

b=ajTCYn1DeHk3IgWsis6iJpRByzNpkWu/KQngFIkPdN9zu+MJEDUzOjMT9I4YVLyleI

6TQVNA0sTjnDLxm73wZpHz2d5QZ/+xyrxMU1ZqAjIsX38/cv7uyYC/3/tYhHnsljwOlB

Weuu+gB9doUnbhMnyYMlUSl8Hr+7XDFfcJHW7mA0bcderzJGW+gqflTdirxBgeHUg/uf

yEEdPnlFGuecgjZ0lgEqNoIYvwHiYaxWsmBwgS0gKptU6h/6M4no9tX63arECU+uUzZC

63faikzLaRcbt1u/bpZvSigpz7SichLBOfEzJsq3f1It702cMZTBWWz80JyKv8cjytTT

Q+gA==

X-Gm-Message-State: AOJu0YzN+RHHHFSy2uaf4pt4iAblp/towXh7rXW9VOqBmh+1PmjIj+9n

PAJqDqMNr7ZSGRDqB8nG4rkBpTWk3+rylzfLqVTnluBtM/Dmq/aaEOKF/XHZhLCY1/YEYWERFHa

YLCjTXjC+2J5y66tCNwLjCrhWS4BFgP9BaIc=

X-Google-Smtp-Source: AGHT+IEiTQ0UFyviynKrT4bUM7d6/Yk02uaW9lxJrXsNc9NvKbzjEB+HPeTPRXQBV/29QL5UvmWgIEKYSdSvSuhBCf0=

X-Received: by 2002:a05:6102:c0f:b0:49b:e3fd:b6d0 with SMTP id

ada2fe7eead31-49bedb7464cmr7709143137.5.1725968273373; Tue, 10 Sep 2024

04:37:53 -0700 (PDT)

MIME-Version: 1.0

From: Andy Green

Date: Tue, 10 Sep 2024 12:37:41 +0100

Message-ID:

Subject: Dave

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000d402c60621c24dc2"



--000000000000d402c60621c24dc2

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello Dave Yadallee,



I found your LinkedIn profile impressive and think you=E2=80=99d be a great=

fit for

an exciting project I=E2=80=99m working on.



Can we discuss this soon?

Looking forward to your response.



Best,

Andy Green



--000000000000d402c60621c24dc2

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




mail=3D"gmail_signature">

:0px;font-stretch:inherit;font-size:15px;line-height:inherit;font-family:&q=

uot;Segoe UI","Segoe UI Web (West European)","Segoe UI&=

quot;,-apple-system,BlinkMacSystemFont,Roboto,"Helvetica Neue",sa=

ns-serif;font-size-adjust:inherit;margin:0px;padding:0px;vertical-align:bas=

eline;color:rgb(33,33,33)!important">Hello Dave Yadallee,

auto" style=3D"border:0px;font-stretch:inherit;font-size:15px;line-height:i=

nherit;font-family:"Segoe UI","Segoe UI Web (West European)&=

quot;,"Segoe UI",-apple-system,BlinkMacSystemFont,Roboto,"He=

lvetica Neue",sans-serif;font-size-adjust:inherit;margin:0px;padding:0=

px;vertical-align:baseline;color:rgb(33,33,33)!important">=C2=A0

dir=3D"auto" style=3D"border:0px;font-stretch:inherit;font-size:15px;line-h=

eight:inherit;font-family:"Segoe UI","Segoe UI Web (West Eur=

opean)","Segoe UI",-apple-system,BlinkMacSystemFont,Roboto,&=

quot;Helvetica Neue",sans-serif;font-size-adjust:inherit;margin:0px;pa=

dding:0px;vertical-align:baseline;color:rgb(33,33,33)!important">I found yo=

ur LinkedIn profile impressive and think you=E2=80=99d be a great fit for a=

n exciting project I=E2=80=99m working on.

border:0px;font-stretch:inherit;font-size:15px;line-height:inherit;font-fam=

ily:"Segoe UI","Segoe UI Web (West European)","Seg=

oe UI",-apple-system,BlinkMacSystemFont,Roboto,"Helvetica Neue&qu=

ot;,sans-serif;font-size-adjust:inherit;margin:0px;padding:0px;vertical-ali=

gn:baseline;color:rgb(33,33,33)!important">=C2=A0

yle=3D"border:0px;font-stretch:inherit;font-size:15px;line-height:inherit;f=

ont-family:"Segoe UI","Segoe UI Web (West European)",&q=

uot;Segoe UI",-apple-system,BlinkMacSystemFont,Roboto,"Helvetica =

Neue",sans-serif;font-size-adjust:inherit;margin:0px;padding:0px;verti=

cal-align:baseline;color:rgb(33,33,33)!important">Can we discuss this soon?=


15px;line-height:inherit;font-family:"Segoe UI","Segoe UI We=

b (West European)","Segoe UI",-apple-system,BlinkMacSystemFo=

nt,Roboto,"Helvetica Neue",sans-serif;font-size-adjust:inherit;ma=

rgin:0px;padding:0px;vertical-align:baseline;color:rgb(33,33,33)!important"=

>Looking forward to your response.

px;font-stretch:inherit;font-size:15px;line-height:inherit;font-family:&quo=

t;Segoe UI","Segoe UI Web (West European)","Segoe UI&qu=

ot;,-apple-system,BlinkMacSystemFont,Roboto,"Helvetica Neue",sans=

-serif;font-size-adjust:inherit;margin:0px;padding:0px;vertical-align:basel=

ine;color:rgb(33,33,33)!important">=C2=A0

order:0px;font-stretch:inherit;font-size:15px;line-height:inherit;font-fami=

ly:"Segoe UI","Segoe UI Web (West European)","Sego=

e UI",-apple-system,BlinkMacSystemFont,Roboto,"Helvetica Neue&quo=

t;,sans-serif;font-size-adjust:inherit;margin:0px;padding:0px;vertical-alig=

n:baseline;color:rgb(36,36,36)">Best,
<=

div style=3D"border:0px;font-stretch:inherit;font-size:15px;line-height:inh=

erit;font-family:"Segoe UI","Segoe UI Web (West European)&qu=

ot;,"Segoe UI",-apple-system,BlinkMacSystemFont,Roboto,"Helv=

etica Neue",sans-serif;font-size-adjust:inherit;margin:0px;padding:0px=

;vertical-align:baseline;color:rgb(33,33,33)!important">Andy Green

iv>




--000000000000d402c60621c24dc2--

Instagram followers spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 09 Sep 2024 13:05:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1snjgn-00000000EMG-3IJa

for dave@doctor.nl2k.ab.ca;

Mon, 09 Sep 2024 13:04:41 -0600

Resent-From: The Doctor

Resent-Date: Mon, 9 Sep 2024 13:04:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f197.google.com ([209.85.160.197]:50292)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sniHK-00000000MuW-2v4N

for sales@nk.ca;

Mon, 09 Sep 2024 11:34:22 -0600

Received: by mail-qt1-f197.google.com with SMTP id d75a77b69052e-4582493b3f7so30993741cf.0

for ; Mon, 09 Sep 2024 10:32:27 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1725903141; x=1726507941; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=jOIR7SFW0U3CTbUn7sxx0W72jDaWx+sSQlYHo3nji7c=;

b=QzJkGdXaDS5DqtPtk4T5zEkjQdPcSR0g1j96V5mm+KM9jzgwN/3izzsz4aCwNlDezS

SOPuysjS1Bq3vAs/GH45Dae5NdUMGfTALsE4dL07hJwk47/LSVPogjw5ys4oLZSm3CPa

UCihcTXdVwMs0gjrOX662OM7uFwywwEDWf9vcXSAHO0PqLxT1hWwP3hVBYEH3UHR8x7Z

xZcOlORi7KRc6D3OR3XwiUb4lwY09m2CLQgwWn0S2qXX/QUypKPiEV6UgLgP8A5eT1v4

hArzXTLmK5ABt3Yc5U/jLWhbuLiZfMDH46vhosu9AWuQPx1y6bhKtEWmm4vdQ7GN49dC

Myjg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1725903141; x=1726507941;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=jOIR7SFW0U3CTbUn7sxx0W72jDaWx+sSQlYHo3nji7c=;

b=DQ/ioRZSl2gEXHMSZGWgU3HmbarL/0ZVuWFDVkEy5iZJraF+IWd2A639MtqEDP+5Dx

lJExYbhCNQMiCqu4uvWL58/ZglMiGgoZSGrsSt7nh5vK457m9W9ZITkwZgjL+j591xVU

PigjB58SMSBb4/7Whdkl3EHGy1zHRPB+HcLU2ayZc2SjziHSFHugahLylkHZD5AHQtCd

JcCGwd8JWb85E6ZShOF6ciREWAmf71NCFwBT5mOrJjl/SN3Zo66Dv+rn5gnr7QQIfi8o

ynFqlgBOQdiJbVTeG9nq4gPmJBhlftvC0mdB+gI0TnhzXsSvMzPy3xS9dnL6wVtuPmKR

RCww==

X-Gm-Message-State: AOJu0YxDSN4RnN9uLtzYCFLrCaFzETEVd+TbKku6+b8qxHeD17sWgW8B

HcDdHj+8juJ4SJu4A1t2ndTFPhzk4jCvXZ36rIrrMi4mkGkQ4ume+/5OKDX8MR3J/7K7aDXyxNE

=

X-Google-Smtp-Source: AGHT+IH4KzYyURThYQXnVo1823VbqCgTLPv4M+fCL2PHZOKOzxCZ6aTmw6FFHdUWMDGbreN04MgJtvFIeQ==

MIME-Version: 1.0

X-Received: by 2002:a05:622a:82:b0:456:78f8:e099 with SMTP id

d75a77b69052e-4580c6d17dcmr168875021cf.24.1725903141366; Mon, 09 Sep 2024

10:32:21 -0700 (PDT)

Message-ID:

Date: Mon, 09 Sep 2024 17:32:21 +0000

Subject: netknowyeg, BEST SELLER

From: sitaresmidheat92@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 10.7

X-Spam_score_int: 107

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello , Netknow Internet Service GET 50K Followers Instagram

NOW !!! Order here : [ https://instamedia.shop/store???netknowyeg ]



Content analysis details: (10.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

[209.85.160.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.197 listed in dnsbl.ahbl.org]

[209.85.160.197 listed in dnsbl.ahbl.org]

[209.85.160.197 listed in dnsbl.ahbl.org]

[209.85.160.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.197 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.197 listed in list.dnswl.org]

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[209.85.160.197 listed in psbl.surriel.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.197 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[sitaresmidheat92(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[sitaresmidheat92(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 FREEMAIL_REPLY From and body contain different freemails

Subject: {SPAM?} netknowyeg, BEST SELLER



SGVsbG8gLA0KTmV0a25vdyBJbnRlcm5ldCBTZXJ2aWNlDQoNCg0KR0VUIDUwSyBGb2xsb3dlcnMg

SW5zdGFncmFtIE5PVyAhISENCk9yZGVyIGhlcmUgOg0KDQpbIGh0dHBzOi8vaW5zdGFtZWRpYS5z

aG9wL3N0b3JlPz8/bmV0a25vd3llZyBdDQoNCkRvIHlvdSBoYXZlIGFib3V0IFsgTGVzcyB0aGFu

IDg1SyBdIEZvbGxvd2VycyA/DQpTcGVjaWFscyAgbGltaXRlZCAgT2ZmIDQwJSBUb2RheS4uLiEN

CkluY3JlYXNlIE5vdyAuLiEhIQ0KDQotIEluc3RhbnQgU3RhcnQNCi0gU2FmZXN0IE1ldGhvZHMN

Ci0gUHJpdmFjeSBQcm90ZWN0aW9uDQotIFNwZWVkIDIwMEsgRm9sbG93ZXJzL2RheQ0KLSBIaWdo

IFF1YWxpdHkgRm9sbG93ZXJzDQotIERyb3AtQmFjayBHdWFyYW50ZWUNCi0gVHJ1c3RlZCBTZWxs

ZXIgdGVzdGltb255DQotIFN0YXJ0aW5nIGdldCA1SyBGb2xsb3dlcnMgSW5zdGFncmFtDQotIEd1

YXJhbnRlZWQgdG8gYmUgdGhlIGNoZWFwZXN0DQoNClRoYW5rIHlvdSwNClJlZ2FyZHMsDQpzb2Np

YWxpbnN0YW1heEBnbWFpbC5jb20NCg0KQ29weXJpZ2h0IMKpIDIwMTQgLSAyMDI1IEluc3RhbWVk

aWFNQVgNCg==

Instagram followers spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 08 Sep 2024 12:29:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1snMeA-00000000L2z-0qcf

for dave@doctor.nl2k.ab.ca;

Sun, 08 Sep 2024 12:28:26 -0600

Resent-From: The Doctor

Resent-Date: Sun, 8 Sep 2024 12:28:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f71.google.com ([209.85.210.71]:52662)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1snHgh-00000000J2s-32Vj

for sales@nk.ca;

Sun, 08 Sep 2024 07:10:48 -0600

Received: by mail-ot1-f71.google.com with SMTP id 46e09a7af769-710dde6abc9so925871a34.1

for ; Sun, 08 Sep 2024 06:08:52 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1725800926; x=1726405726; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=jOIR7SFW0U3CTbUn7sxx0W72jDaWx+sSQlYHo3nji7c=;

b=l0xsWEoTHPz3HgMm8oy+0QBm6WH9xY/v8dAbH61ke/m+noNwTm354xbBeBLTeM4nbo

UNoLGbNgtfcEPFk5cxCpUq3ghz1enlmeg0Fhi0qNMP/aFFaGIHcxSO1CMvJS43ORGKBU

Zi/9A/D39hg+qb+3zB9c3R1rv2al+YrKC6BQn/5C1rS+CGdxbuTRwaMxQAc0Xp9Sivj5

wIe+bcikDTBqsNYs4Aa1ve2W8GNKoV+ROGpR9+s5Znz8gOFBmxHlCsiCzUGpOQUq5mMm

v6H4034aaXbcmbVLpI967sav11Nbl+RVXaxrF9cRjfdzZrkLcDF7BzSjyrN/ViP/B3sL

+fDQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1725800926; x=1726405726;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=jOIR7SFW0U3CTbUn7sxx0W72jDaWx+sSQlYHo3nji7c=;

b=r2DC3aLQCJCevjx6mYlLHiuVJy+bca/b4OH6D874opK1NDCNmzB9Bn00g/s323AtXb

j7f8F9Y85JLPYqeej47pUlrgDzEjxvDquMd8l86WoP4n6sLO62sA4eIR5wAQKzBtJWfn

kA9iuZnQn6lr2ol2h+7UrxFoRQkhCK3c149E0od7nooUj75N7ATpLhsCuBGfxyqYlUxc

4XGly+k8J+QujvYLLgupkK1QQq5WZ7EyUtAup97KztmKEeHfh5IYHgzTPH4zmHrgEc9X

6qvgIqmeBLODXJXzcBZWJvbhONGPG5issTfhVK/ScYArHAg51OwP8pYivRsAg9mLjdg1

7Tdg==

X-Gm-Message-State: AOJu0Yy+xMAjstCkZUGGIvw9jEOtKixROBq2kV9bDxzStyC9H6hGlbbL

jSt7Jo7suATo5AXElZCvB5yLhLSfOgMzb58Y1s9iiJXlEi+k35dQAJC5eTi/66O3ohqNwKtVVwo

=

X-Google-Smtp-Source: AGHT+IEmMQ5b0yHrSB6p/IBODLM+oaeUfVFaExWRnRE0ZSg84EmdOS7xiFpYKD0Hh3pGkwBD9/m2MVL14w==

MIME-Version: 1.0

X-Received: by 2002:a05:6830:2b0a:b0:70f:6eca:d486 with SMTP id

46e09a7af769-710cc21bf9dmr10960300a34.8.1725800926127; Sun, 08 Sep 2024

06:08:46 -0700 (PDT)

Message-ID:

Date: Sun, 08 Sep 2024 13:08:46 +0000

Subject: netknowyeg, BEST SELLER

From: rainbowinthesky47@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 8.0

X-Spam_score_int: 80

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello , Netknow Internet Service GET 50K Followers Instagram

NOW !!! Order here : [ https://instamedia.shop/store???netknowyeg ]



Content analysis details: (8.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

[209.85.210.71 listed in dnsbl.ahbl.org]

[209.85.210.71 listed in dnsbl.ahbl.org]

[209.85.210.71 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.71 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.71 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[rainbowinthesky47(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[rainbowinthesky47(at)gmail.com]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 FREEMAIL_REPLY From and body contain different freemails

Subject: {SPAM?} netknowyeg, BEST SELLER



SGVsbG8gLA0KTmV0a25vdyBJbnRlcm5ldCBTZXJ2aWNlDQoNCg0KR0VUIDUwSyBGb2xsb3dlcnMg

SW5zdGFncmFtIE5PVyAhISENCk9yZGVyIGhlcmUgOg0KDQpbIGh0dHBzOi8vaW5zdGFtZWRpYS5z

aG9wL3N0b3JlPz8/bmV0a25vd3llZyBdDQoNCkRvIHlvdSBoYXZlIGFib3V0IFsgTGVzcyB0aGFu

IDg1SyBdIEZvbGxvd2VycyA/DQpTcGVjaWFscyAgbGltaXRlZCAgT2ZmIDQwJSBUb2RheS4uLiEN

CkluY3JlYXNlIE5vdyAuLiEhIQ0KDQotIEluc3RhbnQgU3RhcnQNCi0gU2FmZXN0IE1ldGhvZHMN

Ci0gUHJpdmFjeSBQcm90ZWN0aW9uDQotIFNwZWVkIDIwMEsgRm9sbG93ZXJzL2RheQ0KLSBIaWdo

IFF1YWxpdHkgRm9sbG93ZXJzDQotIERyb3AtQmFjayBHdWFyYW50ZWUNCi0gVHJ1c3RlZCBTZWxs

ZXIgdGVzdGltb255DQotIFN0YXJ0aW5nIGdldCA1SyBGb2xsb3dlcnMgSW5zdGFncmFtDQotIEd1

YXJhbnRlZWQgdG8gYmUgdGhlIGNoZWFwZXN0DQoNClRoYW5rIHlvdSwNClJlZ2FyZHMsDQpzb2Np

YWxpbnN0YW1heEBnbWFpbC5jb20NCg0KQ29weXJpZ2h0IMKpIDIwMTQgLSAyMDI1IEluc3RhbWVk

aWFNQVgNCg==

Chinese products spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 08 Sep 2024 05:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1snG0x-000000004Bq-03iK

for dave@doctor.nl2k.ab.ca;

Sun, 08 Sep 2024 05:23:31 -0600

Resent-From: The Doctor

Resent-Date: Sun, 8 Sep 2024 05:23:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f193.google.com ([209.85.215.193]:48639)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1snCW1-00000000JBM-3ZNs

for doctor@nl2k.ab.ca;

Sun, 08 Sep 2024 01:39:27 -0600

Received: by mail-pg1-f193.google.com with SMTP id 41be03b00d2f7-7cb3db0932cso2648556a12.1

for ; Sun, 08 Sep 2024 00:37:32 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=goodbomold.com; s=google; t=1725781047; x=1726385847; darn=nl2k.ab.ca;

h=disposition-notification-to:mime-version:date:subject:to:message-id

:reply-to:from:from:to:cc:subject:date:message-id:reply-to;

bh=n/L7gXyZ3ItKbMOfhpEAkl21E7uiz0/Ds0kqy20qykE=;

b=i11xruVbrUAIVc4QkeQ3VrOjsui4jfRMfStilQpvt+GpoWrJrwqRmwcEd8HKnIA/Z0

NjzNY3SGjO/9wj+WTjN4ukns4VrqQi/+sE4aL9C+jSgd2T+wpk7LYADjNQmmMoP9rKY4

j67/oakcCITdJmqiq8gsv1G33aHjkjFhTYt74=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1725781047; x=1726385847;

h=disposition-notification-to:mime-version:date:subject:to:message-id

:reply-to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=n/L7gXyZ3ItKbMOfhpEAkl21E7uiz0/Ds0kqy20qykE=;

b=kDV/v6bY9wgQKwnSA3RFaIu2XmsEpq7CD9mksgMj8ppyoqGxS4ATx5PdP9I9xaHQu3

sRbuaEJl3jvDmNRVtS4BVzC8zYL5ejZh1VQUHbBMMhozA8HNLwwVo+kz33rwaMo8MTe0

AJDeMYrhhm07RdZNTuj/eTsByHsxl7hdcz36Ub6HzUArpasOsqYvcpVUL0C83xIoEqZc

bjsuhUtnGWy2w5aFKgyAH6oHGFg1Q/ECH/0dn6Uggq1xMNhdyMLZqso84KgZmWViYjv+

dXM0KSf1B4MwtQ39JkSd8ygeQmx1QLrpYF0VLrWPe8P/IlzPl/JW90wM13TiqMhaxaeb

MH7Q==

X-Gm-Message-State: AOJu0YyaWqmRtvoYXOOhKDPbf+/GFbQ9ILFmpwRY0TZNmy0a1XSbN8GA

L3Pv206aHoGt1kY6cE4DRK1PZltocyKgj+yvkuDfzB1aFU5d11MSQrv16A559yqvbrrZgNgFkKj

S26Y=

X-Google-Smtp-Source: AGHT+IEgtvPvsF0DmZEKAk4nfQfftgFcy9ZqHRUJEczTfCibbQHK662P0Y7RSbBmQqZczNEweLf2fg==

X-Received: by 2002:a17:903:22c4:b0:206:adc8:2dcb with SMTP id d9443c01a7336-2070a537840mr55722395ad.25.1725781046487;

Sun, 08 Sep 2024 00:37:26 -0700 (PDT)

Received: from mhceltju ([223.122.107.7])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-20710e1b09bsm16786315ad.56.2024.09.08.00.37.25

for

(version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);

Sun, 08 Sep 2024 00:37:26 -0700 (PDT)

From: "grace@runtooprecision.com"

X-Google-Original-From: "grace@runtooprecision.com"

Reply-To:

Message-ID:

To:

Subject: Preferred supplier for injection molds and injection molding parts

Date: Sun, 8 Sep 2024 15:37:12 +0800

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0C4C_01EBEC84.1B24B150"

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.5512

Disposition-Notification-To: grace@runtooprecision.com

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512

X-Spam_score: 12.5

X-Spam_score_int: 125

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello Dear Manager, How is everything going? This is Grace

from Runtoo Precision Technology Co., Ltd., located in Shenzhen, China. It

will be a great honor if we can establish a relationship with you in the

future. Runtoo Precision found in 2013 [...]



Content analysis details: (12.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[223.122.107.7 listed in will-spam-for-food.eu.org]

[223.122.107.7 listed in will-spam-for-food.eu.org]

[223.122.107.7 listed in will-spam-for-food.eu.org]

[223.122.107.7 listed in will-spam-for-food.eu.org]

[223.122.107.7 listed in will-spam-for-food.eu.org]

[223.122.107.7 listed in will-spam-for-food.eu.org]

[223.122.107.7 listed in will-spam-for-food.eu.org]

[223.122.107.7 listed in will-spam-for-food.eu.org]

[209.85.215.193 listed in will-spam-for-food.eu.org]

[209.85.215.193 listed in will-spam-for-food.eu.org]

[209.85.215.193 listed in will-spam-for-food.eu.org]

[209.85.215.193 listed in will-spam-for-food.eu.org]

[209.85.215.193 listed in will-spam-for-food.eu.org]

[209.85.215.193 listed in will-spam-for-food.eu.org]

[209.85.215.193 listed in will-spam-for-food.eu.org]

[209.85.215.193 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.215.193 listed in dnsbl.ahbl.org]

[209.85.215.193 listed in dnsbl.ahbl.org]

[209.85.215.193 listed in dnsbl.ahbl.org]

[209.85.215.193 listed in dnsbl.ahbl.org]

[223.122.107.7 listed in dnsbl.ahbl.org]

[223.122.107.7 listed in dnsbl.ahbl.org]

[223.122.107.7 listed in dnsbl.ahbl.org]

[223.122.107.7 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.215.193 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.215.193 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.215.193 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.215.193 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.215.193 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.193 listed in list.dnswl.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: runtooprecision.com]

[URI: goodbomold.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.0 HK_RANDOM_FROM From username looks random

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 ZMIde_OutlookExpress Outlook Express should not be used anymore

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

-0.0 T_SCC_BODY_TEXT_LINE No description available.

2.0 MIXED_HREF_CASE Has href in mixed case

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

Subject: {SPAM?} Preferred supplier for injection molds and injection molding parts



This is a multi-part message in MIME format.



------=_NextPart_000_0C4C_01EBEC84.1B24B150

Content-Type: text/plain;

charset="gb2312"

Content-Transfer-Encoding: base64



SGVsbG8gRGVhciBNYW5hZ2VyLA0KDQpIb3cgaXMgZXZlcnl0aGluZyBnb2luZz8NCg0KVGhpcyBp

cyBHcmFjZSBmcm9tIFJ1bnRvbyBQcmVjaXNpb24gVGVjaG5vbG9neSBDby4sIEx0ZC4sIGxvY2F0

ZWQgaW4gU2hlbnpoZW4sIENoaW5hLg0KSXQgd2lsbCBiZSBhIGdyZWF0IGhvbm9yIGlmIHdlIGNh

biBlc3RhYmxpc2ggYSByZWxhdGlvbnNoaXAgd2l0aCB5b3UgaW4gdGhlIGZ1dHVyZS4gUnVudG9v

IFByZWNpc2lvbiBmb3VuZCBpbiAyMDEzLCBtYWpvcnMgaW4gbW9sZCBkZXNpZ24gYW5kIGluamVj

dGlvbiBzZXJ2aWNlIGZvciBvdmVyIDEwIHllYXJzLiBPdXIgcHJvZHVjdHMgZW5qb3kgZ3JlYXQg

cG9wdWxhcml0eSBhbW9uZyBFdXJvcGVhbiBhbmQgQW1lcmljYW4gbWFya2V0cy4NCldlIGNhbiBv

ZmZlciB5b3UgdGhlIGZvbGxvd2luZyBzZXJ2aWNlIGZvciB5b3UuDQouIE1vbGQgZGVzaWduIGFu

ZCBtb2xkIHByb2R1Y3Rpb24uDQouIEluamVjdGlvbiBzZXJ2aWNlLCBhc3NlbWJseSwgcHJpbnRp

bmcsIGFuZCBwYWNraW5nIHNlcnZpY2UuDQouIFJhcGlkIHByb3RvdHlwaW5nIG9yIDNEIHByaW50

aW5nIHNlcnZpY2UuDQouIEhhcmR3YXJlIHBhcnRzDQoNCklmIHlvdSBoYXZlIGFueSBwbGFzdGlj

IHBhcnQgbmVlZCB0byBjdXN0b21pemVkLCBjb3VsZCB5b3Ugb2ZmZXIgdXMgdGhlIDNEIGZpbGVz

IG9yIHNhbXBsZXMgeW91IGhhdmU/IFBsZWFzZSBkb24ndCBoZXNpdGF0ZSB0byBjb250YWN0IHVz

Lg0KTG9va2luZyBmb3J3YXJkIHRvIHlvdXIgZWFybHkgcmVwbHkgd2hpY2ggd2lsbCBiZSBoaWdo

bHkgYXBwcmVjaWF0ZWQuDQoNCg0KQmVzdCBSZWdhcmRzLA0KR3JhY2UNClNhbGVzIE1hbmFnZXIN

Cg0KDQpSdW50b28gUHJlY2lzaW9uIFRlY2hub2xvZ3kgQ28uLCBMdGQuICAgICAgICAgICAgICAg

ICAgICANCk1vYmlsZTogODYtMTM2MDMwMzc0NjkNClRlbDogICAgKzg2LTA3NTUtMjMxOTYxNjYN

CkVtYWlsOiBncmFjZUBydW50b29wcmVjaXNpb24uY29tICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICANCldlYjogIGh0dHA6Ly93d3cucnVu

dG9vcHJlY2lzaW9uLmNvbS8g



------=_NextPart_000_0C4C_01EBEC84.1B24B150

Content-Type: text/html;

charset="gb2312"

Content-Transfer-Encoding: base64



PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMCBUcmFuc2l0aW9uYWwv

L0VOIj4NCjxIVE1MPjxIRUFEPg0KPE1FVEEgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PWdi

MjMxMiIgaHR0cC1lcXVpdj1Db250ZW50LVR5cGU+DQo8TUVUQSBuYW1lPUdFTkVSQVRPUiBjb250

ZW50PSJNU0hUTUwgMTEuMDAuMTA1NzAuMTAwMSI+PC9IRUFEPg0KPEJPRFk+DQo8RElWIA0Kc3R5

bGU9J0ZPTlQtU0laRTogMTRweDsgRk9OVC1GQU1JTFk6ICJNaWNyb3NvZnQgWWFIZWkgVUkiOyBX

SElURS1TUEFDRTogbm9ybWFsOyBXT1JELVNQQUNJTkc6IDBweDsgVEVYVC1UUkFOU0ZPUk06IG5v

bmU7IEZPTlQtV0VJR0hUOiA0MDA7IENPTE9SOiByZ2IoMCwwLDApOyBGT05ULVNUWUxFOiBub3Jt

YWw7IE9SUEhBTlM6IDI7IFdJRE9XUzogMjsgTEVUVEVSLVNQQUNJTkc6IG5vcm1hbDsgQkFDS0dS

T1VORC1DT0xPUjogcmdiKDI1NSwyNTUsMjU1KTsgVEVYVC1JTkRFTlQ6IDBweDsgZm9udC12YXJp

YW50LWxpZ2F0dXJlczogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyAtd2Via2l0

LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbi1zdHlsZTogaW5pdGlhbDsg

dGV4dC1kZWNvcmF0aW9uLWNvbG9yOiBpbml0aWFsOyB0ZXh0LWRlY29yYXRpb24tdGhpY2tuZXNz

OiBpbml0aWFsJz48U1BBTiANCnN0eWxlPSJGT05ULVNJWkU6IDE2cHgiPg0KPERJViANCnN0eWxl

PSJGT05ULVNJWkU6IDE0cHg7IEZPTlQtRkFNSUxZOiBBcmlhbDsgQ09MT1I6ICMwMDAwMDA7IExJ

TkUtSEVJR0hUOiAxLjciPg0KPFAgc3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9OVCBzaXplPTMgZmFj

ZT0iTWljcm9zb2Z0IFlhSGVpIFVJIj5IZWxsbyBEZWFyIA0KTWFuYWdlciw8L0ZPTlQ+PC9QPg0K

PFAgc3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9OVCBzaXplPTMgZmFjZT0iTWljcm9zb2Z0IFlhSGVp

IFVJIj48L0ZPTlQ+Jm5ic3A7PC9QPg0KPFAgc3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9OVCBzaXpl

PTMgZmFjZT0iTWljcm9zb2Z0IFlhSGVpIFVJIj5Ib3cgaXMgZXZlcnl0aGluZyANCmdvaW5nPzwv

Rk9OVD48L1A+DQo8UCBzdHlsZT0iTUFSR0lOOiAwcHgiPjxGT05UIHNpemU9MyBmYWNlPSJNaWNy

b3NvZnQgWWFIZWkgVUkiPjwvRk9OVD4mbmJzcDs8L1A+DQo8UCBzdHlsZT0iTUFSR0lOOiAwcHgi

PjxGT05UIHNpemU9MyBmYWNlPSJNaWNyb3NvZnQgWWFIZWkgVUkiPlRoaXMgaXMgR3JhY2UgZnJv

bSANClJ1bnRvbyBQcmVjaXNpb24gVGVjaG5vbG9neSBDby4sIEx0ZC4sIGxvY2F0ZWQgaW4gU2hl

bnpoZW4sIENoaW5hLjwvRk9OVD48L1A+DQo8UCBzdHlsZT0iTUFSR0lOOiAwcHgiPjxGT05UIHNp

emU9MyBmYWNlPSJNaWNyb3NvZnQgWWFIZWkgVUkiPkl0IHdpbGwgYmUgYSBncmVhdCANCmhvbm9y

IGlmIHdlIGNhbiBlc3RhYmxpc2ggYSByZWxhdGlvbnNoaXAgd2l0aCB5b3UgaW4gdGhlIGZ1dHVy

ZS4gUnVudG9vIA0KUHJlY2lzaW9uIGZvdW5kIGluIDIwMTMsIG1ham9ycyBpbiBtb2xkIGRlc2ln

biBhbmQgaW5qZWN0aW9uIHNlcnZpY2UgZm9yIG92ZXIgMTAgDQp5ZWFycy4gT3VyIHByb2R1Y3Rz

IGVuam95IGdyZWF0IHBvcHVsYXJpdHkgYW1vbmcgRXVyb3BlYW4gYW5kIEFtZXJpY2FuIA0KbWFy

a2V0cy48L0ZPTlQ+PC9QPg0KPFAgc3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9OVCBzaXplPTMgZmFj

ZT0iTWljcm9zb2Z0IFlhSGVpIFVJIj5XZSBjYW4gb2ZmZXIgeW91IA0KdGhlIGZvbGxvd2luZyBz

ZXJ2aWNlIGZvciB5b3UuPC9GT05UPjwvUD4NCjxQIHN0eWxlPSJNQVJHSU46IDBweCI+PEZPTlQg

c2l6ZT0zIGZhY2U9Ik1pY3Jvc29mdCBZYUhlaSBVSSI+LiZuYnNwO01vbGQgZGVzaWduIA0KYW5k

IG1vbGQgcHJvZHVjdGlvbi48L0ZPTlQ+PC9QPg0KPFAgc3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9O

VCBzaXplPTMgZmFjZT0iTWljcm9zb2Z0IFlhSGVpIFVJIj4uJm5ic3A7SW5qZWN0aW9uIA0Kc2Vy

dmljZSwgYXNzZW1ibHksIHByaW50aW5nLCBhbmQgcGFja2luZyBzZXJ2aWNlLjwvRk9OVD48L1A+

DQo8UCBzdHlsZT0iTUFSR0lOOiAwcHgiPjxGT05UIHNpemU9MyBmYWNlPSJNaWNyb3NvZnQgWWFI

ZWkgVUkiPi4mbmJzcDtSYXBpZCANCnByb3RvdHlwaW5nIG9yIDNEIHByaW50aW5nIHNlcnZpY2Uu

PC9GT05UPjwvUD4NCjxQIHN0eWxlPSJNQVJHSU46IDBweCI+PEZPTlQgc2l6ZT0zIGZhY2U9Ik1p

Y3Jvc29mdCBZYUhlaSBVSSI+LiZuYnNwO0hhcmR3YXJlIA0KcGFydHM8L0ZPTlQ+PC9QPg0KPFAg

c3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9OVCBzaXplPTMgZmFjZT0iTWljcm9zb2Z0IFlhSGVpIFVJ

Ij48L0ZPTlQ+Jm5ic3A7PC9QPg0KPFAgc3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9OVCBzaXplPTMg

ZmFjZT0iTWljcm9zb2Z0IFlhSGVpIFVJIj5JZiB5b3UgaGF2ZSBhbnkgDQpwbGFzdGljIHBhcnQg

bmVlZCB0byBjdXN0b21pemVkLCBjb3VsZCB5b3Ugb2ZmZXIgdXMgdGhlIDNEIGZpbGVzIG9yIHNh

bXBsZXMgeW91IA0KaGF2ZT8gUGxlYXNlIGRvbid0IGhlc2l0YXRlIHRvIGNvbnRhY3QgdXMuPC9G

T05UPjwvUD4NCjxQIHN0eWxlPSJNQVJHSU46IDBweCI+PEZPTlQgc2l6ZT0zIGZhY2U9Ik1pY3Jv

c29mdCBZYUhlaSBVSSI+TG9va2luZyBmb3J3YXJkIHRvIA0KeW91ciBlYXJseSByZXBseSB3aGlj

aCB3aWxsIGJlIGhpZ2hseSBhcHByZWNpYXRlZC48L0ZPTlQ+PC9QPg0KPFAgc3R5bGU9Ik1BUkdJ

TjogMHB4Ij48Rk9OVCBmYWNlPSJNaWNyb3NvZnQgWWFIZWkgVUkiPjxCUj48Rk9OVCANCnNpemU9

Mz48L0ZPTlQ+PC9GT05UPjwvUD4NCjxQIHN0eWxlPSJNQVJHSU46IDBweCI+PEZPTlQgc2l6ZT0z

IGZhY2U9Ik1pY3Jvc29mdCBZYUhlaSBVSSI+QmVzdCANClJlZ2FyZHMsPC9GT05UPjwvUD4NCjxQ

IHN0eWxlPSJNQVJHSU46IDBweCI+PEZPTlQgc2l6ZT0zIGZhY2U9Ik1pY3Jvc29mdCBZYUhlaSBV

SSI+R3JhY2U8L0ZPTlQ+PC9QPg0KPFAgc3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9OVCBzaXplPTMg

ZmFjZT0iTWljcm9zb2Z0IFlhSGVpIFVJIj5TYWxlcyANCk1hbmFnZXI8L0ZPTlQ+PC9QPg0KPFAg

c3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9OVCBmYWNlPSJNaWNyb3NvZnQgWWFIZWkgVUkiPjxCUj48

Rk9OVCANCnNpemU9Mz48L0ZPTlQ+PC9GT05UPjwvUD4NCjxQIHN0eWxlPSJNQVJHSU46IDBweCI+

PEZPTlQgc2l6ZT0zIGZhY2U9Ik1pY3Jvc29mdCBZYUhlaSBVSSI+UnVudG9vIFByZWNpc2lvbiAN

ClRlY2hub2xvZ3kgQ28uLCBMdGQuJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm

bmJzcDsgJm5ic3A7ICZuYnNwOyANCiZuYnNwOyAmbmJzcDsmbmJzcDs8L0ZPTlQ+PC9QPg0KPFAg

c3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9OVCBzaXplPTMgZmFjZT0iTWljcm9zb2Z0IFlhSGVpIFVJ

Ij5Nb2JpbGU6IA0KODYtMTM2MDMwMzc0Njk8L0ZPTlQ+PC9QPg0KPFAgc3R5bGU9Ik1BUkdJTjog

MHB4Ij48Rk9OVCBzaXplPTMgZmFjZT0iTWljcm9zb2Z0IFlhSGVpIFVJIj5UZWw6Jm5ic3A7ICZu

YnNwOyANCis4Ni0wNzU1LTIzMTk2MTY2PC9GT05UPjwvUD4NCjxQIHN0eWxlPSJNQVJHSU46IDBw

eCI+PEZPTlQgc2l6ZT0zIGZhY2U9Ik1pY3Jvc29mdCBZYUhlaSBVSSI+RW1haWw6IA0KZ3JhY2VA

cnVudG9vcHJlY2lzaW9uLmNvbSZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i

c3A7ICZuYnNwOyAmbmJzcDsgDQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu

YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IA0KJm5ic3A7ICZuYnNwOyAm

bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IA0K

Jm5ic3A7PC9GT05UPjwvUD4NCjxQIHN0eWxlPSJNQVJHSU46IDBweCI+PEZPTlQgc2l6ZT0zIGZh

Y2U9Ik1pY3Jvc29mdCBZYUhlaSBVSSI+V2ViOiZuYnNwOyANCjwvRk9OVD48QSBocmVmPSJodHRw

Oi8vd3d3LnJ1bnRvb3ByZWNpc2lvbi5jb20vIiANCl9zcmM9Imh0dHA6Ly93d3cucnVudG9vcHJl

Y2lzaW9uLmNvbS8iPjxGT05UIHNpemU9MyANCmZhY2U9Ik1pY3Jvc29mdCBZYUhlaSBVSSI+aHR0

cDovL3d3dy5ydW50b29wcmVjaXNpb24uY29tLzwvRk9OVD48L0E+PEZPTlQgDQpmYWNlPSJNaWNy

b3NvZnQgWWFIZWkgVUkiPiA8L0ZPTlQ+PC9QPjwvRElWPjwvU1BBTj48L0RJVj48L0JPRFk+PC9I

VE1MPg0K



------=_NextPart_000_0C4C_01EBEC84.1B24B150--

Chinese products spam from Google Gmail

Return-path:

Envelope-to: dave@nl2k.ab.ca

Delivery-date: Sun, 08 Sep 2024 07:20:00 -0600

Received: from mail-pl1-f195.google.com ([209.85.214.195]:43154)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1snHpB-00000000JWO-1fAO

for dave@nl2k.ab.ca;

Sun, 08 Sep 2024 07:19:40 -0600

Received: by mail-pl1-f195.google.com with SMTP id d9443c01a7336-2021c08b95cso34065525ad.0

for ; Sun, 08 Sep 2024 06:17:33 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=goodbomold.com; s=google; t=1725801447; x=1726406247; darn=nl2k.ab.ca;

h=disposition-notification-to:mime-version:date:subject:to:message-id

:reply-to:from:from:to:cc:subject:date:message-id:reply-to;

bh=epxy4vL+mQnP6ebjnWSrXJFdc2GSw6MNwoORu/aKPEQ=;

b=JLrJcBM1j1y2VSNp3pbte7/JOTqQmM3EZRQLisa2bP1iETaOeITmpHDDTow8nfiofM

Ip32QtziqT+acK6ZwXMXPvVSYfALOEjG3cMGvxcWs4obFEPpwE91Wyabar24zvkk3z0d

9XR2GfU9IOc7yU52rEme+LrkC7YHbbwh7ndW8=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1725801447; x=1726406247;

h=disposition-notification-to:mime-version:date:subject:to:message-id

:reply-to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=epxy4vL+mQnP6ebjnWSrXJFdc2GSw6MNwoORu/aKPEQ=;

b=kL2RJJmN9WEAJJEEYIcGG9Q7zsmokFwXJe91pSTdFVu4zMm/9TMXJ8qV574AuTZGUn

PoexmaPAKkly9FSd03oF31irgL6wuchJgvQPdBZza/iiXQdDKHpXBRrz2yGPbNiiIyzH

4QKLBf1/jDS6ChCtJsXXkMIwJDx7BYJopytKsPrn+LCCCNTPtVBz353DLzNomkzLcXH+

VBngNA5JpcbcV55PbGmjChTXRRAwbA5oZK9vTHqmV/tM8wB+o7/AGPn/c63DAI7NL/6r

35re+TQXnjfI/s26jgC0Nz7bZdTZzddN7ge/aRJjKSYpGI4WYJbURjNLzIzUdc5kBAEp

ICAA==

X-Gm-Message-State: AOJu0YzVNVv2ls8sJ3tmtrT+lcauR94UYisShmpKhg+JcWIIorfQG9B6

ziG1NNWZ1YGH3HarjDgB7M0AIH7Gej4ahJV2k0329vuZMsXGEE0WKKRNZU4DMhD1oTZ90XIRaVs

kArY=

X-Google-Smtp-Source: AGHT+IG0GDXsO53YNK77JGFz3jq263j7P52eC40WtiIB4q2M4Tg0q7ATBqKUR5C88Ls7AQ/ZXRBfBg==

X-Received: by 2002:a17:902:cec9:b0:206:8915:1c74 with SMTP id d9443c01a7336-206b840d063mr235597145ad.21.1725801446856;

Sun, 08 Sep 2024 06:17:26 -0700 (PDT)

Received: from nqavql ([223.122.107.7])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-20710eeaf76sm20044085ad.141.2024.09.08.06.17.25

for

(version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);

Sun, 08 Sep 2024 06:17:26 -0700 (PDT)

From: "grace@runtooprecision.com"

X-Google-Original-From: "grace@runtooprecision.com"

Reply-To:

Message-ID:

To:

Subject: Preferred supplier for injection molds and injection molding parts

Date: Sun, 8 Sep 2024 21:17:19 +0800

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_03B0_01EA93B4.11802610"

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.5512

Disposition-Notification-To: grace@runtooprecision.com

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512

X-Spam_score: 12.5

X-Spam_score_int: 125

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello Dear Manager, How is everything going? This is Grace

from Runtoo Precision Technology Co., Ltd., located in Shenzhen, China. It

will be a great honor if we can establish a relationship with you in the

future. Runtoo Precision found in 2013 [...]



Content analysis details: (12.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[223.122.107.7 listed in will-spam-for-food.eu.org]

[223.122.107.7 listed in will-spam-for-food.eu.org]

[223.122.107.7 listed in will-spam-for-food.eu.org]

[223.122.107.7 listed in will-spam-for-food.eu.org]

[223.122.107.7 listed in will-spam-for-food.eu.org]

[223.122.107.7 listed in will-spam-for-food.eu.org]

[223.122.107.7 listed in will-spam-for-food.eu.org]

[223.122.107.7 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[223.122.107.7 listed in dnsbl.ahbl.org]

[223.122.107.7 listed in dnsbl.ahbl.org]

[223.122.107.7 listed in dnsbl.ahbl.org]

[223.122.107.7 listed in dnsbl.ahbl.org]

[209.85.214.195 listed in dnsbl.ahbl.org]

[209.85.214.195 listed in dnsbl.ahbl.org]

[209.85.214.195 listed in dnsbl.ahbl.org]

[209.85.214.195 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[223.122.107.7 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[223.122.107.7 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[223.122.107.7 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[223.122.107.7 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.195 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.195 listed in wl.mailspike.net]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: runtooprecision.com]

[URI: goodbomold.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.0 HK_RANDOM_FROM From username looks random

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.0 ZMIde_OutlookExpress Outlook Express should not be used anymore

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

2.0 MIXED_HREF_CASE Has href in mixed case

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

Subject: {SPAM?} Preferred supplier for injection molds and injection molding parts



This is a multi-part message in MIME format.



------=_NextPart_000_03B0_01EA93B4.11802610

Content-Type: text/plain;

charset="gb2312"

Content-Transfer-Encoding: base64



SGVsbG8gRGVhciBNYW5hZ2VyLA0KDQpIb3cgaXMgZXZlcnl0aGluZyBnb2luZz8NCg0KVGhpcyBp

cyBHcmFjZSBmcm9tIFJ1bnRvbyBQcmVjaXNpb24gVGVjaG5vbG9neSBDby4sIEx0ZC4sIGxvY2F0

ZWQgaW4gU2hlbnpoZW4sIENoaW5hLg0KSXQgd2lsbCBiZSBhIGdyZWF0IGhvbm9yIGlmIHdlIGNh

biBlc3RhYmxpc2ggYSByZWxhdGlvbnNoaXAgd2l0aCB5b3UgaW4gdGhlIGZ1dHVyZS4gUnVudG9v

IFByZWNpc2lvbiBmb3VuZCBpbiAyMDEzLCBtYWpvcnMgaW4gbW9sZCBkZXNpZ24gYW5kIGluamVj

dGlvbiBzZXJ2aWNlIGZvciBvdmVyIDEwIHllYXJzLiBPdXIgcHJvZHVjdHMgZW5qb3kgZ3JlYXQg

cG9wdWxhcml0eSBhbW9uZyBFdXJvcGVhbiBhbmQgQW1lcmljYW4gbWFya2V0cy4NCldlIGNhbiBv

ZmZlciB5b3UgdGhlIGZvbGxvd2luZyBzZXJ2aWNlIGZvciB5b3UuDQouIE1vbGQgZGVzaWduIGFu

ZCBtb2xkIHByb2R1Y3Rpb24uDQouIEluamVjdGlvbiBzZXJ2aWNlLCBhc3NlbWJseSwgcHJpbnRp

bmcsIGFuZCBwYWNraW5nIHNlcnZpY2UuDQouIFJhcGlkIHByb3RvdHlwaW5nIG9yIDNEIHByaW50

aW5nIHNlcnZpY2UuDQouIEhhcmR3YXJlIHBhcnRzDQoNCklmIHlvdSBoYXZlIGFueSBwbGFzdGlj

IHBhcnQgbmVlZCB0byBjdXN0b21pemVkLCBjb3VsZCB5b3Ugb2ZmZXIgdXMgdGhlIDNEIGZpbGVz

IG9yIHNhbXBsZXMgeW91IGhhdmU/IFBsZWFzZSBkb24ndCBoZXNpdGF0ZSB0byBjb250YWN0IHVz

Lg0KTG9va2luZyBmb3J3YXJkIHRvIHlvdXIgZWFybHkgcmVwbHkgd2hpY2ggd2lsbCBiZSBoaWdo

bHkgYXBwcmVjaWF0ZWQuDQoNCg0KQmVzdCBSZWdhcmRzLA0KR3JhY2UNClNhbGVzIE1hbmFnZXIN

Cg0KDQpSdW50b28gUHJlY2lzaW9uIFRlY2hub2xvZ3kgQ28uLCBMdGQuICAgICAgICAgICAgICAg

ICAgICANCk1vYmlsZTogODYtMTM2MDMwMzc0NjkNClRlbDogICAgKzg2LTA3NTUtMjMxOTYxNjYN

CkVtYWlsOiBncmFjZUBydW50b29wcmVjaXNpb24uY29tICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICANCldlYjogIGh0dHA6Ly93d3cucnVu

dG9vcHJlY2lzaW9uLmNvbS8g



------=_NextPart_000_03B0_01EA93B4.11802610

Content-Type: text/html;

charset="gb2312"

Content-Transfer-Encoding: base64



PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMCBUcmFuc2l0aW9uYWwv

L0VOIj4NCjxIVE1MPjxIRUFEPg0KPE1FVEEgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PWdi

MjMxMiIgaHR0cC1lcXVpdj1Db250ZW50LVR5cGU+DQo8TUVUQSBuYW1lPUdFTkVSQVRPUiBjb250

ZW50PSJNU0hUTUwgMTEuMDAuMTA1NzAuMTAwMSI+PC9IRUFEPg0KPEJPRFk+DQo8RElWIA0Kc3R5

bGU9J0ZPTlQtU0laRTogMTRweDsgRk9OVC1GQU1JTFk6ICJNaWNyb3NvZnQgWWFIZWkgVUkiOyBX

SElURS1TUEFDRTogbm9ybWFsOyBXT1JELVNQQUNJTkc6IDBweDsgVEVYVC1UUkFOU0ZPUk06IG5v

bmU7IEZPTlQtV0VJR0hUOiA0MDA7IENPTE9SOiByZ2IoMCwwLDApOyBGT05ULVNUWUxFOiBub3Jt

YWw7IE9SUEhBTlM6IDI7IFdJRE9XUzogMjsgTEVUVEVSLVNQQUNJTkc6IG5vcm1hbDsgQkFDS0dS

T1VORC1DT0xPUjogcmdiKDI1NSwyNTUsMjU1KTsgVEVYVC1JTkRFTlQ6IDBweDsgZm9udC12YXJp

YW50LWxpZ2F0dXJlczogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyAtd2Via2l0

LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbi1zdHlsZTogaW5pdGlhbDsg

dGV4dC1kZWNvcmF0aW9uLWNvbG9yOiBpbml0aWFsOyB0ZXh0LWRlY29yYXRpb24tdGhpY2tuZXNz

OiBpbml0aWFsJz48U1BBTiANCnN0eWxlPSJGT05ULVNJWkU6IDE2cHgiPg0KPERJViANCnN0eWxl

PSJGT05ULVNJWkU6IDE0cHg7IEZPTlQtRkFNSUxZOiBBcmlhbDsgQ09MT1I6ICMwMDAwMDA7IExJ

TkUtSEVJR0hUOiAxLjciPg0KPFAgc3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9OVCBzaXplPTMgZmFj

ZT0iTWljcm9zb2Z0IFlhSGVpIFVJIj5IZWxsbyBEZWFyIA0KTWFuYWdlciw8L0ZPTlQ+PC9QPg0K

PFAgc3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9OVCBzaXplPTMgZmFjZT0iTWljcm9zb2Z0IFlhSGVp

IFVJIj48L0ZPTlQ+Jm5ic3A7PC9QPg0KPFAgc3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9OVCBzaXpl

PTMgZmFjZT0iTWljcm9zb2Z0IFlhSGVpIFVJIj5Ib3cgaXMgZXZlcnl0aGluZyANCmdvaW5nPzwv

Rk9OVD48L1A+DQo8UCBzdHlsZT0iTUFSR0lOOiAwcHgiPjxGT05UIHNpemU9MyBmYWNlPSJNaWNy

b3NvZnQgWWFIZWkgVUkiPjwvRk9OVD4mbmJzcDs8L1A+DQo8UCBzdHlsZT0iTUFSR0lOOiAwcHgi

PjxGT05UIHNpemU9MyBmYWNlPSJNaWNyb3NvZnQgWWFIZWkgVUkiPlRoaXMgaXMgR3JhY2UgZnJv

bSANClJ1bnRvbyBQcmVjaXNpb24gVGVjaG5vbG9neSBDby4sIEx0ZC4sIGxvY2F0ZWQgaW4gU2hl

bnpoZW4sIENoaW5hLjwvRk9OVD48L1A+DQo8UCBzdHlsZT0iTUFSR0lOOiAwcHgiPjxGT05UIHNp

emU9MyBmYWNlPSJNaWNyb3NvZnQgWWFIZWkgVUkiPkl0IHdpbGwgYmUgYSBncmVhdCANCmhvbm9y

IGlmIHdlIGNhbiBlc3RhYmxpc2ggYSByZWxhdGlvbnNoaXAgd2l0aCB5b3UgaW4gdGhlIGZ1dHVy

ZS4gUnVudG9vIA0KUHJlY2lzaW9uIGZvdW5kIGluIDIwMTMsIG1ham9ycyBpbiBtb2xkIGRlc2ln

biBhbmQgaW5qZWN0aW9uIHNlcnZpY2UgZm9yIG92ZXIgMTAgDQp5ZWFycy4gT3VyIHByb2R1Y3Rz

IGVuam95IGdyZWF0IHBvcHVsYXJpdHkgYW1vbmcgRXVyb3BlYW4gYW5kIEFtZXJpY2FuIA0KbWFy

a2V0cy48L0ZPTlQ+PC9QPg0KPFAgc3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9OVCBzaXplPTMgZmFj

ZT0iTWljcm9zb2Z0IFlhSGVpIFVJIj5XZSBjYW4gb2ZmZXIgeW91IA0KdGhlIGZvbGxvd2luZyBz

ZXJ2aWNlIGZvciB5b3UuPC9GT05UPjwvUD4NCjxQIHN0eWxlPSJNQVJHSU46IDBweCI+PEZPTlQg

c2l6ZT0zIGZhY2U9Ik1pY3Jvc29mdCBZYUhlaSBVSSI+LiZuYnNwO01vbGQgZGVzaWduIA0KYW5k

IG1vbGQgcHJvZHVjdGlvbi48L0ZPTlQ+PC9QPg0KPFAgc3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9O

VCBzaXplPTMgZmFjZT0iTWljcm9zb2Z0IFlhSGVpIFVJIj4uJm5ic3A7SW5qZWN0aW9uIA0Kc2Vy

dmljZSwgYXNzZW1ibHksIHByaW50aW5nLCBhbmQgcGFja2luZyBzZXJ2aWNlLjwvRk9OVD48L1A+

DQo8UCBzdHlsZT0iTUFSR0lOOiAwcHgiPjxGT05UIHNpemU9MyBmYWNlPSJNaWNyb3NvZnQgWWFI

ZWkgVUkiPi4mbmJzcDtSYXBpZCANCnByb3RvdHlwaW5nIG9yIDNEIHByaW50aW5nIHNlcnZpY2Uu

PC9GT05UPjwvUD4NCjxQIHN0eWxlPSJNQVJHSU46IDBweCI+PEZPTlQgc2l6ZT0zIGZhY2U9Ik1p

Y3Jvc29mdCBZYUhlaSBVSSI+LiZuYnNwO0hhcmR3YXJlIA0KcGFydHM8L0ZPTlQ+PC9QPg0KPFAg

c3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9OVCBzaXplPTMgZmFjZT0iTWljcm9zb2Z0IFlhSGVpIFVJ

Ij48L0ZPTlQ+Jm5ic3A7PC9QPg0KPFAgc3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9OVCBzaXplPTMg

ZmFjZT0iTWljcm9zb2Z0IFlhSGVpIFVJIj5JZiB5b3UgaGF2ZSBhbnkgDQpwbGFzdGljIHBhcnQg

bmVlZCB0byBjdXN0b21pemVkLCBjb3VsZCB5b3Ugb2ZmZXIgdXMgdGhlIDNEIGZpbGVzIG9yIHNh

bXBsZXMgeW91IA0KaGF2ZT8gUGxlYXNlIGRvbid0IGhlc2l0YXRlIHRvIGNvbnRhY3QgdXMuPC9G

T05UPjwvUD4NCjxQIHN0eWxlPSJNQVJHSU46IDBweCI+PEZPTlQgc2l6ZT0zIGZhY2U9Ik1pY3Jv

c29mdCBZYUhlaSBVSSI+TG9va2luZyBmb3J3YXJkIHRvIA0KeW91ciBlYXJseSByZXBseSB3aGlj

aCB3aWxsIGJlIGhpZ2hseSBhcHByZWNpYXRlZC48L0ZPTlQ+PC9QPg0KPFAgc3R5bGU9Ik1BUkdJ

TjogMHB4Ij48Rk9OVCBmYWNlPSJNaWNyb3NvZnQgWWFIZWkgVUkiPjxCUj48Rk9OVCANCnNpemU9

Mz48L0ZPTlQ+PC9GT05UPjwvUD4NCjxQIHN0eWxlPSJNQVJHSU46IDBweCI+PEZPTlQgc2l6ZT0z

IGZhY2U9Ik1pY3Jvc29mdCBZYUhlaSBVSSI+QmVzdCANClJlZ2FyZHMsPC9GT05UPjwvUD4NCjxQ

IHN0eWxlPSJNQVJHSU46IDBweCI+PEZPTlQgc2l6ZT0zIGZhY2U9Ik1pY3Jvc29mdCBZYUhlaSBV

SSI+R3JhY2U8L0ZPTlQ+PC9QPg0KPFAgc3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9OVCBzaXplPTMg

ZmFjZT0iTWljcm9zb2Z0IFlhSGVpIFVJIj5TYWxlcyANCk1hbmFnZXI8L0ZPTlQ+PC9QPg0KPFAg

c3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9OVCBmYWNlPSJNaWNyb3NvZnQgWWFIZWkgVUkiPjxCUj48

Rk9OVCANCnNpemU9Mz48L0ZPTlQ+PC9GT05UPjwvUD4NCjxQIHN0eWxlPSJNQVJHSU46IDBweCI+

PEZPTlQgc2l6ZT0zIGZhY2U9Ik1pY3Jvc29mdCBZYUhlaSBVSSI+UnVudG9vIFByZWNpc2lvbiAN

ClRlY2hub2xvZ3kgQ28uLCBMdGQuJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm

bmJzcDsgJm5ic3A7ICZuYnNwOyANCiZuYnNwOyAmbmJzcDsmbmJzcDs8L0ZPTlQ+PC9QPg0KPFAg

c3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9OVCBzaXplPTMgZmFjZT0iTWljcm9zb2Z0IFlhSGVpIFVJ

Ij5Nb2JpbGU6IA0KODYtMTM2MDMwMzc0Njk8L0ZPTlQ+PC9QPg0KPFAgc3R5bGU9Ik1BUkdJTjog

MHB4Ij48Rk9OVCBzaXplPTMgZmFjZT0iTWljcm9zb2Z0IFlhSGVpIFVJIj5UZWw6Jm5ic3A7ICZu

YnNwOyANCis4Ni0wNzU1LTIzMTk2MTY2PC9GT05UPjwvUD4NCjxQIHN0eWxlPSJNQVJHSU46IDBw

eCI+PEZPTlQgc2l6ZT0zIGZhY2U9Ik1pY3Jvc29mdCBZYUhlaSBVSSI+RW1haWw6IA0KZ3JhY2VA

cnVudG9vcHJlY2lzaW9uLmNvbSZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i

c3A7ICZuYnNwOyAmbmJzcDsgDQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu

YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IA0KJm5ic3A7ICZuYnNwOyAm

bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IA0K

Jm5ic3A7PC9GT05UPjwvUD4NCjxQIHN0eWxlPSJNQVJHSU46IDBweCI+PEZPTlQgc2l6ZT0zIGZh

Y2U9Ik1pY3Jvc29mdCBZYUhlaSBVSSI+V2ViOiZuYnNwOyANCjwvRk9OVD48QSBocmVmPSJodHRw

Oi8vd3d3LnJ1bnRvb3ByZWNpc2lvbi5jb20vIiANCl9zcmM9Imh0dHA6Ly93d3cucnVudG9vcHJl

Y2lzaW9uLmNvbS8iPjxGT05UIHNpemU9MyANCmZhY2U9Ik1pY3Jvc29mdCBZYUhlaSBVSSI+aHR0

cDovL3d3dy5ydW50b29wcmVjaXNpb24uY29tLzwvRk9OVD48L0E+PEZPTlQgDQpmYWNlPSJNaWNy

b3NvZnQgWWFIZWkgVUkiPiA8L0ZPTlQ+PC9QPjwvRElWPjwvU1BBTj48L0RJVj48L0JPRFk+PC9I

VE1MPg0K



------=_NextPart_000_03B0_01EA93B4.11802610--

Beneficiary spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 07 Sep 2024 16:16:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sn3iE-00000000KX4-07wh

for dave@doctor.nl2k.ab.ca;

Sat, 07 Sep 2024 16:15:22 -0600

Resent-From: The Doctor

Resent-Date: Sat, 7 Sep 2024 16:15:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f174.google.com ([209.85.222.174]:41325)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sn2UH-00000000NXz-0CR8

for bin@nl2k.ab.ca;

Sat, 07 Sep 2024 14:56:58 -0600

Received: by mail-qk1-f174.google.com with SMTP id af79cd13be357-7a9a66be37bso1683685a.1

for ; Sat, 07 Sep 2024 13:54:58 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1725742492; x=1726347292; darn=nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=X8jqmT15dfpNUyyV+GQDZ68YaW3+BJLCFLNvuQoZfXE=;

b=KBEJclyNPWI4t3iVEd9Lz09455pbkO1p4hpE52oCNKKVMbxhlzZtcCMOZZAfFrNPlS

CDoNTi93/1wURClpH9mu9K8/RgmJy0V1k2kkuaiASaPA8jWydP1ijWg8qzz1pCTwSMAr

EPkllZtlq7lpRewaDwOf6JTGtSXtzf7PkDIaKRD3i+mhhuwXcakjl526ViIQ+F7LpQtE

JlZbXfbFLSIcvIoTpXh+4qqVDCR4uPq0WW7YoJT4cjYKdm57/uHIcmtilcDJlPWta4d8

TUsPKo1PkeLn++zw3vzwXqMBH8hsal5k0zkHz++X+Q+i00FsuTrza8cZFlHnlwNdxcnw

9ArQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1725742492; x=1726347292;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=X8jqmT15dfpNUyyV+GQDZ68YaW3+BJLCFLNvuQoZfXE=;

b=SrndHFLE/vfy31sF+6jnfnrRAC6L27RX093OMuBAL0qlaqfPoit8NJfiAcIKzwvgoq

2r/9KnPXWMnADo3nxh2nRrYUd8pLI9qlRrpo92TQRt9TyAFlUZbQ+55U6CaeXT49BZIL

is/+xyoXBapC8i6KO08N61b+/2BbUBa9sTniNeATWCHmvheuzW2GOek1LfhUaDM+gnf3

e9DACSrF7o5JGebY1rz2FTJBeApyVRhsXXX0M4mPRCMTbe9iGM93GtZSqZGd8qMk1hMB

omAlRlRGNoBpUdq10Fvccoyhp7IGUnXTOfay2OIFJTid9tNKErcWOqKr+LPMF2q1r71t

yKrw==

X-Forwarded-Encrypted: i=1; AJvYcCUNfXXk2XK1aFGAtZC3CQlB8JafabXGohbtYZg/zeNmi722UvOnTzGJJE3DDNmSMnQnCHk=@nl2k.ab.ca

X-Gm-Message-State: AOJu0YzXdfB0lSXY+t1J9Emm8q+W9WenWvfxuswB/+nPE/QbFmCyyvpS

iA/jTPQe9CqWWW+t9pRiyHeGUfnDAC+Nw87qICeZYj4umst/ypOk/rEoN8N8yq+7wuvYVvO2VDr

9sU84UhgcnLwmPXCxtrOhMnTu+UY=

X-Google-Smtp-Source: AGHT+IE+pEiOta9EHqK8qC4ALEcxqnDx1J7mczGNXBNyfxP5GlcX2fF48PjCHiAse5Du5mVXPNxYXkDU2q6ksEjn4qk=

X-Received: by 2002:a05:620a:1a16:b0:7a9:8794:a1c2 with SMTP id

af79cd13be357-7a9973369afmr353145985a.4.1725742492306; Sat, 07 Sep 2024

13:54:52 -0700 (PDT)

MIME-Version: 1.0

Reply-To: fbiheadofficegov1@gmail.com

From: FBI HEADQUARTERS

Date: Sat, 7 Sep 2024 13:54:44 -0700

Message-ID:

Subject: Dear Beneficiary

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000003a53cc06218dbca1"

Bcc: bin@nl2k.ab.ca

X-Spam_score: 19.2

X-Spam_score_int: 192

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: FBI.gov is an official site of the U.S. Federal Government,

U.S. Department of Justice. Dear Beneficiary, This is the Federal Bureau

Of Investigation (FBI) using this medium to inform you that there is no more

time left to waste because you have been given Since January till this moment

and you have faile [...]



Content analysis details: (19.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.222.174 listed in will-spam-for-food.eu.org]

[209.85.222.174 listed in will-spam-for-food.eu.org]

[209.85.222.174 listed in will-spam-for-food.eu.org]

[209.85.222.174 listed in will-spam-for-food.eu.org]

[209.85.222.174 listed in will-spam-for-food.eu.org]

[209.85.222.174 listed in will-spam-for-food.eu.org]

[209.85.222.174 listed in will-spam-for-food.eu.org]

[209.85.222.174 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.174 listed in dnsbl.ahbl.org]

[209.85.222.174 listed in dnsbl.ahbl.org]

[209.85.222.174 listed in dnsbl.ahbl.org]

[209.85.222.174 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.174 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.174 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.174 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.174 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.174 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.174 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ndicoffceng(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[fbiheadofficegov1(at)gmail.com]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 XFER_LOTSA_MONEY Transfer a lot of money

1.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Dear Beneficiary



--0000000000003a53cc06218dbca1

Content-Type: text/plain; charset="UTF-8"



FBI.gov is an official site of the U.S. Federal Government, U.S.

Department of Justice.



Dear Beneficiary,



This is the Federal Bureau Of Investigation (FBI) using this medium to

inform you that there is no more time left to waste because you have

been given Since January till this moment and you have failed to

secure the required Wire Transfer Documents from Office of the

Presidency as stated earlier and you must adhere to this directives to

avoid you blaming yourself at last when we must have arrested and

jailed you and all your properties confiscated.



You failed to comply with our directives to secure the Wire Transfer

Document from Office of the Presidency and that was the reason why we

didn't hear from you on the 13th of march as promised and our Executive

Director Mr. Christopher A. Wray , has already been notified about

this situation report and to get the process completed you have to

secure the Wire Transfer Documents from Office of the Presidency

immediately with the help of Mr. Paul Glenn or the warrant of arrest

which has been signed against you will be carried out in the next

72hours as strictly signed by the FBI Executive Director Mr.

Christopher A. Wray ,.



As a good Christian and a honest man, I have decided to see how I

could be of help to you because I would not be happy to see you end up

in jail and all your properties confiscated, I called Mr. Paul Glenn

of the Office of the Presidency who will help you secure the Wire

Transfer Documents and he stated that he will assist you as soon as

you send to him the sum of US$95.00 Only and I believe this process is

cheaper for you.



You need to do everything possible within today and tomorrow to send

the US$95.00 to Paul Glenn who will help you secure the Wire

Transfer Documents in your name because our Executive Director Mr.

Christopher A. Wray , has called to inform me that the warrant of

arrest has been signed against you and once it has been approved, then

the arrest will be carried out and from our investigations we learnt

that you were the person that forwarded your identity to one

impostor/fraudsters in Benin Republic when he had a deal with you

about the transfer of some illegal funds into your Bank Account which

is valued at the sum of US$20,700,000.00.



I pleaded with the FBI Executive Director Mr. Christopher A. Wray , on

your behalf so that this agency could give you 72 hours so that you

can secure the Wire Transfer Documents with the help of Mr. Paul Glenn

as soon as you send the sum of US$95.00 to him as this is the only

way that I can be able to help you at this moment or you would have to

face the law and its consequences once it has befall you.







Note: all the crime agencies have been contacted in this regard and

we shall trace and arrest you if you disregard these instructions. You

have been given 72 hours to make the payment so that Mr.Paul Glenn

will help you secure the Wire Transfer Documents and if you fail, you

will be arrested and tried in the court for Terrorism, Money

Laundering and Drug Trafficking Charges, so be warned not to try any

thing funny because you are being watched.



Thanks for your cooperation.



Yours Faithfully.



For the FBI Office

Mr. Paul M. Abbate

Associate Deputy Director



--0000000000003a53cc06218dbca1

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



=C2=A0 FBI.gov is an official site of the U.S. Federal Gov=

ernment, U.S.
Department of Justice.

Dear Beneficiary,

Thi=

s is the Federal Bureau Of Investigation (FBI) using this medium to
info=

rm you that there is no more time left to waste because you have
been gi=

ven Since January =C2=A0till this moment and you have failed to
secure t=

he required Wire Transfer Documents from Office of the
Presidency as sta=

ted earlier and you must adhere to this directives to
avoid you blaming =

yourself at last when we must have arrested and
jailed you and all your =

properties confiscated.

You failed to comply with our directives to =

secure the Wire Transfer
Document from Office of the Presidency and that=

was the reason why we
didn't hear from you on the 13th of march as =

promised and our Executive
Director Mr. Christopher A. Wray , has alread=

y been notified about
this situation report and to get the process compl=

eted you have to
secure the Wire Transfer Documents from Office of the P=

residency
immediately with the help of Mr. Paul Glenn =C2=A0or the warra=

nt of arrest
which has been signed against you will be carried out in th=

e next
72hours as strictly signed by the FBI Executive Director Mr.
C=

hristopher A. Wray ,.

As a good Christian and a honest man, I have d=

ecided to see how I
could be of help to you because I would not be happy=

to see you end up
in jail and all your properties confiscated, I called=

Mr. Paul Glenn
of the Office of the Presidency who will help you secure=

the Wire
Transfer Documents and he stated that he will assist you as so=

on as
you send to him the sum of US$95.00 Only and I believe this proces=

s is
cheaper for you.

You need to do everything possible within t=

oday and tomorrow to send
the US$95.00 to =C2=A0 Paul Glenn =C2=A0who wi=

ll help you secure the Wire
Transfer Documents in your name because our =

Executive Director Mr.
Christopher A. Wray , has called to inform me tha=

t the warrant of
arrest has been signed against you and once it has been=

approved, then
the arrest will be carried out and from our investigatio=

ns we learnt
that you were the person that forwarded your identity to on=

e
impostor/fraudsters in Benin Republic when he had a deal with you
a=

bout the transfer of some illegal funds into your Bank Account which
is =

valued at the sum of US$20,700,000.00.

I pleaded with the FBI Execut=

ive Director Mr. Christopher A. Wray , on
your behalf so that this agenc=

y could give you 72 hours so that you
can secure the Wire Transfer Docum=

ents with the help of Mr. Paul Glenn
=C2=A0as soon as you send the sum o=

f US$95.00 to him as this is the only
way that I can be able to help you=

at this moment or you would have to
face the law and its consequences o=

nce it has befall you.



Note: all the crime agencies have bee=

n contacted in this regard and
we shall trace and arrest you if you disr=

egard these instructions. You
have been given 72 hours to make the payme=

nt so that Mr.Paul Glenn
will help you secure the Wire Transfer Document=

s and if you fail, you
will be arrested and tried in the court for Terro=

rism, Money
Laundering and Drug Trafficking Charges, so be warned not to=

try any
thing funny because you are being watched.

Thanks for yo=

ur cooperation.

Yours Faithfully.

For the FBI Office
Mr. P=

aul M. Abbate
Associate Deputy Director




--0000000000003a53cc06218dbca1--

Slavic language spam from Google gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 07 Sep 2024 13:09:00 -0600

Received: from mail-ed1-f66.google.com ([209.85.208.66]:57505)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sn0mr-00000000Jym-0WBI

for dave@doctor.nl2k.ab.ca;

Sat, 07 Sep 2024 13:08:01 -0600

Received: by mail-ed1-f66.google.com with SMTP id 4fb4d7f45d1cf-5c3c34e3c39so4540839a12.2

for ; Sat, 07 Sep 2024 12:06:04 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1725735958; x=1726340758; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=K497KJVoirIplacgkzWBWT1yk1Tq/Rs7ayMnHQzAjP0=;

b=nrv66gjdpIuaP5gXxd7qsYQl+7vy7fwZrMuUB1fZpK/UZAnuzDzJ3YElpvNHKonqXK

1pBtaK0e93avxCgLar6pY7E/gmtcTHDMP0uVuHoRU4mJkZOi28NxgfhZkQO8bmfmEz9s

YfZrJM0fviY/KSfQVkghwX07DWghfh2jHAzhpZr0xh6ZDcyCBEHwzj2hgJBCoisXijGn

+TOIueZeBCOgVT91Ctt8atQZ3x+XG0uPBn577PL1hjgudRyGZb/2JNketPacf6sU46/x

pJWyuiWt+jn1jZLTmI9ZOET3xSP0HfTvaDfAfeAN1qrN0wMLNU5/B/iPitqEos9AJAbd

t1rA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1725735958; x=1726340758;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=K497KJVoirIplacgkzWBWT1yk1Tq/Rs7ayMnHQzAjP0=;

b=WcMVClrcDYFKFiMghulWqZJhPWZNBUSg6Plk1IwlYdv6mk5WinOXd7hi4fibEA202l

wzn/S2Ys8K27tQ8BMtDuwTEFWxo5trUWVHLJ25jcFz8hqtf1uTejJV2kTmAU87DDa5gd

Rf3o7AtOu3OnEAV9gzMAhDyUPwzPInX/C5kSjScSAeWyHuI5xn2/8W1GwWnxEVfcvufg

OikZqpikjppY10seL5eslHKCojVjLoyCFfma94hw9fe+8YkIh0kOF9A8jsDXthzxjVaT

4gsgI85eP7hjIM+mMv98B7MBJ7RjLPnAhW7bXxjX8kOPRfMbgUv5z75r1L2fFRgU5O+A

U2Bg==

X-Forwarded-Encrypted: i=1; AJvYcCWFwR/62v5xta9jyNsynAjBXwlfN1Jt7O3bTMzUBeX6MeBnywAHBAoigTYHOZasO+h3ruLo@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YwJAVw0UfGREjVQCSQrvfNpc19rWDdWBy1XG1vcuw5pNTIp2B6C

T7HqauQchEB4c3HyJmvNYBl7jyKocELi3u7D3Ho3MC4Gc6+F9cV4lvEFRL3tXX+8MjF/0bWfaJ9

H4QW82Yrdzd0cXXfQ1vQNkG58mq8=

X-Google-Smtp-Source: AGHT+IH4uW4tNic2+D0rM3THDQEgosBoDfQ8y1QL+1h+e8ZnnzR7b/X+EjrVMXFgPDOhxgu2Otlyw7cDRbtLk4wlVsI=

X-Received: by 2002:a05:6402:254e:b0:5be:d7d8:49ad with SMTP id

4fb4d7f45d1cf-5c3dc7bb534mr4862065a12.22.1725735957371; Sat, 07 Sep 2024

12:05:57 -0700 (PDT)

MIME-Version: 1.0

Reply-To: revjamese95@gmail.com

From: Mark E John

Date: Sat, 7 Sep 2024 20:05:43 +0100

Message-ID:

Subject: =?UTF-8?B?VmHFoWUga29tcGVuemHEjW7DrSBwbGF0YmEgamUgc2NodsOhbGVuYSE=?=

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000b72ba706218c36a8"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 9.2

X-Spam_score_int: 92

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Vaše kompenzační platba je schválena! Rád bych vás informoval,

že vaše celková platba je 2,5 milionu USD schválené centrální bankou

prostřednictvím bankomatové karty Visa, který vám umožní vybrat všechny

peníze z libovol [...]



Content analysis details: (9.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.208.66 listed in will-spam-for-food.eu.org]

[209.85.208.66 listed in will-spam-for-food.eu.org]

[209.85.208.66 listed in will-spam-for-food.eu.org]

[209.85.208.66 listed in will-spam-for-food.eu.org]

[209.85.208.66 listed in will-spam-for-food.eu.org]

[209.85.208.66 listed in will-spam-for-food.eu.org]

[209.85.208.66 listed in will-spam-for-food.eu.org]

[209.85.208.66 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.66 listed in dnsbl.ahbl.org]

[209.85.208.66 listed in dnsbl.ahbl.org]

[209.85.208.66 listed in dnsbl.ahbl.org]

[209.85.208.66 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.66 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.66 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.66 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.66 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[mrsmaureenuk1(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mrsmaureenuk1(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[revjamese95(at)gmail.com]

0.1 TW_JS BODY: Odd Letter Triples with JS

0.1 TW_EJ BODY: Odd Letter Triples with EJ

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

1.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to

Subject: {SPAM?} =?UTF-8?B?VmHFoWUga29tcGVuemHEjW7DrSBwbGF0YmEgamUgc2NodsOhbGVuYSE=?=



--000000000000b72ba706218c36a8

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Va=C5=A1e kompenza=C4=8Dn=C3=AD platba je schv=C3=A1lena!



R=C3=A1d bych v=C3=A1s informoval, =C5=BEe va=C5=A1e celkov=C3=A1 platba je=

2,5 milionu USD

schv=C3=A1len=C3=A9 centr=C3=A1ln=C3=AD bankou prost=C5=99ednictv=C3=ADm ba=

nkomatov=C3=A9 karty Visa, kter=C3=BD

v=C3=A1m umo=C5=BEn=C3=AD vybrat v=C5=A1echny pen=C3=ADze z libovoln=C3=A9h=

o Bankomat kdekoli na sv=C4=9Bt=C4=9B,

pov=C4=9B=C5=99ili jsme United Bank U B A, zasl=C3=A1n=C3=AD m=C3=A1te bank=

omat a PIN KARTU,

kontaktujte pros=C3=ADm reverenda Jamese Edwardse na adrese revjamese95@gma=

il.com.

Dejte mu v=C4=9Bd=C4=9Bt, =C5=BEe jste obdr=C5=BEeli tuto zpr=C3=A1vu z kan=

cel=C3=A1=C5=99e pana Marka E.

Johna.



D=C4=9Bkujeme, =C5=BEe jste dodr=C5=BEeli tento pokyn a je=C5=A1t=C4=9B jed=

nou v=C3=A1=C5=A1 Gratulujeme.



Pan Mark E John

Pro v=C3=A1=C5=A1 kompenza=C4=8Dn=C3=AD fond.



--000000000000b72ba706218c36a8

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Va=C5=A1e kompenza=C4=8Dn=C3=AD platba je schv=C3=A1lena!<=

br>
R=C3=A1d bych v=C3=A1s informoval, =C5=BEe va=C5=A1e celkov=C3=A1 pl=

atba je 2,5 milionu USD schv=C3=A1len=C3=A9 centr=C3=A1ln=C3=AD bankou pros=

t=C5=99ednictv=C3=ADm bankomatov=C3=A9 karty Visa, kter=C3=BD v=C3=A1m umo=

=C5=BEn=C3=AD vybrat v=C5=A1echny pen=C3=ADze z libovoln=C3=A9ho Bankomat k=

dekoli na sv=C4=9Bt=C4=9B, pov=C4=9B=C5=99ili jsme United Bank U B A, zasl=

=C3=A1n=C3=AD m=C3=A1te bankomat a PIN KARTU, kontaktujte pros=C3=ADm rever=

enda Jamese Edwardse na adrese rev=

jamese95@gmail.com
. Dejte mu v=C4=9Bd=C4=9Bt, =C5=BEe jste obdr=C5=BEel=

i tuto zpr=C3=A1vu z kancel=C3=A1=C5=99e pana Marka E. Johna.

D=C4=

=9Bkujeme, =C5=BEe jste dodr=C5=BEeli tento pokyn a je=C5=A1t=C4=9B jednou =

v=C3=A1=C5=A1 Gratulujeme.

Pan Mark E John
Pro v=C3=A1=C5=A1 komp=

enza=C4=8Dn=C3=AD fond.=C2=A0=C2=A0




--000000000000b72ba706218c36a8--

Desperation spam from google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 07 Sep 2024 03:08:00 -0600

Received: from mail-vk1-f178.google.com ([209.85.221.178]:51466)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1smrQ8-00000000EdL-0e6G

for dave@doctor.nl2k.ab.ca;

Sat, 07 Sep 2024 03:07:55 -0600

Received: by mail-vk1-f178.google.com with SMTP id 71dfb90a1353d-501192e8e12so671671e0c.3

for ; Sat, 07 Sep 2024 02:06:01 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1725699955; x=1726304755; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=VFakifYo/Lf1d/3pRMFmt4vmA18d8a+AatcGG0OtvMU=;

b=Z0LVtS6gxsYdLfOuiaxQkS7CKQB0TPVvkHfu+yXxAJXgLAHmJUn8VMcMGqONM7cnze

Qf/fYpjF5lme1dCVEvCqknlEMiiqKdNPBBf6uiDvlzdmSinz/DUphe5Ei9wWjRjT4Szh

TnrsssSJlQVmy4bW2XA4WiCWWGksWf87+jr8J4FlaRQ1PnYDxHjk6GVR3P6sdYCxJ1+B

BSGOpLWau5KQz722qHgjscgNCdDJzBB4EsYtJzdcPalzTU9zT9NgYem3rh6vep3LrVD8

Nw38RgEIaz5v7F1PbbkXqj/jWDcTixUmC3he9LodYCX9sPbjrD2lYgrQ9ujx28ZnkPlf

/P0g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1725699955; x=1726304755;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=VFakifYo/Lf1d/3pRMFmt4vmA18d8a+AatcGG0OtvMU=;

b=i/doahcfrdxEQ7CePgWtRl6oS3/W9+XSA5p2orV8aRT8DIo5T2fF/CkHyaGP8Jd4IR

w6A8Myb/xGq7DG5gtIR+CTp6rsb7MAQeyZ2MV2IDi7UHraRJXqC4albhlm2dANmSWxgj

1i0GZSNKmW4tls61cRqO+2wIXiordLLrh4IaR39u5+/r0aletse3XCMa5XleNz7IwkoA

E2wJbJlN4VQRqIzW6sSaIrLMuIiLcEUbJm7NVNjirXanJWbw7++7EwDqHAFlfBOCqPeI

Pj/GCwYyRtn8wsa4CNN9hGD/V7DSkaKKr8rZDcT9ND9Zhm4mbUayLCJRtayYnusRBXt8

eyCw==

X-Forwarded-Encrypted: i=1; AJvYcCUfF7ODN2OPQTJ7VEiA+/g/WS3S9TKsZbv71K6A3p+jCUQRNzm7UGS7lMyCHdHFJG2CjqyE@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YxuYaPneSiI2ncl/HwgMEJKJfp4HwwkGIX7xi9YvoG2NVKLtOjB

hgG8RPT81/rCz7gqHAxqnrjAiyncLGLJC+jVTMLiovEEKtcKQfpUS2rfkbnKX44i+IduTumWseZ

BPiGmux5YFSzVyt8DvxN8XWC9Kjw=

X-Google-Smtp-Source: AGHT+IEfXZwabpunNaIho6aq6l6KU3P342RaffuyWn+EEboFdAXvU1QS5gHZOEyfL0TPlxPK558N5uufrr/gaosvles=

X-Received: by 2002:a05:6122:31a7:b0:501:2851:b3bb with SMTP id

71dfb90a1353d-50207af2811mr6011347e0c.1.1725699955365; Sat, 07 Sep 2024

02:05:55 -0700 (PDT)

MIME-Version: 1.0

From: Aniko Tary

Date: Sat, 7 Sep 2024 09:05:43 +0000

Message-ID:

Subject: Greetings!!

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000d41d13062183d46e"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 6.1

X-Spam_score_int: 61

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings!! Can I talk to you? Regards, Aniko Tary. Greetings!!

Can I talk to you? Regards, Aniko Tary.



Content analysis details: (6.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.178 listed in will-spam-for-food.eu.org]

[209.85.221.178 listed in will-spam-for-food.eu.org]

[209.85.221.178 listed in will-spam-for-food.eu.org]

[209.85.221.178 listed in will-spam-for-food.eu.org]

[209.85.221.178 listed in will-spam-for-food.eu.org]

[209.85.221.178 listed in will-spam-for-food.eu.org]

[209.85.221.178 listed in will-spam-for-food.eu.org]

[209.85.221.178 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.221.178 listed in dnsbl.ahbl.org]

[209.85.221.178 listed in dnsbl.ahbl.org]

[209.85.221.178 listed in dnsbl.ahbl.org]

[209.85.221.178 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.221.178 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.221.178 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.221.178 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.221.178 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.221.178 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.178 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[a45476301(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

Subject: {SPAM?} Greetings!!



--000000000000d41d13062183d46e

Content-Type: text/plain; charset="UTF-8"



Greetings!!

Can I talk to you?

Regards,

Aniko Tary.



--000000000000d41d13062183d46e

Content-Type: text/html; charset="UTF-8"



Greetings!!
Can I talk to you?
Regards,
Aniko Tary.




--000000000000d41d13062183d46e--

Web / SEO/ App spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Sep 2024 07:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1smZKY-00000000BDE-310S

for dave@doctor.nl2k.ab.ca;

Fri, 06 Sep 2024 07:48:54 -0600

Resent-From: The Doctor

Resent-Date: Fri, 6 Sep 2024 07:48:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f49.google.com ([209.85.161.49]:44280)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1smW8u-00000000PbW-0Fnv

for root@nk.ca;

Fri, 06 Sep 2024 04:24:44 -0600

Received: by mail-oo1-f49.google.com with SMTP id 006d021491bc7-5dfad5a9c21so1153431eaf.0

for ; Fri, 06 Sep 2024 03:22:43 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1725618157; x=1726222957; darn=nk.ca;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=nEGpK2cuVQjU9x0xheD6x/d8Ihl8ZeuERvn2aW/ciwI=;

b=BJI1EaEkdx1e7YfBT14S26tRGLaUuN7fIdjxMJHVDzUXc0uw3EnbnwiXlbSLVwdsJV

GnI+dyWGGPloCui50wEGBNVR9Vn9ZrYpCNDav1dC+WDpet55TaUTylZI3q2iA/ccazhh

OxeZeaLWB30QhkUKEzfEQOIETIXbVrKXlvnzM2PUhmOJosC8r3e73NSqSgNkiZBuuxEf

smcgGKscnFdNZBoK3wpfy8Vb4OnFy3FXedpTglWa1+DxkVLAle93O4C0h1x2eLbExt47

0fOC7VUjjQMvW5LNI6NL61mhtT1lckfen7LOqCyNcclon4gADXOnIAU0kXsUT42EAjcj

ZkEg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1725618157; x=1726222957;

h=to:subject:message-id:date:from:sender:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=nEGpK2cuVQjU9x0xheD6x/d8Ihl8ZeuERvn2aW/ciwI=;

b=ZkwJsvP1hFn+orGDSlBUwJ6fmDV57fa7fxEbyXr+rJpz7nZo8uWIhZi1bm2Y9Fvna1

54H6l8lM4KsTLOIq18vrnbWAV/G19Ix/Js4l9TfKXMIpIXLzjuYNcmo0r0Ca8T4w+yLX

wJiClNn8xsugHQQ7wq7Y6uo+jytQtl3lvQwvCegOxEPc73HD1bAXGId9ZI+cNwGBe2Ti

y2zUy4KceE6Ki+GdFz5USsHFlNa3JysEVvSckbJ7r2KN/9JczrYzNUiYpgPLFy8GDgdI

3JWPgptJkxeJTPzxVMRl32Ce48GO1z0o1jZfLwooQo8hfEC1L8UBWjWV1D6BUldoE7Cm

wKmA==

X-Gm-Message-State: AOJu0YxOoZKn4ySPtxPAqusMsPn1Aqxf2I5i+1NvtHkiU0JfgQMuwd/R

UpiuGV8R32bUk1FjxHI0ECnebEIrJLynMfgt6ZD1ymUgDWJosIcUxQ88GbReADIerjPtLsXuk46

hWFRHP3tTjAtuyzjeIA1jegSx2yI/Fw==

X-Google-Smtp-Source: AGHT+IEp+OAZP/wWS0N6jg8h4TEcSweBFvBibQemLaaHcLpATIR9E1USmla74tHMHnxbYWymW1s50FoqqJ5giKQFEI0=

X-Received: by 2002:a05:6820:2214:b0:5d8:f3f:b1f7 with SMTP id

006d021491bc7-5e1a9d1d887mr2117201eaf.6.1725618157399; Fri, 06 Sep 2024

03:22:37 -0700 (PDT)

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Fri, 6 Sep 2024 05:22:37 -0500

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Fri, 6 Sep 2024 05:22:34 -0500

MIME-Version: 1.0

Sender: Raju

From: Raju

Date: Fri, 6 Sep 2024 05:22:37 -0500

X-Google-Sender-Auth: VHLCeC25gvjCGWFPYlHgow-2IwE

Message-ID:

Subject: Re: Low Cost - App Development

To: Root

Content-Type: multipart/alternative; boundary="0000000000004a37ce062170c9ab"

X-Spam_score: 5.7

X-Spam_score_int: 57

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I can create low-cost Mobile Apps for your business/website

on iOS and Android platforms. *Example Apps:*- E-commerce shopping apps,

Lawn care apps, Catering Apps, Online food ordering apps, Yoga, Fitness apps,

E-education apps, Spa Salon apps, Makeup, and beauty apps, Taxi Booking apps,

F [...]



Content analysis details: (5.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.161.49 listed in will-spam-for-food.eu.org]

[209.85.161.49 listed in will-spam-for-food.eu.org]

[209.85.161.49 listed in will-spam-for-food.eu.org]

[209.85.161.49 listed in will-spam-for-food.eu.org]

[209.85.161.49 listed in will-spam-for-food.eu.org]

[209.85.161.49 listed in will-spam-for-food.eu.org]

[209.85.161.49 listed in will-spam-for-food.eu.org]

[209.85.161.49 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.49 listed in dnsbl.ahbl.org]

[209.85.161.49 listed in dnsbl.ahbl.org]

[209.85.161.49 listed in dnsbl.ahbl.org]

[209.85.161.49 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.49 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.49 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.49 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.49 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.49 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[rajurajaw705(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[rajurajaw705(at)gmail.com]

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

-0.0 T_SCC_BODY_TEXT_LINE No description available.

Subject: {SPAM?} Re: Low Cost - App Development



--0000000000004a37ce062170c9ab

Content-Type: text/plain; charset="UTF-8"



Hi,



I can create low-cost Mobile Apps for your business/website on iOS and

Android platforms.



*Example Apps:*- E-commerce shopping apps, Lawn care apps, Catering Apps,

Online food ordering apps, Yoga, Fitness apps, E-education apps, Spa Salon

apps, Makeup, and beauty apps, Taxi Booking apps, Financial apps, Field

Operations apps, the list is not endless...



Let us know what kind of app you are looking to build. Or send me a

reference app.



I will be able to help you faster if you can provide as much information as

possible.



Regards,



Raju

[image: beacon]



--0000000000004a37ce062170c9ab

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




eight:115%;font-size:11pt;font-family:Calibri,sans-serif">
GB">Hi,






ize:11pt;font-family:Calibri,sans-serif">I can create =

low-cost Mobile Apps for your

business/website on iOS and Android platforms.






ize:11pt;font-family:Calibri,sans-serif">Example

Apps:
- E-commerce shopping apps, Lawn care =

apps,

Catering Apps, Online food ordering apps, Yoga, Fitness apps, E-education a=

pps,

Spa Salon apps, Makeup, and beauty apps, Taxi Booking apps, Financial apps,

Field Operations apps, the list is not endless...






ize:11pt;font-family:Calibri,sans-serif">
r:red;background:yellow">Let us know what kind of app you are looking to bu=

ild. Or

send me a reference app.

span>






ize:11pt;font-family:Calibri,sans-serif">I will be abl=

e to help you faster if you

can provide as much information as possible.






ize:11pt;font-family:Calibri,sans-serif">Regards,
n>






ize:11pt;font-family:Calibri,sans-serif">Raju
p>




M3bFp8-bDC_9V3-ZSE3urSrsW2aBSRbdvGkQHPgF1nebpSuNWuGr2EITlCZn-6TZjdddsq3IyX6=

yfR7NUAFJLWxzQ8wIuHlPziKAxIax0mtTHVQKYUvveD61xuUxjAKJ1AhlbKcOLb05Av_sU" wid=

th=3D"1" height=3D"1" alt=3D"beacon" style=3D"display:none; display:none!im=

portant;">



--0000000000004a37ce062170c9ab--

Instagram followers spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 05 Sep 2024 14:06:49 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1smIkN-000000008gC-1mB5

for dave@doctor.nl2k.ab.ca;

Thu, 05 Sep 2024 14:06:27 -0600

Resent-From: The Doctor

Resent-Date: Thu, 5 Sep 2024 14:06:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f69.google.com ([209.85.216.69]:51680)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1smEoQ-0000000037e-3b7t

for sales@nk.ca;

Thu, 05 Sep 2024 09:54:26 -0600

Received: by mail-pj1-f69.google.com with SMTP id 98e67ed59e1d1-2d877d7f9b4so1479103a91.3

for ; Thu, 05 Sep 2024 08:52:22 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1725551537; x=1726156337; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=2Bqfna8CgUSS5Mwb8vM71IwZTF90S7xGDXcW6eGTdiI=;

b=DaYNY2YFJrMc5UoObX6spNTSDJfqj9JvsoEMjLWaPUdkMQ5h3BIpRRp2+kXcUCboUy

VlLuYSSp8OsxcSkgVq4E+STLgM0wxzReWRVzaQk8LAlOL8fLgQvw+fPYW+RF26yQyPGo

kay58i97WkbRYRDjyu5HO8aT/LztEKgi85eVxspYlyRxCWadPGXDe++SpmdyGqBKXOuN

b2WFVUaHkkgpUf4nn2SIK/eNc2Z96jdi42efMSvIzZmZ3JiMaxff8jKi/24p5hPPzGU+

dT4URGtESxtSbCUzi08NopT0I7+CuzRDSQHWQ7bE8DbOWYuOWdKXlEFqskOmztbn2aqX

vtkg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1725551537; x=1726156337;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=2Bqfna8CgUSS5Mwb8vM71IwZTF90S7xGDXcW6eGTdiI=;

b=mT/vgnd+1MtMZio6IPWWHLLZF8/HEzeuX938FJLeDtOLsibtJDjCiTOFzRdX0dzd7M

rJvmrL+vzNoWCbC8ggeQFAOOf4swYokn0OjiDcWBObsAfJy0nPBFQDPKkRIFKcBDe1rl

j1fKtb8E3Bu+MV7UBGHJA/SXqawbcR2+D8esiDYmz4AGR750RW7KOoUqb3Km/BuU98vN

ytExoCCdl81zJAntBw48j5xRJiYdHgJpWSE30Xmpgl1XtbhM7jDcj81WDxiTh6Ek9CqB

hQdRI3BABuvpMeBl7UkQG3gOiOwWXkBAPxdombdJr9YL0+H17zo+Y7QMUwIFdmWXalGz

M8Bg==

X-Gm-Message-State: AOJu0Yzql1hZObMgENaNhFYQtcdcQeYZVCCNVQ3rAerz/yfTDQN3nOvz

320DETarZ3k77OZA7V9CxvaLUMRSeqWLzc2LQxRajlXmW41sq3FriGXteI4BuVj3KRZNE8INFdA

=

X-Google-Smtp-Source: AGHT+IHQXzrecpNRJpEXbZfVAkI4J+Xosq2p50zEduW2KonU5PeK5u0thrnSNtFoGIBnq53TUNEXie8Npw==

MIME-Version: 1.0

X-Received: by 2002:a17:90b:1c08:b0:2d8:ee39:47d with SMTP id

98e67ed59e1d1-2da55926072mr11499018a91.2.1725551537016; Thu, 05 Sep 2024

08:52:17 -0700 (PDT)

Message-ID:

Date: Thu, 05 Sep 2024 15:52:17 +0000

Subject: daveyadallee, Get More Instagram Followers and Reels Views here

From: reuswilian3@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

X-Spam_score: 7.0

X-Spam_score_int: 70

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi daveyadallee, We are from Instasocial. We found your Email

address on your Instagram page @daveyadallee. We Offers Instagram Followers,

Likes and Views services.



Content analysis details: (7.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

[209.85.216.69 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.69 listed in dnsbl.ahbl.org]

[209.85.216.69 listed in dnsbl.ahbl.org]

[209.85.216.69 listed in dnsbl.ahbl.org]

[209.85.216.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.69 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.69 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.69 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[reuswilian3(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[reuswilian3(at)gmail.com]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.0 T_SCC_BODY_TEXT_LINE No description available.

Subject: {SPAM?} daveyadallee, Get More Instagram Followers and Reels Views here



Hi daveyadallee,



We are from Instasocial. We found your Email address on your Instagram page

@daveyadallee.



We Offers Instagram Followers, Likes and Views services.



The price is:



-$29 USD for 1,000 Instagram Followers and

- $9 USD For Instagram Post Likes.

- $7 USD For Instagram Video Views



Now you have 1708 Followers, maybe you are Interested



With having Thousands of followers you can Increase your credibility on

Instagram,

Also If you are running an Instagram account to promote your own business,

having followers will get you more clients.



You can See all packages here :



https://bit.ly/2nKqL0W



If you have any questions, feel free to ask them here.

I apologize if this message bothers you,





Also, We have Youtube, Tiktok and Twitter services too, Please check it now.

Thank you,

Regards,

Who's Who spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 05 Sep 2024 14:06:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1smIjU-000000008cq-20v9

for dave@doctor.nl2k.ab.ca;

Thu, 05 Sep 2024 14:05:32 -0600

Resent-From: The Doctor

Resent-Date: Thu, 5 Sep 2024 14:05:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-io1-f71.google.com ([209.85.166.71]:46339)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1smE5E-000000004py-2R8l

for sales@nk.ca;

Thu, 05 Sep 2024 09:07:44 -0600

Received: by mail-io1-f71.google.com with SMTP id ca18e2360f4ac-82a72792dacso267837839f.1

for ; Thu, 05 Sep 2024 08:05:53 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=thecbrb-ca.20230601.gappssmtp.com; s=20230601; t=1725548747; x=1726153547; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=/mOCaJ8yHSvAvMtkkCU5XWLwY1QDKy7nDeiPENjlsi8=;

b=YOw6/wwGo64xWO8QHe+LtiuPfDqjNDZiQ85FgP/GQyV4x4mTi3hgRUyjz8WCQyDSGX

uMEN2C+VfL7M6KSFntahKTe6f0eStQtTLdmg2vkbdKDMyekX1jSFVcFMTzOA0i6YZ/2a

Y7RneO1mwxbGuAWNAcbDR+57Fu+eBJ6Byo5P+0OfDR6EmnsYfY5kkcudwQhrQAlv3kF2

9begr3MlZQhNhY5Sp1tdtulE5CzoYWilvduArCyqLUC81yUYNajMkqRQGR1QSDQOhz72

vh7l7MVU79ZI+3+kzBY7Bv7jM2s2KnwE6DzGnGNGKWz5LLWQMKkGjZI3u0ct1GVrhX1r

Ik9A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1725548747; x=1726153547;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=/mOCaJ8yHSvAvMtkkCU5XWLwY1QDKy7nDeiPENjlsi8=;

b=HRu4emEaU2M378q5IHoJgUA+2tVw78Iz9A5v9ZJ0coISBHk2EDgXIGhFtM+a7D9pfW

cv4eorwOC2OLthDpqFQQ3zWl5dZ1N84WE0RdKsK70CICwK4RlpLD2RAgL5yVddn9JEqO

xDSG7eprXO0517SMGQfQYdgXqJ1+12DDcUi/3xLAhVebJUx8Gmwef53bcpliLfFpSE/3

HvwrH1WqS7Tk0h+CP9PJxqM7LR90PgaV8fKZjGw2YE0ukJY/fdMRn9FsqarSSI4lC1bF

tD/QWb8Eun8UXkZnkV8KezBmVxGuUJZeLVrl2JB/OTMnunjdlk3XCqRSAskkiq+JEltJ

ITyg==

X-Gm-Message-State: AOJu0YwXWSiCOUFZ1prJ303jFBFWGwGyIIE6ZuwEVrEToFmtKhnZJV5z

kHI8hx1Ng4yifTigU13iH+YIWNqR0US3q//QY+5Ekq+1Vxj01qpra8XVgvuA9YoaXXXUQMX0Qcy

NVRJMxdHdzYWm57SH6Q==

X-Google-Smtp-Source: AGHT+IFV67uveXV56oUNJsjPVPU6b/GDj3cu3dAdqtcU/NRC2AWrRvgU96paCygqR/GR56u+yearQ25ZGw==

MIME-Version: 1.0

X-Received: by 2002:a05:6870:d188:b0:277:bc16:12c3 with SMTP id

586e51a60fabf-2781a7a9babmr11120678fac.17.1725548067337; Thu, 05 Sep 2024

07:54:27 -0700 (PDT)

Message-ID:

Date: Thu, 05 Sep 2024 14:54:27 +0000

Subject: Synergy selected for CBRB Best Businesses In Canada 2024

From: membershipinfo@thecbrb.ca

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Congratulations on being selected and approved for

the CBRB Best Businesses In Canada 2024. This offer is presented only to businesses

that have maintained a 4+ star Google review rating or equivalent proof of

customer satisfaction.



Content analysis details: (7.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.166.71 listed in will-spam-for-food.eu.org]

[209.85.166.71 listed in will-spam-for-food.eu.org]

[209.85.166.71 listed in will-spam-for-food.eu.org]

[209.85.166.71 listed in will-spam-for-food.eu.org]

[209.85.166.71 listed in will-spam-for-food.eu.org]

[209.85.166.71 listed in will-spam-for-food.eu.org]

[209.85.166.71 listed in will-spam-for-food.eu.org]

[209.85.166.71 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.166.71 listed in dnsbl.ahbl.org]

[209.85.166.71 listed in dnsbl.ahbl.org]

[209.85.166.71 listed in dnsbl.ahbl.org]

[209.85.166.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.166.71 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.166.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.166.71 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.166.71 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.166.71 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.166.71 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.0 T_SCC_BODY_TEXT_LINE No description available.

Subject: {SPAM?} Synergy selected for CBRB Best Businesses In Canada 2024



SGVsbG8sDQoNCkNvbmdyYXR1bGF0aW9ucyBvbiBiZWluZyBzZWxlY3RlZCBhbmQgYXBwcm92ZWQg

Zm9yIHRoZSBDQlJCIEJlc3QgQnVzaW5lc3NlcyAgDQpJbiBDYW5hZGEgMjAyNC4NCg0KVGhpcyBv

ZmZlciBpcyBwcmVzZW50ZWQgb25seSB0byBidXNpbmVzc2VzIHRoYXQgaGF2ZSBtYWludGFpbmVk

IGEgNCsgc3RhciAgDQpHb29nbGUgcmV2aWV3IHJhdGluZyBvciBlcXVpdmFsZW50IHByb29mIG9m

IGN1c3RvbWVyIHNhdGlzZmFjdGlvbi4NCg0KUmVwcmVzZW50aW5nIHRoZSBCZXN0IEJ1c2luZXNz

ZXMgaW4gQ2FuYWRhLCB0aGUgQ0JSQiBDYW5hZGlhbiBCdXNpbmVzcyAgDQpSZXZpZXcgQm9hcmQg

SW5jLiBoYXMgZm91bmQgdGhhdCB5b3VyIGJ1c2luZXNzIG1lZXRzIHN0cm9uZyBjb25zdW1lciAg

DQpzYXRpc2ZhY3Rpb24gc3RhbmRhcmRzIGFuZCB3ZSBsb29rIGZvcndhcmQgdG8gcmVjb21tZW5k

aW5nIHlvdXIgc2VydmljZXMuDQoNCk1lbWJlcnNoaXAgaW4gdGhlIENCUkIgQmVzdCBCdXNpbmVz

c2VzIEluIENhbmFkYSAyMDI0IGluY2x1ZGVzIGxpc3RpbmcgaW4gIA0KdGhlIGV4Y2x1c2l2ZSBC

ZXN0IEJ1c2luZXNzZXMgSW4gQ2FuYWRhIDIwMjQgRGlyZWN0b3J5LCBDQlJCIEJlc3QgIA0KQnVz

aW5lc3NlcyBDYW5hZGEgMjAyNCBWZXJpZmljYXRpb24gQ2VydGlmaWNhdGUgJiAgQmFkZ2UsIGFu

ZCBwcm9tb3Rpb25hbCAgDQpjb250ZW50IHRvIHByb21vdGUgU3luZXJneSBjb21taXRtZW50IHRv

IHVwaG9sZGluZzoNCg0KLSBTdHJvbmcgVmlzaW9uDQotIEN1c3RvbWVyLWNlbnRyaWMgQXBwcm9h

Y2gNCi0gQ3VzdG9tZXIgU2F0aXNmYWN0aW9uDQotIEJ1c2luZXNzIExlYWRlcnNoaXANCg0KRm9s

bG93aW5nIHJlZ2lzdHJhdGlvbiwgeW91IHdpbGwgcmVjZWl2ZToNCg0KLUNCUkIgQmVzdCBCdXNp

bmVzc2VzIEluIENhbmFkYSAyMDI0IFZlcmlmaWNhdGlvbiBDZXJ0aWZpY2F0ZQ0KDQotQ0JSQiBC

ZXN0IEJ1c2luZXNzZXMgSW4gQ2FuYWRhIDIwMjQgVmVyaWZpY2F0aW9uIEJhZGdlDQoNCi1DQlJC

IEJlc3QgQnVzaW5lc3NlcyBJbiBDYW5hZGEgMjAyNCBEaXJlY3RvcnkgTGlzdGluZyAmIFByb2Zp

bGUgUGFnZQ0KDQotQ0JSQiBDYW5hZGlhbiBCdXNpbmVzcyBSZXZpZXcgQm9hcmQgSW5jIHdpbGwg

cHJvbW90ZSB5b3VyIGJ1c2luZXNzICANCmV4Y2VsbGVuY2Ugb24gc29jaWFsIG1lZGlhIGFuZCBt

dWx0aXBsZSBtYXJrZXRpbmcgcGxhdGZvcm1zIGluY2x1ZGluZyBhZHMgIA0KdGFyZ2V0aW5nIHNw

ZWNpZmljIGNsaWVudHMgaW4geW91ciBjaXR5IGFuZCBzdXJyb3VuZGluZyBhcmVhcy4NCg0KVG8g

YWNjZXB0IHlvdXIgQ0JSQiBCZXN0IEJ1c2luZXNzZXMgSW4gQ2FuYWRhIE1lbWJlcnNoaXAgJiBW

ZXJpZmljYXRpb24sICANCnBsZWFzZSBzdWJtaXQgdGhlIGZvbGxvd2luZyBmb3JtOg0KaHR0cHM6

Ly9mb3Jtcy5nbGUvUFo4V28yMlltV1pvOHlhQjkNCg0KSWYgeW91IGhhdmUgYW55IHF1ZXN0aW9u

cywgZmVlbCBmcmVlIHRvIGxldCB1cyBrbm93IQ0KDQooRm9yIGFsbCBmdXR1cmUgZW1haWxzLCBw

bGVhc2Ugc2VuZCB5b3VyIHJlc3BvbnNlIHRvIOKAnEluZm9AdGhlY2JyYi5jYeKAnSkNCg0KVGlm

ZmFueSBIZW5yaWtzb24NCkNCUkIgQ2FuYWRpYW4gQnVzaW5lc3MgUmV2aWV3IEJvYXJkIEluYw0K

TWVtYmVyc2hpcCBDb21taXR0ZWUNCkJlc3QgQnVzaW5lc3NlcyBJbiBDYW5hZGENCnd3dy50aGVj

YnJiLmNhDQpAdGhlY2JyYg0KQHRoZWNicmJfY2FuYWRhDQoNCg0KDQoNCg0KSWYgeW91IHdvdWxk

IGxpa2UgdG8gdW5zdWJzY3JpYmUgZnJvbSBmdXR1cmUgY29ycmVzcG9uZGVuY2UsIHBsZWFzZSBl

bWFpbCAgDQp5b3VyIHJlcXVlc3QgdG8gdW5zdWJzY3JpYmVAdGhlY2JyYi5jb20NCg==

Chinese products spam from Google Gmail

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Wed, 04 Sep 2024 23:36:00 -0600

Received: from mail-oi1-f195.google.com ([209.85.167.195]:54538)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sm59Y-00000000Iwy-3hiF

for dave@nk.ca;

Wed, 04 Sep 2024 23:35:38 -0600

Received: by mail-oi1-f195.google.com with SMTP id 5614622812f47-3df04a2420aso203942b6e.1

for ; Wed, 04 Sep 2024 22:33:43 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=goodbomold.com; s=google; t=1725514417; x=1726119217; darn=nk.ca;

h=disposition-notification-to:mime-version:date:subject:to:message-id

:reply-to:from:from:to:cc:subject:date:message-id:reply-to;

bh=ugeH/oJd4OwP2NVj8q2Mf49oeu/9UL9tDOH9+paPk7c=;

b=oW+rNVqpFFERNqUhIpOKhENvQDwQpuT+8leNPJg7P+eChJHDLCHRySbSPlGi5mdNih

YxV6wAH7q8lv+rEV60DodWMoNeMdq1RO7KmOTB38tP+RIA+AVlBhGgl2DLX1F7E5SKa+

XcT7Xtla7Khw1C9p/88aZYibJnYS3wDljuSgU=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1725514417; x=1726119217;

h=disposition-notification-to:mime-version:date:subject:to:message-id

:reply-to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=ugeH/oJd4OwP2NVj8q2Mf49oeu/9UL9tDOH9+paPk7c=;

b=xAyu96lZ2E9FWaccY7VRE5pH+49rjbbqLVyoQCp3bkN4KnXgaOs9AqxKFXzUwXBl/3

CnrjSykkSEBRxdOlkTiLSeIOW+tvVwcPKEy2rV32ygAZnifhV9Dtu48QNTX3MEkKaXiQ

5n38k1/PJZ2E4dTrPcHydJsZ23c0jdaxU5kwa6w2KdyTTZ8WM5U5lwvxnyitbkzV8LgR

yJlhZk4XrB+4QYXW1txGitSq6rWgGmAPBasornMl5sAzyxwr6aaAM6QyeWtEF9idJ9G3

OJy4aiwHlxi7Nv0FidjiBt8TI9kTmnE9VFybH3nmqQvlJEgZViiJqWeuhS5/ugcgZCq/

uU7g==

X-Gm-Message-State: AOJu0YzJ5fzmStEUEH8KoN/yTketn0AAaZ3Ydvwhw/U42wjxz1TukfMG

n8QRoBvzdM2PY06/7FemNPcvc/XMh+GOxTgukSmIqYIti2dA0O4ICtf1UwjlKcmUvY06y5f/UBy

INGc=

X-Google-Smtp-Source: AGHT+IEC/93EldNJ1VzB+e7gWc2Ajjp1rgodPwHVZG4MBC2PPr10RZLs59G5UPqjYjLJWm1D0701Rg==

X-Received: by 2002:a05:6808:f07:b0:3d6:363b:eb2 with SMTP id 5614622812f47-3df1b81e1ffmr21186340b6e.33.1725514416771;

Wed, 04 Sep 2024 22:33:36 -0700 (PDT)

Received: from sdrqdi ([223.122.107.7])

by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-7d4fbda76b7sm2530106a12.59.2024.09.04.22.33.35

for

(version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);

Wed, 04 Sep 2024 22:33:36 -0700 (PDT)

From: "grace@runtooprecision.com"

X-Google-Original-From: "grace@runtooprecision.com"

Reply-To:

Message-ID: <5C4C62BBF76D7B9EF6B1D69A7005691A@sdrqdi>

To:

Subject: Preferred supplier for injection molds and injection molding parts

Date: Thu, 5 Sep 2024 13:33:22 +0800

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_00AA_0103345D.17992910"

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.5512

Disposition-Notification-To: grace@runtooprecision.com

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512

X-Spam_score: 12.3

X-Spam_score_int: 123

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello Dear Manager, How is everything going? This is Grace

from Runtoo Precision Technology Co., Ltd., located in Shenzhen, China. It

will be a great honor if we can establish a relationship with you in the

future. Runtoo Precision found in 2013 [...]



Content analysis details: (12.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.195 listed in dnsbl.ahbl.org]

[209.85.167.195 listed in dnsbl.ahbl.org]

[209.85.167.195 listed in dnsbl.ahbl.org]

[209.85.167.195 listed in dnsbl.ahbl.org]

[223.122.107.7 listed in dnsbl.ahbl.org]

[223.122.107.7 listed in dnsbl.ahbl.org]

[223.122.107.7 listed in dnsbl.ahbl.org]

[223.122.107.7 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.195 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.195 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.195 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.195 listed in will-spam-for-food.eu.org]

[209.85.167.195 listed in will-spam-for-food.eu.org]

[209.85.167.195 listed in will-spam-for-food.eu.org]

[209.85.167.195 listed in will-spam-for-food.eu.org]

[209.85.167.195 listed in will-spam-for-food.eu.org]

[209.85.167.195 listed in will-spam-for-food.eu.org]

[209.85.167.195 listed in will-spam-for-food.eu.org]

[209.85.167.195 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.195 listed in wl.mailspike.net]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: goodbomold.com]

[URI: runtooprecision.com]

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

1.0 HK_RANDOM_FROM From username looks random

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.195 listed in list.dnswl.org]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.0 ZMIde_OutlookExpress Outlook Express should not be used anymore

2.0 MIXED_HREF_CASE Has href in mixed case

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

Subject: {SPAM?} Preferred supplier for injection molds and injection molding parts



This is a multi-part message in MIME format.



------=_NextPart_000_00AA_0103345D.17992910

Content-Type: text/plain;

charset="gb2312"

Content-Transfer-Encoding: base64



SGVsbG8gRGVhciBNYW5hZ2VyLA0KDQpIb3cgaXMgZXZlcnl0aGluZyBnb2luZz8NCg0KVGhpcyBp

cyBHcmFjZSBmcm9tIFJ1bnRvbyBQcmVjaXNpb24gVGVjaG5vbG9neSBDby4sIEx0ZC4sIGxvY2F0

ZWQgaW4gU2hlbnpoZW4sIENoaW5hLg0KSXQgd2lsbCBiZSBhIGdyZWF0IGhvbm9yIGlmIHdlIGNh

biBlc3RhYmxpc2ggYSByZWxhdGlvbnNoaXAgd2l0aCB5b3UgaW4gdGhlIGZ1dHVyZS4gUnVudG9v

IFByZWNpc2lvbiBmb3VuZCBpbiAyMDEzLCBtYWpvcnMgaW4gbW9sZCBkZXNpZ24gYW5kIGluamVj

dGlvbiBzZXJ2aWNlIGZvciBvdmVyIDEwIHllYXJzLiBPdXIgcHJvZHVjdHMgZW5qb3kgZ3JlYXQg

cG9wdWxhcml0eSBhbW9uZyBFdXJvcGVhbiBhbmQgQW1lcmljYW4gbWFya2V0cy4NCldlIGNhbiBv

ZmZlciB5b3UgdGhlIGZvbGxvd2luZyBzZXJ2aWNlIGZvciB5b3UuDQouIE1vbGQgZGVzaWduIGFu

ZCBtb2xkIHByb2R1Y3Rpb24uDQouIEluamVjdGlvbiBzZXJ2aWNlLCBhc3NlbWJseSwgcHJpbnRp

bmcsIGFuZCBwYWNraW5nIHNlcnZpY2UuDQouIFJhcGlkIHByb3RvdHlwaW5nIG9yIDNEIHByaW50

aW5nIHNlcnZpY2UuDQouIEhhcmR3YXJlIHBhcnRzDQoNCklmIHlvdSBoYXZlIGFueSBwbGFzdGlj

IHBhcnQgbmVlZCB0byBjdXN0b21pemVkLCBjb3VsZCB5b3Ugb2ZmZXIgdXMgdGhlIDNEIGZpbGVz

IG9yIHNhbXBsZXMgeW91IGhhdmU/IFBsZWFzZSBkb24ndCBoZXNpdGF0ZSB0byBjb250YWN0IHVz

Lg0KTG9va2luZyBmb3J3YXJkIHRvIHlvdXIgZWFybHkgcmVwbHkgd2hpY2ggd2lsbCBiZSBoaWdo

bHkgYXBwcmVjaWF0ZWQuDQoNCg0KQmVzdCBSZWdhcmRzLA0KR3JhY2UNClNhbGVzIE1hbmFnZXIN

Cg0KDQpSdW50b28gUHJlY2lzaW9uIFRlY2hub2xvZ3kgQ28uLCBMdGQuICAgICAgICAgICAgICAg

ICAgICANCk1vYmlsZTogODYtMTM2MDMwMzc0NjkNClRlbDogICAgKzg2LTA3NTUtMjMxOTYxNjYN

CkVtYWlsOiBncmFjZUBydW50b29wcmVjaXNpb24uY29tICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICANCldlYjogIGh0dHA6Ly93d3cucnVu

dG9vcHJlY2lzaW9uLmNvbS8g



------=_NextPart_000_00AA_0103345D.17992910

Content-Type: text/html;

charset="gb2312"

Content-Transfer-Encoding: base64



PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMCBUcmFuc2l0aW9uYWwv

L0VOIj4NCjxIVE1MPjxIRUFEPg0KPE1FVEEgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PWdi

MjMxMiIgaHR0cC1lcXVpdj1Db250ZW50LVR5cGU+DQo8TUVUQSBuYW1lPUdFTkVSQVRPUiBjb250

ZW50PSJNU0hUTUwgMTEuMDAuMTA1NzAuMTAwMSI+PC9IRUFEPg0KPEJPRFk+DQo8RElWIA0Kc3R5

bGU9J0ZPTlQtU0laRTogMTRweDsgRk9OVC1GQU1JTFk6ICJNaWNyb3NvZnQgWWFIZWkgVUkiOyBX

SElURS1TUEFDRTogbm9ybWFsOyBXT1JELVNQQUNJTkc6IDBweDsgVEVYVC1UUkFOU0ZPUk06IG5v

bmU7IEZPTlQtV0VJR0hUOiA0MDA7IENPTE9SOiByZ2IoMCwwLDApOyBGT05ULVNUWUxFOiBub3Jt

YWw7IE9SUEhBTlM6IDI7IFdJRE9XUzogMjsgTEVUVEVSLVNQQUNJTkc6IG5vcm1hbDsgQkFDS0dS

T1VORC1DT0xPUjogcmdiKDI1NSwyNTUsMjU1KTsgVEVYVC1JTkRFTlQ6IDBweDsgZm9udC12YXJp

YW50LWxpZ2F0dXJlczogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyAtd2Via2l0

LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbi1zdHlsZTogaW5pdGlhbDsg

dGV4dC1kZWNvcmF0aW9uLWNvbG9yOiBpbml0aWFsOyB0ZXh0LWRlY29yYXRpb24tdGhpY2tuZXNz

OiBpbml0aWFsJz48U1BBTiANCnN0eWxlPSJGT05ULVNJWkU6IDE2cHgiPg0KPERJViANCnN0eWxl

PSJGT05ULVNJWkU6IDE0cHg7IEZPTlQtRkFNSUxZOiBBcmlhbDsgQ09MT1I6ICMwMDAwMDA7IExJ

TkUtSEVJR0hUOiAxLjciPg0KPFAgc3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9OVCBzaXplPTMgZmFj

ZT0iTWljcm9zb2Z0IFlhSGVpIFVJIj5IZWxsbyBEZWFyIA0KTWFuYWdlciw8L0ZPTlQ+PC9QPg0K

PFAgc3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9OVCBzaXplPTMgZmFjZT0iTWljcm9zb2Z0IFlhSGVp

IFVJIj48L0ZPTlQ+Jm5ic3A7PC9QPg0KPFAgc3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9OVCBzaXpl

PTMgZmFjZT0iTWljcm9zb2Z0IFlhSGVpIFVJIj5Ib3cgaXMgZXZlcnl0aGluZyANCmdvaW5nPzwv

Rk9OVD48L1A+DQo8UCBzdHlsZT0iTUFSR0lOOiAwcHgiPjxGT05UIHNpemU9MyBmYWNlPSJNaWNy

b3NvZnQgWWFIZWkgVUkiPjwvRk9OVD4mbmJzcDs8L1A+DQo8UCBzdHlsZT0iTUFSR0lOOiAwcHgi

PjxGT05UIHNpemU9MyBmYWNlPSJNaWNyb3NvZnQgWWFIZWkgVUkiPlRoaXMgaXMgR3JhY2UgZnJv

bSANClJ1bnRvbyBQcmVjaXNpb24gVGVjaG5vbG9neSBDby4sIEx0ZC4sIGxvY2F0ZWQgaW4gU2hl

bnpoZW4sIENoaW5hLjwvRk9OVD48L1A+DQo8UCBzdHlsZT0iTUFSR0lOOiAwcHgiPjxGT05UIHNp

emU9MyBmYWNlPSJNaWNyb3NvZnQgWWFIZWkgVUkiPkl0IHdpbGwgYmUgYSBncmVhdCANCmhvbm9y

IGlmIHdlIGNhbiBlc3RhYmxpc2ggYSByZWxhdGlvbnNoaXAgd2l0aCB5b3UgaW4gdGhlIGZ1dHVy

ZS4gUnVudG9vIA0KUHJlY2lzaW9uIGZvdW5kIGluIDIwMTMsIG1ham9ycyBpbiBtb2xkIGRlc2ln

biBhbmQgaW5qZWN0aW9uIHNlcnZpY2UgZm9yIG92ZXIgMTAgDQp5ZWFycy4gT3VyIHByb2R1Y3Rz

IGVuam95IGdyZWF0IHBvcHVsYXJpdHkgYW1vbmcgRXVyb3BlYW4gYW5kIEFtZXJpY2FuIA0KbWFy

a2V0cy48L0ZPTlQ+PC9QPg0KPFAgc3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9OVCBzaXplPTMgZmFj

ZT0iTWljcm9zb2Z0IFlhSGVpIFVJIj5XZSBjYW4gb2ZmZXIgeW91IA0KdGhlIGZvbGxvd2luZyBz

ZXJ2aWNlIGZvciB5b3UuPC9GT05UPjwvUD4NCjxQIHN0eWxlPSJNQVJHSU46IDBweCI+PEZPTlQg

c2l6ZT0zIGZhY2U9Ik1pY3Jvc29mdCBZYUhlaSBVSSI+LiZuYnNwO01vbGQgZGVzaWduIA0KYW5k

IG1vbGQgcHJvZHVjdGlvbi48L0ZPTlQ+PC9QPg0KPFAgc3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9O

VCBzaXplPTMgZmFjZT0iTWljcm9zb2Z0IFlhSGVpIFVJIj4uJm5ic3A7SW5qZWN0aW9uIA0Kc2Vy

dmljZSwgYXNzZW1ibHksIHByaW50aW5nLCBhbmQgcGFja2luZyBzZXJ2aWNlLjwvRk9OVD48L1A+

DQo8UCBzdHlsZT0iTUFSR0lOOiAwcHgiPjxGT05UIHNpemU9MyBmYWNlPSJNaWNyb3NvZnQgWWFI

ZWkgVUkiPi4mbmJzcDtSYXBpZCANCnByb3RvdHlwaW5nIG9yIDNEIHByaW50aW5nIHNlcnZpY2Uu

PC9GT05UPjwvUD4NCjxQIHN0eWxlPSJNQVJHSU46IDBweCI+PEZPTlQgc2l6ZT0zIGZhY2U9Ik1p

Y3Jvc29mdCBZYUhlaSBVSSI+LiZuYnNwO0hhcmR3YXJlIA0KcGFydHM8L0ZPTlQ+PC9QPg0KPFAg

c3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9OVCBzaXplPTMgZmFjZT0iTWljcm9zb2Z0IFlhSGVpIFVJ

Ij48L0ZPTlQ+Jm5ic3A7PC9QPg0KPFAgc3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9OVCBzaXplPTMg

ZmFjZT0iTWljcm9zb2Z0IFlhSGVpIFVJIj5JZiB5b3UgaGF2ZSBhbnkgDQpwbGFzdGljIHBhcnQg

bmVlZCB0byBjdXN0b21pemVkLCBjb3VsZCB5b3Ugb2ZmZXIgdXMgdGhlIDNEIGZpbGVzIG9yIHNh

bXBsZXMgeW91IA0KaGF2ZT8gUGxlYXNlIGRvbid0IGhlc2l0YXRlIHRvIGNvbnRhY3QgdXMuPC9G

T05UPjwvUD4NCjxQIHN0eWxlPSJNQVJHSU46IDBweCI+PEZPTlQgc2l6ZT0zIGZhY2U9Ik1pY3Jv

c29mdCBZYUhlaSBVSSI+TG9va2luZyBmb3J3YXJkIHRvIA0KeW91ciBlYXJseSByZXBseSB3aGlj

aCB3aWxsIGJlIGhpZ2hseSBhcHByZWNpYXRlZC48L0ZPTlQ+PC9QPg0KPFAgc3R5bGU9Ik1BUkdJ

TjogMHB4Ij48Rk9OVCBmYWNlPSJNaWNyb3NvZnQgWWFIZWkgVUkiPjxCUj48Rk9OVCANCnNpemU9

Mz48L0ZPTlQ+PC9GT05UPjwvUD4NCjxQIHN0eWxlPSJNQVJHSU46IDBweCI+PEZPTlQgc2l6ZT0z

IGZhY2U9Ik1pY3Jvc29mdCBZYUhlaSBVSSI+QmVzdCANClJlZ2FyZHMsPC9GT05UPjwvUD4NCjxQ

IHN0eWxlPSJNQVJHSU46IDBweCI+PEZPTlQgc2l6ZT0zIGZhY2U9Ik1pY3Jvc29mdCBZYUhlaSBV

SSI+R3JhY2U8L0ZPTlQ+PC9QPg0KPFAgc3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9OVCBzaXplPTMg

ZmFjZT0iTWljcm9zb2Z0IFlhSGVpIFVJIj5TYWxlcyANCk1hbmFnZXI8L0ZPTlQ+PC9QPg0KPFAg

c3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9OVCBmYWNlPSJNaWNyb3NvZnQgWWFIZWkgVUkiPjxCUj48

Rk9OVCANCnNpemU9Mz48L0ZPTlQ+PC9GT05UPjwvUD4NCjxQIHN0eWxlPSJNQVJHSU46IDBweCI+

PEZPTlQgc2l6ZT0zIGZhY2U9Ik1pY3Jvc29mdCBZYUhlaSBVSSI+UnVudG9vIFByZWNpc2lvbiAN

ClRlY2hub2xvZ3kgQ28uLCBMdGQuJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAm

bmJzcDsgJm5ic3A7ICZuYnNwOyANCiZuYnNwOyAmbmJzcDsmbmJzcDs8L0ZPTlQ+PC9QPg0KPFAg

c3R5bGU9Ik1BUkdJTjogMHB4Ij48Rk9OVCBzaXplPTMgZmFjZT0iTWljcm9zb2Z0IFlhSGVpIFVJ

Ij5Nb2JpbGU6IA0KODYtMTM2MDMwMzc0Njk8L0ZPTlQ+PC9QPg0KPFAgc3R5bGU9Ik1BUkdJTjog

MHB4Ij48Rk9OVCBzaXplPTMgZmFjZT0iTWljcm9zb2Z0IFlhSGVpIFVJIj5UZWw6Jm5ic3A7ICZu

YnNwOyANCis4Ni0wNzU1LTIzMTk2MTY2PC9GT05UPjwvUD4NCjxQIHN0eWxlPSJNQVJHSU46IDBw

eCI+PEZPTlQgc2l6ZT0zIGZhY2U9Ik1pY3Jvc29mdCBZYUhlaSBVSSI+RW1haWw6IA0KZ3JhY2VA

cnVudG9vcHJlY2lzaW9uLmNvbSZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5i

c3A7ICZuYnNwOyAmbmJzcDsgDQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu

YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IA0KJm5ic3A7ICZuYnNwOyAm

bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IA0K

Jm5ic3A7PC9GT05UPjwvUD4NCjxQIHN0eWxlPSJNQVJHSU46IDBweCI+PEZPTlQgc2l6ZT0zIGZh

Y2U9Ik1pY3Jvc29mdCBZYUhlaSBVSSI+V2ViOiZuYnNwOyANCjwvRk9OVD48QSBocmVmPSJodHRw

Oi8vd3d3LnJ1bnRvb3ByZWNpc2lvbi5jb20vIiANCl9zcmM9Imh0dHA6Ly93d3cucnVudG9vcHJl

Y2lzaW9uLmNvbS8iPjxGT05UIHNpemU9MyANCmZhY2U9Ik1pY3Jvc29mdCBZYUhlaSBVSSI+aHR0

cDovL3d3dy5ydW50b29wcmVjaXNpb24uY29tLzwvRk9OVD48L0E+PEZPTlQgDQpmYWNlPSJNaWNy

b3NvZnQgWWFIZWkgVUkiPiA8L0ZPTlQ+PC9QPjwvRElWPjwvU1BBTj48L0RJVj48L0JPRFk+PC9I

VE1MPg0K



------=_NextPart_000_00AA_0103345D.17992910--

Web / SEO/ App spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 05 Sep 2024 04:18:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sm9Yt-000000007tG-1a1U

for dave@doctor.nl2k.ab.ca;

Thu, 05 Sep 2024 04:17:59 -0600

Resent-From: The Doctor

Resent-Date: Thu, 5 Sep 2024 04:17:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f194.google.com ([209.85.214.194]:55704)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sm5nI-00000000LMT-1Oys

for sales@nk.ca;

Thu, 05 Sep 2024 00:16:41 -0600

Received: by mail-pl1-f194.google.com with SMTP id d9443c01a7336-205909af9b5so3553635ad.3

for ; Wed, 04 Sep 2024 23:14:44 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1725516879; x=1726121679; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=arGzZN+hcyRJAntsLtxrayzScuKq1bPGgWKyUwo2WUM=;

b=DAH0tVhFxc5GtLBuVYvaGJkIXU4pXF2TotMC2bRlF2z4OxjX2aaFK/GwvHLoDf6ah2

qZfEDOjzqf3aaCQqHfQLQwG7aAXdkDLgNY16yHftkM/Ox/I8cH5KNqd3psSp8pZUNdjJ

+SPzhchPUSl+/ZlxyuZBqv8hg+AAlLEydQMWVyzXgu73ywYk5vvz3dBXCVMvlYJmy4ep

vzUhCgX2U3qgBrZzHaPV5ULx2DuW2HmZgr5yaKFChfpA6eQqCKnu1PSPgHoJgjy+x4on

NDrlZB/EsUQCFxQRtzFFE3qYcP0wHHv3G281xj1usrD/PKqNlyJvCvOMKVQsYyulIfCt

F8aA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1725516879; x=1726121679;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=arGzZN+hcyRJAntsLtxrayzScuKq1bPGgWKyUwo2WUM=;

b=QAicI00yeY0kXY5d6vcNMUOudDC889Me5FfmcVQuYgodkYWJvujh+MhVIvvtnQ1igV

HgWcDlNwNerGpk/xGFUqXV8vx28ZS5imiokxhrqxgCt2NBwUzJ0iMZXQHFsjaJMA2FLC

Up8cINIWmiyTKND+ExHYMr/QMyCGCyL4uAqEjITPiO9BoZ3NksnC+1ipd9HHYhj1vjGo

gZFAZF5nUTGgCaVJyywhi+j0sLbp+6rQiUx0pzxj/329RZ8qhderUNpJhHutlNP6EqZa

nKzWJXYR3AxuLqvwJvY0O7copXkCgExkiNMR2Qdii8oDwRU2A5tSUSB/nifXFx+47Grh

TVug==

X-Gm-Message-State: AOJu0YyYjDTn/HZqxIzDCGjvxsMFY91Zx0u/6XcBO1+p9l0tRmkF4YlV

iWFsG/CwBsCX1svZdA7dhX3NeiJeO9j32sq/jMA7YiiRV3f+vnJB5pxUqVRi

X-Google-Smtp-Source: AGHT+IFSSDYPKkk3Rr0jcCJsQcpH8xzDbbJSfrsf9vjVE9oWlK7g4auYwd9c6/lDmrOsA3Jkr/KzsQ==

X-Received: by 2002:a17:903:244b:b0:206:c486:4c4c with SMTP id d9443c01a7336-206c4864ee3mr38982855ad.57.1725516878774;

Wed, 04 Sep 2024 23:14:38 -0700 (PDT)

Received: from DESKTOPLOVLV09 ([122.162.147.83])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-206ae951953sm22094705ad.112.2024.09.04.23.14.37

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Wed, 04 Sep 2024 23:14:38 -0700 (PDT)

From: "Matthew Perry"

To:

Subject: Website Details!

Date: Thu, 5 Sep 2024 11:44:05 +0530

Message-ID: <0b6d01daff5a$e33d0ee0$a9b72ca0$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0B6E_01DAFF88.FCF54AE0"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: Adr/WrQ3Ogo57sCKRgikwvaLvrxRug==

Content-Language: en-us

x-cr-hashedpuzzle: CEGx Cown ECJT EWG/ Ekic E/Uv F+ji GUrg HHso HdVO H6P7 H91h J3ug J4nC LDTF LuF1;1;cwBhAGwAZQBzAEAAbgBrAC4AYwBhAA==;Sosha1_v1;7;{DF4A8898-6678-4768-98AC-11CA881A7EDE};cwBlAG8AcwBhAGwAZQBzAG0AYQByAGsAZQB0AGkAbgBnADEANQA1AEAAZwBtAGEAaQBsAC4AYwBvAG0A;Thu, 05 Sep 2024 06:13:33 GMT;VwBlAGIAcwBpAHQAZQAgAEQAZQB0AGEAaQBsAHMAIQA=

x-cr-puzzleid: {DF4A8898-6678-4768-98AC-11CA881A7EDE}

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hey, I was checking your www.nk.ca website and see you have

a good design and it looks great, but it's not ranking on Google and other

major search engines. I would like to send you a SEO report with prices showing

you a few things to greatly improve these search results for you. These things

are not difficult, and my report will be very specific. It will [...]



Content analysis details: (6.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[122.162.147.83 listed in will-spam-for-food.eu.org]

[122.162.147.83 listed in will-spam-for-food.eu.org]

[122.162.147.83 listed in will-spam-for-food.eu.org]

[122.162.147.83 listed in will-spam-for-food.eu.org]

[122.162.147.83 listed in will-spam-for-food.eu.org]

[122.162.147.83 listed in will-spam-for-food.eu.org]

[122.162.147.83 listed in will-spam-for-food.eu.org]

[122.162.147.83 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.194 listed in dnsbl.ahbl.org]

[209.85.214.194 listed in dnsbl.ahbl.org]

[209.85.214.194 listed in dnsbl.ahbl.org]

[209.85.214.194 listed in dnsbl.ahbl.org]

[122.162.147.83 listed in dnsbl.ahbl.org]

[122.162.147.83 listed in dnsbl.ahbl.org]

[122.162.147.83 listed in dnsbl.ahbl.org]

[122.162.147.83 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.194 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.194 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.194 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.194 listed in wl.mailspike.net]

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[seosalesmarketing155(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[seosalesmarketing155(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Website Details!



This is a multipart message in MIME format.



------=_NextPart_000_0B6E_01DAFF88.FCF54AE0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hey,



I was checking your www.nk.ca website and see you have a good design and it

looks great, but it's not ranking on Google and other major search engines.



I would like to send you a SEO report with prices showing you a few things

to greatly improve these search results for you. These things are not

difficult, and my report will be very specific. It will show you exactly

what needs to be done to move you up in the rankings dramatically.



If interested. May I send you a quote?



Stay safe!



Best Wishes,



Matthew Perry





------=_NextPart_000_0B6E_01DAFF88.FCF54AE0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">






charset=3Dus-ascii">



















Hey,





I was checking your www.nk.ca website =

and see

you have a good design and it looks great, but it's not ranking on =

Google and

other major search engines.





I would like to send you a SEO report with prices =

showing

you a few things to greatly improve these search results for you. These =

things

are not difficult, and my report will be very specific. It will show you

exactly what needs to be done to move you up in the rankings =

dramatically.





If interested. May I send you a quote?





Stay safe!





Best Wishes,





Matthew Perry

















------=_NextPart_000_0B6E_01DAFF88.FCF54AE0--

Web / SEO/ App spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Sep 2024 08:16:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1slqne-00000000Emw-3Yjn

for dave@doctor.nl2k.ab.ca;

Wed, 04 Sep 2024 08:15:58 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Sep 2024 08:15:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yb1-f196.google.com ([209.85.219.196]:45319)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sloqf-00000000Oyj-2lrf

for sales@nk.ca;

Wed, 04 Sep 2024 06:11:03 -0600

Received: by mail-yb1-f196.google.com with SMTP id 3f1490d57ef6-e0b7efa1c1bso817046276.3

for ; Wed, 04 Sep 2024 05:09:09 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1725451743; x=1726056543; darn=nk.ca;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=bDHAKmhXrIu0N2xQWD4VDBzlzKWbcZlB4wcz0elGjyI=;

b=CixqJLnidGiOB3BC6zYrIH8X6bSJscvbZA3OsU8q3kuG6uZwjxHXp0MaPp7LMC7aE8

gJO1PkYD9tdosB6zZGCU2V/gLl6yLvFVsdkR7Ve9WGDcfqv8m29EXVRF7O8GjYUFoWbl

WkYa+QQrhxiQYTnf4xgVkUmLeV5RZwi6Y84V5JxXbMWebgJvulckPDJ53D4yHzTunHhx

cL0BpkAbKE7Royllo0EwOEl9nmjN+SZOyU0zhG8iiPe3jWQAIq5lm3sGntyng+jLRPP0

fZ4XJVTncIvDOsJC5q+8SOs/Ae80EzC9NneK1/vP11YAMp4Tz7hVp0p/MBpdTxBV2V3r

ivxQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1725451743; x=1726056543;

h=to:subject:message-id:date:from:sender:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=bDHAKmhXrIu0N2xQWD4VDBzlzKWbcZlB4wcz0elGjyI=;

b=fD/a+TZNcSKLM+wl0ZM3LlhlsnenlMNTLeds42L5LK1B0mb+CFbdMUCbRI9QzzxQwA

bKE72ys1opeTc6TrS7uKavMMvs4GVScls6KOSxPNuxBZaS5F0bgIy2Vd1K90HD/UAT9E

lJQzn9YbAv7Mw99Y7xAvB+mC6KDh0TiboPACFlfY/STDD6aggwokOMimKtaca6hKrGdI

bv7wCluu9pBB9RDcIlyuGZlPLaD6qu0VuTxD79BsVVpsODjjaoeYGpoKeJVLLmMOp56V

JkUfNO3UqanXim3Mi9jwuRWP0/WLIt+/bn5M1DE8QP4l76UxYP6ZXAr+xiS4EQvaQ5Qw

/vzg==

X-Gm-Message-State: AOJu0YyiIPrEB2YtTFfER0mhbKJT60nHdgUGDQZ+99szLj8YcjeFp+sw

L20v0kEKBL6MO5B19l0vOp8vi2Zp+s53F8iE9IelHBQ1Ti25hhXMTtyRnPmiDpHHQmAQNdnrcr9

IqZMjjJmePnewA8UeiY39/az4OBeHtlBe

X-Google-Smtp-Source: AGHT+IFlyVUgJJLhR5ZzgDQXja7yZvZkZQ1Jp7LCyMICPpCZCWbbsiiAjC4QbvG+3Ue7DlLV3qx121RnWthKGOx1KXM=

X-Received: by 2002:a05:690c:fc5:b0:63b:f919:2e89 with SMTP id

00721157ae682-6db234a4282mr23445067b3.2.1725451743142; Wed, 04 Sep 2024

05:09:03 -0700 (PDT)

Received: from 1030813660740 named unknown by gmailapi.google.com with

HTTPREST; Wed, 4 Sep 2024 05:09:01 -0700

MIME-Version: 1.0

Sender: Taylor Stuart

From: Taylor Stuart

Date: Wed, 4 Sep 2024 05:09:01 -0700

X-Google-Sender-Auth: JrdIlUOkmRyUaPIwkNFZyyDnN38

Message-ID:

Subject: Ammundsenhomecare.Com, Gain Customers on Autopilot

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="0000000000003a2de006214a0a73"

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hey Ammundsenhomecare Team, I hope you are having a good day,

Imagine walking into a bustling market where everyone's glued to their phones.

That's how the online world works currently. Businesses with outdated strategies

are getting lost in the noise.



Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.196 listed in will-spam-for-food.eu.org]

[209.85.219.196 listed in will-spam-for-food.eu.org]

[209.85.219.196 listed in will-spam-for-food.eu.org]

[209.85.219.196 listed in will-spam-for-food.eu.org]

[209.85.219.196 listed in will-spam-for-food.eu.org]

[209.85.219.196 listed in will-spam-for-food.eu.org]

[209.85.219.196 listed in will-spam-for-food.eu.org]

[209.85.219.196 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.196 listed in dnsbl.ahbl.org]

[209.85.219.196 listed in dnsbl.ahbl.org]

[209.85.219.196 listed in dnsbl.ahbl.org]

[209.85.219.196 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.196 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.196 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.196 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.196 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.196 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.196 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[taylor.stuart7709807(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[taylor.stuart7709807(at)gmail.com]

1.0 OPT_OUT BODY: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

Subject: {SPAM?} Ammundsenhomecare.Com, Gain Customers on Autopilot



--0000000000003a2de006214a0a73

Content-Type: text/plain; charset="UTF-8"



Hey Ammundsenhomecare Team,





I hope you are having a good day,







Imagine walking into a bustling market where everyone's glued to their

phones. That's how the online world works currently. Businesses with

outdated strategies are getting lost in the noise.







It doesn't have to be you!







We're a team of digital professionals helping businesses dominate their

market.











Our secret weapons for your online boom:



- Engaging, impactful content

- Protecting online Reputation with vigilance

- Turning visitors into customers

- Targeting Local Optimization







Claim your NO-FEE website fix-it kit and growth plan by replying to this

email!







Don't miss your moment to dominate online.











Taylor Stuart

Relationship Manager

------------------------

PS: Suggest to Opt out.



--0000000000003a2de006214a0a73

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable










































face=3D"verdana, sans-serif" style=3D"">Hey Ammundsenhomecare Team,
<=

/span>


=3D"">


I hope you are having a good day,


in 0.0001pt">
rif">=C2=A0


g=3D"EN-IN" style=3D"">Imagine walking i=

nto a bustling market where

everyone's glued to their phones. That's how the online world works=

currently. Businesses

with outdated strategies are getting lost in the noise.


style=3D"margin:0in 0in 0.0001pt">
nt-weight:normal">=C2=A0

strong>


-serif">It doesn't have to be y=

ou!

">


g=3D"EN-IN" style=3D"">=C2=A0
an>


>We're a team of digital professiona=

ls helping

businesses dominate their market.


in 0.0001pt">
t face=3D"verdana, sans-serif">=C2=A0


"margin:0in 0in 0.0001pt">
lang=3D"EN-IN" style=3D"">Our secret weapons for your online

boom:






    =3D"margin-top:0in;margin-bottom:0in" type=3D"disc">


  • -IN" style=3D"">Engaging,

    impactful content



  • -IN" style=3D"">Protecting

    online Reputation with vigilance



  • -IN" style=3D"">Turning

    visitors into customers



  • -IN" style=3D"">Targeting Local

    Optimization


<=

font face=3D"verdana, sans-serif">=C2=A0


n:0in 0in 0.0001pt">
sans-serif">Claim your NO-FEE website fix-it kit and growth

plan by replying to this email!


n 0.0001pt">
if">=C2=A0


























































verdana, sans-serif" style=3D"">Don't m=

iss your moment

to dominate online.















Taylor Stuart


Relationship Manager


------------------------


PS: Suggest to Opt out.





--0000000000003a2de006214a0a73--

Web / SEO/ App spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 03 Sep 2024 08:09:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1slUCr-0000000053M-32oQ

for dave@doctor.nl2k.ab.ca;

Tue, 03 Sep 2024 08:08:29 -0600

Resent-From: The Doctor

Resent-Date: Tue, 3 Sep 2024 08:08:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f67.google.com ([209.85.217.67]:58707)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1slQtT-00000000CDd-1eOl

for sales@nk.ca;

Tue, 03 Sep 2024 04:36:21 -0600

Received: by mail-vs1-f67.google.com with SMTP id ada2fe7eead31-498dbd7dc89so1416236137.1

for ; Tue, 03 Sep 2024 03:34:20 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dowebnseo-com.20230601.gappssmtp.com; s=20230601; t=1725359654; x=1725964454; darn=nk.ca;

h=to:subject:message-id:date:mime-version:from:from:to:cc:subject

:date:message-id:reply-to;

bh=ouR5sUbXIHQnre/NPIM/2Rw6azotSoPnpmrEnDp+FYg=;

b=bayOIxdyLQ2zapIk6sQKC4CnMsAHivLjhB5FiPXL2k7eUaRGh2/IFBJeoI16v6qKeQ

NCWNHoEjc3W96mZqJiWYFZQUWw08KVuCGI2JW/5vdaQRrceIZuhBcSTScw6JtBwMVgnk

o6upmnLS+lsna0ZjZiKI2dvPicD9mANTPEjvLpLkZ/jv9Wp45hzaCtIVys/0CODS7BYW

NDlJ8TXmP3lkvk2WNu1yB8nAuf9/5AW/XEtnyFv4gv75kjQPU9uhLmzJ7Su2qRDMpOfd

RQblDSMhV8mEA/OlrN9AWcc+uVcP7kzRkKaazz+DchLI7QvndZXFzj6oySM8L4HGavEd

j8yQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1725359654; x=1725964454;

h=to:subject:message-id:date:mime-version:from:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=ouR5sUbXIHQnre/NPIM/2Rw6azotSoPnpmrEnDp+FYg=;

b=EXOFxqKCfgllwXuneWnMLggzXivryGtAMwf098Hq/0i8/IaNRKp4q4bYmoEX5mRm0H

GbdDSUtG7XrA3PWyWf5/gU0p7AB5oYMR9sXKzcO8gbKYCS/igHzASNw3th7j8ohwztbG

g5wny0UnZRK3OEY0jsS7lhU79e/kzaRCFXIuOSr9Oj3+Nujt5sskRDHv+VKS2JJYt+su

edSAIxl5v1XvrdxESdjVo+GZn7M1f7EIblSHAQhMRQ/jyMNtQNqwaP7KLF0L4577bWu7

83R/JjAY6zjW58yn79Qh9HngPqq/pRovXxNkMioAyxYCDwNlOuWFqilgerR5FjQxTrGz

cwtQ==

X-Gm-Message-State: AOJu0YzXZdYNntJ7a9Mw6tpFg69ecDGbGu85POWQgw7TdR84qAyfrq8E

GLlhm/z/Wu+aOONV8Vcnd6WHaebGl7CR6bRr/HGB04Jws7obawVWFgq/o9ChyL4bvU8SpyUJUhl

jXvgm9fbmPR/6EJJNqP2B/zquLaLqGB2x8nqU28LG0HTClazBxuQ=

X-Google-Smtp-Source: AGHT+IEsdDBTbsL8CMT6WZTDjyRxeuAwbAdSWYLPKLenMV9Do3bS557iPbZu/wSoAxrK5Uwn4wrP1PiwnnUs/CyDhUY=

X-Received: by 2002:a05:6102:c46:b0:493:eebc:d77d with SMTP id

ada2fe7eead31-49a779b68eamr6740100137.15.1725359654365; Tue, 03 Sep 2024

03:34:14 -0700 (PDT)

Received: from 577067994061 named unknown by gmailapi.google.com with

HTTPREST; Tue, 3 Sep 2024 03:34:14 -0700

From: michael@dowebnseo.com

MIME-Version: 1.0

X-TM-MESSAGE-ID: 66d694648f01a27abf66515c__66d5a3568f01a27abf6332d4

Date: Tue, 3 Sep 2024 03:34:13 -0700

Message-ID:

Subject: About nk.ca

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="0000000000004efb5d062134997e"

X-Spam_score: 6.8

X-Spam_score_int: 68

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello Team: nk.ca , We hope you are doing

well. Are you ready to take your nk.ca to the next level?

Our comprehensive services are designed to ensure your site stays secure,

is up-to-date, and performs at its best.



Content analysis details: (6.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.217.67 listed in will-spam-for-food.eu.org]

[209.85.217.67 listed in will-spam-for-food.eu.org]

[209.85.217.67 listed in will-spam-for-food.eu.org]

[209.85.217.67 listed in will-spam-for-food.eu.org]

[209.85.217.67 listed in will-spam-for-food.eu.org]

[209.85.217.67 listed in will-spam-for-food.eu.org]

[209.85.217.67 listed in will-spam-for-food.eu.org]

[209.85.217.67 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.217.67 listed in dnsbl.ahbl.org]

[209.85.217.67 listed in dnsbl.ahbl.org]

[209.85.217.67 listed in dnsbl.ahbl.org]

[209.85.217.67 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.217.67 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.217.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.217.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.217.67 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.217.67 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.217.67 listed in wl.mailspike.net]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} About nk.ca



--0000000000004efb5d062134997e

Content-Type: text/plain; charset="UTF-8"



Hello Team: nk.ca ,



We hope you are doing well.



Are you ready to take your nk.ca to the next level? Our

comprehensive services are designed to ensure your site stays secure, is

up-to-date, and performs at its best.



Offer: Website Maintenance SERVICES

Free Hosting and premium website Hosting

Maximum Support Hours & 3rd Party Web Hosting Help

Malware Removal, Website Security, and Regular Scans

Content Updates & Page Repairing in case of Damage

Monthly Backups & Detailed Reports

CMS/WordPress Support, E-commerce Site

Support, on-page SEO Work

Graphic Design, Form Creation, and

Script Installations



And many More...



Let us take care of the details so that you can focus on your business.



If you're interested in our service, please respond, and we will send you

our price list and detailed proposals.



Contact us today to get started!



Waiting for your reply



Regards,

Michael Johnson

Sr. Development



--0000000000004efb5d062134997e

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello Team: nk.ca,



We hope you are doing well.=C2=A0=C2=A0



Are you ready to take your nk.ca
trong> to the next level? Our comprehensive services are designed to ensure=

your site stays secure, is up-to-date, and performs at its best.=C2=A0



Offer: Website=

Maintenance SERVICES

Free Hosting and premium website H=

osting
Maximum Support Hours & 3rd Party Web Hosting Help
Malware=

Removal, Website Security, and Regular Scans
Content Updates & Page=

Repairing in case of Damage
Monthly Backups & Detailed Reports
C=

MS/WordPress Support, E-commerce Site
Support, on-page SEO Work
Graph=

ic Design, Form Creation, and
Script Installations=C2=A0



And many More...



Let us take care of the details so that you can focus on your business.=

=C2=A0



If you're interested=

in our service, please respond, and we will send you our <=

span style=3D"color:red;background-color:yellow">price list and det=

ailed proposals.
=C2=A0



Contact us today to get started!=C2=A0



Waiting for your reply=C2=A0



Regards,
Michael Johnson

>Sr. Development



=C2=A0




=3D66d694648f01a27abf66515c__66d5a3568f01a27abf6332d4" width=3D"1" height=

=3D"1">



--0000000000004efb5d062134997e--