Bitcoin Phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 03 Jul 2025 10:36:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uXMuF-000000005kK-1Uje

for dave@doctor.nl2k.ab.ca;

Thu, 03 Jul 2025 10:35:27 -0600

Resent-From: The Doctor

Resent-Date: Thu, 3 Jul 2025 10:35:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-northeuropeazon11022100.outbound.protection.outlook.com ([52.101.66.100]:28806 helo=DUZPR83CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uXMi5-00000000Ldz-2IHs

for root@nk.ca;

Thu, 03 Jul 2025 10:22:55 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=rhfLcBmh8ye+j0y9tqUBoBXPdt7WfZxjRSzSC/w4OeJjZfj/2oIhlQzd2ynxlWspxEU4q1vBK94V3iWy6SvMDUZn78x0wF3tU/L6uDQyVkau0cb91K8gOT4cn9FdSCwwsyfhWwWeYl54lCzzRDMLtzQlpE/B+vfQ1ng688hL0rOiB79T/R8Svlw3XZavktuzYZ2RcPvltu986WJihDKFQLpSLQliQ/qIQgHLVqHyUv/dI/GKqru2v+/Lx+kaPe1LCP9wHDMKVtkuNixw1eqmz6nPhNOuIJtG/QOYRllMFOBL41fVI6sYW/8LehtU7MdTUjrPdpuY7ne3IbYImGD0AQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=wSO6gCUYZqLE8AtL6xBWS0Sw5rKJDnr/LiGxcVLIpqI=;

b=rdz1JUdGvob1/sOUYBkkuASugo2+DB8zPwL470/zaCAkJBEzl4bgO+OQ2KN+jh/TZGZ6pzvOIRTsEPUPoVFz00HLaWS6FevYuQiXOqt1a69xBOo1HA87nxoPRhZm/j+sXte9oY9LGFNu7P8wtnY1hn+CtDpcQ0P+df38UNwOMBLwL5rzQwH3ETABZBoI0UHP8pdyDaT12X+peuK5I8ge2YhfhtmYfNQ6z4H/FiME41BWOCLwN4gR0T4BA7Dl5uiQQV1Gy/mLZ9VLYK4PKcNMP1L5Emc+cINkvh/rc6fg+mqkgGzAEY0BiJxLWi/BlVpq+WFVb8csPtHp3FsMDE2pvQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is

41.178.60.165) smtp.rcpttodomain=brcanada.com smtp.mailfrom=pms.eg;

dmarc=pass (p=quarantine sp=quarantine pct=100) action=none

header.from=pms.eg; dkim=none (message not signed); arc=none (0)

Received: from DU6P191CA0058.EURP191.PROD.OUTLOOK.COM (2603:10a6:10:53e::29)

by PR3PR07MB6489.eurprd07.prod.outlook.com (2603:10a6:102:61::7) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8880.32; Thu, 3 Jul

2025 16:21:46 +0000

Received: from DU6PEPF0000B620.eurprd02.prod.outlook.com

(2603:10a6:10:53e:cafe::28) by DU6P191CA0058.outlook.office365.com

(2603:10a6:10:53e::29) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.20.8901.22 via Frontend Transport; Thu,

3 Jul 2025 16:21:45 +0000

X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 41.178.60.165)

smtp.mailfrom=PMS.EG; dkim=none (message not signed) header.d=none;dmarc=pass

action=none header.from=PMS.EG;

Received-SPF: Pass (protection.outlook.com: domain of PMS.EG designates

41.178.60.165 as permitted sender) receiver=protection.outlook.com;

client-ip=41.178.60.165; helo=mail.pms.eg; pr=C

Received: from mail.pms.eg (41.178.60.165) by

DU6PEPF0000B620.mail.protection.outlook.com (10.167.8.136) with Microsoft

SMTP Server id 15.20.8901.15 via Frontend Transport; Thu, 3 Jul 2025 16:21:45

+0000

Received: from PMS-EXBE01-VM19.PMS.LOCAL (10.51.0.40) by

PMS-EXBE01-VM19.PMS.LOCAL (10.51.0.40) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.2.1118.40; Thu, 3 Jul 2025 19:20:28 +0300

Received: from PMS-EXBE01-VM19.PMS.LOCAL ([::1]) by PMS-EXBE01-VM19.PMS.LOCAL

([fe80::7f23:c083:3686:f04d%8]) with mapi id 15.02.1118.040; Thu, 3 Jul 2025

19:20:28 +0300

From: Hesham ElHelb

Subject: Re: Hesham Message

Thread-Topic: Hesham Message

Thread-Index: AQHb7DZjnofGodvo9EarfmRWFesFGw==

Date: Thu, 3 Jul 2025 16:20:27 +0000

Message-ID: <8f11a888a1684b09b8ce131d2fff9f89@PMS.EG>

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [10.109.0.2]

Content-Type: multipart/alternative;

boundary="_000_8f11a888a1684b09b8ce131d2fff9f89PMSEG_"

MIME-Version: 1.0

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DU6PEPF0000B620:EE_|PR3PR07MB6489:EE_

X-MS-Office365-Filtering-Correlation-Id: df886809-906d-4654-d13e-08ddba4db438

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|376014|7416014|82310400026|1800799024|36860700013|19092799006|8096899003|27013499003;

X-Microsoft-Antispam-Message-Info:

=?iso-8859-1?Q?QwStyW0ZE06CA5VyRNCfPxs3Y5iR9rdOUYVMX1HdwSDTdseYmBpOj3UqFh?=

=?iso-8859-1?Q?6bHE6Gt9t0ElJu9FJXUHW9OdIVh3kDjEHLGORL5caKszB1Z3zkLBUjcbeV?=

=?iso-8859-1?Q?IQzNNM58QFHFgoqj3JKc/nLAWBzuZFCpWQdxHrDQxOGXUWaC2nnx3q0uZA?=

=?iso-8859-1?Q?u2dEgHk7Vys1kk1Aat+pPwEx0kOQdM/zxx0uRd0gF6Nanos0jOoGGsrzCP?=

=?iso-8859-1?Q?ZjaNV1trsKacoxxJyYyYqQJrOYzbtmGRDoO3L9d09/360/hzFNQpEmAugC?=

=?iso-8859-1?Q?XmUwFsUSi4aTEm9Jp3yfExvflpyXoynAzctv+epAutbC2tN8HqgCvbaAy3?=

=?iso-8859-1?Q?+jgpzmrsYjiHDRCU3IEYc56Pn9pZmyapYkr1eTJTVg/qC4L7OkryoIAPBm?=

=?iso-8859-1?Q?NWPRkxwKll6Ni9d+YC1ISQ9EX/9htjeVZHYnY05i9eeeqifi54VCM7fQxm?=

=?iso-8859-1?Q?AWQYFU3BOgbHZV2nP/Q1tPSwUQhd7/htpEmBZuyzqJG6c39MGYiADc85JM?=

=?iso-8859-1?Q?LlozbrY8QT3RkhLPeCrHUhTJ46pY92OVhjHg3wRQgQPWL50idF6FIM9Vwr?=

=?iso-8859-1?Q?eGT8lM6dMnmLtBY/zf3Lon0tgWhKHArjkH9FFKXaZLlCY9Ij0GexePQGIZ?=

=?iso-8859-1?Q?K00RL1iV8SmcdCayQcW27vXFX5F8NO3D0yCUmpM7Qh0KVB5SoJM63mGZlS?=

=?iso-8859-1?Q?cZt109okCeRSQSxrL0emaJ7C7CTg1t6D2V3kgaGW7wG5X+LKRwFS0jw0Tc?=

=?iso-8859-1?Q?ZMpjP59vp/UAFph4HeLvouwjVn+pKIdFbCx0Cd+5NHWSa72zAQCykG/owm?=

=?iso-8859-1?Q?wGCu7jjKIB6XO4Kxi8MRoMoTTC1W3j+qPcShaiF1r/cDBpBUkYO50BcX1h?=

=?iso-8859-1?Q?pXhYsqxaSb7KLYtSyvs/4gtNI5EvODmujPN/bxO2c7EyU51oP6vemHK6m/?=

=?iso-8859-1?Q?PM9NGCcByP0JT4PY8baBcmdHJfjNAOswwb43dK0eveE+0A0OxdVDjI/wvE?=

=?iso-8859-1?Q?N/MW6aNWdArLMFUfne5+3lAZBk9wnbpIYJ2kovXCdc9p1LOql0cBjMLlaE?=

=?iso-8859-1?Q?vg70FY4powCTiR2eW8CSTKdnOywymE2utjDwRNmH1d9QjDa908wR+/s/gz?=

=?iso-8859-1?Q?K22VOtKYPzK91RI/sK9rDji8QqHWtgreI6cUnVDK3/6HgAx14C7VTWDZMD?=

=?iso-8859-1?Q?jYcqlzN8bKRz7qFn9oGTa9m1815js774bQTqGRRyYB7+0aYG1z4+u20LE2?=

=?iso-8859-1?Q?xJzxXzaRTWRfPYbWC+dIpGUMFDtf/B9SjjEO8Bky33QxDjWJ7IKlm4AQlp?=

=?iso-8859-1?Q?WfuwoRVaMIbUeG8HldMz5AlDjvUzkosP7djcoEcaH2T+TfQj6geM3+/+36?=

=?iso-8859-1?Q?N67YtGEZqcsMXsUVOPc7beZyeMwa9cWKoGh33U1kMRsAWwkmB1aWvMayEY?=

=?iso-8859-1?Q?JlijQ0DmK6PfWOMSgzAhZMCpjTBj6Nzj18wDCRmFnaKpl80zGZacV1H/tU?=

=?iso-8859-1?Q?nZhZLDU+pQ49am3zNg2vUlBHbKkGSA6OSfcSQa0oyeHxrWBtiQ0N1vBTxe?=

=?iso-8859-1?Q?tD5rSvJYLCINSSdGfSGpnAHDRbtx?=

X-Forefront-Antispam-Report:

CIP:41.178.60.165;CTRY:EG;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.pms.eg;PTR:host-41-178-60-165.static.link.com.eg;CAT:NONE;SFS:(13230040)(376014)(7416014)(82310400026)(1800799024)(36860700013)(19092799006)(8096899003)(27013499003);DIR:OUT;SFP:1102;

X-OriginatorOrg: PMS.EG

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 03 Jul 2025 16:21:45.3768

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: df886809-906d-4654-d13e-08ddba4db438

X-MS-Exchange-CrossTenant-Id: b9f777db-02f7-4087-9440-8a435bd64c17

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=b9f777db-02f7-4087-9440-8a435bd64c17;Ip=[41.178.60.165];Helo=[mail.pms.eg]

X-MS-Exchange-CrossTenant-AuthSource:

DU6PEPF0000B620.eurprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PR3PR07MB6489

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello Theodore, As per your request, your BTC wallet has

been funded with 68.78Bitcoin, or roughly 7,351,526.21 as you requested. If

you would like to verify your balance, please login using the details below.





Content analysis details: (7.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.101.66.100 listed in dnsbl.ahbl.org]

[52.101.66.100 listed in dnsbl.ahbl.org]

[52.101.66.100 listed in dnsbl.ahbl.org]

[52.101.66.100 listed in dnsbl.ahbl.org]

[2603:10a6:10:53e:cafe:0:0:28 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:53e:cafe:0:0:28 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:53e:cafe:0:0:28 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:53e:cafe:0:0:28 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:53e:0:0:0:29 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:53e:0:0:0:29 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:53e:0:0:0:29 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:53e:0:0:0:29 listed in]

[dnsbl.ahbl.org]

[41.178.60.165 listed in dnsbl.ahbl.org]

[41.178.60.165 listed in dnsbl.ahbl.org]

[41.178.60.165 listed in dnsbl.ahbl.org]

[41.178.60.165 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.101.66.100 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.101.66.100 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.101.66.100 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.101.66.100 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[41.178.60.165 listed in will-spam-for-food.eu.org]

[41.178.60.165 listed in will-spam-for-food.eu.org]

[41.178.60.165 listed in will-spam-for-food.eu.org]

[41.178.60.165 listed in will-spam-for-food.eu.org]

[41.178.60.165 listed in will-spam-for-food.eu.org]

[41.178.60.165 listed in will-spam-for-food.eu.org]

[41.178.60.165 listed in will-spam-for-food.eu.org]

[41.178.60.165 listed in will-spam-for-food.eu.org]

[2603:10a6:10:53e:cafe:0:0:28 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:53e:cafe:0:0:28 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:53e:cafe:0:0:28 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:53e:cafe:0:0:28 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:53e:cafe:0:0:28 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:53e:cafe:0:0:28 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:53e:cafe:0:0:28 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:53e:cafe:0:0:28 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:53e:0:0:0:29 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:53e:0:0:0:29 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:53e:0:0:0:29 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:53e:0:0:0:29 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:53e:0:0:0:29 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:53e:0:0:0:29 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:53e:0:0:0:29 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:53e:0:0:0:29 listed in]

[will-spam-for-food.eu.org]

[52.101.66.100 listed in will-spam-for-food.eu.org]

[52.101.66.100 listed in will-spam-for-food.eu.org]

[52.101.66.100 listed in will-spam-for-food.eu.org]

[52.101.66.100 listed in will-spam-for-food.eu.org]

[52.101.66.100 listed in will-spam-for-food.eu.org]

[52.101.66.100 listed in will-spam-for-food.eu.org]

[52.101.66.100 listed in will-spam-for-food.eu.org]

[52.101.66.100 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.101.66.100 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.101.66.100 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 ACCT_PHISHING Possible phishing for account information

Subject: {SPAM?} Re: Hesham Message



--_000_8f11a888a1684b09b8ce131d2fff9f89PMSEG_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable







Hello Theodore,



As per your request, your BTC wallet has been funded with 68.78Bitcoin, or =

roughly 7,351,526.21 as you requested. If you would like to verify your bal=

ance, please login using the details below.



Website: www .Bigcoin. su (To access the webpage, remove the gap in between=

the website)



ID: 56588024

Code: 7895BH473D



Please Confirm your account balance and have a nice day.



Regards,

Hesham.



--_000_8f11a888a1684b09b8ce131d2fff9f89PMSEG_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








-family:Calibri,Helvetica,sans-serif;" dir=3D"ltr">














r: rgb(0, 0, 0); font-family: Calibri, Helvetica, sans-serif, "EmojiFo=

nt", "Apple Color Emoji", "Segoe UI Emoji", NotoCo=

lorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymb=

ols;">


ojiFont,"Apple Color Emoji","Segoe UI Emoji",NotoColorE=

moji,"Segoe UI Symbol","Android Emoji",EmojiSymbols; fo=

nt-size:16px; font-style:normal; font-weight:400; letter-spacing:normal; or=

phans:2; text-align:start; text-indent:0px; text-transform:none; widows:2; =

word-spacing:0px; white-space:normal; background-color:rgb(255,255,255)">


e">Hello Theodore, 






e">As per your request, your BTC wallet has been funded with 68.78Bitcoin, =

or roughly 7,351,526.21 as you requested. If you would like to verify your =

balance, please login using the details below.






pace">Website: www .Bigcoin. su (To access the webpage, remove the gap in b=

etween the website)






e">ID: 56588024



space">Code: 7895BH473D



ojiFont,"Apple Color Emoji","Segoe UI Emoji",NotoColorE=

moji,"Segoe UI Symbol","Android Emoji",EmojiSymbols; fo=

nt-size:16px; font-style:normal; font-weight:400; letter-spacing:normal; or=

phans:2; text-align:start; text-indent:0px; text-transform:none; widows:2; =

word-spacing:0px; white-space:normal; background-color:rgb(255,255,255)">





e">Please Confirm your account balance and have a nice day.






e">Regards,



e">Hesham.














--_000_8f11a888a1684b09b8ce131d2fff9f89PMSEG_--

Nigerian spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 03 Jul 2025 07:22:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uXJsX-00000000678-3Rog

for dave@doctor.nl2k.ab.ca;

Thu, 03 Jul 2025 07:21:29 -0600

Resent-From: The Doctor

Resent-Date: Thu, 3 Jul 2025 07:21:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f52.google.com ([209.85.167.52]:58461)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uXIBJ-00000000JlB-02E9

for doctor@doctor.nl2k.ab.ca;

Thu, 03 Jul 2025 05:32:53 -0600

Received: by mail-lf1-f52.google.com with SMTP id 2adb3069b0e04-555024588a8so5631159e87.0

for ; Thu, 03 Jul 2025 04:30:43 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1751542236; x=1752147036; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=Bb20rKbbLMg3zPHQLix9gkktyHW3YNrniezDUNSZSrU=;

b=D45en3sKwCm5wNcuAuqNsK8pyScAn4E+lH3UwGr8742aSqMAEv7jiFEj+T8bJ1b6W+

kU2vhxriBlcl8Gs1yw6mJt/f35PzDobmxuZSQQ5nx4JopDSA1FeaKY/68caRVewnMoWn

95MfLyOajhAYRhvHVHMyFcgw50iIG2cfH7rypPId1W88axclcoSUa1T9ViOE17Ol4QiY

Mk9ND9+BZ3BQ8DvF50DzMVM/8zMt+u6HovXpwL0bmTUWl3so7HPYMxoSOBupoNaDxN5o

ckww7MvPEGe4IphcXA2kaSInUzMECugFDQIUCm4jm+/WiaNy4wNDby9OWAFz1gREk1oC

0HtQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1751542236; x=1752147036;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=Bb20rKbbLMg3zPHQLix9gkktyHW3YNrniezDUNSZSrU=;

b=X26d3HMsrP3pNM/LDDaGLjQpGRHQDBieDFC/HPPDJ3l+Q2kFiU1uYLDJKu+ckpa/qL

I+kIKgylOrntGso3V9gIEYhs8muEPHwjM7/HgaszqtxmmnxA6ZX4kqDFu04yvouPcEXH

w4oDziLbDArBlfRpr4L3/vRRAZPnHa5hU7XcHz0jlPH6ndnsjnQ3zdMSHcX6NSqZdG0b

zg9g5JuQYQYtOoxJPMmgHwqFsQyMTeUOR9uUxCRY6X/6yaI/fAL5GitOqXuILtaDBtiM

TCzXyQCFDfvxv9mq7Ge0fV8ewFpi8RuTWpHywYkxyOcK1/pE1MOMZBgaRWGlnOcUI5uW

f/mg==

X-Forwarded-Encrypted: i=1; AJvYcCUKAzPkkNiDpgIiWpVl6oxjvPFm6cXvyc7j/FnS8KOLOjyeRLNonumW9jn4uD2NKBpuj+gbAPI=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YyyRepXzsedLz4JHZhzyBrcOW+AS4ayMvLr2oqZzu12TqktwHzM

05lyD5VAZWaKwnyJ5PRpmfuNAcHq7U71rNSZMj8pw9y3kp0gFxJLRzS3djJX7+0h5MNhzysSoEk

Z3UqnYE3gWbyUH6jq+V5B9jCmU7DCuAM=

X-Gm-Gg: ASbGnctjfAfZ+t3aqvdRcuJtXx8zpqVkxvpISSqxGvlaBq9GELMLLyEEJCYHCzgOVx+

1E1OE31/SPHPKbUIeujiVgXegZx0vSn2q4alvK3m7ajNXLUJB0V8BE3FVGMf8c9sAxVyhA5W4jw

WAiHVKO4OKw/l+AZIv8A48pIRuBE3tP5XvIttoj2TaKIK1y3Q4/w==

X-Google-Smtp-Source: AGHT+IEj7/xzrVitfgsQjS0fNRAx0tpA8mNg+8nkvMAwYqhWPMUeSUN+GL07gabn6D+hPUEhBx2w9c4DzBeNG5Cwf4o=

X-Received: by 2002:a05:6512:1094:b0:553:2698:99c5 with SMTP id

2adb3069b0e04-5562836c5famr2139347e87.39.1751542235980; Thu, 03 Jul 2025

04:30:35 -0700 (PDT)

MIME-Version: 1.0

Reply-To: phmaanu21@hotmail.com

From: Philip Manul

Date: Thu, 3 Jul 2025 11:30:24 +0000

X-Gm-Features: Ac12FXzjV3lbmOtZYHSSI-MxNwbBLo8I5Ny_8NVFij_Ti9tZ10TBYrWpkFjnPDU

Message-ID:

Subject:

To: in

Content-Type: multipart/alternative; boundary="000000000000c8e88e063904b492"

Bcc: doctor@doctor.nl2k.ab.ca



--000000000000c8e88e063904b492

Content-Type: text/plain; charset="UTF-8"



Good day,



I am personal attorney to a deceased client who is a relative of your

family, get back to me on my private email: phmaanu21@hotmail.com



I look forward to hearing from you.



Barr. Philip Manul, Esq.



--000000000000c8e88e063904b492

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Good day,

I am personal attorney to a deceased clie=

nt who is a relative of your family, get back to me on my private email:
href=3D"mailto:phmaanu21@hotmail.com">phmaanu21@hotmail.com

I l=

ook forward to hearing from you.

Barr. Philip Manul, Esq.




--000000000000c8e88e063904b492--

Web/SEO/App Spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 03 Jul 2025 07:21:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uXJrs-000000005mz-0a3t

for dave@doctor.nl2k.ab.ca;

Thu, 03 Jul 2025 07:20:48 -0600

Resent-From: The Doctor

Resent-Date: Thu, 3 Jul 2025 07:20:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dm6nam11olkn2054.outbound.protection.outlook.com ([40.92.19.54]:25088 helo=NAM11-DM6-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uXH7C-000000001qE-1qj1

for doctor@nl2k.ca;

Thu, 03 Jul 2025 04:24:47 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=zLPyDEHMny7lZwUbr1t7G9IZ7n9NwQxHCwhLb9deOWfY/MpKQaZDXZqxeE2NRzZT/oQ5uSnMMhfwx1jMTkVtzWDqCZc8Wf+NBtUfUwj9j0kzqUc02to/9o8acRYxKhsPsxR6bQcPj+xE/Rq2TMfKZFzrtWxUMmnHGOBztXd4NCnYHL4pQy2u6PpuYkfeECLDFV5hD7z3QJ3FrTepK6Hj1GSgxHYYJyODJXyOAbCgNB7YrfB94QaqUMHie1vZwO1jCY4jnO1ofiLYLP8aw18vrlEf2Ab8VAglZIzfbftPZiH6ldv6Ey1FBlvvUu6jBTDsMY69einUz0jLa1pPw/lPQw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=m71QDdkE8myq3TAEuIwfrxLxwoy6xzRevcr39fxNQUk=;

b=MAEMGCObLWC8inSZ+W9iFNeN7n3GnM1gGOww1nYbSoUmGoXecE4nZdGrriHvDAjdxLFf+yrfVfKPbjgPPMImORwjALQ4wYPviokhU/2ZleIQyZz9LbfDuHvZM8HmYCM2O4fHMXsoMqbw0srIatM1PXpcRLsf557JeQNRDb+IFcBnMOdFlpY3Fk+PkrOAXGrqlUo1k8RjofgFsXxXitQMO7EunfUr0tqrp2VJpJYEUvgVsk+ccTURybaZy8tOFQNYGulwmgPpLQnOUyRsIkqrjh2thHVZjX08F0Wp4aa9+uZHbO66MrRfmCnLy7Y0gsH2tO8QniIun2V5wNJ+7yszjg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=m71QDdkE8myq3TAEuIwfrxLxwoy6xzRevcr39fxNQUk=;

b=T4MYAIx2IE0JjxTTMwwz2Gh8uRM7fxdPPjAG1JzK70PyF+M3YfoHdYMsXoFdFp5iiDFtBPQuvcRz6SnrO9kpAL/l3vUzqTJpt4SOIqch+KmemMJOxGn4FtVKdaKbYYKhFM33wWxBtHa0SL50xhk24WuVVB60yS5qREIIbxCFTQ/Kfx3nS6MSAZozaP+V61YO6Esgt/fE1AEMw4G8MbQsuUloR9OmwFngre86d3H1ECpqrpnco2je/0BvtYumUBnULO4Qp1inxULa4FI2y27ZOPeZTk8jr6oug4Ps+TRwQEX481tFC60Txw0c7TRNr7rHmUSXKD9g1olqFL33A3uV9g==

Received: from SA1PR22MB5294.namprd22.prod.outlook.com (2603:10b6:806:3cd::21)

by LV8PR22MB5313.namprd22.prod.outlook.com (2603:10b6:408:1c9::21) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8901.20; Thu, 3 Jul

2025 10:22:09 +0000

Received: from SA1PR22MB5294.namprd22.prod.outlook.com

([fe80::3a7d:f4c5:2761:d682]) by SA1PR22MB5294.namprd22.prod.outlook.com

([fe80::3a7d:f4c5:2761:d682%6]) with mapi id 15.20.8901.018; Thu, 3 Jul 2025

10:22:09 +0000

From: Henry Web

Subject: Mobile App Creation !

Thread-Topic: Mobile App Creation !

Thread-Index: AQHb7ARVBQJ1waBl80mMAtGJFA5qOA==

Date: Thu, 3 Jul 2025 10:22:08 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SA1PR22MB5294:EE_|LV8PR22MB5313:EE_

x-ms-office365-filtering-correlation-id: db95150b-373f-4dbd-c85c-08ddba1b778d

x-microsoft-antispam:

BCL:0;ARA:14566002|7071999006|461199028|15080799009|8062599006|8060799009|19110799006|15030799003|440099028|51005399003|43065399003|40105399003|39105399003|3412199025|31055399003|102099032;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?19MTJRAEBlLxmCMPeyw640GzL6YqsgplLT9nda1tL8baLQgvVQsvqgWO?=

=?Windows-1252?Q?3UeJ2P0vx9eggjjyZZoqJh4g35VvJsovjcuY3bBIqi0a+hSPRyU6frKa?=

=?Windows-1252?Q?6u8uYvz2of7K+a4XD6ptNOKbOSIl1jkrZpvDDRh16XT0A6XpX0Ew/D3Q?=

=?Windows-1252?Q?IJVWU6kCQ52dfHigJVd6B6U3Y3DHjYmZVfdRPnB+ZYzjZe+Qnf2YSytO?=

=?Windows-1252?Q?t021t7XqVj5XcGqLF/HX1Vle6P2TStBq9IyjMiRmZT+VYhK3U2BFE2Mi?=

=?Windows-1252?Q?7yhk7mtp//Eygr6NFJRsigCtQdtTbU0W8i30KoNuTOQhLSqZ5XyHur/u?=

=?Windows-1252?Q?Fw2WOBZOlaQulzyD73GLUnKKg3BWsgMK97UGcfnOWnUNVfhorpkfssLX?=

=?Windows-1252?Q?45JS2bMG7w+b0bTcXa9SFF1dLckS30G6PYShMiwmsXiox1tCZkCgTx47?=

=?Windows-1252?Q?bDbpwsOOn5FgAn/3yivrild9J5zq8MvOjqNPH7dpe9cW0BYluBtve3Mh?=

=?Windows-1252?Q?AN30NxXmYsUt7O0DErcL/n3Xte0uRkc17OyjATF4JynFCDrvfh/lIdnZ?=

=?Windows-1252?Q?DFHYuSTfcfFgovuHMsDnzXVj4sBBABzKIbVmtcGcFEsbTGEXDXxVwKxm?=

=?Windows-1252?Q?09NwTmCZDeKvTvkqbvIb4kPieX47FSAiIxR8e6TZFPTelxEH1pXhheN+?=

=?Windows-1252?Q?3KS1tf0blI1lAEHVMIj1tkFVxwIOUDfbEVGH7dF1G5APvGh3/VJggWpW?=

=?Windows-1252?Q?kyTP/H+IE6uBJHlClkiMLoqL8C3ISi9pCr5BvZMv6ocBVDYGABi3KUn5?=

=?Windows-1252?Q?PPdwkUfpwKAvBtEVTPazAgOtwYhvXm2wnsXCCq3AE7lwKzbDma9bRkcl?=

=?Windows-1252?Q?QkIQBfKjCLV69pBjLszSDy31RDz9A8muEH7p2EIUi6HGEMaOiPKcxVbQ?=

=?Windows-1252?Q?nXLIT5N7/zTEUgweGShbgauaMtBJIpIa7fmJ6j83dUiiy4SSDb/TH0Gc?=

=?Windows-1252?Q?U4Bp8Zknictl+MwJfiBcXSEtdvp9LopR5Ptcnx0jUrKN5KaIaZaCaNZz?=

=?Windows-1252?Q?rACqV2KyztW9uOC24ZH+CGjogxRe7lfCLI3JyM7zzeSM53J5aeCkN82a?=

=?Windows-1252?Q?LuAjK+7iDTAR8ceTgR5/LqMmiOp8C597WrOJq8yRJYJ/HPjsfpzKvZj0?=

=?Windows-1252?Q?hmQQJDWLug0+NDNN9MDW7E9QW88p9kcUESp064K64wSdpOa0RsmTvJPh?=

=?Windows-1252?Q?X/zNzggR3JOU0HS6lLZEmKTlktrv683m9tC21ZN0UC66ePoQiLsGJ62P?=

=?Windows-1252?Q?NTGhXkj9OLFF8+CZeWSD3IV2SkFR86vaBXc8lPmgZjo7kSKf6TTNPSm2?=

=?Windows-1252?Q?Fbk/cavYDYZiwlVpNsFhDA3tQvY/9DJq0fk=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?TCsxVafpld0o/sO1TKYRQu4LaEIHiuovdDMnk3hj75jf8HSV/gmOD+Z2?=

=?Windows-1252?Q?6BAhmIBN8h2aeR65XKaTfgpdxhhui5qXkNLavdMUeAsMNGUx7ijSRppE?=

=?Windows-1252?Q?mIlkgeyxYRIm8Ujgf4jXUzyRwhu1XTvOr8UOKdz1vWD18gu9Zao+9aqf?=

=?Windows-1252?Q?ZNihSJvq3mVxOFgNDwq5nPt4JcP3CUKCcus8lj8FYgfx9G9nIxjh/ySJ?=

=?Windows-1252?Q?v046NTF2STlibHhEfWqMshfkONqIBY3fKfZQgf8gX+Jl4stgFVe1w1yb?=

=?Windows-1252?Q?Tk8pVKGHAy7sU7+fAcThf1fW0N/m7EEIYKJ7afHnzKdUfngM4LSR2UlF?=

=?Windows-1252?Q?DQGar0vEHbF4+qu9GAwsCjGJziqljrxKEmB42PB1mZuhvJsjhJz0WG8w?=

=?Windows-1252?Q?ejFzk8r54/hjB2fwkbD71e/Idm/OeVDR4yY6iVOA04kwQUVoEwE18EBX?=

=?Windows-1252?Q?MSV19aaV5qwPFxixWzpJfClpPYU/Q+OmdDU4Zt5CFpIscJ/YaGf7L/BS?=

=?Windows-1252?Q?GHL9rmaRR1U6knEkRcQsiPBZjbt/oHsOjpgbhlD3u6X+K6fmGCjUYpXc?=

=?Windows-1252?Q?M1aV7GLyl0taNrWr5l0M8VJupo2LL6GyuJhGQgJl6gNIpegmgYbqHdM4?=

=?Windows-1252?Q?ZBSVhp81c30BEUPOxTRsNgfDSvfoCReLja2LUdC+8CbSG8h5HNwZpW6j?=

=?Windows-1252?Q?qkld5W4qPfKpwP0qwlSNgbq68tuHm2sBn/7fuzc+RBfCyA3aL+IowhXH?=

=?Windows-1252?Q?qZixXbckX5IUbcwF4KPlTPJgrx2U5LBCfmQsw2MW24vJHtsli0K2GJk+?=

=?Windows-1252?Q?5HI3X8F4nLJfaHqH6cg3RYTHsg7KoPCIa4rY8/8CM3I6v3YWeLi1fKOB?=

=?Windows-1252?Q?khcNNszm8B1A4CuAMrLOzxhdcwD1tWR7i1jsYLXbE8BVTXdm4Q0niDJV?=

=?Windows-1252?Q?FF+lHR31GW3jqfddWX3I8/P46hR6Uz5AGmqfXPyyIiHmfAbz90rGcQAm?=

=?Windows-1252?Q?yKkuMW38ejtSmN1MgassqDlik47bIV7dNcPfQBs/iWxMt4JJx4SWH+eZ?=

=?Windows-1252?Q?XFvaHU/VOba2JibzAhCun/9wxq1Rwrji4waOAMMZZ97SMIQryDvXAPvS?=

=?Windows-1252?Q?IsECc2Dmf4kQdaFrUwV323kg0lLGFWTN1y2jDKpZZfnhFuF0yLi870Tf?=

=?Windows-1252?Q?urXaDA4uyFsJZPjl1wm6Ruh0eKzf5Fy6M1W8Pbd1tEGe1rwkqoNiAHi2?=

=?Windows-1252?Q?K2qicwokxINbsfiY+wIbIYxgmD1qU5zQdplLlKkHsZB+mLJfwnMpFhLf?=

=?Windows-1252?Q?psBI2slSEr4BxxDrAdOQlCW4EhhWJ3/4Vs0dnVa8FshejrBSAjas/OKf?=

=?Windows-1252?Q?LP64RTd191MnDQewlSPWR/RHD1Psd9gxwX3Xfl05M+b7ztUBrr7Uel0z?=

Content-Type: multipart/alternative;

boundary="_000_SA1PR22MB52945CE4DA7421EC9894DC85E143ASA1PR22MB5294namp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SA1PR22MB5294.namprd22.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: db95150b-373f-4dbd-c85c-08ddba1b778d

X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Jul 2025 10:22:08.8634

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: LV8PR22MB5313



--_000_SA1PR22MB52945CE4DA7421EC9894DC85E143ASA1PR22MB5294namp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hello,



Hope you are doing well.



Would you be interested in building your Mobile app or any types of Softwar=

e development?



We have developed 100s of applications such as : - (Android/iOS app/window =

app)



If you might be interested in our service, I am sure you are. Please share =

your App=92s idea, requirement with us so that we can suggest a cost-effic=

ient solution.



I am waiting for your positive response.



Regards,



Henry



--_000_SA1PR22MB52945CE4DA7421EC9894DC85E143ASA1PR22MB5294namp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Hello,



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Hope you are doing well.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Would you be interested in building your Mobile app or any types of Softwar=

e development?



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

We have developed 100s of applications such as : - (Android/iOS app/window =

app)



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

If you might be interested in our service, I am sure you are. Please share =

your App=92s idea, requirement with us  so that we can suggest a cost-=

efficient solution.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

I am waiting for your positive response.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Regards,



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Henry








--_000_SA1PR22MB52945CE4DA7421EC9894DC85E143ASA1PR22MB5294namp_--

Printer Phish

Posted by Dave Yadallee on

Job spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 03 Jul 2025 07:19:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uXJpg-0000000055G-28aT

for dave@doctor.nl2k.ab.ca;

Thu, 03 Jul 2025 07:18:32 -0600

Resent-From: The Doctor

Resent-Date: Thu, 3 Jul 2025 07:18:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f171.google.com ([209.85.221.171]:43386)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uXB1W-00000000BPc-2XHj

for doctor@doctor.nl2k.ab.ca;

Wed, 02 Jul 2025 21:54:25 -0600

Received: by mail-vk1-f171.google.com with SMTP id 71dfb90a1353d-5290be1aedcso364560e0c.1

for ; Wed, 02 Jul 2025 20:52:16 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1751514730; x=1752119530; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=kfNJkkXFA0HssgtcuUN7oYTbiTXS10tuT74HW4OxfuA=;

b=GZ03R+7vjMhHSDVvs+Nbhi5gWcXPbfWpbJx90YPhnSR6byM2dRx2D6sfJ0CJAWZ+fs

NvQVBRAXl3JqqliftJRI8B5Oslzutx+TsUtDRA6oucPlbmmf+vk/6fsFYkhDY0gEGDnE

HBhe3VhAKQBMbSV4to5Wtj1B72BtHv+IbiS3V9W3jzlYwp4DmLN1OudHNHjvtlGjSXOo

kq32wNY/76CXhb8h6Ih5wIqTMl9M9xlMtyWssbYru3i8ivbH2QHf3lctg0KXaIy/2OkV

4JUbZ4GURFB1QG26Kuphy2sXmP8K74ohpBmAClt8DiwDiaaoSJC1ObT0b16q8hAlQ6nB

A1Fw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1751514730; x=1752119530;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=kfNJkkXFA0HssgtcuUN7oYTbiTXS10tuT74HW4OxfuA=;

b=gIbiA52YqowL5kKdeE4Vt5VoITqYS9zL4ZFkGocO8jYFPFt0n8JfbI7+bPDA1iXJUH

4UdE03OM+MK2T+7/P5m0ocWI1WMZyKCT7NMoNAJudS3IRwTkVwS+RLmIhiTCLadVVzkH

a/PwvIUnKzQR/D0Ox3usJd4LYrJwwu8/sWn8OHgk1TGJZR5Sts/m+p7PLHWkhJl/9KQ8

X5RlbEpLFQivI6xbuQN8WcyG0ZqyChvzqbWZCpViVqHoeld+VEZLf7jnIDzSa4bMu4Gq

MRrQh3z/mSr0HvB3iuEtzdL3WJtW/nvRg7fuhG6RmOQNElW5bbyhMcfpum20tmmsv6+I

D6jg==

X-Forwarded-Encrypted: i=1; AJvYcCUdfuuJBfx7cMNBHNIen0xSkwvZAp24V8qbeL4enfPLpIXbGC7xI4zhNewNc3EvhDzV+ta4cmo=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YwFAyNH5tCRSTs7ttQR4WWLrdEKb4gIShA3Gr45byv47K6FNjyN

rZz/KxsyeFFh5cBzs5agNpuWryj4FUWtzy0Kzi53Yg78tdJhp7dm3ggQ/B0NFbmb745yCkbG/jR

Wlo75SUq8ToVcksUPf9oFvzoI1KQ8kt+Ok8ZOE+nmFBc2

X-Gm-Gg: ASbGncstMQrs3pHCKuKSTxo+2kT8W+vjzkdU2awMcVKK+1jeLgNEQejYJTPseH3SkRK

q1nhD7Tn93iB0FrBOP6nBFFCujxpsOJ6msIjgl9FW5+hFwmtN7+4KS3Hpzer6DObiDDEBGW9LWy

CHy5H0/NTNpnXuNr6WGpdqycqgMs3WH96VY6x8k0FwVAc3

X-Google-Smtp-Source: AGHT+IFhEImxTJvZvgJimvK47GIShqp5I8pU/Rb/jriHURKfWqJN9D6Rk3KJwkuivPE74Tl3iSZkTctSwtv4xaPZbqo=

X-Received: by 2002:a05:690c:6d04:b0:714:b7fa:2d7 with SMTP id

00721157ae682-7165cb256dfmr901257b3.13.1751498832387; Wed, 02 Jul 2025

16:27:12 -0700 (PDT)

MIME-Version: 1.0

From: CAREER JOB SEARCH

Date: Wed, 2 Jul 2025 16:26:59 -0700

X-Gm-Features: Ac12FXwrMCkEaA9A0q6gWkj0nviGaOpvDBx8gjeMs30pwhs9kZIU-InUxkYlaLc

Message-ID:

Subject: JOB INFORMATION

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000baa1360638fa99ff"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 9.8

X-Spam_score_int: 98

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Canadian Visa Sponsorship Jobs 2025/2026 (Jobs in Canada)

Job Destination:: Canada Travel expenses:: Free Accommodation:: Free Feeding::

Free Whatsapp:: +44 74430 79503 E-mail: mmrmichaelb@gmail.com [...]



Content analysis details: (9.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.221.171 listed in dnsbl.ahbl.org]

[209.85.221.171 listed in dnsbl.ahbl.org]

[209.85.221.171 listed in dnsbl.ahbl.org]

[209.85.221.171 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.221.171 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.221.171 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.221.171 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.221.171 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.171 listed in will-spam-for-food.eu.org]

[209.85.221.171 listed in will-spam-for-food.eu.org]

[209.85.221.171 listed in will-spam-for-food.eu.org]

[209.85.221.171 listed in will-spam-for-food.eu.org]

[209.85.221.171 listed in will-spam-for-food.eu.org]

[209.85.221.171 listed in will-spam-for-food.eu.org]

[209.85.221.171 listed in will-spam-for-food.eu.org]

[209.85.221.171 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.221.171 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[derrickprestongrant(at)gmail.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.171 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 FREEMAIL_REPLY From and body contain different freemails

Subject: {SPAM?} JOB INFORMATION



--000000000000baa1360638fa99ff

Content-Type: text/plain; charset="UTF-8"



Canadian Visa Sponsorship Jobs 2025/2026 (Jobs in Canada)

Job Destination:: Canada

Travel expenses:: Free

Accommodation:: Free

Feeding:: Free

Whatsapp:: +44 74430 79503

E-mail: mmrmichaelb@gmail.com

Available Job Offer:: Limited/Few selection



--000000000000baa1360638fa99ff

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





Canadian Visa Sponsorship Jobs 2025/2026 (Jobs in Canada)
Job Destinatio=

n:: Canada
Travel expenses:: Free
Accommodation:: Free
Feeding:: F=

ree


Whatsapp:: +44 74430 79503





Available Job Offer:: Limited/Few selection





























--000000000000baa1360638fa99ff--

Godaddy phish from newdream.net

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 02 Jul 2025 20:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uX9pg-00000000NFV-0YRV

for dave@doctor.nl2k.ab.ca;

Wed, 02 Jul 2025 20:37:52 -0600

Resent-From: The Doctor

Resent-Date: Wed, 2 Jul 2025 20:37:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from ip-69-163-206-101.dreamhost.com ([69.163.206.101]:37856 helo=vps65154.dreamhostps.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uX9an-00000000CYe-0aQQ

for sales@nk.ca;

Wed, 02 Jul 2025 20:22:42 -0600

Received: by vps65154.dreamhostps.com (Postfix, from userid 6799735)

id 4bXfL32RL3zqgpgtw; Wed, 2 Jul 2025 18:28:43 -0700 (PDT)

To: sales@nk.ca

Subject: Action Required: Please Update Your Payment Information

X-PHP-Originating-Script: 6799735:header.php

From: GoDaddy Billing Team

Reply-To: dh_q2ctwh@vps65154.dreamhostps.com

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Message-Id: <4bXfL32RL3zqgpgtw@vps65154.dreamhostps.com>

Date: Wed, 2 Jul 2025 18:28:43 -0700 (PDT)











Action Required: Update Your Payment Method















Action Required: Update Your Payment Method






Dear Customer,



We attempted to renew your GoDaddy services, but were unable to complete the transaction due to a problem with your current payment method.



To prevent any disruption to your services, please update your payment information as soon as possible.



You can securely update your details by clicking the button below:











If you have already updated your payment method, no further action is required.



Thank you for choosing GoDaddy.



Sincerely,


The GoDaddy Team









© 2025 GoDaddy Operating Company, LLC. All rights reserved.


This message was sent from a no-reply email address. Please do not respond.







Netflix phish from Simbaonline

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 02 Jul 2025 17:11:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uX6bH-00000000888-0oTN

for dave@doctor.nl2k.ab.ca;

Wed, 02 Jul 2025 17:10:47 -0600

Resent-From: The Doctor

Resent-Date: Wed, 2 Jul 2025 17:10:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [78.138.17.71] (port=51676 helo=valdanitrading.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uX5L0-00000000B4q-0NU8

for root@nk.ca;

Wed, 02 Jul 2025 15:50:02 -0600

From: Netflix

To: root@nk.ca

Subject: Your account is blocked.

Date: 3 Jul 2025 00:47:53 +0300

Message-ID: <20250703004753.3EB86783FA990AF6@valdanitrading.com>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 15.3

X-Spam_score_int: 153

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Netflix Your account is blocked. Your payment could not be

processed. Good day, Attention! There was a problem processing your payment.

Don't worry, it can happen... It's easy to fix, and you'll be back to w [...]





Content analysis details: (15.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[78.138.17.71 listed in dnsbl.ahbl.org]

[78.138.17.71 listed in dnsbl.ahbl.org]

[78.138.17.71 listed in dnsbl.ahbl.org]

[78.138.17.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[78.138.17.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[78.138.17.71 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[78.138.17.71 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[78.138.17.71 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[78.138.17.71 listed in will-spam-for-food.eu.org]

[78.138.17.71 listed in will-spam-for-food.eu.org]

[78.138.17.71 listed in will-spam-for-food.eu.org]

[78.138.17.71 listed in will-spam-for-food.eu.org]

[78.138.17.71 listed in will-spam-for-food.eu.org]

[78.138.17.71 listed in will-spam-for-food.eu.org]

[78.138.17.71 listed in will-spam-for-food.eu.org]

[78.138.17.71 listed in will-spam-for-food.eu.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[78.138.17.71 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[78.138.17.71 listed in sbl-xbl.spamhaus.org]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 HTML_FONT_TINY_NORDNS Font too small to read, no rDNS

0.0 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML only

Subject: {SPAM?} Your account is blocked.
















m: none; text-indent: 0px; letter-spacing: normal; font-family: system-ui, =

-apple-system, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", "L=

iberation Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe =

UI Symbol", "Noto Color Emoji"; font-size: 13px; font-style: normal; font-w=

eight: 400; text-decoration: underline; word-spacing: 0px; white-space: nor=

mal; orphans: 2; widows: 2; font-variant-ligatures:=20

normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px;' href=3D=

"https://www.netflix.com/browse?g=3De915a11f-9031-4eec-a4bb-3b6355a4e620&am=

p;lkid=3DURL_LOGO&lnktrk=3DEVO" target=3D"_blank" rel=3D"noopener noref=

errer">


nt-family: -apple-system, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI",=

Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol=

"; font-size: 13px; font-weight: 400; border-collapse: collapse; font-featu=

re-settings: "liga" 0;' cellspacing=3D"0" cellpadding=3D"0">
>


m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", Arial, sans-serif, "Ap=

ple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";'>




letter-spacing: normal; font-family: "Times New Roman"; font-size: medium;=

font-style: normal; font-weight: 400; word-spacing: 0px; float: none; disp=

lay: inline !important; white-space: normal; orphans: 2; widows: 2; font-va=

riant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wid=

th: 0px; text-decoration-thickness: initial; text-decoration-style: initial=

; text-decoration-color: initial;'>


letter-spacing: normal; font-family: "Times New Roman"; font-size: medium;=

font-style: normal; font-weight: 400; word-spacing: 0px; float: none; disp=

lay: inline !important; white-space: normal; orphans: 2; widows: 2; font-va=

riant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wid=

th: 0px; text-decoration-thickness: initial; text-decoration-style: initial=

; text-decoration-color: initial;'>


letter-spacing: normal; font-family: "Times New Roman"; font-size: medium;=

font-style: normal; font-weight: 400; word-spacing: 0px; float: none; disp=

lay: inline !important; white-space: normal; orphans: 2; widows: 2; font-va=

riant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wid=

th: 0px; text-decoration-thickness: initial; text-decoration-style: initial=

; text-decoration-color: initial;'>


letter-spacing: normal; font-family: system-ui, -apple-system, "Segoe UI",=

Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-seri=

f, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Em=

oji"; font-size: 13px; font-style: normal; font-weight: 400; word-spacing: =

0px; float: none; display: inline !important; white-space: normal; orphans:=

2; widows: 2; font-variant-ligatures: normal;=20

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-=

thickness: initial; text-decoration-style: initial; text-decoration-color: =

initial;'>


letter-spacing: normal; font-family: "Times New Roman"; font-size: medium;=

font-style: normal; font-weight: 400; word-spacing: 0px; float: none; disp=

lay: inline !important; white-space: normal; orphans: 2; widows: 2; font-va=

riant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wid=

th: 0px; text-decoration-thickness: initial; text-decoration-style: initial=

; text-decoration-color: initial;'>


letter-spacing: normal; font-family: "Times New Roman"; font-size: medium;=

font-style: normal; font-weight: 400; word-spacing: 0px; float: none; disp=

lay: inline !important; white-space: normal; orphans: 2; widows: 2; font-va=

riant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wid=

th: 0px; text-decoration-thickness: initial; text-decoration-style: initial=

; text-decoration-color: initial;'>


letter-spacing: normal; font-family: "Times New Roman"; font-size: medium;=

font-style: normal; font-weight: 400; word-spacing: 0px; float: none; disp=

lay: inline !important; white-space: normal; orphans: 2; widows: 2; font-va=

riant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wid=

th: 0px; text-decoration-thickness: initial; text-decoration-style: initial=

; text-decoration-color: initial;'>


letter-spacing: normal; font-family: system-ui, -apple-system, "Segoe UI",=

Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-seri=

f, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Em=

oji"; font-size: 13px; font-style: normal; font-weight: 400; word-spacing: =

0px; float: none; display: inline !important; white-space: normal; orphans:=

2; widows: 2; font-variant-ligatures: normal;=20

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-=

thickness: initial; text-decoration-style: initial; text-decoration-color: =

initial;'>


letter-spacing: normal; font-family: "Times New Roman"; font-size: medium;=

font-style: normal; font-weight: 400; word-spacing: 0px; float: none; disp=

lay: inline !important; white-space: normal; orphans: 2; widows: 2; font-va=

riant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wid=

th: 0px; text-decoration-thickness: initial; text-decoration-style: initial=

; text-decoration-color: initial;'>


letter-spacing: normal; font-family: "Times New Roman"; font-size: medium;=

font-style: normal; font-weight: 400; word-spacing: 0px; float: none; disp=

lay: inline !important; white-space: normal; orphans: 2; widows: 2; font-va=

riant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wid=

th: 0px; text-decoration-thickness: initial; text-decoration-style: initial=

; text-decoration-color: initial;'>


letter-spacing: normal; font-family: "Times New Roman"; font-size: medium;=

font-style: normal; font-weight: 400; word-spacing: 0px; float: none; disp=

lay: inline !important; white-space: normal; orphans: 2; widows: 2; font-va=

riant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wid=

th: 0px; text-decoration-thickness: initial; text-decoration-style: initial=

; text-decoration-color: initial;'>


letter-spacing: normal; font-family: system-ui, -apple-system, "Segoe UI",=

Roboto, "Helvetica Neue", Arial, "Noto Sans", "Liberation Sans", sans-seri=

f, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Em=

oji"; font-size: 13px; font-style: normal; font-weight: 400; word-spacing: =

0px; float: none; display: inline !important; white-space: normal; orphans:=

2; widows: 2; font-variant-ligatures: normal;=20

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-=

thickness: initial; text-decoration-style: initial; text-decoration-color: =

initial;'>


letter-spacing: normal; font-family: "Times New Roman"; font-size: medium;=

font-style: normal; font-weight: 400; word-spacing: 0px; float: none; disp=

lay: inline !important; white-space: normal; orphans: 2; widows: 2; font-va=

riant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wid=

th: 0px; text-decoration-thickness: initial; text-decoration-style: initial=

; text-decoration-color: initial;'>


letter-spacing: normal; font-family: "Times New Roman"; font-size: medium;=

font-style: normal; font-weight: 400; word-spacing: 0px; float: none; disp=

lay: inline !important; white-space: normal; orphans: 2; widows: 2; font-va=

riant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wid=

th: 0px; text-decoration-thickness: initial; text-decoration-style: initial=

; text-decoration-color: initial;'>


letter-spacing: normal; font-family: "Times New Roman"; font-size: medium;=

font-style: normal; font-weight: 400; word-spacing: 0px; float: none; disp=

lay: inline !important; white-space: normal; orphans: 2; widows: 2; font-va=

riant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wid=

th: 0px; text-decoration-thickness: initial; text-decoration-style: initial=

; text-decoration-color: initial;'>


ransform: none; line-height: normal; letter-spacing: normal; font-family: -=

apple-system, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", Arial, sans=

-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol"; font-size=

: 13px; font-style: normal; font-weight: 400; word-spacing: 0px; white-spac=

e: normal; border-collapse: collapse; orphans: 2; widows: 2; font-feature-s=

ettings: "liga" 0; font-variant-ligatures: normal;=20

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-=

thickness: initial; text-decoration-style: initial; text-decoration-color: =

initial;' cellspacing=3D"0" cellpadding=3D"0">

ng-top: 25px;">


amily: -apple-system, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", Ari=

al, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol"; f=

ont-size: 13px; font-weight: 400; border-collapse: collapse; font-feature-s=

ettings: "liga" 0; background-color: rgb(216, 157, 49);' bgcolor=3D"#d89d31=

" cellspacing=3D"0" cellpadding=3D"0">=


ng" style=3D"padding: 12px 40px;">


mal; font-family: -apple-system, BlinkMacSystemFont, "Helvetica Neue", "Seg=

oe UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI=

Symbol"; font-size: 13px; font-weight: 400; border-collapse: collapse; fon=

t-feature-settings: "liga" 0; background-color: rgb(216, 157, 49);' bgcolor=

=3D"#d89d31" cellspacing=3D"0" cellpadding=3D"0">


-height: 21px; padding-top: 0px; font-family: "netflix sans", helvetica, ro=

boto, "segoe ui", sans-serif; font-size: 16px; font-weight: 400;'>
e=3D"3">Your account is blocked.



xt-transform: none; line-height: normal; letter-spacing: normal; font-famil=

y: -apple-system, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", Arial, =

sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol"; font-=

size: 13px; font-style: normal; font-weight: 400; word-spacing: 0px; white-=

space: normal; border-collapse: collapse; orphans: 2; widows: 2; font-featu=

re-settings: "liga" 0; font-variant-ligatures: normal;=20

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-=

thickness: initial; text-decoration-style: initial; text-decoration-color: =

initial;' cellspacing=3D"0" cellpadding=3D"0">

class=3D"copy h1 content-padding" style=3D'color: rgb(34, 31, 31); line-he=

ight: 43px; letter-spacing: -1px; padding-top: 20px; padding-right: 40px; p=

adding-left: 40px; font-family: "netflix sans", helvetica, roboto, "segoe u=

i", sans-serif; font-size: 36px; font-weight: 700;'>

Your payment could not be processed.



xt-transform: none; line-height: normal; letter-spacing: normal; font-famil=

y: -apple-system, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", Arial, =

sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol"; font-=

size: 13px; font-style: normal; font-weight: 400; word-spacing: 0px; white-=

space: normal; border-collapse: collapse; orphans: 2; widows: 2; font-featu=

re-settings: "liga" 0; font-variant-ligatures: normal;=20

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-=

thickness: initial; text-decoration-style: initial; text-decoration-color: =

initial;' cellspacing=3D"0" cellpadding=3D"0">


class=3D"copy p content-padding" style=3D'color: rgb(34, 31, 31); line-hei=

ght: 21px; padding-top: 20px; padding-right: 40px; padding-left: 40px; font=

-family: "netflix sans", helvetica, roboto, "segoe ui", sans-serif; font-si=

ze: 16px; font-weight: 400;'>Good day,



xt-transform: none; line-height: normal; letter-spacing: normal; font-famil=

y: -apple-system, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", Arial, =

sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol"; font-=

size: 13px; font-style: normal; font-weight: 400; word-spacing: 0px; white-=

space: normal; border-collapse: collapse; orphans: 2; widows: 2; font-featu=

re-settings: "liga" 0; font-variant-ligatures: normal;=20

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-=

thickness: initial; text-decoration-style: initial; text-decoration-color: =

initial;' cellspacing=3D"0" cellpadding=3D"0">

class=3D"copy p content-padding" style=3D'color: rgb(34, 31, 31); line-hei=

ght: 21px; padding-top: 20px; padding-right: 40px; padding-left: 40px; font=

-family: "netflix sans", helvetica, roboto, "segoe ui", sans-serif; font-si=

ze: 16px; font-weight: 400;'>

Attention! There was a problem processing your payment. Don't worry, it can=

happen... It's easy to fix, and you'll be back to watching TV in no time.<=

/td>



gb(0, 0, 0); text-transform: none; line-height: normal; letter-spacing: nor=

mal; font-family: -apple-system, BlinkMacSystemFont, "Helvetica Neue", "Seg=

oe UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI=

Symbol"; font-size: 13px; font-style: normal; font-weight: 400; word-spaci=

ng: 0px; white-space: normal; border-collapse: collapse; orphans: 2; widows=

: 2; font-feature-settings: "liga" 0;=20

font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-str=

oke-width: 0px; text-decoration-thickness: initial; text-decoration-style: =

initial; text-decoration-color: initial;' cellspacing=3D"0" cellpadding=3D"=

0">

ng-top: 20px; padding-right: 40px; padding-left: 40px;">


adius: 4px; width: 420px; line-height: normal; font-family: -apple-system, =

BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", Arial, sans-serif, "Apple=

Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol"; font-size: 13px; font-w=

eight: 400; border-collapse: collapse; font-feature-settings: "liga" 0; bac=

kground-color: rgb(229, 9, 20);' bgcolor=3D"#e50914" cellspacing=3D"0" cell=

padding=3D"0">


lor: rgb(255, 255, 255); line-height: 17px; letter-spacing: 0px; font-famil=

y: "netflix sans", helvetica, roboto, "segoe ui", sans-serif; font-size: 14=

px; font-weight: 700;'>
arget=3D"_blank" rel=3D"noopener noreferrer">Please try to pay again.
td>



gb(0, 0, 0); text-transform: none; line-height: normal; letter-spacing: nor=

mal; font-family: -apple-system, BlinkMacSystemFont, "Helvetica Neue", "Seg=

oe UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI=

Symbol"; font-size: 13px; font-style: normal; font-weight: 400; word-spaci=

ng: 0px; white-space: normal; border-collapse: collapse; orphans: 2; widows=

: 2; font-feature-settings: "liga" 0;=20

font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-str=

oke-width: 0px; text-decoration-thickness: initial; text-decoration-style: =

initial; text-decoration-color: initial;' cellspacing=3D"0" cellpadding=3D"=

0">

ng-top: 20px; padding-right: 40px; padding-left: 40px;">


dius: 4px; border: 2px solid rgb(34, 31, 31); width: 420px; line-height: no=

rmal; font-family: -apple-system, BlinkMacSystemFont, "Helvetica Neue", "Se=

goe UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe U=

I Symbol"; font-size: 13px; font-weight: 400; border-collapse: collapse; fo=

nt-feature-settings: "liga" 0; background-color: rgb(255, 255, 255);' bgcol=

or=3D"#ffffff" cellspacing=3D"0" cellpadding=3D"0">


lor: rgb(34, 31, 31); line-height: 17px; letter-spacing: 0px; font-family: =

"netflix sans", helvetica, roboto, "segoe ui", sans-serif; font-size: 14px;=

font-weight: 700;'>
et=3D"_blank" rel=3D"noopener noreferrer">Update the payment method
>



text-transform: none; line-height: normal; letter-spacing: normal; font-fam=

ily: -apple-system, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", Arial=

, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol"; fon=

t-size: 13px; font-style: normal; font-weight: 400; word-spacing: 0px; whit=

e-space: normal; border-collapse: collapse; orphans: 2; widows: 2; font-fea=

ture-settings: "liga" 0; font-variant-ligatures:=20

normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-dec=

oration-thickness: initial; text-decoration-style: initial; text-decoration=

-color: initial;' cellspacing=3D"0" cellpadding=3D"0">

=3D"20" class=3D"spacer" style=3D"height: 20px; line-height: 0; font-size: =

0px;"> 



'color: rgb(0, 0, 0); text-transform: none; line-height: normal; letter-spa=

cing: normal; font-family: -apple-system, BlinkMacSystemFont, "Helvetica Ne=

ue", "Segoe UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", =

"Segoe UI Symbol"; font-size: 13px; font-style: normal; font-weight: 400; w=

ord-spacing: 0px; white-space: normal; border-collapse: collapse; orphans: =

2; widows: 2; font-feature-settings: "liga" 0;=20

font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-str=

oke-width: 0px; text-decoration-thickness: initial; text-decoration-style: =

initial; text-decoration-color: initial;' cellspacing=3D"0" cellpadding=3D"=

0">


adding-left: 40px;">


font-family: -apple-system, BlinkMacSystemFont, "Helvetica Neue", "Segoe U=

I", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Sym=

bol"; font-size: 13px; font-weight: 400; border-collapse: collapse; font-fe=

ature-settings: "liga" 0;' cellspacing=3D"0" cellpadding=3D"0">


adius: 8px; border: 1px solid rgb(234, 234, 234); padding-bottom: 0px; box-=

shadow: 0px 8px 15px rgba(0,0,0,0.1);" bgcolor=3D"#ffffff">


rmal; font-family: -apple-system, BlinkMacSystemFont, "Helvetica Neue", "Se=

goe UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe U=

I Symbol"; font-size: 13px; font-weight: 400; border-collapse: collapse; fo=

nt-feature-settings: "liga" 0;' cellspacing=3D"0" cellpadding=3D"0">=




Font, "Helvetica Neue", "Segoe UI", Arial, sans-serif, "Apple Color Emoji",=

"Segoe UI Emoji", "Segoe UI Symbol";'>Current payment method


=3D'margin: 0px 0px 1em; font-family: -apple-system, BlinkMacSystemFont, "H=

elvetica Neue", "Segoe UI", Arial, sans-serif, "Apple Color Emoji", "Segoe =

UI Emoji", "Segoe UI Symbol";'>credit card




rmal; font-family: -apple-system, BlinkMacSystemFont, "Helvetica Neue", "Se=

goe UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe U=

I Symbol"; font-size: 13px; font-weight: 400; border-collapse: collapse; fo=

nt-feature-settings: "liga" 0;' cellspacing=3D"0" cellpadding=3D"0">=

=



xt-transform: none; line-height: normal; letter-spacing: normal; font-famil=

y: -apple-system, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", Arial, =

sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol"; font-=

size: 13px; font-style: normal; font-weight: 400; word-spacing: 0px; white-=

space: normal; border-collapse: collapse; orphans: 2; widows: 2; font-featu=

re-settings: "liga" 0; font-variant-ligatures: normal;=20

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-=

thickness: initial; text-decoration-style: initial; text-decoration-color: =

initial;' cellspacing=3D"0" cellpadding=3D"0">


class=3D"copy p content-padding" style=3D'color: rgb(34, 31, 31); line-hei=

ght: 21px; padding-top: 20px; padding-right: 40px; padding-left: 40px; font=

-family: "netflix sans", helvetica, roboto, "segoe ui", sans-serif; font-si=

ze: 16px; font-weight: 400;'>The Netflix team



ine-height: normal; letter-spacing: normal; font-family: -apple-system, Bli=

nkMacSystemFont, "Helvetica Neue", "Segoe UI", Arial, sans-serif, "Apple Co=

lor Emoji", "Segoe UI Emoji", "Segoe UI Symbol"; font-size: 13px; font-styl=

e: normal; font-weight: 400; word-spacing: 0px; white-space: normal; border=

-collapse: collapse; orphans: 2; widows: 2; font-feature-settings: "liga" 0=

; font-variant-ligatures: normal; font-variant-caps:=20

normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial;=

text-decoration-style: initial; text-decoration-color: initial;' cellspaci=

ng=3D"0" cellpadding=3D"0">
dy>

style=3D"padding-top: 30px; padding-right: 40px; padding-left: 40px;">


tem, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", Arial, sans-serif, "=

Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol"; font-size: 13px; f=

ont-weight: 400; border-collapse: collapse; font-feature-settings: "liga" 0=

;' cellspacing=3D"0" cellpadding=3D"0">


or: rgb(34, 31, 31); line-height: 0; font-size: 0px; border-top-width: 2px;=

border-bottom-width: 0px;"> 



ransform: none; line-height: normal; letter-spacing: normal; font-family: -=

apple-system, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", Arial, sans=

-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol"; font-size=

: 13px; font-style: normal; font-weight: 400; word-spacing: 0px; white-spac=

e: normal; border-collapse: collapse; orphans: 2; widows: 2; font-feature-s=

ettings: "liga" 0; font-variant-ligatures: normal;=20

font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-=

thickness: initial; text-decoration-style: initial; text-decoration-color: =

initial;' border=3D"0" cellspacing=3D"0" cellpadding=3D"0">

lign=3D"center" class=3D"footer-shell content-padding" valign=3D"top" style=

=3D"padding-right: 40px; padding-left: 40px; background-color: rgb(255, 255=

, 255);" bgcolor=3D"#ffffff">


al; font-family: -apple-system, BlinkMacSystemFont, "Helvetica Neue", "Sego=

e UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI =

Symbol"; font-size: 13px; font-weight: 400; border-collapse: collapse; font=

-feature-settings: "liga" 0;' cellspacing=3D"0" cellpadding=3D"0">
r>


px 0px 0px;">


normal; font-family: -apple-system, BlinkMacSystemFont, "Helvetica Neue", =

"Segoe UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Sego=

e UI Symbol"; font-size: 13px; font-weight: 400; border-collapse: collapse;=

font-feature-settings: "liga" 0;' cellspacing=3D"0" cellpadding=3D"0">
dy>

dding-top: 0px;">
s=3D"footer-table" style=3D'line-height: normal; font-family: -apple-system=

, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", Arial, sans-serif, "App=

le Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol"; font-size: 13px; font=

-weight: 400; border-collapse: collapse; font-feature-settings: "liga" 0;' =

cellspacing=3D"0" cellpadding=3D"0">

ll">


=3D'line-height: normal; font-family: -apple-system, BlinkMacSystemFont, "H=

elvetica Neue", "Segoe UI", Arial, sans-serif, "Apple Color Emoji", "Segoe =

UI Emoji", "Segoe UI Symbol"; font-size: 13px; font-weight: 400; border-col=

lapse: collapse; font-feature-settings: "liga" 0;' cellspacing=3D"0" cellpa=

dding=3D"0">


); line-height: 18px; letter-spacing: 0px; padding-top: 0px; font-family: "=

netflix sans", helvetica, roboto, "segoe ui", sans-serif; font-size: 14px; =

font-weight: 400;'>Des questions? Appelez au 1-=

844-640-3067



e-height: normal; font-family: -apple-system, BlinkMacSystemFont, "Helvetic=

a Neue", "Segoe UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoj=

i", "Segoe UI Symbol"; font-size: 13px; font-weight: 400; border-collapse: =

collapse; font-feature-settings: "liga" 0;' cellspacing=3D"0" cellpadding=

=3D"0">


164); line-height: 14px; letter-spacing: 0px; padding-top: 0px; font-family=

: "netflix sans", helvetica, roboto, "segoe ui", sans-serif; font-size: 11p=

x; font-weight: 400;'>


none; text-indent: 0px; letter-spacing: normal; font-family: -apple-system=

, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", Arial, sans-serif, "App=

le Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol"; font-size: 11px; font=

-style: normal; font-weight: 400; word-spacing: 0px; white-space: normal; o=

rphans: 2; widows: 2; background-color: rgb(255, 255, 255); font-variant-li=

gatures: normal; font-variant-caps: normal;=20

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-de=

coration-style: initial; text-decoration-color: initial;'>
de-link" style=3D"text-decoration: none;">Netflix Services Canada ULC
12=

00 Waterfront Centre, 200 Burrard St, Vancouver, C.-B. V7X 1=

T2, Canada


td>









Cybersceurity spam

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 02 Jul 2025 14:32:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uX47a-00000000PpK-3T4C

for dave@doctor.nl2k.ab.ca;

Wed, 02 Jul 2025 14:31:58 -0600

Resent-From: The Doctor

Resent-Date: Wed, 2 Jul 2025 14:31:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f176.google.com ([209.85.128.176]:55512)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uX2w9-00000000DjV-1mZc

for sales@nk.ca;

Wed, 02 Jul 2025 13:16:12 -0600

Received: by mail-yw1-f176.google.com with SMTP id 00721157ae682-71173646662so51524667b3.2

for ; Wed, 02 Jul 2025 12:14:11 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=sumologic.com; s=google; t=1751483645; x=1752088445; darn=nk.ca;

h=to:subject:message-id:date:mime-version:from:from:to:cc:subject

:date:message-id:reply-to;

bh=x24OC5x4eVsXbOy1AXE99R7Jrq94hdBp2+YzFXxQJNE=;

b=kv0pahNvT6bcg541CVPulkWCxJeawOO/JiK78OXYXbYMXv+Dxzn0jxWwoLSx4CNL6x

nK4lUdExtxpVsIQ0D1/dVlEGRbrePh/kntqtHAtw9o26G63QphS5bv7Ih+vRKvPwxpi2

lomO5Vg3Wnz0ilvfCycySvtyi3phsnwnx3DvI=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1751483645; x=1752088445;

h=to:subject:message-id:date:mime-version:from:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=x24OC5x4eVsXbOy1AXE99R7Jrq94hdBp2+YzFXxQJNE=;

b=aXDlDjvpXeNB8uAOlYU/f82VdIGSba6VmhXBGM+4e5CYII5LztdKY6FVxoZDEnivh7

coVAXf9VDtj060HYmXfy9sXMcAIz6LztkS0xG8RiHK2YqQv7i07A6K6vWoyHpEIOsof+

EdwlHwTG3m0vOq+2cBNtnd9O2xfvTwivRDvCxZsw0yA9FboVcf2EW4dISfm7ILXRTo1U

5Fu7PdrIiGe/f+kF/m7n0xecogY8kb7Q4S8GHItViJkJpNGw51IaUOBBbuOscMVgiGid

7OK0G4PpDnrrOtc+P4LLBHv9+p0jg7RRLP+rU2pFQZgI12WNFmOxI9zzqKTr/vKgLhEN

0tUw==

X-Gm-Message-State: AOJu0YyXG0FRkQiEPbQ+UGmR28PcZDoCghnjjCLhC616wHpN/mfF15xe

sDiPPU3NjVSgbU2TSspU5Hbl0R2GXTTnaIJXC9nzOaqHr5U92ZakR472cXUyYvI91i0tnblu7WU

/ceacg6FJ6kPPNKkErhufCyTXOdFTy9qgEPYH+bOr5RAKNn/qCoDx

X-Gm-Gg: ASbGnctFu7sS2wJ5HIqF5WOb47S4hpFlQUqGEULsnuqr2ILYg8pPKaL2+Q6KvgktOhC

RujdTvQboC+9EBVyOxmIyCahEsx40DOfQBbx7bHeTVRatuJfiHS3pMTKdHNNZy1f7R0vYZdMRRU

0e7r9hkJeBDSmseXIXhJjPvTbwcFafT+23URFs+Wb2YfZa1fZO2/sLNw==

X-Google-Smtp-Source: AGHT+IGhbnhtL/3anv9Ttup2Rou1TAmR3eGB+6Aw3jzcI5YKdQZg5VhdYd7WcMaYbq41L+b+SXe9Mvuf3jCwsxmUIOU=

X-Received: by 2002:a05:690c:46c8:b0:70c:d322:8587 with SMTP id

00721157ae682-71658fdaddcmr13556677b3.6.1751483644605; Wed, 02 Jul 2025

12:14:04 -0700 (PDT)

Received: from 193155701165 named unknown by gmailapi.google.com with

HTTPREST; Wed, 2 Jul 2025 14:14:03 -0500

From: Jeremy Chang

Mime-Version: 1.0

X-OUTREACH-SENT: true

Date: Wed, 2 Jul 2025 14:14:03 -0500

X-Gm-Features: Ac12FXx3rgFcYqG5mcF5lzeHMjImumWTkcG3gIGZVR5sEC8Nuw3-RcphRIxCJEQ

Message-ID:

Subject: Sumo Logic Introduction

To: Dave Yadallee

Content-Type: multipart/alternative; boundary="000000000000778d690638f71022"

X-Spam_score: 5.5

X-Spam_score_int: 55

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hey Dave, Teams don’t fail because they miss threats—they

fail because they can’t connect the dots fast enough. Even with automation,

analysts report that up to 70% of their time is wasted on false positives.





Content analysis details: (5.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.176 listed in dnsbl.ahbl.org]

[209.85.128.176 listed in dnsbl.ahbl.org]

[209.85.128.176 listed in dnsbl.ahbl.org]

[209.85.128.176 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.176 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.176 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.176 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.176 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.176 listed in will-spam-for-food.eu.org]

[209.85.128.176 listed in will-spam-for-food.eu.org]

[209.85.128.176 listed in will-spam-for-food.eu.org]

[209.85.128.176 listed in will-spam-for-food.eu.org]

[209.85.128.176 listed in will-spam-for-food.eu.org]

[209.85.128.176 listed in will-spam-for-food.eu.org]

[209.85.128.176 listed in will-spam-for-food.eu.org]

[209.85.128.176 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.176 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.6 MEGALONGWORD BODY: Uses really overlong words

0.3 LONGWORD BODY: Uses overlong words

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.176 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} Sumo Logic Introduction



--000000000000778d690638f71022

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hey Dave,



Teams don=E2=80=99t fail because they miss threats=E2=80=94they fail becaus=

e they can=E2=80=99t

connect the dots fast enough.



Even with automation, analysts report that up to 70% of their time is

wasted on false positives.



How does this compare to what you're seeing?





Jeremy Chang (he/him/his)

Sales Development Representative

M (650) 385-8092

Sumo Logic

If you'd like me to stop sending you emails, please click here


3DALBCN5ZGOIR2EI4GMMJXHEZWEMJNGA2GEYJNGEYWKNRNHE2DAYJNGAZGGOLBGY4DOYZTGNRCE=

LBCOZSXE43JN5XCEORCGQRCYITTNFTSEORCHFNDGNDQMZJES4CKOJBUM23UL5RU2SZWM5VXE4TV=

MZVUMWTMNVHG4WDSJFJDSMLBOJFDQPJCPU=3D=3D=3D=3D=3D=3D>



--000000000000778d690638f71022

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



=

Hey Dave,

font-size:13px">

ans-serif;font-size:13px">Teams don=E2=80=99t fail because they miss threat=

s=E2=80=94they fail because they can=E2=80=99t connect the dots fast enough=

.

e:13px">

f;font-size:13px">Even with automation, analysts report that up to 70% of t=

heir time is wasted on false positives.

ly:Arial,Helvetica,sans-serif;font-size:13px">

"font-family:Arial,Helvetica,sans-serif;font-size:13px">How does this compa=

re to what you're seeing?

elvetica,sans-serif;font-size:13px">


outreach-signature">

zing:border-box;font-variant-ligatures:none;margin:16px 0px 0px;outline:non=

e;text-decoration-style:initial;text-decoration-color:initial;color:rgb(33,=

33,33);font-size:16px;font-family:Open Sans,sans-serif;line-height:1.5;font=

-variant-caps:normal;letter-spacing:normal;text-align:start;text-indent:0px=

;text-transform:none;word-spacing:0px">
sizing:border-box;color:rgb(0,0,0);font-family:Arial;font-size:10pt;font-va=

riant:normal">Jeremy Chang
;font-size:10pt">=C2=A0
" style=3D"box-sizing:border-box;color:rgb(0,0,0);font-family:Arial;font-si=

ze:10pt;font-variant:normal">(
zing:border-box;color:rgb(0,0,0);font-family:Arial;font-size:9pt;font-varia=

nt:normal">he/him/his)

style=3D"box-sizing:border-box;font-variant-ligatures:none;margin:0pt 0px;o=

utline:none;text-decoration-style:initial;text-decoration-color:initial;col=

or:rgb(33,33,33);font-size:16px;font-family:Open Sans,sans-serif;line-heigh=

t:1.5;font-variant-caps:normal;letter-spacing:normal;text-align:start;text-=

indent:0px;text-transform:none;word-spacing:0px;background-color:transparen=

t;border-width:initial;border-style:none;border-color:initial;padding:0pt">=


-family:Arial;font-size:10pt;font-variant:normal">Sales Development Represe=

ntative

zing:border-box;font-variant-ligatures:none;margin:0pt 0px;outline:none;tex=

t-decoration-style:initial;text-decoration-color:initial;color:rgb(33,33,33=

);font-size:16px;font-family:Open Sans,sans-serif;line-height:1.5;font-vari=

ant-caps:normal;letter-spacing:normal;text-align:start;text-indent:0px;text=

-transform:none;word-spacing:0px;background-color:transparent;border-width:=

initial;border-style:none;border-color:initial;padding:0pt">
C9DxTc" style=3D"box-sizing:border-box;color:rgb(0,0,0);font-family:Arial;f=

ont-size:10pt;font-variant:normal">M
C9DxTc" style=3D"box-sizing:border-box;color:rgb(0,0,0);font-family:Arial;f=

ont-size:10pt;font-variant:normal">
ze:10pt">=C2=A0(650) 385-8092

zfr3Q CDt4Ke" style=3D"box-sizing:border-box;font-variant-ligatures:none;ma=

rgin:0pt 0px;outline:none;text-decoration-style:initial;text-decoration-col=

or:initial;color:rgb(33,33,33);font-size:16px;font-family:Open Sans,sans-se=

rif;line-height:1.2;padding:0pt;font-variant-caps:normal;letter-spacing:nor=

mal;text-align:start;text-indent:0px;text-transform:none;word-spacing:0px;b=

ackground-color:transparent;border-width:initial;border-style:none;border-c=

olor:initial">
gb(0,0,153);font-family:Arial;font-size:9pt;font-variant:normal">Su=

mo Logic

ch-unsubscribe" style=3D"font-size:10px;color:#999">If you'd like me to=

stop sending you emails, please
api/mailings/unsubscribe/PMRGSZBCHI2TSMRWGI3DALBCN5ZGOIR2EI4GMMJXHEZWEMJNGA=

2GEYJNGEYWKNRNHE2DAYJNGAZGGOLBGY4DOYZTGNRCELBCOZSXE43JN5XCEORCGQRCYITTNFTSE=

ORCHFNDGNDQMZJES4CKOJBUM23UL5RU2SZWM5VXE4TVMZVUMWTMNVHG4WDSJFJDSMLBOJFDQPJC=

PU=3D=3D=3D=3D=3D=3D">click here

logic.com/api/mailings/opened/PMRGSZBCHI2TSMRWGI3DALBCN5ZGOIR2EI4GMMJXHEZWE=

MJNGA2GEYJNGEYWKNRNHE2DAYJNGAZGGOLBGY4DOYZTGNRCELBCOZSXE43JN5XCEORCGQRCYITT=

NFTSEORCGRTGWYRQOI2S2ZCXKRWEYVZTIFCDCYLKJNXEQ3KSHBIE6WK7IN3VMUDZK5LHGRTGJFS=

DIPJCPU=3D=3D=3D=3D=3D=3D.gif" alt=3D"" width=3D"1" height=3D"1">



--000000000000778d690638f71022--

Web/SEO/App spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 02 Jul 2025 14:31:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uX46K-00000000Pe3-1JhK

for dave@doctor.nl2k.ab.ca;

Wed, 02 Jul 2025 14:30:40 -0600

Resent-From: The Doctor

Resent-Date: Wed, 2 Jul 2025 14:30:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013085.outbound.protection.outlook.com ([52.103.43.85]:37006 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uX14Y-00000000GgJ-1G8B

for doctor@nk.ca;

Wed, 02 Jul 2025 11:16:40 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Q/7QxXfKAgz/DHIjJTsx5su/rp3CjrfZuR8gkvKAZVQqg3s6rbnO+iU066lUrD2nOro4aMnidwds36lw7VdeJC1hs2jES7PC29lyFpyioWFJNz86LoMjovjEPhf8YqXmcuh78/pbnSWp+RJMpZLQ/3hCzQpDRRrU2b+ZVBeN+aJxvZCT9GyLJVrnGi5n+37YfixGKaZEXcOE4LdZC9drfNdyyxW3jByM3wyAI9WH9B+DkOn2jzKyXXtO3O1URD5aE2tcgA8Nrjb3yF2Jx9ckLYcazyMJKB19F9ncfPUYI76rhO9AxltaXEaAmLNsic7Y0F9jUzQkQzNyFGeJF7flxw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=JBCdmdnm9iI1ltIVCqtDlDItinOcJnPkhtuT4HD5k3Y=;

b=nYB4L97RZFVf2vGAYhXAGQ+bVMFtCYYai29fydmH0mHTMZraWfLRvfcuJjKcNGlbwZHOdFeMrzyOrAaQJUVWKNXCeAPRvkx4iP5BybRaro6OjFUUY24HXsWJtvRwkLzteDnsKwyU6qSwOOP9LiL0agpzVjDWcn1XNzjGwaP27Envs9t4S+XCQ3TwjVezJrx4RK1iEVJAJ8EqEUWfNcNajGMhmZEmgNsOpTUc09cC6d3102X6Bn/1BtD5PSeNnM+rGEPs/lctoq9NxNEP/XIbzu4eJu8Wb3Ld/ASXUyQ1EIZbSxbqC2aee5w/BsBd7KiXH4vUvNBHBw5ZSYh4GpoMTg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=JBCdmdnm9iI1ltIVCqtDlDItinOcJnPkhtuT4HD5k3Y=;

b=u7PZbDeVF4CKoVe0n2Mow/sef2NVM9hP/IZCmXmVFBjKIEczIGdt26sdjljn5UT0GLvFjMEncj+5peRxm7ofiUUT5DOcNmXrZbv9/JC0um4KPv9dBzwHNG6yqYv335hBG+Jgg23AdtPOfC6yMKMxx2oil77S7gJ4lKECoG1ybeB3/kn4UoN6pNCJ3AwtADqGM0VxmpLBvKeBI7xuwUhFqZ+EjfQwmu9dq4AjSjcnxsqiNkZx6OA5xeooPkLD+3xafdT1oZ/gVoYZ9BbcTsYHQ80Z3k5msUKfGC3yHAKV9kqcWs/VXVhmQuJAT6aRFiOCe8uF5uKSIcy9HWnCZPnpwg==

Received: from SEYPR01MB5314.apcprd01.prod.exchangelabs.com

(2603:1096:101:d8::9) by TY2PPF6DF750801.apcprd01.prod.exchangelabs.com

(2603:1096:408::3aa) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8835.28; Wed, 2 Jul

2025 17:06:20 +0000

Received: from SEYPR01MB5314.apcprd01.prod.exchangelabs.com

([fe80::46a6:11ae:8564:18b7]) by SEYPR01MB5314.apcprd01.prod.exchangelabs.com

([fe80::46a6:11ae:8564:18b7%5]) with mapi id 15.20.8901.021; Wed, 2 Jul 2025

17:06:20 +0000

From: Martha Madison

To: Martha Madison

Subject: Re: Online Visibility

Thread-Topic: Online Visibility

Thread-Index: AQHb63MxWtjIUyRgak+HqGFzfZOQPbQfEFFo

Date: Wed, 2 Jul 2025 17:06:19 +0000

Message-ID:



References:

































In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SEYPR01MB5314:EE_|TY2PPF6DF750801:EE_

x-ms-office365-filtering-correlation-id: d17cacb8-fb90-400d-966b-08ddb98ac39c

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|461199028|15030799003|8060799009|19110799006|15080799009|8062599006|440099028|3412199025|102099032|39105399003|40105399003|39145399003|41105399003|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?JBWXsz7djZ623Ym1RXasAYxyT6ZQ/ITC1dPgjcKeMGNt8Zun4so6vciY?=

=?Windows-1252?Q?64CWXxRmSB7c6Wja41t8sxX6aNiRg/XBH2C68vYqU1lCf7UoYsCSDKHy?=

=?Windows-1252?Q?3xRzC6c2jteZYy5ss8hTEW2Jw0bPtCqAEnakDQkjrcVw1GmHcQTQb28Z?=

=?Windows-1252?Q?HRNuk0uwcVinLkpPXdcPdiwY7tQjizt6mLdNstoSBNnA9Iemc3pQmG8f?=

=?Windows-1252?Q?EWcFsnnYcmMGXvgPJKYUXI+YXiXK6QDPAbWwM5KPMn9NdJXi1nNgvYEw?=

=?Windows-1252?Q?NYt6ELpe4oTz0F5E30EGvFbLgEpRXwhSa7qnJZBLAxS0MCY9KLInoQ5e?=

=?Windows-1252?Q?Ranaib/X8ROVUtyjfBVO3j8ynbzxRxAppvYC/JzEGFS/1LiPvE6DoSZ7?=

=?Windows-1252?Q?RHJuJgmHOjkwAs3s7/2WlU5Ylr5tLrUxtI9LegqK0xKTbZeh62KzeVUx?=

=?Windows-1252?Q?vJ9oFY3QdbOglNNo1cyQgLoU2ZwcN8iPRpCzdTxSm6hD0VAyx9koxiU4?=

=?Windows-1252?Q?GS4uw2bIFgpmT8ozUZyUYLCdEF568IAA64th23Lq8B5GTgkjaOj1e3Pk?=

=?Windows-1252?Q?tz+OnSGCHKdtPhShc82nT58blI7uOonQhnhToPAhQOATkYwN2yiaZrPD?=

=?Windows-1252?Q?vsqRFXGa9RJj5SUZatjBj7j5dGMtFzwRHj1wsEyrJtEw2iqCJzRB2O4O?=

=?Windows-1252?Q?BFlTtMFpiKcDF4LtBuateQ9DXUcrO8L3C3WeSL3M9Mm8NDL8lKz3GNTn?=

=?Windows-1252?Q?46YEY4+52vx7S/j5AjRprryvbhn7MN6AxNr4pii4FWEWvW6yCKrgdPad?=

=?Windows-1252?Q?bKoQUUEBLQpV8EwRymfEnM0UjDrIRYKFRjwxf2il317CunEu+Dsvrvau?=

=?Windows-1252?Q?JfqyegYqLnGeyG5qVjoH0+i/ZpaYG+vEjNaG2u+xkkwd8/dvKMbQAay4?=

=?Windows-1252?Q?YpQmj8YrZ7FS9lmonJBMqnbFtlq6mi7vvn8v52Xyx/KvbAQkn+Xq1zfI?=

=?Windows-1252?Q?MD0jxgG6y6QdzMrT3tkoNcGOTsjwWi5Olm4SiwSlR7BIhH2cm+NrKKJQ?=

=?Windows-1252?Q?3NJceR64TQ3TkAXdkoRnzfglTvXcwGJriKO2fiznVONegvQ82G4er40m?=

=?Windows-1252?Q?tgW4OnHvdeDhfSCyJj0DuO7hbZQuGFTOdGcF9L4K1bnBnJ57WSw16Hre?=

=?Windows-1252?Q?Qb9qxBqrND5yR3fLR3dOK57zYPTV3yHyny/rGPRsdDL4USajk5pxlvwB?=

=?Windows-1252?Q?U6nKTNp2sQ19gds+AUKOcnLd/OUv37GyqtbLwe9EKNVhcByo2eRe5VUp?=

=?Windows-1252?Q?eN+uuovtlSvRsz0G9taw3o93F7kuw1XtWqOGBtUAgAd27noFmNUaVXqk?=

=?Windows-1252?Q?3t1wcildWyZ6ZQ=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?mrR+PJ7eGJ/VpgkdkHFnEVefpXsCrGePoCwHEDSatzuWRMigT8bVjpuJ?=

=?Windows-1252?Q?RNHeNJ58h8OwwVBqwyDV7+JoXSDJPPnRRWfJDD2uF0a84EKUMKNgmSZV?=

=?Windows-1252?Q?br/wuavOqoJ3mm52lwXDZHVGN+iNqXCW3qMQchjY/3DVIkhlWzEDnRYb?=

=?Windows-1252?Q?P07ffkuALTP4pQ/5zI9x59BZza80BfF1qDm4+XLFxslFl9r2r9x27ei3?=

=?Windows-1252?Q?vL6kjXWCOV6+SY1sNiClajPcnMNfDTjJ3MvRUrkg3XFwab0wv9Td6+/a?=

=?Windows-1252?Q?l87gasV9idkaugHr+6wqTiBLOgj6+O0maEkHV/ZebSUWiDjfVyyqcTzL?=

=?Windows-1252?Q?pupDusuzHdkt2Qhaf0ijB5jJtILzOlFg9Hp4lAw4DTPkrURmeUjt2sbJ?=

=?Windows-1252?Q?vNjBCbWRK3Tbc5pv6uN2IE0sTeZNJDT0Sy4M/15C0fvjyitNYy9OQ5hN?=

=?Windows-1252?Q?9tqZB0+wnSGpAv9I4iycjoC8bWp7eGjSWwvqezpAf/ey5YIz6kltUv8A?=

=?Windows-1252?Q?ego569GaFLFCYwBx8pYSG5AJXbXiIt1HL1zF6TznhD1Rt6n46G1XvLdC?=

=?Windows-1252?Q?Zv+VmNLwVofhFD6bp0Sar+ZhwbMc0FMWdJeJt4WSuGqylkc5McKwgNq4?=

=?Windows-1252?Q?jF7iPbczMrkBVcRp89RB+1ZEqTMd1vd35Q892D+Zu8xBFVd6GTuzrYH/?=

=?Windows-1252?Q?Za9G0rQcqh6u9EeUsPON4Sf27DGN294MI0VuY2gc/cOH1dCswWcnw1ri?=

=?Windows-1252?Q?5LSoM4oGNG4eKwtcSgO8+1roXsrodHhu5uCS7Bwag/QW/X5Bq9SDpdOz?=

=?Windows-1252?Q?Dd9FtP7c0XQNeSEg7+qD+CsasSVU6zSe86fbFq6bqNqR1LwecFKdW2En?=

=?Windows-1252?Q?uSRDrB77fQHOsUYswO+EFj7JBjS0docXNwBWy3wHZJG/5xfJoFYMXi3F?=

=?Windows-1252?Q?AinHIPFPqvw1Ur8m9RAhQHtdy/opy5BF++1JzTmteREufc4Oi2jhZmwB?=

=?Windows-1252?Q?jZuNtXacKCiZ96/9iKSzJpvVLP/9ZSB1mlZwKv1ThJYwYp5ZWolRfew6?=

=?Windows-1252?Q?7ERb0+r+e3qSUUQxrLEwEucRDRrWSOvOwj6gTT26CBZOzebMwS8sAuZ+?=

=?Windows-1252?Q?1aWBLniRXa5N4rmfFtXPLP34fPsZezxthbujmn+rG6E6ppJUDjLAgQwb?=

=?Windows-1252?Q?b14C1YySpkrTe6lSOZZh6f0KaowRvTZe5JW4NfUdRv7CP5463kS054I9?=

=?Windows-1252?Q?kXyVHtty4ONj/zA3f7hNzhb3lS6ZB5ebfF9SXOMTRMoXZWn2rlNoO7Zu?=

=?Windows-1252?Q?l4WHyjobECI33FVrih4zaypFezPMouuDG/ggrFk3wD2c+piB?=

Content-Type: multipart/alternative;

boundary="_000_SEYPR01MB5314A0638CE175AFA9645E159740ASEYPR01MB5314apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SEYPR01MB5314.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: d17cacb8-fb90-400d-966b-08ddb98ac39c

X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Jul 2025 17:06:19.4772

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TY2PPF6DF750801



--_000_SEYPR01MB5314A0638CE175AFA9645E159740ASEYPR01MB5314apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi, Would you like to share any update or feedback related to my last email=

?



Thank You!

________________________________

From: Martha Madison

Sent: Tuesday, July 1, 2025 10:02 PM

To: Martha Madison

Subject: Online Visibility

Hi there,

While checking your site, I found a few areas that could be improved for be=

tter online reach.

Would it be okay if I share a short review with visuals?

Just reply with =93Yes=94 or =93Send=94, and I=92ll share the details.

Thanks,

Martha



--_000_SEYPR01MB5314A0638CE175AFA9645E159740ASEYPR01MB5314apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hi, Would you like to share any update or feedback related to my last email=

?







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Thank You!







11pt; color: rgb(0, 0, 0);">

From: Martha Madison <marthamadison874@outlook.com>


Sent: Tuesday, July 1, 2025 10:02 PM


To: Martha Madison <marthamadison874@outlook.com>


Subject: Online Visibility







px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H=

elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hi there,







px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H=

elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

While checking your site, I found a few areas that could be improved for be=

tter online reach.







px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H=

elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Would it be okay if I share a short review with visuals?







px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H=

elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Just reply with =93Yes=94 or =93Send=94, and I=92ll shar=

e the details.







px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H=

elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Thanks,







px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, H=

elvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Martha











>


























iv>








x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x=

_x_x_x_x_x_x_x_x_x_x_x_appendonsend">




x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x=

_x_x_x_x_x_x_x_x_x_x_x_divRplyFwdMsg">






x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x=

_x_x_x_x_x_x_x_x_x_x_x_x_x_appendonsend">




x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x=

_x_x_x_x_x_x_x_x_x_x_x_x_x_divRplyFwdMsg">






x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x=

_x_x_x_x_x_x_x_x_x_x_x_x_x_x_divRplyFwdMsg">

















--_000_SEYPR01MB5314A0638CE175AFA9645E159740ASEYPR01MB5314apcp_--

Web/SEO/App spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 02 Jul 2025 14:31:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uX469-00000000Pcb-2OMx

for dave@doctor.nl2k.ab.ca;

Wed, 02 Jul 2025 14:30:29 -0600

Resent-From: The Doctor

Resent-Date: Wed, 2 Jul 2025 14:30:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19013081.outbound.protection.outlook.com ([52.103.74.81]:56252 helo=SEYPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uX0tJ-00000000Ect-41xf

for sales@nk.ca;

Wed, 02 Jul 2025 11:05:03 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=evvOsonMfm40U2xoM9wub856t4kHfaOslvDiA75b9B9ZoCzhiM/fKz69fUTLLVMeu24lgMvE/M3zm3CNDjb3gLZHbo5GCaT3gihiB5fFyjP6MkaxzwL/qi3ewkEe7GaHYTIO9fRjnzWuSrvUgXlJSldpPZ98QYH+E37yeHHMsL/Ud+ZoCBfxRjQHDfVxOJOnAAgVF1D03wpVSG2JZCEuxDG1iD9/iY2fezLdVMrhIEJ8kLrMhsNDm1RobnMdbUYSuSjLeH5tyeDw18kOBt9b4mYat8q3i07t5QECVZA0kFXdqPOsLUUBXIsYF6Tv6G2yDo2raTz0f+CkypdlWv8MDg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=fDbtesFR1ACPVmhqmLo0WKAXkFZd68AV9hED/HUK5T4=;

b=QgLq1I9dpY7VfHPtS4GFzHVMfFcrZiGESJ2gdK4Un/na43TVyLk3EAZdG15TbpiY783ewUeJ3ued3c2Wuwc3lL4YiwmKFD8XX/MGqAH1zlh41JHjTDEafB7pvGfJbUq06YJBBHFEWzHhIfvow6HKGDQLAKzWpItWyY4o+mmYIssaemoJnLElePzVmLWAQXCuXa8j+mhNB9hu0EZKAfK0rR4dD/HtlKPeowkqZzUPZqENPpFaUlzM9z7qlhIkFh+djbYUkIIy7qkM5EAgjGrqakzyLY5/LvvhScKBa9zDONGPOUc20J0dOcvRlRoViCvLjp3lczo0jLhvNq+T7zM+sg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=fDbtesFR1ACPVmhqmLo0WKAXkFZd68AV9hED/HUK5T4=;

b=Hg9vIYATRRo7UEzXXpRa/wDyjor8Mt+4+IEP4IBEqOqhhB1ds8CQyJ0Um6yYgZ3IRgZjdrRHHVZ8lJA8kBj3GP4NQT83FWpK99BCXbvlOhb4l2jKfXRdXxHDsx1UrijUNEetDduSexakFWpvO7Yb80bNb2G0OCTBaD4wR1TI8+5uRPhJP8I04VetXc1mHBryDpun3KGecwv07qaPjMZhJrTyhjWTgck0O7MYMdjwq+mtDlhNFMgI9b2C5i9itJrW0o0pcAP8elJciXpDDt4p8y++IQe/IwYlBqcQMN1FkSqSNuST7gX39rtw33l0rYciT52JtXzdNd+t2yLwx1mGiw==

Received: from SEZPR01MB6865.apcprd01.prod.exchangelabs.com

(2603:1096:101:23e::5) by SI2PR01MB4348.apcprd01.prod.exchangelabs.com

(2603:1096:4:1b0::10) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8880.25; Wed, 2 Jul

2025 16:57:09 +0000

Received: from SEZPR01MB6865.apcprd01.prod.exchangelabs.com

([fe80::6188:3e22:c3f:585f]) by SEZPR01MB6865.apcprd01.prod.exchangelabs.com

([fe80::6188:3e22:c3f:585f%6]) with mapi id 15.20.8901.018; Wed, 2 Jul 2025

16:57:09 +0000

From: Maria Garcia

To: "sales@nk.ca"

Subject: Re: Book a Free Strategy Call

Thread-Topic: Book a Free Strategy Call

Thread-Index: AQHb63JZ5QNlF6cD+kCu26NVWPWE2w==

Date: Wed, 2 Jul 2025 16:57:09 +0000

Message-ID:



Accept-Language: en-US, en-IN

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SEZPR01MB6865:EE_|SI2PR01MB4348:EE_

x-ms-office365-filtering-correlation-id: 93aa31c9-ce32-48ab-e573-08ddb9897b91

x-microsoft-antispam:

BCL:0;ARA:14566002|461199028|38102599003|19110799006|8062599006|7092599006|15080799009|8060799009|5062599005|102099032|3412199025|440099028|51005399003|40105399003|39105399003|11031999003;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?SLCyTvE/2ogUUqrT/r5uo8PnNqCwY6dSbE2qRQW7E6/iAVv86BvsyipR?=

=?Windows-1252?Q?3W9q3vAgXE2kz2u4EU9H4AjUhxW3J/uX8eR0tkijW28Kn6LBbS5ZY/Ac?=

=?Windows-1252?Q?iU0RIOCXTZNbbUokmuLQF3Q+fUD0PcpTQ19Q4wTmfK7YhfaufXZz99+I?=

=?Windows-1252?Q?F5U4ZZmDytDJiX2BTfEfoSigw7SflR524M5t5ohuCtJumGYzKqc9CJ+W?=

=?Windows-1252?Q?AqfXz11lGvrd2J323Z7Jqd54znSJUitFVEAbW2T/yXWJ3OPcGBt76Xp6?=

=?Windows-1252?Q?wAxWH07A+/uYZPpS/TAw4wUxTtaList8Ccc0DTlu90SqCc2A9KWaQUcX?=

=?Windows-1252?Q?MCBdH3Mmch9dABX/WOcJV2zVHEpT2e8WJ9wRZOQ+5rNTrKikHH4XlyRi?=

=?Windows-1252?Q?GXGeNVpzETu+F3ccAB/kPVRZyb31YoivRc+fTZhg49bMpbCp6JyyBbyw?=

=?Windows-1252?Q?URfnDJHmiALiHUMCK85F4RVq9mhrV78dtKw+TDW9sg7hV5o62Wv1ToMM?=

=?Windows-1252?Q?pRPkoEFutncySda2nuusV1Yj288+vniFrCxnMwhZaSYs2A0vnaRCn1a9?=

=?Windows-1252?Q?KxDmPsJA8ng4964QR/tY2zW1Wp9X/iocJclwIREhhnmunPimYtw1BlAh?=

=?Windows-1252?Q?rDy9cyIdwLy4cBvOrOsuIZ19qZMp1aujrZawLi52yMMeyapkqjmYGdL5?=

=?Windows-1252?Q?LWGkarkvG9b7lqDgGJ2EKty60Gno2VN7KDCKbe+Cm5EozWMNrLuH7Zjy?=

=?Windows-1252?Q?ot6eC57Xs6oKiSNddgVEmve7/xnFfOncaEdnOZGRYE3ryRcg6tiXIjuV?=

=?Windows-1252?Q?zRflalLcjkPtqqQDfbaSOdKe0p1E0/uiqUi8/dQBgMehdjoDoK7FPh5R?=

=?Windows-1252?Q?WijNaoYW5xnOBXyc2zgI/j4iX3g81+vXy5QskJP485QCt/0bWJYDLpUQ?=

=?Windows-1252?Q?zTBaxoV7Kc4vukqjzHzUuQ/6UdtZqk6VezkAuaEw/M/XbSaQsAxqhJQ6?=

=?Windows-1252?Q?0ElJX5ezKjh6kfvmOnC8a+ocYw7qha8/uTVb1KTA9+h8Pif3L/jgV8Hu?=

=?Windows-1252?Q?8A1fnN9Yn8qtqRzeQc5QE/kFdd3JPwgHejPJfnNuy0vodgjLDZoUQYZo?=

=?Windows-1252?Q?yvqErkkjJFxDcmztOOs2uHU3k5TLBRnHZkZAWop6oVDWFzCk811HKmZE?=

=?Windows-1252?Q?vJJ1zzEnUedE3UxrY/09AA6rL47F7tvzD/5dU93OWC1KurYSDSQPvV1Q?=

=?Windows-1252?Q?biD3iZRUMgJvTXy6jqAs2XIDxwwydeVVBKquqoXq4YPRoNTgvfk9+8wy?=

=?Windows-1252?Q?TEbvslhfcQbZvGSTrvTmOgk/3mse+9+2J7/AfVcK/dcfPd9FSYS228dU?=

=?Windows-1252?Q?1LXPzhbAeNcjgXqaww4dQwKEhoi2gd56p2I=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?lr5r4nf4zW3JMai2mnsItHUxkTZiOd0SX4RxBB7W9JdqCsnvp4qXTX98?=

=?Windows-1252?Q?38SqDrKSBtUsLz9H+9QQrS99eUeFm5VfUY/qDved3Lg4FEa7Uyhv14z1?=

=?Windows-1252?Q?cYPJ+FAEzekSeXge+bj4oGJ/0ZtE3nbfpr5zM0Av46K4ED/a+U7C+wyC?=

=?Windows-1252?Q?H5Ysdwxjd+yCr7IcLVsT3iQZsvYMLOYx0XbI651p24CmkX0BO/XuTGmO?=

=?Windows-1252?Q?3b2NwnD814xi8lBY6+cwORJbVmhnNQwvmPCDC4HhU4VfMbSyczhQjIvr?=

=?Windows-1252?Q?c+B3lsBk+/F0l79rTVrdTUu3ceqcJRpuy0bMYayDf8tMA1b6K9gQ5ms1?=

=?Windows-1252?Q?nDtBwirQ9TL7LpHGIaZrf+7IKYetTf5qRHutk1/GasrkGEG6dDdKlFp/?=

=?Windows-1252?Q?0xjWu9lE4gQbmaSEuKmZs1bSlGu6bUBDP5RlkqZFOMdekhXaD7DxvJB1?=

=?Windows-1252?Q?TtLOghu4B84yzcSsOECnhCkaLg6nbDzDVuSf32pES2DZOcZTQ0ZGZ9R6?=

=?Windows-1252?Q?sB9f6SgP3+xXuf56WmSrv9J0IJshjc9p7Af72NOLLdxBgKXqJNgU3mHt?=

=?Windows-1252?Q?WyOTowIdpBRNOUdNwacsv10Jk0/MVSsfvGw0yi+qVKuUn0LVEzgdVHz3?=

=?Windows-1252?Q?s07rVL6vlmllGUtJnWNd33nQ7GxOaWwKUZiNChM/N9seFzkucbWtWCZc?=

=?Windows-1252?Q?0hG4TEmlwqafIs05kaOkvyfuwIz+YZSUrJAd46mqo4M/vBsqgWw9+2LZ?=

=?Windows-1252?Q?je09DZGVONuROZO4q7oitdLIp5KC06PIAEL4Nh9/y2SLca9VI9t3LuVl?=

=?Windows-1252?Q?qLm5D/keX+aelftm7kUzZ41lwb7WVfUHKG6d1Ex84PeBhDAtLkEg+2pC?=

=?Windows-1252?Q?Ux6RN9lq6ZGBnloDxSNF5cAK583/gDbeJD5FW0hthuZW89S7lObS92Ae?=

=?Windows-1252?Q?jwEImRiQL5ObtX8W0GsL8AW/HbfMyvBwyLPaBDu6fagDOusbeMm2kJkm?=

=?Windows-1252?Q?F6mm2gKBKi5HoOezYtqRPWX7+M+cMIx88Xfa1Ek1MZ291lMM3LarOXd+?=

=?Windows-1252?Q?4zbDQIjYh3YnEqEIqmq8ikJd/y1Q430A3+zeaaNccilAn33YCw+zhzjf?=

=?Windows-1252?Q?/rrksH27dffWjbfoF86jt/zYS3AKe7n/G/3xN1ha23HXmyRc8TNk3k8p?=

=?Windows-1252?Q?9wBf82NFjqK1C2K5FIjibmmEXw5RxrGtYNlyDuTgfdN+FVaui75R+DNQ?=

=?Windows-1252?Q?6c3cTFZ2jiKUMNq4t1VF8baPM+nXfVQDmULzReWv1kumCIEqUk5s6wFO?=

=?Windows-1252?Q?kamxM4hkGAnaefoGkCoOIrgmaFnNQ3nTc71OdPNo6f96sMmH?=

Content-Type: multipart/alternative;

boundary="_000_SEZPR01MB68650DFB19EFF2775DE020C5BD40ASEZPR01MB6865apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SEZPR01MB6865.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 93aa31c9-ce32-48ab-e573-08ddb9897b91

X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Jul 2025 16:57:09.1210

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SI2PR01MB4348

X-Spam_score: 5.3

X-Spam_score_int: 53

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear sales@nk.ca, If you’re still considering SEO solutions.

I’d be glad to share our packages and pricing , SEO, SMO proposal rate

sheet?



Content analysis details: (5.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.74.81 listed in dnsbl.ahbl.org]

[52.103.74.81 listed in dnsbl.ahbl.org]

[52.103.74.81 listed in dnsbl.ahbl.org]

[52.103.74.81 listed in dnsbl.ahbl.org]

[2603:1096:101:23e:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:23e:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:23e:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:23e:0:0:0:5 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.74.81 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.74.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.74.81 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.74.81 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:101:23e:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:23e:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:23e:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:23e:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:23e:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:23e:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:23e:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:23e:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[52.103.74.81 listed in will-spam-for-food.eu.org]

[52.103.74.81 listed in will-spam-for-food.eu.org]

[52.103.74.81 listed in will-spam-for-food.eu.org]

[52.103.74.81 listed in will-spam-for-food.eu.org]

[52.103.74.81 listed in will-spam-for-food.eu.org]

[52.103.74.81 listed in will-spam-for-food.eu.org]

[52.103.74.81 listed in will-spam-for-food.eu.org]

[52.103.74.81 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.74.81 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.74.81 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[mariagarcia32092507(at)outlook.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mariagarcia32092507(at)outlook.com]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} Re: Book a Free Strategy Call



--_000_SEZPR01MB68650DFB19EFF2775DE020C5BD40ASEZPR01MB6865apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Dear sales@nk.ca,





If you=92re still considering SEO solutions.





I=92d be glad to share our packages and pricing , SEO, SMO proposal rate sh=

eet?





Warmly,



Maria Garcia



Business SEO Manager



--_000_SEZPR01MB68650DFB19EFF2775DE020C5BD40ASEZPR01MB6865apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">





Dear sales@nk.ca,








If you=92re still considering SEO solutions.








I=92d be glad to share our packages and pricing , SEO, SMO propo=

sal rate sheet?








Warmly,



Maria Garcia



Business SEO Manager









--_000_SEZPR01MB68650DFB19EFF2775DE020C5BD40ASEZPR01MB6865apcp_--

Products request spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 02 Jul 2025 14:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uX45S-00000000PV1-2DeX

for dave@doctor.nl2k.ab.ca;

Wed, 02 Jul 2025 14:29:46 -0600

Resent-From: The Doctor

Resent-Date: Wed, 2 Jul 2025 14:29:46 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f225.google.com ([209.85.214.225]:57672)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uWzGm-00000000NxZ-0Ija

for doctor@doctor.nl2k.ab.ca;

Wed, 02 Jul 2025 09:21:13 -0600

Received: by mail-pl1-f225.google.com with SMTP id d9443c01a7336-23636167afeso44135085ad.3

for ; Wed, 02 Jul 2025 08:20:18 -0700 (PDT)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1751469612; x=1752074412;

h=thread-index:thread-topic:mime-version:subject:in-reply-to

:message-id:reply-to:from:date:dkim-signature:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=xh8yTwPeCBYa/YNjTOGA6qYKf5H5wkMhy/TUU7DcyWY=;

b=OV5JuwaeSi7IXTH4w6SW+gTthnHNzRCo2pnIBjix5nGtG+dtT8OS4hZdtlMmfoRydh

Lbnc0lYeQPflR70paSOTIp0/5F7GRgDE97Mg8u4qPep2rsgfhbTVakJRPJsxP2JRAyCp

CGvCVJm3G63rt00Di6Zw+1ybxX27aL7FeJKqVwBh4LzsnQo17fJyhqOWnJvSvxkCQMVm

MumeE/J7fDio3bFWCXKgRIW51o9j+s9mNUf4glSRf7CxVee/NEpUzGV0AyvDqVxbl2lX

TC7PWXtBKDk9iPmxOYkisv/XOP6xaDOQSaGJ4c51+bB2h7DaTFrw79cnElaubRZWMFGp

5YTQ==

X-Forwarded-Encrypted: i=1; AJvYcCWa5/1KMdFw00WBsLmqwKpmtWqZU3m+qsKddZhlikR41PP/HbmpBSDhtyotdyRbQ66quuCYgDM=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YxfYtI19PaZ88hVfaSwNyUL0LahfNNzilwNF87Kfv5v+9uhvrUa

pIgk1+absWWBebyk8HeDsuviFXzYEnAyWnluDH2hRCOoc0HXeLhPHzGIYbwMZByzmNn5esZsOn3

sw1Ox7FlXQ6VALqxhCCbFSwpXck7rsuWWb9Hi

X-Gm-Gg: ASbGncv+OeL2RzKO+un4V+X/D/mzYymeAB6ZiEj4V+XpAG3v0a15l5OIoi2S67adjkH

bG+RpzSn3z6Vq6oLB52fd6hiBAe1tqtJHrdM8jlUOhK5mE5JKAk1OllYA1SkMOjX4V/Qq40kKJA

UIr3FxoX3Wnw4tMRFq2KHzzzLnXHZxm3HPXrmJ5roTbVwRP4z/3lLhdVzc3y/w20VuxG6HEivuk

Uw4WWAnYKe+6JTZx7HT9/QIj9PqvyTO7r5eTf8qW3IrRuR9YLOUvy62ENLMvaQCNwCrOy/f8swv

QccLgTqpsozfOmItccI+Un+WpQgau5p7JN+H

X-Google-Smtp-Source: AGHT+IH/JWju3t1g463uIXZW6CX1hIRRAJ2EamIKyLrSfqXRh6qNhviXNARz8/CJ13BhJJxXWoZzOyws12Xk

X-Received: by 2002:a17:902:d50c:b0:234:bca7:2920 with SMTP id d9443c01a7336-23c6e58adefmr59208875ad.24.1751469611585;

Wed, 02 Jul 2025 08:20:11 -0700 (PDT)

Received: from zm1.pactindo.com (zm1.pactindo.com. [202.159.107.234])

by smtp-relay.gmail.com with ESMTP id d9443c01a7336-23acb2e1d7esm7079345ad.13.2025.07.02.08.20.11;

Wed, 02 Jul 2025 08:20:11 -0700 (PDT)

X-Relaying-Domain: pactindo.com

Received: from localhost (localhost [127.0.0.1])

by zm1.pactindo.com (Postfix) with ESMTP id D2244161085;

Wed, 2 Jul 2025 22:20:09 +0700 (WIB)

X-Virus-Scanned: amavisd-new at pactindo.com

Received: from zm1.pactindo.com ([127.0.0.1])

by localhost (zm1.pactindo.com [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id Lq9ELut4BtI7; Wed, 2 Jul 2025 22:20:09 +0700 (WIB)

Received: from zm1.pactindo.com (zm1.pactindo.com [10.10.40.2])

by zm1.pactindo.com (Postfix) with ESMTP id 9EC7B1610C7;

Wed, 2 Jul 2025 22:16:27 +0700 (WIB)

X-DKIM: OpenDKIM Filter v2.6.0 zm1.pactindo.com 9EC7B1610C7

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pactindo.com;

s=DA968520-3E26-11E2-8CE0-C1E422021628; t=1751469389;

bh=xh8yTwPeCBYa/YNjTOGA6qYKf5H5wkMhy/TUU7DcyWY=;

h=Date:From:Reply-To:Message-ID:Subject:MIME-Version:Content-Type;

b=wKwFGXe4ArP8nZinHV9fss5LXg/gnmjnkqB2Yu9OWs27Jy8vSsWYWQCN4zlBL9yBV

lGMnr8efL8ObgEwxC+N11WQRyajjLH03ivgA445HPwiZ1quSWb5kOxEPbnm/5D7pF4

pDKURRaUhpeO70I+olp1zVoXP4kTYIq+BpMNd8Zc=

Date: Wed, 2 Jul 2025 22:16:27 +0700 (WIT)

From: Rayno Mors

Reply-To: Sungwook Cho

Message-ID: <66446206.23957.1751469387566.JavaMail.root@pactindo.com>

In-Reply-To: <1795675102.23799.1751469373252.JavaMail.root@pactindo.com>

Subject: Quotation Request

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_Part_23956_1069593149.1751469387563"

X-Mailer: Zimbra 8.0.0_GA_5434 (ZimbraWebClient - GC137 (Win)/8.0.0_GA_5434)

Thread-Topic: Quotation Request

Thread-Index: BYvJg30+o0PJuR2zR7y0HnUnX2RvpQ==

X-Spam_score: 11.6

X-Spam_score_int: 116

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good Morning Dear, I am Sungwook Cho,



Content analysis details: (11.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[202.159.107.234 listed in dnsbl.ahbl.org]

[202.159.107.234 listed in dnsbl.ahbl.org]

[202.159.107.234 listed in dnsbl.ahbl.org]

[202.159.107.234 listed in dnsbl.ahbl.org]

[209.85.214.225 listed in dnsbl.ahbl.org]

[209.85.214.225 listed in dnsbl.ahbl.org]

[209.85.214.225 listed in dnsbl.ahbl.org]

[209.85.214.225 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[202.159.107.234 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[202.159.107.234 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[202.159.107.234 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[202.159.107.234 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.225 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.225 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[efcho40(at)yahoo.com]

1.2 MISSING_HEADERS Missing To: header

0.9 URG_BIZ BODY: Contains urgent matter

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[202.159.107.234 listed in will-spam-for-food.eu.org]

[202.159.107.234 listed in will-spam-for-food.eu.org]

[202.159.107.234 listed in will-spam-for-food.eu.org]

[202.159.107.234 listed in will-spam-for-food.eu.org]

[202.159.107.234 listed in will-spam-for-food.eu.org]

[202.159.107.234 listed in will-spam-for-food.eu.org]

[202.159.107.234 listed in will-spam-for-food.eu.org]

[202.159.107.234 listed in will-spam-for-food.eu.org]

0.0 HTML_MESSAGE BODY: HTML included in message

1.9 REPLYTO_WITHOUT_TO_CC No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Quotation Request



------=_Part_23956_1069593149.1751469387563

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit







Good Morning Dear,







I am Sungwook Cho,







Our organization is interested in buying your product.







Please kindly send more details about your product/latest catalog, price list and payment terms,







We really need a good business cooperation we want to deal directly with you, Hope you can export to South Korea,







Waiting for your urgent reply so we can proceed,











Best Regards,







Sungwook Cho,



Sales Director



Email: efcho40@yahoo.com



Head Office



Address: 63, Namdaemun-ro, Jung-gu, Seoul, South Korea



Tel: + 82-2-3287-742



Hanjin Group







------=_Part_23956_1069593149.1751469387563

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 7bit



Good Morning Dear,

 

I am Sungwook Cho,

 

Our organization is interested in buying your product.

 

Please kindly send more details about your product/latest catalog, price list and payment terms,

 

We really need a good business cooperation we want to deal directly with you, Hope you can export to South Korea,

 

 Waiting for your urgent reply so we can proceed,

 

 

Best Regards,

 

Sungwook Cho,

Sales Director

Email: efcho40@yahoo.com

Head Office

Address: 63, Namdaemun-ro, Jung-gu, Seoul, South Korea

Tel: + 82-2-3287-742

Hanjin Group

 



------=_Part_23956_1069593149.1751469387563--

quotation for products spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 02 Jul 2025 14:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uX45K-00000000PTm-2EVT

for dave@doctor.nl2k.ab.ca;

Wed, 02 Jul 2025 14:29:38 -0600

Resent-From: The Doctor

Resent-Date: Wed, 2 Jul 2025 14:29:38 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f226.google.com ([209.85.214.226]:57637)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uWzDI-00000000NRJ-1HCO

for doctor@nl2k.ab.ca;

Wed, 02 Jul 2025 09:17:35 -0600

Received: by mail-pl1-f226.google.com with SMTP id d9443c01a7336-23636167afeso44046115ad.3

for ; Wed, 02 Jul 2025 08:16:42 -0700 (PDT)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1751469395; x=1752074195;

h=thread-index:thread-topic:mime-version:subject:in-reply-to

:message-id:reply-to:from:date:dkim-signature:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=xh8yTwPeCBYa/YNjTOGA6qYKf5H5wkMhy/TUU7DcyWY=;

b=ZaJFssmdfMKnxEIm6BfjI/zdyBTmiex4crANYHrOB/w8vaNTud6EekdDw1Iaayq3vY

nQob6sRBwTkM2KU5caUh9+ztRaMvQyVdBv4jiyBCuSvhgeJUTbuBq++fGaKviv17ei2G

ifSTEfZhobBcrJOBAGhlkx6puOfdGu+ZshMPKc2Vr55CoJnvLAp0stiuoFm1+aQz9Ey+

IsE6zgTQQI/lvK2r7GZsbr1GdeWjsPd2FgEuPGCmDeYNreAdP8rpQ0gM5/bFezhlXrHG

lewu4XcUbV0k0rMdPQu5SwCLoIiFPei36aPkzBqonZmaCYFfTdbdg65pw8vuUuv/UATK

ry8w==

X-Forwarded-Encrypted: i=1; AJvYcCXPj9PKEzgYhzcWO2IWNGIJ9ZgLX1Ijs5Y3/Cwny/4F8ZR9Msa6AmKaDXtNSyUremP0LpfJre4=@nl2k.ab.ca

X-Gm-Message-State: AOJu0YyL//Nx7ZONeJaO6dlIlwCBiKnYg8fT4qfpQu18044kp/xHId+t

7inUXMktHBG//roRr+jH3DJZJu85ryKfJWjBeU154JTDTPYurNSO7ggtoilx3Gy64RN8ISvCLVN

qBXVYBZeeXzyQoeyAn8iYK/vpBFXyq2ceeCNz

X-Gm-Gg: ASbGncsPImiwV4bvmyuK32ZcMgg+e4bOfIjwdN9yAeb8c2C0nS3toXgiI9EGA/ppoLV

NeKtXownD2mYMi1WG8LKDyD2IJ2zNE/PiFg66Xx1YjpQnMcPAlTojcd4qAEqDzx5MUwejUR0Gs0

Ee8rCmdBNBaJn/UZjdpEcz5Xo2uO4bj05Ko9p2yUayHLSZZMmUrZbnCJOCRfsDQo5U9NyMRD0dT

0p01ue97C7xPC/yHsF3bwMqs/Gk3r8G/Q2SJRD49iPYz59ftdwzukIKuo6nlM3oKQ6T5P0B04zw

WLY0oLzq/LDGkEbmLCgZZyNPf9H0+VT6QesG

X-Google-Smtp-Source: AGHT+IH21sKVXpywlyv/NY9Z4NUb26HLkV2AzOJDVEi5JkdHIOY1W2gdhE/TWhP4MsMRv4mK2NKSVlNu2y5A

X-Received: by 2002:a17:902:d487:b0:234:ef42:5d69 with SMTP id d9443c01a7336-23c6e5007ecmr48910215ad.13.1751469395406;

Wed, 02 Jul 2025 08:16:35 -0700 (PDT)

Received: from zm1.pactindo.com (zm1.pactindo.com. [202.159.107.234])

by smtp-relay.gmail.com with ESMTP id d9443c01a7336-23acb3861c8sm7382535ad.104.2025.07.02.08.16.35;

Wed, 02 Jul 2025 08:16:35 -0700 (PDT)

X-Relaying-Domain: pactindo.com

Received: from localhost (localhost [127.0.0.1])

by zm1.pactindo.com (Postfix) with ESMTP id 9B9C0161107;

Wed, 2 Jul 2025 22:16:33 +0700 (WIB)

X-Virus-Scanned: amavisd-new at pactindo.com

Received: from zm1.pactindo.com ([127.0.0.1])

by localhost (zm1.pactindo.com [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id 9U4xSefuoqGN; Wed, 2 Jul 2025 22:16:33 +0700 (WIB)

Received: from zm1.pactindo.com (zm1.pactindo.com [10.10.40.2])

by zm1.pactindo.com (Postfix) with ESMTP id 9EC7B1610C7;

Wed, 2 Jul 2025 22:16:27 +0700 (WIB)

X-DKIM: OpenDKIM Filter v2.6.0 zm1.pactindo.com 9EC7B1610C7

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pactindo.com;

s=DA968520-3E26-11E2-8CE0-C1E422021628; t=1751469389;

bh=xh8yTwPeCBYa/YNjTOGA6qYKf5H5wkMhy/TUU7DcyWY=;

h=Date:From:Reply-To:Message-ID:Subject:MIME-Version:Content-Type;

b=wKwFGXe4ArP8nZinHV9fss5LXg/gnmjnkqB2Yu9OWs27Jy8vSsWYWQCN4zlBL9yBV

lGMnr8efL8ObgEwxC+N11WQRyajjLH03ivgA445HPwiZ1quSWb5kOxEPbnm/5D7pF4

pDKURRaUhpeO70I+olp1zVoXP4kTYIq+BpMNd8Zc=

Date: Wed, 2 Jul 2025 22:16:27 +0700 (WIT)

From: Rayno Mors

Reply-To: Sungwook Cho

Message-ID: <66446206.23957.1751469387566.JavaMail.root@pactindo.com>

In-Reply-To: <1795675102.23799.1751469373252.JavaMail.root@pactindo.com>

Subject: Quotation Request

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_Part_23956_1069593149.1751469387563"

X-Mailer: Zimbra 8.0.0_GA_5434 (ZimbraWebClient - GC137 (Win)/8.0.0_GA_5434)

Thread-Topic: Quotation Request

Thread-Index: BYvJg30+o0PJuR2zR7y0HnUnX2RvpQ==

X-Spam_score: 11.6

X-Spam_score_int: 116

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good Morning Dear, I am Sungwook Cho,



Content analysis details: (11.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.226 listed in dnsbl.ahbl.org]

[209.85.214.226 listed in dnsbl.ahbl.org]

[209.85.214.226 listed in dnsbl.ahbl.org]

[209.85.214.226 listed in dnsbl.ahbl.org]

[202.159.107.234 listed in dnsbl.ahbl.org]

[202.159.107.234 listed in dnsbl.ahbl.org]

[202.159.107.234 listed in dnsbl.ahbl.org]

[202.159.107.234 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.226 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.226 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.226 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.226 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[202.159.107.234 listed in will-spam-for-food.eu.org]

[202.159.107.234 listed in will-spam-for-food.eu.org]

[202.159.107.234 listed in will-spam-for-food.eu.org]

[202.159.107.234 listed in will-spam-for-food.eu.org]

[202.159.107.234 listed in will-spam-for-food.eu.org]

[202.159.107.234 listed in will-spam-for-food.eu.org]

[202.159.107.234 listed in will-spam-for-food.eu.org]

[202.159.107.234 listed in will-spam-for-food.eu.org]

[209.85.214.226 listed in will-spam-for-food.eu.org]

[209.85.214.226 listed in will-spam-for-food.eu.org]

[209.85.214.226 listed in will-spam-for-food.eu.org]

[209.85.214.226 listed in will-spam-for-food.eu.org]

[209.85.214.226 listed in will-spam-for-food.eu.org]

[209.85.214.226 listed in will-spam-for-food.eu.org]

[209.85.214.226 listed in will-spam-for-food.eu.org]

[209.85.214.226 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.226 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.226 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[efcho40(at)yahoo.com]

1.2 MISSING_HEADERS Missing To: header

0.9 URG_BIZ BODY: Contains urgent matter

0.0 HTML_MESSAGE BODY: HTML included in message

1.9 REPLYTO_WITHOUT_TO_CC No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Quotation Request



------=_Part_23956_1069593149.1751469387563

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit







Good Morning Dear,







I am Sungwook Cho,







Our organization is interested in buying your product.







Please kindly send more details about your product/latest catalog, price list and payment terms,







We really need a good business cooperation we want to deal directly with you, Hope you can export to South Korea,







Waiting for your urgent reply so we can proceed,











Best Regards,







Sungwook Cho,



Sales Director



Email: efcho40@yahoo.com



Head Office



Address: 63, Namdaemun-ro, Jung-gu, Seoul, South Korea



Tel: + 82-2-3287-742



Hanjin Group







------=_Part_23956_1069593149.1751469387563

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 7bit



Good Morning Dear,

 

I am Sungwook Cho,

 

Our organization is interested in buying your product.

 

Please kindly send more details about your product/latest catalog, price list and payment terms,

 

We really need a good business cooperation we want to deal directly with you, Hope you can export to South Korea,

 

 Waiting for your urgent reply so we can proceed,

 

 

Best Regards,

 

Sungwook Cho,

Sales Director

Email: efcho40@yahoo.com

Head Office

Address: 63, Namdaemun-ro, Jung-gu, Seoul, South Korea

Tel: + 82-2-3287-742

Hanjin Group

 



------=_Part_23956_1069593149.1751469387563--

Web/SEO/App spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dVE@doctor.nl2k.ab.ca

Delivery-date: Wed, 02 Jul 2025 06:55:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uWwya-00000000LsT-00Ow

for dVE@doctor.nl2k.ab.ca;

Wed, 02 Jul 2025 06:54:12 -0600

Resent-From: The Doctor

Resent-Date: Wed, 2 Jul 2025 06:54:11 -0600

Resent-Message-ID:

Resent-To: dVE@doctor.nl2k.ab.ca

Received: from mail-japaneastazolkn19013076.outbound.protection.outlook.com ([52.103.43.76]:1889 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uWuQ0-000000000m1-2U93

for doctor@doctor.nl2k.ab.ca;

Wed, 02 Jul 2025 04:10:25 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=aGzRlTyIkD4G1B2gn2QIVeLEvPNUxSvZd74CdZgbcR14c+hjaNLIoDFS14HSLxhQcbyHSktWaqNE7Pjk//2dnIZHUq4RH8kIpOddBk3FNujkBHoiIXOIA994Undg2PZajtu5bQign22rzHdnqIFdUa9/K6Ry2h6wFKKqtP98YykJfq2KLWg+ZfitweO+Ad+x4a7B7FydRTiNdBXUE6I2Ex02wjhNu23MJs542mrJTIt5XDwFkDdI2wNYceQB/RAtw6BLDpnF127GUR90nrc/KvZ+Hck07uSdBScjxq8hdX1om+PEUmaHjbn47CMbAiUnhTp+M93JjUq/0VZsS030mw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=cyt8ElljqvejwElJS6tGwNJBBgEyDHzKQVQGx3jhH5A=;

b=kz5ucmhdV7MuN/m4Gw49iH4EeFmAk1Xc8cA1TA3nXcttcax4KmimenubCNewWzW6TM/SH29rBlc5flN81m9W7zTSmhVjkHtxEjzaJXnTBBlZrTUCX1/Enmx2lTcwbNP47a0K+F6171WQUNaM5c3EqTNQEqcE6KmOiZm4LZ7tvkFqkvxmI3qhWSUmykJYc1j/9esSPgA4roUmt6MIPcVl3fAgwkeG5xk6ULtsi4F30JSLWhQHu66gIXLj+qfweObhDmY/8xgZ5E3E4DEIjEdhCOu8iBKI18PzpY8DqrLIhGomE9re+Z0SJi7HUWnlrR2M7h043VZ9+hvOz47P12tiEQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=cyt8ElljqvejwElJS6tGwNJBBgEyDHzKQVQGx3jhH5A=;

b=gNkSjWD8MVbvxdjTvdY77FQ/OkfJHDoy9/7DZl4aI6O4eRsJT4T4c3ZseSREX00KtULcLBhXnstBfwjaKjrUTTMxjxbUuZ7LTcS2yPT+5NcILBQLIue769tt/Ry1dtdCA2jFfcPfbLy1iFwYTqZPtttmIz6lBuOO96CAYeFmdvwW124riN3kz+mMo98DQtPYDhIp+qbmw/C4Q7CPMWOeL4Gf9MtDw14OS2RV9gw/6ARwTnP9WAQcc/B4L68BXNvH6Ry+Tqmsk0IAvA1zfZNyncP63Yz21bmxzzJUhMw7RZtFx/O/hVBl/ItB+mGN/HGTadFMheY7JBnL2EGBU1Gp1Q==

Received: from TYZPR01MB5836.apcprd01.prod.exchangelabs.com

(2603:1096:405:1d::14) by SEZPR01MB7316.apcprd01.prod.exchangelabs.com

(2603:1096:101:2a5::7) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8880.31; Wed, 2 Jul

2025 10:08:34 +0000

Received: from TYZPR01MB5836.apcprd01.prod.exchangelabs.com

([fe80::32a6:b1f7:6647:837]) by TYZPR01MB5836.apcprd01.prod.exchangelabs.com

([fe80::32a6:b1f7:6647:837%5]) with mapi id 15.20.8901.018; Wed, 2 Jul 2025

10:08:34 +0000

From: Isabella Herry

Subject: SEO Packages

Thread-Topic: SEO Packages

Thread-Index: AQHb6zksX95J5AzuQUONnQV3Qg6yyA==

Date: Wed, 2 Jul 2025 10:08:33 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYZPR01MB5836:EE_|SEZPR01MB7316:EE_

x-ms-office365-filtering-correlation-id: 97d4f4a5-c622-4e22-09f7-08ddb950675d

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|461199028|8060799009|8062599006|7071999006|15080799009|19110799006|15030799003|41105399003|39105399003|40105399003|39145399003|13041999003|440099028|3412199025|51005399003|102099032;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?kfm48R3NdsbW7lNr4UwY+cFN68yjHnTjRDezyv8EqWNvvDqInM6KeHQt?=

=?Windows-1252?Q?PGoBODl1OlptZ7p4kGvS9YfYUDdgtmM7AYEuCOncKvxLdWZHoUfe/7la?=

=?Windows-1252?Q?yKtJdGgTIoIqjoZ0qvHJhaxuUbEl9rXECFxnjrrN3RpuCKNFcJuTjlo4?=

=?Windows-1252?Q?wpXYYrmpwEhf4GFpBIpYl8OnMSLpcwPH59wUaz+mq0o+TKARCuQIBplU?=

=?Windows-1252?Q?dLmbWV4VA6AR9Bdf3+/M9P+ZDkFb9mxHJ0B6qp3INnziHxsFhkc/f7i/?=

=?Windows-1252?Q?LKbWyDwUau2KmgXRZGEi4XCgQ25o9e9E6AHB1PC/MecykuEIAoFx9sBt?=

=?Windows-1252?Q?flkfDfnOHVRmE7ajY7UiaeODTkooOsD8zHWv+jSm+zqm2UmucZpCZo0X?=

=?Windows-1252?Q?gCsMOa3KHFEPHmnJrjIUFfa7a1mpR0Ho6O+5mM1MG8Wv/fl2NAUQ12ou?=

=?Windows-1252?Q?nSd1q/OiL29E/wc4Sy3BdSb4JwNOVecRHgya6CFWka+fIjeRIjq44b60?=

=?Windows-1252?Q?jlxGej8FaZtVIt4HM/8h++6POgbuJ9TtlJBY8Ghm6iZsNu4HBEXBY64f?=

=?Windows-1252?Q?Lq+YVznlmeAKAe9Y/kmP0dZj/+1W3sm9XsosHcUwptkLj3ISsjXXYrX7?=

=?Windows-1252?Q?IemiFa14w+J7ZWzvol23TgCxxfQ0Ohkc+GVpqnjYOXuwtpsSAbqRpu/w?=

=?Windows-1252?Q?qhntdAjc/+zaKRU5Z9OBXupJ81olXV+IThc7n8X6jKtniPkBcDMcVmmL?=

=?Windows-1252?Q?SezhnmxQj5Ka1MjLLbJKpa2CgNKkQH06FKnuRoiwslS6lwRsuyoxatF0?=

=?Windows-1252?Q?dTTcrn/i3ehqCd2W0ghNuUZ8NHVFG88dVFLNqLlfE001EhpKHGtkT/v3?=

=?Windows-1252?Q?3c7XTGj5/Zz99l0t8fmC7d88SX6KgH2wfKZCY2qVuxAaI36Bx1BDrEyq?=

=?Windows-1252?Q?yN9/aZKJdlFGZhGXO/E/6TinP9O+ByW7qLpNiLfCW0iSrqOub1UImG39?=

=?Windows-1252?Q?0b5bKcm8KnlPoS+qURCriFnMmb1F62eteUcCS/4NGVVZ0L6ZpczrvowM?=

=?Windows-1252?Q?/AALnZJs7M8zjUPCWl/Xia6N2SaMm5zKivbTOeQrbMJM7yGW1juDi9es?=

=?Windows-1252?Q?Ku1PmRBjqsNJUSnM4fxtOsVMehgI2cjdLVUKTY3Tog/OYr40okTWLmXx?=

=?Windows-1252?Q?2P4SrvA00HE8DMEcq/++aV+IuI/CHA8ytNcqxQo+SDMy2LaskUbLB3T0?=

=?Windows-1252?Q?b9mQe4fDUBCthfD/4WajWbQh78finEWjyIyM0+QCVWLjQ2zT0IVVer6F?=

=?Windows-1252?Q?dLf4eaUgb2/EfRyV9EyYdt2Oh5Wln82qcoXCxhIfGCKN+AozXH8onaaI?=

=?Windows-1252?Q?T6wzSmRw9k64M8kCYwejN8sBmSGDk9Iui0DLNSEOlk8jnX3O4+T6FR4c?=

=?Windows-1252?Q?1qWo1qJ+o2aUkWi7zW0Quw=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?AGcilfeJIQb3bfBbGSpunUMAXN40fST92ahAAKkjBnAWFGje8I/21RK/?=

=?Windows-1252?Q?JsyY+AleHF4qaNWikxmjS2TEmaUuCihHHwUtmVDIxt2ZBYihchYWpDCk?=

=?Windows-1252?Q?IO9XOgM8wGmr3RIrT22UzyigK2Ls+UJvwlrz/1BBWPSP7h1gnPhLCnpk?=

=?Windows-1252?Q?ze81bcsK0kAMPPyV+ocCS0pI+p7QrTgR9+cAAJu7gGnBtkP6Y5+6Poid?=

=?Windows-1252?Q?tnjfxxpzXdZr2J5NZKE1cOqoRWq/KOV6EprXnkvVdGHRnMB6UjscjCgM?=

=?Windows-1252?Q?6ccwPtl2hDaH8/ZXs/X934UshNDA1w7ouOnt/0Hg0pMeGWjvmNAxQtdn?=

=?Windows-1252?Q?M/V7wKpYw0ZPBDwEwjpbLN+h75NPYxM7vx1nqagbOr6SaR0FNJpdWelq?=

=?Windows-1252?Q?ym7q+SSXdGtMl5jWbL+ZvxByDbtRi0bKQotFTIceR3Lfn9I/L1z5Es92?=

=?Windows-1252?Q?RVk7WmRcGYcPCkv+Y7vRQHOAXEALD/WAFKP6ehQm9/nDRx3iJgIE1W+R?=

=?Windows-1252?Q?lD5PfyVch4nGzhzrkdoPn+Ad0Hl7r37fVmZQGwO2tOgbyV1wH7Nx83mY?=

=?Windows-1252?Q?YGCeuimIzValM26GP6GX8E7DtsFSVQQStLJHuvfOlHv3NQGvhnpPrlXD?=

=?Windows-1252?Q?l8Aftq3aaP6MAw/9v9VtbSRU4Bj6LITu74qsn5/B0DfqmG7+LJ3I2nYL?=

=?Windows-1252?Q?nhGIdya5RPn7/450XkCx1AlnUU/SGIvVcGJrdk7VPE3AeCKAC5Rb9Yxh?=

=?Windows-1252?Q?9l0+QeSNs3eW1XRFVIG4GGcrtUQo2BTRwy9NCzc0j3AIlSu9aTTAqWiW?=

=?Windows-1252?Q?55qJC5pYMxzX5F2uMnkhIAoy1iOh2BULBvLr0nAhKxELs0YFBN426Yro?=

=?Windows-1252?Q?3jJfc0btqLGQQ12oYGmVblqqdifyIbogZL7GcxiKDEUEV5m9coDENr0q?=

=?Windows-1252?Q?G+MRVmicJkkcS5rNf5J9fW7OSjHlWxLS8Lgbsk0Usu3gT7fInybgRieA?=

=?Windows-1252?Q?0qHsiQSjWxBiq7TuvtsOGetdXTemq93KTVizvzxKlUgDgKy2cbr/IbBd?=

=?Windows-1252?Q?j7U0e0/Xq/W8ePjQ0174USXlwMU+9eOLW/Ur6hy/2arCh+xZo5WnK86G?=

=?Windows-1252?Q?WMl7VDPoMtzC+50Y4reH+Z7+lm3J9N0cEgoZq8/67ZTLtY6BqClBDTU7?=

=?Windows-1252?Q?JrlwGv0LFgWKuQ8XsoKBAqashshGo6zAElQnZk22QhgGKIp5EkzPKq82?=

=?Windows-1252?Q?8QwCBkrOAQGON4oUeS+Uz5W/CfdPWZkk15YzVRSx5UMiq5UKIKzfC48B?=

=?Windows-1252?Q?tgcnizqXoBYyszaK3f5a05N+kDG2P+9T3n5BXm9Galjba301?=

Content-Type: multipart/alternative;

boundary="_000_TYZPR01MB5836E2B96FB5FA50112BB5A78340ATYZPR01MB5836apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYZPR01MB5836.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 97d4f4a5-c622-4e22-09f7-08ddb950675d

X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Jul 2025 10:08:33.8783

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR01MB7316

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I’m still waiting for your reply, Please let me know

if you are interested in my SEO services. Thank you! Isabella. Hi, I’m

still waiting for your reply,



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.43.76 listed in dnsbl.ahbl.org]

[52.103.43.76 listed in dnsbl.ahbl.org]

[52.103.43.76 listed in dnsbl.ahbl.org]

[52.103.43.76 listed in dnsbl.ahbl.org]

[2603:1096:405:1d:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:405:1d:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:405:1d:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:405:1d:0:0:0:14 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.43.76 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.43.76 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.43.76 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.43.76 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:405:1d:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:1d:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:1d:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:1d:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:1d:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:1d:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:1d:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:1d:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[52.103.43.76 listed in will-spam-for-food.eu.org]

[52.103.43.76 listed in will-spam-for-food.eu.org]

[52.103.43.76 listed in will-spam-for-food.eu.org]

[52.103.43.76 listed in will-spam-for-food.eu.org]

[52.103.43.76 listed in will-spam-for-food.eu.org]

[52.103.43.76 listed in will-spam-for-food.eu.org]

[52.103.43.76 listed in will-spam-for-food.eu.org]

[52.103.43.76 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.43.76 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.43.76 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[isabella754herry(at)outlook.com]

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} SEO Packages



--_000_TYZPR01MB5836E2B96FB5FA50112BB5A78340ATYZPR01MB5836apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,

I=92m still waiting for your reply,

Please let me know if you are interested in my SEO services.

Thank you!

Isabella.



--_000_TYZPR01MB5836E2B96FB5FA50112BB5A78340ATYZPR01MB5836apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








amily: "Aptos Narrow", Aptos_EmbeddedFont, Aptos_MSFontService, s=

ans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Hi, 



amily: "Aptos Narrow", Aptos_EmbeddedFont, Aptos_MSFontService, s=

ans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

I=92m still waiting for your reply,    



amily: "Aptos Narrow", Aptos_EmbeddedFont, Aptos_MSFontService, s=

ans-serif; font-size: 12pt;" class=3D"elementToProof">

Please let me know
style=3D"color: rgb(200, 38, 19);">if you are interested in my SEO serv=

ices.



amily: "Aptos Narrow", Aptos_EmbeddedFont, Aptos_MSFontService, s=

ans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Thank you!



amily: "Aptos Narrow", Aptos_EmbeddedFont, Aptos_MSFontService, s=

ans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Isabella.








--_000_TYZPR01MB5836E2B96FB5FA50112BB5A78340ATYZPR01MB5836apcp_--

Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 02 Jul 2025 08:43:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uWyfn-000000005cC-3yBR

for dave@doctor.nl2k.ab.ca;

Wed, 02 Jul 2025 08:42:55 -0600

Resent-From: The Doctor

Resent-Date: Wed, 2 Jul 2025 08:42:55 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f195.google.com ([209.85.214.195]:43413)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uWxyJ-000000001cw-0sZm

for sales@nk.ca;

Wed, 02 Jul 2025 07:58:01 -0600

Received: by mail-pl1-f195.google.com with SMTP id d9443c01a7336-2366e5e4dbaso65280315ad.1

for ; Wed, 02 Jul 2025 06:57:09 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1751464623; x=1752069423; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=oG0o3zDoF4MOMEXvkx7BG98enZc0ZLbuZIzdjU9L11Q=;

b=A6OZVt4hnWXawanVpeROXaHiME/4ua94Jzf15OFuzjzaZyOH2eo/RGOVRS55VHGaRr

X9uz0tLQ2CASUsx/2yeqlDzOLEVUWsP6G1euzLNGRpK+ddnJElk6Jwp4b43pYGs9WOkd

PRrq+/hUeVz05abvNabFXRqiLIceBZJAFXv7JrZUeunTWdxxrmAy+7iW7j46HyL1kEYL

O6RaQI1r/eKL2bzjHfQ2We761rDRcQSMNsL8fa+neRLNGKc6l5ApZvHNspI92ht1lVQp

iBhxL9lTAPzMTUW3L3jv8vA9gtf9+8kF14q2S0jIFMdKX3t49AQI13+Hy8ckFgAFu3WN

nqyA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1751464623; x=1752069423;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=oG0o3zDoF4MOMEXvkx7BG98enZc0ZLbuZIzdjU9L11Q=;

b=Ga37w1VmT3NdwtYIiAs62iEyYVbDDf8Bo9LsuzxNqFxlmfbeDiDkb48KGpvLrXBRNi

yKLS67ylbyA7FLyLJRjWYQGM5fp0oFsNuclPIjZMlP3NB+7BVFp93x7fqY5zrOPU18lx

a/7/RpIYPsSvMrnNT2xAhtAatXaoSkrHCGjZRUlBUt+niNqbTt0F0IlCBAp8x15rpg04

BU5oX0eT16IbLH16uPtq0x99qC3LlSJgbA783LWbsJtoSt+kGMAwveyf+4CezrT1nWFC

64QJXKSyHYpTI+Gpygc4xENYCI2TYgm0GbQsR4/AUkmRRGTxKWcoj8QXeyjQyOu4enGc

DjXQ==

X-Gm-Message-State: AOJu0YxxNq9cA7efmyxQ3rrUfNkAuPjHzl0z0716cw8XsaRuWgOVHB7I

zXjdQTfYkn0mSdD6j/doJT8KGyEVEOn9jKzXGj0cus+ntyrY1p9D6z/+WzZHTR+e

X-Gm-Gg: ASbGnctdPCeLEAeBfxMJLt0UEdISjahznrdl6qpcOWistVuAchwy7FC1E/t6Ccb9GyI

e5HTGehtI3Baix6iCtoptLtfxaBWoF2jlzkKbUD5roYo+2VZYPAl3se2gn+IYN3BuiF+edScd2K

okPGqppT4zJxKHbyFVzEY4X9jwpoy0VAPWi9fOrXGkkSVCrY+cF/BNzKp5D08SChBXlNrRYGa1R

zlSgClQDPho0xLDsQ6Ee1kzffIHNhG5rLEnnaECwNEtiaI7JpYYuoafvU32iOdVdQIUE+33ei/W

muGbb78Qpuavds5mbArDnW9DXhEcfkpdzIbRjVdWm+P71gtFBFYROP7sqAMwE+AFCoGDHha9pzE

JLwr96WGc

X-Google-Smtp-Source: AGHT+IE7gmhll04gVT/SxQBClOYC8M4RGaZdJJtPNV5nedg77chn9XvWHrigAZzR/vxJ4paQcezyvQ==

X-Received: by 2002:a17:903:234e:b0:23c:6d5e:db4e with SMTP id d9443c01a7336-23c6e796193mr44351735ad.8.1751464623223;

Wed, 02 Jul 2025 06:57:03 -0700 (PDT)

Received: from RahulKumar ([2401:4900:a014:9f42:d0e5:1186:f296:7234])

by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-b34e31c28ebsm13024099a12.37.2025.07.02.06.57.01

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Wed, 02 Jul 2025 06:57:02 -0700 (PDT)

From: "Kimberly"

To:

Subject: RE Agency Proposal and Pricing ....

Date: Wed, 2 Jul 2025 19:26:26 +0530

Message-ID: <04dd01dbeb59$30b92ba0$922b82e0$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_04DE_01DBEB87.4A7167A0"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdvrVkXVKt8DkJzRQ0GPTPqDtDVjgQ==

Content-Language: en-in

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Looking to outsource parts of your digital services? We

support agencies with reliable, white-label solutions built to scale. Our

core services:



Content analysis details: (5.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.195 listed in dnsbl.ahbl.org]

[209.85.214.195 listed in dnsbl.ahbl.org]

[209.85.214.195 listed in dnsbl.ahbl.org]

[209.85.214.195 listed in dnsbl.ahbl.org]

[2401:4900:a014:9f42:d0e5:1186:f296:7234 listed]

[in dnsbl.ahbl.org]

[2401:4900:a014:9f42:d0e5:1186:f296:7234 listed]

[in dnsbl.ahbl.org]

[2401:4900:a014:9f42:d0e5:1186:f296:7234 listed]

[in dnsbl.ahbl.org]

[2401:4900:a014:9f42:d0e5:1186:f296:7234 listed]

[in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.195 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.195 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2401:4900:a014:9f42:d0e5:1186:f296:7234 listed]

[in will-spam-for-food.eu.org]

[2401:4900:a014:9f42:d0e5:1186:f296:7234 listed]

[in will-spam-for-food.eu.org]

[2401:4900:a014:9f42:d0e5:1186:f296:7234 listed]

[in will-spam-for-food.eu.org]

[2401:4900:a014:9f42:d0e5:1186:f296:7234 listed]

[in will-spam-for-food.eu.org]

[2401:4900:a014:9f42:d0e5:1186:f296:7234 listed]

[in will-spam-for-food.eu.org]

[2401:4900:a014:9f42:d0e5:1186:f296:7234 listed]

[in will-spam-for-food.eu.org]

[2401:4900:a014:9f42:d0e5:1186:f296:7234 listed]

[in will-spam-for-food.eu.org]

[2401:4900:a014:9f42:d0e5:1186:f296:7234 listed]

[in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.195 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[kimberlyjulianna803(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[kimberlyjulianna803(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.195 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} RE Agency Proposal and Pricing ....



This is a multipart message in MIME format.



------=_NextPart_000_04DE_01DBEB87.4A7167A0

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,







Looking to outsource parts of your digital services? We support agencies

with reliable, white-label solutions built to scale.







Our core services:



. Google & Meta Ads



. SEO & Link Building



. Content Creation (Websites, Blogs)



. WordPress & App Development







Let me know if you'd like a look at our pricing.







Best,



Kimberly





------=_NextPart_000_04DE_01DBEB87.4A7167A0

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">






charset=3Dus-ascii">



















Hi,





 





Looking to =

outsource parts

of your digital services
style=3D'color:#4BACC6'>? We

support agencies with reliable,
style=3D'color:#4BACC6'>white-label

solutions built to scale.





 





Our core services:






style=3D'margin-left:25.1pt;text-indent:-18.0pt;mso-list:

l0 level1 lfo1'>
color:blue'>·
style=3D'font:7.0pt "Times New =

Roman"'>       

Google =

& Meta

Ads






style=3D'margin-left:25.1pt;text-indent:-18.0pt;mso-list:

l0 level1 lfo1'>
color:blue'>·
style=3D'font:7.0pt "Times New =

Roman"'>       

SEO & =

Link

Building






style=3D'margin-left:25.1pt;text-indent:-18.0pt;mso-list:

l0 level1 lfo1'>
color:blue'>·
style=3D'font:7.0pt "Times New =

Roman"'>       

Content =

Creation

(Websites, Blogs)






style=3D'margin-left:25.1pt;text-indent:-18.0pt;mso-list:

l0 level1 lfo1'>
color:blue'>·
style=3D'font:7.0pt "Times New =

Roman"'>       

WordPress =

& App

Development





 






style=3D'background:yellow;mso-highlight:yellow'>Let

me know if you'd like a look at our pricing.





 





Best,





Kimberly

















------=_NextPart_000_04DE_01DBEB87.4A7167A0--

Web/SEO/App spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 02 Jul 2025 06:55:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uWwyp-00000000Ltz-0GJF

for dave@doctor.nl2k.ab.ca;

Wed, 02 Jul 2025 06:54:27 -0600

Resent-From: The Doctor

Resent-Date: Wed, 2 Jul 2025 06:54:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013076.outbound.protection.outlook.com ([52.103.43.76]:1889 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uWuQ0-000000000m1-2U93

for doctor@doctor.nl2k.ab.ca;

Wed, 02 Jul 2025 04:10:25 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=aGzRlTyIkD4G1B2gn2QIVeLEvPNUxSvZd74CdZgbcR14c+hjaNLIoDFS14HSLxhQcbyHSktWaqNE7Pjk//2dnIZHUq4RH8kIpOddBk3FNujkBHoiIXOIA994Undg2PZajtu5bQign22rzHdnqIFdUa9/K6Ry2h6wFKKqtP98YykJfq2KLWg+ZfitweO+Ad+x4a7B7FydRTiNdBXUE6I2Ex02wjhNu23MJs542mrJTIt5XDwFkDdI2wNYceQB/RAtw6BLDpnF127GUR90nrc/KvZ+Hck07uSdBScjxq8hdX1om+PEUmaHjbn47CMbAiUnhTp+M93JjUq/0VZsS030mw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=cyt8ElljqvejwElJS6tGwNJBBgEyDHzKQVQGx3jhH5A=;

b=kz5ucmhdV7MuN/m4Gw49iH4EeFmAk1Xc8cA1TA3nXcttcax4KmimenubCNewWzW6TM/SH29rBlc5flN81m9W7zTSmhVjkHtxEjzaJXnTBBlZrTUCX1/Enmx2lTcwbNP47a0K+F6171WQUNaM5c3EqTNQEqcE6KmOiZm4LZ7tvkFqkvxmI3qhWSUmykJYc1j/9esSPgA4roUmt6MIPcVl3fAgwkeG5xk6ULtsi4F30JSLWhQHu66gIXLj+qfweObhDmY/8xgZ5E3E4DEIjEdhCOu8iBKI18PzpY8DqrLIhGomE9re+Z0SJi7HUWnlrR2M7h043VZ9+hvOz47P12tiEQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=cyt8ElljqvejwElJS6tGwNJBBgEyDHzKQVQGx3jhH5A=;

b=gNkSjWD8MVbvxdjTvdY77FQ/OkfJHDoy9/7DZl4aI6O4eRsJT4T4c3ZseSREX00KtULcLBhXnstBfwjaKjrUTTMxjxbUuZ7LTcS2yPT+5NcILBQLIue769tt/Ry1dtdCA2jFfcPfbLy1iFwYTqZPtttmIz6lBuOO96CAYeFmdvwW124riN3kz+mMo98DQtPYDhIp+qbmw/C4Q7CPMWOeL4Gf9MtDw14OS2RV9gw/6ARwTnP9WAQcc/B4L68BXNvH6Ry+Tqmsk0IAvA1zfZNyncP63Yz21bmxzzJUhMw7RZtFx/O/hVBl/ItB+mGN/HGTadFMheY7JBnL2EGBU1Gp1Q==

Received: from TYZPR01MB5836.apcprd01.prod.exchangelabs.com

(2603:1096:405:1d::14) by SEZPR01MB7316.apcprd01.prod.exchangelabs.com

(2603:1096:101:2a5::7) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8880.31; Wed, 2 Jul

2025 10:08:34 +0000

Received: from TYZPR01MB5836.apcprd01.prod.exchangelabs.com

([fe80::32a6:b1f7:6647:837]) by TYZPR01MB5836.apcprd01.prod.exchangelabs.com

([fe80::32a6:b1f7:6647:837%5]) with mapi id 15.20.8901.018; Wed, 2 Jul 2025

10:08:34 +0000

From: Isabella Herry

Subject: SEO Packages

Thread-Topic: SEO Packages

Thread-Index: AQHb6zksX95J5AzuQUONnQV3Qg6yyA==

Date: Wed, 2 Jul 2025 10:08:33 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYZPR01MB5836:EE_|SEZPR01MB7316:EE_

x-ms-office365-filtering-correlation-id: 97d4f4a5-c622-4e22-09f7-08ddb950675d

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|461199028|8060799009|8062599006|7071999006|15080799009|19110799006|15030799003|41105399003|39105399003|40105399003|39145399003|13041999003|440099028|3412199025|51005399003|102099032;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?kfm48R3NdsbW7lNr4UwY+cFN68yjHnTjRDezyv8EqWNvvDqInM6KeHQt?=

=?Windows-1252?Q?PGoBODl1OlptZ7p4kGvS9YfYUDdgtmM7AYEuCOncKvxLdWZHoUfe/7la?=

=?Windows-1252?Q?yKtJdGgTIoIqjoZ0qvHJhaxuUbEl9rXECFxnjrrN3RpuCKNFcJuTjlo4?=

=?Windows-1252?Q?wpXYYrmpwEhf4GFpBIpYl8OnMSLpcwPH59wUaz+mq0o+TKARCuQIBplU?=

=?Windows-1252?Q?dLmbWV4VA6AR9Bdf3+/M9P+ZDkFb9mxHJ0B6qp3INnziHxsFhkc/f7i/?=

=?Windows-1252?Q?LKbWyDwUau2KmgXRZGEi4XCgQ25o9e9E6AHB1PC/MecykuEIAoFx9sBt?=

=?Windows-1252?Q?flkfDfnOHVRmE7ajY7UiaeODTkooOsD8zHWv+jSm+zqm2UmucZpCZo0X?=

=?Windows-1252?Q?gCsMOa3KHFEPHmnJrjIUFfa7a1mpR0Ho6O+5mM1MG8Wv/fl2NAUQ12ou?=

=?Windows-1252?Q?nSd1q/OiL29E/wc4Sy3BdSb4JwNOVecRHgya6CFWka+fIjeRIjq44b60?=

=?Windows-1252?Q?jlxGej8FaZtVIt4HM/8h++6POgbuJ9TtlJBY8Ghm6iZsNu4HBEXBY64f?=

=?Windows-1252?Q?Lq+YVznlmeAKAe9Y/kmP0dZj/+1W3sm9XsosHcUwptkLj3ISsjXXYrX7?=

=?Windows-1252?Q?IemiFa14w+J7ZWzvol23TgCxxfQ0Ohkc+GVpqnjYOXuwtpsSAbqRpu/w?=

=?Windows-1252?Q?qhntdAjc/+zaKRU5Z9OBXupJ81olXV+IThc7n8X6jKtniPkBcDMcVmmL?=

=?Windows-1252?Q?SezhnmxQj5Ka1MjLLbJKpa2CgNKkQH06FKnuRoiwslS6lwRsuyoxatF0?=

=?Windows-1252?Q?dTTcrn/i3ehqCd2W0ghNuUZ8NHVFG88dVFLNqLlfE001EhpKHGtkT/v3?=

=?Windows-1252?Q?3c7XTGj5/Zz99l0t8fmC7d88SX6KgH2wfKZCY2qVuxAaI36Bx1BDrEyq?=

=?Windows-1252?Q?yN9/aZKJdlFGZhGXO/E/6TinP9O+ByW7qLpNiLfCW0iSrqOub1UImG39?=

=?Windows-1252?Q?0b5bKcm8KnlPoS+qURCriFnMmb1F62eteUcCS/4NGVVZ0L6ZpczrvowM?=

=?Windows-1252?Q?/AALnZJs7M8zjUPCWl/Xia6N2SaMm5zKivbTOeQrbMJM7yGW1juDi9es?=

=?Windows-1252?Q?Ku1PmRBjqsNJUSnM4fxtOsVMehgI2cjdLVUKTY3Tog/OYr40okTWLmXx?=

=?Windows-1252?Q?2P4SrvA00HE8DMEcq/++aV+IuI/CHA8ytNcqxQo+SDMy2LaskUbLB3T0?=

=?Windows-1252?Q?b9mQe4fDUBCthfD/4WajWbQh78finEWjyIyM0+QCVWLjQ2zT0IVVer6F?=

=?Windows-1252?Q?dLf4eaUgb2/EfRyV9EyYdt2Oh5Wln82qcoXCxhIfGCKN+AozXH8onaaI?=

=?Windows-1252?Q?T6wzSmRw9k64M8kCYwejN8sBmSGDk9Iui0DLNSEOlk8jnX3O4+T6FR4c?=

=?Windows-1252?Q?1qWo1qJ+o2aUkWi7zW0Quw=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?AGcilfeJIQb3bfBbGSpunUMAXN40fST92ahAAKkjBnAWFGje8I/21RK/?=

=?Windows-1252?Q?JsyY+AleHF4qaNWikxmjS2TEmaUuCihHHwUtmVDIxt2ZBYihchYWpDCk?=

=?Windows-1252?Q?IO9XOgM8wGmr3RIrT22UzyigK2Ls+UJvwlrz/1BBWPSP7h1gnPhLCnpk?=

=?Windows-1252?Q?ze81bcsK0kAMPPyV+ocCS0pI+p7QrTgR9+cAAJu7gGnBtkP6Y5+6Poid?=

=?Windows-1252?Q?tnjfxxpzXdZr2J5NZKE1cOqoRWq/KOV6EprXnkvVdGHRnMB6UjscjCgM?=

=?Windows-1252?Q?6ccwPtl2hDaH8/ZXs/X934UshNDA1w7ouOnt/0Hg0pMeGWjvmNAxQtdn?=

=?Windows-1252?Q?M/V7wKpYw0ZPBDwEwjpbLN+h75NPYxM7vx1nqagbOr6SaR0FNJpdWelq?=

=?Windows-1252?Q?ym7q+SSXdGtMl5jWbL+ZvxByDbtRi0bKQotFTIceR3Lfn9I/L1z5Es92?=

=?Windows-1252?Q?RVk7WmRcGYcPCkv+Y7vRQHOAXEALD/WAFKP6ehQm9/nDRx3iJgIE1W+R?=

=?Windows-1252?Q?lD5PfyVch4nGzhzrkdoPn+Ad0Hl7r37fVmZQGwO2tOgbyV1wH7Nx83mY?=

=?Windows-1252?Q?YGCeuimIzValM26GP6GX8E7DtsFSVQQStLJHuvfOlHv3NQGvhnpPrlXD?=

=?Windows-1252?Q?l8Aftq3aaP6MAw/9v9VtbSRU4Bj6LITu74qsn5/B0DfqmG7+LJ3I2nYL?=

=?Windows-1252?Q?nhGIdya5RPn7/450XkCx1AlnUU/SGIvVcGJrdk7VPE3AeCKAC5Rb9Yxh?=

=?Windows-1252?Q?9l0+QeSNs3eW1XRFVIG4GGcrtUQo2BTRwy9NCzc0j3AIlSu9aTTAqWiW?=

=?Windows-1252?Q?55qJC5pYMxzX5F2uMnkhIAoy1iOh2BULBvLr0nAhKxELs0YFBN426Yro?=

=?Windows-1252?Q?3jJfc0btqLGQQ12oYGmVblqqdifyIbogZL7GcxiKDEUEV5m9coDENr0q?=

=?Windows-1252?Q?G+MRVmicJkkcS5rNf5J9fW7OSjHlWxLS8Lgbsk0Usu3gT7fInybgRieA?=

=?Windows-1252?Q?0qHsiQSjWxBiq7TuvtsOGetdXTemq93KTVizvzxKlUgDgKy2cbr/IbBd?=

=?Windows-1252?Q?j7U0e0/Xq/W8ePjQ0174USXlwMU+9eOLW/Ur6hy/2arCh+xZo5WnK86G?=

=?Windows-1252?Q?WMl7VDPoMtzC+50Y4reH+Z7+lm3J9N0cEgoZq8/67ZTLtY6BqClBDTU7?=

=?Windows-1252?Q?JrlwGv0LFgWKuQ8XsoKBAqashshGo6zAElQnZk22QhgGKIp5EkzPKq82?=

=?Windows-1252?Q?8QwCBkrOAQGON4oUeS+Uz5W/CfdPWZkk15YzVRSx5UMiq5UKIKzfC48B?=

=?Windows-1252?Q?tgcnizqXoBYyszaK3f5a05N+kDG2P+9T3n5BXm9Galjba301?=

Content-Type: multipart/alternative;

boundary="_000_TYZPR01MB5836E2B96FB5FA50112BB5A78340ATYZPR01MB5836apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYZPR01MB5836.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 97d4f4a5-c622-4e22-09f7-08ddb950675d

X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Jul 2025 10:08:33.8783

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR01MB7316

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I’m still waiting for your reply, Please let me know

if you are interested in my SEO services. Thank you! Isabella. Hi, I’m

still waiting for your reply,



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.43.76 listed in dnsbl.ahbl.org]

[52.103.43.76 listed in dnsbl.ahbl.org]

[52.103.43.76 listed in dnsbl.ahbl.org]

[52.103.43.76 listed in dnsbl.ahbl.org]

[2603:1096:405:1d:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:405:1d:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:405:1d:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:1096:405:1d:0:0:0:14 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.43.76 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.43.76 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.43.76 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.43.76 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:405:1d:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:1d:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:1d:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:1d:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:1d:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:1d:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:1d:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:1d:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[52.103.43.76 listed in will-spam-for-food.eu.org]

[52.103.43.76 listed in will-spam-for-food.eu.org]

[52.103.43.76 listed in will-spam-for-food.eu.org]

[52.103.43.76 listed in will-spam-for-food.eu.org]

[52.103.43.76 listed in will-spam-for-food.eu.org]

[52.103.43.76 listed in will-spam-for-food.eu.org]

[52.103.43.76 listed in will-spam-for-food.eu.org]

[52.103.43.76 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.43.76 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.43.76 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[isabella754herry(at)outlook.com]

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} SEO Packages



--_000_TYZPR01MB5836E2B96FB5FA50112BB5A78340ATYZPR01MB5836apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,

I=92m still waiting for your reply,

Please let me know if you are interested in my SEO services.

Thank you!

Isabella.



--_000_TYZPR01MB5836E2B96FB5FA50112BB5A78340ATYZPR01MB5836apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








amily: "Aptos Narrow", Aptos_EmbeddedFont, Aptos_MSFontService, s=

ans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Hi, 



amily: "Aptos Narrow", Aptos_EmbeddedFont, Aptos_MSFontService, s=

ans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

I=92m still waiting for your reply,    



amily: "Aptos Narrow", Aptos_EmbeddedFont, Aptos_MSFontService, s=

ans-serif; font-size: 12pt;" class=3D"elementToProof">

Please let me know
style=3D"color: rgb(200, 38, 19);">if you are interested in my SEO serv=

ices.



amily: "Aptos Narrow", Aptos_EmbeddedFont, Aptos_MSFontService, s=

ans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Thank you!



amily: "Aptos Narrow", Aptos_EmbeddedFont, Aptos_MSFontService, s=

ans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Isabella.








--_000_TYZPR01MB5836E2B96FB5FA50112BB5A78340ATYZPR01MB5836apcp_--