Web / SEO / App spam from Google Gmail

Posted by Dave Yadallee on Saturday, December 7. 2024

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 07 Dec 2024 14:21:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tK2EC-000000000m6-2Byh

for dave@doctor.nl2k.ab.ca;

Sat, 07 Dec 2024 14:20:40 -0700

Resent-From: The Doctor

Resent-Date: Sat, 7 Dec 2024 14:20:40 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f181.google.com ([209.85.214.181]:49506)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tK0O5-00000000M1l-2oWM

for root@nk.ca;

Sat, 07 Dec 2024 12:22:54 -0700

Received: by mail-pl1-f181.google.com with SMTP id d9443c01a7336-215909152c5so36067985ad.3

for ; Sat, 07 Dec 2024 11:20:51 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1733599245; x=1734204045; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=Wd4iHnKwgj/Nmd/CSA0LOfr68gIhcXYLEqD7/A4QJLI=;

b=UWQIexh7tmJGNGpggvTAqSuLh5uANPcswCxEHc04iqjxjYKksxE9N8O41ooflkfM9W

FdvHjTlER+++Kru5LuLIbtelh0o0qqyx2XhvoWPH62stgwl7VN0O6bK14JxitU60gmaa

SEWPfchlqNklAsK5SK/ltdDVgkzuTrQ/EfOrjHDP1f3vYOnGpwMO4oz3E7134TQ2bA9w

ywUM0LQvi72eGp+3jiSgfCgwlTEEmw8kA86Ag0EDRJvEgjdojcwGxycUp7Ntai3A1aPo

I/hCScx9+X2zRRavLnCjJW2/vgJRBL5qIOgqRcU7yMn2/vGPFqeKcHhGxjB6ZwUfVao1

IDqw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1733599245; x=1734204045;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=Wd4iHnKwgj/Nmd/CSA0LOfr68gIhcXYLEqD7/A4QJLI=;

b=Hd0vVOV0LefPs+xpntF4ztN9bapQ6VpsbrUJCWVrGVZ1HRaZ/yHjdZBHj8XhfxF9VN

kKK2kCh5DmKcP6n4VRaAGUmHVcANolmJqYWiDYF85RsBGCY+lAVmd23jVT2a/vNUR2EF

Oxmq49yiiuQ9Jh3Kqm5/vwUk3mAYrCneT5xjoFJAYdi79yahwT5lvEWxF5u8eBKkmDD+

+7A+fOwhJ/5FusZTuA/NOIyZMy7zCqgC8QG2LQNhnS/L2zdSxWwCph2Gy3b8bz2hV2K2

1/gfi78aLg3gQdhbei3T/2svAv6WX8QDlvOf4SdzRfRNFxdDrYYjQoLIKG0ZYSgG6rvf

T6Hg==

X-Gm-Message-State: AOJu0YwENszFmiI56uaR6/BxRa4nNTHTT/Ii/OYD/md0tbEaCqNmQpJj

wDJM/sdPveRl/wbs8Yqm6u59Bbp0oYcsgqZlpy4Y9zzXcYES4dTLWHb/aZb4

X-Gm-Gg: ASbGncvPk8623GEwYbXFDM6d4mR4Xydpc9fLRI8Vm4dcNjg1afZ9m5m6++RFjmDKJJV

nZn2LPCmO7BeC+6B3qBxgmTEMpxHFb0P7PbEjrn/iwtsDqdhbr71XVIQgRcX4inlgaFtxsRJtLl

7HdSA1SJ/tfcBh+eJ3tqHsp7qjHHHffg1y9ehWOABsaL7XVl/igA9um0PHBG3xCQyPrMaWK7n6X

941kj6b5MZ8T8P2Tnez5s7H5PaRbMhQkKjuHJXavpirHT8sQMOE+PGVgvRLPVcvM0s=

X-Google-Smtp-Source: AGHT+IGpWHy/kUMHBZj7/CSLcyp+Z5iIs9FSTwJzzecqLFhXxra97nhlHE/MV4mamU8eXuPQgu4RVQ==

X-Received: by 2002:a17:902:e84f:b0:216:2e6d:babd with SMTP id d9443c01a7336-2162e6dbd55mr37554545ad.15.1733599244996;

Sat, 07 Dec 2024 11:20:44 -0800 (PST)

Received: from DESKTOPQUD87QB ([2401:4900:3b3f:c696:b04d:10c:43c2:acfb])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-21631118cedsm11894305ad.150.2024.12.07.11.20.43

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Sat, 07 Dec 2024 11:20:44 -0800 (PST)

From: "Poorva"

To:

Subject: Re: Reference Website ?

Date: Sun, 8 Dec 2024 00:50:01 +0530

Message-ID: <2a8a01db48dd$1cad18c0$56074a40$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_2A8B_01DB490B.366554C0"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdtI3PbsOwO28+u6Th2XtiFgZK/qvA==

Content-Language: en-us

This is a multipart message in MIME format.

------=_NextPart_000_2A8B_01DB490B.366554C0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit

Hi, root@nk.ca

I provide complete Built New site Re-design service like:-Re-design Revamp,

Transform web, CMS design, Creative web design, E-Commerce etc.

Kindly tell me your requirement for website redesigning or any Reference

Website, So that we can Send you Past work Details as per your Need.

Thanks,

Poorva,

Ps: - Not interested? A simple "no thank you" works, so I won't follow-up

unnecessarily.

------=_NextPart_000_2A8B_01DB490B.366554C0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">

charset=3Dus-ascii">

Hi, root@nk.ca

I provide complete Built New site Re-design service

like:-Re-design Revamp, Transform web, CMS design, Creative web design,

E-Commerce etc.

style=3D'background:lime;mso-highlight:lime'>Kindly tell

me your requirement for website redesigning or any Reference Website, So =

that

we can Send you Past work Details as per your Need.

Thanks,

Poorva,

Ps: - Not interested? A =

simple

"no thank you" works, so I won’t follow-up =

unnecessarily.

------=_NextPart_000_2A8B_01DB490B.366554C0--

Web / SEO / App spam from Microsoft Outlook

Posted by Dave Yadallee on Saturday, December 7. 2024

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 07 Dec 2024 10:56:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJz1E-00000000Ixs-1XMf

for dave@doctor.nl2k.ab.ca;

Sat, 07 Dec 2024 10:55:04 -0700

Resent-From: The Doctor

Resent-Date: Sat, 7 Dec 2024 10:55:04 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-eastasiaazolkn19010008.outbound.protection.outlook.com ([52.103.64.8]:26608 helo=HK2PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJxA7-000000004BF-24An

for root@nk.ca;

Sat, 07 Dec 2024 08:56:12 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=ftMX9OaFpd6/M38K2INwHRjtwhnfKRQH+faPCcRjNIyT7y5mBoBV1SFjQ43z77hvclf4EQb/5XsFVQZ0X5DGUxe04dpxffWFJ61TTPsjb8xH7fWChxxKbcMNij0zzI6Z9QnKjgkWbreZHPThzbLoj8QSjHKSC60ZyRdEhaBZr6RP5b2A34uHuoDX7SklUSYnZRwPb++1hwhxPxo/W8h4vk+NjfqqmHsl8w9/09upy0pazgunHE+rKeukM9LOJftisOxqfM4x6dyoa+m/TDY08Q76eHM9ypCsfZqy9PHKprjXlAaibog7wq7lKGL6fSHRfFDx65W7lSjS0K6xdA54/g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=azNh/ivvL/c4EUsRgLU4zldsSFHS41cHkiZgHSUAXO8=;

b=RK0S/7lU0GywsxjgMhZsptWS6a1QhfqaFcbObf3Qzbl+46bf3IyqfUHIwDj0yfbgaf3SszcM7iQ3zI9hxM7ekaZ9FC5ABLxUVit9eO4D7ak/LJG7aCd2eOGcE/IIgbtVmh2GHMB8JPENUja2HmAUiOrESS5O4YlLFlrVgUZZyXaFkh/JVQZqOh8NUBtuQgthJwNFxPWpFrwcpp2jbngGK9c77kdq8ardBbAnk+RUcgH7FJHJqKOQm6y9mcUCEGmmY2ZeTKGZrPCrsytZpXNsjG99NmIV7/ARVsqrffaZ8vIG4XIxBB0Hv9AoCYsi0a8v3vkFO/bZtWqB1iXzYFNOTg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=azNh/ivvL/c4EUsRgLU4zldsSFHS41cHkiZgHSUAXO8=;

b=isdbGsNZ9saKDpGT75Sx4jrWWfdZIwPIPV8x3x5W7OODdfxw254Zqla50VrskPVAParnuzWO7Ab5PFxFl8ZWGRT2SLds5okR9Z9ij26c014GFg1I9Ga35q7MtrlPuvLuNZyO3UTxezHbzogdBSUnRHpntixL7JqDln4sOs+AEXzfahhwfCFtMyBN9W2Xao/P2F1NBlnLJuAiPGNEF+R41m2Y2bgcRnM+iTCBVveV2f8ijMDiVbJONtcwGqfR1ZK/Y9oW8nSZQEUwJC6dNJ3PFrhE3En9owdFqBEI9mG+HMnN1VvmLgMTI9Iwvgk1lel92UfiImnrczhs8yvE0pE0GA==

Received: from OS8PR04MB8201.apcprd04.prod.outlook.com (2603:1096:604:28d::12)

by TY0PR04MB6342.apcprd04.prod.outlook.com (2603:1096:400:329::7) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8207.24; Sat, 7 Dec

2024 15:53:45 +0000

Received: from OS8PR04MB8201.apcprd04.prod.outlook.com

([fe80::4dc3:be09:6b11:293]) by OS8PR04MB8201.apcprd04.prod.outlook.com

([fe80::4dc3:be09:6b11:293%3]) with mapi id 15.20.8230.008; Sat, 7 Dec 2024

15:53:45 +0000

From: Iqra Shan

To: Iqra Shan

Subject: Re: Just reply

Thread-Topic: Just reply

Thread-Index:

AQHbQwiDdLrT4vV6eUGiFhg/HgN2JrLPi13kgAAAIziAA4nmJ4ABk+2WgAF5ybSAAwRcpIAAAEiugAHSfd4=

Date: Sat, 7 Dec 2024 15:53:44 +0000

Message-ID:

References:

In-Reply-To:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: OS8PR04MB8201:EE_|TY0PR04MB6342:EE_

x-ms-office365-filtering-correlation-id: 422e7156-55ba-4ff5-ca3b-08dd16d75482

x-microsoft-antispam:

BCL:0;ARA:14566002|15030799003|461199028|7092599003|15080799006|19110799003|8060799006|8062599003|102099032|440099028|3412199025|1710799026;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?SIZ5Boms0IpsuK2bPWz8y4TjdqcSPOIeDXEch24A4T0cmthRzbhoTg7mKi?=

=?iso-8859-1?Q?aZSPOFR9zRNo8Ij3YDaMYzs36WRlIdCPk8I+FyaPRCe6HbZxav8R3wYB4r?=

=?iso-8859-1?Q?yEoa7Z6LTmS/DrvCqUcubbMgqIl9J78JftUqsziQBik5GF4jx6crlJPbET?=

=?iso-8859-1?Q?483IHb813GRbsw/ysGCFUhB/l8CedtyNFbQNz6ebPtPBnT2uLUxDkvOlHt?=

=?iso-8859-1?Q?dN0AFcIRbQsG67QcDpba5Zc8K78YUwCtYukyrkRUTmSwSgJoITBIs2JWaA?=

=?iso-8859-1?Q?iLTqp1teh65fGYp4soPdh5OX0YbsKniI/fh/CVXQDOq46ugVo4zbDFrfFc?=

=?iso-8859-1?Q?hF9vkDbVWsmWn4PAb0hb8B5FeQP1lh8zbXAWO7UQ53I/wPdHZCGI9YEd1c?=

=?iso-8859-1?Q?jHInCOcC9FGJ6zaqCQ+v4/9K845qu2xfLSVEcGn7wDIVu2G/8WvNVNRV+p?=

=?iso-8859-1?Q?Fe3QM3XZjCtGFthFX/UyiJwtuYQpFvPsQ4yHWIs0sH3fIlIlB/9IS8hdn+?=

=?iso-8859-1?Q?/6NPWvztmouhK3dANy1yXYANJxf6NA6OWXUoSObxiNFNpgt5yyOJ9LU/ZR?=

=?iso-8859-1?Q?7HWtihGeIz82XI9hldepbUS2Y/lfQBo+vOnCMxwt/IavYOXQiAsHpzS0hi?=

=?iso-8859-1?Q?Fj0d6YEZsM7PVJw5U6UoGgkgQkSjsohifaHCGnE8h3RsLYw1gxmeWKAss6?=

=?iso-8859-1?Q?Vna1DAhPeL7lOIX0IPuiC4maqx1oGdsyGJMfH9juCywL1BA0cdkJva8jD0?=

=?iso-8859-1?Q?hGO5uPlnW9UMxPdfpJ6Rf/m7pO/pYXX/6rNXBvn5S9g2IhbwbDPNf3OL7y?=

=?iso-8859-1?Q?fGgR7zpMKsDwNIw5moXrgmFvMLjLEADBZto5LNxaTP97TJNvy8gyKJE0fq?=

=?iso-8859-1?Q?1DACr83M2h+u2nHxd5sA1bWjB6v5ObAiOCu50ouFwQS9MIrN2YkIlZIrGx?=

=?iso-8859-1?Q?hbHFmSiWKeWatrdK59sAVi88E8wYlG/UtGvr1fbTbFpabmxoDinnjBfIrR?=

=?iso-8859-1?Q?JrdSVjESoYOBIPx3nm9jGAL4/8fROwyZiQESRXj4ygc3DUdmLvkQqWMq5A?=

=?iso-8859-1?Q?ik1WZfaCpMqa6zd+c+UL+97TJdR18FBHGHcHiWyLN/QX3R5NCzrmFDZl2s?=

=?iso-8859-1?Q?zxcnQd9wARUUG4FT0M1yXshQAGPQU=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?FgGgNu6YboFUd6LsyVrPn18/wCkX3480MivyNtJ7Tcm4ATFm2AkPgrI6kz?=

=?iso-8859-1?Q?AiTq1qC8hUR3I2/w3Mv6fOPQ01kWgwc0MfeNz60MUsGPi3nQTWhR9XwEdK?=

=?iso-8859-1?Q?tiWHc7vT8j28YxdVhYzTCzh1nOH2eMMOISHiq2fL+GGQXokOC2HWT1fu5O?=

=?iso-8859-1?Q?ZJsh5vceVcGF2NHcNbHVT7LrGDXlv5XXkYU/9uLO+kG5ZWnvtIk5QCu7sG?=

=?iso-8859-1?Q?xjEfirkonU606HEDMRdFVZMzTbRHjO0KP/yk7tXiBs2Kbll7ZHcfhpK4n7?=

=?iso-8859-1?Q?MMkS3uRrw7lb5nIbvHXo8NITjz2aq96HekOXJ9PMtVF907CmpoG3MTvrK5?=

=?iso-8859-1?Q?sqM7/cL7th7e1S+0ko5k3ErmCtuMYACrgZxnAE7XfNwOYwHVhbhYeXHOtj?=

=?iso-8859-1?Q?TRFs5rIGRGOx4AZZDp530rqlq4UO7klccG8hnAA2iaAQ6eOUgjlJLuUrgC?=

=?iso-8859-1?Q?97wv3Gbftx4sQZEt6tiHaqRy/yDr0wI+eQllKYC8gxSoMbsfAlonTUMjNs?=

=?iso-8859-1?Q?UXgERubCfXmJHFG73p/A6rFS2p2u7/XTPsbRBcKKB8jabylopYbWMdPa36?=

=?iso-8859-1?Q?AQF9RRQORwmen8ucTrk2+tbGzpZPyVtoigOai73LQOR00dEq5FbAKcDRHj?=

=?iso-8859-1?Q?LYyH7RI+5Fg9EXKTswsTTDCAYWlz7x8oW9dbvFb1Z6Q1MhU/aFcx6LWH1e?=

=?iso-8859-1?Q?qI1k2WOnTojBIpSAaJah93ugFTkMCaUC+b4OzFM19puY8pRcLrB9h9iakM?=

=?iso-8859-1?Q?fi5ZGG/dNWN+hzH27bt2/zY95NBlIxg97QQGZpkeEFE3UYddYBVIc0tBBH?=

=?iso-8859-1?Q?l7qAJN36IO6bMsly23I+OC1Bgg/AQIsA9aUmL8VWVvfx4roqyQH7PgHsSh?=

=?iso-8859-1?Q?ez8qX0mv55BPgj9Gvd3MtfYsS3Rn0zhtrCGv2vkga98SK+aLerwaXI2+gN?=

=?iso-8859-1?Q?gyTxr4fwXtSWPlgTuDy9J4w9mHxLweayyYcoo1IpZDgAqsdTRM4tvqwsMN?=

=?iso-8859-1?Q?gEOJKudDZCXgpiXtMlcQczTEIOtfV7FBRKoCfB9Wgb0xM3eevqp+U0nsUH?=

=?iso-8859-1?Q?8P4S5wsDq0Zm+xkRRPlJ77Bl/h6EDK0xdIJxQrMSI5NsUf17E2X2oLOX5s?=

=?iso-8859-1?Q?Jc+rnB4zRZHLt0Pslmbs8habRIuPQ2Hu8LtTV0rfdjFdibx3J5GSQ+FFAO?=

=?iso-8859-1?Q?0rdXvqARVbuccTGMY5aZVx6+iVEE7difip1+CbT8kS1FmNTfb6VU0RyY6m?=

=?iso-8859-1?Q?050VgD7exV986Wt4sfG4Jat2ZzxYbQjl/YY/uv+ss=3D?=

Content-Type: multipart/alternative;

boundary="_000_OS8PR04MB82012AE04323749643F8A41C9B322OS8PR04MB8201apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: OS8PR04MB8201.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 422e7156-55ba-4ff5-ca3b-08dd16d75482

X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Dec 2024 15:53:44.8073

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TY0PR04MB6342

--_000_OS8PR04MB82012AE04323749643F8A41C9B322OS8PR04MB8201apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Hi,

Just following up regarding my previous email

Thanks,

From: Iqra Shan

Sent: Monday, November 19, 2024 11:14 PM

Subject: #Web redesign#

Hi,

I specialize in website design, development, and redesign.

Services include:

Modern, responsive websites

E-commerce solutions

* WordPress & PHP development

Would you like to see our portfolio & price?

Best regards,

Iqra Shan

--_000_OS8PR04MB82012AE04323749643F8A41C9B322OS8PR04MB8201apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

1">

s-serif; font-size: 12pt; color: rgb(36, 36, 36);">

Hi,

; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(=

36, 36, 36);">

Just following up regarding my previous email

Thanks,

; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(=

36, 36, 36);">

; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(=

36, 36, 36);">

From: Iqra Shan

; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(=

36, 36, 36);">

Sent: Monday, November 19, 2024 11:14 PM

; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(=

36, 36, 36);">

Subject: #Web redesign#

; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(=

36, 36, 36);">

t-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(36, 3=

6, 36);">

Hi,

t-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(36, 3=

6, 36);">

I specialize in website design, development, and redesign.

Services include:

color: rgb(36, 36, 36); direction: ltr; line-height: normal; margin: 0in 0i=

n 8pt;">

Modern, responsive websites
a, sans-serif; font-size: 12pt; color: rgb(36, 36, 36); direction: ltr; lin=

e-height: normal; margin: 0in 0in 8pt;">

E-commerce solutions
-serif; font-size: 12pt; color: rgb(36, 36, 36); direction: ltr; line-heigh=

t: normal; margin: 0in 0in 8pt;">

WordPress & PHP development

t-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(36, 3=

6, 36);">

Would you like to see our portfolio & price?

t-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(36, 3=

6, 36);">

Best regards,

Iqra Shan

--_000_OS8PR04MB82012AE04323749643F8A41C9B322OS8PR04MB8201apcp_--

Telus phish

Posted by Dave Yadallee on Saturday, December 7. 2024

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 07 Dec 2024 08:36:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJwqF-000000001hm-017J

for dave@doctor.nl2k.ab.ca;

Sat, 07 Dec 2024 08:35:35 -0700

Resent-From: The Doctor

Resent-Date: Sat, 7 Dec 2024 08:35:34 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [185.225.226.22] (port=40895 helo=mta.verograss.eu)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJw1D-00000000NP2-0FY6

for doctor@nk.ca;

Sat, 07 Dec 2024 07:43:13 -0700

Date: Sat, 7 Dec 2024 08:12:39 -0600

To: doctor@nk.ca

From: Telus

Subject: Invoice Payment Reminder

Message-ID: <9db5943b408e6a70f921ca3bbf771113@verogroup.eu>

List-Unsubscribe: mailto:bounce757-hCP5ttFMwaPgkoD@verogroup.eu?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1e5c37c035fc6df1847f576a0c0a27250"

Content-Transfer-Encoding: 8bit

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: body { font-family: Arial, sans-serif; margin: 0; padding:

0; background-color: #f4f4f9; } .container { max-width: 600px; margin: 20px

auto; border: 5px solid purple; border-radius: 10px; background-c [...]

Content analysis details: (7.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.225.226.22 listed in dnsbl.ahbl.org]

[185.225.226.22 listed in dnsbl.ahbl.org]

[185.225.226.22 listed in dnsbl.ahbl.org]

[185.225.226.22 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.225.226.22 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.225.226.22 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.225.226.22 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.225.226.22 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.225.226.22 listed in will-spam-for-food.eu.org]

[185.225.226.22 listed in will-spam-for-food.eu.org]

[185.225.226.22 listed in will-spam-for-food.eu.org]

[185.225.226.22 listed in will-spam-for-food.eu.org]

[185.225.226.22 listed in will-spam-for-food.eu.org]

[185.225.226.22 listed in will-spam-for-food.eu.org]

[185.225.226.22 listed in will-spam-for-food.eu.org]

[185.225.226.22 listed in will-spam-for-food.eu.org]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

Subject: {SPAM?} Invoice Payment Reminder

This is a multi-part message in MIME format.

--1e5c37c035fc6df1847f576a0c0a27250

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit

body {

font-family: Arial, sans-serif;

margin: 0;

padding: 0;

background-color: #f4f4f9;

}

.container {

max-width: 600px;

margin: 20px auto;

border: 5px solid purple;

border-radius: 10px;

background-color: #fff;

text-align: center;

overflow: hidden;

}

.header {

background-color: green;

color: white;

padding: 10px 20px;

}

.header img {

max-width: 150px;

}

.content {

padding: 20px;

color: #333;

}

.button {

margin: 20px 0;

}

.button a {

background-color: purple;

color: white;

text-decoration: none;

padding: 10px 20px;

border-radius: 5px;

font-size: 16px;

}

.button a:hover {

background-color: green;

}

.footer {

background-color: purple;

color: white;

padding: 10px;

font-size: 12px;

}

.languages {

display: flex;

justify-content: space-around;

text-align: left;

}

.languages div {

width: 45%;

}

h2 {

color: purple;

}

â€‹Â

Invoice Payment Reminder

Dear Customer,

We noticed that your invoice with Telus remains unpaid. To avoid service interruptions, please ensure payment is made as soon as possible.

If you have already settled this invoice, please disregard this message.

Rappel de paiement de facture

Cher client,

Nous avons remarquÃ© que votre facture chez Telus reste impayÃ©e. Pour Ã©viter toute interruption de service, veuillez effectuer votre paiement dÃ¨s que possible.

Si vous avez dÃ©jÃ rÃ©glÃ© cette facture, veuillez ignorer ce message.

Click Here to Pay | Cliquez ici pour payer

Thank you for choosing Telus!

Merci de choisir Telus !

Â© 2024 Telus Communications. All rights reserved. | Tous droits rÃ©servÃ©s.

.

--1e5c37c035fc6df1847f576a0c0a27250

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit

â€‹Â

Invoice Payment Reminder

Dear Customer,

We noticed that your invoice with Telus remains unpaid. To avoid service interruptions, please ensure payment is made as soon as possible.

If you have already settled this invoice, please disregard this message.

Rappel de paiement de facture

Cher client,

Nous avons remarquÃ© que votre facture chez Telus reste impayÃ©e. Pour Ã©viter toute interruption de service, veuillez effectuer votre paiement dÃ¨s que possible.

Si vous avez dÃ©jÃ rÃ©glÃ© cette facture, veuillez ignorer ce message.

Click Here to Pay | Cliquez ici pour payer

Thank you for choosing Telus!

Merci de choisir Telus !

.

--1e5c37c035fc6df1847f576a0c0a27250--

Web / SEO / App spam from Microsoft Outlook

Posted by Dave Yadallee on Saturday, December 7. 2024

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 07 Dec 2024 08:35:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJwpG-000000001eR-2Ux4

for dave@doctor.nl2k.ab.ca;

Sat, 07 Dec 2024 08:34:34 -0700

Resent-From: The Doctor

Resent-Date: Sat, 7 Dec 2024 08:34:34 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn7nam10olkn2100.outbound.protection.outlook.com ([40.92.40.100]:64353 helo=NAM10-BN7-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJsnY-00000000D7Q-2Ff8

for sales@nk.ca;

Sat, 07 Dec 2024 04:16:50 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=FW2oVQY+rT+Ke2CmzfR8wwJ79us5PCusf69wqufGmTEZAzBOVrVJ/RCL5CgjIihKNLXH+a3jDChyjWRo869qweil0Bbi2y5bD4iRZq/rvg1DiKIGqod+1lu4nUVi75q57MRFuTywlOAczZwrgZYTtwLSfeRPbi/w/6fuvbP8EHtxUwz9kegojAd7l+YD0n8dcYyv/G45MgrCoau/shbxwgrapRsoSeEvmQX0eRAeF8PgduxGRjdBYgnTVsYeTGz53Gu9CxLzAohdiu2/rM4bg7vOctS40NM7oRw26T/kxxNHBl0mY3dP2LikW1rbQDBDmjbJ4aAim9hxc46hrPLaxQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=j6pWb3LSagMsp/k7Iu0F+SUM09fWCpSYBCaB5B0aKEY=;

b=Czfyi4rDEH7UJXjLsYjHHZsoUfGmJI0xAHKk8rsCX59W4HMtwoMeThao5zTNpVWAvClQ9OxOmjXsatpj+a+K4ig3XRLqXINKKDRZbaJYlRNsNLcNXQdANbCj/Gx0LUE9kBd0IFpmINYKvKP4mpp6xuN401Pn05fGeHTR8A0m4PqjErrXz8MUbcvEeJyd7zsGehA94konD8zSxqXwL6T0GrJ9shVic7LU1/QHE99pIfXnENJph7dv/NZ0GnCxOCrX2nlEN1PdRtuyuM82oNqlP4Jjb+dlebPs0EMYLcEhlqq2w3GblXJ7kYNs7D5G04ODHUhDzSne1bV0/yW6CVLs5Q==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=j6pWb3LSagMsp/k7Iu0F+SUM09fWCpSYBCaB5B0aKEY=;

b=NZDS9NHWuCbgBubi3sJ7E5rAu1FhicNOAlJY8cKeJ2BKg5W810RJDlWj8tUKbrbojQaloX+Qnfl8I6ZwZOFavL3MovDGLyfckj4vHAV9Cfrqeh2YT9AMthRaSwzO//19IcBsu9CSnjlGlEa6Bm4RpElTiGPVKANBHicP/BnfsOkcJcvbTVj9NrQCwtVjXlvTvJbna/nxBCWnIlCy9vCcNN5vPde4gLTLYmdLX5OMcCE349E/Kx8s9Z2w3y+cZvEMycn7hHI7qiEIM8YbNAammDwId3mLfUS0uPBUmiU/CoLsw0od/+yOdrMSzZfzrwBLnql9YlEmxtE7+GtRABY6lQ==

Received: from DM4PR84MB1687.NAMPRD84.PROD.OUTLOOK.COM (2603:10b6:8:4a::10) by

PH0PR84MB1646.NAMPRD84.PROD.OUTLOOK.COM (2603:10b6:510:172::15) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8230.17; Sat, 7 Dec

2024 10:56:15 +0000

Received: from DM4PR84MB1687.NAMPRD84.PROD.OUTLOOK.COM

([fe80::a9b1:257d:5b33:4d87]) by DM4PR84MB1687.NAMPRD84.PROD.OUTLOOK.COM

([fe80::a9b1:257d:5b33:4d87%3]) with mapi id 15.20.8230.010; Sat, 7 Dec 2024

10:56:15 +0000

From: Kush Upadhyay

Subject: Re: Quote & Cost..?

Thread-Topic: Quote & Cost..?

Thread-Index: AQHbR77LRl/kYZEKrUuSCp/S6HuCBrLanb6F

Date: Sat, 7 Dec 2024 10:56:13 +0000

Message-ID:

References:

In-Reply-To:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: DM4PR84MB1687:EE_|PH0PR84MB1646:EE_

x-ms-office365-filtering-correlation-id: bf6165a3-c23b-4a19-8631-08dd16adc551

x-microsoft-antispam:

BCL:0;ARA:14566002|8060799006|461199028|15030799003|19110799003|15080799006|8062599003|102099032|3412199025|440099028;

x-microsoft-antispam-message-info:

=?us-ascii?Q?1ygGg7ZBIFfe9C4KT+gRFk8FdNckpSvz7SS+VGQDjCXjZrGOrTvUoRhUbUv5?=

=?us-ascii?Q?oW3RQmVBC1SXb3DFofn+G1BYKTn4+Fb6qyNFaKUpa4QlfNHemregX7sapVvC?=

=?us-ascii?Q?XxuoEuQvpES654Tn+8Ivr/gc5eitN1XLBHzrZ67dJ8AGJ9c3qEtGnJjX8wog?=

=?us-ascii?Q?SN9WLvRRVeB2EFqsy9w0JxvvDY+W/OG3FcfcDP2SCLDSjLN2tAMnxF4N1+rs?=

=?us-ascii?Q?lIaUoZWPOnyazMfiWWweincqWTu/D/i7kVJSrY7MbyX7Js6E7fE0ZQEkfhDR?=

=?us-ascii?Q?WZraLiLj71u/m3eNsBBfCYLNLJk+R2tunJ9mdOjRybTTHgRZpogWnzkTY8K3?=

=?us-ascii?Q?yHUqNOBtJZI2ym3qn3eOBkg93bJZcCQNTeGSQg62Tp04GAU280HHBBe6TVfu?=

=?us-ascii?Q?//d0UTT9o75JQa8N0QZKlywXxtCQIh8gqI+HTAfTNzyoWh0881T7WS0IHx+5?=

=?us-ascii?Q?oXzBWjK3zEX0Uwqu0DuzTvFx9MeydimAW28J2YABVjIXlItWz/QCjDFvTv7g?=

=?us-ascii?Q?aq3bypyzTeee0fz24hOPg1548hXqnFDAiq4WS91qevA2n+xKec/tcnGlfLYU?=

=?us-ascii?Q?X8I+pGa6s3s+pgyEudIbzLF0DwWHPthcsgYMj/IO+NxEXfRQ41dQCv7W6M8Z?=

=?us-ascii?Q?7vB/mSqJ9cJ/jNZsg/+UhSZPsyeY2g4mVFLOVeN5j4E6Uxj/NlMPSuPf1RqW?=

=?us-ascii?Q?eVdlPeKMw78jL9r2RjxIsnYE29s2obZjr4Ghg/7i3YGmOmpGT/Zmrd0/Z28v?=

=?us-ascii?Q?6owgJvYNu/0L5GsHtWyK9IxVfaDi2AyGLZf1m0Ky+CyaFbPyKOt3FIej87oQ?=

=?us-ascii?Q?67T752WSWWHeSAofy4M6Iqa6JA/TM+K7+xjdZmI0h2/ANVXy12LdOv1wVWl+?=

=?us-ascii?Q?Dk5kE/yUfBuos/7auIo4AI2uRAB4HsECFcxYT5tBpXH4ObMkb7/iJVOflbup?=

=?us-ascii?Q?GQGCnY5n28SPizyfMKbOXcsqomNDfzj3PnOiNrontLbYLEARLP+uywTfFGKd?=

=?us-ascii?Q?yB8NmTxbjSbsQ2ulFzlFDI07YM/T+evd+g8n3gQteLvpjiU=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?WtGk3lo45hXoTa+CuVHyOsKSzjWaa15torpFZkzxrhkJ8XX9sBnmKUwzTOlG?=

=?us-ascii?Q?MkVhEY6j5aTSmbTuHCC+SQq7Ekdyvbv4BkTeqwHgeG+1bs0WPoiuQVGPYNQQ?=

=?us-ascii?Q?e2l2yVdMJzInEjqVTZsgIhWS0j1uMhi7f1R+947JJ+dCKasBmE8UeeYVGmHV?=

=?us-ascii?Q?A1+4kW3ZwMceec2zJbwc5DN9ou0iDiMxDSwD3mTNbXdUcGLqmdhPnQKR5s7N?=

=?us-ascii?Q?XO+p0BYRuPbbKN3s5NJrzM7IaqgPrC8OHnJUePpx0lsYeZxDM4ihSemn8Lkb?=

=?us-ascii?Q?MFSNv7tQCxj2QLzN4eY7EnN6OqrmEbpxWe9AJIqprjq1zxyI3P2YfGYGv4tp?=

=?us-ascii?Q?MeC96usg+fJ3+U3leUO4vDNQayWcHzilSeCpzl9+/pripW3D7MbtGIhDqaZa?=

=?us-ascii?Q?d/bs4mlvGfpLJc8gUwhFCj+QPjr/5Da792KtVDHheL9HI1BrumuSRbQJCEv6?=

=?us-ascii?Q?Htvs7BiN2zqq59V3UYEet+2wgBC3bDy5dC35MalATMWvxkoCuHCxVe3hk5za?=

=?us-ascii?Q?Gi097rMwqUXkI/UwziaRCqkfcmpZpmhcv82ufKODgsqcLFFp5mOKrDw1rPiN?=

=?us-ascii?Q?EVmrnIvw9Tq9l6tTKXI7RrGWLA9TJ2q+vpmNmVx3uEq65nt3bXCdipUkxLKe?=

=?us-ascii?Q?CuT3j4di2QSj7dsjGCXPXRRJZ+Y4/5dUh+j4WsobvR1L5rWQo479Mk4xEJdX?=

=?us-ascii?Q?UZ5ITrXXwoR1Q/HCDhwKbLOULvxrq/MbEJLjeQZI4b01W1mv3WGgpqXDndWA?=

=?us-ascii?Q?6ItqV2zrKHkdrl7tt5bRdU/OMvf54nHauo2k1JXTjiyyd+w4WAIap0E7Ro5G?=

=?us-ascii?Q?v3wFSfig2aWxwrb6HfOkcF4KKrULMw3BPSuGMic4Qqb8a8vdkK4t3rHWDqOS?=

=?us-ascii?Q?0FQ//D1FSeTIPyBO4OH0krXjXvjBXpbxOfTCtESdbfJulEKUykZ+HZge9WT2?=

=?us-ascii?Q?xgXgqTFByGPmmhEPlmZGvQjMPqwdfFX3whdByBNqJ054uTCibOmrcqGJspqx?=

=?us-ascii?Q?M0nY2DRp2RUBPYmfrGwVQfcot4JhaKL7jev4A+DaBNhT9yLpDqwt4Ni0XUOJ?=

=?us-ascii?Q?KNjmzGk+j5N+jc3MRjOyVK0O5uriVk1NplWs09uodC0TFu0DmDdZGHU2Y/Ny?=

=?us-ascii?Q?LIgFCoSIcQ9Dt3szvD+JyCCNA+p/1lnJpjSe31NucVV01xKfaVIBc1b1EpRy?=

=?us-ascii?Q?EpOqZ94Vh1C0Jg9Th+mBKazrHefXc+7hNICKM2BjL4QUCWzx/PCjQblSZlc?=

=?us-ascii?Q?=3D?=

Content-Type: multipart/alternative;

boundary="_000_DM4PR84MB168739577AF56041C81C7151D6322DM4PR84MB1687NAMP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: DM4PR84MB1687.NAMPRD84.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: bf6165a3-c23b-4a19-8631-08dd16adc551

X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Dec 2024 10:56:13.4314

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH0PR84MB1646

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello I am still waiting for your reply. Please let me know

if you are interested then so May I send you a Quote?

Content analysis details: (7.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2603:10b6:8:4a:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[40.92.40.100 listed in dnsbl.ahbl.org]

[40.92.40.100 listed in dnsbl.ahbl.org]

[40.92.40.100 listed in dnsbl.ahbl.org]

[40.92.40.100 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2603:10b6:8:4a:0:0:0:10 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2603:10b6:8:4a:0:0:0:10 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2603:10b6:8:4a:0:0:0:10 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2603:10b6:8:4a:0:0:0:10 listed in]

[dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10b6:8:4a:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[40.92.40.100 listed in will-spam-for-food.eu.org]

[40.92.40.100 listed in will-spam-for-food.eu.org]

[40.92.40.100 listed in will-spam-for-food.eu.org]

[40.92.40.100 listed in will-spam-for-food.eu.org]

[40.92.40.100 listed in will-spam-for-food.eu.org]

[40.92.40.100 listed in will-spam-for-food.eu.org]

[40.92.40.100 listed in will-spam-for-food.eu.org]

[40.92.40.100 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.40.100 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.40.100 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[kushupadhyay42(at)outlook.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[kushupadhyay42(at)outlook.com]

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Re: Quote & Cost..?

--_000_DM4PR84MB168739577AF56041C81C7151D6322DM4PR84MB1687NAMP_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

Hello

I am still waiting for your reply.

Please let me know if you are interested then so May I send you a Quote?

Thank you

________________________________

From: Kush Upadhyay

Sent: Friday, December 6, 2024 2:41 PM

Subject: Quote & Cost..?

Hi,

Hope you are doing well.

I was looking at your website and decided to send you an email.

We can help your website rank on the 1st page of Google to drive relevant t=

raffic to your site. I did a deep

analysis of your website and after the analysis I came to a conclusion that=

your website has the capability to get you more business than

you are currently based upon where you are positioned.

Can I send you a price & Quote? If you are interested.

Looking forward your positive response

Regards,

Kush Upadhyay

--_000_DM4PR84MB168739577AF56041C81C7151D6322DM4PR84MB1687NAMP_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

>

8pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri,=

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hello

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; f=

ont-size: 12pt; color: rgb(0, 0, 0);">

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; f=

ont-size: 12pt; color: rgb(0, 0, 0);">

I am still waiting for your reply.

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; f=

ont-size: 12pt; color: rgb(0, 0, 0);">

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; f=

ont-size: 12pt; color: rgb(0, 0, 0);">

Please let me know if you are interested then so May I send you a Quote?=

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; f=

ont-size: 12pt; color: rgb(0, 0, 0);">

Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; f=

ont-size: 12pt; color: rgb(0, 0, 0);">

Thank you

, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; =

font-size: 12pt; color: rgb(0, 0, 0);">

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

yle=3D"font-size:11pt" color=3D"#000000">From: Kush Upadhyay

Sent: Friday, December 6, 2024 2:41 PM

Subject: Quote & Cost..?

ne-height:1.38; background-color:white; margin:0cm 0cm 0.0001pt">

lor:black; line-height:15.3333px">Hi,

color:white; margin:0cm 0cm 0.0001pt">

lor:black; line-height:15.3333px">

color:white; margin:0cm 0cm 0.0001pt">

lor:black; line-height:15.3333px">Hope you are doing well.

color:white; margin:0cm 0cm 0.0001pt">

lor:black; line-height:15.3333px">

color:white; margin:0cm 0cm 0.0001pt">

lor:black; line-height:15.3333px">I was looking at your website and d=

ecided to send you an email.

color:white; margin:0cm 0cm 0.0001pt">

lor:black; line-height:15.3333px">

color:white; margin:0cm 0cm 0.0001pt">

lor:black; line-height:15.3333px">We can help your website rank on the 1st =

page of Google to drive relevant traffic to your site. I did a deep
span>

color:white; margin:0cm 0cm 0.0001pt">

lor:black; line-height:15.3333px">

color:white; margin:0cm 0cm 0.0001pt">

lor:black; line-height:15.3333px">analysis of your website and after the an=

alysis I came to a conclusion that your website has the capability to get &=

nbsp;you more business than

color:white; margin:0cm 0cm 0.0001pt">

lor:black; line-height:15.3333px">

color:white; margin:0cm 0cm 0.0001pt">

lor:black; line-height:15.3333px">you are currently based upon where you ar=

e positioned.

color:white; margin:0cm 0cm 0.0001pt">

lor:black; line-height:15.3333px">

color:white; margin:0cm 0cm 0.0001pt">

lor:rgb(192,0,0); line-height:15.3333px">Can I send you a price & Quote=

? If you are interested.

color:white; margin:0cm 0cm 0.0001pt">

lor:black; line-height:15.3333px">

color:white; margin:0cm 0cm 0.0001pt">

lor:black; line-height:15.3333px">Looking forward your positive response
pan>

color:white; margin:0cm 0cm 0.0001pt">

lor:black; line-height:15.3333px">

color:white; margin:0cm 0cm 0.0001pt">

lor:black; line-height:15.3333px">Regards,

0cm 0.0001pt">

lor:black; line-height:15.3333px">Kush Upadhyay

0cm 8pt">

lor:rgb(0,0,0); line-height:15.3333px">

bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">

--_000_DM4PR84MB168739577AF56041C81C7151D6322DM4PR84MB1687NAMP_--

Instagram followers spam from Google Gmail

Posted by Dave Yadallee on Saturday, December 7. 2024

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Dec 2024 18:26:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJjZf-00000000Nbr-1UL7

for dave@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 18:25:35 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Dec 2024 18:25:35 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f194.google.com ([209.85.222.194]:51494)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJjM2-00000000F7m-0Jl4

for sales@nk.ca;

Fri, 06 Dec 2024 18:11:36 -0700

Received: by mail-qk1-f194.google.com with SMTP id af79cd13be357-7b65f8cb347so343724585a.3

for ; Fri, 06 Dec 2024 17:09:35 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=organicfeedhub-com.20230601.gappssmtp.com; s=20230601; t=1733533769; x=1734138569; darn=nk.ca;

h=mime-version:date:subject:to:from:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=pieyRgEweiFXcMQ8rJTotSwfTu0DQ1VVOJstceopNro=;

b=ajp2v15j1tiWaIdoc/NgbKwNOIl2MBuMqw++cRzyvrB/BD4bB35X1hJcOXG7KUMEdq

djLpKgn03XJafsSTOyyBJBq7QZ6fqU37hJcwMhCEQxqUkJu6WM00QZnRdpO9qK/VOCYX

GrnIga5fVaC574ZTWWHkSlsiEcdSt4kGm0KYU5J1Q/Mld5IZSOpVwlAoBXc46/iV2VMv

UKHbFRIDMAHttKQNQWCqs6feTduU3FbWAVpOjtgjmoM4WFuvXYxzr99zTJCsqpTaajxb

ZHMCb7NALRFNWYMzdBqFQSZN6MU0+CGxZLo1wuTb31ZWJp4a4rmqQQJTL6Kdf5Cxb23K

9mAA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1733533769; x=1734138569;

h=mime-version:date:subject:to:from:message-id:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=pieyRgEweiFXcMQ8rJTotSwfTu0DQ1VVOJstceopNro=;

b=C5PiidjvxHkqFM2oIOfCadszpRuLwLEiIPQ472/3rfDid7uXeUETOCq0P+N35KJQEw

q5PQd1jEIXZBnRQD9v2I0jZTkNA+mpjFhGXVJvlgjQpFGHB6d3bw1yV0nXfW7adlwQGQ

GEN7y9Iv7b3OTEYz5JAk+BN1NLb7ueMt8z8uI13Uw96ubehEFmvGa8QbQcJ0gdIvqcHZ

9HVhpCEd4Kt50d1RTcBbZfPub08ZusA8nIpjv4A9KhshYy2qG0tb8eqnuMnBHtdc4tFS

oLFIk7Etarr8x5M4LHwVC148jbVg/zno7egUfCPEFayv8C+du/+BgPo+VSavrumsvb9A

pmvw==

X-Gm-Message-State: AOJu0YwPl9fDYwNUiBm48dtduFW9yd/FXoXE1biqxYfYw7qy3qF6IRCC

SBENwY2NPgBs4nFs1xnHiBJX58P82z4MIn1jKwvW6TN4qiIufSUgL/dktG2uyKrhNWvfG1Cjmov

kPwg=

X-Gm-Gg: ASbGncvkdK7N5vIZsvsr8XVU1xjwx7L1LSbSAc/WNRL6Gm+OD5FsqbPtfWOr0fkA4pr

ze2vjEij17iZ5Ie1ZN2/I+jizdD0mwFIacGO7AO0QB7lCAafmhmlUnsB5YEgEkWF+g0OnVOAbXm

LttyDw4uCn/BhONNaYflXikqQtpSBBk6ajNS0sYtrQZlsBVxmulJNpdZ8smCFotLAuAvI/yn/5B

QNHD497NwAcuVKYa3yH8lcsH/ZgJ7iL4yAVAaB2wFTCFvnwTPBULD6TEDosfCm6v6D/V3mktf69

RMMfw7IISNSHFWWgPjyzzzH2ILbCCeMwGRRyR3FXzz71IhM1fGLYoY3Uv+Mmsx7iPGrBngs=

X-Google-Smtp-Source: AGHT+IFCp2hbhd9JzGBX+/9Av5gnaLdhfRsRohDkLiM3GpeNDmcWATIPXBBqXkv+Giv8hm7ZKfZIYA==

X-Received: by 2002:a05:620a:44d6:b0:7ac:b04e:34c6 with SMTP id af79cd13be357-7b6bcb4ecdcmr871798885a.50.1733533769314;

Fri, 06 Dec 2024 17:09:29 -0800 (PST)

Received: from 0b39c010-0828-44ed-b173-02c42327c7dc.local (ec2-3-235-10-229.compute-1.amazonaws.com. [3.235.10.229])

by smtp.gmail.com with ESMTPSA id d75a77b69052e-4672978f74asm26926561cf.68.2024.12.06.17.09.27

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 06 Dec 2024 17:09:28 -0800 (PST)

Content-Type: multipart/alternative;

boundary="--_NmP-d46b6cfeb0287761-Part_1"

Message-ID: <0b39c010-0828-44ed-b173-02c42327c7dc@organicfeedhub.com>

From: Mary Brock

To: sales@nk.ca

Subject: @netknowyeg We Can Help

Date: Sat, 07 Dec 2024 01:09:27 +0000

MIME-Version: 1.0

X-Spam_score: 10.0

X-Spam_score_int: 100

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hey @netknowyeg, I recently came across your Instagram page

and I was impressed by the clear and concise contact information you've provided.

It's great to see a business that values transparency and makes it easy for

[...]

Content analysis details: (10.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.222.194 listed in dnsbl.ahbl.org]

[209.85.222.194 listed in dnsbl.ahbl.org]

[209.85.222.194 listed in dnsbl.ahbl.org]

[209.85.222.194 listed in dnsbl.ahbl.org]

[3.235.10.229 listed in dnsbl.ahbl.org]

[3.235.10.229 listed in dnsbl.ahbl.org]

[3.235.10.229 listed in dnsbl.ahbl.org]

[3.235.10.229 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.222.194 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.222.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.222.194 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.222.194 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[3.235.10.229 listed in will-spam-for-food.eu.org]

[3.235.10.229 listed in will-spam-for-food.eu.org]

[3.235.10.229 listed in will-spam-for-food.eu.org]

[3.235.10.229 listed in will-spam-for-food.eu.org]

[3.235.10.229 listed in will-spam-for-food.eu.org]

[3.235.10.229 listed in will-spam-for-food.eu.org]

[3.235.10.229 listed in will-spam-for-food.eu.org]

[3.235.10.229 listed in will-spam-for-food.eu.org]

[209.85.222.194 listed in will-spam-for-food.eu.org]

[209.85.222.194 listed in will-spam-for-food.eu.org]

[209.85.222.194 listed in will-spam-for-food.eu.org]

[209.85.222.194 listed in will-spam-for-food.eu.org]

[209.85.222.194 listed in will-spam-for-food.eu.org]

[209.85.222.194 listed in will-spam-for-food.eu.org]

[209.85.222.194 listed in will-spam-for-food.eu.org]

[209.85.222.194 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.222.194 listed in list.dnswl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: trendgram.io]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.222.194 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} @netknowyeg We Can Help

----_NmP-d46b6cfeb0287761-Part_1

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable

Hey @netknowyeg,

I recently came across your Instagram page and I was =

impressed by the clear and concise contact information you've provided. =

It's great to see a business that values transparency and makes it easy for=

potential customers to reach out to them. Keep up the great work!

I couldn=E2=80=99t help but notice that your Instagram profile =

isn=E2=80=99t getting the recognition it truly deserves. With the =

high-quality content you=E2=80=99re sharing, your account has so much =

untapped potential waiting to be unlocked.

At Trend Gram, we specialize in=

growing Instagram profiles organically, connecting you with real, engaged =

followers who genuinely care about your content. No fake followers, no bots=

, just authentic growth designed to build your credibility and expand your =

influence.

Our clients typically see growth of 3,000 to 8,000 followers =

each month. But this isn=E2=80=99t just about growing numbers, it=E2=80=99s=

about opening doors to exciting opportunities, increasing visibility, and =

building stronger connections with your audience.

Getting started is quick=

& easy, it takes under 2 minutes! www.trendgram.io/netknowyeg https://inst=

.organicfeedhub.com/lt/1125899960603821/NaQ1G61OtjX0GGkoJ9_-k

Explore out the link above to see how we can help transform your Instagram =

presence.

If you have any questions or want to learn more, feel =

complimentary to reach out anytime, I=E2=80=99m happy to help.

Kind Regards,

Mary

--

----_NmP-d46b6cfeb0287761-Part_1

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

Hey @netknowyeg,

I recently came across your =

Instagram page and I was impressed by the clear and concise contact =

information you've provided. It's great to see a business that values =

transparency and makes it easy for potential customers to reach out to them=

. Keep up the great work!

I couldn’t help =

but notice that your Instagram profile isn’t getting the recognition =

it truly deserves. With the high-quality content you’re sharing, your=

account has so much untapped potential waiting to be unlocked.=

At Trend Gram, we specialize in growing Instagram=

profiles organically, connecting you with real, engaged followers who =

genuinely care about your content. No fake followers, no bots, just =

authentic growth designed to build your credibility and expand your =

influence.

Our clients typically see growth of 3,=

000 to 8,000 followers each month. But this isn’t just about growing =

numbers, it’s about opening doors to exciting opportunities, =

increasing visibility, and building stronger connections with your audience=

.

Getting started is quick & easy, it takes under =

2 minutes!
aQ1G61OtjX0GGkoJ9_-k" target=3D"_blank" rel=3D"noopener noreferrer">www.=

trendgram.io/netknowyeg

Explore out the link above to see how=

we can help transform your Instagram presence.

If=

you have any questions or want to learn more, feel complimentary to reach =

out anytime, I’m happy to help.

Kind Regards=

,

Mary

com/signature/images/NaQ1G61OtjX0GGkoJ9_-k.png' =

alt=3D'line'>

----_NmP-d46b6cfeb0287761-Part_1--

Instagram followers spam from Google Gmail

Posted by Dave Yadallee on Saturday, December 7. 2024

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Dec 2024 18:26:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJjZR-00000000NLy-0YkZ

for dave@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 18:25:21 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Dec 2024 18:25:21 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f71.google.com ([209.85.210.71]:44191)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJidh-000000001s2-1XGA

for sales@nk.ca;

Fri, 06 Dec 2024 17:25:45 -0700

Received: by mail-ot1-f71.google.com with SMTP id 46e09a7af769-71d4ecb342bso1725060a34.0

for ; Fri, 06 Dec 2024 16:23:51 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1733531026; x=1734135826; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=C6ROrrYABDMLHSq2WbpjcqEftZkT+2tBKhZ6Mn2v23k=;

b=ZbZ8KfpAriMEzBSRgDFUNpiEwUcXa4YTDCwAxCXXn+Xzl07EOV2O6Xwmk//N9Sji3z

HUxN5OS335gjYkNcy/qOzpp7vlYiSbMVLQhBz8m0L5jThFvWiiz8wYZ5i9iJytbtBDT5

R7wz6ZSE/2D62XN6bqums41gV6HZ1wk8q+S9XBzoO7PMqTWzm/frvkPwXLHC+iSC5HU3

pjM0/mXdr6V8BZE5jeaL2mD253aa/pvTQqjl+MptVSEWeJpbm/XmagDOrSYQMv7M+32f

gDdB2570liI6SC3OcrClv0+/43LUZ5xLQsrWFC1jrD79kkEqq5OvXNvZzkJkaAuP2tgB

5ylg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1733531026; x=1734135826;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=C6ROrrYABDMLHSq2WbpjcqEftZkT+2tBKhZ6Mn2v23k=;

b=lHOp24LY6Zv2UDhyIXLZkDHg/crdKJixhpTwPF0hxE7ZFO8VRDzucrcAibSSxfJwSi

ZCsm2x/MzJZGH4ydMF58D6jq84Fgn3E0EAj7YrUnOSVALCKdIoCfeqClCnGP7K6uLuzH

A72MPMV1mxwCqSLknGt8eQEFeLP33hd6UfHGMaWb64FlkL3K9WnFO5a8O4sZGCjZWm4D

Zd43X7FIQO+PjupkdtUWVlSCpHPUbnMehqhE0zmd+07cKxYDqHaiB8sSJD9ZcRLbzfHz

H+Pu/UaTEMoC/fPWLFmJT+5oDizigzyYi9nW8Qxyl0sscVaGqdzJHl+BW8VjWNRAu2Lw

rSVg==

X-Gm-Message-State: AOJu0YzkOzjNtIH7mCYt2goQDaeZt/TNRdA3r8IzkNRbthcM3P1n/aRS

ZFSEOhbiviuvudJEp0AvLZxybfmwPOOqRIUExP4cmgT+/ir4nOVlMaVHp2vtoODt9fNABZV2EPg

=

X-Google-Smtp-Source: AGHT+IEdwEnfCy/VOSMEVUO4h2BEFgFhI+5xkFohZGHFXlqHhAj5EZPwgKRH3YhNVBvxuPW0C2boMMAg5g==

MIME-Version: 1.0

X-Received: by 2002:a05:6830:3101:b0:71d:6272:8632 with SMTP id

46e09a7af769-71dcf4ac1d7mr2650537a34.4.1733531025823; Fri, 06 Dec 2024

16:23:45 -0800 (PST)

Message-ID:

Date: Sat, 07 Dec 2024 00:23:45 +0000

Subject: netknowyeg, Get More Instagram Followers and Reels Views here

From: tierrativadar@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

X-Spam_score: 6.8

X-Spam_score_int: 68

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi Netknow Internet Service, We are from Instasocial. We found

your Email address on your Instagram page @netknowyeg. We Offers Instagram

Followers, Likes and Views services.

Content analysis details: (6.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

[209.85.210.71 listed in dnsbl.ahbl.org]

[209.85.210.71 listed in dnsbl.ahbl.org]

[209.85.210.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.71 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

[209.85.210.71 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.71 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.71 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[tierrativadar(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} netknowyeg, Get More Instagram Followers and Reels Views here

Hi Netknow Internet Service,

We are from Instasocial. We found your Email address on your Instagram page

@netknowyeg.

We Offers Instagram Followers, Likes and Views services.

The price is:

-$29 USD for 1,000 Instagram Followers and

- $9 USD For Instagram Post Likes.

- $7 USD For Instagram Video Views

Now you have Limited Followers, maybe you are Interested?

Aspiring actors, musicians, and performers may seek a substantial following

to attract attention from industry professionals.

It can serve as a digital portfolio showcasing their talent..

You can See all packages here :

https://bestsocialnet.store/

If you have any questions, feel free to ask them here.

I apologize if this message bothers you,

Also, We have Youtube, Tiktok and Twitter services too, Please check it now.

Thank you,

Regards,

French language rent demand phsh

Posted by Dave Yadallee on Friday, December 6. 2024

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Dec 2024 10:50:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJcRw-00000000M5b-150c

for dave@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 10:49:08 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Dec 2024 10:49:08 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from relayout02-q04.dominioabsoluto.net ([217.116.26.80]:59783)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJbf9-000000006Oo-1Luj

for sales@nk.ca;

Fri, 06 Dec 2024 09:58:47 -0700

Received: from relayout02-redir.dominioabsoluto.net (relayout02-redir.dominioabsoluto.net [217.116.26.75])

by relayout02.dominioabsoluto.net (Postfix) with ESMTP id 4Y4cqB6xwWzlWNl;

Fri, 6 Dec 2024 17:56:38 +0100 (CET)

Received: by relayout02-dsp.dominioabsoluto.net (Postfix, from userid 33)

id 4Y4cq86KQczlWBR; Fri, 6 Dec 2024 17:56:36 +0100 (CET)

Received: from oxserver05 (217-116-26-9.redes.acens.net [217.116.26.9])

(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))

(No client certificate requested)

(Authenticated sender: fonsi_luna.interware.es)

by relayout02-dsp.dominioabsoluto.net (Postfix) with ESMTPSA id 4Y4cbV2sQtzlWBK;

Fri, 6 Dec 2024 17:46:30 +0100 (CET)

Date: Fri, 6 Dec 2024 17:46:30 +0100 (CET)

From: =?UTF-8?Q?AGENCE_IMMOBILI=C3=88RE=2ECA?=

To: "aaa@gmail.com"

Message-ID: <686314396.4712255.1733503590362@acens.webmail.es>

Subject: Dette locative

MIME-Version: 1.0

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

X-Priority: 3

Importance: Normal

X-Mailer: Open-Xchange Mailer v7.10.5-Rev43

X-Originating-IP: 188.164.196.6

X-Originating-Client: open-xchange-appsuite

Bonjour,

Par la pr=C3=A9sente, nous vous mettons en demeure de r=C3=A9gulariser le p=

aiement de votre loyer du mois de D=C3=A9cembre, sous un d=C3=A9lai de 5 jo=

urs.

En effet, conform=C3=A9ment aux termes du contrat de location que vous avez=

sign=C3=A9, le paiement de votre loyer doit intervenir en fin de mois ou d=

=C3=A9but de mois. Nous constatons que ce r=C3=A8glement n'a pas encore =C3=

=A9t=C3=A9 effectu=C3=A9.

Nous vous informons =C3=A9galement que, depuis la mise =C3=A0 jour de nos c=

oordonn=C3=A9es bancaires, le mode de paiement de votre loyer a chang=C3=A9=

. D=C3=A9sormais, nous vous prions d=E2=80=99effectuer le r=C3=A8glement de=

votre loyer par Virement Interac. L=E2=80=99adresse courriel =C3=A0 utilis=

er pour ce virement est la suivante :

gestion.service.locative87@gmail.com

Question secr=C3=A8te: Paiement87 ?

R=C3=A9ponse secr=C3=A8te : Loyer87

A d=C3=A9faut de r=C3=A9gularisation d=E2=80=99ici la date limite, nous ser=

ons contraints de prendre des mesures l=C3=A9gales pour recouvrer la somme =

due. En effet, si aucune solution amiable n=E2=80=99est trouv=C3=A9e dans c=

e d=C3=A9lai, nous nous verrons dans l=E2=80=99obligation de saisir un huis=

sier de justice.

Nous vous remercions de bien vouloir proc=C3=A9der =C3=A0 ce paiement dans =

les plus brefs d=C3=A9lais afin d=E2=80=99=C3=A9viter toute proc=C3=A9dure =

suppl=C3=A9mentaire.

Dans l=E2=80=99attente de votre r=C3=A8glement, nous vous prions d=E2=80=99=

agr=C3=A9er, Madame, Monsieur, l=E2=80=99expression de nos salutations dist=

ingu=C3=A9es.

SERVICE COMPTABLE

Digital Marketing Service spam from Microsoft outlook

Posted by Dave Yadallee on Friday, December 6. 2024

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Dec 2024 08:51:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJabH-0000000034G-2bB2

for dave@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 08:50:39 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Dec 2024 08:50:39 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19012053.outbound.protection.outlook.com ([52.103.74.53]:56212 helo=SEVP216CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJZ7A-00000000N8B-46Rm

for sales@nk.ca;

Fri, 06 Dec 2024 07:15:32 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=MONsP9vt0vhnnHaZRL3Z7TXTbeI+UCq2Gok24kkOaKyjr1qMOOAoQlDRLHvPHd4f0Oe5fS4yvgMyrYkzs9gcI2q7Eg/sqrotuEWNyRY+Tzbx7VeTdb/ciimFiEFeaL4qHVJ/JaaSSIKZI1Nph4kGevbg76SECd/PgYG1Ogm2fOcGCDEKgqUlGFF3GGf+iYb4ubsrNyzoB5OFERhBk3KgNH3DAstkT1vV4EBKNHICOtRYtoYEtXoE+7VLr6tpB17K3OtlA366v+WPH1yL/N7R5cXUar1epMf7jpEWexA0DEDogfJZZIdvjYAYRywfR21uSH+E661a4Dmm9GuNk5JQBg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=wJ/cUFWI0J8r0zep2QsBq0OXsPfBkBsfjIk3FA7MS5g=;

b=yXdmOEzRDPH8NVHGBIZWkfBoRP6J66IipO1uXDLLL/R2IzPD2BWLeeLntixdobgWO39vCMnKEUok1AQgYBU1rBnKX6Sgcho5F1uBOPYmmYsfUUbV6lUVhaDxL2/IGE7ueYKTn69KiYhIEbehW+5VuZdbGCrJPrRI+qBAjk6qgq5g9SGRlLEQaLXjCHtggRxtom+eBbQ/P6sJ/XurlTcXqZxDdhBbf0Tjlb307W2sD4fsaxmywpx6JPJ1mBcllgo95Alnyky+5ydcgiONgYjMLC28qej+rE3O8y5QSy3fd5WZjloEZqyLsNgtQuVgGXynU5KXrmizRtrej4eeOvb4MQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=wJ/cUFWI0J8r0zep2QsBq0OXsPfBkBsfjIk3FA7MS5g=;

b=nSDV1CrjO+dKYjq8e27dwkrFIbdfL7LQ3tpQiZkTdOhNL3M6Xv9nc8zF5nC5umM4b4Dycx/m0OzKk+BFwrdfME90DqM3TomXufXQSjQYmI4mWIZwhf/64481vMMjX0s6PRxuB8vDTtfXfPMNl67+xsjUq8jpm1xPWk0V8jWm5NJYM0sCWj0blxLzJ7iJI/DEJJkAGw1C2/gXLPEKPd3bixgdvanckTQ3MiBjGt7t2G3RZO9KmiM2UnwQ+GC2e7XRFE4nfsObiTkOYr1rGoObvSd1CCrHSgQAZZd1DrVnhXIPZRXwUfENGTKPtMtyqT3c8ShWoVMhml/yKpvwbTJ/Rg==

Received: from SE2P216MB1505.KORP216.PROD.OUTLOOK.COM (2603:1096:101:1e::7) by

SE1P216MB1478.KORP216.PROD.OUTLOOK.COM (2603:1096:101:1d::10) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.8230.11; Fri, 6 Dec 2024 14:12:48 +0000

Received: from SE2P216MB1505.KORP216.PROD.OUTLOOK.COM

([fe80::79ae:3532:d363:1df6]) by SE2P216MB1505.KORP216.PROD.OUTLOOK.COM

([fe80::79ae:3532:d363:1df6%6]) with mapi id 15.20.8230.010; Fri, 6 Dec 2024

14:12:48 +0000

From: vishal rabat

To: vishal rabat

Subject: Re: price list_&#//

Thread-Topic: price list_&#//

Thread-Index: AQHbR+Y8PcK+Luxdy0Kewdy4+jV3LbLZQbiD

Date: Fri, 6 Dec 2024 14:12:48 +0000

Message-ID:

References:

In-Reply-To:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SE2P216MB1505:EE_|SE1P216MB1478:EE_

x-ms-office365-filtering-correlation-id: ad590740-8b9c-4e33-8b74-08dd1600104b

x-microsoft-antispam:

BCL:0;ARA:14566002|15030799003|8062599003|461199028|8060799006|15080799006|37102599003|19110799003|3412199025|440099028|102099032|1710799026;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?Hw+bdeEEcFbWMmmuyT5RxDYwiXcotdnjk9zBi3KRkTj/+9H125WGNJ8R87?=

=?iso-8859-1?Q?xCdgWqx/sEzp2jBFINYwGoZ6xCGIc+zx7PrHpo82O2GR7AGOv43p6yY2J4?=

=?iso-8859-1?Q?+7rVa3K8aX8MIqaSer9/F7i47UN1koFnvpe6l/OOeE2ijO1i3PfP4gPXQg?=

=?iso-8859-1?Q?Buttj0TKfe+uLm+0wuvx1TqJYiE6A2rhpDGYvd5lEsJ48XfzSSrOe4+aiF?=

=?iso-8859-1?Q?ti6C0IO9/Kdxs0xJIrA2aHJpA+3tJPx6FYtAADkwqBR15tjA+qAfv7NUHa?=

=?iso-8859-1?Q?WS/hqZh1QWFrFCNKFNJMrWmQCd+JNZ4CkPHMZjbjp4PZSvrgvvwOmAehWY?=

=?iso-8859-1?Q?X0I9ckt366JU0ARxq4VnB6J6SXsfqDW7xHAcQshrs1nC4eQRtrEJP1glFP?=

=?iso-8859-1?Q?pLxcfTwbe69k/8VaNHiT/eA94OP1oDOfWj1bM0gPYtgBmwetZ+PmxJVvUj?=

=?iso-8859-1?Q?F1QkpbsBfkA77PNev59P6hsJ/62oMvOnH1U3yX22jqZw/SFKX3cRjZ5jMX?=

=?iso-8859-1?Q?laP3irQaAvzytnxR0r6ilBZzkhwt9QcCgHTkCMN7dBHEmBPYTce557C0v6?=

=?iso-8859-1?Q?k1Q0DFFlUBHTnHTnu1q6Q1K6nYp22gHM6vZxTmFkSaTpJxiAva20WYiGRt?=

=?iso-8859-1?Q?dtfWbYFT7ycllxROXIILJlb+YqMzaqS87+jfAGxAHiQxzKKm/JOa/JUZWl?=

=?iso-8859-1?Q?UpwhQTHQsRPgwQxyWpvhIafRBA9olM9YI/xfIWnD90BSd6NJWK+48Am6cP?=

=?iso-8859-1?Q?+Ib8dPuNkFnEJp5FCArJwFHlgUhYnXDoVHtBLx3LNf73dOvJsj7mmRO9tA?=

=?iso-8859-1?Q?GQjt5px6a14r6Ydd5XBwQMN1WUZgco1kSZgRswhEWbbFesYNkdjhFvS3D/?=

=?iso-8859-1?Q?mGKV8cCyvRZEN2Xy6xG5Hfn9f8KrfuSrKTUw/26KhtAzYXyRIC0HpeTZ3C?=

=?iso-8859-1?Q?eVygCthgNRq5tTnuQ2tFaEMNyF2G5cSnu9G5L36djLDwDklK66ip2Oy0ya?=

=?iso-8859-1?Q?wpoA+GVPjnPozWYyRRb9/ibk7NXBEwJlY7ffh8BcCFaT8E0qV+fFd/M+vO?=

=?iso-8859-1?Q?rch1qHt9MLEttGbVQxNAnlgLtasrHGGbwejQzsO86QfwN5MWrAlU+MM//E?=

=?iso-8859-1?Q?NNuBLkoLlCpjJfHL41FkAUL+3NmJ4=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?07LiOb7zETucjUsc+jIvJiYFmqvqdFvPG9R2BcS9+UUBvYI9YGv+9g9g3R?=

=?iso-8859-1?Q?DLxhQ7YovRR8NJUDTWOG1zlpAZLGsr+WCb3uTPXbvNf52BZz10Lar4/BIl?=

=?iso-8859-1?Q?7BcXPVE7HZH/WuMvVUFUeOeXRr1GfWm39wFWblU2Z9oCdPp0QVchlr3bM8?=

=?iso-8859-1?Q?3akTVN4D4NaGJKPVXGiSpYmKQxpRcxMspek1tCUP1zk+rqFoz0eAbeD+eG?=

=?iso-8859-1?Q?Y0jJB5AFcZxGTFL/pO4DVE5/i5iuY2ivjZYLiDtMj8gCkzcU7JYzWRFay5?=

=?iso-8859-1?Q?4Gg9DM2R8cdBNvDvRZ83E7XyVqbm1SzKjrRwrjvjjOnoxS7cfH0pMZLYIK?=

=?iso-8859-1?Q?7l2Kx561E1/qg8S8HuZWqBHhuYRNbysUcICw33/a4Xj/erGQuIk+/IqlNs?=

=?iso-8859-1?Q?jnbgk62teWzOfLl9toXvyV6Jlcva5gaG1Hpmax/2CJS36N46GpMDSizg2a?=

=?iso-8859-1?Q?b9ctFob4rhZmOhpQq6CPTsr3FnDgn0BOO/J8mbsAqRxTLDhonwZwyPA6AF?=

=?iso-8859-1?Q?VRzVjzYDm4FB2yJ7YTQBIxXOwNNzbIAFulxRIkxK5ZgiL9azYQCzLauVtM?=

=?iso-8859-1?Q?8mgp2NbdsBo7L5qnk3ykbenMP0eyZFNw7LRZ8VqG7N8xVIFWSpa4cV6yBl?=

=?iso-8859-1?Q?rczxIPdQ9rvjUOI6kydC0y/detR6NL1wlK8LiWy5LjQC2UfVcN/EksdV/K?=

=?iso-8859-1?Q?zpa9nSoHAfFOWBg/7qrZCp1D8dHSkPABIgrHx6WRaWw1htVPP8Qy7ZirYE?=

=?iso-8859-1?Q?h8JYdBm9gFTO2zJtpE7BfmpqvU6bgEdtn+gBVnxWmZD6oak21YSBiRvpcq?=

=?iso-8859-1?Q?QCHnjpGUCHL40FyOyiU19FEQ/ni+6gX9EnX/+gXe0Fx+3sMAEQdYTMq3o6?=

=?iso-8859-1?Q?296KdMV5hoyZD5tlu/Vvu80G5i8ues0nc6FSuXw789ratJRFnli3LzvLuz?=

=?iso-8859-1?Q?OEF/UdzgwTeKe/O4D1+FEqDEoLvBosZPWIUYU+NGvL6zGfPHIh/K5qq4aP?=

=?iso-8859-1?Q?z2KQyBkSr42n1p47Ht+FTtHbralikcZNtN5Nl8KRwQzDBfua5bymMvDFnJ?=

=?iso-8859-1?Q?71snr643zIk8r97l43C1SfaCF8Zhzin13n2l/Vvy3mSKwqHt2EGaM5SGJH?=

=?iso-8859-1?Q?JhV8C7bLbx+Jy2yu58VXafK5prAUXLtCSzUrLlzwldVNDnfojOkEz3qC8h?=

=?iso-8859-1?Q?QqITfMuOqhjvireD70RT0uxz6Q0dGs9h1Gd5kW8hWugZOzBE1AFp4X8Zc0?=

=?iso-8859-1?Q?YGz/1JTQ+1GzpqpoOPjj4/sc+vch/NkFQGHDJqyO30r+XewqPSNoXnShCc?=

=?iso-8859-1?Q?Y+0uMyHnIuocIiH+N0Z+OKXboA+AL1XLsgMI3QcC5K7yaGc=3D?=

Content-Type: multipart/alternative;

boundary="_000_SE2P216MB15055A009F30CC7893D9D56BB1312SE2P216MB1505KORP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SE2P216MB1505.KORP216.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: ad590740-8b9c-4e33-8b74-08dd1600104b

X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Dec 2024 14:12:48.5616

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SE1P216MB1478

--_000_SE2P216MB15055A009F30CC7893D9D56BB1312SE2P216MB1505KORP_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Hi,

sent you an Email a few days ago in regards to the Digital Marketing Serv=

ice. I didn't get any response back from you.

May I send you a price list & cost? If interested.

Still Waiting..

Thank you,,

--_000_SE2P216MB15055A009F30CC7893D9D56BB1312SE2P216MB1505KORP_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

1">

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hi,

; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Hel=

vetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Hel=

vetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

sent you an Email a few days ago in regards to the Digital Marketing=

Service. I didn't get any response back from you.

; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Hel=

vetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Hel=

vetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

May I send you a price=

list & cost? If interested.

; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Hel=

vetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Hel=

vetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Still Waiting..

; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Hel=

vetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Hel=

vetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Thank you,,

edFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12p=

t; color: rgb(0, 0, 0);">

_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

--_000_SE2P216MB15055A009F30CC7893D9D56BB1312SE2P216MB1505KORP_--

Nigerian Spam from Google Gmail

Posted by Dave Yadallee on Friday, December 6. 2024

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Dec 2024 08:50:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJaaO-0000000030p-2P0D

for dave@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 08:49:44 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Dec 2024 08:49:44 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f41.google.com ([209.85.218.41]:59496)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJWeM-00000000H3h-29gg

for root@nk.ca;

Fri, 06 Dec 2024 04:37:41 -0700

Received: by mail-ej1-f41.google.com with SMTP id a640c23a62f3a-aa549d9dffdso282970466b.2

for ; Fri, 06 Dec 2024 03:35:39 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=thepha-ac-th.20230601.gappssmtp.com; s=20230601; t=1733484933; x=1734089733; darn=nk.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=EfQREcq9Rm9Nsq39iXL+vVsqgu2wh0WW/pb6ltmBwww=;

b=rVEiJznxzt+3A+Ff7SludX0SMlbkBVA6GVyp2iPhz9QXznEozVbwgD6rcgPrCtAJC+

jEfT0kMqaxsI9QPrR+7ACsh9bowY+Mgxs+BO28ILD5TQBaF/kfSQlFwUzERDyGatGWZn

oGVpVwfZSwJyKAmjmE/7dsjy6lJz8zQZr2gfxn97svIif1JZG1LbGorzu5N1Dtc27opJ

tgxNCBTSdH20OnUlPuWG0d5ZL1j/ngEOVRYqGYFGV+19CPWTPTW9CuCG+06EoPptCVr9

rTAeWjd35pyeUbi/zYtBkQheftW2/6Xw1r3uhtkcK5ANPI3Qgnf+1K1Ov1E/kOCJNy4V

sTtA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1733484933; x=1734089733;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=EfQREcq9Rm9Nsq39iXL+vVsqgu2wh0WW/pb6ltmBwww=;

b=iuOCeMPzv0AYabmlrHKiLhV103uq8s0gReCHjok+A6DmxxZGmtPJVS19TLvAgMKnW5

nrRxcFwRSrSGesxdaXxC+x89jV2SpQ/qA+tqrfd1GaHxaoQHZF7AcJ6wYhURsMcvp5Bg

iSiH1mKPlxT4SsPKaarP2sEsHhemzuqWB4I+6iNheuNYIpXZv2UIfRfXukql6/Oc1c9S

BnMQOkxYboywSAnFHabeW/uu/VQzT7+pHapPvLV+pxDUEwPZBnLku+TsvVixPszI/GP2

abiVj+orBX8LPJQQvFudPj7N1TMcWevbOdlXkkVUgCkYTRS+MPUWelXwCmfB1782I1o4

toCQ==

X-Forwarded-Encrypted: i=1; AJvYcCW0es376nlJTcK84r7HdzJ4RnJPC+yE9TK3f3Dt2urKeEZc9VIfZjGmXNcI5pI1qDIEAfxX@nk.ca

X-Gm-Message-State: AOJu0Yxh075DyZXxCXq2+JfcaLzXK5T787sg+7eON4t9BHdeslZq1n6H

gOr629X4EpRqduBZeUjXdJSCmMA7Ap80JCYodzBmW3nP9vudCY9fzNW4UxEjMkgDpNUsnFuRg9M

P9zQp/DlaOV+LoU+jrMbJETtAO2gUxxq3CtVe+A==

X-Gm-Gg: ASbGncsAOeP+kQlpGdLcbMONMwTHxKUhUjYQoyWVakXBkLZF9V3SNn5zA4dtY0IaTDj

R7ZlRzOzTIIbut/lFEoeKOGjhqAPQpkatQRUU

X-Google-Smtp-Source: AGHT+IFYsTjAOVegtlfXDyaFTvaLMtYZ6g/vYtDbMGFFnXDCKGvmcWspy4w8vI35VCBYxeevfS2nBmpX65gi6nvvNVk=

X-Received: by 2002:a17:906:3191:b0:aa6:2d35:3ca8 with SMTP id

a640c23a62f3a-aa639fed7c9mr158303666b.13.1733484932165; Fri, 06 Dec 2024

03:35:32 -0800 (PST)

MIME-Version: 1.0

Reply-To: foreign.settlement@outlook.com

From: Patrick

Date: Fri, 6 Dec 2024 14:35:07 +0300

Message-ID:

Subject: Please accept my sincere apologies for this.

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000009b024306289869e7"

Bcc: root@nk.ca

X-Spam_score: 16.6

X-Spam_score_int: 166

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dear Sir, I am sincerely sorry for the delay in payment for

your winning/inheritance funds. I recently found an error in your payment

file and didn't want to send payment until I was sure that the che [...]

Content analysis details: (16.6 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

[209.85.218.41 listed in dnsbl.ahbl.org]

[209.85.218.41 listed in dnsbl.ahbl.org]

[209.85.218.41 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.218.41 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.218.41 listed in sa-accredit.habeas.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.218.41 listed in sa-trusted.bondedsender.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.218.41 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.218.41 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.218.41 listed in bl.score.senderscore.com]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.0 XFER_LOTSA_MONEY Transfer a lot of money

1.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Please accept my sincere apologies for this.

--0000000000009b024306289869e7

Content-Type: text/plain; charset="UTF-8"

Dear Sir,

I am sincerely sorry for the delay in payment for your winning/inheritance

funds. I recently found an error in your payment file and didn't want to

send payment until I was sure that the cheque would not be returned back by

your bank. On behalf of our Legal Department, I apologise for any

inconvenience or frustration this caused you.

Please allow this letter to serve as our confirmation that we are ready,

willing, and able to ISSUE A CERTIFIED BANK DRAFT IN THE AMOUNT OF

$5,000,000 USD as the first tranche of your payment and to Confirm the Bank

Draft by SWIFT MT-110, upon reconfirmation of your real name.

This Confirmation SWIFT will be sent by the Brussels Swift System, to the

designated Beneficiary banking coordinates, within three banking days of

your request, to be followed by the DELIVERY of the BANK DRAFT by Bank

Bonded Courier.

Government issued ID copy:-

Please accept my sincere apologies for this.

Very truly yours,

Patrick Hovakimian

Commissioner

Foreign Claims Settlement Commission

--0000000000009b024306289869e7

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Dear =C2=A0Sir,
I am sincerely sorry for the delay in p=

ayment for your winning/inheritance funds. I recently found an error in you=

r payment file and didn't want to send payment until I was sure that th=

e cheque would not be returned back by your bank. On behalf of our Legal De=

partment, I apologise for any inconvenience or frustration this caused you.=

=C2=A0
Please allow this letter to serve as our confirmation that we ar=

e ready, willing, and able to ISSUE A CERTIFIED BANK DRAFT IN THE AMOUNT OF=

$5,000,000 USD as the first tranche of your payment and to Confirm the Ban=

k Draft by SWIFT MT-110, upon reconfirmation of your real name.
This Co=

nfirmation SWIFT will be sent by the Brussels Swift System, to the designat=

ed Beneficiary banking coordinates, within three banking days of your reque=

st, to be followed by the DELIVERY of the BANK DRAFT by Bank Bonded Courier=

.
Government issued ID copy:-

Please accept my sincere apologies =

for this.

Very truly yours,

Patrick Hovakimian
>Commissioner
Foreign Claims Settlement Commission

--0000000000009b024306289869e7--

Web / SEO / App spam from Microsoft Outlook

Posted by Dave Yadallee on Friday, December 6. 2024

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Dec 2024 08:50:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJaZr-000000002zx-0a6O

for dave@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 08:49:11 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Dec 2024 08:49:11 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-sn1nam02olkn2073.outbound.protection.outlook.com ([40.92.44.73]:27556 helo=NAM02-SN1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJUOz-00000000B5q-1kD2

for sales@nk.ca;

Fri, 06 Dec 2024 02:14:06 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=wjZXhscInjnC2G0fnyoxsvBWDELvLBzRTBUE56zYS4CzZignOnJafuqD3AX5+gr/jxoydB8bzklhjVni1TwjF0w3XzrHyRS6YDFQwf75tYBuahdpm7NyjZObTp2AwPJStn3t2BlAJ6oP80hJyBYOmUmoSRKrR/3t/FuCTxNR6oJBmDjnocBlXvGa0eXcz0lVg1hb74+xKR344MmQh1Ggmafzi2vSe1mxzb1ISjzOQ/lDoWvTMLQsy+cG06GAIZ7/SieuApEKIEXkk8cWaXkoy3Qy8xaEIX/TRCO+6tU+56a/XRuZtXAc6saKkiqJz5Tk2xnD9+91l96o9Vvf8PRzng==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=XzQgYOpddf7PB55XYa71d1sO9kkvE0zvmQ64Qf1I3d0=;

b=lB0mlwhpf87/qN5VJtJYRxVnDtLRykr5DINVRDEzcSO5LclGUu5Nxgfa33wmoYMoCwpvc+1z5vOSVxlw3Pmk2agJgRT42Kyro5znzW9St1jShEVC1bjy8mnOTvZwI8FhqDlnFSZsb0S77k7MeuFBihrdvS9sVPj9pu9KkLW3EGrww5J/9vzAx1fnqGI1R35qdZCBHQr6pqTfSRIwMo7QKy5EE722Mqqak7kVS/EDwuBEXHgjtElEQKo+sca71WvH7tDiht5QHnx8nwga2nRDhRxQuEr5m0oUqpXdVedXb6XTJTnV14EhRR0hKq+iTvx7fkwKgp73wBD0IZi2PVOvHg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=XzQgYOpddf7PB55XYa71d1sO9kkvE0zvmQ64Qf1I3d0=;

b=Ogkn9hRY2ttRDMBoP218DYiiPVAmOG/b4hvsiY9SRIZpS6KSgsDfcEZ3qJiL7z4AJp7cVl7M6RJzsoDgor0mexmjlYV2Kvk+2aO49Fh1xlz/dzs64LbbDlBD3CfrAEM6XQsMRHNNbZAA8eqT1D49bJU+x4y+27UHHOUYdvTsK2oVd3P3C/Pp4xX+O1GxrVYi6B3tLWAfsJwyl/18pw9PhTD/Z6D1K0tthDKhrpPOYIJ/Y/nYFHnWLpw9XGWModY5YLqG6oCwVfvF46e0JzuOnz05LhRMpaTrihsy5VVleBLp5tMtX/SiWm+PQTddL5/lNznSrRtkwr00hZSgmWtRWQ==

Received: from DM4PR84MB1687.NAMPRD84.PROD.OUTLOOK.COM (2603:10b6:8:4a::10) by

MW5PR84MB1691.NAMPRD84.PROD.OUTLOOK.COM (2603:10b6:303:1c2::11) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8207.17; Fri, 6 Dec

2024 09:11:19 +0000

Received: from DM4PR84MB1687.NAMPRD84.PROD.OUTLOOK.COM

([fe80::a9b1:257d:5b33:4d87]) by DM4PR84MB1687.NAMPRD84.PROD.OUTLOOK.COM

([fe80::a9b1:257d:5b33:4d87%3]) with mapi id 15.20.8230.010; Fri, 6 Dec 2024

09:11:19 +0000

From: Kush Upadhyay

Subject: Quote & Cost..?

Thread-Topic: Quote & Cost..?

Thread-Index: AQHbR77LRl/kYZEKrUuSCp/S6HuCBg==

Date: Fri, 6 Dec 2024 09:11:19 +0000

Message-ID:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: DM4PR84MB1687:EE_|MW5PR84MB1691:EE_

x-ms-office365-filtering-correlation-id: 77e2ff67-3699-44b0-4d8f-08dd15d5f267

x-microsoft-antispam:

BCL:0;ARA:14566002|461199028|8062599003|15080799006|15030799003|8060799006|19110799003|3412199025|440099028|102099032;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?8k6F/xq1KAucu0JbSSigvBitOcNpGBlphv3fOYOPqkaMniU0a2EG2LSpxh?=

=?iso-8859-1?Q?B7QycijLusNkoqwPNTlFgr0ZR00keN404G5W/1x5/zXDFfsLYduCqNZSJ3?=

=?iso-8859-1?Q?7TCTa1C7877hISImZ7i8M2pkQ7Se+Zqlpa+jFfcYJgFTR+2979KPM3yxyO?=

=?iso-8859-1?Q?T0irtmYcRADND9vUbVRKI6ocyJIYP7sizi7jRh0GKEKUrU4CRjEAcHPBVP?=

=?iso-8859-1?Q?/mJdd8zgHPDh3EpUMWruaGlE4rZBc4JqYAjufKmusFYkHofWkdpdr8uP/z?=

=?iso-8859-1?Q?fC0q7lHCxOZjxAhZaNp1m3lIc4c1t8xRJqZTB3uZooPAWVeNu4YtTOw9mK?=

=?iso-8859-1?Q?ImmCTp2MTnBcuC01HHVLzJPfMjrvgKoF5OLJf+P08I1G67fxjG5Fr44L0Z?=

=?iso-8859-1?Q?qO0YRT6j+BAL3CXTd4WhETi62556Xy5Qc0taaDMG3mwH3fOS8uVGwIieVE?=

=?iso-8859-1?Q?Prn7ZwPS7WSs7N3eNiqG0nOR2vgZ/tZZK3FtSeMEfL1ByY/c6qvWC8OJnH?=

=?iso-8859-1?Q?2bkk3i3hWq+O16edlaNkNtPOCpLKo6ErmBw2Ytj5wJKQ58CkQDBCx9jewY?=

=?iso-8859-1?Q?b61lxXA7YXKMYFkxUzauUyh8FzfSiYkOQY2kuLV5RIQH9B9wgk3xx1Qn/Y?=

=?iso-8859-1?Q?OgQ9WmDlubHLmBJpBObcPPztLcDgG0M0l3himqrT4O+fgaQhBSvG8LvdGK?=

=?iso-8859-1?Q?FxZZPjYblU+GHqyBlk+dflIVhkrzG1juMbIwWdtxC/aP/FvBVveL29hk0t?=

=?iso-8859-1?Q?u6bMJBlGjtWJQsT9q14KHy3gO7K0NZZUrjQEssIUG07dxWfVxRiAUz8trS?=

=?iso-8859-1?Q?UJydf6BEVKqDS7UglC4s7Z5iHyh2db1+Dc5ZoAqKKSeV+5dLup3+ZtLto4?=

=?iso-8859-1?Q?pR+Vet/rpeduac8bKxEI2FE/bPeCsZYyZ1w+TKTaLphRdu9bA4nEub62nC?=

=?iso-8859-1?Q?azbfzauN+lTYccYJAiIzXaRbu9hrNWlpbTnlW0OHSWDU/EYLlGicb+4+xY?=

=?iso-8859-1?Q?StWHntsyTc6Gcf33QUqYQ/OiD1OsbcWZGM4gLHzDYn8t1H/mFtzm+d72S+?=

=?iso-8859-1?Q?n2qyhrTBspcSVunnjj8mIdE=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?zzxAaMinR97Ldunn7zB33EUv8sNypUNoOHkwuoMF/c7InqY6MC9AxkKvgd?=

=?iso-8859-1?Q?uglIGjOH0RIL4EBvvS2+ib9S7gvgKWWXfM4815JAnShkF+uqdORI/4mqWX?=

=?iso-8859-1?Q?LADGL/zrucRvrSg3ZxWnVRTPZPDJXGkQOHoDOySrCZBlpXblhoJgFuVFMR?=

=?iso-8859-1?Q?2vLFUJ0Oj7PfM4vUN1JXT4K0s20ZNAANYXOeC7py8VVYaJ/synFRooYDr9?=

=?iso-8859-1?Q?r2ns4iCQLqziMShRQV+93d/qPol0A617BdlPgGjOQuexAVYhUTex/O4LFE?=

=?iso-8859-1?Q?kMOSiXUMr0/SXq1eK4TgW5+X7X5e17du5QkAzK51DRGFRRIHbyL5wgAQt1?=

=?iso-8859-1?Q?DLizUeshg6lUuKBtvY/RRH9xITK/DPEFPdNOVfY252Q5GdL1T6MEqzSFGV?=

=?iso-8859-1?Q?eexNBj6SRWLS3wj+QARjY0VIb/bOzz44fIQ4c8ydwPcN3sXNKPkik6LAQ1?=

=?iso-8859-1?Q?yuDEkYMubLKU0a69ISuRz99VmT/zicj3CuX6epHYbuTDVaODSf/vAhPRwn?=

=?iso-8859-1?Q?LhLoi/S3rxQkFSE9cqIMI69G9Ci04U+GLo7VN+QUsiUEWoAWBxcFf6OE9d?=

=?iso-8859-1?Q?Vx9o2kDdOBeQ4TsVnwN2XvjkNhFK/OYnJtjcbx5Ldn06Oe4X9XrNFJXUbU?=

=?iso-8859-1?Q?Yz+f4SrY01nlVYCqnkTE8kiI7i5VjZFGGZmxN8X62LBtzguM5VFBXA+N2z?=

=?iso-8859-1?Q?zLU7EeMI7eu8VwYDaeR1+qJoYmy6F6dUpjdGG05lPnF35uWD9oKUbYJ0Kx?=

=?iso-8859-1?Q?uHyBbFKPyTtG1zzEabfFB5ojyALqKyak4oWXhyIG786L3NsdT1hHwVTOPM?=

=?iso-8859-1?Q?VQ61vZk0MTDmwjwcCti9KkVrZ8jGE2jbVQ/xG5VDvkXB6ItmpGnjgVCx2+?=

=?iso-8859-1?Q?WGy4fQ3vXu+8R/fE563s4AbJDrRFmJrmvyD8Djrnm2uKdWsdQaXTpn2s0N?=

=?iso-8859-1?Q?u183LOuCMWBXfifI6IUc1897ndkbJh1tLltYDaTt3JtnFOIPhJt9nMOIy4?=

=?iso-8859-1?Q?z3O+ZsfWg7UE9987Ridzfi5G8sBqVf1y6S2k8V4Q0XEBxa1V4PNpetBTft?=

=?iso-8859-1?Q?ah71BkQkgjfzOqk9jXnAkj//JBHNr9QoP75sfm3Jyq8LPVaJuKQ+hVZfdI?=

=?iso-8859-1?Q?gTJxnoo6Jsc9vGbKiRJrmU8IjyXGZxvFKbiFdhze/DPY4Yz8GI0xJeM/dc?=

=?iso-8859-1?Q?MiTePArLiYFVk4CD6kkm1zqLGJm3qYl/rsdbA+bxFtKqwJbsbGo4jro+4x?=

=?iso-8859-1?Q?xkMMl9/+4KgMn9I3NtoYU5nTlxygORYqGnFJfwEancNVNxMxM05gcbQIwn?=

=?iso-8859-1?Q?4kvZTt5j2JZZaTNfCl9pa2BobhQ4/UZG8/skJ9izulvWefI=3D?=

Content-Type: multipart/alternative;

boundary="_000_DM4PR84MB1687A0E856C03EA6482218B2D6312DM4PR84MB1687NAMP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: DM4PR84MB1687.NAMPRD84.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 77e2ff67-3699-44b0-4d8f-08dd15d5f267

X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Dec 2024 09:11:19.5444

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW5PR84MB1691

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi, Hope you are doing well. I was looking at your website

and decided to send you an email.

Content analysis details: (7.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.44.73 listed in dnsbl.ahbl.org]

[40.92.44.73 listed in dnsbl.ahbl.org]

[40.92.44.73 listed in dnsbl.ahbl.org]

[40.92.44.73 listed in dnsbl.ahbl.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.44.73 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.44.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.44.73 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.44.73 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10b6:8:4a:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[40.92.44.73 listed in will-spam-for-food.eu.org]

[40.92.44.73 listed in will-spam-for-food.eu.org]

[40.92.44.73 listed in will-spam-for-food.eu.org]

[40.92.44.73 listed in will-spam-for-food.eu.org]

[40.92.44.73 listed in will-spam-for-food.eu.org]

[40.92.44.73 listed in will-spam-for-food.eu.org]

[40.92.44.73 listed in will-spam-for-food.eu.org]

[40.92.44.73 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.44.73 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[kushupadhyay42(at)outlook.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[kushupadhyay42(at)outlook.com]

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Quote & Cost..?

--_000_DM4PR84MB1687A0E856C03EA6482218B2D6312DM4PR84MB1687NAMP_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Hi,

Hope you are doing well.

I was looking at your website and decided to send you an email.

We can help your website rank on the 1st page of Google to drive relevant t=

raffic to your site. I did a deep

analysis of your website and after the analysis I came to a conclusion that=

your website has the capability to get you more business than

you are currently based upon where you are positioned.

Can I send you a price & Quote? If you are interested.

Looking forward your positive response

Regards,

Kush Upadhyay

--_000_DM4PR84MB1687A0E856C03EA6482218B2D6312DM4PR84MB1687NAMP_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

1">

ne-height: 1.38; background-color: white; margin: 0cm 0cm 0.0001pt;">

color: black; line-height: 15.3333px;">Hi,

nd-color: white; margin: 0cm 0cm 0.0001pt;">

color: black; line-height: 15.3333px;">

nd-color: white; margin: 0cm 0cm 0.0001pt;">

color: black; line-height: 15.3333px;">Hope you are doing well.

nd-color: white; margin: 0cm 0cm 0.0001pt;">

color: black; line-height: 15.3333px;">

nd-color: white; margin: 0cm 0cm 0.0001pt;">

color: black; line-height: 15.3333px;">I was looking at your website =

;and decided to send you an email.

nd-color: white; margin: 0cm 0cm 0.0001pt;">

color: black; line-height: 15.3333px;">

nd-color: white; margin: 0cm 0cm 0.0001pt;">

color: black; line-height: 15.3333px;">We can help your website rank on th=

e 1st page of Google to drive relevant traffic to your site. I did a =

deep

nd-color: white; margin: 0cm 0cm 0.0001pt;">

color: black; line-height: 15.3333px;">

nd-color: white; margin: 0cm 0cm 0.0001pt;">

color: black; line-height: 15.3333px;">analysis of your website and after =

the analysis I came to a conclusion that your website has the capability to=

get you more business than

nd-color: white; margin: 0cm 0cm 0.0001pt;">

color: black; line-height: 15.3333px;">

nd-color: white; margin: 0cm 0cm 0.0001pt;">

color: black; line-height: 15.3333px;">you are currently based upon where =

you are positioned.

nd-color: white; margin: 0cm 0cm 0.0001pt;">

color: black; line-height: 15.3333px;">

nd-color: white; margin: 0cm 0cm 0.0001pt;">

color: rgb(192, 0, 0); line-height: 15.3333px;">Can I send you a price &am=

p; Quote? If you are interested.

nd-color: white; margin: 0cm 0cm 0.0001pt;">

color: black; line-height: 15.3333px;">

nd-color: white; margin: 0cm 0cm 0.0001pt;">

color: black; line-height: 15.3333px;">Looking forward your positive respo=

nse

nd-color: white; margin: 0cm 0cm 0.0001pt;">

color: black; line-height: 15.3333px;">

nd-color: white; margin: 0cm 0cm 0.0001pt;">

color: black; line-height: 15.3333px;">Regards,

0cm 0cm 0.0001pt;">

color: black; line-height: 15.3333px;">Kush Upadhyay

0cm 0cm 8pt;">

color: rgb(0, 0, 0); line-height: 15.3333px;">

Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

--_000_DM4PR84MB1687A0E856C03EA6482218B2D6312DM4PR84MB1687NAMP_--

Web / SEO / App spam from Yahoo! Mail

Posted by Dave Yadallee on Friday, December 6. 2024

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Dec 2024 08:49:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJaZe-000000002yI-2ho0

for dave@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 08:48:58 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Dec 2024 08:48:58 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from sonic302-19.consmr.mail.sg3.yahoo.com ([106.10.242.139]:42900)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJTle-0000000092l-26IE

for support@nk.ca;

Fri, 06 Dec 2024 01:32:59 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1733473851; bh=1nYm0xHNuN4ioFQ9yHERBWaZAwzN8ZM+0QB/UMN9ENE=; h=Date:Subject:From:References:To:In-Reply-To:From:Subject:Reply-To; b=WyfZTUzshyoSCu6naFXGjyJeUw82stan0Jl2r9CtA8+S9nRf50K1IeAIEMsaHa+jqj/H8iIgqRQ9/Jx1KUxuL9YoBy1VgfOXwz+JCDpkMvJLjKobJykZFwjvTjkB+YbbatP64rNCstJ9FalXFdBgvmCR/fZu4RZ0smE2X/oXZegFKKROoIHueXnRorg6IfonJC31zpQN5MxcrtMevloip7HPee076E4qfU8wClRnSkZNEVwOuvPhWBh+RCvbv7XNREujpY6CcBZUkdvT84rsmAPazrANhU4EtQu+BrFx7h1PXyRi7Mx1zdK0ZMiDuvurVDnVTL15GHG3z60+XIa4DQ==

X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1733473851; bh=Bmo21oar924Oz51+cSDVr8PscYdkXVzzUvHP+Qw/VRZ=; h=X-Sonic-MF:Date:Subject:From:To:From:Subject; b=AZRbHT16dkIigMZ2UHhu5Z0SVpucOvAUSQqHwWkGeScTarsfqyygnknN26oJTTHCngAUG4s1y1LCTghfvOejSv6eALGU1PqwF5K2Smj+a+KUUZNpE7cZvGjHZYj8u5hrNQa2FmQkKpEDOKHVWr05St3aBQORC8kyD1x0vzHfnwETAFm0/8cyKs/GUkkN5fL7VyA0t5k+3mz73Ta9wu9RU9TKyybZ0Q7CeUr/CSbd6IFDjq+AtceNQodKUAx9QG309dcsRCMYkNdbu5JDFBsVNRrVFZV6LbJncXgIrmuWR1wUQllijeNu+WftEj8pIDNY18ZMRUMReIqhdEhNg1Crew==

X-YMail-OSG: Z7z2eh0VM1lck3dsUB_r_YeKJDZm6c7I638qF_bh3IFN.sQzvpOgaqWZSc2A81H

4bMkJUaJLcX3vFQ73KDvC0T4DGkiCGU1x_QOwW.H.71Zck8_esvwuhxW_jha4T4T92b4cyhvEBiD

4yZiaLw8gGMhSadH0csPJBWB.98cAFth3zEiLnR9Jb8e1APxl7JrUKae.qSKZOU4qG6omk_9oBsY

whSu8UuHQ.SJobnB9Zp0HVl.N80dnYAuDjdLbBWhJp27CvJVLQGuJcoyl6jrmORNXz2PT.NBmWd4

BHPbOk3WwT_xILw0hHDFg31cAmZqLDQ_ilaSGy.nyX4RJ1ZloHnfa6xa2JpejXIxY.jsGxd51TJ5

dKh3KFOHF5ZHr1tMnIwLEQTl2Phmasl7tIKkCxUOQPXjCsT.rAnGuTXpgGy8QgZvLOdIZxkcDcqG

0eu.5ECbaEuRGvD9mDX0Zk0nBT1pL4dggEvpId15F5CrTf8W7WZrOQ.T7r4K5KOdKMbhfT67NZr_

XO3qZf5f14twKW3Gdt8NUfmsf9reL27QPdV3a0KIFGPHoFKTe0_1be2UsaTtbeW91E2.3w7urUMH

4QQNoefq.1W9cGMCtxhRgjixp25sXR25Dg03YuhZ_sK5Fkv4GWanw4rr07PuKDLUD38xu.Cpyvab

Rz.d_GR.4oi162zCE7qShDx27U75MCyRpsnFktF5c130jTzCsUaZUrwabBL0DR26v8Sd2qka3b1L

rcUj5BFu3BMxbjahsr0CabTBenUwmEv1fIHh2BlN4fRTnIsSEPKtbebMfQA4ZoY5oFbXMMH6RrgD

UiPg2O_WUKkz6dQCazeDN_5QTRdMWpSoNjSfTkmlEFnkLcrGY8he1Kb7ujZ.LXODvlvgtsfgU2yh

bjK5rET_giiKFoN7MOAVDJtq7QPdO2PNyh_TSpZLqr0X4CU0S1tEMG2YCHdp1DKN0vT4YqiWKi7R

Qwx5EDeAamAFxiCC4ZWHt.yLoCXHhmfKO_QKMcGfVxAUZPEAlev1tZcUWYTocFmOflIhr4_Eqb26

_pW1aBL7YAKM8I1geu435DpsMEdnjJ0VQvpVLL420EewFPPQ_Lt4P8F1np6stHXeKHFSHYXXMCeY

fgFJTJHUDvynF0Gsgr4v7t0qmQ_vsnSlyv3ZpWCN7Xwo6PAVWes_6wy_fLQvSnzjq3wk.D2HlIwc

DtFROhWePEMUN6kUHVKIdNdRidh8tfp_BMuQ_vWeOxXbkbD5qOVVbK5dbYPD.27itby7pily1Web

b9hez6D9jnzQeqkXvpMoLENdnjVpBGtWUEwt1WOnFojtZbB44CJ6PBUi.MqHvWIdim41_3nhrQrJ

OjjaTp5AmAcwzb0nfuOFPsholE.Ci_LwmNOr_PPh6y_cCqtGMFBtqNyDqOrN43l60UlmjoKP70mc

R9QkioYcO9PyVhrvq.1ma_hNFEcO05CoYbli2zzGvWUgCEl2gpGhI.9zItHq_KDi3Zl0JS3NzNO9

T5m9MGVdmkKzN15_L6tTQ2SRHQpN4V2zpZBWm7EJ6otR0brn8qCYIh2AmvdILYnOm.uEP34rMmJ0

w3RoVaWIYvrSj8dgege2h2OEnfnAETxCBHwc2hNt_mKkxL.CEbxdUDacXlLcoZW0zft6yWSbtw3q

_y0095Wfa1ww4SV4lHP15p.ifnMr8bKpgRKU5ia9V11ymFd50J6pgAEiylDGYSY2wTmM3fsKmAVs

O1j7LgdWVMYAmFd6tuiHR7APFywBWP_lfPN1LQOXP57gvOlvrysSFQVrZ9YNKjwjvYioXNaY5SDD

46.w7sv856PXc6b3N1v.RH1rCuAYQNb0fy78ifykEOUzrzOg3nMkHDwdXI5VG5knJwdXcXN00YJM

n5UUPeRCBkJyM7J.iseRHZm7ubHcGgDZnzcGUtmD0L63s4bHJjENzncIrrd15sbhlP5ruH3I.1F_

Qxp.OC6BUTigTYCNs9PIaL13edmK_YdFoCdJjZjumZyYw3UcT8R7f._4YSZz286sZNPAc9CclqLE

Z9WLyTB7VlmNJVq0gae6ILDCQPFrhl1RWEjjR5cGM9Tok4SOjVsWRvzGkeHV2uUtUTeWReRd7.yo

yYnteniHN_BDsRbtAxSEyIeADStv8ol93KQVDxdNwJOq0LGlKazLRPm4xZZeZxSt3atttZfoFCqf

AzR0k2WXyHzIPsx4KT3Xrn4Mh7RtF5FPle_Aat0HB0FI5zHT6pUafgpXyTjOAldZk2.IVOFi_ROC

oosWt9GYfjzcrVwer6vcmo4sy2r3NTz3GoBnq2.eQrqbmeBAAeZCwbafzcVFBTC2125JCXBk-

X-Sonic-MF:

X-Sonic-ID: da62483d-8304-40eb-8e19-287171b32c59

Received: from sonic.gate.mail.ne1.yahoo.com by sonic302.consmr.mail.sg3.yahoo.com with HTTP; Fri, 6 Dec 2024 08:30:51 +0000

Received: by hermes--production-sg3-5b7954b588-7n7t7 (Yahoo Inc. Hermes SMTP Server) with ESMTPA ID 10883d54ac0c39a2eb1331f0f1450fc0;

Fri, 06 Dec 2024 08:30:49 +0000 (UTC)

Content-Type: multipart/alternative;

boundary="------------p0Nol0btCt0QJy0HpvYTnrIw"

Message-ID: <6730b140-2feb-454c-bad0-7d782e276d69@yahoo.com>

Date: Fri, 6 Dec 2024 14:02:18 +0530

MIME-Version: 1.0

User-Agent: Mozilla Thunderbird

Subject: =?UTF-8?Q?Re=3A_Christmas_SEO_Offers_=F0=9F=8E=84?=

From: Sanjana

References: <3f14da38-86a4-4a13-ac20-58d635155755@yahoo.com>

Content-Language: en-US

To: undisclosed-recipients: ;

In-Reply-To: <3f14da38-86a4-4a13-ac20-58d635155755@yahoo.com>

X-Mailer: WebService/1.1.23040 mail.backend.jedi.jws.acl:role.jedi.acl.token.atz.jws.hermes.yahoo

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello, I sent you an email a few days ago regarding Digital

marketing Service. Let me know if you are interested, we will send you our

past work detailsCustom SEO Packages, and price list.

Content analysis details: (5.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[106.10.242.139 listed in dnsbl.ahbl.org]

[106.10.242.139 listed in dnsbl.ahbl.org]

[106.10.242.139 listed in dnsbl.ahbl.org]

[106.10.242.139 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[106.10.242.139 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[106.10.242.139 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[106.10.242.139 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[106.10.242.139 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[106.10.242.139 listed in will-spam-for-food.eu.org]

[106.10.242.139 listed in will-spam-for-food.eu.org]

[106.10.242.139 listed in will-spam-for-food.eu.org]

[106.10.242.139 listed in will-spam-for-food.eu.org]

[106.10.242.139 listed in will-spam-for-food.eu.org]

[106.10.242.139 listed in will-spam-for-food.eu.org]

[106.10.242.139 listed in will-spam-for-food.eu.org]

[106.10.242.139 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[106.10.242.139 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[106.10.242.139 listed in sa-accredit.habeas.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[106.10.242.139 listed in sa-trusted.bondedsender.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[106.10.242.139 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[106.10.242.139 listed in bl.score.senderscore.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[sanjanarai57(at)yahoo.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[sanjanarai57(at)yahoo.com]

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} =?UTF-8?Q?Re=3A_Christmas_SEO_Offers_=F0=9F=8E=84?=

This is a multi-part message in MIME format.

--------------p0Nol0btCt0QJy0HpvYTnrIw

Content-Type: text/plain; charset=UTF-8; format=flowed

Content-Transfer-Encoding: 7bit

Hello,

I sent you an email a few days ago regarding Digital marketing Service.

Let me know if you are interested, we will send you our past work

detailsCustom SEO Packages, and price list.

Thanks & Regards,

On 11/20/2024 6:32 PM, Sanjana wrote:

>

> Hi,

>

> I can help your website to get on first page on Google and increase

> the number of leads and sales you are getting from your website.

>

> Let me know if you are interested, then I will send you our SEO

> Packages and price list.

>

> Thanks & Regards,

--------------p0Nol0btCt0QJy0HpvYTnrIw

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit

style="font-size:11.0pt;

font-family:"Calibri","sans-serif";color:#222222;background:white">Hello,

style="font-size:11.0pt;

font-family:"Calibri","sans-serif";color:#222222;background:white">I

sent you

an email a few days ago regarding Digital marketing Service.

style="font-size:11.0pt;

font-family:"Calibri","sans-serif";color:#70AD47;mso-themecolor:accent6;

background:white">Let me know if you are interested, we will send you

our past

work details
style="font-size:11.0pt;font-family:"Calibri","sans-serif";

color:#222222;background:white"> Custom SEO Packages, and price list.

style="font-size:11.0pt;

font-family:"Calibri","sans-serif";color:#222222;background:white">Thanks

&

Regards,

On 11/20/2024 6:32 PM, Sanjana wrote:

cite="mid:3f14da38-86a4-4a13-ac20-58d635155755@yahoo.com">

style="font-family:"Calibri","sans-serif";

color:#222222">Hi,Â

style="font-size:11.0pt;

font-family:"Calibri","sans-serif";color:#222222">I

can help your website to get on first page on Google and

increase the number of leads and sales you are getting from

your website.Â

style="font-size:11.0pt;

font-family:"Calibri","sans-serif";color:#222222">Let

me know if you are interested, then I
lang="EN-IN"

style="font-size:11.0pt;font-family:

"Calibri","sans-serif";color:#00B050">will send you

our SEO Packages and price list.Â

style="font-size:11.0pt;line-height:107%;font-family:"Calibri","sans-serif";

mso-fareast-font-family:Calibri;mso-fareast-theme-font:minor-latin;color:#222222;

mso-ansi-language:EN-US;mso-fareast-language:EN-US;mso-bidi-language:AR-SA">Thanks

& Regards,Â

--------------p0Nol0btCt0QJy0HpvYTnrIw--

Spotify Phish

Posted by Dave Yadallee on Friday, December 6. 2024

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Dec 2024 08:49:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJaZX-000000002y7-28QZ

for dave@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 08:48:51 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Dec 2024 08:48:51 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mda30f.sendnode.com ([185.98.184.15]:30053)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJUcP-00000000BZQ-3qma

for root@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 02:27:42 -0700

X-KumoRef: eyJfQF8iOiJcXF8vIiwicmVjaXBpZW50Ijoicm9vdEBkb2N0b3Iubmwyay5hYi5jYSJ9

DKIM-Signature: v=1; a=rsa-sha256; d=sendnode.com; s=mdkv20200702; c=relaxed/relaxed;

bh=GnULVVPhpZNjacwBeM4m5yf25ub2LvzvY8xOhsxzEtE=;

h=from:from:reply-to:reply-to:subject:subject:date:date:to:to:cc:

references:list-id:list-id:list-help:list-unsubscribe:list-unsubscribe:

list-subscribe:list-post:list-owner:list-archive:list-unsubscribe-post:

list-unsubscribe-post:x-csa-complaints:x-csa-complaints; t=1733477125;

b=YdDJ3rp8KhNkWJSni8glXWS5kZF+hLjvjmoKgCemvrA/S5C83CM6Oc6Wzp11V3aAf4r0OGPy1

6/KPZFitoHPLr3/g7TK8tn02jfq8P0C84yDePbW3oCnURPG4+qLCLCgxc/bx2vGnzXLF1JdK5xH

g2fARdsrG/NQXAT9SK28Hp0CtEcCMzGy8/ol1rvB5R7M0aCmRDmfYqT0p6fTaB6B6XIKtajeVPa

g0wxQ0zjtV+NSOA9YNvbPNQO+8NcQo9o/qcEKEFZavxrTLv9X/ytgGaOArs4Z21q6zMxOMQxqZo

4Guok6QBUqUeRLR7DYknwD0sMV/1+6kExmIu463v0Tvg==;

Received: from unspecified (172.18.0.28)

by mta01.sendnode.com (KumoMTA 172.17.0.1)

with ESMTP id 064ee4e2b3b411ef87fcbc2411142e7d for ;

Fri, 6 Dec 2024 09:25:25 +0000

Mime-Version: 1.0

Date: Fri, 06 Dec 2024 08:58:17 +0100

Message-Id:

From: =?UTF-8?B?0IXRgNC+dGlmeQ==?=

To:

Reply-To:

Subject: =?UTF-8?Q?We_Couldn=E2=80=99t_Process_Your_Payment_=E2=80=93?=

=?UTF-8?Q?_Quick_Action_Needed?=

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Id: <4214.1f0.sendnode.com>

X-Abuse-Id: MTI3LjAuMC4xLTE2OTE2LTQ5Ni0xNTk1ODI2LWViYmdAcWJwZ2JlLmF5Mngubm8ucG4=

X-Sendjob-Id: 448548147

X-Complaints-To:

X-Csa-Complaints:

X-Mailer: Mailingwork

X-Virtual-Mta: default

X-Sender: info@rs.fraunhofer.de

X-Receiver: root@doctor.nl2k.ab.ca

X-Job: 448548147

X-Envid: 16916-496-1595826

X-Rm-Datanode: node90.sendnode.com

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: Quoted-Printable

X-Spam_score: 22.5

X-Spam_score_int: 225

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Ð…Ñ€Ð¾tify Premium Weâ€™re Having Trouble Processing Your

Ð…Ñ€Ð¾tify á¢rÐµmium Ñ€Ð°ÑƒmÐµÕ¸t

Content analysis details: (22.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.98.184.15 listed in dnsbl.ahbl.org]

[185.98.184.15 listed in dnsbl.ahbl.org]

[185.98.184.15 listed in dnsbl.ahbl.org]

[185.98.184.15 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.98.184.15 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.98.184.15 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.98.184.15 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.98.184.15 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.98.184.15 listed in will-spam-for-food.eu.org]

[185.98.184.15 listed in will-spam-for-food.eu.org]

[185.98.184.15 listed in will-spam-for-food.eu.org]

[185.98.184.15 listed in will-spam-for-food.eu.org]

[185.98.184.15 listed in will-spam-for-food.eu.org]

[185.98.184.15 listed in will-spam-for-food.eu.org]

[185.98.184.15 listed in will-spam-for-food.eu.org]

[185.98.184.15 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[185.98.184.15 listed in list.dnswl.org]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: customercheckstatus.165-154-240-2.cprapid.com/165.154.240.2]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 URI_GOOGLE_PROXY Accessing a blacklisted URI or obscuring source of

phish via Google proxy?

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

-0.5 DKIMWL_WL_MED DKIMwl.org - Medium trust sender

Subject: {SPAM?} =?UTF-8?Q?We_Couldn=E2=80=99t_Process_Your_Payment_=E2=80=93?=

=?UTF-8?Q?_Quick_Action_Needed?=

=3D1=2E0">

=D0=85=D1=80=D0=BEtify Premium

We=E2=80=99re Having Trouble Processing Your =D0=85=D1=80=

=D0=BEtify =E1=8F=A2r=D0=B5mium =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t

Hello,

It looks like your =D0=85=D1=80=D0=BEtify =E1=8F=A2r=D0=B5mi=

um =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t didn=E2=80=99t go through=2E Here=E2=80=

=99s what might have happened:

There might be an issue with your b=D0=B0=D5=B8k=2E

Your =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t card has expired=

=2E

Your account doesn=E2=80=99t have enough funds=2E

To ensure uninterrupted access to your playlists and favorit=

e tunes, simply update your payment details=2E It only takes a moment!

mercheckstatus=2E165-154-240-2=2Ecprapid=2Ecom/Review/">Update Now

Let=E2=80=99s get you back to en=

joying the music you love without missing a beat!

Cheers, =D0=85=D1=80=D0=BEtify
p>

hQh5ql_4WH2nILb01PORAjtT8rHAtf2aoNtC1xOTPeAKf38Aaa1dryQ-845268GExKqt0JlId8_=

vKNaLTmb23yeZtk7LO_TPohjnc-B8C7JOmAA=3Ds0-d-e1-ft#http://aro=2Espotify=2Es3=

=2Eamazonaws=2Ecom/newsletter/images/logo_footer=2Epng" alt=3D"Spotify Logo=

">

Get =D0=85=D1=80=D0=BEtify for: iPhone | <=

a href=3D"#">iPad | Android | Other=

Terms of Use | Privacy Polic=

y | Contact

=D0=85=D1=80=D0=BEtify AB, Regeringsgatan 19, 111 53, Stockh=

olm, Sweden

H1Thvzb/7RWw3MmSo3" width=3D"1" height=3D"1" border=3D"0" alt=3D"" style=3D=

"display:none" />

Spotify Phish

Posted by Dave Yadallee on Friday, December 6. 2024

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Dec 2024 08:49:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJaZU-000000002xz-1NlI

for dave@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 08:48:48 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Dec 2024 08:48:48 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mda33b.sendnode.com ([185.98.184.59]:4895)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJUSe-00000000BEP-00oP

for root@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 02:17:25 -0700

X-KumoRef: eyJfQF8iOiJcXF8vIiwicmVjaXBpZW50Ijoicm9vdEBkb2N0b3Iubmwyay5hYi5jYSJ9

DKIM-Signature: v=1; a=rsa-sha256; d=sendnode.com; s=mdkv20200702; c=relaxed/relaxed;

bh=x7bfl5V83iVkdJmMshcR5HuI2ZWbX5v+SYzoItUjQDY=;

h=from:from:reply-to:reply-to:subject:subject:date:date:to:to:cc:

references:list-id:list-id:list-help:list-unsubscribe:list-unsubscribe:

list-subscribe:list-post:list-owner:list-archive:list-unsubscribe-post:

list-unsubscribe-post:x-csa-complaints:x-csa-complaints; t=1733476519;

b=OVoCsnqfgngs8TXusAQ6MlfdOyOet8cAwy6eofJe2PiU45IZLGmvPMBkr0uARivf0iE+XKmjr

UOo7xWYJxSGj8x7ALkMcLi34CqcWKQTZjXn0jJfW3cL5y5/FvYDmO8xsUrnyirpkS0HUMMhdUhM

vZLLFikKB5UBotyvF7vKJprizn+1TfAabqfeUEG5aWr9dcqMmggA9JyyVtRcdv5M2asOvdeJpnC

wdCyqTIAk7pVDmfORfTOcQ64qa3OkZfvsmsDzYnrsbPhrZbO8KvlQjVrrYtWmyOEx0JGVrSeBp/

cAXZtb601tpeJchfhpCeRXtY2jM6Y6V4OxDAzfsh6gRQ==;

Received: from unspecified (172.18.0.23)

by mta02.sendnode.com (KumoMTA 172.17.0.1)

with ESMTP id 9d0731adb3b211efbcc4a605b99bcc65 for ;

Fri, 6 Dec 2024 09:15:19 +0000

Mime-Version: 1.0

Date: Fri, 06 Dec 2024 08:54:11 +0100

Message-Id:

From: =?UTF-8?B?0IXRgNC+dGlmeQ==?=

To:

Reply-To:

Subject: =?UTF-8?Q?We_Couldn=E2=80=99t_Process_Your_Payment_=E2=80=93?=

=?UTF-8?Q?_Quick_Action_Needed?=

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Id: <4214.1f0.sendnode.com>

X-Abuse-Id: MTI3LjAuMC4xLTE2OTE2LTQ5Ni0yMjQ0ODQ0LWViYmdAcWJwZ2JlLmF5Mngubm8ucG4=

X-Sendjob-Id: 448548147

X-Complaints-To:

X-Csa-Complaints:

X-Mailer: Mailingwork

X-Virtual-Mta: default

X-Sender: info@rs.fraunhofer.de

X-Receiver: root@doctor.nl2k.ab.ca

X-Job: 448548147

X-Envid: 16916-496-2244844

X-Rm-Datanode: node13.sendnode.com

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: Quoted-Printable

X-Spam_score: 22.5

X-Spam_score_int: 225

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Ð…Ñ€Ð¾tify Premium Weâ€™re Having Trouble Processing Your

Ð…Ñ€Ð¾tify á¢rÐµmium Ñ€Ð°ÑƒmÐµÕ¸t

Content analysis details: (22.5 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.98.184.59 listed in dnsbl.ahbl.org]

[185.98.184.59 listed in dnsbl.ahbl.org]

[185.98.184.59 listed in dnsbl.ahbl.org]

[185.98.184.59 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.98.184.59 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.98.184.59 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.98.184.59 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.98.184.59 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.98.184.59 listed in will-spam-for-food.eu.org]

[185.98.184.59 listed in will-spam-for-food.eu.org]

[185.98.184.59 listed in will-spam-for-food.eu.org]

[185.98.184.59 listed in will-spam-for-food.eu.org]

[185.98.184.59 listed in will-spam-for-food.eu.org]

[185.98.184.59 listed in will-spam-for-food.eu.org]

[185.98.184.59 listed in will-spam-for-food.eu.org]

[185.98.184.59 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[185.98.184.59 listed in list.dnswl.org]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: customercheckstatus.165-154-240-2.cprapid.com/165.154.240.2]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 URI_GOOGLE_PROXY Accessing a blacklisted URI or obscuring source of

phish via Google proxy?

-0.5 DKIMWL_WL_MED DKIMwl.org - Medium trust sender

Subject: {SPAM?} =?UTF-8?Q?We_Couldn=E2=80=99t_Process_Your_Payment_=E2=80=93?=

=?UTF-8?Q?_Quick_Action_Needed?=

=3D1=2E0">

=D0=85=D1=80=D0=BEtify Premium

We=E2=80=99re Having Trouble Processing Your =D0=85=D1=80=

=D0=BEtify =E1=8F=A2r=D0=B5mium =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t

Hello,

It looks like your =D0=85=D1=80=D0=BEtify =E1=8F=A2r=D0=B5mi=

um =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t didn=E2=80=99t go through=2E Here=E2=80=

=99s what might have happened:

There might be an issue with your b=D0=B0=D5=B8k=2E

Your =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t card has expired=

=2E

Your account doesn=E2=80=99t have enough funds=2E

To ensure uninterrupted access to your playlists and favorit=

e tunes, simply update your payment details=2E It only takes a moment!

mercheckstatus=2E165-154-240-2=2Ecprapid=2Ecom/Review/">Update Now

Let=E2=80=99s get you back to en=

joying the music you love without missing a beat!

Cheers, =D0=85=D1=80=D0=BEtify
p>

hQh5ql_4WH2nILb01PORAjtT8rHAtf2aoNtC1xOTPeAKf38Aaa1dryQ-845268GExKqt0JlId8_=

vKNaLTmb23yeZtk7LO_TPohjnc-B8C7JOmAA=3Ds0-d-e1-ft#http://aro=2Espotify=2Es3=

=2Eamazonaws=2Ecom/newsletter/images/logo_footer=2Epng" alt=3D"Spotify Logo=

">

Get =D0=85=D1=80=D0=BEtify for: iPhone | <=

a href=3D"#">iPad | Android | Other=

Terms of Use | Privacy Polic=

y | Contact

=D0=85=D1=80=D0=BEtify AB, Regeringsgatan 19, 111 53, Stockh=

olm, Sweden

mkmGdQr/ikLzwycpcs" width=3D"1" height=3D"1" border=3D"0" alt=3D"" style=3D=

"display:none" />

Spotify Phish

Posted by Dave Yadallee on Friday, December 6. 2024

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Dec 2024 08:49:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJaZQ-000000002xq-0pBo

for dave@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 08:48:44 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Dec 2024 08:48:44 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mda3cf.sendnode.com ([185.98.184.207]:38057)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJUS1-00000000BCM-0Ud0

for support@nk.ca;

Fri, 06 Dec 2024 02:16:52 -0700

X-KumoRef: eyJfQF8iOiJcXF8vIiwicmVjaXBpZW50Ijoic3VwcG9ydEBuay5jYSJ9

DKIM-Signature: v=1; a=rsa-sha256; d=sendnode.com; s=mdkv20200702; c=relaxed/relaxed;

bh=jqum7/rtqmPA+kBvyUCCLzrOefWTxLE040jR/99zJMw=;

h=from:from:reply-to:reply-to:subject:subject:date:date:to:to:cc:

references:list-id:list-id:list-help:list-unsubscribe:list-unsubscribe:

list-subscribe:list-post:list-owner:list-archive:list-unsubscribe-post:

list-unsubscribe-post:x-csa-complaints:x-csa-complaints; t=1733475986;

b=CtsRTYQ3WZE5l1myDZzM+AlRqxFkqBrstgcIAuTDD/iLsNBoJXshyAAHV2Pfgqfr+Mv32UfwJ

BUL3LygEKVphHrUULtlkSn/pRekSX+WNTEaG4CT8kj4YPzKHGSpmD1sEvrZhzlKPU/9w1r7ONJ7

orGxzSB7Eo1EuIVaoP3PEsC/12GNx9rwAkd4x4DKmNdieMIr4yiHYXj6KNKgsF3+JWXZTY7QkEH

c/ziDETS0pAaTSV9V5ILzNFbHq0wwC/AN3qVj2chIXkuoWF3gnjiAFJMQo/t+skW81yz+kgTs8i

db7EY7ELTzeYn8w124KkimVfObRRHZoLO2xDMIeEBhCQ==;

Received: from unspecified (172.18.0.28)

by mta05.sendnode.com (KumoMTA 172.17.0.1)

with ESMTP id 5f5bcbb3b3b111efbcdfbc2411afc7a8 for ;

Fri, 6 Dec 2024 09:06:26 +0000

Mime-Version: 1.0

Date: Fri, 06 Dec 2024 08:44:07 +0100

Message-Id:

From: =?UTF-8?B?0IXRgNC+dGlmeQ==?=

To:

Reply-To:

Subject: =?UTF-8?Q?We_Couldn=E2=80=99t_Process_Your_Payment_=E2=80=93?=

=?UTF-8?Q?_Quick_Action_Needed?=

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Id: <4214.1ec.sendnode.com>

X-Abuse-Id: MTI3LjAuMC4xLTE2OTE2LTQ5Mi0xMTA0NDg2LWZoY2NiZWdAYXgucG4=

X-Sendjob-Id: 448531730

X-Complaints-To:

X-Csa-Complaints:

X-Mailer: Mailingwork

X-Virtual-Mta: default

X-Sender: info@rs.fraunhofer.de

X-Receiver: support@nk.ca

X-Job: 448531730

X-Envid: 16916-492-1104486

X-Rm-Datanode: node18.sendnode.com

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: Quoted-Printable

X-Spam_score: 27.1

X-Spam_score_int: 271

X-Spam_bar: +++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Ð…Ñ€Ð¾tify Premium Weâ€™re Having Trouble Processing Your

Ð…Ñ€Ð¾tify á¢rÐµmium Ñ€Ð°ÑƒmÐµÕ¸t

Content analysis details: (27.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.98.184.207 listed in dnsbl.ahbl.org]

[185.98.184.207 listed in dnsbl.ahbl.org]

[185.98.184.207 listed in dnsbl.ahbl.org]

[185.98.184.207 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.98.184.207 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.98.184.207 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.98.184.207 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.98.184.207 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.98.184.207 listed in will-spam-for-food.eu.org]

[185.98.184.207 listed in will-spam-for-food.eu.org]

[185.98.184.207 listed in will-spam-for-food.eu.org]

[185.98.184.207 listed in will-spam-for-food.eu.org]

[185.98.184.207 listed in will-spam-for-food.eu.org]

[185.98.184.207 listed in will-spam-for-food.eu.org]

[185.98.184.207 listed in will-spam-for-food.eu.org]

[185.98.184.207 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[185.98.184.207 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[185.98.184.207 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[185.98.184.207 listed in sa-trusted.bondedsender.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: spotuykunde.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: spotuykunde.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[185.98.184.207 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[185.98.184.207 listed in bl.score.senderscore.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 URI_GOOGLE_PROXY Accessing a blacklisted URI or obscuring source of

phish via Google proxy?

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

-0.5 DKIMWL_WL_MED DKIMwl.org - Medium trust sender

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

Subject: {SPAM?} =?UTF-8?Q?We_Couldn=E2=80=99t_Process_Your_Payment_=E2=80=93?=

=?UTF-8?Q?_Quick_Action_Needed?=

=3D1=2E0">

=D0=85=D1=80=D0=BEtify Premium

We=E2=80=99re Having Trouble Processing Your =D0=85=D1=80=

=D0=BEtify =E1=8F=A2r=D0=B5mium =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t

Hello,

It looks like your =D0=85=D1=80=D0=BEtify =E1=8F=A2r=D0=B5mi=

um =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t didn=E2=80=99t go through=2E Here=E2=80=

=99s what might have happened:

There might be an issue with your b=D0=B0=D5=B8k=2E

Your =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t card has expired=

=2E

Your account doesn=E2=80=99t have enough funds=2E

To ensure uninterrupted access to your playlists and favorit=

e tunes, simply update your payment details=2E It only takes a moment!

ykunde=2Ecom/redire=2Ephp">Update Now

Let=E2=80=99s get you back to en=

joying the music you love without missing a beat!

Cheers, =D0=85=D1=80=D0=BEtify
p>

hQh5ql_4WH2nILb01PORAjtT8rHAtf2aoNtC1xOTPeAKf38Aaa1dryQ-845268GExKqt0JlId8_=

vKNaLTmb23yeZtk7LO_TPohjnc-B8C7JOmAA=3Ds0-d-e1-ft#http://aro=2Espotify=2Es3=

=2Eamazonaws=2Ecom/newsletter/images/logo_footer=2Epng" alt=3D"Spotify Logo=

">

Get =D0=85=D1=80=D0=BEtify for: iPhone | <=

a href=3D"#">iPad | Android | Other=

Terms of Use | Privacy Polic=

y | Contact

=D0=85=D1=80=D0=BEtify AB, Regeringsgatan 19, 111 53, Stockh=

olm, Sweden

H48l4dG/pTpre8x9IF" width=3D"1" height=3D"1" border=3D"0" alt=3D"" style=3D=

"display:none" />

Spotify Phish

Posted by Dave Yadallee on Friday, December 6. 2024

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Dec 2024 08:49:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJaZM-000000002xg-3ZfW

for dave@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 08:48:40 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Dec 2024 08:48:40 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mda35b.sendnode.com ([185.98.184.91]:30247)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJUB9-00000000AQJ-2Zdk

for sales@nk.ca;

Fri, 06 Dec 2024 01:59:20 -0700

X-KumoRef: eyJfQF8iOiJcXF8vIiwicmVjaXBpZW50Ijoic2FsZXNAbmsuY2EifQ==

DKIM-Signature: v=1; a=rsa-sha256; d=sendnode.com; s=mdkv20200702; c=relaxed/relaxed;

bh=eESmygVaL0XOMGQIa/g+dIgKC4/BG7j2mQ5kL9nsdqE=;

h=from:from:reply-to:reply-to:subject:subject:date:date:to:to:cc:

references:list-id:list-id:list-help:list-unsubscribe:list-unsubscribe:

list-subscribe:list-post:list-owner:list-archive:list-unsubscribe-post:

list-unsubscribe-post:x-csa-complaints:x-csa-complaints; t=1733475435;

b=G7HQpZwjhLiRD6bKuFPwOLQ1JTn8ggvULSrRspTrsqSdkCOtSr4wREVjJkitMXULZMWqwyhPU

ZUYSYZAiwlp3vrKxfDqizZwZB37DiCSY+Jstu5dRog3+sD3TEEU+X72KNIIP2xFwbfuNYaONSYH

p3C3IfjTPBSSV2Xfj/XhJJzybrk8Q8Q7z/rKvwkv7FYp+I7ouTnk81/HwtWq7oLjpH/pUFIVic5

IfWZ9n2zVnPzY0HzEi2Ark3tBzKa+6bm97qavHSunvmzF5tNdoTTTCaS9dNK4II3i3pA+RaVW5Z

7MEehSTY0ZW0Pjx7gpFUQfrbFYF92BEmFNBGQK8L/hTw==;

Received: from unspecified (172.18.0.22)

by mta02.sendnode.com (KumoMTA 172.17.0.1)

with ESMTP id 16de339eb3b011ef9b2ca605b99bcc65 for ;

Fri, 6 Dec 2024 08:57:15 +0000

Mime-Version: 1.0

Date: Fri, 06 Dec 2024 08:40:53 +0100

Message-Id:

From: =?UTF-8?B?0IXRgNC+dGlmeQ==?=

To:

Reply-To:

Subject: =?UTF-8?Q?We_Couldn=E2=80=99t_Process_Your_Payment_=E2=80=93?=

=?UTF-8?Q?_Quick_Action_Needed?=

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Id: <4214.1ec.sendnode.com>

X-Abuse-Id: MTI3LjAuMC4xLTE2OTE2LTQ5Mi0zMTU4MDItZm55cmZAYXgucG4=

X-Sendjob-Id: 448531730

X-Complaints-To:

X-Csa-Complaints:

X-Mailer: Mailingwork

X-Virtual-Mta: default

X-Sender: info@rs.fraunhofer.de

X-Receiver: sales@nk.ca

X-Job: 448531730

X-Envid: 16916-492-315802

X-Rm-Datanode: node18.sendnode.com

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: Quoted-Printable

X-Spam_score: 26.9

X-Spam_score_int: 269

X-Spam_bar: ++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Ð…Ñ€Ð¾tify Premium Weâ€™re Having Trouble Processing Your

Ð…Ñ€Ð¾tify á¢rÐµmium Ñ€Ð°ÑƒmÐµÕ¸t

Content analysis details: (26.9 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.98.184.91 listed in dnsbl.ahbl.org]

[185.98.184.91 listed in dnsbl.ahbl.org]

[185.98.184.91 listed in dnsbl.ahbl.org]

[185.98.184.91 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.98.184.91 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.98.184.91 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.98.184.91 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.98.184.91 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.98.184.91 listed in will-spam-for-food.eu.org]

[185.98.184.91 listed in will-spam-for-food.eu.org]

[185.98.184.91 listed in will-spam-for-food.eu.org]

[185.98.184.91 listed in will-spam-for-food.eu.org]

[185.98.184.91 listed in will-spam-for-food.eu.org]

[185.98.184.91 listed in will-spam-for-food.eu.org]

[185.98.184.91 listed in will-spam-for-food.eu.org]

[185.98.184.91 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[185.98.184.91 listed in list.dnswl.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[185.98.184.91 listed in sa-accredit.habeas.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[185.98.184.91 listed in sa-trusted.bondedsender.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: spotuykunde.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: spotuykunde.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[185.98.184.91 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[185.98.184.91 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[185.98.184.91 listed in bl.score.senderscore.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 URI_GOOGLE_PROXY Accessing a blacklisted URI or obscuring source of

phish via Google proxy?

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

-0.5 DKIMWL_WL_MED DKIMwl.org - Medium trust sender

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

Subject: {SPAM?} =?UTF-8?Q?We_Couldn=E2=80=99t_Process_Your_Payment_=E2=80=93?=

=?UTF-8?Q?_Quick_Action_Needed?=

=3D1=2E0">

=D0=85=D1=80=D0=BEtify Premium

We=E2=80=99re Having Trouble Processing Your =D0=85=D1=80=

=D0=BEtify =E1=8F=A2r=D0=B5mium =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t

Hello,

It looks like your =D0=85=D1=80=D0=BEtify =E1=8F=A2r=D0=B5mi=

um =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t didn=E2=80=99t go through=2E Here=E2=80=

=99s what might have happened:

There might be an issue with your b=D0=B0=D5=B8k=2E

Your =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t card has expired=

=2E

Your account doesn=E2=80=99t have enough funds=2E

To ensure uninterrupted access to your playlists and favorit=

e tunes, simply update your payment details=2E It only takes a moment!

ykunde=2Ecom/redire=2Ephp">Update Now

Let=E2=80=99s get you back to en=

joying the music you love without missing a beat!

Cheers, =D0=85=D1=80=D0=BEtify
p>

hQh5ql_4WH2nILb01PORAjtT8rHAtf2aoNtC1xOTPeAKf38Aaa1dryQ-845268GExKqt0JlId8_=

vKNaLTmb23yeZtk7LO_TPohjnc-B8C7JOmAA=3Ds0-d-e1-ft#http://aro=2Espotify=2Es3=

=2Eamazonaws=2Ecom/newsletter/images/logo_footer=2Epng" alt=3D"Spotify Logo=

">

Get =D0=85=D1=80=D0=BEtify for: iPhone | <=

a href=3D"#">iPad | Android | Other=

Terms of Use | Privacy Polic=

y | Contact

=D0=85=D1=80=D0=BEtify AB, Regeringsgatan 19, 111 53, Stockh=

olm, Sweden

dvLal2/QDlNPa5mSl" width=3D"1" height=3D"1" border=3D"0" alt=3D"" style=3D"=

display:none" />

Mon	Tue	Wed	Thu	Fri	Sat	Sun
← Back	December '24					Forward →
						1
2	3	4	5	6	7	8
9	10	11	12	13	14	15
16	17	18	19	20	21	22
23	24	25	26	27	28	29
30	31

Invoice Payment Reminder

Rappel de paiement de facture

We=E2=80=99re Having Trouble Processing Your =D0=85=D1=80= =D0=BEtify =E1=8F=A2r=D0=B5mium =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t

We=E2=80=99re Having Trouble Processing Your =D0=85=D1=80= =D0=BEtify =E1=8F=A2r=D0=B5mium =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t

We=E2=80=99re Having Trouble Processing Your =D0=85=D1=80= =D0=BEtify =E1=8F=A2r=D0=B5mium =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t

We=E2=80=99re Having Trouble Processing Your =D0=85=D1=80= =D0=BEtify =E1=8F=A2r=D0=B5mium =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t

We=E2=80=99re Having Trouble Processing Your =D0=85=D1=80=

=D0=BEtify =E1=8F=A2r=D0=B5mium =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t

We=E2=80=99re Having Trouble Processing Your =D0=85=D1=80=

=D0=BEtify =E1=8F=A2r=D0=B5mium =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t

We=E2=80=99re Having Trouble Processing Your =D0=85=D1=80=

=D0=BEtify =E1=8F=A2r=D0=B5mium =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t

We=E2=80=99re Having Trouble Processing Your =D0=85=D1=80=

=D0=BEtify =E1=8F=A2r=D0=B5mium =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t