Ukrainian women dating spam from Microsoft outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 20 Mar 2024 15:08:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rn39Z-00000000LDA-3JwT

for dave@doctor.nl2k.ab.ca;

Wed, 20 Mar 2024 15:07:17 -0600

Resent-From: The Doctor

Resent-Date: Wed, 20 Mar 2024 15:07:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dm6nam11olkn2010.outbound.protection.outlook.com ([40.92.19.10]:7936 helo=NAM11-DM6-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rmycg-0000000091E-0w3a

for www@nl2k.ab.ca;

Wed, 20 Mar 2024 10:17:06 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=bnKo0igHAUuCJoZA0Hq8PqK2RlKDQyxUTsLkZdlaaXgWQ5d64uqyl08CpI38nOkmvOY1Ay44fuW0sa4ZgEcGKUDzmc0Bfo6P+/fmJjiL4aPB4aKJBMwoJcyl5udAOtVGll2A7cpNK4OzBq7UdyKqQrfzJ99c1UHG/DQmd3oZo4R5hAmC+03sFmxkYoeVXlkC/8GZncmYhIi2xRrKlh1hZ/vs4qUaOcoPLgWPogn5go5qpd2LIRec04yO5az3m1kjuT5qaukJsPYfxnzLtHkBDl+95nh4eYdmp9J0DnKMAFbGmRxuH50Tvf/c5iG6Gi56HdQjSfI4R827xI56b40yIA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=ghGhvWXH8/UpRooenhXpX0sBhwnR7ZexwRDT0HZUrcU=;

b=AMSAmyhIoJ9Kht0YlRFxFcsMXIJ3r7uxSALnUGyFRw7A/PIkIsDPs/dCe/xMwkpv6OJRuE8jQSrwLzqL8hkYM7M6hq2Z7PBuHFv1IFZChvFdn9l+RcxfLHD21hOKRsJNV9Dn5Yi9q/UmAOHCh9/2jTzEJo466KYx8AuGdO9ZSAqm5srXIacbjyrtDfaNnDjxX4W5R7q9sf1jYDvR644Bwpp1EiTEbUf3GR/HIL4Bk+2tcGvoBbXDyq2/u0aOooaT8Y1z8PNvmFCQ0vQ2p6LjpJk9u1v/HjQqxaCgyV8h3Mhq8b8KEv43GrCHGvvF2SvZKpTzKz/ai2oeDHywHDePGA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=ghGhvWXH8/UpRooenhXpX0sBhwnR7ZexwRDT0HZUrcU=;

b=knOVJZ8KEed+MlO4Taz4Z6qUERrBVMFSgbogGv/mHI4J1a2JpFdaAVi387Kj1w3eBiW4w7b6SUal6Rv/OErerRQgE2s53rENZLHHkO5ub4wVcSbiAaotD9etxLI5xnhvrHQH6JGOEziCCCRFBiyz7fQ1IDtsBebPLfGuGIQKtMIBje2e10xb/xe8Ph0SExizfuSmwKcKjsfhdzidwZ96H27xWW9K1j1zEXMWu9uL+IwFScUVVK2+JLxtVqktc+Q+zIU2eK6nju6Jjqln/ytZ2rHMEJjcqgJ/pC2nIAlDGJFXpGVSaALHF8lX2dJpf+ZXfP6xPK3E5qZ+5yaL8h96Nw==

Received: from IA0PR11MB7933.namprd11.prod.outlook.com (2603:10b6:208:407::19)

by DS0PR11MB7215.namprd11.prod.outlook.com (2603:10b6:8:13a::13) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.11; Wed, 20 Mar

2024 16:14:58 +0000

Received: from IA0PR11MB7933.namprd11.prod.outlook.com

([fe80::9e06:3c56:c81:cd1b]) by IA0PR11MB7933.namprd11.prod.outlook.com

([fe80::9e06:3c56:c81:cd1b%4]) with mapi id 15.20.7409.010; Wed, 20 Mar 2024

16:14:58 +0000

Content-Type: multipart/alternative; boundary="===============6369033081474901035=="

Subject: New match suggestion

From: DateFlix

CC: DateFlix

Date: Wed, 20 Mar 2024 16:14:13 +0000

X-TMN: [PQH9Z2QO+E0m37VjFpQdnOgFNOyW7SoC]

X-ClientProxiedBy: FR4P281CA0128.DEUP281.PROD.OUTLOOK.COM

(2603:10a6:d10:b9::17) To IA0PR11MB7933.namprd11.prod.outlook.com

(2603:10b6:208:407::19)

Message-ID:



MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: IA0PR11MB7933:EE_|DS0PR11MB7215:EE_

X-MS-Office365-Filtering-Correlation-Id: c23ed44d-8490-4987-f739-08dc48f8e2c9

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

eCaPnzSvU+5dObSdK5XGevEbPEjgXH9cXsB7hra03z6kSMRRafV7sNV/JPWteF3wMrPASbuJ5t8Q3rKQg3pZ8dcnsQ8P/uCHKIpCzOCG67dCfrRE6HEypBm7/BNMNWCAxg67Dwm+RQxLpNs4MRypte+8dZCZz5ayaJ0SmPpzreFeQ/AdCOdbpMjbevL2oRBX7AA1hLArlhlMwsoEvSPWfMVNV4bXk5iDJjGehDNL0uUikvIXJY5+IfnN4g4omDEKH6qy2UesQiM7fyXJbHF27PnZYPkk7VJI9opsV0cHlVTtzPZ7uJJD4R1CjE1Y6RigecfVmd8ieK105TP+P1/IvAT7E7naNsIk+plL0dXJyygpouDIY5D8rLOs0CoCn82ZBQncUsCaRBungWpqqfcYWi18av2bgDaAHUWAGcYI1/ej+pL9APAFnAX8tTdiVkugiW2N0xpWF1DX3p4qDCytSiAhgDG3BkpmIcJB8MGfiyZ/e8QhL3YaK1QnCJJdE049cg3DtSmThRHzRxysF25+zsiBI6IVy6xhUKOxDDVUiFDi9aFuWsDh3iQPXthQX1c/naDSHX8QtyG6kAECYsjy8zMgJeDveoOgaJaUxIj/OBR9PxY56WhbcVXFFaCL8aHrYdSuHYV1lOJgL1a0T5un9L+edSLqdbJCSikeKLJ7VZyoknMgzjkD4n+NCHDvx79USMTlSc5dJIW0wBA2/NY9JavK8IcgMAN5R/swwOhck/Byc//bsth2cHXU/bTZsPP4mc9RrAc/e5/QOMPfB43WTxh25BQ9AHKOO8lhRr3eXYxhA74swf1SfV4SWwIt2kB5

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?VEZtVlBmdWx2ZWg0dUFsNEJQbmc2WGxFS3VFdTlqMVBxajNpWTdKeVQ0ZGlS?=

=?utf-8?B?UjcybnY1cDZudUVTVFhCU1Y0OTRQUmhLSnA3ajh4ayt6QjU2NXpaVzVWam8y?=

=?utf-8?B?ZS84cTZSNkh5YUk0emZxUmcxVWhMV09zT3dkZ2htMERvR2RuME1GV0xPR0NL?=

=?utf-8?B?UTRtdnRYWnpEendxNW1CY0krUDFVUDdRTWFDTTlQK0EwUUJqN2EyNXhtdERS?=

=?utf-8?B?dFEvSG9mcnh2OHlCVnQ3M3doM3dmU3YxcnpiTm5oSHpJT2xnR3VqbFU0TmlS?=

=?utf-8?B?Y0x5cVM4T3FSOVFhb3VIbXNwVVpMdmZhVWtKbWNjWS96Umd1bmx0ejl1Q2t4?=

=?utf-8?B?azIyTjJrU2UwbnQyd1FxdmlBR3ZiZUhpT2w4ekFHZFBUVHBQaXdWcDBuVEkw?=

=?utf-8?B?SFFUSlhtZFpsY2FhelNVZEcySGNXeEttRmxCd2dXemlGVHFVMkNDODRSUUFw?=

=?utf-8?B?STNsK0d6cVZxSktpN05EYmYyYXdxOHo3NGovSnRtREV3dUJodnVCNVBtYnF1?=

=?utf-8?B?a2k5N1JRTWlST2hOZE5kV3A5anZUVENEbDZDMjZlK1RYVW9nQ3g1ODBWRzdV?=

=?utf-8?B?eW5rTUJ6NW4wTHQ0bnpiQXdodDNuVFlNbnlhbVhZK3pBd3VzQVFPenlRRWpa?=

=?utf-8?B?dCtvUjNrR3VkSGJpenpyQXVJODhIVGN0Q2NpcEdhS2lDSGh4dUZQWXRaME5t?=

=?utf-8?B?QVI3OVdlVldsTEFQQmhvWm03SXQ5VVpHWGxqWTZhYks3dFV2VGY4UWpPSy82?=

=?utf-8?B?UWlzeUtvT1AyNHlvajJ6YmhiZGJSSzA0eFBzRzBZV01uMThlSHprMDNPTEtF?=

=?utf-8?B?MUZBejE2TkphOFg0TXpTL21HallKbGkvNDlWLzhhR2NiaUlVWnU2eWp6ckdZ?=

=?utf-8?B?Y1YxQ2dMTzNlSVRTRUtNMXFhMnRrYXBRMmRYWEhMUC83WFM0UzlRUXZ5QlB6?=

=?utf-8?B?cHJFMnpMeUlSaDRqbGtBN0hiMGNObDdPTWV5M0RvNWFTSWd0ZHZiMWROTzMy?=

=?utf-8?B?V29XakEvSzFtVzN3Zkx2QmJhQ29qZHlxenp5eWhHU0JHUmVEMmkvSW1wTXJi?=

=?utf-8?B?T0pucDd0cUdqd292U1ZwQ0hBL3o1QzY2SVF0Z3VDUUZkaCtXMERuOTJITTgz?=

=?utf-8?B?b3hqZ0JjUHBwQWNMeEFobHZoNDQwRnV6VUN3QzdYWk9WOUVVK3ZQYnRDcmRp?=

=?utf-8?B?REdaTFZqYUdxRUtaYWgwWm1NWlh1VksxSU1QelBLb2VDNnduOEtKUXRxSW4r?=

=?utf-8?B?T2hUaDNESWVCU0pFN21LcE4xNVN1TnRoeDZmeFM2VUlubWtZVzVxNzkwSGkx?=

=?utf-8?B?UDlRMFIxSHQ2Y2JLWGgrM1NDenNIQ0ZvYW4xUkdSdDNqNHdDVmFGQWh0T3ND?=

=?utf-8?B?Z1JLUTRIOWVsVTZNSnZlMzRhanROUnV2bnBONVpJS2xSZmQ2S2xDa053N2xZ?=

=?utf-8?B?QWMzSlJrWGdsWEY4N3NmQkI4SUxHbFAzdmIybGN0WEYweU1YY0dBTktBSWI0?=

=?utf-8?B?VjVUUkFUNHd2L2FmR3hpeEtxS2hXTnRtMkZUeTJMWXdkY3NpZGgzb2RKNXl1?=

=?utf-8?B?cFovQ3VSWnc2SWZWVFNtZXhoUVFJQ1JtM1ZJWFZ6UU13N2pIbjJTbTZ6V2I0?=

=?utf-8?B?RUt4RTA4UHFkVmF5VnRrT3d4akgvMTFLdVVocGdtYjRVQjZtb0tVaUlNVVNM?=

=?utf-8?Q?DbCTkUnTs/ZbCULaoTwJ?=

X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-e8f36.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: c23ed44d-8490-4987-f739-08dc48f8e2c9

X-MS-Exchange-CrossTenant-AuthSource: IA0PR11MB7933.namprd11.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Mar 2024 16:14:57.8332

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DS0PR11MB7215

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Document Interested in connecting with Ukrainian women nearby?

Looking for a unique platform to meet singles? Check out UkrainianGirls,

where you can engage in meaningful conversations unlike those found on traditional

dating sites!



Content analysis details: (5.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.19.10 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.19.10 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[keriannaszmalc832(at)hotmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[keriannaszmalc832(at)hotmail.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} New match suggestion



--===============6369033081474901035==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



PCFET0NUWVBFIGh0bWw+PGh0bWwgbGFuZz0iZW4iPjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVpdj0i

Q29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPgo8bWV0YSBu

YW1lPSJ2aWV3cG9ydCIgY29udGVudD0id2lkdGg9ZGV2aWNlLXdpZHRoLCBpbml0aWFsLXNjYWxl

PTEuMCI+Cjx0aXRsZT5Eb2N1bWVudDwvdGl0bGU+CjwvaGVhZD4KPGJvZHk+CjxwIHN0eWxlPSJ0

ZXh0LWFsaWduOmNlbnRlciI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMy45OTk5OTk5OTk5OTk5

OThwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFsLHNhbnMtc2VyaWYiPjxzcGFuIHN0

eWxlPSJjb2xvcjojMDAwMDAwIj48c3Ryb25nPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTZweCI+

SW50ZXJlc3RlZCBpbiBjb25uZWN0aW5nIHdpdGggVWtyYWluaWFuIHdvbWVuIG5lYXJieT88L3Nw

YW4+PGJyPgo8YnI+CjxpbWcgc3JjPSJodHRwczovL2xoNy11cy5nb29nbGV1c2VyY29udGVudC5j

b20vY2Y5SHdEbmlnSVdDZDBYMlR6SjdNVUZkSDh3YU52bTRPbW05TzdmUVJPR2FIMU1WOG14ZnpN

UXYzUFg2ZWNPZjR0QTR6YkRrc29rMWRxZ0htOVJvXzh2SDhoVkVqOHAzRkdpMXE3WFhSbHdmSVdq

anA5b1dSWUpUcG5LeFNrTlFOcDhzQ0hYLXJpb3BNOGJReldRQWxqQSIgc3R5bGU9ImhlaWdodDoy

NjVweDsgd2lkdGg6NjI0cHgiPjwvc3Ryb25nPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvcD4KCjxw

IHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxNnB4Ij48

c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6QXJpYWwsc2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNv

bG9yOiMwMDAwMDAiPjxzdHJvbmc+TG9va2luZyBmb3IgYSB1bmlxdWUgcGxhdGZvcm0gdG8gbWVl

dCBzaW5nbGVzPyBDaGVjayBvdXQgPGEgaHJlZj0iaHR0cHM6Ly9yYi5neS91dHZmeDkiPlVrcmFp

bmlhbkdpcmxzPC9hPiwgd2hlcmUgeW91IGNhbiBlbmdhZ2UgaW4gbWVhbmluZ2Z1bCBjb252ZXJz

YXRpb25zIHVubGlrZSB0aG9zZSBmb3VuZCBvbiB0cmFkaXRpb25hbCBkYXRpbmcgc2l0ZXMhIDwv

c3Ryb25nPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvcD4KCjxwPiZuYnNwOzwvcD4KCjxwIHN0eWxl

PSJ0ZXh0LWFsaWduOmNlbnRlciI+PHN0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwcHgi

PuKsh+KshyZuYnNwOzxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpBcmlhbCxzYW5zLXNlcmlmIj48

c3BhbiBzdHlsZT0iY29sb3I6IzAwMDAwMCI+RXhwbG9yZSBwcm9maWxlcyBvZiB0aGVzZSB0aHJl

ZSBsYWRpZXMgYW5kIG1vcmUgdmlhIHRoaXMgbGluayA8L3NwYW4+PC9zcGFuPuKsh+Kshzwvc3Bh

bj48L3N0cm9uZz48L3A+Cgo8cCBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXIiPjxhIGhyZWY9Imh0

dHA6Ly9zaG9ydHVybC5hdC9qcnlJTCIgc3R5bGU9InRleHQtZGVjb3JhdGlvbjpub25lIj48c3Bh

biBzdHlsZT0iZm9udC1zaXplOjE4cHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpBcmlhbCxz

YW5zLXNlcmlmIj48c3BhbiBzdHlsZT0iY29sb3I6IzExNTVjYyI+PHN0cm9uZz5EYXRlRmxpeDwv

c3Ryb25nPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvYT48L3A+Cgo8cD4mbmJzcDs8L3A+Cgo8cCBz

dHlsZT0idGV4dC1hbGlnbjpjZW50ZXIiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MThweCI+PHN0

cm9uZz48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6QXJpYWwsc2Fucy1zZXJpZiI+PHNwYW4gc3R5

bGU9ImNvbG9yOiMwMDAwMDAiPjxzdHJvbmc+U2lnbiB1cCBub3cgYXQgbm8gY2hhcmdlLCBmb3Ig

YSBsaW1pdGVkIHRpbWUgb25seSEgU2VpemUgdGhpcyBvcHBvcnR1bml0eSBiZWZvcmUgaXQncyBn

b25lITwvc3Ryb25nPjwvc3Bhbj48L3NwYW4+PC9zdHJvbmc+PC9zcGFuPjxicj4KJm5ic3A7PC9w

PgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj4mbmJzcDs8L3A+Cgo8cCBzdHlsZT0idGV4

dC1hbGlnbjpjZW50ZXIiPjxicj4KPGJyPgpUbyBzdG9wIHJlY2VpdmluZyBvdXIgZnV0dXJlIHBy

b21vdGlvbnMsIGNsaWNrIHRoZSA8YSBocmVmPSJodHRwOi8vdC5seS9IRVVkdCI+dW5zdWJzY3Jp

YmUgbGluazwvYT4uPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToyMnB4Ij48c3BhbiBzdHlsZT0iZm9u

dC1mYW1pbHk6QXJpYWwsc2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPiA8

L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3A+Cgo8cD4mbmJzcDs8L3A+Cgo8cD4mbmJzcDs8L3A+Cgo8

cD48c3Ryb25nPjxzdHJvbmc+Jm5ic3A7PC9zdHJvbmc+PC9zdHJvbmc+PC9wPgoKPHAgc3R5bGU9

InRleHQtYWxpZ246Y2VudGVyIj48c3Ryb25nPjxzdHJvbmc+Jm5ic3A7PC9zdHJvbmc+PC9zdHJv

bmc+PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3Ryb25nPjxzdHJvbmc+Jm5i

c3A7PC9zdHJvbmc+PC9zdHJvbmc+PC9wPgo8L2JvZHk+CjwvaHRtbD4K



--===============6369033081474901035==--

Cookware club spam from Microsoft outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 20 Mar 2024 15:08:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rn3A5-00000000NM6-3GG5

for dave@doctor.nl2k.ab.ca;

Wed, 20 Mar 2024 15:07:49 -0600

Resent-From: The Doctor

Resent-Date: Wed, 20 Mar 2024 15:07:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn8nam04hn2239.outbound.protection.outlook.com ([52.100.163.239]:8544 helo=NAM04-BN8-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rn0HK-000000003TX-0w2h

for doctor@doctor.nl2k.ab.ca;

Wed, 20 Mar 2024 12:03:14 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=hhCavPLgQRBXuiGUOxVbKCIZYqRVYVPIyvb39yDLaWj4t8YSskyv7yZZTw1zLGJTW4c6HMQJS8F/scbBluNi8e1GQ6WCwKzjAJiUudRringEYGrXRoDfY2UFqJJGi1VAHLexDV58T7t/Effm5tIRgxH5Z2HIMrWMrVozlm5YOt9TDFcAc7dy5eWI4N2ouSrGdSGrAPiRnHJM4CloL8rp9gKsx+cjTA2GPY96oEQE3w3IENb7hCKKrKDCI1zrHIhR8Pa6iAhnxtDW47lKXsJLS6Dc44yCFkgjEJfF07SJ+aXQstAyIIamiquaPirb7UTS//gp8rapQ7XDd/suLotXXA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=mhYVLVa8/7eFRNKKygOfI9tMvsIovo+/uIvT5wLcE+4=;

b=YxXpi+tXSL8EGbdVQYkTbsfLkC9hnf43y1E1S1vzDer8SksdGCBD2IyHknBh6Pq1Cxa5wY0hrRm7Mfb8nvLdvLpbeaxayNjhdniX27RF9XbM/6069LuigIpydMYtZcfeqyqCoiIwkfPjpCMwLBYCuWXmTgogwuZee5YYrH6VismLfDCJtHO0y4dDRxw7bmSUyRmeMjCNYJBwdnsqSSOVTKCN5dTkwC0hFVQcaSqVHGVDNLImCAPEQH2icY/VEHiw2qIOBI007xbzRw4Royf5FeLxzsM20qg53hIP6/EqTH0XfyoYimdapK2tu6FUXg5OeNDhZ7jOmDLwGJ+rISmdPQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

50.116.14.220) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.mailfrom=losalamospublicschools.onmicrosoft.com; dmarc=none action=none

header.from=losalamospublicschools.onmicrosoft.com; dkim=none (message not

signed); arc=none (0)

Received: from PH8PR22CA0007.namprd22.prod.outlook.com (2603:10b6:510:2d1::12)

by CH2PR06MB6645.namprd06.prod.outlook.com (2603:10b6:610:88::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7386.31; Wed, 20 Mar

2024 18:01:02 +0000

Received: from CY4PEPF0000E9D3.namprd03.prod.outlook.com

(2603:10b6:510:2d1:cafe::1e) by PH8PR22CA0007.outlook.office365.com

(2603:10b6:510:2d1::12) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7386.27 via Frontend

Transport; Wed, 20 Mar 2024 18:01:02 +0000

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 50.116.14.220)

smtp.mailfrom=LOSALAMOSPUBLICSCHOOLS.onmicrosoft.com; dkim=none (message not

signed) header.d=none;dmarc=none action=none

header.from=LOSALAMOSPUBLICSCHOOLS.onmicrosoft.com;

Received-SPF: Fail (protection.outlook.com: domain of

LOSALAMOSPUBLICSCHOOLS.onmicrosoft.com does not designate 50.116.14.220 as

permitted sender) receiver=protection.outlook.com; client-ip=50.116.14.220;

helo=LOSALAMOSPUBLICSCHOOLS.onmicrosoft.com;

Received: from LOSALAMOSPUBLICSCHOOLS.onmicrosoft.com (50.116.14.220) by

CY4PEPF0000E9D3.mail.protection.outlook.com (10.167.241.146) with Microsoft

SMTP Server id 15.20.7409.10 via Frontend Transport; Wed, 20 Mar 2024

18:01:01 +0000

MIME-Version: 1.0

Importance: high

Date: Wed, 20 Mar 2024 18:40:25 +0100

In-Reply-To:

X-TOI-MSGID: <828665911.C6B46E0A1099D.1710956425354@workingwithlindatotransformthisplatform.org>

Sender: adm_sudEgXtBYmp@LOSALAMOSPUBLICSCHOOLS.onmicrosoft.com

Content-Type: multipart/alternative; charset="UTF-8";boundary="PART_aC7x.prqjwdit"

CC: doctor@doctor.nl2k.ab.ca

From: Sam's club Winner

To: doctor@doctor.nl2k.ab.ca

Subject: message for YOU_____doctor

Message-ID:



X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: CY4PEPF0000E9D3:EE_|CH2PR06MB6645:EE_

X-MS-Office365-Filtering-Correlation-Id: b12481b4-9255-41f5-5f2d-08dc4907b421

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:50.116.14.220;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:LOSALAMOSPUBLICSCHOOLS.onmicrosoft.com;PTR:50-116-14-220.ip.linodeusercontent.com;CAT:OSPM;SFS:(13230031)(376005)(82310400014)(36860700004)(34020700007)(61400799018)(36200700002)(2083499006);DIR:OUT;SFP:1501;

X-OriginatorOrg: LOSALAMOSPUBLICSCHOOLS.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Mar 2024 18:01:01.4202

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: b12481b4-9255-41f5-5f2d-08dc4907b421

X-MS-Exchange-CrossTenant-Id: e01b7472-d693-4015-a6f5-fe058f4a6a01

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=e01b7472-d693-4015-a6f5-fe058f4a6a01;Ip=[50.116.14.220];Helo=[LOSALAMOSPUBLICSCHOOLS.onmicrosoft.com]

X-MS-Exchange-CrossTenant-AuthSource:

CY4PEPF0000E9D3.namprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH2PR06MB6645

X-Spam_score: 9.5

X-Spam_score_int: 95

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: (0383) Notifications



Content analysis details: (9.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: sdplpdso9999.s3.amazonaws.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.100.163.239 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.100.163.239 listed in wl.mailspike.net]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

1.0 HK_LOTTO_NAME No description available.

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[rmoxil_sudegxtbymp(at)losalamospublicschools.onmicrosoft.com]

0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 TVD_SPACE_RATIO No description available.

1.0 FORGED_SPF_HELO No description available.

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

2.7 SCC_BODY_URI_ONLY Very short body with something maybe clickable

0.7 BODY_URI_ONLY Message body is only a URI in one line of text or for

an image

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} message for YOU_____doctor



--PART_aC7x.prqjwdit

Content-Transfer-Encoding: 7bit

Content-Type: text/html; charset="UTF-8"











(0383) Notifications
















































































































--PART_aC7x.prqjwdit--