Invoice phishing

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 Jan 2025 15:30:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tW11T-00000000D9S-3tCU

for dave@doctor.nl2k.ab.ca;

Thu, 09 Jan 2025 15:29:03 -0700

Resent-From: The Doctor

Resent-Date: Thu, 9 Jan 2025 15:29:03 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from companystarlink.com ([168.119.177.182]:39347)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVzzc-00000000MCH-3seP

for webmaster@nk.ca;

Thu, 09 Jan 2025 14:23:09 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=dkim5; d=companystarlink.com;

h=Message-ID:Reply-To:From:To:Subject:Date:MIME-Version:Content-Type;

i=WilliamRodriguez@CompanyStarLink.com;

bh=zSoAh5u0xqxWcM4bf+sM/Pm8/78b6i6zla7jfTnYd5k=;

b=XvMvK7kD5yAmNvvirrIrYVrNB7S+iZAGvwr3faQolOdmqdbV+6/+mGyNNKWvH1VLkpt6JzybY2uv

17E3bKgvldRqouFv+QHInb79goYWTHv+DVgJB13qFsBRNomxVFyKGczP1jPdRoN4KmDS5Un2pc1j

uA0X+VPF5Zk9ai1hb28=

Message-ID: <2fcb2a81757ccdc6e1fbb219fe2a012c638f3d@CompanyStarLink.com>

Reply-To: WilliamRodriguez

From: WilliamRodriguez

To: webmaster@nk.ca

Subject: order Ref-6553

Date: Thu, 9 Jan 2025 22:21:12 +0100

MIME-Version: 1.0

Content-Type: multipart/alternative; boundary="22024be0d986aca3309ad36b8f4a460ab333"



--22024be0d986aca3309ad36b8f4a460ab333

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable



I hope this message finds you well,



It's a second notice regarding the necessary payment. The discussed payme=

nt date passed six days ago. Full payment information can be found here:

order_Ref_6553.doc



Please resolve this issue without delay.

Regards,

Supplies Dept Assistant of StellarCore Systems



--22024be0d986aca3309ad36b8f4a460ab333

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable













I hope this message finds y=

ou well,





Please resolve this issue without delay.
Regards=

,

Supplies Dept Assistant of Stella=

rCore Systems




--22024be0d986aca3309ad36b8f4a460ab333--

beermedia spam from digialocean

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 Jan 2025 13:42:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVzLG-00000000FKG-1Wxo

for dave@doctor.nl2k.ab.ca;

Thu, 09 Jan 2025 13:41:22 -0700

Resent-From: The Doctor

Resent-Date: Thu, 9 Jan 2025 13:41:22 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from beermedia.net ([51.68.188.8]:55219)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVy3S-00000000IYK-0vpr

for root@nk.ca;

Thu, 09 Jan 2025 12:19:00 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=beermedia.net; s=mail; h=Content-Type:MIME-Version:List-Owner:

List-Subscribe:List-Unsubscribe:List-Help:Message-ID:From:Date:Subject:To:

Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:

Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:

In-Reply-To:References:List-Id:List-Post:List-Archive;

bh=BSWJ7Bp9JFscz7dMkgAE4ltcdyk9z7iwLFLSlTcVRzM=; b=DbGO7FyRxmkxsvHb1nSe9pxao9

RX+YhAZUBVFjhzgA5ewW8fd5wUFmW7Tfk5ev6o4UAKnxl+IBllC8XQmT5KGVJGkm9hgpfSxabp8pG

tEYv+xuPb2MAx0vQf+l/fI2feocBEcMjKYwebcMevYa2bFcAHZO7NZWiNM0c8KVSK3wE=;

Received: from admin by beermedia.net with local (Exim 4.96)

(envelope-from )

id 1tVy3E-00FcjV-2d

for root@nk.ca;

Fri, 10 Jan 2025 00:48:40 +0530

To: root@nk.ca

Subject: Legal Retainership For All Legal Disputes

Received: from [147.182.184.93] by beermedia.net with HTTP; Fri, 10 Jan 2025 00:47:49 +0530

Date: Fri, 10 Jan 2025 00:48:40 +0530

From: Sabhyata Bhandari

Message-ID:

X-phpList-version: 3.6.15

X-MessageID: 12

X-ListMember: root@nk.ca

Precedence: bulk

List-Help: =?us-ascii?Q?
=?us-ascii?Q?&uid=3Dc7a6849f5ce487dadb1b630f8104ef99>?=

List-Unsubscribe: =?us-ascii?Q?
=?us-ascii?Q?&uid=3Dc7a6849f5ce487dadb1b630f8104ef99&jo=3D1>?=

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Subscribe:

List-Owner:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_G69N3DEo4ekSPQRaB4iARmJnNrr0RKV5XYNAweZ7Yk"

X-Spam_score: 10.6

X-Spam_score_int: 106

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir/Madam, As we step into the new year of 2025, we are

thrilled to announce our goal of building associations with a wide array

of new clients and businesses. We are a team of highly skilled lawyers and

advocates with extensive expertise in Transactional Laws, Court Litigation,

Arbitration, and Mediation. Over the years, our robust network of local counsel

[...]



Content analysis details: (10.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[51.68.188.8 listed in sbl-xbl.spamhaus.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[147.182.184.93 listed in will-spam-for-food.eu.org]

[147.182.184.93 listed in will-spam-for-food.eu.org]

[147.182.184.93 listed in will-spam-for-food.eu.org]

[147.182.184.93 listed in will-spam-for-food.eu.org]

[147.182.184.93 listed in will-spam-for-food.eu.org]

[147.182.184.93 listed in will-spam-for-food.eu.org]

[147.182.184.93 listed in will-spam-for-food.eu.org]

[147.182.184.93 listed in will-spam-for-food.eu.org]

[51.68.188.8 listed in will-spam-for-food.eu.org]

[51.68.188.8 listed in will-spam-for-food.eu.org]

[51.68.188.8 listed in will-spam-for-food.eu.org]

[51.68.188.8 listed in will-spam-for-food.eu.org]

[51.68.188.8 listed in will-spam-for-food.eu.org]

[51.68.188.8 listed in will-spam-for-food.eu.org]

[51.68.188.8 listed in will-spam-for-food.eu.org]

[51.68.188.8 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[51.68.188.8 listed in dnsbl.ahbl.org]

[51.68.188.8 listed in dnsbl.ahbl.org]

[51.68.188.8 listed in dnsbl.ahbl.org]

[51.68.188.8 listed in dnsbl.ahbl.org]

[147.182.184.93 listed in dnsbl.ahbl.org]

[147.182.184.93 listed in dnsbl.ahbl.org]

[147.182.184.93 listed in dnsbl.ahbl.org]

[147.182.184.93 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[51.68.188.8 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[51.68.188.8 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[51.68.188.8 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[51.68.188.8 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[51.68.188.8 listed in zen.spamhaus.org]

0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS

blocklist

[URI: beermedia.net/51.68.188.8]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: beermedia.net]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[51.68.188.8 listed in sa-trusted.bondedsender.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: beermedia.net]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[51.68.188.8 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: beermedia.net/51.68.188.8]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[51.68.188.8 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[51.68.188.8 listed in bl.score.senderscore.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} Legal Retainership For All Legal Disputes



This is a multi-part message in MIME format.



--b1_G69N3DEo4ekSPQRaB4iARmJnNrr0RKV5XYNAweZ7Yk

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable



Dear Sir/Madam,



As we step into the new year of 2025, we are thrilled to announce our goal

of building associations with a wide array of new clients and businesses.



We are a team of highly skilled lawyers and advocates with extensive

expertise in Transactional Laws, Court Litigation, Arbitration, and

Mediation. Over the years, our robust network of local counsel has enabled

us to establish a strong presence across key locations:



India: Mumbai, Bengaluru, Hyderabad, Chennai, Kolkata

United States: California, Texas, Florida, New York, Pennsylvania

United Kingdom: London, Manchester, Birmingham, Leeds, Liverpool

Europe: Switzerland, France, Germany, Ireland, Italy

Asia: Singapore, China, Japan, South Korea, Philippines

Australia: Sydney, Melbourne, Brisbane, Perth, Adelaide

Africa: Nigeria, Ethiopia, Kenya, Algeria, Morocco

South Africa: Cape Town, Johannesburg, Durban, Pretoria



Our comprehensive legal services include:



Criminal matters, including bail applications

Civil and commercial suits

Business litigation

Intellectual Property Rights (IPR)

White-collar crime

Insolvency and competition law

Specialized areas like space law, marine law, and logistics

Consumer protection and more



This year, we are particularly excited to partner with young startups and

businesses on a retainer basis, starting at just =E2=82=B95,000 per month. =

Our

retainership package offers:



1 Legal Notice or Reply to Legal Notice per Month

1 Agreement/Contract/MOU & Vetting

1 Hour of Consultation and Strategy Planning for litigation matters or

other legal issues.



We pride ourselves on acting as your trusted legal partners, akin to family

lawyers, who deeply understand your critical needs and deliver tailored

solutions.



With a small investment of =E2=82=B95,000, you can enjoy absolute peace of =

mind,

free from legal worries and disputes.



Let us handle the complexities of legal matters while you focus on growing

your business.



Looking forward to collaborating with you this year! If you are interested

in our services, kindly share your full contact details along with contact

mobile and I will personally reach you within 24 hours.



Warm regards,



Sabhyata Bhandari













-- powered by phpList, www.phplist.com --





--b1_G69N3DEo4ekSPQRaB4iARmJnNrr0RKV5XYNAweZ7Yk

Content-Type: multipart/related;

boundary="b2_G69N3DEo4ekSPQRaB4iARmJnNrr0RKV5XYNAweZ7Yk";

type="text/html"



--b2_G69N3DEo4ekSPQRaB4iARmJnNrr0RKV5XYNAweZ7Yk

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable



=0A
iv=3D"Content-Type">=0A =0A =

Dear =

Sir/Madam,





As we step into the new year of =

2025
, we are thrilled to announce our goal of building association=

s with a wide array of new clients and businesses.





We are a team of highly skilled =

lawyers and advocates
with extensive expertise in Transact=

ional Laws, Court Litigation, Arbitration, and Mediation
. Over the=

years, our robust network of local counsel has enabled us to establish a s=

trong presence across key locations:







    =09
  • India: Mumbai, Beng=

    aluru, Hyderabad, Chennai, Kolkata


  • =09
  • United States: Cali=

    fornia, Texas, Florida, New York, Pennsylvania


  • =09
  • United Kingdom: Lon=

    don, Manchester, Birmingham, Leeds, Liverpool


  • =09
  • Europe: Switzerland=

    , France, Germany, Ireland, Italy


  • =09
  • Asia: Singapore, Ch=

    ina, Japan, South Korea, Philippines


  • =09
  • Australia: Sydney, =

    Melbourne, Brisbane, Perth, Adelaide


  • =09
  • Africa: Nigeria, Et=

    hiopia, Kenya, Algeria, Morocco


  • =09
  • South Africa: Cape =

    Town, Johannesburg, Durban, Pretoria






Our comprehensive legal services include=

:







    =09
  • Criminal matters, including bail app=

    lications


  • =09
  • Civil and commercial suits
    i>

    =09
  • Business litigation


  • =09
  • Intellectual Property Rights (IPR)
    span>


  • =09
  • White-collar crime


  • =09
  • Insolvency and competition law
    >


  • =09
  • Specialized areas like space law, ma=

    rine law, and logistics


  • =09
  • Consumer protection and more<=

    /li>





This year, we are particularly excited t=

o partner with young startups and businesses on a retainer basis
trong>, starting at just =E2=82=B95,000 per month. Our ret=

ainership package offers:







    =09
  1. 1 Legal Notice or Reply to L=

    egal Notice per Month


  2. =09
  3. 1 Agreement/Contract/MOU &am=

    p; Vetting


  4. =09
  5. 1 Hour of Consultation and S=

    trategy Planning
    for litigation matters or other legal issues.
    an>






We pride ourselves on acting as your tru=

sted legal partners, akin to family lawyers, who deeply understand your cri=

tical needs and deliver tailored solutions.





With a small investment of =

=E2=82=B95,000
, you can enjoy absolute peace of mind, free from le=

gal worries and disputes.





Let us handle the complexities of legal =

matters while you focus on growing your business.





Looking forward to collaborating with yo=

u this year! If you are interested in our services, kindly share yo=

ur full contact details along with contact mobile and I will personally rea=

ch you within 24 hours.





Warm regards,





Sabhyata Bhandari



=0A


ermedia.net/lists/lt.php?tid=3DLBlaUwIAAQpUWUxXBVUCGQMAAl0UBA9WUhxVClZUU1JU=

BwxWBAsZCFdRB1AFXAcZBgRRXRRSXAMDHAlbBQAbVwUGWwcEWgEPUAAHGAgAVFIAA1JZFFIKBgE=

cBV1QVhsCVFYPGlMKAwhcUFEGVAAGBw" title=3D"visit the phpList website" >
src=3D"cid:b9081ccf479c1151e7800e1db4b98b2d" title=3D"powered by phpList v=

ersion 3.6.15, © phpList ltd" alt=3D"powered by phpList 3.6.15, ©=

phpList ltd" border=3D"0" />


s/ut.php?u=3Dc7a6849f5ce487dadb1b630f8104ef99&m=3D12" width=3D"1" heigh=

t=3D"1" border=3D"0" alt=3D"" />

--b2_G69N3DEo4ekSPQRaB4iARmJnNrr0RKV5XYNAweZ7Yk

Content-Type: image/png; name=powerphplist.png

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline; filename=powerphplist.png



iVBORw0KGgoAAAANSUhEUgAAAEsAAAAhCAYAAACRIVbWAAAABHNCSVQICAgIfAhkiAAAAAlwSFlz

AAALEgAACxIB0t1+/AAAAB50RVh0U29mdHdhcmUAQWRvYmUgRmlyZXdvcmtzIENTNS4xqx9I6wAA

DmhJREFUaIHtmntw1FWWxz+/Xz/T6aQTQgIkJgR5LGRIFDcPsSAEWEFkZSIisPIcRaTKEkEMwUGX

RRaZWlSylKPrqBDFGCXyUAqiKLUg6ADBhCRAEGQhWU1IIpru9Lt/j/2jkx/ppEOwZmoetX6rurrv

45x77/fec+65t69AN4zOyMgDFgP5gK17+f8D2IG9QPGZmprDqqpqBULnj9EZGTFAMfDrv3Tv/obx

EbC4trq6DTrI6iDqMHDbX69ff7OoBvJqq6vbxI6MYn4hqjfcRpAfhA4f9d9/zd78nWCiHljRW+nw

zPGk507T0g11VZwqLwPAZLEybtbD2PoPxP7DVY59uA2f20lK2hgSBg/jVHkZtviBZE6bzaF3tgIw

fdlv2f9fL/TQC3BoR7DO5AXLtbyuem9WpvaLci6eOtpjLLb4gSH1ju3aTkv9xaD8wuVaO+m50/C6

neF0rBCBvN7IssUHiTj1SRmnPiljRJcOT1/2WwBOfVIWkva6nKTn3gtcJ9tksZKSNgZb/MCwek99

Uoa99Sq2+EGYI61aHsC4WQ/ftEztF+VkTXuQ4Znjw4wltF5nfwFs/QeSPmGatgB8bmc4OvL09BEe

2FubaDhXFfydOw1TpBVb/EBs8YPY/XKwwYZzVfxm03Zs8QNpqb+IuaNOyqgxAIzIHE9U3ACunKlE

kiQURUFVFGRZBqD+bCUAsizjcbbzPzUVAPRPvpUBqSN+lozBbCF55G3UHQ/1LLIso6rBb0WWMVms

SJIEwJGdb/BgwX9gNEdy9fIFTZderw/hOyQVDuMeeJhxDzyskVJ7pJwBqcOxtzb1INUWPwh761Ua

zlUxPHM8KWljOLZrGylpY4juP5CT+9/X6g/+1R3Y4geFDLwz/+nizzSdH/9+Q58y3fvxD1m5Ycts

8YPIvncOAD53O+ZIK16Xk+YrF7lQcYTs6XN4o2Bhr1z0SdaxXds0P9UJr8uJOdIaktfZMEBz/UWy

ps2mpf4iDedOkzVtNiaLlfpz1wdYfXg/J/d/0KO9+rOVHCwuYsG/vUr14f00X7nYp0xIPyxWvOHN

iOYrFyjbXAhA7oNLyMibrun7puKLjsluCisLIIbNVRRt6Ssdv7t+Gi/VYbJYSRs3FUmSSBs3FZPF

SuOlOiRJ4nLtKUwWK+dPHqHxUh1eVzvNVy5qZPYFe2sTnxVvIffBJQxIHX5TMhCcsBHZE3pddV1h

Sxh003o70efK6g0f/34DMx5/jimLV/Qwl+YrF7G3NlF/thK9KFJ75ECwMTE4N6IgMG7WI+Q+uEST

2V64mIDHhd/tRC+KXPr6GMc+fIs7p89l/2sbbyjT1XRPHdjJuS/KtbY60b1ew7kqznap17Xt3iCM

zshQe+QqCpKi/CzyekM3J/l3jfAjEQSNYUEQkCQZj8eNXq8nOjqayMhIVFXF7XZjt9uRZRmLxYJO

p6PrwfPPRfifikAggCAIf/LE9SIdHLAgCnjcHvz+AP+YeQdT7p7CqFGjSEhIQFVVWltbqamp4dCh

Q5w+fRqj0YjZbA4hDIA+SFMUBa/XS4TZjHADM7gRZFnG5/NhiYgAQQjJH5SQgM/vp62tDZ1O16sO

t9uN0WjEYDAEGeiiB3oxQ0FVAAG3243BYGDZsmXMnTuXAQMGhG2ksbGR0tJS3nzzTRRFwWQyoaoq

kqIEZ/MGZCmKgsViITMzk4qKCrxeL0K3TvYFRVGIjY0lLS2NEydOIMsygiAQCARISUlh586dtLS0

MG/ePFwuV1jCVFVl7NixXLlyhe+//x6dXt+DrLDTqKgqfr8fm83GunXrePLJJ0OI8ng8vPLKKzz1

1FPU1dWRmJjIqlWreOaZZ1BVVVv2NwO/38+wYcN47bXXGDp0KD6f7+fwBIDX62Xs2LG8/vrrxMbG

asGmqqrodDrMZjNms7nXPsmyTEREBC+99BL33HMPbrc7bL2wZujz+VBkBZPZRHZ2dkhZIBDgzbfe

4tzZs9xySzKbfvc7Nmx4nsEpg5k/fz6XL1/hjTf/QGxMLBD0eV6fD6VjdXVG4IIgYDQaARA7TE+S

JJxOJ5IkIQgCJpMJg8GALMt4vV5EUeyIxIPG0ElEpz5ZlkP8ktFopL6+nqlTpxIIBHC5XEiShMfj

0eqIooher8fn8xEIBPB6vTidTqxRUT3IDUuWJEnceuutTJo4ibVr17Ju3TpGjhwJgMvlorLya+bO

nsM/3X03CxYspKG+nsEpgxFFkYce+hcOHTrEd9//LyZzBH6/n7vuuouYmBgCgQD3338/UVFRVFdX

U1payrfffhs0WUkiJyeHefPmkZSUREVFBSUlJbS2ttK/f39mzZrFhQsXmDx5Munp6TgcDvbs2cPn

n38ePAqpqvbpCkVRmDFjBk1NTZSVlZGZmcns2bNJTU3l2rVrfPbZZxw/fpw1a9Zgs9mYP38+aWlp

/PvGjfgDgRBdYc1QJ+rIysxi7dq1jL1rLAUFBZw/fx6AqKgoxt45lk8Pfsrb77zNwIEDGDp0mCY7

ZMgQcsePx+/zB1ei309+fj5FRUUUFRXh9Xqprq5m4sSJfPDBB4waNQqPx4MgCKxevZr4+Hhqamq4

7777eP/990lISCA+Pp7169dTWlpKXl4eNTU1eDwetm7dypo1awh0G1QnOonLz88nJyeHkSNHsn37

dpKSkqisrESWZZ5//nlycnI0nc3NzZw/f16zhD5XFoJAeno6AMufWI4syRQWFrJ582ZGjBjB0qWP

MmPGr9lW/DZfHj1KYmLidYV6PWlpaRhNJk1Xpw8pKCjgww8/RBAEtm7dSklJCc899xxbtmxBp9Ox

bds21q9fjyRJvPrqq+zdu5fly5dTXFwMwIkTJ3jkkUdoa2tDVVXmzJnDyy+/zL59+/B6vWGHAkEf

297eTnZ2NhEREaxYsYILFy5gtVoZNmwYLpcLh8PB4sWLOXjwIFu2bGFQYmKPnTn8Pq2qxMXFacmV

K1eSl5dHYWEhly5dYs+evcTFxTHvoYd45513sNvtIeK2WBtGg0FLG41GGhoa+PTTT4mOjiYmJob2

9naKi4u5/fbbSU5ORpIkDh48iF6vp1+/fly7do0DBw5wxx13aH7pvffew+l0EhsbS0xMDAcOHOC7

775j0qRJmi/sDUajkZMnT+Lz+di5cyebNm1i4sSJNDc3Y7fbiY6ORhRFzGYzUWH8Va9kyYqCrIQ2

vnLlSqb/83SWPraU3Xt2s3btWl568UX8AT+rV6/G5XJpdRVZQeW67xBFkZ9++glJkjRnbjAY+PHH

HxEEAavVqm33neV6vV5z9IIgoCgKbW1tmgPvdOjXrl2jX79+NyQKwGQyUVtby6JFi6ipqWHmzJmU

lJSwY8cOEhMT8fv9feoIS5bRaKChvqFHflJiEs3NzbQ72omNjcVsNrPh+Q1YrVaeLnha2/abmq/i

811vXJZlEhMTsVgsmn/xer0MHz4cv99Pa2srer2+x2wKgqD5HVEUSU1N1cwtEAgQGRlJamoqly9f

7nOgnTpOnjzJihUrmDp1KgsWLCA9PZ2FCxdqZPUIqPsiy2QyceLEiZC8uro6it9+m9LS98nLy2Pj

xo2oqorVamXjxo1YIiyseWYNDoeDs2fOIklBUgSCoUh8fDyrVq3CaDTidDrJysriiSeeYN++fTQ3

N6PT6cKS1UmYLMs8/vjjZGdn43Q6MRgMFBQUEBERQXl5OaYOH+nz+fB6vfh8Pi0cEAQBn8/HvHnz

KCwsJDo6GrvdTlVVFQ6HQzu+GQwGRFHE6/WGJa2X445AZWUlx48f58477wSCUTqqyoCEBIaPGE5V

VRV+vx+TyYTZbOaFF15g06ZNLF36GN83fkdkx32XSjAeamtr495772XKlCk4HA6SkpL46quv2Lx5

M2lpaQAhfkdVVQRBwGAwQEeQ7PV62bFjB42NjVitVgwGAytXruTy5ctkZWVhMBgoKSnB7/drxO/a

tUtLe71eFi1axMyZM3E4HMTExOByuXj33Xfx+XwcPXqUpUuXkpmZyaqnn8bXzTSF0RkZbXS7WhZQ

cTpdZGdl8oc33iA6Khq3282zzz5Lyw+tSIEAc+fMJT8/P0RZa2sr+fn5NDY1ER0djT8QwO/3859b

tpCcnMzSRx8ld8IEoqxWvvnmGyoqKpAVhZiYGLKzszl+/DgejwexYwdNHTKEuLg4PB4Pu3fvZsmS

JTgcDtLT03E6nXx57BiNTU2YTCZibDZyJ0wgMjIyZIWePXMGCO6I1TU1DE5JITMri9jYWFpaWvjj

V3+kzR70hWazmcmTJ2PQ6zlQXg6hu6FdGJ2RsZdu/0ILqMiqgqPNzv33z2Tdv64jLq4fHo+H/Qf2

k3xLMjk5OSFE/fDDD2x+8UX27fsYnU6PIEBAkvH7/WwtKmLw4MEs+s1iTOYIVEVBbzBgMpkQRQFF

VvB4PERYIhAFsbMTBAIS9rY2hgwZwq6yMh5btoyvq6ow6PUIooDJZMag14MQXJVutxu6WY/RaERV

VURRxGgyEggE8Pv8KIqCqBMxmczodboOHQoetxsEgcjISK42hdyafqQHirqTBQI6UUd0VDS7d++m

taWVJUseYfLkycx6YFZITVmWOXzkCNu3b+PYsS+DMysK0GHzqqqi1+vR6XToDUYyszK1sj4hCJw+

Xa0lVYJBcTAGVK9n/rxz902jG1lFnX/fh6wuQSA4IEFEUSTaHU5stmgybruN9F+N5pbkZFRVpamx

kZqaGmrPnsHe1kZkpBVRJ3aQIRCQJFRVJXPMGMwREXxx9GjwxH+ztwoqqKpCtM3GpEmTOHz4MD/9

+CPiDa5Z/pzocs78qLa6Oj/sWwdR0PraQVxwl5EkCQQw6A0gCMiShKIqGPQG7VDcFf6AhMFgwOvx

BK9iOnadnwtFUXB7PFgiIrQ47C8I7a3DL69oboyer2i64pf3Wb2/z/o/Z4jQ19LLyeMAAAAASUVO

RK5CYII=



--b2_G69N3DEo4ekSPQRaB4iARmJnNrr0RKV5XYNAweZ7Yk--





--b1_G69N3DEo4ekSPQRaB4iARmJnNrr0RKV5XYNAweZ7Yk--

Costco Phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 Jan 2025 13:41:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVzKs-00000000EoI-21dO

for dave@doctor.nl2k.ab.ca;

Thu, 09 Jan 2025 13:40:58 -0700

Resent-From: The Doctor

Resent-Date: Thu, 9 Jan 2025 13:40:58 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.63.25.248] (port=34773 helo=goddesspets.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1tVxrM-00000000GHN-3iaQ

for doctor@doctor.nl2k.ab.ca;

Thu, 09 Jan 2025 12:06:30 -0700

Received: from a27-123.smtp-out.us-west-2.amazonses.com (a27-123.smtp-out.us-west-2.amazonses.com. [54.240.27.123])

by mx.google.com with ESMTPS id 41be03b00d2f7-7fc9c380b6asi13165356a12.713.2024.12.03.02.38.25

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 03 Dec 2024 02:38:25 -0800 (PST)

Received-SPF: pass (google.com: domain of 010101938c198d35-f5195b23-82c6-4a44-a19f-3017fd90759b-000000@us-west-2.amazonses.com designates 54.240.27.123 as permitted sender) client-ip=54.240.27.123;

Authentication-Results: mx.google.com;

dkim=pass header.i=@tradingview.com header.s=k3edjogkpt66rlyhj672zwuhwslbz2h3 header.b=iyp0HoRg;

dkim=pass header.i=@amazonses.com header.s=7v7vs6w47njt4pimodk5mmttbegzsi6n header.b=bTUUu6ko;

spf=pass (google.com: domain of 010101938c198d35-f5195b23-82c6-4a44-a19f-3017fd90759b-000000@us-west-2.amazonses.com designates 54.240.27.123 as permitted sender) smtp.mailfrom=010101938c198d35-f5195b23-82c6-4a44-a19f-3017fd90759b-000000@us-west-2.amazonses.com;

dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=tradingview.com

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=k3edjogkpt66rlyhj672zwuhwslbz2h3; d=tradingview.com; t=1733222305; h=Content-Type:MIME-Version:Content-Transfer-Encoding:Subject:From:To:Date:Message-ID; bh=IMk6BcFkpFg7nJmDPywSrlv0r3IhjR7aKfoxKNXWMR8=; b=iyp0HoRg6YAS9XqtmgsdeBnHxdrOaVNEdSmJttGga+0T+zLL1PQf8yuuGcv7heqZ dr3Tl+iKq7ylVZrFowhBZzUlJMbtcckUT+fXHIKeJL3i4PEIrc2pBTYSmtRz5SiW00q IFahIaDXDDaZZkWgTx/WbwYHAD9WQfis1L2HGuR0=

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=7v7vs6w47njt4pimodk5mmttbegzsi6n; d=amazonses.com; t=1733222305; h=Content-Type:MIME-Version:Content-Transfer-Encoding:Subject:From:To:Date:Message-ID:Feedback-ID; bh=IMk6BcFkpFg7nJmDPywSrlv0r3IhjR7aKfoxKNXWMR8=; b=bTUUu6koxPRDHyQ4qwhhH4OFIh5WCSVstGzqCpvebub14X2nOStPnwoNauNVGhDC lqpL9VESJcnQD7LAIDRemkJVfBSA7euDfLhPd29Oui/eCyzWLUUmlHr4gENFPg59Eh1 jVvOku8vhth5ZuQSKP2DjmqxYB4NEK97F/67yRuI=

Content-Type: multipart/alternative; boundary="----=_Part_9006_1222595691.fJdcWRjgGt20Uj"

Date: [email_date]

From: "Costco Department"

Mime-Version: 1.0

Message-ID:

Subject: Did you forget? Your $100 Costco reward Is Waiting

X-Feedback-ID: 76386728:SG

X-SG-EID: dvN382UrNniYvxB1Bq2VLud7hmKWmCDsQ8PYtrHo7JGqWOMT4By4e7JUevGv3rFbBNiBjTQStPdVbO27UI4cXvFgJ5H7iFOG4stN+suWVWPjFXPSEMddW1PYKQupsIydSK4ay3eRFlx5Z0BL2QEdYFUSyGTe9KwYQ1DYZ0WDDwxDTCqGoYNX2YD7aBg2LefiBeBLSJQXfuNm7tx4N+dETJumO9jZQSDiQYN34IfXWrn3bJdyIODuOt2Ufh+a9CC3tkf5uWfMckcnL7y2VaZhl7==

X-SG-ID: PSTNLPLV8Kw8TDZFytyIpdQ8mH28Ul2sj9V12mB1N/GcWOYOvQ4FALB4XbeM4hzApOCOaM7SGzvXZ4H5LgkrU87zJIZNj4tpg3JimzATxpy7nLGl/1UtNS/+1kssbD07RMSEr3e8lVevI7jjO42ClsyGKId6zRSKxw/qHrqQz+Kk0y4siI2DL/aynJFBJdyGWK83eBg9l3crKWAE/1kssbD07RMSEr3e8lVevI7jjO42ClsyGKId6zRSKxw+7FCjfPEamB/wHtZKhcTV2tNkzUvh1ruS4vaIg3i7EwuNgg7nn+aynJFBJdyGWK83eBg9l3crKWAE+Sca9hjvSzAXtWe4UAuVYRTseYhTeETovlfCXBHsB8p11n/cBCJUuhelwN7jGvXWAB4UG1Gap4YfQt==

To:

X-Entity-ID: u001.ESLEFREDIAVKYR3KWBQ3MM==

X-Spam_score: 21.1

X-Spam_score_int: 211

X-Spam_bar: +++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please confirm your email address Click here to confirm your

email address To receive HubSpot content on marketing, sales and/or service

topics - please confirm your email address. You will be added to our email

distribution list. You can unsubscribe at any time. WNGGKCCZ Th [...]



Content analysis details: (21.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

[54.240.27.123 listed in dnsbl.ahbl.org]

[54.240.27.123 listed in dnsbl.ahbl.org]

[54.240.27.123 listed in dnsbl.ahbl.org]

[103.63.25.248 listed in dnsbl.ahbl.org]

[103.63.25.248 listed in dnsbl.ahbl.org]

[103.63.25.248 listed in dnsbl.ahbl.org]

[103.63.25.248 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[103.63.25.248 listed in will-spam-for-food.eu.org]

[103.63.25.248 listed in will-spam-for-food.eu.org]

[103.63.25.248 listed in will-spam-for-food.eu.org]

[103.63.25.248 listed in will-spam-for-food.eu.org]

[103.63.25.248 listed in will-spam-for-food.eu.org]

[103.63.25.248 listed in will-spam-for-food.eu.org]

[103.63.25.248 listed in will-spam-for-food.eu.org]

[103.63.25.248 listed in will-spam-for-food.eu.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[103.63.25.248 listed in bb.barracudacentral.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: soundcast.me]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[103.63.25.248 listed in wl.mailspike.net]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

1.0 HK_RANDOM_FROM From username looks random

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.3 LONGWORD BODY: Uses overlong words

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.8 A_HREF_NOWHERE A link tag with empty href

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

3.2 HTML_TAG_BALANCE_CENTER Malformatted HTML

0.0 HTML_FONT_TINY_NORDNS Font too small to read, no rDNS

1.6 HREF_EMPTY_NORDNS Empty href + no rDNS

0.0 NORDNS_LOW_CONTRAST No rDNS + hidden text

Subject: {SPAM?} Did you forget? Your $100 Costco reward Is Waiting



------=_Part_9006_1222595691.fJdcWRjgGt20Uj

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Please confirm your email address



Click here to confirm your email address



To receive HubSpot content on marketing, sales and/or service topics -Â please confirm your email address. You will be added to our email distribution list. You can unsubscribe at any time.

WNGGKCCZ

The 90s had seen the apotheosis of the form, including Take That and Backstreet Boys, but those bands’ robust anthems and breezy dance-pop seemed to flame out in 2001 with the over-egged futurism of ‘NSync’s Pop, the first single from an album with the jaded title Celebrity.

Thanks,



The HubSpot Team



HubSpot, 25 1st St., Cambridge, MA 02141, USA, 888-482-7768



HubSpot, 2 Canal Park, , Cambridge, MA 02141, USA, 888-482-7768









Unsubscribe (https://hs-53.s.hubspotemail.net/hs/manage-preferences/unsubscribe-all?languagePreference=en&d=MnbTK9GK15VW3_Vshk4hHDBPW3T2_Lm2m40KfW3T0pbm43T3CZVmWFg14N_KfmN5fr_5C25rVhW8xS7DT8t0gJQVWmbwB8c2k7nMXk_7QbvZTwVMrv2h5s79sCW1P-vmr68hV1J32Kw2&v=3 )



Manage preferences (https://hs-53.s.hubspotemail.net/hs/manage-preferences/unsubscribe?languagePreference=en&d=MnbTK9GK15VW3_Vshk4hHDBPW3T2_Lm2m40KfW3T0pbm43T3CZVmWFg14N_KfmN5fr_5C25rVhW8xS7DT8t0gJQVWmbwB8c2k7nMXk_7QbvZTwVMrv2h5s79sCW1P-vmr68hV1J32Kw2&v=3 )

------=_Part_9006_1222595691.fJdcWRjgGt20Uj

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable





Bitte bestätigen Sie Ihre E-Mail-Adresse there | Confirm your e-mail address there

































Last Chance! Be Sure To Grab Your $100 Reward...











CVS Phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 Jan 2025 10:08:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVvzy-00000000DhY-0ZF8

for dave@doctor.nl2k.ab.ca;

Thu, 09 Jan 2025 10:07:10 -0700

Resent-From: The Doctor

Resent-Date: Thu, 9 Jan 2025 10:07:10 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.171.84.195] (port=37191 helo=kldmccxfzt.net)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1tVu8r-000000007ed-1Qae

for doctor@doctor.nl2k.ab.ca;

Thu, 09 Jan 2025 08:08:18 -0700

Received: from a27-123.smtp-out.us-west-2.amazonses.com (a27-123.smtp-out.us-west-2.amazonses.com. [54.240.27.123])

by mx.google.com with ESMTPS id 41be03b00d2f7-7fc9c380b6asi13165356a12.713.2024.12.03.02.38.25

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 03 Dec 2024 02:38:25 -0800 (PST)

Received-SPF: pass (google.com: domain of 010101938c198d35-f5195b23-82c6-4a44-a19f-3017fd90759b-000000@us-west-2.amazonses.com designates 54.240.27.123 as permitted sender) client-ip=54.240.27.123;

Authentication-Results: mx.google.com;

dkim=pass header.i=@tradingview.com header.s=k3edjogkpt66rlyhj672zwuhwslbz2h3 header.b=iyp0HoRg;

dkim=pass header.i=@amazonses.com header.s=7v7vs6w47njt4pimodk5mmttbegzsi6n header.b=bTUUu6ko;

spf=pass (google.com: domain of 010101938c198d35-f5195b23-82c6-4a44-a19f-3017fd90759b-000000@us-west-2.amazonses.com designates 54.240.27.123 as permitted sender) smtp.mailfrom=010101938c198d35-f5195b23-82c6-4a44-a19f-3017fd90759b-000000@us-west-2.amazonses.com;

dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=tradingview.com

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=k3edjogkpt66rlyhj672zwuhwslbz2h3; d=tradingview.com; t=1733222305; h=Content-Type:MIME-Version:Content-Transfer-Encoding:Subject:From:To:Date:Message-ID; bh=IMk6BcFkpFg7nJmDPywSrlv0r3IhjR7aKfoxKNXWMR8=; b=iyp0HoRg6YAS9XqtmgsdeBnHxdrOaVNEdSmJttGga+0T+zLL1PQf8yuuGcv7heqZ dr3Tl+iKq7ylVZrFowhBZzUlJMbtcckUT+fXHIKeJL3i4PEIrc2pBTYSmtRz5SiW00q IFahIaDXDDaZZkWgTx/WbwYHAD9WQfis1L2HGuR0=

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=7v7vs6w47njt4pimodk5mmttbegzsi6n; d=amazonses.com; t=1733222305; h=Content-Type:MIME-Version:Content-Transfer-Encoding:Subject:From:To:Date:Message-ID:Feedback-ID; bh=IMk6BcFkpFg7nJmDPywSrlv0r3IhjR7aKfoxKNXWMR8=; b=bTUUu6koxPRDHyQ4qwhhH4OFIh5WCSVstGzqCpvebub14X2nOStPnwoNauNVGhDC lqpL9VESJcnQD7LAIDRemkJVfBSA7euDfLhPd29Oui/eCyzWLUUmlHr4gENFPg59Eh1 jVvOku8vhth5ZuQSKP2DjmqxYB4NEK97F/67yRuI=

Content-Type: multipart/alternative; boundary="----=_Part_9006_1222595691.PNAseFGVa26LNw"

Date: [email_date]

From: "Pharmacy Rewards"

Mime-Version: 1.0

Message-ID:

Subject: Final Call: CVS Reward Expires Today!

X-Feedback-ID: 26679134:SG

X-SG-EID: 2QBLgg3dXWEiXTjQP7stO2tuEnQHovUzQ8PetAePwnHFZVzzfbNqfWqfIgRB4CUFIHzRBNhOcx200RAiuNTQM81XPQ7siNguOmdx+8jmCewbYiXzp4FicRkopjN0DaDUgZRzYG5KGmKxbhwim4xaZpPmSor14Pq4jeYxi1HSYHIczl3mYYzhThbNFvLcAve06sflFzSlKqV4NzrZL+DYleMoqRCdk5juKozYQHRl93A8zl7ByueFtTkhy1+hTQc6C7umVNQEvA6RGH0xIaVVOz==

X-SG-ID: FduLGd0Wxhq93fFsSrZrRKpQENvoVUPrCnpDzDGQK/GXOHBr6rRjxfDxZarWJt6ywh6oboY3cX4UN4xlegpJxqiOVJBEggF3nWW9IXoQy2Vq9DkB/pxv2F/+lranZWHdtJWGpdzfczGbVKB1QvFFY3mrzZf3LbVDSi/VPZ5xm+68SbeOp7whY/jnsOMyPta04hPqo64IA1heyjK8/lranZWHdtJWGpdzfczGbVKB1QvFFY3mrzZf3LbVDSi+xuMXpOE7UE/6PrfGzOX4yy7EZRtukRQSuQ13Wqj7Peg5RVttE+jnsOMyPta04hPqo64IA1heyjK8+p4KBzjEuUFZoc5JyvwwHAgNGWKLBWcfgAPUe6kiOBYvjl/j88frbvyVAceOPxsVbrCL3Z9zBF96ze==

To:

X-Entity-ID: u001.LUJCLIREA9KDCBGMDWCVPP==

X-Spam_score: 16.9

X-Spam_score_int: 169

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please confirm your email address Click here to confirm your

email address To receive HubSpot content on marketing, sales and/or service

topics - please confirm your email address. You will be added to our email

distribution list. You can unsubscribe at any time. PEOMWASI Th [...]



Content analysis details: (16.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

[54.240.27.123 listed in dnsbl.ahbl.org]

[54.240.27.123 listed in dnsbl.ahbl.org]

[54.240.27.123 listed in dnsbl.ahbl.org]

[103.171.84.195 listed in dnsbl.ahbl.org]

[103.171.84.195 listed in dnsbl.ahbl.org]

[103.171.84.195 listed in dnsbl.ahbl.org]

[103.171.84.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[103.171.84.195 listed in will-spam-for-food.eu.org]

[103.171.84.195 listed in will-spam-for-food.eu.org]

[103.171.84.195 listed in will-spam-for-food.eu.org]

[103.171.84.195 listed in will-spam-for-food.eu.org]

[103.171.84.195 listed in will-spam-for-food.eu.org]

[103.171.84.195 listed in will-spam-for-food.eu.org]

[103.171.84.195 listed in will-spam-for-food.eu.org]

[103.171.84.195 listed in will-spam-for-food.eu.org]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.171.84.195 listed in sa-trusted.bondedsender.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[103.171.84.195 listed in bb.barracudacentral.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.171.84.195 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: soundcast.me]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.171.84.195 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[103.171.84.195 listed in bl.score.senderscore.com]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.3 LONGWORD BODY: Uses overlong words

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.8 A_HREF_NOWHERE A link tag with empty href

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

3.2 HTML_TAG_BALANCE_CENTER Malformatted HTML

1.6 HREF_EMPTY_NORDNS Empty href + no rDNS

0.0 HTML_FONT_TINY_NORDNS Font too small to read, no rDNS

0.0 NORDNS_LOW_CONTRAST No rDNS + hidden text

Subject: {SPAM?} Final Call: CVS Reward Expires Today!



------=_Part_9006_1222595691.PNAseFGVa26LNw

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Please confirm your email address



Click here to confirm your email address



To receive HubSpot content on marketing, sales and/or service topics -Â please confirm your email address. You will be added to our email distribution list. You can unsubscribe at any time.

PEOMWASI

The 90s had seen the apotheosis of the form, including Take That and Backstreet Boys, but those bands’ robust anthems and breezy dance-pop seemed to flame out in 2001 with the over-egged futurism of ‘NSync’s Pop, the first single from an album with the jaded title Celebrity.

Thanks,



The HubSpot Team



HubSpot, 25 1st St., Cambridge, MA 02141, USA, 888-482-7768



HubSpot, 2 Canal Park, , Cambridge, MA 02141, USA, 888-482-7768









Unsubscribe (https://hs-53.s.hubspotemail.net/hs/manage-preferences/unsubscribe-all?languagePreference=en&d=MnbTK9GK15VW3_Vshk4hHDBPW3T2_Lm2m40KfW3T0pbm43T3CZVmWFg14N_KfmN5fr_5C25rVhW8xS7DT8t0gJQVWmbwB8c2k7nMXk_7QbvZTwVMrv2h5s79sCW1P-vmr68hV1J32Kw2&v=3 )



Manage preferences (https://hs-53.s.hubspotemail.net/hs/manage-preferences/unsubscribe?languagePreference=en&d=MnbTK9GK15VW3_Vshk4hHDBPW3T2_Lm2m40KfW3T0pbm43T3CZVmWFg14N_KfmN5fr_5C25rVhW8xS7DT8t0gJQVWmbwB8c2k7nMXk_7QbvZTwVMrv2h5s79sCW1P-vmr68hV1J32Kw2&v=3 )

------=_Part_9006_1222595691.PNAseFGVa26LNw

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable





Bitte bestätigen Sie Ihre E-Mail-Adresse there | Confirm your e-mail address there

































Congratulations! Your CVS Reward Is Here











Costco Phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 Jan 2025 10:08:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVvzu-00000000DhC-3ZyZ

for dave@doctor.nl2k.ab.ca;

Thu, 09 Jan 2025 10:07:06 -0700

Resent-From: The Doctor

Resent-Date: Thu, 9 Jan 2025 10:07:06 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.214.113.15] (port=42439 helo=dujora.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1tVv9C-00000000JgC-3P5s

for doctor@doctor.nl2k.ab.ca;

Thu, 09 Jan 2025 09:12:44 -0700

Received: from a27-123.smtp-out.us-west-2.amazonses.com (a27-123.smtp-out.us-west-2.amazonses.com. [54.240.27.123])

by mx.google.com with ESMTPS id 41be03b00d2f7-7fc9c380b6asi13165356a12.713.2024.12.03.02.38.25

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 03 Dec 2024 02:38:25 -0800 (PST)

Received-SPF: pass (google.com: domain of 010101938c198d35-f5195b23-82c6-4a44-a19f-3017fd90759b-000000@us-west-2.amazonses.com designates 54.240.27.123 as permitted sender) client-ip=54.240.27.123;

Authentication-Results: mx.google.com;

dkim=pass header.i=@tradingview.com header.s=k3edjogkpt66rlyhj672zwuhwslbz2h3 header.b=iyp0HoRg;

dkim=pass header.i=@amazonses.com header.s=7v7vs6w47njt4pimodk5mmttbegzsi6n header.b=bTUUu6ko;

spf=pass (google.com: domain of 010101938c198d35-f5195b23-82c6-4a44-a19f-3017fd90759b-000000@us-west-2.amazonses.com designates 54.240.27.123 as permitted sender) smtp.mailfrom=010101938c198d35-f5195b23-82c6-4a44-a19f-3017fd90759b-000000@us-west-2.amazonses.com;

dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=tradingview.com

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=k3edjogkpt66rlyhj672zwuhwslbz2h3; d=tradingview.com; t=1733222305; h=Content-Type:MIME-Version:Content-Transfer-Encoding:Subject:From:To:Date:Message-ID; bh=IMk6BcFkpFg7nJmDPywSrlv0r3IhjR7aKfoxKNXWMR8=; b=iyp0HoRg6YAS9XqtmgsdeBnHxdrOaVNEdSmJttGga+0T+zLL1PQf8yuuGcv7heqZ dr3Tl+iKq7ylVZrFowhBZzUlJMbtcckUT+fXHIKeJL3i4PEIrc2pBTYSmtRz5SiW00q IFahIaDXDDaZZkWgTx/WbwYHAD9WQfis1L2HGuR0=

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=7v7vs6w47njt4pimodk5mmttbegzsi6n; d=amazonses.com; t=1733222305; h=Content-Type:MIME-Version:Content-Transfer-Encoding:Subject:From:To:Date:Message-ID:Feedback-ID; bh=IMk6BcFkpFg7nJmDPywSrlv0r3IhjR7aKfoxKNXWMR8=; b=bTUUu6koxPRDHyQ4qwhhH4OFIh5WCSVstGzqCpvebub14X2nOStPnwoNauNVGhDC lqpL9VESJcnQD7LAIDRemkJVfBSA7euDfLhPd29Oui/eCyzWLUUmlHr4gENFPg59Eh1 jVvOku8vhth5ZuQSKP2DjmqxYB4NEK97F/67yRuI=

Content-Type: multipart/alternative; boundary="----=_Part_9006_1222595691.tESfQHAmrNF5iX"

Date: [email_date]

From: "Costco Department"

Mime-Version: 1.0

Message-ID:

Subject: Did you forget? Your $100 Costco reward Is Waiting

X-Feedback-ID: 94686938:SG

X-SG-EID: 2e0d8ZRk94n18LUTwJEN7B84QkG91EdgVkBG0BIo9kpFjebYcG3SSm1AaNL2ADMgx4fUpi83rghSpAjOK2ACcZdzb1EeyyYRsB6Q+sQTsM8SQZnM94L3iYZoDf92s7ziRs3sSRfjp4WkFehjZyCLsot8EjgOIaMMMIW7EXki1fH6c87BXqfvcZZg9cCmNOnjyqA5NWo8h5pZgshMF+TO2je6ehgOCKknZbmiLUGRCGkrHQ4JHj3KkgYnUK+WGxaAV7vhjRQDoxRa7xIWGFkMzf==

X-SG-ID: eDYOpAkKQR9dozH4IOOVrUCmAgSboSvGQKQyQKBSY/z6NaVAKsFbLTpfb8KZXZjN20IksRnXxIgUvtSHwbI7iH7TzbPLuKACC0oDSVWUCvn44mj3/qagfe/+ZeVoQeINqgLzxHT821NE663X2DqjrQdmOXJOSJJuPz/ggmzki+pi4zoqaLpJb/n6mSzp1ex5U8AKxw1z4io2IlQA/ZeVoQeINqgLzxHT821NE663X2DqjrQdmOXJOSJJuPz+OvICRTniQZ/pjKfmIzTVMZ4Wme2tDGH4of5NHUVgcaVLPv9yW+n6mSzp1ex5U8AKxw1z4io2IlQA+CmNO6GyDUcM5vEOWCkEr5EByfulelpA2Bj865WkviQbSm/xUlZGPIeZyhYNypLwgVkpDVCxNpeMU5==

To:

X-Entity-ID: u001.ET5G6IZ8IDSBHLBKVSYNDK==

X-Spam_score: 19.9

X-Spam_score_int: 199

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please confirm your email address Click here to confirm your

email address To receive HubSpot content on marketing, sales and/or service

topics - please confirm your email address. You will be added to our email

distribution list. You can unsubscribe at any time. MLPBHUXI Th [...]



Content analysis details: (19.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

[54.240.27.123 listed in dnsbl.ahbl.org]

[54.240.27.123 listed in dnsbl.ahbl.org]

[54.240.27.123 listed in dnsbl.ahbl.org]

[103.214.113.15 listed in dnsbl.ahbl.org]

[103.214.113.15 listed in dnsbl.ahbl.org]

[103.214.113.15 listed in dnsbl.ahbl.org]

[103.214.113.15 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[54.240.27.123 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[54.240.27.123 listed in will-spam-for-food.eu.org]

[103.214.113.15 listed in will-spam-for-food.eu.org]

[103.214.113.15 listed in will-spam-for-food.eu.org]

[103.214.113.15 listed in will-spam-for-food.eu.org]

[103.214.113.15 listed in will-spam-for-food.eu.org]

[103.214.113.15 listed in will-spam-for-food.eu.org]

[103.214.113.15 listed in will-spam-for-food.eu.org]

[103.214.113.15 listed in will-spam-for-food.eu.org]

[103.214.113.15 listed in will-spam-for-food.eu.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[103.214.113.15 listed in bb.barracudacentral.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: soundcast.me]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.3 LONGWORD BODY: Uses overlong words

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 HTML_FONT_TINY_NORDNS Font too small to read, no rDNS

0.8 A_HREF_NOWHERE A link tag with empty href

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

3.2 HTML_TAG_BALANCE_CENTER Malformatted HTML

0.0 NORDNS_LOW_CONTRAST No rDNS + hidden text

1.6 HREF_EMPTY_NORDNS Empty href + no rDNS

Subject: {SPAM?} Did you forget? Your $100 Costco reward Is Waiting



------=_Part_9006_1222595691.tESfQHAmrNF5iX

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Please confirm your email address



Click here to confirm your email address



To receive HubSpot content on marketing, sales and/or service topics -Â please confirm your email address. You will be added to our email distribution list. You can unsubscribe at any time.

MLPBHUXI

The 90s had seen the apotheosis of the form, including Take That and Backstreet Boys, but those bands’ robust anthems and breezy dance-pop seemed to flame out in 2001 with the over-egged futurism of ‘NSync’s Pop, the first single from an album with the jaded title Celebrity.

Thanks,



The HubSpot Team



HubSpot, 25 1st St., Cambridge, MA 02141, USA, 888-482-7768



HubSpot, 2 Canal Park, , Cambridge, MA 02141, USA, 888-482-7768









Unsubscribe (https://hs-53.s.hubspotemail.net/hs/manage-preferences/unsubscribe-all?languagePreference=en&d=MnbTK9GK15VW3_Vshk4hHDBPW3T2_Lm2m40KfW3T0pbm43T3CZVmWFg14N_KfmN5fr_5C25rVhW8xS7DT8t0gJQVWmbwB8c2k7nMXk_7QbvZTwVMrv2h5s79sCW1P-vmr68hV1J32Kw2&v=3 )



Manage preferences (https://hs-53.s.hubspotemail.net/hs/manage-preferences/unsubscribe?languagePreference=en&d=MnbTK9GK15VW3_Vshk4hHDBPW3T2_Lm2m40KfW3T0pbm43T3CZVmWFg14N_KfmN5fr_5C25rVhW8xS7DT8t0gJQVWmbwB8c2k7nMXk_7QbvZTwVMrv2h5s79sCW1P-vmr68hV1J32Kw2&v=3 )

------=_Part_9006_1222595691.tESfQHAmrNF5iX

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable





Bitte bestätigen Sie Ihre E-Mail-Adresse there | Confirm your e-mail address there

































Last Chance! Be Sure To Grab Your $100 Reward...











Web / SEO/ App spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 Jan 2025 10:08:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVw09-00000000Dil-0l77

for dave@doctor.nl2k.ab.ca;

Thu, 09 Jan 2025 10:07:21 -0700

Resent-From: The Doctor

Resent-Date: Thu, 9 Jan 2025 10:07:21 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-sg2apc01olkn2062.outbound.protection.outlook.com ([40.92.53.62]:42921 helo=APC01-SG2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVvy9-00000000D5L-2XG6

for root@nk.ca;

Thu, 09 Jan 2025 10:05:21 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=pOXn70xpa0agfi9ZgtTorsFBHVckwHxi2LRadCS1vGoybbjXNoehAM1W1NfzSaHYHmOGRRnZUriV+exeuAkSzdMSiE50XqCCprLNSnLPH7Y5zkGkHh4qu4GTkGsgGQXSVX+tBkG9UYSoHUnr9rlCo2O026vuu7nckbosbcsMt0oERlw5GKC7sXsiHma0J1+UmYhOR/k71WNhd1ep0N+iT3fcLGWOUt+YPUON+aNL1OxOMuTD3a4eZapz+Fi7zCKQz/wxyV+f+Yw3md0qU1r885mlQhyAp4mS0m0SGaodMxsGTs5T16mUi53ijBdj9yS6pxk6hpfzBQh5yDYF1mhz+A==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=/3P7h0DyXA4q0vd8H4sUNuRVXOC2DaYtiUfoNKPkvik=;

b=HKzpx9p4cjcVdeME8b0NOCnq4Qy/Js1KKYGH1bOuI5hPgLEQ9AUF/D1j2nedKez4BK4pZ0IFWFRtPwi7mc3vq+Gn91beI2HFhZNQWH3CZzRSRmcU0slsfCuiRW6YbBU6oKoYnvgc5I9Oc6T4KaIQp3t9jmfZSpUYOYyK5UwUolCYi8JatkdcclL9gI7q2dflMWONPv6evPA7T6m7C+gGUfoUmEkORD3qlTCaryd49MWCHqcyIpL0o5s9ixEf9SO6CU0de5jNlHAHeKn8MNvO/EM5h3NIBhjGeAeMruGaWjcr2/HS5ZaDN426j+II/QQLPNHhQXIn9hAs1SDpufNzHA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=/3P7h0DyXA4q0vd8H4sUNuRVXOC2DaYtiUfoNKPkvik=;

b=l/ny3nnbyqgaU5cVcgSrkvW9jNtTi6i9D6hEc2wwM0YvuwTKeLA/aTC6VC5VgDHWL7Gl8bn7i4t3RcAB+Vec2S27iXh1mTlV1Xkeh0tUT6PjmFtg9haU6BCUaevyf8J4vTP1GaG5J1DnBGREuC751LCtQ/FnBDcb0HSL1P0D56kLqOJUWowPi3FV5guMx3q7QuvWkXR0mdTVhjeRm7ES8FjDbw/HPV4xnANBtC3d7tw8bJ3Uu4tDnQ38Q0OoO3dlALnBjmMgpdTw2/tjTWiDVxQsu+ktwVZk5nv+jRhHHH8VtRZX/i3MmW5WxqHzeM9TpGdzv3NiGRuvH5z1oI7aMQ==

Received: from SEZPR06MB5165.apcprd06.prod.outlook.com (2603:1096:101:4c::14)

by PUZPR06MB6127.apcprd06.prod.outlook.com (2603:1096:301:107::5) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8356.6; Thu, 9 Jan

2025 17:02:35 +0000

Received: from SEZPR06MB5165.apcprd06.prod.outlook.com

([fe80::db20:de2c:5abc:2454]) by SEZPR06MB5165.apcprd06.prod.outlook.com

([fe80::db20:de2c:5abc:2454%6]) with mapi id 15.20.8335.011; Thu, 9 Jan 2025

17:02:35 +0000

From: Sharukh Khan

To: Sharukh Khan

Subject: Re: should i send.

Thread-Topic: should i send.

Thread-Index: AQHbYrfvrx4mwssoNkOdQwa5siXTHg==

Date: Thu, 9 Jan 2025 17:02:34 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SEZPR06MB5165:EE_|PUZPR06MB6127:EE_

x-ms-office365-filtering-correlation-id: b9d8bd0b-7e71-4843-9bfb-08dd30cf69d8

x-ms-exchange-slblob-mailprops:

vQx3cGk1+xw//31DDXfsYQoxuOEIYFexIsbsYqudilIij42Ew62EfjmZEZZOYlBhXp485jEc36ZOr/1nWnc6MKl92kI1lYQhpSwjXxMPNoIJ/++qfSLdF1PxMLpSiZ6dZnnx8TAjoid/Lh0itHEY8pybQiArJlHoPyf2i8p1m5ju8AOjpyj8IrQHax/wVVF55RdkInIggUz8Uv7PzNwEwb92BpohgGhgR2gBCMTCjZr9xj/XKNGEUSaItVOcgB9BCbALCrDYdB/TTodBBajOWIJrfsq1+Xyxm2D0bgNnICq3BwKnxitcSgk28Hii5+G99VAnsUneDkqE/TbXMzKi3RiCefp0Xt6qr3G5gj4325jmWPYpBI78EXCF/AHWU0zNxCRksEd2oDM2E4IVSu9RTpI34Djhm3Vv4Awou9pl1OY+1VVUkvrX/j4f06wLk2GDmXQXOtJeAb8fOTSApw3U3pgNoXCBp79HcEE2ufa/TcqxYyNTdJVwIFxI00ZX3j8qPxU+dD7QpIlAFTKwg/bcckomoXr6IXRgm8FL7HHRxFPg1MidohgQzdlnJO/KFcPd9xt3cFzTHVjARzTg2tGLpHN8M3Z9KEaV0IWyzTRytSA=

x-microsoft-antispam:

BCL:0;ARA:14566002|8062599003|461199028|19110799003|15030799003|15080799006|8060799006|102099032|440099028|3412199025|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?NHosIMc7t3SjlTzLwb53s4flYHHtscE+sIih37sXu6kVyMaaSeT5YbD0?=

=?Windows-1252?Q?rcGwl8JxI548lpN+WGkWI3Ydnmhsf8xUaEp40MLS5H7Nx1ldLT05LPbx?=

=?Windows-1252?Q?GzT9RDXOzkCLIx/2kglSZ69X4DKaozmvg6A91nZhi5JmYN4Elh3oBd3y?=

=?Windows-1252?Q?AdprXr86iYkErm+kMEzohZG2axcwbQrRO8jdEnBcJdVMBv2EV1cdx243?=

=?Windows-1252?Q?Kjy1PcISSar9Rb36EuX6r4oU6NIslOrvk4q+79Mp0/C05JO1GLcaux0s?=

=?Windows-1252?Q?lrz77kkxxkgWoWTy1oFn5OZowBtFJF0DCKZhOK0pCzIpCmxoMcYhBclx?=

=?Windows-1252?Q?uIwzrBygfWmo62eMdEYYARtE2Ow+ckYZv8trjWpqjva/vmWdIXHRxcTR?=

=?Windows-1252?Q?YseW4brZ4opimItGIfoNy1y8i9lTWg1F0zQ2B+cDdbIPvVkETH41ae7m?=

=?Windows-1252?Q?uA9UNhaG1RXAAjOwlAYfHoCEXspm9bTM9VV7s8XXtucglehoXkB14/ee?=

=?Windows-1252?Q?iPpVHzilWJYPPs8LtA8g2ZdRU+BtTyjSt6JDhJcoJLlpXgqSTuj5+i4X?=

=?Windows-1252?Q?LBQ/VrxGx6TkfIMwvFlcgQBnNyJIBK8XkH/Ks4yfdkMIjieaLeNswuOV?=

=?Windows-1252?Q?S5Qsti2ejd6IaLxU/R3eT7wfmdeXmTneEyavsXgN5WRChqTa8fVdbp9D?=

=?Windows-1252?Q?m50mLPimnHlqKqDqKPSN/xbYF+or/WUKrwOwJfx2Xhwysd/oLFWdroyj?=

=?Windows-1252?Q?UNMT9J1oLBksyWOEqPDlrfZQN10QErM3DRXkkf+QvP+2j5Sv0f+DzqbV?=

=?Windows-1252?Q?/Ajzu7BgprDO6OX/p9zuwfigpdKKDXcNThUbiVSV7cKufqu6N4bsa80T?=

=?Windows-1252?Q?X18dPbvbUwAOegF9P3yoIzmrSfr0P/3HY+3kBcWgSXL+GNkvEbksT4nb?=

=?Windows-1252?Q?HZ+Ryx0JcIQTQDayf4dYJGqdfUXHz/blT2k7mY7e0na4E9/yyttw03ou?=

=?Windows-1252?Q?pfrMy9cegEnYMCCBh30nna5f7TAGSPyxPc+/ighOc1aawqNz7MV1otTY?=

=?Windows-1252?Q?n7qaJUDmyYKZElpvG5ErMy80/DaaNhDAed4ZrpjFU2GQZWumgb/JDJYg?=

=?Windows-1252?Q?S/VQUWm2dRyGGCpXlnw1FwW28ulGRVFb225OfkvrNuXOiFrylyE+zEC3?=

=?Windows-1252?Q?J5d48kflhPc=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?anio9xPazGvlzhw9Thq50oPhKMwfZ6Phrfv5g4ezU1r1hzii7sCuVs68?=

=?Windows-1252?Q?CuuJrOMmvF6aRZ9R3eaJ0KXxyCsR82htOEgpC4BDybqpVG9+wcNRxZbh?=

=?Windows-1252?Q?YSjZvWo5csUlmJTnyVnOlFLoySa4cXtTrCijIMQtRWbncaD4SE897VTa?=

=?Windows-1252?Q?v4UojE7nRA5WH5PP027dcdSncl7H3Wc+4kjGmwPw0RKxGrk3fU0WyB1q?=

=?Windows-1252?Q?z0s1iotN/n6IAim3CLinGBZIYdjKZYoIRWQ9YB2NAnE9Brqj73JRei3Q?=

=?Windows-1252?Q?rAXJUlz6E51RjTZOVxAoBHlKH790wUtfBYSjWmmCMcuUVTefqvmMdqXJ?=

=?Windows-1252?Q?ECDPDDMlXEWIKK6p7WYg+u7oSMDjUin49AHk00Ic+lPHTC7+lW+iN9f3?=

=?Windows-1252?Q?e59Adl3zpiVEHtnx+hNXRg9GVLps9C/pWsjEcdwsf5JWcaATT46sXac7?=

=?Windows-1252?Q?n9QM8HmwcVBYg5IbYJOUvA4Pzko4Er0a2qQQgL9twc7kyO5Kaa5UFRpU?=

=?Windows-1252?Q?MFGKRKCECG9OObK1fyfaP82V2WDWY5fjA5iXQZTHrhN2koli9AWxmfE+?=

=?Windows-1252?Q?YlTjQeX1h1PWXDc3Cvp6ZAYEaci5Cd2sWl/4DF41VXvG55UyHuNVjnzI?=

=?Windows-1252?Q?bal8A1q/whrPiUgqjENCvWPWCbYysflWtLlq4UKWpdXGxktjItO1NeBv?=

=?Windows-1252?Q?uEv/+L4ChY+g3Sf7g7GV5019h/wAOvzj3j4bWUyv+QM6UnRe8KhFhGkj?=

=?Windows-1252?Q?dFWR21xDtRL5GWUUHxiQFQxQfsR6o63lqI96JMThQMiHrq90mDOYjihU?=

=?Windows-1252?Q?0TTcWAuAaReIZoGaPdTIU/dwDWIIH7ZKMNYOhsqc5wGhQSFYP0ztolEP?=

=?Windows-1252?Q?njFxsrnVC0HnIGChefaj8pCfmcGwuXDPmZTNBy5vhXtRL+1Yo0Zlj7ba?=

=?Windows-1252?Q?K0MelB7GYKLcaOFP4guUBZktgGwkxGI8kkeqD2Ktymgo85NCyEloiI8v?=

=?Windows-1252?Q?RTcBVblgeJOMG4Nl5FEECgCnkxX8NNLWal/GdQs10XHi544eJhSJLC5D?=

=?Windows-1252?Q?rPYxFwrPrab6iWtZRhhtHh1KAMbN8uYjizWq4SeJDf9h3av2ULwJlwCy?=

=?Windows-1252?Q?QTezK9KA/9F3RBiK69d+jlhvg41nHm8TtZtGpSK5i6S1zNr22VN3gFiB?=

=?Windows-1252?Q?67eOWECpdSFot/W138bJhHhgOQkNHnB7Z8+lMnP7Qs557CNe/vgJ4uEN?=

=?Windows-1252?Q?frECyG6bGTsflyqu2dupLG07YNndOX+DqLtTY9jje8HFM+Y2yEMcYxo6?=

=?Windows-1252?Q?pQ3aQhSvinGHhXpbwgGqVunC17/5BmmgabThgBYMvA0UEXgHpPDpwcxR?=

=?Windows-1252?Q?40VJxJf623nc88LFq2qjfkePcLJDoDLfdb4=3D?=

Content-Type: multipart/alternative;

boundary="_000_SEZPR06MB5165D6747D9EEFC1D65F96AF97132SEZPR06MB5165apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SEZPR06MB5165.apcprd06.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: b9d8bd0b-7e71-4843-9bfb-08dd30cf69d8

X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Jan 2025 17:02:34.8308

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PUZPR06MB6127



--_000_SEZPR06MB5165D6747D9EEFC1D65F96AF97132SEZPR06MB5165apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



May I send you a screenshot of the error on your website?



Best,



From: Sharukh Khan

Sent: August 27, 2024 5:51 PM

Subject: Re: can i..$$



Hi,



I've identified some errors on your website and would like to provide you w=

ith a detailed report. We can also help improve your site=92s visibility on=

Google=92s first page.



Can I send you a screenshot of the error?



If Interested, May I send you SEO proposal & price list?



Regards,,











--_000_SEZPR06MB5165D6747D9EEFC1D65F96AF97132SEZPR06MB5165apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








margin: 0px; font-family: "Trebuchet MS", Trebuchet, sans-serif; =

font-size: 12pt; color: rgb(0, 0, 0);">

Hi,



"Trebuchet MS", Trebuchet, sans-serif; font-size: 12pt; color: r=

gb(0, 0, 0);">







margin: 0px; font-family: "Trebuchet MS", Trebuchet, sans-serif; =

font-size: 12pt; color: rgb(0, 0, 0);">

May I send you a scr=

eenshot of the error on your website?



"Trebuchet MS", Trebuchet, sans-serif; font-size: 12pt; color: r=

gb(0, 0, 0);">







margin: 0px; font-family: "Trebuchet MS", Trebuchet, sans-serif; =

font-size: 12pt; color: rgb(0, 0, 0);">

Best,



"Trebuchet MS", Trebuchet, sans-serif; font-size: 12pt; color: r=

gb(0, 0, 0);">







"Trebuchet MS", Trebuchet, sans-serif; font-size: 12pt; color: r=

gb(0, 0, 0);">

From: Sharukh Khan



"Trebuchet MS", Trebuchet, sans-serif; font-size: 12pt; color: r=

gb(0, 0, 0);">

Sent: August 27, 2024 5:51 PM



"Trebuchet MS", Trebuchet, sans-serif; font-size: 12pt; color: r=

gb(0, 0, 0);">

Subject: Re: can i..$$



"Trebuchet MS", Trebuchet, sans-serif; font-size: 12pt; color: r=

gb(0, 0, 0);">







"Trebuchet MS", Trebuchet, sans-serif; font-size: 12pt; color: r=

gb(0, 0, 0);">

Hi,



"Trebuchet MS", Trebuchet, sans-serif; font-size: 12pt; color: r=

gb(0, 0, 0);">







"Trebuchet MS", Trebuchet, sans-serif; font-size: 12pt; color: r=

gb(0, 0, 0);">

I've identified some errors on your website and would like to provide you w=

ith a detailed report. We can also help improve your site=92s visibility on=

Google=92s first page.



"Trebuchet MS", Trebuchet, sans-serif; font-size: 12pt; color: r=

gb(0, 0, 0);">







"Trebuchet MS", Trebuchet, sans-serif; font-size: 12pt; color: r=

gb(0, 0, 0);">

Can I send you a scr=

eenshot of the error?



"Trebuchet MS", Trebuchet, sans-serif; font-size: 12pt; color: r=

gb(0, 0, 0);">







"Trebuchet MS", Trebuchet, sans-serif; font-size: 12pt; color: r=

gb(0, 0, 0);">

If Interested, May I send you SEO proposal & price list?



"Trebuchet MS", Trebuchet, sans-serif; font-size: 12pt; color: r=

gb(0, 0, 0);">







"Trebuchet MS", Trebuchet, sans-serif; font-size: 12pt; color: r=

gb(0, 0, 0);">

Regards,,



, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">












--_000_SEZPR06MB5165D6747D9EEFC1D65F96AF97132SEZPR06MB5165apcp_--

CAA Phish

Return-path:

Envelope-to: dafve@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 Jan 2025 10:03:59 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVrOj-000000002Uq-4Apz

for dafve@doctor.nl2k.ab.ca;

Thu, 09 Jan 2025 05:12:25 -0700

Resent-From: The Doctor

Resent-Date: Thu, 9 Jan 2025 05:12:25 -0700

Resent-Message-ID:

Resent-To: dafve@doctor.nl2k.ab.ca

Received: from [103.67.78.242] (port=40667 helo=gizmodo.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1tVjFr-00000000NOG-3WXe

for games@nl2k.ab.ca;

Wed, 08 Jan 2025 20:30:49 -0700

Date: Wed, 08 Jan 2025 22:24:50 -0500

From: =?UTF-8?B?Q3VzdG9tZXItZmVlZGJhY2s=?=

Reply-To: =?UTF-8?B?Q3VzdG9tZXItZmVlZGJhY2s=?=

To: games@nl2k.ab.ca

Message-ID:

Subject: =?UTF-8?B?V2UncmUgbG9va2luZy1mb3IgbmV3Li5jdXN0b21lcnM=?=

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

List-Id: "0" <4.znokXr0xZy2Me3VAYYYaIHF4v3CnAuZt.localhost.games>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-ID: xpro-9985-1488:xpro-9985:MAILING:inxmailde

X-CSA-Complaints: csa-complaints@ional.co.uk

X-Mailer: Inxmail EE 4.8.48.825

X-Spam_score: 30.3

X-Spam_score_int: 303

X-Spam_bar: ++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  CAA You have been chosen!



Content analysis details: (30.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.67.78.242 listed in dnsbl.ahbl.org]

[103.67.78.242 listed in dnsbl.ahbl.org]

[103.67.78.242 listed in dnsbl.ahbl.org]

[103.67.78.242 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.67.78.242 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.67.78.242 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.67.78.242 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.67.78.242 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.67.78.242 listed in will-spam-for-food.eu.org]

[103.67.78.242 listed in will-spam-for-food.eu.org]

[103.67.78.242 listed in will-spam-for-food.eu.org]

[103.67.78.242 listed in will-spam-for-food.eu.org]

[103.67.78.242 listed in will-spam-for-food.eu.org]

[103.67.78.242 listed in will-spam-for-food.eu.org]

[103.67.78.242 listed in will-spam-for-food.eu.org]

[103.67.78.242 listed in will-spam-for-food.eu.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[103.67.78.242 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.67.78.242 listed in sbl-xbl.spamhaus.org]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=gizmodo.com;ip=103.67.78.242;r=doctor.nl2k.ab.ca]

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 GOOG_STO_IMG_NOHTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} =?UTF-8?B?V2UncmUgbG9va2luZy1mb3IgbmV3Li5jdXN0b21lcnM=?=

















CAA



























CAA Phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 Jan 2025 05:43:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVrOM-000000002Qt-0TSN

for dave@doctor.nl2k.ab.ca;

Thu, 09 Jan 2025 05:12:02 -0700

Resent-From: The Doctor

Resent-Date: Thu, 9 Jan 2025 05:12:02 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.67.78.227] (port=55459 helo=xe.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1tVjG0-00000000NOv-0jNL

for doctor@nl2k.ca;

Wed, 08 Jan 2025 20:30:55 -0700

Date: Wed, 08 Jan 2025 22:20:26 -0500

From: =?UTF-8?B?Q3VzdG9tZXItZmVlZGJhY2s=?=

Reply-To: =?UTF-8?B?Q3VzdG9tZXItZmVlZGJhY2s=?=

To: doctor@nl2k.ca

Message-ID:

Subject: =?UTF-8?B?V2UncmUgbG9va2luZy1mb3IgbmV3Li5jdXN0b21lcnM=?=

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

List-Id: "0" <4.D3IkwgyGgFrgN8PtX8yQ3N9BleMrzfaw.localhost.doctor>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-ID: xpro-9985-1488:xpro-9985:MAILING:inxmailde

X-CSA-Complaints: csa-complaints@ional.co.uk

X-Mailer: Inxmail EE 4.8.48.825

X-Spam_score: 30.3

X-Spam_score_int: 303

X-Spam_bar: ++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  CAA You have been chosen!



Content analysis details: (30.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[103.67.78.227 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.67.78.227 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.67.78.227 listed in dnsbl.ahbl.org]

[103.67.78.227 listed in dnsbl.ahbl.org]

[103.67.78.227 listed in dnsbl.ahbl.org]

[103.67.78.227 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.67.78.227 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.67.78.227 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.67.78.227 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.67.78.227 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.67.78.227 listed in will-spam-for-food.eu.org]

[103.67.78.227 listed in will-spam-for-food.eu.org]

[103.67.78.227 listed in will-spam-for-food.eu.org]

[103.67.78.227 listed in will-spam-for-food.eu.org]

[103.67.78.227 listed in will-spam-for-food.eu.org]

[103.67.78.227 listed in will-spam-for-food.eu.org]

[103.67.78.227 listed in will-spam-for-food.eu.org]

[103.67.78.227 listed in will-spam-for-food.eu.org]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=xe.com;ip=103.67.78.227;r=doctor.nl2k.ab.ca]

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 GOOG_STO_IMG_NOHTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} =?UTF-8?B?V2UncmUgbG9va2luZy1mb3IgbmV3Li5jdXN0b21lcnM=?=

















CAA



























Metamask phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 Jan 2025 05:28:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVrRh-000000002xZ-0RNJ

for dave@doctor.nl2k.ab.ca;

Thu, 09 Jan 2025 05:15:29 -0700

Resent-From: The Doctor

Resent-Date: Thu, 9 Jan 2025 05:15:29 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cloudhost-4895770.us-midwest-2.nxcli.net ([199.189.224.125]:28552)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVmZs-000000005Qw-1ODt

for sales@nk.ca;

Thu, 09 Jan 2025 00:03:41 -0700

Received: (qmail 26618 invoked by uid 10172); 9 Jan 2025 07:03:23 +0000

Date: 9 Jan 2025 07:03:23 +0000

Message-ID: <20250109070323.26617.qmail@cloudhost-4895770.us-midwest-2.nxcli.net>

To: sales@nk.ca

Subject: Your Account Update

X-PHP-Originating-Script: 10172:mail.php

From: Customer Help

Reply-To: zmixbf64@info.example.net

Content-Type: text/html; charset=UTF-8

MIME-Version: 1.0

X-Spam_score: 12.5

X-Spam_score_int: 125

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: MetaMask Security Secure Your Wallet Now !



Content analysis details: (12.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[199.189.224.125 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[199.189.224.125 listed in dnsbl.ahbl.org]

[199.189.224.125 listed in dnsbl.ahbl.org]

[199.189.224.125 listed in dnsbl.ahbl.org]

[199.189.224.125 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[199.189.224.125 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[199.189.224.125 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[199.189.224.125 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[199.189.224.125 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[199.189.224.125 listed in zen.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[199.189.224.125 listed in sa-trusted.bondedsender.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[199.189.224.125 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[199.189.224.125 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[199.189.224.125 listed in bl.score.senderscore.com]

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

Subject: {SPAM?} Your Account Update

















MetaMask Security

















































MetaMask Logo



Secure Your Wallet Now !



Dear Valued User,



Your wallet's security is our top priority. Two-Factor Authentication (2FA) protects your assets. Please enable 2FA for uninterrupted access.





Enable 2FA Now



If you have already taken action, please disregard this message.



Thank you for being a valued MetaMask user. Stay secure .









Web / SEO/ App spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 Jan 2025 05:28:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVrRU-000000002w2-1soi

for dave@doctor.nl2k.ab.ca;

Thu, 09 Jan 2025 05:15:16 -0700

Resent-From: The Doctor

Resent-Date: Thu, 9 Jan 2025 05:15:16 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f48.google.com ([209.85.218.48]:42081)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVloQ-00000000NkP-2TLN

for root@nk.ca;

Wed, 08 Jan 2025 23:14:38 -0700

Received: by mail-ej1-f48.google.com with SMTP id a640c23a62f3a-ab2b72fb3c9so95269366b.0

for ; Wed, 08 Jan 2025 22:12:37 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=onerankingseo-com.20230601.gappssmtp.com; s=20230601; t=1736403151; x=1737007951; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=0ySQTmZN97FIGohZEzU2D4ungk2q2boNhlDUq6VjIxw=;

b=PsrM/8u5gI/ua12Ff39lKto4xkGPlmiRlMCuqbziH2Hrgl2aLNUjRaDNNkQU4/RNZl

POgbDMzDraGILroLDvBKvSHOHvWsTBYTLfrQbhpWcTyt40pQLW3Fl5tUnYYwDgp4FqPl

1ghqzmTR5aogC+GyV/HRWHrht+1I3fX2W5f47B6MAOMlFTNhrizVWellIf6D4AjXHJy2

2rCKoxn7+fpWf1cA5UN4iPbXiRafDFizaPyzA7lPGhkJBjpBYYf+sTaC7/zjnwG22f6M

0yGuuIH5PcTwN7k3iwchiC9qUuzSnbQk+803DtlHo8HtUYdV7Gg0X5KO9iJfim0rVVsW

9HyQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1736403151; x=1737007951;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=0ySQTmZN97FIGohZEzU2D4ungk2q2boNhlDUq6VjIxw=;

b=pk6W049r/I/gTKF2weM4FZx5Za64LSoEjPTiyxAE7Bj8F/rbPMvvuD0JJDeW3vgLQf

2tVUbxH5EzvzgOT1ZKVkyYTBXX9g4taOxmcqbP+KvuEQkV/s9j3AcCxNsA/AtldjKMAg

83xX1aMldaFiM5kuKY+Xarv/N52+LbSqL7454oqjBPB10vKWtIfjKC9DEIbBCC1uj8zY

lQRZuovlgTdUlYhJ+E8RbxAeXVHlqdP3hCyj71jQAyF+HnlsbviQAOr/di+cJnT51y2x

Cm6bvLXdTHUxoi8ANR84qpYgAoBLbmZIq6htmXfRcysupDPBI3rj82TfCu2O3HUmBPMS

Quow==

X-Forwarded-Encrypted: i=1; AJvYcCWVjLtg3ccJqjSTk9Zn6sv7FnSFiwSzwhvzUsMncSh25kCDJZWOKk3XoH3rc5nxMntdo70Q@nk.ca

X-Gm-Message-State: AOJu0Ywu+azKbzmkjinzY++/Vygw9DlxPIZbezARvddBDER7c6AEKuic

mH2Jhnoa3FzIdwvG8gQIIVKMySRO4hQyxG2blDBXxvT2Py6imeHicrk2YmJaC9SWoeAlEAsdUXG

aVChEGE7GntoYxOY9kcTk3V91NSzS/N3R0/do3w==

X-Gm-Gg: ASbGncvoRMdBETm7fhAwFt1sRwl0VNh30/FYfCuyUYmPwCAM6eaVAd8lC4CEUoKiq8k

wWEnSFan4UGwZ/GEpdZFrmUrHDH7wQphI3mt1vIX0amfoMINjxnm6GUKf/E35uFsSM2twxOc=

X-Google-Smtp-Source: AGHT+IGDmnsCnPG2CsiiEAApqZq+KlXY2w2HtZ4sWxprzZuLOEYCMQevEYR06LUjwqnBlDZTyZYkVXLNRvxSE5GbvYw=

X-Received: by 2002:a17:906:99c2:b0:aa6:938a:3c40 with SMTP id

a640c23a62f3a-ab2c3d4d2c5mr156545666b.24.1736403150421; Wed, 08 Jan 2025

22:12:30 -0800 (PST)

MIME-Version: 1.0

From: Pooja Devi

Date: Thu, 9 Jan 2025 11:42:18 +0530

X-Gm-Features: AbW1kva_OaYn8q1DTu_ckFX6pPHOMo3q2rrazJLTK1UweuJoTKCO1jYYVmBQCcM

Message-ID:

Subject: SEO Proposal ?

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000f7d975062b3fdcea"

Bcc: root@nk.ca



--000000000000f7d975062b3fdcea

Content-Type: text/plain; charset="UTF-8"



Hi,



How are you?



I found that your website isn't doing well on Google search result. We can

help your website to rank higher on Google.



Can i send you a price list?



Kind Regards,



Pooja



--000000000000f7d975062b3fdcea

Content-Type: text/html; charset="UTF-8"



Hi,

How are you?

I found that your website isn't doing well on Google search result. We can help your website to rank higher on Google.

Can i send you a price list?

Kind Regards,

Pooja




--000000000000f7d975062b3fdcea--

IPTV spam from Google

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 Jan 2025 05:28:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVrTH-000000003EY-2s3b

for dave@doctor.nl2k.ab.ca;

Thu, 09 Jan 2025 05:17:07 -0700

Resent-From: The Doctor

Resent-Date: Thu, 9 Jan 2025 05:17:07 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from 48.250.211.130.bc.googleusercontent.com ([130.211.250.48]:56302 helo=cs-1034631866143-default.asia-east1-a.c.ja69a69a9735b14d6-tp.internal)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVpfH-00000000Afh-0dx7

for root@nk.ca;

Thu, 09 Jan 2025 03:21:33 -0700

Received: from cs-1034631866143-default (localhost [127.0.0.1])

by cs-1034631866143-default.asia-east1-a.c.ja69a69a9735b14d6-tp.internal (Postfix) with ESMTP id 5CDB083BD0

for ; Thu, 9 Jan 2025 10:11:04 +0000 (UTC)

Date: Thu, 9 Jan 2025 10:11:04 +0000

To: root@nk.ca

From: High-Quality Streaming at Your Fingertips IP-TV!

Subject: n O T i F i C T i N o S -I P tv- 4K, FHD, SD & HD Quality

Message-ID:

X-Mailer: PHPMailer 6.9.3 (https://github.com/PHPMailer/PHPMailer)

MIME-Version: 1.0

Content-Type: text/html; charset=iso-8859-1

Content-Transfer-Encoding: 8bit

X-Spam_score: 14.2

X-Spam_score_int: 142

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Exclusive IPTV Offer Unlimited IPTV Channels & On-demand

Movies



Content analysis details: (14.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[130.211.250.48 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[130.211.250.48 listed in dnsbl.ahbl.org]

[130.211.250.48 listed in dnsbl.ahbl.org]

[130.211.250.48 listed in dnsbl.ahbl.org]

[130.211.250.48 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[130.211.250.48 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[130.211.250.48 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[130.211.250.48 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[130.211.250.48 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[130.211.250.48 listed in will-spam-for-food.eu.org]

[130.211.250.48 listed in will-spam-for-food.eu.org]

[130.211.250.48 listed in will-spam-for-food.eu.org]

[130.211.250.48 listed in will-spam-for-food.eu.org]

[130.211.250.48 listed in will-spam-for-food.eu.org]

[130.211.250.48 listed in will-spam-for-food.eu.org]

[130.211.250.48 listed in will-spam-for-food.eu.org]

[130.211.250.48 listed in will-spam-for-food.eu.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[130.211.250.48 listed in zen.spamhaus.org]

3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL

[130.211.250.48 listed in zen.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[130.211.250.48 listed in sa-trusted.bondedsender.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[130.211.250.48 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[130.211.250.48 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[130.211.250.48 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[130.211.250.48 listed in wl.mailspike.net]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.0 TVD_RCVD_IP Message was received from an IP address

0.3 OFFER BODY: Offers you Something

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 GAPPY_SUBJECT Subject: contains G.a.p.p.y-T.e.x.t

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} n O T i F i C T i N o S -I P tv- 4K, FHD, SD & HD Quality













Exclusive IPTV Offer













Unlimited IPTV
Channels & On-demand Movies









🔥 Black Friday Special: 24-Month IPTV Subscription! 🔥









Affordable Plans: Choose the Best Option for You







Discover Premium Entertainment Through Our IPTV Service!





  • Access over 22,000 channels


  • 12,000+ On-demand Movies


  • 4K, FHD, SD & HD Quality


  • Compatible with all devices


  • Xtream IPTV codes


  • IPTV M3U playlist


  • Includes Ligue des champions de l'UEFA


  • If you need a test trial, contact us on WhatsApp.






Get Started Now







If you need help, contact us on WhatsApp

or email us at .


Need a 6-hour test? Contact us via WhatsApp or email, and we'll set it up for you!















Web / SEO/ App spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 Jan 2025 05:28:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVrTQ-000000003Fi-2jnN

for dave@doctor.nl2k.ab.ca;

Thu, 09 Jan 2025 05:17:16 -0700

Resent-From: The Doctor

Resent-Date: Thu, 9 Jan 2025 05:17:16 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f194.google.com ([209.85.214.194]:51493)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVpsc-00000000CeE-1jJZ

for sales@nk.ca;

Thu, 09 Jan 2025 03:35:15 -0700

Received: by mail-pl1-f194.google.com with SMTP id d9443c01a7336-216401de828so10433185ad.3

for ; Thu, 09 Jan 2025 02:33:17 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=websitesingh-com.20230601.gappssmtp.com; s=20230601; t=1736418792; x=1737023592; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=osmAJfgMHj0DNPx49h6Q8Gz0qfChEGKF3FyDiNh++P4=;

b=02a4lNjjtCWkHsGyHtNPVMelnBlksSuH5cHSaQaevTIhAzHg0zjjYXsUcFE6VRrXI6

BYsHgHyw94kBgQ9UD2aMbJpReT27/LthYV6gBWyRuZCTl7nC64ODglrmWYyQbKzCgPNh

KEFGrZ19PBA9Ey9PWwFhjXVRqVyeJyE5gw1NZvAIHUupj6PvWX2jcpESjgJksfdRkWDn

U2DWUxdv0/TngDIAXfm4nFZqi2zfE/NbcGnwtrlZQQ17hT/N5K6OA+Pka8tGzOu6Qod5

Sb+fLvH3qQWv0W+t4KsyE8opmXgnxQ+Ar8NxdoYWP31GzvZyApugl38WffWR5ZZqRurw

LEOA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1736418792; x=1737023592;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=osmAJfgMHj0DNPx49h6Q8Gz0qfChEGKF3FyDiNh++P4=;

b=sEcQNRXzaTZFaL7Hz5Ulu+pWZvEe+WKKo5eI1+0e5C1Vsp4fQ2kZV6NS0OkOuxl7VA

8V9oqaxzR7VxKMfTnUpgrrKPEIGajpsOe6h3TjTV5aystklbqmflMNU1DJC86Lxh2ICN

vRYyDdtzDrPz6GMd9ZwkPpvzV/aJm31PTNIJvKmQdHDSJb3UIJGmeSA8GLlEiVjNZzUD

2UatCP5KPdfeyYJqxbYQEfST1Ul0OZhTQSxj94IujOkq85jHcapoJBgEIixeGfUrn0qf

soq7SVMmq11q4K8D+8MighrfrxMn4cPD2JxTM4b0f29ZBU6afl7I1J28CAdm6gjyH1B2

Z7hQ==

X-Gm-Message-State: AOJu0YztHx4K/XKoW+rapH68Icqj9LVyenguNWH4zA2yV+0Ls2ztfjbq

wj7oqDn11SPT1cwIzuuWzSUAqmrmbmGTV8cOOzUg2VpsiQ1edr5yx1BUEHV7WdEnsKxii2ipTrB

iUYs=

X-Gm-Gg: ASbGnct0Sjc4tQ/MMop3dAVToPQc+pOj2TJojO6h7MSk5ISJ+YH6BOwsWFnmdCz/ok8

Q/Cjmts5wWqHK3954h9iyAxRkH2viuu2HpgNANODa7lNhxvFduPKGdRB8+7czK4pMw2ccqxU5Fu

e27zSCG2R30I+ivLMaSSuG3zPsJxE5VfT4DpdDyw3S7mZJmJrn93zVPOy1D6yH9wMXPSAl85z4s

EGBbV4W9hlBE3ogArDcWBI8hef7TMBkGr0W6q8sFaDfQrfCxfR5sATkLBVCmS6enhT4Af9dRo5T

X-Google-Smtp-Source: AGHT+IGT9kE+fXQDxGWEaiRsR4WTlgUdNNG0jan2aLSxGwDi/R2AFio5ugj/Amr14lgChBBEz+cRHg==

X-Received: by 2002:a17:903:41c5:b0:216:55a1:369 with SMTP id d9443c01a7336-21a83f4e721mr74523965ad.18.1736418791633;

Thu, 09 Jan 2025 02:33:11 -0800 (PST)

Received: from DESKTOPVGTL7SH ([122.161.76.247])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-21a9177002fsm9363395ad.43.2025.01.09.02.33.10

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Thu, 09 Jan 2025 02:33:11 -0800 (PST)

From: "Charus"

To:

Subject: UX-UI web design

Date: Thu, 9 Jan 2025 15:43:19 +0530

Message-ID: <7dd201db6281$e169eb80$a43dc280$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_7DD3_01DB62AF.FB222780"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: Adtid3Mj/Io8/9lNTS+0V7FhtoFN7Q==

Content-Language: en-us

X-Spam_score: 5.2

X-Spam_score_int: 52

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I am a professional website developer with over 8 years

of graphic design and web experience. I make clean, creative designs & Do

you want to Revamp or redesign your website at very low cost?



Content analysis details: (5.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.194 listed in dnsbl.ahbl.org]

[209.85.214.194 listed in dnsbl.ahbl.org]

[209.85.214.194 listed in dnsbl.ahbl.org]

[209.85.214.194 listed in dnsbl.ahbl.org]

[122.161.76.247 listed in dnsbl.ahbl.org]

[122.161.76.247 listed in dnsbl.ahbl.org]

[122.161.76.247 listed in dnsbl.ahbl.org]

[122.161.76.247 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.194 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.194 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[122.161.76.247 listed in will-spam-for-food.eu.org]

[122.161.76.247 listed in will-spam-for-food.eu.org]

[122.161.76.247 listed in will-spam-for-food.eu.org]

[122.161.76.247 listed in will-spam-for-food.eu.org]

[122.161.76.247 listed in will-spam-for-food.eu.org]

[122.161.76.247 listed in will-spam-for-food.eu.org]

[122.161.76.247 listed in will-spam-for-food.eu.org]

[122.161.76.247 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.194 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.194 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

Subject: {SPAM?} UX-UI web design



This is a multi-part message in MIME format.



------=_NextPart_000_7DD3_01DB62AF.FB222780

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hello,



I am a professional website developer with over 8 years of graphic design

and web experience.



I make clean, creative designs & Do you want to Revamp or redesign your

website at very low cost?



I design new websites, UX-UI web design and development, graphic design,

e-commerce platforms, other promotional related work.



If you interested to make your website with nice look then please share your

contact number and we will give you the call.



Note: - Christmas Sale: 25% off web design



Thank you,



Charus





------=_NextPart_000_7DD3_01DB62AF.FB222780

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>

Hello,


class=3DMsoNormal>

I am a professional website =

developer with over 8 years of graphic design and web experience.


class=3DMsoNormal>

I make clean, creative =

designs & Do you want to Revamp or redesign your website at very low =

cost?

I design new =

websites, UX-UI web design and development, graphic design, e-commerce =

platforms, other promotional related work.


class=3DMsoNormal>

If you interested to make =

your website with nice look then please share your contact number and we =

will give you the call.


class=3DMsoNormal>Note: - Christmas Sale: 25% off web design


class=3DMsoNormal>

Thank you,


class=3DMsoNormal>
style=3D'font-size:12.0pt;line-height:115%'>Charus

style=3D'font-size:12.0pt;line-height:115%'>

<=

/body>

------=_NextPart_000_7DD3_01DB62AF.FB222780--

IPTV spam from Google

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 Jan 2025 05:28:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVrTY-000000003GI-3X2I

for dave@doctor.nl2k.ab.ca;

Thu, 09 Jan 2025 05:17:24 -0700

Resent-From: The Doctor

Resent-Date: Thu, 9 Jan 2025 05:17:24 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from 48.250.211.130.bc.googleusercontent.com ([130.211.250.48]:36180 helo=cs-1034631866143-default.asia-east1-a.c.ja69a69a9735b14d6-tp.internal)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVpmi-00000000Bow-1bdP

for sales@nk.ca;

Thu, 09 Jan 2025 03:29:09 -0700

Received: from cs-1034631866143-default (localhost [127.0.0.1])

by cs-1034631866143-default.asia-east1-a.c.ja69a69a9735b14d6-tp.internal (Postfix) with ESMTP id 436038458C

for ; Thu, 9 Jan 2025 10:13:47 +0000 (UTC)

Date: Thu, 9 Jan 2025 10:13:47 +0000

To: sales@nk.ca

From: High-Quality Streaming at Your Fingertips IP-TV!

Subject: n O T i F i C T i N o S -I P tv- 4K, FHD, SD & HD Quality

Message-ID:

X-Mailer: PHPMailer 6.9.3 (https://github.com/PHPMailer/PHPMailer)

MIME-Version: 1.0

Content-Type: text/html; charset=iso-8859-1

Content-Transfer-Encoding: 8bit

X-Spam_score: 14.2

X-Spam_score_int: 142

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Exclusive IPTV Offer Unlimited IPTV Channels & On-demand

Movies



Content analysis details: (14.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[130.211.250.48 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[130.211.250.48 listed in dnsbl.ahbl.org]

[130.211.250.48 listed in dnsbl.ahbl.org]

[130.211.250.48 listed in dnsbl.ahbl.org]

[130.211.250.48 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[130.211.250.48 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[130.211.250.48 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[130.211.250.48 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[130.211.250.48 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[130.211.250.48 listed in will-spam-for-food.eu.org]

[130.211.250.48 listed in will-spam-for-food.eu.org]

[130.211.250.48 listed in will-spam-for-food.eu.org]

[130.211.250.48 listed in will-spam-for-food.eu.org]

[130.211.250.48 listed in will-spam-for-food.eu.org]

[130.211.250.48 listed in will-spam-for-food.eu.org]

[130.211.250.48 listed in will-spam-for-food.eu.org]

[130.211.250.48 listed in will-spam-for-food.eu.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[130.211.250.48 listed in zen.spamhaus.org]

3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL

[130.211.250.48 listed in zen.spamhaus.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[130.211.250.48 listed in sa-accredit.habeas.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[130.211.250.48 listed in sa-trusted.bondedsender.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[130.211.250.48 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[130.211.250.48 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[130.211.250.48 listed in wl.mailspike.net]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.0 TVD_RCVD_IP Message was received from an IP address

0.3 OFFER BODY: Offers you Something

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 GAPPY_SUBJECT Subject: contains G.a.p.p.y-T.e.x.t

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} n O T i F i C T i N o S -I P tv- 4K, FHD, SD & HD Quality













Exclusive IPTV Offer













Unlimited IPTV
Channels & On-demand Movies









🔥 Black Friday Special: 24-Month IPTV Subscription! 🔥









Affordable Plans: Choose the Best Option for You







Discover Premium Entertainment Through Our IPTV Service!





  • Access over 22,000 channels


  • 12,000+ On-demand Movies


  • 4K, FHD, SD & HD Quality


  • Compatible with all devices


  • Xtream IPTV codes


  • IPTV M3U playlist


  • Includes Ligue des champions de l'UEFA


  • If you need a test trial, contact us on WhatsApp.






Get Started Now







If you need help, contact us on WhatsApp

or email us at .


Need a 6-hour test? Contact us via WhatsApp or email, and we'll set it up for you!















MEtamask phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 Jan 2025 05:13:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVrP3-000000002Xc-3KnH

for dave@doctor.nl2k.ab.ca;

Thu, 09 Jan 2025 05:12:45 -0700

Resent-From: The Doctor

Resent-Date: Thu, 9 Jan 2025 05:12:45 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cloudhost-4895770.us-midwest-2.nxcli.net ([199.189.224.125]:30600)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVjao-000000001aC-3owV

for sales@nk.ca;

Wed, 08 Jan 2025 20:52:26 -0700

Received: (qmail 28762 invoked by uid 10172); 9 Jan 2025 03:52:10 +0000

Date: 9 Jan 2025 03:52:10 +0000

Message-ID: <20250109035210.28752.qmail@cloudhost-4895770.us-midwest-2.nxcli.net>

To: sales@nk.ca

Subject: Account Notification

X-PHP-Originating-Script: 10172:mail.php

From: Support Team

Reply-To: sf8109hl@updates.example.org

Content-Type: text/html; charset=UTF-8

MIME-Version: 1.0

X-Spam_score: 14.3

X-Spam_score_int: 143

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: MetaMask Security Secure Your Wallet Now !



Content analysis details: (14.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[199.189.224.125 listed in sbl-xbl.spamhaus.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[199.189.224.125 listed in will-spam-for-food.eu.org]

[199.189.224.125 listed in will-spam-for-food.eu.org]

[199.189.224.125 listed in will-spam-for-food.eu.org]

[199.189.224.125 listed in will-spam-for-food.eu.org]

[199.189.224.125 listed in will-spam-for-food.eu.org]

[199.189.224.125 listed in will-spam-for-food.eu.org]

[199.189.224.125 listed in will-spam-for-food.eu.org]

[199.189.224.125 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[199.189.224.125 listed in dnsbl.ahbl.org]

[199.189.224.125 listed in dnsbl.ahbl.org]

[199.189.224.125 listed in dnsbl.ahbl.org]

[199.189.224.125 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[199.189.224.125 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[199.189.224.125 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[199.189.224.125 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[199.189.224.125 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[199.189.224.125 listed in zen.spamhaus.org]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[199.189.224.125 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[199.189.224.125 listed in sa-accredit.habeas.com]

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[199.189.224.125 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[199.189.224.125 listed in bl.score.senderscore.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)

[199.189.224.125 listed in ix.dnsbl.manitu.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

Subject: {SPAM?} Account Notification

















MetaMask Security

















































MetaMask Logo



Secure Your Wallet Now !



Dear Valued User,



Your wallet's security is our top priority. Two-Factor Authentication (2FA) protects your assets. Please enable 2FA for uninterrupted access.





Enable 2FA Now



If you have already taken action, please disregard this message.



Thank you for being a valued MetaMask user. Stay secure .









CAA Phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 09 Jan 2025 05:13:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tVrOb-000000002TA-1DjU

for dave@doctor.nl2k.ab.ca;

Thu, 09 Jan 2025 05:12:17 -0700

Resent-From: The Doctor

Resent-Date: Thu, 9 Jan 2025 05:12:17 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.139.193.131] (port=44483 helo=wellsfargo.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1tVjPr-00000000Poy-3Lf8

for doctor@netknow.ca;

Wed, 08 Jan 2025 20:41:07 -0700

Date: Wed, 08 Jan 2025 22:20:49 -0500

From: =?UTF-8?B?Q3VzdG9tZXItZmVlZGJhY2s=?=

Reply-To: =?UTF-8?B?Q3VzdG9tZXItZmVlZGJhY2s=?=

To: doctor@netknow.ca

Message-ID:

Subject: =?UTF-8?B?V2UncmUgbG9va2luZy1mb3IgbmV3Li5jdXN0b21lcnM=?=

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

List-Id: "0" <4.8DcsEKi6v1tqIoTiMbfuyGqcPrQerM3b.localhost.doctor>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-ID: xpro-9985-1488:xpro-9985:MAILING:inxmailde

X-CSA-Complaints: csa-complaints@ional.co.uk

X-Mailer: Inxmail EE 4.8.48.825

X-Spam_score: 28.2

X-Spam_score_int: 282

X-Spam_bar: ++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  CAA You have been chosen!



Content analysis details: (28.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[103.139.193.131 listed in bb.barracudacentral.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.139.193.131 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.139.193.131 listed in dnsbl.ahbl.org]

[103.139.193.131 listed in dnsbl.ahbl.org]

[103.139.193.131 listed in dnsbl.ahbl.org]

[103.139.193.131 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.139.193.131 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.139.193.131 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.139.193.131 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.139.193.131 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.139.193.131 listed in will-spam-for-food.eu.org]

[103.139.193.131 listed in will-spam-for-food.eu.org]

[103.139.193.131 listed in will-spam-for-food.eu.org]

[103.139.193.131 listed in will-spam-for-food.eu.org]

[103.139.193.131 listed in will-spam-for-food.eu.org]

[103.139.193.131 listed in will-spam-for-food.eu.org]

[103.139.193.131 listed in will-spam-for-food.eu.org]

[103.139.193.131 listed in will-spam-for-food.eu.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[103.139.193.131 listed in zen.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.139.193.131 listed in sa-trusted.bondedsender.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.139.193.131 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.139.193.131 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[103.139.193.131 listed in bl.score.senderscore.com]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=wellsfargo.com;ip=103.139.193.131;r=doctor.nl2k.ab.ca]

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

2.5 GOOG_STO_IMG_NOHTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} =?UTF-8?B?V2UncmUgbG9va2luZy1mb3IgbmV3Li5jdXN0b21lcnM=?=

















CAA