Oral-B Health Kit Phish from Microsoft

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 14 Oct 2025 13:07:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1v8kLz-00000000MxX-0bhS

for dave@doctor.nl2k.ab.ca;

Tue, 14 Oct 2025 13:06:35 -0600

Resent-From: The Doctor

Resent-Date: Tue, 14 Oct 2025 13:06:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-northcentralusazhn15013047.outbound.protection.outlook.com ([52.102.146.47]:11003 helo=CH4PR04CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

id 1v8idX-00000000ETx-2yTv

for doctor@doctor.nl2k.ab.ca;

Tue, 14 Oct 2025 11:16:44 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=siP4/Vca+ru1KafPFiptkSoMRCMrD12fhSlUDsjchPDng9nS8RMNfGqhaFvdfwuRWD8NxRslrWpefRGH3zXiE+iNVz88XTAH9z3eU3VUCAlz8BqihpRdf0iDWjhIHdd3ey3Ltse9BmESarnbx8LxP6gWgcbgmz6nxYlC/T82K9eoUjIPD4UJdQDaUcGYYHXGKwoP4rwKzdXU9rOMrJ0JkY9qRYdDqa7MZwUxb4FY8s6sE8Z2rvR+s3JnlM/W/S/H5P3jNIVN+TSudjZZIvJU3Xm7zl9gqaSRlRBOHWdc618Rs1yYnbPWNCC51YDJ/Vp6Q+w/VH37dsaKtsksoEdkyg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=RmNIQh6AZf+WPHgW3TCtaYiui712kmIDD2oOusJHpD8=;

b=jYaad0NPlOiIVNlB1h2CKjMVZssCj9+vjcKLZ1cO63l9dBdKNyzj9PipFnEkb8G+8z8YGr/U19L+3PqghjAutgCF0+3BsxxLJQA1ngddri9q/k2jKKe2y/yfsmi5fjIseYIy8mKa5E29wiKME9PtvSlJOOKliyuCfKfi1eqMxLlagSbIotmbX235BTVtVC8bu0HeOdAf4fGM/R7nAW25AxBkKPuJjC6HrwOxSP1VJ6oksfeBbDuxXDwqRFF5pHRbsWnyzbhsXt9Mpqpi6blmjWEkHvGcVnlCoX4grlKSWn0EyJiZNpw/QjNQGQdrnAoakL7DBwXU1zRhGon1An1hVA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=softfail (sender ip

is 103.6.170.98) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.helo=bekn9.russanassa.ru.com; dmarc=none action=none

header.from=bekn9.russanassa.ru.com; dkim=none (message not signed); arc=none

(0)

Received: from DM6PR03CA0010.namprd03.prod.outlook.com (2603:10b6:5:40::23) by

SA0PR10MB6426.namprd10.prod.outlook.com (2603:10b6:806:2c0::5) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.9228.9; Tue, 14 Oct 2025 17:15:41 +0000

Received: from DS3PEPF000099E1.namprd04.prod.outlook.com

(2603:10b6:5:40:cafe::15) by DM6PR03CA0010.outlook.office365.com

(2603:10b6:5:40::23) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.20.9203.13 via Frontend Transport; Tue,

14 Oct 2025 17:15:34 +0000

X-MS-Exchange-Authentication-Results: spf=softfail (sender IP is 103.6.170.98)

smtp.helo=bekn9.russanassa.ru.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=bekn9.russanassa.ru.com;

Received-SPF: SoftFail (protection.outlook.com: domain of transitioning

bekn9.russanassa.ru.com discourages use of 103.6.170.98 as permitted sender)

Received: from bekn9.russanassa.ru.com (103.6.170.98) by

DS3PEPF000099E1.mail.protection.outlook.com (10.167.17.196) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.9228.7 via Frontend Transport; Tue, 14 Oct 2025 17:15:35 +0000

Subject: Claim Your Exclusive Oral-B Dental Kit

Content-Type: multipart/alternative; boundary="32137274714=hjrodasilqdmfxblhebrck"

Date: Tue, 14 Oct 2025 19:12:41 +0200

Precedence: bulk

From: Your Free Oral-B Kit Awaits You

To: doctor@doctor.nl2k.ab.ca

Message-ID:

<99503ad1-2529-4fa6-8a36-3d4a5a4da0c9@DS3PEPF000099E1.namprd04.prod.outlook.com>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DS3PEPF000099E1:EE_|SA0PR10MB6426:EE_

MIME-Version: 1.0

X-MS-Office365-Filtering-Correlation-Id: 057e72b2-fe16-407a-727b-08de0b454a0b

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|376014|586017|34020700016|35950700016|61400799027|69100299015|82310400026|1032899013|2066899003|4076899003|8096899003|15920700032;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?QWtqSmtPOXA2M0JIbmJublcwazRKQk5Wb3JINndGd3JVNmZmMGR1Zy9qK2g4?=

=?utf-8?B?YWFmd29PWGNjS1dZTEc1N1NNb3JGSHYzd3NRa0xoVkVrSXd0Y0RaOHlqTzFB?=

=?utf-8?B?TjJKYkdwNWxSdm1rek1IWHh0RCtrSXAwSDFBUlZGMEFPZTNkcklQd1VtQURF?=

=?utf-8?B?elhxOEk1eU0yNW51QWRsNXkvck5SYXFyRi9mMEJnNm93ZE9qajYvZllDZlNI?=

=?utf-8?B?M0pYRGpQbVl3RllHSFRGQktQS045WVlST09pWFBDSmtYSmRBazlFUVNKcUFi?=

=?utf-8?B?bXM0UW1PUnFzMlNSam1EZVZ1cngrUmF4akNwSndDOG1wOFhUeFNKWmNnK3JE?=

=?utf-8?B?OHM0b0dEVG5YSUovK0FGTmxuRm15TzliSnFrdkxuN3NTYitveEZXUWQ3UHhz?=

=?utf-8?B?TzZyeVN0SUs4SUJXeGY1ZmE4b1Z3M1hiWm05Wmo4WUFHWEsxUGVLMURiYThx?=

=?utf-8?B?Q1BTZWNaTG90YS8yaUlSRmk1NlNNNm90VzVJb3ZJRXRkTXhHMnREbDU2VnFa?=

=?utf-8?B?dXBzMFBHTFRKck1ub08wTUFDeU4xd3JxUXZrL28ySm5na0ZFTEZRL0RBbEVj?=

=?utf-8?B?aStLM2pISmR3NEk1Zys4SzJBcGJIUDN1WEkwNXg2YURGcXpxdTRwbVIvR0Y2?=

=?utf-8?B?TTNWUGU2RTBKSWl3V3ZyS29DQSs1S215MWlrY0xjTitCM3prL1g2S01zU2hR?=

=?utf-8?B?R3c5cGJCMi9JVWtvdVkvUXlPcUpuNC9EUGpjblJ5dEJ1czJETHZiSnhsZk5R?=

=?utf-8?B?SWEvN3RtdDZkdHJWUmdwTHFDK0VNZENjU2IzUks2SWkwTnp3MWx3TmdEbkxz?=

=?utf-8?B?MFYxV0JrUHA5NXZQRXY2c2crQm9pbDhaemVoM3RRRjYwZHZzeVlQU3ZTYi9T?=

=?utf-8?B?RjF4MEhzZW9UT2xxL21wT1ExOXJLVEd4dHNxdWlCTjYzakNyUVpWMXc0RDBP?=

=?utf-8?B?dFhOVWQvV253eUN0cHdPQUFsSmV3WXRhditGWE1ORzQvTHQ0ekxhS0EwOVE4?=

=?utf-8?B?ZDhkL0h2YWpydW5zK1Vkd0x5dy9DbTUrMHhFdmRZVE9wZHZvS3VTeURaZmR2?=

=?utf-8?B?cktHODgvMGgyd3grRU41bWk5ZU1lTk16VzlyRmpJdEFIZktFTm5ZcHlsbjVM?=

=?utf-8?B?QlFaWjFJNTRTUEVpTC8zb0ozZU1nNUdaeWQvZ1lDUUFYYVNDYVRVOEswMWFB?=

=?utf-8?B?empLZmdDbmNjT25IZldhdXRucFRYSHlXTFBZNlV4Qm42YkVVMEwzNUo5NnRp?=

=?utf-8?B?R1NKTHJPQTBGM21uTHplczNHMmxHUGdNNytlRXFmS3FHWVFrVDNtV3luMzJ1?=

=?utf-8?B?YmozRDZqeGtiMWVzdEptdzc1Um9aSEZ3QnR0WEZSMnZ2dEs5ZjJXMkxwaEI1?=

=?utf-8?B?QSt3TWhFNjVKdlVIZ3M5TmlTc3Zab09HcExyelliSXFJbHRJcTJpb2ZOSnFN?=

=?utf-8?B?VUJNd3JVV2l4bnhKWGs1aE9vd2JIR01TUXFCWXdmeGhkNVdrMzNiV1pkRDFk?=

=?utf-8?B?NDdWNTF0QnBnOWMydmV3QjdjcVZjRDhQTlQ3bmVHUXJtYmp0N1JtNjE2MXpU?=

=?utf-8?B?NUZoNGhIeER1UUU5YkZXSk1oRnFmemxxOUNUeS9GSEduUC91eVFJdmtxdTNK?=

=?utf-8?B?a3I1WlBSSjVnTU1UYnRvMnRLcjNSM0lHb3ErVnJTc0FQMVRNYWJoUmlvRFBN?=

=?utf-8?B?SmRHamhMK1lZT3g3cDYyNnVhUFlhTXZhdFRHWkNrUXdVT201bExvU1NEdTFz?=

=?utf-8?B?bzE4S0dYbHdVdjlCRE83Tk5lZVByc2h3Q29Rb1FOVHQwNEVwbktaYmV4b0Vx?=

=?utf-8?B?RDB1RVJlbkJlTWlWaXI2WllVTEpxRWNnYnZybjdTU1hOcnV5N3lGQWdsZXZj?=

=?utf-8?B?UFdCNlpEd1EwbFNmb0MvYnNvUEtyMmlNWHNxZGZhNE02YmRtRmlEYklaWUpu?=

=?utf-8?Q?AzaS9rugG0I=3D?=

X-Forefront-Antispam-Report:

CIP:103.6.170.98;CTRY:AU;LANG:en;SCL:1;SRV:;IPV:CAL;SFV:NSPM;H:bekn9.russanassa.ru.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(376014)(586017)(34020700016)(35950700016)(61400799027)(69100299015)(82310400026)(1032899013)(2066899003)(4076899003)(8096899003)(15920700032);DIR:OUT;SFP:1501;

X-OriginatorOrg: bekn9.russanassa.ru.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Oct 2025 17:15:35.0892

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 057e72b2-fe16-407a-727b-08de0b454a0b

X-MS-Exchange-CrossTenant-Id: 625cc1fe-159b-4766-aa76-6630e1138e81

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=625cc1fe-159b-4766-aa76-6630e1138e81;Ip=[103.6.170.98];Helo=[bekn9.russanassa.ru.com]

X-MS-Exchange-CrossTenant-AuthSource:

DS3PEPF000099E1.namprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA0PR10MB6426

X-Spam_score: 17.0

X-Spam_score_int: 170

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: March 21, 2017 Dear Students, Faculty and Managerial Staff,

AUB is in the final stages of implementing a robust online learning platform

that offers a suite of on-demand courses appropriate for highe [...]



Content analysis details: (17.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.6.170.98 listed in will-spam-for-food.eu.org]

[103.6.170.98 listed in will-spam-for-food.eu.org]

[103.6.170.98 listed in will-spam-for-food.eu.org]

[103.6.170.98 listed in will-spam-for-food.eu.org]

[103.6.170.98 listed in will-spam-for-food.eu.org]

[103.6.170.98 listed in will-spam-for-food.eu.org]

[103.6.170.98 listed in will-spam-for-food.eu.org]

[103.6.170.98 listed in will-spam-for-food.eu.org]

[2603:10b6:5:40:cafe:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:40:cafe:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:40:cafe:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:40:cafe:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:40:cafe:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:40:cafe:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:40:cafe:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:40:cafe:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:40:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:40:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:40:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:40:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:40:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:40:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:40:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:5:40:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[52.102.146.47 listed in will-spam-for-food.eu.org]

[52.102.146.47 listed in will-spam-for-food.eu.org]

[52.102.146.47 listed in will-spam-for-food.eu.org]

[52.102.146.47 listed in will-spam-for-food.eu.org]

[52.102.146.47 listed in will-spam-for-food.eu.org]

[52.102.146.47 listed in will-spam-for-food.eu.org]

[52.102.146.47 listed in will-spam-for-food.eu.org]

[52.102.146.47 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.6.170.98 listed in dnsbl.ahbl.org]

[103.6.170.98 listed in dnsbl.ahbl.org]

[103.6.170.98 listed in dnsbl.ahbl.org]

[103.6.170.98 listed in dnsbl.ahbl.org]

[52.102.146.47 listed in dnsbl.ahbl.org]

[52.102.146.47 listed in dnsbl.ahbl.org]

[52.102.146.47 listed in dnsbl.ahbl.org]

[52.102.146.47 listed in dnsbl.ahbl.org]

[2603:10b6:5:40:cafe:0:0:15 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:40:cafe:0:0:15 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:40:cafe:0:0:15 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:40:cafe:0:0:15 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:40:0:0:0:23 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:40:0:0:0:23 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:40:0:0:0:23 listed in]

[dnsbl.ahbl.org]

[2603:10b6:5:40:0:0:0:23 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.6.170.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.6.170.98 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.6.170.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.6.170.98 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.102.146.47 listed in list.dnswl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.102.146.47 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.0 FORGED_SPF_HELO No description available.

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

2.0 VOWEL_URI_6 URI hostname with 6 consecutive vowels

2.0 MIXED_HREF_CASE Has href in mixed case

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} Claim Your Exclusive Oral-B Dental Kit



--32137274714=hjrodasilqdmfxblhebrck

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 7bit






























--32137274714=hjrodasilqdmfxblhebrck--

Who's Who spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 14 Oct 2025 13:06:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1v8kKS-00000000Mnf-3QFo

for dave@doctor.nl2k.ab.ca;

Tue, 14 Oct 2025 13:05:00 -0600

Resent-From: The Doctor

Resent-Date: Tue, 14 Oct 2025 13:05:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f69.google.com ([209.85.217.69]:47418)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1v8h1e-000000006mZ-43cm

for sales@nk.ca;

Tue, 14 Oct 2025 09:33:30 -0600

Received: by mail-vs1-f69.google.com with SMTP id ada2fe7eead31-58401ea0738so14041717137.3

for ; Tue, 14 Oct 2025 08:32:36 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=wcbrb.com; s=google; t=1760455950; x=1761060750; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=ypmbLwD6gLFdsrF4Sq1VT+Icz0SDgDh1y8xEk8jnqIY=;

b=FndFsmrwS8S2lw5y5a4bbLzeVT2CmX99rLL6QwXp94ic18IURmhRLEbZDEEZSnm3qm

0I+Ro4GVHlQ6vZwbP1x0JQYTPKAZWvKb4hMEaHoQVJDxptbg0jhuLFKGQeHh0xrVt3iP

asseaYfEZma7KrWR/Dx4UDEPe9QCOXky3Lx6hWkpp3hqKIVoGZLN1USdd26tvCpJBtok

CauR0fl3rteamf+jpn4FJYVO1rI9swIVyKqcfV3SDtCc5d2ZNTshfF+XqetUlpiuoTAt

zadI4n2VFJjnrpQcHEon3siYR6BNOZHqUfshGV3Jdb+Pohq2oVUaFljzCU5ve+U7Zew7

G7+Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1760455950; x=1761060750;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=ypmbLwD6gLFdsrF4Sq1VT+Icz0SDgDh1y8xEk8jnqIY=;

b=kg8PVtHyrsdnrbfkgoyAlqn2O8P5yr13iCC1W9vGKz9Dao3z9w/1xWmHn7VaQ6ryIf

sKgnLncL3RKDzB5Dmr8hYfQKTuwuTfRD8ctq3zuhbbnl+OFXSK/9Er/HyShjCImPu6ah

86u/KsV0IavFDMhc+nQRIwSouzc2aqRwB81/503Y4sU7iYxMe6TRHDf/MLBnxBn177YC

XqYe0pssoJV8S2zSCr7WkD58JxXKLKWnsV6S0YLlUpjgNUoTEUPdOHjQVDyiMldjPcVS

7ktQph5IaCd3rgQo5hWxHoZYATYBi2Qc20YImNAIjJ4QQWMFUjhPdgIfgi8AhihnAOts

dpYQ==

X-Gm-Message-State: AOJu0Yxhcdg2K5SNK5jtWvj0VMey2trO4yoIL2dtYyznHQlmqTzjwfB/

MEOu/P07ebvLbM2n5ueZBUcjiqNsRC4zZRRGGTMu/t9d2q+aFHGVSTMsMbdSfeph7b/aOlfvnSs

o1Xf7eJg9oY3p1+VjAyltVg==

X-Google-Smtp-Source: AGHT+IG77du/inPojXfqn8E1tqmcHbntFP8+kXM0iJNazAMONFVSTud4YZmWJI8bnP1DaukpIiMyNRQSyQ==

MIME-Version: 1.0

X-Received: by 2002:a05:6102:418d:b0:59e:a2d5:2945 with SMTP id

ada2fe7eead31-5d5e225efc3mr10300748137.8.1760455949837; Tue, 14 Oct 2025

08:32:29 -0700 (PDT)

Message-ID:

Date: Tue, 14 Oct 2025 15:32:29 +0000

Subject: Netknow Internet Service selected for CBRB Best Businesses In Canada 2025

From: canadianbusinesswinner@wcbrb.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 8.5

X-Spam_score_int: 85

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Congratulations on being selected and approved for

the CBRB Best Businesses In Canada 2025. CBRB Canadian Business Review Board

assesses and evaluates all the businesses in Canada and verifies only the

top businesses for meeting the CBRB Canadian Business Review Standards.



Content analysis details: (8.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.217.69 listed in will-spam-for-food.eu.org]

[209.85.217.69 listed in will-spam-for-food.eu.org]

[209.85.217.69 listed in will-spam-for-food.eu.org]

[209.85.217.69 listed in will-spam-for-food.eu.org]

[209.85.217.69 listed in will-spam-for-food.eu.org]

[209.85.217.69 listed in will-spam-for-food.eu.org]

[209.85.217.69 listed in will-spam-for-food.eu.org]

[209.85.217.69 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.217.69 listed in dnsbl.ahbl.org]

[209.85.217.69 listed in dnsbl.ahbl.org]

[209.85.217.69 listed in dnsbl.ahbl.org]

[209.85.217.69 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.217.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.217.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.217.69 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.217.69 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.217.69 listed in list.dnswl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: www.thecbrb.com]

[URI: wcbrb.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: wcbrb.com]

[URI: thecbrb.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.217.69 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.217.69 listed in sa-trusted.bondedsender.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.0 HK_LOTTO_NAME No description available.

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.217.69 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.217.69 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.217.69 listed in bl.score.senderscore.com]

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Netknow Internet Service selected for CBRB Best Businesses In Canada 2025



SGVsbG8sDQoNCkNvbmdyYXR1bGF0aW9ucyBvbiBiZWluZyBzZWxlY3RlZCBhbmQgYXBwcm92ZWQg

Zm9yIHRoZSBDQlJCIEJlc3QgQnVzaW5lc3NlcyAgDQpJbiBDYW5hZGEgMjAyNS4NCg0KQ0JSQiBD

YW5hZGlhbiBCdXNpbmVzcyBSZXZpZXcgQm9hcmQgYXNzZXNzZXMgYW5kIGV2YWx1YXRlcyBhbGwg

dGhlICANCmJ1c2luZXNzZXMgaW4gQ2FuYWRhIGFuZCB2ZXJpZmllcyBvbmx5IHRoZSB0b3AgYnVz

aW5lc3NlcyBmb3IgbWVldGluZyB0aGUgIA0KQ0JSQiBDYW5hZGlhbiBCdXNpbmVzcyBSZXZpZXcg

U3RhbmRhcmRzLg0KDQpSZXByZXNlbnRpbmcgdGhlIEJlc3QgQnVzaW5lc3NlcyBpbiBDYW5hZGEs

IHRoZSBDQlJCIENhbmFkaWFuIEJ1c2luZXNzICANClJldmlldyBCb2FyZCBoYXMgZm91bmQgdGhh

dCB5b3VyIGJ1c2luZXNzIG1lZXRzIHRoZSBDQlJCIENhbmFkaWFuIEJ1c2luZXNzICANClJldmll

dyBTdGFuZGFyZHMgYW5kIHdlIGxvb2sgZm9yd2FyZCB0byByZWNvbW1lbmRpbmcgeW91ciBzZXJ2

aWNlcy4NCg0KTWVtYmVyc2hpcCBpbiB0aGUgQ0JSQiBCZXN0IEJ1c2luZXNzZXMgSW4gQ2FuYWRh

IDIwMjUgaW5jbHVkZXMgbGlzdGluZyBpbiAgDQp0aGUgZXhjbHVzaXZlIEJlc3QgQnVzaW5lc3Nl

cyBJbiBDYW5hZGEgMjAyNSBEaXJlY3RvcnksIENCUkIgQmVzdCAgDQpCdXNpbmVzc2VzIEluIENh

bmFkYSAyMDI1IFZlcmlmaWNhdGlvbiBDZXJ0aWZpY2F0ZSAmICBCYWRnZSwgYW5kICANCnByb21v

dGlvbmFsIGNvbnRlbnQgdG8gcHJvbW90ZSBOZXRrbm93IEludGVybmV0IFNlcnZpY2UgY29tbWl0

bWVudCB0byAgDQp1cGhvbGRpbmc6DQoNCi0gU3Ryb25nIFZpc2lvbg0KLSBDdXN0b21lci1jZW50

cmljIEFwcHJvYWNoDQotIEN1c3RvbWVyIFNhdGlzZmFjdGlvbg0KLSBCdXNpbmVzcyBMZWFkZXJz

aGlwDQoNCkZvbGxvd2luZyByZWdpc3RyYXRpb24sIHlvdSB3aWxsIHJlY2VpdmU6DQoNCi1DQlJC

IEJlc3QgQnVzaW5lc3NlcyBJbiBDYW5hZGEgMjAyNSBWZXJpZmljYXRpb24gQ2VydGlmaWNhdGUN

Cg0KLUNCUkIgQmVzdCBCdXNpbmVzc2VzIEluIENhbmFkYSAyMDI1IFZlcmlmaWNhdGlvbiBCYWRn

ZQ0KDQotQ0JSQiBCZXN0IEJ1c2luZXNzZXMgSW4gQ2FuYWRhIDIwMjUgRGlyZWN0b3J5IExpc3Rp

bmcgJiBQcm9maWxlIFBhZ2UNCg0KQ0JSQiBDYW5hZGlhbiBCdXNpbmVzcyBSZXZpZXcgQm9hcmQg

d2lsbCBwcm9tb3RlIHlvdXIgYnVzaW5lc3MgZXhjZWxsZW5jZSAgDQpvbiBvZmZpY2lhbCBDQlJC

IHNvY2lhbCBtZWRpYS4NCg0KVG8gYWNjZXB0IHlvdXIgQ0JSQiBCZXN0IEJ1c2luZXNzZXMgSW4g

Q2FuYWRhIE1lbWJlcnNoaXAgJiBWZXJpZmljYXRpb24sICANCnBsZWFzZSBzdWJtaXQgdGhlIGZv

bGxvd2luZyBmb3JtOg0KaHR0cHM6Ly9mb3Jtcy5nbGUvQXJQeTg0OWRjb1JhWDV2NDYNCg0KSWYg

eW91IGhhdmUgYW55IHF1ZXN0aW9ucywgZmVlbCBmcmVlIHRvIGxldCB1cyBrbm93IQ0KDQooRm9y

IGFsbCBmdXR1cmUgZW1haWxzLCBwbGVhc2Ugc2VuZCB5b3VyIHJlc3BvbnNlIHRvIOKAnEluZm9A

dGhlY2JyYi5jb23igJ0pDQoNCk5pY2sgTW9vcmUNCkNCUkIgQ2FuYWRpYW4gQnVzaW5lc3MgUmV2

aWV3IEJvYXJkDQpNZW1iZXJzaGlwIENvbW1pdHRlZQ0KQmVzdCBCdXNpbmVzc2VzIEluIENhbmFk

YQ0Kd3d3LnRoZWNicmIuY29tDQpAdGhlY2JyYg0KQHRoZWNicmJfY2FuYWRhDQoNCg0KDQoNCg0K

SWYgeW91IHdvdWxkIGxpa2UgdG8gdW5zdWJzY3JpYmUgZnJvbSBmdXR1cmUgY29ycmVzcG9uZGVu

Y2UsIHBsZWFzZSBlbWFpbCAgDQp5b3VyIHJlcXVlc3QgdG8gdW5zdWJzY3JpYmVAdGhlY2JyYi5j

b20NCg==

Web/SEO/App Spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 14 Oct 2025 13:06:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1v8kLG-00000000MsT-144P

for dave@doctor.nl2k.ab.ca;

Tue, 14 Oct 2025 13:05:50 -0600

Resent-From: The Doctor

Resent-Date: Tue, 14 Oct 2025 13:05:50 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-swedencentralazolkn19010009.outbound.protection.outlook.com ([52.103.35.9]:53253 helo=GV3P280CU006.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1v8hgV-000000009pR-0yoJ

for sales@nk.ca;

Tue, 14 Oct 2025 10:15:44 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=JOyK5UYEdlbFHBvCYRJBa2/KPMzaAQana/kNo4glRaP9F9jwDXC26sZVq3XKLBQBa5Kypz1nqE1vcPMSiDmjexLZgJrAVeFkEfle6wI8C+wHfvheKNegVe4vMy1QCuTEnti15wvobt1/W+HyiPSGmWMplKi21yGRCRb7A7uBR9nZKFQaSOBgnOeXpUgJMRxrlJHAWBvvzPMNEfUzkjqJQs4HqkAi3FU4gekItEsdHoalYxZmlfEGDz3gIMu2ObUAnsLZcz7srvuZCN9DGp9l5Ddtey44gRf7Oz1+4ZdExs9+2Sr2gGcGJo+Uht3WkVtpWV8axCHCzSCkhw1JXvknkQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=kuf2CzHSYxHun3aGRTx//OtpRaQahM6kPxEPAbkF99s=;

b=u26yHDNqRxfhQS9dPak3T52dDJZ+9yqRpFxAnAFFXu8JCOGrfI+930eO6+ZEwXys6AovuVkjmyY2XN07IUGufUI7MxbIkgNZTz5yrp7D5V03HPKnVVwR+g7EewEHebTp7pos2NUnK9qopEIsFhwp43COyXmdfYZgIfVRVaLQ1gFlWDpqV9377CkY9JN9cKKON6Dx1HDOUo5OKSXJ1BxlhKyd9rhEq+5cpUMuC9ml+cqC4ODiqT2Op0MriUNDSpem+GnRAYvavykJojThvMtrLS+hqrh0HcgujrdOE0Vqg81o122KPBjYliZ2Q4aafpN8E3GpJPJv0qBBHMHofbCM7A==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=kuf2CzHSYxHun3aGRTx//OtpRaQahM6kPxEPAbkF99s=;

b=GIzJNilRGv2lRlJUGa4JbNx8OxbJ49aDoyXRhEUJ/sNPS+9au2jWMzB8HSjoStFEn3cTon9qDSA7tRtO1PSOKVQRj9ZtP+ugSWC92eUpo7iyn4RZtZx8kKnD0gjtUhabpTjCqjaxwvScf3gQyXrw5AOZh+VWLshAKPQeat46Rrxyze4QQwKquO6EOibaTNL0epqxRqAnhZY3SD7em0RG7ewoYSIxxqjfbU90l1nPSEyEfBYU2N+ghA7+IAMqZ+H9jME2CI7YLk4XJL6OgknSr5Febxt00xpwV1DHtcEVxoVIvPPSdg/VctlfoUqjhytaHaxmUJGliK9m8qNNYTBnnw==

Received: from GVZP280MB1145.SWEP280.PROD.OUTLOOK.COM (2603:10a6:150:18b::10)

by GVZP280MB0741.SWEP280.PROD.OUTLOOK.COM (2603:10a6:150:f6::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9203.13; Tue, 14 Oct

2025 16:14:38 +0000

Received: from GVZP280MB1145.SWEP280.PROD.OUTLOOK.COM

([fe80::f58b:12cb:7257:9ff8]) by GVZP280MB1145.SWEP280.PROD.OUTLOOK.COM

([fe80::f58b:12cb:7257:9ff8%7]) with mapi id 15.20.9203.009; Tue, 14 Oct 2025

16:14:38 +0000

From: Terence Radilla

To: "sales@nk.ca"

Subject: Pricing Menu

Thread-Topic: Pricing Menu

Thread-Index: AQHcPSWjNlTXKOGuS06KZ125QnFskQ==

Date: Tue, 14 Oct 2025 16:14:38 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: GVZP280MB1145:EE_|GVZP280MB0741:EE_

x-ms-office365-filtering-correlation-id: 0401d808-13cf-468a-570b-08de0b3cc614

x-microsoft-antispam:

BCL:0;ARA:14566002|8060799015|461199028|15080799012|38102599003|8062599012|31061999003|19110799012|56899033|1602099012|40105399003|39105399003|51005399003|440099028|3412199025|4302099013|10035399007|102099032;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?3DyV0R6UeOqIRfxxd4p0WPPkO27w5EE4pEhBYFb3oVmy7vxfMvIdA5FJ?=

=?Windows-1252?Q?qopTXdpOLxvcYFxkF+pYvabLrKjVIHoygq9gI1MnwftfOzpD8XzxNk3D?=

=?Windows-1252?Q?dNfUQGVuNfuO4DTHKvrpf7KUZXKGujNFaxQ3gQfnB5LeQtGq5rnzeRoJ?=

=?Windows-1252?Q?MfQG2cfI+Xo1WcQeCgY6p2rkgyLzdr1lOL6ksH43VPjS0CFUWlPKz2g2?=

=?Windows-1252?Q?aH0FvRZTn4qYCLSvsnfQkGZufeFfLmToaSe9u0lZlBtxG8gUIxZQzD96?=

=?Windows-1252?Q?Rk5VlCYZXsgmwQu0gKKWUt+MkKwUYFz+Ii50MkcF10yECAjPQuOR0Kdp?=

=?Windows-1252?Q?xDWKR2R1sz6b/ff2gJgSGTIizgREUWQBG6RkJ7Ft+xCItWU3VamEroR7?=

=?Windows-1252?Q?gNACmnKzPvwsYVyvczDIq4XMevvySLBjo23EX7WkKdPPdjMtogkpy++p?=

=?Windows-1252?Q?R4Q8corboFAeHnN/6xkvqXfpkqy/MjFZtLtGa4l9gZRVr4Oy2xGF205H?=

=?Windows-1252?Q?p8hiRxoDykMSYY4tPYq4p8H2YnXik5GGhIpeulq0Bax99u1Qxjp3uaTb?=

=?Windows-1252?Q?kraJUzSEJlHsCUHamEU5FFsqpRnvhdQOP0xt71o2ZTznBTC1LYqtuPvg?=

=?Windows-1252?Q?Ht80Wp9Z/ZOtxRXVFbo84LCQHSkCfzbjM+Hf2I+p9/10gu7aMCUwfWuz?=

=?Windows-1252?Q?G47SRh1REl4wD9fYLWQHN1/vy5h/Y9iCpWkQIqKgQHBkkxCWw+Ap1kzf?=

=?Windows-1252?Q?tCTuKYsrRXyGgmhioKdSaQ1I0f455E126AmbfUHOwVJSn5CLfXtN8bWp?=

=?Windows-1252?Q?lJ3W0tw8oFvqGQbblz/799mTn2grK2WLWCiiI/q2sFgJpsy20WP3GYtH?=

=?Windows-1252?Q?HSgEIr4sHif5GthPotRLrWZN4hczsHKKpscGGTIn+ISv4/tq6qWl6TP5?=

=?Windows-1252?Q?eAlzYBGT2w/P+HybOta9KLN+Os7LHtGM2iqtQoMT6e9p0oCZ99m/Zfc1?=

=?Windows-1252?Q?CbuTyQMbbxmTZwatyNdxML09kf3XXrhbca3Q70UlkL+dKHDuJnpSjTEx?=

=?Windows-1252?Q?wqyf6cx31Y8i3LHq5cV9zI8JsAuc12TRHnxat2XrgfkT3ODrSjw2vw7X?=

=?Windows-1252?Q?hfiW6hAE0rX6ao1jN4IFq024kuxBV0kIXFPnFY7hpobTTdMVO6mfc/Xd?=

=?Windows-1252?Q?ZoLqtPFJGAQLrEbZbZ03ipI4Rk2VLnWa8L2HgiFCm6Xu9yWWbxWe20TU?=

=?Windows-1252?Q?ieYX3zC8dBEuYZYQhmFIPDAWwGxI9OQCDoX91Jlhvvbaa1Gt/qCzce6J?=

=?Windows-1252?Q?EDUjuiUUJ0zUkHnuITggPQLeREv4BoTTFn2JMmQJOmLDLn+4WjX5K21h?=

=?Windows-1252?Q?ZHsLoduASQ8NBxy70CdZuoCpLcN7FB55yBx/xcYG/wbOROt2UXTUJbkD?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?ibEVTADhAYJcoktee55pJGs4YVb0StUGr/yMDaSyb2RCiXyujNRU8KJO?=

=?Windows-1252?Q?puC3vwzx7qNe5WF3KqCCnKkP22eZw5HAtnt5ZoCL0c47at3wWPbMaX0E?=

=?Windows-1252?Q?LyUPCe7VE7/DdPGOk5LX/GOK7XaKFgc820yaP8QX3D0I0KbrSlh+Cq9x?=

=?Windows-1252?Q?iN758B853M8Dld6tta4THdkzvzvyYBvg6Ys1slgdDN3fmHzJRHzsgcoe?=

=?Windows-1252?Q?kokX2kZnUx+4LZAqIGI1uGePPrM9jhXOO2fAPxASXA0jo+oQTlTBYmq0?=

=?Windows-1252?Q?kOWVgTwl04S3tHDfJ2W4ugjrs/4aRjKWwbDQ6BVU4ajl0XXxyrNHROmX?=

=?Windows-1252?Q?DJSHa7P1T6kUBjwiQ9wz25da20DrfV4SGs6o19dhignRzsOSuei6ub+4?=

=?Windows-1252?Q?dy3COhmN2tCf4BpEqA2klgXurN0RHiHtsWpr8r7x3IAPW/de2zmUhvBJ?=

=?Windows-1252?Q?RHD7o21paJowsR7+Wpqa4hYaqoBl9o8qSrINqAkSb4URkM3hR4YqiGlY?=

=?Windows-1252?Q?E72l1UQ+ILrGFAosVQRrFm/lKbC1n4hEsRsuWsib5I92fJ3ROndZvTTP?=

=?Windows-1252?Q?tHfMEadJxHEyPURnBHBVEluK+ehy+33wS1jyw2NUyaai5yeJe25Boz45?=

=?Windows-1252?Q?GiM0ob0jVyfcjdqlVWhBglLkvhujgRmohqE3WKCf3TNwHkRYjhUWHZeb?=

=?Windows-1252?Q?0CSmv3WyOevqCkEshGklWMqz5JrZI3cLLiO+VnYctwGNecNHXxfUZjfg?=

=?Windows-1252?Q?IsK5hb84dxG1TYXRM+LozGjwLBCgXSsBOQKslZd53GuVh8yOwnyEKaC1?=

=?Windows-1252?Q?38qMBb1g6W8vy9pnyEZyFpDzEbfS9KClX1A+xRPaBrnxvoriBLFPIhUP?=

=?Windows-1252?Q?/eerGNoT4puZmIFvDrHLepu52YcJlZyMzfAaHwHdWxv+O0x10CgPWdv7?=

=?Windows-1252?Q?L6t3TSsRJmb/LCkE7u7WpKjNLz/FDAMpV7v/sMBPgclkKpm8GcoGrOUd?=

=?Windows-1252?Q?d93qI8wmrZv7pO/EmAlCk2QAHN7co8yFEVlQwHeM3uyIMYbBYPAT8BWD?=

=?Windows-1252?Q?keT42zTzyRawf+xqOkNwqfYsEdY3kIS1ftcaITVVam0vUga/kk7k9lkC?=

=?Windows-1252?Q?6r47xEax7XvrEQ/chKCC+qBs5yHycT36i+9cpBnD2yDUF46Cbwr5YhEv?=

=?Windows-1252?Q?Z/UTdhd7Cdh8EI1tyZ1JAJdffIVGeyJBBGM7JzXCCEVP2ck7v/eoyS4x?=

=?Windows-1252?Q?7ajjoptzzgkHB2O2aFvF8xXKPaaDV7WG0q5gBuhslXpFAM3JVgwKFhwH?=

=?Windows-1252?Q?+aeQH+2WcTTMJSWQLm/XyERe4Wmr6p3sR/9QE7IGIAvxa71C?=

Content-Type: multipart/alternative;

boundary="_000_GVZP280MB114519DDBDD2C86A3CD3C88792EBAGVZP280MB1145SWEP_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-7719-20-msonline-outlook-a57fb.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: GVZP280MB1145.SWEP280.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 0401d808-13cf-468a-570b-08de0b3cc614

X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Oct 2025 16:14:38.1844

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: GVZP280MB0741

X-Spam_score: 5.1

X-Spam_score_int: 51

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings, (WWW.nk.ca) I’m Terence Radilla, SEO Manager

and Digital Marketing Expert. Over the past 5 years, we’ve partnered with

1,500+ SEO agencies worldwide, helping them scale projects efficiently and

they’ve loved our work. Our 250+ member team currently manages 1,500+ active

[...]



Content analysis details: (5.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10a6:150:18b:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:18b:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:18b:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:18b:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:18b:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:18b:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:18b:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:18b:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[52.103.35.9 listed in will-spam-for-food.eu.org]

[52.103.35.9 listed in will-spam-for-food.eu.org]

[52.103.35.9 listed in will-spam-for-food.eu.org]

[52.103.35.9 listed in will-spam-for-food.eu.org]

[52.103.35.9 listed in will-spam-for-food.eu.org]

[52.103.35.9 listed in will-spam-for-food.eu.org]

[52.103.35.9 listed in will-spam-for-food.eu.org]

[52.103.35.9 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.35.9 listed in dnsbl.ahbl.org]

[52.103.35.9 listed in dnsbl.ahbl.org]

[52.103.35.9 listed in dnsbl.ahbl.org]

[52.103.35.9 listed in dnsbl.ahbl.org]

[2603:10a6:150:18b:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:18b:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:18b:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:18b:0:0:0:10 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.35.9 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.35.9 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.35.9 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.35.9 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.35.9 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.35.9 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[terenceradillax433(at)hotmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[terenceradillax433(at)hotmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Pricing Menu



--_000_GVZP280MB114519DDBDD2C86A3CD3C88792EBAGVZP280MB1145SWEP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Greetings, (WWW.nk.ca)



I=92m Terence Radilla, SEO Manager and Digital Marketing Expert.



Over the past 5 years, we=92ve partnered with 1,500+ SEO agencies worldwide=

, helping them scale projects efficiently and they=92ve loved our work. Our=

250+ member team currently manages 1,500+ active campaigns, offering servi=

ces including SEO, PPC, SMO, SMM, and Website & Mobile App Development.



We focus on quality link-building from sites with PA/DA 15+ no low-quality =

spam. All reports are white-labeled under your brand.



If you=92re interested, I=92d be happy to share our SEO packages and pricin=

g details.



Best regards,



Terence Radilla



SEO Manager



--_000_GVZP280MB114519DDBDD2C86A3CD3C88792EBAGVZP280MB1145SWEP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">





Greetings, (WWW.nk.ca)



I=92m Terence Radilla, SEO Manager and Digital Marketing Expert.



Over the past 5 years, we=92ve partnered with 1,500+ SEO agencies worldw=

ide, helping them scale projects efficiently and they=92ve loved our work. =

Our 250+ member team currently manages 1,500+ active campaigns, offering se=

rvices including SEO, PPC, SMO, SMM,

and Website & Mobile App Development.



We focus on quality link-building from sites with PA/DA 15+ no l=

ow-quality spam. All reports are white-labeled under your brand.
p>

If you=92re interested, I=92d be happy to share our SEO packages and pri=

cing details.



Best regards,



Terence Radilla



SEO Manager









--_000_GVZP280MB114519DDBDD2C86A3CD3C88792EBAGVZP280MB1145SWEP_--

Web/SEO/App Spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 14 Oct 2025 07:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1v8f9T-00000000BRt-29n2

for dave@doctor.nl2k.ab.ca;

Tue, 14 Oct 2025 07:33:19 -0600

Resent-From: The Doctor

Resent-Date: Tue, 14 Oct 2025 07:33:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f196.google.com ([209.85.210.196]:42334)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1v8chh-00000000GPO-0Z84

for sales@nk.ca;

Tue, 14 Oct 2025 04:56:39 -0600

Received: by mail-pf1-f196.google.com with SMTP id d2e1a72fcca58-76e2ea933b7so4998818b3a.1

for ; Tue, 14 Oct 2025 03:55:42 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=mobiledevco-com.20230601.gappssmtp.com; s=20230601; t=1760439336; x=1761044136; darn=nk.ca;

h=thread-index:content-language:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=DKY7GwYPUBYKhwiWEZyHMicRGLN6619WevrvYx/YL+g=;

b=2oenP2s8GPwOWxxyudIY559J+Lh1tAS+rVwQMEkV/S/e/S8/zZItd4B1XCIf5AM/bc

gBqLYv8dyPnQkw6Mz3/D2JPKnPal6lEGHJFGOB5VvKizVfmcO0ZrYJKMjr086dtzRaDB

QVyogDtnvsFXltGV8H0+cVUB6R0vfigUqwPZoJXCb4f1gD032UKLFTDTkKZ+HpWlPC7l

qPzRdxO5rE7DD1F/aYEMN6NpbKmYnil0B0Xl2xyU4xHC1HMNIfnvIMkrwiET7yAlgmxC

XLGXiD70fLvRCb21d/m0qeTrbTF6TBaCeBhEjQ8Jx+HdW/oLkrFACu+3BbD2ncyenXGr

CPug==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1760439336; x=1761044136;

h=thread-index:content-language:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=DKY7GwYPUBYKhwiWEZyHMicRGLN6619WevrvYx/YL+g=;

b=wDOluMV2RnctJVPFKuOP1piauFMuYPF7bVx6Ozghu0ht2WoTDr59PpCDN831qWvAe8

dw2MctqTbug8dBiHq+AtdhAfMljg2oICqBCBqvfnvJ7ihdfxIxtX+SeDQnC8vwqGiuh4

Ad9SwhQWDXkdeEet8C/9Osn1nlW/eA/ONxlnrwpr1ItVfeV0xaTHssHMv5RLPfV5x+XP

w7oR4dOr/zjO9Z4BLbH0gkBW3LHWah7hetdSphMdbDjXBhvaiap/lfb/BiGo6kEDKfF9

uVwDXaTQfX9GYCW//V9rj7eg47sNROTnI0zCsUTtaBNOdJtT1j4fazFIvOORGxTqwwDw

71yA==

X-Gm-Message-State: AOJu0Yx7XstxEuucIYVVqACVtIzh7qar9S3jG4rt8o26BmQuFS8TgFN9

2zoNa1YIsuKQo10sthYYyld9vMonT16DSEIIG3mtTD1R/js4e2fOGVxFQo4sqgURv81Wz6TRN1N

2tJuz8dVulA==

X-Gm-Gg: ASbGncuHyQxwjhOssLowj7TH049kBznEgttjkOfqu748954w+sZBjZWdV0XwnyGUw2l

yh6zaHK8t2Ev0x7hEmnXRnHNKIik7eVOWPVjjTEmMpCkZEAz24V6Qxibn73PvaqUZo2IqbDs4DD

MoJc7Nrhk0NiEzt1Z5pKDIo0EfRlAbg7kWERkzPlUUCc/x0MIJ3QI0XQwlr4q1vKia1ih9iRYrd

XYAonvnzJNUxFr6P5XeBJniO5gtQZvl4RGj+So3LAbgTZtXeLnwr9gNTPjGC1bkWigb1lz/hzwy

zX2M4qlny84GkfenTb3zb++10m9QEGDIsRa6a6OH8UJhxitkUQKp2MUcFULJMs267Kq+BgS4J+C

fLC3kdhqvoeTlpLB2++88QgLJUxC8OU7Ja6vfF5lcac04KiLP/3PQ7+75amRwRtZK4NqvVw==

X-Google-Smtp-Source: AGHT+IGWz3lA3wHJzlbtkJQAWANt2aYUu0J3pOD6l+AFmvjda9k/pzH2g+8FRFhno83KCIX0xEnrVg==

X-Received: by 2002:a05:6a21:33a7:b0:2bd:2798:7ae5 with SMTP id adf61e73a8af0-32d96e5c3abmr35511682637.19.1760439335874;

Tue, 14 Oct 2025 03:55:35 -0700 (PDT)

Received: from LAPTOPVGLBM76Q ([110.235.233.170])

by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-b6792f508c6sm12071699a12.24.2025.10.14.03.55.34

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 14 Oct 2025 03:55:35 -0700 (PDT)

From: "Mohammed Al-Mansoor"

To:

Subject: Designer / Developer

Date: Tue, 14 Oct 2025 16:15:50 +0530

Message-ID: <2a9e801dc3cf9$11825670$34870350$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_2A9E9_01DC3D27.2B3A9270"

X-Mailer: Microsoft Office Outlook 12.0

Content-Language: en-in

Thread-Index: Adw821FWwLsClmbjTn+8bGSb3ipwpg==

X-Spam_score: 12.7

X-Spam_score_int: 127

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I'm reaching out to see if there is anything that would

like to create Shopify & Wordpress, upgrade, repair, or redesign on your

website or Mobile App. I am a web designer/developer that can do just about

anything you can imagine at very affordable prices.



Content analysis details: (12.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.196 listed in dnsbl.ahbl.org]

[209.85.210.196 listed in dnsbl.ahbl.org]

[209.85.210.196 listed in dnsbl.ahbl.org]

[209.85.210.196 listed in dnsbl.ahbl.org]

[110.235.233.170 listed in dnsbl.ahbl.org]

[110.235.233.170 listed in dnsbl.ahbl.org]

[110.235.233.170 listed in dnsbl.ahbl.org]

[110.235.233.170 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.196 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.196 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.196 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.196 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.210.196 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[110.235.233.170 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[110.235.233.170 listed in sbl-xbl.spamhaus.org]

[110.235.233.170 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.196 listed in list.dnswl.org]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.210.196 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.196 listed in wl.mailspike.net]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[110.235.233.170 listed in will-spam-for-food.eu.org]

[110.235.233.170 listed in will-spam-for-food.eu.org]

[110.235.233.170 listed in will-spam-for-food.eu.org]

[110.235.233.170 listed in will-spam-for-food.eu.org]

[110.235.233.170 listed in will-spam-for-food.eu.org]

[110.235.233.170 listed in will-spam-for-food.eu.org]

[110.235.233.170 listed in will-spam-for-food.eu.org]

[110.235.233.170 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

[209.85.210.196 listed in will-spam-for-food.eu.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.196 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.210.196 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.9 PRICES_ARE_AFFORDABLE BODY: Message says that prices aren't too

expensive

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 END_FUTURE_EMAILS Spammy unsubscribe

0.0 T_END_FUTURE_EMAILS Spammy unsubscribe

Subject: {SPAM?} Designer / Developer



This is a multi-part message in MIME format.



------=_NextPart_000_2A9E9_01DC3D27.2B3A9270

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hello,



I'm reaching out to see if there is anything that would like to create

Shopify & Wordpress, upgrade, repair, or redesign on your website or Mobile

App.



I am a web designer/developer that can do just about anything you can

imagine at very affordable prices.



Let me know what you think.



If interested. May I send you sample, Portfolio and company Details?



Thank you for your time and consideration.



Kind Regad



Mohammed Al-Mansoor







P.S.: If you'd prefer not to receive further emails from me, simply reply

with "NO" in the subject line.









------=_NextPart_000_2A9E9_01DC3D27.2B3A9270

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">
vlink=3Dpurple>


style=3D'margin:0cm;margin-bottom:.0001pt;background:white'>
style=3D'font-family:"Calibri","sans-serif";color:#222222'>Hello,

=

I'm reaching out to see if there is anything that would like to create =

Shopify & Wordpress, upgrade, repair, or redesign on your website or =

Mobile App.

I am a web designer/developer that can do just about =

anything you can imagine at very affordable prices.

Let me know =

what you think.

If interested. May I send you sample, Portfolio =

and company Details?

Thank you for your time and =

consideration.

Kind =

Regad


style=3D'margin:0cm;margin-bottom:.0001pt;background:white'> Mohamme=

d Al-Mansoor


style=3D'margin:0cm;margin-bottom:.0001pt;background:white'> 
o:p>


style=3D'margin:0cm;margin-bottom:.0001pt;background:white'>
style=3D'font-family:"Calibri","sans-serif";color:red;background:white'>P=

.S.: If you'd prefer not to receive further emails from me, simply reply =

with "NO" in the subject line.


class=3DMsoNormal> 



------=_NextPart_000_2A9E9_01DC3D27.2B3A9270--

Web/SEO/App Spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 14 Oct 2025 07:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1v8f9f-00000000CSw-2qiv

for dave@doctor.nl2k.ab.ca;

Tue, 14 Oct 2025 07:33:31 -0600

Resent-From: The Doctor

Resent-Date: Tue, 14 Oct 2025 07:33:31 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013086.outbound.protection.outlook.com ([52.103.43.86]:9560 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1v8cxY-00000000HeL-16IT;

Tue, 14 Oct 2025 05:13:02 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=m21zG5b/gV6Xhc8acuk8FUsUaHQ+7K1fbd7GNvfJ2nqQ43ACGwaITLMPUWcc2ajkZd4aPIA9TSfLyMOtny5UHXp3XoveGhrT0auvcg94HBMynTHlY6j7+sWw4fvbKy05S9yczwxiTRH7IyQQf0J2I88IZ2OaTTGM9XY5odkh3UbVG3nWyz5LdHkoq8lYkShbGNLotzIOnIdzmYDdvuuRQca98iYsRPuizDt0c5/c3z40KfsU3w3YYkN6GZy8DKauW1YuEkjFDglN4haG0clO/nrGnBNp1XiqBbcuZKU8YTbEnppptx26/mJghndd+G6lPuSvrmyFBZN0rDIvjgKxqA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=aA0y4PWdGWRnfVSmUrPuh+r7p4VaDgzvuAmez645IaE=;

b=WbhOenOyy9p/vd9WvueE9IMazBXTUSKn/v1pfyInIT9bqmNt+6UiFyQ62s5IgGtmQbNK20lkzFm/9NixtmagBiVUZ96abnJgiFb7AiYhlepqjtri4hqqHbHe+bpXyA75tECB8FQOz2CmMPhdqHHsvojmr1SBRDsnHHlVSZrrsuHGVBB+RcBfzFSksbSdgJ26QgDqF4o+dmKYCuOMsG09Frt81JR+lvziJXRhoj3zAF2g4xy9k0gO6JvYHOgtq+QyBECYGg08EE6LHl8OBVZJJqlJT8L4DS33mX3FJ0K6XI8l02NxYKcOjUk0K7O5HcvmCLmHUNdrKDoFErK0kuqJvQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=aA0y4PWdGWRnfVSmUrPuh+r7p4VaDgzvuAmez645IaE=;

b=V0Lp+dmxKNBhyvaf9APQiQC/R6GvGYQ93xHvlGejf/sVTaNGfyVCJf6+qE34gM3MzWcD8bx9wvJnK9Rw/+WSpjHt+dMdSE3iyDV/6u/gZQIPDnDSGLaFThwTPQNco+Tl1SmKjRPQMIi+KC2iGVTwvVgsXksJW6UWJJyIbSHdYfT369ImB1vnS+kHJvcwnxk54joE5KzRfT3XX+dH1D7yTawmKnpAcigTTn4Dnv18ZLMPh3uUabSGspfDpHegla6eFLHs5XUnmJeIXHYrSjzuhFyCpG/iFdbwoTrecmBGW8saRkbY6VJeI4O2+mVopgLjghpU66xgd8cwAEOMwsqMyA==

Received: from TYZPR01MB3792.apcprd01.prod.exchangelabs.com

(2603:1096:400:37::9) by SEYPR01MB4926.apcprd01.prod.exchangelabs.com

(2603:1096:101:ba::6) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9203.13; Tue, 14 Oct

2025 11:11:19 +0000

Received: from TYZPR01MB3792.apcprd01.prod.exchangelabs.com

([fe80::d92f:da2:e2df:77f3]) by TYZPR01MB3792.apcprd01.prod.exchangelabs.com

([fe80::d92f:da2:e2df:77f3%5]) with mapi id 15.20.9203.009; Tue, 14 Oct 2025

11:11:19 +0000

From: Ajay webdesigner

Subject: Considering Upgrades? Evaluate Our Price Plans

Thread-Topic: Considering Upgrades? Evaluate Our Price Plans

Thread-Index: AQHcPPsLFUMrhXcgw0CXP8VxYB3J4Q==

Date: Tue, 14 Oct 2025 11:11:10 +0000

Message-ID:



Accept-Language: en-IN, en-GB, en-US

Content-Language: en-IN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYZPR01MB3792:EE_|SEYPR01MB4926:EE_

x-ms-office365-filtering-correlation-id: 60cb5584-e84c-4d01-796c-08de0b126636

x-microsoft-antispam:

BCL:0;ARA:14566002|19110799012|31061999003|15030799006|15080799012|461199028|8062599012|8060799015|440099028|51005399003|3412199025|41105399003|39145399003|40105399003|39105399003|102099032;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?PZY0ywtvx0IPcrOwQgC/iLPHM5cTNCc0Of0P/8Dqsl4sHGnWNqFin3V3?=

=?Windows-1252?Q?xTkLDTtO9Xam5NYL025xPygfF6k1vvV1DwqwrJ4M4VjovZVuPUmQ06/Q?=

=?Windows-1252?Q?nZGHpIs65iSqFqu1DL95XSBvyT5UblcKDAFtYs3T42B1WNR+CmyoZTCw?=

=?Windows-1252?Q?9CvHfiws2kih8H70oH9PRJsRGAPUQ0Fd5O9JZh/VzIdUZ8AUufxjBvYG?=

=?Windows-1252?Q?dhdhMxRMRmx6Jm2HbQZ1zvux4n8eJLEoZ75czS9zh1qL9BWdVLOU20Xg?=

=?Windows-1252?Q?viC/66YKJK7ICc8QnqPFWfZ4X68HY0IBQAJsDDVf1j3HHcXwfEuc1Xwy?=

=?Windows-1252?Q?Qndgu6oSlFW1D0qvzxQBJK36P1CQWuKKxx5z2A4no/yDfhIcf4rB0CTk?=

=?Windows-1252?Q?610U32CkSyvIXffTi04SKuh0ZvrFNC9tCYKTwlt6hT03DUu23sh6kaOy?=

=?Windows-1252?Q?rKh1BKKzsgWb2P5eI7E0EvStrOYHtJUiQ2CrNzKg5hHeUScALCmEJBDp?=

=?Windows-1252?Q?AkbC/a24Tpt+9ywrnbebEAcinnqatMPApQ70953rwT0rJTx5DdFDd+6F?=

=?Windows-1252?Q?pNsxaftMJyQjq48vWG6RZGHCtCTmkf28TR1vDTE+j1vgCTprZyaPVSQs?=

=?Windows-1252?Q?qrQB97ScfTOPcnIv0nAk07tEFxgwe8hrBFWOejNM6zP/vCBOSuCtSDYt?=

=?Windows-1252?Q?44pevk/Ft1Qxpu1jdfrojD36+hiaB10ing3XBdNDLZf6HXtM/KwT30+N?=

=?Windows-1252?Q?hoixolnVG0eAq5TpiG9EW0atYd8V6X8DtOsBYIVSRcQYTnP6aP5tPY3h?=

=?Windows-1252?Q?EVkUj6gxtDz7r055bECS91L/pn1NEWmaoiaay0w82zm2iAi0rgras1lc?=

=?Windows-1252?Q?Ce1Qkkn4Kt/GmPQ0eu1/ud2N2aocLGCADNwnD8GxoeDktLgdIfDi+ZxP?=

=?Windows-1252?Q?udtQHh/HlrQQnJI3pnFGnjZtvPJfETaxsY96ulAu8JTLdiUO7Q+r9ROE?=

=?Windows-1252?Q?C4GyeEHEgM127ToITM+IJMW0dwl7GuWFa98m1kPzNqdhSbUm4QoKbaQy?=

=?Windows-1252?Q?z91tSKVV6hNrQi9X2NI9FPiexpF1A6BedKVpwOdZvAG7N+s5eYf70C8F?=

=?Windows-1252?Q?1gqFTLSQARVeb9cjRUF6dGj+2VcDIkk7VW+Nl/rwKM7E4lGUWN5et9yk?=

=?Windows-1252?Q?T4a2lqJNobTWoPA/KvOsfvHYbcwI6f1uW7WJAaeMX+bZAbGuJ4ztP+zM?=

=?Windows-1252?Q?9vX4FYum6koVeUK9l13IQczmm7waFvelq1FjU4DJP+qwulTZV8Mfwez6?=

=?Windows-1252?Q?Cyrt0LuIjRrxQd/S0MkovB/cFDSK/KbpdG5AdZbwJlQIITl/J6/eNzvi?=

=?Windows-1252?Q?jVFxTL7NZDotE669KFArtsf07kED8LQUZ9U=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?Bc+exw2UdjlAO5AcfqTuk4KXWa6m2hSuMoy/fccLUKG5/7ww90vTTbD4?=

=?Windows-1252?Q?yWHY0s4OXhheQzZPejSDgeNGiFjv7Vaor7yGYcrEDE7zfSOgHS6qTs++?=

=?Windows-1252?Q?Sp9nb9sMa3OR4DFQ2zGSIFUmjaiyXKyGZKb+KDB7oN4CDGIZ3PbJDwEg?=

=?Windows-1252?Q?snlKcBlJcz8uVchbIkgH2DOVc2YEUblc0BnBLKEzttgfNQeRLRu/CsQJ?=

=?Windows-1252?Q?gjy2i1ROf8+MpzdWjda3TIDWPoECsX+u54X0/GgE/4h4OOJOVI1VQXK7?=

=?Windows-1252?Q?VK9vP2po7L36zHE8mWZ2Hz0qQMSdvYGcgLBaoHp+rGuJSI+sa9vO3PzB?=

=?Windows-1252?Q?X4BqTTXE646wzS8sybI3lelKNWVA6WMp5j+D1c10hPnvfEzB94Izpw7q?=

=?Windows-1252?Q?w+XbrL8R8TjEN630vCRiPHf4tncMHA/yQVMzrAqS7zeo/7RiBIrOr52h?=

=?Windows-1252?Q?DXTCWhN6FypULWozSaVzUrbJIb6DgD1FMQtz2OqNxT7fSAilh1ffyqvJ?=

=?Windows-1252?Q?sCIq8zwqtSOv4vG3MsBB3xVdV+rKP0sQ0VLgvPZ8v2q/zQVTHTFNVpQD?=

=?Windows-1252?Q?q0qCULdfX2VPg7HUbES0kAiAFnkbpMFKvrkeceOulCIlWwVSkne5htso?=

=?Windows-1252?Q?LadRphSk3hTmGzaaYI7pVKJ3F9K9keCBSSXEitaFjAW7oXrCTzBa2+JR?=

=?Windows-1252?Q?eUh4FDyHRy5mRqOv/CfHmvZWlx1aGb+HgpWg9Gvus7kJIYjhL8g8YkFX?=

=?Windows-1252?Q?BVD5TK3EjKCfHaGPzzrxfFHqGVQbzDtg2uzR92x0i+bf2M6uJeKX3LRN?=

=?Windows-1252?Q?20QV9QVNBo7yB9VYJPkpL1RTR0wpZZnUAQnNT/Td3KYgv6yjmtwHXSn6?=

=?Windows-1252?Q?QfPTUsS+igmiDOOcxUBDtOGZJ2YnsYw/tYVx4Jua7+2wD4gv7JoPSl4Y?=

=?Windows-1252?Q?7E2sbKHkKp/CjwAQAqz3sivjtGMDGKJsQOPwkbC2uR0SzvBOCMll7urY?=

=?Windows-1252?Q?C3TPrbZnciDxQTKAXh4Bn/QltRbOgaOeNsEk1UpPz3DxKZ+8ewCOaEev?=

=?Windows-1252?Q?jdUAagqB6XJmV3GLGPhNEknOI+Zc3dfaKSAShxyZ1a+anqCMdx3Lptot?=

=?Windows-1252?Q?P1YNTswfoljf1Q0y+iCt05raJKGFkWTVFwYLtUxv29lFvVK/dq4RVM8p?=

=?Windows-1252?Q?oHMoN0OoQfk3gn/Y5edOqkrOHZ67jFSNvB30SnBn6hOMxEaBqZsb2xvw?=

=?Windows-1252?Q?pVo5WwgYRm8iR5tCG/x5gJ7g1/k/El0gmmnzqwTmYb1S5NytcErVk1Ms?=

=?Windows-1252?Q?XfhFxBB7nT/uChG8kyWgvgLHL6Q=3D?=

Content-Type: multipart/alternative;

boundary="_000_TYZPR01MB3792912B840C399F12587C8FBAEBATYZPR01MB3792apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYZPR01MB3792.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 60cb5584-e84c-4d01-796c-08de0b126636

X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Oct 2025 11:11:10.6268

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEYPR01MB4926



--_000_TYZPR01MB3792912B840C399F12587C8FBAEBATYZPR01MB3792apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hello,



I represent a trusted Indian digital marketing and software firm. While rev=

iewing your site, we identified a powerful way to boost your visibility by =

combining Answer Engine Optimization, localized targeting, and advanced SEO=

.



As search engines evolve with AI like ChatGPT and Google Gemini, content th=

at delivers direct answers is gaining more traffic.



We=92d love to help with a custom AEO + GEO + SEO strategy. Can I send you =

a proposal?



Thanks,

Ajay





--_000_TYZPR01MB3792912B840C399F12587C8FBAEBATYZPR01MB3792apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Hello,



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

I represent a trusted Indian digital marketing and software firm. While rev=

iewing your site, we identified a powerful way to boost your visibility by =

combining Answer Engine Optimization, localized targeting, and advanced SEO=

.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

As search engines evolve with AI like ChatGPT and Google Gemini, content th=

at delivers direct answers is gaining more traffic.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

We=92d love to help wit=

h a custom AEO + GEO + SEO strategy. Can I send you a proposal?
>


Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Thanks,



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Ajay



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">












--_000_TYZPR01MB3792912B840C399F12587C8FBAEBATYZPR01MB3792apcp_--

Web/SEO/App Spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 14 Oct 2025 07:33:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1v8f8Z-000000008Hi-1UDL

for dave@doctor.nl2k.ab.ca;

Tue, 14 Oct 2025 07:32:23 -0600

Resent-From: The Doctor

Resent-Date: Tue, 14 Oct 2025 07:32:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazolkn19012061.outbound.protection.outlook.com ([52.103.66.61]:29308 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1v8a4l-00000000PkK-1UxP

for sales@nk.ca;

Tue, 14 Oct 2025 02:08:18 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=AWSjuBTLVux5AX7vv+2tNvhuBCKwAyQuFqTzAMTPkpswmZzTO2HGFWDLdwTE1h58PwrFxMQ8CMpsnlXL0g7p1rs2HAWVThmQLa9pInRfeWnTJd0nIu1efdGo9YY5+GBAkbOnD+tN71CYy+QRqTqIkED/1IQQvsp0sRzTCMV2xuBeSASmFfX5/6G2zd0nQoUyW5lFCoLjfmuU+GOof0/HEIWNEdHSayfzP8D6tBHbvbTKk0Z0LqGXZUMytZBIETf4ccUMH9gJVkBMcCFOABVvt4blESU4X4AhWpZ835XI4R9Ot99wVeRJm5mOqEA8+oqxhuBwYHWSSOxN2wve/HjPeA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=sz8BzLSvNflYBqWks9cn7NOFRzHyh+LPfKy9/67O+t8=;

b=OWlaot7uJx+Y4iuYUQZaL56RqfNmxRTxEZ8NXEqEpb+ZThI+eIbsI74em8vnkJhTJINwX7f0sopl9ajSMDat+7UqItQHK3aP8liV4i4VksspBoHoum+9sNreqntK5ZcMFuqEtD3oiYn4dpu5EWnxkMZwzCxUbrw/i4TmIgfNyGpU/NzjUN6i3pHQqF+oSHrh23Bl+ou38n2AGYOurn05fY/JjkFWIsUrMUWrS2z+zL5IHhovxdeT5/Ozjj0hcTbHk4OFHEYVf08CzfI0Rgi+XBnrImL4JLmYU0eGjXw3LJ927jPTqjF82fdaqMM4prFtv231LG9L4ydV7mwLVlNmMA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=sz8BzLSvNflYBqWks9cn7NOFRzHyh+LPfKy9/67O+t8=;

b=CY44N9zA2XGNu2onauIicIivYJw0usIUfkCScDZsYkSXnkJ/Z86QTiFdRD8dJV9GrgUA9WABtppcyRLMN01acukXRQU50RsLsvXQB5M6eP+bwWel8IeJa+c7XLEE0VQROUCYeYMQWwPfy0ggyeC3D3VzqapZ4AMLI3ERwLpOhaydV7eVmI/D1CfVpuKTZ28UrYABnCcXD4nK26Lo+rMoDQYNquGxqYiYPrdSO4ml+oacBp72Gr1mtXCGskkKaV98M4Yppi/iGu45DdC38Gq1jkMzeabiYjSOcX8+wy19Xd8369qi/Da7HSSPB38eQLYu2S/J9oNv25YMNNWeWaBCdA==

Received: from OSQPR04MB7840.apcprd04.prod.outlook.com (2603:1096:604:291::12)

by TYZPR04MB6104.apcprd04.prod.outlook.com (2603:1096:400:259::10) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9203.11; Tue, 14 Oct

2025 08:07:10 +0000

Received: from OS8PR04MB8394.apcprd04.prod.outlook.com

([fe80::5650:8891:f22e:6ba6]) by OSQPR04MB7840.apcprd04.prod.outlook.com

([fe80::5650:8891:f22e:6ba6%6]) with mapi id 15.20.9203.009; Tue, 14 Oct 2025

08:07:10 +0000

From: Namita Ramani

To: "sales@nk.ca"

Subject: ui/ux

Thread-Topic: ui/ux

Thread-Index: AQHcPN//GKUBg2MJpUiEl46JH/eDfw==

Date: Tue, 14 Oct 2025 08:01:47 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-IN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

suggested_attachment_session_id: 878565c6-e7e5-cf40-367e-db7ced68bee4

x-ms-exchange-messagesentrepresentingtype: 1

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: OSQPR04MB7840:EE_|TYZPR04MB6104:EE_

x-ms-office365-filtering-correlation-id: ede86326-fcf3-4e69-3d17-08de0af8acd7

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799012|15030799006|461199028|8060799015|8062599012|19110799012|31061999003|40105399003|39105399003|51005399003|440099028|3412199025|102099032|12091999003;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?APmGgqz7t1qru6a+QeX0kvC8nXEUhmzDmq65TKTmFoAnbrXyxk0F0YFK?=

=?Windows-1252?Q?uq50SByy3KwyTpaKLrmapksS4V3wRJb+HOvtGaQY6sqT5rLPTnNn3Yee?=

=?Windows-1252?Q?28BwmqKbJBvwuwBAdP8xvGwofVFVEkDcyyALAmxdoFqxGvE5L4KiN2d8?=

=?Windows-1252?Q?MKao7G+wMpfqa9/GYX4Rrg3gj2bv2rMvac5+HzjD1BqBOiFUS1jF+dda?=

=?Windows-1252?Q?MI7tFlCPXS3rRYcUAPNh+BEHb5E6AwLpfT91QZ0jPJwvVrFLFFopbyW2?=

=?Windows-1252?Q?XduRd5EA+h9XwFdWloIAeUMk+Jh6+oJc0rso76FrV/4uKkJiqL8cKLsN?=

=?Windows-1252?Q?24sHtEHF66Rf8Q2UIqFX4oi9+Ex5fjm+UTa/bNcBgDJWV4TnQ+Tubmxg?=

=?Windows-1252?Q?qSlAzM+tzxxmOi7Kb6ahIsmmQcaVP6lv4jRCJ/L8zA/aHCVvT7D7JrHF?=

=?Windows-1252?Q?qMIqJEZo51/NJK1H7NMDgmYEQO9XSTi4jdD07ttEj8alKUgyJYWi6g8T?=

=?Windows-1252?Q?zrVqe/ihYv/0M7zBWfi5lIX5w3M0p08aghjr/JX4KHAQDDFXFol28VpQ?=

=?Windows-1252?Q?ZjwL8/9Jvw2NB67tuzEE4rrwVf4GB+khtTYSCImGHalUKl7K9bboIzex?=

=?Windows-1252?Q?thCjVqWOhr+eyEU9wqGpcYlOx6VjEOhDBBi/c9rfhRBhS8obbPXdeOW4?=

=?Windows-1252?Q?6S0y0lKMM6AXWupAfPVEisUdBK17QsexYwx42gGA7Hj2hbjrLUVK0MVN?=

=?Windows-1252?Q?B60tSAXD4M4zptXfl2jx6tu1+9hTEOTkluQFKu5vSRLdUpIGmJ47Yyou?=

=?Windows-1252?Q?Sj0JpLwbY0zrs43rvPUtvmUyzXlHTggK1xwUn0haExkDQDGZbwvlgHds?=

=?Windows-1252?Q?AaHhOvOWnPeKMcgtuFRj4Dx9xXgf3RPSpFRMVerVJ37HGxGwA+EPEQQD?=

=?Windows-1252?Q?OBNlMX2eTwiWvvqKbBN5aEadiX542M/8b0YVWFPb4sgRXxzlJ774nJIW?=

=?Windows-1252?Q?bWHeKT14LfTIgwpl8hFI5I9zH5ZLS0VTF6x0pt6hKtf1ozOQdqR+9AzR?=

=?Windows-1252?Q?9vrC32Bcvt5r7QKhC5/HYD/AEs0LpJjrjBfTzrAJ4Xm3J7nsZCi1NL28?=

=?Windows-1252?Q?cNxc1By0Zg3bLJB5sybYqpgJD2LhG0nWuAb01To3wF1hoCDwyKxzwDkG?=

=?Windows-1252?Q?zOVh7ExYNOII5oEJFd7e1iOi1ZYknZfZGi3hJ+XxrpRX/pTttchJKJoC?=

=?Windows-1252?Q?q58xvU33DdG3Qfv9NWCqai+Gy9r/uNpwq6vmk8N8Xhq4PBPE2oLO/F6e?=

=?Windows-1252?Q?BrH0/H2taitqIzFM41rXSOJvUxLqIQNXeO8mqu5xxJv0ccBQWX8nIgSz?=

=?Windows-1252?Q?RPnjDr7GKqdPDw=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?3trxEFcqNsPVPBNxOwi3pCjAhWifXGg9p9R6PZ/wTPYl0SbgxK1ow2nl?=

=?Windows-1252?Q?Owt9C/OYFi0WksZAA6g9VOMLb/LlpM9zgKLEaDnRNUkRFzM2UjkHdkxa?=

=?Windows-1252?Q?zhPn5GFjo9KNr4dCSuz8kK80moek8Wu/xsD1Lv9UJKhPJMir8PgWbhnS?=

=?Windows-1252?Q?qUN/wRILm+S/snSOwlXqwUsxj+ZyE49PwUDfANzhW53sAiWxpXGAFJVt?=

=?Windows-1252?Q?NQjpBTmYNFzuTNVbzxRv7/PEj90nomTGDvO8dNRae7PxNu+3t200uxeF?=

=?Windows-1252?Q?7leg+iEfRPgMj3DlrqvS9rmgyktQtHly9G213bg8PaaLk8yRbuMU2CmI?=

=?Windows-1252?Q?Jh0jChwpYEB0rpV1lNliJasd9+lPPL0E9dbnJfZd1weokuA/vdUyhjU2?=

=?Windows-1252?Q?VZTpu1LIWfGbalEUgg65G/s9P7ImlryIhHFrCts82qJ104BE+eQgGcDI?=

=?Windows-1252?Q?3mZZrrbkBsuqcDm/Faxx757DXHWWdc+BJwLldHSEQC/xbAUw3qGk43no?=

=?Windows-1252?Q?FB9M/NvAMv3odv50QE9oFPWjGIzi0z6sjHafqt/jjc4HzpUCoNzrMZBw?=

=?Windows-1252?Q?z1reo10XJyhXIRXW055G1YQrbXfQT+bU5x5RG+scQwjbvyiorpRjVUZ8?=

=?Windows-1252?Q?Soy92yC5KRvIciBMbmktpjowdvTbcgugo9Qaa7upqJTWaokt/FFNc0s7?=

=?Windows-1252?Q?hQtu4M67CYP0wV2k0VC0tjHLdTDKlJAOdtRvZd5mutcluzlr+KLcMT7j?=

=?Windows-1252?Q?6vNP3zTDR6bD5j9pnzmHHUK9vetNCGQI9cb3mDvSKVBeBrkP7b71cmX2?=

=?Windows-1252?Q?0YHeyUp+OBqVxm1kBhtsYSeSY1cb+0FSE/SLKiij7B4dbZhNKv2am2jX?=

=?Windows-1252?Q?1GXfVhRTro1qsDR88LD4ZgBxx4PWqWOdhi5VoBrUCqsohKCYF0plNesp?=

=?Windows-1252?Q?/vNt8h6RGlXSlpIDsLnRRkMLFBTsbmW40SJGLQx9/cZqRvGH7XVtf/7V?=

=?Windows-1252?Q?XRVgQg4JjryB83cVjh2kL2PyY7FQSemDA9ymWdplArRszQftUzzWD6ht?=

=?Windows-1252?Q?YyhtcTkA9yyfnlxZRZ/1ciBAAxX3iBn7PyEulN9Ef5M354FrRTEnEL2k?=

=?Windows-1252?Q?bTfu6IG3MCOBJcu2lm5ABnF3vhbfnIyZsCGTslIz99xC7FklC22BhMWz?=

=?Windows-1252?Q?Q+F78Dkiuzo2SKFJ6ddcI1I6/ME5lS9yPvHU4jQll1PxnQTvbrT5oQ?=

=?Windows-1252?Q?=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_OS8PR04MB83946D72B146B1548DF676A4A0EBAOS8PR04MB8394apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: OSQPR04MB7840.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: ede86326-fcf3-4e69-3d17-08de0af8acd7

X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Oct 2025 08:01:47.2019

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR04MB6104



--_000_OS8PR04MB83946D72B146B1548DF676A4A0EBAOS8PR04MB8394apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



I=92m Namita, a UI/UX designer with 14 years of experience. If you=92re loo=

king for a new website or a redesign.



Let me know your needs (service or product-based), and feel free to share a=

ny reference sites or details.



Looking forward to hearing from you!



Best,

Namita Ramani



--_000_OS8PR04MB83946D72B146B1548DF676A4A0EBAOS8PR04MB8394apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Hi,



Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

I=92m Namita, a UI/UX designer with 14 years of experience. If you=92re loo=

king for a new website or a redesign.



Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

Let me know your needs (service or product-based), and feel free to share a=

ny reference sites or details.



Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

Looking forward to hearing from you!



Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

Best,



Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">

Namita Ramani








--_000_OS8PR04MB83946D72B146B1548DF676A4A0EBAOS8PR04MB8394apcp_--

Oral-B Health Kit Phish from Microsoft

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Oct 2025 23:24:58 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1v8XWV-000000002AL-3UYV

for dave@doctor.nl2k.ab.ca;

Mon, 13 Oct 2025 23:24:35 -0600

Resent-From: The Doctor

Resent-Date: Mon, 13 Oct 2025 23:24:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-southcentralusazhn15012047.outbound.protection.outlook.com ([52.102.140.47]:49807 helo=SN4PR2101CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

id 1v8TRC-000000007xM-3wdR

for doctor@doctor.nl2k.ab.ca;

Mon, 13 Oct 2025 19:03:00 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=OtPzQX8CI7DwNVG6lkNQEgf7rCj6UUMiUm9kA1SNJ5lVDVQ/HXa0V3EM2hlHNaiIyu2DY/9kN5UphGIMx044eCYGhi48T+lw3eFozzqSWcjCOXYFJzq4lNENlI+mCRrlNsORgGv52FW8yXdd12QtFFMJgB9UkzrecL9o7hvmfmGbLJu7SCMLuLV/WwEElqENBerGaD7IKTuStp8agWvq/5qI4Reose+l2PH/uAJZ5f24S56U7/uFqiA8gOO/I+UEjYUcVW4Gd0N6wcpZ3Pu7ec+vIDiNBoWC6Mx7Pgxqo31aIQOVbwB8NDM8Prerc9Mknz2D2bq3Wrr8qMqLmM+/9Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=G6folKTMrYNlS5b6wGEckauJpW+e01dxyGo1AdFJ8YA=;

b=WMrpNkqeK6TXmdDZiXL2J070hlGVlVSlS7sq0v6w0fqgkaxWURyR1arwJfcO5kEboXg4+hacIlhCg/iaUsRj7DqpeCVnpkBmTFZ/Ti7c8Bjq//ePDfpZMndbdpNwNi8zXq1Vw0yv9qUgQ0lzPoItFMBu0YzeeM0ZBA9q/W4p9KRluOsP5eQMH7WhGDIKjQ8FPGWFl0u/zh8f/wJFd1qALAXDKrrHw3CfJNu6LNiS2p8I7aSTAEOhq7UunQujBT0WPe0aIGtAsFoMiBK1tlzamTe09y6kZ0W+dCKs+i11c8Qy0ViPzrMK9l5r6piCwnFsaRUL5laGAjjEP0CEo7ac3w==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=softfail (sender ip

is 103.6.170.108) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.helo=bekn30.russanassa.ru.com; dmarc=none action=none

header.from=bekn30.russanassa.ru.com; dkim=none (message not signed);

arc=none (0)

Received: from MN2PR14CA0017.namprd14.prod.outlook.com (2603:10b6:208:23e::22)

by CY5PR15MB5437.namprd15.prod.outlook.com (2603:10b6:930:3b::17) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9203.12; Tue, 14 Oct

2025 01:01:55 +0000

Received: from BN2PEPF00004FBD.namprd04.prod.outlook.com

(2603:10b6:208:23e:cafe::ad) by MN2PR14CA0017.outlook.office365.com

(2603:10b6:208:23e::22) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.20.9203.12 via Frontend Transport; Tue,

14 Oct 2025 01:01:55 +0000

X-MS-Exchange-Authentication-Results: spf=softfail (sender IP is

103.6.170.108) smtp.helo=bekn30.russanassa.ru.com; dkim=none (message not

signed) header.d=none;dmarc=none action=none

header.from=bekn30.russanassa.ru.com;

Received-SPF: SoftFail (protection.outlook.com: domain of transitioning

bekn30.russanassa.ru.com discourages use of 103.6.170.108 as permitted

sender)

Received: from bekn30.russanassa.ru.com (103.6.170.108) by

BN2PEPF00004FBD.mail.protection.outlook.com (10.167.243.183) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.9228.7 via Frontend Transport; Tue, 14 Oct 2025 01:01:53 +0000

From: United Healthcare Travel _Deal

To: doctor@doctor.nl2k.ab.ca

Date: Tue, 14 Oct 2025 02:57:15 +0200

Precedence: bulk

Content-Type: multipart/alternative; boundary="47429814580=dvykzclxwuvkzkkuakzlmf"

Subject: A Free Oral-B Dental Kit For_You

Message-ID:

<6190ef25-e2de-46d4-aacd-d9c210b8cc3b@BN2PEPF00004FBD.namprd04.prod.outlook.com>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BN2PEPF00004FBD:EE_|CY5PR15MB5437:EE_

MIME-Version: 1.0

X-MS-Office365-Filtering-Correlation-Id: c52e2d3c-04f6-4e16-9508-08de0abd442e

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|1032899013|82310400026|376014|586017|34070700014|61400799027|69100299015|35950700016|8096899003|2066899003|4076899003|15920700032;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?R3JheVJwL29HL0NwTFpOaHNHejJiT0VrbFcrcXhoTFVOYTJxY29VMGNuWC9v?=

=?utf-8?B?aFNVR2FQS2FWM3dCeU90eVVBTTdETkRXKzFtdTVYUXhyWE41MmhhZHhPRmow?=

=?utf-8?B?RjAwdHRlMWxSVEk2SDNRT0dMRlZ5eWJDTFFnRlZ3eXNLYVFabVI4TTBYb2ZF?=

=?utf-8?B?YjhFRjhEeVNia0l0R1pKTGoxVzJYMUtLaXhYanIvbUlHcnpyb3JRdWJPUFVn?=

=?utf-8?B?SlNlWDIrbC9tSkkzTmZoU0FyZmNHUmNJdWpFdFZ6azNQdk1wem9pcElvU29D?=

=?utf-8?B?ck5ucXB6VEsvaWpheWZDVUluelNicFZrMENtTnB4VHNweWJPQzZaOUZKMzl3?=

=?utf-8?B?UVBaemFiUDlBVWNUWExBcGtYSDhrME5GWkxrVnBBN0F2N0FBRjNrL2orYjR4?=

=?utf-8?B?THFUdW13bGZBeVRkWjBHSG1DS1o4Smp3eXhJZVhPdE9Na0MrRFRJWHJiNGw2?=

=?utf-8?B?Rk9tbmUwZEx3TzdIelZTZzdWNGc1dFFRbm9VMUVBaHFkRStYbG9Jc3l0THpC?=

=?utf-8?B?c3VqSW16VGxwNmxwMEhtOWFLSnVxaGwzQTJjcktlUU1nc1oyZ0d0cE1KWnhP?=

=?utf-8?B?OUtoMEp4TUtWMGx3V0VDZW5MSy9VcjliRkUyMSt3VFpmL0krUnIxaHFMcmxS?=

=?utf-8?B?cFlja01ZcXpLRGRWZ1VxZ2pDN0p0c0hibjRUNHNIejVBY0tueVduZUFPeGVW?=

=?utf-8?B?MXBDSVpYeFNyTVBIR0czbnpNNlpZWUphbDJoakRaWU5LdFVMbHVXd2VaOUUr?=

=?utf-8?B?THg2SlJlQ09LeDVmNkRMRmVVOGUrMmlsWkN2USthaEJORDJNRmlRZGlkZkpO?=

=?utf-8?B?aHYyaUZqUmI3cXdjZ2tJcE9NbnN6TlQ1L08yK2RPeEtsLzBNZFhSK2VqRkkr?=

=?utf-8?B?YzFUTm80STZ4MkJ3b0g4dU1ybzROK2ZHQUZvcXdYZlJ2QmNhUC9wV3JGTFpt?=

=?utf-8?B?aDMvdU83NVlIanZSalFvV05pUkdoWHZLSlRtZGVPbE8vYWd5L0pVdWpvNENu?=

=?utf-8?B?bkxmL0JkNFBya25ZWTRuSmdUZ2ZRUUh1SGREK1ZwQnRXeVM3QWlPZkZxY3pI?=

=?utf-8?B?SWt4TExGeEFjUEs1eC9YcnVIRlY0VEJOc0EvYVQzMzVQempObTBuSThQblRC?=

=?utf-8?B?QTRDcGpRUHh1TzFTdlQ4YWd0UmtxR1JPMGlNUzMzMXJtSUFCK1kzdHNVRjQr?=

=?utf-8?B?TEVNQmlXWHVkcU9QVVpCYVdWQndwdjBENS91enhyUGhYTE4zMVd3cDhzY2RZ?=

=?utf-8?B?MTFYdUx3dzMyQnlSb0p5VS9uWUNoNHBSMUxpTndIbmdpVmgrRGZhS0JleG02?=

=?utf-8?B?aHo4R25mTTZrVXNpbVNoTEZyRXJDT1FNUFZYTktGSHd3NmxTUjAxblpzRmQ3?=

=?utf-8?B?b1NGd1Z0NjJ6RmFTWi9vSHZFK0tzOGlENHpiajNnOCtnVDNRbXRaK2Iwcjhw?=

=?utf-8?B?NjZqTDhaM3Zja3pQaFNkKzdPZEtLWGJJcDVidmR1UkROelZIRGVIbENWYWxJ?=

=?utf-8?B?a1ZQeW1KVTZXZWN1Wk93RnUxMDljTlZOZjdNZkZaQUswMjg3RUlLWWlvbUxS?=

=?utf-8?B?WmVZTU9PRi9aSlN3eTJGUk91ZEs2SC9hWFU0ZUFoeGhSZHkvcGlvMGtaVXps?=

=?utf-8?B?WW9samZ5YnJHdWRMR3BKbE1jSkx6U1dnazBCeDlhYlB1TldBQ3ZYSFMvbk1C?=

=?utf-8?B?bG9sa1c0K0pQOCt3RWNOejNxSENMckJVa05SVHdqYWdBTVMxSlhZZjZhMWpM?=

=?utf-8?B?Sm5vWHNRZjJMa0FCNWZHcU1ubGxvUFlzY01malpmU01BM2ZSa3dCb1J5VjA3?=

=?utf-8?B?SkV5TFJBSm5rOTZGRHBmQXBJYTE5R1pyZTMxbGw5V3pIdE5YazlIU2RDT0RL?=

=?utf-8?B?ZTRLZjIyOGQ0aDBGbG5URmZpSkY0aFFRS216eUEyWktpVDVocXltdE4waG95?=

=?utf-8?Q?ddNIKp1o1YE=3D?=

X-Forefront-Antispam-Report:

CIP:103.6.170.108;CTRY:AU;LANG:en;SCL:1;SRV:;IPV:CAL;SFV:NSPM;H:bekn30.russanassa.ru.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(1032899013)(82310400026)(376014)(586017)(34070700014)(61400799027)(69100299015)(35950700016)(8096899003)(2066899003)(4076899003)(15920700032);DIR:OUT;SFP:1501;

X-OriginatorOrg: bekn30.russanassa.ru.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Oct 2025 01:01:53.6304

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: c52e2d3c-04f6-4e16-9508-08de0abd442e

X-MS-Exchange-CrossTenant-Id: 9aaad58e-73fd-4cc3-870d-5b4edeab7a69

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=9aaad58e-73fd-4cc3-870d-5b4edeab7a69;Ip=[103.6.170.108];Helo=[bekn30.russanassa.ru.com]

X-MS-Exchange-CrossTenant-AuthSource:

BN2PEPF00004FBD.namprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY5PR15MB5437

X-Spam_score: 17.5

X-Spam_score_int: 175

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: March 21, 2017 Dear Students, Faculty and Managerial Staff,

AUB is in the final stages of implementing a robust online learning platform

that offers a suite of on-demand courses appropriate for highe [...]



Content analysis details: (17.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.6.170.108 listed in will-spam-for-food.eu.org]

[103.6.170.108 listed in will-spam-for-food.eu.org]

[103.6.170.108 listed in will-spam-for-food.eu.org]

[103.6.170.108 listed in will-spam-for-food.eu.org]

[103.6.170.108 listed in will-spam-for-food.eu.org]

[103.6.170.108 listed in will-spam-for-food.eu.org]

[103.6.170.108 listed in will-spam-for-food.eu.org]

[103.6.170.108 listed in will-spam-for-food.eu.org]

[2603:10b6:208:23e:cafe:0:0:ad listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:23e:cafe:0:0:ad listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:23e:cafe:0:0:ad listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:23e:cafe:0:0:ad listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:23e:cafe:0:0:ad listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:23e:cafe:0:0:ad listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:23e:cafe:0:0:ad listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:23e:cafe:0:0:ad listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:23e:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:23e:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:23e:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:23e:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:23e:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:23e:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:23e:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:23e:0:0:0:22 listed in]

[will-spam-for-food.eu.org]

[52.102.140.47 listed in will-spam-for-food.eu.org]

[52.102.140.47 listed in will-spam-for-food.eu.org]

[52.102.140.47 listed in will-spam-for-food.eu.org]

[52.102.140.47 listed in will-spam-for-food.eu.org]

[52.102.140.47 listed in will-spam-for-food.eu.org]

[52.102.140.47 listed in will-spam-for-food.eu.org]

[52.102.140.47 listed in will-spam-for-food.eu.org]

[52.102.140.47 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.102.140.47 listed in dnsbl.ahbl.org]

[52.102.140.47 listed in dnsbl.ahbl.org]

[52.102.140.47 listed in dnsbl.ahbl.org]

[52.102.140.47 listed in dnsbl.ahbl.org]

[103.6.170.108 listed in dnsbl.ahbl.org]

[103.6.170.108 listed in dnsbl.ahbl.org]

[103.6.170.108 listed in dnsbl.ahbl.org]

[103.6.170.108 listed in dnsbl.ahbl.org]

[2603:10b6:208:23e:cafe:0:0:ad listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:23e:cafe:0:0:ad listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:23e:cafe:0:0:ad listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:23e:cafe:0:0:ad listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:23e:0:0:0:22 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:23e:0:0:0:22 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:23e:0:0:0:22 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:23e:0:0:0:22 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.102.140.47 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.102.140.47 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.102.140.47 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.102.140.47 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.102.140.47 listed in list.dnswl.org]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.0 HK_RANDOM_FROM From username looks random

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.102.140.47 listed in wl.mailspike.net]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

2.0 MIXED_HREF_CASE Has href in mixed case

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 FORGED_SPF_HELO No description available.

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.8 COMBO_IMAGEONLY1 Appears to be an image only message

Subject: {SPAM?} A Free Oral-B Dental Kit For_You



--47429814580=dvykzclxwuvkzkkuakzlmf

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 7bit






























--47429814580=dvykzclxwuvkzkkuakzlmf--

Coinbase phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Oct 2025 23:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1v8XVA-0000000024F-2NqM

for dave@doctor.nl2k.ab.ca;

Mon, 13 Oct 2025 23:23:12 -0600

Resent-From: The Doctor

Resent-Date: Mon, 13 Oct 2025 23:23:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps66757.dreamhostps.com ([66.33.215.180]:41576)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1v8PNH-00000000Pnw-19xa

for sales@nk.ca;

Mon, 13 Oct 2025 14:42:38 -0600

Received: by vps66757.dreamhostps.com (Postfix, from userid 6854386)

id 4clpxH4j6Nz6DvFK7; Mon, 13 Oct 2025 13:34:43 -0700 (PDT)

To: sales@nk.ca

Subject: Critical: Unauthorized Device Login Detected

X-PHP-Originating-Script: 6854386:xns.php

From: Coinbase Login Alert

Reply-To: dh_iivpgq@vps66757.dreamhostps.com

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Message-Id: <4clpxH4j6Nz6DvFK7@vps66757.dreamhostps.com>

Date: Mon, 13 Oct 2025 13:34:43 -0700 (PDT)











⚠ Urgent: Coinbase Account Security Alert



















































Coinbase

⚠ Urgent Security Notification



Immediate action required — unauthorized login detected


Dear User,



We have detected a critical security event on your Coinbase account. Someone just attempted to sign in from a new device or location that we do not recognize.















































📍 Location: India
🌐 IP Address: 49.128.161.134
📱 Device: iPhone 12 Pro
🖥 Browser: Safari
📅 Date: 13 Oct 2025 — 09:26 AM (UTC)






🚨 If you did not authorize this attempt, your account may be at risk. Immediate verification is required to prevent access suspension.









📞 Call Coinbase Security Team Now







If this login was made by you, please disregard this message. Otherwise, act immediately to secure your assets.





🔒 Coinbase Support: +1 (945) 360-7329


© 2025 Coinbase. All rights reserved.


This message was sent to notify you of a potential security threat. Please act immediately if the activity was unauthorized.






oil investment spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Oct 2025 23:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1v8XVh-0000000026E-2ysv

for dave@doctor.nl2k.ab.ca;

Mon, 13 Oct 2025 23:23:45 -0600

Resent-From: The Doctor

Resent-Date: Mon, 13 Oct 2025 23:23:45 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vk1-f176.google.com ([209.85.221.176]:47532)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1v8Qm6-000000005ll-0uxZ

for root@doctor.nl2k.ab.ca;

Mon, 13 Oct 2025 16:12:23 -0600

Received: by mail-vk1-f176.google.com with SMTP id 71dfb90a1353d-54a79cadd1fso2602850e0c.3

for ; Mon, 13 Oct 2025 15:11:26 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1760393480; x=1760998280; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=XSixMYvcYHnJcD3f3azru1R6lfF8zlBx3qyDgLo3gB4=;

b=QQK4SMfSDIm383SmtD5fwynsysyl7qDAErgclfY+4gPN4qTV2DyeUbKCAn8gr/kD4e

F3J9Pk85MxtRWk3JjoTfEbTxDIE51kPzU7KgshiCgj2waqMKYLCspTlPH87rvt9zIq+c

OzYg76ij88ApDcE1oUfL+R2wJHWBpakPYlHbd8JQR0/U2Q6eeax4I14G09t+RvspsBAO

QMgY3+7z5Zc3br1+mt6JFGziCn/q3QGI23YLepEZw979onEqJeJkEgaN72peitk+RuQx

b7sX1RejgpGjajiaYkL+eSHQq/LeI2xHToR0NS/OU6Dm7wgDgWxRkWk03XvvlmjiJUjs

eqVQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1760393480; x=1760998280;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=XSixMYvcYHnJcD3f3azru1R6lfF8zlBx3qyDgLo3gB4=;

b=FMm5tZ0s7BfQyPybXrfAiD02Y+yrRpXuFMCfYJJN9PnFKsUY2ANSjlM+2VF7H0b/Ei

BAk9JP0bsGHj+EQWP4VT2+lXnaynzvMKlLwh1OtyYnaPOph+M8CVNjb+eP1uhLwUMpnf

r4n4+YFpfU/Mh7U4cK1dZaK91PH+mwsFDcUhJPQeXjpaurvqZPKk7H2cvff9uZiKJvbO

HjFfgvnceMGNPcOG7f8zMEPKPSI0lJJsEW/KzPq6RmwD7xVBXBujS2w0YpDZq6llW96D

p8BbwkKui7oEZuLyl1LdRUkJ65Vifxlyf6LpB5JJ0hlhStDlHt7gvP7+Wuhq4pJZt+9S

TlXw==

X-Forwarded-Encrypted: i=1; AJvYcCXKpnyUk6kvtazAdUVedG6EZlWYwbhng8klFclqjloTKYpeJ8QlBTPVdooWs1lQ1L5K1hg1@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0Yw9yekY0mbcV8MK3+B7Wi5aBFmC93EDZVhKOWMiFvqqfukWkmxu

nHAFIySu2MM+mDXPaMJMisInLTbGR+9goAHkM7DejzseuqMjV7sNnlvotP/zHMr5oxkmEqAW0yF

UGbDzBq/6kKLxEcQCJ1bJQF9j80vWMag=

X-Gm-Gg: ASbGnctAfdlieq0U9uoXdye1I7NiF6pBR+X+ARFdgJ/uk7I1KLXGYxFnRlBUASENQLE

fRXQ0ZBulGsm1W8VwqVEas72BwOlVFY+LcnvGYI/44dR8P8liGz2aZZxVCLWAz3ZIVCUnlGDJIm

RzQBM/zAjrNuKShctRxQOSlCxBvOjBMyC1n81W/tRjdJ1+uS1yuKKEpElaftSIDigS2X+SR7Xw2

w5MOnSR7/O3sKDFD/l9wK7BMwxdbA80UID2/tFI0Zw79bSdWtTtBskG6aOCoswwDlxBIYTLioA=

X-Google-Smtp-Source: AGHT+IELn+dgM62MIiaL/ui/hFltABCB9S0Dwt4tKjyay9vm9nSFpt3QvVzDaQMujlifqRlbWNtsgJVIFSoXawDiZ2U=

X-Received: by 2002:a05:6122:1683:b0:54b:bf4d:558b with SMTP id

71dfb90a1353d-554b8b8cf48mr9208016e0c.10.1760393480375; Mon, 13 Oct 2025

15:11:20 -0700 (PDT)

MIME-Version: 1.0

Reply-To: ramcooil344@gmail.com

From: Ramut ramcoil

Date: Tue, 14 Oct 2025 01:10:14 +0300

X-Gm-Features: AS18NWC4WWr8fcx0w_f9wNFHjRP3kI8Qi--M_b5Ljtfjqsl5wjrclBfa2Y38GJk

Message-ID:

Subject: Petroleum available for only serious buyers

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000010138a0641118ca0"

Bcc: root@doctor.nl2k.ab.ca

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: I represent major Petroleum Refineries in Rotterdam/ Russia

Kazakhstan that export petroleum derivatives to any part of the world. Our

titleholders producer refineries are ready to deliver your purcha [...]



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.176 listed in will-spam-for-food.eu.org]

[209.85.221.176 listed in will-spam-for-food.eu.org]

[209.85.221.176 listed in will-spam-for-food.eu.org]

[209.85.221.176 listed in will-spam-for-food.eu.org]

[209.85.221.176 listed in will-spam-for-food.eu.org]

[209.85.221.176 listed in will-spam-for-food.eu.org]

[209.85.221.176 listed in will-spam-for-food.eu.org]

[209.85.221.176 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.221.176 listed in dnsbl.ahbl.org]

[209.85.221.176 listed in dnsbl.ahbl.org]

[209.85.221.176 listed in dnsbl.ahbl.org]

[209.85.221.176 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.221.176 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.221.176 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.221.176 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.221.176 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.221.176 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.221.176 listed in sa-accredit.habeas.com]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.221.176 listed in sa-trusted.bondedsender.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.221.176 listed in wl.mailspike.net]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[ramcooil344(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ramcooil344(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[ramcooil344(at)gmail.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.221.176 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.221.176 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to

Subject: {SPAM?} Petroleum available for only serious buyers



--00000000000010138a0641118ca0

Content-Type: text/plain; charset="UTF-8"



I represent major Petroleum Refineries in Rotterdam/ Russia Kazakhstan that

export petroleum derivatives to any part of the world. Our titleholders

producer refineries are ready to deliver your purchase order product to any

safe world port on CIF and FOB transaction term We offer. Fuel A1,

ARABIAN LIGHT CRUDE OIL Aviation Jet Low Sulfur Diesel EN590 D2, Gasoline,

Automotive Gas Oil AGO Liquefied Natural Gas LNG, Liquefied Petroleum Gas

LPG Virgin Fuel Oil D6, EN590, Petroleum Coke.



If interested in any of our products listed, You can send us an email for

SCO

Alvin P

Email llp_ramco_oil@mail.ru

Email: ramcooil344@gmail.com



--00000000000010138a0641118ca0

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



I represent major Petroleum Refineries in Rotterdam/ Russi=

a Kazakhstan that export petroleum derivatives to any part of the world. =

=C2=A0 Our titleholders producer refineries are ready to deliver your purch=

ase order product to any safe world port on CIF and FOB transaction term We=

offer. =C2=A0 Fuel A1, ARABIAN LIGHT CRUDE OIL Aviation Jet Low Sulfur Die=

sel EN590 D2, Gasoline, Automotive Gas Oil AGO Liquefied Natural Gas LNG, =

=C2=A0Liquefied Petroleum Gas LPG Virgin Fuel Oil D6, EN590, Petroleum Coke=

.

If interested in any of our products listed, You can send us an em=

ail for SCO
Alvin P
Email=C2=A0
u" target=3D"_blank">llp_ramco_oil@mail.ru
Email:=C2=A0
ilto:ramcooil344@gmail.com" target=3D"_blank">ramcooil344@gmail.com
v>



--00000000000010138a0641118ca0--

Request for contact spam from google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 14 Oct 2025 12:17:00 -0600

Received: from mail-lf1-f51.google.com ([209.85.167.51]:50636)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1v8jZa-00000000Itl-1ClR

for dave@doctor.nl2k.ab.ca;

Tue, 14 Oct 2025 12:16:43 -0600

Received: by mail-lf1-f51.google.com with SMTP id 2adb3069b0e04-57bd04f2e84so6290436e87.1

for ; Tue, 14 Oct 2025 11:15:47 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1760465740; x=1761070540; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=iSb/sYUyJe5bRfmeP4mxG+TuLqH9c0rM3LaDOurJ3hc=;

b=fvKPQyQnCvCxdUxgV9F+/cXzMYYk+4dfTU5qRBNhZnWbIWubVhQHNg4t8MlgVlCuta

ECs9Qwno8Q/2hUhbUB8kPboP8QvCkibbU+VnReAdKeOWGq71tq6YCBtKmvj+E8N43dZP

xtlmpDNF/IEhzPep1U5+OCE6aGCXUSvNBsS71sOMCM9a6Vmw+bHkOG+CaugAtqqoDMwb

c/N9B6T+zcyrcoZNr9fvzofaDy1aHhpy+fS7rcT+Vj98Z4Nq8QFMBA6O+SJIiRsNfvEB

0YMWU3le1p+duZzzucYxp2fWaaJYa+bNfiE5x7fs0kO4jV5yK+TaoJWZMN4fsDTG8WuV

c65g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1760465740; x=1761070540;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=iSb/sYUyJe5bRfmeP4mxG+TuLqH9c0rM3LaDOurJ3hc=;

b=dcqYv/jJZTKxw8PhJqcAHwvkEN8CSZTWLuG3uzEliOntmWCrVvgjbw3gZ/axLPurIO

8RsgcoLl68GPDtNCIaohQt1+6toNVQ5nJCKfu//eJKJ4gwhmAWOS1W8THHsHuCCXtu5u

VfXo5jqNnc5EKKQIQoqSv8p/nFEGFUf7w03HmEe7r+oisHKU3d29tihTe5jizrp6P1+B

T2YCOP4kEeEd6vI2/+3m2b9GINy2VeLXLZqCBPjxRlkRg6nzfSaHGvo5H/brZKYAPYE3

EYN6F2NCRPp4URa67jdQ3lr3j9RPEt39SN3eZr0KSPyiCgy3dDjZtjzGGgP3EXF1rDMP

rg5A==

X-Forwarded-Encrypted: i=1; AJvYcCWqjpSuyIPK0+lfovORhKxn77jo+apmEvZOlvq0fwejjg0Bj9n7lXmvDJi5KmML/r5apPCn@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YxZJkMsRPDDwfyHlNNq7L0xOKNNQIa/idvdRdgjMYhDj3qUdW9F

rc2CmC6sT2TJcZUOnbUB5o6JTHJkZ48N1tFqyd7avMQZ58tcc78+W3s6ivB/s8l2JPAgrmInsuz

jZKW9HSoecIKLVM4eGSc44XuCuWzMFn8=

X-Gm-Gg: ASbGncuC7nkVsIjW4674lMKPjQLtGpWU0iGtaa3x4j4DdaxBGGIzVG0ZfjIJhc7BN/y

ZeGkrUO33WtXl/4YJ2sx8LDobVa/xEK+SCMvGrHPb//D0uJiBowfLomlYjH+4wOZ/gUdp9sLKVs

rsRdjJi8T179DXklI0OcJjHVwv9DY+1avY/BzvdcAjS8ieDECfYWfCrotVsJb+1LqzcIcy3ByAT

wW07xFPuBiSFMWcYT4gHU4KmjLAGSQ=

X-Google-Smtp-Source: AGHT+IG3kb82w2TaWmi4nhqtBXDzSyBGekvqaxKWRvfLAPAowHZT+ttn2vw9WlAW0kmlsvP86OJ2osALCQXHYVRuf4c=

X-Received: by 2002:a05:6512:3993:b0:57b:4a3f:f8c4 with SMTP id

2adb3069b0e04-5906dd763e0mr7648154e87.45.1760465740139; Tue, 14 Oct 2025

11:15:40 -0700 (PDT)

MIME-Version: 1.0

From: Ellen Miller

Date: Sun, 12 Oct 2025 20:13:58 -0700

X-Gm-Features: AS18NWDRzqgDgj6Lo8kK1ua-tECJxSl5aoXasodUVHf3FFpXkFv2f-EvvmpbrE8

Message-ID:

Subject:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000148ffd0641225f51"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 7.0

X-Spam_score_int: 70

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi dear, MyName is Ellen Miller, can i talk to youi? Hi dear,

MyName is Ellen Miller, can i talk to youi?



Content analysis details: (7.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.51 listed in will-spam-for-food.eu.org]

[209.85.167.51 listed in will-spam-for-food.eu.org]

[209.85.167.51 listed in will-spam-for-food.eu.org]

[209.85.167.51 listed in will-spam-for-food.eu.org]

[209.85.167.51 listed in will-spam-for-food.eu.org]

[209.85.167.51 listed in will-spam-for-food.eu.org]

[209.85.167.51 listed in will-spam-for-food.eu.org]

[209.85.167.51 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.51 listed in dnsbl.ahbl.org]

[209.85.167.51 listed in dnsbl.ahbl.org]

[209.85.167.51 listed in dnsbl.ahbl.org]

[209.85.167.51 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.51 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.51 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.51 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.51 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.51 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ellenmiller447(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[maimilove08(at)gmail.com]

0.5 DATE_IN_PAST_24_48 Date: is 24 to 48 hours before Received: date

0.0 HTML_MESSAGE BODY: HTML included in message

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.51 listed in wl.mailspike.net]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?}



--000000000000148ffd0641225f51

Content-Type: text/plain; charset="UTF-8"



Hi dear, MyName is Ellen Miller, can i talk to youi?



--000000000000148ffd0641225f51

Content-Type: text/html; charset="UTF-8"



Hi dear, MyName is Ellen Miller, can i talk to youi?






--000000000000148ffd0641225f51--

Web/SEO/App Spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Oct 2025 08:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1v8Jrk-000000003Bd-3BN4

for dave@doctor.nl2k.ab.ca;

Mon, 13 Oct 2025 08:49:36 -0600

Resent-From: The Doctor

Resent-Date: Mon, 13 Oct 2025 08:49:36 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreasouthazolkn19010002.outbound.protection.outlook.com ([52.103.75.2]:38792 helo=PUWP216CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1v8IWq-00000000Km0-1rvn

for sales@nk.ca;

Mon, 13 Oct 2025 07:24:06 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=TQESL2cmE/XiPWMFeHP7UFvqJWo9IbYudjRsKHNQ3FAlxBiL6q9p1jN52PQNoFEOki3dWU3PfVKd5bbKZHYqBp9QeKaSCLeBetr5xxGNzKyMtSfQOHIYRqzHBg/ElvoUbwTWIfKJhLObmSpPIwZvql2jELLWV7rXxXus9alkKbbLUHlxbKXLElMUjAcnsjzf5t2YG9Sc9S1zVco/NDHeuDkvguI225Vf3/OULrAr9t/thXh8FtbuoRVuFrTGJaKUbXJEFUtGG2DLrAqXJB9gX+iMqp0rWViHb+oXtLmadqblmPqp7FLx6GBABDRZngmpEhLxvdwDdFmzVVILMC7MVQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=6jOw2lOvcQUQfKk0AYEqngh1/W1uo5bCGD+WzM2QVwM=;

b=t3OEbW2oCRdmRaA1jR7ETqqsuHZn9pE8/h6bXgrhMnQ0Kx3cTG+/KBtogxzTI9sSJmRGHTifQfS/Gz7t9130swM3LVx/wgA/IPKdPswsvcfrrgCe8nf0MTxFqcz6ZHARQOJpF97M9yI/azMxqgBp8ftj3PQIaUjBORG5dDTnsl1+gAgNiByvyn9UyDB183opKC5w5cFffPvvWQkxyVJAUhtRJDxbmuyjdHkjba9p15GclG+CZkR94MdY0dPHx2fsnR1njk4NX8uiSqrgCUxOwPyee+Dl0FPZGzPLgFdw/4zb/MujJaPrULTxttEhjrt3IByZaNSUYhIxK6v9s+fbhQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=6jOw2lOvcQUQfKk0AYEqngh1/W1uo5bCGD+WzM2QVwM=;

b=FD3e3nxvKLDU2CMVcqpi9PBtDUMK7BOC6k9fQYUVS6gdQi8ncBBo8FWw7l1Q73r7gtST78gYVSNjNZET49HgaFLX477J0ymAZcJBb8FU1EpT6qB8TyppV4B+89z8Ld5/f1+umIttvYAD1qEeyZCsrW3HanOMd8kw/pij1gSqIB4bzhFizdvbVWGmS9UiwMi17es0BeZOY/rtZqxc23+R3kDryyOhg0XAFe4xqOg9oscFvzzvIqw90GAnZ+g6k5Oi1WTA32I89CHZupA5vw1tdw050DtC66pfnKM184jw4UisazoJ88Arf0Jk2VvTiKbNsRcPVFa+RVKWpBz2p4uTcw==

Received: from SE2P216MB2696.KORP216.PROD.OUTLOOK.COM (2603:1096:101:1c0::10)

by SE1P216MB1302.KORP216.PROD.OUTLOOK.COM (2603:1096:101:16::8) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9203.12; Mon, 13 Oct

2025 13:22:19 +0000

Received: from SE2P216MB2696.KORP216.PROD.OUTLOOK.COM

([fe80::57fd:3a98:c17f:da9b]) by SE2P216MB2696.KORP216.PROD.OUTLOOK.COM

([fe80::57fd:3a98:c17f:da9b%6]) with mapi id 15.20.9203.009; Mon, 13 Oct 2025

13:22:19 +0000

From: Jamie webllc39

Subject: =?Windows-1252?Q?Re:_Yes=A0Please...=3F=3F=3F?=

Thread-Topic: =?Windows-1252?Q?Yes=A0Please...=3F=3F=3F?=

Thread-Index: AQHcPEQapyVzAbJjAkqbSR8LeywZZQ==

Date: Mon, 13 Oct 2025 13:22:19 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SE2P216MB2696:EE_|SE1P216MB1302:EE_

x-ms-office365-filtering-correlation-id: c8931d28-3054-4fe7-60ae-08de0a5b893d

x-ms-exchange-slblob-mailprops:

4VtScROZs21qKsZbQ/+3hOXi8TYtpWnwsAV8bjKx7aCjIokTk0rI1zwbCz95ChjAU0W01L2oRab0ch8r1jiJRU0DW7b0t1syijczoouYgi3PVFBzVmgbt5fcwnuvp5WT/z7ifpan1doUPYf66FqtuvKyl49UPuQafVwCTukx0F+l38lgCT9/V4ek4WhT5o9xnyQGnqe6sR9Z5imLvklUhn5Q9pVXRA98PkQnB3a7vxD20aDodhLJQvV2FlHjYWTublhotx+0MKfttsnq4n1q4+tkPXBAqJHhmkcE/2Iv8cx7tngGOZsuf+XILTkJPrCj8OwXEV39hhUoulx5QkYYXNVYjhqXz7n68nfR1gKdMJxfi3SXH+6H+TS12l+ZDYpwGkow8xvajohRYbiTnGWduE5QIoJlAOUnyyEh9eVsShyvnYQqWMTzf1rpR3iE2Avh1EbZ1chbZAVPxf151Tgn0H1ClAYJimxAdWGLL3GCzf4cROeu5vCL1lfNfZCF0DnsJM5TWKlLwjIGlF5DEbKKMR1GqNcuhji8/rrgyXNlhp/zWOEAoyofE8lapFIC/MDNR1l7myLl2qepLgy2rnt6ELe3yFBBK2qbSfXyKp4IkKDlEZLOpe9kH/M6E8r8L/KB9J7snVftxCORpmTMKjOpu6vRjSxNyxww4I0jz/ZFvtP+BTj8S07XlQ==

x-microsoft-antispam:

BCL:0;ARA:14566002|461199028|31061999003|36102599003|15030799006|15080799012|8062599012|8060799015|19110799012|39105399003|39145399003|440099028|40105399003|3412199025|41105399003|102099032;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?kUWfwP3DvEMbSO2cuoCK/geWp/8qBPkqyRM6HfJ4+b5N0GEO+2nstkqi?=

=?Windows-1252?Q?AqFkfMX/jf8HR7f/tLHwd0+7FZsk3/04eNWc/07pgS5IUQ5rESMss9gi?=

=?Windows-1252?Q?0uz+euMwVv8D3oHIbbNoSail650zMOq27obv7RO35sHfvnvQc6mGPNJm?=

=?Windows-1252?Q?7bqQACd/CjNQgpfxD2/kmYkqqDoqRjL3257QoL2e89Ynabo51vamRydw?=

=?Windows-1252?Q?+hPX8C2S3YNK5Z2sbqHy6l3Sb8B8atMGmNV8coCiRsTu3ioC9QuFAhc2?=

=?Windows-1252?Q?zRsPw3lkRVpCMnKrZFJzF4sJN4inndFGKn6PsCNAh8o0Iz3kpSMejonH?=

=?Windows-1252?Q?FLgcKTF+FDWtZWlsXxvnongVm/wjpNShAmQiYWQjHVjnOvOgM+7bgJ7J?=

=?Windows-1252?Q?rWPnqCuKvJCmEiyIECz9+4S5ybDbz4kkKORZeE0tqp1t8/D0nXSH7aBW?=

=?Windows-1252?Q?OxItSukf0lQSPZgtMWZcA8p9mUr3RuHcfWRjfLON+t/LqPB/dTUMOXVd?=

=?Windows-1252?Q?W2ed90K/CBetKNXuENPDQkcVNrik+JOwzoXCAX+upA8sdUcv1oi9Qld0?=

=?Windows-1252?Q?AmSgsTMTPik+SxG5C86m0GehN2Po85+tJhN8jImF0eYvVEHTp1FlP/eL?=

=?Windows-1252?Q?D9PoH6jKTE6msa0hfuehytOnjCDAAe8D5nVv+xRhkjN0IUn8JigDQPSf?=

=?Windows-1252?Q?xTb9foLdZuIQ9QDqR0slv+ZB7zQlzYOs2DqXdn/BbigSh4QPX2mDOGvW?=

=?Windows-1252?Q?I3GUbwytJrOF7fF/WFXPk/bu7PFiFQc8HExRF0zqPv7JBr85nmvee5hW?=

=?Windows-1252?Q?wz8vduOc9ZM5jWFnXyosVkamZvuNgjD5ACMX36q2fCS5JRx+5oigVtEI?=

=?Windows-1252?Q?et+SbKT3m7OS6Ke1LJQGNnwiXwjrKGJuipB7QOIjQzDhnMZgIbItK+iV?=

=?Windows-1252?Q?JKaYZRjVU/OH/OregI3HIeENZE+j+iZh7NxGg4RupWCUjb/I/403ntu7?=

=?Windows-1252?Q?ssuolmjqAUU7VX60cf7i4GqOkanvpqKRQhLCUojkEPTmatQisj4spVZ2?=

=?Windows-1252?Q?n24rixEAZE5EIoIiiqg5ztyFcWXYGVMDM4qbmiUQ8ov/1hQ9LoJCmAtZ?=

=?Windows-1252?Q?JcEssIfndPKBWQWok3vM08agw9ygAvPT//Cgssbi5jfpztv5kATsfkDH?=

=?Windows-1252?Q?WRGTpVUgjE65mBVpUWNs+pgQfnqyRMdN9ljamcbB15yrFjzugLKDfCQy?=

=?Windows-1252?Q?Rokm5w7mzUyRKv32yG+pkiKxQexEiKCcBu23vcTagmW88gsp/1ui2ZKf?=

=?Windows-1252?Q?YXn7C6/w8a60DklKdi/s9wA4X3sqG5Enm7LsRpo0VjkV3YxBMFBj+FQi?=

=?Windows-1252?Q?zGa2X4ALhn8yA+TI2n/GkyyhNZx+qmW3oq8=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?1QTn1GtPu/TdCv43CprXvzkNc1e/X3hrn8KGFD0QG0TcP0RwVfbR7T88?=

=?Windows-1252?Q?9kOHmTF9cMXYCsZAGs3RWkn4sXA7s57D8vofEDITK0reGmI2Nybp4yK5?=

=?Windows-1252?Q?V2YgsduEku6CY7IRZRXCWNuP0EKjgSZlEwIDqYoZidPkA54k9i/Nsjs0?=

=?Windows-1252?Q?0Mome16Rw3u6vgEf/QjgYE07ONpBoxcRqL6IwlnhSTefQ8N1bSXtrHpq?=

=?Windows-1252?Q?lJ/v6PP/NwoAGdpTQ7n+bi0+Dl9BdV7Fkkcmlf1PqeJgRdari6PYhzEX?=

=?Windows-1252?Q?qU7e8nFm0XKG+uscm9domqRLn3fCRS2tTwqxX64E2xtuzd1tAgrYnDhm?=

=?Windows-1252?Q?TJOwFgDh3ULJ924mYmSX8uOtKKA32TJoZ12bDG8Eu1mlAdrLkCeZmidd?=

=?Windows-1252?Q?MARHFClv4/Zdw7amP1dsaWQkUVVjjOCJb+/apEeQ8n6u4pmVv1yqJcgx?=

=?Windows-1252?Q?KUUsIj/zQjD9MaEBsmlas/k2BJAxwPwIkdOMNb+9u3BnM6dPOMkztuPr?=

=?Windows-1252?Q?mQC7zqozd4Efv39wAGMNoM0Kb2TI13VTXyb/u7nh8NdUVi0XLLAtm0Av?=

=?Windows-1252?Q?+AX1CZQl5z8Fn8cEzqhAygpLmo7jsi9vuyq+TNJG0wsJbKhfbnwygU2K?=

=?Windows-1252?Q?fx8c4RD2qhKpBDfY+bfzWY1+JYUeHZZ58G0LwstkNf32AqcTnpTmdcdF?=

=?Windows-1252?Q?0qmzMu/6iV27oabhJ7EWEQkaYFhCiHV/xuGJ4ahpbmjwALG0HA3EXmiH?=

=?Windows-1252?Q?OzoRqGaAc+VDuoFMGV/xV5xrfkm3ECxKEfOGeF1+X5ll17MTiGTj1EN5?=

=?Windows-1252?Q?NnzVmljOmqJ0l6rjc6ikCSQBSIM8TTjFD6pReb2WlWbj0Tx31mE9s/z4?=

=?Windows-1252?Q?KYDxltH5TaarxC0CgTjwvj1z+KrvV/i844uB7ODCbHgm5uHyRbCwq67h?=

=?Windows-1252?Q?YaklFSc+2radrSSCpashB+tVd2b0TqZ3KL7L5F436rgxpaUDNEJqP2B4?=

=?Windows-1252?Q?Opz+FIqU+dEBttlpHNIIi9VRle5woNPdSjvDK7rcdA76UM31Y6ggwBMF?=

=?Windows-1252?Q?KeJE68YTR6z9nakhuSvRpHfMCy/NdQLOmUFq+X5w0MEVU3+okiQV4eeO?=

=?Windows-1252?Q?rD1bLZj73M2iRt/vDBKD+enlfJmRaiuOpN3bzc7Kmypb7XSzymWtq7UM?=

=?Windows-1252?Q?xAhhANQLoWAJsZzHrT6MMs5sj8f7bnqmUqLb3HQw8ofpQdNq1d8Q2Bib?=

=?Windows-1252?Q?ZjjGi6SBZbPBCiUyrAfR83yiR3/JCnasA9CX0xmDP3MXSB9UNghMmjGc?=

=?Windows-1252?Q?floN62fTlTJRf6unOaEygOBI4UBe2XFkd1KFJjm8DEPPUyp7GStpIKF4?=

=?Windows-1252?Q?l/taqORAi0AVglwCHJ0LenEI9Mf76C32qnc=3D?=

Content-Type: multipart/alternative;

boundary="_000_SE2P216MB2696C9660C54E0643CC4A84A81EAASE2P216MB2696KORP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SE2P216MB2696.KORP216.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: c8931d28-3054-4fe7-60ae-08de0a5b893d

X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Oct 2025 13:22:19.3307

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SE1P216MB1302

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi I really liked your website — clean and easy to navigate!

But there’s room to grow in terms of SEO performance. Would you be open

to seeing how we can improve your rankings across search and so [...]



Content analysis details: (7.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:101:1c0:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:1c0:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:1c0:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:1c0:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:1c0:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:1c0:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:1c0:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:1c0:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[52.103.75.2 listed in will-spam-for-food.eu.org]

[52.103.75.2 listed in will-spam-for-food.eu.org]

[52.103.75.2 listed in will-spam-for-food.eu.org]

[52.103.75.2 listed in will-spam-for-food.eu.org]

[52.103.75.2 listed in will-spam-for-food.eu.org]

[52.103.75.2 listed in will-spam-for-food.eu.org]

[52.103.75.2 listed in will-spam-for-food.eu.org]

[52.103.75.2 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.75.2 listed in dnsbl.ahbl.org]

[52.103.75.2 listed in dnsbl.ahbl.org]

[52.103.75.2 listed in dnsbl.ahbl.org]

[52.103.75.2 listed in dnsbl.ahbl.org]

[2603:1096:101:1c0:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:1c0:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:1c0:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:1c0:0:0:0:10 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.75.2 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.75.2 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.75.2 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.75.2 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.75.2 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.75.2 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[jamie.webllc39(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[jamie.webllc39(at)outlook.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} =?Windows-1252?Q?Re:_Yes=A0Please...=3F=3F=3F?=



--_000_SE2P216MB2696C9660C54E0643CC4A84A81EAASE2P216MB2696KORP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi

I really liked your website =97 clean and easy to navigate! But there=92s r=

oom to grow in terms of SEO performance.

Would you be open to seeing how we can improve your rankings across search =

and social platforms?

Thanks,

Jamie





--_000_SE2P216MB2696C9660C54E0643CC4A84A81EAASE2P216MB2696KORP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; =

font-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Hi


I really liked your website =97 clean and easy to navigate! But there=92s r=

oom to grow in terms of SEO performance.



, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; =

font-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Would you be open to seeing how we can improve your rankings across search =

and social platforms?



, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; =

font-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Thanks,


Jamie



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">












--_000_SE2P216MB2696C9660C54E0643CC4A84A81EAASE2P216MB2696KORP_--

Web/SEO/App Spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Oct 2025 08:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1v8Jpx-000000000oE-1Ka5

for dave@doctor.nl2k.ab.ca;

Mon, 13 Oct 2025 08:47:45 -0600

Resent-From: The Doctor

Resent-Date: Mon, 13 Oct 2025 08:47:45 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazolkn19012062.outbound.protection.outlook.com ([52.103.66.62]:2455 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1v8Hhk-00000000Fvl-3JlW

for sales@nk.ca;

Mon, 13 Oct 2025 06:31:18 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=N4a6owTzi/d5hW5PsSJFMrxVaxosfOy4nSHgoAekjKnAXLOS2vxM17wqHR3JbadEt3MB+ejTTUH5P7h6dYukphGG7uqso3QlYS+JwRO/h7im6fcnHnOP2yGV8WxgAgnrbmLPs1OhZ6Gu93dxZMN993A0+LcJ4lgIRdy7DqYN9bnrhCBCsZNtEMdGhNx3V3kv3WKTUxAOcJI2tYdA6kdKpyZGeKFYwDbatbLus91GpIgSbZIKet8/lb3R1DTAiztCy2F3bZ7zlUJiNmA9To+icSoBth+Kl1JcFXQ3VdTOMVcIcTTFYz0bdixEu5HoYk4GfGNVfBasf+YNzvf32yxjSw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=PMcBQkkRuA6VSeupUJqwOjhzB/mLRcnh2D1V2gC+xGQ=;

b=AasNj/7eB0xPpllW7beeVHUENyT9Jwk1XiOYVW8GeBK04H8LzJdCzwMwk/9wjcRwAaCsrpT95GtnIW6h/7roP/jFz7hsJ7wIBGV0YqqvDuX3kTQqQFijaPtJ+I5QdjuAFlbZMhLh2FZSn1DajtWbrhATDHIeh0JPW5TSZgJ3ZPu+a7iE5sfnkUzZv2aqQPPX43u0XemBeoffCLcaeARKoS57MYJs7nLZycw5GNJc0zAihuon2y938fi6mDmq4lvkWyOppGQ6ErWVQ3XnMqBCBIlD9CUGGhhGR0A70BANM8WMFEB21YjPgio8+Y6FC8Fjn7raRoxMcYENZlaBC6KbWQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=PMcBQkkRuA6VSeupUJqwOjhzB/mLRcnh2D1V2gC+xGQ=;

b=nGszRTfZeR+mkLxvFRn8kHfd6nqaZehqxG70hwTakDf2CEp7jFLvr+wdXqFBIox8poI4R+GEaVKvBFnFlZuQ3l3lQafeTgKzgXDt7yKCYMGkmU9ZELgf2GxdMFcpRiPTANe+Ltpi1VVWv+bL2goXB4EeC6jhttFn1v8h0pJ5aJKZEtFJp1EraHiV+U861jGLr9aLa01ANrJpeNkcNby8W8jv0rQFKmcS6ko8ZGf6FbVuN2v/87Fts4UPnRsu8IbS/DZ6VfvXT8yr4iNLpklrBvN6V3YyCdlZkOVaAu5fLA/DlK/0mWLgaH570N42XQdFL8r/TXLV+0I4UDKi0MG3Uw==

Received: from SEZPR04MB6317.apcprd04.prod.outlook.com (2603:1096:101:a4::8)

by KL1PR04MB7657.apcprd04.prod.outlook.com (2603:1096:820:123::13) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9203.12; Mon, 13 Oct

2025 12:29:15 +0000

Received: from SEZPR04MB6317.apcprd04.prod.outlook.com

([fe80::eff9:b67e:8b25:7e9d]) by SEZPR04MB6317.apcprd04.prod.outlook.com

([fe80::eff9:b67e:8b25:7e9d%3]) with mapi id 15.20.9203.009; Mon, 13 Oct 2025

12:29:15 +0000

From: Evie Kumar

Subject: Proposal,..,.

Thread-Topic: Proposal,..,.

Thread-Index: AQHcPDz7ai72C/2XfUqvmIERPziFAA==

Date: Mon, 13 Oct 2025 12:29:14 +0000

Message-ID:



Accept-Language: en-US, en-IN

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SEZPR04MB6317:EE_|KL1PR04MB7657:EE_

x-ms-office365-filtering-correlation-id: 55d4539c-336e-4607-cea3-08de0a541f00

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|31061999003|19110799012|461199028|15030799006|15080799012|8062599012|8060799015|51005399003|440099028|40105399003|3412199025|39145399003|41105399003|39105399003|26104999006|102099032;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?sAzw4ivm4B/WWDPMSNeJKKKf1cnne3ShHWVf2Jn2GFZVzmD7NV55QVEm?=

=?Windows-1252?Q?rMqNhTxc5FJ3a9Y5wG02zbow9LJruAWz+tYzJDocIphh+rvW9P2Ttstc?=

=?Windows-1252?Q?TjWPmSiwuo2Hzh8XcHeRNI8z8P0o3/9d0OvUkaEMBGhZYdi3kYbQzNIn?=

=?Windows-1252?Q?nWgGxUmrwY4L7sLQImZRkBHWialWGlBDL+N4JpxXW5MBtfSy4Q80qKro?=

=?Windows-1252?Q?k9yrkOkTYTCk4jfg9GEAbSQoTgc87FG/gjlKWRAk1F0q+d5iGpY6w7bf?=

=?Windows-1252?Q?JioX4+iuVIh1eHjRWFfPtZgs84nb2hWsZCqE/JBfQbZA+OM3WzrbVoyG?=

=?Windows-1252?Q?t4gR9iko5ZNBTTSG0E+3ZIhjqOquqDN2ZtbomBqpoqMm87opETLJddeH?=

=?Windows-1252?Q?wxjDzb0UnTWGzLUhv8pO78GkfGHcGno4GoqGRBOOUa/bfh6i5932/aAj?=

=?Windows-1252?Q?4I57QuKDm37Welk+amRJ4m8CBFwo3Ctw/oU+Z4gdq9CtexULqPZMEH+e?=

=?Windows-1252?Q?YMeDvmQXZH+h1XGrpfi/rS4WX5SPVlH+2UPAI4EgnZMI9Afqwb0Npj/k?=

=?Windows-1252?Q?S0iZpnA4/7vazThEws844crbulufNBXaVHNJD67A0T1o0jrsjyp6Mpib?=

=?Windows-1252?Q?QHVOxDezZiaYGZy0y3lJTlNk/LpQYgUhm47VC+q5w/q0HQUJ/A9/3hLk?=

=?Windows-1252?Q?bj0woOANtJQJfwzG//8LsLrTcRnzBRwVV0Vgo8ApVHXlMHfb87T46ZHH?=

=?Windows-1252?Q?C2VNQA62XIxixM2FUMEQF3XwqB6BGj3ZjGTJ/ji69MAnHCRp6J8sEZc7?=

=?Windows-1252?Q?fe0S5gnI3hZftZss8xRcOppNV1nqNerr/aDbUsfg6KleNoZxkX4aA/JL?=

=?Windows-1252?Q?KziLT9JYB3UCZnP2Ui+gybW8n7A9aA7297dferDlJxMvC5TNjszF46f0?=

=?Windows-1252?Q?Kg8WBi2nohNq0c/x6nssODAOUh5hzE/Ttif9Xgr5uqZuThjrsRwvjCZc?=

=?Windows-1252?Q?yAdYJkCtf59VgGfuyO1IgZW4J794Ed+x31f+1u8WkSb9oCdkyVd6LAxb?=

=?Windows-1252?Q?+SMjVJ6leRuabPB56/G9joHWsruKdXolEErCbRpsfg+nszLc9HRXoGLQ?=

=?Windows-1252?Q?/JptqpiO9SPDTuQ1w4IWwIHW7oFDsjHyCAnuovInODbVHbAaofEBwUMP?=

=?Windows-1252?Q?CQVJWuIzLBtaZFfwzeMmff++TAmB9B0tf+1jSrHI1EWShvyrbGmxL2uH?=

=?Windows-1252?Q?uj8VQHQCLqF3Cg4MlwWO32Rk+uS/uecst4eU++BDfCpcCpSmITjgDA4h?=

=?Windows-1252?Q?b6nUSXQGn4puQVz3Cs1gdoul+U6adF1MFVxH4sRMIgmMPG1+VqimhG8e?=

=?Windows-1252?Q?/6/UOt6qM+j/KEU+z8PiPcl2g4Q2lKbxMfI2TEGC3hy8pVGAIjFSkO2A?=

=?Windows-1252?Q?xgJ6JQXNIS2cN0J5Y0YAXw=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?cCfXkhtc4e1Bioh47O/f6MOMhw+XigtnB90NHkr6g8zezPowvisG2jOC?=

=?Windows-1252?Q?cn7nhcR336tTWxUDhW92lsuSDb3v9UGB6/dKs7lmGMhVIofrfj4CDYdK?=

=?Windows-1252?Q?Q05H8UM8yLFkbhaErWI4HMf0BZ8yuZL2rttWns2J+bRkUVGz+vEW0zWL?=

=?Windows-1252?Q?aHXKr1YmvJFIOMvcav9LpX3dEOciDX6694zEdUZBCRyRBj/Hwk+2d3VX?=

=?Windows-1252?Q?DZqCs1TFSg+A7jarxQ3D5AkFA/B5/H1LEA1aY7DpZS/evViucBhtuQmB?=

=?Windows-1252?Q?JMDsBPOSag50RGFxvE6SWuwUWhRT+1535cUgbi7XWBf91pqgjYxvpG8w?=

=?Windows-1252?Q?auAUUgOA5utwg+iwcctqYyttXAjft42niHey8I0q17aMAs+JAIW5uCQP?=

=?Windows-1252?Q?gQFqf0HS9NHxZX1S/u2mfAS0bnImc1gs4CelW46cgE3iPvfkUf64lFL2?=

=?Windows-1252?Q?UwMz4M36CYfOYz4yJIPYhN8lWr7lIYWADq365W72EGy8NRTfp3ft94Gk?=

=?Windows-1252?Q?zUid5387cAfl7rpDzsbFeqOhCQTEEkL7Gv0HJ13mta9KKJxIKdnLhoq2?=

=?Windows-1252?Q?nxWA5N6kdF38qpYtnUgt3B3/MJV1hYVzXvqVcRf2VgwTjPV3Z2eWugBa?=

=?Windows-1252?Q?wtnHVkL19N5LSqfeCUWXaFhlYBTWSQBvQo0Lux9bI6SLFVabafu8Pwof?=

=?Windows-1252?Q?uVgXzSTKuIdKMuq0e6F36z6kSojIrBLM3nbvMqXq9JYgToD1c8rZ2RbU?=

=?Windows-1252?Q?cAO9Ss1IpwE6FMZ+Eb22CajpqtTnys93LB5v2iK/lIcjagkXZjyng4Ua?=

=?Windows-1252?Q?pDp98nb8ivPr/AoOcC1E4q0Dc74KPCkkJS07U+IEnnL12GKqsG5FxH6A?=

=?Windows-1252?Q?31w9PiZAyrYNV5MAgxmeN59Sz3AWolhmDMISly6HODQpLG+ppttAz84h?=

=?Windows-1252?Q?3FeGPwi8Sb9ILtAL69smXUHDTPUevi6JgFh2hnODj6Al346ZNImHnRke?=

=?Windows-1252?Q?mK96BVJvirfBKsOUnlqHJWPXh5DDAUhm8rQF05vJNsMiS31aVmWYHKp/?=

=?Windows-1252?Q?NN/eQySi/qBUEFiWQgDhztvDmqjyk67njdfDOqc2F+ieuEUyaz+180yL?=

=?Windows-1252?Q?19O/ILmd2gCZGKFnagBnRmIPIn7tKopM1+WV2FRqdi4tUfh2deS0L6uF?=

=?Windows-1252?Q?VPofbufGvEnvjLJnJ8LYcG4rI1oEu+v52U6H+wiKHQjG62CO2CJ1eAyM?=

=?Windows-1252?Q?GCXzfLHZ8Epku2NocE8b9vwhZytZ9PZs5U48S38fPoYXIr/iRP1XGsll?=

=?Windows-1252?Q?iFbQVgq4OcHV8YMyH57fc0nZkwc=3D?=

Content-Type: multipart/alternative;

boundary="_000_SEZPR04MB631780F5A00500775E1FB113FAEAASEZPR04MB6317apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SEZPR04MB6317.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 55d4539c-336e-4607-cea3-08de0a541f00

X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Oct 2025 12:29:14.5579

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: KL1PR04MB7657



--_000_SEZPR04MB631780F5A00500775E1FB113FAEAASEZPR04MB6317apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



I visited your website and was impressed with its design. However, it=92s n=

ot ranking well on Google.



I specialize in SEO that delivers results more traffic, better rankings, an=

d improved leads. At an Affordable price.



Would you like me to send over our SEO packages and pricing details?



Thanks,

Evie





--_000_SEZPR04MB631780F5A00500775E1FB113FAEAASEZPR04MB6317apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








=3D"font-family: Calibri, "sans-serif"; font-size: 11pt; color: r=

gb(0, 32, 96);">Hi,





I visited your website and was impressed with its design. However, it=92s n=

ot ranking well on Google.






ze: 12pt; color: rgb(0, 32, 96);">I specialize in SEO that delivers results=

more traffic, better rankings, and improved leads.


ze: 11pt; color: rgb(0, 32, 96);">At

an Affordable price.





Would you like me to send over our SEO packages and pricing details?=







Thanks,


Evie




Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">












--_000_SEZPR04MB631780F5A00500775E1FB113FAEAASEZPR04MB6317apcp_--

Ukrainian ladies romance phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Oct 2025 08:47:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1v8Jp1-000000000j3-0tmd

for dave@doctor.nl2k.ab.ca;

Mon, 13 Oct 2025 08:46:47 -0600

Resent-From: The Doctor

Resent-Date: Mon, 13 Oct 2025 08:46:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19013074.outbound.protection.outlook.com ([52.103.74.74]:27430 helo=SEYPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1v8GYr-00000000Alh-33vZ

for doctor@doctor.nl2k.ab.ca;

Mon, 13 Oct 2025 05:18:04 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=TfKmnokKxJX1GvtfAOTDxahqoSLBGz0CwAIyeQ++3b9mr1fKnR6sn2gAyj9VQs+/WZvPLJk05hCa3ARyMUvfFgo6j8eo5oT1kGpHLBoT6Jr2upzIx+Btzr8FziAgmBTZ/UX4X2aUN34MU26hBr2BJxkpCbHyVo1CYBRohH9D2433NEVzpz3gdP24FXTSoeFL7xuJNiDI/YAkpb7xSZeya4tNGE6LnT1ltBjaML2dnL3mHNWTGr1BViGw8eEr+odXWyKhABjRpIHMpS6FVpQahOVDZVYCgBLfGNw4VenP7uEumT3FjUcg8r9qkLP8l4cglPz/4Xbxa2qA4KCXuDVQ+A==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=kURyr2d408KHV2qA2lBE8Tx2uJb6FUs2c5wHFavUl8g=;

b=kzTbaCBYbH33XAQaYFUtqorkJUHvlT0u5JirY5BqMqYns8SPyWOnOvNY4AdKC7PT4lsiUhnopCAxAoPFeImqL3E1e65x9wvIPrvPI0uLvB57Yk7TSeuvazfqi/Pakv5QqzJddv7GvGyvSjhSts6xrR+eagKFTcT2a1nxgYWiPjk6qtWR1jC/hJl5Q+D3TkHg0sQI+GVYowNgR/lWgCTVM4MLySZ7EB20GmDROrgvQZ27PtQVuc2B4LNrDISNY9eBIxsLc4P/SyE58LH5+DeZEZnhSa9oNZSSFUY2X+bkGtOy+umC2EldtM+FIg/D2bi33o/fmYD9sophMPdUuVK95Q==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=kURyr2d408KHV2qA2lBE8Tx2uJb6FUs2c5wHFavUl8g=;

b=FpqJKmljtan26oQ+pJYDPqkn87sndGdBnH5D+rglcomwKMCKZMypRcMw2trRIx83D89M3iE9fp7hxyg7QVHH4IGXSPcoMpD2gd+ApLYNZzOl3wSFs3uUK91ec65LrdiR+7mzRsOeZqRqsAbCbDW31Y9KIPhPFPE7ep2nUN5n0lhy4iyjZk4N4HP+RvWa6oy5iOCg6msjgnhsawaRrm2SpsbPzKhR2EocLIZsMiMJKDEZ9VlDFg39eTUzGd+vZRvXhy3V1Ptr8ITfuDlmhFPPdJlIQdAA5VoTcZDW7MbdTSaqO8wcYUD6+4Q93wSeX66xNhBnNzZBtVN3IbUn1oMJKw==

Received: from PSAPR04MB4328.apcprd04.prod.outlook.com (2603:1096:301:3b::10)

by TYZPR04MB6907.apcprd04.prod.outlook.com (2603:1096:400:340::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9203.11; Mon, 13 Oct

2025 11:15:58 +0000

Received: from PSAPR04MB4328.apcprd04.prod.outlook.com

([fe80::c7e2:678c:b883:6a3e]) by PSAPR04MB4328.apcprd04.prod.outlook.com

([fe80::c7e2:678c:b883:6a3e%5]) with mapi id 15.20.9203.009; Mon, 13 Oct 2025

11:15:58 +0000

From: "mitsuecoutomxy@hotmail.com"

Subject: =?UTF-8?Q?=E2=9D=A4=EF=B8=8F_Ukrainian_w?=

=?UTF-8?Q?omen_ready_for_som?=

=?UTF-8?Q?ething_real?=

Reply-To: "mitsuecoutomxy@hotmail.com"

X-Mailer: Microsoft Outlook

Date: Mon, 13 Oct 2025 14:15:55 +0300

Message-ID:



Content-Type: multipart/alternative;

boundary="----=_NextPart_000_2C9C_16B3604D.8B4F5D31"

To: Undisclosed recipients:;

X-ClientProxiedBy: HE1PR08CA0056.eurprd08.prod.outlook.com

(2603:10a6:7:2a::27) To PSAPR04MB4328.apcprd04.prod.outlook.com

(2603:1096:301:3b::10)

X-Microsoft-Original-Message-ID: <1.afb7b65e5b4e44ef535a@DESKTOP-P29C80B>

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: PSAPR04MB4328:EE_|TYZPR04MB6907:EE_

X-MS-Office365-Filtering-Correlation-Id: 22bec874-0aae-4519-d375-08de0a49e1b5

X-Microsoft-Antispam:

BCL:0;ARA:14566002|15080799012|12050799012|12121999013|23021999003|8060799015|461199028|5072599009|19110799012|9400799040|56899033|1602099012|39105399003|39145399003|41105399003|40105399003|4302099013|440099028|3412199025|51005399003|34005399003|10035399007|17111999006|2406899039;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?RFRaUG53T1JSaFoyTlQzT2pKaEF4Y013WjJNVU94MlMxVGFCbkZEeGU1WFIy?=

=?utf-8?B?c1psZ2RxTTVWaWVLeXQwNWFwNFU1aTVwRGlzL2NTUFhvTWJXTldJbE5iM2p4?=

=?utf-8?B?UldhOE0wRWt5SkFIR3BwL2gwUTNoTDZNTG9HSnN1NFI0dUx6T3M5RnNpZnZR?=

=?utf-8?B?SjZFbnlQMjlDeTduVFB6U01lclVlbm5WNUFkL1grOENlTGU4b04yUUgvTm03?=

=?utf-8?B?c2NJMThuS1E5dnp2K3FrNjB4alJqT0tNMm9kdWkyenBZQVZFNE5jZ1Jvemx2?=

=?utf-8?B?a3BPSjFEeVlSZGl4MHdJcXdLN0Y4MEFla05PUVE5SG1vVXdESHpPMG9iR0Nj?=

=?utf-8?B?ZWFrMll0Q0gzZlZ0NGswVkltTjRJRmNQY2MrZ3oraDMyc3Jzb3BuMFprVXpF?=

=?utf-8?B?eFB3VE9pVjZYYS9MRnJSaGsxQTRzNzM4VE9TaDdDbjdyVXhMcFZ0RkNHZkI2?=

=?utf-8?B?aUN6U05GdEorbFEzTFplR0RtWmZqRXJtTEJjbW9OdlpZZnVCcDNVS2Iwc1cy?=

=?utf-8?B?MHRvWmlpdG9KTTE4aUNrMFEyTm1wc3lBMGk3N2RHVG41TTdGblVuL1NpVnBy?=

=?utf-8?B?amxZYU41VDNuT1VzRjZ4ckV0c2k1MnhwVVdJaTFVU1VFK1gwZld1WEJYbXlo?=

=?utf-8?B?bk5RYzBlOFZvcHNJVC9CZjEyWDZCV0RFQWRveTZsMVZnRVFBZnE3MEVzaXJ6?=

=?utf-8?B?S2dVQkptZ1pxNEZ1MjFrd3R2ZXRFTzZtUXZMWXBzZTJaS2RuajhFaEV3OFdp?=

=?utf-8?B?NHoyL2p6cDhZN01SNW9id2NydVNXcjFLbHFvRVdTQTl2U1NYd1pLaVpvQVdv?=

=?utf-8?B?a21uKzJsV2JsVWtkNk9INUlCZ1Nud1N5aGlnV3UycmM4ZmtnZHMyc3laZVdI?=

=?utf-8?B?dzdZamdFTzdrMWRQQUJMTWJ5TXNwQitDVHF1ak5tMHROclBHdFFxblZlSytB?=

=?utf-8?B?WldpbHhoNWpBdkFCc1RVNTNiV0N5UVdWUWJzNnJkRmNqRXQ0a0d3VzdiUFp5?=

=?utf-8?B?bzlNLzNQbk1VRS91Ykt3YXdNeTVmS2s2Z010Y3BKTWxLZUU0SDhZdEhXdTNv?=

=?utf-8?B?bjlUd09meVA0TW5OS3J1MW5pVEc2ZUVTK3dWb25EM0EzZkxuQmsyVkFyQ2d3?=

=?utf-8?B?amUzWUc3eGsvOEpnYTlLeDB5eGFaelBERFVpOTAyN2tjTW8zeTdyME93aGhE?=

=?utf-8?B?ZlA2SGNLMnZtNTVBSTZaUFA2WmxQVmIxbkdCT3Y2RnE0SGk0SU5nL0UwK24x?=

=?utf-8?B?NWNXNGNlNEI0aG9PVWs5NnFTRGVMMlpyTjN1L2gyaGI5U3hVTUhQeGZIeGZQ?=

=?utf-8?B?OHBXL2xTbzZYR3RQNEhxY3grK0g4UHQxSnhTbXJDYllTMjFZdjllMUxucWc2?=

=?utf-8?B?ZFQ1T05OSjZzNFNkdEZYWVFKL3dvREpzbTcwd3drYkxWMURPSGlITWxOWmtv?=

=?utf-8?B?SnFSVTlCMG1oT1dPWEpqVGRFSXhTaGlybnRPakVhcTgvRUptWEJrSEVRbUxj?=

=?utf-8?B?NG1DRTBLV2hZaXFkSHRERThKSmZmQXlpeG42dEkvN0ZobDdYWU5XYTZ4ZkJ0?=

=?utf-8?B?ckMwYVpEYVBhZjFDNS9JQ2Y2aFVCRlZZUG9BWHBKdXVHWGtGWkpCRTFnMWFv?=

=?utf-8?B?dlNaaUtVazdLcitORStWRU5Pb0VjODF6ZW9SUmZoUGk0NDlMV2crWS80SUVr?=

=?utf-8?B?WVEwUC9MRTNUSnNUNmRDWkx6NGtabVowVUZWUlA5NjFGZm9oTXNCTFh4ZnBH?=

=?utf-8?B?ckdIbTFuM0FGQmNWTHN1VTdTWndEb2lLdE1uN0hSblJlNnZuS0RGdjRYekl5?=

=?utf-8?B?bDFEY21LVi9pdDBNT2RPZTNlVmZWc2wrbHFBQUErdEM0SCsyUlJTTENOWVZV?=

=?utf-8?B?bGsyTjB2OHQ5Q1FtUXJyakVRUDVvTjJEdnRJbUJzNEU0MTNpM2M5V0cvbEdZ?=

=?utf-8?B?OGVVd0dYRm1ETUJETXFXTHdWRGg4VXZhdUY5UE1LQWxGUVdkZ3lzU0k1cXZ6?=

=?utf-8?B?Ty9rMlhmWkVWTjZMdFlFODNHQzZlS2gzL0lZSEgvWURFc2tFZ1VvMWYyNWRj?=

=?utf-8?B?c29WcmRmUCtrODdteVR3aFpRWkRqdlo5dFJ0MStGbTRaWmtnRTRIMU8vc1NM?=

=?utf-8?B?TTFMVmZtVnVFbDNBc09xaVdoOTQyOVRVTWFxc3ZiUUtzR1V0NndrdUF4NWRo?=

=?utf-8?B?YVRZU3dKTGJDSnFCbUxKT0ZrOG5mblBwMlZrSEl4N1RjdTZRQXhLclJ0THBL?=

=?utf-8?B?VUxqb3BjN2JOUFV4ekJXb1JYVkxFdkYvY1ovVTc1d2IxZDdrMlpjeElOd0V2?=

=?utf-8?B?NG12WGpadW9FaHBoVUEvNlpSMFlHek1QZ2dvbUpqYVJBbDhOVlk4b3lUNkx0?=

=?utf-8?B?QTkvamJlZnhwditTMlB4WGdpMkJGZFhLWHh2em51WmZRYURtaVJsaFVTNExx?=

=?utf-8?B?MW40RVdwZ3ZveStvb2oxQU5HZDdKOEt5YytnMmEzbjE5bDYwTlRud3crODRY?=

=?utf-8?B?K20wQW0zclhqWTlqVjBCV2JmcWJvTHNSaytPQzlKenhmYlhwUG9QUzlibkM1?=

=?utf-8?B?N3RySkkwREpJQW02Y0ZMUU0yLy9vWUFpWmhJSUFvQ3NEU002d3NNUkpVQ295?=

=?utf-8?B?aTVsMU53Zz09?=

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?bzIzanYvOExmdVZSWlFuZEkwaGI1T1p1ekxFV3liQUdISzdacE1RZmFOTkty?=

=?utf-8?B?dmd0bWJKYWhLQ1FsVmlxczR1Tkp1MjFCcExta2tUR292c2IzK0tQQkIwNXZC?=

=?utf-8?B?b3VkanBXSncwTjNBZSsvVWJPMCtzc2FrVlZvYVdtbnRGZlMwSFZQK0RvSytO?=

=?utf-8?B?MGlSOHpQMTN2ME9acWFOVHE4Z3ppM3pad3BtOElaS0NrSUlDbmIranh3ZkRr?=

=?utf-8?B?T2hvVVFPN2VwOE5QVTB4ZzlIbm5PWXJESnlBWnZ6d2JCaHJodmFKbklNSFhI?=

=?utf-8?B?N2N2NW5NK3dKb2JCOG5oNzU2MmkyeUFOblBid2czcUpFcSt4UzZySHlLNzNI?=

=?utf-8?B?Z2JKYkxCNHArdWpiZTdHeEJEcmJZbitESElsWllkR01Jc3E4amF6dFZYVWRC?=

=?utf-8?B?dElqNmluM1B2Z1RFOGw5YTZPcDRZOHc4QTBSZ0x4OEp1eDI0S09yS1UwN1N4?=

=?utf-8?B?RjdITGxNSWc1TVdsNU11YUJYNWd6ckJWakhKdFhXK2xEWVpJTWhvRzE4c2sw?=

=?utf-8?B?d1doVUxjdW9xOVpLVTRjbkNrT0JoclkzYmVoVVMyNitZZGV4N1dkQmF5SmFU?=

=?utf-8?B?Q0lEbWNKOVh1RWQ5ZE5KUG5oUWIxRmxubmhraE0vczlWS0VNNWZ1eW9WVlJN?=

=?utf-8?B?ZzdERC9BcURISFgwSGRNRzFRcUJNQTJWRWU0YnJvTGtrTUsrN1h1aVNZTE1I?=

=?utf-8?B?VXFlemdNRlhoMDVJZzZqdisxeGtBUzlyekdiMjV1TlJUdGRJRlduZFpGU09a?=

=?utf-8?B?VHlSWXBXS2xJL3pZc2xMZWZ5SmJFdlJ5dzZyVlI5ek82YUtvT3krYlVmNElO?=

=?utf-8?B?WlhnS3dEUFg3amZjMXZjdXBGUDNsZ1grbjVMRlp1TWVPY2VlNi93QjBtY2k0?=

=?utf-8?B?bFFuc01kRk9XaUU4ZXZZT2FvTjhTVVpPeDBIQ01kT2RTa3FxeGQ0NkJZQlZH?=

=?utf-8?B?VE1CYWNZeU9NNkxnM0MzeFdBZVNaOWx4ajZlVVgrc3pOTFJZSW1PdG9mZSt1?=

=?utf-8?B?dEJETVlVVlZKRVJMc3NTS1NiWDQyMzNPYXdOUC9XZDdHTFhLaVJLQlcwSWRv?=

=?utf-8?B?akxZYmdna3pYcWRwTjBiL0YwUE9ETDkrOVVsQjR6cGtPaCtKaCtKN2NXS1ZT?=

=?utf-8?B?VlB6eURsNGJqR2ZZYlB1U251QU9rSDV3dnRyTzYxZ0puZjEvVVAwbjJRS0cy?=

=?utf-8?B?cXUydzd2d0NBK2VmU2orU29ERFBQdzdYZW05TzR4Z2tabmlJeHZrU0JWRm4r?=

=?utf-8?B?ZVRudDRCS1VBSHNuYWdZejc5dE5yeVoyYkxPZGNOUW8zbEpWVnQrSDNPN0J4?=

=?utf-8?B?RUk5b2VwYzFBdWlXZUgrUlFsaWMwT083aTY0QVZBaEZ4UG4rb3duSUl0OWRs?=

=?utf-8?B?SDRlU09IMkR3RS9yYXdBMUtBSGhjNXBkMGVxN0xkMXZMZ0VxcUlPdWorSU1x?=

=?utf-8?B?a3UvUE8vUkJNUXpkWXBxbEMrcDRZL2lieEl0dzYyNWRqT2dFYlRGNGpENmFu?=

=?utf-8?B?RkpvYXUrRUdCRHRNWThwOUxOV2J2bktvQlE2K2wyb0RjcnZuQmNGdkZ1RUFG?=

=?utf-8?B?OEhBM3VFclR4NUdrdzgzQ0UvMVk1cDNYT0E5aElBTHlxR25jbW1xWnVSc0FT?=

=?utf-8?B?d0NhQ0p6V3lobU5DSmwvS2gyekdFcituOGRDcU5jQ3djNEdzdnhwb2VHM2JS?=

=?utf-8?Q?YxzlT2hOHbA/iaQn70u9?=

X-OriginatorOrg: sct-15-20-9052-0-msonline-outlook-38779.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: 22bec874-0aae-4519-d375-08de0a49e1b5

X-MS-Exchange-CrossTenant-AuthSource: PSAPR04MB4328.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 13 Oct 2025 11:15:57.5207

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR04MB6907

X-Spam_score: 6.9

X-Spam_score_int: 69

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: If you prefer sincerity to speed, you’ll feel at home here.

Women from Ukraine and other countries 🌍 gather to talk, share, and support

one another through words. 👉 Start a gentle conversation 👈



Content analysis details: (6.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:301:3b:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:3b:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:3b:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:3b:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:3b:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:3b:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:3b:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:3b:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[52.103.74.74 listed in will-spam-for-food.eu.org]

[52.103.74.74 listed in will-spam-for-food.eu.org]

[52.103.74.74 listed in will-spam-for-food.eu.org]

[52.103.74.74 listed in will-spam-for-food.eu.org]

[52.103.74.74 listed in will-spam-for-food.eu.org]

[52.103.74.74 listed in will-spam-for-food.eu.org]

[52.103.74.74 listed in will-spam-for-food.eu.org]

[52.103.74.74 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.74.74 listed in dnsbl.ahbl.org]

[52.103.74.74 listed in dnsbl.ahbl.org]

[52.103.74.74 listed in dnsbl.ahbl.org]

[52.103.74.74 listed in dnsbl.ahbl.org]

[2603:1096:301:3b:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:1096:301:3b:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:1096:301:3b:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:1096:301:3b:0:0:0:10 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.74.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.74.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.74.74 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.74.74 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.74.74 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.74.74 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mitsuecoutomxy(at)hotmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?UTF-8?Q?=E2=9D=A4=EF=B8=8F_Ukrainian_w?=

=?UTF-8?Q?omen_ready_for_som?=

=?UTF-8?Q?ething_real?=



------=_NextPart_000_2C9C_16B3604D.8B4F5D31

Content-Type: text/plain;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



If you prefer sincerity to speed, you=E2=80=99ll feel at home here.

Women from Ukraine and other countries =F0=9F=8C=8D gather to talk, share, =

and support one another through words.





=F0=9F=91=89 Start a gentle conversation =F0=9F=91=88





Take things slow =E2=80=94 every story, every message has its own pace.





Main features:





=E2=9C=85 All members are verified



=F0=9F=94=92 Full privacy and safety controls



=E2=9C=89=EF=B8=8F Direct messages and optional video calls



=F0=9F=93=B7 Share images only when you want to



=F0=9F=92=AC Warm, friendly communication culture







A peaceful community built on empathy and kindness.





=E2=9A=99=EF=B8=8F You can unsubscribe or edit settings whenever you wish. =









=



------=_NextPart_000_2C9C_16B3604D.8B4F5D31

Content-Type: text/html;

charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




align=3D"center">=0A=

If you prefer sincerity to speed, you=E2=80=99ll feel at home here.
=0A=

Women from Ukraine and other countries =F0=9F=8C=8D gather to talk, share, =

and support one another through words.=0A=

=0A=

=0A=


=0A=

=0A=

=0A=

=F0=9F=91=89
k">Start a gentle conversation =F0=9F=91=88=0A=

=0A=

=0A=


=0A=

=0A=

=0A=

Take things slow =E2=80=94 every story, every message has its own pace.=0A=

=0A=

=0A=


=0A=

=0A=

=0A=

Main features:=0A=

=0A=

=0A=

=0A=

=E2=9C=85 All members are verified=0A=

=0A=

=0A=

=F0=9F=94=92 Full privacy and safety controls=0A=

=0A=

=0A=

=E2=9C=89=EF=B8=8F Direct messages and optional video calls=0A=

=0A=

=0A=

=F0=9F=93=B7 Share images only when you want to=0A=

=0A=

=0A=

=F0=9F=92=AC Warm, friendly communication culture=0A=

=0A=

=0A=


=0A=

=0A=

=0A=

=0A=

A peaceful community built on empathy and kindness.=0A=

=0A=

=0A=


=0A=

=0A=

=0A=

=E2=9A=99=EF=B8=8F You can
arget=3D"_blank">unsubscribe or edit settings whenever you wish.=0A=

=0A=

=0A=


=0A=

=0A=


=



------=_NextPart_000_2C9C_16B3604D.8B4F5D31--

Nigerian spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Oct 2025 08:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1v8JnT-000000000b6-2txJ

for dave@doctor.nl2k.ab.ca;

Mon, 13 Oct 2025 08:45:11 -0600

Resent-From: The Doctor

Resent-Date: Mon, 13 Oct 2025 08:45:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out198-52.us.a.mail.aliyun.com ([47.90.198.52]:32817)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1v8C8p-00000000HPO-2FXf

for root@doctor.nl2k.ab.ca;

Mon, 13 Oct 2025 00:34:53 -0600

X-Alimail-AntiSpam:AC=CONTINUE;BC=0.4090472|-1;BR=01201311R151S66rulernew999_84748_2000303;CH=yellow;DM=|CONTINUE|false|;DS=CONTINUE|ham_alarm|0.481667-0.0144557-0.503877;FP=17085506964758767261|3|1|132|0|-1|-1|-1;HT=maildocker-contentspam033065129056;MF=geoffrey@vmrmarket.com;NM=1;PH=DW;RN=165;RT=1;SR=0;TI=W4_0.2.3_v5ForWebDing_212504AB_1760337174269_o7001c173q;

Received: from WS-web (geoffrey@vmrmarket.com[W4_0.2.3_v5ForWebDing_212504AB_1760337174269_o7001c173q] cluster:ay29) at Mon, 13 Oct 2025 14:32:54 +0800

Date: Mon, 13 Oct 2025 14:32:54 +0800

From: "Geoffrey"

Cc: "viclinda132"

Reply-To: "Geoffrey"

Message-ID:

Subject: =?UTF-8?B?U2VjdXJpdHkgRGV0ZWN0b3JzIGFuZCBTY2FubmVycw==?=

X-Mailer: [Alimail-Mailagent revision 3][W4_0.2.3][v5ForWebDing][Chrome]

MIME-Version: 1.0

x-aliyun-im-through: {"version":"v1.0"}

x-aliyun-mail-creator: W4_0.2.3_v5ForWebDing_SFRTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzE0MS4wLjAuMCBTYWZhcmkvNTM3LjM2IEVkZy8xNDEuMC4wLjA=Ch

Content-Type: multipart/alternative;

boundary="----=ALIBOUNDARY_1276_7fe37fba9700_68ec9d16_dd2d8"

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi Friend, Here's the one report on the analysis of the Security

Detectors and Scanners Market that you could share with your management team.

Segment by Type X-ray Security Scanner Systems Metal Dete [...]



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[47.90.198.52 listed in will-spam-for-food.eu.org]

[47.90.198.52 listed in will-spam-for-food.eu.org]

[47.90.198.52 listed in will-spam-for-food.eu.org]

[47.90.198.52 listed in will-spam-for-food.eu.org]

[47.90.198.52 listed in will-spam-for-food.eu.org]

[47.90.198.52 listed in will-spam-for-food.eu.org]

[47.90.198.52 listed in will-spam-for-food.eu.org]

[47.90.198.52 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[47.90.198.52 listed in dnsbl.ahbl.org]

[47.90.198.52 listed in dnsbl.ahbl.org]

[47.90.198.52 listed in dnsbl.ahbl.org]

[47.90.198.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[47.90.198.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[47.90.198.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[47.90.198.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[47.90.198.52 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

Subject: {SPAM?} =?UTF-8?B?U2VjdXJpdHkgRGV0ZWN0b3JzIGFuZCBTY2FubmVycw==?=



------=ALIBOUNDARY_1276_7fe37fba9700_68ec9d16_dd2d8

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: base64



SGkgRnJpZW5kLApIZXJlJ3MgdGhlIG9uZSByZXBvcnQgb24gdGhlIGFuYWx5c2lzIG9mIHRoZSBT

ZWN1cml0eSBEZXRlY3RvcnMgYW5kIFNjYW5uZXJzIE1hcmtldCB0aGF0IHlvdSBjb3VsZCBzaGFy

ZSB3aXRoIHlvdXIgbWFuYWdlbWVudCB0ZWFtLgpTZWdtZW50IGJ5IFR5cGUgClgtcmF5IFNlY3Vy

aXR5IFNjYW5uZXIgU3lzdGVtcwpNZXRhbCBEZXRlY3RvcnMKRXhwbG9zaXZlIERldGVjdG9ycwpT

ZWdtZW50IGJ5IEFwcGxpY2F0aW9uCkFpcnBvcnRzCkRlZmVuc2UKRnJlaWdodCBhbmQgU2hpcHBp

bmcKT3RoZXJzClRoZSBmb2xsb3dpbmcgcGxheWVycyBhcmUgY292ZXJlZCBpbiB0aGlzIHJlcG9y

dDoKRnVqaXRzdQpUZWxlZHluZSBGTElSCkdhcnJldHQgTWV0YWwgRGV0ZWN0b3JzClNtaXRocyBE

ZXRlY3Rpb24gSW5jLgpUaGFsZXMKQnJ1a2VyCk9TSSBTeXN0ZW1zCkFuYWxvZ2ljIENvcnBvcmF0

aW9uCk51Y3RlY2ggQ29tcGFueSBMaW1pdGVkCkFzdHJvcGh5c2ljcyBJbmMuCihNb3JlIGNvbXBh

bmllcyBhcmUgYXZhaWxhYmxlIGFzIHlvdSB3YW504oCm4oCmKQpJZiB5b3UgYXJlIGludGVyZXN0

ZWQgaW4gZ2V0dGluZyBhIHNhbXBsZSByZXBvcnQgb3IgcGxhY2luZyBhbiBvcmRlciwgcGxlYXNl

IGZlZWwgZnJlZSB0byBjb250YWN0IGxpbmRhQHZpY21hcmtldHJlc2VhcmNoLmNvbS4KVGhhbmtz

IGZvciByZWFkaW5nIHRoaXMgZW1haWwgYW5kIGhvcGUgZXZlcnl0aGluZyBnb2VzIHdlbGwgd2l0

aCB5b3UuCkJlc3QgcmVnYXJkcyAvIE1pdCBmcmV1bmRsaWNoZW4gR3LDvMOfZW4gLyDmraToh7Tm

lazmhI8sCkxpbmRhClNhbGVzIE1hbmFnZXIgbCBWaWMgTWFya2V0IFJlc2VhcmNoIENvLixMdGQu

CkVtYWlsOiBsaW5kYUB2aWNtYXJrZXRyZXNlYXJjaC5jb20K

------=ALIBOUNDARY_1276_7fe37fba9700_68ec9d16_dd2d8

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: base64



PGRpdiBjbGFzcz0iX19hbGl5dW5fZW1haWxfYm9keV9ibG9jayI+PGRpdiAgc3R5bGU9ImZvbnQt

ZmFtaWx5OiBUYWhvbWEsIEFyaWFsLCBTVEhlaXRpU0MtTGlnaHQsIFNpbVN1biI+PGRpdiAgc3R5

bGU9ImNsZWFyOiBib3RoOyBmb250LWZhbWlseTogVGFob21hLCBBcmlhbCwgU1RIZWl0aVNDLUxp

Z2h0LCBTaW1TdW47Ij48c3BhbiAgc3R5bGU9ImZvbnQtZmFtaWx5OiBUYWhvbWEsIEFyaWFsLCBT

VEhlaXRpU0MtTGlnaHQsIFNpbVN1bjsiPjxzcGFuID5IaSBGcmllbmQsPGJyID48L3NwYW4+PC9z

cGFuPjxkaXYgIHN0eWxlPSJjbGVhcjogYm90aDsiPjxiciA+PC9kaXY+PGRpdiAgc3R5bGU9ImNs

ZWFyOiBib3RoOyI+SGVyZSdzIHRoZSBvbmUgcmVwb3J0IG9uIHRoZSBhbmFseXNpcyBvZiB0aGUg

U2VjdXJpdHkgRGV0ZWN0b3JzIGFuZCBTY2FubmVycyBNYXJrZXQgdGhhdCB5b3UgY291bGQgc2hh

cmUgd2l0aCB5b3VyIG1hbmFnZW1lbnQgdGVhbS48YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVh

cjogYm90aDsiPlNlZ21lbnQgYnkgVHlwZSZuYnNwOyA8YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJj

bGVhcjogYm90aDsiPlgtcmF5IFNlY3VyaXR5IFNjYW5uZXIgU3lzdGVtczxiciA+PC9kaXY+PGRp

diAgc3R5bGU9ImNsZWFyOiBib3RoOyI+TWV0YWwgRGV0ZWN0b3JzPGJyID48L2Rpdj48ZGl2ICBz

dHlsZT0iY2xlYXI6IGJvdGg7Ij5FeHBsb3NpdmUgRGV0ZWN0b3JzPGJyID48L2Rpdj48ZGl2ICBz

dHlsZT0iY2xlYXI6IGJvdGg7Ij48YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90aDsi

PlNlZ21lbnQgYnkgQXBwbGljYXRpb248YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90

aDsiPkFpcnBvcnRzPGJyID48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij5EZWZlbnNl

PGJyID48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij5GcmVpZ2h0IGFuZCBTaGlwcGlu

ZzxiciA+PC9kaXY+PGRpdiAgc3R5bGU9ImNsZWFyOiBib3RoOyI+T3RoZXJzPGJyID48L2Rpdj48

ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij48YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjog

Ym90aDsiPlRoZSBmb2xsb3dpbmcgcGxheWVycyBhcmUgY292ZXJlZCBpbiB0aGlzIHJlcG9ydDo8

YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90aDsiPkZ1aml0c3U8YnIgPjwvZGl2Pjxk

aXYgIHN0eWxlPSJjbGVhcjogYm90aDsiPlRlbGVkeW5lIEZMSVI8YnIgPjwvZGl2PjxkaXYgIHN0

eWxlPSJjbGVhcjogYm90aDsiPkdhcnJldHQgTWV0YWwgRGV0ZWN0b3JzPGJyID48L2Rpdj48ZGl2

ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij5TbWl0aHMgRGV0ZWN0aW9uIEluYy48YnIgPjwvZGl2Pjxk

aXYgIHN0eWxlPSJjbGVhcjogYm90aDsiPlRoYWxlczxiciA+PC9kaXY+PGRpdiAgc3R5bGU9ImNs

ZWFyOiBib3RoOyI+QnJ1a2VyPGJyID48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij5P

U0kgU3lzdGVtczxiciA+PC9kaXY+PGRpdiAgc3R5bGU9ImNsZWFyOiBib3RoOyI+QW5hbG9naWMg

Q29ycG9yYXRpb248YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90aDsiPk51Y3RlY2gg

Q29tcGFueSBMaW1pdGVkPGJyID48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij5Bc3Ry

b3BoeXNpY3MgSW5jLjxiciA+PC9kaXY+PGRpdiAgc3R5bGU9ImNsZWFyOiBib3RoOyI+KE1vcmUg

Y29tcGFuaWVzIGFyZSBhdmFpbGFibGUgYXMgeW91IHdhbnTigKbigKYpPGJyID48L2Rpdj48ZGl2

ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij48YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90

aDsiPklmIHlvdSBhcmUgaW50ZXJlc3RlZCBpbiBnZXR0aW5nIGEgc2FtcGxlIHJlcG9ydCBvciBw

bGFjaW5nIGFuIG9yZGVyLCBwbGVhc2UgZmVlbCBmcmVlIHRvIGNvbnRhY3QgbGluZGFAdmljbWFy

a2V0cmVzZWFyY2guY29tLjxiciA+PC9kaXY+PGRpdiAgc3R5bGU9ImNsZWFyOiBib3RoOyI+VGhh

bmtzIGZvciByZWFkaW5nIHRoaXMgZW1haWwgYW5kIGhvcGUgZXZlcnl0aGluZyBnb2VzIHdlbGwg

d2l0aCB5b3UuPGJyID48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij48YnIgPjwvZGl2

PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90aDsiPkJlc3QgcmVnYXJkcyAvIE1pdCBmcmV1bmRsaWNo

ZW4gR3LDvMOfZW4gLyDmraToh7TmlazmhI8sPGJyID48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6

IGJvdGg7Ij5MaW5kYTxiciA+PC9kaXY+PGRpdiAgc3R5bGU9ImNsZWFyOiBib3RoOyI+U2FsZXMg

TWFuYWdlciBsIFZpYyBNYXJrZXQgUmVzZWFyY2ggQ28uLEx0ZC48YnIgPjwvZGl2PjxkaXYgPjxz

cGFuID5FbWFpbDogbGluZGFAdmljbWFya2V0cmVzZWFyY2guY29tPGJyID48L3NwYW4+PC9kaXY+

PHNwYW4gIHN0eWxlPSJmb250LWZhbWlseTogVGFob21hLCBBcmlhbCwgU1RIZWl0aVNDLUxpZ2h0

LCBTaW1TdW47Ij48YnIgPjwvc3Bhbj48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7IGZv

bnQtZmFtaWx5OiBUYWhvbWEsIEFyaWFsLCBTVEhlaXRpU0MtTGlnaHQsIFNpbVN1bjsiPjxzcGFu

ICBzdHlsZT0iZm9udC1mYW1pbHk6IFRhaG9tYSwgQXJpYWwsIFNUSGVpdGlTQy1MaWdodCwgU2lt

U3VuOyI+PGJyID48L3NwYW4+PC9kaXY+PGRpdiAgY2xhc3M9ImFsaW1haWwtc2lnbmF0dXJlIj48

L2Rpdj48L2Rpdj48L2Rpdj4=

------=ALIBOUNDARY_1276_7fe37fba9700_68ec9d16_dd2d8--

Security hardware spam from China

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 13 Oct 2025 08:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1v8JnT-000000000b6-2txJ

for dave@doctor.nl2k.ab.ca;

Mon, 13 Oct 2025 08:45:11 -0600

Resent-From: The Doctor

Resent-Date: Mon, 13 Oct 2025 08:45:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out198-52.us.a.mail.aliyun.com ([47.90.198.52]:32817)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1v8C8p-00000000HPO-2FXf

for root@doctor.nl2k.ab.ca;

Mon, 13 Oct 2025 00:34:53 -0600

X-Alimail-AntiSpam:AC=CONTINUE;BC=0.4090472|-1;BR=01201311R151S66rulernew999_84748_2000303;CH=yellow;DM=|CONTINUE|false|;DS=CONTINUE|ham_alarm|0.481667-0.0144557-0.503877;FP=17085506964758767261|3|1|132|0|-1|-1|-1;HT=maildocker-contentspam033065129056;MF=geoffrey@vmrmarket.com;NM=1;PH=DW;RN=165;RT=1;SR=0;TI=W4_0.2.3_v5ForWebDing_212504AB_1760337174269_o7001c173q;

Received: from WS-web (geoffrey@vmrmarket.com[W4_0.2.3_v5ForWebDing_212504AB_1760337174269_o7001c173q] cluster:ay29) at Mon, 13 Oct 2025 14:32:54 +0800

Date: Mon, 13 Oct 2025 14:32:54 +0800

From: "Geoffrey"

Cc: "viclinda132"

Reply-To: "Geoffrey"

Message-ID:

Subject: =?UTF-8?B?U2VjdXJpdHkgRGV0ZWN0b3JzIGFuZCBTY2FubmVycw==?=

X-Mailer: [Alimail-Mailagent revision 3][W4_0.2.3][v5ForWebDing][Chrome]

MIME-Version: 1.0

x-aliyun-im-through: {"version":"v1.0"}

x-aliyun-mail-creator: W4_0.2.3_v5ForWebDing_SFRTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzE0MS4wLjAuMCBTYWZhcmkvNTM3LjM2IEVkZy8xNDEuMC4wLjA=Ch

Content-Type: multipart/alternative;

boundary="----=ALIBOUNDARY_1276_7fe37fba9700_68ec9d16_dd2d8"

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi Friend, Here's the one report on the analysis of the Security

Detectors and Scanners Market that you could share with your management team.

Segment by Type X-ray Security Scanner Systems Metal Dete [...]



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[47.90.198.52 listed in will-spam-for-food.eu.org]

[47.90.198.52 listed in will-spam-for-food.eu.org]

[47.90.198.52 listed in will-spam-for-food.eu.org]

[47.90.198.52 listed in will-spam-for-food.eu.org]

[47.90.198.52 listed in will-spam-for-food.eu.org]

[47.90.198.52 listed in will-spam-for-food.eu.org]

[47.90.198.52 listed in will-spam-for-food.eu.org]

[47.90.198.52 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[47.90.198.52 listed in dnsbl.ahbl.org]

[47.90.198.52 listed in dnsbl.ahbl.org]

[47.90.198.52 listed in dnsbl.ahbl.org]

[47.90.198.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[47.90.198.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[47.90.198.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[47.90.198.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[47.90.198.52 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

Subject: {SPAM?} =?UTF-8?B?U2VjdXJpdHkgRGV0ZWN0b3JzIGFuZCBTY2FubmVycw==?=



------=ALIBOUNDARY_1276_7fe37fba9700_68ec9d16_dd2d8

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: base64



SGkgRnJpZW5kLApIZXJlJ3MgdGhlIG9uZSByZXBvcnQgb24gdGhlIGFuYWx5c2lzIG9mIHRoZSBT

ZWN1cml0eSBEZXRlY3RvcnMgYW5kIFNjYW5uZXJzIE1hcmtldCB0aGF0IHlvdSBjb3VsZCBzaGFy

ZSB3aXRoIHlvdXIgbWFuYWdlbWVudCB0ZWFtLgpTZWdtZW50IGJ5IFR5cGUgClgtcmF5IFNlY3Vy

aXR5IFNjYW5uZXIgU3lzdGVtcwpNZXRhbCBEZXRlY3RvcnMKRXhwbG9zaXZlIERldGVjdG9ycwpT

ZWdtZW50IGJ5IEFwcGxpY2F0aW9uCkFpcnBvcnRzCkRlZmVuc2UKRnJlaWdodCBhbmQgU2hpcHBp

bmcKT3RoZXJzClRoZSBmb2xsb3dpbmcgcGxheWVycyBhcmUgY292ZXJlZCBpbiB0aGlzIHJlcG9y

dDoKRnVqaXRzdQpUZWxlZHluZSBGTElSCkdhcnJldHQgTWV0YWwgRGV0ZWN0b3JzClNtaXRocyBE

ZXRlY3Rpb24gSW5jLgpUaGFsZXMKQnJ1a2VyCk9TSSBTeXN0ZW1zCkFuYWxvZ2ljIENvcnBvcmF0

aW9uCk51Y3RlY2ggQ29tcGFueSBMaW1pdGVkCkFzdHJvcGh5c2ljcyBJbmMuCihNb3JlIGNvbXBh

bmllcyBhcmUgYXZhaWxhYmxlIGFzIHlvdSB3YW504oCm4oCmKQpJZiB5b3UgYXJlIGludGVyZXN0

ZWQgaW4gZ2V0dGluZyBhIHNhbXBsZSByZXBvcnQgb3IgcGxhY2luZyBhbiBvcmRlciwgcGxlYXNl

IGZlZWwgZnJlZSB0byBjb250YWN0IGxpbmRhQHZpY21hcmtldHJlc2VhcmNoLmNvbS4KVGhhbmtz

IGZvciByZWFkaW5nIHRoaXMgZW1haWwgYW5kIGhvcGUgZXZlcnl0aGluZyBnb2VzIHdlbGwgd2l0

aCB5b3UuCkJlc3QgcmVnYXJkcyAvIE1pdCBmcmV1bmRsaWNoZW4gR3LDvMOfZW4gLyDmraToh7Tm

lazmhI8sCkxpbmRhClNhbGVzIE1hbmFnZXIgbCBWaWMgTWFya2V0IFJlc2VhcmNoIENvLixMdGQu

CkVtYWlsOiBsaW5kYUB2aWNtYXJrZXRyZXNlYXJjaC5jb20K

------=ALIBOUNDARY_1276_7fe37fba9700_68ec9d16_dd2d8

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: base64



PGRpdiBjbGFzcz0iX19hbGl5dW5fZW1haWxfYm9keV9ibG9jayI+PGRpdiAgc3R5bGU9ImZvbnQt

ZmFtaWx5OiBUYWhvbWEsIEFyaWFsLCBTVEhlaXRpU0MtTGlnaHQsIFNpbVN1biI+PGRpdiAgc3R5

bGU9ImNsZWFyOiBib3RoOyBmb250LWZhbWlseTogVGFob21hLCBBcmlhbCwgU1RIZWl0aVNDLUxp

Z2h0LCBTaW1TdW47Ij48c3BhbiAgc3R5bGU9ImZvbnQtZmFtaWx5OiBUYWhvbWEsIEFyaWFsLCBT

VEhlaXRpU0MtTGlnaHQsIFNpbVN1bjsiPjxzcGFuID5IaSBGcmllbmQsPGJyID48L3NwYW4+PC9z

cGFuPjxkaXYgIHN0eWxlPSJjbGVhcjogYm90aDsiPjxiciA+PC9kaXY+PGRpdiAgc3R5bGU9ImNs

ZWFyOiBib3RoOyI+SGVyZSdzIHRoZSBvbmUgcmVwb3J0IG9uIHRoZSBhbmFseXNpcyBvZiB0aGUg

U2VjdXJpdHkgRGV0ZWN0b3JzIGFuZCBTY2FubmVycyBNYXJrZXQgdGhhdCB5b3UgY291bGQgc2hh

cmUgd2l0aCB5b3VyIG1hbmFnZW1lbnQgdGVhbS48YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVh

cjogYm90aDsiPlNlZ21lbnQgYnkgVHlwZSZuYnNwOyA8YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJj

bGVhcjogYm90aDsiPlgtcmF5IFNlY3VyaXR5IFNjYW5uZXIgU3lzdGVtczxiciA+PC9kaXY+PGRp

diAgc3R5bGU9ImNsZWFyOiBib3RoOyI+TWV0YWwgRGV0ZWN0b3JzPGJyID48L2Rpdj48ZGl2ICBz

dHlsZT0iY2xlYXI6IGJvdGg7Ij5FeHBsb3NpdmUgRGV0ZWN0b3JzPGJyID48L2Rpdj48ZGl2ICBz

dHlsZT0iY2xlYXI6IGJvdGg7Ij48YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90aDsi

PlNlZ21lbnQgYnkgQXBwbGljYXRpb248YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90

aDsiPkFpcnBvcnRzPGJyID48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij5EZWZlbnNl

PGJyID48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij5GcmVpZ2h0IGFuZCBTaGlwcGlu

ZzxiciA+PC9kaXY+PGRpdiAgc3R5bGU9ImNsZWFyOiBib3RoOyI+T3RoZXJzPGJyID48L2Rpdj48

ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij48YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjog

Ym90aDsiPlRoZSBmb2xsb3dpbmcgcGxheWVycyBhcmUgY292ZXJlZCBpbiB0aGlzIHJlcG9ydDo8

YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90aDsiPkZ1aml0c3U8YnIgPjwvZGl2Pjxk

aXYgIHN0eWxlPSJjbGVhcjogYm90aDsiPlRlbGVkeW5lIEZMSVI8YnIgPjwvZGl2PjxkaXYgIHN0

eWxlPSJjbGVhcjogYm90aDsiPkdhcnJldHQgTWV0YWwgRGV0ZWN0b3JzPGJyID48L2Rpdj48ZGl2

ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij5TbWl0aHMgRGV0ZWN0aW9uIEluYy48YnIgPjwvZGl2Pjxk

aXYgIHN0eWxlPSJjbGVhcjogYm90aDsiPlRoYWxlczxiciA+PC9kaXY+PGRpdiAgc3R5bGU9ImNs

ZWFyOiBib3RoOyI+QnJ1a2VyPGJyID48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij5P

U0kgU3lzdGVtczxiciA+PC9kaXY+PGRpdiAgc3R5bGU9ImNsZWFyOiBib3RoOyI+QW5hbG9naWMg

Q29ycG9yYXRpb248YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90aDsiPk51Y3RlY2gg

Q29tcGFueSBMaW1pdGVkPGJyID48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij5Bc3Ry

b3BoeXNpY3MgSW5jLjxiciA+PC9kaXY+PGRpdiAgc3R5bGU9ImNsZWFyOiBib3RoOyI+KE1vcmUg

Y29tcGFuaWVzIGFyZSBhdmFpbGFibGUgYXMgeW91IHdhbnTigKbigKYpPGJyID48L2Rpdj48ZGl2

ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij48YnIgPjwvZGl2PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90

aDsiPklmIHlvdSBhcmUgaW50ZXJlc3RlZCBpbiBnZXR0aW5nIGEgc2FtcGxlIHJlcG9ydCBvciBw

bGFjaW5nIGFuIG9yZGVyLCBwbGVhc2UgZmVlbCBmcmVlIHRvIGNvbnRhY3QgbGluZGFAdmljbWFy

a2V0cmVzZWFyY2guY29tLjxiciA+PC9kaXY+PGRpdiAgc3R5bGU9ImNsZWFyOiBib3RoOyI+VGhh

bmtzIGZvciByZWFkaW5nIHRoaXMgZW1haWwgYW5kIGhvcGUgZXZlcnl0aGluZyBnb2VzIHdlbGwg

d2l0aCB5b3UuPGJyID48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7Ij48YnIgPjwvZGl2

PjxkaXYgIHN0eWxlPSJjbGVhcjogYm90aDsiPkJlc3QgcmVnYXJkcyAvIE1pdCBmcmV1bmRsaWNo

ZW4gR3LDvMOfZW4gLyDmraToh7TmlazmhI8sPGJyID48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6

IGJvdGg7Ij5MaW5kYTxiciA+PC9kaXY+PGRpdiAgc3R5bGU9ImNsZWFyOiBib3RoOyI+U2FsZXMg

TWFuYWdlciBsIFZpYyBNYXJrZXQgUmVzZWFyY2ggQ28uLEx0ZC48YnIgPjwvZGl2PjxkaXYgPjxz

cGFuID5FbWFpbDogbGluZGFAdmljbWFya2V0cmVzZWFyY2guY29tPGJyID48L3NwYW4+PC9kaXY+

PHNwYW4gIHN0eWxlPSJmb250LWZhbWlseTogVGFob21hLCBBcmlhbCwgU1RIZWl0aVNDLUxpZ2h0

LCBTaW1TdW47Ij48YnIgPjwvc3Bhbj48L2Rpdj48ZGl2ICBzdHlsZT0iY2xlYXI6IGJvdGg7IGZv

bnQtZmFtaWx5OiBUYWhvbWEsIEFyaWFsLCBTVEhlaXRpU0MtTGlnaHQsIFNpbVN1bjsiPjxzcGFu

ICBzdHlsZT0iZm9udC1mYW1pbHk6IFRhaG9tYSwgQXJpYWwsIFNUSGVpdGlTQy1MaWdodCwgU2lt

U3VuOyI+PGJyID48L3NwYW4+PC9kaXY+PGRpdiAgY2xhc3M9ImFsaW1haWwtc2lnbmF0dXJlIj48

L2Rpdj48L2Rpdj48L2Rpdj4=

------=ALIBOUNDARY_1276_7fe37fba9700_68ec9d16_dd2d8--