Nk.CA credential phishing from Google Cloud

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 28 Feb 2025 07:17:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.1 (FreeBSD))

(envelope-from )

id 1to1AZ-000000003lu-1Df4

for dave@doctor.nl2k.ab.ca;

Fri, 28 Feb 2025 07:16:51 -0700

Resent-From: The Doctor

Resent-Date: Fri, 28 Feb 2025 07:16:51 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from 85.171.142.34.bc.googleusercontent.com ([34.142.171.85]:55930 helo=[10.88.0.4])

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.1 (FreeBSD))

id 1to0hh-00000000LWG-3Jio

for root@nk.ca;

Fri, 28 Feb 2025 06:47:42 -0700

Content-Type: multipart/related; boundary="===============9093049602272377233=="

MIME-Version: 1.0

From: "Nagindas Khandwala College ."

To: root@nk.ca

Subject: =?utf-8?q?MailBox_Requesting_Authentication!_For_root=40nk=2Eca_=3A?=

X-Priority: 2

X-Spam_score: 15.7

X-Spam_score_int: 157

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Root , You have an important mailbox update, please

click below to mailbox update complete. Update Mailbox You have 24 hours to

complete the update to avoid being logged out of your mailbox. Dis [...]



Content analysis details: (15.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.4 MISSING_DATE Missing Date: header

0.1 MISSING_MID Missing Message-Id: header

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[34.142.171.85 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[34.142.171.85 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[34.142.171.85 listed in sa-trusted.bondedsender.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[34.142.171.85 listed in zen.spamhaus.org]

0.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL

[34.142.171.85 listed in zen.spamhaus.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.142.171.85 listed in will-spam-for-food.eu.org]

[34.142.171.85 listed in will-spam-for-food.eu.org]

[34.142.171.85 listed in will-spam-for-food.eu.org]

[34.142.171.85 listed in will-spam-for-food.eu.org]

[34.142.171.85 listed in will-spam-for-food.eu.org]

[34.142.171.85 listed in will-spam-for-food.eu.org]

[34.142.171.85 listed in will-spam-for-food.eu.org]

[34.142.171.85 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[34.142.171.85 listed in sa-accredit.habeas.com]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[34.142.171.85 listed in sbl-xbl.spamhaus.org]

[34.142.171.85 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.142.171.85 listed in dnsbl.ahbl.org]

[34.142.171.85 listed in dnsbl.ahbl.org]

[34.142.171.85 listed in dnsbl.ahbl.org]

[34.142.171.85 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.142.171.85 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.142.171.85 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.142.171.85 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.142.171.85 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: ipfs.io/209.94.90.1]

0.0 TVD_RCVD_IP Message was received from an IP address

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_MXG_EMAIL_FRAG BODY: URI with email in fragment

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 URI_IPFSIO References Interplanetary File System PtP content via

ipfs.io, likely phishing

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

2.5 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only

0.0 URI_IPFS References Interplanetary File System PtP content, probable

phishing

1.0 XPRIO Has X-Priority header

0.1 TO_IN_SUBJ To address is in Subject

Subject: {SPAM?} =?utf-8?q?MailBox_Requesting_Authentication!_For_root=40nk=2Eca_=3A?=



--===============9093049602272377233==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64



PEhUTUw+PEhFQUQ+DQogICAgPE1FVEEgbmFtZT1HRU5FUkFUT1IgY29udGVudD0iTVNIVE1MIDEx

LjAwLjk2MDAuMTk1OTciPjwvSEVBRD4NCiAgICA8Qk9EWT4NCiAgICA8VEFCTEUgc3R5bGU9IkZP

TlQtU0laRTogMTRweDsgRk9OVC1GQU1JTFk6IGFyaWFsOyBCT1JERVItQ09MTEFQU0U6IGNvbGxh

cHNlOyBDT0xPUjogcmdiKDQ0LDU0LDU4KSIgY2VsbFNwYWNpbmc9MCBjZWxsUGFkZGluZz0wIHdp

ZHRoPSIxMDAlIiBhbGlnbj1jZW50ZXIgYmdDb2xvcj0jZjVmN2Y4IGJvcmRlcj0wPg0KICAgIDxU

Qk9EWSBzdHlsZT0iQk9YLVNJWklORzogYm9yZGVyLWJveCI+DQogICAgPFRSIHN0eWxlPSJCT1gt

U0laSU5HOiBib3JkZXItYm94Ij4NCiAgICA8VEQgc3R5bGU9IkJPWC1TSVpJTkc6IGJvcmRlci1i

b3giIGhlaWdodD0zMCB2QWxpZ249dG9wIGFsaWduPWNlbnRlcj4mbmJzcDs8L1REPjwvVFI+DQog

ICAgPFRSIHN0eWxlPSJCT1gtU0laSU5HOiBib3JkZXItYm94Ij4NCiAgICA8VEQgc3R5bGU9IkJP

WC1TSVpJTkc6IGJvcmRlci1ib3giIHZBbGlnbj10b3Agd2lkdGg9NjAwIGFsaWduPWNlbnRlcj4N

CiAgICA8VEFCTEUgc3R5bGU9Ik1BWC1XSURUSDogNjAwcHg7IEJPUkRFUi1UT1A6IHJnYigyNDAs

MjQxLDI0NikgMXB4IHNvbGlkOyBCT1JERVItUklHSFQ6IHJnYigyNDAsMjQxLDI0NikgMXB4IHNv

bGlkOyBCT1JERVItQ09MTEFQU0U6IGNvbGxhcHNlOyBCT1JERVItQk9UVE9NOiByZ2IoMjQwLDI0

MSwyNDYpIDFweCBzb2xpZDsgQk9SREVSLUxFRlQ6IHJnYigyNDAsMjQxLDI0NikgMXB4IHNvbGlk

IiBjZWxsU3BhY2luZz0wIGNlbGxQYWRkaW5nPTAgYWxpZ249Y2VudGVyIGJvcmRlcj0wPg0KICAg

IDxUQk9EWSBzdHlsZT0iQk9YLVNJWklORzogYm9yZGVyLWJveCI+DQogICAgPFRSIHN0eWxlPSJC

T1gtU0laSU5HOiBib3JkZXItYm94Ij4NCiAgICA8VEQgc3R5bGU9IkJPWC1TSVpJTkc6IGJvcmRl

ci1ib3g7IE1BWC1XSURUSDogNjAwcHgiIGJnQ29sb3I9I2ZmZmZmZiB2QWxpZ249dG9wIHdpZHRo

PTYwMCBhbGlnbj1jZW50ZXI+DQogICAgPFRBQkxFIHN0eWxlPSJCT1JERVItQ09MTEFQU0U6IGNv

bGxhcHNlIiBjZWxsU3BhY2luZz0wIGNlbGxQYWRkaW5nPTAgd2lkdGg9IjEwMCUiIGFsaWduPWNl

bnRlciBib3JkZXI9MD4NCiAgICA8VEJPRFkgc3R5bGU9IkJPWC1TSVpJTkc6IGJvcmRlci1ib3gi

Pg0KICAgIDxUUiBzdHlsZT0iQk9YLVNJWklORzogYm9yZGVyLWJveCI+DQogICAgPFREIHN0eWxl

PSJCT1gtU0laSU5HOiBib3JkZXItYm94IiB2QWxpZ249dG9wIGFsaWduPWNlbnRlcj4NCiAgICA8

VEFCTEUgc3R5bGU9IkJPUkRFUi1DT0xMQVBTRTogY29sbGFwc2UiIGNlbGxTcGFjaW5nPTAgY2Vs

bFBhZGRpbmc9MCB3aWR0aD0iOTIlIiBhbGlnbj1jZW50ZXIgYm9yZGVyPTA+DQogICAgPFRCT0RZ

IHN0eWxlPSJCT1gtU0laSU5HOiBib3JkZXItYm94Ij4NCiAgICA8VFIgc3R5bGU9IkJPWC1TSVpJ

Tkc6IGJvcmRlci1ib3giPg0KICAgIDxURCBzdHlsZT0iQk9YLVNJWklORzogYm9yZGVyLWJveCIg

dkFsaWduPXRvcCBhbGlnbj1jZW50ZXI+DQogICAgPFRBQkxFIHN0eWxlPSJCT1JERVItQ09MTEFQ

U0U6IGNvbGxhcHNlIiBjZWxsU3BhY2luZz0wIGNlbGxQYWRkaW5nPTAgd2lkdGg9IjEwMCUiIGFs

aWduPWNlbnRlcj4NCiAgICA8VEJPRFkgc3R5bGU9IkJPWC1TSVpJTkc6IGJvcmRlci1ib3giPg0K

ICAgIDxUUiBzdHlsZT0iQk9YLVNJWklORzogYm9yZGVyLWJveCI+DQogICAgPFREIHN0eWxlPSJC

T1gtU0laSU5HOiBib3JkZXItYm94IiBoZWlnaHQ9MzA+Jm5ic3A7PC9URD48L1RSPg0KICAgIDxU

UiBzdHlsZT0iQk9YLVNJWklORzogYm9yZGVyLWJveCI+DQogICAgPFREIHN0eWxlPSJCT1gtU0la

SU5HOiBib3JkZXItYm94IiBoZWlnaHQ9MzI+Jm5ic3A7PC9URD48L1RSPg0KICAgIDxUUiBzdHls

ZT0iQk9YLVNJWklORzogYm9yZGVyLWJveCI+DQogICAgPFREIHN0eWxlPSJCT1gtU0laSU5HOiBi

b3JkZXItYm94IiB2QWxpZ249dG9wPg0KICAgIDxUQUJMRSBzdHlsZT0iQk9SREVSLUNPTExBUFNF

OiBjb2xsYXBzZSIgY2VsbFNwYWNpbmc9MCBjZWxsUGFkZGluZz0wIHdpZHRoPSI5MCUiPg0KICAg

IDxUQk9EWSBzdHlsZT0iQk9YLVNJWklORzogYm9yZGVyLWJveCI+DQogICAgPFRSIHN0eWxlPSJC

T1gtU0laSU5HOiBib3JkZXItYm94Ij4NCiAgICA8VEQgc3R5bGU9IkJPWC1TSVpJTkc6IGJvcmRl

ci1ib3g7IEZPTlQtU0laRTogMTJweDsgRk9OVC1GQU1JTFk6IFJvYm90bywgQXJpYWw7IENPTE9S

OiByZ2IoNTEsNTEsNTEpOyBMSU5FLUhFSUdIVDogMThweCIgdkFsaWduPXRvcD48U1BBTiBzdHls

ZT0iQk9YLVNJWklORzogYm9yZGVyLWJveDsgRk9OVC1XRUlHSFQ6IGJvbGRlciI+RGVhciBSb290

ICw8L1NQQU4+PC9URD48L1RSPjwvVEJPRFk+PC9UQUJMRT48L1REPjwvVFI+DQogICAgPFRSIHN0

eWxlPSJCT1gtU0laSU5HOiBib3JkZXItYm94Ij4NCiAgICA8VEQgc3R5bGU9IkJPWC1TSVpJTkc6

IGJvcmRlci1ib3giIHZBbGlnbj10b3A+DQogICAgPFRBQkxFIHN0eWxlPSJCT1JERVItQ09MTEFQ

U0U6IGNvbGxhcHNlIiBjZWxsU3BhY2luZz0wIGNlbGxQYWRkaW5nPTAgd2lkdGg9IjEwMCUiIGJv

cmRlcj0wPg0KICAgIDxUQk9EWSBzdHlsZT0iQk9YLVNJWklORzogYm9yZGVyLWJveCI+DQogICAg

PFRSIHN0eWxlPSJCT1gtU0laSU5HOiBib3JkZXItYm94Ij4NCiAgICA8VEQgc3R5bGU9IkJPWC1T

SVpJTkc6IGJvcmRlci1ib3giIGhlaWdodD0yNT4mbmJzcDs8L1REPjwvVFI+DQogICAgPFRSIHN0

eWxlPSJCT1gtU0laSU5HOiBib3JkZXItYm94Ij4NCiAgICA8VEQgc3R5bGU9IkJPWC1TSVpJTkc6

IGJvcmRlci1ib3g7IEZPTlQtU0laRTogMTNweDsgRk9OVC1GQU1JTFk6IFJvYm90bywgQXJpYWw7

IENPTE9SOiByZ2IoMTAyLDEwMiwxMDIpOyBMSU5FLUhFSUdIVDogMTlweCI+WW91IGhhdmUgYW4g

aW1wb3J0YW50IG1haWxib3ggdXBkYXRlLCBwbGVhc2UgY2xpY2sgYmVsb3cgdG8gbWFpbGJveCB1

cGRhdGUgY29tcGxldGUuPC9URD48L1RSPjwvVEJPRFk+PC9UQUJMRT48L1REPjwvVFI+DQogICAg

PFRSIHN0eWxlPSJCT1gtU0laSU5HOiBib3JkZXItYm94Ij4NCiAgICA8VEQgc3R5bGU9IkJPWC1T

SVpJTkc6IGJvcmRlci1ib3giIGhlaWdodD0yMCB2QWxpZ249dG9wIGFsaWduPWxlZnQ+Jm5ic3A7

PC9URD48L1RSPjwvVEJPRFk+PC9UQUJMRT48L1REPjwvVFI+DQogICAgPFRSIHN0eWxlPSJCT1gt

U0laSU5HOiBib3JkZXItYm94Ij4NCiAgICA8VEQgc3R5bGU9IkJPWC1TSVpJTkc6IGJvcmRlci1i

b3giIHZBbGlnbj10b3AgYWxpZ249Y2VudGVyPiZuYnNwOyANCiAgICA8VEFCTEUgc3R5bGU9IkJP

UkRFUi1DT0xMQVBTRTogY29sbGFwc2UiIGNlbGxTcGFjaW5nPTAgY2VsbFBhZGRpbmc9MCBhbGln

bj1jZW50ZXIgYm9yZGVyPTA+DQogICAgPFRCT0RZIHN0eWxlPSJCT1gtU0laSU5HOiBib3JkZXIt

Ym94Ij4NCiAgICA8VFIgc3R5bGU9IkJPWC1TSVpJTkc6IGJvcmRlci1ib3giPg0KICAgIDxURCBz

dHlsZT0iQk9YLVNJWklORzogYm9yZGVyLWJveCIgYmdDb2xvcj0jZjM1NjVkIGhlaWdodD00MCB3

aWR0aD0yODggYWxpZ249Y2VudGVyPjxBIHN0eWxlPSJCT1gtU0laSU5HOiBib3JkZXItYm94OyBG

T05ULUZBTUlMWTogUm9ib3RvLCBBcmlhbDsgVEVYVC1UUkFOU0ZPUk06IHVwcGVyY2FzZTsgQ09M

T1I6IHJnYigyNTUsMjU1LDI1NSk7IERJU1BMQVk6IGJsb2NrOyBMSU5FLUhFSUdIVDogNDBweDsg

QkFDS0dST1VORC1DT0xPUjogdHJhbnNwYXJlbnQ7IHRleHQtZGVjb3JhdGlvbi1saW5lOiBub25l

IiBocmVmPSJodHRwczovL2lwZnMuaW8vaXBmcy9iYWZrcmVpZTQzbmU0c21hZ3hveGxjb3Jvd3hn

N2FxaTJ1bWdjNWJxeW00M2NyeGJoc2k1NHE2NWFrcT9maWxlbmFtZT1sb2VsaW5lLmh0bWwjcm9v

dEBuay5jYSIgcmVsPW5vcmVmZXJyZXIgdGFyZ2V0PV9ibGFuaz5VcGRhdGUgTWFpbGJveDwvQT48

L1REPjwvVFI+PC9UQk9EWT48L1RBQkxFPjwvVEQ+PC9UUj4NCiAgICA8VFIgc3R5bGU9IkJPWC1T

SVpJTkc6IGJvcmRlci1ib3giPg0KICAgIDxURCBzdHlsZT0iQk9YLVNJWklORzogYm9yZGVyLWJv

eCIgaGVpZ2h0PTIwIHZBbGlnbj10b3AgYWxpZ249bGVmdD4mbmJzcDs8L1REPjwvVFI+DQogICAg

PFRSIHN0eWxlPSJCT1gtU0laSU5HOiBib3JkZXItYm94Ij4NCiAgICA8VEQgc3R5bGU9IkJPWC1T

SVpJTkc6IGJvcmRlci1ib3giIHZBbGlnbj10b3A+DQogICAgPFRBQkxFIHN0eWxlPSJCT1JERVIt

Q09MTEFQU0U6IGNvbGxhcHNlIiBjZWxsU3BhY2luZz0wIGNlbGxQYWRkaW5nPTAgd2lkdGg9IjEw

MCUiIGJvcmRlcj0wPg0KICAgIDxUQk9EWSBzdHlsZT0iQk9YLVNJWklORzogYm9yZGVyLWJveCI+

DQogICAgPFRSIHN0eWxlPSJCT1gtU0laSU5HOiBib3JkZXItYm94Ij4NCiAgICA8VEQgc3R5bGU9

IkJPWC1TSVpJTkc6IGJvcmRlci1ib3g7IEZPTlQtU0laRTogMTNweDsgRk9OVC1GQU1JTFk6IFJv

Ym90bywgQXJpYWw7IENPTE9SOiByZ2IoMTAyLDEwMiwxMDIpOyBMSU5FLUhFSUdIVDogMTlweCI+

WW91IGhhdmUgMjQgaG91cnMgdG8gY29tcGxldGUgdGhlIHVwZGF0ZSB0byBhdm9pZCBiZWluZyBs

b2dnZWQgb3V0IG9mIHlvdXIgbWFpbGJveC48L1REPjwvVFI+PC9UQk9EWT48L1RBQkxFPjwvVEQ+

PC9UUj4NCiAgICA8VFIgc3R5bGU9IkJPWC1TSVpJTkc6IGJvcmRlci1ib3giPg0KICAgIDxURCBz

dHlsZT0iQk9YLVNJWklORzogYm9yZGVyLWJveDsgQk9SREVSLUJPVFRPTTogcmdiKDIzOCwyMzgs

MjM4KSAxcHggc29saWQiIGhlaWdodD0yNT4mbmJzcDs8L1REPjwvVFI+DQogICAgPFRSIHN0eWxl

PSJCT1gtU0laSU5HOiBib3JkZXItYm94Ij4NCiAgICA8VEQgc3R5bGU9IkJPWC1TSVpJTkc6IGJv

cmRlci1ib3giIGhlaWdodD0yMz4mbmJzcDs8L1REPjwvVFI+DQogICAgPFRSIHN0eWxlPSJCT1gt

U0laSU5HOiBib3JkZXItYm94Ij4NCiAgICA8VEQgc3R5bGU9IkJPWC1TSVpJTkc6IGJvcmRlci1i

b3giIHZBbGlnbj10b3A+RGlzY2xhaW1lciANCiAgICA8UCBzdHlsZT0iQk9YLVNJWklORzogYm9y

ZGVyLWJveDsgTUFSR0lOLVRPUDogMHB4Ij4mbmJzcDs8L1A+DQogICAgPFAgc3R5bGU9J0JPWC1T

SVpJTkc6IGJvcmRlci1ib3g7IEZPTlQtU0laRTogOHB0OyBGT05ULUZBTUlMWTogIkNlbnR1cnkg

R290aGljIiwgInRpbWVzIHJvbWFuIiwgc2VyaWY7IENPTE9SOiByZ2IoOTIsODgsODgpOyBNQVJH

SU4tVE9QOiAwcHg7IExJTkUtSEVJR0hUOiAxMHB0JyBhbGlnbj1jZW50ZXI+VGhpcyBlbWFpbCZu

YnNwO2lzIGludGVuZGVkIHNvbGVseSBmb3ImbmJzcDtyb290QG5rLmNhPFNQQU4gc3R5bGU9IkJP

WC1TSVpJTkc6IGJvcmRlci1ib3giPiZuYnNwOzwvU1BBTj48U1BBTiBzdHlsZT0iQk9YLVNJWklO

RzogYm9yZGVyLWJveCI+Jm5ic3A7PC9TUEFOPg0KICAgICZuYnNwO29ubHkuIEl0IGNvbnRhaW5z

IGNvbmZpZGVudGlhbCBhbmQvb3IgcHJpdmlsZWdlZCBpbmZvcm1hdGlvbi4gSWYgeW91IGFyZSBu

b3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCBvciBoYXZlIHJlY2VpdmVkIHRoaXMgZW1haWwgaW4g

ZXJyb3IsIHlvdSBtdXN0IG5vdCBjb3B5LCBkaXN0cmlidXRlLCBkaXNjbG9zZSBvciB0YWtlIGFu

eSBhY3Rpb24gaW4gcmVsaWFuY2Ugb24gYW55IHBhcnQgb2YgaXQuIEluIHN1Y2ggYSBjYXNlLCB5

b3Ugc2hvdWxkIGluZm9ybSB1cyBpbW1lZGlhdGVseSBhbmQgZGVsZXRlIHRoaXMgZW1haWwuPC9Q

Pg0KICAgIDxQIHN0eWxlPSJCT1gtU0laSU5HOiBib3JkZXItYm94OyBGT05ULUZBTUlMWTogVGFo

b21hLCBWZXJkYW5hLCBTZWdvZSwgc2Fucy1zZXJpZjsgQ09MT1I6IHJnYig1Nyw2MSw3MSk7IFRF

WFQtQUxJR046IGNlbnRlcjsgTUFSR0lOOiAwcHg7IExJTkUtSEVJR0hUOiAxLjIiPiZuYnNwOzwv

UD4NCiAgICA8VEFCTEUgc3R5bGU9IkJPUkRFUi1DT0xMQVBTRTogY29sbGFwc2UiIGNlbGxTcGFj

aW5nPTAgY2VsbFBhZGRpbmc9MCB3aWR0aD0iOTAlIj4NCiAgICA8VEJPRFkgc3R5bGU9IkJPWC1T

SVpJTkc6IGJvcmRlci1ib3giPg0KICAgIDxUUiBzdHlsZT0iQk9YLVNJWklORzogYm9yZGVyLWJv

eCI+DQogICAgPFREIHN0eWxlPSJCT1gtU0laSU5HOiBib3JkZXItYm94OyBGT05ULVNJWkU6IDEy

cHg7IEZPTlQtRkFNSUxZOiBSb2JvdG8sIEFyaWFsOyBGT05ULVdFSUdIVDogNjAwOyBDT0xPUjog

cmdiKDUxLDUxLDUxKTsgTElORS1IRUlHSFQ6IDE4cHgiIHZBbGlnbj10b3A+bmsuY2EgJm5ic3A7

QWRtaW5pc3RyYXRvciBTZXJ2aWNlcy4gQWxsIFJpZ2h0cyBSZXNlcnZlZDwvVEQ+PC9UUj48L1RC

T0RZPjwvVEFCTEU+PC9URD48L1RSPjwvVEJPRFk+PC9UQUJMRT48L1REPjwvVFI+DQogICAgPFRS

IHN0eWxlPSJCT1gtU0laSU5HOiBib3JkZXItYm94Ij4NCiAgICA8VEQgc3R5bGU9IkJPWC1TSVpJ

Tkc6IGJvcmRlci1ib3giIGhlaWdodD0zMj4mbmJzcDs8L1REPjwvVFI+PC9UQk9EWT48L1RBQkxF

PjwvVEQ+PC9UUj48L1RCT0RZPjwvVEFCTEU+PC9URD48L1RSPjwvVEJPRFk+PC9UQUJMRT48L0JP

RFk+PC9IVE1MPg==



--===============9093049602272377233==--

nk.ca credential phshing from google Cloud

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 28 Feb 2025 07:17:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.1 (FreeBSD))

(envelope-from )

id 1to1Ae-000000003mf-2Z6M

for dave@doctor.nl2k.ab.ca;

Fri, 28 Feb 2025 07:16:56 -0700

Resent-From: The Doctor

Resent-Date: Fri, 28 Feb 2025 07:16:56 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from 85.171.142.34.bc.googleusercontent.com ([34.142.171.85]:55944 helo=[10.88.0.4])

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.1 (FreeBSD))

id 1to0hh-00000000LWH-3HYT

for sales@nk.ca;

Fri, 28 Feb 2025 06:47:42 -0700

Content-Type: multipart/related; boundary="===============6826820915113449848=="

MIME-Version: 1.0

From: "Nagindas Khandwala College ."

To: sales@nk.ca

Subject: =?utf-8?q?MailBox_Requesting_Authentication!_For_sales=40nk=2Eca_=3A?=

X-Priority: 2

X-Spam_score: 15.7

X-Spam_score_int: 157

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sales , You have an important mailbox update, please

click below to mailbox update complete. Update Mailbox You have 24 hours

to complete the update to avoid being logged out of your mailbox. Di [...]





Content analysis details: (15.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.4 MISSING_DATE Missing Date: header

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[34.142.171.85 listed in will-spam-for-food.eu.org]

[34.142.171.85 listed in will-spam-for-food.eu.org]

[34.142.171.85 listed in will-spam-for-food.eu.org]

[34.142.171.85 listed in will-spam-for-food.eu.org]

[34.142.171.85 listed in will-spam-for-food.eu.org]

[34.142.171.85 listed in will-spam-for-food.eu.org]

[34.142.171.85 listed in will-spam-for-food.eu.org]

[34.142.171.85 listed in will-spam-for-food.eu.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[34.142.171.85 listed in zen.spamhaus.org]

0.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL

[34.142.171.85 listed in zen.spamhaus.org]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[34.142.171.85 listed in sa-trusted.bondedsender.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[34.142.171.85 listed in sbl-xbl.spamhaus.org]

[34.142.171.85 listed in sbl-xbl.spamhaus.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[34.142.171.85 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[34.142.171.85 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[34.142.171.85 listed in sa-accredit.habeas.com]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[34.142.171.85 listed in dnsbl.ahbl.org]

[34.142.171.85 listed in dnsbl.ahbl.org]

[34.142.171.85 listed in dnsbl.ahbl.org]

[34.142.171.85 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[34.142.171.85 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[34.142.171.85 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[34.142.171.85 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[34.142.171.85 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: ipfs.io/209.94.90.1]

0.0 TVD_RCVD_IP Message was received from an IP address

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_MXG_EMAIL_FRAG BODY: URI with email in fragment

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 URI_IPFSIO References Interplanetary File System PtP content via

ipfs.io, likely phishing

0.4 RDNS_DYNAMIC Delivered to internal network by host with

dynamic-looking rDNS

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

0.0 URI_IPFS References Interplanetary File System PtP content, probable

phishing

1.0 XPRIO Has X-Priority header

0.1 TO_IN_SUBJ To address is in Subject

2.5 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only

Subject: {SPAM?} =?utf-8?q?MailBox_Requesting_Authentication!_For_sales=40nk=2Eca_=3A?=



--===============6826820915113449848==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64



PEhUTUw+PEhFQUQ+DQogICAgPE1FVEEgbmFtZT1HRU5FUkFUT1IgY29udGVudD0iTVNIVE1MIDEx

LjAwLjk2MDAuMTk1OTciPjwvSEVBRD4NCiAgICA8Qk9EWT4NCiAgICA8VEFCTEUgc3R5bGU9IkZP

TlQtU0laRTogMTRweDsgRk9OVC1GQU1JTFk6IGFyaWFsOyBCT1JERVItQ09MTEFQU0U6IGNvbGxh

cHNlOyBDT0xPUjogcmdiKDQ0LDU0LDU4KSIgY2VsbFNwYWNpbmc9MCBjZWxsUGFkZGluZz0wIHdp

ZHRoPSIxMDAlIiBhbGlnbj1jZW50ZXIgYmdDb2xvcj0jZjVmN2Y4IGJvcmRlcj0wPg0KICAgIDxU

Qk9EWSBzdHlsZT0iQk9YLVNJWklORzogYm9yZGVyLWJveCI+DQogICAgPFRSIHN0eWxlPSJCT1gt

U0laSU5HOiBib3JkZXItYm94Ij4NCiAgICA8VEQgc3R5bGU9IkJPWC1TSVpJTkc6IGJvcmRlci1i

b3giIGhlaWdodD0zMCB2QWxpZ249dG9wIGFsaWduPWNlbnRlcj4mbmJzcDs8L1REPjwvVFI+DQog

ICAgPFRSIHN0eWxlPSJCT1gtU0laSU5HOiBib3JkZXItYm94Ij4NCiAgICA8VEQgc3R5bGU9IkJP

WC1TSVpJTkc6IGJvcmRlci1ib3giIHZBbGlnbj10b3Agd2lkdGg9NjAwIGFsaWduPWNlbnRlcj4N

CiAgICA8VEFCTEUgc3R5bGU9Ik1BWC1XSURUSDogNjAwcHg7IEJPUkRFUi1UT1A6IHJnYigyNDAs

MjQxLDI0NikgMXB4IHNvbGlkOyBCT1JERVItUklHSFQ6IHJnYigyNDAsMjQxLDI0NikgMXB4IHNv

bGlkOyBCT1JERVItQ09MTEFQU0U6IGNvbGxhcHNlOyBCT1JERVItQk9UVE9NOiByZ2IoMjQwLDI0

MSwyNDYpIDFweCBzb2xpZDsgQk9SREVSLUxFRlQ6IHJnYigyNDAsMjQxLDI0NikgMXB4IHNvbGlk

IiBjZWxsU3BhY2luZz0wIGNlbGxQYWRkaW5nPTAgYWxpZ249Y2VudGVyIGJvcmRlcj0wPg0KICAg

IDxUQk9EWSBzdHlsZT0iQk9YLVNJWklORzogYm9yZGVyLWJveCI+DQogICAgPFRSIHN0eWxlPSJC

T1gtU0laSU5HOiBib3JkZXItYm94Ij4NCiAgICA8VEQgc3R5bGU9IkJPWC1TSVpJTkc6IGJvcmRl

ci1ib3g7IE1BWC1XSURUSDogNjAwcHgiIGJnQ29sb3I9I2ZmZmZmZiB2QWxpZ249dG9wIHdpZHRo

PTYwMCBhbGlnbj1jZW50ZXI+DQogICAgPFRBQkxFIHN0eWxlPSJCT1JERVItQ09MTEFQU0U6IGNv

bGxhcHNlIiBjZWxsU3BhY2luZz0wIGNlbGxQYWRkaW5nPTAgd2lkdGg9IjEwMCUiIGFsaWduPWNl

bnRlciBib3JkZXI9MD4NCiAgICA8VEJPRFkgc3R5bGU9IkJPWC1TSVpJTkc6IGJvcmRlci1ib3gi

Pg0KICAgIDxUUiBzdHlsZT0iQk9YLVNJWklORzogYm9yZGVyLWJveCI+DQogICAgPFREIHN0eWxl

PSJCT1gtU0laSU5HOiBib3JkZXItYm94IiB2QWxpZ249dG9wIGFsaWduPWNlbnRlcj4NCiAgICA8

VEFCTEUgc3R5bGU9IkJPUkRFUi1DT0xMQVBTRTogY29sbGFwc2UiIGNlbGxTcGFjaW5nPTAgY2Vs

bFBhZGRpbmc9MCB3aWR0aD0iOTIlIiBhbGlnbj1jZW50ZXIgYm9yZGVyPTA+DQogICAgPFRCT0RZ

IHN0eWxlPSJCT1gtU0laSU5HOiBib3JkZXItYm94Ij4NCiAgICA8VFIgc3R5bGU9IkJPWC1TSVpJ

Tkc6IGJvcmRlci1ib3giPg0KICAgIDxURCBzdHlsZT0iQk9YLVNJWklORzogYm9yZGVyLWJveCIg

dkFsaWduPXRvcCBhbGlnbj1jZW50ZXI+DQogICAgPFRBQkxFIHN0eWxlPSJCT1JERVItQ09MTEFQ

U0U6IGNvbGxhcHNlIiBjZWxsU3BhY2luZz0wIGNlbGxQYWRkaW5nPTAgd2lkdGg9IjEwMCUiIGFs

aWduPWNlbnRlcj4NCiAgICA8VEJPRFkgc3R5bGU9IkJPWC1TSVpJTkc6IGJvcmRlci1ib3giPg0K

ICAgIDxUUiBzdHlsZT0iQk9YLVNJWklORzogYm9yZGVyLWJveCI+DQogICAgPFREIHN0eWxlPSJC

T1gtU0laSU5HOiBib3JkZXItYm94IiBoZWlnaHQ9MzA+Jm5ic3A7PC9URD48L1RSPg0KICAgIDxU

UiBzdHlsZT0iQk9YLVNJWklORzogYm9yZGVyLWJveCI+DQogICAgPFREIHN0eWxlPSJCT1gtU0la

SU5HOiBib3JkZXItYm94IiBoZWlnaHQ9MzI+Jm5ic3A7PC9URD48L1RSPg0KICAgIDxUUiBzdHls

ZT0iQk9YLVNJWklORzogYm9yZGVyLWJveCI+DQogICAgPFREIHN0eWxlPSJCT1gtU0laSU5HOiBi

b3JkZXItYm94IiB2QWxpZ249dG9wPg0KICAgIDxUQUJMRSBzdHlsZT0iQk9SREVSLUNPTExBUFNF

OiBjb2xsYXBzZSIgY2VsbFNwYWNpbmc9MCBjZWxsUGFkZGluZz0wIHdpZHRoPSI5MCUiPg0KICAg

IDxUQk9EWSBzdHlsZT0iQk9YLVNJWklORzogYm9yZGVyLWJveCI+DQogICAgPFRSIHN0eWxlPSJC

T1gtU0laSU5HOiBib3JkZXItYm94Ij4NCiAgICA8VEQgc3R5bGU9IkJPWC1TSVpJTkc6IGJvcmRl

ci1ib3g7IEZPTlQtU0laRTogMTJweDsgRk9OVC1GQU1JTFk6IFJvYm90bywgQXJpYWw7IENPTE9S

OiByZ2IoNTEsNTEsNTEpOyBMSU5FLUhFSUdIVDogMThweCIgdkFsaWduPXRvcD48U1BBTiBzdHls

ZT0iQk9YLVNJWklORzogYm9yZGVyLWJveDsgRk9OVC1XRUlHSFQ6IGJvbGRlciI+RGVhciBTYWxl

cyAsPC9TUEFOPjwvVEQ+PC9UUj48L1RCT0RZPjwvVEFCTEU+PC9URD48L1RSPg0KICAgIDxUUiBz

dHlsZT0iQk9YLVNJWklORzogYm9yZGVyLWJveCI+DQogICAgPFREIHN0eWxlPSJCT1gtU0laSU5H

OiBib3JkZXItYm94IiB2QWxpZ249dG9wPg0KICAgIDxUQUJMRSBzdHlsZT0iQk9SREVSLUNPTExB

UFNFOiBjb2xsYXBzZSIgY2VsbFNwYWNpbmc9MCBjZWxsUGFkZGluZz0wIHdpZHRoPSIxMDAlIiBi

b3JkZXI9MD4NCiAgICA8VEJPRFkgc3R5bGU9IkJPWC1TSVpJTkc6IGJvcmRlci1ib3giPg0KICAg

IDxUUiBzdHlsZT0iQk9YLVNJWklORzogYm9yZGVyLWJveCI+DQogICAgPFREIHN0eWxlPSJCT1gt

U0laSU5HOiBib3JkZXItYm94IiBoZWlnaHQ9MjU+Jm5ic3A7PC9URD48L1RSPg0KICAgIDxUUiBz

dHlsZT0iQk9YLVNJWklORzogYm9yZGVyLWJveCI+DQogICAgPFREIHN0eWxlPSJCT1gtU0laSU5H

OiBib3JkZXItYm94OyBGT05ULVNJWkU6IDEzcHg7IEZPTlQtRkFNSUxZOiBSb2JvdG8sIEFyaWFs

OyBDT0xPUjogcmdiKDEwMiwxMDIsMTAyKTsgTElORS1IRUlHSFQ6IDE5cHgiPllvdSBoYXZlIGFu

IGltcG9ydGFudCBtYWlsYm94IHVwZGF0ZSwgcGxlYXNlIGNsaWNrIGJlbG93IHRvIG1haWxib3gg

dXBkYXRlIGNvbXBsZXRlLjwvVEQ+PC9UUj48L1RCT0RZPjwvVEFCTEU+PC9URD48L1RSPg0KICAg

IDxUUiBzdHlsZT0iQk9YLVNJWklORzogYm9yZGVyLWJveCI+DQogICAgPFREIHN0eWxlPSJCT1gt

U0laSU5HOiBib3JkZXItYm94IiBoZWlnaHQ9MjAgdkFsaWduPXRvcCBhbGlnbj1sZWZ0PiZuYnNw

OzwvVEQ+PC9UUj48L1RCT0RZPjwvVEFCTEU+PC9URD48L1RSPg0KICAgIDxUUiBzdHlsZT0iQk9Y

LVNJWklORzogYm9yZGVyLWJveCI+DQogICAgPFREIHN0eWxlPSJCT1gtU0laSU5HOiBib3JkZXIt

Ym94IiB2QWxpZ249dG9wIGFsaWduPWNlbnRlcj4mbmJzcDsgDQogICAgPFRBQkxFIHN0eWxlPSJC

T1JERVItQ09MTEFQU0U6IGNvbGxhcHNlIiBjZWxsU3BhY2luZz0wIGNlbGxQYWRkaW5nPTAgYWxp

Z249Y2VudGVyIGJvcmRlcj0wPg0KICAgIDxUQk9EWSBzdHlsZT0iQk9YLVNJWklORzogYm9yZGVy

LWJveCI+DQogICAgPFRSIHN0eWxlPSJCT1gtU0laSU5HOiBib3JkZXItYm94Ij4NCiAgICA8VEQg

c3R5bGU9IkJPWC1TSVpJTkc6IGJvcmRlci1ib3giIGJnQ29sb3I9I2YzNTY1ZCBoZWlnaHQ9NDAg

d2lkdGg9Mjg4IGFsaWduPWNlbnRlcj48QSBzdHlsZT0iQk9YLVNJWklORzogYm9yZGVyLWJveDsg

Rk9OVC1GQU1JTFk6IFJvYm90bywgQXJpYWw7IFRFWFQtVFJBTlNGT1JNOiB1cHBlcmNhc2U7IENP

TE9SOiByZ2IoMjU1LDI1NSwyNTUpOyBESVNQTEFZOiBibG9jazsgTElORS1IRUlHSFQ6IDQwcHg7

IEJBQ0tHUk9VTkQtQ09MT1I6IHRyYW5zcGFyZW50OyB0ZXh0LWRlY29yYXRpb24tbGluZTogbm9u

ZSIgaHJlZj0iaHR0cHM6Ly9pcGZzLmlvL2lwZnMvYmFma3JlaWU0M25lNHNtYWd4b3hsY29yb3d4

ZzdhcWkydW1nYzVicXltNDNjcnhiaHNpNTRxNjVha3E/ZmlsZW5hbWU9bG9lbGluZS5odG1sI3Nh

bGVzQG5rLmNhIiByZWw9bm9yZWZlcnJlciB0YXJnZXQ9X2JsYW5rPlVwZGF0ZSBNYWlsYm94PC9B

PjwvVEQ+PC9UUj48L1RCT0RZPjwvVEFCTEU+PC9URD48L1RSPg0KICAgIDxUUiBzdHlsZT0iQk9Y

LVNJWklORzogYm9yZGVyLWJveCI+DQogICAgPFREIHN0eWxlPSJCT1gtU0laSU5HOiBib3JkZXIt

Ym94IiBoZWlnaHQ9MjAgdkFsaWduPXRvcCBhbGlnbj1sZWZ0PiZuYnNwOzwvVEQ+PC9UUj4NCiAg

ICA8VFIgc3R5bGU9IkJPWC1TSVpJTkc6IGJvcmRlci1ib3giPg0KICAgIDxURCBzdHlsZT0iQk9Y

LVNJWklORzogYm9yZGVyLWJveCIgdkFsaWduPXRvcD4NCiAgICA8VEFCTEUgc3R5bGU9IkJPUkRF

Ui1DT0xMQVBTRTogY29sbGFwc2UiIGNlbGxTcGFjaW5nPTAgY2VsbFBhZGRpbmc9MCB3aWR0aD0i

MTAwJSIgYm9yZGVyPTA+DQogICAgPFRCT0RZIHN0eWxlPSJCT1gtU0laSU5HOiBib3JkZXItYm94

Ij4NCiAgICA8VFIgc3R5bGU9IkJPWC1TSVpJTkc6IGJvcmRlci1ib3giPg0KICAgIDxURCBzdHls

ZT0iQk9YLVNJWklORzogYm9yZGVyLWJveDsgRk9OVC1TSVpFOiAxM3B4OyBGT05ULUZBTUlMWTog

Um9ib3RvLCBBcmlhbDsgQ09MT1I6IHJnYigxMDIsMTAyLDEwMik7IExJTkUtSEVJR0hUOiAxOXB4

Ij5Zb3UgaGF2ZSAyNCBob3VycyB0byBjb21wbGV0ZSB0aGUgdXBkYXRlIHRvIGF2b2lkIGJlaW5n

IGxvZ2dlZCBvdXQgb2YgeW91ciBtYWlsYm94LjwvVEQ+PC9UUj48L1RCT0RZPjwvVEFCTEU+PC9U

RD48L1RSPg0KICAgIDxUUiBzdHlsZT0iQk9YLVNJWklORzogYm9yZGVyLWJveCI+DQogICAgPFRE

IHN0eWxlPSJCT1gtU0laSU5HOiBib3JkZXItYm94OyBCT1JERVItQk9UVE9NOiByZ2IoMjM4LDIz

OCwyMzgpIDFweCBzb2xpZCIgaGVpZ2h0PTI1PiZuYnNwOzwvVEQ+PC9UUj4NCiAgICA8VFIgc3R5

bGU9IkJPWC1TSVpJTkc6IGJvcmRlci1ib3giPg0KICAgIDxURCBzdHlsZT0iQk9YLVNJWklORzog

Ym9yZGVyLWJveCIgaGVpZ2h0PTIzPiZuYnNwOzwvVEQ+PC9UUj4NCiAgICA8VFIgc3R5bGU9IkJP

WC1TSVpJTkc6IGJvcmRlci1ib3giPg0KICAgIDxURCBzdHlsZT0iQk9YLVNJWklORzogYm9yZGVy

LWJveCIgdkFsaWduPXRvcD5EaXNjbGFpbWVyIA0KICAgIDxQIHN0eWxlPSJCT1gtU0laSU5HOiBi

b3JkZXItYm94OyBNQVJHSU4tVE9QOiAwcHgiPiZuYnNwOzwvUD4NCiAgICA8UCBzdHlsZT0nQk9Y

LVNJWklORzogYm9yZGVyLWJveDsgRk9OVC1TSVpFOiA4cHQ7IEZPTlQtRkFNSUxZOiAiQ2VudHVy

eSBHb3RoaWMiLCAidGltZXMgcm9tYW4iLCBzZXJpZjsgQ09MT1I6IHJnYig5Miw4OCw4OCk7IE1B

UkdJTi1UT1A6IDBweDsgTElORS1IRUlHSFQ6IDEwcHQnIGFsaWduPWNlbnRlcj5UaGlzIGVtYWls

Jm5ic3A7aXMgaW50ZW5kZWQgc29sZWx5IGZvciZuYnNwO3NhbGVzQG5rLmNhPFNQQU4gc3R5bGU9

IkJPWC1TSVpJTkc6IGJvcmRlci1ib3giPiZuYnNwOzwvU1BBTj48U1BBTiBzdHlsZT0iQk9YLVNJ

WklORzogYm9yZGVyLWJveCI+Jm5ic3A7PC9TUEFOPg0KICAgICZuYnNwO29ubHkuIEl0IGNvbnRh

aW5zIGNvbmZpZGVudGlhbCBhbmQvb3IgcHJpdmlsZWdlZCBpbmZvcm1hdGlvbi4gSWYgeW91IGFy

ZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCBvciBoYXZlIHJlY2VpdmVkIHRoaXMgZW1haWwg

aW4gZXJyb3IsIHlvdSBtdXN0IG5vdCBjb3B5LCBkaXN0cmlidXRlLCBkaXNjbG9zZSBvciB0YWtl

IGFueSBhY3Rpb24gaW4gcmVsaWFuY2Ugb24gYW55IHBhcnQgb2YgaXQuIEluIHN1Y2ggYSBjYXNl

LCB5b3Ugc2hvdWxkIGluZm9ybSB1cyBpbW1lZGlhdGVseSBhbmQgZGVsZXRlIHRoaXMgZW1haWwu

PC9QPg0KICAgIDxQIHN0eWxlPSJCT1gtU0laSU5HOiBib3JkZXItYm94OyBGT05ULUZBTUlMWTog

VGFob21hLCBWZXJkYW5hLCBTZWdvZSwgc2Fucy1zZXJpZjsgQ09MT1I6IHJnYig1Nyw2MSw3MSk7

IFRFWFQtQUxJR046IGNlbnRlcjsgTUFSR0lOOiAwcHg7IExJTkUtSEVJR0hUOiAxLjIiPiZuYnNw

OzwvUD4NCiAgICA8VEFCTEUgc3R5bGU9IkJPUkRFUi1DT0xMQVBTRTogY29sbGFwc2UiIGNlbGxT

cGFjaW5nPTAgY2VsbFBhZGRpbmc9MCB3aWR0aD0iOTAlIj4NCiAgICA8VEJPRFkgc3R5bGU9IkJP

WC1TSVpJTkc6IGJvcmRlci1ib3giPg0KICAgIDxUUiBzdHlsZT0iQk9YLVNJWklORzogYm9yZGVy

LWJveCI+DQogICAgPFREIHN0eWxlPSJCT1gtU0laSU5HOiBib3JkZXItYm94OyBGT05ULVNJWkU6

IDEycHg7IEZPTlQtRkFNSUxZOiBSb2JvdG8sIEFyaWFsOyBGT05ULVdFSUdIVDogNjAwOyBDT0xP

UjogcmdiKDUxLDUxLDUxKTsgTElORS1IRUlHSFQ6IDE4cHgiIHZBbGlnbj10b3A+bmsuY2EgJm5i

c3A7QWRtaW5pc3RyYXRvciBTZXJ2aWNlcy4gQWxsIFJpZ2h0cyBSZXNlcnZlZDwvVEQ+PC9UUj48

L1RCT0RZPjwvVEFCTEU+PC9URD48L1RSPjwvVEJPRFk+PC9UQUJMRT48L1REPjwvVFI+DQogICAg

PFRSIHN0eWxlPSJCT1gtU0laSU5HOiBib3JkZXItYm94Ij4NCiAgICA8VEQgc3R5bGU9IkJPWC1T

SVpJTkc6IGJvcmRlci1ib3giIGhlaWdodD0zMj4mbmJzcDs8L1REPjwvVFI+PC9UQk9EWT48L1RB

QkxFPjwvVEQ+PC9UUj48L1RCT0RZPjwvVEFCTEU+PC9URD48L1RSPjwvVEJPRFk+PC9UQUJMRT48

L0JPRFk+PC9IVE1MPg==



--===============6826820915113449848==--

Web/SEO/App spam from Microsoft Outlook

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 28 Feb 2025 04:23:00 -0700

Received: from mail-northeuropeazolkn19013069.outbound.protection.outlook.com ([52.103.32.69]:31942 helo=DUZPR83CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.1 (FreeBSD))

(envelope-from )

id 1tnyRu-00000000GYw-2Pp4

for dave@doctor.nl2k.ab.ca;

Fri, 28 Feb 2025 04:22:41 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=P4tgM2/6kFqqK8iglE5hfvJ8xN5Y57ZzAjbGwJhZlVSTJzXzDAWgKVNV7f0mWjZagCtetM2IpvbuPZRGtBfxj/r+UqhiA+Ssu/QeS5FnyzVnjgzuAeY0xmZlMx8YWTTeES9x+bs+mjRG9Wa1+i+mw9G1ohg/ErS0PaPdHhl52E/VfB462jE2f/lZRyhk3s5iTN8kTRQUQOYZJubD2+BWb/+edyzjBPk8QuxLfTtjbllKRqHxVpmZPRTt2zX4x7NngY3O3tOOtYWo0KW7WZeePLyWFuTMAl8391MgCNVdy+44zcZNJ/0sumeToeS2cRioTDm/MqktRcQ1sMSaTqsBCQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=g/ZsLxKb+3jjCWRspWI3MmWRxVgjpmyt//4iDmvtiQo=;

b=Mf9B51OchU7rhGKopu0esXfcva5bW1OOxQyQLxVGc+/BxwnExgD6q1YwVy+U7fpvdCceZtsRAjD7dmIbzTQntc3E43cTxiv8I10PrmYB6ChqsunLgZ+21v5w1Ucxq6hJw8fkTqghWUTtH4qP5HN78bYqHFBPt9tPwzOtQvIK7BkgRPKe1v2HLzxvg6FrwtAmhl/VYbX3kGp350UXZ0CtFFt6eCprieBIw6PdeS5Y2bGDZP4d1OClXcbI2PXR++lqmek66PUT3HCKr8IuG4nSqtIQPR68EIop5wftrpRB6Alk48e5Wy+sJnf40f4av3DTyIG8kIG6Jv1XBTwW19a5kA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=g/ZsLxKb+3jjCWRspWI3MmWRxVgjpmyt//4iDmvtiQo=;

b=F1XGPruGeFj2aERrHngKWUz+CHFM69CHjukAj+SrdQGpQRabn0vuhzuOx/n1UBBIEhEtwo11xSHVzI9Wht0D5k8a4QG+mMMF/hZ+2B8vc9gupTUmaUi6B2PNcqLKnLtFwjgqFDG6V5EXJwyaQQP/UBOmxjynwVJ+KcgAFa3C0WSadTXxkezKJ1cjLDq7/mQNBKl3YIf/7lfTI8quB6/wPME9ebCTAUgSzCL+pWldveGpFM9JNthqbrFeXg3aLuYFr3it6HoOHnZs487EjlHb1QaDsIEglmh13ALZhAvT7wGkPrUzNgjrmRhM0NhUZPmPDRVMVebc6KAsvwRlBUScVQ==

Received: from VI1PR10MB2159.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:803:80::25)

by AS2PR10MB6425.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:544::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8489.19; Fri, 28 Feb

2025 11:20:30 +0000

Received: from VI1PR10MB2159.EURPRD10.PROD.OUTLOOK.COM

([fe80::9b98:371:2ea2:9aa4]) by VI1PR10MB2159.EURPRD10.PROD.OUTLOOK.COM

([fe80::9b98:371:2ea2:9aa4%4]) with mapi id 15.20.8489.021; Fri, 28 Feb 2025

11:20:30 +0000

From: Jenifer Haine

To: Jenifer Haine

Subject: errors..$%

Thread-Topic: errors..$%

Thread-Index: AQHbidKhwK3ztbrz2Ei3Xk+PaNeeqw==

Date: Fri, 28 Feb 2025 11:20:30 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: VI1PR10MB2159:EE_|AS2PR10MB6425:EE_

x-ms-office365-filtering-correlation-id: 9a2bfbc6-4b00-40f8-f03e-08dd57e9e923

x-microsoft-antispam:

BCL:0;ARA:14566002|7042599007|8060799006|461199028|15080799006|6115599003|8062599003|15030799003|19110799003|440099028|3412199025|102099032|1710799026;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?0OjTdrSAKI4ykrn6UjMk/FBJ4gxJp21WPnDweaXGC1Q5HlsqEy84g+tmT/?=

=?iso-8859-1?Q?d8pUrWSnyOTCKKqBmtuRZOUYv4FT7lciL0cvSBXnXx5tYhbjO5GW7CH4A+?=

=?iso-8859-1?Q?EUQeGc4OhpqpcmIFRbLjsLcdcFK6VRBP/Jv1A6QQ6QQyj9m5aDd9N/wMe9?=

=?iso-8859-1?Q?+KuuatBHemG/BLUiRTJ2Qtos3pizWKA660oElQm5h3YIkVGZy78qqbhtJJ?=

=?iso-8859-1?Q?N9jJiYU+zV84zNPAvg9abHqSW3P1tdxM0O6Wjh5UVidkxx2UAXROwvcZ+z?=

=?iso-8859-1?Q?YjPO4rjyyYnGjNxfYsQO8LMtPTDBOgrLn4mH+Rjt3Wha55hCPYH5e8l1Zr?=

=?iso-8859-1?Q?4MILnvh1AuDgIGkZj5SWbPSB8rzIOEeGBXX32/wlSVEyjpfzb9iYVpimCv?=

=?iso-8859-1?Q?tf5SVyBcc3XBYYEheXlY7MBoqjbSeCIWs3FpBC0PBvGrFnShAvHDtmegmO?=

=?iso-8859-1?Q?4DEErzI/JxDuAxNq3erBkNT+pPUrlyZBy6bWb/PgpOl9TOz0jL7vI5G+5s?=

=?iso-8859-1?Q?3lz5uM5k0J6Ai6KHCmuGIY1EcTCUB4mzzCMtlQarq7a06CB49Pr+46O5mR?=

=?iso-8859-1?Q?9zjhNRNh1npQ/O0IezDXSsHxEtp8jOa1lk4fhPNbyJLRyCCY/gxnYjr/j3?=

=?iso-8859-1?Q?ZajuGtt6H2YNH9lFLKBZqUWGZZs87UBCsUN1MO9g4qmHWO9Fut0fIV1w0u?=

=?iso-8859-1?Q?nYiUKDVpZuZHQy1pAuXqbQMdxyIvvM56Vbfom6RxH9qIL4uOlzBR5AyX+/?=

=?iso-8859-1?Q?cs3TUypej2wgPxmqnRkNfMo6m37zZMtRdhu2MGvPl5Ydvh54BLUaUQaDXo?=

=?iso-8859-1?Q?z/T152dhqAibf3euaL9O2dk208De1lg4u9Q93zX87dbv3vRMALao7nqg5w?=

=?iso-8859-1?Q?UY2hMnLSSfXbmX1kWaOiJ3Ny3Izb9LlM1PhAhKAmUY0j/ZRr1GYdur6eHr?=

=?iso-8859-1?Q?RBSQ52HETiJteAupsJnbF4MY/7bFD6l8YPgomhMdjsbU+qKCgUCFzD49N+?=

=?iso-8859-1?Q?Y42JavgCriEYbN43uByW8VsM+m8jn1mXPRsVLFwuVjma/qsPyl25eX5l/c?=

=?iso-8859-1?Q?Gl0toTjsZDrFkLe65a5+JKoczhjdNSfnfKjWAPD/+gAqg9eMMb8QR0YcoU?=

=?iso-8859-1?Q?+IQkMJV96qLNdm+cJwSlUzwjcL/wCiKtD3Djsle3W2tgxftBYze2RAV7tP?=

=?iso-8859-1?Q?+f55hBATs4wPVCqazw3dr0exTONYUu9pi+U=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?goN2+9k1Jp/keE1Y1HyLJzyUX2eK8f/rByGmsfzifEaXTIXA2VMJ0087er?=

=?iso-8859-1?Q?xPDZ0uZnBzEebcmoFiCZ+TDSdZpPj+zQlMrS5xCfGG5oMApK9eFeSCKLg4?=

=?iso-8859-1?Q?XuULZCB59X795yYt+Zb8orjn1apE4K4Kw8XbHyt0JqF1Z4FqMavt21X4FM?=

=?iso-8859-1?Q?J5GAjidHZuyvO7LK8o85l5jvSGyNJM9cMm9RIsT1U5XRG/oPCkn4uy6b4f?=

=?iso-8859-1?Q?Ud0ugy7LByM1zvBdWEhQaldq8u2QiOsQiDvCmu3g5S7QbcP+J8mgHc6VcM?=

=?iso-8859-1?Q?GhCQ6NBdDT00iIsc2moNKjLlv5zlrtxwx6X1l0ENsUX7HIUofX7QgBjeI1?=

=?iso-8859-1?Q?/Y8qJM+i3VjgzH3/RRL5ELVQlCZpe0mX+YdUSmOBqTemFO+Vm62RDN5NmN?=

=?iso-8859-1?Q?byXo3v8T2KfFWafUGz29pN7VLtxtWDCnvKWbtsPMwl6a0vExQ6g/VFF+Hh?=

=?iso-8859-1?Q?IzarIBmd/BEW8S3VX7bPXq33Ww8CouAEajwwscMGGr0lf0quaGA+gtRkOn?=

=?iso-8859-1?Q?TBVZbJRNFZkO3x0ZSSBgizZbULFGgCkCGHMLPObKFTFj6Kg1PE46y3eyYR?=

=?iso-8859-1?Q?b1SHtHlVo8kFL2MdVH4zvfZG36K6tiwETRImPcuur0NKbUZ9Rf+//WvEVq?=

=?iso-8859-1?Q?ZR9BmgkgHuN7lzjoy5cmUNuvJNWGldAeY1oJCVxgAMxNpvBsbkobrBYxjJ?=

=?iso-8859-1?Q?qc5gZA0ZhiAhzja0gllVuySFObUDwEPW7s6MHpEQH7YidjIAaL9h5YR3bh?=

=?iso-8859-1?Q?GzjVoIeRIFRxOag8MdKEc0wt0a126hAGJc/EeuiNsgizJCZTTiCJaVe++G?=

=?iso-8859-1?Q?dLRTdb86iRLYJSHebxGJntOxeNVqQeb2AV85EIaxauJ8gSLKNLnist7cr3?=

=?iso-8859-1?Q?PxImM+M4FI19GPsJfMhkcS7dvuVOjy6hCbKZqX1F9j/4Kfj+AO/kGeV0+K?=

=?iso-8859-1?Q?gCihq6hcts9CJa5kD9/qHdVNUiTNBD+n6vd3+clZb01YtJWGsF1AJeXGCj?=

=?iso-8859-1?Q?Zz/WeOeADM03YPqFOOKSrb32eBAcWhkhtwUvPCOhFrAgXsRy/cHy790GUd?=

=?iso-8859-1?Q?Ip3z9oals7lTsQHOlazsRX8WarFTB9aFZyZD9g8AcbBaJUYL51usyPeXkw?=

=?iso-8859-1?Q?JrYVOrxnW6Xbp/9aJu80xYbd06jeojLhyyMeBVuo/0jbiA0eLs7Kh4Cjt2?=

=?iso-8859-1?Q?2MRp1oMDfhNJf+csAZYM0lK73A2lCdhQXo+gvRwJK8QzMEV8kbTOSNSBEF?=

=?iso-8859-1?Q?4W69nJHVvtc6boqYzEFVpQ2N2ejWYiwzpPM0KVuyby2BPvgAoiSCqGEJfU?=

=?iso-8859-1?Q?3DY8/0s9C4BZCr2aa/j16w7VJKd1yskwVnVsv60hHwW26jJdC0pAklvGRq?=

=?iso-8859-1?Q?6JFgB8R+zi?=

Content-Type: multipart/alternative;

boundary="_000_VI1PR10MB21595946C7EBC05626F4EC8BBFCC2VI1PR10MB2159EURP_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-7719-20-msonline-outlook-4359a.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: VI1PR10MB2159.EURPRD10.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 9a2bfbc6-4b00-40f8-f03e-08dd57e9e923

X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Feb 2025 11:20:30.6361

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS2PR10MB6425



--_000_VI1PR10MB21595946C7EBC05626F4EC8BBFCC2VI1PR10MB2159EURP_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi there,



I was checking your website and see you have a good design and it looks gre=

at, but it's not ranking on Google and other major search engines. Do you w=

ant more targeted visitors on your website?



We can place your website on Google 1st page. Yahoo, Bing.



if interested, May i send quote and price.



Thanks in advance!





--_000_VI1PR10MB21595946C7EBC05626F4EC8BBFCC2VI1PR10MB2159EURP_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=

alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hi there,



margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=

alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=

alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I was checking your website and see you have a good design and it looks gre=

at, but it's not ranking on Google and other major search engines. Do you w=

ant more targeted visitors on your website?



margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=

alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=

alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

We can place your website on Google 1st page. Yahoo,  Bing.



margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=

alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=

alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

if interested, May i send quote and price.



margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=

alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, C=

alibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Thanks in advance!



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">












--_000_VI1PR10MB21595946C7EBC05626F4EC8BBFCC2VI1PR10MB2159EURP_--

Desperation spam from Microsoft outlook

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 27 Feb 2025 18:20:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.1 (FreeBSD))

(envelope-from )

id 1tnp1z-00000000B5W-0V0p

for dave@doctor.nl2k.ab.ca;

Thu, 27 Feb 2025 18:19:11 -0700

Resent-From: The Doctor

Resent-Date: Thu, 27 Feb 2025 18:19:11 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dm6nam10olkn2084.outbound.protection.outlook.com ([40.92.41.84]:13760 helo=NAM10-DM6-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.1 (FreeBSD))

(envelope-from )

id 1tnok1-000000003ox-3ISz

for doctor@nl2k.ab.ca;

Thu, 27 Feb 2025 18:00:42 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=lU3ivV9Peqhy+T1L+OlAQvT2JKIIj/nRyRe70Y2BpEDmmJZv97xzl2DZBZ9+nzw3xi2Dj7yX9GohzfRtS+Fou2nRnwJzGb+Q1k8o2nS0hVTWI83W8gJWbvMoLJSvJqBYbEpIqgtlsn2YGcLW/oKR3+3M2fmuJMESQcfe9UkqYpsB5ByYZ0U9T3yBTXKjqEfGPWjtf31tiIO5OiXtLQqnuIaTup9wgwloWnAcgXBJbcvb68tmz2r55wfLz5ls07f5E3/fxGbH42ry/oGbLA3Audl9tVGKKBxc/W5jFHIqZzcGqrMUpWVXDpx17t3qZe68e5UiIf0k5W5VdH314qUV0A==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=IhoghvVdhUKuLZ5G/34+S34z702QWPRlkwJz97C0Sq4=;

b=aBXqThawhj794xWrJQ+i/tAB0lmPSsfzsMBot4kM2y7r1MNcuKnwyRU5PhtRtIm+kPqXLQhJdu09Fkkya1MPh+tnW/7QOUzm1jZsglzFrbd7CO6qgZ053QxKWvH026mggyqPhhtkIWJH4dFIG0Ul4Lwyee0pXuBaLvUCz9JXeRBNBbjPD7ZRXFpSfw2RvdbHR4/XeH1UOkQX3Kh3Jxvsw+GGOWFInfCuxxQVtXcGAGzB/JDK0dKwBod6r2X8pAmvHTEPpzwSyqxzmNCIvUUf2ghQxMRfb0+VfgZOv6ROrIwPRqS3iv+HDIKbegPLQCOdkxE4GHYL6/Fj5DUi04bJ3w==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=IhoghvVdhUKuLZ5G/34+S34z702QWPRlkwJz97C0Sq4=;

b=Teu5QZ301W4fXRlu4OPCMStEQo0Hz9hmPuZOd3VvsNevuUNrFu+3wVlohotvJ3Gd9NSM1eSqbx/Q9mJOWLa35OuZPx+Z6I8Yfn1199KHzJGKRmstHg82vjAUUv7Jmqvpc6/QpNKSGZJ0m6Y/pTfL+Q2ZeRGr2iLA9lVl1C2ZNgAJGatJl+hv2Yv68deD7/IyJd6LPtfQhfv8oi6+P8owEJfUsf/aLQR93MNVTH4X4IrNJmjcjNK3mo20zaIOc9xZCvrImBKxWVd8hEts9lFcCDmY6yWmsFfuwy5vm28SAAvShkZAX9fp9YNFcnVbvs9wOUskWIfQ03VIoBDcy13UgA==

Received: from DM6PR20MB2572.namprd20.prod.outlook.com (2603:10b6:5:1a3::28)

by SJ2PR20MB7154.namprd20.prod.outlook.com (2603:10b6:a03:57a::14) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8489.20; Fri, 28 Feb

2025 00:58:27 +0000

Received: from DM6PR20MB2572.namprd20.prod.outlook.com

([fe80::274c:dd54:ed23:c337]) by DM6PR20MB2572.namprd20.prod.outlook.com

([fe80::274c:dd54:ed23:c337%4]) with mapi id 15.20.8466.020; Fri, 28 Feb 2025

00:58:27 +0000

From: sales sales

Subject: Bearing Ltd;

Thread-Topic: Bearing Ltd;

Thread-Index: AQHbiXvI0lvUHR4/Bk28FD+LDHCQAg==

Date: Fri, 28 Feb 2025 00:58:27 +0000

Message-ID:



Accept-Language: zh-CN, en-US

Content-Language: zh-CN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: DM6PR20MB2572:EE_|SJ2PR20MB7154:EE_

x-ms-office365-filtering-correlation-id: ca1fa523-d401-470e-feca-08dd5793028e

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799006|461199028|37102599003|8060799006|19110799003|7071999006|15030799003|8062599003|440099028|3412199025|102099032;

x-microsoft-antispam-message-info:

=?gb2312?B?UjZyUHBPTUxoZncrU2MwanR0R0lmTlY4RUhmb3hyeUxDTHlIaTRMVW02L2ZS?=

=?gb2312?B?cnVNNTkwS0pZc1gzWEhhUUdha3pXc0kyY0N1cFpwTWh3R3djVVdOeTNaT0hY?=

=?gb2312?B?UmcyeEhVd2FjY3A4eDU5VHhQZDVmSzYySTUxNUxaUm4rUUl6VmFPUzc3UUlN?=

=?gb2312?B?KzVzWk5GamMyMU5TcG5wRzliNWlEcHhvVlBvL0g2ZHhKYnRyQ1V1cFRRREdl?=

=?gb2312?B?c2VrUXAwbUxwdmVISzB3MjBuLzVDK1BPN0xwMDVWdVl1WDNwU3hQYTlpV1R6?=

=?gb2312?B?Vkw4QlJHRnp2ampuSFRNT0o5Wi93bktjLzZNbmRHalpSMVc1MzV5VHora3p1?=

=?gb2312?B?WWVKQ1FSR1VxdDFwbWZWM2VEZ3gwRXp1UXZUUUJCQzIzNDB4Q2xHNmJqRGZ5?=

=?gb2312?B?REdxaldnYlhDRmdsQmg4WVBlb0pBWDdyY0tsNmtCREtTbWx6MCt3T3RWeWs2?=

=?gb2312?B?RGJwZVdOWWFEOWxSQkE1ZXlzZk1JNGNtRDFRSjRHaUljck4rcVFnM3FZTU90?=

=?gb2312?B?ckJBWGt0NHBxaFNicURWb0RvNUxQaUFRL0pRbEdZZWp0NnQ0VU1SQ3hvM1Vn?=

=?gb2312?B?Si9pMDUyV1JWV1BTTjNuNjJ1M1k4MnB2T0lGQjF2cXpYMEpybVgyK0JSblp3?=

=?gb2312?B?SDlnRFV2cnJKa1pwVGkxS05VQTNVT01uNWVvWVlrc3ZsU1JPeWdiUThlNFk0?=

=?gb2312?B?ZjZOR3B2eUF5T2ZMVFdneDR1YUcxd3hDQUFkNEJjR00yT0FRcGoweFMvNVQv?=

=?gb2312?B?a2hWV3RRc0gvYlF5UG1pUjRrWkJOdWVCTlhhN0YwTXh6LzN2aHVkSU8wbkli?=

=?gb2312?B?VkdEeExLK0dXTVdiWVdTK3h2eTZKQ25XR0p1U3dwbmdLQmFkS3lIVFdWdlVr?=

=?gb2312?B?VWhQT1NJU2Q1TUs3ZWl0UTR1TDFLdkhjYXF0eW9PYzNNaGxDQVBQS3BXQ3Jk?=

=?gb2312?B?dzVvKzIrN3JXTDdsMjRSdzNETG1yb0ZKWlJLclp6OU1LTTZaTm9xQ3JSUzdo?=

=?gb2312?B?T21TM1ZKMHlpaE93M1hvZ3JIazUvYnlSTHpaZnM1S1A0OHJDVVh5VkkxRmJU?=

=?gb2312?B?REpVZEdVVTV2alZqN25LVjVkR2R5WHlyYk5IcHFlRXlHUE5jMGo4UmluV1do?=

=?gb2312?B?Y2RrelQvZVVwbGg1aVBJUU9HQUEzRXpLYWNia1FNRUEvUUF0eHJhSFhIVU8z?=

=?gb2312?B?dUlHU0RlbG1oMVZVc0src29FNTJaOUlSS2VUR1oyNFlKTDFSekM4K0hTMm1u?=

=?gb2312?B?b1A3QUVUbGRzQ1ltZGh0VEZYVjdKRTZEdnkyVzZOVGUxZmZqWFJWM3Rpd0NN?=

=?gb2312?B?eDQ3dFJsY2ZOSjgxalZRKzdTRUxmRWl6dFRtUDhSRnA2WWlPQnVSSkNvTjEx?=

=?gb2312?B?bEhHSGNGK2IwaFhDcFVDdnRXU0hZY2tZNi84WDROUjNEa1ZuMVhGem1NQWZ1?=

=?gb2312?B?S010N0Q3UDMwZGFGaE05Wk1HNXFoR3lUd0NPMmg2ZHR4OW9lUnN5S1B2NHRi?=

=?gb2312?Q?1dY4MlyVIvqqN0YhyvlXXDYN8M2?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?gb2312?B?c2w4cHBES1VWWVE5MUh5b0dPekljbXQ2ekRKcXUxY0crL05aUHAwMVBJRTZM?=

=?gb2312?B?Y09aaDBGSDlUM2JWTDIrUURNelIyZW9EUkh1NUpxT1dUcEZwOVQ3bzVSVWZa?=

=?gb2312?B?bWpla1lxK1dBckJqVGM2eVdLM3MvYVdkd1g2aXVDdTlZRlNxc2IxQkZPODFr?=

=?gb2312?B?RFA2MXJiNXRjUGpXQk5VSUNPV09tY3ZmMjhFeGVaWTlLcjMxcnROUDg4VzNM?=

=?gb2312?B?dFg3U3YyRlc2aW1vRGZqVlBJUWtRVGFxVWRkSG5Ob1lBMGZJejYyYlFiNWlp?=

=?gb2312?B?eVJSczFoWGsxejlQWk9IZDdEU24vOE45Um1hTW1mVm1vNGZjd25IVUU4WVBL?=

=?gb2312?B?TkFNSytDQlZWbFdmS3RDeDBmd3VZZzBKVE5SWFJkRXMvTFZ5UUIrRkdtOFg0?=

=?gb2312?B?UWJaRjdybnlXbERQT1ZIeXg5OHNJcmp4anlEK1RXc1MwWFBqM2RjZ0FVR2xX?=

=?gb2312?B?aU9iWlo1c09ISHNBTzdadGFhNDZDU3FTUWJFRHVJbThIck50UGZrS2w5N21X?=

=?gb2312?B?WG1VL3QzU3ZiSSs1dHJLZU9Mdm1ZeU1vdmpaWXVCRFpxam9FMmU2dUJsYWlY?=

=?gb2312?B?TUlyUUN5UjV6aFRaT2w1b3U5MlpsQzEvNWNSTGRDSmFZTUlnUStpQjJwd3k1?=

=?gb2312?B?cUtsY20xb0RUQXN1Skg4ZTduOG9UZnJQbGNJVHcwMnhyUjFObjYrelZJSnlQ?=

=?gb2312?B?cGwydkdvbnFXbElZazJlS3BUTERYWXRZRTR6MzdIVENybUorSktnWFFqM0lN?=

=?gb2312?B?ZHFHSzYrRVpLU2NZREFjUmVjNXdkOHFFeUoweitUdytYQ2ExUmdLeGlTL3c5?=

=?gb2312?B?dzFLbGU1V08rcFAwMWJMT1Z2RHI0ZmFxL3paaDUrcHRJamVCWFRsMlM2VXFt?=

=?gb2312?B?ZjAzQWhTc3d5eDJvVzZyVFVOaEE2TEFtQVRuK2NuZFlYNDIyZi93L0puMjBN?=

=?gb2312?B?bzZiYncxL285Y2VCaFR2aENpNzVuQ0RWZ3VRWVNVMjJlTCtGaVVWSDEzWVA2?=

=?gb2312?B?ckorem40YmhNZTQvSEd5VXhmYnI2QTRrQnV0cXNNRUZkeUVCZk9zOTU4UllD?=

=?gb2312?B?RFg3cGxmOGJkSjFTaDF3N2pJeHUyaHZWTFJNdWpkU1MrTWcwMW44NGswNzg4?=

=?gb2312?B?cS9ER1krZTNGVDNWUFJrVUpLUVgzTzRISlQ0ay9ma1J1N3VxNzIyVnEzWDZF?=

=?gb2312?B?dkttMHRReGdZZFRZSmtrTXZvZTFBc2NGa1J2YmpHWjl2eHdnd3RhcG5wYk1p?=

=?gb2312?B?bytGNjVTS0NLdU1jZWhDbmhZcUZLUC82bmo3VlFZRkhEcUMwQWhZWmEwajhO?=

=?gb2312?B?MUN6U1VFUGJkSTh4Y3UzaWNEM0tCZXJLUUQ0ZU5laXdiOVNnZURndjl1MVlU?=

=?gb2312?B?cXJpZDhOem9nbDhvSmcxejhJb3c1UGlpYkswY1NYZVFBUXFOUGcvZGRHS3N2?=

=?gb2312?B?UU9wM0o0WkwyNTk0QXdIa1UvSVlXaTRzQ2dyZnJyWDVlMFRIOXdLcEhxVmN1?=

=?gb2312?B?Q1IxMEV2Z0tuNVJKMUZhcVRHanNDTVpIMEQ2UW9BVE1BUFlmcVl6TXhPRGpL?=

=?gb2312?B?RGxkT2EreDZTQ0ZPUDI5L2NkV240RkhCTjNySlF2TDRNdk9xa2hXYzdSMmUv?=

=?gb2312?B?QkplK0lONDZMZGJjdlpSRGtBQUt4MkE9PQ==?=

Content-Type: multipart/alternative;

boundary="_000_DM6PR20MB257225B2F3597BFB5BC9F8A0AFCC2DM6PR20MB2572namp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: DM6PR20MB2572.namprd20.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: ca1fa523-d401-470e-feca-08dd5793028e

X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Feb 2025 00:58:27.0600

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ2PR20MB7154

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi there, Good day! Do you have a recent need for Bearing

Product? We can estimate the cost according to your design. I believe our

factory can give you reasonable price and good quality. We are very professional

Bearing manufacturer with more than 12 years experience.



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10b6:5:1a3:0:0:0:28 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:1a3:0:0:0:28 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:1a3:0:0:0:28 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:1a3:0:0:0:28 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:1a3:0:0:0:28 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:1a3:0:0:0:28 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:1a3:0:0:0:28 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:1a3:0:0:0:28 listed in]

[will-spam-for-food.eu.org]

[40.92.41.84 listed in will-spam-for-food.eu.org]

[40.92.41.84 listed in will-spam-for-food.eu.org]

[40.92.41.84 listed in will-spam-for-food.eu.org]

[40.92.41.84 listed in will-spam-for-food.eu.org]

[40.92.41.84 listed in will-spam-for-food.eu.org]

[40.92.41.84 listed in will-spam-for-food.eu.org]

[40.92.41.84 listed in will-spam-for-food.eu.org]

[40.92.41.84 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.41.84 listed in dnsbl.ahbl.org]

[40.92.41.84 listed in dnsbl.ahbl.org]

[40.92.41.84 listed in dnsbl.ahbl.org]

[40.92.41.84 listed in dnsbl.ahbl.org]

[2603:10b6:5:1a3:0:0:0:28 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:1a3:0:0:0:28 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:1a3:0:0:0:28 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:1a3:0:0:0:28 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.41.84 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.41.84 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.41.84 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.41.84 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.41.84 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 ARC_SIGNED Message has a ARC signature

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[salesdp69(at)outlook.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[salesdp69(at)outlook.com]

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Bearing Ltd;



--_000_DM6PR20MB257225B2F3597BFB5BC9F8A0AFCC2DM6PR20MB2572namp_

Content-Type: text/plain; charset="gb2312"

Content-Transfer-Encoding: base64



SGkgdGhlcmUsDQpHb29kIGRheSENCkRvIHlvdSBoYXZlIGEgcmVjZW50IG5lZWQgZm9yIEJlYXJp

bmcgUHJvZHVjdD8NCldlIGNhbiBlc3RpbWF0ZSB0aGUgY29zdCBhY2NvcmRpbmcgdG8geW91ciBk

ZXNpZ24uIEkgYmVsaWV2ZSBvdXIgZmFjdG9yeSBjYW4gZ2l2ZSB5b3UgcmVhc29uYWJsZSBwcmlj

ZSBhbmQgZ29vZCBxdWFsaXR5Lg0KDQpXZSBhcmUgdmVyeSBwcm9mZXNzaW9uYWwgQmVhcmluZyBt

YW51ZmFjdHVyZXIgd2l0aCBtb3JlIHRoYW4gMTIgeWVhcnMgZXhwZXJpZW5jZS4NCg0KTG9va2lu

ZyBmb3J3YXJkIHRvIGhlYXJpbmcgZnJvbSB5b3UuDQpCZXN0IHJlZ2FyZHMuDQpBbmR5DQo=



--_000_DM6PR20MB257225B2F3597BFB5BC9F8A0AFCC2DM6PR20MB2572namp_

Content-Type: text/html; charset="gb2312"

Content-Transfer-Encoding: quoted-printable
















nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hi there,



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Good day!



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Do you have a recent need for Bearing Product?



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

We can estimate the cost according to your design. I believe our factory ca=

n give you reasonable price and good quality.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

 



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

We are very professional Bearing manufacturer with more than 12 years exper=

ience.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Looking forward to hearing from you.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Best regards.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Andy








--_000_DM6PR20MB257225B2F3597BFB5BC9F8A0AFCC2DM6PR20MB2572namp_--

followup spam from google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 27 Feb 2025 18:20:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.1 (FreeBSD))

(envelope-from )

id 1tnp1s-00000000AzS-2mvE

for dave@doctor.nl2k.ab.ca;

Thu, 27 Feb 2025 18:19:04 -0700

Resent-From: The Doctor

Resent-Date: Thu, 27 Feb 2025 18:19:04 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f44.google.com ([209.85.216.44]:50632)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.1 (FreeBSD))

(envelope-from <28113@sakaeoschool.ac.th>)

id 1tnoVN-000000001o0-2TGV

for doctor@doctor.nl2k.ab.ca;

Thu, 27 Feb 2025 17:45:34 -0700

Received: by mail-pj1-f44.google.com with SMTP id 98e67ed59e1d1-2fcb6c42c47so2482214a91.1

for ; Thu, 27 Feb 2025 16:43:36 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=sakaeoschool-ac-th.20230601.gappssmtp.com; s=20230601; t=1740703411; x=1741308211; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=6f0lfSYItajq4aeNE7ycqQ/PlSh4d9iLq10ZIMzpNVY=;

b=COdlOZTz1uK2JRSZ3ZK6aCrRMT/a3ZNonZuycnqBkWoomRc48Lq9BNuzqObdb/vUVe

O5S+3ToA7mteScTd1d+ldhxTlR19IPiYh6K4uXPkebZDOPCLfm31979zrl2OUvZKuW0a

Rrl44P1D7ngfpzlmr6gOPIz3A8AP/K39vKhdVSGNMVpPhtIGvlhtcPR1iMvwYB02O1km

sIq3f3DdbV96xPG/IgUfiQTH6pYco3QyPVdRSYc8ZmHJXH4pV0mGn/lksHMs1cD8BofL

DeI4YWSEiLcuwU8JVa1A8qAp00XA8qK4T9Vju7jwX3v30Cx3dGnPtGWuAggSaddGkt6Y

Rygw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1740703411; x=1741308211;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=6f0lfSYItajq4aeNE7ycqQ/PlSh4d9iLq10ZIMzpNVY=;

b=CEwv0gPROBjmm9baMPFgeTuFA4yUx7vqVUGDB4ciM+411l4Ln1kQp2qUHORUPYxj9/

2cq7dfx6HbbYSQRVtmjhk2EfbN8SrkvdTTcYubrNu68+mXBs4OA/QSghLGr8LIuVDdFb

TKDDT0hIYgV0ZwumxwKbuC37TYcTAkopdO8QMJxnkXd/815ksFX/VW9U8xAwY9Kdyi0t

HKOhwDgn+lxJL9iTKDatqWO7h0iAik/tDLncM5GixNi/8gTIWn9VOd5aiBZg38YuzG2v

UG+Bod66Cv2AG0UEzeMJ+h4z9z8VFWdEvYz5XauQylu1QZwrV1Mi2ijnhy93rUzlL/JK

FgvQ==

X-Forwarded-Encrypted: i=1; AJvYcCUZ5Iley8qxX4UYJdO8JeJkuCYUhCL4BhC7jVyKlix7XCihToi3brZlYqBldsk36lXhPB02BuE=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YwFwFYZpbtg1RdpbV3CEyxJ+OuHwjaOYQaTpkI1Jx8Cqx2+5L5Q

2ENBR6Nsb1SAe4HnlgU9Ux120SwpWM+guEaghSJaKQadwsSG/EDdjAirv4070VE1a9C37Cb5WzE

pfpaAios5vWbCwN7RG5HJzxJAOYaJsSlhu0HDxg==

X-Gm-Gg: ASbGnctlM6K7LQDAfoVGTUaUqhCG2o8qiILhDTRLdAqCPztJgqn+G0dJ0Y7v9EKUAre

OJmG7uxCht4qtdaIVdgqx8t1h/8s8KgsohDjBhUuX3GJR+5iLZCLVoZnQNKSkqVQwEKk3N81K4q

ZCV4/ty+cB

X-Google-Smtp-Source: AGHT+IE3MsAKzPnJDbS8ULp57rbW5vCX0Jwp1V2G9Hw4Twj/J7nGVTJv460NX9R3LsWuy84DRzTK6KFXryf5tD2ju1U=

X-Received: by 2002:a17:90b:394e:b0:2ea:37b4:5373 with SMTP id

98e67ed59e1d1-2febab5ba76mr2422420a91.10.1740703410619; Thu, 27 Feb 2025

16:43:30 -0800 (PST)

MIME-Version: 1.0

Reply-To: na3e.r62@gmail.com

From: Nadine VIOUS <28113@sakaeoschool.ac.th>

Date: Fri, 28 Feb 2025 00:43:05 +0000

X-Gm-Features: AQ5f1JpSViN4dHNghNVMqBMBlTi5EydnsOhh99X8vLXiLIqZ--oArfxQjp0v-nc

Message-ID:

Subject: Hello, Read and reply

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000731cd1062f291849"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 6.5

X-Spam_score_int: 65

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello How are you, no response from all my messages regarding

the offer, I send another letter please reply if received. We have an important

discussion. Have a nice day Nadine Hello How are you, no response from all

my messages regarding the offer, I send another letter please reply if received.

We have an important discussion. Have a nice day Nadine



Content analysis details: (6.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.216.44 listed in will-spam-for-food.eu.org]

[209.85.216.44 listed in will-spam-for-food.eu.org]

[209.85.216.44 listed in will-spam-for-food.eu.org]

[209.85.216.44 listed in will-spam-for-food.eu.org]

[209.85.216.44 listed in will-spam-for-food.eu.org]

[209.85.216.44 listed in will-spam-for-food.eu.org]

[209.85.216.44 listed in will-spam-for-food.eu.org]

[209.85.216.44 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.44 listed in dnsbl.ahbl.org]

[209.85.216.44 listed in dnsbl.ahbl.org]

[209.85.216.44 listed in dnsbl.ahbl.org]

[209.85.216.44 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.44 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.44 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.44 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.44 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.216.44 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.216.44 listed in sa-accredit.habeas.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.44 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.216.44 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.216.44 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.44 listed in list.dnswl.org]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[na3e.r62(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Hello, Read and reply



--000000000000731cd1062f291849

Content-Type: text/plain; charset="UTF-8"



Hello

How are you, no response from all my messages regarding the offer, I

send another letter please reply if received. We have an important

discussion.

Have a nice day

Nadine



--000000000000731cd1062f291849

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable














































-family:"Calibri","sans-serif"">
ily:"Arial","sans-serif";color:rgb(34,34,34)">

=3D"font-variant-ligatures:normal;font-variant-caps:normal;text-align:start=

;text-decoration-style:initial;text-decoration-color:initial;word-spacing:0=

px">


al;font-variant-caps:normal;text-align:start;text-decoration-style:initial;=

text-decoration-color:initial;float:none;word-spacing:0px">Hello

an>

-align:start;text-decoration-style:initial;text-decoration-color:initial;wo=

rd-spacing:0px">


al;font-variant-caps:normal;text-align:start;text-decoration-style:initial;=

text-decoration-color:initial;float:none;word-spacing:0px">How are you, no =

response from all my messages

regarding the offer, I


mal;font-variant-caps:normal;text-align:start;text-decoration-style:initial=

;text-decoration-color:initial;word-spacing:0px">


al;font-variant-caps:normal;text-align:start;text-decoration-style:initial;=

text-decoration-color:initial;float:none;word-spacing:0px">send another let=

ter please reply if received. We

have an important
discussion=

.


:normal;text-align:start;text-decoration-style:initial;text-decoration-colo=

r:initial;word-spacing:0px">


al;font-variant-caps:normal;text-align:start;text-decoration-style:initial;=

text-decoration-color:initial;float:none;word-spacing:0px">Have a nice day<=

/span>


ormal;text-align:start;text-decoration-style:initial;text-decoration-color:=

initial;word-spacing:0px">


al;font-variant-caps:normal;text-align:start;text-decoration-style:initial;=

text-decoration-color:initial;float:none;word-spacing:0px">Nadine

pan>






















--000000000000731cd1062f291849--

Home show Regina Saskatchewan spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 27 Feb 2025 12:45:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.1 (FreeBSD))

(envelope-from )

id 1tnjo7-00000000IAH-3Scf

for dave@doctor.nl2k.ab.ca;

Thu, 27 Feb 2025 12:44:31 -0700

Resent-From: The Doctor

Resent-Date: Thu, 27 Feb 2025 12:44:31 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f194.google.com ([209.85.214.194]:45107)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.1 (FreeBSD))

(envelope-from )

id 1tniuZ-00000000Du6-1bcU

for sales@netknow.ca;

Thu, 27 Feb 2025 11:47:11 -0700

Received: by mail-pl1-f194.google.com with SMTP id d9443c01a7336-220c8f38febso26407325ad.2

for ; Thu, 27 Feb 2025 10:45:13 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1740681907; x=1741286707; darn=netknow.ca;

h=return-receipt-to:disposition-notification-to:reply-to:subject:to

:from:mime-version:date:message-id:from:to:cc:subject:date

:message-id:reply-to;

bh=6aQktlTozyPEp5fb6G1yMqqtD6orQHnSIw9a+qfCPcU=;

b=P94nTA8VTRUsrnJhSiRw25BYb56shSXpzUdOigv9dPILJ8O1CK9FpIskPc0FGYthP+

DcIrvGheshRCx5WXCOQONbDs1KyuzgxZOr5fLmi68H29wNf9ze05I1AyXxo0nwJRKxYE

qa2AvmIKI7D1GjTJSaQwUndehIkZtORjoMsfpDmL+6AEn5yTgG7kdnCgekDN3QRi5ZDu

/OamZXcitLry9XrjiL7RMOSmBvIP2p4SAKl8ONadQn4lsBxU1/zyDa+VOZkZYxTYSsUs

tuWWQnTH6f562Rq160SRR5ayNh+OOlVNmxW4hzpZk/lJtFvDok7duIqgS0KnJsogctMW

x4hw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1740681907; x=1741286707;

h=return-receipt-to:disposition-notification-to:reply-to:subject:to

:from:mime-version:date:message-id:x-gm-message-state:from:to:cc

:subject:date:message-id:reply-to;

bh=6aQktlTozyPEp5fb6G1yMqqtD6orQHnSIw9a+qfCPcU=;

b=epgJJkyKyuekG/XQOVpq8riFhAiGGjDRl9/GDeu9R8ye6NjbcVlmO0R2OKAJJUBubz

WqQf0AsyA28TPf7bPfQukw/Rg0Ck3LGbCri7tFOjhfQT/RBz4yt/nk8B+mo/A57NnvuZ

LOKzytFzSccqtT2IFrDzqY3XdeAnlMxUxtCckIraKr88RyvqSREHTrpz8A881k/x6TOJ

qVJGODAWjiXHeLiJcYFccIb66KAnGXoU+wf+0JXCN6nnnI9dmAf9fwMHGy17ui6wTmXN

2yhIpB8bsOc6iORgU6Aa3Q5DytT92W1U6IfT0OGH84PgsABRs+mYsUPuS9iGFAE3f4g6

kbKw==

X-Gm-Message-State: AOJu0YzZtqXOFJE2X7I01b/+hVgkTXBLUo0t5i3nCGbM34E6u5LZtjtp

LE/yPvL4MVNT8ES9Dk5O2t7PIXfFSVHowhwatHG5bmkHBHHiev7CkzUm2Xre

X-Gm-Gg: ASbGncslSikyzDqIjIEKO43kSGN8HIig77QnuZDBXWB3aUol62XP1wbZ7KIwXKLhuFV

0LL/gGVHT32JEsQXJYYNuqvjyESk/+xu5YU25yXMELpubiVLxgoCh4if/OWh8YDckvXD87vucWb

yggdpRcfH7TI3WDBzxmDKMsHRl/ctoC7pReE7Lj8hB7Xj4jD44oCQew2U5VGSxF4nb1OX4b0t++

u5bkQwEs3KqrQsuGtjquJnjju2vcTAjlHbloA6rZDlfIGtTsva0sXF79+FEsG3l5eyOyBsgawue

VgUF4mgeKvH8fTBl6ePH6/w7vIV/nYDJffAhaxw0MDkb03ZyiqV6uQ9F

X-Google-Smtp-Source: AGHT+IGHEPKOsli9+ea0rcmsUb7W+TpCSjv1oGmbEICEHP9dkF5h+SsDW6gHxKq5E6P2IKI7Y1fdzg==

X-Received: by 2002:a05:6a00:b48:b0:730:4598:ddb5 with SMTP id d2e1a72fcca58-734ac338532mr742506b3a.2.1740681906981;

Thu, 27 Feb 2025 10:45:06 -0800 (PST)

Received: from [169.254.123.117] ([117.193.21.162])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-7349fe4812bsm2066607b3a.56.2025.02.27.10.45.05

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Thu, 27 Feb 2025 10:45:06 -0800 (PST)

Message-ID: <67c0b2b2.620a0220.169727.387a@mx.google.com>

Date: Thu, 27 Feb 2025 10:45:06 -0800 (PST)

Content-Type: multipart/mixed; boundary="===============4602810824631027491=="

MIME-Version: 1.0

From: amelia.thomas.lead@gmail.com

To: sales@netknow.ca

Subject: Spring Home Show 2025 Visitors Database

Reply-To: amelia.thomas.lead@gmail.com

Disposition-Notification-To: amelia.thomas.lead@gmail.com

Return-Receipt-To: amelia.thomas.lead@gmail.com

X-Spam_score: 6.1

X-Spam_score_int: 61

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Spring Home Show 2025 Greetings Exhibitor,



Content analysis details: (6.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[117.193.21.162 listed in will-spam-for-food.eu.org]

[117.193.21.162 listed in will-spam-for-food.eu.org]

[117.193.21.162 listed in will-spam-for-food.eu.org]

[117.193.21.162 listed in will-spam-for-food.eu.org]

[117.193.21.162 listed in will-spam-for-food.eu.org]

[117.193.21.162 listed in will-spam-for-food.eu.org]

[117.193.21.162 listed in will-spam-for-food.eu.org]

[117.193.21.162 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

[209.85.214.194 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[117.193.21.162 listed in dnsbl.ahbl.org]

[117.193.21.162 listed in dnsbl.ahbl.org]

[117.193.21.162 listed in dnsbl.ahbl.org]

[117.193.21.162 listed in dnsbl.ahbl.org]

[209.85.214.194 listed in dnsbl.ahbl.org]

[209.85.214.194 listed in dnsbl.ahbl.org]

[209.85.214.194 listed in dnsbl.ahbl.org]

[209.85.214.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[117.193.21.162 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[117.193.21.162 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[117.193.21.162 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[117.193.21.162 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.194 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.194 listed in wl.mailspike.net]

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[amelia.thomas.lead(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 GB_FREEMAIL_DISPTO Disposition-Notification-To/From or

Disposition-Notification-To/body contain

different freemails

Subject: {SPAM?} Spring Home Show 2025 Visitors Database



--===============4602810824631027491==

Content-Type: text/html; charset="us-ascii"

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit













Spring Home Show 2025







Greetings Exhibitor,





Following up to confirm your interest in the registrant list for

Spring Home Show 2025 in

Evraz Place, Regina, Canada on

28 Feb - 02 Mar 2025.





With 9,471 contacts, this list

contains key details, such as names, titles, and emails, company names,

phone numbers, and other valuable contact information to help you connect

with leads and opportunities.





If this meets your needs, let me know, and I’ll provide the pricing

information to you.



I’m keen to get your reply!






Thanks and Regards,
amelia thomas

--===============4602810824631027491==--

Cabela's phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 27 Feb 2025 12:38:01 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.1 (FreeBSD))

(envelope-from )

id 1tni2V-00000000ML7-2s9Y

for dave@doctor.nl2k.ab.ca;

Thu, 27 Feb 2025 10:51:15 -0700

Resent-From: The Doctor

Resent-Date: Thu, 27 Feb 2025 10:51:15 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [202.131.82.253] (port=39073 helo=nakliyatsepeti.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.1 (FreeBSD))

(envelope-from )

id 1tnhA6-00000000ILN-47yW

for doctor@doctor.nl2k.ab.ca;

Thu, 27 Feb 2025 09:55:08 -0700

X-Spam-Flag: NO

Received-SPF: pass (mail112c60.megamailservers.eu: domain of bounce-137744796650309472a688249@mlsend2.com designates 185.225.161.227 as permitted sender) receiver=mail112c60.megamailservers.eu; client-ip=185.225.161.227; helo=mail227.mlsend2.com; envelope-from=bounce-137744796650309472a688249@mlsend2.com; x-software=spfmilter 2.001 http://www.acme.com/software/spfmilter/ with libspf2-1.2.10;

DMARC-Filter: OpenDMARC Filter v1.3.2 mail112c60.megamailservers.eu 4ABMWUXo072138

Authentication-Results: mail112c60.megamailservers.eu; dmarc=none (p=none dis=none) header.from=adamsindustries.com

Authentication-Results: mail112c60.megamailservers.eu; spf=pass smtp.mailfrom=bounce-137744796650309472a688249@mlsend2.com

X-Envelope-From: bounce-137744796650309472a688249@mlsend2.com

Authentication-Results: mail112c60.megamailservers.eu;

dkim=pass (1024-bit key) header.d=adamsindustries.com header.i=@adamsindustries.com header.b="kOCylvyZ";

dkim=pass (1024-bit key) header.d=mlsend2.com header.i=@mlsend2.com header.b="ejLPAtpV"

Received: from mail227.mlsend2.com (mail227.mlsend2.com [185.225.161.227])

by mail112c60.megamailservers.eu (8.14.9/8.13.1) with ESMTP id 4ABMWUXo072138

(version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO)

for ; Mon, 11 Nov 2024 22:32:33 +0000

DKIM-Signature: a=rsa-sha256; bh=cpLPPl14V9s0h0cVbdytmjl5yRPl1IOQLGbVCUwAfR8=;

c=relaxed/relaxed; d=adamsindustries.com;

h=DKIM-Signature:X-Mailer-Info:Subject:From:To:Date:Message-ID:x-mailer-recipientid:Feedback-ID:List-Unsubscribe-Post:List-Unsubscribe:Precedence:X-Mailru-Msgtype:X-CampaignID:reply-to:MIME-Version:Content-Type;

s=litesrv; t=1731364348; v=1;

b=kOCylvyZdOtf//z0letFL6EFjM/136LLVVLjSn15+8qbjpVi6H8ApFAMz/ME5C6FOS4BryYh

Rqc8jXBO5O4nR6GBi+a6AjLKmIOPV2RBF3Vw1XOe+EC8KUXR8kKMGhWcUTQ9P3noojupXod0gPL

2ztY3UdBeWogCFACKyeOngag=

DKIM-Signature: a=rsa-sha256; bh=cpLPPl14V9s0h0cVbdytmjl5yRPl1IOQLGbVCUwAfR8=;

c=relaxed/relaxed; d=mlsend2.com;

h=X-Mailer-Info:Subject:From:To:Date:Message-ID:x-mailer-recipientid:Feedback-ID:List-Unsubscribe-Post:List-Unsubscribe:Precedence:X-Mailru-Msgtype:X-CampaignID:reply-to:MIME-Version:Content-Type;

s=litesrv; t=1731364348; v=1;

b=ejLPAtpVHPT9W+ZS3xHI5G0TgdOF2NgGX8kmKJd8jQYOshJRg1mNdctHphJHl2t0qJqSFVuV

hXypjcJdPmqtcLohiiL9ODlHMjYStfB8FujnTC0LXQaGUxFP4D8+2Cm7TQSwhfyvW0EtzRAn9VS

OYAYm9jYeCrZwd3FpJ0qBtro=

X-Mailer-Info: 10.MWYtBXYpdmb.MWYtBXYpdmbxMzN2gTOzYTO0EDM1MzNwMzM.rFWYuRWZyJD

Qv5Gbp5WZu42b.QMzczN0QzN5YjN1AzMwkDN3ITY2gDOyQTO....

Subject: Expiring Soon: Your Yeti Crossroads Backpack Reward

From: Cabela's Rewards

To: doctor@doctor.nl2k.ab.ca

Date: Thu, 27 Feb 2025 10:42:11 -0600

Message-ID: <1283311685137744796650309472a688249@mlsend2.com>

x-mailer-recipientid: 137744796650309472a688249

Feedback-ID: campaign137689369402148416:688249:campaign:MailerLite

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

Precedence: bulk

X-Mailru-Msgtype: 137744796650309472

X-CampaignID: 137689369410537033

reply-to: "Adams Industries, Inc."

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="==97c33426bf76daee89d71246e229b312"

X-VADE-SPAMSTATE: commercial:mce

X-VADE-SPAMSCORE: 17

X-VADE-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeefuddrudefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecujffquffvqffrkfetpdfgpfggqdeviedtnecuuegrihhlohhuthemuceftddunecundfotefknffkpffiucdludejmdenucfjughrpefuhffvfffkjfhprhggtgesrgdtreertddtjeenucfhrhhomhepfdetuggrmhhsucfknhguuhhsthhrihgvshgmpdcukfhntgdrfdcuoegtohhmmhhssegruggrmhhsihhnughushhtrhhivghsrdgtohhmqeenucggtffrrghtthgvrhhnpeffieekgeevffevffdvveettddvteeuheetfeehheegveehteelvdeutdelgeevieenucffohhmrghinhepmhhlshgvnhguvddrtghomhenucfkphepudekhedrvddvhedrudeiuddrvddvjeenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpedukeehrddvvdehrdduiedurddvvdejpdhhvghlohepmhgrihhlvddvjedrmhhlshgvnhguvddrtghomhdpmhgrihhlfhhrohhmpegsohhunhgtvgdqudefjeejgeegjeelieeihedtfedtleegjedvrgeikeekvdegleesmhhlshgvnhguvddrtghomhdpnhgspghrtghpthhtohepuddprhgtphhtthhopehkrggrnhguvghrvdesohhnlhhinhgvrdhnoh

X-Rspamd-Result: default: False [0.37 / 6.00];

R_PARTS_DIFFER(0.43)[71.3%];

FORGED_SENDER(0.30)[comms@adamsindustries.com,bounce-137744796650309472a688249@mlsend2.com];

R_SPF_ALLOW(-0.20)[+ip4:185.225.161.0/24];

R_DKIM_ALLOW(-0.20)[adamsindustries.com:s=litesrv,mlsend2.com:s=litesrv];

MIME_GOOD(-0.10)[multipart/alternative,text/plain];

ZERO_FONT(0.10)[1];

MANY_INVISIBLE_PARTS(0.05)[1];

HAS_LIST_UNSUB(-0.01)[];

RCPT_COUNT_ONE(0.00)[1];

MISSING_XM_UA(0.00)[];

ASN(0.00)[asn:396982, ipnet:185.225.161.0/24, country:US];

MIME_TRACE(0.00)[0:+,1:+,2:~];

RCVD_COUNT_ZERO(0.00)[0];

DKIM_TRACE(0.00)[adamsindustries.com:+,mlsend2.com:+];

HAS_REPLYTO(0.00)[comms@adamsindustries.com];

FROM_NEQ_ENVFROM(0.00)[comms@adamsindustries.com,bounce-137744796650309472a688249@mlsend2.com];

FROM_HAS_DN(0.00)[];

DMARC_NA(0.00)[adamsindustries.com];

TO_DN_EQ_ADDR_ALL(0.00)[];

TO_MATCH_ENVRCPT_ALL(0.00)[];

PRECEDENCE_BULK(0.00)[];

ARC_NA(0.00)[];

REPLYTO_EQ_FROM(0.00)[]

X-Rspamd-Status: No, score=0.37

X-Origin-Country: PL

X-Origin-ASN: 396982

X-WHL: LR

X-Spam_score: 59.3

X-Spam_score_int: 593

X-Spam_bar: +++++++++++++++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, You have received a newsletter from Adams Industries,

Inc.. However, your email software can't display HTML emails. You can view

the newsletter by clicking here:



Content analysis details: (59.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.225.161.227 listed in will-spam-for-food.eu.org]

[185.225.161.227 listed in will-spam-for-food.eu.org]

[185.225.161.227 listed in will-spam-for-food.eu.org]

[185.225.161.227 listed in will-spam-for-food.eu.org]

[185.225.161.227 listed in will-spam-for-food.eu.org]

[185.225.161.227 listed in will-spam-for-food.eu.org]

[185.225.161.227 listed in will-spam-for-food.eu.org]

[185.225.161.227 listed in will-spam-for-food.eu.org]

[202.131.82.253 listed in will-spam-for-food.eu.org]

[202.131.82.253 listed in will-spam-for-food.eu.org]

[202.131.82.253 listed in will-spam-for-food.eu.org]

[202.131.82.253 listed in will-spam-for-food.eu.org]

[202.131.82.253 listed in will-spam-for-food.eu.org]

[202.131.82.253 listed in will-spam-for-food.eu.org]

[202.131.82.253 listed in will-spam-for-food.eu.org]

[202.131.82.253 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.225.161.227 listed in dnsbl.ahbl.org]

[185.225.161.227 listed in dnsbl.ahbl.org]

[185.225.161.227 listed in dnsbl.ahbl.org]

[185.225.161.227 listed in dnsbl.ahbl.org]

[202.131.82.253 listed in dnsbl.ahbl.org]

[202.131.82.253 listed in dnsbl.ahbl.org]

[202.131.82.253 listed in dnsbl.ahbl.org]

[202.131.82.253 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.225.161.227 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.225.161.227 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.225.161.227 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.225.161.227 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[202.131.82.253 listed in bb.barracudacentral.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

15 GR_DOMAIN_MLSEND1 Received contains spammer id (mlsend)

15 GR_DOMAIN_MLSEND3 List-Unsubscribe from spammer (mlsend)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

15 GR_DOMAIN_MLSEND2 Message-ID contains spammer id (mlsend)

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.3 LONGWORD BODY: Uses overlong words

0.6 MEGALONGWORD BODY: Uses really overlong words

3.3 WIKI_IMG URI: Image from wikipedia

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 AC_BR_BONANZA RAW: Too many newlines in a row... spammy template

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 NORDNS_LOW_CONTRAST No rDNS + hidden text

Subject: {SPAM?} Expiring Soon: Your Yeti Crossroads Backpack Reward



This is a multi-part message in MIME format.



--==97c33426bf76daee89d71246e229b312

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable



Hello,



You have received a newsletter from Adams Industries, Inc..



However, your email software can't display HTML emails. You can view the=

newsletter by clicking here:



https://gopxop.clicks.mlsend2.com/ty/c/eyJ2Ijoie1wiYVwiOjY4ODI0OSxcImxcI=

joxMzc3NDQ3ODUwNjI0OTU0MTksXCJyXCI6MTM3NzQ0Nzk2NjUwMzA5NDcyfSIsInMiOiJiN=

WE1ZGU1Y2NkYTc1ZWQ4In0







You're receiving this newsletter because you have shown interest in Adam=

s Industries, Inc..

Not interested anymore? Click here to unsubscribe:

https://gopxop.clicks.mlsend2.com/ty/c/eyJ2Ijoie1wiYVwiOjY4ODI0OSxcImxcI=

joxMzc3NDQ3ODUwNTkzNDk2ODgsXCJyXCI6MTM3NzQ0Nzk2NjUwMzA5NDcyfSIsInMiOiJjY=

2M5NjNmMGIyZDRhOGVjIn0



--==97c33426bf76daee89d71246e229b312

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 7bit



















Cabela's - Loyalty Program






























































































































































































































































































































































































































































e" xmlns:v=3D"urn:schemas-microsoft-com:vml">



=20




le=3D1, user-scalable=3Dyes">


, address=3Dno, email=3Dno, url=3Dno">




































































































































































































































































































































































































































































e" xmlns:v=3D"urn:schemas-microsoft-com:vml">



=20




le=3D1, user-scalable=3Dyes">


, address=3Dno, email=3Dno, url=3Dno">




































































































































































































































































































































































































































































e" xmlns:v=3D"urn:schemas-microsoft-com:vml">



=20




le=3D1, user-scalable=3Dyes">


, address=3Dno, email=3Dno, url=3Dno">