NetKknow still in Netcraft's top 1850

Posted by Dave Yadallee on
All data is from Netcraft Toolbar .

Looks as if there are major changes to the Netcraft algorithm after some years! Why did Avast clasify the extension as URL:Phishing?

This is not the Alexa Tool Bar!



NetKnow







Netknow now 1837 at Netcraft and pfs compliant



A significant decrease! We must do
  1. security audits regularly
  2. check on illegitimate traffic hitting the web server
    3. and
  3. keep design current!




How do we compare with other providers in

Edmonton, Alberta, Canada?



Netknow again





We at Netknow are1837 from 1843 since late December 2024.



Telus and reviews



Next we have Telus.com

ranked by Netcraft at 6553 from 6464 .

Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business

is ranked by Netcraft at >2000000 from >2000000 .



Rogers





Rogers Business Solutions

which rank 9036 from 9016 and are hosted in Europe.



Is Telus's ADSL network susceptible to Code Red Attacks and Attackers?

Reviews of Telus are available :





Government of Alberta



The Government of Alberta Website

ranks 14197 from 14202 by Netcraft and seems to hosted on Cloudfare.



University of Alberta







The University of Alberta ranks 40309 from 40209 hosted by Amazon Techonologies.



City of Edmonton







The City of Edmonton ranks 57882 from 58746 by Netcraft and hosted by Google.



Shaw Cable





Next,

members.shaw.ca

ranks >2000000 from >2000000 and retired and

Shaw Cable

is next at Netcraft rank 58389 from 60171 . Hosted now by Akamei .

Their Network Hosting Arm,

Big Pipe is at

Netcraft rank 266424 and hosted by Akamai in Europe .



Reviews of Shaw are available :





Juno and NetZero





We have Juno Internet ranked on top

at 121885 from 118629 who are the owners of

US Based Netzero at Netcraft Rank 79840 from 79988 .



NAIT / Northern Alberta Institute of Technology



NAIT ranks 100401 from 100424 hosted by Microsoft .





TekSavvy



TekSavvy ranks 195586 from 191229 and are hosted by Microsoft



Internet Centre / CCINet



Internet Centre

rank 242879 from 243263 . Their partner Rack Nine ranks > 2000000.



Primus



Primus

ranks 407202 from 409515 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.



Grant MacEwen University





MacEwan ranks 420373 from 422652 .



Distributel / 3Web / CIA



Cybersurf

is ranked 528097 from 530933 and seems to be hosted in USA by DigitalOcean.



Xplornet



xplornet

ranks >2000000 from >2000000 and are listed with

Cirrus9 and are joining up with Shaw.

Their new domain xplore.ca ranks 585337 from 588546 .

According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy.



Radiant Communications / goco.ca





Radiant Communications

are ranked by Netcraft >2000000 and part of goco.ca

which ranks >2000000 .



Tera Byte Edmonton and reviews





Next is Tera-Byte

at Netcraft Rank >2000000 with

Tera-Byte.ca

ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless

sold to Xplornet.

One of Tera-Byte's acquisitions

Edmonton Community Networks

ranks at >2000000 from >2000000 and

Go Edmonton ranks >2000000 from >2000000.

Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!

Reviews of Tera-byte is available at

here

and another here

and check Google for more reviews; just search tera byte.



MCSnet





MCSNET ranks >2000000 from >2000000 and are hosted by Microsoft .



Nucleus Internet Services





After that we have

Nucleus Information Services which can be found at Netcraft Rank >2000000 from >2000000 .





4Web





4web ranks >2000000 from >2000000 .



Alentus / Wolfpaw





Alentus

rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA .

wolfpaw.net

which ranks at >2000000 from >2000000



Yellowpencil





Yellowpencil Ranks >2000000 from >2000000



WSI Corporation





Next is WSI - We Simply The Internet of Toronto

at Netcraft Position >2000000 from >2000000 and are being hosted on Amazon.



Uniserve / Interbaun





Next, Uniserve

ranks on Netcraft >2000000 from >2000000

One of their acquisitions

interbaun

ranks with Netcraft ?????? from ?????? due to merging of sites.

One customer just came over from this organization in Nov 2006.



Clearwave Broadband





Clearwave Broadband ranks

at >2000000 from >2000000



Platinum Communications





Platinum Communications Corp.

bought out by Xplornet .



Wild Rose Internet





Wild Rose Internet

ranks >2000000 from >2000000 and I wonder if this is another wireless branch of Tera-Byte and bought out by Xplornet





TIC Internet





TIC Internet

ranks >2000000 from >2000000 ( I do remember you).







Nisa Custom Internet Solutions





Nisa Custom Internet Solutions

ranks >2000000 from >2000000 by Netcraft



MediaShaker





Media Shakers of Edmonton

ranks >2000000 from >2000000





Koi Media





Koi Media

rank >2000000 from >2000000



WebFire





Webfire.ca

ranks >2000000 from >2000000 and seems to be connected with Shaw.



Core Network Solutions Inc.





Core Network Solutions Inc.

ranks at >2000000 from >2000000 .



The Network Centre





The Network Centre

ranks >2000000 from >2000000 and are linked with Telus high Speed.





Open Concept Internet, Inc.





Open Concept Internet, Inc.

rank > 2000000 from > 2000000





Techalta





Interspots of Edmonton

acquired by Techalta ;



Yegtel





Yegtel rank > 2000000 .



Internet Crossroads





Internet Crossroads Ltd of North Edmonton

rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca .



If I remember anymore, I will add to this entry, before Netcraft changes our ranking. Please watch this space and please feel free to peruse

our services.

NetKknow still in Netcraft's top 1850

Posted by Dave Yadallee on
All data is from Netcraft Toolbar .

Looks as if there are major changes to the Netcraft algorithm after some years! Why did Avast clasify the extension as URL:Phishing?

This is not the Alexa Tool Bar!



NetKnow







Netknow now 1837 at Netcraft and pfs compliant



A significant decrease! We must do
  1. security audits regularly
  2. check on illegitimate traffic hitting the web server
    3. and
  3. keep design current!




How do we compare with other providers in

Edmonton, Alberta, Canada?



Netknow again





We at Netknow are1837 from 1843 since late December 2024.



Telus and reviews



Next we have Telus.com

ranked by Netcraft at 6553 from 6464 .

Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business

is ranked by Netcraft at >2000000 from >2000000 .



Rogers





Rogers Business Solutions

which rank 9036 from 9016 and are hosted in Europe.



Is Telus's ADSL network susceptible to Code Red Attacks and Attackers?

Reviews of Telus are available :





Government of Alberta



The Government of Alberta Website

ranks 14197 from 14202 by Netcraft and seems to hosted on Cloudfare.



University of Alberta







The University of Alberta ranks 40309 from 40209 hosted by Amazon Techonologies.



City of Edmonton







The City of Edmonton ranks 57882 from 58746 by Netcraft and hosted by Google.



Shaw Cable





Next,

members.shaw.ca

ranks >2000000 from >2000000 and retired and

Shaw Cable

is next at Netcraft rank 58389 from 60171 . Hosted now by Akamei .

Their Network Hosting Arm,

Big Pipe is at

Netcraft rank 266424 and hosted by Akamai in Europe .



Reviews of Shaw are available :





Juno and NetZero





We have Juno Internet ranked on top

at 121885 from 118629 who are the owners of

US Based Netzero at Netcraft Rank 79840 from 79988 .



NAIT / Northern Alberta Institute of Technology



NAIT ranks 100401 from 100424 hosted by Microsoft .





TekSavvy



TekSavvy ranks 195586 from 191229 and are hosted by Microsoft



Internet Centre / CCINet



Internet Centre

rank 242879 from 243263 . Their partner Rack Nine ranks > 2000000.



Primus



Primus

ranks 407202 from 409515 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.



Grant MacEwen University





MacEwan ranks 420373 from 422652 .



Distributel / 3Web / CIA



Cybersurf

is ranked 528097 from 530933 and seems to be hosted in USA by DigitalOcean.



Xplornet



xplornet

ranks >2000000 from >2000000 and are listed with

Cirrus9 and are joining up with Shaw.

Their new domain xplore.ca ranks 585337 from 588546 .

According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy.



Radiant Communications / goco.ca





Radiant Communications

are ranked by Netcraft >2000000 and part of goco.ca

which ranks >2000000 .



Tera Byte Edmonton and reviews





Next is Tera-Byte

at Netcraft Rank >2000000 with

Tera-Byte.ca

ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless

sold to Xplornet.

One of Tera-Byte's acquisitions

Edmonton Community Networks

ranks at >2000000 from >2000000 and

Go Edmonton ranks >2000000 from >2000000.

Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!

Reviews of Tera-byte is available at

here

and another here

and check Google for more reviews; just search tera byte.



MCSnet





MCSNET ranks >2000000 from >2000000 and are hosted by Microsoft .



Nucleus Internet Services





After that we have

Nucleus Information Services which can be found at Netcraft Rank >2000000 from >2000000 .





4Web





4web ranks >2000000 from >2000000 .



Alentus / Wolfpaw





Alentus

rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA .

wolfpaw.net

which ranks at >2000000 from >2000000



Yellowpencil





Yellowpencil Ranks >2000000 from >2000000



WSI Corporation





Next is WSI - We Simply The Internet of Toronto

at Netcraft Position >2000000 from >2000000 and are being hosted on Amazon.



Uniserve / Interbaun





Next, Uniserve

ranks on Netcraft >2000000 from >2000000

One of their acquisitions

interbaun

ranks with Netcraft ?????? from ?????? due to merging of sites.

One customer just came over from this organization in Nov 2006.



Clearwave Broadband





Clearwave Broadband ranks

at >2000000 from >2000000



Platinum Communications





Platinum Communications Corp.

bought out by Xplornet .



Wild Rose Internet





Wild Rose Internet

ranks >2000000 from >2000000 and I wonder if this is another wireless branch of Tera-Byte and bought out by Xplornet





TIC Internet





TIC Internet

ranks >2000000 from >2000000 ( I do remember you).







Nisa Custom Internet Solutions





Nisa Custom Internet Solutions

ranks >2000000 from >2000000 by Netcraft



MediaShaker





Media Shakers of Edmonton

ranks >2000000 from >2000000





Koi Media





Koi Media

rank >2000000 from >2000000



WebFire





Webfire.ca

ranks >2000000 from >2000000 and seems to be connected with Shaw.



Core Network Solutions Inc.





Core Network Solutions Inc.

ranks at >2000000 from >2000000 .



The Network Centre





The Network Centre

ranks >2000000 from >2000000 and are linked with Telus high Speed.





Open Concept Internet, Inc.





Open Concept Internet, Inc.

rank > 2000000 from > 2000000





Techalta





Interspots of Edmonton

acquired by Techalta ;



Yegtel





Yegtel rank > 2000000 .



Internet Crossroads





Internet Crossroads Ltd of North Edmonton

rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca .



If I remember anymore, I will add to this entry, before Netcraft changes our ranking. Please watch this space and please feel free to peruse

our services.

Nigerian spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jan 2025 15:22:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVHwf-0000000066G-0bYc

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jan 2025 15:21:05 -0700

Resent-From: The Doctor

Resent-Date: Tue, 7 Jan 2025 15:21:05 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f196.google.com ([209.85.160.196]:50209)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVGzo-00000000Kx8-18XF

for sales@nk.ca;

Tue, 07 Jan 2025 14:20:25 -0700

Received: by mail-qt1-f196.google.com with SMTP id d75a77b69052e-46769b34cbfso58137281cf.0

for ; Tue, 07 Jan 2025 13:18:21 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1736284695; x=1736889495; darn=nk.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=rN8L9kNbcxTp4AA4upHEaXFCQgW+kw1Du4zT910D4qg=;

b=InWbg2eKD2p5ZXAextyqu1RxQTv+NrK53obwyVBiOPcH1AQKY3/ag7KKHxgD5VwB3o

ow2dqvyl1TmEPUxTojql22rbyjEJiU3mUDbodyaHLEUv4ud71ztU1A5UkjhlpakjYRXY

6k3lI0NS7NonMZiruC6aHGc2VUAF/G1wZbFUSaA2ZXjCMYGZy1VAJUvsjTDRtJlLt/dX

uTmypP7XAspUs3f/Id09vh691z2t70BSM95fPOA5xnX8yfwmqW/HT+uvzN24BtTM4CIJ

aiLlAPbDQEnA7pPpRKeaJ2mJ66pQl/S2TlxiC8DI97hw51wzK8lBL+XWnJzePHO47iu2

loUg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1736284695; x=1736889495;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=rN8L9kNbcxTp4AA4upHEaXFCQgW+kw1Du4zT910D4qg=;

b=LE/jDZMoqcAc4+eX+eaBnziklJMh0Hln9JScTkk+6djBiBo8UQrJDOHlgd/UlbV9BK

VMdAM4OI82Wsl0qlCGq9RDCvyaRPUrSqTgMHjzeSoUFxbRqNGoj8MZeso/bW943zVkfV

6NdlIzUTCR4oFRgwTG9dyEPMnQSUMf6U0KktRP8CiJinn+XitJ7RYyB6CJbur0dsv9Rt

A3l6c4tg66gRDqBdXMNn92QXtiOyWFAOP6dfI804dGIRdDqaRZUag7RNBA52dLV+yFSb

ToouD3WzmrYPBlDLs9HGKXDcdji702Sr6osJiIps7Gk7PTDI47CoDZHUvqujJHV6XxsX

dmiA==

X-Forwarded-Encrypted: i=1; AJvYcCWVsc34PHRmgPq9G68pAREhe3rMsNiDZFgHXY5MlDb7LHgAJZKkHz3p9syMlbJsEny0pF/+Og==@nk.ca

X-Gm-Message-State: AOJu0Ywglfq1InC0hUQPcu13Cfjo+/sY1870wtpoNwBxqT7e1lc0Yv9d

i6Mlm8zP+NNpyQsk43LERd8RKw3A5io5MV54EwATZUfRZAmJ0Br+jw9OeFyYoaejmLLOVSardcv

lLLgPYFkpKuJyBB1Q+385c28+WpQ=

X-Gm-Gg: ASbGncvlFwOYOgK4/PubxNUyFmrMU0j0svHXMQyykRVqYdJsQRyRHeZdmTtYWnGXu2a

RvOgLDIhmHbnjAQFAgq30rAUXVHvgP9XL1h+Towy04ASKkoWtPrx86cUaSnUGpx3Mw3b9/PFc

X-Google-Smtp-Source: AGHT+IE5/cbMaHwlz4FMXx0M/TSGbjo88u1g9415zOnrSLDV7Bo7HTxfRXAqRMcV+CQfFDLNX0aCKfsjccnunorHTEU=

X-Received: by 2002:a05:622a:e:b0:467:70ce:75eb with SMTP id

d75a77b69052e-46c7108f4b5mr5619501cf.45.1736284694999; Tue, 07 Jan 2025

13:18:14 -0800 (PST)

MIME-Version: 1.0

Reply-To: sanourose-kone@att.net

From: "Ms.KONE ROSE SANOU"

Date: Tue, 7 Jan 2025 21:17:17 +0000

X-Gm-Features: AbW1kvYItJuTNj_OFRoA0dja_x-TZQr886O9wOdrBuTmS_GnDyihRzFHJi2AECw

Message-ID:

Subject: Best Regards,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000007979e7062b244839"

Bcc: sales@nk.ca

X-Spam_score: 20.5

X-Spam_score_int: 205

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greeting, My name is Ms. Sanou Rose Kone, I am currently Regional

Audit Manager of United Bank for Africa Burkina Faso. I understand that this

message must seem quite strange but I assure you, if my sources are [...]





Content analysis details: (20.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.196 listed in dnsbl.ahbl.org]

[209.85.160.196 listed in dnsbl.ahbl.org]

[209.85.160.196 listed in dnsbl.ahbl.org]

[209.85.160.196 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.196 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.196 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.196 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.196 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.196 listed in will-spam-for-food.eu.org]

[209.85.160.196 listed in will-spam-for-food.eu.org]

[209.85.160.196 listed in will-spam-for-food.eu.org]

[209.85.160.196 listed in will-spam-for-food.eu.org]

[209.85.160.196 listed in will-spam-for-food.eu.org]

[209.85.160.196 listed in will-spam-for-food.eu.org]

[209.85.160.196 listed in will-spam-for-food.eu.org]

[209.85.160.196 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.196 listed in list.dnswl.org]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.160.196 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.160.196 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.160.196 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.160.196 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.196 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[vicepresident2015raffle01(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[vicepresident2015raffle01(at)gmail.com]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.6 J_CHICKENPOX_71 BODY: 7alpha-pock-1alpha

2.5 MILLION_USD BODY: Talks about millions of dollars

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

0.0 T_MONEY_PERCENT X% of a lot of money for you

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

0.0 XFER_LOTSA_MONEY Transfer a lot of money

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

1.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

Subject: {SPAM?} Best Regards,



--0000000000007979e7062b244839

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Greeting,



My name is Ms. Sanou Rose Kone, I am currently Regional Audit Manager of

United Bank for Africa Burkina Faso. I understand that this message must

seem quite strange but I assure you, if my sources are correct, together we

will be able to ensure the success of my proposal.



I got your email address contact details from your country,s guest book

which i got from my late friend archive as a good match for future business

that will make both of us very happy!



Although i am not comfortable to send this proposal to you because of

increase in SCAM and FRAUD especially in Africa, but i am too sure that

this is not Scam because you have access to confirm, and provided you all

the necessary information you need to know, do not let my Bank know the

source of your information. I have pack agenda financial transaction that

will benefit both of us. As the currently Regional Audit Manager of this

bank United Bank for Africa Burkina Faso (UBA), it is my duty to send

financial reports to my head office in the capital city of Ouagadougou,

Burkina Faso. On the course of year 2022/2023 end of the year's report, i

discovered that at my branch in which I am the Audit Manager, discovered

the sum of US$5,000,000,00 (Fve Million United State Dollars. ) without

beneficial and since then had PLACED this fund in an ESCROW CALL ACCOUNT

without a beneficiary. As the regional manager of the bank, I cannot be

directly connected to this money thus, i am impelled to request for your

assistance to receive this money into your bank account.



I intend to part 40% of this fund to you while 60% shall be for me and two

officers who will assist us to move the fund to your account. I do need to

assure you that there is no risk involved in this Business. It=E2=80=99s go=

ing to

be BANK TO BANK TRANSFER Or THROUGH ATM VISA CARD. All I need from you is

to stand as the original depositor of this fund. If you accept this offer,

i will appreciate your timely response and then we shall discuss on how we

move on=E2=80=A6



NB: Your early reply is highly welcomed and attaches your profiles, such as

your name and address, and also your contact telephone number for easy

means of communication.



Best Regards,

Ms. Sanou Rose Kone



--0000000000007979e7062b244839

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Greeting,

My name is Ms. Sanou Rose Kone, =C2=A0I a=

m=C2=A0 currently Regional Audit Manager of United Bank for Africa Burkina =

Faso. I understand that this message must seem quite strange but I assure y=

ou, if my sources are correct, together we will be able to ensure the succe=

ss of my proposal.

I got your email address contact details from you=

r country,s guest book which i got from my late friend archive as a good ma=

tch for future business that will make both of us very happy!

Althou=

gh i am not comfortable to send this proposal to you because of increase in=

SCAM and FRAUD especially in Africa, but i am too sure that this is not Sc=

am because you have access to confirm, and provided you all the necessary i=

nformation you need to know, do not let my Bank know the source of your inf=

ormation. I have pack agenda financial transaction that will benefit both o=

f us. As the currently Regional Audit Manager =C2=A0of this bank United Ban=

k for Africa Burkina Faso (UBA), it is my duty to send financial reports to=

my head office in the capital city of Ouagadougou, Burkina Faso. On the co=

urse of year 2022/2023 end of the year's report, i discovered that at m=

y branch in which I am the Audit Manager, discovered the sum of US$5,000,00=

0,00 (Fve Million United State Dollars. ) =C2=A0without beneficial and sinc=

e then had PLACED this fund in an ESCROW CALL ACCOUNT without a beneficiary=

. As the regional manager of the bank, I cannot be directly connected to th=

is money thus, i am impelled to request for your assistance to receive this=

money into your bank account.

I intend to part 40% of this fund to =

you while 60% shall be for me and two officers who will assist us to move t=

he fund to your account. I do need to assure you that there is no risk invo=

lved in this Business. It=E2=80=99s going to be BANK TO BANK TRANSFER Or TH=

ROUGH ATM VISA CARD. All I need from you is to stand as the original deposi=

tor of this fund. If you accept this offer, i will appreciate your timely r=

esponse and then we shall discuss on how we move on=E2=80=A6

NB: You=

r early reply is highly welcomed and attaches your profiles, such as your n=

ame and address, and also your contact telephone number for easy means of c=

ommunication.

Best Regards,
Ms. Sanou Rose Kone




--0000000000007979e7062b244839--

Crossraods backpack phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jan 2025 15:21:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVHwP-0000000062y-3lTS

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jan 2025 15:20:49 -0700

Resent-From: The Doctor

Resent-Date: Tue, 7 Jan 2025 15:20:49 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.171.84.195] (port=60657 helo=forhoy.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1tVG9E-000000002GQ-32Nh

for doctor@doctor.nl2k.ab.ca;

Tue, 07 Jan 2025 13:26:05 -0700

Received: from a27-123.smtp-out.us-west-2.amazonses.com (a27-123.smtp-out.us-west-2.amazonses.com. [54.240.27.123])

by mx.google.com with ESMTPS id 41be03b00d2f7-7fc9c380b6asi13165356a12.713.2024.12.03.02.38.25

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 03 Dec 2024 02:38:25 -0800 (PST)

Received-SPF: pass (google.com: domain of 010101938c198d35-f5195b23-82c6-4a44-a19f-3017fd90759b-000000@us-west-2.amazonses.com designates 54.240.27.123 as permitted sender) client-ip=54.240.27.123;

Authentication-Results: mx.google.com;

dkim=pass header.i=@tradingview.com header.s=k3edjogkpt66rlyhj672zwuhwslbz2h3 header.b=iyp0HoRg;

dkim=pass header.i=@amazonses.com header.s=7v7vs6w47njt4pimodk5mmttbegzsi6n header.b=bTUUu6ko;

spf=pass (google.com: domain of 010101938c198d35-f5195b23-82c6-4a44-a19f-3017fd90759b-000000@us-west-2.amazonses.com designates 54.240.27.123 as permitted sender) smtp.mailfrom=010101938c198d35-f5195b23-82c6-4a44-a19f-3017fd90759b-000000@us-west-2.amazonses.com;

dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=tradingview.com

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=k3edjogkpt66rlyhj672zwuhwslbz2h3; d=tradingview.com; t=1733222305; h=Content-Type:MIME-Version:Content-Transfer-Encoding:Subject:From:To:Date:Message-ID; bh=IMk6BcFkpFg7nJmDPywSrlv0r3IhjR7aKfoxKNXWMR8=; b=iyp0HoRg6YAS9XqtmgsdeBnHxdrOaVNEdSmJttGga+0T+zLL1PQf8yuuGcv7heqZ dr3Tl+iKq7ylVZrFowhBZzUlJMbtcckUT+fXHIKeJL3i4PEIrc2pBTYSmtRz5SiW00q IFahIaDXDDaZZkWgTx/WbwYHAD9WQfis1L2HGuR0=

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=7v7vs6w47njt4pimodk5mmttbegzsi6n; d=amazonses.com; t=1733222305; h=Content-Type:MIME-Version:Content-Transfer-Encoding:Subject:From:To:Date:Message-ID:Feedback-ID; bh=IMk6BcFkpFg7nJmDPywSrlv0r3IhjR7aKfoxKNXWMR8=; b=bTUUu6koxPRDHyQ4qwhhH4OFIh5WCSVstGzqCpvebub14X2nOStPnwoNauNVGhDC lqpL9VESJcnQD7LAIDRemkJVfBSA7euDfLhPd29Oui/eCyzWLUUmlHr4gENFPg59Eh1 jVvOku8vhth5ZuQSKP2DjmqxYB4NEK97F/67yRuI=

Content-Type: multipart/alternative; boundary="----=_Part_9006_1222595691.5QKa2tPIsJ0DJc"

Date: [email_date]

From: "Tractor Supply Team"

Mime-Version: 1.0

Message-ID:

Subject: Don’t Miss Out: : YOU Have Won a Yeti Crossroads Backpack!

X-Feedback-ID: 68937205:SG

X-SG-EID: 3cArhMeAPLyOw42trICsupV05OHLmajukPMMs3ExXJkPGp1kTOkKD3itDAPZUpUi6vhdxmJ79mmJdV16xEXvSCh0jovQxAxcfAkR+hxVomfJegCPUYck7O9lIUWMIHlfxWnftAKL5bMLzHckmzrBrfuuShteg3pwMeyTqLk8f7NQvB4rSYKBhCLHOKm4FpH7NKNnS2w1dYROoduOs+P7kCW9x5Hs5sERjQ0DBcjhMJwtaWgkQZpk8XEdtr+D31hgAalRh1CMuuSK07yJ7jOmgi==

X-SG-ID: 8dWimjYFu4CvFyA3YBXdFlrcYwsFN2mjO771XIO8G/ciPEqma1nBfGQ5hkccmqcUvrkGedhrrPlb3B7r1UF6xWhXbUKO3vmwAjIUuYRuKaTLSt5c/GlNqK/+KcuYyFo1N9eNhTPkOBATf3zXoVJvdFVd2DP0qRSD4B/l03yfu+D8Jz3xOHwYB/OwyKZwXvNyx5ATVHeYVKsSO6wM/KcuYyFo1N9eNhTPkOBATf3zXoVJvdFVd2DP0qRSD4B+C9mBndZeDb/8vbk2Bd6ayQ1eRp3KiLmYJIkBWnZj4eURYNioU+OwyKZwXvNyx5ATVHeYVKsSO6wM+byKVYGUzatpo8iuGLh2gktUSVe8nD9hzjwwIyAsn0cgEI/vcyoeyp35CclDmDFhWVMmqqIpggrtx3==

To:

X-Entity-ID: u001.X5QQ4CVYGC5TVQXWOGLTD3==

X-Spam_score: 20.2

X-Spam_score_int: 202

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please confirm your email address Click here to confirm your

email address To receive HubSpot content on marketing, sales and/or service

topics - please confirm your email address. You will be added to our email

distribution list. You can unsubscribe at any time. OEBPWJOT Th [...]



Content analysis details: (20.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

[54.240.27.123 listed in dnsbl.ahbl.org]

[54.240.27.123 listed in dnsbl.ahbl.org]

[54.240.27.123 listed in dnsbl.ahbl.org]

[103.171.84.195 listed in dnsbl.ahbl.org]

[103.171.84.195 listed in dnsbl.ahbl.org]

[103.171.84.195 listed in dnsbl.ahbl.org]

[103.171.84.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[103.171.84.195 listed in will-spam-for-food.eu.org]

[103.171.84.195 listed in will-spam-for-food.eu.org]

[103.171.84.195 listed in will-spam-for-food.eu.org]

[103.171.84.195 listed in will-spam-for-food.eu.org]

[103.171.84.195 listed in will-spam-for-food.eu.org]

[103.171.84.195 listed in will-spam-for-food.eu.org]

[103.171.84.195 listed in will-spam-for-food.eu.org]

[103.171.84.195 listed in will-spam-for-food.eu.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[103.171.84.195 listed in bb.barracudacentral.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: soundcast.me]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.3 LONGWORD BODY: Uses overlong words

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.8 A_HREF_NOWHERE A link tag with empty href

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.3 MIME_8BIT_HEADER Message header contains 8-bit character

3.2 HTML_TAG_BALANCE_CENTER Malformatted HTML

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 NORDNS_LOW_CONTRAST No rDNS + hidden text

0.0 HTML_FONT_TINY_NORDNS Font too small to read, no rDNS

1.6 HREF_EMPTY_NORDNS Empty href + no rDNS

Subject: {SPAM?} Don’t Miss Out: : YOU Have Won a Yeti Crossroads Backpack!



------=_Part_9006_1222595691.5QKa2tPIsJ0DJc

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Please confirm your email address



Click here to confirm your email address



To receive HubSpot content on marketing, sales and/or service topics -Â please confirm your email address. You will be added to our email distribution list. You can unsubscribe at any time.

OEBPWJOT

The 90s had seen the apotheosis of the form, including Take That and Backstreet Boys, but those bands’ robust anthems and breezy dance-pop seemed to flame out in 2001 with the over-egged futurism of ‘NSync’s Pop, the first single from an album with the jaded title Celebrity.

Thanks,



The HubSpot Team



HubSpot, 25 1st St., Cambridge, MA 02141, USA, 888-482-7768



HubSpot, 2 Canal Park, , Cambridge, MA 02141, USA, 888-482-7768









Unsubscribe (https://hs-53.s.hubspotemail.net/hs/manage-preferences/unsubscribe-all?languagePreference=en&d=MnbTK9GK15VW3_Vshk4hHDBPW3T2_Lm2m40KfW3T0pbm43T3CZVmWFg14N_KfmN5fr_5C25rVhW8xS7DT8t0gJQVWmbwB8c2k7nMXk_7QbvZTwVMrv2h5s79sCW1P-vmr68hV1J32Kw2&v=3 )



Manage preferences (https://hs-53.s.hubspotemail.net/hs/manage-preferences/unsubscribe?languagePreference=en&d=MnbTK9GK15VW3_Vshk4hHDBPW3T2_Lm2m40KfW3T0pbm43T3CZVmWFg14N_KfmN5fr_5C25rVhW8xS7DT8t0gJQVWmbwB8c2k7nMXk_7QbvZTwVMrv2h5s79sCW1P-vmr68hV1J32Kw2&v=3 )

------=_Part_9006_1222595691.5QKa2tPIsJ0DJc

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable





Bitte bestätigen Sie Ihre E-Mail-Adresse there | Confirm your e-mail address there

































YOU Have Won a Yeti Crossroads Backpack!











Web / SEO/ App spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jan 2025 11:24:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVEF4-00000000N4H-1XZE

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jan 2025 11:23:50 -0700

Resent-From: The Doctor

Resent-Date: Tue, 7 Jan 2025 11:23:50 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dm6nam11olkn2018.outbound.protection.outlook.com ([40.92.19.18]:62504 helo=NAM11-DM6-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVCXm-00000000F1d-46sf

for sales@nk.ca;

Tue, 07 Jan 2025 09:35:07 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=SJaHnTJApu49SG7BUMe6FgADO/RYw+CTka4kJHN4Sh3/zEQEhsMrYpYCWTkEdKGOVNbL//+SCK6ai8RG/iZRn4f5JmgZ3D9aujkdhy0Tc2OcvZgMrIi03K0OWZ7UFHP2028Z+LtU5+HwQNpmNLSouZojgxMEtVLb0J0so8zN/b9IMlBF/g2zRcdjW4ZyUM3IiaaooDTHK/rRGpKsd2hfy3nOt6pA1a2v24kwxXLSL8xiLxrDRxzkIC9CTsu124Y9Re2sdmmuy358Fvz/63xi58+nxqSUim0hKMX6Z7SAaEQgunypB/WE4XYwk0TVA7Zb9nMV8RUEdrv0FhFWK9/jKg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=jIe+41Hc2TFXI78fbF7VS+9ttX7mBy2wp3i/qeFtSBo=;

b=BVcStZm8bpYXj1aXtAhn7pNohUhvr+MdrMhdRyZL1FwV84Dxs82XjwD83Y6MTT6C++RG80XGASTui8v98q44wsaO5YCh9tN7/wSC7DtWwFyte8e9ATvlF7G7q2QNhL+ne2LJx5ahU9CdeeR8llEIA0jTa9rLPsY6aKmwc4HuaUVl3iEJ/HRnCS+68Hbn2GjE+mk7kuU7rN/q6QQAJ6YCYFGHtAnhUtgUTvRatn7GEsnWj0qptFM+Bu11Qk+o9572sUpFtQtI+UcmSEUNCVoF5oA63IkGEFsEuLEzzMZ6LhDXEv2aNxRCmhaF2ViZ1rX+YxY6ffFuVPkQ7CxkFrLxpg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=jIe+41Hc2TFXI78fbF7VS+9ttX7mBy2wp3i/qeFtSBo=;

b=g5sxz5hcX9bnxGq7e8JZXIJ94P72hHDfPszlQDq+0BwS/UFCM5DgUGmYH0FEcj9oBP0filuXTgZlViN7Y+dKQFpeRsPHFmj1xrC4vkXwSMmH1AB2sFSClbkuh+hkBHOX8/4hIGek6MUqlMg9yJBrEK21LNXok8zdYMkVy4EpNNADye8j59vfKIGdjVw3wsmJ5Y4K7C7+5VMGsdb2k6Y/FoJuf8APd5YczZ8Ncf3hrI688mCNRiIqJSKwgfkViVmdCePSh/zALrOhuI/WGYk1LChtG/Pcuh4bi2WOfocC/naAjPMOsaW7OuIRu95kSLUyAWaD0srEWyDIslFrx+K+Jw==

Received: from SJ0PR14MB6587.namprd14.prod.outlook.com (2603:10b6:a03:4e8::9)

by PH8PR14MB6088.namprd14.prod.outlook.com (2603:10b6:510:222::8) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8314.17; Tue, 7 Jan

2025 16:33:00 +0000

Received: from SJ0PR14MB6587.namprd14.prod.outlook.com

([fe80::456:3365:c72:4643]) by SJ0PR14MB6587.namprd14.prod.outlook.com

([fe80::456:3365:c72:4643%6]) with mapi id 15.20.8314.018; Tue, 7 Jan 2025

16:33:00 +0000

From: Raiyan Rehman

To: "sales@nk.ca"

Subject: digital marketing++

Thread-Topic: digital marketing++

Thread-Index: AdthDabYvbekQJfWRRWBZfn4qI0mOA==

Importance: high

X-Priority: 1

Return-Receipt-To:

Sensitivity: company-confidential

Date: Tue, 7 Jan 2025 16:33:00 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SJ0PR14MB6587:EE_|PH8PR14MB6088:EE_

x-ms-office365-filtering-correlation-id: 61a021ef-0333-40ed-5816-08dd2f38f345

x-microsoft-antispam:

BCL:0;ARA:14566002|7092599003|8060799006|461199028|19110799003|8062599003|15080799006|3412199025|440099028|102099032;

x-microsoft-antispam-message-info:

=?us-ascii?Q?gYBCXm4n9qx+vBm4V+XDj4v6MsIGs6vCymb8KaWU3nwFltfhJq5pRtQiKe9V?=

=?us-ascii?Q?O+GyHKGeH6CZv3dw55SMRYG8Yp97PvY47C/CgUoUTZ+uD2dWNNvaicbBUDjB?=

=?us-ascii?Q?cC6Q9prDpgfYFYGO5l0h3ubEdRT79dMLx4d9+XCUHRjEki9KGcEcuJEyrWSP?=

=?us-ascii?Q?jxKDQJEqdsSrgcc3dUSVGlRA8Ujc2L/3v/MrguuBpRS+eth67J/+3lJP/ZHC?=

=?us-ascii?Q?qpIjIVdhin3QgF9G8EZlbd+oO3pNaacbfByzI/+2nLdsWrSZq5SRFs4BKShE?=

=?us-ascii?Q?s74DTpTUf0Y81USMY1ctVd0EhbsAA46QhdAXtOkOdgLtX0exdyd3AAufqTae?=

=?us-ascii?Q?cDkAaJ+dwfJKrti9F0xu2qYWeUwUvjTCo8EXpC8T7tewkPa9Q3LGahZ5/NAk?=

=?us-ascii?Q?pWc8Og05iANHg/RnLlYadE392tcY0G7hFxbCBCbN5VyYWTuhFHw4zGfK6G8t?=

=?us-ascii?Q?nXQHH2qrO1Chsfva2Fx3t9WrZ8FAEvlCL8Wh8xGOyxhlAL2G+by7b+h5k3Z5?=

=?us-ascii?Q?T6NdDZzZgtaSZ+ihrwC+9+dVU4hHtYguR2BMwaY+sR/Iji8lkaSWv9OfXs0k?=

=?us-ascii?Q?uCsIQW7jSpjOg03iVTvYN9YLJQ9p28Y+BLLKt/v9jE/HA84d5b/3Vvj7XiwZ?=

=?us-ascii?Q?DgHAU0MDI1KFR+DfnC7LnwK0oO9xN4aUgqcCV+JY85cQrKz3H15ka4WG/bl3?=

=?us-ascii?Q?e1XI5PP4dEb9dAnAdb8QZ4P25d6kaBfJq9/Ub8xvKPrI/V37nLk4dMz5LLNq?=

=?us-ascii?Q?lt/LaGrHNGZ3WtsJliPkWeu9Md6bnQjBf8u21/hdT2fTv2zxpnvFFPM/fKcP?=

=?us-ascii?Q?eCzxYtidY2xAqEca5pFvGRqWWY7u/ZkohQj2D6wigXWqvN1pp7Va1Tp9ifJ2?=

=?us-ascii?Q?jj8V4W1qW5+ngjXDaAgXrD53Lfb45Z+59SSeL4KeXqe2w96/MvV/KMl6vuOQ?=

=?us-ascii?Q?KJifmXFgbm0PgzA56fIojtPKgtOEqkhg03zbp7DHzgV3D/TmeRLpiVK2hlZS?=

=?us-ascii?Q?2LNeZK4HYX8pyycYspLB1CIM9TCI/oVizsCJcqYdZsiZSEqVJzgQIBLRdcBC?=

=?us-ascii?Q?n2R6xvrPTrgihUJmmW2DhkYK1+pqXQ=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?Bx6trtqBeLjlpicTEIUn+5xxTHZUXZWWubN6vOahf/Ex8GlX289WqK96nHUk?=

=?us-ascii?Q?LfQBa/kYqyUHrhahHBgJx3pz1rySTJfcnNy0iI4QsB0ECsa/rb2+MXp0vwh9?=

=?us-ascii?Q?82y1cZrb5UuFUB85qNawVJj7pSfpvQy7Ko4YQ+oEBK1i4H6iVfeiCcTcQhgr?=

=?us-ascii?Q?sXVvihB+qrLkiKw79nDVujaWUcOSkdo1n7DRZohQPerb6l2+EPdLi+d2A6bP?=

=?us-ascii?Q?RPoJnNJXaHobWo0WG9pYAtx9XofCfYXYRTBYS21ALsky+MmnoU1p0/lIvtgm?=

=?us-ascii?Q?ZoAJjRE53Sy7FJJ48AEua0OAm6kYXAlf450KgHlloJuQshJMP4qpcZxQgb0p?=

=?us-ascii?Q?yH8751Yk/I7NbJB9Pz4t61hxjR//YpJyNwwENHA5/6hB8tpgUbTLXS/87Q+E?=

=?us-ascii?Q?FzbBDvUQNYB/QifQkGrcetqhyVtHWaEmyjYesD2N6nay4tQS7pdcpIwKFKsT?=

=?us-ascii?Q?CBWtlWzscX9ohMQjBN/M47TsRB/j+IB4r2ZZUzRM2jsBtih4+LnvGXb6fmh+?=

=?us-ascii?Q?tYmzRLlyXeq4xutUhoQrgMjlaJXPXS0rFQfCH2hDbEJVP9S+n+43Sr2bb5Qy?=

=?us-ascii?Q?orWfy1icPf+XmdAXtipe5M3IOyFc4gNoGKUwN0nh+eDYWrYS/INPjaxK24bi?=

=?us-ascii?Q?tzx5nw+bAZELYyKg0wxBLrfwc02zmj/mi9JI72CMUqlu8quPz/BesaYUVxo4?=

=?us-ascii?Q?82x26sdBQo47BiGmb0xmY9XnzT2KJuZljmXiEjJjxp+GDbkNTFJ0KuZ+AECx?=

=?us-ascii?Q?Jy7nAzrZHkO0DlyXUSLNQcWjqV3QfFfIoDQXl/nfP5d4FN5o+YSAIOAkfx/1?=

=?us-ascii?Q?DqymZzHzimTvo58cYNHj3TM+lGyWk/z7MNmgsfKdjZomml76dd8cRWihHbA6?=

=?us-ascii?Q?C2xn7n7/4szpBi8VmU8lgS4oVaLq7hZLM42ThWaaL14LM33knw3j9xc1NhkG?=

=?us-ascii?Q?2oXwDzutlwPVrlD8oC/jqTYe1rRfwQJB+4+JklA51TU2xje5IWsGmPssKQ6A?=

=?us-ascii?Q?kIDUzXH1F13LzC6UwYH5jfXxbuwfcfpcFQhIAmkhBkPqRyreSfQ22Uvuoxrg?=

=?us-ascii?Q?DHZGxIUNBkV4Sk29Iarup1XPDPqvCpy5DKfiSezMDbKGps44n0hgIPZBIgUI?=

=?us-ascii?Q?DFGo/sLhT3W+obl20Y+Izbkfv9epwEFDWieWj5bdgN8v9F6hW6HXLlJmIcD5?=

=?us-ascii?Q?JYk0HqnlejZIjYuD7maDPTaHy4Y0bOOHwbVzrLInjJwUbcgp73ejw+7a4cXW?=

=?us-ascii?Q?eKb3lTcPogI2jaPEBKHD?=

Content-Type: multipart/alternative;

boundary="_000_SJ0PR14MB6587E1A383560903B3418370A7112SJ0PR14MB6587namp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-7719-19-msonline-outlook-e4812.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SJ0PR14MB6587.namprd14.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 61a021ef-0333-40ed-5816-08dd2f38f345

X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Jan 2025 16:33:00.2373

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH8PR14MB6088



--_000_SJ0PR14MB6587E1A383560903B3418370A7112SJ0PR14MB6587namp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hi,

I was looking at your website and noticed that you aren't at the top of Goo=

gle search. I can fix that for you and make your company more profitable.

I can give you our Complete SEO Action Plan along with a customary reach an=

d add great value to your product/ service.

We can place your website on first page of Google, Yahoo etc. you'd get so =

many prospects/new clients every day.

When you show up high in the search results that means customers will click=

on your site. These Kind of leads convert 8x higher into new sales!

I may send you a quote & price list? If interested.

Best Regards,

Manager





--_000_SJ0PR14MB6587E1A383560903B3418370A7112SJ0PR14MB6587namp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




>












l-align:baseline">


lor:#174E86">Hi,




l-align:baseline">


lor:#174E86">I was looking at your website and noticed that you aren't at t=

he top of 
er:none windowtext 1.0pt;padding:0in">G
ze:11.5pt;color:red;border:none windowtext 1.0pt;padding:0in">o<=

b>
t;padding:0in">o
;border:none windowtext 1.0pt;padding:0in">g
nt-size:11.5pt;color:#00B050;border:none windowtext 1.0pt;padding:0in">l
pan>
1.0pt;padding:0in">e
:"Aptos",sans-serif;color:#174E86"> search.

I can fix that for you and make your company more profitable.
span>




l-align:baseline">


lor:#174E86">I can give you our Complete SEO Action Plan along with a custo=

mary reach and add great value to your product/ service.<=

/p>


l-align:baseline">


;color:red">We can place your website on first page of


ext 1.0pt;padding:0in">Google
font-family:"Aptos",sans-serif;color:red">, Yahoo etc. you'd get =

so many prospects/new clients every day.
:12.0pt;font-family:"Aptos",sans-serif;color:red">
an>




l-align:baseline">


lor:#174E86">When you show up high in the search results that means custome=

rs will click on your site. These Kind of leads convert 8x higher into new =

sales!




l-align:baseline">


lor:#174E86">I may send you a quote & price list? If interested.
o:p>




l-align:baseline">


lor:#174E86">Best Regards,




l-align:baseline">


lor:#174E86">Manager



 











--_000_SJ0PR14MB6587E1A383560903B3418370A7112SJ0PR14MB6587namp_--

CVS Phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jan 2025 11:24:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVEEn-00000000Lj7-0KyE

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jan 2025 11:23:33 -0700

Resent-From: The Doctor

Resent-Date: Tue, 7 Jan 2025 11:23:33 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.172.205.13] (port=50757 helo=bintangkejora.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1tVBmi-000000009Gf-2CSP

for doctor@doctor.nl2k.ab.ca;

Tue, 07 Jan 2025 08:46:33 -0700

Received: from a27-123.smtp-out.us-west-2.amazonses.com (a27-123.smtp-out.us-west-2.amazonses.com. [54.240.27.123])

by mx.google.com with ESMTPS id 41be03b00d2f7-7fc9c380b6asi13165356a12.713.2024.12.03.02.38.25

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 03 Dec 2024 02:38:25 -0800 (PST)

Received-SPF: pass (google.com: domain of 010101938c198d35-f5195b23-82c6-4a44-a19f-3017fd90759b-000000@us-west-2.amazonses.com designates 54.240.27.123 as permitted sender) client-ip=54.240.27.123;

Authentication-Results: mx.google.com;

dkim=pass header.i=@tradingview.com header.s=k3edjogkpt66rlyhj672zwuhwslbz2h3 header.b=iyp0HoRg;

dkim=pass header.i=@amazonses.com header.s=7v7vs6w47njt4pimodk5mmttbegzsi6n header.b=bTUUu6ko;

spf=pass (google.com: domain of 010101938c198d35-f5195b23-82c6-4a44-a19f-3017fd90759b-000000@us-west-2.amazonses.com designates 54.240.27.123 as permitted sender) smtp.mailfrom=010101938c198d35-f5195b23-82c6-4a44-a19f-3017fd90759b-000000@us-west-2.amazonses.com;

dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=tradingview.com

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=k3edjogkpt66rlyhj672zwuhwslbz2h3; d=tradingview.com; t=1733222305; h=Content-Type:MIME-Version:Content-Transfer-Encoding:Subject:From:To:Date:Message-ID; bh=IMk6BcFkpFg7nJmDPywSrlv0r3IhjR7aKfoxKNXWMR8=; b=iyp0HoRg6YAS9XqtmgsdeBnHxdrOaVNEdSmJttGga+0T+zLL1PQf8yuuGcv7heqZ dr3Tl+iKq7ylVZrFowhBZzUlJMbtcckUT+fXHIKeJL3i4PEIrc2pBTYSmtRz5SiW00q IFahIaDXDDaZZkWgTx/WbwYHAD9WQfis1L2HGuR0=

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=7v7vs6w47njt4pimodk5mmttbegzsi6n; d=amazonses.com; t=1733222305; h=Content-Type:MIME-Version:Content-Transfer-Encoding:Subject:From:To:Date:Message-ID:Feedback-ID; bh=IMk6BcFkpFg7nJmDPywSrlv0r3IhjR7aKfoxKNXWMR8=; b=bTUUu6koxPRDHyQ4qwhhH4OFIh5WCSVstGzqCpvebub14X2nOStPnwoNauNVGhDC lqpL9VESJcnQD7LAIDRemkJVfBSA7euDfLhPd29Oui/eCyzWLUUmlHr4gENFPg59Eh1 jVvOku8vhth5ZuQSKP2DjmqxYB4NEK97F/67yRuI=

Content-Type: multipart/alternative; boundary="----=_Part_9006_1222595691.HzDjVMA4YNkXDP"

Date: [email_date]

From: "CVS Customer Care"

Mime-Version: 1.0

Message-ID:

Subject: You’ve Been Chosen! Claim Your CVS Exclusive Reward!

X-Feedback-ID: 93814904:SG

X-SG-EID: Qu89kMhlMaXfAuk3eqJRl8R4R8PyURyJSA7zbvjeOxNSWjUo43K6ss8EFY4dKJAOis4dGDSSceGOzgr4sFvCxFINe5G2kqVlThqG+xs40Pj53DsKpwpROhU9oGnwh4jFwVvKkmjmv4n0cTRUmo4WzWo36DL76tBPhJflbNx8riNP126jnKbeVXvi57HTKTb4aXoq7snSOrnZUlILY+kavKHcJNbUQx04ovsOfNAQLWyYSMhY0x5XreM1PQ+gTlrcDZjcVZmJsv2T7FzgO0qN1v==

X-SG-ID: tvz3FlNaWaZK4Xpr0pXQGLSWcuzy2675C4L3uUB9D/77lLafHd32uDA31TDA8JOInXSKhNT9bZYCT3r4EFqZQnpX8Tc3NAnzvPIAKZvaj7E4V9A6/3vvbv/+SgRaaKtGJ6IoHx4KNnJtSAPOVsjehQq1F12UbuwojM/Iqpe2u+7oSvonZqiDt/1h0uKxdvjEGp7XJRCbPTigc9sv/SgRaaKtGJ6IoHx4KNnJtSAPOVsjehQq1F12UbuwojM+NSYDnkUdr5/q5jO7rYzQUSpCbTlZI4VaTe1GLbDJgyTxlUdjF+1h0uKxdvjEGp7XJRCbPTigc9sv+1ws15ysmj0Z3sK2KWvnUkaYEl5hi5XYZjyeKWXddHQFVp/B1QxwvtNsOucgJccMswDJqH6J9jrMmA==

To:

X-Entity-ID: u001.SSBJNYNGWMF3Y16ZPVXEJU==

X-Spam_score: 15.8

X-Spam_score_int: 158

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please confirm your email address Click here to confirm your

email address To receive HubSpot content on marketing, sales and/or service

topics - please confirm your email address. You will be added to our email

distribution list. You can unsubscribe at any time. DKJZEACW Th [...]



Content analysis details: (15.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

[54.240.27.123 listed in dnsbl.ahbl.org]

[54.240.27.123 listed in dnsbl.ahbl.org]

[54.240.27.123 listed in dnsbl.ahbl.org]

[103.172.205.13 listed in dnsbl.ahbl.org]

[103.172.205.13 listed in dnsbl.ahbl.org]

[103.172.205.13 listed in dnsbl.ahbl.org]

[103.172.205.13 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[103.172.205.13 listed in will-spam-for-food.eu.org]

[103.172.205.13 listed in will-spam-for-food.eu.org]

[103.172.205.13 listed in will-spam-for-food.eu.org]

[103.172.205.13 listed in will-spam-for-food.eu.org]

[103.172.205.13 listed in will-spam-for-food.eu.org]

[103.172.205.13 listed in will-spam-for-food.eu.org]

[103.172.205.13 listed in will-spam-for-food.eu.org]

[103.172.205.13 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[103.172.205.13 listed in wl.mailspike.net]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.3 LONGWORD BODY: Uses overlong words

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 A_HREF_NOWHERE A link tag with empty href

0.0 HTML_FONT_TINY_NORDNS Font too small to read, no rDNS

3.2 HTML_TAG_BALANCE_CENTER Malformatted HTML

0.3 MIME_8BIT_HEADER Message header contains 8-bit character

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.6 HREF_EMPTY_NORDNS Empty href + no rDNS

0.0 NORDNS_LOW_CONTRAST No rDNS + hidden text

Subject: {SPAM?} You’ve Been Chosen! Claim Your CVS Exclusive Reward!



------=_Part_9006_1222595691.HzDjVMA4YNkXDP

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Please confirm your email address



Click here to confirm your email address



To receive HubSpot content on marketing, sales and/or service topics -Â please confirm your email address. You will be added to our email distribution list. You can unsubscribe at any time.

DKJZEACW

The 90s had seen the apotheosis of the form, including Take That and Backstreet Boys, but those bands’ robust anthems and breezy dance-pop seemed to flame out in 2001 with the over-egged futurism of ‘NSync’s Pop, the first single from an album with the jaded title Celebrity.

Thanks,



The HubSpot Team



HubSpot, 25 1st St., Cambridge, MA 02141, USA, 888-482-7768



HubSpot, 2 Canal Park, , Cambridge, MA 02141, USA, 888-482-7768









Unsubscribe (https://hs-53.s.hubspotemail.net/hs/manage-preferences/unsubscribe-all?languagePreference=en&d=MnbTK9GK15VW3_Vshk4hHDBPW3T2_Lm2m40KfW3T0pbm43T3CZVmWFg14N_KfmN5fr_5C25rVhW8xS7DT8t0gJQVWmbwB8c2k7nMXk_7QbvZTwVMrv2h5s79sCW1P-vmr68hV1J32Kw2&v=3 )



Manage preferences (https://hs-53.s.hubspotemail.net/hs/manage-preferences/unsubscribe?languagePreference=en&d=MnbTK9GK15VW3_Vshk4hHDBPW3T2_Lm2m40KfW3T0pbm43T3CZVmWFg14N_KfmN5fr_5C25rVhW8xS7DT8t0gJQVWmbwB8c2k7nMXk_7QbvZTwVMrv2h5s79sCW1P-vmr68hV1J32Kw2&v=3 )

------=_Part_9006_1222595691.HzDjVMA4YNkXDP

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable





Bitte bestätigen Sie Ihre E-Mail-Adresse there | Confirm your e-mail address there

































You’ve Been Chosen! Claim Your CVS Exclusive Reward!











Costco Phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jan 2025 11:24:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVEEi-00000000LgA-3XJ2

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jan 2025 11:23:28 -0700

Resent-From: The Doctor

Resent-Date: Tue, 7 Jan 2025 11:23:28 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.172.205.233] (port=35937 helo=quehoy.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1tVBl9-0000000090c-3b7I

for doctor@doctor.nl2k.ab.ca;

Tue, 07 Jan 2025 08:44:56 -0700

Received: from a27-123.smtp-out.us-west-2.amazonses.com (a27-123.smtp-out.us-west-2.amazonses.com. [54.240.27.123])

by mx.google.com with ESMTPS id 41be03b00d2f7-7fc9c380b6asi13165356a12.713.2024.12.03.02.38.25

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 03 Dec 2024 02:38:25 -0800 (PST)

Received-SPF: pass (google.com: domain of 010101938c198d35-f5195b23-82c6-4a44-a19f-3017fd90759b-000000@us-west-2.amazonses.com designates 54.240.27.123 as permitted sender) client-ip=54.240.27.123;

Authentication-Results: mx.google.com;

dkim=pass header.i=@tradingview.com header.s=k3edjogkpt66rlyhj672zwuhwslbz2h3 header.b=iyp0HoRg;

dkim=pass header.i=@amazonses.com header.s=7v7vs6w47njt4pimodk5mmttbegzsi6n header.b=bTUUu6ko;

spf=pass (google.com: domain of 010101938c198d35-f5195b23-82c6-4a44-a19f-3017fd90759b-000000@us-west-2.amazonses.com designates 54.240.27.123 as permitted sender) smtp.mailfrom=010101938c198d35-f5195b23-82c6-4a44-a19f-3017fd90759b-000000@us-west-2.amazonses.com;

dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=tradingview.com

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=k3edjogkpt66rlyhj672zwuhwslbz2h3; d=tradingview.com; t=1733222305; h=Content-Type:MIME-Version:Content-Transfer-Encoding:Subject:From:To:Date:Message-ID; bh=IMk6BcFkpFg7nJmDPywSrlv0r3IhjR7aKfoxKNXWMR8=; b=iyp0HoRg6YAS9XqtmgsdeBnHxdrOaVNEdSmJttGga+0T+zLL1PQf8yuuGcv7heqZ dr3Tl+iKq7ylVZrFowhBZzUlJMbtcckUT+fXHIKeJL3i4PEIrc2pBTYSmtRz5SiW00q IFahIaDXDDaZZkWgTx/WbwYHAD9WQfis1L2HGuR0=

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=7v7vs6w47njt4pimodk5mmttbegzsi6n; d=amazonses.com; t=1733222305; h=Content-Type:MIME-Version:Content-Transfer-Encoding:Subject:From:To:Date:Message-ID:Feedback-ID; bh=IMk6BcFkpFg7nJmDPywSrlv0r3IhjR7aKfoxKNXWMR8=; b=bTUUu6koxPRDHyQ4qwhhH4OFIh5WCSVstGzqCpvebub14X2nOStPnwoNauNVGhDC lqpL9VESJcnQD7LAIDRemkJVfBSA7euDfLhPd29Oui/eCyzWLUUmlHr4gENFPg59Eh1 jVvOku8vhth5ZuQSKP2DjmqxYB4NEK97F/67yRuI=

Content-Type: multipart/alternative; boundary="----=_Part_9006_1222595691.MthpaUmEy0GB6X"

Date: [email_date]

From: "Costco Department"

Mime-Version: 1.0

Message-ID:

Subject: Did you forget? Your $100 Costco reward Is Waiting

X-Feedback-ID: 66931266:SG

X-SG-EID: u41LtQnltz2OttaXeQjyQm4Lh5QGybkhOoEhd8ZZBYIt14L4yBx4qSI59RLD8whxRdKuhT8Ar7bCJDeglPICRCBZPEjLOLLDHLUD+MXaBbYAgiSB044kE6N67CvFWNDGAmxpFUvDxAHY7W2FRSY2fCafVDOkOUnwYJYqW5Kvse6BmuTaUfSv0BbmWqKILFllJcCdC8qnXuUTzktOx+SjtA72X98lNpkDI3iIPV4BbFPCrjtnDc08XhagA2+HnCW6RBKT5I3ArlLZrboVKIpgjH==

X-SG-ID: 5Uz93WeK6ZGhVtdOx5Xb8TqIJT4HipUBmuEBAjVzh/rRvJNVIKZSrx3q7TliI9NDtDEOnEMxRsAIFddUQsWcSfF5LgDJkuxpl1ERhDUuGpkQ6Uh8/Ir2rS/+SbOTpxwaZxm3jWwxgMCFiCecNKDasWTvV1paa7BRMW/ol5rFQ+94BsuO0cAT0/xV3jK0iAjqvSXdxF974tHqkhXD/SbOTpxwaZxm3jWwxgMCFiCecNKDasWTvV1paa7BRMW+6AYD2BCCLr/UEmUCMo6TjUEimmiALCCxy78qtHqi9AbiETY1h+xV3jK0iAjqvSXdxF974tHqkhXD+2yNiL4yf2ozIqovAmzvzWWfRc32MwdQR5N5FJIoRa028Z/UFoeJlMnIKRdd0ZfuAFE8NVTXourUTr==

To:

X-Entity-ID: u001.XBBOAYYX6FKISUCAR2XYHY==

X-Spam_score: 16.5

X-Spam_score_int: 165

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please confirm your email address Click here to confirm your

email address To receive HubSpot content on marketing, sales and/or service

topics - please confirm your email address. You will be added to our email

distribution list. You can unsubscribe at any time. GELDNZNR Th [...]



Content analysis details: (16.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

[54.240.27.123 listed in dnsbl.ahbl.org]

[54.240.27.123 listed in dnsbl.ahbl.org]

[54.240.27.123 listed in dnsbl.ahbl.org]

[103.172.205.233 listed in dnsbl.ahbl.org]

[103.172.205.233 listed in dnsbl.ahbl.org]

[103.172.205.233 listed in dnsbl.ahbl.org]

[103.172.205.233 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[103.172.205.233 listed in will-spam-for-food.eu.org]

[103.172.205.233 listed in will-spam-for-food.eu.org]

[103.172.205.233 listed in will-spam-for-food.eu.org]

[103.172.205.233 listed in will-spam-for-food.eu.org]

[103.172.205.233 listed in will-spam-for-food.eu.org]

[103.172.205.233 listed in will-spam-for-food.eu.org]

[103.172.205.233 listed in will-spam-for-food.eu.org]

[103.172.205.233 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[103.172.205.233 listed in wl.mailspike.net]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

1.0 HK_RANDOM_FROM From username looks random

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.3 LONGWORD BODY: Uses overlong words

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

3.2 HTML_TAG_BALANCE_CENTER Malformatted HTML

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 HTML_FONT_TINY_NORDNS Font too small to read, no rDNS

0.8 A_HREF_NOWHERE A link tag with empty href

1.6 HREF_EMPTY_NORDNS Empty href + no rDNS

0.0 NORDNS_LOW_CONTRAST No rDNS + hidden text

Subject: {SPAM?} Did you forget? Your $100 Costco reward Is Waiting



------=_Part_9006_1222595691.MthpaUmEy0GB6X

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Please confirm your email address



Click here to confirm your email address



To receive HubSpot content on marketing, sales and/or service topics -Â please confirm your email address. You will be added to our email distribution list. You can unsubscribe at any time.

GELDNZNR

The 90s had seen the apotheosis of the form, including Take That and Backstreet Boys, but those bands’ robust anthems and breezy dance-pop seemed to flame out in 2001 with the over-egged futurism of ‘NSync’s Pop, the first single from an album with the jaded title Celebrity.

Thanks,



The HubSpot Team



HubSpot, 25 1st St., Cambridge, MA 02141, USA, 888-482-7768



HubSpot, 2 Canal Park, , Cambridge, MA 02141, USA, 888-482-7768









Unsubscribe (https://hs-53.s.hubspotemail.net/hs/manage-preferences/unsubscribe-all?languagePreference=en&d=MnbTK9GK15VW3_Vshk4hHDBPW3T2_Lm2m40KfW3T0pbm43T3CZVmWFg14N_KfmN5fr_5C25rVhW8xS7DT8t0gJQVWmbwB8c2k7nMXk_7QbvZTwVMrv2h5s79sCW1P-vmr68hV1J32Kw2&v=3 )



Manage preferences (https://hs-53.s.hubspotemail.net/hs/manage-preferences/unsubscribe?languagePreference=en&d=MnbTK9GK15VW3_Vshk4hHDBPW3T2_Lm2m40KfW3T0pbm43T3CZVmWFg14N_KfmN5fr_5C25rVhW8xS7DT8t0gJQVWmbwB8c2k7nMXk_7QbvZTwVMrv2h5s79sCW1P-vmr68hV1J32Kw2&v=3 )

------=_Part_9006_1222595691.MthpaUmEy0GB6X

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable





Bitte bestätigen Sie Ihre E-Mail-Adresse there | Confirm your e-mail address there

































Last Chance! Be Sure To Grab Your $100 Reward...











Web / SEO/ App spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jan 2025 08:42:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVBht-000000008nU-1Y5d

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jan 2025 08:41:25 -0700

Resent-From: The Doctor

Resent-Date: Tue, 7 Jan 2025 08:41:25 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-eastasiaazolkn19011039.outbound.protection.outlook.com ([52.103.64.39]:26216 helo=HK3PR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tV9up-00000000H7K-2bUW

for sales@nk.ca;

Tue, 07 Jan 2025 06:46:43 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=KO51Fm1FYSip63svwJW0pZ51Q4oPzOi7YLk8EdJo9HIFmJw4msGnuTgU+EDugcy77ADgEDv06AlBxrT1o9rFwhxVqXVSdGRTLgM/uzeGYlhe3vmHUoQzc95iIU1jc4AUAaQI9+ApoRxoqeUc7Wvg1YAZNfSkqJagDvjeJigJTWGtYC6naUrCJiZdT4jXjyHeKa1ei1Bm9S4OlkwT/NRbBKo/28KterAtOvenUuoKzm8ViMLsNhIQSRA9yXnfxYO2r3oSOrT29L+htjv8H6S/vXVInoT1FV2sYbPXoXNOWp4M18mXI4OrAPpuFEoNKPYKekvKNNLw4L5tidFcPN39tg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=XfRM7TIgMibDiVbL/XMmocCKLtYm+2KHrzlRntYwmqg=;

b=TDcegj+9nr9ukeEyOz1Qgtnj79uHzeucug4X9i/BD50aqMX5u1gpNC3JcXdc1wKa+TI+tbAf9XJEYHF1gJcINSuxk/wB9dyAkda36S1xMzvvA0QxNt+GSfeZ50jjAXzVqLWNik+5E/Fpf4rvthYzwex2YvGiKSBNvfv0ZEz1qN7k5aUoyvuvH4f59N6cQjITBvdWMiBJNKpryt359zaLJcpTcw6fVtI0J4yBJcdCStbGp0fxyBg0zrjgtF0BE6K2YGW+Vk7d3Ji9tTK0+9Wog1COqkqhVEI39kSfl52T7d0n2hoEv48k+LhvNfSo8LAXxfzdYK83C8/RFGjojRSBsw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=XfRM7TIgMibDiVbL/XMmocCKLtYm+2KHrzlRntYwmqg=;

b=d6mVtxHRFh/EPn6o4AlbWv0KjjFVB0nD565V86Q1su2v+aHrzkk0fEl6jizr9y0H5CtdY4qru7JyFZaTym6IVU0qonXIB5ubnaxXumItdlbqcLv94EXrSeK1n0gZSyY/Ro3ugf+SHSXNO9jJIMDx8OJwF2/7eTANaoKvc/wF5zFvDoTj4Ch6Ai2HfaSch32XcJVhRhUUthpNUUoG8BZmyJP5shT1BlH4AeIyEnFtmZZxdsb7M84FlHHtSKdEnT43l27rmJuD2euQIsTjP7oWOjYeM/6uTROiBsTp9Uqb0xVtVR8kYxz3XRNoleSqzzwVCqJDsMaDmhIqGW+Oz3B+rw==

Received: from TYZPR01MB5524.apcprd01.prod.exchangelabs.com

(2603:1096:400:363::11) by TYZPR01MB5782.apcprd01.prod.exchangelabs.com

(2603:1096:405:25::5) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8314.17; Tue, 7 Jan

2025 13:44:21 +0000

Received: from TYZPR01MB5524.apcprd01.prod.exchangelabs.com

([fe80::8335:ed53:3c99:63a9]) by TYZPR01MB5524.apcprd01.prod.exchangelabs.com

([fe80::8335:ed53:3c99:63a9%5]) with mapi id 15.20.8314.015; Tue, 7 Jan 2025

13:44:21 +0000

From: sofia webtech

To: sofia webtech

Subject: Re: Cost..

Thread-Topic: Cost..

Thread-Index: AQHbYQnj55MBTy+SDEqtRh2mOPPEeQ==

Date: Tue, 7 Jan 2025 13:44:21 +0000

Message-ID:



Accept-Language: en-US, en-GB

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYZPR01MB5524:EE_|TYZPR01MB5782:EE_

x-ms-office365-filtering-correlation-id: 5e93864b-3b34-4af6-73b8-08dd2f2163d5

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|461199028|8060799006|8062599003|19110799003|15080799006|15030799003|7042599007|3412199025|440099028|102099032|1710799026;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?jBvZ7l73xlAipCkcImF6MOW4Ahv1GnpbqrGoaMSxV7OXdVvzez6QPbhwDl?=

=?iso-8859-1?Q?Qk5bV5V/oTAcXIj17GC116Y4BQYDsI2pICspkdKkJ/dexOeLkctcPSAgYD?=

=?iso-8859-1?Q?/0EC8zmnWf2JK1JsLERr2veuoGW5hn/U506ZOXEExZ+5U+aCxMkxb9e1e5?=

=?iso-8859-1?Q?VeRTCzbMzQ6OM+asJJTypSvuMKbE9yiYOJ20NwXbmkBySLdaWLXXVfWXyb?=

=?iso-8859-1?Q?aGL0R2xgarPaBob+u+ohCZxzaxoYQ9Zg0A9X4bEXRB61Gl7zSYnNgwufIw?=

=?iso-8859-1?Q?n8BTJ2x7auwrNIH5qO0mwrv7RLEwBsuWpJQSYz8wvkonOhGJJN0mV+sgAB?=

=?iso-8859-1?Q?eumpDCQ2HXtcwAzn2cmM1U9ljk5NToYgkNV234+IkwG3bFxaVJUyU5nRJz?=

=?iso-8859-1?Q?gqG22DT2PMHCr8g2DuPOgx2eHKC1BnqYCe/kZqQrSxWH5uXoEpU6SV2Woh?=

=?iso-8859-1?Q?5SI8fWAWCY3wN01knHtLwYsivOy7Mqi2bS+/DjH0KNTXAaqUPWVrn0Jp4c?=

=?iso-8859-1?Q?VgIgEhwRL7mqssh99Sv2NLaKL9QWJyjOt1tDWUsE+yjWLDqUiaDUO5ztoK?=

=?iso-8859-1?Q?ZNZcxAnVe58mBtZ5/P1AQ1tQSba8hT0oRHpzsc+D/wvjwk9a1sRDZP8WFj?=

=?iso-8859-1?Q?xsi1ZYEfjsgqFPfZyL+86wQlBB313spaQTYDoWeVkc+qSZhXYlVbFs7AoQ?=

=?iso-8859-1?Q?RCQBwJGMRD5AEL8XhmzHHn0zwzX/d05dwRsS/sD5B8IvM3MXEdSR/C7C4W?=

=?iso-8859-1?Q?oDBcfCGoM3nEAOPhhut8PfLGtTi3uiHzSukvZYMIjYFCToLcguQXqYH+53?=

=?iso-8859-1?Q?EacKeIwfXCnRT1gaQG71J8jSyrhxudMli431xcbAeujIwcieu7xP5TG8Ab?=

=?iso-8859-1?Q?2l7omNvhLNwelHbqogyqi7owCrq22e2NJjJyzxYJAUSeBhekGPQ5LiTEx2?=

=?iso-8859-1?Q?f4QWNbjMcPozJPl8T9/WzFvnQ58ON7FiOj7fXHJLUoOKxpky55xhZDtCdQ?=

=?iso-8859-1?Q?sflEclyzYt4kBuiiWe7V39kYdAK6pZhJ74Nb6W7UdQ9iwGS5qaFjunTH+6?=

=?iso-8859-1?Q?2rZ3TQcYe54TvTtlfcH3Aob+4LBLYNIXfoCo3TnnNBK9+bF572gCwloWs5?=

=?iso-8859-1?Q?Y7CtH6vkxp/ugD2J+sUHSRKDaolLCL6CEW0t3Nd/E/t73STmxu?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?1uksRNdeInKEmIQKYjPoZktH2EORzz+oLAH+a1sC69F7LnkB40z/dcfEvE?=

=?iso-8859-1?Q?5rI2+LBie5PrWEslvZ9zl5ZziR2vCs2pJ6ktsd+G2qeszvxrGBtz/eNAib?=

=?iso-8859-1?Q?jC2tf1PHQpNJfuRDQu7TRl4fISwL8WADeGeoBA1QYgA0FOezXjNcJaPHgM?=

=?iso-8859-1?Q?dlD635bzcCKkou2V0QlcB/p99o8F6Hf4UGj6n/fO2WQp/y6FA66/fMEXH9?=

=?iso-8859-1?Q?c4c3VcnCa369MfGk3uLj74ueMND3HEPNDC1m3d9jse/yEe1I7/5Na2QpNA?=

=?iso-8859-1?Q?F9sZJqf1VmuD9ECKueQmf6njNBouhdnzKD/YxQY7PyZvCRc1rJUw395QQp?=

=?iso-8859-1?Q?/hjNJXkynMbrzEYHFw1FnagEdB39598mS6IIXa3U6l/vk8GL0gBiKj9GZd?=

=?iso-8859-1?Q?jCzWhI1rmsYpyFQFCalGxuEYBZ0s8zdBkbiwxEzufNnYaLMMamSI/lDiKm?=

=?iso-8859-1?Q?cxlEUNQgbZb9bIU1kay4TwC02GDiHAbivqckWMXUmrUTGzyhv0HvaCp6+9?=

=?iso-8859-1?Q?DBY/pqwxE2jQLJOX8LrJ9zOO8Twde+3uv6Lx8MMLxsYEhl3aiHXlpHDZX+?=

=?iso-8859-1?Q?epRQTGaUzVTQoIrnRWs3KFpJ5pa23/esPKlM/BV505pYjyJnY55EjieU7S?=

=?iso-8859-1?Q?i8F6igguanLiopRq16x5PdB14SeJVhoA0hqS0VGK5pJI33jWud8b/cwoo5?=

=?iso-8859-1?Q?cm2CvQ+1E9UwMtmgWPLaSfW4gKWLGIqWA0coySoNwH5eFeGiuA3AMtIbrp?=

=?iso-8859-1?Q?9VqjKRO4RZyTfxMg57Ua2KpKzSF5qSefZXwEv4FgpWWZWt1QKjVysAihL6?=

=?iso-8859-1?Q?hvzCgQ4IaY/HuL4ZW/UMLltrikXJwXIfiG6LgwZrfK0uutXqq3Q4KuTGwZ?=

=?iso-8859-1?Q?T8gja+cGoSoxCU1F5PbAJhukD739drYW09s8Q1R3TNv5f2cI7MHWihSkBX?=

=?iso-8859-1?Q?AlE3XoLtKuSz3K0Uhk/7TwcYX6fMbs+C5mAD/r+VoQ2BUHdtafy0L0OUcb?=

=?iso-8859-1?Q?yscDFHJBZ6vPr8vbzhpuOWl82/xJDdly4Kc35ChIz1iObva8Kc0A9IRQAH?=

=?iso-8859-1?Q?A5uJtZ/zQQPw30IVFCikjwTq7gY8uRB6SyASWpLRF+OHfSvfxif9pyCCaj?=

=?iso-8859-1?Q?b6nL9OVwedDxotLHR/qIQvprRaJju96Le3FgQDTT0hmOGPzXYgTA7CepiF?=

=?iso-8859-1?Q?/7zSqYRFsdw6turyPKZPHDyN18NsNjTiuokQjIRO++Nzph2MCRL2i/Si/y?=

=?iso-8859-1?Q?bOnW4b9W6Rg8LndRiSLB8MBygTBAIVCn4A+xbJZ0vW76fPQO87MQAujhR7?=

=?iso-8859-1?Q?rNiKqxc4OE7RyqizyR6IlBrxYikoTbJiiRdMRSSH9yb8Txj4BADEiIQ7UG?=

=?iso-8859-1?Q?zUHJngfyN47XLCIHq0LwqVgxNqE3jwKQ=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_TYZPR01MB55245C07A785E22F3A791AC0F6112TYZPR01MB5524apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYZPR01MB5524.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 5e93864b-3b34-4af6-73b8-08dd2f2163d5

X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Jan 2025 13:44:21.1460

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR01MB5782



--_000_TYZPR01MB55245C07A785E22F3A791AC0F6112TYZPR01MB5524apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi



I was going through your website, and I personally see a lot of potential i=

n your website and business.



I would like to send you a errors of this business website!



You can get your website on the 1st page of GOOGLE.



May I send you a error & report ?



Thanks



--_000_TYZPR01MB55245C07A785E22F3A791AC0F6112TYZPR01MB5524apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hi



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I was going through your website, and I personally see a lot of potential i=

n your website and business.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I would like to send you a errors of this  business website!



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

You can get your website on the 1st page of GOOGLE.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

May I send you a  error & report ?



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Thanks








--_000_TYZPR01MB55245C07A785E22F3A791AC0F6112TYZPR01MB5524apcp_--

CAA Phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jan 2025 01:16:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tV4kd-00000000K8i-2EGy

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jan 2025 01:15:47 -0700

Resent-From: The Doctor

Resent-Date: Tue, 7 Jan 2025 01:15:47 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.174.115.195] (port=46243 helo=cnnic.cn)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1tUzsk-00000000KoA-2oJ5

for doctor@netknow.ca;

Mon, 06 Jan 2025 20:03:56 -0700

Date: Mon, 06 Jan 2025 21:44:32 -0500

From: =?UTF-8?B?Q29uc3VtZXItc3VydmV5?=

Reply-To: =?UTF-8?B?Q29uc3VtZXItc3VydmV5?=

To: doctor@netknow.ca

Message-ID:

Subject: =?UTF-8?B?V2UncmUgbG9va2luZy1mb3IgbmV3LWN1c3RvbWVycw==?=

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

List-Id: "0" <4.1vzjTW9Wro8ItEG90wLA28fm8F8CwlFP.localhost.doctor>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-ID: xpro-9985-1488:xpro-9985:MAILING:inxmailde

X-CSA-Complaints: csa-complaints@ional.co.uk

X-Mailer: Inxmail EE 4.8.48.825

X-Spam_score: 30.3

X-Spam_score_int: 303

X-Spam_bar: ++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  CAA You have been chosen!



Content analysis details: (30.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.174.115.195 listed in sbl-xbl.spamhaus.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.174.115.195 listed in will-spam-for-food.eu.org]

[103.174.115.195 listed in will-spam-for-food.eu.org]

[103.174.115.195 listed in will-spam-for-food.eu.org]

[103.174.115.195 listed in will-spam-for-food.eu.org]

[103.174.115.195 listed in will-spam-for-food.eu.org]

[103.174.115.195 listed in will-spam-for-food.eu.org]

[103.174.115.195 listed in will-spam-for-food.eu.org]

[103.174.115.195 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.174.115.195 listed in dnsbl.ahbl.org]

[103.174.115.195 listed in dnsbl.ahbl.org]

[103.174.115.195 listed in dnsbl.ahbl.org]

[103.174.115.195 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.174.115.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.174.115.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.174.115.195 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.174.115.195 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[103.174.115.195 listed in zen.spamhaus.org]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=cnnic.cn;ip=103.174.115.195;r=doctor.nl2k.ab.ca]

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

2.5 GOOG_STO_IMG_NOHTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} =?UTF-8?B?V2UncmUgbG9va2luZy1mb3IgbmV3LWN1c3RvbWVycw==?=

















CAA



























Donation spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jan 2025 06:40:00 -0700

Received: from mail-qv1-f50.google.com ([209.85.219.50]:60863)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tV9oF-00000000G8a-16lL

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jan 2025 06:39:54 -0700

Received: by mail-qv1-f50.google.com with SMTP id 6a1803df08f44-6dd5c544813so112208326d6.1

for ; Tue, 07 Jan 2025 05:37:57 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1736257071; x=1736861871; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=N+0m1/eau0AtcE6Re5dZ7smh9iyj12TVy3UKcM6sNeI=;

b=YOXNH0iuXvgSpQ9W3fAOjWhau3V2kCph9pTsBnMwzZSG2NSOftnfZtdYgnCSbDH9BK

DEwwNP2123T6WS2CzoJF5++vCZWKljfhasDYcAyeP+ied4uRWWJdGgwr8J2rde4t+9jr

Ron46luDiJArCg+GcUUOgyKWKPS22oB4IhtvVmCaTOZwtHHQ3Q3iNnd7ML2N7rEFed/5

WpvBhZiqry9ehCa5CfklDtOohcr/0DYi3Dc9W9KRcbGjR2KF0/idDDuC10wv53JgOwBU

bNImYq+1ZXBUAO7riCzGfXSFkSIpxyXU+zOPUL9simx4dhteF9Kx2lDRSzu1A2Bu0x91

a2DA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1736257071; x=1736861871;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=N+0m1/eau0AtcE6Re5dZ7smh9iyj12TVy3UKcM6sNeI=;

b=a09gxYnDIFjOmPWjYtEjcPhfdS2R0q7Ql1p2mtTagCn7in1cWbgAVj5n6O+iqYzAnE

PBKFZ4MUEzCs0Wu9xHVBZzd5ZLGrl5GV1WqhTTfwEis6Y0c6eGHg/r84TpZnJrykczRK

gW9rGbuxIbaauUpUhIbOUVBUPeDCUYRB6B/3Q1fPvrUsSN3KlPtLiDDYN12Yy143irLg

K9eiSTEkCe8iwerkWlag9SIW2GCCByya1uZuIGcVvUgTyPacR2bzY1naEfiFzIXlJzS0

GDWQWGnRiCm3Muwmue+MsnPKL1Zh0U5kqbM6DjTXT/A/3yaK3It2L3juh04Z2MD4vcjy

L+Wg==

X-Forwarded-Encrypted: i=1; AJvYcCVuzFxYpnCCY/ypkc8ZWV/N80TiGrc5g0O3Osn64LkZA7YMVXZKOlk79/APGlzSfU8oTa6A@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0Ywf3+ey4TNrnLfqltMIetZ5co7LRj74/I9VoE54lCpO0HwkO3VQ

8GRt1mB/20psiPIZr3yJ3zRbZZIp+wKnUm2E8yX20CZJgHqBGh7KNx991CoJL9yjJIFaXFGLaZX

tnYKpj8CyRtc55zR0FpCZkb2uPoY=

X-Gm-Gg: ASbGncuRz3Ja9dr9cSWLS37eBE4yv0F8UXmWIAuBlQe/9ez3xRzYCDgqQwokP+5LCvQ

IiypPVfWnhiq/1Zey44ZEQmtK+1yQmcr3fH/WYw==

X-Google-Smtp-Source: AGHT+IGg9pGUnniiGubCBVeybbZU45K/IQ4BKmwJIDAt2e8PuNO/5Zvv32M3HealSJcYBf/cM+SM3NqB6VNAVPQYQww=

X-Received: by 2002:a05:6214:21e9:b0:6d8:a67e:b2fb with SMTP id

6a1803df08f44-6dd233ac041mr924218966d6.39.1736257070071; Tue, 07 Jan 2025

05:37:50 -0800 (PST)

MIME-Version: 1.0

Reply-To: capinolly76@gmail.com

From: "Frances & Patrick Connolly"

Date: Tue, 7 Jan 2025 14:37:34 +0100

X-Gm-Features: AbW1kvYcSOKKBwDQuJGf0NfoGPeXUa8We97eBbGaH8Yx-6SM0LbFTs64jl2LaVk

Message-ID:

Subject: Donation

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000e69133062b1dd955"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 9.8

X-Spam_score_int: 98

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Our Names are Frances & Patrick Connolly and my foundation

is donating (£1.5 Million Pounds) to you. Reply to us for further details.

Best Regards, Frances & Patrick Connolly, Copyright ©2025 The Frances &

Patrick Connolly Foundation All Rights Reserved.



Content analysis details: (9.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.50 listed in dnsbl.ahbl.org]

[209.85.219.50 listed in dnsbl.ahbl.org]

[209.85.219.50 listed in dnsbl.ahbl.org]

[209.85.219.50 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.50 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.50 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.50 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.50 listed in will-spam-for-food.eu.org]

[209.85.219.50 listed in will-spam-for-food.eu.org]

[209.85.219.50 listed in will-spam-for-food.eu.org]

[209.85.219.50 listed in will-spam-for-food.eu.org]

[209.85.219.50 listed in will-spam-for-food.eu.org]

[209.85.219.50 listed in will-spam-for-food.eu.org]

[209.85.219.50 listed in will-spam-for-food.eu.org]

[209.85.219.50 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.50 listed in list.dnswl.org]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.50 listed in sa-trusted.bondedsender.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.50 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.3 FROM_LOCAL_HEX From: localpart has long hexadecimal sequence

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.50 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.219.50 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.50 listed in wl.mailspike.net]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[capinolly76(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[a0977669813(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[a0977669813(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Donation



--000000000000e69133062b1dd955

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,



Our Names are Frances & Patrick Connolly and my foundation is donating

(=C2=A31.5 Million Pounds) to you. Reply to us for further details.



Best Regards,

Frances & Patrick Connolly,

Copyright =C2=A92025 The Frances & Patrick Connolly Foundation All Rights

Reserved.



--000000000000e69133062b1dd955

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,

Our Names are Frances & Patrick Connolly=

and my foundation is donating (=C2=A31.5 Million Pounds) to you. Reply to =

us for further details.

Best Regards,
Frances & Patrick Conno=

lly,
Copyright =C2=A92025 The Frances & Patrick Connolly Foundation =

All Rights Reserved.




--000000000000e69133062b1dd955--

CAA Phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jan 2025 01:16:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tV4ka-00000000K8a-0c65

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jan 2025 01:15:44 -0700

Resent-From: The Doctor

Resent-Date: Tue, 7 Jan 2025 01:15:44 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.176.78.162] (port=43375 helo=trackingclick.net)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1tUzpo-00000000KKF-25ry

for bin@nl2k.ab.ca;

Mon, 06 Jan 2025 20:00:56 -0700

Date: Mon, 06 Jan 2025 21:44:17 -0500

From: =?UTF-8?B?Q29uc3VtZXItc3VydmV5?=

Reply-To: =?UTF-8?B?Q29uc3VtZXItc3VydmV5?=

To: bin@nl2k.ab.ca

Message-ID:

Subject: =?UTF-8?B?V2UncmUgbG9va2luZy1mb3IgbmV3LWN1c3RvbWVycw==?=

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

List-Id: "0" <4.oKd7Aprv231TRlfJJqbYHFhOiOac8pwE.localhost.bin>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-ID: xpro-9985-1488:xpro-9985:MAILING:inxmailde

X-CSA-Complaints: csa-complaints@ional.co.uk

X-Mailer: Inxmail EE 4.8.48.825

X-Spam_score: 31.9

X-Spam_score_int: 319

X-Spam_bar: +++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  CAA You have been chosen!



Content analysis details: (31.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.176.78.162 listed in sbl-xbl.spamhaus.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.176.78.162 listed in will-spam-for-food.eu.org]

[103.176.78.162 listed in will-spam-for-food.eu.org]

[103.176.78.162 listed in will-spam-for-food.eu.org]

[103.176.78.162 listed in will-spam-for-food.eu.org]

[103.176.78.162 listed in will-spam-for-food.eu.org]

[103.176.78.162 listed in will-spam-for-food.eu.org]

[103.176.78.162 listed in will-spam-for-food.eu.org]

[103.176.78.162 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.176.78.162 listed in dnsbl.ahbl.org]

[103.176.78.162 listed in dnsbl.ahbl.org]

[103.176.78.162 listed in dnsbl.ahbl.org]

[103.176.78.162 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.176.78.162 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.176.78.162 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.176.78.162 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.176.78.162 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[103.176.78.162 listed in zen.spamhaus.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[103.176.78.162 listed in bb.barracudacentral.org]

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 GOOG_STO_IMG_NOHTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} =?UTF-8?B?V2UncmUgbG9va2luZy1mb3IgbmV3LWN1c3RvbWVycw==?=

















CAA



























CAA Phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jan 2025 01:16:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tV4kW-00000000K8Q-1AnC

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jan 2025 01:15:40 -0700

Resent-From: The Doctor

Resent-Date: Tue, 7 Jan 2025 01:15:40 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.176.79.118] (port=52917 helo=mama.cn)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1tUzsj-00000000Knz-2bde

for www@nl2k.ab.ca;

Mon, 06 Jan 2025 20:03:58 -0700

Date: Mon, 06 Jan 2025 21:41:22 -0500

From: =?UTF-8?B?Q29uc3VtZXItc3VydmV5?=

Reply-To: =?UTF-8?B?Q29uc3VtZXItc3VydmV5?=

To: www@nl2k.ab.ca

Message-ID:

Subject: =?UTF-8?B?V2UncmUgbG9va2luZy1mb3IgbmV3LWN1c3RvbWVycw==?=

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

List-Id: "0" <4.SLhZgKB5grpuEFIRx3Qu1TjuoQf7hwyt.localhost.www>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-ID: xpro-9985-1488:xpro-9985:MAILING:inxmailde

X-CSA-Complaints: csa-complaints@ional.co.uk

X-Mailer: Inxmail EE 4.8.48.825

X-Spam_score: 31.1

X-Spam_score_int: 311

X-Spam_bar: +++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  CAA You have been chosen!



Content analysis details: (31.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.176.79.118 listed in sbl-xbl.spamhaus.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.176.79.118 listed in will-spam-for-food.eu.org]

[103.176.79.118 listed in will-spam-for-food.eu.org]

[103.176.79.118 listed in will-spam-for-food.eu.org]

[103.176.79.118 listed in will-spam-for-food.eu.org]

[103.176.79.118 listed in will-spam-for-food.eu.org]

[103.176.79.118 listed in will-spam-for-food.eu.org]

[103.176.79.118 listed in will-spam-for-food.eu.org]

[103.176.79.118 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.176.79.118 listed in dnsbl.ahbl.org]

[103.176.79.118 listed in dnsbl.ahbl.org]

[103.176.79.118 listed in dnsbl.ahbl.org]

[103.176.79.118 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.176.79.118 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.176.79.118 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.176.79.118 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.176.79.118 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[103.176.79.118 listed in zen.spamhaus.org]

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 GOOG_STO_IMG_NOHTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} =?UTF-8?B?V2UncmUgbG9va2luZy1mb3IgbmV3LWN1c3RvbWVycw==?=

















CAA



























CAA Phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jan 2025 01:16:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tV4kM-00000000K87-2yGi

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jan 2025 01:15:30 -0700

Resent-From: The Doctor

Resent-Date: Tue, 7 Jan 2025 01:15:30 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.174.115.173] (port=47307 helo=iqiyi.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1tUzrw-00000000KfK-0lbT

for doctor@nl2k.ab.ca;

Mon, 06 Jan 2025 20:03:06 -0700

Date: Mon, 06 Jan 2025 21:40:38 -0500

From: =?UTF-8?B?Q29uc3VtZXItc3VydmV5?=

Reply-To: =?UTF-8?B?Q29uc3VtZXItc3VydmV5?=

To: doctor@nl2k.ab.ca

Message-ID:

Subject: =?UTF-8?B?V2UncmUgbG9va2luZy1mb3IgbmV3LWN1c3RvbWVycw==?=

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

List-Id: "0" <4.OT1b5nsLLMQWc5sdnTWoTpGdnR9ySv22.localhost.doctor>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-ID: xpro-9985-1488:xpro-9985:MAILING:inxmailde

X-CSA-Complaints: csa-complaints@ional.co.uk

X-Mailer: Inxmail EE 4.8.48.825

X-Spam_score: 30.3

X-Spam_score_int: 303

X-Spam_bar: ++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  CAA You have been chosen!



Content analysis details: (30.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[103.174.115.173 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.174.115.173 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.174.115.173 listed in dnsbl.ahbl.org]

[103.174.115.173 listed in dnsbl.ahbl.org]

[103.174.115.173 listed in dnsbl.ahbl.org]

[103.174.115.173 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.174.115.173 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.174.115.173 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.174.115.173 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.174.115.173 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.174.115.173 listed in will-spam-for-food.eu.org]

[103.174.115.173 listed in will-spam-for-food.eu.org]

[103.174.115.173 listed in will-spam-for-food.eu.org]

[103.174.115.173 listed in will-spam-for-food.eu.org]

[103.174.115.173 listed in will-spam-for-food.eu.org]

[103.174.115.173 listed in will-spam-for-food.eu.org]

[103.174.115.173 listed in will-spam-for-food.eu.org]

[103.174.115.173 listed in will-spam-for-food.eu.org]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=iqiyi.com;ip=103.174.115.173;r=doctor.nl2k.ab.ca]

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 GOOG_STO_IMG_NOHTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} =?UTF-8?B?V2UncmUgbG9va2luZy1mb3IgbmV3LWN1c3RvbWVycw==?=

















CAA



























CAA Phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jan 2025 01:16:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tV4kI-00000000K7w-474T

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jan 2025 01:15:26 -0700

Resent-From: The Doctor

Resent-Date: Tue, 7 Jan 2025 01:15:26 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.176.78.162] (port=47631 helo=trackingclick.net)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1tV0Jo-00000000Oy9-0cQr

for doctor@nk.ca;

Mon, 06 Jan 2025 20:31:55 -0700

Date: Mon, 06 Jan 2025 21:39:46 -0500

From: =?UTF-8?B?Q29uc3VtZXItc3VydmV5?=

Reply-To: =?UTF-8?B?Q29uc3VtZXItc3VydmV5?=

To: doctor@nk.ca

Message-ID:

Subject: =?UTF-8?B?V2UncmUgbG9va2luZy1mb3IgbmV3LWN1c3RvbWVycw==?=

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

List-Id: "0" <4.QtUuPOvYAv3Cy0u5Zz5ZqPYvXCbsXYCP.localhost.doctor>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-ID: xpro-9985-1488:xpro-9985:MAILING:inxmailde

X-CSA-Complaints: csa-complaints@ional.co.uk

X-Mailer: Inxmail EE 4.8.48.825

X-Spam_score: 31.9

X-Spam_score_int: 319

X-Spam_bar: +++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  CAA You have been chosen!



Content analysis details: (31.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.176.78.162 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.176.78.162 listed in dnsbl.ahbl.org]

[103.176.78.162 listed in dnsbl.ahbl.org]

[103.176.78.162 listed in dnsbl.ahbl.org]

[103.176.78.162 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.176.78.162 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.176.78.162 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.176.78.162 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.176.78.162 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.176.78.162 listed in will-spam-for-food.eu.org]

[103.176.78.162 listed in will-spam-for-food.eu.org]

[103.176.78.162 listed in will-spam-for-food.eu.org]

[103.176.78.162 listed in will-spam-for-food.eu.org]

[103.176.78.162 listed in will-spam-for-food.eu.org]

[103.176.78.162 listed in will-spam-for-food.eu.org]

[103.176.78.162 listed in will-spam-for-food.eu.org]

[103.176.78.162 listed in will-spam-for-food.eu.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[103.176.78.162 listed in bb.barracudacentral.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[103.176.78.162 listed in zen.spamhaus.org]

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 GOOG_STO_IMG_NOHTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} =?UTF-8?B?V2UncmUgbG9va2luZy1mb3IgbmV3LWN1c3RvbWVycw==?=

















CAA



























CAA Phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 Jan 2025 01:16:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tV4kR-00000000K8I-1hqy

for dave@doctor.nl2k.ab.ca;

Tue, 07 Jan 2025 01:15:35 -0700

Resent-From: The Doctor

Resent-Date: Tue, 7 Jan 2025 01:15:35 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.179.56.178] (port=53025 helo=reference.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1tUzsE-00000000Kix-0VhV

for root@nk.ca;

Mon, 06 Jan 2025 20:03:25 -0700

Date: Mon, 06 Jan 2025 21:41:07 -0500

From: =?UTF-8?B?Q29uc3VtZXItc3VydmV5?=

Reply-To: =?UTF-8?B?Q29uc3VtZXItc3VydmV5?=

To: root@nk.ca

Message-ID:

Subject: =?UTF-8?B?V2UncmUgbG9va2luZy1mb3IgbmV3LWN1c3RvbWVycw==?=

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

List-Id: "0" <4.92oSNULGLNLW47hjqtOToNTy2tBq4PvG.localhost.root>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-ID: xpro-9985-1488:xpro-9985:MAILING:inxmailde

X-CSA-Complaints: csa-complaints@ional.co.uk

X-Mailer: Inxmail EE 4.8.48.825

X-Spam_score: 27.4

X-Spam_score_int: 274

X-Spam_bar: +++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  CAA You have been chosen!



Content analysis details: (27.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.179.56.178 listed in sbl-xbl.spamhaus.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.179.56.178 listed in will-spam-for-food.eu.org]

[103.179.56.178 listed in will-spam-for-food.eu.org]

[103.179.56.178 listed in will-spam-for-food.eu.org]

[103.179.56.178 listed in will-spam-for-food.eu.org]

[103.179.56.178 listed in will-spam-for-food.eu.org]

[103.179.56.178 listed in will-spam-for-food.eu.org]

[103.179.56.178 listed in will-spam-for-food.eu.org]

[103.179.56.178 listed in will-spam-for-food.eu.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[103.179.56.178 listed in zen.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.179.56.178 listed in dnsbl.ahbl.org]

[103.179.56.178 listed in dnsbl.ahbl.org]

[103.179.56.178 listed in dnsbl.ahbl.org]

[103.179.56.178 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.179.56.178 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.179.56.178 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.179.56.178 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.179.56.178 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.179.56.178 listed in sa-accredit.habeas.com]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.179.56.178 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.179.56.178 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[103.179.56.178 listed in bl.score.senderscore.com]

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 GOOG_STO_IMG_NOHTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} =?UTF-8?B?V2UncmUgbG9va2luZy1mb3IgbmV3LWN1c3RvbWVycw==?=

















CAA