Web/SEO/App Spam from Microsoft Outlook
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 07 Jul 2025 13:28:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uYrUu-00000000Odz-2Yxk
for dave@doctor.nl2k.ab.ca;
Mon, 07 Jul 2025 13:27:28 -0600
Resent-From: The Doctor
Resent-Date: Mon, 7 Jul 2025 13:27:28 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-japanwestazolkn19012055.outbound.protection.outlook.com ([52.103.66.55]:38892 helo=OS8PR02CU002.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uYpaT-00000000MnN-3RnW
for root@nk.ca;
Mon, 07 Jul 2025 11:25:15 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
b=NHwZCwPimlTFuhzt0y5XFm8pBssGhtH3083TPpewIK7fjTpV6sLbTCqs4njni4wopKRSeEoeWNakWotCDW805+XxM5uKF0Cjx6oHNvNfs995ExT+ruwV/dJJuD9FtbwUyQ4uh/2GVHfYxmeGUPmWvgHvkAJP79/9mtxUXxmDQL8fMYzPTAUL0r+w1rQHkno+h09u29xQMInR1eUXF8ZOumZLmcqkfofHA73VxJ3iamltLZEI4eow+LWBZj/suXhqWlkgNcBznKEOFX3oR7iZkGXuu+2sS880bNo7FG8xWEmgcTpwnTDYktKhpoEefp/CYUu25gu2nkIBN1+Vt5NuSw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector10001;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=3RtFSg9I24owbHPlNl5/+Nr5TTWGMNckw41LnWJ6zAw=;
b=Y0AortikTlPnOvq8TYPVYHE+SEDha5fIiG5OQfCyviCRkxrLWTAxIbB6Ouh/b1LjxShcJCLP6VT8pCER66ATVMSc7Zs3VVJEY5yQI7CFuFudrhB5JnVZsnH133WZq+x3xP3ilybWs47nZ77uWkLmfKnMxxUwm3+BnNNlEqM3Dk2D07sgmyPgWmEZbiWnIPyLI8hvmA79ws46hG/I5GxQ15eG+yV1Q2MzNPooR7csriZGfTSfiTyCFfQ6R3fvnh7XmMqfugmvy+rcYHd5rg54Qo5TSoKkVGbb2vlWcgvnHjywEXlz+NQVho22YAObW1c3wEKdCLUkz90ac6/rXhu2cg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=3RtFSg9I24owbHPlNl5/+Nr5TTWGMNckw41LnWJ6zAw=;
b=qMqKZNvE0FCz6y30i6o14geEzuDWkGzH/R/O7OOiSxxiLCxoCzj1V+ZEAEVcN5AE7KreQ7Ig21v5sQxhy/lWzp7d8qCOTeZTejWb5sWvgmnNPgRga2N4ARZbeBgKneqtDul5Cmz2Xo670f3aHnA8hRs5dv+UxnomaiJ+CkKGdQvfkvcp3Yt87+uxAY1eO8GpoZWlIaleButlLK2W+jldDr8uA+mCq2KLWBPw3amTEHdPkrOlmzw+Y7ci3g1NZ5P1kp+qqC6r40pEvfmOzvlMY2fFxsTKjcy1eRuRibICZpb0lEM8gOzrvnJFv4U60jCqhXv2Hd/6/YyjjXxfc24dGQ==
Received: from PSAPR02MB5141.apcprd02.prod.outlook.com (2603:1096:301:7b::10)
by PS1PPF9C55575FC.apcprd02.prod.outlook.com (2603:1096:308::2a1) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8901.23; Mon, 7 Jul
2025 17:23:01 +0000
Received: from PSAPR02MB5141.apcprd02.prod.outlook.com
([fe80::8d6a:e8b1:e571:fca3]) by PSAPR02MB5141.apcprd02.prod.outlook.com
([fe80::8d6a:e8b1:e571:fca3%4]) with mapi id 15.20.8901.023; Mon, 7 Jul 2025
17:23:01 +0000
From: Rachel Portman
To: "root@nk.ca"
Subject: Louise
Thread-Topic: Louise
Thread-Index: AdvvWybP+u+2Qk+yTKqAg65gAd0OjA==
Date: Mon, 7 Jul 2025 17:22:16 +0000
Message-ID:
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: PSAPR02MB5141:EE_|PS1PPF9C55575FC:EE_
x-ms-office365-filtering-correlation-id: d76adf16-f148-4927-4f0e-08ddbd7aed0f
x-ms-exchange-slblob-mailprops:
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
x-microsoft-antispam:
BCL:0;ARA:14566002|461199028|5062599005|3412199025|40105399003|51005399003|440099028|39105399003|102099032;
x-microsoft-antispam-message-info:
=?us-ascii?Q?lcaTbXPLxu8KscdDN/PZos8u4zQ/4Pv69NhuMBt4BRr+6EXl6eNK3wn2WErQ?=
=?us-ascii?Q?W31ZUqxNuxrJYWD81iVOLUP3u80CTCJPrZhy4TO2+weJlnxTySXlU31dV5MC?=
=?us-ascii?Q?IYrZTw6XF6iehCAGMMtmzQI4AxsfPd0mA4lkX+3/TuYURyUU2JyebeaCesmp?=
=?us-ascii?Q?W1XIS+0ohQdcIqUM+8By35af1HM+vonAoK1FoXf2Qy228feM0dUnQQTp9fLh?=
=?us-ascii?Q?uN9K+5VC2ToWoMWj3RUcx7rkkRUkRi+QpA7z8gOmVzqGlFrhFUDwECYI+9pg?=
=?us-ascii?Q?ygbHQNgP9JDWMAO44lfxt6nzRDMjN/rCSwub0bPnSbplroZ7E2n/2+/d0N0D?=
=?us-ascii?Q?HX5y44q2HTFN2hdtDJu1wJQ7BQ+1QG5j81bwgOqW6LUfR1Cwruzj7C/LOmjt?=
=?us-ascii?Q?HdDNnJETgcfw0widURkrDztCIhvCZ3OzisaCAAqfzLPFUm/v2YbYqBE+5JwE?=
=?us-ascii?Q?ABo6SDuVyeo0eL1cBn8KU6X7lyWC3t6DfOOJq9IjS+Mp4fbBOYR7fpeqDmBu?=
=?us-ascii?Q?EecboJOQh4ItLelDijHQak4f7wYtzfo57qL1l99SU28DZi/cbqK2t6rx2UQR?=
=?us-ascii?Q?rqkflViQsUk9fvC85W5FGg0jJi7sEPQW2SA1YqUwxN1rGN24528zoKHvYsDf?=
=?us-ascii?Q?xIoRZIT2hoyAHysVebbZmaU4/rcD400QoI4vYQL8Le4FKXmkg778DveXLnvB?=
=?us-ascii?Q?S08TLWcbCzXPibyGKoh4LskA++lTLUjihzvkN/ppTywSLmHth/yus/skbxb9?=
=?us-ascii?Q?8hZ8cg/0+P2VavB99aNPZWZ7HK2ExwyVKrRxl+u5aBrGrFXpXTds7Y/yt1Uf?=
=?us-ascii?Q?RIX/lYn1rmtSR+IcBz3wKeF3DOkS94dkneoK7zAk86rfNmsrl5ik0/RwuWsS?=
=?us-ascii?Q?UJQpagpBfWfqzgIld/IIr0HIK5NArtZa9+Gwt40c9irsmpNE2UEXbQEmkUy4?=
=?us-ascii?Q?40lIpW1IDrQd2ZMYyn4tH9MLnSZpk0si+HZxLAZ7huKrvUl9dixObwv7xjQ7?=
=?us-ascii?Q?M7gDlcF+Gd6F0fra3qSGxqZ57g5fcFSIn3G990g+toOB+hhSgsjQx22I7p9g?=
=?us-ascii?Q?+J8HyMXfnhpHGooqliQ7tDMv1egllg=3D=3D?=
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0:
=?us-ascii?Q?1zA8lItIxzUobxGaaw8wn5Pk6dEw1xy8appQB6MT3hwP6whqTGg0e4g5KBur?=
=?us-ascii?Q?KUjy7f0J3tXe8tyE6DR+NFtNQlvNjt1fz3ra4gC22DZ99nO9fkBTOoOC+wUF?=
=?us-ascii?Q?DvcecKNinABPfRiqwIFn7rVrOgHoiHombc75X7G4/k8kN1zlqX2EkSGHT5yt?=
=?us-ascii?Q?3+xAJ4/teIlFKztbTY/3Wem50NLwuiG2AP7pnOdE6qqXIMMs2Wr6uXyQJ2ka?=
=?us-ascii?Q?1LAcLUinX3qQHVFpsZkvdzlk0/fwiyLrYP7mXTl6vxHwF4H5Ri41z8h5fkPd?=
=?us-ascii?Q?MxHHYzpk8H4qGO54JGu54GXB4eNePRlFbQWDRbQmWaMEGRFMyaJIK9fwVxZJ?=
=?us-ascii?Q?AO5jDoc6B7jnuuIHbfZ9YfLYqOuJjdjeGLo2ZzI6HoHaYMQV+UX2KuLXWkpj?=
=?us-ascii?Q?Tb9G2JisC/Ro0TmgM+7XYiHI49nBUpkcZ/4yB0UDbLPYEQjN2I279Op6aiWP?=
=?us-ascii?Q?yB3WpeYCvS8yqzAY7e924SwjSB0vRimqrTjQIWuMKJX848Wdj/M/6QIE4Tro?=
=?us-ascii?Q?EnBDc4wexHqEsBi73x4GRVH+OhHj9gWZ1IR3211vYwZBzYgZKDFZRSaxW6yO?=
=?us-ascii?Q?hnGzqQoeMLCkMO1bvoA1inbNHQ3U8wvf4gbQuQopWbj4rPvNLI4UaW5aHZKE?=
=?us-ascii?Q?Ehcxxu++ZZSvkRvev2jv21SiTX2Lf/ksc2h3oGAydT2zepVsd/eJ6soPbo3c?=
=?us-ascii?Q?PScUOG59EnctAInrEOyEGNALIgWERHhJl3oeOalzZIxD4VS02yYioNkxZV0V?=
=?us-ascii?Q?S78REHo0NhaAugEQY6ov7IwxeZ/W/OxGN5cSCyTMiyBjSn65tGdh1S48pXpQ?=
=?us-ascii?Q?DgAjm+vv3kDgcD/Su4R5oMqxTa7o5C1kxXaTh0hhPWc8NfIHf4yhkper1NMt?=
=?us-ascii?Q?CFzleJX9od0Lp2TDljTZ+tgVn53uH6Sqt0ttynzIt8MFBwvYfC5VqriWH3/H?=
=?us-ascii?Q?Eqhw/UKVxfvc0czjKtsOuzul8EeN+gc/4yvDeVi7ReWyTa3IMoZSIn0kIBWA?=
=?us-ascii?Q?OStNtiNKK5fwWCcz51lAmTdIqpy5801qZ/uCXHEocGPT5krbQCKOzC6Pa+qC?=
=?us-ascii?Q?DZJXuu2ml83Omq6f8wdSdyvblx+93vOlNhWpLQSqrB+97sxH/KhGxjcdz1nD?=
=?us-ascii?Q?VdplUS16c1PLsSwMicxbM5I+uJ3kRFpbUbKVWpomLdv1In4NVaMqVshuDkp4?=
=?us-ascii?Q?RZFAO73FuYHQgPsU+43Us3W62uASuzT1cZ7fNh6CRneb/GH7ZO0K69Sj3/Pz?=
=?us-ascii?Q?+g42FZZjXL6rDHolfnU0?=
Content-Type: multipart/alternative;
boundary="_000_PSAPR02MB51411FAFB98C7704631F5F5CAC4FAPSAPR02MB5141apcp_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PSAPR02MB5141.apcprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: d76adf16-f148-4927-4f0e-08ddbd7aed0f
X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Jul 2025 17:22:16.1471
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PS1PPF9C55575FC
X-Spam_score: 5.1
X-Spam_score_int: 51
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello root@nk.ca, just following up to see if you'd like me
to share pricing details for my services. Please let me know if you're interested.
From: Sara Watson Sent: Tuesday, May 13, 2025, 3:28:49 PM To: root@nk.ca
Content analysis details: (5.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[52.103.66.55 listed in dnsbl.ahbl.org]
[52.103.66.55 listed in dnsbl.ahbl.org]
[52.103.66.55 listed in dnsbl.ahbl.org]
[52.103.66.55 listed in dnsbl.ahbl.org]
[2603:1096:301:7b:0:0:0:10 listed in]
[dnsbl.ahbl.org]
[2603:1096:301:7b:0:0:0:10 listed in]
[dnsbl.ahbl.org]
[2603:1096:301:7b:0:0:0:10 listed in]
[dnsbl.ahbl.org]
[2603:1096:301:7b:0:0:0:10 listed in]
[dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[52.103.66.55 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[52.103.66.55 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[52.103.66.55 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[52.103.66.55 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[2603:1096:301:7b:0:0:0:10 listed in]
[will-spam-for-food.eu.org]
[2603:1096:301:7b:0:0:0:10 listed in]
[will-spam-for-food.eu.org]
[2603:1096:301:7b:0:0:0:10 listed in]
[will-spam-for-food.eu.org]
[2603:1096:301:7b:0:0:0:10 listed in]
[will-spam-for-food.eu.org]
[2603:1096:301:7b:0:0:0:10 listed in]
[will-spam-for-food.eu.org]
[2603:1096:301:7b:0:0:0:10 listed in]
[will-spam-for-food.eu.org]
[2603:1096:301:7b:0:0:0:10 listed in]
[will-spam-for-food.eu.org]
[2603:1096:301:7b:0:0:0:10 listed in]
[will-spam-for-food.eu.org]
[52.103.66.55 listed in will-spam-for-food.eu.org]
[52.103.66.55 listed in will-spam-for-food.eu.org]
[52.103.66.55 listed in will-spam-for-food.eu.org]
[52.103.66.55 listed in will-spam-for-food.eu.org]
[52.103.66.55 listed in will-spam-for-food.eu.org]
[52.103.66.55 listed in will-spam-for-food.eu.org]
[52.103.66.55 listed in will-spam-for-food.eu.org]
[52.103.66.55 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[52.103.66.55 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[52.103.66.55 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 ARC_SIGNED Message has a ARC signature
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 ARC_VALID Message has a valid ARC signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[rajwebsitedesigning(at)outlook.com]
0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name
0.0 HTML_MESSAGE BODY: HTML included in message
Subject: {SPAM?} Louise
--_000_PSAPR02MB51411FAFB98C7704631F5F5CAC4FAPSAPR02MB5141apcp_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Hello root@nk.ca,
just following up to see if you'd like me to share pricing details for my =
services. Please let me know if you're interested.
From: Sara Watson
Sent: Tuesday, May 13, 2025, 3:28:49 PM
To: root@nk.ca
Subject: root@nk.ca
Hello,
I hope today is fantastic for you!
Having nearly ten years of experience in graphics and web design, I take gr=
eat pride in producing unique, innovative designs that help clients achieve=
their objectives.
If you're interested, I'd be happy to send along a few recent projects.
Kindly,
Sara Watson
--_000_PSAPR02MB51411FAFB98C7704631F5F5CAC4FAPSAPR02MB5141apcp_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
>
break-word">
;Calibri",sans-serif">Hello root@nk.ca,
just following up to see if you’d like me to share pricing deta=
ils for my services. Please let me know if you’re interested.
:p>
;Calibri",sans-serif">
From: Sara Watson
Sent: Tuesday, May 13, 2025, 3:28:49 PM
To: root@nk.ca
Subject: root@nk.ca
Hello,
I hope today is fantastic for you!
Having nearly ten years of experience in graphics and web design, I take gr=
eat pride in producing unique, innovative designs that help clients achieve=
their objectives.
If you're interested, I'd be happy to send along a few recent projects.
>
Kindly,
Sara Watson
--_000_PSAPR02MB51411FAFB98C7704631F5F5CAC4FAPSAPR02MB5141apcp_--