Web / SEO / App spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 07 Nov 2024 10:21:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t96Av-000000006KG-3sF3

for dave@doctor.nl2k.ab.ca;

Thu, 07 Nov 2024 10:20:05 -0700

Resent-From: The Doctor

Resent-Date: Thu, 7 Nov 2024 10:20:05 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f65.google.com ([209.85.216.65]:61840)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1t95JV-000000001J3-32Ab

for sales@nk.ca;

Thu, 07 Nov 2024 09:24:58 -0700

Received: by mail-pj1-f65.google.com with SMTP id 98e67ed59e1d1-2e91403950dso887281a91.3

for ; Thu, 07 Nov 2024 08:23:01 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=corporatedigitalagency.com; s=google; t=1730996575; x=1731601375; darn=nk.ca;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=+D+mfLNFjgS5o5tCwOrDn80Wji5Xvse41j8tVNZrJ+M=;

b=CeUPalkrOLLXeISlbEMOWDEsCR6+HVvya5aUZIBSy+4CDlE8jDSnGNpEl+kC4aEn9M

KSJsV6nP/qWdtAz2i69mLN9E+tN8DPp0wuV8Cgz5DhuabwWFL0joyay2+mrJXpGLOgvJ

sDZrErGieD6wiRXJvLlIWX9Yb0OOh+BXOSK4k=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1730996575; x=1731601375;

h=to:subject:message-id:date:from:sender:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=+D+mfLNFjgS5o5tCwOrDn80Wji5Xvse41j8tVNZrJ+M=;

b=K9LbNvbT86ykkzSLXT3C5Qn4dzducm7eYO7aZONg2ZE9/JsHmbrtAaPIuyJ8EQZCs1

+GuhDVoYX8p+jl5YDGonOiSQDseforI7kUqMGfKowUlPdXJMRTSXi765GIxn+4/DuwtU

rJousD20aCKvFG1W3EejeBSYeOy+w8v90Fo0x72SMhdNQIcu78WnkRca+Vm9/FT+K2av

6Q2vfu0afuZqzDzjZkbFCM/mTQBz3HWyy8/g0LCveumKeLJqGbxZul8a0vNd+FAolORk

xIXSPY68MUT/WX5b405TBL2QhUJK7NkPfFIpticdLZn6/pOJPv3PRDg6C/5DXwcq97a1

Dzqw==

X-Gm-Message-State: AOJu0YzJ2qKNBGe0GIXjInHn/1ofqeBFa2TshuLayg3e/3jqgeF2Xe2F

PpgTOp/tGFbP3lr469Ye3gZrYkBcQ+sSMPqI0Q63qv2qGkp0owJPnfk1sdupp9J8KGZzfoPW4vR

KM2QO0k6DnDFSSfYjqC5tH0urUduqIkVSC6mXHZrsau6tp4gmA8UHlQ==

X-Google-Smtp-Source: AGHT+IHItha9HEhhf5LjIXeog+PbDzZ+2dCUqPLg+QcJ14US/qOIzJ0ettsqWzTuQAAGuX1NHx4LEGNORHCd2RnEmpc=

X-Received: by 2002:a05:6a21:3292:b0:1db:f68a:d943 with SMTP id

adf61e73a8af0-1dbf68ada69mr11506220637.17.1730976024709; Thu, 07 Nov 2024

02:40:24 -0800 (PST)

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Thu, 7 Nov 2024 05:40:24 -0500

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Thu, 7 Nov 2024 02:40:23 -0800

MIME-Version: 1.0

Sender: Nikki Powell

From: Nikki Powell

Date: Thu, 7 Nov 2024 05:40:24 -0500

X-Google-Sender-Auth: YCzkrk4_yZQxzyrijkym9YH6z74

Message-ID:

Subject: Re: nk.ca: Cost Effective SEO Services!!

To: Sales

Content-Type: multipart/alternative; boundary="000000000000115d8e06265043d4"



--000000000000115d8e06265043d4

Content-Type: text/plain; charset="UTF-8"



Hello,



Hope you are healthy and safe!



Would you like to increase the leads/sales generated from your website?



We will offer you high-quality SEO services at unbeatable prices.



We are among the top SEO services provider who can guide your online

business to dominate search engines



We will surely help you grow you business without you having to invest huge

amount of money on SEO.



Please contact us for more information.



Kind Regards,







Nikki Powell! Business Development Executive



--------------------------------------------------------

Note: - Our next conversation will be on my corporate Email ID. If this

is something you are interested, please respond to this email. If this is

not your interest, don't worry, we will not email you again.

[image: beacon]



--000000000000115d8e06265043d4

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




ound-image:initial;background-position:initial;background-size:initial;back=

ground-repeat:initial;background-origin:initial;background-clip:initial;fon=

t-size:12pt;font-family:"Times New Roman","serif"">
n style=3D"font-size:11pt;font-family:Arial,"sans-serif";color:bl=

ack">Hello,
s-serif"">






l;background-position:initial;background-size:initial;background-repeat:ini=

tial;background-origin:initial;background-clip:initial;font-size:12pt;font-=

family:"Times New Roman","serif"">
ize:11pt;font-family:Arial,"sans-serif"">Hope you are healthy and=

safe!






l;background-position:initial;background-size:initial;background-repeat:ini=

tial;background-origin:initial;background-clip:initial;font-size:12pt;font-=

family:"Times New Roman","serif"">
ize:11pt;font-family:Arial,"sans-serif"">Would you like to increa=

se the

leads/sales generated from your website?






l;background-position:initial;background-size:initial;background-repeat:ini=

tial;background-origin:initial;background-clip:initial;font-size:12pt;font-=

family:"Times New Roman","serif"">
ize:11pt;font-family:Arial,"sans-serif"">We will offer you high-q=

uality SEO

services at unbeatable prices.






l;background-position:initial;background-size:initial;background-repeat:ini=

tial;background-origin:initial;background-clip:initial;font-size:12pt;font-=

family:"Times New Roman","serif"">
ize:11pt;font-family:Arial,"sans-serif"">We are among the top SEO=

services provider

who can guide your online business to dominate search engines






l;background-position:initial;background-size:initial;background-repeat:ini=

tial;background-origin:initial;background-clip:initial;font-size:12pt;font-=

family:"Times New Roman","serif"">
ize:11pt;font-family:Arial,"sans-serif"">We will surely help you =

grow you

business without you having to invest huge amount of money on SEO.

p>




l;background-position:initial;background-size:initial;background-repeat:ini=

tial;background-origin:initial;background-clip:initial;font-size:12pt;font-=

family:"Times New Roman","serif"">
ize:11pt;font-family:Arial,"sans-serif"">Please contact us for mo=

re

information.






background-image:initial;background-position:initial;background-size:initia=

l;background-repeat:initial;background-origin:initial;background-clip:initi=

al;font-size:11pt;font-family:Calibri,"sans-serif"">
=3D"font-family:Arial,"sans-serif"">Kind

Regards,






background-image:initial;background-position:initial;background-size:initia=

l;background-repeat:initial;background-origin:initial;background-clip:initi=

al;font-size:11pt;font-family:Calibri,"sans-serif"">
=3D"font-family:Arial,"sans-serif"">=C2=A0






height:106%;font-size:11pt;font-family:Calibri,"sans-serif"">
n style=3D"font-family:Arial,"sans-serif"">Nikki

Powell!=C2=A0
ily:Arial,"sans-serif"">Business Development Executive
=C2=

=A0 =C2=A0=C2=A0=

=C2=A0

n>






height:normal;font-size:11pt;font-family:Calibri,"sans-serif"">
pan style=3D"font-family:Arial,"sans-serif"">--------------------=

------------------------------------






ans-serif";color:black">Note:

line-height:115%;font-family:Arial,"sans-serif";color:black">=C2=

=A0- Our next

conversation will be on my corporate Email ID. If this is something you are

interested, please respond to this email. If this is not your interest, don=

't

worry, we will not email you again.




zVbxBFd-v7_aLv6ZRsxDoymsnebH7ce3TvahT-hpADYGkwFXejEXv6idmvmOvYUBKoFncqqQZSK=

8fxV1LpieJx3uzgg3kn95ATKBK-L9lujAWVyIq1cKy-jMP1U14yuFDRvk_EjqAbnktX6z1k21AE=

prl3Dm2835VoKhbms" width=3D"1" height=3D"1" alt=3D"beacon" style=3D"display=

:none; display:none!important;">



--000000000000115d8e06265043d4--

Web / SEO / App spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 07 Nov 2024 04:53:08 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t90pl-0000000082X-2Brg

for dave@doctor.nl2k.ab.ca;

Thu, 07 Nov 2024 04:37:53 -0700

Resent-From: The Doctor

Resent-Date: Thu, 7 Nov 2024 04:37:51 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f41.google.com ([209.85.218.41]:50533)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1t8wf9-00000000LtB-3sRh

for sales@nk.ca;

Thu, 07 Nov 2024 00:14:25 -0700

Received: by mail-ej1-f41.google.com with SMTP id a640c23a62f3a-a9e8522445dso89650366b.1

for ; Wed, 06 Nov 2024 23:08:47 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=thedigitaltransformation-ca.20230601.gappssmtp.com; s=20230601; t=1730963320; x=1731568120; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=jJjXE799/KotWTE03JIsSq/j4g9Wexwdfz97wMkVVIA=;

b=Lb7khwbb1qlMXxuuGJUfBRemSjueH3Yuw8gvFVktDnhjLnnWnDcApHeqWiAbTe3NRn

cl0w/Fo7osPRLZ/Yptywz7cySLbzvKy0HDuKrnF5s78OPnq668H46zjc7OGE3WFveMsh

BXOhnIdRduybjRK5tB5aZW+eW/Gyfei4WfaXMYb8ax7KrqLLvvcDSgTwd5TNvFgcdU7d

9p09QToQ4Q2d6yMH4gM3NX/esSdr2Zad64U6U8rUozNLnNZ26/fHXuUzBagrYubrxLeA

N7N1Iupzdf8iEwaqa1ZAy+0pTWDtgHXFRL5Y9NZ/lNkfQ3KaIYnaPk/pvEgRcoFdTJyY

EsFA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1730963320; x=1731568120;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=jJjXE799/KotWTE03JIsSq/j4g9Wexwdfz97wMkVVIA=;

b=MDGrXVtUy204ckKjegIXqzNFxDSPXJ6GuRGZaLcOOPY+PUMWywllZ2i1gU7dPzr23a

ItMnOr9+COQ8Yz6qdG+DwkOPtu2ySS72StZGOSkhLmQ50UVGXstoDpFRFgtkOzsAacWm

fnrIWlGbsxVb+zypDBY70Vz3dheI7WlK3v+UD7Nv5ua/XIdkqLnpjW8m+wnF11ulL/0g

UU65w1zw2ITJjJ6Vkj82w3RzqO9v6eTclZiH4Z7zi3zbHL2bMD43WJw/93AcdjoY/eE5

TbnF2q5cts2ZshKRvr64fvZk2p6J8txEmQ/5JmP+ZPRuaY8a6w49idMUtn5hOM9P7Kir

l5nA==

X-Forwarded-Encrypted: i=1; AJvYcCUs+3cuA4Mhc0V2U0lfq9uPcBuzBmV/8Q0Lts6FNeceJpxoD/gBJuqz8yCc2fQW7t3zXNJpaA==@nk.ca

X-Gm-Message-State: AOJu0YzTpIL8libkDf8zrKaUjjFcWlXaJxG3Cvbq+MkYLoQuGZTXqDhD

a3oF+onkMKkgCxvgGIbiLKnNjzKU66BJ4aLnGuOMKUZ8Ws6ZyuvU4Rv63F6ZVRlvATBTVJaX6a0

x2PacYPwbswaARIgI9vBdZ/V5K06W9RP+WZe9MKLDmIdOleNcMSUpEP84

X-Google-Smtp-Source: AGHT+IFjuNWi6GOlvbQ9sNk6t+ODSrlrkpeECBKE/1v4voHsqfzXKBgQ6iiatN6ixTFcyBA+hvRdY5mG2X4LzBjrkfU=

X-Received: by 2002:a05:6512:1288:b0:535:68ab:7fdd with SMTP id

2adb3069b0e04-53d65df270cmr11364263e87.19.1730959491657; Wed, 06 Nov 2024

22:04:51 -0800 (PST)

MIME-Version: 1.0

From: Solomiia Krokis

Date: Wed, 6 Nov 2024 23:04:42 -0700

Message-ID:

Subject: Your web site ROI

To: national@shepherdsguide.ca

Content-Type: multipart/alternative; boundary="0000000000009f14e306264c69be"

Bcc: sales@nk.ca



--0000000000009f14e306264c69be

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello!



My name is Alex Eyeminger, and I represent a marketing agency, The Digital

Transformation, specializing in SEO, paid search advertising, and

comprehensive digital strategies. We offer a unique approach that will help

your business achieve remarkable growth and results. With our expertise,

you'll receive a detailed consultation, a thorough analysis of your current

marketing efforts, and clear recommendations to improve your ROI.



On our website, you=E2=80=99ll find all the information about our services =

and

successful projects we've delivered. We=E2=80=99re confident that we can pr=

ovide

solutions tailored to your business.



Don't miss the opportunity to take your marketing to the next level. Leave

a request for a free consultation today!



Phone: 780-655-9455



Best regards,

Alex Eyeminger



https://thedigitaltransformation.ca/tdt



--=20



Digital Marketing Services



+1 587-930-0788

+1 780-655-9455

marketing@thedigitaltransformation.ca

thedigitaltransformation.ca



Instagram


dg=3D=3D>

| YouTube



--0000000000009f14e306264c69be

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello!

My name is Alex Eyeminger, and I repres=

ent a marketing agency, The Digital Transformation,=C2=A0 specializing in S=

EO, paid search advertising, and comprehensive digital strategies. We offer=

a unique approach that will help your business achieve remarkable growth a=

nd results. With our expertise, you'll receive a detailed consultation,=

a thorough analysis of your current marketing efforts, and clear recommend=

ations to improve your ROI.

On our website, you=E2=80=99ll find all =

the information about our services and successful projects we've delive=

red. We=E2=80=99re confident that we can provide solutions tailored to your=

business.

Don't miss the opportunity to take your marketing to =

the next level. Leave a request for a free consultation today!

Phone=

: 780-655-9455

Best regards, =C2=A0
Alex Eyeminger

=



gnature_prefix">--


ta-smartmail=3D"gmail_signature">

r=3D"ltr" style=3D"margin-left:0pt" align=3D"left">
one;border-collapse:collapse">
8">

r-left:solid #ffffff 1pt;border-right:solid #434343 1.5pt;vertical-align:to=

p;padding:5pt 5pt 5pt 5pt;overflow:hidden">


ght:1.2;margin-top:0pt;margin-bottom:0pt">
t-family:Arial,sans-serif;color:rgb(0,0,0);background-color:transparent;ver=

tical-align:baseline">
low:hidden;width:202px;height:174px">
ontent.com/docsz/AD_4nXfdbks7JRqzetTRn-1VHEXA3btWdv7E7LsY5egXWhSKg3UBrTjxpi=

tY_QSuosR9e10nL9K2O0qk7u37KloTMnONKJwrRQqOylX35hY-olsQ8BNsGPUj3N3PieAtm9K_7=

fTr2ToM_wd6iFbhE2uU-fJGaKSH?key=3DUit81F8JwG6ZBD-wjSCdgw" width=3D"202" hei=

ght=3D"174" style=3D"margin-left:0px;margin-top:0px">


>

t 5pt 5pt 5pt;overflow:hidden">


in-left:14.17322834645671pt;margin-top:0pt;margin-bottom:0pt">
=3D"font-size:14pt;font-family:Arial,sans-serif;color:rgb(67,67,67);font-we=

ight:700;vertical-align:baseline">Digital Marketing Services


ir=3D"ltr" style=3D"line-height:1.56;margin-left:14.17322834645671pt;margin=

-top:6pt;margin-bottom:0pt">
,sans-serif;color:rgb(67,67,67);background-color:transparent;vertical-align=

:baseline">+1 587-930-0788

Arial,sans-serif;color:rgb(67,67,67);background-color:transparent;vertical-=

align:baseline">

sans-serif;color:rgb(67,67,67);background-color:transparent;vertical-align:=

baseline">+1 780-655-9455

rial,sans-serif;color:rgb(67,67,67);background-color:transparent;vertical-a=

lign:baseline">

ans-serif;color:rgb(67,67,67);background-color:transparent;vertical-align:b=

aseline">m

arget=3D"_blank">
;color:rgb(67,67,67);background-color:transparent;vertical-align:baseline">=

arketing@thedigitaltransformation.ca

nt-family:Arial,sans-serif;color:rgb(67,67,67);background-color:transparent=

;vertical-align:baseline">

ormation.ca" target=3D"_blank">
ial,sans-serif;color:rgb(67,67,67);background-color:transparent;vertical-al=

ign:baseline">thedigitaltransformation.ca


e=3D"line-height:1.56;margin-left:14.17322834645671pt;margin-top:6pt;margin=

-bottom:0pt">
igsh=3DMXZvaHNxemFjbHpjdg=3D=3D" target=3D"_blank">
:10pt;font-family:Arial,sans-serif;color:rgb(17,85,204);background-color:tr=

ansparent;font-weight:700;vertical-align:baseline">Instagram

n style=3D"font-size:10pt;font-family:Arial,sans-serif;color:rgb(67,67,67);=

background-color:transparent;font-weight:700;vertical-align:baseline"> |
span>
7,85,204);background-color:transparent;font-weight:700;vertical-align:basel=

ine">YouTube


>




--0000000000009f14e306264c69be--

Bitcoin phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 06 Nov 2024 17:59:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t8qrM-00000000MVR-3XqL

for dave@doctor.nl2k.ab.ca;

Wed, 06 Nov 2024 17:58:52 -0700

Resent-From: The Doctor

Resent-Date: Wed, 6 Nov 2024 17:58:52 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from eco-001.mediawars.net ([210.233.72.2]:51380)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1t8pp1-00000000Jg2-3OaY

for doctor@nl2k.ca;

Wed, 06 Nov 2024 16:52:31 -0700

Received: from localhost.localdomain (localhost [127.0.0.1])

by eco-001.mediawars.net (Postfix) with ESMTP id 3D09A8202A84C

for ; Thu, 7 Nov 2024 08:50:28 +0900 (JST)

Received: by macheker

Received: by eco-001.mediawars.net (Postfix, from userid 1064) id

18DB481D9DBB7; Thu, 7 Nov 2024 08:50:28 +0900 (JST)

To: doctor@nl2k.ca

Subject: [ Kyo-Clue ] Thank you for Apply

X-PHP-Originating-Script: 1064:class-phpmailer.php

Date: Wed, 6 Nov 2024 23:50:28 +0000

From: WordPress

Message-ID: <0c068df27e240c17dedbea7e174035f7@kyo-clue.com>

X-Mailer: PHPMailer 5.2.22 (https://github.com/PHPMailer/PHPMailer)

MIME-Version: 1.0

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: 1. Personal information First name: 🪙 Get Free Bitcoin

Now! Get Details: http://phogoapp.com/Suite/uploads/jzg77b.php?fp3x3lr 🪙

Last name: k1clof



Content analysis details: (7.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[210.233.72.2 listed in will-spam-for-food.eu.org]

[210.233.72.2 listed in will-spam-for-food.eu.org]

[210.233.72.2 listed in will-spam-for-food.eu.org]

[210.233.72.2 listed in will-spam-for-food.eu.org]

[210.233.72.2 listed in will-spam-for-food.eu.org]

[210.233.72.2 listed in will-spam-for-food.eu.org]

[210.233.72.2 listed in will-spam-for-food.eu.org]

[210.233.72.2 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[210.233.72.2 listed in dnsbl.ahbl.org]

[210.233.72.2 listed in dnsbl.ahbl.org]

[210.233.72.2 listed in dnsbl.ahbl.org]

[210.233.72.2 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[210.233.72.2 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[210.233.72.2 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[210.233.72.2 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[210.233.72.2 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.1 TW_PF BODY: Odd Letter Triples with PF

0.1 TW_CZ BODY: Odd Letter Triples with CZ

0.1 TW_FM BODY: Odd Letter Triples with FM

0.1 TW_YP BODY: Odd Letter Triples with YP

0.1 TW_QT BODY: Odd Letter Triples with QT

0.6 J_CHICKENPOX_41 BODY: 4alpha-pock-1alpha

0.1 TW_YY BODY: Odd Letter Triples with YY

0.6 J_CHICKENPOX_14 BODY: 1alpha-pock-4alpha

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 FILL_THIS_FORM Fill in a form with personal information

Subject: {SPAM?} [ Kyo-Clue ] Thank you for Apply



1. Personal information



First name: 🪙 Get Free Bitcoin Now! Get Details: http://phogoapp.com/Suite/uploads/jzg77b.php?fp3x3lr 🪙



Last name: k1clof



Birthdate: 2024-11-07



Gender: Female



Nationality: qteyib







2. Contact information



Email: doctor@nl2k.ca



Skype ID: ipfmy1



Country: aczh6q



City: ebuls3



Phone: 635175447460



Preferred contact method: Email



Home address: [address]







3. Application information



Preferred start date: 2024-11-07



Japanese level: Advanced



Program expectations: fue34w



How did you find out about the Kyo-Clue Program?: Recommended by friend



Do you know anyone else who you think would like to be contacted about Kyo-Clue Program?:

Name: yypf2j

Email Address: doctor@nl2k.ca



--

This e-mail was sent from the inquiry form of Kyo Clue (http://kyo-clue.com/)



Portuguese langange phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 06 Nov 2024 17:59:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1t8qr8-00000000MUw-1MJY

for dave@doctor.nl2k.ab.ca;

Wed, 06 Nov 2024 17:58:38 -0700

Resent-From: The Doctor

Resent-Date: Wed, 6 Nov 2024 17:58:38 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from br.finn1080.com.br ([177.154.191.150]:41364)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1t8pBj-00000000HbS-2Byt

for doctor@edmontonab.ca;

Wed, 06 Nov 2024 16:11:52 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=star-goprofissionalizantes.ao; s=default; h=Content-Transfer-Encoding:

Content-Type:MIME-Version:Message-ID:From:Date:Subject:To:Sender:Reply-To:Cc:

Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender:

Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:

List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;

bh=OJJZX9MGNoosbUBo6Mw0a/SzcJAZn1pKFSn4/KsFa0A=; b=n9qFriZ39I5EWObVqVJ5IQ0BRT

+KbC00rbeG0pBTsxmtnPHA2ie0fqkmxjLIYwEwICIkVmwQESoM5DWOoTSX5wiYAQVvieG5d3Xk+z7

28vJaGxUuT3vCVUN1QzIszH30o23yXJR2c8jmKtD4WIjXl8AyzCDBMxsLB+ernXOTUTXKY9U3DIE1

jwIcdKheMkCC1IASWBW6uHDymlnrOMZl2DIxOkOzyqPwqq0E5zABjW6MIvaLwVNXxKTL4Ez5Vv97B

11pTQcOVS9+t12SvmFSU98fXFnFy79WgUL2Qb6rW1/F3NS4iqQ0iTtiE1LmGzsUy0nbDSORyZ7fGX

oXvW6q1g==;

Received: from stargoprofission by br.finn1080.com.br with local (Exim 4.96.2)

(envelope-from )

id 1t8p9m-0061Uy-2X

for doctor@edmontonab.ca;

Wed, 06 Nov 2024 20:09:46 -0300

To: doctor@edmontonab.ca

Subject: =?UTF-8?B?UHLDqS1JbnNjcmnDp8Ojbw==?=

Date: Wed, 6 Nov 2024 23:09:46 +0000

From: Vertice Ensino

Message-ID:

X-Mailer: PHPMailer 6.9.1 (https://github.com/PHPMailer/PHPMailer)

MIME-Version: 1.0

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - br.finn1080.com.br

X-AntiAbuse: Original Domain - edmontonab.ca

X-AntiAbuse: Originator/Caller UID/GID - [1778 972] / [47 12]

X-AntiAbuse: Sender Address Domain - br.finn1080.com.br

X-Get-Message-Sender-Via: br.finn1080.com.br: authenticated_id: stargoprofission/from_h

X-Authenticated-Sender: br.finn1080.com.br: contato@star-goprofissionalizantes.ao

X-Source:

X-Source-Args:

X-Source-Dir: star-goprofissionalizantes.ao:/public_html

X-Spam_score: 5.1

X-Spam_score_int: 51

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Olá, 💎 You have received a payment $1,462! Click

to Withdraw: http://ahsoverseas.com/files/0dutr7.php?orul3 💎
! Tudo

bem? Recebemos sua Pré-Inscrição no curso: Star-go Cursos Prof [...]



Content analysis details: (5.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[177.154.191.150 listed in will-spam-for-food.eu.org]

[177.154.191.150 listed in will-spam-for-food.eu.org]

[177.154.191.150 listed in will-spam-for-food.eu.org]

[177.154.191.150 listed in will-spam-for-food.eu.org]

[177.154.191.150 listed in will-spam-for-food.eu.org]

[177.154.191.150 listed in will-spam-for-food.eu.org]

[177.154.191.150 listed in will-spam-for-food.eu.org]

[177.154.191.150 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[177.154.191.150 listed in dnsbl.ahbl.org]

[177.154.191.150 listed in dnsbl.ahbl.org]

[177.154.191.150 listed in dnsbl.ahbl.org]

[177.154.191.150 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[177.154.191.150 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[177.154.191.150 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[177.154.191.150 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[177.154.191.150 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

Subject: {SPAM?} =?UTF-8?B?UHLDqS1JbnNjcmnDp8Ojbw==?=



Olá, 💎 You have received a payment $1,462! Click to Withdraw: http://ahsoverseas.com/files/0dutr7.php?orul3 💎 ! Tudo bem?

Recebemos sua Pré-Inscrição no curso: Star-go Cursos Profissionalizantes em Lugando.

Em seguida um de nossos consultores irá contatá-lo para concluir seu processo de inscrição, passar todos os detalhes e tirar todas as dúvidas.

Se desejam falar conosco agora, você pode ligar para (41) 3673-1000 ou enviar uma mensagem para o WhatsApp (41) 98504-1011.

Nosso horário de atendimento é de segunda a sexta, das 12h às 22h, Sábado, das 9h às 16h. Rua Armando Romani, 62, Centro, Piraquara-PR



Atenciosamente,

Equipa Star-Go Profissionalizantes