Web / SEO / App spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 18 Jul 2025 11:16:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ucogX-00000000Fx3-2ETK

for dave@doctor.nl2k.ab.ca;

Fri, 18 Jul 2025 11:15:49 -0600

Resent-From: The Doctor

Resent-Date: Fri, 18 Jul 2025 11:15:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazolkn19012062.outbound.protection.outlook.com ([52.103.66.62]:38252 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ucoEb-00000000Ce9-30mk

for doctor@netknow.ca;

Fri, 18 Jul 2025 10:47:13 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=yVhDEx2KdwkPylVQlzejTZWb5avwfxD7qux34jOZftt5uTFLaHGPZlnrHmKik7gp4W/hhqm8AMMujHPPNID0rsq1gMGpaSxX4shi0e9QPcx+8dhUYRZGPyK1myVjA5y16W97z764c1Cii67poLLH9T+tvV39vqVXehO5i5byodalDAjHmgw6YlMpRFQms5LAG/5RZs4DgmIrSRVN2R/fscqLORdv2ZlIiNfSWOO3KLM6Nyq7Fjkz24tAzQ7U1hZTy6uup9y4b6XT/6i1/lWdj3J5IX9JSR0IPdlMj7AjYyNsbENMNYAOc0S+BbbUWL2slIsDwcqa7EudsYIw65SXkA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=Wl1DsFwimsBDVtwb0HE/OGxSQM8BFQPVPKCC7oGCJSE=;

b=gfi8hP25xvIWyPtDjid5HTPpJjZssem6xww/VXlbufgnKv+NF+xdIpTRw5i3X1piiO6W+QyClNScXCXWTqvvLFuRmCG0r6V0pqBMjc9cMIDS32tpv8P3hNiquVIdBxsNEG7qtb33JYWzKKYkxSP3oY4bwd/F1imCmXK9D7PS1yx1MjytapZ/X5A257uNcZoavSKHOzefAGaOxgMJzkHWyw9cmnvBk8myYAxqrc0V06dYgZCi50iQZmAPpYxyLpGP7CuR84wTIT63wRxFS+jV/h28HNjN6V5LntZN6AbF4wZBtxDhVF7/CNMOV81Mz100/3XG518iyVXNEfMcKYbm1g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=Wl1DsFwimsBDVtwb0HE/OGxSQM8BFQPVPKCC7oGCJSE=;

b=d6/ilheSkMJV47Rv1Ugg29iP44SFeFJWEK+GULY5hGLvl9rji9g/K1nzJe1OuDCPLc+KkKuTNz+8iHFUnSM8hsDgAksMwl4QykGPNsVBQvtcR893t2+cpX/NDs/hy/z83mV5Jhwmec7t+umE5VRnHTYCCoGi+upROkcXRKMiadWnw4P3lFiZquU+oUam37dr4k6y0C/B/BIvwmPeDO1yGjKH+OcpFFbQixPKi90dIhYV0yf82QeydeYyY0uTiQX9C5ZkOvMZMGVJwib2C0F2arUZ5X1JrNo74HT/n+IIdozehzszI7F1/g/0IGhg5WAVUMfZ7FXUGxnwCig4suPuNQ==

Received: from SG2PR01MB4148.apcprd01.prod.exchangelabs.com

(2603:1096:4:1c7::5) by SEYPR01MB5551.apcprd01.prod.exchangelabs.com

(2603:1096:101:122::10) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8943.25; Fri, 18 Jul

2025 16:44:22 +0000

Received: from SG2PR01MB4148.apcprd01.prod.exchangelabs.com

([fe80::71e4:63dc:18e7:913e]) by SG2PR01MB4148.apcprd01.prod.exchangelabs.com

([fe80::71e4:63dc:18e7:913e%5]) with mapi id 15.20.8943.024; Fri, 18 Jul 2025

16:44:22 +0000

From: Mical James

To: Mical James

Subject: Re: Cost

Thread-Topic: Cost

Thread-Index: AQHb+AKq7AYORw7Eu0y/0320//pdyA==

Date: Fri, 18 Jul 2025 16:44:21 +0000

Message-ID:



Accept-Language: en-IN, en-US

Content-Language: en-IN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SG2PR01MB4148:EE_|SEYPR01MB5551:EE_

x-ms-office365-filtering-correlation-id: d59e0838-ef37-46a2-209f-08ddc61a589f

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799012|15030799006|461199028|56899033|40105399003|39105399003|3412199025|39145399003|41105399003|440099028|12091999003|102099032|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?bgR8r92d7h6zs8sJGAy4S55fjjCBu51rvoz2tuX4ZpDvCbHibsphhxAU?=

=?Windows-1252?Q?9fYhmxT7Cj0NYja+94/e69sw+CTmQbqbWYh/pnCSFAbWFTAkFoh7wm+H?=

=?Windows-1252?Q?EnmiDe1YEOJmZwGccc7i7jAYOGPO4Obql5xEjQW44qmvDHpASzqh3Hul?=

=?Windows-1252?Q?xTPvWRK+tCgvf7/aOR8qZYPLfwn2/Oq8h7XGNocoqx6MTJSpdNrFwTfj?=

=?Windows-1252?Q?+er+1DfIkDIB6aMlc9r14zJbTQVAwe0HxXD8xsHS6Rb+s0L3a6d5qLz9?=

=?Windows-1252?Q?3WM+OhWhT9AHpN4pFgOiYA8k+pVUo+4C7kyIssW1pkGEe+dMT429589+?=

=?Windows-1252?Q?M+hqjxOBWGse44oZK5pEvNk39vuXMC7rhwQVDJYXjHrrBhouqqFaA5iI?=

=?Windows-1252?Q?ql2us44UjCttdL69IbOF3oO3jLbpcKO6CnUV/8u8Pb4+5+z3L+/QrCOj?=

=?Windows-1252?Q?A312WPRQBfQoJbKFf4bIxU0gmKY66a1yaRZpPaepy0BCZ28MLU6O879T?=

=?Windows-1252?Q?QPu4c9nlztHGGAetprLQotRMzRCwcB8CQ9ysarPtQ6CvljTPpo2p+5kY?=

=?Windows-1252?Q?/M+ysw9CVoJBAZY0SzQxyMkUT54XmYA7qfg922P1tiwEv9v2o8LrcTdn?=

=?Windows-1252?Q?sU6+cYQXFQZrkEA+zN1loTY7aisfudprqU/tmxb2ihQrB8ZGol3q1aKF?=

=?Windows-1252?Q?2vlkfDTB18NzN/v0d6Jzy6H3ixLudMoNPAoXSLVgXQHpT3sLFLURCrMA?=

=?Windows-1252?Q?UPyYRvt672P3V1TQ2C8qrX8oEliYyX6Vgz9gLLc6F05S5vBuy2QMLlHj?=

=?Windows-1252?Q?4hqqtrk8BW4bJayOG3Jo/JG6NbhnZq7CzCA8dUnVygh21vKE2VU9LUCH?=

=?Windows-1252?Q?nNIGglnSIvD+e9JirQRX81sa7Q0qoB3x210K3WtV4b0qoLwo9GQdTPEz?=

=?Windows-1252?Q?1lZFufZK04WIYBmaipctbcwX9ZfHhpuEqKPclOjrs/hqUl/jVQOqsjry?=

=?Windows-1252?Q?ktEIx0jKZY5Cv3wrV//QlOnOXPU3PMePdrEsgbXoo9kUpdcN/YCKXocg?=

=?Windows-1252?Q?gKPeQF5baKUgeFVi4n2K+U4jRtQDXnqNX508cPPjctMEs82LCisTeKNM?=

=?Windows-1252?Q?5Nh+7Ho8Xif6/Hi90DpaXJ+DWOUK272n9EEWnzEYKa3ii8C6QG1QAWTx?=

=?Windows-1252?Q?QR/NUf1cyMeLXGqbrs/Wdu2c/+p6QDdM9eBCqyiKn2Qi3xJATw8q7HuX?=

=?Windows-1252?Q?rfNi45XpuVCHpfipDV3Lvn2+cNxPL4FvQUhrt4yPve31Xk73h52ZUmJZ?=

=?Windows-1252?Q?emDZfA=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?OMRcOl/Di9FbmtH1DHpqODJkwvcqyaaspmSQdUxbtsnerALEZFvzafKt?=

=?Windows-1252?Q?tf0B95wWluctP7sQoFPbA35U59BAV41UYcZGIFHPkWX727+rVLqTXjLl?=

=?Windows-1252?Q?NJwvFG0dHXBESLnQKaAwJUBf7Ke2TWFJoC9dAeBPIxGaC59ld/S/XxaP?=

=?Windows-1252?Q?mxA7v3MbJeGgcDNJ1Oi62W0XPe4k5+9jhfojwIORMLRctqLkMifEEXCk?=

=?Windows-1252?Q?0ju4m+ZyPd2jIIGQJz9ELuFj7u9mSLFQpUarv1ivA1oqdXWSJqpwnGAm?=

=?Windows-1252?Q?yH1Mjaoy87GDyYz9tTwaCZWJmHHKN1HfMTRv/+l1AbZ5ritwccAMGZJ7?=

=?Windows-1252?Q?esJw2EAhbaN5TBsyj4oGZZWvhHmn6n8g2No41gaePxpzK4Ydld+d7IHx?=

=?Windows-1252?Q?YodwpDL/7aiEo3Vv/u63tx4VJa/wTr2ggovOxO/kmUS4PBrZ4tIOP6A5?=

=?Windows-1252?Q?jitC55ao2Nn4DZoutDNLC/9Mkcow4eMqMQT2E8p/HhRpF4ojfU8aVxO/?=

=?Windows-1252?Q?/rF6vSva+h9z+PIxUB9SzaoBZeE4iP6QyjOjTpeHGPdpa2UenWs97dUt?=

=?Windows-1252?Q?oHlKhoYxzWKm7fJw+qFDkNAnbq8wzlUKIh447gUQ1zgDXywK3abiKtof?=

=?Windows-1252?Q?MAQZ9RQyEPzP0FLgqlafsM1RK62ZUBdeVABW/V/TZrsxqnqhrAwi7xMS?=

=?Windows-1252?Q?so6iD+1qJsRqYwI5FtyfVUdIVfBbIZi/mkjzzbrLn4N0X0xkrvjCqW9Q?=

=?Windows-1252?Q?TpKbDvymCroecxSLePXteN7D9Lu3MWdOpBeATjZvS0xAJNIFOUJ19bU3?=

=?Windows-1252?Q?nt0jqCFLew82xZ5MWXamEomdA/Pld/cyefD2bvdzNTyNgsQzaIw9JVpl?=

=?Windows-1252?Q?//uF3sYArCzJVrbVW3b3dXEv60pi6LeUaVlygaLKtdnuf3q/5zX8dGK5?=

=?Windows-1252?Q?yGSyap932v+6DFRpd3JKsrNS2RJjYwZlxJ2OjNghDWts5DZpyiecS1ey?=

=?Windows-1252?Q?Y6pSJATDR2kx2/V9Z3tHQ5JEQRsOeCUwKySn6Ig4O/ya96nS8A1nbn6l?=

=?Windows-1252?Q?zFmYATXnE1uqgjcZaV/xpdAKQH1kgoqrH5uEhWVENOS2nxHrewUi+k6i?=

=?Windows-1252?Q?3oiZsErwJkybNU5wI0JbrnkWPfqy9qt+0Oxp0ehQ5UPQKzGXlJHAkssY?=

=?Windows-1252?Q?k7wj2ljiRMVDWB86iZjsYa8zEK4Hvn2YqgmErN00sl6ZmjzslKCtDc8g?=

=?Windows-1252?Q?E/iD8eu3EFYCMTJo+ez32JhNY39pwptczeecUpcX9ZWTatd2baYdUASg?=

=?Windows-1252?Q?UUekPp3wUasySIxRSZxNnjB7ML499qeoDvcf0EBTjaEm7DZLaT//4SF7?=

=?Windows-1252?Q?nnjVKNbjloulxhd8Ng9BOe26Yew0WGxFNLQ=3D?=

Content-Type: multipart/alternative;

boundary="_000_SG2PR01MB41481999B6DB1C1AFDF55CD9F450ASG2PR01MB4148apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SG2PR01MB4148.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: d59e0838-ef37-46a2-209f-08ddc61a589f

X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Jul 2025 16:44:21.4596

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEYPR01MB5551



--_000_SG2PR01MB41481999B6DB1C1AFDF55CD9F450ASG2PR01MB4148apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi



Your website looks excellent, but it=92s not easily discoverable through Go=

ogle search.



We offer free SEO scans that reveal how to fix this.



Reply =93Yes=94 and we=92ll send it right over.



Warm wishes,



--_000_SG2PR01MB41481999B6DB1C1AFDF55CD9F450ASG2PR01MB4148apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Hi



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Your website looks excellent, but it=92s not easily discoverable through Go=

ogle search.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

We offer free SEO scans that reveal how to fix this.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Reply =93Yes=94 and we=92ll send it right over.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Warm wishes,








--_000_SG2PR01MB41481999B6DB1C1AFDF55CD9F450ASG2PR01MB4148apcp_--

Web / SEO / App spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 18 Jul 2025 10:47:00 -0600

Received: from mail-koreacentralazolkn19013081.outbound.protection.outlook.com ([52.103.74.81]:45027 helo=SEYPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ucoDs-00000000CZP-0Lh1

for dave@doctor.nl2k.ab.ca;

Fri, 18 Jul 2025 10:46:22 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=RskjJVBUr8YClthcNCOEpB5T/F26EOz4I5ABIvwDtoK82GQAGxzrRfN/9zj9hhc22EQeNkhR4oVbK7EOe84beLw1yLRUx3B2PbxGToULUWSQ4KwIGHA+jXqgU66vlua8+OZ6yHdBQ3nBd3pblbLuoqShTsXb3NDcgRtZqE1CdWs94I3Ze75HGvVTDW84qv2Gl90vFvv9vKVf4WJ5nnePi0OYnpIFYrvazQnWivA93mBt5YCcZrr1bi/b1fP30Qhw1Ye9deZ79OZ8xBq29SsctwSrU3ReYNkcIwF77pCoGCzOJGeXZmvTPn0okmDA8+5aIFonypdKPXPJXMF7smWEQg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=OzUGbhct8A0eR8t39NJwDzdmHS7J4cwtTEuW9eWByno=;

b=IEYzloyEh1TPpcWwXzIqrn8kBdJhCDgh6oC8INVxrqLxxJ68Zxmn/glQWFuqGTnKDjed4XPs0B/iRBQ1PXTF1/QTdrIMMiDdz1GDQk1EDOtDr8L6cokzGai4RqRawxe1vq7p1KatBpOTXbpjScVcMbTIODuAaavY56FNvrvKnVGOhoq1QTwYA11L8ZR7L3gcsGrKhFA80QBSZzjrya4QEg0kMhITb4HmTMr/l1CIncJqGuwowH8lxTFx6NmxZQMsIRoG7aov4Z+xMPQpnEs3XhpJ9r8PbQEHaavkm9wJCblO+Uf9aR3xtO6hEcYudI2Tg8isfqBG3Df+gKesLbpXLA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=OzUGbhct8A0eR8t39NJwDzdmHS7J4cwtTEuW9eWByno=;

b=ZJgsuKs0WlbAdHtSORxKzw9AWYDMgvBCh5kBTRJ6aR1Z+vJaIOAGl1xUcUArH3DYmHGoH/KbvQBk3jufQZw/Gd/8Orr+jtdr+dcZS/p54/gjKxAhpDqONMq2kd7ePVPhWHUnk8NqWve17UhDkOXnlsw6TGZNXL1/rd5fCLGsbAzAuWG0t5AKBCxwLN0g4XhznqED4hnEOzQLcv7uv+4qtj7BFLXnjUjRmoavggDWlWNQTlgrR8ewIxlemqYq/pV5WAxpp3ce4R/yGx85lBVh11WktUO4HRnyWw21qK0/+lfmJWFr8tGRNbNEnJ4KK9KMHoKpNKevesay2qjn5AipYQ==

Received: from SG2PR01MB4148.apcprd01.prod.exchangelabs.com

(2603:1096:4:1c7::5) by SEYPR01MB5551.apcprd01.prod.exchangelabs.com

(2603:1096:101:122::10) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8943.25; Fri, 18 Jul

2025 16:43:55 +0000

Received: from SG2PR01MB4148.apcprd01.prod.exchangelabs.com

([fe80::71e4:63dc:18e7:913e]) by SG2PR01MB4148.apcprd01.prod.exchangelabs.com

([fe80::71e4:63dc:18e7:913e%5]) with mapi id 15.20.8943.024; Fri, 18 Jul 2025

16:43:54 +0000

From: Mical James

To: Mical James

Subject: Re: Cost

Thread-Topic: Cost

Thread-Index: AQHb+AKsTSwFPunNgUSt9xPQKv6dXg==

Date: Fri, 18 Jul 2025 16:43:54 +0000

Message-ID:



Accept-Language: en-IN, en-US

Content-Language: en-IN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SG2PR01MB4148:EE_|SEYPR01MB5551:EE_

x-ms-office365-filtering-correlation-id: 9d77aea3-5935-4f81-579d-08ddc61a48ad

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799012|15030799006|461199028|56899033|40105399003|39105399003|3412199025|51015399003|440099028|12091999003|102099032|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?s0FDl4oA8wbxJNkFGY431K8Re3w7XJZato/+10lyivW9fDkEif8sQpBB?=

=?Windows-1252?Q?p97y4JcqhgFDZfz2TnSXor87WXAQwe7yKhQkxtG+KyZaqZs4upS/3/d/?=

=?Windows-1252?Q?ojfKXIFLD+baLN/Ncj8x1D72CkWr/19VbkW5ALxI4mGBflG8ZE+Kfvan?=

=?Windows-1252?Q?VEf4TlqeHJF/0QeERLgkbOlPS/MQp4fghiB4RLAGIff/oJ3hSyfkGPD9?=

=?Windows-1252?Q?TwknqRQfQip83NM/nV1ZcXKLoLikSpdH+48iGUVbvivP3l9ufB15xQBA?=

=?Windows-1252?Q?ve2kscKBQuxnRFwXGDu8keAs4mxKl/bR9cobxYLDaDALEFTxEcZvVkai?=

=?Windows-1252?Q?i+4dk39vVxWv0Bz+KFtrnEopGld2K/MFAMYlYM0w5+w6nafGRkORr7ri?=

=?Windows-1252?Q?5rQypBkSCOBCo8Y0QAmtz6AUb89drWUGdKc57kAC5x66PfUEzLMfabaA?=

=?Windows-1252?Q?VVWnoNhgCyFEC3yZvR2DE+8zQT9WoIlkCN2uby4Z+8eIv7hEHYExpp9E?=

=?Windows-1252?Q?Hs6Lj4DoTkzYkdtdjqfMx5z61QCN4MPVdN5FZ7jKpwgi/0k1TdheIzTh?=

=?Windows-1252?Q?qvnlRzKnjhRx1JqKJL56rANoMPq4+o1nf1Yh9ODa0JUV7iHeqUuLRZn2?=

=?Windows-1252?Q?ZkHcdaEylJGD8Kgty2InaEq/GtsLS5BGhFAkXA0SCJszIwb7GLAIbZjK?=

=?Windows-1252?Q?TzATv6VR7hHV9K5IChub2lyNh65t0QTsXIlIXDGblfRqki43gWfj4El3?=

=?Windows-1252?Q?EJQ0NEBGUkIpFB7mtUySvm2ULUG9bs1tgI/y5p4yY7bhy3IB0ufJ2Owp?=

=?Windows-1252?Q?MZ5VKHnjEVIJRpvfrIhlAsIn/YMEmQxICDxm0iH51S7ekA9FRmbc7BVh?=

=?Windows-1252?Q?4Vfz2/WmCQQBINlehnQ9h1iaPhLx6KTqV/nk4Z8KOzJkcjI+7BAgEa9H?=

=?Windows-1252?Q?HWrZuWscQPIBz9VXS5vz37951jR8q230lYZoRxj5XnuCNLMbw8KwYNpc?=

=?Windows-1252?Q?xLHhBlJo2qHG4MEmCgzIZI5PW6UhG82TiC7zsYO6PRIWrCdXpO90gHKJ?=

=?Windows-1252?Q?mWm7qGEygH1Rb5olHGaxwRFfwwyv87WqzzJn1tIef/B0yAMSdhUbWEc+?=

=?Windows-1252?Q?B8vlUdurak6YoM5J7Hb7V70Qd1aHaXW+huwXVsKDQu2a0KqVaI23NlpY?=

=?Windows-1252?Q?zfGDhtUZT2dIiE37L0Rhg1aiGe8JN99CjIR6+Z7IVl3jSAlBu+v8p6UW?=

=?Windows-1252?Q?uCxN61iqBm0fHuKyLpE=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?kIDJuzy9ijA6T8z1AgWHQLwiFlVB1A0NPwdEoU9zugOQJhpXm1gL0q/O?=

=?Windows-1252?Q?ra8H49a/HMG0pBDZQZ/IFIw4dTqqIxFV3xOUpxt0MCVHXOtn2u3/MBDP?=

=?Windows-1252?Q?oI1WfNDeGzR5E/Unjjx9f8Wfhe0cOdlfm/y2WnKQcYXcZZE1hTQL7HWJ?=

=?Windows-1252?Q?yIkG+8YshhP0ECxqtl0o3Lz2uFqB2XkVs0YOZ/DNnAhZj8wIhDdrH9xT?=

=?Windows-1252?Q?FMVxp44irtRepHHYS9i34r6HCMPTcxL4xh+2wAKmlHidZaouEQhfT8Nb?=

=?Windows-1252?Q?XZLfWx4EItnP6GEao4epVxq9Ewb39vCZ4rC2Ojz1gQJZ6PXLxrvzg/7P?=

=?Windows-1252?Q?WQs1cGaRFn4OED1JNJgp4cURjOOqmT4/LjJ6bthLESKefQjLQ4/7IBxt?=

=?Windows-1252?Q?Y2aeRD9aOlXXhFSSCyBYvF2uLxocJwp5J6iAdqsc03PSAVNDZm0Qgj/7?=

=?Windows-1252?Q?u4x8hpgfIrzX48hA4759XKTSWyCAx3hvZobmNI3lvlT/iDLtVNYhgKSl?=

=?Windows-1252?Q?8kj5J2/tCb34JTgpWB9flIaGPZih9GitwkwKwcem4A6wqfFij0lPO+T5?=

=?Windows-1252?Q?d6XvFfQeAH8ik2KLBomlyetkeRSNOEX/sZ182r0SZOPxg1VbbokllRNg?=

=?Windows-1252?Q?ncX3vvaNSioW29DGY2VSMzgJJXRX89lGcquDGGZJNzFyhOVu99TO+dd4?=

=?Windows-1252?Q?gPVJgxy8Svl5RrjlO9wY7JZSM7ZKLGZxNLjpYeFGzajRrgEUDNcyy9jv?=

=?Windows-1252?Q?1UX/sK1Gj4pNlqXj55P4zzKZZ2RiqeDud+USkbgjRZFmKMtiEv2CHAQM?=

=?Windows-1252?Q?ptM+HRPQtFen/5HONk3PBeZ6xzIOvvWquUQYdsxjpyFebS9uiMdHA8jQ?=

=?Windows-1252?Q?mVjJAKZFI89Czzj27zHrBsPDIuDbWdVLtOGmn6r2f6d2mIitT2HcvVEJ?=

=?Windows-1252?Q?+dAYCMetSx4+nB5LTmGreyQXnRq+MahqAoHX9oUZj93NI210pGKzJNDr?=

=?Windows-1252?Q?KAKcK8L7DEBMW283K08/C88RJ4t2LHK8Sum4p/7BwvFwqYREuMH0CPCQ?=

=?Windows-1252?Q?TBlpTl8D3fB67Wvf00Py7SEK56lmpyQGSgAc44g5hQhlieTfKtGKhlFQ?=

=?Windows-1252?Q?p5qoMgwG/i9Eq5Bn1kitFmHmA46QVnFDRrAaoNxKEtEAdy50icYEH9ke?=

=?Windows-1252?Q?M1Azk0oVygsFTVYdB/LEAYV/pSx2vLkjG2NCObR7ot0Ug6A05WOgqr1M?=

=?Windows-1252?Q?hzzfk7Zprm+eeGzmkyjoYF/f+IrEBnIMrQXI0SsQRoRLSXPBg7zP1EyR?=

=?Windows-1252?Q?lbySu76NfJGfK6/s32/ZTk0Qp20yEE1gzxhjuquumaQbmwiOKFf5t9/g?=

=?Windows-1252?Q?eNTM2mlq+cboxcGzO2tV9ZKvnxDBXfl+JJY=3D?=

Content-Type: multipart/alternative;

boundary="_000_SG2PR01MB4148A5B8022DDDEF9F774E65F450ASG2PR01MB4148apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SG2PR01MB4148.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 9d77aea3-5935-4f81-579d-08ddc61a48ad

X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Jul 2025 16:43:54.6939

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEYPR01MB5551



--_000_SG2PR01MB4148A5B8022DDDEF9F774E65F450ASG2PR01MB4148apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi



Your website looks excellent, but it=92s not easily discoverable through Go=

ogle search.



We offer free SEO scans that reveal how to fix this.



Reply =93Yes=94 and we=92ll send it right over.



Warm wishes,



--_000_SG2PR01MB4148A5B8022DDDEF9F774E65F450ASG2PR01MB4148apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Hi



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Your website looks excellent, but it=92s not easily discoverable through Go=

ogle search.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

We offer free SEO scans that reveal how to fix this.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Reply =93Yes=94 and we=92ll send it right over.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Warm wishes,








--_000_SG2PR01MB4148A5B8022DDDEF9F774E65F450ASG2PR01MB4148apcp_--

Web / SEO / App spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 18 Jul 2025 07:23:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ucl3A-00000000GeW-3jbR

for dave@doctor.nl2k.ab.ca;

Fri, 18 Jul 2025 07:22:56 -0600

Resent-From: The Doctor

Resent-Date: Fri, 18 Jul 2025 07:22:56 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-centralusazolkn19010005.outbound.protection.outlook.com ([52.103.13.5]:44332 helo=DM1PR04CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ucihV-000000007Op-11Sn

for doctor@doctor.nl2k.ab.ca;

Fri, 18 Jul 2025 04:53:09 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=BJ6dw33PGXI/90fefwtkFWWTKLfVCDcAu/Lh+RmWQrzFe4DkDLnAUbtWOuvFEvOUT1k27KfeYF+QdRL568zYfjIYq/dQieIoUKjvVdqbvgnRgI5LcF9zMFu/1oB56WBhF7DIP69PmX3u+kRDe3WMdlU9XZoqGrmpC9Xpxd9N9fN0v3UoLi3u0Me5rdhVsxJIEa5h9RRitB99k2wGH2NMsrvlejteQcjgIL6W61ZOicgf/DtTFwdfyTJTcJRL/hzm0/sc0X/FSMZoPleBmc28wcP6ocu5PKoTWzzuAYoLV3gwdiinazeE1TuaEdp5r1fQuYjt/xHGu8cexJdVGlK1Gg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=KTtSvWJbquLEz3jt4OrgCTaM9g3jn+kNXxefuapsMIE=;

b=gtFZdQirr92tRqz+TyLDCXOvEnEzleFB7VodxK1wAC5wRaUfK1HhWUMoUSP/d0sVBB+CNliwCoNQE4rTd6ijbULBLNb+L/hkpFgbzY+yh0aNP8P5nAgue2tHC7Syl+yZclgSdHGvq1nxekPeVQwcMDQ/xl0zWa9UZn5h0U5HviRjEN0Xao1uSaeqI2GhpU/nSc8WvxJVYEHE9MhnPR76FNDE335Sq3G0pAW1ATzAkeRbsL7M/UUiNm1H98UHGuqqvyoikbqVetu78FGXZlQRUjnVYqgkElDG4CLEVStU1B4ANhBtamRtqxwWyNGLhTcwkPqhcKP6wp9F/4UrZOUNSQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=KTtSvWJbquLEz3jt4OrgCTaM9g3jn+kNXxefuapsMIE=;

b=HVk/sCciHpBS9wCrnNq6r27g37jK2Dw33NdSgQoqAh9hBo5JQ9UCC4idqV97Ikqzu43YPjq74W7brGhpNOMT6JpnbO4tsOhoLchuzG36BydeC0Fp+xZxbbbZQnf8/m2DiI71IgU8b7e+UMsNZVfB/1NDb/kwYNAF/NFB+wUI1DvoayOlVaOnOw6Mx6w6qULzfw4x5FMZHpl/SqzHw3xNI/xoZUfsSx+HfXcZFe+fyb7YxApPAZBhNFylmZN8CJ2m/fb6blT/PYdNiUxkSExDJwwKEllq1kV41TE0cmAe0led/72PsOCMl21IXBPwN1mRBMTnfyMA6XmmCbHRG545Ig==

Received: from LV8PR05MB10550.namprd05.prod.outlook.com

(2603:10b6:408:202::22) by PH0PR05MB9702.namprd05.prod.outlook.com

(2603:10b6:510:285::15) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8943.25; Fri, 18 Jul

2025 10:30:47 +0000

Received: from LV8PR05MB10550.namprd05.prod.outlook.com

([fe80::c614:9164:d08e:62f7]) by LV8PR05MB10550.namprd05.prod.outlook.com

([fe80::c614:9164:d08e:62f7%4]) with mapi id 15.20.8901.033; Fri, 18 Jul 2025

10:30:47 +0000

From: shunil kumar

Subject: Yes Please...//

Thread-Topic: Yes Please...//

Thread-Index: AQHb9872rYNCebmxeUS99hjCcW45cw==

Date: Fri, 18 Jul 2025 10:30:47 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: LV8PR05MB10550:EE_|PH0PR05MB9702:EE_

x-ms-office365-filtering-correlation-id: 60ca6bd5-d597-498b-1a61-08ddc5e6289d

x-microsoft-antispam:

BCL:0;ARA:14566002|15030799006|15080799012|461199028|7071999006|440099028|3412199025|39105399003|39145399003|40105399003|41105399003|51005399003|102099032|26104999006;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?/WTHin7bayMq0ogkaiMzTrIL35IvoWCN4quTXeQV7ZTO+IYQ3AZuKyncu+?=

=?iso-8859-1?Q?RRNPruSPFMzyl1iSBZmqdRuDgPX04XKgFZDEFBxJlS3t9hseZgf5rh3gRO?=

=?iso-8859-1?Q?vUMRm6UTgbdIU8sTOq80GVuFdziZXdXXbBTLP3iYg/9LmoGEBjCV8yu/va?=

=?iso-8859-1?Q?tKdI3GV12j1H17TBK2wrWqEf86b+UYH2oUrqL6br23t2c47FySkrqbUDq8?=

=?iso-8859-1?Q?NVTix1fOxRoAi69aoh/D4bLGCDgtbsauNTnZRfwJBJdNw/Lb2GjtsxGwrK?=

=?iso-8859-1?Q?+lCCUA5he1VjOo60DfOdrClaugohl7/f7kTTHaGj5v8C5E2dKAYKgsmYdn?=

=?iso-8859-1?Q?z+o/LgQlgQM94MHatJ21H36pH9kJpSTWvJxa5u/ecFQnP4iPYHiV8v7Xlq?=

=?iso-8859-1?Q?cPXS8l2DuDbvgkj5yMvCR83jss6gpMkZpMTYc34lgl5T2RIAbV2DYa/ck6?=

=?iso-8859-1?Q?hz/tXATOhIPPM39rKYISMm+fTogIujSfnp1fumjBmMfb0yLKgvMjdQ7ED7?=

=?iso-8859-1?Q?Mx5COA/37ykJrDPXKQTeUBPCfvYgaeOhgV8H+OauIL1VBQRfWIW+nY8sFK?=

=?iso-8859-1?Q?6siARM6wm1WkXe5heb459YwdTRO/dLx4CMBoJkPA9psAr+Ot+AGmZAz4CU?=

=?iso-8859-1?Q?bCmf2ns5it/nLruZbYfM4swakZ4g7RnJLt87orqlNuO/1tg4Y7w1NClqE0?=

=?iso-8859-1?Q?PrpK4ZpGuHVES5Wgsm1NfzBoQiL8K/FPIteDaeMCBBA3/1yw+lrSIVnptC?=

=?iso-8859-1?Q?EZu9gFoTKMiTQlZ9QfZ5EbJ72B9J8hLs+Dcf5DvZmDqcnuWIAv9PZOTsEi?=

=?iso-8859-1?Q?O7iyckSfsdos6Zxb/XXf0LixngBWf0x6kzQQTNmvZT/Diz554RO44NH9nY?=

=?iso-8859-1?Q?olm4VazjITpEyKPlMXmZ+fNYkuJ5s14InzwbTafx91bFCt5e19BXoaTm/X?=

=?iso-8859-1?Q?h1Fu6fs4rrFlJ8QTWzuQLhI5g4XvNYVOzAVKOXXgn6UnRauTjMdmtqJ5ri?=

=?iso-8859-1?Q?/hXZckR35Ff5D8AHQ/+z+GNpqIDTAAPZQBUAVx0Uc21I6SHl0vjF7ju+f/?=

=?iso-8859-1?Q?xbEf3Tgq41nBN0mQJJGv2KQ27aWbEgsYKejUln7iLPRiQc1QFeQKxNWJS/?=

=?iso-8859-1?Q?8uFR4NCdD4LOKyvzd/zsDhS2L35zYftWl5bku55x9LpsebRN96VcAyssO2?=

=?iso-8859-1?Q?v8k6HjKJAS4M2ZaCX5dTJUAzSYhn8b7Azn1f8mU46Nug3RJKCqvdzn0SSO?=

=?iso-8859-1?Q?3iPV4lwE700fblS9NwSysT59b5PNiSIirYn+uxjAc=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?+YDnY6MD10emspvXo5KCMv47gI62a+Px9AnRF7EDzvbhbfnAIGbFWjET6Q?=

=?iso-8859-1?Q?u9vZ2mcrB2mPbbLHilOD6wMxwbf+q1z51q8NJ6uBpYyR8YdEMOER7GYyMG?=

=?iso-8859-1?Q?xXhOZ37zHi38J/RAKrMhoLCCClQ3nPt4F1ads5Ad76Op5tMNFzX+Gzqo3Y?=

=?iso-8859-1?Q?PX9K9Fn9kYhaj1aRGrYbSqGtOscvxm11MmJaBKmgvdUeMUtv/5wngUIb0P?=

=?iso-8859-1?Q?IVZCm4Mn4bTTH3qQutb/d/QuYqAq11WOlJbQKZL9IMuETRXbZ44ghw3d8j?=

=?iso-8859-1?Q?JLU1azlAMUUYmqbF+X8o5LsKySvaH6mb6CoVywQTrXAm/buR+RMiHD+0w3?=

=?iso-8859-1?Q?COoi/M4T2se+Wf4K2ord3oSBVEMXFH8dy5FhqkkVDGVeKlc8OICqxdQf56?=

=?iso-8859-1?Q?9ylN1Z3RIlCge5Jr5zOJA74pN5agpagkBDqCdVqNOgaK96bIp+1V0bmJ6m?=

=?iso-8859-1?Q?6HceoR7fAOHGaCzEzeXYgmub36hnVbB5CkPSY7OPTCjjk8LhzNtnccGdCJ?=

=?iso-8859-1?Q?h6qm0nzs0o/lbrWF47PEP51mEdKoXDsWo2Vc+kg6and41p3o3qqBGxPc/B?=

=?iso-8859-1?Q?MP/PDEYB8T53fZIUOgCXU964EceKJE3zgqQUnr1h7MqesLSpchhl7q46xc?=

=?iso-8859-1?Q?X/x9qC3hnU8opD48kF07RNLn7tdwKMkBGOQiNVCBXWpwsxRQ7AdcAU0kMN?=

=?iso-8859-1?Q?gyUjfmIdER8RWY6rO2QW0e5pAsaZk28HLovjOg8I6yYb39S47ko+9ZOAdn?=

=?iso-8859-1?Q?MhHGWQtnMC6p5nSSVu8aq/jMTLcMxHyNZCI/b7pWbg5s8Ei56bs0gb3oXk?=

=?iso-8859-1?Q?YtR439y6Ll0jfP7b0Gserb4rzdLb64TbxxBx+UgYUe8ugurXvF2hZ5y9vq?=

=?iso-8859-1?Q?WPo2IiavCqUj9tf/wE0JfpOlnLGqNAyIiXPgXokiWSgt5hVKoqoYGvehe9?=

=?iso-8859-1?Q?s0SEYyVtttNhtvpyVdhZL++sKwFk+G05XQsrbUUlIJs4oFFuZtLLzA8D+K?=

=?iso-8859-1?Q?Hca1SXxk1h99dZPUuXPfPJE7JAlKpSzsA8BYui5PdDQcGNDIV2dwG9NTJN?=

=?iso-8859-1?Q?nfhLieBuKYv1IvnTg0AdlOyDCSL48je1mLSBbTrBMixiiHo61cO4ZatNtW?=

=?iso-8859-1?Q?eYRtQQY5z4+IDAcwVMf11Ppt/L2hoaMYRfIsod3O4v7+JsTbnHnzx48Vah?=

=?iso-8859-1?Q?lEFaFl/Ngdvk7WAYyhstHq2N7pus7F6TGz4Voc50WRh78M/QZNUMOQtBu+?=

=?iso-8859-1?Q?7mW9JmroRBfOVc4UX9jS1J+zRIiP+Sr7HFK66fl+E=3D?=

Content-Type: multipart/alternative;

boundary="_000_LV8PR05MB10550A08AB34D169D85D82982DF50ALV8PR05MB10550na_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: LV8PR05MB10550.namprd05.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 60ca6bd5-d597-498b-1a61-08ddc5e6289d

X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Jul 2025 10:30:47.0590

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH0PR05MB9702

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello Sir/Madam, I was checking your website and see you have

a good design, and it looks great, but it's not ranking on Google and other

major search engines. Do you want more targeted visitors on your website?





Content analysis details: (7.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10b6:408:202:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:202:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:202:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:202:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:202:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:202:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:202:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:408:202:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[52.103.13.5 listed in will-spam-for-food.eu.org]

[52.103.13.5 listed in will-spam-for-food.eu.org]

[52.103.13.5 listed in will-spam-for-food.eu.org]

[52.103.13.5 listed in will-spam-for-food.eu.org]

[52.103.13.5 listed in will-spam-for-food.eu.org]

[52.103.13.5 listed in will-spam-for-food.eu.org]

[52.103.13.5 listed in will-spam-for-food.eu.org]

[52.103.13.5 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.13.5 listed in dnsbl.ahbl.org]

[52.103.13.5 listed in dnsbl.ahbl.org]

[52.103.13.5 listed in dnsbl.ahbl.org]

[52.103.13.5 listed in dnsbl.ahbl.org]

[2603:10b6:408:202:0:0:0:22 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:202:0:0:0:22 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:202:0:0:0:22 listed in]

[dnsbl.ahbl.org]

[2603:10b6:408:202:0:0:0:22 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.13.5 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.13.5 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.13.5 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.13.5 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.13.5 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.13.5 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[shunil788032(at)outlook.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[shunil788032(at)outlook.com]

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Yes Please...//



--_000_LV8PR05MB10550A08AB34D169D85D82982DF50ALV8PR05MB10550na_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hello Sir/Madam,



I was checking your website and see you have a good design, and it looks gr=

eat, but it's not ranking on Google and other major search engines. Do you =

want more targeted visitors on your website?



May I send you a quote, Price Packages? If interested.



Thanks & Regards,

Shunil Kumar.



--_000_LV8PR05MB10550A08AB34D169D85D82982DF50ALV8PR05MB10550na_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








, 255, 255); margin: 0in 0in 0.0001pt; font-family: Calibri, Helvetica, san=

s-serif; font-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Hello Sir/Madam,



, 255, 255); margin: 0in 0in 0.0001pt; font-family: Calibri, Helvetica, san=

s-serif; font-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

 



, 255, 255); margin: 0in 0in 0.0001pt; font-family: Calibri, Helvetica, san=

s-serif; font-size: 12pt;" class=3D"elementToProof">

I was checking your website and see yo=

u have a good design, and it looks great, but it's not ranking on Google an=

d other major search engines.


55, 0);">Do you want more targeted visitors on your website?



, 255, 255); margin: 0in 0in 0.0001pt; font-family: Calibri, Helvetica, san=

s-serif; font-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

 



, 255, 255); margin: 0in 0in 0.0001pt; font-family: Calibri, Helvetica, san=

s-serif; font-size: 12pt; color: rgb(200, 38, 19);" class=3D"elementToProof=

">

May I send you a quote, Price Packages? If interested.



, 255, 255); margin: 0in 0in 0.0001pt; font-family: Calibri, Helvetica, san=

s-serif; font-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

 



, 255, 255); margin: 0in 0in 0.0001pt; font-family: Calibri, Helvetica, san=

s-serif; font-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Thanks & Regards,



, 255, 255); margin: 0px; font-family: Calibri, Helvetica, sans-serif; font=

-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Shunil Kumar.








--_000_LV8PR05MB10550A08AB34D169D85D82982DF50ALV8PR05MB10550na_--

Web / SEO / App spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 18 Jul 2025 07:19:00 -0600

Received: from mail-koreacentralazolkn19011039.outbound.protection.outlook.com ([52.103.74.39]:64413 helo=SE2P216CU007.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uckyt-00000000Md2-3ZpZ

for dave@doctor.nl2k.ab.ca;

Fri, 18 Jul 2025 07:18:47 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=s/ZP2mph/fyUXR1ORrApG6ASLfzJ2ms1pcENRWeWn/B3bn0NjcAVeQUdLc6JNzrCBDRZTxg0fnysSUHv14OkHfQEwctuCN1Fd7FrHIXNH7hut2s5KBnxnA+hFfvVXacfeVml6xmRk4CWN/0OluxnUMoAanlGt8r8xOGv9FpZIty+dBwgnVNH+TiPQwdmNsVE7pbpcFoxSrG6MsSG5RtgwMMIOJMBNmqEXIzpOcsrN2gLocYBllwR1ZSsl7JW5qewPeLLgn88ik0rWIaI1cSDlzVjAPY43EhS9MoUV/1oNjRyfpfVnXz/MC/PU0q5pZOpJSlCwjG46/1/VjgU3r6ErA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=lucpXM2PT2qNyMJ+uZt+o/ZjoFsTIs0+mKGiPoRjinM=;

b=ev+lkYKiHFaXMOi6a0w4emOmOHkxv97HV1BA11XEWfO+TbUcX4EIZ0Lge3di44sqFjFoKlv2Yia78ULHvJ3/pRYkySK4f2Kk8NPrbAWPYtWZbByD2+jmB6zFMoG1wSgD5DpRfJEcnlWk1egVacjzOkPlhhYTqAXsR6ztjDod3W4rPXKg6dNe/sGKjKJJNRYGODhWB93I3S4B8e60DQm0JZhkNeSdhrA+i0PikeGDcaQGs57UvGxH2Gqg3puuLRJGYfyQRmjlOjs/PBlEFaoYLXDNzJ87RUY9i7c+dw9jpFwxEtmZRpAUNtGfr/fBCa42+vHyDdW7pWUXnPzNtv/UfA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=lucpXM2PT2qNyMJ+uZt+o/ZjoFsTIs0+mKGiPoRjinM=;

b=FlDtH0Fo+ji3fN854IhqhjG3RLYthRIFcb0Ty6PwyrO0RYxo738GfqEFR1Nj4U6QXXOhNJAA52QB2I0Jdpv+G4qYOYePU0van2W43lpVBdpcWR/85oh4KnD6QFfz6L9uCEC7UdFVeEHXlbyFvkzhnqhK8n+QGTlgOLaZSn1unEUmqMOxjlzNVVLuu6x2jWG7M1JgCZ+YmzcK3kh9vyLok7nbHx9bq/C33VrFfTCHgMOG0Hk2cVtp5os1BjYY4RgoXwg+FrgI9RnBMAo7yENpM0gT/woVqTRXjPllhtnOnv+01fUMg7hDGc5Qe2OtssMHZKEq4MWksAZlOpqnclyHAw==

Received: from SL2P216MB2080.KORP216.PROD.OUTLOOK.COM (2603:1096:101:154::14)

by SE1P216MB1271.KORP216.PROD.OUTLOOK.COM (2603:1096:101:15::7) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8943.25; Fri, 18 Jul

2025 13:15:36 +0000

Received: from SL2P216MB2080.KORP216.PROD.OUTLOOK.COM

([fe80::8297:c775:42f5:9a1]) by SL2P216MB2080.KORP216.PROD.OUTLOOK.COM

([fe80::8297:c775:42f5:9a1%6]) with mapi id 15.20.8943.024; Fri, 18 Jul 2025

13:15:36 +0000

From: Deeksha Kaur

To: "fk9766326@gmail.com"

Subject: Re: Cost Of Price,

Thread-Topic: Cost Of Price,

Thread-Index: AQHb9+XBFr49J8UcPEiu2qGAO+C6orQ33AyfgAAAMIk=

Date: Fri, 18 Jul 2025 13:15:36 +0000

Message-ID:



References:





In-Reply-To:



Accept-Language: en-IN, en-US

Content-Language: en-IN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SL2P216MB2080:EE_|SE1P216MB1271:EE_

x-ms-office365-filtering-correlation-id: 4b8e2a5b-6a2c-40ee-d401-08ddc5fd2eeb

x-microsoft-antispam:

BCL:0;ARA:14566002|461199028|37102599003|15030799006|15080799012|40105399003|3412199025|440099028|12091999003|102099032|56899033;

x-microsoft-antispam-message-info:

=?utf-8?B?eGhQR0c5VUxsZWZMQS8va2l2cnhtNE40d3B3dmRFcDU3VG5ad0RZR1NiYkF5?=

=?utf-8?B?em5JSU1Yc09xYmtaN0VCUHVMVFBueG1GUkx0OHJqUG5aZXRiTzJQNnAraTMv?=

=?utf-8?B?SEdMTTE5ZWFiK1BMTm1EZ2hTdkpGNWVvb09vY3c4Ri9qK0J5L05rc0VwUXVO?=

=?utf-8?B?dmFwSURxNXVERlgxNGdIR2k4bFJvS1NmeENMNHZrbDFVdURucU1DTWVubU1U?=

=?utf-8?B?QnRGNzFYcGwxdTZHdnVZZ01nbVJ3QjlmMUIycGtQSDlOWEhQdUlqcUdPK0ds?=

=?utf-8?B?QmF4T3JKRjRRNnV1UVBCOEZ1WDZXcmZhajA1WDJzeXlqYXh5cEY2dUVvZ1px?=

=?utf-8?B?YjBkOFYxUHRQS0M0MVdTMGVNOER2RzQybHdaNVVSWitablQzdUVvdVQwczJQ?=

=?utf-8?B?TW5VbjNZR3E5NmRKTS8wWkEwN1ovRVpZWTRuSnJCTGdUS1FOQ01ibTh0WjNP?=

=?utf-8?B?UlZyNkhhKzBSS25tRmZQc2p0a21XWTFpZlZ1MnFZK0c0ZlMvRHk3cEpxSGhU?=

=?utf-8?B?WGZIc3FvT2ZxQzN1bFc3T0g5cG1kSFVoTXZzL1ROaWtkTnNkTG5SVHRrQi9C?=

=?utf-8?B?MkIzVERDb24yUGxCMXJqWlhOeVMvMUkxUW1CZW9XWVI1VWoxN3JGaDQvdjZQ?=

=?utf-8?B?aUZiQ2RkbUp5WEFtUGdYdVFyK01RU2pkZ1BwSUlzQ1JhWlNIMnhMaHI4Rlh1?=

=?utf-8?B?YWN5VW1LSnlrcDJrMkFFejJrZzNvN1RERFYrdjFnTWpjU1RMNmV6YXM5UEJz?=

=?utf-8?B?ZGlrejEyR3hIbnVzTTRXdWc4YTVIVkt4VWdrSVdRN2JwWkpaaGl1MmZ5Rjl4?=

=?utf-8?B?MHU5dnpnTWg0N1lTdlpBNnlxSkZCd1A0bGRrckRGOVlTUmI3dnVWd2s4bXVz?=

=?utf-8?B?ZmZrSHA4bmdDbGcyUHk5aEQ0QnFGL09VTVNVK013aURLWGN5bVlPVVhXOU1p?=

=?utf-8?B?a01WRkZ4eXZmL0pXZVQ3ZFd0SUFHbHZPUXRtR3h4bFpVSCtmemY2TjIybWEz?=

=?utf-8?B?Ym9oV3p4K1lESEk2WEFRSWlWL1VGVHRYWFRLc0lNWUZKNlB0dEVTNnpia09S?=

=?utf-8?B?Qi9jNXBhc29wM0F6RjJZNTRlRnYydWgzYWpkMVc4ZDFNaTdKMk1QdWhhV0tZ?=

=?utf-8?B?ckRMMEJ1YnJVY1c1Ylp4ZzFYQm9XSm50VEVyZXFNaW9UQ001bnlsOWRxMDB0?=

=?utf-8?B?YWNvdDJET1AxTUNGSDUxOWNlQjdnMDJmVk9OSjRyaStRbUx6WUp2RW1RdWJ2?=

=?utf-8?B?dTNIcHMrL0Iwb1pFREgwTU9iaUhWV2c5S0dOWUdmYThYdG9hUThDdVVqbXhV?=

=?utf-8?B?YmZOUS9MaFQvL2Q1cTZRaEdkWFRXcFJSOHlBQlhpaCtrUnkxRmRUQ0pnV1Jy?=

=?utf-8?B?eE1FV3hNMmZGMFhwOEZ4bEN2NDl3T3VFQmxOcGxZRVpOWXVLZjZhek5vWmpk?=

=?utf-8?B?VUM4clFub24yZWUwLzFUNDNVMXl0aFJiQXZUTkxDOU5PWWcrQWVQeGxmZnJl?=

=?utf-8?Q?fiIxVvVNEWPOJIDUWyAsuKeZr9H?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?b1BBNndiOHFEVGJjRkJyeXg5Y0oyYmY2VzJobUUzNWlPTmtldjRVVVpqZXJL?=

=?utf-8?B?enBDRldlUGpWTEkvYmtvUlM1eUZ2NkZPODROdGR5SVlqOWpnQ3JTMENQN09C?=

=?utf-8?B?ZnBmUytRdHpZR3lvbDl1L2RmRWRDMjJQTUxtL1RzSzl2RnJOa01aQ0VoNTN6?=

=?utf-8?B?aHc4NWx0WFJjbktIRnpaMDUwYTdyL3J1dXdWMU5ja0xRNE1ZVFhEUlRCYmsz?=

=?utf-8?B?Uks1WGNXNm1OZTlaVUhIMFZMQWNBd1FXYnUrZkVib05IcTkyYW5LT2pEOVNC?=

=?utf-8?B?Y3I0eWlaZFRTV2tiODFQSzFQU2FxK3hUSkh4ZjBIa0NCMDIyM25aMkdyK1JB?=

=?utf-8?B?emQ1a1ZBalJHL253MHpkSzhZVmtGejhhMmV0U25zK0dCei9IUlFQem8xL1NN?=

=?utf-8?B?MDhqTFdaa3p5S1o3MWIwQm15c3hLbUplODc2a2NESmViUjlRVDBDZE41Y095?=

=?utf-8?B?R2hkUGhacVhBcmI4UGZ5L1k4RjNwRllieXdoVm4zVjM4VFdaWVlBZHlYL1Qx?=

=?utf-8?B?NU02eHdiNTY4QnZrbFEySkdFVG93UXBTdGJRZ2c0Vm8xWHIxbjRBcStGdm9x?=

=?utf-8?B?WWZ2NHQ1ZzNiVWxzczlxMTBYTHprWFJYcEhTZkdGWkdRK0VvWkJ2b2hPT0JY?=

=?utf-8?B?ZXlRTENKUUowcG1iejhQN0hBOFZpVGVIRXdMdmdMRkw3dEZ3WFArS2MyWUxH?=

=?utf-8?B?dllBd1g4MTlYSGltNENtZDJxZ0ZyQUFFeVM5N0ZHMTRtZlN0R01neDZXbDNM?=

=?utf-8?B?aTFsdDlQZC9IcS93OG5YaXBQWjVRSXV4bW9TdHFWV1E1Slc0NFRBbmI3Lzlq?=

=?utf-8?B?NTBMd05jb3RLTDAyUmtIU2JTdUprcTRiT0JQeldTUjBMa21KQnBoV1psM0VL?=

=?utf-8?B?Y01FeWs1Q1FYM2hrZk9XSDVvQU9DeGFWazZUc1RZcjlPRDNCRmcyVGhiTmxu?=

=?utf-8?B?Zmd6MGdrb015OWcyODZEbVNjRXoyS0NBVDJlUUUydGRURmRDMXJSZUhWazVi?=

=?utf-8?B?bE9ScTdpNFpVQU1mMy8vMnRhakJQRVFyd1J4Q0QvTlNLTjhBUGRhNlRFOUxG?=

=?utf-8?B?aDlzMjErOXZsUEdxQmhYZFovYktOMTk5Uk0xK1JDK1p4eWQ1Ykg5UklWT0tn?=

=?utf-8?B?RFRqWjFlejIvNWx2cXhhVmpNU2d3WGpjY1EwSEE1SlY3Y0txYlFGS3NHQVMv?=

=?utf-8?B?RWxxeTJDYWVySWI2blhRZytiQVJUSmlJbEYxV1R6eGI3LzZybWUvb0c5NkRk?=

=?utf-8?B?UmM0RUlwcjNvY3FYTS9HZGVwT0lMYlhOOGdzWTRwYnFnMGk0S1J3bEhyS0E2?=

=?utf-8?B?UXVLbjNEQ2c2R1RONHhDWHBQZmVzYmJ1YTI4YjlTa1AySzRHSnRLNTVzRitn?=

=?utf-8?B?RG5abjJQRE84cG1haUhwc1Z4UWJ2OVMxdVN1Y3FLMWRiaEJyRTBrRCtjZ0RN?=

=?utf-8?B?RTFRUmJJeVpvL1JwalpnM0dSSS9LdHRjQ1ArOXMrYTJuS1RFSTRuUnE2bXlV?=

=?utf-8?B?VllGNUFTNkVWeWIzckdLYS9EenM5SnJQMktVK0E1eGp1NzI2Kyt6TElOSGRH?=

=?utf-8?B?OG8vc0lhQXRDQlJ4aWVobFpLRVZIRDJGVHlmR1hYcFh4Nk05VmRHaWthaHYv?=

=?utf-8?Q?AS5so0q9zjKr+fE8nVblkp5yQt51nckz+Q+T6thc5cyI=3D?=

Content-Type: multipart/alternative;

boundary="_000_SL2P216MB2080690769AAA86E9FDB93A49050ASL2P216MB2080KORP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SL2P216MB2080.KORP216.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 4b8e2a5b-6a2c-40ee-d401-08ddc5fd2eeb

X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Jul 2025 13:15:36.0662

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SE1P216MB1271



--_000_SL2P216MB2080690769AAA86E9FDB93A49050ASL2P216MB2080KORP_

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: base64



SGlpLA0KDQpJIGNoZWNrZWQgb3V0IHlvdXIgd2Vic2l0ZSBhbmQgdGhpbmsgdGhlcmXigJlzIGEg

YmlnIG9wcG9ydHVuaXR5XyB0byBnZXRfIGl0IHJhbmtpbmcgaGlnaGVyIG9uIEdvb2dsZeKAlGFu

ZCBpbiBmcm9udCBvZiBtb3JlIHBlb3BsZSB3aG8gYXJlIGFscmVhZHkgbG9va2luZyBmb3Igd2hh

dCB5b3Ugb2ZmZXJfLg0KDQpJIHNwZWNpYWxpemUgaW4gaGVscGluZyBidXNpbmVzc2VzIGxpa2Ug

eW91cnMgZ2V0XzoNCuKchSBUb3AgcmFua2luZ3Mgb24gR29vZ2xlDQrinIUgTW9yZSBvcmdhbmlj

IHRyYWZmaWNfDQrinIUgQmV0dGVyIHZpc2liaWxpdHkgPSBtb3JlIGN1c3RvbWVycw0KDQpXb3Vs

ZCB5b3UgYmUgaW50ZXJlc3RlZCBpbiByZWNlaXZpbmcgYSBmcmVlXyBxdW90ZV8gYW5kIHByaWNp

bmcgZGV0YWlscz8NCkxvb2tpbmcgZm9yd2FyZCB0byBoZWFyaW5nIGZyb20geW91Lg0K



--_000_SL2P216MB2080690769AAA86E9FDB93A49050ASL2P216MB2080KORP_

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i

dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxzdHlsZSB0eXBlPSJ0ZXh0L2NzcyIgc3R5bGU9

ImRpc3BsYXk6bm9uZTsiPiBQIHttYXJnaW4tdG9wOjA7bWFyZ2luLWJvdHRvbTowO30gPC9zdHls

ZT4NCjwvaGVhZD4NCjxib2R5IGRpcj0ibHRyIj4NCjxkaXYgaWQ9ImFwcGVuZG9uc2VuZCI+PC9k

aXY+DQo8ZGl2IGlkPSJkaXZScGx5RndkTXNnIj48L2Rpdj4NCjxkaXYgc3R5bGU9ImRpcmVjdGlv

bjogbHRyOyBmb250LWZhbWlseTogJnF1b3Q7QXB0b3MgU2VyaWYmcXVvdDssIEFwdG9zX0VtYmVk

ZGVkRm9udCwgQXB0b3NfTVNGb250U2VydmljZSwgc2VyaWY7IGZvbnQtc2l6ZTogMTFwdDsgY29s

b3I6IHJnYigwLCAwLCAwKTsiPg0KSGlpLDwvZGl2Pg0KPGRpdiBzdHlsZT0iZGlyZWN0aW9uOiBs

dHI7IGZvbnQtZmFtaWx5OiAmcXVvdDtBcHRvcyBTZXJpZiZxdW90OywgQXB0b3NfRW1iZWRkZWRG

b250LCBBcHRvc19NU0ZvbnRTZXJ2aWNlLCBzZXJpZjsgZm9udC1zaXplOiAxMXB0OyBjb2xvcjog

cmdiKDAsIDAsIDApOyI+DQo8YnI+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImRpcmVjdGlvbjogbHRy

OyBmb250LWZhbWlseTogJnF1b3Q7QXB0b3MgU2VyaWYmcXVvdDssIEFwdG9zX0VtYmVkZGVkRm9u

dCwgQXB0b3NfTVNGb250U2VydmljZSwgc2VyaWY7IGZvbnQtc2l6ZTogMTFwdDsgY29sb3I6IHJn

YigwLCAwLCAwKTsiPg0KSSBjaGVja2VkIG91dCB5b3VyIHdlYnNpdGUgYW5kIHRoaW5rIHRoZXJl

4oCZcyBhIGJpZyBvcHBvcnR1bml0eV8gdG8gZ2V0XyBpdCByYW5raW5nIGhpZ2hlciBvbiBHb29n

bGXigJRhbmQgaW4gZnJvbnQgb2YgbW9yZSBwZW9wbGUgd2hvIGFyZSBhbHJlYWR5IGxvb2tpbmcg

Zm9yIHdoYXQgeW91IG9mZmVyXy48L2Rpdj4NCjxkaXYgc3R5bGU9ImRpcmVjdGlvbjogbHRyOyBm

b250LWZhbWlseTogJnF1b3Q7QXB0b3MgU2VyaWYmcXVvdDssIEFwdG9zX0VtYmVkZGVkRm9udCwg

QXB0b3NfTVNGb250U2VydmljZSwgc2VyaWY7IGZvbnQtc2l6ZTogMTFwdDsgY29sb3I6IHJnYigw

LCAwLCAwKTsiPg0KPGJyPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJkaXJlY3Rpb246IGx0cjsgZm9u

dC1mYW1pbHk6ICZxdW90O0FwdG9zIFNlcmlmJnF1b3Q7LCBBcHRvc19FbWJlZGRlZEZvbnQsIEFw

dG9zX01TRm9udFNlcnZpY2UsIHNlcmlmOyBmb250LXNpemU6IDExcHQ7IGNvbG9yOiByZ2IoMCwg

MCwgMCk7Ij4NCkkgc3BlY2lhbGl6ZSBpbiBoZWxwaW5nIGJ1c2luZXNzZXMgbGlrZSB5b3VycyBn

ZXRfOjwvZGl2Pg0KPGRpdiBzdHlsZT0iZGlyZWN0aW9uOiBsdHI7IGZvbnQtZmFtaWx5OiAmcXVv

dDtBcHRvcyBTZXJpZiZxdW90OywgQXB0b3NfRW1iZWRkZWRGb250LCBBcHRvc19NU0ZvbnRTZXJ2

aWNlLCBzZXJpZjsgZm9udC1zaXplOiAxMXB0OyBjb2xvcjogcmdiKDAsIDAsIDApOyI+DQrinIUg

VG9wIHJhbmtpbmdzIG9uIEdvb2dsZTwvZGl2Pg0KPGRpdiBzdHlsZT0iZGlyZWN0aW9uOiBsdHI7

IGZvbnQtZmFtaWx5OiAmcXVvdDtBcHRvcyBTZXJpZiZxdW90OywgQXB0b3NfRW1iZWRkZWRGb250

LCBBcHRvc19NU0ZvbnRTZXJ2aWNlLCBzZXJpZjsgZm9udC1zaXplOiAxMXB0OyBjb2xvcjogcmdi

KDAsIDAsIDApOyI+DQrinIUgTW9yZSBvcmdhbmljIHRyYWZmaWNfPC9kaXY+DQo8ZGl2IHN0eWxl

PSJkaXJlY3Rpb246IGx0cjsgZm9udC1mYW1pbHk6ICZxdW90O0FwdG9zIFNlcmlmJnF1b3Q7LCBB

cHRvc19FbWJlZGRlZEZvbnQsIEFwdG9zX01TRm9udFNlcnZpY2UsIHNlcmlmOyBmb250LXNpemU6

IDExcHQ7IGNvbG9yOiByZ2IoMCwgMCwgMCk7Ij4NCuKchSBCZXR0ZXIgdmlzaWJpbGl0eSA9IG1v

cmUgY3VzdG9tZXJzPC9kaXY+DQo8ZGl2IHN0eWxlPSJkaXJlY3Rpb246IGx0cjsgZm9udC1mYW1p

bHk6ICZxdW90O0FwdG9zIFNlcmlmJnF1b3Q7LCBBcHRvc19FbWJlZGRlZEZvbnQsIEFwdG9zX01T

Rm9udFNlcnZpY2UsIHNlcmlmOyBmb250LXNpemU6IDExcHQ7IGNvbG9yOiByZ2IoMCwgMCwgMCk7

Ij4NCjxicj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iZGlyZWN0aW9uOiBsdHI7IGZvbnQtZmFtaWx5

OiAmcXVvdDtBcHRvcyBTZXJpZiZxdW90OywgQXB0b3NfRW1iZWRkZWRGb250LCBBcHRvc19NU0Zv

bnRTZXJ2aWNlLCBzZXJpZjsgZm9udC1zaXplOiAxMXB0OyBjb2xvcjogcmdiKDAsIDAsIDApOyI+

DQpXb3VsZCB5b3UgYmUgaW50ZXJlc3RlZCBpbiByZWNlaXZpbmcgYSBmcmVlXyBxdW90ZV8gYW5k

IHByaWNpbmcgZGV0YWlscz88L2Rpdj4NCjxkaXYgc3R5bGU9ImRpcmVjdGlvbjogbHRyOyBmb250

LWZhbWlseTogJnF1b3Q7QXB0b3MgU2VyaWYmcXVvdDssIEFwdG9zX0VtYmVkZGVkRm9udCwgQXB0

b3NfTVNGb250U2VydmljZSwgc2VyaWY7IGZvbnQtc2l6ZTogMTFwdDsgY29sb3I6IHJnYigwLCAw

LCAwKTsiPg0KTG9va2luZyBmb3J3YXJkIHRvIGhlYXJpbmcmbmJzcDtmcm9tJm5ic3A7eW91Ljwv

ZGl2Pg0KPGRpdiBpZD0ieF9hcHBlbmRvbnNlbmQiPjwvZGl2Pg0KPGRpdiBpZD0ieF9kaXZScGx5

RndkTXNnIj48L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg==



--_000_SL2P216MB2080690769AAA86E9FDB93A49050ASL2P216MB2080KORP_--

Web / SEO / App spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 18 Jul 2025 07:18:00 -0600

Received: from mail-koreasouthazolkn19010006.outbound.protection.outlook.com ([52.103.75.6]:33870 helo=PUWP216CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uckxu-00000000K9K-37AV

for dave@doctor.nl2k.ab.ca;

Fri, 18 Jul 2025 07:17:58 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=IXE8AcZBJwV2nRS1wBNL+fOETn9D0aUiIAk4vJ2o2/ej13QkYy7KZ1J916F4vfI9Fb1uwGkBlLVeWVh46eE4TDSbgE//dzch9zOY+cSz3iZEUK4egMh7U8na4dgw5WGuTF02ep9CXQbjRsjKTuZxz+dYLZZZ2xg0pmtw8ECXbfxwXWEiQcDSRSa9N+ObgZWtn+iizENQ/3ivg7V47fx81ur3X/jAFqWcwuGIB/yJASutMMaryrGoJWbKqiUVtbBizVTv3S68FSuCSfD4N/X0w9fPiZAjlEt3XUelKUoBv9z+eJxM/+kOqaWScPT+1SYr6llStJRXO4b2RKN3zc0aKg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=fUc7BruI93oFb8EMC2Bg9BqMb+L7VxYaG05AisndGqE=;

b=UMMuqj/QMKk+r6yy88CIhhebQLj0izDwSrRzyIA4AUnqzkOHEhEuoaeNoPzVG+sHPHmI3xMf1Z/e3GT3GlrsFPur+6z/7WiB/0lcLmzi+HO1yF1tag98HbW29l63sZgYC0aXSyQhPXCihBPIZxV7S2mEytH9HXrkSNbY2zsIvSavEXzjTnMyH0xfafNxiyqwOFuoGGppDDIaDpgAqWvv+Axv11ijUB/ijG+Dmjcn2sC5fc5Hbu6GN/8v3moypsS83Vf785t1Qw7/vHKA7hssEv5o79lQ8eUywja4DAT2QeGGKAtWSZCXqGCQKOKEyxt8ekp+o+tPksXsG7TkZLKGQA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=fUc7BruI93oFb8EMC2Bg9BqMb+L7VxYaG05AisndGqE=;

b=LU/A64UvZRT5uEmqG71du79iMBZVsmKD9Z/1PzRWU8kiWf/THiQzl9P2KcbYL4XPY1xESpS9cWExEUXZl1Mma2FGcrKhSPcJwiWBVk1CrDffw+Ik5cvpXsQFly+EmQM5hpt8Y+vEhSRNWv9i+2hpopIrSy9sYh2pb3QlzUwh6I2VqqKYUZ+Qj2LWJqTNlwNQFdkpJ0f5VgCDOOeDv5mJEH1WVTT9b5VCKKOhLgsIXYKeANkz4vxBENobji7NzRNd/FJ9n7vCAkQw2Tz+pXPcXhfIzpoyZ0x/JfQ8PTQhsjle62J8LmR6MWJhzDjY49xZp5TOYP9+ws7Q6237JI1mQg==

Received: from SL2P216MB2080.KORP216.PROD.OUTLOOK.COM (2603:1096:101:154::14)

by SE1P216MB1271.KORP216.PROD.OUTLOOK.COM (2603:1096:101:15::7) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8943.25; Fri, 18 Jul

2025 13:15:06 +0000

Received: from SL2P216MB2080.KORP216.PROD.OUTLOOK.COM

([fe80::8297:c775:42f5:9a1]) by SL2P216MB2080.KORP216.PROD.OUTLOOK.COM

([fe80::8297:c775:42f5:9a1%6]) with mapi id 15.20.8943.024; Fri, 18 Jul 2025

13:15:05 +0000

From: Deeksha Kaur

To: "fk9766326@gmail.com"

Subject: Re: Cost Of Price,

Thread-Topic: Cost Of Price,

Thread-Index: AQHb9+XBFr49J8UcPEiu2qGAO+C6orQ33Ayf

Date: Fri, 18 Jul 2025 13:15:05 +0000

Message-ID:



References:



In-Reply-To:



Accept-Language: en-IN, en-US

Content-Language: en-IN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SL2P216MB2080:EE_|SE1P216MB1271:EE_

x-ms-office365-filtering-correlation-id: f732e003-aff4-450c-a164-08ddc5fd1ce1

x-microsoft-antispam:

BCL:0;ARA:14566002|461199028|7071999006|37102599003|15030799006|15080799012|51005399003|41105399003|40105399003|39145399003|39105399003|3412199025|440099028|12091999003|102099032|56899033;

x-microsoft-antispam-message-info:

=?utf-8?B?QUt5RTZ3dzh2OW5jRFp5RTFScXhIK3hnQVk0bzlweklxZUw3U2I0TFlKMS95?=

=?utf-8?B?MkNUQzdaZzFKODRnY2V5YjNCc1dXYzd2d2V4eW1HeHJmTThKM2xNSWNYY1Np?=

=?utf-8?B?ektBaHhyYnk0WlpURHFIYTJORHRhbWhSd1g4V1lLMFRvaE9MQVBBUlk2UFp2?=

=?utf-8?B?TkdXeW1GTEkxOGhJZnFxMFAvU2xxZnhzWTd2MkJlVHB2SVV4UitHZHBGVU9I?=

=?utf-8?B?Sk9IN1l4eXM0NGtEbFMrZm9ncjBkc1RvQTB1NDNqOVVqbUJXcmlEMWNmeGZt?=

=?utf-8?B?cWVDUVg1VGRzeVdUQ1VyN2hDY2ptNE9oSUtiNTNaaktWM3JaZVIxc2NGOFRC?=

=?utf-8?B?Uk4zYWRTL2tPN1BpTlpiTVdkb0lMZkg4cjJlQ1N6SXJmWStyRG5Pa3N0S2xM?=

=?utf-8?B?Zjc1ejJzdVpvZWVtSVNUYmtySk0vcndMWmVpSERYZXpJd3VGZnRQUlIrdXdq?=

=?utf-8?B?R1I3OFhIaXpVNzJJWVRLTStjQ0M0MEdyZ1BFYXoyc3NWVFhKa3lIcTNzR0d0?=

=?utf-8?B?Z04rTDVkTms4TzVIaXl6M0NGMlM3YWEyU1g0M3NzWnZveUdid1ozUlQwS0R2?=

=?utf-8?B?K1dzZXB6NzI1eFYwY0Facm5xbDZWeG9CRndZOXdGSElyWUlkOGZXR1lpMnpi?=

=?utf-8?B?Y1NhbWRoT3BZeTNoQzZ0YjJqZC9VaTZEdzRla2pYdDNObkoxUlNIclhsM25M?=

=?utf-8?B?elZyeHJrbEdqOFV2eFh4UEtEZnV2OWxld0sxQllnTlZ6Q1lUTkFJckxpSkl5?=

=?utf-8?B?UGZhMElvYnBYZnBKVm9LdjU1MHZBYTErc3lvM3IwR2hTR1JBNTNYb3JUdWx2?=

=?utf-8?B?Sk9xeU0yb1Fwd3lJbmZqdGtzaS9GQUlWaHF0akZvVzdYRCthaXNHRlM1QW40?=

=?utf-8?B?NVJGUXBvMFE0UjlscHoxK0I4ZVI0bDR4WkdiQWwwaDJrczk2cGJMR3FtblBh?=

=?utf-8?B?M3JPYTNqMExlWXl5Ti9SY1VoYlJELzJHbHV5NmVkZldCUzBEdlRLbER1VG90?=

=?utf-8?B?MjNCVVg4WjBPMlkvWm1HSUd5Yi9BbWRpSnZCSjQwRkVQeXF1VDMvcEpwbFVo?=

=?utf-8?B?SVdoTlowV3FBUFpLNlVTbzFZQWhFK1FGVFIrNXJMaHZad0Q0N05CZ1o1aFpG?=

=?utf-8?B?WDFlbmJCQ29VMFF2WnhmMWx6alBtQnNVT0FLNDVQOTV1NjBWWkJrWFFBUW9J?=

=?utf-8?B?Q2I4amhmL1YzOHBQYzFXZHJCL011QzR0QUl6Y1hudGJ3T3Y1akcremZlZDdP?=

=?utf-8?B?Z3NROHFqcGtwWTBHdjdWeHBvL0UyRWxBR1hVbWl1K1duUTc2YVB4NE9aZEpX?=

=?utf-8?B?UFlNT254TW5iY1VZajc1YjVYNnFHNUFwdWw3WStUV3lYZnVkWEZvK1ZMZnd4?=

=?utf-8?B?ZEhaTitCaTB4SFNzYXJFb0tOZlJFTXVxQmg3M3AyQ05Wb2xHb2tUMVh3MTI1?=

=?utf-8?B?QVlHVndJRTFjRDBuZElJK0I3TU5IUkt5SUpUTmZSVW5Nb0JpcTRGUXozZHVX?=

=?utf-8?B?Y29kS0JTeHU1QTJtWGJUc3lxQUV6aWVnc0c5SzlBVW5wOVA2dC9ZbmNDRlZl?=

=?utf-8?B?djA4OHUxVnJ3U0lWNEJnalZSTm5ZMTFQYUFWMDYwbm1EVnZRdU5XU3lFZ1dy?=

=?utf-8?B?MUI0RCtlVEtXSmpTYmlYdE5ncDJ4UUtSanBpdUJMc0NZcVc2Q0NvSCt6bWZB?=

=?utf-8?B?YkFENGtZM3ZNYm9nYUI2TTlXaUtDL1BzQ2lMcUZUNTB6NkVLL1JLb3B3PT0=?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?NFovM2FNS1RiaHUzSlRDR0pYbTAwUFllQ2oxKzJVMDU0RXE3VlFzL1BkK3F1?=

=?utf-8?B?NDRyYWNWUUUzcnROQ3RVYkNFb25DaTdkNDZ3emZwUkNtNzFTZGV5YjJ0S0ls?=

=?utf-8?B?elZydlp1dEwxNFpUWEhFMFBiNHRPSFRyTkFNWWZoRHVTMHVmVlB3eDBvUHFo?=

=?utf-8?B?UnlCTVh4UDNOdzhrRGdjTGlXeGpDOWRNSlBkVjZsR2lvbVVUQzZoWTVQRVRx?=

=?utf-8?B?QUliL21yeDNOWHFZYU1pbWw4SXZSM3dhdEZWZDJ6MXV1bGhBZURTQ1UweVNz?=

=?utf-8?B?aEs5dVUyOVhtUmFPVmFSNFRDOTJwa1BaR1dUVFdLMnhLOHpCSkJRa0hBank2?=

=?utf-8?B?TE5lbmd3STJScE4rWWQwbVMrVk0vc1NLYXk3UjdxV1pndjdkcTZWdVRJZ0dU?=

=?utf-8?B?bGZNeWlSNnpqUGcxSGozSkRZUnZ6VE42TkpUZ2tuUUZVUGV0MGdRMWhGUzY0?=

=?utf-8?B?M2o3UE02T05jUGFVYTZVUGdCMnZmeU1jRXFtdjN6TE05QXhQb0R4STJlRHFN?=

=?utf-8?B?d1ZZa3RxUVJCRGh2OUJmSEw0U2pMY0grWERNK1R2RGsyOTZyOXFhR0VzTitw?=

=?utf-8?B?aEd1cjFkY3VBV3BhdGw5MVJIQU54T05MeVNXUTdCNG1qZ2JmQkRXQlNaYVhC?=

=?utf-8?B?a0wzb2paVXN2VTcxYVZOeEtEUlh0bGhjSlU2ZG5wYVE0V1VTVkVWMnBpNUJ3?=

=?utf-8?B?cmNXQUVEUFJEbTB0YUxkbzFSMnA0aEFCUjBYVUF3Qysvalk4cWFnUUJML1d0?=

=?utf-8?B?dW9lY3JVb1BXOTdKRlk4QVh5UndqcmxYZTRjNkhvY3oxMHkrTzVGY3IzWGNL?=

=?utf-8?B?OGw4NkJDK0l1QUQ3cGtzUnZPS1dEU1YxV0x2ODJ3cW5UNStBMThwMVRXcnBE?=

=?utf-8?B?dEYxL1dJamhHR1V2Y1ByWklYU25DdVJLQ0tNQnB2a283SDlRTnFrZktMeWEw?=

=?utf-8?B?ajEvU0hBcFo1eEpHRE51WVIzQWRIM0U3Mk5DYjNYSFZNVGFQY1JxcXRzMmxo?=

=?utf-8?B?OEpUK0psU1dxWlFLUWRKYzErQXIzN0UwbzZOdmFQc2QzNXo2V0w2YlFVTnNl?=

=?utf-8?B?anBubVZsbUZEUEtFcG9xUUFrMktFcnBBblBjVkYyN0d4NFc1Z2szdUk3clk2?=

=?utf-8?B?bVM1NVdGaHpBYllWWU5DRUdZZ2FXbW1EclMzVFBpbDIzT1NGUEhGc05lQWNG?=

=?utf-8?B?clhhQmhaRkVQTEo5MlhEZWxreHhyb2NPYWs2N0YrK0srNEs2bUp4WGxINVRT?=

=?utf-8?B?QlJwbnJFUk1Tb0VHb3oxZ2Y5d2hZczVLaHlsZnV6VzNRUzlPN0l5SEVtbnAx?=

=?utf-8?B?Q3JGZGpoRDBacHhObmpHVTJ4eTNsMnMwcS9YNCtwelZ3ZXl5aERORVVLd0JI?=

=?utf-8?B?bzlxVlltbDJnV3hBWmJyNWZsQzJsbWdvdGl0TmlFVkI2d2xaN0lwYW9vREtk?=

=?utf-8?B?NlNjVGZzZkJrdlI2eHo0L2ZZRVhTZERQT2o4TlNXd3hnTDNiOUJjTU5Nd3Q0?=

=?utf-8?B?VUUzSmFVUldnWmlFRXZkakJSWmE1cVp5eTdGdDZvRFNFU3VPK0RiUmw3WERI?=

=?utf-8?B?VzBPb3lZK0NGdDN4Nm85Y2s0a1dpdTJWdEpqR1h5UjRyeTZjK2hhNVgvYTJ5?=

=?utf-8?Q?bIQ/zvgbz1g0i1EzJiPlu6z7iPNm/QF1b5TNVZFGWmyU=3D?=

Content-Type: multipart/alternative;

boundary="_000_SL2P216MB2080D7A416EEC904DB5D615B9050ASL2P216MB2080KORP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SL2P216MB2080.KORP216.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: f732e003-aff4-450c-a164-08ddc5fd1ce1

X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Jul 2025 13:15:05.8148

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SE1P216MB1271



--_000_SL2P216MB2080D7A416EEC904DB5D615B9050ASL2P216MB2080KORP_

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: base64



SGlpLA0KDQpJIGNoZWNrZWQgb3V0IHlvdXIgd2Vic2l0ZSBhbmQgdGhpbmsgdGhlcmXigJlzIGEg

YmlnIG9wcG9ydHVuaXR5XyB0byBnZXRfIGl0IHJhbmtpbmcgaGlnaGVyIG9uIEdvb2dsZeKAlGFu

ZCBpbiBmcm9udCBvZiBtb3JlIHBlb3BsZSB3aG8gYXJlIGFscmVhZHkgbG9va2luZyBmb3Igd2hh

dCB5b3Ugb2ZmZXJfLg0KDQpJIHNwZWNpYWxpemUgaW4gaGVscGluZyBidXNpbmVzc2VzIGxpa2Ug

eW91cnMgZ2V0XzoNCuKchSBUb3AgcmFua2luZ3Mgb24gR29vZ2xlDQrinIUgTW9yZSBvcmdhbmlj

IHRyYWZmaWNfDQrinIUgQmV0dGVyIHZpc2liaWxpdHkgPSBtb3JlIGN1c3RvbWVycw0KDQpXb3Vs

ZCB5b3UgYmUgaW50ZXJlc3RlZCBpbiByZWNlaXZpbmcgYSBmcmVlXyBxdW90ZV8gYW5kIHByaWNp

bmcgZGV0YWlscz8NCkxvb2tpbmcgZm9yd2FyZCB0byBoZWFyaW5nIGZyb20geW91Lg0K



--_000_SL2P216MB2080D7A416EEC904DB5D615B9050ASL2P216MB2080KORP_

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i

dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxzdHlsZSB0eXBlPSJ0ZXh0L2NzcyIgc3R5bGU9

ImRpc3BsYXk6bm9uZTsiPiBQIHttYXJnaW4tdG9wOjA7bWFyZ2luLWJvdHRvbTowO30gPC9zdHls

ZT4NCjwvaGVhZD4NCjxib2R5IGRpcj0ibHRyIj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiAm

cXVvdDtBcHRvcyBTZXJpZiZxdW90OywgQXB0b3NfRW1iZWRkZWRGb250LCBBcHRvc19NU0ZvbnRT

ZXJ2aWNlLCBzZXJpZjsgZm9udC1zaXplOiAxMXB0OyBjb2xvcjogcmdiKDAsIDAsIDApOyIgY2xh

c3M9ImVsZW1lbnRUb1Byb29mIj4NCkhpaSw8L2Rpdj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5

OiAmcXVvdDtBcHRvcyBTZXJpZiZxdW90OywgQXB0b3NfRW1iZWRkZWRGb250LCBBcHRvc19NU0Zv

bnRTZXJ2aWNlLCBzZXJpZjsgZm9udC1zaXplOiAxMXB0OyBjb2xvcjogcmdiKDAsIDAsIDApOyIg

Y2xhc3M9ImVsZW1lbnRUb1Byb29mIj4NCjxicj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iZm9udC1m

YW1pbHk6ICZxdW90O0FwdG9zIFNlcmlmJnF1b3Q7LCBBcHRvc19FbWJlZGRlZEZvbnQsIEFwdG9z

X01TRm9udFNlcnZpY2UsIHNlcmlmOyBmb250LXNpemU6IDExcHQ7IGNvbG9yOiByZ2IoMCwgMCwg

MCk7IiBjbGFzcz0iZWxlbWVudFRvUHJvb2YiPg0KSSBjaGVja2VkIG91dCB5b3VyIHdlYnNpdGUg

YW5kIHRoaW5rIHRoZXJl4oCZcyBhIGJpZyBvcHBvcnR1bml0eV8gdG8gZ2V0XyBpdCByYW5raW5n

IGhpZ2hlciBvbiBHb29nbGXigJRhbmQgaW4gZnJvbnQgb2YgbW9yZSBwZW9wbGUgd2hvIGFyZSBh

bHJlYWR5IGxvb2tpbmcgZm9yIHdoYXQgeW91IG9mZmVyXy48L2Rpdj4NCjxkaXYgc3R5bGU9ImZv

bnQtZmFtaWx5OiAmcXVvdDtBcHRvcyBTZXJpZiZxdW90OywgQXB0b3NfRW1iZWRkZWRGb250LCBB

cHRvc19NU0ZvbnRTZXJ2aWNlLCBzZXJpZjsgZm9udC1zaXplOiAxMXB0OyBjb2xvcjogcmdiKDAs

IDAsIDApOyIgY2xhc3M9ImVsZW1lbnRUb1Byb29mIj4NCjxicj4NCjwvZGl2Pg0KPGRpdiBzdHls

ZT0iZm9udC1mYW1pbHk6ICZxdW90O0FwdG9zIFNlcmlmJnF1b3Q7LCBBcHRvc19FbWJlZGRlZEZv

bnQsIEFwdG9zX01TRm9udFNlcnZpY2UsIHNlcmlmOyBmb250LXNpemU6IDExcHQ7IGNvbG9yOiBy

Z2IoMCwgMCwgMCk7IiBjbGFzcz0iZWxlbWVudFRvUHJvb2YiPg0KSSBzcGVjaWFsaXplIGluIGhl

bHBpbmcgYnVzaW5lc3NlcyBsaWtlIHlvdXJzIGdldF86PC9kaXY+DQo8ZGl2IHN0eWxlPSJmb250

LWZhbWlseTogJnF1b3Q7QXB0b3MgU2VyaWYmcXVvdDssIEFwdG9zX0VtYmVkZGVkRm9udCwgQXB0

b3NfTVNGb250U2VydmljZSwgc2VyaWY7IGZvbnQtc2l6ZTogMTFwdDsgY29sb3I6IHJnYigwLCAw

LCAwKTsiIGNsYXNzPSJlbGVtZW50VG9Qcm9vZiI+DQrinIUgVG9wIHJhbmtpbmdzIG9uIEdvb2ds

ZTwvZGl2Pg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6ICZxdW90O0FwdG9zIFNlcmlmJnF1b3Q7

LCBBcHRvc19FbWJlZGRlZEZvbnQsIEFwdG9zX01TRm9udFNlcnZpY2UsIHNlcmlmOyBmb250LXNp

emU6IDExcHQ7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IiBjbGFzcz0iZWxlbWVudFRvUHJvb2YiPg0K

4pyFIE1vcmUgb3JnYW5pYyB0cmFmZmljXzwvZGl2Pg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6

ICZxdW90O0FwdG9zIFNlcmlmJnF1b3Q7LCBBcHRvc19FbWJlZGRlZEZvbnQsIEFwdG9zX01TRm9u

dFNlcnZpY2UsIHNlcmlmOyBmb250LXNpemU6IDExcHQ7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IiBj

bGFzcz0iZWxlbWVudFRvUHJvb2YiPg0K4pyFIEJldHRlciB2aXNpYmlsaXR5ID0gbW9yZSBjdXN0

b21lcnM8L2Rpdj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiAmcXVvdDtBcHRvcyBTZXJpZiZx

dW90OywgQXB0b3NfRW1iZWRkZWRGb250LCBBcHRvc19NU0ZvbnRTZXJ2aWNlLCBzZXJpZjsgZm9u

dC1zaXplOiAxMXB0OyBjb2xvcjogcmdiKDAsIDAsIDApOyIgY2xhc3M9ImVsZW1lbnRUb1Byb29m

Ij4NCjxicj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6ICZxdW90O0FwdG9zIFNl

cmlmJnF1b3Q7LCBBcHRvc19FbWJlZGRlZEZvbnQsIEFwdG9zX01TRm9udFNlcnZpY2UsIHNlcmlm

OyBmb250LXNpemU6IDExcHQ7IGNvbG9yOiByZ2IoMCwgMCwgMCk7IiBjbGFzcz0iZWxlbWVudFRv

UHJvb2YiPg0KV291bGQgeW91IGJlIGludGVyZXN0ZWQgaW4gcmVjZWl2aW5nIGEgZnJlZV8gcXVv

dGVfIGFuZCBwcmljaW5nIGRldGFpbHM/PC9kaXY+DQo8ZGl2IHN0eWxlPSJmb250LWZhbWlseTog

QXB0b3MsIEFwdG9zX0VtYmVkZGVkRm9udCwgQXB0b3NfTVNGb250U2VydmljZSwgQ2FsaWJyaSwg

SGVsdmV0aWNhLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDAsIDAsIDApOyIgY2xhc3M9ImVsZW1l

bnRUb1Byb29mIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogJnF1b3Q7QXB0b3MgU2VyaWYm

cXVvdDssIEFwdG9zX0VtYmVkZGVkRm9udCwgQXB0b3NfTVNGb250U2VydmljZSwgc2VyaWY7IGZv

bnQtc2l6ZTogMTFwdDsiPkxvb2tpbmcgZm9yd2FyZCB0byBoZWFyaW5nJm5ic3A7ZnJvbSZuYnNw

O3lvdS48L3NwYW4+PC9kaXY+DQo8ZGl2IGlkPSJhcHBlbmRvbnNlbmQiPjwvZGl2Pg0KPGRpdiBp

ZD0iZGl2UnBseUZ3ZE1zZyI+PC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo=



--_000_SL2P216MB2080D7A416EEC904DB5D615B9050ASL2P216MB2080KORP_--

Web / SEO / App spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 18 Jul 2025 07:11:00 -0600

Received: from mail-japanwestazolkn19012051.outbound.protection.outlook.com ([52.103.66.51]:53163 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uckqY-00000000CLQ-1Qtn

for dave@doctor.nl2k.ab.ca;

Fri, 18 Jul 2025 07:10:14 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=HDJ+hHBE+2PGpgx+G3nd1ZA6CXper2HloSfTD1RyBi2aSUyiyInIvdLmJiM5hqbuJ1Wjd7WparjedCdshYfTcSzX2ih1QtozCVterQjViGPW+t03zec7VWG9KUEmi0qyLF/Bq/cDf71jsmBjYesiP/sKILZSceY+U/7dGdDXIv6gmwTsEY6fM6/U4qXKpuUvZ6S7lQld3DETwAXFhuRoUMg4s6U09z5GsipgpTbkX6uQoZEDjbK1PtKaln3u1jgfswkm3hckDJwVviAubUfF1OkgG4E0MdrXvyRH+CNUmZn/b2x7KIxhMoIO01c+vcYi2h8bJVx7y7AP6okF//FYYQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=y0V58v+yjJCU11aC2KTtolUS8XCfRUfBRLzrBoVIWC4=;

b=ROTwrRuO6V32Xecj8rNG1MQAFtSPhk9qmy54of8zioPxIaP38w7tDuCrKwjsvIe3rmT3uL5GOx3rze5Ynm/zuKatJtvihR7X06bGN8R8gUel8uNt2p77yccI6tHSGOMhYoYdT9/aFl5E7yaG3xMF6YT2GV9RoR37xyv8zLWrd7fU1LUgMFY7QE1+pth+ulm8CQyqah4DJxp6n7pEaFQYmJyqt6jIOGpinJWUrQmmvhmRq4wnCrNf9JfqSdinKO5N+yQg0LIYyXY3UVo/ciZFDYxEhG/961Z+OMbpzFHS77wLW8qNIiWI7UfNa0gX+4iEVIjZdt5sOxoX6jylcYKKYw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=y0V58v+yjJCU11aC2KTtolUS8XCfRUfBRLzrBoVIWC4=;

b=c12R67vY55EIKwTq3NsBMRr0tISQy2f1J8/CIbn+XalCtjzkGYsMV124j9SsWnXbnpF8Q75I8pI81SGc0Mc4aUZAPrsd5AyUvX0AvSKzOV/SWbqt8BZ5jUXQuX8tsktF+pS+kS2c5gr/j0H+DWX4FdWgcAWvWiF1/FtKb3J6tyBbMhlaUABLSUP4LffaKU39Rcw964kWJ7WQWyXHfeE3jByfwiW3jRr2iBiYzEhyHf9XYAoWW+WKQmOuxTA7f76V0SKUhzpGhNTUgtYv730UhKEe/pCG/pmBneaLj2A/ohxp3a6BYxduBBOsJDRUi/TyH7Xi9Tw0UWXAhAMRTh8rJQ==

Received: from OSNPR01MB7602.apcprd01.prod.exchangelabs.com

(2603:1096:604:317::8) by SEZPR01MB4922.apcprd01.prod.exchangelabs.com

(2603:1096:101:af::9) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8922.39; Fri, 18 Jul

2025 13:06:49 +0000

Received: from OSNPR01MB7602.apcprd01.prod.exchangelabs.com

([fe80::d416:413e:aa76:c354]) by OSNPR01MB7602.apcprd01.prod.exchangelabs.com

([fe80::d416:413e:aa76:c354%5]) with mapi id 15.20.8901.023; Fri, 18 Jul 2025

13:06:49 +0000

From: Leah Ward

To: "cr0628071@gmail.com"

Subject: Re: Cost,

Thread-Topic: Cost,

Thread-Index:

AQHb9+ORtsr0IWQLVUmdu56cmdgHHLQ312/HgAAAUL6AAAA2H4AAACDzgAAANjuAAABcN4AAADt1gAAAMTWAAACH/g==

Date: Fri, 18 Jul 2025 13:06:48 +0000

Message-ID:



References:



















In-Reply-To:



Accept-Language: en-IN, en-US

Content-Language: en-IN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: OSNPR01MB7602:EE_|SEZPR01MB4922:EE_

x-ms-office365-filtering-correlation-id: a6a71e9e-b75d-47d4-cfb0-08ddc5fbf4ab

x-microsoft-antispam:

BCL:0;ARA:14566002|37102599003|461199028|15030799006|15080799012|440099028|3412199025|40105399003|102099032;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?4EUlYQSbeB3UGk0khOKYeicM89LgFqznM8P9Fv8pc62ViJfy8TR02kmV?=

=?Windows-1252?Q?5NuWuC/IzCcUzjVLlRYXtP8PBTdIq+BIwB4xB986QFv1ySIc6/5iDF3B?=

=?Windows-1252?Q?ry4LkauuQcolNSFWFa/K8s/3h8QUbX/jgy2uBm9dDh6oCemJZnE4Loa4?=

=?Windows-1252?Q?s6UJHYdFpwQ90r/fJGoG6ddLVdsA1aex6N2ViiPlOYnnMHTSLFVjtknd?=

=?Windows-1252?Q?HjDaBUDwHTzmK5sANI1D0iyY5nsmzrOWUhpSatFm4EFIOo9odYSsyd1S?=

=?Windows-1252?Q?60S5r5AaHkr12So6I/owRYvdGVmJPQA7T1rrYEy/D9klEssr/C+cUH2b?=

=?Windows-1252?Q?nVoKwu3DYw2iuU/n5pRBGfTnAC8Oh3ssNFUGC4VyrPdjih6zuubFtcK9?=

=?Windows-1252?Q?U3Wz/LNgO4bN9TFDgOknEBs//52++h4sGWjcIS6rAbfhi8wTFpF/+hHv?=

=?Windows-1252?Q?XfGq0LeeO34tP+p8AFyICUG574L7wI1wKgd+ucJLYb+gLSvgRWiG1VFv?=

=?Windows-1252?Q?EPZZZH0u3d0VSx0m1vTtMJRSlHiZcwGIEHoTztSnwHqBb5fNpeLZhYEo?=

=?Windows-1252?Q?jtpFD/Stoegt6w1jCPHkjqUjE+iT1+vwrmp5h+YrhgZS4QFDCBGiK8Sp?=

=?Windows-1252?Q?FSMDtcHuGS9FvTrMvtfjgvBevA/uqIwZyDZyZf4s7utB5teHCKEPHIbK?=

=?Windows-1252?Q?J81EKyTtucM8+42xZNl7cW6V7S3sKSxFs3eqSA1GOY8bxJnh0KnjX1Ww?=

=?Windows-1252?Q?pI76gSiy6uUGwj6D+/h4rZbdkszTTXNJC4numwVyppwcHGrG1qqGHCEL?=

=?Windows-1252?Q?uGVR/StKqR0nw3+n4sTHgx5lOXYtgK0G9uMmBgJNLoNIJAqo2o+zI6Ri?=

=?Windows-1252?Q?61m8xo5py9DsgCM/gFagW6Gsj3BVast1CVJ+s/pYXMu9XLCWdgiLYFVt?=

=?Windows-1252?Q?9UUSh/BdoLhK7RVQKMMrsu404VEiA74sJQLTUcaMh2vNSO9Xlc/GFeVV?=

=?Windows-1252?Q?Smi1OzEY60kAnmhAbWew0nv7lcznjcgL/vsvXg7eWBf06Id2vzepKCg3?=

=?Windows-1252?Q?XW9gApTFc4+4Kx2XEIWOrBORCOqLMxN1kdjqCqTH5HSsiY3GPvXmiazW?=

=?Windows-1252?Q?Nm4NDWlbfI51P6tAVYPXq5c+HdJKSOd9PoInV2soYOm8cQ=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?nz0lsBNn96BaSnR7kPaJVtJRmxCBPc63wOnARll1SlK/Yt6bNucxv+aS?=

=?Windows-1252?Q?jRVUQma/1yhn0emo8YvwthYI5twVVJuE39GjNYa1DwcqBJiIVnf+YbcU?=

=?Windows-1252?Q?jeDqyE+oHFbgHO7y2HF/kBKK488rHYA8L0kLCY2q23h2Zg2mTUF1Of2j?=

=?Windows-1252?Q?uoz9CAmPx4hgoHg8gtXPSFp6q3kaZLEcrux1X7Tk03lrUQy1f6LD8Z3j?=

=?Windows-1252?Q?6VjaTZ/kO2We9SsiunUCOfACIWhdQizWMZZ7+DuTEGDrttrKjsLIKPri?=

=?Windows-1252?Q?EzO1G+FZDcUhdoKpwHKULzEaoAqfIJ2U1DeVlBQ3BdHYODlatKWcPkfE?=

=?Windows-1252?Q?VCQgASyxQ+Gk9CCw43F7WdWh5EeV/fr5+6GJMyXB7B/QfW3rTxpm4vqg?=

=?Windows-1252?Q?Ast0US9NlqZM+UPy0/s9Z5n09K/XJJgB2zow8E+cCG4fz/koAzZwvaen?=

=?Windows-1252?Q?tJevPLIwxRYugQbDcNnjU3VLTv0mgunWq5UaGEFNDKbhFnTqEohkAnj0?=

=?Windows-1252?Q?hAA1XLRWZBdiF3MursLXqId+D8sxI93fo5OHBhKle6DVT+YHNK0euwIo?=

=?Windows-1252?Q?hmUh3azqqNC9JC/ZJDsxPg43moaYntsPcYal0/8iEipRbQmCHEYLJk58?=

=?Windows-1252?Q?hdsrgmSM1W9dOAbV87fYigQ9lbiR/xuSfGmqURsSn/QXj0c67AFTzj9F?=

=?Windows-1252?Q?lVennsc0gbvrc5Td6ipxMU0PoYNeXmdTqdOGXVtewisPEB5F/TJ84wc1?=

=?Windows-1252?Q?IkEWGuTAapavlRfOIHX9rYUBMsctfEfAh3doX80JA5wwQGVeSBF43O9Y?=

=?Windows-1252?Q?jqEIC9icIo9PGiqTb7JwJSNTO7tKd7vbbDFrV2fNShsebfouHd5cO4bJ?=

=?Windows-1252?Q?E6pM5V7nq7lPtAFYJv7ZQoYBR09Z+2W7Wzuc4m58KE6XBxjlbDkYM4mR?=

=?Windows-1252?Q?O4Rznn+FmHp3f4wFFdbEERAbpS3dJeVXXSqddPdSaddyW56VKs/iorDh?=

=?Windows-1252?Q?BdO2qUqsDDN0TZqaI8Cqc2CtKuQhSVBOwueLZu6JUesiPZLu/bYysFJI?=

=?Windows-1252?Q?9liBiTVh0roH0JeSWbh00r9NeBU2dF87A6wyITZjy47kNYx8XScwEjv9?=

=?Windows-1252?Q?x9+ST4DVfzLlx22gtXaMvGXtneYX6DEku7PPhV/JuqwGBfZH7IwK1+gD?=

=?Windows-1252?Q?WCW/kFRLm0/WTQsoZjqeTrSUxP4B0CY7mqBLwDhWf6Og/sE4w+8jJ0Ct?=

=?Windows-1252?Q?DVLPREzn2+fpB4q/UZSk0QjGQvsLmgpDChs06hzQ5DesoJTALTJOu50Z?=

=?Windows-1252?Q?OIzWCPpJA/febaILkrJsV9cdVm8=3D?=

Content-Type: multipart/alternative;

boundary="_000_OSNPR01MB7602C88444EACF2B912BDC22EB50AOSNPR01MB7602apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: OSNPR01MB7602.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: a6a71e9e-b75d-47d4-cfb0-08ddc5fbf4ab

X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Jul 2025 13:06:48.8431

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR01MB4922



--_000_OSNPR01MB7602C88444EACF2B912BDC22EB50AOSNPR01MB7602apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



I was looking at your website and noticed that you aren=92t at the top of G=

oogle search. I can fix that for you_ and make your company more profitable=

.



I can give you our Complete SEO Action_ Plan along with a customary reach a=

nd add great_ value to your product/ service.

We can place your website on Google 1st page. Yahoo etc.

I may send you a quote_ & price_ list? If interested.



Waiting for reply....

Thanks



--_000_OSNPR01MB7602C88444EACF2B912BDC22EB50AOSNPR01MB7602apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">












mbeddedFont, Aptos_MSFontService, serif; font-size: 11pt; color: rgb(0, 0, =

0);">

Hi,









mbeddedFont, Aptos_MSFontService, serif; font-size: 11pt; color: rgb(0, 0, =

0);">







mbeddedFont, Aptos_MSFontService, serif; font-size: 11pt; color: rgb(0, 0, =

0);">

I was looking at your website and noticed that you aren=92t at the top of G=

oogle search. I can fix that for you_ and make your company more profitable=

.



mbeddedFont, Aptos_MSFontService, serif; font-size: 11pt; color: rgb(0, 0, =

0);">







mbeddedFont, Aptos_MSFontService, serif; font-size: 11pt; color: rgb(0, 0, =

0);">

I can give you our Complete SEO Action_ Plan along with a customary reach a=

nd add great_ value to your product/ service.



mbeddedFont, Aptos_MSFontService, serif; font-size: 11pt; color: rgb(0, 0, =

0);">

We can place your website on Google 1st page. Yahoo  etc.



mbeddedFont, Aptos_MSFontService, serif; font-size: 11pt; color: rgb(0, 0, =

0);">

I may send you a quote_ & price_ list? If interested.



mbeddedFont, Aptos_MSFontService, serif; font-size: 11pt; color: rgb(0, 0, =

0);">







mbeddedFont, Aptos_MSFontService, serif; font-size: 11pt; color: rgb(0, 0, =

0);">

Waiting for reply....



mbeddedFont, Aptos_MSFontService, serif; font-size: 11pt; color: rgb(0, 0, =

0);">

Thanks












--_000_OSNPR01MB7602C88444EACF2B912BDC22EB50AOSNPR01MB7602apcp_--

Web / SEO / App spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 18 Jul 2025 07:09:01 -0600

Received: from mail-japanwestazolkn19012053.outbound.protection.outlook.com ([52.103.66.53]:33485 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uckoz-00000000CIZ-0OMy

for dave@doctor.nl2k.ab.ca;

Fri, 18 Jul 2025 07:08:42 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=dBEARKyhEfXKnhVMZir/RYNGFbk8tbWtgT9Y6VjGU0/ONo6UX9aAA0CX+pczlXN8fBDad7zCshJKM2/U5tSTxWNA4sACSPR04NqQTxm5vI90Rz+GCl5p6fGBRRxutytgS4kMnoayC9kLG45bE0cng//O3GNoFKFUw0J6lIxkjJUaz/fya3JL21kw8vU9VQTybAdmHPd/8JEu8lyTlT93XyuYtP3f+Ai55rn4wdRks3eLNpPQ7AQwRP+WbVpiH7uUcMkQw5ddGFQmlMbhJFs70lbdnRr9PS6djna8JoWDvVaSBl7YSfPuUhlOXPLgJHJNvK9P4a2cL10GOTXiEteaVw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=T46ZhhYPP4DNJKPIpBf/KqduQoXH96mfQ2GH4dKWf6M=;

b=BV0UJ5QX+jrLCUgK6EOOGjaRw6FUmQtGDlwN2vLyTTuCexfy62Csah/eMfnTzAf305/POav2+0yDIIgF8Xr/7tik/DrNsmb35aSyRjTyhj2zcL6CVcqex+7nsQWMirhYNfDxtiBoET47/DtKbFYyRBq4hCenTgJAnPggS2raPkskni8z29YUA2iL24RroJrIgYb874PjpkMkNGbe7X8znW8JHz2i7bjCL5wDucnjanpNb402jZKierXLIpzkU7fa89xN6yEVOZcjykns+0kEWz/bCPnFdKvTI2b6KSB9K39la0vMkl1l882/scYf3lz/qvW+sAU58AZQSG852Nh75w==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=T46ZhhYPP4DNJKPIpBf/KqduQoXH96mfQ2GH4dKWf6M=;

b=cCc80mgVbS0fWA4oxj+4EtKRS68UyJVEPgWkVDFx3UfKJVUQgDQi0hfHErM7fz97Ey7240aVBD9LYjCVy2UAAN+QA/a86mn/LHCSVd/8OGjrBItqx35zSKcnFDmk21PCYbgavi9dhL2+W76S759y6EuMUVUYxnRYfJaDSf7zfO2kmqqfbxkcmfROA6bgo5RgAUjE1d0xkeDIklZR63kYKIp0G1CldhdMaPhI89BlsT9VcIp0Qn07hqlmeqX+RKk4z0eHM05doSI6ncFfxcwIoeTXslmzJxOfKChliiLpSHaunUhDaG+IkwaL+c/qpltlAGrpjqWFdKJRG7pKqTm3Yw==

Received: from OSNPR01MB7602.apcprd01.prod.exchangelabs.com

(2603:1096:604:317::8) by SEZPR01MB4922.apcprd01.prod.exchangelabs.com

(2603:1096:101:af::9) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8922.39; Fri, 18 Jul

2025 13:05:50 +0000

Received: from OSNPR01MB7602.apcprd01.prod.exchangelabs.com

([fe80::d416:413e:aa76:c354]) by OSNPR01MB7602.apcprd01.prod.exchangelabs.com

([fe80::d416:413e:aa76:c354%5]) with mapi id 15.20.8901.023; Fri, 18 Jul 2025

13:05:50 +0000

From: Leah Ward

To: "cr0628071@gmail.com"

Subject: Re: Cost,

Thread-Topic: Cost,

Thread-Index:

AQHb9+ORtsr0IWQLVUmdu56cmdgHHLQ312/HgAAAUL6AAAA2H4AAACDzgAAANjuAAABcN4AAADt1gAAAMTWAAABWvA==

Date: Fri, 18 Jul 2025 13:05:50 +0000

Message-ID:



References:



















In-Reply-To:



Accept-Language: en-IN, en-US

Content-Language: en-IN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: OSNPR01MB7602:EE_|SEZPR01MB4922:EE_

x-ms-office365-filtering-correlation-id: d5803602-b876-4fc9-19d2-08ddc5fbd1e9

x-microsoft-antispam:

BCL:0;ARA:14566002|37102599003|461199028|15030799006|15080799012|440099028|41105399003|39145399003|3412199025|40105399003|39105399003|102099032;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?u780AeSJF7VHqXEsC1t/PeNkyZf6VnLf+92LOeCHmmbDwrRZ3aApln45?=

=?Windows-1252?Q?odRHh47ktvxWdiWCXIXV2AE3yN8JKtuG44uLLWFZbH8Npffp2e0/wk4/?=

=?Windows-1252?Q?kUojcb7C8jtKixe11NuQRF+U0YQw4zSDxGKmkrqX2J1RMCdzAEpFzwm6?=

=?Windows-1252?Q?Du/5pIc9jPqDdmnA9lFFT2NhPSWkW3/VR8O0A72/KHa+Z2bTHeJFQUmu?=

=?Windows-1252?Q?vuTrgXD+W8hFXkKv08MVgXs7CrsvFC2Cp5yTPwA8SvKhpFZ74VwEJkps?=

=?Windows-1252?Q?Y875E48FeLZ92EVtBbPGy8r937osKWnao07uJ7wnalT/BekHVztLWySB?=

=?Windows-1252?Q?kPL/dLVvoROttRGK6TCLS1CC5BsTlHDz6CmcqDLdaimB72sjUFIZm0In?=

=?Windows-1252?Q?+a4ce886zAPPJgV7on695EExKrRWLzwgnnFSRaw+9gSwB3Tx4LrE9v6j?=

=?Windows-1252?Q?ua1OQS7hveJPjbkmR/kW0Xpp2SD2C1CQOP4hbmlA6DQDoeBlngIpht+P?=

=?Windows-1252?Q?L4xJcQsaeWbOWGsPRKBKTU2anYtwBSLTdYwvk9oi/bDX6NFqK1felLan?=

=?Windows-1252?Q?JmswKkkqk7uqi51j0TVqBHpY05YgvVOMIz9LCZWz5CqlHp/WWBu0S3rC?=

=?Windows-1252?Q?jX18Sf4xSJ18xbTSrU9VVPuen204Y+++PgHiiyeBp91aDntipJ8RmWEt?=

=?Windows-1252?Q?00HzvhjvDjMhLvptWQKa9AJEw5pP9XAE7aaALU2LRDGjsC0xkX3bijXM?=

=?Windows-1252?Q?qmueoKN/PM8AcjHQEqn+2ZzYNxNS+DIlHDa/q4AmhJC/znI/gKaJ+SUo?=

=?Windows-1252?Q?v+4PbzNHenAV6pSS9ALr8kGH0MSIM+oAweuG9fmIBJ6K8A93sqWFz/oY?=

=?Windows-1252?Q?7VBtJXhKayGBTHZRy5zOQSpVdqkctjQc3tD+eYfyKVf5M+8cw+7AeO2t?=

=?Windows-1252?Q?ieYXHAqFF/Xi1Ub3PC7U9stSAwQ7l6kpYfeUg1K+WVyTOaM/NMM+d5ZY?=

=?Windows-1252?Q?AuZjVwh1a1vOXKxr2IQZdMHzG+vOAT4mJzHUhvcEpd+EMyPFiHfaGCW7?=

=?Windows-1252?Q?w3pB9Z7JBLlI8cNa5ommHcN8Mk+CdtD9O0WDzmEXeuK2JTLissPSNV2v?=

=?Windows-1252?Q?OEO/4aZgoPSEfDyximvHAnEjRbtN/oNyYuTI35npoGsWuRPbktF9zTcA?=

=?Windows-1252?Q?s9Bu8I2UoPx5rVd4M05ELOmFd4RAjlgYgqKZ6fwmhWf+PC/+Ho9cU9of?=

=?Windows-1252?Q?DMHOFH/TpDxxP0wrTTI=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?qAd2zss+5PjM16gj3J5URdYRNB7mxIHJOoB1BBh/nyCQUUAr0TVAhYyU?=

=?Windows-1252?Q?j8EkNUnSvCcDaSbmULX3lfVhs72DIJCFpIFkY/giDVVGhLH3AkyKduWh?=

=?Windows-1252?Q?R5Vi+3xysC7NQUE7qEhU+Hjuy1Nt3pb/5UCAYvCiSa4tPpGhC+AM1Ri8?=

=?Windows-1252?Q?kxfFOGj+jglOXSGQlCNae5cjrxKTdmNQ57lvvJnFOPikm39SMM/g7GYw?=

=?Windows-1252?Q?8y/HRoYFop7OrWRWpyDMg6/9Faiz3NqnXRnWYpbR8LDhgKY2hPz2ppKs?=

=?Windows-1252?Q?PfiPMJkojvLOYRIvINf/SRDd0G80pr4+cRYeQKETFSn1OI+zCy4KFmT4?=

=?Windows-1252?Q?R13xYaQkWD9gDAyRKLV623S3zLg1tKlP2Sek25G2nVOrW906hdEh3Omf?=

=?Windows-1252?Q?AbPnHeDPdeFKD1rTq6BtYLZFmbt9u0NvHPqUGGhBPHji2/15avUhEwqB?=

=?Windows-1252?Q?kHGtD5p89LuFbhD4kifl8GIiKNJF3JE7jilnuPqfxnNK8DGeia4UbcgA?=

=?Windows-1252?Q?E8RFuuGQCs1Qq1xdqD8fwo2PnohoqxaGT0Xu9PYUYOTJl3KOTMLR5bK7?=

=?Windows-1252?Q?8BuikeqCYBgmeRxwBff1aofs/6gUoukqpy0kyZ37emrYOo7aDVVyS/7I?=

=?Windows-1252?Q?TZluOKAF2qH9nC0EpjrWMk0cJ1hCxjaNg9JiM3KwB9xtTycwrSefeSPv?=

=?Windows-1252?Q?PoltVqGPCLMRn+yq2S35FeOKjiEGt7r2UvWz5f5yVN2fo0zGnnhRZgcK?=

=?Windows-1252?Q?qgIfszJvo+Mr+k06bK6tx37AGJprugAMn7sH7Nk8CuFqQ4ai9kYut3oF?=

=?Windows-1252?Q?SFNb9WogByHEbi2By/ZCflMfRlPM5Kghy9fUpJUmG2skUXAaro5VoZOt?=

=?Windows-1252?Q?oPtravz23mK/OPcNNY6g64Z5lfxk2VDpJwzUoRvyoi0a6/iNliElNDB6?=

=?Windows-1252?Q?Sysn9ya9r/U0ODgwjfRh7dWbxwtUPLJowJqJduuJ7YtNEC8LFzNV0qSl?=

=?Windows-1252?Q?gM/x2oso/TBQ2TfzWLOCWDziaISk0MmdlS84G3R9fz7IYJZiZej5AzyW?=

=?Windows-1252?Q?z6QfhDjA/KuQn4w33Li2c+MfGVEQ2wnuz3ZXmWid+1hvpBXtPFPnejrd?=

=?Windows-1252?Q?YjXi+rlIWZz3pG9RzwwFiJNsO6KW8Fl9IV/P9ChrpH62mz8wzg5bcF5o?=

=?Windows-1252?Q?yBDqbgWIG+uypbUaDqIGHtN99cPSTjOQDqAviI60opq/f+gGCpo8jUi5?=

=?Windows-1252?Q?Ro2Bqz7k+tdjwMbHPS24SmzHYFDXIc9x7jvbwAOgIvtPCLFDJTGZeGvZ?=

=?Windows-1252?Q?I/zQlb7SXARrrxOCKxHxhIyuaVQ=3D?=

Content-Type: multipart/alternative;

boundary="_000_OSNPR01MB7602CF6DDE5DEFD076370DD4EB50AOSNPR01MB7602apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: OSNPR01MB7602.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: d5803602-b876-4fc9-19d2-08ddc5fbd1e9

X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Jul 2025 13:05:50.5428

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR01MB4922



--_000_OSNPR01MB7602CF6DDE5DEFD076370DD4EB50AOSNPR01MB7602apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



I was looking at your website and noticed that you aren=92t at the top of G=

oogle search. I can fix that for you_ and make your company more profitable=

.



I can give you our Complete SEO Action_ Plan along with a customary reach a=

nd add great_ value to your product/ service.

We can place your website on Google 1st page. Yahoo etc.

I may send you a quote_ & price_ list? If interested.



Waiting for reply....

Thanks



--_000_OSNPR01MB7602CF6DDE5DEFD076370DD4EB50AOSNPR01MB7602apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">


tos_MSFontService, serif; font-size: 11pt;">Hi,













mbeddedFont, Aptos_MSFontService, serif; font-size: 11pt; color: rgb(0, 0, =

0);">







mbeddedFont, Aptos_MSFontService, serif; font-size: 11pt; color: rgb(0, 0, =

0);">

I was looking at your website and noticed that you aren=92t at the top of G=

oogle search. I can fix that for you_ and make your company more profitable=

.



mbeddedFont, Aptos_MSFontService, serif; font-size: 11pt; color: rgb(0, 0, =

0);">







mbeddedFont, Aptos_MSFontService, serif; font-size: 11pt; color: rgb(0, 0, =

0);">

I can give you our Complete SEO Action_ Plan along with a customary reach a=

nd add great_ value to your product/ service.



mbeddedFont, Aptos_MSFontService, serif; font-size: 11pt; color: rgb(0, 0, =

0);">

We can place your website on Google 1st page. Yahoo  etc.



mbeddedFont, Aptos_MSFontService, serif; font-size: 11pt; color: rgb(0, 0, =

0);">

I may send you a quote_ & price_ list? If interested.



mbeddedFont, Aptos_MSFontService, serif; font-size: 11pt; color: rgb(0, 0, =

0);">







mbeddedFont, Aptos_MSFontService, serif; font-size: 11pt; color: rgb(0, 0, =

0);">

Waiting for reply....



mbeddedFont, Aptos_MSFontService, serif; font-size: 11pt; color: rgb(0, 0, =

0);">

Thanks












--_000_OSNPR01MB7602CF6DDE5DEFD076370DD4EB50AOSNPR01MB7602apcp_--

Chinese medicals products spam from Microsoft outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 17 Jul 2025 19:27:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ucZrl-0000000064E-1yQs

for dave@doctor.nl2k.ab.ca;

Thu, 17 Jul 2025 19:26:25 -0600

Resent-From: The Doctor

Resent-Date: Thu, 17 Jul 2025 19:26:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013083.outbound.protection.outlook.com ([52.103.43.83]:4594 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ucZ8V-000000001Qu-2mDM

for root@nk.ca;

Thu, 17 Jul 2025 18:39:55 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=x0vjvJSyg6y52Z36+APR/xJ+XwX9bvkTi8/EDSxBaNvayshwOWCnr0ZHdoaxqlARg4cd/2E3c8/EYAtoKvLGAFHMV9Dm4KvcXFFPhA6cDiA1SDntB1mIc/Jx89fTsDxwligLq+87AP7GOfnYWwSp45QBS7eT35VYeyyXC0lsmoTBcE4589KYSFNm6WdpzaAKpH6P2yMP42GxDwmJslT0G3jxsCHjKaXHonEIpfEZW0iaDlzYTrrhHrxQ5z3KIBS0pPm5hSCCwFZ3NzBwilVMflOjLOYTf08V9d5nmL60/eqLASdl1q9T2B9Jdv/q7Rj73daHhnjemxIgtcMo/8DxwA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=oY14UkTIuj6HZzXZ8o1vTPCh+Slv0JlHtSHaLlIsl7Q=;

b=j3Ga6xBby+qH8fBYWvR1q3Hxj07H4UztEP35bRllPixQhRg36dXkXFrZp9nmxqnkqhbY5GA1BY0iwKY8itD6CiDnHSXcL+RArfWfW+PWxol8tyOD5j0PX2IHWNllcWmeNAJUzf4GwgGiC5OaawGOw7k/GMbukeE0XP0sJav8etqcEcewZYaKNFPt7nQcO6k9g8qzmyCnRZ4o5pHi+Vf/GGaIIAj3yrteQUl2BUYt0+23Nn8TJBRXK7omnyMUCf5i5TEybVb3eG0/BMF02b94Cw0PLwkqHCI8fEhWNCHAMJ6/luKBOEafECjlho2K3Ezo5cPcKaYlwgoltC0QsgxKGQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=oY14UkTIuj6HZzXZ8o1vTPCh+Slv0JlHtSHaLlIsl7Q=;

b=iZ4EN8xLpibV0d2YYd9mqGj0vRq0P9l1O+8g+cTStlsbtEmI7IU73jTzJy4u4tKKAa4kHThUDip9efus8EbFnjIpD6imdnWAGfKiK8xfq/EJHpiwCavPeQOTSTPbQEIiMkYHbs/4sabeEc71vRUAQgiBFJrTHXEzFa3gNSsPUM95semsjjmHh9GVqQ3A+jTjh7M76vQ9CZnbvJNLYBsGWVJVHKUp399W0YUrj8B7xKc2N0J9vRvDk9e9e62H35iDsHxdz1TtZGU61+ZkXcXN/6SOOOt6Aw+YIryLld64zlMcWfBcrk4S2Ez7IdRLt1vZDBAYftpaVt/va9bdvwCZww==

Received: from JH0PR01MB5634.apcprd01.prod.exchangelabs.com

(2603:1096:990:1a::14) by OSNPR01MB7294.apcprd01.prod.exchangelabs.com

(2603:1096:604:31a::12) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8922.39; Fri, 18 Jul

2025 00:37:22 +0000

Received: from JH0PR01MB5634.apcprd01.prod.exchangelabs.com

([fe80::65a6:3ca2:f243:5751]) by JH0PR01MB5634.apcprd01.prod.exchangelabs.com

([fe80::65a6:3ca2:f243:5751%7]) with mapi id 15.20.8943.024; Fri, 18 Jul 2025

00:37:22 +0000

From: G Y

Subject: Medical Supplier

Thread-Topic: Medical Supplier

Thread-Index: AQHb9rVS7M9xmSauVkO5F86YYgMfyg==

Date: Fri, 18 Jul 2025 00:37:22 +0000

Message-ID:



Accept-Language: zh-CN, en-US

Content-Language: zh-CN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: JH0PR01MB5634:EE_|OSNPR01MB7294:EE_

x-ms-office365-filtering-correlation-id: dcf426a0-12bc-4912-d884-08ddc5934268

x-microsoft-antispam:

BCL:0;ARA:14566002|15030799006|15080799012|37102599003|7071999006|461199028|51005399003|39105399003|440099028|31055399003|40105399003|3412199025|102099032;

x-microsoft-antispam-message-info:

=?gb2312?B?UFdtVEtkSmYyTmMzRG5Mdlkxdk5SdmVka1Yyc25xdEdPcGEwRGZiWTVrT3pT?=

=?gb2312?B?citxNTBUT0FpdVdBVEE0TkdtRE9MRGFwU3k3QnVSOGErNStrSWswQmpGMWVF?=

=?gb2312?B?RWR0NjZFVlczRFRmeE51NnV5NEVTUHdKbjZQNUdTTko4V3VOOTkreHBsblZj?=

=?gb2312?B?elk2NE9PWi9WQVBKUUVLdGpVbWtXcFNZdG9ySTMxNEVqeGFvVW9LQjBwV2Vz?=

=?gb2312?B?MmErVVlpcUhsRGh5aHVRYWJhMU9Jb0JtRE5LSFF2dkpNT01JOGJSa1d6OXhP?=

=?gb2312?B?NkFqUTRSZFFCVFlFR1pPdVc1VktTMDlyM3dNUFJ3SHR0aTdVeUJvRGkrT29h?=

=?gb2312?B?LzlpQTRmK1BvaHl5cUlEYzlCRXg3ZVkvYVBhTWVFZ0YyODhuSHBXS2p0bGpM?=

=?gb2312?B?cTh3Wkk2Wkl0RTVLU0hncE9xNGMyU2tNOCtNdDlYNkkvbmxadWpINjllS1Rt?=

=?gb2312?B?dDNxZkoxdndhS0dwdUk5QnB6QTk1MWNNZVJTWXQxclJ1bkM3NThQcWdLdWdj?=

=?gb2312?B?UnAwQTl2cXQvMmNkTWJiT3FBQnZuczVRSis0cjdRL1BVa0pWVlI0Y1lIZnc5?=

=?gb2312?B?dVh4NTBaSFRkUVYzdi9WbUZnbnhlb3ZaUVZQVWE5NFZlTnRub2ZtNldaYVVm?=

=?gb2312?B?eXZ5U1U5dmlpQXZVYWVTNUxxdC9XcVVWR1RObnR2M1JuRGorbVV5a1VlcTND?=

=?gb2312?B?SGI0V0hWcUZoZnY2WnhJRzN0Y3RxM01DTWJZOGUzUktZRzdJd1puZkJDbUlI?=

=?gb2312?B?NjQzcnVoMDA3SlQ5VEl1aG1GeE5vbElHZzc0WWc2L0dDNFRHVWNhMkllemFq?=

=?gb2312?B?cG1Zb3pmYnErUTVVeHpEQllVMVRuZDdEYzU1ZmhkUnRUSGhMVEZXaHhZWjFL?=

=?gb2312?B?eU92M2xJOUk2TDZtWXdwRVhKem5QNjh4bmFpY1NIN1MvbUNUbmZPNlpXSHZq?=

=?gb2312?B?QjJiOUVyTlEreW1WaTVacjFwQWUxWU8zNGtFZDhrOVh3SjN1NnluK2t4MEpm?=

=?gb2312?B?OEJxZ2dBVXVsMnFvdWRucVlXWUI3V3MvNUpmYlI1UjVuT2pNWWphN3NwOTlF?=

=?gb2312?B?YjFFQzl4ZGVESE1YK1Z2NGo3SGRWZFlzanJ3T2I1QmRyd25JWitRRjY2ODEz?=

=?gb2312?B?TXZ1VEYrNk15c3VwVDl0OUZ1UW5DRFBVMjd1VlE5ditsSE1KUnd4SEVEMmwr?=

=?gb2312?B?aHJzWlFQazB2azBzbWVpNVBMMlVXTkVweGllTzJPZ3FkMi9lY2x3K2RNbjRp?=

=?gb2312?B?c1gyMVd1Um84WkdXNXIzSUhBZmdiM2xmREJOT1dYTVdFM1Y0Wm8xdWRWTTBR?=

=?gb2312?B?UVVYdXFieUNUeXFhOWIyaXJncjBRRFRIbXE5T1hhV1llMTBrMTNha0hoT0M3?=

=?gb2312?B?R20rL0VDWmQ1WnF0MnNpNmlJR0lFbnVJOTAvUWdCVk1pNGdhZ3YwMDQwdzBF?=

=?gb2312?B?UEIxeW1xOVlIeEVmUHZCQ1NWeUJXQlJTZHo0SnF2NHJDaWErRVI4M3luaytG?=

=?gb2312?B?Vkc4MGxtUXZpTnp0K29rYkRCYVJkc2JhZVM0d1Vkc2hGWjNRMS9xbGhWakxk?=

=?gb2312?B?WnJBVW5raGFDNStraVA4ak94cy9IcTBqZHkyMXpxaXJGaHBHdlpwT1JObkE5?=

=?gb2312?B?MEFYaGVzc1hud1BPMUdsNFg3UVFwNVE9PQ==?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?gb2312?B?V2tQMFZXZXFxOUlBb2JCS3FwcjdDYkpmWDdGQis2RmdqVkVXSkdRaWRJNExT?=

=?gb2312?B?aDBiOHRPbTRpQ3dBUzZmYmRRZVQ2RXpRRmlDY2NaanRnaTZjaVBBL0ZrMXpM?=

=?gb2312?B?TVNsalNLT2lXdHA1OEdtcjNZM2ltb2dZSUJUYzh6c3Q5NStjWDhFVXUvcU1M?=

=?gb2312?B?YTlRbFI5Y0dzTnpQbEJzSWY0eHpMTHJyWWhKL0I4eHg1eWxpemg2SnZOdDFF?=

=?gb2312?B?aTg5VGpJUElkdk1MUkV5SkhZUlFtYkYrOVdZdWRQSUV4MXR1Q05HS3N3cWoz?=

=?gb2312?B?TlVKMTB4aW1pV1k3dG9RTTlzbWZVZjFoUjVoY1BlZS9Pd2JsWldvWlRpVGJw?=

=?gb2312?B?ekNEUWJDZFlFMi9RK2U4RnFMcHNCdC9tS1I4VXdvaGlzNVNnZTRKZ2xlRkZX?=

=?gb2312?B?bE5XTHJxOHp3N1oxMjlBSTNJMzd4WHZjbHZ6T3RDaEdQMFhXTVFxeHFZbi94?=

=?gb2312?B?QWNLOHBzSkpuT2hqOURXcUsvZE1VY3lQd2ZhR1ZNOFRNT0thZlBDVmNwWnJn?=

=?gb2312?B?ZVBYTENWS3FlODNXNDFySEZqWXZEeUV6SVBFd0ppZ3R5Tlk0OEVEcU9kU1Mr?=

=?gb2312?B?VTVFOC9XY1RObWFjdTAwUlNhNG1Xb2hVWkRab3czVmZ2RWkvUHBOWXV3M0Vj?=

=?gb2312?B?UC9BREh5Rm8xNGpsc0J1UkFMWmxPZnN1STFtLzV4VVNvV0lZc2FmaG9SVUVD?=

=?gb2312?B?MFBiK2kzWFlHbW8xbUFYQjI5dStOVFRWdmRZZUs1K3lDOVU4c0hnWHBidU5G?=

=?gb2312?B?QTRnTVZtVXNJWXdZYmtoa3lwUm9iZTZvM3grZEF6am1tVUNWT1hrUlNKallO?=

=?gb2312?B?djZsRE94N1RUdGlQdENEeWs1UHlOOVBJWmxmTHVFM1ZVWkIxVVpRV0p5V3V6?=

=?gb2312?B?ZFc1OGpUd05paHNCbGpZbWZqVkJUWlJyNnovSmZReW0rdURYSkZvMVVJZVl4?=

=?gb2312?B?UlZDUmRJaXBvYWZ1MUxidWNuRkFXTHVPcmpNZGE2d3lJdm1odjIyTEdKUnky?=

=?gb2312?B?Wk0rMDlPZFRSN3N2UzBEWXlwYlc4OEhTcHlUSXpDTXhLZHF4aFpuOWhlRExY?=

=?gb2312?B?YmtBaXpERnlyMTQ4M1VoU01wa0MyRGhEME43MVJjNVA3MUJKWW1EdVZiS2Nu?=

=?gb2312?B?c251bnQxSlVpcEJzUUI0L2pYM3lKWjJ2cjBmM3FkWnRDeEpZdmI3c3plUElm?=

=?gb2312?B?aGNFWWEyRXZWNVRRVzVxdVlYNzhKdm1hTDltK2tEUDJSYmVkenVSZVUwY1dS?=

=?gb2312?B?b2VNSk1UN1BqRWRETk9CR3hCbE9Gd2lrRE1VcGZBR3Z4UjNDUGUvQ01OSEla?=

=?gb2312?B?NVhtNzk4OUd6UFhyRTZqN1lHTzZCZW9sejMwTkkvV0YrMm44bzAwOUo2aDVp?=

=?gb2312?B?ZDh0ZXZCN0dwZEJQT1NTNGxPcFgyUTdQd0NXV3BtM3BsSURoY0pXR3ZOOVBQ?=

=?gb2312?B?RzNzRXAzRFVuOHY3bzRFWEJiL2l4bi9DR1NUZW5ValUyUkx3eDJuTmFaemJC?=

=?gb2312?B?MzY4TE5wSnFHT1VBeGdXaTdGaEE3OFV4eHc5Nk9DY1liaFAwMXNQekd3OGRW?=

=?gb2312?B?ekZBWE5jSGxFTTFaQWlMdG5qeG9JdHRZTWJwSnpZQ0V0UmI1NHBEclN4Umhp?=

=?gb2312?B?RmZjNVdBVUd2OElZZ0YyTEZ6YnFWSUE9PQ==?=

Content-Type: multipart/alternative;

boundary="_000_JH0PR01MB56343C496F152990234FC018AC51AJH0PR01MB5634apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: JH0PR01MB5634.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: dcf426a0-12bc-4912-d884-08ddc5934268

X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Jul 2025 00:37:22.1252

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: OSNPR01MB7294

X-Spam_score: 5.5

X-Spam_score_int: 55

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi There, I hope this email finds you well. We are a leading

manufacturer and exporter of the Medical Product in China. Our services include

customizable designs, labeling, and packaging tailored to y [...]



Content analysis details: (5.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:990:1a:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:1a:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:1a:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:1a:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:1a:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:1a:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:1a:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:1a:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[52.103.43.83 listed in will-spam-for-food.eu.org]

[52.103.43.83 listed in will-spam-for-food.eu.org]

[52.103.43.83 listed in will-spam-for-food.eu.org]

[52.103.43.83 listed in will-spam-for-food.eu.org]

[52.103.43.83 listed in will-spam-for-food.eu.org]

[52.103.43.83 listed in will-spam-for-food.eu.org]

[52.103.43.83 listed in will-spam-for-food.eu.org]

[52.103.43.83 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.43.83 listed in dnsbl.ahbl.org]

[52.103.43.83 listed in dnsbl.ahbl.org]

[52.103.43.83 listed in dnsbl.ahbl.org]

[52.103.43.83 listed in dnsbl.ahbl.org]

[2603:1096:990:1a:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:990:1a:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:990:1a:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:990:1a:0:0:0:14 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.43.83 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.43.83 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.43.83 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.43.83 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.43.83 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.103.43.83 listed in sa-trusted.bondedsender.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.43.83 listed in wl.mailspike.net]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.103.43.83 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[52.103.43.83 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.103.43.83 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[gysales71(at)outlook.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[gysales71(at)outlook.com]

1.2 MISSING_HEADERS Missing To: header

1.0 CN_B2B_SPAMMER BODY: Chinese company introducing itself

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Medical Supplier



--_000_JH0PR01MB56343C496F152990234FC018AC51AJH0PR01MB5634apcp_

Content-Type: text/plain; charset="gb2312"

Content-Transfer-Encoding: base64



SGkgVGhlcmUsDQpJIGhvcGUgdGhpcyBlbWFpbCBmaW5kcyB5b3Ugd2VsbC4NCldlIGFyZSBhIGxl

YWRpbmcgbWFudWZhY3R1cmVyIGFuZCBleHBvcnRlciBvZiB0aGUgTWVkaWNhbCBQcm9kdWN0IGlu

IENoaW5hLiBPdXIgc2VydmljZXMgaW5jbHVkZSBjdXN0b21pemFibGUgZGVzaWducywgbGFiZWxp

bmcsIGFuZCBwYWNrYWdpbmcgdGFpbG9yZWQgdG8geW91ciBzcGVjaWZpYyBuZWVkcy4NCg0KSaGv

dmUgYXR0YWNoZWQgb3VyIHByb2R1Y3QgY2F0YWxvZyBmb3IgeW91ciByZWZlcmVuY2UuIElmIGFu

eSBpdGVtcyBjYXRjaCB5b3VyIGludGVyZXN0LCBJoa9kIGJlIGhhcHB5IHRvIHByb3ZpZGUgYSBk

ZXRhaWxlZCBxdW90ZS4NCg0KV2UgbG9vayBmb3J3YXJkIHRvIHRoZSBvcHBvcnR1bml0eSB0byBj

b2xsYWJvcmF0ZSBhbmQgYnVpbGQgYSBzdWNjZXNzZnVsIGJ1c2luZXNzIHJlbGF0aW9uc2hpcCB3

aXRoIHlvdS4NCkJlc3QgcmVnYXJkcywNCkFuZHkNCg0K



--_000_JH0PR01MB56343C496F152990234FC018AC51AJH0PR01MB5634apcp_

Content-Type: text/html; charset="gb2312"

Content-Transfer-Encoding: quoted-printable
















, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: black;"=

class=3D"elementToProof">

Hi There,



, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: black;"=

class=3D"elementToProof">

I hope this email finds you well.



, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: black;"=

class=3D"elementToProof">

We are a leading manufacturer and exporter of the Medical Product in China.=

Our services include customizable designs, labeling, and packaging tailore=

d to your specific needs.



, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: black;"=

class=3D"elementToProof">







, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: black;"=

class=3D"elementToProof">

I=A1=AFve attached our product catalog for your reference. If any items cat=

ch your interest, I=A1=AFd be happy to provide a detailed quote.



, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: black;"=

class=3D"elementToProof">







, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: black;"=

class=3D"elementToProof">

We look forward to the opportunity to collaborate and build a successful bu=

siness relationship with you.



, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: black;"=

class=3D"elementToProof">

Best regards,



, 255, 255); margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSF=

ontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: black;"=

class=3D"elementToProof">

Andy



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">












--_000_JH0PR01MB56343C496F152990234FC018AC51AJH0PR01MB5634apcp_--

President Trump spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 17 Jul 2025 13:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ucUa9-000000004j3-1q0m

for dave@doctor.nl2k.ab.ca;

Thu, 17 Jul 2025 13:47:53 -0600

Resent-From: The Doctor

Resent-Date: Thu, 17 Jul 2025 13:47:53 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-mw2nam10hn2215.outbound.protection.outlook.com ([52.100.157.215]:14720 helo=NAM10-MW2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ucSJb-00000000Mib-2xUB

for www@nl2k.ab.ca;

Thu, 17 Jul 2025 11:22:53 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=R2WzrOl3k3uG3Bj9LzY8paSeLf+yGp/oYX/njFKKNy+mH2DnwNsNJ/pGK+ol25t1AuISIfZPQuRUSEkkJstrSQOXoYmvy8hjr27KFAstE48xRlgxrDkmg3vfkEAOrEoiqtHFXol6Qfn1u+DP8WtMLia9V3f3s6CVOLuDEpAwQNndc3PhU6/943MUUFaz8pRJlI0SCkjFXwj0sy8VVdVWBQdq99Zb1Od/CKGdagcAaV8BMj0+EqPZli5PzL6q9XH+q20H796uCz/9JE7nZp0qAQVapxDxKSaiok24W9FHxpJFNB/65aZBfpGydVh/eF/ix3/BYkuUhVRcTxW/z/BwLA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=hifM32ivcPg4VGgdbCCSq1hQY0LCTm38YM/BR3HMyI4=;

b=v1/FVGaJjaI0zAkX+8ZRX8s89ASBuNWxTxeFVlTYcZ9YHAcVi8B3+2X+eGWQZ366BQvt6ZKCpOvCLuyBwBBsReG4LnA4O1gGWcniOPv2VINewGfAQijgww4gSEFDdDE7gx+gE1RCSfxu0RJE8qYsGyall490IghU8YdvjgMHmySzV9RpQMYvTlDkj5byrjkJcL4JXcssA86HhgW4gSYlzGmki5AXfpD1hQUS0nb/+LSW/Ak2+Z+MzuQMq3/autrac9+eDNRrSQwlls4W5XxcraS//PewAPml18/E54wDTTALocDbzqPsol8nl3h7boJ0gEs2kIrQvYC9A1ccbkFFAA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=permerror (sender ip

is 204.115.222.97) smtp.rcpttodomain=gmail.com smtp.mailfrom=att.org;

dmarc=fail (p=quarantine sp=quarantine pct=100) action=quarantine

header.from=att.org; dkim=none (message not signed); arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=Renownhealth.onmicrosoft.com; s=selector1-Renownhealth-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=hifM32ivcPg4VGgdbCCSq1hQY0LCTm38YM/BR3HMyI4=;

b=s/hYRCiH4POgLRGgLVOg2jOkUaRF4XLm5hIBz0LZlyE98vg+IdOl99/ygXyqmOsWnmxkv+UYZ9EdSn0itepvQ357f6oHUHXaRZm0NLuv1w8m6po4YcFsdGdtDciIR8k3aN0AI3fwFtZ8RjvBi8CbHy4xWh3h73gFnnAtH9k/oO0=

Received: from MW4PR04CA0331.namprd04.prod.outlook.com (2603:10b6:303:8a::6)

by SJ0PR16MB5040.namprd16.prod.outlook.com (2603:10b6:a03:43a::15) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8922.40; Thu, 17 Jul

2025 17:20:36 +0000

Received: from CY4PEPF0000E9D7.namprd05.prod.outlook.com

(2603:10b6:303:8a:cafe::7d) by MW4PR04CA0331.outlook.office365.com

(2603:10b6:303:8a::6) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.20.8943.19 via Frontend Transport; Thu,

17 Jul 2025 17:20:36 +0000

X-MS-Exchange-Authentication-Results: spf=permerror (sender IP is

204.115.222.97) smtp.mailfrom=att.org; dkim=none (message not signed)

header.d=none;dmarc=fail action=quarantine header.from=att.org;

Received-SPF: PermError (protection.outlook.com: domain of att.org used an

invalid SPF mechanism)

Received: from mail.renown.org (204.115.222.97) by

CY4PEPF0000E9D7.mail.protection.outlook.com (10.167.241.70) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.20.8943.21 via Frontend Transport; Thu, 17 Jul 2025 17:20:31 +0000

Received: from RWN-EXCHPW101.whsnv.net (10.40.13.29) by

RWN-EXCHPW101.whsnv.net (10.40.13.29) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.1.2507.55; Thu, 17 Jul 2025 10:18:01 -0700

Received: from [196.251.92.128] (196.251.92.128) by RWN-EXCHPW101.whsnv.net

(10.40.13.29) with Microsoft SMTP Server id 15.1.2507.55 via Frontend

Transport; Thu, 17 Jul 2025 10:17:57 -0700

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: CONGRATULATION ON THE RELEASE OF YOUR COMPENSATION FUND

To: Recipients

From: "Mr. TRUMP"

Date: Thu, 17 Jul 2025 10:17:53 -0700

Reply-To:

Message-ID: <375d062e-1a61-4d40-8da2-9dad4114ffcb@RWN-EXCHPW101.whsnv.net>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: CY4PEPF0000E9D7:EE_|SJ0PR16MB5040:EE_

X-MS-Office365-Filtering-Correlation-Id: da5f9907-a56d-492e-7744-08ddc5563bb0

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|35950700016|32650700017|376014|7416014|82310400026|48200799018|61400799027|62346030;

X-Microsoft-Antispam-Message-Info:

=?iso-8859-1?Q?+OMtOgmGxfqT+2TLJu4uBp7296K6OcThNbMe/tR4TVcY+N4bXDfFmQJfo0?=

=?iso-8859-1?Q?k+x/kgTw00TfsodKZhqQxWmavSHSKk9L63Ylh/tHf3kk9ooRs17XNew4ib?=

=?iso-8859-1?Q?yvVt4dKDnKeM7rL0pQ7uGwMn9D+TyEciwVg1mswc9/pyki5lZO4oncBJiR?=

=?iso-8859-1?Q?mV9u4vL+xaGa3vF4AN8XI5TtQQvxbmC9E+AzAFQwgVx+vRq+8Qo+CMDFp+?=

=?iso-8859-1?Q?kemaTBfoFpZff+NuI0aSSCQjwUGfHm/7JvuKXKyIFjTr/v5Uq3FZSGZkbu?=

=?iso-8859-1?Q?ienskUrSspqbOL2RWQQVi/AW8+bIL1BuUX3vaxJR/YTdSD5nysAiaIRuu3?=

=?iso-8859-1?Q?zhd3K0vj0LzCed7SKTfEW1qsdkMqRP7XsXLm3ZzHEqUrrr20slchUcNGkZ?=

=?iso-8859-1?Q?W1IE1c/uC7QSdqOHnyNwXLApH1L1UV5h5rJXlWb67OQysSftnp4zyhSLq2?=

=?iso-8859-1?Q?TxZnsFR53R21lzLypypjx4nRhc1Wk+Z8IrjjGCduq/3nv/KOlIGQzYbGWq?=

=?iso-8859-1?Q?oFdO+IL6eEbMoQSwVGbJgxu2PdJyWjxAzvS00vW7zVNVOqSPR7LvpfWBhG?=

=?iso-8859-1?Q?rjQAL8xibS0FuxLYFeGlnDpk4eXaVhG540Tz4QISx0HNJWVana6ugso6hV?=

=?iso-8859-1?Q?p5mkntER3t3lcdxfUWlLbsWySzrYlic2a6OPMvl3iCbI5SXqM6jN5GgcYM?=

=?iso-8859-1?Q?N6sWDPrywm5FFn4LZVxRZfXHufxha7eoPMl2Eu374XDhgjSOe+qXSaFegX?=

=?iso-8859-1?Q?dK/tNH3XCnEouE91Dd0zzgIMwlN3QNZO+fRJQJSCIbp+YNmJuurssxv6nU?=

=?iso-8859-1?Q?kUGlCPltuKEDLk/EF6jiwq5CXH7dICTV98HsEkDBTramGNospeHz+/eo/V?=

=?iso-8859-1?Q?5OuwvS38+3hzwKj4MilcGWYbULfjT1U+88s+Q6PtylVx9UwLTGBwZyt+YV?=

=?iso-8859-1?Q?a8TgNNdNaR4eQQsKIi5yuUo+X8ueypy+B6gvBKA+8p2XIp+cZwxa9PqzrA?=

=?iso-8859-1?Q?BqgjB/FwruDlZhxtXWC13jKdP0gOW/xYQdlE0DLmc3BNt3R7uT7x6+gCl7?=

=?iso-8859-1?Q?qjRSJj/hanrE8XaqlVH3zF7cEUmRJ30ruGG6AwSQMEDlbYIs8E7r9AvuKQ?=

=?iso-8859-1?Q?aMiTC+62hJh3nQnj0GvDo3tKlvbyoUqGh2/r43jccVKOtTalYdi7h+thva?=

=?iso-8859-1?Q?6TOow1IDQVbG1I7qU+TUsGnKt7ROOYUPVpG5psAiZ2+W5qO/p7xPRXTKnV?=

=?iso-8859-1?Q?b4Zc585tFecUegLVRl9doVjR+kPVarlFZaGSZ+ObHTBYrky7OaGjNX+dl3?=

=?iso-8859-1?Q?JYFXIkhe0MpT7sV6NGKIv7mI1hgdY2ZI8jgAjv7UEDPguWJ0Z12kBZfmPU?=

=?iso-8859-1?Q?dwoSu5Yl+XHuA9QHSFhhYw2nA5PpGPwyCc/j2Nfhp9aBla+FJ+/h/Ijb2n?=

=?iso-8859-1?Q?fNULQ2k2Hf46EFH6lEg49OIGmo/6pKors0eiBioQFdE6p4dLkjN1ByS1OG?=

=?iso-8859-1?Q?INEUdwl6sTDpIE41oyMhfi5llQZQEG2NNeHrPXtIiiQelUIS7u8dMbOpzt?=

=?iso-8859-1?Q?aEOvVAF4fb2wqrVrvG+VuUP6bOs3PvvoM6tVgg1twHzCccOrMxivXFfUlq?=

=?iso-8859-1?Q?ac4FA1DXRw3YdhxWkfyajZy1YKwzX29ro+ded3flBWuWX2wH3KjwRp4kgW?=

=?iso-8859-1?Q?VNqf0GuOoHyv3AyB0zGoeVnLEUkDvYKZgYcSncrBUPcAoogcxGEHvDQRfL?=

=?iso-8859-1?Q?HJ6At+pUSAnFoDSli/A6OqdxD38WDkLBC8aCvQkrmP9Y8RLTMohvrHTEZN?=

=?iso-8859-1?Q?x4yP0IoLuNeMhCycmWJWB2oByvwBnbxpdZ4RkmpT16HBp+FK0Z0UIi2dOt?=

=?iso-8859-1?Q?K1NgAX4ZY08jY0pEOtO9Iq1Duw+/a/qCw3ztuKJUEdJLR+bKGO3z/103Tw?=

=?iso-8859-1?Q?eCmTis/g3Ewn9ViNWKVyYgrt2A2xnffKBgxNO3mT29SEHrQaaE5EMDBH38?=

=?iso-8859-1?Q?amYk2IMqx3DowOG5FNNXsMG4XAWFXjLa3LAE7IRp3gWkureuwaaCNShhyv?=

=?iso-8859-1?Q?CTADYxTwMJBe?=

X-Forefront-Antispam-Report:

CIP:204.115.222.97;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail.renown.org;PTR:ErrorRetry;CAT:OSPM;SFS:(13230040)(35950700016)(32650700017)(376014)(7416014)(82310400026)(48200799018)(61400799027)(62346030);DIR:OUT;SFP:1501;

X-OriginatorOrg: Renownhealth.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Jul 2025 17:20:31.5136

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: da5f9907-a56d-492e-7744-08ddc5563bb0

X-MS-Exchange-CrossTenant-Id: 54115126-19c9-4b52-84ab-b746e438359a

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=54115126-19c9-4b52-84ab-b746e438359a;Ip=[204.115.222.97];Helo=[mail.renown.org]

X-MS-Exchange-CrossTenant-AuthSource:

CY4PEPF0000E9D7.namprd05.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ0PR16MB5040

X-Spam_score: 22.7

X-Spam_score_int: 227

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: CAUTION: External Email. THINK BEFORE YOU CLICK. EXTERNAL

EMAIL: This email originated outside of Renown Health. DO NOT CLICK on links

or attachments unless you recognize the sender and know the content is safe.

Legacy OP Exchange Rule



Content analysis details: (22.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[2603:10b6:303:8a:cafe:0:0:7d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:8a:cafe:0:0:7d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:8a:cafe:0:0:7d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:8a:cafe:0:0:7d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:8a:cafe:0:0:7d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:8a:cafe:0:0:7d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:8a:cafe:0:0:7d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:8a:cafe:0:0:7d listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:8a:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:8a:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:8a:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:8a:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:8a:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:8a:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:8a:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:303:8a:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[52.100.157.215 listed in will-spam-for-food.eu.org]

[52.100.157.215 listed in will-spam-for-food.eu.org]

[52.100.157.215 listed in will-spam-for-food.eu.org]

[52.100.157.215 listed in will-spam-for-food.eu.org]

[52.100.157.215 listed in will-spam-for-food.eu.org]

[52.100.157.215 listed in will-spam-for-food.eu.org]

[52.100.157.215 listed in will-spam-for-food.eu.org]

[52.100.157.215 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

[196.251.92.128 listed in dnsbl.ahbl.org]

[196.251.92.128 listed in dnsbl.ahbl.org]

[196.251.92.128 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[52.100.157.215 listed in dnsbl.ahbl.org]

[52.100.157.215 listed in dnsbl.ahbl.org]

[52.100.157.215 listed in dnsbl.ahbl.org]

[52.100.157.215 listed in dnsbl.ahbl.org]

[2603:10b6:303:8a:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:10b6:303:8a:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:10b6:303:8a:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:10b6:303:8a:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:10b6:303:8a:cafe:0:0:7d listed in]

[dnsbl.ahbl.org]

[2603:10b6:303:8a:cafe:0:0:7d listed in]

[dnsbl.ahbl.org]

[2603:10b6:303:8a:cafe:0:0:7d listed in]

[dnsbl.ahbl.org]

[2603:10b6:303:8a:cafe:0:0:7d listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[196.251.92.128 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[196.251.92.128 listed in sbl-xbl.spamhaus.org]

[196.251.92.128 listed in sbl-xbl.spamhaus.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.100.157.215 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.100.157.215 listed in sa-trusted.bondedsender.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.100.157.215 listed in sa-accredit.habeas.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.100.157.215 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.6 SUBJ_ALL_CAPS Subject is all capitals

1.5 HK_SCAM_N8 BODY: No description available.

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[52.100.157.215 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.100.157.215 listed in bl.score.senderscore.com]

0.0 LOTS_OF_MONEY Huge... sums of money

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.6 HK_SCAM No description available.

0.0 HK_NAME_MR_MRS No description available.

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

1.8 MONEY_NOHTML Lots of money in plain text

0.0 FILL_THIS_FORM Fill in a form with personal information

0.0 LOTTO_DEPT Claims Department

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

0.0 MONEY_FORM Lots of money if you fill out a form

3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases

0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money

Subject: {SPAM?} CONGRATULATION ON THE RELEASE OF YOUR COMPENSATION FUND



CAUTION: External Email. THINK BEFORE YOU CLICK.







EXTERNAL EMAIL: This email originated outside of Renown Health.



DO NOT CLICK on links or attachments unless you recognize the sender and kn=

ow the content is safe. Legacy OP Exchange Rule



REPORT IT to the Service Desk at 4042 and send it as an attachment to infop=

rot@renown.org.





The White House

Washington, D.C., United States



I, Donald J. Trump, 47th President of the United States of America, want=

to bring to your attention that prior to my Executive Order to the United =

Nations Compensation Unit and Emergency Relief Coordinator, it has come to =

my knowledge that your name appears among those who have not yet received t=

heir compensation fund payment.



The United Nations, in collaboration with the World Bank, has agreed to com=

pensate each eligible individual with $51,000,000.00 USD. This fund, valued=

at US$51,000,000, will be delivered to you via a Bank draft check or Bank =

ATM card through the payer bank.



To proceed smoothly with the process, please reconfirm the following inform=

ation at your earliest convenience:



- Your full name:

- Home address:

- Cell phone number:



Your prompt response will be highly appreciated to facilitate the delivery =

of your compensation.



Signed,

Mr. Donald Trump

United States President

Email- donaltrump47th@usa.com

President Trump spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 17 Jul 2025 13:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ucUZp-000000004iY-0rTn

for dave@doctor.nl2k.ab.ca;

Thu, 17 Jul 2025 13:47:33 -0600

Resent-From: The Doctor

Resent-Date: Thu, 17 Jul 2025 13:47:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dm3nam02hn2208.outbound.protection.outlook.com ([52.100.158.208]:45228 helo=NAM02-DM3-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ucSAM-00000000M4j-2pes

for sales@nk.ca;

Thu, 17 Jul 2025 11:13:17 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=TieBJnZTK714UhLVbAmFWmTzHbEX6721WPkF4s/5cOLuPlYj4+1PGCYaN9JuAUOl9dECQx7Ml50OqCFHWSK5Hbydiqvw7/RaGHjIOpAzvZHx1vCyU3spj7CtEw2uXuJWMeXwGpFXeieIu0H4UUZcZqJoaqVW/3xF54cluHtbpeYHsViI2CGt+1fwscb0LE1tCSAZjEUNNAnN6ksMw7t+02r5ki6CSC4inhnPJTJ3PSLPHJl9fSVlvv0Uo2jGHTeQFo8L7OlOZ/zTe4WVcjzsT0vtywINiRe7UJOe7qYeIUoMr9KnsM05mIb0lgsSjp0DWLNklszcAKTYGQi1qli4nw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=hifM32ivcPg4VGgdbCCSq1hQY0LCTm38YM/BR3HMyI4=;

b=LFUUtrlWjR8BQrRWKwg+mE2+IJ7Nln9sP1p2sUiuyLAxlmFQQlu+AwyVWbJX1d+xWfLuDmvqcRZXcl0PbWYF2CoX24oPOEt7Ddl2EOQdUZDnZx7NGWJV4QXZquyPV3wGiwKqGkZA/JvtlXnMb1skWYQOiuhj8OxbqVqJ7a+8N8i/AL6JCCJmvN75F2OMEfKpkdrdz1cOKjmXYsmK/nxrJGFHLpmcQz/MvFmr/UFqNmXfc3glI2DcsLkaXsx7nsoFkLOyZLrP1rFB5kPTpUh6G+nmwdqjGOnpJys6AqG2MY/LodlRBeWC1ghnAnHLeNFnrTWEQC2+wM5gha3w3K+cLg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=permerror (sender ip

is 204.115.222.97) smtp.rcpttodomain=gmail.com smtp.mailfrom=att.org;

dmarc=fail (p=quarantine sp=quarantine pct=100) action=quarantine

header.from=att.org; dkim=none (message not signed); arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=Renownhealth.onmicrosoft.com; s=selector1-Renownhealth-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=hifM32ivcPg4VGgdbCCSq1hQY0LCTm38YM/BR3HMyI4=;

b=UlvOC8iSQQW9tYpeM5O/MJvGMHHWY+uzDtRH3KyXDbUrTMLTJmGw2FdjBO0P+UdWOXi311Hub5mlR5tXWV6L384vrk7U9zOsmdAouioDvdZMruMhpT4mxgbPtDURtfcW07c3ZNAE74gMPyR6g0FdUWwhnHkLQ/7r5cRcAlYYpjU=

Received: from BYAPR07CA0064.namprd07.prod.outlook.com (2603:10b6:a03:60::41)

by SA5PPFB27BA2D45.namprd16.prod.outlook.com (2603:10b6:80f:fc04::91d) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8857.25; Thu, 17 Jul

2025 17:11:03 +0000

Received: from SJ1PEPF000026C4.namprd04.prod.outlook.com

(2603:10b6:a03:60:cafe::10) by BYAPR07CA0064.outlook.office365.com

(2603:10b6:a03:60::41) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.20.8943.23 via Frontend Transport; Thu,

17 Jul 2025 17:11:03 +0000

X-MS-Exchange-Authentication-Results: spf=permerror (sender IP is

204.115.222.97) smtp.mailfrom=att.org; dkim=none (message not signed)

header.d=none;dmarc=fail action=quarantine header.from=att.org;

Received-SPF: PermError (protection.outlook.com: domain of att.org used an

invalid SPF mechanism)

Received: from mail.renown.org (204.115.222.97) by

SJ1PEPF000026C4.mail.protection.outlook.com (10.167.244.101) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.20.8943.21 via Frontend Transport; Thu, 17 Jul 2025 17:10:57 +0000

Received: from RWN-EXCHPW101.whsnv.net (10.40.13.29) by

RWN-EXCHPW101.whsnv.net (10.40.13.29) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.1.2507.55; Thu, 17 Jul 2025 10:08:44 -0700

Received: from [196.251.92.128] (196.251.92.128) by RWN-EXCHPW101.whsnv.net

(10.40.13.29) with Microsoft SMTP Server id 15.1.2507.55 via Frontend

Transport; Thu, 17 Jul 2025 10:08:40 -0700

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: CONGRATULATION ON THE RELEASE OF YOUR COMPENSATION FUND

To: Recipients

From: "Mr. TRUMP"

Date: Thu, 17 Jul 2025 10:08:35 -0700

Reply-To:

Message-ID:

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: SJ1PEPF000026C4:EE_|SA5PPFB27BA2D45:EE_

X-MS-Office365-Filtering-Correlation-Id: efdcaf61-ef80-4f53-a669-08ddc554e5c4

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|61400799027|48200799018|32650700017|376014|7416014|82310400026|35950700016|62346030;

X-Microsoft-Antispam-Message-Info:

=?iso-8859-1?Q?bCRLx2+yka7NSy7dZvA/mXOv3IivWZloXFBFxnaXOED0GgCH9mT0eRvBhM?=

=?iso-8859-1?Q?YSLEBTkQLVw6hb+BB3Emuvhz+IaV4kz7BajD5a25qbAx3HyjCwlh1DNI/A?=

=?iso-8859-1?Q?Rela8GuwaEyL+ToiJMGA9p6kMy3Lnmz9lQNH/Wctk/AyleRvwynd/Cwqmm?=

=?iso-8859-1?Q?1JOem2XOW2FXSkS5f+7iEjOXifpX63vL63VHUo22c6U1Hv0G8k3K5v0jMD?=

=?iso-8859-1?Q?pE1NFgl8LwMln1KteolPa1JQlFzWHdx8lbHxvAhFPXFAioyPEUOeYt6bt4?=

=?iso-8859-1?Q?Cq6rADlVRjqd3RKpcwNiHQvyqLqSqOKiZ+ACKt7g6yHGPRBJQwb5FzC4Er?=

=?iso-8859-1?Q?SBbJvXvkx9EeItQyV+QFdl1klLkImJ9iXBuMW8d+qoWUjlx0zmu0itmz19?=

=?iso-8859-1?Q?cnJLpOO/yYB7YxPR/2MuxeNE0YS3541Tgyqe/4PYXdfetmsFLchABAlumO?=

=?iso-8859-1?Q?c5NVkHtYFX1g93Y3hTjzdvAGkmlXLNIA3PYJK/8GaaX1JODdCUJZua4/Ld?=

=?iso-8859-1?Q?5GlxdS19uluA/j2YMvYHToYN/j9QqOeN+PPK3IT5FulJLrNMt9HcX/vmRh?=

=?iso-8859-1?Q?YOme4+Ai6pAmbmP3WEE4Ep4JyDcQLEksLVUJ5oviP+cPJjQCqmMM3Qp8U9?=

=?iso-8859-1?Q?4FTzqLAdeYR4j4htccUGvifU03PROEAQQJbxKn+slrnvlxzpB4gZfhVzLq?=

=?iso-8859-1?Q?jxGvXuOTwemwsqylXK/xScs+mslaw1k7s27PHChZl0+2Ldzd652PXkfxii?=

=?iso-8859-1?Q?OPK2w/X/92H5qL6aME5Pqk9ozdYsWwNmH4LueO7Mh2gHmrcWC8FfKaiYWy?=

=?iso-8859-1?Q?yskv7JfFNoe2dgSlYizwsBs1OAmWFpdE11ERoUkcXLB4F1js9JFiJHUj/1?=

=?iso-8859-1?Q?5SHExx3ib6zPmUd+i3VeC0QhxzDcZhzF060YsDV/3RQIGpSvpF0RdzD3uZ?=

=?iso-8859-1?Q?pT/EKfTUAO29zIHqeQlnApDIBLDTBdPNf7xOrF2PmcKZEXIrgioHkmrQdP?=

=?iso-8859-1?Q?XnWdll4VIWuwJcLayMwtjUKL/giSHK86nZkMwnGuq3OLroiSIPSymD9dQy?=

=?iso-8859-1?Q?al+Saz4cjfGimnJvINIc89z96qvjhjWjsUTOsGYW6EcftyVhF9xUVoskLf?=

=?iso-8859-1?Q?SgVzbz6FMSvlWhDabSMf+HHZea14I0NAI/B7ztGlhO/WHHMlF2wlsWKby+?=

=?iso-8859-1?Q?AujFOSDDjuQt4V03np72JJxzkRrJLdZW+5QULeJVjzAjr69b69/YyTBg+p?=

=?iso-8859-1?Q?/XSJq9s9IlQEc4MNXHvutlpg/DnxKehHSlZmtqwN2zPQfTgI9eT2+J3edB?=

=?iso-8859-1?Q?jeUk7HAKIXbjogvtnST+vmcz6eSTXbktOSsWfFBVA/WUphoMMI4Ep87aDb?=

=?iso-8859-1?Q?P/5X+UywJvmONrhqcC/MeClvOQEs1oUOxro2UnlUa2SuzLzVrN2gxc9Q+o?=

=?iso-8859-1?Q?YnuNfOH3+Accgt6FI56sFbwe4W+eFIgeMmyhtUaefrKCE9BibrRpOgK3PR?=

=?iso-8859-1?Q?y9VGHEU0ARkse6Vun7ovbeaAkTp2DQv6fFBkyHHKpAwrkr84uH+wbC6QML?=

=?iso-8859-1?Q?D9fpbUdD4zHMlvvAUGf77KrIZgdQ9GqFUwujEgtEQmh+u1c1yxEopxwaO7?=

=?iso-8859-1?Q?uJwk8zsdEdfw7mcnjPC6Xq//l9xkwUSVM/m1MRXWZHlX7hxXoqmllaYep/?=

=?iso-8859-1?Q?z7ayDQw7OkRD4QxcI9jDd/Yk1kBMTbkIAkXBTJI1ziT+T2hJOodPS71fIp?=

=?iso-8859-1?Q?H1qxtiiBgtr0lscAnTdO6uFZ6mVh8IKv2D4wRHEUOOiILyFsuInTZDWhLZ?=

=?iso-8859-1?Q?+BoRe1fko6ClCtWFRyLuLrW61LS1Av64H0U2VNj9RyuMmHfY19YeVdSZTg?=

=?iso-8859-1?Q?hhpoaaXUMDSNDxCSGPIUfN6hIXwRaeEAxoXsfR7tpardLNURRHHHbbJFTD?=

=?iso-8859-1?Q?CpeTSq55mAd4DwGR+Ken94tHn11Rbb7WmaYXvzwmyLNAgvYKbYsaheD3ip?=

=?iso-8859-1?Q?kApDYaJJ5jbg89kwADgjMawf4k/yyDx6n2cobof2uSIpcKAB4SOahOR9YV?=

=?iso-8859-1?Q?8oWfwQYV3ehV?=

X-Forefront-Antispam-Report:

CIP:204.115.222.97;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail.renown.org;PTR:ErrorRetry;CAT:OSPM;SFS:(13230040)(61400799027)(48200799018)(32650700017)(376014)(7416014)(82310400026)(35950700016)(62346030);DIR:OUT;SFP:1501;

X-OriginatorOrg: Renownhealth.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Jul 2025 17:10:57.8861

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: efdcaf61-ef80-4f53-a669-08ddc554e5c4

X-MS-Exchange-CrossTenant-Id: 54115126-19c9-4b52-84ab-b746e438359a

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=54115126-19c9-4b52-84ab-b746e438359a;Ip=[204.115.222.97];Helo=[mail.renown.org]

X-MS-Exchange-CrossTenant-AuthSource:

SJ1PEPF000026C4.namprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA5PPFB27BA2D45

X-Spam_score: 26.4

X-Spam_score_int: 264

X-Spam_bar: ++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: CAUTION: External Email. THINK BEFORE YOU CLICK. EXTERNAL

EMAIL: This email originated outside of Renown Health. DO NOT CLICK on links

or attachments unless you recognize the sender and know the content is safe.

Legacy OP Exchange Rule



Content analysis details: (26.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[2603:10b6:a03:60:cafe:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:60:cafe:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:60:cafe:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:60:cafe:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:60:cafe:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:60:cafe:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:60:cafe:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:60:cafe:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:60:0:0:0:41 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:60:0:0:0:41 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:60:0:0:0:41 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:60:0:0:0:41 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:60:0:0:0:41 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:60:0:0:0:41 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:60:0:0:0:41 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:60:0:0:0:41 listed in]

[will-spam-for-food.eu.org]

[52.100.158.208 listed in will-spam-for-food.eu.org]

[52.100.158.208 listed in will-spam-for-food.eu.org]

[52.100.158.208 listed in will-spam-for-food.eu.org]

[52.100.158.208 listed in will-spam-for-food.eu.org]

[52.100.158.208 listed in will-spam-for-food.eu.org]

[52.100.158.208 listed in will-spam-for-food.eu.org]

[52.100.158.208 listed in will-spam-for-food.eu.org]

[52.100.158.208 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

[196.251.92.128 listed in dnsbl.ahbl.org]

[196.251.92.128 listed in dnsbl.ahbl.org]

[196.251.92.128 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[52.100.158.208 listed in dnsbl.ahbl.org]

[52.100.158.208 listed in dnsbl.ahbl.org]

[52.100.158.208 listed in dnsbl.ahbl.org]

[52.100.158.208 listed in dnsbl.ahbl.org]

[2603:10b6:a03:60:cafe:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:60:cafe:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:60:cafe:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:60:cafe:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:60:0:0:0:41 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:60:0:0:0:41 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:60:0:0:0:41 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:60:0:0:0:41 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[196.251.92.128 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[196.251.92.128 listed in sbl-xbl.spamhaus.org]

[196.251.92.128 listed in sbl-xbl.spamhaus.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.6 SUBJ_ALL_CAPS Subject is all capitals

1.5 HK_SCAM_N8 BODY: No description available.

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.100.158.208 listed in wl.mailspike.net]

0.6 HK_SCAM No description available.

0.0 HK_NAME_MR_MRS No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 LOTTO_DEPT Claims Department

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 FILL_THIS_FORM Fill in a form with personal information

1.8 MONEY_NOHTML Lots of money in plain text

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

0.0 MONEY_FORM Lots of money if you fill out a form

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money

3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.100.158.208 listed in list.dnswl.org]

Subject: {SPAM?} CONGRATULATION ON THE RELEASE OF YOUR COMPENSATION FUND



CAUTION: External Email. THINK BEFORE YOU CLICK.







EXTERNAL EMAIL: This email originated outside of Renown Health.



DO NOT CLICK on links or attachments unless you recognize the sender and kn=

ow the content is safe. Legacy OP Exchange Rule



REPORT IT to the Service Desk at 4042 and send it as an attachment to infop=

rot@renown.org.





The White House

Washington, D.C., United States



I, Donald J. Trump, 47th President of the United States of America, want=

to bring to your attention that prior to my Executive Order to the United =

Nations Compensation Unit and Emergency Relief Coordinator, it has come to =

my knowledge that your name appears among those who have not yet received t=

heir compensation fund payment.



The United Nations, in collaboration with the World Bank, has agreed to com=

pensate each eligible individual with $51,000,000.00 USD. This fund, valued=

at US$51,000,000, will be delivered to you via a Bank draft check or Bank =

ATM card through the payer bank.



To proceed smoothly with the process, please reconfirm the following inform=

ation at your earliest convenience:



- Your full name:

- Home address:

- Cell phone number:



Your prompt response will be highly appreciated to facilitate the delivery =

of your compensation.



Signed,

Mr. Donald Trump

United States President

Email- donaltrump47th@usa.com

President Trump spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 17 Jul 2025 13:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ucUZi-000000004iF-1iPq

for dave@doctor.nl2k.ab.ca;

Thu, 17 Jul 2025 13:47:26 -0600

Resent-From: The Doctor

Resent-Date: Thu, 17 Jul 2025 13:47:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn8nam12hn2222.outbound.protection.outlook.com ([52.100.165.222]:8033 helo=NAM12-BN8-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ucS9F-00000000M1P-3Kr2

for root@mail.nl2k.ab.ca;

Thu, 17 Jul 2025 11:12:12 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=LsHZ1Y1uXpV9U8345VXluAXFx8fot01xuB/w2oP1bvZc1Qd0w51k0juM9Gar8+HIpSHkoVCZgQORgan5CG24jqD/qSxDP5G2xnQn5OfnL6J/j2/Iq9CR1MK2HDchE0Y0N89d0hDB0bmlnhvChwwIbO4+1e2kdgoVZ0TUm3pJUWHE8kUtMwqmHpHlAnC2O5iqWvYZqkuPid7Rz6Y/If7jMxYjQlqjay/mIL3dis1OEKQtaw6Babcot/bZ39ZyxkNeDierDszP6C53+aKfLiq2RZDFVinabjrv7ZEdE3wuiRHVO5+KN+MkziRvJtAtYKM8UXaaOTcBS/JfXyIN2l87nQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=hifM32ivcPg4VGgdbCCSq1hQY0LCTm38YM/BR3HMyI4=;

b=jGklY0LeBEq4hUPwHABM5EupChRL9q18BWqa7XJNpLcnVQZIbPq04iQ8eCN2ZJBGtiKIshmy8K+fUddbxBLGeXOgjCGW4FazVuZb+MvpqDk1Syc9Ref0u5jDMJm8EVGBZv+zA+P+/avzU6c133JZ8K/6DVuJyKIiFfBuhxjcGvr+98Miyhy0DSo3xT5YwnLxDZPqexZgwPwdlNsp9SccJgCBkK9DOi9Mnna5uaWynvgE/So7L6m4eyUqmXPYb5dqPugBVbHFoOiYk47Y2Chcl9EXAlQXQ1Ss47OwjfwvkcYMPE5BxcBUwUtH1jr0/DJBlaFKSqUNA1cdDLTxSGMseA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=permerror (sender ip

is 204.115.222.97) smtp.rcpttodomain=live.com smtp.mailfrom=att.org;

dmarc=fail (p=quarantine sp=quarantine pct=100) action=quarantine

header.from=att.org; dkim=none (message not signed); arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=Renownhealth.onmicrosoft.com; s=selector1-Renownhealth-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=hifM32ivcPg4VGgdbCCSq1hQY0LCTm38YM/BR3HMyI4=;

b=rByGbb2cobG5EVISo5210QG9iqDLcakqrJStHz4aNxDOMBd03X7tPQWWDJHYQ1rX2rA8zLqJob+q7j4wfRmpyc1hTMtcxffOYzHcP7iYjlGPFlQsL4LJXIZ48fon9H3hx5Wk1Hu8LO7ZsXGmnQ6vcPpzcX9eWWEqVikv3gFln2c=

Received: from DM6PR11CA0062.namprd11.prod.outlook.com (2603:10b6:5:14c::39)

by MW5PR16MB4690.namprd16.prod.outlook.com (2603:10b6:303:19e::15) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8901.35; Thu, 17 Jul

2025 17:09:52 +0000

Received: from DS1PEPF00017096.namprd05.prod.outlook.com

(2603:10b6:5:14c:cafe::a0) by DM6PR11CA0062.outlook.office365.com

(2603:10b6:5:14c::39) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.20.8943.19 via Frontend Transport; Thu,

17 Jul 2025 17:09:52 +0000

X-MS-Exchange-Authentication-Results: spf=permerror (sender IP is

204.115.222.97) smtp.mailfrom=att.org; dkim=none (message not signed)

header.d=none;dmarc=fail action=quarantine header.from=att.org;

Received-SPF: PermError (protection.outlook.com: domain of att.org used an

invalid SPF mechanism)

Received: from mail.renown.org (204.115.222.97) by

DS1PEPF00017096.mail.protection.outlook.com (10.167.18.100) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.20.8943.21 via Frontend Transport; Thu, 17 Jul 2025 17:09:47 +0000

Received: from RWN-EXCHPW101.whsnv.net (10.40.13.29) by

RWN-EXCHPW101.whsnv.net (10.40.13.29) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.1.2507.55; Thu, 17 Jul 2025 10:07:32 -0700

Received: from [196.251.92.128] (196.251.92.128) by RWN-EXCHPW101.whsnv.net

(10.40.13.29) with Microsoft SMTP Server id 15.1.2507.55 via Frontend

Transport; Thu, 17 Jul 2025 10:07:29 -0700

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: CONGRATULATION ON THE RELEASE OF YOUR COMPENSATION FUND

To: Recipients

From: "Mr. TRUMP"

Date: Thu, 17 Jul 2025 10:07:25 -0700

Reply-To:

Message-ID: <7a99b01e-b089-470b-a4ef-3b9f44f66ddf@RWN-EXCHPW101.whsnv.net>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DS1PEPF00017096:EE_|MW5PR16MB4690:EE_

X-MS-Office365-Filtering-Correlation-Id: 4cbd8498-837d-48e4-aed3-08ddc554bbc8

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|48200799018|61400799027|376014|35950700016|7416014|82310400026|32650700017|62346030;

X-Microsoft-Antispam-Message-Info:

=?iso-8859-1?Q?ZxWWJx4d/HCC3pKmLDF25aDpVbprIau9RP7dqKjksVCWj2jb06rcaLKQ0u?=

=?iso-8859-1?Q?QEmvCxXgtbWfEudFY+NPhGQkhB6BHLPUm2BnAWdYNBluzjKNRsqbmvdsCo?=

=?iso-8859-1?Q?dpeMR8MjrYX463R/AF/WDzw3nEDQ70WJYICcPwqTXObPcw2pNZbCkfd7eA?=

=?iso-8859-1?Q?cE/GYHAoPYF6KLrCToZgr9s9kAteJlQS+SeQbr56lClovCXB7CX30m8T95?=

=?iso-8859-1?Q?ttxMgd9ciucaTKOUgWqALxH3+2G5gaUAoHyE2J2SJoKsdKy94iUB43Xz28?=

=?iso-8859-1?Q?pmcxKa5zqdFraZ/tWD2Jd922vJIwd1tgmTg/zEA4hASHVsNhvj4DL3fAVH?=

=?iso-8859-1?Q?3Lnr+wcYWGXVSQTFgRzcz3vfBRQ0B3FspELA0pvJ/5yDN8rOxDnACjiyIs?=

=?iso-8859-1?Q?ytu1xVaVEsvZytbiGITwUDyxACjDqFQRJqY/9AbhrLl/+5cnQ1fhu0hem/?=

=?iso-8859-1?Q?CSXj1DE+dCqNJjUJmfyVI2kLrn8OW5B9IfUkNwLTtZDVpgeVERPUHjjkE2?=

=?iso-8859-1?Q?soKPmaib80yNZZJag1hc0jQ3uPptp6EVT9E4nNdmhs9t5EaFaElT1zOCEl?=

=?iso-8859-1?Q?X8NOHLS76EmgV3dbHOdz2wdGNpZVnnK1gaQ3ZhJKuYRPfT/D9bjMSNgCMc?=

=?iso-8859-1?Q?uN6BPFPD/AewV3nBYHZQiaoSV3xXzWmSlAbCgf+1XjjyDUbA+kWyh6t9jq?=

=?iso-8859-1?Q?Yvr3gEQj0g727TWFWupMe1oLtvXPADj4ojHYNsgxR3g31WgGdATtdOh2zF?=

=?iso-8859-1?Q?uhfVReUVEhDDsWd0uXscgrDSFzVLRfP9mtR8PIz1bGM9/rhem2zz+Qc32o?=

=?iso-8859-1?Q?5iDvsGZCUCj7BkxEtE+ThE3UPGLs2AI7t1GZsibfTtW++xDU6sZK6C20vM?=

=?iso-8859-1?Q?EVTp1Fkd0EAhzpYkWYESew1Z3bfp5D4KwChPywCD5Nq6FHWZXA/15sOT9T?=

=?iso-8859-1?Q?thO8vgPoMyFGMROzxM5uwHux4kYsSNlLcRgBJTT0M1ZTcpyhO4kRSiGQ/Y?=

=?iso-8859-1?Q?fPFzyps6pv8AP1WYnavmKqF0GyAj9e00LWOhi6o1MwIo6QEvVFghUmHf+q?=

=?iso-8859-1?Q?KKqiYF8XhnzMtmHte1/jScazdVqdPA41pve/iWY6HZc7bc4ypuatTQURU+?=

=?iso-8859-1?Q?xivvOO3PardTLUmgo05MkDWdWkYsoZKY28AeMgx/KMzBa33Q2l2CW2FZN+?=

=?iso-8859-1?Q?wmQ2CbPgSWC1PVs50L4ydhZDgKdUlsyHo5PuNf/ahm7lf127pbLhxVzvZH?=

=?iso-8859-1?Q?bHpPeiiwWlTAo5aWqyKqQ0koY+67oqpTU+Yf1C2JCjU991+lDuvkqaN5BP?=

=?iso-8859-1?Q?m0100MU3v0xC+VpRqUXWFPK4MVXP3d3q5TjM90Oh2YEENYYCgxVyLY3m+K?=

=?iso-8859-1?Q?fngUZ74XLE0hRfxAeSKKMuiuplTeBHAHWrxLlbhBrKvY8S76srXCzjFvzf?=

=?iso-8859-1?Q?AN7zBkU1t1/iW/YwQnxAcTI0Tf0FmHGzEfc6z1XCzUd4ETYIMkG9Sf8L8m?=

=?iso-8859-1?Q?mNcr5ag9opotuq8T5YwVlOBmEsvdmJKFKa3mtQIHg+5ZeCifudzlv4h1D4?=

=?iso-8859-1?Q?XLURGR3VpNJs6m8dXKPNxFV/aCp1+ogD4HcH4C5PrYhACxYkyE/HLij/iA?=

=?iso-8859-1?Q?6dwutq51F3CI+GK5Nh7dtoQvU2G+eONW6e6ALPgHDeTnqi2Qyv4rJlbeyR?=

=?iso-8859-1?Q?CaTnqTjxpihscm+RFyYRQmVa0ytGfk93VDAyV00/de26aUj++F5xoCHp1c?=

=?iso-8859-1?Q?u3Xd0g/FxPiUVx0ZrQ4iQpf6hfFoS8oDHHCaAvpCQIuuHgh4Vu/XE78z7F?=

=?iso-8859-1?Q?aUwaUD5KemtGwUny8N1xpRjZ0h8RCOgn2EEXJynDEqSVlFOd/huzKE/Awk?=

=?iso-8859-1?Q?Y821F7qmNjBFzJGJEMRuKycDC+QRXbD1g63QeWk/oXYQL1PjUBKnCXnnRX?=

=?iso-8859-1?Q?tn5U6hsml6N3CRCg7Pa98sb4B1B5N4nJbmvZhnMh6q1Kg6fyyka0BeFSK5?=

=?iso-8859-1?Q?WTeK8RJZpJc0aBYUS3XO8aGYade6XxOY+KlfZ0cmvK/tU/zQ1YRbpmbWP8?=

=?iso-8859-1?Q?b62IEypyvHua?=

X-Forefront-Antispam-Report:

CIP:204.115.222.97;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail.renown.org;PTR:ErrorRetry;CAT:OSPM;SFS:(13230040)(48200799018)(61400799027)(376014)(35950700016)(7416014)(82310400026)(32650700017)(62346030);DIR:OUT;SFP:1501;

X-OriginatorOrg: Renownhealth.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Jul 2025 17:09:47.4067

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 4cbd8498-837d-48e4-aed3-08ddc554bbc8

X-MS-Exchange-CrossTenant-Id: 54115126-19c9-4b52-84ab-b746e438359a

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=54115126-19c9-4b52-84ab-b746e438359a;Ip=[204.115.222.97];Helo=[mail.renown.org]

X-MS-Exchange-CrossTenant-AuthSource:

DS1PEPF00017096.namprd05.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW5PR16MB4690

X-Spam_score: 26.4

X-Spam_score_int: 264

X-Spam_bar: ++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: CAUTION: External Email. THINK BEFORE YOU CLICK. EXTERNAL

EMAIL: This email originated outside of Renown Health. DO NOT CLICK on links

or attachments unless you recognize the sender and know the content is safe.

Legacy OP Exchange Rule



Content analysis details: (26.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[52.100.165.222 listed in will-spam-for-food.eu.org]

[52.100.165.222 listed in will-spam-for-food.eu.org]

[52.100.165.222 listed in will-spam-for-food.eu.org]

[52.100.165.222 listed in will-spam-for-food.eu.org]

[52.100.165.222 listed in will-spam-for-food.eu.org]

[52.100.165.222 listed in will-spam-for-food.eu.org]

[52.100.165.222 listed in will-spam-for-food.eu.org]

[52.100.165.222 listed in will-spam-for-food.eu.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[196.251.92.128 listed in zen.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

[196.251.92.128 listed in dnsbl.ahbl.org]

[196.251.92.128 listed in dnsbl.ahbl.org]

[196.251.92.128 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[dnsbl.ahbl.org]

[52.100.165.222 listed in dnsbl.ahbl.org]

[52.100.165.222 listed in dnsbl.ahbl.org]

[52.100.165.222 listed in dnsbl.ahbl.org]

[52.100.165.222 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[196.251.92.128 listed in sbl-xbl.spamhaus.org]

[196.251.92.128 listed in sbl-xbl.spamhaus.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.100.165.222 listed in list.dnswl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.6 SUBJ_ALL_CAPS Subject is all capitals

1.5 HK_SCAM_N8 BODY: No description available.

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.100.165.222 listed in wl.mailspike.net]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 HK_NAME_MR_MRS No description available.

0.6 HK_SCAM No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.8 MONEY_NOHTML Lots of money in plain text

0.0 LOTTO_DEPT Claims Department

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 FILL_THIS_FORM Fill in a form with personal information

0.0 MONEY_FORM Lots of money if you fill out a form

3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases

0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money

Subject: {SPAM?} CONGRATULATION ON THE RELEASE OF YOUR COMPENSATION FUND



CAUTION: External Email. THINK BEFORE YOU CLICK.







EXTERNAL EMAIL: This email originated outside of Renown Health.



DO NOT CLICK on links or attachments unless you recognize the sender and kn=

ow the content is safe. Legacy OP Exchange Rule



REPORT IT to the Service Desk at 4042 and send it as an attachment to infop=

rot@renown.org.





The White House

Washington, D.C., United States



I, Donald J. Trump, 47th President of the United States of America, want=

to bring to your attention that prior to my Executive Order to the United =

Nations Compensation Unit and Emergency Relief Coordinator, it has come to =

my knowledge that your name appears among those who have not yet received t=

heir compensation fund payment.



The United Nations, in collaboration with the World Bank, has agreed to com=

pensate each eligible individual with $51,000,000.00 USD. This fund, valued=

at US$51,000,000, will be delivered to you via a Bank draft check or Bank =

ATM card through the payer bank.



To proceed smoothly with the process, please reconfirm the following inform=

ation at your earliest convenience:



- Your full name:

- Home address:

- Cell phone number:



Your prompt response will be highly appreciated to facilitate the delivery =

of your compensation.



Signed,

Mr. Donald Trump

United States President

Email- donaltrump47th@usa.com

President Trump spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 17 Jul 2025 13:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ucUZd-000000004i1-2GjK

for dave@doctor.nl2k.ab.ca;

Thu, 17 Jul 2025 13:47:21 -0600

Resent-From: The Doctor

Resent-Date: Thu, 17 Jul 2025 13:47:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn8nam12hn2229.outbound.protection.outlook.com ([52.100.165.229]:6092 helo=NAM12-BN8-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ucS9E-00000000M1M-0enx

for root@doctor.nl2k.ab.ca;

Thu, 17 Jul 2025 11:12:08 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=LsHZ1Y1uXpV9U8345VXluAXFx8fot01xuB/w2oP1bvZc1Qd0w51k0juM9Gar8+HIpSHkoVCZgQORgan5CG24jqD/qSxDP5G2xnQn5OfnL6J/j2/Iq9CR1MK2HDchE0Y0N89d0hDB0bmlnhvChwwIbO4+1e2kdgoVZ0TUm3pJUWHE8kUtMwqmHpHlAnC2O5iqWvYZqkuPid7Rz6Y/If7jMxYjQlqjay/mIL3dis1OEKQtaw6Babcot/bZ39ZyxkNeDierDszP6C53+aKfLiq2RZDFVinabjrv7ZEdE3wuiRHVO5+KN+MkziRvJtAtYKM8UXaaOTcBS/JfXyIN2l87nQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=hifM32ivcPg4VGgdbCCSq1hQY0LCTm38YM/BR3HMyI4=;

b=jGklY0LeBEq4hUPwHABM5EupChRL9q18BWqa7XJNpLcnVQZIbPq04iQ8eCN2ZJBGtiKIshmy8K+fUddbxBLGeXOgjCGW4FazVuZb+MvpqDk1Syc9Ref0u5jDMJm8EVGBZv+zA+P+/avzU6c133JZ8K/6DVuJyKIiFfBuhxjcGvr+98Miyhy0DSo3xT5YwnLxDZPqexZgwPwdlNsp9SccJgCBkK9DOi9Mnna5uaWynvgE/So7L6m4eyUqmXPYb5dqPugBVbHFoOiYk47Y2Chcl9EXAlQXQ1Ss47OwjfwvkcYMPE5BxcBUwUtH1jr0/DJBlaFKSqUNA1cdDLTxSGMseA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=permerror (sender ip

is 204.115.222.97) smtp.rcpttodomain=live.com smtp.mailfrom=att.org;

dmarc=fail (p=quarantine sp=quarantine pct=100) action=quarantine

header.from=att.org; dkim=none (message not signed); arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=Renownhealth.onmicrosoft.com; s=selector1-Renownhealth-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=hifM32ivcPg4VGgdbCCSq1hQY0LCTm38YM/BR3HMyI4=;

b=rByGbb2cobG5EVISo5210QG9iqDLcakqrJStHz4aNxDOMBd03X7tPQWWDJHYQ1rX2rA8zLqJob+q7j4wfRmpyc1hTMtcxffOYzHcP7iYjlGPFlQsL4LJXIZ48fon9H3hx5Wk1Hu8LO7ZsXGmnQ6vcPpzcX9eWWEqVikv3gFln2c=

Received: from DM6PR11CA0062.namprd11.prod.outlook.com (2603:10b6:5:14c::39)

by MW5PR16MB4690.namprd16.prod.outlook.com (2603:10b6:303:19e::15) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8901.35; Thu, 17 Jul

2025 17:09:52 +0000

Received: from DS1PEPF00017096.namprd05.prod.outlook.com

(2603:10b6:5:14c:cafe::a0) by DM6PR11CA0062.outlook.office365.com

(2603:10b6:5:14c::39) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.20.8943.19 via Frontend Transport; Thu,

17 Jul 2025 17:09:52 +0000

X-MS-Exchange-Authentication-Results: spf=permerror (sender IP is

204.115.222.97) smtp.mailfrom=att.org; dkim=none (message not signed)

header.d=none;dmarc=fail action=quarantine header.from=att.org;

Received-SPF: PermError (protection.outlook.com: domain of att.org used an

invalid SPF mechanism)

Received: from mail.renown.org (204.115.222.97) by

DS1PEPF00017096.mail.protection.outlook.com (10.167.18.100) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.20.8943.21 via Frontend Transport; Thu, 17 Jul 2025 17:09:47 +0000

Received: from RWN-EXCHPW101.whsnv.net (10.40.13.29) by

RWN-EXCHPW101.whsnv.net (10.40.13.29) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.1.2507.55; Thu, 17 Jul 2025 10:07:32 -0700

Received: from [196.251.92.128] (196.251.92.128) by RWN-EXCHPW101.whsnv.net

(10.40.13.29) with Microsoft SMTP Server id 15.1.2507.55 via Frontend

Transport; Thu, 17 Jul 2025 10:07:29 -0700

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: CONGRATULATION ON THE RELEASE OF YOUR COMPENSATION FUND

To: Recipients

From: "Mr. TRUMP"

Date: Thu, 17 Jul 2025 10:07:25 -0700

Reply-To:

Message-ID: <7a99b01e-b089-470b-a4ef-3b9f44f66ddf@RWN-EXCHPW101.whsnv.net>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DS1PEPF00017096:EE_|MW5PR16MB4690:EE_

X-MS-Office365-Filtering-Correlation-Id: 4cbd8498-837d-48e4-aed3-08ddc554bbc8

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|48200799018|61400799027|376014|35950700016|7416014|82310400026|32650700017|62346030;

X-Microsoft-Antispam-Message-Info:

=?iso-8859-1?Q?ZxWWJx4d/HCC3pKmLDF25aDpVbprIau9RP7dqKjksVCWj2jb06rcaLKQ0u?=

=?iso-8859-1?Q?QEmvCxXgtbWfEudFY+NPhGQkhB6BHLPUm2BnAWdYNBluzjKNRsqbmvdsCo?=

=?iso-8859-1?Q?dpeMR8MjrYX463R/AF/WDzw3nEDQ70WJYICcPwqTXObPcw2pNZbCkfd7eA?=

=?iso-8859-1?Q?cE/GYHAoPYF6KLrCToZgr9s9kAteJlQS+SeQbr56lClovCXB7CX30m8T95?=

=?iso-8859-1?Q?ttxMgd9ciucaTKOUgWqALxH3+2G5gaUAoHyE2J2SJoKsdKy94iUB43Xz28?=

=?iso-8859-1?Q?pmcxKa5zqdFraZ/tWD2Jd922vJIwd1tgmTg/zEA4hASHVsNhvj4DL3fAVH?=

=?iso-8859-1?Q?3Lnr+wcYWGXVSQTFgRzcz3vfBRQ0B3FspELA0pvJ/5yDN8rOxDnACjiyIs?=

=?iso-8859-1?Q?ytu1xVaVEsvZytbiGITwUDyxACjDqFQRJqY/9AbhrLl/+5cnQ1fhu0hem/?=

=?iso-8859-1?Q?CSXj1DE+dCqNJjUJmfyVI2kLrn8OW5B9IfUkNwLTtZDVpgeVERPUHjjkE2?=

=?iso-8859-1?Q?soKPmaib80yNZZJag1hc0jQ3uPptp6EVT9E4nNdmhs9t5EaFaElT1zOCEl?=

=?iso-8859-1?Q?X8NOHLS76EmgV3dbHOdz2wdGNpZVnnK1gaQ3ZhJKuYRPfT/D9bjMSNgCMc?=

=?iso-8859-1?Q?uN6BPFPD/AewV3nBYHZQiaoSV3xXzWmSlAbCgf+1XjjyDUbA+kWyh6t9jq?=

=?iso-8859-1?Q?Yvr3gEQj0g727TWFWupMe1oLtvXPADj4ojHYNsgxR3g31WgGdATtdOh2zF?=

=?iso-8859-1?Q?uhfVReUVEhDDsWd0uXscgrDSFzVLRfP9mtR8PIz1bGM9/rhem2zz+Qc32o?=

=?iso-8859-1?Q?5iDvsGZCUCj7BkxEtE+ThE3UPGLs2AI7t1GZsibfTtW++xDU6sZK6C20vM?=

=?iso-8859-1?Q?EVTp1Fkd0EAhzpYkWYESew1Z3bfp5D4KwChPywCD5Nq6FHWZXA/15sOT9T?=

=?iso-8859-1?Q?thO8vgPoMyFGMROzxM5uwHux4kYsSNlLcRgBJTT0M1ZTcpyhO4kRSiGQ/Y?=

=?iso-8859-1?Q?fPFzyps6pv8AP1WYnavmKqF0GyAj9e00LWOhi6o1MwIo6QEvVFghUmHf+q?=

=?iso-8859-1?Q?KKqiYF8XhnzMtmHte1/jScazdVqdPA41pve/iWY6HZc7bc4ypuatTQURU+?=

=?iso-8859-1?Q?xivvOO3PardTLUmgo05MkDWdWkYsoZKY28AeMgx/KMzBa33Q2l2CW2FZN+?=

=?iso-8859-1?Q?wmQ2CbPgSWC1PVs50L4ydhZDgKdUlsyHo5PuNf/ahm7lf127pbLhxVzvZH?=

=?iso-8859-1?Q?bHpPeiiwWlTAo5aWqyKqQ0koY+67oqpTU+Yf1C2JCjU991+lDuvkqaN5BP?=

=?iso-8859-1?Q?m0100MU3v0xC+VpRqUXWFPK4MVXP3d3q5TjM90Oh2YEENYYCgxVyLY3m+K?=

=?iso-8859-1?Q?fngUZ74XLE0hRfxAeSKKMuiuplTeBHAHWrxLlbhBrKvY8S76srXCzjFvzf?=

=?iso-8859-1?Q?AN7zBkU1t1/iW/YwQnxAcTI0Tf0FmHGzEfc6z1XCzUd4ETYIMkG9Sf8L8m?=

=?iso-8859-1?Q?mNcr5ag9opotuq8T5YwVlOBmEsvdmJKFKa3mtQIHg+5ZeCifudzlv4h1D4?=

=?iso-8859-1?Q?XLURGR3VpNJs6m8dXKPNxFV/aCp1+ogD4HcH4C5PrYhACxYkyE/HLij/iA?=

=?iso-8859-1?Q?6dwutq51F3CI+GK5Nh7dtoQvU2G+eONW6e6ALPgHDeTnqi2Qyv4rJlbeyR?=

=?iso-8859-1?Q?CaTnqTjxpihscm+RFyYRQmVa0ytGfk93VDAyV00/de26aUj++F5xoCHp1c?=

=?iso-8859-1?Q?u3Xd0g/FxPiUVx0ZrQ4iQpf6hfFoS8oDHHCaAvpCQIuuHgh4Vu/XE78z7F?=

=?iso-8859-1?Q?aUwaUD5KemtGwUny8N1xpRjZ0h8RCOgn2EEXJynDEqSVlFOd/huzKE/Awk?=

=?iso-8859-1?Q?Y821F7qmNjBFzJGJEMRuKycDC+QRXbD1g63QeWk/oXYQL1PjUBKnCXnnRX?=

=?iso-8859-1?Q?tn5U6hsml6N3CRCg7Pa98sb4B1B5N4nJbmvZhnMh6q1Kg6fyyka0BeFSK5?=

=?iso-8859-1?Q?WTeK8RJZpJc0aBYUS3XO8aGYade6XxOY+KlfZ0cmvK/tU/zQ1YRbpmbWP8?=

=?iso-8859-1?Q?b62IEypyvHua?=

X-Forefront-Antispam-Report:

CIP:204.115.222.97;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail.renown.org;PTR:ErrorRetry;CAT:OSPM;SFS:(13230040)(48200799018)(61400799027)(376014)(35950700016)(7416014)(82310400026)(32650700017)(62346030);DIR:OUT;SFP:1501;

X-OriginatorOrg: Renownhealth.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Jul 2025 17:09:47.4067

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 4cbd8498-837d-48e4-aed3-08ddc554bbc8

X-MS-Exchange-CrossTenant-Id: 54115126-19c9-4b52-84ab-b746e438359a

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=54115126-19c9-4b52-84ab-b746e438359a;Ip=[204.115.222.97];Helo=[mail.renown.org]

X-MS-Exchange-CrossTenant-AuthSource:

DS1PEPF00017096.namprd05.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW5PR16MB4690

X-Spam_score: 26.4

X-Spam_score_int: 264

X-Spam_bar: ++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: CAUTION: External Email. THINK BEFORE YOU CLICK. EXTERNAL

EMAIL: This email originated outside of Renown Health. DO NOT CLICK on links

or attachments unless you recognize the sender and know the content is safe.

Legacy OP Exchange Rule



Content analysis details: (26.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[52.100.165.229 listed in will-spam-for-food.eu.org]

[52.100.165.229 listed in will-spam-for-food.eu.org]

[52.100.165.229 listed in will-spam-for-food.eu.org]

[52.100.165.229 listed in will-spam-for-food.eu.org]

[52.100.165.229 listed in will-spam-for-food.eu.org]

[52.100.165.229 listed in will-spam-for-food.eu.org]

[52.100.165.229 listed in will-spam-for-food.eu.org]

[52.100.165.229 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

[196.251.92.128 listed in dnsbl.ahbl.org]

[196.251.92.128 listed in dnsbl.ahbl.org]

[196.251.92.128 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[52.100.165.229 listed in dnsbl.ahbl.org]

[52.100.165.229 listed in dnsbl.ahbl.org]

[52.100.165.229 listed in dnsbl.ahbl.org]

[52.100.165.229 listed in dnsbl.ahbl.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[196.251.92.128 listed in zen.spamhaus.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.100.165.229 listed in list.dnswl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[196.251.92.128 listed in sbl-xbl.spamhaus.org]

[196.251.92.128 listed in sbl-xbl.spamhaus.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.6 SUBJ_ALL_CAPS Subject is all capitals

1.5 HK_SCAM_N8 BODY: No description available.

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.100.165.229 listed in wl.mailspike.net]

0.0 HK_NAME_MR_MRS No description available.

0.6 HK_SCAM No description available.

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 LOTS_OF_MONEY Huge... sums of money

1.8 MONEY_NOHTML Lots of money in plain text

0.0 FILL_THIS_FORM Fill in a form with personal information

0.0 LOTTO_DEPT Claims Department

0.0 MONEY_FORM Lots of money if you fill out a form

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases

0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money

Subject: {SPAM?} CONGRATULATION ON THE RELEASE OF YOUR COMPENSATION FUND



CAUTION: External Email. THINK BEFORE YOU CLICK.







EXTERNAL EMAIL: This email originated outside of Renown Health.



DO NOT CLICK on links or attachments unless you recognize the sender and kn=

ow the content is safe. Legacy OP Exchange Rule



REPORT IT to the Service Desk at 4042 and send it as an attachment to infop=

rot@renown.org.





The White House

Washington, D.C., United States



I, Donald J. Trump, 47th President of the United States of America, want=

to bring to your attention that prior to my Executive Order to the United =

Nations Compensation Unit and Emergency Relief Coordinator, it has come to =

my knowledge that your name appears among those who have not yet received t=

heir compensation fund payment.



The United Nations, in collaboration with the World Bank, has agreed to com=

pensate each eligible individual with $51,000,000.00 USD. This fund, valued=

at US$51,000,000, will be delivered to you via a Bank draft check or Bank =

ATM card through the payer bank.



To proceed smoothly with the process, please reconfirm the following inform=

ation at your earliest convenience:



- Your full name:

- Home address:

- Cell phone number:



Your prompt response will be highly appreciated to facilitate the delivery =

of your compensation.



Signed,

Mr. Donald Trump

United States President

Email- donaltrump47th@usa.com

President Trump spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 17 Jul 2025 13:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ucUZP-000000004gy-1qIx

for dave@doctor.nl2k.ab.ca;

Thu, 17 Jul 2025 13:47:07 -0600

Resent-From: The Doctor

Resent-Date: Thu, 17 Jul 2025 13:47:07 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn8nam12hn2221.outbound.protection.outlook.com ([52.100.165.221]:58829 helo=NAM12-BN8-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ucS9E-00000000M1L-0eqo

for root@nl2k.ca;

Thu, 17 Jul 2025 11:12:08 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=LsHZ1Y1uXpV9U8345VXluAXFx8fot01xuB/w2oP1bvZc1Qd0w51k0juM9Gar8+HIpSHkoVCZgQORgan5CG24jqD/qSxDP5G2xnQn5OfnL6J/j2/Iq9CR1MK2HDchE0Y0N89d0hDB0bmlnhvChwwIbO4+1e2kdgoVZ0TUm3pJUWHE8kUtMwqmHpHlAnC2O5iqWvYZqkuPid7Rz6Y/If7jMxYjQlqjay/mIL3dis1OEKQtaw6Babcot/bZ39ZyxkNeDierDszP6C53+aKfLiq2RZDFVinabjrv7ZEdE3wuiRHVO5+KN+MkziRvJtAtYKM8UXaaOTcBS/JfXyIN2l87nQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=hifM32ivcPg4VGgdbCCSq1hQY0LCTm38YM/BR3HMyI4=;

b=jGklY0LeBEq4hUPwHABM5EupChRL9q18BWqa7XJNpLcnVQZIbPq04iQ8eCN2ZJBGtiKIshmy8K+fUddbxBLGeXOgjCGW4FazVuZb+MvpqDk1Syc9Ref0u5jDMJm8EVGBZv+zA+P+/avzU6c133JZ8K/6DVuJyKIiFfBuhxjcGvr+98Miyhy0DSo3xT5YwnLxDZPqexZgwPwdlNsp9SccJgCBkK9DOi9Mnna5uaWynvgE/So7L6m4eyUqmXPYb5dqPugBVbHFoOiYk47Y2Chcl9EXAlQXQ1Ss47OwjfwvkcYMPE5BxcBUwUtH1jr0/DJBlaFKSqUNA1cdDLTxSGMseA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=permerror (sender ip

is 204.115.222.97) smtp.rcpttodomain=live.com smtp.mailfrom=att.org;

dmarc=fail (p=quarantine sp=quarantine pct=100) action=quarantine

header.from=att.org; dkim=none (message not signed); arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=Renownhealth.onmicrosoft.com; s=selector1-Renownhealth-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=hifM32ivcPg4VGgdbCCSq1hQY0LCTm38YM/BR3HMyI4=;

b=rByGbb2cobG5EVISo5210QG9iqDLcakqrJStHz4aNxDOMBd03X7tPQWWDJHYQ1rX2rA8zLqJob+q7j4wfRmpyc1hTMtcxffOYzHcP7iYjlGPFlQsL4LJXIZ48fon9H3hx5Wk1Hu8LO7ZsXGmnQ6vcPpzcX9eWWEqVikv3gFln2c=

Received: from DM6PR11CA0062.namprd11.prod.outlook.com (2603:10b6:5:14c::39)

by MW5PR16MB4690.namprd16.prod.outlook.com (2603:10b6:303:19e::15) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8901.35; Thu, 17 Jul

2025 17:09:52 +0000

Received: from DS1PEPF00017096.namprd05.prod.outlook.com

(2603:10b6:5:14c:cafe::a0) by DM6PR11CA0062.outlook.office365.com

(2603:10b6:5:14c::39) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.20.8943.19 via Frontend Transport; Thu,

17 Jul 2025 17:09:52 +0000

X-MS-Exchange-Authentication-Results: spf=permerror (sender IP is

204.115.222.97) smtp.mailfrom=att.org; dkim=none (message not signed)

header.d=none;dmarc=fail action=quarantine header.from=att.org;

Received-SPF: PermError (protection.outlook.com: domain of att.org used an

invalid SPF mechanism)

Received: from mail.renown.org (204.115.222.97) by

DS1PEPF00017096.mail.protection.outlook.com (10.167.18.100) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.20.8943.21 via Frontend Transport; Thu, 17 Jul 2025 17:09:47 +0000

Received: from RWN-EXCHPW101.whsnv.net (10.40.13.29) by

RWN-EXCHPW101.whsnv.net (10.40.13.29) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.1.2507.55; Thu, 17 Jul 2025 10:07:32 -0700

Received: from [196.251.92.128] (196.251.92.128) by RWN-EXCHPW101.whsnv.net

(10.40.13.29) with Microsoft SMTP Server id 15.1.2507.55 via Frontend

Transport; Thu, 17 Jul 2025 10:07:29 -0700

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: CONGRATULATION ON THE RELEASE OF YOUR COMPENSATION FUND

To: Recipients

From: "Mr. TRUMP"

Date: Thu, 17 Jul 2025 10:07:25 -0700

Reply-To:

Message-ID: <7a99b01e-b089-470b-a4ef-3b9f44f66ddf@RWN-EXCHPW101.whsnv.net>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DS1PEPF00017096:EE_|MW5PR16MB4690:EE_

X-MS-Office365-Filtering-Correlation-Id: 4cbd8498-837d-48e4-aed3-08ddc554bbc8

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|48200799018|61400799027|376014|35950700016|7416014|82310400026|32650700017|62346030;

X-Microsoft-Antispam-Message-Info:

=?iso-8859-1?Q?ZxWWJx4d/HCC3pKmLDF25aDpVbprIau9RP7dqKjksVCWj2jb06rcaLKQ0u?=

=?iso-8859-1?Q?QEmvCxXgtbWfEudFY+NPhGQkhB6BHLPUm2BnAWdYNBluzjKNRsqbmvdsCo?=

=?iso-8859-1?Q?dpeMR8MjrYX463R/AF/WDzw3nEDQ70WJYICcPwqTXObPcw2pNZbCkfd7eA?=

=?iso-8859-1?Q?cE/GYHAoPYF6KLrCToZgr9s9kAteJlQS+SeQbr56lClovCXB7CX30m8T95?=

=?iso-8859-1?Q?ttxMgd9ciucaTKOUgWqALxH3+2G5gaUAoHyE2J2SJoKsdKy94iUB43Xz28?=

=?iso-8859-1?Q?pmcxKa5zqdFraZ/tWD2Jd922vJIwd1tgmTg/zEA4hASHVsNhvj4DL3fAVH?=

=?iso-8859-1?Q?3Lnr+wcYWGXVSQTFgRzcz3vfBRQ0B3FspELA0pvJ/5yDN8rOxDnACjiyIs?=

=?iso-8859-1?Q?ytu1xVaVEsvZytbiGITwUDyxACjDqFQRJqY/9AbhrLl/+5cnQ1fhu0hem/?=

=?iso-8859-1?Q?CSXj1DE+dCqNJjUJmfyVI2kLrn8OW5B9IfUkNwLTtZDVpgeVERPUHjjkE2?=

=?iso-8859-1?Q?soKPmaib80yNZZJag1hc0jQ3uPptp6EVT9E4nNdmhs9t5EaFaElT1zOCEl?=

=?iso-8859-1?Q?X8NOHLS76EmgV3dbHOdz2wdGNpZVnnK1gaQ3ZhJKuYRPfT/D9bjMSNgCMc?=

=?iso-8859-1?Q?uN6BPFPD/AewV3nBYHZQiaoSV3xXzWmSlAbCgf+1XjjyDUbA+kWyh6t9jq?=

=?iso-8859-1?Q?Yvr3gEQj0g727TWFWupMe1oLtvXPADj4ojHYNsgxR3g31WgGdATtdOh2zF?=

=?iso-8859-1?Q?uhfVReUVEhDDsWd0uXscgrDSFzVLRfP9mtR8PIz1bGM9/rhem2zz+Qc32o?=

=?iso-8859-1?Q?5iDvsGZCUCj7BkxEtE+ThE3UPGLs2AI7t1GZsibfTtW++xDU6sZK6C20vM?=

=?iso-8859-1?Q?EVTp1Fkd0EAhzpYkWYESew1Z3bfp5D4KwChPywCD5Nq6FHWZXA/15sOT9T?=

=?iso-8859-1?Q?thO8vgPoMyFGMROzxM5uwHux4kYsSNlLcRgBJTT0M1ZTcpyhO4kRSiGQ/Y?=

=?iso-8859-1?Q?fPFzyps6pv8AP1WYnavmKqF0GyAj9e00LWOhi6o1MwIo6QEvVFghUmHf+q?=

=?iso-8859-1?Q?KKqiYF8XhnzMtmHte1/jScazdVqdPA41pve/iWY6HZc7bc4ypuatTQURU+?=

=?iso-8859-1?Q?xivvOO3PardTLUmgo05MkDWdWkYsoZKY28AeMgx/KMzBa33Q2l2CW2FZN+?=

=?iso-8859-1?Q?wmQ2CbPgSWC1PVs50L4ydhZDgKdUlsyHo5PuNf/ahm7lf127pbLhxVzvZH?=

=?iso-8859-1?Q?bHpPeiiwWlTAo5aWqyKqQ0koY+67oqpTU+Yf1C2JCjU991+lDuvkqaN5BP?=

=?iso-8859-1?Q?m0100MU3v0xC+VpRqUXWFPK4MVXP3d3q5TjM90Oh2YEENYYCgxVyLY3m+K?=

=?iso-8859-1?Q?fngUZ74XLE0hRfxAeSKKMuiuplTeBHAHWrxLlbhBrKvY8S76srXCzjFvzf?=

=?iso-8859-1?Q?AN7zBkU1t1/iW/YwQnxAcTI0Tf0FmHGzEfc6z1XCzUd4ETYIMkG9Sf8L8m?=

=?iso-8859-1?Q?mNcr5ag9opotuq8T5YwVlOBmEsvdmJKFKa3mtQIHg+5ZeCifudzlv4h1D4?=

=?iso-8859-1?Q?XLURGR3VpNJs6m8dXKPNxFV/aCp1+ogD4HcH4C5PrYhACxYkyE/HLij/iA?=

=?iso-8859-1?Q?6dwutq51F3CI+GK5Nh7dtoQvU2G+eONW6e6ALPgHDeTnqi2Qyv4rJlbeyR?=

=?iso-8859-1?Q?CaTnqTjxpihscm+RFyYRQmVa0ytGfk93VDAyV00/de26aUj++F5xoCHp1c?=

=?iso-8859-1?Q?u3Xd0g/FxPiUVx0ZrQ4iQpf6hfFoS8oDHHCaAvpCQIuuHgh4Vu/XE78z7F?=

=?iso-8859-1?Q?aUwaUD5KemtGwUny8N1xpRjZ0h8RCOgn2EEXJynDEqSVlFOd/huzKE/Awk?=

=?iso-8859-1?Q?Y821F7qmNjBFzJGJEMRuKycDC+QRXbD1g63QeWk/oXYQL1PjUBKnCXnnRX?=

=?iso-8859-1?Q?tn5U6hsml6N3CRCg7Pa98sb4B1B5N4nJbmvZhnMh6q1Kg6fyyka0BeFSK5?=

=?iso-8859-1?Q?WTeK8RJZpJc0aBYUS3XO8aGYade6XxOY+KlfZ0cmvK/tU/zQ1YRbpmbWP8?=

=?iso-8859-1?Q?b62IEypyvHua?=

X-Forefront-Antispam-Report:

CIP:204.115.222.97;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail.renown.org;PTR:ErrorRetry;CAT:OSPM;SFS:(13230040)(48200799018)(61400799027)(376014)(35950700016)(7416014)(82310400026)(32650700017)(62346030);DIR:OUT;SFP:1501;

X-OriginatorOrg: Renownhealth.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Jul 2025 17:09:47.4067

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 4cbd8498-837d-48e4-aed3-08ddc554bbc8

X-MS-Exchange-CrossTenant-Id: 54115126-19c9-4b52-84ab-b746e438359a

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=54115126-19c9-4b52-84ab-b746e438359a;Ip=[204.115.222.97];Helo=[mail.renown.org]

X-MS-Exchange-CrossTenant-AuthSource:

DS1PEPF00017096.namprd05.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW5PR16MB4690

X-Spam_score: 26.4

X-Spam_score_int: 264

X-Spam_bar: ++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: CAUTION: External Email. THINK BEFORE YOU CLICK. EXTERNAL

EMAIL: This email originated outside of Renown Health. DO NOT CLICK on links

or attachments unless you recognize the sender and know the content is safe.

Legacy OP Exchange Rule



Content analysis details: (26.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[52.100.165.221 listed in will-spam-for-food.eu.org]

[52.100.165.221 listed in will-spam-for-food.eu.org]

[52.100.165.221 listed in will-spam-for-food.eu.org]

[52.100.165.221 listed in will-spam-for-food.eu.org]

[52.100.165.221 listed in will-spam-for-food.eu.org]

[52.100.165.221 listed in will-spam-for-food.eu.org]

[52.100.165.221 listed in will-spam-for-food.eu.org]

[52.100.165.221 listed in will-spam-for-food.eu.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[196.251.92.128 listed in zen.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

[196.251.92.128 listed in dnsbl.ahbl.org]

[196.251.92.128 listed in dnsbl.ahbl.org]

[196.251.92.128 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[dnsbl.ahbl.org]

[52.100.165.221 listed in dnsbl.ahbl.org]

[52.100.165.221 listed in dnsbl.ahbl.org]

[52.100.165.221 listed in dnsbl.ahbl.org]

[52.100.165.221 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[196.251.92.128 listed in sbl-xbl.spamhaus.org]

[196.251.92.128 listed in sbl-xbl.spamhaus.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.100.165.221 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.100.165.221 listed in wl.mailspike.net]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.6 SUBJ_ALL_CAPS Subject is all capitals

1.5 HK_SCAM_N8 BODY: No description available.

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 LOTS_OF_MONEY Huge... sums of money

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.6 HK_SCAM No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 HK_NAME_MR_MRS No description available.

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

1.8 MONEY_NOHTML Lots of money in plain text

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

0.0 MONEY_FORM Lots of money if you fill out a form

0.0 FILL_THIS_FORM Fill in a form with personal information

0.0 LOTTO_DEPT Claims Department

3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases

0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money

Subject: {SPAM?} CONGRATULATION ON THE RELEASE OF YOUR COMPENSATION FUND



CAUTION: External Email. THINK BEFORE YOU CLICK.







EXTERNAL EMAIL: This email originated outside of Renown Health.



DO NOT CLICK on links or attachments unless you recognize the sender and kn=

ow the content is safe. Legacy OP Exchange Rule



REPORT IT to the Service Desk at 4042 and send it as an attachment to infop=

rot@renown.org.





The White House

Washington, D.C., United States



I, Donald J. Trump, 47th President of the United States of America, want=

to bring to your attention that prior to my Executive Order to the United =

Nations Compensation Unit and Emergency Relief Coordinator, it has come to =

my knowledge that your name appears among those who have not yet received t=

heir compensation fund payment.



The United Nations, in collaboration with the World Bank, has agreed to com=

pensate each eligible individual with $51,000,000.00 USD. This fund, valued=

at US$51,000,000, will be delivered to you via a Bank draft check or Bank =

ATM card through the payer bank.



To proceed smoothly with the process, please reconfirm the following inform=

ation at your earliest convenience:



- Your full name:

- Home address:

- Cell phone number:



Your prompt response will be highly appreciated to facilitate the delivery =

of your compensation.



Signed,

Mr. Donald Trump

United States President

Email- donaltrump47th@usa.com

President Trump spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 17 Jul 2025 13:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ucUZY-000000004hm-30aL

for dave@doctor.nl2k.ab.ca;

Thu, 17 Jul 2025 13:47:16 -0600

Resent-From: The Doctor

Resent-Date: Thu, 17 Jul 2025 13:47:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn8nam12hn2221.outbound.protection.outlook.com ([52.100.165.221]:58829 helo=NAM12-BN8-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ucS9E-00000000M1L-0eqo

for root@nl2k.ca;

Thu, 17 Jul 2025 11:12:08 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=LsHZ1Y1uXpV9U8345VXluAXFx8fot01xuB/w2oP1bvZc1Qd0w51k0juM9Gar8+HIpSHkoVCZgQORgan5CG24jqD/qSxDP5G2xnQn5OfnL6J/j2/Iq9CR1MK2HDchE0Y0N89d0hDB0bmlnhvChwwIbO4+1e2kdgoVZ0TUm3pJUWHE8kUtMwqmHpHlAnC2O5iqWvYZqkuPid7Rz6Y/If7jMxYjQlqjay/mIL3dis1OEKQtaw6Babcot/bZ39ZyxkNeDierDszP6C53+aKfLiq2RZDFVinabjrv7ZEdE3wuiRHVO5+KN+MkziRvJtAtYKM8UXaaOTcBS/JfXyIN2l87nQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=hifM32ivcPg4VGgdbCCSq1hQY0LCTm38YM/BR3HMyI4=;

b=jGklY0LeBEq4hUPwHABM5EupChRL9q18BWqa7XJNpLcnVQZIbPq04iQ8eCN2ZJBGtiKIshmy8K+fUddbxBLGeXOgjCGW4FazVuZb+MvpqDk1Syc9Ref0u5jDMJm8EVGBZv+zA+P+/avzU6c133JZ8K/6DVuJyKIiFfBuhxjcGvr+98Miyhy0DSo3xT5YwnLxDZPqexZgwPwdlNsp9SccJgCBkK9DOi9Mnna5uaWynvgE/So7L6m4eyUqmXPYb5dqPugBVbHFoOiYk47Y2Chcl9EXAlQXQ1Ss47OwjfwvkcYMPE5BxcBUwUtH1jr0/DJBlaFKSqUNA1cdDLTxSGMseA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=permerror (sender ip

is 204.115.222.97) smtp.rcpttodomain=live.com smtp.mailfrom=att.org;

dmarc=fail (p=quarantine sp=quarantine pct=100) action=quarantine

header.from=att.org; dkim=none (message not signed); arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=Renownhealth.onmicrosoft.com; s=selector1-Renownhealth-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=hifM32ivcPg4VGgdbCCSq1hQY0LCTm38YM/BR3HMyI4=;

b=rByGbb2cobG5EVISo5210QG9iqDLcakqrJStHz4aNxDOMBd03X7tPQWWDJHYQ1rX2rA8zLqJob+q7j4wfRmpyc1hTMtcxffOYzHcP7iYjlGPFlQsL4LJXIZ48fon9H3hx5Wk1Hu8LO7ZsXGmnQ6vcPpzcX9eWWEqVikv3gFln2c=

Received: from DM6PR11CA0062.namprd11.prod.outlook.com (2603:10b6:5:14c::39)

by MW5PR16MB4690.namprd16.prod.outlook.com (2603:10b6:303:19e::15) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8901.35; Thu, 17 Jul

2025 17:09:52 +0000

Received: from DS1PEPF00017096.namprd05.prod.outlook.com

(2603:10b6:5:14c:cafe::a0) by DM6PR11CA0062.outlook.office365.com

(2603:10b6:5:14c::39) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.20.8943.19 via Frontend Transport; Thu,

17 Jul 2025 17:09:52 +0000

X-MS-Exchange-Authentication-Results: spf=permerror (sender IP is

204.115.222.97) smtp.mailfrom=att.org; dkim=none (message not signed)

header.d=none;dmarc=fail action=quarantine header.from=att.org;

Received-SPF: PermError (protection.outlook.com: domain of att.org used an

invalid SPF mechanism)

Received: from mail.renown.org (204.115.222.97) by

DS1PEPF00017096.mail.protection.outlook.com (10.167.18.100) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.20.8943.21 via Frontend Transport; Thu, 17 Jul 2025 17:09:47 +0000

Received: from RWN-EXCHPW101.whsnv.net (10.40.13.29) by

RWN-EXCHPW101.whsnv.net (10.40.13.29) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.1.2507.55; Thu, 17 Jul 2025 10:07:32 -0700

Received: from [196.251.92.128] (196.251.92.128) by RWN-EXCHPW101.whsnv.net

(10.40.13.29) with Microsoft SMTP Server id 15.1.2507.55 via Frontend

Transport; Thu, 17 Jul 2025 10:07:29 -0700

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: CONGRATULATION ON THE RELEASE OF YOUR COMPENSATION FUND

To: Recipients

From: "Mr. TRUMP"

Date: Thu, 17 Jul 2025 10:07:25 -0700

Reply-To:

Message-ID: <7a99b01e-b089-470b-a4ef-3b9f44f66ddf@RWN-EXCHPW101.whsnv.net>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DS1PEPF00017096:EE_|MW5PR16MB4690:EE_

X-MS-Office365-Filtering-Correlation-Id: 4cbd8498-837d-48e4-aed3-08ddc554bbc8

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|48200799018|61400799027|376014|35950700016|7416014|82310400026|32650700017|62346030;

X-Microsoft-Antispam-Message-Info:

=?iso-8859-1?Q?ZxWWJx4d/HCC3pKmLDF25aDpVbprIau9RP7dqKjksVCWj2jb06rcaLKQ0u?=

=?iso-8859-1?Q?QEmvCxXgtbWfEudFY+NPhGQkhB6BHLPUm2BnAWdYNBluzjKNRsqbmvdsCo?=

=?iso-8859-1?Q?dpeMR8MjrYX463R/AF/WDzw3nEDQ70WJYICcPwqTXObPcw2pNZbCkfd7eA?=

=?iso-8859-1?Q?cE/GYHAoPYF6KLrCToZgr9s9kAteJlQS+SeQbr56lClovCXB7CX30m8T95?=

=?iso-8859-1?Q?ttxMgd9ciucaTKOUgWqALxH3+2G5gaUAoHyE2J2SJoKsdKy94iUB43Xz28?=

=?iso-8859-1?Q?pmcxKa5zqdFraZ/tWD2Jd922vJIwd1tgmTg/zEA4hASHVsNhvj4DL3fAVH?=

=?iso-8859-1?Q?3Lnr+wcYWGXVSQTFgRzcz3vfBRQ0B3FspELA0pvJ/5yDN8rOxDnACjiyIs?=

=?iso-8859-1?Q?ytu1xVaVEsvZytbiGITwUDyxACjDqFQRJqY/9AbhrLl/+5cnQ1fhu0hem/?=

=?iso-8859-1?Q?CSXj1DE+dCqNJjUJmfyVI2kLrn8OW5B9IfUkNwLTtZDVpgeVERPUHjjkE2?=

=?iso-8859-1?Q?soKPmaib80yNZZJag1hc0jQ3uPptp6EVT9E4nNdmhs9t5EaFaElT1zOCEl?=

=?iso-8859-1?Q?X8NOHLS76EmgV3dbHOdz2wdGNpZVnnK1gaQ3ZhJKuYRPfT/D9bjMSNgCMc?=

=?iso-8859-1?Q?uN6BPFPD/AewV3nBYHZQiaoSV3xXzWmSlAbCgf+1XjjyDUbA+kWyh6t9jq?=

=?iso-8859-1?Q?Yvr3gEQj0g727TWFWupMe1oLtvXPADj4ojHYNsgxR3g31WgGdATtdOh2zF?=

=?iso-8859-1?Q?uhfVReUVEhDDsWd0uXscgrDSFzVLRfP9mtR8PIz1bGM9/rhem2zz+Qc32o?=

=?iso-8859-1?Q?5iDvsGZCUCj7BkxEtE+ThE3UPGLs2AI7t1GZsibfTtW++xDU6sZK6C20vM?=

=?iso-8859-1?Q?EVTp1Fkd0EAhzpYkWYESew1Z3bfp5D4KwChPywCD5Nq6FHWZXA/15sOT9T?=

=?iso-8859-1?Q?thO8vgPoMyFGMROzxM5uwHux4kYsSNlLcRgBJTT0M1ZTcpyhO4kRSiGQ/Y?=

=?iso-8859-1?Q?fPFzyps6pv8AP1WYnavmKqF0GyAj9e00LWOhi6o1MwIo6QEvVFghUmHf+q?=

=?iso-8859-1?Q?KKqiYF8XhnzMtmHte1/jScazdVqdPA41pve/iWY6HZc7bc4ypuatTQURU+?=

=?iso-8859-1?Q?xivvOO3PardTLUmgo05MkDWdWkYsoZKY28AeMgx/KMzBa33Q2l2CW2FZN+?=

=?iso-8859-1?Q?wmQ2CbPgSWC1PVs50L4ydhZDgKdUlsyHo5PuNf/ahm7lf127pbLhxVzvZH?=

=?iso-8859-1?Q?bHpPeiiwWlTAo5aWqyKqQ0koY+67oqpTU+Yf1C2JCjU991+lDuvkqaN5BP?=

=?iso-8859-1?Q?m0100MU3v0xC+VpRqUXWFPK4MVXP3d3q5TjM90Oh2YEENYYCgxVyLY3m+K?=

=?iso-8859-1?Q?fngUZ74XLE0hRfxAeSKKMuiuplTeBHAHWrxLlbhBrKvY8S76srXCzjFvzf?=

=?iso-8859-1?Q?AN7zBkU1t1/iW/YwQnxAcTI0Tf0FmHGzEfc6z1XCzUd4ETYIMkG9Sf8L8m?=

=?iso-8859-1?Q?mNcr5ag9opotuq8T5YwVlOBmEsvdmJKFKa3mtQIHg+5ZeCifudzlv4h1D4?=

=?iso-8859-1?Q?XLURGR3VpNJs6m8dXKPNxFV/aCp1+ogD4HcH4C5PrYhACxYkyE/HLij/iA?=

=?iso-8859-1?Q?6dwutq51F3CI+GK5Nh7dtoQvU2G+eONW6e6ALPgHDeTnqi2Qyv4rJlbeyR?=

=?iso-8859-1?Q?CaTnqTjxpihscm+RFyYRQmVa0ytGfk93VDAyV00/de26aUj++F5xoCHp1c?=

=?iso-8859-1?Q?u3Xd0g/FxPiUVx0ZrQ4iQpf6hfFoS8oDHHCaAvpCQIuuHgh4Vu/XE78z7F?=

=?iso-8859-1?Q?aUwaUD5KemtGwUny8N1xpRjZ0h8RCOgn2EEXJynDEqSVlFOd/huzKE/Awk?=

=?iso-8859-1?Q?Y821F7qmNjBFzJGJEMRuKycDC+QRXbD1g63QeWk/oXYQL1PjUBKnCXnnRX?=

=?iso-8859-1?Q?tn5U6hsml6N3CRCg7Pa98sb4B1B5N4nJbmvZhnMh6q1Kg6fyyka0BeFSK5?=

=?iso-8859-1?Q?WTeK8RJZpJc0aBYUS3XO8aGYade6XxOY+KlfZ0cmvK/tU/zQ1YRbpmbWP8?=

=?iso-8859-1?Q?b62IEypyvHua?=

X-Forefront-Antispam-Report:

CIP:204.115.222.97;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail.renown.org;PTR:ErrorRetry;CAT:OSPM;SFS:(13230040)(48200799018)(61400799027)(376014)(35950700016)(7416014)(82310400026)(32650700017)(62346030);DIR:OUT;SFP:1501;

X-OriginatorOrg: Renownhealth.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Jul 2025 17:09:47.4067

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 4cbd8498-837d-48e4-aed3-08ddc554bbc8

X-MS-Exchange-CrossTenant-Id: 54115126-19c9-4b52-84ab-b746e438359a

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=54115126-19c9-4b52-84ab-b746e438359a;Ip=[204.115.222.97];Helo=[mail.renown.org]

X-MS-Exchange-CrossTenant-AuthSource:

DS1PEPF00017096.namprd05.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW5PR16MB4690

X-Spam_score: 26.4

X-Spam_score_int: 264

X-Spam_bar: ++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: CAUTION: External Email. THINK BEFORE YOU CLICK. EXTERNAL

EMAIL: This email originated outside of Renown Health. DO NOT CLICK on links

or attachments unless you recognize the sender and know the content is safe.

Legacy OP Exchange Rule



Content analysis details: (26.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[will-spam-for-food.eu.org]

[52.100.165.221 listed in will-spam-for-food.eu.org]

[52.100.165.221 listed in will-spam-for-food.eu.org]

[52.100.165.221 listed in will-spam-for-food.eu.org]

[52.100.165.221 listed in will-spam-for-food.eu.org]

[52.100.165.221 listed in will-spam-for-food.eu.org]

[52.100.165.221 listed in will-spam-for-food.eu.org]

[52.100.165.221 listed in will-spam-for-food.eu.org]

[52.100.165.221 listed in will-spam-for-food.eu.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[196.251.92.128 listed in zen.spamhaus.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

[196.251.92.128 listed in dnsbl.ahbl.org]

[196.251.92.128 listed in dnsbl.ahbl.org]

[196.251.92.128 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:cafe:0:0:a0 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:14c:0:0:0:39 listed in]

[dnsbl.ahbl.org]

[52.100.165.221 listed in dnsbl.ahbl.org]

[52.100.165.221 listed in dnsbl.ahbl.org]

[52.100.165.221 listed in dnsbl.ahbl.org]

[52.100.165.221 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[196.251.92.128 listed in sbl-xbl.spamhaus.org]

[196.251.92.128 listed in sbl-xbl.spamhaus.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.100.165.221 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.100.165.221 listed in wl.mailspike.net]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.6 SUBJ_ALL_CAPS Subject is all capitals

1.5 HK_SCAM_N8 BODY: No description available.

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 LOTS_OF_MONEY Huge... sums of money

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.6 HK_SCAM No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 HK_NAME_MR_MRS No description available.

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

1.8 MONEY_NOHTML Lots of money in plain text

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

0.0 MONEY_FORM Lots of money if you fill out a form

0.0 FILL_THIS_FORM Fill in a form with personal information

0.0 LOTTO_DEPT Claims Department

3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases

0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money

Subject: {SPAM?} CONGRATULATION ON THE RELEASE OF YOUR COMPENSATION FUND



CAUTION: External Email. THINK BEFORE YOU CLICK.







EXTERNAL EMAIL: This email originated outside of Renown Health.



DO NOT CLICK on links or attachments unless you recognize the sender and kn=

ow the content is safe. Legacy OP Exchange Rule



REPORT IT to the Service Desk at 4042 and send it as an attachment to infop=

rot@renown.org.





The White House

Washington, D.C., United States



I, Donald J. Trump, 47th President of the United States of America, want=

to bring to your attention that prior to my Executive Order to the United =

Nations Compensation Unit and Emergency Relief Coordinator, it has come to =

my knowledge that your name appears among those who have not yet received t=

heir compensation fund payment.



The United Nations, in collaboration with the World Bank, has agreed to com=

pensate each eligible individual with $51,000,000.00 USD. This fund, valued=

at US$51,000,000, will be delivered to you via a Bank draft check or Bank =

ATM card through the payer bank.



To proceed smoothly with the process, please reconfirm the following inform=

ation at your earliest convenience:



- Your full name:

- Home address:

- Cell phone number:



Your prompt response will be highly appreciated to facilitate the delivery =

of your compensation.



Signed,

Mr. Donald Trump

United States President

Email- donaltrump47th@usa.com

President Trump spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 17 Jul 2025 13:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ucUa2-000000004ip-439E

for dave@doctor.nl2k.ab.ca;

Thu, 17 Jul 2025 13:47:46 -0600

Resent-From: The Doctor

Resent-Date: Thu, 17 Jul 2025 13:47:46 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn8nam04hn2204.outbound.protection.outlook.com ([52.100.163.204]:61377 helo=NAM04-BN8-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ucSEi-00000000MJ2-2IPS

for support@nk.ca;

Thu, 17 Jul 2025 11:17:47 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=wpHYkGLMlipajp8prk3J0ltO99I94XpB8jTgspzRO4R3F45QCNX+OO1RIclMNhVID0hnNr7JmQX3ue09t7ne7z1B1Px4Cgk8TLLzaIHKNRrMGw2XIbllnNRuG/bL/LRiPqzlmKc8j6Klfj7L21TvdcHogTLoyfJaUbBfVVAz3ZcvVPkgnV5Ts0oNiwvhLIzMZTjGUnNlgGbYR6PODLGrS/bCc6QmOmbD828mygL8tMafW4+Jiur4AdK8A3Jf/hTpVhRElVXhv34KO6fpqb/uM5bVPYw5Y/jkxbarmt9cyP2qla4wlo4udwqYHNEJlk0fwN0dwlFwTnxWxM/f8+8y1w==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=hifM32ivcPg4VGgdbCCSq1hQY0LCTm38YM/BR3HMyI4=;

b=V9y5QtNWZ60Q/9t8tmryNXT13OU10RR5T0k3PvxnEZdMqMXyapaz5gmr+z5VDpOiMGupN+Wngr8cIfdyFKRbg9ZJKi/KVF3e/U7gYalSMu642ukEdeJtTVB9cmw/63ajU/nrMr+O1KNSDmm7h6y6gIFgKgKl3l2JhzNwRA8optMrBYlkvzCvnMuLrcwJis1N0tLU+npPWaaBWAg0a3KzvjIFCXXK2ZqpgUjBM5e27SSntBjVyNmh9M0oDDHUmLEpsesksoXnLyTOpoLfIzwndeJEmOMPVaI0+QuLwNT9LsxQFoGEVIld2HzgCwM/vUOZm94i4yQHuKgZ0oUAihVC8Q==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=permerror (sender ip

is 204.115.222.97) smtp.rcpttodomain=yahoo.com smtp.mailfrom=att.org;

dmarc=fail (p=quarantine sp=quarantine pct=100) action=quarantine

header.from=att.org; dkim=none (message not signed); arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=Renownhealth.onmicrosoft.com; s=selector1-Renownhealth-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=hifM32ivcPg4VGgdbCCSq1hQY0LCTm38YM/BR3HMyI4=;

b=YqVtCSzRQ1/Zvg6vq44TlzkKSwNdC2X3ofhpOeXIj7fUnWG4qo7XxsyR9n8tYvJn83DpWS5SvSaU9z/PomsUNcNTNoqPIqSpsjKqt9RfoTuOEbKbENUtRcqwJbbpwkWLQ+icClcR3567IdYGKRvbZcZ3GzK5JL1JEtJ6IDM3LSM=

Received: from BYAPR04CA0009.namprd04.prod.outlook.com (2603:10b6:a03:40::22)

by PH7PR16MB5185.namprd16.prod.outlook.com (2603:10b6:510:2b7::5) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8922.39; Thu, 17 Jul

2025 17:15:34 +0000

Received: from SJ1PEPF000026C6.namprd04.prod.outlook.com

(2603:10b6:a03:40:cafe::ac) by BYAPR04CA0009.outlook.office365.com

(2603:10b6:a03:40::22) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.20.8943.20 via Frontend Transport; Thu,

17 Jul 2025 17:15:34 +0000

X-MS-Exchange-Authentication-Results: spf=permerror (sender IP is

204.115.222.97) smtp.mailfrom=att.org; dkim=none (message not signed)

header.d=none;dmarc=fail action=quarantine header.from=att.org;

Received-SPF: PermError (protection.outlook.com: domain of att.org used an

invalid SPF mechanism)

Received: from mail.renown.org (204.115.222.97) by

SJ1PEPF000026C6.mail.protection.outlook.com (10.167.244.103) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.20.8943.21 via Frontend Transport; Thu, 17 Jul 2025 17:15:28 +0000

Received: from RWN-EXCHPW101.whsnv.net (10.40.13.29) by

RWN-EXCHPW101.whsnv.net (10.40.13.29) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.1.2507.55; Thu, 17 Jul 2025 10:13:12 -0700

Received: from [196.251.92.128] (196.251.92.128) by RWN-EXCHPW101.whsnv.net

(10.40.13.29) with Microsoft SMTP Server id 15.1.2507.55 via Frontend

Transport; Thu, 17 Jul 2025 10:13:08 -0700

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: CONGRATULATION ON THE RELEASE OF YOUR COMPENSATION FUND

To: Recipients

From: "Mr. TRUMP"

Date: Thu, 17 Jul 2025 10:13:04 -0700

Reply-To:

Message-ID: <0a41d0f0-8bc2-4df6-a99c-d57f8c6de78e@RWN-EXCHPW101.whsnv.net>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: SJ1PEPF000026C6:EE_|PH7PR16MB5185:EE_

X-MS-Office365-Filtering-Correlation-Id: c7e72484-64b6-416c-b7fa-08ddc5558747

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|82310400026|48200799018|61400799027|32650700017|35950700016|7416014|376014|62346030;

X-Microsoft-Antispam-Message-Info:

=?iso-8859-1?Q?wUWAYiAsICVP5po2By5ni3M6Y5ClQhlpR0Nsxv/s5rTPfKubwFeeFyNfdl?=

=?iso-8859-1?Q?4FA4kaFfwSUpsZVhtUZhnVUsdUQ+LT2eEawaxIe3AKbYGDPFCpdYtH8KXB?=

=?iso-8859-1?Q?Gy4OAhVifOpdbfTm6OgH6pvPGCWWqLWoHZLvbflBULLCAiSCPHua90S+at?=

=?iso-8859-1?Q?/NJFnj5Jt58IeVZ/5QzQnro8W/kwBwdnNDMAogQ4i35HWTTood0oJo2IL1?=

=?iso-8859-1?Q?Z0EMeMFPOLVKeRDG/lqI8caLcGRNnpOhGozsT0yedb+qgXtW6/9wrVCzL+?=

=?iso-8859-1?Q?XmcuN2ClZQ2kc3qXT5DA+TOGQ9hLzwb2l3i+ouBa6oQozBruqPV5WqKzHb?=

=?iso-8859-1?Q?G7mhS4M4S7orikf/u1DGBP4Q3aiSOi4+PhI3MrQ1LP5yQ4ijSTn8XWiIDm?=

=?iso-8859-1?Q?4bFBRDptcL0DlBpaogiNiHRoKHx5DtzbqAiNaWGG/IcL7lAI1oXIlggEeL?=

=?iso-8859-1?Q?BunhTZX3pasgbhPccFfNnLQveerhoEW3nsbj9WC49jZmI7OMZiwpo8iB7n?=

=?iso-8859-1?Q?dUvZ3ryQjuq4Fj2fn62kTxM9WSWCIVuHlGsBE0ocgC/MD/huomzyQF0rOm?=

=?iso-8859-1?Q?VW//aovgJCuCNpQTruo1GLzfLeSsctbRIwvBZaPCH2pc/JYTguFwJMloTD?=

=?iso-8859-1?Q?2v3N9K2kzxiB+ZCSN0m/uDS10Cq3zsXXBq9fDZSCT6Sicn9lTE0t1fWZbv?=

=?iso-8859-1?Q?A1ji0epgQaJX+sbH58DqtJUkk8u/9T7ZVpmz/Ha3oFneH6dSvqbUdHgXFP?=

=?iso-8859-1?Q?v0Nyccnkc5SVmQGiLElayeyubNpzoOVX/ukmIx56OYHljjUBdowN/lXomL?=

=?iso-8859-1?Q?1D2mwHii+fNcZqVFOdxS8HqRIPCc/be68pfJqsYzg3R0ZouYSD3nC5BTdL?=

=?iso-8859-1?Q?q+nZLWZjdKgTG+47e9PqHbBeuhwtKNR6Ankt5CjlOEjcFKqs61Ciea2CWd?=

=?iso-8859-1?Q?pDSjK7SEd8uM+twZkmh7kFKzDM0GOQeCpHz+eLDFqbXDJIDbAiaCujaPXw?=

=?iso-8859-1?Q?CYHVI6EPB5dsOM4rfRxHhzEzCYoUr8Ut4uU3wiPlPgqGVq/Rz/1BPweehR?=

=?iso-8859-1?Q?qNgLfL0/6YMFqPvrLeQ4hEkgCJJHNBHRuIDLvOne4Sq9T5IyRD6aaSKxtY?=

=?iso-8859-1?Q?fRJc7jO5XOq+WRQAdgi1Hxp0FvEdXhxJnHR/vFjBqqKo0VbO8CLMIpIb6o?=

=?iso-8859-1?Q?DjCDLkpvlSuYAjOCJkfujIxlyRv6jcucOOlskqHGaO8gqbuf0yia5H0gR9?=

=?iso-8859-1?Q?mkhGff660q47DhrQjTAXbmpsHc4tI1rb4gMaurnPoAZxTYBTFlFidruFCL?=

=?iso-8859-1?Q?alChjFIC6+6I7h3VSliPKdvS4zRZ/dINUvKrtQYk2KM8nFddHV8mQM18Au?=

=?iso-8859-1?Q?6dMsEMCDZLoXRm4917w0J+IZBgB6PJILZsGEl/SJi0KAE28fMOg8FfYw6T?=

=?iso-8859-1?Q?XmMgy4WlasYI7B/dekpzcZaOBy8lFVyz1XOsRA6gzNxFKyDOWhF7CEIxpV?=

=?iso-8859-1?Q?rg2jPC7Tjs8FP9QCCawFEhYyirW393RlgcYu2Dql4LSyR0g33dMeCbhsdE?=

=?iso-8859-1?Q?8tfp7I/wdpYpnWc9yOu49Mj+ezZjST9byEOjVyW6NZ7LJL2dujHOr17Vfn?=

=?iso-8859-1?Q?vKNfo+lwHJdRbRCFNBA6SOpYqgVlf/KAeJ+Rr+lH/lrtkiMJz8QP5IMN3e?=

=?iso-8859-1?Q?3G3JmX40AxhhYvwmvqwtud9oY1tNMxdyaBpQDOlnyzNhVyyn1HoyI4AxOl?=

=?iso-8859-1?Q?QMtW52VOcpi3YW4i+hqhjHqVZxXnGTBPW08SX9ZQIQnRS2M4/4fAFeANsC?=

=?iso-8859-1?Q?xrSSOxGORn+xgRNYSJWv38YSfp75FkcjmWhAp3uuc2NcarwucBlGkgZABB?=

=?iso-8859-1?Q?cK7GzDYobJoXa5AQFU1DEF8EHsVJR0htxkQI6jTWT6Dvzb//zdoOZnc3oz?=

=?iso-8859-1?Q?MsIO/TaYzHf2ZkIg23CiOFA3Klz1ZXP0my7bj5+lHsTiHMheltvta8jnwq?=

=?iso-8859-1?Q?4r+HhA91BLh2zmUB8qCcZVWqIUx906eoCuCZWyDBZpXAdeiM+tnDa7Ww8y?=

=?iso-8859-1?Q?f3EmM2B4lD0m?=

X-Forefront-Antispam-Report:

CIP:204.115.222.97;CTRY:US;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail.renown.org;PTR:ErrorRetry;CAT:OSPM;SFS:(13230040)(82310400026)(48200799018)(61400799027)(32650700017)(35950700016)(7416014)(376014)(62346030);DIR:OUT;SFP:1501;

X-OriginatorOrg: Renownhealth.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Jul 2025 17:15:28.8560

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: c7e72484-64b6-416c-b7fa-08ddc5558747

X-MS-Exchange-CrossTenant-Id: 54115126-19c9-4b52-84ab-b746e438359a

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=54115126-19c9-4b52-84ab-b746e438359a;Ip=[204.115.222.97];Helo=[mail.renown.org]

X-MS-Exchange-CrossTenant-AuthSource:

SJ1PEPF000026C6.namprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH7PR16MB5185

X-Spam_score: 22.9

X-Spam_score_int: 229

X-Spam_bar: ++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: CAUTION: External Email. THINK BEFORE YOU CLICK. EXTERNAL

EMAIL: This email originated outside of Renown Health. DO NOT CLICK on links

or attachments unless you recognize the sender and know the content is safe.

Legacy OP Exchange Rule



Content analysis details: (22.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[196.251.92.128 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[204.115.222.97 listed in will-spam-for-food.eu.org]

[2603:10b6:a03:40:cafe:0:0:ac listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:40:cafe:0:0:ac listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:40:cafe:0:0:ac listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:40:cafe:0:0:ac listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:40:cafe:0:0:ac listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:40:cafe:0:0:ac listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:40:cafe:0:0:ac listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:40:cafe:0:0:ac listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:40:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:40:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:40:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:40:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:40:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:40:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:40:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:40:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[52.100.163.204 listed in will-spam-for-food.eu.org]

[52.100.163.204 listed in will-spam-for-food.eu.org]

[52.100.163.204 listed in will-spam-for-food.eu.org]

[52.100.163.204 listed in will-spam-for-food.eu.org]

[52.100.163.204 listed in will-spam-for-food.eu.org]

[52.100.163.204 listed in will-spam-for-food.eu.org]

[52.100.163.204 listed in will-spam-for-food.eu.org]

[52.100.163.204 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

[196.251.92.128 listed in dnsbl.ahbl.org]

[196.251.92.128 listed in dnsbl.ahbl.org]

[196.251.92.128 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[204.115.222.97 listed in dnsbl.ahbl.org]

[52.100.163.204 listed in dnsbl.ahbl.org]

[52.100.163.204 listed in dnsbl.ahbl.org]

[52.100.163.204 listed in dnsbl.ahbl.org]

[52.100.163.204 listed in dnsbl.ahbl.org]

[2603:10b6:a03:40:0:0:0:22 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:40:0:0:0:22 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:40:0:0:0:22 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:40:0:0:0:22 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:40:cafe:0:0:ac listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:40:cafe:0:0:ac listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:40:cafe:0:0:ac listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:40:cafe:0:0:ac listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[196.251.92.128 listed in dnsbl.ahbl.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[196.251.92.128 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[196.251.92.128 listed in sbl-xbl.spamhaus.org]

[196.251.92.128 listed in sbl-xbl.spamhaus.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.6 SUBJ_ALL_CAPS Subject is all capitals

1.5 HK_SCAM_N8 BODY: No description available.

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.100.163.204 listed in list.dnswl.org]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.100.163.204 listed in sa-trusted.bondedsender.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.100.163.204 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[52.100.163.204 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[52.100.163.204 listed in bl.score.senderscore.com]

0.0 LOTS_OF_MONEY Huge... sums of money

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.6 HK_SCAM No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 HK_NAME_MR_MRS No description available.

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

1.8 MONEY_NOHTML Lots of money in plain text

2.0 FILL_THIS_FORM_LONG Fill in a form with personal information

0.0 LOTTO_DEPT Claims Department

0.0 FILL_THIS_FORM Fill in a form with personal information

0.0 MONEY_FORM Lots of money if you fill out a form

3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases

0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money

Subject: {SPAM?} CONGRATULATION ON THE RELEASE OF YOUR COMPENSATION FUND



CAUTION: External Email. THINK BEFORE YOU CLICK.







EXTERNAL EMAIL: This email originated outside of Renown Health.



DO NOT CLICK on links or attachments unless you recognize the sender and kn=

ow the content is safe. Legacy OP Exchange Rule



REPORT IT to the Service Desk at 4042 and send it as an attachment to infop=

rot@renown.org.





The White House

Washington, D.C., United States



I, Donald J. Trump, 47th President of the United States of America, want=

to bring to your attention that prior to my Executive Order to the United =

Nations Compensation Unit and Emergency Relief Coordinator, it has come to =

my knowledge that your name appears among those who have not yet received t=

heir compensation fund payment.



The United Nations, in collaboration with the World Bank, has agreed to com=

pensate each eligible individual with $51,000,000.00 USD. This fund, valued=

at US$51,000,000, will be delivered to you via a Bank draft check or Bank =

ATM card through the payer bank.



To proceed smoothly with the process, please reconfirm the following inform=

ation at your earliest convenience:



- Your full name:

- Home address:

- Cell phone number:



Your prompt response will be highly appreciated to facilitate the delivery =

of your compensation.



Signed,

Mr. Donald Trump

United States President

Email- donaltrump47th@usa.com