Web / SEO / App spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 20 Aug 2024 11:59:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sgT7q-00000000Lhu-0OzG

for dave@doctor.nl2k.ab.ca;

Tue, 20 Aug 2024 11:58:34 -0600

Resent-From: The Doctor

Resent-Date: Tue, 20 Aug 2024 11:58:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-psaapc01olkn2107.outbound.protection.outlook.com ([40.92.52.107]:19329 helo=APC01-PSA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sgSxt-00000000Kjh-0BFl

for doctor@doctor.nl2k.ab.ca;

Tue, 20 Aug 2024 11:48:22 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=hSiZomb2ASqkVXl3uA+Ms27QB3t3SBMLeRgZkx2zIjrkdpUCfqZY4Afunuh8XDrnWjHD9RX1Ah30bJDiK1pMdFERD0/T/ZC9rC9YS+cYJpGMwJ4rrkpoTV/jZq6yB7AlHwvrP8mfL6IceLz431qPFiZF7uBb3+YuTCq7/pGv/8ScdMVUNrsEMWfsa1xFuaRGdElZ3+VCieE39Nl0OVMePRHm8DSfgIypBfg0MD2ztA8+TFmy1biWJD8m1r+vRWKgVjCB05juV+ONW1Tp2FxI5BRQZOrnLLJLh1PT3EVEeyyaXm5FpUaosTvbDzPC7hMqqtfhtHCc1uGmSzATG5OmBA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=40LITtiqhUdSveqBPaDenSOXbF1wLF99ErnW7IlXzZ0=;

b=TeDtBa3eCLfbysz/rbJNR+R3RkkO74VwAKGOTqt2kmxgoaCyXWmCKWGWm0MAPGVXPCZCRw7NqBsHP65NYyoDgjFwDhQ+xePOoNqIqp62PzlyC27gWdmtOovf2FEXzgO04Hx70UqZJFvZpDwBAqh9P/kDmyE5xBLLQW4wfdvXRD9NW2WyH8ez3/bdbv41PynCGcgh2XafzpijesvQHf0mojEZ2PBxpgAnFDPbkIhrwGkq9GEkC4ZK3RXuuukP/R2zwF3WUKzXUMZtCSqF3itXI9FEs7eFuv2qcJchsU08eVagZmYUvyQva9MM2Qzp5yVyNrykIDbyZNm1DFBY452MEg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=40LITtiqhUdSveqBPaDenSOXbF1wLF99ErnW7IlXzZ0=;

b=NquIXHfxB42LohKcHSTz60A/Bbgpt8MzbL9iJxbjVkAspOXxsx81JAacgQ3FGoEaVd1+hC8NnFFVj1qLceEQL3NLHeEijuRJ0ro86P3aPxL3XknuNNmxmSmjOfCoBlo4PSvrnQtCGg9MfUehCv1VReTSwqTu7NrbkGAd4bIf+yOzhQqtXQ5uuwLg9+bOm7wpwSwuPHtU1CuKc9xo0dNlBpQOpXtLcW6BP7f1U65U9C99v94oBqSIB46WeoWfCmj8wQui+SAp4XTxpQEQ9Lz7XKkr1EG+xeRBU3l19lYy0xV8fpjLh6UDqbnLLD6lEMUqZh2ZEMwJEpFAK7HHawBKFA==

Received: from PSAPR04MB5468.apcprd04.prod.outlook.com (2603:1096:301:9e::13)

by JH0PR04MB7463.apcprd04.prod.outlook.com (2603:1096:990:66::8) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7897.17; Tue, 20 Aug

2024 17:45:48 +0000

Received: from PSAPR04MB5468.apcprd04.prod.outlook.com

([fe80::6165:80b0:f37f:a2a3]) by PSAPR04MB5468.apcprd04.prod.outlook.com

([fe80::6165:80b0:f37f:a2a3%5]) with mapi id 15.20.7875.023; Tue, 20 Aug 2024

17:45:48 +0000

From: "Parul Tanvi"

To:

Subject: Re: Quote price !!

Date: Tue, 20 Aug 2024 23:07:57 +0530

Message-ID:



Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0C6A_01DAF356.E39A53D0"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdrzGQ4FOAOiUCKTSBqvethv7mktIQ==

Content-Language: en-in

Disposition-Notification-To: "Parul Tanvi"

X-TMN: [nJD0DdAAD2nS1eWeTXk90lKbyy82vJH7]

X-ClientProxiedBy: PN2PR01CA0089.INDPRD01.PROD.OUTLOOK.COM

(2603:1096:c01:23::34) To PSAPR04MB5468.apcprd04.prod.outlook.com

(2603:1096:301:9e::13)

X-Microsoft-Original-Message-ID:



MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: PSAPR04MB5468:EE_|JH0PR04MB7463:EE_

X-MS-Office365-Filtering-Correlation-Id: d60c2f44-4536-4103-e198-08dcc13fece7

X-Microsoft-Antispam:

BCL:0;ARA:14566002|461199028|5072599009|8060799006|19110799003|15080799003|440099028|3412199025;

X-Microsoft-Antispam-Message-Info:

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

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?us-ascii?Q?gH+RNug8INPPJ6lyjKXrPdmbYMEclFU4C7MVQbyxRqAifW61QchfotIHBDcI?=

=?us-ascii?Q?Dq8GPKFLCEYf/6aIB4Mt1dZ+tU3NUjkB52h9VqxTtYDrWkuuK8GiXDirPg+F?=

=?us-ascii?Q?zKReUoNc12sk0ukb738sjhNVdK29mfaZX4tXxskDW2+0EUHC88Zijj/AEQnv?=

=?us-ascii?Q?YTXzkreahGYFaToAocTdTGgxYjuSaG3spvkUXOQuNnqUFblCkFh1DbFnoB0z?=

=?us-ascii?Q?lS67Wym7bE1ee6Z5tqxirDcFIcW7Fe8KBLJXe6nvkgcCFt7EzNe/7d+u9mtC?=

=?us-ascii?Q?alATeDQxPXGnsvLltSRm9t2A6ZiHPONr/FImte6oDJKLKTZIaArqbvcRV8ez?=

=?us-ascii?Q?j71/xi4ChqDfF6WrcDgpftQWE6pakkobtj2igOsWr68rM10u7BM2k6L98sYi?=

=?us-ascii?Q?GdBagQ0rlQl3+FTzv3FdDVHhHwJRXubmbRyBUsc5X5JsQCuE+IsN3ruRnqlR?=

=?us-ascii?Q?xLTcTd29V4Fhx/BzqXC9ZEHfN33UHmFJbpPAsAm9f2AAc+2g6dc3Vo4ZQuus?=

=?us-ascii?Q?xSIFhu6mUssxAEffIpYuD+IxF3tzLJ3UBdhHOhaO3I9ubyLIB4QoEaL2SXBg?=

=?us-ascii?Q?KewP8bZa3kbDHgXj9E7vsO8rLQB3oT6ypVBKSZSp+Y/Zm+T2++KW0+nxZ0oS?=

=?us-ascii?Q?PV/1cNy34yssXN2/iotP3Qm7tgCoVI3QMyPXQXrmU26/ve/6X9B3Jih4fMl+?=

=?us-ascii?Q?mihKoA8GRNAHLbuxydGF/SH3UqqrFK43n5Fm8g7TXHrRQJ+pdj4edktN1jnq?=

=?us-ascii?Q?S/0fnlhGEOwAThbuGvLsH9UncEojDLovM31gRYKUHjafdQjYIAaHCI7jM6ad?=

=?us-ascii?Q?g7YguZ95P8iyb1mZW70QJXgJEYtKXxN854XZIetqTIdnwQPCMWV9B7NfBq3U?=

=?us-ascii?Q?+T99ftRXEOlG2xp29kI0xb+8j/f5guHmGUNmsu70aTfejoswqQR2Og8/TiYz?=

=?us-ascii?Q?OusmozYOK7pOyjxeDZkOBGKS7JRBWBJJhQFIs3Ft1gFTFmFT/R2+nQICZ6E1?=

=?us-ascii?Q?b1vRFAf9UY9WNfZzcpBKj1NrHf2NAlchRElQO/FLUxSAWc5/Om2bClsY/kBA?=

=?us-ascii?Q?4gyOHFVk8D+HGPaZ9pJMr9q0m4Bh4fUBbdPzKBKavD0uHSE6lZcFjSWILVKw?=

=?us-ascii?Q?tKjMm0V0mjrzVv87XYsgT2lL5mXw97GQnxDQ38Ityoi1UvHJQEKchxohEQXA?=

=?us-ascii?Q?4Adg6wt1/Dp5CpI+XTba+Ssi34eH07coGa5Jb5PWOzOqFCvdyMmv5u3oEfDi?=

=?us-ascii?Q?OnzJW6OQ+Aoa1lCgrs36?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: d60c2f44-4536-4103-e198-08dcc13fece7

X-MS-Exchange-CrossTenant-AuthSource: PSAPR04MB5468.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Aug 2024 17:45:48.8535

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: JH0PR04MB7463



------=_NextPart_000_0C6A_01DAF356.E39A53D0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,







I am still waiting for your reply.







Please May I send you plane? If you are Interested!







Thank you







From: Parul Tanvi



Sent: Monday, June 24, 2024 11:14 PM



To: 'doctor@doctor.nl2k.ab.ca'



Subject: Quote







Hi,



With your permission I would like to send you a SEO report with prices

showing you a few things to greatly improve these search results for you.







These things are not difficult, and "my report will be very specific". It

will show you exactly what needs to be done to move you up in the rankings

dramatically.







May I send you a quote? If interested.







Thanks!



Parul Tanvi





------=_NextPart_000_0C6A_01DAF356.E39A53D0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">


>




















yle=3D"font-size:10.0pt;font-family:"Calibri","sans-serif&qu=

ot;;color:#242424;

border:none windowtext 1.0pt;padding:0cm">Hi,   
e=3D"font-size:10.0pt;font-family:"Calibri","sans-serif"=

;;color:#242424">






yle=3D"font-size:10.0pt;font-family:"Calibri","sans-serif&qu=

ot;;color:#242424;

border:none windowtext 1.0pt;padding:0cm">  
"font-size:10.0pt;font-family:"Calibri","sans-serif";co=

lor:#242424">






yle=3D"font-size:10.0pt;font-family:"Calibri","sans-serif&qu=

ot;;color:#242424;

border:none windowtext 1.0pt;padding:0cm">I am still waiting for your

reply. 
i","sans-serif";

color:#242424">






yle=3D"font-size:10.0pt;font-family:"Calibri","sans-serif&qu=

ot;;color:#242424;

border:none windowtext 1.0pt;padding:0cm"> 
size:

10.0pt;font-family:"Calibri","sans-serif";color:#242424=

">






style=3D"font-size:10.0pt;font-family:"Calibri","sans-serif=

";color:#242424;

border:none windowtext 1.0pt;padding:0cm">Please May I send you =


ns-serif";color:#222222;

border:none windowtext 1.0pt;padding:0cm;background:white">plane?
>
ans-serif";color:#242424;

border:none windowtext 1.0pt;padding:0cm"> If you are Interested! 
an>
t;sans-serif";color:#242424">






yle=3D"font-size:10.0pt;font-family:"Calibri","sans-serif&qu=

ot;;color:#242424;

border:none windowtext 1.0pt;padding:0cm"> 
size:

10.0pt;font-family:"Calibri","sans-serif";color:#242424=

">






yle=3D"font-size:10.0pt;font-family:"Calibri","sans-serif&qu=

ot;;color:#242424;

border:none windowtext 1.0pt;padding:0cm">Thank you
nt-size:10.0pt;font-family:"Calibri","sans-serif";color=

:#242424">






e-height:

normal;background:white">
p> 






e-height:

normal">From:
an style=3D"font-size:10.0pt"> Parul Tanvi=






e-height:

normal">Sent:
an style=3D"font-size:10.0pt;color:black"> Monday, June 24, 2024 11:14 PM
:p>






e-height:

normal">To: 'doctor@do=

ctor.nl2k.ab.ca'






e-height:

normal">Subject:=

Quote






e-height:

normal">
p> 






lt:auto;

line-height:normal;background:white">
black">Hi,  
uot;Arial","sans-serif";color:#222222">
>




e-height:

normal;background:white">With =

your

permission I would like to send you a SEO report with prices&nb=

sp;showing

you a few things to greatly improve these search results for you. &nbs=

p;






e-height:

normal;background:white"> =

;






e-height:

normal;background:white">These

things are not difficult, and “my report will be very specific”=

. It

will show you exactly what needs to be done to move you up in the rankings

dramatically.  






e-height:

normal;background:white"> =

;






e-height:

normal;background:white">Ma=

y I

send you a quote? If interested.
color:black">






e-height:

normal;background:white"> =

;






e-height:

normal;background:white">Thank=

s!






e-height:

normal;background:white">
ound:

white">Parul Tanvi
>

















------=_NextPart_000_0C6A_01DAF356.E39A53D0--

Instagram followers spam from Google gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 20 Aug 2024 11:59:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sgT85-00000000Lis-2j7W

for dave@doctor.nl2k.ab.ca;

Tue, 20 Aug 2024 11:58:49 -0600

Resent-From: The Doctor

Resent-Date: Tue, 20 Aug 2024 11:58:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f197.google.com ([209.85.128.197]:51360)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sgSsI-00000000Kbb-17da

for sales@nk.ca;

Tue, 20 Aug 2024 11:42:33 -0600

Received: by mail-yw1-f197.google.com with SMTP id 00721157ae682-6ad26d5b061so98062677b3.2

for ; Tue, 20 Aug 2024 10:40:35 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1724175629; x=1724780429; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=EdaD60ZIq6eTre4ZGGSDNLnIIiG9HXuPi8lLd3mR91Q=;

b=jpeuXKO0OPZC50PRw48vXB4+kGj9r6WSNw7f4O6x8eo+jK54RR6q/HR3qSHuabdvnl

IVTl16Z1MuzP8r/5M0kGkY6r7UXuhVTzWgGVPmHK436WX8QDeJi2eCYAwR8WRI6I+2iD

5E0uaqC50NR2NystwhlN2wo7OWd1ctEvCJqPAvzrwI6n9VzuvQOmGH2tTsRlkJjTacSX

lDXZzYSGQheYYQhHi/OvaHS7hRVkk26pToYNOR1DYvgoOk/LaQGkhin31qQUbKxBaaQA

skgvdkX2fwa0gM7g8/sVzjrFo/EkTAmC2tDmmXGgVyNSHRXUAFXcvUyZfjwiHAbHsl0H

vu3g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1724175629; x=1724780429;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=EdaD60ZIq6eTre4ZGGSDNLnIIiG9HXuPi8lLd3mR91Q=;

b=eTgB9Z3e2SV8PwkaoDXAdvk63cxpymeQfB14iuiRygGu3+cA6O9C6dNODn+HSjq9Hi

nubwVtHg5T2ZImOqekeF0bx9zL2uQe0NfWY49usbQzW1FSL3JY0DKsYFW2m8DAc/xNsT

XW46SUZm/h7nFm555UOws0e0YYi0U8ihUZoYubu5+mV5RcBdxaYn5uZ4moiUaJXACgMj

QhrFAwnGekdAnPyLObZrG75fJsLw/BrJ8QNtilkvRJsMv1c23cWnMgTDqHAT6UW6uxkB

9yOt0Khojb21bJ0vVIVGSNrJsQvGCeNxUAaeWSuw0r8wdZcgCz4Jq4OP5yZFZe8q1CgZ

VpRg==

X-Gm-Message-State: AOJu0Yx7Q+1WSHNaq+HRuGdEpbNOLOydwDhZ4dKElmB09Bbq6s2GIldB

ywWM3aqiE4pQeSl1CgpKmGU79xQXgk2FnfT6kJm8mOQerA+61X14a40uJbzwGI6O4JUjV3N/s7k

=

X-Google-Smtp-Source: AGHT+IGHQbaQqz+vfrB4IbU/KoVb88nXQuRM6jL59b5iWGtRyVcW0JXo0qquib2G+PQCuQkwehgu8aiRKg==

MIME-Version: 1.0

X-Received: by 2002:a05:690c:650c:b0:6ae:486c:59f with SMTP id

00721157ae682-6c09fa8be98mr173467b3.29.1724175629560; Tue, 20 Aug 2024

10:40:29 -0700 (PDT)

Message-ID:

Date: Tue, 20 Aug 2024 17:40:29 +0000

Subject: netknowyeg, BEST SELLER

From: melindasarii399@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 7.8

X-Spam_score_int: 78

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi , Netknow Internet Service Get 100K Followers Instagram

NOW ! Please visit the web page below . [ https://instamedia.shop/store?netknowyeg

]



Content analysis details: (7.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

[209.85.128.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.197 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[melindasarii399(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[melindasarii399(at)gmail.com]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 FREEMAIL_REPLY From and body contain different freemails

Subject: {SPAM?} netknowyeg, BEST SELLER



SGkgLA0KTmV0a25vdyBJbnRlcm5ldCBTZXJ2aWNlDQoNCg0KR2V0IDEwMEsgRm9sbG93ZXJzIElu

c3RhZ3JhbSBOT1cgIQ0KUGxlYXNlIHZpc2l0IHRoZSB3ZWIgcGFnZSBiZWxvdyAuDQoNClsgaHR0

cHM6Ly9pbnN0YW1lZGlhLnNob3Avc3RvcmU/bmV0a25vd3llZyBdDQoNCkRvIHlvdSBoYXZlIGFi

b3V0IFsgTGVzcyB0aGFuIDg1SyBdIEZvbGxvd2VycyA/DQpTcGVjaWFscyAgbGltaXRlZCAgT2Zm

IDQwJSBUb2RheS4uLiEhIQ0KSW5jcmVhc2UgTm93IC4uISEhDQoNCi0gaW5zdGFudCBwcm9jZXNz

DQotIFNhZmVzdCBNZXRob2RzDQotIFByaXZhY3kgUHJvdGVjdGlvbg0KLSBTcGVlZCAxMDBLIEZv

bGxvd2Vycy9kYXkNCi0gSGlnaCBRdWFsaXR5IEZvbGxvd2VycyAmIFJlYWwNCi0gRHJvcC1CYWNr

IEd1YXJhbnRlZQ0KLSBUcnVzdGVkIFNlbGxlciB0ZXN0aW1vbnkNCi0gU3RhcnRpbmcgZ2V0IDVL

IEZvbGxvd2VycyBJbnN0YWdyYW0NCi0gR3VhcmFudGVlZCB0byBiZSB0aGUgY2hlYXBlc3QNCg0K

VGhhbmsgeW91LA0KUmVnYXJkcywNCnNvY2lhbGluc3RhbWF4QGdtYWlsLmNvbQ0KDQpDb3B5cmln

aHQgwqkgMjAxNCAtIDIwMjUgSW5zdGFtZWRpYU1BWC4gQWxsIFJpZ2h0cyBSZXNlcnZlZC4NCg==

Spanish language demand letter ovh phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 20 Aug 2024 11:57:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sgT5V-00000000LOf-2H41

for dave@doctor.nl2k.ab.ca;

Tue, 20 Aug 2024 11:56:09 -0600

Resent-From: The Doctor

Resent-Date: Tue, 20 Aug 2024 11:56:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps-329d3e7c.vps.ovh.net ([57.129.40.112]:56658)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sgR3h-00000000LJx-0wkc

for doctor@doctor.nl2k.ab.ca;

Tue, 20 Aug 2024 09:46:14 -0600

Received: by vps-329d3e7c.vps.ovh.net (Postfix, from userid 0)

id BB2618186F; Tue, 20 Aug 2024 15:38:14 +0000 (UTC)

MIME-Version: 1.0

Content-type: text/html; charset=UTF-8

Content-Transfer-Encoding: base64

Subject: Notificacion Demanda Primeira Instancia

From: Miguel Gonzalez

To: doctor@doctor.nl2k.ab.ca

Message-Id: <20240820153814.BB2618186F@vps-329d3e7c.vps.ovh.net>

Date: Tue, 20 Aug 2024 15:38:14 +0000 (UTC)

X-Spam_score: 10.6

X-Spam_score_int: 106

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: MPF-04 Estimado/a:



Content analysis details: (10.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[57.129.40.112 listed in will-spam-for-food.eu.org]

[57.129.40.112 listed in will-spam-for-food.eu.org]

[57.129.40.112 listed in will-spam-for-food.eu.org]

[57.129.40.112 listed in will-spam-for-food.eu.org]

[57.129.40.112 listed in will-spam-for-food.eu.org]

[57.129.40.112 listed in will-spam-for-food.eu.org]

[57.129.40.112 listed in will-spam-for-food.eu.org]

[57.129.40.112 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[57.129.40.112 listed in dnsbl.ahbl.org]

[57.129.40.112 listed in dnsbl.ahbl.org]

[57.129.40.112 listed in dnsbl.ahbl.org]

[57.129.40.112 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[57.129.40.112 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[57.129.40.112 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[57.129.40.112 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[57.129.40.112 listed in dnsbl.ahbl.org]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.0 URI_AZURE_CLOUDAPP Link to hosted azure web application, possible

phishing

2.0 VOWEL_URI_6 URI hostname with 6 consecutive vowels

Subject: {SPAM?} Notificacion Demanda Primeira Instancia



PCFET0NUWVBFIGh0bWwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMDEgVHJhbnNpdGlvbmFs

Ly9FTiI+DQoKPGh0bWw+DQoKPGhlYWQ+DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoK

DQoKDQoKDQoKDQoKDQoKICANCgogIA0KCiAgDQoKICANCgogIA0KCiAgDQoKICANCgogIA0KCiAg

DQoKICANCgogIA0KCiAgDQoKICANCgogIA0KCiAgPG1ldGEgY29udGVudD0idGV4dC9odG1sOyBj

aGFyc2V0PUlTTy04ODU5LTEiIGh0dHAtZXF1aXY9ImNvbnRlbnQtdHlwZSI+DQoKDQoKDQoKDQoK

DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKICANCgogIA0KCiAgDQoKICANCgogIA0K

CiAgDQoKICANCgogIA0KCiAgDQoKICANCgogIA0KCiAgDQoKICANCgogIA0KCiAgPHRpdGxlPk1Q

Ri0wNDwvdGl0bGU+DQoKPC9oZWFkPg0KCg0KCg0KCjxib2R5Pg0KCg0KCg0KCg0KCg0KCg0KCg0K

Cg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCjxzcGFuIHN0eWxlPSJjb2xvcjogcmdiKDQ0LCA1

NCwgNTgpOyBmb250LWZhbWlseTogUm9ib3RvLHNhbnMtc2VyaWY7IGZvbnQtc2l6ZTogMTRweDsg

Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXdlaWdodDogNDAwOyBsZXR0ZXItc3BhY2luZzogbm9y

bWFsOyBvcnBoYW5zOiAyOyB0ZXh0LWFsaWduOiBsZWZ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0

LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiAyOyB3b3JkLXNw

YWNpbmc6IDBweDsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyBkaXNwbGF5

OiBpbmxpbmUgISBpbXBvcnRhbnQ7IGZsb2F0OiBub25lOyI+Jm5ic3A7DQoKJm5ic3A7PC9zcGFu

Pjxicj4NCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgo8ZGl2

IGNsYXNzPSJ2MVRleHQiIHN0eWxlPSJib3JkZXI6IG1lZGl1bSBub25lIDsgbWFyZ2luOiAwcHg7

IHBhZGRpbmc6IDE0cHggMjhweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXdlaWdodDogNDAw

OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyBvcnBoYW5zOiAyOyB0ZXh0LWluZGVudDogMHB4OyB0

ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiAyOyB3b3Jk

LXNwYWNpbmc6IDBweDsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyBjb2xv

cjogcmdiKDUxLCA1MSwgNTEpOyBmb250LWZhbWlseTogJnF1b3Q7SGVsdmV0aWNhIE5ldWUmcXVv

dDssSGVsdmV0aWNhLEFyaWFsLHNhbnMtc2VyaWY7IGZvbnQtc2l6ZTogMThweDsgdGV4dC1hbGln

bjoganVzdGlmeTsiPg0KCjxwIHN0eWxlPSJtYXJnaW4tdG9wOiAwcHg7IG1hcmdpbi1ib3R0b206

IDE0cHggISBpbXBvcnRhbnQ7IG1hcmdpbi1yaWdodDogMHB4OyBtYXJnaW4tbGVmdDogMHB4OyB3

aWR0aDogNzgxcHg7Ij48c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6IGJvbGQ7Ij5Fc3RpbWFkby9h

Ojwvc3Bhbj48YnI+DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoK

DQoKPGJyPg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCjxz

cGFuIHN0eWxlPSJmb250LXdlaWdodDogYm9sZDsiPmRvY3RvckBkb2N0b3Iubmwyay5hYi5jYQ0K

PC9zcGFuPjxicj4NCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoN

Cgo8YnI+DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKPGJp

Zz48c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6IGJvbGQ7Ij5Qb3IgRXN0ZSBNZWRpbw0KCk5vdGlm

aWNvIExhIFByZXNlbnRlIERlbWFuZGE8L3NwYW4+PC9iaWc+DQoKPC9wPg0KCg0KCg0KCg0KCg0K

Cg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCjwvZGl2Pg0KCg0KCg0KCg0KCg0KCg0K

Cg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCjxkaXYgY2xhc3M9InYxcm93IiBzdHlsZT0i

Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXdlaWdodDogNDAwOyBsZXR0ZXItc3BhY2luZzogbm9y

bWFsOyBvcnBoYW5zOiAyOyB0ZXh0LWFsaWduOiBsZWZ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0

LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiAyOyB3b3JkLXNw

YWNpbmc6IDBweDsgbWFyZ2luLXJpZ2h0OiAtMTVweDsgbWFyZ2luLWxlZnQ6IC0xNXB4OyBjb2xv

cjogcmdiKDMzLCAzNywgNDEpOyBmb250LWZhbWlseTogLWFwcGxlLXN5c3RlbSxCbGlua01hY1N5

c3RlbUZvbnQsJnF1b3Q7U2Vnb2UgVUkmcXVvdDssUm9ib3RvLCZxdW90O0hlbHZldGljYSBOZXVl

JnF1b3Q7LEFyaWFsLHNhbnMtc2VyaWYsJnF1b3Q7QXBwbGUgQ29sb3IgRW1vamkmcXVvdDssJnF1

b3Q7U2Vnb2UgVUkgRW1vamkmcXVvdDssJnF1b3Q7U2Vnb2UgVUkgU3ltYm9sJnF1b3Q7LCZxdW90

O05vdG8gQ29sb3IgRW1vamkmcXVvdDs7IGZvbnQtc2l6ZTogMTBweDsgYmFja2dyb3VuZC1jb2xv

cjogcmdiKDI1NSwgMjU1LCAyNTUpOyI+DQoKPGRpdiBjbGFzcz0idjFjb2wtMTIiIHN0eWxlPSJw

b3NpdGlvbjogcmVsYXRpdmU7IHdpZHRoOiAxNTI3LjVweDsgbWluLWhlaWdodDogMXB4OyBwYWRk

aW5nLXJpZ2h0OiAxNXB4OyBwYWRkaW5nLWxlZnQ6IDE1cHg7IG1heC13aWR0aDogMTAwJTsiPg0K

CjxkaXYgY2xhc3M9InYxdGFiLWNvbnRlbnQiIHN0eWxlPSIiPg0KCjxkaXYgY2xhc3M9InYxdGFi

LXBhbmUgdjFpbiB2MWNvbC14bC02IHYxY29sLWxnLTYgdjFjb2wtbWQtMTIgdjFjb2wtc20tMTIg

djFhY3RpdmUgdjFzaG93IiBpZD0idjFob21lIiBzdHlsZT0icG9zaXRpb246IHJlbGF0aXZlOyBt

aW4taGVpZ2h0OiAxcHg7IHBhZGRpbmctcmlnaHQ6IDE1cHg7IHBhZGRpbmctbGVmdDogMTVweDsg

ZmxvYXQ6IGxlZnQ7IHdpZHRoOiA3NDguNzVweDsgZGlzcGxheTogYmxvY2s7IG1heC13aWR0aDog

NTAlOyI+PGJyIHN0eWxlPSIiPg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0K

Cg0KCg0KCg0KCjxjZW50ZXIgc3R5bGU9IiI+DQoKPHRhYmxlIGNsYXNzPSJ2MXRhYmxlIiBzdHls

ZT0iYm9yZGVyLWNvbGxhcHNlOiBjb2xsYXBzZTsgbWF4LXdpZHRoOiAxMDAlOyBiYWNrZ3JvdW5k

LWNvbG9yOiB0cmFuc3BhcmVudDsgd2lkdGg6IDcxOC43NXB4OyI+DQoKDQoKDQoKDQoKDQoKDQoK

DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKICA8dGJvZHkgc3R5bGU9IiI+DQoKDQoKDQoK

DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKICAgIDx0ciBzdHlsZT0iIj4N

CgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgogICAgICA8dGgg

Y29sc3Bhbj0iMiIgc3R5bGU9ImJvcmRlci10b3A6IDFweCBzb2xpZCByZ2IoMjIxLCAyMjEsIDIy

MSk7IHBhZGRpbmc6IDhweDsgYmFja2dyb3VuZDogcmdiKDM1LCA5MSwgNzgpIG5vbmUgcmVwZWF0

IHNjcm9sbCAwJSA1MCU7IC1tb3otYmFja2dyb3VuZC1jbGlwOiBpbml0aWFsOyAtbW96LWJhY2tn

cm91bmQtb3JpZ2luOiBpbml0aWFsOyAtbW96LWJhY2tncm91bmQtaW5saW5lLXBvbGljeTogaW5p

dGlhbDsgdGV4dC1hbGlnbjogaW5oZXJpdDsgZm9udC1zaXplOiAxNXB4OyBjb2xvcjogcmdiKDI1

NSwgMjU1LCAyNTUpOyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyB0ZXh0LXRyYW5zZm9ybTogdXBwZXJj

YXNlOyBsaW5lLWhlaWdodDogMS40Mjg1NzsiIGFsaWduPSJjZW50ZXIiPjxiIHN0eWxlPSJmb250

LXdlaWdodDogYm9sZGVyOyBjb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyI+REVUQUxMRQ0KCkRF

IE5PVElGSUNBQ0kmT2FjdXRlO048L2I+PC90aD4NCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoN

CgoNCgoNCgoNCgoNCgoNCgoNCgogICAgPC90cj4NCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoN

CgoNCgoNCgoNCgoNCgoNCgoNCgogICAgPHRyIHN0eWxlPSIiPg0KCg0KCg0KCg0KCg0KCg0KCg0K

Cg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCiAgICAgIDx0ZCBzdHlsZT0iYm9yZGVyLXRvcDog

MXB4IHNvbGlkIHJnYigyMjEsIDIyMSwgMjIxKTsgcGFkZGluZzogOHB4OyBmb250LXNpemU6IDE1

cHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGxpbmUtaGVpZ2h0OiAxLjQyODU3OyI+VGlwbw0KCmRl

IFByb2Nlc288L3RkPg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0K

Cg0KCiAgICAgIDx0ZCBzdHlsZT0iYm9yZGVyLXRvcDogMXB4IHNvbGlkIHJnYigyMjEsIDIyMSwg

MjIxKTsgcGFkZGluZzogOHB4OyBmb250LXNpemU6IDE1cHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7

IGxpbmUtaGVpZ2h0OiAxLjQyODU3OyI+QWNjaSZvYWN1dGU7bg0KCmRlIERlbWFuZGEgLQ0KCklt

cHVnYW5hY2lvbjwvdGQ+DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoK

DQoKDQoKICAgIDwvdHI+DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoK

DQoKDQoKICAgIDx0ciBzdHlsZT0iIj4NCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoN

CgoNCgoNCgoNCgoNCgogICAgICA8dGQgc3R5bGU9ImJvcmRlci10b3A6IDFweCBzb2xpZCByZ2Io

MjIxLCAyMjEsIDIyMSk7IHBhZGRpbmc6IDhweDsgZm9udC1zaXplOiAxNXB4OyB2ZXJ0aWNhbC1h

bGlnbjogdG9wOyBsaW5lLWhlaWdodDogMS40Mjg1NzsiPlJhZGljYWNpJm9hY3V0ZTtuDQoKICAg

ICAgPC90ZD4NCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgog

ICAgICA8dGQgc3R5bGU9ImJvcmRlci10b3A6IDFweCBzb2xpZCByZ2IoMjIxLCAyMjEsIDIyMSk7

IHBhZGRpbmc6IDhweDsgZm9udC1zaXplOiAxNXB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBsaW5l

LWhlaWdodDogMS40Mjg1Nzsgd2lkdGg6IDQyNC4wNjJweDsiPjA4IGRlIE1heW8gZGUgMjAyNDwv

dGQ+DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKICAgIDwv

dHI+DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKICAgIDx0

ciBzdHlsZT0iIj4NCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoN

CgogICAgICA8dGQgc3R5bGU9ImJvcmRlci10b3A6IDFweCBzb2xpZCByZ2IoMjIxLCAyMjEsIDIy

MSk7IHBhZGRpbmc6IDhweDsgZm9udC1zaXplOiAxNXB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBs

aW5lLWhlaWdodDogMS40Mjg1NzsiPkZlY2hhDQoKZGUgUmVwYXJ0bzwvdGQ+DQoKDQoKDQoKDQoK

DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKICAgICAgPHRkIHN0eWxlPSJib3Jk

ZXItdG9wOiAxcHggc29saWQgcmdiKDIyMSwgMjIxLCAyMjEpOyBwYWRkaW5nOiA4cHg7IGZvbnQt

c2l6ZTogMTVweDsgdmVydGljYWwtYWxpZ246IHRvcDsgbGluZS1oZWlnaHQ6IDEuNDI4NTc7Ij4y

Nw0KCmRlIEp1bGlvIGRlIDIwMjQ8L3RkPg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0K

Cg0KCg0KCg0KCg0KCg0KCiAgICA8L3RyPg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0K

Cg0KCg0KCg0KCg0KCg0KCiAgICA8dHIgc3R5bGU9IiI+DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoK

DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKICAgICAgPHRkIHN0eWxlPSJib3JkZXItdG9wOiAxcHgg

c29saWQgcmdiKDIyMSwgMjIxLCAyMjEpOyBwYWRkaW5nOiA4cHg7IGZvbnQtc2l6ZTogMTVweDsg

dmVydGljYWwtYWxpZ246IHRvcDsgbGluZS1oZWlnaHQ6IDEuNDI4NTc7Ij5BY2Npb25hZGE8L3Rk

Pg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCiAgICAgIDx0

ZCBzdHlsZT0iYm9yZGVyLXRvcDogMXB4IHNvbGlkIHJnYigyMjEsIDIyMSwgMjIxKTsgcGFkZGlu

ZzogOHB4OyBmb250LXNpemU6IDE1cHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGxpbmUtaGVpZ2h0

OiAxLjQyODU3OyI+RGVtYW5kYQ0KCmRlIE0maWFjdXRlO25pbWEgQ3VhbnQmaWFjdXRlO2E8L3Rk

Pg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCiAgICA8L3Ry

Pg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCiAgICA8dHIg

c3R5bGU9IiI+DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoK

ICAgICAgPHRkIHN0eWxlPSJib3JkZXItdG9wOiAxcHggc29saWQgcmdiKDIyMSwgMjIxLCAyMjEp

OyBwYWRkaW5nOiA4cHg7IGZvbnQtc2l6ZTogMTVweDsgdmVydGljYWwtYWxpZ246IHRvcDsgbGlu

ZS1oZWlnaHQ6IDEuNDI4NTc7Ij5Qcm92aWRlbmNpYQ0KCiAgICAgIDwvdGQ+DQoKDQoKDQoKDQoK

DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKICAgICAgPHRkIHN0eWxlPSJib3Jk

ZXItdG9wOiAxcHggc29saWQgcmdiKDIyMSwgMjIxLCAyMjEpOyBwYWRkaW5nOiA4cHg7IGZvbnQt

c2l6ZTogMTVweDsgdmVydGljYWwtYWxpZ246IHRvcDsgbGluZS1oZWlnaHQ6IDEuNDI4NTc7Ij5O

b3RpZmljYWNpb24NCgpEZW1hbmRhIFByaW1laXJhIEluc3RhbmNpYTwvdGQ+DQoKDQoKDQoKDQoK

DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKICAgIDwvdHI+DQoKDQoKDQoKDQoK

DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKICAgIDx0ciBzdHlsZT0iIj4NCgoN

CgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgogICAgICA8dGQgc3R5

bGU9ImJvcmRlci10b3A6IDFweCBzb2xpZCByZ2IoMjIxLCAyMjEsIDIyMSk7IHBhZGRpbmc6IDhw

eDsgZm9udC1zaXplOiAxNXB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBsaW5lLWhlaWdodDogMS40

Mjg1NzsiPkZlY2hhDQoKZGUgRW1pc2kmb2FjdXRlO248L3RkPg0KCg0KCg0KCg0KCg0KCg0KCg0K

Cg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCiAgICAgIDx0ZCBzdHlsZT0iYm9yZGVyLXRvcDog

MXB4IHNvbGlkIHJnYigyMjEsIDIyMSwgMjIxKTsgcGFkZGluZzogOHB4OyBmb250LXNpemU6IDE1

cHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGxpbmUtaGVpZ2h0OiAxLjQyODU3OyI+MjAgZGUgQWdv

c3RvIGRlIDIwMjQ8L3RkPg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0K

Cg0KCg0KCiAgICA8L3RyPg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0K

Cg0KCg0KCiAgICA8dHIgc3R5bGU9IiI+DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoK

DQoKDQoKDQoKDQoKDQoKICAgICAgPHRkIHN0eWxlPSJib3JkZXItdG9wOiAxcHggc29saWQgcmdi

KDIyMSwgMjIxLCAyMjEpOyBwYWRkaW5nOiA4cHg7IGZvbnQtc2l6ZTogMTVweDsgdmVydGljYWwt

YWxpZ246IHRvcDsgbGluZS1oZWlnaHQ6IDEuNDI4NTc7Ij5BbmV4b3M8L3RkPg0KCg0KCg0KCg0K

Cg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCiAgICAgIDx0ZCBzdHlsZT0iYm9y

ZGVyLXRvcDogMXB4IHNvbGlkIHJnYigyMjEsIDIyMSwgMjIxKTsgcGFkZGluZzogOHB4OyBmb250

LXNpemU6IDE1cHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IGxpbmUtaGVpZ2h0OiAxLjQyODU3OyI+

Q29waWENCgpkZSBsYSBEZW1hbmRhIC0gPHNwYW4+Q0NCPC9zcGFuPjc2MTIxNDUyOTxzcGFuPkE8

L3NwYW4+PC90ZD4NCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoN

CgogICAgPC90cj4NCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoN

CgogICAgPHRyIHN0eWxlPSIiPg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0K

Cg0KCg0KCg0KCiAgICAgIDx0ZCBzdHlsZT0iYm9yZGVyLXRvcDogMXB4IHNvbGlkIHJnYigyMjEs

IDIyMSwgMjIxKTsgcGFkZGluZzogOHB4OyBmb250LXNpemU6IDE1cHg7IHZlcnRpY2FsLWFsaWdu

OiB0b3A7IGxpbmUtaGVpZ2h0OiAxLjQyODU3OyI+Tm8uDQoKZGUgRXhwZWRpZW50ZTwvdGQ+DQoK

DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKICAgICAgPHRkIHN0

eWxlPSJib3JkZXItdG9wOiAxcHggc29saWQgcmdiKDIyMSwgMjIxLCAyMjEpOyBwYWRkaW5nOiA4

cHg7IGZvbnQtc2l6ZTogMTVweDsgdmVydGljYWwtYWxpZ246IHRvcDsgbGluZS1oZWlnaHQ6IDEu

NDI4NTc7Ij5HQUQzNzIyMi8yNDwvdGQ+DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoK

DQoKDQoKDQoKDQoKDQoKICAgIDwvdHI+DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoK

DQoKDQoKDQoKDQoKDQoKICAgIDx0ciBzdHlsZT0iIj4NCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoN

CgoNCgoNCgoNCgoNCgoNCgoNCgoNCgogICAgICA8dGQgc3R5bGU9ImJvcmRlci10b3A6IDFweCBz

b2xpZCByZ2IoMjIxLCAyMjEsIDIyMSk7IHBhZGRpbmc6IDhweDsgZm9udC1zaXplOiAxNXB4OyB2

ZXJ0aWNhbC1hbGlnbjogdG9wOyBsaW5lLWhlaWdodDogMS40Mjg1NzsiPkV4cGVkaWVudGUNCgpF

eHRyYSBvIFJGQzwvdGQ+DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoK

DQoKDQoKICAgICAgPHRkIHN0eWxlPSJib3JkZXItdG9wOiAxcHggc29saWQgcmdiKDIyMSwgMjIx

LCAyMjEpOyBwYWRkaW5nOiA4cHg7IGZvbnQtc2l6ZTogMTVweDsgdmVydGljYWwtYWxpZ246IHRv

cDsgbGluZS1oZWlnaHQ6IDEuNDI4NTc7Ij43NjEyMTQ1Mjk8L3RkPg0KCg0KCg0KCg0KCg0KCg0K

Cg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCiAgICA8L3RyPg0KCg0KCg0KCg0KCg0KCg0K

Cg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCiAgICA8dHIgc3R5bGU9IiI+DQoKDQoKDQoK

DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKICAgICAgPHRkIHN0eWxlPSJi

b3JkZXItdG9wOiAxcHggc29saWQgcmdiKDIyMSwgMjIxLCAyMjEpOyBwYWRkaW5nOiA4cHg7IGZv

bnQtc2l6ZTogMTVweDsgdmVydGljYWwtYWxpZ246IHRvcDsgbGluZS1oZWlnaHQ6IDEuNDI4NTc7

IiB2YWxpZ249InRvcCI+RGVzY3JpcGNpJm9hY3V0ZTtuPC90ZD4NCgoNCgoNCgoNCgoNCgoNCgoN

CgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgogICAgICA8dGQgc3R5bGU9ImJvcmRlci10b3A6

IDFweCBzb2xpZCByZ2IoMjIxLCAyMjEsIDIyMSk7IHBhZGRpbmc6IDhweDsgZm9udC1zaXplOiAx

NXB4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBsaW5lLWhlaWdodDogMS40Mjg1NzsiPlNlY3JldGFy

JmlhY3V0ZTthDQoKZGUgQWRtaW5pc3RyYWNpJm9hY3V0ZTtuIHkgRmluYW56YXM8L3RkPg0KCg0K

Cg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCiAgICA8L3RyPg0KCg0K

Cg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCiAgICA8dHIgc3R5bGU9

IiI+DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKICAgICAg

PHRkIHN0eWxlPSJib3JkZXItdG9wOiAxcHggc29saWQgcmdiKDIyMSwgMjIxLCAyMjEpOyBwYWRk

aW5nOiA4cHg7IGZvbnQtc2l6ZTogMTVweDsgdmVydGljYWwtYWxpZ246IHRvcDsgbGluZS1oZWln

aHQ6IDEuNDI4NTc7Ij5BcmNoaXZvPC90ZD4NCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoN

CgoNCgoNCgoNCgoNCgoNCgogICAgICA8dGQgc3R5bGU9ImJvcmRlci10b3A6IDFweCBzb2xpZCBy

Z2IoMjIxLCAyMjEsIDIyMSk7IHBhZGRpbmc6IDhweDsgZm9udC1zaXplOiAxNXB4OyB2ZXJ0aWNh

bC1hbGlnbjogdG9wOyBsaW5lLWhlaWdodDogMS40Mjg1NzsgY29sb3I6IHJnYigzNSwgOTEsIDc4

KTsiPjxhIGhyZWY9Imh0dHBzOi8vYnp0cmJ0YXJpb3JlbGFjbm9taW5hcy5tZXhpY29jZW50cmFs

LmNsb3VkYXBwLmF6dXJlLmNvbT9maW5hbnphcy5idXNxdWVkYT9xPVNlY3JldGFyJUMzJUFEYStk

ZStBZG1pbmlzdHJhY2klQzMlQjNuK3krRmluYW56YXM/MzAzMzc5NzRfMzA5N183MDUzMzE5Mzc1

NTYtMTU3ODg5MTU3ODg5NzcwNzMyNDc5NDEwNTg4NDk0MTA1ODg0IiB0YXJnZXQ9Il9ibGFuayIg

cmVsPSJub3JlZmVycmVyIiBzdHlsZT0idGV4dC1kZWNvcmF0aW9uOiBub25lOyBiYWNrZ3JvdW5k

LWNvbG9yOiB0cmFuc3BhcmVudDsiPjxiIHN0eWxlPSJmb250LXdlaWdodDogYm9sZGVyOyI+PHNw

YW4gc3R5bGU9ImJhY2tncm91bmQ6IHRyYW5zcGFyZW50IG5vbmUgcmVwZWF0IHNjcm9sbCAwJSA1

MCU7IC1tb3otYmFja2dyb3VuZC1jbGlwOiBpbml0aWFsOyAtbW96LWJhY2tncm91bmQtb3JpZ2lu

OiBpbml0aWFsOyAtbW96LWJhY2tncm91bmQtaW5saW5lLXBvbGljeTogaW5pdGlhbDsgdGV4dC1k

ZWNvcmF0aW9uOiBub25lOyBmb250LXNpemU6IDE1cHg7Ij5ERVRBTExFUyBERSBMQSBERU1BTkRB

IFBFTkFMLTc2MTIxNDUyOS5wZGY8L3NwYW4+PC9iPjwvYT48L3RkPg0KCg0KCg0KCg0KCg0KCg0K

Cg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCiAgICA8L3RyPg0KCg0KCg0KCg0KCg0KCg0K

Cg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCiAgDQoKICANCgogIA0KCiAgDQoKICANCgog

IA0KCiAgDQoKICANCgogIA0KCiAgDQoKICANCgogIA0KCiAgDQoKICANCgogIDwvdGJvZHk+PHRm

b290IHN0eWxlPSJiYWNrZ3JvdW5kOiByZ2IoMjI3LCAyMjcsIDIyNykgbm9uZSByZXBlYXQgc2Ny

b2xsIDAlIDUwJTsgLW1vei1iYWNrZ3JvdW5kLWNsaXA6IGluaXRpYWw7IC1tb3otYmFja2dyb3Vu

ZC1vcmlnaW46IGluaXRpYWw7IC1tb3otYmFja2dyb3VuZC1pbmxpbmUtcG9saWN5OiBpbml0aWFs

OyI+PHRyIHN0eWxlPSIiPg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0K

Cg0KCg0KCiAgICA8dGQgY29sc3Bhbj0iMiIgc3R5bGU9ImJvcmRlci10b3A6IDFweCBzb2xpZCBy

Z2IoMjIxLCAyMjEsIDIyMSk7IHBhZGRpbmc6IDhweDsgZm9udC1zaXplOiAxNXB4OyB2ZXJ0aWNh

bC1hbGlnbjogdG9wOyBsaW5lLWhlaWdodDogMS40Mjg1NzsgYmFja2dyb3VuZC1jb2xvcjogcmdi

KDI1NSwgMjU1LCAyNTUpOyI+PHNtYWxsPjxzcGFuIHN0eWxlPSJjb2xvcjogcmdiKDEwMiwgMTAy

LCAxMDIpOyI+PGJyPg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0K

Cg0KCiAgICA8YnI+DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKICAg

IDxiaWc+DQoKDQoKQXRlbnRhbWVudGUsPC9iaWc+PC9zcGFuPjxiaWc+PGJyIHN0eWxlPSJjb2xv

cjogcmdiKDEwMiwgMTAyLCAxMDIpOyI+DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoK

DQoKDQoKDQoKICAgIDxzcGFuIHN0eWxlPSJjb2xvcjogcmdiKDEwMiwgMTAyLCAxMDIpOyI+U2Vj

cmV0YXJpbzxicj4NCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgpMaWMuIE1pZ3VlbCBHb256YWxlejwv

c3Bhbj48L2JpZz48YnIgc3R5bGU9ImNvbG9yOiByZ2IoMTAyLCAxMDIsIDEwMik7Ij4NCgoNCgoN

CgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgogICAgPHNwYW4gc3R5bGU9

ImNvbG9yOiByZ2IoMTAyLCAxMDIsIDEwMik7Ij48L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9yOiBy

Z2IoMTAyLCAxMDIsIDEwMik7Ij48L3NwYW4+PC9zbWFsbD48YnI+DQoKDQoKDQoKDQoKDQoKDQoK

DQoKDQoKICAgIDxzbWFsbCBzdHlsZT0iY29sb3I6IHJnYigxMDIsIDEwMiwgMTAyKTsiPkF2LiBI

aWRhbGdvIDc3LDxicj4NCgoNCgoNCgoNCgoNCgoNCgpDb2wuIEd1ZXJyZXJvLCBDLlAuIDA2MzAw

LDxicj4NCgoNCgoNCgoNCgoNCgoNCgpDaXVkYWQgZGUgTSZlYWN1dGU7eGljby48YnI+DQoKDQoK

DQoKDQoKDQoKDQoKICAgIDxicj4NCgoNCgoNCgoNCgoNCgoNCgpBdGVuY2kmb2FjdXRlO24gdGVs

ZWYmb2FjdXRlO25pY2E8YnI+DQoKDQoKDQoKDQoKDQoKDQoKZGVzZGUgY3VhbHF1aWVyIHBhcnRl

IGRlbCBwYSZpYWN1dGU7JnNoeTtzOjxicj4NCgoNCgoNCgoNCgoNCgoNCgpNYXJjYVNBVCA1NSA2

MjcgMjIgNzI4PGJyPg0KCg0KCg0KCg0KCg0KCg0KCnkgcGFyYSBlbCBleHRlcmlvciBkZWwgcGEm

aWFjdXRlO3M8YnI+DQoKDQoKDQoKDQoKDQoKDQoKKCs1MikgNTUgNjI3IDIyIDcyODxicj4NCgoN

CgoNCgoNCgoNCgoNCgogICAgPC9zbWFsbD48YnI+DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKICAg

IDxicj4NCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgogICAg

PHNtYWxsPjxzbWFsbCBzdHlsZT0iY29sb3I6IHJnYigxMDIsIDEwMiwgMTAyKTsiPkVzdGENCgpl

IHN1IHVsdGltYSBvcG9ydHVuaWRhZGUgcGFyYSBzb2x1Y2lvbmFyIGxhIG1pbWEgZW4gdW5hIGV0

YXBhDQoKZXh0cmFqdWRpY2lhbCB5IGRlIGVzdGEgZm9ybWE8YnI+DQoKDQoKDQoKDQoKDQoKDQoK

DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKZXZpdGFyIGFmcm9udGFyIHVuIHByb2Nlc28g

anVkaWNpYWwgY29uIGxhcyBjb25zZWN1ZW5jaWFzIG1lbmNpb25hZGFzDQoKYW50ZXJpb3JtZW50

ZS48L3NtYWxsPjwvc21hbGw+PGJyPg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0K

Cg0KCg0KCg0KCiAgICA8L3RkPg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0KCg0K

Cg0KCg0KCg0KCiAgPC90cj4NCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoN

CgoNCgoNCgogIDwvdGZvb3Q+DQoKPC90YWJsZT4NCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoN

CgoNCgoNCgoNCgoNCgoNCgoNCgo8YnI+DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoK

DQoKDQoKDQoKDQoKDQoKPC9jZW50ZXI+DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoK

DQoKDQoKDQoKDQoKDQoKPC9kaXY+DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoK

DQoKDQoKDQoKDQoKPC9kaXY+DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoK

DQoKDQoKDQoKPC9kaXY+DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoK

DQoKDQoKPC9kaXY+DQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoKDQoK

DQoKPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1uZXdsaW5lIj4NCgoNCgoNCgoNCgoNCgoN

CgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgoNCgo8L2JvZHk+DQoKPC9odG1sPg0K





Web / SEO / App spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 20 Aug 2024 07:59:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sgPNs-000000001X7-1iPq

for dave@doctor.nl2k.ab.ca;

Tue, 20 Aug 2024 07:58:52 -0600

Resent-From: The Doctor

Resent-Date: Tue, 20 Aug 2024 07:58:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-sgaapc01olkn2026.outbound.protection.outlook.com ([40.92.53.26]:27233 helo=APC01-SG2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sgMhh-00000000Mpt-3GdT

for sales@nk.ca;

Tue, 20 Aug 2024 05:07:14 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=yqWOnTHyRs2F5M+ZCcnZGSbfT7GLLoCzD9KaRNdOZOplcwx7a2oUWmc/70Np9wcZ1mk1FPbuCno9EIXXYk0tKscI1P9L88MX0ofOxIgh3OYQ5D9fAz0PibPnq2ih49cM7Eqinogz4ygfwS+iR34TB3vWOv4oBBt/pMnM87Wg8NMj1yBl1zApLyVI4wd+IcsQkLS8oSRn0KyDi+XhcQPKoG7abSeyrvNfvHr4GAAviyRH2Yv8OLacJ03iRt+gm7wae26H/S0hufR//5uwRstjPxLutbo7so+2xBkVx5nRAexq553oxxYSvRwhQDaY4TUZJEQJ+7ZVKjfNE20IJuXHRQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=1OVMnyjJbWKPrR/EhkI0NQerl/nMf2mCJ+v8r/hXhNw=;

b=Lg+EadH8KzSkZ6lNCTq6UTM+f8jhsJaNSmTiFMBRpoo8G+7hqfTYniWc5LYeK/JXxk6Rdx2w0rQhVRVXjUVLUDUdEJl/nn0X/5zs4GxAwcRJett1hfKJ/L9HnV0AxoNKmXlJf/mjjDKmjS6SSdWfGFN9TikxQgiQMrETADu6Tb9lTXjLI8IL35L2srxtLCevfCgyww3oSScYZEuEcYV+tjQ98krYxFolrdw68k8lL/2FBGWlYqXhMc2Cem2fnu1xzgJs6+NfBzhWfwZa2nJgK4OnCih/qSmJf6wSADgIUmodiv6ylIJvmaRDc410KMNHlTAMZnZQnrWm4dl1vbWC+g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=1OVMnyjJbWKPrR/EhkI0NQerl/nMf2mCJ+v8r/hXhNw=;

b=f0d4UbtH5+z0N/dyfX/FlU70cZ5Hjf68FDFmM1ez9ZzlCfO1fFz3KHc91HTrGfM3bpr4havFkHuToTUpBJJWiDaaAX5tohLVy2NCp2nUaNyFL2tJpEnuJRviXrpqIPtu8brkBM9CZb28qnQomI7yMim+hnGaIKBQb6MOhNgxGNNMy90v87K7rhSVMqJbmhpQuST7ze3OKj03zYYvRz191N+32JMaEJA1khVpZY6zf6U4ISEd4ihvLGca4/A6YXl7a9VCefmqO75YOqArt//kWg8vGabgQK27VyNDciJTppUx1Z2SBOg1IOl7WcT6h8UTAO9LxCXbu+x1IK0qeJOM/A==

Received: from SI6PR02MB8531.apcprd02.prod.outlook.com (2603:1096:4:21d::6) by

SEYPR02MB5629.apcprd02.prod.outlook.com (2603:1096:101:56::9) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.7875.20; Tue, 20 Aug 2024 11:04:38 +0000

Received: from SI6PR02MB8531.apcprd02.prod.outlook.com

([fe80::e0db:19f6:3617:d1fd]) by SI6PR02MB8531.apcprd02.prod.outlook.com

([fe80::e0db:19f6:3617:d1fd%4]) with mapi id 15.20.7875.019; Tue, 20 Aug 2024

11:04:38 +0000

From: Prince dubey

Subject: Re: Website Proposal..

Thread-Topic: Website Proposal..

Thread-Index: AQHa8vC/CvMWnP3hEE+o4KZdgIUcHA==

Date: Tue, 20 Aug 2024 11:04:38 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn:

[Dg0dJ0UZomvY9eD1mK6nMEkOlyudPXFmDKMWvyDggy/ZFGwnu6GmZW5r40eWXcL1GAG1I80DtUs=]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SI6PR02MB8531:EE_|SEYPR02MB5629:EE_

x-ms-office365-filtering-correlation-id: 0eb8defa-2f43-408e-5b02-08dcc107e26f

x-microsoft-antispam:

BCL:0;ARA:14566002|6115599003|8060799006|461199028|19110799003|15030799003|15080799003|440099028|3412199025|102099032|56899033;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?AxNXS2AkI/4cU2MUVcT1jXMKUgnXM8Dnub/XAIMiluxSeaH7MLxckHPC1O?=

=?iso-8859-1?Q?Q6qSLtNlg/i3x7OiNBze8ffqcqLI56+HOr6SmESh/+jxOghEaoKFV175/V?=

=?iso-8859-1?Q?jUSgDrlXW9UMVklYTAw7k3DoNiWDNO14wWKqlQx5XN6QFIEtjpBI5YFkIT?=

=?iso-8859-1?Q?iW3zE+eDqZCBOqexpeF2jsxxIJOALOS1XQOlRkPvetmM+NwHayudtdgUZP?=

=?iso-8859-1?Q?SuK33T8rDqJbE8bUmWCBs7yN4cBbwRL4clkLuG7UkdoAPTLEgrgG2awQ3B?=

=?iso-8859-1?Q?6vq4mEzKj/hL2+RiImZ7PKYtnx0sG+r7/armPTOnoTadyJqiZMtOyUOtzP?=

=?iso-8859-1?Q?9sclmJWrNOTaX4im+XWKPg+N4Glu4Bd7mXMxx/kXKrRPWFSJLHbdKNznxN?=

=?iso-8859-1?Q?/TbEyh5T8o8h7bmzgdVUlXJ2xhFXXAXyyOf61wnKhVz7/A41+QVkBCFmQd?=

=?iso-8859-1?Q?1/Az29O01rbd8QDoAvLlIKeurHsMQQLQKHvCz4xC+jaRSNZ1w4vKyGhssG?=

=?iso-8859-1?Q?BtEz/XU34ziOtsOBZ4B3eria3q1dlLqx9hwnTvSd4Dp3aux7dqU9Cka/VP?=

=?iso-8859-1?Q?jVSRCRzhGicUQbGTUVgUL5rgnGN7kYd69G9hmU1kR32XZP/swWEsQ6UeX5?=

=?iso-8859-1?Q?KqEDIwFHmvQmyaqQuMOUW0WKXnYHxdDuu2QZIZn0C4cNsxE/cMqU2Slbze?=

=?iso-8859-1?Q?E4WUNxK47YkxlFqc7RlsLUDqs3PMZRt3qwqGSJUniO6/F6C6ckS2S9rq3t?=

=?iso-8859-1?Q?E5t+IVk2+/Y0TdxI6NKno+gR7Ow7X3vdcabVNQy/aY9+6GAQVf95ZQtfSC?=

=?iso-8859-1?Q?tYTCj2kSE09s0kdlm6tHn6//G56gsdHPvDTFzQ0BrQwm2uxyPwyCCunlYJ?=

=?iso-8859-1?Q?th5OJ3WSOwS6DVncAr8Kf0xKJ9Djs8OOSZRlgbDdmPe/qYTJwUTHTIK92Y?=

=?iso-8859-1?Q?XOxMrZ3ezGJfq1Yqa3E5G3TZQjMehsqXkPdBeHMpAVv/UapqOVB1Drac88?=

=?iso-8859-1?Q?E1QL0P5USO5JHa8Z0PLGhoC5HDFD6uRJeQbqc0Azfjbxx8F/DSbs9XcrHF?=

=?iso-8859-1?Q?DK4+yhxG6NYbgWbB8EUhZ5budW/wJR7zOvsS3JGr86HI35f26q9lvzKdpq?=

=?iso-8859-1?Q?C+TMdDjQxMfDCBlTLDZaoA37l9TgPstd0kGFE84O65Zokp9IF6x+MGzrPc?=

=?iso-8859-1?Q?HzkiV0WrxIEhQLhMqw3mAPUk86XK/KZmhl+5mSoI3a4XzJoMfTf/wDqv+v?=

=?iso-8859-1?Q?E+/7CllmKX6El4rK7Zfo+1FDNH/DnyWa34U00TPGdpEi2TpVeDfrPsdiin?=

=?iso-8859-1?Q?8hp6npyVSamAfcc2yMRunhSRC++f0jMyg4K9ff5v9sPVNSqPgHWZrV6qv/?=

=?iso-8859-1?Q?UsWBJyJmtl?=

Content-Type: multipart/alternative;

boundary="_000_SI6PR02MB85316C6BB19C7E33730D7FA8FA8D2SI6PR02MB8531apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-7719-20-msonline-outlook-00f13.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SI6PR02MB8531.apcprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 0eb8defa-2f43-408e-5b02-08dcc107e26f

X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Aug 2024 11:04:38.7462

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEYPR02MB5629

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, This is offered for you. I am web developer from India

and I can create just about anything website you want. 1. New Website Development

2. Re-Design Website & New features Update



Content analysis details: (7.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:4:21d:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:21d:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:21d:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:21d:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:21d:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:21d:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:21d:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:1096:4:21d:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[40.92.53.26 listed in will-spam-for-food.eu.org]

[40.92.53.26 listed in will-spam-for-food.eu.org]

[40.92.53.26 listed in will-spam-for-food.eu.org]

[40.92.53.26 listed in will-spam-for-food.eu.org]

[40.92.53.26 listed in will-spam-for-food.eu.org]

[40.92.53.26 listed in will-spam-for-food.eu.org]

[40.92.53.26 listed in will-spam-for-food.eu.org]

[40.92.53.26 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.53.26 listed in dnsbl.ahbl.org]

[40.92.53.26 listed in dnsbl.ahbl.org]

[40.92.53.26 listed in dnsbl.ahbl.org]

[40.92.53.26 listed in dnsbl.ahbl.org]

[2603:1096:4:21d:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:1096:4:21d:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:1096:4:21d:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:1096:4:21d:0:0:0:6 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.53.26 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.53.26 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.53.26 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.53.26 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[princeseoservice2(at)hotmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[princeseoservice2(at)hotmail.com]

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Re: Website Proposal..



--_000_SI6PR02MB85316C6BB19C7E33730D7FA8FA8D2SI6PR02MB8531apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,



This is offered for you. I am web developer from India and I can create jus=

t about anything website you want.



1. New Website Development

2. Re-Design Website & New features Update



Please share your requirement then I will send you best proposal.



Best Regards,



--_000_SI6PR02MB85316C6BB19C7E33730D7FA8FA8D2SI6PR02MB8531apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








y: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans=

-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hi,


 


This is offered for you. I am web developer from India and I c=

an create just about anything website you want.


 


1. New Website Development


2. Re-Design Website & New features Update


 


Please share your requirement then I will send you best proposal.


 


Best Regards,








--_000_SI6PR02MB85316C6BB19C7E33730D7FA8FA8D2SI6PR02MB8531apcp_--

Nigerian Spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 20 Aug 2024 09:37:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sgQu1-00000000Ksa-1K6n

for dave@doctor.nl2k.ab.ca;

Tue, 20 Aug 2024 09:36:09 -0600

Resent-From: The Doctor

Resent-Date: Tue, 20 Aug 2024 09:36:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f51.google.com ([209.85.218.51]:42143)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sgQ8U-000000004Am-41CO

for root@nk.ca;

Tue, 20 Aug 2024 08:47:06 -0600

Received: by mail-ej1-f51.google.com with SMTP id a640c23a62f3a-a7ac469e4c4so963916266b.0

for ; Tue, 20 Aug 2024 07:45:08 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1724165102; x=1724769902; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=7E7QsSVb+sF+XiphLuwMTWuk+uhnHPGCEr91zWXtza0=;

b=Tpp9p+W9fkRvsjGmcA82wmyrp7sl2c8POLqOL7J+LFOClEatsTq3dpMWh77FU8oxoB

YC9nBMbR4Qfc3vws8V2FnqycIRKy9Jb7Q4jMnsRWWME8TSk+iqWQjdpiNr7a5rbHPe1H

0LiXyp76Sqg/4e8Wm1NHFUmPBsfVjN2tt7peGQ9AgzL2tRInjZHfY+F+sD2Qp9on//C1

wbC59+m2q2zrmRhMkE1UKTy/0pu+//RoBRGgChqoVhRwACdXJ6NcgvtOzrJ28Q0FcJEx

ZlR5TnLnlYeBR8QQZ+DZfn2yiykIhXYP/GzX/ZEBm1+oYUpsN9cREErNs+kYFbpwY3En

lvWQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1724165102; x=1724769902;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=7E7QsSVb+sF+XiphLuwMTWuk+uhnHPGCEr91zWXtza0=;

b=GVuBB9uBtBSv+UruD1KWU0QiJPBOBPWFbq4IBdD+B8MLdztDKzgqaAN2rnj3eJhlLG

O3M8gWmrowVlJLGwXzYeFQZPwoxX7bSnP/GS+SUDQIMuq0pct/+g3aGbT/7e+Z3nYMw6

Jb21KymT9+TnAaq8fQOiX0wFWpU/uObEjtbW2E0UJDgXia96aGp1f2Pl/X69PX2pF0XA

fDxZjbhNfQQqLvymNSjqOQONgRrr4KlapxyEd9s56A9MDlVkt+u4cfbGyfK+hb7BdsBp

u7Mn+hBUXmwNr2rP8Al5Wu0D8GBp8VWmDj3lqMOSnjzFix8BGNnqNu0uNsj/U5VKfrHF

liUw==

X-Forwarded-Encrypted: i=1; AJvYcCUBfwAeljQB5Lu2ddp7N9yPHDMMlU2qUSGaZpYbLcw1oGDeyWm62SaO3GdFVOhoaGuRGpUm@nk.ca

X-Gm-Message-State: AOJu0Yz5MZVNTYtoVBmxVds73tdFY+/XrnHvd3xdnVTuPDHA4Z5N7OLV

uEstrOxnXj9GhNppAltdM21v/i3ilxusVS8W2c3JUSOmCsa21aqlpbhXmBTmhpevcxFUa2iEEO9

nvTlFD9+83JsSLsf1vzIeSWzTrow=

X-Google-Smtp-Source: AGHT+IH8ArNJ9d0BDD3NFvWYqzK2cWHvCwQddyFFevpQD3RR0GifODrxVEDyWNdrOyU5vCrY2wzqwvykvh8PP+5izSI=

X-Received: by 2002:a17:907:7247:b0:a7a:a2e3:3739 with SMTP id

a640c23a62f3a-a8643f7dcb1mr342147666b.20.1724165100979; Tue, 20 Aug 2024

07:45:00 -0700 (PDT)

MIME-Version: 1.0

From: Tin Nwe

Date: Tue, 20 Aug 2024 21:44:51 +0700

Message-ID:

Subject: I WANT TO PRESENT YOU AS A BENEFICIARY OF $32,640,00

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000060d0c606201e78b3"

Bcc: root@nk.ca

X-Spam_score: 12.0

X-Spam_score_int: 120

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good Day Friend, I am Chief Accountant/Executive with Foreign

Trade Bank of (FTB) . I want to present to you as a beneficiary of $32,640,000

here in my bank. Get back to me for more details. Best Regards, Mr. SUN HOR

Account Manager



Content analysis details: (12.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.218.51 listed in will-spam-for-food.eu.org]

[209.85.218.51 listed in will-spam-for-food.eu.org]

[209.85.218.51 listed in will-spam-for-food.eu.org]

[209.85.218.51 listed in will-spam-for-food.eu.org]

[209.85.218.51 listed in will-spam-for-food.eu.org]

[209.85.218.51 listed in will-spam-for-food.eu.org]

[209.85.218.51 listed in will-spam-for-food.eu.org]

[209.85.218.51 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.218.51 listed in dnsbl.ahbl.org]

[209.85.218.51 listed in dnsbl.ahbl.org]

[209.85.218.51 listed in dnsbl.ahbl.org]

[209.85.218.51 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.218.51 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.218.51 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.218.51 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.218.51 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.218.51 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.218.51 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[tinnwe389(at)gmail.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[tinnwe389(at)gmail.com]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 LOTS_OF_MONEY Huge... sums of money

1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} I WANT TO PRESENT YOU AS A BENEFICIARY OF $32,640,00



--00000000000060d0c606201e78b3

Content-Type: text/plain; charset="UTF-8"



Good Day Friend,



I am Chief Accountant/Executive with Foreign Trade Bank of (FTB) . I want

to present to you as a beneficiary of $32,640,000 here in my bank. Get back

to me for more details.



Best Regards,

Mr. SUN HOR

Account Manager



--00000000000060d0c606201e78b3

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Good Day Friend,

I am Chief Accountant/Executive wi=

th Foreign Trade Bank of (FTB) . I want to present to you as a beneficiary =

of $32,640,000 here in my bank. Get back to me for more details.

Bes=

t Regards,
Mr. SUN HOR
Account Manager




--00000000000060d0c606201e78b3--