Web / SEO Spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 15 Jan 2024 11:10:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rPROz-000000005Js-3mny

for dave@doctor.nl2k.ab.ca;

Mon, 15 Jan 2024 11:09:37 -0700

Resent-From: The Doctor

Resent-Date: Mon, 15 Jan 2024 11:09:37 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-psaapc01olkn2058.outbound.protection.outlook.com ([40.92.52.58]:53792 helo=APC01-PSA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rPRHq-000000004qW-2o67

for sales@nk.ca;

Mon, 15 Jan 2024 11:02:18 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=NPwsBWsfNKPLQ4O+9hGmn4vD1RwEaN6gu7GWFZr8v6XGdHWcn96ZOmV4e98C8drtrYZDgywTX/liRokk1IKkm9l92mVUvAfZQlpY7hcJE0YOfROkmu4hx6zCcuSxZyKH/KfXiGnVr/fHRhcz824VUcOwYDzDgMOlj4yAg7VZVBrbu4qMhPIG6+v3SjFYeL3ud9h+7FkSVOOmrnBM0koRMnDrzMuNH2+K+TBGLJkORsh/e8ms5gGneTWQq/Ye3F4/k1CYir9vo6yLr2U3FCbfTRdnLZ+gHnZQUDP4cJNeMcWz6IPeZC7xSspN8IYL3fUfk/agEUbGj+ieTxRRQMrHMA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=8sXTusUSRnyIg0fyD+IW8F68EJUON98wb9WpUujFo34=;

b=k2U319+LSeb87KFq+33cs//e+bhpwXj325vsees5DNBAocwwHPtf9lyvz7ZtIdeitP9Q6J9xI+v/IoCxnLWn4h7dS9Ch6gp54hMxgguS1CqHojybxpNOGszKZCCihEJuCe16517LrREI84e1JJWys6l5xUdaGiCZQALz8GanuZHpGoT3Zro890wFKC5eVQyb10asNjOH+GdaCaRzQE8KujmIiQWmvj4pnwQNjruZDjX1vdgQPf+f+swjuQRtWEiXHxwnNAZE57gknj3t0dsoAqRwOuWqnEu/PEVB1Hn64sFhL4UurLMDG7KzdEhbWXcJiGWE6v4knFye8FiPoYt9CQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=8sXTusUSRnyIg0fyD+IW8F68EJUON98wb9WpUujFo34=;

b=WJjoQl+U6pro5PR3coPcdy8byc6pQD4YlvypGtpT7h9RiEo2GoN0Rj1BlKF6Q/Fb7x7eXjgt6BqVH6YURKX2hMcoWmD9DbV62v9WmjRK5Dl+2wgfP2o6qPLeL1o0uiiL49ba0CzN1qFiETkwc5WRNkFG4A94T9cBpGaRFXLuikng2ySzamZ6DnyHjob+x7vPpfJ3mfRScCIYv4TYFdPMAocZkhLOdhqKJIhH9KPE7R1+9NzWsfrDwKFHOxWSiJN6fUsRtXdlmoYegQSUe9vCZVW1+QGPWS2rwTdJa9IVPEUYlKzsiv9zi4qKcJSmIxNjs19dUgiRAZPbG5H4Yr21bQ==

Received: from TYZPR03MB7601.apcprd03.prod.outlook.com (2603:1096:400:419::8)

by TYZPR03MB7319.apcprd03.prod.outlook.com (2603:1096:400:422::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7181.23; Mon, 15 Jan

2024 18:00:07 +0000

Received: from TYZPR03MB7601.apcprd03.prod.outlook.com

([fe80::8a7f:e782:9779:ee6f]) by TYZPR03MB7601.apcprd03.prod.outlook.com

([fe80::8a7f:e782:9779:ee6f%7]) with mapi id 15.20.7181.022; Mon, 15 Jan 2024

18:00:07 +0000

From: "Titu"

To:

Subject: 1st Page Of Google At Reasonable Prices...!!##

Date: Mon, 15 Jan 2024 23:28:34 +0530

Message-ID:



Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0D4E_01DA480A.B34EA700"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdpH3GzutLTuj4udRRaPcENuXi+KOQ==

Content-Language: en-in

X-TMN: [oDu0bLy4m0SR2Xh8D4xMDoSxG4tWvCnfIx1txx3Vmqc=]

X-ClientProxiedBy: BM1P287CA0016.INDP287.PROD.OUTLOOK.COM

(2603:1096:b00:40::27) To TYZPR03MB7601.apcprd03.prod.outlook.com

(2603:1096:400:419::8)

X-Microsoft-Original-Message-ID: <0d4d01da47dc$99966b00$ccc34100$@com>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: TYZPR03MB7601:EE_|TYZPR03MB7319:EE_

X-MS-Office365-Filtering-Correlation-Id: e625b2f7-bdc0-4c6c-d311-08dc15f3bc1e

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?us-ascii?Q?Ad/Btldia375iFQhQoG0CvfjcfNP9hi59ogb5BNdxVy5sB/kMlYo0A2iUaPj?=

=?us-ascii?Q?ZtU9p+sxvtdIpezHUbY44fXFJR7khJ/OeGmaRBUPLZAoP6sLQVe7oNboWfv4?=

=?us-ascii?Q?AyDceuLrBQaYO/6oEarl08snGBKGUID5W5xDCLLfsnWi2K/Sw8t457vLdej6?=

=?us-ascii?Q?/QwVmnBwe5FeuaXs32lySIj+7gSIHkB37KVIoup0aZcFv1gY8WvOsDlLrYp7?=

=?us-ascii?Q?tdzXBW7C8KLiHqFyGcoWY+1gOzfs5l+3k6wuN/lGFBvg9eWt9qFk6zk18DS+?=

=?us-ascii?Q?iG/0U9w3r2SYiDkUURLziCJrA4l2Zh0iGKRjZMtWn9vp1CzCFwldReGDVN94?=

=?us-ascii?Q?0V0LMZ6md6U4pMir2qFF7NkMzhdOzcN3YuIyPna0dXzst6H1Z6pI1iZAryJ2?=

=?us-ascii?Q?6d9JcHv7I00AujQJ6My6rxRZSUm/M2UR3qosA1eYvz05nY2dulJ11EyKEq5+?=

=?us-ascii?Q?+jPblv7l6YH4ItH4/sYyWl7ZEfus5dCDIt8vtAx2BaoW0HzsQHbo4aXQZXSV?=

=?us-ascii?Q?FEO087Uy2aq4HGK82tlzH8GMMOCidBomYkE/8JYx3HsvKOagPhc0+XTNsHjQ?=

=?us-ascii?Q?oivy1+stlb34/7BFCQ3psAfdmpOXge8PE/hQi3N6pnwcHUUqg5TV5kE/Lh2Z?=

=?us-ascii?Q?owAT7udLWbLYgo4SrMNih0xClHUhdCp/90fQPiTH1bgFNmvwFhF9gDML43a0?=

=?us-ascii?Q?LNDlp6eogzY4cZhRfF1oSRNkMNuKdeJGZSUQt6id8gKc0qxCCWsySdPqp6VB?=

=?us-ascii?Q?/aIBEvF35wql8u6zesBalzMtY7Pi+1d4rg2iN33Cm+3KFXyTGo85xVHS3uZ0?=

=?us-ascii?Q?s/Zp7suebszDPFecUIR4woew/3W+r45mXOJwR/FXjqvN/XeOIe/1fvHTMyko?=

=?us-ascii?Q?T4bO/HCaygWmtJ+zR4w3VYTULO2VnYDDPUZNASBowheP69XIPxEOnUT5aOjL?=

=?us-ascii?Q?7BImXeHiqBZEddhFMj0QEie2lJBYWEj6DWpT5xUQXFhYCexz/ZfFQrZ7C3tc?=

=?us-ascii?Q?OyplbFNhrc8Hg7bqY3KjTS2tBS08M+rUVdTdlAbgrMaFcgdZouS2h72W0q7G?=

=?us-ascii?Q?onjCkDbjgXnSHQbfHWDLB/drkHz1c6GA+fQMFdPLkSyPO3hdP+nY6Ac+BVAd?=

=?us-ascii?Q?YMDg0E5MS2IlNVVY1lGjJw/PmhstAyWCAFydEKoAGWi2eygM4Ejvarmd6YBG?=

=?us-ascii?Q?RWLbZloUptjofTo+clH52K0wca3NvlHagrOvg5jFQ9lB7vHr6jAx5mZ76Ksh?=

=?us-ascii?Q?lKYPErXtDU+rJQc4Hv+g?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: e625b2f7-bdc0-4c6c-d311-08dc15f3bc1e

X-MS-Exchange-CrossTenant-AuthSource: TYZPR03MB7601.apcprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Jan 2024 17:59:36.0560

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR03MB7319

X-Antivirus: AVG (VPS 240115-4, 1/15/2024), Inbound message

X-Antivirus-Status: Clean



------=_NextPart_000_0D4E_01DA480A.B34EA700

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hello,



Hope you are well.



I was examining your www.nk.ca and see you have a good design and it looks

great. But it was not ranking on any search engines for most of the

keywords.



Our process of SEO:-







We can put your website on Google 1st page within 4-5 month maximum.



We can also increase traffic on your website on the month to month.



We can increase your sale on daily bases as you want expected revenue.





Titu,





Note: - We will be more than happy to send you "Proposal" and "Pricing" .









------=_NextPart_000_0D4E_01DA480A.B34EA700

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">


>




















e-height:

normal">Hel=

lo,



 


Hope you are well.


 


I was examining your www.nk.ca and see you=

have

a good design and it looks great. But it was not ranking on any search engi=

nes

for most of the keywords.



 


Our process of SEO:-
an>






e-height:

normal">
p> 






e-height:

normal">We can put your website on Google 1st page within 4-5 mo=

nth

maximum.


 


We can also increase traffic on your websi=

te on

the month to month.



 


We can increase your sale on daily bases a=

s you

want expected revenue.






e-height:

normal">


Titu,






e-height:

normal">


 Note: - We will be more than happy t=

o send

you “Proposal” and “Pricing” .

pan>





 

















------=_NextPart_000_0D4E_01DA480A.B34EA700--

Dewalt phish from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 14 Jan 2024 21:23:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rPEUH-00000000D0r-2T42

for dave@doctor.nl2k.ab.ca;

Sun, 14 Jan 2024 21:22:13 -0700

Resent-From: The Doctor

Resent-Date: Sun, 14 Jan 2024 21:22:13 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-db3eur04on2135.outbound.protection.outlook.com ([40.107.6.135]:39758 helo=EUR04-DB3-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rPCSA-000000007PW-3CRZ

for root@nk.ca;

Sun, 14 Jan 2024 19:11:58 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=HHYbucdBMgD9VVXmeYYfwVgHIcVsMcViovl7jGw2Bhuj2TTyLxvXh+6U3Z5xeX0bI2F3fVC5ytS9Qkjb2rwMvYL0ucYmuP6zm/8LguuzWCcoVQars2FnAD0XtF9hUy8ufuDKjdci+bSOFX19gAmzbYpJrBWKnAZMWJM9gB08M3vE0Xc0xAdbNq/yqDnbKsZR06XtF+F398eIXUzv1X5n2ddTv6sb75Hf9+V7UzSunQ+VGh64U4+RrQVYpW/fHIfFPIzRf9RycCIFpUyuSeEWFKU2TjnkuIcMCJ0Z/iZnIX618fCAVlqNGOaeT9mzddIw8UTrQz0dSIawi7x6ZjgfNg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=vqBmgRkmveRYNWNW5tl+DBkQy13+Z2FB7/mzRmdCsGM=;

b=cQXV5SnC42p/LHwBJCV476PyBwFKy13nEtdMnoV6xsJ0iEmUit+z/ekKgZbBGIcSwXDQxye2escoC56eRL31T7GkySYDan+yZ5SE2KKau9PjXx4xmCHx4IqphjrpDOq0QlPwzVs1hFE74VCDPvl5ymAxD8BvDj/W8YlWjMUrMCphkiWyqyqaK9OTcKlrGpvbBCemA37gank6wBZVOFAAyGCG2N+Yo+K7syylbnFWdG+F1CIg5HMyHYMqE4a1xeWPpdTY2uPEWQ5GFNNbf3ayfi3XBhRLGlRFPNaAD9DyZpYJdlSjpdK/abdQ23MD9e6kt7l/Eprgpgz6dSh+8S5CEg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

45.79.73.202) smtp.rcpttodomain=nk.ca smtp.mailfrom=t03ms.onmicrosoft.com;

dmarc=none action=none header.from=t03ms.onmicrosoft.com; dkim=none (message

not signed); arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=T03MS.onmicrosoft.com;

s=selector1-T03MS-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=vqBmgRkmveRYNWNW5tl+DBkQy13+Z2FB7/mzRmdCsGM=;

b=Ud02TcKJ4h2Z/jg0QEKbPvkCiF/P4L77ie6z6k1s0Bhnn+GD/VKi/Tvu2I9uIlM2MW9SiG4b2lWfyVxDflt+Jj2M5id7lwtK7uCYI9MktbAvPS6As+esx6Oqc3qzX/t7qrR4bKBBK1XcK+tH/saWkDjMZUP9onMUg6sEaG4ZgHvhLZA9FtD7LlX1jgSh3whvedyu2FzZU6gSetN83F7npdhsHXHpMqO70eSAkKle/fk17ofrdlwnwnhSL7o24v8nqoWHBSWrougJaBF/Td/CyenrhniMysEc7orpx7VxV+wcaxVlIcFQMBXCtLBnYNi3us9fbulGIqjVnpddHbc8PQ==

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 45.79.73.202)

smtp.mailfrom=T03MS.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=T03MS.onmicrosoft.com;

Content-Transfer-Encoding: 7bit

MIME-Version: 1.0

From: Deals

In-Reply-To:

To: root@nk.ca

Subject: Your Name Came Up For a Dewalt Power Station Reward

Content-Type: text/html; charset="UTF-8"

Importance: high

CC: root@nk.ca

Date: Mon, 15 Jan 2024 03:01:21 +0100

Message-ID:

<4934eba0-67e5-4156-b5d8-ced683fad6f1@AM3PEPF0000A794.eurprd04.prod.outlook.com>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: AM3PEPF0000A794:EE_|AM9PR07MB7122:EE_

X-MS-Office365-Filtering-Correlation-Id: 092bd862-a423-42a5-cde5-08dc156f094e

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:45.79.73.202;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.schinner.com;PTR:45-79-73-202.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(39860400002)(376002)(346002)(396003)(136003)(230922051799003)(61400799012)(64100799003)(186009)(82310400011)(1690799017)(7200799017)(451199024)(36840700001)(46966006)(40470700004)(8400799017)(40480700001)(40460700003)(41300700001)(70586007)(558084003)(81166007)(166002)(41320700001)(86362001)(31696002)(70206006)(34070700002)(36860700001)(47076005)(82740400003)(336012)(26005)(9686003)(2906002)(478600001)(8936002)(786003)(42186006)(6916009)(316002)(4326008)(5660300002)(8676002)(67280400001);DIR:OUT;SFP:1102;

X-OriginatorOrg: T03MS.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Jan 2024 02:09:41.8199

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 092bd862-a423-42a5-cde5-08dc156f094e

X-MS-Exchange-CrossTenant-Id: 797ffa7c-6432-40c5-8603-f3a97de60bb8

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=797ffa7c-6432-40c5-8603-f3a97de60bb8;Ip=[45.79.73.202];Helo=[mail.schinner.com]

X-MS-Exchange-CrossTenant-AuthSource:

AM3PEPF0000A794.eurprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM9PR07MB7122

X-Antivirus: AVG (VPS 240114-4, 1/14/2024), Inbound message

X-Antivirus-Status: Clean









(1) Notifications