Muama Ryoko Phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 02 Mar 2024 12:20:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rgUt1-000000007Gl-0dL4

for dave@doctor.nl2k.ab.ca;

Sat, 02 Mar 2024 12:19:07 -0700

Resent-From: The Doctor

Resent-Date: Sat, 2 Mar 2024 12:19:07 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dm6nam11hn2203.outbound.protection.outlook.com ([52.100.172.203]:48710 helo=NAM11-DM6-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rgTf1-00000000OSd-2dw9

for sales@nk.ca;

Sat, 02 Mar 2024 11:00:39 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=TiWAcVXEOL4A5GKwxfJiwbq0vfVy0R9Tk2nvYsuwavfLs6ZY/XIGy7PJ079oNSrwS1OyTy4dMyLF4oSpHSet4CuLuwdpC1D65j6n55mtf93Ixpk0sQa3UqICXi0cm2Whr5nhHYWVgyB/rGSxutsuXB3ctNJm/Aokc1QwHp5vHk0q+NZuKCHLcUegfCmdM0kyanfp4sD4zsLYFBCs6Ma+zqDmYVt/jpaVLIF+VO9nN+LMgn+OzhZAkGZUxAJDpI47z044Kf+UJIO6i8QlmwsZtWVQBcN2x+/46elcT6dllRwgyVGTtTaj5+Kj5mNrlMKJBpWbvAYg7+EdB8JztVUzBg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=cO/weyi62fH6XkfxXavzMhmEom6IyudE4pKtVXk4H4E=;

b=XFpRPb18mP4WWrE/IqaIIBSc7WodFdI/rIiK6WVJaoqFL1Hj/XX5UyyACLQAVTnlwojimxXZ9ydsapvLmbRT2yKyYqd80ItQZE6NhV6DqdpKky+foe9H4XySwvDsdLfrrlrtGdxTbufQbDEQ7Ky2hsDfE17XIPClODH6Y/nFye2Sc548XR5rIegvYBUc1Iv0IyDMdx2M7akQUEbxv7bA5klTeXKnG96SZTdfZEXm/XqtFrTjhoJ5qm8FA9VtI/su1107I9fnxMQea5j/W4rsmsKX+crsuUWat3MPuF0ZNzBlWcRO7zpI50Wk2H/K9qXU6jVRBoVgIlbBWErIjXEnSg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=nygmpmnklu.mnbv.homes; dmarc=pass action=none

header.from=nygmpmnklu.mnbv.homes; dkim=pass header.d=nygmpmnklu.mnbv.homes;

arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=st0swuspuprlcr6.onmicrosoft.com;

s=selector1-st0swuspuprlcr6-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=cO/weyi62fH6XkfxXavzMhmEom6IyudE4pKtVXk4H4E=;

b=OJDQB8rvF0d46L3S6EOcJNOZ1vO11mG5nMbFFUReKFBiro6rD/FI5DgvHwpEdZleyRyH66CjTV0hsC97kiDTON9pLyq81Vqh08R8dXvpymygudwoC1xgA2mIAq4ryugz+4USzz1m4Wpp/72PCLvB6B6azrS1AWf1C/tvZ3+OAFt49+E2+BkuWz2KPX08FMJqwHQVvbT/u/U0MO8VTCSaN6FTBttBq/8rLRCa8nWqsdrpdhu6f0InVfjzkN/rebbY7crglUA3kvjsi6v7nDpr6dLEpo+hcA5M625lnlDriApS1f2MHYS+CwYNBJShqTxwfvxDGI8UbtIuU0UjR4tmmg==

Authentication-Results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=nygmpmnklu.mnbv.homes;

Subject: Everyone is going crazy over this high-speed portable Wi-Fi router!

X-TOI-MSGID: <865115882573922.EV604D759482C.0830616648565W3Z7DK73@nygmpmnklu.mnbv.homes>

From: =?UTF-8?B?TXVhbWEgUnlva28=?=

In-Reply-To: <5k5tknryvrzsy8wggmkp451vh5uanss81sicpqgpb@nygmpmnklu.mnbv.homes>

To: sales@nk.ca

Content-Transfer-Encoding: 8bit

Content-Type: text/html; charset="UTF-8"

CC: sales@nk.ca

Date: 03-02-2024

X-ClientProxiedBy: BL1PR13CA0104.namprd13.prod.outlook.com

(2603:10b6:208:2b9::19) To DM8PR17MB4934.namprd17.prod.outlook.com

(2603:10b6:8:3b::24)

Message-ID:



MIME-Version: 1.0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DM8PR17MB4934:EE_|SA1PR17MB6503:EE_

X-MS-Office365-Filtering-Correlation-Id: bdb446e4-18d7-4687-60f3-08dc3ae25e3e

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?V3JSeHRVekc4RFVlb3p4bWhLcGtCUnpOSTJud3U1VEdSN000N2lmT1o2ak9h?=

=?utf-8?B?V2ZLMUQrejEzKy9mcDBHM0JqdS9qYVJORldSRHhtNWxnVWRxd0R0UVFiQTFi?=

=?utf-8?B?WlZhZ3JpSjExMzViVEFxSVZieDd0bUQ4K1ZWY3RjNVEzeGpHRld1WEN2RER0?=

=?utf-8?B?SGpmTEFieFR2WEJJanF3M1RRZ2FZUk1oYTJ2TEp3VU1xcjU0Qk9OMkdtRVpF?=

=?utf-8?B?MlZMa1ZWUTVTTkdVdTVBTjFGMXpSOUxlMkhKK2lNNWZQZEZXcGFmODdaaER1?=

=?utf-8?B?M0J6cXI3N2dGOGZyY2RsWGhQM0NBUnovekxwcjVLc1VWclNnSVZlSEd0cHdK?=

=?utf-8?B?REcyV1VPd0FRQm1vb2NqQUFHL0RtN0lsN01lVVdpYTQ3dW43bmQvbWVnS25j?=

=?utf-8?B?VDh1eksxbklEY2pRUUhzYXN5RWNrK3FXRVJvVjlOLytyZmRrWTgyQWs5bTdI?=

=?utf-8?B?TE1zZUI2YjBaemV3SUNQaXhtZWgrMHJ6K2FRUUdzWFZZUyt3cUdOeGlxMk9B?=

=?utf-8?B?cXFMN1MxaFBpR0FjZmhISWM5RVBYMEpIMysrQ20yNjQ2ZzkrMkV1b1N6VWkz?=

=?utf-8?B?dnZ3N0tQeTU1KzJFL2tHNzJxUmVpR25oaXUxd3ZKVGZGVkFFQUREaE1vQTFv?=

=?utf-8?B?L29JTDRtZmczZWcwRVRLY1VhRFl4RjN5ekFJS3pIbkVHWVV4ZVUvVkdBOW9S?=

=?utf-8?B?TVZsS3ZPOGovMDU2eDdBbEY0V2xFTzl0Z1BzM29DSjNmbDNCdU5nUVJrRE1S?=

=?utf-8?B?L0pRUkJ6VVFzajk4K3E4VWI1S084OXRRV3FGTHpPUHhyaUJES1oyaHZCY2lJ?=

=?utf-8?B?WTQ1dldxSWNVNnNzaHRkYzVobFdFRXZZcmQzemcvVlQ4V3FsOGh1R0pBV3Z0?=

=?utf-8?B?ODAxV3lKclRXaDVtdnBGTHg5bCtTY21ZbTlwYkxuenlKaEdFK3hhY2tIazVn?=

=?utf-8?B?QjJOTGlJV0xzVjhndmcvaEwremNDMWtsOGRROW1qci85UmhiczBDcG5yN0ZF?=

=?utf-8?B?Y1dqK2psUmhIT2xSSGdSb2lkSWt6MmpXWG40dTlQTkliUzBwLzc5cGk3MFFj?=

=?utf-8?B?MDdUNEJ0KzhQUlo0VGFTTTZJTFFrZFMzeWJQc2NPMWdhWTNKS0tPakpYSVc3?=

=?utf-8?B?b1RuRkx6R0xlWFBiZDA0LzBXMHVBSWNSRXhGQUpXSnFMMlJFZklteVNsMjNy?=

=?utf-8?B?QnNRbWJmZkNXNkJiYWxNbWNPVFluWjJpdlFNd1VsQm9RaEhRZWI2dXRQSzdJ?=

=?utf-8?B?VmR0ZTNuZG5DVnRwc0lxMWdHZUZUdEFrVmV5T1oyUk9BbHBEYmtvNnRYajZS?=

=?utf-8?B?RXREOWoyaHozeGJWSW5GdGlVZzg2d0Fld3k5OGdaekc5cGpqZmtkT1k4YTE4?=

=?utf-8?B?REFDM1dkbzlhdUNYVGJ6WDJrMXRQa0x2Y0UzNGROZW5aMC9LUkhRcTVvMGUw?=

=?utf-8?B?SXNjcWVuc2ZtVFRHYTZtblpkOE1aVmdZV2N5TDhzK0t0dFVQT2UrdkRkbCtL?=

=?utf-8?B?RGlpbVY5ZGlhMFU0YS8rQlFPM0FmZDE2WkRPVWI5TlliUnBxNTBIVUE5R01X?=

=?utf-8?B?cTI2dmRkSTFtSU1GUUg2QmwyNE05dzNYY1MxdklXOEZRdXhrcmFzdHB5b09V?=

=?utf-8?B?QVpxTmJncDFlTFRjRmFWNm56aVhPZGc9PQ==?=

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:9;SRV:;IPV:NLI;SFV:SPM;H:DM8PR17MB4934.namprd17.prod.outlook.com;PTR:;CAT:OSPM;SFS:(13230031)(376005)(41320700004)(37730700002);DIR:OUT;SFP:1501;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?N0t1dmoyVXdrQUt3RmcvblBWanFHeVVGTldYWWYzc0daankvQnBVMXVoQ2V3?=

=?utf-8?B?YmtnWFFucDJIdHVHR0N1ZGNaTUR3ckxoYXgwY0xETXMvZjJIUWZ6L2hNQW01?=

=?utf-8?B?L0tLUDBjZWlnaFNTV3lkYzh2WFVjY1o4VSthMnlUVnYrOWI5N292VzRyZGxO?=

=?utf-8?B?MC80SWRmNlpZbnVqOC9sUDNTYk5IZkFhV3NOZUlMY0pFU3Z4TC9ETWI1UlNn?=

=?utf-8?B?V2N4czJSdjV3R1hIV1Q1bkVUOXpwSCtyT1pqRlNTNWRBc1pRZ2RNcDNnL0Y0?=

=?utf-8?B?TVZWWW5zZ2t4Vk5RL2pEWVJweUJGWjFxSWRJWDF4cU1NZHVZRDY1SHg0ckFi?=

=?utf-8?B?YWtNKy8vOXFkMjBkcDUzRzNaS0JpM1dTbC95djI4Z2NvbzU1N1Q0WGprampl?=

=?utf-8?B?NnBYbWwrVnBjMk9udlNVYlpEd2o0aWRjRGovMEoxZEJVNEpIT2hmUGNyQVlp?=

=?utf-8?B?elZuLzJ1b0NuYzBjQXZTU0c1SmhjbzkrdExRUllwRm9Oclg2bmdvenc2ZE5k?=

=?utf-8?B?akUxdXlNTE8zbzhHVlBjSnBMczNEV2J4Zi9rbWxtVHlwOGloRHFmUHFhZ1ky?=

=?utf-8?B?QjE1cEM1WlVoSFNhVVgvUWRhMjRQbDF2ZUh3SE96YVhPdXlMQVNRcXB6S2t3?=

=?utf-8?B?bWNkeTluU1FrMzVmRTZIVUtDamVPbUw0ZCtnWUJCRlRoMEI2NXdoNFFhWita?=

=?utf-8?B?bXJnYTRQVjFDWHRHSWN0N01EbmVRa2tFd2dIVXdmV2hBUVdOdnpOZUhBeGt6?=

=?utf-8?B?c0tLVmJ0RXV2bTFoUVYvdFNvMUgrVEJjOHNMc3JURkU2bll3TGpuVHBiZUI2?=

=?utf-8?B?Qm9Oc0k2Z3VIazFRd0ttRGMwV05abDhzOURTL3FQQWV1N2prdmU1WHAxRVcr?=

=?utf-8?B?cXBCcjk5dVdlc1VkUEpCSjZza05ZWkNJZjMydHIzbWZVNW9zT05GQWxRQ3lr?=

=?utf-8?B?c0F5SGFuVStGRm1QZk0xalJSNHB2TXJVYm5EZ0ptcmx2bzFUM2pQT0tuOVFO?=

=?utf-8?B?RjJxZVN2QWNwa2hNdnQrVVI1QzFmQ1dFdmNUMHh4ZGkwa2c5RzlaSHF0UlM4?=

=?utf-8?B?MUlPdDJIWm0yVS9lRHY3NXpMcXhtRkpmSkpJR1cvM0dLOWRhSnQxY1dQcXV6?=

=?utf-8?B?b3hTSVVaUDNZSFB6a3FtSzNHdVpIRmRCcnd2QjEzQkxma2dXWUswcklteGZW?=

=?utf-8?B?WWFuVEFWRTQrYTgxWCs3NFJXT3JEL1FSZ283QkdVdEQzNUlHeEszMXNRSGRj?=

=?utf-8?B?L01QNGJhYmNwamhuY2tJSHJ2YmhqRTdHZ2N2ODdBT3FUTTEzVTJLdkh5dHFq?=

=?utf-8?B?bHpPTjJaY21icEtiUVQ0UUVzYWw4VWRscjJqcmlaKzkwanR5NThCa3U0d3RJ?=

=?utf-8?B?dWEvSEtJRTFCZlQ1VXZIZDBnSlg0STg4QTRWMzNMTG9QL1JYU0xDVUlRcWMz?=

=?utf-8?B?dEdld2gwUU1hNTU4TDNuVzZVSVpxZ2Z3cDhaWUUxcTVkcS96Lzd1eWJzRDZa?=

=?utf-8?B?RTVJZzExeVdZSFlpUXVJQ0FzNXJ1UktTbWJua21JVW05TnBLaGs0NUZGcWpY?=

=?utf-8?B?ak9BSDFWeGk2RGJMQmV0RTVaSDJERVJzem9nNmN5ZUpmbUlhWXhoRVVsZlFI?=

=?utf-8?B?YnltN2IyREtEeGlIV1dxZXoydDFUWXpYdU8rcGhiODBQVWRrZ2hZdFhyV21k?=

=?utf-8?B?L0N6UmN0R3ptQ2JJN1dlME95U1p0MlZNeldWWnR6bmZVZE52cWN2dzJlc0p1?=

=?utf-8?B?UnVLblEwZVpESG8vU1EwQkRRZGJibkFQbFowc00zeHhTVWlPV1YyN2NUUDRZ?=

=?utf-8?B?N002MlFIdFV0TWVsTjlNdzVZK0JZZmw2SXJNNC9vOEJQL3VPK1pFZ2I3LzQ3?=

=?utf-8?B?NXJhY0xKRXF0Y0U1cTBaSlpNanJPenpyeFNlN1pkZThNVXdDNXo0WkJWOEZU?=

=?utf-8?B?L1NuaWpZbWtrc2lJdjA2MlFQWlFFWllxbHR4NlJOZmJtTFNYL1dmTjRNd3pI?=

=?utf-8?B?ajR4Q0ZoTzdnSHg2K3dGa09NLzVWT0lwdk5aam9HV3pVWmtCWC93cnUxNlFq?=

=?utf-8?B?RjIrdFErTHVCb2hRVHl0TDZ4VndBTFBucStqZCsrN2QrNE93ZWowUDhLWmp0?=

=?utf-8?B?cXhaYW1KWHhKZ1E2dkphRzhqdS9qN3ovT3diRURyenVsZmhDSGdmdmtQL1J1?=

=?utf-8?B?alE9PQ==?=

X-OriginatorOrg: nygmpmnklu.mnbv.homes

X-MS-Exchange-CrossTenant-Network-Message-Id: bdb446e4-18d7-4687-60f3-08dc3ae25e3e

X-MS-Exchange-CrossTenant-AuthSource: DM8PR17MB4934.namprd17.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Mar 2024 17:58:29.8627

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 42eac952-c4d1-4f7e-8089-ceff8667854b

X-MS-Exchange-CrossTenant-MailboxType: HOSTED

X-MS-Exchange-CrossTenant-UserPrincipalName: dGj687+mNahDs5tkJnopZL4S3dsvbf1mys1+jhTxUjsmrxj0o+702q5QaV3QNnfn3ciSznOQaopVLsCAufQhjW/CzCHPqEKVoh+3fUTBFsY=

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR17MB6503

X-Spam_score: 8.5

X-Spam_score_int: 85

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: (1) Notifications New Gadget Provides Wireless Internet Connection

Anywhere, Anytime! Have a Free & Insanely Fast WI-FI Connection...Even in

the Mountains



Content analysis details: (8.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.100.172.203 listed in list.dnswl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: etw9eg6wegt4wet9g4s.page.link]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.100.172.203 listed in wl.mailspike.net]

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_SIGNED Message has a ARC signature

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

0.5 FROM_DOMAIN_NOVOWEL From: domain has series of non-vowel letters

0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)

1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 FORGED_SPF_HELO No description available.

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} Everyone is going crazy over this high-speed portable Wi-Fi router!





(1) Notifications





















































New Gadget Provides Wireless Internet Connection Anywhere, Anytime!







Have a Free & Insanely Fast WI-FI Connection...Even in the Mountains






















German spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 02 Mar 2024 12:20:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rgUtD-000000007LF-1yd0

for dave@doctor.nl2k.ab.ca;

Sat, 02 Mar 2024 12:19:19 -0700

Resent-From: The Doctor

Resent-Date: Sat, 2 Mar 2024 12:19:19 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn8nam12hn2203.outbound.protection.outlook.com ([52.100.165.203]:49761 helo=NAM12-BN8-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rgUJx-00000000BVg-0RiG

for root@nk.ca;

Sat, 02 Mar 2024 11:42:57 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=WOzqXFK24/IrUtj0CraX+JP4fxQ8YdB8p5Gv96fyLxnGYyEMhaH52qxo0x7O7wKPKKfWNN8dQB5ix8DSajaMJ4mngZxwUV3o05ESlYSO9RROhV1BSzwidL1jcEzUkq7oqCf9q1iF+v0XrXVN9NsMiJU0SkXr7CvG2jKHyAaeoi4EilQGMqp2IQHqmLQViJyc/pXiW+id4QgBWIlHwZk4xEQ9nSYpgws0gsEC5dyy9/JQZZO1BbsMWseGHKnO+nTrIlzQLxa+3zd36WgxKIaNyqi5v7rKSil+muJxTeofnMFD+BoYmCP1fBb5D9YlabChVCuqmNVUkjCuw29ySYHixw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=oykQcYBPmYC0cKK12M8NWzV4vY7D6JaWKcNN+ZXCQqA=;

b=Dwv1fpCTdk9C3adE0U5mjUWnI1iDLoYLFwj9HLJKPR6uulNrKGGq/Pky4w3d6y52NElkErgc24Bu6fy/MA1ZfMvwsNNTJHjqRi/K0/KwcQjwSiE0QwR+eiuImZnunKky2sZ3vya2s/e0HshzTwFgsfZ9we8AfKQ3SD2DA5Tjo5TyFEZ6EfijZNJPekFA21gmvxUVxG4A5DvQlADeiS8hB6JpWI3IgR++kuBQGs6trr7zFvUJY3/67p4Q4olfo7s1L+cOwGTrrNv+HECRaqJ2QQE2Wrsk02LoBjNviiOfZlN1QIGxY6yGUXef8ns6X9OeCGhmDvApRsmIxtV1DoR6Vg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=tldsgjm.psld.sbs; dmarc=pass action=none

header.from=tldsgjm.psld.sbs; dkim=pass header.d=tldsgjm.psld.sbs; arc=none

Authentication-Results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=tldsgjm.psld.sbs;

From: "=?UTF-8?B?Tm9uLVN0aWNrIFBhbg==?="

Subject: Im Gegensatz zu anderen antihaftbeschichteten Pfannen enthält Emura keine gefährlichen Chemikalien

To: root@nk.ca

Cc: root@outlook.com

Content-Type: multipart/alternative;

boundary="_48f8b3a9-281a-4050-9ed0-e4fba9e9c15e_"

Date: Sat, 02 Mar 2024 18:30:46 +0000

X-ClientProxiedBy: YT1PR01CA0129.CANPRD01.PROD.OUTLOOK.COM

(2603:10b6:b01:2f::8) To DS7PR19MB5949.namprd19.prod.outlook.com

(2603:10b6:8:7c::5)

Message-ID:



X-Message-Flag: Flag for follow up

MIME-Version: 1.0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DS7PR19MB5949:EE_|DS7PR19MB6047:EE_

X-MS-Office365-Filtering-Correlation-Id: f8d9411c-13ba-4699-2009-08dc3ae847aa

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?TFR4UDVPTjAwdTJibk9oVHYyNTZTQXVXRWt4QmdEZXFCR2VLN2V4eExNZVJM?=

=?utf-8?B?T09lZitERS8yWWd5UERIczdhY2ZpNVJkUUxhUDZVSERJNS9rYlpxVnJHRWdV?=

=?utf-8?B?WTJXN3l5UUxRK0ZXdm9NZ2tTM0JXRXRTcjd4emx1amhoRzZ2R2I0clhWK2lO?=

=?utf-8?B?U3poaDZtWmlYWnhMVTNWc2VxSkZYbk9QUDhiZ0laUFZUbWFwdFRYc2FMM29J?=

=?utf-8?B?WGFjbG9xRXRDeVg3T2FWd1N1Y28rMmE0NXNSVUdrdVlVL2k2dkhaWlBFRkIr?=

=?utf-8?B?Vjg5eHlQU0FQWW1Fb3FVVy81bWRIUnY3alhNaTlpbitxcnpDQzN3R3g2eG9X?=

=?utf-8?B?bmtkZFZLK3hBaFB1c2VwSTljOFhMODNjLzFKdFVMdTZ4d0o5bm9jWE5JNHph?=

=?utf-8?B?WGE3V1NJb3dOckplMzZNNG96L3FaRERTMmRWc0JubWZqTys1QjhGYXZ1SVlV?=

=?utf-8?B?eU5xcHE1eXVMM2crdVJQSDJWZUluM0ZPSm9BcXdvWmVrK2xSVEFPODRsRkVt?=

=?utf-8?B?djdwd0NGSU9KbWNtalp4a1JEa0EzQUM3MkZuQmtIeEh6VWlVQzVPNkpmN1BI?=

=?utf-8?B?dGVIVkhDRGdUeEw1SktKMVErZWhGTlF3cXFZbXE5M1A4MHVTQXlweHBQcDVL?=

=?utf-8?B?eFB1a3haS3FOb0pjYnZHWFBFSDJzMjhIcHdpdXgxbktoWVZBRnc1QzZvT2I4?=

=?utf-8?B?b0VWL2FrVUVPcDNHNkZBbUJLeHdUWHJiZE5wL2R0Y0tkUXMvVDIyYnV1Sm9w?=

=?utf-8?B?Z0czSCtIcHZkdFRVVHFnTkxoM2MzcjUyN0NqNGRRZ3piMXhNNFZwTHQ4U3A4?=

=?utf-8?B?RzRPaGJaMk9vWDdRbVB5Q3BPUmF1aDBmVkNMZ0ZKazB2NGJSbUxKQXl1ZDBv?=

=?utf-8?B?V3VldlZPRVkxM2l6SVVmZ1ZYa09pb1RoNmVxUHBwU0xRTjhsOGtXay9mdlBl?=

=?utf-8?B?b2NRdWtYNmNySThIVDJaRmVZUldOd1NBMmJ4cDlpZDJVQS9aUGtUcHptT2ZI?=

=?utf-8?B?ZE5ETEJTYVdNQlRoRW1HUmJhaTFoSlYrVVVzcjgzRlozdUtYVCsxajNXK3hY?=

=?utf-8?B?YitnaGVWay9CM0Ivb0prTjJRUHNPVllKbFFmakRJaGhaOXY1Z3pHYktoQm85?=

=?utf-8?B?eTR2dk4wSWthRzdFN1h2c3hqamUxdkk3em94dEpiYTg4TzBxWEdRRE9XWEd4?=

=?utf-8?B?SWdhSFNqaGY1MGZGNkltck9qdEZSakR0eW5USERjUkpDdlRiNW5EMlpvSlJu?=

=?utf-8?B?MUp6dGFMdHk1OGpFSjIxYUpqL0h6TUJxK1M0MldrOEhvOGV0TE5HRytpSUxR?=

=?utf-8?B?UXByTlNnYWRYQ3FxK25WZ2dBelRPaGIxeGVKWk41cnF6TndlOXFxWm1PSXRQ?=

=?utf-8?B?S0w1d2w1VkZkMEYzcytzc203V2pCbDRGU0hNdlhSSkRpb3pucjFXelZZT0ZZ?=

=?utf-8?B?ZCtDZXlBL2pweklTL3lDUkMvNU9qcVc1T2FtQWJuM3ptQWU1YVVFNEUvK1RM?=

=?utf-8?B?K1JBTEhkVjBDZ09kV2dieHZrNWpIazhydXRBOUdBcE1PNXFCMGFOUXJkNER2?=

=?utf-8?Q?RIqVMEghb3DI/KUU1b2EIzvWKwlnWS4ITIsCP+toOeJN7q?=

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:de;SCL:7;SRV:;IPV:NLI;SFV:SPM;H:DS7PR19MB5949.namprd19.prod.outlook.com;PTR:;CAT:OSPM;SFS:(13230031)(376005)(41320700004)(22042699003)(37730700002);DIR:OUT;SFP:1501;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?blFMMnhNL3Ewak5TWHp6UEc3S2w0SVVYaUlKUXd6NE8wdDA3SUJwa2QzS0pD?=

=?utf-8?B?OC9TWjNNRFhlNkVobTBYcnJCRzI5bTllN291bkRoclBkM3cwV1N1R216dTRY?=

=?utf-8?B?U3hERFpZYjkvZE1GTFhtN0xSUVZwOGZWRk4reVluWkZnc2MyYUdTNGhyampY?=

=?utf-8?B?Z3dYTzVMbWFxcVpVQ1dwM0pTUmtaSUZjM3ExdjlkaTdqS0cxd29ZMGNIRlBW?=

=?utf-8?B?SVFmTlJ6V1g4aEt3SGM4RUJvRTZRbXBqSWhnNDRQSXZ0elBKNjYwYXUxd2pX?=

=?utf-8?B?TXA3dSt1UnQ4SDRDV0dVSTYzbVRJd1p6VFF4UGIxdnRFeHdOK09kRE1DaVJz?=

=?utf-8?B?VjBGeThHeXQ0M21KQjNpeStXOHVxbzRuLzhndHVkOEl3N01CMjUvUVlnbTBW?=

=?utf-8?B?NWJDMkVReks5ZjZjeVFzemNzT1pjVlRsd04zeDliOVl4andVTnIzOGJxM05M?=

=?utf-8?B?cE03ckMxQ1V5K21Qbk83OS9JWTZmWk9PK3EweDVrRlBXY2l2SHZJRTlHeTI3?=

=?utf-8?B?WjJLT25PVHczUlZUTVo5Zk9Hc3NRWFB0a3FRUVBxT29IL2dRVjRwWTA4Z2dJ?=

=?utf-8?B?MjZQWTFLd1lXZ2tQUEQrektySnVjT1BpKzlUcXZzUWF6ZmQzSThNZER6ZXdn?=

=?utf-8?B?UWtoVC9jc0dycDZLMms4ZFBNK3lEMVlHdFZNQzlreVNMMDA4ODRsemtxRkpX?=

=?utf-8?B?bGQ0SDY3bUI2VzJheDI2MDU1bEFDNmlIVTFZcWR2a1loSnIyNWFWMTJ3S1VW?=

=?utf-8?B?aUdaVnYyNDcwekk0c1ZEUm41WmpaUFlUcjVPU082TVFFU0JnK2IzQzhhQTdD?=

=?utf-8?B?VldYaW5wWmNuYTRQS1NSYnZVRmFJVXlwNzVxdjJQQ2FHWHByWDRtWk9MSlUr?=

=?utf-8?B?V1pibWVlSXNHcE5JNXoxZUhmV084bElzZ01TUW90Tk54Qk1TVWE3R0h3ZlYw?=

=?utf-8?B?b0dhRWlZMkhEMHRnY3VQbUZiQXpPM2Z4MVpnQVBXZEVkODE3bkFlWHd5ZC9q?=

=?utf-8?B?ZjRaR0RIc3VyZzR0M09tV1VxeitHS2xmNGxaOWFWVE44elY4c2tMemtGd2lF?=

=?utf-8?B?a3E1VDMySy90WURNMkIzcVhyQnZOdlFmUEprS2ZEN0R3NXpoS2xjTWVXYmRD?=

=?utf-8?B?TGd0TGsrQlVPUGZ5S1pGMDlVczkzNjZmRGxKM0lSRDBoQWloSnJGNnJSaXNt?=

=?utf-8?B?bVRlRXVpMllRMGZOL1EvdzJNa0pPOHREaDV0VituZjRvVXBwSjFZZ3AyK0R0?=

=?utf-8?B?aExmZDkwQllGaUJydldtcXVieEpxMzQwRm1JQ3RpeVBDUkhvc09yZE53VnBZ?=

=?utf-8?B?bURQNDFjd3plbDJ0VGdSek1Sc1RvYVhveE0ybi9oSEpvNlhnVTNaejArZHBD?=

=?utf-8?B?ZkJ3OFN1Y0VNbXU0bHdLM3djdlN2NVlZRm52TmRINmV0M0tOSmhhQkozdDlk?=

=?utf-8?B?MmpsWlpWREswYkZpMng3NTduWUF2Sk91VERuQVhScDl0Ti9HSDRQVzIwNHZD?=

=?utf-8?B?RnF5U3hBTXgxV2hRTUw5aHFKNUJPQlF0RllSVHdDQVhvMGcrbGJLMEJNaTND?=

=?utf-8?B?UExpdjltVCtqZWRneG56ZHR1d1NybzZHQmZHUGtkWkhYdU0zUVBBcWJ3Szlz?=

=?utf-8?B?TlE4Z1VaZjE5eDZrMWp3RFpWd2lKT3JYRlVJQ2F5THdIc2UwZEkwdDBWVU1K?=

=?utf-8?B?WllmdnVCN29TU3JRTW81TnhZQ3NMZi9TU1gwcEpqSzNIZTlnT2ladjFUZEZG?=

=?utf-8?B?RVFEdVJGTEZIZlBNcU5aOGxYdnBrSmFtaG1POVFvVFVNYnFNaUM5SGo0OXBF?=

=?utf-8?B?K2IzODBJQVhUR2FCZ2dJYVo4ZmdJTHBEQmdvdEZsYm43ZFRVQjRZazB6WVZW?=

=?utf-8?B?RGVDcnNUUnowbzZhaU95Q25VczIvOURVNTkxa3d4SUdacmcwRGcxeDd0MmhH?=

=?utf-8?B?WURSNytzYmpROVdyUlk2bWl0SEN4WWZwVTdUY1E2ajZmeDI0MkdsaVpTQWd0?=

=?utf-8?B?VUtkbWRiSmhaVlBKN1lkOFNhcWVKR1pqZHZsV0g0ZTZqZHM1a1Exa2dCUmFR?=

=?utf-8?B?eU4ydnE2RjBTbHRSa1JlTnF6Q0RNaTRSdkxwdkRHcUhtcU1uOGpjcGYzVmxE?=

=?utf-8?B?U21IYkx3TUZaR0RKWVpUSVFmQjFHTlVtZTl3NlIzaWpsM0Z0TGJ3T3B3Z0w3?=

=?utf-8?B?NFE9PQ==?=

X-OriginatorOrg: tldsgjm.psld.sbs

X-MS-Exchange-CrossTenant-Network-Message-Id: f8d9411c-13ba-4699-2009-08dc3ae847aa

X-MS-Exchange-CrossTenant-AuthSource: DS7PR19MB5949.namprd19.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Mar 2024 18:40:48.9704

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: b399de52-139e-47a7-ba69-8de7506e4b3d

X-MS-Exchange-CrossTenant-MailboxType: HOSTED

X-MS-Exchange-CrossTenant-UserPrincipalName: sr1J/RUWEmS7XhehdLzNFftopLHOpv0ZJjk6KH0nQlpV2eFrWdVYwRmkjNStcpL7nyqnSL7/LIj/9dBLoadkKhRnL76vbxJc+AYALpqFfRM=

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS7PR19MB6047

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: #1 Vollkommen sicher: Das GROSSE Problem mit alten Antihaft-Pfannen

Starke Ausdauer: das wahrscheinlich langlebigste moderne Kochgeschirr auf

dem Markt



Content analysis details: (6.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.100.165.203 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.100.165.203 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

0.5 FROM_DOMAIN_NOVOWEL From: domain has series of non-vowel letters

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.3 MIME_8BIT_HEADER Message header contains 8-bit character

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

2.7 SCC_BODY_URI_ONLY Very short body with something maybe clickable

Subject: {SPAM?} Im Gegensatz zu anderen antihaftbeschichteten Pfannen enthält Emura keine gefährlichen Chemikalien



--_48f8b3a9-281a-4050-9ed0-e4fba9e9c15e_

Content-Type: text/plain; charset="UTF-8";









--_48f8b3a9-281a-4050-9ed0-e4fba9e9c15e_

Content-Type: text/html; charset="UTF-8";





#1 Vollkommen sicher: Das GROSSE Problem mit alten Antihaft-Pfannen


Starke Ausdauer: das wahrscheinlich langlebigste moderne Kochgeschirr auf dem Markt

















--_48f8b3a9-281a-4050-9ed0-e4fba9e9c15e_--

Apple Keto Phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 02 Mar 2024 08:55:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rgRgs-000000005az-0wna

for dave@doctor.nl2k.ab.ca;

Sat, 02 Mar 2024 08:54:22 -0700

Resent-From: The Doctor

Resent-Date: Sat, 2 Mar 2024 08:54:22 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn8nam12hn2244.outbound.protection.outlook.com ([52.100.165.244]:42145 helo=NAM12-BN8-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from <070FJA433@rtiyianacd.pnsx.sbs>)

id 1rgQ5C-000000002Pt-18XH

for sales@nk.ca;

Sat, 02 Mar 2024 07:11:26 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=VSeu7Tig8AY9E8aoxdPMR0JhivZ9yHGf5KtPHcpckXQzQZ1R5Dna5uZFyhsfI5aopISf4j9j3Ib+4DagOpWrqH4WOfy4CXdfiCu/jjUDHi1AsOML0tnidk3Dst8mKz2uSx06+dSWTrnFf023YZ4z9txvudG6jbXlZvMMahohXf8BjcC+IZZywnVCl7SWPZWfisWy7SqnrHcD+7ivrkouaMHNqvuldL9Be1GsWqbD5zTgdfEyYhlQ6NFBV0NpYNSuyiodHTzs8yQBXrSuQam5qeEW6Kiq88l4wqwvDdgXRFQ2Q1xuDjOnBHUJsvQB61lrYAZgBqy6RD6oAFJ2nTAooQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=h5cIlOeMP94TAe3qRkHZ8l08f/hcu2gn/5LQNHmJ3SM=;

b=L6RhkyoYL9hfgF5hq4fVcRG5IlZqEDxgNNY3wKdgHKVhNCsaPzBPXgmaXcgitTKRllcEil04AAO3kUNE8JbFgW7xNjG6DkomeC1UzY1dB3QB68BlQBbqziPMHw1HCWK+Zhcb0zz2wXENdbyBSnu07Wde5yGbHKatM4qU0dYpLf4BIPHQBcH/i6G+1+EU4/fIvXxfvSGgL5ZmCnvd7czxHdc7RCfXPllvcpncF2QHM5ySjYung+MVet+BspgmkUidpG3JLBxfRZJ9zRccOYx3DYMjuNJ2heFleY687elJxlDWTYczCa89FQvCqR1aEC7/dpCZRMeUZ2w/BrRhgQoGSg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=rtiyianacd.pnsx.sbs; dmarc=pass action=none

header.from=rtiyianacd.pnsx.sbs; dkim=pass header.d=rtiyianacd.pnsx.sbs;

arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=shv08yuep28ugfhx1au5.onmicrosoft.com;

s=selector1-shv08yuep28ugfhx1au5-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=h5cIlOeMP94TAe3qRkHZ8l08f/hcu2gn/5LQNHmJ3SM=;

b=gPucsj0qHuJymmPAg0tu9ayC0vMp1GWPSpf7oaWGtPB8RVi5irEBr/PlOCZ8Lrc8/kYnv7D9xQ66Jq2O3d2xbAw3Ru6DSnSVgziVFMTAbHiKmrz/mZZOAAhtjWqHwe6AfhOF4ZV7n9u5UDJvkHFzxHYhiZZzOodIDgBRUkKgoUIAfaUzYmBX7248qN+kbmJ6oNqpW/4ZUXAOa0D8Ma4gtNmelrIPDJp6nKIOCzsrtAc1ZpLaw7Gxc2aAxsdDPGE43DcmeMKtD/lGxSUYD4ZtG0zsFsYJYrPVYBB9px3B6fwqLpFc0exz449zeSE+QIltiopvoEf7HhnlpmreRvHaXw==

Authentication-Results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=rtiyianacd.pnsx.sbs;

From: "=?UTF-8?B?PT9VVEYtOD9RP0FwcGxlIEtldG8gV2VpZ2h0IExvc3M/PQ==?=" <070FJA433@rtiyianacd.pnsx.sbs>

Subject: =?UTF-8?Q?Order Confirmation - Apple Keto?=

To: sales@nk.ca

Cc: sales@outlook.com

Content-Type: multipart/alternative;

boundary="_c89e2870-495e-4297-a008-38f69efa0a5e_"

Date: Sat, 02 Mar 2024 14:04:13 +0000

X-ClientProxiedBy: YT4PR01CA0051.CANPRD01.PROD.OUTLOOK.COM

(2603:10b6:b01:111::19) To MN2PR19MB3853.namprd19.prod.outlook.com

(2603:10b6:208:1e3::7)

Message-ID:



X-Message-Flag: Flag for follow up

MIME-Version: 1.0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: MN2PR19MB3853:EE_|DS0PR19MB7537:EE_

X-MS-Office365-Filtering-Correlation-Id: 04c45101-0053-459d-ed04-08dc3ac257f9

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?Wi9Lbm54VVRTYy9temM0S1NzRmpLTFJMczlWR0kzamlBdnl5Q3pCN1ZtbFln?=

=?utf-8?B?K3BRa2MzZUVGMytEcnJ1N2k2TUk1MUpXbkhvOGdPWHJrWnVVZ3F3eVE2WENs?=

=?utf-8?B?QkU1TUo0d05pUU1Xd3VkQmFZaXFsK1RFNlRKSU5DRlFUZU1sUVNhSWFLK09v?=

=?utf-8?B?OFJ1OEc1OWtNdXdMdEQvcWxFSkZPcktsOVMvdkJOdGhMS09lWGhuOUhReEtN?=

=?utf-8?B?YWhDSEMxcy9kSG02UU12UGYyVlZHYXNhc204WFJMdFFuS3BFZ3ZmeHc3bjFP?=

=?utf-8?B?aWtKa2FQVXdhL0hSZnNWcUMxQTN2MTdyZW8wY0NYdU1KZlZIb1M2a2JWdC80?=

=?utf-8?B?eTNZVzI1VHh3KzVyNi9CdlhCT085OXJtVFlpdFVPa2dFQzN6OUl2dTUvTnlK?=

=?utf-8?B?UTYrZDZNQW1FaHk5Z1BXYTZMSFYxbTZGRHBoSDVub0lWSDRYZGhabWZGd0hB?=

=?utf-8?B?cEl4cEJ2L2loemFCVjJQc3FHVytwOXh3T01mSnV0VVVYcDJOY21UUm0xS1Fr?=

=?utf-8?B?eitjYjVaUk1tYTRFUmJCbG9zQzhOcTk2L29wNWV3ajg1Y2FWMVVNdXVFcUNa?=

=?utf-8?B?ZWpid2Y2ajUrWUU2K29XUWM5aVk3OWlEZVh1endTOXF5UnVBU0Y2ekdyemFG?=

=?utf-8?B?cEphZHdnYTBtRDg0K1gvbHVaMTlDZ3ZsR1BrWjkvUW9LU1MvZ1dLaTVHd3ph?=

=?utf-8?B?OTBCTm5wU1lsWCtKZEIxWXg3azc4WFhZOW5kSm0zWWM3TUVDM1RGcVNpUEwy?=

=?utf-8?B?OXBQWmN4d3JtUXhnQUFEOHJkNWVFNnY4ZEcyMnRTbU9IVVZwNXVtbEhMK0sy?=

=?utf-8?B?YnVRbzZOekJiZUlCczhZMXV3bm1YN1JhSkd4bnMraGhxRmtzWGE0SmN5MVJ3?=

=?utf-8?B?STZhbDVlQ3VQRVlmMnhvYmI1d3RVYmhVMmJJYWJhL1laejRvSlc1WTNsTlRI?=

=?utf-8?B?Lzcva0NOUXRybmlnYXdTUHFIS0tuYkRvdlVkaWpoakd0bUJNTXQxWkN5azgv?=

=?utf-8?B?OHFsMit2bGJTMXhQRndnM2pkTnYvdkVwWTd6S1Q4YTBpTGc0QlB4OE1TRExZ?=

=?utf-8?B?eEFTT1BwOUlkQ2NGTi9XYktBenFsc2VXNUhNd2F1TzFYQmhtRmRoeUlIM2lV?=

=?utf-8?B?M2hyVUtZYmhJdFhoUGNlS3Q3c3JTdlBEbFk5c29sZkVWOVhrYVp5M3JoTWha?=

=?utf-8?B?dHY2UWt1dWk4SGtQL0RCeUFUN3ErSVRUTnJlcXM2dkd6ZjdUdU1mSjdMUHZh?=

=?utf-8?B?aW5XcmNaa1J0SmRxM1d1VWxnZVpsMytZNHhsWnB3aEJPOTR2VlVCK0phNE1u?=

=?utf-8?B?RjJtdXh3TzdaZDNZelRhMEJLMmdQakF3YVJONmpuREFPQjQ2dml6eW16SWNw?=

=?utf-8?B?aVJLQ2ZnbDZwWlNwWDQyUnVVNk5XS0VJYzJhbGtkOWZuNzhTZURCYUlEcG8y?=

=?utf-8?B?Y1d1Vzl1aEN0SzBpQWIzWUhpOXVHbVM2cWdIQW9sOTFXYTY3WVBNNEhBRzRj?=

=?utf-8?B?OGZmMXhyaXQ5TXFNN2tLcXNZMWZGcDF2NnpQSTBHVGt1bUYyQ3dpc2ExNXd2?=

=?utf-8?B?T1p4WDNZZmlVVmJPRlFiZ3ZsQ1V4bEJrWlV6Ty84S0hvSkFOQTZZUjFvSnQy?=

=?utf-8?B?NWVaVHlRSGNrVmM3ZzdsTlh5MGx2Z2c9PQ==?=

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:9;SRV:;IPV:NLI;SFV:SPM;H:MN2PR19MB3853.namprd19.prod.outlook.com;PTR:;CAT:OSPM;SFS:(13230031)(376005)(41320700004)(22042699003)(37730700002);DIR:OUT;SFP:1501;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?ZVpMdW84c28zRUhLMzdpNXdVWDVoT3pWdUJuMHhodTkwdFFiUHdmMEJ2T0lZ?=

=?utf-8?B?Yy83R3Q1c0lEbnMwamREMTZEdzJzbFBHa3dxUkZpMWt4NjRjVGdSVzRiZUph?=

=?utf-8?B?Y2hGMjl6VUJBdGdQcmdWYlRlQWM3NlVCN0xGbUsyQ0JBTFBGd2VieUZTRWFL?=

=?utf-8?B?YkVWNm9qd0tIeFdvSVFKMjhXMm5vQmwvYnIrNmtBa2V1b2l5bHlmWnB0UVdt?=

=?utf-8?B?Y3dUcEtGdlBTUlpQTWdGZlJ4WCtyZy9vbnZlT3QrNnNjd1V1NWNKRmlIT2tQ?=

=?utf-8?B?dWdKOXJET1QwTGlsM2MwdWVXOWRsM2txVWdiZnBibGN0TFdabE1PZTRrZnUy?=

=?utf-8?B?dXJtSDFIN2Rzbjh6aVA0YVp6UVNrVXlyL2ZIMjQvRDQwaEVkSHFJdU9PUFlF?=

=?utf-8?B?WndBMkNuNWNhcisxQUVEbmJadFFFbVB0L3liYUxXdHh3V2lkQ3lFV0ozT2Rv?=

=?utf-8?B?dVVyM2xSakFNbDN2VjVyemlSN0xGSlNuQW9CRmFpRjlXQlJ1STk2WUxTeHlD?=

=?utf-8?B?YVQ2WnJTM2RBSnh4MHpyMUliUUpGWkRxR3NTTzZ3d2hEeU1QN29sRG93RDVu?=

=?utf-8?B?WXRROFBQSEVsaGFDVnh4MktOVzd3d1NpMzJzWm53NDVwdk5CKytxQXFQVHB0?=

=?utf-8?B?d2JYd1l4WHpyTUs4dW1Ca3I1aWVUUXYwUlJKRVNsTXE5WWpnVkhrL1BqZE9Z?=

=?utf-8?B?ZkZFRTRoS0xpa3JrUkJXa3E0Q0JDem5VZlBUdm1aUnZHM3h2eGg1UDZqc085?=

=?utf-8?B?YUtodC9MSHZkc3dES0ZnaWJTbUhJQ3lxK1o3ZVhPUFF3NkZQczk4dUNtQldU?=

=?utf-8?B?VUYycXUvaGNLN1l1ejNaeFZReU1ZWldKcXRsbldQYWRuMEo2ZlZETjZGYkQx?=

=?utf-8?B?L1BXaDd3Q1pPTE5ienZkY2duZEdwMUp1NldzQUlNZy9SV0NhZkRxdWZDakww?=

=?utf-8?B?MC9zd0ZUVVNaelN0TEh4Zm1EUktpWnVUcWUyOFpORDFGdHRJUWtQYXVIMjNh?=

=?utf-8?B?dGtDd1UrTU9xekRrVkhnbmNlTHd1K2hEWTY4RExONjY4N2doZ1hRZWJ1ZFZU?=

=?utf-8?B?ZHBHTkxsZ0xsVkRRK0RTOFVuY3lCZ1pqaG1EVzd1aVJrUkdlZjYxRmtFWDYx?=

=?utf-8?B?Zm9VZnd1akVGK09RN01lUDhJMHRvdjh1VWlVLzVoUWFQaTFEYVhQSU1zQ09j?=

=?utf-8?B?SWNyVlRXRUQ0eUdYRUNFNVVTeUxyMjRUeXVaekk2Y2pQRE0vMmY5Zk1teVBG?=

=?utf-8?B?b21pcmF4S1lvdUdMZXh3ZzkyS21xUEpnNTBHREhMQ2ZIN0plVzFJY1FMKzh0?=

=?utf-8?B?MVoweURtY3BrRUZIaFlPem9wNC9oa2pCRVl1RHBNNy9EMHIzdytPUWFmdEN3?=

=?utf-8?B?dWkxWlNTcU1kMjd6RlBENEt1T2wyc1l1MTltbXQrQ3FWVkVFbWlLaGVnYURH?=

=?utf-8?B?SmpHVTFwRjAwZnhiUHVuem1EcTdQeno5Q1IwaHFLeXFwRk82cDlHSmVnaVVM?=

=?utf-8?B?c2VwM0p4aGVvL3NiM25XR1BkWFYxbVZrM3A1eHRBc2w4N0JwTGdVZGFWZVdD?=

=?utf-8?B?SFp2THQrNW9Ud0h1elFJWVRYUE1URW5TZ2dNc2NzTVpYNmtGY0Z1bjc2aUNx?=

=?utf-8?B?ZzM3RERvN0FNV3hDNkVlY1pVd25oY1ZnN01wZVI0Q2F4T3B0TGtaQW9vcEk4?=

=?utf-8?B?clh6azdWMVZIMXcrNllLN0hpZVc4dTlLY1hWYk5pb0dDUzFGSEJ3M1VkN0Nz?=

=?utf-8?B?dStKR0l6SjRaV280eXRtMHhlbnYwZHZQeTF4cHVaYzQyb0htN2c1b28zZVZv?=

=?utf-8?B?YnZLTlFrRFhUV0lRTG5RYlhLcXAvMU9BT3BxR1lqV1gzS0tWdi9sb2Z3WC9l?=

=?utf-8?B?SXJTaWVnd3RqZXM5RVdGOXFyT1hGVzhUL3pKeDV6VllyY0lydmNJNmlRUExj?=

=?utf-8?B?QjFtYVBFRFljcGNWVE1Nc2VpTjZCK2NNMVArNVM0NU1CUU5NbExSWGFyN25O?=

=?utf-8?B?NytsZVFXRmlQejZjaEZlNnNNRHJweXVTYnpDbkZaM0xZaTQvN01rL1NYL1Bt?=

=?utf-8?B?ZnBKZDBuVUJjQlpjdGxxQlNjbTk0eG02TmNMTldpUW9mTTZvQ2lvUVdDWWwy?=

=?utf-8?B?WVoxVVoyRnpibzJhMThnWlZhT3VVUWxZTEljbEFpQnR5THVYMTZWWEpHWWQ2?=

=?utf-8?B?Q2c9PQ==?=

X-OriginatorOrg: rtiyianacd.pnsx.sbs

X-MS-Exchange-CrossTenant-Network-Message-Id: 04c45101-0053-459d-ed04-08dc3ac257f9

X-MS-Exchange-CrossTenant-AuthSource: MN2PR19MB3853.namprd19.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Mar 2024 14:09:15.4430

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 58ca2ded-1478-4fe1-b52f-57c8dfe3a955

X-MS-Exchange-CrossTenant-MailboxType: HOSTED

X-MS-Exchange-CrossTenant-UserPrincipalName: E4C1MBcLeifkw9sLUtkbydHj4eqivQIj9I5Wcy2WyO2iGcHVuN4WF7q5HyO2gfnXFMInTTryGuGWIVszVw1zHOXOFQHWkcYfVPO6q9tslVA=

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS0PR19MB7537

X-Spam_score: 12.8

X-Spam_score_int: 128

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Order Verification - Apple Keto Shipment Pending - Apple

Keto



Content analysis details: (12.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.100.165.244 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.100.165.244 listed in list.dnswl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: jigfsdsfjksd.page.link]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_SIGNED Message has a ARC signature

0.0 BAD_ENC_HEADER Message has bad MIME encoding in the header

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.6 FROM_STARTS_WITH_NUMS From: starts with several numbers

0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

-0.0 T_SCC_BODY_TEXT_LINE No description available.

2.7 SCC_BODY_URI_ONLY Very short body with something maybe clickable

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

0.0 T_REMOTE_IMAGE Message contains an external image

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} =?UTF-8?Q?Order Confirmation - Apple Keto?=



--_c89e2870-495e-4297-a008-38f69efa0a5e_

Content-Type: text/plain; charset="UTF-8";









--_c89e2870-495e-4297-a008-38f69efa0a5e_

Content-Type: text/html; charset="UTF-8";





Order Verification - Apple Keto


Shipment Pending - Apple Keto

















--_c89e2870-495e-4297-a008-38f69efa0a5e_--

Lowe's Phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 02 Mar 2024 08:55:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rgRhB-000000005ge-2myg

for dave@doctor.nl2k.ab.ca;

Sat, 02 Mar 2024 08:54:41 -0700

Resent-From: The Doctor

Resent-Date: Sat, 2 Mar 2024 08:54:41 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dm6nam12on2133.outbound.protection.outlook.com ([40.107.243.133]:22080 helo=NAM12-DM6-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rgQDy-000000004uE-0aBh

for doctor@doctor.nl2k.ab.ca;

Sat, 02 Mar 2024 07:20:30 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=c94ajN1ATscCPofv/YwDUmgr2HY14ZX+MAKAu8xRtHeVY+EfH8Us4Fm4oqrSgs9FAHnlrjjHndJi99rQDOsc6htASMpfXG0gzp47ffnpR150DNZRNInkq6dXGHrLKnUyqhfLTXiXM+qy5mCLom1DJwF+Rptg7dznb6+XgOHTSJawSvjlG0q7CLnB9eNhs2iQgCRaIywmXTtPQW2t2CYdWB/PHV5C6ghgBi8Z3QY5VGJcribnbtgGqse2zU8LWKRkQBIdVvOdX9y6HGXv8BYE5aMRm1h7Q0gFu449C0oVe1fc5HMKI2Z2SKY4nC2HJScromTlFksub3F7szWFZBmyTw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=90OslhU8lh5uUK33BGMWckL6kcNUYPONTvYHQQ6GJKI=;

b=gZZmDRENIhc2QHDRqdV4M2CCvJ3U5GxB33jkKWixc02B5gtbwKxkY5BiYQIIvlmTlzOIEjNUehQ/VzXFOXOgSEvy2rwYxSD4/+HhCtfWSI5WzT3XmBbySc5/lGwwVK5rEm6A3pq868uc4gZtX+a+ugSaBTvMqfQOceTFsMZie1FK5wegngY4rPFO97UIFHeZUcm8Xozm4KU1z9YSG9ZI5P/YAOnHm6stzm4nIfLdNe2meubixzBvsbRxewSqSTNTqgWYNcec3HdVpkmC9EuUCDzv1eInq3E2WZMWohGTup9GfmKegFYqNVTNoOcwX3BjLxlPB3P0lqfCVEl7g1VGfQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

172.105.40.168) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.mailfrom=usxl.onmicrosoft.com; dmarc=none action=none

header.from=usxl.onmicrosoft.com; dkim=none (message not signed); arc=none

(0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=liceovicentepalacioscl.onmicrosoft.com;

s=selector1-liceovicentepalacioscl-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=90OslhU8lh5uUK33BGMWckL6kcNUYPONTvYHQQ6GJKI=;

b=NQol9GOePcjd+0ymwVNt3d9tO8vj8zDlleaTlf2wxKu7Aancyp1umFn3EurBpSItnmdzIkuVB6pbz0SrHthu3LyTQqNjFLfgZZowVNpvPLV/DZKbwC0uhAbpfrpz7/K9arMw1mi1pY/PG4kq2P6c668kCQt/F/UcwiGT++OgKF0=

Received: from BL0PR02CA0042.namprd02.prod.outlook.com (2603:10b6:207:3d::19)

by CPUP152MB5033.LAMP152.PROD.OUTLOOK.COM (2603:10d6:103:16c::5) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7249.34; Sat, 2 Mar

2024 14:18:24 +0000

Received: from MN1PEPF0000ECD5.namprd02.prod.outlook.com

(2603:10b6:207:3d:cafe::25) by BL0PR02CA0042.outlook.office365.com

(2603:10b6:207:3d::19) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7339.34 via Frontend

Transport; Sat, 2 Mar 2024 14:18:23 +0000

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 172.105.40.168)

smtp.mailfrom=usxl.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=usxl.onmicrosoft.com;

Received-SPF: Fail (protection.outlook.com: domain of usxl.onmicrosoft.com

does not designate 172.105.40.168 as permitted sender)

receiver=protection.outlook.com; client-ip=172.105.40.168;

helo=usxl.onmicrosoft.com;

Received: from usxl.onmicrosoft.com (172.105.40.168) by

MN1PEPF0000ECD5.mail.protection.outlook.com (10.167.242.133) with Microsoft

SMTP Server id 15.20.7362.11 via Frontend Transport; Sat, 2 Mar 2024 14:18:22

+0000

Date: Sat, 02 Mar 2024 14:18:21 +0000

MIME-Version: 1.0

Sender: contact@usxl.onmicrosoft.com

Thread-Topic: =?UTF-8?Q?Your Reward =E2=9C=94=EF=B8=8F?= 9Zk6V8Hk

X-MS-Has-Attach: yes

msip_labels:

Content-Type: multipart/related; boundary="OcDgJZswEvFf5BmdveRiFSyzNwndx4RR"; type="multipart/alternative"

Accept-Language: fr-FR, en-US

From: Lowe's

Subject: =?UTF-8?Q?Your Reward =E2=9C=94=EF=B8=8F?=

X-MS-TNEF-Correlator:

CC: doctor@aol.com

Content-Language: fr-FR

Thread-Index: woVJhMz3xkMiip7y5AdBaTJVmkdV0O==

To: doctor@aol.com

Message-ID:

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: MN1PEPF0000ECD5:EE_|CPUP152MB5033:EE_

X-MS-Office365-Filtering-Correlation-Id: 407983f4-1af5-465a-fab5-08dc3ac39e55

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

wwALExBK2GimRs5KNRRMfyKRVz0CrX6yCs9WzzW4ONIT4YpRvRHNrH/aS0l9CgHpJj66/QvbgLX5nrnHLUk9ZPrzbplWnGvDINjShI0BAV4b3SLXinkPjZXI+ZbCaz8H4MsHUB6/v8e1C1mGFJdOcH64M1S3d9/rDgvh8c9bFuuTfZqNvF+Fnqz6CRpJzDy3rM/a2YdJF5CadZ2O5NtMxXsH+bB0d6Y1YCI9JbSWkOFh4Axckm2JOPFOjPVnXUqgAhq4PDQ/JlBTLwbxb1rmpX9ThMxAILlTqsW4WQ6ELNq+3KFl7DcgxvzNLwUWtgLMi6HTFLkDyPKHLKOJE7h8ENvQzokZVzBmBLFLQeurA9fRgfChabLJWjr5PDKK3Xz2WUVvcQjlu0rAMDWRBFcBCQkZukTm7fuRwK6sLmWm/EgX4hriCAqo5l7AaPgBVYwak9Q/CY/yz9L+3/GQAXJHAXqfrs3mUEU65i22feIc3Ype9adhwmgmH0K/STLJGmdZwJQUqJIi5cCRXtbsB920Ma0a6UBKtFdOMCda+avb1A7UzS3G1SXp/2gw5e8S8bjVOrzgWp/xvm7HqNCt8OZLu5b7gM2OugYklA8Q9JdR9nMC8E1Pt1Mll5DXdvP7J0hlGlQMDyXOx5Idx6PgOsc+5ffsbclxXF/9AxaDt6gYFjCp5iWp8NdglB4xqEwljmARhV9n68WjbGg6bkxEKtdGrA==

X-Forefront-Antispam-Report:

CIP:172.105.40.168;CTRY:IN;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:usxl.onmicrosoft.com;PTR:172-105-40-168.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(376005)(61400799018)(82310400014)(34020700007)(36860700004)(41320700004);DIR:OUT;SFP:1102;

X-OriginatorOrg: usxl.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Mar 2024 14:18:22.4705

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 407983f4-1af5-465a-fab5-08dc3ac39e55

X-MS-Exchange-CrossTenant-Id: aad980c3-b21b-4b8d-a781-8bfdd8af16bf

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=aad980c3-b21b-4b8d-a781-8bfdd8af16bf;Ip=[172.105.40.168];Helo=[usxl.onmicrosoft.com]

X-MS-Exchange-CrossTenant-AuthSource:

MN1PEPF0000ECD5.namprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: CPUP152MB5033

X-Spam_score: 9.7

X-Spam_score_int: 97

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: JS4ynZglMRnJ2 DoniYvaCwkPhk 2cCvF7qaeovPX 92fAKub5oumAL gIYKwuJOdA9fo

S7vIH5cnUmM5b Jb7TU5LvqCwmz qfILLbvuRbOR6 aLfqW7BNM3QTO YU08Gmei2fNXB 1or9Zbsnprham

ZxpJ5J4B1qEu8 d4V3xT5GLr9np 10LNZqDL4mmZi kRk0 [...]



Content analysis details: (9.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.107.243.133 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.107.243.133 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_SIGNED Message has a ARC signature

0.0 BAD_ENC_HEADER Message has bad MIME encoding in the header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[support.wgf1ifjb7rb(at)usxl.onmicrosoft.com]

3.0 SCC_CANSPAM_2 BODY: Interesting compliance language

0.1 TW_PR BODY: Odd Letter Triples with PR

0.1 TW_WM BODY: Odd Letter Triples with WM

0.1 TW_BV BODY: Odd Letter Triples with BV

0.1 TW_RJ BODY: Odd Letter Triples with RJ

0.1 TW_QA BODY: Odd Letter Triples with QA

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} =?UTF-8?Q?Your Reward =E2=9C=94=EF=B8=8F?=





--OcDgJZswEvFf5BmdveRiFSyzNwndx4RR

Content-Type: multipart/alternative; boundary="KYfWqR8M1q7arHjlLvGevQ"



--KYfWqR8M1q7arHjlLvGevQ

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



JS4ynZglMRnJ2 DoniYvaCwkPhk 2cCvF7qaeovPX 92fAKub5oumAL

gIYKwuJOdA9fo S7vIH5cnUmM5b Jb7TU5LvqCwmz qfILLbvuRbOR6

aLfqW7BNM3QTO YU08Gmei2fNXB 1or9Zbsnprham ZxpJ5J4B1qEu8

d4V3xT5GLr9np 10LNZqDL4mmZi kRk0VFCY3rjrN erYqsCtUutwI0



--KYfWqR8M1q7arHjlLvGevQ

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: 7bit























































Makita 6-pc Combo Kit Exclusive Rewards For You





















If you no longer wish to receive these emails, you may

unsubscribe





by clicking here or by writing to












--KYfWqR8M1q7arHjlLvGevQ--

--OcDgJZswEvFf5BmdveRiFSyzNwndx4RR--

Ukrainian dating spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 02 Mar 2024 07:08:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rgQ1v-0000000022K-3R6p

for dave@doctor.nl2k.ab.ca;

Sat, 02 Mar 2024 07:07:59 -0700

Resent-From: The Doctor

Resent-Date: Sat, 2 Mar 2024 07:07:59 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-db3eur04olkn2035.outbound.protection.outlook.com ([40.92.74.35]:51374 helo=EUR04-DB3-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rgOEq-00000000MCe-1ozW

for doctor@nk.ca;

Sat, 02 Mar 2024 05:13:16 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=OY4A44AUJFAq0EUrVLiU+WdmcW4WQLIgs4lCGD/Mff8ajr3EIfFQyKqgNxAbpiuPVH2y1+HiwBO/S+WPHwLv2bJrCu9+3K+c8qLNNNJOHqHB2qyEbfvXNamMQPY5HUYoghpq3joXwb6R7nv+ZkUwSGYvgHqzievg4rcK/AjUyczs42MO01pLgqrapTaFC5ToALo1J6Nr1pLJZrVmA+/xQHomN/1k+EYdQzqGvx9sOhqaivzZc5Cix76Pwr8wmwymwJfG7YdM8CbPCXFy2D4o0s9qbMqaydVFGSRGuJ4Q592rmxnYSBfw0f2nHeKySNG+PAX9vozNgww/VWWYBpdPaA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=O9hsmb5dAGw7R0M5W65F2S7vVCCgqHmTudKEKHZ87ss=;

b=QpbSzRkinvVK7VmGPj+HiI+HycE0xfz6U0tpvvp/0+y14pFk4hGX4R2eJY/fKZr8PMCuTTk9NJoOoNyqRDTmJ3GL6wanCliD60W5qo6Saz/UMNf8m2Z2Lv64m45x0U42hNt/Aa+79yUObpWGl35LTAkZyo5+HgKcAk0GDryf75f8rxPJrp0Tw3wSniw52Yryb/LpiKgDzN29DVnvBut3jlBbr6BgFwqmExyiUhnXUwyOk6DEHkpWoHHKZ9olKQSe3nTabhZM5zkTaFAvC5PTgBaVjxJWZa+UJtjl5/VA4UBlgdam6hD90wsbH13e6LhH5fUkhhb5TTlXthh3z/iLcQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=O9hsmb5dAGw7R0M5W65F2S7vVCCgqHmTudKEKHZ87ss=;

b=OA7yhL0uh4CP2A0N077xJkd1m3C4xD+3HltJNK6nRRYOtVbJANwNARiqX5p6vVfbaiy2klEgm/X0ClELP1iGeR8ToUtvKUmvJ3oqRdg6FfhVItjF2ckWdMuXyk0EG54yPKLFk2QEKbRfZVs6dx/v6e2QQwH4dS+k0OpOx6tpO3Feqz+HjSaxJcsypQoofu5z8yxcaOvL/t/8+5Q50t+P09+z+qaFplusENb22QozDOrCI605SPpwcvdFiFXE71dh1GniVtlAn7H0beSHzc2RbdafQkg2YqFXEbyqBAvmUi0cB25RqYNiWfN8R3MMQRHJd7a881KbV7oq7ENU8SWi4g==

Received: from VI1PR08MB10145.eurprd08.prod.outlook.com

(2603:10a6:800:1ca::10) by DU0PR08MB7762.eurprd08.prod.outlook.com

(2603:10a6:10:3ba::13) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7316.45; Sat, 2 Mar

2024 12:11:01 +0000

Received: from VI1PR08MB10145.eurprd08.prod.outlook.com

([fe80::30d:6e65:dce:5a5d]) by VI1PR08MB10145.eurprd08.prod.outlook.com

([fe80::30d:6e65:dce:5a5d%6]) with mapi id 15.20.7339.031; Sat, 2 Mar 2024

12:11:01 +0000

Content-Type: multipart/alternative; boundary="===============1221185259479808393=="

Subject: Story update by friend

From: UkrainianCharmMate

CC: UkrainianCharmMate

Date: Sat, 2 Mar 2024 12:10:47 +0000

X-TMN: [qeJemoQS6o40IrBE0Pc9uQIIWgf1ILsV]

X-ClientProxiedBy: VI1PR06CA0131.eurprd06.prod.outlook.com

(2603:10a6:803:a0::24) To VI1PR08MB10145.eurprd08.prod.outlook.com

(2603:10a6:800:1ca::10)

Message-ID:



MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: VI1PR08MB10145:EE_|DU0PR08MB7762:EE_

X-MS-Office365-Filtering-Correlation-Id: 9806a0e4-5ad9-4f76-4b2d-08dc3ab1d2ef

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?djVJM1BQdVNUMmExQU43OW0xS0VLQy91MitWazlCN00rcmFieUJVQ2h2V3lF?=

=?utf-8?B?azJpYUJJU0VOVDVyZFVWTWdXZjM4QTBqZXNZSEtZNHZnbVEyV2g3ZVkzTy8y?=

=?utf-8?B?MlBtWmp5ZEMzTEs0dG4yRUg3NXFScCtDd29rLzBoZUt2TUV4alVnek1Ia3NQ?=

=?utf-8?B?bWZZODlJWFEvdElKcVB1ck1iNkhNUmFCazc4Mm5SWmNTVVVrSk1iazhDTUYv?=

=?utf-8?B?Y0pMRXNwWkVGb0ZyNTNRMXBtVkxsdGY1RTMrRmtPZDd0TUp3ZmNRY0tVaEZW?=

=?utf-8?B?Y1lTc2d2TnZIWHFRR2E5ekJ3cE1LUFdJVlF3TUtCcVFoQTJJWU1Sam9CcTFS?=

=?utf-8?B?MXpveFU5TENmbVkzbFhqZlkxOWpEaWpQNzJFWmV0ZnpYUERRaVBRM3ZhQzc3?=

=?utf-8?B?Q0R3R3gzZlhJN3YyQmZnaDFqVGlYMHlXOVhVSXIzeHpLYTRiR0prWFpmYVpK?=

=?utf-8?B?RUJ6eEZsT2UwZjlNdUpGTWFTVkZ1L0NIU0tZZ2VNb2dpVFdBVGUyTmpFWS9z?=

=?utf-8?B?OFNaZ21VcWVvT0t6NlA5c3FMYnV6QStYS3VBTjRJNk1KRkEzSXhPMWxoN0lJ?=

=?utf-8?B?RjlNSVRoYzN1NnV6OUFtM3VxWEZOV1Y3QlM1aU5NSjZ0d1J5K0IwVnp2S29r?=

=?utf-8?B?eitkMmwzSnFBYXRFYldTcjFSVnh5bVE4QWEvSG0rd1JoYjk3bktNL3lQSW5J?=

=?utf-8?B?eUh4bkJWRjhWRWt5M2htK1NmcVdvSW4vS0RXakoycVJEeDNqRXFhZDhyTkZP?=

=?utf-8?B?elBQTTFIblpzcFoySlErMG0xVTN6bVdTaG1KTFgvZ05BUGNwSWhyVUJBRnJQ?=

=?utf-8?B?UGRFYzM2NUpuQWRUT0JRK2M4L1oxblBDRUlEaVJMdk5hR2NIQ1Y1VFpNY0lS?=

=?utf-8?B?RUpEQ0tKYVU4QTV2UUVHL3FxNnlNL2dDdkZmc3V1UVZHeDZxSmhZaE9FZjlk?=

=?utf-8?B?NGlCZUJVMG8wbzNiVW5LR2xaaTRZbFQybE1ITUo3anJpdFUwbGJyR2o0aHRj?=

=?utf-8?B?Vm5JL0szeGU5YTZqZU9UR2UyOTRrT28rbWVLeUU5dzJSY0lSMHBQemhHcVR1?=

=?utf-8?B?ZFdqWmt3MVV4T0RRTWJVNXZZUUgwMnRnaU9SblZvdnZVRXppYTZDeUd6TXJV?=

=?utf-8?B?L3l5Ynptd1ZSTGUzeFdxVmN0enI5Q1A3VXhacURkb21VQmVWUWUrbUhmTkJW?=

=?utf-8?B?RTVRVzJHVnFueVJLQWpNbEV5NGFHaHFmbzJnYmh4clBRNjdCbmovSk9va0ww?=

=?utf-8?B?Y0VabkcxMXFGWXpBclFyQWlpaktrU0EvdDdWRmdyZkFkT0p3RkV4V1dvZTJv?=

=?utf-8?B?d21qSnVNMkVRUDhZcjk4aFhyOU5WTkYwNTJKMFVCKy9ZVjJtR1hEWEN1Z1VR?=

=?utf-8?B?a29DbDF3UFpMVUdpVjNTWXVIK3BsZlBPRXcrRVBrcEFPQWhBbWNIOUVXOEcw?=

=?utf-8?B?TTZ3TnFaYkMwNlZRUEtyR2w2ZHR4djc2L1h5aGo1Mmx4NmlhaVI5WTdScXcw?=

=?utf-8?B?SUtrVUpNYzBIbHNjNTN0NHlpbmFLZVN6Lzh5TjR4a3IyVVJNMXROcys4bmdC?=

=?utf-8?B?NkorUnRka2NtbE55dmZHZ3lJU2pMOVh3akMyT0xqaUlMRzRzZDFwcU1ZNTg5?=

=?utf-8?B?czVhRTFsSm02dUtobjdTZWoySXNhQXNYUC9uNlhJajVCaDE2dDBKZjNVM0RG?=

=?utf-8?Q?M3YqILuB7B8W1ZAnNO3m?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: 9806a0e4-5ad9-4f76-4b2d-08dc3ab1d2ef

X-MS-Exchange-CrossTenant-AuthSource: VI1PR08MB10145.eurprd08.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Mar 2024 12:11:01.0887

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU0PR08MB7762

X-Spam_score: 13.6

X-Spam_score_int: 136

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Take advantage of the special offer and create your account

today by clicking this link - completely free! Below, you can find the best

recommendation for you, based on your location. Browse profiles and choose

your best match.



Content analysis details: (13.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: shorturl.ac]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: shorturl.ac]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.74.35 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.74.35 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[suiterenee1967(at)outlook.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[suiterenee1967(at)outlook.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} Story update by friend



--===============1221185259479808393==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



PG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJz

ZXQ9dXRmLTgiPjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+Jm5ic3A7PC9wPgoKPHAgc3R5

bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjIwcHgiPjxzcGFu

IHN0eWxlPSJmb250LWZhbWlseTpBcmlhbCxzYW5zLXNlcmlmIj48c3BhbiBzdHlsZT0iY29sb3I6

IzAwMDAwMCI+PHN0cm9uZz5UYWtlIGFkdmFudGFnZSBvZiB0aGUgc3BlY2lhbCBvZmZlciBhbmQg

Y3JlYXRlIHlvdXIgYWNjb3VudCB0b2RheSBieSBjbGlja2luZyB0aGlzIDxhIGhyZWY9Imh0dHBz

Oi8vc2hvcnR1cmwuYWMvN2Q4NXQiPmxpbms8L2E+IC0gY29tcGxldGVseSBmcmVlITwvc3Ryb25n

Pjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+

Jm5ic3A7PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3BhbiBzdHlsZT0iZm9u

dC1zaXplOjE0cHgiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpBcmlhbCxzYW5zLXNlcmlmIj48

c3BhbiBzdHlsZT0iY29sb3I6IzAwMDAwMCI+PGVtPkJlbG93LCZuYnNwOyB5b3UgY2FuIGZpbmQg

dGhlIGJlc3QgcmVjb21tZW5kYXRpb24gZm9yIHlvdSwgYmFzZWQgb24geW91ciBsb2NhdGlvbi48

YnI+CkJyb3dzZSBwcm9maWxlcyBhbmQgY2hvb3NlIHlvdXIgYmVzdCBtYXRjaC48L2VtPjwvc3Bh

bj48L3NwYW4+PC9zcGFuPjwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+Jm5ic3A7

PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj4mbmJzcDs8L3A+Cgo8cCBzdHlsZT0i

dGV4dC1hbGlnbjpjZW50ZXIiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MThweCI+PHNwYW4gc3R5

bGU9ImZvbnQtZmFtaWx5OkFyaWFsLHNhbnMtc2VyaWYiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAw

MDAwIj5CZWxvdyB5b3UgY2FuIHNlZSBvbmUgb2Ygb3VyIG1lbWJlcnMuPC9zcGFuPjwvc3Bhbj48

L3NwYW4+PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3BhbiBzdHlsZT0iZm9u

dC1zaXplOjEzLjk5OTk5OTk5OTk5OTk5OHB0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6QXJp

YWwsc2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPjxzdHJvbmc+PGltZyBz

cmM9Imh0dHBzOi8vbGg3LXVzLmdvb2dsZXVzZXJjb250ZW50LmNvbS9LRTIxNkRIUDlOM2Ziancz

Vm9IeHI1SzNLZGxVV2FUSXNzVEZnblZLTVdxMHd0cUwwMGFGU1hHdmRHVWhHWG1Hdk82Z1FKTXZi

SEF4TGJpU0hqRElEZ3YtRXMzWUdaY1lLRFhDdEJoWXd2T0tYVGF3Y0dReEZCUGZOdFZ1UmtBTWhT

d2NzTW5jaTk4VkF3eV8xX0lrbFBjIiBzdHlsZT0iaGVpZ2h0Ojc3OXB4OyB3aWR0aDo2MjRweCI+

PC9zdHJvbmc+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246

Y2VudGVyIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEzLjk5OTk5OTk5OTk5OTk5OHB0Ij48c3Bh

biBzdHlsZT0iZm9udC1mYW1pbHk6QXJpYWwsc2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9y

OiMwMDAwMDAiPjxzdHJvbmc+T25saW5lIG5vdyDwn4y5PC9zdHJvbmc+PC9zcGFuPjwvc3Bhbj48

L3NwYW4+PGJyPgo8YnI+CjxhIGhyZWY9Imh0dHA6Ly9zaG9ydHVybC5hYy83ZDg1biIgc3R5bGU9

InRleHQtZGVjb3JhdGlvbjpub25lIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjE4cHQiPjxzcGFu

IHN0eWxlPSJmb250LWZhbWlseTpBcmlhbCxzYW5zLXNlcmlmIj48c3BhbiBzdHlsZT0iY29sb3I6

IzExNTVjYyI+VWtyYWluaWFuQ2hhcm1NYXRlPC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9hPjxicj4K

PGJyPgo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjE4cHgiPllvdXIgR2F0ZXdheSB0byBNZWFuaW5n

ZnVsIENvbm5lY3Rpb25zISBEaXNjb3ZlciB0aGUgd29ybGQgb2Ygcm9tYW5jZSBhbmQgY29tcGFu

aW9uc2hpcCwgd2hlcmUgZ2VudWluZSBjb25uZWN0aW9ucyBoYXBwZW4uPC9zcGFuPjwvcD4KCjxw

IHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PGJyPgo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjE4

cHgiPlVubGVhc2ggdGhlIHBvdGVudGlhbCBvZiBvbmxpbmUgZGF0aW5nIHdpdGggb3VyIGRpdmVy

c2UgcHJvZmlsZXMgYW5kIHBlcnNvbmFsaXplZCBhbGdvcml0aG1zLCBjcmVhdGluZyBhIHVuaXF1

ZSBhbmQgZnVsZmlsbGluZyBleHBlcmllbmNlLjwvc3Bhbj48L3A+Cgo8cCBzdHlsZT0idGV4dC1h

bGlnbjpjZW50ZXIiPjxicj4KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxOHB4Ij5Kb2luIHVzIG5v

dyB0byBlbWJhcmsgb24gYSBqb3VybmV5IG9mIGV4Y2l0aW5nIHBvc3NpYmlsaXRpZXMgYW5kIGZp

bmQgbW9yZSB0aGFuIGp1c3QgYSBtYXRjaC48L3NwYW4+PC9wPgoKPHAgc3R5bGU9InRleHQtYWxp

Z246Y2VudGVyIj48YnI+CjxzcGFuIHN0eWxlPSJmb250LXNpemU6MjBweCI+PHN0cm9uZz5DcmVh

dGUgeW91ciBwcm9maWxlIGFuZCBzdGFydCB5b3VyIGFkdmVudHVyZSB0b2RheSE8L3N0cm9uZz48

L3NwYW4+PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj4mbmJzcDs8L3A+Cgo8cCBz

dHlsZT0idGV4dC1hbGlnbjpjZW50ZXIiPiZuYnNwOzwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWdu

OmNlbnRlciI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxOHB4Ij48ZW0+UmVtZW1iZXIgdG8gdmVy

aWZ5IHlvdXIgZW1haWwgYnkgY2xpY2tpbmcgdGhlIGxpbmsgdGhhdCB3aWxsIGJlIHNlbnQgdG8g

eW91ciBpbmJveCEgQnkgZG9pbmcgdGhpcywgdGhlIHNlYXJjaCBmdW5jdGlvbiB3aWxsIGJlIGVu

YWJsZWQuPC9lbT48L3NwYW4+PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj4mbmJz

cDs8L3A+Cgo8cCBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXIiPjxzcGFuIHN0eWxlPSJmb250LXNp

emU6MThweCI+WW91IG9ubHkgbGl2ZSBvbmNlLCBzbyBkb24ndCBvdmVydGhpbmsgaXQhPC9zcGFu

PjwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+Jm5ic3A7PC9wPgoKPHAgc3R5bGU9

InRleHQtYWxpZ246Y2VudGVyIj48YnI+CjxzcGFuIHN0eWxlPSJjb2xvcjojMDAwMDAwIj48c3Bh

biBzdHlsZT0iZm9udC1mYW1pbHk6QXJpYWwsc2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImZvbnQt

c2l6ZToxNHB4Ij5XYW50IHRvIGNoYW5nZSBob3cgPC9zcGFuPjwvc3Bhbj55b3UgcmVjZWl2ZSB0

aGVzZSBlbWFpbHM8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxNHB4Ij48c3BhbiBzdHls

ZT0iZm9udC1mYW1pbHk6QXJpYWwsc2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAw

MDAiPj88L3NwYW4+PC9zcGFuPjxicj4KPGJyPgo8YSBocmVmPSJodHRwOi8vdC5seS9HVnJCSSIg

c3R5bGU9InRleHQtZGVjb3JhdGlvbjpub25lIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6QXJp

YWwsc2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxMTU1Y2MiPjx1PlVuc3Vic2NyaWJl

IGhlcmU8L3U+PC9zcGFuPjwvc3Bhbj48L2E+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFs

LHNhbnMtc2VyaWYiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAwMDAwIj4uPC9zcGFuPjwvc3Bhbj48

L3NwYW4+PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48YnI+CiZuYnNwOzwvcD4K



--===============1221185259479808393==--

Nasal strips spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 02 Mar 2024 07:08:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rgQ18-000000001o5-1PgZ

for dave@doctor.nl2k.ab.ca;

Sat, 02 Mar 2024 07:07:10 -0700

Resent-From: The Doctor

Resent-Date: Sat, 2 Mar 2024 07:07:10 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dm6nam11hn2232.outbound.protection.outlook.com ([52.100.172.232]:29184 helo=NAM11-DM6-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rgKpX-00000000Co0-0M2R

for sales@nk.ca;

Sat, 02 Mar 2024 01:34:55 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=F7bDOxCmWAR26cGHyY9Q6TZtJac64BWafRJ8NiJltw42lRPw4g+AaAhYuqkeSywPr2IVLBMeAmpzIOwykEydW74YVZZ+rg25+s3NGnimRebylPCz4P19R7jmmw8q9OCPGZIk8TmJn646n5D3APru8ijTZ2Safd6trPqFnE+luEL+Vv+NwIs5R9lWsZZciZMBbW1iA0AvOppXraiDJqiBJA1j9LboetYOLkYEbkGe0tFIqL5izndVrMNXGH16xeCJnQWC1B2gajNBXbIbFWJt+9nPSgRzkwLHQxDcEzenKJ8MAgmHSWWAXo6hGbtRuuJxNfIGLpN7ahNu+ePZEeqPDQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=GGXjZdWFJTYSfCvoRJQJhLYdFiwxBYiA7IgNCj0879Y=;

b=K9Lvf2mFUEfIo5USekL3747cxBRc20Jf8Mxg2WdijR60k9oNOiQX7hm5so6jdsDXMuEewEWMFJW0C9RntI3AAWKyiWtCdjA91hHNTr4nJxeG7uBQxWR8pVCgZ3Ft60tqvtdwWEdCPtOt/bKGvd4NHLMBe2YozKIu22WUrI9V2uCxTN7cauDi/YM5Ba8v6FrCt/EOw0LEONUtZKaz3V4vC6OoJy5t+RBYeJEw8pZ2yIr1r9amwBf/oWb+ct4poWGEVUSRXbGUXfinDOulMTnkedvB1gIpxw8zFvLCghNFOIivkdlD+hDR+6GQTEdfJ8OASXagnsx82bkkxP2iCl9DtQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=szamxa.igdh.sbs; dmarc=pass action=none

header.from=szamxa.igdh.sbs; dkim=pass header.d=szamxa.igdh.sbs; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=fdsdfsafsagsdgaSxaSFxza.onmicrosoft.com;

s=selector1-fdsdfsafsagsdgaSxaSFxza-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=GGXjZdWFJTYSfCvoRJQJhLYdFiwxBYiA7IgNCj0879Y=;

b=RCulK765AtaAPemayteinG97kBB/TTcMCUp37MjxfQPDDLBh4o+M8kCmdenhDhfof3QMn+nAQrGMiBREkSS7xZY/U+yTFPllcvCSGdg7qKqwjQ0ajv+1yCKTZ+hdsSdI/6rhQrYC3W1PDUqY/qbTN2d9fDPm+M8/Zy8Exrj6sCpqs+7DPuaKX02kwlCeYuKPnKLr5a5e6MEWB3hZF6A6EMJba2sswqKRxth7nIEKcBzC46xJde6FfhAgzd9dW22ziYGFV7UHsOpUtZiKK1bF4+9txzsH1efwabpnPwf1olqLKWHUDSsHS4bnXiP5W3wlnpv6jEqEJDmNV/NOEwXWbQ==

Authentication-Results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=szamxa.igdh.sbs;

From: "=?UTF-8?B?SGlsb2kgTmFzYWwgU3RyaXBz?="

Subject: =?UTF-8?B?R2V0IFJlYWR5IHRvIEJyZWF0aGUgQmV0dGVyIFdpdGggSGlsb2k=?=

To: sales@nk.ca

Cc: sales@outlook.com

Content-Type: multipart/alternative;

boundary="_2942204e-f9cd-484c-8926-e660e5b003e5_"

Date: Sat, 02 Mar 2024 08:27:44 +0000

X-ClientProxiedBy: CH2PR16CA0013.namprd16.prod.outlook.com

(2603:10b6:610:50::23) To CH2PR12MB3928.namprd12.prod.outlook.com

(2603:10b6:610:23::11)

Message-ID:



X-Message-Flag: Flag for follow up

MIME-Version: 1.0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: CH2PR12MB3928:EE_|PH7PR12MB7137:EE_

X-MS-Office365-Filtering-Correlation-Id: 99a8036d-8d05-4bd9-8ddc-08dc3a93562e

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?Q1RrMlZ1NGNsdGNHUnFLSEFUSk1QaWRKNkZHR3dxcitDZ1VpTll6NUg4Ynpk?=

=?utf-8?B?R2VaMnRZUm1jNGlxNThZQjlycWJSQWpNdEtxR3pBMEhiTE0wd2thOHpKazc4?=

=?utf-8?B?Z3VTRGdoYXd6TU95dFFZV29lNTZDMW52aW1nWmVwVTczR2JvVENqQjZyRUpI?=

=?utf-8?B?OWI5Ym0rbEdiano4OE81eUJacHZNTWlNNiszVExZRGFIcU0yckpTeEJaZ0RC?=

=?utf-8?B?dEZ4dHQ5RVI3S0EvVC9GVElXaDVDMzNsUTJyNVF6N3pNQlg5ckl0MkI2eFlr?=

=?utf-8?B?K0ZMMmxGQkg3VVptQndGRlhKZ2pZcUVkMm9oMUZQaExHMitqOGtOUDU1Rlk5?=

=?utf-8?B?NFNYaTVIaHpQdVdORmxBWjNiRjNOL09HVzZ0ak4rV1RDSWZHN210RFFmVXZp?=

=?utf-8?B?SS9OY2dNRktHS1Z5U1M2RGk1OGFBdFZxREZJNWEzSVkyOVVwSWpaYWZCWWxQ?=

=?utf-8?B?c2FQTUFSNHdidURRYjhqTHpkdk5LMmFxR2pRTStnbUJxM1NFallQQ1JPSkZv?=

=?utf-8?B?WUdmbzllQnRISkVKeXNZOHE4ZXh4aEgvczZYU1FpTTViaDdycVdrS0ZQQ0NW?=

=?utf-8?B?UjBLckIrNGY5SjVUOXhFOUpUQ0tWZzAwZm5vdU9ETFdPa1BXVlQ1aVpqQ3k1?=

=?utf-8?B?MXVWb2xBaTlmL21YUXVxeHU2eUt0Y01tNXZaVlYxNDJWL1I2MDFZNjJHQjVw?=

=?utf-8?B?OVdYMVpIMDY0OVFKV1U3ai9SUTF4WHNwL0xlbHBoR0lDT2tPZVhLVFdXRTNr?=

=?utf-8?B?d3lGaWpyMFFNMzZ5aTVTQmUvaHNuQ0kwMWZwblpnY0xTTDg1Y0t3TnRWZERP?=

=?utf-8?B?Zko3ckJsMmhUL0tDWjZQV0RTdXYweVFUMkNjdXpXdHlHZXQxZ3N0VXh4SnJ6?=

=?utf-8?B?VDl0UlgvaEdmRjZqOW1TN1U2UzdCVXQ5ajBFVlNhVmE0MGZlZ1NqU0F1aGtI?=

=?utf-8?B?bkRWbzVRWmh0UVNqUnVWSGJyWXE2ZWRIVnNad1hRcXpVUGkzeHlpUXQ5S2w5?=

=?utf-8?B?SWFRNndqaUIweDQ1YzFmcXNQSFdXTndsbWFMaXpOdDNmT25mQ1J1bE1RMHc3?=

=?utf-8?B?NG9Yazk0a3ZGbkxybkxEdVZCdkQyeEtqM212ajFneGN0Q2pRVThxamdhSUZY?=

=?utf-8?B?YThJZHNsVnlBOHF5QXZvMkpaM2NpUi90aVBGeVFCUTcyT05tQWZhb2lzSDdN?=

=?utf-8?B?ZWJZNWJHaHhjSXQ3cGhaQnRXaGN6Y1dJa2srYXYvenUxbWdFZzg4Yi9pRkxQ?=

=?utf-8?B?SmRleFFzNDM5c01vV0E3eCtBTitJcXlZdDdGR0ovMlBOa2Q1NTdHaWUxT0Y3?=

=?utf-8?B?QWZNQ0x0R3puWnNMRHUyVk1iby9YR2Z2dFJrNDU4eDczVE1VaXM0VCtmMlhZ?=

=?utf-8?B?U1FmQ0p2K1hEME14Z1VCUTBKQ05nQ3lWazliSzhmTCtyRDQ4c08zckh1ZU1j?=

=?utf-8?B?U2tjcmZzcWRhc1dZTlN5bWdveHhTQmxUVUxGOUVEZ3Vrdjc1K25jc3l2Vndy?=

=?utf-8?B?WE1GVS9BU3o5TEN4eFJuM1djZWk4TDVIMWpUaU5SdkhldU85UjloWWNQeWhE?=

=?utf-8?B?RCswMTFRbi9icHdkL2sxNExBZGFNb3hUNkI1WVhrTmFUdHhBSmhBZXlTZzJa?=

=?utf-8?B?QytnME9aUXFEZHFpS1NlVVp5NGk4eEYrTGpGMXg1ZmcxYmlSdFpmT2lkYjhR?=

=?utf-8?B?SjJOTXpTTXpCQWJQTDVyVkdZNlhiL1hscmM3R2RHT1pOU1N5MHd6TGRINDVE?=

=?utf-8?B?SjM5N2J2K1ZFdWNENndYNElKdGpTSnE0RFlTVW5QbDc3RHNodElIa0FWb2Vk?=

=?utf-8?B?bENqbElnakN5MGtMUmYxSmxjRldmNjgycktGdnk3QVUrYllpRkFTTXhkK0kz?=

=?utf-8?B?OXFtRWhSczFJL2N3Q2FwMlVnYnFXcW9taXhkNVdnRXVmdEE9PQ==?=

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:9;SRV:;IPV:NLI;SFV:SPM;H:CH2PR12MB3928.namprd12.prod.outlook.com;PTR:;CAT:OSPM;SFS:(13230031)(41320700004)(376005)(22042699003)(37730700002);DIR:OUT;SFP:1501;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?bU5wKzhXSmQxMjY4a2duVDdlK0s1dVRYWDhxc0tQVXYvU09tUEFkQkZCK3l1?=

=?utf-8?B?OThmcndxbVZ4SHBMZ2dKT2tGdzhWaVlVM1ZUYmxIdXgzMmlpdndwMXVSUi9p?=

=?utf-8?B?ZlV3TTNFSnBZMmk1Q0V5SW10bE5hWWR1NDlFKytXZlZPZGptT28xYm03OHpt?=

=?utf-8?B?OWhJWWdGdDM3Z2N0WWFEUUZOc1JMQ1lPVkZEekVuTCtIWEJrcUlWdjJCai83?=

=?utf-8?B?dll6SEJDajliRUtFODhRblArTXI3VXAvK0JwMTVWT0N0NDFCSjJSV2ljdER5?=

=?utf-8?B?S2tEUWN3ZC9SZjhsZkZVVzJ1V1JlMnFMc1lSelFSa1d4dzFXTTF1YThHS2tO?=

=?utf-8?B?VjlVTkVoejFiYW5idjllVzgzYVVpR2N3M2ZkWlZHSlJRNzl5WDA5RlJEaXNS?=

=?utf-8?B?Q2dEcjdWaENScTRESlJuT0s4ZUZIaU1vdkI4TDJOYnMwUWtWQ1NZcWU5cUZo?=

=?utf-8?B?ekJ6L2hqcGJLcVp3aFptNHZndUtlSDV1NTh4WmpNUzlhL2dhYWlZd1RmSXA2?=

=?utf-8?B?cFZicWlZNk90RndheWt2V1dxT0ttYXYra0p0WUQvNlR3bksyTlhuWmhSakJk?=

=?utf-8?B?UUdIZEd5bE0rQnJpU200UE5oeVRzMnoyRkg0VFljMVh1MmhCM21Lc3V0Y1Rz?=

=?utf-8?B?R2JTRUx5enBCL3Y2M01PcjV5Z1kyVCt1bGcrZE83Q29YcVFUMnl1d2FxM2F6?=

=?utf-8?B?WE81TlU4SXhhd1dadFdqc2pwVGNncWhvM0FuVzdPeGNZZWV6Z0NDTUllbmNU?=

=?utf-8?B?MDkzdnVGVXpySlplM0srR3NNM2RZVUNUK1g0YWVtY3RVaWV4MlJTc2hKRmN5?=

=?utf-8?B?ZXdublBSZmtzMFNqM1FCYUl4Nzd4UUxjOFI0TzBHRHFYM082N2FmMFpLM3Ur?=

=?utf-8?B?aUk1RVpxZnlaNDVrTTZDVVZQcUtXTzBUV3NXeUNDMjk0NHFEa1Q1TG1kMldY?=

=?utf-8?B?ekVvenBpQU1zTEJCdk1DaGhXeExYOHJpMUZwcEFvRUNEdWZtNm50MVJSVHhV?=

=?utf-8?B?RXNObExXdTVvWW12ckcwbFdEWDBMNFRCTksrYlE4ZDEzNlRUQXozQ0RVMXV4?=

=?utf-8?B?OFU4cE1aUjdxWnpWN0w5VzhudzFXRlhmckFON2E4a0NMNTNiT2J3L2pNZEMv?=

=?utf-8?B?WktUQkVFRk9CSVV6b1VtazZnLzVZeUlZdTdiWGRORVFwVW8rdTlGVkxqdUFk?=

=?utf-8?B?c05pVXlKU1dUMnFRQmR0T3ZxbVppNTkyeDVkMlNPWUgxVUw4aDFUbmtCT2RR?=

=?utf-8?B?MVZHZCt6SU5kdDIxOW9CY1czNTVnOWJtNFdNMnhndlh5dFZJc3lRYnFlbmdz?=

=?utf-8?B?WFpFeGZYdy9PNzhuNVIrTGZISnpaTm1DM3VjcjBPWElwcDh5akJpZWs5cFpH?=

=?utf-8?B?QUJ3UkRIR3VlOUd0aDQvc2FjQjBPTjRJZjFmU0dSZUlFeDgwQnBOUzU5ejB2?=

=?utf-8?B?MzF5MG1reUlRMjlKbVFBeFlDdmN2RzNPbk9laytyMzlGSllLTWJOS1NpZVUr?=

=?utf-8?B?SlZSTU5hNGpoUXRBSGVURGk5VHQyOVZHdGl5L21hbmdQcVNJdWVVeHE3T2Zk?=

=?utf-8?B?QTI0RlZuQW5wS2RONnk5Nm05c1gzaVVMclZNT3h3bXRlVFpyWFZTOWc1VFFt?=

=?utf-8?B?Q2J3dVpKSGU2cTB5RmFOZUM1MURCczdydnU5UGxWUzRsZlpkdEZTY1V6b3NC?=

=?utf-8?B?TVhVWlRFODFDSXdGRUNGYnREQmR2dkNKNzRKSHFjOEVJM1dTSitveU9GMkZt?=

=?utf-8?B?Y005Q3U3cXBFQUJTWFc5eGFGUlg0RVcyUG9OR0UyVnBLbGxsK1cwQmliZGZi?=

=?utf-8?B?Wmo3d2VNd0FoQjgrY1JlQnpFakpRSlByb3JEeVpmenpEYUlRNnBha0hSejVF?=

=?utf-8?B?Qkh0a1RaaHN6TEhEQkNNZkpSam1FTWxqZ1psRUlvWTlvV0FHTzVDUjJXVnM3?=

=?utf-8?B?ZVNJYTNuS1NuRDRJWW9qRkhXSFk1cDBwVDF0VG1PeTBRTmZnbm84UkVRb2pD?=

=?utf-8?B?NFladkxvQ0c2SVRnRjlDcTdIOW85ZTlCMHduWHBvTEpUa00rOFk0aWE5aWdt?=

=?utf-8?B?ZGlJV0NVRURJeGkzZXhzbmp5UERtMnF3QTEvZE0xU3ZYOXRMNTlIaG5LMlJt?=

=?utf-8?B?QXdmU09MWlltcEU5bitGYmlFVlQ3UzVHK0REbzRqcFUvMGUwU21TckEzSVl2?=

=?utf-8?B?c0E9PQ==?=

X-OriginatorOrg: szamxa.igdh.sbs

X-MS-Exchange-CrossTenant-Network-Message-Id: 99a8036d-8d05-4bd9-8ddc-08dc3a93562e

X-MS-Exchange-CrossTenant-AuthSource: CH2PR12MB3928.namprd12.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Mar 2024 08:32:46.1623

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 925e0110-4047-46a8-b807-dc5ce34ef05d

X-MS-Exchange-CrossTenant-MailboxType: HOSTED

X-MS-Exchange-CrossTenant-UserPrincipalName: oPSghAnCqsmbJ3ZlbhELXJRZUo+OMQLuIBxSQ46ifnGXssqIaAilBxFcemPqopt9BlYi7gVDiYhgRECSO8U2YEFZUkneylgPPzKouXQ/vJI=

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH7PR12MB7137

X-Spam_score: 12.2

X-Spam_score_int: 122

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Breathe Better With Hiloi Nasal Strips Get Ready to Breathe

Better With Hiloi



Content analysis details: (12.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.100.172.232 listed in list.dnswl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: defdxvdgsdvsdfjtrdsfvcxwdzqf.page.link]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.100.172.232 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_SIGNED Message has a ARC signature

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

-0.0 T_SCC_BODY_TEXT_LINE No description available.

2.7 SCC_BODY_URI_ONLY Very short body with something maybe clickable

0.0 T_REMOTE_IMAGE Message contains an external image

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} =?UTF-8?B?R2V0IFJlYWR5IHRvIEJyZWF0aGUgQmV0dGVyIFdpdGggSGlsb2k=?=



--_2942204e-f9cd-484c-8926-e660e5b003e5_

Content-Type: text/plain; charset="UTF-8";









--_2942204e-f9cd-484c-8926-e660e5b003e5_

Content-Type: text/html; charset="UTF-8";





Breathe Better With Hiloi Nasal Strips


Get Ready to Breathe Better With Hiloi

















--_2942204e-f9cd-484c-8926-e660e5b003e5_--

Shoppers savings spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 02 Mar 2024 07:06:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rgPzh-000000001Om-0PGl

for dave@doctor.nl2k.ab.ca;

Sat, 02 Mar 2024 07:05:41 -0700

Resent-From: The Doctor

Resent-Date: Sat, 2 Mar 2024 07:05:41 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn8nam12on2124.outbound.protection.outlook.com ([40.107.237.124]:40672 helo=NAM12-BN8-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rgHLD-000000001Eh-14gc

for sales@nk.ca;

Fri, 01 Mar 2024 21:51:23 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=J/mzVH2CZWYQ+s9/j2ZNBkAu3/f0+EU3Oescirju4Wv219dtVE7kNprmB91qeXbEeYi3q/PfvjeadWdzfVYFH61mUR3eIB7Pa0j2lDWqnemL7jWloe/nJ0QAqOqQYmBbMh2GDEhdGylzCOvGR8YCk75hq3tdhDU7jhEjqqYHK95TbP4GpqetBdUhMV1gr9BsdqaY8aKJZIDeEtOtFjWr0xPzdMpxVSfWV02pDzU8QTMThRfZibkNXYQZ9K7FyAS01RlILZ92DLtuu1zfKB3MuoTxGd9QX487Fr3nCchBrDQplmKEvB8bkOQe0cMb25m7a0p9Zyahk8GJ0hsae0w71A==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=OES2B6bb7Zn2xgMwoZ5hjzcC1lnv+p9JO5acJpPousE=;

b=NE8PRXVsg2ZS2tfHgaWngq0m5G3wXgMhy1CMpGQWY6qQQrN9T9KydbKKacN8znlYH6PQTaKu9G6ySinUDEwKJUIMUkR6hl9230L7JhzauFrRypwI+6tXVxnXu4pTmlFnEUbScihouYwyjr4dOXpzdyrNN2HBBOVG4nDHe7S88Leq7vNhvs7cF+gApMhGwzy54WUvjBIQrAD1l8UfyLsnZsn2oL+xfiA8ZvrnW8mLeqiwIXhir5pez1OUkghOuyRQdKTv/6jfqq9NUIVtnzOI02VqyqAspak4vqiW7ZKwK3xFiZigw/rldMTtvSzCMWuaDj583P5kd+z0cTSqpiZbqw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=dvooiig.fdhsufusdya.motorcycles; dmarc=pass action=none

header.from=dvooiig.fdhsufusdya.motorcycles; dkim=pass

header.d=dvooiig.fdhsufusdya.motorcycles; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dsmshu3voqdksgmiqm5g53.onmicrosoft.com;

s=selector1-dsmshu3voqdksgmiqm5g53-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=OES2B6bb7Zn2xgMwoZ5hjzcC1lnv+p9JO5acJpPousE=;

b=UDHDPNwy13Pr7xg+7NxB+/qTBYGTJpJL/qMhgnq3H03ov/sXjnd1z9kkFbAxDLGiseaqsHE0K9VP8u2IAcVUfzWrVzwD0Rwwp0NKKWqS2An8dBU+DQc+OFytNgt7LzeuHGPkP3IgwvGqwdze4TajEJ53G3bafGwcXt4p2stlZBbkaNKfyR6GUXfApJ9KWalvqLi1HrAdc91AfCCo5R8BtlL3cNi8JqAT8b6zFDoGJGe9HuMs95lrpiTWPhLVv+TyVykhD5wvRIQbp5L4NGMnhMJtts0/V3+kTQQSPi7KE0xUTsBQr8gfOQWt/KYrB3HOjVTPKumiHq9H1d5ox9/TsQ==

Authentication-Results: dkim=none (message not signed)

header.d=none;dmarc=none action=none

header.from=dvooiig.fdhsufusdya.motorcycles;

From: "=?UTF-8?B?U2hvcHBlciBTYXZpbmdz?="

Subject: =?UTF-8?B?SW1wb3J0YW50IGluZm9ybWF0aW9u?=

To: sales@nk.ca

Cc: sales@outlook.com

Content-Type: multipart/alternative;

boundary="_b9fc1059-6ef9-42df-aae3-c35d6f8b1f02_"

Date: Sat, 02 Mar 2024 04:49:15 +0000

X-ClientProxiedBy: CH0PR03CA0420.namprd03.prod.outlook.com

(2603:10b6:610:11b::25) To DM6PR15MB3322.namprd15.prod.outlook.com

(2603:10b6:5:16f::21)

Message-ID:



X-Message-Flag: Flag for follow up

MIME-Version: 1.0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DM6PR15MB3322:EE_|MW3PR15MB4057:EE_

X-MS-Office365-Filtering-Correlation-Id: c08bc090-8824-4ae4-7c58-08dc3a741d72

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DM6PR15MB3322.namprd15.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230031)(376005)(41320700004)(37730700002);DIR:OUT;SFP:1102;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?dEx6RUJqVTVWMHR5OGZGWWdIMm5SU1dRa0RxQkFxME1Sd0I2WVQrVm96VUc3?=

=?utf-8?B?N3FMQ0I0amdheFBtd1ZYdUk4NGRCcFNpVVlMWkVJR0JTYncySitNbEJHRlNW?=

=?utf-8?B?dGtWcCsrdzNjQThXbVl4ZmY2cUx1K2JVR281MGx3VE53cmRtOERkakswWkh3?=

=?utf-8?B?QmY5SnJwSmc1QXQ0TFVHYTYxWTl4ei9FbU1SS2h0QnlLbmpQY1ROR080T1hk?=

=?utf-8?B?QVFSVXFjN1JNT1FFVjlZSUd0OE1yT3JnSmg1Q2JJN3hUNDFTdC9KSUlKS0tO?=

=?utf-8?B?bFprVVpXWmNxczdOczdoZ2JVdURiU0Fmekt2eGpaRGYvUnNpNlFpeC8xRjBw?=

=?utf-8?B?Tkd2ZCt0YU9tNUMrNEI3ejg3V1V2Slg5dSs2TlA2cmY5Rm10R2ZOV3oxTUFw?=

=?utf-8?B?YnBxV0NVQnZTd0M2UkdWYytJMjlSciswajFkQ1lTbUJxREZOaFEzdkp0QndT?=

=?utf-8?B?NDY0Q0pjNVBDdnNYOU10dkNOTEdKS1ZkZFZnWWtad25nTFZXYmRSNDc4dGxO?=

=?utf-8?B?bXFIUDJBaGFRQ1dpTEZhTlY5K1VPdFU2K3hFV0hPS3JxYnFQa1B2VWF5VXBU?=

=?utf-8?B?RDNmbGludkNBOWIvZCt6Yll0cFhTVnRua0NrV3JraXorL1RlRHIvamhtMHNM?=

=?utf-8?B?OE0vcVQ5R2FxV3pWRFBySHRkdm9nMzFVT01rZU5yN3FuWlVEUGNDcDZlYzd5?=

=?utf-8?B?VVJHM3VKZlBoclREMzhyZWI3cG11QjhreFNyazB3V2hxSmI1TUFCeU9FNWcw?=

=?utf-8?B?eTlqNzQzZkR6OTJoV0swOGQwb1R2by8wOXY3RXVXeFRleGpPVllaSUJtMU14?=

=?utf-8?B?S1RvUmhiT05HUlVtbnZmNG5ZZFp0ekNxSmZId3ltTlZJQnhWRkVTWCtOMXhS?=

=?utf-8?B?clVLblA5WUZ2bXUxVmdqT0QvTEhrb3pOQzRUczA5U3l4dkRINUhXM05GRWJ2?=

=?utf-8?B?Z0liQmo5WkFaWHloSFZ5aGlOemVLZWxNZlUveEc5Q2ozUUoyZk5pTmp6QXZZ?=

=?utf-8?B?Z25NcXRvOFBBTm5tNjdTMTNZaWVrbTcwMUVaaFAxL21aRVhDc0w5UVB0bnds?=

=?utf-8?B?L1c3UXVRTTJmNWxzaU5jVWM1QTdybDlycFkrOXNWaTd6RndJWG8xbDl5dW9B?=

=?utf-8?B?NU5vZGdPRGp6KzVOK2VBLzVkTHRkc1U3SXkzeDZjeWhHQWlacU5UMkxGWkFo?=

=?utf-8?B?bmFmLzBWbGxPUXBMdnltUEdwR2ZWU2JLamtVb0Vza1BxQUFjZkpGc05rdDRD?=

=?utf-8?B?N0FHVXpWeVg2d2NBc0lTNmZCVXpGbWFoLzB2Q3p1UkxXUEVhS1NhV05ja2p3?=

=?utf-8?B?Nm9uUloxYnFHU0E2MmNadWlaVlJMN21nSlNSaVhESElPUnpZeDJxVGtpVzE5?=

=?utf-8?B?Zk9OTk14TzJmQzRWMU5Kb3RLdkZ4RzFjUzhweUJySUN4SWlaTnNvUitIWWc2?=

=?utf-8?B?Tk9IT2tGNFNrN1hjbVRQWGI5RjM3ZUNycS94aFJvRkxpbmM1NjBqVXNUZHFy?=

=?utf-8?B?emtDekVETWhHSS9wZG9xQ2FRdTdTYWo4M0U5eXZUNjFoY2VlTThWUU5vNGwr?=

=?utf-8?B?OG9LWmU4aWRjTnh2ZGxXOUxITk5aN2VEY1ptUGNpZDRETmZvWnNkNFVlYUoz?=

=?utf-8?B?KzllTzcyYTdLT3NiRktENkV1cnJucjlRcndZR3YvT3dxb0dNZlpVV0UyTU11?=

=?utf-8?B?UncxWEx6aHk4UVdJRVNiSVVjdnh1dXY0bGlZTDEyTVIwdXo2TmhGTlhSUUl6?=

=?utf-8?B?R3daOEtuUDV2NzNTWkdoeFlGMnl2M2tmNkxsUmFJbHF5aE1UUkxrVXk5ZmRm?=

=?utf-8?B?b2oydWlQWW1vU2U1UDNpUjJSeGpPVm1HWnZLb3dja1p1dFcwQnEwWlJ2MFdD?=

=?utf-8?B?YzNqWTNFWDdTWno4QlZSdUVoRnoxSGFyTVh4a1ZSWFhhQkMrNGZ2RnFyT3oz?=

=?utf-8?B?dkhmV3hVZlI1V2JWQzVoM0hCTGg1Sk42V3UrTzJEV0pRRW1LcWNOUUdJdkIz?=

=?utf-8?B?U3dOMndrT253cDBSMHJoSG5GdWZCUURXOGZPMGpKNmlkL2VmZzZ6cWhzY1ZS?=

=?utf-8?B?Tm1QbVdhaTBXbXpvRTRlRWlYUWhzeVhGVWpEL2FvcmF0QUVYQXJGa0RoeTlR?=

=?utf-8?B?YlluUDhUNDIzd01JTGdsOWtNajZPR1pIdG1vMEdMREdvSHRkeTlPa2dGZXBE?=

=?utf-8?Q?tC/H6IVAFX7MWIUrVMp1oeboIhsgKIFdw4tLh+qDfzvC?=

X-OriginatorOrg: dvooiig.fdhsufusdya.motorcycles

X-MS-Exchange-CrossTenant-Network-Message-Id: c08bc090-8824-4ae4-7c58-08dc3a741d72

X-MS-Exchange-CrossTenant-AuthSource: DM6PR15MB3322.namprd15.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Mar 2024 04:49:16.5249

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 5c7640e3-518a-483d-94fc-1f2f3697f035

X-MS-Exchange-CrossTenant-MailboxType: HOSTED

X-MS-Exchange-CrossTenant-UserPrincipalName: /R7IGCcZ4SU6ZsS5QvhUm0D+LZ0htsLW3Hb1RP5nhRUzY15cHY3pnTfLnG0qJdAivNhn34eqyDRLaFKdMR8//Y3I4FS+jI4KEXlWGH+FbcMTU01XNh4vprf9FvHzMzNh6/KDEjXc5PFwvtjSgfOuTg==

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW3PR15MB4057

X-Spam_score: 11.7

X-Spam_score_int: 117

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: You've been selected



Content analysis details: (11.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.107.237.124 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.107.237.124 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_SIGNED Message has a ARC signature

0.3 HTML_IMAGE_ONLY_04 BODY: HTML: images with 0-400 bytes of words

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

3.4 HTML_SHORT_CENTER HTML is very short with CENTER tag

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

2.7 SCC_BODY_URI_ONLY Very short body with something maybe clickable

0.0 T_REMOTE_IMAGE Message contains an external image

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} =?UTF-8?B?SW1wb3J0YW50IGluZm9ybWF0aW9u?=



--_b9fc1059-6ef9-42df-aae3-c35d6f8b1f02_

Content-Type: text/plain; charset="UTF-8";









--_b9fc1059-6ef9-42df-aae3-c35d6f8b1f02_

Content-Type: text/html; charset="UTF-8";






You've been selected

















--_b9fc1059-6ef9-42df-aae3-c35d6f8b1f02_--

UPS Phish from Microsoft

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 01 Mar 2024 19:18:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rgEwC-00000000939-1bUL

for dave@doctor.nl2k.ab.ca;

Fri, 01 Mar 2024 19:17:20 -0700

Resent-From: The Doctor

Resent-Date: Fri, 1 Mar 2024 19:17:20 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-co1nam11hn2231.outbound.protection.outlook.com ([52.100.173.231]:11456 helo=NAM11-CO1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from <6XP2EX49@vpepqgrp.sbjd.sbs>)

id 1rgETX-00000000LDq-2jMt

for root@nk.ca;

Fri, 01 Mar 2024 18:47:47 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=BX3UdtlEbmn4o9Lf4xgZCG9b9mC6TwrvDTOiF0u1YMg/7W2PbK9iuweAjUG81FfbeMF6X/cfg73zvGl9M5x2MeVY5ZCOVUBX2Giw4m8vRS4D0gQOMYhXMzFAo5zYQR0gzPtcJZDmxrDDTBelcRBolfTOZLI92HKt0rZvzerKOlYN5p8+S/Uch9a0BSjF7BGe6Gf5Zkbu/2rstCQTqjqdmz1IOveYbareYZcoeBYKxHEhXNmi1Bl2c+fg18qk/YwIIA8nGgy8P30QPdH3a+Cx/rWcpLj6cuc4aDDiiLkD7h/Bdr0VjL5hUXgT3lpGd+LU5UGu6iwCkKu/q7bV2+QmMA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=g12LZBKD7QQOyWdo9cYP3AC0h+nBQT8l+OMqZ+Ke5Ws=;

b=bmkFOR4IjcdmpLJzqcBMXTJ+VFoLyaLt3Cp0ttE98qTXockZjSeV3DJvZE8hSzlfpJc99JJVzsCrbviiq7/zHUqGD1H6p22xKS/is/pOapLAr5HQ3HPNHcprVVDCEPmTG7vZ+kZqnhAb7HL935hUur1UPZdWWK8+sZAP2jQqsessvSxVPBN4PWk2UGb054vkKuRDU8IrNhAf+2tUl00rc2E65cU/TaQTDa7khtZPjF871jZsJsmFc45C5Z7AvoRauEFulZMB+YSt77eFe5o588egXuFKnLeHBNdeaEWyYsS7/Q7AsLOdR/BQxqUpxPWlb76I+7ORAPRIUaDADLu+iQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=vpepqgrp.sbjd.sbs; dmarc=pass action=none

header.from=vpepqgrp.sbjd.sbs; dkim=pass header.d=vpepqgrp.sbjd.sbs; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dsgxcbsghfbdfnfdzfvf.onmicrosoft.com;

s=selector1-dsgxcbsghfbdfnfdzfvf-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=g12LZBKD7QQOyWdo9cYP3AC0h+nBQT8l+OMqZ+Ke5Ws=;

b=Et/t/WVL0S+Df6zPbzEC3GWteFV3qU4aV81ngNN2DdNa8ckRRqKTcovtZZBE3uRL/QQKyvim6XKrPr/NKFON0Ys7gaxIT0VVEzI3d5cGm7GMTF1CRfmVsX7x0bFuKpHhZFakikJUCBNNzwqcttFoMbjyCYH69Ejf562hzwV1Boe2q/0fv1Z/OE5I4nCWShacQ5byqTINtOS5//ZrxQtPz4pk42CyH4TX5TnD0cgryzvhXAne2rQxv3m6LNP0Jm5X2YbCU1PUWYwsbvvNpfPHHhdUrTJdAOF3EQSHOp0Maj8rVUPKLTGrqdv+gEz/91yRP7wJJ/v3F5LeFiF2dOyhVw==

Authentication-Results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=vpepqgrp.sbjd.sbs;

From: "Your order" <6XP2EX49@vpepqgrp.sbjd.sbs>

Subject: Your package is ready to ship!

To: root@nk.ca

Cc: root@outlook.com

Content-Type: multipart/alternative;

boundary="_9930d270-4535-4277-a883-0326ef836320_"

Date: Sat, 02 Mar 2024 01:40:37 +0000

X-ClientProxiedBy: YT1PR01CA0135.CANPRD01.PROD.OUTLOOK.COM

(2603:10b6:b01:2f::14) To EA2P223MB0836.NAMP223.PROD.OUTLOOK.COM

(2603:10b6:303:24f::20)

Message-ID:



X-Message-Flag: Flag for follow up

MIME-Version: 1.0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: EA2P223MB0836:EE_|SJ1P223MB0531:EE_

X-MS-Office365-Filtering-Correlation-Id: 07725e4d-7fbe-4a6e-a3ad-08dc3a5a776b

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?VzVtZmRaNHR1UjZlS1NpMTVnSmc3SVhCV2dLREJZOEdNd3lad1lBNWxDMk9y?=

=?utf-8?B?eS9ONnU5STFWWDNGeWozVTFBZ2xseGRzOXRGU2xEaUpQeU5oSEZsakhXckV4?=

=?utf-8?B?a1N0bXZVSE5Lb0MySnRGcUlvNFp1OTdBUlNaTlNoN3dBRTdwT2wyZlpHVzNr?=

=?utf-8?B?dGtiL0tuREhLd3VpY3JFUnFvTUMybE5jSUx2MEZTaitmWFpoWmxaZDJ5Vkha?=

=?utf-8?B?UTNwQjh6b28wQU9ZNTVmMkFXd0tkV3FTSXAydjhETjZHdnJ6Ynh0OHNuZ0hX?=

=?utf-8?B?SW5CdlhvdTFFc3gyQTcvUmVwSEFWem1LY2dBOE5rbTFUeW5pNUY0emVjbUNa?=

=?utf-8?B?Vm43aWllK05GL2FBV3B6dnFiS1lGNnVoQVd2MloraEhwLzU0VW5xUHdSeXRF?=

=?utf-8?B?akVnSnlBNlpTbTNCK2dTRTQvQXFRa0M3b2EyRm5YdFROdllPQ21UZFkyZEpy?=

=?utf-8?B?OVJ4cHFCd1JaNys3NHV0Q2F4aFRrNFd5T0xkNHF6UmVhUXd4b01KKzlKRmdw?=

=?utf-8?B?bGE5L09SdEJXNW5XRXZ4WU9JY2tRbXd1SG9TYkQ0Q0tQVVhRS1o4S21BZklH?=

=?utf-8?B?WkFFeDF3Z2w3RkFacmNWRlJIbHdyOG5iSS96WFlFdmRacW1kY1ZadmcySGFp?=

=?utf-8?B?STdZQTVsQjczTnpOSEt3YzV3bFZXVnJtWDN1VEtORXJ5K3RCUXRYeUZtaXB6?=

=?utf-8?B?YVc0VngrV0FHM0dkRVd3dlhPR1FRTkpncXNkaThzcDVoQXpGaGFlR0VDVldj?=

=?utf-8?B?TXVTNlc3dC9tdTBLbkhrSGVJSlo4QnozN0JDR043cG5QbXR6M004NnY5QXFZ?=

=?utf-8?B?WFlHd1U3c3MwKzhjWTZCTjRVTXA5b2tUdFlMNnZjRFluby9SWTZqM1hKcVZm?=

=?utf-8?B?d013RDh0WXBKcFpkcTFNVUIweklDZ2dxT2h2Q3IrTUJRYmMwMEJZN0UyUmk1?=

=?utf-8?B?cjcySUdDc2tnVEg4Z3l2UWJGdnBmWXZQVEQ4SHM4TngrUS9veGM0eFk3L2RU?=

=?utf-8?B?U1RTQ2hFOThoMFBNQ1dwbG03eVFEanZ3TFhEcXQ1WDEzdnh6V0p3ajEyRFNG?=

=?utf-8?B?bE8zeTc5a3RZZXNaVXVnTk5DYzl5OWNGcHJjT1krL2tLclNhRXZURmJYTEZF?=

=?utf-8?B?NHFZcURqWnZMczN2UEpTZll1WWhKbDFwQlFHY0Uwd0tvRUdFZlV5eXhNdDkr?=

=?utf-8?B?dk5pdm1ZTzl6K09iT1hDVFpxcUFzNlNZcXhTRHRiRk1QdnhpRW41dlBUZ2Vl?=

=?utf-8?B?TWduM1dEOGVYUWFZc2Z4dHBLK2lqbEFyTFBTUDRLRDFla1dwTm5UWmxqektJ?=

=?utf-8?B?aWNnZG84cHlKd2sxZmw0bnVwWTRxamcwaS94ckEzTDl2ZkJhNW05OXh3cW44?=

=?utf-8?B?RmlQczRicVZpWWx3Q0hhcEt1dWNGeldOTDExdEtkdWhQVDEvYWR6Uis4TTNy?=

=?utf-8?B?OVNKc2gxS3JQUVRKb21QQW03eTU0c25zZXhQWUVUK3lZcExBbVA1RWtoTU8v?=

=?utf-8?B?dXNtWTlpRU5XK2lYOThqZ0llSmprUTVaaEN1NGlRTFBvQjBtZ0ZuYjhnTmc5?=

=?utf-8?B?V05ibnU3YVpqYmZRd3hlcUVhWmFCWkpxRldxVEZDVFF6QmZDcmdHc2dGMW5y?=

=?utf-8?B?Qk1mOVFCR3FlVUFXUFI2M29Ca0IvbW1GL2IzWWs4Lzg4WHYrNGc5NkRacWlk?=

=?utf-8?B?aGV5dkZSSGUrYXZOcjlXenlVc2VqM05WQmwxby9Bam5jckttcDZ5bkFXUGk1?=

=?utf-8?B?a2RiaWg5NWc4dWZOVzRHQlN2RDFUQVRHZHRBUW5nV21xbmt1OGRaWEdVNXVH?=

=?utf-8?B?cGdETCtDWEEwcUlCNTBBRFBEVHhOb2VJSGFSSHl1QkttaEdpT29ETHYyc1pU?=

=?utf-8?B?ZWZ4OUpVR3BUQjRoSXdudm5iY24xd3N2VkREenNEdVZHd3ZZNjJzcXFRVzYr?=

=?utf-8?B?K2xVN2xLanpnSVlUaURabjc1OG9aUW5rZDk0Wk0zd1pYNDMrc0NWLzdlbjVL?=

=?utf-8?B?czZQbnlQeHVtUUVKSlBzRm54K3NsMXFTZW9kTlNtMGdyYlB0SXVONXpxdEVC?=

=?utf-8?B?U1RYYkdNcklhZ3J4WUZqY3F2TkRSbWRDUUhtbTB1RlNZdkl2NlRaR0lBTmNL?=

=?utf-8?B?ZkpUdXljSnlubnd3V05WM24rTm90ZUE2SmdNTjdJYytlNHlhT1o5RHJGTFNG?=

=?utf-8?B?ZVQwcVRiRkg4YkhYSTRQaFRnVmVtQmhYK0hUU0wrTVM3c01oeHhMY3dqeDhu?=

=?utf-8?B?QjNEVC9kNEhqd2U2WlJEeTdQdDdRPT0=?=

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:7;SRV:;IPV:NLI;SFV:SPM;H:EA2P223MB0836.NAMP223.PROD.OUTLOOK.COM;PTR:;CAT:OSPM;SFS:(13230031)(41320700004)(376005)(22042699003)(37730700002);DIR:OUT;SFP:1501;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?NGcrcE5FN2pDMjRWbWlDY2VkcEtUdFJsUkVoaGt5T0o4czI2TkxuTk9UYlZB?=

=?utf-8?B?UVk2SVFRV1plTEpLdzVVOS9HNDRzVkVHZno0b3BrV3ZpR3ViaElEdU9YN1lm?=

=?utf-8?B?Z01WSDhOMXBhc2dRZUxNOEpERjRZUEV4V3YyQUVzaWgzWVZna2VEb1VnOENN?=

=?utf-8?B?RjJVOTdtK1d4T0RhNmdkUEwxbEdtQUVaNWl3VGJ6UkNXWGpoR0c2VHZNRzZp?=

=?utf-8?B?SDZQRjdhZzg4YkZWcDVnUWNRMFd6TE40SWwzSXIyQ3BTK0ZkRHM3V2JEVUw3?=

=?utf-8?B?MG5rRksxU2JzY21TMkIwc2JTMkFKaWFUOW5RaTliVTlyeWlqb3gzelplS3RI?=

=?utf-8?B?UmVQM21CV1NMQ29NQlVKdGRIL210bXpMNWM2NFNTbzkvcnVJNUcrOFVjaHAy?=

=?utf-8?B?SE9uWCt2NlBkVURRNTdkVTUrU0J4WDVlYkc1Sko1N0JXbDBCV0lZSGF6cnNr?=

=?utf-8?B?b3l1ODhOK3hHOVJBZHZmNHllcUZVek5odmFqRE5Wb2cyVWh6SGQ0bGNMaHRp?=

=?utf-8?B?RUVpb3h3WnJNQjNKUE1uRU1WOGkya2ZYaE1zQTl3bFpuRVlCazZPZ1VqWTl0?=

=?utf-8?B?cUNISHR0U0pvZkFQNUFFVGtjMEhLWDlwV1VpM0ZmcnRuUXMvRFNoMXF6a0Ji?=

=?utf-8?B?Vy9MNnBoSkIwWWRvNjU0Rmg2RWVDVTVuSHFzbFBxQ2Qycy93RndVVk41M2JX?=

=?utf-8?B?ZGtGWXpzVTZsNzRVb28remlva3RUWkliZE1yZXdEaFYvdjlxcUx5UGlPNktG?=

=?utf-8?B?aUd0V1JkZmQ3ZUVvemhSNmtXMXFqZWFVWkVXakp5M0Y0Z1lDTW16UldVdHhB?=

=?utf-8?B?YURaZkFPUWhIRkNUbC9VZTN6OEhsbi90YjlVa0txVWR3cVVDSC9wYTJRczlX?=

=?utf-8?B?L0NlaEUxSC9BN3lhRFF2enAvK0VwNVF2OTFJU0xIaXEyT2lnTnhyUVFjQXpW?=

=?utf-8?B?MEc4T3YzZ2dWakxVNGFrK0IwTWVRMThjSjhmQTg0d3dKdzRwS2tLUjBTd2lI?=

=?utf-8?B?blNKRFQ1ZG9zbmFickRta09SVXVPWGlOLzRjemh0NTRpT3Jka2tXRkkrSFNq?=

=?utf-8?B?dG03bGZIRHowYkRPTFp1b2pJN1d3YTBtbWRJcXUrczEwSWNTTFFoZU5OcjR4?=

=?utf-8?B?eGN3cnoweFo5bzBBV3g1MWVwdlBrUWhmcFRIbnlLNi9xWlppblJ0by9wcmJZ?=

=?utf-8?B?bml4MWh1dkNKSGwreWlUZ2E0eTUyeVBtci8xSVBTRVZyd0lLa3REKytmTDJD?=

=?utf-8?B?QWp2dUwwY3ZMYk1CMnFvNXJzZ1NYa2ExZnY5U09GMytjVGZvN0Mxc0FzTytG?=

=?utf-8?B?YVlUNVhFcFByNk9RSmd0SlIyYUFIeWtlTERTR1lLdERGamZUS0dUUVZkT2FY?=

=?utf-8?B?djlPZ2hhUTVVd1kxdTcxSkU2ZmFZWUhjRkpseUZTSjNZUzk0NjFzRnJBYTlZ?=

=?utf-8?B?RE95M0RKdWxUd2JDdHpUY0tVUjRUN3VDaEt2cThNamVSY1Z6aHFrV3JrRUVh?=

=?utf-8?B?Yk9zb2ppQWxOenpUOXhnSFFkOTJVTERLbWFOYUl2YUFrSEFzWjl6cllDaWFo?=

=?utf-8?B?Z3FRTFNmZXFWUUNFaTI3d05sRlBkMG1vUmlUYjNkb1BLMVB1em1mdUEwYS9G?=

=?utf-8?B?d1p5VUVXWktPUEZaQWdEUC9DQi92VnNkKzhOeXdMRE9oU2RFWkw4VkdXUzdK?=

=?utf-8?B?eWNvNGxrcVhQWkZSQ3VpRVVIOUoxL3d0WE95bUVuTEgzUGUyazBzaHRwbFJ4?=

=?utf-8?B?dVZ4VmdNUlMvUGkrL2xscmlUKy9hWHRuMDZDYjVKTnozS3ErSWU3THFYc2dh?=

=?utf-8?B?RENHSTRoQzlJcjgzWWl3R0l0ZTFldS9PM05QeW9jekVSVjRteWVXQ2dDbi9C?=

=?utf-8?B?aDg3c3g0NjRra1FsZEtWQ1lyemc4d056cEV0d3JyS2VldEFJQ1QySTViZVRu?=

=?utf-8?B?dXpHSHNOcXp2VFN0WUlwWW9XTEgwQS9lQTQxZXdrVGw2cDhKTmliVzZXOTkr?=

=?utf-8?B?VnVqQk5KTGhSYWFTY3FRREhNN1JTOG9kV1BtUVFEdlV3RXFpMFkzVmg0OHVX?=

=?utf-8?B?amNrQjhXbmI4Qjltd1NGQURqaHlFenJrRkVJNjdyODRLYlZuVEgvT3BRNWpI?=

=?utf-8?B?OG5QMG91MHJaR3JGNEFBSTBXMWVGb2xrS1lNcWIzR3R6VzUzMW9xL2hFUDd6?=

=?utf-8?B?dnc9PQ==?=

X-OriginatorOrg: vpepqgrp.sbjd.sbs

X-MS-Exchange-CrossTenant-Network-Message-Id: 07725e4d-7fbe-4a6e-a3ad-08dc3a5a776b

X-MS-Exchange-CrossTenant-AuthSource: EA2P223MB0836.NAMP223.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Mar 2024 01:45:40.5246

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 6ee2a083-378c-4b2d-b73d-b7e1f0bc88de

X-MS-Exchange-CrossTenant-MailboxType: HOSTED

X-MS-Exchange-CrossTenant-UserPrincipalName: jbJszDLieDFd6aiOtAKDadVCmZI2f1s+SiuB4ioozMbWSSK1IoLQyjqLVNim6Wj6vVycvl+QUlixxtgotvIdHjoUTJN5NGV1RLsek+Dv2gY=

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ1P223MB0531

X-Spam_score: 9.6

X-Spam_score_int: 96

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: There is $2.00 left in shipping costs, payment must be made

within 24 hours. - NOT allowed to use trademarks - NO UPS



Content analysis details: (9.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.100.173.231 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.100.173.231 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_SIGNED Message has a ARC signature

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME

1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

-0.0 T_SCC_BODY_TEXT_LINE No description available.

2.7 SCC_BODY_URI_ONLY Very short body with something maybe clickable

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} Your package is ready to ship!



--_9930d270-4535-4277-a883-0326ef836320_

Content-Type: text/plain; charset="UTF-8";









--_9930d270-4535-4277-a883-0326ef836320_

Content-Type: text/html; charset="UTF-8";





There is $2.00 left in shipping costs, payment must be made within 24 hours.


- NOT allowed to use trademarks - NO UPS

















--_9930d270-4535-4277-a883-0326ef836320_--