Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 06 Oct 2022 18:27:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from )
id 1ogbC1-000Le1-PV
for dave@doctor.nl2k.ab.ca;
Thu, 06 Oct 2022 18:26:21 -0600
Resent-From: The Doctor
Resent-Date: Thu, 6 Oct 2022 18:26:21 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-psaapc01lp2046.outbound.protection.outlook.com ([104.47.26.46]:6069 helo=APC01-PSA-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from )
id 1ogXDp-0002xZ-H0
for sales@nk.ca;
Thu, 06 Oct 2022 14:12:01 -0600
Authentication-Results: spf=fail (sender IP is 178.63.84.228)
smtp.mailfrom=tcampus.onmicrosoft.com; dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=uiekhwzclgflgvhumcugubr.com;
To: sales@nk.ca
MIME-Version: 1.0
Date: Thu, 06 Oct 2022 20:11:30 +0000
From: "Order Shipment"
Reply_To: "Welcome C"
Subject: Welcome to iPhone 14 Pro Reward Panel ID:67429
Content-Type: text/html; boundary="1901598-1-b595a9ac7cbe770ae255b23c76163168"
Feedback-ID: 325-anexp#nret-fa:account-notifier
Message-ID: <01079188438007796383039d9ee-c69a3509-5c85-481d-822e-ba65c204e1ba-000000@eu-central-1.amazonses.com>
X-SES-Outgoing: 2022.04.16-69.169.228.231
X-EOPAttributedMessage: 1
X-MS-Office365-Filtering-Correlation-Id: b88df22a-97d6-4632-7b5a-08daa7d6f61d
X-MS-TrafficTypeDiagnostic:
CWLP265MB2098:EE_|TYZAPC01FT028:EE_|PUZPR04MB6296:EE_
X-MS-Exchange-SenderADCheck: 0
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original:
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
X-Forefront-Antispam-Report-Untrusted:
CIP:103.143.76.15;CTRY:DE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:confront.whitefov.live;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230016)(376002)(346002)(34096005)(396003)(136003)(39830400003)(46966006)(8676002)(5660300002)(40480700001)(7116003)(2876002)(6916009)(42186006)(316002)(70206006)(30864003)(2906002)(82310400005)(8936002)(70586007)(9686003)(498600001)(33964004)(26005)(71280400001)(41300700001)(3480700007)(66574015)(47076005)(35950700001)(83380400001)(336012)(42882007)(78352004)(18074004)(40580700002)(81166007)(166002)(21314003);DIR:OUT;SFP:1102;
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CWLP265MB2098
X-MS-Exchange-Transport-CrossTenantHeadersStripped:
TYZAPC01FT028.eop-APC01.prod.protection.outlook.com
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id-Prvs:
d9bdec59-9b57-496b-c94b-08da884d2b6a
X-OriginatorOrg: tcampus.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Oct 2022 20:11:31.5314
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: b88df22a-97d6-4632-7b5a-08daa7d6f61d
X-MS-Exchange-CrossTenant-Id: 11b5ddaf-7ed5-4f28-9184-775ab7e1d551
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=11b5ddaf-7ed5-4f28-9184-775ab7e1d551;Ip=[178.63.84.228];Helo=[tcampus.onmicrosoft.com]
X-MS-Exchange-CrossTenant-AuthSource:
TYZAPC01FT028.eop-APC01.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PUZPR04MB6296
X-Spam_score: 5.9
X-Spam_score_int: 59
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: iPhone 14 Pro - Your order has shipped!
Content analysis details: (5.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: googleapis.com]
0.5 FROM_DOMAIN_NOVOWEL From: domain has series of non-vowel letters
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[104.47.26.46 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[gsaacnd[at]tcampus.onmicrosoft.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of
words
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
EnvelopeFrom freemail headers are
different
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML
tag
1.7 SCC_BODY_URI_ONLY No description available.
0.0 T_REMOTE_IMAGE Message contains an external image
Subject: {SPAM?} Welcome to iPhone 14 Pro Reward Panel ID:67429
iPhone 14 Pro - Your order has shipped!
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 06 Oct 2022 18:25:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from )
id 1ogbA3-000LWQ-5I
for dave@doctor.nl2k.ab.ca;
Thu, 06 Oct 2022 18:24:19 -0600
Resent-From: The Doctor
Resent-Date: Thu, 6 Oct 2022 18:24:19 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-tyzapc01olkn2082.outbound.protection.outlook.com ([40.92.107.82]:22909 helo=APC01-TYZ-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from )
id 1ogWyC-0001do-KD
for doctor@nk.ca;
Thu, 06 Oct 2022 13:55:54 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=DI+jGKzbTaZEhIOJJncsx6vzz46l6WJRlaWZ8fzzsgog77s0AL5cHmgTngyOE7Ostn2ajh78uda5jofgr1mE2JFD6rch3kEn3xcmgswo9v4yTSudj9xDZviiDokxoWr/2TgD04tTRcB6S49TFw6dNByA0ZEpu63IiWIkSkmimXw6wJDwmSbf5OkSCz/uOVsm2OACI3Pe8BCxG+mwWkF0AVJWEE3lW18zZVeeMzXZDnVLEb06f7CDyiH+9i6G665Tg3L8LV6NOdRJHgg7cHQo2CSZUKZLXCvcLn+Y2l3zMn6jdCbqz+YUdx1MVym4rxXXKnq5PM9hHIXlKbAf448yoQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=V68BfaENn57qGy719tDmlrmNOHjICO9raKi4la+1EbY=;
b=RTJ+eUx9z2zS7tjyJjOVAXKAnUm5mNQS//fxbj8BS0+VVwai5A+kAUrb14KFtkyZIDtacqjGR/azB3LBCaN2cIHtKn6QDJNYQLJB5JsIKoykylJT466HHc40+/wSLP9zwvKTHb/JUyIg6C19HIQuOHNiWfexFOFukrWzTiemn04ReAMZgqhPNH8q6d2ecNILY2UmXGdtjG1BXmIrl1ZpkyoFr7BnC87HxuRu/Y8DA/6zL3Weu0gzrUTO1V6ZudC/cjs4tW2VmDdzA+nD4ggc6SAfpbO5w3QeQXCnz2sJuNDdG7itApcNPiarq64eMMt6jiWLL85dgQYG8k5Pp5Qjew==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=V68BfaENn57qGy719tDmlrmNOHjICO9raKi4la+1EbY=;
b=AYvs5S1LTzblww/FtmbNlv41NuNhAa6zyRvDwYN+5ybQnakYYzA9GGIHT84xEa+HVh4yPmT6Y7OpLMsPlruCIY4DfjicIbhTfh4VqCMlmfMk7XInHVRo+vfq63dCJWEXJUZZ/7gHETi3xkgCg4lev8qH6VXJRrAqP279jun3KOCZXNs9XZVC2cVjRycK8aQ1HQbE72NaXHb946y5bh5u1YgdZCdkFzp/ahohf4In+RJDCAkmkYh0AwcRMKpoDbmgwAaHM6LIA47g9V8xD+F4chWOtOKclO9WU3kP86hXDwlDREhvwbqRaNxWgZzo5+/bIhJXqN0nd8FNdbHWVsj7VA==
Received: from SEZPR01MB5223.apcprd01.prod.exchangelabs.com
(2603:1096:101:ea::5) by SG2PR01MB4097.apcprd01.prod.exchangelabs.com
(2603:1096:4:1c0::11) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5676.31; Thu, 6 Oct
2022 19:54:32 +0000
Received: from SEZPR01MB5223.apcprd01.prod.exchangelabs.com
([fe80::7691:dfb1:bf51:2a73]) by SEZPR01MB5223.apcprd01.prod.exchangelabs.com
([fe80::7691:dfb1:bf51:2a73%7]) with mapi id 15.20.5676.031; Thu, 6 Oct 2022
19:54:32 +0000
X-Mailer: MailBee.NET 11.2.0.590
From: "JeziahSloter1995@outlook.com"
Subject: UA women are in Canada, do you want to date single Ukrainina girls in CA!?
Reply-To: "JeziahSloter1995@outlook.com"
Date: Thu, 06 Oct 2022 21:54:24 +0200
Message-ID:
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_D65A_F67DF359.9A70B5B7"
To: Undisclosed recipients:;
X-TMN: [zCcfLW466I/1W0Op+YeK1ibpJdWvOKUj]
X-ClientProxiedBy: FR0P281CA0056.DEUP281.PROD.OUTLOOK.COM
(2603:10a6:d10:49::6) To SEZPR01MB5223.apcprd01.prod.exchangelabs.com
(2603:1096:101:ea::5)
X-Microsoft-Original-Message-ID: <1.170da8ff895f0b5fac25@DESKTOP-JGF09DC>
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: SEZPR01MB5223:EE_|SG2PR01MB4097:EE_
X-MS-Office365-Filtering-Correlation-Id: 5699c667-3c73-4c70-acc3-08daa7d495dd
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
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
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0:
=?utf-8?B?QmtiRVNKc2xRbUhVWWhZT2g4L3o3RXVFL2JVRHREdnhTT2o2N01XYmF5MEtM?=
=?utf-8?B?bmJtaVJ3TUxTalRydkVaS1lmM2taRjJSOFFzdXY0ZTFZRjlwYkN3djdDZ1Bh?=
=?utf-8?B?eDhLeHliOEcrT3RMbHBHdVpaVUZsNjgvR0dDUTlrek44OTJIajFhWGpjY096?=
=?utf-8?B?QWdSN0VndmdhYkhVWmMyOER6NU1UV3JqbDFCSFJIanZwRHBCNlBaYjRpaTBz?=
=?utf-8?B?VWtwQ1hNYnYrVmhQQnZlS1pYQU0ydUdLRjFWWUdHSzhYaDRSSkVtb2dwTVQx?=
=?utf-8?B?OW1kSUtBQWJIKzMrNjk3S1daN0pDSUtVdVFMNXRTS1c5LyszZGVxYlF2TmRk?=
=?utf-8?B?QXVFR1kwZ2pIN2p6VEY4OUpQSzdtSThmRzZ6ajlTeC9SOGdJeWJoZnB6Ymsw?=
=?utf-8?B?UHRWZVc1SVZQeUxRenYvODZIeGZURi9MSHVMR1kvcnZtNGM4UEtxano1dnJw?=
=?utf-8?B?eTNrWENhR2JPam0ya2E5L3RQbjd2SWM0RUZvRVJ6TllhYzNncFh0SXhwU1lW?=
=?utf-8?B?aTBaeEdsVlROeVl5d3JHTVB4MGsvRmdYQ3BVS1B5ZGlRRkkxNFhtSnZqeDJr?=
=?utf-8?B?WHdXRUFabkdnemQxNWR0Q2xNbzBXL21ZMDdwVGk2ZVh2dGF1WXoxZ1NmZGg5?=
=?utf-8?B?SnZzSVlxM0RFQXJ0REg5UmIxQ2FNc0taeGtIdVhBSkJwc2RlNllmZWlJeFJY?=
=?utf-8?B?UFN1QWtTNTMyRVdHUkNQRWQyVjQ2bUFGMkdkczFidUJQN1JDWlNKcDVibG0z?=
=?utf-8?B?ZkhXeUtQaU8wTHIxSC83Zm1ZeGRSS2wvbVM3WHhWQjFFbGpFY2dyTkJGaU5X?=
=?utf-8?B?UVN5NlU3SGtzcmFmcHNiQWdRZFRsTFZFd3ZLZ3FMekFMU0wxNHhMK3p0L0FG?=
=?utf-8?B?T1FIdjRqY1h6K3V4S0RXN2hqNDJXQ0dqZnB1YjRBdkQzYU1hVDRsNVN5a3Uz?=
=?utf-8?B?TXZCVFY3RXZhbmUyWGx0UzN2YlVzTTNZQ25BSTIwRGpvRjhjNjgvTEpOV3I0?=
=?utf-8?B?amFOdUxVQS9hQ3ZBbU1yRW9QWklsOUoxSTZJSkg1R1dKSjNqcU5PelNFdktP?=
=?utf-8?B?dUEzOGFMb3VUWnh4VzA0dkFxRWFQZW5BdG9BdEtOcXMvaEJpZkdvK0o2ckx6?=
=?utf-8?B?QmNVYzNZa1RTVXNzdXMzOE84ZXZvYzBwdVJka1pSb0hENUUyNXlhS0g3SW1G?=
=?utf-8?B?aW5tVHFIL1NRbnh2SGJIMC9PeDZWVk9mcU42Vk5ZVDY2YWNRVTEwSUpZZ2ZD?=
=?utf-8?B?dGF2SjhLN01vZzRzbVR4MGI0S2RDYWZiQTNMb3AwbllEeW9CMWU5aVFtTmND?=
=?utf-8?B?dGZMUWI4NXN2NDJlQmh4VUZHQzM0d3Rod05VdnJadGs5MWlaYjVaM2VocEFt?=
=?utf-8?B?UEVjUUdLSTBNMnhoQVczemgyTDY4Zy9FU0VBU003bXk3dmtKZld2K0ZXaDNx?=
=?utf-8?B?Si9CSVk1RzgrYjRSRnN4V0hYU2FnaXkrVmh5cWlnOWY0Z0kvZTBCZWcxbkhx?=
=?utf-8?B?WWUzWXduallIbFhmMVpIUGpkdlREcHJsRWhjZklsNE5oYjRvZ3RjT0c4T1c2?=
=?utf-8?B?bW9zQUVSWCtneVBrbWFxU0hvV3N5VXY3TnQyZXRkc3BrUmx4VFJLTDBjNURw?=
=?utf-8?B?Q25XN08zSk0ra1c0cXRyK0FEeFJ6bU5ld3d4ZFpEYVJDQzFVOTZtSlJ3Skx5?=
=?utf-8?B?bE85RVovMXNuZTJnWCtxSXkraWVVSDhsNTVmdmthNVVYUFRNQzJ0QkFPYVg4?=
=?utf-8?Q?0AqZiRHWWZTkAbbAkY=3D?=
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 5699c667-3c73-4c70-acc3-08daa7d495dd
X-MS-Exchange-CrossTenant-AuthSource: SEZPR01MB5223.apcprd01.prod.exchangelabs.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Oct 2022 19:54:32.1210
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SG2PR01MB4097
X-Spam_score: 5.7
X-Spam_score_int: 57
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Do you live in Canada and want to meet a Ukrainian woman near
you? A brand new site has just been launched where you can meet and date
Ukrainian women who have moved to all these countries because of [...]
Content analysis details: (5.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: httpslink.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[jeziahsloter1995[at]outlook.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[40.92.107.82 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[jeziahsloter1995[at]outlook.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[jeziahsloter1995[at]outlook.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.6 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image
area
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 AC_BR_BONANZA RAW: Too many newlines in a row... spammy template
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or
Formatted Colors in HTML
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.3 PLING_QUERY Subject has exclamation mark and question mark
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
Subject: {SPAM?} UA women are in Canada, do you want to date single Ukrainina girls in CA!?
------=_NextPart_000_D65A_F67DF359.9A70B5B7
Content-Type: text/plain;
charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Do you live in Canada and want to meet a Ukrainian woman near you? A brand =
new site has just been launched where you can meet and date Ukrainian women=
who have moved to all these countries because of the current situation the=
re!
A large number of users are in the CA!
Our site has over 250,000 users, most of which are women, we are only looki=
ng for male members!
If you received this message, you can join today for free!
UkraineGirl
We only accept men, our site has over 68% female members with the latest d=
ata from last month!
Every woman is real and proven!
Limited time offer and registration!
Single Ukrainian woman!
The site has over 80,000 members!
deleted from the base
here
=
------=_NextPart_000_D65A_F67DF359.9A70B5B7
Content-Type: text/html;
charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
style=3D"font-weight:normal;" id=3D"docs-internal-guid-37a85d74-7fff-8769-=
fad9-7560039c6ff8">=0A=
margin-bottom:0pt;">=0A=
olor:transparent;font-weight:700;font-style:normal;font-variant:normal;text=
-decoration:none;vertical-align:baseline;white-space:pre-wrap;">Do you live=
in Canada and want to meet a Ukrainian woman near you? A brand new site ha=
s just been launched where you can meet and date Ukrainian women who have m=
oved to all these countries because of the current situation there!=
=0A=
=0A=
=0A=
margin-bottom:0pt;">=0A=
olor:transparent;font-weight:700;font-style:normal;font-variant:normal;text=
-decoration:none;vertical-align:baseline;white-space:pre-wrap;">A large num=
ber of users are in the CA!=0A=
=0A=
=0A=
=0A=
margin-bottom:0pt;">=0A=
olor:transparent;font-weight:700;font-style:normal;font-variant:normal;text=
-decoration:none;vertical-align:baseline;white-space:pre-wrap;">Our site ha=
s over 250,000 users, most of which are women, we are only looking for male=
members!=0A=
=0A=
=0A=
=0A=
t;margin-bottom:0pt;">=0A=
olor:transparent;font-weight:700;font-style:normal;font-variant:normal;text=
-decoration:none;vertical-align:baseline;white-space:pre-wrap;">
=3D"border:none;display:inline-block;overflow:hidden;width:624px;height:260=
px;">![](3D"https://lh5.googleusercontent.com/jBL7SgxgsTqrsSz010SAm3x8=<br)
R-zxJ_z72JGINoZB5cVgYnlbTe5jOkQl_VL8uby9adAH8J-VGDaC3VOy7RgNHGTjTBlopgb75ny=
gKYXCKvmI17h7-VNQA8L1AaGAByOIu3Tc6txZ6iUbfnR71CoPGSA6dxbpyJfLBBW-XYMCDqkM3U=
Y3hIPoyRLhpg" style=3D"margin-left:0px;margin-top:0px;" width=3D"624" heigh=
t=3D"260">=0A=
=0A=
t;margin-bottom:0pt;">=0A=
olor:transparent;font-weight:700;font-style:normal;font-variant:normal;text=
-decoration:none;vertical-align:baseline;white-space:pre-wrap;">If you rece=
ived this message, you can join today for free!=0A=
=0A=
=0A=
t;margin-bottom:0pt;">=0A=
<=
span style=3D"font-size:20pt;font-family:Arial;color:#1155cc;background-col=
or:transparent;font-weight:700;font-style:normal;font-variant:normal;text-d=
ecoration:underline;-webkit-text-decoration-skip:none;text-decoration-skip-=
ink:none;vertical-align:baseline;white-space:pre-wrap;">UkraineGirl<=
/a>=0A=
=0A=
t;margin-bottom:0pt;">=0A=
olor:transparent;font-weight:700;font-style:normal;font-variant:normal;text=
-decoration:none;vertical-align:baseline;white-space:pre-wrap;">We only acc=
ept men, our site has over 68% female members with the latest data from las=
t month!=0A=
=0A=
=0A=
=0A=
t;margin-bottom:0pt;">=0A=
olor:transparent;font-weight:700;font-style:normal;font-variant:normal;text=
-decoration:none;vertical-align:baseline;white-space:pre-wrap;">Every woman=
is real and proven!=0A=
=0A=
t;margin-bottom:0pt;">=0A=
olor:transparent;font-weight:700;font-style:normal;font-variant:normal;text=
-decoration:none;vertical-align:baseline;white-space:pre-wrap;">Limited tim=
e offer and registration!=0A=
=0A=
t;margin-bottom:0pt;">=0A=
olor:transparent;font-weight:700;font-style:normal;font-variant:normal;text=
-decoration:none;vertical-align:baseline;white-space:pre-wrap;">Single Ukra=
inian woman!=0A=
=0A=
t;margin-bottom:0pt;">=0A=
olor:transparent;font-weight:700;font-style:normal;font-variant:normal;text=
-decoration:none;vertical-align:baseline;white-space:pre-wrap;">The site ha=
s over 80,000 members!=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
t;margin-bottom:0pt;">=0A=
olor:transparent;font-weight:700;font-style:normal;font-variant:normal;text=
-decoration:none;vertical-align:baseline;white-space:pre-wrap;">deleted fro=
m the base=0A=
=0A=
t;margin-bottom:0pt;">=0A=
an style=3D"font-size:10pt;font-family:Arial;color:#1155cc;background-color=
:transparent;font-weight:700;font-style:normal;font-variant:normal;text-dec=
oration:underline;-webkit-text-decoration-skip:none;text-decoration-skip-in=
k:none;vertical-align:baseline;white-space:pre-wrap;">here=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=0A=
=
------=_NextPart_000_D65A_F67DF359.9A70B5B7--
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 06 Oct 2022 18:27:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from )
id 1ogbBw-000Ldc-IZ
for dave@doctor.nl2k.ab.ca;
Thu, 06 Oct 2022 18:26:16 -0600
Resent-From: The Doctor
Resent-Date: Thu, 6 Oct 2022 18:26:16 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-tyzapc01lp2042.outbound.protection.outlook.com ([104.47.110.42]:9618 helo=APC01-TYZ-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from )
id 1ogXCn-0002t5-97
for doctor@netknow.ca;
Thu, 06 Oct 2022 14:10:58 -0600
Authentication-Results: spf=fail (sender IP is 178.63.84.228)
smtp.mailfrom=tcampus.onmicrosoft.com; dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=jjptcaiusebmqpmiruhscwa.com;
To: doctor@netknow.ca
MIME-Version: 1.0
Date: Thu, 06 Oct 2022 20:10:27 +0000
From: "Order Shipment"
Reply_To: "Welcome C"
Subject: Welcome to iPhone 14 Pro Reward Panel ID:50143
Content-Type: text/html; boundary="1901598-1-b595a9ac7cbe770ae255b23c76163168"
Feedback-ID: 325-anexp#nret-fa:account-notifier
Message-ID: <01075730853010526383039d9ee-c69a3509-5c85-481d-822e-ba65c204e1ba-000000@eu-central-1.amazonses.com>
X-SES-Outgoing: 2022.04.16-69.169.228.231
X-EOPAttributedMessage: 1
X-MS-Office365-Filtering-Correlation-Id: 73b98b1e-716a-4a4e-7d37-08daa7d6d03c
X-MS-TrafficTypeDiagnostic:
CWLP265MB2098:EE_|TYZAPC01FT043:EE_|PSAPR04MB4295:EE_
X-MS-Exchange-SenderADCheck: 0
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original:
0uYyfVmzNAynRa88u4radSDV/KjtJo+WsRzHykqIJr4ALDh27GoCuDsulRpOYUYJ1jnfwxQgm/py29ma13m19sSPH1HtWlnd4wgL1tOFiUn1ImVY7Es4DSaVrGvNNgAZexdG1PYYjeEFuUDEvToKqtTyOh38olriM/CQqfoujz5j3LQyi+A3KHJQ+LPdQECIDfATpzGspZ1khXK0J1slb0IFhm+/eZ/CZTiEpPglnR9Uz2nqf0gCYzSpFYW80xT48vJpbtHEF5+jSydJyo7a20+4yz15lZ1vL5WnSFneqFGU7z3ybTgF/BKlmCrw/KrTxB+uXPrMnHWU3xJKRt3wkNO5E46zpX7anOTvoqR/+AFIX9oy7Ep53HQqqQv4VQYHxK1zL24Qpxen3KHOsTrM/nipD+iVLnt1i9bA7D6XNHW9OyV3GyY+JjqEaU3eGkJ1tV7N3PkV4RgaMYKVLJvLpFwJNHf3xl1Y4HGAHLkfcYNh+FHpXzDq5hi0W+dYlX0Vf3NxBUbWFRWO0XhcA1JFmOUWHV0Atxr+BZDW93vBwl1RNxY7deP/7NcxrN33ND9rBENalowwL5q2a7AMXRfsWNpsvVea/Oks09GujhysgoTDykF+jTyzFVLtisXfrFqWw7bz3EiNjPHHZK4o7eEwO8FGvI/7VlkL7eM+BM09GKU/Cqe0upFrI/Xe3vsrrj8bWivJRASOfZlhU9VOs1rdzQ2zVMs+pZ/kS+dv4ZD3QJseVTZ+LtkngL3vdBI6O+6vG2znolWeKB3yPX37APVYmYiOfyh5UMqSSaZ+kRVIoWZDr3O8xLc/foqSLBF/cFwA
X-Forefront-Antispam-Report-Untrusted:
CIP:103.143.76.15;CTRY:DE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:confront.whitefov.live;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230016)(376002)(346002)(34096005)(396003)(136003)(39830400003)(46966006)(8676002)(5660300002)(40480700001)(7116003)(2876002)(6916009)(42186006)(316002)(70206006)(30864003)(2906002)(82310400005)(8936002)(70586007)(9686003)(498600001)(33964004)(26005)(71280400001)(41300700001)(3480700007)(66574015)(47076005)(35950700001)(83380400001)(336012)(42882007)(78352004)(18074004)(40580700002)(81166007)(166002)(21314003);DIR:OUT;SFP:1102;
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CWLP265MB2098
X-MS-Exchange-Transport-CrossTenantHeadersStripped:
TYZAPC01FT043.eop-APC01.prod.protection.outlook.com
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id-Prvs:
d9bdec59-9b57-496b-c94b-08da884d2b6a
X-OriginatorOrg: tcampus.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Oct 2022 20:10:27.9812
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 73b98b1e-716a-4a4e-7d37-08daa7d6d03c
X-MS-Exchange-CrossTenant-Id: 11b5ddaf-7ed5-4f28-9184-775ab7e1d551
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=11b5ddaf-7ed5-4f28-9184-775ab7e1d551;Ip=[178.63.84.228];Helo=[tcampus.onmicrosoft.com]
X-MS-Exchange-CrossTenant-AuthSource:
TYZAPC01FT043.eop-APC01.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PSAPR04MB4295
X-Spam_score: 6.9
X-Spam_score_int: 69
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: iPhone 14 Pro - Your order has shipped!
Content analysis details: (6.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: googleapis.com]
1.0 HK_RANDOM_FROM From username looks random
0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel
letters
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[104.47.110.42 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[tnbvikr[at]tcampus.onmicrosoft.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of
words
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
EnvelopeFrom freemail headers are
different
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML
tag
1.7 SCC_BODY_URI_ONLY No description available.
0.0 T_REMOTE_IMAGE Message contains an external image
Subject: {SPAM?} Welcome to iPhone 14 Pro Reward Panel ID:50143
iPhone 14 Pro - Your order has shipped!