Ukrainian women dating spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 22 Jun 2024 09:37:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sL2n3-00000000JBD-0QCV

for dave@doctor.nl2k.ab.ca;

Sat, 22 Jun 2024 09:36:33 -0600

Resent-From: The Doctor

Resent-Date: Sat, 22 Jun 2024 09:36:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn8nam04olkn2038.outbound.protection.outlook.com ([40.92.47.38]:26753 helo=NAM04-BN8-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sL2IA-00000000Dlu-0GqA

for doctor@doctor.nl2k.ab.ca;

Sat, 22 Jun 2024 09:04:59 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=ed3/8DgM2XVURakVFr5LmmRxtZBdvT3U8sMXohAmELxyvVVkAVZz0bS1SL+hFCoEZWy1/edJgpGNKfFPcAsGiIrRzxRa1rVkn7COYMpfdRLEJNrLOlMTj2pvwEe8KR4a0R3rPs75XHow17F669U/uN+i/hFSLePbvX/xG6D63kdjyWDuya4HlV40qso468NneMO0y4/RweG/rx8LTTB+vDRnBnCxh2IUWtOPpp3i1A07NZlPlCBsq4pIfSQkkQCWlqBkPwq/DwF4iEROHTD7YTcKGXlVcnc/Bs5a+FZM5hlJp7OkdJTo0zXMAE0geuAaYL0Rqp0aheAOxxbGipPqnw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=gotpwTyWZduE1sW2YvXVUq4nBjsz7/FKxzuGBlUbFUM=;

b=Uey2gpSlKvh+qAIlFJQq6w/cFVRyXnr2T1Ij9n4eTP5cWGFqmpKRq5EIr+AYS3j5mUp5AZCVHnaPi4Np+GwblBmOCvG96F7eq+n4SWIW+V1IrUEHEEy+Ktxo1EnxXsvwH7sbJ+FDm0QM94uZn4ypNhUWN2eRKuPCH7vjy5eOpt3+KZJ0Gf8GM61Teh76ysxqtQWbaByWLBU9BOfvBLeE3sOzuBKTKmLQirOGm9hlMIEzdL9OBK2IQBqC8IS8yJmhcAKUj1a5Tn3EBafnzUQjy0HmjIrJsB3j1WH8UHt8qiHBI/gKZrkXUHccQq/8YxxfyQOXe4He81DT5IazaHc1kQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=gotpwTyWZduE1sW2YvXVUq4nBjsz7/FKxzuGBlUbFUM=;

b=VCwG/S14ZNnLejIXlhKQbeIBJrp55jm9q2fG+tR7DSUW6274cC4TEtiKfaX6WSRf50mmdwIv4VtxB6/VKmAjegxyzdVPhip7/q1Z2U2xbv7xMI22cIZBYBMEzhgllEoQpmSdcZuCyPhBmwscpt0RdVm4CRdnExqyGOK4ld8a/k3i0QOdgV6dYlGuVPA+nFmWq+tWxb6ZVpff8d5yWZ5l6f+rLhrrx/B7HNcN7fucCx9By7L/iS/lTTzhcwuNt9OF3bIjVW4hgVfdNqY0ur5AaxOnerXAGxN0ztUBICL1WU37GNHyihoO7ffcNrMDvXslCt7/WrNCmZm6f56OJ4CVDw==

Received: from CYYPR11MB8330.namprd11.prod.outlook.com (2603:10b6:930:b8::14)

by IA1PR11MB6074.namprd11.prod.outlook.com (2603:10b6:208:3d6::14) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7698.26; Sat, 22 Jun

2024 15:02:22 +0000

Received: from CYYPR11MB8330.namprd11.prod.outlook.com

([fe80::c141:1c2:630d:617d]) by CYYPR11MB8330.namprd11.prod.outlook.com

([fe80::c141:1c2:630d:617d%5]) with mapi id 15.20.7698.017; Sat, 22 Jun 2024

15:02:22 +0000

From: "leda89schoentdd@hotmail.com"

Subject: UA woman are in the UK, US, CA, AU, NZ date today!

Reply-To: "leda89schoentdd@hotmail.com"

X-Mailer: Gmail

Date: Sat, 22 Jun 2024 17:02:17 +0200

Message-ID:



Content-Type: multipart/alternative;

boundary="----=_NextPart_000_9706_07D408FB.74D5F77F"

To: Undisclosed recipients:;

X-TMN: [ULC4Z6NxaKldRuVrnxTBCx8mhCHoJJph]

X-ClientProxiedBy: FR3P281CA0069.DEUP281.PROD.OUTLOOK.COM

(2603:10a6:d10:4b::16) To CYYPR11MB8330.namprd11.prod.outlook.com

(2603:10b6:930:b8::14)

X-Microsoft-Original-Message-ID: <1.49de84fddac51b099ec3@DESKTOP-7K7S413>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: CYYPR11MB8330:EE_|IA1PR11MB6074:EE_

X-MS-Office365-Filtering-Correlation-Id: 252b1438-e249-4bc5-76a9-08dc92cc50be

X-Microsoft-Antispam:

BCL:0;ARA:14566002|461199025|42300799012|9400799021|1602099009|56899030|3412199022|4302099010|440099025|4601999009;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?b1RMbXBVRVI4SUpJQnVYSU4wV3VzV2xSYVk5NXh5SitLQWM3ZWNZc3JXNk4z?=

=?utf-8?B?RGhteWtYMTVwam5pVkcrck5YdlRMb1hDdk13dWdTSjN1ZDB2Q0tEOGNOcGdW?=

=?utf-8?B?b0VMQ3pJaVpVY09WYjdJemVxejRMMHVsUVpIeDZMaEE3UDlmSUFFTnFENjVt?=

=?utf-8?B?UmQ2eUwyVms0YVVEV2QyYjZwSlNDeFdibHQ3Rk1uVWJscDRQWDBpcmVQTHNN?=

=?utf-8?B?clcvWkpMT0NiMnNsaEdBeTNoSVZLMzhob3gxYkJGTG8zMml3cm9zNWdFakIz?=

=?utf-8?B?TTNGa3d1a3UxOSs0VDNhODVNRlFML1JHVXdwQnF4b000L25LaHBpRXZ2MG1m?=

=?utf-8?B?d1VTQjVrNWM5dXBoVklZbHdncERpQWVLd0RGT0RENGk3c3VUTjRGV3REbkpm?=

=?utf-8?B?K0dZQ29xZjdJL1pqYTBPSWptbmtFcDJ3WTVVSU9wbFhiWjduTXM0OGRNb3ls?=

=?utf-8?B?bUJhKzJHV0Z4MlZDeW04M2Q2d09zVWJoZTR3UHZhLzVWaXRBaXBOVGljZ3NM?=

=?utf-8?B?UG9MQkpiTWowR2tybGxRVnQybEFOWVJIYWQyZmdheXErK1VFemhZOGhwMDBj?=

=?utf-8?B?VUdHVGpmQVVWM0xseFJNTElic0FhREJlSHVJUEdCdzJhVHdJTS9xSjk3bzB5?=

=?utf-8?B?dm1lb01BaHBKVjFnQUpYUnlJdWI4TmM0aWtsdWxBalRNS20rcllJUTFqNDNj?=

=?utf-8?B?MXBmQ2NGWkpxKzJJTGN2TTN1VXV2N2ErQ3UzMkRYK0VBOFptNStjMDI1Mi95?=

=?utf-8?B?Wk5icFc4cE9PSFRzYVJaSXlKSDlrcDhPWEdzb2dpRDRCT1MyZnYrMlF1TFdz?=

=?utf-8?B?TEZ5NDFBSi83dm13LzdCdFdXN1pWSjZSSFlUb3ppVURKQnAvSUFhNE5Fdy9K?=

=?utf-8?B?T2o0V1ZqMnk1WTlHNzh5NEk1d1YvS1J0ZzBxRlJwTnZLcitVVzdoMyt2cjFt?=

=?utf-8?B?RE9uMHVUUnN5TFFDTUJUK1dUQ3dVSVZlMFJod3hmczJkQXphcGFYYzhQWUg0?=

=?utf-8?B?VElCN0c5WXEvNW1MWWZhMW8yVGZqa3VCRUtZb1JEMElLM01lelEzR08yMm5Y?=

=?utf-8?B?MENLVkVzUVBzSG4yaFJ4ZERMbHNUQWN1OUdjbHlEVmtUVUhobTZFOUlzbGJ0?=

=?utf-8?B?NkRXRHRza1VQaVV4S2tkeHZndzFZc1d4L3h0L3AzTXY1NlJXSUhSVEthbjZt?=

=?utf-8?B?MSsxaDhobWllTFZraU9ua1ZHaUpJb2I2aVZjU01YR0hteEUwRytkT1pjQ0di?=

=?utf-8?B?ZFVJYnZqQVJqSW1icS9TV3lMSXhmdGE2dHozQW0yMTB5dEtDV2JtWXVtRTdo?=

=?utf-8?B?d0xiUk5Mb1F0MmhSZThJY2NndElMYXk4amZPRGNCM1Vhd2tBZTZsYUZBeUlW?=

=?utf-8?B?d0JmdWN6TjJtM1VwalR3NUwybjVSL0NTT3VxUk9nZnk0WDZ2RkE3dzVyVjgw?=

=?utf-8?B?QXl3Q3RHNndZODFUQm00UGhhWEZncklKVDFvZm42bGQ5YmNManpOL1o4Y0lF?=

=?utf-8?B?UC9pdFdqU0RZM0xLWDJ5bzNiaEdrUjFzNGRoNWdiOWJxb0ZuYTZpWnd6RjI0?=

=?utf-8?B?RkkvOG0yWXFmd2ZGK29VU0RGRjc5K1ZrRUZ5TTM0dWVSQjNHZ2NXUktGbkha?=

=?utf-8?B?bEZENU1iSFpwd0J2MSthZ0svb2pZYkE9PQ==?=

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?WDBNc3dXelNFdEtJZEVGWXdlOWFZYmtqcG12YnVjVTBDelVnaVd1YmgxRVZT?=

=?utf-8?B?RlNlZFBDdFdMOXpoeEdFUE1icjd0T3Q1bzcyNUZMMTBDc2ZpNjNvQVZ0S0M1?=

=?utf-8?B?cDdTdlNsYnIzaG8vL2IwQ29FMTNzcnh6VGFYRHlDQ0NVRS9SbWtjTVRSeUtz?=

=?utf-8?B?c1RUTVZVTjM5SVpVWkVHd2x3RmRPbHZrUlFnVWdVemJkNDUydmlKYUQ1enNI?=

=?utf-8?B?WWF2VnB3eEtGR2pYY0pPN3A4MVhMNHN3L1Z4am9FcERlRkdkZjAvcHFEWFd2?=

=?utf-8?B?dmJHKzlncFVINER0QlBVVDFjSDl2OGQwd2Erb3dJek80cXFvc3FYb0ZyUzZu?=

=?utf-8?B?UFJwaXBNV0s5N0JmRlMrMVZWaENaNUxodnd3K3IzTkgxOTArQjlENzMzbUp5?=

=?utf-8?B?bEtPeG1CbDRuMTJWLzBYblF1UDBFTGRPMy9mWHJ2UmdETit0Q0pjR3hNU0Jp?=

=?utf-8?B?azJKN3N5ckl1WXFydkQzSlBRMWo0N04zeDJsQjN5OGFBdFJ3MDkwNzNuZnN3?=

=?utf-8?B?M0FJUUx3THJSNWc5QTdHZDJCTWNpRjk1eUdyVUwweEkyTzk2cWYzVXR3a2Jh?=

=?utf-8?B?TitlZmMrSnI0bnhsczRWSzE0cUVyM3ZqYVR6eSs0Rld5NFFWay9aN3BaRUU4?=

=?utf-8?B?OTU4VHF6dHlvemlWdFYrUlRBbnZKY3drLzNrSVVIQnRibkdGSEd6NVYxVElS?=

=?utf-8?B?enBaKzdqTEdpMVNrMWkyckE1Tm1hUmJBcHc3RTArd0lSMFNQNlVjVElVK3pW?=

=?utf-8?B?UjVSMHlDSWYvM3huN21ZY29NaGl0SXZwcll3bVMzZHg1OG1NSDFWd0ZUd3lw?=

=?utf-8?B?Y1RLays2YTRCQkVJYTBzWEZyRU43L3NiWHZMalhhQWxjVXRHVTE1MFFpb09w?=

=?utf-8?B?WjFQOXJnVnNTcllvcUtRUWhMOTlIeVJYUEl0bU15NUZPdHplVEZpdWlRNm9F?=

=?utf-8?B?R2JBSHFUb2tCOFkrK1VIY29DdWRKTDNLRVdEeWRwSktoRVBNZ25PdmNXNWZG?=

=?utf-8?B?amZ5MklBWjBCbWNlT3I4TldqdHJUbW1ybW5ZbkpyVCtPUlIvREFQZEI3Njlm?=

=?utf-8?B?UTFsaThCc3hwTVZ2ZFRWdHNrTkFkSEFGaVRKMXZ2ZG1EaUptTkdtVEdqVnV6?=

=?utf-8?B?eEptWSsxa0xISXpuZjBoZnJtWWpmeGVqdUZiZG1sSGZuU2xoQ3NHeFdZYmZu?=

=?utf-8?B?aWRhSFplQ3Vya2dzZDQ4R2ZKdThmTVVxUDJMTzZLaDVXSXN4TUNxYjNlaDRV?=

=?utf-8?B?Yk13TnZ4dm94b2FqdXlmY1ZxNHFvVGFUblFaeTFSK3d1ZmtHRXVGcFZRSm9v?=

=?utf-8?B?djJzS2g4MmRjRHJQTVlUaVl2TERlTjJDSkpIc1lHekcyQTBzcHExT1pwenVw?=

=?utf-8?B?aXVZRmhLQWNwNXNxNXJYYXFLUVlpakhYeDRraUgyZzhralVyaWlkdjJjOEdL?=

=?utf-8?B?U01ZT0FWUUVuSFd1YlZmL09oMzRHSkx4NlFSVFNqTVZEbXlOMlQyeEZtVjJT?=

=?utf-8?B?ckdnZUZCWmpuMnhSdjVYaFNXZWIwNVVTM2QwUFUxd2ZMTlVNMnlxT1pCWnI4?=

=?utf-8?B?bXBVaitBbU9jcXVaOVQ2MXRjb3JIWEFhMmxVa09oSjhzY1RBeHNpNXcwTW0r?=

=?utf-8?B?VXE2L09mSGxHcXpUelVBSnh6RjR2dGplRy9ieGtMTjhkWHg4cmVkM2IyaFM4?=

=?utf-8?Q?C7zaS2BX8Tzqrh0ry5Pp?=

X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-e8f36.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: 252b1438-e249-4bc5-76a9-08dc92cc50be

X-MS-Exchange-CrossTenant-AuthSource: CYYPR11MB8330.namprd11.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Jun 2024 15:02:21.6231

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA1PR11MB6074

X-Spam_score: 7.3

X-Spam_score_int: 73

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Do you live in the United Kingdom, United States, Canada,

Australia or New Zealand and would like to meet a Ukrainian woman near you?

Just launched a brand new website where you can meet and date Ukra [...]



Content analysis details: (7.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.47.38 listed in list.dnswl.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.47.38 listed in dnsbl.ahbl.org]

[40.92.47.38 listed in dnsbl.ahbl.org]

[40.92.47.38 listed in dnsbl.ahbl.org]

[40.92.47.38 listed in dnsbl.ahbl.org]

[2603:10b6:930:b8:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:10b6:930:b8:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:10b6:930:b8:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:10b6:930:b8:0:0:0:14 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.47.38 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.47.38 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.47.38 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.47.38 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10b6:930:b8:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:b8:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:b8:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:b8:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:b8:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:b8:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:b8:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:b8:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[40.92.47.38 listed in will-spam-for-food.eu.org]

[40.92.47.38 listed in will-spam-for-food.eu.org]

[40.92.47.38 listed in will-spam-for-food.eu.org]

[40.92.47.38 listed in will-spam-for-food.eu.org]

[40.92.47.38 listed in will-spam-for-food.eu.org]

[40.92.47.38 listed in will-spam-for-food.eu.org]

[40.92.47.38 listed in will-spam-for-food.eu.org]

[40.92.47.38 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.47.38 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[leda89schoentdd(at)hotmail.com]

1.2 ONE_TIME BODY: One Time Rip Off

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 AC_BR_BONANZA RAW: Too many newlines in a row... spammy template

-0.0 T_SCC_BODY_TEXT_LINE No description available.

Subject: {SPAM?} UA woman are in the UK, US, CA, AU, NZ date today!



------=_NextPart_000_9706_07D408FB.74D5F77F

Content-Type: text/plain;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Do you live in the United Kingdom, United States, Canada, Australia or New =

Zealand and would like to meet a Ukrainian woman near you? Just launched a =

brand new website where you can meet and date Ukrainian women who have move=

d to all these countries because of the situation there!





Our site has over 250,000 users, most of them are women, we are only lookin=

g for men







Membership!



UkrainianLove





=E2=9C=94=EF=B8=8F Registration is free. =E2=9C=94=EF=B8=8F



=E2=9C=94=EF=B8=8FAll members are verified and genuine. =E2=9C=94=EF=B8=8F



=E2=9C=94=EF=B8=8FMore than 100,000 Ukrainian women on the site =E2=9C=94=

=EF=B8=8F







The site offers many features, chat, camera, call, stickers and many more o=

ptions that you can try today!!







Sign up for free today with this limited one-time offer



All users are verified and authentic. Register today for free







Stop receiving messages





















here



















































































































=



------=_NextPart_000_9706_07D408FB.74D5F77F

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




style=3D"font-weight:normal;" id=3D"docs-internal-guid-7fc01ff8-7fff-8883-=

96d2-55b0a5edd3ec">=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=


5-1870-e769c3706283">
uid-9034158f-7fff-e772-a55a-45253726b092">
id=3D"docs-internal-guid-c022e73d-7fff-2dd9-3f09-fcc8dcd2e9c2">=0A=


margin-bottom:0pt;">=0A=


background-color:transparent;font-weight:700;font-style:normal;font-variant=

:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;"=

>Do you live in the United Kingdom, United States, Canada, Australia or New=

Zealand and would like to meet a Ukrainian woman near you? Just launched a=

brand new website where you can meet and date Ukrainian women who have mov=

ed to all these countries because of the situation there!
=0A=

=0A=


=0A=


margin-bottom:0pt;">=0A=


background-color:transparent;font-weight:700;font-style:normal;font-variant=

:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;"=

>Our site has over 250,000 users, most of them are women, we are only looki=

ng for men
=0A=

=0A=


=0A=


=0A=


margin-bottom:0pt;">=0A=


background-color:transparent;font-weight:700;font-style:normal;font-variant=

:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;"=

>Membership!
=0A=

=0A=


;margin-bottom:12pt;">=0A=


e=3D"font-size:18pt;font-family:Arial,sans-serif;color:#1155cc;background-c=

olor:transparent;font-weight:700;font-style:normal;font-variant:normal;text=

-decoration:underline;-webkit-text-decoration-skip:none;text-decoration-ski=

p-ink:none;vertical-align:baseline;white-space:pre-wrap;">UkrainianLove
an>
=0A=

=0A=


=0A=


margin-bottom:0pt;">=0A=


background-color:transparent;font-weight:400;font-style:normal;font-variant=

:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;"=

>=E2=9C=94=EF=B8=8F Registration is free. =E2=9C=94=EF=B8=8F
=0A=

=0A=


margin-bottom:0pt;">=0A=


background-color:transparent;font-weight:400;font-style:normal;font-variant=

:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;"=

>=E2=9C=94=EF=B8=8FAll members are verified and genuine. =E2=9C=94=EF=B8=8F=

=0A=

=0A=


margin-bottom:0pt;">=0A=


background-color:transparent;font-weight:400;font-style:normal;font-variant=

:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;"=

>=E2=9C=94=EF=B8=8FMore than 100,000 Ukrainian women on the site =E2=9C=94=

=EF=B8=8F
=0A=

=0A=


=0A=


=0A=


margin-bottom:0pt;">=0A=


background-color:transparent;font-weight:400;font-style:normal;font-variant=

:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;"=

>The site offers many features, chat, camera, call, stickers and many more =

options that you can try today!!
=0A=

=0A=


=0A=


=0A=


margin-bottom:0pt;">=0A=


background-color:transparent;font-weight:400;font-style:normal;font-variant=

:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;"=

>Sign up for free today with this limited one-time offer
=0A=

=0A=


margin-bottom:0pt;">=0A=


background-color:transparent;font-weight:400;font-style:normal;font-variant=

:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;"=

>All users are verified and authentic. Register today for free
=0A=

=0A=


=0A=


=0A=


margin-bottom:0pt;">=0A=


background-color:transparent;font-weight:400;font-style:normal;font-variant=

:normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;"=

>Stop receiving messages
=0A=

=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


t;margin-bottom:0pt;">=0A=


e=3D"font-size:10pt;font-family:Arial,sans-serif;color:#1155cc;background-c=

olor:#ffffff;font-weight:700;font-style:normal;font-variant:normal;text-dec=

oration:underline;-webkit-text-decoration-skip:none;text-decoration-skip-in=

k:none;vertical-align:baseline;white-space:pre-wrap;">  here
n>
=0A=

=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=

=0A=

=0A=

=



------=_NextPart_000_9706_07D408FB.74D5F77F--

Loan spam offer from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 22 Jun 2024 09:37:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sL2nA-00000000JCc-3F0g

for dave@doctor.nl2k.ab.ca;

Sat, 22 Jun 2024 09:36:40 -0600

Resent-From: The Doctor

Resent-Date: Sat, 22 Jun 2024 09:36:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f66.google.com ([209.85.167.66]:44096)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sL2bn-00000000Gew-1x7G

for doctor@doctor.nl2k.ab.ca;

Sat, 22 Jun 2024 09:25:08 -0600

Received: by mail-lf1-f66.google.com with SMTP id 2adb3069b0e04-52cd9f9505cso1636521e87.0

for ; Sat, 22 Jun 2024 08:23:00 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1719069774; x=1719674574; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=djR8FnmY1J3ilXnknACexIIFkea5wENbKrGtuE2ljlc=;

b=mBD6GXyOw2mOUjy8kOziat20j/b2OC7sdMQWhjr5C1Bm/2Cnba7zpPl3jciN0dd9vD

CTX1ZwwcGgOT+8g1Dv/1EZ6XhtWoJTEdZFgz3pBATFEfB47JwxUk4Bgxo9E7hFHxJom1

BPgQDFviIGGTpFcoLiknSvLpLSK+05chA792qgsOrY786CyKk6D+KmoiFcV4cPjyLJ4E

VWfSih2ypKgYExBhG3e4B2iC5ffrDhgZXbmu/C/z+WW18l5NZbklq4zyI5P+0NDzfhii

Z5sGSGcr5IDGdgOAA23kJRmlF6DDUZ7ij4Pr7L/tRDZfYJ/DPi2t6t3zfnWMHBYIMTtD

n1ag==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1719069774; x=1719674574;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=djR8FnmY1J3ilXnknACexIIFkea5wENbKrGtuE2ljlc=;

b=aNKT1gjV+ixMmAg6xtys7h02IIdPDGpq61s5Gyn5Ox+WJALYrq9p2Lj2BEQimR0tLU

hUyQcbajeWB6f8eYWKGBShLivBDE1cbTfy64LYRWFCAL1bZl4rQXbr5IXMFxd2259M24

1LcUxTVVlXOzZ6jJfwwA0xaUeOeqv+Isr6qb4LcIbfAwk/riDUFQ6NG5UokoRAgvxyq+

USNAc+/I0yboeMS7QCRwmwbEhRGOAscmnwqVoqm3HstaIwlNxbnF4jDO8q92QzCSzcwa

EttI4vCXpoKa0AacUMSROjVnjFdpTvfVHPInI7a0diAEH7pLwyY8gEOxXw7H4SjfoE9Y

tWvQ==

X-Forwarded-Encrypted: i=1; AJvYcCVZCEHP+g9wtIs75ySvDZWWa20dPCBapQsMKND3ARn3/Koogjh3vdYCpaz8um3RenqSB4UG7mJhwjdo/6g6PLLMVneBWaFA2Ec=

X-Gm-Message-State: AOJu0YxbWhAjqi8E//eyhrBdyrxpzxX58tRSCTX720r2i8mZP1wSmHQs

7VXxACJcQdv1io3va/7rqD8gcaqZwpnB4/ZTFeZXhwKkrGVdUytBYIJq8QtAPB+CZs+1GIGKwRS

Bf24DDfR+7JGqvFMQx7n0hS5K0PzEEwopwdEOyg==

X-Google-Smtp-Source: AGHT+IFCypQl727UIG7ErlUOayCvF/cRLaZBftJ9j4PpfSR9N02fbbAb5+Q7Fs8aQ/eZ99qhINR9zVVArQnP3HsisOE=

X-Received: by 2002:a05:6512:48f:b0:52c:8920:875 with SMTP id

2adb3069b0e04-52cdf7f164cmr586565e87.20.1719069319841; Sat, 22 Jun 2024

08:15:19 -0700 (PDT)

MIME-Version: 1.0

Reply-To: moussaahmed.loan15@gmail.com

From: Ahmed Moussa

Date: Sat, 22 Jun 2024 07:15:10 -0800

Message-ID:

Subject: LOAN OFFER

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000275307061b7c04b0"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 15.1

X-Spam_score_int: 151

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Sheikh Tamim Bin Hamad Finance House Al Maha Building, 29,

Al Rida Street, Fereej Bin Omran, Doha. Qatar. Dear, My name is Mr. Moussa

Ahmed, the financial Consultant, Sheikh Tamim Bin Hamad Finance House; we

are independent financial advisors offering high quality and independent

financial services for gulf reg [...]



Content analysis details: (15.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.66 listed in dnsbl.ahbl.org]

[209.85.167.66 listed in dnsbl.ahbl.org]

[209.85.167.66 listed in dnsbl.ahbl.org]

[209.85.167.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.66 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.66 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.66 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.66 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.66 listed in will-spam-for-food.eu.org]

[209.85.167.66 listed in will-spam-for-food.eu.org]

[209.85.167.66 listed in will-spam-for-food.eu.org]

[209.85.167.66 listed in will-spam-for-food.eu.org]

[209.85.167.66 listed in will-spam-for-food.eu.org]

[209.85.167.66 listed in will-spam-for-food.eu.org]

[209.85.167.66 listed in will-spam-for-food.eu.org]

[209.85.167.66 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.66 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[moussaahmed.loan7540(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[moussaahmed.loan15(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[moussaahmed.loan7540(at)gmail.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 HTML_MESSAGE BODY: HTML included in message

3.1 DEAR_NOBODY RAW: Message contains Dear but with no name

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

Subject: {SPAM?} LOAN OFFER



--000000000000275307061b7c04b0

Content-Type: text/plain; charset="UTF-8"



Sheikh Tamim Bin Hamad Finance House

Al Maha Building, 29, Al Rida Street, Fereej Bin Omran, Doha.

Qatar.



Dear,



My name is Mr. Moussa Ahmed, the financial Consultant, Sheikh Tamim Bin

Hamad Finance House; we are independent financial advisors offering high

quality and independent financial services for gulf region residents and

expatriates living abroad.



We offer corporate and personal loans at 3% interest rate for the duration

of (fifteen 15 years) available for both gulf residents and expatriates or

business owners worldwide.



We also have 1% commission for all our brokers worldwide who introduce

business and project owners for finance or other opportunities.



Kindly keep me posted if you are interested in more details.



Till then please keep enjoying your day.



Regards,

Moussa Ahmed

Financial Consultant

Sheikh Tamim Bin Hamad Finance House



--000000000000275307061b7c04b0

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





nature" data-smartmail=3D"gmail_signature">

=3D"times new roman, serif" size=3D"4">

times new roman, serif" size=3D"4">Sheikh Tamim Bin Hamad Finance House
nt>
Al Maha Buil=

ding, 29, Al Rida Street, Fereej Bin Omran, Doha.

ce=3D"times new roman, serif" size=3D"4">Qatar.

=3D"times new roman, serif" size=3D"4">

times new roman, serif" size=3D"4">Dear,

es new roman, serif" size=3D"4">

ew roman, serif" size=3D"4">My name is Mr. Moussa Ahmed, the financial Cons=

ultant, Sheikh Tamim Bin Hamad Finance House; we are independent financial =

advisors offering high quality and independent financial services for gulf =

region residents and expatriates living abroad.=C2=A0=C2=A0

v>

ont face=3D"times new roman, serif" size=3D"4">We offer corporate and perso=

nal loans at 3% interest rate for the duration of (fifteen 15 years) availa=

ble for both gulf residents and expatriates or business owners worldwide.
font>


>
We also have 1=

% commission for all our brokers worldwide who introduce business and proje=

ct owners for finance or other opportunities.

=3D"times new roman, serif" size=3D"4">

times new roman, serif" size=3D"4">Kindly keep me posted if you are interes=

ted in more details.=C2=A0=C2=A0

oman, serif" size=3D"4">

, serif" size=3D"4">Till then please keep enjoying your day.

iv>
<=

font face=3D"times new roman, serif" size=3D"4">Regards,
<=

font face=3D"times new roman, serif" size=3D"4">Moussa Ahmed

iv>Financial Consultant
ont>
Sheikh Tami=

m Bin Hamad Finance House


v>



--000000000000275307061b7c04b0--

Web Design / App / SEO spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 22 Jun 2024 09:37:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sL2mw-00000000JAY-1mzp

for dave@doctor.nl2k.ab.ca;

Sat, 22 Jun 2024 09:36:26 -0600

Resent-From: The Doctor

Resent-Date: Sat, 22 Jun 2024 09:36:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f68.google.com ([209.85.167.68]:60577)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sL2AM-00000000CTa-3vjt

for sales@nk.ca;

Sat, 22 Jun 2024 08:56:40 -0600

Received: by mail-lf1-f68.google.com with SMTP id 2adb3069b0e04-52cd717ec07so1746550e87.0

for ; Sat, 22 Jun 2024 07:54:40 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=webtechmine.com; s=google; t=1719068072; x=1719672872; darn=nk.ca;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=eG7ijuD2dq8EjLlZRO+7rZBMrV1k+KIW46ROvfrrvaI=;

b=W06HrI1jL6l16bwDjYWQjOu83FEbnlKvqQHyS2FmdFDTL4lXw0l01ylExZ3DV+gwJG

ovicWI1AvjqAuk11+O5brMShPfSLwIPm+1HBeHcucjlp+zW/UfRsOxROxOSr0Bu3Lwol

9KtTjqGGT4PO15UBeqbfok8s7cjG8wiHje9+cS1mUM/r77khCTwOEHonSU/2G+rVfAIP

fuiU2kqT/443LBDPo/0XySN2G4dvIwchX0I+5YSrOQ9TnnUjgWX0UaKc9fWKJKXQ9ili

/5lP+yKS58UV0o49HO4dqfdttQWrFV0Or7t8eOemHVyk/Pcmlin5RwMUdZCod28HgKOE

rejQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1719068072; x=1719672872;

h=to:subject:message-id:date:from:sender:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=eG7ijuD2dq8EjLlZRO+7rZBMrV1k+KIW46ROvfrrvaI=;

b=cGkdNVJoEhoE/Zn9wdwH9IEaymWlRgdCSDWqFmw2TfhSYfyAXtIke+zDeNacoO3xhm

0IPJ+gAR1poSSzMbQuOICo8X2CKLXnn72NbSlwTJM257B1aMrzhEHIn63x/LKXo9NyBL

jo9EIWvONjnaKCjzYv0zajiJ9hXAMoc0TVf3dH0U8rufhdkX88+0sbGSQoAAFYLqAcmW

pZT0gJIOralxrNP2V0li8j/RgNSwSFBBS7ja1bsSg37vmidwwjAtXmXj0emFa3GFICLt

BeXlxDHfDmbgpvcztIF90jhEBeP/B1DpLQRC4PyY24nLZrsgxa2DnaYoCGjBOODKvZUb

WAWQ==

X-Gm-Message-State: AOJu0YxRHxkMw+yWTSZWafryo6+deCfJpY3j618GRYSNSlfX258UqecV

d1NMWQs6OMUpHeDCGKNlNrBHrXl3vqAx5lRF6ARN0sKA/BDaNxi7zTjcg+ZI9vDBfclL0UGJbum

eel4uzStUtOaBU4lCQAxWoLu6RXV+9Fgzb6XwQX+LrLS2oglkuos=

X-Google-Smtp-Source: AGHT+IGXep5v2AHG9fXR96xjkQNhZ84G4CphZSE0OA3FLlQTuwXJl6hhW35BVNwenPEZNVHaYdVEKqZVtRJPO8pgaVM=

X-Received: by 2002:ac2:46d4:0:b0:52c:e112:4b0c with SMTP id

2adb3069b0e04-52ce183314dmr27926e87.9.1719068072156; Sat, 22 Jun 2024

07:54:32 -0700 (PDT)

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Sat, 22 Jun 2024 14:54:31 +0000

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Sat, 22 Jun 2024 07:54:29 -0700

MIME-Version: 1.0

Sender: charlotte@webtechmine.com

From: charlotte@webtechmine.com

Date: Sat, 22 Jun 2024 14:54:31 +0000

X-Google-Sender-Auth: 0puFDC-BDW1HIshKHYI4B8AZp8I

Message-ID:

Subject: Re: nk.ca: SEO Services at Low Cost!!

To: Sales

Content-Type: multipart/alternative; boundary="000000000000c93639061b7bb976"

X-Spam_score: 8.9

X-Spam_score_int: 89

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi nk.ca Team, Hope you are doing well. I was looking for

Keywords and found your website on page 3-4 of Google. If you were on page

#1, you'd get so many prospects/new clients every day.



Content analysis details: (8.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.68 listed in dnsbl.ahbl.org]

[209.85.167.68 listed in dnsbl.ahbl.org]

[209.85.167.68 listed in dnsbl.ahbl.org]

[209.85.167.68 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.68 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.68 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.68 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.68 listed in will-spam-for-food.eu.org]

[209.85.167.68 listed in will-spam-for-food.eu.org]

[209.85.167.68 listed in will-spam-for-food.eu.org]

[209.85.167.68 listed in will-spam-for-food.eu.org]

[209.85.167.68 listed in will-spam-for-food.eu.org]

[209.85.167.68 listed in will-spam-for-food.eu.org]

[209.85.167.68 listed in will-spam-for-food.eu.org]

[209.85.167.68 listed in will-spam-for-food.eu.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: webtechmine.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.68 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.8 FROM_FMBLA_NEWDOM28 From domain was registered in last 14-28 days

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} Re: nk.ca: SEO Services at Low Cost!!



--000000000000c93639061b7bb976

Content-Type: text/plain; charset="UTF-8"



Hi nk.ca Team,



Hope you are doing well.



I was looking for Keywords and found your website on page 3-4 of Google. If

you were on page #1, you'd get so many prospects/new clients every day.



Most of your targeted keywords on page #3-5. You're so close! Do you mind

if I sent a SEO Packages and Price list of your site to see *why you're not

on page #1*?



I can send the past work details in a couple hours. If you have any

questions, feel free to ask me. I have more than 10 years of experience in

digital marketing.



Can I send it over?



Look forward to your reply.



Kind Regards,



Charlotte

Business Development Manager

--------------------------------------------------------------------------------------------------

Note: - Our next conversation will be on my corporate Email ID. If this is

something you are interested in, please respond to this email. If this is

not your interest, don't worry, we will not email you again.

[image: beacon]



--000000000000c93639061b7bb976

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi nk.ca Team,

Hope yo=

u are doing well.

I was looking for Keywords and found your website =

on page 3-4 of Google. If you were on page #1, you'd get so many prospe=

cts/new clients every day.=C2=A0

Most of your targeted keyword=

s on page #3-5. You're so close! Do you mind if I sent a SEO Packages a=

nd Price list of your site to see=C2=A0
55,0)">why you're not on page #1
?

I can send the past work d=

etails in a couple hours. If you have any questions, feel free to ask me. I=

have more than 10 years of experience in digital marketing.

Can I s=

end it over?

Look forward to your reply.

Kind Regards,

>Charlotte
Business Development Manager
-----------------------------=

---------------------------------------------------------------------
No=

te: - Our next conversation will be on my corporate Email ID. If this is so=

mething you are interested in, please respond to this email. If this is not=

your interest, don't worry, we will not email you again.=C2=A0

div>



7yW38liVjR5qALj-j6o0nY68BTnayDHFAkAHH7uAMwccqKFiJZFuCMmZwEny7YZiSVH9DCMRZcA=

PqyBEQ_0u67yBV8mOzg9tSyrqLi_6EJrGrnfuU-uQ2rhLAhYb3FP16Y0edIiOXzVldT_yZFQs" =

width=3D"1" height=3D"1" alt=3D"beacon" style=3D"display:none; display:none=

!important;">



--000000000000c93639061b7bb976--

Instragram followers spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 21 Jun 2024 22:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sKsRO-000000006VG-0xZP

for dave@doctor.nl2k.ab.ca;

Fri, 21 Jun 2024 22:33:30 -0600

Resent-From: The Doctor

Resent-Date: Fri, 21 Jun 2024 22:33:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f70.google.com ([209.85.161.70]:61682)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sKqdF-00000000D52-0s6C

for sales@nk.ca;

Fri, 21 Jun 2024 20:37:40 -0600

Received: by mail-oo1-f70.google.com with SMTP id 006d021491bc7-5b96a8cbc6aso2469098eaf.2

for ; Fri, 21 Jun 2024 19:35:42 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1719023736; x=1719628536; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=9Osp83ZTCV0fEA6wK+rNdcup5jzgnMPuEgO4u5TMUrc=;

b=VKm0pYPZE/3yVVrOFcuMLNWtKVectsVI3XQ6sZMluEOWN/zBDePDx6d2wWVn5WgP3j

70d+p5RqWp1POAdaUZeG8gFBdjzTPWlQazgWlNQDktWmE5UvUaNJCm5sjV6YYteTMYVn

KFZJt+bsqrAJJy0f99KRZebG+EBKMMD6/wyTFMHvfxDAzK5qhVhGuzPEoxFckNhlrpvA

tR8qVbrX3GGIDWH6Yh5bWRf96i80V9p2axAVgN2+ktvTgM/WUu7R20nRisaW5y2QV7ye

5yUi7OVHMgQ2nxSK6Rcp06tfYcGTlsXN5Yhm7Ll+HFqiKI9l7nii/f2cdGwEVBaWURqY

4YTg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1719023736; x=1719628536;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=9Osp83ZTCV0fEA6wK+rNdcup5jzgnMPuEgO4u5TMUrc=;

b=A+eid6d+cmo73gx2NE9Hyhs8xBzSuKxDNBj1ULHpw1yOUSYE4l4GMZQ/fjyXKOerf/

d/8LQ3SDhcb4BqGw0Vkna8uvQQlGp/yinIukvTOii01rgL2yk5tjG5OstpC/WgI8kjoC

YO2ewgI1z8aFLI03gh2FJdT4YkFpeSPtSBqqg+smQk82FTR5HvLnd+aHxa2GXb2GOnW5

VYHBbiYXTibBbVYE1k8hmjVPBS22KaruZv7BQsoDTIbEKptpg/jvZAC4p2CNIypHGa+/

cvB2eSwR4035wG3o9MoXPpMdSIk++QIunnje/XLMu/DkQjatwTWktanuz1lnHmjuNqRN

n51w==

X-Gm-Message-State: AOJu0Yz6pe1aNbjnsMOAr0DxKHf8tepss66z/H7KmwJB6gU+Db8s/iAr

k8MkUyslyGdeat9DRgBee8oVJMR6qQznpRPdb3+dK0+ch6rU4qabbF817aMte8wC4exlTCulV7s

=

X-Google-Smtp-Source: AGHT+IH0kgnkzEM0Oiyx2n6w3LHsBdNZJnYGRdOMpiTEGqgQqzGPBp7ZBFMQFlotWmE/XCd1RgOBKMdQ7A==

MIME-Version: 1.0

X-Received: by 2002:a05:6808:1585:b0:3d2:26c5:9cba with SMTP id

5614622812f47-3d51bac440emr11261739b6e.46.1719023736531; Fri, 21 Jun 2024

19:35:36 -0700 (PDT)

Message-ID:

Date: Sat, 22 Jun 2024 02:35:36 +0000

Subject: netknowyeg, Get More 1,000 Instagram Followers and 1,000 Twitter

Followers here

From: donnaphillips5575318@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

X-Spam_score: 7.0

X-Spam_score_int: 70

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi Netknow Internet Service, We are from Instasocial. We found

your Email address on your Instagram page @netknowyeg. We Offers Instagram

Followers, Likes and Views services.



Content analysis details: (7.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.70 listed in dnsbl.ahbl.org]

[209.85.161.70 listed in dnsbl.ahbl.org]

[209.85.161.70 listed in dnsbl.ahbl.org]

[209.85.161.70 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.70 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.70 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.161.70 listed in will-spam-for-food.eu.org]

[209.85.161.70 listed in will-spam-for-food.eu.org]

[209.85.161.70 listed in will-spam-for-food.eu.org]

[209.85.161.70 listed in will-spam-for-food.eu.org]

[209.85.161.70 listed in will-spam-for-food.eu.org]

[209.85.161.70 listed in will-spam-for-food.eu.org]

[209.85.161.70 listed in will-spam-for-food.eu.org]

[209.85.161.70 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.70 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.161.70 listed in list.dnswl.org]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[donnaphillips5575318(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[donnaphillips5575318(at)gmail.com]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.0 T_SCC_BODY_TEXT_LINE No description available.

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} netknowyeg, Get More 1,000 Instagram Followers and 1,000 Twitter

Followers here



Hi Netknow Internet Service,



We are from Instasocial. We found your Email address on your Instagram page

@netknowyeg.



We Offers Instagram Followers, Likes and Views services.



The price is:



-$29 USD for 1,000 Instagram Followers and

- $9 USD For Instagram Post Likes.

- $7 USD For Instagram Video Views



Now you have Limited Followers, maybe you are Interested?



Businesses often aim for a substantial follower count when launching new

products or services.

A larger audience increases the potential impact of product announcements

and promotions..



You can See all packages here :



https://bestsocialnet.site/



If you have any questions, feel free to ask them here.

I apologize if this message bothers you,





Also, We have Youtube, Tiktok and Twitter services too, Please check it now.

Thank you,

Regards,

X-rated Google Groups spam Sakai opzmek <sakaiopzmek@gmail.com> from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 22 Jun 2024 06:39:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sL00U-00000000J6N-0mw1

for dave@doctor.nl2k.ab.ca;

Sat, 22 Jun 2024 06:38:14 -0600

Resent-From: The Doctor

Resent-Date: Sat, 22 Jun 2024 06:38:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f59.google.com ([209.85.216.59]:38960)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sKvJk-000000004mb-45jB

for root@nl2k.ab.ca;

Sat, 22 Jun 2024 01:37:54 -0600

Received: by mail-pj1-f59.google.com with SMTP id 98e67ed59e1d1-2c789d8ffbbsf783097a91.0

for ; Sat, 22 Jun 2024 00:35:53 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1719041748; cv=pass;

d=google.com; s=arc-20160816;

b=piiNb4RXnNFB5P8kV9p94gaw+XWw4ODBuzPaOrREJsxtLy0ZqC13FnwGoMSds/Q5io

k5DObZ+e+ZIbtzERTYKMjLdPRUhWs+IYSZs68qb4mx7uixi+32vMXp+68QJRugD2KQiP

QfMMQBrpTl/nfR44P03D8sEKt5YJjJCWQnU2nQ34kXR48PDcSf9rPh+FzUjrE41s8dZX

IAX4Kzb231xMveTjmnyxBSfvonLRZjFJ3usic4kmVLWqU6er04C8ObM4r2rTYG5l4r7H

mdFh3lxDxahtgAR/PfvEK/ceVf+CVk/CCgKpp6Q59pnsceAT4ovlTQiJEn/oZDchD3pn

Mgeg==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature:dkim-signature;

bh=IYf559N0xidrpNLMzWYJ9UiGI5rZ9ZG6AykjVGqdyoI=;

fh=BVN3ibD2mdkTPhE8KRbtccqwakZCrPvlr2ecM4nweag=;

b=birHVA4NX/TWlmJ4ciL6ABoHiZDg5PazL+z90O8ilXzrXNAKzleO319oGVpa8nGvTb

4fNL8YvhbJzIz0U3dEbcQrdzmjlmkvG94GPiw2RjCFlh8lzL4iHCJfF0DDksur3dLupx

pUHPc0khgG0iXlYX2c5QbpAuKPxwhpeHmFGwQfLreoV7kQBZdKsmHN08ux6KQkT+whLh

rLSE1f95UtaCJ95KTjV14QXgZP+EGDvtpHYfZkESSjbtqhFMVWUi4MnFZKuy+4ZIf81q

UWpoonaXBWcbWwj6wDDNbeRXq/ZbYB6TDSKhv1Q3/HHGTLeT4MGqgzXz2rE6N3O+CxMe

hvUg==;

darn=nl2k.ab.ca

ARC-Authentication-Results: i=2; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=gvWDu4ks;

spf=pass (google.com: domain of sakaiopzmek@gmail.com designates 2607:f8b0:4864:20::d41 as permitted sender) smtp.mailfrom=sakaiopzmek@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=googlegroups.com; s=20230601; t=1719041748; x=1719646548; darn=nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=IYf559N0xidrpNLMzWYJ9UiGI5rZ9ZG6AykjVGqdyoI=;

b=Vtu3J3UxShHBvSukJaEGzCSW0TpJ5QCazN5KDVE9l8OBmtmQIF3IeVbr6LEIX/g44K

Pr0R7B5VQk9RTeIO8xad3xRo7FqnmeIRf0toYLws1mxAVQpkPcIA8BA6HkOUMNsrlFCY

bcmtnu7pX1SdgIDV7l+oL1GBon2+FefJcpfhLgSbPRYb2Tz+50emplQiSkKTZsFpXc8Z

ayY5Asl1VMkyrRiMCoPUfUQj/Xr5SLEjaJHANRyvIte/gyvrPIdHl/ZIQ7f6ZYb3X3bP

3Fm//SPGfBzVKEZO99/yIfsNhllm+MGyElqd4whci5Rz4vipvAWBIKm+strT/9UVUuBn

zcuQ==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1719041748; x=1719646548; darn=nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=IYf559N0xidrpNLMzWYJ9UiGI5rZ9ZG6AykjVGqdyoI=;

b=PzyoR9Ke441jIHYS0/Xc/4cFDajic5hnQ81XeGHWFEJNwY01GzDl06jxoG44w+f3Hm

CnEQrcSkA4uIVRhNKd0lJR/f0uUNRCjaTJ8Wp9PCzF9k3Sy+CSQVRAiIf3uRIkxpXmnh

odLOu8uj1zcr3Bz2xnthHiAgHgiDVj3X1h2BrEjTbUcaIy+LxIVwKHduHI4oo2HK3FIh

jyukhGMQcNP0CgUQuhYR0AJhDN2vtNiZLfPp0TmXgrju0TVl7sPOHmmXJZOJOCywEtpe

Vn2LhFYR2EQF6EZ/4qXAusdOn4jYPfq+3sLrUDIllnGKRDJX08Mh/JkjlK2TByUlitzm

K8wQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1719041748; x=1719646548;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-beenthere:x-gm-message-state

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=IYf559N0xidrpNLMzWYJ9UiGI5rZ9ZG6AykjVGqdyoI=;

b=L6iaVJXqnYHfsew8azGWrN8hiDxt+J3Q0TPu3v1YGhAYRdELQoOQrqUuwiE7BLrBHx

szz/qs4HUH8hrS3X/BQBPkcmumQcMAhwtAF76IdQ4S+0/5Qr+lFPYOcrYVEve0PPqBJq

29dxkx6cCJyvpRuZ23S8f/abap2x3457LU+nob9BAmd4uVMSpVqfMyKejFyJGWmlzffG

ZtgaOzlZQEObzUUrE3/RV+yP4FYJxITvOH5Yc/ODqHIdGMWx2Io8/raRKQH+xHZXuG4l

r75mykY+QtRJ94PIKe8d7CVtM1Z4efWf3uuH7BuwLiQ0q/FzprJF1e2G/lN8FtWERcdR

gTOA==

Sender: dece15-912025586@googlegroups.com

X-Forwarded-Encrypted: i=2; AJvYcCX/PxJR9vQa8dg3UnkruV2Ov4xY/vXMLlpGOK8INkW9smN1yR+kuBRS69jlv0Di+Iw+iF5KQM5gil7w+tciEXQ=

X-Gm-Message-State: AOJu0YzsLOIN4FQUnZwpgYh6nQMCEQHyLxhlFQV0XlbbwVTahfne5OYv

PQieoYLp4lDsfKgJyKnQkN0HvIg6rPQBHJRdHDt774BZCeBGS+cB

X-Google-Smtp-Source: AGHT+IGWlwOTnNkl90jKXJb4zM8niVNd9kaza2jz64VEpXsJDR2pLmYq8pvHcH6ReFczhzKwqnxa8Q==

X-Received: by 2002:a05:6a21:118e:b0:1bc:bade:ea3 with SMTP id adf61e73a8af0-1bcea5f5e55mr986250637.5.1719041747591;

Sat, 22 Jun 2024 00:35:47 -0700 (PDT)

X-BeenThere: dece15-912025586@googlegroups.com

Received: by 2002:a17:903:2303:b0:1f7:2780:7276 with SMTP id

d9443c01a7336-1f9c50e6721ls18511015ad.1.-pod-prod-02-us; Sat, 22 Jun 2024

00:35:43 -0700 (PDT)

X-Forwarded-Encrypted: i=2; AJvYcCXA0wiQPsMh+FZq6wKd3zs1dRiVf5sqfJAl7N4H7B7WgHTRUsxSCjEc9DGaIMFQdfvdFe0iDSuIfW1aJL9tzAzlB/JGuE1Yp1P2oX57q7yg7eA=

X-Received: by 2002:a17:902:a3c7:b0:1fa:18aa:b0af with SMTP id d9443c01a7336-1fa18aab256mr938145ad.27.1719041743280;

Sat, 22 Jun 2024 00:35:43 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1719041743; cv=none;

d=google.com; s=arc-20160816;

b=jZSqQakv2rSAB4saGsERuGxVYDql+AjuMNZ1knmL6OA/s0q8+O9U6QRLeows3zVPFZ

gbcpBx3zV8Bn7MDi0HW6pgaaOiztY6rl6ZbWlOQEgI6cYDsPZScZAzCmgAtrJJJ6o0Io

tHe2gR/3rgf7t6ees+UJ6Es08jG+a8UUmxa3ZgqWgg0ndHfIBGAt26VhX9ZX/jlV1dck

GBXnz27FNwq8dWcZRWF8AEBdUFkGYQrcjW9U+PT6uTfcRUBxed58FnlXr7ZBJEe+hhdK

aG5tpnaqTsR+qryYJuuoCL1ygPU68af2FzAQlK4jTEOyp8E8qMIQDG45oYu/I3ogBGIB

jvfw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=MDCG/b3Gp38BzsBueq6QkxEny6ZSXU4m/b0l7qUD2p8=;

fh=D5KCSsaYWC8lsDTcKpKTv/TonjPlQ92XRzdK8CvAk/w=;

b=gSAWYz8NWiIzGH1gUDFedEgvQM5R5GuFpiUAWrALTMtDZdckUhzVDc9d/vJWckVtrb

ne5Im1h5Ivu0qmzp7eCEXQ7OSUyxlKPBWpHDBpODHkpGkuMzEb9myd6hmx5mx9M9H5EG

184HY9pqt8yDTzTu/xMyGwpSmo6FVCz/u+BFoIKqNvI9Ge1td7/a/40WhluGh7vrl+xx

SMEhc9Ax+mWn+V0OkL3cbel9H7RcRgz1slafyx2TUruBsEzZ73mt0gGH6183HUTlipp4

ExIPuzuF/iIH5Vak1yapk25q9GiPbpo0vORI4haCSL9KgS3Y35mj1PsRsWFb6EpFhv+G

HvRw==;

dara=google.com

ARC-Authentication-Results: i=1; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=gvWDu4ks;

spf=pass (google.com: domain of sakaiopzmek@gmail.com designates 2607:f8b0:4864:20::d41 as permitted sender) smtp.mailfrom=sakaiopzmek@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Received: from mail-io1-xd41.google.com (mail-io1-xd41.google.com. [2607:f8b0:4864:20::d41])

by gmr-mx.google.com with ESMTPS id d9443c01a7336-1f9ec81a333si1192745ad.10.2024.06.22.00.35.43

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Sat, 22 Jun 2024 00:35:43 -0700 (PDT)

Received-SPF: pass (google.com: domain of sakaiopzmek@gmail.com designates 2607:f8b0:4864:20::d41 as permitted sender) client-ip=2607:f8b0:4864:20::d41;

Received: by mail-io1-xd41.google.com with SMTP id ca18e2360f4ac-7ec07f4170bso109874639f.0;

Sat, 22 Jun 2024 00:35:43 -0700 (PDT)

X-Forwarded-Encrypted: i=1; AJvYcCWUX+EbVOFAbn0Rb6Ko4sLlWvUqIE+xtIm3mY3gBY6YGGYz+2WqWJ6K8voySHLgfyqkWvQ6mZxZGgGbYh86xv+9CBJ5R1Dl9MqeDzR2zktyBFN/ZY5Y8mYKw7gaSySzNuCOXRU1oPlnATRiE2BRqOoXHNga5EuNRHvBaG37MhOdzg6rKcL/fcgxksm2unHKBYrVDMaV3ug0OB74S2vkW5ExosmCNmPDonpnr8IBgVOP/Tz/vugmHaWmwSzD7l4R7F30JencPS5OwNa+NVEMpL22cjvTFzWIDaSPJM7QU5oC5lC74nw+2p1xoK9rFuEAxEibNiPOuRgKJhIA0Yc4PqU2cNnmpteuFCrKaOg7MDwThXB5YxH+LcL1iqRJd1Ue5NtJj1yX85biqvnthYrQE7ANlT+KqqR4WksQS8oFBgx9M9yTITmuHdkZGpZGlQVbzghYjKll4DfnZn/QbU3YdDMXbUAUF27Jwp7+

X-Received: by 2002:a05:6602:6c10:b0:7eb:7f2e:5b3a with SMTP id

ca18e2360f4ac-7f13edb2453mr1275824839f.2.1719041742113; Sat, 22 Jun 2024

00:35:42 -0700 (PDT)

MIME-Version: 1.0

From: Sakai opzmek

Date: Sat, 22 Jun 2024 13:35:30 +0600

Message-ID:

Subject: Craigslist alternative sites

To: dece15-912016917@googlegroups.com, dece15-912017260@googlegroups.com,

dece15-912020230@googlegroups.com, dece15-912020772@googlegroups.com,

dece15-912025199@googlegroups.com, dece15-912025586@googlegroups.com,

dece15-912027665@googlegroups.com, dece15-912027821@googlegroups.com,

dece15-912028234@googlegroups.com, dece15-912031641@googlegroups.com

Content-Type: multipart/alternative; boundary="000000000000649464061b7598f4"

X-Original-Sender: sakaiopzmek@gmail.com

X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass

header.i=@gmail.com header.s=20230601 header.b=gvWDu4ks; spf=pass

(google.com: domain of sakaiopzmek@gmail.com designates 2607:f8b0:4864:20::d41

as permitted sender) smtp.mailfrom=sakaiopzmek@gmail.com; dmarc=pass

(p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Precedence: list

Mailing-list: list dece15-912025586@googlegroups.com; contact dece15-912025586+owners@googlegroups.com

List-ID:

X-Spam-Checked-In-Group: dece15-912025586@googlegroups.com

X-Google-Group-Id: 745700075957

List-Post: ,

List-Help: ,

List-Archive:
List-Unsubscribe: ,



X-Spam_score: 9.0

X-Spam_score_int: 90

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: We have already 12,500 active female members from your state.

Details >>> https://sites.google.com/view/wsqq37 No need cc



Content analysis details: (9.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:d41 listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:d41 listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:d41 listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:d41 listed in]

[dnsbl.ahbl.org]

[209.85.216.59 listed in dnsbl.ahbl.org]

[209.85.216.59 listed in dnsbl.ahbl.org]

[209.85.216.59 listed in dnsbl.ahbl.org]

[209.85.216.59 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:d41 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:d41 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:d41 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:d41 listed in]

[dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2607:f8b0:4864:20:0:0:0:d41 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:d41 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:d41 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:d41 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:d41 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:d41 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:d41 listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:d41 listed in]

[will-spam-for-food.eu.org]

[209.85.216.59 listed in will-spam-for-food.eu.org]

[209.85.216.59 listed in will-spam-for-food.eu.org]

[209.85.216.59 listed in will-spam-for-food.eu.org]

[209.85.216.59 listed in will-spam-for-food.eu.org]

[209.85.216.59 listed in will-spam-for-food.eu.org]

[209.85.216.59 listed in will-spam-for-food.eu.org]

[209.85.216.59 listed in will-spam-for-food.eu.org]

[209.85.216.59 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.59 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.59 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.5 SORTED_RECIPS Recipient list is sorted by address

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[sakaiopzmek(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

-0.0 T_SCC_BODY_TEXT_LINE No description available.

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

Subject: {SPAM?} Craigslist alternative sites



--000000000000649464061b7598f4

Content-Type: text/plain; charset="UTF-8"



We have already 12,500 active female members from your state.

Details ----------->>>

https://sites.google.com/view/wsqq37



No need cc







































-------------



--

You received this message because you are subscribed to the Google Groups "Dece15-912025586" group.

To unsubscribe from this group and stop receiving emails from it, send an email to dece15-912025586+unsubscribe@googlegroups.com.

To view this discussion on the web, visit https://groups.google.com/d/msgid/dece15-912025586/CAK-Gf2CrzEb%3D38fx0JDYutfCNzM33Dbo%3DhKVpy7oJ2q0H1y7eg%40mail.gmail.com.



--000000000000649464061b7598f4

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



We have already 12,500 active female members from your sta=

te.
Details ----------->>>

om/view/wsqq37">https://sites.google.com/view/wsqq37


No need cc<=

br>=C2=A0
















r>

-------------








--


You received this message because you are subscribed to the Google Groups &=

quot;Dece15-912025586" group.


To unsubscribe from this group and stop receiving emails from it, send an e=

mail to de=

ce15-912025586+unsubscribe@googlegroups.com
.


To view this discussion on the web, visit
com/d/msgid/dece15-912025586/CAK-Gf2CrzEb%3D38fx0JDYutfCNzM33Dbo%3DhKVpy7oJ=

2q0H1y7eg%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https://=

groups.google.com/d/msgid/dece15-912025586/CAK-Gf2CrzEb%3D38fx0JDYutfCNzM33=

Dbo%3DhKVpy7oJ2q0H1y7eg%40mail.gmail.com
.




--000000000000649464061b7598f4--

Nigerian Spam from Microsoft outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 21 Jun 2024 18:43:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sKoqA-00000000AMv-0Kbw

for dave@doctor.nl2k.ab.ca;

Fri, 21 Jun 2024 18:42:50 -0600

Resent-From: The Doctor

Resent-Date: Fri, 21 Jun 2024 18:42:50 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from email.novoair-bd.com ([118.67.215.167]:44896)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sKnTA-00000000Nc8-1W38

for sales@nk.ca;

Fri, 21 Jun 2024 17:15:08 -0600

Received: from MAIL.novoair-bd.com (172.16.16.17) by mail.novoair-bd.com

(172.16.16.17) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.2507.6; Sat, 22 Jun

2024 05:10:25 +0600

Received: from MAIL.novoair-bd.com ([20.20.100.8]) by mail.novoair-bd.com

([20.20.100.8]) with mapi id 15.01.2507.006; Sat, 22 Jun 2024 05:10:25 +0600

From: ZYL APT GS

Subject: I need your assistance:

Thread-Topic: I need your assistance:

Thread-Index: AdrEMDJlWdPZDKEbw0OOwVn8SoKpZw==

Date: Fri, 21 Jun 2024 23:10:24 +0000

Message-ID: <0e6a179c78674e059163e7ed1f0b3ba2@flynovoair.com>

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [154.113.117.190]

Content-Type: multipart/alternative;

boundary="_000_0e6a179c78674e059163e7ed1f0b3ba2flynovoaircom_"

MIME-Version: 1.0

X-Spam_score: 14.0

X-Spam_score_int: 140

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello my Friend, Please understand Your assistance is needed

for a transaction that worth (US$8,370,000.00). Reply me if interested for

more details. Please note all your responses or reply should be [...]



Content analysis details: (14.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[118.67.215.167 listed in dnsbl.ahbl.org]

[118.67.215.167 listed in dnsbl.ahbl.org]

[118.67.215.167 listed in dnsbl.ahbl.org]

[118.67.215.167 listed in dnsbl.ahbl.org]

[154.113.117.190 listed in dnsbl.ahbl.org]

[154.113.117.190 listed in dnsbl.ahbl.org]

[154.113.117.190 listed in dnsbl.ahbl.org]

[154.113.117.190 listed in dnsbl.ahbl.org]

[20.20.100.8 listed in dnsbl.ahbl.org]

[20.20.100.8 listed in dnsbl.ahbl.org]

[20.20.100.8 listed in dnsbl.ahbl.org]

[20.20.100.8 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[118.67.215.167 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[118.67.215.167 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[118.67.215.167 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[118.67.215.167 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[154.113.117.190 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[154.113.117.190 listed in zen.spamhaus.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[154.113.117.190 listed in will-spam-for-food.eu.org]

[154.113.117.190 listed in will-spam-for-food.eu.org]

[154.113.117.190 listed in will-spam-for-food.eu.org]

[154.113.117.190 listed in will-spam-for-food.eu.org]

[154.113.117.190 listed in will-spam-for-food.eu.org]

[154.113.117.190 listed in will-spam-for-food.eu.org]

[154.113.117.190 listed in will-spam-for-food.eu.org]

[154.113.117.190 listed in will-spam-for-food.eu.org]

[20.20.100.8 listed in will-spam-for-food.eu.org]

[20.20.100.8 listed in will-spam-for-food.eu.org]

[20.20.100.8 listed in will-spam-for-food.eu.org]

[20.20.100.8 listed in will-spam-for-food.eu.org]

[20.20.100.8 listed in will-spam-for-food.eu.org]

[20.20.100.8 listed in will-spam-for-food.eu.org]

[20.20.100.8 listed in will-spam-for-food.eu.org]

[20.20.100.8 listed in will-spam-for-food.eu.org]

[118.67.215.167 listed in will-spam-for-food.eu.org]

[118.67.215.167 listed in will-spam-for-food.eu.org]

[118.67.215.167 listed in will-spam-for-food.eu.org]

[118.67.215.167 listed in will-spam-for-food.eu.org]

[118.67.215.167 listed in will-spam-for-food.eu.org]

[118.67.215.167 listed in will-spam-for-food.eu.org]

[118.67.215.167 listed in will-spam-for-food.eu.org]

[118.67.215.167 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.2 MISSING_HEADERS Missing To: header

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

Subject: {SPAM?} I need your assistance:



--_000_0e6a179c78674e059163e7ed1f0b3ba2flynovoaircom_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hello my Friend, Please understand Your assistance is needed for a transact=

ion that worth (US$8,370,000.00).

Reply me if interested for more details.

Please note all your responses or reply should be send to my private Email =

address only at: 10xiangli@gmail.com

I await your responses.



--_000_0e6a179c78674e059163e7ed1f0b3ba2flynovoaircom_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




>











Hello my Friend, Please understand Your assistanc=

e is needed for a transaction that worth (US$8,370,000.00).
<=

/p>

Reply me if interested for more details.
:p>



Please note all your responses or reply should be=

send to my private Email address only at: 10xiangli@gmail.com
b>



I await your responses.











--_000_0e6a179c78674e059163e7ed1f0b3ba2flynovoaircom_--

DHL Phish from Los Angeles

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 21 Jun 2024 20:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sKqQw-00000000BiY-3CAz

for dave@doctor.nl2k.ab.ca;

Fri, 21 Jun 2024 20:24:54 -0600

Resent-From: The Doctor

Resent-Date: Fri, 21 Jun 2024 20:24:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from server.extrutech.in ([74.48.165.76]:44361)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sKq7e-000000008qJ-2QBJ

for doctor@nl2k.ab.ca;

Fri, 21 Jun 2024 20:05:03 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=asdzxcv; d=extrutech.in;

h=To:Subject:Message-ID:Date:From:Reply-To:MIME-Version:List-Unsubscribe:

Content-Type:Content-Transfer-Encoding; i=admin@extrutech.in;

bh=xdFrijTVQRmAYuR1P5votg7qlL5hrPcKMNF+hbuVA3s=;

b=pjm8PZFjje5vUfsTHFPC8T2rOYOs5WCWnIuYag+zN6qnX/CNomh1bIE7A54tOhkbid4Ek+yiNWBn

GbliG8ZKOCSj50pOD20azb2NMu3BFMCJhbWpaNnALnKHBUk62WjvOFHUpp14FidZ/Qy63qqR+/n2

kUTk9ssNXwSE6ofls/Y=

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=asdzxcv; d=extrutech.in;

h=To:Subject:Message-ID:Date:From:Reply-To:MIME-Version:List-Unsubscribe:

Content-Type:Content-Transfer-Encoding; i=admin@extrutech.in;

bh=xdFrijTVQRmAYuR1P5votg7qlL5hrPcKMNF+hbuVA3s=;

b=pjm8PZFjje5vUfsTHFPC8T2rOYOs5WCWnIuYag+zN6qnX/CNomh1bIE7A54tOhkbid4Ek+yiNWBn

GbliG8ZKOCSj50pOD20azb2NMu3BFMCJhbWpaNnALnKHBUk62WjvOFHUpp14FidZ/Qy63qqR+/n2

kUTk9ssNXwSE6ofls/Y=

To: doctor@nl2k.ab.ca

Subject: =?UTF-8?B?d2UgYXJlIHdvcmtpbmcgaGFyZCBpbiBvcmRlciB0byByZWNlaXZlIHlvdXIgcGFja2FnZSBOwrA5NTE0OTAxOTg1NzIwMTI=?=

Message-ID: <92ef66cd4b456a38fc859b7dea739fa5@server.extrutech.in>

Date: Sat, 22 Jun 2024 04:31:24 +0530

From: "Support DHL"

Reply-To: admin@extrutech.in

MIME-Version: 1.0

X-Mailer-LID: 32

List-Unsubscribe:

X-Mailer-RecptId: 1048238

X-Mailer-SID: 91

X-Abuse-Reports-To:abuse@bakemoon.net

X-Mailer-Sent-By: 1

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: 8bit

X-Spam_score: 48.5

X-Spam_score_int: 485

X-Spam_bar: ++++++++++++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Package Delivery Dear customer,



Content analysis details: (48.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.48.165.76 listed in dnsbl.ahbl.org]

[74.48.165.76 listed in dnsbl.ahbl.org]

[74.48.165.76 listed in dnsbl.ahbl.org]

[74.48.165.76 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.48.165.76 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.48.165.76 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.48.165.76 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.48.165.76 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.48.165.76 listed in will-spam-for-food.eu.org]

[74.48.165.76 listed in will-spam-for-food.eu.org]

[74.48.165.76 listed in will-spam-for-food.eu.org]

[74.48.165.76 listed in will-spam-for-food.eu.org]

[74.48.165.76 listed in will-spam-for-food.eu.org]

[74.48.165.76 listed in will-spam-for-food.eu.org]

[74.48.165.76 listed in will-spam-for-food.eu.org]

[74.48.165.76 listed in will-spam-for-food.eu.org]

4.5 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist

[URI: extrutech.in]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_EMARKE3 Header from spammer tool signature (emarke)

15 GR_DOMAIN_CAMN20 Spammer tool signature (camn)

1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_IMAGE_RATIO_06 BODY: HTML has a low ratio of text to image area

-0.0 T_SCC_BODY_TEXT_LINE No description available.

2.3 XM_RECPTID Has spammy message header

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} =?UTF-8?B?d2UgYXJlIHdvcmtpbmcgaGFyZCBpbiBvcmRlciB0byByZWNlaXZlIHlvdXIgcGFja2FnZSBOwrA5NTE0OTAxOTg1NzIwMTI=?=










height="558" width="827" id="bodyTable">
















class="templateContainer">


















src="https://www.dhlexpress.be/wp-content/uploads/2017/02/dhl-logo.png"

width="578" height="81" />


class="mcnTextBlock" style="min-width: 100%;">
















class="mcnTextBlock" style="min-width: 100%;">


















/>



















class="mcnTextBlock" style="min-width: 100%;">














style="max-width: 100%; min-width: 100%;" width="679"

class="mcnTextContentContainer" height="303">














grande="" sans="" unicode="" tahoma="" sans-serif="">Package

Delivery




sans-serif="">
unicode="" tahoma="" sans-serif="">
Dear

customer,


Please note that we are working hard in

order to receive your package  

href="https://server.extrutech.in/link.php?M=1048238&N=91&L=25&F=H"

target="IuTi_UHgbLHlyLzaA-RmPcy" rel="noopener

noreferrer">N°951490198572012  at the

estimated time.


Therefore you have to complete some

instructions.



Fees to

pay:  
1.99$










class="mcnButtonBlock" style="min-width: 100%;">












class="mcnButtonBlockInner">


class="mcnButtonContentContainer" style="border-collapse: separate

!important; border-radius: 10px; background-color: #ffcc01;">












style="font-family: Arial; font-size: 18px; padding: 15px;">
class="mcnButton " title="Renew your billing"

href="https://server.extrutech.in/link.php?M=1048238&N=91&L=55&F=H"

target="_blank" style="font-weight: bold; letter-spacing: normal;

line-height: 100%; text-align: center; text-decoration: none; color:

#d60411;">Send my package







class="mcnDividerBlock" style="min-width: 100%;">














width="100%" style="min-width: 100%; border-top: 0px solid #EEEEEE;">
















class="mcnTextBlock" style="min-width: 100%;">














style="max-width: 100%; min-width: 100%;" width="100%"

class="mcnTextContentContainer">




























src="https://server.extrutech.in/open.php?M=1048238&L=32&N=91&F=H&image=.jpg"

height="1" width="10">

href="https://server.extrutech.in/unsubscribe.php?M=1048238&C=464f0bc6be967a2516c6465283295cb4&L=32&N=91">Click

here to unsubscribe