Harbor Freight phish from Micosoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 02 Jan 2024 10:30:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rKiZg-00000000KiY-1LK5

for dave@doctor.nl2k.ab.ca;

Tue, 02 Jan 2024 10:29:08 -0700

Resent-From: The Doctor

Resent-Date: Tue, 2 Jan 2024 10:29:08 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn1nam02on2080.outbound.protection.outlook.com ([40.107.212.80]:42626 helo=NAM02-BN1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97 (FreeBSD))

(envelope-from )

id 1rKhWu-00000000ChL-3ECd

for root@nk.ca;

Tue, 02 Jan 2024 09:22:16 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=k2pMrfgkevuIUc/vYKjTJaBM642r8u67vICWVvWvqSDFU42vgmg4hUBEkCsUET9qcb3mLCujxm045IX9FPPzadforL9yhhFd3tNmNETULesl1mLU52opWebkd8fLSCnm0EC6fC4drQR8+bDQbUqJxX7PUa0F7+KDwKBqrFAgiXgP4VWONvK5LMjsn+515vJJogpcX2vWU99YllHdACmEilfypCeFI/59EErUcnOCNahtNRcg3+uHdyMJd3/j959kwWKMOHyypQqW5ds87K479Yz2hxYYpINGlNAPAwScYoT0DDaQiSK2+UZ2jRa5TiDqJstRWhxo9hf8eVn/OfDG9w==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=kxajbDdO+q5DNjRQgpRAOpOQ1PIcBAn3M6NWhLe01YU=;

b=TxyyAGPzeClcWAH4u9fEYPjXviABMX7hk9PV2NC9SFtxyNlmVwOztyGfQdFfv74LIyu8OTGGfR78PQHaG9jgrlYXDx2cPvcSCtxKYviXjKa7gA/bjx2MpsfCM46FJejKA649UYY/8BPWK4JDAbqMddKX34p2XK/w1XEek9khIWhc6q4ZXA1DTJgdjFD5jNQczjWNZ+DiwjTf65jVEsA04eZnKd/3vqmHBwwN5iVSsFSogarDQ2IO7o48sj+QcEocl39sSl3tVFgZkssjL5CpflJDvAWz1RvaopiWK2Ps+GsnxiQtnlZaQUPrx/84aXsJxQ69uYTTlrpkW1IHYHj6Rw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

78.46.149.17) smtp.rcpttodomain=nk.ca smtp.mailfrom=fw74778.onmicrosoft.com;

dmarc=none action=none header.from=fw74778.onmicrosoft.com; dkim=none

(message not signed); arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=fw74778.onmicrosoft.com; s=selector1-fw74778-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=kxajbDdO+q5DNjRQgpRAOpOQ1PIcBAn3M6NWhLe01YU=;

b=nnhCCtnwtDNgJL47wCw+80dFhVM8yI81bqh4y/HVtXArjFZEVonxMXjnJSEm9K0NcrXGFL6EVJqdKlvT3NBnnae1P1t3R926XeOjp8x41FOqudqlR/PiGr7xALKnNpc5FkVeAdPcVTfawnC/LrYAArheTEPlNiH72HsFce9yR3sTRamT1UQi2IczAZha6U66S4H3+jTr9lInBCt+XjJEJAZgOW7PcqIkJRWWSGvtHyKKmeRc86BShpaEAsyDjF859SqeUPZYQJ5aHePnh+1LVUEWKPAUtBLSv4gZ53pbAhUtjFMgwgvuBRnv3K/MArFlmXw8+uxjH03A/lBZQjGStQ==

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 78.46.149.17)

smtp.mailfrom=fw74778.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=fw74778.onmicrosoft.com;

Date: Tue, 02 Jan 2024 17:15:48 +0100

Subject: =?UTF-8?B?WW91IGhhdmUgd29uIGFuIFBpdHRzYnVyZ2ggTWVjaGFuaWMgVG9vbCBTZXQ=?=

Content-Type: text/html; charset="UTF-8"

MIME-Version: 1.0

From: =?UTF-8?B?SGFyYm9yIEZyZWlnaHQ=?=

Importance: high

Content-Transfer-Encoding: 7bit

In-Reply-To: <2VDkuretc0Ber3UmZTLTUCZcQD6Wms@mLPuMdrxkA.fw74778.onmicrosoft.com>

CC: root@nk.ca

X-TOI-MSGID: <1063958650.74A810259C49D.1704212148848@goldner.net>

To: root@nk.ca

Message-ID:



X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: CY4PEPF0000E9CD:EE_|CY8PR07MB9428:EE_

X-MS-Office365-Filtering-Correlation-Id: c5224b62-7a1a-49d7-9d20-08dc0baec427

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:78.46.149.17;CTRY:DE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.goldner.net;PTR:static.17.149.46.78.clients.your-server.de;CAT:NONE;SFS:(13230031)(376002)(136003)(396003)(39860400002)(346002)(230922051799003)(82310400011)(451199024)(186009)(7200799017)(1690799017)(64100799003)(61400799012)(36840700001)(46966006)(40470700004)(558084003)(19625305002)(2906002)(8936002)(8676002)(4326008)(316002)(6916009)(42186006)(8400799017)(786003)(67280400001)(86362001)(5660300002)(478600001)(31696002)(40460700003)(40480700001)(41300700001)(9686003)(26005)(336012)(166002)(47076005)(70206006)(70586007)(81166007)(82740400003)(41320700001)(36860700001)(18963002)(15913002);DIR:OUT;SFP:1101;

X-OriginatorOrg: fw74778.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Jan 2024 16:20:41.9788

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: c5224b62-7a1a-49d7-9d20-08dc0baec427

X-MS-Exchange-CrossTenant-Id: cf8e0fc4-379f-4956-955b-8d3e8197e989

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=cf8e0fc4-379f-4956-955b-8d3e8197e989;Ip=[78.46.149.17];Helo=[mail.goldner.net]

X-MS-Exchange-CrossTenant-AuthSource:

CY4PEPF0000E9CD.namprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY8PR07MB9428

X-Antivirus: AVG (VPS 240102-4, 1/2/2024), Inbound message

X-Antivirus-Status: Clean









(1) Notifications
























Dating solicitation spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 02 Jan 2024 08:55:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1rKh6N-000000001Mv-2ovx

for dave@doctor.nl2k.ab.ca;

Tue, 02 Jan 2024 08:54:47 -0700

Resent-From: The Doctor

Resent-Date: Tue, 2 Jan 2024 08:54:47 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vi1eur04olkn2021.outbound.protection.outlook.com ([40.92.75.21]:62722 helo=EUR04-VI1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97 (FreeBSD))

(envelope-from )

id 1rKgeW-000000002nz-2A2a

for doctor@doctor.nl2k.ab.ca;

Tue, 02 Jan 2024 08:26:06 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=anaDdjObR+PhwgKjuLMMaoS7XrB+OMWuaItqmcG40WJ2JQjMHkU6xaoIOsTZB0xJecTwTT3EZEh8HTUM9MaYM3aIlZrdu6ECPfhovuqtQBIpeogtK7xkEIPXqPtiyx+vlfw44YwYImAVRYAj6zgJ4cbqOpaYlVE/yGBOlOvp3/T5QeDgUbWFJ/IEEj17CRjdQproYMpy9eP+ccxsnbfzRTlI/fUNermrqE/6SZQWpNOfOrDKE6u3J7swc2HO1gFzion1PdBh2MPBQiaeuj79x6qz9BrAyjw7Ae8Kpyh2kMC3vcTnhFwG22oipqEoq0R1uaGZ9BP8RJQgLFb6wq+P4g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=jwaC+eBUbej3qoJ6NMb9aGtmLwYde0euHicvriGVve4=;

b=a0TyqoCWfJjM8Fe9uEGeyzsDvVTVHuDoEH/tZLLqPa/Cs+641ZLrLUT4MX3pSDqMrAaVo/RO0hvtaX2N1IIiRZ6O0ZdTUCMS5OXsAarj33Vg4vVDZ5EZ6dDq958hC9SzgC/w+xuRILpOqSPmEaGrc1yXb1fPLYLHYglOlfgK9sMO2CdrQW6vffgvkTEkzRv/rKh0VgGuiVSDCtOWCehHNwbyUlm4Spa8UgWwCLwVfF68Ivh0/3+UNJfqOMwnNaM9O4mt22Dv0j5pHORScEl89xXoab93KWC6tXFtmPLl14DTdww03BkctpoUCp3vbLBNkXbWtpjUhFPExs0z7Sfitw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=jwaC+eBUbej3qoJ6NMb9aGtmLwYde0euHicvriGVve4=;

b=bkTrC6hAum+0CZB4m796NCEdi6qM/UIQZ/Bi6Xa+u3VPFO2MTuiQkpS9NAeqhmb1RfoA1lXu2yCdrs0sLlRGdjC689V9Uct4u6DItzvnXrjcOvpynKfeSajiAy4Lply5X0xyFU9cZg5HtwXyIXZL8HCSUFQUZrbH7FZu8fLBJsxqPrA5exhfz5wdb1aCpANfA3VGhvu3lsJixhff3DuXLQ2WsChofnsRkB99Dp2H+ubISmjkQS1Ny/SK95TfPse5ThVsyn2eOZKiNIui3QIZZfgcRvJgPDMy+PvLNuf3HX846I+neRLXCCM6m6h6RCeEUScb9SFKxZsFWPWI8lYF5g==

Received: from AM6PR02MB5365.eurprd02.prod.outlook.com (2603:10a6:20b:90::14)

by AS4PR02MB8335.eurprd02.prod.outlook.com (2603:10a6:20b:516::5) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7135.25; Tue, 2 Jan

2024 15:24:26 +0000

Received: from AM6PR02MB5365.eurprd02.prod.outlook.com

([fe80::d881:9e53:d9a7:2eeb]) by AM6PR02MB5365.eurprd02.prod.outlook.com

([fe80::d881:9e53:d9a7:2eeb%6]) with mapi id 15.20.7135.023; Tue, 2 Jan 2024

15:24:26 +0000

Content-Type: multipart/alternative; boundary="===============7244083422354224171=="

Subject: New match request

From: Datefinder

CC: Datefinder

Date: Tue, 2 Jan 2024 15:24:11 +0000

X-TMN: [6iBvvefUUjs461V7wSv9vyk6atgok4Uc]

X-ClientProxiedBy: FR2P281CA0113.DEUP281.PROD.OUTLOOK.COM

(2603:10a6:d10:9d::8) To AM6PR02MB5365.eurprd02.prod.outlook.com

(2603:10a6:20b:90::14)

Message-ID:



MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: AM6PR02MB5365:EE_|AS4PR02MB8335:EE_

X-MS-Office365-Filtering-Correlation-Id: 00e03e6a-9cd5-49c7-b562-08dc0ba6e68b

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?THRZMWg2ZUphMWU3YkxXYkJFZWF1dGN1OEdrSGVYQjY0enZsT1VZUm5aT05S?=

=?utf-8?B?NlFEaExwZkdSM2wwWEQweHJHT0J0NTBqN2lkcjlITXp1SzIwczVZN1grSE5R?=

=?utf-8?B?M0ZOZlQ3VUpKSDZESTkrTWE1aGJ6Nm9TN1A0L05GTDRqZEZwbWpzbGZ6VGdN?=

=?utf-8?B?TXFFemtZN0NISEY4cm56cDYrRS9JZnRBcnpsS3B4dk9yL0dvalZuS1Rpckls?=

=?utf-8?B?Tklab3ZDSTNFVEJseWdpZXpCVHFTT3RoVDI4RGdmNnRuL1pRSVZyRk8rNVJY?=

=?utf-8?B?MmU3cWdQNFBwVWJCcy9LalQ2RmkvMTY4MEE2L2JsR0RqKzFuemY0dmJWVGlQ?=

=?utf-8?B?MUZyOVJYaEFzTElFaGhLVjNLWStVajdVcUFieS9kQ2QxU2k3dEM5Vmgrb2Mz?=

=?utf-8?B?ODhGWW1nNk1KNUZaZnM1YU9haWVnVXRCbFNQdncwM2x4OFNBL2xmRVFHclB0?=

=?utf-8?B?M1krUnVzeVc4anY5aWlvNUgyVmRLSGpMNlNYNDRwOTduWGdlbU9EdG93eFZi?=

=?utf-8?B?K1JSbDdzWmZ2b01tbSt2VVYvQnVZUVJSQjRlUjlyeG9mam5jdXdiMlFrZ2pa?=

=?utf-8?B?dXhUUUtMelVMVWIvVXVERTgwN1ZGQ2ZPRTZoWDM0c0NBOTYxR0h0aTV6S3F0?=

=?utf-8?B?elFBbm1Lc1FNWEp1SFp0MmlTZlltcENxcUt1MWVETE82VjhjWm54ci9hMnpz?=

=?utf-8?B?RDdsVlQ0ZG5PUGZNNG5iNmZ4Z0NKd3JvdFFPNGN4Q3VhejhjbE1LdmFTVkNn?=

=?utf-8?B?Q1Rjd25QalF2UTUrM3NDZGJ2RnB6MU1xZWNjK0g0eGFaVGlmOU1vOHpMM2F6?=

=?utf-8?B?a29OUVRWYkJJenQ1cEN2VHZXanFCRlE3MSsvVi8zaDFGbm1BRGo1TzBTWVJ5?=

=?utf-8?B?dmtnUzNqelRMTmxLRk5OVkk2QXFSNUIxdU9vUVpHMGp2VEVXZjlONFFMQW51?=

=?utf-8?B?dzlUVlQzN2JsTUZSVFNkbUhwdTQ1d2hxaGVQK29WelZ2alhBYm9LRWJURlNa?=

=?utf-8?B?NTBrUXRPaGpjYit4L04zZzhLN0FRNk9jK2hPd0dPcXlkdmRvTDVzSUxNdXlF?=

=?utf-8?B?SjFaaUhyb3FLdmw3OEhGbUl0TWJJdXhQTmJjd0Vvdm1PS2txbHhHNTBsYmRt?=

=?utf-8?B?Q0p2eVI3UmRWZzd1R2VCYVF2VFBYblBuZjQ0SEpHMkM5MDdCQUp4eWtzdzZZ?=

=?utf-8?B?SUg1ejE2V20xYnp2emNaZXRVT2t2NXgvSGU4ME9DbHVoMUhwVXUrU2RDN0ZF?=

=?utf-8?B?N1RKbmZlM2ZDY0s4eTUyZGY4ZEhqT3NGUVNCQk8xQWwrWis3d0hjLzRqS2pa?=

=?utf-8?B?OUZBem1ENExCSXVqdGRsRUVvUW5EeVJyVE82RExWWW5EakhTaXk2VTUzU2xi?=

=?utf-8?B?czBISmt1bjdWbDI4RDREQXVkT0Vwdnc3TlJSdE8zVUVwTHVOV0h5bUxOZ1FI?=

=?utf-8?B?bWNJY3V3ODBPYjlTeXZmS0tscnVJYitNWDJQWUQwS3BFTWVpcnE1djVRNWhx?=

=?utf-8?B?d0VBS3Vwb0x4UERRaEtObm9FOE9YbWF2MFF3VGZ2Rmp5akRSd3d3bnJCeW84?=

=?utf-8?B?OHpZL0E1ejMyTGV5WVd3dnluOHpiU01RUU9LdnZLUWVmRjNwM0ZvQ21VUGdW?=

=?utf-8?Q?KWM0nhZW1wDk+SO1soa8zvLNgofhjKMq/uvaanwP4/gI=3D?=

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?cENVSlV3d2dWTHNyVmdnUDc3S2o0OUZzOTludkM2OFlhcHMvUVlYOEp0eFdT?=

=?utf-8?B?dzhnZGc0STVWU1c3eGFLd3U4bkQ2TEhrU1JhRmIwMFRkdHl1TzI5S0NkZHNF?=

=?utf-8?B?b2RIV1N5S2t6M1FWWCtCdkJqeklGb2Jzdm5MYlZoSVpDeEdteTEzdlR5RjZL?=

=?utf-8?B?SkRNbkFXVDRBVUt1TkoxYnlhQXRjeXNENERtTlE4eWFYam5lMlJZTjB6alRT?=

=?utf-8?B?YjdSODd2MkJrN0RqM0FJUFEwTzFvVjhMVnM4RnJiV2xJVlZuV28rNU40Q3g0?=

=?utf-8?B?SHlFR3ROZC96ZDFFVlhZbEJVYm1US1E5aHVJVm1uVFRTcC82SENkbGpjayt6?=

=?utf-8?B?R01lQXU0aTFSVEZRVVBhd1B4TXRML2Y0dzBweSt0ZXFrZ1hGekhtblZLcjBO?=

=?utf-8?B?RGdoS0tLYjlVVW9vaE5tUmJZSzluQ3RYVVk2RU9TdlFaSGJjTVB0L3lFMEpk?=

=?utf-8?B?Uk5UYURaK1I5R3ltdEEydE54bWpqSnZ5N1huVFJZTWtOSlJZdTE1cGxCaEM3?=

=?utf-8?B?N0cwNmUwMWg5d25SN2w5VDBIcGZSTWc4NUFtdjU4OUs2dXdEeUhrOHVFdURM?=

=?utf-8?B?SWNFRUxZK0FENGNiU1FzSVJBeWRiN3Y4dTZ0ZzB5dVdnbkNjdEJLNExIZ1VB?=

=?utf-8?B?b0xFbGxJaHk5VkFEdk9KNUZONVY3Mjc1eDEzcFpwckxFRkZEQ1NjSE1IMFVF?=

=?utf-8?B?c1l2YmNjMytHRDNKdUNjWDNqRGNwZk9XQ2RCTXAxWlh1bG9BUkloblBlNW8r?=

=?utf-8?B?THNVTkdjeEpkc1h6MFpBemVEb1ZHUDFXbnpOUGZoRFZsMkEzN0tjVlF1ZStP?=

=?utf-8?B?R1JqdUd0TDQ4UG05OHgwZkpBWEtUZkxlNkNmdXVadk1lSWZVZ0x6K1dNV2pG?=

=?utf-8?B?bjFQNGt3L3BvYVJEQXZZcGJFV0c2SDdYb3Jac0xFWHYxMUpUSzBWSW04UFRy?=

=?utf-8?B?RVdZdUpWU1YzWFdQaVYvdmRHam8xd3h3NmkvZHhLWXdTV1lZdUNpbHY5dzRy?=

=?utf-8?B?cGRDeDlvc0l2R24vTW90Y0o2aUFzenp1cEpjQlI3bVp4aVV2M3FpcVpDZUVN?=

=?utf-8?B?eUNrc1A3WkVwaW9oYkJXYWJBd05nWUdieUNWTExwbEtjZE9qSGZHeTFaOEcx?=

=?utf-8?B?ZmpROFpPRERzRFJzZStiSkVYMExoSE9nNlcrVC90Z0xnLzRIcFNCKzdiU1R2?=

=?utf-8?B?bFVyaVZRaTBNelVvRWh2S2djY3RpLzUrLzg0SzFKRlZzeEpiRkRHd1BhUHVS?=

=?utf-8?B?NzNTd3ZCZ2cxRHBTa2lla0hMRGhrazlMZ0luR2RyQnJMT3Y0Sy9wM1EvUmFY?=

=?utf-8?B?TlZoOHQybkdvWXEzcm9jemk0Skljb2hOZFp2RUh4bU51RVg5ME4zOG92dkNt?=

=?utf-8?B?VVNSOERTa3U4ZTFSRVU2QkVUYjNZMFBhbGMrU0pyK0RFN3NCdnM0WVZIS2g1?=

=?utf-8?B?Q3JwWFI5N2phVVFuTlpRcXhURXpyVDhzT25ucGU2RUQ4WHF3Z1hCMG83d3JN?=

=?utf-8?B?SWNDZzZtU2kySk5mWlZNZmdTeUhXTVdQVDdqS3ZLcVhkQkVsY1p2S1piUURV?=

=?utf-8?B?bUNMOFBOdkZBRU1SRXdNRlBNWCtmdHFzMkk5dUI5TVkzTmZSU2V0aFFSNElT?=

=?utf-8?B?eU9GQk4zQzB4RzhvSWtNemRpUHVmNEpXVzhHTVMrdDFjNmI2RkU0NmVUeE5J?=

=?utf-8?Q?SIcwL7XphnfvQgjglMAz?=

X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-ab7de.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: 00e03e6a-9cd5-49c7-b562-08dc0ba6e68b

X-MS-Exchange-CrossTenant-AuthSource: AM6PR02MB5365.eurprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Jan 2024 15:24:26.0255

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS4PR02MB8335

X-Spam_score: 9.5

X-Spam_score_int: 95

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Take advantage of the holiday offer and create your account

today by clicking this link - completely free! Below, you can find the best

recommendation for you, based on your location. Browse profiles and choose

your best match.



Content analysis details: (9.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.75.21 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.75.21 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[christopherthomson0m2(at)hotmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[christopherthomson0m2(at)hotmail.com]

1.2 MISSING_HEADERS Missing To: header

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} New match request

X-Antivirus: AVG (VPS 240102-4, 1/2/2024), Inbound message

X-Antivirus-Status: Clean



--===============7244083422354224171==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



PG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJz

ZXQ9dXRmLTgiPjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+Jm5ic3A7PC9wPgoKPHAgc3R5

bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjIwcHgiPjxzcGFu

IHN0eWxlPSJmb250LWZhbWlseTpBcmlhbCxzYW5zLXNlcmlmIj48c3BhbiBzdHlsZT0iY29sb3I6

IzAwMDAwMCI+PHN0cm9uZz5UYWtlIGFkdmFudGFnZSBvZiB0aGUgaG9saWRheSBvZmZlciBhbmQg

Y3JlYXRlIHlvdXIgYWNjb3VudCB0b2RheSBieSBjbGlja2luZyB0aGlzIDxhIGhyZWY9Imh0dHA6

Ly9zaG9ydHVybC5hYy83Y2g3biI+bGluazwvYT4gLSBjb21wbGV0ZWx5IGZyZWUhPC9zdHJvbmc+

PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj4m

bmJzcDs8L3A+Cgo8cCBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXIiPjxzcGFuIHN0eWxlPSJmb250

LXNpemU6MTRweCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFsLHNhbnMtc2VyaWYiPjxz

cGFuIHN0eWxlPSJjb2xvcjojMDAwMDAwIj48ZW0+QmVsb3csIHlvdSBjYW4gZmluZCB0aGUgYmVz

dCByZWNvbW1lbmRhdGlvbiBmb3IgeW91LCBiYXNlZCBvbiB5b3VyIGxvY2F0aW9uLjxicj4KQnJv

d3NlIHByb2ZpbGVzIGFuZCBjaG9vc2UgeW91ciBiZXN0IG1hdGNoLjwvZW0+PC9zcGFuPjwvc3Bh

bj48L3NwYW4+PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj4mbmJzcDs8L3A+Cgo8

cCBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXIiPiZuYnNwOzwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFs

aWduOmNlbnRlciI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxOHB4Ij48c3BhbiBzdHlsZT0iZm9u

dC1mYW1pbHk6QXJpYWwsc2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPkJl

bG93IHlvdSBjYW4gc2VlIG9uZSBvZiBvdXIgbWVtYmVycywgbWFyaWEzMS48L3NwYW4+PC9zcGFu

Pjwvc3Bhbj48L3A+Cgo8cCBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXIiPjxzcGFuIHN0eWxlPSJm

b250LXNpemU6MTMuOTk5OTk5OTk5OTk5OTk4cHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpB

cmlhbCxzYW5zLXNlcmlmIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMDAwMCI+PHN0cm9uZz48aW1n

IHNyYz0iaHR0cHM6Ly9saDctdXMuZ29vZ2xldXNlcmNvbnRlbnQuY29tL2xkalFRM1EwUHVWZno2

WkZ2QXh4S01QcnFIUnpwSW54ZXhCTEk3cmhWWFZPbHZ4RzM4OW9ocWxldWFPTmlsZmNxUTcyQmtW

SURLWHFxa3pWWUpjcjJMczJxclF5X1ZEOUtBZ2d6MGxEcXA1UjRUUnV6d1VwM1VWMTRNQVFwVUJ2

aUUzbFk2bGl4Yk4yWmh0dDc0bWZSOW8iIHN0eWxlPSJoZWlnaHQ6NjI0cHg7IHdpZHRoOjYyNHB4

Ij48L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3A+Cgo8cCBzdHlsZT0idGV4dC1hbGln

bjpjZW50ZXIiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMuOTk5OTk5OTk5OTk5OTk4cHQiPjxz

cGFuIHN0eWxlPSJmb250LWZhbWlseTpBcmlhbCxzYW5zLXNlcmlmIj48c3BhbiBzdHlsZT0iY29s

b3I6IzAwMDAwMCI+PHN0cm9uZz5NYXJpYSDwn4y5PC9zdHJvbmc+PC9zcGFuPjwvc3Bhbj48L3Nw

YW4+PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3BhbiBzdHlsZT0iZm9udC1z

aXplOjEzLjk5OTk5OTk5OTk5OTk5OHB0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6QXJpYWws

c2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPjxzdHJvbmc+bWFyaWEzMSBv

biBkYXRlZmluZGVyPC9zdHJvbmc+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9wPgoKPHAgc3R5bGU9

InRleHQtYWxpZ246Y2VudGVyIj48YnI+Cjxicj4KPGEgaHJlZj0iaHR0cDovL3Nob3J0dXJsLmF0

L2dxUVM4IiBzdHlsZT0idGV4dC1kZWNvcmF0aW9uOm5vbmUiPjxzcGFuIHN0eWxlPSJmb250LXNp

emU6MThwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFsLHNhbnMtc2VyaWYiPjxzcGFu

IHN0eWxlPSJjb2xvcjojMTE1NWNjIj48dT5EYXRlZmluZGVyPC91Pjwvc3Bhbj48L3NwYW4+PC9z

cGFuPjwvYT48YnI+Cjxicj4KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxOHB4Ij5EYXRlRmluZGVy

IC0gWW91ciBHYXRld2F5IHRvIE1lYW5pbmdmdWwgQ29ubmVjdGlvbnMhIERpc2NvdmVyIHRoZSB3

b3JsZCBvZiByb21hbmNlIGFuZCBjb21wYW5pb25zaGlwIG9uIERhdGVGaW5kZXIsIHdoZXJlIGdl

bnVpbmUgY29ubmVjdGlvbnMgaGFwcGVuLjwvc3Bhbj48L3A+Cgo8cCBzdHlsZT0idGV4dC1hbGln

bjpjZW50ZXIiPjxicj4KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxOHB4Ij5VbmxlYXNoIHRoZSBw

b3RlbnRpYWwgb2Ygb25saW5lIGRhdGluZyB3aXRoIG91ciBkaXZlcnNlIHByb2ZpbGVzIGFuZCBw

ZXJzb25hbGl6ZWQgYWxnb3JpdGhtcywgY3JlYXRpbmcgYSB1bmlxdWUgYW5kIGZ1bGZpbGxpbmcg

ZXhwZXJpZW5jZS48L3NwYW4+PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48YnI+

CjxzcGFuIHN0eWxlPSJmb250LXNpemU6MThweCI+Sm9pbiB1cyBub3cgdG8gZW1iYXJrIG9uIGEg

am91cm5leSBvZiBleGNpdGluZyBwb3NzaWJpbGl0aWVzIGFuZCBmaW5kIG1vcmUgdGhhbiBqdXN0

IGEgbWF0Y2guPC9zcGFuPjwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PGJyPgo8

c3BhbiBzdHlsZT0iZm9udC1zaXplOjIwcHgiPjxzdHJvbmc+Q3JlYXRlIHlvdXIgcHJvZmlsZSBh

bmQgc3RhcnQgeW91ciBhZHZlbnR1cmUgb24gRGF0ZUZpbmRlciB0b2RheSE8L3N0cm9uZz48L3Nw

YW4+PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj4mbmJzcDs8L3A+Cgo8cCBzdHls

ZT0idGV4dC1hbGlnbjpjZW50ZXIiPiZuYnNwOzwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNl

bnRlciI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxOHB4Ij48ZW0+WW91ciBsb25lbHkgZGF5cyBt

YXkgYmUgb3ZlciBzb29uLiBUYWtlIHRoaXMgY2hhbmNlIGFuZCBzdGFydCB0aGUgYWR2ZW50dXJl

IG9mIG1lZXRpbmcgYSBuZXcgcGVyc29uLCB5b3UgbmV2ZXIga25vdyB3aGVyZSBpdCB3aWxsIHRh

a2UgeW91ITwvZW0+PC9zcGFuPjwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+Jm5i

c3A7PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3BhbiBzdHlsZT0iZm9udC1z

aXplOjE4cHgiPllvdSBvbmx5IGxpdmUgb25jZSwgc28gZG9uJ3Qgb3ZlcnRoaW5rIGl0ITwvc3Bh

bj48L3A+Cgo8cCBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXIiPiZuYnNwOzwvcD4KCjxwIHN0eWxl

PSJ0ZXh0LWFsaWduOmNlbnRlciI+PGJyPgo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjE0cHgiPjxz

cGFuIHN0eWxlPSJmb250LWZhbWlseTpBcmlhbCxzYW5zLXNlcmlmIj48c3BhbiBzdHlsZT0iY29s

b3I6IzAwMDAwMCI+RG9u4oCZdCB3YW50IHRvIHJlY2VpdmUgYW55IG1vcmUgZW1haWxzPzwvc3Bh

bj48L3NwYW4+PGJyPgo8YnI+CjxhIGhyZWY9Imh0dHBzOi8vc2hvcnR1cmwuYWMvN2NoNmkiIHN0

eWxlPSJ0ZXh0LWRlY29yYXRpb246bm9uZSI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFs

LHNhbnMtc2VyaWYiPjxzcGFuIHN0eWxlPSJjb2xvcjojMTE1NWNjIj48dT5VbnN1YnNjcmliZSBo

ZXJlPC91Pjwvc3Bhbj48L3NwYW4+PC9hPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpBcmlhbCxz

YW5zLXNlcmlmIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMDAwMCI+Ljwvc3Bhbj48L3NwYW4+PC9z

cGFuPjwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PGJyPgombmJzcDs8L3A+Cg==



--===============7244083422354224171==--

Mechanic Tools set phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 02 Jan 2024 07:11:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1rKfTf-000000001TI-0Q1C

for dave@doctor.nl2k.ab.ca;

Tue, 02 Jan 2024 07:10:43 -0700

Resent-From: The Doctor

Resent-Date: Tue, 2 Jan 2024 07:10:43 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-sn1nam02hn2235.outbound.protection.outlook.com ([52.100.159.235]:52255 helo=NAM02-SN1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97 (FreeBSD))

id 1rKdJA-00000000NQu-1NWJ

for doctor@doctor.nl2k.ab.ca;

Tue, 02 Jan 2024 04:51:49 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=OFIIkV04cPh7Ym46zzkD0mmXOh7XHaWn63A8MqV0Sdw+atxKkJqoEyUdmc19GUzIvlRLItEDne4SwwlOwUglbDRXCUIgxUG1v9ZJ9+d/qEHlYo1afeBGor1z8gsa1ADDv8l0Fipb+9LyiUlKBiLSntY/jpbtX92z1O+4lOWsVgQCj4LfiN/LRKiaGd5E+zE/0naZ30T0gDFSFRk5yZWHc0JpvssQB2psIEmPgF47M7QMPlC7xzQkl3MUHQnW5Zr47L3uvNNML6QsYYtQ8dNtRDNCkh3kycDrpvoJNZ+mXJ02WpjySFIWUXN37RBXwpC3/DSVhOO7Us7tMHr0fIfrXw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=MC78I9Q5YmM5PDryJFREJ5tJMMsWlL3FNT+docx8cPY=;

b=YTqOTqfy1a9G2qrGcV596IWsMd2icmZE3bX6uZoW2W0DP5osQjDIJxBTpZxuaYHl2za/jlNwPbHzwt0xr7I/i2poUPicfT69Pnv2PG7XNBVJcJx1Tj3v1Bxs8TMCxRpJv6D3I7uyMhziD4WFu29/xihcF1fYsV/MjsSgcGfFnJaCJFGnrVs0ZWIcwF3mgvJcKydEW8bCGbZvobh9ciFzyfuPD0H5c+gy7U4a3lR8mwT82dUsCrk6aTOq6W06VHBTzHfxQF1ewxbwtt1Eydc7mqQRUckVqefdKSu5C8FlnstW7phIjUkELbz7rQrxq6+Z06mrQL/Jml0IsPTwtVJVEQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is

192.155.93.204) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.helo=mail.thompson.com; dmarc=none action=none

header.from=3ow5edrn42jm.onmicrosoft.com; dkim=none (message not signed);

arc=none (0)

X-MS-Exchange-Authentication-Results: spf=none (sender IP is 192.155.93.204)

smtp.helo=mail.thompson.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none

header.from=3ow5edrn42jm.onmicrosoft.com;

In-Reply-To:

Content-Type: text/html; charset="UTF-8"

From: =?UTF-8?B?RGVhbHM=?=

X-TOI-MSGID: <1348308374.0F5F6A2DCD55B.1704196121107@thompson.com>

Date: Tue, 02 Jan 2024 12:48:41 +0100

To: doctor@doctor.nl2k.ab.ca

Subject: =?UTF-8?B?WW91ciBjaGFuY2UgdG8gcmVjZWl2ZSBhIEZSRUUgUGl0dHNidXJnaCBNZWNoYW5pYyBUb29sIFNldA==?=

Importance: high

Content-Transfer-Encoding: 7bit

MIME-Version: 1.0

CC: doctor@doctor.nl2k.ab.ca

Message-ID:

<9be35cfd-c58c-4fb0-8980-da967734d23c@DM6NAM12FT116.eop-nam12.prod.protection.outlook.com>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DM6NAM12FT116:EE_|CYXPR08MB9295:EE_

X-MS-Office365-Filtering-Correlation-Id: 1c7a1d21-4e4f-4fbe-439b-08dc0b88f921

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:192.155.93.204;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.thompson.com;PTR:192-155-93-204.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(346002)(376002)(39860400002)(396003)(136003)(230922051799003)(1800799012)(64100799003)(82310400011)(1690799017)(7200799017)(451199024)(46966006)(31686004)(41320700001)(558084003)(40480700001)(8400799017)(70206006)(6916009)(9686003)(70586007)(31696002)(336012)(166002)(81166007)(42882007)(34020700004)(17440700003)(41300700001)(26005)(47076005)(67280400001)(2906002)(5660300002)(19625305002)(4326008)(498600001)(316002)(82740400003)(35950700001)(8676002)(42186006)(786003)(78352004)(8936002)(27303002);DIR:OUT;SFP:1501;

X-OriginatorOrg: 3ow5edrn42jm.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Jan 2024 11:50:10.1838

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 1c7a1d21-4e4f-4fbe-439b-08dc0b88f921

X-MS-Exchange-CrossTenant-Id: 996fe34f-a6c1-47c2-90c4-af43d614eed4

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=996fe34f-a6c1-47c2-90c4-af43d614eed4;Ip=[192.155.93.204];Helo=[mail.thompson.com]

X-MS-Exchange-CrossTenant-AuthSource:

DM6NAM12FT116.eop-nam12.prod.protection.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: CYXPR08MB9295

X-Antivirus: AVG (VPS 240102-4, 1/2/2024), Inbound message

X-Antivirus-Status: Clean









(1) Notifications
























Web / SEO Spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 02 Jan 2024 07:11:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1rKfTL-000000001Sq-0ish

for dave@doctor.nl2k.ab.ca;

Tue, 02 Jan 2024 07:10:23 -0700

Resent-From: The Doctor

Resent-Date: Tue, 2 Jan 2024 07:10:23 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-sgaapc01olkn2098.outbound.protection.outlook.com ([40.92.53.98]:26336 helo=APC01-SG2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97 (FreeBSD))

(envelope-from )

id 1rKd1a-00000000N0l-2Be8

for sales@nk.ca;

Tue, 02 Jan 2024 04:33:38 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=dAGcUieQdJp6qbImfx4Umb5wLwv4rPE0jcDNjWp/7p+hOquEY6RfczN0eRL5a/L089Y6ZyhrPZUDhdiM/7f2H2bWokjdQUIG9iJIp6SlXIN07oZCnYlB/wtZD7mHnHl+W5QU7Y2yE8EhuV2SfqM0cpyfB2PbS5uAQK9eAOesElzYD7Qnv3aht0Q1DiZMtdxIvvgm1gpz2GdD2LyBppLu5DvIUpYjZv9dhzJjLR9n5OIGbl+uCiy/S5YYGWaAmQRTHY0ISfDrOcz92MTzhD1+J9U0ssDA7QahlQjpLwgyMSElObGHEXIqSGkq851HDBA176QTYZ+9Xtv2/g4Sdm6sZQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=voVR+x+6t5KpPtYpNunIL2dg2SUxI23oBTc9wM7UoK8=;

b=d2hgMAfhs/6/yQhqB2nwY8ctf30WWb60esRcSr7x0aqo6EqaQZM++of2vTRlQj0P9GziUFTfJ+Tx8Pu9409cJNO8b2YqiAfXZFaKIRgXIohYksGCpY7+9SGDhDzvrsIvou1FQR6uK6XL7JrK6Z6U0W+dpJJ5RwhgadTPr6uPXNQyhLELcXT4MQGGxCqJCorlRO496ujcGTNGhdsZgHER50Rajzbw/7jJ4ltWlrCTs7wMZlsHnoX217p3DV55XREKUPV/RrNrKrjuoF/SQGNRVzp7fCKIdGBuFEFvymuaDOd+7VGqUWeEs6sg9ZZ4Im2pIYuq+Us0DapknStOZCrcDw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=voVR+x+6t5KpPtYpNunIL2dg2SUxI23oBTc9wM7UoK8=;

b=iCECxS1zB/9DLlpGwo6ma7Q4T8E2Ne1Fm7kk70AGf/5FtCrnyl8/T/F978tVE+aKrCEjF3TpR82LbqnmFgYAIdUVPzptFwK1HvSE6fwMQvl65YVJxR9ji3oSQ5Zx+v+OCfbnaH9EIC8ig1Ic6J2yjPnxBK5AjVAF3G/R629szMPT73bv/2wudu/Nmt1p+eOxI9TdCpyIGo1uEKMOQuXrUfXiiklYTS3cSXkxaQ+TorBWNWpLf1N02eG7wDjGznEzt1BNqv2df2aJ6YXkvFaoDwf5r4wWNN3sLG+E4nzR0pIGPGpu9waNTpzbTnBW576JrV4DX7HffC+1lzBx8VVpTQ==

Received: from TY0PR02MB6829.apcprd02.prod.outlook.com (2603:1096:405:16::5)

by TYZPR02MB5787.apcprd02.prod.outlook.com (2603:1096:400:1d1::9) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7135.24; Tue, 2 Jan

2024 11:31:11 +0000

Received: from TY0PR02MB6829.apcprd02.prod.outlook.com

([fe80::2526:14ed:37d0:4cc]) by TY0PR02MB6829.apcprd02.prod.outlook.com

([fe80::2526:14ed:37d0:4cc%3]) with mapi id 15.20.7135.023; Tue, 2 Jan 2024

11:31:11 +0000

From: saurabh prakash

Subject: Re:Call For your Business Increase query.....?

Thread-Topic: Re:Call For your Business Increase query.....?

Thread-Index: AQHaPW8uf5/5Hese00W34SToC9vQYA==

Date: Tue, 2 Jan 2024 11:31:09 +0000

Message-ID:



Accept-Language: en-IN, en-US

Content-Language: en-IN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [/xSGy75xwR+HGFVawFuDJPuIk002uSHsYBaHOsrXt/VB070F4HqK/VdCX7B9YHLQ]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TY0PR02MB6829:EE_|TYZPR02MB5787:EE_

x-ms-office365-filtering-correlation-id: 70f53f7a-b028-4650-bc46-08dc0b86515a

x-microsoft-antispam: BCL:0;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?teaQ/DmV9b7ahD8WkFUW+6WMfu+3iOw+ONjbNpLHL0jLuL9mHVieKdMj?=

=?Windows-1252?Q?0o/geQ5ePmpdwHUfm5DhIrPDY6xwKRZYPYwCYreciCsZP8dDVo34VmUW?=

=?Windows-1252?Q?q/vdZCAUGjeSpLjEqP8cG1FIoyZKvNE8IDOrr9TYGj6KbRCS/2axtJyF?=

=?Windows-1252?Q?7Jlj+UVK1siAJNg5BOu7Eqt4k/kgd9+UsepOhfgec2MteXHfwImpqqKl?=

=?Windows-1252?Q?teJaGBiVXZltCTkNB5gDT3w/pHE691je2nYRR2M9LdNCDMaZQsedmBou?=

=?Windows-1252?Q?FGU3LkgI/I79dCoQgzPgk9x+2ru1duOU4xtJKrzYPZAq46qL52xoBVcy?=

=?Windows-1252?Q?ki4E9MWp1IiQFBX6a4M+EC1zaBr4/j3wkhpW89oUlBaHpAArBUpUEHeS?=

=?Windows-1252?Q?f6ZLVtxeeTCU8Zyt+sdz8Z2o4TPgz3eV7Kd8qG2o4v9ikh6mlaM/oU6o?=

=?Windows-1252?Q?4ccNK/Bpkjh2NeDFrZ7ModdwUnghDL9Ix66J7HKXVgHLe1yE8/6mBWao?=

=?Windows-1252?Q?Aosav4n2lL12x9SumZ5ou0JdHC7W1vLlVMEA3BZb+SybcQbTQ3pncurO?=

=?Windows-1252?Q?HAxiO1QfgcLD8f4GfWUq9+iu0K2rknetHGL62Xkox0heFFrlEJmRWap9?=

=?Windows-1252?Q?I/KJy6f8C6Mu5siK0ieO5d1usFR+S26O99SZCzVv9q8p2EOhhfhLx4aE?=

=?Windows-1252?Q?9SVrQX/LATylNCTSb7iwswrYLaMabeduGFm0ECW86L80n8yS1WRfwi2U?=

=?Windows-1252?Q?4eZchcJo12l1QEiTYNZTmN2os6w27ABvmn9y46ldwHCp31n/FpSihelv?=

=?Windows-1252?Q?E9JlWdd3OEeriJJA+IH6OPn4UpG0daJ106ovC0rSJt2RJk5rUBmLD11P?=

=?Windows-1252?Q?UtvSgu5Kgo/36p+5M9p1YcfX8jGyqehNWa22RKLK05rpZnlyGcN2Mrv3?=

=?Windows-1252?Q?heENUizQj/TeKy607EpB1xUleUD1BqXOmCr5R1+SAeeE0a2lDHFNIw6O?=

=?Windows-1252?Q?OxjpfDEJnmb/yX9Bm3CoxnvfO8gGOzG4gafcaM+ymWxb4ETHYwe+O4l/?=

=?Windows-1252?Q?CeLVxnrzK+AIT5T86yAO5lW4eBt7l2BnPkZrlBsIH0AVE8epG5ufvgBq?=

=?Windows-1252?Q?iklHnU4BDJ7TYhWksPTB28N0DtPJ4EmRBurCkPH5ADZZWMJgI0LMvc4h?=

=?Windows-1252?Q?oMknnJKhio8BwMon9ObKVBCbpq/iLgu2Z55ENpNpWeABOwggJFB8dufb?=

=?Windows-1252?Q?5Paq+FfeATopHbRgpAj0EL4CJouTl6qBi+I/3MhMpX/xoXihi6X6kVBq?=

=?Windows-1252?Q?Qp3I8BQ7Q3gubIkD8vJtnaxkNRn7+IOMrOfr63dRneZS58GAPoUlyR7W?=

=?Windows-1252?Q?kqXAVWEIZtpKRkAYJgsJPR64a6NuEs9Yt08=3D?=

Content-Type: multipart/alternative;

boundary="_000_TY0PR02MB682962F88CEDAE45D9E2A113B061ATY0PR02MB6829apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TY0PR02MB6829.apcprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 70f53f7a-b028-4650-bc46-08dc0b86515a

X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Jan 2024 11:31:09.7739

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR02MB5787

X-Antivirus: AVG (VPS 240102-4, 1/2/2024), Inbound message

X-Antivirus-Status: Clean



--_000_TY0PR02MB682962F88CEDAE45D9E2A113B061ATY0PR02MB6829apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,

We are a Websites and Mobile Apps development company, delivering solid stu=

ff at highly competitive costs globally. We have expertise in following key=

areas as below:

(1) Websites Designing.

(2) Websites Development on PHP, WordPress etc.

(3) Mobile Apps development on Android and iOS.

(4) Business Apps (Billing, buying, booking, tracking, Finance)

(5) Microsoft .Net Development.

Please let me know if there is any requirement at your end, we will share o=

ur best proposal and analysis report along with SLA=92s for your considerat=

ion on us.

Looking forward=85



We can provide you better rates for full time resource hiring.







Regards & Thanks,



Note: If you don=92t want further mails from us, please reply with =93Remov=

e from list=94.







--_000_TY0PR02MB682962F88CEDAE45D9E2A113B061ATY0PR02MB6829apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">


ily:"Times New Roman", serif;margin-right:0cm;margin-left:0cm">


scii-theme-font:major-latin;mso-hansi-theme-font:major-latin" class=3D"Cont=

entPasted0">Hi, 




ily:"Times New Roman", serif;margin-right:0cm;margin-left:0cm">


scii-theme-font:major-latin;mso-hansi-theme-font:major-latin" class=3D"Cont=

entPasted0">We are a

Websites and Mobile Apps development company
>, delivering solid stuff at highly competitive costs globally. We have exp=

ertise in following key areas as below: =




ily:"Times New Roman", serif;margin-right:0cm;margin-left:0cm">


o-ascii-theme-font:major-latin;mso-hansi-theme-font:major-latin" class=3D"C=

ontentPasted0">(1)
uot;Cambria",serif;mso-ascii-theme-font:major-latin;mso-hansi-theme-fo=

nt:major-latin" class=3D"ContentPasted0">

Websites Designing. 




ily:"Times New Roman", serif;margin-right:0cm;margin-left:0cm">


o-ascii-theme-font:major-latin;mso-hansi-theme-font:major-latin" class=3D"C=

ontentPasted0">(2)
uot;Cambria",serif;mso-ascii-theme-font:major-latin;mso-hansi-theme-fo=

nt:major-latin" class=3D"ContentPasted0">

Websites Development on PHP, WordPress etc.&=

nbsp;




ily:"Times New Roman", serif;margin-right:0cm;margin-left:0cm">


o-ascii-theme-font:major-latin;mso-hansi-theme-font:major-latin" class=3D"C=

ontentPasted0">(3)
uot;Cambria",serif;mso-ascii-theme-font:major-latin;mso-hansi-theme-fo=

nt:major-latin" class=3D"ContentPasted0">

Mobile Apps development on Android and iOS.&=

nbsp;




ily:"Times New Roman", serif;margin-right:0cm;margin-left:0cm;mso=

-margin-top-alt:auto;mso-margin-bottom-alt:auto">


o-ascii-theme-font:major-latin;mso-hansi-theme-font:major-latin" class=3D"C=

ontentPasted0">(4)
uot;Cambria",serif;mso-ascii-theme-font:major-latin;mso-hansi-theme-fo=

nt:major-latin" class=3D"ContentPasted0">

Business Apps (Billing, buying, booking, tracking, Finance)
class=3D"ContentPasted0"> 




ily:"Times New Roman", serif;margin-right:0cm;margin-left:0cm">


o-ascii-theme-font:major-latin;mso-hansi-theme-font:major-latin" class=3D"C=

ontentPasted0">(5)
uot;Cambria",serif;mso-ascii-theme-font:major-latin;mso-hansi-theme-fo=

nt:major-latin" class=3D"ContentPasted0">

Microsoft .Net Development. 
n>




ily:"Times New Roman", serif;margin-right:0cm;margin-left:0cm">


scii-theme-font:major-latin;mso-hansi-theme-font:major-latin" class=3D"Cont=

entPasted0">Please let me know if there is any requirement at your end, we =

will share our best proposal and analysis report

along with SLA=92s for your consideration on us.
d0"> 




ily:"Times New Roman", serif;margin-right:0cm;margin-left:0cm">


scii-theme-font:major-latin;mso-hansi-theme-font:major-latin" class=3D"Cont=

entPasted0">Looking forward=85 
pan>




f; margin: 0cm; background: white;">


padding: 0cm; color: rgb(34, 34, 34);" class=3D"ContentPasted0">*We can pr=

ovide you better rates for full time resource hiring.*
e=3D"font-family: Cambria, serif; border: 1pt none windowtext; padding: 0cm=

; color: black;" class=3D"ContentPasted0"> 
0"> 




f; margin: 0cm; background: white;">


lass=3D"ContentPasted0"> 




f; margin: 0cm; background: white;">


padding: 0cm; color: rgb(34, 34, 34);" class=3D"ContentPasted0">Regards &a=

mp; Thanks,
pt none windowtext; padding: 0cm; color: black;" class=3D"ContentPasted0">&=

nbsp;
36);"> 




f; margin: 0cm; background: white;">


padding: 0cm; color: rgb(34, 34, 34);" class=3D"ContentPasted0">Note:
n>
xt; padding: 0cm; color: rgb(34, 34, 34);" class=3D"ContentPasted0">

If you don=92t want further mails from us, please reply with =93Remove fro=

m list=94.
ne windowtext; padding: 0cm; color: black;" class=3D"ContentPasted0"> =


> 




ily:"Times New Roman", serif;margin-right:0cm;margin-left:0cm">


scii-theme-font:major-latin;mso-hansi-theme-font:major-latin">
"ContentPasted0"> 














--_000_TY0PR02MB682962F88CEDAE45D9E2A113B061ATY0PR02MB6829apcp_--

school list spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 01 Jan 2024 21:12:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1rKW7X-00000000GaX-3T0B

for dave@doctor.nl2k.ab.ca;

Mon, 01 Jan 2024 21:11:17 -0700

Resent-From: The Doctor

Resent-Date: Mon, 1 Jan 2024 21:11:15 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-he1eur01on2085.outbound.protection.outlook.com ([40.107.13.85]:38918 helo=EUR01-HE1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97 (FreeBSD))

(envelope-from )

id 1rKT6T-000000005lP-3zw6

for doctor@doctor.nl2k.ab.ca;

Mon, 01 Jan 2024 17:58:02 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=dI8a83nJ4TKmUchF2CPCrBeTNt4DLkBSpRIgJQRfzakBZATHBYy1YsG43pIMLuWgMTpRIm37e1bnZUVjwqiEeCfQlnC55u6JF+cFSsMxwS+ampcaoSz3auLOoSBCgcnXCrYlugx982kyboYF4ob0NVOKRpR6iO357tseITwaaJj40x+MW1DjArImGpXPinTwcgxhnJ7WvThX5nqYWkuydsrvhdjjI/V8Nkc6UQWvxgiXDSzNt5S9HngSOD0uFNyJ3mlatqvf0Wy0/HPPQqjPN/oW3Nel4CFweMiYXjAxtvrzMlILkhxDxWi20l3RiPEcgggngGn9Rf2BWiRTuIEO6Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=Iu86pevGI6f3Kn2y95ZVE5hQCCxLzGNRLecx+H3nPw8=;

b=fRpXRYxCE/G3PfpkfL9fr1zmBCCyQCuOMIO/UVOy22ArFFkimXJhZvmfpKelK+76grVYVONx6GyIEoV9JT1ILcbXockAOmvknezLb48t8AZwEwnDOQM1lYKZMaDksmlgyhzc5nqXcpUla+65S86Uq9vtp7ThtM4iB9BG1r4mVfPh2F/GrdVYr8AJFXz95IpXgT5B0R35YVmmNktrGLWFF6na5advaIcCOHl00XAH1AQv62VICT73xOLpPxpiu8zZ4TUZvd+zw+iMM5jmOkycAePQzzVViuKGpJMyRRnxKU3p4l3ZnJ29ev7KwDvFdkir552kMDu962b0Fs2JSBsD0w==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

172.233.201.235) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.mailfrom=sp001ms.onmicrosoft.com; dmarc=none action=none

header.from=sp001ms.onmicrosoft.com; dkim=none (message not signed); arc=none

(0)

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 172.233.201.235)

smtp.mailfrom=SP001MS.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=SP001MS.onmicrosoft.com;

From: =?UTF-8?B?U2hpcHBpbmcgRGVwYXJ0bWVudA==?=

MIME-Version: 1.0

Date: Tue, 02 Jan 2024 01:41:51 +0100

Subject: important for doctor

Importance: high

X-TOI-MSGID: <2038403522.3B481D63B29B5.1704156111307@walsh.com>

In-Reply-To:

To: doctor@doctor.nl2k.ab.ca

Content-Type: multipart/alternative; charset="UTF-8";boundary="PART.U9poIpL.wzrizmjc"

Message-ID: <010783659492603039d9ee-c69a3509-5c85-481d-822e-ba65c204e1ba-000000@ibm.com>

CC: doctor@doctor.nl2k.ab.ca

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DB5PEPF00014B91:EE_|AM0P193MB0563:EE_

X-MS-Office365-Filtering-Correlation-Id: 04b48100-4654-4146-c419-08dc0b2da4bc

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:172.233.201.235;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.walsh.com;PTR:172-233-201-235.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(376002)(346002)(39860400002)(396003)(136003)(230922051799003)(64100799003)(186009)(7200799017)(451199024)(1690799017)(82310400011)(61400799012)(36840700001)(46966006)(40470700004)(41320700001)(564344004)(36756003)(40480700001)(8400799017)(40460700003)(3082699003)(6082699003)(66899024)(6916009)(9686003)(33964004)(70586007)(70206006)(336012)(82740400003)(81166007)(166002)(83380400001)(47076005)(26005)(34020700004)(2906002)(5660300002)(4326008)(478600001)(41300700001)(3480700007)(36860700001)(786003)(316002)(42186006)(7116003)(8936002)(8676002)(1406899027);DIR:OUT;SFP:1101;

X-OriginatorOrg: SP001MS.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Jan 2024 00:56:24.3004

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 04b48100-4654-4146-c419-08dc0b2da4bc

X-MS-Exchange-CrossTenant-Id: 54df9498-ecf9-49f8-a5cb-a75466b90ebd

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=54df9498-ecf9-49f8-a5cb-a75466b90ebd;Ip=[172.233.201.235];Helo=[mail.walsh.com]

X-MS-Exchange-CrossTenant-AuthSource:

DB5PEPF00014B91.eurprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0P193MB0563

X-Antivirus: AVG (VPS 240102-4, 1/2/2024), Inbound message

X-Antivirus-Status: Clean



--PART.U9poIpL.wzrizmjc

Content-Transfer-Encoding: 7bit

Content-Type: text/html; charset="UTF-8"











(2564) Notifications































































If you no longer wish to receive these emails, you may unsubscribe by

clicking here.




















--PART.U9poIpL.wzrizmjc--

Fedex phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 01 Jan 2024 21:12:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1rKW7X-00000000GaX-3T0B

for dave@doctor.nl2k.ab.ca;

Mon, 01 Jan 2024 21:11:17 -0700

Resent-From: The Doctor

Resent-Date: Mon, 1 Jan 2024 21:11:15 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-he1eur01on2085.outbound.protection.outlook.com ([40.107.13.85]:38918 helo=EUR01-HE1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97 (FreeBSD))

(envelope-from )

id 1rKT6T-000000005lP-3zw6

for doctor@doctor.nl2k.ab.ca;

Mon, 01 Jan 2024 17:58:02 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=dI8a83nJ4TKmUchF2CPCrBeTNt4DLkBSpRIgJQRfzakBZATHBYy1YsG43pIMLuWgMTpRIm37e1bnZUVjwqiEeCfQlnC55u6JF+cFSsMxwS+ampcaoSz3auLOoSBCgcnXCrYlugx982kyboYF4ob0NVOKRpR6iO357tseITwaaJj40x+MW1DjArImGpXPinTwcgxhnJ7WvThX5nqYWkuydsrvhdjjI/V8Nkc6UQWvxgiXDSzNt5S9HngSOD0uFNyJ3mlatqvf0Wy0/HPPQqjPN/oW3Nel4CFweMiYXjAxtvrzMlILkhxDxWi20l3RiPEcgggngGn9Rf2BWiRTuIEO6Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=Iu86pevGI6f3Kn2y95ZVE5hQCCxLzGNRLecx+H3nPw8=;

b=fRpXRYxCE/G3PfpkfL9fr1zmBCCyQCuOMIO/UVOy22ArFFkimXJhZvmfpKelK+76grVYVONx6GyIEoV9JT1ILcbXockAOmvknezLb48t8AZwEwnDOQM1lYKZMaDksmlgyhzc5nqXcpUla+65S86Uq9vtp7ThtM4iB9BG1r4mVfPh2F/GrdVYr8AJFXz95IpXgT5B0R35YVmmNktrGLWFF6na5advaIcCOHl00XAH1AQv62VICT73xOLpPxpiu8zZ4TUZvd+zw+iMM5jmOkycAePQzzVViuKGpJMyRRnxKU3p4l3ZnJ29ev7KwDvFdkir552kMDu962b0Fs2JSBsD0w==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

172.233.201.235) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.mailfrom=sp001ms.onmicrosoft.com; dmarc=none action=none

header.from=sp001ms.onmicrosoft.com; dkim=none (message not signed); arc=none

(0)

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 172.233.201.235)

smtp.mailfrom=SP001MS.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=SP001MS.onmicrosoft.com;

From: =?UTF-8?B?U2hpcHBpbmcgRGVwYXJ0bWVudA==?=

MIME-Version: 1.0

Date: Tue, 02 Jan 2024 01:41:51 +0100

Subject: important for doctor

Importance: high

X-TOI-MSGID: <2038403522.3B481D63B29B5.1704156111307@walsh.com>

In-Reply-To:

To: doctor@doctor.nl2k.ab.ca

Content-Type: multipart/alternative; charset="UTF-8";boundary="PART.U9poIpL.wzrizmjc"

Message-ID: <010783659492603039d9ee-c69a3509-5c85-481d-822e-ba65c204e1ba-000000@ibm.com>

CC: doctor@doctor.nl2k.ab.ca

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DB5PEPF00014B91:EE_|AM0P193MB0563:EE_

X-MS-Office365-Filtering-Correlation-Id: 04b48100-4654-4146-c419-08dc0b2da4bc

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:172.233.201.235;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.walsh.com;PTR:172-233-201-235.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(376002)(346002)(39860400002)(396003)(136003)(230922051799003)(64100799003)(186009)(7200799017)(451199024)(1690799017)(82310400011)(61400799012)(36840700001)(46966006)(40470700004)(41320700001)(564344004)(36756003)(40480700001)(8400799017)(40460700003)(3082699003)(6082699003)(66899024)(6916009)(9686003)(33964004)(70586007)(70206006)(336012)(82740400003)(81166007)(166002)(83380400001)(47076005)(26005)(34020700004)(2906002)(5660300002)(4326008)(478600001)(41300700001)(3480700007)(36860700001)(786003)(316002)(42186006)(7116003)(8936002)(8676002)(1406899027);DIR:OUT;SFP:1101;

X-OriginatorOrg: SP001MS.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Jan 2024 00:56:24.3004

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 04b48100-4654-4146-c419-08dc0b2da4bc

X-MS-Exchange-CrossTenant-Id: 54df9498-ecf9-49f8-a5cb-a75466b90ebd

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=54df9498-ecf9-49f8-a5cb-a75466b90ebd;Ip=[172.233.201.235];Helo=[mail.walsh.com]

X-MS-Exchange-CrossTenant-AuthSource:

DB5PEPF00014B91.eurprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0P193MB0563

X-Antivirus: AVG (VPS 240102-4, 1/2/2024), Inbound message

X-Antivirus-Status: Clean



--PART.U9poIpL.wzrizmjc

Content-Transfer-Encoding: 7bit

Content-Type: text/html; charset="UTF-8"











(2564) Notifications































































If you no longer wish to receive these emails, you may unsubscribe by

clicking here.




















--PART.U9poIpL.wzrizmjc--

Fedex phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 31 Dec 2023 16:16:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1rK51m-000000002Z1-0xBG

for dave@doctor.nl2k.ab.ca;

Sun, 31 Dec 2023 16:15:30 -0700

Resent-From: The Doctor

Resent-Date: Sun, 31 Dec 2023 16:15:30 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dm6nam11on2045.outbound.protection.outlook.com ([40.107.223.45]:31968 helo=NAM11-DM6-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97 (FreeBSD))

(envelope-from )

id 1rK2zS-00000000BAQ-1Hf4

for doctor@doctor.nl2k.ab.ca;

Sun, 31 Dec 2023 14:05:02 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=d682WbDD7AnPIaI46JndJLAfCVyZOEr86fJ+PvijwNAiidC8rg4DeOsrdAdJRM+vPjr+wmA5gAXgJuADqyS6h4dMDMMSYy/6QS/0XM1DW5fecB2bRQrpa3xfjnmDuPQt/1IvzOOu6BcD1I8KA91f3Kv5JHR9tc2+bf5iTD9gDE6IddqdtXp9ahd7F0sq0fDLqhdhFwlpHqe7oxwe0ictVCsPwSJOpUY8R4dXqZvpfDRVp8EQfqOZhwxQSc0IoFhBaW/FWf2dBNVx1DfGiTuacsWp8ZIV8Eb1ZIuriRCPXj9P7yAyEeM5VTP/rFmE6/GCPaFS9D8QZNolvR440UyFEg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=31dWsTtOeQkUMNkaKv4Xq1uKhL5gr04fd8JNcVjr9ew=;

b=alz317mjcYWRrb0NirptIvxDZh6tmVYIl83US6DI16L+ZmWiwIko4UCKfjF/MwFqKZiGdfHdle95qAKjx1fuUFLVIKb9PTL+DaMlXhOKDbQRMgPis032Wv4V/ZbLBdQaLD4NNUX3cqepF2me13Wjjj7VLeFh3/fUpVDU1/Lac1ZaJN+FT0aTqyDS9mC+cSdqEnj/DLMnkcOLZjhTpVfE/O8z3Y4r7SmyrhsrBYAQY6wyeMWix3sZmBBMoZGp3vLHoKvJmeADXxGwKRuS5Jf3HHaDk2L+5PKrAJWEbusykvnzi0CevxZacLz4HlT80RE7e4KaJwqLItKCjjOaduHz3g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

162.55.46.77) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.mailfrom=us02ms.onmicrosoft.com; dmarc=none action=none

header.from=us02ms.onmicrosoft.com; dkim=none (message not signed); arc=none

(0)

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 162.55.46.77)

smtp.mailfrom=US02MS.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=US02MS.onmicrosoft.com;

Date: Sun, 31 Dec 2023 21:47:12 +0100

CC: doctor@doctor.nl2k.ab.ca

Importance: high

To: doctor@doctor.nl2k.ab.ca

Content-Type: multipart/alternative; charset="UTF-8";boundary="PART.OTKOCGg.ddthpcqr"

Message-ID: <010796273610043039d9ee-c69a3509-5c85-481d-822e-ba65c204e1ba-000000@lows.com>

In-Reply-To:

X-TOI-MSGID: <1127529610.4342F1462B863.1704055632569@feil.com>

Subject: message for_doctor

From: Shipping-Department

MIME-Version: 1.0

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: CY4PEPF0000FCC2:EE_|MW4PR04MB7314:EE_

X-MS-Office365-Filtering-Correlation-Id: 76900b53-1acc-49d9-39b1-08dc0a43ee49

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:162.55.46.77;CTRY:DE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.feil.com;PTR:static.77.46.55.162.clients.your-server.de;CAT:NONE;SFS:(13230031)(39860400002)(376002)(346002)(136003)(396003)(230922051799003)(1690799017)(186009)(82310400011)(7200799017)(61400799012)(451199024)(64100799003)(40470700004)(46966006)(36840700001)(2906002)(5660300002)(7116003)(4326008)(8676002)(8936002)(316002)(42186006)(36756003)(786003)(6916009)(8400799017)(478600001)(40460700003)(40480700001)(41300700001)(33964004)(9686003)(564344004)(66899024)(3082699003)(26005)(336012)(166002)(83380400001)(81166007)(47076005)(70206006)(70586007)(82740400003)(41320700001)(36860700001)(34020700004)(1406899027);DIR:OUT;SFP:1101;

X-OriginatorOrg: US02MS.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 31 Dec 2023 21:03:25.3505

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 76900b53-1acc-49d9-39b1-08dc0a43ee49

X-MS-Exchange-CrossTenant-Id: c8db2167-9c54-4b1e-80bc-0ae203370df2

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=c8db2167-9c54-4b1e-80bc-0ae203370df2;Ip=[162.55.46.77];Helo=[mail.feil.com]

X-MS-Exchange-CrossTenant-AuthSource:

CY4PEPF0000FCC2.namprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW4PR04MB7314

X-Antivirus: AVG (VPS 240102-4, 1/2/2024), Inbound message

X-Antivirus-Status: Clean



--PART.OTKOCGg.ddthpcqr

Content-Transfer-Encoding: 7bit

Content-Type: text/html; charset="UTF-8"











(5467) Notifications































































If you no longer wish to receive these emails, you may unsubscribe by

clicking here.




















--PART.OTKOCGg.ddthpcqr--

Lowe's Phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 31 Dec 2023 16:15:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1rK50z-000000002Gf-2Cf8

for dave@doctor.nl2k.ab.ca;

Sun, 31 Dec 2023 16:14:41 -0700

Resent-From: The Doctor

Resent-Date: Sun, 31 Dec 2023 16:14:41 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-am0eur02on2085.outbound.protection.outlook.com ([40.107.247.85]:5920 helo=EUR02-AM0-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97 (FreeBSD))

(envelope-from )

id 1rK1ws-00000000J5S-10yw

for doctor@doctor.nl2k.ab.ca;

Sun, 31 Dec 2023 12:58:18 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=Al9Aeh7dWxyNQ4/exk0Zy6pVIHFeZu3u7j/fc0VzSMC9n1SmSzbMWyoOMHNezJNA1/uY2JRwaj2Dj8jkeQIwMbx8adC1qC/DSBO88omeRBrG4oRq6PjsAEPzMdCwtSo7P2Mtw6Rn2YsoZnXVa8ZYz5Zq3WLWe/CyiqDnRMEVgqxtcGs5/w9CXR1leXJ1Je6kuJIQR+gbr5XCR+4Z0sBjHCEO81pvn3iAVKnoUn7VNuXprsyQQAcO5F5/q18C6OCENSwaKKACVrRchThdkQ1uUg16DYYbcmwiN2fXk1NLEGXv43ZiJxHt3jkItRx8HyxP5EgyJZlCtz83ars4pumdhw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=782cJaxP1H2rldUD0jfD1MxkRGlm/LI3U+xBl3yrEPI=;

b=CP8fmr+zL2YsE6/GPy1Cpl+t85GOFUBLhnolX7whHzbl504JGd1JoMABQWnm252wlEMmb/RoNKpV5V1zv4JuDQ4gPmfB5zXAtiRHb5OY59xaEPdnU+lR+SdfVUQmAELk3E+Vf3nh5AX4N1tSV6f2L1RUUk9r3Lb8FzIY9VhPs4tX/HxhKuC6mL5raefpBQN/xP2+6EwJT2twXubCNjq9NitYNubKL8TrHT9JudHd110A9+svnN+STI2mHtZHtzX/YHPeGxCe+oE5aYyNSwya8CsmYZf3dO6gaYNtjoiBCMSRkChaJyTuVeFFVeNG1GtvI2BqxPehwH/V5n9mUvycjQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

172.234.30.81) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.mailfrom=jymmgqxbugfoo.onmicrosoft.com; dmarc=none action=none

header.from=jymmgqxbugfoo.onmicrosoft.com; dkim=none (message not signed);

arc=none (0)

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 172.234.30.81)

smtp.mailfrom=jymmgqxbugfoo.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none

header.from=jymmgqxbugfoo.onmicrosoft.com;

Message-ID: <010798921223393039d9ee-c69a3509-5c85-481d-822e-ba65c204e1ba-000000@lows.com>

From: Lowe's Rewards

CC: doctor@doctor.nl2k.ab.ca

In-Reply-To:

Importance: high

To: doctor@doctor.nl2k.ab.ca

MIME-Version: 1.0

Content-Type: multipart/alternative; charset="UTF-8";boundary="PART.FWWUXTX.dyxoqoog"

Subject: Makita 6-pc Combo Kit - Shipment Pending

Date: Sun, 31 Dec 2023 20:23:22 +0100

X-TOI-MSGID: <1298919912.3BD68B9824062.1704050602476@schinner.com>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: AMS0EPF000001B0:EE_|AM7P194MB0851:EE_

X-MS-Office365-Filtering-Correlation-Id: e4335dee-0764-4de4-f087-08dc0a3a9b1b

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:172.234.30.81;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.schinner.com;PTR:172-234-30-81.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(136003)(346002)(396003)(39860400002)(376002)(230922051799003)(1800799012)(186009)(64100799003)(82310400011)(7200799017)(1690799017)(451199024)(46966006)(40470700004)(36840700001)(36860700001)(478600001)(40460700003)(41300700001)(82740400003)(8400799017)(6916009)(166002)(36756003)(4326008)(316002)(786003)(81166007)(42186006)(70206006)(70586007)(33964004)(9686003)(47076005)(336012)(26005)(40480700001)(83380400001)(8936002)(8676002)(34020700004)(564344004)(2906002)(5660300002)(41320700001)(66899024)(1406899027);DIR:OUT;SFP:1101;

X-OriginatorOrg: jymmgqxbugfoo.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 31 Dec 2023 19:56:40.3792

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: e4335dee-0764-4de4-f087-08dc0a3a9b1b

X-MS-Exchange-CrossTenant-Id: f4cc3e89-0934-4905-bf95-877cb6adb575

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f4cc3e89-0934-4905-bf95-877cb6adb575;Ip=[172.234.30.81];Helo=[mail.schinner.com]

X-MS-Exchange-CrossTenant-AuthSource:

AMS0EPF000001B0.eurprd05.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM7P194MB0851

X-Antivirus: AVG (VPS 240102-4, 1/2/2024), Inbound message

X-Antivirus-Status: Clean



--PART.FWWUXTX.dyxoqoog

Content-Transfer-Encoding: 7bit

Content-Type: text/html; charset="UTF-8"











(0071) Notifications































































If you no longer wish to receive these emails, you may unsubscribe by

clicking here.




















--PART.FWWUXTX.dyxoqoog--