SEO spam from Microsoft Outlook servers

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 28 Mar 2023 14:36:50 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1phG35-000NM1-02

for dave@doctor.nl2k.ab.ca;

Tue, 28 Mar 2023 14:36:07 -0600

Resent-From: The Doctor

Resent-Date: Tue, 28 Mar 2023 14:36:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-sgaapc01olkn2084.outbound.protection.outlook.com ([40.92.53.84]:52833 helo=APC01-SG2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from )

id 1phCfP-000H5N-0F

for root@nk.ca;

Tue, 28 Mar 2023 10:59:32 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=Ul31w5YvFS+8BOx2otDDCBwcxLGmERAXVNtNavJGwN/Gzibm6Xf6+LOPErHBzOWepprb2YBDq7gHtHlz2a511AsbuInKOZTxxFHSPlmsFPiZdagGrfj/8tVcNfDPToZoWr2kGj4rqKl2Y5+gzTRWEOv0iBmfJZECn/jGBqFgaG7LhXZHhek/msVZoydZRCITnRnhRbueX8Vkd8h7S6QFXpAQR8upCCZoR44Sv9NKRgnkM2reac49nUjU9t5ZIMZBb5l1x11zoPOrlaCGpbTI6ypL0HnESkidDpmSSN4TnHT6RgfaLZcOeQBCvtL2+IW7PX2+D8kq1/6ZtLG8A4/cRw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=tk5s2vyY2SZSGwTwkNhzBSPHxl1Ebe5jKKD0WtUu6g4=;

b=lZxHhdgsucMwD9t8GbxOfebgjYR2iGee4SfZ6SAhjZJK6R+vWI7i+yKOzKdkoka6kQK60zqSnpvuePGBe4LddUbn73JfJKiRRELvGFu9X6A6r0z0Z2kgymxxMUxp7HJJvi5oBvGP7Lyf6PFynZyNPrPX/m1FZxANEQs8U5nWkRa9uJHIotBMaVHqLlX+OxFWSwTzrHURRfMyTRMPHg+xilLaHJZcZAQoG2wok0jZYxjsYBhRJCGFQp04kPN+TLVhM4pSLn6FG3GzpQG8Ec2ATXBsYK5J9ML7KxQUDhL+kB8JgowyNb9QPhrkkCKWKSxQSpPFIYwAR76FhyluALWjKQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=tk5s2vyY2SZSGwTwkNhzBSPHxl1Ebe5jKKD0WtUu6g4=;

b=d7kOxSdw18GclFI1aFjQl/x0q1Qf8RvPwt8Zfn7TbvttuPYUSi95B59JX4E91hEUMAI4VlHswxRzuv12JWNMidimD7L2UQUN2JvLJM6E+I02ziQljrJU77+pgDrKT9eC96xytQyiaJEqoTO+B2o0EoolJqK6rmXFwmEIkN3/rvXjA+BXyEwew0MBTk2Qz7j9wcU4RpaMFP9SvoyE4vawJYSxfZlqkWOYoShlMF5dDboUwYEF1FfmnhaCf+mg0pDEk/ys4wQZ31Js05nB/G2N3Dr1vR64wMwEEhGe7FPa6KJLNHur7yZATfKt2QDds8iiDYk57WXTQfbzZjyivmoAHg==

Received: from TYZPR04MB4288.apcprd04.prod.outlook.com (2603:1096:400:26::6)

by PSAPR04MB4149.apcprd04.prod.outlook.com (2603:1096:301:38::11) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6178.41; Tue, 28 Mar

2023 16:56:03 +0000

Received: from TYZPR04MB4288.apcprd04.prod.outlook.com

([fe80::946b:ed51:102:378f]) by TYZPR04MB4288.apcprd04.prod.outlook.com

([fe80::946b:ed51:102:378f%8]) with mapi id 15.20.6222.033; Tue, 28 Mar 2023

16:56:03 +0000

From: "Anamika singh"

To: "Anamika singh"

Subject: Proposal

Date: Tue, 28 Mar 2023 09:54:37 -0700

Message-ID:



Content-Type: multipart/alternative;

boundary="----=_NextPart_000_003D_01D9615B.83926D30"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdlhkOD/S3xnBtOmTjiim7fPQpIGog==

Content-Language: en-us

X-TMN: [bh1sBRmYZzaUvCXWYulI3YAOf6psRrFX]

X-ClientProxiedBy: BM1P287CA0020.INDP287.PROD.OUTLOOK.COM

(2603:1096:b00:40::23) To TYZPR04MB4288.apcprd04.prod.outlook.com

(2603:1096:400:26::6)

X-Microsoft-Original-Message-ID: <003c01d96196$2ff14530$8fd3cf90$@com>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: TYZPR04MB4288:EE_|PSAPR04MB4149:EE_

X-MS-Office365-Filtering-Correlation-Id: 4f7672e0-1405-4ba4-507a-08db2fad5070

X-MS-Exchange-SLBlob-MailProps:

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

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?us-ascii?Q?62cXn+uyNFrPUo7Jo4O7iCok9bn4pB4haUuZDDonxVyEGQFqKVaWXa/VmiGh?=

=?us-ascii?Q?GRljT8qu/X6OA9d8fdAnhejrNZcld8dEnduUjedsfhSVFn/mHzIO4j4LHjKC?=

=?us-ascii?Q?pGXrwTh1yOoq/Hq3lQB7V2InZxKVpXyTd34fit3ideW/yUGxmth8ZdMyo1W/?=

=?us-ascii?Q?xJtMySoIzy0kxwrjgOeFKJ2p31MVdiG12hlknXhWKp2n7OEAfLQ0QOxvSr+1?=

=?us-ascii?Q?zq4Th52g13zE5F70Kb9dGmSXeAopmd8vG7901Yrqs4fBtsY1j7rLNuVzwg+e?=

=?us-ascii?Q?o3ch3W58I5MRU7Sr8HD2vtidecixrE9ubZEaIwDJHyxGcE5zhvJ+Ku/5PgtR?=

=?us-ascii?Q?ZekSM8zhtaelvyvgQvfSGjyYHRnJsXr9e84ymY63bQok6mwCd4nkmRUnJNOo?=

=?us-ascii?Q?oP9tvP8CBRZ6H6JhaKAuJxeCkvA1A7XLZpzUn9B3vHcytZjKuKFrj28Tnk2W?=

=?us-ascii?Q?d3/x36jkzOLLBblCwABYg9oWDkI2XdLWiHfND3pAEf+UaVo0F6Bg4N8ym5XV?=

=?us-ascii?Q?jSPbCF4msPYrihWnjBabk+KAA+/av0cGO48CnOc/BGZ0uHvqhWs4ANxM2hYk?=

=?us-ascii?Q?l8j7QcvIeSX0TQGABagL26h7xLPiwJPzHxOOV/TKmohBHOdDvDSdeFwTK+gb?=

=?us-ascii?Q?L/s1Z4lJljt4OeqGOSVJoKRbtVp48ANapm55XjdGNsZcNOdaeW5oOQTflG9b?=

=?us-ascii?Q?FcvsrBxFFxvGThEu8hUoGHS5O3Doja0dOsjUG4Oi6Zg/aqBa/FbVCwBJFqGE?=

=?us-ascii?Q?jPvwhOu0ejn/BlQS+4mpzW4Yhi8Kus8DCM4Dny7jL5+TPJXyN+a+qCrywq8J?=

=?us-ascii?Q?f3xOPpa7FlYIJcHPz6ImkrSC+3YyDDw962l4Cyj0zsOfns453FFRK97Goq0x?=

=?us-ascii?Q?5YWlzSWcLcSlPesLCUE3zBszdWRRz6VEZeIeNwcAqEbA8oq7aEd+YvBlLuWq?=

=?us-ascii?Q?FHqt1oQBiHl7cnF3rJXn5Kr30h8jtuZPkWH9pchsWGbQ6XmWOCztx1kmwenz?=

=?us-ascii?Q?hktecdwqbxGCynGeN+IIG6tyKe/NmaqCxtlM8CC6K12dsLhu4S0zs8HIXyXH?=

=?us-ascii?Q?3WZphWvKtmwI7S8VID6himmwNKiFdStK0YLx/3YbmjHu5AFe89a5kU6tBANF?=

=?us-ascii?Q?e78621vtZKI1Nc3hNFqieaCCxrYpYFQAtsOD6oQtvP24OHzowTAtql7+Johd?=

=?us-ascii?Q?A/4kZHsTDusmumN7LnGXtatc/PZgDD31TfMaowDhleLJklwQwVr8RgAc1NMW?=

=?us-ascii?Q?4NqPnCDHdnvw7Y1YEc2J?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: 4f7672e0-1405-4ba4-507a-08db2fad5070

X-MS-Exchange-CrossTenant-AuthSource: TYZPR04MB4288.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Mar 2023 16:56:03.3993

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PSAPR04MB4149



------=_NextPart_000_003D_01D9615B.83926D30

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,

I found your detail on Google.com and I have looked at your website and

realize your website is great design but your website ranking not good all

search engine Google, AOL, Yahoo, and Bing.

Do you want more targeted visitors on your website?

We can place your website on Google's 1st page. Yahoo, etc.).

May I send you quote? If interested.

Regards,

Anamika singh



------=_NextPart_000_003D_01D9615B.83926D30

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable






>


00">

Proposal










=3D"#26282A" face=3D"Cambria">Hi, <=

/span>






=3D"#201F1E" face=3D"Cambria">I found your detail on
g=3D"en-us">
ace=3D"Cambria"> =

G
b>
olor=3D"#FF0000" face=3D"Cambria">o<=

b>
a">o
s">g
g=3D"en-us">
ace=3D"Cambria">l
lang=3D"en-us">e
pan>
=3D"#201F1E" face=3D"Cambria">.
n>com and I h=

ave looked at your website and realize your website is great design but you=

r website ranking not good all search engine
us">
ambria"> 
ng=3D"en-us">G
>
#FF0000" face=3D"Cambria">o
span>o
nt>
ont color=3D"#00B0F0" face=3D"Cambria">g
us">
ambria">l
"en-us">e
n lang=3D"en-us">
=3D"Cambria">,
=3D"en-us"> AOL=


F1E" face=3D"Cambria">,
an lang=3D"en-us"> =


color=3D"#0070C0" face=3D"Cambria">Yahoo,
n-us">=

 and
us"> Bing
>
ace=3D"Cambria">. 
=3D"en-us">






=3D"#201F1E" face=3D"Cambria">Do you want more targeted visitors on your we=

bsite? =






=3D"#201F1E" face=3D"Cambria">We can place your website on
an lang=3D"en-us">
F1E" face=3D"Cambria"> <=

/span>G
ont><=

font color=3D"#FF0000" face=3D"Cambria">o
-us">
Cambria">o
=3D"en-us">g<=

span lang=3D"en-us">
0B050" face=3D"Cambria">l
an>e
>
"#201F1E" face=3D"Cambria">'s 1st page. Yahoo,  etc.). 
pan>






=3D"#201F1E" face=3D"Cambria">May I send you quote? If interested. 
ont>






=3D"#201F1E" face=3D"Cambria">Regards, 
us">






an>Anamika=

singh
span>







=



------=_NextPart_000_003D_01D9615B.83926D30--

Nigerian Spam from outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 28 Mar 2023 14:35:50 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1phG2J-000NDC-2q

for dave@doctor.nl2k.ab.ca;

Tue, 28 Mar 2023 14:35:19 -0600

Resent-From: The Doctor

Resent-Date: Tue, 28 Mar 2023 14:35:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn8nam11rlhn2140.outbound.protection.outlook.com ([40.95.36.140]:6613 helo=NAM11-BN8-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from )

id 1phBd6-0004rc-1I

for doctor@nl2k.ab.ca;

Tue, 28 Mar 2023 09:53:08 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=QG2pTDeo4L+Q/6GMTuXJfooKj0Gb+h5dsYGtms0JJHOASmamzHUJU45ggusZRBonOZKGcxxvtjhph33rEG1CCI1WBtUzPV8XQkpG06si54rIBCILa4QVS/b0gupr+usLbbXNTdOhSPOGqEX/HLpBGvueIYzQQEwpBqgCMHi70MXKVJHJp5jq5zB7dFy4vIwiOBjIQitUnOipUp5go29bH5qXTSMD0YVGP5ewG8jzYIq19Qhn94cDNEJIAGUWzWhY56GlcnYXaMtWvypGz0/nuT3P7psX7opvtwm/TuU9Vyy2DTH4hCA1V9amqlw4bYe1yNXOFmXUlCef2IFpmXYduA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=lzpBd0Yk08e2zNv9q53Dux4YO7UZMWHKXeLu63EVRu0=;

b=UB2MidakJthlydEbZTxjG/DVKlvX8MBT90zhzAEzAHSNnfE9pIx8vKi9pF4aIdJ/cjoHKO0yaL84qH27NZuTX6zxO/rymVtXTDNi4A1C6Drr9G8siS7Eva51P1T3vYm5Wk8AhxdpRHpJfk/OscEKcql4hiKnl0wXUBEUczuQz948qqjiDYkXmVEOj2+quGlL76TEM+3khUhsM6Kvwy62HmQIiBDCurf3lKu+1a68h9tK0IDTJwFnII0i8taX/bmBPeRTXbjXX5XWwzOgvNvbQH7scly/RG1Ixh/uee5pY6+XXOQv5g8p24V9tF3464ikAgNjbb/wRM6chV5PtP6ACQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is

8.42.207.80) smtp.rcpttodomain=yam.com.tw smtp.mailfrom=kimo.com.tw;

dmarc=fail (p=reject sp=reject pct=100) action=oreject

header.from=kimo.com.tw; dkim=none (message not signed); arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=wwjwm.onMicrosoft.com;

s=selector2-wwjwm-onMicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=lzpBd0Yk08e2zNv9q53Dux4YO7UZMWHKXeLu63EVRu0=;

b=j9b947ul7tGIb/DvMptK9NeIBmsOSJDqJgAiK5764bu6yQfnk2+IVjPOOrVp9hzPWQz8hIsZVmo71ljA2E6L8z6BmWcOuJs8kDAW7k1PyMqMnxbFlpMdST9I1+cQUBb8GrH6Ez+9SPa9wXZyrTF7am5gtkH8wlfU2CvcoaU8AeU=

Received: from BN0PR04CA0130.namprd04.prod.outlook.com (2603:10b6:408:ed::15)

by BY3PR01MB6692.prod.exchangelabs.com (2603:10b6:a03:36a::10) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.6254.18; Tue, 28 Mar 2023 15:50:53 +0000

Received: from BN8NAM12FT100.eop-nam12.prod.protection.outlook.com

(2603:10b6:408:ed:cafe::be) by BN0PR04CA0130.outlook.office365.com

(2603:10b6:408:ed::15) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6178.43 via Frontend

Transport; Tue, 28 Mar 2023 15:50:52 +0000

X-MS-Exchange-Authentication-Results: spf=none (sender IP is 8.42.207.80)

smtp.mailfrom=kimo.com.tw; dkim=none (message not signed)

header.d=none;dmarc=fail action=oreject header.from=kimo.com.tw;

Received-SPF: None (protection.outlook.com: kimo.com.tw does not designate

permitted sender hosts)

Received: from mail1.jas.com (8.42.207.80) by

BN8NAM12FT100.mail.protection.outlook.com (10.13.183.34) with Microsoft SMTP

Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.6254.9 via Frontend Transport; Tue, 28 Mar 2023 15:50:52 +0000

Received: from USBCDPSMBX01.jas1.ds.Jas.com (172.29.10.51) by

USBCDPSMBX02.jas1.ds.Jas.com (172.29.10.52) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.2.1118.26; Tue, 28 Mar 2023 11:50:21 -0400

Received: from User (147.78.103.204) by USBCDPSMBX01.jas1.ds.Jas.com

(172.29.10.51) with Microsoft SMTP Server id 15.2.1118.26 via Frontend

Transport; Tue, 28 Mar 2023 11:50:14 -0400

Reply-To:

From: "Mr. Williams Townsend"

Subject: I am Williams Townsend

Date: Tue, 28 Mar 2023 08:50:21 -0700

MIME-Version: 1.0

Content-Type: text/plain; charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID: <4b96b8b7-3b10-4e4b-a3f1-eb67bdc7f6b7@USBCDPSMBX01.jas1.ds.Jas.com>

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BN8NAM12FT100:EE_|BY3PR01MB6692:EE_

X-MS-Office365-Filtering-Correlation-Id: 823948b9-c871-4a7b-2880-08db2fa435b4

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 1

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?windows-1251?Q?BXeAO5wnRJWECrZ3L2+q5qajV/ZgyAcTXOYBCQjLWUR/pMcBWar3BC6l?=

=?windows-1251?Q?4Lgy5d7J52hTp2PPg38sCa5hJ+1lxp9ovK9XhlwXGWW3Nxz+u7jqwP+D?=

=?windows-1251?Q?wGzWbiW8YwLFgXC4kB0/vO9ihxsFYZyDm19cZ51+e2Kq9kFmTD0JxI0V?=

=?windows-1251?Q?mMzphWEIPvLT4oUssM22p2keSMACypFX+ZKWg5NzYD9BlX9NGtQzeaL8?=

=?windows-1251?Q?WAH3US4HcZJWPl9fWb+WfYdedVWXT2dNcMHD1o7ot8PpOP3z7mwt72z8?=

=?windows-1251?Q?Pdjg7T6GhH4lUaO05+FPYojoZD7uFBxC+71SyunQI4jd7ejVcn0s6ZYa?=

=?windows-1251?Q?g5HUI2exM0L/gUyDuoSRzQqwVgUCyeUlNN0Gx1N3MdHLGoZo2//ZwHhs?=

=?windows-1251?Q?1uWE92BlL2fvxc3qZiDpvAtAuD2vkWk+u+kZNMKfpjU0T9FrmaLgKkT/?=

=?windows-1251?Q?iQQmu5L7x9rjJJZb6Hntfz1RguVid/TSuyaPKaS0swNM3ylwgZA3Wi+a?=

=?windows-1251?Q?0WbMyRsQWvc6WL+fcE6VqEth4zlXQIKKVdG1zumT9GvPWrUuRWxLdgov?=

=?windows-1251?Q?yqqjFIrvkbXREfwR6OW754tdX5s1fOwRP7+9hohB59gwUj3NnvXZWPtA?=

=?windows-1251?Q?eJQiFxlP2Gb2xcA18DMrwO4x6RBqWL5pvDwl7c0o/C1cAHvuedo5PeDW?=

=?windows-1251?Q?Qtp62zrbzcsQ5WcmEe1Zr+LTDp83vEfjhKH+DonxZtmoMccnIrWjgO3v?=

=?windows-1251?Q?eAgeZAUc5QYJDA/M+CCiRhlqtb9BIVsp5SJ1tGie4p8PmNMbbKAOiEym?=

=?windows-1251?Q?XkM+n/8th8KED2xBs7nnWZhbBNlspx3sk7i+3nKGZRdFkZBny3X1Y8gi?=

=?windows-1251?Q?dMKpcoWZ0ozmGxClKLJNfj0j/Keq9YMApy8UBjw+pcrZTZAp8C/Ggm9L?=

=?windows-1251?Q?iMJkWH9dwrsTF8vyDqckd/5EsXgeSuScAgonCO6zjAvVLB6/XsvGKYKR?=

=?windows-1251?Q?FDnQ7h5l7Pb0278PViOyLufkeAkmFPYixgirbmfBFGqeP68ycT1lgorM?=

=?windows-1251?Q?3yE6NGU3IGJGGZEp+ZOeRSfdIQZ3L/7kWb/Z6V8iRRjAl8N2PwlyDSTt?=

=?windows-1251?Q?wHzXCIBKlvMV6uF9ZZmBhJyBQ8iHlM3kpgI/w6YoKVy414W5i4nm37Hw?=

=?windows-1251?Q?m7BYQOZcV5RC9aMNNs001Hxf9mUmPugK?=

X-Forefront-Antispam-Report:

CIP:8.42.207.80;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail1.jas.com;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230028)(4636009)(136003)(376002)(39860400002)(346002)(396003)(109986019)(451199021)(46966006)(40470700004)(8936002)(7416002)(7366002)(7406005)(356005)(70586007)(81166007)(70206006)(8676002)(5660300002)(82740400003)(41300700001)(86362001)(31696002)(82310400005)(40480700001)(2906002)(40460700003)(498600001)(2860700004)(26005)(3480700007)(9686003)(6666004)(35950700001)(336012)(31686004)(47076005)(956004)(66899021)(83380400001)(316002)(2700400008);DIR:OUT;SFP:1023;

X-OriginatorOrg: WWJWM.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Mar 2023 15:50:52.4573

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 823948b9-c871-4a7b-2880-08db2fa435b4

X-MS-Exchange-CrossTenant-Id: fa3414ca-197f-48b7-8ff3-892f8bdd8e93

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=fa3414ca-197f-48b7-8ff3-892f8bdd8e93;Ip=[8.42.207.80];Helo=[mail1.jas.com]

X-MS-Exchange-CrossTenant-AuthSource:

BN8NAM12FT100.eop-nam12.prod.protection.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY3PR01MB6692

X-Spam_score: 22.8

X-Spam_score_int: 228

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Senior Officer at Los Angeles International Airport (CA) California,

USA Hello Good Friend First and foremost, I am sorry for reaching out to

you with this medium.



Content analysis details: (22.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)

[147.78.103.204 listed in ix.dnsbl.manitu.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.95.36.140 listed in list.dnswl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[147.78.103.204 listed in zen.spamhaus.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[147.78.103.204 listed in zen.spamhaus.org]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=NAM11-BN8-obe.outbound.protection.outlook.com;ip=40.95.36.140;r=doctor.nl2k.ab.ca]

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.0 NSL_RCVD_FROM_USER Received from User

0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[williamstoo777(at)gmail.com]

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 CTE_8BIT_MISMATCH Header says 7bits but body disagrees

0.0 T_HK_NAME_MR_MRS No description available.

0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait

0.0 HK_NAME_MR_MRS No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 T_MONEY_PERCENT X% of a lot of money for you

1.3 PDS_HELO_SPF_FAIL High profile HELO that fails SPF

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} I am Williams Townsend



Senior Officer at Los Angeles International Airport

(CA) California, USA



Hello Good Friend



First and foremost, I am sorry for reaching out to you with this medium.



However, I am Willam Townsend by name. A senior officer at Los Angeles

International Airport (CA) California. USA



I am contacting you about an abandoned diplomatic consignment box the

x-ray scan report revealed an undisclosed sum of money in a metal

trunk box approximately 12.5 million dollars. and the box indicates

your contact email address the consignment was abandoned because the

Contents of the consignment were not properly declared by the

consignee as “MONEY” rather it was declared as a personal effect to

avoid interrogation. meanwhile, The Diplomat was in transit to your

location 3 weeks before the coronavirus pandemic crisis that shook the

world started. The Diplomat fails to pay for the United States

Non-Inspection and airport clearance fee to the US Customs border and

protection he abandoned the consignment and left without notifying the

authority anything of his arrival for declaration of clearance. To

confirm you as the authentic beneficiary, do send me your full name,

your home address, your mobile



Furthermore, I have taken it upon myself to contact you personally

about this abandoned box so that we can transact this as a deal and

share the total money 70% for you and 30% for me. My primary purpose

for contacting you The U.S. Customs Border and Protection is on

clearance for the year 2022 for some abandoned beneficiaries'

consignments to be listed among the list of consignment boxes that

will be confiscated and get transferred to the US Treasury storage

facility for the year 2023.



However, I want both of us to transact this as a deal all I want is

your trust as the arrangement for the box to be delivered to you which

can be concluded within 1-2 working days after confirmation is made

and upon your acceptance and willingness to co-operate.



I will appreciate it if we can keep this deal confidential. Please get

back to me via this email for further directives: You can not call me

on my telephone number, for now, to avoid the authorities raising

their eyebrows at me. Please send your response to my private email.

Thank you.



Mr. Williams Townsend

Christian charitable work spam from Microsoft

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 28 Mar 2023 08:02:48 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1ph9tg-000IZl-1I

for dave@doctor.nl2k.ab.ca;

Tue, 28 Mar 2023 08:02:00 -0600

Resent-From: The Doctor

Resent-Date: Tue, 28 Mar 2023 08:02:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dm6nam04rlhn2175.outbound.protection.outlook.com ([40.95.46.175]:10956 helo=NAM04-DM6-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from )

id 1ph3pY-000KlK-2Q

for doctor@nl2k.ab.ca;

Tue, 28 Mar 2023 01:33:25 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=H61F6RfkjmCE4erdlDHTvuFsWlk2ziYgMU5JSdiOkosPMUzv9ZfKpQlyQt3P0MH7vq7bJ7MTg0ql1eIiLXFOvJ8GnoqVS/PXMeZBt62lZHI4TnEoXUTQ9AhAV3awyj6NmyAvNz3y+ceFkaBlMeqgdq3Af/7aMFR5hD6km6hw04s3TIbAsqQ8BSlZ3VoNO1cd7qDd0rnFhP3EKLK7ImdqY9zCG3xjmGq+lNvw6yiYMZlodIue0doby2Wo6kRf8OZNvv0sJM+EYTT3fZzTDMbolR75cVhMjSAir2/sRFJqd9sWx9A7erlfmvaEAU3oPE1BH5Z8gkQffTox0TRoULMGbw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=f4G6aAVpszwHzFpgYTV9KsgCGsA0Vk6QFaE3bzLst2w=;

b=n2q8oi7XgycLAqiODDo7k78sKIKZ8XHWCyttc8l4vr9E7N+tCTcaytSEtsgTJ9Ux6rFX+WSMBRrYiG5PIKDmj9ZcZLOx/Y11FFAK1SuENBu8ZETX+M1IEBKtpjHW79Czsj+BTTE33mQrwMCOLxLOQ4tX4zHA299H5D9RRS8Px27AWEUZFFV9pLEouJ9y317lwmxtTP9ZzCsKUxsbI7u71zxoF/F62GFIdVAGQ2okmCCQZrDsHo10/dLiYqWkwuG3p1VitjAHrQLLfa41xK0gTyHdXmXWCsg5QCuYC432zgUnGU6RAuCLWssvZkpTyMg04dYYGDw2diXjA2Gu9jGK7Q==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is

8.42.207.81) smtp.rcpttodomain=hargray.com smtp.mailfrom=mail.sirius.tel;

dmarc=fail (p=none sp=none pct=100) action=none header.from=mail.sirius.tel;

dkim=none (message not signed); arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=wwjwm.onMicrosoft.com;

s=selector2-wwjwm-onMicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=f4G6aAVpszwHzFpgYTV9KsgCGsA0Vk6QFaE3bzLst2w=;

b=TTn61s64ITJzbd82toyN0dwy+Ey6c4JO30cTaV7jTbA5KhVK4NqtZiWS0dlertVV67B5pzaEDxyHubNUdWm/5wVeAx/3P3sJyYiI+qrHRSCZde2kUcTS+U9rW3syq4hQe5eT2pTd3rGzB/gC7qczuVkWlPuWG7fjoED+mxYd2Uw=

Received: from BN9PR03CA0581.namprd03.prod.outlook.com (2603:10b6:408:10d::16)

by MN2PR01MB5581.prod.exchangelabs.com (2603:10b6:208:11d::27) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.6254.16; Tue, 28 Mar 2023 07:31:13 +0000

Received: from BN8NAM12FT057.eop-nam12.prod.protection.outlook.com

(2603:10b6:408:10d:cafe::2d) by BN9PR03CA0581.outlook.office365.com

(2603:10b6:408:10d::16) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6178.43 via Frontend

Transport; Tue, 28 Mar 2023 07:31:13 +0000

X-MS-Exchange-Authentication-Results: spf=none (sender IP is 8.42.207.81)

smtp.mailfrom=mail.sirius.tel; dkim=none (message not signed)

header.d=none;dmarc=fail action=none header.from=mail.sirius.tel;

Received-SPF: None (protection.outlook.com: mail.sirius.tel does not designate

permitted sender hosts)

Received: from mail1.jas.com (8.42.207.81) by

BN8NAM12FT057.mail.protection.outlook.com (10.13.182.192) with Microsoft SMTP

Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.6254.9 via Frontend Transport; Tue, 28 Mar 2023 07:31:13 +0000

Received: from USBCDPSMBX02.jas1.ds.Jas.com (172.29.10.52) by

USBCDPSMBX01.jas1.ds.Jas.com (172.29.10.51) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.2.1118.26; Tue, 28 Mar 2023 03:30:55 -0400

Received: from User (93.157.59.3) by USBCDPSMBX02.jas1.ds.Jas.com

(172.29.10.52) with Microsoft SMTP Server id 15.2.1118.26 via Frontend

Transport; Tue, 28 Mar 2023 03:30:43 -0400

Reply-To: ,

From: Maureen SHORELIN

Subject: GOD'S WORK

Date: Tue, 28 Mar 2023 00:30:55 -0700

MIME-Version: 1.0

Content-Type: text/plain; charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID:

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BN8NAM12FT057:EE_|MN2PR01MB5581:EE_

X-MS-Office365-Filtering-Correlation-Id: 1f16951d-a74c-40ed-2b77-08db2f5e68ba

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 1

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?windows-1251?Q?VcREznCpAx5RS2BkzqT+Q+M+YQwjEHoZSZqifgD/kmvMHSYASAG1p18r?=

=?windows-1251?Q?PCOVz84UCkGpeIhy6A4qdHgIvTDVx6l7TiDSQVEjszQ8soBwRD1BOMxj?=

=?windows-1251?Q?7Qpr0I5v1bJMe3VAsiATbvIyS2fTfFh+lC2NdcUT3VJHFf67Ip51rizU?=

=?windows-1251?Q?ZYrQXwVolYLB2u1rvWA+XyFUPTvr8NVpEwvH6PqG2fSg2iDqRNA9ia+p?=

=?windows-1251?Q?hNWhjr3GOzfkaZ76yCB5O9Qf8/DQtXxx/t7p3LD9swKDNY5pZAhGNwGh?=

=?windows-1251?Q?54GJiUg14PAtougBIaITEY+C+ad1NQL0w3jbn8lE5DH8KxPWoItyx1vo?=

=?windows-1251?Q?kCdFgpxpZjU1cOQdBY8H2/YVKQub8MEKYlhhq3e7BdZx/ykANaYG7lr3?=

=?windows-1251?Q?ICRWsO2Li4SfyVkP4ef1Oww68DU2VzE9unPByCgzQZuIuYJtuA16rIoh?=

=?windows-1251?Q?+oblbdw1MJIJOcHIQu0Ge0TSY2vhCgtSvaTDtXbTKhlN07VP5UKBGDjP?=

=?windows-1251?Q?WSJW8IOHHbPi1Gl7rwqMbWWYvErZBGThIlreZEDGE9w3hWtf1+zpTV6v?=

=?windows-1251?Q?IurGeG//l/oRCCAbpdm2sJ64GhO8U9RaggruiR2enU/0KUlWw06GHESS?=

=?windows-1251?Q?ox50rotTZYv9MIH6C+SdrTFPJ5JfghsxltekVN0rrHB+s7sNYLQKlIjP?=

=?windows-1251?Q?9KXss4EV6qBJ/M7eI480C4N1Q7Lg6YaJOcpSnqs2saDQ6dIpzIPUGS2D?=

=?windows-1251?Q?jU9IHovyI6n7Az3k+gYbKF/aZ/Q2FJXmbVhift96G90PKoyF5dxl4iJO?=

=?windows-1251?Q?/yOTVCewdploRDVcOJzYehUqMIifyzmWWYNFotH4BwGjv298JP9vKeHz?=

=?windows-1251?Q?DdBWmLqhz8LuBXFQ1P8MuEKnUd/DNnxTvOvID3TAvAr/49tCBZ0KkuDz?=

=?windows-1251?Q?OWZBeKj1XWIJhT/4OvdB9VcjVP7Fc9aA8v8zb9LxVjYjowr9stRD6Jan?=

=?windows-1251?Q?L0T5tiI6Cl6ECb7eMCOZUBb7lDTkLXfSP4SLBe+iupj4AvXkwXMBSmPG?=

=?windows-1251?Q?YNujZHlmEeT2KJK3hq9sq65xIUY+MFxI7xE6VgxTJtFrJ0ogCqruUrZd?=

=?windows-1251?Q?D/CAmndeXE7jnDMSafrnERuvJ+LW4Dg7NUVu7IOhwl/pfB42+3b/ygpG?=

=?windows-1251?Q?u82QJarS3N+GhU/Qw74h8Os4q5T5BSMi?=

X-Forefront-Antispam-Report:

CIP:8.42.207.81;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail1.jas.com;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230028)(4636009)(376002)(346002)(39860400002)(136003)(396003)(451199021)(109986019)(40470700004)(66899021)(32650700002)(40480700001)(70586007)(8676002)(70206006)(40460700003)(316002)(2860700004)(498600001)(3480700007)(2906002)(9686003)(26005)(35950700001)(7366002)(7416002)(7406005)(83380400001)(956004)(86362001)(336012)(31686004)(31696002)(82310400005)(81166007)(6666004)(5660300002)(41300700001)(356005)(82740400003)(8936002)(2700400008);DIR:OUT;SFP:1023;

X-OriginatorOrg: WWJWM.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Mar 2023 07:31:13.2894

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 1f16951d-a74c-40ed-2b77-08db2f5e68ba

X-MS-Exchange-CrossTenant-Id: fa3414ca-197f-48b7-8ff3-892f8bdd8e93

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=fa3414ca-197f-48b7-8ff3-892f8bdd8e93;Ip=[8.42.207.81];Helo=[mail1.jas.com]

X-MS-Exchange-CrossTenant-AuthSource:

BN8NAM12FT057.eop-nam12.prod.protection.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR01MB5581

X-Spam_score: 15.7

X-Spam_score_int: 157

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Chosen One, The time has come for Christians to worship

God in spirit and in truth according to the book of John chapter 4:vs23-24.But

the hour cometh and now is when the true worshipers shall worship the Father

[...]



Content analysis details: (15.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[93.157.59.3 listed in zen.spamhaus.org]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=NAM04-DM6-obe.outbound.protection.outlook.com;ip=40.95.46.175;r=doctor.nl2k.ab.ca]

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.0 NSL_RCVD_FROM_USER Received from User

0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 CTE_8BIT_MISMATCH Header says 7bits but body disagrees

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait

1.3 PDS_HELO_SPF_FAIL High profile HELO that fails SPF

0.0 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

3.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} GOD'S WORK





Dear Chosen One,



The time has come for Christians to worship God in spirit and in truth

according to the book of John chapter 4:vs23-24.But the hour cometh

and now is when the true worshipers shall worship the Father in spirit

and in truth: for the Father seeketh such to worship him . God is a

spirit,and they that worship him must worship him in spirit and in

truth. Based on this scripture, it became obvious that I should do the

right thing if I must enter into the kingdom of God.I am writing this

mail to you with serious tears in my eyes and great sorrow in my heart,

I decided to contact you due to the urgency of my situation.





Would you devote your time and be totally committed and devoted to run

multi-million Dollars humanitarian charity project sponsored totally

by me; with an incentive/compensation accrual to you for your time and

effort and at no cost to you.



If Lead by God, get back to me to enable us to discuss in a more

clarifying manner to the best of your understanding. I must say that

I'm very uncomfortable sending this message to you without knowing

truly if you would misconstrue the importance and decide to go public.

In this regard, I will not hold back to say that the essence of this

message is strictly for Charity. May God bless you as you make up your

mind to work for God.





hoping to hear from you soon. Send Text to +44-7418368449





Not all of us can do great things. But we can do small things with great love.” – Mother Teresa



Thanks and Remain blessed in the Lord.



l remain your sister in Christ.