Human resources spam from Sendgrid

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 31 Jul 2024 06:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sZ8Ck-00000000Lhy-3BqU

for dave@doctor.nl2k.ab.ca;

Wed, 31 Jul 2024 06:13:18 -0600

Resent-From: The Doctor

Resent-Date: Wed, 31 Jul 2024 06:13:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from xtrwkhkk.outbound-mail.sendgrid.net ([167.89.16.17]:4102)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sZ84M-00000000K7e-1hqb

for root@nk.ca;

Wed, 31 Jul 2024 06:04:55 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ease-servicesgroup.com;

h=content-type:from:mime-version:subject:reply-to:to:list-unsubscribe:

list-unsubscribe-post:cc:content-type:from:subject:to;

s=s1; bh=dzr9MV4rZU/2rZXbUl2pTVuWKpJavXDyV4QEs/FDoDg=;

b=YMQo6hAqyhgEToShrL0PJ/GyLchafn8SSr1E6jP0jnOfOd4ZjWadC8OAWOnX6hJ6g7LK

O236XsIAG5OU2EonacQw3o4snuPmGLj8DCd4qtUrR1GO/mL+Cpu6tEHjTXgSH5dg7N5FKd

CwY3yeMSTLMHL1+w7af4QWoUx7qOGLvTec8SGLPVoKeJpBy8QMXf+ScFqSVXH4cPaazUMP

XVZv3C9+OplfWT2+ImCBJVSx3S+Akal/xNoZ0zqHx8kaWyL2pVJGY7/S3RGLBso82wWe69

vqFcIQAX+qqnp2+txqYVBvs4tVFqceQEwx7iCAJ2NB47VUv34UcWI6DQXftz/mVg==

Received: by recvd-8cbb9bdfd-khcxs with SMTP id recvd-8cbb9bdfd-khcxs-1-66AA27DA-97

2024-07-31 12:02:34.59292847 +0000 UTC m=+139322.161794603

Received: from NDYwNTEyMTc (unknown)

by geopod-ismtpd-10 (SG) with HTTP

id nmPVVkJHT6Oq-DKl52zIlg

Wed, 31 Jul 2024 12:02:34.529 +0000 (UTC)

Content-Type: multipart/alternative; boundary=3605cc5f92cf6dd9c9755662a2369d64f33a8dbae55a257ffeb83e6ef512

Date: Wed, 31 Jul 2024 12:02:37 +0000 (UTC)

From: HR Department

Mime-Version: 1.0

Message-ID:

Subject: Annual Leave Report

Reply-To: hr@ease-servicesgroup.com

X-SG-EID:

=?us-ascii?Q?u001=2Eh0=2FPrZVv+Q4W=2FjfBs3BdAuyUTsBiLXi3e0D7SNldpcInY=2FEgYv02wjZ1I?=

=?us-ascii?Q?nYMMSb7l9Ja5op74fuIMpCaaYL+ZfP2UpL9yTTY?=

=?us-ascii?Q?Ddlko4pudxO63JvTVWH0GrzQe5kI7Dg5l5YVrzp?=

=?us-ascii?Q?hL2F4evRKyN=2FNyHejFsNiZC+lfcQvA1qyK1pRX=2F?=

=?us-ascii?Q?7GQJkBOB1lDSTEi5dssRKVLd=2F1OQ=2FHqpJevPxG9?=

=?us-ascii?Q?UmOal+D9vem2aIFYlLLCuc=3D?=

X-SG-ID:

=?us-ascii?Q?u001=2EXwhBPNhCejkv4+fVosb2QVfR16Qxp9CrA7PjDe5zzeI=2F0IZCBsPXtgHbA?=

=?us-ascii?Q?oGIj+RskLxA4N2rJjSWrHfgX07tLOm0v5BUQcd6?=

=?us-ascii?Q?w3knjorGi7Hwu0WCOA5AFSvy0=2FwlG32=2FwR=2FbDvN?=

=?us-ascii?Q?KU+kw4WXehK7SDnHAb8OlJCkTLiCowcr11gqgjF?=

=?us-ascii?Q?PAODfN6OCzZEL1aTXOYQIZQtDg34ERsV0Io4jAx?=

=?us-ascii?Q?yCQRMgDg89c92Xkw2YGyKH8WSmD3gSafpCDDanj?=

=?us-ascii?Q?8zjcBNIzml6mqTWwBeDZP69aWJv6lD7CFaa8STG?=

=?us-ascii?Q?LMqZgQmDZUzPZnlUV3QrMLlvdSXhVzHjeaiUvVd?=

=?us-ascii?Q?jGRBCgy584KACARRSluKW7Y5qwIOKpRCRGJJDl7?=

=?us-ascii?Q?JLFpYlRBwXbNfedf6sA9wt0qzCpJppEqmG1sRCx?=

=?us-ascii?Q?=2FASle2Ho+TSNJMMJlUmNBg3mgVECwqHXRyTZp4F?=

=?us-ascii?Q?vV+K=2F9u4A++YFxY91w938aBdRf2PkD=2F=2FBWKmB9p?=

=?us-ascii?Q?oyvUvjLuyN6JQozkMyz+XIA7TRWSGQVtwhn4wxB?=

=?us-ascii?Q?sF1PVopn8zIzsGfoEp9MOVx7E8SwwiBqpiXHVRd?=

=?us-ascii?Q?1GzXNrF383SFVOzIWNjjZNEDbufE0vDx2TOo7Ok?=

=?us-ascii?Q?iti=2FYP+CNcSZXfXqVZxvKYu=2Fpb3n9HY=2Ft+u8Vgh?=

=?us-ascii?Q?CBXTRkQ8J2oJjzUQBLTPt4O4JqUZCPZvFLPf5A4?= =?us-ascii?Q?Fc=3D?=

To: root@nk.ca

X-Entity-ID: u001.0UR86WpktwczhWmd5jtigg==

List-Unsubscribe:

=?us-ascii?Q?=3Cmailto=3Aunsubscribe=40em3190=2Eease-servicesgroup=2Ecom=3Fsubject=3D4605?=

=?us-ascii?Q?1217=2EUTjaxX4nQhpiMWPQT63ltzFnbgl89bUyHp?=

=?us-ascii?Q?sWBiobDWNoMDAwdTAwMAuSYUZ0tsPY0C6lh44Ml?=

=?us-ascii?Q?KWpuI-5Bb0pcvEnXlD0qqcy3bL6qZPvuu-57oFW?=

=?us-ascii?Q?40-Ooc0ut0tiVHaQrVjEduVC7JUXrbNJpNhDnex?=

=?us-ascii?Q?LhuckEVBt=2EWENRk7Jg1Iq=5Fg7V8zMhjz2XwbYMNF?=

=?us-ascii?Q?yJbRY=5Fsv=5Fs4NKloMDAwdTAwMPK=5FMvqPP6icroBl?=

=?us-ascii?Q?QMKOdyb5yRKp3c7z40C4LR5mOEvoo=5Fbtnysy39=5F?=

=?us-ascii?Q?9-7TFQeVYUhwdCPj7EmPWidqjXEpDkJ84hEldde?=

=?us-ascii?Q?vshawZIQxwZopAsfXn0k422-ascWlUvC63gnDRy?=

=?us-ascii?Q?396gZ70FXMh--OEtPJlW5G0n1s-IWLLoEEMpSvV?=

=?us-ascii?Q?9h5eSO=5Fxhxl0N1TR2CMGVfN=5FW6e5fWKMWgwHTE8?=

=?us-ascii?Q?REKtrUDSyFPweqZkapUIeDzYTELFjKMPPvuyU08?=

=?us-ascii?Q?oh7vHQTMTvZyn79GR=5FB-9rQp5GXnnNlLlu3bg9u?=

=?us-ascii?Q?0Xyvt-PlPJBKGH-ysiDe4-71oMV5u3MF5NpxYi=5F?=

=?us-ascii?Q?a4qqtJSI7nySZIhiBZ4s0MW0daMjZ66qrky0BHx?=

=?us-ascii?Q?wYchHJ5ijQG7pUmY=5Ft1E4p42QnKu-L5PaqCQo=5F8?=

=?us-ascii?Q?TEEnmbGgrDz2Hq=5FRX9kJxGoYtpEBJwVjD-3vPos?=

=?us-ascii?Q?BTwfExN4G95xoQtRIL8UnP9gxlPFu7hmfyJifrY?=

=?us-ascii?Q?yUlemx-=5Fpag4Ut3NgK-koP2werulS-=5F-CFKlTlU?=

=?us-ascii?Q?kRK2BMwBk2dCQRSVbt-7D0xpyUoW8J1e8NDWuGs?=

=?us-ascii?Q?1mveSNV8a5qYMc5NGV-IDb6u0bNyt3jeKSlHc9D?=

=?us-ascii?Q?P2YH5SThi5P6UlYpP1OuVHENRpK0IlmUV5THix0?=

=?us-ascii?Q?rnOG3mC0bd0I4GrJLZKZb9dFd5VUDRT3nfsd5R2?=

=?us-ascii?Q?zokJrjm0fxVSfYkoDiolquqdHthOQT1NXPIZIX=5F?=

=?us-ascii?Q?kSV-IyZ1axhiDLBuZ7siGm=5FIf9H40otKWGjUC2l?=

=?us-ascii?Q?sbKViGAFcErd4oSEXHV-ZNkRjHM9qk5jg7Hs1ob?=

=?us-ascii?Q?9bQLzhPlwwHKC6vAxHiT6j2O0BNj8J=5FAn=5Fwg7Ij?=

=?us-ascii?Q?Ad7k9ybCBSngqQdT6Nfh3zc6J-seTs7yDfuOsoP?=

=?us-ascii?Q?Nv=3E=2C=3Chttps=3A=2F=2Fu46051217=2Ect=2Esendgrid=2Enet=2F?=

=?us-ascii?Q?lu=2Funsubscribe=3Foc=3Du001=2Ei07fkgMkUwJjKKmF?=

=?us-ascii?Q?OFBfX8ZJJGgz1YPdvpzWTnW6xROPTqktQx7ag6i?=

=?us-ascii?Q?OaJ8SbDU3JHa3ZfZafPub1vNfAguktZSvIV69jc?=

=?us-ascii?Q?zPH4GEXFrPV5FZho-zUybH2OHuFhr1N4n23QImA?=

=?us-ascii?Q?n6jRWKdn0intrUeGzSboiE4jFbNfRzIXdoykQHN?=

=?us-ascii?Q?F5yIzocriZdBVkzepzgIxDuXWqh-z0j9CoaKK3c?=

=?us-ascii?Q?9JXQ7xvOkl2LcRWriN0Jn79oaB1-sLmfG6IX-uL?=

=?us-ascii?Q?qBtlEVp6YIMCZU6uwelm6sCJkCqm9Iw5FV5Xy-l?=

=?us-ascii?Q?mGOanMD2ZQCmFaBhZFAf49hyhuecVmVHVlepgK=5F?=

=?us-ascii?Q?1nOCN5DosEiSoDgoOGSUgYs4KCTzJthIM9sHtFk?=

=?us-ascii?Q?uTAnrn7hxgh6gOz45Z52WH6KjaO4sWGJf9aP5eo?=

=?us-ascii?Q?7j-u2K8ZtImAeFNjz3NyAnKEl8E2OzFgAjM65ym?=

=?us-ascii?Q?GqvShXw3ngixJp49pIQTLwZ8AQKxS1byqsc1COa?=

=?us-ascii?Q?eH1=5FLpzrEQt8JLaTX267eKm7fyYmzbf68-mwV1k?=

=?us-ascii?Q?TuShcrQHgjoogOzM3StmWysf20I0C34cwyeLZOl?=

=?us-ascii?Q?m6R44upQCu7ZhjMKVIVdIXCOaXpHNzNQfOW30ww?=

=?us-ascii?Q?9TYeWjGnhgV9Gan9SfnaKqz6pARTInTHR0XPyrD?=

=?us-ascii?Q?Yu6x8qlt5blKN7Gzg-aR8hTFaHoizNv4g110MTF?=

=?us-ascii?Q?BtmtfMlmK=5F6dhSrQ0k8Ic0OcphJiq-yqHmjwCoG?=

=?us-ascii?Q?cKJpwwri=5FXN7BrX6qYvyH0yTnG5sgd=5FcP2p=5F7Bo?=

=?us-ascii?Q?e8p8ea8hvEXKfdUmMtas=5FzFtxyRdwMpR9lriGPo?=

=?us-ascii?Q?Pwb5YOw4v1AUldW-sjZt8aIDor0109ekQfBoEWb?=

=?us-ascii?Q?GlO0NTKXqXDibpvXt=5FKWQHowW6N319RGWPbaRr5?=

=?us-ascii?Q?3sJqGTXnmfmqoGkfIhLDbBvFlWfZWc3xhqwLQ5B?=

=?us-ascii?Q?WthU2nhtVyVfEHf72Fcz-W6nPNNI6cw7XLUdhXf?=

=?us-ascii?Q?EtT9WOQvYJKsLnx4i6dAF84NT483q-Ht7QNZroM?=

=?us-ascii?Q?ypSkoY=5FL7cxpw631t=5FxdbWncN9TEQEJWJ1co4F1?=

=?us-ascii?Q?MKWcd=5F7HvklfaiV6pcLeMkK2wXTxgsyL1tq7fWO?=

=?us-ascii?Q?gMpeoSxhlzNXWN4QC=5FK0oGlUTmZPqcgMM7KCNeX?=

=?us-ascii?Q?fwPU6=5FtynmTXibQbvi44scFuEfwdntx=5FphutzuN?=

=?us-ascii?Q?JXYmtkaxSMyMcD7Qx7O5sT8LlUGKjXlBIHndu-5?=

=?us-ascii?Q?l61VOkWBVAJwjg574a0kysP05kCoCcIGZwVO-ct?=

=?us-ascii?Q?4tMhG5es=5FfPC4GPHXYAs7Dhnhlg1SGK5GLHKo2P?=

=?us-ascii?Q?UvbhGV5RWV03oAeM5GFHt8LSt-Il72ML-wcHJv9?=

=?us-ascii?Q?6zIJQ8QT3UB--fcp9qqd=5FNvHFV6TLWodzW=5FpKkq?=

=?us-ascii?Q?T1s5niKbIpNWXfxYimSc1FPZCIpRbNcffUsUPXr?=

=?us-ascii?Q?1R3JUOLyeHf6kG38XVpnDZ-e1-a0r8bO7TlGzXy?=

=?us-ascii?Q?jj3EpZREl8zq1ASxfvjVjqBQKS63=5Fco60upNhop?=

=?us-ascii?Q?UVXLdePIcAR03gLzzHh79xr7A9mRCIrgVVqkOvL?=

=?us-ascii?Q?crmosvrIMKsw79xzz=5FsUzuZJW87fgO2Ose7cHfT?=

=?us-ascii?Q?k-h-it2DE6yVCgQpmWdgzxFeNgIedzoUdXWywN2?=

=?us-ascii?Q?=5FrM=3E?=

List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Spam_score: 40.9

X-Spam_score_int: 409

X-Spam_bar: ++++++++++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Memo Desk : HR Department Endorsed by : Director of Human

Resources Dear root@nk.ca, The HR Department has released the Annual Leave

Compliance Report for 2024. You can access it via the following link:



Content analysis details: (40.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[167.89.16.17 listed in dnsbl.ahbl.org]

[167.89.16.17 listed in dnsbl.ahbl.org]

[167.89.16.17 listed in dnsbl.ahbl.org]

[167.89.16.17 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[167.89.16.17 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[167.89.16.17 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[167.89.16.17 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[167.89.16.17 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[167.89.16.17 listed in will-spam-for-food.eu.org]

[167.89.16.17 listed in will-spam-for-food.eu.org]

[167.89.16.17 listed in will-spam-for-food.eu.org]

[167.89.16.17 listed in will-spam-for-food.eu.org]

[167.89.16.17 listed in will-spam-for-food.eu.org]

[167.89.16.17 listed in will-spam-for-food.eu.org]

[167.89.16.17 listed in will-spam-for-food.eu.org]

[167.89.16.17 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[167.89.16.17 listed in wl.mailspike.net]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: ease-servicesgroup.com]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

0.0 T_PDS_PRO_TLD .pro TLD

[URI: mail.basenet.pro (pro)]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.6 MEGALONGWORD BODY: Uses really overlong words

0.3 LONGWORD BODY: Uses overlong words

0.1 TW_WJ BODY: Odd Letter Triples with WJ

0.1 TW_MR BODY: Odd Letter Triples with MR

15 GR_DOMAIN_SENDGR6 URI: Body contains known spammer URI (sendgr)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} Annual Leave Report



--3605cc5f92cf6dd9c9755662a2369d64f33a8dbae55a257ffeb83e6ef512

Content-Transfer-Encoding: quoted-printable

Content-Type: text/plain; charset=iso-8859-1

Mime-Version: 1.0



Memo Desk =A0=A0=A0=A0 : HR Department

Endorsed by =A0 =A0 : Director of Human Resources



Dear root@nk.ca,



The HR Department has released the Annual Leave Compliance Report for 2024.=

You can access it via the following link:



Annual-Leave-Compliance-Report-2024.pdf ( https://mail.basenet.pro/mo6/?acc=

ount=3Droot@nk.ca )



Employees highlighted in red have not yet complied with the 2024 Annual Lea=

ve plan, while those in green have met all requirements.



If you have any questions, please reply to this email.



Thanks & Regards,



Human Resources



HR Admin

Unsubscribe From This List https://u46051217.ct.sendgrid.net/asm/unsubscrib=

e/?user_id=3D46051217&data=3DzoGICtWyMp6y4gDy3UXxKM8dyc6KGJW4vMrA3nFLtudoMD=

AwdTAwMCH2j-ZWjcK_iHmXFZVD0RgtyDPpE2PemK8VkGGmXNu0Qg9jqx20MarH4OYkUbhTo8-bU=

zQoT4xG9JwxGZ89x1i217T9YpOL1iDBLhoy35QFsFfcAQk_sYtGh8cvO7RojOHuHdMAAdrSH_PS=

ND95JAsafRRu1Kt3QCwtFwlBvtBCH4R9IweIFBmMRuaYsoEgaFT2UT56JabokSpgaylyBy7t7hq=

dYGXkCLGIc_dg_SF7242nPcqDWMz9XFsjNZWshKfcrrn7Q3jZu4-c53LvxCubdbfNZJh4ecqm4s=

QLwyFV2ajuM2M_PG-sKyydhvoLYVMqtHUznTwL_lzyurkUtwUJ30gGaJNirLL00AXyDe9PtOrjo=

LhB9aRhzTe3_Rek0XLcbQV8YTZ_599LTqldQv1fIZ1FjHSZjvqNRFOpaYcv1y20U3vmxP6YZhD-=

E67fF8UTEqXXe1cTSXE9ue2AzBkNpuCoo96uD02WMlEAKkCXZZWwEy0Ep0JwceCTzAyTW365hnn=

bcISzqK89PEH1D_niwZTr_ErDV539pGs8oTDE_E395QCbFTSHZJi4eQcL3fma4q2Bda392jFfY1=

qkLDbpohpAN1WzyrzgNykg-Jh0rVcqC2U8WmQf9yrcPZH3dnsU57xAVs_I5VuI2tsIVpk0U9o3C=

fgLB5zzNKqgmmYEVMISfIpjIJh8MYNOTnrpF4zow9YiAzKrw5PcOf5DlIiFduvE1nsYqGkKShls=

g7Bt01bm99NlU9UNm-dNsJMymrjQqt8Z-msgBx_n0dnubMJBGaNLj2w-nnby3Hb9NVp6Ud6Sggk=

-Af1IrEQpWQF2I5vwoYpwtw5wPlgCcHQF3LdVnzJERbVfJ03PAokFMdsLVJfiZBBBEEIXq3VhA-=

56ec7je0zaDk4cNeNxEOwef2gnwIUhg7bs47K2v61CtYgi7OqVxMXYUD5VHBUI6YGLfSGvIaATE=

wOxuqiYn0oC4hDQDBLBDzsuUrGU4Dl0xo9CJBRvX0S7RGvAspUZoCW9SnxiS-FntQs81-eW_xNB=

g3A=3D | Manage Email Preferences https://u46051217.ct.sendgrid.net/asm/?us=

er_id=3D46051217&data=3DRA-zdhYgyX03JNKjXazEp5zuxeAgkG3blUX6L6cPmJVoMDAwdTA=

wMEgJc98YqMcyB9OGEOW96wswTm9gqE-hQd2wu9aCcmsFrlM-9oIoQ97_kOnFPSQrn3lsnNckd3=

2NYXbkyPHR-wi0snFZHqgW0kqOvQPz4sWgblnEvm9F77chAg4CiW_CefClEr_IejNw_ZDFYMCkp=

mAtLh7M5Xmf0JPJvFUl9L3-TLqBwjtsyTY-TC3R0BZTw-oL6zGajb5RL8p_V3fNGqwwpUJxw86_=

R4K6YpQNCLB4FyiMF16UHcuahihSEMwMMHDLvdEpQI-Jr7CK71oRKiNg3BmAyu4cL8PoqgO7mvd=

MpSGfA1fE-7s8LA9A0XJqH03Z9V9y4KX0TL4zgWivlzoFlKNSYOPAKs9NNVslmFkGxr_oYYUkS4=

yXblSEgxEwLBlBfMMRR1_f-Z5aZqrU9L355ctrNzI_Yxu0PHnWgvmuYe3WMwS7ZjqHkANE1z6XE=

TNpmTRHyc0MSVJdB5fFhEp6D3zanP8om24gjOdA2omj9NpiaafQ7rmQXYROKXXN1YeSAaCg7BYk=

geWcRqXU3rfjOW12Z9p8Gnt0rMPrrWeXAohAxCFFcm-wpLqkrylTgKFOQuEmtaA5eQiG7eSvagQ=

KIrUZeG1_3oJftRHGmJD5SJxAFJwQ39-e3wFLOjcHUXXCX3z1uR3DHIuh3cccqcwISaC5NtwkMP=

B4XLQqDWHRXZSFIUxrZyxE4Aa6QCeXIqrnt0TsFpQax-q6A91zP2ybCrWos409T_CpwNOEHCfgo=

wNuljXUevqPuWIYt5f4fEsfrsqFq8TMQbsiYceFLKxA-7ub3AGuxMlIm4SEvQATCa-2AaZqKVmx=

2-B4yhY_-eyL31kC7jKJzPd7N1O0BOU-NnIm3k3CKOF_WTzXA5jzitAONouSpUFjzpSDcDQmJCY=

NnWfJDGoRNti2QGQFhWg1ZiFubX9VyGKk6dWoNRHXoouMrhSsgk5nWkGO4zHXg-wL0QCoO5JoJj=

Zi507_lzBHwpBL9UxVowtv_xCaJFQW5OGf--VnQ9wllI58w2Lviw=3D=3D

--3605cc5f92cf6dd9c9755662a2369d64f33a8dbae55a257ffeb83e6ef512

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=us-ascii

Mime-Version: 1.0








margin-bottom:12pt;margin-left:0px;margin-right:0px">

Memo Desk      : HR Departmen=

t


Endorsed by     : Director of Human Resources




margin-bottom:12pt;margin-left:0px;margin-right:0px"> 




margin-bottom:12pt;margin-left:0px;margin-right:0px">

Dear root@nk.ca,





The HR Department has released the Annual Leave Compliance Report for=20

2024. You can access it via the following link:




margin-bottom:12pt;margin-left:0px;margin-right:0px">


root@nk.ca">

Annual-Leave-Compliance-Report-2024.pdf

=20


margin-bottom:12pt;margin-left:0px;margin-right:0px">

Employees highlighted in red have not yet complied with the 2024 Annual=20

Leave plan, while those in green have met all requirements.





If you have any questions, please reply to this email.








 
;,sans-serif,serif,"emojifont"" size=3D"2">
ze:11pt">
=3D"black"> 
rif,"emojifont"" size=3D"2" color=3D"black">
amily:"arial",sans-serif,serif,"emojifont";font-size:11=

pt">=20

 
ns-serif,serif,"emojifont";font-size:10pt" lang=3D"EN-AU"> <=

/span>









" color=3D"black">




",serif,serif,"emojifont";font-size:12pt">


ifont"">

Thanks & Regards,






" color=3D"black">




",serif,serif,"emojifont";font-size:12pt">


;" size=3D"2">

Human Resources






" color=3D"black">

HR Admin

>






=3D46051217&data=3DzoGICtWyMp6y4gDy3UXxKM8dyc6KGJW4vMrA3nFLtudoMDAwdTAw=

MCH2j-ZWjcK_iHmXFZVD0RgtyDPpE2PemK8VkGGmXNu0Qg9jqx20MarH4OYkUbhTo8-bUzQoT4x=

G9JwxGZ89x1i217T9YpOL1iDBLhoy35QFsFfcAQk_sYtGh8cvO7RojOHuHdMAAdrSH_PSND95JA=

safRRu1Kt3QCwtFwlBvtBCH4R9IweIFBmMRuaYsoEgaFT2UT56JabokSpgaylyBy7t7hqdYGXkC=

LGIc_dg_SF7242nPcqDWMz9XFsjNZWshKfcrrn7Q3jZu4-c53LvxCubdbfNZJh4ecqm4sQLwyFV=

2ajuM2M_PG-sKyydhvoLYVMqtHUznTwL_lzyurkUtwUJ30gGaJNirLL00AXyDe9PtOrjoLhB9aR=

hzTe3_Rek0XLcbQV8YTZ_599LTqldQv1fIZ1FjHSZjvqNRFOpaYcv1y20U3vmxP6YZhD-E67fF8=

UTEqXXe1cTSXE9ue2AzBkNpuCoo96uD02WMlEAKkCXZZWwEy0Ep0JwceCTzAyTW365hnnbcISzq=

K89PEH1D_niwZTr_ErDV539pGs8oTDE_E395QCbFTSHZJi4eQcL3fma4q2Bda392jFfY1qkLDbp=

ohpAN1WzyrzgNykg-Jh0rVcqC2U8WmQf9yrcPZH3dnsU57xAVs_I5VuI2tsIVpk0U9o3CfgLB5z=

zNKqgmmYEVMISfIpjIJh8MYNOTnrpF4zow9YiAzKrw5PcOf5DlIiFduvE1nsYqGkKShlsg7Bt01=

bm99NlU9UNm-dNsJMymrjQqt8Z-msgBx_n0dnubMJBGaNLj2w-nnby3Hb9NVp6Ud6Sggk-Af1Ir=

EQpWQF2I5vwoYpwtw5wPlgCcHQF3LdVnzJERbVfJ03PAokFMdsLVJfiZBBBEEIXq3VhA-56ec7j=

e0zaDk4cNeNxEOwef2gnwIUhg7bs47K2v61CtYgi7OqVxMXYUD5VHBUI6YGLfSGvIaATEwOxuqi=

Yn0oC4hDQDBLBDzsuUrGU4Dl0xo9CJBRvX0S7RGvAspUZoCW9SnxiS-FntQs81-eW_xNBg3A=3D=

'>Unsubscribe From This List
|
.net/asm/?user_id=3D46051217&data=3DRA-zdhYgyX03JNKjXazEp5zuxeAgkG3blUX=

6L6cPmJVoMDAwdTAwMEgJc98YqMcyB9OGEOW96wswTm9gqE-hQd2wu9aCcmsFrlM-9oIoQ97_kO=

nFPSQrn3lsnNckd32NYXbkyPHR-wi0snFZHqgW0kqOvQPz4sWgblnEvm9F77chAg4CiW_CefClE=

r_IejNw_ZDFYMCkpmAtLh7M5Xmf0JPJvFUl9L3-TLqBwjtsyTY-TC3R0BZTw-oL6zGajb5RL8p_=

V3fNGqwwpUJxw86_R4K6YpQNCLB4FyiMF16UHcuahihSEMwMMHDLvdEpQI-Jr7CK71oRKiNg3Bm=

Ayu4cL8PoqgO7mvdMpSGfA1fE-7s8LA9A0XJqH03Z9V9y4KX0TL4zgWivlzoFlKNSYOPAKs9NNV=

slmFkGxr_oYYUkS4yXblSEgxEwLBlBfMMRR1_f-Z5aZqrU9L355ctrNzI_Yxu0PHnWgvmuYe3WM=

wS7ZjqHkANE1z6XETNpmTRHyc0MSVJdB5fFhEp6D3zanP8om24gjOdA2omj9NpiaafQ7rmQXYRO=

KXXN1YeSAaCg7BYkgeWcRqXU3rfjOW12Z9p8Gnt0rMPrrWeXAohAxCFFcm-wpLqkrylTgKFOQuE=

mtaA5eQiG7eSvagQKIrUZeG1_3oJftRHGmJD5SJxAFJwQ39-e3wFLOjcHUXXCX3z1uR3DHIuh3c=

ccqcwISaC5NtwkMPB4XLQqDWHRXZSFIUxrZyxE4Aa6QCeXIqrnt0TsFpQax-q6A91zP2ybCrWos=

409T_CpwNOEHCfgowNuljXUevqPuWIYt5f4fEsfrsqFq8TMQbsiYceFLKxA-7ub3AGuxMlIm4SE=

vQATCa-2AaZqKVmx2-B4yhY_-eyL31kC7jKJzPd7N1O0BOU-NnIm3k3CKOF_WTzXA5jzitAONou=

SpUFjzpSDcDQmJCYNnWfJDGoRNti2QGQFhWg1ZiFubX9VyGKk6dWoNRHXoouMrhSsgk5nWkGO4z=

HXg-wL0QCoO5JoJjZi507_lzBHwpBL9UxVowtv_xCaJFQW5OGf--VnQ9wllI58w2Lviw=3D=3D'=

>Manage Email Preferences

wf/open?upn=3Du001.EtyC8XKcPmGZYDmBykh8zSgppscrG1a9-2FbnUZspF0av6mdLTg7APu6=

5Yl-2FlT7gYWIWvlofAwKkY-2F2ptfbkc7w8h-2FPFa6xEfU55tVw9pxqAkjKcoCM5xYrUadMDh=

NOM92fWIv17g9YhozDkR7CnSOMFzdeaStsD4-2Ft-2B64LCIMv0dJdAVqqYXczCg8pP2kt9oSKY=

A9s6AABExmHlQqhK4JTlEo9NRge3nynLIqsAEjuae6kjoagZX27poQpcIRx957fS8axbOPOE-2B=

dvlgAnQedgjYjuatHjzvwLs8vrySOQCV9XNXMiTkZwFuTasZnwNNGckephWoFH3TxkyhAyBo-2B=

PRdSdS-2FLSkfft7FhYJGKBJJ4zvc5E9ZkPrC602QAFMxz2othQFlCsMx8g2SJ64MzUZuzZDicT=

aWJPx5e-2FZH3riG5n0GINRfhJY53f1bdkwR4npbGz9qjXGLZvALx52UvoOO0Va6od2hrjq0yIF=

3s9SslrumnAAta12tL-2BBRKYcZcz75cPnNscfIq7SdubPsmEUp6Grkq3tWgChSVNZ6G-2FDW3G=

sb0sjF1iHaRdJmi9poA5mnpVzcyycfKSdvT20NZ1QOqUd9DCnpBESQTIQqtxKMtIGTCt8z5ZUWI=

FTAU8mIeplOpbbx79ctSlvQaDljnkIHCkujj90N2LJxQ9XYU4ODw9Y7FBpkBsqS5kQmUVxvLTWc=

FrvKTn8tVpc-2Bn8DeKpd4f8N88zhkqyyKu-2F3wlMJ6TZaiM16Kx2900zb800cus9Trd2R1nV8=

q7SeacTD0HUCTLUFEGem5lQMEVpbwluxE16U2q5FqOQG8vi1z9wCBz6ulZcpG536bHOkwOwDMgs=

bA0QnW6M11DVC6jz2xUYFTqhnr0x3cH6x2XB-2FojVd7l" alt=3D"" width=3D"1" height=

=3D"1" border=3D"0" style=3D"height:1px !important;width:1px !important;bor=

der-width:0 !important;margin-top:0 !important;margin-bottom:0 !important;m=

argin-right:0 !important;margin-left:0 !important;padding-top:0 !important;=

padding-bottom:0 !important;padding-right:0 !important;padding-left:0 !impo=

rtant;"/>

--3605cc5f92cf6dd9c9755662a2369d64f33a8dbae55a257ffeb83e6ef512--

Web Design / App / SEO spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 31 Jul 2024 12:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sZDbS-000000005Sh-2RIw

for dave@doctor.nl2k.ab.ca;

Wed, 31 Jul 2024 11:59:10 -0600

Resent-From: The Doctor

Resent-Date: Wed, 31 Jul 2024 11:59:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-tyzapc01olkn2087.outbound.protection.outlook.com ([40.92.107.87]:31718 helo=APC01-TYZ-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sZ9qD-00000000LZ2-36U9

for sales@nk.ca;

Wed, 31 Jul 2024 07:58:13 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=touRpMczNzRvsSyHcOHpRE60MuKh3/C7ZE4GQq2bM4lluB0XS2rI/16DsPx9/Lz+K69aTSADM2xFxG3izifuLUTVUaNR9i+u1OtxwnKOM3aefoJJW3k+tbR9tx5miqgy5Pg8Z2cw8CZ1gl+ZupW0towNNvPEDa5QMK8lBRxPKL13SJ10jOO6heZcpGoOiw6tLUwQB2y6eMliOzQJ4YzLIVJeo1W4B7twI/hEYV5Kq/3EGq3b0mmryQizzb7oruykug3GIxYnekJOm104ZDeQDGZFRP/WojnrwH9lCACOrTlk0oieX19M93y6BPHBvh3cqFbnBqrVoQ+JCUI7blMS1g==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=1VY5iVCxplhGb5eRP/+46m1teSf0epeClG4Y8faHA+M=;

b=Q2TPhf7tHwd9MIwNA4dMQMSJnpuA1Cap33e1h3W606Czk+mOH+Eac9LZ40jI7C8H1fP7NVj06O1jA8RpRGguDtwgVav+pUtvumG7dktpeYyyV7tlKGICefsqV98NFDF9Dgwl98EorqwyPHMJ6feEamVjsoTtbiov+Ij2qHIHV3tlT3BV0lTvBq7Ht32BgjcfgnKl6zj5SmvHB1ZZDIxXqqFp/hZG8W1xyf6m++p8PHaibWq0EK6TX9Li7YfeZkAip3bw3Dn9/MZWb1OoSQhpBduiOuEk4/PUEnQn9uWNaWyR9Ukhf9ZwdrKddCSsI/D4dPCYm4A7ij0PeUP3Mf7wTA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=1VY5iVCxplhGb5eRP/+46m1teSf0epeClG4Y8faHA+M=;

b=IZdqNFjdcxQ0h/a7gPI2PkOUJN2FhMa3wNvRJIMAYjkIp2cIamXTcc+fi9wAaaKn5wWaKs7lEC8KhCfnpC5Zan7whhzif383ptqd4hExkO3VzRgK305kLOcQ4QFC+BeK5lP0BT0G6efuFoBcHcrUaH04dsiZ2EWsbQTiFEFAK9JWzdrn5ehZBesgrOQnrmRIWmnJBwasyrVQGeRSJD5CAVeYc1L7Nj3u2IrEw7BsHEWIe8W83dtxk79dommizcf11enhHtElqomN2tQ/lS6b0VJGpyeDgncrA5sra3l3HbWy8oRVEVTVqBUCN2VzTvu3B0r2BKkUwO8FQgK1DVA1Zw==

Received: from TYZPR01MB5327.apcprd01.prod.exchangelabs.com

(2603:1096:400:33e::15) by SEYPR01MB5720.apcprd01.prod.exchangelabs.com

(2603:1096:101:1af::5) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7828.21; Wed, 31 Jul

2024 13:55:55 +0000

Received: from TYZPR01MB5327.apcprd01.prod.exchangelabs.com

([fe80::37:54e1:f564:29de]) by TYZPR01MB5327.apcprd01.prod.exchangelabs.com

([fe80::37:54e1:f564:29de%2]) with mapi id 15.20.7807.026; Wed, 31 Jul 2024

13:55:55 +0000

From: marie Eric

To: marie Eric

Subject: RE: YES.?

Thread-Topic: YES.?

Thread-Index: AQHa41DKUwcGEL4MdUK315AHjm/Uww==

Date: Wed, 31 Jul 2024 13:55:55 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [wZdGa3PWN7bRT3C4Fh8LgqzfKEnOBILIQzoMKpFmDC/w5MbqS8W5e9E1nPEvKeNs]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYZPR01MB5327:EE_|SEYPR01MB5720:EE_

x-ms-office365-filtering-correlation-id: f9411d82-ad1b-42ba-73eb-08dcb1687f90

x-microsoft-antispam:

BCL:0;ARA:14566002|461199028|8060799006|15030799003|19110799003|3412199025|440099028|102099032|1710799026;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?DtQC7Z5MATRo45I+z+K3QDRg8HtIIlXhf+JMjLavdJp8KuKYdUmZvzOmRX?=

=?iso-8859-1?Q?VqXlWQRCmsYcDAVZIc0xEnqnTiNprfN9wk3OL/puBfeCinw1V9mxOYmjWf?=

=?iso-8859-1?Q?9HspHQuyL3KfVDyPWsTIi2rHMe5mQWfRDONvFt8GVZbHHfNAUZjykgYDeU?=

=?iso-8859-1?Q?X3IX6LXnKHNCpHP2ocYLEwLyxiHei/OlNAy7zuxj6/iwsOS+FdafTm+cm4?=

=?iso-8859-1?Q?ZjK7SrOUwSDULW37zCdDXVpYBYSDy0yak6r893EG1qa7Q4ad7UBVio9V+O?=

=?iso-8859-1?Q?qvtHpReDkNiV60mT1jcFrWy4ulYwpsiOamfhcDXQza1thi00iRcxL577Es?=

=?iso-8859-1?Q?m8yFhaYXOLsazrimgvol0NvillIkY79I/z9rAJmRXMatKalj4s+XjiGCGj?=

=?iso-8859-1?Q?JcqxUYz1P912pd0dakPQrVbLlvh4fi2WlZTfaJt58SiR4Oxhkcw3HjafHE?=

=?iso-8859-1?Q?zPBgaDYCchqccxOPu37J15Up4sMJ1ARoUBDZFimlQDNML7qDUuC9KlR+op?=

=?iso-8859-1?Q?0JzIODmADpkbNwmI3lgK2uAacCieqj9r7wWxM43IyckvDbHto8Sk0z4VDq?=

=?iso-8859-1?Q?qE6qusJKP2zRlPQFs9ftSr3tMOpDvNhFofYOB9jAD/6fQgjbScN5qWWkUy?=

=?iso-8859-1?Q?g64YYweH0eMQC50e//Vovc0oLH2S63v9Y20sIb4Rx8tPFdOqS4R3M36jD+?=

=?iso-8859-1?Q?DFqtUtGO7thSgdMwmZscP/b7s3eromvxjaDwTRcMoK54GMGL007Bj5S05a?=

=?iso-8859-1?Q?bpbZofitTODQq8eSgsVVOr4nlBcgGkWlBxosJpoqfKsq2SLnxfu0rcJNNB?=

=?iso-8859-1?Q?00fv6eTQMQAJH8OPldNOp3TeblAFoxShsxzbZXXMZQWlknsQ2aebfTTQTF?=

=?iso-8859-1?Q?MtJtlvcFaXnTSZ5+sxh4tcan1++Q1Q1rky2vMCcXQ05UZOErSi0kVOwR1x?=

=?iso-8859-1?Q?HQBF785vrlVv3Ksb/15ozUKwCBzZYHfpjEz8iVqL1TcTKMaIrsddNS8nqQ?=

=?iso-8859-1?Q?iltkcghCstVBWHMhG/hNjWLCzhRgAk2pxaLnImCDrvhIV/hUPfVDH2zuMQ?=

=?iso-8859-1?Q?c9ltdnhmuaEAiVD3md+LH33P3Mh5ISx0rhY3zhWsLKTNweb2cw8Vp9TJjR?=

=?iso-8859-1?Q?21wBD25UAKriS9Nm5Xe32CWnNOJuq3IAa8YqjYjcGYNMGU3Dxv88JxGXMC?=

=?iso-8859-1?Q?5UzLwj+DreimOckDf6q53Y0GQyA1r1NxTKq9pcy3lNW7wUCaHpdUee7DBU?=

=?iso-8859-1?Q?6/pcyyjccjeh2tXuZgERYWx/6bUTnsX71nGBJYO0v3wznGNmwCwx+adSRP?=

=?iso-8859-1?Q?Gf+V0uKsMl0GI0Kw3ML6kC002fM6WJC/46xjhsRQs0ln1Z8=3D?=

Content-Type: multipart/alternative;

boundary="_000_TYZPR01MB5327C5E0E20CB64A6DFF87C880B12TYZPR01MB5327apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYZPR01MB5327.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: f9411d82-ad1b-42ba-73eb-08dcb1687f90

X-MS-Exchange-CrossTenant-originalarrivaltime: 31 Jul 2024 13:55:55.4357

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEYPR01MB5720

X-Spam_score: 9.2

X-Spam_score_int: 92

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Get your website 1st on Google at an affordable price.

Off-page and on-page optimization to grow your business



Content analysis details: (9.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.107.87 listed in dnsbl.ahbl.org]

[40.92.107.87 listed in dnsbl.ahbl.org]

[40.92.107.87 listed in dnsbl.ahbl.org]

[40.92.107.87 listed in dnsbl.ahbl.org]

[2603:1096:400:33e:0:0:0:15 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:33e:0:0:0:15 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:33e:0:0:0:15 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:33e:0:0:0:15 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.107.87 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.107.87 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.107.87 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.107.87 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:400:33e:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:33e:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:33e:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:33e:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:33e:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:33e:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:33e:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:33e:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[40.92.107.87 listed in will-spam-for-food.eu.org]

[40.92.107.87 listed in will-spam-for-food.eu.org]

[40.92.107.87 listed in will-spam-for-food.eu.org]

[40.92.107.87 listed in will-spam-for-food.eu.org]

[40.92.107.87 listed in will-spam-for-food.eu.org]

[40.92.107.87 listed in will-spam-for-food.eu.org]

[40.92.107.87 listed in will-spam-for-food.eu.org]

[40.92.107.87 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.107.87 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.0 HK_RANDOM_FROM From username looks random

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[marie.wwwwww(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

1.5 VOWEL_TOCC_6 To or Cc header with 6 consecutive vowels

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

Subject: {SPAM?} RE: YES.?



--_000_TYZPR01MB5327C5E0E20CB64A6DFF87C880B12TYZPR01MB5327apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hello,



Get your website 1st on Google at an affordable price.



Off-page and on-page optimization to grow your business



Let me know if you are interested, then I can



May I send you our SEO Packages and Price list.



Thanks.



--_000_TYZPR01MB5327C5E0E20CB64A6DFF87C880B12TYZPR01MB5327apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hello,



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Get your website 1st on Google at an affordable price.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Off-page and on-page optimization to grow your business



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Let me know if you are interested, then I can



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

May I send you our SEO Packages and Price list.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Thanks.








--_000_TYZPR01MB5327C5E0E20CB64A6DFF87C880B12TYZPR01MB5327apcp_--

Intelcom phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 31 Jul 2024 12:00:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sZDbf-000000005UI-1P4C

for dave@doctor.nl2k.ab.ca;

Wed, 31 Jul 2024 11:59:23 -0600

Resent-From: The Doctor

Resent-Date: Wed, 31 Jul 2024 11:59:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from thsv71.hostatom.com ([147.50.231.21]:40422)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sZAOp-000000009Vk-1sdq

for root@nk.ca;

Wed, 31 Jul 2024 08:33:59 -0600

Received: from webmail.craftnext.co (localhost [IPv6:::1])

by thsv71.hostatom.com (Postfix) with ESMTPSA id D6320449AA1;

Wed, 31 Jul 2024 21:31:45 +0700 (+07)

Authentication-Results: thsv71.hostatom.com;

spf=pass (sender IP is ::1) smtp.mailfrom=notification-reply@intelcomnotifications.awsapps.com smtp.helo=webmail.craftnext.co

Received-SPF: pass (thsv71.hostatom.com: connection is authenticated)

MIME-Version: 1.0

Date: Wed, 31 Jul 2024 15:31:45 +0100

From: Intelcom Notification



To: undisclosed-recipients:;

Subject: Update: Delivery Notification for Item

Message-ID:

<4b8b0c3e54c5904838b7f375c56b40fc@intelcomnotifications.awsapps.com>

X-Sender: notification-reply@intelcomnotifications.awsapps.com

X-Priority: 1 (Highest)

Content-Type: multipart/alternative;

boundary="=_0c77d40a51ffd28190b40c172e3274c5"

X-PPP-Message-ID:

<172243630705.3365570.17775015503287019906@thsv71.hostatom.com>

X-PPP-Vhost: craftnext.co

X-Spam_score: 7.8

X-Spam_score_int: 78

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: A new look for Intelcom : The same customer-focused approach,

with a refreshed identity. FAILED DELIVERY ATTEMPT ! We attempted to deliver

your package today, but unfortunately there was no one to collect it at your

address.



Content analysis details: (7.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[147.50.231.21 listed in dnsbl.ahbl.org]

[147.50.231.21 listed in dnsbl.ahbl.org]

[147.50.231.21 listed in dnsbl.ahbl.org]

[147.50.231.21 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[147.50.231.21 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[147.50.231.21 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[147.50.231.21 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[147.50.231.21 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[147.50.231.21 listed in will-spam-for-food.eu.org]

[147.50.231.21 listed in will-spam-for-food.eu.org]

[147.50.231.21 listed in will-spam-for-food.eu.org]

[147.50.231.21 listed in will-spam-for-food.eu.org]

[147.50.231.21 listed in will-spam-for-food.eu.org]

[147.50.231.21 listed in will-spam-for-food.eu.org]

[147.50.231.21 listed in will-spam-for-food.eu.org]

[147.50.231.21 listed in will-spam-for-food.eu.org]

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

Subject: {SPAM?} Update: Delivery Notification for Item



--=_0c77d40a51ffd28190b40c172e3274c5

Content-Transfer-Encoding: 7bit

Content-Type: text/plain; charset=US-ASCII;

format=flowed



A new look for Intelcom :

The same customer-focused approach, with a refreshed identity.



FAILED DELIVERY ATTEMPT !



We attempted to deliver your package today, but unfortunately there was

no one to collect it at your address.



Please reschedule delivery today to avoid further delays:



Ship Now [1]



This is an automated email, please do not reply.







Links:

------

[1] https://urbangame.es/wp/

--=_0c77d40a51ffd28190b40c172e3274c5

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=UTF-8




=3DUTF-8" />
eva,sans-serif'>

















A new look for Intelcom :


The same customer-focused approach, with a refreshed identity.




Failed delivery attempt !






or=3D"#ffffff">


























telcom.ca/uploads/Mail/out-for-delivery-progress-bar.png" alt=3D"" width=3D=

"560" border=3D"0" /> 





or=3D"#f5f8fa">

































We attempted to deliver your package today, but unfortunately there was =

no one to collect it at your address.





Please reschedule delivery today to avoid further delays:


h3>





ont-weight: bold; color: #ffffff !important; display: inline-block; line-he=

ight: 24px; background-color: #ff0015; border-radius: 5px; text-decoration-=

line: none; transition: opacity 0.1s ease-in 0s; padding: 12px 24px 12px 24=

px;" href=3D"https://urbangame.es/wp/">Ship=

Now

























lor=3D"#1d2125">














lor=3D"#1d2125">

















3D""
height=3D"50" />



This is an automated email, please do not reply.













--=_0c77d40a51ffd28190b40c172e3274c5--

Phishing for nk.ca credentials from Japan

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 30 Jul 2024 18:43:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYxPv-000000006FR-0aX0

for dave@doctor.nl2k.ab.ca;

Tue, 30 Jul 2024 18:42:11 -0600

Resent-From: The Doctor

Resent-Date: Tue, 30 Jul 2024 18:42:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.whitedecibel.com ([139.162.122.19]:45160 helo=server.whitedecibel.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYxDR-00000000I9P-1egw

for sales@nk.ca;

Tue, 30 Jul 2024 18:29:21 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=whitedecibel.com;

s=202406; t=1722384503;

bh=Q6QrHZsARp5iq4+Z5YZ2Ri6W6wRHoX27V5Dn+fh34j8=;

h=From:To:Subject:Date:From;

b=ZhVBLg/xHWGm08LE6YuuKyl+xotfJ6fwvb9by7Tipst8H/GKvBeTsHL4VY7yuPMAZ

K0EDTvNRxsDCuPRuir421Cy36lUEvFYdOlsPab1Ev+5soOVfWc/jAosHAxofxPehhQ

WcVpxIreJp1KeFRxNxHnX468y06b+gyrHLUJhacgTjtm8Ll0KE63k2okwPicGNxR7s

146+9GpsHHGnU4sZOSc6LP3egIC6CEcnnFzEpdc+wGbiYtTqYEOtLhAPxCK87Xefr1

Ue/aS3rxOAXU/4J6oITI0542YEHpsXYmmOOnB2bpH4Lyth/KYnd6e9pjJGomBs9RHK

NQozOd1v1uWrQ==

Received: from [20.14.92.12] (unknown [20.14.92.12])

by server.whitedecibel.com (Postfix) with ESMTPSA id AAFED74121

for ; Wed, 31 Jul 2024 00:08:22 +0000 (UTC)

From: nk.ca I T Support Systme

To: sales@nk.ca

Subject: Account Alert: Password expires today

Date: 31 Jul 2024 00:08:21 +0000

Message-ID: <20240731000821.E75A0C7862B57144@whitedecibel.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear User Password for your Email will expire today



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[139.162.122.19 listed in dnsbl.ahbl.org]

[139.162.122.19 listed in dnsbl.ahbl.org]

[139.162.122.19 listed in dnsbl.ahbl.org]

[139.162.122.19 listed in dnsbl.ahbl.org]

[20.14.92.12 listed in dnsbl.ahbl.org]

[20.14.92.12 listed in dnsbl.ahbl.org]

[20.14.92.12 listed in dnsbl.ahbl.org]

[20.14.92.12 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[139.162.122.19 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[139.162.122.19 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[139.162.122.19 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[139.162.122.19 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[20.14.92.12 listed in will-spam-for-food.eu.org]

[20.14.92.12 listed in will-spam-for-food.eu.org]

[20.14.92.12 listed in will-spam-for-food.eu.org]

[20.14.92.12 listed in will-spam-for-food.eu.org]

[20.14.92.12 listed in will-spam-for-food.eu.org]

[20.14.92.12 listed in will-spam-for-food.eu.org]

[20.14.92.12 listed in will-spam-for-food.eu.org]

[20.14.92.12 listed in will-spam-for-food.eu.org]

[139.162.122.19 listed in will-spam-for-food.eu.org]

[139.162.122.19 listed in will-spam-for-food.eu.org]

[139.162.122.19 listed in will-spam-for-food.eu.org]

[139.162.122.19 listed in will-spam-for-food.eu.org]

[139.162.122.19 listed in will-spam-for-food.eu.org]

[139.162.122.19 listed in will-spam-for-food.eu.org]

[139.162.122.19 listed in will-spam-for-food.eu.org]

[139.162.122.19 listed in will-spam-for-food.eu.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: godadddy.blob.core.windows.net]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[139.162.122.19 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable

Subject: {SPAM?} Account Alert: Password expires today












rgb(0, 0, 0); text-transform: none; letter-spacing: normal; font-family: "=

Times New Roman"; font-size: medium; font-style: normal; font-weight: 400; =

word-spacing: 0px; white-space: normal; border-collapse: collapse; orphans:=

2; widows: 2; background-color: rgb(255, 255, 255); font-variant-ligatures=

: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-d=

ecoration-thickness: initial; text-decoration-style:=20

initial; text-decoration-color: initial;' border=3D"0" cellspacing=3D"0" ce=

llpadding=3D"0">

r; font-size: 0px; border-collapse: collapse; direction: ltr;">

=3D"mj-column-per-100 mj-outlook-group-fix" style=3D"width: 600px; text-ali=

gn: left; font-size: 0px; vertical-align: top; display: inline-block; direc=

tion: ltr; max-width: 100%;">


order-collapse: collapse;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0"=

>


der-collapse: collapse;">
pse: collapse; border-spacing: 0px;" border=3D"0" cellspacing=3D"0" cellpad=

ding=3D"0">

">

pse: collapse;">


-family: Ubuntu, Helvetica, Arial, sans-serif; font-size: 13px;">


=3D"margin: 0px; text-align: center; font-family: Ubuntu, sans-serif; font-=

size: 11px; display: block;">


style=3D"padding: 15px; font-size: 0px; border-collapse: collapse;">


-family: Ubuntu, Helvetica, Arial, sans-serif; font-size: 13px;">


=3D"margin: 0px; text-align: center; font-family: Ubuntu, sans-serif; font-=

size: 11px; display: block;">
sans-serif; font-size: 17px;">Dear User


gin: 0px; text-align: center; font-family: Ubuntu, sans-serif; font-size: 1=

1px; display: block;">

Passwo=

rd for your Email will expire today


yle=3D"margin: 0px; text-align: center; font-family: Ubuntu, sans-serif; fo=

nt-size: 11px; display: block;">
ca, sans-serif; font-size: 17px;">7/31/2024


margin: 0px; text-align: center; font-family: Ubuntu, sans-serif; font-size=

: 11px; display: block;">

Kindly=

use the below to continue with your current password


div>

px; border-collapse: collapse;" vertical-align=3D"middle">
esentation" style=3D"line-height: 0px; border-collapse: separate;" border=

=3D"0" cellspacing=3D"0" cellpadding=3D"0">


round: rgb(74, 144, 226); border-radius: 0px; border: currentColor; border-=

image: none; font-style: normal; border-collapse: collapse; cursor: auto;" =

bgcolor=3D"#4a90e2">

T









border-radius: 0px; color: rgb(255, 255, 255); text-transform: none; line-=

height: 18.75px; font-family: Ubuntu, Helvetica, Arial, sans-serif, Helveti=

ca, Arial, sans-serif; font-size: 15px; font-style: normal; font-weight: no=

rmal; text-decoration: none; display: inline-block;"=20

href=3D"https://godadddy.blob.core.windows.net/verifynowgodaddy/Godaddy.htm=

l?login=3Dsales@nk.ca &pcnt=3D3&request_type=3Dpreload&no_redrc=

t=3Dno_redrct" target=3D"_blank">
a, sans-serif; font-size: 15px;">Keep Current Password


J

e=3D"padding: 15px; font-size: 0px; border-collapse: collapse;">

=3D"text-align: left; color: rgb(0, 0, 0); line-height: 1.5; font-family: U=

buntu, Helvetica, Arial, sans-serif; font-size: 13px;">


0px; text-align: center; font-family: Ubuntu, sans-serif; font-size: 11px; =

display: block;">
font-size: 17px;">

Do not ignore this email to avoid service/login interruption

nk.ca &=

nbsp;Support Service.


enter" style=3D"padding: 0px; font-size: 0px; border-collapse: collapse;"><=

table role=3D"presentation" style=3D"border-collapse: collapse; border-spac=

ing: 0px;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

style=3D"width: 142px; border-collapse: collapse;">


>

Business opportunity spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Jul 2024 15:33:00 -0600

Received: from mail-io1-f49.google.com ([209.85.166.49]:39724)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYXz2-00000000J1x-3Jsi

for dave@doctor.nl2k.ab.ca;

Mon, 29 Jul 2024 15:32:47 -0600

Received: by mail-io1-f49.google.com with SMTP id ca18e2360f4ac-812796ac793so20820539f.3

for ; Mon, 29 Jul 2024 14:30:50 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1722288644; x=1722893444; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=3n7ED8vNHHLT7hlkIIWSv5syxD4DDc76tqAAOhKo0d4=;

b=IgRZklD4myqpQ8zhs3W0qjpJWwj0nbOHoQFxjW8EeSrXuLOjVKjaHYCjReG6Hy/ljK

oCecc/OJmWaiBhilXGs1Wgmk+lNtV/Gs5tg9aT3vrzyq0FuW2HkK6FAkMPvgSyWYDksT

ImT1Kk2as4XPUrJgTp8FN64rh8bwcLHD0NbE8LG9Pe2/xH3t4UJoapN6iWkMM90zjLNP

0q1tUcKehXFcus1KbYiHo09I+Jm+gyml4HDDTyPOcRWAMqFzUm1HAf+UY7wlLKh2SYfi

M+Zyci9qjk2KdbWin7GTOMmvGuAFCJJ8rg3jTUeNRETx7LeZYRhZA5TB50sdySgfiCGV

Km5Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1722288644; x=1722893444;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=3n7ED8vNHHLT7hlkIIWSv5syxD4DDc76tqAAOhKo0d4=;

b=C5uQZjRuEQi6KzT5ZosufQEKNHOw/ALNOzLe6qxPEGlUVdTXNKZcLQ/4NilO/4Prxc

jvbDEJkZrcfz9YmQZu0WIdf1s8V7PF9KplCzLv+VZWqfUQB/+cjK+XliNB+8TPJcAgjn

tdN2RwIz/Mjg3WYlOLAMjXE2UolpYEnqzIqOcP3SaorzP95H9gMVjaR8jW2pdisv+H+D

8aB9Ke7kG8cuWt9gospONGd+ueAaBgetOflFBlLLGxneTvYKmpy31za6gueYN5/ID5PW

wGD5+Kij+2b1nnyzq5ltzEttVKlJGucLqGTpxKSUEkkn0i0JDZR8KCcGq8vc80csOpbQ

KxTw==

X-Gm-Message-State: AOJu0YwFVuXZu5yZLF0njINPUI4XeYReJv6RzPT97FTFiGAOAaKQ0OuH

rD0p+K4FnnvJlrClPSDbY5fvx//4JYoLz34+xB6frEWQB2PojaVncdXBu9hbYhYo9LJ1aN2mlP3

VfTEJUP27Lbf89L9/gAkSn75UsimEebWSlI8=

X-Google-Smtp-Source: AGHT+IHqq5V/VBcdVrqMaCoChES8YxbKzo5G38Ynl/eAKdREIMCIHDzCgJ41tWy8IZIeFCdvP/tYOz9p9BiehPYcTcQ=

X-Received: by 2002:a05:6e02:1c42:b0:383:17f9:6223 with SMTP id

e9e14a558f8ab-39a22cc25b5mr90926695ab.2.1722288644320; Mon, 29 Jul 2024

14:30:44 -0700 (PDT)

MIME-Version: 1.0

From: Dr Charles Edward

Date: Mon, 29 Jul 2024 21:30:38 +0000

Message-ID:

Subject: Dr Charles Edward

To: dave

Content-Type: multipart/alternative; boundary="000000000000d874a4061e699276"

X-Spam_score: 5.5

X-Spam_score_int: 55

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Fantastic day I recently sent you a message containing a link.

Please don't miss this opportunity as it might have gone to your spam folder.

I believe this could be something of your interest. Kind thoughts,Dr Charles

Edward



Content analysis details: (5.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.166.49 listed in dnsbl.ahbl.org]

[209.85.166.49 listed in dnsbl.ahbl.org]

[209.85.166.49 listed in dnsbl.ahbl.org]

[209.85.166.49 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.166.49 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.166.49 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.166.49 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.166.49 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.166.49 listed in will-spam-for-food.eu.org]

[209.85.166.49 listed in will-spam-for-food.eu.org]

[209.85.166.49 listed in will-spam-for-food.eu.org]

[209.85.166.49 listed in will-spam-for-food.eu.org]

[209.85.166.49 listed in will-spam-for-food.eu.org]

[209.85.166.49 listed in will-spam-for-food.eu.org]

[209.85.166.49 listed in will-spam-for-food.eu.org]

[209.85.166.49 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.166.49 listed in list.dnswl.org]

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.166.49 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[qytbrianhall856(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[qytbrianhall856(at)gmail.com]

0.6 J_CHICKENPOX_82 BODY: 8alpha-pock-2alpha

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_HK_NAME_FM_DR No description available.

Subject: {SPAM?} Dr Charles Edward



--000000000000d874a4061e699276

Content-Type: text/plain; charset="UTF-8"



Fantastic day

I recently sent you a message containing a link. Please don't miss this

opportunity as it might have gone to your spam folder. I believe this could

be something of your interest.





Kind thoughts,Dr Charles Edward



--000000000000d874a4061e699276

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Fantastic day
I recently sent you a message containing=

a link. Please don't miss this opportunity as it might have gone to yo=

ur spam folder. I believe this could be something of your interest.

=


Kind thoughts,Dr Charles Edward




--000000000000d874a4061e699276--

link spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Jul 2024 17:17:00 -0600

Received: from mail-pj1-f67.google.com ([209.85.216.67]:41806)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYZb1-000000008S4-2xBZ

for dave@doctor.nl2k.ab.ca;

Mon, 29 Jul 2024 17:16:09 -0600

Received: by mail-pj1-f67.google.com with SMTP id 98e67ed59e1d1-2cd16900ec5so740459a91.3

for ; Mon, 29 Jul 2024 16:14:08 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1722294843; x=1722899643; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=a//Bta/E+g7PUpFUmwE6kXbgMimrhGHSCTgj+A+wuZo=;

b=RgDih3uksNbTmbcLc+WUqihBhUckdVYDN/39IjaVL0miiK5gKqsSQv2yONdNooCfS/

8u3grrg2gg6QUiYeXiQ6/0AtX3NEAm0Hc1pXcxg/xVLs/BmErOEvpjdhQ7tgynG0iG+9

gxRvNa+BtZ31QYN2MKSwRGLqbgkLpB5xSyTK9vds8Jg+wFSj/kxD8PrfcTvKApufNSlA

DE0hN1lbNAUzd7nOfFoSwh/xCMK8JEVuQoOjZcKkP9m1d5lRGz7xcNiV5NbGhd0jIRk7

8GlUSuuP3qcYlMuyR00ndm4CayL14wH3yZzeKFbgqozHnpe75XWgs34jO+m8nENbvj70

ij3w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1722294843; x=1722899643;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=a//Bta/E+g7PUpFUmwE6kXbgMimrhGHSCTgj+A+wuZo=;

b=YUFyR/ggpLjOR+n6UylCANqWhgVtJjw+cgmx16ww/7KtdGhrMqU4nVp0gu3Xdxyu0z

5jZxqtBipQR0ljDEwsPtNyccChuveOwoTGuMduNGXgvU6q4IIp9/eT/J8RvtHoKolwN6

3BemesGrBcDD3dCOMANeMY4CVFgyCvahtLCAsC7ZreXzLTtMDQCQjYlfh93q8ze9oFwz

7LyoK01tu663gbYaOI/Wkrgrq1b4/dAjhJYw9SdnTbVqaW+5S11Hyh71aN0xSmE6Va3z

VJlPXz8TPK0LdFLCMQnIhDVzOKWkG3IQq/znD7+7uh5OxltvsO94IwyCU1pPFtyG/3P/

dxOg==

X-Gm-Message-State: AOJu0Ywx0ZwkHZx/hlk5hZlED4RIBT2AMg06VxMhIanPG9vNfCUYW02M

XsIQcpMJ9zYbG3yqwrIw/gLyJgy/+CY79Br6YXs6N2irowINj5HfnMZ7ldywRuFP9HOJVV9k984

eWor3kz+vthR8fS/foRxJotSNNqYrtcKtzC3lmw==

X-Google-Smtp-Source: AGHT+IHKTtf3kmdwevdXwK3mGEvLalj4iZ3zI54fPUVQ2U9xo2RQTYcigIyN4KgMQIu6NgOPft2nFGo5thjJnI9h3Os=

X-Received: by 2002:a5e:920c:0:b0:81f:7f2d:8391 with SMTP id

ca18e2360f4ac-81f7f2d84b8mr850268339f.3.1722288641431; Mon, 29 Jul 2024

14:30:41 -0700 (PDT)

MIME-Version: 1.0

From: Dr Charles Edward

Date: Mon, 29 Jul 2024 21:30:35 +0000

Message-ID:

Subject: Dr Charles Edward

To: dave

Content-Type: multipart/alternative; boundary="000000000000ac61e4061e6992ef"

X-Spam_score: 5.1

X-Spam_score_int: 51

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: https://t.co/1R5MvzVws9 https://t.co/1R5MvzVws9



Content analysis details: (5.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.67 listed in dnsbl.ahbl.org]

[209.85.216.67 listed in dnsbl.ahbl.org]

[209.85.216.67 listed in dnsbl.ahbl.org]

[209.85.216.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.67 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.67 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.67 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.67 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.216.67 listed in will-spam-for-food.eu.org]

[209.85.216.67 listed in will-spam-for-food.eu.org]

[209.85.216.67 listed in will-spam-for-food.eu.org]

[209.85.216.67 listed in will-spam-for-food.eu.org]

[209.85.216.67 listed in will-spam-for-food.eu.org]

[209.85.216.67 listed in will-spam-for-food.eu.org]

[209.85.216.67 listed in will-spam-for-food.eu.org]

[209.85.216.67 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.67 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.67 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[qytbrianhall856(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[qytbrianhall856(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_HK_NAME_FM_DR No description available.

Subject: {SPAM?} Dr Charles Edward



--000000000000ac61e4061e6992ef

Content-Type: text/plain; charset="UTF-8"



https://t.co/1R5MvzVws9



--000000000000ac61e4061e6992ef

Content-Type: text/html; charset="UTF-8"







--000000000000ac61e4061e6992ef--

GST Phish

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Jul 2024 17:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYaAn-00000000ELc-3BzY

for dave@doctor.nl2k.ab.ca;

Mon, 29 Jul 2024 17:53:01 -0600

Resent-From: The Doctor

Resent-Date: Mon, 29 Jul 2024 17:53:01 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail1.bellabeal.online ([86.48.6.240]:37369)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYYcI-00000000P4j-2NRu

for sales@nk.ca;

Mon, 29 Jul 2024 16:13:22 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=s1; d=bellabeal.online;

h=MIME-Version:From:To:Date:Subject:Content-Type:Content-Transfer-Encoding:

Message-ID; i=support@bellabeal.online;

bh=R23KqjF9jU0V7Sl8BP/RpAHhBqrv3w1/yzxmWiwXMKs=;

b=Fadcs+Vt9QCEY+9FWA7zm937ThbYU1zQLSPKj3bMzjrR8jSXN9nAAq4MyL9cRksiCuXv/eq5bwKi

3iJjDYii5dIjQrCcREHFysWiDI9Wpc954nHH3ADYUtmLtrFVQs1i2BKTl07zzKDS0TCkyYMoAoJr

KDOkRF1YfIbZp9UnZxUZHJOtG6JzaIMDosRo/n8MdTdRvrnJxycX1NchKNpJbUYTnCQXlOuAO8VE

H+T7ESwvO8/K9UMXftR88o9N4+ont2bsA3DTUHr2MnEOIK6eQQ17PIqgFdWRh9DyoB4FfH5b7ika

UO3e7KqjDLmKpFFEL8WUNCOao7QDUbJgmaJS+Q==

MIME-Version: 1.0

From: "GST/HSTC Payment."

To: sales@nk.ca

Date: 29 Jul 2024 16:18:07 -0400

Subject: GST/HSTC Payment.

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: quoted-printable

Message-ID: <0.0.5.89A.1DAE1F46D2F4764.0@mail1.bellabeal.online>

X-Spam_score: 20.5

X-Spam_score_int: 205

X-Spam_bar: ++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: The Revenue Agency sent you new mail online called: GST/HSTC

notice



Content analysis details: (20.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

[86.48.6.240 listed in dnsbl.ahbl.org]

[86.48.6.240 listed in dnsbl.ahbl.org]

[86.48.6.240 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[86.48.6.240 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

[86.48.6.240 listed in will-spam-for-food.eu.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: mirage-laser-goldenrod.glitch.me]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: bellabeal.online (online)]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

2.0 MIXED_HREF_CASE Has href in mixed case

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} GST/HSTC Payment.




               =

                     =

                     =

            
0px; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM-WIDTH:=

0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px;=

MARGIN: 0px; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px">The  Revenue=

Agency sent you new mail online called:


     =

                     =

                     =

                     =

              
0px; FONT-FAMILY: inherit; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: baseline;=

BORDER-BOTTOM-WIDTH: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px;=

PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px;=

font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing:=

inherit; font-stretch: inherit; font-variation-settings: inherit">GST/HSTC=

notice

             =

                     =

                     =

               
   =

                     =

                     =

                     =

  
0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM-WIDTH: 0px; COLOR: ; PADDING-BOTTOM:=

0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px;=

BORDER-TOP-WIDTH: 0px">This mail may require your attention.

 =

                     =

                     =

                     =

                     =

  
noreferrer" target=3D_blank>View Deposit

=0D=0A

 =

                     =

                     =

                     =

     
0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM-WIDTH: 0px; COLOR: ; PADDING-BOTTOM:=

0px; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px;=

BORDER-TOP-WIDTH: 0px">You can sign-in to My Account and click on "Mail"=

to read your mail. 

=0D=0A


0px; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN: baseline; BORDER-BOTTOM-WIDTH:=

0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0px;=

MARGIN: 0px; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH: 0px">     =

                     =

                     =

                     =

 If you don't have My Account.

=0D=0A


style=3D"BORDER-LEFT-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN:=

baseline; BORDER-BOTTOM-WIDTH: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP:=

0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH:=

0px">                   =

                     =

                     =

         This is an
style=3D"BORDER-LEFT-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN:=

baseline; BORDER-BOTTOM-WIDTH: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP:=

0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH:=

0px" data-ogsb=3D"" data-ogsc=3D"" data-ogab=3D"" data-ogac=3D"" data-markjs=3D"true">auto

style=3D"BORDER-LEFT-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px; VERTICAL-ALIGN:=

baseline; BORDER-BOTTOM-WIDTH: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP:=

0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BORDER-TOP-WIDTH:=

0px">mated email message. Please do not reply.
   =

                     =

                     =

                     =

                    
 =

                     =

                     =

                     =

     





Investment spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Jul 2024 17:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYaB3-00000000EOS-29Sd

for dave@doctor.nl2k.ab.ca;

Mon, 29 Jul 2024 17:53:17 -0600

Resent-From: The Doctor

Resent-Date: Mon, 29 Jul 2024 17:53:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f68.google.com ([209.85.167.68]:45417)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYXBZ-00000000844-2AsA

for root@nk.ca;

Mon, 29 Jul 2024 14:41:40 -0600

Received: by mail-lf1-f68.google.com with SMTP id 2adb3069b0e04-52efd8807aaso6019683e87.3

for ; Mon, 29 Jul 2024 13:39:42 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1722285575; x=1722890375; darn=nk.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=k0YOn0Jwzh8ivb9SX56L3+OTQ+6sQjKauuhJWHNXtiw=;

b=kgH+inPKcvrHdHzQ4+n2mKWEqvYIHJnQnaqUNfRknN2k3synfLfg8d7Xa73x4LI4E+

28F66EHmh2uhHGPiPOVWBb//HJb09/oCQ9Rh//Cf48h3tbnhX8vGazrknj0OabLOYh8U

yeROfwNR3Bi1oNqvRx9TDUwYfN3X+01ErTOHSU/G4NLIOz9Z1kuC/L+XnGSwl4pWTg6z

WHvDRn47VBx3dEBzMPyLDUXRgNEbxdRCFPVEECiYkJuiBjt5B4geqPbpzAG4CPV6/MOQ

VGkvD5u6uMDU3l6N0ofZQQdwFnjgF4OrPGzS98IPaLjAIxwujWnZOrUTVNMdJuXS4CtV

7UJA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1722285575; x=1722890375;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=k0YOn0Jwzh8ivb9SX56L3+OTQ+6sQjKauuhJWHNXtiw=;

b=J0BXjC1INC8fHD6EjZWRv8JbiF+4PqlvN49qA/oa4pedyYz++NCzegYOd4zZv1LYWe

Jn9v6GpoAMPK0/+YzmidCjbFbUWdKXmrEDqzAseaTv9jKw3z28oN7WR4nD8VVjAgugEE

q8QCNcEEf2smwDlyBOgV1QgR2aA87P1yoGkuItkbHEyuXRBd4oIB/x8uyn+nAi+y+GEv

tkKYwJSMahEfFEZNIns7fpBakjnq7khxye3kP8AXXzG+HiR78L+83ymOVaDsFf2pP4Jx

rmg6SLxIRfY5+o/MQCiGouxtbv6EWvoFyOfGQj2DuLqO7wnNye1Qm3o6cTkXaf/K8JZ5

TZaw==

X-Gm-Message-State: AOJu0YzxhVHVscQipon/ohQK9dAq3RsI9NPcEzde383EMTm55BxTBXr9

V61F+vbz5tn5k80VgpUOssiWz82JufaX5CwkzvZlmI5ZokJ6sHAFIpoDuyRRLP0DrvALRBR60oY

WxQj6vXkohDz3/cADf593cwCdvbEgepIICboeKe9c

X-Google-Smtp-Source: AGHT+IEKyd4XjtxHMT0bSQgDjm7cXq8CgNnPT3lgXgJVOzFj2H/YK8hudJebLJetl+azLzPIMaWdPWazaTa8u06duS8=

X-Received: by 2002:a19:380d:0:b0:52f:1a0:b49 with SMTP id 2adb3069b0e04-5309b28e808mr5380049e87.31.1722285574818;

Mon, 29 Jul 2024 13:39:34 -0700 (PDT)

MIME-Version: 1.0

Reply-To: msemmadjonge@gmail.com

From: "Ms. Emma de Jonge"

Date: Mon, 29 Jul 2024 21:39:10 +0100

Message-ID:

Subject: Dave Yadallee

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000e394c7061e68db66"

X-Spam_score: 5.6

X-Spam_score_int: 56

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I wish to inquire if you are open to new business opportunities

in crude oil brokerage? Kindly get back to me if interested. Kind regards,

Ms. Emma de Jonge Hello, I wish to inquire if you are open to new business

opportunities in crude oil brokerage? Kindly get back to me if interested.





Content analysis details: (5.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.68 listed in dnsbl.ahbl.org]

[209.85.167.68 listed in dnsbl.ahbl.org]

[209.85.167.68 listed in dnsbl.ahbl.org]

[209.85.167.68 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.68 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.68 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.68 listed in will-spam-for-food.eu.org]

[209.85.167.68 listed in will-spam-for-food.eu.org]

[209.85.167.68 listed in will-spam-for-food.eu.org]

[209.85.167.68 listed in will-spam-for-food.eu.org]

[209.85.167.68 listed in will-spam-for-food.eu.org]

[209.85.167.68 listed in will-spam-for-food.eu.org]

[209.85.167.68 listed in will-spam-for-food.eu.org]

[209.85.167.68 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.68 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.68 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[msemadjonge(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

Subject: {SPAM?} Dave Yadallee



--000000000000e394c7061e68db66

Content-Type: text/plain; charset="UTF-8"



Hello, I wish to inquire if you are open to new business opportunities in

crude oil brokerage? Kindly get back to me if interested.



Kind regards,

Ms. Emma de Jonge



--000000000000e394c7061e68db66

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





nature" data-smartmail=3D"gmail_signature">
Hello, I w=

ish to inquire if you are open to new business opportunities in crude oil b=

rokerage? Kindly get back to me if interested.

Kin=

d regards,
Ms. Emma de Jonge




--000000000000e394c7061e68db66--

Business spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Jul 2024 17:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYaAj-00000000EKm-3l83

for dave@doctor.nl2k.ab.ca;

Mon, 29 Jul 2024 17:52:57 -0600

Resent-From: The Doctor

Resent-Date: Mon, 29 Jul 2024 17:52:57 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f53.google.com ([209.85.218.53]:46475)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYWpO-000000004i9-2Imz

for doctor@nl2k.ab.ca;

Mon, 29 Jul 2024 14:18:51 -0600

Received: by mail-ej1-f53.google.com with SMTP id a640c23a62f3a-a7b2dbd81e3so501233466b.1

for ; Mon, 29 Jul 2024 13:16:48 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1722284201; x=1722889001; darn=nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=cv/G0EJcYB2gO2Z5EXde9+9YVRvHNNI3diGynqU343k=;

b=J1iPIQmZ+auLjApKQtyjT0Rw469YVnghD/GQo3f2wvvTGQZZ+xhTP/W9HqUmYTSMFq

ezMilB/kgZ8vao2kvymVWvmic+GJDBkRFkw+xyuGKjhdiCylSUKCjr2UvLSolbz1nlGM

rRlmv7rW/Ws3ZbKuOoZBULBOk9aIzLDXcZGK2yJwHR1Cm8t7uTCXFlTtO5J/+/aZeGH8

PBhpM0ptVnWSlWN4+drsVo853uK4TYmUM/tqxWJk6ShG4shsu4/8jFwpc8e5+PzvvzWN

JVlch74qHtoPd7GJXhn+J6hXtmWdyEiw4O4+sTtbnUjm0GNWiNCWN1Yu/u6V8htHlnr0

yEHQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1722284201; x=1722889001;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=cv/G0EJcYB2gO2Z5EXde9+9YVRvHNNI3diGynqU343k=;

b=Ejh4UlYQkjq/wxI44Wz0xJMZdqlfkS5cMhEvtSaaQZLhPzWPKKNWX46lYdCMeggJze

09kOLE0SX3q4gucxqihhmG7JNik1F+TKFSwwuGDSdooFpvMV905SonqboVR6BGWvcp4C

7WzOec3sEcRCmgmCqA8PqVGaH3wOx8QrL4p5+/wB3qFxBhTctOR7bmDKfUhcBJL0lqoJ

CGY+utXUI0M2WqnjT2qMJvfGHavBmij86j6vZCw2O+tbJ2h1vzy/4XYl9XQyf8TRaRU0

nwWI9qFermrvFhoLM6nw7RiBlR1uvB+iontCsqAfiRqk0LVOFSBYX64cVC98GKeCIly/

M8YA==

X-Gm-Message-State: AOJu0YzaY86S6nKUAKD8EQRRr3E97GArBX0UrLpENg59a75QUtcVXXUl

c4tKzK6mqCgYME789xyaM7IdIPg8F5xjXG8IkectciRnfEFLUFZtLiV/UJt6UHfFQ5TzIcjNljK

FKRjGc6OUtydGBRNSHT+tCZ6sYY0BzI2G6Gw=

X-Google-Smtp-Source: AGHT+IHKT5m6+v8CDLfGhCe9ZeDrMBr4IQM522yyxFfg60Z46DTKKVxomAUhf/M5ruuyq0M1sKE55WNbzRfKIai6kqI=

X-Received: by 2002:a17:907:7ea0:b0:a72:7736:9e03 with SMTP id

a640c23a62f3a-a7d401794a8mr574984366b.52.1722284201144; Mon, 29 Jul 2024

13:16:41 -0700 (PDT)

MIME-Version: 1.0

From: bola17

Date: Mon, 29 Jul 2024 20:16:31 +0000

Message-ID:

Subject: bola17

To: doctor

Content-Type: multipart/alternative; boundary="00000000000002f8f3061e688a3c"

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good day I recently sent you a message containing a link.

Please don't miss your opportunity, as it might have been filtered into your

spam folder. I believe this topic could be of interest to you. Kind Regards,bola17





Content analysis details: (5.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.218.53 listed in dnsbl.ahbl.org]

[209.85.218.53 listed in dnsbl.ahbl.org]

[209.85.218.53 listed in dnsbl.ahbl.org]

[209.85.218.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.218.53 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.218.53 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.218.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.218.53 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.218.53 listed in will-spam-for-food.eu.org]

[209.85.218.53 listed in will-spam-for-food.eu.org]

[209.85.218.53 listed in will-spam-for-food.eu.org]

[209.85.218.53 listed in will-spam-for-food.eu.org]

[209.85.218.53 listed in will-spam-for-food.eu.org]

[209.85.218.53 listed in will-spam-for-food.eu.org]

[209.85.218.53 listed in will-spam-for-food.eu.org]

[209.85.218.53 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.218.53 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.218.53 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[oxnkevinharris027(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[oxnkevinharris027(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} bola17



--00000000000002f8f3061e688a3c

Content-Type: text/plain; charset="UTF-8"



Good day

I recently sent you a message containing a link. Please don't miss your

opportunity, as it might have been filtered into your spam folder. I

believe this topic could be of interest to you.





Kind Regards,bola17



--00000000000002f8f3061e688a3c

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Good day
I recently sent you a message containing a li=

nk. Please don't miss your opportunity, as it might have been filtered =

into your spam folder. I believe this topic could be of interest to you.
>

Kind Regards,bola17




--00000000000002f8f3061e688a3c--

link spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Jul 2024 17:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYaAg-00000000EK3-2Lf8

for dave@doctor.nl2k.ab.ca;

Mon, 29 Jul 2024 17:52:54 -0600

Resent-From: The Doctor

Resent-Date: Mon, 29 Jul 2024 17:52:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f194.google.com ([209.85.208.194]:57355)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYYB8-00000000L39-1dLC

for doctor@nl2k.ab.ca;

Mon, 29 Jul 2024 15:45:18 -0600

Received: by mail-lj1-f194.google.com with SMTP id 38308e7fff4ca-2eeb1ba0481so62907101fa.2

for ; Mon, 29 Jul 2024 14:43:19 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1722289393; x=1722894193; darn=nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=+0dl99u9CLDNwtzXTOdo1DtPuWSYx5bY8ZZRHs2Q/hI=;

b=V9383+C7p97ih1E1Q467FTyvVZpNXOiJsWd0xx4lfGb5uqccR1oP+p8Q8dK0VPbgyi

v0G3qVgWiJiK4YabZC1vkRedlLD28AhIDI2CnFM9wgsVSgFTuk4S4R+4gLZGmOlvU/+k

Ldqs5MJsdxCzbVgWvtHMx0tvW8+oJVKeC0NXeq9iKogtzPgt36k55uW7KWnU9GIe1EHm

MAXasA9RV/bHykcdrSvV11Q5tH7bSdyAZY6UozS2kDAdTSyxYMnR+mNDoPkeY0rURZxX

R/Xrutbb7APdiQq7hJ1UtA4hc5EHeFKlBBRDacfSHs+l/hKg7vzGQALoiUDn4TjUgwn/

jiYQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1722289393; x=1722894193;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=+0dl99u9CLDNwtzXTOdo1DtPuWSYx5bY8ZZRHs2Q/hI=;

b=G5Xroht54sjCR8yCB2FWHp4q094G9pK2YeUCboEnWLCS2S7YviK2Apz/LtWaEV87Hs

LiOv17in9/U6RzgF4SBh4yT1o5N26yUe6ixSLtBj0UUVcR0Y1/yTbdri0dXL5bQwqBiA

NbLr6ao6HuVJPb5FDuxn5McWV7YpjtujbwDVvPAqfPIuTC+D6MVjvmY04JKAkwU0tsMK

dap/S5q5pDW+EynzSZNUA855TfaZGqZKWoWWFUOd/LFhXVHViAL20tK4H0ZJfq1oTKaU

A7m57qcDr7jz5weaN+efwvKkbSHTcEEW+mdBZRAq3khhLXpEliR5OYJRDzI+eN0Y1rrm

u49g==

X-Gm-Message-State: AOJu0Yz9QCebsjQ8yTwryAiWEUOC9J+38mdt/kGPBJZe6wFJiK0mrp4k

WNZeHxP+6MIBDHmmndGtuDrCGq5YIzO4XKAhhyQE/L25DruDqyBFveOhrgi+ZIl3jes42hx5htn

yKtgODijQeaHmAK+Kfo6ahE0MwTCd+2JchrMRlQ==

X-Google-Smtp-Source: AGHT+IGk+xOaqZijJW/66yAQoJwlTHmSVsuJ0h4N6jU+QbMkiu/qrupx3GGseCWLB3ymHQrDUWLKseugV4TWUepBn2M=

X-Received: by 2002:a17:907:86a2:b0:a79:8318:288f with SMTP id

a640c23a62f3a-a7d3ffb6a2cmr646817766b.16.1722284196671; Mon, 29 Jul 2024

13:16:36 -0700 (PDT)

MIME-Version: 1.0

From: bola17

Date: Mon, 29 Jul 2024 20:16:29 +0000

Message-ID:

Subject: bola17

To: doctor

Content-Type: multipart/alternative; boundary="000000000000beb713061e68898d"

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: https://t.co/QlNB4BVVWW https://t.co/QlNB4BVVWW



Content analysis details: (7.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.194 listed in dnsbl.ahbl.org]

[209.85.208.194 listed in dnsbl.ahbl.org]

[209.85.208.194 listed in dnsbl.ahbl.org]

[209.85.208.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.194 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.194 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.194 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.208.194 listed in will-spam-for-food.eu.org]

[209.85.208.194 listed in will-spam-for-food.eu.org]

[209.85.208.194 listed in will-spam-for-food.eu.org]

[209.85.208.194 listed in will-spam-for-food.eu.org]

[209.85.208.194 listed in will-spam-for-food.eu.org]

[209.85.208.194 listed in will-spam-for-food.eu.org]

[209.85.208.194 listed in will-spam-for-food.eu.org]

[209.85.208.194 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.194 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[209.85.208.194 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.208.194 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.194 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[oxnkevinharris027(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[oxnkevinharris027(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 TVD_SPACE_RATIO No description available.

Subject: {SPAM?} bola17



--000000000000beb713061e68898d

Content-Type: text/plain; charset="UTF-8"



https://t.co/QlNB4BVVWW



--000000000000beb713061e68898d

Content-Type: text/html; charset="UTF-8"







--000000000000beb713061e68898d--

Backpack promotion phish from Microsoft Outlook and OVH

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 30 Jul 2024 15:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYtx9-000000009T6-4B9G

for dave@doctor.nl2k.ab.ca;

Tue, 30 Jul 2024 15:00:15 -0600

Resent-From: The Doctor

Resent-Date: Tue, 30 Jul 2024 15:00:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ip239.ip-15-204-31.us ([15.204.31.239]:50607 helo=isis.org)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYsh1-00000000KhN-2Eks

for doctor@doctor.nl2k.ab.ca;

Tue, 30 Jul 2024 13:39:42 -0600

Received: from NAM04-MW2-obe.outbound.protection.outlook.com (mail-mw2nam04on20717.outbound.protection.outlook.com. [2a01:111:f403:240a::510])

by mx.google.com with ESMTPS id d{n,4}c01a{n,4}-1fac157b494si19763565ad.411.2024.06.28.06.38.{n,2}

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES510-GCM-SHA256 bits=129/129);

[email_date]

Received: from CH2PEPF00000148.namprd02.prod.outlook.com

(2603:10b6:610:32:cafe::5d) by CH0PR07CA0027.outlook.office365.com

(2603:10b6:610:32::32) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7762.29 via Frontend

Transport; [email_date]

Authentication-Results: spf=pass (sender IP is 172.82.239.10)

smtp.mailfrom=ecom1.logitech.com; dkim=pass (signature was verified)

header.d=ecom1.logitech.com;dmarc=pass action=none

header.from=ecom1.logitech.com;compauth=pass reason=100

Received-SPF: Pass (protection.outlook.com: domain of ecom1.logitech.com

designates 172.82.239.10 as permitted sender)

receiver=protection.outlook.com; client-ip=172.82.239.10;

helo=r10.email.circle.logi.com; pr=C

Received: from r10.email.circle.logi.com (172.82.239.10) by

CH2PEPF00000148.mail.protection.outlook.com (10.167.244.105) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.7784.11 via Frontend Transport; [email_date]

X-IncomingTopHeaderMarker:

OriginalChecksum:6358AF3B258C1BDB0F3ED64FE856BAC9662515C74626328B54DCEBF92274B956;UpperCasedChecksum:5327CC64E06FE43FD5101DD8A956F60F04F8DF58045B850976A73B640D0165AC;SizeAsReceived:1877;Count:14

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ecom1.logitech.com;

s=logitech; t=1721117047;

bh=0B/6bTXPHYx3e3G5RVajiPcww6i9oJf3Jdw234zprSg=;

h=From:Date:Subject:To:MIME-Version:Message-ID:Content-Type;

b=doeP62K0azYfUo2gfef4ZVGID5uyW5ForKu+hXm0eVvczRdBoT9hNHe0m5AZPyavM

wrq5qf8gZ/UIwqdT8+Y/j5RDFhn/M7NyVxhMCMqJ1Ou3HllLEk91bbrwMDfN/7CkGh

fBIjUbwImC5HZimeUB5KkB6vKxWhaunKz2/hNO26CrN2Y1zkPdEPcy4YaD73BNblSL

VywV87fIqKXadpAR1ESIxYiUzyK0CatJpIEbcYtKuUcWQ1lpvn382SGYtnSTjf+mwo

zQA1PQsgo4yJr8o0qNV2KyheGErYV/Samb4z2k3e5TsSBu+fsDVHNTEoPhRV/sn9aN

2DBv+4tC5GeDw==

X-MSFBL: fhH0F7QIWB8j5+dy6gCsnqngGOs32SZvXX0SXEeVBRc=|eyJnIjoiZGVmYXVsdF9

jNGUyYzBhNy1kNmEyLTQ5NmQtYjY2Ni0xNjEzZDc0YjUzMDUiLCJyIjoicW94dWJ

la0BvdXRsb29rLmNvbSIsImIiOiJhd3NfbG9naXRlY2hfcHJvZDFfZGVmYXVsdF9

tb21lbnR1bTEyX210YTAwNF8xNzIuODIuMjM5LjEwIiwicmNwdF9tZXRhIjp7ICJ

pbiI6ICJsb2dpdGVjX21rdF9wcm9kMSIsICJyIjogInFveHViZWtAb3V0bG9vay5

jb20iLCAibSI6ICIxMDA4MzA4OTA4IiwgImQiOiAiNDM2NDI2MTMzIiwgImkiOiA

iOTcwRkFBNjM1N0Y1MzNCQjBBNDk1Q0M4QEFkb2JlT3JnIiB9fQ==

Received: from aws1-mta-relay7.sailthru.cloud (10.55.90.61) by condenast-b.sailthru.com id hia50g3791sc for ; Sat, 13 Jul 2024 09:06:56 -0500 (envelope-from )

Content-Type: multipart/alternative; boundary="----=_Part_9006_1222595691.1721141065958"

Date: [email_date]

From: "'Yeti Crossroads Backpack Department"'

Mime-Version: 1.0

Message-ID:

Subject:Re: 2nd attempt for doctor...

X-Feedback-ID: 20189669:SG

X-SG-EID: u001.VRuSiAmiSZrdM+ch8/ewZCE5g8d2mJyorx7s3jZ5rqnyXmzyFkS20YO/O71zaWyuG5n01ntHHvHDQO7WWsZ0yglAgtUtWe2Nsjr8QAomYVNDlZqGB1kKSx5YK8+/GrvM//Al7+JDZ78jIiAHdRR3NaEh/9K8tO3O9LWa4PnrXdZdgdMDTPL/KhvxYw9Mv5xof9DQOiB98h5oItpgW9Pv1CHUFKExtRJQm0atm4BMaG1hLD9He43C26ZLesH5O18K

X-SG-ID: u001.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

To:

X-Entity-ID: u001.2JUHSSBYWGJCVVYGT3NTNT==

X-Spam_score: 30.1

X-Spam_score_int: 301

X-Spam_bar: ++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please confirm your email address Click here to confirm your

email address To receive HubSpot content on marketing, sales and/or service

topics - please confirm your email address. You will be added to our email

distribution list. You can unsubscribe at any time.



Content analysis details: (30.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[172.82.239.10 listed in dnsbl.ahbl.org]

[172.82.239.10 listed in dnsbl.ahbl.org]

[172.82.239.10 listed in dnsbl.ahbl.org]

[172.82.239.10 listed in dnsbl.ahbl.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[dnsbl.ahbl.org]

[2a01:111:f403:240a:0:0:0:510 listed in]

[dnsbl.ahbl.org]

[2a01:111:f403:240a:0:0:0:510 listed in]

[dnsbl.ahbl.org]

[2a01:111:f403:240a:0:0:0:510 listed in]

[dnsbl.ahbl.org]

[2a01:111:f403:240a:0:0:0:510 listed in]

[dnsbl.ahbl.org]

[15.204.31.239 listed in dnsbl.ahbl.org]

[15.204.31.239 listed in dnsbl.ahbl.org]

[15.204.31.239 listed in dnsbl.ahbl.org]

[15.204.31.239 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[172.82.239.10 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[172.82.239.10 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[172.82.239.10 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[172.82.239.10 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:510 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:510 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:510 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:510 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:510 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:510 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:510 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:510 listed in]

[will-spam-for-food.eu.org]

[15.204.31.239 listed in will-spam-for-food.eu.org]

[15.204.31.239 listed in will-spam-for-food.eu.org]

[15.204.31.239 listed in will-spam-for-food.eu.org]

[15.204.31.239 listed in will-spam-for-food.eu.org]

[15.204.31.239 listed in will-spam-for-food.eu.org]

[15.204.31.239 listed in will-spam-for-food.eu.org]

[15.204.31.239 listed in will-spam-for-food.eu.org]

[15.204.31.239 listed in will-spam-for-food.eu.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[15.204.31.239 listed in bb.barracudacentral.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

15 GR_DOMAIN_SAILTH1 Received contains spammer id (sailth)

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.3 LONGWORD BODY: Uses overlong words

0.6 J_CHICKENPOX_66 BODY: 6alpha-pock-6alpha

0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.8 A_HREF_NOWHERE A link tag with empty href

0.0 T_HTML_TAG_BALANCE_CENTER Malformatted HTML

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

3.0 HOSTED_IMG_MULTI_PUB_01 Multiple hosted images at public site

1.4 HDRS_MISSP Misspaced headers

Subject: {SPAM?} Re: 2nd attempt for doctor...



------=_Part_9006_1222595691.1721141065958

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Please confirm your email address



Click here to confirm your email address



To receive HubSpot content on marketing, sales and/or service topics -Â please confirm your email address. You will be added to our email distribution list. You can unsubscribe at any time.



Thank you for your confirmation and have fun with our content. Â



Thanks,



The HubSpot Team



HubSpot, 25 1st St., Cambridge, MA 02141, USA, 888-482-7768



HubSpot, 2 Canal Park, , Cambridge, MA 02141, USA, 888-482-7768









Unsubscribe (https://hs-53.s.hubspotemail.net/hs/manage-preferences/unsubscribe-all?languagePreference=en&d=MnbTK9GK15VW3_Vshk4hHDBPW3T2_Lm2m40KfW3T0pbm43T3CZVmWFg14N_KfmN5fr_5C25rVhW8xS7DT8t0gJQVWmbwB8c2k7nMXk_7QbvZTwVMrv2h5s79sCW1P-vmr68hV1J32Kw2&v=3 )



Manage preferences (https://hs-53.s.hubspotemail.net/hs/manage-preferences/unsubscribe?languagePreference=en&d=MnbTK9GK15VW3_Vshk4hHDBPW3T2_Lm2m40KfW3T0pbm43T3CZVmWFg14N_KfmN5fr_5C25rVhW8xS7DT8t0gJQVWmbwB8c2k7nMXk_7QbvZTwVMrv2h5s79sCW1P-vmr68hV1J32Kw2&v=3 )

------=_Part_9006_1222595691.1721141065958

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable





Bitte bestätigen Sie Ihre E-Mail-Adresse there | Confirm your e-mail address there

































doctor,Please verify











X-rated Google Groups spam "Rosa J. Mireles" <poojkgtyuyrfh987659uhsh@gmail.com> from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 30 Jul 2024 15:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYtxE-000000009UU-155y

for dave@doctor.nl2k.ab.ca;

Tue, 30 Jul 2024 15:00:20 -0600

Resent-From: The Doctor

Resent-Date: Tue, 30 Jul 2024 15:00:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f56.google.com ([209.85.161.56]:47258)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYslf-00000000LEy-0Fg8

for root@mail.nl2k.ab.ca;

Tue, 30 Jul 2024 13:44:23 -0600

Received: by mail-oo1-f56.google.com with SMTP id 006d021491bc7-5d5c7bfd8aasf4517053eaf.2

for ; Tue, 30 Jul 2024 12:42:24 -0700 (PDT)

ARC-Seal: i=2; a=rsa-sha256; t=1722368539; cv=pass;

d=google.com; s=arc-20160816;

b=1DqMqaDK9jq+mXjFs6gG4v9VOVqZ4v7ssKQKjgF8c0SqfcIuhFP1D9Lf48zn2flXOw

pgh0rRIJK48vji99YSBmr3jXQEmPsCLbiYhRLFrcr+p8aHgpICNy8+YIWkhacRwTUJ3P

naAlTf/2Q+75iudBMjoVGQo3MZ8acQQexPsDKOfzomK6BFY3T0zu9wVI3TwvqLJRrHF9

EeLNAl7+xeCLqAiqYtGMcwBC3h25pab/bBCdLpH75dowaZiGxkf7v0YGOLkJ+6KYN4yo

mKhayiBukEObA0MOViqBTHopA1+/Hca8dn7oMVB/gZr//wtg+hFzVQGTMkFwQqUAz+C4

aeAw==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature:dkim-signature;

bh=MImu7gxzXBq5rEhLTr9AKPAmAmvA649+v4w8EEUqf/I=;

fh=TaLuB1ycqaN56xlPa9N1fhcCflwPyJkX3OVnVNh8ZYI=;

b=TnCP1EEvCo3tJ+8v1S31GATMrKB441WTu0+8LlxK7ZJH2EobTkvcvloQ5jrxBfGInN

OOPAZOb5YyIeETfDeDXYxdSBgTlJ1SLJmoTAtM2WytiWmDzSjaCUY3BwyYoAx1iaPV8Z

IU2cczEWiqa0ZveVD9sVW7pVK08dgWTs5BhUcj+ZKfPW9frOhAsgstFHJZfbDaYiq1lt

GrrZ58zyg8MTWMjIhKE1WMGf4xM/SGyUkulgrBlQwj+Lw1olLjev0QSRIjbZCvsek9Br

1PtGZCwTLjUVfCF4OL5DAohX1qRgU05Y+2ZEiCLTnDphcIsNPY7p2aF94JyUFfO/WmSI

z19Q==;

darn=mail.nl2k.ab.ca

ARC-Authentication-Results: i=2; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=GmtFu8RK;

spf=pass (google.com: domain of poojkgtyuyrfh987659uhsh@gmail.com designates 2607:f8b0:4864:20::22d as permitted sender) smtp.mailfrom=poojkgtyuyrfh987659uhsh@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=pass header.i=@googlegroups.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=googlegroups.com; s=20230601; t=1722368539; x=1722973339; darn=mail.nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=MImu7gxzXBq5rEhLTr9AKPAmAmvA649+v4w8EEUqf/I=;

b=V3HZApr5P8cn2BPGdbNuXPRNK5s8ej7DJlJhwFwymd3xbta1nLMzzPTS8SwFjciP/U

KT81QQQ8hL7Ms5NX6aTqEV9J2K0tftXveFcFZyn3c2qZZ6lho/endy7JzbTEzq1eDAnw

an1fqrW16hN3MMZ+8uY+Q3f/jstcfAMI9yt8LApaiVQO+GBP21SMzUsfgz2M+RDc4s/q

0INQ8v4TJVDYHupe9TpNsZDDALaPxfQdNo5mET/f9n9eS1HLgwyQlX+qf8HA+9VXTdKr

P6ybNmolP0XF4CcLzWXTP9IIvLIp4OyKfy7Rj30lzI2c+AZWpSMV5jBgNHARFYd8DoaP

j4rw==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1722368539; x=1722973339; darn=mail.nl2k.ab.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:to:subject:message-id:date:from:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=MImu7gxzXBq5rEhLTr9AKPAmAmvA649+v4w8EEUqf/I=;

b=YBXzanVzwzARkYk7D0KwUukP3DMEbvmulBpxCxIl3NrG/o18633yXkksAfu+Cp3Ilv

RcV6gtaUl9RfNknkMFhgKwe0fE+sl2vIY+NizaSX9fNnNxa688gJWjqw2w9FZubBXR3n

apxp2ZrLPjcUejsrMOJxpnFZTwZNX05VulWcorWeWWUffTKqJchNBALVMj80XadZOENB

YPdgC+m7ainQZPgt9L2I+qDbZTNjO04vuFMQZGeV7f+bIGnGtVPJyPElhs9iKJBkXktY

7yEfNSodO604i99nPivXmxAu3xuQrvlde1KX2ACtNnxCDM938Gv0Vp5zch0ap+R2bp6C

78lw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1722368539; x=1722973339;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:to:subject

:message-id:date:from:mime-version:x-beenthere:x-gm-message-state

:sender:from:to:cc:subject:date:message-id:reply-to;

bh=MImu7gxzXBq5rEhLTr9AKPAmAmvA649+v4w8EEUqf/I=;

b=tHzpnlgrRVXrRyqpCJIl2Ki0qk+DXWgjPiHbVu5nT50EicJBO1lcncHeYdP37g+VpW

3pK64CCfEUw9H2zpV9IBShHabOjVbXSxcEsKGjnXYNQiHqpiK5d3DfF90jAz96G/zrO0

m1gc043L69tMX9pwXaWSXtbwq7nUwbBeibL1dcfBWhIlTIFwsIOfazaK73x2mUYD4ko4

DtdyrS+pj5Jmn7aHtsuwkcU7dFfZoNsPUd7WS2TvGWxLOEt5S8r0sW5zFJ/g7WUfd4YK

KiSgvj5ImCCYkacgI4psrACMGQPlsoFEUIu/1kzmuSzLz0Yw5I1zfmg5QblWf4w0rzLJ

xAjA==

Sender: dece15-912025586@googlegroups.com

X-Forwarded-Encrypted: i=2; AJvYcCVb6WV19RNpLSurLFJudnei916rKaO+V4BJQgPPSR7AN0JlADWfV9XJ4TtLptD0zzRMSmFwhC4DtY2Rf5oilIoFZyPYUQ==

X-Gm-Message-State: AOJu0YwpDAh8Y6wK1SaIVejPU/+E9QBLnyyBEzOnZ31F9MPt2s0JGS+O

qD/bdzpz+Rk3oWpPaTGeDzY3YLQeh/7U5tDunIhqdFgKxyVmyl3t

X-Google-Smtp-Source: AGHT+IHKSLuHZWxl78G8fFiHkYeDZ3uUSArFQo9ZrzMdnlk0F69xdTzivjZ8NhSpePGYD509dzpfbg==

X-Received: by 2002:a05:6820:555:b0:5d5:d718:1b7f with SMTP id 006d021491bc7-5d5d7182410mr13703816eaf.1.1722368537782;

Tue, 30 Jul 2024 12:42:17 -0700 (PDT)

X-BeenThere: dece15-912025586@googlegroups.com

Received: by 2002:a4a:db8b:0:b0:5d5:b99a:b26e with SMTP id 006d021491bc7-5d5b99ab641ls4807266eaf.0.-pod-prod-02-us;

Tue, 30 Jul 2024 12:42:14 -0700 (PDT)

X-Forwarded-Encrypted: i=2; AJvYcCVSgh5YNVj8Y1X9AhUmsOpZpjg0UKBHys6bEptBT2gRtmZFy0HHoy7WaWRULtVMiLzDk9GTx7NCmVhoc+1Jni6IXRer26R5+/N/Uk4S5n7FR8Y=

X-Received: by 2002:a05:6820:61a:b0:5d5:dca7:b6d5 with SMTP id 006d021491bc7-5d5dca7bc33mr11189743eaf.8.1722368534056;

Tue, 30 Jul 2024 12:42:14 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1722368534; cv=none;

d=google.com; s=arc-20160816;

b=cide/eLB5Ot1eLp99Z/KiGUZtYALj8QMAksFH6LivPio9py7Z2IeGKTsE+ow19vXNk

d5bWSFacJTafOxuWgNm8vSTTijN7b2L8M400m7cXOI09ci+B4BWtDbq72CxXcW0G3a7G

LgkKs4RgsXHSMI3Rsjmvmrha6j5nJhRxEE+QEDfghg4C7MqzUidW4Fs+pzbMdTxzFCh2

2MS9WeZi6LIslgC9Vex+cbJhbQ/dr4RP922OXLJX8xImkiLOx4TogdlnByHyDEm1HwGY

9KHKkkRpxjmRgjR/q8ZgqFyntxwDdA4GCa4Ahy33RTdohuD+CQ7Q1Cr0RQSWGF/fESQs

f6Xg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=q9L3SosZjJYPiHc+2rAnkxdHFwiAgQWMoKSa4IiXv7A=;

fh=AG7cOk+dQDNLodY0afF5EIzDAezPMDbFN0kwzeVwGbE=;

b=ThxsNR2PJDind1n2rtePW2niymvQPO+QMjz+VMvEvVUhybsPiJ/gr7ESfRpPO6pbzC

TS1h5YJ6mHuN7UVxJlPaOuCRPQvlLjkyEyiEE6bKX2avSrn4VKMI2s8vGaTW6yz6wFy2

cfnUtSZsGSsVCnV3jWp+TmvXUeYf3t2pBYnvmaELe2jml9FaOTGTw7u55BXoAl9pfQag

XDdxIJaaIF1xXQ+PgHHIRd8z6h1ssf89EEcqqq7Uc6LJJGItwbtO7oeI/RV6L9SFoCWX

Cgi3B/b9PsEqVqgtkyUiMXQB/6cjO0u11yTMqqeoWlAZnop8JnvO4PxiCJjyprHpMB08

CPuA==;

dara=google.com

ARC-Authentication-Results: i=1; gmr-mx.google.com;

dkim=pass header.i=@gmail.com header.s=20230601 header.b=GmtFu8RK;

spf=pass (google.com: domain of poojkgtyuyrfh987659uhsh@gmail.com designates 2607:f8b0:4864:20::22d as permitted sender) smtp.mailfrom=poojkgtyuyrfh987659uhsh@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=pass header.i=@googlegroups.com

Received: from mail-oi1-x22d.google.com (mail-oi1-x22d.google.com. [2607:f8b0:4864:20::22d])

by gmr-mx.google.com with ESMTPS id 006d021491bc7-5d608d911e2si119608eaf.1.2024.07.30.12.42.14

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Tue, 30 Jul 2024 12:42:14 -0700 (PDT)

Received-SPF: pass (google.com: domain of poojkgtyuyrfh987659uhsh@gmail.com designates 2607:f8b0:4864:20::22d as permitted sender) client-ip=2607:f8b0:4864:20::22d;

Received: by mail-oi1-x22d.google.com with SMTP id 5614622812f47-3db23a60850so2571398b6e.0;

Tue, 30 Jul 2024 12:42:14 -0700 (PDT)

X-Forwarded-Encrypted: i=1; AJvYcCVGNOK7w1LzH+YN5GQjAWzwJQv9q5JK+exTsP9QpBTlbK4ldDw6vpHOIAAsY1aDOucGd/TzVYpBPku3b5MZtAS8O+4pITmnTmIAQ8YeBlXdgRsHjPw2S5VBwZm298oGf04e+gWw3qt8eZuGOnWsJoPPNr189zQ2JwkoEg4cpuGNYvSukRmyDYtzgSqrf9v1rVE4Mf7ptG6saTP3D8Zem2Wr6IpmlVKsYpW1ZAotYEFgoo55Kww8zz7tAKUDhlg/aQTj/l5d14KeLHGzFjdMQfvBflfrEQWqvliPOAbDFQqIKVTzFztSddeR0VYR3u8IfqraHrhuyFOx+H4INJLA4BTQEiBLqYBrH4eOMTDahFV3sxaGfdA2ueBfQtSw8zs4UYzj5RMxgZTjnKXQXP/FmflwmlqEfJJvzoe2MV/t9bygC6hYTOr3mIT9ARlTXK6P42g9BY3uiKjC7uDpta8zug5LIDIVFCU69tEc

X-Received: by 2002:a05:6808:2122:b0:3d9:2aa5:4077 with SMTP id

5614622812f47-3db23a58d84mr14697895b6e.5.1722368533377; Tue, 30 Jul 2024

12:42:13 -0700 (PDT)

MIME-Version: 1.0

From: "Rosa J. Mireles"

Date: Wed, 31 Jul 2024 01:42:08 +0600

Message-ID:

Subject: Looking for older fit male

To: dece15-912016917@googlegroups.com, dece15-912017260@googlegroups.com,

dece15-912020230@googlegroups.com, dece15-912020772@googlegroups.com,

dece15-912025199@googlegroups.com, dece15-912025586@googlegroups.com,

dece15-912027665@googlegroups.com, dece15-912027821@googlegroups.com,

dece15-912028234@googlegroups.com, dece15-912031641@googlegroups.com

Content-Type: multipart/alternative; boundary="0000000000009abad0061e7c2ce8"

X-Original-Sender: poojkgtyuyrfh987659uhsh@gmail.com

X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass

header.i=@gmail.com header.s=20230601 header.b=GmtFu8RK; spf=pass

(google.com: domain of poojkgtyuyrfh987659uhsh@gmail.com designates

2607:f8b0:4864:20::22d as permitted sender) smtp.mailfrom=poojkgtyuyrfh987659uhsh@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=pass header.i=@googlegroups.com

Precedence: list

Mailing-list: list dece15-912025586@googlegroups.com; contact dece15-912025586+owners@googlegroups.com

List-ID:

X-Spam-Checked-In-Group: dece15-912025586@googlegroups.com

X-Google-Group-Id: 745700075957

List-Post: ,

List-Help: ,

List-Archive:
List-Unsubscribe: ,



X-Spam_score: 9.0

X-Spam_score_int: 90

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hey, I'm a 22F white lady. I'm looking to have naughty fun

with someone. I would love to pleasure you. see map > sites.google.com/view/mnrk25

Don't worry . No need CC ////////////////////



Content analysis details: (9.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:22d listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:22d listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:22d listed in]

[dnsbl.ahbl.org]

[2607:f8b0:4864:20:0:0:0:22d listed in]

[dnsbl.ahbl.org]

[209.85.161.56 listed in dnsbl.ahbl.org]

[209.85.161.56 listed in dnsbl.ahbl.org]

[209.85.161.56 listed in dnsbl.ahbl.org]

[209.85.161.56 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:22d listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:22d listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:22d listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2607:f8b0:4864:20:0:0:0:22d listed in]

[dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2607:f8b0:4864:20:0:0:0:22d listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:22d listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:22d listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:22d listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:22d listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:22d listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:22d listed in]

[will-spam-for-food.eu.org]

[2607:f8b0:4864:20:0:0:0:22d listed in]

[will-spam-for-food.eu.org]

[209.85.161.56 listed in will-spam-for-food.eu.org]

[209.85.161.56 listed in will-spam-for-food.eu.org]

[209.85.161.56 listed in will-spam-for-food.eu.org]

[209.85.161.56 listed in will-spam-for-food.eu.org]

[209.85.161.56 listed in will-spam-for-food.eu.org]

[209.85.161.56 listed in will-spam-for-food.eu.org]

[209.85.161.56 listed in will-spam-for-food.eu.org]

[209.85.161.56 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.161.56 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.56 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[poojkgtyuyrfh987659uhsh(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list

2.5 SORTED_RECIPS Recipient list is sorted by address

0.0 HTML_MESSAGE BODY: HTML included in message

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

Subject: {SPAM?} Looking for older fit male



--0000000000009abad0061e7c2ce8

Content-Type: text/plain; charset="UTF-8"



Hey,

I'm a 22F white lady. I'm looking to have naughty fun with someone. I would

love to pleasure you.

see map > sites.google.com/view/mnrk25



Don't worry . No need CC











































////////////////////



--

You received this message because you are subscribed to the Google Groups "Dece15-912025586" group.

To unsubscribe from this group and stop receiving emails from it, send an email to dece15-912025586+unsubscribe@googlegroups.com.

To view this discussion on the web, visit https://groups.google.com/d/msgid/dece15-912025586/CAD2-xvc_e7xU_XN4CkrRC-5riBfHrzPpEGj%2B%2BM1%2BxfD_L9GB9Q%40mail.gmail.com.



--0000000000009abad0061e7c2ce8

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hey,
I'm a 22F white lady. I'm looking to have =

naughty fun with someone. I would love to pleasure you.
see map > =C2=

=A0 =C2=A0sites.google.com/=

view/mnrk25


Don't worry . No need CC





=

















///////////=

/////////








--


You received this message because you are subscribed to the Google Groups &=

quot;Dece15-912025586" group.


To unsubscribe from this group and stop receiving emails from it, send an e=

mail to de=

ce15-912025586+unsubscribe@googlegroups.com
.


To view this discussion on the web, visit
com/d/msgid/dece15-912025586/CAD2-xvc_e7xU_XN4CkrRC-5riBfHrzPpEGj%2B%2BM1%2=

BxfD_L9GB9Q%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https:=

//groups.google.com/d/msgid/dece15-912025586/CAD2-xvc_e7xU_XN4CkrRC-5riBfHr=

zPpEGj%2B%2BM1%2BxfD_L9GB9Q%40mail.gmail.com
.




--0000000000009abad0061e7c2ce8--

SiriusXM phish from OVH and Microsoft

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 30 Jul 2024 15:01:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYtxS-000000009Wl-1BKb

for dave@doctor.nl2k.ab.ca;

Tue, 30 Jul 2024 15:00:34 -0600

Resent-From: The Doctor

Resent-Date: Tue, 30 Jul 2024 15:00:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ip220.ip-15-204-30.us ([15.204.30.220]:55795 helo=mailanyone.net)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYskR-00000000LF1-1AcH

for doctor@doctor.nl2k.ab.ca;

Tue, 30 Jul 2024 13:43:09 -0600

Received: from NAM04-MW2-obe.outbound.protection.outlook.com (mail-mw2nam04on20717.outbound.protection.outlook.com. [2a01:111:f403:240a::948])

by mx.google.com with ESMTPS id d{n,4}c01a{n,4}-1fac157b494si19763565ad.411.2024.06.28.06.38.{n,2}

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES948-GCM-SHA256 bits=124/124);

[email_date]

Received: from CH2PEPF00000148.namprd02.prod.outlook.com

(2603:10b6:610:32:cafe::5d) by CH0PR07CA0027.outlook.office365.com

(2603:10b6:610:32::32) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7762.29 via Frontend

Transport; [email_date]

Authentication-Results: spf=pass (sender IP is 172.82.239.10)

smtp.mailfrom=ecom1.logitech.com; dkim=pass (signature was verified)

header.d=ecom1.logitech.com;dmarc=pass action=none

header.from=ecom1.logitech.com;compauth=pass reason=100

Received-SPF: Pass (protection.outlook.com: domain of ecom1.logitech.com

designates 172.82.239.10 as permitted sender)

receiver=protection.outlook.com; client-ip=172.82.239.10;

helo=r10.email.circle.logi.com; pr=C

Received: from r10.email.circle.logi.com (172.82.239.10) by

CH2PEPF00000148.mail.protection.outlook.com (10.167.244.105) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.7784.11 via Frontend Transport; [email_date]

X-IncomingTopHeaderMarker:

OriginalChecksum:6358AF3B258C1BDB0F3ED64FE856BAC9662515C74626328B54DCEBF92274B956;UpperCasedChecksum:5327CC64E06FE43FD5101DD8A956F60F04F8DF58045B850976A73B640D0165AC;SizeAsReceived:1877;Count:14

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ecom1.logitech.com;

s=logitech; t=1721117047;

bh=0B/6bTXPHYx3e3G5RVajiPcww6i9oJf3Jdw234zprSg=;

h=From:Date:Subject:To:MIME-Version:Message-ID:Content-Type;

b=doeP62K0azYfUo2gfef4ZVGID5uyW5ForKu+hXm0eVvczRdBoT9hNHe0m5AZPyavM

wrq5qf8gZ/UIwqdT8+Y/j5RDFhn/M7NyVxhMCMqJ1Ou3HllLEk91bbrwMDfN/7CkGh

fBIjUbwImC5HZimeUB5KkB6vKxWhaunKz2/hNO26CrN2Y1zkPdEPcy4YaD73BNblSL

VywV87fIqKXadpAR1ESIxYiUzyK0CatJpIEbcYtKuUcWQ1lpvn382SGYtnSTjf+mwo

zQA1PQsgo4yJr8o0qNV2KyheGErYV/Samb4z2k3e5TsSBu+fsDVHNTEoPhRV/sn9aN

2DBv+4tC5GeDw==

X-MSFBL: fhH0F7QIWB8j5+dy6gCsnqngGOs32SZvXX0SXEeVBRc=|eyJnIjoiZGVmYXVsdF9

jNGUyYzBhNy1kNmEyLTQ5NmQtYjY2Ni0xNjEzZDc0YjUzMDUiLCJyIjoicW94dWJ

la0BvdXRsb29rLmNvbSIsImIiOiJhd3NfbG9naXRlY2hfcHJvZDFfZGVmYXVsdF9

tb21lbnR1bTEyX210YTAwNF8xNzIuODIuMjM5LjEwIiwicmNwdF9tZXRhIjp7ICJ

pbiI6ICJsb2dpdGVjX21rdF9wcm9kMSIsICJyIjogInFveHViZWtAb3V0bG9vay5

jb20iLCAibSI6ICIxMDA4MzA4OTA4IiwgImQiOiAiNDM2NDI2MTMzIiwgImkiOiA

iOTcwRkFBNjM1N0Y1MzNCQjBBNDk1Q0M4QEFkb2JlT3JnIiB9fQ==

Received: from aws1-mta-relay7.sailthru.cloud (10.55.90.61) by condenast-b.sailthru.com id hia50g3791sc for ; Sat, 13 Jul 2024 09:06:56 -0500 (envelope-from )

Content-Type: multipart/alternative; boundary="----=_Part_9006_1222595691.1721141065958"

Date: [email_date]

From: "'SiriusXM Membership"'

Mime-Version: 1.0

Message-ID:

Subject: Your membership has expired!

X-Feedback-ID: 92395105:SG

X-SG-EID: u001.VRuSiAmiSZrdM+ch8/ewZCE5g8d2mJyorx7s3jZ5rqnyXmzyFkS20YO/O71zaWyuG5n01ntHHvHDQO7WWsZ0yglAgtUtWe2Nsjr8QAomYVNDlZqGB1kKSx5YK8+/GrvM//Al7+JDZ78jIiAHdRR3NaEh/9K8tO3O9LWa4PnrXdZdgdMDTPL/KhvxYw9Mv5xof9DQOiB98h5oItpgW9Pv1CHUFKExtRJQm0atm4BMaG1hLD9He43C26ZLesH5O18K

X-SG-ID: u001.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

To:

X-Entity-ID: u001.EMGTN5JSDCTZWFZM2IIG9V==

X-Spam_score: 32.3

X-Spam_score_int: 323

X-Spam_bar: ++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Please confirm your email address Click here to confirm your

email address To receive HubSpot content on marketing, sales and/or service

topics - please confirm your email address. You will be added to our email

distribution list. You can unsubscribe at any time.



Content analysis details: (32.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[172.82.239.10 listed in dnsbl.ahbl.org]

[172.82.239.10 listed in dnsbl.ahbl.org]

[172.82.239.10 listed in dnsbl.ahbl.org]

[172.82.239.10 listed in dnsbl.ahbl.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[dnsbl.ahbl.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[dnsbl.ahbl.org]

[2a01:111:f403:240a:0:0:0:948 listed in]

[dnsbl.ahbl.org]

[2a01:111:f403:240a:0:0:0:948 listed in]

[dnsbl.ahbl.org]

[2a01:111:f403:240a:0:0:0:948 listed in]

[dnsbl.ahbl.org]

[2a01:111:f403:240a:0:0:0:948 listed in]

[dnsbl.ahbl.org]

[15.204.30.220 listed in dnsbl.ahbl.org]

[15.204.30.220 listed in dnsbl.ahbl.org]

[15.204.30.220 listed in dnsbl.ahbl.org]

[15.204.30.220 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[172.82.239.10 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[172.82.239.10 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[172.82.239.10 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[172.82.239.10 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[172.82.239.10 listed in will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:610:32:cafe:0:0:5d listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:948 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:948 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:948 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:948 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:948 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:948 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:948 listed in]

[will-spam-for-food.eu.org]

[2a01:111:f403:240a:0:0:0:948 listed in]

[will-spam-for-food.eu.org]

[15.204.30.220 listed in will-spam-for-food.eu.org]

[15.204.30.220 listed in will-spam-for-food.eu.org]

[15.204.30.220 listed in will-spam-for-food.eu.org]

[15.204.30.220 listed in will-spam-for-food.eu.org]

[15.204.30.220 listed in will-spam-for-food.eu.org]

[15.204.30.220 listed in will-spam-for-food.eu.org]

[15.204.30.220 listed in will-spam-for-food.eu.org]

[15.204.30.220 listed in will-spam-for-food.eu.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[15.204.30.220 listed in bb.barracudacentral.org]

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

1.0 HK_RANDOM_FROM From username looks random

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

15 GR_DOMAIN_SAILTH1 Received contains spammer id (sailth)

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.3 LONGWORD BODY: Uses overlong words

0.6 J_CHICKENPOX_66 BODY: 6alpha-pock-6alpha

0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_HTML_TAG_BALANCE_CENTER Malformatted HTML

0.8 A_HREF_NOWHERE A link tag with empty href

3.0 HOSTED_IMG_MULTI_PUB_01 Multiple hosted images at public site

0.3 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} Your membership has expired!



------=_Part_9006_1222595691.1721141065958

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



Please confirm your email address



Click here to confirm your email address



To receive HubSpot content on marketing, sales and/or service topics -Â please confirm your email address. You will be added to our email distribution list. You can unsubscribe at any time.



Thank you for your confirmation and have fun with our content. Â



Thanks,



The HubSpot Team



HubSpot, 25 1st St., Cambridge, MA 02141, USA, 888-482-7768



HubSpot, 2 Canal Park, , Cambridge, MA 02141, USA, 888-482-7768









Unsubscribe (https://hs-53.s.hubspotemail.net/hs/manage-preferences/unsubscribe-all?languagePreference=en&d=MnbTK9GK15VW3_Vshk4hHDBPW3T2_Lm2m40KfW3T0pbm43T3CZVmWFg14N_KfmN5fr_5C25rVhW8xS7DT8t0gJQVWmbwB8c2k7nMXk_7QbvZTwVMrv2h5s79sCW1P-vmr68hV1J32Kw2&v=3 )



Manage preferences (https://hs-53.s.hubspotemail.net/hs/manage-preferences/unsubscribe?languagePreference=en&d=MnbTK9GK15VW3_Vshk4hHDBPW3T2_Lm2m40KfW3T0pbm43T3CZVmWFg14N_KfmN5fr_5C25rVhW8xS7DT8t0gJQVWmbwB8c2k7nMXk_7QbvZTwVMrv2h5s79sCW1P-vmr68hV1J32Kw2&v=3 )

------=_Part_9006_1222595691.1721141065958

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable





Bitte bestätigen Sie Ihre E-Mail-Adresse there | Confirm your e-mail address there

































doctor,Extend your membership for free











Desperation spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 30 Jul 2024 14:59:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYtvp-000000009Ac-1el7

for dave@doctor.nl2k.ab.ca;

Tue, 30 Jul 2024 14:58:53 -0600

Resent-From: The Doctor

Resent-Date: Tue, 30 Jul 2024 14:58:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pg1-f194.google.com ([209.85.215.194]:61793)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYr91-000000004SC-29rh

for doctor@doctor.nl2k.ab.ca;

Tue, 30 Jul 2024 12:00:23 -0600

Received: by mail-pg1-f194.google.com with SMTP id 41be03b00d2f7-7ab09739287so2854179a12.3

for ; Tue, 30 Jul 2024 10:58:18 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1722362292; x=1722967092; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=yU7C8WYXyTxy02mbKsP3d1qBB82G2OeABupr4Xg7qWA=;

b=iooDzI1lQGdyB9y5tn9NsUg/elZyyR/M+ysHprHIB43gJC2cCLvFm2+uY4H2fAtYFs

MLr98feru2BBhwv0p5t//tQBu5/5mcwJ6piF+zDd6yPedN56cKXrBffTW4MxPOhHISUi

1PWrQnUYhWa5yiKLZaV/XWnqdL4asO7iYkHfmTPGU3ZhVh5RKeSfR6ozuww2y2QVbUQb

Y737lAzWEAQC0ibdNVq8mR5/LQeqtg1tswSLHPOx5nwAXMssENYFw9KpV4p5H6PbPXTu

xqphO5XYVLKUQBxpjeufSmOJIMETuuijQR4I8dkOdrdxxFt9C1eN4SsmzUzSk1NLYUcO

pRxA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1722362292; x=1722967092;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=yU7C8WYXyTxy02mbKsP3d1qBB82G2OeABupr4Xg7qWA=;

b=LxtiOQtZ0AEDpjeX2n5rhFsJKYJMwi7beeqa2wtRfLamanINBQTRtBVYv/eOm/afbt

SnJNXnW3jBM/pLBZpe0ZOXiilRiLSFWAfC55pH7QcPK8QM7r4e5WWgB2HL0qnjuP4M5A

ZukcqfhvgSpuhPUjLYZfI0nwZgthtbFAQPaNOtW2ZF0CiZZV0LQ3TBZieIjxVJWvH8Jy

VlhgJVJd+SiNUXeFXzCPyEv5B4c3sJ6L3r76Q4REVZZfLhyFKdf/AqewEHUacNq2IGja

XfWYppgpdpDiv6+PZjke+UwzgbJzl8yA2rtRQfLOYnTb6xqeHSsAaGsb8EYYrCgulQ8V

Lvcw==

X-Forwarded-Encrypted: i=1; AJvYcCU/0vixm6DCxPi/kIylDFtsV8Yu1ULIjxJxBBhldC49zXl259o8JUU6h+nzyF8GARYMUqrpE1YgfZeSOhQaIKkVn1toriKTN/8=

X-Gm-Message-State: AOJu0Yz5YFduBLveM7BVJbAbWsKjo7ogOkugsBc+/hhmLfCyh5zJ7heL

u2ZyyrJMHVnvf9LexR27m1N2cx0ac+xY8ngT6gef2xe/e3KGP2OXgjbVUwE9InrNuI/eHK7CRdZ

7SU0/Xeg5k92nOyI4l1ATb+YoxTU=

X-Google-Smtp-Source: AGHT+IFf7HGXOIgSGs/lYfmRaexQPYbCPyebzvlglmqGXlvb9CcVGOA9TTWRANk+MxmL6+/ZmxASlD6Ul/V+swkAyys=

X-Received: by 2002:a17:90a:5601:b0:2c9:57a4:a8c4 with SMTP id

98e67ed59e1d1-2cf7e730999mr9790783a91.42.1722362292145; Tue, 30 Jul 2024

10:58:12 -0700 (PDT)

MIME-Version: 1.0

From: Stella Michael Esq

Date: Tue, 30 Jul 2024 10:57:42 -0700

Message-ID:

Subject:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000009919b8061e7ab864"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 9.1

X-Spam_score_int: 91

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Greetings. Did you receive my first message? Warm Regards.

Stella Michael Esq. --



Content analysis details: (9.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.215.194 listed in dnsbl.ahbl.org]

[209.85.215.194 listed in dnsbl.ahbl.org]

[209.85.215.194 listed in dnsbl.ahbl.org]

[209.85.215.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.215.194 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.215.194 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.215.194 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.215.194 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.215.194 listed in will-spam-for-food.eu.org]

[209.85.215.194 listed in will-spam-for-food.eu.org]

[209.85.215.194 listed in will-spam-for-food.eu.org]

[209.85.215.194 listed in will-spam-for-food.eu.org]

[209.85.215.194 listed in will-spam-for-food.eu.org]

[209.85.215.194 listed in will-spam-for-food.eu.org]

[209.85.215.194 listed in will-spam-for-food.eu.org]

[209.85.215.194 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.215.194 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.215.194 listed in wl.mailspike.net]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[209.85.215.194 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.215.194 listed in bl.score.senderscore.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[stellamichael7009(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[peterjamea125(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?}



--0000000000009919b8061e7ab864

Content-Type: text/plain; charset="UTF-8"



--

Greetings.

Did you receive my first message?



Warm Regards.

Stella Michael Esq.



--0000000000009919b8061e7ab864

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable






ature_prefix">--


-smartmail=3D"gmail_signature">

">

34,34)">

rif;font-size:large">Greetings.


=3D"ltr">

v dir=3D"ltr">

=3D"ltr">

height:224px">

mily:verdana,sans-serif;font-size:large">Did you receive my first message?<=

/span>

=3D"ltr">

verdana,sans-serif;font-size:large">

nt-family:verdana,sans-serif;font-size:large">Warm Regards.

v>Stella Mic=

hael Esq.

4">


v>
<=

/div>




--0000000000009919b8061e7ab864--

NetFlix Phish from Lansing Michigan

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 30 Jul 2024 14:59:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYtv0-0000000090n-0yes

for dave@doctor.nl2k.ab.ca;

Tue, 30 Jul 2024 14:58:02 -0600

Resent-From: The Doctor

Resent-Date: Tue, 30 Jul 2024 14:58:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cloudhost-10356436.uk-south-2.nxcli.net ([87.76.28.82]:25922)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1sYrqU-00000000CFE-2f9y

for sales@nk.ca;

Tue, 30 Jul 2024 12:45:19 -0600

Received: (qmail 13453 invoked by uid 10037); 30 Jul 2024 17:15:24 +0100

Date: Tue, 30 Jul 2024 16:11:05 +0000

To: sales@nk.ca

From: Netflix Support Team

Reply-To: notifications@netflix-support.com

Subject: Important Notice Regarding Your Netflix Account

Message-ID:

List-Unsubscribe: mailto:bounce307-gNCvxbsqk9PXi7o@netflix.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1cf7f266b6d9ac81ee52024d83c7a5f06"

Content-Transfer-Encoding: 8bit

X-Spam_score: 19.1

X-Spam_score_int: 191

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Account Notification body { font-family: 'Arial', sans-serif;

background-color: #fff; margin: 0; padding: 20px; color: #333; } .container

{ background-color: #f8f8f8; border: 1px solid #e0e0e0; padding: 20px; max-width:

[...]



Content analysis details: (19.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[87.76.28.82 listed in dnsbl.ahbl.org]

[87.76.28.82 listed in dnsbl.ahbl.org]

[87.76.28.82 listed in dnsbl.ahbl.org]

[87.76.28.82 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[87.76.28.82 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[87.76.28.82 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[87.76.28.82 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[87.76.28.82 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[87.76.28.82 listed in will-spam-for-food.eu.org]

[87.76.28.82 listed in will-spam-for-food.eu.org]

[87.76.28.82 listed in will-spam-for-food.eu.org]

[87.76.28.82 listed in will-spam-for-food.eu.org]

[87.76.28.82 listed in will-spam-for-food.eu.org]

[87.76.28.82 listed in will-spam-for-food.eu.org]

[87.76.28.82 listed in will-spam-for-food.eu.org]

[87.76.28.82 listed in will-spam-for-food.eu.org]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[87.76.28.82 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[87.76.28.82 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[87.76.28.82 listed in wl.mailspike.net]

1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)

[87.76.28.82 listed in ix.dnsbl.manitu.net]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

2.0 US_8BIT US-ASCII isn't an eight bit charset

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

0.9 URI_PHISH Phishing using web form

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

Subject: {SPAM?} Important Notice Regarding Your Netflix Account



This is a multi-part message in MIME format.



--1cf7f266b6d9ac81ee52024d83c7a5f06

Content-Type: text/plain; charset=us-ascii













Account Notification



body {

font-family: 'Arial', sans-serif;

background-color: #fff;

margin: 0;

padding: 20px;

color: #333;

}

.container {

background-color: #f8f8f8;

border: 1px solid #e0e0e0;

padding: 20px;

max-width: 600px;

margin: 20px auto;

box-shadow: 0 2px 4px rgba(0,0,0,0.1);

}

h1 {

color: #E50914;

}

p {

font-size: 16px;

line-height: 1.5;

}

a {

display: block;

width: max-content;

background-color: #E50914;

color: white;

padding: 10px 20px;

text-align: center;

text-decoration: none;

margin-top: 20px;

border-radius: 4px;

}

.footer {

font-size: 12px;

text-align: center;

color: #777;

margin-top: 20px;

}

.logo {

text-align: center;

margin-bottom: 20px;

}

.logo img {

width: 50px; / Adjust the size as needed /

}















Important Account Notice

Dear Subscriber,

We've noticed that your latest subscription payment has not been received. To continue enjoying your service without interruption, please update your payment details promptly.

If we do not receive payment by the due date, your account will be temporarily suspended.

Update Payment Details

If you have any questions or need assistance, please contact our customer support.



Thank you for choosing our service,



The Support Team











--1cf7f266b6d9ac81ee52024d83c7a5f06

Content-Type: text/html; charset=us-ascii













Account Notification











Important Account Notice



Dear Subscriber,



We've noticed that your latest subscription payment has not been received. To continue enjoying your service without interruption, please update your payment details promptly.



If we do not receive payment by the due date, your account will be temporarily suspended.



Update Payment Details

If you have any questions or need assistance, please contact our customer support.

















--1cf7f266b6d9ac81ee52024d83c7a5f06--