Instagram spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 21 Oct 2024 10:41:00 -0600

Received: from root by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t2vST-00000000GMp-0s5e

for dave@doctor.nl2k.ab.ca;

Mon, 21 Oct 2024 10:40:41 -0600

Resent-From: "Dave Shariff Yadallee - System Administrator a.k.a. The Root of the Problem"

Resent-Date: Mon, 21 Oct 2024 10:40:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f177.google.com ([209.85.222.177]:43154)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1t2vCB-00000000FgJ-01pr

for sales@nk.ca;

Mon, 21 Oct 2024 10:23:59 -0600

Received: by mail-qk1-f177.google.com with SMTP id af79cd13be357-7b1507c42faso309278785a.0

for ; Mon, 21 Oct 2024 09:21:59 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=socialxpertmaxelitehq-com.20230601.gappssmtp.com; s=20230601; t=1729527713; x=1730132513; darn=nk.ca;

h=mime-version:date:subject:to:from:list-unsubscribe-post

:list-unsubscribe:message-id:from:to:cc:subject:date:message-id

:reply-to;

bh=e89KEQf4P6YjVhpc/NPJAeYVF+l58bF5eHzM9tGHHPw=;

b=tIe6yzOhzJmDWG6UwXMRUOn8+bKMxbYDLRTvd4inXqMUE7JyZxh9T8wVw/itVcrDq9

1ZnO1HLZGj0S0eyALOoux1whYUKZ8vrmictZygL3qZZF5KZlqtEwQAqKu2JX7VFS2JW3

wwxLVA7IaBB7GReCpfVNiKbVChiDbHTwqHcZTkMGAWsJ5nuNQWqA5KcB0Fz53JgHmUqE

eE3J6dvc6KiNIcqFB2Vp1b40YTezgbn8MDwcwuPgxi7ofd78rygrwMBWFQkVQfIGh8uz

EyNnf3fTo+1R7HuNpRsbKFCv3y0za4OBMV8Nf6W2bNEXvgJYCg2Xu4HNlhejUgwRT1G4

ufPg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1729527713; x=1730132513;

h=mime-version:date:subject:to:from:list-unsubscribe-post

:list-unsubscribe:message-id:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to;

bh=e89KEQf4P6YjVhpc/NPJAeYVF+l58bF5eHzM9tGHHPw=;

b=PEd6kkLmI6yrLDTn2KVApces82BDiEp4hDg0tbj9byED8VwRbzMUo9UraQ2TrJevoN

NOEX2/9+7h/x+gR/zU25mU61hK5cQVBrSetDhzqIEIJR6rMITVwxr6wbppFT6kX8QM6P

MPIvht5pCGEnzq+7YWTzfX9xDtWJipkyKC5Rkqt+ApnlbFPH+KWG62qhguxZpJfQJtsf

Z2tjAZ9NgSD7nFj5FpoCHgdPcwKzdwd1tHzYGwVRzH6yDgumyehjnKBwhcl3c3GOPPmE

N2EtnK8b499EJZdRArY3ARsPhgg1LVpcaRuEym44ZcanhD3Hipn1sD8KGtl8EITBhOKq

cufg==

X-Gm-Message-State: AOJu0YwZnHRRL0B895NVmZnrt2ZIP6n9uOM96v27KTAeRq0EQC5/3G0C

OxguVbNI4ne5Riy8e44zW/r+r2m6TPq0/9YKPv8hyiaaAqe2dXunxQ+sx1WwIrm4P6YHbkfrA/L

G

X-Google-Smtp-Source: AGHT+IF3TQ83RGGDDVgSIjIYxZhfhAD5tZg0MXlrpVhii6w46hOVhk0dbB9xqI9rW5mXGgMTqkgrDw==

X-Received: by 2002:a05:620a:4714:b0:7a9:c129:504f with SMTP id af79cd13be357-7b1755b6c95mr27979785a.23.1729527712735;

Mon, 21 Oct 2024 09:21:52 -0700 (PDT)

Received: from 60903430-c4e5-46f4-a2aa-29d040f36e55.local (ec2-52-201-225-172.compute-1.amazonaws.com. [52.201.225.172])

by smtp.gmail.com with ESMTPSA id af79cd13be357-7b1659b97ddsm186756485a.25.2024.10.21.09.21.52

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Mon, 21 Oct 2024 09:21:52 -0700 (PDT)

Content-Type: multipart/alternative;

boundary="--_NmP-03e97a32568d39c7-Part_1"

Message-ID:

<60903430-c4e5-46f4-a2aa-29d040f36e55@socialxpertmaxelitehq.com>

List-Unsubscribe:



List-Unsubscribe-Post: List-Unsubscribe=One-Click

From: Zola Rodriguez

To: sales@nk.ca

Subject: @netknowyeg Fix Your Instagram

Date: Mon, 21 Oct 2024 16:21:51 +0000

MIME-Version: 1.0

X-Spam_score: 7.9

X-Spam_score_int: 79

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hey @netknowyeg, I recently came across your Instagram page

and was impressed by the professionalism of your contact information. Your

phone number, text, and email address are straightforward and easy to find,

which [...]



Content analysis details: (7.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[52.201.225.172 listed in will-spam-for-food.eu.org]

[52.201.225.172 listed in will-spam-for-food.eu.org]

[52.201.225.172 listed in will-spam-for-food.eu.org]

[52.201.225.172 listed in will-spam-for-food.eu.org]

[52.201.225.172 listed in will-spam-for-food.eu.org]

[52.201.225.172 listed in will-spam-for-food.eu.org]

[52.201.225.172 listed in will-spam-for-food.eu.org]

[52.201.225.172 listed in will-spam-for-food.eu.org]

[209.85.222.177 listed in will-spam-for-food.eu.org]

[209.85.222.177 listed in will-spam-for-food.eu.org]

[209.85.222.177 listed in will-spam-for-food.eu.org]

[209.85.222.177 listed in will-spam-for-food.eu.org]

[209.85.222.177 listed in will-spam-for-food.eu.org]

[209.85.222.177 listed in will-spam-for-food.eu.org]

[209.85.222.177 listed in will-spam-for-food.eu.org]

[209.85.222.177 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.177 listed in dnsbl.ahbl.org]

[209.85.222.177 listed in dnsbl.ahbl.org]

[209.85.222.177 listed in dnsbl.ahbl.org]

[209.85.222.177 listed in dnsbl.ahbl.org]

[52.201.225.172 listed in dnsbl.ahbl.org]

[52.201.225.172 listed in dnsbl.ahbl.org]

[52.201.225.172 listed in dnsbl.ahbl.org]

[52.201.225.172 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.177 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.177 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.177 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.177 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.177 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.177 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} @netknowyeg Fix Your Instagram



----_NmP-03e97a32568d39c7-Part_1

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Hey @netknowyeg,



I recently came across your Instagram page and was =

impressed by the professionalism of your contact information. Your phone =

number, text, and email address are straightforward and easy to find, which=

is great for potential clients looking to get in touch with you. Keep up =

the great work!



That being said, I couldn't help but notice that your =

engagement on Instagram is not as high as it should be. We have worked with=

accounts similar to yours and made them grow and thrive on Instagram. With=

your quality content, you deserve much more recognition on your account.



At TrendGram, we specialize in organically growing Instagram accounts with =

real, engaging followers. We do not require your Instagram password and =

give a guarantee of no fake followers or bots. Our clients see an average =

growth anywhere from 3,000 to 10,000 followers per month. An increase in =

organic engaged followers will lead to more social credibility, sales and =

networking opportunities.



You can get started today in under 2 minutes!=

=C2=A0www.trendgram.com/netknowyeg https://inst.socialxpertmaxelitehq.=

com/lt/1125899941053858/dnFb291AwdQ0gHEIkkuTX



Please don't hesitate to =

reach out if you have any questions or enquiries.



Warm Regards,

Zola



--

----_NmP-03e97a32568d39c7-Part_1

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Hey @netknowyeg,

I recently came across your =

Instagram page and was impressed by the professionalism of your contact =

information. Your phone number, text, and email address are straightforward=

and easy to find, which is great for potential clients looking to get in =

touch with you. Keep up the great work!

That being=

said, I couldn't help but notice that your engagement on Instagram is not =

as high as it should be. We have worked with accounts similar to yours and =

made them grow and thrive on Instagram. With your quality content, you =

deserve much more recognition on your account.

At =

TrendGram, we specialize in organically growing Instagram accounts with =

real, engaging followers. We do not require your Instagram password and =

give a guarantee of no fake followers or bots. Our clients see an average =

growth anywhere from 3,000 to 10,000 followers per month. An increase in =

organic engaged followers will lead to more social credibility, sales and =

networking opportunities.



>Please don't hesitate to reach out if you have any questions or enquiries.=


Warm Regards,
Zola



AwdQ0gHEIkkuTX.png' alt=3D'line'>

----_NmP-03e97a32568d39c7-Part_1--

Web / SEO / App spam from Microsoft Outlook

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 21 Oct 2024 15:58:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t30PK-0000000015Q-0Cde

for dave@doctor.nl2k.ab.ca;

Mon, 21 Oct 2024 15:57:46 -0600

Resent-From: The Doctor

Resent-Date: Mon, 21 Oct 2024 15:57:45 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19011030.outbound.protection.outlook.com ([52.103.74.30]:28476 helo=SE2P216CU007.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1t2z7r-00000000019-3tIZ

for sales@nk.ca;

Mon, 21 Oct 2024 14:35:45 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=pUgafeOT1fJr90OOaDYgCvO+QvVF+MDu0BSg02GHcBbOE0P0/QrM9+iWvjDRMYAMtR/pOzQWEUmyo+ifkhDb0Su6cNyIEZkQKUEM4ILMKU0HczAk+8jvqWnsSMI4608VYJM3suJZrV7k+2qz08Xx0mBdUpr7PNKMs6TKb4nppeuSylwdKKMAwSTYrP84/bNr8iMu4nyI+GNhCu32dGw58JgDZQ7TjYKXNfkbbVnyExN/a0N0zxyk6oO1C1pC60rInOKzE3Vw0iezTePUsWqd8/htdilENxxgghDSK15NdBelrtA23EISFmBeQx8LoyyhbCn+W7wphFHtPcK7cjqSlw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=o6akf0uoceeG1YUXq4creejYppox+gsGHiXKs0Vtc68=;

b=s6hLxjCGb0xnFLn+eLDzPrITguA+OORKnuxUCMXygHuPvy1g61llPmt9UMNi11+cgaGGkG+heC1RPAfXoStOiODYuVG6KdobbZjF1XHRKsb2YdlrVYyGbL9EbLN1KC03TnYHmxGTVsLUMTwSyrHGal3qeUzjCh2GDJEdt4ZyiwYl0k7TMytDi8bnWaGXgxckGYJC07Swa9qRaY53UjV+wXx4FSa6N4mB0qBXifzGJXpbxUc1l9FoQFI8XM70OTCAwSy3aLJuaVlCWuJG1DiBPU5bX6AbxdSOYKiB2VQZ6FdGKGuP5F07NEMfNYxz6LyrBXEXtOPfIqR0YTn06DzeeQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=o6akf0uoceeG1YUXq4creejYppox+gsGHiXKs0Vtc68=;

b=jfL4ZzgaSZE0mSk/fxJeBr+SKupqmdlp4k8R2MFzEsP0LTwU8dnsAaxw8NSWUQpy7Y1O/ecsbzWGSAwjUP0zzpW4SgboISeHbChACUh7JMW3jigolO5HLqokTI6C9ZjPJrf9n5aTS9R9NivHXUBrFP0Rn5fyRP98EWiKzaKEn5ysEX0NOSZqBvrIMn6Nuvul+OkHHB0v1lytzfooiqw/WWczLhYUFTvT0KsJ8AfzfTyXDrNuCqRruzdLFfGZoKpQ+BS3Cky/px31am08dQptXK1jPmxlSgMyuGfKuhleZ1zRUqwXC5Ep0RqIiGvZS6w9NWIbRE1JNZ+h89tY0Ii1Sg==

Received: from SE1P216MB2105.KORP216.PROD.OUTLOOK.COM (2603:1096:101:161::14)

by SE1P216MB1430.KORP216.PROD.OUTLOOK.COM (2603:1096:101:29::8) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8069.28; Mon, 21 Oct

2024 16:40:08 +0000

Received: from SE1P216MB2105.KORP216.PROD.OUTLOOK.COM

([fe80::b6ce:e2d6:820f:c7c9]) by SE1P216MB2105.KORP216.PROD.OUTLOOK.COM

([fe80::b6ce:e2d6:820f:c7c9%6]) with mapi id 15.20.8069.027; Mon, 21 Oct 2024

16:40:08 +0000

From: Fabiana Allegro

To: Fabiana Allegro

Subject: Yes

Thread-Topic: Yes

Thread-Index: AQHbI9fF8CdH3l2SsE2rpa9aGK8AfQ==

Date: Mon, 21 Oct 2024 16:40:08 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SE1P216MB2105:EE_|SE1P216MB1430:EE_

x-ms-office365-filtering-correlation-id: 6628ab08-3795-40f3-bd12-08dcf1ef0663

x-microsoft-antispam:

BCL:0;ARA:14566002|7042599007|461199028|15080799006|6115599003|19110799003|8060799006|15030799003|8062599003|102099032|3412199025|440099028|1710799026;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?i6gFZVG60dSA2L2c66At2ilPq0QvgQlKpD+vA3b4whyFHvyi0G5bT97X+X?=

=?iso-8859-1?Q?X54lT31XCTBhg8hNEjEMDJ3vboh+lS+KtuVvbZM7MFQz87kvrU5YxcDBUV?=

=?iso-8859-1?Q?zscsHDbrFyNN+xVx6Xj6AXdE7dD4DgAVgJTWL+chu4W6kq23AOtt6K2ZiM?=

=?iso-8859-1?Q?H/YM4Mux9PItTyRa1MOq6ZVHkhTMpI/pzBDEmmTGeoBor9hfkoyidUB8aB?=

=?iso-8859-1?Q?2GmbyHd/XPLl3D8Yi9ChO++WzQyqmRruLXL7ukpsIVD/elQWAKm55TNd2f?=

=?iso-8859-1?Q?W7/2xJ44v1F7NtKHT4qHgAO3bPytUnDcqMIjKZx9zGo7ozvsR619Kk75HZ?=

=?iso-8859-1?Q?CUblOQiwwctQPlu1D8K6Gu0LE2bW0i3M4iYLyI94oPIVou3BP78z6HYEdj?=

=?iso-8859-1?Q?lOBQs8/ds6IEoXqD3gQxHpD/5h4HcIbBK5F7BWHEBSYfDR+vNjTz3koVfq?=

=?iso-8859-1?Q?ri7YUn0HAV2Jax1Ud+yVOmr2FQtj5veqnd7Tw+BZv2KWmSkrVjNU9MTWm+?=

=?iso-8859-1?Q?1KqoeZh6f7l+7stYAP/+q0IZQEjbWHzqiZ1YbL2suuJ9E+Twn58AHAKTEk?=

=?iso-8859-1?Q?MHZKh6nOgMpr8urkoZ9PShhsE5+W/CMxy8xn+pRcVQv1c0efA1Nycmq5O0?=

=?iso-8859-1?Q?fX4WMRpPqHO4y9iP83G2YO8C3mQZ5sf3tDS2r3d5Zq48WO1Iti4kewuDQG?=

=?iso-8859-1?Q?H3dK/SA2n5UyjjCcaMtY3ky3ucQtVR0+wGsCAN9UQZAd47mVQ5ny3NOEPU?=

=?iso-8859-1?Q?EWHyyb8o3q7mMAgq8IjKhrsBb7ROciuzPBGAWAV0UL6JbQQkvuRj8VEvHQ?=

=?iso-8859-1?Q?TqVHzA1obDquwJ1zLGvTvtuQuYasbEoDxB5WOeGy7v6967DMU/u8pCs0yA?=

=?iso-8859-1?Q?p3slVXpChqMIZs4iDp2lCArSkwqCm0ec7854ZGZtl/l2PbVHVreodaXSof?=

=?iso-8859-1?Q?c7xjtUKMAZNQWe5u4qf0zM/mskvoKNhibwRotDwCohq0GSoFYtuEGTLIIg?=

=?iso-8859-1?Q?Pv+uI57DXStT5LWr/u95HiFScuFJNUWv3bPo0IPn6jzSHOOBii04EGLCqa?=

=?iso-8859-1?Q?MWTPSUiMCIn9qvRIWyoOQFKdinhc5UbaXL7yev5YEhc+xSUFNTS0AiwwCm?=

=?iso-8859-1?Q?wPS3ug1O1GTs4pIenqnQVxAzybNIf45qQjGGClJ8j/+MTXBjdsXCJL1Udu?=

=?iso-8859-1?Q?S6CIgyLH1LRYd+VhwrlJY7MrQk5xJSQNOB9woIRFe21aFeeRm48vlCgAZn?=

=?iso-8859-1?Q?Yi3qWmkYfB5l/EEytPSJdJqfUeWaRtCYCfGrgCBogbTGX51vs743NS2ZT8?=

=?iso-8859-1?Q?ap0ApdxCFBe0rqf8zpLscpebgaro1EgC1bm7SjOcXxXH+FwWesSzm1VeQe?=

=?iso-8859-1?Q?tXpE1PPeql3mjlNk3CQY0yTxQDdygrwQ=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_SE1P216MB210546C547BF3100BCC45D2FF7432SE1P216MB2105KORP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SE1P216MB2105.KORP216.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 6628ab08-3795-40f3-bd12-08dcf1ef0663

X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Oct 2024 16:40:08.6161

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SE1P216MB1430



--_000_SE1P216MB210546C547BF3100BCC45D2FF7432SE1P216MB2105KORP_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hello



Greetings



While browsing through your site, I came across a few errors.



With your permissions: Would it be helpful if I share a Screenshot of these=

issues?



Can I show you the errors.?



Thank you..



--_000_SE1P216MB210546C547BF3100BCC45D2FF7432SE1P216MB2105KORP_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hello



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Greetings



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

While browsing through your site, I came across a few errors.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

With your permissions: Would it be helpful if I share a Screenshot of these=

issues?



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Can I show you the errors.?



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Thank you..








--_000_SE1P216MB210546C547BF3100BCC45D2FF7432SE1P216MB2105KORP_--

Instagram spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 21 Oct 2024 10:41:00 -0600

Received: from root by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t2vST-00000000GMp-0s5e

for dave@doctor.nl2k.ab.ca;

Mon, 21 Oct 2024 10:40:41 -0600

Resent-From: "Dave Shariff Yadallee - System Administrator a.k.a. The Root of the Problem"

Resent-Date: Mon, 21 Oct 2024 10:40:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f177.google.com ([209.85.222.177]:43154)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1t2vCB-00000000FgJ-01pr

for sales@nk.ca;

Mon, 21 Oct 2024 10:23:59 -0600

Received: by mail-qk1-f177.google.com with SMTP id af79cd13be357-7b1507c42faso309278785a.0

for ; Mon, 21 Oct 2024 09:21:59 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=socialxpertmaxelitehq-com.20230601.gappssmtp.com; s=20230601; t=1729527713; x=1730132513; darn=nk.ca;

h=mime-version:date:subject:to:from:list-unsubscribe-post

:list-unsubscribe:message-id:from:to:cc:subject:date:message-id

:reply-to;

bh=e89KEQf4P6YjVhpc/NPJAeYVF+l58bF5eHzM9tGHHPw=;

b=tIe6yzOhzJmDWG6UwXMRUOn8+bKMxbYDLRTvd4inXqMUE7JyZxh9T8wVw/itVcrDq9

1ZnO1HLZGj0S0eyALOoux1whYUKZ8vrmictZygL3qZZF5KZlqtEwQAqKu2JX7VFS2JW3

wwxLVA7IaBB7GReCpfVNiKbVChiDbHTwqHcZTkMGAWsJ5nuNQWqA5KcB0Fz53JgHmUqE

eE3J6dvc6KiNIcqFB2Vp1b40YTezgbn8MDwcwuPgxi7ofd78rygrwMBWFQkVQfIGh8uz

EyNnf3fTo+1R7HuNpRsbKFCv3y0za4OBMV8Nf6W2bNEXvgJYCg2Xu4HNlhejUgwRT1G4

ufPg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1729527713; x=1730132513;

h=mime-version:date:subject:to:from:list-unsubscribe-post

:list-unsubscribe:message-id:x-gm-message-state:from:to:cc:subject

:date:message-id:reply-to;

bh=e89KEQf4P6YjVhpc/NPJAeYVF+l58bF5eHzM9tGHHPw=;

b=PEd6kkLmI6yrLDTn2KVApces82BDiEp4hDg0tbj9byED8VwRbzMUo9UraQ2TrJevoN

NOEX2/9+7h/x+gR/zU25mU61hK5cQVBrSetDhzqIEIJR6rMITVwxr6wbppFT6kX8QM6P

MPIvht5pCGEnzq+7YWTzfX9xDtWJipkyKC5Rkqt+ApnlbFPH+KWG62qhguxZpJfQJtsf

Z2tjAZ9NgSD7nFj5FpoCHgdPcwKzdwd1tHzYGwVRzH6yDgumyehjnKBwhcl3c3GOPPmE

N2EtnK8b499EJZdRArY3ARsPhgg1LVpcaRuEym44ZcanhD3Hipn1sD8KGtl8EITBhOKq

cufg==

X-Gm-Message-State: AOJu0YwZnHRRL0B895NVmZnrt2ZIP6n9uOM96v27KTAeRq0EQC5/3G0C

OxguVbNI4ne5Riy8e44zW/r+r2m6TPq0/9YKPv8hyiaaAqe2dXunxQ+sx1WwIrm4P6YHbkfrA/L

G

X-Google-Smtp-Source: AGHT+IF3TQ83RGGDDVgSIjIYxZhfhAD5tZg0MXlrpVhii6w46hOVhk0dbB9xqI9rW5mXGgMTqkgrDw==

X-Received: by 2002:a05:620a:4714:b0:7a9:c129:504f with SMTP id af79cd13be357-7b1755b6c95mr27979785a.23.1729527712735;

Mon, 21 Oct 2024 09:21:52 -0700 (PDT)

Received: from 60903430-c4e5-46f4-a2aa-29d040f36e55.local (ec2-52-201-225-172.compute-1.amazonaws.com. [52.201.225.172])

by smtp.gmail.com with ESMTPSA id af79cd13be357-7b1659b97ddsm186756485a.25.2024.10.21.09.21.52

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Mon, 21 Oct 2024 09:21:52 -0700 (PDT)

Content-Type: multipart/alternative;

boundary="--_NmP-03e97a32568d39c7-Part_1"

Message-ID:

<60903430-c4e5-46f4-a2aa-29d040f36e55@socialxpertmaxelitehq.com>

List-Unsubscribe:



List-Unsubscribe-Post: List-Unsubscribe=One-Click

From: Zola Rodriguez

To: sales@nk.ca

Subject: @netknowyeg Fix Your Instagram

Date: Mon, 21 Oct 2024 16:21:51 +0000

MIME-Version: 1.0

X-Spam_score: 7.9

X-Spam_score_int: 79

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hey @netknowyeg, I recently came across your Instagram page

and was impressed by the professionalism of your contact information. Your

phone number, text, and email address are straightforward and easy to find,

which [...]



Content analysis details: (7.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[52.201.225.172 listed in will-spam-for-food.eu.org]

[52.201.225.172 listed in will-spam-for-food.eu.org]

[52.201.225.172 listed in will-spam-for-food.eu.org]

[52.201.225.172 listed in will-spam-for-food.eu.org]

[52.201.225.172 listed in will-spam-for-food.eu.org]

[52.201.225.172 listed in will-spam-for-food.eu.org]

[52.201.225.172 listed in will-spam-for-food.eu.org]

[52.201.225.172 listed in will-spam-for-food.eu.org]

[209.85.222.177 listed in will-spam-for-food.eu.org]

[209.85.222.177 listed in will-spam-for-food.eu.org]

[209.85.222.177 listed in will-spam-for-food.eu.org]

[209.85.222.177 listed in will-spam-for-food.eu.org]

[209.85.222.177 listed in will-spam-for-food.eu.org]

[209.85.222.177 listed in will-spam-for-food.eu.org]

[209.85.222.177 listed in will-spam-for-food.eu.org]

[209.85.222.177 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.177 listed in dnsbl.ahbl.org]

[209.85.222.177 listed in dnsbl.ahbl.org]

[209.85.222.177 listed in dnsbl.ahbl.org]

[209.85.222.177 listed in dnsbl.ahbl.org]

[52.201.225.172 listed in dnsbl.ahbl.org]

[52.201.225.172 listed in dnsbl.ahbl.org]

[52.201.225.172 listed in dnsbl.ahbl.org]

[52.201.225.172 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.177 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.177 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.177 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.177 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.177 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.177 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} @netknowyeg Fix Your Instagram



----_NmP-03e97a32568d39c7-Part_1

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Hey @netknowyeg,



I recently came across your Instagram page and was =

impressed by the professionalism of your contact information. Your phone =

number, text, and email address are straightforward and easy to find, which=

is great for potential clients looking to get in touch with you. Keep up =

the great work!



That being said, I couldn't help but notice that your =

engagement on Instagram is not as high as it should be. We have worked with=

accounts similar to yours and made them grow and thrive on Instagram. With=

your quality content, you deserve much more recognition on your account.



At TrendGram, we specialize in organically growing Instagram accounts with =

real, engaging followers. We do not require your Instagram password and =

give a guarantee of no fake followers or bots. Our clients see an average =

growth anywhere from 3,000 to 10,000 followers per month. An increase in =

organic engaged followers will lead to more social credibility, sales and =

networking opportunities.



You can get started today in under 2 minutes!=

=C2=A0www.trendgram.com/netknowyeg https://inst.socialxpertmaxelitehq.=

com/lt/1125899941053858/dnFb291AwdQ0gHEIkkuTX



Please don't hesitate to =

reach out if you have any questions or enquiries.



Warm Regards,

Zola



--

----_NmP-03e97a32568d39c7-Part_1

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Hey @netknowyeg,

I recently came across your =

Instagram page and was impressed by the professionalism of your contact =

information. Your phone number, text, and email address are straightforward=

and easy to find, which is great for potential clients looking to get in =

touch with you. Keep up the great work!

That being=

said, I couldn't help but notice that your engagement on Instagram is not =

as high as it should be. We have worked with accounts similar to yours and =

made them grow and thrive on Instagram. With your quality content, you =

deserve much more recognition on your account.

At =

TrendGram, we specialize in organically growing Instagram accounts with =

real, engaging followers. We do not require your Instagram password and =

give a guarantee of no fake followers or bots. Our clients see an average =

growth anywhere from 3,000 to 10,000 followers per month. An increase in =

organic engaged followers will lead to more social credibility, sales and =

networking opportunities.



>Please don't hesitate to reach out if you have any questions or enquiries.=


Warm Regards,
Zola



AwdQ0gHEIkkuTX.png' alt=3D'line'>

----_NmP-03e97a32568d39c7-Part_1--

Instagram spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 21 Oct 2024 10:41:00 -0600

Received: from root by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t2vSI-00000000GMW-05He

for dave@doctor.nl2k.ab.ca;

Mon, 21 Oct 2024 10:40:30 -0600

Resent-From: "Dave Shariff Yadallee - System Administrator a.k.a. The Root of the Problem"

Resent-Date: Mon, 21 Oct 2024 10:40:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f71.google.com ([209.85.161.71]:44315)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1t2v2X-00000000FJJ-0Fuf

for sales@nk.ca;

Mon, 21 Oct 2024 10:14:03 -0600

Received: by mail-oo1-f71.google.com with SMTP id 006d021491bc7-5ebb6b362f2so1553250eaf.1

for ; Mon, 21 Oct 2024 09:12:00 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1729527114; x=1730131914; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=kAO7OpYW5lzl7fDZSV3i5q4xv2m6yuJjCjfhrOlFD1M=;

b=eRe/RPcWmZyfei+Ro6e/ZsoOK+4Uda4xpKpURRIUCxlHMeXHeNLJHvzeQDszanyvpq

3Sjtrw8N2ztGyqN5T6QPv2yWqJf1fT90rwpYNg13jwv/pgEpczYLBGh7JfhMMl/KLXil

8AolvMb3sKvK0ZpHHgjhRjCYW3UjYmwst1p6jq512dpY67ZJ9M0+8EQuY4LyAhLLV5Bc

j7EwReuKaB9VHvf5wYwDvskJlrYX53aSdZd0pCA046ehkL8mNgQ8NrAHSXJpYPP1+YW1

v5UhQS3VExouveNWN88BCUQZtzN1MQMT1DrX9suZ4DsANxhb6VW5O8esDeVBj1t1wjLS

u5nQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1729527114; x=1730131914;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=kAO7OpYW5lzl7fDZSV3i5q4xv2m6yuJjCjfhrOlFD1M=;

b=pHbthjxazUwJLL6mCjes0Ymc9Hnrd2wmMlbjS3rvVZERAFVWm59NISIEZEy3z3gljv

qFdlS/YzWCY6rcTfdGP7AqT/wJrukpgsyADbX8A/NBbpZWvy9YrpIjaMnHB5NIswBPeJ

z/oYRN8FThXrtQkTF6Rv/tk2NlGm/tDrhBhIv/uBf/FVkkk+BF+6hixOGvgYWmzO9aOm

4YjUana59Dl0ImWGpUcTe2X7wAMaBTVZeVm8HUkKaaSU1cr+MOHL2kOwSBbJsP+hHM0l

Z6aDjclaBcLm5ICn4Fa81bXtRaO+2TKUOpImJFc5TSNMM24/V3NlA8jGHq6MyUuJNQpb

gQOA==

X-Gm-Message-State: AOJu0YwPeWCqLDg4a25GzghxWjQr9NDvrwwaSyXSzJ2Kn93j5wuziexv

nZKvd8dUHH45w5RS7e8ok85CtKDJRxkXb0uodv+8VM5C0AokjicLZkYE1TK9vePKrzCvRbqvziw

=

X-Google-Smtp-Source: AGHT+IH46uePom7id/CmhGSXHu9PqFvQj0BysMhZfqoMr1B+RWfJyJk3s+dYyYd5ui7SOCzp7gW3dO7EHA==

MIME-Version: 1.0

X-Received: by 2002:a05:6820:1629:b0:5e5:c073:9ea5 with SMTP id

006d021491bc7-5ebd77c38bemr292682eaf.6.1729527114561; Mon, 21 Oct 2024

09:11:54 -0700 (PDT)

Message-ID:

Date: Mon, 21 Oct 2024 16:11:54 +0000

Subject: netknowyeg, THE BEST

From: kilopa478@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 8.0

X-Spam_score_int: 80

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello , Netknow Internet Service GET 50K Followers Instagram

NOW !!! Order here : [ https://instamedia.shop/store???netknowyeg ]



Content analysis details: (8.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.161.71 listed in will-spam-for-food.eu.org]

[209.85.161.71 listed in will-spam-for-food.eu.org]

[209.85.161.71 listed in will-spam-for-food.eu.org]

[209.85.161.71 listed in will-spam-for-food.eu.org]

[209.85.161.71 listed in will-spam-for-food.eu.org]

[209.85.161.71 listed in will-spam-for-food.eu.org]

[209.85.161.71 listed in will-spam-for-food.eu.org]

[209.85.161.71 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.71 listed in dnsbl.ahbl.org]

[209.85.161.71 listed in dnsbl.ahbl.org]

[209.85.161.71 listed in dnsbl.ahbl.org]

[209.85.161.71 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.71 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.71 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.161.71 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.71 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[kilopa478(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[kilopa478(at)gmail.com]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 FREEMAIL_REPLY From and body contain different freemails

Subject: {SPAM?} netknowyeg, THE BEST



SGVsbG8gLA0KTmV0a25vdyBJbnRlcm5ldCBTZXJ2aWNlDQoNCg0KR0VUIDUwSyBGb2xsb3dlcnMg

SW5zdGFncmFtIE5PVyAhISENCk9yZGVyIGhlcmUgOg0KDQpbIGh0dHBzOi8vaW5zdGFtZWRpYS5z

aG9wL3N0b3JlPz8/bmV0a25vd3llZyBdDQoNCkRvIHlvdSBoYXZlIGFib3V0IFsgTGVzcyB0aGFu

IDEwMEsgXSBGb2xsb3dlcnMgPw0KU3BlY2lhbHMgIGxpbWl0ZWQgIE9mZiA0MCUgVG9kYXkuLi4h

DQpJbmNyZWFzZSBOb3cgLi4hISENCg0KLSBJbnN0YW50IFN0YXJ0DQotIFNhZmVzdCBNZXRob2Rz

DQotIFByaXZhY3kgUHJvdGVjdGlvbg0KLSBTcGVlZCAyMDBLIEZvbGxvd2Vycy9kYXkNCi0gSGln

aCBRdWFsaXR5IEZvbGxvd2Vycw0KLSBEcm9wLUJhY2sgR3VhcmFudGVlDQotIFRydXN0ZWQgU2Vs

bGVyIHRlc3RpbW9ueQ0KLSBTdGFydGluZyBnZXQgNUsgRm9sbG93ZXJzIEluc3RhZ3JhbQ0KLSBH

dWFyYW50ZWVkIHRvIGJlIHRoZSBjaGVhcGVzdA0KDQpUaGFuayB5b3UsDQpSZWdhcmRzLA0Kc29j

aWFsaW5zdGFtYXhAZ21haWwuY29tDQoNCkNvcHlyaWdodCDCqSAyMDE0IC0gMjAyNSBJbnN0YW1l

ZGlhTUFYDQo=

Home renovation phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 21 Oct 2024 10:40:00 -0600

Received: from root by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t2vR4-00000000GJS-1oBO

for dave@doctor.nl2k.ab.ca;

Mon, 21 Oct 2024 10:39:14 -0600

Resent-From: "Dave Shariff Yadallee - System Administrator a.k.a. The Root of the Problem"

Resent-Date: Mon, 21 Oct 2024 10:39:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.214.113.54] (port=37383 helo=simplifyingalpha.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1t2tY2-00000000BKM-0pQl

for doctor@doctor.nl2k.ab.ca;

Mon, 21 Oct 2024 08:38:56 -0600

Received: from o167.p9.mailjet.com (o167.p9.mailjet.com. [87.253.234.167])

by mx.google.com with UTF8SMTPS id 5b1f17b1804b1-43158c87427si6869925e9.220.2024.10.17.01.51.36

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Thu, 17 Oct 2024 01:51:36 -0700 (PDT)

Received-SPF: pass (google.com: domain of 937efadf.avqaaflolsaaaaaaaaaaasbhtjsaaaaa7fgaaaaaab0wjgbnenay@a1912974.bnc3.mailjet.com designates 87.253.234.167 as permitted sender) client-ip=87.253.234.167;

Authentication-Results: mx.google.com;

dkim=pass header.i=@scaleway.net header.s=mailjet header.b=UUJAiADP;

dkim=pass header.i=@bnc3.mailjet.com header.s=mailjet2 header.b=FUlW+C2n;

spf=pass (google.com: domain of 937efadf.avqaaflolsaaaaaaaaaaasbhtjsaaaaa7fgaaaaaab0wjgbnenay@a1912974.bnc3.mailjet.com designates 87.253.234.167 as permitted sender) smtp.mailfrom=937efadf.AVQAAFLOlSAAAAAAAAAAASbHtjsAAAAA7FgAAAAAAB0wjgBnENAY@a1912974.bnc3.mailjet.com;

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=scaleway.net

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; q=dns/txt;

d=scaleway.net; i=support@scaleway.net; s=mailjet; x=1729162296;

h=message-id:mime-version:from:from:to:to:subject:subject:date:date:list-unsubscribe-post:list-unsubscribe:

feedback-id:x-csa-complaints:x-mj-mid:x-mj-smtpguid:x-report-abuse-to:

content-type;

bh=8Ufod+QLF9UrFf617W+Qgl9D1llNL57OyBxTOGNHzK4=;

b=UUJAiADPmNVXreTVIVWkgsLyOhpf/yDjvZCDtYxxmlnSvQfqTgCvUEGZF U873n2A5wHfV/YOLSrkDbQYtkxZARVAQx8i3Ie8BBqXtUaI2VeRluikBZaxc 3h+ZQB+VknuHZ2zxxtZjHznm4q1xf8xiStwazdXRlqQshPEJSvBIWPzWaOzf cWt/d4Tm8eoBplZzA1Jv8bxLbaO7bzW1YEV8WZYLhP2aezbvUID1rDC7vT3A HhMluNeagOAGVu7osh+NBOshnYejSFQ+BGmJ6Ji3osQ2mvWYh+mh6mKWaV6E pL08rgjr+fXIWHou8CCEDt80RETI8NddBZPKNNl+nSGWA==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; q=dns/txt;

d=bnc3.mailjet.com; s=mailjet2; x=1729162296;

h=message-id:mime-version:from:from:to:to:subject:subject:date:date:list-unsubscribe-post:list-unsubscribe:

feedback-id:x-csa-complaints:x-mj-mid:x-mj-smtpguid:x-report-abuse-to:

content-type;

bh=8Ufod+QLF9UrFf617W+Qgl9D1llNL57OyBxTOGNHzK4=;

b=FUlW+C2nFlyu9dtJP7tQIZrnGD0+9Ic7el9oEs057e9AnchD84/sjj7Dt e2gOjaa4i6C4fqUHgWPGRupV2TgCKSW2/hsLA3jz7xry1dwjXmI9vbe84RQT XQb+eo9HG3WMq3mtH8C6uG3cjiW5kLfas/8/yY3U5koWLTSdadtgu4=Content-Type: multipart/alternative; boundary="----=_Part_9006_1222595691.xIzCIL1dagUplN"

Content-Type: multipart/alternative; boundary="----=_Part_9006_1222595691.xIzCIL1dagUplN"

Date: [email_date]

From: "Home Renovation Experts"

Mime-Version: 1.0

Message-ID:

Subject: Save BIG on home window replacement

X-Feedback-ID: 13235065:SG

X-SG-EID: u001.VRuSiAmiSZrdM+ch8/ewZCE5g8d2mJyorx7s3jZ5rqnyXmzyFkS20YO/O71zaWyuG5n01ntHHvHDQO7WWsZ0yglAgtUtWe2Nsjr8QAomYVNDlZqGB1kKSx5YK8+/GrvM//Al7+JDZ78jIiAHdRR3NaEh/9K8tO3O9LWa4PnrXdZdgdMDTPL/KhvxYw9Mv5xof9DQOiB98h5oItpgW9Pv1CHUFKExtRJQm0atm4BMaG1hLD9He43C26ZLesH5O18K

X-SG-ID: u001.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

To:

X-Entity-ID: u001.N61D72TBAFKTQWIU1PB3IR==

X-Spam_score: 30.6

X-Spam_score_int: 306

X-Spam_bar: ++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please confirm your email address Click here to confirm your

email address To receive HubSpot content on marketing, sales and/or service

topics - please confirm your email address. You will be added to our email

distribution list. You can unsubscribe at any time. PCEYCLNT Th [...]



Content analysis details: (30.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[87.253.234.167 listed in will-spam-for-food.eu.org]

[87.253.234.167 listed in will-spam-for-food.eu.org]

[87.253.234.167 listed in will-spam-for-food.eu.org]

[87.253.234.167 listed in will-spam-for-food.eu.org]

[87.253.234.167 listed in will-spam-for-food.eu.org]

[87.253.234.167 listed in will-spam-for-food.eu.org]

[87.253.234.167 listed in will-spam-for-food.eu.org]

[87.253.234.167 listed in will-spam-for-food.eu.org]

[103.214.113.54 listed in will-spam-for-food.eu.org]

[103.214.113.54 listed in will-spam-for-food.eu.org]

[103.214.113.54 listed in will-spam-for-food.eu.org]

[103.214.113.54 listed in will-spam-for-food.eu.org]

[103.214.113.54 listed in will-spam-for-food.eu.org]

[103.214.113.54 listed in will-spam-for-food.eu.org]

[103.214.113.54 listed in will-spam-for-food.eu.org]

[103.214.113.54 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[87.253.234.167 listed in dnsbl.ahbl.org]

[87.253.234.167 listed in dnsbl.ahbl.org]

[87.253.234.167 listed in dnsbl.ahbl.org]

[87.253.234.167 listed in dnsbl.ahbl.org]

[103.214.113.54 listed in dnsbl.ahbl.org]

[103.214.113.54 listed in dnsbl.ahbl.org]

[103.214.113.54 listed in dnsbl.ahbl.org]

[103.214.113.54 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[87.253.234.167 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[87.253.234.167 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[87.253.234.167 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[87.253.234.167 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[103.214.113.54 listed in bb.barracudacentral.org]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

15 GR_DOMAIN_MAILJE1 Received contains spammer id (mailje)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[103.214.113.54 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[103.214.113.54 listed in bl.score.senderscore.com]

0.3 LONGWORD BODY: Uses overlong words

0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.8 A_HREF_NOWHERE A link tag with empty href

0.0 T_HTML_TAG_BALANCE_CENTER Malformatted HTML

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.4 HREF_EMPTY_NORDNS Empty href + no rDNS

1.1 NORDNS_LOW_CONTRAST No rDNS + hidden text

Subject: {SPAM?} Save BIG on home window replacement



------=_Part_9006_1222595691.xIzCIL1dagUplN

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Please confirm your email address



Click here to confirm your email address



To receive HubSpot content on marketing, sales and/or service topics -Â please confirm your email address. You will be added to our email distribution list. You can unsubscribe at any time.

PCEYCLNT

The 90s had seen the apotheosis of the form, including Take That and Backstreet Boys, but those bands’ robust anthems and breezy dance-pop seemed to flame out in 2001 with the over-egged futurism of ‘NSync’s Pop, the first single from an album with the jaded title Celebrity.

Thanks,



The HubSpot Team



HubSpot, 25 1st St., Cambridge, MA 02141, USA, 888-482-7768



HubSpot, 2 Canal Park, , Cambridge, MA 02141, USA, 888-482-7768









Unsubscribe (https://hs-53.s.hubspotemail.net/hs/manage-preferences/unsubscribe-all?languagePreference=en&d=MnbTK9GK15VW3_Vshk4hHDBPW3T2_Lm2m40KfW3T0pbm43T3CZVmWFg14N_KfmN5fr_5C25rVhW8xS7DT8t0gJQVWmbwB8c2k7nMXk_7QbvZTwVMrv2h5s79sCW1P-vmr68hV1J32Kw2&v=3 )



Manage preferences (https://hs-53.s.hubspotemail.net/hs/manage-preferences/unsubscribe?languagePreference=en&d=MnbTK9GK15VW3_Vshk4hHDBPW3T2_Lm2m40KfW3T0pbm43T3CZVmWFg14N_KfmN5fr_5C25rVhW8xS7DT8t0gJQVWmbwB8c2k7nMXk_7QbvZTwVMrv2h5s79sCW1P-vmr68hV1J32Kw2&v=3 )

------=_Part_9006_1222595691.xIzCIL1dagUplN

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable





Bitte bestätigen Sie Ihre E-Mail-Adresse there | Confirm your e-mail address there

































SAVE ON REPLACING OR REPAIRING YOUR WINDOWS













Crime Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 21 Oct 2024 05:14:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t2qLu-0000000035q-3iZe

for dave@doctor.nl2k.ab.ca;

Mon, 21 Oct 2024 05:13:34 -0600

Resent-From: The Doctor

Resent-Date: Mon, 21 Oct 2024 05:13:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [110.50.52.201] (port=44484 helo=nmail.dccb-coop.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t2jUC-00000000D0L-0oHL

for doctor@doctor.nl2k.ab.ca;

Sun, 20 Oct 2024 21:53:49 -0600

Received: from localhost (localhost [127.0.0.1])

by nmail.dccb-coop.com (Postfix) with ESMTP id 693122E25118;

Mon, 21 Oct 2024 08:53:20 +0530 (IST)

X-Virus-Scanned: amavisd-new at dccb-coop.com

Received: from nmail.dccb-coop.com ([127.0.0.1])

by localhost (nmail.dccb-coop.com [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id y60bYoNtOefb; Mon, 21 Oct 2024 08:53:18 +0530 (IST)

Received: from localhost (localhost [127.0.0.1])

by nmail.dccb-coop.com (Postfix) with ESMTP id 64C7B2E24F74;

Mon, 21 Oct 2024 08:53:14 +0530 (IST)

X-Virus-Scanned: amavisd-new at dccb-coop.com

Received: from nmail.dccb-coop.com ([127.0.0.1])

by localhost (nmail.dccb-coop.com [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id BVgXd-MwCt5o; Mon, 21 Oct 2024 08:53:13 +0530 (IST)

Received: from [172.20.10.8] (unknown [197.211.58.104])

by nmail.dccb-coop.com (Postfix) with ESMTPSA id 260B52E250AC;

Mon, 21 Oct 2024 08:52:49 +0530 (IST)

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: Attention !!!

To: Recipients

From: test@dccb-coop.com

Date: Sun, 20 Oct 2024 20:22:37 -0700

Reply-To: atmgeniuslinks@gmail.com

Message-Id: <20241021032250.260B52E250AC@nmail.dccb-coop.com>

X-Spam_score: 21.2

X-Spam_score_int: 212

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Do not be Troubled anymore Genius Link Technology is

at your service. We are a professional Cyber Tech credit team with a large

ring around the globe infected with more than 3 million debit mal [...]



Content analysis details: (21.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

[197.211.58.104 listed in dnsbl.ahbl.org]

[197.211.58.104 listed in dnsbl.ahbl.org]

[197.211.58.104 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[197.211.58.104 listed in zen.spamhaus.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[197.211.58.104 listed in zen.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[197.211.58.104 listed in sbl-xbl.spamhaus.org]

[197.211.58.104 listed in sbl-xbl.spamhaus.org]

[197.211.58.104 listed in sbl-xbl.spamhaus.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[110.50.52.201 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[110.50.52.201 listed in bl.score.senderscore.com]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Attention !!!



Hello,

Do not be Troubled anymore Genius Link Technology is at your service. We ar=

e a professional Cyber Tech credit team with a large ring around the globe =

infected with more than 3 million debit malware and skimmers, we get a Dese=

rved blank ATM card and Program it up with a lot of money quickly and safel=

y, with which anyone can withdraw Cash either in dollars, euros or other cu=

rrency from any ATMs and can be used by any POS system.

Note: Our services are Illegal but trust me it's 100% safe to use!

Contact info Email: atmgeniuslinks@gmail.com / WhatsApp: +13142010242 / =

Telegram: https://t.me/spread_joyx



Our hacking services are as follows:



1. Western Union/ Money Gram Transfer Flips

2. PayPal Flips

3. Recovery Of Lost Funds on Crypto & Other Internet Scam

4. Credit Cards Loading {Any country}

5. Bank Account Loading {Any country}

6. Perfect Money Flips

7. Bank Transfer Flips

8. Bank Logs Available For Loaders & lots more.



All these are what we can get done Asap with the help of our Root Hack Tool=

s & Special Hack Tools with the latest technical hacking strategies which s=

urpass all other hackers. Also, we have all the new Money Adder Software wi=

th the latest features available for all services listed above.

E-mail: atmgeniuslinks@gmail.com

Docsign Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 21 Oct 2024 05:16:34 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t2qNN-0000000039g-0IwL

for dave@doctor.nl2k.ab.ca;

Mon, 21 Oct 2024 05:15:05 -0600

Resent-From: The Doctor

Resent-Date: Mon, 21 Oct 2024 05:15:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cloudhost-1913337.nl-west-1.nxcli.net ([185.145.13.85]:44716)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1t2lX8-00000000IRB-2MPy

for root@nk.ca;

Mon, 21 Oct 2024 00:05:04 -0600

Received: (qmail 30785 invoked by uid 108); 21 Oct 2024 06:02:54 +0000

Received: from unknown (HELO cloudhost-1913337.nl-west-1.nxcli.net) (127.0.0.1)

by cloudhost-1913337.nl-west-1.nxcli.net with SMTP; 21 Oct 2024 06:02:54 +0000

Received: from [127.0.0.1] ([192.144.32.105])

by cloudhost-1913337.nl-west-1.nxcli.net with ESMTPSA

id sp2YGY7uFWc0eAAA2oPNpA

(envelope-from )

for ; Mon, 21 Oct 2024 06:02:54 +0000

Content-Type: text/html; charset=utf-8

From: "DocuSign Online."

To: root@nk.ca

Subject: Review and sign

Message-ID: <2ecfb9f7-acf3-72cf-fcf8-113c0c1f2d4d@3cda08615a.nxcli.io>

Content-Transfer-Encoding: quoted-printable

Date: Mon, 21 Oct 2024 06:02:53 +0000

MIME-Version: 1.0

X-Spam_score: 24.7

X-Spam_score_int: 247

X-Spam_bar: ++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: AP sent you a document to review and sign REVIEW DOCUMENT





Content analysis details: (24.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[192.144.32.105 listed in will-spam-for-food.eu.org]

[192.144.32.105 listed in will-spam-for-food.eu.org]

[192.144.32.105 listed in will-spam-for-food.eu.org]

[192.144.32.105 listed in will-spam-for-food.eu.org]

[192.144.32.105 listed in will-spam-for-food.eu.org]

[192.144.32.105 listed in will-spam-for-food.eu.org]

[192.144.32.105 listed in will-spam-for-food.eu.org]

[192.144.32.105 listed in will-spam-for-food.eu.org]

[185.145.13.85 listed in will-spam-for-food.eu.org]

[185.145.13.85 listed in will-spam-for-food.eu.org]

[185.145.13.85 listed in will-spam-for-food.eu.org]

[185.145.13.85 listed in will-spam-for-food.eu.org]

[185.145.13.85 listed in will-spam-for-food.eu.org]

[185.145.13.85 listed in will-spam-for-food.eu.org]

[185.145.13.85 listed in will-spam-for-food.eu.org]

[185.145.13.85 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.145.13.85 listed in dnsbl.ahbl.org]

[185.145.13.85 listed in dnsbl.ahbl.org]

[185.145.13.85 listed in dnsbl.ahbl.org]

[185.145.13.85 listed in dnsbl.ahbl.org]

[192.144.32.105 listed in dnsbl.ahbl.org]

[192.144.32.105 listed in dnsbl.ahbl.org]

[192.144.32.105 listed in dnsbl.ahbl.org]

[192.144.32.105 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.145.13.85 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.145.13.85 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.145.13.85 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.145.13.85 listed in dnsbl.ahbl.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.3 LONGWORD BODY: Uses overlong words

15 GR_DOMAIN_SENDGR6 URI: Body contains known spammer URI (sendgr)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Review and sign




org/TR/xhtml1/DTD/xhtml1-strict.dtd">


class=3D"sg-campaigns" xmlns=3D"http://www.w3.org/1999/xhtml">




charset=3Dutf-8">


idth, initial-scale=3D1, minimum-scale=3D1, maximum-scale=3D1">




content=3D"IE=3DEdge">
















data-body-style=3D"font-size:14px; font-family:arial,helvetica,sans-serif; =

color:#000000; background-color:#FFFFFF;">




width=3D"100%" class=3D"wrapper" bgcolor=3D"#FFFFFF">










class=3D"outer" align=3D"center" cellpadding=3D"0" cellspacing=3D"0" =

border=3D"0">








width=3D"100%">


cellpadding=3D"0" cellspacing=3D"0" border=3D"0">

=












cellspacing=3D"0" border=3D"0" style=3D"width:100%; max-width:600px;" =

align=3D"center">








style=3D"padding:0px 0px 0px 0px; color:#000000; text-align:left;" =

bgcolor=3D"#FFFFFF" width=3D"100%" align=3D"left">
preheader preheader-hide" role=3D"module" data-type=3D"preheader" =

border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%" =

style=3D"display: none !important; mso-hide: all; visibility: hidden; =

opacity: 0; color: transparent; height: 0; width: 0;">












align=3D"center" width=3D"100%" role=3D"module" data-type=3D"columns" =

style=3D"padding:19px 0px 64px 0px;" bgcolor=3D"#1554aa" =

data-distribution=3D"1">












style=3D"width:580px; border-spacing:0; border-collapse:collapse; =

margin:0px 10px 0px 10px;" cellpadding=3D"0" cellspacing=3D"0" =

align=3D"left" border=3D"0" bgcolor=3D"" class=3D"column column-0">












rder-spacing:0;">
data-type=3D"image" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" =

width=3D"100%" style=3D"table-layout: fixed;" data-muid=3D"ea63fe41-4508-41=

e0-b538-970e2b727f73">












style=3D"font-size:6px; line-height:10px; padding:0px 0px 0px 0px;" =

valign=3D"top" align=3D"center">


border=3D"0" style=3D"display:block; color:#000000; text-decoration:none; =

font-family:Helvetica, arial, sans-serif; font-size:16px; max-width:12% !=

important; width:12%; height:auto !important;" width=3D"70" alt=3D"" =

data-proportionally-constrained=3D"true" data-responsive=3D"true" =

src=3D"http://cdn.mcauto-images-production.sendgrid.=

net/0e35344d99f92e76/b99d2622-efdc-41ad-a536-58c1ac027df3/150x150.png">


role=3D"module" data-type=3D"text" border=3D"0" cellpadding=3D"0" =

cellspacing=3D"0" width=3D"100%" style=3D"table-layout: fixed;" =

data-muid=3D"558fbad1-1442-44a8-b1fe-1ae17bec3159" data-mc-module-version=

=3D"2019-10-22">












0px 18px 0px; line-height:22px; text-align:inherit;" height=3D"100%" =

valign=3D"top" bgcolor=3D"" role=3D"module-content">

style=3D"font-family: inherit; text-align: center">
#ffffff">AP sent you a document to review and sign
<=

/div>

cellpadding=3D"0" cellspacing=3D"0" class=3D"module" =

data-role=3D"module-button" data-type=3D"button" role=3D"module" =

style=3D"table-layout:fixed;" width=3D"100%" data-muid=3D"8cf5e7af-a7cd-436=

3-80c0-a040f3878441">












align=3D"center" bgcolor=3D"" class=3D"outer-td" style=3D"padding:0px 0px =

0px 0px;">


cellspacing=3D"0" class=3D"wrapper-mobile" style=3D"text-align:center;">












align=3D"center" bgcolor=3D"#e9b917" class=3D"inner-td" =

style=3D"border-radius:6px; font-size:16px; text-align:center; =

background-color:inherit;">


mybluehost.me/general/helped.html#root@nk.ca" style=3D"background-color:#e9=

b917; border:1px solid #e9b917; border-color:#e9b917; border-radius:1px; =

border-width:1px; color:#000000; display:inline-block; font-size:14px; =

font-weight:bold; letter-spacing:0px; line-height:normal; padding:12px 18px=

12px 18px; text-align:center; text-decoration:none; border-style:solid;" =

target=3D"_blank">REVIEW DOCUMENT





border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%" =

style=3D"table-layout: fixed;" data-muid=3D"b42d8c9b-cceb-4246-90a3-f2e611c=

0dbe8">












0px;" role=3D"module-content" bgcolor=3D"">


cellspacing=3D"0" align=3D"center" width=3D"100%" role=3D"module" =

data-type=3D"columns" style=3D"padding:3px 0px 0px 0px;" =

bgcolor=3D"#f0f0f0" data-distribution=3D"1">












valign=3D"top">
border-collapse:collapse; margin:0px 10px 0px 10px;" cellpadding=3D"0" =

cellspacing=3D"0" align=3D"left" border=3D"0" bgcolor=3D"" class=3D"column =

column-0">












style=3D"padding:0px;margin:0px;border-spacing:0;">
role=3D"module" data-type=3D"text" border=3D"0" cellpadding=3D"0" =

cellspacing=3D"0" width=3D"100%" style=3D"table-layout: fixed;" =

data-muid=3D"ff149369-f512-48b9-b3c2-700a95c34d3d" data-mc-module-version=

=3D"2019-10-22">












0px 18px 0px; line-height:21px; text-align:inherit;" height=3D"100%" =

valign=3D"top" bgcolor=3D"" role=3D"module-content">

style=3D"font-family: inherit; text-align: inherit">
style=3D"font-size: 12px; color: #626263">Do Not Share This =

Email



#626263">This mail contains a secure connect to DocuSign. If you don't mind=

don't share this mail, interface, or get to code with others

style=3D"font-size: 12px; color: #626263">


Alternate Signing Method



12px; color: #626263">Visit DocuSign.com, press 'Access Documents', and =

enter the security code:


ED18C20802414EE6A9494AEA241F72213

style=3D"font-size: 12px; color: #626263">


About DocuSign


Sign =

archives electronically in fair minutes. It's secure, secure, and =

legitimately official. Whether you're in an office, at domestic, on-the-go =

-- or indeed over the globe -- DocuSign gives a proficient trusted =

arrangement for Computerized Exchange Administration=E2=84=A2.

style=3D"font-size: 12px; color: #626263">


Questions about the Document?



12px; color: #626263">In case you wish to alter the report or have =

questions almost the subtle elements within the report, if you don't mind =

reach out to the sender by emailing them straightforwardly.

style=3D"font-size: 12px; color: #292929">





Stop receiving this email






style=3D"font-size: 12px; color: #32a9ea">Report this email

style=3D"font-size: 12px; color: #292929"> or read more about

style=3D"font-size: 12px; color: #32a9ea">Declining to sign

style=3D"font-size: 12px; color: #292929"> and Managing notifications.





If you are having trouble signing the document, please visit the Help =

with
Signing =

page
on =

our 



inherit">Support Center.=



=

















Crime Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 21 Oct 2024 05:14:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t2qLq-0000000035g-0Pyv

for dave@doctor.nl2k.ab.ca;

Mon, 21 Oct 2024 05:13:30 -0600

Resent-From: The Doctor

Resent-Date: Mon, 21 Oct 2024 05:13:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [110.50.52.201] (port=44573 helo=nmail.dccb-coop.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t2jUL-00000000D0W-0jnr

for doctor@nl2k.ab.ca;

Sun, 20 Oct 2024 21:53:53 -0600

Received: from localhost (localhost [127.0.0.1])

by nmail.dccb-coop.com (Postfix) with ESMTP id D93CC2E25125;

Mon, 21 Oct 2024 08:53:22 +0530 (IST)

X-Virus-Scanned: amavisd-new at dccb-coop.com

Received: from nmail.dccb-coop.com ([127.0.0.1])

by localhost (nmail.dccb-coop.com [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id Isx_KeZmBmDu; Mon, 21 Oct 2024 08:53:21 +0530 (IST)

Received: from localhost (localhost [127.0.0.1])

by nmail.dccb-coop.com (Postfix) with ESMTP id 0E6FA2E250CF;

Mon, 21 Oct 2024 08:53:12 +0530 (IST)

X-Virus-Scanned: amavisd-new at dccb-coop.com

Received: from nmail.dccb-coop.com ([127.0.0.1])

by localhost (nmail.dccb-coop.com [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id q7aN4nZpRUnr; Mon, 21 Oct 2024 08:53:11 +0530 (IST)

Received: from [172.20.10.8] (unknown [197.211.58.104])

by nmail.dccb-coop.com (Postfix) with ESMTPSA id 4E5192E250BC;

Mon, 21 Oct 2024 08:52:50 +0530 (IST)

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: Attention !!!

To: Recipients

From: test@dccb-coop.com

Date: Sun, 20 Oct 2024 20:22:37 -0700

Reply-To: atmgeniuslinks@gmail.com

Message-Id: <20241021032250.4E5192E250BC@nmail.dccb-coop.com>

X-Spam_score: 21.2

X-Spam_score_int: 212

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Do not be Troubled anymore Genius Link Technology is

at your service. We are a professional Cyber Tech credit team with a large

ring around the globe infected with more than 3 million debit mal [...]



Content analysis details: (21.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[110.50.52.201 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[110.50.52.201 listed in bl.score.senderscore.com]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[197.211.58.104 listed in zen.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[197.211.58.104 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[197.211.58.104 listed in sbl-xbl.spamhaus.org]

[197.211.58.104 listed in sbl-xbl.spamhaus.org]

[197.211.58.104 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

[197.211.58.104 listed in dnsbl.ahbl.org]

[197.211.58.104 listed in dnsbl.ahbl.org]

[197.211.58.104 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} Attention !!!



Hello,

Do not be Troubled anymore Genius Link Technology is at your service. We ar=

e a professional Cyber Tech credit team with a large ring around the globe =

infected with more than 3 million debit malware and skimmers, we get a Dese=

rved blank ATM card and Program it up with a lot of money quickly and safel=

y, with which anyone can withdraw Cash either in dollars, euros or other cu=

rrency from any ATMs and can be used by any POS system.

Note: Our services are Illegal but trust me it's 100% safe to use!

Contact info Email: atmgeniuslinks@gmail.com / WhatsApp: +13142010242 / =

Telegram: https://t.me/spread_joyx



Our hacking services are as follows:



1. Western Union/ Money Gram Transfer Flips

2. PayPal Flips

3. Recovery Of Lost Funds on Crypto & Other Internet Scam

4. Credit Cards Loading {Any country}

5. Bank Account Loading {Any country}

6. Perfect Money Flips

7. Bank Transfer Flips

8. Bank Logs Available For Loaders & lots more.



All these are what we can get done Asap with the help of our Root Hack Tool=

s & Special Hack Tools with the latest technical hacking strategies which s=

urpass all other hackers. Also, we have all the new Money Adder Software wi=

th the latest features available for all services listed above.

E-mail: atmgeniuslinks@gmail.com

Crime Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 21 Oct 2024 05:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t2qLh-0000000035V-1tuK

for dave@doctor.nl2k.ab.ca;

Mon, 21 Oct 2024 05:13:21 -0600

Resent-From: The Doctor

Resent-Date: Mon, 21 Oct 2024 05:13:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [110.50.52.201] (port=34262 helo=nmail.dccb-coop.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t2jJI-00000000CEo-0Yxi

for doctor@doctor.nl2k.ab.ca;

Sun, 20 Oct 2024 21:42:41 -0600

Received: from localhost (localhost [127.0.0.1])

by nmail.dccb-coop.com (Postfix) with ESMTP id A11AA2E24BC0;

Mon, 21 Oct 2024 08:46:06 +0530 (IST)

X-Virus-Scanned: amavisd-new at dccb-coop.com

Received: from nmail.dccb-coop.com ([127.0.0.1])

by localhost (nmail.dccb-coop.com [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id BWMSk5zAIlqi; Mon, 21 Oct 2024 08:46:06 +0530 (IST)

Received: from localhost (localhost [127.0.0.1])

by nmail.dccb-coop.com (Postfix) with ESMTP id 059982E24B6B;

Mon, 21 Oct 2024 08:45:54 +0530 (IST)

X-Virus-Scanned: amavisd-new at dccb-coop.com

Received: from nmail.dccb-coop.com ([127.0.0.1])

by localhost (nmail.dccb-coop.com [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id uTlZuRzmLc2q; Mon, 21 Oct 2024 08:45:54 +0530 (IST)

Received: from [172.20.10.8] (unknown [197.211.58.104])

by nmail.dccb-coop.com (Postfix) with ESMTPSA id 19BAB2E23DB8;

Mon, 21 Oct 2024 08:45:36 +0530 (IST)

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: Attention !!!

To: Recipients

From: test@dccb-coop.com

Date: Sun, 20 Oct 2024 20:15:27 -0700

Reply-To: atmgeniuslinks@gmail.com

Message-Id: <20241021031537.19BAB2E23DB8@nmail.dccb-coop.com>

X-Spam_score: 21.2

X-Spam_score_int: 212

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Do not be Troubled anymore Genius Link Technology is

at your service. We are a professional Cyber Tech credit team with a large

ring around the globe infected with more than 3 million debit mal [...]



Content analysis details: (21.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

[197.211.58.104 listed in dnsbl.ahbl.org]

[197.211.58.104 listed in dnsbl.ahbl.org]

[197.211.58.104 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[197.211.58.104 listed in zen.spamhaus.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[197.211.58.104 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[197.211.58.104 listed in sbl-xbl.spamhaus.org]

[197.211.58.104 listed in sbl-xbl.spamhaus.org]

[197.211.58.104 listed in sbl-xbl.spamhaus.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[110.50.52.201 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[110.50.52.201 listed in bl.score.senderscore.com]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Attention !!!



Hello,

Do not be Troubled anymore Genius Link Technology is at your service. We ar=

e a professional Cyber Tech credit team with a large ring around the globe =

infected with more than 3 million debit malware and skimmers, we get a Dese=

rved blank ATM card and Program it up with a lot of money quickly and safel=

y, with which anyone can withdraw Cash either in dollars, euros or other cu=

rrency from any ATMs and can be used by any POS system.

Note: Our services are Illegal but trust me it's 100% safe to use!

Contact info Email: atmgeniuslinks@gmail.com / WhatsApp: +13142010242 / =

Telegram: https://t.me/spread_joyx



Our hacking services are as follows:



1. Western Union/ Money Gram Transfer Flips

2. PayPal Flips

3. Recovery Of Lost Funds on Crypto & Other Internet Scam

4. Credit Cards Loading {Any country}

5. Bank Account Loading {Any country}

6. Perfect Money Flips

7. Bank Transfer Flips

8. Bank Logs Available For Loaders & lots more.



All these are what we can get done Asap with the help of our Root Hack Tool=

s & Special Hack Tools with the latest technical hacking strategies which s=

urpass all other hackers. Also, we have all the new Money Adder Software wi=

th the latest features available for all services listed above.

E-mail: atmgeniuslinks@gmail.com

Crime Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 21 Oct 2024 05:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t2qLb-0000000035K-0jBo

for dave@doctor.nl2k.ab.ca;

Mon, 21 Oct 2024 05:13:15 -0600

Resent-From: The Doctor

Resent-Date: Mon, 21 Oct 2024 05:13:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [110.50.52.201] (port=50961 helo=nmail.dccb-coop.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t2j5Q-00000000BDp-3pAE

for doctor@doctor.nl2k.ab.ca;

Sun, 20 Oct 2024 21:28:16 -0600

Received: from localhost (localhost [127.0.0.1])

by nmail.dccb-coop.com (Postfix) with ESMTP id 10B2B2E245CA;

Mon, 21 Oct 2024 08:38:32 +0530 (IST)

X-Virus-Scanned: amavisd-new at dccb-coop.com

Received: from nmail.dccb-coop.com ([127.0.0.1])

by localhost (nmail.dccb-coop.com [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id MSPMpxyqnTwU; Mon, 21 Oct 2024 08:38:29 +0530 (IST)

Received: from localhost (localhost [127.0.0.1])

by nmail.dccb-coop.com (Postfix) with ESMTP id DD5A32E245B1;

Mon, 21 Oct 2024 08:38:21 +0530 (IST)

X-Virus-Scanned: amavisd-new at dccb-coop.com

Received: from nmail.dccb-coop.com ([127.0.0.1])

by localhost (nmail.dccb-coop.com [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id ReFv6uun3J2Q; Mon, 21 Oct 2024 08:38:21 +0530 (IST)

Received: from [172.20.10.8] (unknown [197.211.58.104])

by nmail.dccb-coop.com (Postfix) with ESMTPSA id 0FC0E2E244E4;

Mon, 21 Oct 2024 08:38:02 +0530 (IST)

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: Attention !!!

To: Recipients

From: test@dccb-coop.com

Date: Sun, 20 Oct 2024 20:07:52 -0700

Reply-To: atmgeniuslinks@gmail.com

Message-Id: <20241021030803.0FC0E2E244E4@nmail.dccb-coop.com>

X-Spam_score: 21.2

X-Spam_score_int: 212

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Do not be Troubled anymore Genius Link Technology is

at your service. We are a professional Cyber Tech credit team with a large

ring around the globe infected with more than 3 million debit mal [...]



Content analysis details: (21.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

[197.211.58.104 listed in dnsbl.ahbl.org]

[197.211.58.104 listed in dnsbl.ahbl.org]

[197.211.58.104 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[197.211.58.104 listed in zen.spamhaus.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[197.211.58.104 listed in zen.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[197.211.58.104 listed in sbl-xbl.spamhaus.org]

[197.211.58.104 listed in sbl-xbl.spamhaus.org]

[197.211.58.104 listed in sbl-xbl.spamhaus.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[110.50.52.201 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[110.50.52.201 listed in bl.score.senderscore.com]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Attention !!!



Hello,

Do not be Troubled anymore Genius Link Technology is at your service. We ar=

e a professional Cyber Tech credit team with a large ring around the globe =

infected with more than 3 million debit malware and skimmers, we get a Dese=

rved blank ATM card and Program it up with a lot of money quickly and safel=

y, with which anyone can withdraw Cash either in dollars, euros or other cu=

rrency from any ATMs and can be used by any POS system.

Note: Our services are Illegal but trust me it's 100% safe to use!

Contact info Email: atmgeniuslinks@gmail.com / WhatsApp: +13142010242 / =

Telegram: https://t.me/spread_joyx



Our hacking services are as follows:



1. Western Union/ Money Gram Transfer Flips

2. PayPal Flips

3. Recovery Of Lost Funds on Crypto & Other Internet Scam

4. Credit Cards Loading {Any country}

5. Bank Account Loading {Any country}

6. Perfect Money Flips

7. Bank Transfer Flips

8. Bank Logs Available For Loaders & lots more.



All these are what we can get done Asap with the help of our Root Hack Tool=

s & Special Hack Tools with the latest technical hacking strategies which s=

urpass all other hackers. Also, we have all the new Money Adder Software wi=

th the latest features available for all services listed above.

E-mail: atmgeniuslinks@gmail.com

Crime Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 21 Oct 2024 05:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t2qLR-00000000356-25e1

for dave@doctor.nl2k.ab.ca;

Mon, 21 Oct 2024 05:13:05 -0600

Resent-From: The Doctor

Resent-Date: Mon, 21 Oct 2024 05:13:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [110.50.52.201] (port=36208 helo=nmail.dccb-coop.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t2ip8-000000006Uw-2i4u

for doctor@nl2k.ab.ca;

Sun, 20 Oct 2024 21:11:20 -0600

Received: from localhost (localhost [127.0.0.1])

by nmail.dccb-coop.com (Postfix) with ESMTP id C52092E23ED6;

Mon, 21 Oct 2024 08:30:08 +0530 (IST)

X-Virus-Scanned: amavisd-new at dccb-coop.com

Received: from nmail.dccb-coop.com ([127.0.0.1])

by localhost (nmail.dccb-coop.com [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id svOgagto3VI3; Mon, 21 Oct 2024 08:30:06 +0530 (IST)

Received: from localhost (localhost [127.0.0.1])

by nmail.dccb-coop.com (Postfix) with ESMTP id E38522E23E27;

Mon, 21 Oct 2024 08:29:43 +0530 (IST)

X-Virus-Scanned: amavisd-new at dccb-coop.com

Received: from nmail.dccb-coop.com ([127.0.0.1])

by localhost (nmail.dccb-coop.com [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id udWjfvZ2oA07; Mon, 21 Oct 2024 08:29:43 +0530 (IST)

Received: from [172.20.10.8] (unknown [197.211.58.104])

by nmail.dccb-coop.com (Postfix) with ESMTPSA id 4282B2E229DB;

Mon, 21 Oct 2024 08:29:20 +0530 (IST)

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: Attention !!!

To: Recipients

From: test@dccb-coop.com

Date: Sun, 20 Oct 2024 19:59:08 -0700

Reply-To: atmgeniuslinks@gmail.com

Message-Id: <20241021025921.4282B2E229DB@nmail.dccb-coop.com>

X-Spam_score: 21.2

X-Spam_score_int: 212

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Do not be Troubled anymore Genius Link Technology is

at your service. We are a professional Cyber Tech credit team with a large

ring around the globe infected with more than 3 million debit mal [...]



Content analysis details: (21.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

[197.211.58.104 listed in dnsbl.ahbl.org]

[197.211.58.104 listed in dnsbl.ahbl.org]

[197.211.58.104 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[197.211.58.104 listed in zen.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[197.211.58.104 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[197.211.58.104 listed in sbl-xbl.spamhaus.org]

[197.211.58.104 listed in sbl-xbl.spamhaus.org]

[197.211.58.104 listed in sbl-xbl.spamhaus.org]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[110.50.52.201 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[110.50.52.201 listed in bl.score.senderscore.com]

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Attention !!!



Hello,

Do not be Troubled anymore Genius Link Technology is at your service. We ar=

e a professional Cyber Tech credit team with a large ring around the globe =

infected with more than 3 million debit malware and skimmers, we get a Dese=

rved blank ATM card and Program it up with a lot of money quickly and safel=

y, with which anyone can withdraw Cash either in dollars, euros or other cu=

rrency from any ATMs and can be used by any POS system.

Note: Our services are Illegal but trust me it's 100% safe to use!

Contact info Email: atmgeniuslinks@gmail.com / WhatsApp: +13142010242 / =

Telegram: https://t.me/spread_joyx



Our hacking services are as follows:



1. Western Union/ Money Gram Transfer Flips

2. PayPal Flips

3. Recovery Of Lost Funds on Crypto & Other Internet Scam

4. Credit Cards Loading {Any country}

5. Bank Account Loading {Any country}

6. Perfect Money Flips

7. Bank Transfer Flips

8. Bank Logs Available For Loaders & lots more.



All these are what we can get done Asap with the help of our Root Hack Tool=

s & Special Hack Tools with the latest technical hacking strategies which s=

urpass all other hackers. Also, we have all the new Money Adder Software wi=

th the latest features available for all services listed above.

E-mail: atmgeniuslinks@gmail.com

Crime Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 21 Oct 2024 05:13:02 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t2qLC-0000000034K-3O8a

for dave@doctor.nl2k.ab.ca;

Mon, 21 Oct 2024 05:12:50 -0600

Resent-From: The Doctor

Resent-Date: Mon, 21 Oct 2024 05:12:50 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [110.50.52.201] (port=36191 helo=nmail.dccb-coop.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t2ip8-000000006UI-3k0C;

Sun, 20 Oct 2024 21:11:20 -0600

Received: from localhost (localhost [127.0.0.1])

by nmail.dccb-coop.com (Postfix) with ESMTP id C52092E23ED6;

Mon, 21 Oct 2024 08:30:08 +0530 (IST)

X-Virus-Scanned: amavisd-new at dccb-coop.com

Received: from nmail.dccb-coop.com ([127.0.0.1])

by localhost (nmail.dccb-coop.com [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id svOgagto3VI3; Mon, 21 Oct 2024 08:30:06 +0530 (IST)

Received: from localhost (localhost [127.0.0.1])

by nmail.dccb-coop.com (Postfix) with ESMTP id E38522E23E27;

Mon, 21 Oct 2024 08:29:43 +0530 (IST)

X-Virus-Scanned: amavisd-new at dccb-coop.com

Received: from nmail.dccb-coop.com ([127.0.0.1])

by localhost (nmail.dccb-coop.com [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id udWjfvZ2oA07; Mon, 21 Oct 2024 08:29:43 +0530 (IST)

Received: from [172.20.10.8] (unknown [197.211.58.104])

by nmail.dccb-coop.com (Postfix) with ESMTPSA id 4282B2E229DB;

Mon, 21 Oct 2024 08:29:20 +0530 (IST)

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: Attention !!!

To: Recipients

From: test@dccb-coop.com

Date: Sun, 20 Oct 2024 19:59:08 -0700

Reply-To: atmgeniuslinks@gmail.com

Message-Id: <20241021025921.4282B2E229DB@nmail.dccb-coop.com>

X-Spam_score: 21.2

X-Spam_score_int: 212

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Do not be Troubled anymore Genius Link Technology is

at your service. We are a professional Cyber Tech credit team with a large

ring around the globe infected with more than 3 million debit mal [...]



Content analysis details: (21.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[110.50.52.201 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[110.50.52.201 listed in bl.score.senderscore.com]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[197.211.58.104 listed in zen.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[197.211.58.104 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[197.211.58.104 listed in sbl-xbl.spamhaus.org]

[197.211.58.104 listed in sbl-xbl.spamhaus.org]

[197.211.58.104 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

[197.211.58.104 listed in dnsbl.ahbl.org]

[197.211.58.104 listed in dnsbl.ahbl.org]

[197.211.58.104 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Attention !!!



Hello,

Do not be Troubled anymore Genius Link Technology is at your service. We ar=

e a professional Cyber Tech credit team with a large ring around the globe =

infected with more than 3 million debit malware and skimmers, we get a Dese=

rved blank ATM card and Program it up with a lot of money quickly and safel=

y, with which anyone can withdraw Cash either in dollars, euros or other cu=

rrency from any ATMs and can be used by any POS system.

Note: Our services are Illegal but trust me it's 100% safe to use!

Contact info Email: atmgeniuslinks@gmail.com / WhatsApp: +13142010242 / =

Telegram: https://t.me/spread_joyx



Our hacking services are as follows:



1. Western Union/ Money Gram Transfer Flips

2. PayPal Flips

3. Recovery Of Lost Funds on Crypto & Other Internet Scam

4. Credit Cards Loading {Any country}

5. Bank Account Loading {Any country}

6. Perfect Money Flips

7. Bank Transfer Flips

8. Bank Logs Available For Loaders & lots more.



All these are what we can get done Asap with the help of our Root Hack Tool=

s & Special Hack Tools with the latest technical hacking strategies which s=

urpass all other hackers. Also, we have all the new Money Adder Software wi=

th the latest features available for all services listed above.

E-mail: atmgeniuslinks@gmail.com

Crime Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 20 Oct 2024 21:12:00 -0600

Received: from [110.50.52.201] (port=36191 helo=nmail.dccb-coop.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t2ip8-000000006UI-3k0C;

Sun, 20 Oct 2024 21:11:20 -0600

Received: from localhost (localhost [127.0.0.1])

by nmail.dccb-coop.com (Postfix) with ESMTP id C52092E23ED6;

Mon, 21 Oct 2024 08:30:08 +0530 (IST)

X-Virus-Scanned: amavisd-new at dccb-coop.com

Received: from nmail.dccb-coop.com ([127.0.0.1])

by localhost (nmail.dccb-coop.com [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id svOgagto3VI3; Mon, 21 Oct 2024 08:30:06 +0530 (IST)

Received: from localhost (localhost [127.0.0.1])

by nmail.dccb-coop.com (Postfix) with ESMTP id E38522E23E27;

Mon, 21 Oct 2024 08:29:43 +0530 (IST)

X-Virus-Scanned: amavisd-new at dccb-coop.com

Received: from nmail.dccb-coop.com ([127.0.0.1])

by localhost (nmail.dccb-coop.com [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id udWjfvZ2oA07; Mon, 21 Oct 2024 08:29:43 +0530 (IST)

Received: from [172.20.10.8] (unknown [197.211.58.104])

by nmail.dccb-coop.com (Postfix) with ESMTPSA id 4282B2E229DB;

Mon, 21 Oct 2024 08:29:20 +0530 (IST)

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: Attention !!!

To: Recipients

From: test@dccb-coop.com

Date: Sun, 20 Oct 2024 19:59:08 -0700

Reply-To: atmgeniuslinks@gmail.com

Message-Id: <20241021025921.4282B2E229DB@nmail.dccb-coop.com>

X-Spam_score: 21.2

X-Spam_score_int: 212

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Do not be Troubled anymore Genius Link Technology is

at your service. We are a professional Cyber Tech credit team with a large

ring around the globe infected with more than 3 million debit mal [...]



Content analysis details: (21.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[110.50.52.201 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[110.50.52.201 listed in bl.score.senderscore.com]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[197.211.58.104 listed in zen.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[197.211.58.104 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[197.211.58.104 listed in sbl-xbl.spamhaus.org]

[197.211.58.104 listed in sbl-xbl.spamhaus.org]

[197.211.58.104 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

[197.211.58.104 listed in dnsbl.ahbl.org]

[197.211.58.104 listed in dnsbl.ahbl.org]

[197.211.58.104 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[197.211.58.104 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Attention !!!



Hello,

Do not be Troubled anymore Genius Link Technology is at your service. We ar=

e a professional Cyber Tech credit team with a large ring around the globe =

infected with more than 3 million debit malware and skimmers, we get a Dese=

rved blank ATM card and Program it up with a lot of money quickly and safel=

y, with which anyone can withdraw Cash either in dollars, euros or other cu=

rrency from any ATMs and can be used by any POS system.

Note: Our services are Illegal but trust me it's 100% safe to use!

Contact info Email: atmgeniuslinks@gmail.com / WhatsApp: +13142010242 / =

Telegram: https://t.me/spread_joyx



Our hacking services are as follows:



1. Western Union/ Money Gram Transfer Flips

2. PayPal Flips

3. Recovery Of Lost Funds on Crypto & Other Internet Scam

4. Credit Cards Loading {Any country}

5. Bank Account Loading {Any country}

6. Perfect Money Flips

7. Bank Transfer Flips

8. Bank Logs Available For Loaders & lots more.



All these are what we can get done Asap with the help of our Root Hack Tool=

s & Special Hack Tools with the latest technical hacking strategies which s=

urpass all other hackers. Also, we have all the new Money Adder Software wi=

th the latest features available for all services listed above.

E-mail: atmgeniuslinks@gmail.com

Crime Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 20 Oct 2024 21:08:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t2ilD-000000005ZM-0S9S

for dave@doctor.nl2k.ab.ca;

Sun, 20 Oct 2024 21:07:11 -0600

Resent-From: The Doctor

Resent-Date: Sun, 20 Oct 2024 21:07:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [110.50.52.201] (port=57377 helo=nmail.dccb-coop.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t2ihi-000000004bh-48VP

for doctor@doctor.nl2k.ab.ca;

Sun, 20 Oct 2024 21:03:54 -0600

Received: from localhost (localhost [127.0.0.1])

by nmail.dccb-coop.com (Postfix) with ESMTP id 6A5A12E226F6;

Mon, 21 Oct 2024 08:26:26 +0530 (IST)

X-Virus-Scanned: amavisd-new at dccb-coop.com

Received: from nmail.dccb-coop.com ([127.0.0.1])

by localhost (nmail.dccb-coop.com [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id 9rOLbXSl1iwr; Mon, 21 Oct 2024 08:26:25 +0530 (IST)

Received: from localhost (localhost [127.0.0.1])

by nmail.dccb-coop.com (Postfix) with ESMTP id DD3B32E22342;

Mon, 21 Oct 2024 08:26:08 +0530 (IST)

X-Virus-Scanned: amavisd-new at dccb-coop.com

Received: from nmail.dccb-coop.com ([127.0.0.1])

by localhost (nmail.dccb-coop.com [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id F-yA400wLwnP; Mon, 21 Oct 2024 08:26:08 +0530 (IST)

Received: from [172.20.10.8] (unknown [197.211.58.104])

by nmail.dccb-coop.com (Postfix) with ESMTPSA id EA9762E22584;

Mon, 21 Oct 2024 08:25:37 +0530 (IST)

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: Attention !!!

To: Recipients

From: test@dccb-coop.com

Date: Sun, 20 Oct 2024 19:55:26 -0700

Reply-To: atmgeniuslinks@gmail.com

Message-Id: <20241021025537.EA9762E22584@nmail.dccb-coop.com>

X-Spam_score: 21.2

X-Spam_score_int: 212

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Do not be Troubled anymore Genius Link Technology is

at your service. We are a professional Cyber Tech credit team with a large

ring around the globe infected with more than 3 million debit mal [...]



Content analysis details: (21.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[197.211.58.104 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

[110.50.52.201 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[110.50.52.201 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

[110.50.52.201 listed in dnsbl.ahbl.org]

[197.211.58.104 listed in dnsbl.ahbl.org]

[197.211.58.104 listed in dnsbl.ahbl.org]

[197.211.58.104 listed in dnsbl.ahbl.org]

[197.211.58.104 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[110.50.52.201 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[110.50.52.201 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[110.50.52.201 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[110.50.52.201 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[197.211.58.104 listed in sbl-xbl.spamhaus.org]

[197.211.58.104 listed in sbl-xbl.spamhaus.org]

[197.211.58.104 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[197.211.58.104 listed in zen.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[197.211.58.104 listed in zen.spamhaus.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[110.50.52.201 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[110.50.52.201 listed in bl.score.senderscore.com]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Attention !!!



Hello,

Do not be Troubled anymore Genius Link Technology is at your service. We ar=

e a professional Cyber Tech credit team with a large ring around the globe =

infected with more than 3 million debit malware and skimmers, we get a Dese=

rved blank ATM card and Program it up with a lot of money quickly and safel=

y, with which anyone can withdraw Cash either in dollars, euros or other cu=

rrency from any ATMs and can be used by any POS system.

Note: Our services are Illegal but trust me it's 100% safe to use!

Contact info Email: atmgeniuslinks@gmail.com / WhatsApp: +13142010242 / =

Telegram: https://t.me/spread_joyx



Our hacking services are as follows:



1. Western Union/ Money Gram Transfer Flips

2. PayPal Flips

3. Recovery Of Lost Funds on Crypto & Other Internet Scam

4. Credit Cards Loading {Any country}

5. Bank Account Loading {Any country}

6. Perfect Money Flips

7. Bank Transfer Flips

8. Bank Logs Available For Loaders & lots more.



All these are what we can get done Asap with the help of our Root Hack Tool=

s & Special Hack Tools with the latest technical hacking strategies which s=

urpass all other hackers. Also, we have all the new Money Adder Software wi=

th the latest features available for all services listed above.

E-mail: atmgeniuslinks@gmail.com

Blue Shield Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 20 Oct 2024 17:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t2fQM-00000000P9N-3jWl

for dave@doctor.nl2k.ab.ca;

Sun, 20 Oct 2024 17:33:26 -0600

Resent-From: The Doctor

Resent-Date: Sun, 20 Oct 2024 17:33:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.214.113.34] (port=46303 helo=simplifyingalpha.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1t2fPX-00000000P3D-1zDL

for doctor@doctor.nl2k.ab.ca;

Sun, 20 Oct 2024 17:32:53 -0600

Received: from o167.p9.mailjet.com (o167.p9.mailjet.com. [87.253.234.167])

by mx.google.com with UTF8SMTPS id 5b1f17b1804b1-43158c87427si6869925e9.220.2024.10.17.01.51.36

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Thu, 17 Oct 2024 01:51:36 -0700 (PDT)

Received-SPF: pass (google.com: domain of 937efadf.avqaaflolsaaaaaaaaaaasbhtjsaaaaa7fgaaaaaab0wjgbnenay@a1912974.bnc3.mailjet.com designates 87.253.234.167 as permitted sender) client-ip=87.253.234.167;

Authentication-Results: mx.google.com;

dkim=pass header.i=@scaleway.net header.s=mailjet header.b=UUJAiADP;

dkim=pass header.i=@bnc3.mailjet.com header.s=mailjet2 header.b=FUlW+C2n;

spf=pass (google.com: domain of 937efadf.avqaaflolsaaaaaaaaaaasbhtjsaaaaa7fgaaaaaab0wjgbnenay@a1912974.bnc3.mailjet.com designates 87.253.234.167 as permitted sender) smtp.mailfrom=937efadf.AVQAAFLOlSAAAAAAAAAAASbHtjsAAAAA7FgAAAAAAB0wjgBnENAY@a1912974.bnc3.mailjet.com;

dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=scaleway.net

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; q=dns/txt;

d=scaleway.net; i=support@scaleway.net; s=mailjet; x=1729162296;

h=message-id:mime-version:from:from:to:to:subject:subject:date:date:list-unsubscribe-post:list-unsubscribe:

feedback-id:x-csa-complaints:x-mj-mid:x-mj-smtpguid:x-report-abuse-to:

content-type;

bh=8Ufod+QLF9UrFf617W+Qgl9D1llNL57OyBxTOGNHzK4=;

b=UUJAiADPmNVXreTVIVWkgsLyOhpf/yDjvZCDtYxxmlnSvQfqTgCvUEGZF U873n2A5wHfV/YOLSrkDbQYtkxZARVAQx8i3Ie8BBqXtUaI2VeRluikBZaxc 3h+ZQB+VknuHZ2zxxtZjHznm4q1xf8xiStwazdXRlqQshPEJSvBIWPzWaOzf cWt/d4Tm8eoBplZzA1Jv8bxLbaO7bzW1YEV8WZYLhP2aezbvUID1rDC7vT3A HhMluNeagOAGVu7osh+NBOshnYejSFQ+BGmJ6Ji3osQ2mvWYh+mh6mKWaV6E pL08rgjr+fXIWHou8CCEDt80RETI8NddBZPKNNl+nSGWA==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; q=dns/txt;

d=bnc3.mailjet.com; s=mailjet2; x=1729162296;

h=message-id:mime-version:from:from:to:to:subject:subject:date:date:list-unsubscribe-post:list-unsubscribe:

feedback-id:x-csa-complaints:x-mj-mid:x-mj-smtpguid:x-report-abuse-to:

content-type;

bh=8Ufod+QLF9UrFf617W+Qgl9D1llNL57OyBxTOGNHzK4=;

b=FUlW+C2nFlyu9dtJP7tQIZrnGD0+9Ic7el9oEs057e9AnchD84/sjj7Dt e2gOjaa4i6C4fqUHgWPGRupV2TgCKSW2/hsLA3jz7xry1dwjXmI9vbe84RQT XQb+eo9HG3WMq3mtH8C6uG3cjiW5kLfas/8/yY3U5koWLTSdadtgu4=Content-Type: multipart/alternative; boundary="----=_Part_9006_1222595691.PUUMjsxV2xM0ae"

Content-Type: multipart/alternative; boundary="----=_Part_9006_1222595691.PUUMjsxV2xM0ae"

Date: [email_date]

From: "Blue Shield"

Mime-Version: 1.0

Message-ID:

Subject: Get your Medicare Kit today!

X-Feedback-ID: 35912449:SG

X-SG-EID: u001.VRuSiAmiSZrdM+ch8/ewZCE5g8d2mJyorx7s3jZ5rqnyXmzyFkS20YO/O71zaWyuG5n01ntHHvHDQO7WWsZ0yglAgtUtWe2Nsjr8QAomYVNDlZqGB1kKSx5YK8+/GrvM//Al7+JDZ78jIiAHdRR3NaEh/9K8tO3O9LWa4PnrXdZdgdMDTPL/KhvxYw9Mv5xof9DQOiB98h5oItpgW9Pv1CHUFKExtRJQm0atm4BMaG1hLD9He43C26ZLesH5O18K

X-SG-ID: u001.SdBcvi+Evd/bQef8eZF3BpTL9BgbK5wfSJMJGMsmprDITwp3LLcgXu9gvF1Oq5oTf1VY9MM//ZCviT/P37sq36jOj//s+gOXxMbC0IC6I7IMjizREremwgX6+9y9tUg/dPgNN2ostIHEILg1x1R/1w37GQwOPWuCNOy6UFsJnyhHdn7LyoaPfEF05f0sNnsQyS2TPnz2KFtdeinG84O5ooLpo1MFQMdVBSWrxOf8/TWQDGHucSEdWhnLMFePF49gVFqob2dbm/Q5CTKIppr9Tr49C2OW9UwxahuRI44LOLhSOuIpEnEULK6uIJPSh/cF3o2eCOSpXx41HzTLkO1pW11ejJPrrVff4gKguoJ3mrpwaJakKTmrECSyH5ysrvwO4J1ka8u5nDyk3zcqfmg3KKOgfl3AdyCglblFT0b7ip2LW3q2eblYMCztHv8434sE/e14op572TCBgE1H31gbqdN20nZmAO2n5JGF3bcrOL75DUXKXeMnW0Co2LHt6xwCh8LZoC9dqKgfVOe9SKsc9lFXEsbL9/0dw4KdAfnZBBADKuIREB73D7TLN5cH7Fjnlu65xzi7ViTvitFDfaBJN/697EIZE8fgwhL3M7H1FjRtLH83DTqiMCryA6ti6jkEK2fWY4sPhkLB64FGJ6UH72ZDyO+G63iOyTBl9NJ4u6xeTQJd6x7j87Li/szCcEoagStLIYaYO9qI8wus+PrnEi8haxOSz1ITR/Vmwi/yp2xMM4ENEOa41W4lLsPbryPXwtZQNFUmLZK1S4vHhoQquxHfMRfNwyv+z0mobKaz04ehCOXIqrcxFN6Bl7ew2U4ikI6caH6ruxvq9gq5+6XUfzoPwW8Bk4+yYWSaW896SXw13GKY9y7aF8RX5QibDgpwB8PgKzJCVtlHb1CrUfl+EOm9L+d2kHrs40kPskbEUfTrfp0mfqyGE0MWlXfR8JPndp4+WcAfYqh12tf5JEqJURpoYCH05XiKfVhh0vjW2gPiBQ+PSYBgB7j2hwk45/rSO3Ahy+rOg8jbzILIuetcgk3momx+7rT2KpI8Dkq7f1eiyRP9McyS0W6UeLi5HTP41iO3Df7Vt1mXBMCzSBi/vWOTN0itutaHv/+yIcpjN37oDt9+yra3RZPYXVpVpM22wAov/pUa+36MoSnBPqnyiXIMusdAHh7aGlKwIrQDs6HcMMEsVYEbN8teBmdYESezw1m2uvI4gnbGzrXblw3tEn39izWpxaVZ2BMvvBTj3q9/ZineOhSgaqwvwGgfvfvMdEBu//TTfBUF351cuKTxHbuytRm003MmTMHTA/jz2cSYeD1gJcHz3JqfAIo9iBPQTU0seaE6Jm//7lrQkp8v06WxFgHmGWn700FkA7SCNZbC6irMTVbdRFve2vB5ic0WGEvfDHnA0WMCxDZz9og6/PFv76gHpM8QkH9e0SJbROs=

To:

X-Entity-ID: u001.PHNYESGP2FQ7YGHIXEDV2Q==

X-Spam_score: 29.8

X-Spam_score_int: 298

X-Spam_bar: +++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please confirm your email address Click here to confirm your

email address To receive HubSpot content on marketing, sales and/or service

topics - please confirm your email address. You will be added to our email

distribution list. You can unsubscribe at any time. CRTKTBOC Th [...]



Content analysis details: (29.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[87.253.234.167 listed in will-spam-for-food.eu.org]

[87.253.234.167 listed in will-spam-for-food.eu.org]

[87.253.234.167 listed in will-spam-for-food.eu.org]

[87.253.234.167 listed in will-spam-for-food.eu.org]

[87.253.234.167 listed in will-spam-for-food.eu.org]

[87.253.234.167 listed in will-spam-for-food.eu.org]

[87.253.234.167 listed in will-spam-for-food.eu.org]

[87.253.234.167 listed in will-spam-for-food.eu.org]

[103.214.113.34 listed in will-spam-for-food.eu.org]

[103.214.113.34 listed in will-spam-for-food.eu.org]

[103.214.113.34 listed in will-spam-for-food.eu.org]

[103.214.113.34 listed in will-spam-for-food.eu.org]

[103.214.113.34 listed in will-spam-for-food.eu.org]

[103.214.113.34 listed in will-spam-for-food.eu.org]

[103.214.113.34 listed in will-spam-for-food.eu.org]

[103.214.113.34 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[87.253.234.167 listed in dnsbl.ahbl.org]

[87.253.234.167 listed in dnsbl.ahbl.org]

[87.253.234.167 listed in dnsbl.ahbl.org]

[87.253.234.167 listed in dnsbl.ahbl.org]

[103.214.113.34 listed in dnsbl.ahbl.org]

[103.214.113.34 listed in dnsbl.ahbl.org]

[103.214.113.34 listed in dnsbl.ahbl.org]

[103.214.113.34 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[87.253.234.167 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[87.253.234.167 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[87.253.234.167 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[87.253.234.167 listed in dnsbl.ahbl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[103.214.113.34 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[103.214.113.34 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[103.214.113.34 listed in bl.score.senderscore.com]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

1.0 HK_RANDOM_FROM From username looks random

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

15 GR_DOMAIN_MAILJE1 Received contains spammer id (mailje)

0.3 LONGWORD BODY: Uses overlong words

0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.8 A_HREF_NOWHERE A link tag with empty href

0.0 T_HTML_TAG_BALANCE_CENTER Malformatted HTML

0.4 HREF_EMPTY_NORDNS Empty href + no rDNS

1.1 NORDNS_LOW_CONTRAST No rDNS + hidden text

Subject: {SPAM?} Get your Medicare Kit today!



------=_Part_9006_1222595691.PUUMjsxV2xM0ae

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Please confirm your email address



Click here to confirm your email address



To receive HubSpot content on marketing, sales and/or service topics -Â please confirm your email address. You will be added to our email distribution list. You can unsubscribe at any time.

CRTKTBOC

The 90s had seen the apotheosis of the form, including Take That and Backstreet Boys, but those bands’ robust anthems and breezy dance-pop seemed to flame out in 2001 with the over-egged futurism of ‘NSync’s Pop, the first single from an album with the jaded title Celebrity.

Thanks,



The HubSpot Team



HubSpot, 25 1st St., Cambridge, MA 02141, USA, 888-482-7768



HubSpot, 2 Canal Park, , Cambridge, MA 02141, USA, 888-482-7768









Unsubscribe (https://hs-53.s.hubspotemail.net/hs/manage-preferences/unsubscribe-all?languagePreference=en&d=MnbTK9GK15VW3_Vshk4hHDBPW3T2_Lm2m40KfW3T0pbm43T3CZVmWFg14N_KfmN5fr_5C25rVhW8xS7DT8t0gJQVWmbwB8c2k7nMXk_7QbvZTwVMrv2h5s79sCW1P-vmr68hV1J32Kw2&v=3 )



Manage preferences (https://hs-53.s.hubspotemail.net/hs/manage-preferences/unsubscribe?languagePreference=en&d=MnbTK9GK15VW3_Vshk4hHDBPW3T2_Lm2m40KfW3T0pbm43T3CZVmWFg14N_KfmN5fr_5C25rVhW8xS7DT8t0gJQVWmbwB8c2k7nMXk_7QbvZTwVMrv2h5s79sCW1P-vmr68hV1J32Kw2&v=3 )

------=_Part_9006_1222595691.PUUMjsxV2xM0ae

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable





Bitte bestätigen Sie Ihre E-Mail-Adresse there | Confirm your e-mail address there

































We have a surprise from Blue Cross Blue Shield! Get your Medicare Kit today