Nigerian Beneficiary spam from Hotmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Mar 2023 10:31:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pgpk4-000Fvu-0K

for dave@doctor.nl2k.ab.ca;

Mon, 27 Mar 2023 10:30:44 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Mar 2023 10:30:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn8nam11rlhn2140.outbound.protection.outlook.com ([40.95.36.140]:26932 helo=NAM11-BN8-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from )

id 1pgpaB-000FKo-0t

for doctor@doctor.nl2k.ab.ca;

Mon, 27 Mar 2023 10:20:39 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=W/cZbnIShvs94Z+pGtoTLWSwRFlFx0C6atghIor4Iw5Uy93pdOfI24NrqNW6swNKMN2aTRBvKbikQbO2pVbLzVC/AydwuWsepfdYZIxRkltKjjm5Fx9k7t71ic+bG+H9ivNG6am7+539w55ADGBpjcEgNF1Cc7WJLLuV1RUONAJYtzonu/DiiKpgPaifM4P4O4Km/bIvJyQ5jT/ZKRig4BkvaAKlteq51nUkkvNdHftTRzBnwymzQtkvAq/u0c6wBDoEKmYLQJlBwIh1ezOTrU8HFGIKjNz+x2u1n1cohl4KycVBFlLaUcAgXHEpSoVF9LHW8+no/fmyMBHPDfvpEg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=789dYlevivqsOU6Ejuhs9d5cpYe+OjNRKQc47MUbiHU=;

b=MBvNX/6sqPftFSZy4DMj+2ZSV2sjYMosKQNxJVTvuNyE045arZ1D7EPrUk6oKCf+H3fmFP4M0j79EymdBEJG56jLwyVORDtn2Kzg6DUC91KA1rVP5kPjP8mfYNVx9aYvKq39ifY2r3Kqj1bvKQ0JccHLtyqtmuBEh1psN+CVN0KX+s+WpFdK14epkhxu0r0hJtfyz88Si+uxQtQgbMr4ujVRsjIatjc+qnclXPxtfkkrxYKKujMhCVdhrM/w+psn0LXoxWVQwCNmVJcXh/5tW5BXTsx8LDg563i51QeMraIRmsORvJek0rbAUQsmUFdcC7hylKWS5RN+zMfCByofKQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is

8.42.207.81) smtp.rcpttodomain=bosheng.net smtp.mailfrom=kimo.com.tw;

dmarc=fail (p=reject sp=reject pct=100) action=oreject

header.from=kimo.com.tw; dkim=none (message not signed); arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=wwjwm.onMicrosoft.com;

s=selector2-wwjwm-onMicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=789dYlevivqsOU6Ejuhs9d5cpYe+OjNRKQc47MUbiHU=;

b=DJx5nI76kHr3uYMV8f6lYrDS4NTienaqhjZ1LSUcT4p7HhIYVmRWgcw0/PO24wzcTZYdzPwJFkavQsYldsfEgJ5sb9pS3NtaLqzzGJN1MCQ2u96mhniObfbhIZMotsqoqDTaYsanduYZd6K7M1WPG31UumQYXhplvZO5zhLvIzg=

Received: from DM6PR06CA0067.namprd06.prod.outlook.com (2603:10b6:5:54::44) by

DM6PR01MB5913.prod.exchangelabs.com (2603:10b6:5:1db::29) with Microsoft SMTP

Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.6254.16; Mon, 27 Mar 2023 16:18:23 +0000

Received: from DM6NAM12FT087.eop-nam12.prod.protection.outlook.com

(2603:10b6:5:54:cafe::bf) by DM6PR06CA0067.outlook.office365.com

(2603:10b6:5:54::44) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6178.42 via Frontend

Transport; Mon, 27 Mar 2023 16:18:21 +0000

X-MS-Exchange-Authentication-Results: spf=none (sender IP is 8.42.207.81)

smtp.mailfrom=kimo.com.tw; dkim=none (message not signed)

header.d=none;dmarc=fail action=oreject header.from=kimo.com.tw;

Received-SPF: None (protection.outlook.com: kimo.com.tw does not designate

permitted sender hosts)

Received: from mail1.jas.com (8.42.207.81) by

DM6NAM12FT087.mail.protection.outlook.com (10.13.179.155) with Microsoft SMTP

Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.6254.9 via Frontend Transport; Mon, 27 Mar 2023 16:18:21 +0000

Received: from USBCDPSMBX01.jas1.ds.Jas.com (172.29.10.51) by

USBCDPSMBX01.jas1.ds.Jas.com (172.29.10.51) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.2.1118.26; Mon, 27 Mar 2023 12:17:57 -0400

Received: from User (147.78.103.204) by USBCDPSMBX01.jas1.ds.Jas.com

(172.29.10.51) with Microsoft SMTP Server id 15.2.1118.26 via Frontend

Transport; Mon, 27 Mar 2023 12:17:51 -0400

Reply-To:

From: "Mr. Williams Townsend"

Subject: I am Willam Townsend

Date: Mon, 27 Mar 2023 09:17:57 -0700

MIME-Version: 1.0

Content-Type: text/plain; charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID: <1668b5a9-2c07-43f3-bdd4-21f007324f8f@USBCDPSMBX01.jas1.ds.Jas.com>

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DM6NAM12FT087:EE_|DM6PR01MB5913:EE_

X-MS-Office365-Filtering-Correlation-Id: a29dca16-28b0-4cc5-5681-08db2edee23f

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 1

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?windows-1251?Q?l/M9BYAmw2hRI2a9ySz30qcpaEA+i1fYOfNO47QrWGE8KlWi2mb+6aTJ?=

=?windows-1251?Q?wenFHW5PM4bZGlyoUu8y0FZNbWETW5O4fQa9591KwxMT7LtqS9cbsJWB?=

=?windows-1251?Q?rlCnZtO6cOLBrqvBXDVIoss1VIsYv7bF9p74zKC+jkdvrTiDkxT25ww6?=

=?windows-1251?Q?Mrzfyn9lTEFIehhKf8mYM72dUNG8IR8OtTvIE8Q0USKKIqJJCETXDtqu?=

=?windows-1251?Q?5GUejI96sRTmFM+UQWA861RwE2FFsR1AMu3BG8PY/tKACwfHRk0TGNkl?=

=?windows-1251?Q?3RN5YZZmVOzN7LDd+gEb/9fqIr/MLclkfYe91EgFwWmw/x6fSyG6LZ2I?=

=?windows-1251?Q?8hDAFrsUb4k+HyIEsuxMZnDCHEYOXaNPtQzuRMAS5wS7gsaCQbaTf9yo?=

=?windows-1251?Q?BSzuqmUEA6qy2uYPTAMINz/uKiJTeKws13SArEEU7IQIH82G8V1ofX+f?=

=?windows-1251?Q?/mVP3ngL0Po3GrfnTtBBf+xeoJcCP+iGzQ9C6ik1m7D2VGKF5YvOeJam?=

=?windows-1251?Q?4HT6SoR+EEb8k2UUJ08mxTJE/cD0a6OU7psyhQCF/d6xMno9XPHLQgli?=

=?windows-1251?Q?cEeXmtu3KCvVjGfNCrEZbdzwFMrvu4KYyAlSwY8Y4Hqr+4QQNKsVytIM?=

=?windows-1251?Q?r1NkNhZLgZC00DPiiu/rm7RtGi2Y7JCz3NE372SEzt/EzxMhH9GxM94A?=

=?windows-1251?Q?9D5Da88UQSouwy8viQeIvWw/vUoRJTSgAMiOiDBJGlh2SpnY8b/ihr/0?=

=?windows-1251?Q?vYdBJa9YzjvlcRfrwPx/RnPxA6lYf3y64El/mv7hGIMWs1a/i4BzBiMN?=

=?windows-1251?Q?DVl3sAYvPMX0r+HkK7HuzaX3Y1y53bYNXxmWcCt5MSA1V3tC+tn+KAXT?=

=?windows-1251?Q?rCuZ9VkdBca7aEO4rFJxpS1iTETT6xiu08FD8XTmMMvy3v07kfZdKKaa?=

=?windows-1251?Q?R+Xu5NL90ixnA6GJmFDDACY/rkanBZkJI3EQzT0JCcEYdBQVwgrOExEl?=

=?windows-1251?Q?vAY4YPljGIIoE8tMeQ7Gs3ICAI4vUWGSTcLMMnZ+FT48WrcWqGysOxQN?=

=?windows-1251?Q?MejZ3cqAFav7ikvhAaVF4wVkpfX238d2rCX5ZR3uOhaYFCgZ3E0/+HQz?=

=?windows-1251?Q?AwcJqECovBtvbOG+3OF8Pxmk4QQ4zlPngWq96tB25eCcX+D6BPL3KS8j?=

=?windows-1251?Q?F2EiQMyH/LBAu+RW7zVAuK9T1FFemMK3?=

X-Forefront-Antispam-Report:

CIP:8.42.207.81;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail1.jas.com;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230028)(4636009)(39860400002)(376002)(346002)(396003)(136003)(451199021)(109986019)(46966006)(40470700004)(316002)(2860700004)(40460700003)(3480700007)(498600001)(356005)(81166007)(82740400003)(8936002)(5660300002)(31696002)(82310400005)(86362001)(7406005)(7416002)(7366002)(2906002)(8676002)(70206006)(70586007)(41300700001)(40480700001)(4743002)(35950700001)(26005)(9686003)(336012)(83380400001)(31686004)(47076005)(956004)(66899021)(2700400008);DIR:OUT;SFP:1023;

X-OriginatorOrg: WWJWM.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Mar 2023 16:18:21.5695

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: a29dca16-28b0-4cc5-5681-08db2edee23f

X-MS-Exchange-CrossTenant-Id: fa3414ca-197f-48b7-8ff3-892f8bdd8e93

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=fa3414ca-197f-48b7-8ff3-892f8bdd8e93;Ip=[8.42.207.81];Helo=[mail1.jas.com]

X-MS-Exchange-CrossTenant-AuthSource:

DM6NAM12FT087.eop-nam12.prod.protection.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR01MB5913

X-Spam_score: 21.9

X-Spam_score_int: 219

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Senior Officer at Los Angeles International Airport (CA) California,

USA Hello Good Friend First and foremost, I am sorry for reaching out to

you with this medium.



Content analysis details: (21.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[147.78.103.204 listed in zen.spamhaus.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[147.78.103.204 listed in zen.spamhaus.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.95.36.140 listed in list.dnswl.org]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=NAM11-BN8-obe.outbound.protection.outlook.com;ip=40.95.36.140;r=doctor.nl2k.ab.ca]

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.0 NSL_RCVD_FROM_USER Received from User

0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[godsspower002(at)outlook.com]

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

1.3 PDS_HELO_SPF_FAIL High profile HELO that fails SPF

0.0 T_HK_NAME_MR_MRS No description available.

0.0 CTE_8BIT_MISMATCH Header says 7bits but body disagrees

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait

0.0 HK_NAME_MR_MRS No description available.

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_MONEY_PERCENT X% of a lot of money for you

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} I am Willam Townsend



Senior Officer at Los Angeles International Airport

(CA) California, USA



Hello Good Friend



First and foremost, I am sorry for reaching out to you with this medium.



However, I am Willam Townsend by name. A senior officer at Los Angeles International Airport (CA) California. USA



I am contacting you about an abandoned diplomatic consignment box the x-ray scan report revealed an undisclosed sum of money in a metal trunk box approximately 12.5 million dollars. and the box indicates your contact email address the consignment was abandoned because the Contents of the consignment were not properly declared by the consignee as “MONEY” rather it was declared as a personal effect to avoid interrogation. meanwhile, The Diplomat was in transit to your location 3 weeks before the coronavirus pandemic crisis that shook the world started. The Diplomat fails to pay for the United States Non-Inspection and airport clearance fee to the US Customs border and protection he abandoned the consignment and left without notifying the authority anything of his arrival for declaration of clearance. To confirm you as the authentic beneficiary, do send me your full name, your home address, your mobile



Furthermore, I have taken it upon myself to contact you personally about this abandoned box so that we can transact this as a deal and share the total money 70% for you and 30% for me. My primary purpose for contacting you The U.S. Customs Border and Protection is on clearance for the year 2022 for some abandoned beneficiaries' consignments to be listed among the list of consignment boxes that will be confiscated and get transferred to the US Treasury storage facility for the year 2023.



However, I want both of us to transact this as a deal all I want is your trust as the arrangement for the box to be delivered to you which can be concluded within 1-2 working days after confirmation is made and upon your acceptance and willingness to co-operate.



I will appreciate it if we can keep this deal confidential. Please get back to me via this email for further directives: You can not call me on my telephone number, for now, to avoid the authorities raising their eyebrows at me. Please send your response to my private



Thank you.



Mr. Williams Townsend

Google ranking SEO spam from Gmail servers

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Mar 2023 08:43:39 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pgo47-000A2V-1P

for dave@doctor.nl2k.ab.ca;

Mon, 27 Mar 2023 08:43:19 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Mar 2023 08:43:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f170.google.com ([209.85.214.170]:38409)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pgnvC-0009WK-00

for sales@nk.ca;

Mon, 27 Mar 2023 08:34:15 -0600

Received: by mail-pl1-f170.google.com with SMTP id ja10so8620550plb.5

for ; Mon, 27 Mar 2023 07:32:07 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112; t=1679927521;

h=content-language:thread-index:sensitivity:importance:mime-version

:message-id:date:subject:to:from:from:to:cc:subject:date:message-id

:reply-to;

bh=WKL0e4JeOS3AgZTdzv3rdJUU9TGMt0n0GhzQ6q0tGwk=;

b=SXCVxyGsIxi3XXPHBFRIqxZzCMbI0F4pY8fy1ZUjxTfVeV3yPCnBH3Y9FwOfkSq58z

ASjRDHLNWGsBcuNFJgsW6bD4nbF6TPhb1B/SjhWKH4JvfZVRFNDIKahnEV+DmuY5CjVO

maGa+jT6o1grZ6K0VlVsgoBEmes2BYPhEOt9+RTxd+jgf8ujqqvgRf3UpqtiO+hYI8bq

Fxdh1vh+JiaIDzeASGHCPiewIhhJ9To4TsyLYaqQ+4FCJ+DjymEIFNFI9aFVIoIAOB/Y

AABFYAvA9sGwRmJZa9KH+ZJsiI3kpIfRYHuVgR5bX/Vd6l2qltUVdHmy9Qnr1sc0kP1D

70ig==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1679927521;

h=content-language:thread-index:sensitivity:importance:mime-version

:message-id:date:subject:to:from:x-gm-message-state:from:to:cc

:subject:date:message-id:reply-to;

bh=WKL0e4JeOS3AgZTdzv3rdJUU9TGMt0n0GhzQ6q0tGwk=;

b=oP1qIR+j7dEPUe4xiym6ZdhTYDJ67qWYAghqobXabkbbRxPETjnYLNuf4lQUZowwE9

S9sz2x3AUCBR/7iXVE+xETaKBeNKFpQ680oI3GnAIFRIFKXtSObljLCvDm2A8MSNK8l5

QZ1MBp7wi09wnPWS/Vd2a0I4x5lOkHv13t41EPj185PASzqkyHJ9sAn1ajgyYkqgBc5j

1aBDaagIHreEu3alChTUgIvLuzYXvHg71ImFXkzTJ2BymjYXcHRRVj0CauPsAwoJdKt3

XqmFJBJhRcvaKH2ptV/3bWCLM2fn9zwQGswmwsQNzOQS10N6X2H5DG+zhNzOPQjZqVlt

7orw==

X-Gm-Message-State: AO0yUKUFekYAJAToXpBmrcqx04GiFPWu/WKGBWcHeRLzxG/pcTyj6Kfz

rSeFCsNIKMZqpGHI7N+PnGDXSWsxtCKoug==

X-Google-Smtp-Source: AK7set/lXFhEEKTpuj1r8ictThYN6E74wDUSniV9iNCQ7876P4i1S22MK1Dk3BWrc6WghiosXiLTMA==

X-Received: by 2002:a05:6a20:4b12:b0:d7:6b87:94b8 with SMTP id fp18-20020a056a204b1200b000d76b8794b8mr10943671pzb.18.1679927521407;

Mon, 27 Mar 2023 07:32:01 -0700 (PDT)

Received: from GalaxyGOV3EF1 ([205.254.174.81])

by smtp.gmail.com with ESMTPSA id c21-20020a62e815000000b005a8dcd32851sm2239591pfi.11.2023.03.27.07.32.00

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Mon, 27 Mar 2023 07:32:01 -0700 (PDT)

From: Koliya Brown

X-Google-Original-From: "Koliya Brown"

To:

Subject: Front Page-On Google ?

Date: Mon, 27 Mar 2023 20:01:48 +0530

Message-ID: <111701d960b8$e42acf00$ac806d00$@gmail.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_1118_01D960E6.FDE30B00"

X-Priority: 1 (Highest)

X-MSMail-Priority: High

X-Mailer: Microsoft Outlook 16.0

Importance: High

Sensitivity: Personal

Thread-Index: AdlguMNaHOdIV88aSv+AtsYYzFBi4g==

Content-Language: en-in



This is a multipart message in MIME format.



------=_NextPart_000_1118_01D960E6.FDE30B00

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi sales@nk.ca, I hope you are doing well!







Do you want to see your website 1st Page in Google or another major search

engine? Do you want more targeted visitors on your website?







There could be many reasons behind not getting enough visitors on your

website.



. Do you have 1st page ranking on Google?



. Are you using RIGHT keywords?



. Is your website content properly optimized?



. Is your current marketing agency doing enough to get more ROI?



. Do you have your website mobile friendly?







Do let us know. If you are interested to know more about our client's

testimonials, services methodology and pricing details.







I hope, you will be Interested in my services so I await your reply.







Thanks & Regards



Koliya Brown



Marketing Manager







Note: May I send you a quote? If you are interested!





------=_NextPart_000_1118_01D960E6.FDE30B00

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">
style=3D'word-wrap:break-word'>


class=3DMsoNoSpacing>Hi sales@nk.ca, I hope you are doing well!


class=3DMsoNoSpacing> 

Do you =

want to see your website 1st Page in Google or another major search =

engine? Do you want more targeted visitors on your website?


class=3DMsoNoSpacing> 


class=3DMsoNoSpacing>There could be many reasons behind not getting =

enough visitors on your website.


class=3DMsoNoSpacing>•       &nb=

sp;     Do you have 1st page ranking on =

Google?


class=3DMsoNoSpacing>•       &nb=

sp;     Are you using RIGHT =

keywords?


class=3DMsoNoSpacing>•       &nb=

sp;     Is your website content properly =

optimized?


class=3DMsoNoSpacing>•       &nb=

sp;     Is your current marketing agency doing =

enough to get more ROI?


class=3DMsoNoSpacing>•       &nb=

sp;     Do you have your website mobile =

friendly?

 


class=3DMsoNoSpacing>Do let us know. If you are interested to know =

more about our client’s testimonials, services methodology and =

pricing details.


class=3DMsoNoSpacing> 

I =

hope, you will be Interested in my services so I await your reply.


class=3DMsoNoSpacing> 

Thanks =

& Regards

Koliya =

Brown

Marketing Manager


class=3DMsoNoSpacing> 


class=3DMsoNoSpacing>Note: May I send you a quote? If you are =

interested!



------=_NextPart_000_1118_01D960E6.FDE30B00--



lottery spam from China

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Mar 2023 10:30:40 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pgpjr-000FvE-2Z

for dave@doctor.nl2k.ab.ca;

Mon, 27 Mar 2023 10:30:31 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Mar 2023 10:30:31 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from 211-75-101-153.hinet-ip.hinet.net ([211.75.101.153]:44672 helo=mail.mariavon.com.tw)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from )

id 1pgpOH-000EiR-1V

for doctor@doctor.nl2k.ab.ca;

Mon, 27 Mar 2023 10:08:17 -0600

X-SpamFilter-By: ArmorX SpamTrap 5.77 with qID 32RDooZS3000836, This message is accepted by code: ctloc85258

Received: from [95.214.24.48] ([10.0.0.1])

by mail.mariavon.com.tw (8.15.2/2.80/5.90) with ESMTP id 32RDooZS3000836;

Mon, 27 Mar 2023 21:50:50 +0800

Message-Id: <202303271350.32RDooZS3000836@mail.mariavon.com.tw>

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: Congatulations On Your Winnings!!

To: Recipients

From: "Mr.Oliver Blume "

Date: Mon, 27 Mar 2023 06:50:03 -0700

Reply-To: andrewfabianforporcshe205@gmail.com

X-Spam_score: 13.4

X-Spam_score_int: 134

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Porsche Groups LLC 300 Stuttgart, Baden-wüttemberg, Germany.

Dear Beneficiary, This is a congratulatory mail informing you that you have

been selected as one of the lucky winners for our Annual OMAZE Raffle Draw

for an honor of a brand new Porsche Mecan S and a check worth of $ [...]



Content analysis details: (13.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.0 TVD_RCVD_IP Message was received from an IP address

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[andrewfabianforporcshe205(at)gmail.com]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_HK_NAME_MR_MRS No description available.

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.0 HK_NAME_MR_MRS No description available.

0.0 FILL_THIS_FORM Fill in a form with personal information

0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps

0.0 MONEY_FORM Lots of money if you fill out a form

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

2.2 FILL_THIS_FORM_LOAN Answer loan question(s)

0.0 FORM_FRAUD Fill a form and a fraud phrase

0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money

Subject: {SPAM?} Congatulations On Your Winnings!!



Porsche Groups LLC 300 =



Stuttgart, Baden-w=FCttemberg,

Germany.





Dear Beneficiary,



This is a congratulatory mail informing you that you have been selected=

as one of the lucky winners for our Annual OMAZE Raffle Draw for an honor =

of a brand new Porsche Mecan S and a check worth of $2,000,000.00 USD in th=

e draws from the worldwide balloting program held in the UNITED STATES OF A=

MERICA, by the OMAZE COMPANY.

=



Portrayal of prize vehicle; =



Model: Porsche Mecan S

280kW/380 PS Power (kw)/Power (PS)

4.8 s Acceleration 0-100km/h

259 km/h Maximum velocity

375 hp Max Power

4,6s 0 - 60 mph

160 mph Top track (speed with summer tires)



The raffle cycle was assisted through sporadic decision in our compute=

rized email decision structure (ESS) from an informational index of over he=

aps of email addresses. The Porsche Lottery is upheld by the English Gaming=

Board and also Licensed by the Global Relationship of Gaming Controllers (=

IAGR). Kindly contact our fiduciary claim division for additional informati=

on as regarded strategies to the claim of your honor.



Email: andrewfabianforporcshe205@gmail.com

=



=







Kindly provide the following below with your lucky raffle Reg. pin code =

Number: DGH/OMAZEPSH/2023. We expect your swift response so we can forward =

it to legal advisor who will put you through the neccessary steps on how to=

get your check and car. =





1. Name In Full :

2. DOB:

3. Age :

4. Sex :

5. Occupation :

6. Direct Phone :

7. Present Country :

8. Reg pin code Number: DGH/OMAPSH2023



Congratulations from all our staffs, and thank you for being =

part of our extraordinary program.

Regards,



Chief Executive Officer Porsche Groups.

Mr. Oliver Blume

more link spam from gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Mar 2023 08:37:39 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pgny0-0009od-1l

for dave@doctor.nl2k.ab.ca;

Mon, 27 Mar 2023 08:37:00 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Mar 2023 08:37:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f45.google.com ([209.85.208.45]:35358)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pgkCG-000Bov-2E

for doctor@nl2k.ab.ca;

Mon, 27 Mar 2023 04:35:33 -0600

Received: by mail-ed1-f45.google.com with SMTP id y4so34065201edo.2

for ; Mon, 27 Mar 2023 03:33:29 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112; t=1679913203;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=Hs1PTHblO2AXgpKzQQ/c9ZMopbP9mOiZXWrX+k4RxDY=;

b=o60nsi5Dt2FU5Ua+Oi8GRaMCAbNixE6Cz2hM554+6dknXIBLMK890vqYKK40vuiv/U

DA/w4SRBM7Xksz3tAq1Kz2wpf/np30KUGRKKtNVqWca46VyHgk3fy4wXDP+V/RBWCOjE

HAcTrcXqpbhXYJqHfhCTgKeV42gPcXIzngLJGtffqosyIeytoAYpLL3aXFlMwCll/EWk

teGqON9EWdNmKO1fOMi179BXEbiJhxwSVu+UcJX4gnOqk+CjDRXRYkzOse2CADLHhBP1

byDdL720bXWElOZBlNYVD5jsHbHRyPPryGIWAGaHM2THo+h6Ba9Oxz3WtPoB1iL8DjMZ

QAkQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1679913203;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=Hs1PTHblO2AXgpKzQQ/c9ZMopbP9mOiZXWrX+k4RxDY=;

b=bViZZs6uPEIthnkq0eJHyy+J+J/1xT3bqalqvf3O6T1FzwFeTEorEjimhx8WZYM8Cv

1NK/7t1yXHPrwSnfxPBWm3t3Fjn7j7fPa/xg/mDJOKXuuIms9EmG6WQHAzQWmFSK8zKB

f+J7r2ls39fx89fjq2bx590XJZO1GA5eGdrTkd4TtzkQayoaS77gwTSFhAgKORt62i6W

UE3uMZ6X5Q3vWsTXamfn2ooI92JlMxI/4irP/ItSMNWXDYQ8C1/uNoWTw2FEW6m0i87u

humm8oXxMWavET6h60d6hdmnG5Ltg+BxjOA+Eb3bQstzQZQWYYAPCTt33p4sL/vWsLeY

8s5w==

X-Gm-Message-State: AAQBX9cHaAmdCToYSoukIOtK83fJJOnAlauf/aAopx/UP0UQVEp5gjrp

0QnzidszJTNg3HXlw+Bx5OYuxKjIUWucDu1znTQ=

X-Google-Smtp-Source: AKy350YtSDFacShdvQpW9BkKnngCZeakzo+YjWVD1xKw5qols35Zf0FfRHdbRTWLw1xX/+YOQ0mCEer0gAmWDogT/RQ=

X-Received: by 2002:a17:906:9244:b0:8e3:da0f:f3ea with SMTP id

c4-20020a170906924400b008e3da0ff3eamr4836378ejx.7.1679913203552; Mon, 27 Mar

2023 03:33:23 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:7208:7054:b0:65:74fb:ecc8 with HTTP; Mon, 27 Mar 2023

03:33:23 -0700 (PDT)

From: bola17

Date: Mon, 27 Mar 2023 16:03:23 +0530

Message-ID:

Subject:

To: dmillar , doconnor ,

doctor , dolores32 ,

domenic rubino , donahued ,

dorlovic , dossantos , doug ,

douglas palframan

Content-Type: text/plain; charset="UTF-8"

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: https://bit.ly/3Kjpx4R



Content analysis details: (5.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.45 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list

2.5 SORTED_RECIPS Recipient list is sorted by address

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[balajiramesh12345(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[balajiramesh12345(at)gmail.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_TONOM_EQ_TOLOC_SHRT_PSHRTNER Short subject with potential shortener

and To:name eq To:local

0.0 TVD_SPACE_RATIO No description available.

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.45 listed in wl.mailspike.net]

Subject: {SPAM?}



https://bit.ly/3Kjpx4R

More link spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Mar 2023 04:39:38 -0600

Received: from mail-qk1-f182.google.com ([209.85.222.182]:36470)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pgkFL-000Buo-0L

for dave@doctor.nl2k.ab.ca;

Mon, 27 Mar 2023 04:38:45 -0600

Received: by mail-qk1-f182.google.com with SMTP id q2so2303171qki.3

for ; Mon, 27 Mar 2023 03:36:40 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112; t=1679913394;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=gL8kfg1F1gaSs/nk9qDNndtKkIcSa3jpfgKcHExTPcw=;

b=WXOP357uAvf6TJXM9kbgBSOpj0Tdngkz7hunrxGIHkItMfdHZQ+rFYSiDrtBEAMMBJ

YffXhs4kHjdX91kjXSUOjK571L6f4nbfAoCQ0PLu+YiiN6nXiHd10H858A4N8fvNmrKJ

vkhjKCXN3FAih74s5ryv/G6+C0B+QAivPhUJo377tjk8zElyTBtXsqmvaxxjj+/ax3zP

JLzmJSDfICnCgthBHXx94orl/3D2d+KvbtfixAwCRLNMGsKKXQ2u640joBSzXwPCoL7W

KFivM0lMxMQkVn+iqMAc8tFy+r5MngGewk6BWU48oUVaFY2rP4uHJBkIGPYwbwdaqaZ+

mQ7g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1679913394;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=gL8kfg1F1gaSs/nk9qDNndtKkIcSa3jpfgKcHExTPcw=;

b=gq3CI8BD9r48tiu3vI589f6hWeBI23+7L/xYyUEBHyGJMAc+Plr3FXgKdOMeGr88bN

qO+lljElYDuk3WJacmyc4HntxFTXltu7pTCASUNKDW6nUbcpp6Hhwjor+0dbr0pl8sTv

rICIKkWJ2bAuMhuMXK1iFub4XXOGC4rCOelWb7jNNKvv8FujjRX9TuTrvUH7WsMvz7/I

HlQW0u7znY3obgJPEGjfJr8SEOxmNUXWiWtBim5m2UH+pyRoE+AQjUkIiaWnPwRzBMkm

Aa2g8kfCVZDB3u5fwLIJOdaFoX7d/D/Rgqw5lMSiTPSKaLYwFYbfZbuYPGNucAv2IOMf

Au/w==

X-Gm-Message-State: AO0yUKU7byeDMcYYrsvJUT90fpIPywFesCQo+A0BuOZYqC+7BM9fKapa

lmrCeKlsuCTk0PYDId6SJLK5bYlCrJMic52Ssyk=

X-Google-Smtp-Source: AK7set9K6Ub2g0ArciJ4P8izE5hpLk4/BvsC7o72VYUS5Pj/DuXxOqyw63SCKKQsjO+ukFVRSPUNETaII8gJmWlsC6w=

X-Received: by 2002:a37:6386:0:b0:745:da3d:cd0a with SMTP id

x128-20020a376386000000b00745da3dcd0amr2746619qkb.12.1679913394185; Mon, 27

Mar 2023 03:36:34 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:ac8:5803:0:b0:3e3:92ce:cce2 with HTTP; Mon, 27 Mar 2023

03:36:33 -0700 (PDT)

From: "Dr.Charles Edward"

Date: Mon, 27 Mar 2023 16:06:33 +0530

Message-ID:

Subject:

To: daria b55 ,

darnaque leschats2011 , datok jp ,

datsit1968 , dave ,

davelongaphie5309 ,

david cameletti2 , david100 ,

david2divizio , davidbrunstein

Content-Type: text/plain; charset="UTF-8"

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: https://bit.ly/3noHupD



Content analysis details: (5.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.182 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list

2.5 SORTED_RECIPS Recipient list is sorted by address

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[sahilarya50906(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[sahilarya50906(at)gmail.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_HK_NAME_FM_DR No description available.

0.0 TVD_SPACE_RATIO No description available.

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.182 listed in wl.mailspike.net]

Subject: {SPAM?}



https://bit.ly/3noHupD

SEO / Web design spam from Microsoft Outlook servers

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Mar 2023 08:36:40 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pgnxd-0009md-0W

for dave@doctor.nl2k.ab.ca;

Mon, 27 Mar 2023 08:36:37 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Mar 2023 08:36:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-tyzapc01olkn2038.outbound.protection.outlook.com ([40.92.107.38]:5134 helo=APC01-TYZ-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from )

id 1pgjm9-000Ahf-2t

for sales@nk.ca;

Mon, 27 Mar 2023 04:08:36 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=nlTnzHnECOsbbFF0GGGnpKNH6UzrMt9ccDNskyBQnDbcei3yXMaSuypRQ7/CvkKxx60ptn3uwXQQHNfcu9Za8fuRZxgC2Vh54vvG44mjYc7A0+bfQy4Ls5TzGoIj5bDEpr5SZG9zgHXQ8IHwqm++Qo0HSf12yPeO5+ACZdezLhwktwqNvSZJi+qxIuD0BrLHeQG75pCeC72MGl/+Z13fe/SfyzHCfickzogxszi09q5+7Otuf3bwH9AxajqsL7NkONXAkbYk+Q51B1SJE9Y/seyzHVUNPjZ16+TH7tr5kxon7aikauwYAbWKRk146ojdUERxSPA6Gkg1IScnOkLXNw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=C2NIqSeUBFsnFnUkwkpvQ8x36KHZbpoiVBSG9geNbnE=;

b=NJLhX5cAzyF0UZ/uBJjpHvcAQPevOtesFki4r5UWQIoRNa2XotmPDk6dmYZA7VK9w1rl6RkhSY8FftI2sBbobXPbwocyYuc7lKeGRwiydM6mCp4k1T18XtSx4ywTsjiBA6Viw579j+JXjB1hJuVsAvRrMrUM1WluR8Uzgcxmmq5mklcD15YYR2RyVJrZcmoQdgH/CK3MpBVuRXkTQm2bf0djIIQRiP6UAU5lWd2Veh2Hu2KHnzyB0fUnwO/E6zp81S5agg2lWiI4e2UNwPpG/SHFwAGB6XC3jBlYT28v5iMkFCUIPhpgLMcPosQvS4e8RKfn3LvLKjLuHrY+z4l1ww==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=C2NIqSeUBFsnFnUkwkpvQ8x36KHZbpoiVBSG9geNbnE=;

b=nhVtW/xLC8ZdSghd6I9kzkZ3VOA/KI1duES5Vg3AieUUGlNWb5UcUXDgT1sdIB2qTsCGW/QsyrRzSK/2q9K1iUTdtLEgGxGF7WwRlOV8mDNjmeqeErMBn8rMznk4ItzdgO3Zx0hphiUPOkqlFgh2QHYLzdc0TS+bX1zaLqDsnCjd+0OI6SnMQkuL9sCvST8QLbQONgy87mwzurbgvL2h/iFMZfGee9LEKMnL1FOY3QxBr73ViUAhxa2V6Qu+ph6RsOQvB/qKzaxBwiJfWiHzvzdDRdOgX/K/R6RjFWJzCjLnMck1BauzqQjDD9VA8fFKlWQFI51F3eIWmhXx4Qr3ZQ==

Received: from SI2PR01MB4082.apcprd01.prod.exchangelabs.com

(2603:1096:4:1a1::5) by SEZPR01MB4598.apcprd01.prod.exchangelabs.com

(2603:1096:101:91::8) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6222.28; Mon, 27 Mar

2023 09:45:48 +0000

Received: from SI2PR01MB4082.apcprd01.prod.exchangelabs.com

([fe80::c89f:4eca:bbb:319e]) by SI2PR01MB4082.apcprd01.prod.exchangelabs.com

([fe80::c89f:4eca:bbb:319e%3]) with mapi id 15.20.6178.037; Mon, 27 Mar 2023

09:45:48 +0000

From: Subham Rana

Subject: Proposal...!!

Thread-Topic: Proposal...!!

Thread-Index: AQHZYJDhndLSyoj4aUSLZ+Tb5o3kjg==

Date: Mon, 27 Mar 2023 09:45:47 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [ycw3a0PjkhgHH1397IuJBfXUiZFTIBL/]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SI2PR01MB4082:EE_|SEZPR01MB4598:EE_

x-ms-office365-filtering-correlation-id: c71f2caf-47b0-492b-49c9-08db2ea80b31

x-ms-exchange-slblob-mailprops:

hMn5pMJ7kd/mcBd/9cU938eu+ZgmMaGTlXqzw5MqUHcy8Lt4YWdO2LuhlLKMRhcT2I3qQpFRbV029UC1C5dhD3+6R0mkBOSdxTvrMa80XYRrTrf+Pm+h5NoUQc9PdujqsHOm17luDsqOYrEa5ICBYAglO2A5lqmxVIk0I7n1XE2K5zBeOUNe9k022GFQwEH1G8sQVZPEfmb+CUo3wAolmOwQSA93a6Nl3oOC0NGQZJ8Psi9tg0Rl/IqLP8a28Gnn7hi03YB555gS2uqLZx1IgHNAwprOixd5g7IZd24At06h8r2hZBYMyL0Z4IBQZdodtEcKdGjKlpd7PGMN+3oFM0FWuvdTaZIfQtazjD3O3k2rtystwRJ1p+ZcP3ANEAJ5quWzAFGyWuCmqbmw9oXboMQyC8g+0hed+j7c20Lu2W5ERayXM+NKSy8W5evZHxeSKVrjDQyG9muAdO/XFVZP3zoLxE4pXC2C68CqVEXeNtaiiaDZ+cKeaMJLtsKpuL8QOgHMZ8i3PqWcHqBNlr93GzidvAQYjoLjKj7I3OjaMMYNYSqLx8l16EZ7nkqjJ324S+isUA62eI8DgtST9GBB0cReIiX1jmGvdbVqEQQqJ+4=

x-microsoft-antispam: BCL:0;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?QIZMtGECqUt/m7GYN3egPy6NrFTd1Hwzjj1NWcIKhSPsFjC+KtxYIr48k3?=

=?iso-8859-1?Q?IOlGYWzOm2DR6GM5oaZmXbZL876QwwIswmxEzCuHkfbWyss4L567euL3sf?=

=?iso-8859-1?Q?Gs8OEoBbcgSw95jvApnLeZ1yf3kFwqqbmTAtsEUZopNErGXw+jVV0xqbT7?=

=?iso-8859-1?Q?csbKrRabRSBnpYixUC683AqDtycgrEcZWVMvbE+vxXQOaqRt7AMG9OgMTI?=

=?iso-8859-1?Q?pcFKr8s4mln81kud9gHr6wIq5hIpqhxUKxJVWduQutn3CG2tJpxoBD+Pfb?=

=?iso-8859-1?Q?2OdoNpdbOb3BDEvST7BVsz7IA262WpJ1tjqFPzOhbybyrPDO4Sqj1w1TLN?=

=?iso-8859-1?Q?SveWTxGS/dEOuq9OgSfnOl/OBX434y+6XXFRyHckhKxKgfv4FCbeLM1seN?=

=?iso-8859-1?Q?As8tYsz9CAaWKzkulJ1oVjy8EVOLnM3LHmadx68wN/+FhveXDhGrvlYPMi?=

=?iso-8859-1?Q?C7inb9LiC7V2PFa83Zbtdzxa5p+1bOxNWKexrESeuq7Vukler8GcXdBOmW?=

=?iso-8859-1?Q?qg78TE52ydKPSbytCWSpxtNU6VaIv0fR7OXKWPbH7aLhk7pUlB3f4Ea61B?=

=?iso-8859-1?Q?g6UqTL8fvJJs/UbO3qnAYjRmEKnmmd+z/pjM7O7PSAw7dTfyX5iKT46Lcl?=

=?iso-8859-1?Q?IgWzP83vXSFR40KPBJXCw4sTu0ZARYN+F4oYs4UZcRfoUPBY6r9fmXCJKI?=

=?iso-8859-1?Q?SgTHSBTPdOPmq8D3/STzZZNiP+oct5IJwJOd0X80RDdzwQ0E7RbgZ1XsNB?=

=?iso-8859-1?Q?9SVIW+AZekXnMM0Y7+Q4V59pH7zrvrNIKXzaTkodJoC11vcCV/xzoDopzb?=

=?iso-8859-1?Q?hXPCc+HVAmfNspC0Cpwzkc+gP+N8lZICQG3jfFhk7//+i0pmWqS/L6rH1N?=

=?iso-8859-1?Q?PGlHbU+TdiuWt3C5Eft6AMUf+uLRRZ7n3AUWX3EDsVcwA2UeE+Rt/gbcKI?=

=?iso-8859-1?Q?vBPLlgdRohFbVx36XOW5ZCs+XGfcYoCWfaUsqBOekbFgO9zLGNHm2pSsBP?=

=?iso-8859-1?Q?xgyZ5B7zs42io200f7rDemmHCd50xBW3SFCBl4dniOTVXA/zUjbol066g5?=

=?iso-8859-1?Q?dl1PBUMHDrRTsycwnXZiCGm19i11cIACz+KigjDEIcPxK81sN3E9ntmsW7?=

=?iso-8859-1?Q?i7AWx1ncM28+4J5k1uLa8AcUS77G5HJpkzT+L4B4+nPFhQOZcoNBMd2AGi?=

=?iso-8859-1?Q?w0JYdUYYbJSv36QnbE03fqFfAOOLI4N5tclNecDc0rO6WoFhlVjh3qX5ej?=

=?iso-8859-1?Q?WVBti8NJJASkRNRIQpnA=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_SI2PR01MB40824D80C832D004C954DEC0F98B9SI2PR01MB4082apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SI2PR01MB4082.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: c71f2caf-47b0-492b-49c9-08db2ea80b31

X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Mar 2023 09:45:47.9751

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR01MB4598

X-Spam_score: 5.7

X-Spam_score_int: 57

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I found your detail on Google.com and I have looked at

your website and realize your website is great design but your website ranking

not good all search engine Google, AOL, Yahoo, and Bing. Do you want more

targeted visitors on your website?



Content analysis details: (5.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.107.38 listed in list.dnswl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[subhamrana494(at)outlook.com]

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[subhamrana494(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.107.38 listed in wl.mailspike.net]

0.0 HTML_OBFUSCATE_05_10 BODY: Message is 5% to 10% HTML obfuscation

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Proposal...!!



--_000_SI2PR01MB40824D80C832D004C954DEC0F98B9SI2PR01MB4082apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,



I found your detail on Google.com and I have looked at your website and rea=

lize your website is great design but your website ranking not good all sea=

rch engine Google, AOL, Yahoo, and Bing.



Do you want more targeted visitors on your website?



We can place your website on Google's 1st page. Yahoo, etc.).



May I send you quote? If interested.



Regards,



Subham Rana





--_000_SI2PR01MB40824D80C832D004C954DEC0F98B9SI2PR01MB4082apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class=

=3D"elementToProof">


t;Times New Roman", "serif"">


tentPasted0" style=3D"border:1pt none windowtext;font-family:Calibri, "=

;sans-serif";margin:0px;padding:0in;color:rgb(32, 31, 30)">Hi, 
span>
le=3D"font-family:"Segoe UI", "sans-serif";margin:0px;c=

olor:rgb(32, 31, 30)"> 




t;Times New Roman", "serif"">


tentPasted0" style=3D"border:1pt none windowtext;font-family:Calibri, "=

;sans-serif";margin:0px;padding:0in;color:rgb(32, 31, 30)">I found you=

r detail on

x_ContentPasted0 ContentPasted0" style=3D"border:1pt none windowtext;font-=

family:"Segoe UI", "sans-serif";margin:0px;padding:0in;=

color:rgb(32, 31, 30)"> 

ed0 x_x_ContentPasted0 x_ContentPasted0 ContentPasted0" style=3D"border:1pt=

none windowtext;font-family:Calibri, "sans-serif";margin:0px;pad=

ding:0in;color:rgb(0, 176, 240)">G

tPasted0 x_x_ContentPasted0 x_ContentPasted0 ContentPasted0" style=3D"borde=

r:1pt none windowtext;font-family:Calibri, "sans-serif";margin:0p=

x;padding:0in;color:red">o

x_x_ContentPasted0 x_ContentPasted0 ContentPasted0" style=3D"border:1pt no=

ne windowtext;font-family:Calibri, "sans-serif";margin:0px;paddin=

g:0in;color:rgb(255, 192, 0)">o

sted0 x_x_ContentPasted0 x_ContentPasted0 ContentPasted0" style=3D"border:1=

pt none windowtext;font-family:Calibri, "sans-serif";margin:0px;p=

adding:0in;color:rgb(0, 176, 240)">g

entPasted0 x_x_ContentPasted0 x_ContentPasted0 ContentPasted0" style=3D"bor=

der:1pt none windowtext;font-family:Calibri, "sans-serif";margin:=

0px;padding:0in;color:rgb(0, 176, 80)">l

ContentPasted0 x_x_ContentPasted0 x_ContentPasted0 ContentPasted0" style=3D=

"border:1pt none windowtext;font-family:Calibri, "sans-serif";mar=

gin:0px;padding:0in;color:red">e

asted0 x_x_ContentPasted0 x_ContentPasted0 ContentPasted0" style=3D"border:=

1pt none windowtext;font-family:Calibri, "sans-serif";margin:0px;=

padding:0in;color:rgb(32, 31, 30)">.

Pasted0 x_x_ContentPasted0 x_ContentPasted0 ContentPasted0" style=3D"border=

:1pt none windowtext;font-family:Calibri, "sans-serif";margin:0px=

;padding:0in;color:rgb(32, 31, 30)">com

and I have looked at your website and realize your website is great design=

but your website ranking not good all search engine

=3D"x_x_x_ContentPasted0 x_x_ContentPasted0 x_ContentPasted0 ContentPasted0=

" style=3D"border:1pt none windowtext;font-family:"Segoe UI", &qu=

ot;sans-serif";margin:0px;padding:0in;color:rgb(32, 31, 30)"> 
pan>

Pasted0 ContentPasted0" style=3D"border:1pt none windowtext;font-family:Cal=

ibri, "sans-serif";margin:0px;padding:0in;color:rgb(0, 176, 240)"=

>G

ntentPasted0 ContentPasted0" style=3D"border:1pt none windowtext;font-famil=

y:Calibri, "sans-serif";margin:0px;padding:0in;color:red">o
>

ted0 ContentPasted0" style=3D"border:1pt none windowtext;font-family:Calibr=

i, "sans-serif";margin:0px;padding:0in;color:rgb(255, 192, 0)">o<=

/span>

ntPasted0 ContentPasted0" style=3D"border:1pt none windowtext;font-family:C=

alibri, "sans-serif";margin:0px;padding:0in;color:rgb(0, 176, 240=

)">g

ContentPasted0 ContentPasted0" style=3D"border:1pt none windowtext;font-fam=

ily:Calibri, "sans-serif";margin:0px;padding:0in;color:rgb(0, 176=

, 80)">l

0 x_ContentPasted0 ContentPasted0" style=3D"border:1pt none windowtext;font=

-family:Calibri, "sans-serif";margin:0px;padding:0in;color:red">e=


Pasted0 ContentPasted0" style=3D"border:1pt none windowtext;font-family:Cal=

ibri, "sans-serif";margin:0px;padding:0in;color:rgb(32, 31, 30)">=

,

Pasted0 ContentPasted0" style=3D"border:1pt none windowtext;font-family:&qu=

ot;Segoe UI", "sans-serif";margin:0px;padding:0in;color:rgb(=

32, 31, 30)"> 

ntentPasted0 x_ContentPasted0 ContentPasted0" style=3D"border:1pt none wind=

owtext;font-family:Calibri, "sans-serif";margin:0px;padding:0in;c=

olor:rgb(32, 31, 30)">AOL

_ContentPasted0 x_ContentPasted0 ContentPasted0" style=3D"border:1pt none w=

indowtext;font-family:Calibri, "sans-serif";margin:0px;padding:0i=

n;color:rgb(32, 31, 30)">,

_ContentPasted0 x_ContentPasted0 ContentPasted0" style=3D"border:1pt none w=

indowtext;font-family:"Segoe UI", "sans-serif";margin:0=

px;padding:0in;color:rgb(32, 31, 30)"> 

x_x_ContentPasted0 x_x_ContentPasted0 x_ContentPasted0 ContentPasted0" styl=

e=3D"border:1pt none windowtext;font-family:Calibri, "sans-serif"=

;margin:0px;padding:0in;color:rgb(0, 112, 192)">Yahoo,

s=3D"x_x_x_ContentPasted0 x_x_ContentPasted0 x_ContentPasted0 ContentPasted=

0" style=3D"border:1pt none windowtext;font-family:Calibri, "sans-seri=

f";margin:0px;padding:0in;color:rgb(32, 31, 30)"> and

pan class=3D"x_x_x_ContentPasted0 x_x_ContentPasted0 x_ContentPasted0 Conte=

ntPasted0" style=3D"border:1pt none windowtext;font-family:"Segoe UI&q=

uot;, "sans-serif";margin:0px;padding:0in;color:rgb(32, 31, 30)">=

 

x_ContentPasted0 ContentPasted0" style=3D"border:1pt none windowtext;font-f=

amily:Calibri, "sans-serif";margin:0px;padding:0in;color:rgb(32, =

31, 30)">Bing

ed0 x_ContentPasted0 ContentPasted0" style=3D"border:1pt none windowtext;fo=

nt-family:Calibri, "sans-serif";margin:0px;padding:0in;color:rgb(=

32, 31, 30)">. 

d0 ContentPasted0" style=3D"font-family:"Segoe UI", "sans-se=

rif";margin:0px;color:rgb(32, 31, 30)"> 




t;Times New Roman", "serif"">


tentPasted0" style=3D"border:1pt none windowtext;font-family:Calibri, "=

;sans-serif";margin:0px;padding:0in;color:rgb(32, 31, 30)">Do you want=

more targeted visitors on your website? 

tentPasted0 x_ContentPasted0 ContentPasted0" style=3D"font-family:"Seg=

oe UI", "sans-serif";margin:0px;color:rgb(32, 31, 30)"> =

;




t;Times New Roman", "serif"">


tentPasted0" style=3D"border:1pt none windowtext;font-family:Calibri, "=

;sans-serif";margin:0px;padding:0in;color:rgb(32, 31, 30)">We can plac=

e your website on

asted0 x_ContentPasted0 ContentPasted0" style=3D"border:1pt none windowtext=

;font-family:"Segoe UI", "sans-serif";margin:0px;paddin=

g:0in;color:rgb(32, 31, 30)"> 

ntPasted0 x_x_ContentPasted0 x_ContentPasted0 ContentPasted0" style=3D"bord=

er:1pt none windowtext;font-family:Calibri, "sans-serif";margin:0=

px;padding:0in;color:rgb(0, 176, 240)">G

ContentPasted0 x_x_ContentPasted0 x_ContentPasted0 ContentPasted0" style=3D=

"border:1pt none windowtext;font-family:Calibri, "sans-serif";mar=

gin:0px;padding:0in;color:red">o

asted0 x_x_ContentPasted0 x_ContentPasted0 ContentPasted0" style=3D"border:=

1pt none windowtext;font-family:Calibri, "sans-serif";margin:0px;=

padding:0in;color:rgb(255, 192, 0)">o

tentPasted0 x_x_ContentPasted0 x_ContentPasted0 ContentPasted0" style=3D"bo=

rder:1pt none windowtext;font-family:Calibri, "sans-serif";margin=

:0px;padding:0in;color:rgb(0, 176, 240)">g

x_ContentPasted0 x_x_ContentPasted0 x_ContentPasted0 ContentPasted0" style=

=3D"border:1pt none windowtext;font-family:Calibri, "sans-serif";=

margin:0px;padding:0in;color:rgb(0, 176, 80)">l

"x_x_x_ContentPasted0 x_x_ContentPasted0 x_ContentPasted0 ContentPasted0" s=

tyle=3D"border:1pt none windowtext;font-family:Calibri, "sans-serif&qu=

ot;;margin:0px;padding:0in;color:red">e

entPasted0 x_x_ContentPasted0 x_ContentPasted0 ContentPasted0" style=3D"bor=

der:1pt none windowtext;font-family:Calibri, "sans-serif";margin:=

0px;padding:0in;color:rgb(32, 31, 30)">'s

1st page. Yahoo,  etc.). 

0 x_ContentPasted0 ContentPasted0" style=3D"font-family:"Segoe UI"=

;, "sans-serif";margin:0px;color:rgb(32, 31, 30)"> 

p>


t;Times New Roman", "serif"">


tentPasted0" style=3D"border:1pt none windowtext;font-family:Calibri, "=

;sans-serif";margin:0px;padding:0in;color:rgb(32, 31, 30)">May I send =

you quote? If interested. 

ontentPasted0 ContentPasted0" style=3D"font-family:"Segoe UI", &q=

uot;sans-serif";margin:0px;color:rgb(32, 31, 30)"> 




t;Times New Roman", "serif"">


tentPasted0" style=3D"border:1pt none windowtext;font-family:Calibri, "=

;sans-serif";margin:0px;padding:0in;color:rgb(32, 31, 30)">Regards,&nb=

sp;

" style=3D"font-family:"Segoe UI", "sans-serif";margin:=

0px;color:rgb(32, 31, 30)"> 




lor:rgb(36, 36, 36)">


tentPasted0 x_ContentPasted0 ContentPasted0" style=3D"color:rgb(0, 0, 0)">&=

nbsp;Subham Rana














--_000_SI2PR01MB40824D80C832D004C954DEC0F98B9SI2PR01MB4082apcp_--

more link spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Mar 2023 08:36:40 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pgnxV-0009mU-0Q

for dave@doctor.nl2k.ab.ca;

Mon, 27 Mar 2023 08:36:29 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Mar 2023 08:36:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f196.google.com ([209.85.210.196]:40948)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pgjBU-0009Ly-2c

for root@doctor.nl2k.ab.ca;

Mon, 27 Mar 2023 03:30:40 -0600

Received: by mail-pf1-f196.google.com with SMTP id fb38so5165004pfb.7

for ; Mon, 27 Mar 2023 02:28:38 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112; t=1679909313;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=Z1liy+wJSwePYFXy89rj+8vXjU4nL+0EKZnjj+0wpnU=;

b=l9PteIerdNxDIimJ3NID+bZQdEkyXU9WD+ScShxshDzIMkTRsJT3HdWcbQHPIBo9o6

ToWyzsGid0mZpdhrOY33kjKbJ5UDyQMk6YgbFj19pxWSIUNfEshhdwnOMyZR7pGUinJd

Bt2TscrdJEuV9V1OiVhACKykxCtQSEz/h1pkimJjhLbjunqPtqTso0+b9NkNC19E7+kc

mJOaylpNs0+XTDv7LLvDi4LPZp95D1WrMkMN22BirOO2FfCBbhUHAlJXUnukh0y4PtdN

142pVs/sv5Hf0Rk9lwigqKlzVAwu72zD/7vflq7n5Zy2/oCzdHktmwT1cKRSWb9Tf2Ia

FRUQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1679909313;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=Z1liy+wJSwePYFXy89rj+8vXjU4nL+0EKZnjj+0wpnU=;

b=RzcXbGizPbU48n9Tc+76f675pUiOjEBN/37pLfcYiSJEZmxLPHcDsfemRnUoQx09Ij

V5CKzPzCB+yHMDqhCeUEy7AWlxXECD2quCD/AeoWiAJDcYT13lqkjPZWdXkFIeou68QF

u5i99HxynzuCt+I8bW+s6O9cx6xWe1gxQYKDlQaGFO7W8PXslDewoCYLY7T6o7mMx147

zipRkhcgKeU/Dk+UL7nUFWUcyQpHNhDjuIlxyqgY8mda0gn0yH02YsEvGLqaPQNYqLjn

AWiHHV8zMs+h4gs10F//oy/KcCZbX8XQsrDluQ7+Uz9VRdl1Q2nZawGLEDcqsipf2SFw

/fbg==

X-Gm-Message-State: AAQBX9eVRIg4lQIjR+bt4/LulanIG24qAmu8lz5zIXa20465R/VaIgeX

yueL+HcmW/q/7gv9kFn6jf85jNEon0dHfQhCLIPjDsaUjHEcAUoh

X-Google-Smtp-Source: AKy350bZrhtbkWO1eiDSH70XlTeC9f4fYn9XEdFANpPTtlDS853bWj3PpH5R3gfffch3PrzbrSrN33VpEn8PG26fecs=

X-Received: by 2002:a05:6a00:a14:b0:625:66a9:c393 with SMTP id

p20-20020a056a000a1400b0062566a9c393mr5920933pfh.0.1679909313080; Mon, 27 Mar

2023 02:28:33 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a05:6a10:e2c9:b0:446:ff5c:8c2e with HTTP; Mon, 27 Mar 2023

02:28:32 -0700 (PDT)

From: "evs_idea@yahoo.com"

Date: Mon, 27 Mar 2023 14:58:32 +0530

Message-ID:

Subject:

To: pierre tremblay , romarnal ,

romtrade mtl , root ,

sabby cattery

Content-Type: text/plain; charset="UTF-8"



https://bit.ly/40DT5iW

Link spam from Gamil

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 27 Mar 2023 08:36:39 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pgnx6-0009m2-2h

for dave@doctor.nl2k.ab.ca;

Mon, 27 Mar 2023 08:36:04 -0600

Resent-From: The Doctor

Resent-Date: Mon, 27 Mar 2023 08:36:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f170.google.com ([209.85.160.170]:42897)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pgi0g-0006Lm-0d

for doctor@nl2k.ab.ca;

Mon, 27 Mar 2023 02:15:25 -0600

Received: by mail-qt1-f170.google.com with SMTP id g19so7729800qts.9

for ; Mon, 27 Mar 2023 01:13:23 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112; t=1679904797;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=kkKNMrMvf/NlmmLUv9JdJbVkiJxDl3jSA9wcHTjs+2Q=;

b=KMt/QwghN8AP99/x7j5kGLFUJbeYm4qww9fwDthhwUJpajrTbGvDftaVheoxZ0Xyqb

7XqkmuB0SHFeTOle7mpt0ealc4tHLi7lS9CQFQHvse4bJdEAcvcGqMVgR6q1SrL9raer

Gq0vPxONP4MsLfy3dxssUe80ztQrc0IFp3T1J5IhF7170yG3+EhfiQ5Wvgw/viBdh0KF

qUiSCdDTCO+xCc0ffJB/zpZ7hTQT41Ub2xmweBYsy0CtiWrXOV2E8E0H2lm/+Aj1Dla8

psTz8id5I5bt/sOH7w0dEpRnRgdpBNlmIFLC8OwCj0zYjLMCGQxtBDzU6W0/nuy3cBAT

EMlg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1679904797;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=kkKNMrMvf/NlmmLUv9JdJbVkiJxDl3jSA9wcHTjs+2Q=;

b=OzCVjWhCB0AbV1kFTddadQWOtCapbjR19KsikYwsSCaHd/hi7Cx6jR7p0apeS2Zqtu

ZT/7anI4o1Qgb2tieWMga1RRbsZK22a+bi4CGTGUdiGF5s5rQD4yJYfyy0gByKRIaguT

A8QyH/LZQt73HSWuk8vGQAquuTRHHhVuT51VvM5zPC7ihH7T6qPN2NxKP8kMqaLCZqDh

PZHiyPzCJBj90+qgSpjX5KVB4rZApXBHKCys5r5PU+fDzaKjN01RV6sGtnwPVg4rCtpI

2p+3TcXh6yFeWu5aUA38PSJgICe5r9y0By7FnYKP/bI93Dinr0sC7emiZP0/lVyarcB3

m0+g==

X-Gm-Message-State: AO0yUKWRfgf2iU/qAj1vN9Vm+AuJ+UkYSc+XqLVIB4kGEpCR9yNBYFFt

PCiR+ZyVPl3kkSDetIipT5Xnr5YLW/yeBPgCXhA=

X-Google-Smtp-Source: AK7set/yOEhBd1yXBnlUAMW5W+qcsY/VfHL68j0SpXQuAzhCqU41KlXEPVcdqXMSxbvp6JMNOXV1a1WBBvWPl1xBED8=

X-Received: by 2002:ac8:5905:0:b0:3e1:5755:7bbf with SMTP id

5-20020ac85905000000b003e157557bbfmr4145192qty.5.1679904797509; Mon, 27 Mar

2023 01:13:17 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a0c:8d84:0:b0:5bc:5071:8a6a with HTTP; Mon, 27 Mar 2023

01:13:17 -0700 (PDT)

From: "dieudonnenzuzi07@yahoo.fr"

Date: Mon, 27 Mar 2023 13:43:17 +0530

Message-ID:

Subject:

To: dcreativ , deniscarole5 ,

denisefob1991 , desjar m ,

dianelefort , dleroux ,

doctor , dominique myre , fmbuyi

Content-Type: text/plain; charset="UTF-8"

X-Spam_score: 5.1

X-Spam_score_int: 51

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: https://bit.ly/3ZjRSMy



Content analysis details: (5.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.170 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

2.5 SORTED_RECIPS Recipient list is sorted by address

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mahen.bhavsar(at)gmail.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 PDS_FROM_2_EMAILS From header has multiple different addresses

0.0 T_TONOM_EQ_TOLOC_SHRT_PSHRTNER Short subject with potential shortener

and To:name eq To:local

0.0 TVD_SPACE_RATIO No description available.

2.0 FROM_2_EMAILS_SHORT Short body and From looks like 2 different emails

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.170 listed in wl.mailspike.net]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?}



https://bit.ly/3ZjRSMy