UPS Phish from sendgrid

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Jul 2024 12:04:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSKc7-00000000Jz9-19kE

for dave@doctor.nl2k.ab.ca;

Fri, 12 Jul 2024 12:03:23 -0600

Resent-From: The Doctor

Resent-Date: Fri, 12 Jul 2024 12:03:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wfbtzhss.outbound-mail.sendgrid.net ([159.183.224.102]:27902)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSJGf-000000008Lc-2C5e

for root@nl2k.ab.ca;

Fri, 12 Jul 2024 10:37:14 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alaiko.com;

h=from:subject:mime-version:to:content-type:content-transfer-encoding:

cc:content-type:from:subject:to;

s=s1; bh=QqUlVcmrAxFNDL2xU92jZvr//mQtVEyLJHIKzc6WoWU=;

b=USB+Nuffau+aORXLvwaXdA98Z4aTx3Ibvmn7Jejo+FuS1PWL2Db5BZ1Fh7csBgJm3Dho

+gwXOoKuu8RVHomg/Tvizk+hkigJ5Uc9nX3wgm/ycJZx7WYoYylx+hi+plLyfoXaJBbdIJ

aecmcELuqYkFNh2qoUiMp0McJ79PsDF+NKfb0RoHEDJC1TxhdG7WcAJEy9F0g9fa4NOAOl

PMfHp0yRm8BIBI9H5Nbai9OB8OoKwHRkD6VCkMvJFsqS84IQrhb4Ch263vsnXIFDAQVUjy

/d4eFkW7TtNxvVwCrRRrFr5IUXc+IjU+YCUvDPDYtxONrcwP2Ked6I+lW9sIleSw==

Received: by recvd-6db8b86b6c-fkz5t with SMTP id recvd-6db8b86b6c-fkz5t-1-66915B3B-8F

2024-07-12 16:35:07.753680465 +0000 UTC m=+1293582.122527308

Received: from [127.0.0.1] (unknown)

by geopod-ismtpd-10 (SG) with ESMTP

id QZGv5clTSwWvJRwO1ak6CA

for ;

Fri, 12 Jul 2024 16:35:07.696 +0000 (UTC)

From: UPS

Subject: Deine Bestellung wird verschickt

Message-ID: <201d71fbc740b078ff565fc3b3eeb958@alaiko.com>

MIME-Version: 1.0

Date: Fri, 12 Jul 2024 16:35:07 +0000 (UTC)

X-SG-EID:

=?us-ascii?Q?u001=2EGdr5us7BlGEJ8PGTF6wYXjwdNl5thnWRxqZdU9k+za1lIp1qXfuFLgtYP?=

=?us-ascii?Q?fdvzU9vRmoBF=2FNF33N4VmWQFWAHYgGwHCZErufw?=

=?us-ascii?Q?WuqD4cCiUk40uU4S5JHNzlw0m3GfYKsE8nn+TwZ?=

=?us-ascii?Q?UizRtOXr9Enl=2FZDzTF3iEuVuCLRzvqSz+9IhVvq?=

=?us-ascii?Q?wDixf2GDlgu+UUxdUtnozm0HSPDhd2XPbLAPcI6?=

=?us-ascii?Q?kvIelxssp1AUa+svyRgG+A=3D?=

To: root@nl2k.ab.ca

X-Entity-ID: u001.XGAkTjREh7iNWAYmSHQEKA==

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 20.8

X-Spam_score_int: 208

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear customer, We regret to inform you that due to an incorrect

shipping address,



Content analysis details: (20.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[159.183.224.102 listed in dnsbl.ahbl.org]

[159.183.224.102 listed in dnsbl.ahbl.org]

[159.183.224.102 listed in dnsbl.ahbl.org]

[159.183.224.102 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[159.183.224.102 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[159.183.224.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[159.183.224.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[159.183.224.102 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

[159.183.224.102 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[159.183.224.102 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

Subject: {SPAM?} Deine Bestellung wird verschickt
















-asian: inherit; font-variant-alternates: inherit; font-variant-position: i=

nherit; font-stretch: inherit; font-size: 15px; line-height: inherit; font-=

family: "Segoe UI", "Segoe UI Web (West European)", &qu=

ot;Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helveti=

ca Neue", sans-serif; font-optical-sizing: inherit; font-kerning: inhe=

rit; font-feature-settings: inherit; font-variation-settings: inherit; marg=

in: 0px; padding: 0px; vertical-align: baseline; color: rgb(36, 36, 36); ba=

ckground-color: rgb(255, 255, 255);">3D""
.net/up/22/37/z5sc.png" style=3D"width: 200px; height: 113px;" />





-asian: inherit; font-variant-alternates: inherit; font-variant-position: i=

nherit; font-stretch: inherit; font-size: 15px; line-height: inherit; font-=

family: "Segoe UI", "Segoe UI Web (West European)", &qu=

ot;Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helveti=

ca Neue", sans-serif; font-optical-sizing: inherit; font-kerning: inhe=

rit; font-feature-settings: inherit; font-variation-settings: inherit; marg=

in: 0px; padding: 0px; vertical-align: baseline; color: rgb(36, 36, 36); ba=

ckground-color: rgb(255, 255, 255);">
if;">Dear customer,





-asian: inherit; font-variant-alternates: inherit; font-variant-position: i=

nherit; font-stretch: inherit; font-size: 15px; line-height: inherit; font-=

family: "Segoe UI", "Segoe UI Web (West European)", &qu=

ot;Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helveti=

ca Neue", sans-serif; font-optical-sizing: inherit; font-kerning: inhe=

rit; font-feature-settings: inherit; font-variation-settings: inherit; marg=

in: 0px; padding: 0px; vertical-align: baseline; color: rgb(36, 36, 36); ba=

ckground-color: rgb(255, 255, 255);">

We regret to inform you that =

due to an incorrect shipping address,





Your package number #
yle=3D"font-family:arial,helvetica,sans-serif;">3543540
=3D"font-family:arial,helvetica,sans-serif;"> is waiting to be proce=

ssed at our facility.





To ensure on-time delivery, w=

e ask that you update your shipping address as soon as possible using the s=

ecure link below:






VJOq6p2d6-2FJyioXBntlkkprxOetBDy-2Fqyyk4vUAwY8-2Bq0bT-2BLbCmbElSEiCB4kV3EUO=

5U3jmmEVXC8xZIjmAd1pCIsfTL9ia7kcW5bbebHGdv4G-2FWFQ9MhG_YmNPztx4miJCrnDYqcF7=

jRhOx4gA-2BABsH4qaymACKSmTrUfqkp8sHUoy6KCct0-2BNRSwJCqlPp8FcQOyVGl6ay8ErN5-=

2FeUC3uhqTbSe-2FFnC62ZbmzdX2ULd9glCI8t4ylrw9pI2Sz88GKXVEPiPnAqC-2BfEek8w8ky=

-2BBAR-2FTy4rbYroJsdRBjV3PMtqb5ZkLJ5DJAX0epvApZYczK-2F1sErTQ-3D-3D">
tyle=3D"font-family:georgia,serif;">update my address





 






;">Once your shipping address is updated, we will process your package and =

provide you with all associated tracking information.






;">If you have any questions or problems with your package, please don'=

t hesitate to contact us.






;">Thank you for choosing our service.






;">yours sincerely,








=

©2024 U=

PS. The content of this message is protected by copyright and trademark law=

s under United States and international laws.






h8zbjtok-2FCtl-2F2wNQnu2TxchPxjN3dfIpFh-2FgKbqGCp4-2BHwRQx-2BNnLRrZeuid1LGz=

DF3zWAwr88BE14-2FiGv8Kt6Y3foELovrWyQKfb2W1dh-2BDkLzLToyeEv6bOzz8askqTFemHpq=

uWqCOK33lcC6g1bimry5fXWr5XN2mNmCbX3rGtJrILBcGf0k7QO1JOHXTkdg-3D-3D" alt=3D"=

" width=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !important;widt=

h:1px !important;border-width:0 !important;margin-top:0 !important;margin-b=

ottom:0 !important;margin-right:0 !important;margin-left:0 !important;paddi=

ng-top:0 !important;padding-bottom:0 !important;padding-right:0 !important;=

padding-left:0 !important;"/>

UPS Phish from sendgrid

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Jul 2024 12:04:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSKcB-00000000Jzt-1FUe

for dave@doctor.nl2k.ab.ca;

Fri, 12 Jul 2024 12:03:27 -0600

Resent-From: The Doctor

Resent-Date: Fri, 12 Jul 2024 12:03:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.xtrwkqxb.outbound-mail.sendgrid.net ([167.89.20.171]:51496)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSJGh-000000008Lr-0zY1

for root@nl2k.ab.ca;

Fri, 12 Jul 2024 10:37:15 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alaiko.com;

h=from:subject:mime-version:to:content-type:content-transfer-encoding:

cc:content-type:from:subject:to;

s=s1; bh=YVp7t719ZGfW6UlAnIXS9PG74guIE4F4ffakxMFuMSU=;

b=FQC6akBbKevppv9iZso/lTsF1Lwp80iCaYsmH0ZrFn7hSSgn10a5Z+j1O2dGdMqpetyB

a7JB3/+vK81jl2s93xUhT/GNmj93bVjbEkB54jnsrUU5Cf4UrlYLwaQNxSSD1bPSBcxIFq

rgc4tuAe+x5l8h8/w/tJQD6T24ZBKpWdujld+dGl65w8ZCBaViSyX/PRsySuuo6GcmYpFW

rCE27nacZnh1dTwwvubVwnvvW/iJ2rsys43mV7aaEIjd7WdYU7cJ+HtkQ9/2/s3Aaoav18

i1Q2umx/C/f754KSJNbqOXnQrymsvWIWPpZFUwBJsi1/nBPZn2JaHVyzKvvR6kqQ==

Received: by recvd-f549d465d-wplm9 with SMTP id recvd-f549d465d-wplm9-1-66915B3E-6C

2024-07-12 16:35:10.711532244 +0000 UTC m=+1293833.768818510

Received: from [127.0.0.1] (unknown)

by geopod-ismtpd-10 (SG) with ESMTP

id SqrTv4N0TSa_5mV1Ztspig

for ;

Fri, 12 Jul 2024 16:35:10.593 +0000 (UTC)

From: UPS

Subject: Your order gets shipped

Message-ID:

MIME-Version: 1.0

Date: Fri, 12 Jul 2024 16:35:10 +0000 (UTC)

X-SG-EID:

=?us-ascii?Q?u001=2EGdr5us7BlGEJ8PGTF6wYXjwdNl5thnWRxqZdU9k+za1lIp1qXfuFLgtYP?=

=?us-ascii?Q?fdvzU9vwDbWbVIBy7Gb+Wl2mGag27t+fx20txux?=

=?us-ascii?Q?9AuiDPJcP1sdN+NT2RyqwZvXAwb12NVth5=2FXpfz?=

=?us-ascii?Q?ljsL5oH+Rk6UinNY1GFhIEdi9ClKgp4zs2IMoSp?=

=?us-ascii?Q?XrcgcanZeIIagfvpT3F0hCj3xNxZOewbIcWvHKD?=

=?us-ascii?Q?yR+j4Tf7mxUcKGtsV4elTY=3D?=

To: root@nl2k.ab.ca

X-Entity-ID: u001.XGAkTjREh7iNWAYmSHQEKA==

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 20.8

X-Spam_score_int: 208

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear customer, We regret to inform you that due to an incorrect

shipping address,



Content analysis details: (20.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

[167.89.20.171 listed in dnsbl.ahbl.org]

[167.89.20.171 listed in dnsbl.ahbl.org]

[167.89.20.171 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[167.89.20.171 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

Subject: {SPAM?} Your order gets shipped
















-asian: inherit; font-variant-alternates: inherit; font-variant-position: i=

nherit; font-stretch: inherit; font-size: 15px; line-height: inherit; font-=

family: "Segoe UI", "Segoe UI Web (West European)", &qu=

ot;Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helveti=

ca Neue", sans-serif; font-optical-sizing: inherit; font-kerning: inhe=

rit; font-feature-settings: inherit; font-variation-settings: inherit; marg=

in: 0px; padding: 0px; vertical-align: baseline; color: rgb(36, 36, 36); ba=

ckground-color: rgb(255, 255, 255);">3D""
.net/up/22/37/z5sc.png" style=3D"width: 200px; height: 113px;" />





-asian: inherit; font-variant-alternates: inherit; font-variant-position: i=

nherit; font-stretch: inherit; font-size: 15px; line-height: inherit; font-=

family: "Segoe UI", "Segoe UI Web (West European)", &qu=

ot;Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helveti=

ca Neue", sans-serif; font-optical-sizing: inherit; font-kerning: inhe=

rit; font-feature-settings: inherit; font-variation-settings: inherit; marg=

in: 0px; padding: 0px; vertical-align: baseline; color: rgb(36, 36, 36); ba=

ckground-color: rgb(255, 255, 255);">
if;">Dear customer,





-asian: inherit; font-variant-alternates: inherit; font-variant-position: i=

nherit; font-stretch: inherit; font-size: 15px; line-height: inherit; font-=

family: "Segoe UI", "Segoe UI Web (West European)", &qu=

ot;Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helveti=

ca Neue", sans-serif; font-optical-sizing: inherit; font-kerning: inhe=

rit; font-feature-settings: inherit; font-variation-settings: inherit; marg=

in: 0px; padding: 0px; vertical-align: baseline; color: rgb(36, 36, 36); ba=

ckground-color: rgb(255, 255, 255);">

We regret to inform you that =

due to an incorrect shipping address,





Your package number #
yle=3D"font-family:arial,helvetica,sans-serif;">3543540
=3D"font-family:arial,helvetica,sans-serif;"> is waiting to be proce=

ssed at our facility.





To ensure on-time delivery, w=

e ask that you update your shipping address as soon as possible using the s=

ecure link below:






VJOq6p2d6-2FJyioXBntlkkprxOetBDy-2Fqyyk4vUAwY8-2Bq0bT-2BLbCmbElSEiCB4kV3EUO=

5U3jmmEVXC8xZIjmAd1pCIsfTL9ia7kcW5bbebHGdv4G-2FWFQTR8e_YmNPztx4miJCrnDYqcF7=

jRhOx4gA-2BABsH4qaymACKSlhIu8BUfvLwx4yRxy1dlV-2BMKi9Jj-2F68dO3auirz2oDGOUtn=

sqOF4b-2Bm0CsjNBChtS23dkRt5OwFAhRB-2FpO7-2F5DgzJEKQPC-2FTAfJGXTIDVPRzbyzZbu=

9zGtUMb5y2KcTUlLR-2FFjdgwA6LqCkya-2FVnWs8x4IvZL-2FX9flYzpsfDBtrg-3D-3D">
an style=3D"font-family:georgia,serif;">update my address





 






;">Once your shipping address is updated, we will process your package and =

provide you with all associated tracking information.






;">If you have any questions or problems with your package, please don'=

t hesitate to contact us.






;">Thank you for choosing our service.






;">yours sincerely,








=

©2024 U=

PS. The content of this message is protected by copyright and trademark law=

s under United States and international laws.






h8zbjtok-2FCtl-2F2wNQnu2TxchP9kmHDKKsAGl3mVki1oyB1v95ksyjP02anf5a-2B8vDqpnd=

KYSAtkZEK4ZMYbRE29-2B4tg-2BuJvUbCVNkhF2XomJRVYUhG-2FdvVO8r0-2BAhEE-2BWXCUQ9=

-2B8h5KiHF0vUa5h6w05-2BC2G4pYFNuetwRgbItLT8hTAX0NxD3f8rPt5k3H0Pvmw-3D-3D" a=

lt=3D"" width=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !importan=

t;width:1px !important;border-width:0 !important;margin-top:0 !important;ma=

rgin-bottom:0 !important;margin-right:0 !important;margin-left:0 !important=

;padding-top:0 !important;padding-bottom:0 !important;padding-right:0 !impo=

rtant;padding-left:0 !important;"/>

UPS Phish from sendgirid

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Jul 2024 12:04:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSKcI-00000000K1N-3i8S

for dave@doctor.nl2k.ab.ca;

Fri, 12 Jul 2024 12:03:34 -0600

Resent-From: The Doctor

Resent-Date: Fri, 12 Jul 2024 12:03:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.xtrwkqxb.outbound-mail.sendgrid.net ([167.89.20.171]:44176)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSJYJ-00000000AjV-2Skd

for root@doctor.nl2k.ab.ca;

Fri, 12 Jul 2024 10:55:28 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alaiko.com;

h=from:subject:mime-version:to:content-type:content-transfer-encoding:

cc:content-type:from:subject:to;

s=s1; bh=k1NU5cJ6G8TjpZwdV0phokSmL5dVtq3AsGr7/o54aKY=;

b=b8lOeJaLvM49U7hpKh1upyRbIuPeTV9E54kOioyiJ1TYTsLfuO224RJ3rjiz94AEUmCU

FL1NYlyOs6bVCJaA9NZT/WVfxKVgKULLfI/uCBKGw5GxUxhBjNqIj5SrXOixLmoLKfRP0z

TU3YUNwhVdvsZu7hI55oPuFTY4n4dBljlo8SiW8TozO/BBP66+KJwWFhfFzmsWintR6Juz

XCAM5AV+pLFuy6XUv/gzBDHUJy8ist9jqeGa1iIQwCpkgheT3gbmhSisA0KXfOv6MxzbCy

nsYymB0zBJs5kPfAvHrlQcgDExUqmUCOwyyzjlJuFERfkHm4q/fkSJajyHXzCGaA==

Received: by recvd-75d57cd4b8-rw8gr with SMTP id recvd-75d57cd4b8-rw8gr-1-66915F83-47

2024-07-12 16:53:23.758951789 +0000 UTC m=+1295099.443951438

Received: from [127.0.0.1] (unknown)

by geopod-ismtpd-10 (SG) with ESMTP

id 4D2JnuF-S9KvUNvUvXCEbg

for ;

Fri, 12 Jul 2024 16:53:23.661 +0000 (UTC)

From: UPS

Subject: Your order gets shipped

Message-ID: <0cc78240e2ee14df230cc9c59cb5bfa9@alaiko.com>

MIME-Version: 1.0

Date: Fri, 12 Jul 2024 16:53:23 +0000 (UTC)

X-SG-EID:

=?us-ascii?Q?u001=2EGdr5us7BlGEJ8PGTF6wYXjwdNl5thnWRxqZdU9k+za1lIp1qXfuFLgtYP?=

=?us-ascii?Q?fdvzU9v7=2FfwuuH8cCwGC0wm7h5NKyjCI2xrDwvS?=

=?us-ascii?Q?tZIwR5Qc=2FgzwZbu2fGZhFAnWZQoQNvKCRsxma1u?=

=?us-ascii?Q?IgiZIUu3mIpws9m4plppl7ngShNDkXU9nw8TCgJ?=

=?us-ascii?Q?0+piGwwpPYqrGedUOqEJx=2FfqxPNmywfUwn6Kdkt?=

=?us-ascii?Q?73UBfOkX7jScoFBVunwhnI=3D?=

To: root@doctor.nl2k.ab.ca

X-Entity-ID: u001.XGAkTjREh7iNWAYmSHQEKA==

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 20.8

X-Spam_score_int: 208

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear customer, We regret to inform you that due to an incorrect

shipping address,



Content analysis details: (20.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

[167.89.20.171 listed in dnsbl.ahbl.org]

[167.89.20.171 listed in dnsbl.ahbl.org]

[167.89.20.171 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[167.89.20.171 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

Subject: {SPAM?} Your order gets shipped
















-asian: inherit; font-variant-alternates: inherit; font-variant-position: i=

nherit; font-stretch: inherit; font-size: 15px; line-height: inherit; font-=

family: "Segoe UI", "Segoe UI Web (West European)", &qu=

ot;Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helveti=

ca Neue", sans-serif; font-optical-sizing: inherit; font-kerning: inhe=

rit; font-feature-settings: inherit; font-variation-settings: inherit; marg=

in: 0px; padding: 0px; vertical-align: baseline; color: rgb(36, 36, 36); ba=

ckground-color: rgb(255, 255, 255);">3D""
.net/up/22/37/z5sc.png" style=3D"width: 200px; height: 113px;" />





-asian: inherit; font-variant-alternates: inherit; font-variant-position: i=

nherit; font-stretch: inherit; font-size: 15px; line-height: inherit; font-=

family: "Segoe UI", "Segoe UI Web (West European)", &qu=

ot;Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helveti=

ca Neue", sans-serif; font-optical-sizing: inherit; font-kerning: inhe=

rit; font-feature-settings: inherit; font-variation-settings: inherit; marg=

in: 0px; padding: 0px; vertical-align: baseline; color: rgb(36, 36, 36); ba=

ckground-color: rgb(255, 255, 255);">
if;">Dear customer,





-asian: inherit; font-variant-alternates: inherit; font-variant-position: i=

nherit; font-stretch: inherit; font-size: 15px; line-height: inherit; font-=

family: "Segoe UI", "Segoe UI Web (West European)", &qu=

ot;Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helveti=

ca Neue", sans-serif; font-optical-sizing: inherit; font-kerning: inhe=

rit; font-feature-settings: inherit; font-variation-settings: inherit; marg=

in: 0px; padding: 0px; vertical-align: baseline; color: rgb(36, 36, 36); ba=

ckground-color: rgb(255, 255, 255);">

We regret to inform you that =

due to an incorrect shipping address,





Your package number #
yle=3D"font-family:arial,helvetica,sans-serif;">3543540
=3D"font-family:arial,helvetica,sans-serif;"> is waiting to be proce=

ssed at our facility.





To ensure on-time delivery, w=

e ask that you update your shipping address as soon as possible using the s=

ecure link below:






VJOq6p2d6-2FJyioXBntlkkprxOetBDy-2Fqyyk4vUAwY8-2Bq0bT-2BLbCmbElSEiCB4kV3EUO=

5U3jmmEVXC8xZIjmAd1pCIsfTL9ia7kcW5bbebHGdv4G-2FWFQassp_DSy21Lsls7pYbx4vputm=

gQCW99fw6OQgAkUuuBmL-2FlMR4U5m-2BfDBj2FYCZTFgPbNDjbdvv0k5IXnNYsvJlp04G8YztK=

KiiH9iRpIxvvMGN-2BBfdO1G-2F2WFZmVfyWyWQBcpf29uRXDkxcFF8c0JaHMO0Md3351SeNWf-=

2FTYgnoJea82-2BIibXhWPa6GDYNmJGs45XCKzF5MpSZpggnzq8LOuAg-3D-3D">
=3D"font-family:georgia,serif;">update my address





 






;">Once your shipping address is updated, we will process your package and =

provide you with all associated tracking information.






;">If you have any questions or problems with your package, please don'=

t hesitate to contact us.






;">Thank you for choosing our service.






;">yours sincerely,








=

©2024 U=

PS. The content of this message is protected by copyright and trademark law=

s under United States and international laws.






uVVbhb04EJe-2FJwi1P6AwsUbQsx-2FD-2BnXMYmNaxfFhVTrMkLyXl1Ghc5Lu-2B4VyesEePHg=

l-2BFWztUa5X2iQqVMNELiLYiyuEbindd1bwwXm20GtiCOOBK3jmGnPR-2Fa-2B-2Bba5dROsxR=

70-2B3IZDfCeCmtQC-2B-2Bs7HJ6DmQBPsT1j4IcYkUdU7jQo5EbbDA7ieFRbKnN55Yzk2hGPLX=

Gb-2BYlspCf3XvZ-2BRM-3D" alt=3D"" width=3D"1" height=3D"1" border=3D"0" sty=

le=3D"height:1px !important;width:1px !important;border-width:0 !important;=

margin-top:0 !important;margin-bottom:0 !important;margin-right:0 !importan=

t;margin-left:0 !important;padding-top:0 !important;padding-bottom:0 !impor=

tant;padding-right:0 !important;padding-left:0 !important;"/>

UPS Phish from sendgirid

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Jul 2024 12:04:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSKcM-00000000K27-1Hnp

for dave@doctor.nl2k.ab.ca;

Fri, 12 Jul 2024 12:03:38 -0600

Resent-From: The Doctor

Resent-Date: Fri, 12 Jul 2024 12:03:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.xtrwkqxb.outbound-mail.sendgrid.net ([167.89.20.171]:46256)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSJYJ-00000000Ajh-2SKK

for root@doctor.nl2k.ab.ca;

Fri, 12 Jul 2024 10:55:28 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alaiko.com;

h=from:subject:mime-version:to:content-type:content-transfer-encoding:

cc:content-type:from:subject:to;

s=s1; bh=IohHthZW/V7t9BE7s9uVCbLancy60mgqSh7/rwmEdmU=;

b=fm6tTRlZMIeaS0YlglErCSxD/qKKDpeMdHxmZC004Qvf11rBatKupGGQKVW1BAxdN6To

rZLarRneP4raeJDPYbEXGAkSWLAaVXm54sXyO/1R/dqFyj9e/Vw87vvI/bBG5Dbp2Gd0zA

nzKeBKD8RADNSlkWetRoQ2lb3b05CvEqJPOcajHDPuI5OufeuF4+jtmAtdAhvm6MBLZLwb

vA4sgzrHS+2Bw2G+Djt0YzB5FqC+FGrEpP9NmzrXh0Wgsn4lOW1WG3WDpVMBaJiwws8K4O

YlbM/qJHcoZpm61CcogT2KBXnyWEvFnhXPAnaFT9j5JNs6MYkhmIXBqfDA5wAUIw==

Received: by recvd-957c9746c-497fb with SMTP id recvd-957c9746c-497fb-1-66915F87-62

2024-07-12 16:53:27.721254766 +0000 UTC m=+1295698.830390748

Received: from [127.0.0.1] (unknown)

by geopod-ismtpd-1 (SG) with ESMTP

id I5CfLyq-RU6GaAGOmPv04A

for ;

Fri, 12 Jul 2024 16:53:27.633 +0000 (UTC)

From: UPS

Subject: Deine Bestellung wird verschickt

Message-ID: <4eff83c43ec9100bc44b89eac120134d@alaiko.com>

MIME-Version: 1.0

Date: Fri, 12 Jul 2024 16:53:27 +0000 (UTC)

X-SG-EID:

=?us-ascii?Q?u001=2EGdr5us7BlGEJ8PGTF6wYXjwdNl5thnWRxqZdU9k+za1lIp1qXfuFLgtYP?=

=?us-ascii?Q?fdvzU9vKpwUPm1oTMN8XrnGjIPwnDZJFrm4zjb0?=

=?us-ascii?Q?cxcq8D5f2RXhILJKae6L2GqwRAcERdUoCtKnWXV?=

=?us-ascii?Q?uXb+8EzklJShYshX9twidQwlSx5jdwtTJlCR4il?=

=?us-ascii?Q?mmEYkrCXvAfkr7lKanJ4H5Sph7o5AzyiscVlqpl?=

=?us-ascii?Q?b26Ex5W7Srs7MMdfQSsidk=3D?=

To: root@doctor.nl2k.ab.ca

X-Entity-ID: u001.XGAkTjREh7iNWAYmSHQEKA==

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 20.8

X-Spam_score_int: 208

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear customer, We regret to inform you that due to an incorrect

shipping address,



Content analysis details: (20.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

[167.89.20.171 listed in dnsbl.ahbl.org]

[167.89.20.171 listed in dnsbl.ahbl.org]

[167.89.20.171 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[167.89.20.171 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

[167.89.20.171 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[167.89.20.171 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

Subject: {SPAM?} Deine Bestellung wird verschickt
















-asian: inherit; font-variant-alternates: inherit; font-variant-position: i=

nherit; font-stretch: inherit; font-size: 15px; line-height: inherit; font-=

family: "Segoe UI", "Segoe UI Web (West European)", &qu=

ot;Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helveti=

ca Neue", sans-serif; font-optical-sizing: inherit; font-kerning: inhe=

rit; font-feature-settings: inherit; font-variation-settings: inherit; marg=

in: 0px; padding: 0px; vertical-align: baseline; color: rgb(36, 36, 36); ba=

ckground-color: rgb(255, 255, 255);">3D""
.net/up/22/37/z5sc.png" style=3D"width: 200px; height: 113px;" />





-asian: inherit; font-variant-alternates: inherit; font-variant-position: i=

nherit; font-stretch: inherit; font-size: 15px; line-height: inherit; font-=

family: "Segoe UI", "Segoe UI Web (West European)", &qu=

ot;Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helveti=

ca Neue", sans-serif; font-optical-sizing: inherit; font-kerning: inhe=

rit; font-feature-settings: inherit; font-variation-settings: inherit; marg=

in: 0px; padding: 0px; vertical-align: baseline; color: rgb(36, 36, 36); ba=

ckground-color: rgb(255, 255, 255);">
if;">Dear customer,





-asian: inherit; font-variant-alternates: inherit; font-variant-position: i=

nherit; font-stretch: inherit; font-size: 15px; line-height: inherit; font-=

family: "Segoe UI", "Segoe UI Web (West European)", &qu=

ot;Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helveti=

ca Neue", sans-serif; font-optical-sizing: inherit; font-kerning: inhe=

rit; font-feature-settings: inherit; font-variation-settings: inherit; marg=

in: 0px; padding: 0px; vertical-align: baseline; color: rgb(36, 36, 36); ba=

ckground-color: rgb(255, 255, 255);">

We regret to inform you that =

due to an incorrect shipping address,





Your package number #
yle=3D"font-family:arial,helvetica,sans-serif;">3543540
=3D"font-family:arial,helvetica,sans-serif;"> is waiting to be proce=

ssed at our facility.





To ensure on-time delivery, w=

e ask that you update your shipping address as soon as possible using the s=

ecure link below:






VJOq6p2d6-2FJyioXBntlkkprxOetBDy-2Fqyyk4vUAwY8-2Bq0bT-2BLbCmbElSEiCB4kV3EUO=

5U3jmmEVXC8xZIjmAd1pCIsfTL9ia7kcW5bbebHGdv4G-2FWFQlTPn_DSy21Lsls7pYbx4vputm=

gQCW99fw6OQgAkUuuBmL-2FlOMWwOFSt1qhIkKBho7Jhr4pS01lj3nEB0B9LLcVE-2FQyNjJA4W=

ApowSuqL-2BNFb6Mfth51bVYJxMDQZDJzmQYczUh90HX1bMkDgilri-2FLGNswCoChy7b4LuftL=

kTVyiT8B9X1tV-2Fls7r9rI7FWJ5mcCR3rZJLBNrsGnwuCyfXuALAw-3D-3D">
=3D"font-family:georgia,serif;">update my address





 






;">Once your shipping address is updated, we will process your package and =

provide you with all associated tracking information.






;">If you have any questions or problems with your package, please don'=

t hesitate to contact us.






;">Thank you for choosing our service.






;">yours sincerely,








=

©2024 U=

PS. The content of this message is protected by copyright and trademark law=

s under United States and international laws.






uVVbhb04EJe-2FJwi1P6AwsUbQsx-2FUNl9i3z0nTJvFWJG1LA0rmhxO3NZmEEZBf-2B6dk-2BT=

xYuO8eIjeOrVgozyKjgmW6YJNZ4GCyrT-2FQPi4n0uYdgeeqyZtaM8ajWEgLCfO8EBKU1YpAfbv=

uTVBqlWfGZVD5kv-2B-2B5Db9V3Q1bMVdiihVzpjxScEP-2B5SW7QGCAU5laehNQ-3D-3D" alt=

=3D"" width=3D"1" height=3D"1" border=3D"0" style=3D"height:1px !important;=

width:1px !important;border-width:0 !important;margin-top:0 !important;marg=

in-bottom:0 !important;margin-right:0 !important;margin-left:0 !important;p=

adding-top:0 !important;padding-bottom:0 !important;padding-right:0 !import=

ant;padding-left:0 !important;"/>

Fedex Phish from France

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Jul 2024 10:50:00 -0600

Received: from mtaout2.ac-mayotte.fr ([193.55.5.84]:50936)

by doctor.nl2k.ab.ca with esmtp (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSJSU-000000009u4-4A7Z

for dave@doctor.nl2k.ab.ca;

Fri, 12 Jul 2024 10:49:28 -0600

Received: from mta2.ac-mayotte.fr (mta2.ac-mayotte.fr [193.55.5.85])

by mtaout2.ac-mayotte.fr (Postfix) with ESMTP id F23DE564D9;

Fri, 12 Jul 2024 19:47:13 +0300 (EAT)

Received: from imsva2.ac-mayotte.fr (imsva2.ac-mayotte.fr [193.55.5.86])

by mta2.ac-mayotte.fr (Postfix) with ESMTP id D469958403;

Fri, 12 Jul 2024 19:47:13 +0300 (EAT)

DKIM-Filter: OpenDKIM Filter v2.11.0 mta2.ac-mayotte.fr D469958403

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ac-mayotte.fr;

s=default; t=1720802833;

bh=qYzBkviplqvdvmdEcXj+sLs85nT5fKZg2qmMoZEOu/4=;

h=From:Date:Subject:Message-ID:To:From;

b=JFlinSbdwDTc8vnxUIb3aD01uD8zFf5MPMzn92BFY4kQ38ou0eLf9w+9f6ZUrhbxH

jzcm6aw0mw8zVL+GPDUbUvt+8d2O6fOSHZjCPdcKl9H6Ah8CophcOgcaos+p9Ncyv4

qBXFAUiVvizmmShsmy8inMyM5aW3uyibM6WbJM+M=

Received: from imsva2.ac-mayotte.fr (unknown [127.0.0.1])

by IMSVA (Postfix) with ESMTP id 4A4442A078;

Fri, 12 Jul 2024 19:47:13 +0300 (EAT)

X-IMSS-DKIM-Authentication-Result: imsva2.ac-mayotte.fr; sigcount=0

Received: from imsva2.ac-mayotte.fr (unknown [127.0.0.1])

by IMSVA (Postfix) with ESMTP id 2C2C82A06F;

Fri, 12 Jul 2024 19:47:13 +0300 (EAT)

Received: from mta.ac-mayotte.fr (unknown [193.55.5.53])

by imsva2.ac-mayotte.fr (Postfix) with ESMTP;

Fri, 12 Jul 2024 19:47:13 +0300 (EAT)

Received: from goodies.in.ac-mayotte.fr (unknown [192.168.205.176])

by mta.ac-mayotte.fr (Postfix) with ESMTP id 164B8714;

Fri, 12 Jul 2024 19:47:13 +0300 (EAT)

Received: from localhost (localhost [127.0.0.1])

by goodies.in.ac-mayotte.fr (Postfix) with ESMTP id EBF6A2073A;

Fri, 12 Jul 2024 19:46:32 +0300 (EAT)

From: "Anthoumane Omar"

User-Agent: SOGoMail 5.5.1

MIME-Version: 1.0

Date: Fri, 12 Jul 2024 19:46:32 +0300

Subject: Mise =?utf-8?q?=C3=A0?= jour de votre livraison FedEx 35211400000******

Message-ID: <7fbb-66915e00-7-37397a80@232803148>

X-Forward: 37.19.217.232, 193.55.5.88

Content-Type: multipart/alternative; boundary="----=_=-_OpenGroupware_org_NGMime-32699-1720802792.360568-3------"

To: undisclosed-recipients:;

X-TM-AS-GCONF: 00

X-TM-AS-Product-Ver: IMSVA-9.1.0.2090-9.0.0.1002-28526.001

X-TM-AS-User-Blocked-Sender: No

X-TMASE-Version: IMSVA-9.1.0.2090-9.0.1002-28526.001

X-TMASE-Result: 10--2.051400-10.000000

X-TMASE-MatchedRID: ulFUOvRSKJYDguxLpG9BXb1jh6sVaG0pnKprWma9SrmvOcANXKU2ojqX

gMpsiHA3GJ+OJ/BQCqHb+leK7SX+XuGdvm4wH0iXCJ1aAvlTbYn9aQpbl8jGZbKZBOgYfly5ueT

vgNf4ajvmobcsckEudteFF8dZcJnzxUc6ungqHHJ7JAOqlfPcr9O0OZAp4AoJfI34OzI/0Az4Fv

VajtdwtpxYsCW1AtgGSUAFemq7B2WssAu2h3oDprCSuz+b4pQ5u1luGH5gde1eQ3lb39JlNXyS9

/LtVbTu7GX0c1Ulalwwo+sXt0rnsy2VljVYB9GNyhrY/ZxrySmtSxvh882f2sJqJFuakOKx7csN

IsHl2OLyIohFuDqYopXpCTgJQ7zgIfnF3Vaf08KbKItl61J/yZUdXE/WGn0FA6QGdvwfwZZ5/8U

lwj9hQFiwNtO66JMayMIRXzzqA7YCcKvl37mIuNxFyxWUZB4n+gtHj7OwNO2FR9Hau8GO7rv0o4

y+5ZDz8v3hHmGpKnmXtPET4ugSRKH+e0AzvnK3swB9WOx1e4M=

X-IMSS-DKIM-White-List: No

X-TMASE-SNAP-Result: 1.821001.0001-0-1-22:0,33:0,34:1,35:0,36:0,37:0,40:0-0

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: FedEx Bonjour, Nous n'avons pas pu livrer votre colis car

il n'y avait personne pour signer la réception. Par conséquent, il a été

retourné à notre entrepôt. Vous pouvez venir retirer votre colis à [...]





Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[193.55.5.53 listed in dnsbl.ahbl.org]

[193.55.5.53 listed in dnsbl.ahbl.org]

[193.55.5.53 listed in dnsbl.ahbl.org]

[193.55.5.53 listed in dnsbl.ahbl.org]

[193.55.5.86 listed in dnsbl.ahbl.org]

[193.55.5.86 listed in dnsbl.ahbl.org]

[193.55.5.86 listed in dnsbl.ahbl.org]

[193.55.5.86 listed in dnsbl.ahbl.org]

[193.55.5.85 listed in dnsbl.ahbl.org]

[193.55.5.85 listed in dnsbl.ahbl.org]

[193.55.5.85 listed in dnsbl.ahbl.org]

[193.55.5.85 listed in dnsbl.ahbl.org]

[193.55.5.84 listed in dnsbl.ahbl.org]

[193.55.5.84 listed in dnsbl.ahbl.org]

[193.55.5.84 listed in dnsbl.ahbl.org]

[193.55.5.84 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[193.55.5.53 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[193.55.5.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[193.55.5.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[193.55.5.53 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[193.55.5.53 listed in will-spam-for-food.eu.org]

[193.55.5.53 listed in will-spam-for-food.eu.org]

[193.55.5.53 listed in will-spam-for-food.eu.org]

[193.55.5.53 listed in will-spam-for-food.eu.org]

[193.55.5.53 listed in will-spam-for-food.eu.org]

[193.55.5.53 listed in will-spam-for-food.eu.org]

[193.55.5.53 listed in will-spam-for-food.eu.org]

[193.55.5.53 listed in will-spam-for-food.eu.org]

[193.55.5.85 listed in will-spam-for-food.eu.org]

[193.55.5.85 listed in will-spam-for-food.eu.org]

[193.55.5.85 listed in will-spam-for-food.eu.org]

[193.55.5.85 listed in will-spam-for-food.eu.org]

[193.55.5.85 listed in will-spam-for-food.eu.org]

[193.55.5.85 listed in will-spam-for-food.eu.org]

[193.55.5.85 listed in will-spam-for-food.eu.org]

[193.55.5.85 listed in will-spam-for-food.eu.org]

[193.55.5.84 listed in will-spam-for-food.eu.org]

[193.55.5.84 listed in will-spam-for-food.eu.org]

[193.55.5.84 listed in will-spam-for-food.eu.org]

[193.55.5.84 listed in will-spam-for-food.eu.org]

[193.55.5.84 listed in will-spam-for-food.eu.org]

[193.55.5.84 listed in will-spam-for-food.eu.org]

[193.55.5.84 listed in will-spam-for-food.eu.org]

[193.55.5.84 listed in will-spam-for-food.eu.org]

[193.55.5.86 listed in will-spam-for-food.eu.org]

[193.55.5.86 listed in will-spam-for-food.eu.org]

[193.55.5.86 listed in will-spam-for-food.eu.org]

[193.55.5.86 listed in will-spam-for-food.eu.org]

[193.55.5.86 listed in will-spam-for-food.eu.org]

[193.55.5.86 listed in will-spam-for-food.eu.org]

[193.55.5.86 listed in will-spam-for-food.eu.org]

[193.55.5.86 listed in will-spam-for-food.eu.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: lucreziamarradi.it]

-2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, medium

trust

[193.55.5.84 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

Subject: {SPAM?} Mise =?utf-8?q?=C3=A0?= jour de votre livraison FedEx 35211400000******



------=_=-_OpenGroupware_org_NGMime-32699-1720802792.360568-3------

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable

Content-Length: 697





FedEx

=C2=A0

Bonjour,

Nous n'avons pas pu livrer votre colis car il n'y avait personne pour s=

igner la r=C3=A9ception. Par cons=C3=A9quent, il a =C3=A9t=C3=A9 retour=

n=C3=A9 =C3=A0 notre entrep=C3=B4t.

Vous pouvez venir retirer votre colis =C3=A0 l'entrep=C3=B4t FedEx.

*Si nous ne recevons pas de nouvelles instructions de votre part, le co=

lis sera renvoy=C3=A9 =C3=A0 l'exp=C3=A9diteur dans un d=C3=A9lai de de=

ux jours ouvrables.

Pour reprogrammer la livraison de votre colis, veuillez cliquer sur "Re=

programmer maintenant". L'un de nos chauffeurs effectuera une nouvelle =

tentative de livraison :

Reprogrammer maintenant

=C2=A0

Cordialement,

Groupe de Courrier FedEx Ltd.

=C2=A0



------=_=-_OpenGroupware_org_NGMime-32699-1720802792.360568-3------

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

Content-Length: 1639



<=

strong>Fed
"#ff6215">Ex

 


ff0000">Bonjour,=

Nous n'avons pas=

pu livrer votre colis car il n'y avait personne pour signer la r=C3=A9=

ception. Par cons=C3=A9quent, il a =C3=A9t=C3=A9 retourn=C3=A9 =C3=A0 n=

otre entrep=C3=B4t.


olor=3D"#000000">Vous pouvez venir retirer votre colis =C3=A0 l'entrep=C3=

=B4t FedEx.


olor=3D"#800040">*Si nous ne recevons pas de nouvelles instructions de =

votre part, le colis sera renvoy=C3=A9 =C3=A0 l'exp=C3=A9diteur dans un=

d=C3=A9lai de deux jours ouvrables.


color=3D"#ff0000">Pour reprogrammer la livrais=

on de votre colis, veuillez cliquer sur "Reprogrammer maintenant". L'un=

de nos chauffeurs effectuera une nouvelle tentative de livraison :
nt>


"6">
jdvj.html">Reprogrammer main=

tenant

 


ont color=3D"#ff0000">Cordialement,

g>Groupe de Courrier FedEx Ltd.

 

=





------=_=-_OpenGroupware_org_NGMime-32699-1720802792.360568-3--------

Web / SEO/ App spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Jul 2024 09:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSI69-00000000EuL-3lfq

for dave@doctor.nl2k.ab.ca;

Fri, 12 Jul 2024 09:22:13 -0600

Resent-From: The Doctor

Resent-Date: Fri, 12 Jul 2024 09:22:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19011031.outbound.protection.outlook.com ([52.103.74.31]:21928 helo=SLXP216CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSI0d-00000000Dkn-1keh

for sales@nk.ca;

Fri, 12 Jul 2024 09:16:35 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=FnVTE4yUp8U5kgUGlc43j0bRk3uT7mELnaOf0R/jSvmZJOWuJTjdtAXeTPUKsaGbPOWrPYqyBIwxwohSgWG+g4F/JNEChwbk/oVRftXAex6yANTpSa73+EvpTuXNUUiZdtk/7V81yZse9iHZ0pFpqg04vQX3c+zBwNy09/WCpSrJuHh5Qu6EzsSOnOfoTLZO+DyJP6ga6fywvORkB5CqD50SXcqrjq3FfZ6j7zTpUAA1lIoStaZOWw4Aj2H3JQQAz1d2FEUft+tjgoJZYKKTwmmWiL/ADURqFUMJxCn6AWAGvFsVL8dKGO/6iirs6C8P09bDCks6rTzb4WhLH356nA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=a9lsU9m7ke7xFMizJixMLqh+jBKZPIjykaIHmwWFmj4=;

b=DDPmadD3gu5ht6P0pEu61/IMoDRY2QMvnI190ZUpTpIJSNBtS1qhJ0N9RMeQqIpi3ng2wOHtPqN9vlWt6H2U7LuDE0ndXKVpEBhCRP3BnGONdx8xOq74PnbTi+uycd0e/lm97EArC2tpCTUTpcPxmkuiNevREwTen+tISlCzGMAZuW84nzA3cN9jG/DSKkhM7ahab85HCLgXN69fqOuLXGjbU4LRPhktujNJy5r+hu0XUHv3dU5GVxkmMZKVGkc5kTityqVhetQ25lTYZvE2WtmGAuNjYGMtVrT7Zf3Oi87UZ+GobHuCu2TTL0xLarJKkJOi+lUsgVS+6NnhD3r/6Q==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=a9lsU9m7ke7xFMizJixMLqh+jBKZPIjykaIHmwWFmj4=;

b=U5k/hv5v3VCXr/fA8cTSJBsXx0tVdoMnuNxPmTtWNK8y4c1iNVnBxqkz0oMObQYzGdQAxmwBGrH7nllxfPgVSEjIvU6a9sCgyuA5Kj1iklIf9/SR+VSe0hgcyWt2CFAt93JZzTvHQdxhwvKR0W4vYpuRVk9tbX/puQYmoYntgxxaCrCPM/eAJ6JqzbyFXeFxJiO2Opa9ftFdO4KdJI2CXZ3lJbb1cQ4QfmO+9hY82vpsuNtQZNC5/dJJT2zWuaD5EgCxlktwjWhEGXoziBzIZ3+rZaUE2utrIIhLSQZW5PrFhdr0gL2sCVr4K8T3hvjTw9H2+WczRc0XyhI3KBxFHg==

Received: from SE1P216MB1464.KORP216.PROD.OUTLOOK.COM (2603:1096:101:29::12)

by PUYP216MB3044.KORP216.PROD.OUTLOOK.COM (2603:1096:301:154::14) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7762.23; Fri, 12 Jul

2024 15:14:13 +0000

Received: from SE1P216MB1464.KORP216.PROD.OUTLOOK.COM

([fe80::f364:5ed2:d37b:9ec8]) by SE1P216MB1464.KORP216.PROD.OUTLOOK.COM

([fe80::f364:5ed2:d37b:9ec8%5]) with mapi id 15.20.7762.020; Fri, 12 Jul 2024

15:14:13 +0000

From: Alice Wood

Subject: Re: Yes

Thread-Topic: Yes

Thread-Index: AQHa1G4eT29Um6LwhUCmMFtalbssOA==

Date: Fri, 12 Jul 2024 15:14:13 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [PTyEfQolOyQ76BHqpWcW2TkGiedCk6r/]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SE1P216MB1464:EE_|PUYP216MB3044:EE_

x-ms-office365-filtering-correlation-id: d355fd5a-a8bf-4862-c822-08dca28549f2

x-ms-exchange-slblob-mailprops:

mDzISFfNJ+iPHVZJjKEDS3eyK6RmT6tEq3Uc/+gqsZaXhDhzs5xcb359qJq7Yt5e1yqknjyMV6brbCO608Y2FVQNaouaT3jGdtUWoskMokwKjiOEzTGu4m7inO7lUNgqdZ66PO91iz+VfFFNyMqfj8rAkpgp6+r3dAsXZT35jC8cS91SH4flEowOo2S0WKZh3u+uLJM8qyyLsnJeDiIEkgeYxlyu2L8zR/3myJRjK6YrpXd1zO/2SAmZjFTA4Th2jg7QQMSqoqWs4O3VHHQpdrUWWIJ16Y7uWuyKjJSUakpLvwfa4RRldH27WPf3MEVkr6InTy/sBIbBBgsUAiU697eoQ1Wrdf6qSY8Aa2jPdzt9vJoKytyvdr+Kq3+K6kZPVHcD0YzGpBMY1sQLZnyAsX7KQ+UxW2ILw6pYuhMJ64WsSnEq4oKpv+jBGvBeGch5iNKyNvVy8QBlJ0CR8YH6inMW2gxWNswj/LbAgO4O0xOr9/i+G+x5ar7KYt9xTWUWuyStu0C8KcNrZIzTiSxiDujKJqq4nKyOfA6hOuGkrV7YSFojnLJeJD1X+kucVXKqPVGY7KBDdlI=

x-microsoft-antispam:

BCL:0;ARA:14566002|461199028|19110799003|8060799006|102099032|440099028|3412199025;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?iBwOI3p46GoO7guYRaOVNd4xRkadEc/D5UKgUmqmqjkH7VEWopGz2AhIPp?=

=?iso-8859-1?Q?31/DVD2r4TPoqhu/mOkmfXIU6LPETVS503ZBfgkR28USjygJaddPzVzUMr?=

=?iso-8859-1?Q?PkQvRGrGnV0nrIslC4XcK0jF8kaNGdHmCivsQWgRBBEgjzMnqFjX1Juhgb?=

=?iso-8859-1?Q?vn0CRYVuoYgQ0jLkQla0VO7Ph/NbfSo2toIMbf/083tLJvPYAjtub5yYAa?=

=?iso-8859-1?Q?MLO+g6t3uR8H7OWf6EyJps2fpE+sp2MRcbqTPierGl3WO1fHxKKzV9x/jd?=

=?iso-8859-1?Q?M0ChBzxOWAP1l8FXw5PRlMU67cyU3COXp4oOk8foZpUTnbYBJkTmVRZTGj?=

=?iso-8859-1?Q?2lFyp3o3lSVYCt5I1cxE38NLexwkeGp46z16c9bPjTpVGFgBwO8FUfRM5B?=

=?iso-8859-1?Q?W1wLmjKvLadesu1bvUwrFRmNmo/o7U3heCCvDrxIbGtsUQnRR05OwTzV4m?=

=?iso-8859-1?Q?KhnR8mM4hfcN2gbnNWskDUWcpRGa+JCq7CM137Dbf3rEPS6NLVXp+GYg7G?=

=?iso-8859-1?Q?cyjvpInHTb628Vu8l+DqS24Ez+CswTi284w2eGOk0nqC1GI6AG3mdhrvrY?=

=?iso-8859-1?Q?RA0BXL8oY3FMidt3MjatqHxndNhfsfAEXBdtbkCI/+4hmKHmJCIP+XhdbK?=

=?iso-8859-1?Q?23+4oRpzd1znkG0TbFsENQkiv6XXJI0u7GfZGsW24lYnZKpWlkcCh/j8NN?=

=?iso-8859-1?Q?bjjBYOBWMOkWCtOMenouWTNzHRytQUOflZ4toN/OJIUyXZpJpCKTLXieqk?=

=?iso-8859-1?Q?DqYQM6ZNDujewBeqFHObuVAp9azSdhfx1hvqmiCudq7IF7pkvX10yN71fs?=

=?iso-8859-1?Q?qTX0mSDixnik7LPF8IFOh/cFP8PIRnYC4fuXLfw4dPQ/vmiQzqr/fLRpsy?=

=?iso-8859-1?Q?sT4H4PyTHDQfC/2gFD/zG9D4PVY/bq2n65OSJyk6rv1Uu0t4HMGBm8XNad?=

=?iso-8859-1?Q?nl/xImX91h9nQYH9RBJY/dLieLriu+6z08jEyH/dDcJppMmo7w3yEFg7Cg?=

=?iso-8859-1?Q?FsSVQ1uizhlX6j4ON80CUWSHHUwOPIyiP3nAbF7BfaBz9+JGoz+qY4nlqC?=

=?iso-8859-1?Q?LFV/DLKXye3PNtV97pZf2ZaZ5exom2PsTtD5jhOyyFxzrgcTHlwD14K2He?=

=?iso-8859-1?Q?BHVC3gpSOwi75hya0Lh7oOuPQ0vlcdEJVnrTBzMSS+G5E71StKv1wqFSc0?=

=?iso-8859-1?Q?6c5WSN62r27If3xQAvMr5IUsDAquB0CV0+lCSwJ9ulJ199rRGmq+fr9luk?=

=?iso-8859-1?Q?65TTo+FrjsGkO0eHpvah8SaC60bHbYiSiHlrESS/g9sh2sz+/sf7H1tDTS?=

=?iso-8859-1?Q?vFd+?=

Content-Type: multipart/alternative;

boundary="_000_SE1P216MB1464D03E67D28C0A8A761D5CECA62SE1P216MB1464KORP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SE1P216MB1464.KORP216.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: d355fd5a-a8bf-4862-c822-08dca28549f2

X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Jul 2024 15:14:13.4531

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PUYP216MB3044

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I checked your website you have an impressive site

but ranking is not good on Google, Yahoo and Bing. Would you like to optimize

your site? I will be happy to share with you our pricing and proposals.



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.74.31 listed in dnsbl.ahbl.org]

[52.103.74.31 listed in dnsbl.ahbl.org]

[52.103.74.31 listed in dnsbl.ahbl.org]

[52.103.74.31 listed in dnsbl.ahbl.org]

[2603:1096:101:29:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:29:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:29:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:29:0:0:0:12 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.74.31 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.74.31 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.74.31 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.74.31 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:101:29:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:29:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:29:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:29:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:29:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:29:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:29:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:29:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[52.103.74.31 listed in will-spam-for-food.eu.org]

[52.103.74.31 listed in will-spam-for-food.eu.org]

[52.103.74.31 listed in will-spam-for-food.eu.org]

[52.103.74.31 listed in will-spam-for-food.eu.org]

[52.103.74.31 listed in will-spam-for-food.eu.org]

[52.103.74.31 listed in will-spam-for-food.eu.org]

[52.103.74.31 listed in will-spam-for-food.eu.org]

[52.103.74.31 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.74.31 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[alice.wood.all.services(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Re: Yes



--_000_SE1P216MB1464D03E67D28C0A8A761D5CECA62SE1P216MB1464KORP_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hello,



I checked your website you have an impressive site but ranking is not good =

on Google, Yahoo and Bing.



Would you like to optimize your site? I will be happy to share with you our=

pricing and proposals.



May I send you a quote.?



Thanks & Regards,



--_000_SE1P216MB1464D03E67D28C0A8A761D5CECA62SE1P216MB1464KORP_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








y: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans=

-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hello,



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

 



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

I checked your website you have an impressive site but ranking =

is not good on Google, Yahoo and Bing.



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

 



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

Would you like to optimize your site? I will be happy to share with you our=

pricing and proposals.



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

 



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

May I send you a quote.?



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

 



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

Thanks & Regards,








--_000_SE1P216MB1464D03E67D28C0A8A761D5CECA62SE1P216MB1464KORP_--

Web / SEO/ App spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Jul 2024 09:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSI5m-00000000Erj-37pG

for dave@doctor.nl2k.ab.ca;

Fri, 12 Jul 2024 09:21:50 -0600

Resent-From: The Doctor

Resent-Date: Fri, 12 Jul 2024 09:21:50 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f175.google.com ([209.85.214.175]:45330)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSGxZ-00000000JnB-2Mpe

for doctor@doctor.nl2k.ab.ca;

Fri, 12 Jul 2024 08:09:21 -0600

Received: by mail-pl1-f175.google.com with SMTP id d9443c01a7336-1fb8781ef1bso17695875ad.3

for ; Fri, 12 Jul 2024 07:07:23 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1720793237; x=1721398037; darn=doctor.nl2k.ab.ca;

h=disposition-notification-to:content-language:thread-index

:mime-version:message-id:date:subject:in-reply-to:references:to:from

:from:to:cc:subject:date:message-id:reply-to;

bh=mu5JOZbAlJvGmCYMyBn427uYKzOyoXWTbkQxkl8AUKg=;

b=ZGR0t8sXyHscMV/NXL4tzFcpyW3P05/ENBsOXtzAEAAzHxM+WOZxSGWoPdyTH1bkYR

ZeyBw3vRW8XAH7cgWV60Mh57BdsTeniNkhpiB7J9Hu4RHkjVTvtYF3MJZaX8YKAZAud5

zYGJ6DbscX5AGM/RKzBfTB8TC5CNsDUPl7sNr0cl5Efl8Us8ZosbFI82pEIb9nmkWvWd

bj4IzvVpNyok0jXmfEcFKH77RMQ2NvJCkmj8Icw79VqK4FpKfjvyqxYXba25FF7CQcIZ

0OylQ+UlHgQGZNciO6TWvkEkLf8se3X8GVpurX5+eJzdzZoxhn9ai0JpxNelVzyGfKso

3p3A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1720793237; x=1721398037;

h=disposition-notification-to:content-language:thread-index

:mime-version:message-id:date:subject:in-reply-to:references:to:from

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=mu5JOZbAlJvGmCYMyBn427uYKzOyoXWTbkQxkl8AUKg=;

b=ScI8jZcUwMiYKwgBDZgb+m2764sQtnf1px9ph+JKIGaGkczOx6eIiZCkiqO4ouhbgm

MpHKJjXeNuAU3TvwWfLNCZLC/wAFzqn2GQudUMxXR8cyx4clYk91Bjf13zOPFn+7IOIn

ln0Z0KSYTjA4VG9TJb11RSvhWd2h4DHFsNXQ1+pegLCIHPuzGAX62xMoeC5iO4cGRHa3

HOQjBKaYmgLKdFr+3+U/AbKVUaxNpxM+nyc9Px5N6t6YgHKY+6xsIti9tP0t9xPPvok/

ukQ1EhEQKmxKoLAszqZ4yQcNQavvsQuFiFZml5F9TWyHCu5mxZRWNfvRWZoigWKdmdCI

d4Dw==

X-Gm-Message-State: AOJu0YxOCdD1t/bwTBx5WXIvF1RSEHanmPpXY/n0QRakx3CQVbeCHLqi

7ZaESuNbv/XaK5vCUNGVTHSwaJ/sAzim+a3G0RX2AAQs1tRbEJTzzcvV1Q==

X-Google-Smtp-Source: AGHT+IFjdZA+xD06k2LENWJKzWEo1HJMAgnfJaotuDsMgj9Uy/vPhsgoPb944CfzMINa9iNLMO4FvA==

X-Received: by 2002:a17:903:32d0:b0:1fb:6ea1:35 with SMTP id d9443c01a7336-1fbb6ee1e47mr106811385ad.69.1720793237024;

Fri, 12 Jul 2024 07:07:17 -0700 (PDT)

Received: from DESKTOP0HAJRL6 ([2401:4900:8093:8e2d:3cbd:c0b6:115a:ccde])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-1fbb6a3ca56sm67334485ad.118.2024.07.12.07.07.09

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 12 Jul 2024 07:07:16 -0700 (PDT)

From: "Jeannine Rick"

To:

References:

In-Reply-To:

Subject: RE: Schedule a Meeting | Bookkeeping

Date: Fri, 12 Jul 2024 19:37:03 +0530

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0098_01DAD492.E4CF8550"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: AdrUZBf1bQwaUIkUScyTL2s2XbsAAw==

Content-Language: en-in

Disposition-Notification-To: "Jeannine Rick"

X-Spam_score: 7.1

X-Spam_score_int: 71

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I hope you're well. Just following up on my previous

message about accounting, bookkeeping, Website Redesign, SEO.



Content analysis details: (7.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.175 listed in dnsbl.ahbl.org]

[209.85.214.175 listed in dnsbl.ahbl.org]

[209.85.214.175 listed in dnsbl.ahbl.org]

[209.85.214.175 listed in dnsbl.ahbl.org]

[2401:4900:8093:8e2d:3cbd:c0b6:115a:ccde listed]

[in dnsbl.ahbl.org]

[2401:4900:8093:8e2d:3cbd:c0b6:115a:ccde listed]

[in dnsbl.ahbl.org]

[2401:4900:8093:8e2d:3cbd:c0b6:115a:ccde listed]

[in dnsbl.ahbl.org]

[2401:4900:8093:8e2d:3cbd:c0b6:115a:ccde listed]

[in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.175 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.175 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.175 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.175 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.175 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.214.175 listed in will-spam-for-food.eu.org]

[209.85.214.175 listed in will-spam-for-food.eu.org]

[209.85.214.175 listed in will-spam-for-food.eu.org]

[209.85.214.175 listed in will-spam-for-food.eu.org]

[209.85.214.175 listed in will-spam-for-food.eu.org]

[209.85.214.175 listed in will-spam-for-food.eu.org]

[209.85.214.175 listed in will-spam-for-food.eu.org]

[209.85.214.175 listed in will-spam-for-food.eu.org]

[2401:4900:8093:8e2d:3cbd:c0b6:115a:ccde listed]

[in will-spam-for-food.eu.org]

[2401:4900:8093:8e2d:3cbd:c0b6:115a:ccde listed]

[in will-spam-for-food.eu.org]

[2401:4900:8093:8e2d:3cbd:c0b6:115a:ccde listed]

[in will-spam-for-food.eu.org]

[2401:4900:8093:8e2d:3cbd:c0b6:115a:ccde listed]

[in will-spam-for-food.eu.org]

[2401:4900:8093:8e2d:3cbd:c0b6:115a:ccde listed]

[in will-spam-for-food.eu.org]

[2401:4900:8093:8e2d:3cbd:c0b6:115a:ccde listed]

[in will-spam-for-food.eu.org]

[2401:4900:8093:8e2d:3cbd:c0b6:115a:ccde listed]

[in will-spam-for-food.eu.org]

[2401:4900:8093:8e2d:3cbd:c0b6:115a:ccde listed]

[in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.214.175 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[jeannine.rick.works(at)gmail.com]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 MR_DIFF_MID No description available.

0.0 GB_FREEMAIL_DISPTO Disposition-Notification-To/From or

Disposition-Notification-To/body contain

different freemails

1.0 REPLYTO_BOGUS In-Reply-To header seems not to be valid

Subject: {SPAM?} RE: Schedule a Meeting | Bookkeeping



This is a multipart message in MIME format.



------=_NextPart_000_0098_01DAD492.E4CF8550

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hello,



I hope you're well.



Just following up on my previous message about accounting, bookkeeping,

Website Redesign, SEO.



Can we schedule a quick call?



Best regards,

Jeannie Rick



From: Jeannine Rick

Sent: Thursday, June 27, 2024 7:14 PM

To: 'doctor@doctor.nl2k.ab.ca'

Subject: Accounting Solutions | Setting Up a Call



Hello doctor@doctor.nl2k.ab.ca,

I hope you're doing well.

I provide outstanding remote accounting, bookkeeping, and tax preparation

services at highly competitive rates.

I'm excited to discuss how our expertise can simplify and enhance your

business operations.

If you're interested, let's schedule a brief call at your earliest

convenience.

Regards,

Jeannine Rick



------=_NextPart_000_0098_01DAD492.E4CF8550

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
http-equiv=3DContent-Type content=3D"text/html; =

charset=3Dus-ascii">
name=3DGenerator content=3D"Microsoft Word 15">
content=3D"Microsoft Word 15">
href=3D"cid:filelist.xml@01DAD492.31ADFA10">
rel=3DcolorSchemeMapping href=3D"~~colorschememapping~~">
link=3D"#467886" vlink=3D"#96607D" =

style=3D'tab-interval:36.0pt;word-wrap:break-word'>

class=3DWordSection1>

Hello,


class=3DMsoNormal> 

I hope =

you're well.

 


class=3DMsoNormal>Just following up on my previous message about =

accounting, bookkeeping, Website Redesign, SEO.


class=3DMsoNormal> 

Can we =

schedule a quick call?
style=3D'font-size:11.0pt;line-height:115%;mso-ascii-font-family:Aptos;ms=

o-ascii-theme-font:minor-latin;mso-hansi-font-family:Aptos;mso-hansi-them=

e-font:minor-latin;mso-bidi-font-family:"Times New =

Roman";mso-bidi-theme-font:minor-bidi'>


class=3DMsoNormal>
style=3D'font-size:11.0pt;line-height:115%;mso-ascii-font-family:Aptos;ms=

o-ascii-theme-font:minor-latin;mso-hansi-font-family:Aptos;mso-hansi-them=

e-font:minor-latin;mso-bidi-font-family:"Times New =

Roman";mso-bidi-theme-font:minor-bidi'> 

<=

p class=3DMsoNormal style=3D'margin-bottom:0cm;line-height:normal'>
name=3D"_MailAutoSig">
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-fo=

nt-family:"Times New =

Roman";mso-fareast-theme-font:minor-fareast;mso-font-kerning:1.0pt;mso-fa=

reast-language:EN-IN;mso-no-proof:yes'>Best =

regards,


style=3D'margin-bottom:0cm;line-height:normal'>
style=3D'mso-bookmark:_MailAutoSig'>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-fo=

nt-family:"Times New =

Roman";mso-fareast-theme-font:minor-fareast;mso-font-kerning:1.0pt;mso-fa=

reast-language:EN-IN;mso-no-proof:yes'>Jeannie Rick
style=3D'mso-bookmark:_MailAutoSig'>
style=3D'mso-ascii-font-family:Aptos;mso-ascii-theme-font:minor-latin;mso=

-fareast-font-family:"Times New =

Roman";mso-fareast-theme-font:minor-fareast;mso-hansi-font-family:Aptos;m=

so-hansi-theme-font:minor-latin;mso-bidi-font-family:"Times New =

Roman";mso-bidi-theme-font:minor-bidi;mso-font-kerning:1.0pt;mso-fareast-=

language:EN-IN;mso-no-proof:yes'>


style=3D'mso-bookmark:_MailAutoSig'>


style=3D'font-size:11.0pt;line-height:115%;mso-ascii-font-family:Aptos;ms=

o-ascii-theme-font:minor-latin;mso-hansi-font-family:Aptos;mso-hansi-them=

e-font:minor-latin;mso-bidi-font-family:"Times New =

Roman";mso-bidi-theme-font:minor-bidi'> 

<=

div style=3D'border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt =

0cm 0cm 0cm'>


style=3D'margin-bottom:0cm;line-height:normal'>
name=3D"_MailOriginal">
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-fo=

nt-family:"Times New =

Roman";mso-ligatures:none;mso-ansi-language:EN-US;mso-fareast-language:EN=

-IN'>From:
style=3D'mso-bookmark:_MailOriginal'>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;mso-fareast-fo=

nt-family:"Times New =

Roman";mso-ligatures:none;mso-ansi-language:EN-US;mso-fareast-language:EN=

-IN'> Jeannine Rick <jeannine.rick.works@gmail.com> =


Sent: Thursday, June 27, 2024 7:14 PM
To: =

'doctor@doctor.nl2k.ab.ca' =

<doctor@doctor.nl2k.ab.ca>
Subject: Accounting Solutions =

| Setting Up a Call


class=3DMsoNormal>
style=3D'mso-bookmark:_MailOriginal'> 


class=3DMsoNormal>
style=3D'font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-ser=

if'>Hello doctor@doctor.nl2k.ab.ca,


class=3DMsoNormal>
style=3D'font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-ser=

if'>I hope you're doing well.


class=3DMsoNormal>
style=3D'font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-ser=

if'>I provide outstanding remote accounting, bookkeeping, and tax =

preparation services at highly competitive rates. =


style=3D'mso-bookmark:_MailOriginal'>
style=3D'font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-ser=

if'>I'm excited to discuss how our expertise can simplify and enhance =

your business operations.


class=3DMsoNormal>
style=3D'font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-ser=

if'>If you're interested, let's schedule a brief call at your earliest =

convenience.


style=3D'mso-bookmark:_MailOriginal'>
style=3D'font-size:11.0pt;line-height:115%;font-family:"Calibri",sans-ser=

if'>Regards,
Jeannine =

Rick



------=_NextPart_000_0098_01DAD492.E4CF8550--

Web / SEO/ App spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Jul 2024 07:52:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSGgI-00000000Hfq-10yg

for dave@doctor.nl2k.ab.ca;

Fri, 12 Jul 2024 07:51:26 -0600

Resent-From: The Doctor

Resent-Date: Fri, 12 Jul 2024 07:51:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f181.google.com ([209.85.167.181]:50472)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSFmP-000000009sz-2SY3

for sales@nk.ca;

Fri, 12 Jul 2024 06:53:45 -0600

Received: by mail-oi1-f181.google.com with SMTP id 5614622812f47-3c9cc66c649so995984b6e.1

for ; Fri, 12 Jul 2024 05:51:47 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1720788701; x=1721393501; darn=nk.ca;

h=content-language:mime-version:user-agent:date:message-id:subject:to

:from:from:to:cc:subject:date:message-id:reply-to;

bh=4lwBeuVE6Eb2G7vDsY7n7yd993K/IuiYjcd3B1F3uJk=;

b=QmsygUtoldP2JJGcqHeufyVqSfA2x4DyXYUp2HgbhUQ34ugGHWfeJ7qTTgWr87v2Dl

uTZaQnkff3TaZ4/9I2Xz6sTdLisWY9xdkBXZ9EmfyUE2NjQ2/oNP2TlhmNcMWKWb13qc

kWkX6DkPPRPhPavgZN26Sl3mw45MpirzI3SUbIGea7vD8adN+6jgdofdZh5ldXNunRzU

lrBYMoIWH/9XqjFHerfbAF6OGf/KKD+a7mQFRLqa/yzzHjwCgMhZMpvH2jZLgHhe5HAB

BiPK3UCQFIrtVl3L0ODQaCRG3JrSS0MjoTrSWk7okmy78xQ2g7bXeBJsIUdlaDHUa3qc

jdVg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1720788701; x=1721393501;

h=content-language:mime-version:user-agent:date:message-id:subject:to

:from:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=4lwBeuVE6Eb2G7vDsY7n7yd993K/IuiYjcd3B1F3uJk=;

b=XE9WsrXN8wIVFsBM+6oeIVC3wpK0qDxBFou8Cbu6yffvOHURwkf4i5pJw0dT7Sk87A

hwz02rKj5xmrAXF6SfbumYMJLfEnBW75/NkABsroYevJzkyB5Dn0hAPILxC1tGSyU3oJ

CWxrxY+unPurKsZ07YKFNC+4kd2kFXhpejiHCUAvkyRd5/8DWqEHVoH49hmtCUTSoBHj

4HSuh0sVmGHaYrlO9mfYkkA2rDJ28ZzVARL9FzVE+gIarsq++3QP8liLGt/K8WG6d+5f

36hDCTdalCF2XGuuUuG7eu83dQUJofy1rRLAABNFpnOxsXNuUrySa3MWK/myKdL6YJg3

JEtw==

X-Gm-Message-State: AOJu0YxyxqEwxQuaqVM48OHSirf0BsfRFZTTxTzFd+/Gu+0DsJNbNh5+

LJxvPs597v1ClaUNO9kRRCH/MOmCFWhJwSuq2gZldjVSJYNPb6mnfOPaSw==

X-Google-Smtp-Source: AGHT+IFenOOrTEe+6iVnU3wroxx9aGAtfBnLMiwmD42XZIT1+9kFRE6P0k7TvD0lAjPB5yWm4zhIGg==

X-Received: by 2002:a05:6808:189e:b0:3d9:e22a:8fa3 with SMTP id 5614622812f47-3d9e22a94c5mr7484666b6e.32.1720788700482;

Fri, 12 Jul 2024 05:51:40 -0700 (PDT)

Received: from [192.168.0.109] ([103.127.224.184])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-70b439ecd6bsm7352616b3a.211.2024.07.12.05.51.38

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Fri, 12 Jul 2024 05:51:39 -0700 (PDT)

From: Sonu Tiwari

To: sales@nk.ca

Subject: Re: Scheduling a meeting

Message-ID:

Date: Fri, 12 Jul 2024 18:21:34 +0530

User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101

Thunderbird/78.14.0

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="------------2C5223E91D8A87662AC859A8"

Content-Language: en-US

X-Spam_score: 7.1

X-Spam_score_int: 71

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Following up on my last email. /*Can we schedule a

call on //*Monday*//*//*/**/ /*/ (15th //*/July*/) or Tuesday (16th July)

so we can discuss this further?*/



Content analysis details: (7.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.181 listed in dnsbl.ahbl.org]

[209.85.167.181 listed in dnsbl.ahbl.org]

[209.85.167.181 listed in dnsbl.ahbl.org]

[209.85.167.181 listed in dnsbl.ahbl.org]

[103.127.224.184 listed in dnsbl.ahbl.org]

[103.127.224.184 listed in dnsbl.ahbl.org]

[103.127.224.184 listed in dnsbl.ahbl.org]

[103.127.224.184 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.181 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.181 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.181 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.181 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.181 listed in will-spam-for-food.eu.org]

[209.85.167.181 listed in will-spam-for-food.eu.org]

[209.85.167.181 listed in will-spam-for-food.eu.org]

[209.85.167.181 listed in will-spam-for-food.eu.org]

[209.85.167.181 listed in will-spam-for-food.eu.org]

[209.85.167.181 listed in will-spam-for-food.eu.org]

[209.85.167.181 listed in will-spam-for-food.eu.org]

[209.85.167.181 listed in will-spam-for-food.eu.org]

[103.127.224.184 listed in will-spam-for-food.eu.org]

[103.127.224.184 listed in will-spam-for-food.eu.org]

[103.127.224.184 listed in will-spam-for-food.eu.org]

[103.127.224.184 listed in will-spam-for-food.eu.org]

[103.127.224.184 listed in will-spam-for-food.eu.org]

[103.127.224.184 listed in will-spam-for-food.eu.org]

[103.127.224.184 listed in will-spam-for-food.eu.org]

[103.127.224.184 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.181 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.181 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[sonutiwari.k2(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[sonutiwari.k2(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} Re: Scheduling a meeting



This is a multi-part message in MIME format.

--------------2C5223E91D8A87662AC859A8

Content-Type: text/plain; charset=UTF-8; format=flowed

Content-Transfer-Encoding: 8bit



Hello,





Following up on my last email.



/*Can we schedule a call on //*Monday*//*//*/**/ /*/ (15th

*//*/*July*/) or Tuesday (16th July) so we can discuss this further?*/



Please suggest a day and time to connect and also share the best phone

number to reach you.



Thank you

Sonu Tiwari



On Tuesday 9 April 2024 5:43 PM, Sonu Tiwari wrote:





Hello - Greetings,



We are a leading technology company for software development & IT

Staffing Solutions having successfully delivered 500+ projects across

the globe and deployed technical professionals for wide range of skillsets.



We can give you the access to our immensely talented resource pool to

new projects at competitive rates. We’ll be happy to get on a call if

you have any questions or would like to discuss the project in more

detail. Please let me know.



If you would like a fixed quote for our software development services,

please do share the project details.



Can we schedule a quick call to discuss further in details? Please let

us know.



Thank you

Sonu Tiwari



--------------2C5223E91D8A87662AC859A8

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit













Hello,






Following up on my last email.





Can we schedule a call on Monday

 (15th July)

or Tuesday (16th July) so we can discuss this further?





Please suggest a day and time to connect and also share the best

phone number to reach you.





Thank you


Sonu Tiwari





On Tuesday 9 April 2024 5:43 PM, Sonu Tiwari wrote:








Hello - Greetings,





We are a leading technology company for software development &

IT Staffing Solutions having successfully delivered 500+ projects

across the globe and deployed technical professionals for wide range

of skillsets.





We can give you the access to our immensely talented resource pool

to new projects at competitive rates. We’ll be happy to get on a

call if you have any questions or would like to discuss the project

in more detail. Please let me know.





If you would like a fixed quote for our software development

services, please do share the project details.





Can we schedule a quick call to discuss further in details? Please

let us know.





Thank you


Sonu Tiwari








--------------2C5223E91D8A87662AC859A8--

Web / SEO/ App spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Jul 2024 11:24:00 -0600

Received: from mail-wr1-f66.google.com ([209.85.221.66]:58566)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSJz9-00000000OMp-2qMo

for dave@doctor.nl2k.ab.ca;

Fri, 12 Jul 2024 11:23:11 -0600

Received: by mail-wr1-f66.google.com with SMTP id ffacd0b85a97d-36786081ac8so1239523f8f.0

for ; Fri, 12 Jul 2024 10:21:13 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1720804866; x=1721409666; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=vnFDGInrfO5QS4UG+HsBA+dvJ3EPUXJAH9mh6XPPrp0=;

b=Nt6sc5IBlhTi2T+Emu+U1UBi3V5CNkLswhGoGmg1V7PYZYTDaTQNzuVdM+0QpNWWhK

CcMohHMKkvfx/dJXWNOZP/JwQSTwI+D7GJKT+xQGg5sv5nhw3UYFoUFV7zGMb5HU92Cm

vYZHDZVpf1frTSSUspC0zhS47dWVrHaILwXvKXuyRqKyf2xSnloFZbU6Mc+00M6vkFJA

YIT1PdUqFXqLB1gEsxWbDfe9kGzWX4X7oDP41zdjUGiH2fynnl5D6gpXhlVsJHCrwQn2

vByXcEkj6f5K6Hv6kT/f0bX9csUB4hwF4x5p4ylCgER9kl1a1Gd2AbYaZH3WFGSkQU4y

KpkA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1720804866; x=1721409666;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=vnFDGInrfO5QS4UG+HsBA+dvJ3EPUXJAH9mh6XPPrp0=;

b=ICDxevXP0OVR4hvsPW6I6zK7w6QKVWDQQ+mdfUKUL479FnR7GOlLdT3dOldHEKpFp3

4J072nZVBVfoPyXYBuDD2ocspcgnv1CvIc5fU+mET/EzKwAgViluLJW9cHPvzedx0EzH

pdLxzKCAbW311lB5HvEcKeR8TTPAtirNTAr//nqhbc7rWUhJY33CGSxbHUCr6orPpmGq

Nr9NqC8RMw7htBn8RAVVkfpSdeEtUSb8OYi7ZEnmnTEqq/kFBaGIhFvQrXstSLEC1vfI

Njsi1nJ9Y77mTjW9G1iytK+Y111cWOPPc2C2J7OtkrvyUYI0vkO2iXxLwCl8TPt2E3QO

FIfQ==

X-Gm-Message-State: AOJu0YwkPUsAJ6dFmnqnRfSIqscpVEKy/8tHu6AR8L33hGAv5izPYgu6

4Usd86P8vCk83YyFSCBw1AQyeC1Vs6D6ty+HWDIhr7hghbBvRQKtldY5tbkDYmozv7yZ5VTYThb

UWhnfd1Z4TBlPL1MMZh7Ro2CwuDbLEmQ6

X-Google-Smtp-Source: AGHT+IHiLigFDR4RKqqjnTjQsuG8OO4PAMr6q31aKYPljBluCVlK230Q+ow41yPOeFl3zV61+tTv+mlFPd20SABL1Fw=

X-Received: by 2002:a5d:4086:0:b0:367:940a:8ac8 with SMTP id

ffacd0b85a97d-367cea68020mr8882496f8f.21.1720804866387; Fri, 12 Jul 2024

10:21:06 -0700 (PDT)

Received: from 1008170693301 named unknown by gmailapi.google.com with

HTTPREST; Fri, 12 Jul 2024 10:21:06 -0700

MIME-Version: 1.0

From: Saral sing

Date: Fri, 12 Jul 2024 10:21:06 -0700

Message-ID:

Subject: =?UTF-8?B?ZGF2ZUBkb2N0b3Iubmwyay5hYi5jYfCfkpXwn5KV?=

To: dave@doctor.nl2k.ab.ca

Content-Type: multipart/alternative; boundary="000000000000c9f7c7061d101a9d"

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Subject: SEO Service within Affordable Price......!! Hi, I

found your web contact email dave@doctor.nl2k.ab.ca. I would like to discuss

Digital marketing services; our main services are listed here:



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.221.66 listed in dnsbl.ahbl.org]

[209.85.221.66 listed in dnsbl.ahbl.org]

[209.85.221.66 listed in dnsbl.ahbl.org]

[209.85.221.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.221.66 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.221.66 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.221.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.221.66 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.66 listed in will-spam-for-food.eu.org]

[209.85.221.66 listed in will-spam-for-food.eu.org]

[209.85.221.66 listed in will-spam-for-food.eu.org]

[209.85.221.66 listed in will-spam-for-food.eu.org]

[209.85.221.66 listed in will-spam-for-food.eu.org]

[209.85.221.66 listed in will-spam-for-food.eu.org]

[209.85.221.66 listed in will-spam-for-food.eu.org]

[209.85.221.66 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[209.85.221.66 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.221.66 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.66 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.221.66 listed in list.dnswl.org]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[saralsing9969hd(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} =?UTF-8?B?ZGF2ZUBkb2N0b3Iubmwyay5hYi5jYfCfkpXwn5KV?=



--000000000000c9f7c7061d101a9d

Content-Type: text/plain; charset="UTF-8"



Subject: SEO Service within Affordable Price......!!



Hi,



I found your web contact email dave@doctor.nl2k.ab.ca. I would like to

discuss Digital marketing services; our main services are listed here:



A. Full SEO package (with plan and activities)

B. SMO (Facebook, Twitter, LinkedIn, etc).

C. PPC (Pay per Click)



If you are interested in any of our services, please share the link to your

website. I would be happy to provide you with our company information and a

competitive quote.



Looking forward to your quick response.



Kinds Regards,

Saral sing



--000000000000c9f7c7061d101a9d

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable











quot;Bell MT","serif"">Subject: SEO Service within Affordabl=

e Price......!!





Hi,=C2=A0





I found your web contact email da=

ve@doctor.nl2k.ab.ca. I would like to discuss Digital

marketing services; our main services are listed here:





A.=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Full SEO package (with p=

lan and

activities)


B.=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 SMO (Facebook, Twitter, =

LinkedIn,

etc).


C.=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 PPC (Pay per Click)





If you are interested in any of our services, please share the link to your

website. I would be happy to provide you with our company information and a

competitive quote.





Looking forward to

your quick response.





Kinds Regards,


Saral=C2=A0 sing





--000000000000c9f7c7061d101a9d--

Ukrainian dating spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Jul 2024 07:52:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSGge-00000000Hjd-2vzH

for dave@doctor.nl2k.ab.ca;

Fri, 12 Jul 2024 07:51:48 -0600

Resent-From: The Doctor

Resent-Date: Fri, 12 Jul 2024 07:51:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dm6nam04olkn2018.outbound.protection.outlook.com ([40.92.45.18]:50017 helo=NAM04-DM6-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSGem-00000000HDI-0cqD

for doctor@nk.ca;

Fri, 12 Jul 2024 07:49:56 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=X/iGNrACe+qMDAaM4rbpxxkVIJVwD4DBEos5ezxhC93+MMGnEzxokWe/MJ5eqrVpDdPW3nRdGVBEj5lEpFeJ9QtIL2lcVMwDF8BQog3A8hqy235yFwjrsI6p/nJEtFk8g2l5w++b/yjhCdW4ApQdNBbQmeFwcfqxMAVaTKxtB2dyp3vEXn7nDBgiTFrSqz1fvbJ949SHIZf7QBAnTz4xcMZ6sN5yDxb5wsR42nt5pvHvCguYrNQQRUc3RguQMFWXHjsU7sXJjFsMGTURQYSqu5gzGb0HjqlQmnWiz1/fC0A4Dd9D/yquQjA0MShRKCCmjdErVAcyctufQHp4WxhknA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=l/F2dnnGhbKYLur1X+Rg/7mSd65/ij7gRl8kIVgk+Mk=;

b=Bh5k37EL0cvcm6k8S7TAEAqZvPnkULF1daFv6jvPZsYbH1dqIwmAUZq6YXFMAzljLCrf1uaKqzqeQ6B9yrdJpEa0xPEPgvrjFWJol9xWiar1VaFnwlz8g37eTiyDC00CAcGRgsSCvLAZlM6wCr3dfBUpG+4DaCr2Lf8zGByXiArDegbPiSVQYUASp5c8jwUEwtDIuI1lTJifwAnMRXQG/84ooPxS5HLeRCMKKJeXlhp8yu8a5kmbCJvzEXO4HDUj3N4shVAv6mdEdQaSoMi9ghX82FRp1i2Ge5z7dRat+1koyi/pBNUQonXXSeSMUiSEw6bpR+5LYskU/qqpAlLYjQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=l/F2dnnGhbKYLur1X+Rg/7mSd65/ij7gRl8kIVgk+Mk=;

b=NCUeNhELf2TSL10UctDK49LazPT2gYLv7PuLtesMfJbfPv/d4sBXSkWp5KnmmwMYOw0clxce9l8EMY6eTjgqn+PIoy7ikUCZmKIfW0ItyeFtXETEPVvhkZMciGc/6VrRPaHlPuaP57RXS6MrQTHIiGK4jY7QuoNWOQllrIL2CA/AzJ91YCCQ1qt8zaVWfV3gYFBwyM4JdOW2O8Bejp21UwpDB8gZb1CDtbsCnLDEl4oc8JlKA/T4Q3bAKH+Vhu6N1Erp0pYbmt8ZnVk3RLQ7Qiyp4naLqBYU7RhM5Dv7YLzC5WonBOyu/FbAsJLRwroY5Sn3MXvhFQ5x0zLeUBGAmg==

Received: from CPUP215MB1899.LAMP215.PROD.OUTLOOK.COM (2603:10d6:103:14f::14)

by SCYP215MB2285.LAMP215.PROD.OUTLOOK.COM (2603:10d6:300:a7::6) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7762.23; Fri, 12 Jul

2024 13:46:54 +0000

Received: from CPUP215MB1899.LAMP215.PROD.OUTLOOK.COM

([fe80::581c:5a81:a2a0:ae61]) by CPUP215MB1899.LAMP215.PROD.OUTLOOK.COM

([fe80::581c:5a81:a2a0:ae61%7]) with mapi id 15.20.7762.020; Fri, 12 Jul 2024

13:46:54 +0000

Content-Type: multipart/alternative; boundary="===============3087943738138567087=="

Subject: Date night with Ukrainian women

From:

CC:

Date: Fri, 12 Jul 2024 13:45:26 +0000

X-TMN: [plHeAURXFh4tjw5zCVENqkwZZGrouVmN]

X-ClientProxiedBy: VI1P189CA0027.EURP189.PROD.OUTLOOK.COM

(2603:10a6:802:2a::40) To CPUP215MB1899.LAMP215.PROD.OUTLOOK.COM

(2603:10d6:103:14f::14)

Message-ID:



MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: CPUP215MB1899:EE_|SCYP215MB2285:EE_

X-MS-Office365-Filtering-Correlation-Id: 254c05e7-6b01-4f8a-0bf2-08dca27916da

X-Microsoft-Antispam:

BCL:0;ARA:14566002|461199028|42300799015|12050799009|9400799024|8060799006|19110799003|1680799051|9000799047|4601999012|440099028|3412199025|4302099013|56899033|1602099012|2406899039|1710799026;

X-Microsoft-Antispam-Message-Info:

=?us-ascii?Q?U+RRHmfFlhdYkVq1RBLS/CffOnSvImgAYFezj0z2YqSmVmBksxchIUVSCLik?=

=?us-ascii?Q?mVcS6tCfLHr2DsxFrMd93LGY0gGnhTkI8P1R5RoeL96D0klWYjZspA/8v4pU?=

=?us-ascii?Q?LzvLSd3BUi0cg3W3ZVoJaVgcPZFcI6iNpe/ygyzH5j7lvcgouBfPR87UoIXA?=

=?us-ascii?Q?H+rXKfvytfbDzaz6JAKdCPNfVYxbw0aOHYcupiF7q0vEmb1cdQbkOwn6szD4?=

=?us-ascii?Q?0oP2AGP32Apqw2EXpe1iSZ/8fDzKi7t8lXLa7by85ih0/ncrMUJJvWgVmNPC?=

=?us-ascii?Q?Tpjk21LujwcgP3FVkO8xawXdNVNmROEmQ91gzLeboIaiXcfNxTkqKVCaznpF?=

=?us-ascii?Q?xKc2byRx4+gi0o5KQf+SGkOnxnlTwAUnKWEa2yhe+lJR4GCu+I4UNZT4Gaxs?=

=?us-ascii?Q?hRSrWmiT9o+A8IC3rck9voK8SfuxjW88m39lchPocnR3O8PRs9WCifUjuOFA?=

=?us-ascii?Q?SrLzLvs7Oajnf1SXgKkIQQxjPoiopIoG/jDzStsP1racudUZN1MRDpQKDspW?=

=?us-ascii?Q?ripeR6oYTaYKZ2UoSHh8RDJiO9OdDsPmK9E6OIn3TiHTJoDtBT3ernuoBzyM?=

=?us-ascii?Q?TyKSgilM/MBUh+AglKRumUtzsGOCLXMXmt2/ELqajWMlKBTc5Ykqj0Uk0J1Q?=

=?us-ascii?Q?lafy/lc6h+XzJozItfrUTmqxGSL1S84Zl2MCwBAOdkjyHq+ChanFw+W/VW5B?=

=?us-ascii?Q?yMI1NomKI8rLt3jIM3J4tGZ+7MHDVKKpj8XkeO0xz35FfPetHLuSAv+BWiZf?=

=?us-ascii?Q?fpWdMQUBIYNFSDV2eEeqpcVYVy2/u1dEtpqYTavMsZI0TLMzsoi82pV3Wl9L?=

=?us-ascii?Q?Bmoa07Pflm72g2ciWedLZiUPxComFgllVaZO37lCw6GZg3mEb98FOnwnf17m?=

=?us-ascii?Q?Q87MAkNRNo+TA8JEjmTT2zqjneALvOiJpJjveIcsWVflWGhlRMMR7j+j6JZ3?=

=?us-ascii?Q?hEvEANo2FvSy7Txi7Xhlh/NXraF2KIUld4vuqLXHKdSA4jN8ddhdRABq0N3a?=

=?us-ascii?Q?FYAeJh/WDn5j0/ZnsdLxEXHxQAjgpccPTDRJIDySLwoJ5lvSKYo8wmyNRI/c?=

=?us-ascii?Q?8eXl291ARTIpBRq/vIEOSMV39pBMEm8dCzSSpFxsUF/jfWyQTGzqxCJq0Fco?=

=?us-ascii?Q?VywIBlOoeetD3UjlIyYKdYFquksdx1Y31XYlHYw1vJ7Y3YkOLs6E7VLLn/eX?=

=?us-ascii?Q?yWQzjpoEMtJPWVounkBW/dW1iWpXjsZjALXY9ppcqjM02M9ahCieB1nGYgq7?=

=?us-ascii?Q?evE61femipfqHJe+FUHPBykw6r0cHrtZ4PMNKJ++ZI141HhW9x1e3WxB4wv4?=

=?us-ascii?Q?7n/ZUsukvSdySrd1YIRNj1U/2p/slvyzdrb+Uk0BayJ89RhPJmnl38ZzW7Wg?=

=?us-ascii?Q?z+/UmpnW27rF+jB4S5Cvjj1AnYcXw9KLzLJiP4Dmd40MT6jE3qrbPdENm8BX?=

=?us-ascii?Q?NeNyot6cbV58aow3aDJqmU3kdGOFKkuZZeuRYlbwYcM+kF5/oXtKy+x3e5jw?=

=?us-ascii?Q?WD2CjZkCrWU8mgEXx9/b+rlzraqwp78/xcQt?=

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?us-ascii?Q?NMMHNglTO5i7N1ZadqAAb2t4QAe7OApBJzxMuVpYu0Cn7CV8OTDmaxa6otK2?=

=?us-ascii?Q?qOQ3Kqtm79sPY43lR05Wxrz0P5OvRX6SlJmb/p3DGVTi0V6u4/IPqqwwvEeK?=

=?us-ascii?Q?v0nKhbmEvFAP540QNkgHvyuvTwWy99KH2aQ7cEgEeMiQ42EtnWjZ/h1l6Z44?=

=?us-ascii?Q?uzm7R9H/8ruUqev6VjtHlvF5rLmtYkjWfw/CxeSLmdsEdTRX1GP25cCYsIm6?=

=?us-ascii?Q?okgvqAjsPYzpLuj/xwG/YB11T0RrnvkGpbKT/3/5M69zaHa/RCSIjn3pPn2p?=

=?us-ascii?Q?28claYhZWSbw/ixSDy+KmYh173f6d2I57m7pUSczYe5LR/daIiYcgnk0TswT?=

=?us-ascii?Q?AAiDnexzeSBQcfcFYqYwbKAyjonIhRUfGg5SCULY3g68yIVp6AddMKx/rmKZ?=

=?us-ascii?Q?1bPGhVUpZTzRhEIcs6TcZvELlvMZUF9Uxfg2dHECnzkVrlL2XFG07M4sUf76?=

=?us-ascii?Q?xyRROqCpl6ZSjEr8VZdB2FE9oxIDIBOdVg2Iot0yTIqDNlwsjl9I+fCESfoV?=

=?us-ascii?Q?OVPEN3egTIDTl5MGyirbnUdrF/MEWQb/jedJcb+K8ZFlAQs2Dr9zofUF1Q2A?=

=?us-ascii?Q?q9H5QAjm6avzknjUpWGk0+uatecMGU/shO+bxXhRH7WsO1/PzTNLaEehG34L?=

=?us-ascii?Q?VQ7WERGs9TIrtplD0MYxnSQMA6jMTt890HRhY62j4vIZJS6y1q2WVTj/yMnh?=

=?us-ascii?Q?x3YPcqBgAgewG+CaV0TbK0OcsBUVF846IGFSxI3q/16Dgu+4Zfx9x/Emm/z0?=

=?us-ascii?Q?JM4UkkwyBB1c7Fc1hZCQST2kWdeyPPhIwsQHK2MmposhPck4aG0HOpbnwSoK?=

=?us-ascii?Q?+aItBLPRUARg3ICdUu+x68krzM0F7EUJWs7f5dok26RfNlnqOMzm/lC1CYtq?=

=?us-ascii?Q?uAMKznwXCUxVsrlYoScMz9n18vKUsHj6/AHuFNSxcyTDp8hpMGa8CC1UoJXB?=

=?us-ascii?Q?HJmWaJ59F/892MjjHcPpR92Drne9Tdo4f4p05aJAfX6kjejcC82lgH03/B2u?=

=?us-ascii?Q?+Jcwv/fMiGdQYhQHmIXu0kCeRPjhuRQng7EHUDyB9Uds6wdEofbgSBrJOFft?=

=?us-ascii?Q?VLF1G6YzV2RNjVtDSj3OZk7D38KAab2adMs4odObd7UEQ1GUbWix4kQNIsbv?=

=?us-ascii?Q?E/Dw1BOqN/PUAmwUkrGHRF1BM8WpoIrgNQ8HxPqnCoDI3F85Jo8uzxaLFmf8?=

=?us-ascii?Q?ok8t9/4UytycbL3Gmokk0yxzgDH5KYDrWRJzyc/illOH+IWxMyAqvm/qLXF2?=

=?us-ascii?Q?aMDJ+rjs95XdditiXuZK?=

X-OriginatorOrg: sct-15-20-7719-20-msonline-outlook-d3eb6.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: 254c05e7-6b01-4f8a-0bf2-08dca27916da

X-MS-Exchange-CrossTenant-AuthSource: CPUP215MB1899.LAMP215.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 12 Jul 2024 13:46:54.0708

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SCYP215MB2285

X-Spam_score: 15.4

X-Spam_score_int: 154

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: If you're looking for a Ukrainian woman to start a relationship

with, you're in luck! Many Ukrainian women turn to online dating sites to

find a compatible partner. These women are intelligent, charmi [...]



Content analysis details: (15.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.45.18 listed in dnsbl.ahbl.org]

[40.92.45.18 listed in dnsbl.ahbl.org]

[40.92.45.18 listed in dnsbl.ahbl.org]

[40.92.45.18 listed in dnsbl.ahbl.org]

[2603:10d6:103:14f:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:10d6:103:14f:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:10d6:103:14f:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:10d6:103:14f:0:0:0:14 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.45.18 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.45.18 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.45.18 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.45.18 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10d6:103:14f:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:14f:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:14f:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:14f:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:14f:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:14f:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:14f:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10d6:103:14f:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[40.92.45.18 listed in will-spam-for-food.eu.org]

[40.92.45.18 listed in will-spam-for-food.eu.org]

[40.92.45.18 listed in will-spam-for-food.eu.org]

[40.92.45.18 listed in will-spam-for-food.eu.org]

[40.92.45.18 listed in will-spam-for-food.eu.org]

[40.92.45.18 listed in will-spam-for-food.eu.org]

[40.92.45.18 listed in will-spam-for-food.eu.org]

[40.92.45.18 listed in will-spam-for-food.eu.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: clck.ru]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: clck.ru]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.45.18 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.45.18 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[chonsies8njc(at)hotmail.com]

1.2 MISSING_HEADERS Missing To: header

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} Date night with Ukrainian women



--===============3087943738138567087==

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: 7bit



If you're looking for a Ukrainian woman to start a relationship with, you're in luck! Many Ukrainian women turn to online dating sites to find a compatible partner. These women are intelligent, charming and have a strong sense of family values. They are looking for men who share their interests and are willing to enter into a serious relationship. On our dating site, you can browse the profiles of these beautiful women and start chatting with them. Your perfect match could be just a click away!

 

CHAT NOW 

 

 

 

 

 

 

 

 

 

Click hereto unsubscribe.

 

 



--===============3087943738138567087==--

Web / SEO/ App spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Jul 2024 07:52:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSGgW-00000000Hgs-1z76

for dave@doctor.nl2k.ab.ca;

Fri, 12 Jul 2024 07:51:40 -0600

Resent-From: The Doctor

Resent-Date: Fri, 12 Jul 2024 07:51:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-mw2nam10olkn2052.outbound.protection.outlook.com ([40.92.42.52]:41857 helo=NAM10-MW2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sSGSt-00000000FeY-1lqq

for root@nk.ca;

Fri, 12 Jul 2024 07:37:40 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=D+U4+hhKbFd4zbIet/hVyze8nTkLJyuNVu6v7UsGGfi2d3xuv4hO4v7J+R5SqXGbFwrSRkTZ85YTcCUcZmNEzrKvcq6p5ukec+GVbeY8mZu8p8nIZq8IiXYa3dLtjnoxYCf0CnCNz/PqWWIlqg1gO/tr0DGbT4NV25b9bdf7eHioCQYLYlf4wsHFLggFXyJhMZg4wATLaCv1KLoDXQWoWdXZLjYKxmywMdstAJVIQDNl4vpMv+cMpUgKtEoBcS66Hn8tgxtVOdUWQM7s9cxiQuPmpl5GcaFCAj+gIgHynTcOlrNdhEnnYSWOXrEFFdnzWxNlotVfBfltOh4Gb/jkfA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=cVMrtat1xw610mwiVFAk/hvJUP2NGuNt5EPDZLVCN0M=;

b=j47SZIGTmQa4mY/9C3gwE7iad4I7a13NkVNLsMLCRyxiA4PlcBwaY3+7T8rTyCGqIvl5LFdY/BRFauSii4R7NXoYpIr/hKw3tcVJRdDy1qyOrH/J4lMAyVywh9qWzyCs1mxavb7PMJILosUP5XThYRCS+3/6iXCqnBdjTEr2YOgtDjBrZgwMdFicO4cBxQZNDcyF4Sztsgvof5TF85EBeCFuvnUAMWKBnRdio9tAecXIYQL6h82OMAI9s6WGyC80FPc2cI3vnCavthY4bt0ERs6fOYxzoDhMpZulHj/LSGX52YZ93+xhsf2rf3SnU66Wi/59EZi7gmrzcMpAPaJZ3Q==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=cVMrtat1xw610mwiVFAk/hvJUP2NGuNt5EPDZLVCN0M=;

b=ZdjKtAO3a2Fnl4Cu94aCGO9plgD6cKanvkTF81sJSQvO945LM2fhx7H1JhFyemNyC7omxP21dlvSt2okzLEDkx0FIAZPWtkbBT7JJgoLtazlXRt5PS3UfbOZXpPvdep7EaTAQ2wmnJysKtZsu3X7No2NC3p0OtFNwJBlAq7R2tUApVfS0g5PvTlNTndgicM9u/8IwjwT5txCZgkYLyeQ1Zd73/Fpd7UyG9Np29lmxjp7QYdmf+NGMwCZsWGKLhyeKzrRXbiK2GrG+Tf7OkJcK5SnWtpjLgz5v8amBngRCsMotb9TJwXqlYknOMjX6+bJIyavoeyR29Ws6sa1M7gacg==

Received: from CYXP220MB1715.NAMP220.PROD.OUTLOOK.COM (2603:10b6:930:e8::20)

by PH7P220MB1326.NAMP220.PROD.OUTLOOK.COM (2603:10b6:510:320::15) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7741.35; Fri, 12 Jul

2024 13:35:12 +0000

Received: from CYXP220MB1715.NAMP220.PROD.OUTLOOK.COM

([fe80::21c0:84c5:8475:63f]) by CYXP220MB1715.NAMP220.PROD.OUTLOOK.COM

([fe80::21c0:84c5:8475:63f%7]) with mapi id 15.20.7741.033; Fri, 12 Jul 2024

13:35:11 +0000

From: bi fugere

Subject: developer

Thread-Topic: developer

Thread-Index: AQHa1GAA18QwaZiACUaFyucKeKUIRg==

Date: Fri, 12 Jul 2024 13:35:10 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn:

[LLQQ+iOUqBGFLOqA5Y4iWvynxtMb7A1EGpjQ9OkC4bqUBv1FPEyRkUy992PXBxn5vrmDyy7gCcY=]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: CYXP220MB1715:EE_|PH7P220MB1326:EE_

x-ms-office365-filtering-correlation-id: 09b729e7-324e-4422-a9d5-08dca27773ca

x-microsoft-antispam:

BCL:0;ARA:14566002|461199028|19110799003|8060799006|102099032|440099028|3412199025;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?c8A8O75isfCfT69hXwULfCM7w6OA7HX9dIS0gC75hW2ZTp7G/OA+yUwq?=

=?Windows-1252?Q?k+1XZNeVxsjyinbO4lUmsR86hOg1KYYRLxeYTcI3bOhExmh2a+Z+Uhdx?=

=?Windows-1252?Q?gCqyvh9YvFZ7oWahZZLT771/mfDdgm4i9aQ22ysg9ELZNxdE+Yhcnp+p?=

=?Windows-1252?Q?ZB4O8w1bIgpkPP/Ho6uFPYgmwZcF4UjkoDBviOxybPtmSLw0RROREzRq?=

=?Windows-1252?Q?7Ddcs4ZfUoWNDtPla8QUcKa8awLRrtT2CPk6vxikJwv/GK7bbFF6z7cQ?=

=?Windows-1252?Q?Z420WGh5TnWPVgtPRB7qtNNoG/Oc5g3tIVYpEszqcx9+HaN0OTtfruDj?=

=?Windows-1252?Q?UMVom4rubQSVSYC8ld0rPoB0eBDn21OcAlWbnGATeOf6E3yCZnKbytuU?=

=?Windows-1252?Q?6ICYA4zUVPB6CRZ03S9iVJ1+zCrI6Y9l3fNtiMK4HC8gVcbAd8QCqNVy?=

=?Windows-1252?Q?FQ47OdTDa7MGoClNga9GF5mjqlvZkmbC10hjgyp66WXDzJvyfVzrKUl7?=

=?Windows-1252?Q?wGl8MbaPAdJqf7ykztdlctrtkXqnUY3gpWvqXtTMigVmbqqahDI+7j7c?=

=?Windows-1252?Q?ioB4rkz9nta/DixIHDHJ/iTBolQyG9uR8L6fwHKWRXhCMzSy/h9VmLmU?=

=?Windows-1252?Q?F2Wd/v7MxiFBdpZQkoNGxzMvusdaGLRLPRPHXnQZwLHvG2s7oXNIvUXV?=

=?Windows-1252?Q?fxEqQoMLYiVDWS4FMl4fANRhKzGec8xS5f590n+xe2A3mL9FG0yydvlD?=

=?Windows-1252?Q?DQgzA0SqhEBX6pv2V4AQsl7EpqWj7hNvE+fX4Jw2a5BcdOz4AC4yBRqL?=

=?Windows-1252?Q?u/CxU4BB8LJhpLXaW/tLJLLlMoRSLpG8jUCkBXj18OOFk9Kq/BHletKV?=

=?Windows-1252?Q?r8h7LV3Vk5SmnvLkCWrsraKFRhfRi69PMbRYhGc2jgFakxivzS2sQtQL?=

=?Windows-1252?Q?vtAC9lcxXicL2sxUUoKzM1iaJUhcXDjfhM/N73sdkcpHN8rnygEqN6j2?=

=?Windows-1252?Q?MZwoIfXQ78/7ElUW7QBIKRpS2g3ei275vTTH6DktZlgjaiB4lZIdJtAS?=

=?Windows-1252?Q?EvT9pwTZxSoDEHC8bXHG6OWcnbsHa4mf4db+tfWTVxHPLlNzY83gbFlI?=

=?Windows-1252?Q?7eFWHsfM9J7xVhFsbbJbiBi/mH0j31wwHg3UHbpSDaKeid/bow3P02M4?=

=?Windows-1252?Q?esho1qCS/Wk681wX8uzPOJ/U0175ReIBNMKXZ9wgxkcAm3CQ8zXusTes?=

=?Windows-1252?Q?+OV643mgVOhqyeni3ukdKNMDOKhEqHQjVILURGaCKYjf/UElJ6QDahi8?=

=?Windows-1252?Q?pU+wKuXOg6xuTzvtW8u8/4INaVkYAoFXb19bQWmZ/HnVV1V1iuuVtu2I?=

=?Windows-1252?Q?IRaj+dbW4u+FcDcI1hcUMioYh164EuTJUW4=3D?=

Content-Type: multipart/alternative;

boundary="_000_CYXP220MB171599B82934D34585377A32CDA62CYXP220MB1715NAMP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: CYXP220MB1715.NAMP220.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 09b729e7-324e-4422-a9d5-08dca27773ca

X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Jul 2024 13:35:10.6984

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH7P220MB1326

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Are you looking for affordable App Developer? • Dating

Apps • Education Apps • Finance Apps • Food Delivery Apps • Health

Fitness Apps • M-Commerce Apps • Real Estate Apps • Social Networking

Apps • Taxi Apps • Travel Apps



Content analysis details: (7.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.42.52 listed in dnsbl.ahbl.org]

[40.92.42.52 listed in dnsbl.ahbl.org]

[40.92.42.52 listed in dnsbl.ahbl.org]

[40.92.42.52 listed in dnsbl.ahbl.org]

[2603:10b6:930:e8:0:0:0:20 listed in]

[dnsbl.ahbl.org]

[2603:10b6:930:e8:0:0:0:20 listed in]

[dnsbl.ahbl.org]

[2603:10b6:930:e8:0:0:0:20 listed in]

[dnsbl.ahbl.org]

[2603:10b6:930:e8:0:0:0:20 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.42.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.42.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.42.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.42.52 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10b6:930:e8:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:e8:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:e8:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:e8:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:e8:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:e8:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:e8:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:e8:0:0:0:20 listed in]

[will-spam-for-food.eu.org]

[40.92.42.52 listed in will-spam-for-food.eu.org]

[40.92.42.52 listed in will-spam-for-food.eu.org]

[40.92.42.52 listed in will-spam-for-food.eu.org]

[40.92.42.52 listed in will-spam-for-food.eu.org]

[40.92.42.52 listed in will-spam-for-food.eu.org]

[40.92.42.52 listed in will-spam-for-food.eu.org]

[40.92.42.52 listed in will-spam-for-food.eu.org]

[40.92.42.52 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.42.52 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.42.52 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.5 ONE_WORD_SUBJECT Subject with only one lower-case word

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[bijrfugerecg(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} developer



--_000_CYXP220MB171599B82934D34585377A32CDA62CYXP220MB1715NAMP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hello,



Are you looking for affordable App Developer?



=95 Dating Apps

=95 Education Apps

=95 Finance Apps

=95 Food Delivery Apps

=95 Health Fitness Apps

=95 M-Commerce Apps

=95 Real Estate Apps

=95 Social Networking Apps

=95 Taxi Apps

=95 Travel Apps



If you are interested then I can send you more details on samples, packages=

and portfolio.



Thanks

Bi



--_000_CYXP220MB171599B82934D34585377A32CDA62CYXP220MB1715NAMP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








y: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans=

-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hello,



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

  



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

Are you looking for affordable App Developer?



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

 



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

=95 Dating Apps



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

=95 Education Apps



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

=95 Finance Apps



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

=95 Food Delivery Apps



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

=95 Health Fitness Apps



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

=95 M-Commerce Apps



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

=95 Real Estate Apps



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

=95 Social Networking Apps



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

=95 Taxi Apps



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

=95 Travel Apps



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

 



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

If you are interested then I can send you more details on samples, packages=

and portfolio.



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

 



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

Thanks



y: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans=

-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Bi








--_000_CYXP220MB171599B82934D34585377A32CDA62CYXP220MB1715NAMP_--

CRA phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 11 Jul 2024 16:45:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sS2Wb-000000008bn-28dx

for dave@doctor.nl2k.ab.ca;

Thu, 11 Jul 2024 16:44:29 -0600

Resent-From: The Doctor

Resent-Date: Thu, 11 Jul 2024 16:44:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail1.bellabeal.online ([86.48.6.240]:54304)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sRyIM-00000000N0p-2Ye7

for sales@nk.ca;

Thu, 11 Jul 2024 12:13:35 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=s1; d=bellabeal.online;

h=MIME-Version:From:To:Date:Subject:Content-Type:Content-Transfer-Encoding:

Message-ID; i=support@bellabeal.online;

bh=Iv88YaL+pIa82MHI8/XPkkIgjDUp3PsOaNCb89De+xU=;

b=Dr+j4z/vndkO+GxUEYnhVy59qkOpq09L3gjJGpexFJBWJAmNmcM6DnGBilYQ5HuxnK6T1UYcmY9H

bIQQ0dExFI7hKdYsvL3v2hKriIcGyElHKrDId5Kln7OApZqTcD0Bl7sPpvUeZJD7EYbHX/w7fyVL

d4VGOSydr0rgGRKy5wwBIhgo3n6PIZxxquq3xKbbIfkBFUT7cUmV9m618kTNEXytnBy+uN0MAd9+

WFy/DslGPdSkbrmNcnKNYQ2wKD6tX+3Xz1AZ2go+et99dy0KBxT5siCzevuWDi4UYVlRvyq//TKd

hiSYcnJwcfifvrSVBmq12le7HByy+ag/Wx7fcw==

MIME-Version: 1.0

From: "Revenue Agency"

To: sales@nk.ca

Date: 11 Jul 2024 14:11:28 -0400

Subject: Notice of assessment!

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: base64

Message-ID: <0.0.0.12D.1DAD3BDC06A26C8.0@mail1.bellabeal.online>

X-Spam_score: 18.5

X-Spam_score_int: 185

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: English version ** La version française suit ** Revenue

Agency sent you new mail online called:



Content analysis details: (18.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

[86.48.6.240 listed in dnsbl.ahbl.org]

[86.48.6.240 listed in dnsbl.ahbl.org]

[86.48.6.240 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=support%40bellabeal.online;ip=86.48.6.240;r=doctor.nl2k.ab.ca]

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: bellabeal.online (online)]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

2.0 MIXED_HREF_CASE Has href in mixed case

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} Notice of assessment!



PFAgbGFuZz1lbiBzdHlsZT0iTUFSR0lOLUJPVFRPTTogNXB4OyBNQVJHSU4tVE9QOiAxMnB4

OyBDT0xPUjogYmx1ZSAhaW1wb3J0YW50OyBURVhULUFMSUdOOiBjZW50ZXIiPjxTVFJPTkc+

RW5nbGlzaCB2ZXJzaW9uIDwvU1RST05HPjxTUEFOIGxhbmc9ZnIgc3R5bGU9IkJPUkRFUi1M

RUZULVdJRFRIOiAwcHg7IEJPUkRFUi1SSUdIVC1XSURUSDogMHB4OyBWRVJUSUNBTC1BTElH

TjogYmFzZWxpbmU7IEJPUkRFUi1CT1RUT00tV0lEVEg6IDBweDsgQ09MT1I6IDsgUEFERElO

Ry1CT1RUT006IDBweDsgUEFERElORy1UT1A6IDBweDsgUEFERElORy1MRUZUOiAwcHg7IE1B

UkdJTjogMHB4OyBQQURESU5HLVJJR0hUOiAwcHg7IEJPUkRFUi1UT1AtV0lEVEg6IDBweCIg

ZGlyPWx0cj48U1RST05HPioqKiBMYSB2ZXJzaW9uIGZyYW7Dp2Fpc2Ugc3VpdCAqKio8L1NU

Uk9ORz48L1NQQU4+PC9QPg0KPFAgbGFuZz1lbj48QlI+PEJSPjxTUEFOIHN0eWxlPSJCT1JE

RVItTEVGVC1XSURUSDogMHB4OyBCT1JERVItUklHSFQtV0lEVEg6IDBweDsgVkVSVElDQUwt

QUxJR046IGJhc2VsaW5lOyBCT1JERVItQk9UVE9NLVdJRFRIOiAwcHg7IENPTE9SOiA7IFBB

RERJTkctQk9UVE9NOiAwcHg7IFBBRERJTkctVE9QOiAwcHg7IFBBRERJTkctTEVGVDogMHB4

OyBNQVJHSU46IDBweDsgUEFERElORy1SSUdIVDogMHB4OyBCT1JERVItVE9QLVdJRFRIOiAw

cHgiPlJldmVudWUgQWdlbmN5IHNlbnQgeW91IG5ldyBtYWlsIG9ubGluZSBjYWxsZWQ6PC9T

UEFOPjxCUj48QlI+PFNQQU4gc3R5bGU9IkJPUkRFUi1MRUZULVdJRFRIOiAwcHg7IEZPTlQt

RkFNSUxZOiBpbmhlcml0OyBCT1JERVItUklHSFQtV0lEVEg6IDBweDsgVkVSVElDQUwtQUxJ

R046IGJhc2VsaW5lOyBCT1JERVItQk9UVE9NLVdJRFRIOiAwcHg7IENPTE9SOiA7IFBBRERJ

TkctQk9UVE9NOiAwcHg7IFBBRERJTkctVE9QOiAwcHg7IFBBRERJTkctTEVGVDogMHB4OyBN

QVJHSU46IDBweDsgUEFERElORy1SSUdIVDogMHB4OyBCT1JERVItVE9QLVdJRFRIOiAwcHg7

IGZvbnQtZmVhdHVyZS1zZXR0aW5nczogaW5oZXJpdDsgZm9udC1rZXJuaW5nOiBpbmhlcml0

OyBmb250LW9wdGljYWwtc2l6aW5nOiBpbmhlcml0OyBmb250LXN0cmV0Y2g6IGluaGVyaXQ7

IGZvbnQtdmFyaWF0aW9uLXNldHRpbmdzOiBpbmhlcml0Ij48U1RST05HPlVwZGF0ZWQgVGF4

IERvY3VtZW50PC9TVFJPTkc+PC9TUEFOPjxCUj48QlI+PFNQQU4gc3R5bGU9IkJPUkRFUi1M

RUZULVdJRFRIOiAwcHg7IEJPUkRFUi1SSUdIVC1XSURUSDogMHB4OyBWRVJUSUNBTC1BTElH

TjogYmFzZWxpbmU7IEJPUkRFUi1CT1RUT00tV0lEVEg6IDBweDsgQ09MT1I6IDsgUEFERElO

Ry1CT1RUT006IDBweDsgUEFERElORy1UT1A6IDBweDsgUEFERElORy1MRUZUOiAwcHg7IE1B

UkdJTjogMHB4OyBQQURESU5HLVJJR0hUOiAwcHg7IEJPUkRFUi1UT1AtV0lEVEg6IDBweCI+

VGhpcyBtYWlsIG1heSByZXF1aXJlIHlvdXIgYXR0ZW50aW9uLjwvU1BBTj48QlI+PEJSPjxT

UEFOIHN0eWxlPSJCT1JERVItTEVGVC1XSURUSDogMHB4OyBCT1JERVItUklHSFQtV0lEVEg6

IDBweDsgVkVSVElDQUwtQUxJR046IGJhc2VsaW5lOyBCT1JERVItQk9UVE9NLVdJRFRIOiAw

cHg7IENPTE9SOiA7IFBBRERJTkctQk9UVE9NOiAwcHg7IFBBRERJTkctVE9QOiAwcHg7IFBB

RERJTkctTEVGVDogMHB4OyBNQVJHSU46IDBweDsgUEFERElORy1SSUdIVDogMHB4OyBCT1JE

RVItVE9QLVdJRFRIOiAwcHgiPklmIHlvdSBoYXZlIE15IEFjY291bnQsIHNpZ24taW4gYW5k

IGNsaWNrIG9uICJNYWlsIiB0byByZWFkIHlvdXIgbWFpbC48L1NQQU4+PEJSPjxCUj48U1BB

TiBzdHlsZT0iQk9SREVSLUxFRlQtV0lEVEg6IDBweDsgQk9SREVSLVJJR0hULVdJRFRIOiAw

cHg7IFZFUlRJQ0FMLUFMSUdOOiBiYXNlbGluZTsgQk9SREVSLUJPVFRPTS1XSURUSDogMHB4

OyBDT0xPUjogOyBQQURESU5HLUJPVFRPTTogMHB4OyBQQURESU5HLVRPUDogMHB4OyBQQURE

SU5HLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7IFBBRERJTkctUklHSFQ6IDBweDsgQk9SREVS

LVRPUC1XSURUSDogMHB4Ij5JZiB5b3Ugc2lnbmVkIHVwIHRvIHJlY2VpdmUgbWFpbCBvbmxp

bmUgYnV0IGRvbid0IGhhdmUgTXkgQWNjb3VudCwgZ28gdG8gdGhlIHdlYiBwYWdlIHRvIHJl

Z2lzdGVyLjwvU1BBTj48QlI+PEEgaHJlZj0iaHR0cHM6Ly9pdHBpc2hyby5jb20vIiByZWw9

Im5vb3BlbmVyIG5vcmVmZXJyZXIiIHRhcmdldD1fYmxhbms+VmlldyBEb2N1bWVudHM8L0E+

PEJSPjxTUEFOIHN0eWxlPSJCT1JERVItTEVGVC1XSURUSDogMHB4OyBCT1JERVItUklHSFQt

V0lEVEg6IDBweDsgVkVSVElDQUwtQUxJR046IGJhc2VsaW5lOyBCT1JERVItQk9UVE9NLVdJ

RFRIOiAwcHg7IENPTE9SOiA7IFBBRERJTkctQk9UVE9NOiAwcHg7IFBBRERJTkctVE9QOiAw

cHg7IFBBRERJTkctTEVGVDogMHB4OyBNQVJHSU46IDBweDsgUEFERElORy1SSUdIVDogMHB4

OyBCT1JERVItVE9QLVdJRFRIOiAwcHgiPlRoaXMgaXMgYW4gYXV0b21hdGVkIGVtYWlsIG1l

c3NhZ2UuIFBsZWFzZSBkbyBub3QgcmVwbHkuPC9TUEFOPjwvUD4NCjxQIGxhbmc9ZnIgc3R5

bGU9Ik1BUkdJTi1CT1RUT006IDVweDsgTUFSR0lOLVRPUDogMTJweDsgQ09MT1I6IGJsdWUg

IWltcG9ydGFudDsgVEVYVC1BTElHTjogY2VudGVyIj4mbmJzcDs8L1A+

Ukrainian dating spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 11 Jul 2024 16:45:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sS2WJ-000000008Zk-42GY

for dave@doctor.nl2k.ab.ca;

Thu, 11 Jul 2024 16:44:11 -0600

Resent-From: The Doctor

Resent-Date: Thu, 11 Jul 2024 16:44:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-tyzapc01olkn2095.outbound.protection.outlook.com ([40.92.107.95]:14574 helo=APC01-TYZ-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sRxes-000000000Rv-1N0q

for doctor@doctor.nl2k.ab.ca;

Thu, 11 Jul 2024 11:32:46 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=qW85UkCrjf3fGR97Ozz0lRJrGVLuflY/3h0HpvQ5HSBinBQL2Nil9CqC2AeFLSmT2IVLPgBSAjv8YzFZPKugWYGyu11riQvCvZOvd+jEeukuAF2fuejNUruRZHiX7TD19Yi3YOBPigcjelNEwcs7bDFRtt78rCUWpAoOfLdAjaGhxcRfZQnIdFkluXIl7RsS3ta0d0buyi5Et9fskW6Hoe5wGlikPY21xGum6Uaex5tT2OKiUg53cZLeG7iWvF5+1aSANqlnJNKj9aa2TQuequS3ny/n+TEQBohR2M6Hl50Lijc+BL1+7wxQ33k7Z3Un3jeBoY7Nogt9CotAVBeoSQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=fcmGP6+hFk7O3vgAxwKUC5WnGIRJ3M18Qxzu1V7Ha7U=;

b=TKyNNlTL0KHEzlhhqpRF+VgT/Z7DhRokMyPNJX4i9TfH/bJZh8Ty9v8nbpnsFGS4fKwm1Vl+KWVkwFUt0MVRcDpM2UCmUhQwI3exvmLbOzc3nMaWj0hBbv2wXjIfSuQbb6z9BAo7RHBWUl3KVitbe+oNa3NGe0AiIRXTshrJWAfUfnwGtagl39x3/rDaI50Cmfo4OiPWmq+SBkeDDm5YwwV0AIPXSH6GIiz8ZY1ufmYo7pBXuia+LufFdrqarFiy0lT4C0v8/SWRgWbQhS3oBe9Ak9nwt0BkM9Vie1z7VK9vzuXt3kq/6qFNA4TXzRhJcqPgknGMFZjqPRMoJFMhAA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=fcmGP6+hFk7O3vgAxwKUC5WnGIRJ3M18Qxzu1V7Ha7U=;

b=jNGDfw2UhRweNeenE1z9gbqkRnr+okKtc8bTpxW1MfLEKQvdzkKd5Z9i5JanC8KQy3b8bTRtfq7RgXhNiqotilnhJL2L2PIuzOr8PuvWiur3FZoJR3XjxnnlD/NYJM6jcNPvNKpb5aLqp8GzX2C5leQl1MGcuhTWu9tzfaL8dtvLAmIgDRZxHRW0zn87yc7yanKMNCe9r5vWuwGpI4OkVU1y/1wLkhVeG9A/10PL3Vk0p8fA1uRZbdOEHTmKtMHBjmDA2TAxe+sGEoiowM8LVGCnFGM0x+5rghu4BlA2iIgYeMIhd0yL+0Y3OoLR8RcXtXbB/Ou6T7x1Vnue/Iae2w==

Received: from PUZPR04MB4784.apcprd04.prod.outlook.com (2603:1096:301:a7::8)

by SEYPR04MB6703.apcprd04.prod.outlook.com (2603:1096:101:df::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7762.20; Thu, 11 Jul

2024 17:29:35 +0000

Received: from PUZPR04MB4784.apcprd04.prod.outlook.com

([fe80::e7f5:7eb7:81ab:d57b]) by PUZPR04MB4784.apcprd04.prod.outlook.com

([fe80::e7f5:7eb7:81ab:d57b%3]) with mapi id 15.20.7784.005; Thu, 11 Jul 2024

17:29:35 +0000

Content-Type: multipart/alternative; boundary="===============0804380260499195821=="

Subject: Love doesn't have to be complicated - join our site and simplify your search.

From: Ukrainian Beauty Online

CC: Ukrainian Beauty Online

Date: Thu, 11 Jul 2024 17:27:50 +0000

X-TMN: [LwZX9qgIXhhrPTdO9WVG33sJ0rG0rKGd]

X-ClientProxiedBy: VI1PR09CA0097.eurprd09.prod.outlook.com

(2603:10a6:803:78::20) To TYZPR04MB4788.apcprd04.prod.outlook.com

(2603:1096:400:123::10)

Message-ID:



MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: PUZPR04MB4784:EE_|SEYPR04MB6703:EE_

X-MS-Office365-Filtering-Correlation-Id: 6619a949-4d47-441b-d2e4-08dca1cf0523

X-Microsoft-Antispam:

BCL:0;ARA:14566002|42300799015|19110799003|461199028|9000799047|9400799024|8060799006|12050799009|1680799051|3412199025|4302099013|440099028|4601999012|1602099012|56899033|1710799026;

X-Microsoft-Antispam-Message-Info:

=?us-ascii?Q?v8A9cR9p9XqZlNInfHuGypS5/fmIR7NE305MK2dZHHQWy1s2Pw9ZSJ3zLQ6X?=

=?us-ascii?Q?skjjaCYjccMVFscKJTAcFA7BLTTuNUVJwWLiZoLyHieP7MLMpSNRC9Bmx/Nd?=

=?us-ascii?Q?HIJukEhprgdfeOfcHZwROpmV9G7RArMuhCfrXyW2ELcT1cCKVo7PBfqY1meV?=

=?us-ascii?Q?o8P9msnc9obyr66cL0axI4KDBXtA3BPN9Vz8FKlb5SAYjOH7la1QDS/9lBrh?=

=?us-ascii?Q?Rc7rVviZWPv2rzMp9qdLL0d5ps/BPtn18YU0wV8s9wVtAByIIopP791mLZtC?=

=?us-ascii?Q?lh0zopQYoO34qN7C0dJoz82ZdHACixRqFNnz1AXd6v7dEzubrAarK8VviOGd?=

=?us-ascii?Q?DYPzcegwzeAAGzaE0GqwUbkUT/boP2OBBP+4ubSncnXi27IP50FDrFUPYtF2?=

=?us-ascii?Q?iDXp9g8YhE1aBSc3RQ/akGTa/yCY66Fo5WC/0f31yo3LfvDWMzL0RuqIld2d?=

=?us-ascii?Q?z1YzjuyofYSPZ2SUdHQCkk4yIjtgRv/7YFLd+xewI0AsK/Fg2K3QVSmLA1L+?=

=?us-ascii?Q?zbI51g+AKq2ZU2nZX28cIm7vFLN2fVyykA/gT2OYyyoHwPynJXv060fzmN9H?=

=?us-ascii?Q?7kpUmu4UWwOWgBFAKcar/B9+WZY9z8360VpOm93zVQN8qiMPME2U4ufWNfSH?=

=?us-ascii?Q?1IdcPOqGiZ17A6dqdH6VrnmDmqJ/J8SxmqMAKyQDHCNQAOU19i1VLNVP8omg?=

=?us-ascii?Q?6SEkzDB1cTIH2DST4VrhJqwUJs/x4VupN/YxjtrNdvU1juy/nnC+Gh1VAVtR?=

=?us-ascii?Q?f/qIrPlAL0khknnGQB3uXTEhuQsxxsqoVkqfAqQNME6bAlVbTTtExsFkXzhd?=

=?us-ascii?Q?EBLpC4cqOyg9i5STZagWCNkIlX+XJFmRk1/srmnQxq59C6s24+0Gk6XB919S?=

=?us-ascii?Q?AhMc15EgLUYC93JbvuBJrfaOCv5kY/atrIEvyFNtfqlOqu3eS1Z/Mdr/iaI0?=

=?us-ascii?Q?QWap3ewKFwxmjXfZDL2t9mBbZy0FBm+ikMJ9Lm/4q8uszgzYNVTC6tFbwN3V?=

=?us-ascii?Q?usxwF8xVXRZ1BcFcp7jNiIRAjafrofQ3xrO6HosBSbJgiXO9GEhxfeNW1/RW?=

=?us-ascii?Q?DspzUHyl8VJhE6MAJDxy7dpZcceHir8fhNjyaWVsNJcNxt6Am+a/F3yC4GPC?=

=?us-ascii?Q?MxheelYFXcerR649dVZLGwjmmlkEsDfx7+dB0BgKksjOM3/k4whgvUCDTqNh?=

=?us-ascii?Q?5kPxkb/A5LpcBdxYBmwcS+6nW0V6b/7q2AJ9f//Pb8aKUc1vp+uo4M4Jm3Y0?=

=?us-ascii?Q?p0ctWhABh5NQLTfLgO7g+WXG20x7WDQb+Kjq7OBy83cf+WN4J4qQ1uxdJmQi?=

=?us-ascii?Q?k9U5VuS8uF45+z99K7wGwUUrLZxozHtOSqL2BUL5mztSUn28Oc/gAiBA1u3H?=

=?us-ascii?Q?1bPbs+c3UwjZL1j/Cv8beDfUmWvnb+07jp+0cKhSAmClv5COFiO46Ss0cqJb?=

=?us-ascii?Q?0dHB4H3yqFdJBuFZ/ygN344L5f1SjNTIFLHAF/vwZAyTXwg85NTjegpWQTZO?=

=?us-ascii?Q?IwOF2IGe536J31tgH58xvfpwFHD6waxRA2kMDqnLWRuDzzAI3PN1TmwksP/I?=

=?us-ascii?Q?k8Ca8a/vqnctPYsrJA2vXwGgvOgM6Wr2AUzlU2ZDlFdNBnPUJcIQ77GbgH06?=

=?us-ascii?Q?I8wAfjV8RPCx8n0FDI3QVz58cNU71Q9eebe/f2Ti8LUsfRpVsuNpraC6Gj09?=

=?us-ascii?Q?xRMpkWZx5aALgch1xqenvUfWcOQ=3D?=

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?us-ascii?Q?zjaZKwhPsFmLY7NrFXjSGCzzMFiT0wV/dVWqP9Pn8jGw/eX8vc+Lt82ctkdE?=

=?us-ascii?Q?ALLRtigD+fc5YaAKy7uD28J8Hp4/rRgAH5V3om5kaQK4Rn0m5v3Z9CYdOehn?=

=?us-ascii?Q?Pe2RfEsbrjv3BzpvBnxsAEhjSfK+NtIL5ges+YspOiD3NU8uYtUFq4znknxE?=

=?us-ascii?Q?Q+NgRYcbF9R0WZKbzPvzpaekcPsYW7LpEy5z+4blwvLlHDkUfD0TQ0N7CHmm?=

=?us-ascii?Q?sGkp2r0PYdT9ywN/ENTlyhPNS5lgDGDafVqQXsdJjGMfSJ/f5L3nwZQsMEOI?=

=?us-ascii?Q?ueU6XuDzRs1U8RScGIhLNF/xWKZ8s9upz4EcMHpRuNC35MFp0reG8LNw1bKW?=

=?us-ascii?Q?PTrqRKroMUqFJSHTLDVr/EXhezAPJI0uoacIWiaP+cpXYmvigFNga0JWDdl2?=

=?us-ascii?Q?4UxxvZsNJheNK2aDw+3h4kr9owEU+0ITbBYUHqZoyQnjF3I8GhuL4g21R4fC?=

=?us-ascii?Q?m60eS4gaYRt21cxBkgqZ6gZXkM/wYewIBnFCdyF37WzJWdBRGnnogROykZKB?=

=?us-ascii?Q?c0bYqQGmDnn0lkgqLxaoIqgl9iBYoY5646H+JAr9mhB847GPYq9C48kiGkBG?=

=?us-ascii?Q?CG+SrUUf98GQpG4PBIuryCcJvXvUgvtuvF+0OULHihlZpIJ+Ug+1tQjwLoyo?=

=?us-ascii?Q?WVCyO/36P8dT0qZ++wps1KekfRglXQMRqd48Md2ego+sQUlbCXaIpyJoPs0z?=

=?us-ascii?Q?b/qsARIZZU6gc/53DOqcyK0TYFaBZZGV7yNXWEsAM82dxz2jBBVv/1UlZXUy?=

=?us-ascii?Q?naBiAfd7k3k1W7JSujxh6A98JC3QQn6uLl/HRH9HHQ4pzYHMa5C36YoAvitL?=

=?us-ascii?Q?CmjAVqCC8CzFvUqTm9j+xRTEOto7vXkjiB+VanAUHqP/pRfsU/2cXSsMu7gM?=

=?us-ascii?Q?+5/mAe5UObX548qDqeKP0PpImNRioFyFfpTCsts2RUn+AXPUtyG7i+XA/4dA?=

=?us-ascii?Q?tSVaz4HJtxMmZPn7DvhCJPtqnX1aro//iB2smXt926ZGYER6KBgvbKPS6kmg?=

=?us-ascii?Q?Ut7y//hKvvB6DDJfsrF/v8PqwFlD7EIO5vy9Y/yRm1RAYE9w5emjHe0kjb1R?=

=?us-ascii?Q?DTUF2bzLqSPHO+PY67Oott6gloi/QJTmNsd7kieGMIWj6BCzQz4VtVtcooSC?=

=?us-ascii?Q?tGFV6CL/ZXM8UALBP2sSyQgJfr43pNUSP0dT74EukM2527zMvxDqBw3j6XNw?=

=?us-ascii?Q?tBkn+7V1UWZMgBfLVwWqvJfZsQwxoYfTrSZsLcMXes9pUB+Ih2iYF+q+bS4?=

=?us-ascii?Q?=3D?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: 6619a949-4d47-441b-d2e4-08dca1cf0523

X-MS-Exchange-CrossTenant-AuthSource: TYZPR04MB4788.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 11 Jul 2024 17:29:34.2282

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEYPR04MB6703

X-Spam_score: 15.4

X-Spam_score_int: 154

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Ukrainian Beauty Online Exciting news! Stunning Ukrainian

women are waiting to meet someone special in your area, and registration

is completely free! Discover the allure of Ukrainian charm:



Content analysis details: (15.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.107.95 listed in dnsbl.ahbl.org]

[40.92.107.95 listed in dnsbl.ahbl.org]

[40.92.107.95 listed in dnsbl.ahbl.org]

[40.92.107.95 listed in dnsbl.ahbl.org]

[2603:1096:301:a7:0:0:0:8 listed in]

[dnsbl.ahbl.org]

[2603:1096:301:a7:0:0:0:8 listed in]

[dnsbl.ahbl.org]

[2603:1096:301:a7:0:0:0:8 listed in]

[dnsbl.ahbl.org]

[2603:1096:301:a7:0:0:0:8 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.107.95 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.107.95 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.107.95 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.107.95 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:301:a7:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:a7:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:a7:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:a7:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:a7:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:a7:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:a7:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:a7:0:0:0:8 listed in]

[will-spam-for-food.eu.org]

[40.92.107.95 listed in will-spam-for-food.eu.org]

[40.92.107.95 listed in will-spam-for-food.eu.org]

[40.92.107.95 listed in will-spam-for-food.eu.org]

[40.92.107.95 listed in will-spam-for-food.eu.org]

[40.92.107.95 listed in will-spam-for-food.eu.org]

[40.92.107.95 listed in will-spam-for-food.eu.org]

[40.92.107.95 listed in will-spam-for-food.eu.org]

[40.92.107.95 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.107.95 listed in list.dnswl.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: clck.ru]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: clck.ru]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.107.95 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[alblatzn9p(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} Love doesn't have to be complicated - join our site and simplify your search.



--===============0804380260499195821==

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: 7bit



Ukrainian Beauty Online



Exciting news! Stunning Ukrainian women are waiting to meet someone special in your area, and registration is completely free!



Discover the allure of Ukrainian charm:



Exquisite Beauty: Be captivated by their natural elegance.



Warmth and Kindness: Experience genuine hospitality and kindness.



Intelligence and Culture: Engage in stimulating conversations with educated and cultured individuals.



Strong Family Values: Build a relationship on loyalty and dedication.



Romantic Companionship: Embrace love and affection in its purest form.



 





 



Plus, enjoy these additional features:



Free Registration: Join us without any cost!



Advanced Matching: Find your perfect match effortlessly.



Secure and Confidential: Your privacy is our priority.



24/7 Support: Our team is here to assist you anytime.



 



 



 



Start your exciting journey today! Click Ukrainian Beauty Online to create your profile and connect with Ukrainian singles near you.



 



 



 



 



 



 



 



 



 



 



 



 



Remove me from base, on here. Please note that it may take up to 7 days to process your request.



--===============0804380260499195821==--

Ukrainian dating spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 11 Jul 2024 16:45:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sS2Wj-000000008cL-2jd3

for dave@doctor.nl2k.ab.ca;

Thu, 11 Jul 2024 16:44:37 -0600

Resent-From: The Doctor

Resent-Date: Thu, 11 Jul 2024 16:44:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-tyzapc01olkn2078.outbound.protection.outlook.com ([40.92.107.78]:45585 helo=APC01-TYZ-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sRyOC-00000000Nkv-19V6

for doctor@doctor.nl2k.ab.ca;

Thu, 11 Jul 2024 12:19:37 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=e8Z42wy7kXFA5viGxdob9UT5930oIEhQEUIL4m3MwgwZ8SjM0fVykXzKbEboDbNEtHUaqHTvvIrq854N+x4fW17fqmw9VDJykym7pd9vbRfq5RweTmzvPky2jWQUhM53N4PVhSN13AZ+VqKbre6Pbhxe4tE2bfIYIgacrBX8cYUmdCQIVsGMJt3yJpotBMPlq2iWitWmOFG3J7AbrqHDS/OknvM1J7WHnV92WYymL5zCEoCLgKPxtGPKO/p3fM70qPFARLuU9dgN9VrVrizxCxCghzdhFr/mJckZ+IV9dPYXGWCgCNzMyiyKoBJDNZf2YItWySyBCqnIkfNb3E+feQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=HhmIdHcC0kiACNxVraG4wo3RZ2M4C3N8JS9a2haYgY4=;

b=jOsl6wlBvXQg1Hyw8jExA9QtyhCpGknCZM9Hexe5yhwGJfQo5KjCfljceT8fa7qTZw+utR13WKDRmAEHOnY1sJy0wxCOELidxSvcoH0esan/NGERkPnd7bSsiz+vJfxzwlBGb6aMc36RA04mD9FDUx8j0rryNTJfRxObSGyv8kh38+Fy2sLyc0I6Emctyd5sDH7NGNOoaK+L8ZuPc7MWdlLxyJ7+84dQgh+23GfAtG0cizL/fI3lxKhmQ7eozEgZp8IcIDk4NluLRMAdlsKNT5Twqbgrr18QP/CegccxCTIRvP+zoFABW2CG20e49sVdcntrLfM/+kSIRWqx724xBQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=HhmIdHcC0kiACNxVraG4wo3RZ2M4C3N8JS9a2haYgY4=;

b=scW2squS1AaHrp/76n9zYmJ3isxi9wgsgeiobmcX8KGrUHi5kNWFiqIgZRHZCvr1fqt/+UfDjAXoW5FqW1EeGPwNBbslGbIB0NDegDVtxHb42asJaRyZRHvkc04LE1SclUvx/XwvjaH+44zz2sfDTraHCHdP6ZPUnlbOuZ9IxsoBI/GWziGyxzf96T2K+qRR9TgVYP66mCnXqGW86ntX2ckAPDL99mw/TNIQeLZtdKyGMUqgZye5dNNzw0uk5DmAEW3PkLr6EOKHJ3wKClS3qNIBNFntNTkWZJIcHuUmJD86jlXnrFkQKHrREOiCiqbnX3D3vMaxJVICchn/JdUJ3A==

Received: from KL1PR01MB4701.apcprd01.prod.exchangelabs.com

(2603:1096:820:c0::11) by OSQPR01MB6118.apcprd01.prod.exchangelabs.com

(2603:1096:604:27e::9) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7741.36; Thu, 11 Jul

2024 18:16:32 +0000

Received: from KL1PR01MB4701.apcprd01.prod.exchangelabs.com

([fe80::1cfe:a76:b17d:8140]) by KL1PR01MB4701.apcprd01.prod.exchangelabs.com

([fe80::1cfe:a76:b17d:8140%7]) with mapi id 15.20.7762.020; Thu, 11 Jul 2024

18:16:32 +0000

Content-Type: multipart/alternative; boundary="===============0125835041328661994=="

Subject: Looking for a meaningful connection? Our dating site is the place for you.

From: Ukrainian Beauty Online

CC: Ukrainian Beauty Online

Date: Thu, 11 Jul 2024 18:15:15 +0000

X-TMN: [kOqlz+Lj/o5LZ8wJR8ueRLkiRsrFugzv]

X-ClientProxiedBy: VI1P195CA0060.EURP195.PROD.OUTLOOK.COM

(2603:10a6:802:5a::49) To KL1PR01MB4701.apcprd01.prod.exchangelabs.com

(2603:1096:820:c0::11)

Message-ID:



MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: KL1PR01MB4701:EE_|OSQPR01MB6118:EE_

X-MS-Office365-Filtering-Correlation-Id: 588c758e-6238-4f29-5d09-08dca1d59771

X-Microsoft-Antispam:

BCL:0;ARA:14566002|461199028|42300799015|9400799024|19110799003|8060799006|12050799009|1680799051|9000799047|4601999012|440099028|3412199025|4302099013|56899033|1602099012|2006899018|6106899015|2406899039|1710799026;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?OUxhWkRPV0Zqd0lkZlRqZU5sWURKa1hTa3B5Rk1HekZJcjluMTlRaWZTSWlY?=

=?utf-8?B?WXV3NEZPWEFyNFIvU0R2N3p5N2pnY2lLOFh4MGZHMkRoN21DNTBSRGFvYnJX?=

=?utf-8?B?RjZqeGdGS2kyeFlpYVJ5K3IvYk5wcmp5UGV3Mm9ucVROVVp0UU1qVFhaSmJN?=

=?utf-8?B?TENyVm1hayt0UVppRExWM2JpWk9yQnNZSWxGM1AzdFFZZnk2OVBkaG8zVnBP?=

=?utf-8?B?WVBEaWoyNVFiL3pCd09reUtjUmNPT0d2Tk5JNXhSVnlReGdnU0tvSmtQMUM3?=

=?utf-8?B?QzVRYkIva213clozOC9OSHVCWEZHcCsvNUNZT3A3QmdYUXZuMU1nQ1R4QlEx?=

=?utf-8?B?Z1hzUGlhNGZRVW95YkpGNkJTS2JtV3lJb2ZESVFEeUlaaDNpYnZoQ3RudFBD?=

=?utf-8?B?ekMrMUdhT3JqQnJObThYYzNuTzZwdkFXdk1ERkNGdy9CeWllU3ZvZXJHY1h4?=

=?utf-8?B?ZytXMi8yaDhXV0kwOGVRdTY2NE4zampZRHB4YXlLMlU5VUlLRVdjeXAxUkpK?=

=?utf-8?B?M3FQZ1dpbmQydlhKLzFxQmZZVlQyUkRXVC9zaVIweVBveStmVHJWU2owUW04?=

=?utf-8?B?RG56QTQ4N2c3SGlBdjVFMFJaeTQzMXVNVlRkbTFnbjU2azFoQ3diMy9UcGZq?=

=?utf-8?B?UTZ2eFNhNnR3RFNXQjFpako0MDFScEwzL1ZIdEdTS0w3MlpFN3dzSWowMzRX?=

=?utf-8?B?WWl2NGIyMUVocThlYWJjRWpjbU9ZcnlJcTBmNDZDdXdncEZrQ3pzV1AzVloz?=

=?utf-8?B?Wk1SOFBERFM4cUdubnhNRnlnTm5WMHJZMWlnazd5Z3IwdWdMTFRRckJLTjZC?=

=?utf-8?B?TnFXRGhyL3NXTzQ2eUdOR0JZaStUNmlLQmViNWxrWFc3K0NjbFVvVjRVQkMz?=

=?utf-8?B?d0xOU3hCNlpDRlJlM3RxZzJ0bTJLSXE2dmNITjVuT2RDc0s1d001VSsrWm5M?=

=?utf-8?B?Y3FOV1FNeHp5anptK1FBZFpsZlIrYUdjZE5ZT0NKdmdRN29ZYms0d1luUU11?=

=?utf-8?B?NWlJRnNselUvSmJXanUzVGFwYW1kaHllYWZHVTc0YkgxTW9rR1IzblNtd3ZH?=

=?utf-8?B?ODRSb29zWFBEQzc1YlJPWmVWczRNREZTOGtnU3lPYjdnTXZodGZlTmM2WFZv?=

=?utf-8?B?a2JidVpLREQzeTFWQjhyaUhFaUMvNk4vU0lNcjhmWE90UG5PZFFxNm1kUWxu?=

=?utf-8?B?OEFZd1ZNZkJBeWp3eXF3WDlQRW4vN2pBeGFuS0NuZ1Mzak9oYVIreDhycklP?=

=?utf-8?B?MDZ5Tm1XTk0zK3B0aHJiOWtsWFNIMklURkdtdXZvTFB3WVpnWm11b2h4UGZM?=

=?utf-8?B?WFZvbEZ5ZjRXTEJsWUQvOEFGL0dpR0tucjd2Q1VaVXR3QTI4eVZ4TGJIQStx?=

=?utf-8?B?L2pnd1FPMnh2cmJheUtoYytRYnd3MkllckRHVlZ5cVVaVE1Pcmtzc0h5OUtx?=

=?utf-8?B?NGdjVTBCM2dCc1V2WHhwNFhGN1NyaDFIS2FkQnMwYVZuV2Y4M29HcTJpN0Rz?=

=?utf-8?B?bEh1c2laMmF5d2x5RFQrK1pTeGMzcGthRC9kMEtJZ0ZTclVuVmgrOUlnV3lB?=

=?utf-8?B?ZGZjRUozRTV4eUZWWWFIVTZnZHdNV1crVm5zV0pCdnFvbGdqQXlVU0Fvc0pD?=

=?utf-8?B?a2ZUem1BVFdkUWVrbWRGRHh3TWxPT3ppRU5GSDFRWWk0RHo5VDJsZXJFTWZi?=

=?utf-8?B?VkhZTWJOTTZtK0M2UnFGWlBPN1dMWFJWRytWL1dKNDltNmpCV05KZ3IyWS85?=

=?utf-8?B?NkIyUXJ0ME5IbkYzc0s0MmVtY0NNY3dEVnl5dGJ5c251bFZCSVFjNURlVFNl?=

=?utf-8?B?SDZySmRORXhGamVVV01TamRBRmkwZDFKVTJTb0pkYUcya2NxcUhCa2tpTkt1?=

=?utf-8?B?NmZVSzZCOVNoem5qWUFiMTZZbVpRZmxnZ293YlJ0dmorTUhrQkVPc0ZrTFky?=

=?utf-8?B?L016a29CREJMVzlOVytkZDlIS2NqTWQ4Z2JqUW04YlV5L1dFdjdHajQrMktC?=

=?utf-8?B?eFZkb0VmM0w1NmdTclZpZkdkK3ZVMUlqU1dETTdGUjF2MDZkNXJrWll5T1U3?=

=?utf-8?Q?jiJVM6?=

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?d3hJQTVoeXdib0NaeVY4SnhOSHJkdFJYYmM2R1NwSnFQdUJ6WjZUMUZKdlps?=

=?utf-8?B?VXdRUjFpbVRTQU01Z2duMlErenJ1NnBLWHhvMzBWcC9sVXRSQlNCby95b3pC?=

=?utf-8?B?QTA2dWZKMUlwdWVmZXdHMXJGYVRQNFg5ODdpaENRWEZGMVJ1aWVzVFN1dFFB?=

=?utf-8?B?NlhHYjNVdGdXNHUwejBqYk9HUzNMeStsQndzUjFMOUNrd0ZtOXZDTWI2Z0tt?=

=?utf-8?B?cWRSSjZUVWtFTDB2Rm0vVlJuTDNoMU5rWHJyZENjTWNQYkJkbXpvSEhTR1JT?=

=?utf-8?B?MkVTZHhtVm5iTnh6NEpKSVhXeFFCMk9XV0dUWHV1emNsdmM0TkgzQ2VtUjhQ?=

=?utf-8?B?MXIrQjlMaG9VZUlFQm5nTUQ2RXZPdnJoVHNoVlgyTHFUMTV1SVBLVW1MSUpN?=

=?utf-8?B?dEJyUEIwUEZkSERFelMya1ZxYmtMcHZla0xnMEZxcXpKR2ZDa0RQK3ZrSC9n?=

=?utf-8?B?QmIxcmZQMnZ4NTlkRUZoelNVWnNYSnQxV3M3dXV0STJMaGRKVTFVUlppZDJz?=

=?utf-8?B?Q1BSVW15Z0hHZFZ0VFhuVmxQSW91S0t2OE5VdW5TbTlBVjFOckpjNUJUZ21T?=

=?utf-8?B?b2U0MTdKdi9UYmVnYU11QzNvek1TWFhrMVVsaDdLQ1BaTTllMDl1NExiWjJw?=

=?utf-8?B?SmFUbWxxaFFXWGtSd0dIQTV4dGlBVnNSYU1ISFBMWmR5cUJHQUpzbDJDUzdt?=

=?utf-8?B?Qit1SHUwNG84Q1lWZVVBemx6OHZDRjdPMDkxYXRvdlBkbTJtR2FJektnM1JF?=

=?utf-8?B?ODQ0YndmbkJad3huNFMrWWlndFpvYmkzNmhsUDFCV3c0dFdBTkhnR1NzOWtw?=

=?utf-8?B?aytxcjdsNDR2TlIrWjU0ajYydHZpOXNIRzBoT0NrVGxPVys4L1hkb3gzWHZY?=

=?utf-8?B?NDZBSTJCeUF2Y2FDVmNDV0ZlOVA0U2ZGeU9PTTVlZWFCNDZieG4xS3NCdE81?=

=?utf-8?B?dGJxVXZxeDl4UXJDM3ExKzg4VU5GcVJQOWhYNXZyYmhCdEQ3cjNiSTdyRk9w?=

=?utf-8?B?cTZicnN1N0lUOEtyVW92Y2NaZHFvQU1nZnEzMktVaWFxTTJHK0xqL2hUemFB?=

=?utf-8?B?REFGZW9vK1BPejZ5UGU1WlNGSXdwOE5LR2JPb3NjRTFYcEdJWTBxWk1NQjdL?=

=?utf-8?B?NnB3SFFJcnhpNTl6SllIRzdhcG1hMTNybWtocHdzMG42YVBSQ0VNTUVWcitp?=

=?utf-8?B?VHpvVnVEWlAvcFpoZHYxQUdvR1p5RzJlMFRMeTFTYlgyOTJmV3lDbTAwS3JJ?=

=?utf-8?B?UGVSYU53WmxNYUlVTHFkb2JuQ3JyQVRlU1NHYXMzT003KzZSMThSRThTaXVR?=

=?utf-8?B?Z1FXamdHL2Z4cXJ0T2FXc0lKb3p6SFJBWWhpMXBKcE9SbEgzUWJJSENsWHpU?=

=?utf-8?B?U01UUHRqamFMQzBFUUJzWFRWcTJnMmNoOGRGQXQ3R1pCcWF1TVM0dEk4R3ht?=

=?utf-8?B?NG9PM0NZY2hZMDN2WHFVYUx1TTJNNHQ5bi93MWN3R3pPdFFvNTdjamZ4cEcx?=

=?utf-8?B?eW5lcUx2R3hKaW14bkl2RElyRWhBRS9PTkhvcVZTa0tTTHN3Ylk3eklzejh5?=

=?utf-8?B?dkJzcDdROHQ2c1ZWQmJ0RS84TnlqUnp5bi8zbnJ4a3gvaU1nQkF4QkR4YnBz?=

=?utf-8?B?MnZwOG5hbStGRTZQR1JlNlpVYzk3bk53RzF1eStkS2x3aVVTWmRHWDY3MExH?=

=?utf-8?Q?KeIZ6ooicGNfU9TdT2PB?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: 588c758e-6238-4f29-5d09-08dca1d59771

X-MS-Exchange-CrossTenant-AuthSource: KL1PR01MB4701.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 11 Jul 2024 18:16:32.3624

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: OSQPR01MB6118

X-Spam_score: 16.7

X-Spam_score_int: 167

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Certainly! Here's a similar message tailored for a dating

site: 💖 Exclusive Offer: Find Your Perfect Match Today! 💖



Content analysis details: (16.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.107.78 listed in dnsbl.ahbl.org]

[40.92.107.78 listed in dnsbl.ahbl.org]

[40.92.107.78 listed in dnsbl.ahbl.org]

[40.92.107.78 listed in dnsbl.ahbl.org]

[2603:1096:820:c0:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:1096:820:c0:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:1096:820:c0:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:1096:820:c0:0:0:0:11 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.107.78 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.107.78 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.107.78 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.107.78 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:820:c0:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:820:c0:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:820:c0:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:820:c0:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:820:c0:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:820:c0:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:820:c0:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:820:c0:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[40.92.107.78 listed in will-spam-for-food.eu.org]

[40.92.107.78 listed in will-spam-for-food.eu.org]

[40.92.107.78 listed in will-spam-for-food.eu.org]

[40.92.107.78 listed in will-spam-for-food.eu.org]

[40.92.107.78 listed in will-spam-for-food.eu.org]

[40.92.107.78 listed in will-spam-for-food.eu.org]

[40.92.107.78 listed in will-spam-for-food.eu.org]

[40.92.107.78 listed in will-spam-for-food.eu.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: clck.ru]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: clck.ru]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.107.78 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.107.78 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ivetteflori28h(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

1.0 OPT_OUT BODY: No description available.

0.3 OFFER BODY: Offers you Something

0.0 HTML_IMAGE_RATIO_06 BODY: HTML has a low ratio of text to image area

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} Looking for a meaningful connection? Our dating site is the place for you.



--===============0125835041328661994==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



PG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJz

ZXQ9dXRmLTgiPjxwPgogICAgCjwvcD4KPHAgc3R5bGU9ImxpbmUtaGVpZ2h0OjEuMzg7bWFyZ2lu

LWJvdHRvbToxMnB0O21hcmdpbi10b3A6MTJwdDt0ZXh0LWFsaWduOmNlbnRlcjsiIGRpcj0ibHRy

Ij48c3BhbiBzdHlsZT0iYmFja2dyb3VuZC1jb2xvcjojZmZmZmZmO2NvbG9yOiMwMDAwMDA7Zm9u

dC1mYW1pbHk6QXJpYWwsc2Fucy1zZXJpZjtmb250LXNpemU6MTNwdDsiPjxpPjxzcGFuIHN0eWxl

PSJmb250LXZhcmlhbnQ6bm9ybWFsO3RleHQtZGVjb3JhdGlvbjpub25lO3ZlcnRpY2FsLWFsaWdu

OmJhc2VsaW5lO3doaXRlLXNwYWNlOnByZS13cmFwOyI+PHN0cm9uZz5DZXJ0YWlubHkhIEhlcmUn

cyBhIHNpbWlsYXIgbWVzc2FnZSB0YWlsb3JlZCBmb3IgYSBkYXRpbmcgc2l0ZTo8L3N0cm9uZz48

L3NwYW4+PC9pPjwvc3Bhbj48L3A+CjxwIHN0eWxlPSJsaW5lLWhlaWdodDoxLjM4O21hcmdpbi1i

b3R0b206MTJwdDttYXJnaW4tdG9wOjEycHQ7dGV4dC1hbGlnbjpjZW50ZXI7IiBkaXI9Imx0ciI+

PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6dHJhbnNwYXJlbnQ7Y29sb3I6IzAwMDAwMDtm

b250LWZhbWlseTpBcmlhbCxzYW5zLXNlcmlmO2ZvbnQtc2l6ZToxMXB0OyI+PHNwYW4gc3R5bGU9

ImZvbnQtc3R5bGU6bm9ybWFsO2ZvbnQtdmFyaWFudDpub3JtYWw7Zm9udC13ZWlnaHQ6NDAwO3Rl

eHQtZGVjb3JhdGlvbjpub25lO3ZlcnRpY2FsLWFsaWduOmJhc2VsaW5lO3doaXRlLXNwYWNlOnBy

ZS13cmFwOyI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48L3A+CjxwIHN0eWxlPSJsaW5lLWhlaWdodDox

LjM4O21hcmdpbi1ib3R0b206MTJwdDttYXJnaW4tdG9wOjEycHQ7dGV4dC1hbGlnbjpjZW50ZXI7

IiBkaXI9Imx0ciI+PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6I2ZmZmZmZjtjb2xvcjoj

MDAwMDAwO2ZvbnQtZmFtaWx5OkFyaWFsLHNhbnMtc2VyaWY7Zm9udC1zaXplOjEzcHQ7Ij48aT48

c3BhbiBzdHlsZT0iZm9udC12YXJpYW50Om5vcm1hbDt0ZXh0LWRlY29yYXRpb246bm9uZTt2ZXJ0

aWNhbC1hbGlnbjpiYXNlbGluZTt3aGl0ZS1zcGFjZTpwcmUtd3JhcDsiPjxzdHJvbmc+8J+SliBF

eGNsdXNpdmUgT2ZmZXI6IEZpbmQgWW91ciBQZXJmZWN0IE1hdGNoIFRvZGF5ISDwn5KWPC9zdHJv

bmc+PC9zcGFuPjwvaT48L3NwYW4+PC9wPgo8cCBzdHlsZT0ibGluZS1oZWlnaHQ6MS4zODttYXJn

aW4tYm90dG9tOjEycHQ7bWFyZ2luLXRvcDoxMnB0O3RleHQtYWxpZ246Y2VudGVyOyIgZGlyPSJs

dHIiPjxzcGFuIHN0eWxlPSJiYWNrZ3JvdW5kLWNvbG9yOnRyYW5zcGFyZW50O2NvbG9yOiMwMDAw

MDA7Zm9udC1mYW1pbHk6QXJpYWwsc2Fucy1zZXJpZjtmb250LXNpemU6MTFwdDsiPjxzcGFuIHN0

eWxlPSJmb250LXN0eWxlOm5vcm1hbDtmb250LXZhcmlhbnQ6bm9ybWFsO2ZvbnQtd2VpZ2h0OjQw

MDt0ZXh0LWRlY29yYXRpb246bm9uZTt2ZXJ0aWNhbC1hbGlnbjpiYXNlbGluZTt3aGl0ZS1zcGFj

ZTpwcmUtd3JhcDsiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PC9wPgo8cCBzdHlsZT0ibGluZS1oZWln

aHQ6MS4zODttYXJnaW4tYm90dG9tOjEycHQ7bWFyZ2luLXRvcDoxMnB0O3RleHQtYWxpZ246Y2Vu

dGVyOyIgZGlyPSJsdHIiPjxzcGFuIHN0eWxlPSJiYWNrZ3JvdW5kLWNvbG9yOiNmZmZmZmY7Y29s

b3I6IzAwMDAwMDtmb250LWZhbWlseTpBcmlhbCxzYW5zLXNlcmlmO2ZvbnQtc2l6ZToxM3B0OyI+

PGk+PHNwYW4gc3R5bGU9ImZvbnQtdmFyaWFudDpub3JtYWw7dGV4dC1kZWNvcmF0aW9uOm5vbmU7

dmVydGljYWwtYWxpZ246YmFzZWxpbmU7d2hpdGUtc3BhY2U6cHJlLXdyYXA7Ij48c3Ryb25nPkRp

ZCB5b3Uga25vdyB0aGF0IHRob3VzYW5kcyBvZiBzaW5nbGVzIGhhdmUgZm91bmQgbG92ZSB0aHJv

dWdoIG9ubGluZSBkYXRpbmcgc2luY2UgMjAyMz88L3N0cm9uZz48L3NwYW4+PC9pPjwvc3Bhbj48

L3A+CjxwIHN0eWxlPSJsaW5lLWhlaWdodDoxLjM4O21hcmdpbi1ib3R0b206MTJwdDttYXJnaW4t

dG9wOjEycHQ7dGV4dC1hbGlnbjpjZW50ZXI7IiBkaXI9Imx0ciI+PHNwYW4gc3R5bGU9ImJhY2tn

cm91bmQtY29sb3I6dHJhbnNwYXJlbnQ7Y29sb3I6IzAwMDAwMDtmb250LWZhbWlseTpBcmlhbCxz

YW5zLXNlcmlmO2ZvbnQtc2l6ZToxMXB0OyI+PHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6bm9ybWFs

O2ZvbnQtdmFyaWFudDpub3JtYWw7Zm9udC13ZWlnaHQ6NDAwO3RleHQtZGVjb3JhdGlvbjpub25l

O3ZlcnRpY2FsLWFsaWduOmJhc2VsaW5lO3doaXRlLXNwYWNlOnByZS13cmFwOyI+Jm5ic3A7PC9z

cGFuPjwvc3Bhbj48L3A+CjxwIHN0eWxlPSJsaW5lLWhlaWdodDoxLjM4O21hcmdpbi1ib3R0b206

MTJwdDttYXJnaW4tdG9wOjEycHQ7dGV4dC1hbGlnbjpjZW50ZXI7IiBkaXI9Imx0ciI+PHNwYW4g

c3R5bGU9ImJhY2tncm91bmQtY29sb3I6I2ZmZmZmZjtjb2xvcjojMDAwMDAwO2ZvbnQtZmFtaWx5

OkFyaWFsLHNhbnMtc2VyaWY7Zm9udC1zaXplOjEzcHQ7Ij48aT48c3BhbiBzdHlsZT0iZm9udC12

YXJpYW50Om5vcm1hbDt0ZXh0LWRlY29yYXRpb246bm9uZTt2ZXJ0aWNhbC1hbGlnbjpiYXNlbGlu

ZTt3aGl0ZS1zcGFjZTpwcmUtd3JhcDsiPjxzdHJvbmc+VGhhdCdzIHdoeSB3ZSd2ZSBsYXVuY2hl

ZCBhIGN1dHRpbmctZWRnZSBkYXRpbmcgcGxhdGZvcm0gd2hlcmUgeW91IGNhbiBjb25uZWN0LCBj

aGF0LCBhbmQgbWVldCBzaW5nbGUgcGVvcGxlIGluIHlvdXIgYXJlYSE8L3N0cm9uZz48L3NwYW4+

PC9pPjwvc3Bhbj48L3A+CjxwIHN0eWxlPSJsaW5lLWhlaWdodDoxLjM4O21hcmdpbi1ib3R0b206

MTJwdDttYXJnaW4tdG9wOjEycHQ7dGV4dC1hbGlnbjpjZW50ZXI7IiBkaXI9Imx0ciI+PHNwYW4g

c3R5bGU9ImJhY2tncm91bmQtY29sb3I6dHJhbnNwYXJlbnQ7Y29sb3I6IzAwMDAwMDtmb250LWZh

bWlseTpBcmlhbCxzYW5zLXNlcmlmO2ZvbnQtc2l6ZToxMXB0OyI+PHNwYW4gc3R5bGU9ImZvbnQt

c3R5bGU6bm9ybWFsO2ZvbnQtdmFyaWFudDpub3JtYWw7Zm9udC13ZWlnaHQ6NDAwO3RleHQtZGVj

b3JhdGlvbjpub25lO3ZlcnRpY2FsLWFsaWduOmJhc2VsaW5lO3doaXRlLXNwYWNlOnByZS13cmFw

OyI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48L3A+CjxwIHN0eWxlPSJsaW5lLWhlaWdodDoxLjM4O21h

cmdpbi1ib3R0b206MTJwdDttYXJnaW4tdG9wOjEycHQ7dGV4dC1hbGlnbjpjZW50ZXI7IiBkaXI9

Imx0ciI+PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6I2ZmZmZmZjtjb2xvcjojMDAwMDAw

O2ZvbnQtZmFtaWx5OkFyaWFsLHNhbnMtc2VyaWY7Zm9udC1zaXplOjEzcHQ7Ij48aT48c3BhbiBz

dHlsZT0iZm9udC12YXJpYW50Om5vcm1hbDt0ZXh0LWRlY29yYXRpb246bm9uZTt2ZXJ0aWNhbC1h

bGlnbjpiYXNlbGluZTt3aGl0ZS1zcGFjZTpwcmUtd3JhcDsiPjxzdHJvbmc+V2l0aCBvdmVyIDEw

MCwwMDAgYWN0aXZlIG1lbWJlcnMgYW5kIGNvdW50aW5nLCBvdXIgY29tbXVuaXR5IGlzIGdyb3dp

bmcgc3Ryb25nZXIgZXZlcnkgZGF5Ljwvc3Ryb25nPjwvc3Bhbj48L2k+PC9zcGFuPjwvcD4KPHAg

c3R5bGU9ImxpbmUtaGVpZ2h0OjEuMzg7bWFyZ2luLWJvdHRvbToxMnB0O21hcmdpbi10b3A6MTJw

dDt0ZXh0LWFsaWduOmNlbnRlcjsiIGRpcj0ibHRyIj48c3BhbiBzdHlsZT0iYmFja2dyb3VuZC1j

b2xvcjp0cmFuc3BhcmVudDtjb2xvcjojMDAwMDAwO2ZvbnQtZmFtaWx5OkFyaWFsLHNhbnMtc2Vy

aWY7Zm9udC1zaXplOjExcHQ7Ij48c3BhbiBzdHlsZT0iZm9udC1zdHlsZTpub3JtYWw7Zm9udC12

YXJpYW50Om5vcm1hbDtmb250LXdlaWdodDo0MDA7dGV4dC1kZWNvcmF0aW9uOm5vbmU7dmVydGlj

YWwtYWxpZ246YmFzZWxpbmU7d2hpdGUtc3BhY2U6cHJlLXdyYXA7Ij4mbmJzcDs8L3NwYW4+PC9z

cGFuPjwvcD4KPHAgc3R5bGU9ImxpbmUtaGVpZ2h0OjEuMzg7bWFyZ2luLWJvdHRvbToxMnB0O21h

cmdpbi10b3A6MTJwdDt0ZXh0LWFsaWduOmNlbnRlcjsiIGRpcj0ibHRyIj48c3BhbiBzdHlsZT0i

YmFja2dyb3VuZC1jb2xvcjojZmZmZmZmO2NvbG9yOiMwMDAwMDA7Zm9udC1mYW1pbHk6QXJpYWws

c2Fucy1zZXJpZjtmb250LXNpemU6MTNwdDsiPjxpPjxzcGFuIHN0eWxlPSJmb250LXZhcmlhbnQ6

bm9ybWFsO3RleHQtZGVjb3JhdGlvbjpub25lO3ZlcnRpY2FsLWFsaWduOmJhc2VsaW5lO3doaXRl

LXNwYWNlOnByZS13cmFwOyI+PHN0cm9uZz5Eb24ndCBtaXNzIG91dCBvbiB0aGlzIGxpbWl0ZWQt

dGltZSBvZmZlciEgSm9pbiBub3cgZm9yIGZyZWUgYW5kIHN0YXJ0IHlvdXIgam91cm5leSB0byBm

aW5kaW5nIGxvdmUuPC9zdHJvbmc+PC9zcGFuPjwvaT48L3NwYW4+PC9wPgo8cCBzdHlsZT0ibGlu

ZS1oZWlnaHQ6MS4zODttYXJnaW4tYm90dG9tOjEycHQ7bWFyZ2luLXRvcDoxMnB0O3RleHQtYWxp

Z246Y2VudGVyOyIgZGlyPSJsdHIiPjxzcGFuIHN0eWxlPSJiYWNrZ3JvdW5kLWNvbG9yOnRyYW5z

cGFyZW50O2NvbG9yOiMwMDAwMDA7Zm9udC1mYW1pbHk6QXJpYWwsc2Fucy1zZXJpZjtmb250LXNp

emU6MTFwdDsiPjxzcGFuIHN0eWxlPSJmb250LXN0eWxlOm5vcm1hbDtmb250LXZhcmlhbnQ6bm9y

bWFsO2ZvbnQtd2VpZ2h0OjQwMDt0ZXh0LWRlY29yYXRpb246bm9uZTt2ZXJ0aWNhbC1hbGlnbjpi

YXNlbGluZTt3aGl0ZS1zcGFjZTpwcmUtd3JhcDsiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PC9wPgo8

cCBzdHlsZT0ibGluZS1oZWlnaHQ6MS4zODttYXJnaW4tYm90dG9tOjEycHQ7bWFyZ2luLXRvcDox

MnB0O3RleHQtYWxpZ246Y2VudGVyOyIgZGlyPSJsdHIiPjxzcGFuIHN0eWxlPSJiYWNrZ3JvdW5k

LWNvbG9yOnRyYW5zcGFyZW50O2NvbG9yOiMwMDAwMDA7Zm9udC1mYW1pbHk6QXJpYWwsc2Fucy1z

ZXJpZjtmb250LXNpemU6MTFwdDsiPjxzcGFuIHN0eWxlPSJib3JkZXItc3R5bGU6bm9uZTtkaXNw

bGF5OmlubGluZS1ibG9jaztmb250LXN0eWxlOm5vcm1hbDtmb250LXZhcmlhbnQ6bm9ybWFsO2Zv

bnQtd2VpZ2h0OjQwMDtoZWlnaHQ6MjQ5cHg7b3ZlcmZsb3c6aGlkZGVuO3RleHQtZGVjb3JhdGlv

bjpub25lO3ZlcnRpY2FsLWFsaWduOmJhc2VsaW5lO3doaXRlLXNwYWNlOnByZS13cmFwO3dpZHRo

OjYyNHB4OyI+PGltZyBzdHlsZT0ibWFyZ2luLWxlZnQ6MHB4O21hcmdpbi10b3A6MHB4OyIgc3Jj

PSJodHRwczovL2xoNy11cy5nb29nbGV1c2VyY29udGVudC5jb20vZG9jc3ovQURfNG5YYzctMTdx

WFBwRFZsd0lpMHJaOTRUdk9VZmZiYlc4dzBjOENXNEtkZEFPcUVqQXdEMjg3SkFyY29MQ1g4V1VS

RFFXY1pCeThtcE54bC1Pbi1tQ3k4cDYzNEpTN3N4M0pwRl9LZUVZbk9yWDBMM1RFOGZJb2NzY2Vy

V3hxTkhYOU53aGFPNUhHSzJLWXc2SThtbG4tZmVhRGtjP2tleT1ZUVJHVjNUWlFyMXZQOHB5eVZx

dGZBIiB3aWR0aD0iNjI0IiBoZWlnaHQ9IjI0OSI+PC9zcGFuPjwvc3Bhbj48L3A+CjxwIHN0eWxl

PSJsaW5lLWhlaWdodDoxLjM4O21hcmdpbi1ib3R0b206MTJwdDttYXJnaW4tdG9wOjEycHQ7dGV4

dC1hbGlnbjpjZW50ZXI7IiBkaXI9Imx0ciI+PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6

dHJhbnNwYXJlbnQ7Y29sb3I6IzAwMDAwMDtmb250LWZhbWlseTpBcmlhbCxzYW5zLXNlcmlmO2Zv

bnQtc2l6ZToxMXB0OyI+PHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6bm9ybWFsO2ZvbnQtdmFyaWFu

dDpub3JtYWw7Zm9udC13ZWlnaHQ6NDAwO3RleHQtZGVjb3JhdGlvbjpub25lO3ZlcnRpY2FsLWFs

aWduOmJhc2VsaW5lO3doaXRlLXNwYWNlOnByZS13cmFwOyI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48

L3A+CjxwIHN0eWxlPSJsaW5lLWhlaWdodDoxLjM4O21hcmdpbi1ib3R0b206MTJwdDttYXJnaW4t

dG9wOjEycHQ7dGV4dC1hbGlnbjpjZW50ZXI7IiBkaXI9Imx0ciI+PHNwYW4gc3R5bGU9ImJhY2tn

cm91bmQtY29sb3I6I2ZmZmZmZjtjb2xvcjojMDAwMDAwO2ZvbnQtZmFtaWx5OkFyaWFsLHNhbnMt

c2VyaWY7Zm9udC1zaXplOjEzcHQ7Ij48aT48c3BhbiBzdHlsZT0iZm9udC12YXJpYW50Om5vcm1h

bDt0ZXh0LWRlY29yYXRpb246bm9uZTt2ZXJ0aWNhbC1hbGlnbjpiYXNlbGluZTt3aGl0ZS1zcGFj

ZTpwcmUtd3JhcDsiPjxzdHJvbmc+8J+MnyBLZXkgRmVhdHVyZXM6PC9zdHJvbmc+PC9zcGFuPjwv

aT48L3NwYW4+PC9wPgo8cCBzdHlsZT0ibGluZS1oZWlnaHQ6MS4zODttYXJnaW4tYm90dG9tOjEy

cHQ7bWFyZ2luLXRvcDoxMnB0O3RleHQtYWxpZ246Y2VudGVyOyIgZGlyPSJsdHIiPjxzcGFuIHN0

eWxlPSJiYWNrZ3JvdW5kLWNvbG9yOiNmZmZmZmY7Y29sb3I6IzAwMDAwMDtmb250LWZhbWlseTpB

cmlhbCxzYW5zLXNlcmlmO2ZvbnQtc2l6ZToxM3B0OyI+PGk+PHNwYW4gc3R5bGU9ImZvbnQtdmFy

aWFudDpub3JtYWw7dGV4dC1kZWNvcmF0aW9uOm5vbmU7dmVydGljYWwtYWxpZ246YmFzZWxpbmU7

d2hpdGUtc3BhY2U6cHJlLXdyYXA7Ij48c3Ryb25nPi0gQnJvd3NlIHByb2ZpbGVzIG9mIGVsaWdp

YmxlIHNpbmdsZXM8L3N0cm9uZz48L3NwYW4+PC9pPjwvc3Bhbj48L3A+CjxwIHN0eWxlPSJsaW5l

LWhlaWdodDoxLjM4O21hcmdpbi1ib3R0b206MTJwdDttYXJnaW4tdG9wOjEycHQ7dGV4dC1hbGln

bjpjZW50ZXI7IiBkaXI9Imx0ciI+PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6I2ZmZmZm

Zjtjb2xvcjojMDAwMDAwO2ZvbnQtZmFtaWx5OkFyaWFsLHNhbnMtc2VyaWY7Zm9udC1zaXplOjEz

cHQ7Ij48aT48c3BhbiBzdHlsZT0iZm9udC12YXJpYW50Om5vcm1hbDt0ZXh0LWRlY29yYXRpb246

bm9uZTt2ZXJ0aWNhbC1hbGlnbjpiYXNlbGluZTt3aGl0ZS1zcGFjZTpwcmUtd3JhcDsiPjxzdHJv

bmc+LSBDaGF0IGFuZCBjb25uZWN0IGluc3RhbnRseTwvc3Ryb25nPjwvc3Bhbj48L2k+PC9zcGFu

PjwvcD4KPHAgc3R5bGU9ImxpbmUtaGVpZ2h0OjEuMzg7bWFyZ2luLWJvdHRvbToxMnB0O21hcmdp

bi10b3A6MTJwdDt0ZXh0LWFsaWduOmNlbnRlcjsiIGRpcj0ibHRyIj48c3BhbiBzdHlsZT0iYmFj

a2dyb3VuZC1jb2xvcjojZmZmZmZmO2NvbG9yOiMwMDAwMDA7Zm9udC1mYW1pbHk6QXJpYWwsc2Fu

cy1zZXJpZjtmb250LXNpemU6MTNwdDsiPjxpPjxzcGFuIHN0eWxlPSJmb250LXZhcmlhbnQ6bm9y

bWFsO3RleHQtZGVjb3JhdGlvbjpub25lO3ZlcnRpY2FsLWFsaWduOmJhc2VsaW5lO3doaXRlLXNw

YWNlOnByZS13cmFwOyI+PHN0cm9uZz4tIFdlYmNhbSBmdW5jdGlvbmFsaXR5IGZvciB2aXJ0dWFs

IGRhdGVzPC9zdHJvbmc+PC9zcGFuPjwvaT48L3NwYW4+PC9wPgo8cCBzdHlsZT0ibGluZS1oZWln

aHQ6MS4zODttYXJnaW4tYm90dG9tOjEycHQ7bWFyZ2luLXRvcDoxMnB0O3RleHQtYWxpZ246Y2Vu

dGVyOyIgZGlyPSJsdHIiPjxzcGFuIHN0eWxlPSJiYWNrZ3JvdW5kLWNvbG9yOiNmZmZmZmY7Y29s

b3I6IzAwMDAwMDtmb250LWZhbWlseTpBcmlhbCxzYW5zLXNlcmlmO2ZvbnQtc2l6ZToxM3B0OyI+

PGk+PHNwYW4gc3R5bGU9ImZvbnQtdmFyaWFudDpub3JtYWw7dGV4dC1kZWNvcmF0aW9uOm5vbmU7

dmVydGljYWwtYWxpZ246YmFzZWxpbmU7d2hpdGUtc3BhY2U6cHJlLXdyYXA7Ij48c3Ryb25nPi0g

TWVldCBsaWtlLW1pbmRlZCBpbmRpdmlkdWFscyBhZ2VkIDI1LTY1PC9zdHJvbmc+PC9zcGFuPjwv

aT48L3NwYW4+PC9wPgo8cCBzdHlsZT0ibGluZS1oZWlnaHQ6MS4zODttYXJnaW4tYm90dG9tOjEy

cHQ7bWFyZ2luLXRvcDoxMnB0O3RleHQtYWxpZ246Y2VudGVyOyIgZGlyPSJsdHIiPjxzcGFuIHN0

eWxlPSJiYWNrZ3JvdW5kLWNvbG9yOnRyYW5zcGFyZW50O2NvbG9yOiMwMDAwMDA7Zm9udC1mYW1p

bHk6QXJpYWwsc2Fucy1zZXJpZjtmb250LXNpemU6MTFwdDsiPjxzcGFuIHN0eWxlPSJmb250LXN0

eWxlOm5vcm1hbDtmb250LXZhcmlhbnQ6bm9ybWFsO2ZvbnQtd2VpZ2h0OjQwMDt0ZXh0LWRlY29y

YXRpb246bm9uZTt2ZXJ0aWNhbC1hbGlnbjpiYXNlbGluZTt3aGl0ZS1zcGFjZTpwcmUtd3JhcDsi

PiZuYnNwOzwvc3Bhbj48L3NwYW4+PC9wPgo8cCBzdHlsZT0ibGluZS1oZWlnaHQ6MS4zODttYXJn

aW4tYm90dG9tOjEycHQ7bWFyZ2luLXRvcDoxMnB0O3RleHQtYWxpZ246Y2VudGVyOyIgZGlyPSJs

dHIiPjxzcGFuIHN0eWxlPSJiYWNrZ3JvdW5kLWNvbG9yOiNmZmZmZmY7Y29sb3I6IzAwMDAwMDtm

b250LWZhbWlseTpBcmlhbCxzYW5zLXNlcmlmO2ZvbnQtc2l6ZToxM3B0OyI+PGk+PHNwYW4gc3R5

bGU9ImZvbnQtdmFyaWFudDpub3JtYWw7dGV4dC1kZWNvcmF0aW9uOm5vbmU7dmVydGljYWwtYWxp

Z246YmFzZWxpbmU7d2hpdGUtc3BhY2U6cHJlLXdyYXA7Ij48c3Ryb25nPlNpZ24gdXAgbm93IGFu

ZCBkaXNjb3ZlciB0aGUgcG9zc2liaWxpdGllcyE8L3N0cm9uZz48L3NwYW4+PC9pPjwvc3Bhbj48

L3A+CjxwIHN0eWxlPSJsaW5lLWhlaWdodDoxLjM4O21hcmdpbi1ib3R0b206MTJwdDttYXJnaW4t

dG9wOjEycHQ7dGV4dC1hbGlnbjpjZW50ZXI7IiBkaXI9Imx0ciI+PHNwYW4gc3R5bGU9ImJhY2tn

cm91bmQtY29sb3I6dHJhbnNwYXJlbnQ7Y29sb3I6IzAwMDAwMDtmb250LWZhbWlseTpBcmlhbCxz

YW5zLXNlcmlmO2ZvbnQtc2l6ZToxMXB0OyI+PHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6bm9ybWFs

O2ZvbnQtdmFyaWFudDpub3JtYWw7Zm9udC13ZWlnaHQ6NDAwO3RleHQtZGVjb3JhdGlvbjpub25l

O3ZlcnRpY2FsLWFsaWduOmJhc2VsaW5lO3doaXRlLXNwYWNlOnByZS13cmFwOyI+Jm5ic3A7PC9z

cGFuPjwvc3Bhbj48L3A+CjxwIHN0eWxlPSJsaW5lLWhlaWdodDoxLjM4O21hcmdpbi1ib3R0b206

MTJwdDttYXJnaW4tdG9wOjEycHQ7dGV4dC1hbGlnbjpjZW50ZXI7IiBkaXI9Imx0ciI+PHNwYW4g

c3R5bGU9ImJhY2tncm91bmQtY29sb3I6I2ZmZmZmZjtjb2xvcjojMDAwMDAwO2ZvbnQtZmFtaWx5

OkFyaWFsLHNhbnMtc2VyaWY7Zm9udC1zaXplOjEzcHQ7Ij48aT48c3BhbiBzdHlsZT0iZm9udC12

YXJpYW50Om5vcm1hbDt0ZXh0LWRlY29yYXRpb246bm9uZTt2ZXJ0aWNhbC1hbGlnbjpiYXNlbGlu

ZTt3aGl0ZS1zcGFjZTpwcmUtd3JhcDsiPjxzdHJvbmc+W0pvaW4gTm93XSDwn5KMPC9zdHJvbmc+

PC9zcGFuPjwvaT48L3NwYW4+PC9wPgo8cCBzdHlsZT0ibGluZS1oZWlnaHQ6MS4zODttYXJnaW4t

Ym90dG9tOjEycHQ7bWFyZ2luLXRvcDoxMnB0O3RleHQtYWxpZ246Y2VudGVyOyIgZGlyPSJsdHIi

PjxzcGFuIHN0eWxlPSJiYWNrZ3JvdW5kLWNvbG9yOnRyYW5zcGFyZW50O2NvbG9yOiMwMDAwMDA7

Zm9udC1mYW1pbHk6QXJpYWwsc2Fucy1zZXJpZjtmb250LXNpemU6MTFwdDsiPjxzcGFuIHN0eWxl

PSJmb250LXN0eWxlOm5vcm1hbDtmb250LXZhcmlhbnQ6bm9ybWFsO2ZvbnQtd2VpZ2h0OjQwMDt0

ZXh0LWRlY29yYXRpb246bm9uZTt2ZXJ0aWNhbC1hbGlnbjpiYXNlbGluZTt3aGl0ZS1zcGFjZTpw

cmUtd3JhcDsiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PC9wPgo8cCBzdHlsZT0ibGluZS1oZWlnaHQ6

MS4zODttYXJnaW4tYm90dG9tOjEycHQ7bWFyZ2luLXRvcDoxMnB0O3RleHQtYWxpZ246Y2VudGVy

OyIgZGlyPSJsdHIiPjxhIGhyZWY9Imh0dHBzOi8vY2xjay5ydS8zQmlha1AiPjxzcGFuIHN0eWxl

PSJiYWNrZ3JvdW5kLWNvbG9yOiNmZmZmZmY7Y29sb3I6IzExNTVjYztmb250LWZhbWlseTpBcmlh

bCxzYW5zLXNlcmlmO2ZvbnQtc2l6ZToyNnB0OyI+PGk+PHNwYW4gc3R5bGU9Ii13ZWJraXQtdGV4

dC1kZWNvcmF0aW9uLXNraXA6bm9uZTtmb250LXZhcmlhbnQ6bm9ybWFsO3RleHQtZGVjb3JhdGlv

bi1za2lwLWluazpub25lO3ZlcnRpY2FsLWFsaWduOmJhc2VsaW5lO3doaXRlLXNwYWNlOnByZS13

cmFwOyI+PHN0cm9uZz48dT5Va3JhaW5pYW4gQmVhdXR5IE9ubGluZTwvdT48L3N0cm9uZz48L3Nw

YW4+PC9pPjwvc3Bhbj48L2E+PC9wPgo8cCBzdHlsZT0ibGluZS1oZWlnaHQ6MS4zODttYXJnaW4t

Ym90dG9tOjEycHQ7bWFyZ2luLXRvcDoxMnB0O3RleHQtYWxpZ246Y2VudGVyOyIgZGlyPSJsdHIi

Pjxicj48YnI+PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6dHJhbnNwYXJlbnQ7Y29sb3I6

IzAwMDAwMDtmb250LWZhbWlseTpBcmlhbCxzYW5zLXNlcmlmO2ZvbnQtc2l6ZToxMXB0OyI+PHNw

YW4gc3R5bGU9ImZvbnQtc3R5bGU6bm9ybWFsO2ZvbnQtdmFyaWFudDpub3JtYWw7Zm9udC13ZWln

aHQ6NDAwO3RleHQtZGVjb3JhdGlvbjpub25lO3ZlcnRpY2FsLWFsaWduOmJhc2VsaW5lO3doaXRl

LXNwYWNlOnByZS13cmFwOyI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48L3A+CjxwIHN0eWxlPSJsaW5l

LWhlaWdodDoxLjM4O21hcmdpbi1ib3R0b206MTJwdDttYXJnaW4tdG9wOjEycHQ7dGV4dC1hbGln

bjpjZW50ZXI7IiBkaXI9Imx0ciI+PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6dHJhbnNw

YXJlbnQ7Y29sb3I6IzAwMDAwMDtmb250LWZhbWlseTpBcmlhbCxzYW5zLXNlcmlmO2ZvbnQtc2l6

ZToxMXB0OyI+PHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6bm9ybWFsO2ZvbnQtdmFyaWFudDpub3Jt

YWw7Zm9udC13ZWlnaHQ6NDAwO3RleHQtZGVjb3JhdGlvbjpub25lO3ZlcnRpY2FsLWFsaWduOmJh

c2VsaW5lO3doaXRlLXNwYWNlOnByZS13cmFwOyI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48L3A+Cjxw

IHN0eWxlPSJsaW5lLWhlaWdodDoxLjM4O21hcmdpbi1ib3R0b206MTJwdDttYXJnaW4tdG9wOjEy

cHQ7dGV4dC1hbGlnbjpjZW50ZXI7IiBkaXI9Imx0ciI+PHNwYW4gc3R5bGU9ImJhY2tncm91bmQt

Y29sb3I6dHJhbnNwYXJlbnQ7Y29sb3I6IzAwMDAwMDtmb250LWZhbWlseTpBcmlhbCxzYW5zLXNl

cmlmO2ZvbnQtc2l6ZToxMXB0OyI+PHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6bm9ybWFsO2ZvbnQt

dmFyaWFudDpub3JtYWw7Zm9udC13ZWlnaHQ6NDAwO3RleHQtZGVjb3JhdGlvbjpub25lO3ZlcnRp

Y2FsLWFsaWduOmJhc2VsaW5lO3doaXRlLXNwYWNlOnByZS13cmFwOyI+Jm5ic3A7PC9zcGFuPjwv

c3Bhbj48L3A+CjxwIHN0eWxlPSJsaW5lLWhlaWdodDoxLjM4O21hcmdpbi1ib3R0b206MTJwdDtt

YXJnaW4tdG9wOjEycHQ7dGV4dC1hbGlnbjpjZW50ZXI7IiBkaXI9Imx0ciI+PHNwYW4gc3R5bGU9

ImJhY2tncm91bmQtY29sb3I6dHJhbnNwYXJlbnQ7Y29sb3I6IzAwMDAwMDtmb250LWZhbWlseTpB

cmlhbCxzYW5zLXNlcmlmO2ZvbnQtc2l6ZToxMXB0OyI+PHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6

bm9ybWFsO2ZvbnQtdmFyaWFudDpub3JtYWw7Zm9udC13ZWlnaHQ6NDAwO3RleHQtZGVjb3JhdGlv

bjpub25lO3ZlcnRpY2FsLWFsaWduOmJhc2VsaW5lO3doaXRlLXNwYWNlOnByZS13cmFwOyI+Jm5i

c3A7PC9zcGFuPjwvc3Bhbj48L3A+CjxwIHN0eWxlPSJsaW5lLWhlaWdodDoxLjM4O21hcmdpbi1i

b3R0b206MTJwdDttYXJnaW4tdG9wOjEycHQ7dGV4dC1hbGlnbjpjZW50ZXI7IiBkaXI9Imx0ciI+

PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6dHJhbnNwYXJlbnQ7Y29sb3I6IzAwMDAwMDtm

b250LWZhbWlseTpBcmlhbCxzYW5zLXNlcmlmO2ZvbnQtc2l6ZToxMXB0OyI+PHNwYW4gc3R5bGU9

ImZvbnQtc3R5bGU6bm9ybWFsO2ZvbnQtdmFyaWFudDpub3JtYWw7Zm9udC13ZWlnaHQ6NDAwO3Rl

eHQtZGVjb3JhdGlvbjpub25lO3ZlcnRpY2FsLWFsaWduOmJhc2VsaW5lO3doaXRlLXNwYWNlOnBy

ZS13cmFwOyI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48L3A+CjxwIHN0eWxlPSJsaW5lLWhlaWdodDox

LjM4O21hcmdpbi1ib3R0b206MTJwdDttYXJnaW4tdG9wOjEycHQ7dGV4dC1hbGlnbjpjZW50ZXI7

IiBkaXI9Imx0ciI+PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6dHJhbnNwYXJlbnQ7Y29s

b3I6IzAwMDAwMDtmb250LWZhbWlseTpBcmlhbCxzYW5zLXNlcmlmO2ZvbnQtc2l6ZToxMXB0OyI+

PHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6bm9ybWFsO2ZvbnQtdmFyaWFudDpub3JtYWw7Zm9udC13

ZWlnaHQ6NDAwO3RleHQtZGVjb3JhdGlvbjpub25lO3ZlcnRpY2FsLWFsaWduOmJhc2VsaW5lO3do

aXRlLXNwYWNlOnByZS13cmFwOyI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48L3A+CjxwIHN0eWxlPSJs

aW5lLWhlaWdodDoxLjM4O21hcmdpbi1ib3R0b206MTJwdDttYXJnaW4tdG9wOjEycHQ7dGV4dC1h

bGlnbjpjZW50ZXI7IiBkaXI9Imx0ciI+PGJyPjxzcGFuIHN0eWxlPSJiYWNrZ3JvdW5kLWNvbG9y

OnRyYW5zcGFyZW50O2NvbG9yOiMwMDAwMDA7Zm9udC1mYW1pbHk6QXJpYWwsc2Fucy1zZXJpZjtm

b250LXNpemU6MTFwdDsiPjxzcGFuIHN0eWxlPSJmb250LXN0eWxlOm5vcm1hbDtmb250LXZhcmlh

bnQ6bm9ybWFsO2ZvbnQtd2VpZ2h0OjQwMDt0ZXh0LWRlY29yYXRpb246bm9uZTt2ZXJ0aWNhbC1h

bGlnbjpiYXNlbGluZTt3aGl0ZS1zcGFjZTpwcmUtd3JhcDsiPiZuYnNwOzwvc3Bhbj48L3NwYW4+

PC9wPgo8cCBzdHlsZT0ibGluZS1oZWlnaHQ6MS4zODttYXJnaW4tYm90dG9tOjEycHQ7bWFyZ2lu

LXRvcDoxMnB0O3RleHQtYWxpZ246Y2VudGVyOyIgZGlyPSJsdHIiPjxicj48YnI+PHNwYW4gc3R5

bGU9ImJhY2tncm91bmQtY29sb3I6dHJhbnNwYXJlbnQ7Y29sb3I6IzAwMDAwMDtmb250LWZhbWls

eTpBcmlhbCxzYW5zLXNlcmlmO2ZvbnQtc2l6ZToxMXB0OyI+PHNwYW4gc3R5bGU9ImZvbnQtc3R5

bGU6bm9ybWFsO2ZvbnQtdmFyaWFudDpub3JtYWw7Zm9udC13ZWlnaHQ6NDAwO3RleHQtZGVjb3Jh

dGlvbjpub25lO3ZlcnRpY2FsLWFsaWduOmJhc2VsaW5lO3doaXRlLXNwYWNlOnByZS13cmFwOyI+

Jm5ic3A7PC9zcGFuPjwvc3Bhbj48L3A+CjxwIHN0eWxlPSJsaW5lLWhlaWdodDoxLjM4O21hcmdp

bi1ib3R0b206MTJwdDttYXJnaW4tdG9wOjEycHQ7dGV4dC1hbGlnbjpjZW50ZXI7IiBkaXI9Imx0

ciI+PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6I2ZmZmZmZjtjb2xvcjojMDAwMDAwO2Zv

bnQtZmFtaWx5OkFyaWFsLHNhbnMtc2VyaWY7Zm9udC1zaXplOjhwdDsiPjxpPjxzcGFuIHN0eWxl

PSJmb250LXZhcmlhbnQ6bm9ybWFsO2ZvbnQtd2VpZ2h0OjQwMDt0ZXh0LWRlY29yYXRpb246bm9u

ZTt2ZXJ0aWNhbC1hbGlnbjpiYXNlbGluZTt3aGl0ZS1zcGFjZTpwcmUtd3JhcDsiPlNob3VsZCB5

b3Ugd2lzaCB0byBvcHQgb3V0IG9mIG91ciBlbWFpbCBsaXN0LCBwbGVhc2UgY2xpY2sgb24gdGhl

Jm5ic3A7PC9zcGFuPjwvaT48L3NwYW4+PGEgc3R5bGU9InRleHQtZGVjb3JhdGlvbjpub25lOyIg

dGFyZ2V0PSJfYmxhbmsiIHJlbD0ibm9vcGVuZXIgbm9yZWZlcnJlciIgaHJlZj0iaHR0cHM6Ly9j

bGNrLnJ1LzNCYmtObiI+PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6I2ZmZmZmZjtjb2xv

cjojMTE1NWNjO2ZvbnQtZmFtaWx5OkFyaWFsLHNhbnMtc2VyaWY7Zm9udC1zaXplOjhwdDsiPjxp

PjxzcGFuIHN0eWxlPSItd2Via2l0LXRleHQtZGVjb3JhdGlvbi1za2lwOm5vbmU7Zm9udC12YXJp

YW50Om5vcm1hbDtmb250LXdlaWdodDo0MDA7dGV4dC1kZWNvcmF0aW9uLXNraXAtaW5rOm5vbmU7

dmVydGljYWwtYWxpZ246YmFzZWxpbmU7d2hpdGUtc3BhY2U6cHJlLXdyYXA7Ij48dT5VbnN1YnNj

cmliZTwvdT48L3NwYW4+PC9pPjwvc3Bhbj48L2E+PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29s

b3I6I2ZmZmZmZjtjb2xvcjojMDAwMDAwO2ZvbnQtZmFtaWx5OkFyaWFsLHNhbnMtc2VyaWY7Zm9u

dC1zaXplOjhwdDsiPjxpPjxzcGFuIHN0eWxlPSJmb250LXZhcmlhbnQ6bm9ybWFsO2ZvbnQtd2Vp

Z2h0OjQwMDt0ZXh0LWRlY29yYXRpb246bm9uZTt2ZXJ0aWNhbC1hbGlnbjpiYXNlbGluZTt3aGl0

ZS1zcGFjZTpwcmUtd3JhcDsiPiBsaW5rIGluY2x1ZGVkIGluIHRoaXMgbWVzc2FnZS4gUGxlYXNl

IG5vdGUgdGhhdCBpdCBtYXkgdGFrZSB1cCB0byAxMCBkYXlzIGZvciB5b3VyIHJlcXVlc3QgdG8g

YmUgYWN0aW9uZWQuPC9zcGFuPjwvaT48L3NwYW4+PC9wPg==



--===============0125835041328661994==--