NetKnow Corporate Blog | Entries from Friday, August 16. 2024

Chinese products spam from Microsoft Outlook

Web / SEO/ App spam from Google Gmail

Posted by Dave Yadallee on Friday, August 16. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 16 Aug 2024 13:06:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sf2GA-00000000Pte-0XDi

for dave@doctor.nl2k.ab.ca;

Fri, 16 Aug 2024 13:05:14 -0600

Resent-From: The Doctor

Resent-Date: Fri, 16 Aug 2024 13:05:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-mw2nam04on2120.outbound.protection.outlook.com ([40.107.101.120]:54305 helo=NAM04-MW2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sf0jz-00000000GS3-38iF

for support@netknow.ca;

Fri, 16 Aug 2024 11:28:02 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=orNKmHvmBA2TdGrxhfl27kfi4kaYGQtNxhyzIWnIM2XwBzRuJLzUOvwS2wDx8WArK/8F4PQN1hKGsHq/ITDeY/w23ZD1ufwhVM5/16jloTcrJ+FNLzr8UyRbi3DjIn9wbpvuucGb7n8zT1o7u3ft6nK58/k/x9ECt4tyri1NOezw8om2R+FpHMVfUXn7R2KZCUtPDwpAG6WSjH9DAIYlN064qaRhaPtMO+a+1rHTtGPnmz6boYOWqs4qDZBzZa78WtMp1+6b4/0/RVW45c2yBCeKe6TpjmvlGlrMqQqI2kLWS5ymo8/vMgQW9mOJE6FK+W603L5M9ARaAuq1VW4LSQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=stknXISJiygmDnRvS+qLw/YVHeuIzbmdiunGF1bRIf4=;

b=RTyNR6gKfcSRhsRBwwUnQhQMKo7LcfrrPsKzzf5z4WRluJDIruIY2IRg76ovzq++kW1eAX1jiEA4akyAvxkcKzkCvJZDj6MfWsAQX3HnKcPtSr6AGlhl6pJXbAVzn5FNCpNXtVPetnoRRg0i/7CzcB7ssW4qSjO64Rc5NRHq0BcPrJdFaD03tE36pC7r46JFJ5vWclOBKtOBtE0yrH5BWw7DQOZUOMP/78psaEU1nIH42wgHK0ig3fJAMA77b6QEW8L539xYbs4MOPt4PnK9TpOaYf3tt+gTFtKTuRgIy9Ynu5ihhjC/GSwVk5ruf/d9xGcCUiqYEQissd1Z47y21Q==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

67.79.90.89) smtp.rcpttodomain=hotmail.com smtp.mailfrom=ctcd.edu; dmarc=fail

(p=quarantine sp=quarantine pct=100) action=quarantine header.from=ctcd.edu;

dkim=none (message not signed); arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ctcd.onmicrosoft.com;

s=selector1-ctcd-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=stknXISJiygmDnRvS+qLw/YVHeuIzbmdiunGF1bRIf4=;

b=nDsu59bJ9QrJXf0d95we9MRYiDcewpGGse0YF8pxqhjxwgQuMFbHoPkNnLliRk33TBZUIJ04QzN7EAVAjLgkSwDAaGW4FsBMqdm+Bl0aKJ0dUPxxNTBPR/GeD8j+4g/SI8mmV5csA9nPZde+COwhp+8DxWr2y61IgmibzHoCJEI=

Received: from MW4PR02CA0020.namprd02.prod.outlook.com (2603:10b6:303:16d::26)

by SJ0PR11MB5024.namprd11.prod.outlook.com (2603:10b6:a03:2dd::24) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7875.20; Fri, 16 Aug

2024 17:25:53 +0000

Received: from CO1PEPF000044F1.namprd05.prod.outlook.com

(2603:10b6:303:16d:cafe::df) by MW4PR02CA0020.outlook.office365.com

(2603:10b6:303:16d::26) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7875.20 via Frontend

Transport; Fri, 16 Aug 2024 17:25:52 +0000

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 67.79.90.89)

smtp.mailfrom=ctcd.edu; dkim=none (message not signed)

header.d=none;dmarc=fail action=quarantine header.from=ctcd.edu;

Received-SPF: Fail (protection.outlook.com: domain of ctcd.edu does not

designate 67.79.90.89 as permitted sender) receiver=protection.outlook.com;

client-ip=67.79.90.89; helo=mail.ctcd.edu;

Received: from mail.ctcd.edu (67.79.90.89) by

CO1PEPF000044F1.mail.protection.outlook.com (10.167.241.71) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.7849.8 via Frontend Transport; Fri, 16 Aug 2024 17:25:52 +0000

Received: from CTC-MBX03.campus.ctcd.org (172.17.139.87) by

CTC-MBX04.campus.ctcd.org (172.17.139.89) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.2.986.30; Fri, 16 Aug 2024 12:25:52 -0500

Received: from CTC-MBX04.campus.ctcd.org (172.17.139.89) by

CTC-MBX03.campus.ctcd.org (172.17.139.87) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.2.986.30; Fri, 16 Aug 2024 12:25:51 -0500

Received: from CTC-MBX04.campus.ctcd.org ([fe80::ae3f:bdfe:3bb5:1e]) by

CTC-MBX04.campus.ctcd.org ([fe80::ae3f:bdfe:3bb5:1e%12]) with mapi id

15.02.0986.030; Fri, 16 Aug 2024 12:25:51 -0500

From: "Aguilar, Rebecca"

Subject: Re: Remote Liaison Opportunity

Thread-Topic: Re: Remote Liaison Opportunity

Thread-Index: AQHa8AFXPoq4ohaFg0m6o3X8x5JBuA==

Date: Fri, 16 Aug 2024 17:25:51 +0000

Message-ID: <4a94e30cdf62474ca3947cfcd39a4946@ctcd.edu>

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [31.13.189.237]

Content-Type: multipart/alternative;

boundary="_000_4a94e30cdf62474ca3947cfcd39a4946ctcdedu_"

MIME-Version: 1.0

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: CO1PEPF000044F1:EE_|SJ0PR11MB5024:EE_

X-MS-Office365-Filtering-Correlation-Id: f3af888a-b559-47e6-77e3-08dcbe187adf

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|1800799024|36860700013|41320700013|32650700017|376014|7416014|82310400026;

X-Microsoft-Antispam-Message-Info:

=?us-ascii?Q?Rcr8SRYVN6W7YAQHZhVd46yxVOMtulqztwltCwKOWWcizSsIEpBPDHXJSVlJ?=

=?us-ascii?Q?udD4qwutmHexKPjeeIPD55QiEgV6cAaymwiI9CLe0VgWKx1mxp0CgmIDXTU3?=

=?us-ascii?Q?j0KAk4G1V5g4f+XFk3EH256kBL03iLhbef1uoiS/ZM855V1EjFvd17DkGWa8?=

=?us-ascii?Q?bmH29xYI92hhLW7xbDqWVHKsD2Sv9vmgyL6x3QFubSLW+anphdIwr2GYNE5U?=

=?us-ascii?Q?sSKNtLRIUrYdGfHmhf5zoKqlra5ck4myEg2pmsQFLi+G8sqQdQfNWUsvZlVf?=

=?us-ascii?Q?/gFNg/KPiL46L7X6NPdqE2jR3BZ7qDNm4NqIFF0Ly+GogOvvQMvNRFzEZWne?=

=?us-ascii?Q?ni4dRxOen+ZunDRqp41NKYfRryDiD/ofctRdYvREOXskmc/RBR2+vTtZt9gh?=

=?us-ascii?Q?pbhsSVOGXOVxp446D+ZoYB5d91KW+fF/Cwf1Edfs49N643yAxnqF0RSuTBh2?=

=?us-ascii?Q?GXRIqLU8mh7+GYfUc9/en5wUh+MqeFQlX3hl4/7jDq7fGCR/aG58cRjBZWpm?=

=?us-ascii?Q?h8xXk70mPVCdwWQ+sgtEILpGRXJT4CI9p9RMm64A/SPDHy0K63MALY8c5Nr1?=

=?us-ascii?Q?3TPV9h4Pd2sWZL/sn8IyJ0TqMEE4NNu01TpCdsH/sDQA79BI2mqXOFPTk5Fa?=

=?us-ascii?Q?yVZrhsSr6hp8Zsvd8llqZH7qUE/TQq77l18YtZcrVy/mwMzwvEhc5kwUDz97?=

=?us-ascii?Q?1Xzng2YLPtHMSa/1mMPMC7SMJYM6t6e9wt3ZF23kbI09qFMHCiDMGH2I6HgN?=

=?us-ascii?Q?l+Lctm7qgeycg7MCDsbLEgihDsHMDFCPj8qShyZxmnYMFM9gwiMPWfL0cxpe?=

=?us-ascii?Q?Gq/l1Fm/vO4zj9eM+NgmrU0CRpZQQNv6g7jdFsJfKgVsb8+e25VOe6ykbQ6N?=

=?us-ascii?Q?F3v6+7FsXucAWNSbpGLMY6bPzJxqR3TjrkTJqulL9I4MJU8YiPrScfdKrCIm?=

=?us-ascii?Q?xGueRRkY/RF2ArD3i+KJxWEF/w1muYEAMF2r/gihRdVOCZpg4M4kNNFXNzej?=

=?us-ascii?Q?T+p0KFvRh4BhscExN1cCeAyJXY7ijqtvsc/Y82boTLDlbGwx6q1pHnc5cATY?=

=?us-ascii?Q?DwHtn/fnC1b0MttRzp7LSfsjbkWNZYH8CGpDRTdDK0haekZhCeJDT/xkWhZV?=

=?us-ascii?Q?/Jr1r1CujzqMyi2iswsk8Pr3C033hDTdDlr9dVT/hq8Pdi/uDpPJ8tzhj/Hf?=

=?us-ascii?Q?ULFgXE1xfLQRSLOda53YcA/c1b3Y2FRY2nCX7y7f3OELoqQW6a0aQca2JHJb?=

=?us-ascii?Q?3YRZMS2Ef9PYzwOs9BwwWq1+78mc7U01nfXYQi6NRVBydRCtuCCxNsiocngg?=

=?us-ascii?Q?0BrBBN209vWBEhlICrRo+yCBGPlQULmTvneB+v/tGvJoT+0AaVBLA2hCH0qR?=

=?us-ascii?Q?C+Z5uKLNz4M8HszpOFh3TFsZpx8jq3xwXIfWLr+ShVO1G0f6aYyRZL0ik6A9?=

=?us-ascii?Q?T+3/KGTqiXTmsV0t4x+1Ptxf7WQXHqBN?=

X-Forefront-Antispam-Report:

CIP:67.79.90.89;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.ctcd.edu;PTR:syn-067-079-090-089.biz.spectrum.com;CAT:NONE;SFS:(13230040)(1800799024)(36860700013)(41320700013)(32650700017)(376014)(7416014)(82310400026);DIR:OUT;SFP:1102;

X-OriginatorOrg: ctcd.edu

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Aug 2024 17:25:52.8007

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: f3af888a-b559-47e6-77e3-08dcbe187adf

X-MS-Exchange-CrossTenant-Id: 76c3ff8e-bb8a-4be9-89e6-c53600ebbbd2

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=76c3ff8e-bb8a-4be9-89e6-c53600ebbbd2;Ip=[67.79.90.89];Helo=[mail.ctcd.edu]

X-MS-Exchange-CrossTenant-AuthSource:

CO1PEPF000044F1.namprd05.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ0PR11MB5024

X-Spam_score: 6.4

X-Spam_score_int: 64

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Can you work remotely from your region? Mutqan Steel is expanding

its services in Canada and is looking forward to partnering with you or your

business as remote liaisons to connect with our clients. The role offers

a monthly salary of $8,0 [...]

Content analysis details: (6.4 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[31.13.189.237 listed in will-spam-for-food.eu.org]

[31.13.189.237 listed in will-spam-for-food.eu.org]

[31.13.189.237 listed in will-spam-for-food.eu.org]

[31.13.189.237 listed in will-spam-for-food.eu.org]

[31.13.189.237 listed in will-spam-for-food.eu.org]

[31.13.189.237 listed in will-spam-for-food.eu.org]

[31.13.189.237 listed in will-spam-for-food.eu.org]

[31.13.189.237 listed in will-spam-for-food.eu.org]

[67.79.90.89 listed in will-spam-for-food.eu.org]

[67.79.90.89 listed in will-spam-for-food.eu.org]

[67.79.90.89 listed in will-spam-for-food.eu.org]

[67.79.90.89 listed in will-spam-for-food.eu.org]

[67.79.90.89 listed in will-spam-for-food.eu.org]

[67.79.90.89 listed in will-spam-for-food.eu.org]

[67.79.90.89 listed in will-spam-for-food.eu.org]

[67.79.90.89 listed in will-spam-for-food.eu.org]

[2603:10b6:303:16d:cafe:0:0:df listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:16d:cafe:0:0:df listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:16d:cafe:0:0:df listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:16d:cafe:0:0:df listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:16d:cafe:0:0:df listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:16d:cafe:0:0:df listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:16d:cafe:0:0:df listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:16d:cafe:0:0:df listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:16d:0:0:0:26 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:16d:0:0:0:26 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:16d:0:0:0:26 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:16d:0:0:0:26 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:16d:0:0:0:26 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:16d:0:0:0:26 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:16d:0:0:0:26 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:16d:0:0:0:26 listed in]

[will-spam-for-food.eu.org]

[40.107.101.120 listed in will-spam-for-food.eu.org]

[40.107.101.120 listed in will-spam-for-food.eu.org]

[40.107.101.120 listed in will-spam-for-food.eu.org]

[40.107.101.120 listed in will-spam-for-food.eu.org]

[40.107.101.120 listed in will-spam-for-food.eu.org]

[40.107.101.120 listed in will-spam-for-food.eu.org]

[40.107.101.120 listed in will-spam-for-food.eu.org]

[40.107.101.120 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.107.101.120 listed in list.dnswl.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.107.101.120 listed in dnsbl.ahbl.org]

[40.107.101.120 listed in dnsbl.ahbl.org]

[40.107.101.120 listed in dnsbl.ahbl.org]

[40.107.101.120 listed in dnsbl.ahbl.org]

[2603:10b6:303:16d:cafe:0:0:df listed in]

[dnsbl.ahbl.org]

[2603:10b6:303:16d:cafe:0:0:df listed in]

[dnsbl.ahbl.org]

[2603:10b6:303:16d:cafe:0:0:df listed in]

[dnsbl.ahbl.org]

[2603:10b6:303:16d:cafe:0:0:df listed in]

[dnsbl.ahbl.org]

[2603:10b6:303:16d:0:0:0:26 listed in]

[dnsbl.ahbl.org]

[2603:10b6:303:16d:0:0:0:26 listed in]

[dnsbl.ahbl.org]

[2603:10b6:303:16d:0:0:0:26 listed in]

[dnsbl.ahbl.org]

[2603:10b6:303:16d:0:0:0:26 listed in]

[dnsbl.ahbl.org]

[67.79.90.89 listed in dnsbl.ahbl.org]

[67.79.90.89 listed in dnsbl.ahbl.org]

[67.79.90.89 listed in dnsbl.ahbl.org]

[67.79.90.89 listed in dnsbl.ahbl.org]

[31.13.189.237 listed in dnsbl.ahbl.org]

[31.13.189.237 listed in dnsbl.ahbl.org]

[31.13.189.237 listed in dnsbl.ahbl.org]

[31.13.189.237 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.107.101.120 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.107.101.120 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.107.101.120 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.107.101.120 listed in dnsbl.ahbl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.107.101.120 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.1 TW_TQ BODY: Odd Letter Triples with TQ

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} Re: Remote Liaison Opportunity

--_000_4a94e30cdf62474ca3947cfcd39a4946ctcdedu_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

Can you work remotely from your region?

Mutqan Steel is expanding its services in Canada and is looking forward to =

partnering with you or your business as remote liaisons to connect with our=

clients. The role offers a monthly salary of $8,000 after taxes and can be=

managed alongside other commitments.

Interested? Please contact Mr. Asad Moten at a.moten@almutqansteels.com for=

more information on the offer.

Best regards,

Rebecca Aguilar

International Recruiter

Mutqan Steel Industries LLC

--_000_4a94e30cdf62474ca3947cfcd39a4946ctcdedu_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">

>

break-word">

10.0pt;font-family:"Arial",sans-serif;color:#222222;mso-ligatures=

:none">Can you work remotely from your region?

10.0pt;font-family:"Arial",sans-serif;color:#222222;mso-ligatures=

:none">

10.0pt;font-family:"Arial",sans-serif;color:#222222;mso-ligatures=

:none">Mutqan Steel is expanding its services in Canada and is looking forw=

ard to partnering with you or your business as remote

liaisons to connect with our clients. The role offers a monthly salary of =

$8,000 after taxes and can be managed alongside other commitments.
p>

10.0pt;font-family:"Arial",sans-serif;color:#222222;mso-ligatures=

:none">

ot;Arial",sans-serif">Interested? Please contact Mr. Asad Moten at a.m=

oten@almutqansteels.com for more information on the offer.
>

ot;Arial",sans-serif">Best regards,

"Arial",sans-serif">Rebecca Aguilar
-size:10.0pt;font-family:"Arial",sans-serif">

International Recruiter
span>

Mutqan Steel Industries LLC<=

o:p>

--_000_4a94e30cdf62474ca3947cfcd39a4946ctcdedu_--

August '24

Posted by Dave Yadallee on Friday, August 16. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 16 Aug 2024 01:28:00 -0600

Received: from mail-pf1-f178.google.com ([209.85.210.178]:59891)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1serN7-0000000055l-17Es

for dave@doctor.nl2k.ab.ca;

Fri, 16 Aug 2024 01:27:46 -0600

Received: by mail-pf1-f178.google.com with SMTP id d2e1a72fcca58-710cad5778fso1461769b3a.3

for ; Fri, 16 Aug 2024 00:25:46 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1723793140; x=1724397940; darn=doctor.nl2k.ab.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=3pGEdkVoie3qwapGCuOVxSe5/qlsOlieqomyAs9FMPE=;

b=WHo/ykpMqA4Yaq5D3n3AV59R5Kxy9v7lEhEUfKPqkUD4fl1358VyNYgp3z+UbnsmZU

xCx4wtC8/RFFzmT+ED9nWXWvq3fAJ5knMrA6Gs00XCXwPLeVX90x2KaOct6HClw5CmG1

e0Dxmi1r6DGM/2PZjwClEcT+Ih1JTfa600qIU+3KkscB6GrhV1mKMzMC0AdIeIecTM7Y

EkhhMdJkw2mX0nauAak2S0SYcapmvi6jz09jZHNTzY28xeL6UX/RYc9oTVvkwn+qw7CG

93qvK+BEmYeaKuQo7TI8CKen9z0jLkZ4Xok2z/lzEFrLCCCG1xw5L5nGWKozxMrYUsXb

b7Yg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1723793140; x=1724397940;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=3pGEdkVoie3qwapGCuOVxSe5/qlsOlieqomyAs9FMPE=;

b=REUDepUjH03bbFfGR1iutTOcJlXOWHM/9OdBgWOBuvvtN8tiyMLoI4uP57j8UenhiU

yi3VHjd9T74egxv00PrMfAdNLarbLh8HMoFsghHfx7ep4J7lk1kFwXHkYTo9BxAV05G3

lSOLBfBW0EP7tSYhOTBFz5hujxjmvsYdosezXj4EmCvqJYDWWRgRVHK1Gte8D8fA6Nvj

dNpk/WDM62WI3g9Fb/wnRsHuDN1oToLWcA+X3+7jZ/QV2wovYEbY3+FqyxOTu039R4PZ

/9nM/fBX4Ln13QF5E15xHHbnrtRL0Uvt0uVC2aJPEvUJUfALjz6efYG1ftLZKzK/21kH

KMOw==

X-Gm-Message-State: AOJu0YzfaXwnh1rB5SlCJBRpOQzQ6iYgRm37K3+pwFFkbM1UI9A0pTzU

xdTwEpPhzJQJqRPLTAIoyNJsGOY69JIq94mZ/OuywulEb+2318k0osz7Lg==

X-Google-Smtp-Source: AGHT+IETiVVQJCph9AAxOTeKqF4RbLB2D29ktATY5B7Qi4XJby0tK0lRXdz6RLgxVNT7k1RL1EprpQ==

X-Received: by 2002:a05:6a00:2da0:b0:705:97b3:4605 with SMTP id d2e1a72fcca58-713c4f3443cmr2624654b3a.25.1723793140085;

Fri, 16 Aug 2024 00:25:40 -0700 (PDT)

Received: from DESKTOP5IUHFUG ([2402:e280:4117:127:e103:d068:20c5:9f14])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-7127aef6f1csm2059576b3a.128.2024.08.16.00.25.38

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 16 Aug 2024 00:25:39 -0700 (PDT)

From: "Amal"

To:

Subject: SEO Service

Date: Fri, 16 Aug 2024 00:25:33 -0700

Message-ID: <007301daefad$7e38c000$7aaa4000$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0074_01DAEF72.D1D9E800"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdrvrUgaAFBEBA5PQDSIIa1RdH12Mg==

Content-Language: en-us

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi, We Proffer You High-Quality SEO Services At Reasonable

Charges. We will surely help you {GROW YOUR BUSINESS} without you having

to invest huge amount on SEO.

Content analysis details: (5.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.178 listed in dnsbl.ahbl.org]

[209.85.210.178 listed in dnsbl.ahbl.org]

[209.85.210.178 listed in dnsbl.ahbl.org]

[209.85.210.178 listed in dnsbl.ahbl.org]

[2402:e280:4117:127:e103:d068:20c5:9f14 listed in]

[dnsbl.ahbl.org]

[2402:e280:4117:127:e103:d068:20c5:9f14 listed in]

[dnsbl.ahbl.org]

[2402:e280:4117:127:e103:d068:20c5:9f14 listed in]

[dnsbl.ahbl.org]

[2402:e280:4117:127:e103:d068:20c5:9f14 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.178 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.178 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.178 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.178 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.178 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2402:e280:4117:127:e103:d068:20c5:9f14 listed in]

[will-spam-for-food.eu.org]

[2402:e280:4117:127:e103:d068:20c5:9f14 listed in]

[will-spam-for-food.eu.org]

[2402:e280:4117:127:e103:d068:20c5:9f14 listed in]

[will-spam-for-food.eu.org]

[2402:e280:4117:127:e103:d068:20c5:9f14 listed in]

[will-spam-for-food.eu.org]

[2402:e280:4117:127:e103:d068:20c5:9f14 listed in]

[will-spam-for-food.eu.org]

[2402:e280:4117:127:e103:d068:20c5:9f14 listed in]

[will-spam-for-food.eu.org]

[2402:e280:4117:127:e103:d068:20c5:9f14 listed in]

[will-spam-for-food.eu.org]

[2402:e280:4117:127:e103:d068:20c5:9f14 listed in]

[will-spam-for-food.eu.org]

[209.85.210.178 listed in will-spam-for-food.eu.org]

[209.85.210.178 listed in will-spam-for-food.eu.org]

[209.85.210.178 listed in will-spam-for-food.eu.org]

[209.85.210.178 listed in will-spam-for-food.eu.org]

[209.85.210.178 listed in will-spam-for-food.eu.org]

[209.85.210.178 listed in will-spam-for-food.eu.org]

[209.85.210.178 listed in will-spam-for-food.eu.org]

[209.85.210.178 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.178 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[irmabennett1950(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[irmabennett1950(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} SEO Service

This is a multipart message in MIME format.

------=_NextPart_000_0074_01DAEF72.D1D9E800

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit

Hi,

We Proffer You High-Quality SEO Services At Reasonable Charges.

We will surely help you {GROW YOUR BUSINESS} without you having to invest

huge amount on SEO.

Contact us for more information.

Many Thanks!!

Amal

------=_NextPart_000_0074_01DAEF72.D1D9E800

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">

charset=3Dus-ascii">

style=3D'font-size:11.0pt;font-family:

"Cambria","serif"'>Hi,

style=3D'font-size:11.0pt;font-family:

"Cambria","serif"'>

style=3D'font-size:11.0pt;font-family:

"Cambria","serif"'>We Proffer You High-Quality SEO Services At =

Reasonable

Charges.

style=3D'font-size:11.0pt;font-family:

"Cambria","serif"'>

style=3D'font-size:11.0pt;font-family:

"Cambria","serif"'>We will surely help you {GROW YOUR BUSINESS} =

without

you having to invest huge amount on SEO.

style=3D'font-size:11.0pt;font-family:

"Cambria","serif"'>

style=3D'font-size:11.0pt;font-family:

"Cambria","serif"'>Contact us for more =

information.

style=3D'font-size:11.0pt;font-family:

"Cambria","serif"'>

style=3D'font-size:11.0pt;font-family:

"Cambria","serif"'>Many Thanks!!

style=3D'font-size:11.0pt;font-family:

"Cambria","serif"'>Amal

------=_NextPart_000_0074_01DAEF72.D1D9E800--