French language rent demand phsh

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Dec 2024 10:50:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJcRw-00000000M5b-150c

for dave@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 10:49:08 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Dec 2024 10:49:08 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from relayout02-q04.dominioabsoluto.net ([217.116.26.80]:59783)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJbf9-000000006Oo-1Luj

for sales@nk.ca;

Fri, 06 Dec 2024 09:58:47 -0700

Received: from relayout02-redir.dominioabsoluto.net (relayout02-redir.dominioabsoluto.net [217.116.26.75])

by relayout02.dominioabsoluto.net (Postfix) with ESMTP id 4Y4cqB6xwWzlWNl;

Fri, 6 Dec 2024 17:56:38 +0100 (CET)

Received: by relayout02-dsp.dominioabsoluto.net (Postfix, from userid 33)

id 4Y4cq86KQczlWBR; Fri, 6 Dec 2024 17:56:36 +0100 (CET)

Received: from oxserver05 (217-116-26-9.redes.acens.net [217.116.26.9])

(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))

(No client certificate requested)

(Authenticated sender: fonsi_luna.interware.es)

by relayout02-dsp.dominioabsoluto.net (Postfix) with ESMTPSA id 4Y4cbV2sQtzlWBK;

Fri, 6 Dec 2024 17:46:30 +0100 (CET)

Date: Fri, 6 Dec 2024 17:46:30 +0100 (CET)

From: =?UTF-8?Q?AGENCE_IMMOBILI=C3=88RE=2ECA?=

To: "aaa@gmail.com"

Message-ID: <686314396.4712255.1733503590362@acens.webmail.es>

Subject: Dette locative

MIME-Version: 1.0

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

X-Priority: 3

Importance: Normal

X-Mailer: Open-Xchange Mailer v7.10.5-Rev43

X-Originating-IP: 188.164.196.6

X-Originating-Client: open-xchange-appsuite



Bonjour,



Par la pr=C3=A9sente, nous vous mettons en demeure de r=C3=A9gulariser le p=

aiement de votre loyer du mois de D=C3=A9cembre, sous un d=C3=A9lai de 5 jo=

urs.



En effet, conform=C3=A9ment aux termes du contrat de location que vous avez=

sign=C3=A9, le paiement de votre loyer doit intervenir en fin de mois ou d=

=C3=A9but de mois. Nous constatons que ce r=C3=A8glement n'a pas encore =C3=

=A9t=C3=A9 effectu=C3=A9.

Nous vous informons =C3=A9galement que, depuis la mise =C3=A0 jour de nos c=

oordonn=C3=A9es bancaires, le mode de paiement de votre loyer a chang=C3=A9=

. D=C3=A9sormais, nous vous prions d=E2=80=99effectuer le r=C3=A8glement de=

votre loyer par Virement Interac. L=E2=80=99adresse courriel =C3=A0 utilis=

er pour ce virement est la suivante :



gestion.service.locative87@gmail.com



Question secr=C3=A8te: Paiement87 ?



R=C3=A9ponse secr=C3=A8te : Loyer87



A d=C3=A9faut de r=C3=A9gularisation d=E2=80=99ici la date limite, nous ser=

ons contraints de prendre des mesures l=C3=A9gales pour recouvrer la somme =

due. En effet, si aucune solution amiable n=E2=80=99est trouv=C3=A9e dans c=

e d=C3=A9lai, nous nous verrons dans l=E2=80=99obligation de saisir un huis=

sier de justice.



Nous vous remercions de bien vouloir proc=C3=A9der =C3=A0 ce paiement dans =

les plus brefs d=C3=A9lais afin d=E2=80=99=C3=A9viter toute proc=C3=A9dure =

suppl=C3=A9mentaire.



Dans l=E2=80=99attente de votre r=C3=A8glement, nous vous prions d=E2=80=99=

agr=C3=A9er, Madame, Monsieur, l=E2=80=99expression de nos salutations dist=

ingu=C3=A9es.







SERVICE COMPTABLE

Digital Marketing Service spam from Microsoft outlook

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Dec 2024 08:51:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJabH-0000000034G-2bB2

for dave@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 08:50:39 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Dec 2024 08:50:39 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19012053.outbound.protection.outlook.com ([52.103.74.53]:56212 helo=SEVP216CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJZ7A-00000000N8B-46Rm

for sales@nk.ca;

Fri, 06 Dec 2024 07:15:32 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=MONsP9vt0vhnnHaZRL3Z7TXTbeI+UCq2Gok24kkOaKyjr1qMOOAoQlDRLHvPHd4f0Oe5fS4yvgMyrYkzs9gcI2q7Eg/sqrotuEWNyRY+Tzbx7VeTdb/ciimFiEFeaL4qHVJ/JaaSSIKZI1Nph4kGevbg76SECd/PgYG1Ogm2fOcGCDEKgqUlGFF3GGf+iYb4ubsrNyzoB5OFERhBk3KgNH3DAstkT1vV4EBKNHICOtRYtoYEtXoE+7VLr6tpB17K3OtlA366v+WPH1yL/N7R5cXUar1epMf7jpEWexA0DEDogfJZZIdvjYAYRywfR21uSH+E661a4Dmm9GuNk5JQBg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=wJ/cUFWI0J8r0zep2QsBq0OXsPfBkBsfjIk3FA7MS5g=;

b=yXdmOEzRDPH8NVHGBIZWkfBoRP6J66IipO1uXDLLL/R2IzPD2BWLeeLntixdobgWO39vCMnKEUok1AQgYBU1rBnKX6Sgcho5F1uBOPYmmYsfUUbV6lUVhaDxL2/IGE7ueYKTn69KiYhIEbehW+5VuZdbGCrJPrRI+qBAjk6qgq5g9SGRlLEQaLXjCHtggRxtom+eBbQ/P6sJ/XurlTcXqZxDdhBbf0Tjlb307W2sD4fsaxmywpx6JPJ1mBcllgo95Alnyky+5ydcgiONgYjMLC28qej+rE3O8y5QSy3fd5WZjloEZqyLsNgtQuVgGXynU5KXrmizRtrej4eeOvb4MQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=wJ/cUFWI0J8r0zep2QsBq0OXsPfBkBsfjIk3FA7MS5g=;

b=nSDV1CrjO+dKYjq8e27dwkrFIbdfL7LQ3tpQiZkTdOhNL3M6Xv9nc8zF5nC5umM4b4Dycx/m0OzKk+BFwrdfME90DqM3TomXufXQSjQYmI4mWIZwhf/64481vMMjX0s6PRxuB8vDTtfXfPMNl67+xsjUq8jpm1xPWk0V8jWm5NJYM0sCWj0blxLzJ7iJI/DEJJkAGw1C2/gXLPEKPd3bixgdvanckTQ3MiBjGt7t2G3RZO9KmiM2UnwQ+GC2e7XRFE4nfsObiTkOYr1rGoObvSd1CCrHSgQAZZd1DrVnhXIPZRXwUfENGTKPtMtyqT3c8ShWoVMhml/yKpvwbTJ/Rg==

Received: from SE2P216MB1505.KORP216.PROD.OUTLOOK.COM (2603:1096:101:1e::7) by

SE1P216MB1478.KORP216.PROD.OUTLOOK.COM (2603:1096:101:1d::10) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.8230.11; Fri, 6 Dec 2024 14:12:48 +0000

Received: from SE2P216MB1505.KORP216.PROD.OUTLOOK.COM

([fe80::79ae:3532:d363:1df6]) by SE2P216MB1505.KORP216.PROD.OUTLOOK.COM

([fe80::79ae:3532:d363:1df6%6]) with mapi id 15.20.8230.010; Fri, 6 Dec 2024

14:12:48 +0000

From: vishal rabat

To: vishal rabat

Subject: Re: price list_&#//

Thread-Topic: price list_&#//

Thread-Index: AQHbR+Y8PcK+Luxdy0Kewdy4+jV3LbLZQbiD

Date: Fri, 6 Dec 2024 14:12:48 +0000

Message-ID:



References:



In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SE2P216MB1505:EE_|SE1P216MB1478:EE_

x-ms-office365-filtering-correlation-id: ad590740-8b9c-4e33-8b74-08dd1600104b

x-microsoft-antispam:

BCL:0;ARA:14566002|15030799003|8062599003|461199028|8060799006|15080799006|37102599003|19110799003|3412199025|440099028|102099032|1710799026;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?Hw+bdeEEcFbWMmmuyT5RxDYwiXcotdnjk9zBi3KRkTj/+9H125WGNJ8R87?=

=?iso-8859-1?Q?xCdgWqx/sEzp2jBFINYwGoZ6xCGIc+zx7PrHpo82O2GR7AGOv43p6yY2J4?=

=?iso-8859-1?Q?+7rVa3K8aX8MIqaSer9/F7i47UN1koFnvpe6l/OOeE2ijO1i3PfP4gPXQg?=

=?iso-8859-1?Q?Buttj0TKfe+uLm+0wuvx1TqJYiE6A2rhpDGYvd5lEsJ48XfzSSrOe4+aiF?=

=?iso-8859-1?Q?ti6C0IO9/Kdxs0xJIrA2aHJpA+3tJPx6FYtAADkwqBR15tjA+qAfv7NUHa?=

=?iso-8859-1?Q?WS/hqZh1QWFrFCNKFNJMrWmQCd+JNZ4CkPHMZjbjp4PZSvrgvvwOmAehWY?=

=?iso-8859-1?Q?X0I9ckt366JU0ARxq4VnB6J6SXsfqDW7xHAcQshrs1nC4eQRtrEJP1glFP?=

=?iso-8859-1?Q?pLxcfTwbe69k/8VaNHiT/eA94OP1oDOfWj1bM0gPYtgBmwetZ+PmxJVvUj?=

=?iso-8859-1?Q?F1QkpbsBfkA77PNev59P6hsJ/62oMvOnH1U3yX22jqZw/SFKX3cRjZ5jMX?=

=?iso-8859-1?Q?laP3irQaAvzytnxR0r6ilBZzkhwt9QcCgHTkCMN7dBHEmBPYTce557C0v6?=

=?iso-8859-1?Q?k1Q0DFFlUBHTnHTnu1q6Q1K6nYp22gHM6vZxTmFkSaTpJxiAva20WYiGRt?=

=?iso-8859-1?Q?dtfWbYFT7ycllxROXIILJlb+YqMzaqS87+jfAGxAHiQxzKKm/JOa/JUZWl?=

=?iso-8859-1?Q?UpwhQTHQsRPgwQxyWpvhIafRBA9olM9YI/xfIWnD90BSd6NJWK+48Am6cP?=

=?iso-8859-1?Q?+Ib8dPuNkFnEJp5FCArJwFHlgUhYnXDoVHtBLx3LNf73dOvJsj7mmRO9tA?=

=?iso-8859-1?Q?GQjt5px6a14r6Ydd5XBwQMN1WUZgco1kSZgRswhEWbbFesYNkdjhFvS3D/?=

=?iso-8859-1?Q?mGKV8cCyvRZEN2Xy6xG5Hfn9f8KrfuSrKTUw/26KhtAzYXyRIC0HpeTZ3C?=

=?iso-8859-1?Q?eVygCthgNRq5tTnuQ2tFaEMNyF2G5cSnu9G5L36djLDwDklK66ip2Oy0ya?=

=?iso-8859-1?Q?wpoA+GVPjnPozWYyRRb9/ibk7NXBEwJlY7ffh8BcCFaT8E0qV+fFd/M+vO?=

=?iso-8859-1?Q?rch1qHt9MLEttGbVQxNAnlgLtasrHGGbwejQzsO86QfwN5MWrAlU+MM//E?=

=?iso-8859-1?Q?NNuBLkoLlCpjJfHL41FkAUL+3NmJ4=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?07LiOb7zETucjUsc+jIvJiYFmqvqdFvPG9R2BcS9+UUBvYI9YGv+9g9g3R?=

=?iso-8859-1?Q?DLxhQ7YovRR8NJUDTWOG1zlpAZLGsr+WCb3uTPXbvNf52BZz10Lar4/BIl?=

=?iso-8859-1?Q?7BcXPVE7HZH/WuMvVUFUeOeXRr1GfWm39wFWblU2Z9oCdPp0QVchlr3bM8?=

=?iso-8859-1?Q?3akTVN4D4NaGJKPVXGiSpYmKQxpRcxMspek1tCUP1zk+rqFoz0eAbeD+eG?=

=?iso-8859-1?Q?Y0jJB5AFcZxGTFL/pO4DVE5/i5iuY2ivjZYLiDtMj8gCkzcU7JYzWRFay5?=

=?iso-8859-1?Q?4Gg9DM2R8cdBNvDvRZ83E7XyVqbm1SzKjrRwrjvjjOnoxS7cfH0pMZLYIK?=

=?iso-8859-1?Q?7l2Kx561E1/qg8S8HuZWqBHhuYRNbysUcICw33/a4Xj/erGQuIk+/IqlNs?=

=?iso-8859-1?Q?jnbgk62teWzOfLl9toXvyV6Jlcva5gaG1Hpmax/2CJS36N46GpMDSizg2a?=

=?iso-8859-1?Q?b9ctFob4rhZmOhpQq6CPTsr3FnDgn0BOO/J8mbsAqRxTLDhonwZwyPA6AF?=

=?iso-8859-1?Q?VRzVjzYDm4FB2yJ7YTQBIxXOwNNzbIAFulxRIkxK5ZgiL9azYQCzLauVtM?=

=?iso-8859-1?Q?8mgp2NbdsBo7L5qnk3ykbenMP0eyZFNw7LRZ8VqG7N8xVIFWSpa4cV6yBl?=

=?iso-8859-1?Q?rczxIPdQ9rvjUOI6kydC0y/detR6NL1wlK8LiWy5LjQC2UfVcN/EksdV/K?=

=?iso-8859-1?Q?zpa9nSoHAfFOWBg/7qrZCp1D8dHSkPABIgrHx6WRaWw1htVPP8Qy7ZirYE?=

=?iso-8859-1?Q?h8JYdBm9gFTO2zJtpE7BfmpqvU6bgEdtn+gBVnxWmZD6oak21YSBiRvpcq?=

=?iso-8859-1?Q?QCHnjpGUCHL40FyOyiU19FEQ/ni+6gX9EnX/+gXe0Fx+3sMAEQdYTMq3o6?=

=?iso-8859-1?Q?296KdMV5hoyZD5tlu/Vvu80G5i8ues0nc6FSuXw789ratJRFnli3LzvLuz?=

=?iso-8859-1?Q?OEF/UdzgwTeKe/O4D1+FEqDEoLvBosZPWIUYU+NGvL6zGfPHIh/K5qq4aP?=

=?iso-8859-1?Q?z2KQyBkSr42n1p47Ht+FTtHbralikcZNtN5Nl8KRwQzDBfua5bymMvDFnJ?=

=?iso-8859-1?Q?71snr643zIk8r97l43C1SfaCF8Zhzin13n2l/Vvy3mSKwqHt2EGaM5SGJH?=

=?iso-8859-1?Q?JhV8C7bLbx+Jy2yu58VXafK5prAUXLtCSzUrLlzwldVNDnfojOkEz3qC8h?=

=?iso-8859-1?Q?QqITfMuOqhjvireD70RT0uxz6Q0dGs9h1Gd5kW8hWugZOzBE1AFp4X8Zc0?=

=?iso-8859-1?Q?YGz/1JTQ+1GzpqpoOPjj4/sc+vch/NkFQGHDJqyO30r+XewqPSNoXnShCc?=

=?iso-8859-1?Q?Y+0uMyHnIuocIiH+N0Z+OKXboA+AL1XLsgMI3QcC5K7yaGc=3D?=

Content-Type: multipart/alternative;

boundary="_000_SE2P216MB15055A009F30CC7893D9D56BB1312SE2P216MB1505KORP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SE2P216MB1505.KORP216.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: ad590740-8b9c-4e33-8b74-08dd1600104b

X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Dec 2024 14:12:48.5616

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SE1P216MB1478



--_000_SE2P216MB15055A009F30CC7893D9D56BB1312SE2P216MB1505KORP_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,



sent you an Email a few days ago in regards to the Digital Marketing Serv=

ice. I didn't get any response back from you.



May I send you a price list & cost? If interested.



Still Waiting..



Thank you,,







--_000_SE2P216MB15055A009F30CC7893D9D56BB1312SE2P216MB1505KORP_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hi,



; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Hel=

vetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Hel=

vetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

  sent you an Email a few days ago in regards to the Digital Marketing=

Service. I didn't get any response back from you.



; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Hel=

vetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Hel=

vetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

May I send you a price=

list & cost? If interested.



; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Hel=

vetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Hel=

vetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Still Waiting..



; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Hel=

vetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Hel=

vetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Thank you,,



edFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12p=

t; color: rgb(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">












--_000_SE2P216MB15055A009F30CC7893D9D56BB1312SE2P216MB1505KORP_--

Nigerian Spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Dec 2024 08:50:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJaaO-0000000030p-2P0D

for dave@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 08:49:44 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Dec 2024 08:49:44 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f41.google.com ([209.85.218.41]:59496)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJWeM-00000000H3h-29gg

for root@nk.ca;

Fri, 06 Dec 2024 04:37:41 -0700

Received: by mail-ej1-f41.google.com with SMTP id a640c23a62f3a-aa549d9dffdso282970466b.2

for ; Fri, 06 Dec 2024 03:35:39 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=thepha-ac-th.20230601.gappssmtp.com; s=20230601; t=1733484933; x=1734089733; darn=nk.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=EfQREcq9Rm9Nsq39iXL+vVsqgu2wh0WW/pb6ltmBwww=;

b=rVEiJznxzt+3A+Ff7SludX0SMlbkBVA6GVyp2iPhz9QXznEozVbwgD6rcgPrCtAJC+

jEfT0kMqaxsI9QPrR+7ACsh9bowY+Mgxs+BO28ILD5TQBaF/kfSQlFwUzERDyGatGWZn

oGVpVwfZSwJyKAmjmE/7dsjy6lJz8zQZr2gfxn97svIif1JZG1LbGorzu5N1Dtc27opJ

tgxNCBTSdH20OnUlPuWG0d5ZL1j/ngEOVRYqGYFGV+19CPWTPTW9CuCG+06EoPptCVr9

rTAeWjd35pyeUbi/zYtBkQheftW2/6Xw1r3uhtkcK5ANPI3Qgnf+1K1Ov1E/kOCJNy4V

sTtA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1733484933; x=1734089733;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=EfQREcq9Rm9Nsq39iXL+vVsqgu2wh0WW/pb6ltmBwww=;

b=iuOCeMPzv0AYabmlrHKiLhV103uq8s0gReCHjok+A6DmxxZGmtPJVS19TLvAgMKnW5

nrRxcFwRSrSGesxdaXxC+x89jV2SpQ/qA+tqrfd1GaHxaoQHZF7AcJ6wYhURsMcvp5Bg

iSiH1mKPlxT4SsPKaarP2sEsHhemzuqWB4I+6iNheuNYIpXZv2UIfRfXukql6/Oc1c9S

BnMQOkxYboywSAnFHabeW/uu/VQzT7+pHapPvLV+pxDUEwPZBnLku+TsvVixPszI/GP2

abiVj+orBX8LPJQQvFudPj7N1TMcWevbOdlXkkVUgCkYTRS+MPUWelXwCmfB1782I1o4

toCQ==

X-Forwarded-Encrypted: i=1; AJvYcCW0es376nlJTcK84r7HdzJ4RnJPC+yE9TK3f3Dt2urKeEZc9VIfZjGmXNcI5pI1qDIEAfxX@nk.ca

X-Gm-Message-State: AOJu0Yxh075DyZXxCXq2+JfcaLzXK5T787sg+7eON4t9BHdeslZq1n6H

gOr629X4EpRqduBZeUjXdJSCmMA7Ap80JCYodzBmW3nP9vudCY9fzNW4UxEjMkgDpNUsnFuRg9M

P9zQp/DlaOV+LoU+jrMbJETtAO2gUxxq3CtVe+A==

X-Gm-Gg: ASbGncsAOeP+kQlpGdLcbMONMwTHxKUhUjYQoyWVakXBkLZF9V3SNn5zA4dtY0IaTDj

R7ZlRzOzTIIbut/lFEoeKOGjhqAPQpkatQRUU

X-Google-Smtp-Source: AGHT+IFYsTjAOVegtlfXDyaFTvaLMtYZ6g/vYtDbMGFFnXDCKGvmcWspy4w8vI35VCBYxeevfS2nBmpX65gi6nvvNVk=

X-Received: by 2002:a17:906:3191:b0:aa6:2d35:3ca8 with SMTP id

a640c23a62f3a-aa639fed7c9mr158303666b.13.1733484932165; Fri, 06 Dec 2024

03:35:32 -0800 (PST)

MIME-Version: 1.0

Reply-To: foreign.settlement@outlook.com

From: Patrick

Date: Fri, 6 Dec 2024 14:35:07 +0300

Message-ID:

Subject: Please accept my sincere apologies for this.

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000009b024306289869e7"

Bcc: root@nk.ca

X-Spam_score: 16.6

X-Spam_score_int: 166

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir, I am sincerely sorry for the delay in payment for

your winning/inheritance funds. I recently found an error in your payment

file and didn't want to send payment until I was sure that the che [...]



Content analysis details: (16.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

[209.85.218.41 listed in dnsbl.ahbl.org]

[209.85.218.41 listed in dnsbl.ahbl.org]

[209.85.218.41 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.218.41 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.218.41 listed in sa-accredit.habeas.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.218.41 listed in sa-trusted.bondedsender.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.218.41 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.218.41 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.218.41 listed in bl.score.senderscore.com]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.0 XFER_LOTSA_MONEY Transfer a lot of money

1.4 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Please accept my sincere apologies for this.



--0000000000009b024306289869e7

Content-Type: text/plain; charset="UTF-8"



Dear Sir,

I am sincerely sorry for the delay in payment for your winning/inheritance

funds. I recently found an error in your payment file and didn't want to

send payment until I was sure that the cheque would not be returned back by

your bank. On behalf of our Legal Department, I apologise for any

inconvenience or frustration this caused you.

Please allow this letter to serve as our confirmation that we are ready,

willing, and able to ISSUE A CERTIFIED BANK DRAFT IN THE AMOUNT OF

$5,000,000 USD as the first tranche of your payment and to Confirm the Bank

Draft by SWIFT MT-110, upon reconfirmation of your real name.

This Confirmation SWIFT will be sent by the Brussels Swift System, to the

designated Beneficiary banking coordinates, within three banking days of

your request, to be followed by the DELIVERY of the BANK DRAFT by Bank

Bonded Courier.

Government issued ID copy:-



Please accept my sincere apologies for this.









Very truly yours,



Patrick Hovakimian

Commissioner

Foreign Claims Settlement Commission



--0000000000009b024306289869e7

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear =C2=A0Sir,
I am sincerely sorry for the delay in p=

ayment for your winning/inheritance funds. I recently found an error in you=

r payment file and didn't want to send payment until I was sure that th=

e cheque would not be returned back by your bank. On behalf of our Legal De=

partment, I apologise for any inconvenience or frustration this caused you.=

=C2=A0
Please allow this letter to serve as our confirmation that we ar=

e ready, willing, and able to ISSUE A CERTIFIED BANK DRAFT IN THE AMOUNT OF=

$5,000,000 USD as the first tranche of your payment and to Confirm the Ban=

k Draft by SWIFT MT-110, upon reconfirmation of your real name.
This Co=

nfirmation SWIFT will be sent by the Brussels Swift System, to the designat=

ed Beneficiary banking coordinates, within three banking days of your reque=

st, to be followed by the DELIVERY of the BANK DRAFT by Bank Bonded Courier=

.
Government issued ID copy:-

Please accept my sincere apologies =

for this.




Very truly yours,

Patrick Hovakimian
>Commissioner
Foreign Claims Settlement Commission




--0000000000009b024306289869e7--

Web / SEO / App spam from Microsoft Outlook

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Dec 2024 08:50:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJaZr-000000002zx-0a6O

for dave@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 08:49:11 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Dec 2024 08:49:11 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-sn1nam02olkn2073.outbound.protection.outlook.com ([40.92.44.73]:27556 helo=NAM02-SN1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJUOz-00000000B5q-1kD2

for sales@nk.ca;

Fri, 06 Dec 2024 02:14:06 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=wjZXhscInjnC2G0fnyoxsvBWDELvLBzRTBUE56zYS4CzZignOnJafuqD3AX5+gr/jxoydB8bzklhjVni1TwjF0w3XzrHyRS6YDFQwf75tYBuahdpm7NyjZObTp2AwPJStn3t2BlAJ6oP80hJyBYOmUmoSRKrR/3t/FuCTxNR6oJBmDjnocBlXvGa0eXcz0lVg1hb74+xKR344MmQh1Ggmafzi2vSe1mxzb1ISjzOQ/lDoWvTMLQsy+cG06GAIZ7/SieuApEKIEXkk8cWaXkoy3Qy8xaEIX/TRCO+6tU+56a/XRuZtXAc6saKkiqJz5Tk2xnD9+91l96o9Vvf8PRzng==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=XzQgYOpddf7PB55XYa71d1sO9kkvE0zvmQ64Qf1I3d0=;

b=lB0mlwhpf87/qN5VJtJYRxVnDtLRykr5DINVRDEzcSO5LclGUu5Nxgfa33wmoYMoCwpvc+1z5vOSVxlw3Pmk2agJgRT42Kyro5znzW9St1jShEVC1bjy8mnOTvZwI8FhqDlnFSZsb0S77k7MeuFBihrdvS9sVPj9pu9KkLW3EGrww5J/9vzAx1fnqGI1R35qdZCBHQr6pqTfSRIwMo7QKy5EE722Mqqak7kVS/EDwuBEXHgjtElEQKo+sca71WvH7tDiht5QHnx8nwga2nRDhRxQuEr5m0oUqpXdVedXb6XTJTnV14EhRR0hKq+iTvx7fkwKgp73wBD0IZi2PVOvHg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=XzQgYOpddf7PB55XYa71d1sO9kkvE0zvmQ64Qf1I3d0=;

b=Ogkn9hRY2ttRDMBoP218DYiiPVAmOG/b4hvsiY9SRIZpS6KSgsDfcEZ3qJiL7z4AJp7cVl7M6RJzsoDgor0mexmjlYV2Kvk+2aO49Fh1xlz/dzs64LbbDlBD3CfrAEM6XQsMRHNNbZAA8eqT1D49bJU+x4y+27UHHOUYdvTsK2oVd3P3C/Pp4xX+O1GxrVYi6B3tLWAfsJwyl/18pw9PhTD/Z6D1K0tthDKhrpPOYIJ/Y/nYFHnWLpw9XGWModY5YLqG6oCwVfvF46e0JzuOnz05LhRMpaTrihsy5VVleBLp5tMtX/SiWm+PQTddL5/lNznSrRtkwr00hZSgmWtRWQ==

Received: from DM4PR84MB1687.NAMPRD84.PROD.OUTLOOK.COM (2603:10b6:8:4a::10) by

MW5PR84MB1691.NAMPRD84.PROD.OUTLOOK.COM (2603:10b6:303:1c2::11) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8207.17; Fri, 6 Dec

2024 09:11:19 +0000

Received: from DM4PR84MB1687.NAMPRD84.PROD.OUTLOOK.COM

([fe80::a9b1:257d:5b33:4d87]) by DM4PR84MB1687.NAMPRD84.PROD.OUTLOOK.COM

([fe80::a9b1:257d:5b33:4d87%3]) with mapi id 15.20.8230.010; Fri, 6 Dec 2024

09:11:19 +0000

From: Kush Upadhyay

Subject: Quote & Cost..?

Thread-Topic: Quote & Cost..?

Thread-Index: AQHbR77LRl/kYZEKrUuSCp/S6HuCBg==

Date: Fri, 6 Dec 2024 09:11:19 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: DM4PR84MB1687:EE_|MW5PR84MB1691:EE_

x-ms-office365-filtering-correlation-id: 77e2ff67-3699-44b0-4d8f-08dd15d5f267

x-microsoft-antispam:

BCL:0;ARA:14566002|461199028|8062599003|15080799006|15030799003|8060799006|19110799003|3412199025|440099028|102099032;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?8k6F/xq1KAucu0JbSSigvBitOcNpGBlphv3fOYOPqkaMniU0a2EG2LSpxh?=

=?iso-8859-1?Q?B7QycijLusNkoqwPNTlFgr0ZR00keN404G5W/1x5/zXDFfsLYduCqNZSJ3?=

=?iso-8859-1?Q?7TCTa1C7877hISImZ7i8M2pkQ7Se+Zqlpa+jFfcYJgFTR+2979KPM3yxyO?=

=?iso-8859-1?Q?T0irtmYcRADND9vUbVRKI6ocyJIYP7sizi7jRh0GKEKUrU4CRjEAcHPBVP?=

=?iso-8859-1?Q?/mJdd8zgHPDh3EpUMWruaGlE4rZBc4JqYAjufKmusFYkHofWkdpdr8uP/z?=

=?iso-8859-1?Q?fC0q7lHCxOZjxAhZaNp1m3lIc4c1t8xRJqZTB3uZooPAWVeNu4YtTOw9mK?=

=?iso-8859-1?Q?ImmCTp2MTnBcuC01HHVLzJPfMjrvgKoF5OLJf+P08I1G67fxjG5Fr44L0Z?=

=?iso-8859-1?Q?qO0YRT6j+BAL3CXTd4WhETi62556Xy5Qc0taaDMG3mwH3fOS8uVGwIieVE?=

=?iso-8859-1?Q?Prn7ZwPS7WSs7N3eNiqG0nOR2vgZ/tZZK3FtSeMEfL1ByY/c6qvWC8OJnH?=

=?iso-8859-1?Q?2bkk3i3hWq+O16edlaNkNtPOCpLKo6ErmBw2Ytj5wJKQ58CkQDBCx9jewY?=

=?iso-8859-1?Q?b61lxXA7YXKMYFkxUzauUyh8FzfSiYkOQY2kuLV5RIQH9B9wgk3xx1Qn/Y?=

=?iso-8859-1?Q?OgQ9WmDlubHLmBJpBObcPPztLcDgG0M0l3himqrT4O+fgaQhBSvG8LvdGK?=

=?iso-8859-1?Q?FxZZPjYblU+GHqyBlk+dflIVhkrzG1juMbIwWdtxC/aP/FvBVveL29hk0t?=

=?iso-8859-1?Q?u6bMJBlGjtWJQsT9q14KHy3gO7K0NZZUrjQEssIUG07dxWfVxRiAUz8trS?=

=?iso-8859-1?Q?UJydf6BEVKqDS7UglC4s7Z5iHyh2db1+Dc5ZoAqKKSeV+5dLup3+ZtLto4?=

=?iso-8859-1?Q?pR+Vet/rpeduac8bKxEI2FE/bPeCsZYyZ1w+TKTaLphRdu9bA4nEub62nC?=

=?iso-8859-1?Q?azbfzauN+lTYccYJAiIzXaRbu9hrNWlpbTnlW0OHSWDU/EYLlGicb+4+xY?=

=?iso-8859-1?Q?StWHntsyTc6Gcf33QUqYQ/OiD1OsbcWZGM4gLHzDYn8t1H/mFtzm+d72S+?=

=?iso-8859-1?Q?n2qyhrTBspcSVunnjj8mIdE=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?zzxAaMinR97Ldunn7zB33EUv8sNypUNoOHkwuoMF/c7InqY6MC9AxkKvgd?=

=?iso-8859-1?Q?uglIGjOH0RIL4EBvvS2+ib9S7gvgKWWXfM4815JAnShkF+uqdORI/4mqWX?=

=?iso-8859-1?Q?LADGL/zrucRvrSg3ZxWnVRTPZPDJXGkQOHoDOySrCZBlpXblhoJgFuVFMR?=

=?iso-8859-1?Q?2vLFUJ0Oj7PfM4vUN1JXT4K0s20ZNAANYXOeC7py8VVYaJ/synFRooYDr9?=

=?iso-8859-1?Q?r2ns4iCQLqziMShRQV+93d/qPol0A617BdlPgGjOQuexAVYhUTex/O4LFE?=

=?iso-8859-1?Q?kMOSiXUMr0/SXq1eK4TgW5+X7X5e17du5QkAzK51DRGFRRIHbyL5wgAQt1?=

=?iso-8859-1?Q?DLizUeshg6lUuKBtvY/RRH9xITK/DPEFPdNOVfY252Q5GdL1T6MEqzSFGV?=

=?iso-8859-1?Q?eexNBj6SRWLS3wj+QARjY0VIb/bOzz44fIQ4c8ydwPcN3sXNKPkik6LAQ1?=

=?iso-8859-1?Q?yuDEkYMubLKU0a69ISuRz99VmT/zicj3CuX6epHYbuTDVaODSf/vAhPRwn?=

=?iso-8859-1?Q?LhLoi/S3rxQkFSE9cqIMI69G9Ci04U+GLo7VN+QUsiUEWoAWBxcFf6OE9d?=

=?iso-8859-1?Q?Vx9o2kDdOBeQ4TsVnwN2XvjkNhFK/OYnJtjcbx5Ldn06Oe4X9XrNFJXUbU?=

=?iso-8859-1?Q?Yz+f4SrY01nlVYCqnkTE8kiI7i5VjZFGGZmxN8X62LBtzguM5VFBXA+N2z?=

=?iso-8859-1?Q?zLU7EeMI7eu8VwYDaeR1+qJoYmy6F6dUpjdGG05lPnF35uWD9oKUbYJ0Kx?=

=?iso-8859-1?Q?uHyBbFKPyTtG1zzEabfFB5ojyALqKyak4oWXhyIG786L3NsdT1hHwVTOPM?=

=?iso-8859-1?Q?VQ61vZk0MTDmwjwcCti9KkVrZ8jGE2jbVQ/xG5VDvkXB6ItmpGnjgVCx2+?=

=?iso-8859-1?Q?WGy4fQ3vXu+8R/fE563s4AbJDrRFmJrmvyD8Djrnm2uKdWsdQaXTpn2s0N?=

=?iso-8859-1?Q?u183LOuCMWBXfifI6IUc1897ndkbJh1tLltYDaTt3JtnFOIPhJt9nMOIy4?=

=?iso-8859-1?Q?z3O+ZsfWg7UE9987Ridzfi5G8sBqVf1y6S2k8V4Q0XEBxa1V4PNpetBTft?=

=?iso-8859-1?Q?ah71BkQkgjfzOqk9jXnAkj//JBHNr9QoP75sfm3Jyq8LPVaJuKQ+hVZfdI?=

=?iso-8859-1?Q?gTJxnoo6Jsc9vGbKiRJrmU8IjyXGZxvFKbiFdhze/DPY4Yz8GI0xJeM/dc?=

=?iso-8859-1?Q?MiTePArLiYFVk4CD6kkm1zqLGJm3qYl/rsdbA+bxFtKqwJbsbGo4jro+4x?=

=?iso-8859-1?Q?xkMMl9/+4KgMn9I3NtoYU5nTlxygORYqGnFJfwEancNVNxMxM05gcbQIwn?=

=?iso-8859-1?Q?4kvZTt5j2JZZaTNfCl9pa2BobhQ4/UZG8/skJ9izulvWefI=3D?=

Content-Type: multipart/alternative;

boundary="_000_DM4PR84MB1687A0E856C03EA6482218B2D6312DM4PR84MB1687NAMP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: DM4PR84MB1687.NAMPRD84.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 77e2ff67-3699-44b0-4d8f-08dd15d5f267

X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Dec 2024 09:11:19.5444

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW5PR84MB1691

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Hope you are doing well. I was looking at your website

and decided to send you an email.



Content analysis details: (7.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.44.73 listed in dnsbl.ahbl.org]

[40.92.44.73 listed in dnsbl.ahbl.org]

[40.92.44.73 listed in dnsbl.ahbl.org]

[40.92.44.73 listed in dnsbl.ahbl.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.44.73 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.44.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.44.73 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.44.73 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10b6:8:4a:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:8:4a:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[40.92.44.73 listed in will-spam-for-food.eu.org]

[40.92.44.73 listed in will-spam-for-food.eu.org]

[40.92.44.73 listed in will-spam-for-food.eu.org]

[40.92.44.73 listed in will-spam-for-food.eu.org]

[40.92.44.73 listed in will-spam-for-food.eu.org]

[40.92.44.73 listed in will-spam-for-food.eu.org]

[40.92.44.73 listed in will-spam-for-food.eu.org]

[40.92.44.73 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.44.73 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[kushupadhyay42(at)outlook.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[kushupadhyay42(at)outlook.com]

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Quote & Cost..?



--_000_DM4PR84MB1687A0E856C03EA6482218B2D6312DM4PR84MB1687NAMP_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,















Hope you are doing well.















I was looking at your website and decided to send you an email.















We can help your website rank on the 1st page of Google to drive relevant t=

raffic to your site. I did a deep















analysis of your website and after the analysis I came to a conclusion that=

your website has the capability to get you more business than















you are currently based upon where you are positioned.















Can I send you a price & Quote? If you are interested.















Looking forward your positive response















Regards,



Kush Upadhyay











--_000_DM4PR84MB1687A0E856C03EA6482218B2D6312DM4PR84MB1687NAMP_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








ne-height: 1.38; background-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;">Hi,




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;"> 




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;"> 




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;"> 




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;">Hope you are doing well.




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;"> 




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;"> 




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;"> 




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;">I was looking at your website  =

;and decided to send you an email.




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;"> 




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;"> 




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;"> 




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;">We can help your website rank on th=

e 1st page of Google to drive relevant traffic  to your site. I did a =

deep




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;"> 




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;"> 




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;"> 




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;">analysis of your website and after =

the analysis I came to a conclusion that your website has the capability to=

get  you more business than




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;"> 




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;"> 




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;"> 




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;">you are currently based upon where =

you are positioned.




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;"> 




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;"> 




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;"> 




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: rgb(192, 0, 0); line-height: 15.3333px;">Can I send you a price &am=

p; Quote? If you are interested.




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;"> 




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;"> 




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;"> 




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;">Looking forward your positive respo=

nse




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;"> 




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;"> 




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;"> 




nd-color: white; margin: 0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;">Regards,




0cm 0cm 0.0001pt;">


color: black; line-height: 15.3333px;">Kush Upadhyay 




0cm 0cm 8pt;">


color: rgb(0, 0, 0); line-height: 15.3333px;"> 




Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">












--_000_DM4PR84MB1687A0E856C03EA6482218B2D6312DM4PR84MB1687NAMP_--

Web / SEO / App spam from Yahoo! Mail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Dec 2024 08:49:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJaZe-000000002yI-2ho0

for dave@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 08:48:58 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Dec 2024 08:48:58 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from sonic302-19.consmr.mail.sg3.yahoo.com ([106.10.242.139]:42900)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJTle-0000000092l-26IE

for support@nk.ca;

Fri, 06 Dec 2024 01:32:59 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1733473851; bh=1nYm0xHNuN4ioFQ9yHERBWaZAwzN8ZM+0QB/UMN9ENE=; h=Date:Subject:From:References:To:In-Reply-To:From:Subject:Reply-To; b=WyfZTUzshyoSCu6naFXGjyJeUw82stan0Jl2r9CtA8+S9nRf50K1IeAIEMsaHa+jqj/H8iIgqRQ9/Jx1KUxuL9YoBy1VgfOXwz+JCDpkMvJLjKobJykZFwjvTjkB+YbbatP64rNCstJ9FalXFdBgvmCR/fZu4RZ0smE2X/oXZegFKKROoIHueXnRorg6IfonJC31zpQN5MxcrtMevloip7HPee076E4qfU8wClRnSkZNEVwOuvPhWBh+RCvbv7XNREujpY6CcBZUkdvT84rsmAPazrANhU4EtQu+BrFx7h1PXyRi7Mx1zdK0ZMiDuvurVDnVTL15GHG3z60+XIa4DQ==

X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1733473851; bh=Bmo21oar924Oz51+cSDVr8PscYdkXVzzUvHP+Qw/VRZ=; h=X-Sonic-MF:Date:Subject:From:To:From:Subject; b=AZRbHT16dkIigMZ2UHhu5Z0SVpucOvAUSQqHwWkGeScTarsfqyygnknN26oJTTHCngAUG4s1y1LCTghfvOejSv6eALGU1PqwF5K2Smj+a+KUUZNpE7cZvGjHZYj8u5hrNQa2FmQkKpEDOKHVWr05St3aBQORC8kyD1x0vzHfnwETAFm0/8cyKs/GUkkN5fL7VyA0t5k+3mz73Ta9wu9RU9TKyybZ0Q7CeUr/CSbd6IFDjq+AtceNQodKUAx9QG309dcsRCMYkNdbu5JDFBsVNRrVFZV6LbJncXgIrmuWR1wUQllijeNu+WftEj8pIDNY18ZMRUMReIqhdEhNg1Crew==

X-YMail-OSG: Z7z2eh0VM1lck3dsUB_r_YeKJDZm6c7I638qF_bh3IFN.sQzvpOgaqWZSc2A81H

4bMkJUaJLcX3vFQ73KDvC0T4DGkiCGU1x_QOwW.H.71Zck8_esvwuhxW_jha4T4T92b4cyhvEBiD

4yZiaLw8gGMhSadH0csPJBWB.98cAFth3zEiLnR9Jb8e1APxl7JrUKae.qSKZOU4qG6omk_9oBsY

whSu8UuHQ.SJobnB9Zp0HVl.N80dnYAuDjdLbBWhJp27CvJVLQGuJcoyl6jrmORNXz2PT.NBmWd4

BHPbOk3WwT_xILw0hHDFg31cAmZqLDQ_ilaSGy.nyX4RJ1ZloHnfa6xa2JpejXIxY.jsGxd51TJ5

dKh3KFOHF5ZHr1tMnIwLEQTl2Phmasl7tIKkCxUOQPXjCsT.rAnGuTXpgGy8QgZvLOdIZxkcDcqG

0eu.5ECbaEuRGvD9mDX0Zk0nBT1pL4dggEvpId15F5CrTf8W7WZrOQ.T7r4K5KOdKMbhfT67NZr_

XO3qZf5f14twKW3Gdt8NUfmsf9reL27QPdV3a0KIFGPHoFKTe0_1be2UsaTtbeW91E2.3w7urUMH

4QQNoefq.1W9cGMCtxhRgjixp25sXR25Dg03YuhZ_sK5Fkv4GWanw4rr07PuKDLUD38xu.Cpyvab

Rz.d_GR.4oi162zCE7qShDx27U75MCyRpsnFktF5c130jTzCsUaZUrwabBL0DR26v8Sd2qka3b1L

rcUj5BFu3BMxbjahsr0CabTBenUwmEv1fIHh2BlN4fRTnIsSEPKtbebMfQA4ZoY5oFbXMMH6RrgD

UiPg2O_WUKkz6dQCazeDN_5QTRdMWpSoNjSfTkmlEFnkLcrGY8he1Kb7ujZ.LXODvlvgtsfgU2yh

bjK5rET_giiKFoN7MOAVDJtq7QPdO2PNyh_TSpZLqr0X4CU0S1tEMG2YCHdp1DKN0vT4YqiWKi7R

Qwx5EDeAamAFxiCC4ZWHt.yLoCXHhmfKO_QKMcGfVxAUZPEAlev1tZcUWYTocFmOflIhr4_Eqb26

_pW1aBL7YAKM8I1geu435DpsMEdnjJ0VQvpVLL420EewFPPQ_Lt4P8F1np6stHXeKHFSHYXXMCeY

fgFJTJHUDvynF0Gsgr4v7t0qmQ_vsnSlyv3ZpWCN7Xwo6PAVWes_6wy_fLQvSnzjq3wk.D2HlIwc

DtFROhWePEMUN6kUHVKIdNdRidh8tfp_BMuQ_vWeOxXbkbD5qOVVbK5dbYPD.27itby7pily1Web

b9hez6D9jnzQeqkXvpMoLENdnjVpBGtWUEwt1WOnFojtZbB44CJ6PBUi.MqHvWIdim41_3nhrQrJ

OjjaTp5AmAcwzb0nfuOFPsholE.Ci_LwmNOr_PPh6y_cCqtGMFBtqNyDqOrN43l60UlmjoKP70mc

R9QkioYcO9PyVhrvq.1ma_hNFEcO05CoYbli2zzGvWUgCEl2gpGhI.9zItHq_KDi3Zl0JS3NzNO9

T5m9MGVdmkKzN15_L6tTQ2SRHQpN4V2zpZBWm7EJ6otR0brn8qCYIh2AmvdILYnOm.uEP34rMmJ0

w3RoVaWIYvrSj8dgege2h2OEnfnAETxCBHwc2hNt_mKkxL.CEbxdUDacXlLcoZW0zft6yWSbtw3q

_y0095Wfa1ww4SV4lHP15p.ifnMr8bKpgRKU5ia9V11ymFd50J6pgAEiylDGYSY2wTmM3fsKmAVs

O1j7LgdWVMYAmFd6tuiHR7APFywBWP_lfPN1LQOXP57gvOlvrysSFQVrZ9YNKjwjvYioXNaY5SDD

46.w7sv856PXc6b3N1v.RH1rCuAYQNb0fy78ifykEOUzrzOg3nMkHDwdXI5VG5knJwdXcXN00YJM

n5UUPeRCBkJyM7J.iseRHZm7ubHcGgDZnzcGUtmD0L63s4bHJjENzncIrrd15sbhlP5ruH3I.1F_

Qxp.OC6BUTigTYCNs9PIaL13edmK_YdFoCdJjZjumZyYw3UcT8R7f._4YSZz286sZNPAc9CclqLE

Z9WLyTB7VlmNJVq0gae6ILDCQPFrhl1RWEjjR5cGM9Tok4SOjVsWRvzGkeHV2uUtUTeWReRd7.yo

yYnteniHN_BDsRbtAxSEyIeADStv8ol93KQVDxdNwJOq0LGlKazLRPm4xZZeZxSt3atttZfoFCqf

AzR0k2WXyHzIPsx4KT3Xrn4Mh7RtF5FPle_Aat0HB0FI5zHT6pUafgpXyTjOAldZk2.IVOFi_ROC

oosWt9GYfjzcrVwer6vcmo4sy2r3NTz3GoBnq2.eQrqbmeBAAeZCwbafzcVFBTC2125JCXBk-

X-Sonic-MF:

X-Sonic-ID: da62483d-8304-40eb-8e19-287171b32c59

Received: from sonic.gate.mail.ne1.yahoo.com by sonic302.consmr.mail.sg3.yahoo.com with HTTP; Fri, 6 Dec 2024 08:30:51 +0000

Received: by hermes--production-sg3-5b7954b588-7n7t7 (Yahoo Inc. Hermes SMTP Server) with ESMTPA ID 10883d54ac0c39a2eb1331f0f1450fc0;

Fri, 06 Dec 2024 08:30:49 +0000 (UTC)

Content-Type: multipart/alternative;

boundary="------------p0Nol0btCt0QJy0HpvYTnrIw"

Message-ID: <6730b140-2feb-454c-bad0-7d782e276d69@yahoo.com>

Date: Fri, 6 Dec 2024 14:02:18 +0530

MIME-Version: 1.0

User-Agent: Mozilla Thunderbird

Subject: =?UTF-8?Q?Re=3A_Christmas_SEO_Offers_=F0=9F=8E=84?=

From: Sanjana

References: <3f14da38-86a4-4a13-ac20-58d635155755@yahoo.com>

Content-Language: en-US

To: undisclosed-recipients: ;

In-Reply-To: <3f14da38-86a4-4a13-ac20-58d635155755@yahoo.com>

X-Mailer: WebService/1.1.23040 mail.backend.jedi.jws.acl:role.jedi.acl.token.atz.jws.hermes.yahoo

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I sent you an email a few days ago regarding Digital

marketing Service. Let me know if you are interested, we will send you our

past work detailsCustom SEO Packages, and price list.



Content analysis details: (5.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[106.10.242.139 listed in dnsbl.ahbl.org]

[106.10.242.139 listed in dnsbl.ahbl.org]

[106.10.242.139 listed in dnsbl.ahbl.org]

[106.10.242.139 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[106.10.242.139 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[106.10.242.139 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[106.10.242.139 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[106.10.242.139 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[106.10.242.139 listed in will-spam-for-food.eu.org]

[106.10.242.139 listed in will-spam-for-food.eu.org]

[106.10.242.139 listed in will-spam-for-food.eu.org]

[106.10.242.139 listed in will-spam-for-food.eu.org]

[106.10.242.139 listed in will-spam-for-food.eu.org]

[106.10.242.139 listed in will-spam-for-food.eu.org]

[106.10.242.139 listed in will-spam-for-food.eu.org]

[106.10.242.139 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[106.10.242.139 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[106.10.242.139 listed in sa-accredit.habeas.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[106.10.242.139 listed in sa-trusted.bondedsender.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[106.10.242.139 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[106.10.242.139 listed in bl.score.senderscore.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[sanjanarai57(at)yahoo.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[sanjanarai57(at)yahoo.com]

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} =?UTF-8?Q?Re=3A_Christmas_SEO_Offers_=F0=9F=8E=84?=



This is a multi-part message in MIME format.

--------------p0Nol0btCt0QJy0HpvYTnrIw

Content-Type: text/plain; charset=UTF-8; format=flowed

Content-Transfer-Encoding: 7bit



Hello,



I sent you an email a few days ago regarding Digital marketing Service.



Let me know if you are interested, we will send you our past work

detailsCustom SEO Packages, and price list.



Thanks & Regards,



On 11/20/2024 6:32 PM, Sanjana wrote:

>

> Hi,

>

> I can help your website to get on first page on Google and increase

> the number of leads and sales you are getting from your website.

>

> Let me know if you are interested, then I will send you our SEO

> Packages and price list.

>

> Thanks & Regards,

--------------p0Nol0btCt0QJy0HpvYTnrIw

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit




















style="font-size:11.0pt;

font-family:"Calibri","sans-serif";color:#222222;background:white">Hello,




style="font-size:11.0pt;

font-family:"Calibri","sans-serif";color:#222222;background:white">I

sent you

an email a few days ago regarding Digital marketing Service.




style="font-size:11.0pt;

font-family:"Calibri","sans-serif";color:#70AD47;mso-themecolor:accent6;

background:white">Let me know if you are interested, we will send you

our past

work details

style="font-size:11.0pt;font-family:"Calibri","sans-serif";

color:#222222;background:white"> Custom SEO Packages, and price list.




style="font-size:11.0pt;

font-family:"Calibri","sans-serif";color:#222222;background:white">Thanks

&

Regards,



On 11/20/2024 6:32 PM, Sanjana wrote:





cite="mid:3f14da38-86a4-4a13-ac20-58d635155755@yahoo.com">






style="font-family:"Calibri","sans-serif";

color:#222222">Hi,Â




style="font-size:11.0pt;

font-family:"Calibri","sans-serif";color:#222222">I

can help your website to get on first page on Google and

increase the number of leads and sales you are getting from

your website.Â




style="font-size:11.0pt;

font-family:"Calibri","sans-serif";color:#222222">Let

me know if you are interested, then I

lang="EN-IN"

style="font-size:11.0pt;font-family:

"Calibri","sans-serif";color:#00B050">will send you

our SEO Packages and price list.Â




style="font-size:11.0pt;line-height:107%;font-family:"Calibri","sans-serif";

mso-fareast-font-family:Calibri;mso-fareast-theme-font:minor-latin;color:#222222;

mso-ansi-language:EN-US;mso-fareast-language:EN-US;mso-bidi-language:AR-SA">Thanks

& Regards,Â








--------------p0Nol0btCt0QJy0HpvYTnrIw--

Spotify Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Dec 2024 08:49:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJaZX-000000002y7-28QZ

for dave@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 08:48:51 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Dec 2024 08:48:51 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mda30f.sendnode.com ([185.98.184.15]:30053)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJUcP-00000000BZQ-3qma

for root@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 02:27:42 -0700

X-KumoRef: eyJfQF8iOiJcXF8vIiwicmVjaXBpZW50Ijoicm9vdEBkb2N0b3Iubmwyay5hYi5jYSJ9

DKIM-Signature: v=1; a=rsa-sha256; d=sendnode.com; s=mdkv20200702; c=relaxed/relaxed;

bh=GnULVVPhpZNjacwBeM4m5yf25ub2LvzvY8xOhsxzEtE=;

h=from:from:reply-to:reply-to:subject:subject:date:date:to:to:cc:

references:list-id:list-id:list-help:list-unsubscribe:list-unsubscribe:

list-subscribe:list-post:list-owner:list-archive:list-unsubscribe-post:

list-unsubscribe-post:x-csa-complaints:x-csa-complaints; t=1733477125;

b=YdDJ3rp8KhNkWJSni8glXWS5kZF+hLjvjmoKgCemvrA/S5C83CM6Oc6Wzp11V3aAf4r0OGPy1

6/KPZFitoHPLr3/g7TK8tn02jfq8P0C84yDePbW3oCnURPG4+qLCLCgxc/bx2vGnzXLF1JdK5xH

g2fARdsrG/NQXAT9SK28Hp0CtEcCMzGy8/ol1rvB5R7M0aCmRDmfYqT0p6fTaB6B6XIKtajeVPa

g0wxQ0zjtV+NSOA9YNvbPNQO+8NcQo9o/qcEKEFZavxrTLv9X/ytgGaOArs4Z21q6zMxOMQxqZo

4Guok6QBUqUeRLR7DYknwD0sMV/1+6kExmIu463v0Tvg==;

Received: from unspecified (172.18.0.28)

by mta01.sendnode.com (KumoMTA 172.17.0.1)

with ESMTP id 064ee4e2b3b411ef87fcbc2411142e7d for ;

Fri, 6 Dec 2024 09:25:25 +0000

Mime-Version: 1.0

Date: Fri, 06 Dec 2024 08:58:17 +0100

Message-Id:

From: =?UTF-8?B?0IXRgNC+dGlmeQ==?=

To:

Reply-To:

Subject: =?UTF-8?Q?We_Couldn=E2=80=99t_Process_Your_Payment_=E2=80=93?=

=?UTF-8?Q?_Quick_Action_Needed?=

List-Unsubscribe: ,



List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Id: <4214.1f0.sendnode.com>

X-Abuse-Id: MTI3LjAuMC4xLTE2OTE2LTQ5Ni0xNTk1ODI2LWViYmdAcWJwZ2JlLmF5Mngubm8ucG4=

X-Sendjob-Id: 448548147

X-Complaints-To:

X-Csa-Complaints:

X-Mailer: Mailingwork

X-Virtual-Mta: default

X-Sender: info@rs.fraunhofer.de

X-Receiver: root@doctor.nl2k.ab.ca

X-Job: 448548147

X-Envid: 16916-496-1595826

X-Rm-Datanode: node90.sendnode.com

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: Quoted-Printable

X-Spam_score: 22.5

X-Spam_score_int: 225

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Ѕроtify Premium We’re Having Trouble Processing Your

Ѕроtify Ꮲrеmium рауmеոt



Content analysis details: (22.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.98.184.15 listed in dnsbl.ahbl.org]

[185.98.184.15 listed in dnsbl.ahbl.org]

[185.98.184.15 listed in dnsbl.ahbl.org]

[185.98.184.15 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.98.184.15 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.98.184.15 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.98.184.15 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.98.184.15 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.98.184.15 listed in will-spam-for-food.eu.org]

[185.98.184.15 listed in will-spam-for-food.eu.org]

[185.98.184.15 listed in will-spam-for-food.eu.org]

[185.98.184.15 listed in will-spam-for-food.eu.org]

[185.98.184.15 listed in will-spam-for-food.eu.org]

[185.98.184.15 listed in will-spam-for-food.eu.org]

[185.98.184.15 listed in will-spam-for-food.eu.org]

[185.98.184.15 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[185.98.184.15 listed in list.dnswl.org]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: customercheckstatus.165-154-240-2.cprapid.com/165.154.240.2]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 URI_GOOGLE_PROXY Accessing a blacklisted URI or obscuring source of

phish via Google proxy?

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

-0.5 DKIMWL_WL_MED DKIMwl.org - Medium trust sender

Subject: {SPAM?} =?UTF-8?Q?We_Couldn=E2=80=99t_Process_Your_Payment_=E2=80=93?=

=?UTF-8?Q?_Quick_Action_Needed?=












=3D1=2E0">

=D0=85=D1=80=D0=BEtify Premium












center; padding: 0;">


ea-bc05-39a31cc7f2bd" alt=3D"Spotify Premium" style=3D"max-width: 100%; hei=

ght: auto;">









We=E2=80=99re Having Trouble Processing Your =D0=85=D1=80=

=D0=BEtify =E1=8F=A2r=D0=B5mium =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t



Hello,



It looks like your =D0=85=D1=80=D0=BEtify =E1=8F=A2r=D0=B5mi=

um =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t didn=E2=80=99t go through=2E Here=E2=80=

=99s what might have happened:





  • There might be an issue with your b=D0=B0=D5=B8k=2E


  • Your =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t card has expired=

    =2E


  • Your account doesn=E2=80=99t have enough funds=2E




To ensure uninterrupted access to your playlists and favorit=

e tunes, simply update your payment details=2E It only takes a moment!




mercheckstatus=2E165-154-240-2=2Ecprapid=2Ecom/Review/">Update Now


Let=E2=80=99s get you back to en=

joying the music you love without missing a beat!



Cheers, =D0=85=D1=80=D0=BEtify
p>










hQh5ql_4WH2nILb01PORAjtT8rHAtf2aoNtC1xOTPeAKf38Aaa1dryQ-845268GExKqt0JlId8_=

vKNaLTmb23yeZtk7LO_TPohjnc-B8C7JOmAA=3Ds0-d-e1-ft#http://aro=2Espotify=2Es3=

=2Eamazonaws=2Ecom/newsletter/images/logo_footer=2Epng" alt=3D"Spotify Logo=

">




Get =D0=85=D1=80=D0=BEtify for: iPhone | <=

a href=3D"#">iPad | Android | Other=






Terms of Use | Privacy Polic=

y
| Contact



=D0=85=D1=80=D0=BEtify AB, Regeringsgatan 19, 111 53, Stockh=

olm, Sweden








H1Thvzb/7RWw3MmSo3" width=3D"1" height=3D"1" border=3D"0" alt=3D"" style=3D=

"display:none" />





Spotify Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Dec 2024 08:49:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJaZU-000000002xz-1NlI

for dave@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 08:48:48 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Dec 2024 08:48:48 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mda33b.sendnode.com ([185.98.184.59]:4895)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJUSe-00000000BEP-00oP

for root@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 02:17:25 -0700

X-KumoRef: eyJfQF8iOiJcXF8vIiwicmVjaXBpZW50Ijoicm9vdEBkb2N0b3Iubmwyay5hYi5jYSJ9

DKIM-Signature: v=1; a=rsa-sha256; d=sendnode.com; s=mdkv20200702; c=relaxed/relaxed;

bh=x7bfl5V83iVkdJmMshcR5HuI2ZWbX5v+SYzoItUjQDY=;

h=from:from:reply-to:reply-to:subject:subject:date:date:to:to:cc:

references:list-id:list-id:list-help:list-unsubscribe:list-unsubscribe:

list-subscribe:list-post:list-owner:list-archive:list-unsubscribe-post:

list-unsubscribe-post:x-csa-complaints:x-csa-complaints; t=1733476519;

b=OVoCsnqfgngs8TXusAQ6MlfdOyOet8cAwy6eofJe2PiU45IZLGmvPMBkr0uARivf0iE+XKmjr

UOo7xWYJxSGj8x7ALkMcLi34CqcWKQTZjXn0jJfW3cL5y5/FvYDmO8xsUrnyirpkS0HUMMhdUhM

vZLLFikKB5UBotyvF7vKJprizn+1TfAabqfeUEG5aWr9dcqMmggA9JyyVtRcdv5M2asOvdeJpnC

wdCyqTIAk7pVDmfORfTOcQ64qa3OkZfvsmsDzYnrsbPhrZbO8KvlQjVrrYtWmyOEx0JGVrSeBp/

cAXZtb601tpeJchfhpCeRXtY2jM6Y6V4OxDAzfsh6gRQ==;

Received: from unspecified (172.18.0.23)

by mta02.sendnode.com (KumoMTA 172.17.0.1)

with ESMTP id 9d0731adb3b211efbcc4a605b99bcc65 for ;

Fri, 6 Dec 2024 09:15:19 +0000

Mime-Version: 1.0

Date: Fri, 06 Dec 2024 08:54:11 +0100

Message-Id:

From: =?UTF-8?B?0IXRgNC+dGlmeQ==?=

To:

Reply-To:

Subject: =?UTF-8?Q?We_Couldn=E2=80=99t_Process_Your_Payment_=E2=80=93?=

=?UTF-8?Q?_Quick_Action_Needed?=

List-Unsubscribe: ,



List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Id: <4214.1f0.sendnode.com>

X-Abuse-Id: MTI3LjAuMC4xLTE2OTE2LTQ5Ni0yMjQ0ODQ0LWViYmdAcWJwZ2JlLmF5Mngubm8ucG4=

X-Sendjob-Id: 448548147

X-Complaints-To:

X-Csa-Complaints:

X-Mailer: Mailingwork

X-Virtual-Mta: default

X-Sender: info@rs.fraunhofer.de

X-Receiver: root@doctor.nl2k.ab.ca

X-Job: 448548147

X-Envid: 16916-496-2244844

X-Rm-Datanode: node13.sendnode.com

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: Quoted-Printable

X-Spam_score: 22.5

X-Spam_score_int: 225

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Ѕроtify Premium We’re Having Trouble Processing Your

Ѕроtify Ꮲrеmium рауmеոt



Content analysis details: (22.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.98.184.59 listed in dnsbl.ahbl.org]

[185.98.184.59 listed in dnsbl.ahbl.org]

[185.98.184.59 listed in dnsbl.ahbl.org]

[185.98.184.59 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.98.184.59 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.98.184.59 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.98.184.59 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.98.184.59 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.98.184.59 listed in will-spam-for-food.eu.org]

[185.98.184.59 listed in will-spam-for-food.eu.org]

[185.98.184.59 listed in will-spam-for-food.eu.org]

[185.98.184.59 listed in will-spam-for-food.eu.org]

[185.98.184.59 listed in will-spam-for-food.eu.org]

[185.98.184.59 listed in will-spam-for-food.eu.org]

[185.98.184.59 listed in will-spam-for-food.eu.org]

[185.98.184.59 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[185.98.184.59 listed in list.dnswl.org]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: customercheckstatus.165-154-240-2.cprapid.com/165.154.240.2]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 URI_GOOGLE_PROXY Accessing a blacklisted URI or obscuring source of

phish via Google proxy?

-0.5 DKIMWL_WL_MED DKIMwl.org - Medium trust sender

Subject: {SPAM?} =?UTF-8?Q?We_Couldn=E2=80=99t_Process_Your_Payment_=E2=80=93?=

=?UTF-8?Q?_Quick_Action_Needed?=












=3D1=2E0">

=D0=85=D1=80=D0=BEtify Premium












center; padding: 0;">


ea-bc05-39a31cc7f2bd" alt=3D"Spotify Premium" style=3D"max-width: 100%; hei=

ght: auto;">









We=E2=80=99re Having Trouble Processing Your =D0=85=D1=80=

=D0=BEtify =E1=8F=A2r=D0=B5mium =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t



Hello,



It looks like your =D0=85=D1=80=D0=BEtify =E1=8F=A2r=D0=B5mi=

um =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t didn=E2=80=99t go through=2E Here=E2=80=

=99s what might have happened:





  • There might be an issue with your b=D0=B0=D5=B8k=2E


  • Your =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t card has expired=

    =2E


  • Your account doesn=E2=80=99t have enough funds=2E




To ensure uninterrupted access to your playlists and favorit=

e tunes, simply update your payment details=2E It only takes a moment!




mercheckstatus=2E165-154-240-2=2Ecprapid=2Ecom/Review/">Update Now


Let=E2=80=99s get you back to en=

joying the music you love without missing a beat!



Cheers, =D0=85=D1=80=D0=BEtify
p>










hQh5ql_4WH2nILb01PORAjtT8rHAtf2aoNtC1xOTPeAKf38Aaa1dryQ-845268GExKqt0JlId8_=

vKNaLTmb23yeZtk7LO_TPohjnc-B8C7JOmAA=3Ds0-d-e1-ft#http://aro=2Espotify=2Es3=

=2Eamazonaws=2Ecom/newsletter/images/logo_footer=2Epng" alt=3D"Spotify Logo=

">




Get =D0=85=D1=80=D0=BEtify for: iPhone | <=

a href=3D"#">iPad | Android | Other=






Terms of Use | Privacy Polic=

y
| Contact



=D0=85=D1=80=D0=BEtify AB, Regeringsgatan 19, 111 53, Stockh=

olm, Sweden








mkmGdQr/ikLzwycpcs" width=3D"1" height=3D"1" border=3D"0" alt=3D"" style=3D=

"display:none" />





Spotify Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Dec 2024 08:49:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJaZQ-000000002xq-0pBo

for dave@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 08:48:44 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Dec 2024 08:48:44 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mda3cf.sendnode.com ([185.98.184.207]:38057)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJUS1-00000000BCM-0Ud0

for support@nk.ca;

Fri, 06 Dec 2024 02:16:52 -0700

X-KumoRef: eyJfQF8iOiJcXF8vIiwicmVjaXBpZW50Ijoic3VwcG9ydEBuay5jYSJ9

DKIM-Signature: v=1; a=rsa-sha256; d=sendnode.com; s=mdkv20200702; c=relaxed/relaxed;

bh=jqum7/rtqmPA+kBvyUCCLzrOefWTxLE040jR/99zJMw=;

h=from:from:reply-to:reply-to:subject:subject:date:date:to:to:cc:

references:list-id:list-id:list-help:list-unsubscribe:list-unsubscribe:

list-subscribe:list-post:list-owner:list-archive:list-unsubscribe-post:

list-unsubscribe-post:x-csa-complaints:x-csa-complaints; t=1733475986;

b=CtsRTYQ3WZE5l1myDZzM+AlRqxFkqBrstgcIAuTDD/iLsNBoJXshyAAHV2Pfgqfr+Mv32UfwJ

BUL3LygEKVphHrUULtlkSn/pRekSX+WNTEaG4CT8kj4YPzKHGSpmD1sEvrZhzlKPU/9w1r7ONJ7

orGxzSB7Eo1EuIVaoP3PEsC/12GNx9rwAkd4x4DKmNdieMIr4yiHYXj6KNKgsF3+JWXZTY7QkEH

c/ziDETS0pAaTSV9V5ILzNFbHq0wwC/AN3qVj2chIXkuoWF3gnjiAFJMQo/t+skW81yz+kgTs8i

db7EY7ELTzeYn8w124KkimVfObRRHZoLO2xDMIeEBhCQ==;

Received: from unspecified (172.18.0.28)

by mta05.sendnode.com (KumoMTA 172.17.0.1)

with ESMTP id 5f5bcbb3b3b111efbcdfbc2411afc7a8 for ;

Fri, 6 Dec 2024 09:06:26 +0000

Mime-Version: 1.0

Date: Fri, 06 Dec 2024 08:44:07 +0100

Message-Id:

From: =?UTF-8?B?0IXRgNC+dGlmeQ==?=

To:

Reply-To:

Subject: =?UTF-8?Q?We_Couldn=E2=80=99t_Process_Your_Payment_=E2=80=93?=

=?UTF-8?Q?_Quick_Action_Needed?=

List-Unsubscribe: ,



List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Id: <4214.1ec.sendnode.com>

X-Abuse-Id: MTI3LjAuMC4xLTE2OTE2LTQ5Mi0xMTA0NDg2LWZoY2NiZWdAYXgucG4=

X-Sendjob-Id: 448531730

X-Complaints-To:

X-Csa-Complaints:

X-Mailer: Mailingwork

X-Virtual-Mta: default

X-Sender: info@rs.fraunhofer.de

X-Receiver: support@nk.ca

X-Job: 448531730

X-Envid: 16916-492-1104486

X-Rm-Datanode: node18.sendnode.com

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: Quoted-Printable

X-Spam_score: 27.1

X-Spam_score_int: 271

X-Spam_bar: +++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Ѕроtify Premium We’re Having Trouble Processing Your

Ѕроtify Ꮲrеmium рауmеոt



Content analysis details: (27.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.98.184.207 listed in dnsbl.ahbl.org]

[185.98.184.207 listed in dnsbl.ahbl.org]

[185.98.184.207 listed in dnsbl.ahbl.org]

[185.98.184.207 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.98.184.207 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.98.184.207 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.98.184.207 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.98.184.207 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.98.184.207 listed in will-spam-for-food.eu.org]

[185.98.184.207 listed in will-spam-for-food.eu.org]

[185.98.184.207 listed in will-spam-for-food.eu.org]

[185.98.184.207 listed in will-spam-for-food.eu.org]

[185.98.184.207 listed in will-spam-for-food.eu.org]

[185.98.184.207 listed in will-spam-for-food.eu.org]

[185.98.184.207 listed in will-spam-for-food.eu.org]

[185.98.184.207 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[185.98.184.207 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[185.98.184.207 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[185.98.184.207 listed in sa-trusted.bondedsender.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: spotuykunde.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: spotuykunde.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[185.98.184.207 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[185.98.184.207 listed in bl.score.senderscore.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 URI_GOOGLE_PROXY Accessing a blacklisted URI or obscuring source of

phish via Google proxy?

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

-0.5 DKIMWL_WL_MED DKIMwl.org - Medium trust sender

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

Subject: {SPAM?} =?UTF-8?Q?We_Couldn=E2=80=99t_Process_Your_Payment_=E2=80=93?=

=?UTF-8?Q?_Quick_Action_Needed?=












=3D1=2E0">

=D0=85=D1=80=D0=BEtify Premium












center; padding: 0;">


ea-bc05-39a31cc7f2bd" alt=3D"Spotify Premium" style=3D"max-width: 100%; hei=

ght: auto;">









We=E2=80=99re Having Trouble Processing Your =D0=85=D1=80=

=D0=BEtify =E1=8F=A2r=D0=B5mium =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t



Hello,



It looks like your =D0=85=D1=80=D0=BEtify =E1=8F=A2r=D0=B5mi=

um =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t didn=E2=80=99t go through=2E Here=E2=80=

=99s what might have happened:





  • There might be an issue with your b=D0=B0=D5=B8k=2E


  • Your =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t card has expired=

    =2E


  • Your account doesn=E2=80=99t have enough funds=2E




To ensure uninterrupted access to your playlists and favorit=

e tunes, simply update your payment details=2E It only takes a moment!




ykunde=2Ecom/redire=2Ephp">Update Now


Let=E2=80=99s get you back to en=

joying the music you love without missing a beat!



Cheers, =D0=85=D1=80=D0=BEtify
p>










hQh5ql_4WH2nILb01PORAjtT8rHAtf2aoNtC1xOTPeAKf38Aaa1dryQ-845268GExKqt0JlId8_=

vKNaLTmb23yeZtk7LO_TPohjnc-B8C7JOmAA=3Ds0-d-e1-ft#http://aro=2Espotify=2Es3=

=2Eamazonaws=2Ecom/newsletter/images/logo_footer=2Epng" alt=3D"Spotify Logo=

">




Get =D0=85=D1=80=D0=BEtify for: iPhone | <=

a href=3D"#">iPad | Android | Other=






Terms of Use | Privacy Polic=

y
| Contact



=D0=85=D1=80=D0=BEtify AB, Regeringsgatan 19, 111 53, Stockh=

olm, Sweden








H48l4dG/pTpre8x9IF" width=3D"1" height=3D"1" border=3D"0" alt=3D"" style=3D=

"display:none" />





Spotify Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Dec 2024 08:49:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJaZM-000000002xg-3ZfW

for dave@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 08:48:40 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Dec 2024 08:48:40 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mda35b.sendnode.com ([185.98.184.91]:30247)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJUB9-00000000AQJ-2Zdk

for sales@nk.ca;

Fri, 06 Dec 2024 01:59:20 -0700

X-KumoRef: eyJfQF8iOiJcXF8vIiwicmVjaXBpZW50Ijoic2FsZXNAbmsuY2EifQ==

DKIM-Signature: v=1; a=rsa-sha256; d=sendnode.com; s=mdkv20200702; c=relaxed/relaxed;

bh=eESmygVaL0XOMGQIa/g+dIgKC4/BG7j2mQ5kL9nsdqE=;

h=from:from:reply-to:reply-to:subject:subject:date:date:to:to:cc:

references:list-id:list-id:list-help:list-unsubscribe:list-unsubscribe:

list-subscribe:list-post:list-owner:list-archive:list-unsubscribe-post:

list-unsubscribe-post:x-csa-complaints:x-csa-complaints; t=1733475435;

b=G7HQpZwjhLiRD6bKuFPwOLQ1JTn8ggvULSrRspTrsqSdkCOtSr4wREVjJkitMXULZMWqwyhPU

ZUYSYZAiwlp3vrKxfDqizZwZB37DiCSY+Jstu5dRog3+sD3TEEU+X72KNIIP2xFwbfuNYaONSYH

p3C3IfjTPBSSV2Xfj/XhJJzybrk8Q8Q7z/rKvwkv7FYp+I7ouTnk81/HwtWq7oLjpH/pUFIVic5

IfWZ9n2zVnPzY0HzEi2Ark3tBzKa+6bm97qavHSunvmzF5tNdoTTTCaS9dNK4II3i3pA+RaVW5Z

7MEehSTY0ZW0Pjx7gpFUQfrbFYF92BEmFNBGQK8L/hTw==;

Received: from unspecified (172.18.0.22)

by mta02.sendnode.com (KumoMTA 172.17.0.1)

with ESMTP id 16de339eb3b011ef9b2ca605b99bcc65 for ;

Fri, 6 Dec 2024 08:57:15 +0000

Mime-Version: 1.0

Date: Fri, 06 Dec 2024 08:40:53 +0100

Message-Id:

From: =?UTF-8?B?0IXRgNC+dGlmeQ==?=

To:

Reply-To:

Subject: =?UTF-8?Q?We_Couldn=E2=80=99t_Process_Your_Payment_=E2=80=93?=

=?UTF-8?Q?_Quick_Action_Needed?=

List-Unsubscribe: ,



List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Id: <4214.1ec.sendnode.com>

X-Abuse-Id: MTI3LjAuMC4xLTE2OTE2LTQ5Mi0zMTU4MDItZm55cmZAYXgucG4=

X-Sendjob-Id: 448531730

X-Complaints-To:

X-Csa-Complaints:

X-Mailer: Mailingwork

X-Virtual-Mta: default

X-Sender: info@rs.fraunhofer.de

X-Receiver: sales@nk.ca

X-Job: 448531730

X-Envid: 16916-492-315802

X-Rm-Datanode: node18.sendnode.com

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: Quoted-Printable

X-Spam_score: 26.9

X-Spam_score_int: 269

X-Spam_bar: ++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Ѕроtify Premium We’re Having Trouble Processing Your

Ѕроtify Ꮲrеmium рауmеոt



Content analysis details: (26.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.98.184.91 listed in dnsbl.ahbl.org]

[185.98.184.91 listed in dnsbl.ahbl.org]

[185.98.184.91 listed in dnsbl.ahbl.org]

[185.98.184.91 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.98.184.91 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.98.184.91 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.98.184.91 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.98.184.91 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.98.184.91 listed in will-spam-for-food.eu.org]

[185.98.184.91 listed in will-spam-for-food.eu.org]

[185.98.184.91 listed in will-spam-for-food.eu.org]

[185.98.184.91 listed in will-spam-for-food.eu.org]

[185.98.184.91 listed in will-spam-for-food.eu.org]

[185.98.184.91 listed in will-spam-for-food.eu.org]

[185.98.184.91 listed in will-spam-for-food.eu.org]

[185.98.184.91 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[185.98.184.91 listed in list.dnswl.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[185.98.184.91 listed in sa-accredit.habeas.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[185.98.184.91 listed in sa-trusted.bondedsender.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: spotuykunde.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: spotuykunde.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[185.98.184.91 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[185.98.184.91 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[185.98.184.91 listed in bl.score.senderscore.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 URI_GOOGLE_PROXY Accessing a blacklisted URI or obscuring source of

phish via Google proxy?

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

-0.5 DKIMWL_WL_MED DKIMwl.org - Medium trust sender

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

Subject: {SPAM?} =?UTF-8?Q?We_Couldn=E2=80=99t_Process_Your_Payment_=E2=80=93?=

=?UTF-8?Q?_Quick_Action_Needed?=












=3D1=2E0">

=D0=85=D1=80=D0=BEtify Premium












center; padding: 0;">


ea-bc05-39a31cc7f2bd" alt=3D"Spotify Premium" style=3D"max-width: 100%; hei=

ght: auto;">









We=E2=80=99re Having Trouble Processing Your =D0=85=D1=80=

=D0=BEtify =E1=8F=A2r=D0=B5mium =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t



Hello,



It looks like your =D0=85=D1=80=D0=BEtify =E1=8F=A2r=D0=B5mi=

um =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t didn=E2=80=99t go through=2E Here=E2=80=

=99s what might have happened:





  • There might be an issue with your b=D0=B0=D5=B8k=2E


  • Your =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t card has expired=

    =2E


  • Your account doesn=E2=80=99t have enough funds=2E




To ensure uninterrupted access to your playlists and favorit=

e tunes, simply update your payment details=2E It only takes a moment!




ykunde=2Ecom/redire=2Ephp">Update Now


Let=E2=80=99s get you back to en=

joying the music you love without missing a beat!



Cheers, =D0=85=D1=80=D0=BEtify
p>










hQh5ql_4WH2nILb01PORAjtT8rHAtf2aoNtC1xOTPeAKf38Aaa1dryQ-845268GExKqt0JlId8_=

vKNaLTmb23yeZtk7LO_TPohjnc-B8C7JOmAA=3Ds0-d-e1-ft#http://aro=2Espotify=2Es3=

=2Eamazonaws=2Ecom/newsletter/images/logo_footer=2Epng" alt=3D"Spotify Logo=

">




Get =D0=85=D1=80=D0=BEtify for: iPhone | <=

a href=3D"#">iPad | Android | Other=






Terms of Use | Privacy Polic=

y
| Contact



=D0=85=D1=80=D0=BEtify AB, Regeringsgatan 19, 111 53, Stockh=

olm, Sweden








dvLal2/QDlNPa5mSl" width=3D"1" height=3D"1" border=3D"0" alt=3D"" style=3D"=

display:none" />





Spotify Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Dec 2024 01:27:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJTf5-000000008sX-3MmI

for dave@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 01:26:07 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Dec 2024 01:26:07 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mda3a3.sendnode.com ([185.98.184.163]:36465)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJTVn-000000008UK-1I7s

for doctor@netknow.ca;

Fri, 06 Dec 2024 01:16:36 -0700

X-KumoRef: eyJfQF8iOiJcXF8vIiwicmVjaXBpZW50IjoiZG9jdG9yQG5ldGtub3cuY2EifQ==

DKIM-Signature: v=1; a=rsa-sha256; d=sendnode.com; s=mdkv20200702; c=relaxed/relaxed;

bh=IKxYYktUM7YNL4fsIq8j95J27sqVCx3mfJmS+HDKzYs=;

h=from:from:reply-to:reply-to:subject:subject:date:date:to:to:cc:

references:list-id:list-id:list-help:list-unsubscribe:list-unsubscribe:

list-subscribe:list-post:list-owner:list-archive:list-unsubscribe-post:

list-unsubscribe-post:x-csa-complaints:x-csa-complaints; t=1733472874;

b=KMjcAY2h2NIpu76XMoizTGgCEneIHMZKu90hKRxREJOuzwZCMPa3nlm1dfMlq6fmNHSxRaWmE

OIRj+osMquCL8obOSfdZjXFkW8I+NCaJmvTRXEzjlpLXK2craP/UwnUz6qDFsVBVfAJozcliHR/

fFZcrlz53Im6wA+WLAjNeuHgr11B8TFm91maJoge8BJGpyYQ0JUKGPfwtb7qn1KhakImKp/5hqE

lz8BXclrOn/QucDAVutsyZ7CEa8yZNdlNZ9YyQP35VLxpdfmhJsCR8pYh011oP5AoSuU8uZegVv

kR36iiCv9oU59GGwGsfvoB2q6AU+4vrL4CFM/n3jHKXA==;

Received: from unspecified (172.18.0.23)

by mta04.sendnode.com (KumoMTA 172.17.0.1)

with ESMTP id 209399bab3aa11efbf25f6ee3c5a3514 for ;

Fri, 6 Dec 2024 08:14:34 +0000

Mime-Version: 1.0

Date: Fri, 06 Dec 2024 08:24:31 +0100

Message-Id:

From: =?UTF-8?B?0IXRgNC+dGlmeQ==?=

To:

Reply-To:

Subject: =?UTF-8?Q?We_Couldn=E2=80=99t_Process_Your_Payment_=E2=80=93?=

=?UTF-8?Q?_Quick_Action_Needed?=

List-Unsubscribe: ,



List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Id: <4214.1ec.sendnode.com>

X-Abuse-Id: MTI3LjAuMC4xLTE2OTE2LTQ5Mi0yODk4NTQ4LXFicGdiZUBhcmd4YWJqLnBu

X-Sendjob-Id: 448531730

X-Complaints-To:

X-Csa-Complaints:

X-Mailer: Mailingwork

X-Virtual-Mta: default

X-Sender: info@rs.fraunhofer.de

X-Receiver: doctor@netknow.ca

X-Job: 448531730

X-Envid: 16916-492-2898548

X-Rm-Datanode: node11.sendnode.com

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: Quoted-Printable

X-Spam_score: 27.1

X-Spam_score_int: 271

X-Spam_bar: +++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Ѕроtify Premium We’re Having Trouble Processing Your

Ѕроtify Ꮲrеmium рауmеոt



Content analysis details: (27.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.98.184.163 listed in dnsbl.ahbl.org]

[185.98.184.163 listed in dnsbl.ahbl.org]

[185.98.184.163 listed in dnsbl.ahbl.org]

[185.98.184.163 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.98.184.163 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.98.184.163 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.98.184.163 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.98.184.163 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.98.184.163 listed in will-spam-for-food.eu.org]

[185.98.184.163 listed in will-spam-for-food.eu.org]

[185.98.184.163 listed in will-spam-for-food.eu.org]

[185.98.184.163 listed in will-spam-for-food.eu.org]

[185.98.184.163 listed in will-spam-for-food.eu.org]

[185.98.184.163 listed in will-spam-for-food.eu.org]

[185.98.184.163 listed in will-spam-for-food.eu.org]

[185.98.184.163 listed in will-spam-for-food.eu.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: spotuykunde.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: spotuykunde.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[185.98.184.163 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[185.98.184.163 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[185.98.184.163 listed in sa-accredit.habeas.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[185.98.184.163 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[185.98.184.163 listed in bl.score.senderscore.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 URI_GOOGLE_PROXY Accessing a blacklisted URI or obscuring source of

phish via Google proxy?

-0.5 DKIMWL_WL_MED DKIMwl.org - Medium trust sender

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

Subject: {SPAM?} =?UTF-8?Q?We_Couldn=E2=80=99t_Process_Your_Payment_=E2=80=93?=

=?UTF-8?Q?_Quick_Action_Needed?=












=3D1=2E0">

=D0=85=D1=80=D0=BEtify Premium












center; padding: 0;">


ea-bc05-39a31cc7f2bd" alt=3D"Spotify Premium" style=3D"max-width: 100%; hei=

ght: auto;">









We=E2=80=99re Having Trouble Processing Your =D0=85=D1=80=

=D0=BEtify =E1=8F=A2r=D0=B5mium =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t



Hello,



It looks like your =D0=85=D1=80=D0=BEtify =E1=8F=A2r=D0=B5mi=

um =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t didn=E2=80=99t go through=2E Here=E2=80=

=99s what might have happened:





  • There might be an issue with your b=D0=B0=D5=B8k=2E


  • Your =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t card has expired=

    =2E


  • Your account doesn=E2=80=99t have enough funds=2E




To ensure uninterrupted access to your playlists and favorit=

e tunes, simply update your payment details=2E It only takes a moment!




ykunde=2Ecom/redire=2Ephp">Update Now


Let=E2=80=99s get you back to en=

joying the music you love without missing a beat!



Cheers, =D0=85=D1=80=D0=BEtify
p>










hQh5ql_4WH2nILb01PORAjtT8rHAtf2aoNtC1xOTPeAKf38Aaa1dryQ-845268GExKqt0JlId8_=

vKNaLTmb23yeZtk7LO_TPohjnc-B8C7JOmAA=3Ds0-d-e1-ft#http://aro=2Espotify=2Es3=

=2Eamazonaws=2Ecom/newsletter/images/logo_footer=2Epng" alt=3D"Spotify Logo=

">




Get =D0=85=D1=80=D0=BEtify for: iPhone | <=

a href=3D"#">iPad | Android | Other=






Terms of Use | Privacy Polic=

y
| Contact



=D0=85=D1=80=D0=BEtify AB, Regeringsgatan 19, 111 53, Stockh=

olm, Sweden








5WjzIMB/psFHv6mcgd" width=3D"1" height=3D"1" border=3D"0" alt=3D"" style=3D=

"display:none" />





Spotify Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Dec 2024 01:27:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJTf5-000000008sX-3MmI

for dave@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 01:26:07 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Dec 2024 01:26:07 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mda3a3.sendnode.com ([185.98.184.163]:36465)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJTVn-000000008UK-1I7s

for doctor@netknow.ca;

Fri, 06 Dec 2024 01:16:36 -0700

X-KumoRef: eyJfQF8iOiJcXF8vIiwicmVjaXBpZW50IjoiZG9jdG9yQG5ldGtub3cuY2EifQ==

DKIM-Signature: v=1; a=rsa-sha256; d=sendnode.com; s=mdkv20200702; c=relaxed/relaxed;

bh=IKxYYktUM7YNL4fsIq8j95J27sqVCx3mfJmS+HDKzYs=;

h=from:from:reply-to:reply-to:subject:subject:date:date:to:to:cc:

references:list-id:list-id:list-help:list-unsubscribe:list-unsubscribe:

list-subscribe:list-post:list-owner:list-archive:list-unsubscribe-post:

list-unsubscribe-post:x-csa-complaints:x-csa-complaints; t=1733472874;

b=KMjcAY2h2NIpu76XMoizTGgCEneIHMZKu90hKRxREJOuzwZCMPa3nlm1dfMlq6fmNHSxRaWmE

OIRj+osMquCL8obOSfdZjXFkW8I+NCaJmvTRXEzjlpLXK2craP/UwnUz6qDFsVBVfAJozcliHR/

fFZcrlz53Im6wA+WLAjNeuHgr11B8TFm91maJoge8BJGpyYQ0JUKGPfwtb7qn1KhakImKp/5hqE

lz8BXclrOn/QucDAVutsyZ7CEa8yZNdlNZ9YyQP35VLxpdfmhJsCR8pYh011oP5AoSuU8uZegVv

kR36iiCv9oU59GGwGsfvoB2q6AU+4vrL4CFM/n3jHKXA==;

Received: from unspecified (172.18.0.23)

by mta04.sendnode.com (KumoMTA 172.17.0.1)

with ESMTP id 209399bab3aa11efbf25f6ee3c5a3514 for ;

Fri, 6 Dec 2024 08:14:34 +0000

Mime-Version: 1.0

Date: Fri, 06 Dec 2024 08:24:31 +0100

Message-Id:

From: =?UTF-8?B?0IXRgNC+dGlmeQ==?=

To:

Reply-To:

Subject: =?UTF-8?Q?We_Couldn=E2=80=99t_Process_Your_Payment_=E2=80=93?=

=?UTF-8?Q?_Quick_Action_Needed?=

List-Unsubscribe: ,



List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Id: <4214.1ec.sendnode.com>

X-Abuse-Id: MTI3LjAuMC4xLTE2OTE2LTQ5Mi0yODk4NTQ4LXFicGdiZUBhcmd4YWJqLnBu

X-Sendjob-Id: 448531730

X-Complaints-To:

X-Csa-Complaints:

X-Mailer: Mailingwork

X-Virtual-Mta: default

X-Sender: info@rs.fraunhofer.de

X-Receiver: doctor@netknow.ca

X-Job: 448531730

X-Envid: 16916-492-2898548

X-Rm-Datanode: node11.sendnode.com

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: Quoted-Printable

X-Spam_score: 27.1

X-Spam_score_int: 271

X-Spam_bar: +++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Ѕроtify Premium We’re Having Trouble Processing Your

Ѕроtify Ꮲrеmium рауmеոt



Content analysis details: (27.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.98.184.163 listed in dnsbl.ahbl.org]

[185.98.184.163 listed in dnsbl.ahbl.org]

[185.98.184.163 listed in dnsbl.ahbl.org]

[185.98.184.163 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.98.184.163 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.98.184.163 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.98.184.163 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.98.184.163 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.98.184.163 listed in will-spam-for-food.eu.org]

[185.98.184.163 listed in will-spam-for-food.eu.org]

[185.98.184.163 listed in will-spam-for-food.eu.org]

[185.98.184.163 listed in will-spam-for-food.eu.org]

[185.98.184.163 listed in will-spam-for-food.eu.org]

[185.98.184.163 listed in will-spam-for-food.eu.org]

[185.98.184.163 listed in will-spam-for-food.eu.org]

[185.98.184.163 listed in will-spam-for-food.eu.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: spotuykunde.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: spotuykunde.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[185.98.184.163 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[185.98.184.163 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[185.98.184.163 listed in sa-accredit.habeas.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[185.98.184.163 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[185.98.184.163 listed in bl.score.senderscore.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 URI_GOOGLE_PROXY Accessing a blacklisted URI or obscuring source of

phish via Google proxy?

-0.5 DKIMWL_WL_MED DKIMwl.org - Medium trust sender

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

Subject: {SPAM?} =?UTF-8?Q?We_Couldn=E2=80=99t_Process_Your_Payment_=E2=80=93?=

=?UTF-8?Q?_Quick_Action_Needed?=












=3D1=2E0">

=D0=85=D1=80=D0=BEtify Premium












center; padding: 0;">


ea-bc05-39a31cc7f2bd" alt=3D"Spotify Premium" style=3D"max-width: 100%; hei=

ght: auto;">









We=E2=80=99re Having Trouble Processing Your =D0=85=D1=80=

=D0=BEtify =E1=8F=A2r=D0=B5mium =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t



Hello,



It looks like your =D0=85=D1=80=D0=BEtify =E1=8F=A2r=D0=B5mi=

um =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t didn=E2=80=99t go through=2E Here=E2=80=

=99s what might have happened:





  • There might be an issue with your b=D0=B0=D5=B8k=2E


  • Your =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t card has expired=

    =2E


  • Your account doesn=E2=80=99t have enough funds=2E




To ensure uninterrupted access to your playlists and favorit=

e tunes, simply update your payment details=2E It only takes a moment!




ykunde=2Ecom/redire=2Ephp">Update Now


Let=E2=80=99s get you back to en=

joying the music you love without missing a beat!



Cheers, =D0=85=D1=80=D0=BEtify
p>










hQh5ql_4WH2nILb01PORAjtT8rHAtf2aoNtC1xOTPeAKf38Aaa1dryQ-845268GExKqt0JlId8_=

vKNaLTmb23yeZtk7LO_TPohjnc-B8C7JOmAA=3Ds0-d-e1-ft#http://aro=2Espotify=2Es3=

=2Eamazonaws=2Ecom/newsletter/images/logo_footer=2Epng" alt=3D"Spotify Logo=

">




Get =D0=85=D1=80=D0=BEtify for: iPhone | <=

a href=3D"#">iPad | Android | Other=






Terms of Use | Privacy Polic=

y
| Contact



=D0=85=D1=80=D0=BEtify AB, Regeringsgatan 19, 111 53, Stockh=

olm, Sweden








5WjzIMB/psFHv6mcgd" width=3D"1" height=3D"1" border=3D"0" alt=3D"" style=3D=

"display:none" />





Spotify Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Dec 2024 01:27:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJTez-000000008sM-2ibh

for dave@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 01:26:01 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Dec 2024 01:26:01 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mda358.sendnode.com ([185.98.184.88]:40485)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJTCL-000000007rY-2FKT

for support@nk.ca;

Fri, 06 Dec 2024 00:56:30 -0700

X-KumoRef: eyJfQF8iOiJcXF8vIiwicmVjaXBpZW50Ijoic3VwcG9ydEBuay5jYSJ9

DKIM-Signature: v=1; a=rsa-sha256; d=sendnode.com; s=mdkv20200702; c=relaxed/relaxed;

bh=dYReApKuAjoEMXItqb1gp/v0bHiJuiDPCfy7csBVEz0=;

h=from:from:reply-to:reply-to:subject:subject:date:date:to:to:cc:

references:list-id:list-id:list-help:list-unsubscribe:list-unsubscribe:

list-subscribe:list-post:list-owner:list-archive:list-unsubscribe-post:

list-unsubscribe-post:x-csa-complaints:x-csa-complaints; t=1733471665;

b=S6ZKKelKjJWtNh2tQSbISya3V+n2QL8WXR8SFcIPcibc7wYMzzvaei3NXdfx6AbG+2TnaVWNd

fGwMYifrWJThzY0+cZnW65Z3GSvcdWDR4GXammNre3jVp6CGJ5Y/KRTVZOROzqylt0NZvQSwPcT

wkbHt0xwIlGqD5PyMXqq39IubgUCi0M62uX5l+gU0sELXfB7fNbx4vMSl9jwquHe6xJtlH3Eycd

grfTOVQQ0LROyZcAcfcwaoMmCHcbbSeN65Zhfil2dgrXnBs3/IZw9SxpVa68m0HAKnagj+FFJrz

mRUADXqhvuD9bFJxAx7kwUBAntmoh5IcaJtGLoO4FqvQ==;

Received: from unspecified (172.18.0.22)

by mta02.sendnode.com (KumoMTA 172.17.0.1)

with ESMTP id 4fd78027b3a711efaecda605b99bcc65 for ;

Fri, 6 Dec 2024 07:54:25 +0000

Mime-Version: 1.0

Date: Fri, 06 Dec 2024 08:11:08 +0100

Message-Id:

From: =?UTF-8?B?0IXRgNC+dGlmeQ==?=

To:

Reply-To:

Subject: =?UTF-8?Q?We_Couldn=E2=80=99t_Process_Your_Payment_=E2=80=93?=

=?UTF-8?Q?_Quick_Action_Needed?=

List-Unsubscribe: ,



List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Id: <4214.1ea.sendnode.com>

X-Abuse-Id: MTI3LjAuMC4xLTE2OTE2LTQ5MC0xMTA0NDg2LWZoY2NiZWdAYXgucG4=

X-Sendjob-Id: 448527550

X-Complaints-To:

X-Csa-Complaints:

X-Mailer: Mailingwork

X-Virtual-Mta: default

X-Sender: info@rs.fraunhofer.de

X-Receiver: support@nk.ca

X-Job: 448527550

X-Envid: 16916-490-1104486

X-Rm-Datanode: node16.sendnode.com

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: Quoted-Printable

X-Spam_score: 22.4

X-Spam_score_int: 224

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Ѕроtify Premium We’re Having Trouble Processing Your

Ѕроtify Ꮲrеmium рауmеոt



Content analysis details: (22.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.98.184.88 listed in dnsbl.ahbl.org]

[185.98.184.88 listed in dnsbl.ahbl.org]

[185.98.184.88 listed in dnsbl.ahbl.org]

[185.98.184.88 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.98.184.88 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.98.184.88 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.98.184.88 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.98.184.88 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.98.184.88 listed in will-spam-for-food.eu.org]

[185.98.184.88 listed in will-spam-for-food.eu.org]

[185.98.184.88 listed in will-spam-for-food.eu.org]

[185.98.184.88 listed in will-spam-for-food.eu.org]

[185.98.184.88 listed in will-spam-for-food.eu.org]

[185.98.184.88 listed in will-spam-for-food.eu.org]

[185.98.184.88 listed in will-spam-for-food.eu.org]

[185.98.184.88 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[185.98.184.88 listed in list.dnswl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 URI_GOOGLE_PROXY Accessing a blacklisted URI or obscuring source of

phish via Google proxy?

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

-0.5 DKIMWL_WL_MED DKIMwl.org - Medium trust sender

Subject: {SPAM?} =?UTF-8?Q?We_Couldn=E2=80=99t_Process_Your_Payment_=E2=80=93?=

=?UTF-8?Q?_Quick_Action_Needed?=












=3D1=2E0">

=D0=85=D1=80=D0=BEtify Premium












center; padding: 0;">


ea-bc05-39a31cc7f2bd" alt=3D"Spotify Premium" style=3D"max-width: 100%; hei=

ght: auto;">









We=E2=80=99re Having Trouble Processing Your =D0=85=D1=80=

=D0=BEtify =E1=8F=A2r=D0=B5mium =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t



Hello,



It looks like your =D0=85=D1=80=D0=BEtify =E1=8F=A2r=D0=B5mi=

um =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t didn=E2=80=99t go through=2E Here=E2=80=

=99s what might have happened:





  • There might be an issue with your b=D0=B0=D5=B8k=2E


  • Your =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t card has expired=

    =2E


  • Your account doesn=E2=80=99t have enough funds=2E




To ensure uninterrupted access to your playlists and favorit=

e tunes, simply update your payment details=2E It only takes a moment!




=2Ely/sl3hg9">Update Now


Let=E2=80=99s get you back to en=

joying the music you love without missing a beat!



Cheers, =D0=85=D1=80=D0=BEtify
p>










hQh5ql_4WH2nILb01PORAjtT8rHAtf2aoNtC1xOTPeAKf38Aaa1dryQ-845268GExKqt0JlId8_=

vKNaLTmb23yeZtk7LO_TPohjnc-B8C7JOmAA=3Ds0-d-e1-ft#http://aro=2Espotify=2Es3=

=2Eamazonaws=2Ecom/newsletter/images/logo_footer=2Epng" alt=3D"Spotify Logo=

">




Get =D0=85=D1=80=D0=BEtify for: iPhone | <=

a href=3D"#">iPad | Android | Other=






Terms of Use | Privacy Polic=

y
| Contact



=D0=85=D1=80=D0=BEtify AB, Regeringsgatan 19, 111 53, Stockh=

olm, Sweden








H48l4dG/LCpjfGDFTT" width=3D"1" height=3D"1" border=3D"0" alt=3D"" style=3D=

"display:none" />





Spotify Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Dec 2024 01:26:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJTeu-000000008rI-449q

for dave@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 01:25:56 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Dec 2024 01:25:56 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mda35c.sendnode.com ([185.98.184.92]:6301)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJTBn-000000007qe-18K2

for sales@nk.ca;

Fri, 06 Dec 2024 00:55:56 -0700

X-KumoRef: eyJfQF8iOiJcXF8vIiwicmVjaXBpZW50Ijoic2FsZXNAbmsuY2EifQ==

DKIM-Signature: v=1; a=rsa-sha256; d=sendnode.com; s=mdkv20200702; c=relaxed/relaxed;

bh=LBTZmkSlztph0Rop3AMyn9TgwnVvQN3BXP/l8X3Y3dQ=;

h=from:from:reply-to:reply-to:subject:subject:date:date:to:to:cc:

references:list-id:list-id:list-help:list-unsubscribe:list-unsubscribe:

list-subscribe:list-post:list-owner:list-archive:list-unsubscribe-post:

list-unsubscribe-post:x-csa-complaints:x-csa-complaints; t=1733471635;

b=favYu9njPpY/+jDyQxfKGFpU2F6N7ntq70PaKRY3KLODTngGuY8IHrmLyb62Cbkq0HLguRrIU

P+sqGeoV/oU5+l/SZ/eAYsMjclHZ9B3Rk6TVwXAsQRqiL9t9daW+7dCjueMik2zM9AOwxc6LAyD

izJMUk+QCIUX9Y+dP2oQpni66I+7Pu5fO6fyK1PL6/44r7vPQhs/HauOX89r4PRDRimql7H7lY7

5kKB/RhrU/W6lAl4UGs5lC7Hh977t9MrO0+SHh7Q85D3kPW0RokpAR18nLVq4zrRvbuYSsrhXpM

sWw6kH09G04Ukd4SkGwJoB3NiqN7usDTnSjwtv9bFs/w==;

Received: from unspecified (172.18.0.28)

by mta02.sendnode.com (KumoMTA 172.17.0.1)

with ESMTP id 3dd55715b3a711ef91a7a605b99bcc65 for ;

Fri, 6 Dec 2024 07:53:55 +0000

Mime-Version: 1.0

Date: Fri, 06 Dec 2024 08:10:53 +0100

Message-Id:

From: =?UTF-8?B?0IXRgNC+dGlmeQ==?=

To:

Reply-To:

Subject: =?UTF-8?Q?We_Couldn=E2=80=99t_Process_Your_Payment_=E2=80=93?=

=?UTF-8?Q?_Quick_Action_Needed?=

List-Unsubscribe: ,



List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Id: <4214.1ea.sendnode.com>

X-Abuse-Id: MTI3LjAuMC4xLTE2OTE2LTQ5MC0zMTU4MDItZm55cmZAYXgucG4=

X-Sendjob-Id: 448527550

X-Complaints-To:

X-Csa-Complaints:

X-Mailer: Mailingwork

X-Virtual-Mta: default

X-Sender: info@rs.fraunhofer.de

X-Receiver: sales@nk.ca

X-Job: 448527550

X-Envid: 16916-490-315802

X-Rm-Datanode: node11.sendnode.com

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: Quoted-Printable

X-Spam_score: 22.4

X-Spam_score_int: 224

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Ѕроtify Premium We’re Having Trouble Processing Your

Ѕроtify Ꮲrеmium рауmеոt



Content analysis details: (22.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.98.184.92 listed in dnsbl.ahbl.org]

[185.98.184.92 listed in dnsbl.ahbl.org]

[185.98.184.92 listed in dnsbl.ahbl.org]

[185.98.184.92 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.98.184.92 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.98.184.92 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.98.184.92 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.98.184.92 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.98.184.92 listed in will-spam-for-food.eu.org]

[185.98.184.92 listed in will-spam-for-food.eu.org]

[185.98.184.92 listed in will-spam-for-food.eu.org]

[185.98.184.92 listed in will-spam-for-food.eu.org]

[185.98.184.92 listed in will-spam-for-food.eu.org]

[185.98.184.92 listed in will-spam-for-food.eu.org]

[185.98.184.92 listed in will-spam-for-food.eu.org]

[185.98.184.92 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[185.98.184.92 listed in list.dnswl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 URI_GOOGLE_PROXY Accessing a blacklisted URI or obscuring source of

phish via Google proxy?

-0.5 DKIMWL_WL_MED DKIMwl.org - Medium trust sender

Subject: {SPAM?} =?UTF-8?Q?We_Couldn=E2=80=99t_Process_Your_Payment_=E2=80=93?=

=?UTF-8?Q?_Quick_Action_Needed?=












=3D1=2E0">

=D0=85=D1=80=D0=BEtify Premium












center; padding: 0;">


ea-bc05-39a31cc7f2bd" alt=3D"Spotify Premium" style=3D"max-width: 100%; hei=

ght: auto;">









We=E2=80=99re Having Trouble Processing Your =D0=85=D1=80=

=D0=BEtify =E1=8F=A2r=D0=B5mium =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t



Hello,



It looks like your =D0=85=D1=80=D0=BEtify =E1=8F=A2r=D0=B5mi=

um =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t didn=E2=80=99t go through=2E Here=E2=80=

=99s what might have happened:





  • There might be an issue with your b=D0=B0=D5=B8k=2E


  • Your =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t card has expired=

    =2E


  • Your account doesn=E2=80=99t have enough funds=2E




To ensure uninterrupted access to your playlists and favorit=

e tunes, simply update your payment details=2E It only takes a moment!




=2Ely/sl3hg9">Update Now


Let=E2=80=99s get you back to en=

joying the music you love without missing a beat!



Cheers, =D0=85=D1=80=D0=BEtify
p>










hQh5ql_4WH2nILb01PORAjtT8rHAtf2aoNtC1xOTPeAKf38Aaa1dryQ-845268GExKqt0JlId8_=

vKNaLTmb23yeZtk7LO_TPohjnc-B8C7JOmAA=3Ds0-d-e1-ft#http://aro=2Espotify=2Es3=

=2Eamazonaws=2Ecom/newsletter/images/logo_footer=2Epng" alt=3D"Spotify Logo=

">




Get =D0=85=D1=80=D0=BEtify for: iPhone | <=

a href=3D"#">iPad | Android | Other=






Terms of Use | Privacy Polic=

y
| Contact



=D0=85=D1=80=D0=BEtify AB, Regeringsgatan 19, 111 53, Stockh=

olm, Sweden








dvLal2/76nAc71qNc" width=3D"1" height=3D"1" border=3D"0" alt=3D"" style=3D"=

display:none" />





Spotify Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 Dec 2024 01:26:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJTen-000000008r2-2QP4

for dave@doctor.nl2k.ab.ca;

Fri, 06 Dec 2024 01:25:49 -0700

Resent-From: The Doctor

Resent-Date: Fri, 6 Dec 2024 01:25:49 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mda366.sendnode.com ([185.98.184.102]:48779)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJSKn-000000005x7-2kpA

for doctor@netknow.ca;

Fri, 06 Dec 2024 00:01:10 -0700

X-KumoRef: eyJfQF8iOiJcXF8vIiwicmVjaXBpZW50IjoiZG9jdG9yQG5ldGtub3cuY2EifQ==

DKIM-Signature: v=1; a=rsa-sha256; d=sendnode.com; s=mdkv20200702; c=relaxed/relaxed;

bh=+1ARHcxBjHw06K1YqgxneMtwRV2oByCmWQNoc+gU0Ls=;

h=from:from:reply-to:reply-to:subject:subject:date:date:to:to:cc:

references:list-id:list-id:list-help:list-unsubscribe:list-unsubscribe:

list-subscribe:list-post:list-owner:list-archive:list-unsubscribe-post:

list-unsubscribe-post:x-csa-complaints:x-csa-complaints; t=1733468344;

b=Ig7t/k0L+W0MaLkD5m9JPrbyOXyeNFFckdpHSCbTc9dD0ZUSuYYEGd/2muTB5RLlEJygj51WY

IJB7wbl4N63ppMwPjMoEUv9ZOnZTDMb6qoO7XucwmXSP1fSnyayM7BGB/udxOHH5lmXvb83HFS5

xS0xki8tIDVtUBUpTRZvJJrPtExUaTbks3UirNEjQ1GZFoyJmhNr6wORrdyoJD9Xlm6S6GzXxt8

W3TYdR90Eo7OOjuKSpb5XhE/zsf6LdomSBqp6ikZ9WOdUJq9kS7Y4tKXGbkuuYGVJxwv9bjvF/V

uy3oKa3tqvqS5KdDCKF4KUoOgUCaDzj+bLmSlE7dGIuw==;

Received: from unspecified (172.18.0.22)

by mta02.sendnode.com (KumoMTA 172.17.0.1)

with ESMTP id 9499a1deb39f11efb566a605b99bcc65 for ;

Fri, 6 Dec 2024 06:59:04 +0000

Mime-Version: 1.0

Date: Fri, 06 Dec 2024 07:53:38 +0100

Message-Id:

From: =?UTF-8?B?0IXRgNC+dGlmeQ==?=

To:

Reply-To:

Subject: =?UTF-8?Q?We_Couldn=E2=80=99t_Process_Your_Payment_=E2=80=93?=

=?UTF-8?Q?_Quick_Action_Needed?=

List-Unsubscribe: ,



List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Id: <4214.1ea.sendnode.com>

X-Abuse-Id: MTI3LjAuMC4xLTE2OTE2LTQ5MC0yODk4NTUwLXFicGdiZUBhcmd4YWJqLnBu

X-Sendjob-Id: 448527550

X-Complaints-To:

X-Csa-Complaints:

X-Mailer: Mailingwork

X-Virtual-Mta: default

X-Sender: info@rs.fraunhofer.de

X-Receiver: doctor@netknow.ca

X-Job: 448527550

X-Envid: 16916-490-2898550

X-Rm-Datanode: node12.sendnode.com

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: Quoted-Printable

X-Spam_score: 22.4

X-Spam_score_int: 224

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Ѕроtify Premium We’re Having Trouble Processing Your

Ѕроtify Ꮲrеmium рауmеոt



Content analysis details: (22.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.98.184.102 listed in dnsbl.ahbl.org]

[185.98.184.102 listed in dnsbl.ahbl.org]

[185.98.184.102 listed in dnsbl.ahbl.org]

[185.98.184.102 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.98.184.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.98.184.102 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.98.184.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.98.184.102 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.98.184.102 listed in will-spam-for-food.eu.org]

[185.98.184.102 listed in will-spam-for-food.eu.org]

[185.98.184.102 listed in will-spam-for-food.eu.org]

[185.98.184.102 listed in will-spam-for-food.eu.org]

[185.98.184.102 listed in will-spam-for-food.eu.org]

[185.98.184.102 listed in will-spam-for-food.eu.org]

[185.98.184.102 listed in will-spam-for-food.eu.org]

[185.98.184.102 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[185.98.184.102 listed in list.dnswl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 URI_GOOGLE_PROXY Accessing a blacklisted URI or obscuring source of

phish via Google proxy?

-0.5 DKIMWL_WL_MED DKIMwl.org - Medium trust sender

Subject: {SPAM?} =?UTF-8?Q?We_Couldn=E2=80=99t_Process_Your_Payment_=E2=80=93?=

=?UTF-8?Q?_Quick_Action_Needed?=












=3D1=2E0">

=D0=85=D1=80=D0=BEtify Premium












center; padding: 0;">


ea-bc05-39a31cc7f2bd" alt=3D"Spotify Premium" style=3D"max-width: 100%; hei=

ght: auto;">









We=E2=80=99re Having Trouble Processing Your =D0=85=D1=80=

=D0=BEtify =E1=8F=A2r=D0=B5mium =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t



Hello,



It looks like your =D0=85=D1=80=D0=BEtify =E1=8F=A2r=D0=B5mi=

um =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t didn=E2=80=99t go through=2E Here=E2=80=

=99s what might have happened:





  • There might be an issue with your b=D0=B0=D5=B8k=2E


  • Your =D1=80=D0=B0=D1=83m=D0=B5=D5=B8t card has expired=

    =2E


  • Your account doesn=E2=80=99t have enough funds=2E




To ensure uninterrupted access to your playlists and favorit=

e tunes, simply update your payment details=2E It only takes a moment!




=2Ely/sl3hg9">Update Now


Let=E2=80=99s get you back to en=

joying the music you love without missing a beat!



Cheers, =D0=85=D1=80=D0=BEtify
p>










hQh5ql_4WH2nILb01PORAjtT8rHAtf2aoNtC1xOTPeAKf38Aaa1dryQ-845268GExKqt0JlId8_=

vKNaLTmb23yeZtk7LO_TPohjnc-B8C7JOmAA=3Ds0-d-e1-ft#http://aro=2Espotify=2Es3=

=2Eamazonaws=2Ecom/newsletter/images/logo_footer=2Epng" alt=3D"Spotify Logo=

">




Get =D0=85=D1=80=D0=BEtify for: iPhone | <=

a href=3D"#">iPad | Android | Other=






Terms of Use | Privacy Polic=

y
| Contact



=D0=85=D1=80=D0=BEtify AB, Regeringsgatan 19, 111 53, Stockh=

olm, Sweden








5WjzIMB/3eji3oJsWA" width=3D"1" height=3D"1" border=3D"0" alt=3D"" style=3D=

"display:none" />





Royal Bank of Canada Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 05 Dec 2024 18:23:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJN3Q-00000000CP7-19iu

for dave@doctor.nl2k.ab.ca;

Thu, 05 Dec 2024 18:22:48 -0700

Resent-From: The Doctor

Resent-Date: Thu, 5 Dec 2024 18:22:48 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.tachomi.hu ([91.120.20.212]:64074)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tJLTC-000000004zB-228B

for sales@nk.ca;

Thu, 05 Dec 2024 16:41:22 -0700

Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id A758D1141A0

for ; Fri, 6 Dec 2024 00:39:19 +0100 (CET)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tachomi.hu; s=dkim;

t=1733441960; h=from:subject:date:to:mime-version:content-type:

content-transfer-encoding; bh=LjiZRUWEUr9Mg0tIDhb+hx0B/82/46BbBEuLup5t7X8=;

b=XQC5wfvEkCv0UkZJZIMrUHt2nwXSX022KlfPaWYD60isG4ygBwpOx4zKn73M8l1qlXEBW8

Y+5ltK0tT8kFrOU8gpaMCXXEOtYPS6inejkD6E+ZiBBaZop7NfD7HB/RgKhB4zbHngTx3C

iYEdej8Xde/PQJDCPLgTCTO8Nb4LdO3OAQnB6mqqYl2Jxe+bWNGVPIUCQMG+HDwPxZeelT

rVHmf5TuuUWuimYMGxFDnwfJt9eFOrnuCDhVllKObMIKPPv9RIb5OwSGI5CTdf4BH43kwE

BbgEckmDssy+i9itSheDlUnkX54oteTQfhbox3VDiHvX8HQ3VZSou4/SIOMf5Q==

MIME-Version: 1.0

From: "Royal Bank of Canada (RBC) Security Team"

To: sales@nk.ca

Date: 6 Dec 2024 00:39:19 +0100

Subject: Identity Verification Needed: Prevent Account Lock

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: quoted-printable

X-Last-TLS-Session-Version: TLSv1.2

X-Spam_score: 10.3

X-Spam_score_int: 103

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: ROYAL BANK OF CANADA Important Security Alert Dear Valued

Customer,



Content analysis details: (10.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[91.120.20.212 listed in dnsbl.ahbl.org]

[91.120.20.212 listed in dnsbl.ahbl.org]

[91.120.20.212 listed in dnsbl.ahbl.org]

[91.120.20.212 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[91.120.20.212 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[91.120.20.212 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[91.120.20.212 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[91.120.20.212 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[91.120.20.212 listed in will-spam-for-food.eu.org]

[91.120.20.212 listed in will-spam-for-food.eu.org]

[91.120.20.212 listed in will-spam-for-food.eu.org]

[91.120.20.212 listed in will-spam-for-food.eu.org]

[91.120.20.212 listed in will-spam-for-food.eu.org]

[91.120.20.212 listed in will-spam-for-food.eu.org]

[91.120.20.212 listed in will-spam-for-food.eu.org]

[91.120.20.212 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.5 TVD_PH_SEC BODY: Message includes a phrase commonly used in phishing

mails

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.9 URI_PHISH Phishing using web form

1.0 ACCT_PHISHING Possible phishing for account information

Subject: {SPAM?} Identity Verification Needed: Prevent Account Lock




l, sans-serif; BACKGROUND: rgb(0,32,91); WHITE-SPACE: normal; WOR=

D-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rg=

b(255,255,255); PADDING-BOTTOM: 20px; FONT-STYLE: normal; TEXT-AL=

IGN: center; PADDING-TOP: 20px; PADDING-LEFT: 20px; ORPHANS: 2; W=

IDOWS: 2; LETTER-SPACING: normal; PADDING-RIGHT: 20px; TEXT-INDEN=

T: 0px; font-variant-ligatures: normal; font-variant-caps: normal=

; -webkit-text-stroke-width: 0px; text-decoration-thickness: init=

ial; text-decoration-style: initial; text-decoration-color: initi=

al">3D"R=<br
oyal Bank of Canada Logo" src=3D"https://www.rbcroyalbank.com/dvl=

/v1.0/assets/images/logos/rbc-logo-shield.svg">=0D=0A


"FONT-SIZE: 24px; FONT-WEIGHT: 600; MARGIN: 0px">ROYAL BANK OF CA=

NADA

=0D=0A

; FONT-FAMILY: Arial, sans-serif; WHITE-SPACE: normal; WORD-SPACI=

NG: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(51,51=

,51); PADDING-BOTTOM: 20px; FONT-STYLE: normal; PADDING-TOP: 20px=

; PADDING-LEFT: 20px; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: norm=

al; PADDING-RIGHT: 20px; TEXT-INDENT: 0px; font-variant-ligatures=

: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0=

px; text-decoration-thickness: initial; text-decoration-style: in=

itial; text-decoration-color: initial">=0D=0A


ZE: 20px; MARGIN-BOTTOM: 10px">Important Security Alert

=0D=0A=

=

Dear Valued Customer,

=0D=0A


N: 10px 0px; LINE-HEIGHT: 1.5">Your account may be locked due to =

new security measures. To ensure uninterrupted access, we require=

you to verify your identity.

=0D=0A


x; MARGIN: 10px 0px; LINE-HEIGHT: 1.5">Please log in and update y=

our account details as soon as possible to prevent any inconvenie=

nce.


RATION: none; MAX-WIDTH: 200px; BACKGROUND: rgb(0,113,206); FONT-=

WEIGHT: bold; COLOR: rgb(255,255,255); PADDING-BOTTOM: 12px; TEXT=

-ALIGN: center; PADDING-TOP: 12px; PADDING-LEFT: 20px; MARGIN: 20=

px auto 0px; DISPLAY: block; PADDING-RIGHT: 20px; border-radius: =

5px" href=3D"https://declarateenquiebra.cl/rolo.php">Verify Your =

Account
=0D=0A

px; FONT-FAMILY: Arial, sans-serif; BACKGROUND: rgb(249,249,249);=

WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FO=

NT-WEIGHT: 400; COLOR: rgb(119,119,119); PADDING-BOTTOM: 15px; FO=

NT-STYLE: normal; TEXT-ALIGN: center; PADDING-TOP: 15px; PADDING-=

LEFT: 15px; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; PADDIN=

G-RIGHT: 15px; TEXT-INDENT: 0px; font-variant-ligatures: normal; =

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-d=

ecoration-thickness: initial; text-decoration-style: initial; tex=

t-decoration-color: initial">=0D=0A

This email was sent by Roya=

l Bank of Canada. Please do not reply to this email.

=0D=0A

=

For more information, visit our 
T-DECORATION: none; COLOR: rgb(0,113,206)" href=3D"https://declar=

ateenquiebra.cl/rolo.php">official website
.

=0D=0A