Web / SEO / App spam from Microsoft Outlook

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 02 Nov 2024 14:36:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t7KqH-00000000F56-3sv9

for dave@doctor.nl2k.ab.ca;

Sat, 02 Nov 2024 14:35:29 -0600

Resent-From: The Doctor

Resent-Date: Sat, 2 Nov 2024 14:35:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-eastasiaazolkn19010012.outbound.protection.outlook.com ([52.103.64.12]:49190 helo=HK2PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1t7GCW-00000000Mqp-16Jl

for sales@nk.ca;

Sat, 02 Nov 2024 09:38:18 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=fpJpBvLczCtSvfBOScd5FjgaQELEt69LtziVlF49JWu/DZLi51EukbdIrw6a+cbXyHLpW1J7atTxrn4FS2gDWNs5P4BeSzsC41MIcCOoOx3od5vQxbUX/Or+hR0rHEYtQxE5xdoBn66QIxudZ2Dsm3FVSnuBzQQoW+Vn5R6Pq1pPALKL+cLnPEGN7g3wGduxD3CbM+GuvWZzpUxb1k00x7eC/Byb3u50tomURbx5iYyejgaKBTNmV3gbb9Moj2xu4JX8aiiLhi/9B0zi/SL/P3UmSqsnnflrkTeJX7IYrzTpAjO+OuAURyKox9YgjUp/EaLpVfckqoRJGZd1ocguKw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=k9cI94mkj4VGo3QxR1xnhjbcVH1CzcSfM2yyKRQtg6s=;

b=oQkjhCYi1Dl2T+FuUfjVTtnn0eoat7f8AEBgnrR1m68ymSK0IFSTS3B90UkSEy+3bK9ydb4RGaJGA/T1mRtjIduVeTkWmRnWT0rPOwvfflZpNwewAXlKlTzunvZfBJPyzUPVtG6ld+DcYZmTVX+NCt914IAyI96BkQ8YiKSRCj4vTYoYrO2ywnXQca0MpPn5q22pGePCNqSDJiLCOGJsAkEdHx2EXYduU2nlDPUOO1gbIXeABoBsJJfbVSMmm6Vfxa143dvuqIwB8wTiOO0qPdzMpH6L73+i5/H+IIxfunKWjSQx2yllQYXO4WpsVZzvhWlokXgoGbYBc3u7QVr52Q==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=k9cI94mkj4VGo3QxR1xnhjbcVH1CzcSfM2yyKRQtg6s=;

b=M+7VrjHp+q5DtFW/CXrKFF7TFtWBNvQ7gEigf6CnmAIcNGEU7beMeodaEFVTNFklOoh9cah3Rw/zfckMYXmEGa7OzzPuBAy0wp0s/GDAvPEj1ztOXZOff/YmWD8kG3bDmVfvr6fiSXwm0VLJKIEATEO9Zyhx20dKQHCi2iUGihWoik9/N2ILsmY0Q1Zi2brd7Ff8m1xd7nJYCUP+5FGQDY4KfIw6v0PEMDEetRK0PmnU1G0laHWtK6FTlS3v2VLx6zACi2TTMMRK+54mMi7SqHnNz0nvYQRPioGiToeA/eT47BmgRNePWGVm7MIZWfVXvcQ9VtjvywLpSHNqopfspw==

Received: from TYZPR01MB4894.apcprd01.prod.exchangelabs.com

(2603:1096:400:282::6) by TY0PR0101MB4786.apcprd01.prod.exchangelabs.com

(2603:1096:400:27b::8) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8093.20; Sat, 2 Nov

2024 13:58:18 +0000

Received: from TYZPR01MB4894.apcprd01.prod.exchangelabs.com

([fe80::2750:6555:489:2947]) by TYZPR01MB4894.apcprd01.prod.exchangelabs.com

([fe80::2750:6555:489:2947%6]) with mapi id 15.20.8114.015; Sat, 2 Nov 2024

13:58:18 +0000

From: Fabiana Allegro

To: Fabiana Allegro

Subject: Errors?

Thread-Topic: Errors?

Thread-Index: AQHbLS8ibeZ4QFAVX0yugsGdVihULQ==

Date: Sat, 2 Nov 2024 13:58:17 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYZPR01MB4894:EE_|TY0PR0101MB4786:EE_

x-ms-office365-filtering-correlation-id: 98ff2c82-3887-40ff-6a26-08dcfb4666d8

x-microsoft-antispam:

BCL:0;ARA:14566002|19110799003|15030799003|461199028|8062599003|8060799006|6115599003|7042599007|15080799006|440099028|3412199025|102099032|1710799026;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?V0ePYFHzJQ3Rv6uLS6dDfJxUvDp31IngrAMVXMFN0Vr6hSkw3JN1DIe9oB?=

=?iso-8859-1?Q?J4dduM0oT0v2UD7sLR/4gmae/dpClnOr7EMmPwfRcKqS5sGgmt7MTqix35?=

=?iso-8859-1?Q?GfgHK4dE9Zi15UPE8UNv6kGOknbSkHHNGg1Jkte12UokWr63rtVHP39A2H?=

=?iso-8859-1?Q?rS76hculgRAKRpjPo8H+fYT8k07prEHy+YUHL5bRXa9K+ovAXNDO3ADz5J?=

=?iso-8859-1?Q?ziOQO18hP7+w43zNMv+2shwErxdRmotn9Wx1+CpXy1R4w1Yp/mIE6wzDhg?=

=?iso-8859-1?Q?M/Nf2Te1cLFq8GpEYop+OLcLLZs3cKmImwiGqKavZia0i3vj8vmF0D3J0p?=

=?iso-8859-1?Q?PR1PmXd4Gj3zllInWZSqY3ujci17n+oeQN6RTBLzyGfYDuHqREqf4/HUFq?=

=?iso-8859-1?Q?hom5CpZvP7dTXHbmcy7+Snyt4plnVHMHzM3cwtjFLCw+xrjjjhZuxpdXiI?=

=?iso-8859-1?Q?iWlIr/iLqv83yBHNZNl+5fKKTdZCYRuTRlJSTstGZjLEqBbeLu1OFJbEz1?=

=?iso-8859-1?Q?YuKlm8Geomw/boYljKgSuOmg8xGy7/cgQFV61NvuAVwn7YvlwrNR3S5Osp?=

=?iso-8859-1?Q?QqHn1k8zh7rI5whl2bzQOzc24OLeLYQSG1WrJNkih/wlXacV15QePGbIbC?=

=?iso-8859-1?Q?CWRAmdrDH0esMmk4F199jr5o/qPIrIxK/Is+f+mi4Q/v+ixxiwZu4NGJhS?=

=?iso-8859-1?Q?Ff8kW+7ZryckZ/mC3HjhAm1Et2WYSnu6S0O4YUpxlRYnu6sGmr3X1/0kii?=

=?iso-8859-1?Q?fokqH/uOPO2H546rc2HQxIR6T6ZJ93lWAjzdovglo2o9FOgxZQJRkKZG6U?=

=?iso-8859-1?Q?3OSZZ0mM8W/DZvW8f0WxTOIJN5JJCRmYYaiDWcMHByVO1vPfTRs68coNol?=

=?iso-8859-1?Q?SjcrgmBrwYT5g5mm2S6vIbh7GhBJD7ADPmc++pixR1qWR36ehToIDiXIXM?=

=?iso-8859-1?Q?1XoYgpB0XefVz9fQUo+H76IUWuAAOC6HI1oF6fETkg5d2dS0dH0gCh4GVu?=

=?iso-8859-1?Q?ZyQ4D16yQfiKVIrd6KELj0bFKJTCvfQc4dxxrYbUtqmlRryQNX66ztLnnK?=

=?iso-8859-1?Q?TAfLhHnce48eWFqp++Pga+U7kR+W7cHjLZnvEZT+AxHZhU4QCst1XYc9Kj?=

=?iso-8859-1?Q?M1ZUmISeoPs93OyjkAh6SoZbkFIKdqFGUoPCKfQOwgTshljafv?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?mMFc5Wqgp4CaIbkUQS5b3v3IMteVu5EHbHnKha4flFIAMDevRuX8zABCgU?=

=?iso-8859-1?Q?9fp+f4qVWOkfLANWcnvYSLaVil2bI0WYwVJ7JjfnI8a+lCEu42FU8ty4I2?=

=?iso-8859-1?Q?U1tkPv9xotGpJ0kNijM8bAAQ+EcjxIgjB4LApmtvM3zuqpJlzUvLiWED5X?=

=?iso-8859-1?Q?oPa5j+JOosTy+U9nBZh+aWj6tmrLLtahLoMrEsa1nYXW72Ic7Y/YdTmD9/?=

=?iso-8859-1?Q?sPcQIIZ98dQCMppj8/dYNg2gUdZOn6VZZSKxcbUnZuEqeB85iGBFfPoUb9?=

=?iso-8859-1?Q?73EYhb88IeZGe9BEBIIrPu1Nvvqom2sL6rSAdLPEMyI/kib8wI/fjUeeWJ?=

=?iso-8859-1?Q?Ef/VxqxZax1DBjh44ihAJ//wsRYFWCVyPbaXyJ+u5gzStiYUtxl8Ud58jR?=

=?iso-8859-1?Q?B9cKzk2yY25RSKuYhxrc4o0YekCGOjIbr7NQse2DIOnsi8YtauY0gksHlG?=

=?iso-8859-1?Q?ijdrcAD74QH49032txNRNDv+7tpd+52ksDGTATwJpkbYs4GOPUXGIK39wC?=

=?iso-8859-1?Q?yeCLGDkjdTaZ/xZcuPVDanExsUi8tiPH0i9MNSIqdNVPrmgBE1rLN+5+pp?=

=?iso-8859-1?Q?YECJqIEiKTomu82WSKSCD1kFOmt+Fn5ldGbYDSrwBaMjBxOg70uhSu/r7+?=

=?iso-8859-1?Q?DICXGqAhoRdHDmHfuuKN92dUTofRSyyUdoAZ+Cf+Y6Pm+tZdgTXhMFnU7K?=

=?iso-8859-1?Q?RUgOaxbXBnNqHyy3n3BUbU8DPFYpsTeXYYXxP/0INxn3T9+SYYZY8ZRoXM?=

=?iso-8859-1?Q?xt7puKG0IiYi44V91wKWLhDTz9X879YX8XwQi14vNtrJkM71B3zS4KMywB?=

=?iso-8859-1?Q?QrwCBDP8JRsP0lqTvX4DRXFqlGQMozXkUOtMOvxwU3FZOU+frmyIWJLOz9?=

=?iso-8859-1?Q?nlP8i2+URTvI2HiXn6VZ+bF24sXBkmVQkdY1QKBRZDG4q7uAA6CgR3zcCq?=

=?iso-8859-1?Q?A25PDtvWYUCX7ITUEfbxABCQvepH4/MXtbNGVJ+WH8jDqz2vc//rYGbD8t?=

=?iso-8859-1?Q?vnY/OBv6Vw7fv39PRLSTi+EC0U31WSZwvr4Vgw6z7G7FoHBX7OEVmdEBIF?=

=?iso-8859-1?Q?1CZGRv5HJby2sKBFwr1sU+4svdRyQifYR5SiGDTn4smtOn3oLZu5Yy9NAr?=

=?iso-8859-1?Q?fmxfRwnJOfFbtHlJoUXcnk7xiHDpNz5QRK+FlyEzAXNjWWABj7t47fFok0?=

=?iso-8859-1?Q?D4j/PMZA421K663LHFcTIO+trpmwJlV0ELCB84AhHQuBmcfXMrZV3nj5sQ?=

=?iso-8859-1?Q?TvircHHqrdYmqyfbKOSVFLAFSl2bzn+K6Ukon8k0xhwbff4u9FN10Z+BJz?=

=?iso-8859-1?Q?VFhJOkzQDDA2B13cxXYUoyw7PGiiR2cufcExk2BkhISXV5S3jexftg01ob?=

=?iso-8859-1?Q?brgyN0vQXAoHvCKyBNUX7JY+eBwZCNvQ=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_TYZPR01MB4894869FED548A20E5F4996BF0572TYZPR01MB4894apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYZPR01MB4894.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 98ff2c82-3887-40ff-6a26-08dcfb4666d8

X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Nov 2024 13:58:17.1192

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TY0PR0101MB4786

X-Spam_score: 7.8

X-Spam_score_int: 78

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello Greetings While browsing through your site, I came across

a few errors.



Content analysis details: (7.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:400:282:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:282:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:282:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:282:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:282:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:282:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:282:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:282:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[52.103.64.12 listed in will-spam-for-food.eu.org]

[52.103.64.12 listed in will-spam-for-food.eu.org]

[52.103.64.12 listed in will-spam-for-food.eu.org]

[52.103.64.12 listed in will-spam-for-food.eu.org]

[52.103.64.12 listed in will-spam-for-food.eu.org]

[52.103.64.12 listed in will-spam-for-food.eu.org]

[52.103.64.12 listed in will-spam-for-food.eu.org]

[52.103.64.12 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Error: open resolver; ]

[Error: open resolver; ]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[2603:1096:400:282:0:0:0:6 listed in]

[sbl-xbl.spamhaus.org]

[52.103.64.12 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2603:1096:400:282:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:282:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:282:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:282:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[52.103.64.12 listed in dnsbl.ahbl.org]

[52.103.64.12 listed in dnsbl.ahbl.org]

[52.103.64.12 listed in dnsbl.ahbl.org]

[52.103.64.12 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2603:1096:400:282:0:0:0:6 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2603:1096:400:282:0:0:0:6 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2603:1096:400:282:0:0:0:6 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2603:1096:400:282:0:0:0:6 listed in]

[dnsbl.ahbl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.64.12 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[digitalmarketingservices840(at)outlook.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[digitalmarketingservices840(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} Errors?



--_000_TYZPR01MB4894869FED548A20E5F4996BF0572TYZPR01MB4894apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hello



Greetings



While browsing through your site, I came across a few errors.



With your permissions: Would it be helpful if I share a Screenshot of these=

issues?



Can I show you the errors.?



Thank you..



--_000_TYZPR01MB4894869FED548A20E5F4996BF0572TYZPR01MB4894apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hello



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Greetings



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

While browsing through your site, I came across a few errors.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

With your permissions: Would it be helpful if I share a Screenshot of these=

issues?



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Can I show you the errors.?



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Thank you..








--_000_TYZPR01MB4894869FED548A20E5F4996BF0572TYZPR01MB4894apcp_--

United NAtions Grants spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 02 Nov 2024 00:49:00 -0600

Received: from mail-yw1-f173.google.com ([209.85.128.173]:58612)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1t77sm-00000000KiF-3sGt

for dave@doctor.nl2k.ab.ca;

Sat, 02 Nov 2024 00:48:07 -0600

Received: by mail-yw1-f173.google.com with SMTP id 00721157ae682-6e9f69cc576so19889527b3.0

for ; Fri, 01 Nov 2024 23:45:12 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1730529906; x=1731134706; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=FVlYk+HxBKCmRpFKW10Vg2pNG9AJRLbjyTe3ZCrHDlI=;

b=PqjghGVnHEEgonNNc6B9Ew68nYCPHgVrHYSbWzMeS7YYN7CAjLBw8IYoBGGC1oRy0+

WcctCf/XyCtOv/PT2DsVVUdOlMCAem9+a6ogAmrz/ihFN6Yrcybswlv4kNo/9AoY/jSg

XkEiS4kTOchzbFal7Wgu97B9mHNk8+U57zOz/1a2U7aQuX5FshbUExJ4sh86kAwCPyOC

F+n783E7pza0KRZELsbxrPm6OxGH4r+mQpEwjuwzgj0okKxCqlzOVN6qLq9QaVzgPoRM

xvQhREkAbX7yO2n8PK2/feCrjFlB6awnglYWQrqtmuwsj+I3wCJg1H6x0teoMLgcFxZ1

9qTQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1730529906; x=1731134706;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=FVlYk+HxBKCmRpFKW10Vg2pNG9AJRLbjyTe3ZCrHDlI=;

b=euU98YWLjt7nw66k6QfR5TUsemsp9crFmsBRiqygRI7bUtMzgdj/iuAGDlb5iKR0w6

dB9TmJydRh1OGrO1Eoufl26/ZOyw7I38AgIA6sx8mvEOFuGP9T9+9/ZhPwWnziFT2RoW

xzRJnd55vOL1XM+GrjFF7Wbq9d3BPoPKPE0IldoIzLAyTOl2r4PjN05V2Jb20R1KDy7t

ZaNWCDGidny7ZWiGBUFiKgArDL4vAxWsxfLtgpBDY4pq2Zw3DYZbyBRNKMg8C2g5w8xL

ABeDF5f8LTnQr0moUwzTfXf8UVhaZCRXyYyl63HMZ7o0q3hYlx+HltVSXW3OWR16nrGh

SbPg==

X-Forwarded-Encrypted: i=1; AJvYcCVsCjpYJPc9Li0i7FrgS9FNBj+QJmip7AAQDWf7xKQmm/T+Wj0M8AMJoOxc5Wp2kttGUIx5@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0Yy7BTiUAm3gaicJKb/Vl3XFEmW7Knhd05kem6GhTkmiEkcNLVAo

Lolw7eVf/5upMNUNlqPUNA5Bc5aF1q0oJ0aVUlpgdT04mVxGbYKzS6RO47Ogn8wvTQHxzjgdEvN

vDvje+DEgndoq4aul4mEzTgw7iWnvpnABHnLang==

X-Google-Smtp-Source: AGHT+IEaEgCdUcWIWd17t+G6lL+FFvNmz3D6LhBsut55yyLo1DkbyoTga3AcTUHI/0IK4XG0i1/kbEYdrbCd5Ix0QwY=

X-Received: by 2002:a05:6830:4492:b0:709:30eb:dfcb with SMTP id

46e09a7af769-7186822952cmr26826783a34.18.1730527764299; Fri, 01 Nov 2024

23:09:24 -0700 (PDT)

MIME-Version: 1.0

From: U N

Date: Sat, 2 Nov 2024 08:09:08 +0200

Message-ID:

Subject: Re:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000aa4d6c0625e7e47b"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 14.0

X-Spam_score_int: 140

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear, Send your Grant Reference: FSG2024/Name/Phone Number/Country

to Mr. Andrej Mahecic at un.grant@socialworker.net, +1 888 673 0430 for your

£100,000.00. Sincerely



Content analysis details: (14.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to

zen.spamhaus.org was blocked due to usage of an

open resolver. See

https://www.spamhaus.org/returnc/pub/

[209.85.128.173 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[209.85.128.173 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.173 listed in dnsbl.ahbl.org]

[209.85.128.173 listed in dnsbl.ahbl.org]

[209.85.128.173 listed in dnsbl.ahbl.org]

[209.85.128.173 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.173 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.173 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.173 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.173 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL

was blocked. See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

for more information.

[209.85.128.173 listed in list.dnswl.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Error: open resolver; ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.173 listed in will-spam-for-food.eu.org]

[209.85.128.173 listed in will-spam-for-food.eu.org]

[209.85.128.173 listed in will-spam-for-food.eu.org]

[209.85.128.173 listed in will-spam-for-food.eu.org]

[209.85.128.173 listed in will-spam-for-food.eu.org]

[209.85.128.173 listed in will-spam-for-food.eu.org]

[209.85.128.173 listed in will-spam-for-food.eu.org]

[209.85.128.173 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.173 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[sphechrraks123(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[sphechrraks123(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLY From and body contain different freemails

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

2.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Re:



--000000000000aa4d6c0625e7e47b

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear,



Send your Grant Reference: FSG2024/Name/Phone Number/Country to Mr. Andrej

Mahecic at un.grant@socialworker.net, +1 888 673 0430 for your =C2=A3100,00=

0.00.



Sincerely



Mr. C. Gunness

On behalf of the UN.



--000000000000aa4d6c0625e7e47b

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear,

Send your Grant Reference: FSG2024/Name/Phone=

Number/Country to Mr. Andrej Mahecic at
orker.net">un.grant@socialworker.net
, +1 888 673 0430 for your =C2=A310=

0,000.00.

Sincerely

Mr. C. Gunness
On behalf of the UN.
iv>



--000000000000aa4d6c0625e7e47b--

Canada Post phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 01 Nov 2024 18:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t725w-00000000P2G-0K9N

for dave@doctor.nl2k.ab.ca;

Fri, 01 Nov 2024 18:34:24 -0600

Resent-From: The Doctor

Resent-Date: Fri, 1 Nov 2024 18:34:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from system1-197.zeptomail.ca ([199.67.87.197]:23577)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1t71i0-00000000Nyd-0Uew

for root@nk.ca;

Fri, 01 Nov 2024 18:09:56 -0600

ARC-Seal: i=1; a=rsa-sha256; t=1730506172; cv=none;

d=zohomail360.ca; s=zohoarc;

b=d6Hh4Qh/bPhMELmSnGseLElnTR63Vs4ucqD2iKrrt0JTxFlenLjLiaj7adRH/MvnUXeAnodWSP3gBU0MZEh8l0Kk5rh3AbB1Vczc8pDLdL7stdxvhs7HDGmO03HkJkECDe+Ha/H6gbGvZ0PD9DS62daqHKbkaZ1UoTE9dJDw7Zc=

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail360.ca; s=zohoarc;

t=1730506172; h=Content-Type:Content-Transfer-Encoding:Date:Date:From:From:MIME-Version:Message-ID:Reply-To:Reply-To:Subject:Subject:To:To:Message-Id:Cc;

bh=kptqGl3nam9GUCFv/orDikkhVaTTNLWrWsrCiCkjiZ8=;

b=KjelIsfMUB1ulEOouPdIDKtdQH9KD+b3KzoZ3KGDYeVRCafWb1f1z3dJC/+vWEjKKaWKrr9xGKBOLixH+4GplQKDGp2lhOwbKDbopAw27PLIlpAfL8gjToDhO5syEb2Ceksc58qTpNHeYt/EwxJY+XgNgNtbfeSWyVdqC6EElRA=

ARC-Authentication-Results: i=1; mx.zohomail360.ca;

dkim=pass header.i=invitation.zohosurvey.ca;

spf=pass smtp.mailfrom=bounces+a1993ad7-98ae-11ef-a3ae-1ad0b05a72f3_vt1@invitation.zohosurvey.ca;

dmarc=pass header.from=

Received: by mx.zohocloud.ca with SMTPS id 1730506150113355.5234201191074;

Fri, 1 Nov 2024 20:09:10 -0400 (EDT)

DKIM-Signature: a=rsa-sha256; b=yulNPW1tVoyAPQAjiGJUm+XKo/uYs6XzXAVxQu5q+CoVH23fXzdA8WeM+RiaHZ4h0uRyhr9K63+H73hqjmjFoLNPwPhbnO9XLm0P0zHI2O1E9BH4qGFB+FUrAOHSUZFwk50mDq+7EAeA+7Oydgxw1rkeGZ2vjZUBvDYaNmuMXTc=; c=relaxed/relaxed; s=1381313; d=invitation.zohosurvey.ca; v=1; bh=kptqGl3nam9GUCFv/orDikkhVaTTNLWrWsrCiCkjiZ8=; h=date:from:reply-to:to:message-id:subject:mime-version:content-type:content-transfer-encoding:date:from:reply-to:to:message-id:subject;

Date: Fri, 1 Nov 2024 20:09:09 -0400 (EDT)

From: =?UTF-8?B?UG9zdGVzIENhbmFkYQ==?=

Reply-To: lamas@lamas.co.zw

To: root@nk.ca

Message-ID: <3b2f8.244fe4d7fb1c6907.m1.a1993ad7-98ae-11ef-a3ae-1ad0b05a72f3.192ea33f867@invitation.zohosurvey.ca>

Subject: =?UTF-8?Q?=CE=A5=D0=BEur_=D1=80=D0=B0=D1=81k=D0=B0g=D0=B5_(CA09128034?=

=?UTF-8?Q?)_fr=D0=BEm_th=D0=B5_U?=

=?UTF-8?Q?=D0=85=D0=90__=D1=96=D1=95_=D1=81urr=D0=B5n?=

=?UTF-8?Q?tl=D1=83_=D1=96n_tr=D0=B0n=D1=95?=

=?UTF-8?Q?=D1=96t_=D0=B0nd_h=D0=B0=D1=95_r?=

=?UTF-8?Q?=D0=B5=D0=B0=D1=81h=D0=B5d_=D1=81u=D1=95t=D0=BE?=

=?UTF-8?Q?m=D1=95_=D1=81l=D0=B5=D0=B0r=D0=B0n=D1=81=D0=B5.?=

MIME-Version: 1.0

Content-Type: text/html;charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Original-Envelope-Id: 3b2f8.244fe4d7fb1c6907.m1.a1993ad7-98ae-11ef-a3ae-1ad0b05a72f3.192ea33f867

X-JID: 3b2f8.244fe4d7fb1c6907.b1.a1987770-98ae-11ef-a3ae-1ad0b05a72f3.192ea33f867

TM-MAIL-JID: 3b2f8.244fe4d7fb1c6907.m1.a1993ad7-98ae-11ef-a3ae-1ad0b05a72f3.192ea33f867

X-App-Message-ID: 3b2f8.244fe4d7fb1c6907.m1.a1993ad7-98ae-11ef-a3ae-1ad0b05a72f3.192ea33f867

X-Report-Abuse:

X-ZohoMailClient: External

X-Spam_score: 17.9

X-Spam_score_int: 179

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please Wait.. Dear Customer , Your package is currently on

hold and requires your confirmation to proceed.



Content analysis details: (17.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[199.67.87.197 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[199.67.87.197 listed in dnsbl.ahbl.org]

[199.67.87.197 listed in dnsbl.ahbl.org]

[199.67.87.197 listed in dnsbl.ahbl.org]

[199.67.87.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[199.67.87.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[199.67.87.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[199.67.87.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[199.67.87.197 listed in dnsbl.ahbl.org]

0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to

dbl.spamhaus.org was blocked due to usage of an

open resolver. See

https://www.spamhaus.org/returnc/pub/

[URI: survey.zohocloud.ca]

[URI: survey.zohopublic.ca]

[URI: invitation.zohosurvey.ca]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[199.67.87.197 listed in will-spam-for-food.eu.org]

[199.67.87.197 listed in will-spam-for-food.eu.org]

[199.67.87.197 listed in will-spam-for-food.eu.org]

[199.67.87.197 listed in will-spam-for-food.eu.org]

[199.67.87.197 listed in will-spam-for-food.eu.org]

[199.67.87.197 listed in will-spam-for-food.eu.org]

[199.67.87.197 listed in will-spam-for-food.eu.org]

[199.67.87.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Error: open resolver; ]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: pdns90.ultradns.biz/156.154.66.90]

[URI: pdns90.ultradns.net/156.154.65.90]

[URI: pdns90.ultradns.com/156.154.64.90]

[URI: ns31.zns-53.com/169.148.151.88]

[URI: survey.zohocloud.ca/199.67.85.80]

[URI: ns21.zns-53.net/136.143.173.99]

[URI: ns11.zns-53.com/136.143.172.88]

[URI: ns1.zohocorp.com/156.154.67.90]

[URI: ns41.zns-53.net/169.148.152.99]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

2.3 MANGLED_FROM BODY: mangled from

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.4 UNICODE_OBFU_ASC Obfuscating text with unicode

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} =?UTF-8?Q?=CE=A5=D0=BEur_=D1=80=D0=B0=D1=81k=D0=B0g=D0=B5_(CA09128034?=

=?UTF-8?Q?)_fr=D0=BEm_th=D0=B5_U?=

=?UTF-8?Q?=D0=85=D0=90__=D1=96=D1=95_=D1=81urr=D0=B5n?=

=?UTF-8?Q?tl=D1=83_=D1=96n_tr=D0=B0n=D1=95?=

=?UTF-8?Q?=D1=96t_=D0=B0nd_h=D0=B0=D1=95_r?=

=?UTF-8?Q?=D0=B5=D0=B0=D1=81h=D0=B5d_=D1=81u=D1=95t=D0=BE?=

=?UTF-8?Q?m=D1=95_=D1=81l=D0=B5=D0=B0r=D0=B0n=D1=81=D0=B5.?=




ica,Arial,sans-serif;">


width=3D"100%" style=3D"font-family: Arial, Helvetica, sans-serif; max-widt=

h: 600px;border:solid 1px #eeeeee; background:#ffffff;box-shadow:0 0 29px 0=

rgba(0,0,0,0.1);-webkit-box-shadow:0 0 29px 0 rgba(0,0,0,0.1);">






























































style=3D"max-width: 600px;margin:0; padding: 20px;background-color:=

#FFFFFF;vertical-align: middle; text-align: center;color: #FFFFFF;font-si=

ze: 25px; font-weight: normal;font-family: Helvetica Neue,Helvetica,Aria=

l,sans-serif;letter-spacing: 1px; line-height: 1;">


ys/EHDp4W/images/YTY5MDAzYmQtMGU0OC00MGM1LThhYmEtYTI1ODlkNWNjMzBm/web/downl=

oad/image?isoriginalfile=3Dtrue style=3D"vertical-align: middle; max-width:=

100px; height: auto; display: inline-block; ">

Please Wait..


 

color: #000000;margin: 0 auto;line-height: 1.5;font-family: Helvetica Neue,=

Helvetica,Arial,sans-serif;font-size: 15px;">


: center;">

<=

font color=3D"#ff0000">Dear Customer ,


xt-align:left">Your package is currently on hold and requires your confirma=

tion to proceed.

Please click the link bel=

ow to confirm your delivery with Canada Post.



 
 


center" style=3D"border: 0px; color: rgb(255, 255, 255); font-size: 16px; f=

ont-weight:400; font-family: Helvetica Neue,Helvetica,Arial,sans-serif; lin=

e-height: 1; margin: auto;">












lic.ca/zs/EHDp4W?zs_inviteid=3D0375a02bdca096e944914593e90fc239b8a0fec9a410=

e89c7045604f9ed4d9f2398ab08e7cffc48b009557972ed17cdc8ad58d694e7e0eb9af740a9=

9711f078201f55c9b30d7f166c852d54c4cb8b945498f196531cc01a123fb6e52c2915a1db1=

1df38646fe1429697551ed8f12d42c06c24221ef43273fdb187a340e2ad2125d9eb2e0d84ed=

643f62b4e0f30f47c06dd1c3582ded11f93e65c8a181870678a" target=3D"_blank" styl=

e=3D"font-size: 16px; font-weight:400;font-family: Helvetica Neue,Helvetica=

,Arial,sans-serif;text-decoration:none; color:#FFFFFF;">
ground: #002060; border-radius: 0px; border: 0px; color: rgb(255, 255, 255)=

; font-size: 16px; font-weight:400; font-family: Helvetica Neue,Helvetica,A=

rial,sans-serif; padding: 16px 30px; line-height: 1; margin: auto;">=D0=A1=

=D0=BEnf=D1=96rm =CE=A5=D0=BEur =D0=A0=D0=B0=D1=81k=D0=B0g=D0=B5
=



 
 

 
 
 

17683/893e876580946924bb53148a8b0e528?surveyid=3D3112000000003001" alt=3D""=

title=3D"" width=3D"1" height=3D"1" style=3D"display: block;">

CIBC PHish from sendgrid

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 01 Nov 2024 18:31:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t721y-00000000Or3-1YcS

for dave@doctor.nl2k.ab.ca;

Fri, 01 Nov 2024 18:30:18 -0600

Resent-From: The Doctor

Resent-Date: Fri, 1 Nov 2024 18:30:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from wrqvncsr.outbound-mail.sendgrid.net ([149.72.44.101]:8184)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1t6zwk-00000000I1f-0p31

for doctor@doctor.nl2k.ab.ca;

Fri, 01 Nov 2024 16:17:10 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=facs.org;

h=from:subject:mime-version:to:content-type:content-transfer-encoding:

cc:content-type:from:subject:to;

s=s1; bh=VMO8RKSp54yPgjsuvkbhKyiMzOIyGDKH6Qol0NzWMR8=;

b=yrg0soKSOifTKCMTNeyvadCyE8gppdGGKGfs0L0xkTV0Dsp76lTxc9rI8xmwuh6lqVMo

TN21G+lEbDFc3UcWgVINz7d3omvaUZzVq8K8KwSjRw+DM8I9Wvjf+B9VKYxSnO2GsFTUmT

+WHwNX45cVByv+9DLWjbZpO18iy3Ix1T0=

Received: by recvd-5ddd76c7bc-bz9ps with SMTP id recvd-5ddd76c7bc-bz9ps-1-67255347-1C

2024-11-01 22:16:39.42270008 +0000 UTC m=+4335524.444713804

Received: from [208.91.189.189] (unknown)

by geopod-ismtpd-13 (SG)

with ESMTP id 5vqq2vqtTziNOU-5GIPhwQ

for ;

Fri, 01 Nov 2024 22:16:39.298 +0000 (UTC)

From: "CIBC Fraud Dept."

Subject: IMPORTANT Temporary Lock Notice. Friday, November 1, 2024 10:16 p.m.

Date: Fri, 01 Nov 2024 22:16:39 +0000 (UTC)

Message-ID: <20241101221638.A86D035B034DEB70@facs.org>

MIME-Version: 1.0

X-SG-EID:

=?us-ascii?Q?u001=2EMFYnI6PGoRIW2l1lupd8ESn=2Fn9x4BXpa3ly9SF5VLNAGJSk+voACIq6GJ?=

=?us-ascii?Q?gAmy391C1uF+d1a3yA7d0h5U2p=2FRedT2pxVyUA+?=

=?us-ascii?Q?y1XyB7HGFGaEK9hNCGhScoXeWXq=2F5pES94WcHQ8?=

=?us-ascii?Q?kyQam5=2FeE9fF9ZdaG8PohwcP73MPDudU44itt68?=

=?us-ascii?Q?aSULSsfYkcvbEcdYcKMUbnK4jZ8sbI5GMluhX4K?=

=?us-ascii?Q?vcFHjOJJsIRa1T6T10bZghPFFPmPw+hFLyW8Ydl?= =?us-ascii?Q?MeBW?=

To: doctor@doctor.nl2k.ab.ca

X-Entity-ID: u001.GXiZARILzcboo7+5GHYJEw==

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 40.8

X-Spam_score_int: 408

X-Spam_bar: ++++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Activity alert Account access limited Here's what it's about:

Your account has been marked as inactive and currently restricted



Content analysis details: (40.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[149.72.44.101 listed in sbl-xbl.spamhaus.org]

[208.91.189.189 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[208.91.189.189 listed in dnsbl.ahbl.org]

[208.91.189.189 listed in dnsbl.ahbl.org]

[208.91.189.189 listed in dnsbl.ahbl.org]

[208.91.189.189 listed in dnsbl.ahbl.org]

[149.72.44.101 listed in dnsbl.ahbl.org]

[149.72.44.101 listed in dnsbl.ahbl.org]

[149.72.44.101 listed in dnsbl.ahbl.org]

[149.72.44.101 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[208.91.189.189 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[208.91.189.189 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[208.91.189.189 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[208.91.189.189 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[149.72.44.101 listed in will-spam-for-food.eu.org]

[149.72.44.101 listed in will-spam-for-food.eu.org]

[149.72.44.101 listed in will-spam-for-food.eu.org]

[149.72.44.101 listed in will-spam-for-food.eu.org]

[149.72.44.101 listed in will-spam-for-food.eu.org]

[149.72.44.101 listed in will-spam-for-food.eu.org]

[149.72.44.101 listed in will-spam-for-food.eu.org]

[149.72.44.101 listed in will-spam-for-food.eu.org]

[208.91.189.189 listed in will-spam-for-food.eu.org]

[208.91.189.189 listed in will-spam-for-food.eu.org]

[208.91.189.189 listed in will-spam-for-food.eu.org]

[208.91.189.189 listed in will-spam-for-food.eu.org]

[208.91.189.189 listed in will-spam-for-food.eu.org]

[208.91.189.189 listed in will-spam-for-food.eu.org]

[208.91.189.189 listed in will-spam-for-food.eu.org]

[208.91.189.189 listed in will-spam-for-food.eu.org]

0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to

dbl.spamhaus.org was blocked due to usage of an

open resolver. See

https://www.spamhaus.org/returnc/pub/

[URI: cibc.com]

[URI: u4410538.ct.sendgrid.net]

[URI: facs.org]

[URI: seeklogo.com]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Error: open resolver; ]

[Error: open resolver; ]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: u4410538.ct.sendgrid.net/167.89.118.126]

[URI: u4410538.ct.sendgrid.net/167.89.118.35]

[URI: u4410538.ct.sendgrid.net/167.89.118.118]

[URI: u4410538.ct.sendgrid.net/167.89.118.106]

[URI: cibc.com/184.30.150.118]

[URI: u4410538.ct.sendgrid.net/167.89.118.74]

[URI: cibc.com/184.30.150.105]

[URI: facs.org/20.49.97.16]

[URI: u4410538.ct.sendgrid.net/167.89.118.28]

[URI: a18-66.akam.net/95.101.36.66]

[URI: a16-65.akam.net/23.211.132.65]

[URI: a11-67.akam.net/84.53.139.67]

[URI: a1-188.akam.net/193.108.91.188]

[URI: a26-67.akam.net/23.74.25.67]

[URI: seeklogo.com/172.67.190.76]

[URI: seeklogo.com/104.21.84.83]

[URI: a13-64.akam.net/2.22.230.64]

[URI: beth.ns.cloudflare.com/108.162.192.103]

[URI: ns14.dnsmadeeasy.com/208.80.127.4]

[URI: ns12.dnsmadeeasy.com/208.80.126.4]

[URI: ns15.dnsmadeeasy.com/208.94.149.4]

[URI: ns13.dnsmadeeasy.com/208.80.125.4]

[URI: beth.ns.cloudflare.com/172.64.32.103]

[URI: beth.ns.cloudflare.com/173.245.58.103]

[URI: ns11.dnsmadeeasy.com/208.80.124.4]

[URI: igor.ns.cloudflare.com/173.245.59.119]

[URI: igor.ns.cloudflare.com/172.64.33.119]

[URI: ns10.dnsmadeeasy.com/208.94.148.4]

[URI: igor.ns.cloudflare.com/108.162.193.119]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

15 GR_DOMAIN_SENDGR6 URI: Body contains known spammer URI (sendgr)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

Subject: {SPAM?} IMPORTANT Temporary Lock Notice. Friday, November 1, 2024 10:16 p.m.



 



 




#000000; text-transform: none; line-height: normal !important; letter-spac=

ing: normal; font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif; f=

ont-size: 13px; font-style: normal; font-variant-ligatures: normal; font-va=

riant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickne=

ss: initial; text-decoration-style: initial; text-decoration-color: initial=

;" role=3D"presentation" border=3D"0" width=3D"100%" cellspacing=3D"0" cell=

padding=3D"0" align=3D"center">












-height: normal !important; vertical-align: top; -ms-word-break: normal; mi=

n-width: 800px; background-color: #d7dbe0;" align=3D"center">


ortant; background-color: #ffffff;" role=3D"presentation" border=3D"0" widt=

h=3D"800" cellspacing=3D"0" cellpadding=3D"0" align=3D"center">


















l-align: top; -ms-word-break: normal; background-color: #C70039;" align=3D"=

center">


er=3D"0" cellspacing=3D"0" cellpadding=3D"0">
















tical-align: bottom; -ms-word-break: normal;" align=3D"right"> 

rtical-align: bottom; -ms-word-break: normal; background-color: #ffffff;" a=

lign=3D"center">


er=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0">












top; -ms-word-break: normal;" align=3D"left">


er=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0">
























padding-left: 30px; vertical-align: top; -ms-word-break: normal;" align=3D=

"left">


er=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0">












al-align: bottom; -ms-word-break: normal;" align=3D"left">
://seeklogo.com/images/C/cibc-bank-logo-97A0B3C6B2-seeklogo.com.png" width=

=3D"135px" height=3D"40px" />



ight: normal !important; vertical-align: top; -ms-word-break: normal;" alig=

n=3D"left">


er=3D"0" cellspacing=3D"0" cellpadding=3D"0" align=3D"left">












break: normal;" align=3D"left">


er=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0">












us: 20px; vertical-align: top; white-space: nowrap; -ms-word-break: normal;=

background-color: #d7dbe0;" align=3D"left">Activity alert





break: normal;" align=3D"left">


er=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0">












eight: normal !important; vertical-align: top; -ms-word-break: normal;" ali=

gn=3D"left">


er=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0">












tical-align: top; -ms-word-break: normal;" align=3D"left">

Account access limited












tical-align: bottom; -ms-word-break: normal;" align=3D"left"> 



top; -ms-word-break: normal; background-color: #ffffff;" align=3D"center">


er=3D"0" cellspacing=3D"0" cellpadding=3D"0">














tical-align: top; -ms-word-break: normal;" align=3D"right"> 

rtical-align: top; -ms-word-break: normal;" align=3D"center">


er=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0">




































ne-height: normal !important; vertical-align: top; -ms-word-break: normal;"=

align=3D"left">


(65, 64, 66); font-family: Arial,Helvetica,sans-serif; font-size: 16px; ver=

tical-align: top;">Here's what it's about:


>Your account has been marked as inactive and currently restricted=


We encourage you to sign in and verify your acc=

ount information here with the link below to stop any futher disrupton on y=

our account.


You are receiving this message because:
g>

  • Unusual debit/credit card purchase.

  • This is a security=

    protocol to help protect your account.



  • ria-hidden=3D"true">

    ght: 44px; line-height: normal !important; vertical-align: top;" align=3D"l=

    eft">


    =3D"presentation" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" align=3D=

    "left">












    39; width: 168px; color: #fffffe; line-height: normal !important; font-fami=

    ly: Arial, Helvetica, sans-serif; font-size: 16px; vertical-align: top; -ms=

    -word-break: normal; background-color: #C70039;" align=3D"center">
    =3D"color: #fffffe; line-height: normal !important; text-decoration: none;"=

    title=3D"protected by outlook" href=3D"https://u4410538.ct.sendgrid.net/ls=

    /click?upn=3Du001.1PEwvY738zCFV5K7SmIPw7VVOQ2Vh-2BLWDx0hW5qefyklUZKRcDpJvPT=

    NUqOWfOPX4Xsz_GyWe1RRaaz-2B-2B-2Bm2R4SiSUcHZOTY4dgdpSVRaTGu9ktMsonv2KFQoStu=

    kz2BxqzTUBBZs-2Fun67fFZYcoYQPjWtkTOAIhXEt8Yg6A1k2DMEMFMBfpKxMQi-2FR64oViyuE=

    E-2FbrNsL0we9v57erZbG3Mxo2eCVpwImmaRBZunXeHnRykIyq3D-2BccAwgGL-2F-2BrH4aM-2=

    BmvNGclIEO5cJ7JGzv9gpOA-3D-3D" target=3D"_blank" rel=3D"nofollow noopener n=

    oreferrer">Review online



    (65, 64, 66); font-family: Arial,Helvetica,sans-serif; font-size: 16px; ver=

    tical-align: top;">Security tip:
    D=

    uring this verification process, we kindly request that you do not make cha=

    nges to your Log-on Information for security reasons..

    0px 30px 20px; color: #717171; line-height: normal !important; font-family:=

    Arial, Helvetica, sans-serif; font-size: 12px; vertical-align: top; -ms-wo=

    rd-break: normal;" align=3D"left">You can Securely access your accounts wit=

    h the link above and report or view this transaction.

    top; -ms-word-break: normal; background-color: #f6f6f6;" align=3D"left">


    er=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0">












    20px 30px 60px; color: #717171; line-height: normal !important; font-family=

    : Arial, Helvetica, sans-serif; font-size: 12px; vertical-align: top; -ms-w=

    ord-break: normal;" align=3D"left">
    ; line-height: normal !important; font-weight: bold;">ABOUT THIS MESSAGE
    pan>


    t: normal !important;" /> CIBC Mobile
    nt-size: 8.4px; vertical-align: 3px;">®
     app is available fo=

    r select mobile devices. Message and data rates may apply.

    -height: normal !important;" />

    " /> This service email was sent based on your alert settings. Use the CIBC=

     Mobile app or visit 
    rmal !important; text-decoration: underline;" href=3D"https://u4410538.ct.s=

    endgrid.net/ls/click?upn=3Du001.1PEwvY738zCFV5K7SmIPw6hQY25lfi71exU2AVFZ-2B=

    6stZZNBH6mTnal-2Blye9wF0HVm-2BiV15Tdcwimcu6kdwhkJODJw-2BIADYXTyKJapgViAw-3D=

    GI4D_GyWe1RRaaz-2B-2B-2Bm2R4SiSUcHZOTY4dgdpSVRaTGu9ktMsonv2KFQoStukz2BxqzTU=

    BBZs-2Fun67fFZYcoYQPjWtk5m2sSeisiydrEQRZ1QbUeYrurW5rK9-2BJPW59RahW4vamnEw5i=

    lbbajcqTbr3y-2FxMPHanKmW9yB0Nn-2FtxDzexxZo4EF-2BjRaGZk6h8V0EB3ZJFrgyCR6t7P3=

    tu6ObjzPjA-3D-3D" target=3D"_blank" rel=3D"nofollow noopener noreferrer">ci=

    bc.com/alerts
     to view or manage your settings.

    ight: normal !important;" />

    > Cibc cannot guarantee the delivery of alerts and notifications. Wire=

    less or internet service provider outages or other circumstances could dela=

    y them. You can always check 
    ray" style=3D"line-height: normal !important;">
    line-height: normal !important; text-decoration: none;" rel=3D"nofollow noo=

    pener noreferrer">cibc.com
      or the Cibc Mobile a=

    pp for the status of your accounts including your latest account balances a=

    nd transaction details. 

    />
    To protect your personal =

    information, please don't reply to this message. Cibc won't ask for confide=

    ntial information in an email.

    />
    If you have concerns ab=

    out the authenticity of this message or have questions about your account v=

    isit 
    decoration: underline;" href=3D"https://u4410538.ct.sendgrid.net/ls/click?u=

    pn=3Du001.1PEwvY738zCFV5K7SmIPwyY0uVL-2F0-2BCtq7mcAl3EBkGH5jhV1JZs1HZKK6mu5=

    LKXpwzdNkk-2BEkcpXHXzxENBwg-3D-3Di1Y1_GyWe1RRaaz-2B-2B-2Bm2R4SiSUcHZOTY4dgd=

    pSVRaTGu9ktMsonv2KFQoStukz2BxqzTUBBZs-2Fun67fFZYcoYQPjWtgyE4Iq59LZYfjom-2FP=

    P3TZ7WIb-2Bm-2F2nf9VE-2BX0odi8pXRi4TrFIPFwegi9Ue2uTA5BV-2FBkAk5iN0etFfHWJNX=

    08H3YiSLOzsEpvhGDmZSH89HYCP8xwfK0sIMqtCYc-2FbDw-3D-3D" target=3D"_blank" re=

    l=3D"nofollow noopener noreferrer">cibc.com/CustomerService
     for wa=

    ys to contact us.


    =3D"line-height: normal !important;" /> Your privacy is important to us. Se=

    e our online 
    t; text-decoration: underline;" href=3D"https://u4410538.ct.sendgrid.net/ls=

    /click?upn=3Du001.1PEwvY738zCFV5K7SmIPwyY0uVL-2F0-2BCtq7mcAl3EBkGTM4aR74ZpN=

    2DxTj7aqLDXsHcTXaXjnKyK8-2F-2B0fvw-2BJQ-3D-3Dz5pz_GyWe1RRaaz-2B-2B-2Bm2R4Si=

    SUcHZOTY4dgdpSVRaTGu9ktMsonv2KFQoStukz2BxqzTUBBZs-2Fun67fFZYcoYQPjWtg6ahvrT=

    xfUtA7CvGmqMuBS8dhL3SsiEkbpmlsk-2FwSbVLx676ojADroRgNWU9RaPpafTISz0Dm-2F3e7W=

    NG35nYUsf-2FzebcZTvBve4Nculsoj3uGk69l7iLF1BUUGNknAXIw-3D-3D" target=3D"_bla=

    nk" rel=3D"nofollow noopener noreferrer">Security Center
     to learn =

    how to protect your information.

    ;" />
    © 2024 Canadian I=

    mperial Bank of Commerce.











    e20dbI9Z6QKeFEUiu7Ze4oT3Osa2V9TYUFjUhxJ85TOoYeiRyJmu4fqVZLQnzxGf-2F9KDIgy5i=

    -2BXOYHgB9JsjJ5oajCt6-2BapHUfpsvAk5dFkWO3NwFRw7tini6CQD9EitL2pY6-2BnoQMhOUe=

    -2BluBX-2BVkYqNRr8NSWoY-2B1htMLUp1l-2BPun7cUnImzlFEooYw2dN7sIBjlUp6h-2B63-2=

    BFtg7Tli1XTSYaeX5iI-3D" alt=3D"" width=3D"1" height=3D"1" border=3D"0" styl=

    e=3D"height:1px !important;width:1px !important;border-width:0 !important;m=

    argin-top:0 !important;margin-bottom:0 !important;margin-right:0 !important=

    ;margin-left:0 !important;padding-top:0 !important;padding-bottom:0 !import=

    ant;padding-right:0 !important;padding-left:0 !important;"/>