Web / SEO Spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 23 Feb 2024 11:48:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rdaaU-000000004az-2hdO

for dave@doctor.nl2k.ab.ca;

Fri, 23 Feb 2024 11:47:58 -0700

Resent-From: The Doctor

Resent-Date: Fri, 23 Feb 2024 11:47:58 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-mw2nam10olkn2051.outbound.protection.outlook.com ([40.92.42.51]:6560 helo=NAM10-MW2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rdZe1-00000000764-41dd

for root@nk.ca;

Fri, 23 Feb 2024 10:47:38 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=VvZlpIGylRPaTwe8pmeKLTHhx9s1HcStBYDrnqJH3YXdM6t1py7AEFfuWAzffvCau2tK7ce1JTlNdFznS1WvBaOYZJERskOb9I6FKmUWRnkcdUe38NxIXqlWTlLmDZS0FKF2vt0SMLzKhZ4li9rTsBrtLW1KNCa/iiWBcuHmlv1oAPRf077/btuhEcRvklZCQGBcSxHZX7DDNGWpVF+AG798tHJwA9j/PjXpif8OyKpQWRmnLIiL+fRBQvxzIWjsEapfnxmgkIRrbBejUZY9sEhkoJKVNarhvyYqfpcBfEVH/6AhaYtIQuHN5yItqYuJElvwaovSS+dfFv3w8uiFHQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=HG2jCpEhdGwZ67H4cFe/TifveuPaqQINYu7hbi6b1+w=;

b=ijZxSu1KdVrPNpGVTDe6ZvBXeA5LAaT895QzoEDMUYQlPqpL2meOfzuisNhC9x39BjR4Ry7f0f+Ja7HqEhXVURkHxO6fu8ktsvWcOAO4TjTRiyIO9AMDHY9U273ilCGN9kaZdobCyME84Paa3wYcTw23zRWh+KeIcyNlO45Dm+44pDsi6xe4tjleUfOS/4u1bcvRkpx+LQpBDTkifCgS5IIx/b1F90LmGXTh6vdd0BASFyDhe9ZtfWO8pckl129E1/cj5XM33hNTJK6pXfgRlDW/9efv9my5+I2t58ELi1qhHZZkUvuwItj6hhdfVTzyez/vBm2eVko96fGSdVE+aQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=HG2jCpEhdGwZ67H4cFe/TifveuPaqQINYu7hbi6b1+w=;

b=jscVaNo74FdFKRKusJChr7DV8BhUI7jki6QvMQIaTQel6zfGssWA0jCh8d+/0wTXGJnopIMGozb41FImV9lmEzaEJEFapjz2+gKXyCJVA1FOW431sYunwc/222mzh3l2y9622oYOMuyI86Pdu+O043AIcwzKugHqPVe5rgDep6LQMhgR3OSBuIXykL9y4Gd2P+sLEgb81Ys6WOJnT1qOjFrccZtwrghbJBwaZJXAIp8H69S5tRLuklYrMpREF2Ywd8sWxZxkBJ13H/9+PPXRpjV6AFelSJNKRcDT+iGrLYtsvkiDiPFS8/GyAkDUlNSNVM89G0UbbqAYk8UUbGIAhA==

Received: from SN7P221MB0991.NAMP221.PROD.OUTLOOK.COM (2603:10b6:806:26d::16)

by MW4P221MB0998.NAMP221.PROD.OUTLOOK.COM (2603:10b6:303:1ec::11) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7316.24; Fri, 23 Feb

2024 17:45:14 +0000

Received: from SN7P221MB0991.NAMP221.PROD.OUTLOOK.COM

([fe80::d180:c3d8:f9bd:6a17]) by SN7P221MB0991.NAMP221.PROD.OUTLOOK.COM

([fe80::d180:c3d8:f9bd:6a17%7]) with mapi id 15.20.7316.023; Fri, 23 Feb 2024

17:45:13 +0000

From: Kaushal Thakur

Subject: Looking

Thread-Topic: Looking

Thread-Index: AQHaZn/q9PB+qGFgrkSvHqA234mjbA==

Date: Fri, 23 Feb 2024 17:45:13 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [lAs0RvCZIMWTxQznJhdYj/qN1EdcRqIp]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SN7P221MB0991:EE_|MW4P221MB0998:EE_

x-ms-office365-filtering-correlation-id: 0c659848-6218-407f-53fb-08dc34973022

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam: BCL:0;

x-microsoft-antispam-message-info:

u9KRzkWAXoGJnajKwTBbF8+rDAJpInJa+OKZclADLXPGxsVDfYPzQtSJHXrU5aW1ler8OEdZtKNBisUi3FSHdCtlCB3YZuzwxUu2g4whv4bMtq3Sx3PSabfbPCjqUt/OaX1QKPxtK4hLraIDqPoidh0JBcoO++oZToEYTSki/8gcj8giSIJXWPIYgpV/oI+rcNhaclQ8ZOhEzegx5R9bf552xBx1u93h9tUCmYEeEGkAoAwMCi/3ERLRqkoMxtV/nt5YaLCpiRl4GT94SJNGf8uip1JjavOkI/QlsIbhlMyCwxL22HXN6O78u9JYpZPBe5DLFV20KVkyMyFa3hsjWRysPxmS1l96uUOV+OqKPxhxdZEjwr2CDJSYB+1UBANKOmAd+xce4LgPtTy2FGHUW33Sw476Aua43T/RwPdgVyz2wClR+/jWfYzff64QQB54o69tG6VLZi64f47ggOvisPdZ9quqmS2ozJVrNdvKDKlpGFeHMDebYFoysbm1wfdJl+XZihpLUtZLfJwlNg1o5Xot64QmBbLHXQM+e4jOJmOg6c/CivfozGbReCqYP70B

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?TEme+CjKtSY5AEhKcelz2wohylZIs+lecCsIyzdqJdhtZ8SWQcezlWgUGG?=

=?iso-8859-1?Q?GkUzu6rp5LgWSHoPImDW1KhulP9+cul2elxR+CkdVSKnx37RQ6BmR2rQyb?=

=?iso-8859-1?Q?0H7V1qaCZ+um1Ia7gyO3pyRcb1fxud7/ebe38Bc7+j1k9e8fiLAAwXVASt?=

=?iso-8859-1?Q?p6XflMCHuGtEYwE7RdMT3/tL9s692c1ZqtFYMVSASLfb1QAvYi5XUp69fO?=

=?iso-8859-1?Q?OFp1bpM3QSWcYTmqglXFPMyPsL1EixggePhdCIqulJ0MQuv8nrYq5pGaIT?=

=?iso-8859-1?Q?2JQ/0jtDEksBQsJIOCwdlcyrrbnKx39atkdY8VHQXm9F6+yFSmpcoJdomT?=

=?iso-8859-1?Q?aweHeKqRlkSrEBuRiUzshuvTdpv31va83gtiOwJPtF5Hu57tJ124V5g811?=

=?iso-8859-1?Q?An4aS+tydgSnfkG8B8fD+PTuGJJMjam4lI1kI3dk3PePwRMG7Qe7M3H5ut?=

=?iso-8859-1?Q?NUs8YYQU1s1fQAz9VmXT2rbTkdtKYXQlUpCubHrx5dFvkGv03SliX8QymT?=

=?iso-8859-1?Q?YcziiKPvJ0Gma0NofRxANSVnd+33shkjVDIpYHCx/LbPltm3cJqHAbMuz0?=

=?iso-8859-1?Q?ywLdv7mp26MhGcHrt2y7z2d0sAhkBA3NJdPSYw/D4Z2R4tvefJ5VeAoAX2?=

=?iso-8859-1?Q?pGCWhkJqjY76EXnGX1dHbNnxNajGpMLYVT5OczZQQxvrOQDGr5e77wTMsT?=

=?iso-8859-1?Q?gQSVaZsAQqGBnOc0f0GLITvMDdeOHyQ8sc3SU46GgmFOTeT8iymAPkuOzR?=

=?iso-8859-1?Q?I/JNxt3QU8aPIhnpSpvN9r4gp8x1ASA80V7R9o2tYKBu6RuekehdAPUd3x?=

=?iso-8859-1?Q?co7G8DmoPRJQ6+JX+GRys6tatl4+DtmsOTbF2Cpo/8PwiEEHwNXpzO8UJL?=

=?iso-8859-1?Q?tuHWhkoPCGwrcp4ZcrwbzYUHQs6aXJDXZ31+48WoI4vyXsxsJioJl2aheB?=

=?iso-8859-1?Q?2kEDxyafjsQgirMJKCDva+pGRd+MnsfLbAzHY9OgBFgZGevl0pFyt1Af2Z?=

=?iso-8859-1?Q?PybJj+rpDDjdxis9aeECisxOJenRQA6TqSTlDuw70z9MspZ7MAjF+xCGhu?=

=?iso-8859-1?Q?ftbRzPBlSJpGas+rpDFhSHJEqN38gTrejoiOvENQLfw3XOEi8ZfnqBmo+b?=

=?iso-8859-1?Q?KUOmHtEwK+pjEuK8ZWK6GCAMkf7Ihpw7NeC/9rcoFlWashSEzyQVMlw5y4?=

=?iso-8859-1?Q?vboXhfPXUIE6ssOuzbSYS8LgWoJFvQ16QVzrBZZd2UBbGOF931xuoAYfzG?=

=?iso-8859-1?Q?JCWKMEiqGx3OlparszEFal5M/UgI0Yiqp0VkBYFwmMs2oN8Hn2/0UAVwiT?=

=?iso-8859-1?Q?pErHVTjPE3lTLXUj5UnU5wRCEg=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_SN7P221MB09919CB43CEE281F31F5A23DB2552SN7P221MB0991NAMP_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-f5d03.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SN7P221MB0991.NAMP221.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 0c659848-6218-407f-53fb-08dc34973022

X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Feb 2024 17:45:13.1543

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW4P221MB0998

X-Antivirus: AVG (VPS 240223-0, 2/22/2024), Inbound message

X-Antivirus-Status: Clean



--_000_SN7P221MB09919CB43CEE281F31F5A23DB2552SN7P221MB0991NAMP_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hello,



Hope you are doing well.



I was looking for Keywords and found your website on page 3-4 of Google. If=

you were on page #1, you'd get so many prospects/new clients every day. Mo=

st of your targeted keywords on page #3-5. You're so close! Do you mind if =

I sent a SEO Packages and Price list of your site to see why you're not on =

page #1?



I can send the past work details in a couple hours. If you have any questio=

ns, feel free to ask me. I have more than 10 years of experience in digital=

marketing.



Can I send it over?



Look forward to your reply.



Kind Regards



Kaushal



--_000_SN7P221MB09919CB43CEE281F31F5A23DB2552SN7P221MB0991NAMP_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">







=


color: rgb(31, 73, 125);">Hello,  

Arial, "sans-serif"; font-size: 10pt; color: black;">  =

      

      

quot;sans-serif"; font-size: 10pt; color: rgb(34, 34, 34);"> 
an>
pt; color: black;">         &n=

bsp; 



<=

span style=3D"font-family: Arial, "sans-serif"; font-size: 10pt; =

color: rgb(31, 73, 125);">Hope you are doing well.  
=3D"font-family: Arial, "sans-serif"; font-size: 10pt; color: bla=

ck;">        

      

quot;sans-serif"; font-size: 10pt; color: rgb(34, 34, 34);"> 
an>
pt; color: black;">         &n=

bsp; 



<=

span style=3D"font-family: Arial, "sans-serif"; font-size: 10pt; =

color: rgb(31, 73, 125);">I was looking for Keywords and found yo=

ur website on page 3-4 of Google. If you were on page #1,

you'd get so many prospects/new clients every day. Most of your targeted k=

eywords on page #3-5. You're so close! Do you mind if I sent a

SEO Packages and Price list of your site to see why=

you're not on page #1?


: 10pt; color: black;">         &nb=

sp;     

;sans-serif"; font-size: 10pt; color: rgb(34, 34, 34);"> 
<=

span style=3D"font-family: Arial, "sans-serif"; font-size: 10pt; =

color: black;">          =

 



<=

span style=3D"font-family: Arial, "sans-serif"; font-size: 10pt; =

color: rgb(31, 73, 125);">I can send the

past work details in a couple hours. If you have any questions,=

feel free to ask me. I have more than 10 years of experience in digital&nb=

sp;marketing.


: 10pt; color: black;">         &nb=

sp;     

;sans-serif"; font-size: 10pt; color: rgb(34, 34, 34);"> 
<=

span style=3D"font-family: Arial, "sans-serif"; font-size: 10pt; =

color: black;">          =

 



<=

span style=3D"font-family: Arial, "sans-serif"; font-size: 10pt; =

color: rgb(31, 73, 125);">Can I send it over?


: 10pt; color: black;">         &nb=

sp;     

;sans-serif"; font-size: 10pt; color: rgb(34, 34, 34);"> 
<=

span style=3D"font-family: Arial, "sans-serif"; font-size: 10pt; =

color: black;">          =

 



<=

span style=3D"font-family: Arial, "sans-serif"; font-size: 10pt; =

color: rgb(31, 73, 125);">Look forward to your reply.


: 10pt; color: black;">         &nb=

sp;     

;sans-serif"; font-size: 10pt; color: rgb(34, 34, 34);"> 
<=

span style=3D"font-family: Arial, "sans-serif"; font-size: 10pt; =

color: black;">          =

 



<=

span style=3D"font-family: Arial, "sans-serif"; font-size: 10pt; =

color: rgb(31, 73, 125);">Kind Regards


: 10pt; color: black;">         &nb=

sp;     

;sans-serif"; font-size: 10pt; color: rgb(34, 34, 34);"> 
<=

span style=3D"font-family: Arial, "sans-serif"; font-size: 10pt; =

color: black;">          =

 




lass=3D"elementToProof">


color: rgb(31, 73, 125);">Kaushal









--_000_SN7P221MB09919CB43CEE281F31F5A23DB2552SN7P221MB0991NAMP_--

Costco Phish from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 23 Feb 2024 08:50:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rdXnw-00000000JKs-28CR

for dave@doctor.nl2k.ab.ca;

Fri, 23 Feb 2024 08:49:40 -0700

Resent-From: The Doctor

Resent-Date: Fri, 23 Feb 2024 08:49:40 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn8nam11on2100.outbound.protection.outlook.com ([40.107.236.100]:58976 helo=NAM11-BN8-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rdXIG-00000000I9U-0Idk

for doctor@doctor.nl2k.ab.ca;

Fri, 23 Feb 2024 08:17:00 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=bqYbzDqQYK5bTe3690KeDBeB4hQGPSG1byYveNvOG95Brg1LolcaWv2gQwcoNIVdUsX0M4a/B8bX+i1dxC1/y8RBfTDnlsRzT9og5UQnznFaWFMzGgWqlv47iVWdmrGo1UWJmRLHvSwNMoAWo5B70Odf7vDTlFHHIWbNRNZ9V9ce3a3cjuzmAzmCHUgW+ETwgeRG7dMjc/U9qLQyVN86q9y0iyUKwTGqlVxFa+C7ezZb+nBJiLH3oKgPVJeOgz4hqnHmh5tr6P9w/P4YZHcClDv+xamORxaFt1JbNkNOU/wLKg0FRXZ/fM09XfaEWbNSK2muC+jdPNbFvXf244fL9Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=S8eaq3V4phAAuDayqn5Xna6yDxMW3cnCeVYFluAW/HE=;

b=gj9+50idZD9JrCY58zoq7cj9sutbLC458K19+Cvnl1MEOdsmevPFindGfexejYTlXOcGimj98s5xWN5O7d0BhmQXngpu8FPKlwm2j1aXC36FY40SMilLtWuY3+XX4Ta5Uh8WzYB5BaIy+Jf/5lJrmCWIbv/hzERJ86OBaNBKD2kWgxL2+yFpoGWkUpAii38irJiRBme8yinSi87vOHqsJpP0PWOqqoMN03yji5TNo1TV8uIVql4pdeqvGX0shhcCEsX+yVdX56AqOunAoQmieBa4xW+JxL9IeyXxJb34xtjatSlu/TmzHK8sthqHS0+i6XAAlSs6AdDgVyWCGgcbFQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

45.91.8.101) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.mailfrom=xel4910.onmicrosoft.com; dmarc=none action=none

header.from=xel4910.onmicrosoft.com; dkim=none (message not signed); arc=none

(0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=xel4910.onmicrosoft.com; s=selector2-xel4910-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=S8eaq3V4phAAuDayqn5Xna6yDxMW3cnCeVYFluAW/HE=;

b=E2uLyHbWV6gibeJOIDJ6bZH9IJXgR8+XqeKP0WgZwmzPeVd1qBVdas1OJIQQMDi2iPS0Up12F11lhFx6yKJKQYPgD1+6kNC6cU1xXe4HSICfwfyGIyBS0s83OI8eaHTzi3kTPWA4Edi8oj/5c9bh+qf6BnuiWxxoexKKA/urVxYNCV/XsVTCYYCYN4wwo/F4FoP9NHhmBmrRrMW7dJvLmlJmOAuPViFaPzD7dwLyN6N62HI2vM9rXlZGLqRjMWpTnC3upo/XJRXvKacZj2FPqoCeWDjqzIRAZeF+1zBHkgSj92HkH9S5Vb89LPHgmMaVG053Pp3FZkJ/pRuqK0kq8A==

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 45.91.8.101)

smtp.mailfrom=xel4910.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=xel4910.onmicrosoft.com;

Subject: Win Big: Complete Our Survey, Claim Your Prize

From: Costco Department

Date: Fri, 23 Feb 2024 15:57:53 +0100

MIME-Version: 1.0

To: doctor

x-priority: 1

Reply-To: Costco Department

Delivered-To: doctor

X-Sender: admin@xel4910.onmicrosoft.com

Content-Type: multipart/alternative; charset="UTF-8";boundary="K6aS6sPy1pTHPnu11t8etH"

Message-ID:

<8265086a-5cf2-4dc4-a443-4c1404d6d84c@SJ5PEPF000001D2.namprd05.prod.outlook.com>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: SJ5PEPF000001D2:EE_|BL1PR18MB4262:EE_

X-MS-Office365-Filtering-Correlation-Id: 97f16cf5-333c-461f-76f5-08dc34822d5d

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

WSSTlD/JW24hOAtbcA61Vu7jTM4XEvCNisW7Xui+pfdLX31wgNQ0Bs9gMfsEY/nIo8sAgnnZVBZE/j4CLZ9ol7zE9eE2xJiP6fRU2G73SfwIyzmAJFRSesl1H8kX7b0Z3gDU1gtOgRve12nWwpTojkdkNgKPUytKeFhBO9AI0jTuUNFpZHnmiexlvCw5W4wuVBq7j2yym7pqYMsi4Lxz1rv5w+0Ci7ox3vD8NG35pWJ6uZ7Ire02RA3hqz9oO1Nm2zVd5u5DU7lTfDRUy/Ol/sObsjw78wV2uOdLKTCOMsFTJqn5zpp/R5HzgecWgntZ7fcUjgibH4eeJ3PXI/aobWtq8mIsqfx68SMhs1sjtrb4IEWn+GvzwGszK+yOYqrvAzxqycYGaTFYH+Ml/XNnzg==

X-Forefront-Antispam-Report:

CIP:45.91.8.101;CTRY:RU;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.vizio.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230031)(7200799017)(36860700004)(40470700004)(46966006)(85622047);DIR:OUT;SFP:1102;

X-OriginatorOrg: xel4910.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 23 Feb 2024 15:14:48.7041

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 97f16cf5-333c-461f-76f5-08dc34822d5d

X-MS-Exchange-CrossTenant-Id: 3757439f-02de-4d3e-a90a-4cc757e20afa

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=3757439f-02de-4d3e-a90a-4cc757e20afa;Ip=[45.91.8.101];Helo=[mail.vizio.com]

X-MS-Exchange-CrossTenant-AuthSource:

SJ5PEPF000001D2.namprd05.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL1PR18MB4262

X-Spam_score: 11.5

X-Spam_score_int: 115

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: b1SeBjHoxRe8M b1SeBjHoxRe8M b1SeBjHoxRe8M b1SeBjHoxRe8M v597u2lhqhukn

v597u2lhqhukn v597u2lhqhukn v597u2lhqhukn elOR7qramkc3 elOR7qramkc3 elOR7qramkc3

elOR7qramkc3 2ehdBNC4DV 2ehdBNC4DV 2ehdBNC4DV 2eh [...]



Content analysis details: (11.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: utorent.blob.core.windows.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.107.236.100 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

1.0 HK_RANDOM_FROM From username looks random

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.107.236.100 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[customer-care-kgwpkvfpsstqh(at)xel4910.onmicrosoft.com]

0.1 TW_HQ BODY: Odd Letter Triples with HQ

0.1 TW_QH BODY: Odd Letter Triples with QH

0.1 TW_LH BODY: Odd Letter Triples with LH

0.1 TW_MK BODY: Odd Letter Triples with MK

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

1.0 XPRIO Has X-Priority header

2.7 SCC_BODY_URI_ONLY Very short body with something maybe clickable

0.0 T_STY_INVIS_DIRECT HTML hidden text + direct-to-MX

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} Win Big: Complete Our Survey, Claim Your Prize

X-Antivirus: AVG (VPS 240223-0, 2/22/2024), Inbound message

X-Antivirus-Status: Clean



--cd4afNeJzQsgzn5EVIgmycg24Xks3Rpw

Content-Type: multipart/alternative; boundary="K6aS6sPy1pTHPnu11t8etH"



--K6aS6sPy1pTHPnu11t8etH

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



b1SeBjHoxRe8M b1SeBjHoxRe8M b1SeBjHoxRe8M b1SeBjHoxRe8M

v597u2lhqhukn v597u2lhqhukn v597u2lhqhukn v597u2lhqhukn

elOR7qramkc3 elOR7qramkc3 elOR7qramkc3 elOR7qramkc3

2ehdBNC4DV 2ehdBNC4DV 2ehdBNC4DV 2ehdBNC4DV



--K6aS6sPy1pTHPnu11t8etH

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">










Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">















--K6aS6sPy1pTHPnu11t8etH--

Web / SEO Spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 23 Feb 2024 07:16:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rdWKV-00000000Fpb-0B26

for dave@doctor.nl2k.ab.ca;

Fri, 23 Feb 2024 07:15:11 -0700

Resent-From: The Doctor

Resent-Date: Fri, 23 Feb 2024 07:15:11 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-psaapc01olkn2068.outbound.protection.outlook.com ([40.92.52.68]:25857 helo=APC01-PSA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rdUn5-00000000ClE-3V0n

for sales@nk.ca;

Fri, 23 Feb 2024 05:36:45 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=UpvcyEdukWidYPdT+qf0bswcvkxQCK5k5NHnbM5rdweKyL7a3Hfb0Viw3xYia4udMxSGGw8497OxmiclDdSE6Xe2sfqizHaGXcT0HmNlBfQclgKuhQ5Mr4qeJ6T34PofcTovmD1+b3OuOCva5nAjwe9FRkQN7gTMivrI84rbxvWfTc9YgdL4gv0lk3VyxKXhWNKMirL+kDwes9xXrAsgsH6aL+iRdvGD5jgNJrXkZ/C9p5TioeBBWN/XFo7bShqSAQgO1/7GF+EqaBTcogNlRH+JuDh3ohHPJaUX3ecxQt+qo8KtGD4NZpNi8JdW9oPbA/wGeCJBgPZFTyNKpTRCdw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=kSjpH6WF3cbVzFzYn774eAaVRzUY++zvexAbdK7Tx4Q=;

b=h36FP7dZdB/QApLwowzb3zfYigFekaMtumDAybz+8OtRVSAttXAkpyeLyBP6KLsHPtOBLV4RO+udYWQzfH1Z1v0ZS4+mghkhc168fIIzC87YrR2fQr+O4TPVQuVE0hUcmgiZqNYmXSnrWXeTJJ30DD0R4TJyCkTcF1qBBZa1YJpdqqfqWRaxmxFx9O62iRYIDmtbJZYtItAxW58M8OLAVvxsITMNtMisEWmtJkHgUAn1yveWXxTCb/jeatOrIY0dMeB+R03UVrfe7jZsZ3gwVN5JxY57NqJPJ3dOODUwEEwQpRDwDNUjh1+OU8K3bHtyBfNX+YQH6eW7Reg5idaAMA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=kSjpH6WF3cbVzFzYn774eAaVRzUY++zvexAbdK7Tx4Q=;

b=YuZ1y8jtVuFZ9c7KvFfvAzYs8C3+jIbE5JPqqbv476+s8ZFZMuMNqVt3md4Gu+2pydmak/kb6apGCa3ErxnM12NwSDh/fNhQ3DHZynqWzGN6Ca7GX/b8DZWdPCSNtv+nFGj7h71s5r/ZwKg+dHkVB8Nuvp8zVnmbNEesezzdymCn+GjxlH6nxaRntFFJXXFKZErjlGHPu2gUGFVANAVa8ty1n9Ktye8BTbZJ56MNeFDTsKeRvgHi84rg5LLcOQj1qlSxoS6KqL75qzQ3e+l3giy2XXqOjSh/sIWhmVSY70X8bCmyDMcFEv8neZo1o+g1QFHFFO7TlP8vmN2TNmYBew==

Received: from TYZPR04MB8231.apcprd04.prod.outlook.com (2603:1096:405:bc::12)

by SEZPR04MB6140.apcprd04.prod.outlook.com (2603:1096:101:97::6) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7316.24; Fri, 23 Feb

2024 12:34:14 +0000

Received: from TYZPR04MB8231.apcprd04.prod.outlook.com

([fe80::b5ea:b121:c84e:4b97]) by TYZPR04MB8231.apcprd04.prod.outlook.com

([fe80::b5ea:b121:c84e:4b97%4]) with mapi id 15.20.7316.023; Fri, 23 Feb 2024

12:34:14 +0000

From: Tasleem Khan

To: Tasleem Khan

Subject: Re: (SEO) COST

Thread-Topic: (SEO) COST

Thread-Index: AQHaEi2Hh+v8YIx4ck6OfQIViG1xJrEYhM4D

Date: Fri, 23 Feb 2024 12:34:14 +0000

Message-ID:



References:



In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [WJWojxQmU08u7Prg45XaMBj0zPg9Mtwqv9UfpXixAC/LmLqbxdOpJ3dZeQwTTU1E]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYZPR04MB8231:EE_|SEZPR04MB6140:EE_

x-ms-office365-filtering-correlation-id: 97534032-7018-46b1-48c3-08dc346bbeac

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam: BCL:0;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?U0boBThIm/KGz3XZ3eZHF892X4aluLF7fkoX6moHsf2GgfgQR38+KwOSX4?=

=?iso-8859-1?Q?7+RpUBIOL88pw3luw75xDpIVvQgNRmFlTe5yVJblRt/rWMVAv6I8i1NjLs?=

=?iso-8859-1?Q?8yFy0qMXst55Ny18rDGarzR1xhm9HWm3XA6b5ploZ+P3rYL1B562ejFFAJ?=

=?iso-8859-1?Q?vyc859HRKqJ807tTcuULr897YEk9fEYJ82+UOYwg5ShUdHQDyL4ZLpxY2K?=

=?iso-8859-1?Q?1Dua7Vcf2qVtBteL8dasdTAk897EvsbQyOEr8jCno8vAVzI+MwD4/FmMSs?=

=?iso-8859-1?Q?OpMSNpKlSN+CT0VZJxJFbcP1PCC0UQEXQfo6yPCBgRdCjEmaiNfGUMpOO0?=

=?iso-8859-1?Q?CTHmR5EW/07pykesZdKwY4pObmQWpa5ZarM6Hsdlzea+GA080bDj+t0Si3?=

=?iso-8859-1?Q?hj5bn5+EDLeH7Hyf97uBU084R3MeSBRftYiT0gUdxsKwYVasgdFCa6g1iU?=

=?iso-8859-1?Q?rsKdjTlVdxKG/u5BwYSkiTzSYst3H6cULesY55RpDYnjp48DCNuR8e0S7X?=

=?iso-8859-1?Q?OPzCGO7w8peW2CHXWdyYGv4kPWFJIWS8B7d88VORvb1mS7P/yR0W5APUqk?=

=?iso-8859-1?Q?KX68kw3PSTulDO6axgZ8GmzvW3Z7zas7U9DWXWjrKQgFOv+5cgF1i0Vn7O?=

=?iso-8859-1?Q?CoO1p04/94Z8VQjQFbWP+2XPpWtv+/33sPN30QNCitnszRsT6KfjPfcPCd?=

=?iso-8859-1?Q?Oh5mOUD2Ppl3oyQDcCmZcBZZKdgImTRCucugKuq1ayQGA3Sy5FxtiTxH9z?=

=?iso-8859-1?Q?d8u8dBvUMkK4uqTC//ZDoiVM3azIaDZkC952r+NABRLVQO6sOua0hFLEXm?=

=?iso-8859-1?Q?259ghsWhdtOmOLtJK+38sDDn4PvonQFYVQG4bcfteWsU223H2HXGob/h74?=

=?iso-8859-1?Q?vsVeKZ1Z7NDyNfsvne++FMPGp53FiH4PsPxdsssv7ySUJ67f6sDTlE/sUw?=

=?iso-8859-1?Q?a/iQBWPTDXwnBvu8YZZv0DZI1ppBxzHh5bia6Jf8zeR0wE0qOlUQoOfhG/?=

=?iso-8859-1?Q?r783Oj8gpV3KZelHN2lnnE0SRKUukyngiiNutr5qLmC6V0cwR888lKan+S?=

=?iso-8859-1?Q?ik3vhxYdFeZAYWZYJPc02F1YjGi9n09lDJf4cGpAQJtQfCVKL73nkjK49h?=

=?iso-8859-1?Q?VF/AmKzLTC9/vwmw9PAGTOPgxYVp3AxQwVEblx03T6PuV+ZqRjUAiOXsIk?=

=?iso-8859-1?Q?nG9+QpdtJzD9vZsZxeWx/CHUzCNUnqVL2lDuLzgD5vi4gpvexL/5d3XAK8?=

=?iso-8859-1?Q?k6F33TMp+Ji1devdXEB8igXFG1dbbNi/pQhttqFlBS/IFxbL/AOBrHoWZE?=

=?iso-8859-1?Q?eJUehaWbhbl3NMf1LpZcnZLzfos4LLO8i1RR8qa9JDPb9/i39zvg+pi/zu?=

=?iso-8859-1?Q?PA3RKAIHZb?=

Content-Type: multipart/alternative;

boundary="_000_TYZPR04MB82317026D2E80AFEE1C06081B0552TYZPR04MB8231apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYZPR04MB8231.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 97534032-7018-46b1-48c3-08dc346bbeac

X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Feb 2024 12:34:14.4618

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR04MB6140

X-Antivirus: AVG (VPS 240223-0, 2/22/2024), Inbound message

X-Antivirus-Status: Clean



--_000_TYZPR04MB82317026D2E80AFEE1C06081B0552TYZPR04MB8231apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable





________________________________

From: Tasleem Khan

Sent: Wednesday, November 8, 2023 2:22 AM

Subject: (SEO) COST





Hi,







We can get your website to rank on Google's 1st page.







Can I send you our SEO package & price list?







May I send you a quote?







Regards,



Tasleem Khan



--_000_TYZPR04MB82317026D2E80AFEE1C06081B0552TYZPR04MB8231apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">










sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">From: Taslee=

m Khan


Sent: Wednesday, November 8, 2023 2:22 AM


Subject: (SEO) COST


 





le=3D"font-family: Cambria, "serif"; font-size: 12pt; color: blac=

k;">Hi, 




argin: 0in 0in 0.0001pt;">


lor: black;">  




argin: 0in 0in 0.0001pt;">


lor: red;">We can get your website to rank on Google's 1st page.  
an>




argin: 0in 0in 0.0001pt;">


lor: black;"> 




argin: 0in 0in 0.0001pt;">


lor: black; background-color: yellow;">Can I send you our SEO package &=

price list?

font-size: 12pt; color: black;"> 




argin: 0in 0in 0.0001pt;">


lor: black;">  




argin: 0in 0in 0.0001pt;">


lor: red;">May I send you a quote? 




argin: 0in 0in 0.0001pt;">


lor: black;">  




argin: 0in 0in 0.0001pt;">


lor: black;">Regards, 




argin: 0in 0in 0.0001pt;">


lor: black;">Tasleem Khan 









--_000_TYZPR04MB82317026D2E80AFEE1C06081B0552TYZPR04MB8231apcp_--