IDShield / LegalShield Phish from Microsoft

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Oct 2024 14:06:04 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sxtzU-000000006af-0hrC

for dave@doctor.nl2k.ab.ca;

Mon, 07 Oct 2024 14:06:00 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Oct 2024 14:05:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dm6nam12hn2228.outbound.protection.outlook.com ([52.100.166.228]:57184 helo=NAM12-DM6-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

id 1sxrfI-00000000LRa-2gHx

for Mailer-Daemon@doctor.nl2k.ab.ca;

Mon, 07 Oct 2024 11:37:07 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=o0b3Yjdw7VBNexjoUQg/m0/kRvsjgg5HC7ujX1LR6opq0wjsrxamkJpDxG1vEPUwVks8l8XPwb+I2WuW0pZzBTo3hySZeYQvcUUhbuDW4r5hGUQ5koVp7ODSP8uDDNLefyTrycdyh1LFPscAv9ailfbvxC/nNm5p+zeD31w+KxxB80VeQK7Yd96dz2hn143gPkSBwGW/CFV2hWVNsACqQZCYbj3kfSIruW03mkQfu1m6tQX89Kt8ggv/xRHml0q3cA8sCc2hTnX4XpYSiDr7x6CYaSg8V3KOvj9d+9ykHLMZmBTjsIRLB/Xop4PN+N8zDs6ZXBVt1zrn7Al7NILpaQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=25WIiKV8mwGQc9WM+a4oa3YNie8BgPQ7sYRusC3aS50=;

b=cLAmwpGCZ5p3r3FN0EP5y+IK9w9iSMsyl3i695UM6tmyeTLdt0VHtDvnLv0xbDfdVJXesyJ6eRso/8qLH96DW/B4jk0BKzAVuX9eRpSXNG8++T9oB/L0mcqm0gDvjWtic+CCgkUHZctSAHCNCKkxbTVJWA2Bgk2VUrkNcIKO4KQzucAMD62pJYTiyxovf7vEYqN39ve4pl45Z9uPHgQ9IRwKIwDoerS0vSnvGVMa/fPwOSUvXKXqxCgPwfjAC0sjd9iZo3JynQwxHadr3UsL/1zF+sYY36mig6rFktpWg66Mh1w7jnQXg9wZDSxLrBTiecN4f5N1v+cMw7CTp4dz2Q==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=pass

action=none header.from=legalshield.com; dkim=pass header.d=legalshield.com;

arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=legalshieldcorp.onmicrosoft.com;

s=selector2-legalshieldcorp-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=25WIiKV8mwGQc9WM+a4oa3YNie8BgPQ7sYRusC3aS50=;

b=l7aOTFmBxjY3H6M3CBqoMum3gCyBEG7lg2WW4TIwPzKulZsMPX1k1ftyoC7HdaRcE0mYQ61eWDsKWyJVklhnOwX/Az6f8P3vN0y76QGZyeNIMQKVKT1swhD5txBaqjWl+cA9ImjHDHzIhB3pRlIGmYGQcsGGb/0iImD9naa0s2U=

Received: from SA1PR16MB6436.namprd16.prod.outlook.com (2603:10b6:806:3e7::5)

by IA3PR16MB6773.namprd16.prod.outlook.com (2603:10b6:208:528::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8005.30; Mon, 7 Oct

2024 17:35:00 +0000

Received: from SA1PR16MB6436.namprd16.prod.outlook.com ([::1]) by

SA1PR16MB6436.namprd16.prod.outlook.com ([fe80::a390:e990:7202:9095%4]) with

Microsoft SMTP Server id 15.20.8005.029; Mon, 7 Oct 2024 17:35:00 +0000

From: noreply

To: Mail Delivery System

Subject: Automatic reply: Mail delivery failed: returning message to sender

Thread-Topic: Mail delivery failed: returning message to sender

Thread-Index: AQHbGN87cncjt47ZjECHQ+Fkb2T2vLJ7jLlo

Date: Mon, 7 Oct 2024 17:35:00 +0000

Message-ID:



References:

In-Reply-To:

X-MS-Has-Attach:

X-Auto-Response-Suppress: All

X-MS-Exchange-Inbox-Rules-Loop: noreply@legalshield.com

X-MS-TNEF-Correlator:

authentication-results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=legalshield.com;

x-ms-exchange-parent-message-id:

auto-submitted: auto-generated

x-ms-exchange-generated-message-source: Mailbox Rules Agent

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SA1PR16MB6436:EE_|IA3PR16MB6773:EE_

x-ms-office365-filtering-correlation-id: 0160692e-c777-492a-9476-08dce6f65e7f

x-ms-exchange-senderadcheck: 1

x-ms-exchange-antispam-relay: 0

x-microsoft-antispam:

BCL:0;ARA:13230040|50650200027|376014|1800799024|366016|1930700014|10070799003|80100003;

x-microsoft-antispam-message-info:

=?us-ascii?Q?yDEHEOlM5wm5piWmD6FpHKoRf/0zwSmvFEiyNANDb/DGe0I+NdQw4VJA8+Bl?=

=?us-ascii?Q?5n1pqos+ygW3NlAjQaVl6AnRibPwhYJjwfMM5wbasK7lrbQ87jHSFmGNrtGh?=

=?us-ascii?Q?8tMXNFtqD2PfD1LPpGuzJRun+800RYH3lkXfWTCD9p2OpnPnQUdJMf+Uujds?=

=?us-ascii?Q?gXkey8TNvgPn5wIEhYWVW9fAQperQX3bP5AZhH7lw2hJS2uuaZKSjvBEp2vv?=

=?us-ascii?Q?HGl25/3jl17tPPzwMT7rXAAgU2AJC8I2mbrayEOoyL31nydqi+Z1fGRykFFi?=

=?us-ascii?Q?Liw51YoQHuBnqLQyXzx5Ws8T3scjREqpp2H9oFraZniT/yHG0oOLFE2BbwF5?=

=?us-ascii?Q?/573sTxWhKxmwTSgRfgj96h1l9RdYB+BPJOg18slXRfDIhEZaVmroeL2x/nG?=

=?us-ascii?Q?RymKsMw/MliE+mkUcLRRRyX3h4kBu8Ldmsim6biEg2yxtXK4oaqkee2XKCI8?=

=?us-ascii?Q?UBZ54bBJCiuCvhjxW1QJUT5AlK9h+vVNZ5PZR7l2kEbLZWML3St9t1BQ7aBU?=

=?us-ascii?Q?CMjOxsWj91vqdBvI7e0jn1gfEw02nBe8i2tYK5bTdDamoxusvZnvqdHsabsJ?=

=?us-ascii?Q?Mx+o5G/Xqthe3ELtT4CoKp/A1b/HHt5/lCnWUbsT0SV3F+vtFXLHXBCBoqB6?=

=?us-ascii?Q?ciAFM4YsDsfVmprAp/PvHndtyMtByWDWQVecNwuxqXlsgpByxpB5A4ICIQix?=

=?us-ascii?Q?KCyoKdeemRkDE0SwuOgMYZU33bjyTSY6JVqtg1cQn0Wpbi0rMfDInqYFukAA?=

=?us-ascii?Q?99pDofJgugE3ixrWalhApv/C4lKho8P/d4tUrp3+bLnOKmyP0C98EB/L4xzV?=

=?us-ascii?Q?Ph536t/0oX2HkNg55VLAT9/PnwI2SSSZ5JC1ItHIxIj9p5s8CQhSqp4NJRR4?=

=?us-ascii?Q?CCz3cB8FgWhwXj9woMgYpRc+MkHzv13CTOWj8UVbq5peLtR5Yd3sTX/X/mUj?=

=?us-ascii?Q?pJO7HhqNbCR5qHrsrYmm3n9Ryu+1K5wBDkHcoLnFA2P6T2Gfiofm0ibGZQab?=

=?us-ascii?Q?C8hYNU/ObFkVX5+FRx1as5CGo0DCnMMbg62jHBYXjTgfYkvP1DtXioDXycup?=

=?us-ascii?Q?0UZF9LsaZpKgtnIVMiGXu2iSVbztZVeoPcMvwepsJgWHvIclC16uKMPB2HEn?=

=?us-ascii?Q?1l/ln4cXD8UY20TKWkIKqQqDxH+nu6YRGC84MyZ2lxa3BoQYyr0n3GUP6gcl?=

=?us-ascii?Q?3ulU33SAakcVSp9ye0cNwIzdupiRkPCSE1SN8C+I7bUUnJue145MRSeFYfB0?=

=?us-ascii?Q?Pk1VTcY3lT/nnkUkALITqe7vqDYGCw8JmNNcP9I6pA=3D=3D?=

x-forefront-antispam-report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:SA1PR16MB6436.namprd16.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(50650200027)(376014)(1800799024)(366016)(1930700014)(10070799003)(80100003);DIR:OUT;SFP:1501;

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

krxgMW8SjeZo8/tDweJlMxO8uqKdGaAZEXmCUvTU92wkF3rCgC07dIkXQ6wEddHvuNG11dnlvypLQs5xmGbmhnupOwYtn8AuahY/Q+DRk6+IoFM5jIDibCL8YaWj6NXhqCv3n071mez5PJR3NijWDVXvNwat7cpSR6u4mkjj1VTTBpTnShQg6+FSjYqdT1RHrCXEvxDf9P7lNOP5pcys6yAeVcV/8edHt/uCI3L5iWohNgCzsRrsUm/NLIbIkzUswYVWRGcpU9o3fW0GDzBGrVboIFYfiKh6LH1MQr01AH7GKvM149cB5X0DxANN8dAK

Content-Type: multipart/alternative;

boundary="_000_ae9ec463d9034232893c981602fddaecSA1PR16MB6436namprd16pr_"

MIME-Version: 1.0

X-OriginatorOrg: LegalShield.Com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SA1PR16MB6436.namprd16.prod.outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: 0160692e-c777-492a-9476-08dce6f65e7f

X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Oct 2024 17:35:00.1357

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: b4edc9f8-801a-47b2-841c-0e14544448fa

X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA3PR16MB6773

X-Spam_score: 5.6

X-Spam_score_int: 56

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Thank you for contacting LegalShield. This email inbox is

not monitored. To contact us please visit https://www.legalshield.com/contact.

Thank you for contacting LegalShield. This email inbox is not monitored.

To contact us please visit https://www.legalshield.com/contact.



Content analysis details: (5.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10b6:806:3e7:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:3e7:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:3e7:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:3e7:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:3e7:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:3e7:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:3e7:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:3e7:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[52.100.166.228 listed in will-spam-for-food.eu.org]

[52.100.166.228 listed in will-spam-for-food.eu.org]

[52.100.166.228 listed in will-spam-for-food.eu.org]

[52.100.166.228 listed in will-spam-for-food.eu.org]

[52.100.166.228 listed in will-spam-for-food.eu.org]

[52.100.166.228 listed in will-spam-for-food.eu.org]

[52.100.166.228 listed in will-spam-for-food.eu.org]

[52.100.166.228 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.100.166.228 listed in dnsbl.ahbl.org]

[52.100.166.228 listed in dnsbl.ahbl.org]

[52.100.166.228 listed in dnsbl.ahbl.org]

[52.100.166.228 listed in dnsbl.ahbl.org]

[2603:10b6:806:3e7:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:10b6:806:3e7:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:10b6:806:3e7:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:10b6:806:3e7:0:0:0:5 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.100.166.228 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.100.166.228 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.100.166.228 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.100.166.228 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.100.166.228 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.100.166.228 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_SIGNED Message has a ARC signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.7 FORGED_SPF_HELO No description available.

Subject: {SPAM?} Automatic reply: Mail delivery failed: returning message to sender



--_000_ae9ec463d9034232893c981602fddaecSA1PR16MB6436namprd16pr_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Thank you for contacting LegalShield. This email inbox is not monitored. To=

contact us please visit https://www.legalshield.com/contact.



--_000_ae9ec463d9034232893c981602fddaecSA1PR16MB6436namprd16pr_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable








>










:#000000; font-family:Calibri,Helvetica,sans-serif">


rt">
Thank you for contacting LegalShield. This email inbox is =

not monitored. To contact us please visit https://www.legalshield.com/conta=

ct.













--_000_ae9ec463d9034232893c981602fddaecSA1PR16MB6436namprd16pr_--

CAA Phish from Ukraine

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Oct 2024 09:39:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sxpoZ-000000008eo-3OqI

for dave@doctor.nl2k.ab.ca;

Mon, 07 Oct 2024 09:38:27 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Oct 2024 09:38:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [46.175.149.14] (port=50027 helo=i15er1s6sa51as5e.it)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sxoa0-00000000CsT-29Zo

for doctor@netknow.ca;

Mon, 07 Oct 2024 08:20:14 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1728310241;

s=s1; d=tutamail.com;

h=From:From:To:To:Subject:Subject:Content-Description:Content-ID:Content-Type:Content-Type:Content-Transfer-Encoding:Cc:Date:Date:In-Reply-To:MIME-Version:MIME-Version:Message-ID:Message-ID:Reply-To:References:Sender;

bh=nwQgL+cF0mG4OcMQtYnzt/gaMX7YUiPH2Kc2Uhpc0Pk=;

b=UGtEf5/eb2QSzXumGxpDX6msc+kLVN/eJVBKtKsZZEQ15eTxLqALOSK5NKL6yKxV

C4eD6C2b+w7HFZ5PF4hrK3v18HMSy0i84gALKHhraz9KhiVhymtt8Ua/Dnp9QZyzaRk

xQHRgO5JLf0Hc22SlQVdchNlEzLSIHhc+EUm7Scz3bJh5/1OIVwca54OirmQ5BsBUJ1

HUFYVMKWm0Vw4Udd01dS7Z/oFSElQd/hpexnRpsYjc4M6rd4mo7AMp2+HB/UxHhWXkv

p30aU5ainzzvv3V7ZyHP8OO3eMG8m3LX+ejTj/ZE4LWz8aNtXjDU6ZEJv0nGSAeMz8q

ZF6xJgUJlA==

Date: Mon, 7 Oct 2024 16:10:41 +0200 (CEST)

From: CAA Customer Care

To: Utgolovep

Message-ID:

Subject: Stay Safe with This Kit

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_Part_18536_1776140653.1728310241634"

X-Spam_score: 10.2

X-Spam_score_int: 102

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Be Road-Ready: The Kit You Need for Emergencies
[...]



Content analysis details: (10.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[46.175.149.14 listed in will-spam-for-food.eu.org]

[46.175.149.14 listed in will-spam-for-food.eu.org]

[46.175.149.14 listed in will-spam-for-food.eu.org]

[46.175.149.14 listed in will-spam-for-food.eu.org]

[46.175.149.14 listed in will-spam-for-food.eu.org]

[46.175.149.14 listed in will-spam-for-food.eu.org]

[46.175.149.14 listed in will-spam-for-food.eu.org]

[46.175.149.14 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[46.175.149.14 listed in dnsbl.ahbl.org]

[46.175.149.14 listed in dnsbl.ahbl.org]

[46.175.149.14 listed in dnsbl.ahbl.org]

[46.175.149.14 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[46.175.149.14 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[46.175.149.14 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[46.175.149.14 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[46.175.149.14 listed in dnsbl.ahbl.org]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image

3.0 GOOG_STO_NOIMG_HTML Apparently using google content hosting to avoid

URIBL

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} Stay Safe with This Kit



------=_Part_18536_1776140653.1728310241634

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable



Be Road-Ready: The Kit You Need for Emergencies <=

https://firebasestorage.googleapis.com/v0/b/project-30-z8l210.appspot.com/o=

/10_07_24%2FCAA%20Emergency%20Kit.html?alt=3Dmedia&token=3Df2005754-22ce-47=

0c-b300-1b1ba6b130b3>
googleapis.com/v0/b/project-30-z8l210.appspot.com/o/10_07_24%2FCAA%20Emerge=

ncy%20Kit.html?alt=3Dmedia&token=3Df2005754-22ce-470c-b300-1b1ba6b130b3> =

Discover More About Your Car Kit Offer
rebasestorage.googleapis.com/v0/b/project-30-z8l210.appspot.com/o/10_07_24%=

2FCAA%20Emergency%20Kit.html?alt=3Dmedia&token=3Df2005754-22ce-470c-b300-1b=

1ba6b130b3> =C2=A0 =20

------=_Part_18536_1776140653.1728310241634

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 7bit





























------=_Part_18536_1776140653.1728310241634--

Nigerian spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Oct 2024 08:12:04 -0600

Received: from mail-lj1-f180.google.com ([209.85.208.180]:49400)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sxoSa-000000009hK-0kDk

for dave@doctor.nl2k.ab.ca;

Mon, 07 Oct 2024 08:11:57 -0600

Received: by mail-lj1-f180.google.com with SMTP id 38308e7fff4ca-2fabe5c8c26so39909301fa.2

for ; Mon, 07 Oct 2024 07:09:49 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1728310182; x=1728914982; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=cnMvs9V3kl/eny3RyPgSGJ9sKgHXs5vAyHbakMrL72c=;

b=VvEUX1Lu/USBDjalHwU9uIX36P6ynfGi1kk1cY0A1VfZx9RuIAUJQ/k0X9JXUfTX59

67uj9mAarU6lYBPgWTbqUh6DFW2DH7k4h1xAgBoM7n1EJxSfbS6XbV+oe9S0Jyj1vO9c

LWDncRD9eps+0UXZl19EOagl68cBeQ6Dr6y89aaNAg2fBBaICZQgwZRjYUQPq7nNbQn7

fyVi7L815pL5oribbkjUpKo31OiNTC3t+osPb3PWGu9x2SjRrR3wsZodToL3dwVszvFQ

5753UpZAB2hYac7EAjDbUhQkiQCz8+FPaHeG5K9BQ+2SJMp8bheAwpjoyWSJyAdVfs9M

D0Rw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1728310182; x=1728914982;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=cnMvs9V3kl/eny3RyPgSGJ9sKgHXs5vAyHbakMrL72c=;

b=sKFgjDgl3Qw2eVVmOMUVis5sCf7iVPESiDIZ4XcmA464wDOgw0JGyC65tp/iHZbaDb

HZWT/UUqX2OyjLvtLs7V/UYm7/xfS50bUAZScrxs/9SEb+ZHCmLZvbZwV2ajpY3rmZcl

2vrpUuLBmQpQbzAMEgUQaI8QnRtwD8qwi2zgP8M6RVRw1xi85jq/letSNZ763NxBTFzc

6x2YrPet3MW/GUS7FGuAm0D3SthsQg9mCBeUnctxqd2LbEYqDBH1kvzyLHmlDRsyWT5/

E3Ct/K+aMFa98MbttjvwKTEsIoiMM+c1dcq1PHNsBGObNoPNSEp0T+XQ2lPQ6o7YBHZo

VK1Q==

X-Forwarded-Encrypted: i=1; AJvYcCXafddz4qaOZNYNGgiT36JsGZAatUTw+iZclY+GaQD9136IKagJeEY/Dkk8sMVemIXdMVXn@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YwdcQjOJ5ToDN9c6GzImibsmPoMrvff7Ja75uimlq2XmmXQFUFt

XqE4kaiHS82aJ1eCg9/rMJmuHTcQU6szHyV2UyJeDgX/ma4uFY7faDHuMhXsUURaBzcl+M0274g

TnI51MN/eP1qzgMcmlsyFEoVV94Q=

X-Google-Smtp-Source: AGHT+IHGOeWURrmJas0GVJYuOVVto2KQayrUgSVTr+WDfaIoDzOOPPNYcpcKN+ej/ELh4tOS0snnNsMmgy9vjUbS+2w=

X-Received: by 2002:a2e:a7ca:0:b0:2fb:b59:816a with SMTP id

38308e7fff4ca-2fb0b598349mr8378641fa.45.1728310181707; Mon, 07 Oct 2024

07:09:41 -0700 (PDT)

MIME-Version: 1.0

From: Mrs Aisha Al-Gaddafi

Date: Mon, 7 Oct 2024 08:09:22 -0600

Message-ID:

Subject: I need your assistance

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000007146c80623e392fd"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 22.9

X-Spam_score_int: 229

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings Dear Partner, I came across your e-mail contact

prior to a private search while in need of your assistance. My name is Aisha

Al-Gaddafi, a single Mother and a Widow with four Children. I am the only

biological Daughter of late Libyan President (Late Colonel Muammar Gaddafi).I

have investment funds worth Twenty Seven Million Five Hundred Thousand United

State Dollar ($27.500.000.00 ) [...]



Content analysis details: (22.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.208.180 listed in will-spam-for-food.eu.org]

[209.85.208.180 listed in will-spam-for-food.eu.org]

[209.85.208.180 listed in will-spam-for-food.eu.org]

[209.85.208.180 listed in will-spam-for-food.eu.org]

[209.85.208.180 listed in will-spam-for-food.eu.org]

[209.85.208.180 listed in will-spam-for-food.eu.org]

[209.85.208.180 listed in will-spam-for-food.eu.org]

[209.85.208.180 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.180 listed in dnsbl.ahbl.org]

[209.85.208.180 listed in dnsbl.ahbl.org]

[209.85.208.180 listed in dnsbl.ahbl.org]

[209.85.208.180 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.180 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.180 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.180 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.180 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.180 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.180 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[fffc4242(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mrsaishaalgaddafi5(at)gmail.com]

0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

0.9 URG_BIZ BODY: Contains urgent matter

2.5 MILLION_USD BODY: Talks about millions of dollars

2.7 HK_SCAM_N1 BODY: No description available.

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

1.5 HK_NAME_FM_MR_MRS No description available.

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

1.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

Subject: {SPAM?} I need your assistance



--0000000000007146c80623e392fd

Content-Type: text/plain; charset="UTF-8"



Greetings Dear Partner,







I came across your e-mail contact prior to a private search while in need

of your assistance. My name is Aisha Al-Gaddafi, a single Mother and a

Widow with four Children.







I am the only biological Daughter of late Libyan President (Late

Colonel Muammar Gaddafi).I have investment funds worth Twenty Seven Million

Five Hundred Thousand United State Dollar ($27.500.000.00 ) and i need a

trusted investment Manager/Partner because of my current refugee status,

however,







I am interested in you for investment project assistance in your country,

may be from there, we can build business relationship in the nearest future.







Your Urgent Reply Will Be Appreciated if really this transaction interests

you. Contact me at this my private email address







Best Regards



Mrs Aisha Al-Gaddafi



--0000000000007146c80623e392fd

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




al;background-position:initial;background-size:initial;background-repeat:in=

itial;background-origin:initial;background-clip:initial;font-size:12pt;font=

-family:"Times New Roman","serif"">
:rgb(38,40,42)">Greetings Dear Partner,






ition:initial;background-size:initial;background-repeat:initial;background-=

origin:initial;background-clip:initial;font-size:12pt;font-family:"Tim=

es New Roman","serif"">=

=C2=A0






ition:initial;background-size:initial;background-repeat:initial;background-=

origin:initial;background-clip:initial;font-size:12pt;font-family:"Tim=

es New Roman","serif"">I=

came across your e-mail contact

prior to a private search while in=C2=A0need of your assistance. My name is=

Aisha

Al-Gaddafi, a single Mother and a Widow with four Children.






ition:initial;background-size:initial;background-repeat:initial;background-=

origin:initial;background-clip:initial;font-size:12pt;font-family:"Tim=

es New Roman","serif"">=

=C2=A0






ition:initial;background-size:initial;background-repeat:initial;background-=

origin:initial;background-clip:initial;font-size:12pt;font-family:"Tim=

es New Roman","serif"">I=

am the only biological Daughter

of late Libyan President (Late Colonel=C2=A0Muammar Gaddafi).I have investm=

ent

funds worth Twenty Seven=C2=A0Million Five Hundred Thousand United State Do=

llar

($27.500.000.00 )=C2=A0and i need a trusted investment Manager/Partner beca=

use

of my current=C2=A0refugee status, however,






ition:initial;background-size:initial;background-repeat:initial;background-=

origin:initial;background-clip:initial;font-size:12pt;font-family:"Tim=

es New Roman","serif"">=

=C2=A0






ition:initial;background-size:initial;background-repeat:initial;background-=

origin:initial;background-clip:initial;font-size:12pt;font-family:"Tim=

es New Roman","serif"">I=

am interested in you for

investment project assistance in your=C2=A0country, may be from there, we c=

an

build business relationship in the nearest future.






ition:initial;background-size:initial;background-repeat:initial;background-=

origin:initial;background-clip:initial;font-size:12pt;font-family:"Tim=

es New Roman","serif"">=

=C2=A0






ition:initial;background-size:initial;background-repeat:initial;background-=

origin:initial;background-clip:initial;font-size:12pt;font-family:"Tim=

es New Roman","serif"">Y=

our Urgent Reply Will Be

Appreciated if really this transaction interests you.=C2=A0Contact me at th=

is

my private email address=C2=A0






ition:initial;background-size:initial;background-repeat:initial;background-=

origin:initial;background-clip:initial;font-size:12pt;font-family:"Tim=

es New Roman","serif"">=

=C2=A0






ition:initial;background-size:initial;background-repeat:initial;background-=

origin:initial;background-clip:initial;font-size:12pt;font-family:"Tim=

es New Roman","serif"">B=

est Regards






tial;background-size:initial;background-repeat:initial;background-origin:in=

itial;background-clip:initial;margin-right:0in;margin-left:0in;font-size:12=

pt;font-family:"Times New Roman","serif"">
=3D"color:rgb(38,40,42)">Mrs Aisha Al-Gaddafi






ize:11pt;font-family:Calibri,"sans-serif"">=C2=A0






ize:11pt;font-family:Calibri,"sans-serif"">=C2=A0





--0000000000007146c80623e392fd--

French language Paypal Phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Oct 2024 07:34:06 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sxnrZ-00000000NgU-3zhI

for dave@doctor.nl2k.ab.ca;

Mon, 07 Oct 2024 07:33:25 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Oct 2024 07:33:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [45.80.215.157] (port=53866 helo=managergram.com.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sxkIZ-00000000HPO-2OO4

for doctor@nl2k.ab.ca;

Mon, 07 Oct 2024 03:45:18 -0600

Received: by managergram.com.com (Postfix, from userid 33)

id 234C85B0EE; Mon, 7 Oct 2024 07:33:14 +0000 (UTC)

To: doctor@nl2k.ab.ca

Subject: =?UTF-8?B?TUVUVEVaIMOAIEpPVVJTIFZPUyBJTkZPUk1BVElPTlM=?=

Date: Mon, 7 Oct 2024 07:32:37 +0000

From: =?UTF-8?B?UGF5UGFs?=

Message-ID: <7bab4f775e95229f21250d944f6e406d@compte.fr>

List-Unsubscribe: mailto:bounce395-lYl8gSaS9CCHRx9@compte.fr?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1a79db978737e0ef7ffe78ae99130ab2a"

X-Spam_score: 8.9

X-Spam_score_int: 89

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:   Bonjour,Une mise à jour de notre serveur a

été effectuée afin de vous garantir un meilleur service

et une meilleur sécurité.Pour terminer le processus de cell

[...]



Content analysis details: (8.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

[45.80.215.157 listed in dnsbl.ahbl.org]

[45.80.215.157 listed in dnsbl.ahbl.org]

[45.80.215.157 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=www-data%40managergram.com.com;ip=45.80.215.157;r=doctor.nl2k.ab.ca]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=managergram.com.com;ip=45.80.215.157;r=doctor.nl2k.ab.ca]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

Subject: {SPAM?} =?UTF-8?B?TUVUVEVaIMOAIEpPVVJTIFZPUyBJTkZPUk1BVElPTlM=?=



This is a multi-part message in MIME format.



--1a79db978737e0ef7ffe78ae99130ab2a

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: base64



DQoNCg0KDQoNCg0KDQoNCg0KDQoNCiZuYnNwOw0KDQoNCg0KQm9uam91cixVbmUgbWlzZSAmYWdy

YXZlOyBqb3VyIGRlIG5vdHJlIHNlcnZldXIgYSAmZWFjdXRlO3QmZWFjdXRlOyBlZmZlY3R1JmVh

Y3V0ZTtlIGFmaW4gZGUgdm91cyBnYXJhbnRpciB1biBtZWlsbGV1ciBzZXJ2aWNlIGV0IHVuZSBt

ZWlsbGV1ciBzJmVhY3V0ZTtjdXJpdCZlYWN1dGU7LlBvdXIgdGVybWluZXIgbGUgcHJvY2Vzc3Vz

IGRlIGNlbGxlLWNpLHZvdXMgZGV2ZXogaW1wJmVhY3V0ZTtyYXRpdmVtZW50IG1ldHRyZSAmYWdy

YXZlOyBqb3VyIHZvcyBpbmZvcm1hdGlvbnMgc3VyIHZvdHJlIGNvbXB0ZSBwb3VyIHYmZWFjdXRl

O3JpZmllciBxdSdpbCBzJ2FnaXQgYmllbiBkZSB2b3VzIHNpbm9uIGlsIHNlcmEgYXVzc2l0Jm9j

aXJjO3QgYmxvcXUmZWFjdXRlOyBkYW5zIGxlcyAyNGggcXVpIHN1aXZlbnQuDQoNCg0KDQptZXR0

cmUgJmFncmF2ZTsgam91ciBtZXMgaW5mb21hcnRpb25zDQoNCg0KDQombmJzcDsNCg0KDQoNCiZj

b3B5O1BheXBhbCAyMDI0TWVyY2kgZGUgbmUgcGFzIHImZWFjdXRlO3BvbmRyZSAmYWdyYXZlOyBj

ZXQgZW1haWwuIE5vdXMgbmUgc29tbWVzIHBhcyBlbiBtZXN1cmUgZGUgciZlYWN1dGU7cG9uZHJl

IGF1eCBkZW1hbmRlcyBlbnZveSZlYWN1dGU7ZXMgJmFncmF2ZTsgY2V0dGUgYWRyZXNzZS4gUG91

ciBvYnRlbmlyIGRlcyByJmVhY3V0ZTtwb25zZXMgaW1tJmVhY3V0ZTtkaWF0ZXMgJmFncmF2ZTsg

dm9zIHF1ZXN0aW9ucywgdmlzaXRleiBub3RyZSBjZW50cmUgZCdhaWRlIGVuIGNsaXF1YW50IHN1

ciAiQWlkZSIgc2l0dSZlYWN1dGU7IHN1ciBuJ2ltcG9ydGUgcXVlbGxlIHBhZ2UgUGEgeVBhbCBv

dSBwYXIgZS1tYWlsLg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCiZuYnNwOw==





--1a79db978737e0ef7ffe78ae99130ab2a

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: base64



PHRhYmxlIGJvcmRlcj0iMCIgd2lkdGg9IjEwMCUiIGNlbGxzcGFjaW5nPSIwIiBjZWxscGFkZGlu

Zz0iMCI+DQo8dGJvZHk+DQo8dHI+DQo8dGQgc3R5bGU9InZlcnRpY2FsLWFsaWduOiB0b3A7IGJh

Y2tncm91bmQtY29sb3I6ICNmZmZmZmY7IHBhZGRpbmc6IDBweDsiIGFsaWduPSJjZW50ZXIiPg0K

PHRhYmxlIHN0eWxlPSJtaW4td2lkdGg6IDQ4MHB4OyIgYm9yZGVyPSIwIiB3aWR0aD0iNDgwIiBj

ZWxsc3BhY2luZz0iMCIgY2VsbHBhZGRpbmc9IjAiPg0KPHRib2R5Pg0KPHRyPg0KPHRkIHN0eWxl

PSJ2ZXJ0aWNhbC1hbGlnbjogdG9wOyBtaW4td2lkdGg6IDQ4MHB4OyBwYWRkaW5nOiAwcHg7IiBh

bGlnbj0ibGVmdCI+PGltZyBzcmM9Imh0dHBzOi8vaGVpbmJhdmViLWY4Y2RjZi5pbmdyZXNzLWJh

cm9ubi5ld3AubGl2ZS93cC1jb250ZW50L3BsdWdpbnMvcHAxNDQucG5nIiBhbHQ9IiIgd2lkdGg9

IjE1MCIgaGVpZ2h0PSI5NCIgLz48YnIgLz4NCjx0YWJsZSBzdHlsZT0iaGVpZ2h0OiAyNTRweDsg

YmFja2dyb3VuZC1jb2xvcjogI2ZmZmZmZjsiIGJvcmRlcj0iMCIgd2lkdGg9IjQ4MCIgY2VsbHNw

YWNpbmc9IjAiIGNlbGxwYWRkaW5nPSIwIiBhbGlnbj0iY2VudGVyIj4NCjx0Ym9keT4NCjx0ciBz

dHlsZT0iaGVpZ2h0OiA1cHg7Ij4NCjx0ZCBzdHlsZT0iaGVpZ2h0OiA1cHg7IHdpZHRoOiA0Nzcu

MzMzcHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IiBhbGlnbj0ibGVmdCI+Jm5ic3A7PC90ZD4NCjwv

dHI+DQo8dHIgc3R5bGU9ImhlaWdodDogMjA2cHg7Ij4NCjx0ZCBzdHlsZT0iZm9udC1zaXplOiAx

M3B4OyBib3JkZXItdG9wOiAxcHggc29saWQgI2U2ZTZlNjsgaGVpZ2h0OiAyMDZweDsgZm9udC1m

YW1pbHk6IEFyaWFsLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IHdpZHRoOiA0MzcuMzMzcHg7IHZl

cnRpY2FsLWFsaWduOiB0b3A7IGNvbG9yOiAjMDAwMDAwOyBwYWRkaW5nLXRvcDogMjBweDsgcGFk

ZGluZy1sZWZ0OiAyMHB4OyBwYWRkaW5nLXJpZ2h0OiAyMHB4OyIgYWxpZ249ImxlZnQiPg0KPHA+

Qm9uam91ciw8YnIgLz48YnIgLz5VbmUgbWlzZSAmYWdyYXZlOyBqb3VyIGRlIG5vdHJlIHNlcnZl

dXIgYSAmZWFjdXRlO3QmZWFjdXRlOyBlZmZlY3R1JmVhY3V0ZTtlIGFmaW4gZGUgdm91cyBnYXJh

bnRpciB1biBtZWlsbGV1ciBzZXJ2aWNlIGV0IHVuZSBtZWlsbGV1ciBzJmVhY3V0ZTtjdXJpdCZl

YWN1dGU7LjxiciAvPlBvdXIgdGVybWluZXIgbGUgcHJvY2Vzc3VzIGRlIGNlbGxlLWNpLHZvdXMg

ZGV2ZXogaW1wJmVhY3V0ZTtyYXRpdmVtZW50IG1ldHRyZSAmYWdyYXZlOyBqb3VyIHZvcyBpbmZv

cm1hdGlvbnMgc3VyIHZvdHJlIGNvbXB0ZSBwb3VyIHYmZWFjdXRlO3JpZmllciBxdSdpbCBzJ2Fn

aXQgYmllbiBkZSB2b3VzIHNpbm9uIGlsIHNlcmEgYXVzc2l0Jm9jaXJjO3QgYmxvcXUmZWFjdXRl

OyBkYW5zIGxlcyAyNGggcXVpIHN1aXZlbnQuPGJyIC8+PGJyIC8+PC9wPg0KPHRhYmxlIGNsYXNz

PSJtXzMwMTg0MDgwMjM2MTU5Nzk3NDJzbS13LWZ1bGwiIHN0eWxlPSJ3aWR0aDogMjMycHg7IGZv

bnQtZmFtaWx5OiAnT3BlbiBTYW5zJywgUm9ib3RvLCB1aS1zYW5zLXNlcmlmLCAnU2Vnb2UgVUkn

LCBBcmlhbCwgLWFwcGxlLXN5c3RlbSwgc2Fucy1zZXJpZjsgaGVpZ2h0OiAzNXB4OyBtYXJnaW4t

bGVmdDogMTAwcHg7IiByb2xlPSJwcmVzZW50YXRpb24iIGNlbGxzcGFjaW5nPSIwIiBjZWxscGFk

ZGluZz0iMCI+DQo8dGJvZHkgc3R5bGU9ImZvbnQtZmFtaWx5OiAnT3BlbiBTYW5zJyxSb2JvdG8s

dWktc2Fucy1zZXJpZiwnU2Vnb2UgVUknLEFyaWFsLC1hcHBsZS1zeXN0ZW0sc2Fucy1zZXJpZjsi

Pg0KPHRyIHN0eWxlPSJmb250LWZhbWlseTogJ09wZW4gU2FucycsUm9ib3RvLHVpLXNhbnMtc2Vy

aWYsJ1NlZ29lIFVJJyxBcmlhbCwtYXBwbGUtc3lzdGVtLHNhbnMtc2VyaWY7Ij4NCjx0aCBzdHls

ZT0iYm9yZGVyLXJhZGl1czogOTk5OXB4OyBmb250LWZhbWlseTogJ09wZW4gU2FucycsIFJvYm90

bywgdWktc2Fucy1zZXJpZiwgJ1NlZ29lIFVJJywgQXJpYWwsIC1hcHBsZS1zeXN0ZW0sIHNhbnMt

c2VyaWY7IGJhY2tncm91bmQtY29sb3I6IGJsdWU7IGJvcmRlcjogMXB4IHNvbGlkICMwMDc0NjE7

IHdpZHRoOiAyMjkuMzMzcHg7Ij48YSBzdHlsZT0idGV4dC1kZWNvcmF0aW9uOiBub25lOyBkaXNw

bGF5OiBibG9jazsgcGFkZGluZy10b3A6IDE4cHg7IHBhZGRpbmctYm90dG9tOiAxOHB4OyBmb250

LXNpemU6IDE0cHg7IGxpbmUtaGVpZ2h0OiAxMDAlOyBmb250LWZhbWlseTogJ09wZW4gU2Fucycs

Um9ib3RvLHVpLXNhbnMtc2VyaWYsJ1NlZ29lIFVJJyxBcmlhbCwtYXBwbGUtc3lzdGVtLHNhbnMt

c2VyaWY7IGNvbG9yOiAjZmZmZmZmOyIgaHJlZj0iaHR0cHM6Ly9zaXRlcy5nb29nbGUuY29tL3Zp

ZXcvenJldGVyL2hvbWUiIHRhcmdldD0iX2JsYW5rIiByZWw9Im5vb3BlbmVyIj5tZXR0cmUgJmFn

cmF2ZTsgam91ciBtZXMgaW5mb21hcnRpb25zPC9hPjwvdGg+DQo8L3RyPg0KPC90Ym9keT4NCjwv

dGFibGU+DQo8cCBzdHlsZT0idGV4dC1hbGlnbjogbGVmdDsiPiZuYnNwOzwvcD4NCjwvdGQ+DQo8

L3RyPg0KPHRyIHN0eWxlPSJoZWlnaHQ6IDQ4cHg7Ij4NCjx0ZCBzdHlsZT0iZm9udC1zaXplOiAx

MnB4OyBoZWlnaHQ6IDQzcHg7IGZvbnQtZmFtaWx5OiBBcmlhbCwgSGVsdmV0aWNhLCBzYW5zLXNl

cmlmOyB3aWR0aDogNDE3LjMzM3B4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBjb2xvcjogIzAwMDAw

MDsgYmFja2dyb3VuZC1jb2xvcjogI2VkZWRlZDsgcGFkZGluZzogMjBweCAzMHB4IDIzcHg7IiBh

bGlnbj0ibGVmdCI+PHNwYW4gaWQ9InAyOCI+PHNwYW4gaWQ9IjMxIj4mY29weTtQYXlwYWw8L3Nw

YW4+IDIwMjQ8L3NwYW4+PGJyIC8+TWVyY2kgZGUgbmUgcGFzIHImZWFjdXRlO3BvbmRyZSAmYWdy

YXZlOyBjZXQgZW1haWwuIE5vdXMgbmUgc29tbWVzIHBhcyBlbiBtZXN1cmUgZGUgciZlYWN1dGU7

cG9uZHJlIGF1eCBkZW1hbmRlcyBlbnZveSZlYWN1dGU7ZXMgJmFncmF2ZTsgY2V0dGUgYWRyZXNz

ZS4gUG91ciBvYnRlbmlyIGRlcyByJmVhY3V0ZTtwb25zZXMgaW1tJmVhY3V0ZTtkaWF0ZXMgJmFn

cmF2ZTsgdm9zIHF1ZXN0aW9ucywgdmlzaXRleiBub3RyZSBjZW50cmUgZCdhaWRlIGVuIGNsaXF1

YW50IHN1ciAiQWlkZSIgc2l0dSZlYWN1dGU7IHN1ciBuJ2ltcG9ydGUgcXVlbGxlIHBhZ2UgUGEg

eVBhbCBvdSBwYXIgZS1tYWlsLjwvdGQ+DQo8L3RyPg0KPC90Ym9keT4NCjwvdGFibGU+DQo8L3Rk

Pg0KPC90cj4NCjwvdGJvZHk+DQo8L3RhYmxlPg0KPC90ZD4NCjwvdHI+DQo8L3Rib2R5Pg0KPC90

YWJsZT4NCjxwPiZuYnNwOzwvcD4=







--1a79db978737e0ef7ffe78ae99130ab2a--

French language Paypal Phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Oct 2024 07:34:06 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sxnrn-00000000Nh6-3h9K

for dave@doctor.nl2k.ab.ca;

Mon, 07 Oct 2024 07:33:39 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Oct 2024 07:33:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [45.80.215.157] (port=37358 helo=managergram.com.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sxlpn-00000000K31-3v0z

for games@nl2k.ab.ca;

Mon, 07 Oct 2024 05:24:04 -0600

Received: by managergram.com.com (Postfix, from userid 33)

id 1CCEF46258; Mon, 7 Oct 2024 07:33:14 +0000 (UTC)

To: games@nl2k.ab.ca

Subject: =?UTF-8?B?TUVUVEVaIMOAIEpPVVJTIFZPUyBJTkZPUk1BVElPTlM=?=

Date: Mon, 7 Oct 2024 07:32:37 +0000

From: =?UTF-8?B?UGF5UGFs?=

Message-ID: <7c71a4e803ee170ef36ebf5cc0cb145a@compte.fr>

List-Unsubscribe: mailto:bounce395-lYl8gSaS9CCHRx9@compte.fr?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1099daa186988336b909c4951856f5eef"

X-Spam_score: 8.0

X-Spam_score_int: 80

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:   Bonjour,Une mise à jour de notre serveur a

été effectuée afin de vous garantir un meilleur service

et une meilleur sécurité.Pour terminer le processus de cell

[...]



Content analysis details: (8.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

[45.80.215.157 listed in dnsbl.ahbl.org]

[45.80.215.157 listed in dnsbl.ahbl.org]

[45.80.215.157 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=managergram.com.com;ip=45.80.215.157;r=doctor.nl2k.ab.ca]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} =?UTF-8?B?TUVUVEVaIMOAIEpPVVJTIFZPUyBJTkZPUk1BVElPTlM=?=



This is a multi-part message in MIME format.



--1099daa186988336b909c4951856f5eef

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: base64



DQoNCg0KDQoNCg0KDQoNCg0KDQoNCiZuYnNwOw0KDQoNCg0KQm9uam91cixVbmUgbWlzZSAmYWdy

YXZlOyBqb3VyIGRlIG5vdHJlIHNlcnZldXIgYSAmZWFjdXRlO3QmZWFjdXRlOyBlZmZlY3R1JmVh

Y3V0ZTtlIGFmaW4gZGUgdm91cyBnYXJhbnRpciB1biBtZWlsbGV1ciBzZXJ2aWNlIGV0IHVuZSBt

ZWlsbGV1ciBzJmVhY3V0ZTtjdXJpdCZlYWN1dGU7LlBvdXIgdGVybWluZXIgbGUgcHJvY2Vzc3Vz

IGRlIGNlbGxlLWNpLHZvdXMgZGV2ZXogaW1wJmVhY3V0ZTtyYXRpdmVtZW50IG1ldHRyZSAmYWdy

YXZlOyBqb3VyIHZvcyBpbmZvcm1hdGlvbnMgc3VyIHZvdHJlIGNvbXB0ZSBwb3VyIHYmZWFjdXRl

O3JpZmllciBxdSdpbCBzJ2FnaXQgYmllbiBkZSB2b3VzIHNpbm9uIGlsIHNlcmEgYXVzc2l0Jm9j

aXJjO3QgYmxvcXUmZWFjdXRlOyBkYW5zIGxlcyAyNGggcXVpIHN1aXZlbnQuDQoNCg0KDQptZXR0

cmUgJmFncmF2ZTsgam91ciBtZXMgaW5mb21hcnRpb25zDQoNCg0KDQombmJzcDsNCg0KDQoNCiZj

b3B5O1BheXBhbCAyMDI0TWVyY2kgZGUgbmUgcGFzIHImZWFjdXRlO3BvbmRyZSAmYWdyYXZlOyBj

ZXQgZW1haWwuIE5vdXMgbmUgc29tbWVzIHBhcyBlbiBtZXN1cmUgZGUgciZlYWN1dGU7cG9uZHJl

IGF1eCBkZW1hbmRlcyBlbnZveSZlYWN1dGU7ZXMgJmFncmF2ZTsgY2V0dGUgYWRyZXNzZS4gUG91

ciBvYnRlbmlyIGRlcyByJmVhY3V0ZTtwb25zZXMgaW1tJmVhY3V0ZTtkaWF0ZXMgJmFncmF2ZTsg

dm9zIHF1ZXN0aW9ucywgdmlzaXRleiBub3RyZSBjZW50cmUgZCdhaWRlIGVuIGNsaXF1YW50IHN1

ciAiQWlkZSIgc2l0dSZlYWN1dGU7IHN1ciBuJ2ltcG9ydGUgcXVlbGxlIHBhZ2UgUGEgeVBhbCBv

dSBwYXIgZS1tYWlsLg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCiZuYnNwOw==





--1099daa186988336b909c4951856f5eef

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: base64



PHRhYmxlIGJvcmRlcj0iMCIgd2lkdGg9IjEwMCUiIGNlbGxzcGFjaW5nPSIwIiBjZWxscGFkZGlu

Zz0iMCI+DQo8dGJvZHk+DQo8dHI+DQo8dGQgc3R5bGU9InZlcnRpY2FsLWFsaWduOiB0b3A7IGJh

Y2tncm91bmQtY29sb3I6ICNmZmZmZmY7IHBhZGRpbmc6IDBweDsiIGFsaWduPSJjZW50ZXIiPg0K

PHRhYmxlIHN0eWxlPSJtaW4td2lkdGg6IDQ4MHB4OyIgYm9yZGVyPSIwIiB3aWR0aD0iNDgwIiBj

ZWxsc3BhY2luZz0iMCIgY2VsbHBhZGRpbmc9IjAiPg0KPHRib2R5Pg0KPHRyPg0KPHRkIHN0eWxl

PSJ2ZXJ0aWNhbC1hbGlnbjogdG9wOyBtaW4td2lkdGg6IDQ4MHB4OyBwYWRkaW5nOiAwcHg7IiBh

bGlnbj0ibGVmdCI+PGltZyBzcmM9Imh0dHBzOi8vaGVpbmJhdmViLWY4Y2RjZi5pbmdyZXNzLWJh

cm9ubi5ld3AubGl2ZS93cC1jb250ZW50L3BsdWdpbnMvcHAxNDQucG5nIiBhbHQ9IiIgd2lkdGg9

IjE1MCIgaGVpZ2h0PSI5NCIgLz48YnIgLz4NCjx0YWJsZSBzdHlsZT0iaGVpZ2h0OiAyNTRweDsg

YmFja2dyb3VuZC1jb2xvcjogI2ZmZmZmZjsiIGJvcmRlcj0iMCIgd2lkdGg9IjQ4MCIgY2VsbHNw

YWNpbmc9IjAiIGNlbGxwYWRkaW5nPSIwIiBhbGlnbj0iY2VudGVyIj4NCjx0Ym9keT4NCjx0ciBz

dHlsZT0iaGVpZ2h0OiA1cHg7Ij4NCjx0ZCBzdHlsZT0iaGVpZ2h0OiA1cHg7IHdpZHRoOiA0Nzcu

MzMzcHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IiBhbGlnbj0ibGVmdCI+Jm5ic3A7PC90ZD4NCjwv

dHI+DQo8dHIgc3R5bGU9ImhlaWdodDogMjA2cHg7Ij4NCjx0ZCBzdHlsZT0iZm9udC1zaXplOiAx

M3B4OyBib3JkZXItdG9wOiAxcHggc29saWQgI2U2ZTZlNjsgaGVpZ2h0OiAyMDZweDsgZm9udC1m

YW1pbHk6IEFyaWFsLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IHdpZHRoOiA0MzcuMzMzcHg7IHZl

cnRpY2FsLWFsaWduOiB0b3A7IGNvbG9yOiAjMDAwMDAwOyBwYWRkaW5nLXRvcDogMjBweDsgcGFk

ZGluZy1sZWZ0OiAyMHB4OyBwYWRkaW5nLXJpZ2h0OiAyMHB4OyIgYWxpZ249ImxlZnQiPg0KPHA+

Qm9uam91ciw8YnIgLz48YnIgLz5VbmUgbWlzZSAmYWdyYXZlOyBqb3VyIGRlIG5vdHJlIHNlcnZl

dXIgYSAmZWFjdXRlO3QmZWFjdXRlOyBlZmZlY3R1JmVhY3V0ZTtlIGFmaW4gZGUgdm91cyBnYXJh

bnRpciB1biBtZWlsbGV1ciBzZXJ2aWNlIGV0IHVuZSBtZWlsbGV1ciBzJmVhY3V0ZTtjdXJpdCZl

YWN1dGU7LjxiciAvPlBvdXIgdGVybWluZXIgbGUgcHJvY2Vzc3VzIGRlIGNlbGxlLWNpLHZvdXMg

ZGV2ZXogaW1wJmVhY3V0ZTtyYXRpdmVtZW50IG1ldHRyZSAmYWdyYXZlOyBqb3VyIHZvcyBpbmZv

cm1hdGlvbnMgc3VyIHZvdHJlIGNvbXB0ZSBwb3VyIHYmZWFjdXRlO3JpZmllciBxdSdpbCBzJ2Fn

aXQgYmllbiBkZSB2b3VzIHNpbm9uIGlsIHNlcmEgYXVzc2l0Jm9jaXJjO3QgYmxvcXUmZWFjdXRl

OyBkYW5zIGxlcyAyNGggcXVpIHN1aXZlbnQuPGJyIC8+PGJyIC8+PC9wPg0KPHRhYmxlIGNsYXNz

PSJtXzMwMTg0MDgwMjM2MTU5Nzk3NDJzbS13LWZ1bGwiIHN0eWxlPSJ3aWR0aDogMjMycHg7IGZv

bnQtZmFtaWx5OiAnT3BlbiBTYW5zJywgUm9ib3RvLCB1aS1zYW5zLXNlcmlmLCAnU2Vnb2UgVUkn

LCBBcmlhbCwgLWFwcGxlLXN5c3RlbSwgc2Fucy1zZXJpZjsgaGVpZ2h0OiAzNXB4OyBtYXJnaW4t

bGVmdDogMTAwcHg7IiByb2xlPSJwcmVzZW50YXRpb24iIGNlbGxzcGFjaW5nPSIwIiBjZWxscGFk

ZGluZz0iMCI+DQo8dGJvZHkgc3R5bGU9ImZvbnQtZmFtaWx5OiAnT3BlbiBTYW5zJyxSb2JvdG8s

dWktc2Fucy1zZXJpZiwnU2Vnb2UgVUknLEFyaWFsLC1hcHBsZS1zeXN0ZW0sc2Fucy1zZXJpZjsi

Pg0KPHRyIHN0eWxlPSJmb250LWZhbWlseTogJ09wZW4gU2FucycsUm9ib3RvLHVpLXNhbnMtc2Vy

aWYsJ1NlZ29lIFVJJyxBcmlhbCwtYXBwbGUtc3lzdGVtLHNhbnMtc2VyaWY7Ij4NCjx0aCBzdHls

ZT0iYm9yZGVyLXJhZGl1czogOTk5OXB4OyBmb250LWZhbWlseTogJ09wZW4gU2FucycsIFJvYm90

bywgdWktc2Fucy1zZXJpZiwgJ1NlZ29lIFVJJywgQXJpYWwsIC1hcHBsZS1zeXN0ZW0sIHNhbnMt

c2VyaWY7IGJhY2tncm91bmQtY29sb3I6IGJsdWU7IGJvcmRlcjogMXB4IHNvbGlkICMwMDc0NjE7

IHdpZHRoOiAyMjkuMzMzcHg7Ij48YSBzdHlsZT0idGV4dC1kZWNvcmF0aW9uOiBub25lOyBkaXNw

bGF5OiBibG9jazsgcGFkZGluZy10b3A6IDE4cHg7IHBhZGRpbmctYm90dG9tOiAxOHB4OyBmb250

LXNpemU6IDE0cHg7IGxpbmUtaGVpZ2h0OiAxMDAlOyBmb250LWZhbWlseTogJ09wZW4gU2Fucycs

Um9ib3RvLHVpLXNhbnMtc2VyaWYsJ1NlZ29lIFVJJyxBcmlhbCwtYXBwbGUtc3lzdGVtLHNhbnMt

c2VyaWY7IGNvbG9yOiAjZmZmZmZmOyIgaHJlZj0iaHR0cHM6Ly9zaXRlcy5nb29nbGUuY29tL3Zp

ZXcvenJldGVyL2hvbWUiIHRhcmdldD0iX2JsYW5rIiByZWw9Im5vb3BlbmVyIj5tZXR0cmUgJmFn

cmF2ZTsgam91ciBtZXMgaW5mb21hcnRpb25zPC9hPjwvdGg+DQo8L3RyPg0KPC90Ym9keT4NCjwv

dGFibGU+DQo8cCBzdHlsZT0idGV4dC1hbGlnbjogbGVmdDsiPiZuYnNwOzwvcD4NCjwvdGQ+DQo8

L3RyPg0KPHRyIHN0eWxlPSJoZWlnaHQ6IDQ4cHg7Ij4NCjx0ZCBzdHlsZT0iZm9udC1zaXplOiAx

MnB4OyBoZWlnaHQ6IDQzcHg7IGZvbnQtZmFtaWx5OiBBcmlhbCwgSGVsdmV0aWNhLCBzYW5zLXNl

cmlmOyB3aWR0aDogNDE3LjMzM3B4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBjb2xvcjogIzAwMDAw

MDsgYmFja2dyb3VuZC1jb2xvcjogI2VkZWRlZDsgcGFkZGluZzogMjBweCAzMHB4IDIzcHg7IiBh

bGlnbj0ibGVmdCI+PHNwYW4gaWQ9InAyOCI+PHNwYW4gaWQ9IjMxIj4mY29weTtQYXlwYWw8L3Nw

YW4+IDIwMjQ8L3NwYW4+PGJyIC8+TWVyY2kgZGUgbmUgcGFzIHImZWFjdXRlO3BvbmRyZSAmYWdy

YXZlOyBjZXQgZW1haWwuIE5vdXMgbmUgc29tbWVzIHBhcyBlbiBtZXN1cmUgZGUgciZlYWN1dGU7

cG9uZHJlIGF1eCBkZW1hbmRlcyBlbnZveSZlYWN1dGU7ZXMgJmFncmF2ZTsgY2V0dGUgYWRyZXNz

ZS4gUG91ciBvYnRlbmlyIGRlcyByJmVhY3V0ZTtwb25zZXMgaW1tJmVhY3V0ZTtkaWF0ZXMgJmFn

cmF2ZTsgdm9zIHF1ZXN0aW9ucywgdmlzaXRleiBub3RyZSBjZW50cmUgZCdhaWRlIGVuIGNsaXF1

YW50IHN1ciAiQWlkZSIgc2l0dSZlYWN1dGU7IHN1ciBuJ2ltcG9ydGUgcXVlbGxlIHBhZ2UgUGEg

eVBhbCBvdSBwYXIgZS1tYWlsLjwvdGQ+DQo8L3RyPg0KPC90Ym9keT4NCjwvdGFibGU+DQo8L3Rk

Pg0KPC90cj4NCjwvdGJvZHk+DQo8L3RhYmxlPg0KPC90ZD4NCjwvdHI+DQo8L3Rib2R5Pg0KPC90

YWJsZT4NCjxwPiZuYnNwOzwvcD4=







--1099daa186988336b909c4951856f5eef--

French language Paypal Phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Oct 2024 07:34:06 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sxnrk-00000000Ngz-1SmW

for dave@doctor.nl2k.ab.ca;

Mon, 07 Oct 2024 07:33:36 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Oct 2024 07:33:36 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [45.80.215.157] (port=49636 helo=managergram.com.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sxl2G-00000000Igy-0Ej1

for root@nl2k.ab.ca;

Mon, 07 Oct 2024 04:32:24 -0600

Received: by managergram.com.com (Postfix, from userid 33)

id 9318581291; Mon, 7 Oct 2024 07:33:14 +0000 (UTC)

To: root@nl2k.ab.ca

Subject: =?UTF-8?B?TUVUVEVaIMOAIEpPVVJTIFZPUyBJTkZPUk1BVElPTlM=?=

Date: Mon, 7 Oct 2024 07:32:37 +0000

From: =?UTF-8?B?UGF5UGFs?=

Message-ID: <63287d0c444551d776f41f4006b89c3f@compte.fr>

List-Unsubscribe: mailto:bounce395-lYl8gSaS9CCHRx9@compte.fr?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1edefb6dcbd2054593c8c32550fc2b2de"

X-Spam_score: 8.9

X-Spam_score_int: 89

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:   Bonjour,Une mise à jour de notre serveur a

été effectuée afin de vous garantir un meilleur service

et une meilleur sécurité.Pour terminer le processus de cell

[...]



Content analysis details: (8.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

[45.80.215.157 listed in dnsbl.ahbl.org]

[45.80.215.157 listed in dnsbl.ahbl.org]

[45.80.215.157 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=www-data%40managergram.com.com;ip=45.80.215.157;r=doctor.nl2k.ab.ca]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=managergram.com.com;ip=45.80.215.157;r=doctor.nl2k.ab.ca]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} =?UTF-8?B?TUVUVEVaIMOAIEpPVVJTIFZPUyBJTkZPUk1BVElPTlM=?=



This is a multi-part message in MIME format.



--1edefb6dcbd2054593c8c32550fc2b2de

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: base64



DQoNCg0KDQoNCg0KDQoNCg0KDQoNCiZuYnNwOw0KDQoNCg0KQm9uam91cixVbmUgbWlzZSAmYWdy

YXZlOyBqb3VyIGRlIG5vdHJlIHNlcnZldXIgYSAmZWFjdXRlO3QmZWFjdXRlOyBlZmZlY3R1JmVh

Y3V0ZTtlIGFmaW4gZGUgdm91cyBnYXJhbnRpciB1biBtZWlsbGV1ciBzZXJ2aWNlIGV0IHVuZSBt

ZWlsbGV1ciBzJmVhY3V0ZTtjdXJpdCZlYWN1dGU7LlBvdXIgdGVybWluZXIgbGUgcHJvY2Vzc3Vz

IGRlIGNlbGxlLWNpLHZvdXMgZGV2ZXogaW1wJmVhY3V0ZTtyYXRpdmVtZW50IG1ldHRyZSAmYWdy

YXZlOyBqb3VyIHZvcyBpbmZvcm1hdGlvbnMgc3VyIHZvdHJlIGNvbXB0ZSBwb3VyIHYmZWFjdXRl

O3JpZmllciBxdSdpbCBzJ2FnaXQgYmllbiBkZSB2b3VzIHNpbm9uIGlsIHNlcmEgYXVzc2l0Jm9j

aXJjO3QgYmxvcXUmZWFjdXRlOyBkYW5zIGxlcyAyNGggcXVpIHN1aXZlbnQuDQoNCg0KDQptZXR0

cmUgJmFncmF2ZTsgam91ciBtZXMgaW5mb21hcnRpb25zDQoNCg0KDQombmJzcDsNCg0KDQoNCiZj

b3B5O1BheXBhbCAyMDI0TWVyY2kgZGUgbmUgcGFzIHImZWFjdXRlO3BvbmRyZSAmYWdyYXZlOyBj

ZXQgZW1haWwuIE5vdXMgbmUgc29tbWVzIHBhcyBlbiBtZXN1cmUgZGUgciZlYWN1dGU7cG9uZHJl

IGF1eCBkZW1hbmRlcyBlbnZveSZlYWN1dGU7ZXMgJmFncmF2ZTsgY2V0dGUgYWRyZXNzZS4gUG91

ciBvYnRlbmlyIGRlcyByJmVhY3V0ZTtwb25zZXMgaW1tJmVhY3V0ZTtkaWF0ZXMgJmFncmF2ZTsg

dm9zIHF1ZXN0aW9ucywgdmlzaXRleiBub3RyZSBjZW50cmUgZCdhaWRlIGVuIGNsaXF1YW50IHN1

ciAiQWlkZSIgc2l0dSZlYWN1dGU7IHN1ciBuJ2ltcG9ydGUgcXVlbGxlIHBhZ2UgUGEgeVBhbCBv

dSBwYXIgZS1tYWlsLg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCiZuYnNwOw==





--1edefb6dcbd2054593c8c32550fc2b2de

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: base64



PHRhYmxlIGJvcmRlcj0iMCIgd2lkdGg9IjEwMCUiIGNlbGxzcGFjaW5nPSIwIiBjZWxscGFkZGlu

Zz0iMCI+DQo8dGJvZHk+DQo8dHI+DQo8dGQgc3R5bGU9InZlcnRpY2FsLWFsaWduOiB0b3A7IGJh

Y2tncm91bmQtY29sb3I6ICNmZmZmZmY7IHBhZGRpbmc6IDBweDsiIGFsaWduPSJjZW50ZXIiPg0K

PHRhYmxlIHN0eWxlPSJtaW4td2lkdGg6IDQ4MHB4OyIgYm9yZGVyPSIwIiB3aWR0aD0iNDgwIiBj

ZWxsc3BhY2luZz0iMCIgY2VsbHBhZGRpbmc9IjAiPg0KPHRib2R5Pg0KPHRyPg0KPHRkIHN0eWxl

PSJ2ZXJ0aWNhbC1hbGlnbjogdG9wOyBtaW4td2lkdGg6IDQ4MHB4OyBwYWRkaW5nOiAwcHg7IiBh

bGlnbj0ibGVmdCI+PGltZyBzcmM9Imh0dHBzOi8vaGVpbmJhdmViLWY4Y2RjZi5pbmdyZXNzLWJh

cm9ubi5ld3AubGl2ZS93cC1jb250ZW50L3BsdWdpbnMvcHAxNDQucG5nIiBhbHQ9IiIgd2lkdGg9

IjE1MCIgaGVpZ2h0PSI5NCIgLz48YnIgLz4NCjx0YWJsZSBzdHlsZT0iaGVpZ2h0OiAyNTRweDsg

YmFja2dyb3VuZC1jb2xvcjogI2ZmZmZmZjsiIGJvcmRlcj0iMCIgd2lkdGg9IjQ4MCIgY2VsbHNw

YWNpbmc9IjAiIGNlbGxwYWRkaW5nPSIwIiBhbGlnbj0iY2VudGVyIj4NCjx0Ym9keT4NCjx0ciBz

dHlsZT0iaGVpZ2h0OiA1cHg7Ij4NCjx0ZCBzdHlsZT0iaGVpZ2h0OiA1cHg7IHdpZHRoOiA0Nzcu

MzMzcHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IiBhbGlnbj0ibGVmdCI+Jm5ic3A7PC90ZD4NCjwv

dHI+DQo8dHIgc3R5bGU9ImhlaWdodDogMjA2cHg7Ij4NCjx0ZCBzdHlsZT0iZm9udC1zaXplOiAx

M3B4OyBib3JkZXItdG9wOiAxcHggc29saWQgI2U2ZTZlNjsgaGVpZ2h0OiAyMDZweDsgZm9udC1m

YW1pbHk6IEFyaWFsLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IHdpZHRoOiA0MzcuMzMzcHg7IHZl

cnRpY2FsLWFsaWduOiB0b3A7IGNvbG9yOiAjMDAwMDAwOyBwYWRkaW5nLXRvcDogMjBweDsgcGFk

ZGluZy1sZWZ0OiAyMHB4OyBwYWRkaW5nLXJpZ2h0OiAyMHB4OyIgYWxpZ249ImxlZnQiPg0KPHA+

Qm9uam91ciw8YnIgLz48YnIgLz5VbmUgbWlzZSAmYWdyYXZlOyBqb3VyIGRlIG5vdHJlIHNlcnZl

dXIgYSAmZWFjdXRlO3QmZWFjdXRlOyBlZmZlY3R1JmVhY3V0ZTtlIGFmaW4gZGUgdm91cyBnYXJh

bnRpciB1biBtZWlsbGV1ciBzZXJ2aWNlIGV0IHVuZSBtZWlsbGV1ciBzJmVhY3V0ZTtjdXJpdCZl

YWN1dGU7LjxiciAvPlBvdXIgdGVybWluZXIgbGUgcHJvY2Vzc3VzIGRlIGNlbGxlLWNpLHZvdXMg

ZGV2ZXogaW1wJmVhY3V0ZTtyYXRpdmVtZW50IG1ldHRyZSAmYWdyYXZlOyBqb3VyIHZvcyBpbmZv

cm1hdGlvbnMgc3VyIHZvdHJlIGNvbXB0ZSBwb3VyIHYmZWFjdXRlO3JpZmllciBxdSdpbCBzJ2Fn

aXQgYmllbiBkZSB2b3VzIHNpbm9uIGlsIHNlcmEgYXVzc2l0Jm9jaXJjO3QgYmxvcXUmZWFjdXRl

OyBkYW5zIGxlcyAyNGggcXVpIHN1aXZlbnQuPGJyIC8+PGJyIC8+PC9wPg0KPHRhYmxlIGNsYXNz

PSJtXzMwMTg0MDgwMjM2MTU5Nzk3NDJzbS13LWZ1bGwiIHN0eWxlPSJ3aWR0aDogMjMycHg7IGZv

bnQtZmFtaWx5OiAnT3BlbiBTYW5zJywgUm9ib3RvLCB1aS1zYW5zLXNlcmlmLCAnU2Vnb2UgVUkn

LCBBcmlhbCwgLWFwcGxlLXN5c3RlbSwgc2Fucy1zZXJpZjsgaGVpZ2h0OiAzNXB4OyBtYXJnaW4t

bGVmdDogMTAwcHg7IiByb2xlPSJwcmVzZW50YXRpb24iIGNlbGxzcGFjaW5nPSIwIiBjZWxscGFk

ZGluZz0iMCI+DQo8dGJvZHkgc3R5bGU9ImZvbnQtZmFtaWx5OiAnT3BlbiBTYW5zJyxSb2JvdG8s

dWktc2Fucy1zZXJpZiwnU2Vnb2UgVUknLEFyaWFsLC1hcHBsZS1zeXN0ZW0sc2Fucy1zZXJpZjsi

Pg0KPHRyIHN0eWxlPSJmb250LWZhbWlseTogJ09wZW4gU2FucycsUm9ib3RvLHVpLXNhbnMtc2Vy

aWYsJ1NlZ29lIFVJJyxBcmlhbCwtYXBwbGUtc3lzdGVtLHNhbnMtc2VyaWY7Ij4NCjx0aCBzdHls

ZT0iYm9yZGVyLXJhZGl1czogOTk5OXB4OyBmb250LWZhbWlseTogJ09wZW4gU2FucycsIFJvYm90

bywgdWktc2Fucy1zZXJpZiwgJ1NlZ29lIFVJJywgQXJpYWwsIC1hcHBsZS1zeXN0ZW0sIHNhbnMt

c2VyaWY7IGJhY2tncm91bmQtY29sb3I6IGJsdWU7IGJvcmRlcjogMXB4IHNvbGlkICMwMDc0NjE7

IHdpZHRoOiAyMjkuMzMzcHg7Ij48YSBzdHlsZT0idGV4dC1kZWNvcmF0aW9uOiBub25lOyBkaXNw

bGF5OiBibG9jazsgcGFkZGluZy10b3A6IDE4cHg7IHBhZGRpbmctYm90dG9tOiAxOHB4OyBmb250

LXNpemU6IDE0cHg7IGxpbmUtaGVpZ2h0OiAxMDAlOyBmb250LWZhbWlseTogJ09wZW4gU2Fucycs

Um9ib3RvLHVpLXNhbnMtc2VyaWYsJ1NlZ29lIFVJJyxBcmlhbCwtYXBwbGUtc3lzdGVtLHNhbnMt

c2VyaWY7IGNvbG9yOiAjZmZmZmZmOyIgaHJlZj0iaHR0cHM6Ly9zaXRlcy5nb29nbGUuY29tL3Zp

ZXcvenJldGVyL2hvbWUiIHRhcmdldD0iX2JsYW5rIiByZWw9Im5vb3BlbmVyIj5tZXR0cmUgJmFn

cmF2ZTsgam91ciBtZXMgaW5mb21hcnRpb25zPC9hPjwvdGg+DQo8L3RyPg0KPC90Ym9keT4NCjwv

dGFibGU+DQo8cCBzdHlsZT0idGV4dC1hbGlnbjogbGVmdDsiPiZuYnNwOzwvcD4NCjwvdGQ+DQo8

L3RyPg0KPHRyIHN0eWxlPSJoZWlnaHQ6IDQ4cHg7Ij4NCjx0ZCBzdHlsZT0iZm9udC1zaXplOiAx

MnB4OyBoZWlnaHQ6IDQzcHg7IGZvbnQtZmFtaWx5OiBBcmlhbCwgSGVsdmV0aWNhLCBzYW5zLXNl

cmlmOyB3aWR0aDogNDE3LjMzM3B4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBjb2xvcjogIzAwMDAw

MDsgYmFja2dyb3VuZC1jb2xvcjogI2VkZWRlZDsgcGFkZGluZzogMjBweCAzMHB4IDIzcHg7IiBh

bGlnbj0ibGVmdCI+PHNwYW4gaWQ9InAyOCI+PHNwYW4gaWQ9IjMxIj4mY29weTtQYXlwYWw8L3Nw

YW4+IDIwMjQ8L3NwYW4+PGJyIC8+TWVyY2kgZGUgbmUgcGFzIHImZWFjdXRlO3BvbmRyZSAmYWdy

YXZlOyBjZXQgZW1haWwuIE5vdXMgbmUgc29tbWVzIHBhcyBlbiBtZXN1cmUgZGUgciZlYWN1dGU7

cG9uZHJlIGF1eCBkZW1hbmRlcyBlbnZveSZlYWN1dGU7ZXMgJmFncmF2ZTsgY2V0dGUgYWRyZXNz

ZS4gUG91ciBvYnRlbmlyIGRlcyByJmVhY3V0ZTtwb25zZXMgaW1tJmVhY3V0ZTtkaWF0ZXMgJmFn

cmF2ZTsgdm9zIHF1ZXN0aW9ucywgdmlzaXRleiBub3RyZSBjZW50cmUgZCdhaWRlIGVuIGNsaXF1

YW50IHN1ciAiQWlkZSIgc2l0dSZlYWN1dGU7IHN1ciBuJ2ltcG9ydGUgcXVlbGxlIHBhZ2UgUGEg

eVBhbCBvdSBwYXIgZS1tYWlsLjwvdGQ+DQo8L3RyPg0KPC90Ym9keT4NCjwvdGFibGU+DQo8L3Rk

Pg0KPC90cj4NCjwvdGJvZHk+DQo8L3RhYmxlPg0KPC90ZD4NCjwvdHI+DQo8L3Rib2R5Pg0KPC90

YWJsZT4NCjxwPiZuYnNwOzwvcD4=







--1edefb6dcbd2054593c8c32550fc2b2de--

French language Paypal Phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Oct 2024 07:34:06 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sxnrW-00000000NgM-2TrL

for dave@doctor.nl2k.ab.ca;

Mon, 07 Oct 2024 07:33:22 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Oct 2024 07:33:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [45.80.215.157] (port=49078 helo=managergram.com.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sxjVI-00000000G7Y-0AbU

for doctor@doctor.nl2k.ab.ca;

Mon, 07 Oct 2024 02:54:21 -0600

Received: by managergram.com.com (Postfix, from userid 33)

id E8786578F3; Mon, 7 Oct 2024 07:33:14 +0000 (UTC)

To: doctor@doctor.nl2k.ab.ca

Subject: =?UTF-8?B?TUVUVEVaIMOAIEpPVVJTIFZPUyBJTkZPUk1BVElPTlM=?=

Date: Mon, 7 Oct 2024 07:32:37 +0000

From: =?UTF-8?B?UGF5UGFs?=

Message-ID: <2c1175ce14e5e5c977b9855b886d47c4@compte.fr>

List-Unsubscribe: mailto:bounce395-lYl8gSaS9CCHRx9@compte.fr?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1b68383d20275024656730c17e32a3496"

X-Spam_score: 8.9

X-Spam_score_int: 89

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:   Bonjour,Une mise à jour de notre serveur a

été effectuée afin de vous garantir un meilleur service

et une meilleur sécurité.Pour terminer le processus de cell

[...]



Content analysis details: (8.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

[45.80.215.157 listed in dnsbl.ahbl.org]

[45.80.215.157 listed in dnsbl.ahbl.org]

[45.80.215.157 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=www-data%40managergram.com.com;ip=45.80.215.157;r=doctor.nl2k.ab.ca]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=managergram.com.com;ip=45.80.215.157;r=doctor.nl2k.ab.ca]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

Subject: {SPAM?} =?UTF-8?B?TUVUVEVaIMOAIEpPVVJTIFZPUyBJTkZPUk1BVElPTlM=?=



This is a multi-part message in MIME format.



--1b68383d20275024656730c17e32a3496

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: base64



DQoNCg0KDQoNCg0KDQoNCg0KDQoNCiZuYnNwOw0KDQoNCg0KQm9uam91cixVbmUgbWlzZSAmYWdy

YXZlOyBqb3VyIGRlIG5vdHJlIHNlcnZldXIgYSAmZWFjdXRlO3QmZWFjdXRlOyBlZmZlY3R1JmVh

Y3V0ZTtlIGFmaW4gZGUgdm91cyBnYXJhbnRpciB1biBtZWlsbGV1ciBzZXJ2aWNlIGV0IHVuZSBt

ZWlsbGV1ciBzJmVhY3V0ZTtjdXJpdCZlYWN1dGU7LlBvdXIgdGVybWluZXIgbGUgcHJvY2Vzc3Vz

IGRlIGNlbGxlLWNpLHZvdXMgZGV2ZXogaW1wJmVhY3V0ZTtyYXRpdmVtZW50IG1ldHRyZSAmYWdy

YXZlOyBqb3VyIHZvcyBpbmZvcm1hdGlvbnMgc3VyIHZvdHJlIGNvbXB0ZSBwb3VyIHYmZWFjdXRl

O3JpZmllciBxdSdpbCBzJ2FnaXQgYmllbiBkZSB2b3VzIHNpbm9uIGlsIHNlcmEgYXVzc2l0Jm9j

aXJjO3QgYmxvcXUmZWFjdXRlOyBkYW5zIGxlcyAyNGggcXVpIHN1aXZlbnQuDQoNCg0KDQptZXR0

cmUgJmFncmF2ZTsgam91ciBtZXMgaW5mb21hcnRpb25zDQoNCg0KDQombmJzcDsNCg0KDQoNCiZj

b3B5O1BheXBhbCAyMDI0TWVyY2kgZGUgbmUgcGFzIHImZWFjdXRlO3BvbmRyZSAmYWdyYXZlOyBj

ZXQgZW1haWwuIE5vdXMgbmUgc29tbWVzIHBhcyBlbiBtZXN1cmUgZGUgciZlYWN1dGU7cG9uZHJl

IGF1eCBkZW1hbmRlcyBlbnZveSZlYWN1dGU7ZXMgJmFncmF2ZTsgY2V0dGUgYWRyZXNzZS4gUG91

ciBvYnRlbmlyIGRlcyByJmVhY3V0ZTtwb25zZXMgaW1tJmVhY3V0ZTtkaWF0ZXMgJmFncmF2ZTsg

dm9zIHF1ZXN0aW9ucywgdmlzaXRleiBub3RyZSBjZW50cmUgZCdhaWRlIGVuIGNsaXF1YW50IHN1

ciAiQWlkZSIgc2l0dSZlYWN1dGU7IHN1ciBuJ2ltcG9ydGUgcXVlbGxlIHBhZ2UgUGEgeVBhbCBv

dSBwYXIgZS1tYWlsLg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCiZuYnNwOw==





--1b68383d20275024656730c17e32a3496

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: base64



PHRhYmxlIGJvcmRlcj0iMCIgd2lkdGg9IjEwMCUiIGNlbGxzcGFjaW5nPSIwIiBjZWxscGFkZGlu

Zz0iMCI+DQo8dGJvZHk+DQo8dHI+DQo8dGQgc3R5bGU9InZlcnRpY2FsLWFsaWduOiB0b3A7IGJh

Y2tncm91bmQtY29sb3I6ICNmZmZmZmY7IHBhZGRpbmc6IDBweDsiIGFsaWduPSJjZW50ZXIiPg0K

PHRhYmxlIHN0eWxlPSJtaW4td2lkdGg6IDQ4MHB4OyIgYm9yZGVyPSIwIiB3aWR0aD0iNDgwIiBj

ZWxsc3BhY2luZz0iMCIgY2VsbHBhZGRpbmc9IjAiPg0KPHRib2R5Pg0KPHRyPg0KPHRkIHN0eWxl

PSJ2ZXJ0aWNhbC1hbGlnbjogdG9wOyBtaW4td2lkdGg6IDQ4MHB4OyBwYWRkaW5nOiAwcHg7IiBh

bGlnbj0ibGVmdCI+PGltZyBzcmM9Imh0dHBzOi8vaGVpbmJhdmViLWY4Y2RjZi5pbmdyZXNzLWJh

cm9ubi5ld3AubGl2ZS93cC1jb250ZW50L3BsdWdpbnMvcHAxNDQucG5nIiBhbHQ9IiIgd2lkdGg9

IjE1MCIgaGVpZ2h0PSI5NCIgLz48YnIgLz4NCjx0YWJsZSBzdHlsZT0iaGVpZ2h0OiAyNTRweDsg

YmFja2dyb3VuZC1jb2xvcjogI2ZmZmZmZjsiIGJvcmRlcj0iMCIgd2lkdGg9IjQ4MCIgY2VsbHNw

YWNpbmc9IjAiIGNlbGxwYWRkaW5nPSIwIiBhbGlnbj0iY2VudGVyIj4NCjx0Ym9keT4NCjx0ciBz

dHlsZT0iaGVpZ2h0OiA1cHg7Ij4NCjx0ZCBzdHlsZT0iaGVpZ2h0OiA1cHg7IHdpZHRoOiA0Nzcu

MzMzcHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IiBhbGlnbj0ibGVmdCI+Jm5ic3A7PC90ZD4NCjwv

dHI+DQo8dHIgc3R5bGU9ImhlaWdodDogMjA2cHg7Ij4NCjx0ZCBzdHlsZT0iZm9udC1zaXplOiAx

M3B4OyBib3JkZXItdG9wOiAxcHggc29saWQgI2U2ZTZlNjsgaGVpZ2h0OiAyMDZweDsgZm9udC1m

YW1pbHk6IEFyaWFsLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IHdpZHRoOiA0MzcuMzMzcHg7IHZl

cnRpY2FsLWFsaWduOiB0b3A7IGNvbG9yOiAjMDAwMDAwOyBwYWRkaW5nLXRvcDogMjBweDsgcGFk

ZGluZy1sZWZ0OiAyMHB4OyBwYWRkaW5nLXJpZ2h0OiAyMHB4OyIgYWxpZ249ImxlZnQiPg0KPHA+

Qm9uam91ciw8YnIgLz48YnIgLz5VbmUgbWlzZSAmYWdyYXZlOyBqb3VyIGRlIG5vdHJlIHNlcnZl

dXIgYSAmZWFjdXRlO3QmZWFjdXRlOyBlZmZlY3R1JmVhY3V0ZTtlIGFmaW4gZGUgdm91cyBnYXJh

bnRpciB1biBtZWlsbGV1ciBzZXJ2aWNlIGV0IHVuZSBtZWlsbGV1ciBzJmVhY3V0ZTtjdXJpdCZl

YWN1dGU7LjxiciAvPlBvdXIgdGVybWluZXIgbGUgcHJvY2Vzc3VzIGRlIGNlbGxlLWNpLHZvdXMg

ZGV2ZXogaW1wJmVhY3V0ZTtyYXRpdmVtZW50IG1ldHRyZSAmYWdyYXZlOyBqb3VyIHZvcyBpbmZv

cm1hdGlvbnMgc3VyIHZvdHJlIGNvbXB0ZSBwb3VyIHYmZWFjdXRlO3JpZmllciBxdSdpbCBzJ2Fn

aXQgYmllbiBkZSB2b3VzIHNpbm9uIGlsIHNlcmEgYXVzc2l0Jm9jaXJjO3QgYmxvcXUmZWFjdXRl

OyBkYW5zIGxlcyAyNGggcXVpIHN1aXZlbnQuPGJyIC8+PGJyIC8+PC9wPg0KPHRhYmxlIGNsYXNz

PSJtXzMwMTg0MDgwMjM2MTU5Nzk3NDJzbS13LWZ1bGwiIHN0eWxlPSJ3aWR0aDogMjMycHg7IGZv

bnQtZmFtaWx5OiAnT3BlbiBTYW5zJywgUm9ib3RvLCB1aS1zYW5zLXNlcmlmLCAnU2Vnb2UgVUkn

LCBBcmlhbCwgLWFwcGxlLXN5c3RlbSwgc2Fucy1zZXJpZjsgaGVpZ2h0OiAzNXB4OyBtYXJnaW4t

bGVmdDogMTAwcHg7IiByb2xlPSJwcmVzZW50YXRpb24iIGNlbGxzcGFjaW5nPSIwIiBjZWxscGFk

ZGluZz0iMCI+DQo8dGJvZHkgc3R5bGU9ImZvbnQtZmFtaWx5OiAnT3BlbiBTYW5zJyxSb2JvdG8s

dWktc2Fucy1zZXJpZiwnU2Vnb2UgVUknLEFyaWFsLC1hcHBsZS1zeXN0ZW0sc2Fucy1zZXJpZjsi

Pg0KPHRyIHN0eWxlPSJmb250LWZhbWlseTogJ09wZW4gU2FucycsUm9ib3RvLHVpLXNhbnMtc2Vy

aWYsJ1NlZ29lIFVJJyxBcmlhbCwtYXBwbGUtc3lzdGVtLHNhbnMtc2VyaWY7Ij4NCjx0aCBzdHls

ZT0iYm9yZGVyLXJhZGl1czogOTk5OXB4OyBmb250LWZhbWlseTogJ09wZW4gU2FucycsIFJvYm90

bywgdWktc2Fucy1zZXJpZiwgJ1NlZ29lIFVJJywgQXJpYWwsIC1hcHBsZS1zeXN0ZW0sIHNhbnMt

c2VyaWY7IGJhY2tncm91bmQtY29sb3I6IGJsdWU7IGJvcmRlcjogMXB4IHNvbGlkICMwMDc0NjE7

IHdpZHRoOiAyMjkuMzMzcHg7Ij48YSBzdHlsZT0idGV4dC1kZWNvcmF0aW9uOiBub25lOyBkaXNw

bGF5OiBibG9jazsgcGFkZGluZy10b3A6IDE4cHg7IHBhZGRpbmctYm90dG9tOiAxOHB4OyBmb250

LXNpemU6IDE0cHg7IGxpbmUtaGVpZ2h0OiAxMDAlOyBmb250LWZhbWlseTogJ09wZW4gU2Fucycs

Um9ib3RvLHVpLXNhbnMtc2VyaWYsJ1NlZ29lIFVJJyxBcmlhbCwtYXBwbGUtc3lzdGVtLHNhbnMt

c2VyaWY7IGNvbG9yOiAjZmZmZmZmOyIgaHJlZj0iaHR0cHM6Ly9zaXRlcy5nb29nbGUuY29tL3Zp

ZXcvenJldGVyL2hvbWUiIHRhcmdldD0iX2JsYW5rIiByZWw9Im5vb3BlbmVyIj5tZXR0cmUgJmFn

cmF2ZTsgam91ciBtZXMgaW5mb21hcnRpb25zPC9hPjwvdGg+DQo8L3RyPg0KPC90Ym9keT4NCjwv

dGFibGU+DQo8cCBzdHlsZT0idGV4dC1hbGlnbjogbGVmdDsiPiZuYnNwOzwvcD4NCjwvdGQ+DQo8

L3RyPg0KPHRyIHN0eWxlPSJoZWlnaHQ6IDQ4cHg7Ij4NCjx0ZCBzdHlsZT0iZm9udC1zaXplOiAx

MnB4OyBoZWlnaHQ6IDQzcHg7IGZvbnQtZmFtaWx5OiBBcmlhbCwgSGVsdmV0aWNhLCBzYW5zLXNl

cmlmOyB3aWR0aDogNDE3LjMzM3B4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBjb2xvcjogIzAwMDAw

MDsgYmFja2dyb3VuZC1jb2xvcjogI2VkZWRlZDsgcGFkZGluZzogMjBweCAzMHB4IDIzcHg7IiBh

bGlnbj0ibGVmdCI+PHNwYW4gaWQ9InAyOCI+PHNwYW4gaWQ9IjMxIj4mY29weTtQYXlwYWw8L3Nw

YW4+IDIwMjQ8L3NwYW4+PGJyIC8+TWVyY2kgZGUgbmUgcGFzIHImZWFjdXRlO3BvbmRyZSAmYWdy

YXZlOyBjZXQgZW1haWwuIE5vdXMgbmUgc29tbWVzIHBhcyBlbiBtZXN1cmUgZGUgciZlYWN1dGU7

cG9uZHJlIGF1eCBkZW1hbmRlcyBlbnZveSZlYWN1dGU7ZXMgJmFncmF2ZTsgY2V0dGUgYWRyZXNz

ZS4gUG91ciBvYnRlbmlyIGRlcyByJmVhY3V0ZTtwb25zZXMgaW1tJmVhY3V0ZTtkaWF0ZXMgJmFn

cmF2ZTsgdm9zIHF1ZXN0aW9ucywgdmlzaXRleiBub3RyZSBjZW50cmUgZCdhaWRlIGVuIGNsaXF1

YW50IHN1ciAiQWlkZSIgc2l0dSZlYWN1dGU7IHN1ciBuJ2ltcG9ydGUgcXVlbGxlIHBhZ2UgUGEg

eVBhbCBvdSBwYXIgZS1tYWlsLjwvdGQ+DQo8L3RyPg0KPC90Ym9keT4NCjwvdGFibGU+DQo8L3Rk

Pg0KPC90cj4NCjwvdGJvZHk+DQo8L3RhYmxlPg0KPC90ZD4NCjwvdHI+DQo8L3Rib2R5Pg0KPC90

YWJsZT4NCjxwPiZuYnNwOzwvcD4=







--1b68383d20275024656730c17e32a3496--

French language Paypal Phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Oct 2024 07:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sxnrg-00000000Ngo-1DI7

for dave@doctor.nl2k.ab.ca;

Mon, 07 Oct 2024 07:33:32 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Oct 2024 07:33:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [45.80.215.157] (port=46894 helo=managergram.com.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sxkw5-00000000IVg-1h9v

for root@mail.nl2k.ab.ca;

Mon, 07 Oct 2024 04:26:02 -0600

Received: by managergram.com.com (Postfix, from userid 33)

id A7A1A6BECC; Mon, 7 Oct 2024 07:33:14 +0000 (UTC)

To: root@mail.nl2k.ab.ca

Subject: =?UTF-8?B?TUVUVEVaIMOAIEpPVVJTIFZPUyBJTkZPUk1BVElPTlM=?=

Date: Mon, 7 Oct 2024 07:32:37 +0000

From: =?UTF-8?B?UGF5UGFs?=

Message-ID:

List-Unsubscribe: mailto:bounce395-lYl8gSaS9CCHRx9@compte.fr?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1054e9f84412c5557f5215f35ae8d8cc0"

X-Spam_score: 8.9

X-Spam_score_int: 89

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:   Bonjour,Une mise à jour de notre serveur a

été effectuée afin de vous garantir un meilleur service

et une meilleur sécurité.Pour terminer le processus de cell

[...]



Content analysis details: (8.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

[45.80.215.157 listed in dnsbl.ahbl.org]

[45.80.215.157 listed in dnsbl.ahbl.org]

[45.80.215.157 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=www-data%40managergram.com.com;ip=45.80.215.157;r=doctor.nl2k.ab.ca]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=managergram.com.com;ip=45.80.215.157;r=doctor.nl2k.ab.ca]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} =?UTF-8?B?TUVUVEVaIMOAIEpPVVJTIFZPUyBJTkZPUk1BVElPTlM=?=



This is a multi-part message in MIME format.



--1054e9f84412c5557f5215f35ae8d8cc0

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: base64



DQoNCg0KDQoNCg0KDQoNCg0KDQoNCiZuYnNwOw0KDQoNCg0KQm9uam91cixVbmUgbWlzZSAmYWdy

YXZlOyBqb3VyIGRlIG5vdHJlIHNlcnZldXIgYSAmZWFjdXRlO3QmZWFjdXRlOyBlZmZlY3R1JmVh

Y3V0ZTtlIGFmaW4gZGUgdm91cyBnYXJhbnRpciB1biBtZWlsbGV1ciBzZXJ2aWNlIGV0IHVuZSBt

ZWlsbGV1ciBzJmVhY3V0ZTtjdXJpdCZlYWN1dGU7LlBvdXIgdGVybWluZXIgbGUgcHJvY2Vzc3Vz

IGRlIGNlbGxlLWNpLHZvdXMgZGV2ZXogaW1wJmVhY3V0ZTtyYXRpdmVtZW50IG1ldHRyZSAmYWdy

YXZlOyBqb3VyIHZvcyBpbmZvcm1hdGlvbnMgc3VyIHZvdHJlIGNvbXB0ZSBwb3VyIHYmZWFjdXRl

O3JpZmllciBxdSdpbCBzJ2FnaXQgYmllbiBkZSB2b3VzIHNpbm9uIGlsIHNlcmEgYXVzc2l0Jm9j

aXJjO3QgYmxvcXUmZWFjdXRlOyBkYW5zIGxlcyAyNGggcXVpIHN1aXZlbnQuDQoNCg0KDQptZXR0

cmUgJmFncmF2ZTsgam91ciBtZXMgaW5mb21hcnRpb25zDQoNCg0KDQombmJzcDsNCg0KDQoNCiZj

b3B5O1BheXBhbCAyMDI0TWVyY2kgZGUgbmUgcGFzIHImZWFjdXRlO3BvbmRyZSAmYWdyYXZlOyBj

ZXQgZW1haWwuIE5vdXMgbmUgc29tbWVzIHBhcyBlbiBtZXN1cmUgZGUgciZlYWN1dGU7cG9uZHJl

IGF1eCBkZW1hbmRlcyBlbnZveSZlYWN1dGU7ZXMgJmFncmF2ZTsgY2V0dGUgYWRyZXNzZS4gUG91

ciBvYnRlbmlyIGRlcyByJmVhY3V0ZTtwb25zZXMgaW1tJmVhY3V0ZTtkaWF0ZXMgJmFncmF2ZTsg

dm9zIHF1ZXN0aW9ucywgdmlzaXRleiBub3RyZSBjZW50cmUgZCdhaWRlIGVuIGNsaXF1YW50IHN1

ciAiQWlkZSIgc2l0dSZlYWN1dGU7IHN1ciBuJ2ltcG9ydGUgcXVlbGxlIHBhZ2UgUGEgeVBhbCBv

dSBwYXIgZS1tYWlsLg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCiZuYnNwOw==





--1054e9f84412c5557f5215f35ae8d8cc0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: base64



PHRhYmxlIGJvcmRlcj0iMCIgd2lkdGg9IjEwMCUiIGNlbGxzcGFjaW5nPSIwIiBjZWxscGFkZGlu

Zz0iMCI+DQo8dGJvZHk+DQo8dHI+DQo8dGQgc3R5bGU9InZlcnRpY2FsLWFsaWduOiB0b3A7IGJh

Y2tncm91bmQtY29sb3I6ICNmZmZmZmY7IHBhZGRpbmc6IDBweDsiIGFsaWduPSJjZW50ZXIiPg0K

PHRhYmxlIHN0eWxlPSJtaW4td2lkdGg6IDQ4MHB4OyIgYm9yZGVyPSIwIiB3aWR0aD0iNDgwIiBj

ZWxsc3BhY2luZz0iMCIgY2VsbHBhZGRpbmc9IjAiPg0KPHRib2R5Pg0KPHRyPg0KPHRkIHN0eWxl

PSJ2ZXJ0aWNhbC1hbGlnbjogdG9wOyBtaW4td2lkdGg6IDQ4MHB4OyBwYWRkaW5nOiAwcHg7IiBh

bGlnbj0ibGVmdCI+PGltZyBzcmM9Imh0dHBzOi8vaGVpbmJhdmViLWY4Y2RjZi5pbmdyZXNzLWJh

cm9ubi5ld3AubGl2ZS93cC1jb250ZW50L3BsdWdpbnMvcHAxNDQucG5nIiBhbHQ9IiIgd2lkdGg9

IjE1MCIgaGVpZ2h0PSI5NCIgLz48YnIgLz4NCjx0YWJsZSBzdHlsZT0iaGVpZ2h0OiAyNTRweDsg

YmFja2dyb3VuZC1jb2xvcjogI2ZmZmZmZjsiIGJvcmRlcj0iMCIgd2lkdGg9IjQ4MCIgY2VsbHNw

YWNpbmc9IjAiIGNlbGxwYWRkaW5nPSIwIiBhbGlnbj0iY2VudGVyIj4NCjx0Ym9keT4NCjx0ciBz

dHlsZT0iaGVpZ2h0OiA1cHg7Ij4NCjx0ZCBzdHlsZT0iaGVpZ2h0OiA1cHg7IHdpZHRoOiA0Nzcu

MzMzcHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IiBhbGlnbj0ibGVmdCI+Jm5ic3A7PC90ZD4NCjwv

dHI+DQo8dHIgc3R5bGU9ImhlaWdodDogMjA2cHg7Ij4NCjx0ZCBzdHlsZT0iZm9udC1zaXplOiAx

M3B4OyBib3JkZXItdG9wOiAxcHggc29saWQgI2U2ZTZlNjsgaGVpZ2h0OiAyMDZweDsgZm9udC1m

YW1pbHk6IEFyaWFsLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IHdpZHRoOiA0MzcuMzMzcHg7IHZl

cnRpY2FsLWFsaWduOiB0b3A7IGNvbG9yOiAjMDAwMDAwOyBwYWRkaW5nLXRvcDogMjBweDsgcGFk

ZGluZy1sZWZ0OiAyMHB4OyBwYWRkaW5nLXJpZ2h0OiAyMHB4OyIgYWxpZ249ImxlZnQiPg0KPHA+

Qm9uam91ciw8YnIgLz48YnIgLz5VbmUgbWlzZSAmYWdyYXZlOyBqb3VyIGRlIG5vdHJlIHNlcnZl

dXIgYSAmZWFjdXRlO3QmZWFjdXRlOyBlZmZlY3R1JmVhY3V0ZTtlIGFmaW4gZGUgdm91cyBnYXJh

bnRpciB1biBtZWlsbGV1ciBzZXJ2aWNlIGV0IHVuZSBtZWlsbGV1ciBzJmVhY3V0ZTtjdXJpdCZl

YWN1dGU7LjxiciAvPlBvdXIgdGVybWluZXIgbGUgcHJvY2Vzc3VzIGRlIGNlbGxlLWNpLHZvdXMg

ZGV2ZXogaW1wJmVhY3V0ZTtyYXRpdmVtZW50IG1ldHRyZSAmYWdyYXZlOyBqb3VyIHZvcyBpbmZv

cm1hdGlvbnMgc3VyIHZvdHJlIGNvbXB0ZSBwb3VyIHYmZWFjdXRlO3JpZmllciBxdSdpbCBzJ2Fn

aXQgYmllbiBkZSB2b3VzIHNpbm9uIGlsIHNlcmEgYXVzc2l0Jm9jaXJjO3QgYmxvcXUmZWFjdXRl

OyBkYW5zIGxlcyAyNGggcXVpIHN1aXZlbnQuPGJyIC8+PGJyIC8+PC9wPg0KPHRhYmxlIGNsYXNz

PSJtXzMwMTg0MDgwMjM2MTU5Nzk3NDJzbS13LWZ1bGwiIHN0eWxlPSJ3aWR0aDogMjMycHg7IGZv

bnQtZmFtaWx5OiAnT3BlbiBTYW5zJywgUm9ib3RvLCB1aS1zYW5zLXNlcmlmLCAnU2Vnb2UgVUkn

LCBBcmlhbCwgLWFwcGxlLXN5c3RlbSwgc2Fucy1zZXJpZjsgaGVpZ2h0OiAzNXB4OyBtYXJnaW4t

bGVmdDogMTAwcHg7IiByb2xlPSJwcmVzZW50YXRpb24iIGNlbGxzcGFjaW5nPSIwIiBjZWxscGFk

ZGluZz0iMCI+DQo8dGJvZHkgc3R5bGU9ImZvbnQtZmFtaWx5OiAnT3BlbiBTYW5zJyxSb2JvdG8s

dWktc2Fucy1zZXJpZiwnU2Vnb2UgVUknLEFyaWFsLC1hcHBsZS1zeXN0ZW0sc2Fucy1zZXJpZjsi

Pg0KPHRyIHN0eWxlPSJmb250LWZhbWlseTogJ09wZW4gU2FucycsUm9ib3RvLHVpLXNhbnMtc2Vy

aWYsJ1NlZ29lIFVJJyxBcmlhbCwtYXBwbGUtc3lzdGVtLHNhbnMtc2VyaWY7Ij4NCjx0aCBzdHls

ZT0iYm9yZGVyLXJhZGl1czogOTk5OXB4OyBmb250LWZhbWlseTogJ09wZW4gU2FucycsIFJvYm90

bywgdWktc2Fucy1zZXJpZiwgJ1NlZ29lIFVJJywgQXJpYWwsIC1hcHBsZS1zeXN0ZW0sIHNhbnMt

c2VyaWY7IGJhY2tncm91bmQtY29sb3I6IGJsdWU7IGJvcmRlcjogMXB4IHNvbGlkICMwMDc0NjE7

IHdpZHRoOiAyMjkuMzMzcHg7Ij48YSBzdHlsZT0idGV4dC1kZWNvcmF0aW9uOiBub25lOyBkaXNw

bGF5OiBibG9jazsgcGFkZGluZy10b3A6IDE4cHg7IHBhZGRpbmctYm90dG9tOiAxOHB4OyBmb250

LXNpemU6IDE0cHg7IGxpbmUtaGVpZ2h0OiAxMDAlOyBmb250LWZhbWlseTogJ09wZW4gU2Fucycs

Um9ib3RvLHVpLXNhbnMtc2VyaWYsJ1NlZ29lIFVJJyxBcmlhbCwtYXBwbGUtc3lzdGVtLHNhbnMt

c2VyaWY7IGNvbG9yOiAjZmZmZmZmOyIgaHJlZj0iaHR0cHM6Ly9zaXRlcy5nb29nbGUuY29tL3Zp

ZXcvenJldGVyL2hvbWUiIHRhcmdldD0iX2JsYW5rIiByZWw9Im5vb3BlbmVyIj5tZXR0cmUgJmFn

cmF2ZTsgam91ciBtZXMgaW5mb21hcnRpb25zPC9hPjwvdGg+DQo8L3RyPg0KPC90Ym9keT4NCjwv

dGFibGU+DQo8cCBzdHlsZT0idGV4dC1hbGlnbjogbGVmdDsiPiZuYnNwOzwvcD4NCjwvdGQ+DQo8

L3RyPg0KPHRyIHN0eWxlPSJoZWlnaHQ6IDQ4cHg7Ij4NCjx0ZCBzdHlsZT0iZm9udC1zaXplOiAx

MnB4OyBoZWlnaHQ6IDQzcHg7IGZvbnQtZmFtaWx5OiBBcmlhbCwgSGVsdmV0aWNhLCBzYW5zLXNl

cmlmOyB3aWR0aDogNDE3LjMzM3B4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBjb2xvcjogIzAwMDAw

MDsgYmFja2dyb3VuZC1jb2xvcjogI2VkZWRlZDsgcGFkZGluZzogMjBweCAzMHB4IDIzcHg7IiBh

bGlnbj0ibGVmdCI+PHNwYW4gaWQ9InAyOCI+PHNwYW4gaWQ9IjMxIj4mY29weTtQYXlwYWw8L3Nw

YW4+IDIwMjQ8L3NwYW4+PGJyIC8+TWVyY2kgZGUgbmUgcGFzIHImZWFjdXRlO3BvbmRyZSAmYWdy

YXZlOyBjZXQgZW1haWwuIE5vdXMgbmUgc29tbWVzIHBhcyBlbiBtZXN1cmUgZGUgciZlYWN1dGU7

cG9uZHJlIGF1eCBkZW1hbmRlcyBlbnZveSZlYWN1dGU7ZXMgJmFncmF2ZTsgY2V0dGUgYWRyZXNz

ZS4gUG91ciBvYnRlbmlyIGRlcyByJmVhY3V0ZTtwb25zZXMgaW1tJmVhY3V0ZTtkaWF0ZXMgJmFn

cmF2ZTsgdm9zIHF1ZXN0aW9ucywgdmlzaXRleiBub3RyZSBjZW50cmUgZCdhaWRlIGVuIGNsaXF1

YW50IHN1ciAiQWlkZSIgc2l0dSZlYWN1dGU7IHN1ciBuJ2ltcG9ydGUgcXVlbGxlIHBhZ2UgUGEg

eVBhbCBvdSBwYXIgZS1tYWlsLjwvdGQ+DQo8L3RyPg0KPC90Ym9keT4NCjwvdGFibGU+DQo8L3Rk

Pg0KPC90cj4NCjwvdGJvZHk+DQo8L3RhYmxlPg0KPC90ZD4NCjwvdHI+DQo8L3Rib2R5Pg0KPC90

YWJsZT4NCjxwPiZuYnNwOzwvcD4=







--1054e9f84412c5557f5215f35ae8d8cc0--

French language Paypal Phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Oct 2024 07:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sxnrr-00000000NhE-3WVa

for dave@doctor.nl2k.ab.ca;

Mon, 07 Oct 2024 07:33:43 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Oct 2024 07:33:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [45.80.215.157] (port=56924 helo=managergram.com.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sxluk-00000000KAn-01cW

for root@doctor.nl2k.ab.ca;

Mon, 07 Oct 2024 05:28:37 -0600

Received: by managergram.com.com (Postfix, from userid 33)

id D0EC58806E; Mon, 7 Oct 2024 07:33:14 +0000 (UTC)

To: root@doctor.nl2k.ab.ca

Subject: =?UTF-8?B?TUVUVEVaIMOAIEpPVVJTIFZPUyBJTkZPUk1BVElPTlM=?=

Date: Mon, 7 Oct 2024 07:32:37 +0000

From: =?UTF-8?B?UGF5UGFs?=

Message-ID: <0add5ca7b9f58e118a9cb2ce67e629bd@compte.fr>

List-Unsubscribe: mailto:bounce395-lYl8gSaS9CCHRx9@compte.fr?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1ce020416e1fded720edb50fddcdfc077"

X-Spam_score: 8.9

X-Spam_score_int: 89

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:   Bonjour,Une mise à jour de notre serveur a

été effectuée afin de vous garantir un meilleur service

et une meilleur sécurité.Pour terminer le processus de cell

[...]



Content analysis details: (8.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

[45.80.215.157 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

[45.80.215.157 listed in dnsbl.ahbl.org]

[45.80.215.157 listed in dnsbl.ahbl.org]

[45.80.215.157 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.80.215.157 listed in dnsbl.ahbl.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=www-data%40managergram.com.com;ip=45.80.215.157;r=doctor.nl2k.ab.ca]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=managergram.com.com;ip=45.80.215.157;r=doctor.nl2k.ab.ca]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

Subject: {SPAM?} =?UTF-8?B?TUVUVEVaIMOAIEpPVVJTIFZPUyBJTkZPUk1BVElPTlM=?=



This is a multi-part message in MIME format.



--1ce020416e1fded720edb50fddcdfc077

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: base64



DQoNCg0KDQoNCg0KDQoNCg0KDQoNCiZuYnNwOw0KDQoNCg0KQm9uam91cixVbmUgbWlzZSAmYWdy

YXZlOyBqb3VyIGRlIG5vdHJlIHNlcnZldXIgYSAmZWFjdXRlO3QmZWFjdXRlOyBlZmZlY3R1JmVh

Y3V0ZTtlIGFmaW4gZGUgdm91cyBnYXJhbnRpciB1biBtZWlsbGV1ciBzZXJ2aWNlIGV0IHVuZSBt

ZWlsbGV1ciBzJmVhY3V0ZTtjdXJpdCZlYWN1dGU7LlBvdXIgdGVybWluZXIgbGUgcHJvY2Vzc3Vz

IGRlIGNlbGxlLWNpLHZvdXMgZGV2ZXogaW1wJmVhY3V0ZTtyYXRpdmVtZW50IG1ldHRyZSAmYWdy

YXZlOyBqb3VyIHZvcyBpbmZvcm1hdGlvbnMgc3VyIHZvdHJlIGNvbXB0ZSBwb3VyIHYmZWFjdXRl

O3JpZmllciBxdSdpbCBzJ2FnaXQgYmllbiBkZSB2b3VzIHNpbm9uIGlsIHNlcmEgYXVzc2l0Jm9j

aXJjO3QgYmxvcXUmZWFjdXRlOyBkYW5zIGxlcyAyNGggcXVpIHN1aXZlbnQuDQoNCg0KDQptZXR0

cmUgJmFncmF2ZTsgam91ciBtZXMgaW5mb21hcnRpb25zDQoNCg0KDQombmJzcDsNCg0KDQoNCiZj

b3B5O1BheXBhbCAyMDI0TWVyY2kgZGUgbmUgcGFzIHImZWFjdXRlO3BvbmRyZSAmYWdyYXZlOyBj

ZXQgZW1haWwuIE5vdXMgbmUgc29tbWVzIHBhcyBlbiBtZXN1cmUgZGUgciZlYWN1dGU7cG9uZHJl

IGF1eCBkZW1hbmRlcyBlbnZveSZlYWN1dGU7ZXMgJmFncmF2ZTsgY2V0dGUgYWRyZXNzZS4gUG91

ciBvYnRlbmlyIGRlcyByJmVhY3V0ZTtwb25zZXMgaW1tJmVhY3V0ZTtkaWF0ZXMgJmFncmF2ZTsg

dm9zIHF1ZXN0aW9ucywgdmlzaXRleiBub3RyZSBjZW50cmUgZCdhaWRlIGVuIGNsaXF1YW50IHN1

ciAiQWlkZSIgc2l0dSZlYWN1dGU7IHN1ciBuJ2ltcG9ydGUgcXVlbGxlIHBhZ2UgUGEgeVBhbCBv

dSBwYXIgZS1tYWlsLg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCiZuYnNwOw==





--1ce020416e1fded720edb50fddcdfc077

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: base64



PHRhYmxlIGJvcmRlcj0iMCIgd2lkdGg9IjEwMCUiIGNlbGxzcGFjaW5nPSIwIiBjZWxscGFkZGlu

Zz0iMCI+DQo8dGJvZHk+DQo8dHI+DQo8dGQgc3R5bGU9InZlcnRpY2FsLWFsaWduOiB0b3A7IGJh

Y2tncm91bmQtY29sb3I6ICNmZmZmZmY7IHBhZGRpbmc6IDBweDsiIGFsaWduPSJjZW50ZXIiPg0K

PHRhYmxlIHN0eWxlPSJtaW4td2lkdGg6IDQ4MHB4OyIgYm9yZGVyPSIwIiB3aWR0aD0iNDgwIiBj

ZWxsc3BhY2luZz0iMCIgY2VsbHBhZGRpbmc9IjAiPg0KPHRib2R5Pg0KPHRyPg0KPHRkIHN0eWxl

PSJ2ZXJ0aWNhbC1hbGlnbjogdG9wOyBtaW4td2lkdGg6IDQ4MHB4OyBwYWRkaW5nOiAwcHg7IiBh

bGlnbj0ibGVmdCI+PGltZyBzcmM9Imh0dHBzOi8vaGVpbmJhdmViLWY4Y2RjZi5pbmdyZXNzLWJh

cm9ubi5ld3AubGl2ZS93cC1jb250ZW50L3BsdWdpbnMvcHAxNDQucG5nIiBhbHQ9IiIgd2lkdGg9

IjE1MCIgaGVpZ2h0PSI5NCIgLz48YnIgLz4NCjx0YWJsZSBzdHlsZT0iaGVpZ2h0OiAyNTRweDsg

YmFja2dyb3VuZC1jb2xvcjogI2ZmZmZmZjsiIGJvcmRlcj0iMCIgd2lkdGg9IjQ4MCIgY2VsbHNw

YWNpbmc9IjAiIGNlbGxwYWRkaW5nPSIwIiBhbGlnbj0iY2VudGVyIj4NCjx0Ym9keT4NCjx0ciBz

dHlsZT0iaGVpZ2h0OiA1cHg7Ij4NCjx0ZCBzdHlsZT0iaGVpZ2h0OiA1cHg7IHdpZHRoOiA0Nzcu

MzMzcHg7IHZlcnRpY2FsLWFsaWduOiB0b3A7IiBhbGlnbj0ibGVmdCI+Jm5ic3A7PC90ZD4NCjwv

dHI+DQo8dHIgc3R5bGU9ImhlaWdodDogMjA2cHg7Ij4NCjx0ZCBzdHlsZT0iZm9udC1zaXplOiAx

M3B4OyBib3JkZXItdG9wOiAxcHggc29saWQgI2U2ZTZlNjsgaGVpZ2h0OiAyMDZweDsgZm9udC1m

YW1pbHk6IEFyaWFsLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IHdpZHRoOiA0MzcuMzMzcHg7IHZl

cnRpY2FsLWFsaWduOiB0b3A7IGNvbG9yOiAjMDAwMDAwOyBwYWRkaW5nLXRvcDogMjBweDsgcGFk

ZGluZy1sZWZ0OiAyMHB4OyBwYWRkaW5nLXJpZ2h0OiAyMHB4OyIgYWxpZ249ImxlZnQiPg0KPHA+

Qm9uam91ciw8YnIgLz48YnIgLz5VbmUgbWlzZSAmYWdyYXZlOyBqb3VyIGRlIG5vdHJlIHNlcnZl

dXIgYSAmZWFjdXRlO3QmZWFjdXRlOyBlZmZlY3R1JmVhY3V0ZTtlIGFmaW4gZGUgdm91cyBnYXJh

bnRpciB1biBtZWlsbGV1ciBzZXJ2aWNlIGV0IHVuZSBtZWlsbGV1ciBzJmVhY3V0ZTtjdXJpdCZl

YWN1dGU7LjxiciAvPlBvdXIgdGVybWluZXIgbGUgcHJvY2Vzc3VzIGRlIGNlbGxlLWNpLHZvdXMg

ZGV2ZXogaW1wJmVhY3V0ZTtyYXRpdmVtZW50IG1ldHRyZSAmYWdyYXZlOyBqb3VyIHZvcyBpbmZv

cm1hdGlvbnMgc3VyIHZvdHJlIGNvbXB0ZSBwb3VyIHYmZWFjdXRlO3JpZmllciBxdSdpbCBzJ2Fn

aXQgYmllbiBkZSB2b3VzIHNpbm9uIGlsIHNlcmEgYXVzc2l0Jm9jaXJjO3QgYmxvcXUmZWFjdXRl

OyBkYW5zIGxlcyAyNGggcXVpIHN1aXZlbnQuPGJyIC8+PGJyIC8+PC9wPg0KPHRhYmxlIGNsYXNz

PSJtXzMwMTg0MDgwMjM2MTU5Nzk3NDJzbS13LWZ1bGwiIHN0eWxlPSJ3aWR0aDogMjMycHg7IGZv

bnQtZmFtaWx5OiAnT3BlbiBTYW5zJywgUm9ib3RvLCB1aS1zYW5zLXNlcmlmLCAnU2Vnb2UgVUkn

LCBBcmlhbCwgLWFwcGxlLXN5c3RlbSwgc2Fucy1zZXJpZjsgaGVpZ2h0OiAzNXB4OyBtYXJnaW4t

bGVmdDogMTAwcHg7IiByb2xlPSJwcmVzZW50YXRpb24iIGNlbGxzcGFjaW5nPSIwIiBjZWxscGFk

ZGluZz0iMCI+DQo8dGJvZHkgc3R5bGU9ImZvbnQtZmFtaWx5OiAnT3BlbiBTYW5zJyxSb2JvdG8s

dWktc2Fucy1zZXJpZiwnU2Vnb2UgVUknLEFyaWFsLC1hcHBsZS1zeXN0ZW0sc2Fucy1zZXJpZjsi

Pg0KPHRyIHN0eWxlPSJmb250LWZhbWlseTogJ09wZW4gU2FucycsUm9ib3RvLHVpLXNhbnMtc2Vy

aWYsJ1NlZ29lIFVJJyxBcmlhbCwtYXBwbGUtc3lzdGVtLHNhbnMtc2VyaWY7Ij4NCjx0aCBzdHls

ZT0iYm9yZGVyLXJhZGl1czogOTk5OXB4OyBmb250LWZhbWlseTogJ09wZW4gU2FucycsIFJvYm90

bywgdWktc2Fucy1zZXJpZiwgJ1NlZ29lIFVJJywgQXJpYWwsIC1hcHBsZS1zeXN0ZW0sIHNhbnMt

c2VyaWY7IGJhY2tncm91bmQtY29sb3I6IGJsdWU7IGJvcmRlcjogMXB4IHNvbGlkICMwMDc0NjE7

IHdpZHRoOiAyMjkuMzMzcHg7Ij48YSBzdHlsZT0idGV4dC1kZWNvcmF0aW9uOiBub25lOyBkaXNw

bGF5OiBibG9jazsgcGFkZGluZy10b3A6IDE4cHg7IHBhZGRpbmctYm90dG9tOiAxOHB4OyBmb250

LXNpemU6IDE0cHg7IGxpbmUtaGVpZ2h0OiAxMDAlOyBmb250LWZhbWlseTogJ09wZW4gU2Fucycs

Um9ib3RvLHVpLXNhbnMtc2VyaWYsJ1NlZ29lIFVJJyxBcmlhbCwtYXBwbGUtc3lzdGVtLHNhbnMt

c2VyaWY7IGNvbG9yOiAjZmZmZmZmOyIgaHJlZj0iaHR0cHM6Ly9zaXRlcy5nb29nbGUuY29tL3Zp

ZXcvenJldGVyL2hvbWUiIHRhcmdldD0iX2JsYW5rIiByZWw9Im5vb3BlbmVyIj5tZXR0cmUgJmFn

cmF2ZTsgam91ciBtZXMgaW5mb21hcnRpb25zPC9hPjwvdGg+DQo8L3RyPg0KPC90Ym9keT4NCjwv

dGFibGU+DQo8cCBzdHlsZT0idGV4dC1hbGlnbjogbGVmdDsiPiZuYnNwOzwvcD4NCjwvdGQ+DQo8

L3RyPg0KPHRyIHN0eWxlPSJoZWlnaHQ6IDQ4cHg7Ij4NCjx0ZCBzdHlsZT0iZm9udC1zaXplOiAx

MnB4OyBoZWlnaHQ6IDQzcHg7IGZvbnQtZmFtaWx5OiBBcmlhbCwgSGVsdmV0aWNhLCBzYW5zLXNl

cmlmOyB3aWR0aDogNDE3LjMzM3B4OyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBjb2xvcjogIzAwMDAw

MDsgYmFja2dyb3VuZC1jb2xvcjogI2VkZWRlZDsgcGFkZGluZzogMjBweCAzMHB4IDIzcHg7IiBh

bGlnbj0ibGVmdCI+PHNwYW4gaWQ9InAyOCI+PHNwYW4gaWQ9IjMxIj4mY29weTtQYXlwYWw8L3Nw

YW4+IDIwMjQ8L3NwYW4+PGJyIC8+TWVyY2kgZGUgbmUgcGFzIHImZWFjdXRlO3BvbmRyZSAmYWdy

YXZlOyBjZXQgZW1haWwuIE5vdXMgbmUgc29tbWVzIHBhcyBlbiBtZXN1cmUgZGUgciZlYWN1dGU7

cG9uZHJlIGF1eCBkZW1hbmRlcyBlbnZveSZlYWN1dGU7ZXMgJmFncmF2ZTsgY2V0dGUgYWRyZXNz

ZS4gUG91ciBvYnRlbmlyIGRlcyByJmVhY3V0ZTtwb25zZXMgaW1tJmVhY3V0ZTtkaWF0ZXMgJmFn

cmF2ZTsgdm9zIHF1ZXN0aW9ucywgdmlzaXRleiBub3RyZSBjZW50cmUgZCdhaWRlIGVuIGNsaXF1

YW50IHN1ciAiQWlkZSIgc2l0dSZlYWN1dGU7IHN1ciBuJ2ltcG9ydGUgcXVlbGxlIHBhZ2UgUGEg

eVBhbCBvdSBwYXIgZS1tYWlsLjwvdGQ+DQo8L3RyPg0KPC90Ym9keT4NCjwvdGFibGU+DQo8L3Rk

Pg0KPC90cj4NCjwvdGJvZHk+DQo8L3RhYmxlPg0KPC90ZD4NCjwvdHI+DQo8L3Rib2R5Pg0KPC90

YWJsZT4NCjxwPiZuYnNwOzwvcD4=







--1ce020416e1fded720edb50fddcdfc077--

Web / SEO/ App spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 07 Oct 2024 00:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sxhDc-00000000JTh-46Wq

for dave@doctor.nl2k.ab.ca;

Mon, 07 Oct 2024 00:27:44 -0600

Resent-From: The Doctor

Resent-Date: Mon, 7 Oct 2024 00:27:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-psaapc01olkn2025.outbound.protection.outlook.com ([40.92.52.25]:16545 helo=APC01-PSA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sxfbl-00000000Okp-0vHY

for sales@nk.ca;

Sun, 06 Oct 2024 22:44:44 -0600

Received: from SEYPR01MB4879.apcprd01.prod.exchangelabs.com

(2603:1096:101:bd::5) by SI2PR01MB4273.apcprd01.prod.exchangelabs.com

(2603:1096:4:1ac::14) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8026.22; Mon, 7 Oct

2024 01:58:30 +0000

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=VBo95tg3ADpHqGXZiVAXgKrPjk2ZIiCkMxcKaAUbgqSTUmCxIopbhxZIZ4htETkM9o/PmG8D1cHh+MZ3bwjWubMGpx6PsE+w8vKnhr+l9/XXFDSOd7uexDF2TpXmGl0TjME8uig/AgLszLv9pTfI6cJsdwVQPkS0kIjZJtmjzQG9xSE4tF0Y0bXoGDPfQ2j5kCRHeDwJtWQueFCUBNtmhg7qBi9d9x264KZfnXkCN/OYRQtUpslwVVu7sPwgYLey60lGZB0Fg6oknaOYwo7pgVb/bmk7zK4dcnz95gWwH/8+YNXDCVmC84u1xhwq2NzFvtjxmOenW27NKmWDth8JcQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=9C60Yh/MH1socB38XsrH1Nv54RiE/VxDK1pKaunJbwY=;

b=F9eFNVc1YbagXUzrA+hrHC2u9+lC2WcZaHlnW1vyaPTtXlrUo1/gtMu0k0ZqF4wD6oOoe1r5hfXOZmuxoV6iQEy3yX0FhKRPfTcigqDQVm/D3nl1/yIY4Y5PNzLM3L0oB8DKK4mR/hq9O8Iz9vMH/eIrW9+MPwU2KgnAoF6DjiqCTWBBrbNPG5sbtovlkWC2srl82bJ5aoqql0Z4PJm9TS8QWXIALBXBMYyoTiGHTf3lr1nYWyTxKjlwy8XJNtbc7+WICdNqURH/20sYRZQT65DF/y2XhgP9I9okz2RXkFN2gaxe2+pXxY11PFS4aQcwfgx+4zdcPgqx+Gyr5NlU0Q==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=9C60Yh/MH1socB38XsrH1Nv54RiE/VxDK1pKaunJbwY=;

b=aGyNRIjB5DZEmSMmonP2UCXUXLv3E23PsTFP2l+mR5+sbQZqOp1JIF1+q1gOk0/TeKa7iYqzhE870rxKiSvlYpBA+myqUSGgaz4wbYXa51Vhddcnxm3yry6UkLY9VMqasr11hVA9/jpOTFXOjFhsIJ3hNKWzAPGTfQFdnvvo1i7JwrHKnQimQzAA/BiMmjmhplfhLRQyWBFIfJazo5SPZNQ6V9DPF91v4eSegC9c1omE4WD9lAoTbDPlqvfxM90T/fhxIpLYobNAFJ15lZCb7vYuyh5EevrLjcezbYTONTkoFym2eo8nBLAQYPJpq1qxkq/F/g/y3ePmuiv9+d9x6w==

Received: from TYZPR01MB6827.apcprd01.prod.exchangelabs.com

(2603:1096:405:de::5) by SEYPR01MB4879.apcprd01.prod.exchangelabs.com

(2603:1096:101:bd::5) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8026.20; Sun, 6 Oct

2024 14:48:51 +0000

Received: from TYZPR01MB6827.apcprd01.prod.exchangelabs.com

([fe80::8f39:4eb3:f322:a874]) by TYZPR01MB6827.apcprd01.prod.exchangelabs.com

([fe80::8f39:4eb3:f322:a874%3]) with mapi id 15.20.8026.019; Sun, 6 Oct 2024

14:48:50 +0000

From: vinas rooy

To: vinas rooy

Subject: Re: send / you..

Thread-Topic: send / you..

Thread-Index: AQHbF/5t1hD7K6xZAkmBqiQN6EeZ9Q==

Date: Sun, 6 Oct 2024 14:48:50 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic:

TYZPR01MB6827:EE_|SEYPR01MB4879:EE_|SI2PR01MB4273:EE_

x-ms-office365-filtering-correlation-id: 850a4c75-6324-4a6a-0417-08dce615fd9b

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799006|15030799003|461199028|8062599003|19110799003|8060799006|56899033|102099032|440099028|3412199025|1710799026;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?CnaPSCcVG+WsZSCkBYd68OfCK4EmlzU2+OnsB4Hd7hRjrSxfUBlNFwFCdO?=

=?iso-8859-1?Q?MfHjptN5wgGImKSkKGzcoiOHUV9kwj2J4mLM2hCIQetZoNSTnK01foZFsb?=

=?iso-8859-1?Q?r+nan6Wo0FcBIvVky60fa6iZ9WrWIItna+CaeQuyvMNDsRXe+W++stQ/1M?=

=?iso-8859-1?Q?b8YgaKH+1GTsRJgpc/lqiByFM6ijR2x3qVkOjJwRMUOlXD6BVRIF0awPuL?=

=?iso-8859-1?Q?JwZvjBG9KJwCCJNO/D4BY7DpksKYX2n2KI3vMd9Tmtm6gF8GHFmK1LUQlJ?=

=?iso-8859-1?Q?CnGSRmGXylfzc+RJSksimuZOOQ84QGNKo2QrjrWWC94E72zY0gWq86r/cQ?=

=?iso-8859-1?Q?56wwElUmLrycOenuffNfYF+z60yFwpygGEmOm2qgrM2M9qnAgvWiArtkK+?=

=?iso-8859-1?Q?JXSk6Ky1qtfIDoq6+l3ZA7jzhIjemWje9nho4yLo4XVhVTg9eI3ZT+5eQh?=

=?iso-8859-1?Q?dAKFKwQ5vxwKesxlsJ3VtUgzu7kr1HzdO9awY5Azbs2NNPufxZH28qzN1D?=

=?iso-8859-1?Q?5YyE26gbWfeaLdj+7gTh+sWhGDXQv2mavt+9trA9h0d8f2xg5UTqVa8/4h?=

=?iso-8859-1?Q?jr59zjvkOhCtAZGfqazSiZh1oKdZIc+nBvDyEQp63UAZaogIqbBKy3Vy9m?=

=?iso-8859-1?Q?SlVq8EX0y1psTXXyasbCx+Jcdn1y1Y8dClcmBbuPwRTOdf9lwAXaSLfnV+?=

=?iso-8859-1?Q?uXWzM5Y/T7+omemrLKkWu8j6NyvEFxonvIVUEnJeL+r90bixbNn+wsAlCh?=

=?iso-8859-1?Q?xr0YxJ2YmThXc4RED2jXVY0DvLe0v7f55sk6BimQiHGecOq2QSMARFbBWM?=

=?iso-8859-1?Q?y058sdQeSMLUXerA5XtPW8879tJ6wSNk7IPD/P/awUyA0CeJ2qzzTxzaKX?=

=?iso-8859-1?Q?ANeE6CH5MgB+BlA5IaZ70tfG5pjCe57VZoArwjy7q5HD/g8b/QDHEo8pJg?=

=?iso-8859-1?Q?S0UUh1Ek/Zdw+1iVsqO1AuhkLcM/xpsoYCkztyp48oTxzbK3MtpW6poBOI?=

=?iso-8859-1?Q?7hSKHLn53Fl/X5D4EXsU2FjVl1hnx+l6q/q81Rgm2APfSYcSRQAgU3RmoG?=

=?iso-8859-1?Q?vbIkzJkWiu95abBhmHnAS9zqALolC2/WC663NoHfhtpRnAZeWdTIa2cVCI?=

=?iso-8859-1?Q?Zr3SMNO2oNT2kyXNiL19Foxw5JVkTS4Xz2NVU2pCG2TpOx5iD6AgDPGaB0?=

=?iso-8859-1?Q?TxNpOUVPGsxYiVXLj+xwOSvHmfoWHv8sVIYKdqkTk3Du1ZTQWteNnwHuoO?=

=?iso-8859-1?Q?TBoK9s7xfJFsAb6e+Ux9oToFUxpOZKG0KU0/154p2IpzjluauyiZD1Hagu?=

=?iso-8859-1?Q?Z9wl?=

Content-Type: multipart/alternative;

boundary="_000_TYZPR01MB6827868AF7E876136686915EB37C2TYZPR01MB6827apcp_"

MIME-Version: 1.0

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYZPR01MB6827.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 850a4c75-6324-4a6a-0417-08dce615fd9b

X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Oct 2024 14:48:50.3061

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEYPR01MB4879

X-OriginatorOrg: outlook.com



--_000_TYZPR01MB6827868AF7E876136686915EB37C2TYZPR01MB6827apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hey there!



I am still waiting for your reply



May I send you report of those Errors?



You're welcome!



From: vinas rooy

Sent: August 8, 2024 5:51 PM

Subject: Re: price & screenshot..$@



Hello,



I found a few errors on your site.



If Interested, May I send you screenshot of those errors?



I would like to send you a audit report showing you 3 or 4 things that can =

help you improve your Google rankings dramatically.



Best,







--_000_TYZPR01MB6827868AF7E876136686915EB37C2TYZPR01MB6827apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








margin: 0px; font-family: Candara, Optima, sans-serif; font-size: 12pt; col=

or: rgb(0, 0, 0);">

Hey there!



Candara, Optima, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Candara, Optima, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I am still waiting for your reply



Candara, Optima, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Candara, Optima, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

May I send you repor=

t of those Errors?



Candara, Optima, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Candara, Optima, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

You're welcome!



Candara, Optima, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Candara, Optima, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

From: vinas rooy



Candara, Optima, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Sent: August 8, 2024 5:51 PM



Candara, Optima, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Subject: Re: price & screenshot..$@



Candara, Optima, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







margin: 0px; font-family: Candara, Optima, sans-serif; font-size: 12pt; col=

or: rgb(0, 0, 0);">

Hello,



Candara, Optima, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Candara, Optima, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I found a few errors on your site.  



Candara, Optima, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Candara, Optima, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

If Interested, May I=

send you screenshot of those errors?



Candara, Optima, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Candara, Optima, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I would like to send you a audit report showing you 3 or 4 things that can =

help you improve your Google rankings dramatically.



Candara, Optima, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Candara, Optima, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Best,



ize: 12pt; color: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">












--_000_TYZPR01MB6827868AF7E876136686915EB37C2TYZPR01MB6827apcp_--

Web / SEO/ App spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 06 Oct 2024 22:04:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sxexh-00000000E8n-0MWj

for dave@doctor.nl2k.ab.ca;

Sun, 06 Oct 2024 22:03:09 -0600

Resent-From: The Doctor

Resent-Date: Sun, 6 Oct 2024 22:03:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-sn1nam02olkn2085.outbound.protection.outlook.com ([40.92.44.85]:19510 helo=NAM02-SN1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sxevd-00000000DoK-1ol2

for sales@nk.ca;

Sun, 06 Oct 2024 22:01:07 -0600

Received: from PH0PR10MB4742.namprd10.prod.outlook.com (2603:10b6:510:3f::24)

by CO1PR10MB4548.namprd10.prod.outlook.com (2603:10b6:303:97::5) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8026.22; Mon, 7 Oct

2024 03:18:10 +0000

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=vuOGcF51WjC2WGP5Z/9cRmgL8ZnJOHdXrskpQDkK2lMMNyxmfIHryZV9HZHj4nNtNHUAshvK+FNMZuWKnstf4Wt+kKXpVatsrzDzl+ztEQvw3z9GsIyKDhFH4yUWV+YriqwkYxfiaTot2gMKedccJnwRfVXqgi8dDQo+X/YOZBHrvE9BLgxXJhU6B1xY3/d+1oQ2T9loRWMLuM0d1OirP04OkveHiEOm12nyjgYWEcWV+HFSXiNYk9C4sUO3U9Jdae8U8HRqvVeGaKLUjisnewoo3SIk9vDDohkU1JEf16/tTcdGR//kyuinWDj+5AmuWzlBTolDatns+ZqZia5fmg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=YnYljoeqfBmruJF2ZejoY2ncsJIfgGUEW6wUHdSZmSo=;

b=BinECGRy/cIiZ7hLY2yk7Xl3bEWkmIlpzWx6xDowENYg+UYZaqIczSFVvnJvGGDo65k3pM/qtPEKFcLiSjnbC258hvcXyBcKvAt3jqAOGsbz6XxQtKbsGZSUQW0q9LlsQTC3lal6Une/aMe2KGTfZSQ6GGMK6AcNfffgbeqoZOo7hkxAqMmNw/BmUI5RSrh/uKsHjFSVrNRhq52FgLwiqvEfl1c/t6EQmOaUla5uE54T5wRvQAPPD8IweuteQqcMLLXJDpm2TkXRKh6FIoxN/qYSr3z+zMoMpRnHKvU6icKox6xA2CXBPbcNnJtjbBtpOVkiXGK9Zx1aGzthWCJD/Q==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=YnYljoeqfBmruJF2ZejoY2ncsJIfgGUEW6wUHdSZmSo=;

b=TGh2RhIQNbXUpwY7jIEbd0dnAyfSKYpEB1dOxAsNX0XrrIzI/QBqk+PhrcwlboMMzrWOWdzDKcur+v5uDq5isxOzlrwyRpnmIMiux8TqaQdDMlOqFWZrRRAEUAMRGeRO8YEiTrf6olgvh8d1tfo0LF5xEE5ApW+ZESVnrlG+cyVTYtG/A7HSIHBZr7R6EA+4/hIWQ+Kmq9984b3pfmQS/pJ2GPVc5ZkEy8mjml0A6hPhuElm9+sl13+w2T8DQaH3EQTmzBHVVmu6/JcETdvoYNC9MG0VdupadSrxez9i43eXSR10BttYJ8/lbE6kkU5N+4qsl1K3ge4+vpiV5nLxNg==

Received: from SJ2PR10MB7707.namprd10.prod.outlook.com (2603:10b6:a03:578::8)

by PH0PR10MB4742.namprd10.prod.outlook.com (2603:10b6:510:3f::24) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8026.22; Sun, 6 Oct

2024 16:03:30 +0000

Received: from SJ2PR10MB7707.namprd10.prod.outlook.com

([fe80::efdd:5f52:785d:b401]) by SJ2PR10MB7707.namprd10.prod.outlook.com

([fe80::efdd:5f52:785d:b401%3]) with mapi id 15.20.8026.019; Sun, 6 Oct 2024

16:03:30 +0000

From: Camila Washington

To: Camila Washington

Subject: Re: sure .?

Thread-Topic: sure .?

Thread-Index: AQHbGAhQZxZLR5G+MEaj5g+9LCl9SQ==

Date: Sun, 6 Oct 2024 16:03:29 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic:

SJ2PR10MB7707:EE_|PH0PR10MB4742:EE_|CO1PR10MB4548:EE_

x-ms-office365-filtering-correlation-id: 7216571d-4271-44f2-7666-08dce6206ba6

x-microsoft-antispam:

BCL:0;ARA:14566002|461199028|8060799006|15030799003|19110799003|37102599003|8062599003|15080799006|440099028|3412199025|102099032|1710799026;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?SbPVUkvTX6fmOyd0bwH/ALaosg+fOmnQGfYDUwU0mee6zPoN4I2LZsfHtw?=

=?iso-8859-1?Q?BAaVG8Ntbvnt7o5rcC6qxLq8nVOustFD2le8kx+lMyAvmOE2YFPsDt25jb?=

=?iso-8859-1?Q?qyKYjxREUjIGEa4ErN5yiFJj1vOBE9nGwTyIDB4GU+Mmq7gWHdFkcMdvxj?=

=?iso-8859-1?Q?od5xBvKeBERhaPrcICP1YSU6GV4VwAy3bUpuiTfqLnAl1TSG3Nuy/J+VkF?=

=?iso-8859-1?Q?mkSE2CFFZ43TAlh+8gjMkUJ2WQVNeaXSpuzmtPBuYOIdn/r68eNlGer8fl?=

=?iso-8859-1?Q?zPStAAo1UMCq9E0keobzn8Txq+fJ/2UBn7O67Sz2XU3Kl92ncsdR4DBeG/?=

=?iso-8859-1?Q?CBGwSgjEOhWDqY9RX1TC40IhewTxQg+6FohwBBBWKCfMgAqiXSnNQm7Myz?=

=?iso-8859-1?Q?jYN+FneZOlEnPuqfdY8GO+QDPx3UMMgUCCyriEgeToftjGBFpZa2NUf17L?=

=?iso-8859-1?Q?5yoFdTYzUSSSSCL7gFLJw7rPzN/704buc6lBG+7Cr4kN4LRRWWR4zaeLEZ?=

=?iso-8859-1?Q?Gk+g3fYMm+CsZZ4etGzn1NjhlcLRqDf4n8FbklkDbDDQ9wu0z1hIqGs6W5?=

=?iso-8859-1?Q?Wf2lgoyFH7ZA+ZhQSkxevyJcA+pwQiIAgwTrhDug1j7qyDmYp6hx5T4OFz?=

=?iso-8859-1?Q?yLIIfCUbvIy3TV0+6+BiJjyD86b7fOyMBbOcWImBUFyPobXIOedwFSQ8mD?=

=?iso-8859-1?Q?vJHLbBHHV7THgM0/mt8gwituyLsDp0CQBKIfiNAAF6vAQSNeMhcas+XHJF?=

=?iso-8859-1?Q?IDAUk45MWHFqSd2buCp+0oR4RuNWEdfteC0W+XwW67IXjKIYDiL0ZRjtv6?=

=?iso-8859-1?Q?YIPdupFBoCP//6paeH7i2B1ZQ6JggNbJ2+cUqmsNNd5KVZb7dshMq1fX2y?=

=?iso-8859-1?Q?oK69UPhkUyx09tdEp1RKpL+nHp7SEO+WXmZw2v6vU2j6v3n7fhgAV9fizG?=

=?iso-8859-1?Q?EIpOJuFxU3lRsSo0nj+RHmisrzCnA56+FK4N1sFlkC6W5ffmnfL05reHvC?=

=?iso-8859-1?Q?RvXuguJv20F76Qv5C9M2Q6R+YCRnmlkRLTW6lt56S9TsU3BFQw7a3VYtZZ?=

=?iso-8859-1?Q?5jbFF65wLMHiRuf6JRrNkr9E8RZpJ3ZE6A70+xEyVfPj07spn0durIySuB?=

=?iso-8859-1?Q?Yj8muMtY23ynHunG9UPE42HkGAbVKN1IDE8BXJv3Hi8Egrw2zGYj7gzowL?=

=?iso-8859-1?Q?4q5xLV4YDnTVy/ClVBAjPZRKwrS8BfaR5+xR7rbFAekaeyER2y6VXezIzi?=

=?iso-8859-1?Q?lp2Ks4GKbnKKZSgmWxIRGOy+fmMyz1OI/1tLBhnXNuVnAlx9GlHGp7K8hm?=

=?iso-8859-1?Q?WLyMSl/P7Yk+lhJk/2i977iTOD4WvBTWjtsh0GDaJ1QwKfb/gIJ4BwstRH?=

=?iso-8859-1?Q?/HtSBz7FhF?=

Content-Type: multipart/alternative;

boundary="_000_SJ2PR10MB7707F306C551E7BAC4FC6DAFD67C2SJ2PR10MB7707namp_"

MIME-Version: 1.0

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SJ2PR10MB7707.namprd10.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 7216571d-4271-44f2-7666-08dce6206ba6

X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Oct 2024 16:03:29.8759

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH0PR10MB4742

X-OriginatorOrg: outlook.com



--_000_SJ2PR10MB7707F306C551E7BAC4FC6DAFD67C2SJ2PR10MB7707namp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hey there!



I am still waiting your reply



Thank You.!



From: Camila

Sent: August 19, 2024 5:51 PM

Subject: Re: can i..$$



Hello,



I found a few errors on your site.



If Interested, May I send you screenshot of those errors?



I would like to send you a audit report showing you 3 or 4 things that can =

help you improve your Google rankings dramatically.



Best,



--_000_SJ2PR10MB7707F306C551E7BAC4FC6DAFD67C2SJ2PR10MB7707namp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








;, Trebuchet, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hey there!



font-size: 12pt; color: rgb(0, 0, 0);">







font-size: 12pt; color: rgb(0, 0, 0);">

I am still waiting your reply



font-size: 12pt; color: rgb(0, 0, 0);">







font-size: 12pt; color: rgb(0, 0, 0);">

Thank You.!



font-size: 12pt; color: rgb(0, 0, 0);">







;, Trebuchet, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

From: Camila 



font-size: 12pt; color: rgb(0, 0, 0);">

Sent: August 19, 2024 5:51 PM



font-size: 12pt; color: rgb(0, 0, 0);">

Subject: Re: can i..$$



font-size: 12pt; color: rgb(0, 0, 0);">







font-size: 12pt; color: rgb(0, 0, 0);">

Hello,



font-size: 12pt; color: rgb(0, 0, 0);">







font-size: 12pt; color: rgb(0, 0, 0);">

I found a few errors on your site.



font-size: 12pt; color: rgb(0, 0, 0);">







;, Trebuchet, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

If Interested, May I=

send you screenshot of those errors?



font-size: 12pt; color: rgb(0, 0, 0);">







font-size: 12pt; color: rgb(0, 0, 0);">

I would like to send you a audit report showing you 3 or 4 things that can =

help you improve your Google rankings dramatically.



font-size: 12pt; color: rgb(0, 0, 0);">







;, Trebuchet, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Best,








--_000_SJ2PR10MB7707F306C551E7BAC4FC6DAFD67C2SJ2PR10MB7707namp_--