Canadian Tire Phish from Amazon

Posted by Dave Yadallee on
Return-path: <01000190bc4f16b8-9861f7ca-30e0-4c8a-9e6c-a192e7d0f024-000000@amazonses.com>

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 16 Jul 2024 10:13:00 -0600

Received: from a8-45.smtp-out.amazonses.com ([54.240.8.45]:45839)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from <01000190bc4f16b8-9861f7ca-30e0-4c8a-9e6c-a192e7d0f024-000000@amazonses.com>)

id 1sTkmo-000000008sC-2vVA

for dave@doctor.nl2k.ab.ca;

Tue, 16 Jul 2024 10:12:23 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=vomaq5uml6gke7n6sfie4bmet7ihxlil; d=keyaerp.com; t=1721146218;

h=From:To:Subject:Date:List-Unsubscribe:List-Unsubscribe-Post:MIME-Version:Reply-To:Message-ID:Content-Type;

bh=RxR9XWX+tqfdUEAC5h8S3xHb+j4VqZ/9ayf11FDz5QA=;

b=X3bAQf7o5OnzmPXRL+33sdogt9bm5akuOGgd+TeMGH08FF0yqYegp7loLD4gXE5f

Y/luQnr4jEFkuc2MOiGFyHX2y+KZDAEc9r+1T9ls0mKKlFx16gWw2YkcAaH2wlkCvUP

bOeeTVSXivuUSjcTQkWQEA6EnVovB12fuyRbPiVolxsd1cDX3Qbea8a5tOaVE6J6bPm

mzyqHpqK3ZV4hxhA2GNyMTYdTvGePJXMHnbl2O6pjPg8SUQAxn4ivLtWze3lphjGVKl

W83tPborIUwjqvLSZSujgkG84JJZUdS5Zcv1/Dv1461HwT9GIHLh+xL+l/NtmOPoZgl

zawKkA0d9g==

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=ug7nbtf4gccmlpwj322ax3p6ow6yfsug; d=amazonses.com; t=1721146218;

h=From:To:Subject:Date:List-Unsubscribe:List-Unsubscribe-Post:MIME-Version:Reply-To:Message-ID:Content-Type:Feedback-ID;

bh=RxR9XWX+tqfdUEAC5h8S3xHb+j4VqZ/9ayf11FDz5QA=;

b=BGjEblDwCUbUfSbZcscGxG/aFzlPeq4jdROPaxnVWURwzbzyfSykSyjr5y6cv8Yw

Rhwe4pF7edTKf+6sq6Y6qkKdbB0D01P369CBzerNe5PESyMNEByQPP6Ou/6wgwPGyFX

ctbSsJwRS0T+wgFIiEjaNfLRcyQWO+30CDyriJaU=

From: Canadian Tire Department

To: dave@doctor.nl2k.ab.ca

Subject:Get a 36 Piece Tupperware Modular Set for Your Valuable Input

Date: Tue, 16 Jul 2024 16:10:18 +0000

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

MIME-Version: 1.0

Reply-To: dave@doctor.nl2k.ab.ca

Message-ID: <01000190bc4f16b8-9861f7ca-30e0-4c8a-9e6c-a192e7d0f024-000000@email.amazonses.com>

Content-Type: multipart/alternative;boundary="sIjwYvlwSIqs=_?:"

Feedback-ID: ::1.us-east-1.Prg3Mj61TBe84zBv0K1YNtYjb6jgf22E4iFlKWFCVrI=:AmazonSES

X-SES-Outgoing: 2024.07.16-54.240.8.45

X-Spam_score: 17.1

X-Spam_score_int: 171

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: https://click.info.healthyplanetcanada.com/?qs=b688eb7ae116cf89fe17ed23fb76a385e7d5e136b1cebe3919cd51e9d4f4d1953926ddd5ee54a629f5282c02056b0ad16e0316c2d6dadc006579cd75a20ba2e6

We have expanded to over 33 Stores & Growing!



Content analysis details: (17.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[54.240.8.45 listed in dnsbl.ahbl.org]

[54.240.8.45 listed in dnsbl.ahbl.org]

[54.240.8.45 listed in dnsbl.ahbl.org]

[54.240.8.45 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[54.240.8.45 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[54.240.8.45 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[54.240.8.45 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[54.240.8.45 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.240.8.45 listed in will-spam-for-food.eu.org]

[54.240.8.45 listed in will-spam-for-food.eu.org]

[54.240.8.45 listed in will-spam-for-food.eu.org]

[54.240.8.45 listed in will-spam-for-food.eu.org]

[54.240.8.45 listed in will-spam-for-food.eu.org]

[54.240.8.45 listed in will-spam-for-food.eu.org]

[54.240.8.45 listed in will-spam-for-food.eu.org]

[54.240.8.45 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[54.240.8.45 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H4 RBL: Very Good reputation (+4)

[54.240.8.45 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.6 MEGALONGWORD BODY: Uses really overlong words

0.3 LONGWORD BODY: Uses overlong words

1.5 MR_STRANGE_QUESTION URI: No description available.

0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags

0.0 HTML_MESSAGE BODY: HTML included in message

1.5 MPART_ALT_DIFF_COUNT BODY: HTML and text parts are different

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.4 HDRS_MISSP Misspaced headers

Subject: {SPAM?} Get a 36 Piece Tupperware Modular Set for Your Valuable Input







--sIjwYvlwSIqs=_?:

Content-Type: text/plain;charset="utf-8"

Content-Transfer-Encoding: 8bit



https://click.info.healthyplanetcanada.com/?qs=b688eb7ae116cf89fe17ed23fb76a385e7d5e136b1cebe3919cd51e9d4f4d1953926ddd5ee54a629f5282c02056b0ad16e0316c2d6dadc006579cd75a20ba2e6







We have expanded to over 33 Stores & Growing!





https://click.info.healthyplanetcanada.com/?qs=b688eb7ae116cf8900c0d0eda3e7caee1d40202479767834b94696eb7dcc2c5c64e7dbd80c66e1355920eadc9bda048b991203cdbb9a13d304bfd780319dc1be





https://click.info.healthyplanetcanada.com/?qs=b688eb7ae116cf898c044e994f6d156b3b039f0a20bf504ea1c436b8bbb26df03f51261a2f55d6234b6cba68e9a2f43debefb14a405855c29876653b8b0a494d



https://click.info.healthyplanetcanada.com/?qs=b688eb7ae116cf898c044e994f6d156b3b039f0a20bf504ea1c436b8bbb26df03f51261a2f55d6234b6cba68e9a2f43debefb14a405855c29876653b8b0a494d

Instagram



https://click.info.healthyplanetcanada.com/?qs=b688eb7ae116cf89582bb908d874543302d85118d8de65bf36e11dde39d8bfe26c14bee57feb508021997c5a4287b997fd7576f4d83d6745f977882932ffb816



https://click.info.healthyplanetcanada.com/?qs=b688eb7ae116cf89582bb908d874543302d85118d8de65bf36e11dde39d8bfe26c14bee57feb508021997c5a4287b997fd7576f4d83d6745f977882932ffb816

Facebook



https://click.info.healthyplanetcanada.com/?qs=b688eb7ae116cf89e2d407103e9d16d1e0722716fbfe5f3986b9436cd4787dcb5998572205ecf5cbb395e9d84bd088053b23563e3ce6f658b932b66d26d0aca6



https://click.info.healthyplanetcanada.com/?qs=b688eb7ae116cf89e2d407103e9d16d1e0722716fbfe5f3986b9436cd4787dcb5998572205ecf5cbb395e9d84bd088053b23563e3ce6f658b932b66d26d0aca6

YouTube











https://click.info.healthyplanetcanada.com/profile_center.aspx?qs=d67ccbef002045e37e37e7190fab60d0e4d84c2e0ef7343cafeb7e15d628e3d37cfebf87dfff289c4ec836bee2b9df73d7d79e2f94ee5c2866ef90f93175fb172bded1fa2eac99bb

Update email preferences |

https://click.info.healthyplanetcanada.com/unsub_center.aspx?qs=d67ccbef002045e336729c7cb760af57c0ecb3a8c143f8bafd8390f4b5a0bc640e6119928ba70b0e43955916ae6471e93214750b5d2c2665597560478aed5a3b581c7d6a8637152d

Unsubscribe |

https://view.info.healthyplanetcanada.com/ftaf.aspx?qs=71c48b54128b6de15591afbd30eaf0034f5a71a4734f535a1a0cdbc71f4eadd6fb3ee1237147b68675dee0dcd8930664fd87c704a147622c

Forward this email |

https://click.info.healthyplanetcanada.com/?qs=b688eb7ae116cf89b1bd3fb89836f8ebb070b66f459d189c775bd7ef0ed028476884aba9f515315d455df79b24f36bb5f23cdb431396471c4ef394440fe20780

Store locations



















47 Railside Road Toronto, Ontario, M3A 1B2, Canada



tel:1-888-974-4722

1-888-974-4722 |

tel:1-416-640-5713

(416) 640-5713



https://click.info.healthyplanetcanada.com/?qs=b688eb7ae116cf892fbc8019520c244e225f9c83b066065ebb7b6650cd649173de4eaa69860e09089f289e6b0050b24e8ebca9bd6ff92e09dc94ecbf2c1781c3

Customer service |

https://click.info.healthyplanetcanada.com/?qs=b688eb7ae116cf89fb699f0377579ae8cbd95b4b4f19bf832d87c9825061bfd70c5d7ff14e837100cf80f7ff5f4348197ba28d33fea212b1d596ced1dc529296

Privacy policy



(c) Copyright 2024 Healthy Planet





--sIjwYvlwSIqs=_?:

Content-Type: text/html;charset="utf-8"

Content-Transfer-Encoding: 8bit

























Tick Tock ⏱️ Time Is Running Out






Participate & Win: Survey for a 36 Piece Tupperware Modular Set











































































































































































--sIjwYvlwSIqs=_?:--

Web / SEO/ App spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 16 Jul 2024 09:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sTjro-00000000Grf-2nCD

for dave@doctor.nl2k.ab.ca;

Tue, 16 Jul 2024 09:13:24 -0600

Resent-From: The Doctor

Resent-Date: Tue, 16 Jul 2024 09:13:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f175.google.com ([209.85.210.175]:53476)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sTjpJ-00000000GCk-3UN3

for sales@nk.ca;

Tue, 16 Jul 2024 09:10:54 -0600

Received: by mail-pf1-f175.google.com with SMTP id d2e1a72fcca58-70b0ebd1ef9so3694730b3a.2

for ; Tue, 16 Jul 2024 08:08:55 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dmatexas-com.20230601.gappssmtp.com; s=20230601; t=1721142529; x=1721747329; darn=nk.ca;

h=message-id:content-transfer-encoding:mime-version:subject:date

:reply-to:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=1HTj0bvmYjOTbyqBQr5Bhcnew7kgBtWdZ8EVlodrrqY=;

b=QfokIvsuedGEVnGW0YuhQGGeg4KyrvZi42hx3YXAr0+tooqctMHv27u1FmyWN3w0ew

U9OHdElZ8BiKLDUJoOiPr86pUWjYkBH4LKAt8tFwjxaLI7WLvFn1xy4lv8NV+RmUoCTm

MvlskTruJR/Tgo89im/iwNOCsV0R9lWXCjZrFndKeTett7c+DvstFKt0e/3FfFXqNEe9

6uIc4UV25T6h/S36b7rvBZl4gOMOu2Ic8gc5Bum2/HY19wzFnOkrVl7+HrFG7YOINYJ/

nQL1kPpTx68UAQECO1iMQdaMv3tS5/61rhVucmCmYdpmSM45zzfWTeOmOuMXP8w0y321

G8/A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1721142529; x=1721747329;

h=message-id:content-transfer-encoding:mime-version:subject:date

:reply-to:to:from:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=1HTj0bvmYjOTbyqBQr5Bhcnew7kgBtWdZ8EVlodrrqY=;

b=OznSzChrdV48PGmKtPGF2Ve8bGV/RkidApZYlUmxr6QGiyLupBVUDDFzu26ZIsM3RO

ctFuzhuWRvhT4SqIz9GrjuSNSuMWwn1l4Z/b5gll6cJCZtPYhyR9Zd+Fj0HVeyAvGEDv

Dc+/5fyV/bG3u8UaSzJ2+4AbjJE3H9IxVyJbJKNTGHOS9lUe//fkLrcdH56r12pJEuMf

GPK5Rge+lyp2HhLzr4egZx54u/VgeI5zKZsw4MMirwfkmdVehWrTPnlOfz00VFKKIXTY

kKBFuHC2/HVFYcZrF1McCe8gaGeC7DwM5EIC5e368A0TcNWag+zNTDOtxyTiLZDFVSrN

BiTg==

X-Gm-Message-State: AOJu0YwVwNLKmJMDxzZVjZjnlPNwtBilb7fV6/pJwiBuqJ7bsPkwIzSF

S/xc2hvq2naDLwI+CoigrazDWOoBATNA/SDGQmMFrDVMGErOwumf0vtUwIk6/InnvaHzQ4bjmPO

S

X-Google-Smtp-Source: AGHT+IHiscTu1fynex/3vNaulBZnzFJ2isAR6UsP7aJzLDES50P+gXwxnITTeFEgswH/L7pUdkkXVg==

X-Received: by 2002:a05:6a00:1950:b0:705:9b04:71b with SMTP id d2e1a72fcca58-70c2ea27abfmr2687927b3a.31.1721142529170;

Tue, 16 Jul 2024 08:08:49 -0700 (PDT)

Received: from DESKTOP7PBVQ45 ([103.171.4.40])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-70b7ebb6adesm6400513b3a.73.2024.07.16.08.08.47

for

(version=TLS1 cipher=ECDHE-ECDSA-AES128-SHA bits=128/128);

Tue, 16 Jul 2024 08:08:48 -0700 (PDT)

From: Tom Marcus

X-Google-Original-From: "Tom Marcus"

To: "sales@nk.ca"

Reply-To: tom@bluemez.com

Date: Tue, 16 Jul 2024 20:38:35 +0530

Subject: Re:nk.ca domain errors

MIME-Version: 1.0

Content-Type: text/plain; charset=iso-8859-1

Content-Transfer-Encoding: quoted-printable

Message-ID:

X-Spam_score: 8.9

X-Spam_score_int: 89

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Team of nk.ca, I hope this message finds you well. I'm

not sure whether you knew that your website nk.ca has some problems that

you might need to consider investigating. I am writing to bring to your attention

several design and performance issues tha [...]



Content analysis details: (8.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.175 listed in dnsbl.ahbl.org]

[209.85.210.175 listed in dnsbl.ahbl.org]

[209.85.210.175 listed in dnsbl.ahbl.org]

[209.85.210.175 listed in dnsbl.ahbl.org]

[103.171.4.40 listed in dnsbl.ahbl.org]

[103.171.4.40 listed in dnsbl.ahbl.org]

[103.171.4.40 listed in dnsbl.ahbl.org]

[103.171.4.40 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.175 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.175 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.175 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.175 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.171.4.40 listed in sbl-xbl.spamhaus.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.171.4.40 listed in will-spam-for-food.eu.org]

[103.171.4.40 listed in will-spam-for-food.eu.org]

[103.171.4.40 listed in will-spam-for-food.eu.org]

[103.171.4.40 listed in will-spam-for-food.eu.org]

[103.171.4.40 listed in will-spam-for-food.eu.org]

[103.171.4.40 listed in will-spam-for-food.eu.org]

[103.171.4.40 listed in will-spam-for-food.eu.org]

[103.171.4.40 listed in will-spam-for-food.eu.org]

[209.85.210.175 listed in will-spam-for-food.eu.org]

[209.85.210.175 listed in will-spam-for-food.eu.org]

[209.85.210.175 listed in will-spam-for-food.eu.org]

[209.85.210.175 listed in will-spam-for-food.eu.org]

[209.85.210.175 listed in will-spam-for-food.eu.org]

[209.85.210.175 listed in will-spam-for-food.eu.org]

[209.85.210.175 listed in will-spam-for-food.eu.org]

[209.85.210.175 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.175 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.210.175 listed in wl.mailspike.net]

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.1 TW_NM BODY: Odd Letter Triples with NM

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} Re:nk.ca domain errors



Dear Team of nk=2Eca,=0D=0AI hope this message finds you well=2E=0D=0A=0D=

=0AI=27m not sure whether you knew that your website nk=2Eca has some pro=

blems that you might need to consider investigating=2E I am writing to b=

ring to your attention several design and performance issues that I have =

identified on your website=2E I have previously tried to contact using th=

e contact form but could not reach you so I am wrtting here to inform abo=

ut it=2E=0D=0A =0D=0AHere are the key issues observed durinmg my visit to=

your site:=0D=0A=0D=0A- The loading speed of the site is less ( Slow loa=

ding speed can lead to high bounce rates )=2E You can check the same usin=

g Google Analytics for the same=2E You can use any online tool to get spe=

cific recommendations for improving load times=2E=0D=0A- It=27s not fully=

optimized for all type of mobile screens ( Affecting user experience )=2E=

Several elements of your website do not display correctly on mobile devi=

ces=2E This includes overlapping text, images not scaling properly, and n=

avigation menus that are difficult to use=2E=0D=0A- Cross-browser compati=

bility issues found=2E It doesn=27t adjust properly when you resize the p=

age on different browsers (Affecting user experience)=2E=0D=0A- Non-funct=

ional contact form as the server rejects SMTP connections sometime=2E( Yo=

u might be losing a potential client/visitor on your site as the submissi=

on fails midway=2E)=0D=0A- There are multiple broken links throughout you=

r website, which can lead to a poor user experience and negatively impact=

SEO=2E=0D=0A- The design also needs to be improved to put the site ahead=

of your competitors=2E=0D=0A=0D=0AAn incredible site can be a great sour=

ce of business development=2E A poor site can cause harm to your brand=27=

s reputation=2E=0D=0A=0D=0AI actually do web design for living, so I figu=

red to reach out and let you know that there is serious room for dead eas=

y and affordable improvement=2E I can help you with a complete revamp of =

the current site as well as fixing the specific errors which are affectin=

g the performance of the site=2E=0D=0A=0D=0AIs that something you=27d be =

interested in? Reply =22PROPOSAL=22 to get the detailed plan/proposal to =

fix the above mentioned issues=2E=0D=0A=0D=0ALookig forward to your reply=

=21=0D=0A=0D=0ABest regards,=0D=0A=0D=0ATom Marcus=0D=0ABusiness Developm=

ent Manager=0D=0APhone: +1(408) 600-2830=0D=0ASkype: business=40bluemez=2E=

com=0D=0ABluemez Inc=2E =7C www=2Ebluemez=2Ecom=0D=0A--------------------=

----------------------------------------=0D=0AP=2ES-1: If you want to rec=

eive detailed proposal, please feel free to reply =22YES=22 or =22PROPOSA=

L=22, we will get back to you with details=2E=0D=0A=0D=0AP=2ES-2: If you =

find this email unsolicited, please reply with =22REMOVE=22 in the subjec=

t line and we will take care that you don=27t receive any further promoti=

onal mail=2E You can also unsubscribe your email using the the below link=

:=0D=0A=0D=0AUnsubscribe here: https://bluemez=2Ecom/un/

CRA phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: aboo@doctor.nl2k.ab.ca

Delivery-date: Mon, 15 Jul 2024 13:35:00 -0600

Received: from [96.9.226.16] (port=55876 helo=gki.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sTRSP-00000000KNX-2TjM

for aboo@doctor.nl2k.ab.ca;

Mon, 15 Jul 2024 13:34:01 -0600

Reply-To: Canada Revenue Agency - Agence du revenu du Canada

From: Canada Revenue Agency - Agence du revenu du Canada

To: aboo@doctor.nl2k.ab.ca

Subject: INTERAC e-Transfer: Your refund is available.

Date: 15 Jul 2024 21:31:57 +0200

Message-ID: <20240715213156.4DB244A8D9066291@gki.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 10.1

X-Spam_score_int: 101

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: English version ** La version française suit ** Dear:



Content analysis details: (10.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[96.9.226.16 listed in dnsbl.ahbl.org]

[96.9.226.16 listed in dnsbl.ahbl.org]

[96.9.226.16 listed in dnsbl.ahbl.org]

[96.9.226.16 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[96.9.226.16 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[96.9.226.16 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[96.9.226.16 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[96.9.226.16 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[96.9.226.16 listed in will-spam-for-food.eu.org]

[96.9.226.16 listed in will-spam-for-food.eu.org]

[96.9.226.16 listed in will-spam-for-food.eu.org]

[96.9.226.16 listed in will-spam-for-food.eu.org]

[96.9.226.16 listed in will-spam-for-food.eu.org]

[96.9.226.16 listed in will-spam-for-food.eu.org]

[96.9.226.16 listed in will-spam-for-food.eu.org]

[96.9.226.16 listed in will-spam-for-food.eu.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: r1-dp00.com]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} INTERAC e-Transfer: Your refund is available.

X-Antivirus: AVG (VPS 240715-6, 7/15/2024), Inbound message

X-Antivirus-Status: Clean




ft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:office">
name=3D"__cloudhq_email_draft_json" content=3D"eyJjb3VudGVycyI6eyJ1X3JvdyI=

6NywidV9jb2x1bW4iOjgsInVfY29udGVudF90ZXh0IjoxOSwidV9jb250ZW50X2ltYWdlIjozLC=

J1X2NvbnRlbnRfYnV0dG9uIjoyLCJ1X2NvbnRlbnRfc29jaWFsIjoxLCJ1X2NvbnRlbnRfdmlkZ=

W8iOjF9LCJib2R5Ijp7ImlkIjoiQWkzSTVGQjFRWCIsInJvd3MiOlt7ImlkIjoiOHk0eUx0bDUy=

ayIsImNlbGxzIjpbMV0sImNvbHVtbnMiOlt7ImlkIjoiTC1CWDV1UUhwWSIsImNvbnRlbnRzIjp=

beyJpZCI6Ikd2SVlCTjExNmwiLCJ0eXBlIjoidGV4dCIsInZhbHVlcyI6eyJjb250YWluZXJQYW=

RkaW5nIjoiMTBweCAxMHB4IDVweCIsImFuY2hvciI6IiIsImZvbnRTaXplIjoiMThweCIsImNvb=

G9yIjoiIzAwMDBlZSIsInRleHRBbGlnbiI6ImNlbnRlciIsImxpbmVIZWlnaHQiOiIxNDAlIiwi=

bGlua1N0eWxlIjp7ImluaGVyaXQiOnRydWUsImxpbmtDb2xvciI6IiMwMDAwZWUiLCJsaW5rSG9=

2ZXJDb2xvciI6IiMwMDAwZWUiLCJsaW5rVW5kZXJsaW5lIjp0cnVlLCJsaW5rSG92ZXJVbmRlcm=

xpbmUiOnRydWV9LCJoaWRlRGVza3RvcCI6ZmFsc2UsImRpc3BsYXlDb25kaXRpb24iOm51bGwsI=

l9tZXRhIjp7Imh0bWxJRCI6InVfY29udGVudF90ZXh0XzEwIiwiaHRtbENsYXNzTmFtZXMiOiJ1=

X2NvbnRlbnRfdGV4dCJ9LCJzZWxlY3RhYmxlIjp0cnVlLCJkcmFnZ2FibGUiOnRydWUsImR1cGx=

pY2F0YWJsZSI6dHJ1ZSwiZGVsZXRhYmxlIjp0cnVlLCJoaWRlYWJsZSI6dHJ1ZSwidGV4dCI6Ij=

xwIHN0eWxlPVwibGluZS1oZWlnaHQ6IDE0MCU7IHRleHQtYWxpZ246IGNlbnRlcjtcIj48c3Ryb=

25nPkVuZ2xpc2ggdmVyc2lvbiAqKiogTGEgdmVyc2lvbiBmcmFuw6dhaXNlIHN1aXQgKioqPC9z=

dHJvbmc+PC9wPiIsIl9vdmVycmlkZSI6eyJtb2JpbGUiOnsiZm9udFNpemUiOiIxNXB4IiwidGV=

4dEFsaWduIjoiY2VudGVyIn19fX0seyJpZCI6IllBN21MMWlVZ1giLCJ0eXBlIjoidGV4dCIsIn=

ZhbHVlcyI6eyJjb250YWluZXJQYWRkaW5nIjoiN3B4IDEycHggMTJweCIsImFuY2hvciI6IiIsI=

mZvbnRTaXplIjoiMTRweCIsInRleHRBbGlnbiI6ImxlZnQiLCJsaW5lSGVpZ2h0IjoiMTQwJSIs=

ImxpbmtTdHlsZSI6eyJpbmhlcml0Ijp0cnVlLCJsaW5rQ29sb3IiOiIjMDAwMGVlIiwibGlua0h=

vdmVyQ29sb3IiOiIjMDAwMGVlIiwibGlua1VuZGVybGluZSI6dHJ1ZSwibGlua0hvdmVyVW5kZX=

JsaW5lIjp0cnVlfSwiaGlkZURlc2t0b3AiOmZhbHNlLCJkaXNwbGF5Q29uZGl0aW9uIjpudWxsL=

CJfbWV0YSI6eyJodG1sSUQiOiJ1X2NvbnRlbnRfdGV4dF8xNiIsImh0bWxDbGFzc05hbWVzIjoi=

dV9jb250ZW50X3RleHQifSwic2VsZWN0YWJsZSI6dHJ1ZSwiZHJhZ2dhYmxlIjp0cnVlLCJkdXB=

saWNhdGFibGUiOnRydWUsImRlbGV0YWJsZSI6dHJ1ZSwiaGlkZWFibGUiOnRydWUsInRleHQiOi=

I8cCBzdHlsZT1cImxpbmUtaGVpZ2h0OiAxNDAlO1wiPkRlYXI6PC9wPlxuPHAgc3R5bGU9XCJsa=

W5lLWhlaWdodDogMTQwJTtcIj7CoDwvcD5cbjxwIHN0eWxlPVwibGluZS1oZWlnaHQ6IDE0MCU7=

XCI+WW91ciA8c3Ryb25nPjIwMjM8L3N0cm9uZz4gcmV0dXJuIHdhcyByZWFzc2Vzc2VkIGFuZCB=

hbiBhZGRpdGlvbmFsPHN0cm9uZz4gcmVmdW5kIG9mICQxLDAxMi4wMDwvc3Ryb25nPiB3YXMgYX=

Bwcm92ZWQsIHRvIGRlcG9zaXQgcGxlYXNlIHByb2NlZWQgdG8gPGEgcmVsPVwibm9vcGVuZXJcI=

iBocmVmPVwiaHR0cHM6Ly9nb29nbGUuY29tXCIgdGFyZ2V0PVwiX2JsYW5rXCIgZGF0YS11LWxp=

bmstdmFsdWU9XCJleUp1WVcxbElqb2lkMlZpSWl3aVlYUjBjbk1pT25zaWFISmxaaUk2SW50N2F=

ISmxabjE5SWl3aWRHRnlaMlYwSWpvaWUzdDBZWEpuWlhSOWZTSjlMQ0oyWVd4MVpYTWlPbnNpYU=

hKbFppSTZJbWgwZEhCek9pOHZaMjl2WjJ4bExtTnZiU0lzSW5SaGNtZGxkQ0k2SWw5aWJHRnVhe=

Uo5ZlE9PVwiPk15IEFjY291bnQ8L2E+LjwvcD5cbjxwIHN0eWxlPVwibGluZS1oZWlnaHQ6IDE0=

MCU7XCI+wqA8L3A+XG48cCBzdHlsZT1cImxpbmUtaGVpZ2h0OiAxNDAlO1wiPklmIHlvdSBkbyB=

ub3QgaGF2ZSBNeSBBY2NvdW50LCBnbyB0byB0aGUgQ1JBIHdlYiBwYWdlIHRvIHJlZ2lzdGVyLs=

KgPC9wPlxuPHAgc3R5bGU9XCJsaW5lLWhlaWdodDogMTQwJTtcIj7CoDwvcD5cbjxwIHN0eWxlP=

VwibGluZS1oZWlnaHQ6IDE0MCU7XCI+VGhpcyBpcyBhbiBhdXRvbWF0ZWQgZW1haWwgbWVzc2Fn=

ZS4gUGxlYXNlIGRvIG5vdCByZXBseS48L3A+IiwiX292ZXJyaWRlIjp7Im1vYmlsZSI6eyJmb25=

0U2l6ZSI6IjE0cHgiLCJsaW5lSGVpZ2h0IjoiMTUwJSIsImNvbnRhaW5lclBhZGRpbmciOiI3cH=

ggMTNweCAxMnB4In19fX0seyJpZCI6IjFGRWdOWVk2dWoiLCJ0eXBlIjoidGV4dCIsInZhbHVlc=

yI6eyJjb250YWluZXJQYWRkaW5nIjoiN3B4IDEwcHggNXB4IiwiYW5jaG9yIjoiIiwiZm9udFNp=

emUiOiIxOHB4IiwiY29sb3IiOiIjMDAwMGVlIiwidGV4dEFsaWduIjoiY2VudGVyIiwibGluZUh=

laWdodCI6IjE0MCUiLCJsaW5rU3R5bGUiOnsiaW5oZXJpdCI6dHJ1ZSwibGlua0NvbG9yIjoiIz=

AwMDBlZSIsImxpbmtIb3ZlckNvbG9yIjoiIzAwMDBlZSIsImxpbmtVbmRlcmxpbmUiOnRydWUsI=

mxpbmtIb3ZlclVuZGVybGluZSI6dHJ1ZX0sImhpZGVEZXNrdG9wIjpmYWxzZSwiZGlzcGxheUNv=

bmRpdGlvbiI6bnVsbCwiX21ldGEiOnsiaHRtbElEIjoidV9jb250ZW50X3RleHRfMTgiLCJodG1=

sQ2xhc3NOYW1lcyI6InVfY29udGVudF90ZXh0In0sInNlbGVjdGFibGUiOnRydWUsImRyYWdnYW=

JsZSI6dHJ1ZSwiZHVwbGljYXRhYmxlIjp0cnVlLCJkZWxldGFibGUiOnRydWUsImhpZGVhYmxlI=

jp0cnVlLCJ0ZXh0IjoiPHAgc3R5bGU9XCJsaW5lLWhlaWdodDogMTQwJTsgdGV4dC1hbGlnbjog=

Y2VudGVyO1wiPjxzdHJvbmc+VmVyc2lvbiBmcmFuw6dhaXNlICoqKiBUaGUgRW5nbGlzaCB2ZXJ=

zaW9uIHByZWNlZGVzICoqKjwvc3Ryb25nPjwvcD4iLCJfb3ZlcnJpZGUiOnsibW9iaWxlIjp7In=

RleHRBbGlnbiI6ImNlbnRlciIsImZvbnRTaXplIjoiMTVweCJ9fX19LHsiaWQiOiJrS2hfQVNHY=

mRXIiwidHlwZSI6InRleHQiLCJ2YWx1ZXMiOnsiY29udGFpbmVyUGFkZGluZyI6IjdweCAxMnB4=

IDEycHgiLCJhbmNob3IiOiIiLCJmb250U2l6ZSI6IjE0cHgiLCJ0ZXh0QWxpZ24iOiJsZWZ0Iiw=

ibGluZUhlaWdodCI6IjE0MCUiLCJsaW5rU3R5bGUiOnsiaW5oZXJpdCI6dHJ1ZSwibGlua0NvbG=

9yIjoiIzAwMDBlZSIsImxpbmtIb3ZlckNvbG9yIjoiIzAwMDBlZSIsImxpbmtVbmRlcmxpbmUiO=

nRydWUsImxpbmtIb3ZlclVuZGVybGluZSI6dHJ1ZX0sImhpZGVEZXNrdG9wIjpmYWxzZSwiZGlz=

cGxheUNvbmRpdGlvbiI6bnVsbCwiX21ldGEiOnsiaHRtbElEIjoidV9jb250ZW50X3RleHRfMTc=

iLCJodG1sQ2xhc3NOYW1lcyI6InVfY29udGVudF90ZXh0In0sInNlbGVjdGFibGUiOnRydWUsIm=

RyYWdnYWJsZSI6dHJ1ZSwiZHVwbGljYXRhYmxlIjp0cnVlLCJkZWxldGFibGUiOnRydWUsImhpZ=

GVhYmxlIjp0cnVlLCJ0ZXh0IjoiPHAgc3R5bGU9XCJsaW5lLWhlaWdodDogMTQwJTtcIj5DaGVy=

L0Now6hyZTo8L3A+XG48cCBzdHlsZT1cImxpbmUtaGVpZ2h0OiAxNDAlO1wiPsKgPC9wPlxuPHA=

gc3R5bGU9XCJsaW5lLWhlaWdodDogMTQwJTtcIj5Wb3RyZSBkw6ljbGFyYXRpb24gZGUgPHN0cm=

9uZz4yMDIzPC9zdHJvbmc+IGEgZmFpdCBs4oCZb2JqZXQgZOKAmXVuZSBub3V2ZWxsZSBjb3Rpc=

2F0aW9uIGV0IHVuIHJlbWJvdXJzZW1lbnQgc3VwcGzDqW1lbnRhaXJlwqA8c3Ryb25nPmRlICQx=

LDAxMi4wMDwvc3Ryb25nPiBhIMOpdMOpIGFwcHJvdXbDqSwgcG91ciBlZmZlY3R1ZXIgdW4gZMO=

pcMO0dCwgdmV1aWxsZXogdm91cyByZW5kcmUgw6AgPGEgcmVsPVwibm9vcGVuZXJcIiBocmVmPV=

wiaHR0cHM6Ly9nb29nbGUuY29tXCIgdGFyZ2V0PVwiX2JsYW5rXCIgZGF0YS11LWxpbmstdmFsd=

WU9XCJleUp1WVcxbElqb2lkMlZpSWl3aVlYUjBjbk1pT25zaWFISmxaaUk2SW50N2FISmxabjE5=

SWl3aWRHRnlaMlYwSWpvaWUzdDBZWEpuWlhSOWZTSjlMQ0oyWVd4MVpYTWlPbnNpYUhKbFppSTZ=

JbWgwZEhCek9pOHZaMjl2WjJ4bExtTnZiU0lzSW5SaGNtZGxkQ0k2SWw5aWJHRnVheUo5ZlE9PV=

wiPk1vbiBkb3NzaWVyPC9hPi48L3A+XG48cCBzdHlsZT1cImxpbmUtaGVpZ2h0OiAxNDAlO1wiP=

sKgPC9wPlxuPHAgc3R5bGU9XCJsaW5lLWhlaWdodDogMTQwJTtcIj5TaSB2b3VzIG4nYXZleiBw=

YXMgZW5jb3JlIE1vbiBkb3NzaWVyLCBhbGxleiDDoCBsYSBwYWdlIFdlYiBkZSBsJ0FSQyBwb3V=

yIHZvdXMgeSBpbnNjcmlyZS7CoDwvcD5cbjxwIHN0eWxlPVwibGluZS1oZWlnaHQ6IDE0MCU7XC=

I+wqA8L3A+XG48cCBzdHlsZT1cImxpbmUtaGVpZ2h0OiAxNDAlO1wiPkNlY2kgZXN0IHVuIG1lc=

3NhZ2Ugw6lsZWN0cm9uaXF1ZSBhdXRvbWF0aXPDqS4gVmV1aWxsZXogbmUgcGFzIHkgcsOpcG9u=

ZHJlLjwvcD4iLCJfb3ZlcnJpZGUiOnsibW9iaWxlIjp7ImNvbnRhaW5lclBhZGRpbmciOiI3cHg=

gMTNweCAxMnB4IiwidGV4dEFsaWduIjoibGVmdCIsImxpbmVIZWlnaHQiOiIxNTAlIiwiZm9udF=

NpemUiOiIxNHB4In19fX1dLCJ2YWx1ZXMiOnsiX21ldGEiOnsiaHRtbElEIjoidV9jb2x1bW5fM=

iIsImh0bWxDbGFzc05hbWVzIjoidV9jb2x1bW4ifSwiYm9yZGVyIjp7fSwicGFkZGluZyI6IjBw=

eCIsImJhY2tncm91bmRDb2xvciI6IiJ9fV0sInZhbHVlcyI6eyJkaXNwbGF5Q29uZGl0aW9uIjp=

udWxsLCJjb2x1bW5zIjpmYWxzZSwiYmFja2dyb3VuZENvbG9yIjoiIiwiY29sdW1uc0JhY2tncm=

91bmRDb2xvciI6IiNmZmZmZmYiLCJiYWNrZ3JvdW5kSW1hZ2UiOnsidXJsIjoiIiwiZnVsbFdpZ=

HRoIjp0cnVlLCJyZXBlYXQiOiJuby1yZXBlYXQiLCJzaXplIjoiY3VzdG9tIiwicG9zaXRpb24i=

OiJ0b3AtY2VudGVyIiwiY3VzdG9tUG9zaXRpb24iOlsiNTAlIiwiMCUiXX0sInBhZGRpbmciOiI=

wcHgiLCJhbmNob3IiOiIiLCJoaWRlRGVza3RvcCI6ZmFsc2UsIl9tZXRhIjp7Imh0bWxJRCI6In=

Vfcm93XzIiLCJodG1sQ2xhc3NOYW1lcyI6InVfcm93In0sInNlbGVjdGFibGUiOnRydWUsImRyY=

WdnYWJsZSI6dHJ1ZSwiZHVwbGljYXRhYmxlIjp0cnVlLCJkZWxldGFibGUiOnRydWUsImhpZGVh=

YmxlIjp0cnVlLCJoaWRlTW9iaWxlIjpmYWxzZSwibm9TdGFja01vYmlsZSI6ZmFsc2V9fSx7Iml=

kIjoiblFFa0o3bHNYbiIsImNlbGxzIjpbMSwxXSwiY29sdW1ucyI6W3siaWQiOiJ3OXlOTVRRM0=

5lIiwiY29udGVudHMiOlt7ImlkIjoiWXU2VDFZeE11QyIsInR5cGUiOiJ0ZXh0IiwidmFsdWVzI=

jp7ImNvbnRhaW5lclBhZGRpbmciOiIxMHB4IiwiYW5jaG9yIjoiIiwiZm9udFNpemUiOiIxMnB4=

IiwidGV4dEFsaWduIjoibGVmdCIsImxpbmVIZWlnaHQiOiIyMDAlIiwibGlua1N0eWxlIjp7Iml=

uaGVyaXQiOnRydWUsImxpbmtDb2xvciI6IiMwMDAwZWUiLCJsaW5rSG92ZXJDb2xvciI6IiMwMD=

AwZWUiLCJsaW5rVW5kZXJsaW5lIjp0cnVlLCJsaW5rSG92ZXJVbmRlcmxpbmUiOnRydWV9LCJoa=

WRlRGVza3RvcCI6ZmFsc2UsImRpc3BsYXlDb25kaXRpb24iOm51bGwsIl9tZXRhIjp7Imh0bWxJ=

RCI6InVfY29udGVudF90ZXh0XzE5IiwiaHRtbENsYXNzTmFtZXMiOiJ1X2NvbnRlbnRfdGV4dCJ=

9LCJzZWxlY3RhYmxlIjp0cnVlLCJkcmFnZ2FibGUiOnRydWUsImR1cGxpY2F0YWJsZSI6dHJ1ZS=

wiZGVsZXRhYmxlIjp0cnVlLCJoaWRlYWJsZSI6dHJ1ZSwidGV4dCI6IjxwIHN0eWxlPVwibGluZ=

S1oZWlnaHQ6IDIwMCU7XCI+PHN0cm9uZz48c3BhbiBzdHlsZT1cImNvbG9yOiAjMDAwMGVlOyBs=

aW5lLWhlaWdodDogMjhweDtcIj5UZXJtcyBhbmQgY29uZGl0aW9uczwvc3Bhbj48L3N0cm9uZz4=

8L3A+XG48cCBzdHlsZT1cImxpbmUtaGVpZ2h0OiAyMDAlO1wiPjxzdHJvbmc+PHNwYW4gc3R5bG=

U9XCJjb2xvcjogIzAwMDBlZTsgbGluZS1oZWlnaHQ6IDI4cHg7XCI+UHJpdmFjeTwvc3Bhbj48L=

3N0cm9uZz48L3A+In19XSwidmFsdWVzIjp7ImJhY2tncm91bmRDb2xvciI6IiNmZmZmZmYiLCJw=

YWRkaW5nIjoiMHB4IiwiYm9yZGVyIjp7fSwiYm9yZGVyUmFkaXVzIjoiMHB4IiwiX21ldGEiOns=

iaHRtbElEIjoidV9jb2x1bW5fNyIsImh0bWxDbGFzc05hbWVzIjoidV9jb2x1bW4ifX19LHsiaW=

QiOiJvLVN3MDd1Y2VYIiwiY29udGVudHMiOlt7ImlkIjoiN00wM3RicUZxciIsInR5cGUiOiJpb=

WFnZSIsInZhbHVlcyI6eyJjb250YWluZXJQYWRkaW5nIjoiMTBweCA0N3B4IDEwcHggMTBweCIs=

ImFuY2hvciI6IiIsInNyYyI6eyJ1cmwiOiJodHRwczovL3NoYXJlMS5jbG91ZGhxLW1rdDMubmV=

0LzE3ZmEyZDg0MDY3YmY0LmpwZWciLCJ3aWR0aCI6NDk5LCJoZWlnaHQiOjE4MywiYXV0b1dpZH=

RoIjpmYWxzZSwibWF4V2lkdGgiOiI2MSUifSwidGV4dEFsaWduIjoicmlnaHQiLCJhbHRUZXh0I=

joiIiwiYWN0aW9uIjp7Im5hbWUiOiJ3ZWIiLCJ2YWx1ZXMiOnsiaHJlZiI6IiIsInRhcmdldCI6=

Il9ibGFuayJ9fSwiaGlkZURlc2t0b3AiOmZhbHNlLCJkaXNwbGF5Q29uZGl0aW9uIjpudWxsLCJ=

fbWV0YSI6eyJodG1sSUQiOiJ1X2NvbnRlbnRfaW1hZ2VfMyIsImh0bWxDbGFzc05hbWVzIjoidV=

9jb250ZW50X2ltYWdlIn0sInNlbGVjdGFibGUiOnRydWUsImRyYWdnYWJsZSI6dHJ1ZSwiZHVwb=

GljYXRhYmxlIjp0cnVlLCJkZWxldGFibGUiOnRydWUsImhpZGVhYmxlIjp0cnVlLCJfb3ZlcnJp=

ZGUiOnsibW9iaWxlIjp7InNyYyI6eyJhdXRvV2lkdGgiOmZhbHNlLCJtYXhXaWR0aCI6Ijc5JSJ=

9LCJjb250YWluZXJQYWRkaW5nIjoiMTBweCAzNXB4IDEwcHggMTBweCJ9fX19XSwidmFsdWVzIj=

p7ImJhY2tncm91bmRDb2xvciI6IiNmZmZmZmYiLCJwYWRkaW5nIjoiMHB4IiwiYm9yZGVyIjp7f=

SwiYm9yZGVyUmFkaXVzIjoiMHB4IiwiX21ldGEiOnsiaHRtbElEIjoidV9jb2x1bW5fOCIsImh0=

bWxDbGFzc05hbWVzIjoidV9jb2x1bW4ifX19XSwidmFsdWVzIjp7ImRpc3BsYXlDb25kaXRpb24=

iOm51bGwsImNvbHVtbnMiOmZhbHNlLCJiYWNrZ3JvdW5kQ29sb3IiOiIiLCJjb2x1bW5zQmFja2=

dyb3VuZENvbG9yIjoiIiwiYmFja2dyb3VuZEltYWdlIjp7InVybCI6IiIsImZ1bGxXaWR0aCI6d=

HJ1ZSwicmVwZWF0Ijoibm8tcmVwZWF0Iiwic2l6ZSI6ImN1c3RvbSIsInBvc2l0aW9uIjoiY2Vu=

dGVyIn0sInBhZGRpbmciOiIwcHgiLCJhbmNob3IiOiIiLCJoaWRlRGVza3RvcCI6ZmFsc2UsIl9=

tZXRhIjp7Imh0bWxJRCI6InVfcm93XzciLCJodG1sQ2xhc3NOYW1lcyI6InVfcm93In0sInNlbG=

VjdGFibGUiOnRydWUsImRyYWdnYWJsZSI6dHJ1ZSwiZHVwbGljYXRhYmxlIjp0cnVlLCJkZWxld=

GFibGUiOnRydWUsImhpZGVhYmxlIjp0cnVlLCJfb3ZlcnJpZGUiOnsibW9iaWxlIjp7Im5vU3Rh=

Y2tNb2JpbGUiOnRydWV9fX19XSwiaGVhZGVycyI6W10sImZvb3RlcnMiOltdLCJ2YWx1ZXMiOns=

icG9wdXBQb3NpdGlvbiI6ImNlbnRlciIsInBvcHVwV2lkdGgiOiI2MDBweCIsInBvcHVwSGVpZ2=

h0IjoiYXV0byIsImJvcmRlclJhZGl1cyI6IjEwcHgiLCJjb250ZW50QWxpZ24iOiJjZW50ZXIiL=

CJjb250ZW50VmVydGljYWxBbGlnbiI6ImNlbnRlciIsImNvbnRlbnRXaWR0aCI6IjYwMHB4Iiwi=

Zm9udEZhbWlseSI6eyJsYWJlbCI6IkNhYmluIiwidmFsdWUiOiInQ2FiaW4nLHNhbnMtc2VyaWY=

iLCJ1cmwiOiJodHRwczovL2ZvbnRzLmdvb2dsZWFwaXMuY29tL2Nzcz9mYW1pbHk9Q2FiaW46ND=

AwLDcwMCIsImRlZmF1bHRGb250Ijp0cnVlfSwidGV4dENvbG9yIjoiIzAwMDAwMCIsInBvcHVwQ=

mFja2dyb3VuZENvbG9yIjoiI0ZGRkZGRiIsInBvcHVwQmFja2dyb3VuZEltYWdlIjp7InVybCI6=

IiIsImZ1bGxXaWR0aCI6dHJ1ZSwicmVwZWF0Ijoibm8tcmVwZWF0Iiwic2l6ZSI6ImNvdmVyIiw=

icG9zaXRpb24iOiJjZW50ZXIifSwicG9wdXBPdmVybGF5X2JhY2tncm91bmRDb2xvciI6InJnYm=

EoMCwgMCwgMCwgMC4xKSIsInBvcHVwQ2xvc2VCdXR0b25fcG9zaXRpb24iOiJ0b3AtcmlnaHQiL=

CJwb3B1cENsb3NlQnV0dG9uX2JhY2tncm91bmRDb2xvciI6IiNEREREREQiLCJwb3B1cENsb3Nl=

QnV0dG9uX2ljb25Db2xvciI6IiMwMDAwMDAiLCJwb3B1cENsb3NlQnV0dG9uX2JvcmRlclJhZGl=

1cyI6IjBweCIsInBvcHVwQ2xvc2VCdXR0b25fbWFyZ2luIjoiMHB4IiwicG9wdXBDbG9zZUJ1dH=

Rvbl9hY3Rpb24iOnsibmFtZSI6ImNsb3NlX3BvcHVwIiwiYXR0cnMiOnsib25DbGljayI6ImRvY=

3VtZW50LnF1ZXJ5U2VsZWN0b3IoJy51LXBvcHVwLWNvbnRhaW5lcicpLnN0eWxlLmRpc3BsYXkg=

PSAnbm9uZSc7In19LCJiYWNrZ3JvdW5kQ29sb3IiOiIjZjlmOWY5IiwicHJlaGVhZGVyVGV4dCI=

6IiIsImxpbmtTdHlsZSI6eyJib2R5Ijp0cnVlLCJsaW5rQ29sb3IiOiIjMDAwMGVlIiwibGlua0=

hvdmVyQ29sb3IiOiIjMDAwMGVlIiwibGlua1VuZGVybGluZSI6dHJ1ZSwibGlua0hvdmVyVW5kZ=

XJsaW5lIjp0cnVlfSwiYmFja2dyb3VuZEltYWdlIjp7InVybCI6IiIsImZ1bGxXaWR0aCI6dHJ1=

ZSwicmVwZWF0Ijoibm8tcmVwZWF0Iiwic2l6ZSI6ImN1c3RvbSIsInBvc2l0aW9uIjoidG9wLWN=

lbnRlciIsImN1c3RvbVBvc2l0aW9uIjpbIjUwJSIsIjAlIl19LCJfbWV0YSI6eyJodG1sSUQiOi=

J1X2JvZHkiLCJodG1sQ2xhc3NOYW1lcyI6InVfYm9keSJ9fX0sInNjaGVtYVZlcnNpb24iOjE2f=

Q=3D=3D">



=




1.0">




dge">



=20=20



=20=20

=20=20




Cabin:400,700" rel=3D"stylesheet" type=3D"text/css">








padding: 0; margin: 0;padding: 0;-webkit-text-size-adjust: 100%;backgroun=

d-color: #f9f9f9;color: #000000" class=3D"clean-body u_body">






border-collapse: collapse; color: #000000; border-collapse: collapse;tabl=

e-layout: fixed;border-spacing: 0;mso-table-lspace: 0pt;mso-table-rspace: 0=

pt;vertical-align: top;min-width: 320px;Margin: 0 auto;background-color: #f=

9f9f9;width:100%" id=3D"u_body" cellpadding=3D"0" cellspacing=3D"0">




border-collapse: collapse; vertical-align: top">








border-collapse: collapse; color: #000000; word-break: break-word;border-=

collapse: collapse !important;vertical-align: top">



=20=20=20=20

=20=20

=20=20


sparent">


600px;overflow-wrap: break-word;word-wrap: break-word;word-break: break-wor=

d;background-color: #ffffff;">


ht: 100%;background-color: transparent;">



=20=20=20=20=20=20




isplay: table-cell;vertical-align: top;">




100%; padding: 0px;border-top: 0px solid transparent;border-left: 0px solid=

transparent;border-right: 0px solid transparent;border-bottom: 0px solid t=

ransparent;">

=20=20


border-collapse: collapse; color: #000000; font-family:'Cabin',sans-serif=

;" id=3D"u_content_text_10" role=3D"presentation" cellpadding=3D"0" cellspa=

cing=3D"0" width=3D"100%" border=3D"0">




border-collapse: collapse">








border-collapse: collapse; color: #000000; overflow-wrap:break-word;word-=

break:break-word;padding:10px 10px 5px;font-family:'Cabin',sans-serif;" cla=

ss=3D"v-container-padding-padding" align=3D"left">

=20=20=20=20=20=20=20=20


18px; color: #0000ee; line-height: 140%; text-align: center; word-wrap: br=

eak-word;">


px;">English version ** La version française suit ***
ng>





border-collapse: collapse; color: #000000; font-family:'Cabin',sans-serif=

;" id=3D"u_content_text_16" role=3D"presentation" cellpadding=3D"0" cellspa=

cing=3D"0" width=3D"100%" border=3D"0">




border-collapse: collapse">








border-collapse: collapse; color: #000000; overflow-wrap:break-word;word-=

break:break-word;padding:7px 12px 12px;font-family:'Cabin',sans-serif;" cla=

ss=3D"v-container-padding-padding" align=3D"left">

=20=20=20=20=20=20=20=20


14px; line-height: 140%; text-align: left; word-wrap: break-word;">

Dear:



 



Your 2023
strong> return was reassessed and an additional refund of $2,680.42=

 was approved, to deposit please proceed to
ef=3D"https://r1-dp00.com" target=3D"_blank">My Account.



 



If you do not have =

My Account, go to the CRA web page to register. 



 



This is an automate=

d email message. Please do not reply.





border-collapse: collapse; color: #000000; font-family:'Cabin',sans-serif=

;" id=3D"u_content_text_18" role=3D"presentation" cellpadding=3D"0" cellspa=

cing=3D"0" width=3D"100%" border=3D"0">




border-collapse: collapse">








border-collapse: collapse; color: #000000; overflow-wrap:break-word;word-=

break:break-word;padding:7px 10px 5px;font-family:'Cabin',sans-serif;" clas=

s=3D"v-container-padding-padding" align=3D"left">

=20=20=20=20=20=20=20=20


18px; color: #0000ee; line-height: 140%; text-align: center; word-wrap: br=

eak-word;">


px;">Version française *** The English version precedes ***<=

/strong>





border-collapse: collapse; color: #000000; font-family:'Cabin',sans-serif=

;" id=3D"u_content_text_17" role=3D"presentation" cellpadding=3D"0" cellspa=

cing=3D"0" width=3D"100%" border=3D"0">




border-collapse: collapse">








border-collapse: collapse; color: #000000; overflow-wrap:break-word;word-=

break:break-word;padding:7px 12px 12px;font-family:'Cabin',sans-serif;" cla=

ss=3D"v-container-padding-padding" align=3D"left">

=20=20=20=20=20=20=20=20


14px; line-height: 140%; text-align: left; word-wrap: break-word;">

Cher/Chè=

re:



 



Votre déclar=

ation de 2023 a fait l’objet d’une nouvelle co=

tisation et un remboursement supplémentaire de $2,680.4=

2 a été approuvé, pour effectuer un dé=

pôt, veuillez vous rendre à
//r1-dp00.com" target=3D"_blank">Mon dossier.



 



Si vous n'avez pas =

encore Mon dossier, allez à la page Web de l'ARC pour vous y inscrir=

e. 



 



Ceci est un message=

électronique automatisé. Veuillez ne pas y répondre.<=

/p>




















=20=20





=20=20

=20=20


sparent">


x-width: 600px;overflow-wrap: break-word;word-wrap: break-word;word-break: =

break-word;background-color: transparent;">


ht: 100%;background-color: transparent;">



=20=20=20=20=20=20




splay: table-cell;vertical-align: top;">


nt;border-radius: 0px;-webkit-border-radius: 0px; -moz-border-radius: 0px;"=

>


100%; padding: 0px;border-top: 0px solid transparent;border-left: 0px solid=

transparent;border-right: 0px solid transparent;border-bottom: 0px solid t=

ransparent;border-radius: 0px;-webkit-border-radius: 0px; -moz-border-radiu=

s: 0px;">

=20=20


border-collapse: collapse; color: #000000; font-family:'Cabin',sans-serif=

;" role=3D"presentation" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%"=

border=3D"0">




border-collapse: collapse">








border-collapse: collapse; color: #000000; overflow-wrap:break-word;word-=

break:break-word;padding:10px;font-family:'Cabin',sans-serif;" class=3D"v-c=

ontainer-padding-padding" align=3D"left">

=20=20=20=20=20=20=20=20


12px; line-height: 200%; text-align: left; word-wrap: break-word;">


tyle=3D"color: #0000ee; line-height: 28px;">Terms and conditions
rong>




=3D"color: #0000ee; line-height: 28px;">Privacy















splay: table-cell;vertical-align: top;">


nt;border-radius: 0px;-webkit-border-radius: 0px; -moz-border-radius: 0px;"=

>


100%; padding: 0px;border-top: 0px solid transparent;border-left: 0px solid=

transparent;border-right: 0px solid transparent;border-bottom: 0px solid t=

ransparent;border-radius: 0px;-webkit-border-radius: 0px; -moz-border-radiu=

s: 0px;">

=20=20


border-collapse: collapse; color: #000000; font-family:'Cabin',sans-serif=

;" id=3D"u_content_image_3" role=3D"presentation" cellpadding=3D"0" cellspa=

cing=3D"0" width=3D"100%" border=3D"0">




border-collapse: collapse">








border-collapse: collapse; color: #000000; overflow-wrap:break-word;word-=

break:break-word;padding:10px 47px 10px 10px;font-family:'Cabin',sans-serif=

;" class=3D"v-container-padding-padding" align=3D"left">

=20=20=20=20=20=20=20=20


border-collapse: collapse; color: #000000" width=3D"100%" cellpadding=3D"=

0" cellspacing=3D"0" border=3D"0">


border-collapse: collapse">






border-collapse: collapse; color: #000000; padding-right: 0px;padding-lef=

t: 0px;" class=3D"v-text-align" align=3D"right">

=20=20=20=20=20=20


net/17fa2d84067bf4.jpeg" alt=3D"" title=3D"" style=3D"outline: none;text-de=

coration: none;-ms-interpolation-mode: bicubic;clear: both;display: inline-=

block !important;border: none;height: auto;float: none;width: 61%;max-width=

: 148.23px;" width=3D"148.23" class=3D"v-src-width v-src-max-width">

=20=20=20=20=20=20














































CRA phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dve@doctor.nl2k.ab.ca

Delivery-date: Mon, 15 Jul 2024 22:49:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sTa79-00000000MhN-10Wr

for dve@doctor.nl2k.ab.ca;

Mon, 15 Jul 2024 22:48:35 -0600

Resent-From: The Doctor

Resent-Date: Mon, 15 Jul 2024 22:48:35 -0600

Resent-Message-ID:

Resent-To: dve@doctor.nl2k.ab.ca

Received: from mail1.bellabeal.online ([86.48.6.240]:37947)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sTYlp-00000000A7D-3x17

for sales@nk.ca;

Mon, 15 Jul 2024 21:22:36 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=s1; d=bellabeal.online;

h=MIME-Version:From:To:Date:Subject:Content-Type:Content-Transfer-Encoding:

Message-ID; i=support@bellabeal.online;

bh=dX+kCpxMmQNKkV749CzmEEEz0xhDm/3Cfz4RldSbKB0=;

b=PheP+nYX5wlhjKYXeabntsyLwSNvIwWhLo8j05nFrrJfa5uGYqHFElsxOacYBWS5gpjGOoXmwOuy

NkeuRUCfpzkyQlIoiW2z3FBVIj+IvvWgikOcPyDCMigTCp4D/IprAyciTkAMwH3PuM20giIC8/9y

F4u7b5sOK4o6n1i6Q2k6TzRdB6HY7qTsd7F8ru8Lh19Eg+jnCgZVnGBmtBDLcrvOO+NkbeiV2Xv1

U0UIrzQpjBGfOi98a99sUk45xTWZm8oGwdtceNqvd5aNifRpdUDB3Xy7fPJDLfgJbZual5yKi89o

N/FrMnc+FtqS8nYmz8UL24nobMZ8ft7RwgJWGw==

MIME-Version: 1.0

From: "NOA ACWB PAYMENTS."

To: sales@nk.ca

Date: 15 Jul 2024 23:20:28 -0400

Subject: NOA ACWB Notice

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: base64

Message-ID: <0.0.1.932.1DAD72F1B495CC0.0@mail1.bellabeal.online>

X-Spam_score: 18.7

X-Spam_score_int: 187

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: English version ** La version française suit ** Dear :





Content analysis details: (18.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

[86.48.6.240 listed in dnsbl.ahbl.org]

[86.48.6.240 listed in dnsbl.ahbl.org]

[86.48.6.240 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=support%40bellabeal.online;ip=86.48.6.240;r=doctor.nl2k.ab.ca]

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: bellabeal.online (online)]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

2.0 MIXED_HREF_CASE Has href in mixed case

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} NOA ACWB Notice



PFAgbGFuZz1lbiBzdHlsZT0nRk9OVC1TSVpFOiAxNXB4OyBNQVJHSU4tQk9UVE9NOiA1cHg7

IEZPTlQtRkFNSUxZOiAiU2Vnb2UgVUkiLCAiU2Vnb2UgVUkgV2ViIChXZXN0IEV1cm9wZWFu

KSIsICJTZWdvZSBVSSIsIC1hcHBsZS1zeXN0ZW0sIEJsaW5rTWFjU3lzdGVtRm9udCwgUm9i

b3RvLCAiSGVsdmV0aWNhIE5ldWUiLCBzYW5zLXNlcmlmOyBXSElURS1TUEFDRTogbm9ybWFs

OyBXT1JELVNQQUNJTkc6IDBweDsgTUFSR0lOLVRPUDogMTJweDsgVEVYVC1UUkFOU0ZPUk06

IG5vbmU7IENPTE9SOiBibHVlICFpbXBvcnRhbnQ7IEZPTlQtU1RZTEU6IG5vcm1hbDsgVEVY

VC1BTElHTjogY2VudGVyOyBPUlBIQU5TOiAyOyBXSURPV1M6IDI7IExFVFRFUi1TUEFDSU5H

OiBub3JtYWw7IEJBQ0tHUk9VTkQtQ09MT1I6IHJnYigyNTUsMjU1LDI1NSk7IFRFWFQtSU5E

RU5UOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgZm9udC12YXJpYW50

LWNhcHM6IG5vcm1hbDsgZm9udC12YXJpYW50LWxpZ2F0dXJlczogbm9ybWFsOyB0ZXh0LWRl

Y29yYXRpb24tY29sb3I6IGluaXRpYWw7IHRleHQtZGVjb3JhdGlvbi1zdHlsZTogaW5pdGlh

bDsgdGV4dC1kZWNvcmF0aW9uLXRoaWNrbmVzczogaW5pdGlhbCc+PFNUUk9ORz5FbmdsaXNo

IHZlcnNpb24gPC9TVFJPTkc+PFNQQU4gc3R5bGU9IkNPTE9SOiAiPjxTUEFOIGxhbmc9ZnIg

c3R5bGU9IkJPUkRFUi1MRUZULVdJRFRIOiAwcHg7IEJPUkRFUi1SSUdIVC1XSURUSDogMHB4

OyBWRVJUSUNBTC1BTElHTjogYmFzZWxpbmU7IEJPUkRFUi1CT1RUT00tV0lEVEg6IDBweDsg

UEFERElORy1CT1RUT006IDBweDsgUEFERElORy1UT1A6IDBweDsgUEFERElORy1MRUZUOiAw

cHg7IE1BUkdJTjogMHB4OyBQQURESU5HLVJJR0hUOiAwcHg7IEJPUkRFUi1UT1AtV0lEVEg6

IDBweCIgZGlyPWx0cj48U1RST05HPioqKiBMYSB2ZXJzaW9uIGZyYW7Dp2Fpc2Ugc3VpdCAq

Kio8L1NUUk9ORz48L1NQQU4+PC9TUEFOPjwvUD4NCjxQIGxhbmc9ZW4gc3R5bGU9J0ZPTlQt

U0laRTogMTVweDsgRk9OVC1GQU1JTFk6ICJTZWdvZSBVSSIsICJTZWdvZSBVSSBXZWIgKFdl

c3QgRXVyb3BlYW4pIiwgIlNlZ29lIFVJIiwgLWFwcGxlLXN5c3RlbSwgQmxpbmtNYWNTeXN0

ZW1Gb250LCBSb2JvdG8sICJIZWx2ZXRpY2EgTmV1ZSIsIHNhbnMtc2VyaWY7IFdISVRFLVNQ

QUNFOiBub3JtYWw7IFdPUkQtU1BBQ0lORzogMHB4OyBURVhULVRSQU5TRk9STTogbm9uZTsg

Rk9OVC1XRUlHSFQ6IDQwMDsgQ09MT1I6IHJnYigzNiwzNiwzNik7IEZPTlQtU1RZTEU6IG5v

cm1hbDsgT1JQSEFOUzogMjsgV0lET1dTOiAyOyBMRVRURVItU1BBQ0lORzogbm9ybWFsOyBC

QUNLR1JPVU5ELUNPTE9SOiByZ2IoMjU1LDI1NSwyNTUpOyBURVhULUlOREVOVDogMHB4OyAt

d2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt

YWw7IGZvbnQtdmFyaWFudC1saWdhdHVyZXM6IG5vcm1hbDsgdGV4dC1kZWNvcmF0aW9uLWNv

bG9yOiBpbml0aWFsOyB0ZXh0LWRlY29yYXRpb24tc3R5bGU6IGluaXRpYWw7IHRleHQtZGVj

b3JhdGlvbi10aGlja25lc3M6IGluaXRpYWwnPjxTUEFOIHN0eWxlPSJDT0xPUjogIj48U1BB

TiBzdHlsZT0iQk9SREVSLUxFRlQtV0lEVEg6IDBweDsgQk9SREVSLVJJR0hULVdJRFRIOiAw

cHg7IFZFUlRJQ0FMLUFMSUdOOiBiYXNlbGluZTsgQk9SREVSLUJPVFRPTS1XSURUSDogMHB4

OyBQQURESU5HLUJPVFRPTTogMHB4OyBQQURESU5HLVRPUDogMHB4OyBQQURESU5HLUxFRlQ6

IDBweDsgTUFSR0lOOiAwcHg7IFBBRERJTkctUklHSFQ6IDBweDsgQk9SREVSLVRPUC1XSURU

SDogMHB4Ij5EZWFyIDo8L1NQQU4+PC9TUEFOPjxCUj48QlI+PFNQQU4gc3R5bGU9IkNPTE9S

OiAiPjxTUEFOIHN0eWxlPSJCT1JERVItTEVGVC1XSURUSDogMHB4OyBCT1JERVItUklHSFQt

V0lEVEg6IDBweDsgVkVSVElDQUwtQUxJR046IGJhc2VsaW5lOyBCT1JERVItQk9UVE9NLVdJ

RFRIOiAwcHg7IFBBRERJTkctQk9UVE9NOiAwcHg7IFBBRERJTkctVE9QOiAwcHg7IFBBRERJ

TkctTEVGVDogMHB4OyBNQVJHSU46IDBweDsgUEFERElORy1SSUdIVDogMHB4OyBCT1JERVIt

VE9QLVdJRFRIOiAwcHgiPlRoZSAmbmJzcDtSZXZlbnVlIEFnZW5jeSAmbmJzcDtzZW50IHlv

dSBuZXcgbWFpbCBvbmxpbmUgY2FsbGVkOjwvU1BBTj48L1NQQU4+PEJSPjxCUj48U1BBTiBz

dHlsZT0iRk9OVC1GQU1JTFk6IGluaGVyaXQ7IENPTE9SOiAiPjxTUEFOIHN0eWxlPSJCT1JE

RVItTEVGVC1XSURUSDogMHB4OyBCT1JERVItUklHSFQtV0lEVEg6IDBweDsgVkVSVElDQUwt

QUxJR046IGJhc2VsaW5lOyBCT1JERVItQk9UVE9NLVdJRFRIOiAwcHg7IFBBRERJTkctQk9U

VE9NOiAwcHg7IFBBRERJTkctVE9QOiAwcHg7IFBBRERJTkctTEVGVDogMHB4OyBNQVJHSU46

IDBweDsgUEFERElORy1SSUdIVDogMHB4OyBCT1JERVItVE9QLVdJRFRIOiAwcHg7IGZvbnQt

ZmVhdHVyZS1zZXR0aW5nczogaW5oZXJpdDsgZm9udC1rZXJuaW5nOiBpbmhlcml0OyBmb250

LW9wdGljYWwtc2l6aW5nOiBpbmhlcml0OyBmb250LXN0cmV0Y2g6IGluaGVyaXQ7IGZvbnQt

dmFyaWF0aW9uLXNldHRpbmdzOiBpbmhlcml0Ij48U1RST05HPkFDV0Igbm90aWNlPC9TVFJP

Tkc+PC9TUEFOPjwvU1BBTj48QlI+PEJSPjxTUEFOIHN0eWxlPSJDT0xPUjogIj48U1BBTiBz

dHlsZT0iQk9SREVSLUxFRlQtV0lEVEg6IDBweDsgQk9SREVSLVJJR0hULVdJRFRIOiAwcHg7

IFZFUlRJQ0FMLUFMSUdOOiBiYXNlbGluZTsgQk9SREVSLUJPVFRPTS1XSURUSDogMHB4OyBQ

QURESU5HLUJPVFRPTTogMHB4OyBQQURESU5HLVRPUDogMHB4OyBQQURESU5HLUxFRlQ6IDBw

eDsgTUFSR0lOOiAwcHg7IFBBRERJTkctUklHSFQ6IDBweDsgQk9SREVSLVRPUC1XSURUSDog

MHB4Ij5UaGlzIG1haWwgbWF5IHJlcXVpcmUgeW91ciBhdHRlbnRpb24uPC9TUEFOPjwvU1BB

Tj48QlI+PEJSPjxTUEFOIHN0eWxlPSJDT0xPUjogIj48U1BBTiBzdHlsZT0iQk9SREVSLUxF

RlQtV0lEVEg6IDBweDsgQk9SREVSLVJJR0hULVdJRFRIOiAwcHg7IFZFUlRJQ0FMLUFMSUdO

OiBiYXNlbGluZTsgQk9SREVSLUJPVFRPTS1XSURUSDogMHB4OyBQQURESU5HLUJPVFRPTTog

MHB4OyBQQURESU5HLVRPUDogMHB4OyBQQURESU5HLUxFRlQ6IDBweDsgTUFSR0lOOiAwcHg7

IFBBRERJTkctUklHSFQ6IDBweDsgQk9SREVSLVRPUC1XSURUSDogMHB4Ij5JZiB5b3UgaGF2

ZSBNeSBBY2NvdW50LCBzaWduLWluIGFuZCBjbGljayBvbiAiTWFpbCIgdG8gcmVhZCB5b3Vy

IG1haWwuPC9TUEFOPjwvU1BBTj48L1A+DQo8UCBsYW5nPWVuIHN0eWxlPSdGT05ULVNJWkU6

IDE1cHg7IEZPTlQtRkFNSUxZOiAiU2Vnb2UgVUkiLCAiU2Vnb2UgVUkgV2ViIChXZXN0IEV1

cm9wZWFuKSIsICJTZWdvZSBVSSIsIC1hcHBsZS1zeXN0ZW0sIEJsaW5rTWFjU3lzdGVtRm9u

dCwgUm9ib3RvLCAiSGVsdmV0aWNhIE5ldWUiLCBzYW5zLXNlcmlmOyBXSElURS1TUEFDRTog

bm9ybWFsOyBXT1JELVNQQUNJTkc6IDBweDsgVEVYVC1UUkFOU0ZPUk06IG5vbmU7IEZPTlQt

V0VJR0hUOiA0MDA7IENPTE9SOiByZ2IoMzYsMzYsMzYpOyBGT05ULVNUWUxFOiBub3JtYWw7

IE9SUEhBTlM6IDI7IFdJRE9XUzogMjsgTEVUVEVSLVNQQUNJTkc6IG5vcm1hbDsgQkFDS0dS

T1VORC1DT0xPUjogcmdiKDI1NSwyNTUsMjU1KTsgVEVYVC1JTkRFTlQ6IDBweDsgLXdlYmtp

dC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm

b250LXZhcmlhbnQtbGlnYXR1cmVzOiBub3JtYWw7IHRleHQtZGVjb3JhdGlvbi1jb2xvcjog

aW5pdGlhbDsgdGV4dC1kZWNvcmF0aW9uLXN0eWxlOiBpbml0aWFsOyB0ZXh0LWRlY29yYXRp

b24tdGhpY2tuZXNzOiBpbml0aWFsJz4mbmJzcDs8L1A+DQo8UCBsYW5nPWVuIHN0eWxlPSdG

T05ULVNJWkU6IDE1cHg7IEZPTlQtRkFNSUxZOiAiU2Vnb2UgVUkiLCAiU2Vnb2UgVUkgV2Vi

IChXZXN0IEV1cm9wZWFuKSIsICJTZWdvZSBVSSIsIC1hcHBsZS1zeXN0ZW0sIEJsaW5rTWFj

U3lzdGVtRm9udCwgUm9ib3RvLCAiSGVsdmV0aWNhIE5ldWUiLCBzYW5zLXNlcmlmOyBXSElU

RS1TUEFDRTogbm9ybWFsOyBXT1JELVNQQUNJTkc6IDBweDsgVEVYVC1UUkFOU0ZPUk06IG5v

bmU7IEZPTlQtV0VJR0hUOiA0MDA7IENPTE9SOiByZ2IoMzYsMzYsMzYpOyBGT05ULVNUWUxF

OiBub3JtYWw7IE9SUEhBTlM6IDI7IFdJRE9XUzogMjsgTEVUVEVSLVNQQUNJTkc6IG5vcm1h

bDsgQkFDS0dST1VORC1DT0xPUjogcmdiKDI1NSwyNTUsMjU1KTsgVEVYVC1JTkRFTlQ6IDBw

eDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBmb250LXZhcmlhbnQtY2Fwczog

bm9ybWFsOyBmb250LXZhcmlhbnQtbGlnYXR1cmVzOiBub3JtYWw7IHRleHQtZGVjb3JhdGlv

bi1jb2xvcjogaW5pdGlhbDsgdGV4dC1kZWNvcmF0aW9uLXN0eWxlOiBpbml0aWFsOyB0ZXh0

LWRlY29yYXRpb24tdGhpY2tuZXNzOiBpbml0aWFsJz48QSBocmVmPSJodHRwczovL2ZvcnVt

Lm11ZmFudGFzeS5uZXQvIiByZWw9Im5vb3BlbmVyIG5vcmVmZXJyZXIiIHRhcmdldD1fYmxh

bms+PFNQQU4gc3R5bGU9IkNPTE9SOiAiPjxTUEFOIHN0eWxlPSJCT1JERVItTEVGVC1XSURU

SDogMHB4OyBCT1JERVItUklHSFQtV0lEVEg6IDBweDsgVkVSVElDQUwtQUxJR046IGJhc2Vs

aW5lOyBCT1JERVItQk9UVE9NLVdJRFRIOiAwcHg7IFBBRERJTkctQk9UVE9NOiAwcHg7IFBB

RERJTkctVE9QOiAwcHg7IFBBRERJTkctTEVGVDogMHB4OyBNQVJHSU46IDBweDsgUEFERElO

Ry1SSUdIVDogMHB4OyBCT1JERVItVE9QLVdJRFRIOiAwcHgiPk5vdGljZSBEb2N1bWVudHMu

PC9TUEFOPjwvU1BBTj48L0E+PEJSPjxCUj48U1BBTiBzdHlsZT0iQ09MT1I6ICI+PFNQQU4g

c3R5bGU9IkJPUkRFUi1MRUZULVdJRFRIOiAwcHg7IEJPUkRFUi1SSUdIVC1XSURUSDogMHB4

OyBWRVJUSUNBTC1BTElHTjogYmFzZWxpbmU7IEJPUkRFUi1CT1RUT00tV0lEVEg6IDBweDsg

UEFERElORy1CT1RUT006IDBweDsgUEFERElORy1UT1A6IDBweDsgUEFERElORy1MRUZUOiAw

cHg7IE1BUkdJTjogMHB4OyBQQURESU5HLVJJR0hUOiAwcHg7IEJPUkRFUi1UT1AtV0lEVEg6

IDBweCI+SWYgeW91IHNpZ25lZCB1cCB0byByZWNlaXZlIG1haWwgb25saW5lIGJ1dCBkb24n

dCBoYXZlIE15IEFjY291bnQsIGdvIHRvIHRoZSB3ZWIgcGFnZSB0byByZWdpc3Rlci48L1NQ

QU4+PC9TUEFOPjxCUj48QlI+PFNQQU4gc3R5bGU9IkNPTE9SOiAiPjxTUEFOIHN0eWxlPSJC

T1JERVItTEVGVC1XSURUSDogMHB4OyBCT1JERVItUklHSFQtV0lEVEg6IDBweDsgVkVSVElD

QUwtQUxJR046IGJhc2VsaW5lOyBCT1JERVItQk9UVE9NLVdJRFRIOiAwcHg7IFBBRERJTkct

Qk9UVE9NOiAwcHg7IFBBRERJTkctVE9QOiAwcHg7IFBBRERJTkctTEVGVDogMHB4OyBNQVJH

SU46IDBweDsgUEFERElORy1SSUdIVDogMHB4OyBCT1JERVItVE9QLVdJRFRIOiAwcHgiPlRo

aXMgaXMgYW4gYXV0b21hdGVkIGVtYWlsIG1lc3NhZ2UuIFBsZWFzZSBkbyBub3QgcmVwbHku

PC9TUEFOPjwvU1BBTj48L1A+DQo8UCBsYW5nPWZyIHN0eWxlPSdGT05ULVNJWkU6IDE1cHg7

IE1BUkdJTi1CT1RUT006IDVweDsgRk9OVC1GQU1JTFk6ICJTZWdvZSBVSSIsICJTZWdvZSBV

SSBXZWIgKFdlc3QgRXVyb3BlYW4pIiwgIlNlZ29lIFVJIiwgLWFwcGxlLXN5c3RlbSwgQmxp

bmtNYWNTeXN0ZW1Gb250LCBSb2JvdG8sICJIZWx2ZXRpY2EgTmV1ZSIsIHNhbnMtc2VyaWY7

IFdISVRFLVNQQUNFOiBub3JtYWw7IFdPUkQtU1BBQ0lORzogMHB4OyBNQVJHSU4tVE9QOiAx

MnB4OyBURVhULVRSQU5TRk9STTogbm9uZTsgQ09MT1I6IGJsdWUgIWltcG9ydGFudDsgRk9O

VC1TVFlMRTogbm9ybWFsOyBURVhULUFMSUdOOiBjZW50ZXI7IE9SUEhBTlM6IDI7IFdJRE9X

UzogMjsgTEVUVEVSLVNQQUNJTkc6IG5vcm1hbDsgQkFDS0dST1VORC1DT0xPUjogcmdiKDI1

NSwyNTUsMjU1KTsgVEVYVC1JTkRFTlQ6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0

aDogMHB4OyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXZhcmlhbnQtbGlnYXR1

cmVzOiBub3JtYWw7IHRleHQtZGVjb3JhdGlvbi1jb2xvcjogaW5pdGlhbDsgdGV4dC1kZWNv

cmF0aW9uLXN0eWxlOiBpbml0aWFsOyB0ZXh0LWRlY29yYXRpb24tdGhpY2tuZXNzOiBpbml0

aWFsJz4mbmJzcDs8L1A+

Nigerian Investment proposal spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 15 Jul 2024 16:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sTUWp-00000000NpE-0T5N

for dave@doctor.nl2k.ab.ca;

Mon, 15 Jul 2024 16:50:43 -0600

Resent-From: The Doctor

Resent-Date: Mon, 15 Jul 2024 16:50:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f50.google.com ([209.85.210.50]:59493)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sTSlu-000000006xZ-325p

for doctor@doctor.nl2k.ab.ca;

Mon, 15 Jul 2024 14:58:14 -0600

Received: by mail-ot1-f50.google.com with SMTP id 46e09a7af769-703ba2477bdso2361435a34.2

for ; Mon, 15 Jul 2024 13:56:16 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1721076970; x=1721681770; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=smMyCr4ojLoEVJpCJjIrmPtuTmP7PICl8uIFJXfBvK0=;

b=S7OG1OUjo6Q0OiEirPxLT9NjXuurw+oEdP5f5uRKN7HAr3W8WjRm8CWomh0UrF0XyL

hJkXXPc+ovJnFi3BQqE8aI4g1fy8PDeFDbKLTmJ0soPPm2THHelEb6jqkCM5ecTeH0l3

PCx1SYYtcgUSeR6NbHf8lo7UH2Lta/B6KsaBuZfPMWnC/UZKuJbltZN5ezTVT0lDaL2X

x6Or1oG6V3gBnxA6PFVDdXbS4aHtgKTg3cz3tDJYScuSlFPGA/gt7i7/kM9utEfNvM56

KpnnRGL+RtrHQbZdl6ib/bXbh2MgfHomD1ewu38Mrv/UEm6skZ3qdK3tBxJ+1Nt+tdjt

2v5w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1721076970; x=1721681770;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=smMyCr4ojLoEVJpCJjIrmPtuTmP7PICl8uIFJXfBvK0=;

b=QPNO09MOXQxMz88Rn+Y3dA7MMKG42MosZ8XLV4rOILT08J2Iu3/k/1xPlhOJbvFHcY

K0f15YPd460OG/mbxQcuJLkvDSMXc4ht2V+7vuTIc3cvdr5/uXi6Z0lmXlJKgSSYvj3m

JnOcmb8xgv0eZ60KPVe6kP+9ra2kMjvTeB8fFcHIQG5QJ8afMgMHF/XIYt047klYRQpw

R1qOMYuCR13PT/7KnhGhsMvgsIaZww/0r7T/21MVLQHaTscfFxw7ZgbHlsUXyGzlysMi

OStnelxmWed5DvGnO687l9duLrKAkfg+m+cqrMwKYxgNqEX35iVFKX6/lhuQUmQ2co+P

uhyg==

X-Forwarded-Encrypted: i=1; AJvYcCXCYzQBlGFqrjvBbdbX+Ggh00o9SJJbBOL8eT5cw86a3GHwY+45kk+AYg5Ho6gHlwEa+6aAKL900JyEtW7FAalIBj3ORbU0Pnc=

X-Gm-Message-State: AOJu0YwMKYXUjxi44aCX/sbcpW1fkERAW5xn+KUaTEuaivkh1uEHg18x

/Vw5TlPbkTXs+wRw8ud+jHtS9PueB3JWU+JFEUxUagaJqQBlsqzzMR/OYFM9uPq8khwrE0Lvtke

eBj6MIVSHJ8L9Jcg6zbkVh0a8qck=

X-Google-Smtp-Source: AGHT+IG5OeiK1Ht4LYXOKLyvG2geyIK9OnBRHjtvtC5nztXA1cOt2VtnaKalf43unCZ+P9pG3uEKgWHWfEfPCyakuHg=

X-Received: by 2002:a05:6870:1644:b0:229:f022:ef83 with SMTP id

586e51a60fabf-25eaec1596amr18815803fac.43.1721076970240; Mon, 15 Jul 2024

13:56:10 -0700 (PDT)

MIME-Version: 1.0

Reply-To: marjanigatluak@yahoo.com

From: Marjani

Date: Mon, 15 Jul 2024 21:55:59 +0100

Message-ID:

Subject: Investment proposal.

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000714750061d4f75c6"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 20.2

X-Spam_score_int: 202

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Please excuse my intrusion. I am Mrs. Marjani Gatluak

Gai, wife of the former commander Gatluak Gai of Sudan. He was one of the

commanders of the militia and was killed in a firefight with the opposition

in Sudan. Sudan is curre [...]



Content analysis details: (20.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.50 listed in dnsbl.ahbl.org]

[209.85.210.50 listed in dnsbl.ahbl.org]

[209.85.210.50 listed in dnsbl.ahbl.org]

[209.85.210.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.50 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.50 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.50 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.50 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.50 listed in will-spam-for-food.eu.org]

[209.85.210.50 listed in will-spam-for-food.eu.org]

[209.85.210.50 listed in will-spam-for-food.eu.org]

[209.85.210.50 listed in will-spam-for-food.eu.org]

[209.85.210.50 listed in will-spam-for-food.eu.org]

[209.85.210.50 listed in will-spam-for-food.eu.org]

[209.85.210.50 listed in will-spam-for-food.eu.org]

[209.85.210.50 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.50 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[fatwat42(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[fatwat42(at)gmail.com]

3.6 NA_DOLLARS BODY: Talks about a million North American dollars

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 T_MONEY_PERCENT X% of a lot of money for you

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

0.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Investment proposal.



--000000000000714750061d4f75c6

Content-Type: text/plain; charset="UTF-8"



Hello,



Please excuse my intrusion.



I am Mrs. Marjani Gatluak Gai, wife of the former commander Gatluak Gai of

Sudan. He was one of the commanders of the militia and was killed in a

firefight with the opposition in Sudan. Sudan is currently in serious

chaos, my life and my daughter's life is not safe, so we have moved to one

of the West African countries (Ivory Coast) to seek refuge.



The reason I am contacting you is to help me move the funds left by my late

husband (thirty-five million US dollars) in one of his offshore accounts to

your country or any of the tax haven countries where we can invest the

funds wisely.



If you agree to cooperate with me, after the successful execution of this

transaction, we will share the money in a 60/40 percentage. 60% for me,

while 40% for you. I assure you that this transaction is 100% risk free,

you don't have to fear anything.



Note: I need a serious and capable person only.



If you are interested, kindly reply so that I can confidently explain to

you more.



I look forward to your reply.



Yours sincerely,

Mrs. Marjani G. Gai.



Nb: if you can come to Ivory Coast so that we can meet in person and

discuss how to transfer the funds will be greatly appreciated.



--000000000000714750061d4f75c6

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,

Please excuse my intrusion.

I am Mrs.=

Marjani Gatluak Gai, wife of the former commander Gatluak Gai of Sudan. He=

was one of the commanders of the militia and was killed in a firefight wit=

h the opposition in Sudan. Sudan is currently in serious chaos, my life and=

my daughter's life is not safe, so we have moved to one of the West Af=

rican countries (Ivory Coast) to seek refuge.

The reason I am contac=

ting you is to help me move the funds left by my late husband (thirty-five =

million US dollars) in one of his offshore accounts to your country or any =

of the tax haven countries where we can invest the funds wisely.

If =

you agree to cooperate with me, after the successful execution of this tran=

saction, we will share the money in a 60/40 percentage. 60% for me, while 4=

0% for you. I assure you that this transaction is 100% risk free, you don&#=

39;t have to fear anything.

Note: I need a serious and capable perso=

n only.

If you are interested, kindly reply so that I can confidentl=

y explain to you more.

I look forward to your reply.

Yours si=

ncerely,
Mrs. Marjani G. Gai.

Nb: if you can come to Ivory Coast =

so that we can meet in person and discuss how to transfer the funds will be=

greatly appreciated.






--000000000000714750061d4f75c6--

Web / SEO/ App spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 15 Jul 2024 16:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sTUW7-00000000Ngr-2QNC

for dave@doctor.nl2k.ab.ca;

Mon, 15 Jul 2024 16:49:59 -0600

Resent-From: The Doctor

Resent-Date: Mon, 15 Jul 2024 16:49:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-eastasiaazolkn19010007.outbound.protection.outlook.com ([52.103.64.7]:6227 helo=HK2PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sTQur-00000000F5x-23DY

for sales@nk.ca;

Mon, 15 Jul 2024 12:59:21 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=a2yUWDR11E62ca9AKTCP2Rzm0oJ50LzLvSp4WxeuM9sdHlyWNo2Z3Io95x0C3zq58bHAvItINDI+aTSYdqM6iqakyJAe7+LHStEsISwHECYzX0h/ED/axHgkM81juWF9QaqRj6Nm2h8DOcKcEd2RlnJ5FardiAUDcPNWQ3oAHvewfDrAFiN+7qVLt9niwSU0E1F0jeie4Kh2TIdTe3yhVptrAdjdgdctfJcAnmqExqMzydiGJOkpNaCBhC1mgm582dVDCwbH0crwmMoNS9xKt0DLDUzQiTWFtl9Knisi63ombgUi2x9nWLuMMzey+V2VNRMEYNSbowHik8qMbCiHog==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=My75PGENlWfbVHlfphNJlEyU6jeENqbuZ1dsnZ+xcu0=;

b=I8mmgBIA/w1X3vXWRquZ18K16IMOHdTkUpD4ffw9grzUR9mgPvYHu+5Elesb+HtBfMI6ZZ6PpZTQQY2CyrzdvLRFvMuXwitCvRLBcYTvdLOizmlB3Z2C6/dcNtFLIH08ZMXtrKaRaspIZh9vwSupBtcZZQO/MCUZwAnKsuabJXEcFcNCgXRBJef5SysEU7XqlA5R1yxgfbKPKzWtc4QjhRH46oOG6KPblzD9CwwLfSZnedd96upzkiK9WzoCGZJw34xo5xDc2mMp49lK4ZWriVSTNGDT6ZUDqdX20KNLULbadoLepAX2iMntinfKm54LnGsGih+k7JnwNYe7oWU0sw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=My75PGENlWfbVHlfphNJlEyU6jeENqbuZ1dsnZ+xcu0=;

b=MesE8kRwoPVg4HbKemQsZclTXP587zMyIVbmtMRsbPyM1PvBBhE45k39du9q91W/8H7aHkdlyTI79HhW/Gc7YYWdz87p3zmK1A7+KkiUxmwyZmbQaSU1M5a4M32wMGp8wtRmdl5h9G+jyu2KTw7/nnSRo8H5VwEVp6yQFG0H4VYKisYZThEoFFP8bSo5TIfPTvkJvGpy/mx3nPYNoudu8ngrr94hvYRtdPlrXdUJZ2x9WyzfuRbWR0nf26juKpBsVoE2xOEycT1P88AdX9gRJr+OkUfDgL86MJTneKxRBcK10XPkb9Is+PjijJtHspGs27R+30ZaFRw1TC9Fv9bfyA==

Received: from TYZPR01MB6036.apcprd01.prod.exchangelabs.com

(2603:1096:405:77::10) by TYZPR01MB4595.apcprd01.prod.exchangelabs.com

(2603:1096:400:25f::7) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7762.28; Mon, 15 Jul

2024 18:57:00 +0000

Received: from TYZPR01MB6036.apcprd01.prod.exchangelabs.com

([fe80::db6f:9be9:74ad:158e]) by TYZPR01MB6036.apcprd01.prod.exchangelabs.com

([fe80::db6f:9be9:74ad:158e%2]) with mapi id 15.20.7762.027; Mon, 15 Jul 2024

18:57:00 +0000

From: Lancho Harry

To: Lancho Harry

Subject: Re: Send report.?

Thread-Topic: Send report.?

Thread-Index: AQHa1uiiYrHIUGJBcEGPeOrxTIQGJbH4I4st

Date: Mon, 15 Jul 2024 18:57:00 +0000

Message-ID:



References:









































































In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn:

[YMzbmI1hIbrzKTB5PqqJPf6zKKjXfe6F7Zh37S5pd+mmbb3jH21xx8VjtEO0RC3eKfSUSs2pjEI=]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYZPR01MB6036:EE_|TYZPR01MB4595:EE_

x-ms-office365-filtering-correlation-id: 476af3e7-b7aa-438b-86f4-08dca4ffe851

x-microsoft-antispam:

BCL:0;ARA:14566002|8060799006|461199028|19110799003|3412199025|440099028|102099032|1710799026;

x-microsoft-antispam-message-info:

KMj8Eq1CQv+akDgvSFBbw/qrIqdbAb4hs1/zwkWfFmE/tAiCc4J5GQkoUJDz6mbTBISaFkWHohRElND3ODYYRFfG9QPOasZ/ZbQpNlgxHx2M7wje0pbVCLCrrqcXD4bqmLiJ97GyQQXhe7C4kggeDQfuF4inYjz/Iqp6qLyXVYKSxLf/G7a/gaArZZZy6GS1p+yOED9WpWSq9XDoqlP+ES7ep370gkbNitMxXblJjCIUhtBxfOdwWEQvbAaQzudRPWhYKCeBuFoWkK5xENTZ67NZojVrJlamgCW2tIJsbMDgr0H37Vdigch9Cw3stCBaUVazqkEvhvGO63TgfRU3kUng0iCY+xRn2HHfaVoAc6Wytu9nxwQ7uuUYelJ++DZbWqCBoga4YBwychSY6vcUumqMX/b87OFXylylvaX1J71uNFxmYsi+XVUbPMJKRmpEFmToaS7KWL0Wcv4h5CI5KI4JkobbKTuFE057t3w9cxZGW6nX24kTLKDkdGDiJ66RViVOA5xDAgxuowUi++FJZGxMigXfyMLc1LatKJc2GbaNd2bbILqaNULCHnJdW8VC4JvEq5xmrO7v3gaDMtLJBdwIbEjr1XQfioLMDx1oHWjusVzZwPHGQgRjl0jDObCxQq5ZatiCYXla2ufuIWKfyTeApQ3ovxyViS9IBTq4gZw=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?bmM1UkkyMXJUQXowT3AvQVRzcENJVExSaFkwMjVhRnZNV2JzajEwUGZsVm9H?=

=?utf-8?B?TklmUzVBZ2VXTk9rUmtNK3pGVzBFTTBkR0xMblM3QSt0bk5CckRtQWpTb2R4?=

=?utf-8?B?WEVDZ1J5REIyazlWOWxCMFkvZlVtRFFsNW8yWjZvd0xKeXFMcjE2Z3hOMGNO?=

=?utf-8?B?cE1Oek41aWt1N3VlYXlMN0ozL1NuSkZnWVhaUmEzWWJCOVhwZ1RoeUhSSW44?=

=?utf-8?B?cHJRMXZjSXRYdHdocHFObno2K2xpdlQ2VW1Xa3YvYWd5LzZVSTc2VVZ2UXBy?=

=?utf-8?B?ODQrLy9FQjRCaytyU1JiWVNxL01GSnNlVjFNRWVJY21uWWlQWXhoQkNyTVB2?=

=?utf-8?B?WnR1TnYvU2VZVWRBeXcxMFFiZ2hpM0M3OFdFU29VRE1YRFJ3WEFBTDBkWVA0?=

=?utf-8?B?VS9GcjhTRE95Q20rQ0lvc0V3OEozbkF3bnpGa2ZVN05vSGljTnh1SXpiQnBE?=

=?utf-8?B?YVRJUVlnaTdmc1JBZWNyTlFudTV2ZkZpbVhvUjYrWlViUzlMTkFXTlhPWVh6?=

=?utf-8?B?VWRYMWFxWU5aOGFxaER5LzRtT3c1VzdWUlI0T0RmSis1R0NYN1E0bEIzM3o2?=

=?utf-8?B?dzNlbERkVVlvQXBWZmplTElSektUTEpSQTVhK0lCNTBKcThuTjVpdlhyWEp4?=

=?utf-8?B?K1BGTWxjSVpFeVZRTGhVS295TnE4b2UybUlUL0FJZ3ByUVBucXpjSmJ4VEVN?=

=?utf-8?B?c3BKbURkUk5LQi9kUU5JNWVmZFVPV2R3VU94TXVpdEJuTHJSSXZueGlnVlJs?=

=?utf-8?B?eDRRM1Y1T2lNWXVzN2hNTCthbG93OXd6N005MUtPaWZFeUJ1VUhGc2VnWU44?=

=?utf-8?B?RHB2TlFINlpJdGJXMkFaVXFQWms3Y0M4OC9uYWJ0SkcraDE2TGVXWmRMMmp4?=

=?utf-8?B?L096YmNzclg4dXh2S2YzZUFIcU9MZzlPRHBHY09MWkNTdmt6UzhPdDRyVXYv?=

=?utf-8?B?TkVEM0h6M2RMREZ1NDlMdXZ4ajYxZm9sZHVjK1VBZ1dRcGZCcThLczF0eVFx?=

=?utf-8?B?QjhiejVZaDBuUzYvRTYyZ2VtWG0xUTY1TEdMbWp1cDF6NTNxUTRncmtXU3Ni?=

=?utf-8?B?T2hMcFdtKzFzdVdlQkZPbkpoTlcyTnVlNGRHWXhzSnhCZ0tKQklLOVkyUXJj?=

=?utf-8?B?ZmVuNUdnZDR0clp5Zi90QzMvSzZ6My9qNENVQTFVY2prNWlOQjZ6Q1JPU1dj?=

=?utf-8?B?VlJ2WXlTQ2U3RW5QZW16TTY3ZDI5eVlCZE5LNFh5SVdwU0NlZW1PQnYrckdB?=

=?utf-8?B?Y0t0QUxyWENWa1p3K3hyUVNEOEtHejVTRUd6RUlSU1RocFNScUhPcklUUjcr?=

=?utf-8?B?N2Y2Q1V0UWo4bUxIMnQ3ZVBvcVRVMHRNRjVjZWFFTlNxOXk1UHgrL2ovMVZ2?=

=?utf-8?B?TFZrcG1nY0pHS09mN0k2a2VlbG8zUnExK1R3T2o2cytKcUFOMStmUzNkSWJL?=

=?utf-8?B?a205VWJ1SXU5YkpacXY4Uk9JL1IxdU9lWXJBLzRuS09nTWVvTFJQYzgyOTJz?=

=?utf-8?B?bjRydStkQkVIVkVDMzkzaDRZTngxODk3akhkdmg5NVBhcGtBQW54aXZDVnRM?=

=?utf-8?B?V3A0NlNJbWw4QzN4K2RXT3N0cmc5R0xXTVJzSVVZT0xwN2kyM1VnQm1pY2RF?=

=?utf-8?B?dm45eXlRcC9pKzRLZGhTWktaYzNaQllOS0h6Q2IrMFVlaWoxdDZ6Ui82bDgx?=

=?utf-8?B?ektLQitrc0Y4QTNRa1hvZkFaMU5ad2JpbWJ5b1RUYTIrN0tTZDhJblNNNFpY?=

=?utf-8?Q?eJrFJXXc5kA76NFDaE=3D?=

Content-Type: multipart/alternative;

boundary="_000_TYZPR01MB603637292C43A418EDCDF64DE9A12TYZPR01MB6036apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYZPR01MB6036.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 476af3e7-b7aa-438b-86f4-08dca4ffe851

X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Jul 2024 18:57:00.0613

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR01MB4595



--_000_TYZPR01MB603637292C43A418EDCDF64DE9A12TYZPR01MB6036apcp_

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: base64



SGksDQoNCkkgYW0gc3RpbGwgd2FpdGluZyBmb3IgeW91ciByZXBseS4NCg0KUGxlYXNlIE1heSBJ

IHNlbmQgeW91IGEgcXVvdGU/IElmIHlvdSBhcmUgSW50ZXJlc3RlZCENCg0KVGhhbmsgeW914oCC

DQoNCkZyb206IExhbmNobw0KU2VudDogRnJpZGF5LCBTZXB0ZW1iZXIgMjksIDIwMjMgOToyMCBQ

TQ0KU3ViamVjdDogU2VuZCByZXBvcnQNCg0KSGksDQoNCkkgcmVjZW50IHZpc2l0IHlvdXIgd2Vi

c2l0ZS4NCg0KTWF5IEkgc2VuZCB5b3UgYXVkaXQgcmVwb3J0IG9mIHlvdXIgYnVzaW5lc3Mgd2Vi

c2l0ZSENCg0KWW91IGNhbiBnZXQgeW91ciBXZWJzaXRlIG9uIHRoZSAxc3QgcGFnZSBvZiBHT09H

TEUuDQoNClNvLCBpZiB5b3UgYXJlIGludGVyZXN0ZWQsIEkgd2lsbCBzZW5kIHlvdSBhIHByaWNl

IGxpc3QuDQoNClRoYW5rIHlvdSwNCkxhbmNobw0K



--_000_TYZPR01MB603637292C43A418EDCDF64DE9A12TYZPR01MB6036apcp_

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i

dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxzdHlsZSB0eXBlPSJ0ZXh0L2NzcyIgc3R5bGU9

ImRpc3BsYXk6bm9uZTsiPiBQIHttYXJnaW4tdG9wOjA7bWFyZ2luLWJvdHRvbTowO30gPC9zdHls

ZT4NCjwvaGVhZD4NCjxib2R5IGRpcj0ibHRyIj4NCjxkaXYgY2xhc3M9ImVsZW1lbnRUb1Byb29m

IiBzdHlsZT0iZm9udC1mYW1pbHk6IEFwdG9zLCBBcHRvc19FbWJlZGRlZEZvbnQsIEFwdG9zX01T

Rm9udFNlcnZpY2UsIENhbGlicmksIEhlbHZldGljYSwgc2Fucy1zZXJpZjsgZm9udC1zaXplOiAx

MnB0OyBjb2xvcjogcmdiKDAsIDAsIDApOyI+DQpIaSw8L2Rpdj4NCjxkaXYgc3R5bGU9ImRpcmVj

dGlvbjogbHRyOyB0ZXh0LWFsaWduOiBsZWZ0OyB0ZXh0LWluZGVudDogMHB4OyBmb250LWZhbWls

eTogQXB0b3MsIEFwdG9zX0VtYmVkZGVkRm9udCwgQXB0b3NfTVNGb250U2VydmljZSwgQ2FsaWJy

aSwgSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyBmb250LXNpemU6IDEycHQ7IGNvbG9yOiByZ2IoMCwg

MCwgMCk7Ij4NCiZuYnNwOzxicj4NCkkgYW0gc3RpbGwgd2FpdGluZyBmb3IgeW91ciByZXBseS48

YnI+DQombmJzcDs8YnI+DQpQbGVhc2UgTWF5IEkgc2VuZCB5b3UgYSBxdW90ZT8gSWYgeW91IGFy

ZSBJbnRlcmVzdGVkITxicj4NCiZuYnNwOzxicj4NClRoYW5rIHlvdeKAgjxzcGFuIHN0eWxlPSJm

b250LWZhbWlseTogQ2FtYnJpYSwgR2VvcmdpYSwgc2VyaWY7Ij48YnI+DQo8YnI+DQpGcm9tOiBM

YW5jaG88YnI+DQpTZW50OiBGcmlkYXksIFNlcHRlbWJlciAyOSwgMjAyMyA5OjIwIFBNPGJyPg0K

U3ViamVjdDogU2VuZCByZXBvcnQ8L3NwYW4+PC9kaXY+DQo8ZGl2IGlkPSJ4X3hfeF94X3hfeF94

X3hfeF94X3hfeF94X3hfYXBwZW5kb25zZW5kIj48L2Rpdj4NCjxkaXYgaWQ9InhfeF94X3hfeF94

X3hfeF94X3hfeF94X3hfeF9kaXZScGx5RndkTXNnIiBkaXI9Imx0ciI+PC9kaXY+DQo8ZGl2IGlk

PSJ4X3hfeF94X3hfeF94X3hfeF94X3hfeF94X3hfeF94X3hfeF94X2FwcGVuZG9uc2VuZCI+PC9k

aXY+DQo8ZGl2IGlkPSJ4X3hfeF94X3hfeF94X3hfeF94X3hfeF94X3hfeF94X3hfeF94X2RpdlJw

bHlGd2RNc2ciIGRpcj0ibHRyIj48L2Rpdj4NCjxkaXYgc3R5bGU9ImRpcmVjdGlvbjogbHRyOyBm

b250LWZhbWlseTogQ2FtYnJpYSwgR2VvcmdpYSwgc2VyaWY7IGZvbnQtc2l6ZTogMTJwdDsgY29s

b3I6IHJnYigwLCAwLCAwKTsiPg0KPGJyPg0KSGksPC9kaXY+DQo8ZGl2IHN0eWxlPSJkaXJlY3Rp

b246IGx0cjsgZm9udC1mYW1pbHk6IENhbWJyaWEsIEdlb3JnaWEsIHNlcmlmOyBmb250LXNpemU6

IDEycHQ7IGNvbG9yOiByZ2IoMCwgMCwgMCk7Ij4NCiZuYnNwOzwvZGl2Pg0KPGRpdiBzdHlsZT0i

ZGlyZWN0aW9uOiBsdHI7IGZvbnQtZmFtaWx5OiBDYW1icmlhLCBHZW9yZ2lhLCBzZXJpZjsgZm9u

dC1zaXplOiAxMnB0OyBjb2xvcjogcmdiKDAsIDAsIDApOyI+DQpJIHJlY2VudCB2aXNpdCB5b3Vy

IHdlYnNpdGUuPC9kaXY+DQo8ZGl2IHN0eWxlPSJkaXJlY3Rpb246IGx0cjsgZm9udC1mYW1pbHk6

IENhbWJyaWEsIEdlb3JnaWEsIHNlcmlmOyBmb250LXNpemU6IDEycHQ7IGNvbG9yOiByZ2IoMCwg

MCwgMCk7Ij4NCiZuYnNwOzwvZGl2Pg0KPGRpdiBzdHlsZT0iZGlyZWN0aW9uOiBsdHI7IGZvbnQt

ZmFtaWx5OiBDYW1icmlhLCBHZW9yZ2lhLCBzZXJpZjsgZm9udC1zaXplOiAxMnB0OyBjb2xvcjog

cmdiKDAsIDAsIDApOyI+DQpNYXkgSSBzZW5kIHlvdSBhdWRpdCByZXBvcnQgb2YgeW91ciBidXNp

bmVzcyB3ZWJzaXRlITwvZGl2Pg0KPGRpdiBzdHlsZT0iZGlyZWN0aW9uOiBsdHI7IGZvbnQtZmFt

aWx5OiBDYW1icmlhLCBHZW9yZ2lhLCBzZXJpZjsgZm9udC1zaXplOiAxMnB0OyBjb2xvcjogcmdi

KDAsIDAsIDApOyI+DQombmJzcDs8L2Rpdj4NCjxkaXYgc3R5bGU9ImRpcmVjdGlvbjogbHRyOyBm

b250LWZhbWlseTogQ2FtYnJpYSwgR2VvcmdpYSwgc2VyaWY7IGZvbnQtc2l6ZTogMTJwdDsgY29s

b3I6IHJnYigwLCAwLCAwKTsiPg0KWW91IGNhbiBnZXQgeW91ciBXZWJzaXRlIG9uIHRoZSAxc3Qg

cGFnZSBvZiBHT09HTEUuPC9kaXY+DQo8ZGl2IHN0eWxlPSJkaXJlY3Rpb246IGx0cjsgZm9udC1m

YW1pbHk6IENhbWJyaWEsIEdlb3JnaWEsIHNlcmlmOyBmb250LXNpemU6IDEycHQ7IGNvbG9yOiBy

Z2IoMCwgMCwgMCk7Ij4NCiZuYnNwOzwvZGl2Pg0KPGRpdiBzdHlsZT0iZGlyZWN0aW9uOiBsdHI7

IGZvbnQtZmFtaWx5OiBDYW1icmlhLCBHZW9yZ2lhLCBzZXJpZjsgZm9udC1zaXplOiAxMnB0OyBj

b2xvcjogcmdiKDAsIDAsIDApOyI+DQpTbywgaWYgeW91IGFyZSBpbnRlcmVzdGVkLCBJIHdpbGwg

c2VuZCB5b3UgYSBwcmljZSBsaXN0LjwvZGl2Pg0KPGRpdiBzdHlsZT0iZGlyZWN0aW9uOiBsdHI7

IGZvbnQtZmFtaWx5OiBDYW1icmlhLCBHZW9yZ2lhLCBzZXJpZjsgZm9udC1zaXplOiAxMnB0OyBj

b2xvcjogcmdiKDAsIDAsIDApOyI+DQombmJzcDs8L2Rpdj4NCjxkaXYgc3R5bGU9ImRpcmVjdGlv

bjogbHRyOyBmb250LWZhbWlseTogQ2FtYnJpYSwgR2VvcmdpYSwgc2VyaWY7IGZvbnQtc2l6ZTog

MTJwdDsgY29sb3I6IHJnYigwLCAwLCAwKTsiPg0KVGhhbmsgeW91LDxicj4NCkxhbmNobzwvZGl2

Pg0KPC9ib2R5Pg0KPC9odG1sPg0K



--_000_TYZPR01MB603637292C43A418EDCDF64DE9A12TYZPR01MB6036apcp_--

Web / SEO/ App spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 15 Jul 2024 16:50:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sTUVe-00000000Ncx-1Cr9

for dave@doctor.nl2k.ab.ca;

Mon, 15 Jul 2024 16:49:30 -0600

Resent-From: The Doctor

Resent-Date: Mon, 15 Jul 2024 16:49:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn7nam10olkn2031.outbound.protection.outlook.com ([40.92.40.31]:26358 helo=NAM10-BN7-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sTPzw-000000005Ke-1Nzz

for sales@nk.ca;

Mon, 15 Jul 2024 12:00:31 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Xgg+AyM6/p5b+2T/9QoRvJJB8q/1C1qRr17D/Klx4G98AyFxbGllgIrZUh4kG3jX+QdR0/jX4Ij4ThX+YB2aBvDIvTPpj7YVtKFYJFxN8j8za+dh2RNUTzLoFCBKiYd+3GPlVo9H30xN1apEnlWMODWuN/NrWzAQFMwSjSUSHyLUU+KeWmCTuvDsjs9HmhZ0+J0RuHD3nEpVLftzImNJbsWoINjdFf6APG4EBzqtezu4mF5lOr5b+ms3bsUha8zzE4Pxq+b6BiiEtlX2X0X5aB9PIPzo4kgFU+OjsANcESf3So19UTMTHytbU9SHef/GlYrwhciYTW2782FxodFgUQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=4/XJbxXxkLybaOldioORt6T0f7l31c3M03olI9uAuXc=;

b=XINfv32GDRDXDm1MQQ3Mfd3cCG1eAbPzlhh71UENQj6JG5nn8qylcYY/rCwuH9w0q3OI1UB3Sc/M2QyBWqVQgxmYrKQuo5B3APmO8wokEfVfkAmgD/6S6sM3W6mo2aRP952MkwitywUbuXSwQYyhmG50LZxXvzEBbyaqnE1OjGz4jjV1741+QvBhslt8uIE+pWGJxvsnQfi2Fcd9UhLv/l66bDGhegPTQuvI7R3zSVtYNMByzNNzOdPlr2vkY25VxrpPfiAouwNV5BVzMGqOAexkTF5l1m+oYuOxdydmS49J6qb0CY360PZPBMXCsaHbhQIh6L+xYLctlD7EJIFElQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=4/XJbxXxkLybaOldioORt6T0f7l31c3M03olI9uAuXc=;

b=J9cntxfGzFGTh6qKqi4jiNA/edOL1/MM9Ez43cLQniDAYGk9KKyBD0o6FPngR4TNwBkATxx9YdC8MkX0SgJBsD/wetlxJi5UuqJsXwo/TU94sAmeRYxGjxfZvVEtMXcgEipWU/eJVCxoP78Aj6FZrVR+t/GHKUHp1UmA9oeC5vidBk5a+RBJtoej9o+ijaQNt5zT5FJgm8IRewW+V02G7XMVGcgmpjxcxRlenc4/OYPrdFNBLNs/8tapZt7o2qPjOpSCRUHa5bu6pU8ZQOWrmsQqzOPuhKSeb+84Eg3bLYwNJShHpaq4QiMEzQByH6qwn67ONPuAggeXqlRVHIAlnQ==

Received: from PH8PR18MB5383.namprd18.prod.outlook.com (2603:10b6:510:256::18)

by MW3PR18MB3611.namprd18.prod.outlook.com (2603:10b6:303:58::19) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7762.28; Mon, 15 Jul

2024 17:57:59 +0000

Received: from PH8PR18MB5383.namprd18.prod.outlook.com

([fe80::c013:3cc1:b770:491f]) by PH8PR18MB5383.namprd18.prod.outlook.com

([fe80::c013:3cc1:b770:491f%6]) with mapi id 15.20.7762.025; Mon, 15 Jul 2024

17:57:59 +0000

From: Edwin Davis

Subject: SEO

Thread-Topic: SEO

Thread-Index: AQHa1uBwuce2QasesEqEg/d+0AJGog==

Date: Mon, 15 Jul 2024 17:57:58 +0000

Message-ID:



Accept-Language: en-US, es-MX

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn:

[d6ebLB7DRSSl5LxAebMskNEblYlMad5KU/mP5QK1XaKs+jQTKHpb/pz8iwq2z1IEuCwypxlzMWc=]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PH8PR18MB5383:EE_|MW3PR18MB3611:EE_

x-ms-office365-filtering-correlation-id: 81d3387b-954e-4d44-c70f-08dca4f7a915

x-microsoft-antispam:

BCL:0;ARA:14566002|461199028|8060799006|19110799003|440099028|3412199025|102099032;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?enpwVnRqkRDFb/2Byysm0fQu1V4AkAZVESLrIqqA8lEARjs8U8pST3ISJR?=

=?iso-8859-1?Q?6pBlyHbcdhCOd4JqR3GEU2AqWFQjfD3p2bpQ3YiZ+/KPuRi4PCX164edla?=

=?iso-8859-1?Q?4ALvgn7SzFpIsYXpEYhyVoZmcgdfRa2t3esv2Z4Z9AULCMZ2wO80eBo73C?=

=?iso-8859-1?Q?6WDq7OPRPU4D5gWT2OTCiHpIqPj5ZlCQJ6uId7/JQQtGK0NML/ohiPs48P?=

=?iso-8859-1?Q?Om3V1QTSpVWyFBF3ScIPU6fe7/X4Gj/OA4VutcSDKJ4DM1Q+gZlavp5aCO?=

=?iso-8859-1?Q?OgBovfWwFzX8dzRagS+xXKn+Qi2f1erUY9Rv+dm/Q/LYVT0MSQkxmS+bPn?=

=?iso-8859-1?Q?fBLBXm/fe/vlysph5AefnF04juV024hz4bwt6K4RZnqmz8W/ykuNrzl52w?=

=?iso-8859-1?Q?p/F53e2lQBr7Y5J31MeTFbEwgKrViqS/Lgs/FRhEJ5NZz/2MI/FAaVqNB5?=

=?iso-8859-1?Q?t9paKypTgtj93700fenqqpNZsCV/UyfW4IhhJLMEEc0EDv2av0AH9zTNQE?=

=?iso-8859-1?Q?55tLhTScnIjyg94JOy76PwEIRQW8pgnrciAAxyBFcr2bRU66h3M4rnFfm+?=

=?iso-8859-1?Q?HAlvUssAUlPv1DvDAqt0Blsdbk14kdSwfCWpDkQZKYMPI0eo9HanvLkcyQ?=

=?iso-8859-1?Q?LYlBcNGAozVxGh2W+tt8lidd+7FG5i9aukgBvH0Fz8vJxS4BMEPY9Vjn7s?=

=?iso-8859-1?Q?mGbm9BcFpJDQvpQR58KasuutqtPRBSP8xkGyw3wKlW88rvzHXQx/dnmmwA?=

=?iso-8859-1?Q?NrAbhK2AdlXwqQXXtlz523xeRUPvaWW/qYArZuQsYQBB/aobDOnfgP5Bv0?=

=?iso-8859-1?Q?MQMCN0zipVwjiOLdCy63TwkizLESBrRRmiogHpVxYJhtED00tpfsJHCQeD?=

=?iso-8859-1?Q?u1H3eB0J/Gq4g84rpnhPpqOO322FswPW7jbhTRqXyvfplpIGMKDgkLPoza?=

=?iso-8859-1?Q?uX5jfvkqAVj3+9Novcf/g4Ub2k18QS9LJ8k8eDSeXo31Q1fh+fIs0fthxL?=

=?iso-8859-1?Q?McDtc90tFFApxnkr3thOlfWv6oPgx8CGXyubDG/yHf4HjhUAJDsXILKZ8z?=

=?iso-8859-1?Q?sKhioxVQunHHmBIJ2LXmPLQDwcnKbOSs6dwOKNjUYh47FAb+5kSDhbIEUA?=

=?iso-8859-1?Q?0GqbU/J+Mp3tj2khTt+8I104lm0to2Pv1JA73nBPZ6asO6KjjDlkgGxrxN?=

=?iso-8859-1?Q?jiE+vOa+pHACFsP4l2Lj79UgLDFGEE9awbfjTatjLNxd+15mMXhEqHMZ3x?=

=?iso-8859-1?Q?560Q0gI+C9auk1pqaLh2e3Rl76YF8fSWLiXylj1VHVUdqA8c5vCTg0ydzz?=

=?iso-8859-1?Q?sl+HsvrhkMjGCeDbCAjktegiX4gJX2sUtYstMKBhNoyI0fP81Pzw1L/dFM?=

=?iso-8859-1?Q?pfFMfqPeK8?=

Content-Type: multipart/alternative;

boundary="_000_PH8PR18MB5383E22A08685A2E7E40EA6CB0A12PH8PR18MB5383namp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PH8PR18MB5383.namprd18.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 81d3387b-954e-4d44-c70f-08dca4f7a915

X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Jul 2024 17:57:58.0298

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW3PR18MB3611

X-Spam_score: 9.8

X-Spam_score_int: 98

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hey, I found your business through Google, and I would like

to discuss how our company's SEO services can benefit your business. you'd

get so many prospects/new clients every day. So, would you be interested

in hearing more?



Content analysis details: (9.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.40.31 listed in dnsbl.ahbl.org]

[40.92.40.31 listed in dnsbl.ahbl.org]

[40.92.40.31 listed in dnsbl.ahbl.org]

[40.92.40.31 listed in dnsbl.ahbl.org]

[2603:10b6:510:256:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10b6:510:256:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10b6:510:256:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10b6:510:256:0:0:0:18 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.40.31 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.40.31 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.40.31 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.40.31 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10b6:510:256:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:256:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:256:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:256:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:256:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:256:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:256:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:256:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[40.92.40.31 listed in will-spam-for-food.eu.org]

[40.92.40.31 listed in will-spam-for-food.eu.org]

[40.92.40.31 listed in will-spam-for-food.eu.org]

[40.92.40.31 listed in will-spam-for-food.eu.org]

[40.92.40.31 listed in will-spam-for-food.eu.org]

[40.92.40.31 listed in will-spam-for-food.eu.org]

[40.92.40.31 listed in will-spam-for-food.eu.org]

[40.92.40.31 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.40.31 listed in list.dnswl.org]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[40.92.40.31 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.92.40.31 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.40.31 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[campbell1849oiv(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} SEO



--_000_PH8PR18MB5383E22A08685A2E7E40EA6CB0A12PH8PR18MB5383namp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hey,



I found your business through Google, and I would like to discuss how our c=

ompany's SEO services can benefit your business. you'd get so many prospect=

s/new clients every day.



So, would you be interested in hearing more?



Thanks You,

Edwin



--_000_PH8PR18MB5383E22A08685A2E7E40EA6CB0A12PH8PR18MB5383namp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








y: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans=

-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hey,



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

 



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

I found your business through Google, and I would like to discuss how our c=

ompany's SEO services can benefit your business. you'd get so many prospect=

s/new clients every day.



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

 



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

So, would you be interested in hearing more?



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

 



ont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; =

color: rgb(0, 0, 0);">

Thanks You,



y: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans=

-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Edwin








--_000_PH8PR18MB5383E22A08685A2E7E40EA6CB0A12PH8PR18MB5383namp_--