Tracking Phish from Microsoft
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 13 Jul 2024 14:05:03 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1sSiz4-000000003nt-2mzO
for dave@doctor.nl2k.ab.ca;
Sat, 13 Jul 2024 14:04:42 -0600
Resent-From: The Doctor
Resent-Date: Sat, 13 Jul 2024 14:04:42 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-co1nam11on2106.outbound.protection.outlook.com ([40.107.220.106]:25525 helo=NAM11-CO1-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1sShIb-000000008i0-1PIG
for doctor@doctor.nl2k.ab.ca;
Sat, 13 Jul 2024 12:16:51 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
b=L0h9bXUsFcgSOc6XgiBiTnZZBAoDxq88qWeLNXJRD7RFijqpzQl6MFP9ev7sZSvVFRQM1yIWgBljUF4fxTYE/MLcwljm2SjL1CHjaI0gOUpGFsK0V0BkVlrDE+c8rEI8qe7Tyxqiyi73gDtig3jPp7s9OnJfB1pry9WFWZqC8SYaxfLUWML+M6sRhQZViNUe2GHZIlZTJVvArx5p7K2iqZzIPguBQULFASAKfJO1rkmpgeWEMjKfIFgubpZWgOgSigXCzm/UQwwh9fTbUFy1RJm8FQ+ejdap4iGh9ushMHdH9EMrQo47navoS3Uo8aZyhqPGN3BUJMG8aEFZTvjNiw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector10001;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=iotjCo6qm5Q1ST7ZTD+pzEtO7vSrFGxRarP8jXJX2DI=;
b=QwZiXlg8Lhw6CPnY7/oXwATQ6MHJQg/gRusRnfeH2yFIvAoHvoSY1OgCUclSOxitVe0QLT//CPAil+AdWOl4weFvzt8KFXcRvwaMgPIX4y1yPbpYD7MFH2PddKsBnjj8PC6m3JTMK9rl3h5iERT0KP5l39vN5aIySTgYvRgkQZj9KwGqO1ex/iPlylDIepJB8ADFEHWdjTAVKBTiAhLdecoinwt3plL+db6aX9eiON+DckISVuMaDkRX79zGwcdYLbxVo6gGpNfdq+3GaC0Nr7V3GYu8DJJogntVZwU+76dYZkFNp4IoukPO1W84MBr2Lxxf/tioJAnqs7HJ6FuESQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is
209.85.222.180) smtp.rcpttodomain=camposfeijo.com.br smtp.mailfrom=gmail.com;
dmarc=pass (p=none sp=quarantine pct=100) action=none header.from=gmail.com;
dkim=pass (signature was verified) header.d=gmail.com; arc=none (0)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=camposfeijo.onmicrosoft.com; s=selector1-camposfeijo-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=iotjCo6qm5Q1ST7ZTD+pzEtO7vSrFGxRarP8jXJX2DI=;
b=YbJrH4onwk/3DttHPiRVMDenzVd2wtMdcFMd3xvqlMHLGLUJsmBi+AIf/raSn0QlHErq1JoSNYUhvUVdVkP1lFWOQr9qzNDVg9w+ZH+RlmBYS+Y9nA6J9varAq9cP9qtFFw+P7nGve6G5iv7nwBwoV+3swWPSdf1FCJNXV1O2vQgdnoGcbaAChTt+YAR0Je4OcAdhp+MHerJQvlPHeWH0pULHb9MEeE7/hZIGvmTPnfRrj/sdXdwMKUYXhGPCrKXauMQS+p5SIF1nyBHUXf88FTInixjpyDalAjUmPbhCCSKZ8Rkk/IerEbUauNCsiXzg6cQuz8k7LqoDERL4kNTFQ==
Received: from CPUPR80MB7927.lamprd80.prod.outlook.com (2603:10d6:103:2c6::12)
by CPVPR80MB6461.lamprd80.prod.outlook.com (2603:10d6:103:84::12) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7784.9; Sat, 13 Jul
2024 18:14:34 +0000
Received: from CH0PR03CA0348.namprd03.prod.outlook.com (2603:10b6:610:11a::23)
by CPUPR80MB7927.lamprd80.prod.outlook.com (2603:10d6:103:2c6::12) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7784.9; Sat, 13 Jul
2024 18:13:03 +0000
Received: from CH2PEPF00000149.namprd02.prod.outlook.com
(2603:10b6:610:11a:cafe::61) by CH0PR03CA0348.outlook.office365.com
(2603:10b6:610:11a::23) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7762.25 via Frontend
Transport; Sat, 13 Jul 2024 18:13:03 +0000
Authentication-Results: spf=pass (sender IP is 209.85.222.180)
smtp.mailfrom=gmail.com; dkim=pass (signature was verified)
header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;
Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates
209.85.222.180 as permitted sender) receiver=protection.outlook.com;
client-ip=209.85.222.180; helo=mail-qk1-f180.google.com; pr=C
Received: from mail-qk1-f180.google.com (209.85.222.180) by
CH2PEPF00000149.mail.protection.outlook.com (10.167.244.106) with Microsoft
SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.7762.17
via Frontend Transport; Sat, 13 Jul 2024 18:13:02 +0000
Received: by mail-qk1-f180.google.com with SMTP id af79cd13be357-79f16c85da0so208756985a.2
for; Sat, 13 Jul 2024 11:13:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1720894381; x=1721499181; darn=camposfeijo.com.br;
h=in-reply-to:reply-to:feedback-id:from:references:to:subject:list-id
:date:message-id:from:to:cc:subject:date:message-id:reply-to;
bh=iotjCo6qm5Q1ST7ZTD+pzEtO7vSrFGxRarP8jXJX2DI=;
b=DxqPAmaBQOJaxYwQzZD8UPA7n+oPU8H20vV4zdmYGQEcWfFmL6ERElTlmpTc1xdDdO
1BK8aHkCqhvTqkU7T+qE4KP1tZzYwChMBIUANmK7kH8T5lAWeG6Q+rVxgvTFV7gCRXKm
a6L3CdDtwNm55T5CQBiJZI+edXIbCEizCXayE6KQOQ2Mu1U7VSPURnRlO93bC0EfC9fZ
n1WAhZijVlj7DgWT4/rOPR2G2g38Iu174HnYsyFCQmk2xpb0l4W7+12BfwQUvwl4T/J7
dk/NBhBTNCe3ZU+GTdoK+MqE1J/IfkwiSaYkw788GbKUnu7XliabIvOa12EEF4FjVXFX
Ed2g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1720894381; x=1721499181;
h=in-reply-to:reply-to:feedback-id:from:references:to:subject:list-id
:date:message-id:x-gm-message-state:from:to:cc:subject:date
:message-id:reply-to;
bh=iotjCo6qm5Q1ST7ZTD+pzEtO7vSrFGxRarP8jXJX2DI=;
b=AoSN2O0bBprfsrnI1Et/Nwhl5Hm9dK3nG2g6gYQPeyqk3K01WpGD6mejkxqDCcDojo
7WQSSD0kIkMp5ZzK6YrFtcp5gYhsvQxQcGyrYaCFFKD2269Sp6sty9+sMeSgIGQfCYFI
SmBll/AEQoXpppEwQBQmp1hoS0uFxkCYqMv9i4IfavWWMQGBMrDrLsUByXBJj9zI6M8k
iqaCQnYd90al0xoU5haxB14DxrKv/9UVgOtXKQAuuoKq/8RmcVbdFvbf38D8H2OzWlxh
k7xgP2I6KorQscmSwDOcuR7yIQRyZZvjC1cw/jR2bTa2ACU2e52zC2qx/Pk4cWS4LI/h
8FJQ==
X-Gm-Message-State: AOJu0Yy6o4vHJ25XxIba3YkbopPV4BaTPQSH2roeChWUpaIYbZW0sLl7
aga46Ne2CHlqVHzebb4yPVWkB45HW6XszKnMeWY/NE32b6d4F5kYwupfHlA10r4=
X-Google-Smtp-Source: AGHT+IHW2Wk/fRuWvUt5pT30Z9aTJaEkJ4FRAY/jAr7hGEqTZxQjDNwlJrNZlQG055STl6aitwdxzQ==
X-Received: by 2002:a05:620a:4ea:b0:79f:bcf:9e6b with SMTP id af79cd13be357-79f19a47206mr1595206885a.2.1720894380247;
Sat, 13 Jul 2024 11:13:00 -0700 (PDT)
Received: from mail.pc10.afriquesud.net (pc10.sarcelles.site. [45.42.203.119])
by smtp.gmail.com with ESMTPSA id af79cd13be357-7a160b98cd8sm60301485a.18.2024.07.13.11.12.59
for
(version=TLS1 cipher=ECDHE-ECDSA-AES128-SHA bits=128/128);
Sat, 13 Jul 2024 11:12:59 -0700 (PDT)
Message-ID: <6692c3ab.050a0220.8acff.1ebd@mx.google.com>
Date: Sat, 13 Jul 2024 11:12:59 -0700 (PDT)
X-Info: XjqEFFzxbsAlalvOoKACpkSzOiFloChpATknUOHhcIcvW
List-ID: <5519112.5519112.5519112>
Subject: Tracking Number n#820649
To:
Content-Type: text/plain
References: <9560278614.javamail.app@mail-ipYnews-ZoyF.CdjOfB9OaL30KOlJMi.sharepoint.com>
from: Track & Trace
Feedback-ID: 325-anexp#nret-fa:account-notifier
Reply-To: abuse@invitation-3024.
In-Reply-To:
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: c643ba38-8b9b-4d3d-b7c4-2783d105bff5:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic:
CH2PEPF00000149:EE_|CPUPR80MB7927:EE_|CPVPR80MB6461:EE_
MIME-Version: 1.0
X-MS-Office365-Filtering-Correlation-Id: 0c08370a-9c9f-4b07-41f6-08dca3676f9c
X-LD-Processed: c643ba38-8b9b-4d3d-b7c4-2783d105bff5,ExtAddr
X-MS-Exchange-SenderADCheck: 0
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam:
BCL:0;ARA:13230040|61400799027|7093399012|69100299015|48200799018|376014|7416014;
X-Microsoft-Antispam-Message-Info:
=?us-ascii?Q?WJLH0edlajOIiO+gGA71SzyyqbL6XvfSVTCFgyZ1z5AL1QO/1HWB1fpvorrI?=
=?us-ascii?Q?F9UGoF8HMnZY8owIcjJxkmtU37x48kc6/7ebShg8lM2QqOca9kRizwdyTfsy?=
=?us-ascii?Q?tPJ3fZvZj9c9CzBDCKbFfBAPeO4oxceXCEU6Maj4p6m91ufJilm4VW2joXA7?=
=?us-ascii?Q?FGDc2dnYWdMniTVfpaAIPLtxjHkB4z5R91jH1Zw52atddR4GxXYl2eRchufx?=
=?us-ascii?Q?23A8bZ+M2YWFvPa3zYwrvBwQ/65oVcvM6UCbS054800F7uIh9i06oIWsF1X/?=
=?us-ascii?Q?ny0K8ZfUiiZjEYQNHD3Xu7KXS0mtBVgAzn01uDRXNghnePG5ipy9+DFHFjLU?=
=?us-ascii?Q?e3y2S7ArhVAaQiFTFWfj/5c9a8m4wHkReCUo3DK9sZsmADuw1eTfd0PCgL42?=
=?us-ascii?Q?AgTpR2lYPtMVzXyPSOoDie2gF48iW00VXBEQz+i4hOnoXtZRMNJsXZhD9gRJ?=
=?us-ascii?Q?0A7oLOb3ZmYHuLcbEUep4e5DHfpWoU/BCf1q2ifRTQfPgs2Kd/yyH46HpkUq?=
=?us-ascii?Q?xz9azRPtQd5JhTEamhEjZ8cgujdLX9UfQDYC9oudADknp2236kCS2mjw+JoV?=
=?us-ascii?Q?ARLjmgbBIs4/vNGL7TnMsEB/WV6oicAQ5e3j5W9jtAWrCRRc0WkcDPVBrckf?=
=?us-ascii?Q?CtzkCbvCc3xVwvoDcBshaxFPtIKwU+O2ZTm65YZzUBTfc91eNTjV7M77MNPW?=
=?us-ascii?Q?KNZYipexq8NaKGH+EEKRru8d/RXyJ6SkZ1Sd9UoW5K2FVkkiYKLGcq15U3QH?=
=?us-ascii?Q?DXTTMq6nTsoKaVtbBy0jwdUNCv1payRp2RBI1i6R7mpb5K+3tzjYxAI8SkDx?=
=?us-ascii?Q?Qp99/1oSRyVzjz6N4dXTprK9L4IH95/lNIx5svdbRmz/zGwpUtH5A1fPavhQ?=
=?us-ascii?Q?Np4KeG2qR8iZDvNywt3aAonaFREcA4YRec94F0hAWl/+yYaB5lDjik/ZxlHw?=
=?us-ascii?Q?+2r3wjWSXI8b0H2spUU/ryag8h7RfzgeKDHn95KgMopZ97R6zatH8duSWLQG?=
=?us-ascii?Q?ZoFj1d6q/oO9mEDMqAc8TQpTGztLixvMINX/cC0g93Dm9fgPshzaT0N9zkfs?=
=?us-ascii?Q?JF0JZzw2sCXsm7eVeLqAq13+kB3Exy/bwL3dBWae8y6pJDxNm/HzoIk6vI8V?=
=?us-ascii?Q?+QKUSNrlCvMigbmJ640MOF2tbfYhEU162uBqdDxQFRlvMe1VVsLfFOLnBdHE?=
=?us-ascii?Q?TihQiSQWBpdTQ7HLyUIkK/nVV7FfRkDJpsZud4bnAEB9hLhfFDLrHOGgfeoi?=
=?us-ascii?Q?rcP/N9rntZEzO/yLiWduaZovJAQR7sVloZcL/I0+dVpwCWl8koEFjYY/p+tH?=
=?us-ascii?Q?nlhMrevMqiNC0hrhdOb13DAXSfBIBUJU4U+PPO9d7/m8QTdb5cZHiSy+ECDl?=
=?us-ascii?Q?BAUROCV8t4kkRIorcT0Kx5O/SiMs0PBS4QhEelY62UxsTuQRzQWGtQYEOdtT?=
=?us-ascii?Q?jrKU4/8LRqM=3D?=
X-Forefront-Antispam-Report:
CIP:209.85.222.180;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail-qk1-f180.google.com;PTR:mail-qk1-f180.google.com;CAT:NONE;SFS:(13230040)(61400799027)(7093399012)(69100299015)(48200799018)(376014)(7416014);DIR:OUT;SFP:1102;
X-ExternalRecipientOutboundConnectors: c643ba38-8b9b-4d3d-b7c4-2783d105bff5
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-OriginatorOrg: camposfeijo.com.br
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 13 Jul 2024 18:13:02.1269
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 0c08370a-9c9f-4b07-41f6-08dca3676f9c
X-MS-Exchange-CrossTenant-Id: c643ba38-8b9b-4d3d-b7c4-2783d105bff5
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-CrossTenant-AuthSource:
CH2PEPF00000149.namprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CPVPR80MB6461
X-Spam_score: 15.3
X-Spam_score_int: 153
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: --vip.91050-71262944-40041544895025223111020044018289178 Content-Type:
multipart/parallel; boundary="_-------91050-71262944-40041544895025223111020044018289178=_:"
91050-71262944-40041544895025223111020044018289178=_: Content-Type: multipart/alternative;
boundary="=91050-71262944-40041544895025223111020044018289178"
Content analysis details: (15.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.222.180 listed in dnsbl.ahbl.org]
[209.85.222.180 listed in dnsbl.ahbl.org]
[209.85.222.180 listed in dnsbl.ahbl.org]
[209.85.222.180 listed in dnsbl.ahbl.org]
[40.107.220.106 listed in dnsbl.ahbl.org]
[40.107.220.106 listed in dnsbl.ahbl.org]
[40.107.220.106 listed in dnsbl.ahbl.org]
[40.107.220.106 listed in dnsbl.ahbl.org]
[45.42.203.119 listed in dnsbl.ahbl.org]
[45.42.203.119 listed in dnsbl.ahbl.org]
[45.42.203.119 listed in dnsbl.ahbl.org]
[45.42.203.119 listed in dnsbl.ahbl.org]
[2603:10b6:610:11a:0:0:0:23 listed in]
[dnsbl.ahbl.org]
[2603:10b6:610:11a:0:0:0:23 listed in]
[dnsbl.ahbl.org]
[2603:10b6:610:11a:0:0:0:23 listed in]
[dnsbl.ahbl.org]
[2603:10b6:610:11a:0:0:0:23 listed in]
[dnsbl.ahbl.org]
[2603:10b6:610:11a:cafe:0:0:61 listed in]
[dnsbl.ahbl.org]
[2603:10b6:610:11a:cafe:0:0:61 listed in]
[dnsbl.ahbl.org]
[2603:10b6:610:11a:cafe:0:0:61 listed in]
[dnsbl.ahbl.org]
[2603:10b6:610:11a:cafe:0:0:61 listed in]
[dnsbl.ahbl.org]
[2603:10d6:103:2c6:0:0:0:12 listed in]
[dnsbl.ahbl.org]
[2603:10d6:103:2c6:0:0:0:12 listed in]
[dnsbl.ahbl.org]
[2603:10d6:103:2c6:0:0:0:12 listed in]
[dnsbl.ahbl.org]
[2603:10d6:103:2c6:0:0:0:12 listed in]
[dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.222.180 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.222.180 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.222.180 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.222.180 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[2603:10d6:103:2c6:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10d6:103:2c6:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10d6:103:2c6:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10d6:103:2c6:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10d6:103:2c6:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10d6:103:2c6:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10d6:103:2c6:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10d6:103:2c6:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:0:0:0:23 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:0:0:0:23 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:0:0:0:23 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:0:0:0:23 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:0:0:0:23 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:0:0:0:23 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:0:0:0:23 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:0:0:0:23 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:cafe:0:0:61 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:cafe:0:0:61 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:cafe:0:0:61 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:cafe:0:0:61 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:cafe:0:0:61 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:cafe:0:0:61 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:cafe:0:0:61 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:cafe:0:0:61 listed in]
[will-spam-for-food.eu.org]
[45.42.203.119 listed in will-spam-for-food.eu.org]
[45.42.203.119 listed in will-spam-for-food.eu.org]
[45.42.203.119 listed in will-spam-for-food.eu.org]
[45.42.203.119 listed in will-spam-for-food.eu.org]
[45.42.203.119 listed in will-spam-for-food.eu.org]
[45.42.203.119 listed in will-spam-for-food.eu.org]
[45.42.203.119 listed in will-spam-for-food.eu.org]
[45.42.203.119 listed in will-spam-for-food.eu.org]
[40.107.220.106 listed in will-spam-for-food.eu.org]
[40.107.220.106 listed in will-spam-for-food.eu.org]
[40.107.220.106 listed in will-spam-for-food.eu.org]
[40.107.220.106 listed in will-spam-for-food.eu.org]
[40.107.220.106 listed in will-spam-for-food.eu.org]
[40.107.220.106 listed in will-spam-for-food.eu.org]
[40.107.220.106 listed in will-spam-for-food.eu.org]
[40.107.220.106 listed in will-spam-for-food.eu.org]
[209.85.222.180 listed in will-spam-for-food.eu.org]
[209.85.222.180 listed in will-spam-for-food.eu.org]
[209.85.222.180 listed in will-spam-for-food.eu.org]
[209.85.222.180 listed in will-spam-for-food.eu.org]
[209.85.222.180 listed in will-spam-for-food.eu.org]
[209.85.222.180 listed in will-spam-for-food.eu.org]
[209.85.222.180 listed in will-spam-for-food.eu.org]
[209.85.222.180 listed in will-spam-for-food.eu.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[40.107.220.106 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 ARC_SIGNED Message has a ARC signature
0.0 ARC_VALID Message has a valid ARC signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[pettycraft6882839(at)gmail.com]
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.6 MEGALONGWORD BODY: Uses really overlong words
0.3 LONGWORD BODY: Uses overlong words
0.2 PP_MIME_FAKE_ASCII_TEXT BODY: MIME text/plain claims to be ASCII but
isn't
1.0 MR_DIFF_MID No description available.
1.0 IMPRO_URI_2 No description available.
2.0 VOWEL_URI_6 URI hostname with 6 consecutive vowels
1.4 MALFORMED_FREEMAIL Bad headers on message from free email service
1.0 MIXED_CENTER_CASE Has center tag in mixed case
0.3 CTE_8BIT_MISMATCH Header says 7bits but body disagrees
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
freemail headers are different
1.0 IMPRO_URI_3 No description available.
0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable
1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
Subject: {SPAM?} Tracking Number n#820649
--vip.91050-71262944-40041544895025223111020044018289178
Content-Type: multipart/parallel; boundary="_-------91050-71262944-40041544895025223111020044018289178=_:"
--_-------91050-71262944-40041544895025223111020044018289178=_:
Content-Type: multipart/alternative; boundary="_----------=91050-71262944-40041544895025223111020044018289178"
--_----------=91050-71262944-40041544895025223111020044018289178
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: Hexa
--_----------=91050-71262944-40041544895025223111020044018289178
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: Hexa
ð™”ð™¤ð™ªð™§ ð™¥ð™–ð™˜ð™ ð™–ð™œð™š ð™™ð™šð™„ð™žð™«ð™šð™§ð™® ð™£ð™¤ð™©ð™žð™›ð™žð™˜ð™–ð™©ð™žð™¤ð™£
margin:0cm 0cm 0.0001pt;background-image:none;background-position:0% 0%;bac=
kground-size:initial;background-repeat:repeat;background-origin:initial;bac=
kground-clip:initial;line-height:normal">
color=3D"#000000">Hope you are doing well.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 13 Jul 2024 14:05:03 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1sSiz4-000000003nt-2mzO
for dave@doctor.nl2k.ab.ca;
Sat, 13 Jul 2024 14:04:42 -0600
Resent-From: The Doctor
Resent-Date: Sat, 13 Jul 2024 14:04:42 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-co1nam11on2106.outbound.protection.outlook.com ([40.107.220.106]:25525 helo=NAM11-CO1-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1sShIb-000000008i0-1PIG
for doctor@doctor.nl2k.ab.ca;
Sat, 13 Jul 2024 12:16:51 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
b=L0h9bXUsFcgSOc6XgiBiTnZZBAoDxq88qWeLNXJRD7RFijqpzQl6MFP9ev7sZSvVFRQM1yIWgBljUF4fxTYE/MLcwljm2SjL1CHjaI0gOUpGFsK0V0BkVlrDE+c8rEI8qe7Tyxqiyi73gDtig3jPp7s9OnJfB1pry9WFWZqC8SYaxfLUWML+M6sRhQZViNUe2GHZIlZTJVvArx5p7K2iqZzIPguBQULFASAKfJO1rkmpgeWEMjKfIFgubpZWgOgSigXCzm/UQwwh9fTbUFy1RJm8FQ+ejdap4iGh9ushMHdH9EMrQo47navoS3Uo8aZyhqPGN3BUJMG8aEFZTvjNiw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector10001;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=iotjCo6qm5Q1ST7ZTD+pzEtO7vSrFGxRarP8jXJX2DI=;
b=QwZiXlg8Lhw6CPnY7/oXwATQ6MHJQg/gRusRnfeH2yFIvAoHvoSY1OgCUclSOxitVe0QLT//CPAil+AdWOl4weFvzt8KFXcRvwaMgPIX4y1yPbpYD7MFH2PddKsBnjj8PC6m3JTMK9rl3h5iERT0KP5l39vN5aIySTgYvRgkQZj9KwGqO1ex/iPlylDIepJB8ADFEHWdjTAVKBTiAhLdecoinwt3plL+db6aX9eiON+DckISVuMaDkRX79zGwcdYLbxVo6gGpNfdq+3GaC0Nr7V3GYu8DJJogntVZwU+76dYZkFNp4IoukPO1W84MBr2Lxxf/tioJAnqs7HJ6FuESQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is
209.85.222.180) smtp.rcpttodomain=camposfeijo.com.br smtp.mailfrom=gmail.com;
dmarc=pass (p=none sp=quarantine pct=100) action=none header.from=gmail.com;
dkim=pass (signature was verified) header.d=gmail.com; arc=none (0)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=camposfeijo.onmicrosoft.com; s=selector1-camposfeijo-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=iotjCo6qm5Q1ST7ZTD+pzEtO7vSrFGxRarP8jXJX2DI=;
b=YbJrH4onwk/3DttHPiRVMDenzVd2wtMdcFMd3xvqlMHLGLUJsmBi+AIf/raSn0QlHErq1JoSNYUhvUVdVkP1lFWOQr9qzNDVg9w+ZH+RlmBYS+Y9nA6J9varAq9cP9qtFFw+P7nGve6G5iv7nwBwoV+3swWPSdf1FCJNXV1O2vQgdnoGcbaAChTt+YAR0Je4OcAdhp+MHerJQvlPHeWH0pULHb9MEeE7/hZIGvmTPnfRrj/sdXdwMKUYXhGPCrKXauMQS+p5SIF1nyBHUXf88FTInixjpyDalAjUmPbhCCSKZ8Rkk/IerEbUauNCsiXzg6cQuz8k7LqoDERL4kNTFQ==
Received: from CPUPR80MB7927.lamprd80.prod.outlook.com (2603:10d6:103:2c6::12)
by CPVPR80MB6461.lamprd80.prod.outlook.com (2603:10d6:103:84::12) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7784.9; Sat, 13 Jul
2024 18:14:34 +0000
Received: from CH0PR03CA0348.namprd03.prod.outlook.com (2603:10b6:610:11a::23)
by CPUPR80MB7927.lamprd80.prod.outlook.com (2603:10d6:103:2c6::12) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7784.9; Sat, 13 Jul
2024 18:13:03 +0000
Received: from CH2PEPF00000149.namprd02.prod.outlook.com
(2603:10b6:610:11a:cafe::61) by CH0PR03CA0348.outlook.office365.com
(2603:10b6:610:11a::23) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7762.25 via Frontend
Transport; Sat, 13 Jul 2024 18:13:03 +0000
Authentication-Results: spf=pass (sender IP is 209.85.222.180)
smtp.mailfrom=gmail.com; dkim=pass (signature was verified)
header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;
Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates
209.85.222.180 as permitted sender) receiver=protection.outlook.com;
client-ip=209.85.222.180; helo=mail-qk1-f180.google.com; pr=C
Received: from mail-qk1-f180.google.com (209.85.222.180) by
CH2PEPF00000149.mail.protection.outlook.com (10.167.244.106) with Microsoft
SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.7762.17
via Frontend Transport; Sat, 13 Jul 2024 18:13:02 +0000
Received: by mail-qk1-f180.google.com with SMTP id af79cd13be357-79f16c85da0so208756985a.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1720894381; x=1721499181; darn=camposfeijo.com.br;
h=in-reply-to:reply-to:feedback-id:from:references:to:subject:list-id
:date:message-id:from:to:cc:subject:date:message-id:reply-to;
bh=iotjCo6qm5Q1ST7ZTD+pzEtO7vSrFGxRarP8jXJX2DI=;
b=DxqPAmaBQOJaxYwQzZD8UPA7n+oPU8H20vV4zdmYGQEcWfFmL6ERElTlmpTc1xdDdO
1BK8aHkCqhvTqkU7T+qE4KP1tZzYwChMBIUANmK7kH8T5lAWeG6Q+rVxgvTFV7gCRXKm
a6L3CdDtwNm55T5CQBiJZI+edXIbCEizCXayE6KQOQ2Mu1U7VSPURnRlO93bC0EfC9fZ
n1WAhZijVlj7DgWT4/rOPR2G2g38Iu174HnYsyFCQmk2xpb0l4W7+12BfwQUvwl4T/J7
dk/NBhBTNCe3ZU+GTdoK+MqE1J/IfkwiSaYkw788GbKUnu7XliabIvOa12EEF4FjVXFX
Ed2g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1720894381; x=1721499181;
h=in-reply-to:reply-to:feedback-id:from:references:to:subject:list-id
:date:message-id:x-gm-message-state:from:to:cc:subject:date
:message-id:reply-to;
bh=iotjCo6qm5Q1ST7ZTD+pzEtO7vSrFGxRarP8jXJX2DI=;
b=AoSN2O0bBprfsrnI1Et/Nwhl5Hm9dK3nG2g6gYQPeyqk3K01WpGD6mejkxqDCcDojo
7WQSSD0kIkMp5ZzK6YrFtcp5gYhsvQxQcGyrYaCFFKD2269Sp6sty9+sMeSgIGQfCYFI
SmBll/AEQoXpppEwQBQmp1hoS0uFxkCYqMv9i4IfavWWMQGBMrDrLsUByXBJj9zI6M8k
iqaCQnYd90al0xoU5haxB14DxrKv/9UVgOtXKQAuuoKq/8RmcVbdFvbf38D8H2OzWlxh
k7xgP2I6KorQscmSwDOcuR7yIQRyZZvjC1cw/jR2bTa2ACU2e52zC2qx/Pk4cWS4LI/h
8FJQ==
X-Gm-Message-State: AOJu0Yy6o4vHJ25XxIba3YkbopPV4BaTPQSH2roeChWUpaIYbZW0sLl7
aga46Ne2CHlqVHzebb4yPVWkB45HW6XszKnMeWY/NE32b6d4F5kYwupfHlA10r4=
X-Google-Smtp-Source: AGHT+IHW2Wk/fRuWvUt5pT30Z9aTJaEkJ4FRAY/jAr7hGEqTZxQjDNwlJrNZlQG055STl6aitwdxzQ==
X-Received: by 2002:a05:620a:4ea:b0:79f:bcf:9e6b with SMTP id af79cd13be357-79f19a47206mr1595206885a.2.1720894380247;
Sat, 13 Jul 2024 11:13:00 -0700 (PDT)
Received: from mail.pc10.afriquesud.net (pc10.sarcelles.site. [45.42.203.119])
by smtp.gmail.com with ESMTPSA id af79cd13be357-7a160b98cd8sm60301485a.18.2024.07.13.11.12.59
for
(version=TLS1 cipher=ECDHE-ECDSA-AES128-SHA bits=128/128);
Sat, 13 Jul 2024 11:12:59 -0700 (PDT)
Message-ID: <6692c3ab.050a0220.8acff.1ebd@mx.google.com>
Date: Sat, 13 Jul 2024 11:12:59 -0700 (PDT)
X-Info: XjqEFFzxbsAlalvOoKACpkSzOiFloChpATknUOHhcIcvW
List-ID: <5519112.5519112.5519112>
Subject: Tracking Number n#820649
To:
Content-Type: text/plain
References: <9560278614.javamail.app@mail-ipYnews-ZoyF.CdjOfB9OaL30KOlJMi.sharepoint.com>
from: Track & Trace
Feedback-ID: 325-anexp#nret-fa:account-notifier
Reply-To: abuse@invitation-3024.
In-Reply-To:
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: c643ba38-8b9b-4d3d-b7c4-2783d105bff5:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic:
CH2PEPF00000149:EE_|CPUPR80MB7927:EE_|CPVPR80MB6461:EE_
MIME-Version: 1.0
X-MS-Office365-Filtering-Correlation-Id: 0c08370a-9c9f-4b07-41f6-08dca3676f9c
X-LD-Processed: c643ba38-8b9b-4d3d-b7c4-2783d105bff5,ExtAddr
X-MS-Exchange-SenderADCheck: 0
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam:
BCL:0;ARA:13230040|61400799027|7093399012|69100299015|48200799018|376014|7416014;
X-Microsoft-Antispam-Message-Info:
=?us-ascii?Q?WJLH0edlajOIiO+gGA71SzyyqbL6XvfSVTCFgyZ1z5AL1QO/1HWB1fpvorrI?=
=?us-ascii?Q?F9UGoF8HMnZY8owIcjJxkmtU37x48kc6/7ebShg8lM2QqOca9kRizwdyTfsy?=
=?us-ascii?Q?tPJ3fZvZj9c9CzBDCKbFfBAPeO4oxceXCEU6Maj4p6m91ufJilm4VW2joXA7?=
=?us-ascii?Q?FGDc2dnYWdMniTVfpaAIPLtxjHkB4z5R91jH1Zw52atddR4GxXYl2eRchufx?=
=?us-ascii?Q?23A8bZ+M2YWFvPa3zYwrvBwQ/65oVcvM6UCbS054800F7uIh9i06oIWsF1X/?=
=?us-ascii?Q?ny0K8ZfUiiZjEYQNHD3Xu7KXS0mtBVgAzn01uDRXNghnePG5ipy9+DFHFjLU?=
=?us-ascii?Q?e3y2S7ArhVAaQiFTFWfj/5c9a8m4wHkReCUo3DK9sZsmADuw1eTfd0PCgL42?=
=?us-ascii?Q?AgTpR2lYPtMVzXyPSOoDie2gF48iW00VXBEQz+i4hOnoXtZRMNJsXZhD9gRJ?=
=?us-ascii?Q?0A7oLOb3ZmYHuLcbEUep4e5DHfpWoU/BCf1q2ifRTQfPgs2Kd/yyH46HpkUq?=
=?us-ascii?Q?xz9azRPtQd5JhTEamhEjZ8cgujdLX9UfQDYC9oudADknp2236kCS2mjw+JoV?=
=?us-ascii?Q?ARLjmgbBIs4/vNGL7TnMsEB/WV6oicAQ5e3j5W9jtAWrCRRc0WkcDPVBrckf?=
=?us-ascii?Q?CtzkCbvCc3xVwvoDcBshaxFPtIKwU+O2ZTm65YZzUBTfc91eNTjV7M77MNPW?=
=?us-ascii?Q?KNZYipexq8NaKGH+EEKRru8d/RXyJ6SkZ1Sd9UoW5K2FVkkiYKLGcq15U3QH?=
=?us-ascii?Q?DXTTMq6nTsoKaVtbBy0jwdUNCv1payRp2RBI1i6R7mpb5K+3tzjYxAI8SkDx?=
=?us-ascii?Q?Qp99/1oSRyVzjz6N4dXTprK9L4IH95/lNIx5svdbRmz/zGwpUtH5A1fPavhQ?=
=?us-ascii?Q?Np4KeG2qR8iZDvNywt3aAonaFREcA4YRec94F0hAWl/+yYaB5lDjik/ZxlHw?=
=?us-ascii?Q?+2r3wjWSXI8b0H2spUU/ryag8h7RfzgeKDHn95KgMopZ97R6zatH8duSWLQG?=
=?us-ascii?Q?ZoFj1d6q/oO9mEDMqAc8TQpTGztLixvMINX/cC0g93Dm9fgPshzaT0N9zkfs?=
=?us-ascii?Q?JF0JZzw2sCXsm7eVeLqAq13+kB3Exy/bwL3dBWae8y6pJDxNm/HzoIk6vI8V?=
=?us-ascii?Q?+QKUSNrlCvMigbmJ640MOF2tbfYhEU162uBqdDxQFRlvMe1VVsLfFOLnBdHE?=
=?us-ascii?Q?TihQiSQWBpdTQ7HLyUIkK/nVV7FfRkDJpsZud4bnAEB9hLhfFDLrHOGgfeoi?=
=?us-ascii?Q?rcP/N9rntZEzO/yLiWduaZovJAQR7sVloZcL/I0+dVpwCWl8koEFjYY/p+tH?=
=?us-ascii?Q?nlhMrevMqiNC0hrhdOb13DAXSfBIBUJU4U+PPO9d7/m8QTdb5cZHiSy+ECDl?=
=?us-ascii?Q?BAUROCV8t4kkRIorcT0Kx5O/SiMs0PBS4QhEelY62UxsTuQRzQWGtQYEOdtT?=
=?us-ascii?Q?jrKU4/8LRqM=3D?=
X-Forefront-Antispam-Report:
CIP:209.85.222.180;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail-qk1-f180.google.com;PTR:mail-qk1-f180.google.com;CAT:NONE;SFS:(13230040)(61400799027)(7093399012)(69100299015)(48200799018)(376014)(7416014);DIR:OUT;SFP:1102;
X-ExternalRecipientOutboundConnectors: c643ba38-8b9b-4d3d-b7c4-2783d105bff5
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-OriginatorOrg: camposfeijo.com.br
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 13 Jul 2024 18:13:02.1269
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 0c08370a-9c9f-4b07-41f6-08dca3676f9c
X-MS-Exchange-CrossTenant-Id: c643ba38-8b9b-4d3d-b7c4-2783d105bff5
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-CrossTenant-AuthSource:
CH2PEPF00000149.namprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CPVPR80MB6461
X-Spam_score: 15.3
X-Spam_score_int: 153
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: --vip.91050-71262944-40041544895025223111020044018289178 Content-Type:
multipart/parallel; boundary="_-------91050-71262944-40041544895025223111020044018289178=_:"
91050-71262944-40041544895025223111020044018289178=_: Content-Type: multipart/alternative;
boundary="=91050-71262944-40041544895025223111020044018289178"
Content analysis details: (15.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.222.180 listed in dnsbl.ahbl.org]
[209.85.222.180 listed in dnsbl.ahbl.org]
[209.85.222.180 listed in dnsbl.ahbl.org]
[209.85.222.180 listed in dnsbl.ahbl.org]
[40.107.220.106 listed in dnsbl.ahbl.org]
[40.107.220.106 listed in dnsbl.ahbl.org]
[40.107.220.106 listed in dnsbl.ahbl.org]
[40.107.220.106 listed in dnsbl.ahbl.org]
[45.42.203.119 listed in dnsbl.ahbl.org]
[45.42.203.119 listed in dnsbl.ahbl.org]
[45.42.203.119 listed in dnsbl.ahbl.org]
[45.42.203.119 listed in dnsbl.ahbl.org]
[2603:10b6:610:11a:0:0:0:23 listed in]
[dnsbl.ahbl.org]
[2603:10b6:610:11a:0:0:0:23 listed in]
[dnsbl.ahbl.org]
[2603:10b6:610:11a:0:0:0:23 listed in]
[dnsbl.ahbl.org]
[2603:10b6:610:11a:0:0:0:23 listed in]
[dnsbl.ahbl.org]
[2603:10b6:610:11a:cafe:0:0:61 listed in]
[dnsbl.ahbl.org]
[2603:10b6:610:11a:cafe:0:0:61 listed in]
[dnsbl.ahbl.org]
[2603:10b6:610:11a:cafe:0:0:61 listed in]
[dnsbl.ahbl.org]
[2603:10b6:610:11a:cafe:0:0:61 listed in]
[dnsbl.ahbl.org]
[2603:10d6:103:2c6:0:0:0:12 listed in]
[dnsbl.ahbl.org]
[2603:10d6:103:2c6:0:0:0:12 listed in]
[dnsbl.ahbl.org]
[2603:10d6:103:2c6:0:0:0:12 listed in]
[dnsbl.ahbl.org]
[2603:10d6:103:2c6:0:0:0:12 listed in]
[dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.222.180 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.222.180 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.222.180 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.222.180 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[2603:10d6:103:2c6:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10d6:103:2c6:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10d6:103:2c6:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10d6:103:2c6:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10d6:103:2c6:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10d6:103:2c6:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10d6:103:2c6:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10d6:103:2c6:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:0:0:0:23 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:0:0:0:23 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:0:0:0:23 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:0:0:0:23 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:0:0:0:23 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:0:0:0:23 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:0:0:0:23 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:0:0:0:23 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:cafe:0:0:61 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:cafe:0:0:61 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:cafe:0:0:61 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:cafe:0:0:61 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:cafe:0:0:61 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:cafe:0:0:61 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:cafe:0:0:61 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:610:11a:cafe:0:0:61 listed in]
[will-spam-for-food.eu.org]
[45.42.203.119 listed in will-spam-for-food.eu.org]
[45.42.203.119 listed in will-spam-for-food.eu.org]
[45.42.203.119 listed in will-spam-for-food.eu.org]
[45.42.203.119 listed in will-spam-for-food.eu.org]
[45.42.203.119 listed in will-spam-for-food.eu.org]
[45.42.203.119 listed in will-spam-for-food.eu.org]
[45.42.203.119 listed in will-spam-for-food.eu.org]
[45.42.203.119 listed in will-spam-for-food.eu.org]
[40.107.220.106 listed in will-spam-for-food.eu.org]
[40.107.220.106 listed in will-spam-for-food.eu.org]
[40.107.220.106 listed in will-spam-for-food.eu.org]
[40.107.220.106 listed in will-spam-for-food.eu.org]
[40.107.220.106 listed in will-spam-for-food.eu.org]
[40.107.220.106 listed in will-spam-for-food.eu.org]
[40.107.220.106 listed in will-spam-for-food.eu.org]
[40.107.220.106 listed in will-spam-for-food.eu.org]
[209.85.222.180 listed in will-spam-for-food.eu.org]
[209.85.222.180 listed in will-spam-for-food.eu.org]
[209.85.222.180 listed in will-spam-for-food.eu.org]
[209.85.222.180 listed in will-spam-for-food.eu.org]
[209.85.222.180 listed in will-spam-for-food.eu.org]
[209.85.222.180 listed in will-spam-for-food.eu.org]
[209.85.222.180 listed in will-spam-for-food.eu.org]
[209.85.222.180 listed in will-spam-for-food.eu.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[40.107.220.106 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 ARC_SIGNED Message has a ARC signature
0.0 ARC_VALID Message has a valid ARC signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[pettycraft6882839(at)gmail.com]
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.6 MEGALONGWORD BODY: Uses really overlong words
0.3 LONGWORD BODY: Uses overlong words
0.2 PP_MIME_FAKE_ASCII_TEXT BODY: MIME text/plain claims to be ASCII but
isn't
1.0 MR_DIFF_MID No description available.
1.0 IMPRO_URI_2 No description available.
2.0 VOWEL_URI_6 URI hostname with 6 consecutive vowels
1.4 MALFORMED_FREEMAIL Bad headers on message from free email service
1.0 MIXED_CENTER_CASE Has center tag in mixed case
0.3 CTE_8BIT_MISMATCH Header says 7bits but body disagrees
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom
freemail headers are different
1.0 IMPRO_URI_3 No description available.
0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable
1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
Subject: {SPAM?} Tracking Number n#820649
--vip.91050-71262944-40041544895025223111020044018289178
Content-Type: multipart/parallel; boundary="_-------91050-71262944-40041544895025223111020044018289178=_:"
--_-------91050-71262944-40041544895025223111020044018289178=_:
Content-Type: multipart/alternative; boundary="_----------=91050-71262944-40041544895025223111020044018289178"
--_----------=91050-71262944-40041544895025223111020044018289178
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: Hexa
--_----------=91050-71262944-40041544895025223111020044018289178
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: Hexa
ð™”ð™¤ð™ªð™§ ð™¥ð™–ð™˜ð™ ð™–ð™œð™š ð™™ð™šð™„ð™žð™«ð™šð™§ð™® ð™£ð™¤ð™©ð™žð™›ð™žð™˜ð™–ð™©ð™žð™¤ð™£
Web / SEO/ App spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 13 Jul 2024 07:44:03 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1sSd1r-00000000GSC-1yQm
for dave@doctor.nl2k.ab.ca;
Sat, 13 Jul 2024 07:43:11 -0600
Resent-From: The Doctor
Resent-Date: Sat, 13 Jul 2024 07:43:11 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f193.google.com ([209.85.208.193]:45107)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1sSbmc-000000005K6-3E14
for sales@nk.ca;
Sat, 13 Jul 2024 06:23:28 -0600
Received: by mail-lj1-f193.google.com with SMTP id 38308e7fff4ca-2eea8ea8c06so40580441fa.2
for; Sat, 13 Jul 2024 05:21:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=smartstreamingott-com.20230601.gappssmtp.com; s=20230601; t=1720873281; x=1721478081; darn=nk.ca;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=qJIviHL86TZAhwlSPZmYMdn8xrZDfk6quTRadxi7Z8A=;
b=ywyy9PGXgu5PZz0DcuO7Y7+fPGW78/DT7aD0n5amXBS4mni1LAdY3HurhlTXI9Ttas
ihuV5A5x91/e77hwjQU8BNT7H5cQKK31UrwnBosxvNklNfvL32wkoEP6vnh4b7zbiy3E
BE5LqZxYMoUzO4X9hM6vbm4SqAIpL1JyK3jLk2WMY+x7FnkSKSiDIsL9Ui3Sn2LOukfQ
CmAIjX4xOZUjJ0TasJtxBfAydkXQOR+iMi2LBvVKxjtBoogfo+ESpQSPoAA/kbUmAcv2
9aQNTPKhFma4ZEiNnArxNkinF3XMbj7wQqr8DnykFDIShds7PbIIlfcpmWlyGMSwiDMT
a00Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1720873281; x=1721478081;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=qJIviHL86TZAhwlSPZmYMdn8xrZDfk6quTRadxi7Z8A=;
b=W0milb9GA4d8vfG/PZcTN8OOBfGNbwYSfzXD8Xk9iYU7FG/KDAH2eSjJ+x/0a0natN
XHPu50k+XSufiNP/NDlngvTKWYe4wSmmxb5jxKVqS/bNo7qsvlKXqigWSF1n1Ay3tC7M
RZyYsJvghomfnf2LRX3Vls5UzwE7d95M0kMypt3OkNRDm27Xlh7+Pv6ssFVeOEh5S0s6
Y5NUjlxZWyVo3sSQg5VUGrqS42xWXerecny/HWZcxUFxOBup3r+NpNhvpOdEK8ivLY30
a46FJoVS2LgF40pCsPyH+IYZYSc52ljzutA7mSumTD0gJUV9JJ0hdDOtA8Nv2xW4YRTK
Mc9Q==
X-Gm-Message-State: AOJu0YyGuZ0TY2MMFtqQjy1fFjbf61t66gjmltmUYC1/H2NST7s4aWFk
8fqyFfsuguO7kbhJ9+41QOr4h71x+g58V7LIW442S2zIvopkRjXFckpi95L7H1HRZtHPKQqzUoo
KI1jhsHp3OjJH9RTKMdKXwa9Jp6dfSJDsZj8ndUKHS1+dIPztvoI=
X-Google-Smtp-Source: AGHT+IF6PzTWNGj9OGNzkzqu7IIvAVs3xSdkasocU+mhi06iGoB8KUjL5ovQhNC9hUZGFuOBgAVQFqNjTUhX3CXWlSc=
X-Received: by 2002:a2e:7a0e:0:b0:2ee:80f0:c220 with SMTP id
38308e7fff4ca-2eeb3188dffmr84907251fa.40.1720873280952; Sat, 13 Jul 2024
05:21:20 -0700 (PDT)
Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;
Sat, 13 Jul 2024 05:21:20 -0700
Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;
Sat, 13 Jul 2024 05:21:20 -0700
MIME-Version: 1.0
Sender: Sarah Flores
From: Sarah Flores
Date: Sat, 13 Jul 2024 05:21:20 -0700
X-Google-Sender-Auth: w82IN751fJCD5S47msjym7S0omo
Message-ID:
Subject: Re : nk.ca
To: Sales
Content-Type: multipart/alternative; boundary="0000000000009d6c14061d200870"
X-Spam_score: 6.3
X-Spam_score_int: 63
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear nk.ca ; Hope you are doing well. I have visited your
website nk.ca and really appreciate the overall design is good. I found that
your products and services are really awesome and see great potential in
your business. I would like to [...]
Content analysis details: (6.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.208.193 listed in dnsbl.ahbl.org]
[209.85.208.193 listed in dnsbl.ahbl.org]
[209.85.208.193 listed in dnsbl.ahbl.org]
[209.85.208.193 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.208.193 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.208.193 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.208.193 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.208.193 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.193 listed in list.dnswl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.208.193 listed in will-spam-for-food.eu.org]
[209.85.208.193 listed in will-spam-for-food.eu.org]
[209.85.208.193 listed in will-spam-for-food.eu.org]
[209.85.208.193 listed in will-spam-for-food.eu.org]
[209.85.208.193 listed in will-spam-for-food.eu.org]
[209.85.208.193 listed in will-spam-for-food.eu.org]
[209.85.208.193 listed in will-spam-for-food.eu.org]
[209.85.208.193 listed in will-spam-for-food.eu.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.193 listed in wl.mailspike.net]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels
0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)
Subject: {SPAM?} Re : nk.ca
--0000000000009d6c14061d200870
Content-Type: text/plain; charset="UTF-8"
Dear nk.ca ;
Hope you are doing well.
I have visited your website nk.ca and really appreciate the overall design
is good. I found that your products and services are really awesome and see
great potential in your business.
I would like to know if you are interested in redesigning and/or refreshing
your current website which would be more user and search engine friendly
and would be secured from all kinds of hacking and other web activity.
Below are some points I would like to share with you:
- Need to improve page loading speed.
- Your website needs a different type of font family for looking more
attractive
- It needs a better Left Hand Navigation.
- It needs latest Footer which assures better customer engagement
- It also needs improved Contact us & Post requirement system
These are few from the list, by fixing these issues you can definitely
improve your overall online presence.
If this is something you are interested in then allow me to send you the
Proposal.
Best Regards
Sarah Flores
Caution: If you want to receive a detailed plan of action, please feel free
to reply, We will get back to you with details.
[image: beacon]
--0000000000009d6c14061d200870
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
e-height:normal">
lang=3D"EN-US">=C2=A0
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 13 Jul 2024 07:44:03 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1sSd1r-00000000GSC-1yQm
for dave@doctor.nl2k.ab.ca;
Sat, 13 Jul 2024 07:43:11 -0600
Resent-From: The Doctor
Resent-Date: Sat, 13 Jul 2024 07:43:11 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-lj1-f193.google.com ([209.85.208.193]:45107)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1sSbmc-000000005K6-3E14
for sales@nk.ca;
Sat, 13 Jul 2024 06:23:28 -0600
Received: by mail-lj1-f193.google.com with SMTP id 38308e7fff4ca-2eea8ea8c06so40580441fa.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=smartstreamingott-com.20230601.gappssmtp.com; s=20230601; t=1720873281; x=1721478081; darn=nk.ca;
h=to:subject:message-id:date:from:sender:mime-version:from:to:cc
:subject:date:message-id:reply-to;
bh=qJIviHL86TZAhwlSPZmYMdn8xrZDfk6quTRadxi7Z8A=;
b=ywyy9PGXgu5PZz0DcuO7Y7+fPGW78/DT7aD0n5amXBS4mni1LAdY3HurhlTXI9Ttas
ihuV5A5x91/e77hwjQU8BNT7H5cQKK31UrwnBosxvNklNfvL32wkoEP6vnh4b7zbiy3E
BE5LqZxYMoUzO4X9hM6vbm4SqAIpL1JyK3jLk2WMY+x7FnkSKSiDIsL9Ui3Sn2LOukfQ
CmAIjX4xOZUjJ0TasJtxBfAydkXQOR+iMi2LBvVKxjtBoogfo+ESpQSPoAA/kbUmAcv2
9aQNTPKhFma4ZEiNnArxNkinF3XMbj7wQqr8DnykFDIShds7PbIIlfcpmWlyGMSwiDMT
a00Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1720873281; x=1721478081;
h=to:subject:message-id:date:from:sender:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=qJIviHL86TZAhwlSPZmYMdn8xrZDfk6quTRadxi7Z8A=;
b=W0milb9GA4d8vfG/PZcTN8OOBfGNbwYSfzXD8Xk9iYU7FG/KDAH2eSjJ+x/0a0natN
XHPu50k+XSufiNP/NDlngvTKWYe4wSmmxb5jxKVqS/bNo7qsvlKXqigWSF1n1Ay3tC7M
RZyYsJvghomfnf2LRX3Vls5UzwE7d95M0kMypt3OkNRDm27Xlh7+Pv6ssFVeOEh5S0s6
Y5NUjlxZWyVo3sSQg5VUGrqS42xWXerecny/HWZcxUFxOBup3r+NpNhvpOdEK8ivLY30
a46FJoVS2LgF40pCsPyH+IYZYSc52ljzutA7mSumTD0gJUV9JJ0hdDOtA8Nv2xW4YRTK
Mc9Q==
X-Gm-Message-State: AOJu0YyGuZ0TY2MMFtqQjy1fFjbf61t66gjmltmUYC1/H2NST7s4aWFk
8fqyFfsuguO7kbhJ9+41QOr4h71x+g58V7LIW442S2zIvopkRjXFckpi95L7H1HRZtHPKQqzUoo
KI1jhsHp3OjJH9RTKMdKXwa9Jp6dfSJDsZj8ndUKHS1+dIPztvoI=
X-Google-Smtp-Source: AGHT+IF6PzTWNGj9OGNzkzqu7IIvAVs3xSdkasocU+mhi06iGoB8KUjL5ovQhNC9hUZGFuOBgAVQFqNjTUhX3CXWlSc=
X-Received: by 2002:a2e:7a0e:0:b0:2ee:80f0:c220 with SMTP id
38308e7fff4ca-2eeb3188dffmr84907251fa.40.1720873280952; Sat, 13 Jul 2024
05:21:20 -0700 (PDT)
Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;
Sat, 13 Jul 2024 05:21:20 -0700
Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;
Sat, 13 Jul 2024 05:21:20 -0700
MIME-Version: 1.0
Sender: Sarah Flores
From: Sarah Flores
Date: Sat, 13 Jul 2024 05:21:20 -0700
X-Google-Sender-Auth: w82IN751fJCD5S47msjym7S0omo
Message-ID:
Subject: Re : nk.ca
To: Sales
Content-Type: multipart/alternative; boundary="0000000000009d6c14061d200870"
X-Spam_score: 6.3
X-Spam_score_int: 63
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear nk.ca ; Hope you are doing well. I have visited your
website nk.ca and really appreciate the overall design is good. I found that
your products and services are really awesome and see great potential in
your business. I would like to [...]
Content analysis details: (6.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.208.193 listed in dnsbl.ahbl.org]
[209.85.208.193 listed in dnsbl.ahbl.org]
[209.85.208.193 listed in dnsbl.ahbl.org]
[209.85.208.193 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.208.193 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.208.193 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.208.193 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.208.193 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.208.193 listed in list.dnswl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.208.193 listed in will-spam-for-food.eu.org]
[209.85.208.193 listed in will-spam-for-food.eu.org]
[209.85.208.193 listed in will-spam-for-food.eu.org]
[209.85.208.193 listed in will-spam-for-food.eu.org]
[209.85.208.193 listed in will-spam-for-food.eu.org]
[209.85.208.193 listed in will-spam-for-food.eu.org]
[209.85.208.193 listed in will-spam-for-food.eu.org]
[209.85.208.193 listed in will-spam-for-food.eu.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.208.193 listed in wl.mailspike.net]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels
0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)
Subject: {SPAM?} Re : nk.ca
--0000000000009d6c14061d200870
Content-Type: text/plain; charset="UTF-8"
Dear nk.ca ;
Hope you are doing well.
I have visited your website nk.ca and really appreciate the overall design
is good. I found that your products and services are really awesome and see
great potential in your business.
I would like to know if you are interested in redesigning and/or refreshing
your current website which would be more user and search engine friendly
and would be secured from all kinds of hacking and other web activity.
Below are some points I would like to share with you:
- Need to improve page loading speed.
- Your website needs a different type of font family for looking more
attractive
- It needs a better Left Hand Navigation.
- It needs latest Footer which assures better customer engagement
- It also needs improved Contact us & Post requirement system
These are few from the list, by fixing these issues you can definitely
improve your overall online presence.
If this is something you are interested in then allow me to send you the
Proposal.
Best Regards
Sarah Flores
Caution: If you want to receive a detailed plan of action, please feel free
to reply, We will get back to you with details.
[image: beacon]
--0000000000009d6c14061d200870
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
e-height:normal">
lang=3D"EN-US">=C2=A0
margin:0cm 0cm 0.0001pt;background-image:none;background-position:0% 0%;bac=
kground-size:initial;background-repeat:repeat;background-origin:initial;bac=
kground-clip:initial;line-height:normal">
color=3D"#000000">Hope you are doing well.
mal" style=3D"margin:0cm 0cm 0.0001pt;line-height:normal">
oma, sans-serif" color=3D"#000000">=C2=A0
>
:justify;line-height:14.65pt">
00000">I have visited your website=C2=A0
p://nk.ca">nk.ca=C2=A0and=C2=A0really appre=
ciate the overall design is good.=C2=A0I=C2=A0found that your products and =
services are really awesome and see great potential in your business.
>
t-align:justify;line-height:normal">
=3D"#000000">I would like to know if you are intereste=
d in redesigning and/or refreshing your current website which would be more=
user and search engine friendly and would be secured from all kinds of hac=
king and other web activity.
yle=3D"margin:0cm 0cm 0.0001pt;text-align:justify;line-height:normal">
lang=3D"EN-US">
ont>
line-height:normal">
color=3D"#000000">Below are some points I would like to share with you:
nt>
ine-height:normal">
=
top:0cm;margin-bottom:0cm">
0.0001pt;line-height:normal">
0000">Need to improve page loading speed.
>
normal">
N-US">Your website needs a different type of font family for looking more a=
ttractive
0.0001pt;line-height:normal">
00000">It needs a better Left Hand Navigation.<=
/font>
ight:normal">
=3D"EN-US">It needs latest Footer which assures better customer engagement<=
/span>
line-height:normal">
an lang=3D"EN-US">It also needs improved Contact us & Post requirement =
system
0cm 0.0001pt;line-height:normal">
sans-serif" color=3D"#000000">
mal" style=3D"margin:0cm 0cm 0.0001pt;line-height:normal">
oma, sans-serif" color=3D"#000000">These are few from =
the list, by fixing these issues you can definitely improve your overall on=
line presence.
0cm 0cm 0.0001pt;line-height:normal">
oma, sans-serif" color=3D"#000000">
oNormal" style=3D"margin:0cm 0cm 0.0001pt;line-height:normal">
"EN-US">If this is some=
thing you are interested in then allow me to send you the Proposal.
nt>
ine-height:normal">
n lang=3D"EN-US">
margin:0cm 0cm 0.0001pt;background-image:none;background-position:0% 0%;bac=
kground-size:initial;background-repeat:repeat;background-origin:initial;bac=
kground-clip:initial;line-height:normal">
color=3D"#000000">Best Regards
>
kground-image:none;background-position:0% 0%;background-size:initial;backgr=
ound-repeat:repeat;background-origin:initial;background-clip:initial;text-a=
lign:justify;line-height:normal">
"#000000">Sarah Flores
:0cm 0cm 0.0001pt;background-image:none;background-position:0% 0%;backgroun=
d-size:initial;background-repeat:repeat;background-origin:initial;backgroun=
d-clip:initial;text-align:justify;line-height:normal">
sans-serif" color=3D"#000000">
sans-serif" color=3D"#000000">Caution:=C2=A0If you want to receive a detail=
ed plan of action, please feel free to reply, We will get back to you with =
details.
z4IsPETZAA9dE92AIjtB9o_AwmMX6agBw23YQqskAEfQM13-gECZCL2gSrKYdwE9fG5GkIFo0Gk=
-T5726LJcONJNk-xmxDibvNa6m4ZyFMox1OHZzRToK9dFnFKgq-MoptVzKlVH_7fAnd_tlwYMo2=
xWQYGov4XmL5y" width=3D"1" height=3D"1" alt=3D"beacon" style=3D"display:non=
e; display:none!important;">
--0000000000009d6c14061d200870--