Web Design SEO spam from Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 18 Apr 2023 07:53:42 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1poll8-000HlY-Qw

for dave@doctor.nl2k.ab.ca;

Tue, 18 Apr 2023 07:52:38 -0600

Resent-From: The Doctor

Resent-Date: Tue, 18 Apr 2023 07:52:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-sgaapc01olkn2070.outbound.protection.outlook.com ([40.92.53.70]:58166 helo=APC01-SG2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1pokeL-0006pM-V9

for sales@nk.ca;

Tue, 18 Apr 2023 06:41:37 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=IVGAegi9LO1F7FBKDZWVIJd86kflpTkbeWjk90PEfzKfE1LLNBpmkMTym/alWp0O8Peuf5Igl9lblPars8eipJkvpuFVDgnV7y5parb7iSeTGvdCJYRDES7iH6oRpw9HqwzTbahv+4o+zJ6Derq0VWkvpW8ilWPyzey98YbTYDVjDmhPC5U15Dq/svAsS8GPeAx1eSOJ8XvWzRrbBfL16KeNn2aSMcFQhAqfe51XpeVCKxGqEpJpDM9JXP2hjimDRpD7+PGOpdfrGhIasoUwhE9QD4GesrK/Sk1AfPJpVdewuVYvkgOqBgvz8ndyYsS0zQbMNEU/NsOvY3tQeTLEOw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=xHuosFY5J3lP0ZdMs95ARTpEKzxzzh5JuPoeiE/6E6k=;

b=RDYwh5bKH5l6RE4jBoNbChBS2qMLXGqT+JX3O8uICRyNIYRL9S0YsNTMWqg5llouKcCMX4vTUhpmX+JzEzCQOX0fFEPoMVUosnds4Mag9JWQZSPXadmWPnSSubMOyHBJhDD+FDNDboBqQRPRlOUG1L50YXuTiEMER62rwwgeFtsU4u5By5ALPuTxFdLSSytdB2EfZB9KbqpipukT4kOJYAcP3IfoZNCdeDdrYEPHVwD+KlRM8ssBkbsJdgbBFYrKDK1eRLBPyXBOafJt8EM37sH6I1lDnjVqQp1xFH9f4gIlRRLGN3buIdZl18vVXHMukGFpAkT48lbm9gl+3Yv3JQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=xHuosFY5J3lP0ZdMs95ARTpEKzxzzh5JuPoeiE/6E6k=;

b=W9+I3X/oq6RZ31hjjVk97vogrDMU6jX4AT41MsGj1goP1lwgxtWKN32Nno20S1G8S6eO5rAlfXDE3vIuRoc255jAR4lnhJ+vhG92ebobLDdNFSStQoSbbXpfoohfvOQ4qKRmwo/LS5QVAmuRA1u7pfFF8vWbZcApvbHDkcw6S8uCFSY4q4xSnpMxXnFdWVNAxNjJhkzNhWt92xPGgCqMaomLCD+CEnqI8ZVtZjaoWjBgg0q77H/Hxaf/SYNLME/M5+afu7g5qhBREYje4bqLUIMn8Ybzh7mkV1qc4l819h6FYHhFl6lqt5hqHvNOHAwrxrFEXbpzBZxA/WG8qpqsig==

Received: from TY2PR03MB3535.apcprd03.prod.outlook.com (2603:1096:404:36::20)

by SG2PR03MB6431.apcprd03.prod.outlook.com (2603:1096:4:1c2::9) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6298.45; Tue, 18 Apr

2023 12:39:15 +0000

Received: from TY2PR03MB3535.apcprd03.prod.outlook.com

([fe80::6fcf:164c:fc3f:b61f]) by TY2PR03MB3535.apcprd03.prod.outlook.com

([fe80::6fcf:164c:fc3f:b61f%4]) with mapi id 15.20.6298.045; Tue, 18 Apr 2023

12:39:15 +0000

From: Adamaris Elton

Subject: Repair, or Redesign on your site and SEO

Thread-Topic: Repair, or Redesign on your site and SEO

Thread-Index: AQHZcfKUUuc8+EJjmEqJGZT9e9ncfQ==

Date: Tue, 18 Apr 2023 12:39:15 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [v5HdxAQPBbHLMzURYlQFrtvugdl8l/ba]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TY2PR03MB3535:EE_|SG2PR03MB6431:EE_

x-ms-office365-filtering-correlation-id: 6d346abc-b018-43e6-316c-08db4009eb64

x-microsoft-antispam: BCL:0;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?8/ZkFUfwE+Z3Bu2efmq/0rC+FtlgoQ9xTyA507Fy3v7k56jR+oQNpa3DqN?=

=?iso-8859-1?Q?DEQA9LqAlz8mQ57QrzeH3R5dV5Lvp7jgAo/yrzNUKEXM8Uz7hGD5sZxplN?=

=?iso-8859-1?Q?Hxk+mWlqChG9S5Kh/ihm20RFKuxogT4j9ySpU9yZo/wYjDxqFRjeu5Ajx3?=

=?iso-8859-1?Q?0izGzSwhRVF7b2xhrgTfVFg0I2fQ3jxWM5x/Ipdgtjzhmm73ZsXhJbS6MN?=

=?iso-8859-1?Q?sUD8gDwqUEdURPABrRV0DP4pKrXbtPIQe0KaYEL1xxmt5YVk3gCgDfVrYW?=

=?iso-8859-1?Q?NvHFsB9myJegthOKDsBJ40SIKc4A3F8bXHAiHhe9gE2kAGMT+89Pr16EPW?=

=?iso-8859-1?Q?3JhtQfLRgG59mKjMxX2y7MPtyIZjkqneOOagwbzlEKtOOQTFKx1wh0/MPV?=

=?iso-8859-1?Q?XzZyztDQxMjo6sGqovkMEJQsXZtyvYN8Olc2sRT2pC8y6wKSXF1soTUxZ2?=

=?iso-8859-1?Q?pFiqOUXHhs1mKnCro7Dms3lctzZxG82hLCH85lUsPwPfG6LxlSKcgGloLO?=

=?iso-8859-1?Q?Nlg4kWe7EgH7CPkGjX0/Oovq2MsnQVuM9AyNSEueJ/cZglOfiUahdP1ZsI?=

=?iso-8859-1?Q?Um1si/8jk0GgfXJ6f0omZGPb0FIXO3LNhFa5ispPDyC47GHhlW7t8FP8La?=

=?iso-8859-1?Q?i8akEnAhaAeaQUE5WHO+k2XzkdYlz6el7N7xLlTyHgtvpVLKssWnJAqf/c?=

=?iso-8859-1?Q?WhK3OnZERDPZkRiQ41csdost13mAIratSBYcirsP2N1vz42WjsOy0KfSiI?=

=?iso-8859-1?Q?3MFHWP9jmBBeW/vb8X2FEcK3TH93JhE427E92ePt/vQOeAWn+QSib40WPX?=

=?iso-8859-1?Q?hUbgZ0QT4ay0i8/ECLaC9424g3NDPd1r9oRIXES35KnpozoUC09zWm+0XL?=

=?iso-8859-1?Q?ccvEvjNoVJ1YieKADqc+jsspjln35UJ4nMUNFU955TqE/Z798LVrML78C9?=

=?iso-8859-1?Q?VJ23R9c/htDmEb1ZBfJkN124OdskvXuBcyoNOcNQlMnzxv5zWtkpMNMvgk?=

=?iso-8859-1?Q?Z+JUkwGE4aehV8BGpmZAoAOX+184WjQwvFJA1WwpKDkcoWa+IpNaDkNEaV?=

=?iso-8859-1?Q?8IEXwaAKyiYf3YF71ZJ995xSqRAlF7jnASMlf/YDObTVslE9oPip2VLcMo?=

=?iso-8859-1?Q?F3zcB3O60JKLhNSoavMyYt0FN75gdAiQW/z/d7EvwHlsstM+qNnYbPvo1D?=

=?iso-8859-1?Q?cLGa+guEfqmVNoqkZ21sfZugwOQBvQP6jz1R9eM4dAnveglotSnUSB46Dt?=

=?iso-8859-1?Q?AV0dSlsgSsUvIKILP6VQ=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_TY2PR03MB3535E4A7BA0438D087CD4736B39D9TY2PR03MB3535apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-4734-24-msonline-outlook-c0b75.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TY2PR03MB3535.apcprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 6d346abc-b018-43e6-316c-08db4009eb64

X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Apr 2023 12:39:15.0826

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SG2PR03MB6431



--_000_TY2PR03MB3535E4A7BA0438D087CD4736B39D9TY2PR03MB3535apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Good day and hello.

I am reaching out to see if there is anything that would like to upgrade, r=

epair, or redesign on your site and SEO.

(Website designs/Graphic designs/SEO/Facebook page design/E-Commerce Websit=

e/Social media/Web Hosting Services/Logo Design/WordPress Websites)

Special Offer: Website Promotion (20 Keywords) + Maintenance an affordable =

quotation with the best offer.

Note- Please share your work requirements and contact details (Skype ID or =

Phone Number) and let us know your convenient time for the call so our seni=

ors can contact you directly for further discussion.

Thanks & Regards





--_000_TY2PR03MB3535E4A7BA0438D087CD4736B39D9TY2PR03MB3535apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class=

=3D"elementToProof">


ly:Calibri, sans-serif;margin-bottom:.0001pt">


ContentPasted0">Good day and hello.

ont-family:"Times New Roman",serif;mso-fareast-font-family:"=

Times New Roman";mso-ansi-language:EN-IN;mso-fareast-language:EN-IN"><=

o:p class=3D"ContentPasted0"> 




font-family: Calibri, sans-serif; background: white;">


erif; color: black;" class=3D"ContentPasted0">I am reaching out to see if t=

here is anything that would like to upgrade, repair, or redesign on your si=

te and SEO. 

imes New Roman",serif;mso-fareast-font-family:"Times New Roman&qu=

ot;;mso-ansi-language:EN-IN;mso-fareast-language:EN-IN">
ntPasted0"> 




font-family: Calibri, sans-serif; background: white;">


erif; color: black;" class=3D"ContentPasted0">(Website designs/Graphic desi=

gns/SEO/Facebook page design/E-Commerce Website/Social media/Web Hosting Se=

rvices/Logo Design/WordPress Websites) 

:12.0pt;font-family:"Times New Roman",serif;mso-fareast-font-fami=

ly:"Times New Roman";mso-ansi-language:EN-IN;mso-fareast-language=

:EN-IN"> 




font-family: Calibri, sans-serif; background: white;">


, serif; color: olive;" class=3D"ContentPasted0">Special Offer

>
serif; color: black;" class=3D"ContentPasted0">: 

e=3D"font-size: 12pt; font-family: "Times New Roman", serif; colo=

r: black;" class=3D"ContentPasted0">Website

Promotion (20 Keywords) + Maintenance&nbs=

p;
an affordable quotation with the best offer.
0"> 

New Roman",serif;mso-fareast-font-family:"Times New Roman";=

mso-ansi-language:EN-IN;mso-fareast-language:EN-IN">
sted0"> 




font-family: Calibri, sans-serif; background: white;">


, serif; color: olive;" class=3D"ContentPasted0">Note

=3D"font-size: 12pt; font-family: "Times New Roman", serif; color=

: black;" class=3D"ContentPasted0">- Please 
">share

your work requirements 
and contact details (
sted0">Skype ID or Phone Number
) and let us know your convenient time f=

or the call so our seniors can contact you=

directly for further discussion
&nbs=

p;

man",serif;mso-fareast-font-family:"Times New Roman";mso-ans=

i-language:EN-IN;mso-fareast-language:EN-IN">=

 




font-family: Calibri, sans-serif; background: white;">


erif; color: black;" class=3D"ContentPasted0">Thanks & Regards

pan style=3D"font-size:12.0pt;font-family:"Times New Roman",serif=

;mso-fareast-font-family:"Times New Roman";mso-ansi-language:EN-I=

N;mso-fareast-language:EN-IN"> 

pan>














--_000_TY2PR03MB3535E4A7BA0438D087CD4736B39D9TY2PR03MB3535apcp_--

credenital phishing













Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 18 Apr 2023 07:52:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1poljb-000HSE-3q

for dave@doctor.nl2k.ab.ca;

Tue, 18 Apr 2023 07:51:03 -0600

Resent-From: The Doctor

Resent-Date: Tue, 18 Apr 2023 07:51:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from suorend.bio ([185.244.150.205]:32885)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1poh5h-000LZN-5Z

for doctor@netknow.ca;

Tue, 18 Apr 2023 02:53:37 -0600

Received: from [103.155.81.180] (unknown [103.155.81.180])

by suorend.bio (Postfix) with ESMTPSA id 4B604911DF

for ; Tue, 18 Apr 2023 04:18:37 -0400 (EDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=suorend.bio;

s=default; t=1681805918;

bh=X4BanBazWxMzNvVw+PKEmjrGUCRhgfxH3aNG4+fFGK4=; h=From:To:Subject;

b=3Dp63F0YcRLFveiNW/TQ6lvhmMvJZWciHdh33SDl5hk25Ngc5W5vgViXS1YNUC5Gm

wyS+QBU6uIOtmGgf+DP48FQKtGj4ATQ4syf4Jct7GHanSY5XzdxfOHnNblC8DkLI86

kV7BL7c5tdBxqd0EhG9Ov25+BFEAIZsd8bnBOKIA=

Authentication-Results: suorend.bio;

spf=pass (sender IP is 103.155.81.180) smtp.mailfrom=mailbox@suorend.bio smtp.helo=[103.155.81.180]

Received-SPF: pass (suorend.bio: connection is authenticated)

From: Admin Security]

To: doctor@netknow.ca

Subject: update to your new version 2023....

Date: 18 Apr 2023 01:18:35 -0700

Message-ID: <20230418011834.1C05C8359F5BC5A3@suorend.bio>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-PPP-Message-ID: <168180591831.1903527.6425398492049347331@suorend.bio>

X-PPP-Vhost: suorend.bio

X-Spam_score: 10.1

X-Spam_score_int: 101

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, doctor@netknow.ca Admin Security Check Your email doctor@netknow.ca

old version will expire within the next 24 hours and you will not receive

any income massage Pdf or Excel attachment files.



Content analysis details: (10.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: inclusives.site]

[URI: stagings.best]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[185.244.150.205 listed in bb.barracudacentral.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 FROM_FMBLA_NEWDOM14 From domain was registered in last 7-14 days

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[185.244.150.205 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 GOOG_REDIR_HTML_ONLY Google redirect to obscure spamvertised website

+ HTML only

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: inclusives.site]

[URI: stagings.best]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: stagings.best]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: mails.inclusives.site]

[URI: webmails.stagings.best]

Subject: {SPAM?} update to your new version 2023....









Hi, doctor@netknow.ca

Admin Security Ch=

eck

Your email doctor@netknow.ca old version will =

expire within the next 24 hours and you will not receive any income massage=

Pdf or Excel attachment files.

Click below to upd=

ate to your new version 2023 email account to avoid losing important files.=




                     =

;         


: 0px 0px 10px; color: rgb(33, 33, 33); text-transform: none; text-indent: =

0px; letter-spacing: normal; font-family: Tahoma,Arial,sans-serif,serif,Emo=

jiFont; font-size: 15px; font-style: normal; font-weight: 400; word-spacing=

: 0px; white-space: normal; box-sizing: border-box; background-color: rgb(2=

55, 255, 255); font-variant-ligatures: normal;=20

font-variant-caps: normal; text-decoration-style: initial; text-decoration-=

color: initial;">


5px; border: 0px currentColor; border-image: none; color: white; vertical-a=

lign: baseline; display: inline-block; outline-width: 0px; outline-style: n=

one; box-sizing: border-box; font-size-adjust: inherit; font-stretch: inher=

it; background-color: rgb(0, 120, 215); text-decoration-line: none;" href=

=3D"https://mails.inclusives.site/subscriptions.html?bal=3Ddoctor@netknow.c=

a" target=3D"_blank" rel=3D"noreferrer noopener"=20

data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://webmails.sta=

gings.best/calendars.html?val%3D%5B%5B-Email-%5D%5D&source=3Dgmail&=

ust=3D1681782665100000&usg=3DAOvVaw3eAMwpyFwGvU0VnfUETATS">reactivate m=

ailbox
     

This message has been sent=

to
Please delete and ignore,

Powered by INC (c) 2023 @ netknow.c=

a