WEb/SEo/App spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 10 Feb 2025 14:04:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1thawM-00000000Bvk-21Zb

for dave@doctor.nl2k.ab.ca;

Mon, 10 Feb 2025 14:03:38 -0700

Resent-From: The Doctor

Resent-Date: Mon, 10 Feb 2025 14:03:38 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f175.google.com ([209.85.214.175]:47564)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1thaoZ-00000000BWg-0TqX

for root@nk.ca;

Mon, 10 Feb 2025 13:55:39 -0700

Received: by mail-pl1-f175.google.com with SMTP id d9443c01a7336-21fa56e1583so18950415ad.3

for ; Mon, 10 Feb 2025 12:53:40 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1739220815; x=1739825615; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=6hKtgceCPho8l+ij0Auq37MxCcd4uDqee8HdIfIOdnI=;

b=NPGyy+c6Z44WkRreM3W2oZggO2UZDKki0+48uDAXrC4qSjnVZkFxE92518J2O61dX4

/K56g5MwyNR+HkuLG3s3icbnw01iUz8dWISiYAm+461fGIsluu+CqzN3+Ep9g2wwfb8n

22haUoOeTNoSm5JHlmohLL8ucxeb2a1hONahEgu8duYn4aVlmk9qGMTF+ll5kCato9o2

0aq43LkA6fLWJtXFyP9Q+dVWsK0s3OPfDsnv2YAq6FLJW55WFkLbOlFYXTBpnZUO9DUC

+OpvyojsKoNWcVNPzJrYSE/RbAbOiJyWaSm39DLSPVwHVqnZMM+8xyd3qPKzX3lcjQfV

qItw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1739220815; x=1739825615;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=6hKtgceCPho8l+ij0Auq37MxCcd4uDqee8HdIfIOdnI=;

b=bW0mFc/nVeXVLA5rVTAkhsYTTy3y4/GbIC3qE5ZnchAEpE+iGMMiuAoNVTgYIV/KoW

22cyEQMwTCJmoXKJQZ9sEMSNkopfK1fmvq9MHRC7h+M0pb+7ORhjb6GxxlpegQ7/x68d

cJI7WkyrGc5QBouxGfvz+VE2aPbLqhnfcY1PPYY2xRzsrBWF6216DeY40UUWDpNqQrGK

GEPNNbWgr0E398dbOod0aHURli1RJZIRoCGvoqBYEWwDhlIRhssnGc7Z9zwXvtFe6nIK

ShUo9Ze/9kedy9uBE3VODDCqanP74TYv4FGvyx5dfgL5o0T2YXKEtQQx6OgHi8Zw8Xb8

Ffng==

X-Gm-Message-State: AOJu0YxNoj38/6/KSkN/g//GxRxZXKIV0dMtJs+vkhQoobQ/RBcYHmHj

4vtcCg7Hpgvjx7FKGfWdDOUaufiT2UVRbb6WixTBdSInHTEbaGOSPb7nLQ==

X-Gm-Gg: ASbGnctW2TFnyK6Q6KDXtzRYRdWZkaUoKHMEUsPUmkGKTojh7j5Jms6zObPXLM5BzCJ

jKJwH/u469VXk8W9Yu440iNWCaD4IBzJ19Z7ni9feLgi2qmitK7W4WOq0HXA4MxyGxz7o+qC37R

wnB5SQ0whlFnnhlDkNyLlBO2WGf5XyXirJ/k2VWYhGfvd0/XPD4gzUCB9wP7S3mbtLvtFjglYS5

JBSV5SZNgxUTwSexQA2GH9HzseaKpT4Io28hdQQGK9MTxx2TnEL9VZAm7UJNpihDyzY6y8SJ2Rh

iBAHzCHm5AmbzZ7+MuzVtkhBjwh+d7GwGsY=

X-Google-Smtp-Source: AGHT+IEerUUcJV0Woo192wjFaOXbBs2+Z+bwFFlyNcK/TzG6wC+SfkClScpjwI4SUU3LAy1+RHNrcA==

X-Received: by 2002:a17:903:40d0:b0:212:fa3:f627 with SMTP id d9443c01a7336-21f4e6ae6a4mr252099955ad.16.1739220814546;

Mon, 10 Feb 2025 12:53:34 -0800 (PST)

Received: from DESKTOP5K6VSPA ([2401:4900:5941:4ca2:382e:c318:a45e:1f0])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-21f368b4bd6sm83093185ad.229.2025.02.10.12.53.32

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Mon, 10 Feb 2025 12:53:34 -0800 (PST)

From: "Catherine"

To:

Subject: Re: Re design and Re-development ??

Date: Tue, 11 Feb 2025 02:22:48 +0530

Message-ID: <1d8001db7bfd$d94d5d70$8be81850$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_1D81_01DB7C2B.F3059970"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: Adt7/a57IRcJlXEOTS2TyI1FTGCluw==

Content-Language: en-us

X-Spam_score: 5.3

X-Spam_score_int: 53

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, root@nk.ca I reach out to see if there is something you

want to repair, or redesign on your site. Let me know if you have any requirements

regarding the website and Apps.



Content analysis details: (5.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2401:4900:5941:4ca2:382e:c318:a45e:1f0 listed in]

[will-spam-for-food.eu.org]

[2401:4900:5941:4ca2:382e:c318:a45e:1f0 listed in]

[will-spam-for-food.eu.org]

[2401:4900:5941:4ca2:382e:c318:a45e:1f0 listed in]

[will-spam-for-food.eu.org]

[2401:4900:5941:4ca2:382e:c318:a45e:1f0 listed in]

[will-spam-for-food.eu.org]

[2401:4900:5941:4ca2:382e:c318:a45e:1f0 listed in]

[will-spam-for-food.eu.org]

[2401:4900:5941:4ca2:382e:c318:a45e:1f0 listed in]

[will-spam-for-food.eu.org]

[2401:4900:5941:4ca2:382e:c318:a45e:1f0 listed in]

[will-spam-for-food.eu.org]

[2401:4900:5941:4ca2:382e:c318:a45e:1f0 listed in]

[will-spam-for-food.eu.org]

[209.85.214.175 listed in will-spam-for-food.eu.org]

[209.85.214.175 listed in will-spam-for-food.eu.org]

[209.85.214.175 listed in will-spam-for-food.eu.org]

[209.85.214.175 listed in will-spam-for-food.eu.org]

[209.85.214.175 listed in will-spam-for-food.eu.org]

[209.85.214.175 listed in will-spam-for-food.eu.org]

[209.85.214.175 listed in will-spam-for-food.eu.org]

[209.85.214.175 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.175 listed in dnsbl.ahbl.org]

[209.85.214.175 listed in dnsbl.ahbl.org]

[209.85.214.175 listed in dnsbl.ahbl.org]

[209.85.214.175 listed in dnsbl.ahbl.org]

[2401:4900:5941:4ca2:382e:c318:a45e:1f0 listed in]

[dnsbl.ahbl.org]

[2401:4900:5941:4ca2:382e:c318:a45e:1f0 listed in]

[dnsbl.ahbl.org]

[2401:4900:5941:4ca2:382e:c318:a45e:1f0 listed in]

[dnsbl.ahbl.org]

[2401:4900:5941:4ca2:382e:c318:a45e:1f0 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.175 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.175 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.175 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.175 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.175 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.214.175 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[catherinaluis1(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[catherinaluis1(at)gmail.com]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} Re: Re design and Re-development ??



This is a multipart message in MIME format.



------=_NextPart_000_1D81_01DB7C2B.F3059970

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi, root@nk.ca



I reach out to see if there is something you want to repair, or redesign on

your site.



Let me know if you have any requirements regarding the website and Apps.



Regards,



Catherine,



P.S.: If you are not interested in our services, please write Unsubscribe in

the Subject and send it to us.





------=_NextPart_000_1D81_01DB7C2B.F3059970

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">






charset=3Dus-ascii">



















Hi, root@nk.ca





I reach out to see if there is something you want =

to repair,

or redesign on your site.






style=3D'background:lime;mso-highlight:lime'>Let me know

if you have any requirements regarding the website and Apps.





Regards,





Catherine,





P.S.: If you are not interested in our services, =

please

write Unsubscribe in the Subject and send it to us.

















------=_NextPart_000_1D81_01DB7C2B.F3059970--



CAA Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 10 Feb 2025 10:41:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1thXm6-00000000BdZ-23cj

for dave@doctor.nl2k.ab.ca;

Mon, 10 Feb 2025 10:40:50 -0700

Resent-From: The Doctor

Resent-Date: Mon, 10 Feb 2025 10:40:50 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.55.38.60] (port=38817 helo=fiverr.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1thXc7-000000007xO-0kBj

for games@nl2k.ab.ca;

Mon, 10 Feb 2025 10:30:35 -0700

Date: Mon, 10 Feb 2025 12:21:52 -0500

From: =?UTF-8?B?TWVzc2FnZS1mcm9tIFRoZS5DQUE=?=

Reply-To: =?UTF-8?B?TWVzc2FnZS1mcm9tIFRoZS5DQUE=?=

To: games@nl2k.ab.ca

Message-ID:

Subject: =?UTF-8?B?V2UtaGF2ZSBhX3N1cnByaXNlIGZvciBUaGUuQ0FBIGN1c3RvbWVycy4=?=

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

List-Id: "0" <4.iXZVTkAT7J6lySVgb28PFd3iXK0YT0Vr.localhost.games>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-ID: xpro-9985-1488:xpro-9985:MAILING:inxmailde

X-CSA-Complaints: csa-complaints@ional.co.uk

X-Mailer: Inxmail EE 4.8.48.825

X-Spam_score: 25.8

X-Spam_score_int: 258

X-Spam_bar: +++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  CAA You have been chosen!



Content analysis details: (25.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.55.38.60 listed in will-spam-for-food.eu.org]

[103.55.38.60 listed in will-spam-for-food.eu.org]

[103.55.38.60 listed in will-spam-for-food.eu.org]

[103.55.38.60 listed in will-spam-for-food.eu.org]

[103.55.38.60 listed in will-spam-for-food.eu.org]

[103.55.38.60 listed in will-spam-for-food.eu.org]

[103.55.38.60 listed in will-spam-for-food.eu.org]

[103.55.38.60 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.55.38.60 listed in dnsbl.ahbl.org]

[103.55.38.60 listed in dnsbl.ahbl.org]

[103.55.38.60 listed in dnsbl.ahbl.org]

[103.55.38.60 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.55.38.60 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.55.38.60 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.55.38.60 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.55.38.60 listed in dnsbl.ahbl.org]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=fiverr.com;ip=103.55.38.60;r=doctor.nl2k.ab.ca]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.6 J_CHICKENPOX_33 BODY: 3alpha-pock-3alpha

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

2.5 GOOG_STO_IMG_NOHTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} =?UTF-8?B?V2UtaGF2ZSBhX3N1cnByaXNlIGZvciBUaGUuQ0FBIGN1c3RvbWVycy4=?=

















CAA

































Canada Post Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 10 Feb 2025 10:41:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1thXm2-00000000Bd7-27L2

for dave@doctor.nl2k.ab.ca;

Mon, 10 Feb 2025 10:40:46 -0700

Resent-From: The Doctor

Resent-Date: Mon, 10 Feb 2025 10:40:46 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [154.201.77.166] (port=46550 helo=NEW-5320533199.local)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1thXSt-000000001i3-2tdb

for doctor@doctor.nl2k.ab.ca;

Mon, 10 Feb 2025 10:21:05 -0700

Received: by NEW-5320533199.local (Postfix, from userid 1000)

id E1195738617; Tue, 11 Feb 2025 01:20:52 +0800 (CST)

To: doctor@doctor.nl2k.ab.ca

Subject: Canada Post: Update Your Address for Pending Package.doctor@doctor.nl2k.ab.ca

Date: Tue, 11 Feb 2025 01:20:52 +0800

From: CanadaPost

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_b9486f7576ff624ad0d768c3ed188b18"

Content-Transfer-Encoding: 8bit

X-Spam_score: 24.5

X-Spam_score_int: 245

X-Spam_bar: ++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Canada Post Delivery Notice body { font-family: 'Arial',

sans-serif; line-height: 1.6; background-color: #f9f9f9; margin: 0; padding:

0; } .container { max-width: 600px; margin: 20px auto; padding: 20px; border:

1px solid #ddd; [...]



Content analysis details: (24.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[154.201.77.166 listed in will-spam-for-food.eu.org]

[154.201.77.166 listed in will-spam-for-food.eu.org]

[154.201.77.166 listed in will-spam-for-food.eu.org]

[154.201.77.166 listed in will-spam-for-food.eu.org]

[154.201.77.166 listed in will-spam-for-food.eu.org]

[154.201.77.166 listed in will-spam-for-food.eu.org]

[154.201.77.166 listed in will-spam-for-food.eu.org]

[154.201.77.166 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[154.201.77.166 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[154.201.77.166 listed in dnsbl.ahbl.org]

[154.201.77.166 listed in dnsbl.ahbl.org]

[154.201.77.166 listed in dnsbl.ahbl.org]

[154.201.77.166 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[154.201.77.166 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[154.201.77.166 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[154.201.77.166 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[154.201.77.166 listed in dnsbl.ahbl.org]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: canadapost-serve-postescanada.help]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: canadapost-serve-postescanada.help]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: ee952712138ca.canadapost-serve-postescanada.help]

3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL

[154.201.77.166 listed in zen.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[154.201.77.166 listed in zen.spamhaus.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: canadapost-serve-postescanada.help]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=no-reply%40canadapost.ca;ip=154.201.77.166;r=doctor.nl2k.ab.ca]

-0.1 MD5_CONTENT BODY: Contains MD5 hash.

1.3 URI_HEX URI: URI hostname has long hexadecimal sequence

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

Subject: {SPAM?} Canada Post: Update Your Address for Pending Package.doctor@doctor.nl2k.ab.ca



This is a multi-part message in MIME format.



--b1_b9486f7576ff624ad0d768c3ed188b18

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit













Canada Post Delivery Notice



body {

font-family: 'Arial', sans-serif;

line-height: 1.6;

background-color: #f9f9f9;

margin: 0;

padding: 0;

}

.container {

max-width: 600px;

margin: 20px auto;

padding: 20px;

border: 1px solid #ddd;

border-radius: 8px;

background-color: #fff;

box-shadow: 0 4px 8px rgba(0,0,0,0.1);

}

.header {

text-align: center;

margin-bottom: 20px;

}

.header img {

max-width: 60px;

height: auto;

margin: 0 auto;

}

.title {

font-size: 1.5em;

font-weight: bold;

color: #004080;

text-align: center;

margin-bottom: 20px;

}

.content {

text-align: left;

margin-bottom: 20px;

}

.content p {

margin: 10px 0;

font-size: 14px;

color: #333;

}

.button {

display: inline-block;

padding: 12px 24px;

background-color: #d52b1e;

color: #fff;

text-decoration: none;

border-radius: 4px;

font-size: 16px;

font-weight: bold;

margin: 20px 0;

}

.highlight {

background-color: #f4f4f4;

padding: 20px;

border-radius: 4px;

border: 1px solid #ddd;

margin: 20px 0;

font-size: 14px;

color: #333;

}

.small-text {

font-size: 12px;

margin-top: 20px;

color: #666;

}

.footer {

border-top: 1px solid #ddd;

padding-top: 20px;

margin-top: 20px;

text-align: center;

}

.footer p {

margin: 5px 0;

font-size: 10px;

}

.footer a {

color: #0073bb;

text-decoration: none;

}















Canada Post Delivery Notice



Dear Customer,

We attempted delivery of your package, (Tracking Number: EE952712138CA), but it was unsuccessful due to an incorrect address.

Action Required: Please Update Your Delivery Address

To ensure the successful delivery of your package, please update your delivery address at your earliest convenience.



To update your address, click the button below:



Update Address



For security reasons, please make sure to use only the secure link in this email.







Thank you for choosing Canada Post.

https://www.canadapost-postescanada.ca

© 2024 Canada Post Corporation

If you no longer wish to receive such notifications, please unsubscribe here.

Contact us at support@canadapost.ca or call 1-800-267-1177.

Message ID: 722eb5905e043e296378750f0214baa0











--b1_b9486f7576ff624ad0d768c3ed188b18

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit













Canada Post Delivery Notice











Canada Post Logo



Canada Post Delivery Notice




Dear Customer,



We attempted delivery of your package, (Tracking Number: EE952712138CA), but it was unsuccessful due to an incorrect address.



Action Required: Please Update Your Delivery Address



To ensure the successful delivery of your package, please update your delivery address at your earliest convenience.





To update your address, click the button below:





Update Address



For security reasons, please make sure to use only the secure link in this email.





















--b1_b9486f7576ff624ad0d768c3ed188b18--



CAA Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 10 Feb 2025 10:41:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1thXly-00000000Bcp-2isb

for dave@doctor.nl2k.ab.ca;

Mon, 10 Feb 2025 10:40:42 -0700

Resent-From: The Doctor

Resent-Date: Mon, 10 Feb 2025 10:40:42 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.55.38.68] (port=38587 helo=beeg.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1thXjV-00000000BUN-1uxP

for doctor@doctor.nl2k.ab.ca;

Mon, 10 Feb 2025 10:38:13 -0700

Date: Mon, 10 Feb 2025 12:20:10 -0500

From: =?UTF-8?B?TWVzc2FnZS1mcm9tIFRoZS5DQUE=?=

Reply-To: =?UTF-8?B?TWVzc2FnZS1mcm9tIFRoZS5DQUE=?=

To: doctor@doctor.nl2k.ab.ca

Message-ID:

Subject: =?UTF-8?B?V2UtaGF2ZSBhX3N1cnByaXNlIGZvciBUaGUuQ0FBIGN1c3RvbWVycy4=?=

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

List-Id: "0" <4.TmHiUwz3zwGw9TXqdciGso0ge9lRaJWE.localhost.doctor>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-ID: xpro-9985-1488:xpro-9985:MAILING:inxmailde

X-CSA-Complaints: csa-complaints@ional.co.uk

X-Mailer: Inxmail EE 4.8.48.825

X-Spam_score: 28.0

X-Spam_score_int: 280

X-Spam_bar: ++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  CAA You have been chosen!



Content analysis details: (28.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.55.38.68 listed in will-spam-for-food.eu.org]

[103.55.38.68 listed in will-spam-for-food.eu.org]

[103.55.38.68 listed in will-spam-for-food.eu.org]

[103.55.38.68 listed in will-spam-for-food.eu.org]

[103.55.38.68 listed in will-spam-for-food.eu.org]

[103.55.38.68 listed in will-spam-for-food.eu.org]

[103.55.38.68 listed in will-spam-for-food.eu.org]

[103.55.38.68 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.55.38.68 listed in dnsbl.ahbl.org]

[103.55.38.68 listed in dnsbl.ahbl.org]

[103.55.38.68 listed in dnsbl.ahbl.org]

[103.55.38.68 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.55.38.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.55.38.68 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.55.38.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.55.38.68 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.55.38.68 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[103.55.38.68 listed in zen.spamhaus.org]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.55.38.68 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.55.38.68 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[103.55.38.68 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.55.38.68 listed in bl.score.senderscore.com]

0.6 J_CHICKENPOX_33 BODY: 3alpha-pock-3alpha

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 GOOG_STO_IMG_NOHTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} =?UTF-8?B?V2UtaGF2ZSBhX3N1cnByaXNlIGZvciBUaGUuQ0FBIGN1c3RvbWVycy4=?=

















CAA

































CAA Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 10 Feb 2025 10:41:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1thXlv-00000000BcZ-0vRS

for dave@doctor.nl2k.ab.ca;

Mon, 10 Feb 2025 10:40:39 -0700

Resent-From: The Doctor

Resent-Date: Mon, 10 Feb 2025 10:40:39 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.55.38.58] (port=47497 helo=theverge.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1thXa4-000000007oJ-2ZHl

for sales@nk.ca;

Mon, 10 Feb 2025 10:28:29 -0700

Date: Mon, 10 Feb 2025 12:19:28 -0500

From: =?UTF-8?B?TWVzc2FnZS1mcm9tIFRoZS5DQUE=?=

Reply-To: =?UTF-8?B?TWVzc2FnZS1mcm9tIFRoZS5DQUE=?=

To: sales@nk.ca

Message-ID:

Subject: =?UTF-8?B?V2UtaGF2ZSBhX3N1cnByaXNlIGZvciBUaGUuQ0FBIGN1c3RvbWVycy4=?=

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

List-Id: "0" <4.5Inb1gQofTknwJ3iHUI9A0z4otWnZhE9.localhost.sales>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-ID: xpro-9985-1488:xpro-9985:MAILING:inxmailde

X-CSA-Complaints: csa-complaints@ional.co.uk

X-Mailer: Inxmail EE 4.8.48.825

X-Spam_score: 26.7

X-Spam_score_int: 267

X-Spam_bar: ++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  CAA You have been chosen!



Content analysis details: (26.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.55.38.58 listed in will-spam-for-food.eu.org]

[103.55.38.58 listed in will-spam-for-food.eu.org]

[103.55.38.58 listed in will-spam-for-food.eu.org]

[103.55.38.58 listed in will-spam-for-food.eu.org]

[103.55.38.58 listed in will-spam-for-food.eu.org]

[103.55.38.58 listed in will-spam-for-food.eu.org]

[103.55.38.58 listed in will-spam-for-food.eu.org]

[103.55.38.58 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.55.38.58 listed in dnsbl.ahbl.org]

[103.55.38.58 listed in dnsbl.ahbl.org]

[103.55.38.58 listed in dnsbl.ahbl.org]

[103.55.38.58 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.55.38.58 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.55.38.58 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.55.38.58 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.55.38.58 listed in dnsbl.ahbl.org]

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.6 J_CHICKENPOX_33 BODY: 3alpha-pock-3alpha

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 GOOG_STO_IMG_NOHTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} =?UTF-8?B?V2UtaGF2ZSBhX3N1cnByaXNlIGZvciBUaGUuQ0FBIGN1c3RvbWVycy4=?=

















CAA

































CAA Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 10 Feb 2025 10:41:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1thXlq-00000000Bc7-3coa

for dave@doctor.nl2k.ab.ca;

Mon, 10 Feb 2025 10:40:34 -0700

Resent-From: The Doctor

Resent-Date: Mon, 10 Feb 2025 10:40:34 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.55.38.69] (port=37063 helo=kooora.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1thXic-00000000BRv-3Klr

for doctor@netknow.ca;

Mon, 10 Feb 2025 10:37:20 -0700

Date: Mon, 10 Feb 2025 12:17:01 -0500

From: =?UTF-8?B?TWVzc2FnZS1mcm9tIFRoZS5DQUE=?=

Reply-To: =?UTF-8?B?TWVzc2FnZS1mcm9tIFRoZS5DQUE=?=

To: doctor@netknow.ca

Message-ID:

Subject: =?UTF-8?B?V2UtaGF2ZSBhX3N1cnByaXNlIGZvciBUaGUuQ0FBIGN1c3RvbWVycy4=?=

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

List-Id: "0" <4.30Qyn15q1qo5SYwHF6jfj1yeidgzrAl4.localhost.doctor>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-ID: xpro-9985-1488:xpro-9985:MAILING:inxmailde

X-CSA-Complaints: csa-complaints@ional.co.uk

X-Mailer: Inxmail EE 4.8.48.825

X-Spam_score: 31.7

X-Spam_score_int: 317

X-Spam_bar: +++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  CAA You have been chosen!



Content analysis details: (31.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.55.38.69 listed in will-spam-for-food.eu.org]

[103.55.38.69 listed in will-spam-for-food.eu.org]

[103.55.38.69 listed in will-spam-for-food.eu.org]

[103.55.38.69 listed in will-spam-for-food.eu.org]

[103.55.38.69 listed in will-spam-for-food.eu.org]

[103.55.38.69 listed in will-spam-for-food.eu.org]

[103.55.38.69 listed in will-spam-for-food.eu.org]

[103.55.38.69 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.55.38.69 listed in dnsbl.ahbl.org]

[103.55.38.69 listed in dnsbl.ahbl.org]

[103.55.38.69 listed in dnsbl.ahbl.org]

[103.55.38.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.55.38.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.55.38.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.55.38.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.55.38.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.55.38.69 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[103.55.38.69 listed in zen.spamhaus.org]

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.6 J_CHICKENPOX_33 BODY: 3alpha-pock-3alpha

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

2.5 GOOG_STO_IMG_NOHTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} =?UTF-8?B?V2UtaGF2ZSBhX3N1cnByaXNlIGZvciBUaGUuQ0FBIGN1c3RvbWVycy4=?=

















CAA

































CAA Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 10 Feb 2025 10:41:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1thXln-00000000Bbw-1BO7

for dave@doctor.nl2k.ab.ca;

Mon, 10 Feb 2025 10:40:31 -0700

Resent-From: The Doctor

Resent-Date: Mon, 10 Feb 2025 10:40:31 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.55.38.65] (port=52551 helo=souq.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1thXca-000000007zi-2CqS

for root@doctor.nl2k.ab.ca;

Mon, 10 Feb 2025 10:31:04 -0700

Date: Mon, 10 Feb 2025 12:16:48 -0500

From: =?UTF-8?B?TWVzc2FnZS1mcm9tIFRoZS5DQUE=?=

Reply-To: =?UTF-8?B?TWVzc2FnZS1mcm9tIFRoZS5DQUE=?=

To: root@doctor.nl2k.ab.ca

Message-ID:

Subject: =?UTF-8?B?V2UtaGF2ZSBhX3N1cnByaXNlIGZvciBUaGUuQ0FBIGN1c3RvbWVycy4=?=

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

List-Id: "0" <4.uypGCtzHACeYaVyvO0CCjnVNN9p5mtmz.localhost.root>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-ID: xpro-9985-1488:xpro-9985:MAILING:inxmailde

X-CSA-Complaints: csa-complaints@ional.co.uk

X-Mailer: Inxmail EE 4.8.48.825

X-Spam_score: 25.8

X-Spam_score_int: 258

X-Spam_bar: +++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  CAA You have been chosen!



Content analysis details: (25.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.55.38.65 listed in will-spam-for-food.eu.org]

[103.55.38.65 listed in will-spam-for-food.eu.org]

[103.55.38.65 listed in will-spam-for-food.eu.org]

[103.55.38.65 listed in will-spam-for-food.eu.org]

[103.55.38.65 listed in will-spam-for-food.eu.org]

[103.55.38.65 listed in will-spam-for-food.eu.org]

[103.55.38.65 listed in will-spam-for-food.eu.org]

[103.55.38.65 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.55.38.65 listed in dnsbl.ahbl.org]

[103.55.38.65 listed in dnsbl.ahbl.org]

[103.55.38.65 listed in dnsbl.ahbl.org]

[103.55.38.65 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.55.38.65 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.55.38.65 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.55.38.65 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.55.38.65 listed in dnsbl.ahbl.org]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=souq.com;ip=103.55.38.65;r=doctor.nl2k.ab.ca]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.6 J_CHICKENPOX_33 BODY: 3alpha-pock-3alpha

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 GOOG_STO_IMG_NOHTML Apparently using google content hosting to avoid

URIBL

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

Subject: {SPAM?} =?UTF-8?B?V2UtaGF2ZSBhX3N1cnByaXNlIGZvciBUaGUuQ0FBIGN1c3RvbWVycy4=?=

















CAA

































CAA Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 10 Feb 2025 10:40:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1thXku-00000000BYs-21cX

for dave@doctor.nl2k.ab.ca;

Mon, 10 Feb 2025 10:39:36 -0700

Resent-From: The Doctor

Resent-Date: Mon, 10 Feb 2025 10:39:36 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.55.38.64] (port=32869 helo=nbcnews.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1thXaA-000000007ox-269O

for doctor@nl2k.ca;

Mon, 10 Feb 2025 10:28:35 -0700

Date: Mon, 10 Feb 2025 11:37:49 -0500

From: =?UTF-8?B?TWVzc2FnZS1mcm9tIFRoZS5DQUE=?=

Reply-To: =?UTF-8?B?TWVzc2FnZS1mcm9tIFRoZS5DQUE=?=

To: doctor@nl2k.ca

Message-ID:

Subject: =?UTF-8?B?V2UtaGF2ZSBhX3N1cnByaXNlIGZvciBUaGUuQ0FBIGN1c3RvbWVycy4=?=

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

List-Id: "0" <4.9xGKGEHMyWyHqZeDpoe3VTKngweE4LuK.localhost.doctor>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-ID: xpro-9985-1488:xpro-9985:MAILING:inxmailde

X-CSA-Complaints: csa-complaints@ional.co.uk

X-Mailer: Inxmail EE 4.8.48.825

X-Spam_score: 26.7

X-Spam_score_int: 267

X-Spam_bar: ++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  CAA You have been chosen!



Content analysis details: (26.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.55.38.64 listed in will-spam-for-food.eu.org]

[103.55.38.64 listed in will-spam-for-food.eu.org]

[103.55.38.64 listed in will-spam-for-food.eu.org]

[103.55.38.64 listed in will-spam-for-food.eu.org]

[103.55.38.64 listed in will-spam-for-food.eu.org]

[103.55.38.64 listed in will-spam-for-food.eu.org]

[103.55.38.64 listed in will-spam-for-food.eu.org]

[103.55.38.64 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.55.38.64 listed in dnsbl.ahbl.org]

[103.55.38.64 listed in dnsbl.ahbl.org]

[103.55.38.64 listed in dnsbl.ahbl.org]

[103.55.38.64 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.55.38.64 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.55.38.64 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.55.38.64 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.55.38.64 listed in dnsbl.ahbl.org]

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.6 J_CHICKENPOX_33 BODY: 3alpha-pock-3alpha

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

2.5 GOOG_STO_IMG_NOHTML Apparently using google content hosting to avoid

URIBL

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} =?UTF-8?B?V2UtaGF2ZSBhX3N1cnByaXNlIGZvciBUaGUuQ0FBIGN1c3RvbWVycy4=?=

















CAA

































CAA Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path: <>

Envelope-to: dave@nl2k.ab.ca

Delivery-date: Mon, 10 Feb 2025 10:16:00 -0700

Received: from [103.55.38.52] (port=55261 helo=nbcnews.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1thXNE-00000000Kmz-3Rvw

for dave@nl2k.ab.ca;

Mon, 10 Feb 2025 10:15:13 -0700

Date: Mon, 10 Feb 2025 11:30:54 -0500

From: =?UTF-8?B?TWVzc2FnZS1mcm9tIFRoZS5DQUE=?=

Reply-To: =?UTF-8?B?TWVzc2FnZS1mcm9tIFRoZS5DQUE=?=

To: dave@nl2k.ab.ca

Message-ID:

Subject: =?UTF-8?B?V2UtaGF2ZSBhX3N1cnByaXNlIGZvciBUaGUuQ0FBIGN1c3RvbWVycy4=?=

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

List-Id: "0" <4.lBAiTnXwn7oatgEwJGOwNbwbzwJn17Sy.localhost.dave>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-ID: xpro-9985-1488:xpro-9985:MAILING:inxmailde

X-CSA-Complaints: csa-complaints@ional.co.uk

X-Mailer: Inxmail EE 4.8.48.825

X-Spam_score: 28.0

X-Spam_score_int: 280

X-Spam_bar: ++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  CAA You have been chosen!



Content analysis details: (28.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.55.38.52 listed in will-spam-for-food.eu.org]

[103.55.38.52 listed in will-spam-for-food.eu.org]

[103.55.38.52 listed in will-spam-for-food.eu.org]

[103.55.38.52 listed in will-spam-for-food.eu.org]

[103.55.38.52 listed in will-spam-for-food.eu.org]

[103.55.38.52 listed in will-spam-for-food.eu.org]

[103.55.38.52 listed in will-spam-for-food.eu.org]

[103.55.38.52 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.55.38.52 listed in dnsbl.ahbl.org]

[103.55.38.52 listed in dnsbl.ahbl.org]

[103.55.38.52 listed in dnsbl.ahbl.org]

[103.55.38.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.55.38.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.55.38.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.55.38.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.55.38.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.55.38.52 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[103.55.38.52 listed in zen.spamhaus.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.55.38.52 listed in sa-accredit.habeas.com]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.55.38.52 listed in sa-trusted.bondedsender.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.6 J_CHICKENPOX_33 BODY: 3alpha-pock-3alpha

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[103.55.38.52 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.55.38.52 listed in bl.score.senderscore.com]

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 GOOG_STO_IMG_NOHTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} =?UTF-8?B?V2UtaGF2ZSBhX3N1cnByaXNlIGZvciBUaGUuQ0FBIGN1c3RvbWVycy4=?=

















CAA

































CAA Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 10 Feb 2025 10:40:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1thXkp-00000000BYf-3Alt

for dave@doctor.nl2k.ab.ca;

Mon, 10 Feb 2025 10:39:31 -0700

Resent-From: The Doctor

Resent-Date: Mon, 10 Feb 2025 10:39:31 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.55.38.54] (port=56551 helo=techcrunch.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1thWxA-000000009Mt-0vD9

for doctor@nk.ca;

Mon, 10 Feb 2025 09:48:17 -0700

Date: Mon, 10 Feb 2025 11:30:38 -0500

From: =?UTF-8?B?TWVzc2FnZS1mcm9tIFRoZS5DQUE=?=

Reply-To: =?UTF-8?B?TWVzc2FnZS1mcm9tIFRoZS5DQUE=?=

To: doctor@nk.ca

Message-ID:

Subject: =?UTF-8?B?V2UtaGF2ZSBhX3N1cnByaXNlIGZvciBUaGUuQ0FBIGN1c3RvbWVycy4=?=

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

List-Id: "0" <4.hEzTfxF98hQqzUeoZuPDGhIU2JlJ43cq.localhost.doctor>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-ID: xpro-9985-1488:xpro-9985:MAILING:inxmailde

X-CSA-Complaints: csa-complaints@ional.co.uk

X-Mailer: Inxmail EE 4.8.48.825

X-Spam_score: 30.9

X-Spam_score_int: 309

X-Spam_bar: ++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  CAA You have been chosen!



Content analysis details: (30.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.55.38.54 listed in will-spam-for-food.eu.org]

[103.55.38.54 listed in will-spam-for-food.eu.org]

[103.55.38.54 listed in will-spam-for-food.eu.org]

[103.55.38.54 listed in will-spam-for-food.eu.org]

[103.55.38.54 listed in will-spam-for-food.eu.org]

[103.55.38.54 listed in will-spam-for-food.eu.org]

[103.55.38.54 listed in will-spam-for-food.eu.org]

[103.55.38.54 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.55.38.54 listed in dnsbl.ahbl.org]

[103.55.38.54 listed in dnsbl.ahbl.org]

[103.55.38.54 listed in dnsbl.ahbl.org]

[103.55.38.54 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.55.38.54 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.55.38.54 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.55.38.54 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.55.38.54 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.55.38.54 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[103.55.38.54 listed in zen.spamhaus.org]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=techcrunch.com;ip=103.55.38.54;r=doctor.nl2k.ab.ca]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.6 J_CHICKENPOX_33 BODY: 3alpha-pock-3alpha

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

2.5 GOOG_STO_IMG_NOHTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} =?UTF-8?B?V2UtaGF2ZSBhX3N1cnByaXNlIGZvciBUaGUuQ0FBIGN1c3RvbWVycy4=?=

















CAA

































CAA Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 10 Feb 2025 10:40:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1thXkm-00000000BYV-03RC

for dave@doctor.nl2k.ab.ca;

Mon, 10 Feb 2025 10:39:28 -0700

Resent-From: The Doctor

Resent-Date: Mon, 10 Feb 2025 10:39:27 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.55.38.48] (port=33493 helo=fiverr.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1thXLO-00000000EKe-035I

for www@nl2k.ab.ca;

Mon, 10 Feb 2025 10:13:19 -0700

Date: Mon, 10 Feb 2025 11:30:20 -0500

From: =?UTF-8?B?TWVzc2FnZS1mcm9tIFRoZS5DQUE=?=

Reply-To: =?UTF-8?B?TWVzc2FnZS1mcm9tIFRoZS5DQUE=?=

To: www@nl2k.ab.ca

Message-ID:

Subject: =?UTF-8?B?V2UtaGF2ZSBhX3N1cnByaXNlIGZvciBUaGUuQ0FBIGN1c3RvbWVycy4=?=

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

List-Id: "0" <4.6IPNNyRUsvG03ngVPH0WZYxPkDHNQgsX.localhost.www>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-ID: xpro-9985-1488:xpro-9985:MAILING:inxmailde

X-CSA-Complaints: csa-complaints@ional.co.uk

X-Mailer: Inxmail EE 4.8.48.825

X-Spam_score: 30.9

X-Spam_score_int: 309

X-Spam_bar: ++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  CAA You have been chosen!



Content analysis details: (30.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.55.38.48 listed in will-spam-for-food.eu.org]

[103.55.38.48 listed in will-spam-for-food.eu.org]

[103.55.38.48 listed in will-spam-for-food.eu.org]

[103.55.38.48 listed in will-spam-for-food.eu.org]

[103.55.38.48 listed in will-spam-for-food.eu.org]

[103.55.38.48 listed in will-spam-for-food.eu.org]

[103.55.38.48 listed in will-spam-for-food.eu.org]

[103.55.38.48 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.55.38.48 listed in dnsbl.ahbl.org]

[103.55.38.48 listed in dnsbl.ahbl.org]

[103.55.38.48 listed in dnsbl.ahbl.org]

[103.55.38.48 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.55.38.48 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.55.38.48 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.55.38.48 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.55.38.48 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.55.38.48 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[103.55.38.48 listed in zen.spamhaus.org]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=fiverr.com;ip=103.55.38.48;r=doctor.nl2k.ab.ca]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.6 J_CHICKENPOX_33 BODY: 3alpha-pock-3alpha

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 GOOG_STO_IMG_NOHTML Apparently using google content hosting to avoid

URIBL

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

Subject: {SPAM?} =?UTF-8?B?V2UtaGF2ZSBhX3N1cnByaXNlIGZvciBUaGUuQ0FBIGN1c3RvbWVycy4=?=

















CAA

































CAA Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 10 Feb 2025 10:40:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1thXkf-00000000BY9-32hO

for dave@doctor.nl2k.ab.ca;

Mon, 10 Feb 2025 10:39:21 -0700

Resent-From: The Doctor

Resent-Date: Mon, 10 Feb 2025 10:39:21 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.55.38.51] (port=37463 helo=torrentz.in)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1thXNW-00000000MGe-3UoV

for root@nk.ca;

Mon, 10 Feb 2025 10:15:30 -0700

Date: Mon, 10 Feb 2025 11:30:15 -0500

From: =?UTF-8?B?TWVzc2FnZS1mcm9tIFRoZS5DQUE=?=

Reply-To: =?UTF-8?B?TWVzc2FnZS1mcm9tIFRoZS5DQUE=?=

To: root@nk.ca

Message-ID:

Subject: =?UTF-8?B?V2UtaGF2ZSBhX3N1cnByaXNlIGZvciBUaGUuQ0FBIGN1c3RvbWVycy4=?=

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

List-Id: "0" <4.hmSO125tpwYm1XIdm1TFwdlSqnX7LaF3.localhost.root>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-ID: xpro-9985-1488:xpro-9985:MAILING:inxmailde

X-CSA-Complaints: csa-complaints@ional.co.uk

X-Mailer: Inxmail EE 4.8.48.825

X-Spam_score: 30.9

X-Spam_score_int: 309

X-Spam_bar: ++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  CAA You have been chosen!



Content analysis details: (30.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.55.38.51 listed in will-spam-for-food.eu.org]

[103.55.38.51 listed in will-spam-for-food.eu.org]

[103.55.38.51 listed in will-spam-for-food.eu.org]

[103.55.38.51 listed in will-spam-for-food.eu.org]

[103.55.38.51 listed in will-spam-for-food.eu.org]

[103.55.38.51 listed in will-spam-for-food.eu.org]

[103.55.38.51 listed in will-spam-for-food.eu.org]

[103.55.38.51 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.55.38.51 listed in dnsbl.ahbl.org]

[103.55.38.51 listed in dnsbl.ahbl.org]

[103.55.38.51 listed in dnsbl.ahbl.org]

[103.55.38.51 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.55.38.51 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.55.38.51 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.55.38.51 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.55.38.51 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.55.38.51 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[103.55.38.51 listed in zen.spamhaus.org]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.6 J_CHICKENPOX_33 BODY: 3alpha-pock-3alpha

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 GOOG_STO_IMG_NOHTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} =?UTF-8?B?V2UtaGF2ZSBhX3N1cnByaXNlIGZvciBUaGUuQ0FBIGN1c3RvbWVycy4=?=

















CAA

































CAA Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 10 Feb 2025 10:40:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1thXkb-00000000BXy-2mC9

for dave@doctor.nl2k.ab.ca;

Mon, 10 Feb 2025 10:39:17 -0700

Resent-From: The Doctor

Resent-Date: Mon, 10 Feb 2025 10:39:17 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.55.38.57] (port=43501 helo=kooora.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1thWxK-000000009NG-3lee

for doctor@nl2k.ab.ca;

Mon, 10 Feb 2025 09:48:27 -0700

Date: Mon, 10 Feb 2025 11:30:12 -0500

From: =?UTF-8?B?TWVzc2FnZS1mcm9tIFRoZS5DQUE=?=

Reply-To: =?UTF-8?B?TWVzc2FnZS1mcm9tIFRoZS5DQUE=?=

To: doctor@nl2k.ab.ca

Message-ID:

Subject: =?UTF-8?B?V2UtaGF2ZSBhX3N1cnByaXNlIGZvciBUaGUuQ0FBIGN1c3RvbWVycy4=?=

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

List-Id: "0" <4.uUVxpsY08mjCdCqEKfsyp0tXVyGC60Uh.localhost.doctor>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-ID: xpro-9985-1488:xpro-9985:MAILING:inxmailde

X-CSA-Complaints: csa-complaints@ional.co.uk

X-Mailer: Inxmail EE 4.8.48.825

X-Spam_score: 31.7

X-Spam_score_int: 317

X-Spam_bar: +++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  CAA You have been chosen!



Content analysis details: (31.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.55.38.57 listed in will-spam-for-food.eu.org]

[103.55.38.57 listed in will-spam-for-food.eu.org]

[103.55.38.57 listed in will-spam-for-food.eu.org]

[103.55.38.57 listed in will-spam-for-food.eu.org]

[103.55.38.57 listed in will-spam-for-food.eu.org]

[103.55.38.57 listed in will-spam-for-food.eu.org]

[103.55.38.57 listed in will-spam-for-food.eu.org]

[103.55.38.57 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.55.38.57 listed in dnsbl.ahbl.org]

[103.55.38.57 listed in dnsbl.ahbl.org]

[103.55.38.57 listed in dnsbl.ahbl.org]

[103.55.38.57 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.55.38.57 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.55.38.57 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.55.38.57 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.55.38.57 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.55.38.57 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[103.55.38.57 listed in zen.spamhaus.org]

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.6 J_CHICKENPOX_33 BODY: 3alpha-pock-3alpha

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 GOOG_STO_IMG_NOHTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} =?UTF-8?B?V2UtaGF2ZSBhX3N1cnByaXNlIGZvciBUaGUuQ0FBIGN1c3RvbWVycy4=?=

















CAA

































Social Media strategies spam from Microsoft Outlook

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 10 Feb 2025 10:40:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1thXl1-00000000BZO-2EYW

for dave@doctor.nl2k.ab.ca;

Mon, 10 Feb 2025 10:39:43 -0700

Resent-From: The Doctor

Resent-Date: Mon, 10 Feb 2025 10:39:43 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-eastasiaazolkn19011024.outbound.protection.outlook.com ([52.103.64.24]:9126 helo=HK3PR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1thWue-000000008lq-0n3Z

for sales@nk.ca;

Mon, 10 Feb 2025 09:45:40 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=pZoThlsKZ1S2NzHqSyWdOuP6Il83SMPoVeab0P9UDsBpYpqIR4mG5iKK6vOmiR2w0J7MB08RC/1MFcVKc9rSX7oWaFhylFDM1kBSi68+3Rl4NZfjiX7v2Im+ux+KJGFBS5tXa1/+qsMzi2E4Vzl7104QjZBqODlqF+keImacdg0jGeVZDWXxgBdDP4nBwEjSYYS4/k+o+1tW08HbvA/j7MjvMgqg/7AN1sWq6RTRg7kikhcRhgWL7rht/61QET6YrJkLtU+ItA+2qnjS7GU44OgL73/qXwvRrMQ0jkPiXXX6GT6eN80WwBF557LiXie6h1BTCDQF7JN1RKYGvokTOg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=1uPdg+rH/L6tCSL5IzPOY2LejUb6Hr1P9gFeHe4w6Yo=;

b=JCXgt5KJbssvA3c8k+IYCHYrESjBwD9y1Xl8Kuqa+D2W4Mw7ZH3s2/1VoHU6Qe1AR8qRQV1J1pJkKu65a2/nO2abMId/B2ArTCv/hgwVn2TwH8BlxmkAwcWPYbnvVRwT0cAwmUHboSemmJAi+JoPNd2w4SA8eWt84i5TwxEXIQsget9CNeXswFzDG1FFq3hQN4J4QZglXcaXJczOX3LfbgUo5H4X8ooa66rQpR+D62Ia/j5hGFP9k6Yr6qd98vtohGsA3meBNTicS2LcY8Nu2uLF6HR3E7+FEG+BIVEEkfKTT0DHdUHlz0YjDzQ0845z40bhNyZ+sORulm8AjZU+8A==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=1uPdg+rH/L6tCSL5IzPOY2LejUb6Hr1P9gFeHe4w6Yo=;

b=p7QukkIpahVozVySvQf797oS9SQM+o+ayTTcGjQRj/oKHqAzfvN8Navw4M85J7+kDFCnD0hUt9Sm0RyyU8LKcRWkAijR8Z/M2nq84FTDKvjytykNna9S8RJf54b608aThIaMLFMv+FxyAkOoRrJNZgHNjIXT93v4JyxW6GhN7DMLEz8dJ840SK/nc/DV+7nwf1zYnBffYWZWzfvjadGdHwdqct/reL9ApGLEDgPljC0vzQGNDvQsZT2ma7Vqn4SovHbaZ1tFxdAfsfBZx0TehIwQbP/YVUU86lcaCx4BMyTAqWSqtE/FaVfNod2kpkRG986vxmwdJbBAfV9k1i6t4Q==

Received: from TY0PR04MB6190.apcprd04.prod.outlook.com (2603:1096:400:32d::12)

by SEYPR04MB5908.apcprd04.prod.outlook.com (2603:1096:101:68::10) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8422.16; Mon, 10 Feb

2025 16:43:31 +0000

Received: from TY0PR04MB6190.apcprd04.prod.outlook.com

([fe80::43c9:5b7c:7495:3717]) by TY0PR04MB6190.apcprd04.prod.outlook.com

([fe80::43c9:5b7c:7495:3717%4]) with mapi id 15.20.8422.015; Mon, 10 Feb 2025

16:43:31 +0000

From: Jillian Alicia

To: "sales@nk.ca"

Subject: Re : Social Media Branding Cost? Interested?

Thread-Topic: Re : Social Media Branding Cost? Interested?

Thread-Index: AQHbe9rrnXb1rfbEqEm/tfv9swJC5g==

Date: Mon, 10 Feb 2025 16:43:31 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TY0PR04MB6190:EE_|SEYPR04MB5908:EE_

x-ms-office365-filtering-correlation-id: 60b1134e-5ff2-4d8e-5bca-08dd49f20db8

x-microsoft-antispam:

BCL:0;ARA:14566002|19110799003|15080799006|8060799006|461199028|7092599003|38102599003|8062599003|3412199025|440099028|102099032;

x-microsoft-antispam-message-info:

=?us-ascii?Q?hQgNvIVqdDk82LUwYlt1l1cW32BkO39iv1RH+MJdRCrjpGXEj8lPG32bG49G?=

=?us-ascii?Q?4cnXTxwjsjNzAW3sgrkR1xWyi9E/VdDx0UfutL8+CWCKcm2hcYmVZ3wD+uOy?=

=?us-ascii?Q?gTL8LwI/YiQOsqGNZ6gXK4cuwV9vSHTCoTUPN7Fehr8Q2zMg478a8cxCyoer?=

=?us-ascii?Q?mNy2FZHSh3nYHyCaGSZd0FXUDwua8lozwcNDRuvDgpFwhTb5SqWipMrzc7+6?=

=?us-ascii?Q?pdkefahn6V3lAAUJGedHR7UNgixo4Lj4e/cqqbDQzaYXidzCOFlIPxAOWab1?=

=?us-ascii?Q?FlUI4oIqLGKS/Gyhc2d/vGl8i8vNZYyFLmRiMolO+3LSfs+fx2F62fNkR1+C?=

=?us-ascii?Q?Tme91PaBDpvKQXzAdEI8kNFjUhCudVfd3iR0qQFt972VmI6PaSrdvYmMLf8I?=

=?us-ascii?Q?EiqVHJMo2KXwy9+ANKyrj+9rBg6psX5SuUHAWGWKR5kUag218gSFhKBth4zn?=

=?us-ascii?Q?NM4Xw8zjBYA3x5u5NeDnprNlXFM+1yui5xwEfRAs/zqKs4Rvo/HoWHOopGSI?=

=?us-ascii?Q?wbveSitowfooIeI7/0OUwttQRokVs/Or180uZ/m8Tz6QXqRG1qzUGvp9wlAf?=

=?us-ascii?Q?lr1XU3uhU6KXgSy3h8/D3tfk63bL37++jMl7OlqxRtX7i4nh31M/qe5iykXX?=

=?us-ascii?Q?hCryO5/oanuWBmWO3RPI/5najf0JcCwaqy6s27O5GTD9EKzBMxAwQuj7Rzps?=

=?us-ascii?Q?2S9H3EMPUNszzwvprrdo2hMVgTNhS91OsyyApHAXT0NzVtykxqoV8V6e+nhS?=

=?us-ascii?Q?wRTmkLM9uyYvuLFwjm57ofCdygd1oD7RgBUiJqUr51dEtGGuG0hTSfpg7kDg?=

=?us-ascii?Q?GWdvbwNRQJGfMxGBeRBgHUmmDf6bIHeCdMN/yHC2n4Si3lzXAu+J9qDKokfU?=

=?us-ascii?Q?5Xv0Km+j3HpMCzxCK8TuAmtAanWuuhru6ZJf4FujYCrpeGrIh7DBgyUsKGGd?=

=?us-ascii?Q?6bmdJy72uKna4d5oWtQ/2o3ZcyBjq1hmMq5pnt+78ISxpgy1bB9KV2YQ5SCx?=

=?us-ascii?Q?UEWl3lX9LtKZnsDwgciBSvZY7c5//PUD/eQuiE9hYt33RTUvDJRx8iFNV/W1?=

=?us-ascii?Q?VrYjNNkVIOGi4O6JJChi3I43xyPNgQWS4l9RKATxIJjiPT6a/Tc=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?PseDESy5aeL0RehHfwjesu4PYiMdZdbpxoUGi2vwBcmif25ZMULPiIMnTpYs?=

=?us-ascii?Q?5BWm31kTgn9nKIEHvjmBpUIOi+Ro1ZoFuA9xraDWokC2ov5LyQk+e9J6Mjad?=

=?us-ascii?Q?fGMcPmsaNelUUbk86f8IsqYBLniVGN51YnGzfdXXgB9eseaGu1RxWnV7zjuL?=

=?us-ascii?Q?itkQxm02Ah4YzRD9hFp2Isriziled82pBopLHJTrrFBelynlcEX8QsRQqUwE?=

=?us-ascii?Q?c3j3oJ4AliHW7jXhpAdSB6KpMadspkFa5G+Qr9W92zH9tcWZ0p7hrrqZthez?=

=?us-ascii?Q?/rLXW+v/3Ok4OCpkjd/FCyapULb4HHsY7bzLMNdRh30ZrfuooVMkL7UyU+F+?=

=?us-ascii?Q?eG/XuBHLmWAE+zXnUWco4hk90hc6HpPufZPuoZOItxfFRHnpKNTlrWY0MOGB?=

=?us-ascii?Q?+tLthWb8w7nns+z1A/Mai9ryRVgIDtNmcnbA9RZ25kdZvQMjPOpx/eVGIzmL?=

=?us-ascii?Q?8MRyHkJLROUvFCAJUJbD5LLajI+qaVIPO7pqNTJG2eTJjhvvhEfe0k+O1NEk?=

=?us-ascii?Q?c+7T0pI75J4Km0ovW+1wkqIbjD7rAoYzGHxu9lRtWj4aaTRevX4Mk6wD6ybf?=

=?us-ascii?Q?1PsrusbU4fQWk3no3CsoyQAdxmU3XfY5Xc875qOQr3zpa7ly2R1K0/zoHov2?=

=?us-ascii?Q?NoK7dOWzwInNrCmCmlPeWKZa4Aljpy1lcG5fEgwKcvGtjY9SG+Zm5C4zPOBU?=

=?us-ascii?Q?/kS9LNjEptpmaZp6Q0irFh2vapcFw2KzsGHz9TbJNH66jVNeihNEsrsDwww3?=

=?us-ascii?Q?lfU12u3MYejO0mZuxd6YzOXHeGa58EBk6+d87HFbbNw/oB4g1Uj43Ez/JZDP?=

=?us-ascii?Q?9NmS5ubcfc5pwMOMg5exW6DjFS7IxdzZCz5ZsH/ZyfG18/OGEo/LAKRJvN6n?=

=?us-ascii?Q?sMrkJsgf6vTKlFQdJilFAF2vlMsDDEzfEsi3YtObszKZwfzC6frl0vM8TJkS?=

=?us-ascii?Q?E4wrqUVtyX2OtPJDx6gh5Ss/yvI6Rqto2hNO4pM1VK9vplJpMt5H3C8ybE/m?=

=?us-ascii?Q?jQoklnqhRIzu6hXdkRCbrB0usr6QhH8zsWrwRJ/LBqR8qNTLrG2eBh3BPhoi?=

=?us-ascii?Q?prnYx0IXElMCAM9Loyx3wmVYyYNbR8ymVOxE/Uvff1DREAp7EW38dTYWQQRO?=

=?us-ascii?Q?0cASLpgePLVDzdgd3Zw1FQoAhGGM3cit0Mb2Ve0Jmz1/RgAlSnIZINhTPt63?=

=?us-ascii?Q?tuWuOyGcH9rCNjjsaPkRv/ghSDdbUzrOwP+nKGJ75McA4FGPyLcQnHad2TdT?=

=?us-ascii?Q?vXiJjHFiq/Q3ieq/HQs2eQnoOd9pBNcB+iN4uqd4Cw=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_TY0PR04MB619038338A3C6832A19F79D091F22TY0PR04MB6190apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-7719-19-msonline-outlook-4bae0.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TY0PR04MB6190.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 60b1134e-5ff2-4d8e-5bca-08dd49f20db8

X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Feb 2025 16:43:31.7242

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEYPR04MB5908



--_000_TY0PR04MB619038338A3C6832A19F79D091F22TY0PR04MB6190apcp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hi,





Good morning,





I hope this email finds you well.





Do let me know if you are interested. I would be happy to share our Methodo=

logies, past work details and client Testimonials and Prices?





Best Regards,



Jillian Alicia



B.D.M





Marketing Services: SEO | PPC | SMO | SMM





Note: If need a quote, please share your website info and requirements.



--_000_TY0PR04MB619038338A3C6832A19F79D091F22TY0PR04MB6190apcp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable








>





Hi,








Good morning,








I hope this email finds you well.








Do let me know if you are interested. I would be happy to share our Meth=

odologies, past work details and client Testimonials and Prices?








Best Regards,



Jillian Alicia



B.D.M








Marketing Services: SEO | PPC | SMO | SMM








Note: If need a quote, please share your website info and requirements.<=

/p>







--_000_TY0PR04MB619038338A3C6832A19F79D091F22TY0PR04MB6190apcp_--

Business Proposal spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dae@doctor.nl2k.ab.ca

Delivery-date: Mon, 10 Feb 2025 08:15:00 -0700

Received: from mail-ed1-f45.google.com ([209.85.208.45]:55782)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1thVUK-00000000O3Y-0n6A

for dae@doctor.nl2k.ab.ca;

Mon, 10 Feb 2025 08:14:23 -0700

Received: by mail-ed1-f45.google.com with SMTP id 4fb4d7f45d1cf-5de3c29e9b3so6291534a12.3

for ; Mon, 10 Feb 2025 07:12:25 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1739200338; x=1739805138; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=roR3jbtcpRmnSFRoceB2J4tPJsofJwNUlyq3ViX4Ea4=;

b=QINpCd4Lx6himQ4a1xQXSvfReWu6inkLWKB4mZsISLSNWnqYHImocRQvCe1A40KB4/

hbayojCku7Sv21qAJOxohHAPEH+ywrVam/2N3X2CPaQOnw0QySj2HaPQuDd41CTvINBV

4U0WiZnnw0e31Sn8e/kWjfdjgTRayzuiSqCPmw9FJ6FTANkt1NxXRUMwx6+LcFvT6QgT

RoQyyxoR0AXcMVRiGhZxeA3ugJ2qg7NlyfYYvYJ+Pj19ZtDQ605LU9/GMJOKRXrzm4KN

5FwKBhpfnq8pAqS/c6DDFc84sEDg+AQ3bAEucEyZeQ0f5Zi3gmkq+hXw63vVw6CLIsU1

WQ7Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1739200338; x=1739805138;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=roR3jbtcpRmnSFRoceB2J4tPJsofJwNUlyq3ViX4Ea4=;

b=ewgniH2NAS50Os41TtSFyAEKXReUEhvDFerZlvvP6MqqRutSP8Y7yI0ro2G9Bm6446

4rXuFasRb+DfUoPrqLB3LRuggg2sw/kqAUpHzD29H1YZlU6P6mEQjOjvICRJ3HV+WBaR

ohVnB1S5RxKlJoX1n7kv7u/gbg80hbL49HyaF6f7xCRkabiaJ7t609aCoshHILjVmOHa

r+ifEJmR5yIFIW8UtWveI9qVZmV1obLw7dDNJ5lvE/ZYAjZuIkMEBcK425SoCwncAPGL

3S+mG7A6Wd9UMVG9JkSHBNjgR0qNHba25pmSQGeoZpcACNx/+W3gp9+yoIPm7i6e/LaA

Tkkw==

X-Gm-Message-State: AOJu0YxMXRB14WU1bhUYVW16HzDAbf9wF9HeqsfvojkcPq3VK57uu6Wc

yxUWDcBvxyoP/K+mfWuSyZ2l3J2t8LTRm1OXuP0zzS+bF5UJDNq8Tzl/4Ifjmnfb9m+b/C/CPDE

B6vOdK63Dzs78z3krVEH3xS8z7fU39Q==

X-Gm-Gg: ASbGnctOBluMVfhcoxmVp6aH+cLlKRhmdVUIIPMOHNf4M0Nb8DcF3Dvs5p0QIAExzmh

Qqbeaj+GRFSS4zhkUOTZNp8VDORRUbtXPRJvFjiIeZ557ajnsJO1lJf9zSniFTFYyh+KSfBFjsQ

==

X-Google-Smtp-Source: AGHT+IGPvtXbXHDhIm7m1Z1IU+UYfQar0U2AJB1HQuu1ZoTyJqum0aLt9sFV7cmRxNwY8DAxYgJxFA+GVpsMdnTWGhw=

X-Received: by 2002:a17:907:94d2:b0:aa6:a87e:f2e1 with SMTP id

a640c23a62f3a-ab789c7735bmr1405584066b.56.1739200338068; Mon, 10 Feb 2025

07:12:18 -0800 (PST)

MIME-Version: 1.0

From: farhan

Date: Mon, 10 Feb 2025 07:12:06 -0800

X-Gm-Features: AWEUYZmsoge6JFjr3hhxM_7McRuVOESXmVJcXWLtKiVHWZuf2FOD0QIi6j_BePs

Message-ID:

Subject: Offer

To: dae@doctor.nl2k.ab.ca

Content-Type: multipart/alternative; boundary="000000000000580ea4062dcb228f"



--000000000000580ea4062dcb228f

Content-Type: text/plain; charset="UTF-8"



Hello



I have a business proposal for you. Can I contact you using this email

address?

Best regards.



--000000000000580ea4062dcb228f

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





=3D"gmail_signature" data-smartmail=3D"gmail_signature">

iv>Hello

I have a business proposal for you. Can I contac=

t you using this email address?
Best regards.

div>




--000000000000580ea4062dcb228f--