Ukrainian dating spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 19 Jul 2024 09:13:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sUpHV-00000000HEB-3e50

for dave@doctor.nl2k.ab.ca;

Fri, 19 Jul 2024 09:12:25 -0600

Resent-From: The Doctor

Resent-Date: Fri, 19 Jul 2024 09:12:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dbaeur03olkn2052.outbound.protection.outlook.com ([40.92.58.52]:17505 helo=EUR03-DBA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sUol7-000000006bT-0kNQ

for doctor@doctor.nl2k.ab.ca;

Fri, 19 Jul 2024 08:39:02 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=XrHZD7T8vYFXejjk6bt2tDvauyRdDDIYOX0spN2rf1RbS2MgiWZHgXRXGLSNhlAnou68PNB5vphH5a3+18U3kPeiFtzLVrxiYHCcuens1++ylr0+GbQMMpvVFo9ppAvqgcPpTPzConuGh7TXNt5KYWlP9grCWLgOXSlHPJBvwmZYMB6iWKOFAnSD+L7jPb8AdO6LsoS4Fd7y1W/fHH08rCPWJEhqtNkWe0ZoxrUJ8/DhKalGIo/iD8SeeALPQECC4bWDuGNjO2qYXi01FlpOPpvqU+TMclHS7Km9m+m2KoHCD5tJUz2ByKcsfSofgc2m8kMGAiVXNIGZBGjPU7aujg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=UbylyuHc8OcpU/uYZSepv0/JMYndanO50rLHvLMy3bo=;

b=eZ3EXpUHnXKWbjpuzDnEmTHKZw/13kjFkvw3SxH+Ibb6zIhXupVsSU2n+NS771ZGPI5cJyI0K3al4H6QCDJJuj8fY/TvynUFgVNM044c4sE+zR+9Cvdc7odZu0/X+IM+ZZQXobsm1gBt6aYwcNQ2NZvQodMa6t8uCcYD74L/LqXDFV6yFPuj295LVBy0kThck+YVPCXPNAxDxg2Cipiph0WFyf1rVBHnG202qDjyQCH4ad69BSfhWnZC7rSS7G0RyDnEAnXR24w2fp0LalCgt88DEagvNvS6x7odtrgwvhIXG9M4x+0JpKEUIESMKHPTD1HQaCJPEkZS3VmV8OIzbg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=UbylyuHc8OcpU/uYZSepv0/JMYndanO50rLHvLMy3bo=;

b=UMBUfPLvj5wG2nNlx40ivhEpzDBoFx9iS92Kj/qMXwzPUskufD03+cXzAZ+AoieGJpgjU3N4vT9AjgQ3xrUhq2JD/jXwXbHo9q92PNJIPtWgV4ZUDL5yx13d3yJYFyF5LhWLFM8dodHn2tjwuKy9SHeGsWdOxlKetbSwDWprceK6I3RKu6dTmnReW+NRguelSuk8wHFWXsMW7QTpV/TRpbi3g3IeRtyKQJPF2H+30JWDi+wHouIvj5DtzmAyN4qyH/uVaEJ6anoUFhcK1nERhaiO1lhHIoKdQ8nsX6bWSbopS6ICRJiVeE3WkdGBAkDXogwb2/GtYss/sewU7c1jOA==

Received: from GV2PR10MB6695.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:150:b3::6)

by GV1PR10MB8319.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:150:1d3::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7784.16; Fri, 19 Jul

2024 14:36:41 +0000

Received: from GV2PR10MB6695.EURPRD10.PROD.OUTLOOK.COM

([fe80::52a5:f1e7:f579:95ab]) by GV2PR10MB6695.EURPRD10.PROD.OUTLOOK.COM

([fe80::52a5:f1e7:f579:95ab%7]) with mapi id 15.20.7784.017; Fri, 19 Jul 2024

14:36:41 +0000

From: "rodak.trena932@hotmail.com"

Subject: Single Ukrainian woman are in your area!

Reply-To: "rodak.trena932@hotmail.com"

X-Mailer: Mozilla Thunderbird

Date: Fri, 19 Jul 2024 16:36:37 +0200

Message-ID:



Content-Type: multipart/alternative;

boundary="----=_NextPart_000_8B09_B0560863.AB61A63A"

To: Undisclosed recipients:;

X-TMN: [pZREfhx9WBKQLnGw96DheogamDpVMncG]

X-ClientProxiedBy: MI2P293CA0002.ITAP293.PROD.OUTLOOK.COM

(2603:10a6:290:45::17) To GV2PR10MB6695.EURPRD10.PROD.OUTLOOK.COM

(2603:10a6:150:b3::6)

X-Microsoft-Original-Message-ID: <1.986b9beaa67f292f93b4@DESKTOP-7K7S413>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: GV2PR10MB6695:EE_|GV1PR10MB8319:EE_

X-MS-Office365-Filtering-Correlation-Id: c893f4a2-6e48-4b3f-9fdf-08dca8003321

X-Microsoft-Antispam:

BCL:0;ARA:14566002|42300799015|12050799009|19110799003|461199028|9400799024|8060799006|4601999012|440099028|3412199025|4302099013|56899033|1602099012;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?eXNkTGNhdWQwUjNFSFJxeEhVSHhzTE9CU3RmOWhFNDNESDcwUFdGNlcwTjhL?=

=?utf-8?B?a2VnSXJWVGlSdHRJRW9NcW85MzVkbDNXUlVkN3JTMENpaTYyajRZalorTmVX?=

=?utf-8?B?Vm94U29mcHczYWtyTXd6VVh3UE1UdnZtMGE5SWEyaW9JY1RVczkzTVFwWmo1?=

=?utf-8?B?bWd6blBSWnM1YTE3dE1Tb2JIN1BBQjBFbVJycE5jay94TDdFdnhzRmdsTmJH?=

=?utf-8?B?VE4wM3lhMFNOMm13NUNmdkFWdGowKzFDQmlGNUQ2eGkxQ0RkYllJaVRyK2l4?=

=?utf-8?B?WkJja2RjYTlKL2hvR29pS1YrdlNNQ3JYSVVlZjBHOTMwUEFXY0pNVDgweUVu?=

=?utf-8?B?N3dWTDZTeWlyYUd5YjlzdTJTYzNhWTdSMUpkTEs5RjA1c05hRkU3b1QxQzla?=

=?utf-8?B?M0RGMEpmWWYyajhPZyswZFhoOUpnei9ZVXlxaXBjT0syYVh0V0pIREk5YWpx?=

=?utf-8?B?OWNXaEhaNEJ1cGpoSmhZeldqUDFTR1BUV2tkZW93cHVGcGc0ajdEbTBTcW11?=

=?utf-8?B?UXFXbkFKQUczQmF2M1BrVzltbktSeFA2NkdYV3hVVmVkbzZQMUI4Sno5OHFG?=

=?utf-8?B?WXhJMy8vcDJjYmF1Z1RmR1AzNDZUMU0zTllxVWZLWHc4WGRNTlFhVGoyZkND?=

=?utf-8?B?M2ljMTZCanVUUGFTbzVpQVRCNWN6aXpIc0xJRUxtaFhMSy9NWjFNa05Kd1Fa?=

=?utf-8?B?cGVWdFZONWJjdkNoNGNlbW8yaHRwMmx5bitGRDFrS3dxMzkxZllGSFQ4THZa?=

=?utf-8?B?NFNsY0I1S0t1RVNjRTEyWFlneTgwTWw1REJCTkp3b3lrbmtOdlN2dUIwL1Zu?=

=?utf-8?B?OGlxTVcyYTFIbjE3dG5kMGtyajF3N1JBRWxXZyszdXZxcm9aWDhZZTg2YXU2?=

=?utf-8?B?Zm9wbTcvbnFlZDRYejhGYnpOczJITDVoM24vOVJIRWc2Y2pHMzNDVmRwOS9Q?=

=?utf-8?B?UDB2MmhHT2o1cGpjTU5qbUhnZ2dXdnR5VzRBbWRPV1B0RWJSblVUbG80N29E?=

=?utf-8?B?UWQrQ1plS3BjT21SY0dtQzBTOElWVkhGSzJCNFRMNVpna0tCSzJZaFYvdVA5?=

=?utf-8?B?SFFRSUNSb1NhcWRaSXF5Q1p2cWwzNmhMTE03YjFLWS91TVF0YStmTHh3QU5h?=

=?utf-8?B?L1kyWm1TdGUrK2hydGVYR0dBVXQ2RXZ6aTUzZzlVTEpwLzBBTys3bExGUXM0?=

=?utf-8?B?S0NKK3V4THh1WUJ4VGdXR0JGam1qamZ0eDNHKzdQTGN1NDVnMFBITTJPUTVj?=

=?utf-8?B?WmFJOWF1OGdEWVU5L2Zwb05iTXFXQXdNalZGaWNHOThNY0JyWk1mcVFncVBx?=

=?utf-8?B?cHhvMVh4SW9DclU5ejVUb2t6SmozVTlnQWhWbUk2TU9mb1RjWFBYWFpqK1ll?=

=?utf-8?B?dVM4cnVjQVVvZ0F6ZTk5QW4ycndCNGVwTTY2NDdCeVZjSmEwdU9VT0F4UGRn?=

=?utf-8?B?bWtmTzBaQ2pvU2ZOS3NBOVpxdHhxRVVsRnFOVUIxUnRHTGhDY3NSVitRbWsv?=

=?utf-8?B?RGxLRGdTa3RkMERMVkpCZ0xPT1BKOUgyU3B4b2dlSFNJMTF6aWp5blpKL1dJ?=

=?utf-8?B?RHIxRHcwbGdWTnhQaDdqdHNldlRibUVhWkhkMVRwckgyNEptQUNuUTRFcXo4?=

=?utf-8?B?U0ZuMHVIYXV4MUZtUzNaSVVlMlE5Qmk1bjIxMDkwU1drU251SHdFR1htK3Zs?=

=?utf-8?B?L0s2YWFYcGNsUTU5b2RpSDQ1ZkZvenNVdS9JME1RalFCalgzKzYrWkM2NHNG?=

=?utf-8?B?STFnOVVSNEhNaGVNdDJab3psRCtTQjcycGVyOEI2UE1FbTJLTXJNaXZWakxS?=

=?utf-8?B?a0xXdjhXdnRvTHhvRzBiRkFCRndCWjl2VGs2SzVTZjdCVWoreGZSVEt2MXBx?=

=?utf-8?B?eFVMVmxtd25EeFlka25ZMUZ4Wnc2QzZrTFhzSGxMR3E3Ui9HUEVZR0RiL1lS?=

=?utf-8?B?YjVzMGFZblI1N3BSdCs1SFY0WHFpQVpsN0xzWW51ajlXSTY5bko2bWQxSGlV?=

=?utf-8?B?MEgyb0IwRzRSYTV5WVV4L2o4M1V6MnZjMXA4Y3A1S1FsZ3JkQndYb3JUWUpR?=

=?utf-8?B?aHYyd2xNMTh0OXRVT3dmV0xOY1BvM2Vob2w0WEhiYmdpU3NJOHFBUmVjUDdR?=

=?utf-8?B?Zm1sWXhkYjlWOXFqamNyR2hVb1RtSGw5OHpaZjc1bnphWXJKb0paRHFJK1BS?=

=?utf-8?Q?73AGD9/d8Yq0n38mJsasC9s=3D?=

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?KzNlbEZid01DMU0rVGdyRnBzNEhTYWQxMXFNU0RMVFk1NFJPcnR2QVdrUytr?=

=?utf-8?B?N043U2dYZ3dRSlFpcmZ0VzBXanRnQ3A0MW9pdlRJR3hUUXJaRGtDZnZUdWEr?=

=?utf-8?B?UmdyTHJUUHg1RVgxMlI1eVFkeTFmbk9hY1NwTUhkOUFLWmNjNG96S3hXVm5q?=

=?utf-8?B?endCY1AyUW5aaEdScVAxQkRsWG16SnZEY1BEMjYrWFRDb1FoSy9YcXhaN3JB?=

=?utf-8?B?Q2ZtQjVORHF3eXdwM0VyS09uOEdpditnY0hRQmtRSkVpUk1mUnlyRkkzb3Ir?=

=?utf-8?B?aWRIRWxOQXN4a2diOWFYN2NCZk9aMnRybkFFOTN5QnBKblVRZjVjTGo1V0ZE?=

=?utf-8?B?V09IRld3ZDlXRURLcnBrR3pzM2E0cGFhT090OTNFclBQb3pjSFYyaGJGQkVh?=

=?utf-8?B?Q3NzM1FTV0g5V3dWdFJwN0VOdVFSNHN3UVRjc2lCZWdFNmtxcC9iVFRNclpC?=

=?utf-8?B?cGhSdm84blBuUlhCRnJ5RlNlWUFMMFFxWmpFN1dtcC9RWFY0NStHMDh4cDVB?=

=?utf-8?B?bzRYOWU2NHgzWEFPQXVSMWVURlNkTnFucjNIZHlHbTlFcUV6ekZPT3JicnNj?=

=?utf-8?B?Tm5sRUdENjVsWHhZM1lhOTZJUXBvVUFISUNtUUtwU0Z1SllqM2QvUHlKbmtv?=

=?utf-8?B?ZGNma1VTVjM5VjhPc1U4S0FDWHYwVy9NMzVkbUw5RHJ3TEZzOEZTaXhxTkRy?=

=?utf-8?B?ek55ZkZNSkRKOS9rMXl2bENxM3pGUks3YUp0bEtuaTZVL1BHb0t6Ymt5RGRP?=

=?utf-8?B?TVg5NEVQNnZoY1JPZXdyZzUvbTNrVTlmSnBXVU5LekFsamllV2FiYzI4YWlw?=

=?utf-8?B?YXF3UGZiWGhJbUNIQmZMSnpuU2NKZDRIVmd1ejBwc0VvVUxueEpoWmFKcC9p?=

=?utf-8?B?NzRHL01sRDkyMnMwTEVTbHZZWXgwMzE4aWZhcTZocTVJV3hDdWVXSkloWHF1?=

=?utf-8?B?WG8zRGlhODNPRExlV1oxREpSeVl2NXloYkR0ZVRFVXh0OE1hK2RyTzJvcENj?=

=?utf-8?B?cmN4eFQ1N3hZRXZrYTNLelc1YSsxVmdQaWJkSW5aRGh2T1dGajhuaHEyRlQ3?=

=?utf-8?B?Yzd2RUFSUEd3ak8wd1FrNy8wRHJJZk5PN0hhWW5tOGlJdkJzcmZSQ2ZweVUx?=

=?utf-8?B?UWplMnBrSmY1RlgzUU9oQXhnaGxDTkJqK0VqMTk4Rkp0N2JhOGpneXIxRHZj?=

=?utf-8?B?QVg0S0E3ZkRXcWpyczRHUlU4dDliZXFsbXlVem9EZFROZEFybHRReTkvOHJD?=

=?utf-8?B?ZDM3a3R0SG1ZbGhGYmlIZGo2ZmpVNDU4MmlSRzRvVGhGQzdkTkM3ZjdVa0tD?=

=?utf-8?B?RW9lTHN1NElLOGkvMGZCVWJSWFBjTWZlNHV1bWc0OXlUOXMzc1cwczJ1bnlQ?=

=?utf-8?B?ZDYzclcvRHpKOXJsdi83ck5wLytXTkNlSzVFL2pRRDJRQmhrQ011UzQyYnhk?=

=?utf-8?B?QVNkNXRLK3IzNDFhOGd1b2licWVhRlRmTFhxTkd3ZjhNWUtsaWkwM0g1dkx2?=

=?utf-8?B?YXh1UFYrYytpeHFrRkNFMGdVa2hlL1ZlajJnS1hhNEd6VE1QMVRoU0xuNHMr?=

=?utf-8?B?V2k4T09kN0dMVVR2RHZ3cEwrUy90elBNWWJrV2JnTkFnVUdIRHlUSXhUMjhn?=

=?utf-8?B?MTdXTjJIWUlvZjRsSGxwTHNGWCtyblU0eVJvaHE4TFZkcmkxVzZlbldZc2Fo?=

=?utf-8?Q?K9OUlvcZyPhfwL3u4Iq7?=

X-OriginatorOrg: sct-15-20-7719-20-msonline-outlook-4359a.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: c893f4a2-6e48-4b3f-9fdf-08dca8003321

X-MS-Exchange-CrossTenant-AuthSource: GV2PR10MB6695.EURPRD10.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Jul 2024 14:36:40.8509

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV1PR10MB8319

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: FindUkrainianGirl Are you living in the United Kingdom, United

States, Canada, Australia, or New Zealand and eager to meet a Ukrainian woman

near you? We are excited to announce our new website designed to help you

con [...]



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.58.52 listed in dnsbl.ahbl.org]

[40.92.58.52 listed in dnsbl.ahbl.org]

[40.92.58.52 listed in dnsbl.ahbl.org]

[40.92.58.52 listed in dnsbl.ahbl.org]

[2603:10a6:150:b3:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:b3:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:b3:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:b3:0:0:0:6 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.58.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.58.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.58.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.58.52 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10a6:150:b3:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:b3:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:b3:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:b3:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:b3:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:b3:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:b3:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:b3:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[40.92.58.52 listed in will-spam-for-food.eu.org]

[40.92.58.52 listed in will-spam-for-food.eu.org]

[40.92.58.52 listed in will-spam-for-food.eu.org]

[40.92.58.52 listed in will-spam-for-food.eu.org]

[40.92.58.52 listed in will-spam-for-food.eu.org]

[40.92.58.52 listed in will-spam-for-food.eu.org]

[40.92.58.52 listed in will-spam-for-food.eu.org]

[40.92.58.52 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.58.52 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.58.52 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[rodak.trena932(at)hotmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[rodak.trena932(at)hotmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[rodak.trena932(at)hotmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.6 FORGED_MUA_MOZILLA Forged mail pretending to be from Mozilla

Subject: {SPAM?} Single Ukrainian woman are in your area!



------=_NextPart_000_8B09_B0560863.AB61A63A

Content-Type: text/plain;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



FindUkrainianGirl





Are you living in the United Kingdom, United States, Canada, Australia, or =

New Zealand and eager to meet a Ukrainian woman near you? We are excited to=

announce our new website designed to help you connect and date Ukrainian w=

omen who have relocated to these countries due to recent events.



Our platform boasts a thriving community with over 250,000 users, mainly w=

omen. We are actively seeking men to join and become part of this vibrant c=

ommunity.





Join for Free





FindUkrainianGirl





Our site is equipped with a variety of features such as chat, video calls, =

phone calls, stickers, and many more options for you to explore. Sign up fo=

r free now with this exclusive limited-time offer. All users are verified a=

nd authentic. Join us today!





Remove me here



































=



------=_NextPart_000_8B09_B0560863.AB61A63A

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




style=3D"font-weight:normal;" id=3D"docs-internal-guid-7013a564-7fff-cdc8-=

5a08-a30bf9bcc9df">=0A=


argin-bottom:0pt;">=0A=


=3D"font-size:15pt;font-family:Arial,sans-serif;color:#1155cc;background-co=

lor:transparent;font-weight:700;font-style:normal;font-variant:normal;text-=

decoration:underline;-webkit-text-decoration-skip:none;text-decoration-skip=

-ink:none;vertical-align:baseline;white-space:pre-wrap;">FindUkrainianGirl<=

/span>
=0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Are you living in the United Kingdom, United States, Canada, Australia, or =

New Zealand and eager to meet a Ukrainian woman near you? We are excited to=

announce our new website designed to help you connect and date Ukrainian w=

omen who have relocated to these countries due to recent events.
=0A=

=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Our platform boasts a thriving community with over 250,000 users, mainly wo=

men. We are actively seeking men to join and become part of this vibrant co=

mmunity.
=0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:700;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Join for Free
=0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


=3D"font-size:15pt;font-family:Arial,sans-serif;color:#1155cc;background-co=

lor:transparent;font-weight:700;font-style:normal;font-variant:normal;text-=

decoration:underline;-webkit-text-decoration-skip:none;text-decoration-skip=

-ink:none;vertical-align:baseline;white-space:pre-wrap;">FindUkrainianGirl<=

/span>
=0A=

=0A=


=0A=


argin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:400;font-style:normal;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Our site is equipped with a variety of features such as chat, video calls, =

phone calls, stickers, and many more options for you to explore. Sign up fo=

r free now with this exclusive limited-time offer. All users are verified a=

nd authentic. Join us today!
=0A=

=0A=


=0A=


t;margin-bottom:0pt;">=0A=


ackground-color:transparent;font-weight:700;font-style:italic;font-variant:=

normal;text-decoration:none;vertical-align:baseline;white-space:pre-wrap;">=

Remove me

e;">
c;background-color:transparent;font-weight:700;font-style:italic;font-varia=

nt:normal;text-decoration:underline;-webkit-text-decoration-skip:none;text-=

decoration-skip-ink:none;vertical-align:baseline;white-space:pre-wrap;"> he=

re 
=0A=

=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=0A=


=



------=_NextPart_000_8B09_B0560863.AB61A63A--

Web / SEO/ App spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 19 Jul 2024 00:31:00 -0600

Received: from mail-pl1-f180.google.com ([209.85.214.180]:59705)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sUh8N-000000006MB-2d9S

for dave@doctor.nl2k.ab.ca;

Fri, 19 Jul 2024 00:30:32 -0600

Received: by mail-pl1-f180.google.com with SMTP id d9443c01a7336-1fbe6f83957so14287995ad.3

for ; Thu, 18 Jul 2024 23:28:33 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1721370508; x=1721975308; darn=doctor.nl2k.ab.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=AkRKQ9TxjTpj7HC0Qnugo2DrQQbYMO9jZZx1BEenzzc=;

b=Td+DBkF0JMDl0Krvi2OO6v6+6ftFHae+v5Tz2pFeaohsFi0/TTG7By2hiV7DC1fqPw

ueUpE3ENWywood4sALJeDN1ijGPzeIFR9mq8/Wy1S041T0zMlTnsq+rADcNnDv6U9w+F

jFDZvBYKQTiSqAPEdk4cPDEqmJWg/jzfRze+lxBjUabw7cARBe+WZbtToDXx4sj2kVk1

KR0/H74GDBnu2U3RmooJjzBrBxpSamCD5SDN9573r+jXBe9Hv5juXxlGyqCbbigqvRfc

A1XCBtoQRW64P4UDizhhk/GxY90LrVUo9KIvXmI7BG8Q2S5PA6uUExqcpMFTG2qM6O9W

y1mQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1721370508; x=1721975308;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=AkRKQ9TxjTpj7HC0Qnugo2DrQQbYMO9jZZx1BEenzzc=;

b=O4ruMKD9pQhVpmVu+6A5e++EyAfvWZExfrWET/XLjapmMzd7hOupKg/oGhJKUv/i19

qoxCF/dXx0VuhooEdqnhlmamosxj9BnMLDFGdCEoT946OvnInsrYJAWuW1TXzxn4WPJa

ymB0zmK3STLYUxNTq5x9UEd/S0IDGL1n3PVJJoRmhAVX9oekTJIeoIE6kYYpjRBsI0g0

YtjP5o+WfAISRyVRGxzpTsD7ERw9x8tuey6yoS7RNTdw5rOniVC4aKpV3OqAQrurnUL1

RBwH6QEuwT9QYeER4NLzlCsgVwI6YTuZ4TBofro9Kx2HuwpKLwvnc2BHhsHLloBalqTC

EgoA==

X-Gm-Message-State: AOJu0YznCelWE21PBJ8NSINpYmBukQRB5ptXzmthDwDzxYnaeaOUQMvQ

GQgFPB0XzCtJ7lHKTLAT/Q9Zh3mXm+t8IPZMEGMDThMjkBgRHWn6117kIg==

X-Google-Smtp-Source: AGHT+IFrk3Xppoxuy+0ysSW2t4C1DKPC3J/fkyTsI2kWof1rODYfZaN4nG6hysu5Km79GOqIVG0gLw==

X-Received: by 2002:a17:903:1205:b0:1f7:123e:2c6f with SMTP id d9443c01a7336-1fc4e15ef13mr61259555ad.37.1721370507010;

Thu, 18 Jul 2024 23:28:27 -0700 (PDT)

Received: from adminPC ([122.161.76.139])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-1fd64d1a18dsm6334305ad.207.2024.07.18.23.28.25

for

(version=TLS1 cipher=ECDHE-ECDSA-AES128-SHA bits=128/128);

Thu, 18 Jul 2024 23:28:26 -0700 (PDT)

From: "Nancy"

To:

Subject: quote

Date: Fri, 19 Jul 2024 11:58:11 +0530

Message-ID: <030601dad9a4$de28ca10$9a7a5e30$@com>

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_0307_01DAD9D2.F7E10610"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdrZpGPqz1jA0dO3QIGQ8BchGw5+BA==

Content-Language: en-us

X-Spam_score: 5.5

X-Spam_score_int: 55

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I was Checking your website on behalf of this email 'dave@doctor.nl2k.ab.ca'

and saw you have a good design and it looks good, but it's not ranking on

Google. I want your permission I would like to send you a SEO report with

packages showing you a few things to improve these search results. These

things are not difficult, and my report will be very specific [...]



Content analysis details: (5.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.180 listed in dnsbl.ahbl.org]

[209.85.214.180 listed in dnsbl.ahbl.org]

[209.85.214.180 listed in dnsbl.ahbl.org]

[209.85.214.180 listed in dnsbl.ahbl.org]

[122.161.76.139 listed in dnsbl.ahbl.org]

[122.161.76.139 listed in dnsbl.ahbl.org]

[122.161.76.139 listed in dnsbl.ahbl.org]

[122.161.76.139 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.180 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.180 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.180 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.180 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.214.180 listed in will-spam-for-food.eu.org]

[209.85.214.180 listed in will-spam-for-food.eu.org]

[209.85.214.180 listed in will-spam-for-food.eu.org]

[209.85.214.180 listed in will-spam-for-food.eu.org]

[209.85.214.180 listed in will-spam-for-food.eu.org]

[209.85.214.180 listed in will-spam-for-food.eu.org]

[209.85.214.180 listed in will-spam-for-food.eu.org]

[209.85.214.180 listed in will-spam-for-food.eu.org]

[122.161.76.139 listed in will-spam-for-food.eu.org]

[122.161.76.139 listed in will-spam-for-food.eu.org]

[122.161.76.139 listed in will-spam-for-food.eu.org]

[122.161.76.139 listed in will-spam-for-food.eu.org]

[122.161.76.139 listed in will-spam-for-food.eu.org]

[122.161.76.139 listed in will-spam-for-food.eu.org]

[122.161.76.139 listed in will-spam-for-food.eu.org]

[122.161.76.139 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.180 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.5 ONE_WORD_SUBJECT Subject with only one lower-case word

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.180 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[chepngetichsharoo(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} quote



This is a multi-part message in MIME format.



------=_NextPart_000_0307_01DAD9D2.F7E10610

Content-Type: multipart/alternative;

boundary="----=_NextPart_001_0308_01DAD9D2.F7E10610"





------=_NextPart_001_0308_01DAD9D2.F7E10610

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,



I was Checking your website on behalf of this email

'dave@doctor.nl2k.ab.ca' and saw you have a good design and it looks good,

but it's not ranking on Google.



I want your permission I would like to send you a SEO report with packages

showing you a few things to improve these search results. These things are

not difficult, and my report will be very specific. It will show you what

needs to be done to move you up in the high rankings.



Would that be okay? If yes, I'd be happy to send you Packages.



Thanks

Nancy



































--



























Reply Forward



























































































































------=_NextPart_001_0308_01DAD9D2.F7E10610

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">






charset=3Dus-ascii">






















style=3D'font-size:11.0pt;font-family:"Georgia","serif";

color:#26282A;background:#F9FAFB'>Hi,

style=3D'font-size:11.0pt;

font-family:"Georgia","serif";color:#26282A'>





I was 
class=3Dyiv6376417716gmail-bg-yellow-100>
#E5E7EB 1.0pt;

padding:0in'>Checking
=

your  we

style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#26282=

A;

background:#F9FAFB'>bsi
style=3D'font-size:11.0pt;font-family:"Georgia","serif";

color:#26282A;background:#F9FAFB'>te on behalf of this email =

‘dave@doctor.nl2k.ab.ca’

and saw you have a good design and it looks good, but it’s not =

ranking on

G

MT","serif";color:#26282A;

background:#F9FAFB'>oog

style=3D'font-size:11.0pt;font-family:"Georgia","serif";

color:#26282A;background:#F9FAFB'>le.

style=3D'font-size:11.0pt;

font-family:"Georgia","serif";color:#26282A'>





I want your per

style=3D'font-size:11.0pt;font-family:DotumChe;color:#26282A;background:#=

F9FAFB'>mission
style=3D'font-size:11.0pt;font-family:"Georgia","serif";color:#26282A;bac=

kground:

#F9FAFB'> I would
style=3D'font-size:10.5pt;font-family:"Georgia","serif";

color:#26282A;background:#F9FAFB'>like to send

style=3D'font-size:

11.0pt;font-family:"Georgia","serif";color:#26282A;background:#F9FAFB'> =

you a

SEO report with pa

style=3D'font-size:11.0pt;font-family:"Arial Rounded MT =

Bold","sans-serif";

color:#26282A;background:#F9FAFB'>cka

style=3D'font-size:11.0pt;

font-family:"Georgia","serif";color:#26282A;background:#F9FAFB'>ges =

show

class=3Dyiv6376417716gmail-bg-yellow-100>
style=3D'font-size:11.0pt;

font-family:"Georgia","serif";color:#26282A;border:solid #E5E7EB 1.0pt;

padding:0in'>in

style=3D'font-size:11.0pt;font-family:"Georgia","serif";

color:#26282A;background:#F9FAFB'>g you a few things to improve these =

search

results. These th

style=3D'font-size:11.0pt;font-family:"Courier New";

color:#26282A;background:#F9FAFB'>ing

style=3D'font-size:11.0pt;

font-family:"Georgia","serif";color:#26282A;background:#F9FAFB'>s are =

not di

style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#26282=

A;

background:#F9FAFB'>fficult
style=3D'font-size:11.0pt;font-family:

"Georgia","serif";color:#26282A;background:#F9FAFB'>, and my report will =

be

very specific. It will show you what needs

style=3D'font-size:11.0pt;

font-family:"Bookman Old =

Style","serif";color:#26282A;background:#F9FAFB'>to be

done

style=3D'font-size:11.0pt;font-family:"Georgia","serif";

color:#26282A;background:#F9FAFB'> to move you up in the high =


style=3D'font-size:11.0pt;font-family:"Bell =

MT","serif";color:#26282A;background:

#F9FAFB'>rankings.
style=3D'font-size:11.0pt;font-family:"Georgia","serif";

color:#26282A'>





Would that be okay? If yes, I'd be =


style=3D'font-size:11.0pt;font-family:"Book =

Antiqua","serif";color:#26282A;

background:#F9FAFB'>happy to send

style=3D'font-size:11.0pt;

font-family:"Georgia","serif";color:#26282A;background:#F9FAFB'> you =

Packages.

style=3D'font-size:11.0pt;font-family:"Georgia","serif";color:#26282A'>
r>


style=3D'font-size:11.0pt;font-family:"Georgia","serif";

color:#26282A'>


Thanks


Nancy





 





 





 





 





 





 





 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>
style=3D'font-family:"Baskerville Old Face","serif"'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>
class=3D"m-4606421222128777855m-2772129916170501847m430087061070871432m24=

63740414869080667gmailsignatureprefix">
style=3D'font-family:"Constantia","serif"'>--






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal>
style=3D'font-size:10.0pt;font-family:"Georgia","serif";color:black'>&nbs=

p;






class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal>
style=3D'font-family:"Cambria =

Math","serif";color:black'> 






class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal>
style=3D'font-family:"Calibri","sans-serif";color:black'> =


style=3D'font-family:"Calibri","sans-serif"'>
id=3D"_x0000_i1027" =

src=3D"cid:image001.jpg@01DAD9D2.7DA0CA20">






class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal>
style=3D'font-size:1.0pt;font-family:"Calibri","sans-serif"'> 
>
style=3D'font-size:1.0pt;font-family:"Calibri","sans-serif"'>
width=3D274

height=3D5 id=3D"_x0000_i1026" =

src=3D"cid:image002.jpg@01DAD9D2.7DA0CA20">






class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal

style=3D'line-height:15.0pt;background:white'>
style=3D'font-family:"Calibri","sans-serif"'>   
style=3D'color:#444746'>Reply Forward






class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal>
style=3D'font-family:"Calibri","sans-serif"'> 






class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal>
style=3D'font-family:"Cambria","serif"'>
id=3D"_x0000_i1025"

src=3D"cid:image003.jpg@01DAD9D2.7DA0CA20">






class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal>
style=3D'font-size:10.0pt;font-family:"Cambria","serif"'> 
>




class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal>
style=3D'font-size:10.0pt;font-family:"Cambria","serif"'> 
>




class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal>
style=3D'font-family:"Cambria","serif"'> 






class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal>
style=3D'font-family:"Cambria","serif"'> 






class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal>
style=3D'font-family:"Cambria","serif"'> 






class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal>
style=3D'font-family:"Cambria","serif"'> 






class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal>
style=3D'font-family:"Cambria","serif"'> 






class=3Dm-4606421222128777855m-2772129916170501847m430087061070871432m246=

3740414869080667xmsonormal> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>
style=3D'color:white'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 






style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> 












 





 





 





 

















------=_NextPart_001_0308_01DAD9D2.F7E10610--



------=_NextPart_000_0307_01DAD9D2.F7E10610

Content-Type: image/jpeg;

name="image001.jpg"

Content-Transfer-Encoding: base64

Content-ID:



/9j/4AAQSkZJRgABAQEAYABgAAD/2wBDAAoHBwgHBgoICAgLCgoLDhgQDg0NDh0VFhEYIx8lJCIf

IiEmKzcvJik0KSEiMEExNDk7Pj4+JS5ESUM8SDc9Pjv/2wBDAQoLCw4NDhwQEBw7KCIoOzs7Ozs7

Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozv/wAARCAAFAAgDASIA

AhEBAxEB/8QAHwAAAQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUFBAQA

AAF9AQIDAAQRBRIhMUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkKFhcYGRolJicoKSo0NTY3

ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWm

p6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QAHwEA

AwEBAQEBAQEBAQAAAAAAAAECAwQFBgcICQoL/8QAtREAAgECBAQDBAcFBAQAAQJ3AAECAxEEBSEx

BhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElK

U1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3

uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEAPwDO0YrB

pMhjBVNg3IDw2R3oooq+SLexg6k+5//Z



------=_NextPart_000_0307_01DAD9D2.F7E10610

Content-Type: image/jpeg;

name="image002.jpg"

Content-Transfer-Encoding: base64

Content-ID:



/9j/4AAQSkZJRgABAQEAYABgAAD/2wBDAAoHBwgHBgoICAgLCgoLDhgQDg0NDh0VFhEYIx8lJCIf

IiEmKzcvJik0KSEiMEExNDk7Pj4+JS5ESUM8SDc9Pjv/2wBDAQoLCw4NDhwQEBw7KCIoOzs7Ozs7

Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozv/wAARCAAFARIDASIA

AhEBAxEB/8QAHwAAAQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUFBAQA

AAF9AQIDAAQRBRIhMUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkKFhcYGRolJicoKSo0NTY3

ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWm

p6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QAHwEA

AwEBAQEBAQEBAQAAAAAAAAECAwQFBgcICQoL/8QAtREAAgECBAQDBAcFBAQAAQJ3AAECAxEEBSEx

BhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElK

U1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3

uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEAPwD1AIo7

UEAjHI+hoorYyAKBS7RkH0oooAWmgAUUUALjjGM/WkCqOgAoooAXFLRRQAgABJA69aCaKKAAcdKD

2oooAKDwelFFAAKWiigBO2aM0UUABOKTPtRRQAoOadtyhbPQUUUARl8dqUNntRRQMXNMWTJIx0NF

FAEg5Bpu6iigQ4DKhs0YoooAiEh81kxwDipM/Ix9BRRQBD5zegooooGf/9k=



------=_NextPart_000_0307_01DAD9D2.F7E10610

Content-Type: image/jpeg;

name="image003.jpg"

Content-Transfer-Encoding: base64

Content-ID:



/9j/4AAQSkZJRgABAQEAYABgAAD/2wBDAAoHBwgHBgoICAgLCgoLDhgQDg0NDh0VFhEYIx8lJCIf

IiEmKzcvJik0KSEiMEExNDk7Pj4+JS5ESUM8SDc9Pjv/wAALCAAFAQwBAREA/8QAHwAAAQUBAQEB

AQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUFBAQAAAF9AQIDAAQRBRIhMUEGE1Fh

ByJxFDKBkaEII0KxwRVS0fAkM2JyggkKFhcYGRolJicoKSo0NTY3ODk6Q0RFRkdISUpTVFVWV1hZ

WmNkZWZnaGlqc3R1dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXG

x8jJytLT1NXW19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/9oACAEBAAA/APV8Rj+Fv++v/rUuU/un

8/8A61G5R/CfzpDKB/D+tNMw/ufrTDcD+5+tILkf88/1p4uB/wA8x+dL9oH/ADzFKLkf881pwuB/

zzH50ouB/wA8x+dO88f3BS+eP7g/Ok88f3P1o88f3B+dL5w/uD86Tzx/c/Wjzh/c/Wk88f3P1pDP

/sfrSfaP9gfnTTc/7A/OkN2f+eY/Omm8P/PNaPtp/wCeY/Oj7Z/0zH50fbP+mY/OnC6/2B+dOFxn

+AfnTvN9v1o8z2/Wmlge360mR6V//9k=



------=_NextPart_000_0307_01DAD9D2.F7E10610--

CRA phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 19 Jul 2024 07:41:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sUnqF-00000000ELq-0oaf

for dave@doctor.nl2k.ab.ca;

Fri, 19 Jul 2024 07:40:11 -0600

Resent-From: The Doctor

Resent-Date: Fri, 19 Jul 2024 07:40:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail1.bellabeal.online ([86.48.6.240]:50918)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sUld0-00000000KyQ-08ZP

for sales@nk.ca;

Fri, 19 Jul 2024 05:18:30 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=s1; d=bellabeal.online;

h=MIME-Version:From:To:Date:Subject:Content-Type:Content-Transfer-Encoding:

Message-ID; i=support@bellabeal.online;

bh=IW9oowGXyDkYR2mDLqni5lChqrPj+RIr4Y9r+xRJw70=;

b=CWx1w2jRkQSx23G8m8TPvc+AK6AxI+p8NyWTIaOJgUKJgNsxgWu7fy9Dio4WO7yK86L1STeQJqtk

PH2m8GMckoynWMK5Y80wsIWxBBxvg/Z7lvNWCHrpp+eEXODukXUAQN5kGXq2gAb494LnXncUgUQn

h/NVIFE33sUSq8Kka0FNC/Z3iOv/FpuUUzjGBCjd66E5TS31nifKwnvSdQlR/hal/7aelW3cvRXe

BXuxemgoXEHDIKXrPDn0Ddh29oUDx3oQ8FDCJiSHwKcuRxEKxn2rRkhKf5iZQmAKfJxk//65/K89

g/10yLiPqyrivCPXQXqPQ/XQBBzZWuPHDifFIg==

MIME-Version: 1.0

From: ACWB-Hinweis

To: sales@nk.ca

Date: 19 Jul 2024 07:16:20 -0400

Subject: The Canada Revenue Agency sent you new mail

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: quoted-printable

Message-ID: <0.0.1.D5.1DAD9CD150E4A82.0@mail1.bellabeal.online>

X-Spam_score: 17.9

X-Spam_score_int: 179

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: The Revenue Agency sent you new mail online called: NOA-ACWB

notice



Content analysis details: (17.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

[86.48.6.240 listed in dnsbl.ahbl.org]

[86.48.6.240 listed in dnsbl.ahbl.org]

[86.48.6.240 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: shamooo.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: shamooo.com]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: bellabeal.online (online)]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

2.0 MIXED_HREF_CASE Has href in mixed case

Subject: {SPAM?} The Canada Revenue Agency sent you new mail



 

=0D=0A

 

=0D=0A

The  Revenue Agency  sent=

you new mail online called:

=0D=0A

NOA-ACWB notice

=0D=0A

This=

mail may require your attention.

=0D=0A

If you have My Account, sign-in=

and click on "Mail" to read your mail.

=0D=0A

 

=0D=0A


href=3D"https://shamooo.com/" rel=3D"noopener noreferrer" target=3D_blank>Notice=

Documents.

=0D=0A

If you signed up to receive mail online but=

don't have My Account, go to the web page to register.

=0D=0A

This=

is an automated email message. Please do not reply.

=0D=0A