Web/ SEO / App development spam from Micorsoft

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 10 Sep 2023 06:45:07 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qfJaj-0000XX-1i

for dave@doctor.nl2k.ab.ca;

Sun, 10 Sep 2023 06:31:05 -0600

Resent-From: The Doctor

Resent-Date: Sun, 10 Sep 2023 06:31:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-tyzapc01olkn2090.outbound.protection.outlook.com ([40.92.107.90]:56749 helo=APC01-TYZ-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qfJLa-0009Lu-3B

for root@nk.ca;

Sun, 10 Sep 2023 06:15:43 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=Tfd9tjqs/BT9+Y6e5u004lYSojK8/S1XnP0bxyNwPQ0jXzDYsTMeP5BLJXlmnLFpoJ0MjgLnltGEaqfEs4dVvKm2rhFP1yOJ65lGWRofuwuYglhCPWStQxbxCxVb93uh+vOijVtMopLdFFWDpyO2Mj9OKhtbo5ZpzH+iRnFimtWvqupL0O1dQgssXonSEodno+xv7nuD/aKSE/Xqo70ybZdZCOigdI98AQ5w/arXxLEJL6XnQrZt5nAD7DLfjUtCelD+PEisoUg+fIMWMd3tYK039mMPNLys5tbU/qSJjLzQSojDfas2sGK0StMiOwqm3KHU9UPWL7u1/bwpixiCEg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=eHEgb0j5ZtY29OimUSRNyUaJnmKE59AWcTKZJzVd8p4=;

b=kJYSpg4/BSxLDYfvx8dNYfYVH2E0wDytUkhR1sdn+LjkQkTQZFVxTZNWJ2nl6x9EwV9qVKG+lbdgsERD8H7bf4btAam6jHovy2fRX7/2cLmonvCpF3PzABGYxjNDt3M+m9sQBjyAVnM6v2fcsDCFWFXFKEyivuuRsOKqWGHwlDIFvXscXjM0ICOP9E0qcfSF19kr+9OHkKpGHV9n5SCEUFNWiCl4v5dEsaM2zA1Por30en2DdoPtiSpIloUoammyv8dsjQJsRenS51rniA1M2vvAUL4BnG/LwWFNYfCY/2qV9XC3Ibc2YSIJWzR7F6WlRT45LuUC86mIlFeABnUdEQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=eHEgb0j5ZtY29OimUSRNyUaJnmKE59AWcTKZJzVd8p4=;

b=szGdm756ACiH3ulLObthiEBnKb2vmP9c56kHpPtzHiYf0AepZDZ/e5oUEtiQahIPHX+MglxpVIS54B2j5hVLCinwfaFWELFgvQABQGkjf+6myKffDu/6xjGbLgDwgCpoE/6NuT1lkjIGlI3AFc3B1BkW6OzP4VYK4l8pTRo0gJxPYCSYs01wql46cgcGXrvQfBi/Gbh6I/MyU5jwauThda3Lz7myJqtblY6Q5YWdOBvbc+llvifaofph0JKr9UhktsJj8YfQY45DHve72eA7kaFucUgYd1vCjHDFndb3L8yYfaXlcmXqBCuZL2c5q88tjehfxWDGBFf95lzwsEeYVg==

Received: from TY0PR06MB5329.apcprd06.prod.outlook.com (2603:1096:400:212::9)

by SEZPR06MB5920.apcprd06.prod.outlook.com (2603:1096:101:f0::7) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6768.30; Sun, 10 Sep

2023 12:12:10 +0000

Received: from TY0PR06MB5329.apcprd06.prod.outlook.com

([fe80::9115:2795:f8d6:e0aa]) by TY0PR06MB5329.apcprd06.prod.outlook.com

([fe80::9115:2795:f8d6:e0aa%3]) with mapi id 15.20.6768.029; Sun, 10 Sep 2023

12:12:10 +0000

From: Peackelish Shunoughl

Subject: Digital Marketing

Thread-Topic: Digital Marketing

Thread-Index: AQHZ49/wJii+I6Yy3ku9cbDqSchCnQ==

Date: Sun, 10 Sep 2023 12:12:09 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [j150bnYotrXSbax46zT0l+bS7r6sm52j]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TY0PR06MB5329:EE_|SEZPR06MB5920:EE_

x-ms-office365-filtering-correlation-id: e4fc9ab4-f832-40e2-0d5d-08dbb1f728a6

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam: BCL:0;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?kknKoFBSQUmziwYCCpNUR58qJfEHwQabSXwv8nQYXzBeCoHssAMXhUlDVt?=

=?iso-8859-1?Q?Tqvlab9kdI/rdNqxnCIDb1QelbbJpG1jFiEA74Eyyz0i0N/kfxtoDWGIxj?=

=?iso-8859-1?Q?z00lHZ1wmvYE4m3tRs7fVj0kUc8ScyZJtP1Al3oLYwXg31L9/cZU1Y+/WZ?=

=?iso-8859-1?Q?eRZRJUXGSqAMy77faI8Eydyvgd9o+PXoHXkKGOStuzXFZGpbViShjHrXrI?=

=?iso-8859-1?Q?qwHlb+UvAEYNzRIp4V7SnZfkh72coeq87lzUsQPMfH3g2uN3CYMGemHkY2?=

=?iso-8859-1?Q?7hZGwKGL2vURgfttOb833I0njLOgAN6ltl+r8ctE9J7Cc8AbRKFtP06XsY?=

=?iso-8859-1?Q?CagcD6y9jobtND97waM2xYBRcWa2nQYibYEQZ2kwXfUZNA2N2ESinNzqYr?=

=?iso-8859-1?Q?THWrfEjMN3twh+M4PnztqcutbfhdjPltcmWCuSXcNlmSj05VddFsZ8jHCQ?=

=?iso-8859-1?Q?fICYxKIV/RkzLt8dQCnzg5MAJTjm3o6EfNlP1Apf9T4yQcpV1lFtex8UAh?=

=?iso-8859-1?Q?juL/Vn6gx8DQN1tx8Ot1lzEiErwzu2NFwnkgkKVviVj/bQHJkeYsmIEDPh?=

=?iso-8859-1?Q?K5+GOgaY57bDdARlOHAzWQEeeM5NsgmO7143XKz9SCI6zIlHq9KyDdRQiz?=

=?iso-8859-1?Q?ajXE2X0lt61SachIIz55rvAWtJdGaoKGWn0eAWkkj9e9qTGYDvvRN89YQ/?=

=?iso-8859-1?Q?rbUsj495hfUpI0bGyok9rHKz7nMYYxurMMAcaQLgko7a0iXvu4dw3+cNjM?=

=?iso-8859-1?Q?b57wqWykKnrtdfY+VJtnAbPge4WulxZN02zPFqbwNtEluHxk0jdJhrH2Hs?=

=?iso-8859-1?Q?6EaoKbblHJBHLiaplFd1hcdlWQw8GolhmJYCh4M2RTSp55DgyNu077T8iZ?=

=?iso-8859-1?Q?gXn29mtIs8WGe4cpF72w04WnUJ0tI+IWs1s7PrI2cf/sEmcVvmiVTaEAGi?=

=?iso-8859-1?Q?8/l/O1NtFw2fxvkK5MFAaAVTI5VTLL1uxQrwZgvZMj9wVpClhbW9hhwPeO?=

=?iso-8859-1?Q?LfI/X8PGF5EkIxI2Qp+TABjAkZfZg3Ma0m5a7kfkT9CRVhFw3MuBtvGt5Y?=

=?iso-8859-1?Q?VkaArO1gE8K5v2PtLe0K9WOJwciIfD2jDVyvTEzJbXENDAiA3X426BXfJ5?=

=?iso-8859-1?Q?jcjVU5dMIuqjovNY/AWU81W/fddMVlxQ9ScKLp9cpM7LT9PkLOJzGG2KMw?=

=?iso-8859-1?Q?Nox6Fi8Rew2BzmruxksgPj6IV6Xyf5k1khEiDq50F59DJ7P7WY/KZsqRxy?=

=?iso-8859-1?Q?acsQHo5APtturNk4p71Q=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_TY0PR06MB53291F87CACA5B0AD5A4880AADF3ATY0PR06MB5329apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-3208f.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TY0PR06MB5329.apcprd06.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: e4fc9ab4-f832-40e2-0d5d-08dbb1f728a6

X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Sep 2023 12:12:09.9965

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR06MB5920

X-Antivirus: AVG (VPS 230910-0, 9/9/2023), Inbound message

X-Antivirus-Status: Clean



--_000_TY0PR06MB53291F87CACA5B0AD5A4880AADF3ATY0PR06MB5329apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hello,



Hope you are doing well.



I was looking for Keywords and found your website on page 3-4 of Google. If=

you were on page #1, you'd get so many prospects/new clients every day. Mo=

st of your targeted keywords on page #3-5. You're so close! Do you mind if =

I sent a SEO Packages and Price list of your site to see why you're not on =

page #1?



I can send the past work details in a couple hours. If you have any questio=

ns, feel free to ask me. I have more than 10 years of experience in digital=

marketing.



Can I send it over?



Look forward to your reply.



Kind Regards



Peackelish





--_000_TY0PR06MB53291F87CACA5B0AD5A4880AADF3ATY0PR06MB5329apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">


ze: small; font-style: normal; font-weight: 400; letter-spacing: normal; or=

phans: 2; text-align: start; text-indent: 0px; text-transform: none; widows=

: 2; word-spacing: 0px; background: white; color: rgb(34, 34, 34);">

Hello,  
an style=3D"color: black;">        =

      
t-family:Arial, "sans-serif""> 
black;">    
t; font-family: Calibri, "sans-serif"; color: black;"> 
n> 




ze: small; font-style: normal; font-weight: 400; letter-spacing: normal; or=

phans: 2; text-align: start; text-indent: 0px; text-transform: none; widows=

: 2; word-spacing: 0px; background: white; color: rgb(34, 34, 34);">

Hope you are doing well.&nbs=

p;      =

          =

 
n style=3D"color: black;">    
=3D"font-size: 11pt; font-family: Calibri, "sans-serif"; color: b=

lack;">  
n>




ze: small; font-style: normal; font-weight: 400; letter-spacing: normal; or=

phans: 2; text-align: start; text-indent: 0px; text-transform: none; widows=

: 2; word-spacing: 0px; background: white; color: rgb(34, 34, 34);">

I was looking for Keywo=

rds and found your website on page 3-4 of Google. If you were on page =

#1, you'd get so many prospects/new clients every day. Most of your targete=

d keywords on page #3-5. You're so close! Do

you mind if I sent a 
y: Calibri, "sans-serif"; color: rgb(31, 73, 125);">SEO Packages<=

/span> and 
span>
color: rgb(31, 73, 125);">Price

list of your site=

to see why you're not on page #1? 
">             =

  
s-serif"">    =

; 
"sans-serif"; color: black;"> 
lack;"> 




ze: small; font-style: normal; font-weight: 400; letter-spacing: normal; or=

phans: 2; text-align: start; text-indent: 0px; text-transform: none; widows=

: 2; word-spacing: 0px; background: white; color: rgb(34, 34, 34);">

I can send the <=

/span>
color: rgb(31, 73, 125);">past work details
: rgb(31, 73, 125);"> in a couple hours. If you have

any questions, feel free to ask me. I have more than 10 years of experienc=

e in digital marketing. &nbs=

p;             =

 
f"">     =

;
sans-serif"; color: black;"> 
> 




ze: small; font-style: normal; font-weight: 400; letter-spacing: normal; or=

phans: 2; text-align: start; text-indent: 0px; text-transform: none; widows=

: 2; word-spacing: 0px; background: white; color: rgb(34, 34, 34);">

Can I send it over? 
pan>       =

;        
=3D"font-family:Arial, "sans-serif""> 
color: black;">    
ze: 11pt; font-family: Calibri, "sans-serif"; color: black;">&nbs=

p; 




ze: small; font-style: normal; font-weight: 400; letter-spacing: normal; or=

phans: 2; text-align: start; text-indent: 0px; text-transform: none; widows=

: 2; word-spacing: 0px; background: white; color: rgb(34, 34, 34);">

Look forward to your reply.&=

nbsp;     &nb=

sp;         
an style=3D"font-family:Arial, "sans-serif""> 
tyle=3D"color: black;">    
"font-size: 11pt; font-family: Calibri, "sans-serif"; color: blac=

k;">  <=

/p>


ze: small; font-style: normal; font-weight: 400; letter-spacing: normal; or=

phans: 2; text-align: start; text-indent: 0px; text-transform: none; widows=

: 2; word-spacing: 0px; background: white; color: rgb(34, 34, 34);">

Kind Regards 
an style=3D"color: black;">        =

      
t-family:Arial, "sans-serif""> 
black;">    
t; font-family: Calibri, "sans-serif"; color: black;"> 
n> 




ze: small; font-style: normal; font-weight: 400; letter-spacing: normal; or=

phans: 2; text-align: start; text-indent: 0px; text-transform: none; widows=

: 2; word-spacing: 0px; background: white; color: rgb(34, 34, 34);">

Peackelish














--_000_TY0PR06MB53291F87CACA5B0AD5A4880AADF3ATY0PR06MB5329apcp_--

Nigerian spam from outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 10 Sep 2023 06:00:22 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qfIsY-000Eo1-2O

for dave@doctor.nl2k.ab.ca;

Sun, 10 Sep 2023 05:45:26 -0600

Resent-From: The Doctor

Resent-Date: Sun, 10 Sep 2023 05:45:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-he1eur04rlhn2169.outbound.protection.outlook.com ([40.95.73.169]:39625 helo=EUR04-HE1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qfCVP-000AjM-2p

for doctor@doctor.nl2k.ab.ca;

Sat, 09 Sep 2023 22:57:13 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=TpFST7a6+58ru0mTh2T9LnDyP+PHVE5CEgpUew9Y31O8/MTknjZG6ZzvD+QbZWE4fXzAghFkGFunyooqeN0x3ttXWMTmQbij1f1n/sgQL/ZF9U+jPxjy8c64ycIwdjWk309jnEp5P7Eau50XKWRobS94ZH6YDBnwskm4gmVmu0pMy40f513Px4rX0iPVF1yrvCjs8WvL0WHrNrRGnT1AQjnL6D1tobIEt1pDNOy/N1xl16q1ej85+5WrdJR4ysJyw8v2GX2hPfsRpuH1o1ClmSfDW70EqVYT1Qt7Uy/6pDySSHfeMqZxNeaNNBDPTttuJdRFZ62zX4i5afpGsp4pzw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=uGYmthEZcdCm7ssEKEB5gbotYN4gExVp1YENXtzP/Vc=;

b=XkG98tq3TleRzmShR9MCkjVr7r7Nk5mQzUX06Z62QNcOfW4eHUfAah2e8Ob22AMU8QnjKIrWABhjVlmG4v9sbZ1WS2UTN2mjdSjC9lNiESVQPoyKkra4CxaZwsm9XxFJrs6S4bzjS9X2pFGjJOka45irppYo5L48VbabnQ4gbl1bvtjMVn7i/kwC8LmHMnbcDYY10LgxrMTng8kALanzBim6YimyBf7uc+3T3edaiOwdfmDPcphmdxBuknrpHTgntMhxHR4TaAyMd5laOI0jd3s8FAXlGG4FQyJyBmetzQGWBOO1l1zhV7bip1x+C5i2N1u3mll8F+qRqcVcGI6sug==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=softfail (sender ip

is 2.42.227.254) smtp.rcpttodomain=doctor.nl2k.ab.ca smtp.mailfrom=gmail.com;

dmarc=fail (p=reject sp=reject pct=100) action=oreject header.from=mail.ru;

dkim=none (message not signed); arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=minsalute.onmicrosoft.com; s=selector1-minsalute-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=uGYmthEZcdCm7ssEKEB5gbotYN4gExVp1YENXtzP/Vc=;

b=MC2MbkKsGClRZYPOoE8kX5Yx1pCpa0G9Qyxht9gBgj0e8YS8Fz8KocZ6K5yL4CuI5oE8AMnF8RxpfFFNl2Ov6JsUw33i/sviHqAIHiqLd/v5h+AhYahoGwV1jnJ8AGIFbiWSwK9+h8ysAcW6H8aIFiUTZNfWHyK4ii2kyhNkxDc=

Received: from DB8PR06CA0044.eurprd06.prod.outlook.com (2603:10a6:10:120::18)

by GV1PR01MB8610.eurprd01.prod.exchangelabs.com (2603:10a6:150:26::10) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6792.15; Sun, 10 Sep

2023 04:54:58 +0000

Received: from DB8EUR05FT015.eop-eur05.prod.protection.outlook.com

(2603:10a6:10:120:cafe::6c) by DB8PR06CA0044.outlook.office365.com

(2603:10a6:10:120::18) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6768.31 via Frontend

Transport; Sun, 10 Sep 2023 04:54:58 +0000

X-MS-Exchange-Authentication-Results: spf=softfail (sender IP is 2.42.227.254)

smtp.mailfrom=gmail.com; dkim=none (message not signed)

header.d=none;dmarc=fail action=oreject header.from=mail.ru;

Received-SPF: SoftFail (protection.outlook.com: domain of transitioning

gmail.com discourages use of 2.42.227.254 as permitted sender)

Received: from mail.sanita.it (2.42.227.254) by

DB8EUR05FT015.mail.protection.outlook.com (10.233.238.127) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.6792.11 via Frontend Transport; Sun, 10 Sep 2023 04:54:57 +0000

Received: from [93.123.118.97] (192.168.188.204) by smtp.sanita.it

(10.17.31.11) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1258.12; Sun, 10 Sep

2023 06:54:56 +0200

Reply-To:

From: Mr Kerry M Morgan

To:

Subject: This is my Second e-mail to you....Read and get back to me..

Date: Sun, 10 Sep 2023 06:54:56 +0200

Message-ID: <20230910065456.C6A07E2640EDA18D@mail.ru>

MIME-Version: 1.0

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DB8EUR05FT015:EE_|GV1PR01MB8610:EE_

X-MS-Office365-Filtering-Correlation-Id: 273be3f0-6603-41aa-9dae-08dbb1ba152f

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 1

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?TElwWG1md3hZQWRKNzNTbFdKN0xmWDBEbWRRQnVVcGQ3WlpnTjlhM2NVQnZW?=

=?utf-8?B?Qzl5cTlqbjErbUNCNEdlNEtDVGYyY21GYitQZjl4b1c5RVByLzIrWG9wSlJN?=

=?utf-8?B?blREQjA3Q2JXa1VpMkt1VGEvenFYbFdYVG5xbkNjNDIwV0VEQXlFWk5jVnZ0?=

=?utf-8?B?TjFmU0R0WDUxWUpycXlMRnMvQWkrTHg1dTdlTHF0NVNWeVhVTDlkSGlDVGpk?=

=?utf-8?B?eVh5SWdrV0xQTi9CRFJobHRIVHVQV0JXR0oyTktBWmVjemZqaEFJNnZLd29N?=

=?utf-8?B?ZEVheGhqbWpGREQxVWJBODBjdDNPL1dGN25hdmxkcUVwTXA3RS9aVlYyczV0?=

=?utf-8?B?bGtJbzFBSkZGY3VFSmJQaHZzYjdMZ1JYS0dSOENpUmJETUY0V2ZEUHBReUhp?=

=?utf-8?B?NWVJWFhtNnlsTG9ucHU5UTJoWFZGdlE5ZHVyVFRlYXVDSUxoMmRIa1Z3Zjdt?=

=?utf-8?B?bDRZYmh2akVGamh2MFF1YnZJSXMvSXpBVTdkUzNNTXZhLzdud2UyWndXR09J?=

=?utf-8?B?cDRoeEpSaUU4UVJVdzh4N04rODMzd3BTWXh6UFYvL01VNmZ2MHI5dzVRV1pZ?=

=?utf-8?B?c3JiK3RBZU4zdWRVd0UrT1NuQmNtWm1aZm5DYXBwSkI0SGhUdWp1d3h3VitG?=

=?utf-8?B?Rk5NVk9NeXNjUCtENjJyZ3pzRGpkUHJlWHhBV3cwdUZzSDlwQmw2Z1h5S2Zx?=

=?utf-8?B?SmVtTE5Yd3VuSW1vMW45OTZGdFp2dDljRkx5SEFkMkV0cWxoZFBuOVc4TjRM?=

=?utf-8?B?ZW83V01Nd0JDMHJtUFVLMC9yOHFTWUtOSWtiSy83Ymd5MlVyL2w1akNZTTJO?=

=?utf-8?B?Z3lzQXcrcElsR0I2akNjQ3JyNE5XdXpHODRWZVg0M3gzTW4xNVBRaWlzWEJX?=

=?utf-8?B?cFAwZjhiYmU4aFZSWW1mdElXSitrMjhOUFV2eXFsU0RkU0FSbzhkY3RMSmMv?=

=?utf-8?B?V3RNOHFFREhXekE0ZFN4b2I5QU9kMm9EeHhvOUppbzhseFBHOFVLUWVWYVla?=

=?utf-8?B?eVg4UURKbUJLdUI0cDhValFkYlkreVlNZXcwY1VPUW42UE9Da1MvV2p0WE9Z?=

=?utf-8?B?WmJXVWdOVjJNbXA4S2Mxcm1kZWJZL3RiMHRyamIvcmFzQXhTQnRBVlF4VWxk?=

=?utf-8?B?bVEyeVIwMmpyK0VLVlpPci9JekxFNG1FaVk1UEI4dlJ5cGNYMTEwa0J4SHZs?=

=?utf-8?B?RDgvNzF2TEFzNWwxTldKMy81NGx3elJQcnZJbWhna2dMMjl0SEg4NndpOXUx?=

=?utf-8?B?eTd3N0MyR3BGTFV5eXlZTCtJd3M2Q2trbld5Z2QzcVdyU1NLWGh1RHhpRisz?=

=?utf-8?B?aVh0ekZnN282TkdVKzJoMGNxOHlJcEowb1NNQksrVEhFWnY2OEtPSGZaeVpF?=

=?utf-8?B?eDdqaUJjd2JiODd2c0xaYmZvSGdVWk04bldOS3l3YXFTRmxreUp0M2hHdG1S?=

=?utf-8?B?NVYzaHlvd2o0ZnZyWXVDekM4VlZjSkgreGIzbFMvUlU2WGxuU1pnaUYzb2Qx?=

=?utf-8?B?RHdrTkRVSFZDdGJGRGw2eXZpTUtaWlYrSVRUQ1pzdGEra2NSbmQ5NzBPdks4?=

=?utf-8?B?aGpFYkJyNlM3NW53MEJlRFFUVkNpblJaNXdFbzhScUlYZ2MxZXRzeEtDaHRa?=

=?utf-8?B?OXowL3lBb3JSUGpuc0huRTRJV0djZHc9PQ==?=

X-Forefront-Antispam-Report:

CIP:2.42.227.254;CTRY:IT;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail.sanita.it;PTR:net-2-42-227-254.cust.vodafonedsl.it;CAT:OSPM;SFS:(13230031)(4636009)(39860400002)(136003)(396003)(346002)(376002)(84050400002)(48200799006)(82310400011)(61400799006)(451199024)(40470700004)(46966006)(2860700004)(498600001)(83380400001)(1076003)(82202003)(26005)(956004)(2616005)(42882007)(103936005)(336012)(2906002)(16576012)(6916009)(6706004)(316002)(70206006)(70586007)(41300700001)(5660300002)(8676002)(8936002)(54836003)(40460700003)(35950700001)(47076005)(40480700001)(36756003)(33656002)(83170400001)(82740400003)(356005)(81166007)(362954009);DIR:OUT;SFP:1023;

X-OriginatorOrg: sanita.it

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Sep 2023 04:54:57.9282

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 273be3f0-6603-41aa-9dae-08dbb1ba152f

X-MS-Exchange-CrossTenant-Id: fc9eabca-a79f-4ec3-8ff0-e84aa80d94fe

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=fc9eabca-a79f-4ec3-8ff0-e84aa80d94fe;Ip=[2.42.227.254];Helo=[mail.sanita.it]

X-MS-Exchange-CrossTenant-AuthSource:

DB8EUR05FT015.eop-eur05.prod.protection.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV1PR01MB8610

X-Spam_score: 10.4

X-Spam_score_int: 104

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Attention: Beneficiary of the fund, We have been commissioned

by the European Investment Bank of London and the IMF to investigate the

reason for the unnecessary delay in legally approved funds. During our investigation,

we discovered [...]



Content analysis details: (10.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.95.73.169 listed in list.dnswl.org]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=EUR04-HE1-obe.outbound.protection.outlook.com;ip=40.95.73.169;r=doctor.nl2k.ab.ca]

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[alexkhramtsov(at)mail.ru]

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

0.0 T_HK_NAME_FM_MR_MRS No description available.

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

0.6 PDS_HELO_SPF_FAIL High profile HELO that fails SPF

1.5 HK_NAME_FM_MR_MRS No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.7 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)

Subject: {SPAM?} This is my Second e-mail to you....Read and get back to me..

X-Antivirus: AVG (VPS 230910-0, 9/9/2023), Inbound message

X-Antivirus-Status: Clean



Attention: Beneficiary of the fund,



We have been commissioned by the European Investment Bank of=20

London and the IMF to investigate the reason for the unnecessary=20

delay in legally approved funds. During our investigation, we=20

discovered that your payment was delayed by corrupt bank=20

employees trying to divert your funds to your personal accounts.



To prevent this dubious act, we have an agreement with the=20

European Investment Bank in London and the International Monetary=20

Fund (IMF) that we can manage and monitor this payment. Avoid=20

desperate situations with banks and other criminal authorities.

We have received an irrevocable payment guarantee for your MFI=20

payment. We hereby inform you that the European Investment Bank=20

has decided to reimburse you the amount of =E2=82=AC3,500,000.00 and=20

transfer it to your bank account by bank transfer.



Please contact us at the email address below the agent

Mr. Kerry Morgan

Email: unitednation.kerrymorgan@yandex.com



You can also send me your WhatsApp number for easy communication=20

or a copy to to Mr. Seiji Yosh my secretary as soon as possible=20

to avoid unnecessary delays. The European Investment Bank must=20

transfer your money to your bank account without delay, processed=20

immediately.



Thanks



Mr Kerry Morgan

unitednation.kerrymorgan@yandex.com