Instragram followers spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 23 Mar 2024 07:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1ro0yX-00000000EqJ-3jIZ

for dave@doctor.nl2k.ab.ca;

Sat, 23 Mar 2024 06:59:53 -0600

Resent-From: The Doctor

Resent-Date: Sat, 23 Mar 2024 06:59:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f70.google.com ([209.85.216.70]:57792)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rnrow-00000000FY3-0wrK

for sales@nk.ca;

Fri, 22 Mar 2024 21:13:26 -0600

Received: by mail-pj1-f70.google.com with SMTP id 98e67ed59e1d1-29dfc072e95so1869774a91.3

for ; Fri, 22 Mar 2024 20:11:24 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1711163478; x=1711768278; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=4njSd4cRUP+HuXIwTLLQfW0/5BfiqzTuhpOdBtgzWAw=;

b=brWuessm3szRK3wLA/0V7zb1ZAg4rKAj/Z33y56rOyPviiCtnREEiGJU2rEQeBTaHk

8DKR8VUau87zaB0W2yRNu7jQOgX4DbEVA9E2UwX6mJHXikNNIVi4wxmolK9KXzOIk+31

BKQ/apeu5j5MUS1spnHxLUi+eJc3/D53kRjNiearpNDlQQ+HFiRPhrohGjQEQTr+SvCW

BxxahsH+0nycKZCY5EKVFDa0VqfTxgZKfMGp1IhvJxB9FezyLHNP5/mLYLnqMNIZX8Or

I0kdvOctgX0PjzqiuZuQZ73Z+SLe9FLcPTVuqoAYMnjt6TPzHp3mF7YsTQmvUjISm5sO

GrzQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1711163478; x=1711768278;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=4njSd4cRUP+HuXIwTLLQfW0/5BfiqzTuhpOdBtgzWAw=;

b=NBGkVmVi2TUx1c2hiHAARM1etyNPJV7wkB+t4CZsED861gBWvKHkoHRn3Q1QTBl/DC

3B7OhyRR/zoa6xPgZOkVLv9kHaP0GrsuBxeB6olrBdsuuaRSW3fY0lHVDCKAiEDuEmXD

Fdy8xaBO1iK66KWS5F8JzB4RknbOvgmYfABO6hEmvuXAwXjdfliKdSrjTwn7KBWq3EA6

UeKGCz35WRj7rZbGBYxydBJLtQodQhPLOjc5NJIxc4cW5ac5HGGYMGH+BnxARtYsiAOA

IjGcgye6Q//j9vTuOdmFGOEEK8Q3ompSXxJxqPKI2oCCyxZ9BIhQJx/cJaFjOVXKT4Yy

S8fw==

X-Gm-Message-State: AOJu0Yxq+ZI4ZvrMkmQNDhCMjKMFGpgftEvqyCKsIB47WKLaX2SMsTMj

Mhd9VQ3WUlwXD4OqrffNrltsVhYqjDYr+/Ru+z3KJ5bWTcXzqEaGFCJPqC+z66HVbLwH2WQVv1J

64A==

X-Google-Smtp-Source: AGHT+IG52o9jhEsTHjJpC3bMIyx8m+ZQ73qQfWsxstltGYxG/ywpj8nJKRug9p7RxaKlNPbFBlJjum1c/Q==

MIME-Version: 1.0

X-Received: by 2002:a05:6820:820:b0:5a1:3e58:1396 with SMTP id

bg32-20020a056820082000b005a13e581396mr87303oob.1.1711160137310; Fri, 22 Mar

2024 19:15:37 -0700 (PDT)

Message-ID:

Date: Sat, 23 Mar 2024 02:15:37 +0000

Subject: netknowyeg,Gifts 15K IG Followers here

From: reganiaksin@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



SGkgLA0KTmV0a25vdyBJbnRlcm5ldCBTZXJ2aWNlDQoNCg0KR2V0IDEwMEsgRm9sbG93ZXJzIElu

c3RhZ3JhbSBOT1csDQpQbGVhc2UgdmlzaXQgdGhlIHdlYiBwYWdlIGJlbG93IENoZWFwZXIuDQoN

ClsgaHR0cHM6Ly9iaXQubHkvaW5zdGFtYXhzaG9wP25ldGtub3d5ZWcgXQ0KDQpEbyB5b3UgaGF2

ZSBhYm91dCBbIExlc3MgdGhhbiA0MEsgXSBGb2xsb3dlcnMgPw0KSW5jcmVhc2UgTm93IC4uISEh

IE9mZiA0MCUgVG9kYXkuLi4hISENCg0KLSBJbnN0YW50DQotIFNhZmVzdCBNZXRob2RzDQotIFBy

aXZhY3kgUHJvdGVjdGlvbg0KLSBTcGVlZCA1MEsgLSAxMDBLIEZvbGxvd2Vycy9kYXkNCi0gSGln

aCBRdWFsaXR5IEZvbGxvd2VycyAmIFJlYWwNCi0gRHJvcC1CYWNrIEd1YXJhbnRlZQ0KLSBUcnVz

dGVkDQotIFN0YXJ0aW5nIGdldCA1SyBGb2xsb3dlcnMgSW5zdGFncmFtDQoNCiggVGhyZWFkcywg

SW5zdGFncmFtLCBUd2l0dGVyLCBZb3V0dWJlLCBGYWNlYm9vaywgZXRjLiApDQoNCg0KDQpUaGFu

ayB5b3UsDQpSZWdhcmRzLA0KDQoNCkNvcHlyaWdodCDCqSAyMDE0IC0gMjAyNSBJbnN0YW1lZGlh

UHJvTUFYLiBBbGwgUmlnaHRzIFJlc2VydmVkLg0K

Canadian Tire Phish from MIcrosoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 22 Mar 2024 19:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rnqYh-000000003Dy-10jG

for dave@doctor.nl2k.ab.ca;

Fri, 22 Mar 2024 19:52:31 -0600

Resent-From: The Doctor

Resent-Date: Fri, 22 Mar 2024 19:52:31 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-psaapc01on2097.outbound.protection.outlook.com ([40.107.255.97]:39009 helo=APC01-PSA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rnqJF-00000000Jur-3c7t

for doctor@doctor.nl2k.ab.ca;

Fri, 22 Mar 2024 19:36:38 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=LZ4J/YwnzSWk6sVOzEB/yGU81mAUOOWIjV1n+Ls7v1zH/KDHz3dF3AuCnEtn1o2s8c33pH0N4dgsoOBJuVkIg6DicW3avhZ9NLw8aU8VaPmQDEOY5v+jCQz2noOzBpTq2xMa9OqHFd281Fi3OKXUhIHuMKwXIRc0WmQDSL6e8n/naMZjQin9kX9ciiSLPlPjqY+fn6rdoMF/bLPYDJb5JSRLAbfw3pidyzrm7QGVtxDX+1PJN0JcT0GtGfQwUcpFMNzOjwxfHP3c4e2r0mw/UvL5OkICJ5ncgjfwUWrSVQq/jcAVB9qXC0twSXeVXXTYCQef2IrgPqncaaRHp2XQAA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=z5XccaY2L/Y0wMwfufBBRdn+FfAQKn13ver0hQ0lvJE=;

b=dPfTZ18xD6bX+ww4cNd3ZWwVKAjrESgsPGirS2mtM/meYPM6Jr29u1rWOxtOZJHMHcPrQf6bZJgMZtikJqwcO4i2tJnxWoEI2HThw+/ApUtuhFS+UxrZHhasudI4sgVYrZGRmGNXYr5KzXJKgkTlb95F9KWFpTUOCa6OTwW38JzQfB6VOFKFVQKZWEXnwJ7ptfv3rd4IOHKLt//XYBciGTqODPao0isKfABHQ7ecrx3kw9AiGUQp2t9a0HdAxpBc9uZUJOczAFciSHnklQYmrm1TS86hA6DhlrFB8knCdV2Fyfi+abb2Ecu9x4/UTDUEcZF5byf5y558MR+cbha2Fw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

172.233.40.156) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.mailfrom=vehz.onmicrosoft.com; dmarc=none action=none

header.from=vehz.onmicrosoft.com; dkim=none (message not signed); arc=none

(0)

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 172.233.40.156)

smtp.mailfrom=vehz.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=vehz.onmicrosoft.com;

X-MS-Has-Attach: yes

X-MS-TNEF-Correlator:

Date: Sat, 23 Mar 2024 01:34:21 +0000

Subject: Y0U'VE -RECEIVED- A -REWARDS

From: Canadian Tire Rewards

Thread-Index: 9vmSzcZ36N6DYklr9+h3UAUbxWkoPI6Qfo==

msip_labels:

Content-Type: multipart/related; boundary="NmZ6p35d6mbkveVqypMWNMSIvLrfXzK55QcgDSP4Sm"; type="multipart/alternative"

Content-Language: fr-FR

Message-ID:

To: "doctor@gmail.com"

Accept-Language: fr-FR, en-US

MIME-Version: 1.0

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: HK2PEPF00006FB5:EE_|SEYPR01MB5661:EE_

X-MS-Office365-Filtering-Correlation-Id: 8d692d29-57ab-4bc2-77dc-08dc4ad95e04

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

I3qekstu/fGtpqRr9Tp3ttwn0SyjuY+0/kdg9dk6q6GmuncbFreLTGLHubwc5uf+QlyXrnXNRUeADgaEW4ypiVOzp8lzPwe2/Iuymt2aCBrdDIk9MacnnJYCWstQsNZrKkwEfvJlXFEJPLwnMKyxql5NMwfnpiAwfPla9XXYrNSA9m1IyOMgE+a3f1jEHiiFTwVy6l6WsYl5gxi5KDCgHTEsMoaXAmtvRN5nh/oGn1OrJIniU+a/Fv9gh6JMTgCpe9sA2YQ6uWfZS0Gi6oVk3u0ifOp0x6OdaDM4HKiNsHHKBXIkqHJ6vfsumOXF/peHFD5VL38t62nlbrNxr6yrCfWeL+G1IjXEID8U/mwDzdzHYvSkHxIBd9xnfV+Hc0m52ca37PfO9lJhTZQUvz76rJnwscyXlxM6EL/Ov3LwvhWY8HCn2kz00uuk+atBES3W/diS+hj9Olh7TYYNYgYmsC6mYEvMLS/M7h6BE8W9lcQoXxr0oJqFzuGZLvbrV8AqexY7vvy0fuzIIW+j2sBLC1IutV6CHNWw/3uxpcH8XQ9E1kFQbLxouAUPEVosAgno2jgt1chHJQ+o2Fs+pdxSVPSlSm1JMDlpDj6XErONu4v8huZ4ns/Tgb9YmoapNgrvW+7l2Z3LfQ8kG4rby3SjjfwjV3fEkk8OaeczLN98DciVf7YJdPsLSy0JPGq2wZSdFSwTLlP2cOwPHWDOIcp6hw==

X-Forefront-Antispam-Report:

CIP:172.233.40.156;CTRY:NL;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:vehz.onmicrosoft.com;PTR:172-233-40-156.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(82310400014)(376005)(41320700004)(34020700007)(36860700004)(61400799018);DIR:OUT;SFP:1102;

X-OriginatorOrg: vehz.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 23 Mar 2024 01:34:22.1415

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 8d692d29-57ab-4bc2-77dc-08dc4ad95e04

X-MS-Exchange-CrossTenant-Id: a54a1645-38a1-4581-86b4-4f9afe14d61a

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=a54a1645-38a1-4581-86b4-4f9afe14d61a;Ip=[172.233.40.156];Helo=[vehz.onmicrosoft.com]

X-MS-Exchange-CrossTenant-AuthSource:

HK2PEPF00006FB5.apcprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEYPR01MB5661



--NmZ6p35d6mbkveVqypMWNMSIvLrfXzK55QcgDSP4Sm

Content-Type: multipart/alternative; boundary="xDCXsoVtHNmhwjjNqd1V6rWZslQNtsYeQALr4QgDnqQsxNNB7d9y"



--xDCXsoVtHNmhwjjNqd1V6rWZslQNtsYeQALr4QgDnqQsxNNB7d9y

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: hexa



3W9MmuSoNh9Bd 3W9MmuSoNh9Bd 3W9MmuSoNh9Bd 3W9MmuSoNh9Bd

3W9MmuSoNh9Bd 3W9MmuSoNh9Bd 3W9MmuSoNh9Bd 3W9MmuSoNh9Bd

M63ZG4uErucr M63ZG4uErucr M63ZG4uErucr M63ZG4uErucr

u2LOVchXWE u2LOVchXWE u2LOVchXWE u2LOVchXWE

3W9MmuSoNh9Bd 3W9MmuSoNh9Bd 3W9MmuSoNh9Bd 3W9MmuSoNh9Bd





M63ZG4uErucr M63ZG4uErucr M63ZG4uErucr M63ZG4uErucr

u2LOVchXWE u2LOVchXWE u2LOVchXWE u2LOVchXWE

3W9MmuSoNh9Bd 3W9MmuSoNh9Bd 3W9MmuSoNh9Bd 3W9MmuSoNh9Bd

M63ZG4uErucr M63ZG4uErucr M63ZG4uErucr M63ZG4uErucr

u2LOVchXWE u2LOVchXWE u2LOVchXWE u2LOVchXWE





--xDCXsoVtHNmhwjjNqd1V6rWZslQNtsYeQALr4QgDnqQsxNNB7d9y

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: 7bit































--xDCXsoVtHNmhwjjNqd1V6rWZslQNtsYeQALr4QgDnqQsxNNB7d9y--



--NmZ6p35d6mbkveVqypMWNMSIvLrfXzK55QcgDSP4Sm--