nigerian spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 03 Feb 2025 03:37:00 -0700

Received: from mail-yb1-f169.google.com ([209.85.219.169]:50340)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tetoo-000000001Ax-3VYi

for dave@doctor.nl2k.ab.ca;

Mon, 03 Feb 2025 03:36:46 -0700

Received: by mail-yb1-f169.google.com with SMTP id 3f1490d57ef6-e3c8ae3a3b2so3933243276.0

for ; Mon, 03 Feb 2025 02:34:48 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1738578882; x=1739183682; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=ZGObwPm5qHjFZR6U0bAAphZ4eIjEzP9A2zgGF5nnp+E=;

b=L1qz2AGjc3nWeoLnhaiGu/e3ym4o0XR0tEu0PkXjHlWAb57p0syt35W/tUV2zOyEj3

NhE60YH//1mak4JpKn8f4HNkZe9JoEENzEF0Lg/T2vxKogzzIRntDgJNs/05IDSsNcMl

w1HB3L2mkeVcnBTOl930/wyAmg6d+qg6J8ZJoqzu8RYRTthxjIscnnMRsB6FLoaLwGOX

MO8KobB74/lcn6OZIiFjbEhq6CGBKYrTJqE/vSknNHnWDxGrVdc6kMFms6+ya4wZ+QOG

S/8vzp61tU9vVQ/lxUX3EFvt+zGE4b0UESElVdnpJLjdnDg0jsMysHWzzfrbZ0HVzlET

yXZg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1738578882; x=1739183682;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=ZGObwPm5qHjFZR6U0bAAphZ4eIjEzP9A2zgGF5nnp+E=;

b=krClsHH+8VAuSGIAcXKyJOD1eWXRnsTPo0pBorkdozGYP3BVB680CELbrjWzhF+9qg

fsr93/Z2g3hFUqKQKXE7EbKKJN0wCCrQM2v2UXfRvKG3lrhK0i2OLetlGqDlQpMGshId

Hw7pqs7vHjAR+MbeEFHekeCRRUfuWZgItArQ2Yda8tWlf6Yqeh7hHgIJt9dXK1cXCcPz

GoBeB9Y+bGK8CXMt2L9t5w7AsixKIrNvB4GKSuY++ZNEuwWHwIiep9uP7VAV8+Ksx+Uo

WFMGRJe/fSF0uGzC0IEcAeZJKcTWND3999nk9hAC0gmR8EyaZVZewGZUTXUPbK3CjJ2g

0afg==

X-Forwarded-Encrypted: i=1; AJvYcCXSB2nyZuByPUxZO7tWDy1DcyhvuecRdCE9gr2R9RsVAmaMCq+guH/jY5X1PD2n5AUFjSvn@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YxPKDzJn61IA9rh7LODLj9MsYvi+Lq6nE10OTxk6Vo4xULNI1fh

IjL83wOhGKjITYzyBZSEY6CjxcQRv8FCXX4uKY0VWJb9/yq9oT7zxyqkWDE4ghjsKtuOGoSewto

hqR8WVJRV87ZHDTQVsa3+RZvizz0=

X-Gm-Gg: ASbGncuV0C7c1T1l/4SXNpksncjaZx4ouljZD7+dcZVg+m1NVo8ZsWEouN3hdp08cRS

U0wMWJMG0gOU0cmfqzNC5pb3zbU6/pGk4Icq9GhKgytyXvsPrkM4QGMZGSiy/eu5UybnsACF67i

o=

X-Google-Smtp-Source: AGHT+IE6gMRCda6tRVYzhZQqXQkdniSjsKIPC81XPlkMRtiJWfs2MyUkhRZ/0n3QUsTm0X5SDL1KdJ5weHLNWoDkuWA=

X-Received: by 2002:a05:6902:1029:b0:e57:2a07:a975 with SMTP id

3f1490d57ef6-e58a4b33e0emr15572172276.29.1738578881739; Mon, 03 Feb 2025

02:34:41 -0800 (PST)

MIME-Version: 1.0

Reply-To: mrsaishagaddafi76@hotmail.com

From: Mrs Aisha Gaddaf

Date: Mon, 3 Feb 2025 22:33:16 -0800

X-Gm-Features: AWEUYZl4pSLdxuRYim2yXgmdiFyazA-t48wGmatSDUyVeNthefKOgQUhKulnS2Q

Message-ID:

Subject: Investment

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000a90b17062d3a7085"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 26.4

X-Spam_score_int: 264

X-Spam_bar: ++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: My name is Aisha Gaddafi, a single Mother and a Widow withthreeChildren.

I am the only biological Daughter of the late LibyanPresident Late Colonel

Muammar Gaddafi.I have an investment fund worthTwent [...]



Content analysis details: (26.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.169 listed in will-spam-for-food.eu.org]

[209.85.219.169 listed in will-spam-for-food.eu.org]

[209.85.219.169 listed in will-spam-for-food.eu.org]

[209.85.219.169 listed in will-spam-for-food.eu.org]

[209.85.219.169 listed in will-spam-for-food.eu.org]

[209.85.219.169 listed in will-spam-for-food.eu.org]

[209.85.219.169 listed in will-spam-for-food.eu.org]

[209.85.219.169 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.169 listed in dnsbl.ahbl.org]

[209.85.219.169 listed in dnsbl.ahbl.org]

[209.85.219.169 listed in dnsbl.ahbl.org]

[209.85.219.169 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.169 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.169 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.169 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.169 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.169 listed in list.dnswl.org]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.169 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[aias02261(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[mrsaishagaddafi76(at)hotmail.com]

2.5 DATE_IN_FUTURE_12_24 Date: is 12 to 24 hours after Received: date

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[aias02261(at)gmail.com]

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

2.5 MILLION_USD BODY: Talks about millions of dollars

2.7 HK_SCAM_N1 BODY: No description available.

1.2 MILLION_HUNDRED BODY: Million "One to Nine" Hundred

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

1.5 HK_NAME_FM_MR_MRS No description available.

0.8 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Investment



--000000000000a90b17062d3a7085

Content-Type: text/plain; charset="UTF-8"



My name is Aisha Gaddafi, a single Mother and a Widow withthreeChildren. I

am the only biological Daughter of the late LibyanPresident Late Colonel

Muammar Gaddafi.I have an investment fund worthTwenty-Seven Million Five

HundredThousand United States Dollar$27,500,000.00 which I want to entrust

to you for investment project assistance in your





mrsaishagaddafi76@hotmail.com



Best Regards

Mrs Aisha Gaddaf



--000000000000a90b17062d3a7085

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




My name is Aisha Gaddafi, a single Mother and a Widow =

withthreeChildren. I am the only biological Daughter of the late LibyanPres=

ident Late Colonel Muammar Gaddafi.I have an investment fund worthTwenty-Se=

ven Million Five HundredThousand United States Dollar$27,500,000.00 =C2=A0w=

hich I want to entrust to you for investment project assistance in your
=



mrsaishagaddafi76@=

hotmail.com


Best Regards
Mrs Aisha Gaddaf




iv>



--000000000000a90b17062d3a7085--

WEb/SEo/App spam from Microsoft Outlook

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 03 Feb 2025 13:46:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tf3KJ-00000000Lze-3Fwo

for dave@doctor.nl2k.ab.ca;

Mon, 03 Feb 2025 13:45:51 -0700

Resent-From: The Doctor

Resent-Date: Mon, 3 Feb 2025 13:45:51 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-tyzapc01olkn2035.outbound.protection.outlook.com ([40.92.107.35]:5368 helo=APC01-TYZ-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tf09r-000000002oU-2gx3

for doctor@netknow.ca;

Mon, 03 Feb 2025 10:22:56 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=OxQAdJSBEQtd7ntlgYog2pFXqdeVhFsReQerDYtW6iggp3HLi4LPtczux9/FdU5Dz7OChl1rkUD2nJ0mOroS+sD7OJpay81KgOgj4b0Z0e242La4WW0kZawx41hEPlKgoo8z5WvLtSdDhaiFZxE4vS8Zbgb839OfhdrEMZ2ODMPvYzTAxVopoTW6aTUth8p+lwksnCsZJw8CypzZZNeMs5Jdwm2h115iznxmqvRDzfTH9VD/iMvi2XLc9mhxFVwtCflq5c3QqXqva1npqAhykRw3ElgWiJZXhboetJLrhAog83qR5RHWpqMveTjfquCRxG6pRhRrbFywImXEhR6WSA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=pMOOBYv9ACDMjMUsCUZj76PRJGyZCXuzVF2BF7fhdN0=;

b=m+KNuSa29CFUiTT0OKliZ5LqD+IOAky7vFZb6DtuoNFtYA0xBKdzJULMpPTL7SAm5miQXtP1IwJPgcdRvYAuG/uz1bci73i0oiGCvc3ppar2yhX8/Nlm93Lq9uRaGVBSYbSkOQ4RJ4gR1IVUHficaVVfN8HDil6rmlr/YeWRbH80Idi70aWIaeSSC4hsoiHxpQwMGsdgL7hxkQupWyxm6Jg2VsjGXN0C4DCPB8kbDzGi/8tN4ttZhVvyrg3oQHH3Q6GdxKjHG2/BefacadnFHAsHfWwypxHVeKEgIzHwGymHiZpiC8UgKH2GIeIe8jTz/tomTEHd4aXhayEjifI/Iw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=pMOOBYv9ACDMjMUsCUZj76PRJGyZCXuzVF2BF7fhdN0=;

b=DjIHDoNh8AGD9gDPwscGg5ay9h5X8ar7Omr32z7bIyFQMXnVkoaHdqRiMtBuPSK60wFlwK73Jm+XBbi0/CyO3OXY1Bxzyj7PqtXi9wqj2Txs41N1ooT7XpWJ6vbToSxEV7DZve1H2qqJCMxh9e6DiBmOH5qUAFskvDZYKFR27xzROBQ+GpRcy9Ef0RnsiiiR74NJX2koB/DQTKKjr3JjNcDRlZUuMfKYgWzOj+fjlMrZjTQAOfY+df/evo8AaFN0hXCuu3n6xM13Jb6tz8pVtcebj69nmmc6I18qRItBT/qyNPWvtIBI0p2khScZIyO4shA/rFbWcpMsWxqxf9laUA==

Received: from PUZPR04MB5372.apcprd04.prod.outlook.com (2603:1096:301:bf::12)

by SEZPR04MB5675.apcprd04.prod.outlook.com (2603:1096:101:44::11) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8398.24; Mon, 3 Feb

2025 17:19:58 +0000

Received: from PUZPR04MB5372.apcprd04.prod.outlook.com

([fe80::e7f5:7ea5:9f0d:eb83]) by PUZPR04MB5372.apcprd04.prod.outlook.com

([fe80::e7f5:7ea5:9f0d:eb83%5]) with mapi id 15.20.8398.025; Mon, 3 Feb 2025

17:19:58 +0000

From: Chhavi Singh

Subject: Mobile App Development..!

Thread-Topic: Mobile App Development..!

Thread-Index: Adt2X3ZcpC3Sp3R9QR2DGURqvAI8Kw==

Date: Mon, 3 Feb 2025 17:19:57 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-exchange-messagesentrepresentingtype: 1

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PUZPR04MB5372:EE_|SEZPR04MB5675:EE_

x-ms-office365-filtering-correlation-id: ea8eb579-256d-4e8f-06f3-08dd4476fba6

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799006|8062599003|8060799006|461199028|12300799018|19110799003|3412199025|440099028|12091999003|102099032|56899033;

x-microsoft-antispam-message-info:

=?us-ascii?Q?EyaCuHd+4cmDLDr64iJlInKmfWWoEMLquu7OSb37hV9Nif4iSAR4jCFb/6dF?=

=?us-ascii?Q?yoBJKJps8sJ3ixX+w5B45TxiHH8NYh+Hunc5I/lzB9PnY30tbZPx0F/p/D0Z?=

=?us-ascii?Q?FMlcCWXCxHeEuTBI1+pwfMXWp8njS0GOrCkNXw3pCYb+S213pRM65hNezaS0?=

=?us-ascii?Q?1Wn0x6l115Sr3xCZO7Z4AlXbHtiWWUsj+8M7ez1JqJPfXvb6nL9NC7o06Eoh?=

=?us-ascii?Q?e/fYppX09Iv3LMx+4sXNcA3UolhdEKKeeNSwxlYAsAci5Je4HQ8ZqoJkc4e9?=

=?us-ascii?Q?2Eh+dGynvTElhP8FzmdRBLDJWd34A3J7mvIPVWLbz/KSrj9dhbakjim3Lp0a?=

=?us-ascii?Q?y9DMy4waYrGgX7RerY8cuFZd9N2mzFEYW9q/2iX/Ypn2DvPWK7D36HCe50Ls?=

=?us-ascii?Q?u2Nv8bHnWwrinCxZHZDNii2BXWu97O4iS741zf82AbldlawmZJMaou/9t5HL?=

=?us-ascii?Q?HL+Fag0HuTQcCQzaqMc732s3E14DtNtrqgylwbQBLH/8n/hR0tS8b33EB666?=

=?us-ascii?Q?x+KJ6pBodckyyRzBIWJufQQvWwjrUJ2cxZme/6+oKZ6XDygNgcs0TrHkfBM2?=

=?us-ascii?Q?h0dX4UTqYNEsk6g/2fhXswnGdhdyWIETYxxk96fDMsyJvaGdCtFuJTjySIcz?=

=?us-ascii?Q?4sZWuxlBZyL5Z5yTEucGvxibLzi7C081YUxPSWRO2naNU2P6xwPHlhnni7Nj?=

=?us-ascii?Q?FJPUI87VL4uwbQS/a5whZiSUyGs8dCKggXZzEW2FlCxr7qmr729Ys456ipC3?=

=?us-ascii?Q?HF/8NgIokSLuTmyhB79hYJjzHZKQ+/eeEkS1KAh001B5987XSXC0qYVTDAJw?=

=?us-ascii?Q?yEqfgl9kKOJ2FlaDw/qYT/aGa0TWx9r1VYwyIVHjVyz6SvRIR0hp1Xp4kSZc?=

=?us-ascii?Q?klssaOJ/A15amNh8z57SgLvFnQFKBaqUyu4dPVWfa/wtAlpEabRlG3iGPppz?=

=?us-ascii?Q?yY2yarr/Omwf3XA22ivHgCf+pre81e48x4GWSKTNxY7eAFUvKIKxuoryEcC5?=

=?us-ascii?Q?buLHcrlSKaSGsNgxsmPZa//jJwxyjBaPOxAb03K2h7TLm8W1NndSj0ru2ieL?=

=?us-ascii?Q?9eQCrdAF34g/r0VJIW8286tiqFDdRE76vLLZneOK1XZDmp2b82M=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?o2UZOA3veeRa5G8gcV5p0ZqI9U7lSyuTuPT4FZ5g323gCINRLUfeERq38y2Y?=

=?us-ascii?Q?s8QMhA+JtamEvaMQpvftFGbgdeFKtQJT9U+IjN1MdZeb+mvXDHzznFgtJJXt?=

=?us-ascii?Q?e2SV7iyKqGmAX34sFJPS50BOgadlzMNDNjhAO/JNZ+WouoLfMvdD0Ko7oBPb?=

=?us-ascii?Q?pky+g40Y773A74regdfO1XlSC97eHz34kXgxCKK0T9FqnMNxjlA9mrs4CjQO?=

=?us-ascii?Q?mTexHE2lkyXgguiZbAP+fGXABrIy/kYPgPL4t/kCnR3bkRFit15e3a9zRojc?=

=?us-ascii?Q?WnxLjqo0XdnkP8ZVIPHF0yN/gUCA+5jGTCQZ8f3vDDEdXmHaYUfg4DkzF58V?=

=?us-ascii?Q?S4mlyBqwFpvy1SQyxhJZX7/E2T6RYwrU8ytexUXYLTOkucV1IkFX931YP2ay?=

=?us-ascii?Q?BhHbN7lTWMR0C1wXQoOi+fc0I78E1dbI2d7P1UnyB13vJf+Ko1KejOQU8g0r?=

=?us-ascii?Q?iNFKPqPcfuD8JxtukL3XB0r/IbsDA30iufJDyOgQrdj4S1cfaPOBkJ6nLZcX?=

=?us-ascii?Q?tQZEV0NHK+j3TSovY7acD7t4PokDD5TpLqEdG7KCVc24Fl8gL4b8rBWPTVdv?=

=?us-ascii?Q?Dzppke/+ngN7vI7iOcdNEaoZ4SKQuYeW843HlcHa7BdwR7pViQ/dNWeQKR8q?=

=?us-ascii?Q?4B7aub/VN9nHuyLMaaZ0k7umdPhmq4oQ92mLEO3TekuAB6vdPZLzKAtMeVB8?=

=?us-ascii?Q?5VH4opuWqewAyJq1U/L992NpTjG/elUhQ5oCfZh5793Liwq9ci0vqsvBdsyG?=

=?us-ascii?Q?feLwb8kwFmNoOraifE0GvBv4GioZQ1h2oFC64HggLTod3Avg3INQT4zDXl71?=

=?us-ascii?Q?6VLMAtQnQ5WbfVIyyiG62C7ZZZ5ufND4ccRGdqvtZR2X7KfMLWRFB8G+hVI+?=

=?us-ascii?Q?cT4TE64timQdOlWjPgzI2aYTlAINffW+N5lYFUBm9C6s95cH3n+U+e998p3O?=

=?us-ascii?Q?ALl22afhPo2NMY+q24x/suCNHU3D73aWd7B8JKDv7rglhv91EqCePeDM0TTB?=

=?us-ascii?Q?367P1YDI22bBFThekWeoUJBuRjDYq//4qUvbp0K2cCUkJeg9NAPa6Mguc8O5?=

=?us-ascii?Q?kr9f/SSvdEkE2AStYNLjSHYzgKp9R/3l6ckQFBkLgCVIGPD0XI1AsWH7eya6?=

=?us-ascii?Q?yu4NWBosMrM4Uu6kUKvzx8JmGpzmrvupmQb7l4Qu1y9QY1UeheQj9znmAbyK?=

=?us-ascii?Q?P0d5dZ+D1uSuFSj/0zRbKRsfBdWfoxnAab3CIp0xKtVvjGLkOKiucEeIJpX0?=

=?us-ascii?Q?xiHWMmMiMvqiziB4zb00?=

Content-Type: multipart/alternative;

boundary="_000_PUZPR04MB5372CA189CAA7858FC3DF1CAADF52PUZPR04MB5372apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-7719-19-msonline-outlook-4bae0.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PUZPR04MB5372.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: ea8eb579-256d-4e8f-06f3-08dd4476fba6

X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Feb 2025 17:19:57.4821

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR04MB5675

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Hope you are doing great. Are you considering developing

a mobile app for your business? Our team of experienced developers specializes

in creating custom mobile applications across various sec [...]



Content analysis details: (7.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:301:bf:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:bf:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:bf:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:bf:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:bf:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:bf:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:bf:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:bf:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[40.92.107.35 listed in will-spam-for-food.eu.org]

[40.92.107.35 listed in will-spam-for-food.eu.org]

[40.92.107.35 listed in will-spam-for-food.eu.org]

[40.92.107.35 listed in will-spam-for-food.eu.org]

[40.92.107.35 listed in will-spam-for-food.eu.org]

[40.92.107.35 listed in will-spam-for-food.eu.org]

[40.92.107.35 listed in will-spam-for-food.eu.org]

[40.92.107.35 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.107.35 listed in dnsbl.ahbl.org]

[40.92.107.35 listed in dnsbl.ahbl.org]

[40.92.107.35 listed in dnsbl.ahbl.org]

[40.92.107.35 listed in dnsbl.ahbl.org]

[2603:1096:301:bf:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:1096:301:bf:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:1096:301:bf:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:1096:301:bf:0:0:0:12 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.107.35 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.107.35 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.107.35 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.107.35 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[chhavisinghseoservice(at)hotmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Mobile App Development..!



--_000_PUZPR04MB5372CA189CAA7858FC3DF1CAADF52PUZPR04MB5372apcp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hello,

Hope you are doing great.

Are you considering developing a mobile app for your business? Our team of =

experienced developers specializes in creating custom mobile applications a=

cross various sectors, including:

Taxi App

Food App

Fitness App

Dating App

Music App

Travel App

Business App

Educational App

Web App

Hybrid App & etc.

If you are interested, then I can send you our past work details, company i=

nformation and an affordable quotation with the best offer.

Thanks & regards,

Chhavi





--_000_PUZPR04MB5372CA189CAA7858FC3DF1CAADF52PUZPR04MB5372apcp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable








>













Hello,




Hope you are doing great.




Are you considering developing a mobile app for your business? Our team of =

experienced developers specializes in creating custom mobile applications a=

cross various sectors, including:




• T=

axi App




• Food App




• Fitness App




• Dating App




• Music App




• Travel App




• Business App




• Educational App




• Web App




• Hybrid App & etc.




If you are interested, then I can send you our past work details, company i=

nformation and an affordable quotation with the best offer.






Thanks & regards,




Chhavi


 










--_000_PUZPR04MB5372CA189CAA7858FC3DF1CAADF52PUZPR04MB5372apcp_--

DHL Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 03 Feb 2025 06:47:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tewmW-00000000A3d-1slR

for dave@doctor.nl2k.ab.ca;

Mon, 03 Feb 2025 06:46:32 -0700

Resent-From: The Doctor

Resent-Date: Mon, 3 Feb 2025 06:46:32 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from wartam.com ([107.173.122.165]:58418)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tewQv-00000000964-0Zel

for root@nk.ca;

Mon, 03 Feb 2025 06:24:18 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wartam.com; s=202500;

t=1738589046; bh=HxuJD7YoEFBM5aXmFDED6/RlaXR5KL2zUbXLP0TihJc=;

h=From:To:Subject:Date:From;

b=Jmj1FsQWIHc/HA8XgoKlRPuuLig7LSP0++1LH/j+9PNhfeatGCtwKrrDjfYwrycBq

x9rDPFfOxJyvQ8K0q3ZzZ0LNSodOguy1gU0BpjOq9XaTcj6qzxijP7MO5KtmfHNmmk

PGOSBaRVaAWl4eP0e2XTzcqa1QeojFyD1m9QeqocUJUNXRXX/G5WkACuVm04E+5LHZ

5/wWfP8KfYpGrmriX8g1xmPegKmhvwzrfWZ0Jimn3tC8/QHLa8+25BzvoaIjCwgX5L

YYePQ23pDR6fvscRJOucDbb6TiTm9jO213sA94W5ZE8iDLuAQ7CSLvKahid3GgkO7R

4juF+Ug8QayAA==

Received: from [176.65.139.60] (unknown [176.65.139.60])

by wartam.com (Postfix) with ESMTPSA id 78E531CF525

for ; Mon, 3 Feb 2025 13:24:05 +0000 (UTC)

From: " DHL "

To: root@nk.ca

Subject: Shipping Notification: Track your package with DHL

Date: 3 Feb 2025 05:24:03 -0800

Message-ID: <20250203052402.447B395AE6967472@wartam.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 24.7

X-Spam_score_int: 247

X-Spam_bar: ++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: INCOMING SHIPMENT NOTIFICATION Hello root



Content analysis details: (24.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[176.65.139.60 listed in will-spam-for-food.eu.org]

[176.65.139.60 listed in will-spam-for-food.eu.org]

[176.65.139.60 listed in will-spam-for-food.eu.org]

[176.65.139.60 listed in will-spam-for-food.eu.org]

[176.65.139.60 listed in will-spam-for-food.eu.org]

[176.65.139.60 listed in will-spam-for-food.eu.org]

[176.65.139.60 listed in will-spam-for-food.eu.org]

[176.65.139.60 listed in will-spam-for-food.eu.org]

[107.173.122.165 listed in will-spam-for-food.eu.org]

[107.173.122.165 listed in will-spam-for-food.eu.org]

[107.173.122.165 listed in will-spam-for-food.eu.org]

[107.173.122.165 listed in will-spam-for-food.eu.org]

[107.173.122.165 listed in will-spam-for-food.eu.org]

[107.173.122.165 listed in will-spam-for-food.eu.org]

[107.173.122.165 listed in will-spam-for-food.eu.org]

[107.173.122.165 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[107.173.122.165 listed in dnsbl.ahbl.org]

[107.173.122.165 listed in dnsbl.ahbl.org]

[107.173.122.165 listed in dnsbl.ahbl.org]

[107.173.122.165 listed in dnsbl.ahbl.org]

[176.65.139.60 listed in dnsbl.ahbl.org]

[176.65.139.60 listed in dnsbl.ahbl.org]

[176.65.139.60 listed in dnsbl.ahbl.org]

[176.65.139.60 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[107.173.122.165 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[107.173.122.165 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[107.173.122.165 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[107.173.122.165 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[107.173.122.165 listed in sbl-xbl.spamhaus.org]

[176.65.139.60 listed in sbl-xbl.spamhaus.org]

[176.65.139.60 listed in sbl-xbl.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[107.173.122.165 listed in zen.spamhaus.org]

0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS

blocklist

[URI: wartam.com/107.173.122.165]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[176.65.139.60 listed in zen.spamhaus.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: wartam.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: wartam.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: wartam.com]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: wartam.com/107.173.122.165]

[URI: ipfs.io/209.94.90.1]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.0 FROMSPACE Idiosyncratic "From" header format

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

0.6 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image area

0.0 T_MXG_EMAIL_FRAG BODY: URI with email in fragment

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 URI_IPFSIO References Interplanetary File System PtP content via

ipfs.io, likely phishing

1.5 GB_CUSTOM_HTM_URI Custom html uri

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 URI_GOOGLE_PROXY Accessing a blacklisted URI or obscuring source of

phish via Google proxy?

0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable

0.0 URI_IPFS References Interplanetary File System PtP content, probable

phishing

Subject: {SPAM?} Shipping Notification: Track your package with DHL












order-image: none;" alt=3D"On Demand Delivery" src=3D"https://ci5.googleuse=

rcontent.com/proxy/5ehwsj614AMDg_JrsSCmH8EYnk3FtDiHL7Q2qkwuGLTgkX3N1CcQCRJE=

M0l4kqVrpO_37uZF6rYLHEasRE5MYUsONgANTInr1w=3Ds0-d-e1-ft#https://del.dhl.com=

/img/email_assets/images/header.jpg"> 





r: rgb(0, 0, 0); text-transform: none; letter-spacing: normal; font-family:=

"Times New Roman"; font-size: 13px; font-style: normal; word-spacing: 0px;=

vertical-align: bottom; white-space: normal; border-collapse: collapse; ba=

ckground-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-va=

riant-caps: normal; text-decoration-style: initial; text-decoration-color: =

initial; text-decoration-thickness: initial;'=20

border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
>




ft" style=3D"padding: 10px 25px 40px; font-size: 0px; border-collapse: coll=

apse;">

1; font-family: "Helvetica Neue", Arial, sans-serif; font-size: 22px;'>INC=

OMING SHIPMENT NOTIFICATION

padding: 10px 25px 0px; font-size: 0px; border-collapse: collapse;">


font-family: "Helvetica Neue", Arial, sans-serif; font-size: 16px;'> &=

nbsp;    

e=3D"padding: 8px; width: 600px;">

>

font-family: "Helvetica Neue", Arial, sans-serif; font-size: 16px;'>Hello =

root



We write to inform you of an incoming shipment with your User-ID =

;root@nk.ca
registered as the official recipient

Your shipmen=

t is en-route and ready for Online Tracking
Use the button below to acce=

ss our e-Tracking Portal

er-collapse: collapse;">
=3D"line-height: 0px; border-collapse: separate;" border=3D"0" cellspacing=

=3D"0" cellpadding=3D"0">

" valign=3D"left" style=3D"padding: 15px 25px; border-radius: 3px; border: =

currentColor; border-image: none; color: rgb(255, 255, 255); border-collaps=

e: collapse; cursor: auto;" bgcolor=3D"#d90000">


55); text-transform: none; line-height: 18px; font-family: "Helvetica Neue"=

, Arial, sans-serif; font-size: 15px; font-weight: normal; text-decoration:=

none; display: block;'>
ion: none;" href=3D"https://ipfs.io/ipfs/bafkreih6kdzajhcbb5lh3lc2bkrayyrpk=

uaznj32lqafreemcvixaqgady?filename=3Dorseac.html#root@nk.ca">TRACK MY SHIPM=

ENT NOW


pse: collapse;">

e-height: 0px; font-family: "Helvetica Neue", Arial, sans-serif; font-size:=

16px;'>Thank you for using DHL On-Demand Delivery.

align=3D"center" style=3D"padding: 10px 25px; font-size: 0px; border-collap=

se: collapse;">

5px; font-size: 0px; border-collapse: collapse;">


t-family: "Helvetica Neue", Arial, sans-serif; font-size: 18px;'>Sincerely,=


DHL Parcel team


x;">

>
nk" rel=3D"noreferrer">
c=3D"https://clientesparcel.dhl.es/RecursosMailSP/ig_icon.png" width=3D"80"=

height=3D"80">


valign=3D"middle" style=3D"width: 16%;">
m/dhlparcelespana/" target=3D"_blank" rel=3D"noreferrer">
height: 100%; max-width: 100%;" src=3D"https://clientesparcel.dhl.es/Recurs=

osMailSP/fb_icon.png" width=3D"80" height=3D"80">
=


=3D"width: 16%;">


=3D"_blank" rel=3D"noreferrer">
00%;" src=3D"https://clientesparcel.dhl.es/RecursosMailSP/ln_icon.png" widt=

h=3D"80" height=3D"80">

td>

https://youtube.com/c/DHLParcelIberia" target=3D"_blank" rel=3D"noreferrer"=

>


rcel.dhl.es/RecursosMailSP/yt_icon.png" width=3D"80" height=3D"80"> =


e" style=3D"width: 16%;">



d40511" size=3D"5">dhlparcel.com   
<=

/div>










DHL Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 03 Feb 2025 06:47:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tewmR-00000000A3B-3zsr

for dave@doctor.nl2k.ab.ca;

Mon, 03 Feb 2025 06:46:27 -0700

Resent-From: The Doctor

Resent-Date: Mon, 3 Feb 2025 06:46:27 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from wartam.com ([107.173.122.165]:58416)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tewQv-00000000963-0ZcB

for doctor@nl2k.ab.ca;

Mon, 03 Feb 2025 06:24:18 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wartam.com; s=202500;

t=1738589045; bh=kIvHLxHzvUJT+8IOE9WJEoebFFpocZFeLGStVp8ZHXc=;

h=From:To:Subject:Date:From;

b=jb3V153a0Lk236HSCT4GpNhLC9JtUQ45Rhb4jQemmxHp5v5KNaeHKKquL/IgcwlLF

V0LEa1hqW5vYHz48tqC9bR2z6uNWZWTrbs2WDx0AV6U1a4ZXXX29q/LtTKZw7BiK5x

uf60oZ0SI8W52ua/WAtNuEjnC4WXpKJO/wz++I+OGNjhCUhp+jqcjFXQU8/hDDp66k

6WRLdz7F8M5km8L54gNJUrs5VPTil+0t0fE+hF5Twn/xkyIIB5CIDvYNh/xhbU/jJv

aRu1ghiazIBtveK2F42quXf7+fPu4l0UKz4AHfQ+P7KgtQC1tLzZqC0dLygN6qRNOD

c2ebyRINrqQDg==

Received: from [176.65.139.60] (unknown [176.65.139.60])

by wartam.com (Postfix) with ESMTPSA id 2F55F1C80ED

for ; Mon, 3 Feb 2025 13:24:04 +0000 (UTC)

From: " DHL "

To: doctor@nl2k.ab.ca

Subject: Shipping Notification: Track your package with DHL

Date: 3 Feb 2025 05:24:02 -0800

Message-ID: <20250203052402.D999D22E96A1E580@wartam.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 23.2

X-Spam_score_int: 232

X-Spam_bar: +++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: INCOMING SHIPMENT NOTIFICATION Hello doctor



Content analysis details: (23.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[176.65.139.60 listed in will-spam-for-food.eu.org]

[176.65.139.60 listed in will-spam-for-food.eu.org]

[176.65.139.60 listed in will-spam-for-food.eu.org]

[176.65.139.60 listed in will-spam-for-food.eu.org]

[176.65.139.60 listed in will-spam-for-food.eu.org]

[176.65.139.60 listed in will-spam-for-food.eu.org]

[176.65.139.60 listed in will-spam-for-food.eu.org]

[176.65.139.60 listed in will-spam-for-food.eu.org]

[107.173.122.165 listed in will-spam-for-food.eu.org]

[107.173.122.165 listed in will-spam-for-food.eu.org]

[107.173.122.165 listed in will-spam-for-food.eu.org]

[107.173.122.165 listed in will-spam-for-food.eu.org]

[107.173.122.165 listed in will-spam-for-food.eu.org]

[107.173.122.165 listed in will-spam-for-food.eu.org]

[107.173.122.165 listed in will-spam-for-food.eu.org]

[107.173.122.165 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[107.173.122.165 listed in sbl-xbl.spamhaus.org]

[176.65.139.60 listed in sbl-xbl.spamhaus.org]

[176.65.139.60 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[107.173.122.165 listed in dnsbl.ahbl.org]

[107.173.122.165 listed in dnsbl.ahbl.org]

[107.173.122.165 listed in dnsbl.ahbl.org]

[107.173.122.165 listed in dnsbl.ahbl.org]

[176.65.139.60 listed in dnsbl.ahbl.org]

[176.65.139.60 listed in dnsbl.ahbl.org]

[176.65.139.60 listed in dnsbl.ahbl.org]

[176.65.139.60 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[107.173.122.165 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[107.173.122.165 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[107.173.122.165 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[107.173.122.165 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[107.173.122.165 listed in zen.spamhaus.org]

0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS

blocklist

[URI: wartam.com/107.173.122.165]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[176.65.139.60 listed in zen.spamhaus.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: wartam.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: wartam.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: wartam.com]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: wartam.com/107.173.122.165]

[URI: ipfs.io/209.94.90.1]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.0 FROMSPACE Idiosyncratic "From" header format

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

0.6 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image area

0.0 T_MXG_EMAIL_FRAG BODY: URI with email in fragment

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 URI_IPFSIO References Interplanetary File System PtP content via

ipfs.io, likely phishing

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 URI_GOOGLE_PROXY Accessing a blacklisted URI or obscuring source of

phish via Google proxy?

0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable

0.0 URI_IPFS References Interplanetary File System PtP content, probable

phishing

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} Shipping Notification: Track your package with DHL












order-image: none;" alt=3D"On Demand Delivery" src=3D"https://ci5.googleuse=

rcontent.com/proxy/5ehwsj614AMDg_JrsSCmH8EYnk3FtDiHL7Q2qkwuGLTgkX3N1CcQCRJE=

M0l4kqVrpO_37uZF6rYLHEasRE5MYUsONgANTInr1w=3Ds0-d-e1-ft#https://del.dhl.com=

/img/email_assets/images/header.jpg"> 





r: rgb(0, 0, 0); text-transform: none; letter-spacing: normal; font-family:=

"Times New Roman"; font-size: 13px; font-style: normal; word-spacing: 0px;=

vertical-align: bottom; white-space: normal; border-collapse: collapse; ba=

ckground-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-va=

riant-caps: normal; text-decoration-style: initial; text-decoration-color: =

initial; text-decoration-thickness: initial;'=20

border=3D"0" cellspacing=3D"0" cellpadding=3D"0"><=

/tr>




ft" style=3D"padding: 10px 25px 40px; font-size: 0px; border-collapse: coll=

apse;">

1; font-family: "Helvetica Neue", Arial, sans-serif; font-size: 22px;'>INC=

OMING SHIPMENT NOTIFICATION

padding: 10px 25px 0px; font-size: 0px; border-collapse: collapse;">


font-family: "Helvetica Neue", Arial, sans-serif; font-size: 16px;'> &=

nbsp;    

e=3D"padding: 8px; width: 600px;">

>

font-family: "Helvetica Neue", Arial, sans-serif; font-size: 16px;'>Hello =

doctor



We write to inform you of an incoming shipment with your User-ID =

;doctor@nl2k.ab.ca
registered as the official recipient

Your =

shipment is en-route and ready for Online Tracking
Use the button below =

to access our e-Tracking Portal

er-collapse: collapse;">
=3D"line-height: 0px; border-collapse: separate;" border=3D"0" cellspacing=

=3D"0" cellpadding=3D"0">

" valign=3D"left" style=3D"padding: 15px 25px; border-radius: 3px; border: =

currentColor; border-image: none; color: rgb(255, 255, 255); border-collaps=

e: collapse; cursor: auto;" bgcolor=3D"#d90000">


55); text-transform: none; line-height: 18px; font-family: "Helvetica Neue"=

, Arial, sans-serif; font-size: 15px; font-weight: normal; text-decoration:=

none; display: block;'>
ion: none;" href=3D"https://ipfs.io/ipfs/bafkreih6kdzajhcbb5lh3lc2bkrayyrpk=

uaznj32lqafreemcvixaqgady?filename=3Dorseac.html#doctor@nl2k.ab.ca">TRACK M=

Y SHIPMENT NOW


pse: collapse;">

e-height: 0px; font-family: "Helvetica Neue", Arial, sans-serif; font-size:=

16px;'>Thank you for using DHL On-Demand Delivery.

align=3D"center" style=3D"padding: 10px 25px; font-size: 0px; border-collap=

se: collapse;">

5px; font-size: 0px; border-collapse: collapse;">


t-family: "Helvetica Neue", Arial, sans-serif; font-size: 18px;'>Sincerely,=


DHL Parcel team


x;">

>
nk" rel=3D"noreferrer">
c=3D"https://clientesparcel.dhl.es/RecursosMailSP/ig_icon.png" width=3D"80"=

height=3D"80">


valign=3D"middle" style=3D"width: 16%;">
m/dhlparcelespana/" target=3D"_blank" rel=3D"noreferrer">
height: 100%; max-width: 100%;" src=3D"https://clientesparcel.dhl.es/Recurs=

osMailSP/fb_icon.png" width=3D"80" height=3D"80">
=


=3D"width: 16%;">


=3D"_blank" rel=3D"noreferrer">
00%;" src=3D"https://clientesparcel.dhl.es/RecursosMailSP/ln_icon.png" widt=

h=3D"80" height=3D"80">

td>

https://youtube.com/c/DHLParcelIberia" target=3D"_blank" rel=3D"noreferrer"=

>


rcel.dhl.es/RecursosMailSP/yt_icon.png" width=3D"80" height=3D"80"> =


e" style=3D"width: 16%;">



d40511" size=3D"5">dhlparcel.com   
<=

/div>










Nigerian Spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 03 Feb 2025 06:46:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tewlf-00000000A0i-2pVE

for dave@doctor.nl2k.ab.ca;

Mon, 03 Feb 2025 06:45:39 -0700

Resent-From: The Doctor

Resent-Date: Mon, 3 Feb 2025 06:45:39 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f65.google.com ([209.85.218.65]:44535)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tevQi-000000006XT-1YuC

for doctor@doctor.nl2k.ab.ca;

Mon, 03 Feb 2025 05:20:00 -0700

Received: by mail-ej1-f65.google.com with SMTP id a640c23a62f3a-ab737e5674bso81470966b.1

for ; Mon, 03 Feb 2025 04:18:06 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1738585080; x=1739189880; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=dVK8dxwqkMB8/izuoDJiNZ7Y9TtVnyhC2ENORj01bvw=;

b=OEFfKL2bdVzEBIp6Rh5g+IlcSn7mmy/0gBb+e+OywI5DTRk47E8wm+VCboBhjq3RrQ

+VJDsbbGClyeGamiT6Ki1VdCLKv6r6nz37N0rwz5yB7AIinG1QUqklAn6uJh0w2RJxJ7

HtvALZywcSzP8IDvpYRmm2hdykaYHk3lkbS0PunN384owoo/ykvorERfaRyL4hj36ELS

m3mQE9i8EzLWWLqQUzUFe2L6JeZz8I63v5+33XuV+cgLZV33JXpu6e8TkKSk0BLUSsIp

bvWUsaLel1vGD9RYsRxYDSqZwTmTURDh9FI3lv2WZT/qo/2+j/bTd2Z/hWa8fXCagpTk

ZSKA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1738585080; x=1739189880;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=dVK8dxwqkMB8/izuoDJiNZ7Y9TtVnyhC2ENORj01bvw=;

b=PnIK/8bb33CMq/vvcSARJ/pithg41O4SrAy48vh/TjSz6N8FP7GqwVJ4tsUWNfKiBx

xqWjk1yli97ADeDUQDZ/x96Q8FhBnZ1FKxSaNDvJDT7fvpLxDtc9pLHtsfHFt/iSCMDX

TCe/FWQW0RHw1ghnInNWScVe8iS2UpnFl7Yx0yUurmUYjUV09Cpsf9bzVPHHQXY2nskK

/p6tTz3YBceTBMmdNDIQMgdvfDJEVLwirxl8/wtnoPmfsCQDQMoYon7b4KGs865sbRn+

l0YkDnB4webrjBi6KpReEAPS+eM8mS6UftCd/bQTegeGjtPotGTFXj1afFjBrvo7mHoZ

rbXw==

X-Forwarded-Encrypted: i=1; AJvYcCXR9u/XvvL+w1W3xYUw3clVqiRpe3hsZtYGA09VXZT2yABYxRhgjHI0Cft7LIUefI1r4UlusUo=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YyfFvfWE6yUEIY3YiX4azsL4Yqc71qEq8hwkxTmj69WxzqTnN/Q

PbsJqRR381i3F/o9taou5rlPnZ8fC6IlcCYTpoj39fIa6tE92LpgaFYDht0QL8ZhGHdAi4a9ZpL

7JBxvctk6Ttka54bV7I/cgxGQeCAd2O6JG3EBpH7L

X-Gm-Gg: ASbGncvmKz4i1sRCdTX2CAUAculEjfh92a4N1+i/NtAGtWk86Zt+z+1qsKhGFt1j7qF

xkWvzoS+eOWgiRBZ6IN+HKG9kZXBM6nVJ/ufn9VvoGUk78QyXe05Qw9NcOhT8yKbGbj6XdDzEcQ

==

X-Google-Smtp-Source: AGHT+IGOKLYYLbGC5ngVj+WT3Ps4pqTIqNKnH+Fa1ie+d+skdOdpU6OFJ1Pq8cYpjJd24EGIKkILnQ7Z80ZKWaKxINk=

X-Received: by 2002:a05:651c:242:b0:300:360b:bc36 with SMTP id

38308e7fff4ca-3079694bae0mr67324541fa.23.1738584773332; Mon, 03 Feb 2025

04:12:53 -0800 (PST)

MIME-Version: 1.0

Reply-To: adrveronicaamadi@gmail.com

From: "Dr.Mrs. Veronica Amadi JP"

Date: Mon, 3 Feb 2025 13:09:14 +0100

X-Gm-Features: AWEUYZlPB7b0RKonZ8CvQAUX5RTsym7_2A492_u92_AfmBkq0T7z7wETL--dhcs

Message-ID:

Subject: Re: From Dr.Mrs. Veronica Amadi JP

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000d39885062d3bcf33"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 12.7

X-Spam_score_int: 127

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dearest, This might come to you as a surprise but what I'm

about telling you is nothing but the reality about your fund which has been

held for so long with the Central Bank of Nigeria. Do you know that all the

money you have been sending to the officials for one certificate clearance

or the other is being used against you?



Content analysis details: (12.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.218.65 listed in will-spam-for-food.eu.org]

[209.85.218.65 listed in will-spam-for-food.eu.org]

[209.85.218.65 listed in will-spam-for-food.eu.org]

[209.85.218.65 listed in will-spam-for-food.eu.org]

[209.85.218.65 listed in will-spam-for-food.eu.org]

[209.85.218.65 listed in will-spam-for-food.eu.org]

[209.85.218.65 listed in will-spam-for-food.eu.org]

[209.85.218.65 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.218.65 listed in dnsbl.ahbl.org]

[209.85.218.65 listed in dnsbl.ahbl.org]

[209.85.218.65 listed in dnsbl.ahbl.org]

[209.85.218.65 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.218.65 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.218.65 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.218.65 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.218.65 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.218.65 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.218.65 listed in sa-accredit.habeas.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.218.65 listed in sa-trusted.bondedsender.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.218.65 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.218.65 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.218.65 listed in bl.score.senderscore.com]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[jonbasil001(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[jonbasil001(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_HK_NAME_FM_DR No description available.

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

3.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)

2.2 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Re: From Dr.Mrs. Veronica Amadi JP



--000000000000d39885062d3bcf33

Content-Type: text/plain; charset="UTF-8"



Dearest,



This might come to you as a surprise but what I'm about telling you is

nothing but the reality about your fund which has been held for so long

with the Central Bank of Nigeria.



Do you know that all the money you have been sending to the officials for

one certificate clearance or the other is being used against you?



Well, this might sound strange but I am taking this bold step because of my

religious belief as a Christian. The truth is there are a lot of forces

working against you right from the last central bank Governor and the

current Governor with other top officials of all the commercial banks in

Nigeria, they have been frustrating you by delaying your payment.



There is a way I can assist you get your fund without further delay and

avoid unnecessary expenses; it is risky on my own-side to exposes the

secret of authorities but one has to take it because I am not happy as

things is going against a humanity, I have directed many people through

this way, and they receive their long-awaited outstanding payment.



Get back to me as soon as you get this mail so that I will be in a better

position to direct you what to do so you will receive your funds. Waiting

for your immediate reply to this address ( adrveronicaamadi@gmail.com ).



Yours sister in the lord

Dr.Mrs. Veronica Amadi JP.



--000000000000d39885062d3bcf33

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






W-avf gmail-tS-tW gmail-tS-tY" aria-label=3D"Message Body" role=3D"textbox"=

aria-multiline=3D"true" style=3D"direction:ltr;min-height:288px" tabindex=

=3D"1" aria-controls=3D":qh" aria-expanded=3D"false">Dearest,

This m=

ight come to you as a surprise but what I'm about telling you is nothin=

g but the reality about your fund which has been held for so long with the =

Central Bank of Nigeria.

Do you know that all the money you have bee=

n sending to the officials for one certificate clearance or the other is be=

ing used against you?

Well, this might sound strange but I am taking=

this bold step because of my religious belief as a Christian. The truth is=

there are a lot of forces working against you right from the last central =

bank Governor and the current Governor with other top officials of all the =

commercial banks in Nigeria, they have been frustrating you by delaying you=

r payment.

There is a way I can assist you get your fund without fur=

ther delay and avoid unnecessary expenses; it is risky on my own-side to ex=

poses the secret of authorities but one has to take it because I am not hap=

py as things is going against a humanity, I have directed many people throu=

gh this way, and they receive their long-awaited outstanding payment.

r>Get back to me as soon as you get this mail so that I will be in a better=

position to direct you what to do so you will receive your funds. Waiting =

for your immediate reply to this address (
di@gmail.com">adrveronicaamadi@gmail.com
).

Yours sister in the =

lord
Dr.Mrs. Veronica Amadi JP.








--000000000000d39885062d3bcf33--

WEb/SEo/App spam from Microsoft Outlook

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 03 Feb 2025 06:46:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tewlU-00000000A0I-2nCp

for dave@doctor.nl2k.ab.ca;

Mon, 03 Feb 2025 06:45:28 -0700

Resent-From: The Doctor

Resent-Date: Mon, 3 Feb 2025 06:45:28 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazolkn19011031.outbound.protection.outlook.com ([52.103.66.31]:62718 helo=OS0P286CU010.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1teunn-000000004Wd-2psE

for sales@nk.ca;

Mon, 03 Feb 2025 04:39:48 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=dqCPS6x8OXbjFeQ4Bp8CvukSi08owmEUEc5x/yju768hAT944Xy0SZt7alIVdesOrCv8oJxiX2kgGHg4EaGzJo9Xn/RNzsOqcnf7OdeH7Sbp06yE0cfcTKNw3hnibJRF+6oL2VlYzsUIZkPiCzO43EsMRVmhvaQ1zFbK//iADJnH1oBidMQJma1Awj6R5zGMufYfdpNAjqrcnxeoUrkoHio5oC5wge5dzZgiLjBQTXo9nv2ZJScdZIeHWRPQ08Ki5xQCRaZ3+ZC1Cbz9MBDGNu/bE8z/0FHFosfMfWPih1XfIdvkmtPhMKmfKpAvVeD9ZMUf1FRw3F2NdBKeGvBquw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=amEqvH+gEZ0Eg8fP+KmFwxLdtqt9TQKuY91DygsO6YY=;

b=EQzHkj/2XdBeum+kD4VRB7fI0bi9udU0NjnnxzNq4wyvJHMX6zoRyJE9tyRN2mDYVJTusuvnidXCGEOHH3peN9fPiA3g228ANpmSB0nGX5/kDmk0lXVhemcoX+jG9JHihl7jSimxuCcjoMfEmoHnWz7C0XzkWPw8j4wPwQVsV8CiWDmuFAH0LZ0mCUK/8cjwayLhx69Ss+bFQfIlz3jzrtJJo/wHPVlTflj5EajNe8UAsb5Ug0vN+lMwPHgY+pH6iMZPy0hN6atcdnXytHUjyuZLDKFoawxprh35x9LM8RHJ6xdIFLa1SSyuHarWUMs+lwY95lYIXUuMA2ErToz8kQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=amEqvH+gEZ0Eg8fP+KmFwxLdtqt9TQKuY91DygsO6YY=;

b=Ty2NlvwggFXx/hHMYz9n6LMUqi0ccXoqnpJcjCdSA25M4oArTYhbR+COYCFc6R8j1D5SjAyPaSxmXs9MStGyWwwMl8cM/pGqNeZHQEANl9OW+Hy2JTrAV4azYmDaK2LDrsf6E9yHyqqpwMmx/jyiRxvLF5rBgFcA7dgJ2MDL08ZHwh4npBuKcQXgPBMR1e1t39ndVY0NTACkbKnBPuYtbNWHYtqqUjLniIztm55w9RlPNOw2bpgVmkBojcFn1sBiSApqZtILwjgeNgNNoqa6Y5Wybhq+spQ6kSLmtFLmC2ahZuyjY5zPCH0xpjEwPcXAKz7rrqNAnUvRwSEr4sS3fg==

Received: from OS3PR01MB7528.jpnprd01.prod.outlook.com (2603:1096:604:11e::13)

by TY3PR01MB10941.jpnprd01.prod.outlook.com (2603:1096:400:3b2::14) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8398.24; Mon, 3 Feb

2025 11:37:40 +0000

Received: from OS3PR01MB7528.jpnprd01.prod.outlook.com

([fe80::ddfc:d05d:bf32:8248]) by OS3PR01MB7528.jpnprd01.prod.outlook.com

([fe80::ddfc:d05d:bf32:8248%3]) with mapi id 15.20.8398.025; Mon, 3 Feb 2025

11:37:40 +0000

From: Monika Choudhary

To: "sales@nk.ca"

Subject: RE: Upgrade your website...

Thread-Topic: RE: Upgrade your website...

Thread-Index: Adt2L1zmXC6s967KSzK/IDLDrzEiww==

Disposition-Notification-To: Monika Choudhary

Date: Mon, 3 Feb 2025 11:37:40 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: OS3PR01MB7528:EE_|TY3PR01MB10941:EE_

x-ms-office365-filtering-correlation-id: e556c77d-4e49-4f3d-d4a8-08dd44472adc

x-microsoft-antispam:

BCL:0;ARA:14566002|19110799003|5062599005|8062599003|461199028|15080799006|8060799006|7092599003|102099032|440099028|3412199025|56899033|12091999003;

x-microsoft-antispam-message-info:

=?us-ascii?Q?Tp+NI81KqiySBvbxfGt6evBKyazA6OZkxmwRyY4Pk+WqKHduVGVqKmVeZqwt?=

=?us-ascii?Q?ORTLixM5jPhT5WtnmXgid7cZhGFgvuRHv78I8Wdp6C1yymMJYdnZuSaoDtPe?=

=?us-ascii?Q?+cQkl8Oz+uNwDPQxtLG13v803vX9+1i7bzn2gZmiYX5xEhzcLErFFTL613E5?=

=?us-ascii?Q?UWXjXKKgp/JldJGBOJifiZp5pUV7XZPR2FnKKWHaGVmNW1Yi5J0TRydcn6dJ?=

=?us-ascii?Q?f2esZxmMC2TCMc5g7FV4v/s5sD59ybLwoLljPZ6LouD4RqBgo7m3ElDMjwRQ?=

=?us-ascii?Q?I/1nyoM1xs9sAc9YDl0v26Sa3nkfGWf//FAyQEsvAy8O7CyJy4+BvDW9eYTd?=

=?us-ascii?Q?E5igkTOYMi6CugscjCJsBLcnZI8jnXvO55wszXO9A1HbuDYwMUhSDuOgyPY7?=

=?us-ascii?Q?m4AtbYlQZNxmSMmobU9chQNX9EM2cM/jr6MV4HpJsa5AWpB/xGHu4I2vPsFG?=

=?us-ascii?Q?rj9YBcOfjKu8Gk8Pu8RyKDZrfbnDnTr6roBHDlk7eyjt8taIVlZvCWllOKDK?=

=?us-ascii?Q?XgOIJiJtjCRWalb4sXnLtuHWb9aQFg6KfsdR6J+to2kHE8oi6FUsdEdybkvE?=

=?us-ascii?Q?AhMDZ6vC140SOudmecIPd2urhCiUj7rvEF6iLxlMKCNZn14U93Mr6TRIb5/R?=

=?us-ascii?Q?CHB4IFOfMe8FES79ihXFMehpMC9dzjIni/pjfMfSfBKCIMDS2g7xm6WrThQX?=

=?us-ascii?Q?/4Yt8Or6n06yG+lkcNB5ho8rMPeyjeyzOnik18RU63nnRkYYBCKC61JiDHM7?=

=?us-ascii?Q?f0M8HIGatkUy0Tvh3YawMIrM5lMv37bhxbbPPEVRHtlmPkvAcb4qD8lq0lrI?=

=?us-ascii?Q?kjmxq0y6rci2aDT+/Rs67VO3P9kZGlIPVy+vjjIxbxOZ5sDgOnPf2YDEYAKy?=

=?us-ascii?Q?NBIrYpb7z4spHS6Ax1CBEjH4YafWiaoU1cukGucepi4Hzg3JtPj6sMy4504z?=

=?us-ascii?Q?0wYdXx8fRuf0znI2N1z1ZVgw/3DHa1x+nRYXn+faB/bENg+8iutWOLtWSe4N?=

=?us-ascii?Q?3M1T7mLLJE1V/Tnv8Rw3m9hwm0O5W63ZvyE9kQF+1gI9WIjjz3p/uXRwTeJ/?=

=?us-ascii?Q?HeI51AHGPK7QJ19cv1mYKsk3zS/wExHHb2BMI6oB1yMlQ1JkCvyy5FFa0r8d?=

=?us-ascii?Q?hveJVV41NiKaOOfpNCTC+/vp+7mJClfMGw=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?Zu3rbJQv1fvv4X5Q0oaUb6wnfMA2LS5QtN/oscTBSKX7zuXxJwv3o8UQFFs9?=

=?us-ascii?Q?+M+r86qFRSALOi0Hd1L3/TEKLPlB5MUJsoQZOkIylqtUnnF47heCvkvZuLBp?=

=?us-ascii?Q?V1ifxikBaZFHhpiSFMymRdGwyqZw0ZS8zluRE/nFLl8sK2YW4BMw/Dlp4Sqt?=

=?us-ascii?Q?2FchgIhOQMMaUjJj3Cu5+K30u36eqiB+oU35D2QwYG17f4uN10SRX2/AEfKO?=

=?us-ascii?Q?1fBh2bccHVgceCaNau3MNqWMaxF76LoAJc+X0kOPvZF0H3pzjP5PBMAC2CCh?=

=?us-ascii?Q?3XWOvJStgypz4QZqg2RGgzTGXkO6k0gmpOL5fKuwLdF/5mg9xmPjscWVeBWG?=

=?us-ascii?Q?wGFnUroIstA3PVxXj0gFY8H+KTvpQB+b5K0wSZRr2ZdV/EBXJbs/NzsBS9Ax?=

=?us-ascii?Q?a5Kt5VWBtkAmY1fHUrTNID+VRAl9yQH19Ln8myPJhzxgwFi+mxRgh/Y/+Y5f?=

=?us-ascii?Q?1u/OKKFtSWVPdE4QChg1ceZ/1LYgfmgLIyMGjyzdQK//E8xFzmxQ3Qro8zSb?=

=?us-ascii?Q?YbwMsTQuYTC5l1DlI9kRoTSlU0gAT00R9kck89TGrDYOJxM0Q6+TAdk2FZSG?=

=?us-ascii?Q?1kEENfOkLSnphrhb02ibNKA0d4JSLe+UdC6bNVSzgPWTYmCPg5zjEWPSfS5M?=

=?us-ascii?Q?lOJn+DcyYai8iZYNeYy54i5kiTjY376TLzro/9GnsxSMS/QPGbjT0mvgERPx?=

=?us-ascii?Q?/Jfms5jKop+BPo12nMSUQbvoLByq47gtk7sebOvTUKtwIHQ6SRI9a79JgM+Z?=

=?us-ascii?Q?sclxhN+jcA83X7GdZD4hMbhis/1/Hx0YXub3Md3gLZicnRNCPdaplPyIzozn?=

=?us-ascii?Q?zk7trL5lx4euqMDtLt5T/mmvKusGXBeefSNfdj5y+nna+kljLl4PB2rIl7iA?=

=?us-ascii?Q?UKh8Ux0KybLfe6EmmWhp/K8DB2NdbG7g4dVGlpZ8ldYwJo4diFSzG5tHpPtN?=

=?us-ascii?Q?Oh0hgdagwmjyYdiMJAWJ4QhcU4tkjfL4yLoW0E0M5SDLorchMxKkbLTuKeII?=

=?us-ascii?Q?bQxCQ8/SpwBFa0Cm2YppHVXoQZRcrZfTCbjsaQc8r60jiNmA5ibAmj0m1qky?=

=?us-ascii?Q?pjaOKyfxAVHD/3/grMClLaA6bt/ULDZnxV8Bhf/ImARB7rc7az9lZkiodqmM?=

=?us-ascii?Q?jHLaZT/5efueIk1w3/HMOTQ942oUjs1tt7j5M5JK98WEfHZX90RLJCc0ZUJq?=

=?us-ascii?Q?swYY8tn/ch7h8wP2CsNC4WiCDzJ92KPmSpLi/1B7KLYheSeZcpmOQrURP1qJ?=

=?us-ascii?Q?LOrCLCzto+43O7uHYajO7bOMMjIA7dleifTJMJKLds0vxar3V88BFWufZc2S?=

=?us-ascii?Q?lnzxjoct3n3yCe5j9AZTgnK1?=

Content-Type: multipart/alternative;

boundary="_000_OS3PR01MB7528630080C5645F62FC69E1AFF52OS3PR01MB7528jpnp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: OS3PR01MB7528.jpnprd01.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: e556c77d-4e49-4f3d-d4a8-08dd44472adc

X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Feb 2025 11:37:40.8549

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TY3PR01MB10941

X-Spam_score: 5.3

X-Spam_score_int: 53

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I understand you're busy. I'm waiting for your reply to

my previous mail. May I send you quote, price/plan?



Content analysis details: (5.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:604:11e:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:604:11e:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:604:11e:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:604:11e:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:604:11e:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:604:11e:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:604:11e:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[2603:1096:604:11e:0:0:0:13 listed in]

[will-spam-for-food.eu.org]

[52.103.66.31 listed in will-spam-for-food.eu.org]

[52.103.66.31 listed in will-spam-for-food.eu.org]

[52.103.66.31 listed in will-spam-for-food.eu.org]

[52.103.66.31 listed in will-spam-for-food.eu.org]

[52.103.66.31 listed in will-spam-for-food.eu.org]

[52.103.66.31 listed in will-spam-for-food.eu.org]

[52.103.66.31 listed in will-spam-for-food.eu.org]

[52.103.66.31 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.66.31 listed in dnsbl.ahbl.org]

[52.103.66.31 listed in dnsbl.ahbl.org]

[52.103.66.31 listed in dnsbl.ahbl.org]

[52.103.66.31 listed in dnsbl.ahbl.org]

[2603:1096:604:11e:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:1096:604:11e:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:1096:604:11e:0:0:0:13 listed in]

[dnsbl.ahbl.org]

[2603:1096:604:11e:0:0:0:13 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.66.31 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.66.31 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.66.31 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.66.31 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.66.31 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.66.31 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[seoservices5375(at)outlook.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[seoservices5375(at)outlook.com]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 GB_FREEMAIL_DISPTO Disposition-Notification-To/From or

Disposition-Notification-To/body contain

different freemails

Subject: {SPAM?} RE: Upgrade your website...



--_000_OS3PR01MB7528630080C5645F62FC69E1AFF52OS3PR01MB7528jpnp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hi,



I understand you're busy. I'm waiting for your reply to my previous mail.



May I send you quote, price/plan?



You're welcome!



Thanks,

Monika.



From: Monika Choudhary

Sent: December 28, 2024 3:36 AM

To: sales@nk.ca

Subject: Upgrade your website...



Hi,sales@nk.ca



Do you want to Design or Redesign your website? I can create a unique & bea=

utiful website for your organization at a minimal cost.



We can also upgrade your website that has all of the modern features and fu=

nctionality.



If you are interested, please drop an email your requirement details with t=

he contact number so that we can analyze and send you our Packages and Pric=

e list, web work sample and quotation with the best offer.



Waiting for your response.



Thank You.

Monika





--_000_OS3PR01MB7528630080C5645F62FC69E1AFF52OS3PR01MB7528jpnp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




>








break-word">




style=3D"font-family:"Helvetica",sans-serif;color:#1F497D;mso-li=

gatures:none;mso-fareast-language:EN-IN">Hi,
ly:"Helvetica",sans-serif;mso-ligatures:none;mso-fareast-language=

:EN-IN">




style=3D"font-family:"Helvetica",sans-serif;color:#002060;mso-li=

gatures:none;mso-fareast-language:EN-IN"> 
amily:"Helvetica",sans-serif;mso-ligatures:none;mso-fareast-langu=

age:EN-IN">




style=3D"font-family:"Helvetica",sans-serif;color:#1F497D;mso-li=

gatures:none;mso-fareast-language:EN-IN">I understand you're busy. I'm wait=

ing for your reply to my previous mail.



02060;mso-ligatures:none;mso-fareast-language:EN-IN">



F497D;mso-ligatures:none;mso-fareast-language:EN-IN">May I send you quote, =

price/plan?

if;mso-ligatures:none;mso-fareast-language:EN-IN">




style=3D"font-family:"Helvetica",sans-serif;color:#1F497D;mso-li=

gatures:none;mso-fareast-language:EN-IN">


You're welcome!
-serif;mso-ligatures:none;mso-fareast-language:EN-IN">

>


style=3D"font-family:"Helvetica",sans-serif;color:#1F497D;mso-li=

gatures:none;mso-fareast-language:EN-IN"> 
amily:"Helvetica",sans-serif;mso-ligatures:none;mso-fareast-langu=

age:EN-IN">




pan style=3D"font-family:"Helvetica",sans-serif;color:#1F497D;mso=

-ligatures:none;mso-fareast-language:EN-IN">Thanks,
nt-family:"Helvetica",sans-serif;color:#002060;mso-ligatures:none=

;mso-fareast-language:EN-IN">



F3864;letter-spacing:.1pt;mso-ligatures:none;mso-fareast-language:EN-IN">Mo=

nika.

-ligatures:none;mso-fareast-language:EN-IN">



<=

span style=3D"font-family:"Verdana",sans-serif;color:black;border=

:none windowtext 1.0pt;padding:0cm;mso-ligatures:none;mso-fareast-language:=

EN-IN"> 
EN-IN">



<=

b>
N-IN">From:

o-fareast-language:EN-IN"> 

-family:"Tahoma",sans-serif;color:black;mso-ligatures:none;mso-fa=

reast-language:EN-IN">Monika

Choudhary



nguage:EN-IN">Sent:

:none;mso-fareast-language:EN-IN"> 

5pt;font-family:"Tahoma",sans-serif;color:black;mso-ligatures:non=

e;mso-fareast-language:EN-IN">December

28, 2024 3:36 AM

mso-fareast-language:EN-IN">


To: sales@nk.ca

ly:"Tahoma",sans-serif;color:black;mso-ligatures:none;mso-fareast=

-language:EN-IN"> <sales@nk.ca>



nguage:EN-IN">Subject:

res:none;mso-fareast-language:EN-IN"> 

10.5pt;font-family:"Tahoma",sans-serif;color:black;mso-ligatures:=

none;mso-fareast-language:EN-IN">Upgrade

your website…

nguage:EN-IN">



<=

span style=3D"font-family:"Verdana",sans-serif;color:black;border=

:none windowtext 1.0pt;padding:0cm;mso-ligatures:none;mso-fareast-language:=

EN-IN"> 
EN-IN">



<=

span style=3D"font-family:"Verdana",sans-serif;color:black;border=

:none windowtext 1.0pt;padding:0cm;mso-ligatures:none;mso-fareast-language:=

EN-IN">Hi,sales@nk.ca








e windowtext 1.0pt;padding:0cm;mso-ligatures:none;mso-fareast-language:EN-I=

N">Do you want to Design or Redesign your website? 
r:black;background:#D6E3BC">I can create a unique &

beautiful website for your organization at a minimal cost.





We can also upgrade your website that ha=

s all of the modern features and functionality.





If you are interested

uot;,sans-serif;border:none windowtext 1.0pt;padding:0cm;mso-ligatures:none=

;mso-fareast-language:EN-IN">, please drop an email 
>
owtext 1.0pt;padding:0cm;mso-ligatures:none;mso-fareast-language:EN-IN">you=

r

requirement details with the contact number so that we can analyze and sen=

d you our

der:none windowtext 1.0pt;padding:0cm;mso-ligatures:none;mso-fareast-langua=

ge:EN-IN"> Packages and Price list, web work

sample and quotation with the best offer.

mily:"Verdana",sans-serif;color:black;border:none windowtext 1.0p=

t;padding:0cm;mso-ligatures:none;mso-fareast-language:EN-IN">






e windowtext 1.0pt;padding:0cm;mso-ligatures:none;mso-fareast-language:EN-I=

N">Waiting for your response.





Thank You.

erif;mso-ligatures:none;mso-fareast-language:EN-IN">


Monika
=



 











--_000_OS3PR01MB7528630080C5645F62FC69E1AFF52OS3PR01MB7528jpnp_--

Portuguese language spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 03 Feb 2025 06:46:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tewlP-00000000A04-0gcY

for dave@doctor.nl2k.ab.ca;

Mon, 03 Feb 2025 06:45:23 -0700

Resent-From: The Doctor

Resent-Date: Mon, 3 Feb 2025 06:45:23 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f67.google.com ([209.85.160.67]:57655)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1teuni-000000004Wa-18yI

for doctor@doctor.nl2k.ab.ca;

Mon, 03 Feb 2025 04:39:41 -0700

Received: by mail-oa1-f67.google.com with SMTP id 586e51a60fabf-2aa17010cbcso1631548fac.3

for ; Mon, 03 Feb 2025 03:37:43 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1738582657; x=1739187457; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=VgDZjZqn0rPn/b9Fz8Wa6XEM7jmYTuZ3Kq6yV1DrXjM=;

b=mrmXzmh/74o0kUDtNo6lKK1ppTpizUItlMRXok0UDiJY/I3mIJv9n74yOV/oxAk4Pv

3mSkye0MHH8p6fAQgok8jiUQw3SWE+r+4ZHtAsPuEiZ3Q2dmbjzFzeQ04DcJnGxJ8hl0

UJNl0qjuTgqCXwFTazN9BCoELaqYvZ4lyuuMkiTsdn6+nbFT8HBPVqNpBwFtcJINI/yd

L/aiRJoMoRDX9g7nx7/dbvdQ2hKwLKkTGuoqz3DHxrgTUcnI7VWXkEYAh8XwOXI2Rp9P

PUrqFoWiwc64COxCC8rN9p7IGjSwEL8SWzI2gyRIs3LTcwzZDnoZeehbKzFOxVnLuFIa

Uo2A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1738582657; x=1739187457;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=VgDZjZqn0rPn/b9Fz8Wa6XEM7jmYTuZ3Kq6yV1DrXjM=;

b=JiRvNydd7VmpESPgu9L9vb+Tr2RSNbLWCbG2R810qFDJcGdYCrk5TzwT1dBr/FwP+q

BA0xA4Fpc2Vt9AcPKHrVciWOt0LVWMQEvCg6ejy2+WjMUUVHgfbeOt89XcrjKjIH7/D4

b5maIgac5weq/1rG1VHEObYrkPAsp6aigye3QDWlSxBCCulxVEFJxvmu7XQDLPWXzKif

25gMKa5acr7P3ZJOurRLs+eQxrNcBQ+O3UuslxYWzpZ5Snd7mksr/K0kEOIyczdgzTNu

UNE6vKuIKpnYHl3a52NgBly5/tUv6nltdz3to54pVAM6HE6rtpyos8MkO8OP25WM4g6w

Sr6A==

X-Forwarded-Encrypted: i=1; AJvYcCXm6uVRxj4PFI4h9NPvuL6RKqV4Jnvvx0plUqmSoCGGJn/PzHKz3yDQw+lsGdjC75MzEK1ZizA=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YxavKvChhXJXTD7nspd+DEBPeB3J1rtzfuxoB0fnx5cWPREGNpv

U/9KEfWT+L1UdH+NQw+QKfi3y4UbBin1mLlm+qx0X/J9TuyCN23TRSvZH5lxowhO/G+1uFJ6mok

OGgWWGrnjJbZ4uQg5Vsd9MLPfy+A=

X-Gm-Gg: ASbGncvXmnkSJ8W9Whyp0en3TkoWO4VQnile25nRujTa66q2/h2le9nqiXJl+Ykq61s

Wxj2CJj0ua1U1kT6WyMMk3lGUY2kf2tgNtQRuoLmnoqb1JIo1JIx3yeFK5fqEuRDLc+qKoeo=

X-Google-Smtp-Source: AGHT+IEIz54udUlSV3jxSY1F1WqBt+x/0L2cU6OBFZcpSj9dFXsU61No7dYKR2itsUlnSgMLfWjbp1p/U/lU9h/zU8k=

X-Received: by 2002:a05:6870:de13:b0:2ac:2937:299d with SMTP id

586e51a60fabf-2b32f34fd98mr12163705fac.39.1738582657454; Mon, 03 Feb 2025

03:37:37 -0800 (PST)

MIME-Version: 1.0

From: johnson victoria

Date: Mon, 3 Feb 2025 12:37:26 +0100

X-Gm-Features: AWEUYZnCnXs5sMAWOSHakjDq1rg5qqzb29r96BCppbPzYwty76YgkTtqg0X-vuY

Message-ID:

Subject: Querido

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000b5db01062d3b517d"

Bcc: doctor@doctor.nl2k.ab.ca



--000000000000b5db01062d3b517d

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Querido



Sou a senhorita Victoria Johnson, de Serra Leoa, na =C3=81frica Ocidental; =

Eu

sou o

=C3=BAnica filha do Sr. Matthew Johnson, por favor, eu tenho (5,5 milh=C3=

=B5es

d=C3=B3lares) que meu falecido pai depositou em uma empresa de seguran=C3=

=A7a aqui em

Costa do Marfim antes de sua morte repentina,

Estou pedindo sua permiss=C3=A3o para transferir este referido fundo para o=

seu

pa=C3=ADs,

para que eu me mude para o seu pa=C3=ADs para investimento e tamb=C3=A9m co=

ntinue

meus estudos.

Decidi oferecer-lhe 20% do valor total pelo seu desejo de ajudar

meu.

Responda imediatamente ao receber este e-mail para obter mais detalhes

sobre o

fundo.

Atenciosamente.

Senhorita Victoria Johnson



--000000000000b5db01062d3b517d

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Querido

Sou a senhorita Victoria Johnson, de Serra =

Leoa, na =C3=81frica Ocidental; Eu
sou o
=C3=BAnica filha do Sr. Matt=

hew Johnson, por favor, eu tenho (5,5 milh=C3=B5es
d=C3=B3lares) que meu=

falecido pai depositou em uma empresa de seguran=C3=A7a aqui em
Costa d=

o Marfim antes de sua morte repentina,
Estou pedindo sua permiss=C3=A3o =

para transferir este referido fundo para o seu
pa=C3=ADs,
para que eu=

me mude para o seu pa=C3=ADs para investimento e tamb=C3=A9m continue
m=

eus estudos.
Decidi oferecer-lhe 20% do valor total pelo seu desejo de a=

judar
meu.
Responda imediatamente ao receber este e-mail para obter m=

ais detalhes
sobre o
fundo.
Atenciosamente.
Senhorita Victoria =

Johnson




--000000000000b5db01062d3b517d--

WEb/SEO/App spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 03 Feb 2025 06:46:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tewl4-000000009zM-1T9l

for dave@doctor.nl2k.ab.ca;

Mon, 03 Feb 2025 06:45:02 -0700

Resent-From: The Doctor

Resent-Date: Mon, 3 Feb 2025 06:45:02 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f41.google.com ([209.85.218.41]:52468)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tetoq-000000001B1-44wE

for sales@nk.ca;

Mon, 03 Feb 2025 03:36:50 -0700

Received: by mail-ej1-f41.google.com with SMTP id a640c23a62f3a-ab68a4ab074so530145266b.0

for ; Mon, 03 Feb 2025 02:34:50 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1738578883; x=1739183683; darn=nk.ca;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=m3QIGfKuZ9B2x3w7jT8qXt43bjAU2SzUZLSQCqB7mo0=;

b=LVo6eYCquT1PBLClNUDFSxVhCSeUcgvwNy2u9cu/wHhuw3+pOy8WNbKfSGa1lHhx6m

mZBoWOaVoCdRSHKwJt7wwoCF9yDtRaoIuOTN5SebIzEhgNPqNq1dEMMwm284H7F2loa0

h8/UkeYO11nDu4YYHM6/taca+VbIU4vPY3961UQ26TuSR2pF3MZlJvKzyMWhvazrONv9

P0JhCNcBuGyWta96f+EKSyw88hvmg6frQDxxwHt7UQaLlRwPjqx5sKjK7WVuflGPErRb

UbkOb7z0FpJAjncrKTmS6qfMJqy27+dzmchWejE2W7CLynkKszz8d9/MYjH6f4LQDYxP

Hnuw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1738578883; x=1739183683;

h=to:subject:message-id:date:from:sender:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=m3QIGfKuZ9B2x3w7jT8qXt43bjAU2SzUZLSQCqB7mo0=;

b=vUDjdTWhICEldBARwgzQ4G12ANukzL2wbyL9Yydgt4excmw9x8hkQNrEHda59FM5Au

OBTgYtxNIkvl4U94NoJAXRFvDv9mUVbm3uTsTnrZ7sNgwDJlJCpNA/24k7Gz5ukRux0o

5vkTAt6Hvfakrq03oJMLm6wOH2gKUhIYfUp564HmXvSjejijZY5YZASo4dho0PH/FbmB

qXuUUZ9/NBtWIm7riVBTrLGgqzTmd9hw1HxxSEHCY4B4vsA4LGd848LF4VZTQubTuB76

VgZqjzmK/YQ9U6TDY+dtaKULJiVtcTT+rESu7EsixsVY0VGda0+kS1cjjHIT+ICBqXZ6

oXKw==

X-Gm-Message-State: AOJu0YyUxWGMuTh8pJNU/eODGAkVIgZ6+Q26Pw1edckXAYC/Mui9LtP3

cuT8eK/nwAT9vloYNZOSJFwZt08dRh6f/uEX/ahK1HGq0/ixbtoLcDyzma2wM34uMEkBRMO3qEJ

YtOBAc3daFRIyUOVtuaHgF4CtCoczqQ==

X-Gm-Gg: ASbGncucQamOOyB67Bz8P60dOA5FcuMXjbg2+cBBAdqv+1JORtRE7c16L1B0x/xaTB7

SEpq5dgAOOG7fjwJQqKV59IipuIyKcu1vJB7STPI0Ra0zFCMZdjcVzogx4Hye2qP6xGPaQ6XDEi

L7QNGGZUcHnMwmmC/MKNNCHnPW

X-Google-Smtp-Source: AGHT+IFCYC/DVrylLb9CuajIGpnfus8hGxU8sfeGM4zT4y4JnyVH6gLTrTGUXMtRxp9d//QQ6iBqjOIilF8Mj1FDXl4=

X-Received: by 2002:a05:6402:348f:b0:5d0:d818:559d with SMTP id

4fb4d7f45d1cf-5dc5efbf626mr58309094a12.11.1738578883194; Mon, 03 Feb 2025

02:34:43 -0800 (PST)

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Mon, 3 Feb 2025 02:34:42 -0800

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Mon, 3 Feb 2025 02:34:42 -0800

MIME-Version: 1.0

Sender: Bethany

From: Bethany

Date: Mon, 3 Feb 2025 02:34:42 -0800

X-Google-Sender-Auth: 5707-Q0DffjrcizyoQTmfdFA8hU

X-Gm-Features: AWEUYZmgz2Eh9RhQ5SBHpdATo93MrX4vGBzyWUgxTAAgPRzZVnfw8ZcedmxTQbc

Message-ID:

Subject: Reasons Why your Website Nk.ca is Not Doing Good?

To: Sales

Content-Type: multipart/alternative; boundary="000000000000bf3554062d3a7048"

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear *Nk.ca *, I would like to have a discussion

with you regarding the web promotion strategy for your website *Nk.ca *.

We wish to work out a proposal to strengthen the online presence of your

websit [...]



Content analysis details: (5.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

[209.85.218.41 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

[209.85.218.41 listed in dnsbl.ahbl.org]

[209.85.218.41 listed in dnsbl.ahbl.org]

[209.85.218.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.218.41 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.218.41 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.218.41 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[bethanyalice22(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[bethanyalice22(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Reasons Why your Website Nk.ca is Not Doing Good?



--000000000000bf3554062d3a7048

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear *Nk.ca *,



I would like to have a discussion with you regarding the web promotion

strategy for your website *Nk.ca *. We wish to work out a

proposal to strengthen the online presence of your website, via a

strategically planned web promotion campaign. In today=E2=80=99s online era=

, you

should be focusing on the new revolutionary ways of generating traffic (and

subsequently, leads).



We are curious to know if you are aware that a few issues bugging your

website and sorting out these will help you get the best returns from your

website.



1. Your website seems to be attracting traffic, but this traffic is almost

stagnant and limited, which affects potential sales as you move forward.

2. Your website doesn=E2=80=99t feature in Google's first search page for s=

ome of

the major keywords in your niche, which affects visibility and your

business.

3. Your website has been diagnosed with On-Page and On-Site issues, which

affect the ranking.

4. Your backlinks profile is not efficient enough to help your search

engine visibility.

5. Your website is currently not being properly promoted online according

to Google=E2=80=99s new guidelines (after the latest Google update), which =

is

affecting your marketing strategy and goals.

6. Images are not optimized correctly.

7. Your website has some broken links.

8. Social media profiles are not updated regularly.

9. A low number of internal and external quality links are present on your

website.

10. Not updating fresh content for your website and blogs as per the latest

Google guideline. And many more...



We can help you to fix all the technical errors and improve your website's

keyword ranking in search engines. Also, let me update you that our service

prices are very affordable and cost-effective which will come up within

your budget.



We are experts in running a promotional online marketing campaign for

websites. We have a host of ethical services and techniques, which you can

utilize to improve your website's performance.



We are also doing website designing and redesigning at an affordable cost

and fast delivery within 2 weeks. As we are familiar with search

engine guidelines, so the website will be search engine friendly and

technically sound. Also, we are giving 3 months of free website maintenance

service.



If there is/are any bad reviews regarding you/your website, our ORM

campaign will help you to push down the bad reviews from 1st page to 3rd

page within 45 days of the campaign.



We are a one-stop service provider for your website. You can get all types

of services from us. Also, we are working around the clock, so your issues

or questions will be solved within 1-2 hours.



If my proposal sounds interesting for your business goal, feel free to

email me, or can provide me with your phone number, Whatsapp number, or

Skype Id and the best time to call you. You can ask me to provide you with

our pricing plans with detailed deliverables.



Waiting for your reply.



Best Regards,

Bethany

Search Engine Consultant

---------------------------------------------------------------------------=

-----

PS: If you are interested in an audit report please specify your website

and our technical team will send you the report within one working day.

Disclaimer: This is a one-time email and you can ask me to "Remove" your

details from our database.



--000000000000bf3554062d3a7048

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




r=3D"ltr">

r">

id=3D"gmail-m_-6952956773213907019gmail-m_-9087480068046246001gmail-:xz"><=

div id=3D"gmail-m_-6952956773213907019gmail-m_-9087480068046246001gmail-:xv=

" aria-label=3D"Message Body" role=3D"textbox" aria-multiline=3D"true" styl=

e=3D"direction:ltr;min-height:240px">

dir=3D"ltr">
Dear
.ca">Nk.ca
,

I would like to have a discussion with you regar=

ding the web promotion strategy for your website
">Nk.ca
. We wish to work out a proposal to strengthen the online pr=

esence of your website, via a strategically planned web promotion campaign.=

In today=E2=80=99s online era, you should be focusing on the new revolutio=

nary ways of generating traffic (and subsequently, leads).

We are cu=

rious to know if you are aware that a few issues bugging your website and s=

orting out these will help you get the best returns from your website.
<=

br>1. Your website seems to be attracting traffic, but this traffic is almo=

st stagnant and limited, which affects potential sales as you move forward.=


2. Your website doesn=E2=80=99t feature in Google's first search pa=

ge for some of the major keywords in your niche, which affects visibility a=

nd your business.
3. Your website has been diagnosed with On-Page and On=

-Site issues, which affect the ranking.
4. Your backlinks profile is not=

efficient enough to help your search engine visibility.
5. Your website=

is currently not being properly promoted online according to Google=E2=80=

=99s new guidelines (after the latest Google update), which is affecting yo=

ur marketing strategy and goals.
6. Images are not optimized correctly.<=

br>7. Your website has some broken links.
8. Social media profiles are n=

ot updated regularly.
9. A low number of internal and external quality l=

inks are present on your website.
10. Not updating fresh content for you=

r website and blogs as per the latest Google guideline. And many more...
>
We can help you to fix all the technical errors and improve your websi=

te's keyword ranking in search engines. Also, let me update you that ou=

r service prices are very affordable and cost-effective which will come up =

within your budget.

We are experts in running a promotional online m=

arketing campaign for websites. We have a host of ethical services and tech=

niques, which you can utilize to improve your website's performance.
>
We are also doing website designing and redesigning at an affordable c=

ost and fast delivery within 2 weeks. As we are familiar with search engine=

=C2=A0guidelines, so the website will be search engine friendly and technic=

ally sound. Also, we are giving 3 months of free website maintenance servic=

e.

If there is/are any bad reviews regarding you/your website, our O=

RM campaign will help you to push down the bad reviews from 1st page to 3rd=

page within 45 days of the campaign.


dir=3D"ltr">We are a one-stop service provider for your website. You can ge=

t all types of services from us. Also, we are working around the clock, so =

your issues or questions will be solved within 1-2 hours.

If my prop=

osal sounds interesting for your business goal, feel free to email me, or c=

an provide me with your phone number, Whatsapp number, or Skype Id and the =

best time to call you. You can ask me to provide you with our pricing plans=

with detailed deliverables.

Waiting for your reply.

Best Reg=

ards,
Bethany=C2=A0
Search Engine Consultant
---------------------=

-----------------------------------------------------------
PS: If you a=

re interested in an audit report please specify your website and our techni=

cal team will send you the report within one working day.
Disclaimer: Th=

is is a one-time email and you can ask me to "Remove" your detail=

s from our database.
<=

/div>




--000000000000bf3554062d3a7048--

wEb/SEo/App spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 03 Feb 2025 06:45:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tewkO-000000009wg-0Kgo

for dave@doctor.nl2k.ab.ca;

Mon, 03 Feb 2025 06:44:20 -0700

Resent-From: The Doctor

Resent-Date: Mon, 3 Feb 2025 06:44:20 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f65.google.com ([209.85.216.65]:55512)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tesL9-00000000MHx-1Ozy

for root@nk.ca;

Mon, 03 Feb 2025 02:02:05 -0700

Received: by mail-pj1-f65.google.com with SMTP id 98e67ed59e1d1-2ee397a82f6so6937174a91.2

for ; Mon, 03 Feb 2025 01:00:12 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=websitesingh-com.20230601.gappssmtp.com; s=20230601; t=1738573207; x=1739178007; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=8hfJV0dkxBNbLOWH95a+JA9fZNnANvQoKDnN8zY91YI=;

b=mv/9sZ8i7VCCBPTo1jS/qhppn1IfIR6+OcpAE20oHXOC40r8Jfi+Th8eiiqlEgj48s

oWYAWP7L+9ljXpQLBdnj9MDtL1aigHklGHUJxOT75FgAmaRaF4NYrfumATtalo4HpD/T

MieP/Je8CpA0hIFsQ7mgZGUyZ77gIiLFt+g9o8F/r1qptRW4Y78eOy/SS7zVgW52AhvD

pspcKp1y1fDDExU9GvXKUU+BhBDWwljJBKfR3eMHAOYAAghVU6qgEIQTjFaHOq/Zku+M

SWo9BeN6rdupXZ59T7WCXn2KdrxpUAjMGx/xwkPmpaQIZUyyCWDNZuNOBnNO3dYUQZkz

Bw0Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1738573207; x=1739178007;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=8hfJV0dkxBNbLOWH95a+JA9fZNnANvQoKDnN8zY91YI=;

b=dTxSFACvsTBkmK6jPm9D6qRWFkdPftcnip3Yn43TadVnqyQ1DfSZ8M91wewrUkZbm4

ux7cuGGof5uqpXJSfJx5a43twxZg3WShW/5Ocg/KjWBdytM5eCQrjedtVRAQRguVJ4fs

KZ/WYDUbjqj8Fyo9WDv/1fh9fj/Wk1MRunnx4wdYXKSpWqrDzMi9WCzhHTyqpjPQNJco

hl5QyPnMJFPsPnFFBd2okDYv5Z+scDyuV2HoUhKjZk9tYhe7XYMnkgJiPpGNi0CP/PyE

FkWwtgRTHewPkLVJsG9BmXvy1aLVX5WHBX564LEpJlnnAgJfqH/k/0IKxOVLWDkmaig1

eStQ==

X-Gm-Message-State: AOJu0Yzv34DRtBara7Vg4nkvUfEyZtXypl9DPRFXjGmgsIX0iUhCDtyl

p+iW8lZ2nZOx9GW9rGcouzoEKoSO7rkJ8HHb9tT2QdjqOPJx3WrpYtERWNoVmM0aDcUFwnbQT32

ibzI=

X-Gm-Gg: ASbGncvLKUyyIdCaYzmX1vmmm7Xy9C0A5QQhox6fiPwcPIYBBAxjFd4+pp31toqc0ii

rYMjdzkrNMTeQjcs32kE0L0P6gzNWw4EGknLx8YRAu8IsPtygmjgfXHOAw75aer/mhdYIswJw56

UsGOa4ZwigL/jtbeO4n4KFmWaW+PjEeKOQqIvWtgDZjEK/ps93nERkhSalHdRrK1s9UWRnfd7wF

A7tDLBU8g/h5N/wrDnkAWGVSSFWY+RCcYXyefzqoH+50PhS6JIK0Nlpo66U/1FV2i7cDC/SB12T

LIpwAj1bgshlH1Qo4vir/6pieo7AlCFx

X-Google-Smtp-Source: AGHT+IE7E1IaiwuFTJ0NGKpSce9mgIs2R0cxuTdmADrOB0h8Pjuh7bkDVRoKBi0JhFoMsE0Rww/gug==

X-Received: by 2002:a17:90b:4d0c:b0:2ee:db1a:2e3c with SMTP id 98e67ed59e1d1-2f83abab598mr29293491a91.1.1738573206724;

Mon, 03 Feb 2025 01:00:06 -0800 (PST)

Received: from om ([2401:4900:1c64:d875:8161:fb55:bebd:330b])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-21de3323e5bsm70782885ad.223.2025.02.03.01.00.05

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Mon, 03 Feb 2025 01:00:06 -0800 (PST)

From: "Jagat"

To:

Subject: web development offers

Date: Mon, 3 Feb 2025 14:19:43 +0530

Message-ID: <1845201db761a$04edc440$0ec94cc0$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_18453_01DB7648.1EA60040"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: Adt2C6LfMvqDgoDKQVWulsQ4E4cNOA==

Content-Language: en-us



This is a multi-part message in MIME format.



------=_NextPart_000_18453_01DB7648.1EA60040

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,







I'm web developer who builds amazing looking websites for your businesses.

I'd like to have the chance to show you how I can improve for your business.







I'm an expert in the Word Press website platform and many other platforms

and shopping carts.







I can upgrade your existing website or build you a new one completely that

has all of the modern features and functionality.







If you are interested, please let know.







Thanks,







Jagat





------=_NextPart_000_18453_01DB7648.1EA60040

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>

Hi,


class=3DMsoNoSpacing> 


class=3DMsoNoSpacing>I’m web developer who builds amazing looking =

websites for your businesses. I’d like to have the chance to show =

you how I can improve for your business.


class=3DMsoNoSpacing> 


class=3DMsoNoSpacing>I’m an expert in the Word Press website =

platform and many other platforms and shopping carts.


class=3DMsoNoSpacing> 

I can =

upgrade your existing website or build you a new one completely that has =

all of the modern features and functionality.


class=3DMsoNoSpacing> 

If you =

are interested, please let know.


class=3DMsoNoSpacing> 


class=3DMsoNoSpacing>Thanks,


class=3DMsoNoSpacing> 


class=3DMsoNoSpacing>Jagat



------=_NextPart_000_18453_01DB7648.1EA60040--



WEb/SEo/App spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 03 Feb 2025 06:44:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tewjm-000000009v9-24uW

for dave@doctor.nl2k.ab.ca;

Mon, 03 Feb 2025 06:43:42 -0700

Resent-From: The Doctor

Resent-Date: Mon, 3 Feb 2025 06:43:42 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f66.google.com ([209.85.167.66]:50606)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tepwu-00000000DDy-2yy9

for sales@nk.ca;

Sun, 02 Feb 2025 23:28:54 -0700

Received: by mail-lf1-f66.google.com with SMTP id 2adb3069b0e04-543cc81ddebso4712408e87.1

for ; Sun, 02 Feb 2025 22:26:55 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=websolutionai.com; s=google; t=1738564008; x=1739168808; darn=nk.ca;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=HyrQs1wC20AQlIq4n5tPjZCZrG2mwbYtfPbNlKBVIn4=;

b=C/G/pLukP0EJMAkeFbC8z6a0QrS+Xo7l584GwtBJdushXv5UsAg+E3Ac/5eRwE9W4x

XnJMqoCcDTvY2OLL+wduJ6ELYrtG7l0PN89Sm3C01+QU2MHojHJ31Kko3uylRQMvagmq

YauwVVqxPSperlEejHKIQX+0rsLVS1d5TPEATsacF63mHhBL6psK8jlyNj6b5yaRY8J2

2LCQxtCPMxTO8faDA27kM+AY3IRjKrMYdt6sfZo6yjL7+0FTNFI+mlS56lSemCM6/3Z5

w/YOTDJBDqvmlTC0ieQS1rEdPwU11tcxyj3t09p01sCXWUvS2YaJl0FHw1CstIsg+ZRs

6B8A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1738564008; x=1739168808;

h=to:subject:message-id:date:from:sender:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=HyrQs1wC20AQlIq4n5tPjZCZrG2mwbYtfPbNlKBVIn4=;

b=UXjhBP02QRT0ehe6Lx6wIgTI04Bik9A2w0qwywqiLT4mXmSOWBPQSibATkBSsRfChv

jq7hzaMzqeATjHk8wCAk1l/x7M/552ETffl0tI/am3e5bAU/tb/2Y+UIi+jNRbPGBy7H

KGs9Et/VKUfNBKZt9quNlxHrojkj7bWzrFMS61uimk4Yjc/VzOSyTtarnAudPGpbNfI0

zQJajrBvivs7Y5ptMzLOFQ4MC7oss0g4QEUGlNn3IS5l9QN+JPGwiPjKavZcGewxCBWI

P3wr47AwJvOwj+f4yTtqQ+9EZwmNxAKngmnb1HMwEZaXD0Mx82c/1OGvl4JImyXwPsWx

esPQ==

X-Gm-Message-State: AOJu0Ywf0JwF6ShBPyjHTMsLlD89z1HeFCkzEAjlxrhJqzcNw4gijxIm

R/bCIaOsE4Ww3Nb5k6pW/JI9N+w5JimxIQmTu5/GZAGsttgzovId2HksGgK0ScNf/MjJbUEuU22

Se5IjDhLKqoCUFXX6bTgcCMhFVSI5wmINr5gfoJVJIvUTKTMINlqmUA==

X-Gm-Gg: ASbGncspQ7XrplhyiTTz5P2byBSmkWm9VOv+R0F7rNv1G13bAmIr8gdLLz71e8CvqV2

EwTM6L7qtU43zJ9yC15WyAcAqw3GXY7EYzozObQBu6w9Oie4SzCT+IKi6oDNNdPPO+X+IU5/r68

0=

X-Google-Smtp-Source: AGHT+IHndI9B62HZ0hGG9Gg83L01lEitdY9hyfRLtVCpz+Rh8IPILZDM67HLzWbxzA0sZUC88oDa8hN1fr51Qd95O6E=

X-Received: by 2002:a05:6512:3b26:b0:53e:389d:8ce4 with SMTP id

2adb3069b0e04-543e4c32c69mr6165124e87.34.1738564007673; Sun, 02 Feb 2025

22:26:47 -0800 (PST)

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Sun, 2 Feb 2025 22:26:47 -0800

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Mon, 3 Feb 2025 00:26:46 -0600

MIME-Version: 1.0

Sender: Edna Roberts

From: Edna Roberts

Date: Sun, 2 Feb 2025 22:26:47 -0800

X-Google-Sender-Auth: cY16RJZU0GjU27r3QcCmbcFMnIM

X-Gm-Features: AWEUYZnMCR7d6mcmdYJcmeCZwm6Dreg0psO4WiayUoh19-nTOpY0lhBqungGIes

Message-ID:

Subject: Re : nk.ca "Send me Issue Report & quote"

To: Sales

Content-Type: multipart/alternative; boundary="00000000000018d334062d36faee"



--00000000000018d334062d36faee

Content-Type: text/plain; charset="UTF-8"



Dear nk.ca



,







I wanted to bring to your attention some concerning issues regarding

your *nk.ca

*,

website.

It appears that your website has numerous technical errors and lacks proper

optimization for google.



I would be happy to send you errors and the solutions that would help to

improve your *nk.ca



*website

performance and traffic.



I guarantee, you will see a drastic change in your Google search ranking

once these are fixed.





If yes please allow me to send you "Estimated timeline to reach first page

and price list "




Stay safe!



Kind Regards



Edna Roberts





Digital Marketing Expert*------------------------------

-----------------------------------

PS1: -If you are
interested* please email me asking "Send me Issue

Report & quote".




Click here



to unsubscribe

[image: beacon]



--00000000000018d334062d36faee

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




dth=3D"386" style=3D"width:289.2pt;background-image:initial;background-posi=

tion:initial;background-size:initial;background-repeat:initial;background-o=

rigin:initial;background-clip:initial;border-collapse:collapse">
style=3D"height:13.1pt">

289.2pt;padding:0.75pt 0.75pt 0cm;height:13.1pt">


le=3D"margin:0cm;line-height:normal">
an style=3D"color:black">Dear=C2=A0
href=3D"https://websolutionai-dot-yamm-track.appspot.com/2_TAIWN5XMCzqiBLK=

U1uU1dJ8Ll3N6DhBjXcINfuhyNAxbX3KlAEatUFz6dIX6510WcTHgm8TyMotGcj9OEB-wizO4ug=

gFu_gxnnfPH2emsswNInj2nIcGjnp3U5V6HH3QVUbfUWOuh4JoowdD0avnaeACHTkKGm8u7Fol6=

gL" rel=3D"nofollow">nk.ca
,
n>


>=C2=A0
t>


in:0cm 0cm 10pt;line-height:12.65pt;background-image:initial;background-pos=

ition:initial;background-size:initial;background-repeat:initial;background-=

origin:initial;background-clip:initial">=

I wanted to bring to your attention some concer=

ning issues regarding your=C2=A0

ef=3D"https://websolutionai-dot-yamm-track.appspot.com/2zGLFZt9lscYIBtE0QHo=

3dkgfbnmGiUEITtIsLMUcsFQ0bX3KlAFwV634btPgBiO2A6lrlFlhVdxbXsX6WxGzOyNkQCA3kZ=

wlLXg-p6eYvZqHPjMhDdVeRad7YDBYKqOXRHyfsQOnKXXwoMXTXFTvz5SJ1H-iRFvrkoosbq1Y"=

rel=3D"nofollow">nk.ca
,=C2=A0we=

bsite. It appears that your website has numerous technical errors and lacks=

proper optimization for google.


yle=3D"margin:0cm 0cm 10pt;line-height:15pt;background-image:initial;backgr=

ound-position:initial;background-size:initial;background-repeat:initial;bac=

kground-origin:initial;background-clip:initial">
>I would be happy to=C2=A0
=3D"background:lime">send you errors and the solutions
=C2=A0that=

would help to improve your=C2=A0
mm-track.appspot.com/24x7vJxX7oqYhyx9a4ICMqLRokcGIU8Iey0Iuc0-kNbE3bX3KlAGbV=

jORHxzXu_l69OfYuYk65TXhKN_68rOSFIpNE0HGVAHrNW7CmsAkJpjru_-Qq46RPJnUl1VyJ-Y0=

WRb178H5ozUvnwwBba85ggz-ZG0dO4buGsuM-bvD" rel=3D"nofollow">nk.ca
=C2=A0<=

/b>website performance and traffic.


style=3D"margin:0cm 0cm 10pt;line-height:15pt;background-image:initial;bac=

kground-position:initial;background-size:initial;background-repeat:initial;=

background-origin:initial;background-clip:initial">
ck">I guarantee, you will see a drastic =

change in your Google search ranking once these are fixed.

>


round-image:initial;background-position:initial;background-size:initial;bac=

kground-repeat:initial;background-origin:initial;background-clip:initial"><=

b>
If yes=

please allow me to send you=C2=A0"Est=

imated timeline to reach first page and price list "
=C2=A0
t>


eight:15pt;background-image:initial;background-position:initial;background-=

size:initial;background-repeat:initial;background-origin:initial;background=

-clip:initial">
k">Stay safe!


in:0cm 0cm 0.0001pt;line-height:normal">=

Kind Regards=


ght:normal">
font-weight:700">Edna Roberts


gin:0cm 0cm 8pt;line-height:14.95px">
:black">Digital Marketing Expert<=

font face=3D"Times New Roman, serif">

pan>
------=

------------------------

f">-----------------------------------

s-serif" style=3D"color:black">PS1:=C2=A0-If you are=C2=A0interes=

ted
=C2=A0please email me asking=C2=A0

ont face=3D"verdana, sans-serif">"Send me=C2=A0Issue Report & quot=

e".


line-height:15pt;background-image:initial;background-position:initial;backg=

round-size:initial;background-repeat:initial;background-origin:initial;back=

ground-clip:initial">
nt-family:verdana,sans-serif">Click=C2=A0

ionai-dot-yamm-track.appspot.com/2C941LW3Eh_dOvtd170MfGQA-GwGlIIS0PVPziQGKO=

nA6bX3KlAGqA0iAuzu8LmeAq6_cvuWHghX7uli5dYgSPeBGE7yznRZPhS_beL0IkRVrEoyUj6EU=

YGpiGQLG0Vh81LngT0PC1gne3injYBlpMTrHMRKbgDklXpOKxnN1VADM" rel=3D"nofollow" =

target=3D"_blank" style=3D"font-size:x-small;font-family:verdana,sans-serif=

">here

ly:verdana,sans-serif">=C2=A0

(0,0,255);font-family:verdana,sans-serif">to unsubscribe

=3D"verdana, sans-serif" style=3D"font-size:x-small">=

=C2=A0

lor:black">=C2=A0




QIsAuEc2R1YhsDm4f2TUkRtlkal5PcrbX3KlAHMaa_vGMfqZE6hp9Jv7y0ZxW_egJxOE37JsD78=

c0cF8u43qVnuKZLumMEwpmT-ECotSs265r6-EnE-7IYY_vrE3vWNzkkfezZkLBQ3LALegfGQ" w=

idth=3D"1" height=3D"1" alt=3D"beacon" style=3D"display:none; display:none!=

important;">



--00000000000018d334062d36faee--

NetKnow now in Netcraft's Top 2050

All data is from Netcraft Toolbar .

Looks as if there are major changes to the Netcraft algorithm after some years! Why did Avast clasify the extension as URL:Phishing?

This is not the Alexa Tool Bar!



NetKnow







Netknow now 2034 at Netcraft
and pfs compliant



A significant decrease! We must do
  1. security audits regularly
  2. check on illegitimate traffic hitting the web server
  3. and
  4. keep design current!




How do we compare with other providers in

Edmonton
, Alberta, Canada?



Netknow again





We at Netknow are 2034 from 1672 since late December 2024.



Telus and reviews



Next we have Telus.com

ranked by Netcraft at 6745 from 6613 .

Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business


is ranked by Netcraft at >2000000 from >2000000 .



Rogers





Rogers Business Solutions

which rank 9383 from 9349 and are hosted in Europe.



Is Telus's ADSL network susceptible to Code Red Attacks and Attackers?

Reviews of Telus are available :





Government of Alberta



The Government of Alberta Website

ranks 13597 from 13593 by Netcraft and seems to hosted on Cloudfare.



University of Alberta







The University of Alberta
ranks 42918 from 42513 hosted by Amazon Techonologies.



Shaw Cable





Next,

members.shaw.ca

ranks >2000000 from >2000000 and retired and

Shaw Cable

is next at Netcraft rank 56459 from 56104 . Hosted now by Akamei .

Their Network Hosting Arm,

Big Pipe is at

Netcraft rank 261696 from 266668 and hosted by Akamai in Europe .



Reviews of Shaw are available :





City of Edmonton







The City of Edmonton
ranks 58181 from 57607 by Netcraft and hosted by Google.



Juno and NetZero





We have Juno Internet ranked on top

at 114821 from 116383 who are the owners of

US Based Netzero
at Netcraft Rank 79060 from 74251 .



NAIT / Northern Alberta Institute of Technology



NAIT ranks 88400 from 95145 hosted by Microsoft .



TekSavvy



TekSavvy ranks 187098 from 189473 and are hosted by Microsoft



Internet Centre / CCINet



Internet Centre

rank 277069 from 277048 . Their partner Rack Nine ranks > 2000000.



Grant MacEwen University





MacEwan ranks 352089 from 376399 .



Primus



Primus

ranks 443647 from 425751 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.



Distributel / 3Web / CIA



Cybersurf

is ranked 561106 from 560989 and seems to be hosted in USA by DigitalOcean.



Xplornet



xplornet

ranks >2000000 from >2000000 and are listed with

Cirrus9 and are joining up with Shaw.

Their new domain xplore.ca ranks 588305 from 588029 .

According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy.



Radiant Communications / goco.ca





Radiant Communications

are ranked by Netcraft >2000000 and part of goco.ca

which ranks >2000000 .



Tera Byte Edmonton and reviews





Next is Tera-Byte

at Netcraft Rank >2000000 with

Tera-Byte.ca

ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless

sold to Xplornet.

One of Tera-Byte's acquisitions

Edmonton Community Networks

ranks at >2000000 from >2000000 and

Go Edmonton ranks >2000000 from >2000000.

Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!

Reviews of Tera-byte is available at

here

and another here

and check Google for more reviews; just search tera byte.



MCSnet





MCSNET ranks >2000000 from >2000000 and are hosted by Microsoft .



Nucleus Internet Services





After that we have

Nucleus Information Services
which can be found at Netcraft Rank >2000000 from >2000000 .





4Web





4web ranks >2000000 from >2000000 .



Alentus / Wolfpaw





Alentus

rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA .

wolfpaw.net

which ranks at >2000000 from >2000000



Yellowpencil





Yellowpencil Ranks >2000000 from >2000000



WSI Corporation





Next is WSI - We Simply The Internet of Toronto

at Netcraft Position >2000000 from >2000000 and are being hosted on Amazon.



Uniserve / Interbaun





Next, Uniserve

ranks on Netcraft >2000000 from >2000000

One of their acquisitions

interbaun

ranks with Netcraft ?????? from ?????? due to merging of sites.

One customer just came over from this organization in Nov 2006.



Clearwave Broadband





Clearwave Broadband ranks

at >2000000 from >2000000



Platinum Communications





Platinum Communications Corp.

bought out by Xplornet .



Wild Rose Internet





Wild Rose Internet

ranks >2000000 from >2000000 and I wonder if this is another wireless branch of Tera-Byte and bought out by Xplornet





TIC Internet





TIC Internet

ranks >2000000 from >2000000 ( I do remember you).







Nisa Custom Internet Solutions





Nisa Custom Internet Solutions

ranks >2000000 from >2000000 by Netcraft



MediaShaker





Media Shakers of Edmonton

ranks >2000000 from >2000000





Koi Media





Koi Media

rank >2000000 from >2000000



WebFire





Webfire.ca

ranks >2000000 from >2000000 and seems to be connected with Shaw.



Core Network Solutions Inc.





Core Network Solutions Inc.

ranks at >2000000 from >2000000 .



The Network Centre





The Network Centre

ranks >2000000 from >2000000 and are linked with Telus high Speed.





Open Concept Internet, Inc.





Open Concept Internet, Inc.

rank > 2000000 from > 2000000





Techalta





Interspots of Edmonton

acquired by Techalta ;



Yegtel





Yegtel rank > 2000000 .



Internet Crossroads





Internet Crossroads Ltd of North Edmonton

rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca .



If I remember anymore, I will add to this entry, before Netcraft changes our ranking. Please watch this space and please feel free to peruse

our services. X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 01 Feb 2025 15:22:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1teLrP-00000000C0z-0i0G

for dave@doctor.nl2k.ab.ca;

Sat, 01 Feb 2025 15:21:07 -0700

Resent-From: The Doctor

Resent-Date: Sat, 1 Feb 2025 15:21:07 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [185.75.241.131] (port=42015 helo=betliusder.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

id 1teLOT-000000004KC-0BAn

for sales@netknow.ca;

Sat, 01 Feb 2025 14:51:31 -0700

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=netknow.ca;

h=MIME-Version:To:From:Subject:Content-Type:Content-Transfer-Encoding; i=sales@netknow.ca;

bh=y1oO98/Rj+dxbCwdWWIcDEMU4xY=;

b=iQ1T6m82Np60Vqpq8HPoMPaUjEfmJDczve2/BvxVpidQyfOlkGKtkxhy+WoPBNWiuRXZgH9loNtL

dFCIpcbllu5wsayT3P8joibXjbOOTS8v1ElTO2stWNIo/QUv3L1ZtMXYXJKTkdXLwcAw5m5H3AP2

/Ok2lP0l9w7+zWZjGso=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=netknow.ca;

b=NjI4pcqKBxVXhqY1bc0g97KjYGjgt9O7yb9/eoXEXtNAdHxwTls89jh4xYk5XaAedim3QG4vq9ly

A23fA267ttn/7tdJIzS5Z9JPBV6uatxeHKtDuP9OeaaI/zZzAh63bmxe3/08R+faCNqnV5mLjcmD

OshicR5nDR/WAFECl+4=;

MIME-Version: 1.0

To: sales@netknow.ca

From: Sam's Club

Subject: Your Sam's Club Membership has Expired

Content-Type: text/html

Content-Transfer-Encoding: base64

X-Spam_score: 15.3

X-Spam_score_int: 153

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Congrats sales! If you no longer wish to receive these emails,

you may unsubscribe by clicking Here or by writing to 115 E 23rd St New York,

NY, US 10010



Content analysis details: (15.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.4 MISSING_DATE Missing Date: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.75.241.131 listed in will-spam-for-food.eu.org]

[185.75.241.131 listed in will-spam-for-food.eu.org]

[185.75.241.131 listed in will-spam-for-food.eu.org]

[185.75.241.131 listed in will-spam-for-food.eu.org]

[185.75.241.131 listed in will-spam-for-food.eu.org]

[185.75.241.131 listed in will-spam-for-food.eu.org]

[185.75.241.131 listed in will-spam-for-food.eu.org]

[185.75.241.131 listed in will-spam-for-food.eu.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[185.75.241.131 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[185.75.241.131 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[185.75.241.131 listed in sa-accredit.habeas.com]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[185.75.241.131 listed in dnsbl.ahbl.org]

[185.75.241.131 listed in dnsbl.ahbl.org]

[185.75.241.131 listed in dnsbl.ahbl.org]

[185.75.241.131 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[185.75.241.131 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[185.75.241.131 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[185.75.241.131 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[185.75.241.131 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[185.75.241.131 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: wee.so]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length

greater than 79 characters

1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} Your Sam's Club Membership has Expired



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

NetKnow now in Netcraft's Top 2050

All data is from Netcraft Toolbar .

Looks as if there are major changes to the Netcraft algorithm after some years! Why did Avast clasify the extension as URL:Phishing?

This is not the Alexa Tool Bar!



NetKnow







Netknow now 2034 at Netcraft
and pfs compliant



A significant decrease! We must do
  1. security audits regularly
  2. check on illegitimate traffic hitting the web server
  3. and
  4. keep design current!




How do we compare with other providers in

Edmonton
, Alberta, Canada?



Netknow again





We at Netknow are 2034 from 1672 since late December 2024.



Telus and reviews



Next we have Telus.com

ranked by Netcraft at 6745 from 6613 .

Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business


is ranked by Netcraft at >2000000 from >2000000 .



Rogers





Rogers Business Solutions

which rank 9383 from 9349 and are hosted in Europe.



Is Telus's ADSL network susceptible to Code Red Attacks and Attackers?

Reviews of Telus are available :





Government of Alberta



The Government of Alberta Website

ranks 13597 from 13593 by Netcraft and seems to hosted on Cloudfare.



University of Alberta







The University of Alberta
ranks 42918 from 42513 hosted by Amazon Techonologies.



Shaw Cable





Next,

members.shaw.ca

ranks >2000000 from >2000000 and retired and

Shaw Cable

is next at Netcraft rank 56459 from 56104 . Hosted now by Akamei .

Their Network Hosting Arm,

Big Pipe is at

Netcraft rank 261696 from 266668 and hosted by Akamai in Europe .



Reviews of Shaw are available :





City of Edmonton







The City of Edmonton
ranks 58181 from 57607 by Netcraft and hosted by Google.



Juno and NetZero





We have Juno Internet ranked on top

at 114821 from 116383 who are the owners of

US Based Netzero
at Netcraft Rank 79060 from 74251 .



NAIT / Northern Alberta Institute of Technology



NAIT ranks 88400 from 95145 hosted by Microsoft .



TekSavvy



TekSavvy ranks 187098 from 189473 and are hosted by Microsoft



Internet Centre / CCINet



Internet Centre

rank 277069 from 277048 . Their partner Rack Nine ranks > 2000000.



Grant MacEwen University





MacEwan ranks 352089 from 376399 .



Primus



Primus

ranks 443647 from 425751 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.



Distributel / 3Web / CIA



Cybersurf

is ranked 561106 from 560989 and seems to be hosted in USA by DigitalOcean.



Xplornet



xplornet

ranks >2000000 from >2000000 and are listed with

Cirrus9 and are joining up with Shaw.

Their new domain xplore.ca ranks 588305 from 588029 .

According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy.



Radiant Communications / goco.ca





Radiant Communications

are ranked by Netcraft >2000000 and part of goco.ca

which ranks >2000000 .



Tera Byte Edmonton and reviews





Next is Tera-Byte

at Netcraft Rank >2000000 with

Tera-Byte.ca

ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless

sold to Xplornet.

One of Tera-Byte's acquisitions

Edmonton Community Networks

ranks at >2000000 from >2000000 and

Go Edmonton ranks >2000000 from >2000000.

Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!

Reviews of Tera-byte is available at

here

and another here

and check Google for more reviews; just search tera byte.



MCSnet





MCSNET ranks >2000000 from >2000000 and are hosted by Microsoft .



Nucleus Internet Services





After that we have

Nucleus Information Services
which can be found at Netcraft Rank >2000000 from >2000000 .





4Web





4web ranks >2000000 from >2000000 .



Alentus / Wolfpaw





Alentus

rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA .

wolfpaw.net

which ranks at >2000000 from >2000000



Yellowpencil





Yellowpencil Ranks >2000000 from >2000000



WSI Corporation





Next is WSI - We Simply The Internet of Toronto

at Netcraft Position >2000000 from >2000000 and are being hosted on Amazon.



Uniserve / Interbaun





Next, Uniserve

ranks on Netcraft >2000000 from >2000000

One of their acquisitions

interbaun

ranks with Netcraft ?????? from ?????? due to merging of sites.

One customer just came over from this organization in Nov 2006.



Clearwave Broadband





Clearwave Broadband ranks

at >2000000 from >2000000



Platinum Communications





Platinum Communications Corp.

bought out by Xplornet .



Wild Rose Internet





Wild Rose Internet

ranks >2000000 from >2000000 and I wonder if this is another wireless branch of Tera-Byte and bought out by Xplornet





TIC Internet





TIC Internet

ranks >2000000 from >2000000 ( I do remember you).







Nisa Custom Internet Solutions





Nisa Custom Internet Solutions

ranks >2000000 from >2000000 by Netcraft



MediaShaker





Media Shakers of Edmonton

ranks >2000000 from >2000000





Koi Media





Koi Media

rank >2000000 from >2000000



WebFire





Webfire.ca

ranks >2000000 from >2000000 and seems to be connected with Shaw.



Core Network Solutions Inc.





Core Network Solutions Inc.

ranks at >2000000 from >2000000 .



The Network Centre





The Network Centre

ranks >2000000 from >2000000 and are linked with Telus high Speed.





Open Concept Internet, Inc.





Open Concept Internet, Inc.

rank > 2000000 from > 2000000





Techalta





Interspots of Edmonton

acquired by Techalta ;



Yegtel





Yegtel rank > 2000000 .



Internet Crossroads





Internet Crossroads Ltd of North Edmonton

rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca .



If I remember anymore, I will add to this entry, before Netcraft changes our ranking. Please watch this space and please feel free to peruse

our services.