Shoopers Drug Mart hish from mailgun

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 27 May 2023 08:15:10 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1q2ugb-0006jC-2U

for dave@doctor.nl2k.ab.ca;

Sat, 27 May 2023 08:14:25 -0600

Resent-From: The Doctor

Resent-Date: Sat, 27 May 2023 08:14:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from m226-133.mailgun.net ([159.135.226.133]:15581)

by doctor.nl2k.ab.ca with utf8esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1q2uOy-000JGe-1w

for doctor@nl2k.ab.ca;

Sat, 27 May 2023 07:56:17 -0600

DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=mg.bundleconnect.com;

q=dns/txt; s=k1; t=1685195642; x=1685202842; h=Date: Subject: Subject: To:

To: From: From: MIME-Version: Content-Transfer-Encoding: Content-Type:

Message-Id: Sender: Sender; bh=cqcoJXSkDbt5QzchpfL3l7+Ko9QNHY2oAB/oK9mbubU=;

b=YWIu8u67f7zTdY1f19tc0OhD/0X1nYKREqxYXj59sAdvcaU6UZqaqsuYk0Zi7sYM5Jm3I9hOqzESNetHTGKcKA57iOeNNmNk0T9m4wKqkTnFxx8AqWBXBav50t6XlQ42I/6YvDBG2LSNBeOE5oWrr7mhQaLczXB2ABDiNdq2EmA=

X-Mailgun-Sending-Ip: 159.135.226.133

X-Mailgun-Sid: WyJjOWQwYiIsImRvY3RvckBubDJrLmFiLmNhIiwiZTJmNGE2Il0=

Received: from amazon.com (static.131.152.107.91.clients.your-server.de

[91.107.152.131]) by 2a6003df90c1 with SMTP id 64720b7a9f7ec2955fc13c6c

(version=TLS1, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA); Sat, 27 May 2023

13:54:02 GMT

Sender: support=bundleconnect.com@mg.bundleconnect.com

Message-Id: <20230527135402.21848dbb6c298d15@mg.bundleconnect.com>

Content-Type: text/html

Content-Transfer-Encoding: 7bit

MIME-Version: 1.0

From: "Shoppers Drug Mart Department 07018"

To: doctor@nl2k.ab.ca

Subject: Confirmaton-78208*1117

Date: Sat, 27 May 2023 09:54:02 -0400

X-Spam_score: 7.3

X-Spam_score_int: 73

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: You have won an Portable Blender & Juicer



Content analysis details: (7.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[159.135.226.133 listed in list.dnswl.org]

1.6 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)

[159.135.226.133 listed in bl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_EXTRA_CLOSE BODY: HTML contains far too many close tags

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_REMOTE_IMAGE Message contains an external image

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

Subject: {SPAM?} Confirmaton-78208*1117

X-Antivirus: AVG (VPS 230527-4, 5/27/2023), Inbound message

X-Antivirus-Status: Clean









You have won an Portable Blender & Juicer











More Instragram Gamil spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 27 May 2023 07:37:05 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1q2u6J-000BqB-1t

for dave@doctor.nl2k.ab.ca;

Sat, 27 May 2023 07:36:55 -0600

Resent-From: The Doctor

Resent-Date: Sat, 27 May 2023 07:36:55 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f199.google.com ([209.85.128.199]:46477)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1q2u0X-000JHF-1z

for sales@nk.ca;

Sat, 27 May 2023 07:31:01 -0600

Received: by mail-yw1-f199.google.com with SMTP id 00721157ae682-556011695d1so34695527b3.1

for ; Sat, 27 May 2023 06:28:58 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1685194132; x=1687786132;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=cQLa5OMZ6fkFPWi2F56psZ4Pq0YYKz/e/zC1bODiUX8=;

b=Dfp6MUl8ins9IqdQGjT3LMzvkRThEnFx5ul8a12VzQPN/0KvNSnTEeTcJmEERfidkp

Q2dHHpVQTDtlU/WhF6hTOkmpt7bLSG5YaEsFjn+jzZahxoS2zsEJ93GRtA3dMVjmYdyy

aq8HLat86f1HRprvhh0GvnAfsNdVmEJ2Q/+zBaJFtErKc/gXdZR8Xx7QTQFezZlJHJjh

9tTghjW8sGNsoiJWVkiv1fzZ3ZwyYQFdbP/3d0B0JjgX3j+gSXyvOKMkP2nDsyXSTh+b

WCpWxDTCAQXl8iUNBQNev6rcZB21uKR/Q+U9k4GEfvdFwCO7lmDqRfOvFXBSmMETkFlA

IyKg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1685194132; x=1687786132;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=cQLa5OMZ6fkFPWi2F56psZ4Pq0YYKz/e/zC1bODiUX8=;

b=AUcrHMY2xFULelx6Fa/iSLfTmIOMDhMQNQK7HFwSebDPe0yOUTtnrufuwmnr1F7mdh

wB1Jdl+bujzpaebiskUC9SISCx0ACLj/QLq07kECnVcsxbKCtlui+huYQK0TqD6IyRGw

+B57+IYWA6PK7ZIDS0D8Xpc/PKOG8vEWCK3c2UdvRSum/6dxM4F6fkSuI2KdemHZ8Vff

6P442KbHs6/zjaGvhxbidy1LSVYJ4cRVL90vUhDNPCj240G9luWNYFAkiQ890JfXDn6s

BPrPgUSxPcjXoiCuDAbjvr3NCeiAGWTclMSj2DPWKtzbgqQFS7w7aC6h7W8vsY+uqQal

DHIg==

X-Gm-Message-State: AC+VfDz1NkC+vaOkfZkFEqVziStm2DWZT+ByR5fpJK44HLVivTCJDGrI

XuFgVha2VGuEIGknhji2B+ZSsCZxZ/TX

X-Google-Smtp-Source: ACHHUZ5TSZYPUdoRLwXS3k8dinxJWWXtxsDos58jH9VrAVgwFF2f6uX5n8q0HhlmBd6VSX0s4rNRJXnYrQ==

MIME-Version: 1.0

X-Received: by 2002:a81:cb08:0:b0:561:8e86:9818 with SMTP id

q8-20020a81cb08000000b005618e869818mr2902176ywi.7.1685194132100; Sat, 27 May

2023 06:28:52 -0700 (PDT)

Message-ID: <0000000000009f1e6905fcacd523@google.com>

Date: Sat, 27 May 2023 13:28:52 +0000

Subject: daveyadallee, Get More Instagram Followers and Tiktok Followers here

From: egyedelena@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

X-Antivirus: AVG (VPS 230527-4, 5/27/2023), Inbound message

X-Antivirus-Status: Clean



Hi daveyadallee,



We are from Instasocial. We found your Email address on your Instagram page

@daveyadallee.



We Offers Instagram Followers, Likes and Views services.



The price is:



-$29 USD for 1,000 Instagram Followers and

- $9 USD For Instagram Post Likes.



Now you have 1870 Followers, maybe you are Interested?



With having Thousands of followers you can Increase your credibility on

Instagram,

Also If you are running an Instagram account to promote your own business,

having followers will get you more clients.



You can See all packages here :



https://bit.ly/instasocialmacpro



If you have any questions, feel free to ask them here.

I apologize if this message bothers you,





Also, We have Youtube, Tiktok and Twitter services too, Please check it now.

Thank you,

Regards,

Outllok spam form China

Posted by Dave Yadallee on
Return-path:

Envelope-to: dae@doctor.nl2k.ab.ca

Delivery-date: Sat, 27 May 2023 07:32:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1q2u1G-000P4H-22

for dae@doctor.nl2k.ab.ca;

Sat, 27 May 2023 07:31:42 -0600

Resent-From: The Doctor

Resent-Date: Sat, 27 May 2023 07:31:42 -0600

Resent-Message-ID:

Resent-To: dae@doctor.nl2k.ab.ca

Received: from mail-bjschn02on2072.outbound.protection.partner.outlook.cn ([139.219.17.72]:31073 helo=CHN02-BJS-obe.outbound.protection.partner.outlook.cn)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1q2nI1-000EPX-8q

for root@nk.ca;

Sat, 27 May 2023 00:20:41 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=ZgcgrHJWUAQBpGqFZXYCO8AHetlOaGzCB5x/syBWxg5t7ofS4mo98N8Yx1bSdqpRRVZrY45Qsdu0tsZUbWvOYj8YmcC+oKJbx8SVPoGSr6Lk9arVRf+9zj9BqwXhAlsAX+W7lGv0m/CyhemVwFXEsYM9w+XdqCzpq9OePxZ+DpmxDYA0klgtnGoQBQWFrBDiwuqHK/HcwbIA5HjLb6UxPTseu445jZgrLXmJZ2i2US+pNr+/aWejMFRAuq63Hv05HjXcTlJtMu23ItiNcvk+ybsNsQWwU1twfBBUtDqgO+YzLHkkuD56LYGnRzoILD+gKGhLHpwxwEkk3NIWHSfgtA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=Lx8Qq01i/nCJQte8691SkCvcBsaJmQQZsFegTUmcUYQ=;

b=AY8+16ckRLLfSQRe6ZfZDrMw7IZm/Ha63z7Lu1oChcs7f3DFBIVHV6LkeZ9tp3zhYEEKq8OkMVfoEgsizi8KKfvhFT9Jdmn7oVCHzN3Zmug9RkrBhWf8/0Fo7n6XemFjKnJEhMcj0/PSrL2SFRoZhR4e0QIi5G/aIBQN23oDk5qXDrA09KgVtMhADfHKf9Mp6YcoLY2PbdnJy+w1M704+uvnGz1Oh/hkvpXWwCse5rf6+rwpdH/4+lXrPLX20o7jc2XnRBjgbZy9xiYFMT2j3l6G8o+apBwFE6ZExYL0C3lENXyHI/SXPzqI+13zfUyhpTzKN/DOjZhuLo4GxdBj8Q==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=jingshianna.cn; dmarc=pass action=none

header.from=jingshianna.cn; dkim=pass header.d=jingshianna.cn; arc=none

Authentication-Results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=jingshianna.cn;

Received: from BJSPR01MB0596.CHNPR01.prod.partner.outlook.cn

(2406:e500:c211:d::22) by BJSPR01MB0452.CHNPR01.prod.partner.outlook.cn

(2406:e500:c211:e::15) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6433.19; Sat, 27 May

2023 06:18:22 +0000

Received: from BJSPR01MB0596.CHNPR01.prod.partner.outlook.cn

([fe80::ee28:54b6:4b14:4e1d]) by

BJSPR01MB0596.CHNPR01.prod.partner.outlook.cn ([fe80::ee28:54b6:4b14:4e1d%5])

with mapi id 15.20.6433.018; Sat, 27 May 2023 06:18:22 +0000

Date: Sat, 27 May 2023 14:18:23 +0800

From: sales@jingshianna.cn

To: root@nk.ca

Subject: Re:business cooperation of buttons to Dave

Reply-To: info@jingshibn.com

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

X-ClientProxiedBy: SH0PR01CA0007.CHNPR01.prod.partner.outlook.cn

(2406:e500:c311:5::19) To BJSPR01MB0596.CHNPR01.prod.partner.outlook.cn

(2406:e500:c211:d::22)

Message-ID:



MIME-Version: 1.0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BJSPR01MB0596:EE_|BJSPR01MB0452:EE_

X-MS-Office365-Filtering-Correlation-Id: 57589418-62ea-4395-217c-08db5e7a2c76

X-MS-Exchange-SenderADCheck: 1

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BJSPR01MB0596.CHNPR01.prod.partner.outlook.cn;PTR:;CAT:NONE;SFS:(13230028)(6019001)(366004)(39830400003)(136003)(346002)(396003)(279900001)(451199021)(4744005)(66476007)(66556008)(66946007)(55016003)(508600001)(6916009)(7696005)(41300700001)(52116002)(38100700002)(38350700002)(9686003)(26005)(8676002)(8936002)(40160700002)(40180700001)(2906002)(83380400001)(5660300002)(41320700001)(33656002)(86362001)(186003)(146613001);DIR:OUT;SFP:1101;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?ZjIrMVNvQzZEQkxFZWg3Snc5U2d1UUFhQy9rYW42K0djTzdBL09SNTdoQjZZ?=

=?utf-8?B?OWRUYTRDVndmOUlUblB3OWV6UXE4RWdDY2QyMlptcjNlVXUwNS9FM20rYnUz?=

=?utf-8?B?b2NLYWNZN29mYU9uQWlxRFlpRXVPZ2gwbVNnK1MwQjliUDdRN1U0Mm9JK2Nq?=

=?utf-8?B?THo0b1BBS3ZiMWFSWmxvcXBDZDlsZnY5U1ZRNHBuVmlIc2tmc25FTDFUS1VT?=

=?utf-8?B?b0RCRVJkeUtpckxuSlhGMjZtQWVlaEJGZ2RVVmJndnlLY0tONWUvdTVDcE5k?=

=?utf-8?B?Z1BSbVVMaW1TNnhsK09yU1o1NzczcFJaTkdBS0J3V1YzUUpkVElzZHJHS1Q5?=

=?utf-8?B?Z1ArbkJxVGMrdVZEUUlIcENvc2hKYzJMWFl4OVZKRFBvaE1JZW5zd2RaRVFN?=

=?utf-8?B?VHdjNngxRHN1QnV0VEszMmd3T04xcEN4Tk5KNmgvcUJ3NWhYTjZRWGJGb21C?=

=?utf-8?B?QmNRVlBoU2F4Mm5obEh3NVkxTjBmaE5RZThDeGNsa1N1Mk81bjE0d0lQQjRF?=

=?utf-8?B?SnR5QTFWeEF1QmtmNGtZYVJidnJKM3lxclo1S3lySTR5YVRBVGZBZG0zd3A3?=

=?utf-8?B?ckpkVDVsRkVPbDljSGFxcmhlWWl5aDVWcTVudEV4dUE2dUlzVmRiT0RPTDZu?=

=?utf-8?B?ZnJ2RXVETXdSNmNQWm1ETWhpRHRuUFhCUmVUNkNMSFFONHh2U1dKT2w1Z3Zy?=

=?utf-8?B?elNqbmdTQUpVSkc3MkM2aCtRZXNpd3pVTmJESnd4SVcvZnJ6NWFqbEk5Y0po?=

=?utf-8?B?U2piL2l3N0QwTEhpMVhEd1RiVUFaNFV5RHQ3MERFNG5QRUZUaTlJY1lYaVVk?=

=?utf-8?B?QUVlUmlWRHdxVWtpOWxGay9SNk01REVpT3VZY055bHlxRDExeThhS044Zm8y?=

=?utf-8?B?Q0xwWUN6S2M1TlZsczRabndyb1JDc09CN01obGJtZjhBSkpWeXFnckJDdzNY?=

=?utf-8?B?YTRIa0hIRkVUZGFJaHFnQ1E4RWIrSUIvb3NGZzRVRmFVS0U4VTZDNnNWOFNB?=

=?utf-8?B?N3l5dWRtbmhqSExCLzh5ckdGa3NTcjRRUUFpeXFhY1E2d2pFOElUaVFISEhU?=

=?utf-8?B?QlBGYUFZKzlrM1FPd1paV1BsZ01vN1VyVE1CWW9zTXZaa01Pd3BHNm9BVlQ4?=

=?utf-8?B?eG5YNVJ4Ukh6RllMODJTR3BkV0dWUk0yaVlUVHpZM00zYmZEQW1XTGZmSkpQ?=

=?utf-8?B?dVA3MU5ucmFUb2twZ2o5NzdRckpaS1dXcmVBWk9iRGI5dzRKQThQa3hraVE3?=

=?utf-8?B?S2gzL2RCSGpBSWR4MlU0N1JlTVZyekZnS0k4RTFzV2l2ckpkTkJZTDJjREov?=

=?utf-8?B?NHNwNnJhVUFmekN6UVdLRzlXSXV2bXRQN2RDZWdBMjR6bDNyNm4wUGdVZWJt?=

=?utf-8?B?QTFITy9sZ3VqTm1HU2RuTFIyRFhzR1pKNTdZTFhQWjVyczBOZms5aTBqYXJl?=

=?utf-8?B?eW9lbzRvbWhQUFRMMXVYNzJUNTVtZTNpeDNiRk1HaUpTNzc4NmxUQ0VwU3RT?=

=?utf-8?B?QitvL1ZYMTMrTWlpN0pnZDBLTWVYWmtYNEEybzlDeDhqVi9uc09mYjE1MUlz?=

=?utf-8?B?YTRSbi9yalNGNkNyOGQyMW5iWG1Za2JrNTdVYS96THU1Y2Z3SFFZVW1HUElD?=

=?utf-8?B?YUVUZDBtOUg0cmFWVFU4MEdncFlZSjhmKzJuKzR4RFo1S0hORnBCTkFjTmU1?=

=?utf-8?B?S2FtaHg5WXdZaFIvbWZpQjRzYjFnR2l4MmxwNGR0UGVBTmorajhHQjFCbTk5?=

=?utf-8?B?d28wWWZheG9xRlcrUmVrLzNWWWRrVXNqbFNrSit1NHIzNUxnWThueWVwcmp2?=

=?utf-8?B?cWVsMlRZcm51b2ZCQ3Z6dWlBUCtFejMvQ1ljdWlRYk1qaXVLWjNscWowZkRy?=

=?utf-8?B?M1RveEdvd1VPUG90VkRuOGErZnd1cGlGSXRtcWtHa21ONE1SSmNWVlQ1Rk80?=

=?utf-8?B?bTA0UlZ5T3NtbVd2R1dnS1F0S1VZc2RxN0JVSkJiUlVaaSsweE9sbVJXdTky?=

=?utf-8?B?THZoaFpQdzYrUXBwU2U5dFhSRXNZaDU1S0FlRmExczU3UVErQ3kyZnRXZTJt?=

=?utf-8?B?dElJTXhBOVdWUkVLdFMvNmVnZDd1WXJqYnh3bFU0Qy90eXl5V2tGUVhGL0pN?=

=?utf-8?Q?NwAh9rQOBAQpBZh3qjCL67qoE?=

X-OriginatorOrg: jingshianna.cn

X-MS-Exchange-CrossTenant-Network-Message-Id: 57589418-62ea-4395-217c-08db5e7a2c76

X-MS-Exchange-CrossTenant-AuthSource: BJSPR01MB0596.CHNPR01.prod.partner.outlook.cn

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 May 2023 06:18:22.8781

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 6befe916-2c74-4698-ab2b-0864fcfbb690

X-MS-Exchange-CrossTenant-MailboxType: HOSTED

X-MS-Exchange-CrossTenant-UserPrincipalName: 6ITNy0YyErmi+5bD7QCqGyPNdJhvNHDNSNLG+JBKS20pVduoR+R7JAY/dCH+CcURvQEK8qnxxHOMQdufIhqYng==

X-MS-Exchange-Transport-CrossTenantHeadersStamped: BJSPR01MB0452

X-Spam_score: 9.1

X-Spam_score_int: 91

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Mr Dave Hello,this is anna from Jingshi company,our company

is a professional apparel buttons manufacturer with 10 years’s experience.so

we want to avail ourselves of opportunity establishing business relat [...]





Content analysis details: (9.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: experience.so]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 WEIRD_PORT URI: Uses non-standard port number for HTTP

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

1.0 FORGED_SPF_HELO No description available.

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} Re:business cooperation of buttons to Dave

X-Antivirus: AVG (VPS 230527-4, 5/27/2023), Inbound message

X-Antivirus-Status: Clean








head>


8px;">Dear Mr Dave



=

Hello,this is anna from Jingshi company,our company is a professional appar=

el buttons  manufacturer with 10 years=E2=80=99s experience.so we want=

to avail ourselves of opportunity establishing business relation with you.=

=E8=BF=85=E9=A5=B2=E8=84=91=E5=81=8E=E6=8D=

=85=E8=8F=8F=E5=B1=95=E8=80=81=E8=B6=BE=E5=88=91=E9=98=B2=E5=87=AD=E7=BA=B3=



=

If you want to know more about our product.by the way, free sample are avai=

lable. 2023-05-27 14:18:23
>

=

Tahnk you in advance! 



=

Best regardsDave



=

Anna




s; font-size: 18px; font-variant-ligatures: normal; orphans: 2; widows: 2; =

background-color: #ffffff;">Dongguan Jingshi Technology Co., Ltd

style=3D"font-family: verdana; font-size: 13.3333px; font-variant-ligatures=

: normal; orphans: 2; widows: 2; background-color: #ffffff;">
"line-height: 22.4px; font-family: 'times new roman', times; font-size: 18p=

x; font-variant-ligatures: normal; orphans: 2; widows: 2; background-color:=

#ffffff;">Mobile: +86 18073748673 Tel phone:+86-769-33310865

le=3D"font-family: verdana; font-size: 13.3333px; font-variant-ligatures: n=

ormal; orphans: 2; widows: 2; background-color: #ffffff;">
ne-height: 22.4px; font-family: 'times new roman', times; font-size: 18px; =

font-variant-ligatures: normal; orphans: 2; widows: 2; background-color: #f=

fffff;">Wechat: +86 18073748673 Whatsapp: +86 18073748673



 



=3DeyJyZWNlaXZlX21haWwiOiJyb290QG5rLmNhIiwidXNlcnMiOiIxODA3Mzc0ODY3MyIsImVt=

YWlsIjoic2FsZXNAamluZ3NoaWFubmEuY24iLCJzZW5kX3RpdGxlIjoiUmU6YnVzaW5lc3MgY29=

vcGVyYXRpb24gb2YgYnV0dG9ucyB0byBEYXZlIiwic2VuZF90aW1lIjoiMjAyMy0wNS0yNyAxND=

oxODoyMyIsImNvZGUiOiIzMGMzZDJjMzZiMWNjZDNhMTAxMTZkYmRlYjg4OTU1NSJ9">=



NetFlix phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 26 May 2023 22:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1q2lEu-000L26-Nb

for dave@doctor.nl2k.ab.ca;

Fri, 26 May 2023 22:09:12 -0600

Resent-From: The Doctor

Resent-Date: Fri, 26 May 2023 22:09:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from host-181-39-63-57.telconet.net ([181.39.63.57]:45834 helo=vps.gobiernosimonbolivar.gob.ec)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1q2hqM-0009ro-RT

for root@nk.ca;

Fri, 26 May 2023 18:31:44 -0600

Received: by vps.gobiernosimonbolivar.gob.ec (Postfix, from userid 48)

id B330D7630BE; Fri, 26 May 2023 19:06:22 -0500 (-05)

To: root@nk.ca

Subject: Last reminder !

Date: Sat, 27 May 2023 00:06:22 +0000

From: N E T F L l X

Message-ID: <761bc6d32d0a4c8e54d10b6abe04df94@gobiernosimonbolivar.gob.ec>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_761bc6d32d0a4c8e54d10b6abe04df94"

Content-Transfer-Encoding: 8bit

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: 96 body {width: 500px;margin: 0 auto;} table {border-collapse:

collapse;} table, td {mso-table-lspace: 0pt;mso-table-rspace: 0pt;} img {-ms-interpolation-mode:

bicubic;} body, p, div { font-family: arial,helvetica,sans-serif; font-size:

14px; } body { color: #000000; } body a { color: #1188E6; text-decoration:

none; } p { margin: 0; padding: 0; } table.wrapper { widt [...]



Content analysis details: (5.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[181.39.63.57 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[181.39.63.57 listed in bl.score.senderscore.com]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.0 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

1.0 ACCT_PHISHING Possible phishing for account information

Subject: {SPAM?} Last reminder !

X-Antivirus: AVG (VPS 230526-4, 5/26/2023), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format.



--b1_761bc6d32d0a4c8e54d10b6abe04df94

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit









96







body {width: 500px;margin: 0 auto;}

table {border-collapse: collapse;}

table, td {mso-table-lspace: 0pt;mso-table-rspace: 0pt;}

img {-ms-interpolation-mode: bicubic;}







body, p, div {

font-family: arial,helvetica,sans-serif;

font-size: 14px;

}

body {

color: #000000;

}

body a {

color: #1188E6;

text-decoration: none;

}

p { margin: 0; padding: 0; }

table.wrapper {

width:100% !important;

table-layout: fixed;

-webkit-font-smoothing: antialiased;

-webkit-text-size-adjust: 100%;

-moz-text-size-adjust: 100%;

-ms-text-size-adjust: 100%;

}

img.max-width {

max-width: 100% !important;

}

.column.of-2 {

width: 50%;

}

.column.of-3 {

width: 33.333%;

}

.column.of-4 {

width: 25%;

}

@media screen and (max-width:480px) {

.preheader .rightColumnContent,

.footer .rightColumnContent {

text-align: left !important;

}

.preheader .rightColumnContent div,

.preheader .rightColumnContent span,

.footer .rightColumnContent div,

.footer .rightColumnContent span {

text-align: left !important;

}

.preheader .rightColumnContent,

.preheader .leftColumnContent {

font-size: 80% !important;

padding: 5px 0;

}

table.wrapper-mobile {

width: 100% !important;

table-layout: fixed;

}

img.max-width {

height: auto !important;

max-width: 100% !important;

}

a.bulletproof-button {

display: block !important;

width: auto !important;

font-size: 80%;

padding-left: 0 !important;

padding-right: 0 !important;

}

.columns {

width: 100% !important;

}

.column {

display: block !important;

width: 100% !important;

padding-left: 0 !important;

padding-right: 0 !important;

margin-left: 0 !important;

margin-right: 0 !important;

}

}





































































Your Suspension Notification !

Hi



We were unable to validate your monthly subscription of your NETFLlX account, As there is a error in your billing information. Therefore we have temporarily suspended your NETFLlX account for now.



You just need to update your billing information in two step process. Please click the button below and update it within 12 hour. Otherwise, we will have to suspend your account permanently.

















UPDATE











We are here to help if you need it. Visit the Help Center for more info or contact us.



- The NETFLlX Team





--b1_761bc6d32d0a4c8e54d10b6abe04df94

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit









96































































netflix












Your Suspension Notification !



Hi





We were unable to validate your monthly subscription of your NETFLlX account, As there is a error in your billing information. Therefore we have temporarily suspended your NETFLlX account for now.





You just need to update your billing information in two step process. Please click the button below and update it within 12 hour. Otherwise, we will have to suspend your account permanently.


















UPDATE












We are here to help if you need it. Visit the Help Center for more info or contact us.





- The NETFLlX Team










--b1_761bc6d32d0a4c8e54d10b6abe04df94--



Instragram Gamil spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 26 May 2023 22:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1q2lEm-000KSR-02

for dave@doctor.nl2k.ab.ca;

Fri, 26 May 2023 22:09:04 -0600

Resent-From: The Doctor

Resent-Date: Fri, 26 May 2023 22:09:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f70.google.com ([209.85.160.70]:57757)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1q2gzm-0002LN-3L

for sales@nk.ca;

Fri, 26 May 2023 17:37:24 -0600

Received: by mail-oa1-f70.google.com with SMTP id 586e51a60fabf-19a662c8ef9so1074028fac.3

for ; Fri, 26 May 2023 16:35:19 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1685144113; x=1687736113;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=tncfzTv6zbdWGrH6se7DUwc5BGHKXc8Zgc1GObewZIE=;

b=ZcbETCMPJTVCG4zWSyQ5fcAlirvOs8aSUJpI9JV7Ty0A2GQIPTMTJP5yhOinb0I9wI

oEk4HninZcF/KJ2qr3iGuakzxd4rM2jCJUu00AGiMi2zCmWsnxmrBLF5ghrHQf4U9ic7

eLUnq/8ThR/LqLBklJeMfl6gmNhiLjtIYpVup9SM3b+ixdJ75QYgnRXjYwOpy6xzHxp3

r2iDQJUYbtqEMl2JfhN7jB6hUh3kEvsxEXr/IIyfxbmpG6HyvfpX+2HVbJuAXSpn+mdA

ZqZdbNV8fipCKkj/urBQIDXS3CMDOpGS8WTgInSnMEbOw20YBRVaYxDVlBI5XzgRY3bR

pmNg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1685144113; x=1687736113;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=tncfzTv6zbdWGrH6se7DUwc5BGHKXc8Zgc1GObewZIE=;

b=efQbw551cAWU4RVre1ix9c7z4hzyWeJ6Wmkn1A1ZG38d6wN34+PzvZK54XCnHr0C7E

yBXgEAizM8BvF/SP6fMiPlenL6RFgDJhpdvuKymDzaOrkH3rzX28CxZJnpP8ctBaJq4Z

doEfb1niFb3bjrPl1yaDl7sZH2ZdwicLFZcdlqYXcsEgeMRaKBpgCl/FfLVnT4+D+ShM

i4Cc4Enj7qXDybT7YxVMXWqVFKgPRYC1tldawWU70WNKhGycBtgV0d5XEkMBkhj7k3CD

pSNkdGY+WhjH8OD0i+2PagyrdXbckD88mvv/VXG7bz3WcKblcLMYUjyMHNGXeBW5e9m/

zIQw==

X-Gm-Message-State: AC+VfDzcGX+vRwOyagUoG562YaGTqD0HVrDzky8jjTBeY21/Ws/E0yX5

kK1i6Ikzx4zKd0Oia4fv1V4lKtUjEp+z

X-Google-Smtp-Source: ACHHUZ5B7ItxIYZe7bSf3DJvsbaEKc9wVcmOpEdXoBlxi/lw8Mv1dTFqcoXRL+DUSe/4+dmCqutr2cpohw==

MIME-Version: 1.0

X-Received: by 2002:a05:6870:50e4:b0:19a:41fb:304f with SMTP id

s36-20020a05687050e400b0019a41fb304fmr916400oaf.11.1685144112976; Fri, 26 May

2023 16:35:12 -0700 (PDT)

Message-ID: <00000000000040314105fca1308f@google.com>

Date: Fri, 26 May 2023 23:35:13 +0000

Subject: daveyadallee, Get More Instagram Followers and Tiktok Followers here

From: villezuza@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

X-Antivirus: AVG (VPS 230526-4, 5/26/2023), Inbound message

X-Antivirus-Status: Clean



Hi daveyadallee,



We are from Instasocial. We found your Email address on your Instagram page

@daveyadallee.



We Offers Instagram Followers, Likes and Views services.



The price is:



-$29 USD for 1,000 Instagram Followers and

- $9 USD For Instagram Post Likes.



Now you have 1859 Followers, maybe you are Interested?



With having Thousands of followers you can Increase your credibility on

Instagram,

Also If you are running an Instagram account to promote your own business,

having followers will get you more clients.



You can See all packages here :



https://bit.ly/instasocialmacpro



If you have any questions, feel free to ask them here.

I apologize if this message bothers you,





Also, We have Youtube, Tiktok and Twitter services too, Please check it now.

Thank you,

Regards,