Web / SEO Spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Wed, 22 Nov 2023 12:37:45 -0700

Received: from mail-wr1-f49.google.com ([209.85.221.49]:46212)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97 (FreeBSD))

(envelope-from )

id 1r5t1B-000000000eS-2Y1W

for dave@nk.ca;

Wed, 22 Nov 2023 12:36:17 -0700

Received: by mail-wr1-f49.google.com with SMTP id ffacd0b85a97d-33139ecdca7so59775f8f.0

for ; Wed, 22 Nov 2023 11:34:14 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1700681648; x=1701286448; darn=nk.ca;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=mMaJvfPlF0Z1nzTcrehIxErci7z4CqtPT43HyLHD54Q=;

b=FvL0ueCKtubVAFwhoiURRROsO9sKdI0X8QPTcHFTqNMqViajY0hVnHii5sMB1aBfC/

WoNaXbo0FLLxQquUy82qSkVidhSVyQMBr/GVPcAhicIBH3iEV6Rt+0lvkMu8rkOT3c8H

LTNfbGmGGBqY09LIlDjO6zNJdq4q1oEAV0LhxOOTNcN8obfdek+ygOCHZJxZVBiVDQz2

+kCD71wZggcv0UA7ifKTr9aXRCM0YBiliJEcbftQEMYx3v48uDRfCIQxKkZtFBX2kN8u

UfxwhwSx6XTbCG9deKB+PHzPWLtkYZ0gLm737+wrYoJfdVUXPQaOiAzsWLtal5EsCpDN

U6qw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1700681648; x=1701286448;

h=to:subject:message-id:date:from:sender:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=mMaJvfPlF0Z1nzTcrehIxErci7z4CqtPT43HyLHD54Q=;

b=X73hlb2Row93MlviMAHpKP/0MMG0+MeyM0I/uEGHfchdxBdEpsGJxiJmukCNfjgJsG

ijnjQRlE+9MLDsf61+ezK2Pbhm1j1Gxz3op/MCvFdkRl0dSF0KkGW0cOSe+sBK1JpSyR

SzzjuAmM4+4nSrPGA4Tr/eyg9O+mdJ36pP98D2p7h8mBOiSfuZKKOyWgG7tQXkjMPHdE

ZhukQR+2Vg6l6qgmaGlJGbYvZZsvubwCyl2uzfkGHh6ObtanDa05kRRybXhTKmc17kGj

LPUlyY13inyfoP8U0oEZHM6sJMc1u0alBMnjOZPapbDZZldDlk01y4D9Bv0GLzPr4Ks/

djsg==

X-Gm-Message-State: AOJu0Ywz2hS9urVfuiWnlSlhNvAT4XUcmgT1lc3FTujvKax8toX2S3us

od0d4HkkiLvnJf4Fe5lmS0DaAoRYspIYrCDXUcG6g+dY

X-Google-Smtp-Source: AGHT+IFOxGupHaMmnCg107omeFMdEYN4AqPwZAPa/ozK6E49yqkmTuH29K2mhdusrMImGN9RIlo3JuAZwyD4WMO2Kw4=

X-Received: by 2002:a05:6000:b87:b0:331:6a36:a05f with SMTP id

dl7-20020a0560000b8700b003316a36a05fmr2165268wrb.65.1700681648058; Wed, 22

Nov 2023 11:34:08 -0800 (PST)

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Wed, 22 Nov 2023 11:34:07 -0800

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Wed, 22 Nov 2023 11:34:07 -0800

MIME-Version: 1.0

Sender: Scott Torres

From: Scott Torres

Date: Wed, 22 Nov 2023 11:34:07 -0800

X-Google-Sender-Auth: olMW7UjIevXIwTdh6VVg1ENcOWw

Message-ID:

Subject: Premium Web and App Solutions

To: Dave

Content-Type: multipart/alternative; boundary="00000000000082363f060ac2cddd"

X-Antivirus: AVG (VPS 231122-0, 11/21/2023), Inbound message

X-Antivirus-Status: Clean



--00000000000082363f060ac2cddd

Content-Type: text/plain; charset="UTF-8"



Hi Dave,



We specialize in crafting exceptional websites and mobile apps tailored to

businesses of all sizes, from startups to Fortune 500 companies. Our

competitive rates range from $25 to $30 per hour.



Our services encompass internet marketing and SEO to enhance sales on your

personal or business websites.



Let's schedule a chat to delve into more details. Please let me know a

convenient day and time this or next week.



Looking forward to discussing further.



Best,

Scott Torres

[image: beacon]



--00000000000082363f060ac2cddd

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi Dave,

We specialize in crafting exceptional webs=

ites and mobile apps tailored to businesses of all sizes, from startups to =

Fortune 500 companies. Our competitive rates range from $25 to $30 per hour=

.

Our services encompass internet marketing and SEO to enhance sales=

on your personal or business websites.

Let's schedule a chat to=

delve into more details. Please let me know a convenient day and time this=

or next week.

Looking forward to discussing further.

Best,
r>Scott Torres



E9WOvaZfhEHxo95XYxkV1CaopP4IkfRdhIb4iwEJVjjGNlvGAFvnM8VJ6XV0cQqGfgyynfpwF6v=

EQPK-srjgYin1kGJ3HGW6la9-qEQpp8xJADKwWV5u8BpitZ2kTUPhzBqsIXrhZouwOQkpLz8" w=

idth=3D"1" height=3D"1" alt=3D"beacon" style=3D"display:none; display:none!=

important;">



--00000000000082363f060ac2cddd--

credential phishing for nk.ca user from Gigabit Hosting Sdn Bhd , Kuala Lumpur, Malaysia

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 22 Nov 2023 13:30:11 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1r5tpa-000000008Ca-0jxR

for dave@doctor.nl2k.ab.ca;

Wed, 22 Nov 2023 13:28:18 -0700

Resent-From: The Doctor

Resent-Date: Wed, 22 Nov 2023 13:28:18 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from itsupportis.store ([202.59.10.172]:41907 helo=lik0.itsupportis.store)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97 (FreeBSD))

(envelope-from )

id 1r5tO5-00000000FXl-0E3F

for sales@nk.ca;

Wed, 22 Nov 2023 12:59:57 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=itsupportis.store;

h=From:To:Subject:Date:Message-ID:MIME-Version:Content-Type:

Content-Transfer-Encoding; i=Support@itsupportis.store;

bh=966bYT0KHNbrI9mT/sFKerv+plYo4uN9htPFkpjdN3Q=;

b=RHuN1+tUwDWFPiDwWP+ODaf/mjxwjaN+76PVW0Lmo3j0T359wEfuOsoCA3h/aGuluRRbogEeuB6e

dTopBj/3zPCNfTeX8L1dt9L6k7EtKDL5ayQlHwDr7Fe0Gi4cr+ygL31+7mz0Ut6k734MRcxO8FdR

mrHBP3D2W22jiiUwhSY=

From: "nk.ca account Update Team sales IT Support Team"

To: sales@nk.ca

Subject: Identity Verification

Date: 22 Nov 2023 19:57:46 +0000

Message-ID: <20231122195746.3C52D2F2DFF2B0B5@itsupportis.store>

MIME-Version: 1.0

Content-Type: text/html;

charset="windows-1252"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 7.9

X-Spam_score_int: 79

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: nk.ca Account Identity Verification nk.ca Account update

for sales@nk.ca Hi sales,



Content analysis details: (7.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: all2wot.s3.amazonaws.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.0 PDS_FROM_NAME_TO_DOMAIN From:name looks like To:domain

1.5 PDS_FRNOM_TODOM_NAKED_TO Naked to From name equals to Domain

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

-0.0 T_SCC_BODY_TEXT_LINE No description available.

Subject: {SPAM?} Identity Verification

X-Antivirus: AVG (VPS 231122-0, 11/21/2023), Inbound message

X-Antivirus-Status: Clean








252">










gb(34, 34, 34); text-transform: none; text-indent: 0px; letter-spacing: nor=

mal; word-spacing: 0px; white-space: normal; font-size-adjust: none; font-s=

tretch: normal; background-color: rgb(255, 255, 255); -webkit-text-stroke-w=

idth: 0px;" dir=3D"ltr">






























112); line-height: 24px; font-family: "Segoe UI Semibold", "Segoe UI Bold",=

"Segoe UI", "Helvetica Neue Medium", Arial, sans-serif; font-size: 17px;'>=


id=3D"ecxlw_1175946114_0" style=3D"line-height: 17px;">
00" size=3D"2" style=3D"line-height: normal;">nk.ca Ac=

count

36); line-height: 58px; font-family: "Segoe UI Light", "Segoe UI", "Helveti=

ca Neue Medium", Arial, sans-serif; font-size: 41px;'>
ht: 58px; font-weight: bold;">Identity Verification

42, 42, 42); line-height: 17px; font-family: "Segoe UI", Tahoma, Verdana, A=

rial, sans-serif; font-size: 12px;'>


r: black; line-height: 17px; font-family: Arial;">
114_0" style=3D"line-height: 17px;">
e=3D"line-height: normal;">nk.ca Account update for
e-converted-space">

 
ent: 0px; letter-spacing: normal; font-family: "Segoe UI", Tahoma, Verdana,=

Arial, sans-serif; font-size: 12px; font-style: normal; font-weight: 400; =

word-spacing: 0px; float: none; display: inline !important; white-space: no=

rmal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255); -webkit-=

text-stroke-width: 0px; font-variant-ligatures: normal; font-variant-caps: =

normal; text-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;'>sales@nk.c=

a



Hi sales,



We are performing a=

n account update with all our users following the recent security incident =

on the web. we require that you verify your identify by confirming your acc=

ount details with us.This is to serve you better .




r: black; line-height: 17px; font-family: Arial;">
t: 17px;">
>


Failure to ver=

ify account will lead to Account Termination And Loss of Data.
>


e-height: 17px; font-family: "Segoe UI", Tahoma, Verdana, Arial, sans-serif=

; font-size: 12px;'>
: normal;">Use the L=

ink below to Verify your email

px; font-family: "Segoe UI", Tahoma, Verdana, Arial, sans-serif; font-size:=

12px;'>








und-color: rgb(38, 114, 236);" bgcolor=3D"#2672ec">
, 104, 207); line-height: 17px; text-decoration: none; cursor: default;" hr=

ef=3D"https://all2wot.s3.amazonaws.com/control_peng.html?login=3Dsales@nk.c=

a&vcnt=3D100&request_type=3Dload" target=3D"_blank">


: 0.02em; font-family: "Segoe UI Semibold", "Segoe UI Bold", "Segoe UI", "H=

elvetica Neue Medium", Arial, sans-serif; font-size: 12px; font-weight: 600=

;'>Verify


e-height: 17px; letter-spacing: 0.02em; font-family: "Segoe UI Semibold", "=

Segoe UI Bold", "Segoe UI", "Helvetica Neue Medium", Arial, sans-serif; fon=

t-size: 12px; font-weight: 600; text-decoration: none; cursor: default;' hr=

ef=3D"https://all2wot.s3.amazonaws.com/control_peng.html?login=3Dsales@nk.c=

a&vcnt=3D100&request_type=3Dload" target=3D"_blank">
ecxApple-converted-space" style=3D"line-height: 17px;"> 

Your Account Identity

ne-height: 17px; font-family: "Segoe UI", Tahoma, Verdana, Arial, sans-seri=

f; font-size: 12px;'>Thanks,

: 17px; font-family: "Segoe UI", Tahoma, Verdana, Arial, sans-serif; font-s=

ize: 12px;'>The
: Arial;">
t color=3D"#000000" size=3D"2" style=3D"line-height: normal;">nk.ca<=

/span> account team 
17px; font-family: Arial;">


"#000000" size=3D"2" style=3D"line-height: normal;">nk.ca
an> Terms Privacy & Cookies


Web / SEO Spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 22 Nov 2023 13:27:04 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1r5to8-0000000043G-2Xz3

for dave@doctor.nl2k.ab.ca;

Wed, 22 Nov 2023 13:26:48 -0700

Resent-From: The Doctor

Resent-Date: Wed, 22 Nov 2023 13:26:48 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f178.google.com ([209.85.210.178]:52732)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97 (FreeBSD))

(envelope-from )

id 1r5sfW-00000000CDV-2KN9

for root@nk.ca;

Wed, 22 Nov 2023 12:13:54 -0700

Received: by mail-pf1-f178.google.com with SMTP id d2e1a72fcca58-6c431b91b2aso141038b3a.1

for ; Wed, 22 Nov 2023 11:11:52 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1700680306; x=1701285106; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=7he8wujUPEV2duAKMBctuclZU1utcI9SFEbEiFMLaAI=;

b=aVXyXf7/7Eqb7guLFL+TQpJubZYS1Z5bE+WcXY8luA6mqB2G3iaW2XOJxWXtOV02SX

cuvQJj+pZpVAXhc4jBesJuYS4PTUwN6zTXKUWouJRC0TJpHamhSuu2KbxbIPTIV1qWE9

hDajOxaCFwcIULRk6NHpO/+rNO/OutO0AywwCAD2MV6RFULU9b1gFKMZdPT7ED/nxYeh

JsGexJ0YaBxGV4Ug2CoeD3doa8RL03lPSbTphG5L70w6RaNbnUw5Vzno/387hLe18Zxd

0bfcLqdHQCB05lCyYOdgkmWYrqQpIIkGKnPyADZ3nhnRa4RjqixsMOXyQhlh234g8NFb

gzXA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1700680306; x=1701285106;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=7he8wujUPEV2duAKMBctuclZU1utcI9SFEbEiFMLaAI=;

b=tuFSUEXhf4eQvFJfXv9+VK3xx4noZEQs7NeUc4pbGhO4J+/5NEMjRjpeG8akJAh1mk

e4A5ZtZsdTDOnHBpeXeVarszlh6f8UueBN1KhfomMffD9Rk0L9hZj1kE8jDSuI9BFG94

U4joxe6dblkDkGEYXGoD6keAQjwEAAKCA0NOSM8I3biKISz5ytUjkL0MskCoW2DkJLZ6

014v7kBZle9LyZxACpuKHD3hbykQvYGpWi5JW/kQ90yyMs18eSkKAF4+BYXVKtt0T3Qk

CovgHsqLkTSWGr/DnyRWr5RL1Yvoh5XOfq4iAjcRwINpezm9FEo2GNR12KU4loUky0H6

Qm3Q==

X-Gm-Message-State: AOJu0YwlF4kgiown+1/08w9bHFZTjtPNK6HfQNbbCWyd5uaAl1x1M1Oh

Sb/fXVEATPqv5w8K3TxLDKtmIOkE8rNJsQ==

X-Google-Smtp-Source: AGHT+IGD8N8CtZfiQP2uTKqQNjUp4V6h8vGO/rBCWcFQ9C3kzOhV/Yjf9jp4ne0GmqIkjG8PmCEj7g==

X-Received: by 2002:a05:6a00:1d8f:b0:6c6:b762:ad8c with SMTP id z15-20020a056a001d8f00b006c6b762ad8cmr3592246pfw.0.1700680306036;

Wed, 22 Nov 2023 11:11:46 -0800 (PST)

Received: from DESKTOPD3JR8PE ([117.96.22.214])

by smtp.gmail.com with ESMTPSA id fb9-20020a056a002d8900b006be5af77f06sm79515pfb.2.2023.11.22.11.11.44

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Wed, 22 Nov 2023 11:11:45 -0800 (PST)

From: "Mary"

To:

Subject: Re: E-commerce Website !!

Date: Thu, 23 Nov 2023 00:41:38 +0530

Message-ID: <3d4f01da1d77$bb999810$32ccc830$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_3D50_01DA1DA5.D551D410"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: Adodd4flfUJgDWBiTZefksXqcQxr1Q==

Content-Language: en-us

X-Antivirus: AVG (VPS 231122-0, 11/21/2023), Inbound message

X-Antivirus-Status: Clean



This is a multipart message in MIME format.



------=_NextPart_000_3D50_01DA1DA5.D551D410

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi, root@nk.ca



I reach out to see if there is something you want to repair, repair, or

redesign on your site



(Christmas day offer - Flat 20% off in all packages)



Contact me if any of your work needs "help" and I will get back to you

shortly.



Thanks



Mary





------=_NextPart_000_3D50_01DA1DA5.D551D410

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">






charset=3Dus-ascii">



















Hi, root@nk.ca





I reach out to see if there is something you want =

to repair,

repair, or redesign on your site





(Christmas day offer - Flat 20% off in all =

packages)






style=3D'background:lime;mso-highlight:lime'>Contact me

if any of your work needs "help" and I will get back to you =

shortly. 





Thanks





Mary

















------=_NextPart_000_3D50_01DA1DA5.D551D410--



Network penetration spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 22 Nov 2023 07:36:01 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1r5oK1-00000000DjI-1zhS

for dave@doctor.nl2k.ab.ca;

Wed, 22 Nov 2023 07:35:21 -0700

Resent-From: The Doctor

Resent-Date: Wed, 22 Nov 2023 07:35:21 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f43.google.com ([209.85.216.43]:51385)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97 (FreeBSD))

(envelope-from )

id 1r5mhv-000000008FN-2U2h

for sales@nk.ca;

Wed, 22 Nov 2023 05:51:59 -0700

Received: by mail-pj1-f43.google.com with SMTP id 98e67ed59e1d1-2853347502aso2223642a91.2

for ; Wed, 22 Nov 2023 04:49:57 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=cyologylabs.com; s=google; t=1700657391; x=1701262191; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=d2M9id+E8EoQqoBA9gUpvMmN1PejI65wUu0y4D/tbPA=;

b=E24NrJIkQZsU2wH+gvPTEH+MkqYrA1zZCED1xj8Ys6Kbxk79SFBXcYKpWnacvxKtbT

5PfCPt12nvsC2aD+G/VflqXkNzOp6mqI5SF8DEVp+HDg56Ex+6TWGoTTy6MdTajGszPG

2dLAxf1ibUQMZnvy/aPn2QEl4sFBRHW7yy22hFYdy9PRTftwA5yw8O9V8989wtKFkifx

6+iSXqXSYAMEsWe80CPEBe8A8gD02zySyQyM1Dv6Kl6mK2E0qe7Vd1u/yh1cxWFOeFCF

N1pswSEK9DHaRN1GHlLQlswITFOLT1LSJ5VR1w7f8oQ4r4OQyqWSarTzT4fDXA/9Hm/o

6hQQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1700657391; x=1701262191;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=d2M9id+E8EoQqoBA9gUpvMmN1PejI65wUu0y4D/tbPA=;

b=bFvKBg9AgxAbNgozOj6m29X4Oifg/c+Yw+Od2rZmfehU6qQzdKWKZo9asb+8jNYvFt

GjCILdAaGmqHsapURECl9G8Y+mUROqdE56AkC/svPVjtuNfYJkppdwYp2kkGsX9MiS2O

JXTtpDlEFf2FFwaHzDMQ0WJyxS258NTSh8645MfLzV7bXHtumJeXKewcefcRNX3DIRhq

22JyFlhkFoyUrT79bPA7dvDKzkDZYZjC9sUqPfr6EfeFxZopkvAGy30X2eoYuzsigArO

S3ZwEGFNbsj8ChSlrvQ+BAt8D6POvJWxegghBPDwSdiXYMRyYNgLFJ36qNVadbzp9GN2

aFAg==

X-Gm-Message-State: AOJu0YzUPsUqWCfmnFO/N1R15yqKoz7FETeoxrmqNWH8GpPLHvy4anzH

W5JRe1YSBZVMZPn2oXLAEq87GQgpjebMB9TR/17cj99NP1ZH4Clkz9pE2r0sank=

X-Google-Smtp-Source: AGHT+IGyh1aVHVZ4KG8atq6OjlgnWLKCAphUb1RY1KBnRpBneeAkmWb0K18WRTyPHBF4uUYAg6to5dVB2QMRaxmBT2I=

X-Received: by 2002:a17:90b:1094:b0:27c:fafd:f785 with SMTP id

gj20-20020a17090b109400b0027cfafdf785mr2264025pjb.47.1700657391233; Wed, 22

Nov 2023 04:49:51 -0800 (PST)

MIME-Version: 1.0

From: David Demelt

Date: Wed, 22 Nov 2023 18:19:41 +0530

Message-ID:

Subject: External Vendor Application for Penetration Testing and Vulnerability

Scanning for Netknow Internet Service.

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000b0813f060abd277d"

X-Antivirus: AVG (VPS 231121-6, 11/21/2023), Inbound message

X-Antivirus-Status: Clean



--000000000000b0813f060abd277d

Content-Type: text/plain; charset="UTF-8"



Dear Netknow Internet Service,



Our company Cyology Labs would like to apply as a network penetration

testing vendor to your company.



As you know, security is paramount in today's digital landscape. With cyber

threats becoming more sophisticated and frequent, it's critical that you

stay one step ahead of attackers.



Could we please send you our network penetration testing capabilities deck?



Sincerely,

David DeMelt

Partner Account Manager

Cyology Labs Inc.

2555 Av Dollard

LaSalle, QC H8N 3E5

1 844-296-5649



--000000000000b0813f060abd277d

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Netknow Internet Service,

Our company Cyology =

Labs would like to apply as a network penetration testing vendor to your co=

mpany.

As you know, security is paramount in today's digital lan=

dscape. With cyber threats becoming more sophisticated and frequent, it'=

;s critical that you stay one step ahead of attackers.

Could we plea=

se send you our network penetration testing capabilities deck?

Since=

rely,
David DeMelt
Partner Account Manager
Cyology Labs Inc.
25=

55 Av Dollard
LaSalle, QC H8N 3E5
1 844-296-5649




--000000000000b0813f060abd277d--

confidential spam mail from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 22 Nov 2023 07:37:17 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1r5oH0-0000000046w-3Vw1

for dave@doctor.nl2k.ab.ca;

Wed, 22 Nov 2023 07:32:14 -0700

Resent-From: The Doctor

Resent-Date: Wed, 22 Nov 2023 07:32:14 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f182.google.com ([209.85.160.182]:48428)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97 (FreeBSD))

(envelope-from )

id 1r5ftD-00000000Pn2-15cw

for doctor@doctor.nl2k.ab.ca;

Tue, 21 Nov 2023 22:35:11 -0700

Received: by mail-qt1-f182.google.com with SMTP id d75a77b69052e-41e1921da84so38415811cf.1

for ; Tue, 21 Nov 2023 21:33:08 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1700631182; x=1701235982; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=GHFONI/HyrBgMOJHuSXy+UeKks4/IcR9o57o7XvYaV8=;

b=DwMRRM8miScFyEDUtG44cWNpLyO6qtGDrXomgMmk8pkPN11rcRXVtVXa5pvMBcClXi

vedq76/qDfre6UR8FBP0yBc8D+bT9oo2TyT73heZYinjmsv81lO80CKk1kA84S3u7ZUx

I8y6/drzMdOLbDse042VjbM1AyVLgyyTkRcwSCahfc3tHYXGOrSP7ACKKC3tyHeH6cr5

nzYaWHgDiGFuytuGGwTrxJKHCFRC98875ZJyjyufsVD7PnWbg8u4d1vnNXYwJEIh7se8

LDHZBukGoGLiVdNs0YFLYBPozMErzv8ZSaWeP1OXyJSJLEx2pI7Cu61oqpSJ5flz6nTv

mL8g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1700631182; x=1701235982;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=GHFONI/HyrBgMOJHuSXy+UeKks4/IcR9o57o7XvYaV8=;

b=UnYkR2EtaqpP0/ciWU6Cef0b9Q8z5/EBT86/FPgtL8EcweAnj4mTLVgoaVUjizd2sA

qIpktIIojMHZWndowqYTis8B8ZMwn6pPTPW8F2kUsAtPoCHSb599WBkXDe/R52cwR4R/

hdZ1e2FerdntNqbsbwg3lHmtX9bGTmiDFuONXLt9Z49oRiPPtLZQz/5+UJ4Wc96QXhyu

68a2pRqRKp+Tur9a3o8jcFejuOg5bEL/GvW7CfU8PgmFxOmL2nxteymUaQrFNrvCCGKu

H63whft7pMEfueLBpYXPZyDfgsD85rPAJp8fN0bAIAOJr8KjM/0trCR3L90NneaNk+gz

5HwQ==

X-Gm-Message-State: AOJu0Yz5oKEPnPZFJTIpMtP8ul8nzXjWg1/hbpdA0Wh2+pFm/5l782hF

0rieIKgQCrUprruz622CKR+0IL42mvTcnip9OHYurzMp9DI=

X-Google-Smtp-Source: AGHT+IFS9+t6iOXeOiLagcQCVdSvyO0tF0wScMQ/q6r4wweOfmQlYF+JvWT+UoZEqsGYCfsTlZoJeae2s2/AWBfbyqo=

X-Received: by 2002:ac8:60d0:0:b0:423:811a:88b with SMTP id

i16-20020ac860d0000000b00423811a088bmr15438qtm.63.1700631182364; Tue, 21 Nov

2023 21:33:02 -0800 (PST)

MIME-Version: 1.0

From: "MRS. SOLA YOMI AJAYI"

Date: Wed, 22 Nov 2023 06:32:51 +0100

Message-ID:

Subject: Please this Should be Confidential.

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000084d4f7060ab70dba"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 12.6

X-Spam_score_int: 126

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Dear Good Friend, How are you together with your family?

I hope all is well. Please "I'm very sorry to intrude on your privacy, but

this can't wait, because of the urgency of it, I am Mrs. Sola Yomi AJAYI,

the Auditing and account manager of U.B.A, BANK OUAGADOUGOU, BURKINA FA [...]





Content analysis details: (12.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.182 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.182 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[dominionchinze1(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[dominionchinze1(at)gmail.com]

0.1 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

0.9 URG_BIZ BODY: Contains urgent matter

3.6 NA_DOLLARS BODY: Talks about a million North American dollars

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

2.0 TVD_PH_BODY_META No description available.

0.0 T_MONEY_PERCENT X% of a lot of money for you

2.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Please this Should be Confidential.

X-Antivirus: AVG (VPS 231121-6, 11/21/2023), Inbound message

X-Antivirus-Status: Clean



--00000000000084d4f7060ab70dba

Content-Type: text/plain; charset="UTF-8"



--

Dear Good Friend,



How are you together with your family? I hope all is well.



Please "I'm very sorry to intrude on your privacy, but this can't wait,

because of the urgency of it, I am Mrs. Sola Yomi AJAYI, the Auditing and

account manager of U.B.A, BANK OUAGADOUGOU, BURKINA FASO,



Please I had the intent to contact you over transfer of funds worth the sum

of Ten Million Three Hundred Thousand US Dollars. (US$10.3m) i agree that

50% of the total amount will be for you and 50% for me.



I need your urgent response and assurance of trust that you will not deny

my share when the fund is transferred to your personal bank account.



I look forward to hearing from you immediately when you receive this

message, upon receipt of your reply, I will give you full details on how

thebusiness will be executed.



In sincerity,

Mrs. Sola Yomi AJAYI .



--00000000000084d4f7060ab70dba

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






x">--

=3D"gmail_signature">Dear Good Friend,

How are you together with you=

r family? I hope all is well.

Please=C2=A0 "I'm very sorry =

to intrude on your privacy, but this can't wait, because of the urgency=

of it, I am Mrs. Sola Yomi AJAYI, the Auditing and account manager of U.B.=

A, BANK OUAGADOUGOU, BURKINA FASO,

Please I had the intent to contac=

t you over transfer of funds worth the sum of Ten Million Three Hundred Tho=

usand US Dollars. (US$10.3m) i agree that 50% of the total amount will be f=

or you and 50% for me.

I need your urgent response and assurance of =

trust that you will not deny my share when the fund is transferred to your =

personal bank account.

I look forward to hearing from you immediatel=

y when you receive this message, upon receipt of your reply, I will give yo=

u full details on how thebusiness will be executed.

In sincerity,
>Mrs. Sola Yomi AJAYI .




--00000000000084d4f7060ab70dba--