Google Spam - 28 | NetKnow Corporate Blog

Donation spam from Google

Posted by Dave Yadallee on Thursday, July 21. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 21 Jul 2022 06:37:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oEVQE-000ATq-Is

for dave@doctor.nl2k.ab.ca;

Thu, 21 Jul 2022 06:36:54 -0600

Resent-From: The Doctor

Resent-Date: Thu, 21 Jul 2022 06:36:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f177.google.com ([209.85.128.177]:34703)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oETgV-000P1W-7a

for doctor@doctor.nl2k.ab.ca;

Thu, 21 Jul 2022 04:45:39 -0600

Received: by mail-yw1-f177.google.com with SMTP id 00721157ae682-31e64ca5161so12833207b3.1

for ; Thu, 21 Jul 2022 03:45:17 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=e047WwU2fDx/mNGnrXF1pZ9Wra/A3YqcxDLaz45xIuM=;

b=PYRnm2w0VonUo9hBEG9MLQhDhTWH4cGhRNNQ4P90Q4SAT/HCe6u8d7kTKvj9MCa/oy

B28rgxPvsvn/VNnx34GVMRRREetUHpPGsFlEjuWhQSnPFmSHD9tfcxBywHY/VlhnE34i

LWm1QYm8Wm0lK4MiCM8BSxLQZp/pYWCp4DT+RDv7mmVO0aWsoLb/3SVWApVwoqB92xEZ

WIPTikv5XRFXhb6hPopvZaDefYbMM2HiX4bex6/wJydaHO5hca6HMyCl87hEzU94vuYD

reGBAapcJ7Mw+ACb5ieIRe/xjE0Bnx8kZ/+JrNKPDgiAoy05v3laMrvGV/8fMua02fk9

+ejA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=e047WwU2fDx/mNGnrXF1pZ9Wra/A3YqcxDLaz45xIuM=;

b=htnzx18R5aX1XE9pWbjFlBo0cFEXVtWy1+LtId5280AwkjDCmKtiBelntJ0WqqD26g

q0uZnm1LjZzW/KiAKdGzZ9Ft7MJGN8cZqpAhGzmYt+RjRn1EHWzgQ5WcXDrP9b/bD5zS

NgU04EJLsvPeSnxb3fHxWQRJGz4KI8VzasvDnfRCjlg0p5chP+F7cWSgWRK2bTBrg7I1

6+44i25FSpfZy4XcM6BHR990LlhdTrk4fOGO0KNSB9eSvwaZOEm4YW9+YOFkBl7XwbTQ

aedpjktl7RxKq3xakm4Xmzv2mkT4Hee0eLNCy79vFaJ3JHLiBzb4vBfFhkInmOJ5dHpk

5H4w==

X-Gm-Message-State: AJIora+D5AHJ6nlBkM3xvwm22sPwDLGCRmBiPq7CLwGbwOjqYfBm4zbi

U6pfyhZsGzxBOL/3RiQqU7EtznxGurDOhccyGRM=

X-Google-Smtp-Source: AGRyM1uqLoIhOrIz4khRx+Vj69D0xSipVKLVRxLFK7Fz2ElsqxTvBeUhulZZLCSMAoqVIUAA6Q1PIdi34QCbiwHHmTo=

X-Received: by 2002:a81:6a83:0:b0:31e:65a5:dae3 with SMTP id

f125-20020a816a83000000b0031e65a5dae3mr9992373ywc.148.1658400311830; Thu, 21

Jul 2022 03:45:11 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:7010:a42a:b0:2e8:a87f:2852 with HTTP; Thu, 21 Jul 2022

03:45:11 -0700 (PDT)

Reply-To: ma.mugan10@gmail.com

From: Marie Mugan

Date: Thu, 21 Jul 2022 10:45:11 +0000

Message-ID:

Subject: Re: DONATION FOR CHARITY WORK

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: -- Be Bless As You Read. Greeting, I have donation to make

under your supervisor for charity work Contact me for more details. Best

Regard, Mrs Marie Mugan.

Content analysis details: (5.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.177 listed in wl.mailspike.net]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[ma.mugan10[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[mryawoadama[at]gmail.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to

Subject: {SPAM?} Re: DONATION FOR CHARITY WORK

--

Be Bless As You Read.

Greeting, I have donation to make under your supervisor for charity

work Contact me for more details.

Best Regard,

Mrs Marie Mugan.

Urgency Spam from Gmail

Posted by Dave Yadallee on Thursday, July 21. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 20 Jul 2022 17:33:01 -0600

Received: from mail-ua1-f41.google.com ([209.85.222.41]:43705)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oEJAX-000Myd-TD

for dave@doctor.nl2k.ab.ca;

Wed, 20 Jul 2022 17:31:57 -0600

Received: by mail-ua1-f41.google.com with SMTP id x31so91104uaf.10

for ; Wed, 20 Jul 2022 16:31:30 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=Snqf+KOjVz9y7IFzPxxzmve+1+Xqd1FO2oKdsFFq+ck=;

b=oBPrz4cXoZfTbKWZN1jKrky2GG6+VB4JaJ4A6Ljdr5KIX5/fHe8lB+6tbpRVhjP2R/

AEvPlCBy7Ugle7BJtJcbTPJBJutOtbcQyYevRHWHN0YqiC1v1fhIE7euCq9zzHSgzKjs

5MmFhNTfrPM7X9LkwySie2+nhCZQ/Gkkr34cljGAqilIJpp0DgFhYrjmllTsH+zOmilk

7BSMnLghYZL3u0846iG79XdMGXDxI+Wes6fVc7vCKbnOZNDYsx0/+DODAsBTMyfchO+x

jL5ZeTZjgtaA+eMwGOgLwhrdXpKxj3yw4eqlpf9LTpdihJoZqo5LxIRm1z7jzkxNL8Y6

n3lg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=Snqf+KOjVz9y7IFzPxxzmve+1+Xqd1FO2oKdsFFq+ck=;

b=DsAty6xeP7x/rQwHR/jPGyM6+cBR3GSp7/V3PT6mN2uVn+R8etcLLNImh3dz1KXnSp

7AGn1HyyGIUB9SzqSlWs18dVXiUk0WGk2PuAwfSM22k0Ngww8DwEhrTLmuOoUMAcJ02T

V/AwY3bFBjzudALQk1BMOEoCG8EH4An2u74CAdUcMqIGf8EiCS+76rTPF7r4xKI8u9PV

LTiFfSDTpsOMtew4y5MxSUSnpV1iNKR7T+XEzYQQ6T0W1fslj7X+AfA0F36FXL+uum/F

gW2HvSA9FUlYJpLoWPkMdrG39tyRvo0ES0xbsbMsn032IQGz6KU0oj00z9v9BfNMS9BZ

tddg==

X-Gm-Message-State: AJIora+R0PC+LLgEJuw+kPMtUpcn/fSYK4BLFgttZdMHfo/+YbZvflPm

KQwUR3/Otan5dotKENs4yX+khT1TmpY2AtjJFn4=

X-Google-Smtp-Source: AGRyM1vYBZAuvAvjVdxm1LPS5Y+rosS1akxWOTwvMqiigLbJXDcPio097qSzgtY4KZ6io76wFilXwKTapyoDpQL6H80=

X-Received: by 2002:ab0:437:0:b0:384:2219:bc5c with SMTP id

52-20020ab00437000000b003842219bc5cmr4505877uav.52.1658359884405; Wed, 20 Jul

2022 16:31:24 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a59:a4c4:0:b0:2d4:a12c:da9a with HTTP; Wed, 20 Jul 2022

16:31:24 -0700 (PDT)

Reply-To: offfiicee@outlook.com

From: "Chester R. Ellis"

Date: Thu, 21 Jul 2022 00:31:24 +0100

Message-ID:

Subject: Hello

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: dave@doctor.nl2k.ab.ca

Hello,

I have sent you mails, but still have not received a response. Kindly

get back to me for a mutual benefit transaction.

Thank you.

Chester R. Ellis

Urgency spam from Google

Posted by Dave Yadallee on Wednesday, July 20. 2022

compensation spam from Google

Posted by Dave Yadallee on Wednesday, July 20. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 20 Jul 2022 16:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oEIZn-000KLr-3w

for dave@doctor.nl2k.ab.ca;

Wed, 20 Jul 2022 16:53:55 -0600

Resent-From: The Doctor

Resent-Date: Wed, 20 Jul 2022 16:53:55 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-io1-f67.google.com ([209.85.166.67]:34623)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oEIG4-000IEc-H3

for doctor@doctor.nl2k.ab.ca;

Wed, 20 Jul 2022 16:33:37 -0600

Received: by mail-io1-f67.google.com with SMTP id x64so49260iof.1

for ; Wed, 20 Jul 2022 15:33:15 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=Pm4blNEiUxJ7PFHd/MXl1FNU61P4zcnPR71aelKdwEA=;

b=Uz1ev+iKQUKZQZyUSRBcYA3++eSvl6/d5c4lmSN2H5lpZ+H6a4Wmi6hxiOMCWcZR2s

f2jgbpqzhuH/IrRKxydzAK9o9LrskBFQnhaf/pJeO30lxyPdhtNtwK2SjtKaiP4sWrZd

oi95I++EXtXiXlsksWfXuoMRv627VP8dw/TgyLIKoejSidm7j+62De5FIf3sG+0AMQlH

eyhVDyIBDCkl6v38reDJKzQxyM3r3bHcK0ghv1dNTobDn2cr/sxRXW0znjuYlsNutC1L

YyU0BiGugmEW0AVlhW1nw76IV4OcwJHarbKjXI3SLJYcsDrendRgYvEibrrMa8eYCIjM

ZsOQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=Pm4blNEiUxJ7PFHd/MXl1FNU61P4zcnPR71aelKdwEA=;

b=y5chJsoXSXQlm3aigWWgG8DqfxDeRJggbm3ntg3Vfkh99YA3bgWLT/Lf7PzafkUETX

Iemx+N+qVXdEcJO+Wsvtm88ZlpJl6+70vZpCESfhHoxdBUTA5E6H5rzyo5EuxdLNXqmN

WN8a4swbM8ia+hvhEHoULg7GvDNHGPv9DCBkqa0vBKG5ThS8iWqmMchJeFhd/75Fhl3S

EassCbEDOfLKze9qdoQzzsnr0PjHCArkHhEwvrrbB4XmgkTD+I0e5lD4cnHzl8b5Cmo0

brX68dwSMHctlcx7W+bhgPJY04pVBu3Il5vBau0uX6o33i9ckPwch20qt2bM8nAQlbp1

8biQ==

X-Gm-Message-State: AJIora/DoNskixA6+i0zaDLDFY7066O4fGCrDx0SCaCBwO1yJsyxIUwx

hjftuNduDCgCIm+iaIY35cnuoxLCOyoRVnZGL7A=

X-Google-Smtp-Source: AGRyM1sP1B9cMQFbcuTA161VV0q8tllNu3PDnDYuVdhqURlLru8oFL9pSXRdwb1CmSHF8wNh6vhmAaiRELc41WUYsQI=

X-Received: by 2002:a05:6638:240b:b0:341:4b32:4b4f with SMTP id

z11-20020a056638240b00b003414b324b4fmr15325491jat.185.1658356389063; Wed, 20

Jul 2022 15:33:09 -0700 (PDT)

MIME-Version: 1.0

Reply-To: jmxx1973@hotmail.com

From: "UN/IMF/OFFICE"

Date: Wed, 20 Jul 2022 23:33:45 +0100

Message-ID:

Subject: RE: GOOD NEWS (CLAIM YOUR COMPENSATION FUND) REPLY URGENTLY

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000007b345405e4442fb2"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 27.7

X-Spam_score_int: 277

X-Spam_bar: +++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dear Beneficiary, This is to inform you that the united state

government authority (USA) in collaboration with the International Monetary

Fund (IMF) has been alleged to monitor all transactions. I hereby advise

you to stop whatever transactions you are Having in regards of your fund.

This information is reaching you because from our intelligent unit we discovered

that you have been involved i [...]

Content analysis details: (27.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 HK_RANDOM_FROM From username looks random

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.166.67 listed in wl.mailspike.net]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[jmxx1973[at]hotmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[babaayiumar[at]gmail.com]

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

1.5 HK_SCAM_N8 BODY: No description available.

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 HK_SCAM No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

1.5 MONEY_ATM_CARD Lots of money on an ATM card

0.0 FILL_THIS_FORM Fill in a form with personal information

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

0.0 MONEY_FORM Lots of money if you fill out a form

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

1.8 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of

money

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} RE: GOOD NEWS (CLAIM YOUR COMPENSATION FUND) REPLY URGENTLY

--0000000000007b345405e4442fb2

Content-Type: text/plain; charset="UTF-8"

Dear Beneficiary,

This is to inform you that the united state government authority (USA) in

collaboration with the International Monetary Fund (IMF) has been alleged

to monitor all transactions.

I hereby advise you to stop whatever transactions you are Having in regards

of your fund. This information is reaching you because from our intelligent

unit we discovered that you have been involved in a transaction with

Internet Fraudster.

Based on a closed door-meeting held by all stakeholders regarding your bad

experience with the Internet Fraudster. However, a sum of (US$1,200,000.00)

has been approved to compensate all Scam Victims Across the world by the

above mentioned Organizations? We unanimously agreed to pay you Via ATM

MASTER CARD / BANK DRAFT for the safety of the said amount as compensation

for Scam Victims across the world.

You are advised to provide this office with your full details such as Your

Name, Cell Phone Number, Occupation and your Current Home Address where

your ATM MASTER CARD / BANK DRAFT will be delivered to you for security

reasons, get back to us for easy communication through our office

email: ( *IMF.1932_usa@consultant.com

*) as We have been given 14 working days to

get your ATM MASTER CARD / BANK DRAFT delivered to you by all the

Stakeholders.

Yours in Service,

Antonio Guterres

Head Of Operation

--0000000000007b345405e4442fb2

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

ne-height:normal;font-size:11pt;font-family:Calibri,"sans-serif""=

>
t;serif"">

Dear Beneficiary,

ize:11pt;font-family:Calibri,"sans-serif"">
ze:12pt;line-height:115%;font-family:"Times New Roman","seri=

f"">

This is to inform you that the united state government authority (USA) in

collaboration with the International Monetary Fund (IMF) has been alleged t=

o

monitor all transactions.

I hereby advise you to stop whatever transactions you are Having in regards=

of

your fund. This information is reaching you because from our intelligent un=

it

we discovered that you have been involved in a transaction with Internet

Fraudster.

=C2=A0Based on a closed door-meeting held by all stakeholders regarding you=

r

bad experience with the Internet Fraudster. However, a sum of (US$1,200,000=

.00)

has been approved to compensate all Scam Victims Across the world by the ab=

ove

mentioned Organizations? We unanimously agreed to pay you Via ATM MASTER CA=

RD /

BANK DRAFT for the safety of the said amount as compensation for Scam Victi=

ms

across the world.

You are advised to provide this office with your full details such as Your

Name, Cell Phone Number, Occupation and your Current Home Address where you=

r

ATM MASTER CARD / BANK DRAFT will be delivered to you for security reasons,=

get

back to us for easy communication through our office email: ( =C2=A0=

I","sans-serif";color:rgb(0,32,96);background-image:initial;=

background-position:initial;background-size:initial;background-repeat:initi=

al;background-origin:initial;background-clip:initial">
.1932_usa@consultant.com">IMF.1932_usa@consultant.com
tyle=3D"font-size:12pt;line-height:115%;font-family:"Times New Roman&q=

uot;,"serif"">) as We have been given 14 working

days to get your ATM MASTER CARD / BANK DRAFT delivered to you by all the

Stakeholders.

Yours in Service,

Antonio Guterres

Head Of Operation
uot;;background-image:initial;background-position:initial;background-size:i=

nitial;background-repeat:initial;background-origin:initial;background-clip:=

initial">

--0000000000007b345405e4442fb2--

Donation spam from Google

Posted by Dave Yadallee on Wednesday, July 20. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 20 Jul 2022 07:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oE9gh-0003hO-Ba

for dave@doctor.nl2k.ab.ca;

Wed, 20 Jul 2022 07:24:27 -0600

Resent-From: The Doctor

Resent-Date: Wed, 20 Jul 2022 07:24:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yb1-f196.google.com ([209.85.219.196]:43799)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oE6CQ-000BDf-12

for root@nl2k.ab.ca;

Wed, 20 Jul 2022 03:41:07 -0600

Received: by mail-yb1-f196.google.com with SMTP id f73so30938490yba.10

for ; Wed, 20 Jul 2022 02:40:40 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=PbR3jcqmCLF3oPk0jd4hIlGH4S3hgjxzTsYV7ikywYg=;

b=pqDM59xnbO4ZlLRt3aOUWKRcYi3uLFPRjyTWOYr7JxnZMDcag3pBHcHY5LHlieAqeG

+RJlYsAOoDKjF+pwnOHatx375fy4RcJ79f0Jy6PWphqraemMRiboSrpAybaE5fzrqa8Z

TLrMBL2EC3BwpjAOKvrH7k/p18ci50naO61fnZkv0mZYpApErjW/MEQkOFvoUFJ2wUdc

RtvfGA3ENjXJQmVRKPVdDHE6BiTe9zUj4IeacflnM9H4+HJ0/8aVeLE/KKk3G11ygKsg

GVywsQZByeSXxCmSHVhDxA3NytvrxBSj+PZCNZE/OyR1EnR6UGfqngoVoNIBrS90yD8p

Q0dw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=PbR3jcqmCLF3oPk0jd4hIlGH4S3hgjxzTsYV7ikywYg=;

b=OQ+6oV8cQQY4HvYt9o18UM/XAaiDLC1/GLQW+xDvijrzKPdIyWpNLj7Pas2E0JyTbU

0fAEWNAIf/AGjeRlFKbacDu0bmab3GI8mtSLUnISW+uk204tvdYYk8YWEkVvxBwkNvrp

xeQ0nQZy0mqb0kTjQWSLsQBnja0bK2yyELCbCcjsb75hkXULzSoG5/fVT6PVNERepW51

rKF+GnB5d9hkgQgINKLo1aVF6Bv8Vl6RbdVzNZ4IBw6KLNV8boUA298Y9QdmI/YjBk0C

S0lIHTxsM/Ng5y2TN2I4NUDXxrO1i72Ibb5sYrXP+5BSe5EAxZY21MiBY+LpD0cjwHjG

DM5A==

X-Gm-Message-State: AJIora/Ok8zE+BTgkUbZVOTaBq2yqxfspaipKZ8hb+z0x8VW96w4QSFS

X79uNYLdNEl1zqXiQVjQEs3LH1GJrgccJs4UbrE=

X-Google-Smtp-Source: AGRyM1tLNBeP6NSpbPl977v2kmxGUpcSrZ8MSN/D6g51rIveZfGrG4cdlMFWQi2neAZQPFBEW+a2riIUbOIAXufYUNI=

X-Received: by 2002:a25:32d2:0:b0:66e:c56d:4f94 with SMTP id

y201-20020a2532d2000000b0066ec56d4f94mr34059369yby.340.1658310034707; Wed, 20

Jul 2022 02:40:34 -0700 (PDT)

MIME-Version: 1.0

Reply-To: emiliamayer88@gmail.com

From: Emilia Mayer

Date: Sat, 16 Jul 2022 23:33:01 +0000

Message-ID:

Subject:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000008bde9905e4396480"

Bcc: root@nl2k.ab.ca

X-Spam_score: 13.1

X-Spam_score_int: 131

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Beloved I apologize for intruding into your privacy, especially

by contacting you through this means for an important offer, how are you

and your family over there? My name is Emilia Mayer. I want to donate m [...]

Content analysis details: (13.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.196 listed in wl.mailspike.net]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[emiliamayer88[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[wiyaomagliwe1999[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[wiyaomagliwe1999[at]gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 T_MONEY_PERCENT X% of a lot of money for you

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?}

--0000000000008bde9905e4396480

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Beloved

I apologize for intruding into your privacy, especially by contacting you

through this means for an important offer, how are you and your family over

there? My name is Emilia Mayer. I want to donate my inheritance to the less

privileged people in the society. I work as a contractor and business

woman. I want to donate my inheritance to the less privileged people in the

society. I live alone and have no family, relatives or children. I lost my

beloved husband and two kids in a terrible car accident. I am suffering

from Stomach Cancer and have undergone a series of cancer treatments but to

no avail, I am presently in a special Government hospital for a cancer

operation. After the test result, my doctor said that I have a short time

to live, for this reason I got your email address on the internet and I am

contacting you because I have no option again. I save my personal money,

the sum of 7.5Million Euros in the Bank now that I have a short time to

live. I want you to stand as my representative in your country and build

either Mosque or church for people over there in your city or help any

orphanage home or poor people with my money. If you can accept to be my

representative then I will give you 30% of the total amount as your

commission and you will use the balance 70 % for the project. Please I need

an honest person who will take very good care of this project. If you are

capable of handling this project, then I will tell you further steps to

take. I suffer a lot in my life and I am very much afraid of dying without

knowing the destination of my property, I hardly sleep at night and during

the day because I do not want to die without having donated all the

property I have, otherwise I think it would be a mess.

Hope to hear from you even if you=E2=80=99re not interested in this email a=

ddress. (

emiliamayer88@gmail.com )

Regards

Emilia Mayer

--0000000000008bde9905e4396480

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Beloved

s=3D"MsoNormal">I apologize for intruding into your privacy, especially by =

contacting you through this means for an important offer, how are you and y=

our family over there? My name is Emilia Mayer. I want to donate my inherit=

ance to the less privileged people in the society. I work as a contractor a=

nd business woman. I want to donate my inheritance to the less privileged p=

eople in the society. I live alone and have no family, relatives or childre=

n. I lost my beloved husband and two kids in a terrible car accident. I am =

suffering from Stomach Cancer and have undergone a series of cancer treatme=

nts but to no avail, I am presently in a special Government hospital for a =

cancer operation. After the test result, my doctor said that I have a short=

time to live, for this reason I got your email address on the internet and=

I am contacting you because I have no option again. I save my personal mon=

ey, the sum of 7.5Million Euros in the Bank now that I have a short time to=

live. I want you to stand as my representative in your country and build e=

ither Mosque or church for people over there in your city or help any orpha=

nage home or poor people with my money. If you can accept to be my represen=

tative then I will give you 30% of the total amount as your commission and =

you will use the balance 70 % for the project. Please I need an honest pers=

on who will take very good care of this project. If you are capable of hand=

ling this project, then I will tell you further steps to take. I suffer a l=

ot in my life and I am very much afraid of dying without knowing the destin=

ation of my property, I hardly sleep at night and during the day because I =

do not want to die without having donated all the property I have, otherwis=

e I think it would be a mess.

Hope to hear from y=

ou even if you=E2=80=99re not interested in this email address. (
"mailto:emiliamayer88@gmail.com">emiliamayer88@gmail.com )

=3D"MsoNormal">=C2=A0

Regards

ormal">Emilia Mayer

--0000000000008bde9905e4396480--

Urgency spam from Google

Posted by Dave Yadallee on Tuesday, July 19. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 19 Jul 2022 15:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oDv9U-0007Lw-Ke

for dave@doctor.nl2k.ab.ca;

Tue, 19 Jul 2022 15:53:12 -0600

Resent-From: The Doctor

Resent-Date: Tue, 19 Jul 2022 15:53:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f175.google.com ([209.85.221.175]:45727)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oDokO-000IV9-Bw

for sales@nk.ca;

Tue, 19 Jul 2022 09:02:55 -0600

Received: by mail-vk1-f175.google.com with SMTP id c185so5626768vkh.12

for ; Tue, 19 Jul 2022 08:02:31 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:from:date:message-id:subject:to;

bh=gK2ciwQ10qX5dUQC8tzzCCOy+jGCLVif5z04S23RW9Q=;

b=i0fwCzQCCYLUd42PHi5dyg1U+A1OdYx+z5tujV6frvvVZeYRm5hrSbZybQCXy4eXkL

WVvM3VNq/m7SuVF54YZgRcXTe6PHG8ZlpQLs6rL6z+zSTa65niCUY0JC+Y5CT8WABWXZ

pthCxVtJE0M0XuR13sUvvdBYPW93Crwh/m+b4yRyx1VBYWsUirOP1AtBo6oXXJRwUmNS

VELq/DY+dCFjm+Qj63cOkA+lid8uyEPKNmINaoqCfjBrXmVMoGz0yKay7hTTuzAdgDGO

0wXjndR/bSXlRT5raZLtgEDa+XhwQqHgQ8WLdOmskZS8T7blMJAvzkJWOBR9I1CXmDFX

TJvg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:from:date:message-id:subject:to;

bh=gK2ciwQ10qX5dUQC8tzzCCOy+jGCLVif5z04S23RW9Q=;

b=BUxxuPvau7tJRRlziMILfRSTzmakJ7Ftd5/SVAYbpet/RXh8uQLkwYRQr2NRBQKOU3

vZxgA/+4uFK73MYvsuiCarWuNQqnlSRxRj8Y6Dv8LJKEPFrY/C35wA8wk4PEA7rEUTl0

KmMVMj3BJrqh9fVGRc7Ag+AuLP1Wl6K5ixdaJva4TFUo2Wn0m4mzlY2hYovR05M4RZ6I

y4QMDBhZfBMm3930gujsqOVk/E1SFzHArC0MT3yoojPUnNln7yA5ZggAZLq0Ph2zpLku

zBx2mG29KbZz03tX0vP7wSi5LFVrYzxlHIZWlemCRUTL/RMkXY9s6xrHhewDpKsQ9es/

OcVg==

X-Gm-Message-State: AJIora9WhcIfNBlIq+6MDCRSeij03OOBG20nkNjgMVkrq59H2w3BTVQv

X2fRFYygZNxp3m7rWfzOPlQJbMMrwH63wp+mgEg=

X-Google-Smtp-Source: AGRyM1uk/ABI2YCNKp7JdQTvxcQ9j5f/VO4gd56PVW6jdA4g9ILMuGnmMHoaBDuS0OZqqOE1SLb5UMEN0btBqAeJOPQ=

X-Received: by 2002:a1f:2fcc:0:b0:370:da7f:788d with SMTP id

v195-20020a1f2fcc000000b00370da7f788dmr11804980vkv.17.1658242945029; Tue, 19

Jul 2022 08:02:25 -0700 (PDT)

MIME-Version: 1.0

From: kristen griest

Date: Tue, 19 Jul 2022 15:02:08 +0000

Message-ID:

Subject:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000b09bc405e429c5e8"

Bcc: sales@nk.ca

--000000000000b09bc405e429c5e8

Content-Type: text/plain; charset="UTF-8"

--

Good day,how are you today

--000000000000b09bc405e429c5e8

Content-Type: text/html; charset="UTF-8"

Good day,how are you today

--000000000000b09bc405e429c5e8--

Google spam sent to other unknown users

Posted by Dave Yadallee on Tuesday, July 19. 2022

Good day,how are you today

--000000000000b09bc405e429c5e8--

More Nigerian Spam from Gmail

Posted by Dave Yadallee on Monday, July 18. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 18 Jul 2022 08:57:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oDSAi-0009Vo-BC

for dave@doctor.nl2k.ab.ca;

Mon, 18 Jul 2022 08:56:32 -0600

Resent-From: The Doctor

Resent-Date: Mon, 18 Jul 2022 08:56:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f48.google.com ([209.85.167.48]:45782)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oDS7D-00082g-IC

for sales@nk.ca;

Mon, 18 Jul 2022 08:53:00 -0600

Received: by mail-lf1-f48.google.com with SMTP id d12so19729164lfq.12

for ; Mon, 18 Jul 2022 07:52:38 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=Nwiwx3iWV2W406jPPgWnadDK+6JC23u7Ske0EVk36gQ=;

b=VmWmnfXT2Jv1wNRv08lO/Y097tIzgD8pvCZTQjfhgGyQUtFzP3dvTLZ30jGkguMejl

FqSWiMENFASyg32qLfVEIKwjlmxM6HabnF5BWxicDFtqH7i8EKa8mzmx6lcTFtlD+e1n

z43i+q754Ee9tN9e88N4Yv9aTWwdseBPKLb9ZCJP8eNwwfyxwRvLkHSenlHrfEpSNtWE

0M3uebCj7tdvSkEwuv8zG5GHUfzb8L2XJuMeFDBuYcm/U9AgvxmBW2cp2cxXfo7cBhYb

Qfje+qOZrH6FvDYQD/4xINmsv3tp8U8H4U9W3cWi60PJQYypsmI282UId1yDPvtPzeeC

s2xw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=Nwiwx3iWV2W406jPPgWnadDK+6JC23u7Ske0EVk36gQ=;

b=Ji5BfhqZuuIM1STzT7ufreHBJbfoAsVN6xd69WHP2tGVXsfjoDv+5rWJHMiOdEoz9/

dJTshxv7hjXi5AoHg3PXgcxkM6g1ZK6VfO6BHkivym77ROSXpuvZ4D8Fd/TTUvW87QFb

XtCwkg4my/nBuI2nIvNyTQ65299vXlVmTCbqqCYOCx3+uTkVtMVWCM2hutmMidjRNfn5

Al7hANlZcXpJaGh5HkQrkHbT16ISV8Bal0MHE7qOc8INqCdRS2Ga2QTmdxGba5OiFZVY

cYz9gE8cr1lLIuim28jtKURIqgSlL+bFPfxLGF8k94KbS19rCRpOSQjsshtJwZXGF90Y

3WJg==

X-Gm-Message-State: AJIora/kV+C/KLt3UsymnCycIS/JWmMicJGgHPjoL2NFPcpxRTtUulsr

ITuDK4nNkEBNmO6cqEr8f49/Mmz25rBa7UNd8Ek=

X-Google-Smtp-Source: AGRyM1tKCkBCHzICsd3c3ldWzkJ5Ox04RlEl+r/L/NnXNUypJkvOsV0xBqKvF2sySiNnBJQKnfDYyBwC1HK/U4ASTxg=

X-Received: by 2002:a05:6512:2806:b0:489:e73c:f5e8 with SMTP id

cf6-20020a056512280600b00489e73cf5e8mr14651361lfb.581.1658155950913; Mon, 18

Jul 2022 07:52:30 -0700 (PDT)

MIME-Version: 1.0

Reply-To: mrsshawnancy@gmail.com

From: FROM NANCY SHAW

Date: Mon, 18 Jul 2022 16:52:07 +0200

Message-ID:

Subject: Dearest One Please Be Honest

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000006fbc0a05e41584e9"

Bcc: sales@nk.ca

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Good day, My name is Mrs. Nancy Shaw, I am 75 years old and

was diagnosed with cancer about four years ago, immediately after the death

of my husband. As I lay on my sick bed, I have chosen you for my giving Pledge

Donations of 5.5m US for Charities. I want you to help me in carrying out

my last wish on earth which will also be very profitable to yo [...]

Content analysis details: (7.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.48 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[infonsure33[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[infonsure33[at]gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_HK_NAME_FM_FROM No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Dearest One Please Be Honest

--0000000000006fbc0a05e41584e9

Content-Type: text/plain; charset="UTF-8"

Good day,

My name is Mrs. Nancy Shaw, I am 75 years old and was diagnosed with

cancer about four years ago, immediately after the death of my husband.

As I lay on my sick bed, I have chosen you for my giving Pledge Donations

of 5.5m US for Charities. I want you to help me in carrying out my last

wish on earth which will also be very profitable to you.

Please for further information contact me ASAP on my private Email:

mrsshawnancy@gmail.com

Regards,

Mrs. Nancy Shaw

--0000000000006fbc0a05e41584e9

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

:Helvetica,Arial,sans-serif">Good day,

lor:rgb(0,0,0);font-size:13px;font-family:Helvetica,Arial,sans-serif">

lear=3D"none" style=3D"color:rgb(0,0,0);font-size:13px;font-family:Helvetic=

a,Arial,sans-serif">
ily:Helvetica,Arial,sans-serif">My name is Mrs. Nancy=C2=A0 Shaw, I am 75 y=

ears old and was diagnosed with cancer about four years ago, immediately af=

ter the death of my husband.

0,0);font-size:13px;font-family:Helvetica,Arial,sans-serif">

ne" style=3D"color:rgb(0,0,0);font-size:13px;font-family:Helvetica,Arial,sa=

ns-serif">
ica,Arial,sans-serif">As I lay on my sick bed, I have chosen you for my giv=

ing Pledge Donations of 5.5m US for Charities. I want you to help me in car=

rying out my last wish on earth which will also be very profitable to you.<=

/span>

ly:Helvetica,Arial,sans-serif">

;font-size:13px;font-family:Helvetica,Arial,sans-serif">
r:rgb(0,0,0);font-size:13px;font-family:Helvetica,Arial,sans-serif">Please =

for further information contact me ASAP on my private Email:=C2=A0=C2=A0
pan>
o:mrsshawnancy@gmail.com" style=3D"color:rgb(151,155,167);font-size:13px;fo=

nt-family:Helvetica,Arial,sans-serif">mrsshawnancy@gmail.com
=3D"color:rgb(0,0,0);font-size:13px;font-family:Helvetica,Arial,sans-serif"=

>=C2=A0=C2=A0

13px;font-family:Helvetica,Arial,sans-serif">

lor:rgb(0,0,0);font-size:13px;font-family:Helvetica,Arial,sans-serif">
style=3D"color:rgb(0,0,0);font-size:13px;font-family:Helvetica,Arial,sans-=

serif">Regards,

e:13px;font-family:Helvetica,Arial,sans-serif">
,0);font-size:13px;font-family:Helvetica,Arial,sans-serif">Mrs. Nancy=C2=A0=

Shaw

--0000000000006fbc0a05e41584e9--

Nigerian Gmail spam

Posted by Dave Yadallee on Monday, July 18. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 17 Jul 2022 21:56:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oDHqg-000BWh-CV

for dave@doctor.nl2k.ab.ca;

Sun, 17 Jul 2022 21:55:10 -0600

Resent-From: The Doctor

Resent-Date: Sun, 17 Jul 2022 21:55:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f67.google.com ([209.85.217.67]:35461)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oDFMN-0004BZ-PE

for root@nk.ca;

Sun, 17 Jul 2022 19:15:47 -0600

Received: by mail-vs1-f67.google.com with SMTP id 189so9172707vsh.2

for ; Sun, 17 Jul 2022 18:15:26 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=JbP0IjSGpDlAJE9uXD6moB5VdSooaDL+BClRMeCoArc=;

b=RzIkC4faKYyJDfLvu1veVj4DQ2jmKoVLM5OSy8/B7jmoDYKbYs3q4F8KW1XuiVzAq4

KgyipBR6ZPdTx99QHGRyKbp5xy7O+ilpxMuO9mOsGOyxHxSRuYTjTfQ0wbh8oTa/kzuJ

eeEKVLNKMQlrd98M1D/Xw3+ARLQnjkpfizqFI+QCKcDIoSFiW9Vvk5qrNyjRzB26rMOG

Q0AEA29lT/H9k1JdxJ+805yuAGiFN+0PRQzYJCPM8XjTBI1cgADw3u4CkIwuteRtC1ff

SQnPfBCVePWL7NjF2PO1BY7cpfY+5pBPQ3B0e3fF+wtcLJ/pSngyjilFcNGO16+X42J8

r9DA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=JbP0IjSGpDlAJE9uXD6moB5VdSooaDL+BClRMeCoArc=;

b=7KrzlQaOYk85wX0Uz+bA2hbc4/IQt5J3uKskxmJfuGuPap5FGksSMU+cCLaqWWlzY8

SFdOH4CBJt7hyqFIwiHhtVP2moOcpgTf6BUHNxmT5SueTX5r8wOKSf0ymgfv+vUtsTfT

xOHcUSSTx7rMfuHI0xvdEobK89nEDuF/TwP7W4fuYf/s46vJt2oFt5xrNv30iKrYpYds

MFJO+7KZExTkduTrZ57RoR0qZcoBikj7iGw7xh/K0tTCtW4sJ6zu/z41fqIQX1cTYleV

9qPVsps1XQY8QylQvBE5obevtxFhN9sd73JLTmNTSuNYQhfkCQ4No5F1kHMuouN96H/r

MFEA==

X-Gm-Message-State: AJIora+iA0pmp86nENkp6/QScsEJS7tlPlcaa6zM7z+GHR4IgDAIp6Fn

Gtz05YDJksnsR4E2nH8WWv8FhZPS8XAZjZk0mSk=

X-Google-Smtp-Source: AGRyM1uKSoH7+NLfZrPFEkzinD2IboKcHXfgI7h9aCIoefSqkjVNEFhDD3R5gcnUrN6N7FvLcRGeabNrYz7KrD1PliM=

X-Received: by 2002:a67:e0c1:0:b0:357:5179:c310 with SMTP id

m1-20020a67e0c1000000b003575179c310mr8424892vsl.25.1658106920237; Sun, 17 Jul

2022 18:15:20 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:ab0:60c4:0:0:0:0:0 with HTTP; Sun, 17 Jul 2022 18:15:19

-0700 (PDT)

Reply-To: marina.cervantes1@aol.com

From: detpartmemt office

Date: Mon, 18 Jul 2022 02:15:19 +0100

Message-ID:

Subject: Greetings Dear Beloved,

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: root@nk.ca

X-Spam_score: 16.2

X-Spam_score_int: 162

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Greetings Dear Beloved, Please read this slowly and carefully,

as it may be one of the most important emails you ever get. I am Mrs. Marina

Quibec Cervantes from USA, I was married to Late Engr. Martin Harold Cervantes

from [...]

Content analysis details: (16.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.217.67 listed in wl.mailspike.net]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in

digit

[marina.cervantes1[at]aol.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[detpartmemtoffice818[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[detpartmemtoffice818[at]gmail.com]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Greetings Dear Beloved,

Greetings Dear Beloved,

Please read this slowly and carefully, as it may be one of the most

important emails you ever get. I am Mrs. Marina Quibec Cervantes from

USA, I was married to Late Engr. Martin Harold Cervantes from UK. He

used to work with Shell Petroleum Development Company Kuwait and was

also a seasoned contractor in the Middle East Region. He died on 31

December, 2010 in Kuwait.

We were married for seventeen years without a child. After his death I

decided not to re-marry or get a child outside my matrimonial home.

When my late husband was alive, he deposited the sum of

(US$78,500,000.00) USD which he deposited in a Vault with a Finance

Firm. My Doctor told me that I would not last long due to my

complicated health issues, I have cancer. Having known my condition, I

decided to donate this fund to better the lives of the less privileged

and orphanage. I need an honest and trustworthy individual that will

utilize this money in accordance with my instructions.

I want the funds to be used in funding religious organizations,

orphanages and the less privileged propagating the word of God. I took

this decision because I don't have any child that will inherit this

money and my husband's relatives are very unkindly to me and I don't

want my husband's hard earned money to be misused. I am not afraid of

death hence I know where I am going. I know that I am going to be in

the bosom of the Lord. Exodus 14 VS 14 says that the lord will fight

my course and I shall hold my peace. As soon as I receive your reply I

shall give you the contact of my Attorney. Contact me on this email

for more information: (marina.cervantes1@aol.com)

For legitimacy, he will also issue you a Letter of Authorization that

will empower you as the original-beneficiary of this fund. I want you

to always pray for me. Any delay in your reply will give me room in

sourcing for another individual for this same purpose, if you are not

interested, kindly pardon me for contacting you.

Yours Faithfully,

Mrs. Marina Q. Cervantes.

Investment Gmail spam

Posted by Dave Yadallee on Sunday, July 17. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 16 Jul 2022 18:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oCriO-000JBT-0l

for dave@doctor.nl2k.ab.ca;

Sat, 16 Jul 2022 18:00:52 -0600

Resent-From: The Doctor

Resent-Date: Sat, 16 Jul 2022 18:00:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f52.google.com ([209.85.167.52]:39802)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oCrgj-000J54-EG

for doctor@doctor.nl2k.ab.ca;

Sat, 16 Jul 2022 17:59:14 -0600

Received: by mail-lf1-f52.google.com with SMTP id y11so13681583lfs.6

for ; Sat, 16 Jul 2022 16:58:52 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to

:content-transfer-encoding;

bh=eh5COAWpW0fmWc2sHdRoYE/EowEkxjEvK8a4WjlyEuk=;

b=eGNxXusHwQCancmPZaigAQeHc7jwUhYWa2CQHTlNwAZ9KNlL7XR/9+FGQUaz/KvcE4

FG+2b3PuAq50BnPVcMeDBTaLL6bpzinfmdHFE/0cQ9SmYO/yZ4YElGg5mCZfw7K16tvq

F3Dz5cxrg6DO5FOD3PwPiwwjZiW7fQcl6wgqfmPuFleFlpHd62vmOs7h7ZlcbrCuYwCL

OMUloTLIymrHv+BlAR0bejKssRwfeJqCZthcgcJWxWrxhA2/+cozb4m0GChtLsLeEdTR

7tNgYLy8LtCCMp0opPcPbU+Kl9+dlCs+b7KC+3DONFSfUiulPW7Qno71m+nWJrhDzSjA

xSyQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to:content-transfer-encoding;

bh=eh5COAWpW0fmWc2sHdRoYE/EowEkxjEvK8a4WjlyEuk=;

b=JFjAA9vzDsKvYz1GVAlM85so8P5KUElsHFQ0xOjZoeL9idaS4uspFtBKO1D4myClNr

9DKvMByZy0IjCEZqbWLNvPYehILUpFb5JAbFo/BsoNYG1uFa/uY4XczrFmL6FvC9fXa0

rkCXeF4/0WlnH2vz99mOX97ZV8LC9FLr1gN5H8zOr4SUjo41KOr6psLdnzmje9UdpOeT

ty9ryvfZaojtbQ+NmS0YMp49ADYoKeRm6qG3hmywV5PCoovHjSiziwlaSU5pUpJ/MvLB

lSyYGa30c201ayxMeP8mEeGzbDvx8vI0t1jU9QSAQCipiYnX39qRwk3KXhj/3Yqf3/SF

fwAg==

X-Gm-Message-State: AJIora8gOLjKdLo/DM9nFcPkh1JZ8SOkhEpM0mIukQdTLwkKVBv672AM

xdbWdHeeMNW7x1xRsSAqVWouLLgzC8qA5RLVKF8=

X-Google-Smtp-Source: AGRyM1thQo39H/GF1Pe3BUuZ1bC52F4Oj50axKJjZUokBdaDfBXTXyJ3HZ/7g5UgONA6rjK5WxyD/DGi0M89ovrOFAk=

X-Received: by 2002:a05:6512:3fa6:b0:47d:c87e:f8f8 with SMTP id

x38-20020a0565123fa600b0047dc87ef8f8mr12161565lfa.159.1658015924797; Sat, 16

Jul 2022 16:58:44 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:aa6:ca08:0:b0:1f8:d789:40b5 with HTTP; Sat, 16 Jul 2022

16:58:44 -0700 (PDT)

Reply-To: jamesdidiza@gmail.com

From: JHBSA

Date: Sun, 17 Jul 2022 01:58:44 +0200

Message-ID:

Subject: CONTRACT SUM

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 20.2

X-Spam_score_int: 202

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dear Sir/Ma. My name is Mr. James Didiza" a senior government

official in South Africa, I am the Chief of Staff in charge for contract

awards & execution. Also the supervisor of all contracts in Department of

Publ [...]

Content analysis details: (20.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.52 listed in wl.mailspike.net]

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[tnthulas0013[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[tnthulas0013[at]gmail.com]

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

2.5 MILLION_USD BODY: Talks about millions of dollars

0.9 URG_BIZ BODY: Contains urgent matter

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} CONTRACT SUM

Dear Sir/Ma.

My name is Mr. James Didiza" a senior government official in South

Africa, I am the Chief of Staff in charge for contract awards &

execution. Also the supervisor of all contracts in Department of

Public Works & Infrastructure. In 2020 During Corona Virus (Pandemic)

Covid-19, I personally Facilitate and supervised the awarded contracts

for supplies of building materials and constructions of ultra modern

shopping malls, low cost housing units, airports maintenance and

Stadiums to Improve the standard of living in this country during the

Pandemic, In some provinces such as the Western Cape, Eastern Cape,

Gauteng & Natal here in South Africa.

Serving in the board, I deliberately inflated and over invoiced the

contract sum, leaving an excess of US$30, 000,000.00 (Thirty Million

United States Dollars Only). At the completion of the contracts, the

real contract sum was paid to the original contractors, leaving the

excess, which was reported to the Government that it belonged to the

sub-contractor that handled part of the original contract. But the

company submitted as the beneficiary was non-existing foreign company,

which was a purported attempt to divert the money for private use. I

do not intend to mince words with you, I have to tell you the truth;

this is a deal but completely risk-free and genuine because the

contract has been perfectly and genuinely executed and completed. It

depends on whether you are interested or not.

Right now this amount is due for payment and is floating in the

treasury not attached to anyone/company. I am the only person who knew

the origin of this fund. But I cannot claim it by my self because I am

still a civil servant. Therefore I am looking for a trustworthy

foreign company or individual whose name can be used to claim this

money for our mutual benefit.

This is strictly a business deal, but it=E2=80=99s completely risk-free and

secure because I will use my official positions to source all the

necessary approvals, official documents and certificates that will

back up the fund to reflect that you/your company genuinely executed

and completed the contract. All necessary arrangements have been put

in place in all the relevant departments for immediate approval of

this payment.

For your co-operation, I have agreed to offer you 2.5% of the entire

amount on conclusion of the transaction while 75% will be for my

family & I. If you are interested in this proposal, I want you to

respond immediately through my personal e-mail account stated below

for further information and directives.

This transaction is expected to be completed within 5 or 8 work days

and it=E2=80=99s highly confidential and discreet. Thank you for your

co-operation. Your urgent reply is awaited through my private email

accounts below.

Best Regards,

Mr. James Didiza.

Private Email: didizasa@gmail.com

(Dept. of Public Works)

IMF spam from Google

Posted by Dave Yadallee on Sunday, July 17. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 15 Jul 2022 18:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oCVcy-0004hN-2x

for dave@doctor.nl2k.ab.ca;

Fri, 15 Jul 2022 18:25:48 -0600

Resent-From: The Doctor

Resent-Date: Fri, 15 Jul 2022 18:25:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wr1-f47.google.com ([209.85.221.47]:41630)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oCVRW-0004CC-W7

for doctor@doctor.nl2k.ab.ca;

Fri, 15 Jul 2022 18:14:02 -0600

Received: by mail-wr1-f47.google.com with SMTP id q9so8764737wrd.8

for ; Fri, 15 Jul 2022 17:13:41 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=NATxg2YAh8vnnu6HlOgM65ueg+ZvS8EVyGuGblrA4UI=;

b=I9CNJBTzVyRwxR4aZtExbNCUDSHJ+mfPlwV4uYP7ZduE+M2SrDc3AiDZVvI8KRWZr8

iq6sEY1aJDwBaDjW/Zuf9T8YVGIknuUZCAJNsSsiBH38tGMY4HiXCAHKDErKQzuP5c6+

ZyBfRKDsAuYbOn0dqZGedeOoYPRXbQsLWY6o5R9QJocJMUIQy2mDQq7l2uee+Ovtujtj

57XKgTHcL2+ERRMaSh2yP9dn5oB6e4t51iQTGvC5G0HDRvhmd1G9KR2+K++w8/1rGS9/

TGZujm2p+EKsSuTFxQcscU/vMx/EUsaNYG8EtR4jShdS51Kz4TCWZJP9Ts6UK4uBudjz

es6Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=NATxg2YAh8vnnu6HlOgM65ueg+ZvS8EVyGuGblrA4UI=;

b=8DI4sr/7BsYRRkfcDt4i44Yg2Bt2o0VJml9Wzjz72K+P15fwOAGMqbvN6rM87fGq0Z

MplcpltL/oGjKRC5AjfQf8h8QoRMaM0afAZQhZyHD5xIXFKSI2oI7FbgZ6PKUXaS8R/h

fd9BVG6BJXQbUjozovG4/D5QtjmoSsX/Z8Wp/XQQ1Bec9gxbE8C4PLJN7GkVhYV6xA3Q

IK/MB0OfcUNfweegCdlialnwTDCusHGNR7MeZzPc/0PDE8U6APihRMXENKVTxxS3Mmr1

9K8sIq/Rd+3H27H9QCNZaVb5QUX6HY8huL/lpcqohG4alnoykCLXL05LRglV/wWVPJ9t

y9Bw==

X-Gm-Message-State: AJIora9V5dW/9m5/Hf4Sa0nFh76EIadEPYf6/YOE7V+tb5SPZlRuW1m4

fdpQVjKHUcgh/hKlwX/YwveLcTZMPy32MZ1b2UU=

X-Google-Smtp-Source: AGRyM1tRj34eV7RlV3WX3aXYrZbp1Zsg6nQVOYlJro3Rw6ghfuOFGvZf884b9JY51cuZFrOTW/DC5xA7/6EXSNbvHDQ=

X-Received: by 2002:a5d:5268:0:b0:21d:6c45:fe6 with SMTP id

l8-20020a5d5268000000b0021d6c450fe6mr14867683wrc.380.1657930415142; Fri, 15

Jul 2022 17:13:35 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:6020:d182:b0:1f1:16b9:3763 with HTTP; Fri, 15 Jul 2022

17:13:34 -0700 (PDT)

Reply-To: wu56645payment@gmail.com

From: "(IMF) SCAM VICTIMS"

Date: Fri, 15 Jul 2022 17:13:34 -0700

Message-ID:

Subject: Dear email owner,

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 16.4

X-Spam_score_int: 164

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dear email owner, The International Monetary Fund (IMF) compensates

all victims of fraud and your email address was found on the list of victims

of fraud. This Western Union office has been hired by the IMF to transfer

[...]

Content analysis details: (16.4 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[mriahr9[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[mriahr9[at]gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.47 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

1.5 HK_SCAM_N8 BODY: No description available.

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily

valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from

author's domain

2.0 HK_SCAM No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.2 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal

information

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

2.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Dear email owner,

Dear email owner,

The International Monetary Fund (IMF) compensates all victims of fraud

and your email address was found on the list of victims of fraud. This

Western Union office has been hired by the IMF to transfer your

compensation to you via Western Union Money Transfer.

However, we have decided to make your own payment through Western

Union Money Transfer, $5,000 per day until the total of $1,500,000.00,

has been transferred to you in full.

We may not be able to send the payment with your email address

alone,so we need your information on where we will send the money to

you,Such as:

Name of the addressee________________

Address________________

Country__________________

Telephone number________________

Attached copy of your ID_____________

Age ________________________

We will start the transfer once we have received your Information:

Contact email (wunion7509@gmail.com)

Thank you

Faithfully,

Mr. Michael Anthony,

Tel/WhatsApp +1 (916) 243-5436

Tell: +1- (916) 243-5436

Director of Western Union Money Transfer

Nigerian Gmail spam

Posted by Dave Yadallee on Saturday, July 16. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 16 Jul 2022 14:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oColf-0000x7-Pb

for dave@doctor.nl2k.ab.ca;

Sat, 16 Jul 2022 14:52:03 -0600

Resent-From: The Doctor

Resent-Date: Sat, 16 Jul 2022 14:52:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f172.google.com ([209.85.128.172]:39638)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oCm1u-000LVg-8C

for doctor@doctor.nl2k.ab.ca;

Sat, 16 Jul 2022 11:56:41 -0600

Received: by mail-yw1-f172.google.com with SMTP id 00721157ae682-31c9b70c382so73740797b3.6

for ; Sat, 16 Jul 2022 10:56:20 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:reply-to:from:date:message-id:subject:to;

bh=Rman8yBujhscy9fzTCcW1b/GliRwf2eg3uJXcIcO6Ak=;

b=Px8KUD/AHpvgc7S8bQu4n2y+pw4jJ1zHX7PmECJZs6Dg/4bKS1sDrTghAuQmZXXDkq

PkHVziGoMmNg7jiFUBE5Oypx3pzWCYSbNfivycKJbX3FL1178f0ufMdVrCFWsPWeohUm

MHnfK7Kyt2QfRpdPCZQ1Chu22epRCts5PtyZdEuLztp7IlCaIzoPFhCWedRsI0PCE/YF

0TznVeRUbP9adlp3bCLLsgyPmVt8m39uNoNJQ6P0QIZ+y8VL+DSGaW8T3QgkC8r+mjDc

r3Lub/gZ6sOr5Us7cJPeS+q/hoab8uzpVTn3iKuy/yY3HhClIxz14gtvzpZMthqkwdy6

rzEw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:reply-to:from:date:message-id

:subject:to;

bh=Rman8yBujhscy9fzTCcW1b/GliRwf2eg3uJXcIcO6Ak=;

b=5iRtmVHlrzghcF8G5gN3VmMUrwRODq5uf+6/wNAbrIcQ+qm88wpYSJOYa6SnXEYATm

neN208aFLZq6Xj74+VyvGIQ6nscZ+NsRKRs2EiV8bDI/sdPytSOflhNRkw7KGj86GnEK

ZZdjtrmvzqTvHbPoA4DfmCUg7SQwgk8y6EGo+Bl4DE0R1Gttn/6/Y3WgjX8OehUitNl6

MpSwUYiL499g2DOD03oxwW2eNu1KhlS2imZ1LFQYgELZDWdRWKM93sLn4MCwlXUNh3ft

7W66x4brp3yBOl1JdzTt++XiyipBie2WHQrRBOOxBbWvoC1l+NBZmOe+Lz4ZNjfqX4PH

CeGw==

X-Gm-Message-State: AJIora9V78Kg2SEZvB/5LBT3XeTTOJM/IJZg61owJcXpDhbbxj+3B5qw

b+wygE1J9rKqrgK++nqi8jiNBMJGXjPdDOFnR5w=

X-Google-Smtp-Source: AGRyM1usdFHiS9rlD5NlFAEEVSG2+m0oOd2hkSZSt1S8yTk0K+UDx3kTBC267VACiOPXjJGXm80xkfxswikaQSHN0xs=

X-Received: by 2002:a81:990f:0:b0:2f8:c347:d11a with SMTP id

q15-20020a81990f000000b002f8c347d11amr21936488ywg.507.1657994174731; Sat, 16

Jul 2022 10:56:14 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a81:ac4e:0:0:0:0:0 with HTTP; Sat, 16 Jul 2022 10:56:14

-0700 (PDT)

Reply-To: mrs.sanamohammadkhader@gmail.com

From: Mrs Sana Mohammad Khader Amer

Date: Sat, 16 Jul 2022 19:56:14 +0200

Message-ID:

Subject: Dearest One.

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 5.6

X-Spam_score_int: 56

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dearest One. I hope you are doing great, I am Mrs Sana Mohammad

Khader Amer From Jordan did you receive the massage i sent to you some days

ago I awaiting for your reply very urgent Best Regards

Content analysis details: (5.6 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.172 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[mrs.myaling8919060[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[mrs.myaling8919060[at]gmail.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to

Subject: {SPAM?} Dearest One.

Dearest One.

I hope you are doing great, I am Mrs Sana Mohammad Khader Amer From

Jordan did you receive the massage i sent to you some days ago I

awaiting for your reply very urgent

Best Regards

Mrs Sana Mohammad Khader Amer

Business proposal spam from Gmail

Posted by Dave Yadallee on Thursday, July 14. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 14 Jul 2022 07:59:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oBzLz-0005VX-8K

for dave@doctor.nl2k.ab.ca;

Thu, 14 Jul 2022 07:58:07 -0600

Resent-From: The Doctor

Resent-Date: Thu, 14 Jul 2022 07:58:07 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-tyzapc01olkn2087.outbound.protection.outlook.com ([40.92.107.87]:48069 helo=APC01-TYZ-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oBydh-000EDo-Fo

for root@nk.ca;

Thu, 14 Jul 2022 07:12:26 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=GLnVHZA+E37rIdLDiKhIFNBwJjJtI8i6gBeEB4bVK5BZs4UUVdGedr++i6xOErU+scCiLYKWbdZ+/pBh/l4en+YgCHJABMzd/Ldmt6spP+Kq6UFMYIGZBEjjEgBm6WIMzWIpciSEpCt2/FiE0EPKn4Kf0Sre2jlHYqW7Riygl3RWZtoM2JtGUnxn7N+V5KSX6y8itKbTZL7YFx+5bB3XSQp9K5cY/I7T1oAaLRyMsocJYdGaAfAHjBKYLhmb4SYXz+QRntRlIKKPyjm5DVgITlpJFqaXk1l590T4mJgMK7RP4xuNfX1+MHP3YREkF6ETcghZW+3jbsxLVb/CnuaYSA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=0Dcymlz9Ax6t/xh3HIMqBBLiIyhp/HtTotPM1grPFEA=;

b=iEECC04RJIoYjF2wj6vdZINVGbO8gqlJ3jJNS0mWw/bNTDh4tnlLtyhLSZEZIBqpxEF7+7b9PoDP1p3xdKncYBJ0OfLpTWWEgBUBgAY0cItfx+P63ZBLBXT4P0U0VWbfyb7CEb+6WrzD0RHGw657KS1gHDq+6Z/IeLaXlYl8Z4kgcrOepmUx+IXF7cJ4jT4GweABG+VWP6bZvypmekvcf7EutaVQhyTQYxzuBP/Ek64p6SbSijButsQxn5+lpclGB9l/tH2pmAYvK2Y6nNk1IVZ1xuyC5e7eCwZndyy3mMWb9+tSgWD3o0nXW0G0TfUqSHwZP+D0J0Yh3CYfV/YFfg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=0Dcymlz9Ax6t/xh3HIMqBBLiIyhp/HtTotPM1grPFEA=;

b=oOtrVUzCar8Qc0q+G5YacWmTSXufCmJMRNzxmHg7KTv3FrjSO+NQHrC30P5AMcBabRx+7nBkPkdt/WSTX5eNOG1e0LoVUaf2UNKacq/Ev5vnqLEzS3e1hLAOia/+Yq9Dnk6uO3aj61oBdnkIjAD6OTuApS3fRnZUXf0OEUbLtq/7l1k7rYQIeTC6zH0AQe6momVoUbOMvDhufBqdskKW2xC8sLUR/OCw597foV92jWl8vup5GUj2loGlyH6DGFM9ChuscFJc4FZqVVj3x5+LcVnLXII0lLr5dJlvGcotO8mx2TarLtO9QG5K3wXgerkm4AnumISSkWemynaJqPnEIQ==

Received: from TYZPR02MB5497.apcprd02.prod.outlook.com (2603:1096:400:1d2::10)

by SEYPR02MB5776.apcprd02.prod.outlook.com (2603:1096:101:3c::10) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5438.14; Thu, 14 Jul

2022 13:10:58 +0000

Received: from TYZPR02MB5497.apcprd02.prod.outlook.com

([fe80::708a:d10f:e465:f951]) by TYZPR02MB5497.apcprd02.prod.outlook.com

([fe80::708a:d10f:e465:f951%6]) with mapi id 15.20.5417.026; Thu, 14 Jul 2022

13:10:58 +0000

From: "Megna Jaiswal"

To: "Megna Jaiswal"

Subject: Best S.E.O Proposal..?

Date: Thu, 14 Jul 2022 18:39:57 +0530

Message-ID:

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_006E_01D897B1.410DF930"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdiXgI2Z1BnpwCwqQk+2ltfGjUcSiQ==

Content-Language: en-in

X-TMN: [kpwylUO7C+iFxmv4ky3JJhovBhP+mcLkwLG3L5pmFPM=]

X-ClientProxiedBy: BM1P287CA0021.INDP287.PROD.OUTLOOK.COM

(2603:1096:b00:40::24) To TYZPR02MB5497.apcprd02.prod.outlook.com

(2603:1096:400:1d2::10)

X-Microsoft-Original-Message-ID: <006d01d89783$2755bd30$76013790$@com>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-Office365-Filtering-Correlation-Id: 0dd75cea-6753-4541-aecc-08da659a49f8

X-MS-Exchange-SLBlob-MailProps:

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

X-MS-TrafficTypeDiagnostic: SEYPR02MB5776:EE_

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

/bJr+G6F26NOL7G0FkoROpVTyoywhYMEABtHgdT5T4GDaxKcq1Soce0wV2qroxpUuITtE9Tz+bFHYVTTtKqHbPA2iXmIJMVGAadJ/ni9aKZRxgw19i/TUL9GKOGvSg8o+4GlAeXrNJXeKnVvWt6kcziFJsjOucUPWtNBnqU0SEtjL8timQ0vhPsNMXuhBIcKBgf8GgA4X9Bqpsh+BhH6mJzJ7ZVt6iOIlpuzaKERi1TCQOmPusMrFOACS2YFXVfLEs566iXJBcZJO24IsACkq5VWt1xWMonBowjI8AA0JeSdnnWT0CM0357QFFyhSZDWyoNKRh0qThkCtHoxhF5nnuh3hNGyeHNPm7STdams9suAUNfGF0oknh4Lv8rwHSYSPdFEZOjnWg9w+bQSbCU+Sv5tdHu+z0ngweDNiVyKPUA+2Fu8E4oBzeN48NrVYOmhZ3lfLhOhzpGnZm5hLGldB7xBtI1Y5m7A0E7MQTlk1cDh3dT3CdQ1lFo51bLdp6qCaA+JZQZYQq0CEoASExE6yy8H5BXvFNBXJo+2at/9uPCmFTY6j79JopAkCrIL/3vE75KWDWICzsw3OuY1U3vVQnmzKuepS6abB+b/OqK20usOs2+t1msIDojxSpOVtsIFWKwe9WF66EsRA1FRaXp4H2ytSventDdOaxbeJAdGRQeUXDoUngPWBZdJs0EKCTeA

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?us-ascii?Q?UaIwDYm3Cv3DQyYY/oyGGq3Av1DJ/c6zF4vSJU1aC+KyW9RoY0ggWZcgCXJa?=

=?us-ascii?Q?LSf7eh4w3i5GykGQM3fo9jDf386lLqy4Te2ewKTqscnzAqDoD2lWWwFv8HBw?=

=?us-ascii?Q?dNjeAhmRLUjpJnohVdDxhEnYPXlb/xUXGkLtOddfPCqFXY2LevekyAMhAQCg?=

=?us-ascii?Q?ZBGqUwNoJKTmPp4tm3qhUPtIsq03NBI3Vvprjl7qaoaOybr/w27SMViZdF4m?=

=?us-ascii?Q?ykOgUuBpyzTsoYJ4THam8L5+F6W5lKG/YpUOLr5fDXOKpUn2m1wBsuw1oriU?=

=?us-ascii?Q?kpeS5QloRzNOvwWitq+YjfSmteSiUzblJfi+7UGTk9CbDc1tEwnJduBwc3xa?=

=?us-ascii?Q?n8Llnq51ZoPikXHF2vRhkPmvyh2vhe34vAa8zi9ZXdKnRSj8azyzvPvk3Mjw?=

=?us-ascii?Q?6kNxe2yTMZh6eHhFcMESc2FAyYuCJm0wghpBXfj/910ESYcKXOMngx2zk6gy?=

=?us-ascii?Q?/+wJSNxttVgreWQHuPg3XPDR6xCUFP10XLKAcqoDTYk9dNK+Dv+adFtBfAUc?=

=?us-ascii?Q?ly2V/nnG3fSMjweNp9wkVBmxdtzU532O7JIWs+Hol4MV1+amPkojDptEHAnA?=

=?us-ascii?Q?+O6cs2DQCXN1mGSojsKGhcJLIMJvEwXFcRgqflkEtEM0EaNPBodFMvZEPJ6p?=

=?us-ascii?Q?cl9eKVFHXyTpOm39zYdIKcZW2eFDxum0oOnkJSP6rLLK08p+TNQfEqVDqiFf?=

=?us-ascii?Q?f+0HD8yWetNLJ+tPnvn8zsfoepnURXM1QiUuU6n762lLQwhaZbuQSayg7q7s?=

=?us-ascii?Q?9iM4RFXPdyJ9ChsUAekrh5R0kdLn9Z2mJg1W9BWYf1xyouHKujRWG/g6xAn0?=

=?us-ascii?Q?MvkwfBNECUnV5mlv8+h7cf6Fhfdw3EVqSzk2e68MsjGmh9Qh7nCueaVaJypR?=

=?us-ascii?Q?ZyLWC3L0nu7Le3E7OC3F6+nZQ/KPdnQuuCBx2616aqJ7V9IMbyVvbvV9B6cA?=

=?us-ascii?Q?Z1wUX3e/uR3r0O2JOBCtxb4f0KRSEuhetqlPPv2+g0LSyizna/mHp/zBp7ex?=

=?us-ascii?Q?50x30jamaDThL76RQurbV02K6tGwNSNzCwMrds8bJRj/E0p26csCaVoJiruC?=

=?us-ascii?Q?D7hYUgo+hmtZ6DysRDUBWCjUj+BPJLpx9xj/d1QSyHcZTrVP0HoRgLd9fjAu?=

=?us-ascii?Q?hgFBrdkcAbWVy8K7+m+LFgCUEy3VIcBz8QdOPY//JMLcTGR53IdVf+4g6UAD?=

=?us-ascii?Q?vspn/7oR6BUl3u4ptcg5GOaBZ5k6Px7YBAXxqhPZ9Hns+fXO6IsfNOE7uw0Q?=

=?us-ascii?Q?TJu1amDoKdTqTzCO8AVluicZ+ma1NxWPrcLHGhRYyccgERju4Y0cQfUTuT4l?=

=?us-ascii?Q?EEQ=3D?=

X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-20e34.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: 0dd75cea-6753-4541-aecc-08da659a49f8

X-MS-Exchange-CrossTenant-AuthSource: TYZPR02MB5497.apcprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Jul 2022 13:10:57.3950

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEYPR02MB5776

------=_NextPart_000_006E_01D897B1.410DF930

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit

Hi,

We can place your website on Google's 1st page. We will improve your

website's position on Google and get more traffic.

Our Primary focus:-

1. SEO / SMO / PPC Services

2. 100% white hat SEO techniques

3. 24/7 Chat support

4. Affordable cost according to keywords & Monthly Reports, etc.

So, if you are interested, so we can send a complete pricing & proposal

based on your needs.

--

Kindest Regards,

Megna Jaiswal

Digital Marketing Manager

------=_NextPart_000_006E_01D897B1.410DF930

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

>

00">

Best S.E.O Proposal..?

=3D"Calibri">Hi,

We can place you=

r website on=

G
-us">
>o
r=3D"#FFC000" face=3D"Helvetica">o
>g
span>
0" face=3D"Helvetica">l
=3D"en-us">e
lang=3D"en-us">
Helvetica">'s
"en-us">
an>=

1st page. We will improve your website’=

;s position on
us"> =

=3D"#00B0F0" face=3D"Helvetica">G=

o
pan>
" face=3D"Helvetica">o
=3D"en-us">g
lang=3D"en-us">
Helvetica">l=

e
us">
elvetica">
"> and get more traffic.
span>

<=

font face=3D"Calibri">Our Primary focus:-

1<=

/span>
i">. SEO /
ont face=3D"Calibri">
=3D"en-us"> SMO / PPC Services <=

/p>

<=

font face=3D"Calibri">2
lang=3D"en-us">.<=

b> 100%
>
bri"> white hat SEO techniques

<=

font face=3D"Calibri">3
lang=3D"en-us">.<=

b> 24/7
>
bri"> Chat support

<=

font face=3D"Calibri">4
lang=3D"en-us">. Affordable cost according to keywor=

ds & Monthly Reports, etc.
ont>

So, if you are i=

nterested, so we can send a complete pricing & proposal based on your n=

eeds.

--=

Kindest Regards,=

=3D"#000000" face=3D"Calibri">Megna Jaiswal
s">

ri">Digital Marketing Manager
n>

=

------=_NextPart_000_006E_01D897B1.410DF930--

Categories: Google Spam

0 Comments

Nigerian Spam from Gmail
Posted by Dave Yadallee on Thursday, July 14. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 14 Jul 2022 07:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oByRU-0008RQ-9f

for dave@doctor.nl2k.ab.ca;

Thu, 14 Jul 2022 06:59:44 -0600

Resent-From: The Doctor

Resent-Date: Thu, 14 Jul 2022 06:59:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f54.google.com ([209.85.160.54]:41861)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oByEr-00079S-7q

for root@nk.ca;

Thu, 14 Jul 2022 06:46:48 -0600

Received: by mail-oa1-f54.google.com with SMTP id 586e51a60fabf-10bec750eedso2231193fac.8

for ; Thu, 14 Jul 2022 05:46:23 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:from:date:message-id:subject:to;

bh=P/SizOHkdEeOwY5COdQHo/Xex3YY1HgWRnDgjCcODi0=;

b=UQbTGCJ4CERaf1l3Fx6xQTtpiObuu8gXQ+GYvL0oJohojxgD8Q5ucXZ7JiOXQAP1Fd

dptvHEoClltc4Dj9b23SM4YCpGz/G+cdOQl/6j2uTbZ/lHtCAjefnv8FKMg0etDsXLwJ

IjF/kt55770dvba+IyIqHHdGlCrFhyDZRpG471ZiyIUttdV4Ba2mmei3ijGI9GbKOdxU

zbOwWZK1DM1U05ZdIusHiNAw5bl+2r6HVlEFzA/xtk+PF3X6jGCVfCc/e/Gha0vknjYE

1vH1XdCdfFbqlDxNHzeYKepgCGANklvWKGfmI/TZJ+GIlWHH9uR7lS+JFJIZ/XKQhymt

DgTQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:from:date:message-id:subject:to;

bh=P/SizOHkdEeOwY5COdQHo/Xex3YY1HgWRnDgjCcODi0=;

b=3ACiqGd+Gv9gV0AyAVDOidnzGx2j6gZ8Qs3QiVylglA//br5CJNVNSN7H8xfV2TK/0

JfSEtQcpQ4bjr2njdORwF/RcLMRX2ZvRPjGqoyPr4iqdu/8hAo1rAr5R4V61HoLVkM6I

d11h4Hql64DmiEn9yTtrYvqQh2SHi+CAN5L5MtOHyBS1EyjC3I2bN2FT18KMqX9Do4mF

oqHAWu/Aax9lopmzpa9f4FLVL7K0dRwQtmIBLYKF8aPa3i2jAYof84oAkqiHCvryIypy

XokGdmZNf8V898NH4EiwRVYr2lmJJL3TNsrRcFoINJT3ALFnVPJeo1/9RPFJ/PKQ6U7T

4T1A==

X-Gm-Message-State: AJIora87olm4ZeeKd6RvwoDQeYKV7n6hDRv/z+5dHrGErmTx2I4wXA5u

IXNVb9LGkoxcO8BmQsW+Wui9t4N7Q+2mAlBiQ2E=

X-Google-Smtp-Source: AGRyM1tteIGjABU/TUuXcAEHzQ5Ok5GRh4LqVXceBt+MFoYv01yuTkoo2JpRLL4+59YAxUcc+jNhg+AChp4i7aD8HTk=

X-Received: by 2002:a05:6870:c695:b0:101:fe5c:4759 with SMTP id

cv21-20020a056870c69500b00101fe5c4759mr7440373oab.49.1657802778022; Thu, 14

Jul 2022 05:46:18 -0700 (PDT)

MIME-Version: 1.0

From: Katarina Chornovil

Date: Thu, 14 Jul 2022 12:45:53 +0100

Message-ID:

Subject:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000b117e705e3c34992"

Bcc: root@nk.ca

--000000000000b117e705e3c34992

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Hello

I am indeed sorry for contacting you through this means, but this is the

only means I can reach you for now, I am Mrs Katarina Chornovil, a native

of Mariupol , south eastern Ukraine. I am 65 years old. My husband had an

oil and gas company and operated the company until he was conscripted by

Russian Soldiers on 10th March 2022 alongside other family members.

Please I want to entrust into your care valuables because I am trapped

here beneath a steel plant in Mariupol, am badly hurt and cannot move, I

have seven ATM Master cards , its for the family, the amount in all the

cards is =E2=82=AC10.7m(Ten million, seven hundred thousand Euros), so each

contains not less than =E2=82=AC1,5m

I have sent all the cards out of Ukraine. it was packed sealed inside a

wall clock and laptop, sent to Poland and presently the packages are with

the family cook who escaped to Poland because of the fierce war situation

here. I gave him the wall clock and laptop to take with him and keep it

until I contact him for them, he is not aware of the content.

I want to send to you the wall clock and laptop to your address , when you

receive them, open them, you will find 7 ATM Master cards in both of

them. then I will send you the pin code for each of them as soon as you

confirm you have received them. You can remove money everyday them keep 10%

of whatever you remove in each day and you will send the rest to me in an

account I will provide for you.The point is I have to remove all the fund

from all my cards for security reasons and though your help I can be

rescued and flown to your end.

Please let this be confidential between us. Even my cook in Poland now

believes it is just a clock and a laptop, and he is waiting for my message

to send the package to wherever I instruct him as the owner. Six cards are

in the clock and one in the Laptop. if you can handle this for the sake of

humanity then please inform me. I will give you other information when I

hear from you.

Thanks

Mrs Katarina Chornovil.

--000000000000b117e705e3c34992

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Hello

I am indeed sorry for contacting you through =

this means, but this is the only means I can reach you for now, I am Mrs Ka=

tarina Chornovil, a native of Mariupol , south eastern Ukraine. I am 65 yea=

rs old. My husband had an oil and gas company and operated the company =C2=

=A0until he was conscripted by Russian Soldiers on 10th March 2022 alongsid=

e other family members.

Please I want to entrust into your care =C2=

=A0valuables because I am trapped here beneath a steel plant in Mariupol, a=

m badly hurt and cannot move, I have seven ATM Master cards , its for the f=

amily, the amount in all the cards is =E2=82=AC10.7m(Ten million, seven hun=

dred thousand Euros), so each contains not less than =C2=A0=E2=82=AC1,5m
>=C2=A0
I have sent all the cards =C2=A0out of Ukraine. it was packed se=

aled inside a wall clock and laptop, sent to Poland and presently the packa=

ges are with the family =C2=A0cook who =C2=A0escaped to Poland because of t=

he fierce war situation here. I gave him the wall clock and laptop to take =

with him and keep it until I contact him for them, he is not aware of the c=

ontent.

I want to send to you the wall clock and laptop to your addr=

ess , when you receive them, =C2=A0open them, you =C2=A0will find 7 ATM =C2=

=A0Master cards in both of them. then I will send you the pin code for each=

of them as soon as you confirm you have received them. You can remove mone=

y everyday them keep 10% of whatever you remove in each day and you will se=

nd the rest to me in an account I will provide for you.The point is I have =

to remove all the fund from all my cards for security reasons and though yo=

ur help I can be rescued and flown to your end.

Please let this be c=

onfidential between us. Even my cook in Poland now believes it is just a cl=

ock and a laptop, and he is waiting for my message to send the package to w=

herever I instruct him as the owner. Six cards are in the clock and one in =

the Laptop. if you can handle this for the sake of humanity then please inf=

orm me. I will give you other information when I hear from you.

Than=

ks
Mrs Katarina Chornovil.=C2=A0=C2=A0

--000000000000b117e705e3c34992--

Categories: Google Spam

0 Comments

SEO Spam from Google
Posted by Dave Yadallee on Thursday, July 14. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 14 Jul 2022 07:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oByRI-0008Om-CC

for dave@doctor.nl2k.ab.ca;

Thu, 14 Jul 2022 06:59:32 -0600

Resent-From: The Doctor

Resent-Date: Thu, 14 Jul 2022 06:59:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wm1-f65.google.com ([209.85.128.65]:54999)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oBwz0-0003Zi-01

for sales@nk.ca;

Thu, 14 Jul 2022 05:26:19 -0600

Received: by mail-wm1-f65.google.com with SMTP id n185so831613wmn.4

for ; Thu, 14 Jul 2022 04:25:56 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=mime-version:sender:from:date:message-id:subject:to;

bh=eR2XftcX12QIuKDvux5auivzNkjBFUF1wKxjZg4qVpA=;

b=O9HZnQmdI1es5v2hBcgWuE04k+/7DfqRPSYZqMzh7QZHDie0v64n0FNmyXQfRpoA4V

huOzPF2fRV4QMqLSzDsod3w4sqQnu9vGu/9HaX6Fohyfieg0lGXqih6o6PljlNV2cbUf

teQ/wx4M4RixS5WRKE2RAeELHFDUFtECdFXLYvjxc5MVr21aZXeqckVW0NF39N9rd/u5

vXZP3qdkzVeJkNWtaXbtULWBxdYZkRRQfhMK7fChS3qNNzFGtN3BFSrHo0XBnE+fea6l

z4Mk7pJ5iE22vSMdHZHpdXbSaRX3A51G/9Px1HSPcD6fZLe8ce1py62LTo7J59QWEtPs

nVtA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=x-gm-message-state:mime-version:sender:from:date:message-id:subject

:to;

bh=eR2XftcX12QIuKDvux5auivzNkjBFUF1wKxjZg4qVpA=;

b=dF3sJpLoXkOvm6Ip+/FwrHLinc4f1O0JF0hFDX/9VRXOWcpYuCOOIacDS+pNjRN8Iw

Q7Oo2kYmUoICHXpGz0NHybcU23BhxlTICA0NErYeD8xtOAjwNCNCliTQTqymnfcWGPi4

hOBRJrHgiBBRQaOk8IcXQqxc+cRj1SFNqH9av29sRTdxjFYNv+1AcLUGGd7xm+el1XXs

Fjy2FfwigZN5v4Nh4QQeIIY9T1N8Mfbj+N39NIujqOa9ApK0gd/lDlESDDc7sUgMYCRK

La9Eo56/kiJPNqibVud1u9E7zl+KU0DyblL5kjTZioaxArPMhmqcPVrwc4KV3Lf5N+rC

d+Yg==

X-Gm-Message-State: AJIora+fGNa0W6nKl/idZkd8hF3bI9oLK17PJ8AF2eZ6eS/sHUXCjnpS

AvSjwxlggF3sRpDzjgi7Je5cdLkZ0PQyos12VdLJcR80

X-Google-Smtp-Source: AGRyM1ugNLqvXykz6dXySQyWBHfBd6Nb2PpWJcW8WXWrkzcJFhGzYaznXzsLw20+6ch8RW2g1b/Ppz0/S7zmPkAvZmY=

X-Received: by 2002:a7b:c401:0:b0:3a2:ca58:85bc with SMTP id

k1-20020a7bc401000000b003a2ca5885bcmr14895247wmi.156.1657797950002; Thu, 14

Jul 2022 04:25:50 -0700 (PDT)

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Thu, 14 Jul 2022 04:25:49 -0700

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Thu, 14 Jul 2022 04:25:49 -0700

MIME-Version: 1.0

Sender: Richard Shaw

From: Richard Shaw

Date: Thu, 14 Jul 2022 04:25:49 -0700

X-Google-Sender-Auth: P-C_8yXINqST6FHDwknLOat8zss

Message-ID:

Subject: Web/Mobile Application Development

To: Sales

Content-Type: multipart/alternative; boundary="000000000000eb5aa105e3c229f3"

--000000000000eb5aa105e3c229f3

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Hello,

Firstly, thank you for sparing some time out of your busy schedule to

connect with us. We are a leading Development and Design expert company

offering the best services at cost-effective prices. We believe in

building relationships with our clients over trust and extraordinary work.

It has been a journey of 12+ years and 1100+ projects and counting.

Below I am attaching a list of services we are offering -:

Custom Software Solutions Custom CRM Development Web Application Solutions

Web Designing Mobile Application Development E-Commerce Solutions

Blockchain, NFT & NFT Marketplace **Android App development

iOS App Development

So if you are interested in any of the services above, we can get on a

call and discuss the project from the basics. I can even share the past

experiences along with company information and other requirements that you

feel are important to know.

I Will be looking forward to hearing from you.

Cheers!

Richard Shaw

Business Development Executive

=E2=80=9CI strategize with clients to put together business plans to drive =

growth.=E2=80=9D

[image: beacon]

--000000000000eb5aa105e3c229f3

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

eight:115%;font-size:11pt;font-family:Calibri,"sans-serif"">
style=3D"font-size:9pt;line-height:115%;font-family:Verdana,"sans-ser=

if";background-image:initial;background-position:initial;background-si=

ze:initial;background-repeat:initial;background-origin:initial;background-c=

lip:initial">Hello,

Firstly, thank you for sparing some time out of your busy schedule to conne=

ct

with us. We are a leading Development and Design expert company offering th=

e

best services at=C2=A0cost-effective prices.
d-image:initial;background-position:initial;background-size:initial;backgro=

und-repeat:initial;background-origin:initial;background-clip:initial">=C2=

=A0We believe

in building relationships with our clients over trust and extraordinary wor=

k.

It has been a journey of=C2=A012+ years=C2=A0and=C2=A01100=

+ projects=C2=A0and counting. Below I am attaching a list of

services we are offering -:
ont-family:Verdana,"sans-serif"">

ground-size:initial;background-repeat:initial;background-origin:initial;bac=

kground-clip:initial">Custom Software Solutions

Custom CRM Development

Web Application Solutions

Web Designing

Mobile Application Development

E-Commerce Solutions

Blockchain, NFT & NFT Marketplace

t-family:Verdana,"sans-serif";color:rgb(14,16,26);background-imag=

e:initial;background-position:initial;background-size:initial;background-re=

peat:initial;background-origin:initial;background-clip:initial">Android App

development
;font-family:Verdana,"sans-serif";color:rgb(14,16,26);background-=

image:initial;background-position:initial;background-size:initial;backgroun=

d-repeat:initial;background-origin:initial;background-clip:initial">

iOS App Development
;line-height:115%;font-family:Verdana,"sans-serif"">

und-size:initial;background-repeat:initial;background-origin:initial;backgr=

ound-clip:initial">So if you are interested in any of the services

above,=C2=A0we can get on a call and discuss the project from the=

basics.

I can even share the past experiences along with company information and ot=

her

requirements that you feel are important to know.

und-size:initial;background-repeat:initial;background-origin:initial;backgr=

ound-clip:initial">I Will be looking forward to hearing from you.
>

und-size:initial;background-repeat:initial;background-origin:initial;backgr=

ound-clip:initial">Cheers!

s-serif";color:black;background-image:initial;background-position:init=

ial;background-size:initial;background-repeat:initial;background-origin:ini=

tial;background-clip:initial">Richard Shaw
-height:115%;color:rgb(34,34,34);background-image:initial;background-positi=

on:initial;background-size:initial;background-repeat:initial;background-ori=

gin:initial;background-clip:initial">

al;background-position:initial;background-size:initial;background-repeat:in=

itial;background-origin:initial;background-clip:initial">
=3D"background-image:initial;background-position:initial;background-size:in=

itial;background-repeat:initial;background-origin:initial;background-clip:i=

nitial">Business Development Executive

=E2=80=9CI strategize with cl=

ients to put together business plans to drive growth.=E2=80=9D

span>
t;sans-serif"">

uWKIueHBrwZiY98UlQoUnWnDpkRH12mJdX0sYtNnX8gQFJoOjDa9TsKeRUL9Bm6svNqyF1dJ68G=

ctqnh5rdcztJPJ5odnLELKseuuMVUVNYqpu9lU" width=3D"1" height=3D"1" alt=3D"bea=

con" style=3D"display:none; display:none!important;">

--000000000000eb5aa105e3c229f3--

Categories: Google Spam

0 Comments

Page 28 of 232, totaling 3467 entries

previous page

next page

Mon	Tue	Wed	Thu	Fri	Sat	Sun
← Back	May '24					Forward →
		1	2	3	4	5
6	7	8	9	10	11	12
13	14	15	16	17	18	19
20	21	22	23	24	25	26
27	28	29	30	31