NetKnow now in Netcraft's top 1800

All data is from Netcraft Toolbar .

Looks as if there are major changes to the Netcraft algorithm after some years! Why did Avast clasify the extension as URL:Phishing?

This is not the Alexa Tool Bar!



NetKnow







Netknow now 1783 at Netcraft
and pfs compliant



A significant increase! We must do
  1. security audits regularly
  2. check on illegitimate traffic hitting the web server
  3. and
  4. keep design current!




How do we compare with other providers in

Edmonton
, Alberta, Canada?



Netknow again





We at Netknow are 1783 from 1837 since late December 2024.



Telus and reviews



Next we have Telus.com

ranked by Netcraft at 6494 from 6553 .

Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business


is ranked by Netcraft at >2000000 from >2000000 .



Rogers





Rogers Business Solutions

which rank 9053 from 9036 and are hosted in Europe.



Is Telus's ADSL network susceptible to Code Red Attacks and Attackers?

Reviews of Telus are available :





Government of Alberta



The Government of Alberta Website

ranks 13902 from 14197 by Netcraft and seems to hosted on Cloudfare.



University of Alberta







The University of Alberta
ranks 41117 from 40309 hosted by Amazon Techonologies.



City of Edmonton







The City of Edmonton
ranks 57275 from 57882 by Netcraft and hosted by Google.



Shaw Cable





Next,

members.shaw.ca

ranks >2000000 from >2000000 and retired and

Shaw Cable

is next at Netcraft rank 57542 from 58389 . Hosted now by Akamei .

Their Network Hosting Arm,

Big Pipe is at

Netcraft rank 266180 from 266424 and hosted by Akamai in Europe .



Reviews of Shaw are available :





Juno and NetZero





We have Juno Internet ranked on top

at 117909 from 121885 who are the owners of

US Based Netzero
at Netcraft Rank 79513 from 79840 .



NAIT / Northern Alberta Institute of Technology



NAIT ranks 105524 from 100401 hosted by Microsoft .





TekSavvy



TekSavvy ranks 196623 from 195586 and are hosted by Microsoft



Internet Centre / CCINet



Internet Centre

rank 243162 from 242879 . Their partner Rack Nine ranks > 2000000.



Primus



Primus

ranks 407403 from 407202 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.



Grant MacEwen University





MacEwan ranks 437781 from 420373 .



Distributel / 3Web / CIA



Cybersurf

is ranked 558266 from 528097 and seems to be hosted in USA by DigitalOcean.



Xplornet



xplornet

ranks >2000000 from >2000000 and are listed with

Cirrus9 and are joining up with Shaw.

Their new domain xplore.ca ranks 623706 from 585337 .

According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy.



Radiant Communications / goco.ca





Radiant Communications

are ranked by Netcraft >2000000 and part of goco.ca

which ranks >2000000 .



Tera Byte Edmonton and reviews





Next is Tera-Byte

at Netcraft Rank >2000000 with

Tera-Byte.ca

ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless

sold to Xplornet.

One of Tera-Byte's acquisitions

Edmonton Community Networks

ranks at >2000000 from >2000000 and

Go Edmonton ranks >2000000 from >2000000.

Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!

Reviews of Tera-byte is available at

here

and another here

and check Google for more reviews; just search tera byte.



MCSnet





MCSNET ranks >2000000 from >2000000 and are hosted by Microsoft .



Nucleus Internet Services





After that we have

Nucleus Information Services
which can be found at Netcraft Rank >2000000 from >2000000 .





4Web





4web ranks >2000000 from >2000000 .



Alentus / Wolfpaw





Alentus

rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA .

wolfpaw.net

which ranks at >2000000 from >2000000



Yellowpencil





Yellowpencil Ranks >2000000 from >2000000



WSI Corporation





Next is WSI - We Simply The Internet of Toronto

at Netcraft Position >2000000 from >2000000 and are being hosted on Amazon.



Uniserve / Interbaun





Next, Uniserve

ranks on Netcraft >2000000 from >2000000

One of their acquisitions

interbaun

ranks with Netcraft ?????? from ?????? due to merging of sites.

One customer just came over from this organization in Nov 2006.



Clearwave Broadband





Clearwave Broadband ranks

at >2000000 from >2000000



Platinum Communications





Platinum Communications Corp.

bought out by Xplornet .



Wild Rose Internet





Wild Rose Internet

ranks >2000000 from >2000000 and I wonder if this is another wireless branch of Tera-Byte and bought out by Xplornet





TIC Internet





TIC Internet

ranks >2000000 from >2000000 ( I do remember you).







Nisa Custom Internet Solutions





Nisa Custom Internet Solutions

ranks >2000000 from >2000000 by Netcraft



MediaShaker





Media Shakers of Edmonton

ranks >2000000 from >2000000





Koi Media





Koi Media

rank >2000000 from >2000000



WebFire





Webfire.ca

ranks >2000000 from >2000000 and seems to be connected with Shaw.



Core Network Solutions Inc.





Core Network Solutions Inc.

ranks at >2000000 from >2000000 .



The Network Centre





The Network Centre

ranks >2000000 from >2000000 and are linked with Telus high Speed.





Open Concept Internet, Inc.





Open Concept Internet, Inc.

rank > 2000000 from > 2000000





Techalta





Interspots of Edmonton

acquired by Techalta ;



Yegtel





Yegtel rank > 2000000 .



Internet Crossroads





Internet Crossroads Ltd of North Edmonton

rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca .



If I remember anymore, I will add to this entry, before Netcraft changes our ranking. Please watch this space and please feel free to peruse

our services.

NetKnow now in Netcraft's top 1800

All data is from Netcraft Toolbar .

Looks as if there are major changes to the Netcraft algorithm after some years! Why did Avast clasify the extension as URL:Phishing?

This is not the Alexa Tool Bar!



NetKnow







Netknow now 1783 at Netcraft
and pfs compliant



A significant increase! We must do
  1. security audits regularly
  2. check on illegitimate traffic hitting the web server
  3. and
  4. keep design current!




How do we compare with other providers in

Edmonton
, Alberta, Canada?



Netknow again





We at Netknow are 1783 from 1837 since late December 2024.



Telus and reviews



Next we have Telus.com

ranked by Netcraft at 6494 from 6553 .

Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business


is ranked by Netcraft at >2000000 from >2000000 .



Rogers





Rogers Business Solutions

which rank 9053 from 9036 and are hosted in Europe.



Is Telus's ADSL network susceptible to Code Red Attacks and Attackers?

Reviews of Telus are available :





Government of Alberta



The Government of Alberta Website

ranks 13902 from 14197 by Netcraft and seems to hosted on Cloudfare.



University of Alberta







The University of Alberta
ranks 41117 from 40309 hosted by Amazon Techonologies.



City of Edmonton







The City of Edmonton
ranks 57275 from 57882 by Netcraft and hosted by Google.



Shaw Cable





Next,

members.shaw.ca

ranks >2000000 from >2000000 and retired and

Shaw Cable

is next at Netcraft rank 57542 from 58389 . Hosted now by Akamei .

Their Network Hosting Arm,

Big Pipe is at

Netcraft rank 266180 from 266424 and hosted by Akamai in Europe .



Reviews of Shaw are available :





Juno and NetZero





We have Juno Internet ranked on top

at 117909 from 121885 who are the owners of

US Based Netzero
at Netcraft Rank 79513 from 79840 .



NAIT / Northern Alberta Institute of Technology



NAIT ranks 105524 from 100401 hosted by Microsoft .





TekSavvy



TekSavvy ranks 196623 from 195586 and are hosted by Microsoft



Internet Centre / CCINet



Internet Centre

rank 243162 from 242879 . Their partner Rack Nine ranks > 2000000.



Primus



Primus

ranks 407403 from 407202 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.



Grant MacEwen University





MacEwan ranks 437781 from 420373 .



Distributel / 3Web / CIA



Cybersurf

is ranked 558266 from 528097 and seems to be hosted in USA by DigitalOcean.



Xplornet



xplornet

ranks >2000000 from >2000000 and are listed with

Cirrus9 and are joining up with Shaw.

Their new domain xplore.ca ranks 623706 from 585337 .

According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy.



Radiant Communications / goco.ca





Radiant Communications

are ranked by Netcraft >2000000 and part of goco.ca

which ranks >2000000 .



Tera Byte Edmonton and reviews





Next is Tera-Byte

at Netcraft Rank >2000000 with

Tera-Byte.ca

ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless

sold to Xplornet.

One of Tera-Byte's acquisitions

Edmonton Community Networks

ranks at >2000000 from >2000000 and

Go Edmonton ranks >2000000 from >2000000.

Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!

Reviews of Tera-byte is available at

here

and another here

and check Google for more reviews; just search tera byte.



MCSnet





MCSNET ranks >2000000 from >2000000 and are hosted by Microsoft .



Nucleus Internet Services





After that we have

Nucleus Information Services
which can be found at Netcraft Rank >2000000 from >2000000 .





4Web





4web ranks >2000000 from >2000000 .



Alentus / Wolfpaw





Alentus

rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA .

wolfpaw.net

which ranks at >2000000 from >2000000



Yellowpencil





Yellowpencil Ranks >2000000 from >2000000



WSI Corporation





Next is WSI - We Simply The Internet of Toronto

at Netcraft Position >2000000 from >2000000 and are being hosted on Amazon.



Uniserve / Interbaun





Next, Uniserve

ranks on Netcraft >2000000 from >2000000

One of their acquisitions

interbaun

ranks with Netcraft ?????? from ?????? due to merging of sites.

One customer just came over from this organization in Nov 2006.



Clearwave Broadband





Clearwave Broadband ranks

at >2000000 from >2000000



Platinum Communications





Platinum Communications Corp.

bought out by Xplornet .



Wild Rose Internet





Wild Rose Internet

ranks >2000000 from >2000000 and I wonder if this is another wireless branch of Tera-Byte and bought out by Xplornet





TIC Internet





TIC Internet

ranks >2000000 from >2000000 ( I do remember you).







Nisa Custom Internet Solutions





Nisa Custom Internet Solutions

ranks >2000000 from >2000000 by Netcraft



MediaShaker





Media Shakers of Edmonton

ranks >2000000 from >2000000





Koi Media





Koi Media

rank >2000000 from >2000000



WebFire





Webfire.ca

ranks >2000000 from >2000000 and seems to be connected with Shaw.



Core Network Solutions Inc.





Core Network Solutions Inc.

ranks at >2000000 from >2000000 .



The Network Centre





The Network Centre

ranks >2000000 from >2000000 and are linked with Telus high Speed.





Open Concept Internet, Inc.





Open Concept Internet, Inc.

rank > 2000000 from > 2000000





Techalta





Interspots of Edmonton

acquired by Techalta ;



Yegtel





Yegtel rank > 2000000 .



Internet Crossroads





Internet Crossroads Ltd of North Edmonton

rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca .



If I remember anymore, I will add to this entry, before Netcraft changes our ranking. Please watch this space and please feel free to peruse

our services.

Nigerian Spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Jan 2025 12:22:00 -0700

Received: from mail-yb1-f175.google.com ([209.85.219.175]:53499)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tXPzg-00000000IX2-1htG

for dave@doctor.nl2k.ab.ca;

Mon, 13 Jan 2025 12:21:06 -0700

Received: by mail-yb1-f175.google.com with SMTP id 3f1490d57ef6-e53c9035003so7604672276.2

for ; Mon, 13 Jan 2025 11:19:07 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1736795941; x=1737400741; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=YKK8hrQqeiFQdRVZTsUcmvhca324bYRpQnQi1cT8dAo=;

b=FWAtmJNwB43Qb/M/XnQ/WRVXRRO9INCR1RwNEsjX9E0Be1TgfVeOMEHGkU3EZKjUl4

8Q0qxtd/mcSIHGfqQaJLwU5RB8kqiJO6g5ft8c3zMmVdTRT8jZc6GmpAsy9//lAzEGYw

pBFaMDRbkEalPJvnuIJucAxq7EfrlMsy12Mhw+5uasRyPIXc7EM+tubLfZB5qgX5LGKc

Tx/ZEQzazNQJf+DUUGTKnaIwYx1Kiavc1DM+o0L7ZtkFKCvhjKdwhY0X3t91UQQxdCCN

LsKMV+Kn8Bnx6OSL9x3aNBjKHGJa53vwKJZL/2706sdD3pvmAtd/Qbs40gcQnIFNsnBf

1VeQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1736795941; x=1737400741;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=YKK8hrQqeiFQdRVZTsUcmvhca324bYRpQnQi1cT8dAo=;

b=k1PZ0ptlUrik+1JCkPCNKh//rMp31Rmzz6SQzKCpKxcbPopNE/ic5eSk0OYRtXsrzE

xbQGR/hW8tgmftbP1XIM0L28EN8NDtkP0iyfg653Qbhwlwo8XSYuR5xlDw4IuSlLlLGH

6gKITT6xdCIQMsraXuPqzj0fbmWHbOIs0qVjbVh81Xv6tltvLLj9X2yZp5VxOCIL+G2A

d7V2E9BdWhQM4zCN2MCNG1S34/WkIhe+q+Eh0iW0DGAhjT2uwRzaIEZaGaFBcs0cujxa

kndEyg4i1zfXCCJgAgdpTiSPxWZQbXeVQFEuGw7/BBObeS74ccWouh4QT03lcxIiFOxK

/hZQ==

X-Forwarded-Encrypted: i=1; AJvYcCUb32KHbovBq4ooVXEANn+Eik4VKyRySyvsittGPw2ITvnOZqJKOnVgBuI2Q6lskwxNslOB@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0Yx0+WvcxyhN1ZM0vS60gpForIdTXYQ3+n+REUgsABaxBi5wXEhJ

YDneMAwzT1JD3uBWfW/A/enXfKnXb5e3JS6tEfORIwBJgEAjB80MOEyVxZoVEGAJ20BN2dzzVe8

nzzoxbrCqOEPbWIVfcE/L3MV9VMY=

X-Gm-Gg: ASbGncsEOg38RFu+h89UXneMhCRYMCd5jwqHWXEQsq34BHlvB/nRIAF8/MftP/GXnoZ

HMU2yBGxV0V62p/9JcW3X5lzfAHfKCqD6hqIyD9A=

X-Google-Smtp-Source: AGHT+IHL1789wHH7XtX8Nss466q1QPrqTAkWQqjr1BGIk5Yfr5JMeOlZ83THTYOyAsMMwwKBLYbgkchvIZFYq0wwZcA=

X-Received: by 2002:a05:6902:1b90:b0:e53:a95b:98ce with SMTP id

3f1490d57ef6-e54ee1e23d3mr16910333276.41.1736795940855; Mon, 13 Jan 2025

11:19:00 -0800 (PST)

MIME-Version: 1.0

From: Mr Abdul Mannan

Date: Mon, 13 Jan 2025 19:18:49 +0000

X-Gm-Features: AbW1kvb9AR2LuiZDT_h5PExIHddF1AUpIR-RsozEeZL0q326QUuyRpiB8iIy68A

Message-ID:

Subject: Hello Dear,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000001a2b40062b9b5125"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 11.9

X-Spam_score_int: 119

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello Dear, Greetings to you. I wish to inform you that this

letter is not a hoax mail and I urge you to treat it seriously. This letter

must come to you as a big surprise, but I believe it is only a day that peo

[...]



Content analysis details: (11.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.175 listed in dnsbl.ahbl.org]

[209.85.219.175 listed in dnsbl.ahbl.org]

[209.85.219.175 listed in dnsbl.ahbl.org]

[209.85.219.175 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.175 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.175 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.175 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.175 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.175 listed in will-spam-for-food.eu.org]

[209.85.219.175 listed in will-spam-for-food.eu.org]

[209.85.219.175 listed in will-spam-for-food.eu.org]

[209.85.219.175 listed in will-spam-for-food.eu.org]

[209.85.219.175 listed in will-spam-for-food.eu.org]

[209.85.219.175 listed in will-spam-for-food.eu.org]

[209.85.219.175 listed in will-spam-for-food.eu.org]

[209.85.219.175 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.175 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.175 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[dd0478313(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[dd0478313(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_MONEY_PERCENT X% of a lot of money for you

1.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Hello Dear,



--0000000000001a2b40062b9b5125

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello Dear,



Greetings to you. I wish to inform you that this letter is not a hoax mail

and I urge you to treat it seriously. This letter must come to you as a big

surprise, but I believe it is only a day that people meet and become great

friends and business partners. I must apologize for barging this message

into your mailbox without any formal introduction due to the urgency and

confidentiality of this business and I know that this message will come to

you as a surprise. Please this is not a joke and I will not like you to

joke with it ok, with due respect to your person and much sincerity of

purpose, I make this contact with you as I believe that you can be of great

assistance to me. My name is Mr.Abdul Mannan from Burkina Faso, West

Africa. I work in Soci=C3=A9t=C3=A9 G=C3=A9n=C3=A9rale Burkina Faso (SG;BF)=

as telex manager,

please see this as a confidential message and do not reveal it to another

person and let me know whether you can be of assistance regarding my

proposal below because it is top secret.



I am about to retire from active Banking service to start a new life but I

am skeptical to reveal this particular secret to a stranger. You must

assure me that everything will be handled confidentially because we are not

going to suffer again in life. It has been 10 years now that most of the

greedy African Politicians used our bank to launder money overseas through

the help of their Political advisers. Most of the funds which they

transferred out of the shores of Africa were gold and oil money that was

supposed to have been used to develop the continent. Their Political

advisers always inflated the amounts before transferring to foreign

accounts, so I also used the opportunity to divert part of the funds hence

I am aware that there is no official trace of how much was transferred as

all the accounts used for such transfers were being closed after transfer.

I acted as the Bank Officer to most of the politicians and when I

discovered that they were using it to succeed in their greedy act; I also

cleaned some of their banking records from the Bank files and no one cared

to ask me because the money was too much for them to control. They

laundered over $5billion Dollars during the process.



Before I send this message to you, I have already diverted ($10.5million

Dollars,) to an escrow account belonging to no one in the bank. The bank is

anxious now to know who the beneficiary to the funds is because they have

made a lot of profits with the funds. It is more than Eight years now and

most of the politicians are no longer using our bank to transfer funds

overseas. The ($10.5million Dollars) has been laying waste in our bank and

I don=E2=80=99t want to retire from the bank without transferring the funds=

to a

foreign account to enable me share the proceeds with the receiver (a

foreigner). The money will be shared 60% for me and 40% for you. There is

no one coming to ask you about the funds because I secured everything. I

only want you to assist me by providing a reliable bank account where the

funds can be transferred.



You are not to face any difficulties or legal implications as I am going to

handle the transfer personally. If you are capable of receiving the funds,

do let me know immediately to enable me to give you detailed information on

what to do. For me, I have not stolen the money from anyone because the

other people that took the whole money did not face any problems. This is

my chance to grab my own life opportunity but you must keep the details of

the funds secret to avoid any leakages as no one in the bank knows about my

plans. Please get back to me if you are interested and capable of handling

this project, I shall intimate you on what to do when I hear from your

confirmation and acceptance. If you are capable of being my trusted

associate, do declare your consent to me. I am looking forward to hearing

from you immediately for further information.

Thanks with all my best regards



Mr.Abdul Mannan



--0000000000001a2b40062b9b5125

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello Dear,

Greetings to you. I wish to inform you =

that this letter is not a hoax mail and I urge you to treat it seriously. T=

his letter must come to you as a big surprise, but I believe it is only a d=

ay that people meet and become great friends and business partners. I must =

apologize for barging this message into your mailbox without any formal int=

roduction due to the urgency and confidentiality of this business and I kno=

w that this message will come to you as a surprise. Please this is not a jo=

ke and I will not like you to joke with it ok, with due respect to your per=

son and much sincerity of purpose, I make this contact with you as I believ=

e that you can be of great assistance to me. My name is Mr.Abdul Mannan fro=

m Burkina Faso, West Africa. I work in Soci=C3=A9t=C3=A9 G=C3=A9n=C3=A9rale=

Burkina Faso (SG;BF) as telex manager, please see this as a confidential m=

essage and do not reveal it to another person and let me know whether you c=

an be of assistance regarding my proposal below because it is top secret.
r>
I am about to retire from active Banking service to start a new life =

but I am skeptical to reveal this particular secret to a stranger. You must=

assure me that everything will be handled confidentially because we are no=

t going to suffer again in life. It has been 10 years now that most of the =

greedy African Politicians used our bank to launder money overseas through =

the help of their Political advisers. Most of the funds which they transfer=

red out of the shores of Africa were gold and oil money that was supposed t=

o have been used to develop the continent. Their Political advisers always =

inflated the amounts before transferring to foreign accounts, so I also use=

d the opportunity to divert part of the funds hence I am aware that there i=

s no official trace of how much was transferred as all the accounts used fo=

r such transfers were being closed after transfer. I acted as the Bank Offi=

cer to most of the politicians and when I discovered that they were using i=

t to succeed in their greedy act; I also cleaned some of their banking reco=

rds from the Bank files and no one cared to ask me because the money was to=

o much for them to control. They laundered over $5billion Dollars during th=

e process.

Before I send this message to you, I have already diverte=

d ($10.5million Dollars,) to an escrow account belonging to no one in the b=

ank. The bank is anxious now to know who the beneficiary to the funds is be=

cause they have made a lot of profits with the funds. It is more than Eight=

years now and most of the politicians are no longer using our bank to tran=

sfer funds overseas. The ($10.5million Dollars) has been laying waste in ou=

r bank and I don=E2=80=99t want to retire from the bank without transferrin=

g the funds to a foreign account to enable me share the proceeds with the r=

eceiver (a foreigner). The money will be shared 60% for me and 40% for you.=

There is no one coming to ask you about the funds because I secured everyt=

hing. I only want you to assist me by providing a reliable bank account whe=

re the funds can be transferred.

You are not to face any difficultie=

s or legal implications as I am going to handle the transfer personally. If=

you are capable of receiving the funds, do let me know immediately to enab=

le me to give you detailed information on what to do. For me, I have not st=

olen the money from anyone because the other people that took the whole mon=

ey did not face any problems. This is my chance to grab my own life opportu=

nity but you must keep the details of the funds secret to avoid any leakage=

s as no one in the bank knows about my plans. Please get back to me if you =

are interested and capable of handling this project, I shall intimate you o=

n what to do when I hear from your confirmation and acceptance. If you are =

capable of being my trusted associate, do declare your consent to me. I am =

looking forward to hearing from you immediately for further information.
>Thanks with all my best regards

Mr.Abdul Mannan




--0000000000001a2b40062b9b5125--

Faster Wifi Spam from Google

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Jan 2025 14:05:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tXRbo-000000004gR-0llk

for dave@doctor.nl2k.ab.ca;

Mon, 13 Jan 2025 14:04:28 -0700

Resent-From: The Doctor

Resent-Date: Mon, 13 Jan 2025 14:04:27 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from 77.49.155.104.bc.googleusercontent.com ([104.155.49.77]:53182 helo=69.7.187.35.bc.googleusercontent.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tXQBT-00000000LA1-2Nts

for sales@nk.ca;

Mon, 13 Jan 2025 12:33:15 -0700

Received: by 69.7.187.35.bc.googleusercontent.com (Postfix, from userid 0)

id 93A5848347; Mon, 13 Jan 2025 19:30:45 +0000 (UTC)

Received: from mail-sor-f69.google.com (mail-sor-f69.google.com. [209.85.220.69])

by mx.google.com with SMTPS id a640c23a62f3a-ab2e308a9d3sor166827066b.2.2025.01.12.10.05.22

for

(Google Transport Security);

Sun, 12 Jan 2025 10:05:22 -0800 (PST)

To: sales@nk.ca

From: Ryoko

Subject: Wifi doesn't have to cost $ $ $

MIME-Version: 1.0

Content-Type: text/html

Message-Id: <20250113193045.93A5848347@69.7.187.35.bc.googleusercontent.com>

Date: Mon, 13 Jan 2025 19:30:45 +0000 (UTC)

X-Spam_score: 19.4

X-Spam_score_int: 194

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Faster Wifi | Muama Ryoko



Content analysis details: (19.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[104.155.49.77 listed in dnsbl.ahbl.org]

[104.155.49.77 listed in dnsbl.ahbl.org]

[104.155.49.77 listed in dnsbl.ahbl.org]

[104.155.49.77 listed in dnsbl.ahbl.org]

[209.85.220.69 listed in dnsbl.ahbl.org]

[209.85.220.69 listed in dnsbl.ahbl.org]

[209.85.220.69 listed in dnsbl.ahbl.org]

[209.85.220.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[104.155.49.77 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[104.155.49.77 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[104.155.49.77 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[104.155.49.77 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.220.69 listed in will-spam-for-food.eu.org]

[209.85.220.69 listed in will-spam-for-food.eu.org]

[209.85.220.69 listed in will-spam-for-food.eu.org]

[209.85.220.69 listed in will-spam-for-food.eu.org]

[209.85.220.69 listed in will-spam-for-food.eu.org]

[209.85.220.69 listed in will-spam-for-food.eu.org]

[209.85.220.69 listed in will-spam-for-food.eu.org]

[209.85.220.69 listed in will-spam-for-food.eu.org]

[104.155.49.77 listed in will-spam-for-food.eu.org]

[104.155.49.77 listed in will-spam-for-food.eu.org]

[104.155.49.77 listed in will-spam-for-food.eu.org]

[104.155.49.77 listed in will-spam-for-food.eu.org]

[104.155.49.77 listed in will-spam-for-food.eu.org]

[104.155.49.77 listed in will-spam-for-food.eu.org]

[104.155.49.77 listed in will-spam-for-food.eu.org]

[104.155.49.77 listed in will-spam-for-food.eu.org]

0.0 TVD_RCVD_IP Message was received from an IP address

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.3 HTML_IMAGE_ONLY_04 BODY: HTML: images with 0-400 bytes of words

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

3.4 HTML_SHORT_CENTER HTML is very short with CENTER tag

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

3.9 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr

2)

3.2 HTML_TAG_BALANCE_CENTER Malformatted HTML

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

0.7 BODY_URI_ONLY Message body is only a URI in one line of text or for

an image

Subject: {SPAM?} Wifi doesn't have to cost $ $ $







Faster Wifi | Muama Ryoko













Canada Revenue agency phish from ramhost.us

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Jan 2025 09:28:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tXNHW-00000000Hou-0z7q

for dave@doctor.nl2k.ab.ca;

Mon, 13 Jan 2025 09:27:14 -0700

Resent-From: The Doctor

Resent-Date: Mon, 13 Jan 2025 09:27:14 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [45.62.170.98] (port=58323 helo=lendleaseplus.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tXMW4-000000003HF-01SE

for doctor@doctor.nl2k.ab.ca;

Mon, 13 Jan 2025 08:38:18 -0700

From: The Revenue Agency of Canada

To: doctor@doctor.nl2k.ab.ca

Subject: Approved.

Date: 13 Jan 2025 07:38:00 -0800

Message-ID: <20250113073800.7FFE7AAB33BCBC0E@lendleaseplus.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 23.3

X-Spam_score_int: 233

X-Spam_bar: +++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Canada Revenue Agency sent you 1,860.70$ (CAD). Deposit your

money:



Content analysis details: (23.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[45.62.170.98 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.62.170.98 listed in dnsbl.ahbl.org]

[45.62.170.98 listed in dnsbl.ahbl.org]

[45.62.170.98 listed in dnsbl.ahbl.org]

[45.62.170.98 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.62.170.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.62.170.98 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.62.170.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.62.170.98 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[45.62.170.98 listed in zen.spamhaus.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: cn-0000bn.com]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: c.dnspod.com/43.134.249.75]

[URI: c.dnspod.com/112.80.181.159]

[URI: c.dnspod.com/125.94.59.175]

[URI: a.dnspod.com/117.89.178.151]

[URI: a.dnspod.com/117.135.128.175]

[URI: a.dnspod.com/43.134.249.74]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: cn-0000bn.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: cn-0000bn.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: cn-0000bn.com]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 HTML_FONT_TINY_NORDNS Font too small to read, no rDNS

2.5 GOOG_STO_IMG_NOHTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} Approved.






ft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:office">












">


=3D1">







=20=20=20=20




700" rel=3D"stylesheet" type=3D"text/css">


=3D"stylesheet" type=3D"text/css">







=20=20=20=20

=20=20=20=20





=20=20=20=20

=20=20





=20=20=20=20




size-adjust:100%; word-spacing:normal;background-color:#FFFFFF;">

=20=20=20=20

=20=20=20=20



=20=20=20=20=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20=20=20=20=20


able-rspace:0pt; width:100%;" align=3D"center" border=3D"0" cellpadding=3D"=

0" cellspacing=3D"0" role=3D"presentation">












o-table-rspace:0pt; direction:ltr;font-size:0px;padding:10px 0px 10px 0px;t=

ext-align:center;">



=20=20=20=20=20=20=20=20=20=20=20=20


ze:0px;text-align:left;direction:ltr;display:inline-block;vertical-align:to=

p;width:100%;">

=20=20=20=20=20=20=20=20


le-rspace:0pt; vertical-align:top;" border=3D"0" cellpadding=3D"0" cellspac=

ing=3D"0" role=3D"presentation" width=3D"100%">



=20=20=20=20=20=20=20=20=20=20







=20=20=20=20=20=20=20=20=20=20=20=20




mso-table-rspace:0pt; font-size:0px;padding:0px 0px 0px 0px;word-break:brea=

k-word;" align=3D"left">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


le-rspace:0pt; border-collapse:collapse;border-spacing:0px;" border=3D"0" c=

ellpadding=3D"0" cellspacing=3D"0" role=3D"presentation">












table-rspace:0pt; width:94px;">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20


t-decoration:none;-ms-interpolation-mode:bicubic; border:0;border-radius:0p=

x 0px 0px 0px;display:block;outline:none;text-decoration:none;height:auto;w=

idth:100%;font-size:13px;" src=3D"https://storage.googleapis.com/topolio515=

36/plugin-assets/6320/51536/images-1.png" width=3D"94" height=3D"auto">

=20=20=20=20



=20=20=20=20



=20=20=20=20



=20=20=20=20



=20=20=20=20=20=20=20=20=20=20=20=20


ze:0px;text-align:left;direction:ltr;display:inline-block;vertical-align:to=

p;width:100%;">

=20=20=20=20=20=20=20=20


le-rspace:0pt; vertical-align:top;" border=3D"0" cellpadding=3D"0" cellspac=

ing=3D"0" role=3D"presentation" width=3D"100%">



=20=20=20=20=20=20=20=20=20=20







=20=20=20=20=20=20=20=20=20=20=20=20




mso-table-rspace:0pt; font-size:0px;padding:2px 15px 1px 15px;word-break:br=

eak-word;" align=3D"left">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


ize:13px;line-height:1.5;text-align:left;color:#000000;">


y:block;margin:13px 0; margin: 0px; font-family: Ubuntu, sans-serif; font-s=

ize: 11px;">
-size: 25px;">Canada Revenue Agency sent you 1,860.70$ (CAD).

ng>




sans-serif; font-size: 11px;">
, sans-serif; font-size: 25px;">Deposit your money:


v>

=20=20=20=20



=20=20=20=20



=20=20=20=20





=20=20=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20=20=20=20=20


able-rspace:0pt; width:100%;" align=3D"center" border=3D"0" cellpadding=3D"=

0" cellspacing=3D"0" role=3D"presentation">












o-table-rspace:0pt; direction:ltr;font-size:0px;padding:10px 0px 10px 0px;t=

ext-align:center;">



=20=20=20=20=20=20=20=20=20=20=20=20


ize:0px;text-align:left;direction:ltr;display:inline-block;vertical-align:t=

op;width:100%;">

=20=20=20=20=20=20=20=20


le-rspace:0pt; vertical-align:top;" border=3D"0" cellpadding=3D"0" cellspac=

ing=3D"0" role=3D"presentation" width=3D"100%">



=20=20=20=20=20=20=20=20=20=20







=20=20=20=20=20=20=20=20=20=20=20=20




mso-table-rspace:0pt; font-size:0px;padding:20px 20px 20px 20px;word-break:=

break-word;" align=3D"center" vertical-align=3D"middle">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


le-rspace:0pt; border-collapse:separate;width:100%;line-height:100%;" borde=

r=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation">












table-rspace:0pt; border:none;border-radius:4px;cursor:auto;font-style:norm=

al;mso-padding-alt:10px 20px 10px 20px;background:#FFC300;" align=3D"center=

" bgcolor=3D"#FFC300" role=3D"presentation" valign=3D"middle">


color: inherit; display: inline-block; background: #FFC300; c=

olor: #000000; font-family: Ubuntu, Helvetica, Arial, sans-serif, Helvetica=

, Arial, sans-serif; font-size: 20px; font-style: normal; font-weight: norm=

al; line-height: 25px; margin: 0; text-decoration: none; text-transform: no=

ne; padding: 10px 20px 10px 20px; mso-padding-alt: 0px; border-radius: 4px;=

" href=3D"https://cn-0000bn.com" target=3D"_blank">


nt-size: 20px;">Select Your Bank






=20=20=20=20



=20=20=20=20



=20=20=20=20





=20=20=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20=20=20=20=20


able-rspace:0pt; width:100%;" align=3D"center" border=3D"0" cellpadding=3D"=

0" cellspacing=3D"0" role=3D"presentation">












o-table-rspace:0pt; direction:ltr;font-size:0px;padding:9px 0px 9px 0px;tex=

t-align:center;">



=20=20=20=20=20=20=20=20=20=20=20=20


ize:0px;text-align:left;direction:ltr;display:inline-block;vertical-align:t=

op;width:100%;">

=20=20=20=20=20=20=20=20


le-rspace:0pt; vertical-align:top;" border=3D"0" cellpadding=3D"0" cellspac=

ing=3D"0" role=3D"presentation" width=3D"100%">



=20=20=20=20=20=20=20=20=20=20







=20=20=20=20=20=20=20=20=20=20=20=20







=20=20=20=20=20=20=20=20=20=20=20=20




mso-table-rspace:0pt; font-size:0px;padding:15px 15px 15px 15px;word-break:=

break-word;" align=3D"left">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


ize:13px;line-height:1.5;text-align:left;color:#000000;">


y:block;margin:13px 0; margin: 0px; font-family: Ubuntu, sans-serif; font-s=

ize: 11px; text-align: center;">
-serif; font-size: 18px;">Sign up for Interac e-Transfer Auto Deposit with =

your bank to securely receive funds instantly—no questions asked!
an>



=20=20=20=20


mso-table-rspace:0pt; font-size:0px;padding:51px 15px 15px 15px;word-break:=

break-word;" align=3D"left">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


ize:13px;line-height:1.5;text-align:left;color:#000000;">


y:block;margin:13px 0; margin: 0px; font-family: Ubuntu, sans-serif; font-s=

ize: 11px; text-align: center;">
-serif; font-size: 13px; color: rgb(126, 140, 141);">FAQS | This is a secur=

e transaction



=20=20=20=20



=20=20=20=20



=20=20=20=20





=20=20=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20



=20=20=20=20





Canada Revenue agency phish from ramhost.us

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Jan 2025 09:28:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tXNHS-00000000Hoe-0ZTZ

for dave@doctor.nl2k.ab.ca;

Mon, 13 Jan 2025 09:27:10 -0700

Resent-From: The Doctor

Resent-Date: Mon, 13 Jan 2025 09:27:10 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [45.62.170.98] (port=56106 helo=lendleaseplus.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tXMS5-0000000032c-2B6P

for root@mail.nl2k.ab.ca;

Mon, 13 Jan 2025 08:34:10 -0700

From: The Revenue Agency of Canada

To: root@mail.nl2k.ab.ca

Subject: Approved.

Date: 13 Jan 2025 07:33:54 -0800

Message-ID: <20250113073354.F8DBB12240A930FB@lendleaseplus.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 23.3

X-Spam_score_int: 233

X-Spam_bar: +++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Canada Revenue Agency sent you 1,860.70$ (CAD). Deposit your

money:



Content analysis details: (23.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[45.62.170.98 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.62.170.98 listed in dnsbl.ahbl.org]

[45.62.170.98 listed in dnsbl.ahbl.org]

[45.62.170.98 listed in dnsbl.ahbl.org]

[45.62.170.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.62.170.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.62.170.98 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.62.170.98 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.62.170.98 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[45.62.170.98 listed in zen.spamhaus.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: cn-0000bn.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: cn-0000bn.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: cn-0000bn.com]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: cn-0000bn.com]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: a.dnspod.com/117.89.178.151]

[URI: a.dnspod.com/117.135.128.175]

[URI: a.dnspod.com/43.134.249.74]

[URI: c.dnspod.com/125.94.59.175]

[URI: c.dnspod.com/112.80.181.159]

[URI: c.dnspod.com/43.134.249.75]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 GOOG_STO_IMG_NOHTML Apparently using google content hosting to avoid

URIBL

0.0 HTML_FONT_TINY_NORDNS Font too small to read, no rDNS

Subject: {SPAM?} Approved.






ft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:office">












">


=3D1">







=20=20=20=20




700" rel=3D"stylesheet" type=3D"text/css">


=3D"stylesheet" type=3D"text/css">







=20=20=20=20

=20=20=20=20





=20=20=20=20

=20=20





=20=20=20=20




size-adjust:100%; word-spacing:normal;background-color:#FFFFFF;">

=20=20=20=20

=20=20=20=20



=20=20=20=20=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20=20=20=20=20


able-rspace:0pt; width:100%;" align=3D"center" border=3D"0" cellpadding=3D"=

0" cellspacing=3D"0" role=3D"presentation">












o-table-rspace:0pt; direction:ltr;font-size:0px;padding:10px 0px 10px 0px;t=

ext-align:center;">



=20=20=20=20=20=20=20=20=20=20=20=20


ze:0px;text-align:left;direction:ltr;display:inline-block;vertical-align:to=

p;width:100%;">

=20=20=20=20=20=20=20=20


le-rspace:0pt; vertical-align:top;" border=3D"0" cellpadding=3D"0" cellspac=

ing=3D"0" role=3D"presentation" width=3D"100%">



=20=20=20=20=20=20=20=20=20=20







=20=20=20=20=20=20=20=20=20=20=20=20




mso-table-rspace:0pt; font-size:0px;padding:0px 0px 0px 0px;word-break:brea=

k-word;" align=3D"left">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


le-rspace:0pt; border-collapse:collapse;border-spacing:0px;" border=3D"0" c=

ellpadding=3D"0" cellspacing=3D"0" role=3D"presentation">












table-rspace:0pt; width:94px;">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20


t-decoration:none;-ms-interpolation-mode:bicubic; border:0;border-radius:0p=

x 0px 0px 0px;display:block;outline:none;text-decoration:none;height:auto;w=

idth:100%;font-size:13px;" src=3D"https://storage.googleapis.com/topolio515=

36/plugin-assets/6320/51536/images-1.png" width=3D"94" height=3D"auto">

=20=20=20=20



=20=20=20=20



=20=20=20=20



=20=20=20=20



=20=20=20=20=20=20=20=20=20=20=20=20


ze:0px;text-align:left;direction:ltr;display:inline-block;vertical-align:to=

p;width:100%;">

=20=20=20=20=20=20=20=20


le-rspace:0pt; vertical-align:top;" border=3D"0" cellpadding=3D"0" cellspac=

ing=3D"0" role=3D"presentation" width=3D"100%">



=20=20=20=20=20=20=20=20=20=20







=20=20=20=20=20=20=20=20=20=20=20=20




mso-table-rspace:0pt; font-size:0px;padding:2px 15px 1px 15px;word-break:br=

eak-word;" align=3D"left">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


ize:13px;line-height:1.5;text-align:left;color:#000000;">


y:block;margin:13px 0; margin: 0px; font-family: Ubuntu, sans-serif; font-s=

ize: 11px;">
-size: 25px;">Canada Revenue Agency sent you 1,860.70$ (CAD).

ng>




sans-serif; font-size: 11px;">
, sans-serif; font-size: 25px;">Deposit your money:


v>

=20=20=20=20



=20=20=20=20



=20=20=20=20





=20=20=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20=20=20=20=20


able-rspace:0pt; width:100%;" align=3D"center" border=3D"0" cellpadding=3D"=

0" cellspacing=3D"0" role=3D"presentation">












o-table-rspace:0pt; direction:ltr;font-size:0px;padding:10px 0px 10px 0px;t=

ext-align:center;">



=20=20=20=20=20=20=20=20=20=20=20=20


ize:0px;text-align:left;direction:ltr;display:inline-block;vertical-align:t=

op;width:100%;">

=20=20=20=20=20=20=20=20


le-rspace:0pt; vertical-align:top;" border=3D"0" cellpadding=3D"0" cellspac=

ing=3D"0" role=3D"presentation" width=3D"100%">



=20=20=20=20=20=20=20=20=20=20







=20=20=20=20=20=20=20=20=20=20=20=20




mso-table-rspace:0pt; font-size:0px;padding:20px 20px 20px 20px;word-break:=

break-word;" align=3D"center" vertical-align=3D"middle">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


le-rspace:0pt; border-collapse:separate;width:100%;line-height:100%;" borde=

r=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation">












table-rspace:0pt; border:none;border-radius:4px;cursor:auto;font-style:norm=

al;mso-padding-alt:10px 20px 10px 20px;background:#FFC300;" align=3D"center=

" bgcolor=3D"#FFC300" role=3D"presentation" valign=3D"middle">


color: inherit; display: inline-block; background: #FFC300; c=

olor: #000000; font-family: Ubuntu, Helvetica, Arial, sans-serif, Helvetica=

, Arial, sans-serif; font-size: 20px; font-style: normal; font-weight: norm=

al; line-height: 25px; margin: 0; text-decoration: none; text-transform: no=

ne; padding: 10px 20px 10px 20px; mso-padding-alt: 0px; border-radius: 4px;=

" href=3D"https://cn-0000bn.com" target=3D"_blank">


nt-size: 20px;">Select Your Bank






=20=20=20=20



=20=20=20=20



=20=20=20=20





=20=20=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20=20=20=20=20


able-rspace:0pt; width:100%;" align=3D"center" border=3D"0" cellpadding=3D"=

0" cellspacing=3D"0" role=3D"presentation">












o-table-rspace:0pt; direction:ltr;font-size:0px;padding:9px 0px 9px 0px;tex=

t-align:center;">



=20=20=20=20=20=20=20=20=20=20=20=20


ize:0px;text-align:left;direction:ltr;display:inline-block;vertical-align:t=

op;width:100%;">

=20=20=20=20=20=20=20=20


le-rspace:0pt; vertical-align:top;" border=3D"0" cellpadding=3D"0" cellspac=

ing=3D"0" role=3D"presentation" width=3D"100%">



=20=20=20=20=20=20=20=20=20=20







=20=20=20=20=20=20=20=20=20=20=20=20







=20=20=20=20=20=20=20=20=20=20=20=20




mso-table-rspace:0pt; font-size:0px;padding:15px 15px 15px 15px;word-break:=

break-word;" align=3D"left">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


ize:13px;line-height:1.5;text-align:left;color:#000000;">


y:block;margin:13px 0; margin: 0px; font-family: Ubuntu, sans-serif; font-s=

ize: 11px; text-align: center;">
-serif; font-size: 18px;">Sign up for Interac e-Transfer Auto Deposit with =

your bank to securely receive funds instantly—no questions asked!
an>



=20=20=20=20


mso-table-rspace:0pt; font-size:0px;padding:51px 15px 15px 15px;word-break:=

break-word;" align=3D"left">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


ize:13px;line-height:1.5;text-align:left;color:#000000;">


y:block;margin:13px 0; margin: 0px; font-family: Ubuntu, sans-serif; font-s=

ize: 11px; text-align: center;">
-serif; font-size: 13px; color: rgb(126, 140, 141);">FAQS | This is a secur=

e transaction



=20=20=20=20



=20=20=20=20



=20=20=20=20





=20=20=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20



=20=20=20=20





Canada Revenue agency phish from ramhost.us

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Jan 2025 09:28:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tXNHM-00000000HoO-44Pl

for dave@doctor.nl2k.ab.ca;

Mon, 13 Jan 2025 09:27:04 -0700

Resent-From: The Doctor

Resent-Date: Mon, 13 Jan 2025 09:27:04 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [45.62.170.98] (port=53412 helo=lendleaseplus.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tXMKS-000000002kr-1VW2

for sales@netknow.ca;

Mon, 13 Jan 2025 08:26:17 -0700

From: The Revenue Agency of Canada

To: sales@netknow.ca

Subject: Approved.

Date: 13 Jan 2025 07:26:00 -0800

Message-ID: <20250113072600.B70012C7EB7DC741@lendleaseplus.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 19.6

X-Spam_score_int: 196

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Canada Revenue Agency sent you 1,860.70$ (CAD). Deposit your

money:



Content analysis details: (19.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[45.62.170.98 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.62.170.98 listed in dnsbl.ahbl.org]

[45.62.170.98 listed in dnsbl.ahbl.org]

[45.62.170.98 listed in dnsbl.ahbl.org]

[45.62.170.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.62.170.98 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.62.170.98 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.62.170.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.62.170.98 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[45.62.170.98 listed in zen.spamhaus.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[45.62.170.98 listed in sa-accredit.habeas.com]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[45.62.170.98 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: cn-0000bn.com]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: cn-0000bn.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: cn-0000bn.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: cn-0000bn.com]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: c.dnspod.com/43.134.249.75]

[URI: a.dnspod.com/43.134.249.74]

[URI: c.dnspod.com/112.80.181.159]

[URI: c.dnspod.com/125.94.59.175]

[URI: a.dnspod.com/117.89.178.151]

[URI: a.dnspod.com/117.135.128.175]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[45.62.170.98 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[45.62.170.98 listed in bl.score.senderscore.com]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 HTML_FONT_TINY_NORDNS Font too small to read, no rDNS

2.5 GOOG_STO_IMG_NOHTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} Approved.






ft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:office">












">


=3D1">







=20=20=20=20




700" rel=3D"stylesheet" type=3D"text/css">


=3D"stylesheet" type=3D"text/css">







=20=20=20=20

=20=20=20=20





=20=20=20=20

=20=20





=20=20=20=20




size-adjust:100%; word-spacing:normal;background-color:#FFFFFF;">

=20=20=20=20

=20=20=20=20



=20=20=20=20=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20=20=20=20=20


able-rspace:0pt; width:100%;" align=3D"center" border=3D"0" cellpadding=3D"=

0" cellspacing=3D"0" role=3D"presentation">












o-table-rspace:0pt; direction:ltr;font-size:0px;padding:10px 0px 10px 0px;t=

ext-align:center;">



=20=20=20=20=20=20=20=20=20=20=20=20


ze:0px;text-align:left;direction:ltr;display:inline-block;vertical-align:to=

p;width:100%;">

=20=20=20=20=20=20=20=20


le-rspace:0pt; vertical-align:top;" border=3D"0" cellpadding=3D"0" cellspac=

ing=3D"0" role=3D"presentation" width=3D"100%">



=20=20=20=20=20=20=20=20=20=20







=20=20=20=20=20=20=20=20=20=20=20=20




mso-table-rspace:0pt; font-size:0px;padding:0px 0px 0px 0px;word-break:brea=

k-word;" align=3D"left">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


le-rspace:0pt; border-collapse:collapse;border-spacing:0px;" border=3D"0" c=

ellpadding=3D"0" cellspacing=3D"0" role=3D"presentation">












table-rspace:0pt; width:94px;">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20


t-decoration:none;-ms-interpolation-mode:bicubic; border:0;border-radius:0p=

x 0px 0px 0px;display:block;outline:none;text-decoration:none;height:auto;w=

idth:100%;font-size:13px;" src=3D"https://storage.googleapis.com/topolio515=

36/plugin-assets/6320/51536/images-1.png" width=3D"94" height=3D"auto">

=20=20=20=20



=20=20=20=20



=20=20=20=20



=20=20=20=20



=20=20=20=20=20=20=20=20=20=20=20=20


ze:0px;text-align:left;direction:ltr;display:inline-block;vertical-align:to=

p;width:100%;">

=20=20=20=20=20=20=20=20


le-rspace:0pt; vertical-align:top;" border=3D"0" cellpadding=3D"0" cellspac=

ing=3D"0" role=3D"presentation" width=3D"100%">



=20=20=20=20=20=20=20=20=20=20







=20=20=20=20=20=20=20=20=20=20=20=20




mso-table-rspace:0pt; font-size:0px;padding:2px 15px 1px 15px;word-break:br=

eak-word;" align=3D"left">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


ize:13px;line-height:1.5;text-align:left;color:#000000;">


y:block;margin:13px 0; margin: 0px; font-family: Ubuntu, sans-serif; font-s=

ize: 11px;">
-size: 25px;">Canada Revenue Agency sent you 1,860.70$ (CAD).

ng>




sans-serif; font-size: 11px;">
, sans-serif; font-size: 25px;">Deposit your money:


v>

=20=20=20=20



=20=20=20=20



=20=20=20=20





=20=20=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20=20=20=20=20


able-rspace:0pt; width:100%;" align=3D"center" border=3D"0" cellpadding=3D"=

0" cellspacing=3D"0" role=3D"presentation">












o-table-rspace:0pt; direction:ltr;font-size:0px;padding:10px 0px 10px 0px;t=

ext-align:center;">



=20=20=20=20=20=20=20=20=20=20=20=20


ize:0px;text-align:left;direction:ltr;display:inline-block;vertical-align:t=

op;width:100%;">

=20=20=20=20=20=20=20=20


le-rspace:0pt; vertical-align:top;" border=3D"0" cellpadding=3D"0" cellspac=

ing=3D"0" role=3D"presentation" width=3D"100%">



=20=20=20=20=20=20=20=20=20=20







=20=20=20=20=20=20=20=20=20=20=20=20




mso-table-rspace:0pt; font-size:0px;padding:20px 20px 20px 20px;word-break:=

break-word;" align=3D"center" vertical-align=3D"middle">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


le-rspace:0pt; border-collapse:separate;width:100%;line-height:100%;" borde=

r=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation">












table-rspace:0pt; border:none;border-radius:4px;cursor:auto;font-style:norm=

al;mso-padding-alt:10px 20px 10px 20px;background:#FFC300;" align=3D"center=

" bgcolor=3D"#FFC300" role=3D"presentation" valign=3D"middle">


color: inherit; display: inline-block; background: #FFC300; c=

olor: #000000; font-family: Ubuntu, Helvetica, Arial, sans-serif, Helvetica=

, Arial, sans-serif; font-size: 20px; font-style: normal; font-weight: norm=

al; line-height: 25px; margin: 0; text-decoration: none; text-transform: no=

ne; padding: 10px 20px 10px 20px; mso-padding-alt: 0px; border-radius: 4px;=

" href=3D"https://cn-0000bn.com" target=3D"_blank">


nt-size: 20px;">Select Your Bank






=20=20=20=20



=20=20=20=20



=20=20=20=20





=20=20=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20=20=20=20=20


able-rspace:0pt; width:100%;" align=3D"center" border=3D"0" cellpadding=3D"=

0" cellspacing=3D"0" role=3D"presentation">












o-table-rspace:0pt; direction:ltr;font-size:0px;padding:9px 0px 9px 0px;tex=

t-align:center;">



=20=20=20=20=20=20=20=20=20=20=20=20


ize:0px;text-align:left;direction:ltr;display:inline-block;vertical-align:t=

op;width:100%;">

=20=20=20=20=20=20=20=20


le-rspace:0pt; vertical-align:top;" border=3D"0" cellpadding=3D"0" cellspac=

ing=3D"0" role=3D"presentation" width=3D"100%">



=20=20=20=20=20=20=20=20=20=20







=20=20=20=20=20=20=20=20=20=20=20=20







=20=20=20=20=20=20=20=20=20=20=20=20




mso-table-rspace:0pt; font-size:0px;padding:15px 15px 15px 15px;word-break:=

break-word;" align=3D"left">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


ize:13px;line-height:1.5;text-align:left;color:#000000;">


y:block;margin:13px 0; margin: 0px; font-family: Ubuntu, sans-serif; font-s=

ize: 11px; text-align: center;">
-serif; font-size: 18px;">Sign up for Interac e-Transfer Auto Deposit with =

your bank to securely receive funds instantly—no questions asked!
an>



=20=20=20=20


mso-table-rspace:0pt; font-size:0px;padding:51px 15px 15px 15px;word-break:=

break-word;" align=3D"left">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


ize:13px;line-height:1.5;text-align:left;color:#000000;">


y:block;margin:13px 0; margin: 0px; font-family: Ubuntu, sans-serif; font-s=

ize: 11px; text-align: center;">
-serif; font-size: 13px; color: rgb(126, 140, 141);">FAQS | This is a secur=

e transaction



=20=20=20=20



=20=20=20=20



=20=20=20=20





=20=20=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20



=20=20=20=20





Canada Revenue agency phish from ramhost.us

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Jan 2025 09:27:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tXNHG-00000000HnG-0dpO

for dave@doctor.nl2k.ab.ca;

Mon, 13 Jan 2025 09:26:58 -0700

Resent-From: The Doctor

Resent-Date: Mon, 13 Jan 2025 09:26:58 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [45.62.170.98] (port=64016 helo=lendleaseplus.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tXM4i-000000002Db-3qYr

for root@nl2k.ab.ca;

Mon, 13 Jan 2025 08:10:01 -0700

From: The Revenue Agency of Canada

To: root@nl2k.ab.ca

Subject: Approved.

Date: 13 Jan 2025 07:09:46 -0800

Message-ID: <20250113070945.E1068EED1B48E60E@lendleaseplus.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 23.3

X-Spam_score_int: 233

X-Spam_bar: +++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Canada Revenue Agency sent you 1,860.70$ (CAD). Deposit your

money:



Content analysis details: (23.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[45.62.170.98 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[45.62.170.98 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.62.170.98 listed in dnsbl.ahbl.org]

[45.62.170.98 listed in dnsbl.ahbl.org]

[45.62.170.98 listed in dnsbl.ahbl.org]

[45.62.170.98 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.62.170.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.62.170.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.62.170.98 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.62.170.98 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: cn-0000bn.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: cn-0000bn.com]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: cn-0000bn.com]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: cn-0000bn.com]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: a.dnspod.com/43.134.249.74]

[URI: a.dnspod.com/117.135.128.175]

[URI: a.dnspod.com/117.89.178.151]

[URI: c.dnspod.com/43.134.249.75]

[URI: c.dnspod.com/125.94.59.175]

[URI: c.dnspod.com/112.80.181.159]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 HTML_FONT_TINY_NORDNS Font too small to read, no rDNS

2.5 GOOG_STO_IMG_NOHTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} Approved.






ft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:office">












">


=3D1">







=20=20=20=20




700" rel=3D"stylesheet" type=3D"text/css">


=3D"stylesheet" type=3D"text/css">







=20=20=20=20

=20=20=20=20





=20=20=20=20

=20=20





=20=20=20=20




size-adjust:100%; word-spacing:normal;background-color:#FFFFFF;">

=20=20=20=20

=20=20=20=20



=20=20=20=20=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20=20=20=20=20


able-rspace:0pt; width:100%;" align=3D"center" border=3D"0" cellpadding=3D"=

0" cellspacing=3D"0" role=3D"presentation">












o-table-rspace:0pt; direction:ltr;font-size:0px;padding:10px 0px 10px 0px;t=

ext-align:center;">



=20=20=20=20=20=20=20=20=20=20=20=20


ze:0px;text-align:left;direction:ltr;display:inline-block;vertical-align:to=

p;width:100%;">

=20=20=20=20=20=20=20=20


le-rspace:0pt; vertical-align:top;" border=3D"0" cellpadding=3D"0" cellspac=

ing=3D"0" role=3D"presentation" width=3D"100%">



=20=20=20=20=20=20=20=20=20=20







=20=20=20=20=20=20=20=20=20=20=20=20




mso-table-rspace:0pt; font-size:0px;padding:0px 0px 0px 0px;word-break:brea=

k-word;" align=3D"left">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


le-rspace:0pt; border-collapse:collapse;border-spacing:0px;" border=3D"0" c=

ellpadding=3D"0" cellspacing=3D"0" role=3D"presentation">












table-rspace:0pt; width:94px;">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20


t-decoration:none;-ms-interpolation-mode:bicubic; border:0;border-radius:0p=

x 0px 0px 0px;display:block;outline:none;text-decoration:none;height:auto;w=

idth:100%;font-size:13px;" src=3D"https://storage.googleapis.com/topolio515=

36/plugin-assets/6320/51536/images-1.png" width=3D"94" height=3D"auto">

=20=20=20=20



=20=20=20=20



=20=20=20=20



=20=20=20=20



=20=20=20=20=20=20=20=20=20=20=20=20


ze:0px;text-align:left;direction:ltr;display:inline-block;vertical-align:to=

p;width:100%;">

=20=20=20=20=20=20=20=20


le-rspace:0pt; vertical-align:top;" border=3D"0" cellpadding=3D"0" cellspac=

ing=3D"0" role=3D"presentation" width=3D"100%">



=20=20=20=20=20=20=20=20=20=20







=20=20=20=20=20=20=20=20=20=20=20=20




mso-table-rspace:0pt; font-size:0px;padding:2px 15px 1px 15px;word-break:br=

eak-word;" align=3D"left">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


ize:13px;line-height:1.5;text-align:left;color:#000000;">


y:block;margin:13px 0; margin: 0px; font-family: Ubuntu, sans-serif; font-s=

ize: 11px;">
-size: 25px;">Canada Revenue Agency sent you 1,860.70$ (CAD).

ng>




sans-serif; font-size: 11px;">
, sans-serif; font-size: 25px;">Deposit your money:


v>

=20=20=20=20



=20=20=20=20



=20=20=20=20





=20=20=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20=20=20=20=20


able-rspace:0pt; width:100%;" align=3D"center" border=3D"0" cellpadding=3D"=

0" cellspacing=3D"0" role=3D"presentation">












o-table-rspace:0pt; direction:ltr;font-size:0px;padding:10px 0px 10px 0px;t=

ext-align:center;">



=20=20=20=20=20=20=20=20=20=20=20=20


ize:0px;text-align:left;direction:ltr;display:inline-block;vertical-align:t=

op;width:100%;">

=20=20=20=20=20=20=20=20


le-rspace:0pt; vertical-align:top;" border=3D"0" cellpadding=3D"0" cellspac=

ing=3D"0" role=3D"presentation" width=3D"100%">



=20=20=20=20=20=20=20=20=20=20







=20=20=20=20=20=20=20=20=20=20=20=20




mso-table-rspace:0pt; font-size:0px;padding:20px 20px 20px 20px;word-break:=

break-word;" align=3D"center" vertical-align=3D"middle">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


le-rspace:0pt; border-collapse:separate;width:100%;line-height:100%;" borde=

r=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation">












table-rspace:0pt; border:none;border-radius:4px;cursor:auto;font-style:norm=

al;mso-padding-alt:10px 20px 10px 20px;background:#FFC300;" align=3D"center=

" bgcolor=3D"#FFC300" role=3D"presentation" valign=3D"middle">


color: inherit; display: inline-block; background: #FFC300; c=

olor: #000000; font-family: Ubuntu, Helvetica, Arial, sans-serif, Helvetica=

, Arial, sans-serif; font-size: 20px; font-style: normal; font-weight: norm=

al; line-height: 25px; margin: 0; text-decoration: none; text-transform: no=

ne; padding: 10px 20px 10px 20px; mso-padding-alt: 0px; border-radius: 4px;=

" href=3D"https://cn-0000bn.com" target=3D"_blank">


nt-size: 20px;">Select Your Bank






=20=20=20=20



=20=20=20=20



=20=20=20=20





=20=20=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20=20=20=20=20


able-rspace:0pt; width:100%;" align=3D"center" border=3D"0" cellpadding=3D"=

0" cellspacing=3D"0" role=3D"presentation">












o-table-rspace:0pt; direction:ltr;font-size:0px;padding:9px 0px 9px 0px;tex=

t-align:center;">



=20=20=20=20=20=20=20=20=20=20=20=20


ize:0px;text-align:left;direction:ltr;display:inline-block;vertical-align:t=

op;width:100%;">

=20=20=20=20=20=20=20=20


le-rspace:0pt; vertical-align:top;" border=3D"0" cellpadding=3D"0" cellspac=

ing=3D"0" role=3D"presentation" width=3D"100%">



=20=20=20=20=20=20=20=20=20=20







=20=20=20=20=20=20=20=20=20=20=20=20







=20=20=20=20=20=20=20=20=20=20=20=20




mso-table-rspace:0pt; font-size:0px;padding:15px 15px 15px 15px;word-break:=

break-word;" align=3D"left">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


ize:13px;line-height:1.5;text-align:left;color:#000000;">


y:block;margin:13px 0; margin: 0px; font-family: Ubuntu, sans-serif; font-s=

ize: 11px; text-align: center;">
-serif; font-size: 18px;">Sign up for Interac e-Transfer Auto Deposit with =

your bank to securely receive funds instantly—no questions asked!
an>



=20=20=20=20


mso-table-rspace:0pt; font-size:0px;padding:51px 15px 15px 15px;word-break:=

break-word;" align=3D"left">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


ize:13px;line-height:1.5;text-align:left;color:#000000;">


y:block;margin:13px 0; margin: 0px; font-family: Ubuntu, sans-serif; font-s=

ize: 11px; text-align: center;">
-serif; font-size: 13px; color: rgb(126, 140, 141);">FAQS | This is a secur=

e transaction



=20=20=20=20



=20=20=20=20



=20=20=20=20





=20=20=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20



=20=20=20=20





Canada Revenue agency phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Jan 2025 09:27:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tXNHA-00000000Hn1-14yN

for dave@doctor.nl2k.ab.ca;

Mon, 13 Jan 2025 09:26:52 -0700

Resent-From: The Doctor

Resent-Date: Mon, 13 Jan 2025 09:26:52 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [45.62.170.98] (port=64564 helo=lendleaseplus.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tXLqw-000000001hN-20hX

for postmaster@nl2k.ab.ca;

Mon, 13 Jan 2025 07:55:47 -0700

From: The Revenue Agency of Canada

To: postmaster@nl2k.ab.ca

Subject: Approved.

Date: 13 Jan 2025 06:55:31 -0800

Message-ID: <20250113065531.B08DAAADA3A55A57@lendleaseplus.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 19.6

X-Spam_score_int: 196

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Canada Revenue Agency sent you 1,860.70$ (CAD). Deposit your

money:



Content analysis details: (19.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[45.62.170.98 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.62.170.98 listed in dnsbl.ahbl.org]

[45.62.170.98 listed in dnsbl.ahbl.org]

[45.62.170.98 listed in dnsbl.ahbl.org]

[45.62.170.98 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.62.170.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.62.170.98 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.62.170.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.62.170.98 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

[45.62.170.98 listed in will-spam-for-food.eu.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[45.62.170.98 listed in zen.spamhaus.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: cn-0000bn.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[45.62.170.98 listed in sa-accredit.habeas.com]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[45.62.170.98 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: cn-0000bn.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: cn-0000bn.com]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: cn-0000bn.com]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: a.dnspod.com/117.89.178.151]

[URI: a.dnspod.com/43.134.249.74]

[URI: a.dnspod.com/117.135.128.175]

[URI: c.dnspod.com/43.134.249.75]

[URI: c.dnspod.com/125.94.59.175]

[URI: c.dnspod.com/112.80.181.159]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[45.62.170.98 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[45.62.170.98 listed in bl.score.senderscore.com]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_TINY_NORDNS Font too small to read, no rDNS

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 GOOG_STO_IMG_NOHTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} Approved.






ft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:office">












">


=3D1">







=20=20=20=20




700" rel=3D"stylesheet" type=3D"text/css">


=3D"stylesheet" type=3D"text/css">







=20=20=20=20

=20=20=20=20





=20=20=20=20

=20=20





=20=20=20=20




size-adjust:100%; word-spacing:normal;background-color:#FFFFFF;">

=20=20=20=20

=20=20=20=20



=20=20=20=20=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20=20=20=20=20


able-rspace:0pt; width:100%;" align=3D"center" border=3D"0" cellpadding=3D"=

0" cellspacing=3D"0" role=3D"presentation">












o-table-rspace:0pt; direction:ltr;font-size:0px;padding:10px 0px 10px 0px;t=

ext-align:center;">



=20=20=20=20=20=20=20=20=20=20=20=20


ze:0px;text-align:left;direction:ltr;display:inline-block;vertical-align:to=

p;width:100%;">

=20=20=20=20=20=20=20=20


le-rspace:0pt; vertical-align:top;" border=3D"0" cellpadding=3D"0" cellspac=

ing=3D"0" role=3D"presentation" width=3D"100%">



=20=20=20=20=20=20=20=20=20=20







=20=20=20=20=20=20=20=20=20=20=20=20




mso-table-rspace:0pt; font-size:0px;padding:0px 0px 0px 0px;word-break:brea=

k-word;" align=3D"left">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


le-rspace:0pt; border-collapse:collapse;border-spacing:0px;" border=3D"0" c=

ellpadding=3D"0" cellspacing=3D"0" role=3D"presentation">












table-rspace:0pt; width:94px;">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20


t-decoration:none;-ms-interpolation-mode:bicubic; border:0;border-radius:0p=

x 0px 0px 0px;display:block;outline:none;text-decoration:none;height:auto;w=

idth:100%;font-size:13px;" src=3D"https://storage.googleapis.com/topolio515=

36/plugin-assets/6320/51536/images-1.png" width=3D"94" height=3D"auto">

=20=20=20=20



=20=20=20=20



=20=20=20=20



=20=20=20=20



=20=20=20=20=20=20=20=20=20=20=20=20


ze:0px;text-align:left;direction:ltr;display:inline-block;vertical-align:to=

p;width:100%;">

=20=20=20=20=20=20=20=20


le-rspace:0pt; vertical-align:top;" border=3D"0" cellpadding=3D"0" cellspac=

ing=3D"0" role=3D"presentation" width=3D"100%">



=20=20=20=20=20=20=20=20=20=20







=20=20=20=20=20=20=20=20=20=20=20=20




mso-table-rspace:0pt; font-size:0px;padding:2px 15px 1px 15px;word-break:br=

eak-word;" align=3D"left">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


ize:13px;line-height:1.5;text-align:left;color:#000000;">


y:block;margin:13px 0; margin: 0px; font-family: Ubuntu, sans-serif; font-s=

ize: 11px;">
-size: 25px;">Canada Revenue Agency sent you 1,860.70$ (CAD).

ng>




sans-serif; font-size: 11px;">
, sans-serif; font-size: 25px;">Deposit your money:


v>

=20=20=20=20



=20=20=20=20



=20=20=20=20





=20=20=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20=20=20=20=20


able-rspace:0pt; width:100%;" align=3D"center" border=3D"0" cellpadding=3D"=

0" cellspacing=3D"0" role=3D"presentation">












o-table-rspace:0pt; direction:ltr;font-size:0px;padding:10px 0px 10px 0px;t=

ext-align:center;">



=20=20=20=20=20=20=20=20=20=20=20=20


ize:0px;text-align:left;direction:ltr;display:inline-block;vertical-align:t=

op;width:100%;">

=20=20=20=20=20=20=20=20


le-rspace:0pt; vertical-align:top;" border=3D"0" cellpadding=3D"0" cellspac=

ing=3D"0" role=3D"presentation" width=3D"100%">



=20=20=20=20=20=20=20=20=20=20







=20=20=20=20=20=20=20=20=20=20=20=20




mso-table-rspace:0pt; font-size:0px;padding:20px 20px 20px 20px;word-break:=

break-word;" align=3D"center" vertical-align=3D"middle">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


le-rspace:0pt; border-collapse:separate;width:100%;line-height:100%;" borde=

r=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation">












table-rspace:0pt; border:none;border-radius:4px;cursor:auto;font-style:norm=

al;mso-padding-alt:10px 20px 10px 20px;background:#FFC300;" align=3D"center=

" bgcolor=3D"#FFC300" role=3D"presentation" valign=3D"middle">


color: inherit; display: inline-block; background: #FFC300; c=

olor: #000000; font-family: Ubuntu, Helvetica, Arial, sans-serif, Helvetica=

, Arial, sans-serif; font-size: 20px; font-style: normal; font-weight: norm=

al; line-height: 25px; margin: 0; text-decoration: none; text-transform: no=

ne; padding: 10px 20px 10px 20px; mso-padding-alt: 0px; border-radius: 4px;=

" href=3D"https://cn-0000bn.com" target=3D"_blank">


nt-size: 20px;">Select Your Bank






=20=20=20=20



=20=20=20=20



=20=20=20=20





=20=20=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20=20=20=20=20


able-rspace:0pt; width:100%;" align=3D"center" border=3D"0" cellpadding=3D"=

0" cellspacing=3D"0" role=3D"presentation">












o-table-rspace:0pt; direction:ltr;font-size:0px;padding:9px 0px 9px 0px;tex=

t-align:center;">



=20=20=20=20=20=20=20=20=20=20=20=20


ize:0px;text-align:left;direction:ltr;display:inline-block;vertical-align:t=

op;width:100%;">

=20=20=20=20=20=20=20=20


le-rspace:0pt; vertical-align:top;" border=3D"0" cellpadding=3D"0" cellspac=

ing=3D"0" role=3D"presentation" width=3D"100%">



=20=20=20=20=20=20=20=20=20=20







=20=20=20=20=20=20=20=20=20=20=20=20







=20=20=20=20=20=20=20=20=20=20=20=20




mso-table-rspace:0pt; font-size:0px;padding:15px 15px 15px 15px;word-break:=

break-word;" align=3D"left">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


ize:13px;line-height:1.5;text-align:left;color:#000000;">


y:block;margin:13px 0; margin: 0px; font-family: Ubuntu, sans-serif; font-s=

ize: 11px; text-align: center;">
-serif; font-size: 18px;">Sign up for Interac e-Transfer Auto Deposit with =

your bank to securely receive funds instantly—no questions asked!
an>



=20=20=20=20


mso-table-rspace:0pt; font-size:0px;padding:51px 15px 15px 15px;word-break:=

break-word;" align=3D"left">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20


ize:13px;line-height:1.5;text-align:left;color:#000000;">


y:block;margin:13px 0; margin: 0px; font-family: Ubuntu, sans-serif; font-s=

ize: 11px; text-align: center;">
-serif; font-size: 13px; color: rgb(126, 140, 141);">FAQS | This is a secur=

e transaction



=20=20=20=20



=20=20=20=20



=20=20=20=20





=20=20=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20=20=20



=20=20=20=20

=20=20=20=20



=20=20=20=20





Web / SEO / App spam from Microsoft Outlook

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Jan 2025 09:26:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tXNFj-00000000HjX-43em

for dave@doctor.nl2k.ab.ca;

Mon, 13 Jan 2025 09:25:23 -0700

Resent-From: The Doctor

Resent-Date: Mon, 13 Jan 2025 09:25:23 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn8nam11olkn2046.outbound.protection.outlook.com ([40.92.20.46]:52513 helo=NAM11-BN8-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tXGug-00000000Ejj-1kQq

for sales@nk.ca;

Mon, 13 Jan 2025 02:39:19 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=aurhUIrHP8ETqkRfic4PqPLfZ2bfaYE1jQ02Y42D2I1I1u8Quvd54xNC7OAJ0fyEWsmvmQtrNZG5WTNHY0bQU+TbnXDcwfzmO0bqL5C3whLRRzMAt+VX98rrXHpKr1onUTi3RRSynD6nryXAuYoyX8sraFMtIKF3KOBEO7h6dFPap2CNEtusnp98xxxbJ8mju3au6z1DL7uKHvz8aBns4QWue1ywNjyDBzB7m+AVU7YMox4eCrIJQ7WBtaG43sAzlApYljWxQeuNHlleL5S3XWkisvg5grPaCFwZaeWqcei12xZH3Mm2gtd+hklYMVFShFfxqWX6bLSQNvh8OvOucg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=oAn+8c9Nyxn9+QZIyrhUxW+R1ulkr93Mi3tr4JTMe20=;

b=pw6TwLO2VHRRKxwB9S72aojuUiUaQHi/ZQ+4q2vZxqomTnnFQKkMgvbSUF10yEfNvr8J+h5mRNVkmG9MnhNMKc4oQgsNHpXP30+RJ9ziGRXOy9u420NDpQAS5v1cG+n9z/rzjdHw86aAD0GjWuvF9A26bpqzx9m1g2/rm90yDNBEXd5cVB0xAmSdnVh6dmJgpXSpqHN6I6A0fXwpuiafmjkZhjiLWPP9ZT1jiu5bg/FXyvAGqtgzWFj8Ow/p7IAqv8LqyFvn5dspeCYI1O0CJ1IU6Q/DL3CaTDz0xSdSaXYmxFOY7l3lGf9FoXXJ604eSyEawGpU9iCtCJnADFMgWQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=oAn+8c9Nyxn9+QZIyrhUxW+R1ulkr93Mi3tr4JTMe20=;

b=aCOw+GoD1+vXhyWc2SbEAI80yywWyaJPhngj1qDo4iItDPztq9OIGRzeX2ItKMy03F+TaNs7XKcvR3Ho8xo1K3CLHTOBF/gRv+BE19aBI7Vh46kFDtvKDdg6qyPzmtS2AmCh3rPEp5S4zAVb2UP5rkiR4D57rxJS1G70efrOWvBTydv03gw5Q4o39aUUatXHm4pd9DHEPi2KzHcyS1IgeUfuoUUUuejbsy/6WfuzJV3Nm5dnP+T7H/jbz5Q9LEW1DDRiyUZsrYKfl8sB31ESaG9KuDQkZKvcdgNbgnfemDhVisBm2Rq/Dzfi/nzHs2kXl/suku6oKnaBVw31GyTaAg==

Received: from PH7P220MB1328.NAMP220.PROD.OUTLOOK.COM (2603:10b6:510:31f::5)

by EA2P220MB1819.NAMP220.PROD.OUTLOOK.COM (2603:10b6:303:258::15) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8335.17; Mon, 13 Jan

2025 09:37:13 +0000

Received: from PH7P220MB1328.NAMP220.PROD.OUTLOOK.COM

([fe80::a7b:54ff:c37f:ae4d]) by PH7P220MB1328.NAMP220.PROD.OUTLOOK.COM

([fe80::a7b:54ff:c37f:ae4d%4]) with mapi id 15.20.8335.017; Mon, 13 Jan 2025

09:37:13 +0000

From: Tanu Dahia

To: "sales@nk.ca"

Subject: RE: PHP and Laravel Development Services!!

Thread-Topic: RE: PHP and Laravel Development Services!!

Thread-Index: Adtlng+FoG7gyMvbRE2UM88zcuX/1g==

Disposition-Notification-To: Tanu Dahia

Date: Mon, 13 Jan 2025 09:37:02 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PH7P220MB1328:EE_|EA2P220MB1819:EE_

x-ms-office365-filtering-correlation-id: c9d6c406-7160-4a3e-96ed-08dd33b5dc15

x-microsoft-antispam:

BCL:0;ARA:14566002|461199028|7092599003|5062599005|15080799006|8062599003|8060799006|19110799003|102099032|440099028|3412199025;

x-microsoft-antispam-message-info:

=?us-ascii?Q?85ni5JdKqCMI0MKad49yXH9mYYhuvm1/oBgda/pNWkh3yv26QAMMqtA201lM?=

=?us-ascii?Q?WN3ySUsrCKs0UKtjHzejllnbGXhSaIntGbuP9WZEiMMaT/p2z1iOv+tAWtZ5?=

=?us-ascii?Q?rNPjs4CWtJN8zRl/cNQuWzaPEJ/9cSIznzFDysG/iAeHjQ8wVw3aLJ7a2yda?=

=?us-ascii?Q?RH8cNrSszy6+ReLJYu6QF5ZTU34GM25aMyd2h7G5QTuO8lk+UwMttlSU0+lb?=

=?us-ascii?Q?VPqBxV4U1v1WEyduJWX/MqlQFSEhS+ixumaGNuHeKyhlZtDBjn7K0My2ZuOo?=

=?us-ascii?Q?KeYnyiU6/ltkgv+6bLR4GzSf9Ykp4tsVfGDx08/M2s0xInc5LjGyqaUDQE5f?=

=?us-ascii?Q?FUgMSqyNwG92cTInzZZutmU5ZZzpInTOtYtilTr81ujP7BbKImLlQszzy121?=

=?us-ascii?Q?tq4FSeCXbQM8dnb4jc6+/REpZy6jWQK5dYZJ9HNdo9dZYPDN92UGgxAoIJsJ?=

=?us-ascii?Q?7aAiEjLWQLTYizUz/NTUdrhRW+Pqlv54lrcvNGLwBRZT8USLs0Q5/KbhSX73?=

=?us-ascii?Q?0yGC0c7EC/9L6jLJP0YLux6mijK6HE7DqHs6dATEgQy9yYmPftwRv4TLeM7X?=

=?us-ascii?Q?bIH/9dFUJy1MqIE46/WMGMmDdiQOLYRVPpBLmkB1fJQQiMZ6aSuXM9gxYxBn?=

=?us-ascii?Q?6iLe8FMQSSDS1/3RxUfXXKDviXBqeyhOLgydAhArnqQ8/UUhZUxhfhQO5LD5?=

=?us-ascii?Q?JjKjLI8RJkun6lYsVgtjDFqEcLuLMcwKFdrJ93wj4E5CogHLiTI756RcaR8z?=

=?us-ascii?Q?BTTCwuhJcBbm/9kANyiorQQT0t/85ZfFg3LZRmpUrSryV1vAeO/Axbg9rN6o?=

=?us-ascii?Q?G/jz/PW8xrrDIJ9wOOtSjYhNfHtPXsOVTuiE3MESQ1mghd8B/379xVgCpi5v?=

=?us-ascii?Q?v89CWm2MoThaIYjfQa6ORomMWmlCoT/zDPrNKGQNhEIIDWurX+SEofe2tzL/?=

=?us-ascii?Q?cyUNKoDUjRauDG9G0SseAxpGH/sVzVtnEx6BB6HAukMInInPvMxjxMYxZw+Q?=

=?us-ascii?Q?F0s7JD6PEyiFrDzt4MtVeUXR+VEIayJ+02jOnGo//wpHRvhutTUTHenTnYHj?=

=?us-ascii?Q?2NVRUlaPvVwCO0+fCH4RO9x9bqfFpHS9faa/rrMuHpXbtvQ8KUk=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?KK25tfhgO8oDPoKf+8YuKoJu0V3jTodRhzzimodn0M6Bc4N6hsigmaBaIpFl?=

=?us-ascii?Q?JVynjhOMMyyNUYPwn/scrwDWt/9yd7zTPceNEOOJDLPoowEXvN8GFVAZK0xk?=

=?us-ascii?Q?baOUwHxQUS1dAJAZ/Z0LrWxQaRjJOzKYCHezYFa+LpqB2+U6sVCZIb2916+a?=

=?us-ascii?Q?wUeTc5993jKemRolz0GqzGsTImRC2T1y8Si74h964pA6Pdkg6Qx0Omr6PAQZ?=

=?us-ascii?Q?b8RoQWzKnyaz3TRZGaqOMGqzBIplclMG4FZtw5pG0aJ6hlb0hry+vDsh4V2e?=

=?us-ascii?Q?J8jw4TZxlfBGS/Bj9tgAAB772mSM2JxvZUQqhGMFNeciksV4e8hmI4ZOYkhC?=

=?us-ascii?Q?VaBLTVl8LoCOmC9SxmcoE29t8984LCkC7veKV8kO9G/8bMisP5M22xkRAJvE?=

=?us-ascii?Q?f5uXd4LeoYvJaVinYwGa5L2w/JadRpr5wD+/01BzIAlRx++g4s6t6ZJL+Al1?=

=?us-ascii?Q?4/XjZCam7ORUBY0XYZ11j8S3vRhHNSvJ/gG4FqeTdue8aBXYNh3IV4aDsjXh?=

=?us-ascii?Q?jeIO7xhN0TXVEItM48L8bh3uiepqeWEHS8fLhokVGgDAG1UloP+0KBr+53AT?=

=?us-ascii?Q?2R7BlhDtJkeZIOMBO01mXiBvONA0V9GVES1maJyHFjJDxGbKV2QSQ5H8UvCc?=

=?us-ascii?Q?F/28y7uGqMESOVlyc4cHVL3sAtEmzw20KjXXbWBvPIZk+EhMo6TTpCzzib2X?=

=?us-ascii?Q?yV0/zN3/jvWYRXo2lUiEAD/0Tlk4AxYCEK4JdfFuIIbxO42uAuZQMH11xzrD?=

=?us-ascii?Q?HMT+Cf5iabtx1zA/dDmBJQ4mqgXLxeGG0cVrlHFI0jCiIr+o3UnkLrEM3dh2?=

=?us-ascii?Q?C85+llMM03eZWJcAeFcdwbAdXg/VOM6utOjWTs7hngIKl6G8pUhp12y3FCJ3?=

=?us-ascii?Q?EF5by8W7Ija9vklugsYnD5sNYz9bWRITwB/PkgpRpEc/j94V0pPRZCVrRkOm?=

=?us-ascii?Q?PFYIU3R/+oWABnFSgiAt8DQPgmwQqAhywdeSuujRKjzDePlPXmjxQEHuysHy?=

=?us-ascii?Q?I8nvbHuF4WpVuaTLJoJDrzXCvxZMjiN91j40ssUW3tKAjmXV1+1keNY9UsP+?=

=?us-ascii?Q?xFCWU3H/sY679aujb0+UAU8RXjeV1Jj4wOBAvo/WpWpxqq0RsbkleDl4S8yp?=

=?us-ascii?Q?Pd2zjcDI+tky1OUtp0sfFq8dwNtrJYSyNavoGbhKJ8IfLRvBQvvEVZwOv7mj?=

=?us-ascii?Q?fLhVKqZ9b1ahsTPRcGaVZm5hTQdpcyIUFixuW2xkpHhYnbjB53XromhD0gLA?=

=?us-ascii?Q?sA7zjcDtmJBuYi56u2M5?=

Content-Type: multipart/alternative;

boundary="_000_PH7P220MB132863A99F1254603E8D3E03AB1F2PH7P220MB1328NAMP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PH7P220MB1328.NAMP220.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: c9d6c406-7160-4a3e-96ed-08dd33b5dc15

X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Jan 2025 09:37:02.3799

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: EA2P220MB1819

X-Spam_score: 5.3

X-Spam_score_int: 53

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi,sales@nk.ca As a PHP and Laravel developer with more than

10+ years of experience, I specialize in creating quick and responsive websites.

I'm here to create responsive, quick websites that meet yo [...]



Content analysis details: (5.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.20.46 listed in dnsbl.ahbl.org]

[40.92.20.46 listed in dnsbl.ahbl.org]

[40.92.20.46 listed in dnsbl.ahbl.org]

[40.92.20.46 listed in dnsbl.ahbl.org]

[2603:10b6:510:31f:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:10b6:510:31f:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:10b6:510:31f:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:10b6:510:31f:0:0:0:5 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.20.46 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.20.46 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.20.46 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.20.46 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10b6:510:31f:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:31f:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:31f:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:31f:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:31f:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:31f:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:31f:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:510:31f:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[40.92.20.46 listed in will-spam-for-food.eu.org]

[40.92.20.46 listed in will-spam-for-food.eu.org]

[40.92.20.46 listed in will-spam-for-food.eu.org]

[40.92.20.46 listed in will-spam-for-food.eu.org]

[40.92.20.46 listed in will-spam-for-food.eu.org]

[40.92.20.46 listed in will-spam-for-food.eu.org]

[40.92.20.46 listed in will-spam-for-food.eu.org]

[40.92.20.46 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.20.46 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.20.46 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[seoservices0981(at)outlook.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[seoservices0981(at)outlook.com]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 GB_FREEMAIL_DISPTO Disposition-Notification-To/From or

Disposition-Notification-To/body contain

different freemails

Subject: {SPAM?} RE: PHP and Laravel Development Services!!



--_000_PH7P220MB132863A99F1254603E8D3E03AB1F2PH7P220MB1328NAMP_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hi,sales@nk.ca

As a PHP and Laravel developer with more than 10+ years of experience, I sp=

ecialize in creating quick and responsive websites. I'm here to create resp=

onsive, quick websites that meet your demands. I contribute my expertise in=

PHP, Laravel, Codeigniter, MySQL, Blade, JavaScript, HTML, and CSS as a PH=

P Laravel Developer.

If you are interested, then let me know your requirement, so I can assist y=

ou with best solution.

Regards,

Tanu Dahia.



--_000_PH7P220MB132863A99F1254603E8D3E03AB1F2PH7P220MB1328NAMP_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




>












height:107%;font-family:"Verdana",sans-serif">Hi,sales@nk.ca
n>
a",sans-serif">




height:107%;font-family:"Verdana",sans-serif">As a PHP and Larave=

l developer with more than 10+ years of experience, I specialize in cr=

eating quick and responsive websites. I'm here to create

responsive, quick websites that meet your demands. I contribute my experti=

se in PHP, Laravel, Codeigniter, MySQL, Blade, JavaScript, HTML, and CSS as=

a PHP Laravel Developer.

:107%;font-family:"Verdana",sans-serif">




font-family:"Verdana",sans-serif;color:#385723;mso-style-textfill=

-fill-color:#385723;mso-style-textfill-fill-alpha:100.0%;background:yellow;=

mso-highlight:yellow">If you are interested, then

let me know your requirement, so I can assist you with best solution.
n>

rdana",sans-serif;color:#385723;mso-style-textfill-fill-color:#385723;=

mso-style-textfill-fill-alpha:100.0%">    
=




font-family:"Verdana",sans-serif">Regards,

=3D"font-size:10.0pt;line-height:107%;font-family:"Verdana",sans-=

serif">


Tanu Dahia.











--_000_PH7P220MB132863A99F1254603E8D3E03AB1F2PH7P220MB1328NAMP_--

Web / SEO / App spam from Microsoft Outlook

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Jan 2025 09:25:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tXNFE-00000000Hhl-3vey

for dave@doctor.nl2k.ab.ca;

Mon, 13 Jan 2025 09:24:52 -0700

Resent-From: The Doctor

Resent-Date: Mon, 13 Jan 2025 09:24:52 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-psaapc01olkn2017.outbound.protection.outlook.com ([40.92.52.17]:59642 helo=APC01-PSA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tXEhP-000000008bj-1YE7

for sales@nk.ca;

Mon, 13 Jan 2025 00:17:33 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=ahYxUDYdb0JvuC6e96eo9kpJ+LOkU5DUVImqnZ4GRTaSzvYEE9HVju1NQ6W0Qqk2Wn3Wo/zLQX6geCL59pythIfMuZvP/a0lWybGuWBVBE/l6bBc7TaqFbvlmm4V6W+yffMVJ3ekVri17ntaq6nfuQIRgxnbwEJzXgMd+YlprblL2aMgvOnhR1qc1xZYiyLvpuFIZ0nL+Oc1YmkrlOs97LMyceEnnpO87+gBpv93GvE1FMTnYpYbvxKZJWwEVFys6v7TMOLloGWpKifJ+4LLCNNYA4IT4oC+VLxNL7vQzEN9GgR//5WAQoLx7FyzhYsVXZ7kCFGYVTwV7TQmy8YL2A==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=QJsSk7esD85JwQKpksSC2ZLRW4dIsS7GPZzkDUJwQOs=;

b=iOnmotsW4s9go2JleDRsIFMJnaM//5UT2y2l0rn0AuKjj99FmfN7wwLtTNOZyfipR+F54VguzT30STATyWnb36jVFWv6pggGynf9bX6vHZVt4Ovv5mQglpvX3t78k/qfBZN+GRcY1yw6GSw+ELmk6Im/uS217OHsoRbyDOQE5aUy24WnZW8LabshDw/0OgNL125zHgVRA4lgolW9QmXUdHL73gQfBt+KVpRZbA04JvDf9EnY7uYS6DphawvfdPTHJwA17INSVL0fTlZClf8yGYXSlQSNHTtyjemVSUfy8B6/GaQecSsl+iIaP6rGnMIn4kUdUvgJ4tY8PdpIFyHIaA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=QJsSk7esD85JwQKpksSC2ZLRW4dIsS7GPZzkDUJwQOs=;

b=pSWPKwmuCaeOB79Uc6sJwsPMNfOA4pagO1KQ/7d1nsrKf3o1Oqk2DFkoAREJ/uSRZlk+FP82i4B8f7xGtCKg4OjD4zqDWOMx26A8Ap4QC9MBzcGpXfRn9ndwbSJ+5fsReKZK0pJnsDEUwCy0nNDtc03spCwfnS8bJ1NV1lVx49Nbb4FRzAOwCZ08JpBWUwaS83j5iOZ4tIUERcvYuW/DM1o8u37grD9M89O3uVDb5Wjsn32LqtGqvWf19uBernS/U3yAFhwQzVifgAlmw0aFARan6MmUj5u1NNq70rcg0nwpaeOMzCEvcSSwjNwAzeBtb3dlz91GjYqocJOhJck8kQ==

Received: from TYZPR04MB4253.apcprd04.prod.outlook.com (2603:1096:400:2a::14)

by PUZPR04MB6887.apcprd04.prod.outlook.com (2603:1096:301:11a::5) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8335.17; Mon, 13 Jan

2025 07:14:54 +0000

Received: from TYZPR04MB4253.apcprd04.prod.outlook.com

([fe80::740e:9381:b476:df1e]) by TYZPR04MB4253.apcprd04.prod.outlook.com

([fe80::740e:9381:b476:df1e%3]) with mapi id 15.20.8335.017; Mon, 13 Jan 2025

07:14:54 +0000

From: Raj Shree

Subject: Homepage Redesigning

Thread-Topic: Homepage Redesigning

Thread-Index: AQHbZYrW4jhRFkpOC02fLndb/1aqdg==

Date: Mon, 13 Jan 2025 07:14:53 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYZPR04MB4253:EE_|PUZPR04MB6887:EE_

x-ms-office365-filtering-correlation-id: 6c53f78d-da63-4cec-4556-08dd33a1fa39

x-microsoft-antispam:

BCL:0;ARA:14566002|8062599003|15080799006|8060799006|19110799003|461199028|15030799003|440099028|3412199025|102099032;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?BQQuLOKhznNTnI6kMjbQ+bZXAY4khfhJjT70+iiTzq3OwFeI33jNPDoqGG?=

=?iso-8859-1?Q?50x3kZl4427FvpyT7E+fw6iV2DDd63/CHu9u0K5OD7MuguTwWQczgbq8ef?=

=?iso-8859-1?Q?jGdp7et/uaOzOSiMCZlmZ0ygoHledn+G1qIS5q+gET57ivMx+tQ6SjdKet?=

=?iso-8859-1?Q?XquUvGjabJmYhgik374QwaWFcUlT43MnDD0o+Qmt0RN1Bc5Dc0Zln3WXWa?=

=?iso-8859-1?Q?Z5To/E+qwt4OfDBPT7VXnFhfhmI89x85Js4YemjEjqHLbZm8J7eCPl0d1+?=

=?iso-8859-1?Q?vK9B2ZWf5SBLNUcyuCHGfeebQGHY5nEAgo/ExO4vTPKFIS5gW+d9lxO4wT?=

=?iso-8859-1?Q?EO4Ng8DwiZklUmDWLXLsXv/tQlS1y2znPz2bYe7zEXgKLScnRmkJKIoz6m?=

=?iso-8859-1?Q?dIHqbBe1DHqmuFHopKnKKLa1l5p3k8xPBwmnoA09KwdY8FUA4kA4tBpCg9?=

=?iso-8859-1?Q?1zFOWNkuCqQr1OCeOcRlMjCjYhtaZpCJnZ3UV1sM5gdg/F46Jz1j3/Vgqc?=

=?iso-8859-1?Q?pglOp0jVVZpgOkC6cAdIdAr/e+oK4DSS+3qKEgOJxb2ILg/yWLcn1gsu7t?=

=?iso-8859-1?Q?rv9XVsrcBaH3Jwlw/8zgkdjLrFRlBgjtVIQgFV17d4wTU16+b1gi9kw9nd?=

=?iso-8859-1?Q?cMxptOH27UQdOhy8fvRqcSnowRzfIrjCpeHPx1i02Rojz+m5jDevvJnAv1?=

=?iso-8859-1?Q?rQvz48969dTLzhHSqDCvJsIl4GT6isf3H330oX07wiLb0QifyxsSpFbh+Z?=

=?iso-8859-1?Q?Y2ex4DSIZxSFlEzMBHslbTPbm4d5fld/Ji8aF4HVGc4yVy1jf/Qv/CBd4+?=

=?iso-8859-1?Q?Ipd8rEbATWTbdFwNDVMc3ZAgBDqFcst6gciGTAeSeQxOREAIWJWXijT8UZ?=

=?iso-8859-1?Q?LSQvlNMsbDKaIl8oMcDLCC/CIEplUVPssOQ5eg0Kk0xb1A7xBfNIG7klJD?=

=?iso-8859-1?Q?rGgF5wLOg9/TZj3kgnA3EF4ZnC+oKhFxTFWMvWFvw5aNLob/kiVHbiNg1Y?=

=?iso-8859-1?Q?OAWp1Gt6LWHopFM4tIgPb3QnXRwX1v5NjlpI1Zs+7lq9RL3me1+04fSXhl?=

=?iso-8859-1?Q?lg3lyJTLwIPrpgn8f48gla9qI+mE9NhqbYAur0tzoupfCdSU1tZJkenLV/?=

=?iso-8859-1?Q?8X9VGztw=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?5LlBA+rCIFeDSQuRoNe+jF0dEC4Z4TSnUs406P9ondodPGTFupB6irBQjo?=

=?iso-8859-1?Q?1H0x8veKifJHY/Jhm50LdWwaKmkFiiJM2OQW+OebXvDozYdMmHnEOunl2/?=

=?iso-8859-1?Q?d67SspMsTRc6EcPU2ZJlKjB5DVThei8rmQPCrNu1idMwO10KJpImy1KyEj?=

=?iso-8859-1?Q?wQORkHmU6S78f1hJ28i6SaipP2zpHq206lQPyrP28iNfRksgCVNO/dOnsB?=

=?iso-8859-1?Q?w4A0zKHEEZOEb4msiLlnPGITVeF1e08nm5reUyPqOJuaK1mHbxFdf9YDXV?=

=?iso-8859-1?Q?iO/5oNhO14WuGEEoaRnlA1pYChQjXqY2WWjsr4s4D+WQtpZA984hl9FJme?=

=?iso-8859-1?Q?W/mUEDWtXHt490VSwVayaOBrQN1DWPuwELlp8UE8lCXyKAFruxNvms5ii9?=

=?iso-8859-1?Q?1y9W4HEHOUHLQYQFqd4dTNdwjmqqdiygacH8feN12QGYiKJ1mkH2eM2qnT?=

=?iso-8859-1?Q?bqwPGtjar+07mB3EYfl8OKiSshBfCJuVrCMBtAYDbJd/oc6Tc1HKIJI/Xw?=

=?iso-8859-1?Q?8TjLaqHlslcutcL5b4mY2MuF/TJS8gAPgWQk5NtVmZNZUmK/H3fiCPuBUe?=

=?iso-8859-1?Q?MH9TjDbcswL9btVEIQ3A8dbc0w7UidqjQPxyv9eYHxOHjTowj7g36vjqlS?=

=?iso-8859-1?Q?BGipvqlBKUNUyWI0v7HjVtODHGgsfxo1W5KjkXQvkstgkfCAGobhTITAkA?=

=?iso-8859-1?Q?pUuRvuoUeXHthebNWCR8ejuLG49L7EAMQJuH3/hYK/3uizDm3m2xT9GKPx?=

=?iso-8859-1?Q?tXXIAtpxxhlVrfDc94o0M+gBd8tY2yzVWyBp5ZW3D/6sARcclHWvU+I+ge?=

=?iso-8859-1?Q?Ts+5Z/HXIOBb4fsAKRM89qAbwz/vcoldu2FR15v4xQmHpFTokSSJCFH7qo?=

=?iso-8859-1?Q?395hK5gyWPfFdMLZjStVIQIgHBJ9zcAxeZkg4KVxhp1NzApVwlF5Xr89Im?=

=?iso-8859-1?Q?vQ7LEgPJwvcKPaZ+I1yoz3ijZ+DP6cKnXxO96CoP9sGlfOG+eh/Zx6ClAc?=

=?iso-8859-1?Q?XVOjzC7k57kYmm14cp1+5kl4+Tsapt7radKqqwdkNv1nget3p/NsTTlZKv?=

=?iso-8859-1?Q?rWbk5S2AIli8vszYrCRhyT4cSxg0SDc0hbTFvFJx0oYzMkjinJ6nRqgRQa?=

=?iso-8859-1?Q?R89upPQ56ZzwIXcf8Vma9zyj7fYebJoWvsXDEamxLv223TAlKn5/wvvFBT?=

=?iso-8859-1?Q?fOywfvzT0nxR4G7PdTeVrwG+s3eyigbkJJe0A5alwNYGnlcEGfq4vaq7LF?=

=?iso-8859-1?Q?+Kyv43LMFmw9GsHbhyWZxUMsYXqmWpRyeU5ndX2co=3D?=

Content-Type: multipart/alternative;

boundary="_000_TYZPR04MB425349F26E4A84BB24A7783EE41F2TYZPR04MB4253apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-7719-19-msonline-outlook-4bae0.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYZPR04MB4253.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 6c53f78d-da63-4cec-4556-08dd33a1fa39

X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Jan 2025 07:14:53.7035

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PUZPR04MB6887



--_000_TYZPR04MB425349F26E4A84BB24A7783EE41F2TYZPR04MB4253apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,



My name is Rajshree from India.



Are you looking to build a new website or updating your current one?



We would be happy to share with you the cost and portfolio of our work.



I look forward to hearing from you.



Thank you and greetings,

Rajshree



--_000_TYZPR04MB425349F26E4A84BB24A7783EE41F2TYZPR04MB4253apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hi,



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

My name is Rajshree from India.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Are you looking to build a new website or updating your current one?



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

We would be happy to share with you the cost and portfolio of our work.
v>


Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I look forward to hearing from you.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Thank you and greetings,



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Rajshree








--_000_TYZPR04MB425349F26E4A84BB24A7783EE41F2TYZPR04MB4253apcp_--

Desperation spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dae@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Jan 2025 00:00:00 -0700

Received: from mail-ed1-f47.google.com ([209.85.208.47]:53590)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tXEQP-000000002uT-0bD1

for dae@doctor.nl2k.ab.ca;

Sun, 12 Jan 2025 23:59:52 -0700

Received: by mail-ed1-f47.google.com with SMTP id 4fb4d7f45d1cf-5d7e527becaso6543633a12.3

for ; Sun, 12 Jan 2025 22:57:58 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1736751471; x=1737356271; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=BXWiBvRbEST7TmO1EUYQeUPzoy6mMxpuqgNr/drd3a4=;

b=eLaSolBdogRZPTK1bV0VIcYcyZFpRiow8aUF1qBC2vq1WSg7SQd5gkxExKnty+dnYd

9Eph/jkC7RfPbhF9X0wbGkJ9hir4JY4JsnGxA+VZK0eoCkiNuwNqtqvXXxCRtkKzJkKt

3F6PltoUdFh9AA5quw7+gjUnb4zB5vDKMbyIX/+MDpWvpbV+SDB/q90Jd0uuQsYCXl9T

Dt75REnJtR6iz96XfUN/5+uZAR8QXX7JnukzbaAbeH6qNXOM2VCRo8bSqOTBBpZDvAHw

4Ey151x1QINQJItpM19gisrJ7p/rTYayYSXU8Uik0/jL0Sl0J1w3micbCVya5Ln+ev3e

KJUA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1736751471; x=1737356271;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=BXWiBvRbEST7TmO1EUYQeUPzoy6mMxpuqgNr/drd3a4=;

b=r/khvxGBcxavLdYOco5IsnAhz/j7H7WzDlXJ/SIgPMeYDkjLaNwgIdqjdF05MMBsmV

fuGL1/Bgp6yFLzZfaJwYWLnSqzkJqsnyV1GUSWFGqoPZa7LHJA+tU3ZftbNPD3RUfszs

zupCTzcuY0yFTuz+1tF6+gVNZ0u/cwNzoB+BRVc/MwS+aEdy6B99KFOY9kWi8fvvphCz

BFH9++IRvpejB0XMKLLWhX93WXt8H8t8I3lyJ0LqoIa+0b88k1ItsV0Gt8S4hDzlARxD

iDJnWt8Me4l9e4ya4U7aYR1OA7+XgHrPC+z95d5Iz0KVWQqFlk0Z19dHrJeGF4HjwpDW

iR1A==

X-Forwarded-Encrypted: i=1; AJvYcCUZcmLvpHRqKsiLzpTO2iZ7E/8zAk7y4PldSIvS9o/6gMlFnn+dVe9CzM2OsSK3jfUkT3w=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0Yz4gorn58VK7D5KWPOwFka55W4JB8S7s6gqRwgoH76qEXTVwhnj

tb1w0tfGpRPJG8FNDB5FmWY/3dWazJ8RRtewpAqZuPpjPXV3pXMao72bd87qA5lCsIQ4OSQJfWJ

KwxDAaytojmDNxJXclbnuDvkWXUY=

X-Gm-Gg: ASbGnct0De0PlhCUZ7zuDMc1IEWdERzT+yaI3AeH6jN89JsSlc5YTE0fGVvuKA6XuC3

WuEybwa2TJ1zV5C1fPYpMcQ6177/uCGSXOyCscTY=

X-Google-Smtp-Source: AGHT+IGm8KcRnVLRBBTid9VwlJJL0snKMqueWRnZL6A3XEFj3NeghBwgBR//A9HE4rnCaM5Yq5J51kjW0zw2gD/3Zms=

X-Received: by 2002:a05:6402:278f:b0:5d0:ed92:cdf6 with SMTP id

4fb4d7f45d1cf-5d972e1c66bmr42683577a12.19.1736751471349; Sun, 12 Jan 2025

22:57:51 -0800 (PST)

MIME-Version: 1.0

Reply-To: amitayilmazz@gmail.com

From: Amita

Date: Mon, 13 Jan 2025 07:57:40 +0100

X-Gm-Features: AbW1kvZfvOkCn0OvjZ_O2k1SnfkJ0wp9IA1qK1DVeGJkqbX20PQ0BPxQx27xl2I

Message-ID:

Subject: Hello dear, my name is Amita i am from Turkey, please contact me

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000835521062b90f62a"

Bcc: dae@doctor.nl2k.ab.ca



--000000000000835521062b90f62a

Content-Type: text/plain; charset="UTF-8"







--000000000000835521062b90f62a

Content-Type: text/html; charset="UTF-8"








--000000000000835521062b90f62a--

Hair compressor spam from OVH

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 12 Jan 2025 21:54:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tXCSI-00000000Myz-3vU0

for dave@doctor.nl2k.ab.ca;

Sun, 12 Jan 2025 21:53:38 -0700

Resent-From: The Doctor

Resent-Date: Sun, 12 Jan 2025 21:53:38 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from m234.bnc.hello-subscribed.com ([51.178.222.234]:42467)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tXBTq-00000000KJQ-0VYe

for sales@nk.ca;

Sun, 12 Jan 2025 20:51:15 -0700

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=emailer; d=twgdns.com;

h=MIME-Version:From:Subject:To:Content-Transfer-Encoding:Content-Type:Date; i=Hyundairewards@twgdns.com;

bh=Ge8dbYhWGcXFDLFmwWbDNK3+/2Y=;

b=AJd897ii+Hfz03Y70oQkhamBUj1NufRWaoDtlLNSdXte/pGzbPDi7bDSLR8fA5oQ2+nvdHGVssBy

n+pqr/z8T6OTDnCSR/pUhhxa/AbWdNyWQA+zNQb3Xkn2o+kcaDy80TH/VtFiXPWrdFwA5ay89Spe

H90ErB/rrlx1WWX5aRhaXw+Oj3DZqMfl8fFgRg3PNKuB0MeXaDZJrgF+w1jGjI2ADgx60J3dL8FJ

JT4TcJ+vDT14ck6J0E+fLrkyT0Sk/sQ1zqAD8KX7iJe4lCF4ylT87Fdql4fKAQYAhb0fPioXS0TT

IMLtm9kcr5o0NwnQuB9y3IGx0nc6pm+5AxT/Vg==

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=emailer; d=twgdns.com;

b=A5EWpaZ1mEwY8WIzHQnhE9XcAMtOm6Ioj9btRSIYLo9mn20Y3Y+J/kKh8gWVHOmlGIEjrrT7qjfT

c6XDTXj3k4Pq9P5cAh8+dRDl4ck/5KFpZ1uK3cKWH1mMm2gFTiG/O0JG89yY22Iaw+PLsnz75PNx

dB9GdQTcqEKk2oZs64ksYQomk5oMi3RHF5Jr4jqAGWJlZUA3fdzs85wV7hwKXSr+76HxPBksaAQp

QoW0JNx1Y7UpD5gQyQ1LGr6Pp9nKMhrDEmZ30IF0BlhlYxlj2A2P+XY/e0WdhCdHXV2Axjd7yx3p

+IcF0sZH0WoJPYSWR1P/XqWJ6k5dhjOLKv51Yw==;

MIME-Version: 1.0

From:Hyundai

Subject: You won a FREE Bosch Portable Tire Air Compressor!

To: sales@nk.ca

Content-Transfer-Encoding: 7bit

Content-Type: text/html; charset="UTF-8"

Date: Mon, 13 Jan 2025 04:02:38 +0100

X-Spam_score: 15.1

X-Spam_score_int: 151

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: 03 It will only take you a minute to get this fantastic prize.





Content analysis details: (15.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[51.178.222.234 listed in sbl-xbl.spamhaus.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[51.178.222.234 listed in will-spam-for-food.eu.org]

[51.178.222.234 listed in will-spam-for-food.eu.org]

[51.178.222.234 listed in will-spam-for-food.eu.org]

[51.178.222.234 listed in will-spam-for-food.eu.org]

[51.178.222.234 listed in will-spam-for-food.eu.org]

[51.178.222.234 listed in will-spam-for-food.eu.org]

[51.178.222.234 listed in will-spam-for-food.eu.org]

[51.178.222.234 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[51.178.222.234 listed in dnsbl.ahbl.org]

[51.178.222.234 listed in dnsbl.ahbl.org]

[51.178.222.234 listed in dnsbl.ahbl.org]

[51.178.222.234 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[51.178.222.234 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[51.178.222.234 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[51.178.222.234 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[51.178.222.234 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[51.178.222.234 listed in sa-accredit.habeas.com]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[51.178.222.234 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[51.178.222.234 listed in zen.spamhaus.org]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[51.178.222.234 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[51.178.222.234 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

3.0 GOOG_STO_NOIMG_HTML Apparently using google content hosting to avoid

URIBL

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.5 HOSTED_IMG_MULTI_PUB_01 Multiple hosted images at public site

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.6 HDRS_MISSP Misspaced headers

Subject: {SPAM?} You won a FREE Bosch Portable Tire Air Compressor!









03













It will only take you a minute to get this fantastic prize.










Take 5 mins and Claim Your reward.



Bosch Portable Tire Air Compressor























Congratulations!



You've been selected as one of the lucky few to receive a brand-new

Bosch portable tire air compressor







To claim, Answer few questions.
















If you no longer wish to receive these emails, you can unsubscribe here


115 E 23rd St New York, NY, US 10010



















Hair compressor spam from OVH

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 12 Jan 2025 21:54:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tXCSN-00000000MzB-0KKp

for dave@doctor.nl2k.ab.ca;

Sun, 12 Jan 2025 21:53:43 -0700

Resent-From: The Doctor

Resent-Date: Sun, 12 Jan 2025 21:53:43 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from m11.bnc.oportunidadesdeldia.com ([51.178.184.11]:56695)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tXBkt-00000000KxK-2v1V

for root@nk.ca;

Sun, 12 Jan 2025 21:08:52 -0700

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=emailer; d=twgdns.com;

h=MIME-Version:From:Subject:To:Content-Transfer-Encoding:Content-Type:Date; i=Hyundairewards@twgdns.com;

bh=Bc46UY7AFzl3FaERTLmpZ7P9AC4=;

b=Wvie4MV9CZ2W0ZujlUkJaUmFrhmkSm6yrdFYnmj9NWYNDk03Fg1odGSamOzX0+Mdjbgedr9r2XnV

5osdrHXW7g21fWDRbG+yeGVasg1oiSHd0vIvX/hTI5C+2qucf+nWwd6Wkb+ccz81WmFnYw3r++Vn

3q9hiG7lApkf8Lc23KZWh4dOodp6QTxtL0Do9mZ5lscdK+rIjb4oWk0sg2d8LjZG5MQAWARQ4zvY

//OrU3R8yCR2WOrcr5Vv7TPi0/KxLbMfk8SU7fmSU28EU5LEbkdq7AGYQtmC7AQimogcB78p/E+1

mAxfHh+crSOHZTFPu2LVc3h3hTtq5+0ZFukP6A==

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=emailer; d=twgdns.com;

b=n8LQ9DTys6z8u195Abj2K6A5V8XlRRwAasC795x9C85XGQLVolgOCxsM1tK9PJydW/M4cfJrsXE2

qT1tPv1pirjQMwIF8l28cfANPDERfHNzbtukgd9Ih1ijdFHj/g6M4EM0ird8tg+Jf0h5hnU8AV7m

CR+w6VsFFwqNyLxlggnHTz/x7VfpUSQOq54xQQLOE9j2pPUQP6p+TV7WzITmINr/F7KqU/RVb2cj

c/7H73+WYMX3g5Ca7NTZCHtZaLiHn0916gZSpvsyt2wxqIFaZjZ2n5fNCHnPV0oCKzxM0iGjo+gn

rCDHr9IvZUngYUm1MbTBZbBPQwhOLyCkz5wnMw==;

MIME-Version: 1.0

From:Hyundai

Subject: You won a FREE Bosch Portable Tire Air Compressor!

To: root@nk.ca

Content-Transfer-Encoding: 7bit

Content-Type: text/html; charset="UTF-8"

Date: Mon, 13 Jan 2025 04:02:38 +0100

X-Spam_score: 13.6

X-Spam_score_int: 136

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: 03 It will only take you a minute to get this fantastic prize.





Content analysis details: (13.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[51.178.184.11 listed in dnsbl.ahbl.org]

[51.178.184.11 listed in dnsbl.ahbl.org]

[51.178.184.11 listed in dnsbl.ahbl.org]

[51.178.184.11 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[51.178.184.11 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[51.178.184.11 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[51.178.184.11 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[51.178.184.11 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[51.178.184.11 listed in will-spam-for-food.eu.org]

[51.178.184.11 listed in will-spam-for-food.eu.org]

[51.178.184.11 listed in will-spam-for-food.eu.org]

[51.178.184.11 listed in will-spam-for-food.eu.org]

[51.178.184.11 listed in will-spam-for-food.eu.org]

[51.178.184.11 listed in will-spam-for-food.eu.org]

[51.178.184.11 listed in will-spam-for-food.eu.org]

[51.178.184.11 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[51.178.184.11 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.5 HOSTED_IMG_MULTI_PUB_01 Multiple hosted images at public site

3.0 GOOG_STO_NOIMG_HTML Apparently using google content hosting to avoid

URIBL

1.6 HDRS_MISSP Misspaced headers

Subject: {SPAM?} You won a FREE Bosch Portable Tire Air Compressor!









03













It will only take you a minute to get this fantastic prize.










Take 5 mins and Claim Your reward.



Bosch Portable Tire Air Compressor























Congratulations!



You've been selected as one of the lucky few to receive a brand-new

Bosch portable tire air compressor







To claim, Answer few questions.
















If you no longer wish to receive these emails, you can unsubscribe here


115 E 23rd St New York, NY, US 10010



















CAA Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 12 Jan 2025 18:55:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tX9el-00000000BAM-3uXD

for dave@doctor.nl2k.ab.ca;

Sun, 12 Jan 2025 18:54:19 -0700

Resent-From: The Doctor

Resent-Date: Sun, 12 Jan 2025 18:54:19 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [103.174.115.64] (port=52217 helo=beeg.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1tX9NR-00000000N06-3Vn4

for games@nl2k.ab.ca;

Sun, 12 Jan 2025 18:36:30 -0700

Date: Sun, 12 Jan 2025 20:24:57 -0500

From: =?UTF-8?B?Q3VzdG9tZXItZmVlZGJhY2s=?=

Reply-To: =?UTF-8?B?Q3VzdG9tZXItZmVlZGJhY2s=?=

To: games@nl2k.ab.ca

Message-ID:

Subject: =?UTF-8?B?VGltZSBmb3ItYS5yZXdhcmQ=?=

MIME-Version: 1.0

Content-Type: text/html; charset="UTF-8"

List-Id: "0" <4.8qe9DSF7w3dvFHUcg0YBkTLC2qT9WdKQ.localhost.games>

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Feedback-ID: xpro-9985-1488:xpro-9985:MAILING:inxmailde

X-CSA-Complaints: csa-complaints@ional.co.uk

X-Mailer: Inxmail EE 4.8.48.825

X-Spam_score: 31.1

X-Spam_score_int: 311

X-Spam_bar: +++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  CAA You have been chosen!



Content analysis details: (31.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[103.174.115.64 listed in sbl-xbl.spamhaus.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.174.115.64 listed in will-spam-for-food.eu.org]

[103.174.115.64 listed in will-spam-for-food.eu.org]

[103.174.115.64 listed in will-spam-for-food.eu.org]

[103.174.115.64 listed in will-spam-for-food.eu.org]

[103.174.115.64 listed in will-spam-for-food.eu.org]

[103.174.115.64 listed in will-spam-for-food.eu.org]

[103.174.115.64 listed in will-spam-for-food.eu.org]

[103.174.115.64 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.174.115.64 listed in dnsbl.ahbl.org]

[103.174.115.64 listed in dnsbl.ahbl.org]

[103.174.115.64 listed in dnsbl.ahbl.org]

[103.174.115.64 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.174.115.64 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.174.115.64 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.174.115.64 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.174.115.64 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[103.174.115.64 listed in zen.spamhaus.org]

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

15 GR_DOMAIN_XECODE1 Spammer tool signature (xecode)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 GOOG_STO_IMG_NOHTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} =?UTF-8?B?VGltZSBmb3ItYS5yZXdhcmQ=?=

















CAA