NetKnow Corporate Blog

Web/SEO/App spam from Microsoft Outlook

Posted by Dave Yadallee on Saturday, March 15. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 15 Mar 2025 11:19:00 -0600

Received: from mail-sg2apc01olkn2065.outbound.protection.outlook.com ([40.92.53.65]:13632 helo=APC01-SG2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.1 (FreeBSD))

(envelope-from )

id 1ttV9m-000000004Hy-2bEf

for dave@doctor.nl2k.ab.ca;

Sat, 15 Mar 2025 11:18:53 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=N/SGcEFNhTot0oLSg17iipbw4Djx8Qrw8Wuk6G1zwj9FM8jci5ZxeeC6yWCPFUvBMUbBZM4dYqdJ/pZ2E0TWDpztxNWF5Zl9MlAURTeAiOTsf0+o1KnYQEss4jcxUZUMKfwwCBpCsd8GoykekvMToWzxL3408b+0toYr5fLjQ46kKjkAjHQvVkD0bkUMH6FfLGgeiGpYv2UfcDv3F5dJIq0HuDVqSDI8xHOcZ7LXY/uSMmjCVr0kcgCXQcsZ+/V9zVM5r+gJ4zTJaEeey3K9x8kP5lQr9hlw5QkjA8zL/ujKwuhTc5mncAavHk0DGsNjhIj8NwUpi4tdblGkITLRpQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=fFgW80AKQJ3sJBKRRZbAJIRgMYV+/cpBNkXx2YQ40q8=;

b=kVfzXiqQtQOPDKG6sucnF/UokCou0u0MujdujP1bHHyiavDImXmWRI9nSaheYIEEPMyrsq87+S7figOJkFlhdB9HyaD4T5QOd36ockAEdTmWWxfU9YTeM0LO1Mym7pm6XUdwY7J5znbDFQzfl8duLoy7zbh4iqsXi/H7MERUpNoNQOtlUOOi2j7Sd6vYcZ4nS2d6RAI+RW+F16E18IzUDUVKv/+ZKYPAUWes1uanR2nmFajGux26Ak7AOmNKskCamsTc3QPGhfqCJhJ0/59LXYfsHvBfbZVccTQNiC069LVLejuanoW2LEdMRwRkxZSnvz6+yRVDxAEJZguJZEM1KQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=fFgW80AKQJ3sJBKRRZbAJIRgMYV+/cpBNkXx2YQ40q8=;

b=jDgMTJAVY/FWvS91JYtb7pVoSoaiZSBPzdZXrZ/Q0quWVT7VROquuuWo/8jOtcWxavh3cEY2XGo5fTqJ2RqIgkwzsAls1JHw91rZcKglepvLiaaXxwhPisNojy5SlGtc7YYAMVyceNACqkCY7K00x9tf98eBcukPxC6KiL270LSg6LM1+FjxT1NFPDBfeNjIglnG4RNboRYM7bq15hj4zuaxaXPI5M5v1G2Z13nlKgImKU1kXOE7szzA1iegOJkxF1kFXJo8z+QfdqXwLfcRyoV3sAR+7ECueuYe/E6isq/P0YU6XNnzgMTL2qUDQPZ8vUjCh13gWHwEB0KPJhPd8w==

Received: from JH0PR04MB8492.apcprd04.prod.outlook.com (2603:1096:990:86::7)

by TY0PR04MB6495.apcprd04.prod.outlook.com (2603:1096:400:272::7) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8511.30; Sat, 15 Mar

2025 17:16:03 +0000

Received: from JH0PR04MB8492.apcprd04.prod.outlook.com

([fe80::9202:80dd:1356:3af4]) by JH0PR04MB8492.apcprd04.prod.outlook.com

([fe80::9202:80dd:1356:3af4%3]) with mapi id 15.20.8534.024; Sat, 15 Mar 2025

17:16:02 +0000

From: Mae Nolan

To: Mae Nolan

Subject: Re: ready report....#@

Thread-Topic: ready report....#@

Thread-Index: AQHblc09FfZLmha53ECYCcesWfX3Zw==

Date: Sat, 15 Mar 2025 17:16:01 +0000

Message-ID:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: JH0PR04MB8492:EE_|TY0PR04MB6495:EE_

x-ms-office365-filtering-correlation-id: f7ee6160-8259-417a-a460-08dd63e50faf

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799006|461199028|8062599003|8060799006|15030799003|19110799003|3412199025|440099028|102099032|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?vCOKzuzERYx3+7APpu5GWqS6ldzSvxtuw4IpVKLDSYcnfq8320U+twgr?=

=?Windows-1252?Q?oMOGTE4PL7/4XrkwHsG1ckk+K4xkvocUKCjE0+P7DiEbRsjsOuEin7Oe?=

=?Windows-1252?Q?2oddxTOqwu+icIlbElU7rGigRqkH5q/xENIkviE+84bRF871mQvVQnIz?=

=?Windows-1252?Q?n7sA4pfBAg5T8FjzmnRUZAzjr9IoET0rS0PWNgsEmUVqRG0fpXIEue59?=

=?Windows-1252?Q?z9I3glsOR1igQX19w8PBFkAokztcHoXWGvhSFJu4J4cl8f4SNNbkxw7K?=

=?Windows-1252?Q?+yiroQDiGIRHgr9oOdDFBtQpC5er1GHugSFwHSXLHimWTp4l9KZMl9h/?=

=?Windows-1252?Q?Uq4lVbd2jfFSzxtVcpW2UZ5xhyZH6Yauum9uTw25W7lP1MWPGY9WR4nh?=

=?Windows-1252?Q?zNRHGZYU/DQUcPhHrrRnxhWlL9mu28MP6Sbsm3Z9GjphEa4zym4s481K?=

=?Windows-1252?Q?AWE3DeYXM9PANQDp66uao7lnTtZ/TeiUfZgw4JCKJr3wvwVyNMouRhG0?=

=?Windows-1252?Q?mP6RWlZeUrtIDZdtQ5dFCEoFqvNbdyqoyRtJmLnRN+GNwCcZGGzhuwvH?=

=?Windows-1252?Q?5yR62e5K08Wp8yHe2EhjAPxZJurNQhlH7HJ0ocdFzwTtSq+4P6TpiMMP?=

=?Windows-1252?Q?LxReNo1N3SHgROcigFtzPCABI0qf3kj7diJFcaH0DkcEBb4gDSklM7aC?=

=?Windows-1252?Q?+nuyt5oJrKo19MBsXvo76sZzRWS4XqCjnNiB6oK0ZSvdiN4f8AN8S4t6?=

=?Windows-1252?Q?L3gZ6X+EMaEW9CM/7UZFnd0ESPkmJVvWijMHgqsEbOo0ItwUtnYownKz?=

=?Windows-1252?Q?GqnZ4D/kUnzlWtz3YMj4YLSXtXO+hzKkwP9llXGmBFLP+hednQmhhec8?=

=?Windows-1252?Q?eDUvb1mS7qjxTrJ+CCTZCTqQpwM7IOYjvg6lqJhHw2xEw6Y5KQsz4gdD?=

=?Windows-1252?Q?bKZT7KzA4tt3h8rZLL6F8QaA1niCR0GXi9iwuRqvzJq6EboIIqfLHYvl?=

=?Windows-1252?Q?QMJzUU0zRCD6/dcXmv8Z0eyJ18ZXx1XIgti2GFnPq+XI/d40AKu4gSyR?=

=?Windows-1252?Q?IDV5PYpDdWxopwLPnNwffXl1whlMemjK49cUK4mR4ZkphYesaHRNHOfG?=

=?Windows-1252?Q?nkxgoct6hMnP7nSVMLO/aGQEeXXaS/j/0vnQXCUxV33eHvi3GshAXbiB?=

=?Windows-1252?Q?XJSvP0jJiVovUmBjR9q88Azbb1+45X4EmKMIFegCtm3z+2SyX+3BhQ?=

=?Windows-1252?Q?=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?S8QgWGjJMl2yU0NtbRTnczw0/7NWIbE9iYMZymucDJ2T6zUSDON1DHhL?=

=?Windows-1252?Q?xGfNbzUizdLW23UypSpE6KDYfYJh+JBlKqsRDJples8US4relPt8DG62?=

=?Windows-1252?Q?8cEmOp9UC0KLTmG3YnTzUSDrsFUq21HJzkwXDvPbZatH/zCA1BnTbvcs?=

=?Windows-1252?Q?Jc7+XXC6xKwtA03gdfn5k6z7Azfv9diM4BhTpO9wTf2TV/3lFVHQn1qY?=

=?Windows-1252?Q?9u4H+tK0ZvXIKoDnGaOBOK2Y8CZ1FAa5zF0CU4AFHHi/IrEedMdGuEXQ?=

=?Windows-1252?Q?9AqguCB+lef/TypnDvZtx13HrDGiKt2ItyotuzfC6E78YwJZg7mYfJ3g?=

=?Windows-1252?Q?BQxQRjUGKzqVqBEvED9AVtssZTToDwTsT7DSdFF0/sMOe7XNAXwgafNB?=

=?Windows-1252?Q?2i7/s3iSyA+dbXNDorGqmCBIuPmvQ2wPfdKi9QhDPhAXnh+tbI1mow+y?=

=?Windows-1252?Q?h7UDJc5uajL9Ko5NeqBDdogiTCBBhZlOYh8EnEaF+WXPSrrkYV1bX2vm?=

=?Windows-1252?Q?gWGlbwi6Lwwz++DWDgTa6TGseuCVq7yTasfjLwc5Ep+91LmxNz07p00F?=

=?Windows-1252?Q?7AZvTKK5JMdU8SyKTpbN5w1Ef5q6ZoYyZAT269S40HAeZ0taoXOlsro6?=

=?Windows-1252?Q?pdZddson6jxA/r+md0FPvURLA9JVhVQvgzXxCnQBIsuN99AJkT0zWAHo?=

=?Windows-1252?Q?yzFJK+2diFAKDMaVVfXhQmfx+VbJGku/kDTTA4QQpOcDYDE+2E7gAFBK?=

=?Windows-1252?Q?aNXIxhyR366YYgx6hLFtlVV6hWNyM0nojCOPGfShHOyleLCPt/dmDToA?=

=?Windows-1252?Q?BOJzpUdS+PiWcK7ltox65GQ0Q/o0soWr1h+z14AHD+5TTS9OdCF4+7Xs?=

=?Windows-1252?Q?dnEyygAHVxz94foHUJ3BkXtOnNTK27e7iv4XUUxtxvMHtbFjeE3GrhIx?=

=?Windows-1252?Q?EL2FDkXaocpG0cEZKaeG0X/E68o7LTuMo508D9gPCg9XKlYxicIUuWO7?=

=?Windows-1252?Q?ENHZSyO1zsIuZCFHhHaCAX+hEJ/wbDl582FebsZGmKifU0+S4rTOKs6I?=

=?Windows-1252?Q?Z07tImZntZq8ueyte77BFo0D0416s4UDVYyGKpGFuU2CtlhZQTMlM7Ll?=

=?Windows-1252?Q?AABJyLqerlpyR2wWi+kuDeMzwCW8aNXfAQPVtnztOfXOAZd88SidrvUH?=

=?Windows-1252?Q?CHcYPesZbxdeiwNd10eE2MJyy31M85ay+WRXK0SsJM5J4hfPUyO7aOQZ?=

=?Windows-1252?Q?jPuTuVIegl5WEP+lr7oqLyoYCz7s/PdZ5MV9wh8zwGKcqCiVLVW2JFvJ?=

=?Windows-1252?Q?KHeTN3HH2gGPJDt1klIhgfjnp5dyD0gqgHWJ5sDBQ4Vq68u5HWADilkV?=

=?Windows-1252?Q?DAyRmhXSdHzQ2uiEFkmsRuLYbY7v6cvLaq0=3D?=

Content-Type: multipart/alternative;

boundary="_000_JH0PR04MB84924B298BCED06D54C2F9C5D7DD2JH0PR04MB8492apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: JH0PR04MB8492.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: f7ee6160-8259-417a-a460-08dd63e50faf

X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Mar 2025 17:16:01.7968

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TY0PR04MB6495

--_000_JH0PR04MB84924B298BCED06D54C2F9C5D7DD2JH0PR04MB8492apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

Hi,

Can i send you Report of those Errors

Thank you

From: Mae Nolan

Sent: Dec 27, 2024 5:51 PM

Subject: Re: can i..$

Hi,

I' was Going your website. i identified some errors on your website and cau=

ses of those errors your website ranking is collapse down.

If Interested may i send you screenshot of those errors and We can also hel=

p improve your site=92s visibility on Google=92s first page.

May I send you SEO proposal & price list?

Regard

--_000_JH0PR04MB84924B298BCED06D54C2F9C5D7DD2JH0PR04MB8492apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

252">

margin: 0px; font-family: "Trebuchet MS", Trebuchet, sans-serif; =

font-size: 12pt; color: rgb(0, 0, 0);">

Hi,

margin: 0px; font-family: "Trebuchet MS", Trebuchet, sans-serif; =

font-size: 12pt; color: rgb(0, 0, 0);">

margin: 0px; font-family: "Trebuchet MS", Trebuchet, sans-serif; =

font-size: 12pt; color: rgb(0, 0, 0);">

Can i send you Repor=

t of those Errors

margin: 0px; font-family: "Trebuchet MS", Trebuchet, sans-serif; =

font-size: 12pt; color: rgb(0, 0, 0);">

margin: 0px; font-family: "Trebuchet MS", Trebuchet, sans-serif; =

font-size: 12pt; color: rgb(0, 0, 0);">

Thank you

margin: 0px; font-family: "Trebuchet MS", Trebuchet, sans-serif; =

font-size: 12pt; color: rgb(0, 0, 0);">

margin: 0px; font-family: "Trebuchet MS", Trebuchet, sans-serif; =

font-size: 12pt; color: rgb(0, 0, 0);">

From: Mae Nolan

margin: 0px; font-family: "Trebuchet MS", Trebuchet, sans-serif; =

font-size: 12pt; color: rgb(0, 0, 0);">

Sent: Dec 27, 2024 5:51 PM

margin: 0px; font-family: "Trebuchet MS", Trebuchet, sans-serif; =

font-size: 12pt; color: rgb(0, 0, 0);">

Subject: Re: can i..$

margin: 0px; font-family: "Trebuchet MS", Trebuchet, sans-serif; =

font-size: 12pt; color: rgb(0, 0, 0);">

margin: 0px; font-family: "Trebuchet MS", Trebuchet, sans-serif; =

font-size: 12pt; color: rgb(0, 0, 0);">

Hi,

margin: 0px; font-family: "Trebuchet MS", Trebuchet, sans-serif; =

font-size: 12pt; color: rgb(0, 0, 0);">

margin: 0px; font-family: "Trebuchet MS", Trebuchet, sans-serif; =

font-size: 12pt; color: rgb(0, 0, 0);">

I' was Going your website. i identified some errors on your website and cau=

ses of those errors your website ranking is collapse down.

margin: 0px; font-family: "Trebuchet MS", Trebuchet, sans-serif; =

font-size: 12pt; color: rgb(0, 0, 0);">

margin: 0px; font-family: "Trebuchet MS", Trebuchet, sans-serif; =

font-size: 12pt; color: rgb(0, 0, 0);">

If Interested may i send you screenshot of those errors and We =

can also help improve your site=92s visibility on Google=92s first page.
iv>

margin: 0px; font-family: "Trebuchet MS", Trebuchet, sans-serif; =

font-size: 12pt; color: rgb(0, 0, 0);">

margin: 0px; font-family: "Trebuchet MS", Trebuchet, sans-serif; =

font-size: 12pt; color: rgb(0, 0, 0);">

May I send you SEO proposal & price list?

margin: 0px; font-family: "Trebuchet MS", Trebuchet, sans-serif; =

font-size: 12pt; color: rgb(0, 0, 0);">

margin: 0px; font-family: "Trebuchet MS", Trebuchet, sans-serif; =

font-size: 12pt; color: rgb(0, 0, 0);">

Regard

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

--_000_JH0PR04MB84924B298BCED06D54C2F9C5D7DD2JH0PR04MB8492apcp_--

Desperation spam from Google Gmail

Posted by Dave Yadallee on Saturday, March 15. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 15 Mar 2025 08:23:00 -0600

Received: from mail-pj1-f49.google.com ([209.85.216.49]:52680)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.1 (FreeBSD))

(envelope-from )

id 1ttSPH-00000000O7g-49iu

for dave@doctor.nl2k.ab.ca;

Sat, 15 Mar 2025 08:22:41 -0600

Received: by mail-pj1-f49.google.com with SMTP id 98e67ed59e1d1-3014cb646ecso744901a91.1

for ; Sat, 15 Mar 2025 07:20:36 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1742048431; x=1742653231; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=TYueSnSvhqctwtKHsBgaPJ4B+mm1GZmqvdxwv0Ltpk0=;

b=ibziG5cbMbvnH3deAaMpIxGAMq3KJy4M4o/89fonGixrf4XEpsjwU9bMi/TSJ5QC/M

FPRLjcuidlZuUAcMpCVw0yAu9q0TMfv7JOZ9bPegQOHTqsg5zfBOEUE2oLrS7mn1QG1m

OrvWcvVqGZHeP60hH6iGb6IEWbymEHtNfTmIUq9UURXvi6GxbiHOrnuziQT24HN++Phz

ekicb9V/2hnOC90nRzZ4SkSZV99jbMTSROZl373XfXypKpKJZSbyQi0RCjAv2ecjdZ6Z

lyb7naLD9nRdQxy+2LEZHd4V/mOy21/38WZy7PIgykrYto/ccunUkcT0Woi1pIyl/VDE

ZRsw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1742048431; x=1742653231;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=TYueSnSvhqctwtKHsBgaPJ4B+mm1GZmqvdxwv0Ltpk0=;

b=Y5aPKMKr8BNIq2A2Jopdk8nBgIv1n3yxv1rRuO39kP0Otto9/5frajW6Q1DS0rhINM

61a9cPT7A2umTmFcRLHlRj+R/T2uF1b33eXQEr0BFbbVolLNxZ5tAVhKlRk0cc5jECOS

MbBzvM/dvhucrbBCiScGeX5E9Gg/3uC3ct5+83sRc7RlPbt83rv/GHI/CLd3EjE/60T0

M5IsLlwCaisRlUOzzGNetGxuIVYiVRJRK7K5tegnqi94ofZJUrQCpqxwNUGJCcXWGvh+

25+v0BjDNPDy+fTnVZPfO4aVMdlOp2LxZB8xrrkImqrBXOYACuu4yK1qPzsclBKL7QfO

MdCA==

X-Forwarded-Encrypted: i=1; AJvYcCXCIyhMh1WpJBTPk2bB5a3NeT82tYk9kLkECsA+/4Fw6DcAOK2u3PQvTPDktLnXAnk3FgFz@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YzlTrIBytjkb+lki7H4VFNGZvD1riu0uXdrzdFXmLlULjdVmswl

1ys97YwCQAZCdo09nVleZ167/FQdOeThZrZrOULOmltQMQyhwJQJiPUyNNS8CEz1WBi/UnU7Vai

lrqoW9aj/lKjfeZqIhCLv/ihelg==

X-Gm-Gg: ASbGnctCe1DT9I47VMsL4ohmHgELLi/PaiVU/ekYIdu0im96igoRKr+uuD5kU+9WDFP

MzY0wgyHUlqR5i2Yu31OGJtakTE9k35Ebs0mLs+bUEhWRQ5nuo6arBkmy7P2Bynzi5jEZoUnA7x

PyAsZ/9ez9gRPqlSitspwoGi/v

X-Google-Smtp-Source: AGHT+IE+94UuE5SAxCFBGF/aR8rZdjAj5fddSw3WE7ITmIErbrYTZXFoY9/fFz7Ymz1HcL8QcqSKppAKFO2f5oXAT9s=

X-Received: by 2002:a17:90a:fc4f:b0:2fa:15ab:4de7 with SMTP id

98e67ed59e1d1-30151ce15a6mr9331788a91.12.1742048430993; Sat, 15 Mar 2025

07:20:30 -0700 (PDT)

MIME-Version: 1.0

Reply-To: keenelliana@gmail.com

From: Keen Elliana

Date: Sat, 15 Mar 2025 15:20:19 +0100

X-Gm-Features: AQ5f1JpPWn7VArRxRsPMNO8-zF4wt4PMcGMrweDJ0JXLk9AS8eXWsXqwej49Dhw

Message-ID:

Subject: Good day

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000e936db0630624118"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 10.2

X-Spam_score_int: 102

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: An email was sent to you sometime last week with the expectation

of having a return email from you but to my surprise you never bothered to

reply. Kindly reply for further explanations. Respectfully yours, Keen Elliana.

Content analysis details: (10.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.216.49 listed in will-spam-for-food.eu.org]

[209.85.216.49 listed in will-spam-for-food.eu.org]

[209.85.216.49 listed in will-spam-for-food.eu.org]

[209.85.216.49 listed in will-spam-for-food.eu.org]

[209.85.216.49 listed in will-spam-for-food.eu.org]

[209.85.216.49 listed in will-spam-for-food.eu.org]

[209.85.216.49 listed in will-spam-for-food.eu.org]

[209.85.216.49 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.49 listed in dnsbl.ahbl.org]

[209.85.216.49 listed in dnsbl.ahbl.org]

[209.85.216.49 listed in dnsbl.ahbl.org]

[209.85.216.49 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.49 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.49 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.49 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.49 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.49 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.49 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[hestherthembile777(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[hestherthembile777(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

Subject: {SPAM?} Good day

--000000000000e936db0630624118

Content-Type: text/plain; charset="UTF-8"

An email was sent to you sometime last week with the expectation of

having a return email from you but to my surprise you never bothered to

reply.

Kindly reply for further explanations.

Respectfully yours,

Keen Elliana.

--000000000000e936db0630624118

Content-Type: text/html; charset="UTF-8"

An email was sent to you sometime last week with the expectation of
having a return email from you but to my surprise you never bothered to reply.
Kindly reply for further explanations.

Respectfully yours,
Keen Elliana.

--000000000000e936db0630624118--

French language Canada post phish from sendgrid.net

Posted by Dave Yadallee on Saturday, March 15. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 14 Mar 2025 20:42:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.1 (FreeBSD))

(envelope-from )

id 1ttHSv-000000007mt-0Hqw

for dave@doctor.nl2k.ab.ca;

Fri, 14 Mar 2025 20:41:33 -0600

Resent-From: The Doctor

Resent-Date: Fri, 14 Mar 2025 20:41:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from o11.ptr9104.mytimemail.mytime.com ([149.72.42.66]:12512)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.1 (FreeBSD))

(envelope-from )

id 1ttGDj-00000000Gq2-1yMV

for doctor@doctor.nl2k.ab.ca;

Fri, 14 Mar 2025 19:21:55 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mytime.com;

h=from:subject:mime-version:reply-to:to:content-type:

content-transfer-encoding:cc:content-type:from:subject:to;

s=m1; bh=L/k5jsWZgNRlAFsYMReaw3+hr/Yij2FUVtwXWMz7FtI=;

b=DR+cKWxYsO6jzhPMD0nIfZaVWGA7VUYUexx0nRByi4gYIuX8GXBLEGbTcnNtu6+dyqiN

inY2FrYBwRcvvIBT2aGVnA6Ao6BDH2EI8Vi3lyPix7XMZEkAZ+fhWpJnZ9py93MmNK96mR

nRqeYbK+ZAEy5Ki/t7uTEdtSQoonnLSDQ=

Received: by recvd-54dcf78dc9-nqj2d with SMTP id recvd-54dcf78dc9-nqj2d-1-67D4D5B2-54

2025-03-15 01:19:46.939996672 +0000 UTC m=+3836143.668836354

Received: from mytime.com (unknown)

by geopod-ismtpd-33 (SG) with ESMTP

id Vczk-pO7R768IvEVa3tl7Q

for ;

Sat, 15 Mar 2025 01:19:46.902 +0000 (UTC)

Date: Sat, 15 Mar 2025 01:19:46 +0000 (UTC)

From: Postes livraison

Message-ID: <67d4d5b2bf62a_8f1a36b4481139@2fb265cee77a.mail>

Subject: Confirmez vos =?UTF-8?B?ZMOpdGFpbHM=?= de livraison

Mime-Version: 1.0

Reply-To: pritiranjanmallik7@gmail.com

X-SG-EID:

=?us-ascii?Q?u001=2EBGdfhnQdKWMazd5NZ=2FpGu88TId8PBEhTrsr8E1Wql9J1OR7ZVkellRYdJ?=

=?us-ascii?Q?fsufZWrZaQcZXkUB3ODiYPRBsCgrn2ewkPFBo8=2F?=

=?us-ascii?Q?CNe0AP9KlZkGLhqQLytTjTh1xIu0Ni6YrBCOGtq?=

=?us-ascii?Q?GVA+iBAfj=2FFP98FTnrzf953qr4zAZRFkAv3PJrS?=

=?us-ascii?Q?IOYz7sfGTYKfN7Oe0U4OyGODETSNLkKs+zoI5Fu?=

=?us-ascii?Q?ywVXEQBoDchXSAYAMYPMGGAPuMUDVtdvHWQQIHc?=

=?us-ascii?Q?XM3Am1WCcv4Ce9aHe7Zl1m5nnQ=3D=3D?=

X-SG-ID:

=?us-ascii?Q?u001=2ESdBcvi+Evd=2FbQef8eZF3BmPY44iW6Nu7tZIBPyvVvSqyZHffzXGS6R0xV?=

=?us-ascii?Q?8OUhgDfYEMjufRptlTqR7jIJVQMNORzgRyBJvLr?=

=?us-ascii?Q?fcc4IeczC4VCdn=2F9drd7fMhpkzeAdlpHhJvuMde?=

=?us-ascii?Q?1F+HNShMwRYQ375HfRwBJ7CFJPPHXovk0u=2FnAN+?=

=?us-ascii?Q?fBJtTtw2DgKD83lYgn?=

To: doctor@doctor.nl2k.ab.ca

X-Entity-ID: u001.xp2kuch8wT2KEew8bk4qAg==

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 25.2

X-Spam_score_int: 252

X-Spam_bar: +++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Postes livraison 08249963746 Vоtrе соlіѕ (CA09128034)

еn рrоvеnаnсе dеѕ États-Unis est actuellement en transit et a atteint

le dédouanement.

Content analysis details: (25.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[149.72.42.66 listed in dnsbl.ahbl.org]

[149.72.42.66 listed in dnsbl.ahbl.org]

[149.72.42.66 listed in dnsbl.ahbl.org]

[149.72.42.66 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[149.72.42.66 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[149.72.42.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[149.72.42.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[149.72.42.66 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[149.72.42.66 listed in sa-trusted.bondedsender.org]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[149.72.42.66 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[149.72.42.66 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[149.72.42.66 listed in bl.score.senderscore.com]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[pritiranjanmallik7(at)gmail.com]

15 GR_DOMAIN_SENDGR6 URI: Body contains known spammer URI (sendgr)

0.0 HTML_IMAGE_RATIO_06 BODY: HTML has a low ratio of text to image area

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

2.5 UNICODE_OBFU_ASC Obfuscating text with unicode

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.5 LONGLN_LOW_CONTRAST Excessively long line + hidden text

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Confirmez vos =?UTF-8?B?ZMOpdGFpbHM=?= de livraison

w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

e">

0">

=

.png">

0" cellpadding=3D"0" align=3D"center" style=3D"margin:0 auto;max-width:610p=

x">

=C2=A0

g=3D"0" style=3D"min-width:100%">

=C2=A0

"http://www.mytime.com/assets/email_assets/reengagement/corners-top.png" wi=

dth=3D"600" alt=3D"" style=3D"display:block;width:100%;max-width:600px;max-=

height:31px">

g=3D"0" style=3D"min-width:100%">

1px;line-height:1px">

" cellpadding=3D"0" style=3D"min-width:100%">

e-height:1px">=C2=A0

spacing=3D"0" cellpadding=3D"0" style=3D"border-bottom:1px solid #e7e7e7;mi=

n-width:100%">

=C2=A0

r=3D"0" cellspacing=3D"0" cellpadding=3D"0" style=3D"min-width:100%">

ize:0;text-align:center">

s=3D"t-width" width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"=

0" style=3D"max-width:170px;display:inline-block;vertical-align:middle">

height=3D"10" style=3D"font-size:1px;line-height:1px">=C2=A0

align=3D"center" style=3D"width:170px; height:112px">

=

pc-main-logo-EN_2x.png?1741987988" width=3D"170" height=3D"41" alt=3D"" sty=

le=3D"display:block;border:none;max-height:100%;max-width:100%;">

d>

height=3D"10" style=3D"font-size:1px;line-height:1px">=C2=A0

"t-width" width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" s=

tyle=3D"display:inline-block; vertical-align:middle; max-width:360px;">

class=3D"t-none" width=3D"20">=C2=A0

=

=

=

=

=

=

=

=

=

=

=

=

=

=20

=

=20

=

=

=

able>

ble width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" style=

=3D"min-width:100%">

=

=C2=A0

family:Verdana, Arial, sans-serif;font-size:20px;line-height:24px">Postes l=

ivraison

=C2=A0

ont-family:Verdana, Arial, sans-serif;font-size:14px;line-height:18px">0824=

9963746

=C2=A0

ss=3D"t-none" width=3D"20">=C2=A0

=C2=A0

spacing=3D"0" cellpadding=3D"0" style=3D"min-width:100%">

=C2=A0

-family:Verdana, Arial, sans-serif;font-size:14px;line-height:20px">

cellpadding=3D"0" bgcolor=3D"#f0f0f0">

s-serif; font-size: 16px; font-weight: 300; letter-spacing: 0.03125em; line=

-height: 24px;">
arial, sans-serif; text-decoration: underline;" name=3D"ENGLISH_VERSION"><=

/a>

s-serif; font-size: 16px; font-weight: 300; letter-spacing: 0.03125em; line=

-height: 24px; text-align:center;">
-width: 600px;" border=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=

=3D"0">

s-serif; font-size: 16px; font-weight: 300; letter-spacing: 0.03125em; line=

-height: 24px; text-align:center;">
-width: 600px;" border=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=

=3D"0"><=

/tr>

s-serif; font-size: 16px; font-weight: 300; letter-spacing: 0.03125em; line=

-height: 24px; text-align:center;">
idth: 600px;" border=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"=

0">

arial, sans-serif; font-size: 16px; font-weight: 300; letter-spacing: 0.031=

25em; line-height: 24px; padding: 48px 24px 64px;" bgcolor=3D"#ffffff">
le class=3D"cpc-main-content" border=3D"0" width=3D"100%" cellspacing=3D"0"=

cellpadding=3D"0">

tica, arial, sans-serif; font-size: 16px; font-weight: 300; letter-spacing:=

0.03125em; line-height: 24px; padding-bottom: 24px;">

V=D0=BEtr=D0=B5 =D1=81=D0=BEl=D1=96=D1=95 (CA09128034) =

=D0=B5n =D1=80r=D0=BEv=D0=B5n=D0=B0n=D1=81=D0=B5 d=D0=B5=D1=95 =C3=89tats-U=

nis=C2=A0est actuellement en transit et a atteint le d=C3=A9douanement.

Afin d'assurer une livraison sans faille, nous sollicitons votre aide po=

ur r=C3=A9gler les droits de douane et taxes n=C3=A9cessaires, pour un mont=

ant total de 0,99 $. Veuillez proc=C3=A9der au paiement en=

utilisant le lien fourni dans les meilleurs d=C3=A9lais.

D=C3=A8s confirmation du paiement, votre colis sera rapidement trait=C3=

=A9 pour la livraison finale.

tica, arial, sans-serif; font-size: 16px; font-weight: 300; letter-spacing:=

0.03125em; line-height: 24px; padding-bottom: 24px;">=C2=A0

tica, arial, sans-serif; font-size: 16px; font-weight: 300; letter-spacing:=

0.03125em; line-height: 24px; padding-bottom: 24px;">

<=

tbody>

3333; font-family: roboto, helvetica, arial, sans-serif; font-size: 16px; f=

ont-weight: 300; letter-spacing: 0.03125em; line-height: 24px; text-align:l=

eft;" bgcolor=3D"#0467c6">
s=3D"Object" role=3D"link">
dius: 3px; color: #ffffff; display: inline-block; font-family: roboto, helv=

etica, arial, sans-serif; font-weight: 400; padding: 9px 19px; text-align: =

center; text-decoration: none;" href=3D"https://u528919.ct.sendgrid.net/ls/=

click?upn=3Du001.NDErwtlgSFQ1g1vOEogvwXclqdha-2FC92Hc-2BBc8MKklnoesiOtjXAwx=

qJhlmjz6OiBeo1_GyWe1RRaaz-2B-2B-2Bm2R4SiSUcHZOTY4dgdpSVRaTGu9ktMpGRw6oPin1j=

slNHpFpJkAA-2BatGGMBPWPz5OnVvWTTpbaXI52EMa9AKOmjj0oDC03Drmbrmfxk2bX4idoZ-2B=

HSG9hvoSPNXsfSR3M1K-2BE-2FWLKU8g99-2FBT72YQI5-2BrqV-2BbY5N97-2B5jcEwotpSq5V=

w5BSfNFOIZLuCVsUiEAkls5b3Xj8kNuqJ5IUDYoi0uyP4QTSPIxhM53duVHoKLLq9CPbgxbAOpg=

wvaCYh15pt9-2BOQexzZTpMYro2MRAYMRT7ovyXh04MYIqSdIEO-2F-2B-2F4iMWtZpXtT5d2C9=

2a-2FcYjSnOW0LuSnCFFOirUkz-2FxjA-2BY3dpXvMNM7n8cTK2Z-2B8R9Ht76" target=3D"_=

blank" rel=3D"nofollow noopener noreferrer">Envoyer Mon Colis=C2=A0
an>

=C2=A0

Merci pour votre action rapide

s-serif; font-size: 16px; font-weight: 300; letter-spacing: 0.03125em; line=

-height: 24px; text-align:center;">
-width: 600px;" border=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=

=3D"0" bgcolor=3D"#666666">

>

family: roboto, helvetica, arial, sans-serif; font-size: 16px; font-weight:= 300; height: 0px; letter-spacing: 0.03125em; line-height: 0;" bgcolor=3D"#= 666666"> =3D"link"> , sans-serif; text-decoration: underline;" href=3D"#" target=3D"_blank" rel= =3D"nofollow noopener noreferrer"> -align: bottom;" src=3D"https://www.canadapost.ca/cpo/mc/emailcampaigns/cpc= /images/canada_logo.png" alt=3D"Canada" width=3D"100%">
ily: roboto, helvetica, arial, sans-serif; font-size: 16px; font-weight: 30= 0; letter-spacing: 0.03125em; line-height: 24px; padding: 48px 24px 24px;" = bgcolor=3D"#666666"> 0px 24px;">=D0=A0=D0=BE=D1=95t=D0=B5=D1=95 =D0=A1=D0=B0n=D0=B0d=D0=B0 =D0= =B5nv=D0=BE=D1=96=D0=B5 d=D0=B5=D1=95 =D0=B0v=D1=96=D1=95 =D1=80=D0=B0r =D1= =81=D0=BEurr=D1=96=D0=B5l =C3=A0 la demande de l'exp=C3=A9diteur ou du dest= inataire. =D0=A0=D0=BE=D1=95t=D0=B5=D1=95 =D0=A1=D0=B0n=D0=B0d=D0=B0 peut = =C3=A9galement envoyer des courriels de suivi pour confirmer les d=C3=A9tai= ls de la transaction. 0px 24px;">=C2=A0
s-serif; font-size: 16px; font-weight: 300; letter-spacing: 0.03125em; line= -height: 24px; padding: 48px 24px 0px;" bgcolor=3D"#666666"> _PREFIX_DWT59_com_zimbra_url" class=3D"Object" role=3D"link"> lor: #f0f0f0; font-family: roboto, helvetica, arial, sans-serif; text-decor= ation: underline;" href=3D"#" target=3D"_blank" rel=3D"nofollow noopener no= referrer">canadapost.ca
s-serif; font-size: 16px; font-weight: 300; letter-spacing: 0.03125em; line= -height: 24px; padding: 0px 24px 16px;" bgcolor=3D"#666666">2701 Riverside = Drive, Ottawa ON=C2=A0=C2=A0K1A 0B1
s-serif; font-size: 16px; font-weight: 300; letter-spacing: 0.03125em; line= -height: 24px; padding: 0px 24px 16px;" bgcolor=3D"#666666"> > rif; text-decoration: underline;" href=3D"#" target=3D"_blank" rel=3D"nofol= low noopener noreferrer">Accessibility=C2=A0=C2=A0\|=C2=A0=C2=A0<= span id=3D"OBJ_PREFIX_DWT61_com_zimbra_url" class=3D"Object" role=3D"link">= if; text-decoration: underline;" href=3D"#" target=3D"_blank" rel=3D"nofoll= ow noopener noreferrer">Legal=C2=A0=C2=A0\|=C2=A0=C2=A0 =3D"OBJ_PREFIX_DWT62_com_zimbra_url" class=3D"Object" role=3D"link"> e=3D"color: #f0f0f0; display: inline-block; font-family: roboto, helvetica,= arial, sans-serif; text-decoration: underline;" href=3D"#" target=3D"_blan= k" rel=3D"nofollow noopener noreferrer">Privacy=C2=A0=C2=A0\|=C2= =A0=C2=A0 =3D"link"> , sans-serif; text-decoration: underline;" href=3D"#" target=3D"_blank" rel= =3D"nofollow noopener noreferrer">Support
s-serif; font-size: 16px; font-weight: 300; letter-spacing: 0.03125em; line= -height: 24px; padding: 0px 24px 48px; text-align:bottom;" v=3D"" bgcolor= =3D"#666666"> =C2=A9 Canada Post Corporation d=3D"OBJ_PREFIX_DWT64_com_zimbra_url" class=3D"Object" role=3D"link"> le=3D"color: #f0f0f0; font-family: roboto, helvetica, arial, sans-serif; te= xt-decoration: underline;" href=3D"#" target=3D"_blank" rel=3D"nofollow noo= pener noreferrer">

5ce8c,bbde0fa,1" alt=3D"" width=3D"100%" height=3D"0">

=C2=A0

e-height:1px">=C2=A0

" cellpadding=3D"0" style=3D"min-width:100%">

=C2=A0

f" border=3D"0" cellspacing=3D"0" cellpadding=3D"0" style=3D"border-radius:=

5px;min-width:100%">

=C2=A0

r=3D"0" cellspacing=3D"0" cellpadding=3D"0" style=3D"min-width:100%">

=

=C2=A0

nter" style=3D"font-family:Verdana, Arial, sans-serif;font-size:14px;font-w=

eight:bold">
-2BXvV-2FCgmOY7AZE1j6CXqVSxcZ-2BSV57r-2BzsZ28q2uZiLOtsQjdrC-2BAB-2FFXXENku0=

JFtaNEtaJj70oJ7aVI2ObpMT-2FGavDi-2BsMnuo6orYqEw479YJYk1an31fon1wiqaV8qGnUr5=

WbBTz7lGarDv0h2o6yLRb-2BkJzj3zV466rDX8JDXkO83fH2oe-2FvGPOvTqr14lEi_GyWe1RRa=

az-2B-2B-2Bm2R4SiSUcHZOTY4dgdpSVRaTGu9ktMpGRw6oPin1jslNHpFpJkAA-2BatGGMBPWP=

z5OnVvWTTpbaXI52EMa9AKOmjj0oDC03Drmbrmfxk2bX4idoZ-2BHSG9hvoSPNXsfSR3M1K-2BE=

-2FWLKU8g99-2FBT72YQI5-2BrqV-2BbY5N97-2B5jcEwotpSq5Vw5BSR6i6oOqfsdMk5v-2BwM=

7iOc0LGNpw0Nga1LjCph-2FrhVC5KCxx4epgTqzbojbgaZeLwlT6lmiIEaZgoAMb50qCbAPqboI=

9h35fYJA-2FijMEm6WiXonWh9FB9NspDMxPOrhmwRExHLavBPFWWC0S9U63cguITUXFPbKI-2BP=

LCGiHLnATPtp2uUYNq-2FFu3a04n0SQKS" target=3D"_blank" style=3D"color:#339fb4=

;text-decoration:none">

ft.png" width=3D"180" height=3D"45" alt=3D"powered by mytime" style=3D"disp=

lay:block;border:none">

0">=C2=A0

" style=3D"color:#4f4f4f;font-family:Verdana, Arial, sans-serif;font-size:1=

2px;line-height:18px">

This email has =

been sent on behalf of Postes livraison, Nayabazar Bidyadharpur, Cuttack Co=

llege, Cuttack, ODISHA 753004.

You can

https://u528919.ct.sendgrid.net/ls/click?upn=3Du001.-2BXvV-2FCgmOY7AZE1j6CX=

qVV2wf-2F5S5-2BKT9FKhWnWtVdKVM46af2m5SQRuHVogpkkZ2zmCx-2FtOFEIcv6bo07i4gey9=

G-2FKmj-2BgNhJnDzVJymYF8b2xtaGbmgHusVxm-2F-2FfBTGkN6_GyWe1RRaaz-2B-2B-2Bm2R=

4SiSUcHZOTY4dgdpSVRaTGu9ktMpGRw6oPin1jslNHpFpJkAA-2BatGGMBPWPz5OnVvWTTpbaXI=

52EMa9AKOmjj0oDC03Drmbrmfxk2bX4idoZ-2BHSG9hvoSPNXsfSR3M1K-2BE-2FWLKU8g99-2F=

BT72YQI5-2BrqV-2BbY5N97-2B5jcEwotpSq5Vw5BSaQzSdioTM6VOFydGvJrYwMDp4UfU9SQ7D=

51aYmZwqHZVBr27WePqJUao2k4dono0ZD2SKIsg3NSfrU0hZpGg0UTGpeaYySENKB1-2FBv9E5J=

rCzVOrJ0Ni-2F4wmzP9Kf0WHq4YPT9Wk1MO7p-2B-2F9ZdPPosEJ0-2F1ELllHVJHG2lS4djSRj=

XMNQ8bAKTWXjmjtz7zn" target=3D"_blank" style=3D"color:#319fb5;text-decorati=

on:none">login to MyTime to manage your preferences.

=

=C2=A0

rder-bottom: 1px solid #e1e1e1" height=3D"5">=C2=A0

0">=C2=A0

nter" style=3D"color:#4f4f4f;font-family:Verdana, Arial, sans-serif;font-si=

ze:12px;line-height:18px">

Don't want =

further communications from this business?
endgrid.net/ls/click?upn=3Du001.-2BXvV-2FCgmOY7AZE1j6CXqVYDk5MieSqSVEymGwVR=

uDrUlR5Yw-2BZNuL8qnnf4R-2Fo62gmELHeM7bOCNdg7SdFgNHVqO83yaj7yyUZp4do0HU-2Bkl=

0QYB1v7Ead-2F3Fb3GFLukODVazNP-2FQwM82WK8YSNN2rZ-2F4XKfDHiezOdA-2FpmsnlohNjk=

asjX-2FIxMxx9v1FVa5vL7PzLu2lVh-2BzRNKPZKk9MDrveTDOdYSdAExUXJZ2-2FU9R-2FpiU0=

krcROG-2B9IznMRDKkrarNa97YN7PR-2B8mNH4lMuTYLMmcheKtjLqX3SXpK-2FFbV31F9NlzEV=

uUbmTv-2BLF-2BqsPGgetxaWvKIl-2FZ1CeIowFOioFFUkFTcnLBSmQkv1ONYV6iF5qo6RxEJAb=

NmnBDTr-2FuMK2Zpn1cSPQz7A0yiAItTzGn161GFX2-2BgeGTM9MmMirbeEhgCKCGTOSQzLmrK4=

R-2FHRcAUJVJ3t8AdWWEA-3D-3DW9zI_GyWe1RRaaz-2B-2B-2Bm2R4SiSUcHZOTY4dgdpSVRaT=

Gu9ktMpGRw6oPin1jslNHpFpJkAA-2BatGGMBPWPz5OnVvWTTpbaXI52EMa9AKOmjj0oDC03Drm=

brmfxk2bX4idoZ-2BHSG9hvoSPNXsfSR3M1K-2BE-2FWLKU8g99-2FBT72YQI5-2BrqV-2BbY5N=

97-2B5jcEwotpSq5Vw5BSwAGKR5pUGlmteuUtR2JMOnavF4CtHgsmU2i-2BnIKoXn-2Bqkus95t=

9N7X32rrUoRot7gO2SIXoMtUtshIHhFhamIUhgvr6tgjT6ys4E3tqlt3cKz709G4pM3AUfLN-2F=

g8EQLxWETYomEwsqyp7Pi-2Bhe94Ex0QEnYDg8tcgD1ba-2FqzrMbXlMYBa8HpSnq2HpHr-2FK6=

" target=3D"_blank" style=3D"color:#319fb5;text-decoration:none">Unsubscrib=

e

0">=C2=A0

=C2=A0

1px;line-height:1px">

g=3D"0" style=3D"min-width:100%">

"http://www.mytime.com/assets/email_assets/reengagement/corners-bottom.png"=

width=3D"600" alt=3D"" style=3D"display:block;width:100%;max-width:600px;m=

ax-height:20px">

=C2=A0

20dbI9Z6QKeFEUiu7Ze4oT3Osa2V9TbD2QPW5eWMnKLKx8udQRezHn1fRJ6uBsM9moZpq7h-2FF=

KcdlgZyjfSaR07nn8f3hDTfchF5N56EEpNbXE-2BJufnsA05fGTJyknxUx4ZUOm00jiYcm-2FIv=

o78tnKDEFR9NdN-2FinLmCWvu-2F6l-2BLATipZxTiliVM6fzm4K8FWmzPqJDOdp1FwCPdpLXkn=

Ckxo-2BdaaG6AYVnGlP1l36TGccqc1yWiuPwyq-2B-2FGJMPHiixEyvtcwfqK-2F06-2Bt818Sk=

KdFgDLyfvLnLQsErvCtZfsV1VbviK1zajLrtSy1eBWYQIjnKfYQWES9Pm7u5-2BGgq7GdOSB41P=

0WwNECqMNfEc6IASAcdBC" alt=3D"" width=3D"1" height=3D"1" border=3D"0" style=

=3D"height:1px !important;width:1px !important;border-width:0 !important;ma=

rgin-top:0 !important;margin-bottom:0 !important;margin-right:0 !important;=

margin-left:0 !important;padding-top:0 !important;padding-bottom:0 !importa=

nt;padding-right:0 !important;padding-left:0 !important;"/>

French language Canada post phish from sendgrid.net

Posted by Dave Yadallee on Saturday, March 15. 2025

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 14 Mar 2025 20:42:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.1 (FreeBSD))

(envelope-from )

id 1ttHSz-000000007oa-3oPk

for dave@doctor.nl2k.ab.ca;

Fri, 14 Mar 2025 20:41:37 -0600

Resent-From: The Doctor

Resent-Date: Fri, 14 Mar 2025 20:41:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from o11.ptr9104.mytimemail.mytime.com ([149.72.42.66]:13674)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.1 (FreeBSD))

(envelope-from )

id 1ttGDj-00000000Gq8-2MG9

for doctor@nl2k.ab.ca;

Fri, 14 Mar 2025 19:21:55 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mytime.com;

h=from:subject:mime-version:reply-to:to:content-type:

content-transfer-encoding:cc:content-type:from:subject:to;

s=m1; bh=bMKT8bbyX1hOMAkVgG1wP/3IZMyqjJNRPGXvpgVWZ+c=;

b=RnnrKo2qMCGc9Z77rYmhNtM+pWSL3vz5eavUAXQuSFrGQQzr0RXWeIyNyVOalK+/qWnQ

wBbz48bWSlSssv2eb+UQ8P9Ok1RVrnDxiODERn4JeQpAd3XDaUjC7q/8XUSjfgqqREEHRc

/mvGztLJJYgjMh3mGQKuKwP8NlRbDPR+s=

Received: by recvd-6d4df46df7-v9dwr with SMTP id recvd-6d4df46df7-v9dwr-1-67D4D5B3-13

2025-03-15 01:19:47.467708811 +0000 UTC m=+10382274.975049481

Received: from mytime.com (unknown)

by geopod-ismtpd-13 (SG) with ESMTP

id Kk9MNtlFQUKZQ1csKCSMRA

for ;

Sat, 15 Mar 2025 01:19:47.384 +0000 (UTC)

Date: Sat, 15 Mar 2025 01:19:47 +0000 (UTC)

From: Postes livraison

Message-ID: <67d4d5b33b360_8fc46a8170877@f114834235ee.mail>

Subject: Confirmez vos =?UTF-8?B?ZMOpdGFpbHM=?= de livraison

Mime-Version: 1.0

Reply-To: pritiranjanmallik7@gmail.com

X-SG-EID:

=?us-ascii?Q?u001=2EBGdfhnQdKWMazd5NZ=2FpGu88TId8PBEhTrsr8E1Wql9J1OR7ZVkellRYdJ?=

=?us-ascii?Q?fsufZWrZaQcZXkUB3ODiYPRBsCgrn2ewkPFBo8=2F?=

=?us-ascii?Q?CNe0AP9KlZkhB=2FCTkRlPaGbq1zOfKMqy6pYkjh0?=

=?us-ascii?Q?2RglYDfPucCSgIAGu0ncPNNadXu1iUMlODduLiN?=

=?us-ascii?Q?bwopNdJaj8+W0SlUi7B6OqGvWIYYwh9Kmzb7ZFZ?=

=?us-ascii?Q?MAizCXo5epY=2Fxd2JcY50J8y3nrNjzOiVPL6wnfE?= =?us-ascii?Q?W5xB?=

X-SG-ID:

=?us-ascii?Q?u001=2ESdBcvi+Evd=2FbQef8eZF3BmPY44iW6Nu7tZIBPyvVvSqyZHffzXGS6R0xV?=

=?us-ascii?Q?8OUhgDfYEMjufRptlTqR7jIJVQMNORzgRyBJvLr?=

=?us-ascii?Q?fcc4IeczC4VCdn=2F9drd7fMhpkzeAdlpHhJvuMde?=

=?us-ascii?Q?1F+HNShMwRYQ370LGCYS9ZRDDOtojvan831ZbGZ?=

=?us-ascii?Q?IlULx9Hr5ZmHdX62Us?=

To: doctor@nl2k.ab.ca

X-Entity-ID: u001.xp2kuch8wT2KEew8bk4qAg==

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 25.2

X-Spam_score_int: 252

X-Spam_bar: +++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Postes livraison 08249963746 Vоtrе соlіѕ (CA09128034)

еn рrоvеnаnсе dеѕ États-Unis est actuellement en transit et a atteint

le dédouanement.

Content analysis details: (25.2 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[149.72.42.66 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[149.72.42.66 listed in sa-accredit.habeas.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[149.72.42.66 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[149.72.42.66 listed in bl.score.senderscore.com]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[149.72.42.66 listed in dnsbl.ahbl.org]

[149.72.42.66 listed in dnsbl.ahbl.org]

[149.72.42.66 listed in dnsbl.ahbl.org]

[149.72.42.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[149.72.42.66 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[149.72.42.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[149.72.42.66 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[149.72.42.66 listed in dnsbl.ahbl.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[pritiranjanmallik7(at)gmail.com]

15 GR_DOMAIN_SENDGR6 URI: Body contains known spammer URI (sendgr)

0.0 HTML_IMAGE_RATIO_06 BODY: HTML has a low ratio of text to image area

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

2.5 UNICODE_OBFU_ASC Obfuscating text with unicode

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

2.5 LONGLN_LOW_CONTRAST Excessively long line + hidden text

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Confirmez vos =?UTF-8?B?ZMOpdGFpbHM=?= de livraison

w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

e">

0">