Dating solicitation spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 27 Mar 2024 09:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpVLM-000000008Ft-32w7

for dave@doctor.nl2k.ab.ca;

Wed, 27 Mar 2024 09:37:36 -0600

Resent-From: The Doctor

Resent-Date: Wed, 27 Mar 2024 09:37:36 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn8nam12olkn2092.outbound.protection.outlook.com ([40.92.21.92]:58241 helo=NAM12-BN8-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpUkP-00000000ONk-31s1

for support@nk.ca;

Wed, 27 Mar 2024 08:59:30 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=QAB8w2vhiTAxyu5luih2KXypaXamRUcNHVvTNlSrZS6my5ySAIqcfZsvj0IBG6X6/FJhYJV0etrqGlckgl/5nU/DdK+NS49Z0O9Q9Dr8BLfvpNuHgG6jNshicY5Xz6onf93ri88Vxxtxw+YEI3F5NmMwMiQqNIx3Lni1sAtGZUde8qmU4DFyPQBmCGg2qiSYDraKD81LfrVHZshOyl7W26ZoDbza1olz9x7eGNoyfZBh0EVKIKW6139XMQiSj4l/R/vUkf8kLUKSsonmbrELp+4wlZjtZsygVIHFyGV1QVoGsYc2bLXqk4XTw2OLfyr1pvquuEOWTYL5fS6smEAIrQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=CGYi6HnCstnrYFKFmSfwF6bEt5V3GxGW/MoMeiOsFl0=;

b=Dpe/MRKSM1WEWjEIsgF64FoW43onZIWGOeaoPNuGdtlHEf7cUvemOa3Kx2AICttvrYG5sFrsxXSus0XCtaqzkU0YZwBOX1W9N1ofNywEiV57akl60U40mwPmicVdq4w1RIF717mVoqAAdQCEwSFlzpRHxkmths9FztWDn6YuI99WAJ8RwzLMDSwxhmWar2tYRwUblv+1PqwCxaMI9a3COM87TrCj5l++XKiVt1AfvNgJZG2YXSvrh6rIhZXedq7d8yMAQDOkx/oRQ935K4zWYkwN+js7Ao147ne/1kgO4ov1k4Zv9nULIXrifw7qm3tCpT80oEGg+S2LLYmGrmds1g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=CGYi6HnCstnrYFKFmSfwF6bEt5V3GxGW/MoMeiOsFl0=;

b=kRfLANOlP524RzDRzjipkN3efhaK6y/CmmfOqCdLM2reKcMo0U5nV/dmdLnt0u6tk7SY/zZPQVoyA6pNPPpfYfh+CZ2zG27MkdoRkpKRUzF7mpJYclS8+hbL5jYSQvz/LhkbafIU8oCtOSrv44+86kOuA+bLD35A4+KB88yu4OWfMFy70AK3bG1DtHlD6LCPs4fWBrB77XV1e7+XNLVwOFbkn+T97uSf7rJwX/u8gTFeWS2xTGe2q3h8bUcDBp/2syOQnyutz4+qohOva9TRPuaxtNvFmX+Px8qxfEnvF/d9hM/ZOi60DiVSh0e+PyeuzB4RtX410ncpR4UZ0LuY6g==

Received: from SA1PR19MB8071.namprd19.prod.outlook.com (2603:10b6:806:37c::22)

by MN2PR19MB4014.namprd19.prod.outlook.com (2603:10b6:208:1e2::9) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.32; Wed, 27 Mar

2024 14:57:11 +0000

Received: from SA1PR19MB8071.namprd19.prod.outlook.com

([fe80::eb39:40bd:8d9b:ca43]) by SA1PR19MB8071.namprd19.prod.outlook.com

([fe80::eb39:40bd:8d9b:ca43%5]) with mapi id 15.20.7409.028; Wed, 27 Mar 2024

14:57:11 +0000

Content-Type: multipart/alternative; boundary="===============2398250120347260698=="

Subject: =?utf-8?b?TGlrZWQgeW91ciBzdG9yeSDinaTvuI8=?=

From: DateFlix

CC: DateFlix

Date: Wed, 27 Mar 2024 14:56:05 +0000

X-TMN: [m81md0hQOZtvX5X7dPIs3lPSqpqWR22z]

X-ClientProxiedBy: VI1PR09CA0129.eurprd09.prod.outlook.com

(2603:10a6:803:12c::13) To SA1PR19MB8071.namprd19.prod.outlook.com

(2603:10b6:806:37c::22)

Message-ID:



MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: SA1PR19MB8071:EE_|MN2PR19MB4014:EE_

X-MS-Office365-Filtering-Correlation-Id: c7154470-f72a-4f62-55c8-08dc4e6e2d0a

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

z3xIzIN8fl6Rduwpt0YI9sxwy4JywtQFecDGZulNBDc94Qy66q4ZAAyfiSOZhRzE4J9Od49/lAx4HB371WtDI/aOmuG9wFsEKjRaBah56jbnAOsaRA6HG29cE1TMMA4gh+8cbncVcRayFLE7IqeQI4wcD06Op/GShZgdLPwyzObzojTk2eaQqooGId+yQnvxZk08t9Eq/KhUPctIwFEfD+UFRj47AEHPKcbRCkr8H10luGo8UdVHfZ7uDMrLbf72odkPPaGVZHa4EsAIbMMUR1luRU8rgV7RMpQZ4rQsloK3pnajg883L8VHNivF6vHw1mbFeJEQHBWD8+8KaiZE5pLT75rqZ1BfG7YMKeQOfFnbrHy1nHmfutiKH1vQjYuh7uXD9lXzu8+EQh+azyGjOwJd5XN2/fvD4Q1MOIqyE8pdfm1NWHe2+HNAdeEbJNal0P01/Gbihl+6o/0vRczs/n29Oug01NqvSga+7R/hy+gvjZ47Tu5x11/P1tlsqsZHjl8eGP0hwNrM9NxbQnIRxPx3zR5NG6Xfx31oMlTAZvrOdYY7EnKeSwGTtuIRa9e5Oh/v3ydGYxFslmNFVeZbM/AJfZNvAsI/DDoFxQe/czkHDWEKzV9luX4y3Rosrp8AJJ5qlF7n3PLIptgFB/39NvjyI0AtetZdTMfg4HFUJFG6SOZdheBzNo4zRNLOLBjRRUcHiFp3PXLvDg33CuA724Vnsf57iRBtLAB+5RWwYuhLh4jZkS3r5xqf1vpgj/gp38I3NpwU+Xq1wou72j5pk2ANURJ+T6USxZXQJ8g6HW8=

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?RGwySG5XTGZUa2VYc2tWMHZSbW5vT3ljMlZocnhTRkdFc0RBbHpxWER2NmJH?=

=?utf-8?B?aUdsR2ZoNE5PSGVkQkFnL0p4RWZvaEc4bFFieWVKaHFWWjhvSFloUCtMN3Uv?=

=?utf-8?B?MVFvanAvbkYrc25zVUxySDRobUgwbUw4UTNTblE5YUovYUpvT1JmNEZxcEhU?=

=?utf-8?B?Vkd5ZGhNejN0Umlrb29Ka1JtWFdDK0FZTklzVnJ5SzlkUWxlTWQxNm1FV0cy?=

=?utf-8?B?QlZ2SDlMcXF4czErTWhOeXN1Y3ZkckJKd25YeUx1dHRiRElNNEZYbldIRGNp?=

=?utf-8?B?K1hOWG9DYWVVTnZGaUpmZDlRUml4d0RXZ0daeXdDd1ErU0lDK2VodHFHdS9O?=

=?utf-8?B?WXF0dXJKMkdLd3kyM3dGbWt4c3h4V2l6Yy94R1c1RzdtQU5aZXd5QU9kUzBG?=

=?utf-8?B?dGdDRjY1ZWRGYUZJNDNBNEN4aC9vVVJBZ0RIN2ZLNklEcitDZmFBdDRsTHd5?=

=?utf-8?B?QkRKS0FaT0hhenJQOHJCNEJkT0plZ2s0YmY0TEZqS2FUM0VKVCtyc2pxcGtJ?=

=?utf-8?B?aFFqdU5FK3hWbk5xQko1Sit0WXF2VUpSMENBN0EwcTlGRURzT2N6RDJPbGwz?=

=?utf-8?B?ZlpENXFwVnRiaW03S2l6Q0pMTGVackRydG5BU2F1KysybWVZWHFPMlFzUkNP?=

=?utf-8?B?aGpkdFhER3NydERqRnh0ZnpLNDBwQ2QwelN4dG5Jb3p2WUY5WkVUNGhrT3JE?=

=?utf-8?B?dU0wZGtCM1M3T3U0VGJlMFNZUHFibHVOUWNhNHljOGVhTkJxRlZtWk5zM1hX?=

=?utf-8?B?cGl5RUxlRkR3bFUxQUtsSlk2M0dKUlQxa0kxOFVIaWVYNU9kdDhiR1FCbkxy?=

=?utf-8?B?bUlhaFRDOWpOcjhSdU1Mc0N6U3UyS3FSMnowOUZ6NGoyRDN1L2JEWmlRb2FI?=

=?utf-8?B?ZEpkSldYZjlFaEJvdXZZTDNPS2xaL3UrN25IcFR6UVBqZWptaHZQK2pmOGpI?=

=?utf-8?B?azFaUE13VmRqaXowME1NOGcySWRxSlViSy96TzRmcjJUY1A4VC9jQXduR0hz?=

=?utf-8?B?Yk5WbjdQeis5ajdQdnUwRkt5azB0eHRONHo1NGwxRStCaEtpNDV4VzZKa3Nh?=

=?utf-8?B?c3A2UlRTM0RyckRsZ1NMZGpMbGFqdE9lQzhBaUFqZThMMWNRK0VYOHhNRU1t?=

=?utf-8?B?dmFQdmZYSkNodmFnVHczVlN0b2MvT2pjdk52K0wyMUNScGkrZ2NFbU1UQjJj?=

=?utf-8?B?YlFPaC9hRmtLb1NhRXkwRzRFdzFGSW5RRkorWUtsREM5d0VjcnoxdHZMUnYz?=

=?utf-8?B?YjU0NFYyWlpaVzRmVXMwVnhyMXE0UFNJZ3dzMVpiOUJBVFJyYXBkWlJNeFk4?=

=?utf-8?B?QXhmWUNBaHQzSWtUYWtndGJGZjNjaXBON0Rld2hXc1NVTFdnNW96aFVpcy9x?=

=?utf-8?B?b2MvZUJjN1Q0VkhPU042QTZOWC9NTDZTbmVjVXZ6cjRKMi9vYzZrYkM3S1B2?=

=?utf-8?B?ZEZUaVJMYzBXeUlFZlJQbG9ZMXcyRFp3ZDg1d1l4Y1d0a0hsVGJiUHdhamkr?=

=?utf-8?B?VUVwbEZ2WHBTaHVoK3ZEaU4vYTJlZGlxYlhEUkRRb2cycWRMMTN2Q21wSE53?=

=?utf-8?B?ZGFhbnFrYmFiQ1lXc2IxaWd5NWRVWm1OME5zdllZMG9ubC9WTEFocGlpUnNt?=

=?utf-8?B?M2tYWnFlR0dZNytzN3hIbWI1WHAvYklKZUNQOStyeUVOTmpDblpISTU0ZU1H?=

=?utf-8?B?UnJDak1TcktGMmloL2NKMWljcmNGa0N2aFkwUm9TUGE1c0V4by8rV25nPT0=?=

X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-e7757.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: c7154470-f72a-4f62-55c8-08dc4e6e2d0a

X-MS-Exchange-CrossTenant-AuthSource: SA1PR19MB8071.namprd19.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Mar 2024 14:57:10.7524

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR19MB4014

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Document Are you interested in making connections with new

women nearby? Are you seeking a distinctive platform to meet singles? Discover

NewGirl, where you can indulge in meaningful conversations unlike those found

on conventional dating sites!



Content analysis details: (5.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.21.92 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.21.92 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[courtlinbrackemyre41(at)hotmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[courtlinbrackemyre41(at)hotmail.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

-0.0 T_SCC_BODY_TEXT_LINE No description available.

Subject: {SPAM?} =?utf-8?b?TGlrZWQgeW91ciBzdG9yeSDinaTvuI8=?=

X-Antivirus: AVG (VPS 240327-2, 3/27/2024), Inbound message

X-Antivirus-Status: Clean



--===============2398250120347260698==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



PCFET0NUWVBFIGh0bWw+PGh0bWwgbGFuZz0iZW4iPjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVpdj0i

Q29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPgo8bWV0YSBu

YW1lPSJ2aWV3cG9ydCIgY29udGVudD0id2lkdGg9ZGV2aWNlLXdpZHRoLCBpbml0aWFsLXNjYWxl

PTEuMCI+Cjx0aXRsZT5Eb2N1bWVudDwvdGl0bGU+CjwvaGVhZD4KPGJvZHk+CjxwIHN0eWxlPSJ0

ZXh0LWFsaWduOmNlbnRlciI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMy45OTk5OTk5OTk5OTk5

OThwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFsLHNhbnMtc2VyaWYiPjxzcGFuIHN0

eWxlPSJjb2xvcjojMDAwMDAwIj48c3Ryb25nPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTZweCI+

QXJlIHlvdSBpbnRlcmVzdGVkIGluIG1ha2luZyBjb25uZWN0aW9ucyB3aXRoIG5ldyB3b21lbiBu

ZWFyYnk/PC9zcGFuPjxicj4KPGJyPgo8aW1nIHNyYz0iaHR0cHM6Ly9saDctdXMuZ29vZ2xldXNl

cmNvbnRlbnQuY29tL21mUFljeFVibThUUzJIUFNwdnFodFpEYXV3R240YXJkNFpkdF9HM0x4Ymxa

R25tOTBadDJXa3N3dDJMX2p6UDhPbEFvUEMtYmdBYnhzMjZKc2U4Z0ZiazhudGdRdmM1N0ZsOE16

TWd1R2ZXR2FKQlpmbHZWZGpGMTBNNXlRUzQxdUJKVE1fWTl4TnJCWUFzZnE4bXFlN28iIHN0eWxl

PSJoZWlnaHQ6MjY1cHg7IHdpZHRoOjYyNHB4Ij48L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwvc3Bh

bj48L3A+Cgo8cCBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXIiPjxzcGFuIHN0eWxlPSJmb250LXNp

emU6MTZweCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFsLHNhbnMtc2VyaWYiPjxzcGFu

IHN0eWxlPSJjb2xvcjojMDAwMDAwIj48c3Ryb25nPkFyZSB5b3Ugc2Vla2luZyBhIGRpc3RpbmN0

aXZlIHBsYXRmb3JtIHRvIG1lZXQgc2luZ2xlcz8gRGlzY292ZXIgPGEgaHJlZj0iaHR0cHM6Ly9y

Yi5neS9kZnFoaGoiPk5ld0dpcmw8L2E+LCB3aGVyZSB5b3UgY2FuIGluZHVsZ2UgaW4gbWVhbmlu

Z2Z1bCBjb252ZXJzYXRpb25zIHVubGlrZSB0aG9zZSBmb3VuZCBvbiBjb252ZW50aW9uYWwgZGF0

aW5nIHNpdGVzITwvc3Ryb25nPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvcD4KCjxwPiZuYnNwOzwv

cD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PHN0cm9uZz48c3BhbiBzdHlsZT0iZm9u

dC1zaXplOjEwcHgiPuKsh+KshyZuYnNwOzxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpBcmlhbCxz

YW5zLXNlcmlmIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMDAwMCI+QnJvd3NlIHByb2ZpbGVzIG9m

IHRoZXNlIHRocmVlIGxhZGllcyBhbmQgbW9yZSB2aWEgdGhpcyBsaW5rIDwvc3Bhbj48L3NwYW4+

4qyH4qyHPC9zcGFuPjwvc3Ryb25nPjwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+

PGEgaHJlZj0iaHR0cDovL3QubHkvcEV3aEgiIHN0eWxlPSJ0ZXh0LWRlY29yYXRpb246bm9uZSI+

PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxOHB0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6QXJp

YWwsc2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxMTU1Y2MiPjxzdHJvbmc+RGF0ZUZs

aXg8L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L2E+PC9wPgoKPHA+Jm5ic3A7PC9wPgoK

PHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjE4cHgi

PjxzdHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFsLHNhbnMtc2VyaWYiPjxzcGFu

IHN0eWxlPSJjb2xvcjojMDAwMDAwIj48c3Ryb25nPlJlZ2lzdGVyIGZvciBmcmVlLCBmb3IgYSBs

aW1pdGVkIHRpbWUgb25seSEgU2VpemUgdGhpcyBvcHBvcnR1bml0eSBiZWZvcmUgaXQgZGlzYXBw

ZWFycyE8L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwvc3Ryb25nPjwvc3Bhbj48YnI+CiZuYnNwOzwv

cD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+Jm5ic3A7PC9wPgoKPHAgc3R5bGU9InRl

eHQtYWxpZ246Y2VudGVyIj48YnI+Cjxicj4KVG8gc3RvcCByZWNlaXZpbmcgcHJvbW8sIGNsaWNr

IHRoZSA8YSBocmVmPSJodHRwOi8vdC5seS9IRVVkdCI+dW5zdWJzY3JpYmUgbGluazwvYT4uPHNw

YW4gc3R5bGU9ImZvbnQtc2l6ZToyMnB4Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6QXJpYWws

c2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPiA8L3NwYW4+PC9zcGFuPjwv

c3Bhbj48L3A+Cgo8cD4mbmJzcDs8L3A+Cgo8cD4mbmJzcDs8L3A+Cgo8cD48c3Ryb25nPjxzdHJv

bmc+Jm5ic3A7PC9zdHJvbmc+PC9zdHJvbmc+PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2Vu

dGVyIj48c3Ryb25nPjxzdHJvbmc+Jm5ic3A7PC9zdHJvbmc+PC9zdHJvbmc+PC9wPgoKPHAgc3R5

bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3Ryb25nPjxzdHJvbmc+Jm5ic3A7PC9zdHJvbmc+PC9z

dHJvbmc+PC9wPgo8L2JvZHk+CjwvaHRtbD4=



--===============2398250120347260698==--

Dewalt Canadian Tire phish from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 27 Mar 2024 07:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpThZ-00000000JGa-2iDe

for dave@doctor.nl2k.ab.ca;

Wed, 27 Mar 2024 07:52:25 -0600

Resent-From: The Doctor

Resent-Date: Wed, 27 Mar 2024 07:52:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn8nam04on2103.outbound.protection.outlook.com ([40.107.100.103]:23489 helo=NAM04-BN8-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpRyH-00000000AhK-08oB

for root@nk.ca;

Wed, 27 Mar 2024 06:01:38 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=UWUszyb8qnQQcARf/G+WCu3zzjYW/pbGTWmf6dW4zXusMEcFCJ0unwSa6gmgltdB8em2ZhcdRsxv1bl3yA5DwoV/u17tMM/sSSi0i18HijyxHxUTyW/1a9YBbqtnlR5raC9NJZHZ9ypwOLrFTBTTS8ukDNDt8/uCDYAeBAj4DtQSM2EeycgvnSDeFXDbc7S2Toc0KYoGIhBuiDHynq+lt9YcKcM6fvdwnhwtiPF9g9ueZyCkxmrqewjd8JggyCanwRIRTMdqPxRg7nQ81HlOIXIDcQs4YBidWjWBHIBG9vJY+dtil/Y5dtS69DP+EVMVvRW3iYB9rKQd9ktr5C+xRw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=QK4WPbXjmCK87NX4llDZ2wonTlvxr67DEfbAmliHhtA=;

b=EmgACm03vXNlmLhTZGpiQbN72qovwF1vKVLCDGEwUsNPIFG3Uy8H1XI/lyfSHYGPfT63wUJL5YfudQVruseyRQFSgO8AFUZDPM3T7wqxIi6UykQdBfCdWsW/X9vjT5vILTxPYRMg7TvinkbIPpYR24XsfdUi5xMGARMlVxSRhMl9ZArVrvZ+WF7iro1wV48ufqWN+Bk0uK97PKjME1KhDnlIHmpzPvnufLfKT5X5kjJ9Ucfzqsu6oYaapSJw6JJlMADQFpxWHvw5+Ssa2PNUjq6jV14FbYXbmzwnwAsw9PzeC844cz4cEX9xkjPNnVkW4B7sB9w4rk+ParW0x8dcUg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

212.87.212.62) smtp.rcpttodomain=nk.ca

smtp.mailfrom=gdfgdg78zrtgh.onmicrosoft.com; dmarc=none action=none

header.from=gdfgdg78zrtgh.onmicrosoft.com; dkim=none (message not signed);

arc=none (0)

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 212.87.212.62)

smtp.mailfrom=gdfgdg78zrtgh.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none

header.from=gdfgdg78zrtgh.onmicrosoft.com;

Subject: Get Rewarded for Your Opinion:Take Our Survey!

Date: Wed, 27 Mar 2024 11:59:28 +0000

Content-Transfer-Encoding: 8bit

Content-Type: text/html; charset="UTF-8"

CC: root@nk.ca

From: "Dewalt-EXTREME-Drill-Unlocked"

MIME-Version: 1.0In-Reply-To:

To: root@nk.ca

Message-ID:

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BL02EPF0001A107:EE_|MW4PR12MB6850:EE_

X-MS-Office365-Filtering-Correlation-Id: 81b77aa0-d52c-4e5f-3363-08dc4e555b02

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

e7N5t5OFCNcdlnq+CNbXx01tRLfiARPHRNmFPzENIJXMKLpnVPZTBHP3CvklVS5LiNiE+7jZAbhyqyXSNztj5+VRSGvvCIsuxZQe4108TdXmliEWHOZKREYn87kKu6WNkLsHJAB+81YKMi6Y2CPc+LPHGJNAY6eVpUcueLrLC7lA4tNbZj5SDhwRd20Oqf0Aj4o4y5IgC3FE45jOLSIlkdqu/77q9k+7ATcOr05Fj13i18GRhzBJ68+JR3Q0VgA1/Ju139ROk3Hvu+Px3byVggCZpriH3o5fEvbaoqu0jSbItlFlAAB0ttbBBKeO8n6Eh9d1uMd6nte4DNxhqjqGQ0TzKUPGCMvv008WgUwtGod8OtjKkVqMx15jaEADwKYu79q9x6vvRBnqw8jIyVEfePBRGzi/wZ5GJk7SeKmouFMrEg2K0sOpFOoJ8pqDZn/XA3ilAAXV0KpLE3BCgJi+KbSwnQ6x1h8buM0uTKhHs/rSPURUB7m3rCvYNAu0cpZ7fh1Yk23omIJJGa/5zPUHHdPsp0sAUwzzkxL6TE7s3JVYeSINEUDj5gCSYVdt6jq0hG57Rk/0edNvJOhlOTuDCTZqi+/IQUKRf1X+S9rhlsHCXsG/ME6JSLKyHjiTC1J4G6Ibf6g+ejcINRMJH/iN7KhErHnpzBC9xOYIDderGUs2d7jI8FRaN3RB/c3r7nAQDCFlU4hC4X3ROjtmGGZ+Dg==

X-Forefront-Antispam-Report:

CIP:212.87.212.62;CTRY:DE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:gdfgdg78zrtgh.onmicrosoft.com;PTR:mailkhalilo194.infinitygroup.com.ar;CAT:NONE;SFS:(13230031)(82310400014)(36860700004)(376005)(61400799018)(34070700005)(41320700004);DIR:OUT;SFP:1102;

X-OriginatorOrg: gdfgdg78zrtgh.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Mar 2024 11:59:28.3481

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 81b77aa0-d52c-4e5f-3363-08dc4e555b02

X-MS-Exchange-CrossTenant-Id: 4b10c5ae-a8a9-4671-9687-e36fa9732105

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=4b10c5ae-a8a9-4671-9687-e36fa9732105;Ip=[212.87.212.62];Helo=[gdfgdg78zrtgh.onmicrosoft.com]

X-MS-Exchange-CrossTenant-AuthSource:

BL02EPF0001A107.namprd05.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW4PR12MB6850

X-Antivirus: AVG (VPS 240325-8, 3/25/2024), Inbound message

X-Antivirus-Status: Clean









(1) Notifications























































ミ★ Canadian Tire Department ★彡







꧁ Order confirmation #064282 ꧂










































































Web / App / SEO Spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 26 Mar 2024 18:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpH8M-000000004Ms-3U3v

for dave@doctor.nl2k.ab.ca;

Tue, 26 Mar 2024 18:27:14 -0600

Resent-From: The Doctor

Resent-Date: Tue, 26 Mar 2024 18:27:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dbaeur03olkn2108.outbound.protection.outlook.com ([40.92.58.108]:45409 helo=EUR03-DBA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpFjI-00000000NnV-3Njn

for root@nl2k.ca;

Tue, 26 Mar 2024 16:57:20 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=mU5G9dgMse2oyuDpBBZ1wFXU5RA7GCMbv4aE/yd1FIyqFMd6+1CStSqWNqhg4U2xv0AoCn/217WmLj0hzmfzxhbo0B+HHwpO+pAD7dFydq5MCb0VqiRrqPXwtBz/Mv849LE/uq4hldYAiwYLT4Vx2BnUTK+wv+z2bpHKPfo2h5AAqMRySrujrHc5tWUlCQ0grT6B+HWqeoFzn4+lcxF/gV/n73ti4KhVePugY5+fAmoeAnvz6WqDheO5wAM3+LQb0aWCDJ5+NdO7eeKuxOEHTwdOFpfplmbXJ0Z2eYOFQ43qoJFD1xh/OCkKLJNoow/C+0lw6TRL1cV8gRjV4ydh9Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=aoUe9G2kV7uQECBgK8u3d+ed4ZfsQMaB1zAX3nL3TVg=;

b=BB8CvWChzMgPKwfiYuT3Oiztr6K1Uh0lH+lUenoFZdbhcn2ncaoyQEq4+oD5R46mZenEifgYchJCCw2hGrvp9/Gn6WoqzCQkTlvdz3r+5k/noUutFWeRuh7SfjUqo/XY0XQBM6JkVDZPFQZw8lOM1lP8VYlrmc7qUSxK8FtirxXWvFqbRo+WCXsyv5U6g5/mRvgjp2s8Y+Nxc+FGImbXuaN/0LauZSxuKGdHKIDwUhNHQJR1aoXASHa5jPtoIKJ20ILhutvdnxxbm989i1VcNQUkZatsJeO3QlEwEzhBRusu+yXRDFAZwgvTSteGJtU+xOZGb6+TqEXCvoZj79niEA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=aoUe9G2kV7uQECBgK8u3d+ed4ZfsQMaB1zAX3nL3TVg=;

b=aZqpkOo1OFLZMSfmWXDPFQyfjgMaVwGt6opu1P8WOSDjfYq6fODuFfdOrf0gsnI0RMWb3eURxlQ95i8jft9Jx+QqIQWF4lQxGg6+gYas0C+4IBe8BCrUVBBQqnW7Td8p+/vJbS9AC3utFdc6t7A+TXSPotSTQtrBYlSAIpGcXg0T10SjKmiuxPjARopIUknqcclmaQrpwfPArxI5S10q8DDYOAei4DkReZ4bzsPRvPU4JTQPO56xKjzTjdpJFldVFL/QnZGJ5jLQ0igoISd6qb9jeU3Evu7Ux6JkynFX/6tJUuyqW6O5KSFl6REmvjW5/JZwlNzLbe4e0+0g1SNchg==

Received: from DU2P193MB2273.EURP193.PROD.OUTLOOK.COM (2603:10a6:10:2fa::20)

by DU2P193MB2340.EURP193.PROD.OUTLOOK.COM (2603:10a6:10:2f4::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.32; Tue, 26 Mar

2024 22:55:06 +0000

Received: from DU2P193MB2273.EURP193.PROD.OUTLOOK.COM

([fe80::de5a:491c:970b:5468]) by DU2P193MB2273.EURP193.PROD.OUTLOOK.COM

([fe80::de5a:491c:970b:5468%5]) with mapi id 15.20.7409.028; Tue, 26 Mar 2024

22:55:06 +0000

Content-Type: multipart/alternative; boundary="===============8629757955455392012=="

Subject: =?utf-8?q?Snapchat_from_a_friend_=F0=9F=93=B8?=

From: SparkMatch

CC: SparkMatch

Date: Tue, 26 Mar 2024 22:54:46 +0000

X-TMN: [FNxTmKU6XMkqkps7WLLBfk3qdxJ3abC5]

X-ClientProxiedBy: FR4P281CA0356.DEUP281.PROD.OUTLOOK.COM

(2603:10a6:d10:f4::20) To DU2P193MB2273.EURP193.PROD.OUTLOOK.COM

(2603:10a6:10:2fa::20)

Message-ID:



MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DU2P193MB2273:EE_|DU2P193MB2340:EE_

X-MS-Office365-Filtering-Correlation-Id: 890ca41c-90ad-4228-d3d5-08dc4de7c722

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?bXFWUlVjUHN4bDk5RDd3WUJsRVRXWXlLUXhmVmJxREtKcTlWckxZMzFsWUJk?=

=?utf-8?B?cVR3Z3Fac2JiejNjM2wyUlVkQzlpK3VXdnk4ajlxSjN3MmpoL1ZmUEJUdG1o?=

=?utf-8?B?eFRvTHBIeTR3ejhmaFk3d3RLS212Um1UQmhQczRMODhCY2JZVGlTamJzRllj?=

=?utf-8?B?N29Zc0hEUUx1VHBDclpIbldzZUJ1SUVzY2grWDFCd0g5ZHVOL2xvNWZMK3V1?=

=?utf-8?B?Nk1Kd0xGMTV1czRFeXVtVkNZSEIxSHlWZlJXYVdBTU9qK0xtc2xkQUw4c0ln?=

=?utf-8?B?aUJueTA0OTllNHpjM3hMQXdXMXZlU1R3c1FNTXJMR2pKK3VDTzhMSU9xREFk?=

=?utf-8?B?S1FxaHZkam9nWUptd1BCS2RxVlBDWUMwRmxpSXR6YXdZdHpOSkFtWHV6dzcx?=

=?utf-8?B?OW1oQjFjWFFaSHREbTNnZGJGdmJnZEdRaDBSdjFFQjBpMzVuU29jeVpLK2hV?=

=?utf-8?B?Umhab2lvVHQrVHdLaHIxMVR1TTd2cXpER2VkZzZTcHlwVmtnVzd0R1BtOXhp?=

=?utf-8?B?aFladmhUYVBOQjNpSFMrTDJ4SWlVWS9ZMGxIVVI5VDYwTkhQRHlUSjM3QTNn?=

=?utf-8?B?c0t6dVdVUjMvR3o3ZnBkdmxaVEdQUUxhZHQ3aTR5SitIVlV6RUFCU29ad05S?=

=?utf-8?B?d0FvekpUK3FYeHlSTFAyZm9ENFNYK0QwWXNxRGVoSlRZUWFqaURWbW05V3JY?=

=?utf-8?B?dFE5UlJFWlRadjFoT1ZsSk9IcS9oUGNEeElvdmcwRUYzQUF5WU8wL3laNEV6?=

=?utf-8?B?VW15Um5LcUxScytqbkpTK3FqZDVPdDlLdWRYTjRzZFdERndsa2daU2dpV0VQ?=

=?utf-8?B?d2dpZVJJWldDSjB1dDE1ci83WUprVWhMcWFTSURTZXYwOUdybW9pa1hGeDRD?=

=?utf-8?B?OHV5Vm92QmZWSVRwWmRtdzdoeVpvcGk4RXd1UmFidGZtTHBTK2ZGT1JjRzlx?=

=?utf-8?B?S2duZCt5M0VhUGNrVzBNQThYSUx3ei9DSDJja3Rtbml5cWNZbDJ3cGRLek9n?=

=?utf-8?B?RUl5SDJkdXB4WFZuNVhnQWxYd3JTbmFndksxT05CSGQwZitPOEVmM1NUNXI4?=

=?utf-8?B?b2REVjVObGtSaFk3cURPYk8rdkhwRWJDdTVIWlBKVGQrWTBDWVhMYlQ3aHNU?=

=?utf-8?B?N3VRSk9kNXJKSm9zYUVONnJlUCt2OExmci9yWmFpUEdrQnA2Um1DOVRPMkNi?=

=?utf-8?B?UkthTGovRTNPczdxSk9LTFM2ZDFHa3VVM2RUdTdKZmZKNG5LUHRxVWcybVUy?=

=?utf-8?B?czZ6MHhNNlRCRFlUd1ZnUC9LdXBiN3N4WDAwMkJzWjBCb2g3eVhzb1N0a1Vt?=

=?utf-8?B?SXBjaUNHVWRQd3FaT0RUa3Vjb3lvNDRLdThVVi9UYS9aNENtU2I0c01NQnha?=

=?utf-8?B?K041ejNXVVp0UXJSd1p4OEJiNU9WYUVtMzZIWHRtVUFuMlZidlpmQjlpYmNF?=

=?utf-8?B?ZTB1RXhnczQ4NEdKdHFyRHJFS1lKRjJHdlpKSkpxYm93Zkx6aUNuek9rUFZ6?=

=?utf-8?B?RXQzK3hkTVo1bnRHVGZaNUxuN1Z3U2FnVDM5Yzc0bzJSdWRMaTFYQ3pSaTF2?=

=?utf-8?B?UVRMYnVHdWFMckVaTzRsSldmbEdQcTdiL21rZGtlcTRvVm4rbWpMU3JNY3lV?=

=?utf-8?B?empRaThuL21kN3lFck5wZmd5UkIrRzlaeXNRV0VsejlsZ1QyZno1VER2b2h2?=

=?utf-8?Q?KxUjbzWeZM04BE1FCvkn?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: 890ca41c-90ad-4228-d3d5-08dc4de7c722

X-MS-Exchange-CrossTenant-AuthSource: DU2P193MB2273.EURP193.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Mar 2024 22:55:05.7747

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU2P193MB2340

X-Spam_score: 12.2

X-Spam_score_int: 122

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Curious about connecting with Ukrainian women in your area?

Seeking a fresh, exciting avenue to meet singles? Discover UkrainianGirls,

where authentic conversations await unlike any other platform! ⬇⬇ Explore

profiles of these 3 ladies and more via this link ⬇⬇



Content analysis details: (12.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.58.108 listed in list.dnswl.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: shorturl.ac]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.58.108 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[dania.wolfi(at)outlook.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} =?utf-8?q?Snapchat_from_a_friend_=F0=9F=93=B8?=

X-Antivirus: AVG (VPS 240325-8, 3/25/2024), Inbound message

X-Antivirus-Status: Clean



--===============8629757955455392012==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



PG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJz

ZXQ9dXRmLTgiPjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PHNwYW4gc3R5bGU9ImZvbnQt

c2l6ZToxMy45OTk5OTk5OTk5OTk5OThwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFs

LHNhbnMtc2VyaWYiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAwMDAwIj48c3Ryb25nPjxzcGFuIHN0

eWxlPSJmb250LXNpemU6MTZweCI+Q3VyaW91cyBhYm91dCBjb25uZWN0aW5nIHdpdGggVWtyYWlu

aWFuIHdvbWVuIGluIHlvdXIgYXJlYT88L3NwYW4+PGJyPgo8YnI+CjxpbWcgc3JjPSJodHRwczov

L2xoNy11cy5nb29nbGV1c2VyY29udGVudC5jb20vcURaNzBicEUtZTJpbWJGSHM0T2htOWVNdzhB

Y3k4VzE5Y3h4SmV0bjRlNXJESUJLWmNmMUc0dW1SUEwzcXBEWkRPeXBVbVlMRHBqYi1NX2Z4Rllf

VjdOQ2FhQnpDLXFsRWZFQVpuTXpTY3hlY18wVWJSZEp5RXlMTjlUV29fNUFVMXFNRzl2d3pqd3VP

ZVBSaWRYVGJWRSIgc3R5bGU9ImhlaWdodDoyNjVweDsgd2lkdGg6NjI0cHgiPjwvc3Ryb25nPjwv

c3Bhbj48L3NwYW4+PC9zcGFuPjwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PHNw

YW4gc3R5bGU9ImZvbnQtc2l6ZToxNnB4Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6QXJpYWws

c2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPjxzdHJvbmc+U2Vla2luZyBh

IGZyZXNoLCBleGNpdGluZyBhdmVudWUgdG8gbWVldCBzaW5nbGVzPyBEaXNjb3ZlciA8YSBocmVm

PSJodHRwczovL3Nob3J0dXJsLmFjLzdkaDFyIj5Va3JhaW5pYW5HaXJsczwvYT4sIHdoZXJlIGF1

dGhlbnRpYyBjb252ZXJzYXRpb25zIGF3YWl0IHVubGlrZSBhbnkgb3RoZXIgcGxhdGZvcm0hIDwv

c3Ryb25nPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvcD4KCjxwPiZuYnNwOzwvcD4KCjxwIHN0eWxl

PSJ0ZXh0LWFsaWduOmNlbnRlciI+PHN0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwcHgi

PuKsh+KshyZuYnNwOzxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpBcmlhbCxzYW5zLXNlcmlmIj48

c3BhbiBzdHlsZT0iY29sb3I6IzAwMDAwMCI+RXhwbG9yZSBwcm9maWxlcyBvZiB0aGVzZSAzIGxh

ZGllcyBhbmQgbW9yZSB2aWEgdGhpcyBsaW5rIDwvc3Bhbj48L3NwYW4+4qyH4qyHPC9zcGFuPjwv

c3Ryb25nPjwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PGEgaHJlZj0iaHR0cDov

L3Nob3J0dXJsLmFjLzdkaDFvIiBzdHlsZT0idGV4dC1kZWNvcmF0aW9uOm5vbmUiPjxzcGFuIHN0

eWxlPSJmb250LXNpemU6MThwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFsLHNhbnMt

c2VyaWYiPjxzcGFuIHN0eWxlPSJjb2xvcjojMTE1NWNjIj48c3Ryb25nPlNwYXJrTWF0Y2g8L3N0

cm9uZz48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L2E+PC9wPgoKPHA+Jm5ic3A7PC9wPgoKPHAgc3R5

bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjE4cHgiPjxzdHJv

bmc+PHN0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6QXJpYWwsc2Fucy1zZXJpZiI+PHNw

YW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPjxzdHJvbmc+Q2xhaW0geW91ciBmcmVlIHNpZ24tdXAg

bm93LCBmb3IgYSBsaW1pdGVkIHRpbWUgb25seSEgRG9uJ3QgbGV0IHRoaXMgY2hhbmNlIHNsaXAg

YXdheSE8L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwvc3Ryb25nPjwvc3Ryb25nPjwvc3Bhbj48YnI+

CiZuYnNwOzwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+Jm5ic3A7PC9wPgoKPHAg

c3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48YnI+Cjxicj4KVG8gb3B0LW91dCBmcm9tIG91ciBl

bWFpbHMgYW5kIHNwZWNpYWwgb2ZmZXJzLCBjbGljayA8YSBocmVmPSJodHRwOi8vdC5seS9HVnJC

SSI+aGVyZTwvYT4uPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToyMnB4Ij48c3BhbiBzdHlsZT0iZm9u

dC1mYW1pbHk6QXJpYWwsc2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPiA8

L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3A+Cgo8cD4mbmJzcDs8L3A+Cgo8cD4mbmJzcDs8L3A+Cgo8

cD48c3Ryb25nPjxzdHJvbmc+Jm5ic3A7PC9zdHJvbmc+PC9zdHJvbmc+PC9wPgoKPHAgc3R5bGU9

InRleHQtYWxpZ246Y2VudGVyIj48c3Ryb25nPjxzdHJvbmc+Jm5ic3A7PC9zdHJvbmc+PC9zdHJv

bmc+PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3Ryb25nPjxzdHJvbmc+Jm5i

c3A7PC9zdHJvbmc+PC9zdHJvbmc+PC9wPg==



--===============8629757955455392012==--

Ukrainian dating spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 26 Mar 2024 18:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpH8M-000000004Ms-3U3v

for dave@doctor.nl2k.ab.ca;

Tue, 26 Mar 2024 18:27:14 -0600

Resent-From: The Doctor

Resent-Date: Tue, 26 Mar 2024 18:27:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dbaeur03olkn2108.outbound.protection.outlook.com ([40.92.58.108]:45409 helo=EUR03-DBA-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpFjI-00000000NnV-3Njn

for root@nl2k.ca;

Tue, 26 Mar 2024 16:57:20 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=mU5G9dgMse2oyuDpBBZ1wFXU5RA7GCMbv4aE/yd1FIyqFMd6+1CStSqWNqhg4U2xv0AoCn/217WmLj0hzmfzxhbo0B+HHwpO+pAD7dFydq5MCb0VqiRrqPXwtBz/Mv849LE/uq4hldYAiwYLT4Vx2BnUTK+wv+z2bpHKPfo2h5AAqMRySrujrHc5tWUlCQ0grT6B+HWqeoFzn4+lcxF/gV/n73ti4KhVePugY5+fAmoeAnvz6WqDheO5wAM3+LQb0aWCDJ5+NdO7eeKuxOEHTwdOFpfplmbXJ0Z2eYOFQ43qoJFD1xh/OCkKLJNoow/C+0lw6TRL1cV8gRjV4ydh9Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=aoUe9G2kV7uQECBgK8u3d+ed4ZfsQMaB1zAX3nL3TVg=;

b=BB8CvWChzMgPKwfiYuT3Oiztr6K1Uh0lH+lUenoFZdbhcn2ncaoyQEq4+oD5R46mZenEifgYchJCCw2hGrvp9/Gn6WoqzCQkTlvdz3r+5k/noUutFWeRuh7SfjUqo/XY0XQBM6JkVDZPFQZw8lOM1lP8VYlrmc7qUSxK8FtirxXWvFqbRo+WCXsyv5U6g5/mRvgjp2s8Y+Nxc+FGImbXuaN/0LauZSxuKGdHKIDwUhNHQJR1aoXASHa5jPtoIKJ20ILhutvdnxxbm989i1VcNQUkZatsJeO3QlEwEzhBRusu+yXRDFAZwgvTSteGJtU+xOZGb6+TqEXCvoZj79niEA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=aoUe9G2kV7uQECBgK8u3d+ed4ZfsQMaB1zAX3nL3TVg=;

b=aZqpkOo1OFLZMSfmWXDPFQyfjgMaVwGt6opu1P8WOSDjfYq6fODuFfdOrf0gsnI0RMWb3eURxlQ95i8jft9Jx+QqIQWF4lQxGg6+gYas0C+4IBe8BCrUVBBQqnW7Td8p+/vJbS9AC3utFdc6t7A+TXSPotSTQtrBYlSAIpGcXg0T10SjKmiuxPjARopIUknqcclmaQrpwfPArxI5S10q8DDYOAei4DkReZ4bzsPRvPU4JTQPO56xKjzTjdpJFldVFL/QnZGJ5jLQ0igoISd6qb9jeU3Evu7Ux6JkynFX/6tJUuyqW6O5KSFl6REmvjW5/JZwlNzLbe4e0+0g1SNchg==

Received: from DU2P193MB2273.EURP193.PROD.OUTLOOK.COM (2603:10a6:10:2fa::20)

by DU2P193MB2340.EURP193.PROD.OUTLOOK.COM (2603:10a6:10:2f4::12) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.32; Tue, 26 Mar

2024 22:55:06 +0000

Received: from DU2P193MB2273.EURP193.PROD.OUTLOOK.COM

([fe80::de5a:491c:970b:5468]) by DU2P193MB2273.EURP193.PROD.OUTLOOK.COM

([fe80::de5a:491c:970b:5468%5]) with mapi id 15.20.7409.028; Tue, 26 Mar 2024

22:55:06 +0000

Content-Type: multipart/alternative; boundary="===============8629757955455392012=="

Subject: =?utf-8?q?Snapchat_from_a_friend_=F0=9F=93=B8?=

From: SparkMatch

CC: SparkMatch

Date: Tue, 26 Mar 2024 22:54:46 +0000

X-TMN: [FNxTmKU6XMkqkps7WLLBfk3qdxJ3abC5]

X-ClientProxiedBy: FR4P281CA0356.DEUP281.PROD.OUTLOOK.COM

(2603:10a6:d10:f4::20) To DU2P193MB2273.EURP193.PROD.OUTLOOK.COM

(2603:10a6:10:2fa::20)

Message-ID:



MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DU2P193MB2273:EE_|DU2P193MB2340:EE_

X-MS-Office365-Filtering-Correlation-Id: 890ca41c-90ad-4228-d3d5-08dc4de7c722

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?bXFWUlVjUHN4bDk5RDd3WUJsRVRXWXlLUXhmVmJxREtKcTlWckxZMzFsWUJk?=

=?utf-8?B?cVR3Z3Fac2JiejNjM2wyUlVkQzlpK3VXdnk4ajlxSjN3MmpoL1ZmUEJUdG1o?=

=?utf-8?B?eFRvTHBIeTR3ejhmaFk3d3RLS212Um1UQmhQczRMODhCY2JZVGlTamJzRllj?=

=?utf-8?B?N29Zc0hEUUx1VHBDclpIbldzZUJ1SUVzY2grWDFCd0g5ZHVOL2xvNWZMK3V1?=

=?utf-8?B?Nk1Kd0xGMTV1czRFeXVtVkNZSEIxSHlWZlJXYVdBTU9qK0xtc2xkQUw4c0ln?=

=?utf-8?B?aUJueTA0OTllNHpjM3hMQXdXMXZlU1R3c1FNTXJMR2pKK3VDTzhMSU9xREFk?=

=?utf-8?B?S1FxaHZkam9nWUptd1BCS2RxVlBDWUMwRmxpSXR6YXdZdHpOSkFtWHV6dzcx?=

=?utf-8?B?OW1oQjFjWFFaSHREbTNnZGJGdmJnZEdRaDBSdjFFQjBpMzVuU29jeVpLK2hV?=

=?utf-8?B?Umhab2lvVHQrVHdLaHIxMVR1TTd2cXpER2VkZzZTcHlwVmtnVzd0R1BtOXhp?=

=?utf-8?B?aFladmhUYVBOQjNpSFMrTDJ4SWlVWS9ZMGxIVVI5VDYwTkhQRHlUSjM3QTNn?=

=?utf-8?B?c0t6dVdVUjMvR3o3ZnBkdmxaVEdQUUxhZHQ3aTR5SitIVlV6RUFCU29ad05S?=

=?utf-8?B?d0FvekpUK3FYeHlSTFAyZm9ENFNYK0QwWXNxRGVoSlRZUWFqaURWbW05V3JY?=

=?utf-8?B?dFE5UlJFWlRadjFoT1ZsSk9IcS9oUGNEeElvdmcwRUYzQUF5WU8wL3laNEV6?=

=?utf-8?B?VW15Um5LcUxScytqbkpTK3FqZDVPdDlLdWRYTjRzZFdERndsa2daU2dpV0VQ?=

=?utf-8?B?d2dpZVJJWldDSjB1dDE1ci83WUprVWhMcWFTSURTZXYwOUdybW9pa1hGeDRD?=

=?utf-8?B?OHV5Vm92QmZWSVRwWmRtdzdoeVpvcGk4RXd1UmFidGZtTHBTK2ZGT1JjRzlx?=

=?utf-8?B?S2duZCt5M0VhUGNrVzBNQThYSUx3ei9DSDJja3Rtbml5cWNZbDJ3cGRLek9n?=

=?utf-8?B?RUl5SDJkdXB4WFZuNVhnQWxYd3JTbmFndksxT05CSGQwZitPOEVmM1NUNXI4?=

=?utf-8?B?b2REVjVObGtSaFk3cURPYk8rdkhwRWJDdTVIWlBKVGQrWTBDWVhMYlQ3aHNU?=

=?utf-8?B?N3VRSk9kNXJKSm9zYUVONnJlUCt2OExmci9yWmFpUEdrQnA2Um1DOVRPMkNi?=

=?utf-8?B?UkthTGovRTNPczdxSk9LTFM2ZDFHa3VVM2RUdTdKZmZKNG5LUHRxVWcybVUy?=

=?utf-8?B?czZ6MHhNNlRCRFlUd1ZnUC9LdXBiN3N4WDAwMkJzWjBCb2g3eVhzb1N0a1Vt?=

=?utf-8?B?SXBjaUNHVWRQd3FaT0RUa3Vjb3lvNDRLdThVVi9UYS9aNENtU2I0c01NQnha?=

=?utf-8?B?K041ejNXVVp0UXJSd1p4OEJiNU9WYUVtMzZIWHRtVUFuMlZidlpmQjlpYmNF?=

=?utf-8?B?ZTB1RXhnczQ4NEdKdHFyRHJFS1lKRjJHdlpKSkpxYm93Zkx6aUNuek9rUFZ6?=

=?utf-8?B?RXQzK3hkTVo1bnRHVGZaNUxuN1Z3U2FnVDM5Yzc0bzJSdWRMaTFYQ3pSaTF2?=

=?utf-8?B?UVRMYnVHdWFMckVaTzRsSldmbEdQcTdiL21rZGtlcTRvVm4rbWpMU3JNY3lV?=

=?utf-8?B?empRaThuL21kN3lFck5wZmd5UkIrRzlaeXNRV0VsejlsZ1QyZno1VER2b2h2?=

=?utf-8?Q?KxUjbzWeZM04BE1FCvkn?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: 890ca41c-90ad-4228-d3d5-08dc4de7c722

X-MS-Exchange-CrossTenant-AuthSource: DU2P193MB2273.EURP193.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Mar 2024 22:55:05.7747

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU2P193MB2340

X-Spam_score: 12.2

X-Spam_score_int: 122

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Curious about connecting with Ukrainian women in your area?

Seeking a fresh, exciting avenue to meet singles? Discover UkrainianGirls,

where authentic conversations await unlike any other platform! ⬇⬇ Explore

profiles of these 3 ladies and more via this link ⬇⬇



Content analysis details: (12.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.58.108 listed in list.dnswl.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: shorturl.ac]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.58.108 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[dania.wolfi(at)outlook.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} =?utf-8?q?Snapchat_from_a_friend_=F0=9F=93=B8?=

X-Antivirus: AVG (VPS 240325-8, 3/25/2024), Inbound message

X-Antivirus-Status: Clean



--===============8629757955455392012==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



PG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJz

ZXQ9dXRmLTgiPjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PHNwYW4gc3R5bGU9ImZvbnQt

c2l6ZToxMy45OTk5OTk5OTk5OTk5OThwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFs

LHNhbnMtc2VyaWYiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAwMDAwIj48c3Ryb25nPjxzcGFuIHN0

eWxlPSJmb250LXNpemU6MTZweCI+Q3VyaW91cyBhYm91dCBjb25uZWN0aW5nIHdpdGggVWtyYWlu

aWFuIHdvbWVuIGluIHlvdXIgYXJlYT88L3NwYW4+PGJyPgo8YnI+CjxpbWcgc3JjPSJodHRwczov

L2xoNy11cy5nb29nbGV1c2VyY29udGVudC5jb20vcURaNzBicEUtZTJpbWJGSHM0T2htOWVNdzhB

Y3k4VzE5Y3h4SmV0bjRlNXJESUJLWmNmMUc0dW1SUEwzcXBEWkRPeXBVbVlMRHBqYi1NX2Z4Rllf

VjdOQ2FhQnpDLXFsRWZFQVpuTXpTY3hlY18wVWJSZEp5RXlMTjlUV29fNUFVMXFNRzl2d3pqd3VP

ZVBSaWRYVGJWRSIgc3R5bGU9ImhlaWdodDoyNjVweDsgd2lkdGg6NjI0cHgiPjwvc3Ryb25nPjwv

c3Bhbj48L3NwYW4+PC9zcGFuPjwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PHNw

YW4gc3R5bGU9ImZvbnQtc2l6ZToxNnB4Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6QXJpYWws

c2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPjxzdHJvbmc+U2Vla2luZyBh

IGZyZXNoLCBleGNpdGluZyBhdmVudWUgdG8gbWVldCBzaW5nbGVzPyBEaXNjb3ZlciA8YSBocmVm

PSJodHRwczovL3Nob3J0dXJsLmFjLzdkaDFyIj5Va3JhaW5pYW5HaXJsczwvYT4sIHdoZXJlIGF1

dGhlbnRpYyBjb252ZXJzYXRpb25zIGF3YWl0IHVubGlrZSBhbnkgb3RoZXIgcGxhdGZvcm0hIDwv

c3Ryb25nPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvcD4KCjxwPiZuYnNwOzwvcD4KCjxwIHN0eWxl

PSJ0ZXh0LWFsaWduOmNlbnRlciI+PHN0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwcHgi

PuKsh+KshyZuYnNwOzxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpBcmlhbCxzYW5zLXNlcmlmIj48

c3BhbiBzdHlsZT0iY29sb3I6IzAwMDAwMCI+RXhwbG9yZSBwcm9maWxlcyBvZiB0aGVzZSAzIGxh

ZGllcyBhbmQgbW9yZSB2aWEgdGhpcyBsaW5rIDwvc3Bhbj48L3NwYW4+4qyH4qyHPC9zcGFuPjwv

c3Ryb25nPjwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PGEgaHJlZj0iaHR0cDov

L3Nob3J0dXJsLmFjLzdkaDFvIiBzdHlsZT0idGV4dC1kZWNvcmF0aW9uOm5vbmUiPjxzcGFuIHN0

eWxlPSJmb250LXNpemU6MThwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFsLHNhbnMt

c2VyaWYiPjxzcGFuIHN0eWxlPSJjb2xvcjojMTE1NWNjIj48c3Ryb25nPlNwYXJrTWF0Y2g8L3N0

cm9uZz48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L2E+PC9wPgoKPHA+Jm5ic3A7PC9wPgoKPHAgc3R5

bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjE4cHgiPjxzdHJv

bmc+PHN0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6QXJpYWwsc2Fucy1zZXJpZiI+PHNw

YW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPjxzdHJvbmc+Q2xhaW0geW91ciBmcmVlIHNpZ24tdXAg

bm93LCBmb3IgYSBsaW1pdGVkIHRpbWUgb25seSEgRG9uJ3QgbGV0IHRoaXMgY2hhbmNlIHNsaXAg

YXdheSE8L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwvc3Ryb25nPjwvc3Ryb25nPjwvc3Bhbj48YnI+

CiZuYnNwOzwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+Jm5ic3A7PC9wPgoKPHAg

c3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48YnI+Cjxicj4KVG8gb3B0LW91dCBmcm9tIG91ciBl

bWFpbHMgYW5kIHNwZWNpYWwgb2ZmZXJzLCBjbGljayA8YSBocmVmPSJodHRwOi8vdC5seS9HVnJC

SSI+aGVyZTwvYT4uPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToyMnB4Ij48c3BhbiBzdHlsZT0iZm9u

dC1mYW1pbHk6QXJpYWwsc2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPiA8

L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3A+Cgo8cD4mbmJzcDs8L3A+Cgo8cD4mbmJzcDs8L3A+Cgo8

cD48c3Ryb25nPjxzdHJvbmc+Jm5ic3A7PC9zdHJvbmc+PC9zdHJvbmc+PC9wPgoKPHAgc3R5bGU9

InRleHQtYWxpZ246Y2VudGVyIj48c3Ryb25nPjxzdHJvbmc+Jm5ic3A7PC9zdHJvbmc+PC9zdHJv

bmc+PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3Ryb25nPjxzdHJvbmc+Jm5i

c3A7PC9zdHJvbmc+PC9zdHJvbmc+PC9wPg==



--===============8629757955455392012==--

Ukrainian dating spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 26 Mar 2024 18:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpH8D-000000004M6-1Zqb

for dave@doctor.nl2k.ab.ca;

Tue, 26 Mar 2024 18:27:05 -0600

Resent-From: The Doctor

Resent-Date: Tue, 26 Mar 2024 18:27:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-db5eur01olkn2089.outbound.protection.outlook.com ([40.92.64.89]:21729 helo=EUR01-DB5-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpFdS-00000000NNS-39bj

for root@nl2k.ca;

Tue, 26 Mar 2024 16:51:18 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=ToN4gmgpAmlgw2dJx6jGtPP4ktF8B/4x3O1pyZ3ssJkeK/JlDZ5CQwQo/A2PIjZZv4vjyCkUa+SB170McWuiQmXYT9iMozYcEx+UqUxgDAhMyXneJheNpM7nonxLvncs6SxfcMfKDniI88SxGSqaPeVUETOJUOm7k+5vszJgUVWjN6DTEI7GMLrj5xqIpUFi7qPtqMkpt2apWc/2ZabQaJ879vrnoAhCpBMsXGd3Z2IHCLHOhuJiEUi54H/fWPwzqVS4PHTSeqbj85H6b1oQBjBvLyUyuszgjoF+fPKSwSEoWei18T4dwPsoZSXT23o/72z4q259zIhDOr50DnMqcQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=oTCykOaLlBXRBx4l/x1kCAXexuTIgKAP6R2R94yO41Y=;

b=jxOt20AsjMeT2yzLJX7TetfFCetIPIVez4ZpAMQdRDQcDGbNyBo+YXTsBaVqULnlIXHh+79JEyGAkxpQZ4QcYwpoQCLerJa3gaTX1N9nqNsv6Iy5ei7CACvJNTYvV1026guHqHSXzGaNx5jtPOCtQdQVMoHhazZuMOMC8O+M6k4DVzOG1lWxkKFGfhixDbP3IxlAF7oVzqMIgNT0Vpxf6aLjLnGsYEwrNdoVfojvCkYPjiR6QaFj5PyLIyfLdGPVzxi1eLE6493LHCQkBey0tHzir63hXoSpVeiCz1JsZxjnEQ+4srfbY1mLsGtsxXLdsVf+O7m3wBPkQ5FylxIMdA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=oTCykOaLlBXRBx4l/x1kCAXexuTIgKAP6R2R94yO41Y=;

b=h5DVCj9slVdNAfUq95HAH0gSTc9Tote/rgao90pfka2SYCxvDeV7O/VRyiKB/nvhEJsqGFBtwTlqOrivfNu3+2Ud8hjUg6yeLKkvD08EtEkCi5CNOiUxYs+qSCzbSFe/9Av1/+BplHy66E3JzDLlSMhXcEuaoW4KaeESfpoTKTfPoTfc27TYHTok4ydgHv1f1J2xJK6Uk1SspR2pxOJDdq4u9ZcYcCKwOiooBBGdhL4+WW4BtnoNqAGOiwIXaJQGJbUewxzZ5i/vu3j43yolF++AQGbRb+bC/AhQ/O6UW1XGps7B9tKzhUIrkEP8iV+ezxxINO7lnfq9o4sY7K9ujw==

Received: from PAWP194MB2079.EURP194.PROD.OUTLOOK.COM (2603:10a6:102:338::13)

by DU0P194MB1952.EURP194.PROD.OUTLOOK.COM (2603:10a6:10:410::17) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.31; Tue, 26 Mar

2024 22:49:02 +0000

Received: from PAWP194MB2079.EURP194.PROD.OUTLOOK.COM

([fe80::6ec4:701:8778:5151]) by PAWP194MB2079.EURP194.PROD.OUTLOOK.COM

([fe80::6ec4:701:8778:5151%4]) with mapi id 15.20.7409.031; Tue, 26 Mar 2024

22:49:02 +0000

Content-Type: multipart/alternative; boundary="===============1944107661305265478=="

Subject: =?utf-8?q?Comment_on_your_photo_=F0=9F=92=AC?=

From: CharmJunction

CC: CharmJunction

Date: Tue, 26 Mar 2024 22:48:49 +0000

X-TMN: [tD2eU67oEY96b11ffFwfFmLI/ktBzf0N]

X-ClientProxiedBy: FR0P281CA0106.DEUP281.PROD.OUTLOOK.COM

(2603:10a6:d10:a8::7) To PAWP194MB2079.EURP194.PROD.OUTLOOK.COM

(2603:10a6:102:338::13)

Message-ID:



MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: PAWP194MB2079:EE_|DU0P194MB1952:EE_

X-MS-Office365-Filtering-Correlation-Id: f397e7aa-4ae3-4d50-60f0-08dc4de6ee29

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?eURnZVJVRW5FSVhXZ1N5ZVN6b3RkLzltZWhQdDM5OWlWTXhEK0NKQWRZTExG?=

=?utf-8?B?R0dmYThUYlI2U1lHKzlKQmFGN0hScEhuVGV3MHRSV2RHMDMxeHU0eGdnYjdu?=

=?utf-8?B?bFVyVzlaYzFJakdjVUpiZ2Q2L3pZcXd0bUQ1bC9RSUFJVU0zSU5zN09CZElV?=

=?utf-8?B?MFZLUHloWHNTNDZ4TVJoNGhtTmg4MmJEaVJyV2VSd1FyK3BEN0tyR2JGSlFw?=

=?utf-8?B?RkNuR01GZGU2S3ZmekRRdkR5TzIxL2tkN2l2UUMzWXlMbVdqNWNVdlZwNlNm?=

=?utf-8?B?SG1aMmszanUyd3R6ejk5dERLYkhmUCtZaTV5YTlLT1ZCTG9obzRvRzJMSVhF?=

=?utf-8?B?SG5Fbm5Hc0NNRUVJdDB3eFc0cWMxbUcvUFBZaTlqaEkyb3hpRmNPNCtTZUpG?=

=?utf-8?B?UExUM3RBQW9TcGprQ3ZXQVQyWUVLN2laZ3Z3U1UxRG1xNlBaRnU1aTJmeXox?=

=?utf-8?B?YWNMUklUYk1RdnQ3Mk10TEVUSXRnQW5TYjlpRExNei9VQmFaZFhWUUlFOXU4?=

=?utf-8?B?UVNCaExOUnlwYi9wdHpIbVVpSFp2N214SlF4T1QxTGFkbUUzRlRwVGEwb2d0?=

=?utf-8?B?VWJUcHZUZExIUENrdmxxQ2k4THN6VDh5aDBLQUsrM2tIMmJ1WGMrU3NjRTdx?=

=?utf-8?B?ejJFeUFzMi9waWc0Vy9IZGJHVmxTT2w2RVk2WXp1cDN1bkQ2V2tMOEg4UWpx?=

=?utf-8?B?eE1EeXNYK1VtTW9kM3ZPUms1dDRWdkpkbDF5TlZyeXFCck94ZGwyVnVwb0c2?=

=?utf-8?B?eTNlaUJ2QWE4UXRQL2orbUl4MUpHUGdrWlhMbXdqbkV2SUh0bUpGRHhGV1Js?=

=?utf-8?B?djg1Z1B6RWZBQzMzRDg1WVpVM25UUTgxMnErZlNGUUFMdEV4ckhFSmt2RVBk?=

=?utf-8?B?c0U2ZURXcktySDlHaUZsQ0FJeVZQUlg2cGx6dzl2RGdkZk0yVy9sM0oxUVZX?=

=?utf-8?B?b2p4U3dCakVRK3A1TFoxNHRPOTFiR1IvMTJ0VDh5SDFTMVFINEIvOENtSE1v?=

=?utf-8?B?U1RlSDVSckx2TUpEdEp0dkJpaG1TcExFektaVG5tbGxKWEhoczVXTTRPdFJi?=

=?utf-8?B?TGREZkhEMXZLTUZHdFg4NU9DOTZhcWwxc05QZHc0SVpXbk9obi9pQ2FBVi9Z?=

=?utf-8?B?b2lDWGtqRktNZng3bTB2Nmg2NkRGOGZKR2lPK1BlM01QbXh0bmoyR3dTZWlM?=

=?utf-8?B?Z2crWU1jNnJVek5uOEFIcWxZbzRMVkN3bm9lVk93ZnRiOW1jRU5pYzhsd1dy?=

=?utf-8?B?OEJzZmlkUXBFRG1WRTZuMUM1NWhnaG1sV2JMNTlxNFU1K1lKYlZWa29qRGlM?=

=?utf-8?B?Skt2WWU2SmY4SEs5UGh4bisrWG13MUpOZjQySWFoN2dXWlRCRUhoNXR6SitJ?=

=?utf-8?B?eEI4czFDSGNLVjNXMjA3TmFBTm5jYzhGbjdzeTZDc3V5VSsxK2dBTjhUZUZR?=

=?utf-8?B?WWZ4YW9ab2x4Rk92UFlYKzN5RFJ4TnlIanVnRGVWZjdVVGpyUU9YUEdhQzl2?=

=?utf-8?B?ZXpoaVB4VkhpRE5xTDFNOThIdEJ4ckNTVkRTR0dyMUREV09SNnlLbkJRTStx?=

=?utf-8?B?bzJIckxTQ1NSUU5YR0ZBbklzeFlYZHFpaUpPbUxSQ0xHdHR4MU01U29ta0gz?=

=?utf-8?Q?gUrOkHEv6oKzMnpE++OSWF/P0QXvuMchX17rn8sQ8Mps=3D?=

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?d0JLaGN2SkhIM0ozUTRuRnlsWElaOElHK1R2YlYwWlpDbkh1T05EdE94R2ZJ?=

=?utf-8?B?WThvYm95QTBKSEhscFRwaW8vZDlzWUJ4SHREOExQTU5FRk1xbnFwQWVsVFVQ?=

=?utf-8?B?ZzI3NlRjWG83QzIvL1dya2JYeHl5RzY5RWQ1bzBpY2tSWTkzaGpYcmZQTGRB?=

=?utf-8?B?eDNoVWZjY3UyVitZdkFJNG1kN09USE1rSE93UFVlTktUZ1Znc3AvUDJrdUtv?=

=?utf-8?B?WnVBd0VaTDhNYUg0MGkwM1lVMGxzaXcycnUrUkhzU3IvV3hBUWlIY29rK2pt?=

=?utf-8?B?TlJvTEtBdm1QUXVrd3BQUHdzUVdzYzZDRW02QmdoYm9jZlpDQm5EbitrSGUz?=

=?utf-8?B?MUFZbVJtMXFsZkIvYjIrS3pMT1VINTFGc3N2Z21Ka241cEltbCs2WFVBZ3Zs?=

=?utf-8?B?My9vbHFSQ2RDRzByZ2MxWU4rQ01hSWRmVVZ4YWpjM3gwSXpvMmpXTTJxREM2?=

=?utf-8?B?dE1KcjR3b1NvRnRObnh2KzAwTWtEWlN4MzI2WGIrdEJuTENTVlJNTjV1dUNF?=

=?utf-8?B?UW9Mb0djUXNEd3VxWFNRQkxLWWp1R3RPSzVWMWN4NkU2UVlYamFxbUthRmxa?=

=?utf-8?B?eHdibHpVTUNPV3I4NytvWmNGMjliei9VY0lSbWNpSlNaVTdiMmNWNSthWXU4?=

=?utf-8?B?d0hQQTIvZ2Zkc05vTk5yaDB5SGZUMnk5ZzRNeDd2Vm53TWZtZVZHWmFEdk5B?=

=?utf-8?B?Tk9ZcEthQzlBSy9wQWZHTGU4OFFKd1hQakVTdXdYV3oyQnlxWHJ2SW5tb3FR?=

=?utf-8?B?ZnhnZHYvNWhJdnhhNHRDN3RCN3dhNDVqWlZrbjBOazBaWnVRTmJQY2VOeUN2?=

=?utf-8?B?SElybjF5eXVWNmwxTk5EeDl2T2tGT2RkcE1uM1VYczZYL1hBV01oMVVOOXRh?=

=?utf-8?B?elVZSXI1amtCWjFUWkw2RFNxakNVdWU1REdPYWRaVndvSVhrdnJKVEVkdDdF?=

=?utf-8?B?QjY4cUgySGRBeHBFV04rdWg0Mnlob0RqUTNpSExvcWFTbFRGTmUrUGd4dGxE?=

=?utf-8?B?MUtzNVRUbnJ4REZpMmc2K0swK0RmOUpHZzV5WTk2YytGUERjSktEU0hnQUtq?=

=?utf-8?B?WmVEVWFiR3lOZG41azJLa1VKSVhkOHFFeTJpaFNFc2t4emlZamZKRVFhcUVC?=

=?utf-8?B?b1dIM2dHZ1Z2WHIyd1V6S3puVktuS1B6b01nYmN5OVFQcm43blB2QzE2cEVI?=

=?utf-8?B?SWt6cUU2MkcwU09JQkwweHZvZGY4VTBjcThvaThiLzhET2VZSUdPNWtFbnVt?=

=?utf-8?B?LzNFNmliMUU0eTcwWmIwOGFBcDRnSW8xMndQUUNVTjZtZi9RbCtPSEk1UGRa?=

=?utf-8?B?dGRsL3ovZk1lbE50MEY0bVBucmhUZGNPN2VwMHY3YmxKMy85enU2THlYTjd6?=

=?utf-8?B?UlFPZHZsNjN3UDFmSHBObXV1WjlXVm5Yejl0cUN6NUVaU21abGxsNE9hK3Fa?=

=?utf-8?B?VnYwT0pxL1llZGdqL0NER0tPV1ZnVVA5ckdsdFVJMmlKT3QvNHNBVmFkYVpp?=

=?utf-8?B?b1BQUDViNjRJaHNIVlBVdkp6L3NTd0N1VmpDZWF5dzBUU3BYOXZ6UVZSMGFZ?=

=?utf-8?B?VzZkdDNIWEt2OTdmbE5tTURCdk02NnVEa1ptTTMvRXNnSlJWUVRBYitMUzl6?=

=?utf-8?B?YmZQSHQ3R1VEV0lLOGRwdHlPa25GUnZWaXpFUGlseC93cXpQZEU0VlMwRGRi?=

=?utf-8?Q?cRFCSGnGGWpKSMu1ABd6?=

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: f397e7aa-4ae3-4d50-60f0-08dc4de6ee29

X-MS-Exchange-CrossTenant-AuthSource: PAWP194MB2079.EURP194.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Mar 2024 22:49:01.6122

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU0P194MB1952

X-Spam_score: 12.4

X-Spam_score_int: 124

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Curious about connecting with Ukrainian women in your area?

Seeking a fresh, exciting avenue to meet singles? Discover UkrainianGirls,

where authentic conversations await unlike any other platform! ⬇⬇ Explore

profiles of these 3 ladies and more via this link ⬇⬇



Content analysis details: (12.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.64.89 listed in list.dnswl.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: shorturl.ac]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.64.89 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[crumblayne00(at)outlook.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[crumblayne00(at)outlook.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

Subject: {SPAM?} =?utf-8?q?Comment_on_your_photo_=F0=9F=92=AC?=

X-Antivirus: AVG (VPS 240325-8, 3/25/2024), Inbound message

X-Antivirus-Status: Clean



--===============1944107661305265478==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



PG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJz

ZXQ9dXRmLTgiPjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PHNwYW4gc3R5bGU9ImZvbnQt

c2l6ZToxMy45OTk5OTk5OTk5OTk5OThwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFs

LHNhbnMtc2VyaWYiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAwMDAwIj48c3Ryb25nPjxzcGFuIHN0

eWxlPSJmb250LXNpemU6MTZweCI+Q3VyaW91cyBhYm91dCBjb25uZWN0aW5nIHdpdGggVWtyYWlu

aWFuIHdvbWVuIGluIHlvdXIgYXJlYT88L3NwYW4+PGJyPgo8YnI+CjxpbWcgc3JjPSJodHRwczov

L2xoNy11cy5nb29nbGV1c2VyY29udGVudC5jb20vcURaNzBicEUtZTJpbWJGSHM0T2htOWVNdzhB

Y3k4VzE5Y3h4SmV0bjRlNXJESUJLWmNmMUc0dW1SUEwzcXBEWkRPeXBVbVlMRHBqYi1NX2Z4Rllf

VjdOQ2FhQnpDLXFsRWZFQVpuTXpTY3hlY18wVWJSZEp5RXlMTjlUV29fNUFVMXFNRzl2d3pqd3VP

ZVBSaWRYVGJWRSIgc3R5bGU9ImhlaWdodDoyNjVweDsgd2lkdGg6NjI0cHgiPjwvc3Ryb25nPjwv

c3Bhbj48L3NwYW4+PC9zcGFuPjwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PHNw

YW4gc3R5bGU9ImZvbnQtc2l6ZToxNnB4Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6QXJpYWws

c2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPjxzdHJvbmc+U2Vla2luZyBh

IGZyZXNoLCBleGNpdGluZyBhdmVudWUgdG8gbWVldCBzaW5nbGVzPyBEaXNjb3ZlciA8YSBocmVm

PSJodHRwczovL3Nob3J0dXJsLmFjLzdkaDFyIj5Va3JhaW5pYW5HaXJsczwvYT4sIHdoZXJlIGF1

dGhlbnRpYyBjb252ZXJzYXRpb25zIGF3YWl0IHVubGlrZSBhbnkgb3RoZXIgcGxhdGZvcm0hIDwv

c3Ryb25nPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvcD4KCjxwPiZuYnNwOzwvcD4KCjxwIHN0eWxl

PSJ0ZXh0LWFsaWduOmNlbnRlciI+PHN0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwcHgi

PuKsh+KshyZuYnNwOzxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpBcmlhbCxzYW5zLXNlcmlmIj48

c3BhbiBzdHlsZT0iY29sb3I6IzAwMDAwMCI+RXhwbG9yZSBwcm9maWxlcyBvZiB0aGVzZSAzIGxh

ZGllcyBhbmQgbW9yZSB2aWEgdGhpcyBsaW5rIDwvc3Bhbj48L3NwYW4+4qyH4qyHPC9zcGFuPjwv

c3Ryb25nPjwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PGEgaHJlZj0iaHR0cDov

L3Nob3J0dXJsLmFjLzdkOXdkIiBzdHlsZT0idGV4dC1kZWNvcmF0aW9uOm5vbmUiPjxzcGFuIHN0

eWxlPSJmb250LXNpemU6MThwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFsLHNhbnMt

c2VyaWYiPjxzcGFuIHN0eWxlPSJjb2xvcjojMTE1NWNjIj48c3Ryb25nPkNoYXJtSnVuY3Rpb248

L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L2E+PC9wPgoKPHA+Jm5ic3A7PC9wPgoKPHAg

c3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjE4cHgiPjxz

dHJvbmc+PHN0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6QXJpYWwsc2Fucy1zZXJpZiI+

PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPjxzdHJvbmc+Q2xhaW0geW91ciBmcmVlIHNpZ24t

dXAgbm93LCBmb3IgYSBsaW1pdGVkIHRpbWUgb25seSEgRG9uJ3QgbGV0IHRoaXMgY2hhbmNlIHNs

aXAgYXdheSE8L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwvc3Ryb25nPjwvc3Ryb25nPjwvc3Bhbj48

YnI+CiZuYnNwOzwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+Jm5ic3A7PC9wPgoK

PHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48YnI+Cjxicj4KVG8gb3B0LW91dCBmcm9tIG91

ciBlbWFpbHMgYW5kIHNwZWNpYWwgb2ZmZXJzLCBjbGljayA8YSBocmVmPSJodHRwOi8vdC5seS9H

VnJCSSI+aGVyZTwvYT4uPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToyMnB4Ij48c3BhbiBzdHlsZT0i

Zm9udC1mYW1pbHk6QXJpYWwsc2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAi

PiA8L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3A+Cgo8cD4mbmJzcDs8L3A+Cgo8cD4mbmJzcDs8L3A+

Cgo8cD48c3Ryb25nPjxzdHJvbmc+Jm5ic3A7PC9zdHJvbmc+PC9zdHJvbmc+PC9wPgoKPHAgc3R5

bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3Ryb25nPjxzdHJvbmc+Jm5ic3A7PC9zdHJvbmc+PC9z

dHJvbmc+PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3Ryb25nPjxzdHJvbmc+

Jm5ic3A7PC9zdHJvbmc+PC9zdHJvbmc+PC9wPg==



--===============1944107661305265478==--

Elon Musk product spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 25 Mar 2024 23:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rozeO-000000007gd-2Kf4

for dave@doctor.nl2k.ab.ca;

Mon, 25 Mar 2024 23:47:08 -0600

Resent-From: The Doctor

Resent-Date: Mon, 25 Mar 2024 23:47:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-southeastasiaazon11020003.outbound.protection.outlook.com ([52.101.133.3]:35735 helo=SG2PR03CU006.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rourH-00000000L4Z-0NYw

for root@nk.ca;

Mon, 25 Mar 2024 18:40:13 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=MH7L8jDG6QCWmIiOvcZbd5zm5Aua1lQnve2p2nCkv488Fen4IgzKy7p5UcbYRkZkpPUkdsNbf7l4vWdKn9Q/YvShuLVkx0N5uQZ1abStqyght22MmLc1IJ6P0+xadpYC9jAG6AQQOBCwAbXq1nv6evkuQTrjEHjoWNOgSRbEnTGgR0X3pA8sXA8dnCaz5j16fv/UUWVr0dS3S8xnNEYhYdcdxtR23q37rhfj1PS0GpL4xKCCiaVYbcnIb5GW4TevorI7tnx0v8ii82zSt4IfwU0dmJs4w/rAlmbapRAxCEvpiUbgHPgO4hT+MTMFbSpN52uY3pQeraoswvOPrfgqUg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=F9D//TnS2J/C7bbeguyozc8dRv1H4bjwtmyBrv31tGA=;

b=UZ4cKZKoJnLYKyLZadtcKsk3OuBMQmdKInkDWa2TtvOWB3ZlENMIu/eISbHL0gRVxXL0uCxirIC3QoSYLAxrXMQMr5LHMj5M+CKDS0BCzA+h0LPBAil+vcpMVlJXOsmKT+inm3WPqnntniAdsfSWHkl0YIoDdGtZoG7GUVYOPu4kGLGa5099xy9w7oPH6jAvs/G2nKd8mlTducdTM32Y3Tcacxznzb9djybWKjGw2wxl9RFCC8V7WYcBUBKUWCfmUTSCkKtVndQwsGbw5/yc8BcZRwGsG+KyFyUGGjPLfJAZsD9rpidVn41ydc4FWHAo01IIyCZmBYKnv9XH3t6UHw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

172.233.40.156) smtp.rcpttodomain=nk.ca smtp.mailfrom=vehz.onmicrosoft.com;

dmarc=none action=none header.from=vehz.onmicrosoft.com; dkim=none (message

not signed); arc=none (0)

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 172.233.40.156)

smtp.mailfrom=vehz.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=vehz.onmicrosoft.com;

X-MS-Has-Attach: yes

msip_labels:

MIME-Version: 1.0

Thread-Index: BzsjXNhmZXbtzP3k7+6Tay5FcEI3Ty1KVR==

Content-Type: multipart/related; boundary="XfBbSKMW4NqeKoKmbxBacHj0eveauxcD2LrYWjmOse"; type="multipart/alternative"

X-MS-TNEF-Correlator:

Content-Language: fr-FR

Subject: Get Ahead with Elon Musk's Seal of Approval!

Message-ID:

Date: Tue, 26 Mar 2024 00:38:00 +0000

To: "root@gmail.com"

From: Elon Power Bank

Accept-Language: fr-FR, en-US

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: HK2PEPF00006FB4:EE_|SEYPR01MB5979:EE_

X-MS-Office365-Filtering-Correlation-Id: 69c2e5ee-9b3e-443e-8129-08dc4d2cfdd5

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:172.233.40.156;CTRY:NL;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:vehz.onmicrosoft.com;PTR:172-233-40-156.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(34020700007)(41320700004)(61400799018)(82310400014)(376005)(36860700004);DIR:OUT;SFP:1102;

X-OriginatorOrg: vehz.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Mar 2024 00:38:00.8232

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 69c2e5ee-9b3e-443e-8129-08dc4d2cfdd5

X-MS-Exchange-CrossTenant-Id: a54a1645-38a1-4581-86b4-4f9afe14d61a

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=a54a1645-38a1-4581-86b4-4f9afe14d61a;Ip=[172.233.40.156];Helo=[vehz.onmicrosoft.com]

X-MS-Exchange-CrossTenant-AuthSource:

HK2PEPF00006FB4.apcprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEYPR01MB5979



--XfBbSKMW4NqeKoKmbxBacHj0eveauxcD2LrYWjmOse

Content-Type: multipart/alternative; boundary="EPByMWlkgeWDScfrej6lhFobNJ3FG0i3UBdgYDymFsJFBGrpZFpy"



--EPByMWlkgeWDScfrej6lhFobNJ3FG0i3UBdgYDymFsJFBGrpZFpy

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: hexa



0XczsyR07LQAL 0XczsyR07LQAL 0XczsyR07LQAL 0XczsyR07LQAL

0XczsyR07LQAL 0XczsyR07LQAL 0XczsyR07LQAL 0XczsyR07LQAL

yCeCcNpV6kLH yCeCcNpV6kLH yCeCcNpV6kLH yCeCcNpV6kLH

eSC94WY4UE eSC94WY4UE eSC94WY4UE eSC94WY4UE

0XczsyR07LQAL 0XczsyR07LQAL 0XczsyR07LQAL 0XczsyR07LQAL





yCeCcNpV6kLH yCeCcNpV6kLH yCeCcNpV6kLH yCeCcNpV6kLH

eSC94WY4UE eSC94WY4UE eSC94WY4UE eSC94WY4UE

0XczsyR07LQAL 0XczsyR07LQAL 0XczsyR07LQAL 0XczsyR07LQAL

yCeCcNpV6kLH yCeCcNpV6kLH yCeCcNpV6kLH yCeCcNpV6kLH

eSC94WY4UE eSC94WY4UE eSC94WY4UE eSC94WY4UE





--EPByMWlkgeWDScfrej6lhFobNJ3FG0i3UBdgYDymFsJFBGrpZFpy

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: 7bit































--EPByMWlkgeWDScfrej6lhFobNJ3FG0i3UBdgYDymFsJFBGrpZFpy--



--XfBbSKMW4NqeKoKmbxBacHj0eveauxcD2LrYWjmOse--

Product Phishing from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 25 Mar 2024 23:48:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rozeU-000000007kB-2iRG

for dave@doctor.nl2k.ab.ca;

Mon, 25 Mar 2024 23:47:14 -0600

Resent-From: The Doctor

Resent-Date: Mon, 25 Mar 2024 23:47:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lo4gbr01on2136.outbound.protection.outlook.com ([40.107.122.136]:43246 helo=GBR01-LO4-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1routC-00000000LCw-38J5

for root@nk.ca;

Mon, 25 Mar 2024 18:42:11 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=XsHgfhPEkCzRREOknGHB9ZDd+oUUOaicyqKkVOCHF53YMsRBDP+GMce2lv2O2PYYHZJoNcCIrTls0lGukc9ZLS3AFmrGd5ax/Pele8ZOFgtzA6td1agmGgXYoe1t9mSnEPV/VCkFQgUJ9MSj+4U2F8Oezv1n1z1GIy9hszRJu49dlF2J2Rvql82bMYhcaAvXk9XWAGALf0Gvo2RuRT5mksP83va9Qp/CIl8c0encnXYJ8TqE9zq1Ky+6Y6W5Ai1ZZzZ3BOz37tq9a8DZrBnx0XGr3Mx/3e1D1rrHIK4gmTi9LFRSieWO062mPhbLywF24rVnoh7EQkwkpDEiLPHkBQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=VwUlNQRWtM6yJRasGzAv7TSWHWe3IHRo4KEYsozOQS0=;

b=afeDcQ1XOmYWntyDHdJ+dswZQzVTk+UC2zqPoGdNUvtglMVbAK9rN5sr/zJxiyaJjf7F9DKyPd2gped582b/fRt8I3OiBHFvWgk5z7QdzsHlmJ8TqwqA7eLH7asmU6Whw9M/vix8rReuKT5MIpq8YahdMUMNIk5J+/nKISewLM3pG/8TY2WdBUku3ZKi+OhvFsSMkvAZknohwvnkxF3wbWyw6D0YXfEuQuRHnhzUIjzHR3Q2u5sZ8qG8hApXqXyIuc3FxrLBfcipF8yigjWBt8cjh23ZjUOdhm9px7aBj/hWgPW/sz3aycZuNkj8x1ojbs2m7Xv2muEAWjeGhr62/g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

45.11.93.53) smtp.rcpttodomain=nk.ca smtp.mailfrom=zmbhksu.onmicrosoft.com;

dmarc=none action=none header.from=zmbhksu.onmicrosoft.com; dkim=none

(message not signed); arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=wetherbyprepstudentscouk.onmicrosoft.com;

s=selector1-wetherbyprepstudentscouk-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=VwUlNQRWtM6yJRasGzAv7TSWHWe3IHRo4KEYsozOQS0=;

b=S7r2GH67jx+4lF4/TzUVLWSCudjqKN3+94ODdl2G9FfPSS5qF9aGUbDi1Nnkv6HoiUJecGl9b1PHkl/R0shagQQUoe/6Q1cKQfm7Ent1xp3hCeVFwU7BobqJP/ny/T6+dktv4XecKdIT1Rkymih2LiKy1jASSJNMTQqRLbV6+zk=

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 45.11.93.53)

smtp.mailfrom=zmbhksu.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=zmbhksu.onmicrosoft.com;

Content-Type: multipart/related; boundary="HSi5hIr4q2T505jKShZwx71qP5EEUH2zOOlzXcxQaT"; type="multipart/alternative"

Content-Language: fr-FR

Subject: Get Ahead with Elon Musk's Seal of Approval!

msip_labels:

X-MS-TNEF-Correlator:

Message-ID:

Thread-Index: 6Q3TGNyab3PMBZqOD+hG0DprtWzWV0LuSf==

Date: Tue, 26 Mar 2024 00:40:00 +0000

From: Elon Power Bank

To: "root@gmail.com"

Accept-Language: fr-FR, en-US

X-MS-Has-Attach: yes

MIME-Version: 1.0

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: LO1PEPF000028CC:EE_|LO2P123MB6245:EE_

X-MS-Office365-Filtering-Correlation-Id: 25601516-b06a-46e1-0aa9-08dc4d2d4677

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:45.11.93.53;CTRY:US;LANG:en;SCL:1;SRV:;IPV:CAL;SFV:NSPM;H:zmbhksu.onmicrosoft.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230031)(34020700007)(36860700004)(41320700004)(82310400014)(61400799018)(376005);DIR:OUT;SFP:1102;

X-OriginatorOrg: zmbhksu.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Mar 2024 00:40:01.1622

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 25601516-b06a-46e1-0aa9-08dc4d2d4677

X-MS-Exchange-CrossTenant-Id: 758d6117-8a63-4a5d-8dd9-7339a955921a

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=758d6117-8a63-4a5d-8dd9-7339a955921a;Ip=[45.11.93.53];Helo=[zmbhksu.onmicrosoft.com]

X-MS-Exchange-CrossTenant-AuthSource: LO1PEPF000028CC.GBRP265.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: LO2P123MB6245



--HSi5hIr4q2T505jKShZwx71qP5EEUH2zOOlzXcxQaT

Content-Type: multipart/alternative; boundary="cbLhGKHsKats7HgeD9xN48MZSboHkzRDeGFXVek3EQgIhdG826RA"



--cbLhGKHsKats7HgeD9xN48MZSboHkzRDeGFXVek3EQgIhdG826RA

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: hexa



1foKVhPm4dnIa 1foKVhPm4dnIa 1foKVhPm4dnIa 1foKVhPm4dnIa

1foKVhPm4dnIa 1foKVhPm4dnIa 1foKVhPm4dnIa 1foKVhPm4dnIa

EvBKlgLxKN28 EvBKlgLxKN28 EvBKlgLxKN28 EvBKlgLxKN28

ArpaBra1YF ArpaBra1YF ArpaBra1YF ArpaBra1YF

1foKVhPm4dnIa 1foKVhPm4dnIa 1foKVhPm4dnIa 1foKVhPm4dnIa





EvBKlgLxKN28 EvBKlgLxKN28 EvBKlgLxKN28 EvBKlgLxKN28

ArpaBra1YF ArpaBra1YF ArpaBra1YF ArpaBra1YF

1foKVhPm4dnIa 1foKVhPm4dnIa 1foKVhPm4dnIa 1foKVhPm4dnIa

EvBKlgLxKN28 EvBKlgLxKN28 EvBKlgLxKN28 EvBKlgLxKN28

ArpaBra1YF ArpaBra1YF ArpaBra1YF ArpaBra1YF





--cbLhGKHsKats7HgeD9xN48MZSboHkzRDeGFXVek3EQgIhdG826RA

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: 7bit































--cbLhGKHsKats7HgeD9xN48MZSboHkzRDeGFXVek3EQgIhdG826RA--



--HSi5hIr4q2T505jKShZwx71qP5EEUH2zOOlzXcxQaT--

Elon Musk innovation spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 25 Mar 2024 17:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rou0k-00000000HDT-1Shh

for dave@doctor.nl2k.ab.ca;

Mon, 25 Mar 2024 17:45:50 -0600

Resent-From: The Doctor

Resent-Date: Mon, 25 Mar 2024 17:45:50 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lo4gbr01hn2229.outbound.protection.outlook.com ([52.100.228.229]:13166 helo=GBR01-LO4-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roth2-00000000Fgw-0GoY

for doctor@doctor.nl2k.ab.ca;

Mon, 25 Mar 2024 17:25:35 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=lxY8uP9qnyoKt56Xj3/GvFyyy2rXSeTDPJ8npB7ufPq3AD+Wn+SVZAVQ+OLzKgJ76d4aXLTGgujdVp0Mb+KvcOOHo01nK1A67Ac2hn5gasa1GVqaSvxi3k4l2yBD8tGE42Y3JPAz1xmhyFHJk1XK4S8QTwhkrk1Cy+SMIh7waaH3HBcLLcepbTrt3R639iVGwoQ+OUqFTKQ37Cyjw0CvbCKMcYFoLnvVZ/Z26lkpE3iFZc5lb+hh55bPdvSEKcduaYti11VkPE9T8wYCgx7e50PI1bSM1Lr0Cw4Mff0kCIWeVDET+8cYQmTCn31xn6vwg7NUi4oB9sOHJ+NOXBj1YA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=9WsVAUndiLPejVq8FRgdBSabXCeqhwWfwglEPFufGNI=;

b=CSlBwGX/aSmzbw25bK+IPKqsBhQwvPKg3qYKYT0WGtzZ9OtBHm9xQoLre+/G9M+Ve2LwKeR3QWmISqJ3tSbhno5CyAHERMsD5YjaHq6805h4i2PkeUg1JOccaYEZHIV0K6hLsI8zFkBfeInE05IvHfoSQnaNYEXHx+KuxD7A2U2HQ1F38lM/jxUs1Vvt29vTUE+0ZXNMlH7MwWNPUOviqeHzRltRO79M600chKYKOZyCSzMajx2HUVpSFDWY5hUq+b5OlWfNMyS3bo9eUDvzKkuSLvM84ORAuogxrljUCGjGJJJfzPcS5FU6PVOMKg306ZaK01XYUOqHE3KHZHHCeg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

45.11.93.53) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.mailfrom=zmbhksu.onmicrosoft.com; dmarc=none action=none

header.from=zmbhksu.onmicrosoft.com; dkim=none (message not signed); arc=none

(0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=wetherbyprepstudentscouk.onmicrosoft.com;

s=selector1-wetherbyprepstudentscouk-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=9WsVAUndiLPejVq8FRgdBSabXCeqhwWfwglEPFufGNI=;

b=B/qtfSdCS/1kJkKN89/JwTpYerDn+yOsOAX/guuoH/3Ix19Z8CCy9Uoujw2rZ05sMcHtWzZplGvjuBoXvZUylJP2F6jkLKKDzwerNpkI63d/WVSGo6aFr2udDucHxpA+prdIZn0sN3g+B3cEooek01K6tskoMTJ8vVImPpecvZ0=

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 45.11.93.53)

smtp.mailfrom=zmbhksu.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=zmbhksu.onmicrosoft.com;

Accept-Language: fr-FR, en-US

Date: Mon, 25 Mar 2024 23:23:24 +0000

MIME-Version: 1.0

Content-Language: fr-FR

msip_labels:

Message-ID: <7jywejcc4jfHzCg4Y3M0uFvVca9DL9Zt@DM6PR88MB88].namprd88.prod.outlook.com>

Subject: Revolutionize Your Life with Elon Musk's Latest Innovation!

X-MS-TNEF-Correlator:

To: "doctor@gmail.com"

From: Elon Power Bank

Thread-Index: ZUeigNN7giKT0QBAJ+Yg6o8gW9p4479gHi==

X-MS-Has-Attach: yes

Content-Type: multipart/related; boundary="V0D9MU2gsk8P6RvJNc22R8EYBxAlteqUWCpvFCceyG"; type="multipart/alternative"

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: CW2PEPF000056BD:EE_|LO9P123MB7617:EE_

X-MS-Office365-Filtering-Correlation-Id: 77e7f928-8687-4ba2-1941-08dc4d2291f1

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?iso-8859-1?Q?mKe7Xd8tP+jBXewv3BmErOrPuTAaXXiTxk3qGVX5DZ3E7YDlCylRd+wHmP?=

=?iso-8859-1?Q?WtitTeN8Wm7MhRGQbsA/qGBBNvQdKj8JGCKupLTijrxJjimaH7zMGwgk8Y?=

=?iso-8859-1?Q?WSNnyDles57xg2XtjsL4n6K5ZEr4wVTpAMDiDoF0vi7SjaLWb86K4Loxjk?=

=?iso-8859-1?Q?TqIovwTGhyVPoiZGz3kdwEIFnWNYbuWAtwlyxZ5aVHFtvnnCfxGqfPkAbI?=

=?iso-8859-1?Q?mUcxbRqaVXxHTLy/bnMHTjUbHdQoWZ6jkGUUOp6HaByVJb6t3pMjjuit9P?=

=?iso-8859-1?Q?HmLoz82zh9fr7h+YmKHizktElynEh6pW8cmuVol3ePYcRuuyP9ATFWiDxU?=

=?iso-8859-1?Q?mStrfXIa2LWSg1AU2fGnyxBs8TvPEeN3aS5ThhkKA50+zXyowPbo8PXwRg?=

=?iso-8859-1?Q?fK2IDkj4kB7WaBVNVeXZGvkt22L5q4tbIEl+Ln9XcP/sfpm5vMeg+rdsJq?=

=?iso-8859-1?Q?14Zc0ELtEAnNFDqAp3kDLPP7eN2vElDsy+Ia+bCAHktTRVle/0Qhosqe46?=

=?iso-8859-1?Q?QynZtVbQzabQ/QFof8WMqee/lCf2qOnNyE5F9itnB487DNp4uGn98bt8wm?=

=?iso-8859-1?Q?NncJerAptmUeG1xoN1R1uNnn9Byo0oLzEDOPJ3nA5Rb8SG1BlBG8Lgn+45?=

=?iso-8859-1?Q?B10+s10bFPs+U2OukhCFS0tbzsFDjkT0lnwpZkXdOgH05/iBkhwn+r76F3?=

=?iso-8859-1?Q?GZSACFu0Q3PZUu0W3MHLNwIiTyppj6MrDR/ZlEvt0zV+TPhkMF9X0ErhtS?=

=?iso-8859-1?Q?FEhIPTtk2OYLQT8He0TYACH51nbmpRNdEpkucpMlpkQL+R26hNGsaMMVfg?=

=?iso-8859-1?Q?tynQx9xnmdpjp7iQXdExgAU8iunw5yqYkpdKpCUcNlj0KXa9Bh+SjoVZg4?=

=?iso-8859-1?Q?nzAlCwPC7Io2KA3xqPczZgT1xOpamIJABZBZRrE11fBvuOSqf8S5FBRYL5?=

=?iso-8859-1?Q?3pDKnJpYPhp2G069sO8XoLA0ugOUJlM2DZ5BC2aQl1ZOazJj8JYTmA/lVi?=

=?iso-8859-1?Q?nM9n1YaZ5CGu14dkEsYiJxfG3I8hMsNb0IwVsQrN4zc4afJ1kI3lsW7EnN?=

=?iso-8859-1?Q?IENEzEMp5Q7b60t+h1JdNwS4vaxnqvvvsgkVF0b1hdnfyKvBiJBTiURBld?=

=?iso-8859-1?Q?wpmDKbZ8FLqkh0rJIriwYwJNzSluywbQJIktw9E1ZuODaLnv08D8fZ1WDj?=

=?iso-8859-1?Q?8GCl346xcvRQz4HM8dkOFYnfnfDZe+3zg2qIIT5CkHip3On22kexxWePmV?=

=?iso-8859-1?Q?dWG2m3rqYxM49xhtRaQ5xQXVozloKE8ed9c05HXZY/7WmqQ4PiO5FXVh1F?=

=?iso-8859-1?Q?+sYRik5l/fXiL5OUwuSWShfWEGGxgfqhFJbIiJd3s+dBLy6d1LLv4+XFl9?=

=?iso-8859-1?Q?+/aiOxY1iMczbU0+QcoS2WXLTwrkkILw=3D=3D?=

X-Forefront-Antispam-Report:

CIP:45.11.93.53;CTRY:US;LANG:en;SCL:8;SRV:;IPV:CAL;SFV:SPM;H:zmbhksu.onmicrosoft.com;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230031)(376005)(36860700004)(82310400014)(34020700007)(61400799018)(41320700004);DIR:OUT;SFP:1501;

X-OriginatorOrg: zmbhksu.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 25 Mar 2024 23:23:24.9991

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 77e7f928-8687-4ba2-1941-08dc4d2291f1

X-MS-Exchange-CrossTenant-Id: 758d6117-8a63-4a5d-8dd9-7339a955921a

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=758d6117-8a63-4a5d-8dd9-7339a955921a;Ip=[45.11.93.53];Helo=[zmbhksu.onmicrosoft.com]

X-MS-Exchange-CrossTenant-AuthSource: CW2PEPF000056BD.GBRP265.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: LO9P123MB7617



--V0D9MU2gsk8P6RvJNc22R8EYBxAlteqUWCpvFCceyG

Content-Type: multipart/alternative; boundary="cBbVIcPpIwwX3a5KFgRWDovktClioLfSJpMXZSjjljLUeOAFwK3c"



--cBbVIcPpIwwX3a5KFgRWDovktClioLfSJpMXZSjjljLUeOAFwK3c

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: hexa



f9ojvcoGyDGad f9ojvcoGyDGad f9ojvcoGyDGad f9ojvcoGyDGad

f9ojvcoGyDGad f9ojvcoGyDGad f9ojvcoGyDGad f9ojvcoGyDGad

2qbGXSa5m733 2qbGXSa5m733 2qbGXSa5m733 2qbGXSa5m733

CgCEgQ873z CgCEgQ873z CgCEgQ873z CgCEgQ873z

f9ojvcoGyDGad f9ojvcoGyDGad f9ojvcoGyDGad f9ojvcoGyDGad





2qbGXSa5m733 2qbGXSa5m733 2qbGXSa5m733 2qbGXSa5m733

CgCEgQ873z CgCEgQ873z CgCEgQ873z CgCEgQ873z

f9ojvcoGyDGad f9ojvcoGyDGad f9ojvcoGyDGad f9ojvcoGyDGad

2qbGXSa5m733 2qbGXSa5m733 2qbGXSa5m733 2qbGXSa5m733

CgCEgQ873z CgCEgQ873z CgCEgQ873z CgCEgQ873z





--cBbVIcPpIwwX3a5KFgRWDovktClioLfSJpMXZSjjljLUeOAFwK3c

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: 7bit































--cBbVIcPpIwwX3a5KFgRWDovktClioLfSJpMXZSjjljLUeOAFwK3c--



--V0D9MU2gsk8P6RvJNc22R8EYBxAlteqUWCpvFCceyG--

Web / App / SEO Spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 25 Mar 2024 08:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rol4T-00000000Hry-41aD

for dave@doctor.nl2k.ab.ca;

Mon, 25 Mar 2024 08:13:05 -0600

Resent-From: The Doctor

Resent-Date: Mon, 25 Mar 2024 08:13:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-sgaapc01olkn2011.outbound.protection.outlook.com ([40.92.53.11]:53194 helo=APC01-SG2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rojX8-00000000Apw-1EQe

for sales@nk.ca;

Mon, 25 Mar 2024 06:34:39 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=TPlyM83K3J+wYok9WdL8AVZAdw2+AkpArulg8mBpUkN0lQncA6kX67yH4J06zWZOQy35LJW93bZX3LuaLWu7pphzDwi1+VAC3vcr5PAyCT5hRDMC83YGRMvUqW7tCkH76bIUgi+dzYQst/uf34ZBgenH3pzDz2SxecSNaETHxHGp6MIr2Ah1CPDFjq1+dUY2mTjl4blHYk9K3aeOJfVn926BGvOsskw7YF4p7jrtB5HdKq1smqRtkd/bSo20u1NUyCQFr2390sCo44b3e1OFHZL+rYQDsA49TqxIas/t8xMZlQbkEER1BTftqKGw9NyVEmlVUw/Ft9BD0D5GOh5OPQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=4EV9gkAFOefde/6iGmQVTSjdo6y4eFOf3O8cYegWCj8=;

b=RJxXKG4f1HzuTzV4S+EHvX233A5ghSV43bZauNivgHxVfhSvEgPgsbeD/hC8/fKZ+NwKdGT/+H8Th7go0H5y+YIgdPcTbj1duCoQ9d5e1xNf+ISt4hB/whKPVvSGFpNptqN553lSjjrw0P78DK73MhW0DYQpJYEwaxNFUdzFjA4ezIlic11YlS+pCQ+KI2FAHOFiv7QAgWr7CQ9O75UoNPBPKPtTypjRkd6Eus9E+DIpa1Ae9K6BZETFDrwGDGwkeDF8H6obtdgvuCQrGvo+vKIkJ7OEj91lv2HByKH1eUhKZzHVkW9jbd0H17+74h3RNk70sMJFBz2fS+kZfHs/FA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=4EV9gkAFOefde/6iGmQVTSjdo6y4eFOf3O8cYegWCj8=;

b=phMcyv4iFvHa6UyFg+aqkCZqCkdGlQOTUAIvf7ThieSXpB919x2/Sh8vhXwDN3lGNLpVhwkOg2FZXIGFWkC78jcAhxjnwCcuw4s/D/ew+0+BNfQMduLMs2R9nZk5Aw/0/zrU0rwY/giyEx+YZUkLaloH0m0VOEBNivgrw2KxQTaENbdmO5c5BhlaYaO8mgK52n7nbswMXMYVtpaq/KYj98+XMAqwGuX2X++hmEOlhaKYa0xkDSjhDJNEo1zEr9AMoU54zPwvS9mOMyhaY5Dx3L2zPxSi72UikkjY9znyN/GlFq9sQMcCZdAuEqbHduE0pWyrO2DYz/cYQXoDH+u+Qw==

Received: from SI2PR01MB4275.apcprd01.prod.exchangelabs.com

(2603:1096:4:1ae::10) by TY0PR01MB5723.apcprd01.prod.exchangelabs.com

(2603:1096:405:1b::14) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.31; Mon, 25 Mar

2024 12:32:16 +0000

Received: from SI2PR01MB4275.apcprd01.prod.exchangelabs.com

([fe80::5f24:85e:c0ee:a4c3]) by SI2PR01MB4275.apcprd01.prod.exchangelabs.com

([fe80::5f24:85e:c0ee:a4c3%4]) with mapi id 15.20.7409.028; Mon, 25 Mar 2024

12:32:16 +0000

From: Deepak Patidar

Subject: SEO Packages

Thread-Topic: SEO Packages

Thread-Index: AQHafrBqwL66L/TDBkaAUWWjndGgog==

Date: Mon, 25 Mar 2024 12:32:15 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [eEd3TBxsNYlC+l41Tw/vKVfzayAYgbIc4OlsIRGTiLtG5Y/9C1umgE3qMnSRwvYC]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SI2PR01MB4275:EE_|TY0PR01MB5723:EE_

x-ms-office365-filtering-correlation-id: 80834a4f-5215-4066-6076-08dc4cc79adc

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam: BCL:0;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?ZR4Zk2QKh2c7XUofrj5vl9CvjiCz681rYfTl6i1dKBV/WlE+L9I6GKioU6?=

=?iso-8859-1?Q?GhqHuSHEWmixvC+zq5mFtzuaYhdt+66fbBi9QNRYiuUNLYc+BHy2qlPulT?=

=?iso-8859-1?Q?EMIw+RBQawNrkcYp0CdupXnHm5wYOhRhnib0m8sYCg+5ndWppCCBrV7qOi?=

=?iso-8859-1?Q?hNN722KHb/+Jja5mRB5BmMqQ4XYkNvk8oxLUP2Ib76MedRURNujt69zcGz?=

=?iso-8859-1?Q?te1bhh0kfI5ym01HukbHUuRUsQ9FfLMskYHb69B5j3VukdLg3mGNyu0Do4?=

=?iso-8859-1?Q?z9BaCcp4fo7FquqTclC/+ryNGXdTd0ldKxpnBthmGqtfXn0vfQkyIVJrj+?=

=?iso-8859-1?Q?RdOdQlG4Bc1SpPO2n/4dWSG8QmlRq55pAtA2gJh54RLVjCPaer2xXX4OhA?=

=?iso-8859-1?Q?rhLnAwe758dbwB6ayuTJnPDlRMzTgZ1z44TzoC9a6QDLh7QuEIlXGLNIm3?=

=?iso-8859-1?Q?nRJZXEj6Eq2gCUdyLBDaHGfhjwoOZcFNrVnTET9seRzcZSeMO49OXLkm/u?=

=?iso-8859-1?Q?vRH2hL5jHJKtahStJPM2xT6+yV3RkgErbjl/ZYKVvxIV+4y66epngNOBWM?=

=?iso-8859-1?Q?o3XpU1EfyjkF5Q37XgcnRu+SpDaxz6H5xQoZQ73ZVOKgbiYytayUeo1J/U?=

=?iso-8859-1?Q?fATFRS1c8X9sfeXfDK5IO2ombozPP00eDDmU3bb6lpfsG6Wupix7YpEd3l?=

=?iso-8859-1?Q?yBKroUrcf9DPxdyDgI/aRLpWdYcpdaLg0WEEfajhuixarWiL0hi6K++6SB?=

=?iso-8859-1?Q?cp9CYyjaxkGSfX8oNwnGs7JZU04MmjmVMXTAxYqzdIdm6Xj+IlgMcqyicQ?=

=?iso-8859-1?Q?qEuNRy63KewPGuN7tJGdrD3G5k+mJY5DyiyWJf8llBk9uBYcmY2uMphvev?=

=?iso-8859-1?Q?uQPg51y/utO9cbt2e5I8kdslz95ikQMrjnIwJd3cq7mAFKIZLqfNf015bz?=

=?iso-8859-1?Q?rYWKgk9GKGE0n0i/RElRdY90kRPY6xE9w4MV3GX9UPex/6DcFuyz6IBm+S?=

=?iso-8859-1?Q?alBMYgZt9jb1IqVuCiGJSLT8eyqWec+Xap77GOGhTui+swww3YD/wpGKw8?=

=?iso-8859-1?Q?SbvXIkoWvPit8b+2qQzDdQ4j3zhi580LtU9LpQ5JByKBZOGu701o/yaSyu?=

=?iso-8859-1?Q?xBeOpbm/TYS7WNidf9UtInFHevHqpdIktppwP79DlMRfkEckLnTR1BVi+v?=

=?iso-8859-1?Q?QUUDYg+xjXdvnFG/O5Rp8kh52ObuGX9ULGsp8lW4IB/gZUJeqbSqmyVt2e?=

=?iso-8859-1?Q?qwowEKaZ6st0iuODalqWYqWgG0zTjgqOiPpUtwWUOP2K52mLASrduqhMDU?=

=?iso-8859-1?Q?Vrrge/R9g8fCSTBvVlYuc9gEgVlKUam/gsSptQgOz6r32/0=3D?=

Content-Type: multipart/alternative;

boundary="_000_SI2PR01MB42753752E85FE555F655A604E6362SI2PR01MB4275apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SI2PR01MB4275.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 80834a4f-5215-4066-6076-08dc4cc79adc

X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Mar 2024 12:32:15.9923

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TY0PR01MB5723

X-Antivirus: AVG (VPS 240325-0, 3/24/2024), Inbound message

X-Antivirus-Status: Clean



--_000_SI2PR01MB42753752E85FE555F655A604E6362SI2PR01MB4275apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hello,



I checked your website you have an impressive site but ranking is not good =

on Google, Yahoo and Bing.



Would you like to optimize your site? I will be happy to share with you our=

pricing and proposals.



May I send you a quote? If interested!



Thanks & Regards,



--_000_SI2PR01MB42753752E85FE555F655A604E6362SI2PR01MB4275apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hello,  



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I checked your website you have an impressive site but ranking is not good =

on Google, Yahoo and Bing.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Would you like to optimize your site? I will be happy to share with you our=

pricing and proposals.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

May I send you a quote? If interested!



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Thanks & Regards,








--_000_SI2PR01MB42753752E85FE555F655A604E6362SI2PR01MB4275apcp_--

Ukrainian dating spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 25 Mar 2024 08:12:12 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rol3P-00000000Hmt-1xIb

for dave@doctor.nl2k.ab.ca;

Mon, 25 Mar 2024 08:11:59 -0600

Resent-From: The Doctor

Resent-Date: Mon, 25 Mar 2024 08:11:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-db5eur01olkn2058.outbound.protection.outlook.com ([40.92.64.58]:57902 helo=EUR01-DB5-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rog4j-00000000L4J-1gdC

for doctor@nl2k.ab.ca;

Mon, 25 Mar 2024 02:53:05 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=MH7bkGjiyQSl20J7qV8QpHgH5aevdQFFGkkDhzG7/odU5rpedljKILBKIEhtzbXIUb8NU8CL8LoIJAGqs+gFpfQQi9yuLrzMd26iwMMMkPSUadpRzROgE8H0x7BXPyS5uYngTTIozuAxNsqJktVwSmi4AEYeB89JPhov3Lv2KLph+Bl8WBYuJEo8zi5+GzUnBzJxz9g8JO2XOvdSTr1FCZYjKsCLJ73gxkg8GrJnfeGQjj3rZxpWYgrNa1h4OTWTyD1+0UJXMVcVcSmxBafRQkDZjrv/wy19vMqBN9xxeL+ZVDNMe8xQkzck+hqhWmGuwJAJ3XMppJBkK8J39B+0pA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=qR7O3vY1cVzhLsLbI1IBsSHgkINLGqo+GAH9XJ5LYHY=;

b=fFtDUl5R4GkUJiCkHtC5qsxftRMoGZdXtb6BLjFto+gn34vBM8ULOWekxMa9sDfvmY+U3XiRqMwbGRnv+UNmrf3bhRDkGTQnB/YZr+JkO1kUBBJfSL9bDekgMb/QcUEteaVxyL0u2cFUQ1iIo0xvTRzRW6Go0+wc1Xd3566cSILiYCaHXJVlvOFlX3KVeNlbM/v1bVZJhmDpUZZQtcGfpE751FYdsd1dRRAgicBBHuJoJe6Dw+3bcP2wkFqAicCpPaEZAL/00W+Ze5pQUr3xcd1X1L8kleXpzVZDh1Q3hAwUwEQvQ0fUoxcynvwSNeGHOU33ui966c86McEV4u7HtQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=qR7O3vY1cVzhLsLbI1IBsSHgkINLGqo+GAH9XJ5LYHY=;

b=kBDHxpJ4DgtTd8/URJ4D7/ANhz1/Ei1OkyjNmgPkU88mln+lKe+rND+og2kpMm9XcPzyvVZWxRCRj8s5g13nZlUS/vyObr8x2tJs8iv3ILM3LP8DQv8iLWjiAzZTwJXM/q8MjRT9RRHHtd3HcHsSsaAr8CLa9MJcj1NFLHm+lkeV+QXAgs47L4NuBf0GbKmaVXv0GgPIBjiMaLMrlOHcrkRlEOOQiYzgjxvR4IuyuicnbHvrX52+zZcM9hdXV1624OVy8uI8zna/18xTiN0QroXEPCkH8VpWRnIJvUiu1qqtrKQGlUok0eplEmG6E/pBiTibtjoI2ajQS3YI+N5cUw==

Received: from PRAP250MB0687.EURP250.PROD.OUTLOOK.COM (2603:10a6:102:29d::17)

by AS1P250MB0456.EURP250.PROD.OUTLOOK.COM (2603:10a6:20b:4a6::20) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.31; Mon, 25 Mar

2024 08:50:54 +0000

Received: from PRAP250MB0687.EURP250.PROD.OUTLOOK.COM

([fe80::13f9:9138:f4aa:8fc3]) by PRAP250MB0687.EURP250.PROD.OUTLOOK.COM

([fe80::13f9:9138:f4aa:8fc3%6]) with mapi id 15.20.7386.025; Mon, 25 Mar 2024

08:50:54 +0000

Content-Type: multipart/alternative; boundary="===============7290883388350981176=="

Subject: =?utf-8?q?New_like_on_your_post_=F0=9F=91=8D?=

From: LoveLinkr

CC: LoveLinkr

Date: Mon, 25 Mar 2024 08:50:40 +0000

X-TMN: [vjvXAHOtCxUjbOhaVt3AODAKivFvM5Lj]

X-ClientProxiedBy: FR3P281CA0094.DEUP281.PROD.OUTLOOK.COM

(2603:10a6:d10:a1::9) To PRAP250MB0687.EURP250.PROD.OUTLOOK.COM

(2603:10a6:102:29d::17)

Message-ID:



MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: PRAP250MB0687:EE_|AS1P250MB0456:EE_

X-MS-Office365-Filtering-Correlation-Id: be952cfe-3e5d-4b0c-57ac-08dc4ca8ae1d

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?TU1lOFF3c3JZMDJKMFFremNzZlZWaDhqb2lqdldqWFRLcHdMU09WL2hsdTRI?=

=?utf-8?B?MmJmV004V0VyVWxkc0VFcVBOV0ZucVdCNzI3a01RMWl5dm1oam5mM1VsRmdN?=

=?utf-8?B?ZHVSbStqeDJUK1VCV1YweEU2QVVOd1kyQXZJeEF6TlozemIyYkVGY09VbTkw?=

=?utf-8?B?WHVJT21wMW4zaEM2Z1hWZnlBUGlXYTVpSENyWjNsR2I2UHZudFExR2JzcW9O?=

=?utf-8?B?ME9PKzZ4V2Y1TzJYSHNvZEQ1SEVFNWlDL3QxYTFLRlV0RmpoK3FKTjFOYTVR?=

=?utf-8?B?VHRKK0JqdU9oVi93M2htVWdWR1pQanNmc0lEY2JlclA3YzZneUFmYlM2NEs5?=

=?utf-8?B?cTBKSFZIQ1BmdkNCMGo2czJWM0s5MzV2ak1zVGZzVHZTTVdaVzNFQ0JiZUl4?=

=?utf-8?B?ZU9Ud0MxSVpBV2Zkb2RuazNWZm9sR0l1aEUzeUZmVUtoNzNOSTFlTEFwWWpk?=

=?utf-8?B?dHFZb0ZPeXUyTk1Sdkc5eWIrNFpCd1RLMUlLbk54eEVOWTdCRkNGcXJRQlBp?=

=?utf-8?B?RDJIU202eGhDQlN1alpEWks0czJIdXVlNnF0bGxHVk5qcElVRkt3VGY1anpD?=

=?utf-8?B?ZUM1eVNYemF2MmQvT2lTcS96Y2RTbFNRNzlubzFsUm9pT0lDb3hja3pySnBs?=

=?utf-8?B?Q3JFWmtwSlRlSjhZZUJITTBBNmxlRGVBb2w5T2dnaHBDY3B6SzE5b1ovckE1?=

=?utf-8?B?VnZDNHlWZFYvdFVyZyttSHIzVDFhWnRsZjVCT296Yi9EaWUvVitFTHFwdmVq?=

=?utf-8?B?WXdjZitwRzlEWTIyclpCc2YwSTR2SXE2dkY5N1ozYU8vaXpiZ3RyMFBXZHhm?=

=?utf-8?B?VlRwTjVtNmJxbXhPQmFPUlB4alNEWisrd2NVenFDNWJOY1pDUUNWM0o2QW03?=

=?utf-8?B?YWtkcVNRbjZIb1Z1cUZCS005SnVJSzB6YzFuUWpZT3dzUWVZbVNWODNlV013?=

=?utf-8?B?a1BpcUFWblk4ZU5zV1BUZmNSWFhUUFoyeG4wSUphOHFTcCtmK20rNjdTQ0F6?=

=?utf-8?B?dXdRWFoxMi9OdTgzaXR4OUkvbngzckZKU3hyNWpRZDFvRnBROWI1ZFE4TzVJ?=

=?utf-8?B?SHRrNDlXTHRZWVoza05SKzFueE9ycDZKYWZ6NlVjd1Z1WjJWMXJzVm91b3ZB?=

=?utf-8?B?SGR3YVMrTlBLTnpaYVc4R1lXaVlHOE94VGlrRm1WTldlbURMcjZOSm5mL1Nj?=

=?utf-8?B?NklkSld3OXJ6VVFaeEFvN2VnN2FhVWF0eTZkUm1IT0ZYRml1ZXlvaVRvSWhW?=

=?utf-8?B?QjFHSFpob0cwd0FQRW1lYnJiNytDbkJ4QmpRSlJhb3h6YVl4bkxUTFNmank0?=

=?utf-8?B?aC9PYVFNa2ZPN1RhZThYcXNWK1YzU0xoUHpiVHZxZEFkTmZyc2s1MkZkK0s1?=

=?utf-8?B?YjBHc0VzUVJpRXNtb1BRMkh2T3NYdE1MbUh1Rkoyclhjdkx0QlFSQS9kNW9U?=

=?utf-8?B?bUo0K084a1RpZngzc1JiOHVveXg3ZTk3RzBNSllQN2JoZTFxU1BjSzgxaHdS?=

=?utf-8?B?UHBWRm9pSEN1alVVSWFqVFhNMUpTT1NNZy9kbUV0Mk4xMzZGblIrYnh4RzZl?=

=?utf-8?B?Q01teTJ5eGJPSzBnd1FsOXdMWlFXN0poRC9zQ21jN3JOWTNzbzJyaW02cERO?=

=?utf-8?B?cTZUNmMyVElld1RCb2pPc3pUWUZlS0t1WVI0ZktVUnRuUUVCc2ZxcmxWalVD?=

=?utf-8?B?d3hIL0N3dGpuOXd3dHpkNmdMQ3lZTjkvK0Z3RnpkSmphYVNGVnJHN3dRPT0=?=

X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-e3d53.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: be952cfe-3e5d-4b0c-57ac-08dc4ca8ae1d

X-MS-Exchange-CrossTenant-AuthSource: PRAP250MB0687.EURP250.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 25 Mar 2024 08:50:54.5292

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS1P250MB0456

X-Spam_score: 6.7

X-Spam_score_int: 67

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Document Are you interested in making connections with Ukrainian

women nearby? Are you seeking a distinctive platform to meet singles? Discover

UkrainianGirls, where you can indulge in meaningful conversations unlike

those found on conventional dating sites!



Content analysis details: (6.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.64.58 listed in list.dnswl.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: shorturl.ac]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.64.58 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[kearstynriccardo1988696(at)hotmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[kearstynriccardo1988696(at)hotmail.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} =?utf-8?q?New_like_on_your_post_=F0=9F=91=8D?=

X-Antivirus: AVG (VPS 240325-0, 3/24/2024), Inbound message

X-Antivirus-Status: Clean



--===============7290883388350981176==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



PCFET0NUWVBFIGh0bWw+PGh0bWwgbGFuZz0iZW4iPjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVpdj0i

Q29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPgo8bWV0YSBu

YW1lPSJ2aWV3cG9ydCIgY29udGVudD0id2lkdGg9ZGV2aWNlLXdpZHRoLCBpbml0aWFsLXNjYWxl

PTEuMCI+Cjx0aXRsZT5Eb2N1bWVudDwvdGl0bGU+CjwvaGVhZD4KPGJvZHk+CjxwIHN0eWxlPSJ0

ZXh0LWFsaWduOmNlbnRlciI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMy45OTk5OTk5OTk5OTk5

OThwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFsLHNhbnMtc2VyaWYiPjxzcGFuIHN0

eWxlPSJjb2xvcjojMDAwMDAwIj48c3Ryb25nPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTZweCI+

QXJlIHlvdSBpbnRlcmVzdGVkIGluIG1ha2luZyBjb25uZWN0aW9ucyB3aXRoIFVrcmFpbmlhbiB3

b21lbiBuZWFyYnk/PC9zcGFuPjxicj4KPGJyPgo8aW1nIHNyYz0iaHR0cHM6Ly9saDctdXMuZ29v

Z2xldXNlcmNvbnRlbnQuY29tL21mUFljeFVibThUUzJIUFNwdnFodFpEYXV3R240YXJkNFpkdF9H

M0x4YmxaR25tOTBadDJXa3N3dDJMX2p6UDhPbEFvUEMtYmdBYnhzMjZKc2U4Z0ZiazhudGdRdmM1

N0ZsOE16TWd1R2ZXR2FKQlpmbHZWZGpGMTBNNXlRUzQxdUJKVE1fWTl4TnJCWUFzZnE4bXFlN28i

IHN0eWxlPSJoZWlnaHQ6MjY1cHg7IHdpZHRoOjYyNHB4Ij48L3N0cm9uZz48L3NwYW4+PC9zcGFu

Pjwvc3Bhbj48L3A+Cgo8cCBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXIiPjxzcGFuIHN0eWxlPSJm

b250LXNpemU6MTZweCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFsLHNhbnMtc2VyaWYi

PjxzcGFuIHN0eWxlPSJjb2xvcjojMDAwMDAwIj48c3Ryb25nPkFyZSB5b3Ugc2Vla2luZyBhIGRp

c3RpbmN0aXZlIHBsYXRmb3JtIHRvIG1lZXQgc2luZ2xlcz8gRGlzY292ZXIgPGEgaHJlZj0iaHR0

cHM6Ly9yYi5neS85ZDN5OW4iPlVrcmFpbmlhbkdpcmxzPC9hPiwgd2hlcmUgeW91IGNhbiBpbmR1

bGdlIGluIG1lYW5pbmdmdWwgY29udmVyc2F0aW9ucyB1bmxpa2UgdGhvc2UgZm91bmQgb24gY29u

dmVudGlvbmFsIGRhdGluZyBzaXRlcyE8L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3A+

Cgo8cD4mbmJzcDs8L3A+Cgo8cCBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXIiPjxzdHJvbmc+PHNw

YW4gc3R5bGU9ImZvbnQtc2l6ZToxMHB4Ij7irIfirIcmbmJzcDs8c3BhbiBzdHlsZT0iZm9udC1m

YW1pbHk6QXJpYWwsc2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPkJyb3dz

ZSBwcm9maWxlcyBvZiB0aGVzZSB0aHJlZSBsYWRpZXMgYW5kIG1vcmUgdmlhIHRoaXMgbGluayA8

L3NwYW4+PC9zcGFuPuKsh+Kshzwvc3Bhbj48L3N0cm9uZz48L3A+Cgo8cCBzdHlsZT0idGV4dC1h

bGlnbjpjZW50ZXIiPjxhIGhyZWY9Imh0dHA6Ly9zaG9ydHVybC5hYy83ZGcwaCIgc3R5bGU9InRl

eHQtZGVjb3JhdGlvbjpub25lIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjE4cHQiPjxzcGFuIHN0

eWxlPSJmb250LWZhbWlseTpBcmlhbCxzYW5zLXNlcmlmIj48c3BhbiBzdHlsZT0iY29sb3I6IzEx

NTVjYyI+PHN0cm9uZz5Mb3ZlTGlua3I8L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L2E+

PC9wPgoKPHA+Jm5ic3A7PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3BhbiBz

dHlsZT0iZm9udC1zaXplOjE4cHgiPjxzdHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFy

aWFsLHNhbnMtc2VyaWYiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAwMDAwIj48c3Ryb25nPlJlZ2lz

dGVyIG5vdyBhdCBubyBjb3N0LCBmb3IgYSBsaW1pdGVkIHRpbWUgb25seSEgU2VpemUgdGhpcyBv

cHBvcnR1bml0eSBiZWZvcmUgaXQgZGlzYXBwZWFycyE8L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwv

c3Ryb25nPjwvc3Bhbj48YnI+CiZuYnNwOzwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRl

ciI+Jm5ic3A7PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48YnI+Cjxicj4KVG8g

b3B0IG91dCBvZiByZWNlaXZpbmcgb3VyIHVwY29taW5nIHByb21vdGlvbnMsIGNsaWNrIHRoZSA8

YSBocmVmPSJodHRwOi8vdC5seS9IRVVkdCI+dW5zdWJzY3JpYmUgbGluazwvYT4uPHNwYW4gc3R5

bGU9ImZvbnQtc2l6ZToyMnB4Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6QXJpYWwsc2Fucy1z

ZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPiA8L3NwYW4+PC9zcGFuPjwvc3Bhbj48

L3A+Cgo8cD4mbmJzcDs8L3A+Cgo8cD4mbmJzcDs8L3A+Cgo8cD48c3Ryb25nPjxzdHJvbmc+Jm5i

c3A7PC9zdHJvbmc+PC9zdHJvbmc+PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48

c3Ryb25nPjxzdHJvbmc+Jm5ic3A7PC9zdHJvbmc+PC9zdHJvbmc+PC9wPgoKPHAgc3R5bGU9InRl

eHQtYWxpZ246Y2VudGVyIj48c3Ryb25nPjxzdHJvbmc+Jm5ic3A7PC9zdHJvbmc+PC9zdHJvbmc+

PC9wPgo8L2JvZHk+CjwvaHRtbD4=



--===============7290883388350981176==--

Ukrainian dating spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 25 Mar 2024 08:13:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rol3V-00000000HnK-2Aox

for dave@doctor.nl2k.ab.ca;

Mon, 25 Mar 2024 08:12:05 -0600

Resent-From: The Doctor

Resent-Date: Mon, 25 Mar 2024 08:12:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn7nam10olkn2088.outbound.protection.outlook.com ([40.92.40.88]:18849 helo=NAM10-BN7-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rogBq-00000000LWu-0xyu

for doctor@nl2k.ab.ca;

Mon, 25 Mar 2024 03:00:26 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=kjFDo04M3SBhaG5hDHrJ/b/Kk3+ske4HiE5zv4RTAUTEHguL+oAaGeuZ7XHB8KElVGGTBNrrLefAKblA5cRkr0QFsdZKqfhpw4DqaByHJJDDM5zvDpuiCw2M8+cnwCsV0CLVkG/HE1VXZBGjf9SyI2uaK9GIafffxu42/YF0CTI/xYVJ7lJLA9EhDRi99l4rYLlAL7ivBXcZJPpJK4xXjXXtB9R+CV9dirZ07vU7hhIdnGh9iQM/c02IYzEeZuyJtu9oliY8UPcmBuLK0EtYHVnAw+RFpFje2DLBxNWE1CUHuP3aI3nvjjTo9UzRzK38dVQHnifFwl7jWyDu07XXKg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=seJ6Sdk87eq3Tut9JCUqvrH3vmS2lsc5mwkPCZVoFU4=;

b=lFnFsxoHRxQAOHSm7iFJbjXzux1CV7dvpwDAmrUsxsIFVxdID/xqRDMkU7m9GUsGq6vmcZ61DsJpZhTAAUyW0fR0p7723WDiDa8xEVDi9m/hAM3+wTSY2lzASbMaG7JZxJt1Hjp/7ApAeXMVTsZfwzgTeRuamzgkMGG5sa3/MLF7RMPzWUCBna744gF7BX7Ovh4smFg+OsYFQLyaJG3shJnFmPiw2kj9XntqzvtruCLXAkZ7Z0Dfv3FvhEJGpQNXFyZSAASo93PfRZKdKmtxSNqWVE0mcUQdKlcF1XfoonpxgTsSJ53H+qFWBPEmWq9Mc4/ya4OoXW0OTMdlEljXag==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=seJ6Sdk87eq3Tut9JCUqvrH3vmS2lsc5mwkPCZVoFU4=;

b=F0pC6w3sh8Q0mFvtqSA0CTQtF4Ykn6lBNuNyYDJYd0x4QPP0ConYjW4ckyBp65m8jfpHYxlqhrBwnFluOklTk3PdjzaYirsLcNfJBdj0FLvEAK6BR9k/s+2jNVLo6xBrd6a9uLS4s5IQ48zDXKEUmWdmRJoqpbsA9RKdPas1JvEr6/9NfHrP8FJz88i6IvQRuR3+g+rDj09TFdf3EsqSNTghV5Nq65CaLGA01C+djDJwUapSUswLFOn4Y4Zk0ewxHBhCv3NtK52Yx7TkV+lBQ4xAbb8vEiZLDNZWrgqFFRGc62jBuhP4In9Xd6HS7zI2dqF2d9bEMFnAfOUMshLuhw==

Received: from BN8PR12MB3010.namprd12.prod.outlook.com (2603:10b6:408:63::32)

by MN0PR12MB5977.namprd12.prod.outlook.com (2603:10b6:208:37c::22) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.31; Mon, 25 Mar

2024 08:58:08 +0000

Received: from BN8PR12MB3010.namprd12.prod.outlook.com

([fe80::6cc4:f48b:8f41:596a]) by BN8PR12MB3010.namprd12.prod.outlook.com

([fe80::6cc4:f48b:8f41:596a%6]) with mapi id 15.20.7409.031; Mon, 25 Mar 2024

08:58:08 +0000

Content-Type: multipart/alternative; boundary="===============8701990277900836242=="

Subject: =?utf-8?q?New_post_in_your_area_=F0=9F=93=8D?=

From: LoveLinkr

CC: LoveLinkr

Date: Mon, 25 Mar 2024 08:57:22 +0000

X-TMN: [k4V18d7GlcsJQt8TkfFJsk8q3d3sX2C+]

X-ClientProxiedBy: FR4P281CA0290.DEUP281.PROD.OUTLOOK.COM

(2603:10a6:d10:e7::20) To BN8PR12MB3010.namprd12.prod.outlook.com

(2603:10b6:408:63::32)

Message-ID:



MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BN8PR12MB3010:EE_|MN0PR12MB5977:EE_

X-MS-Office365-Filtering-Correlation-Id: 647e0b3f-6574-4941-fe3e-08dc4ca9aefa

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?bUJFblF1M3cwalE3Nmp6aVpzVzlKUGttZGRhc2lBdlV1NGZlVEZMVnJLTUFK?=

=?utf-8?B?K2NBMy82Sm1zZlNuM2ZEWnhFVXUzMkhXQ0hWeUdvRjlVbnVXcFcwNmxaTncy?=

=?utf-8?B?RVd2NWNxbWt6YytjRnl2OUZ6ME93UzhGdjFDMm0xNVRuTUJZaTVmOXNZV2NT?=

=?utf-8?B?ZzFOeWVxaHVRanNKb1d1T2hFQ1dqSDY1eWhJeTlWZjIwNFVpbW1GR3p0VmRl?=

=?utf-8?B?K1hrb2tDZlBURUluVUh4aXRKemg5cWdIUGlGVnJJc1YrTlhsdEFxVjkxUm5I?=

=?utf-8?B?SkdRQ1hJbEJUYzBkbFRpVnIxdG5xQklBa0xOVW9TcmxJcEE1T3p5d09pcjgv?=

=?utf-8?B?Z1FDdmlJcVdTVUIwbm1wN1d4eHN1b29JSTU2YW5JRmVoeW1TMytxTXI5STZE?=

=?utf-8?B?QmM4aWxOek9LQlRWQkZHOTBGU0R3WjRJYXFRMFZ1dWlKZ0R3RkE0U0dFV0Jq?=

=?utf-8?B?ZHIySzM1OUFJcEZEdFQzYmVMWkwzSDBPZEVYVnp4KzU4c29yUXVlRy9ib1dI?=

=?utf-8?B?RnJ1S3hVRS9iVVBuWGk1aGY0REJGY2Y1NVRvNVZDQWxTMkV2OW83bk52dW01?=

=?utf-8?B?MEVvSTRMK2MweHlmaHkzQVg1bUh6RzFieXBYUUpEWVJiYnRNTEIwTWdKSity?=

=?utf-8?B?NVFWUHI1Tnd3ZEFqUk1zOU93YnpuL0o0b1NOT2pUTkJHZEgwcFdGQU9qV0Yz?=

=?utf-8?B?cGx4UWFHUkNjcExja1lpazQvcEIxa1dTSDdOMnB2bnRnUy9jeW5GbWR0TjN2?=

=?utf-8?B?Ujg3a0l1N0xaZjZSWTQyZ3lSeVJMVFdHbmtsSzhkYytRRW5vZjhJWWVOSTJS?=

=?utf-8?B?bzJIWWQ5QXI4VEtyL0t3TGRTVnFLRjdyQXBvV21sMFlFMXdsclZlczFVeUU1?=

=?utf-8?B?Y29OcjZncTVtakdWemZRWExoVEVadUc4YWNQWFYzK1NDMlFlREg0eVRpT2pa?=

=?utf-8?B?eDN1ZEJoaDJJTDRUTHB5bCt2a21PUENBelF0bk85U21UN3cwSjd1bSt4L09R?=

=?utf-8?B?SkpGSGhZQ3RHNkZ1Q1JoTGZORnBzdlROUHZMTXcwTDM3WTBYYWRjWXZKQ3Br?=

=?utf-8?B?cERhbVMxTzJIYlptR244M2MrVnREaUViS1NBZ0RqRlRqU21jazdSOHRETXRv?=

=?utf-8?B?WDZwOXd1TWd5TFBXT2dWaWlOR29XS1dKbVVvMDdXQlVUdWFMQzJLdjF6ZEx6?=

=?utf-8?B?SUttcGRDcStvU1BWZXNKa3hyZjNnYWE3TWhoLzNWTXNjd0RlaWx6bnNTNXo0?=

=?utf-8?B?VTN5U0FLMmFYNTdxZ2lQdmpKQWdnRTN5SlNEN3Q3dVlLYk56azNPSlVRc3cv?=

=?utf-8?B?N3AzSWxiV2pETUVITjFFWVpUODE2dlVlOWhIaWVIMHdaaXpiN0dUV2NBTnRL?=

=?utf-8?B?OGxrdHdNNFdQQXBSYmsybnhHSVpTR2NBTi9Ud01vVjAyN0crZDVseEx0bTdu?=

=?utf-8?B?N2o1ZkErUHZhWnl4N2gya0x0QnJ5V3JEVXdnQTJHbVJpN3ZrNk1CWGlYNWpu?=

=?utf-8?B?MXV2MnhYNE9RS21Qc0FGYTRZTWJWcGFGbUcwN203M1d3T2cyVFNRS0x2T2g2?=

=?utf-8?B?bnV3RDJ1Z2xCWEZYKyt6Vlp2TVdvbGZMUEZZb1ZycEE4eE5ra2ZVTHZpOGFU?=

=?utf-8?B?QXdZWFpXOFh5eGhmMEFqQlRUdzFUZ2lPbVJLVW1idkxoSGlyZlQ2bFRNYVBt?=

=?utf-8?Q?ljaAznAIjowbjNVokGTQ?=

X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-71ea3.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: 647e0b3f-6574-4941-fe3e-08dc4ca9aefa

X-MS-Exchange-CrossTenant-AuthSource: BN8PR12MB3010.namprd12.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 25 Mar 2024 08:58:07.3650

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN0PR12MB5977

X-Spam_score: 6.7

X-Spam_score_int: 67

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Document Are you interested in making connections with Ukrainian

women nearby? Are you seeking a distinctive platform to meet singles? Discover

UkrainianGirls, where you can indulge in meaningful conversations unlike

those found on conventional dating sites!



Content analysis details: (6.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: shorturl.ac]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.40.88 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.40.88 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[pitzerdiya666(at)hotmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[pitzerdiya666(at)hotmail.com]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

Subject: {SPAM?} =?utf-8?q?New_post_in_your_area_=F0=9F=93=8D?=

X-Antivirus: AVG (VPS 240325-0, 3/24/2024), Inbound message

X-Antivirus-Status: Clean



--===============8701990277900836242==

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64



PCFET0NUWVBFIGh0bWw+PGh0bWwgbGFuZz0iZW4iPjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVpdj0i

Q29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPgo8bWV0YSBu

YW1lPSJ2aWV3cG9ydCIgY29udGVudD0id2lkdGg9ZGV2aWNlLXdpZHRoLCBpbml0aWFsLXNjYWxl

PTEuMCI+Cjx0aXRsZT5Eb2N1bWVudDwvdGl0bGU+CjwvaGVhZD4KPGJvZHk+CjxwIHN0eWxlPSJ0

ZXh0LWFsaWduOmNlbnRlciI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMy45OTk5OTk5OTk5OTk5

OThwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFsLHNhbnMtc2VyaWYiPjxzcGFuIHN0

eWxlPSJjb2xvcjojMDAwMDAwIj48c3Ryb25nPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTZweCI+

QXJlIHlvdSBpbnRlcmVzdGVkIGluIG1ha2luZyBjb25uZWN0aW9ucyB3aXRoIFVrcmFpbmlhbiB3

b21lbiBuZWFyYnk/PC9zcGFuPjxicj4KPGJyPgo8aW1nIHNyYz0iaHR0cHM6Ly9saDctdXMuZ29v

Z2xldXNlcmNvbnRlbnQuY29tL21mUFljeFVibThUUzJIUFNwdnFodFpEYXV3R240YXJkNFpkdF9H

M0x4YmxaR25tOTBadDJXa3N3dDJMX2p6UDhPbEFvUEMtYmdBYnhzMjZKc2U4Z0ZiazhudGdRdmM1

N0ZsOE16TWd1R2ZXR2FKQlpmbHZWZGpGMTBNNXlRUzQxdUJKVE1fWTl4TnJCWUFzZnE4bXFlN28i

IHN0eWxlPSJoZWlnaHQ6MjY1cHg7IHdpZHRoOjYyNHB4Ij48L3N0cm9uZz48L3NwYW4+PC9zcGFu

Pjwvc3Bhbj48L3A+Cgo8cCBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXIiPjxzcGFuIHN0eWxlPSJm

b250LXNpemU6MTZweCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFyaWFsLHNhbnMtc2VyaWYi

PjxzcGFuIHN0eWxlPSJjb2xvcjojMDAwMDAwIj48c3Ryb25nPkFyZSB5b3Ugc2Vla2luZyBhIGRp

c3RpbmN0aXZlIHBsYXRmb3JtIHRvIG1lZXQgc2luZ2xlcz8gRGlzY292ZXIgPGEgaHJlZj0iaHR0

cHM6Ly9yYi5neS85ZDN5OW4iPlVrcmFpbmlhbkdpcmxzPC9hPiwgd2hlcmUgeW91IGNhbiBpbmR1

bGdlIGluIG1lYW5pbmdmdWwgY29udmVyc2F0aW9ucyB1bmxpa2UgdGhvc2UgZm91bmQgb24gY29u

dmVudGlvbmFsIGRhdGluZyBzaXRlcyE8L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3A+

Cgo8cD4mbmJzcDs8L3A+Cgo8cCBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXIiPjxzdHJvbmc+PHNw

YW4gc3R5bGU9ImZvbnQtc2l6ZToxMHB4Ij7irIfirIcmbmJzcDs8c3BhbiBzdHlsZT0iZm9udC1m

YW1pbHk6QXJpYWwsc2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPkJyb3dz

ZSBwcm9maWxlcyBvZiB0aGVzZSB0aHJlZSBsYWRpZXMgYW5kIG1vcmUgdmlhIHRoaXMgbGluayA8

L3NwYW4+PC9zcGFuPuKsh+Kshzwvc3Bhbj48L3N0cm9uZz48L3A+Cgo8cCBzdHlsZT0idGV4dC1h

bGlnbjpjZW50ZXIiPjxhIGhyZWY9Imh0dHA6Ly9zaG9ydHVybC5hYy83ZGcwaCIgc3R5bGU9InRl

eHQtZGVjb3JhdGlvbjpub25lIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjE4cHQiPjxzcGFuIHN0

eWxlPSJmb250LWZhbWlseTpBcmlhbCxzYW5zLXNlcmlmIj48c3BhbiBzdHlsZT0iY29sb3I6IzEx

NTVjYyI+PHN0cm9uZz5Mb3ZlTGlua3I8L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L2E+

PC9wPgoKPHA+Jm5ic3A7PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3BhbiBz

dHlsZT0iZm9udC1zaXplOjE4cHgiPjxzdHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkFy

aWFsLHNhbnMtc2VyaWYiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAwMDAwIj48c3Ryb25nPlJlZ2lz

dGVyIG5vdyBhdCBubyBjb3N0LCBmb3IgYSBsaW1pdGVkIHRpbWUgb25seSEgU2VpemUgdGhpcyBv

cHBvcnR1bml0eSBiZWZvcmUgaXQgZGlzYXBwZWFycyE8L3N0cm9uZz48L3NwYW4+PC9zcGFuPjwv

c3Ryb25nPjwvc3Bhbj48YnI+CiZuYnNwOzwvcD4KCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRl

ciI+Jm5ic3A7PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48YnI+Cjxicj4KVG8g

b3B0IG91dCBvZiByZWNlaXZpbmcgb3VyIHVwY29taW5nIHByb21vdGlvbnMsIGNsaWNrIHRoZSA8

YSBocmVmPSJodHRwOi8vdC5seS9IRVVkdCI+dW5zdWJzY3JpYmUgbGluazwvYT4uPHNwYW4gc3R5

bGU9ImZvbnQtc2l6ZToyMnB4Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6QXJpYWwsc2Fucy1z

ZXJpZiI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPiA8L3NwYW4+PC9zcGFuPjwvc3Bhbj48

L3A+Cgo8cD4mbmJzcDs8L3A+Cgo8cD4mbmJzcDs8L3A+Cgo8cD48c3Ryb25nPjxzdHJvbmc+Jm5i

c3A7PC9zdHJvbmc+PC9zdHJvbmc+PC9wPgoKPHAgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48

c3Ryb25nPjxzdHJvbmc+Jm5ic3A7PC9zdHJvbmc+PC9zdHJvbmc+PC9wPgoKPHAgc3R5bGU9InRl

eHQtYWxpZ246Y2VudGVyIj48c3Ryb25nPjxzdHJvbmc+Jm5ic3A7PC9zdHJvbmc+PC9zdHJvbmc+

PC9wPgo8L2JvZHk+CjwvaHRtbD4=



--===============8701990277900836242==--

Nigerian Spam from Microsoft outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 24 Mar 2024 12:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roSUt-00000000N32-1Nji

for dave@doctor.nl2k.ab.ca;

Sun, 24 Mar 2024 12:23:07 -0600

Resent-From: The Doctor

Resent-Date: Sun, 24 Mar 2024 12:23:07 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lo4gbr01rlhn2145.outbound.protection.outlook.com ([40.95.115.145]:3239 helo=GBR01-LO4-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roPQl-00000000G42-0Goe

for sales@nk.ca;

Sun, 24 Mar 2024 09:06:42 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=BXfg6JA+JAmsBfUvcZqd/Gfy7hwpH6DIJ9bjRi5/FRLxSSoQ2huzW8Kl3dX8DkLpoyXObZSfZ6hm0FZNKXdrdLaCoDu4Y2dzrzmr45zxT9mk6spa1sXXHelBYtPvsi2WgtoKYuYBVwWEaiBNGue4NUFEpXq5gJDmzr8zFIGqpzChjCskXIe0VQQD5L/GfkNhAmF0A0puIV2h9haHMhZDHHeVOya9tBXlIBaMiFZPLuSvx6IE4253hhwRwyRNbTsWH6DQODZL1yHF28wlQzxKHn41ha/q0Y5J91rhQaDqJre3bq2NbVJmzoKbWN8D/V/njcRDGtW5zBZW1Bin5cOucA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=KOYlofxoeno+mXY12bZn7zRugj7bRZ3E5xvL3LShNPo=;

b=N555ANbRiN1pYo/HBUPDvMV5vDg8u+gFeveu70m0MpB+wq9gGil5w+vOWtzA8/gQ0nX38uvsrHRTyg7Zw99rMlSNXNQcZLLaHQgjtbpLUvfV9+Bp1DfDoe5w+49XGisTJKkDK4K23FQuxJREv6FZNZXB30jWbs2M74YheuuHLQ+5W3d7rn2+cm5lXn80NSOp3huHNTD/+wtHMmno5UX4P0pzJw1Qrv14E2HWAegrJswHDDjOIUVyfwHX5jAVe9KzDj3rUZ/42C6cbBUTn4Ur2Nb4n7JxCbpR8pHwQuaxvCmhYLY4utzWtNh6IC5rHIn2zol7DrdxHWgBwOo20/Rx8w==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is

193.39.172.206) smtp.rcpttodomain=nisanthinc.com smtp.mailfrom=office.net;

dmarc=none action=none header.from=office.net; dkim=none (message not

signed); arc=none (0)

Received: from LO4P123CA0528.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:2c5::10)

by LO6P123MB7303.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:33c::16) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.31; Sun, 24 Mar

2024 15:04:35 +0000

Received: from LO1PEPF000022FD.GBRP265.PROD.OUTLOOK.COM

(2603:10a6:600:2c5:cafe::7b) by LO4P123CA0528.outlook.office365.com

(2603:10a6:600:2c5::10) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.13 via Frontend

Transport; Sun, 24 Mar 2024 15:04:35 +0000

X-MS-Exchange-Authentication-Results: spf=none (sender IP is 193.39.172.206)

smtp.mailfrom=office.net; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=office.net;

Received-SPF: None (protection.outlook.com: office.net does not designate

permitted sender hosts)

Received: from ebyst.gwynedd.llyw.cymru (193.39.172.206) by

LO1PEPF000022FD.mail.protection.outlook.com (10.167.240.21) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.7409.10 via Frontend Transport; Sun, 24 Mar 2024 15:04:35 +0000

Received: from HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3) by

HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.2.1258.28; Sun, 24 Mar 2024 15:04:32 +0000

Received: from User (172.18.4.86) by HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3)

with Microsoft SMTP Server id 15.2.1258.28 via Frontend Transport; Sun, 24

Mar 2024 15:04:30 +0000

Reply-To:

From: Federal Reserve Bank

Subject: Dead Or ALIVE....4s

Date: Sun, 24 Mar 2024 08:04:29 -0700

MIME-Version: 1.0

Content-Type: text/html; charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID: <11a10617-b4eb-4685-866e-2dc8ffee7ef7@HQ-EX19-1.gwynedd.rhwydwaith>

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: LO1PEPF000022FD:EE_|LO6P123MB7303:EE_

X-MS-Office365-Filtering-Correlation-Id: c9297250-8174-4635-acd4-08dc4c13b829

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 1

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?windows-1251?Q?dIyOeQ3nrogoZqKgwud3Od6wqLNT9DcZyVouLuvLO/3M2bYRwduhiHnA?=

=?windows-1251?Q?RUGrZD+qLAUlkCgE4V+lAB7nwP1qpX9IpTwwPNa4/Cys/2eBQ3fM7bDN?=

=?windows-1251?Q?fmQj2YrxN9unFe/NYavx64mDu8KgT2bzemsUoM6pS5XiPxHRiJCNUKuu?=

=?windows-1251?Q?5SwxvqcQGIDANWChaXWB8mwzcGI1kb0Ht6qKMVnFQDS3NrBBY/V83JYE?=

=?windows-1251?Q?QFTQiOKGodYDB9ort6uLNtlypxMnWb+NFeNLdo0SGzOgr5hl3plJfEh4?=

=?windows-1251?Q?5bh7467C0pH3cVw/ysDPTQ6fu56u5zy9SlLCSb6XoW0tRR2G33ALAZMB?=

=?windows-1251?Q?7GiwT01XqBgqMHSyLLPsKs54nJ01YLKlJEY9ZIoQIObGPudrZKJcVgG0?=

=?windows-1251?Q?5BwiIiRUO8Tvd9VGKQkuxDmctLe9KM8rJylgBWz2hRDSQWATD+QUtYg/?=

=?windows-1251?Q?BtfUBymk6J3qwlkJQsxVF7oF/yT2pWXrWGX6w7rgoOF4BL3ewkwIgLKp?=

=?windows-1251?Q?NIR7xH1XHlKukjlYkAsc4rddFtGjzbF2caWTAQ8OEvzP+c90ULqo8lvo?=

=?windows-1251?Q?UewADpanBoVGDkBm3hq9XZPB+alu6ZfJZ7goMQoPGivvhEWn92/qUWAb?=

=?windows-1251?Q?+QKzLZvxuWl0JTfoZrNht7EKX3BPe73FG6RH49DzUcfPxGnSL1IZMna9?=

=?windows-1251?Q?9yNpJLPiy5OTSkvFW8eres2Az/mrTr/BXkcXNaa93HYPFwDCdfh57DWL?=

=?windows-1251?Q?V8Ee/JjOMietf9q7nGWSXygHmPrtbf5VWAqYCzTV+Q0AD010G9i0oU3v?=

=?windows-1251?Q?248khS+3QmrAAtkS5rH6HRexadAm2DEL910xaXx54fxkNwqnFN529Uyb?=

=?windows-1251?Q?REG1gWd57ejpPDVGbMwobp1IIgbZQq1b1y8QTlYPVAiKwt3Cpj+N4cDy?=

=?windows-1251?Q?lRwquV8urPlbWKdhD/2+fldbS1cP44YkHy5M7hUKWjaThLq56yK1wPf0?=

=?windows-1251?Q?Iazkspb3ZTsICYH40i3jVK24Ehn62QzpDD9GpcOwk0i0vseZRn1r0bIr?=

=?windows-1251?Q?hcYH/xOpe3L9tP9FkVNOwmOiFnNqSWs/z3he9c1dx/gPnLCyZ8UO9Sui?=

=?windows-1251?Q?4GV+zXwnkkIQcLNcfjv3y6Zzslnbrz/SWIObRfGtWSZNhCaHdAtBwtkT?=

=?windows-1251?Q?09QUHAyKlvSH3ohOnJE7P7ULJ3BLrk6+g2nXI4fMPLE6iI3PUxaV2qu8?=

=?windows-1251?Q?U6w7X7V95OOcjKkxPA4=3D?=

X-Forefront-Antispam-Report:

CIP:193.39.172.206;CTRY:GB;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:ebyst.gwynedd.llyw.cymru;PTR:systemau.gwynedd.llyw.cymru;CAT:OSPM;SFS:(13230031)(61400799018)(82310400014)(7416005)(48200799009)(376005)(35950700004)(2700400011);DIR:OUT;SFP:1023;

X-OriginatorOrg: cyngorgwynedd.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Mar 2024 15:04:35.6658

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: c9297250-8174-4635-acd4-08dc4c13b829

X-MS-Exchange-CrossTenant-Id: 99841289-67fd-4e8e-b813-12b22f782ece

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=99841289-67fd-4e8e-b813-12b22f782ece;Ip=[193.39.172.206];Helo=[ebyst.gwynedd.llyw.cymru]

X-MS-Exchange-CrossTenant-AuthSource: LO1PEPF000022FD.GBRP265.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: LO6P123MB7303

X-Spam_score: 30.8

X-Spam_score_int: 308

X-Spam_bar: ++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Beneficiary, We wish to inform you that a power of attorney

was forwarded to our office this morning, by two gentlemen regarding your

unclaimed fund of $5.5 Million Dollar. One of them is an American citizen

named [...]



Content analysis details: (30.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=GBR01-LO4-obe.outbound.protection.outlook.com;ip=40.95.115.145;r=doctor.nl2k.ab.ca]

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam

0.0 NSL_RCVD_FROM_USER Received from User

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[williamtash1949(at)gmail.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.95.115.145 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[40.95.115.145 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.95.115.145 listed in wl.mailspike.net]

2.7 UNCLAIMED_MONEY BODY: People just leave money laying around

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

2.0 PDS_HELO_SPF_FAIL High profile HELO that fails SPF

1.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.2 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Dead Or ALIVE....4s













Dear Beneficiary,




 




We wish to inform you that a power of attorney was forwarded to our office this morning, by two gentlemen regarding your unclaimed fund of $5.5 Million Dollar. One of them is an American citizen named Mr. Robert Porter and the other is Mr. Wilhelm Berg a Swedish citizen.




 




The document claims these gentlemen to be your authorized representatives, and the power of attorney states that you are already deceased. It further states that your death was due to lung cancer, with your date of death being March 27th, 2019.




 




They have now submitted a new account to replace the receiving account that was in the original claim of funds. These funds have remained unclaimed for quite some time and the need for resolution is pressing.




 




Below is the new account they have submitted.




 




Account Name: Robert Porter /Wilhelm Berg




Account: 5007-29 438 66




IBAN-nr: SE4150000000050072943866




Bic-kod: ESSESESS




Skandinaviska Enskilda Banken. (SEB :-)




SWEDEN.




 




In the event that you are in fact still alive, we ask that you confirm your existence by responding to this email. You are to view this as a matter requiring immediately attention and response. We have 48 hours monitoring of all activities within Federal Reserve Bank.




 




We have contacted the bank in the Sweden asking them to wait for further directives from Federal Reserve Bank, prior to authorizing any withdrawals in any form. Our request is based entirely on our attempt to verify that you are in fact deceased, before money is wrongly disbursed.




 




Finally, we forewarn you that if we do not hear back from you shortly, we will have to assume that you are in fact deceased and Federal Reserve Bank will proceed with release funds to the above newly submitted account.




 




Sincerely,




 




Lorie K. Logan (frbdallasdistrict@outlook.com)




Federal Reserve System2200 N Pearl St, Dallas, TX 75201, USA




 




 




Nigerian Spam from Microsoft outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 24 Mar 2024 12:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roSUo-00000000N1Q-3AYi

for dave@doctor.nl2k.ab.ca;

Sun, 24 Mar 2024 12:23:02 -0600

Resent-From: The Doctor

Resent-Date: Sun, 24 Mar 2024 12:23:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-cwxgbr01rlhn2156.outbound.protection.outlook.com ([40.95.114.156]:25314 helo=GBR01-CWX-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roPKo-00000000FdT-3VeS

for root@nk.ca;

Sun, 24 Mar 2024 09:00:34 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=fwlnAHyk2yQaT1/JSsfT31KXE+Yz7puieZIE1BrjR8/k8O4Ql9S75lFGP4FfEtKKYCFtJ979sHA0EyUlTlnZTRlfHCrVKsXo9ae8ipolS+5M2YVfpfHWb2gx6KGI84+1WoCdfuJpt5wfkBkVlbJhPItiqIAWvydyBtdxO9/SFY1OAfRWlzAKdDf1A7sEcgr6r0Vz7z02WLDklaweUdxqfXo5ITqZMOfQ4OidbIVouPHFHhJGSMq/6s80mZAwa0kmc1UslVIDhGxxWPwFxlOT78Lw/DO9IP7r/ZwowTXwuYHvh3O6Kcpvb+z9/jub0QLbSU9Hntp5Qae+Ay9MLR0gKQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=KOYlofxoeno+mXY12bZn7zRugj7bRZ3E5xvL3LShNPo=;

b=oMqqzv2eEIAykOC5pQawUjKSTkVi/OJMHp4xXqx1DdLiO47kawSkvVgmZy0+62fxDyMWaWhNjUswVeajdutHzUuxngavbDaVcbBMbYSDHasZ2lwEqBfeBHICGc959Fxh+4AHfFG0blisLVv0ELMk8UWFYfrqepTSkRaD+h+jnyMsagPdf30dH4Nd0S0A1/NGzL8t7o6r83CR8rHwg6wBAQSjJmjqqWwZSXtofIRMZXY48pqFq084v5x6S71IXmngazbQjAwCjzDx+R+e61XddJWM6M/FndvfcaYV1AVtP37PYJHhZpnCyxd/5ByOGNNkHHtSgRK/xAzMnvVPNs7ysw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is

193.39.172.206) smtp.rcpttodomain=nfi.ren.nic.in smtp.mailfrom=office.net;

dmarc=none action=none header.from=office.net; dkim=none (message not

signed); arc=none (0)

Received: from LO4P265CA0279.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:37a::18)

by LO6P123MB6597.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:2b6::10) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.30; Sun, 24 Mar

2024 14:58:28 +0000

Received: from LN2PEPF000100CA.GBRP265.PROD.OUTLOOK.COM

(2603:10a6:600:37a:cafe::7c) by LO4P265CA0279.outlook.office365.com

(2603:10a6:600:37a::18) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.13 via Frontend

Transport; Sun, 24 Mar 2024 14:58:28 +0000

X-MS-Exchange-Authentication-Results: spf=none (sender IP is 193.39.172.206)

smtp.mailfrom=office.net; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=office.net;

Received-SPF: None (protection.outlook.com: office.net does not designate

permitted sender hosts)

Received: from ebyst.gwynedd.llyw.cymru (193.39.172.206) by

LN2PEPF000100CA.mail.protection.outlook.com (10.167.240.4) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.7409.10 via Frontend Transport; Sun, 24 Mar 2024 14:58:27 +0000

Received: from HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3) by

HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.2.1258.28; Sun, 24 Mar 2024 14:58:23 +0000

Received: from User (172.18.4.86) by HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3)

with Microsoft SMTP Server id 15.2.1258.28 via Frontend Transport; Sun, 24

Mar 2024 14:58:22 +0000

Reply-To:

From: Federal Reserve Bank

Subject: Dead Or ALIVE....4s

Date: Sun, 24 Mar 2024 07:58:21 -0700

MIME-Version: 1.0

Content-Type: text/html; charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID:

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: LN2PEPF000100CA:EE_|LO6P123MB6597:EE_

X-MS-Office365-Filtering-Correlation-Id: f7d09b9f-c5ad-4669-b1dc-08dc4c12dcd6

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 1

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?windows-1251?Q?Hg6rtWKZVcJ1PFdKmMUz2XqadsisPQYhRSOO/VQ7WeVRS3E8DBnaqcH5?=

=?windows-1251?Q?KZbGZqEctGFT1YCsbyeeMGr0nYk/O1iEtmOu4KXJQstSXAIOL0QhjOzy?=

=?windows-1251?Q?UgCxadT6LwYLuwYbz4jd9OgTCZNctNUZjTjx4p2Xx1UAeA2mFWUJ2G/i?=

=?windows-1251?Q?2Hr2njs88+L0Q5Pau8xj9CSmDfr9FUPFWpEPvYuVJ0adWgfenTeh0aG0?=

=?windows-1251?Q?jaXU9l5Uqxz5rO8N8+Mg604cZrMXPnj9Vti4kt5+Z4LE6KCuyFfGjcp9?=

=?windows-1251?Q?aHTVhTcAeZfX40l0zgyXHu7a7xl6Vp1LWeYOgBrBtn0dmVkLkUof+mSB?=

=?windows-1251?Q?m7lvbib+xknc8IEDQpMKO8M7vhTKAjB1CX7bEFCQPa+7fqmiU5isoQSl?=

=?windows-1251?Q?z1KlR80z+03wBwKBYRddsV7uqoguVdydETj30QDTdNNlF9HCWcDZB8AI?=

=?windows-1251?Q?2+0O6FnpCtjzQC0hBdWGQ5XMxuQ3Y0kCXYrLcJvJGu/HKtX7/IlPIxeI?=

=?windows-1251?Q?kooSfSUb0oXuLzt0sTAh3R5jDC3cfnLS4Bv3lzvB5EtIqvWgAV+aVhKT?=

=?windows-1251?Q?M3jCQEadFzCP6V55A5yzZAnijXYOpq0rJNs5i8oksQWfBgvxR8U/b4j3?=

=?windows-1251?Q?Ll990554J3953UMrDVjNiwlRrj4YO0HV/Jp8eJAe9DCy2mIDKHQSMWWy?=

=?windows-1251?Q?YYzGiOFH0xVl+FsbPbngp9eqnPKxhm0KzoNsFlVuO7zu9/xWPswYck+t?=

=?windows-1251?Q?1p5KgsBqgCsDQgW/dt3SsxAD/lIk4p5+aqHBNuz7CNi597cDW1xZzhuf?=

=?windows-1251?Q?GVb2F4MqM40KPkxYZRMvxa3cVv8b7y0oeQtVQqLsLxCSp/GICGwJvmyw?=

=?windows-1251?Q?aItqjceYb7bgmwnqSDiIozjB1aeFb+BZ5f46mUw5rbREA+38s+uMq7fS?=

=?windows-1251?Q?0WH/zB31QLf/91LeIE6wKyBRhgyAy5DEcdCmaJKQlVFN5JOflNo9W+VQ?=

=?windows-1251?Q?+Qz7soHxpzdQTY0p1hlToXhUNUnqTTpcYMQyBEH/f7N/zNB+BEdifSdT?=

=?windows-1251?Q?ucMGGJezMZ0Uo/Pvfjix84lWhhy7Kn8gKfkbgVyrwPv+0EGdUAQXpRmY?=

=?windows-1251?Q?iykFJH04VpdSVCukfn6zO9uaZBJQ3gVkBp2AMoQHTeciZcZGFvJhgmOJ?=

=?windows-1251?Q?/cZrte12PhZaRloaKa7Y1uUg9mtSm1mV2pQSSUvGd9IRhUvnc+7W5+RP?=

=?windows-1251?Q?hx/ej+pn/+jepo+pvaJ70eN0GvinP5EOy8Z1DKAG6OhIPsY8HaRk3Da0?=

=?windows-1251?Q?97DOOA=3D=3D?=

X-Forefront-Antispam-Report:

CIP:193.39.172.206;CTRY:GB;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:ebyst.gwynedd.llyw.cymru;PTR:systemau.gwynedd.llyw.cymru;CAT:OSPM;SFS:(13230031)(61400799018)(48200799009)(82310400014)(35950700004)(32650700005)(7416005)(376005)(2700400011);DIR:OUT;SFP:1023;

X-OriginatorOrg: cyngorgwynedd.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Mar 2024 14:58:27.7166

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: f7d09b9f-c5ad-4669-b1dc-08dc4c12dcd6

X-MS-Exchange-CrossTenant-Id: 99841289-67fd-4e8e-b813-12b22f782ece

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=99841289-67fd-4e8e-b813-12b22f782ece;Ip=[193.39.172.206];Helo=[ebyst.gwynedd.llyw.cymru]

X-MS-Exchange-CrossTenant-AuthSource: LN2PEPF000100CA.GBRP265.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: LO6P123MB6597

X-Spam_score: 30.8

X-Spam_score_int: 308

X-Spam_bar: ++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Beneficiary, We wish to inform you that a power of attorney

was forwarded to our office this morning, by two gentlemen regarding your

unclaimed fund of $5.5 Million Dollar. One of them is an American citizen

named [...]



Content analysis details: (30.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.95.114.156 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[40.95.114.156 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.95.114.156 listed in wl.mailspike.net]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=GBR01-CWX-obe.outbound.protection.outlook.com;ip=40.95.114.156;r=doctor.nl2k.ab.ca]

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam

0.0 NSL_RCVD_FROM_USER Received from User

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[williamtash1949(at)gmail.com]

2.7 UNCLAIMED_MONEY BODY: People just leave money laying around

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

2.0 PDS_HELO_SPF_FAIL High profile HELO that fails SPF

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 T_SCC_BODY_TEXT_LINE No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.2 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

1.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Dead Or ALIVE....4s













Dear Beneficiary,




 




We wish to inform you that a power of attorney was forwarded to our office this morning, by two gentlemen regarding your unclaimed fund of $5.5 Million Dollar. One of them is an American citizen named Mr. Robert Porter and the other is Mr. Wilhelm Berg a Swedish citizen.




 




The document claims these gentlemen to be your authorized representatives, and the power of attorney states that you are already deceased. It further states that your death was due to lung cancer, with your date of death being March 27th, 2019.




 




They have now submitted a new account to replace the receiving account that was in the original claim of funds. These funds have remained unclaimed for quite some time and the need for resolution is pressing.




 




Below is the new account they have submitted.




 




Account Name: Robert Porter /Wilhelm Berg




Account: 5007-29 438 66




IBAN-nr: SE4150000000050072943866




Bic-kod: ESSESESS




Skandinaviska Enskilda Banken. (SEB :-)




SWEDEN.




 




In the event that you are in fact still alive, we ask that you confirm your existence by responding to this email. You are to view this as a matter requiring immediately attention and response. We have 48 hours monitoring of all activities within Federal Reserve Bank.




 




We have contacted the bank in the Sweden asking them to wait for further directives from Federal Reserve Bank, prior to authorizing any withdrawals in any form. Our request is based entirely on our attempt to verify that you are in fact deceased, before money is wrongly disbursed.




 




Finally, we forewarn you that if we do not hear back from you shortly, we will have to assume that you are in fact deceased and Federal Reserve Bank will proceed with release funds to the above newly submitted account.




 




Sincerely,




 




Lorie K. Logan (frbdallasdistrict@outlook.com)




Federal Reserve System2200 N Pearl St, Dallas, TX 75201, USA




 




 




Nigerian Spam from Microsoft outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 24 Mar 2024 05:43:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roMEz-00000000Ian-2DQS

for dave@doctor.nl2k.ab.ca;

Sun, 24 Mar 2024 05:42:17 -0600

Resent-From: The Doctor

Resent-Date: Sun, 24 Mar 2024 05:42:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lo4gbr01rlhn2167.outbound.protection.outlook.com ([40.95.115.167]:19175 helo=GBR01-LO4-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roLbI-00000000FGU-10SR

for doctor@nl2k.ab.ca;

Sun, 24 Mar 2024 05:01:20 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=GB+vzMQxplBPkTRFSMhwYnauhUN3RGrnw8VmSBbhGx4EJuLp3/L0P9ZhL8glGzB5Q5mGZS6G9FfWfsxEoMCzS7T8YpA0XmGrivhbpFh4PyHc4m8g7V5qbVjP/a12LNG0gB/IS3E4OKBPWYNuHs2+O9/m85qj/w+397yll/MeaROwbAJkjgEwDeZV4ErgKYqyg5JrmvzAqnyj4Gn7tRP0wgBo++RrlJrw7fEwttdPWWqRIBikcnJo8SFDT+Cke6lHzjp3wKIQ6Eyxd/39Vr/AQARnEsdbOrH2/X6grSdN205lF/g8JcGOzOxOrPWHZJrdSZe3RSi+DKqL8XVBUMFB+w==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=KOYlofxoeno+mXY12bZn7zRugj7bRZ3E5xvL3LShNPo=;

b=G5YA3RK0Wcfc4wimM4YizdULR0dmVpqbKQGAgP3ce0l5EsAh07XAy12Q3aBtakDXex1UdSoQdRHVZTr/ZMSx4N1ngtfPeb5xMnQPHit5fb9VY+xP/8vng2Wjh3r0Yayk9dBdkXz96NxcGWoLe4umFKK33OH7XfV3Eswg6NqUn6TbZJK4kDqg+khfRjVAyIGHIB0mdsPeVKSXzQk948/jlWDZxKnyxdRIDM43kXHV9MLhB640ESM1gIpIvveoNVCYATg54GndfYeFO6hGlWweKMdX9sIlxlM4jP+HunzzuKR/bSXVmwqoTJ/ZYNrn7nG7fUVoFhIoEybKsG+jrBhK9g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is

193.39.172.206) smtp.rcpttodomain=banque-france.fr smtp.mailfrom=office.net;

dmarc=none action=none header.from=office.net; dkim=none (message not

signed); arc=none (0)

Received: from LO2P265CA0499.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:13b::6)

by LO0P123MB3898.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:13f::9) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.31; Sun, 24 Mar

2024 10:59:14 +0000

Received: from LO1PEPF000022FF.GBRP265.PROD.OUTLOOK.COM

(2603:10a6:600:13b:cafe::fc) by LO2P265CA0499.outlook.office365.com

(2603:10a6:600:13b::6) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.13 via Frontend

Transport; Sun, 24 Mar 2024 10:59:14 +0000

X-MS-Exchange-Authentication-Results: spf=none (sender IP is 193.39.172.206)

smtp.mailfrom=office.net; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=office.net;

Received-SPF: None (protection.outlook.com: office.net does not designate

permitted sender hosts)

Received: from ebyst.gwynedd.llyw.cymru (193.39.172.206) by

LO1PEPF000022FF.mail.protection.outlook.com (10.167.240.23) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.7409.10 via Frontend Transport; Sun, 24 Mar 2024 10:59:14 +0000

Received: from HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3) by

HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.2.1258.28; Sun, 24 Mar 2024 10:59:13 +0000

Received: from User (172.18.4.86) by HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3)

with Microsoft SMTP Server id 15.2.1258.28 via Frontend Transport; Sun, 24

Mar 2024 10:59:12 +0000

Reply-To:

From: Federal Reserve Bank

Subject: Dead Or ALIVE....4s

Date: Sun, 24 Mar 2024 03:59:11 -0700

MIME-Version: 1.0

Content-Type: text/html; charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID:

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: LO1PEPF000022FF:EE_|LO0P123MB3898:EE_

X-MS-Office365-Filtering-Correlation-Id: a1b3f2eb-b1d9-48c9-8cf9-08dc4bf17173

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 1

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?windows-1251?Q?29cBUL7tUnQLaPygG4z81RRBITjvBOvdEKpg1AMc92tTPlaTmXXkfmiL?=

=?windows-1251?Q?eZg8kmL4/Owz87s2Pt7vat4oketmvH5H8IB8d78cQm82Oj7b9p/cuaGa?=

=?windows-1251?Q?KSQWVoWsFNqxuBcHDTyykbdb9oqR5UD/DTu8Ah8BZd3SDEhx3gHd7sxk?=

=?windows-1251?Q?NKVPWS3ijwl5g3hxgLnI5JMGRZsDRS6T+NxO3wUQMPo5KdUtcTaM4Lst?=

=?windows-1251?Q?mNcPHv8n+EGD/cZVGN6SWNLyiBzQeb9DMdBcO/7ZJQuMvM3MLFpKkRg3?=

=?windows-1251?Q?JtELPODmE4Ye9Rn0A5xFge8nIv7/YemTnqw0A8tUM8591yX+AGNits2f?=

=?windows-1251?Q?j7W93fChV+8vEzGFyB/CjWW23ZxD3A+WtfvYtx2DeS5bvYVUpCv0fLyC?=

=?windows-1251?Q?6Kul0RVztiLX0Zag+3SbmrtVeVxodQL8O9hYn7AF971EArBJ7V1fH+zG?=

=?windows-1251?Q?tiLDdqeK+7OrJfmPd3YIn07buyN6ksAu3ZKmlwvxx01mArQ/kmDIc0gC?=

=?windows-1251?Q?xEfgZ6RGQOczrWp0o+kmyHsaxASQwK5z3/rC2lQsPVvQLbQsHYU4XWRr?=

=?windows-1251?Q?NgtIXlU4QO0uOvGV7zz48OPrpQB7yBECxVaPlbqhAWFDvaUnUwVFiP46?=

=?windows-1251?Q?6wU6pRozNck2EXctnX4gSg6zldY0oGKq9FMFac2pzUzqELy2YvX8CLs6?=

=?windows-1251?Q?i+gvx7Gk82o7t7cfkqQTClfHQtv+k/1VvaCG7Hxo1j5vcZlvtw1cB3q+?=

=?windows-1251?Q?bApabNCPg4PCG+x9xsOX886UnoA3yv4iDGBnaEvsMBT3JX2Lu/+y8Nco?=

=?windows-1251?Q?WpaCRI5dl5ryIujJ/NTW6vyvvd2gZj2VHT8K7pIFZUm1HBC/CnlWUF1z?=

=?windows-1251?Q?VMf9IrYK0nvTdtcVdLLfpaTlqlWkCs7omWd+G7ScHlWdogwFgvs+GZvm?=

=?windows-1251?Q?L0bGrgfRmCsoZ2x7nLPqVLyCeoMzhykcNgOMFPII49UVuMbCg+f/LhLk?=

=?windows-1251?Q?m4FnygebgYJb87cEcfXoGnJLBRDZvP4GCNDw1g6KJS+UdiQDuJiLIdi5?=

=?windows-1251?Q?X/dVNBjJoaeBjHA3xoLCIgrv4Vm+Q/lPII3DWJ/JT2t/AdbReNjZv+E6?=

=?windows-1251?Q?N3snaKyp/Di85IGuLZ5duiBSHjAqDi1ba50LSJmbU1WZvxvmwu6xDB9X?=

=?windows-1251?Q?XyceEN4cyX14F1QKnEkcK2xFlJmBtZjH/x/cBdtN2szhoeT9UgbHIzDX?=

=?windows-1251?Q?H4j8CD6qA9MZJ3tEel8mhpsQiLCQ2w6TlQbHTOoMcBcwS+E+2tS6CRqO?=

=?windows-1251?Q?VvmUOg=3D=3D?=

X-Forefront-Antispam-Report:

CIP:193.39.172.206;CTRY:GB;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:ebyst.gwynedd.llyw.cymru;PTR:systemau.gwynedd.llyw.cymru;CAT:OSPM;SFS:(13230031)(61400799018)(48200799009)(376005)(82310400014)(35950700004)(32650700005)(7416005)(2700400011);DIR:OUT;SFP:1023;

X-OriginatorOrg: cyngorgwynedd.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Mar 2024 10:59:14.1429

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: a1b3f2eb-b1d9-48c9-8cf9-08dc4bf17173

X-MS-Exchange-CrossTenant-Id: 99841289-67fd-4e8e-b813-12b22f782ece

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=99841289-67fd-4e8e-b813-12b22f782ece;Ip=[193.39.172.206];Helo=[ebyst.gwynedd.llyw.cymru]

X-MS-Exchange-CrossTenant-AuthSource: LO1PEPF000022FF.GBRP265.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: LO0P123MB3898

X-Spam_score: 30.8

X-Spam_score_int: 308

X-Spam_bar: ++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Beneficiary, We wish to inform you that a power of attorney

was forwarded to our office this morning, by two gentlemen regarding your

unclaimed fund of $5.5 Million Dollar. One of them is an American citizen

named [...]



Content analysis details: (30.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.95.115.167 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.95.115.167 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[40.95.115.167 listed in bl.score.senderscore.com]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=GBR01-LO4-obe.outbound.protection.outlook.com;ip=40.95.115.167;r=doctor.nl2k.ab.ca]

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam

0.0 NSL_RCVD_FROM_USER Received from User

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[williamtash1949(at)gmail.com]

2.7 UNCLAIMED_MONEY BODY: People just leave money laying around

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 LOTS_OF_MONEY Huge... sums of money

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

2.0 PDS_HELO_SPF_FAIL High profile HELO that fails SPF

1.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.2 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Dead Or ALIVE....4s













Dear Beneficiary,




 




We wish to inform you that a power of attorney was forwarded to our office this morning, by two gentlemen regarding your unclaimed fund of $5.5 Million Dollar. One of them is an American citizen named Mr. Robert Porter and the other is Mr. Wilhelm Berg a Swedish citizen.




 




The document claims these gentlemen to be your authorized representatives, and the power of attorney states that you are already deceased. It further states that your death was due to lung cancer, with your date of death being March 27th, 2019.




 




They have now submitted a new account to replace the receiving account that was in the original claim of funds. These funds have remained unclaimed for quite some time and the need for resolution is pressing.




 




Below is the new account they have submitted.




 




Account Name: Robert Porter /Wilhelm Berg




Account: 5007-29 438 66




IBAN-nr: SE4150000000050072943866




Bic-kod: ESSESESS




Skandinaviska Enskilda Banken. (SEB :-)




SWEDEN.




 




In the event that you are in fact still alive, we ask that you confirm your existence by responding to this email. You are to view this as a matter requiring immediately attention and response. We have 48 hours monitoring of all activities within Federal Reserve Bank.




 




We have contacted the bank in the Sweden asking them to wait for further directives from Federal Reserve Bank, prior to authorizing any withdrawals in any form. Our request is based entirely on our attempt to verify that you are in fact deceased, before money is wrongly disbursed.




 




Finally, we forewarn you that if we do not hear back from you shortly, we will have to assume that you are in fact deceased and Federal Reserve Bank will proceed with release funds to the above newly submitted account.




 




Sincerely,




 




Lorie K. Logan (frbdallasdistrict@outlook.com)




Federal Reserve System2200 N Pearl St, Dallas, TX 75201, USA




 




 




Nigerian Spam from Microsoft outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 24 Mar 2024 05:43:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roMEu-00000000IaE-0wyE

for dave@doctor.nl2k.ab.ca;

Sun, 24 Mar 2024 05:42:12 -0600

Resent-From: The Doctor

Resent-Date: Sun, 24 Mar 2024 05:42:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lo4gbr01rlhn2184.outbound.protection.outlook.com ([40.95.115.184]:52807 helo=GBR01-LO4-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1roLbI-00000000FGW-35Ss

for doctor@doctor.nl2k.ab.ca;

Sun, 24 Mar 2024 05:01:20 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=GB+vzMQxplBPkTRFSMhwYnauhUN3RGrnw8VmSBbhGx4EJuLp3/L0P9ZhL8glGzB5Q5mGZS6G9FfWfsxEoMCzS7T8YpA0XmGrivhbpFh4PyHc4m8g7V5qbVjP/a12LNG0gB/IS3E4OKBPWYNuHs2+O9/m85qj/w+397yll/MeaROwbAJkjgEwDeZV4ErgKYqyg5JrmvzAqnyj4Gn7tRP0wgBo++RrlJrw7fEwttdPWWqRIBikcnJo8SFDT+Cke6lHzjp3wKIQ6Eyxd/39Vr/AQARnEsdbOrH2/X6grSdN205lF/g8JcGOzOxOrPWHZJrdSZe3RSi+DKqL8XVBUMFB+w==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=KOYlofxoeno+mXY12bZn7zRugj7bRZ3E5xvL3LShNPo=;

b=G5YA3RK0Wcfc4wimM4YizdULR0dmVpqbKQGAgP3ce0l5EsAh07XAy12Q3aBtakDXex1UdSoQdRHVZTr/ZMSx4N1ngtfPeb5xMnQPHit5fb9VY+xP/8vng2Wjh3r0Yayk9dBdkXz96NxcGWoLe4umFKK33OH7XfV3Eswg6NqUn6TbZJK4kDqg+khfRjVAyIGHIB0mdsPeVKSXzQk948/jlWDZxKnyxdRIDM43kXHV9MLhB640ESM1gIpIvveoNVCYATg54GndfYeFO6hGlWweKMdX9sIlxlM4jP+HunzzuKR/bSXVmwqoTJ/ZYNrn7nG7fUVoFhIoEybKsG+jrBhK9g==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is

193.39.172.206) smtp.rcpttodomain=banque-france.fr smtp.mailfrom=office.net;

dmarc=none action=none header.from=office.net; dkim=none (message not

signed); arc=none (0)

Received: from LO2P265CA0499.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:13b::6)

by LO0P123MB3898.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:13f::9) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.31; Sun, 24 Mar

2024 10:59:14 +0000

Received: from LO1PEPF000022FF.GBRP265.PROD.OUTLOOK.COM

(2603:10a6:600:13b:cafe::fc) by LO2P265CA0499.outlook.office365.com

(2603:10a6:600:13b::6) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7409.13 via Frontend

Transport; Sun, 24 Mar 2024 10:59:14 +0000

X-MS-Exchange-Authentication-Results: spf=none (sender IP is 193.39.172.206)

smtp.mailfrom=office.net; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=office.net;

Received-SPF: None (protection.outlook.com: office.net does not designate

permitted sender hosts)

Received: from ebyst.gwynedd.llyw.cymru (193.39.172.206) by

LO1PEPF000022FF.mail.protection.outlook.com (10.167.240.23) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.7409.10 via Frontend Transport; Sun, 24 Mar 2024 10:59:14 +0000

Received: from HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3) by

HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.2.1258.28; Sun, 24 Mar 2024 10:59:13 +0000

Received: from User (172.18.4.86) by HQ-EX19-1.gwynedd.rhwydwaith (172.18.4.3)

with Microsoft SMTP Server id 15.2.1258.28 via Frontend Transport; Sun, 24

Mar 2024 10:59:12 +0000

Reply-To:

From: Federal Reserve Bank

Subject: Dead Or ALIVE....4s

Date: Sun, 24 Mar 2024 03:59:11 -0700

MIME-Version: 1.0

Content-Type: text/html; charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID:

To: Undisclosed recipients:;

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: LO1PEPF000022FF:EE_|LO0P123MB3898:EE_

X-MS-Office365-Filtering-Correlation-Id: a1b3f2eb-b1d9-48c9-8cf9-08dc4bf17173

X-MS-Exchange-SenderADCheck: 2

X-MS-Exchange-AntiSpam-Relay: 1

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?windows-1251?Q?29cBUL7tUnQLaPygG4z81RRBITjvBOvdEKpg1AMc92tTPlaTmXXkfmiL?=

=?windows-1251?Q?eZg8kmL4/Owz87s2Pt7vat4oketmvH5H8IB8d78cQm82Oj7b9p/cuaGa?=

=?windows-1251?Q?KSQWVoWsFNqxuBcHDTyykbdb9oqR5UD/DTu8Ah8BZd3SDEhx3gHd7sxk?=

=?windows-1251?Q?NKVPWS3ijwl5g3hxgLnI5JMGRZsDRS6T+NxO3wUQMPo5KdUtcTaM4Lst?=

=?windows-1251?Q?mNcPHv8n+EGD/cZVGN6SWNLyiBzQeb9DMdBcO/7ZJQuMvM3MLFpKkRg3?=

=?windows-1251?Q?JtELPODmE4Ye9Rn0A5xFge8nIv7/YemTnqw0A8tUM8591yX+AGNits2f?=

=?windows-1251?Q?j7W93fChV+8vEzGFyB/CjWW23ZxD3A+WtfvYtx2DeS5bvYVUpCv0fLyC?=

=?windows-1251?Q?6Kul0RVztiLX0Zag+3SbmrtVeVxodQL8O9hYn7AF971EArBJ7V1fH+zG?=

=?windows-1251?Q?tiLDdqeK+7OrJfmPd3YIn07buyN6ksAu3ZKmlwvxx01mArQ/kmDIc0gC?=

=?windows-1251?Q?xEfgZ6RGQOczrWp0o+kmyHsaxASQwK5z3/rC2lQsPVvQLbQsHYU4XWRr?=

=?windows-1251?Q?NgtIXlU4QO0uOvGV7zz48OPrpQB7yBECxVaPlbqhAWFDvaUnUwVFiP46?=

=?windows-1251?Q?6wU6pRozNck2EXctnX4gSg6zldY0oGKq9FMFac2pzUzqELy2YvX8CLs6?=

=?windows-1251?Q?i+gvx7Gk82o7t7cfkqQTClfHQtv+k/1VvaCG7Hxo1j5vcZlvtw1cB3q+?=

=?windows-1251?Q?bApabNCPg4PCG+x9xsOX886UnoA3yv4iDGBnaEvsMBT3JX2Lu/+y8Nco?=

=?windows-1251?Q?WpaCRI5dl5ryIujJ/NTW6vyvvd2gZj2VHT8K7pIFZUm1HBC/CnlWUF1z?=

=?windows-1251?Q?VMf9IrYK0nvTdtcVdLLfpaTlqlWkCs7omWd+G7ScHlWdogwFgvs+GZvm?=

=?windows-1251?Q?L0bGrgfRmCsoZ2x7nLPqVLyCeoMzhykcNgOMFPII49UVuMbCg+f/LhLk?=

=?windows-1251?Q?m4FnygebgYJb87cEcfXoGnJLBRDZvP4GCNDw1g6KJS+UdiQDuJiLIdi5?=

=?windows-1251?Q?X/dVNBjJoaeBjHA3xoLCIgrv4Vm+Q/lPII3DWJ/JT2t/AdbReNjZv+E6?=

=?windows-1251?Q?N3snaKyp/Di85IGuLZ5duiBSHjAqDi1ba50LSJmbU1WZvxvmwu6xDB9X?=

=?windows-1251?Q?XyceEN4cyX14F1QKnEkcK2xFlJmBtZjH/x/cBdtN2szhoeT9UgbHIzDX?=

=?windows-1251?Q?H4j8CD6qA9MZJ3tEel8mhpsQiLCQ2w6TlQbHTOoMcBcwS+E+2tS6CRqO?=

=?windows-1251?Q?VvmUOg=3D=3D?=

X-Forefront-Antispam-Report:

CIP:193.39.172.206;CTRY:GB;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:ebyst.gwynedd.llyw.cymru;PTR:systemau.gwynedd.llyw.cymru;CAT:OSPM;SFS:(13230031)(61400799018)(48200799009)(376005)(82310400014)(35950700004)(32650700005)(7416005)(2700400011);DIR:OUT;SFP:1023;

X-OriginatorOrg: cyngorgwynedd.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Mar 2024 10:59:14.1429

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: a1b3f2eb-b1d9-48c9-8cf9-08dc4bf17173

X-MS-Exchange-CrossTenant-Id: 99841289-67fd-4e8e-b813-12b22f782ece

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=99841289-67fd-4e8e-b813-12b22f782ece;Ip=[193.39.172.206];Helo=[ebyst.gwynedd.llyw.cymru]

X-MS-Exchange-CrossTenant-AuthSource: LO1PEPF000022FF.GBRP265.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: LO0P123MB3898

X-Spam_score: 30.8

X-Spam_score_int: 308

X-Spam_bar: ++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Beneficiary, We wish to inform you that a power of attorney

was forwarded to our office this morning, by two gentlemen regarding your

unclaimed fund of $5.5 Million Dollar. One of them is an American citizen

named [...]



Content analysis details: (30.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.95.115.184 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.95.115.184 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[40.95.115.184 listed in bl.score.senderscore.com]

0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=GBR01-LO4-obe.outbound.protection.outlook.com;ip=40.95.115.184;r=doctor.nl2k.ab.ca]

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam

0.0 NSL_RCVD_FROM_USER Received from User

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[williamtash1949(at)gmail.com]

2.7 UNCLAIMED_MONEY BODY: People just leave money laying around

3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait

0.0 LOTS_OF_MONEY Huge... sums of money

0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

2.0 PDS_HELO_SPF_FAIL High profile HELO that fails SPF

0.6 FSL_NEW_HELO_USER Spam's using Helo and User

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.2 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

1.9 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Dead Or ALIVE....4s













Dear Beneficiary,




 




We wish to inform you that a power of attorney was forwarded to our office this morning, by two gentlemen regarding your unclaimed fund of $5.5 Million Dollar. One of them is an American citizen named Mr. Robert Porter and the other is Mr. Wilhelm Berg a Swedish citizen.




 




The document claims these gentlemen to be your authorized representatives, and the power of attorney states that you are already deceased. It further states that your death was due to lung cancer, with your date of death being March 27th, 2019.




 




They have now submitted a new account to replace the receiving account that was in the original claim of funds. These funds have remained unclaimed for quite some time and the need for resolution is pressing.




 




Below is the new account they have submitted.




 




Account Name: Robert Porter /Wilhelm Berg




Account: 5007-29 438 66




IBAN-nr: SE4150000000050072943866




Bic-kod: ESSESESS




Skandinaviska Enskilda Banken. (SEB :-)




SWEDEN.




 




In the event that you are in fact still alive, we ask that you confirm your existence by responding to this email. You are to view this as a matter requiring immediately attention and response. We have 48 hours monitoring of all activities within Federal Reserve Bank.




 




We have contacted the bank in the Sweden asking them to wait for further directives from Federal Reserve Bank, prior to authorizing any withdrawals in any form. Our request is based entirely on our attempt to verify that you are in fact deceased, before money is wrongly disbursed.




 




Finally, we forewarn you that if we do not hear back from you shortly, we will have to assume that you are in fact deceased and Federal Reserve Bank will proceed with release funds to the above newly submitted account.




 




Sincerely,




 




Lorie K. Logan (frbdallasdistrict@outlook.com)




Federal Reserve System2200 N Pearl St, Dallas, TX 75201, USA