Web / SEO / App spam from Microsoft Outlook
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 28 Aug 2024 10:52:44 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from)
id 1sjLsd-00000000LLM-1wDP
for dave@doctor.nl2k.ab.ca;
Wed, 28 Aug 2024 10:50:47 -0600
Resent-From: The Doctor
Resent-Date: Wed, 28 Aug 2024 10:50:47 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-koreacentralazolkn19011037.outbound.protection.outlook.com ([52.103.74.37]:36826 helo=SLXP216CU001.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98 (FreeBSD))
(envelope-from)
id 1sjKJp-000000009dp-3tjo
for sales@nk.ca;
Wed, 28 Aug 2024 09:10:50 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
b=HHaWUfiEaORGbQeeuU22yz5+VoixmRnouYHIYfbKXRBt4IirFRj+LhDuv75rY0RbaNWv0mhmILQcb3g2yHmAsV9aUcv5RyA8nju2vp/wRiIcbVfPY0Xo5t94y6ukv/3MJZ1/9KGny04seY4+Kq5DpXfUTymzSL/Jf3LlqoFYzfLgwy+3rMKFVhiu9oHhniKXjDANeDJS1dCHCVZ3uVK3IbkBS40lZ1OPnX+OVrsUaMZE7Y7MZYpMRvCc2LCGFo8qERU2gNp7McVhyZvHGuk0pC3KOGchF4ERU3D3jfE5W84QTyUN9tkmkKS3IdHlGRu1Hh7Gs0Vbhb/bKzo0ssTN9A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector10001;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=lnIiMy8HHmewiYwYY/9auayrBGCslxY7baKZ2mlOCOM=;
b=mbwH+pPMuC95DlcfQrsHgSnsqWm31uN8nsoZo/6M/o3E9XmEeeN8rrYTVfZ9GBM/9yAsxY2i8wsOcvD2f+SlyYPzOsa4KRqd1aYPjKNEVfHfRC16SWftnChzvmqbtXj6y/LxSmrO5hKMtq3oRQFwexh9yVkMdR0UHKws3ikhgZ6yZRYzF1hYbEcsg8Z5JDqNFAEbXDZJv6iRAZsAibfDhNCOVlrlGTVRbhAxg7fMXBVqzmDf+W34bEproYIdWryxT6fCKQbpWS0lLj5ebofE7qP4YJAfEBLJg69IyY6VUw+M5zZQpI9oAoGbS3re0CGLUlUrIa4US4HHPj8DNW4Q4A==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=lnIiMy8HHmewiYwYY/9auayrBGCslxY7baKZ2mlOCOM=;
b=oh0PgcN65iQbjdKBh9Dkc9+Zt6nFZP863eunmmCDunW7+iAilwnttFWhnz8pBsPy4O0wv4VOoBFajgHP1sh/bzjXRPryv6S6dUKiicES510eHSv9dsxOj6+OmR7VCB4DiGFP/kbfh3po4KMDMrM/m2P2y5AflL8aRKHg/uAJEK686PXY+/RTYAykx8viMeT0PIIYdnB7ThfePF7M0hu60+kMYU6zbunv+rCwmhls6eEf+Lt22yBc7fBbdgL3o2Rx6iuUl/zFjZ0LHVrwin98UIQ3JFWlAAGJ3LRHoFKp2xwlMHtOujIQepPD1k7edcESSa15h7PMDYlFiDM/RfvVPg==
Received: from PS2P216MB1201.KORP216.PROD.OUTLOOK.COM (2603:1096:301:99::12)
by SE1P216MB1398.KORP216.PROD.OUTLOOK.COM (2603:1096:101:2a::6) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7897.28; Wed, 28 Aug
2024 14:48:49 +0000
Received: from PS2P216MB1201.KORP216.PROD.OUTLOOK.COM
([fe80::c79d:3496:b1fb:6bbd]) by PS2P216MB1201.KORP216.PROD.OUTLOOK.COM
([fe80::c79d:3496:b1fb:6bbd%6]) with mapi id 15.20.7897.027; Wed, 28 Aug 2024
14:48:49 +0000
From: Neelu Mishra
Subject: 1st page of GOOGLE?
Thread-Topic: 1st page of GOOGLE?
Thread-Index: AQHa+VljBeLGY5Z3sEOazQ/Ajx7U5A==
Date: Wed, 28 Aug 2024 14:48:49 +0000
Message-ID:
Accept-Language: en-IN, en-US
Content-Language: en-IN
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
x-tmn: [3NA6fAWDCaem3/SrGQdvi75t22stomJj]
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: PS2P216MB1201:EE_|SE1P216MB1398:EE_
x-ms-office365-filtering-correlation-id: 0986f2c1-2bf5-4ea3-34f1-08dcc77086e0
x-microsoft-antispam:
BCL:0;ARA:14566002|8060799006|15030799003|19110799003|461199028|15080799006|3412199025|440099028|102099032;
x-microsoft-antispam-message-info:
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
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0:
=?iso-8859-1?Q?ihWG0Qaw2usK5+XrO+VuC0OWw3TFLUxfNi/H6EW1fjYVYG2IiYhubvZNBJ?=
=?iso-8859-1?Q?Yad1wxYcFk1iCWYbaUbv/5nE+qFqh7g+VtJpwMbjj5cAcU3atPKxKb59dA?=
=?iso-8859-1?Q?C/w0DMt/B1ezOECh7aqQPuM1M7StoKQvGBPrkt+NucUWZuqtuJq3fBx5JA?=
=?iso-8859-1?Q?le17vg5Bvcva/7ZvB4MKd3Go93Y1CP4PHLQAs1PFmux96uruVVGFIlGoBD?=
=?iso-8859-1?Q?5iOwPbiBWwZoy0DtxbllTBUTiqCUxKVfszuMarcMoVIbqtEgKqX0Pe+jtk?=
=?iso-8859-1?Q?CA7jvR+cKmicqkcrQSbapA4xyeAylgj/Z1Vm3IC+v34L0Fv6FUFyuwhaeQ?=
=?iso-8859-1?Q?VYVVZvbEJfHAVJe1DnoBJHCqpaxcjjoZiqmkEdbJSAcuI0ZayLiSPhft+7?=
=?iso-8859-1?Q?1QAhBk2M6VTQ8T87s2WMgpZiuEV6DDpWHMHE2OK1B5t05PpGSwxglkd+FF?=
=?iso-8859-1?Q?yv7glJXYm7EEPUmt4nSwmJJbD/0n4ErG2izJFujB5aphLjcoEu0Ra3V9NP?=
=?iso-8859-1?Q?J9qO4bPl5Dtkb/Xj8th3wYgnz76hbXsvGm2GX3VbVPZwSKAQr4reKHxmWg?=
=?iso-8859-1?Q?Nv5RawI4Ax26cp954lN0hjezS5PL5DlHsjS22TM2WLqY4iKavcgsFbjjTI?=
=?iso-8859-1?Q?KsjPc+5ZSJERmBV6WMBIQVwjiZoR+EHFx7jnNqJJP3dwlPI/OVv0VpV+wv?=
=?iso-8859-1?Q?S3llBRhMMEZiyuUMH63XWkk/FJ+L3wjceWhJhWwKZANkFH0JBMU506xpNN?=
=?iso-8859-1?Q?6NEjJ5NtuIfSYZXjZeUqz2C1A2u81ObOAEqS2HD/Cq2GStn9rUS+4FrBhZ?=
=?iso-8859-1?Q?QQ5dT9vLjrn0B69tW58whydMxr2fWtV3Vpb6iU5AunxX1TW2UTNemQoTpQ?=
=?iso-8859-1?Q?3xr4D6GEAlwPyuEPOnZg5yhmqcmzQcwHxQrcNMYeaSFXc0SzJ3+MXHAoA9?=
=?iso-8859-1?Q?yKJkBcotcdd9IOL0VvXrvnz8UxMlSIFDsIfKYCalZlt4owq0DE02XWAV3m?=
=?iso-8859-1?Q?uIWySDbxjraKEhPXSCAMF7xpff3/BYNQzuPm5pU2mAtb2O3WCn4ynkFgoa?=
=?iso-8859-1?Q?8PzpCAv2mu5mb2RF1A5/Y2JOm3jnLKVro/c4OniLnnZK2QtFhDsGDCJ8Zd?=
=?iso-8859-1?Q?z7FJZeyZoQswp1/cNEsdSi0I3C7qR0pxkHH34cZmxz+q72EK1xrAxtrl0i?=
=?iso-8859-1?Q?3mtDcYLZPDkcIjIBzXhAxwdIDLKV4fx0nPqsAkxpE2s86EcLSZUci1Kwbk?=
=?iso-8859-1?Q?jZjxhsyTVfMnsM/PmEPZeoWJzbEtFZp6jS8TUbRz5ZetszXIrthPc1hxTl?=
=?iso-8859-1?Q?iLaO?=
Content-Type: multipart/alternative;
boundary="_000_PS2P216MB12015B788778BEAE89BD48FBA3952PS2P216MB1201KORP_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PS2P216MB1201.KORP216.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 0986f2c1-2bf5-4ea3-34f1-08dcc77086e0
X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Aug 2024 14:48:49.2534
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SE1P216MB1398
X-Spam_score: 7.2
X-Spam_score_int: 72
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, I noticed your website has great potential for growth!
We can promote your website that will give you first ranking on Google when
a person enter a keyword.
Content analysis details: (7.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[2603:1096:301:99:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:301:99:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:301:99:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:301:99:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:301:99:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:301:99:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:301:99:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:301:99:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[52.103.74.37 listed in will-spam-for-food.eu.org]
[52.103.74.37 listed in will-spam-for-food.eu.org]
[52.103.74.37 listed in will-spam-for-food.eu.org]
[52.103.74.37 listed in will-spam-for-food.eu.org]
[52.103.74.37 listed in will-spam-for-food.eu.org]
[52.103.74.37 listed in will-spam-for-food.eu.org]
[52.103.74.37 listed in will-spam-for-food.eu.org]
[52.103.74.37 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[52.103.74.37 listed in dnsbl.ahbl.org]
[52.103.74.37 listed in dnsbl.ahbl.org]
[52.103.74.37 listed in dnsbl.ahbl.org]
[52.103.74.37 listed in dnsbl.ahbl.org]
[2603:1096:301:99:0:0:0:12 listed in]
[dnsbl.ahbl.org]
[2603:1096:301:99:0:0:0:12 listed in]
[dnsbl.ahbl.org]
[2603:1096:301:99:0:0:0:12 listed in]
[dnsbl.ahbl.org]
[2603:1096:301:99:0:0:0:12 listed in]
[dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[52.103.74.37 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[52.103.74.37 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[52.103.74.37 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[52.103.74.37 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[52.103.74.37 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[52.103.74.37 listed in wl.mailspike.net]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 ARC_SIGNED Message has a ARC signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 ARC_VALID Message has a valid ARC signature
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[neelumishraseoservice(at)outlook.com]
1.2 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
1.4 MALFORMED_FREEMAIL Bad headers on message from free email service
Subject: {SPAM?} 1st page of GOOGLE?
--_000_PS2P216MB12015B788778BEAE89BD48FBA3952PS2P216MB1201KORP_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Hello,
I noticed your website has great potential for growth!
We can promote your website that will give you first ranking on Google when=
a person enter a keyword.
If you are interested, I can do a send quote and price list.
Kind Regards,
Neelu
--_000_PS2P216MB12015B788778BEAE89BD48FBA3952PS2P216MB1201KORP_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
1">
s-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Hello,
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 28 Aug 2024 10:52:44 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from
id 1sjLsd-00000000LLM-1wDP
for dave@doctor.nl2k.ab.ca;
Wed, 28 Aug 2024 10:50:47 -0600
Resent-From: The Doctor
Resent-Date: Wed, 28 Aug 2024 10:50:47 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-koreacentralazolkn19011037.outbound.protection.outlook.com ([52.103.74.37]:36826 helo=SLXP216CU001.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98 (FreeBSD))
(envelope-from
id 1sjKJp-000000009dp-3tjo
for sales@nk.ca;
Wed, 28 Aug 2024 09:10:50 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
b=HHaWUfiEaORGbQeeuU22yz5+VoixmRnouYHIYfbKXRBt4IirFRj+LhDuv75rY0RbaNWv0mhmILQcb3g2yHmAsV9aUcv5RyA8nju2vp/wRiIcbVfPY0Xo5t94y6ukv/3MJZ1/9KGny04seY4+Kq5DpXfUTymzSL/Jf3LlqoFYzfLgwy+3rMKFVhiu9oHhniKXjDANeDJS1dCHCVZ3uVK3IbkBS40lZ1OPnX+OVrsUaMZE7Y7MZYpMRvCc2LCGFo8qERU2gNp7McVhyZvHGuk0pC3KOGchF4ERU3D3jfE5W84QTyUN9tkmkKS3IdHlGRu1Hh7Gs0Vbhb/bKzo0ssTN9A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector10001;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=lnIiMy8HHmewiYwYY/9auayrBGCslxY7baKZ2mlOCOM=;
b=mbwH+pPMuC95DlcfQrsHgSnsqWm31uN8nsoZo/6M/o3E9XmEeeN8rrYTVfZ9GBM/9yAsxY2i8wsOcvD2f+SlyYPzOsa4KRqd1aYPjKNEVfHfRC16SWftnChzvmqbtXj6y/LxSmrO5hKMtq3oRQFwexh9yVkMdR0UHKws3ikhgZ6yZRYzF1hYbEcsg8Z5JDqNFAEbXDZJv6iRAZsAibfDhNCOVlrlGTVRbhAxg7fMXBVqzmDf+W34bEproYIdWryxT6fCKQbpWS0lLj5ebofE7qP4YJAfEBLJg69IyY6VUw+M5zZQpI9oAoGbS3re0CGLUlUrIa4US4HHPj8DNW4Q4A==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=lnIiMy8HHmewiYwYY/9auayrBGCslxY7baKZ2mlOCOM=;
b=oh0PgcN65iQbjdKBh9Dkc9+Zt6nFZP863eunmmCDunW7+iAilwnttFWhnz8pBsPy4O0wv4VOoBFajgHP1sh/bzjXRPryv6S6dUKiicES510eHSv9dsxOj6+OmR7VCB4DiGFP/kbfh3po4KMDMrM/m2P2y5AflL8aRKHg/uAJEK686PXY+/RTYAykx8viMeT0PIIYdnB7ThfePF7M0hu60+kMYU6zbunv+rCwmhls6eEf+Lt22yBc7fBbdgL3o2Rx6iuUl/zFjZ0LHVrwin98UIQ3JFWlAAGJ3LRHoFKp2xwlMHtOujIQepPD1k7edcESSa15h7PMDYlFiDM/RfvVPg==
Received: from PS2P216MB1201.KORP216.PROD.OUTLOOK.COM (2603:1096:301:99::12)
by SE1P216MB1398.KORP216.PROD.OUTLOOK.COM (2603:1096:101:2a::6) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7897.28; Wed, 28 Aug
2024 14:48:49 +0000
Received: from PS2P216MB1201.KORP216.PROD.OUTLOOK.COM
([fe80::c79d:3496:b1fb:6bbd]) by PS2P216MB1201.KORP216.PROD.OUTLOOK.COM
([fe80::c79d:3496:b1fb:6bbd%6]) with mapi id 15.20.7897.027; Wed, 28 Aug 2024
14:48:49 +0000
From: Neelu Mishra
Subject: 1st page of GOOGLE?
Thread-Topic: 1st page of GOOGLE?
Thread-Index: AQHa+VljBeLGY5Z3sEOazQ/Ajx7U5A==
Date: Wed, 28 Aug 2024 14:48:49 +0000
Message-ID:
Accept-Language: en-IN, en-US
Content-Language: en-IN
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
x-tmn: [3NA6fAWDCaem3/SrGQdvi75t22stomJj]
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: PS2P216MB1201:EE_|SE1P216MB1398:EE_
x-ms-office365-filtering-correlation-id: 0986f2c1-2bf5-4ea3-34f1-08dcc77086e0
x-microsoft-antispam:
BCL:0;ARA:14566002|8060799006|15030799003|19110799003|461199028|15080799006|3412199025|440099028|102099032;
x-microsoft-antispam-message-info:
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
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0:
=?iso-8859-1?Q?ihWG0Qaw2usK5+XrO+VuC0OWw3TFLUxfNi/H6EW1fjYVYG2IiYhubvZNBJ?=
=?iso-8859-1?Q?Yad1wxYcFk1iCWYbaUbv/5nE+qFqh7g+VtJpwMbjj5cAcU3atPKxKb59dA?=
=?iso-8859-1?Q?C/w0DMt/B1ezOECh7aqQPuM1M7StoKQvGBPrkt+NucUWZuqtuJq3fBx5JA?=
=?iso-8859-1?Q?le17vg5Bvcva/7ZvB4MKd3Go93Y1CP4PHLQAs1PFmux96uruVVGFIlGoBD?=
=?iso-8859-1?Q?5iOwPbiBWwZoy0DtxbllTBUTiqCUxKVfszuMarcMoVIbqtEgKqX0Pe+jtk?=
=?iso-8859-1?Q?CA7jvR+cKmicqkcrQSbapA4xyeAylgj/Z1Vm3IC+v34L0Fv6FUFyuwhaeQ?=
=?iso-8859-1?Q?VYVVZvbEJfHAVJe1DnoBJHCqpaxcjjoZiqmkEdbJSAcuI0ZayLiSPhft+7?=
=?iso-8859-1?Q?1QAhBk2M6VTQ8T87s2WMgpZiuEV6DDpWHMHE2OK1B5t05PpGSwxglkd+FF?=
=?iso-8859-1?Q?yv7glJXYm7EEPUmt4nSwmJJbD/0n4ErG2izJFujB5aphLjcoEu0Ra3V9NP?=
=?iso-8859-1?Q?J9qO4bPl5Dtkb/Xj8th3wYgnz76hbXsvGm2GX3VbVPZwSKAQr4reKHxmWg?=
=?iso-8859-1?Q?Nv5RawI4Ax26cp954lN0hjezS5PL5DlHsjS22TM2WLqY4iKavcgsFbjjTI?=
=?iso-8859-1?Q?KsjPc+5ZSJERmBV6WMBIQVwjiZoR+EHFx7jnNqJJP3dwlPI/OVv0VpV+wv?=
=?iso-8859-1?Q?S3llBRhMMEZiyuUMH63XWkk/FJ+L3wjceWhJhWwKZANkFH0JBMU506xpNN?=
=?iso-8859-1?Q?6NEjJ5NtuIfSYZXjZeUqz2C1A2u81ObOAEqS2HD/Cq2GStn9rUS+4FrBhZ?=
=?iso-8859-1?Q?QQ5dT9vLjrn0B69tW58whydMxr2fWtV3Vpb6iU5AunxX1TW2UTNemQoTpQ?=
=?iso-8859-1?Q?3xr4D6GEAlwPyuEPOnZg5yhmqcmzQcwHxQrcNMYeaSFXc0SzJ3+MXHAoA9?=
=?iso-8859-1?Q?yKJkBcotcdd9IOL0VvXrvnz8UxMlSIFDsIfKYCalZlt4owq0DE02XWAV3m?=
=?iso-8859-1?Q?uIWySDbxjraKEhPXSCAMF7xpff3/BYNQzuPm5pU2mAtb2O3WCn4ynkFgoa?=
=?iso-8859-1?Q?8PzpCAv2mu5mb2RF1A5/Y2JOm3jnLKVro/c4OniLnnZK2QtFhDsGDCJ8Zd?=
=?iso-8859-1?Q?z7FJZeyZoQswp1/cNEsdSi0I3C7qR0pxkHH34cZmxz+q72EK1xrAxtrl0i?=
=?iso-8859-1?Q?3mtDcYLZPDkcIjIBzXhAxwdIDLKV4fx0nPqsAkxpE2s86EcLSZUci1Kwbk?=
=?iso-8859-1?Q?jZjxhsyTVfMnsM/PmEPZeoWJzbEtFZp6jS8TUbRz5ZetszXIrthPc1hxTl?=
=?iso-8859-1?Q?iLaO?=
Content-Type: multipart/alternative;
boundary="_000_PS2P216MB12015B788778BEAE89BD48FBA3952PS2P216MB1201KORP_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PS2P216MB1201.KORP216.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 0986f2c1-2bf5-4ea3-34f1-08dcc77086e0
X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Aug 2024 14:48:49.2534
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SE1P216MB1398
X-Spam_score: 7.2
X-Spam_score_int: 72
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, I noticed your website has great potential for growth!
We can promote your website that will give you first ranking on Google when
a person enter a keyword.
Content analysis details: (7.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[2603:1096:301:99:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:301:99:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:301:99:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:301:99:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:301:99:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:301:99:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:301:99:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[2603:1096:301:99:0:0:0:12 listed in]
[will-spam-for-food.eu.org]
[52.103.74.37 listed in will-spam-for-food.eu.org]
[52.103.74.37 listed in will-spam-for-food.eu.org]
[52.103.74.37 listed in will-spam-for-food.eu.org]
[52.103.74.37 listed in will-spam-for-food.eu.org]
[52.103.74.37 listed in will-spam-for-food.eu.org]
[52.103.74.37 listed in will-spam-for-food.eu.org]
[52.103.74.37 listed in will-spam-for-food.eu.org]
[52.103.74.37 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[52.103.74.37 listed in dnsbl.ahbl.org]
[52.103.74.37 listed in dnsbl.ahbl.org]
[52.103.74.37 listed in dnsbl.ahbl.org]
[52.103.74.37 listed in dnsbl.ahbl.org]
[2603:1096:301:99:0:0:0:12 listed in]
[dnsbl.ahbl.org]
[2603:1096:301:99:0:0:0:12 listed in]
[dnsbl.ahbl.org]
[2603:1096:301:99:0:0:0:12 listed in]
[dnsbl.ahbl.org]
[2603:1096:301:99:0:0:0:12 listed in]
[dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[52.103.74.37 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[52.103.74.37 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[52.103.74.37 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[52.103.74.37 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[52.103.74.37 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[52.103.74.37 listed in wl.mailspike.net]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.0 ARC_SIGNED Message has a ARC signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.0 ARC_VALID Message has a valid ARC signature
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[neelumishraseoservice(at)outlook.com]
1.2 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
1.4 MALFORMED_FREEMAIL Bad headers on message from free email service
Subject: {SPAM?} 1st page of GOOGLE?
--_000_PS2P216MB12015B788778BEAE89BD48FBA3952PS2P216MB1201KORP_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Hello,
I noticed your website has great potential for growth!
We can promote your website that will give you first ranking on Google when=
a person enter a keyword.
If you are interested, I can do a send quote and price list.
Kind Regards,
Neelu
--_000_PS2P216MB12015B788778BEAE89BD48FBA3952PS2P216MB1201KORP_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
1">
s-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Hello,
color: rgb(0, 0, 0);">
color: rgb(0, 0, 0);">
I noticed your website has great potential for growth!
color: rgb(0, 0, 0);">
color: rgb(0, 0, 0);">
We can promote your website that will give you first ranking on Google when=
a person enter a keyword.
color: rgb(0, 0, 0);">
color: rgb(0, 0, 0);">
If you are interested, I can do a send quote and price list.
color: rgb(0, 0, 0);">
color: rgb(0, 0, 0);">
Kind Regards,
s-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Neelu
--_000_PS2P216MB12015B788778BEAE89BD48FBA3952PS2P216MB1201KORP_--