Web / SEO Spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 30 Jan 2024 13:19:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rUuYr-00000000HIa-2vfp

for dave@doctor.nl2k.ab.ca;

Tue, 30 Jan 2024 13:18:25 -0700

Resent-From: The Doctor

Resent-Date: Tue, 30 Jan 2024 13:18:25 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-psaapc01olkn2030.outbound.protection.outlook.com ([40.92.52.30]:4672 helo=APC01-PSA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rUs5a-000000006oP-49qi

for sales@nk.ca;

Tue, 30 Jan 2024 10:40:07 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=Ml/kOLk2PJTGXFnK30a5Lbt/Ku093h2NitoK1K35oxjeOhuCsAlrf1Om/cshkq+8kRVMs9fW7QRsoc/kBb1vrhSx1ds3xOYJXePTWPxcU0dMmOmfV0Un9VnKCq0+5ny14gyXND3WO1+MWzVjCwNeJoqdDqRqzX5ttZXbtZPGQcKKYf9dly/laN7lQD3qRvc8jIZeoQlPo0BmrINwKOqsSmafxzVQkBZPcPbP/Up0ZcuQ7oS0KROULt+IaQdj4BD2lJbazSbj3pBOW8qcF5tetmmQmX4PmzS25AnlBCb6p1DXzC9QhWoraYAEEZT1rUxQpdy8irRLbrHtNdr28bOoeQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=YjkcI4hkTyxwo4vsZzb1p5zJO3mDPGhkZbVv9zO6F8o=;

b=g2MtohC6vkd00VfdW6t1CkrAYZgn+ahpG2UDpsTVO6iDfvaL7ElHHFe/exnmyAIm2Pc5UlmMGjnYhloyegCz0AjS9UkwTjzJFn9a9aMv0h1NdfFwgZq3xFmB+zIy7afoEtOLki0iUsy37ZcN66v0z+Z3HYuUSBO7Vm9VjFStFTYLEy/4Xe5sXpxf3ifO66dKAi4ukRNwxoWqrN06CpwZJxi83pOvbCkMMXGdW+f3J8HODaOUVF9yFq3D4ONPVg9xRdmWC80AXCunU0eNGacgk2reGmBj+EFkdt1OKIuSUSMte2P8PLTmPsRTV/v1Xa/Kv7f1lD3d0PMk+pot0MzuoA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=YjkcI4hkTyxwo4vsZzb1p5zJO3mDPGhkZbVv9zO6F8o=;

b=tyZJXypYHXFPmIczJ+AQfK0G/hlQX90tq8K0e6Rm5C9sojFncMfbmeemW8bnKs33+557P9TLxbyqA2aU/SSohRFgshbqjZGtDPWKirZtIvfIz/BUxJL6ziz+475s2bpG11JDlrB1xlDLZ3G+98Ihs7Y/hIz/Hty15RhkunN00e+9dSD5d+/LCJHQedDTAzmP+gtew62C7jl8sukchvdkMfOfeB9Te1sHC6f4u8aSZc+Oqsc4lUm1mhmHmGzziTQXegEfpfpupbyOy8X2POnuTRKMV6KQjOO02FAsrzgdHhAiW5W9PmupUsF0c8Xeq06JJiSNddttuQM7KqMTZRzKeQ==

Received: from TYZPR04MB6428.apcprd04.prod.outlook.com (2603:1096:400:28e::14)

by KL1PR0401MB6260.apcprd04.prod.outlook.com (2603:1096:820:9a::9) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7228.34; Tue, 30 Jan

2024 17:37:37 +0000

Received: from TYZPR04MB6428.apcprd04.prod.outlook.com

([fe80::dd47:ad51:884c:d0aa]) by TYZPR04MB6428.apcprd04.prod.outlook.com

([fe80::dd47:ad51:884c:d0aa%3]) with mapi id 15.20.7228.029; Tue, 30 Jan 2024

17:37:37 +0000

From: Journee Taylor

To: "info@unitedlayer.com"

Subject: Re: (Follow-up) Ref: Quotation and Proposal..^^^

Thread-Topic: (Follow-up) Ref: Quotation and Proposal..^^^

Thread-Index:

AQHaQnaWzIoNUbK0MEKNU+DU5uY9LLDQaEhHgAALq4CABKDqGoACHEgAgBan86WAAACze4ACLgyRgAK4yNQ=

Date: Tue, 30 Jan 2024 17:37:35 +0000

Message-ID:



References:













<1393753831.761636.1705121002104@mail.yahoo.com>







In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-exchange-messagesentrepresentingtype: 1

x-tmn: [UT4R469WcIBqidYtK3tqbaOFLoEuwdkYdMUJ6THCKUTysELXKLq4LBtzyXIjYpXM]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYZPR04MB6428:EE_|KL1PR0401MB6260:EE_

x-ms-office365-filtering-correlation-id: 77a64fcf-5650-4a5a-8d22-08dc21ba25aa

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam: BCL:0;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?KETTcIIVadT6CPyXoQLblZSILBqd1DVIlaR816AkQ3sPP0czyD4f9DJB?=

=?Windows-1252?Q?GYHeW2UO+9ozH22u2cMtz5bsF7Y1D99iNOvWjqfiGppObsDbh2aGfH8Y?=

=?Windows-1252?Q?QH1sTBxYeQsm0xtybtGAj7sa+r75x4v3D65wS3PgFisb++RTigo8HqPA?=

=?Windows-1252?Q?neAGykzaD2ttBg1kGwCXx7Tulbp42/jN3i1M+MAG1RdGAwxpMlKdtzo1?=

=?Windows-1252?Q?yiP3md86MaDTDvKpQ+FH8qxgs+e52PGOWEmZJF2wUQJVo7kGhXK3fkZ4?=

=?Windows-1252?Q?pCxde/k8GShaPI78Nyp9Ow7t6JHOwqDEH7tkeUO+wGwmGRvYsOa6YQA1?=

=?Windows-1252?Q?t7kowSj+Puvm0VhMRjxHnYbk+pIc+ePAV6LZz9D7jsIt7dcX3Tu8LvKf?=

=?Windows-1252?Q?ttCZxsaZGTLr1k57PQS373vVbPvaIuoJorjauSn7oe0sxFHXwMWhknhY?=

=?Windows-1252?Q?8T3XcKwJ50TDGjUA4uyyYuFMTrp7aMl3EZsX+C9vwFketVqPT6ReTnqz?=

=?Windows-1252?Q?FbbMYCtvjW0JJ3AEWYUSwlmkaJiJseBW8Iy/LHCW3Bly35bczC1wRwaO?=

=?Windows-1252?Q?TGzrsqKv/Zc1Kl945SpPBCz8stZ6ouYkGXdxVgS7IcwgBAvs5odBWjVd?=

=?Windows-1252?Q?NBfMjF1mt+esSIWUJg2AX5arWCs5o5cDn+EMgYsr+PFnXQQAAt38hHGq?=

=?Windows-1252?Q?2kQE4CTHFrBw6Kt+HtN+XI/DphC/6Ob8R795GOK86h1MpCr0hhIBntFm?=

=?Windows-1252?Q?Ql0bXsQGDanZs+sU8kUvPcWOs0dMvjLADGQBmVBIhefHq7U7V3aKfCQD?=

=?Windows-1252?Q?sFWmbGBoShwM/hJtZ1U8UtiYZBS3Ugaehra9GEs5DoIZuM1Xbxs+oq+7?=

=?Windows-1252?Q?tyyqexh+m/oAIdsdPsNb/yjYdYtif9tE71wziLne+t9PWW9bphM2ajVY?=

=?Windows-1252?Q?w4IqpcErLN8/7YdQVbeRnbze9rOfyURVSN+176HwT6JHe6ymg2AsXK8a?=

=?Windows-1252?Q?3u7YS9BxGUwfQfhC6lSNIDxGvtn04WVbnOhzBZgdU2D07M44dz5IA1wx?=

=?Windows-1252?Q?ZLlYNgFmI7npDLqoDLkFTTtkkGF2hboj6As3XdezwqLrYTS4hfScI9CU?=

=?Windows-1252?Q?B6umyjr+zU4L+8pObdxYqzHdBVCqP6UNmq6ubqRzwSxkI5LHM62d6hCA?=

=?Windows-1252?Q?OcouV2adrzqhFtngWnEyXBPbFY5QS+E79VhRmP9yyR2I6nVNf8/GP6cl?=

=?Windows-1252?Q?EzI1kHxhG52+ZbBgHo+z/0IhyRvt/f3xhvc4YmDeO5f0YSP9rC/++n9p?=

=?Windows-1252?Q?gflqoSKPz5r8+dAgAPhWeyVhz83YZ+qWZPuxgWsChY3Lm1L9cK3iZwJS?=

=?Windows-1252?Q?R6uRPfzPoBz/+A=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_TYZPR04MB6428DF0F0D3B82290FEAFD9A9C7D2TYZPR04MB6428apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYZPR04MB6428.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 77a64fcf-5650-4a5a-8d22-08dc21ba25aa

X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Jan 2024 17:37:35.8975

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: KL1PR0401MB6260

X-Antivirus: AVG (VPS 240130-4, 1/30/2024), Inbound message

X-Antivirus-Status: Clean



--_000_TYZPR04MB6428DF0F0D3B82290FEAFD9A9C7D2TYZPR04MB6428apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hello,



May I send you Audit Report Of your website?



Thank you



________________________________

From: Journee Taylor
ook.com>>

Sent: Tuesday, November 14, 2023 11:01 PM

Subject: Yes-Google's 1st page





Hi,



I looked over your website and believe that both it and your company have a=

lot of potential.



If you don=92t mind, I=92d like to send you an audit report of your website=

and some suggestions for how to significantly improve your visibility in t=

hese search results.



These are straight forward chores, and I'll provide a detailed report. You =

can clearly see what needs to be done to raise your rating.



or the location or state of your choice, we can get your website on the fir=

st page of Google.



Should I provide a quote to you? If you're thinking about it!



Thank you



Taylor



Marketing Manager











--_000_TYZPR04MB6428DF0F0D3B82290FEAFD9A9C7D2TYZPR04MB6428apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

    Hello,=




a0ba43aeyahoo_quoted">




eft: 1px solid rgb(204, 204, 204);">


ly: Calibri; font-size: 11pt; color: rgb(0, 0, 0);">May I send you Audit Re=

port Of your website?




ly: Calibri; font-size: 11pt; color: rgb(0, 0, 0);">Thank you






plyFwdMsg" dir=3D"ltr">


r: rgb(0, 0, 0);">From: Journee Taylor <
urneeTaylor1@outlook.com" id=3D"OWA5b14a408-eee6-86a8-a54d-db3088b8488f" cl=

ass=3D"x_x_x_x_ydpa0ba43aeyiv9688940060OWAAutoLink">JourneeTaylor1@outlook.=

com>


Sent: Tuesday, November 14, 2023 11:01 PM


Subject: Yes-Google's 1st page


 





amily: Calibri; font-size: 11pt;">

Hi,




amily: Calibri; font-size: 11pt;">

I looked over your website and believe=

that both it and your company have a lot of potential.




amily: Calibri; font-size: 11pt;">

If you don=92t mind, I=92d like to sen=

d you an audit report of your website and some suggestions for how to signi=

ficantly improve your visibility in these search results.




amily: Calibri; font-size: 11pt;">

These are straight forward chores, and=

I'll provide a detailed report. You can clearly see what needs to be done =

to raise your rating.




amily: Calibri; font-size: 11pt;">

or the location or state of your choic=

e, we can get your website on the first page of Google.




amily: Calibri; font-size: 11pt;">

Should I provide a quote to you? If yo=

u're thinking about it!




amily: Calibri; font-size: 11pt;">

Thank you




amily: Calibri; font-size: 11pt;">

Taylor




amily: Calibri; font-size: 11pt;">

Marketing Manager




amily: Calibri; font-size: 11pt;">

 




amily: Calibri; font-size: 11pt;">

 















--_000_TYZPR04MB6428DF0F0D3B82290FEAFD9A9C7D2TYZPR04MB6428apcp_--

Ace Hardware Unlocked Phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 30 Jan 2024 08:33:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rUq66-00000000Myg-26ow

for dave@doctor.nl2k.ab.ca;

Tue, 30 Jan 2024 08:32:26 -0700

Resent-From: The Doctor

Resent-Date: Tue, 30 Jan 2024 08:32:26 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn8nam12on2094.outbound.protection.outlook.com ([40.107.237.94]:51680 helo=NAM12-BN8-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rUp6A-00000000Fd3-3sMw

for doctor@doctor.nl2k.ab.ca;

Tue, 30 Jan 2024 07:28:31 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=lAczcLx0YOThO0rGfHQTvxnqXa1SQaa2IBXtb2p4JuliQL8/nck2g7XEr/3PB6KO1BW5S0ZrML2rvYaRemCDdK/przKoNoAX1cD4S9tnRiQWjTFyq5TOpqhF66UXRX9s31BwGzJL0+F9f8CrdNEbrXTwi119UM/0TKGL1NqwyJFfL+1WFOOdmPdutAWvkIKyNbMPIqDCywo3jZwYrFj5RmDn7dnb1A8KJTdYMn3GMGDYiwU1tpXDhpktjP+WpRHXqEfotkKm10uQzNQ4b8w8hmdjg7wlmY5WkhRsRkvUcgiyXrzVBsDYpDkfT/BjsCVYJsGkkM9OG1CnC6HXLyNmjg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=op8JvtXK/DyJVjWpQ3hrH6KfoHQIXLQs/NOQEle5Kqw=;

b=S71JO0ykR3GupEDfhpNhtY3FHjZngDle/lno8qU7Eb3HgpRt8QPMWBR9N+bObq/tRHkZCT+mHBAQUYeiauPc70gQynMW8gUH7Ry+S5Rhey7GH0qgoX3AwqxWb6SF9IqoB1PVVsqkgkJGn/qMhb5Ab69V7HV3MYsz+qowCRldFcDPrvVKcdYyAZ4p4zh+A9p2wgOI2J49bnFrhSIwg3JmwgkAn240ei7fFANn+bv3+KDocROuZVBYm8ef8HI+NfVMrWsQF73Fdrjh8B1QnoUAZ+04UDuZUBrYbwXBbceoypdVsexq3Ux2+EyE7zqIfWYfyZTfCc6I5q35w8PNGWrESA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

141.8.194.43) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.mailfrom=3bk04rulc9v6.onmicrosoft.com; dmarc=none action=none

header.from=3bk04rulc9v6.onmicrosoft.com; dkim=none (message not signed);

arc=none (0)

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 141.8.194.43)

smtp.mailfrom=3bk04rulc9v6.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none

header.from=3bk04rulc9v6.onmicrosoft.com;

MIME-Version: 1.0

X-TOI-MSGID: <2015232211.3D89BD34C93F9.1706624111971@vizio.com>

From: =?UTF-8?B?QWNlIEhhcmR3YXJlIFVubG9ja2Vk?=

To: doctor@doctor.nl2k.ab.ca

Content-Type: text/html; charset="UTF-8"

Importance: high

Date: Tue, 30 Jan 2024 15:15:11 +0100

Subject: =?UTF-8?B?Q29tcGxldGUgT3VyIFN1cnZleSBmb3IgYSBDaGFuY2UgdG8gV2luIEJpZw==?=

CC: doctor@doctor.nl2k.ab.ca

In-Reply-To: <7AtoiY43AC63GPTH5oAWMkWeziHELW@ozoKFiOUGV.3bk04rulc9v6.onmicrosoft.com>

Content-Transfer-Encoding: 7bit

Message-ID:

<7bfb2b5d-ff83-40e4-bc69-0616f6193cb3@CY4PEPF0000EDD4.namprd03.prod.outlook.com>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: CY4PEPF0000EDD4:EE_|CY8PR20MB5570:EE_

X-MS-Office365-Filtering-Correlation-Id: 0f5fded2-9aa2-4d1e-bf5d-08dc219f6de0

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:141.8.194.43;CTRY:RU;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.vizio.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230031)(396003)(376002)(136003)(346002)(39860400002)(230922051799003)(186009)(1800799012)(82310400011)(451199024)(64100799003)(1690799017)(7200799017)(40470700004)(46966006)(36840700001)(8400799017)(40480700001)(40460700003)(4523499012)(70586007)(26005)(5660300002)(41320700001)(336012)(9686003)(316002)(6916009)(786003)(4326008)(42186006)(70206006)(67280400001)(2906002)(8676002)(19625305002)(36860700001)(47076005)(86362001)(41300700001)(166002)(82740400003)(558084003)(478600001)(81166007)(8936002)(34020700004)(31696002)(36900700001);DIR:OUT;SFP:1102;

X-OriginatorOrg: 3bk04rulc9v6.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 Jan 2024 14:26:20.2980

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 0f5fded2-9aa2-4d1e-bf5d-08dc219f6de0

X-MS-Exchange-CrossTenant-Id: 9d0d3db0-678c-43c3-819e-703a85bbcd1b

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=9d0d3db0-678c-43c3-819e-703a85bbcd1b;Ip=[141.8.194.43];Helo=[mail.vizio.com]

X-MS-Exchange-CrossTenant-AuthSource:

CY4PEPF0000EDD4.namprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY8PR20MB5570

X-Spam_score: 12.2

X-Spam_score_int: 122

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: (1) Notifications



Content analysis details: (12.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: qoualetadoreno.blob.core.windows.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.107.237.94 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.107.237.94 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

1.0 HK_RANDOM_FROM From username looks random

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[tmtakas_jjvfmv(at)3bk04rulc9v6.onmicrosoft.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

0.0 URI_IMG_CWINDOWSNET Non-MSFT image hosted by Microsoft Azure infra,

likely phishing

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

-0.0 T_SCC_BODY_TEXT_LINE No description available.

2.9 SCC_BODY_URI_ONLY No description available.

3.5 HOSTED_IMG_DIRECT_MX Image hosted at large ecomm, CDN or hosting

site, message direct-to-mx

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} =?UTF-8?B?Q29tcGxldGUgT3VyIFN1cnZleSBmb3IgYSBDaGFuY2UgdG8gV2luIEJpZw==?=

X-Antivirus: AVG (VPS 240130-2, 1/30/2024), Inbound message

X-Antivirus-Status: Clean









(1) Notifications
























Web / SEO Spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 30 Jan 2024 06:22:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rUo3e-00000000DVy-1ED2

for dave@doctor.nl2k.ab.ca;

Tue, 30 Jan 2024 06:21:46 -0700

Resent-From: The Doctor

Resent-Date: Tue, 30 Jan 2024 06:21:46 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-sn1nam02olkn2106.outbound.protection.outlook.com ([40.92.44.106]:8086 helo=NAM02-SN1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rUnw1-00000000DD3-3dl7

for sales@nk.ca;

Tue, 30 Jan 2024 06:14:00 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=mNvYiom2TnS589BbklCPua3tGIkZejt4VBnj6Po+AaPp891X3D61e/iNA6uWowqr25XdNzzUR+I3wYhwv8OMKNoAsVojWAho7ulu4XLq7Y98Orb+cMGTDGc6N0pyWdAoWJY4FY2kBAxYmrqexMKGVbgTR+2ahFmvo1tv+l9RBXFaKWdWFhgcimGWHrJS5oJ4wbUlEbbjjJ7fS11hnUmUugcEtrgmFTeoTMCN4f7aMSHrbRrzX0Rgaj/yBG1QbKoVpi0cQDUttziOHEyfDiQtOUxSxOER5tANP+Wxl1Sp93vt0VyQFWs08EGm8wRQYWNgckhpJUqnnQVoiVjYkzkgOg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=c+dBvTrHTtbI2pMxBIQWOHb9scVw6p4+VJO676P9KrU=;

b=IsUU0aCwzqaLm3drm49iETRQUqJcsfDTOU3fqw0MwLcFLE6pkWgfkV6OchlTQ6+Gh8tTH0NIweiKY1M8hUzx2nc8Ts9iFnWnnlPt4WYGV7T5AxbNxOSFNCfsXobxO2IKVtWbgfSihhfjkIFNITBSf/mF5JSj8cHbpgtW48Fs6IRMiE5KtvslU5i/E8SQoraoovbqffnGtmCFnC5JDgZvlsI3tn+NQdD3rGkFqBIifJHmm2/urOkQpp0gZRGWktRTkrXyLrIepUgg/dWEI1+qsbzF0hx21Ft+ZVggWAmhN4mJ6uSwXQUuTgNQHf6UEOtY5Oyb0bfwRQNCJTdvvujUKw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=c+dBvTrHTtbI2pMxBIQWOHb9scVw6p4+VJO676P9KrU=;

b=c5ekf/Jn6g6QXF1w53NPIOLfn4rtnE48ggHyZafbA1/KOGtPKRXQwhfpkmlJP/MULPcKUyxbEINrxTRIp9RWzQKx1ntHRDBbiwv+xLk8meg0twPMrInTDw3GQk0pt6PpkWUiPozvbCs3Ifl5T1uoPGP7DqP8HHi5npO+klxMO47rUZL/1hS62AR1sHOvE/LCA29use3e96N2y0sx9ngB1G5xHsLlG7GuioNnzJ5qh6G/oSr5fxW3qrnGlAq7M2HxY0ov13mV3etPXNbS6V65G3d3gRLnNg+UZICJLIQjDpEeyzOgOd5+QxNynQVAWyS7xV0B3s9LDEvXjH2vjlsIDQ==

Received: from DS0PR10MB7296.namprd10.prod.outlook.com (2603:10b6:8:f8::21) by

IA1PR10MB7198.namprd10.prod.outlook.com (2603:10b6:208:3f3::17) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7228.32; Tue, 30 Jan

2024 13:11:34 +0000

Received: from DS0PR10MB7296.namprd10.prod.outlook.com

([fe80::47f6:9e85:53e7:6886]) by DS0PR10MB7296.namprd10.prod.outlook.com

([fe80::47f6:9e85:53e7:6886%6]) with mapi id 15.20.7228.029; Tue, 30 Jan 2024

13:11:34 +0000

From: "Aarya"

To: "Aarya"

Subject: Proposal ..?

Date: Tue, 30 Jan 2024 18:40:42 +0530

Message-ID:



Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0056_01DA53AC.15207560"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdpTfOpqvrjb0WGHRbCbB4TmVKSuGw==

Content-Language: en-us

X-TMN: [JNvKr4fC/1CBorM8TI7zX8ChPtr3UgqA]

X-ClientProxiedBy: BM1PR01CA0163.INDPRD01.PROD.OUTLOOK.COM

(2603:1096:b00:68::33) To DS0PR10MB7296.namprd10.prod.outlook.com

(2603:10b6:8:f8::21)

X-Microsoft-Original-Message-ID: <005501da537d$fb683960$f238ac20$@com>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DS0PR10MB7296:EE_|IA1PR10MB7198:EE_

X-MS-Office365-Filtering-Correlation-Id: 8fa6a666-a48e-466d-1ef3-08dc2194fa90

X-MS-Exchange-SLBlob-MailProps:

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

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

65W7Mbx7dTsWwZ019I82cmRAYWuQA8GSmwcn+YkuEp6bTIyYZiQLV2YrIIPhO1qt5ZGMaRdrUqCDMIrMF1g46e3ziDsfEDbdg0UiGf6nyO7rxLzmP4nlyTVuT/pRkw0aC1anhDxRAS5ClGM3mpKQMdJBiRWfZx9J1jNfIZaOgmA/mNRy+QgfC6bkJP1bxaPVIWvXMP0YBWQvXXMPTAceswYTPvJFqQpXbI0xNJRjJlfimZ3ewxzCX1mm+AfmPc1ivs2MS25oI8oE3tdYqh/X//oaA5dIFh8dCYsUzwPINPm0dFnu3yhrafG+sTostWsXBZnjk66p9IM0sudb2nv41z+YtbjNIz6hjuQhLbgMdb12SNovuLmjBR7XoSvr4P1w8BDnY19Gcfky4YzxQXxZfQ93WkTGO766o5wzndKMEkW9t45crF0yqubhmDCvkqGYhz4zjxgr0vNB4AjCpd0aq1zn+uUdP2oSgOojFBfPzoBFkABECHWU8qaoDK9bLyENihU29BMjh3/6aPybbOTxouJiteJU46YNzLrJGDn0OadsyN1VJsRb/s+wNbmFtAMSPE0SkpBFXp2bvYM1QxNoj74TKeXpYGVDpLxEOUnAxDFrBZYkGZYVMxgoEYF8LLyC

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?us-ascii?Q?lND6U4vXHVkAi18KF9B0nxoyJsQrBjXglbhiVo78V4fP315JT3krNXngBO1T?=

=?us-ascii?Q?eHVCepz3dZUgzlybEgTqGbBkfOHM4axZ0mrOvg4qHqrhjjqpwDh+p69aCWxK?=

=?us-ascii?Q?uyGcKX6D15AaSLpPzqiqMMqL2JwpJ2Io/TFPNjktQ0hcJAwf25ioE8oz9zwt?=

=?us-ascii?Q?DeCscmZmPPpoLDxwjQ4UZok/14BPKsaJM0UcRqpDePqA5qfC92jaeKdya1Jx?=

=?us-ascii?Q?SUq9w6ZONocNbKm6qm2EFzj2JJjgF4yJSDyUbc+T2be2jfHXzIGTJpyDfqpX?=

=?us-ascii?Q?J3MHNEZtxDtrXg8yZPDgJ9MIGxebX5Ps0yLYYOrPfFr/VCULuccwFx7r/yR8?=

=?us-ascii?Q?64zZcwWn/YHdulyAMtdaVsfpOqU/zxAdJpEFPybLHLip8+s/J+Bt/jeHNqoH?=

=?us-ascii?Q?nkgg20MTmUNlV474Af3/tVhZdC/qXBwuq1SSEwX+mzjIthUmHEBaXg/K4EU0?=

=?us-ascii?Q?zGGnBPQOkrtf7CF9jnxFiyl2wcsIxXo1LXajz5S7E0kmRXUPEqoQHmkhN3Je?=

=?us-ascii?Q?QKv4srRMR9t2HCyiqwYukNmWb+4BXd4AnHg1SO3s+9KZLFNMavt3bGDXAHt1?=

=?us-ascii?Q?vJ7wDZI3Ij1yTrE5IhOR3PHWJzOuA57pD7vN8QSm47it0aIbu8OTNvUuu5hN?=

=?us-ascii?Q?IHCsPznFvL3Pg+oJni9NDrYYkH2/bNlJ92ryca5/IuUXE7v0uOB+v8j4D2v+?=

=?us-ascii?Q?ol7H9HuWTVLF8L9cXloTN7/BLiyhhz+yd9OtBPKZjEU2kezitDbLxhsrBcZv?=

=?us-ascii?Q?BdsasiQFBsdT+CanZvpbjvmLsoI639CmYrW+B89sW+XqfhRaT1ZS8ftMJf7n?=

=?us-ascii?Q?JbB4XcUBEPhbf7gFF/URAqjEOEHFCzni8On50j00XVtyDVX7Bi8b62ImXbyc?=

=?us-ascii?Q?jsTrEHksWKsRqkW/91vf6C2b6jSPVwYh0Gt2dV3ELgf4C6Dz8Ua8duPT1VeN?=

=?us-ascii?Q?TtPC7hDNtl/qH/r0RXbk5rnBg2Rq+bu/P+eAdFKpcIR5aIpfkPkU96x/6px9?=

=?us-ascii?Q?JzXdN3g+T6wtvOx3dDAmKPfGw0tFT/jUgWXgOHrabQ2ASIzObBynna/SxGme?=

=?us-ascii?Q?II2mAl5KMdMzbui8JwXDPUz0sCrxLY0esvkEj8RKERjgT7NFVwBAFp4gvslp?=

=?us-ascii?Q?dIFpwb06C8gYZ6qXBuDlBPzJ+sMXSsld9pkCo1jyGXjJrASKjkjy24UggaYd?=

=?us-ascii?Q?v6G1Wm4yI7v5nEz9o2PC9f1SuGXSbd0jREppjP0AkV/b/437XUMDttVz/RM?=

=?us-ascii?Q?=3D?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: 8fa6a666-a48e-466d-1ef3-08dc2194fa90

X-MS-Exchange-CrossTenant-AuthSource: DS0PR10MB7296.namprd10.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 Jan 2024 13:11:34.1195

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA1PR10MB7198

X-Antivirus: AVG (VPS 240130-2, 1/30/2024), Inbound message

X-Antivirus-Status: Clean



------=_NextPart_000_0056_01DA53AC.15207560

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,



I found your detail on Google.com and I have looked at your website and

realize your website is great design but your website ranking not good all

search engine Google, AOL, Yahoo, and Bing.



Do you want more targeted visitors on your website?



We can place your website on Google's 1st page. Yahoo, etc.).



May I send you quote? If interested.



Regards,



Aarya





------=_NextPart_000_0056_01DA53AC.15207560

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable






>


00">

Proposal ..?










n lang=3D"en-in">Hi,





I found your detail on
n lang=3D"en-us">
22" face=3D"Arial"> 
an>
=3D"#17365D" face=3D"Cambria">Google.com
us">
#17365D" face=3D"Cambria"> and I have looked at your website and reali=

ze your website is great design but your website ranking not good all searc=

h engine Google, AOL, Yahoo, and Bing.





Do you want more targeted visitors on your website?





We can place your website on Google's 1st page. Yahoo,  etc.).





May I send you quote? If interested.





Regards,






b>A=

arya







=



------=_NextPart_000_0056_01DA53AC.15207560--

Web / SEO Spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Jan 2024 18:18:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rUckc-000000006vM-2bvN

for dave@doctor.nl2k.ab.ca;

Mon, 29 Jan 2024 18:17:22 -0700

Resent-From: The Doctor

Resent-Date: Mon, 29 Jan 2024 18:17:22 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-psaapc01olkn2097.outbound.protection.outlook.com ([40.92.52.97]:15681 helo=APC01-PSA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rUbpy-000000001Ii-0Ksv

for root@nk.ca;

Mon, 29 Jan 2024 17:18:53 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=A1+dFBeYsUeAPClGGMNXK+QOgdlTEg19U6OuE7OuOJtBzGIalH5zh2lTjooMo8p3FCl258rpK67YgK0GfBwvFWdUPc//ynd2tt5EfBixMMtSFrd/Owrg0uTcGpU4EqjxlHVjN8bhxmalvMx9rcVJ8qvXwuoHEbG4gR52kzvxs0/BNBT8V5A6BHgNsawRDNE5CyaCaBX84V0fHncrnm4GnuyFLXijuw1QBhx8IGEq1N8j3p/XOOgWyWNfvatPJtFGPYDyYYv9zKXLPTdKKIDaeLa7NbINZf1Un5Ytq7L/mq2Dq+TBbcxMFI/IeK+3kd3ZR6MVLhPnhjMgsn49l0lVsg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=RuRJcwVjjGt5Vn4XA1rsZ7ND0SJ100lgU2roGYMztuM=;

b=JNssMdEfFSVBjS22+OsmTpxnTWfJEHNtaIOhDCjkHz4YhKt/SvxDJZ9bSQJO95DCvNRxjo+jpmzo/lZEMeusrTTPl1ca6cIYcxp9JNxNeYxpsGK2cRJKBNwy8aafraEcQcNS0S2UYKZ2Jyu1AWY6RwVA1fQ3dypk8lQ12HPIYNy4siyzEsh+Y2byKNqLB5C0jXWqZ9cXIGLkVTySlzoderNf2tuQRQH8ArjtPQaZ2l6CkBaRt+4ukghQ1l4AIPlGQaTPNbjWcLFSTbyc6FbhHmAnKsw3duaFaBIg3bspS4DG/kU/jqo5LbaMV3y+rio0nH20R5eQ/4+VJOrdT2QkyA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=RuRJcwVjjGt5Vn4XA1rsZ7ND0SJ100lgU2roGYMztuM=;

b=BbiW9diAkplnYgPT/YMZr4B/AxCjoLHSMZaN7MTkfccFGXWgshUlSTN8801lM7BEmL1AZ4DOeKiL+vpYFbA2ffTrSHDbptcuVKe2mumDi5BRhJ4CuszvKydiCB5uD+s3aGFi3Jfe3CP4/2qUSkmONXUAo9TzEwunjyr06M0POsVoKEgKCydAPhQWfQ+S7DnI/P6iEp4NBTYdHcettM0NCji9IqJSjkdR5LoUTIf2bY93n7r75ThT7+OAgP/Yyr00EPM9dHj/L7ubri2NHdjC3DVMWDsjvIPGnl5wDLGOenNX+O/uNe8IBYkIQrbnlQKFBQt5DGGKYS740PLdFxiaaw==

Received: from TY0PR0101MB4311.apcprd01.prod.exchangelabs.com

(2603:1096:400:1b3::10) by TYUPR01MB5106.apcprd01.prod.exchangelabs.com

(2603:1096:400:35b::13) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7228.32; Tue, 30 Jan

2024 00:15:43 +0000

Received: from TY0PR0101MB4311.apcprd01.prod.exchangelabs.com

([fe80::1310:8221:ef4d:bd6f]) by

TY0PR0101MB4311.apcprd01.prod.exchangelabs.com

([fe80::1310:8221:ef4d:bd6f%7]) with mapi id 15.20.7228.029; Tue, 30 Jan 2024

00:15:43 +0000

From: Cynthiya Gray

Subject: Re: web design

Thread-Topic: web design

Thread-Index: AQHaQKhw/JzZgAzvN0+5SHHEQaA3VbDx/Xqs

Date: Tue, 30 Jan 2024 00:15:41 +0000

Message-ID:



References:



In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [pmprVEPatr29pssqnUZYXd+JoGHoUJvIuE3DxqD7QyagyWVDZviQZkU8Vjs1f/hv]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TY0PR0101MB4311:EE_|TYUPR01MB5106:EE_

x-ms-office365-filtering-correlation-id: 02a99e2a-e6ef-487a-ef03-08dc2128983b

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam: BCL:0;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?5WYXo1WGxSOiInQXPhIC9iVg5OYJ3aWWz1vD7hckPrtMVu9d6YSZIAef?=

=?Windows-1252?Q?bie9E9MVrs0PoPHvMlTTCcNmJJ0vJXLMVD9qf4VPw4du9zHr8hh5tDFV?=

=?Windows-1252?Q?9zTjDi2iNWgIYbGiFzNydJWpojEfDKarkItOZMkcjf4bhkzn3Q96phxv?=

=?Windows-1252?Q?eeJMfIRdL0AQoZjOlj8fqHbO8cPVceWGvd8W3YnkEx5a9ef/9loG2cNb?=

=?Windows-1252?Q?YjrpBOF9AQzbXPK4UbGQJPUB9TWDTAH00YqffM2AudouFnwTtYY4gtE1?=

=?Windows-1252?Q?SA7pp4sgfU80md0ScjOrJ8SJODp5W17xkW6hRmQ3C5HWvh4LeOFvvZae?=

=?Windows-1252?Q?0jNuYlXMjFRvGnBvATS6wYMrwbNnACpAR6Rs5O4C/oIRdMTrSc+sP3p4?=

=?Windows-1252?Q?TxbDWhENHZ4TNtVt1qCpwtlcVSFaDJna2R4Yylsb2FZgFKzaoelrvT+m?=

=?Windows-1252?Q?RJUqFUYnay0OHW8n331WMiLEmrDKt5A2wEUHeuHZzg9khZ/iCV95c7Zr?=

=?Windows-1252?Q?wW72RKAfjnPjVNy6sAcqjU0iz0CbrxpkEQfborMCQmm/VxUnZCR104XQ?=

=?Windows-1252?Q?We5cs8Mrlhy9xjUg7+3d8b6cWxkoxn6XPW29IvIQFbVVdrILC1atBXSY?=

=?Windows-1252?Q?5Z6YnlCm/EN9M3H/nAjS1m4LZRzHJMEqcMauMmp+RHEArqAjHTDvl5vl?=

=?Windows-1252?Q?u/adje0ImVC2CLoWVKXeJEeHAbJS9N5gEDjprjIelWX2vT3Ie3sMM4ZF?=

=?Windows-1252?Q?96VSrGe4Jg6P/KQcB+2T3tyoKcngjTWLhwFXBGzGfi9+wNlkq+mLrh8G?=

=?Windows-1252?Q?Uaq/wLDR4iaSMdI9pODKqso7LTUM70fLRj9MoN6F71H21Eb4ljYHOZEO?=

=?Windows-1252?Q?JAB7DFJlTnaBvMOiehL4KiEjEPv/L5aHyjLjGXi8ui159cYqG75Q2WGw?=

=?Windows-1252?Q?2t6llXsOVF5ZteSGFhA8SR2upnb8M7K0SJ+oZQr6hkkJED6nG1jD4ZT3?=

=?Windows-1252?Q?tHkml7FgNIZRldue4u8o6/9st9OLw5PgwiljZTY28kCCketYYSQnczl+?=

=?Windows-1252?Q?4Kjh+ZQhGx136jgT+DL/6OipcBFcxTO42ylVhQxFsxpGhSLRf1XQEjel?=

=?Windows-1252?Q?5Ib1oxZRme0TId2euZ/dhqMGnAF4nK1p8o7X1yAvgJ7gYE0r6ZrEFYku?=

=?Windows-1252?Q?Xnop898ui1My+137NAnMqLlZKZCByn0GzMHEsVDk5KA3U6XVrjXONaE6?=

=?Windows-1252?Q?tVJEZqzYwLr7Oi2LPB5viMYl+OD4rM9/ysGJLoXyk9bfyiz8on7RhVFR?=

=?Windows-1252?Q?aQSeT/5o/aNoTPZ0Te9JCoxGolH9rN6WBeOXLpqpICQg4IQCtI9fGdlQ?=

=?Windows-1252?Q?qZ2dyZRdL2dzTQ=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_TY0PR0101MB43117D3C85C68DE20A32937FBC7D2TY0PR0101MB4311_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TY0PR0101MB4311.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 02a99e2a-e6ef-487a-ef03-08dc2128983b

X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Jan 2024 00:15:41.5886

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYUPR01MB5106

X-Antivirus: AVG (VPS 240129-6, 1/29/2024), Inbound message

X-Antivirus-Status: Clean



--_000_TY0PR0101MB43117D3C85C68DE20A32937FBC7D2TY0PR0101MB4311_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi







Sorry to bother you again.



I=92m writing to follow up on my last email.



If you are interested any of these resources needed or have a custom requir=

ement, please let me know so that I can send you more details on the sample=

s for review, Client testimonials and service packages.



I am waiting to hear from you.



Thanks!!



________________________________

From: Cynthiya Gray

Sent: Saturday, January 6, 2024 7:30 PM

Subject: web design





Hi







We are Web development company who builds amazing looking websites for smal=

l businesses.







I=92d like to have the chance to show you how I can improve for your busine=

ss.







I=92m an expert in the Wordpress website platform and many other platforms =

and shopping carts.







I can upgrade your existing website or build you a new one completely that =

has all of the modern features and functionality.







Would you be available in the next few days for a quick consultation?



I=92d like to share with you my ideas and some expert advice, show you my p=

ast work with other clients, get your feedback, and give you a proposal.







Thank You.



Cynthiya



--_000_TY0PR0101MB43117D3C85C68DE20A32937FBC7D2TY0PR0101MB4311_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








y: Calibri, sans-serif; font-size: 11pt; color: black;">Hi




an style=3D"font-family: Calibri, sans-serif; font-size: 11pt; color: black=

;"> 




pt;">
r: black;">Sorry to bother you again. 




pt;">
r: black;">I=92m writing to follow up on my last email.  




pt;">
r: black;">If you are interested any of these resources needed or have a cu=

stom requirement,


lor: rgb(0, 176, 80);">please let me know so that I can send you more detai=

ls on the samples for review, Client testimonials and service packages
n>
rgb(45, 16, 222);">.
font-size: 11pt; color: black;"> 




pt;">
r: black;">I am waiting to hear from you. 




an style=3D"font-family: Calibri, sans-serif; font-size: 11pt; color: black=

;">Thanks!!
ont-size: 11pt; color: rgb(112, 48, 160);"> 








yle=3D"font-size:11pt" color=3D"#000000">From: Cynthiya Gray


Sent: Saturday, January 6, 2024 7:30 PM


Subject: web design

 











ize:11pt; margin:0in">

Hi   =

;




ize:11pt; margin:0in">

 




ize:11pt; margin:0in">

We are Web developm=

ent company who builds amazing looking websites for small businesses. =

 




ize:11pt; margin:0in">

 




ize:11pt; margin:0in">

I=92d like to ha=

ve the chance to show you how I can improve for your business. =




ize:11pt; margin:0in">

 




ize:11pt; margin:0in">

I=92m an expert in =

the Wordpress website platform and many other platforms and shopping carts.=

 




ize:11pt; margin:0in">

 




ize:11pt; margin:0in">

I can upgrade your =

existing website or build you a new one completely that has all of the mode=

rn features and functionality. 




ize:11pt; margin:0in">

 




ize:11pt; margin:0in">

Would you be availa=

ble in the next few days for a quick consultation?  
style=3D""> 




ize:11pt; margin:0in">

I=92d like to sh=

are with you my ideas and some expert advice, show you my past work with ot=

her clients, get your feedback, and give you a proposal. 
p>


ize:11pt; margin:0in">

 




ize:11pt; margin:0in">

Thank You.
pan style=3D""> 






libri, sans-serif">Cynthiya
t>










--_000_TY0PR0101MB43117D3C85C68DE20A32937FBC7D2TY0PR0101MB4311_--

Ukrainian dating spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 24 Jan 2024 18:50:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rSorc-000000008ro-1wcl

for dave@doctor.nl2k.ab.ca;

Wed, 24 Jan 2024 18:49:08 -0700

Resent-From: The Doctor

Resent-Date: Wed, 24 Jan 2024 18:49:08 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westus2azolkn19012035.outbound.protection.outlook.com ([52.103.10.35]:29403 helo=MW2PR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rSnQq-00000000JPU-1Hcv

for doctor@mail.nl2k.ab.ca;

Wed, 24 Jan 2024 17:17:27 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=OAC6k0rUXF73Rn7NKNy7zAOUL6C5KEY5oFPi+YJxPTD6Ch0a4BX7jzjQ22q0G6P51iZ9MU6h9ZlgPYxPNzDZvfM5bdEaRogf16HdRsqs3SwVstolCNE2wx8FRNZhHqV7X/nqJZLNdq80c3w/2R69hZIlUy++XSgdJgSZxnHaOtqnNQ9phddEkm61qJZ1ZSLrOYNp5XEx5ZM/LTLV0obY5AJutJuuW4x4ubjaebfZkAB/Z6cZZLI9EXKbNwtkmh8KvI7KeSjEtU3DOoJ1a6DeAk2kWc7OrPXuL5BbTQojdsDvOrNfse/D4CXmIWmnIt88Y/7P306SHaqip9Vv8AkIrQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=66gvxVK32bFOAGOjDCL3NJgEBexxaTcLhmC+Oa6My9s=;

b=KBCxI4bA0pT+0tPGRjbQMwML8IL6/yaQHAOsrQj1qjXHSCnnnJyfmaF20aDzrRHZ6hBiuion8G6GIrPk6pBykwmS3kWYgT/ggOuCHcbSJqb1/aVKBL9ten6QWjQlCQcg9MWF0BpQ7v5MZr1LTKmv70ZIPGANn+Q1rdhuAbywPYphSRNh3gQs2f5n3XGo2PVCuQQ4YHlcWsljOwLrpDh2G3VEnHXHZpPHjTXpXgY4MmJx5Fp6QboSz755BzAOoR5/jQZI4FJyUomVsxBMzokPY3CPjzb+NV+UPuxsPnZH3DSjDVNnUKJdbF7tlLBkYw1ars8Cwz8XH0AHE50L5OJGug==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=66gvxVK32bFOAGOjDCL3NJgEBexxaTcLhmC+Oa6My9s=;

b=eXPNNvfl9pKxyJLlkKw/p5nFllXJfQaTzUhCaep5Vrol/mA5vbWCHCpKRwbJZ4RiGAthT72nSQeLVS73A3GMNolGEuYIVRxLXBV6dq3cSiwypwb2Xefh4AqvIQ+mS84AB5udaI8Fom4jnga7qsgD3TihYwfGGQxI3ZfspPUlXS57h7nUZ9qtGADYGtNXCvHhZ7mbOQ/pwvxJua88vKUQnpSFLjkSv4Gobw4TS8E4+9DVTUL4iPXzTL7q/RNVYtQ3Y+rMK87u+Hl9AGWlrTFpn+ocAxRJIfU3W3BjE9mYW10K5CxdrZ0Tp+/VeiE78MTjM0Qqinv2t/Mi/0xoNTtQzw==

Received: from CO6PR05MB7682.namprd05.prod.outlook.com (2603:10b6:5:343::23)

by MW4PR05MB8915.namprd05.prod.outlook.com (2603:10b6:303:132::5) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7228.26; Thu, 25 Jan

2024 00:15:12 +0000

Received: from CO6PR05MB7682.namprd05.prod.outlook.com

([fe80::a3ca:c9df:93a6:663d]) by CO6PR05MB7682.namprd05.prod.outlook.com

([fe80::a3ca:c9df:93a6:663d%7]) with mapi id 15.20.7228.022; Thu, 25 Jan 2024

00:15:12 +0000

X-Mailer: MailBee.NET 12.3.1.667

From: "timzavyn0@outlook.com"

Subject: UA woman are in your area!

Reply-To: "timzavyn0@outlook.com"

Date: Thu, 25 Jan 2024 01:15:08 +0100

Message-ID:



Content-Type: multipart/alternative;

boundary="----=_NextPart_000_832E_4AA6011F.09B1F049"

To: Undisclosed recipients:;

X-TMN: [IcTm881WBWNhkcIclYIRp5eczhn1aZ8U]

X-ClientProxiedBy: VI1PR0102CA0086.eurprd01.prod.exchangelabs.com

(2603:10a6:803:15::27) To CO6PR05MB7682.namprd05.prod.outlook.com

(2603:10b6:5:343::23)

X-Microsoft-Original-Message-ID: <1.c39947b705e66da384af@DESKTOP-PKC9ISR>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: CO6PR05MB7682:EE_|MW4PR05MB8915:EE_

X-MS-Office365-Filtering-Correlation-Id: 2c9ae1cb-66cb-483c-f2a4-08dc1d3ab231

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

Q0ujJX+0XKxvzTgKWad4mgvReU9pM27YCEiVFesw94lu4ViiTQ0G58CtKRD9+REAeL3ZXzdNzmE310hdb21b2WRDHav7gqt9F/gadvb7MCDIRvxKwvredpewFdqkFVOrEFMtBAmjgNAZZFTkGtz25jH/znxNlua9+lWgiYkQmTGBdFUUJ/mAa3wAlonpLcp0PhmscrCixYA2t9NjDOCQYLzs3mNkaFP2M0czIgrbQ06bWMK/uoXJ9FkGg2EWi19HCEE6QjilZH25fCizR4/dDBRK+eIWr0WlqN5h8D54+65EUc6lmBSRlSu+iC0gdU6pnqEocOQvrGR97SXGXbGy4Z3/UrKmsBI48ri/BV65934pQz0VSWDX7cv4ZCRXd35v5P3dfBmnuSZkiDHYC1xoxPDSeUvXuBir3qb5TsMnNUypZtRhTKbO1ng45Vt6esitUkSHC/yEo6zJ6qlkkmHuPlKqIbhx53OVcOw/i+LDwJ1iNrDy/+7FWpBdlOX2omV3PWbCj9RYckjcXLWxwk5LeThQqGzdi9ceFvHIxX4/S4ACxWhJYISCMgCzVWBWC215fF2gSs+YwMbsjIUFCyul8iBDEsWGSPX/mPJTR8Eo7ug24vqfodKEDFRjEIdvXbAyL67Otl3crl5PLzUyvfEzordbvDy+FczgPsxcagRiIaSZINCEbxbK8/U+fGTXJ+55wlUOq3ZqMsyD541LRb91vAd6WTVonCeVAt9de23Uv6MZ1hwiHzNgFDPpfrJ+B0F1J8V+1d3NSWGEzHO/cMD2pA==

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?OWFPenNSaTdJYWtNZGVCcXdqckRmQ1JXUlAwZHhNa1RpeFRTMnhkUWJMMGgr?=

=?utf-8?B?eGR6MERjd1lzQlU1d3V0L3JsSmF2NEZrRTc4Z0duM054R0hma1hHMG11Q3N4?=

=?utf-8?B?bG1kTW5ScDZraXl3MmNHK0VmMHZyWVZFcDd3byt1QmM3azFKOGFUazQyY0pC?=

=?utf-8?B?UXR6MEozN05WWmtYWm9jeFBva0xrUkhia3V0UGVuVlErY0t1K3cxK2I4TVg5?=

=?utf-8?B?Z1kzcmlpUlEyQi9qRnVONng0dEFLZFNlc1NjVGlLY3Z2R0tTTjJzRzh1TW1o?=

=?utf-8?B?Tjk1WDMyelhoQ1RkWXN5OEIrb3kzZ0RMUkxUU0tCVURvWm15ZWhmZlFkVS96?=

=?utf-8?B?bUFYSlR5Y3ZYb2tkdlNveGV4bGk5MHBkRWtVWmZyMGZLbndoakFNSEtaVmVl?=

=?utf-8?B?VnpuaHE1WkRhNEJGYWNrOTRBdnJ1MGM2c2kyWjdyVC92emFtMko0UFF2bUJy?=

=?utf-8?B?VW5mWjY3WkRNQ29kVHRlc3diTzZPQUx6U2lJRm1QTnVZOFB6RXhNcHltYjYw?=

=?utf-8?B?eEtqUm9Sd1NRTmI5ZWNqcTI5bFVUZ245MHpVUVQ5V2hCRzg1MEpFTUh5NjV4?=

=?utf-8?B?c051S20ySjQ0M0tlVjE0VEU4cHl5OWN2ekV6TFcrdWVtZ2ltWFpobnhsUUgr?=

=?utf-8?B?emU3SjVqQVVTMGxLTXJuQmJYK290L2llbXBMeVdpVHc0WXkySGhvS2JMSVpo?=

=?utf-8?B?ZDNoSjZGeU9WVysvTTB0QnQ5YXhQcmNmOGFzeGlyY050TWJMaVpaL0Y2TDUy?=

=?utf-8?B?QW1GSEVRUXoyREQ3M004R2lMY0xXdU4xSVhQbDRGY1o0RmR0U084MmVnQytt?=

=?utf-8?B?UVg0eEEwcmdqZUdFYnl1L213WDNQVHRuRmpBalZIRlVFRkh4ekpuNm0vT2Jr?=

=?utf-8?B?aEx2WXNkdFFMUG40MDVYMWJBd05KZUt2VEIwZjNwQWFXeXVDOW13K2hKVzZ3?=

=?utf-8?B?Ulk5aFJxTldCUGJmL0s1M3Vtb05NWGVTMHRkamJkcDZYUUNrdjZneEpQWDZo?=

=?utf-8?B?bVBhVjIreStnSDMrTlltcEsvZXdDZkpnM09XL3Axdk9wSitBemsyM2V6Ty9C?=

=?utf-8?B?ZG11bWdGRitwUyswZjJUcjR3M3RwT3pQVjlhUlJERnhFejZ3Q0ZzR0RYU1RL?=

=?utf-8?B?dmZTQ1dVWHY1Rnl5RjVieVg1eXYwSHVxZERXYXlEeW02NG1DdWQyRnFEU090?=

=?utf-8?B?aFM3S2U0L2ZtSExiYi9WOVBtd2ZhekNZcDFRWVNOdGhDRjE3b0JFNllCZ2hy?=

=?utf-8?B?VWw3LzBFTXJFUlpEMVJqRURFT21uVWZNOVhXUWo2amNraEVOb01Fd3pYQkg2?=

=?utf-8?B?OEtZd01PQVlWMXU2SGJmQ1pHTmt1RUNkZFhaclFRZlAralU0cnFoQVVCVDZZ?=

=?utf-8?B?RGY3WVRBanltUC9rQjZUSUIwUk5TQzlMQjRnZjNGUWFSK2h0NkZMa2xnMURP?=

=?utf-8?B?Um5PZEtyYk5rU1U0WG5XMnVUUGhway9UaVlRRFgyYjNqT3I1aHBCaDd2MmZG?=

=?utf-8?B?SzllVjJEeWw1VjlPQjlmTm9YYWJ0VXcyelRSMXVnMVBkdVpuZWZlMUN6cDNr?=

=?utf-8?B?d0pQNzhVcUExUUJYM1RPZnYvcTRheDI5VE85UTZ1aTNGVXVsNVFvTG5EdFhl?=

=?utf-8?Q?Vw+04M6BLJeUGClh44lYnqXOZhb+vhxlXvOWaqlkkHqo=3D?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: 2c9ae1cb-66cb-483c-f2a4-08dc1d3ab231

X-MS-Exchange-CrossTenant-AuthSource: CO6PR05MB7682.namprd05.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 25 Jan 2024 00:15:11.6346

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW4PR05MB8915

X-Antivirus: AVG (VPS 240124-26, 1/24/2024), Inbound message

X-Antivirus-Status: Clean



------=_NextPart_000_832E_4AA6011F.09B1F049

Content-Type: text/plain;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Do you live in Canada and want to meet the world's most beautiful woman?



Ukrainian women are the most beautiful and loyal women in the world. We ha=

ve created a page where you can meet Ukrainian women near you today!



As a result of the situation in Ukraine, over 10,000,000 people have left =

Ukraine, and more than 500,000 people are expected to arrive in these count=

ries by the end of 2024. More than 300,000 people are already living in the=

se countries.



If you want to meet, chat and find someone, check out our new brand today!











DateUkraineGirl



=E2=9C=94=EF=B8=8FRegistration is free =E2=9C=94=EF=B8=8F



=E2=9C=94=EF=B8=8F All members are verified and approved. =E2=9C=94=EF=B8=

=8F



=E2=9C=94=EF=B8=8FMore than 150,000 Ukrainian women on the site =E2=9C=94=

=EF=B8=8F







The site offers many features: chat, camera, conversations, stickers and ma=

ny more options that you can try today!





This limited time offer lets you sign up for free every day





All users are verified and genuine. Sign up for free today!









Take me away from listening





































here









































































































=



------=_NextPart_000_832E_4AA6011F.09B1F049

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




style=3D"font-weight:normal;" id=3D"docs-internal-guid-c238bec7-7fff-bec8-=

d5c5-db2e36c33f0a">=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Do you live in Canada and want to meet the world's most beautiful woman?
pan>=0A=

=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Ukrainian women are the most beautiful and loyal women in the world. We hav=

e created a page where you can meet Ukrainian women near you today!=

=0A=

=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

As a result of the situation in Ukraine, over 10,000,000 people have left U=

kraine, and more than 500,000 people are expected to arrive in these countr=

ies by the end of 2024. More than 300,000 people are already living in thes=

e countries.=0A=

=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

If you want to meet, chat and find someone, check out our new brand today!<=

/span>=0A=

=0A=


=0A=


=0A=


margin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=


;height:252px;">
_z8YirALzsiy0BvjHtnedBREnCzymmlgI3Kf31HyUwn830RJpw52jwyVoQkyspH9bzuQB4hY36c=

reWFXdFa7Ra6q-FHFmJj9R2CV-_E99QCCq_YmCJyo1dTnPO4GzP4I5UNInhWFILbwU" style=

=3D"margin-left:0px;margin-top:0px;" width=3D"624" height=3D"252">
span>=0A=

=0A=


=0A=


=0A=


gin-top:0pt;margin-bottom:0pt;">=0A=


pan style=3D"font-size:20pt;font-family:Arial,sans-serif;color:#1155cc;back=

ground-color:transparent;font-weight:700;font-style:normal;font-variant:nor=

mal;text-decoration:underline;-webkit-text-decoration-skip:none;text-decora=

tion-skip-ink:none;vertical-align:baseline;white-space:pre-wrap;">DateUkrai=

neGirl=0A=

=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:400;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

=E2=9C=94=EF=B8=8FRegistration is free =E2=9C=94=EF=B8=8F=0A=

=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:400;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

=E2=9C=94=EF=B8=8F All members are verified and approved. =E2=9C=94=EF=B8=

=8F=0A=

=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:400;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

=E2=9C=94=EF=B8=8FMore than 150,000 Ukrainian women on the site =E2=9C=94=

=EF=B8=8F=0A=

=0A=


=0A=


=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:400;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

The site offers many features: chat, camera, conversations, stickers and ma=

ny more options that you can try today!=0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:400;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

This limited time offer lets you sign up for free every day=0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:400;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

All users are verified and genuine. Sign up for free today!=0A=

=0A=


=0A=


=0A=


=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:400;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Take me away from listening=0A=

=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


rgin-top:0pt;margin-bottom:0pt;">=0A=


pan style=3D"font-size:13.999999999999998pt;font-family:Arial,sans-serif;co=

lor:#1155cc;background-color:transparent;font-weight:700;font-style:normal;=

font-variant:normal;text-decoration:underline;-webkit-text-decoration-skip:=

none;text-decoration-skip-ink:none;vertical-align:baseline;white-space:pre-=

wrap;">here=0A=

=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=



------=_NextPart_000_832E_4AA6011F.09B1F049--

Temu phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 02 Jan 2024 11:57:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rKjwh-0000000028Z-3mnO

for dave@doctor.nl2k.ab.ca;

Tue, 02 Jan 2024 11:56:59 -0700

Resent-From: The Doctor

Resent-Date: Tue, 2 Jan 2024 11:56:59 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dm6nam10on2131.outbound.protection.outlook.com ([40.107.93.131]:9184 helo=NAM10-DM6-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rKjjj-000000001rw-1aFK

for doctor@doctor.nl2k.ab.ca;

Tue, 02 Jan 2024 11:43:39 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=T1ydZU8YbNTYFFhdanxrN2HN+49Ro0z/1CtxFGdNXG9/TS8pnvLIYNawHuh9RNe4HWJd83kFNuKNqueWNRba8G2KqGyG0fCHw3olzQZ4/wawlfUCbMkK6dzYM6soLtlOuTiywSht01uH8AXYzCNsjEZKQKuOml3ZoQbcsVftJbYuLG0b22XINtg8uyrLBWWOx/jsLqEGMOgvEzNMUlE96LP0r7oa2rbQkZRTMRxBLLnH/3c4xY/qy0lsBziMLSVCUSElQZD8z5nEZId2RLkYrFA4eqZyarLVkpqpo+Dus0Y3gQD3efsrSq+fJeE0xEicW7JTaZfG5C761AowouJWsw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=zzPK+VjwXPWxt4PJlnTASyBUbKfnomIDa1C9PFs//ek=;

b=LENqKZTJJXPJv8VNexoR+faOnpwHIDj0SU0qOgwvmaU4UMz6JTohIbwGMbaGxDa93goib8jmakPP6IxhmiOO9ykLa79dfmzvkAlkWbZIiYIqOwx05U5SscyK3ib8oXPNvEDzBE7wLiWEuFaSIdFfp/qZGOUJP2OzOj39txfzh/ZbPerUEqKyM0fpQw8xAcXRtqNeJTWYNNcejYo5ln1TJ5bo6Vbj0b8jBU5eqmYrpwfvNfbvfbNweVB6DZh5z3mggyPjn4GzRnMNEz9DzVt0aORN0L8kjP3BxvmmJIY16pZdnt95HRx9MYNP5S6jdL15TjeG3qmin57Hp2U+bdF4sA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

65.108.56.167) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.mailfrom=xkgkfwf.onmicrosoft.com; dmarc=none action=none

header.from=xkgkfwf.onmicrosoft.com; dkim=none (message not signed); arc=none

(0)

Received: from BL1PR13CA0291.namprd13.prod.outlook.com (2603:10b6:208:2bc::26)

by BN8PR07MB7074.namprd07.prod.outlook.com (2603:10b6:408:da::22) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7135.25; Tue, 2 Jan

2024 18:42:04 +0000

Received: from BL02EPF0001A0FD.namprd03.prod.outlook.com

(2603:10b6:208:2bc:cafe::49) by BL1PR13CA0291.outlook.office365.com

(2603:10b6:208:2bc::26) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7159.12 via Frontend

Transport; Tue, 2 Jan 2024 18:42:04 +0000

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 65.108.56.167)

smtp.mailfrom=xkgkfwf.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=xkgkfwf.onmicrosoft.com;

Received-SPF: Fail (protection.outlook.com: domain of xkgkfwf.onmicrosoft.com

does not designate 65.108.56.167 as permitted sender)

receiver=protection.outlook.com; client-ip=65.108.56.167;

helo=mail.hirthe.net;

Received: from mail.hirthe.net (65.108.56.167) by

BL02EPF0001A0FD.mail.protection.outlook.com (10.167.242.104) with Microsoft

SMTP Server id 15.20.7159.9 via Frontend Transport; Tue, 2 Jan 2024 18:42:04

+0000

X-TOI-MSGID: <1573888518.D5638C58E93E0.1704220537585@hirthe.net>

CC: doctor@doctor.nl2k.ab.ca

MIME-Version: 1.0

Date: Tue, 02 Jan 2024 19:35:37 +0100

From: Temu Rewards

To: doctor@doctor.nl2k.ab.ca

Sender: mailapp-java@xkgkfwf.onmicrosoft.com

Content-Type: multipart/alternative; charset="UTF-8";boundary="PART_O7f2.jysgjybw"

In-Reply-To:

Importance: high

Subject: Notice for doctor, You Are Our January Winner_!!

Message-ID:

<45485664-0727-463f-ad6e-10fda0d2168d@BL02EPF0001A0FD.namprd03.prod.outlook.com>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BL02EPF0001A0FD:EE_|BN8PR07MB7074:EE_

X-MS-Office365-Filtering-Correlation-Id: 0088e490-dbe6-4daa-6b56-08dc0bc28401

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:65.108.56.167;CTRY:FI;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.hirthe.net;PTR:static.167.56.108.65.clients.your-server.de;CAT:NONE;SFS:(13230031)(39850400004)(346002)(396003)(136003)(376002)(230922051799003)(82310400011)(1690799017)(64100799003)(451199024)(186009)(61400799012)(7200799017)(46966006)(40470700004)(36840700001)(70206006)(956004)(26005)(47076005)(41300700001)(336012)(81166007)(356005)(316002)(82740400003)(8936002)(8676002)(166002)(786003)(36860700001)(19625305002)(4326008)(2906002)(118246002)(36736006)(478600001)(5660300002)(6666004)(6512007)(7846003)(33964004)(70586007)(6486002)(6506007)(9686003)(6916009)(31696002)(41320700001)(9316004)(40460700003)(8400799017)(40480700001)(564344004)(66899024)(18023003)(83022004);DIR:OUT;SFP:1102;

X-OriginatorOrg: xkgkfwf.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Jan 2024 18:42:04.3358

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 0088e490-dbe6-4daa-6b56-08dc0bc28401

X-MS-Exchange-CrossTenant-Id: 369eaebd-1dbd-4bb4-ac89-8125bbfb1441

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=369eaebd-1dbd-4bb4-ac89-8125bbfb1441;Ip=[65.108.56.167];Helo=[mail.hirthe.net]

X-MS-Exchange-CrossTenant-AuthSource:

BL02EPF0001A0FD.namprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN8PR07MB7074

X-Antivirus: AVG (VPS 240102-4, 1/2/2024), Inbound message

X-Antivirus-Status: Clean



--PART_O7f2.jysgjybw

Content-Transfer-Encoding: 7bit

Content-Type: text/html; charset="UTF-8"











(6601) Notifications For YOU









































































































--PART_O7f2.jysgjybw--