Database spam from Google gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 29 Mar 2025 08:30:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1tyXC3-00000000MEx-1UUw

for dave@doctor.nl2k.ab.ca;

Sat, 29 Mar 2025 08:29:51 -0600

Resent-From: The Doctor

Resent-Date: Sat, 29 Mar 2025 08:29:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f53.google.com ([209.85.161.53]:48623)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1tyWSb-00000000CJP-1HuL

for sales@nk.ca;

Sat, 29 Mar 2025 07:43:05 -0600

Received: by mail-oo1-f53.google.com with SMTP id 006d021491bc7-60208b7a6d6so943506eaf.1

for ; Sat, 29 Mar 2025 06:40:58 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1743255652; x=1743860452; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=xO5ZmRVDzYZ/im559zuLWCNYXjkYczwUEANj+d9a+qk=;

b=bYrIXvqVdq3Bp3ToFhaHazEhWy5YIgTifpZNCHvsqdq6P4lf9Yt7hpVCuhJ434A2FT

TYa8bcJ3bKx9m4LRB7fiEm+o2GWfX2UWCrEJeY/gMSKJsPMtKRQNZQbx7OtPHAUKFs7e

3+6rt1D/BHi6+k9PZpGgvbuitjW9zyjpclqoIJM+DAqFReqlBO8XCoL3ReRarIa82Z/V

mHH3ZMw9ME1W8CN+BZfjtqCtWI3xYW0M4lr068Pu61F5ql2BtbYAYkHme03kr/PG8bWn

AUYLLLLom1krPIkhUPVqsftcelEK2GgHZwc30FsHHUHKNbpmshBsFoRRqFDQ4F/pZzyB

Q3IA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1743255652; x=1743860452;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=xO5ZmRVDzYZ/im559zuLWCNYXjkYczwUEANj+d9a+qk=;

b=ElfSwClXiJW76Tbpunh5DXMqMt2JU8ixPzzA/tjW0zJcPtH0RLoW3t7PRerE/3QnNk

qEOirTUk+IAQf/d3aU1yRSyxhN0axq5j/MzGIVRaRxa48nFLl/5sS8EiAYUt6ZgNwUOr

U5RoKiUoZN7B20tBnuxiJNiUerqe7FNTbPSqurLU38M/AmgPuls2+a+JhP6Fdb+LJgvo

3nBnFhZWtXPnpMR8RqMiWAB6LNKBi+J/+RJ6EgvtI6+rt1QTZZA56O6eUlRfQS6hxn1d

NnMq7CPBreT9CiRVMsQ1lTt0oEpEdT0MWSopU7jXyYyUVPcmGB/vLBO16jZpunlLZSgG

0Atw==

X-Gm-Message-State: AOJu0Yzz2TQ+x67a5fPPcnKb5cU1vIYu2XzdTY1IRLMNaMISe5AEaZCX

qJVZeNTdyY+HRYMOwI7G3bjPfKymfrcHI5QDBOjPunVNlkJcGtxkuEzFsmKNQigKru7z/FS+cm3

AmptSJeCiFnGmDP8G/X8w/QfPCy0cLvVgScM=

X-Gm-Gg: ASbGnct5Uh4hcaq/ANESRjkla9yUSoVbIBT779wuCoVFe/LMevbLcQJzUSAQAtu4Qqn

yfdVtwBE/UEJgyu1t7iy75FhZ/ukU+AAnCx9qjoinIYhSRoB0O16VzZJ4uFBC+4UdRYNwOWGnKR

9XZhhQmFsxC+LpJ886NLJVO5cEkg==

X-Google-Smtp-Source: AGHT+IGc+cWEA1rfYtX4PP1whAwgFYbt2XCpDu5OEw/F9Kx9/MXoIu2iIrWE58eAM6tQwm31/CFpAh6YREOvWogLekc=

X-Received: by 2002:a05:6820:270e:b0:602:7078:df55 with SMTP id

006d021491bc7-60290f744ebmr1286882eaf.5.1743255651894; Sat, 29 Mar 2025

06:40:51 -0700 (PDT)

MIME-Version: 1.0

From: Palhan Turkiye

Date: Sat, 29 Mar 2025 15:40:40 +0200

X-Gm-Features: AQ5f1Jr8nbdd0zMJcgLNC_pkvw_layjFNJxPeVlNbudMt9nr7mYfboc2MxJlzHQ

Message-ID:

Subject: Database

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000e2539c06317b5543"



--000000000000e2539c06317b5543

Content-Type: text/plain; charset="UTF-8"



Check the database settings of your Database Open Page..!



--000000000000e2539c06317b5543

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable







il-tw-target-text" style=3D"text-align:left" dir=3D"ltr" aria-label=3D"=C3=


=87evrilmi=C5=9F metin: Check the database settings of your Database Open P=


age..!">Check the database setting=


s of your Database Open Page..!









--000000000000e2539c06317b5543--

Nigerian spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 29 Mar 2025 08:30:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1tyXBi-00000000MCm-32ij

for dave@doctor.nl2k.ab.ca;

Sat, 29 Mar 2025 08:29:30 -0600

Resent-From: The Doctor

Resent-Date: Sat, 29 Mar 2025 08:29:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wm1-f45.google.com ([209.85.128.45]:57818)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1tyVxl-000000005pC-3bnw

for doctor@doctor.nl2k.ab.ca;

Sat, 29 Mar 2025 07:11:12 -0600

Received: by mail-wm1-f45.google.com with SMTP id 5b1f17b1804b1-43d04dc73b7so34193395e9.3

for ; Sat, 29 Mar 2025 06:09:07 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1743253740; x=1743858540; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=UXp2AYZQZ48qMaxg71vRQILgyuv20OnycN8ttUPdK2g=;

b=eFal5dTTUwUu2kEwz9ndhnAuhQxfP9lxViph+0wK5I4Z0ompEiWGcMwjFV/hrM5Z3C

NGRs2Dy2EJvt6DWo6xUC2CrCUecn18JdeCStXGPe85sPQk+5eP6SJf4S/HF/khauTFO6

4osjw4btWdFkZfsU5FkS7FcZodZKclxm95bf++bH5K1QSnT2XNujGvlqYP7j9ryah+ex

FtC1uKI4RWLa2rZIERjn9nS3edpuUT/GAvZE6xJRif0PvcXpCg2LkUaz2UVOd6TYR4Wr

n4sYJ7UETv4ixkk/tNIA1LzwnQB9zj7GQvuMtsNco1oPDx5DEy9NDdGfME18/mKr7hsa

dsrA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1743253740; x=1743858540;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=UXp2AYZQZ48qMaxg71vRQILgyuv20OnycN8ttUPdK2g=;

b=HTThzDqsRsH+WDKs0DwWHvvZDurvkhuU0hRz6P/CSQUhKc3FxuD+7iNaCzxcQk2LWf

elxN48n/pcnKnaqmqCRV5XV/Jcc83sEJ5S+t4QaB4avQ91TVtnopt4X2V1nosNbjlGwt

RlZ9DUZ+Ng+vVWp6DhF7Aj4L5YYh6H7BIsiAIMW2bp0Z+jLYI75UOKFAsCv5mZcDj1Uj

aIpJMGRabWXU1QltWax+p7EStWUeH9zIxruN45b2Tc6oEVyQgwO1q+yitGO4Bxao+FOS

3cHzq192RWQ5ouVH/iZpKPkadtwQEyRA+KeT3o1ISfSWWly15pS/1H/sBjicSg1KYvj+

WuOg==

X-Forwarded-Encrypted: i=1; AJvYcCVaJZAzrn2EpmEB9Xaz7e/9Gt2lHrQonpcUjxkK5WgqodIrN8CTMCA6XCfuVY7rR52/F1tX/wE=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YwR1TmUUCuDrKbs1rXFRLEQrd+mbv2AEX0Wf6Ncfj7wX3PQcBVy

X6A2tGOS5VIPOVHzc32Mzymp/fyEFQhHeIb1JCEMKD/mZz74vMiBNBFZRAn26jmN7DYPo6CaaJy

uOfsX5p14Gu/wdiScBFlgQA9QSVQ=

X-Gm-Gg: ASbGncu68Qc92Z7emw2vhTMXdcZQzchcMSsGyKAPIseHKKLZt0vvbT2D1LLvicTvs3e

4pjB1nH/BwV82zPoALYnjtUmEQf9t0y+QRsvZismLmWxv0AyEFiffhRQC3RqHefVENqVNhly5d4

BfvmPc4Jy75FsVFmLFmpi4z9UwWJLy3EPYdcNi0Q==

X-Google-Smtp-Source: AGHT+IH9a6J6F7TwGlWEREdLy8vASsHMT9XYfvKeHZbc5zflz4tceUyHTWgvExLrawVLdIQRa225D33st7VNb0sralE=

X-Received: by 2002:a05:600c:a49:b0:43c:fceb:91f with SMTP id

5b1f17b1804b1-43e8e3d008dmr14170955e9.11.1743253739906; Sat, 29 Mar 2025

06:08:59 -0700 (PDT)

MIME-Version: 1.0

Reply-To: mrsjulianatimothy22@gmail.com

From: Mrs Timothy

Date: Sat, 29 Mar 2025 14:08:49 +0100

X-Gm-Features: AQ5f1Jo4-2n-956M1N8tpCSSeW2aNNt2PI2vMGeSQJPCnUaBEcHaAFGfDE4LDL0

Message-ID:

Subject: Good Day

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000ebaff506317ae3e7"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 11.1

X-Spam_score_int: 111

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Greetings to you and your family. I am Mrs. Juliana Timothy

From Ivory Coast Have A Donation For You Contact Me For More Details Greetings

to you and your family. I am Mrs. Juliana Timothy From Ivory Coast Have A

Donation For You



Content analysis details: (11.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.45 listed in will-spam-for-food.eu.org]

[209.85.128.45 listed in will-spam-for-food.eu.org]

[209.85.128.45 listed in will-spam-for-food.eu.org]

[209.85.128.45 listed in will-spam-for-food.eu.org]

[209.85.128.45 listed in will-spam-for-food.eu.org]

[209.85.128.45 listed in will-spam-for-food.eu.org]

[209.85.128.45 listed in will-spam-for-food.eu.org]

[209.85.128.45 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.45 listed in dnsbl.ahbl.org]

[209.85.128.45 listed in dnsbl.ahbl.org]

[209.85.128.45 listed in dnsbl.ahbl.org]

[209.85.128.45 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.45 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.45 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.45 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.45 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.128.45 listed in sa-accredit.habeas.com]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.128.45 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.45 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.45 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[jj8056913(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[jj8056913(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[mrsjulianatimothy22(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 HK_NAME_FM_MR_MRS No description available.

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.128.45 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.128.45 listed in bl.score.senderscore.com]

Subject: {SPAM?} Good Day



--000000000000ebaff506317ae3e7

Content-Type: text/plain; charset="UTF-8"



Greetings to you and your family. I am Mrs. Juliana Timothy From Ivory

Coast Have A Donation For You

Contact Me For More Details



--000000000000ebaff506317ae3e7

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





=3D"gmail_signature" data-smartmail=3D"gmail_signature">

iv dir=3D"ltr">

=3D"ltr">
Greetings =

to you and your family. I am Mrs. Juliana Timothy From Ivory Coast Have A D=

onation For You
Contact Me For More Details

v>




--000000000000ebaff506317ae3e7--

Web/SEO/App spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 29 Mar 2025 06:40:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1tyVTj-00000000FHw-0hbp

for dave@doctor.nl2k.ab.ca;

Sat, 29 Mar 2025 06:39:59 -0600

Resent-From: The Doctor

Resent-Date: Sat, 29 Mar 2025 06:39:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-eastasiaazolkn19011024.outbound.protection.outlook.com ([52.103.64.24]:60486 helo=HK3PR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1tyQey-00000000EJh-0kzx

for sales@nk.ca;

Sat, 29 Mar 2025 01:31:28 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Fhn20Q/rumEolHUSWpJfNCD7Q4udQoetme5ptc6L0dswE5YDQWHMymlHYEBgnWuu8ptv+gCJOibL+h/KGLeHk5WINusgSiM17OUs42qDR1nbsRO/nefkoXjPMCzXvHpW2bQA4FDjTcgekvQrlTsnm21yPd5KaLDzE84Ka+tTY6CRFlS2ntVcIbs2nCZbo360xZvGfzGcu50fH42IZENiqkOyEgrY7INFajxzu5r664xa+qNdteaLoDO4QhqaaTW8LGuzHalC8rIa6XLw03QnoVsUvolc2+Qa1lLz/aX1wL9IANNsrE/9/DjwJZFTI5JZYVT62qT4Bu4k544VMpDtCA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=1znvDupfQ0gxKsL8lbVrWD9hlQkwK8TBRSLs/c3tVCk=;

b=jCZdKKE3HOABthnnBmqactKLcZmgGYhPmDgngeH/3anPA3mwP2AVw4gp1LNh4gd7C+8AG+q1ED9IGoChlnmtt/+39GGXS6KOpJjRYEejhMClvBVEo9juWWUpupIHNkO3LmDrmI4jpYYFfgH+Nsgxv5K8ZQ4gf/60oGRIpi/ITD/8K2rRQp6N4D7cfmM/4yZBrry5LqmC+Y5erV0sCwKKyq7U+nJ4Xq0O4GjegWy/+72lWadU7N6201jd1MWzFvSXHwaDvc69MFw5PgvE6by6W9MTUA7q9OgGaowqRwMJyFh847KrSOuZJch0dJ1zWC+dH83fIneFm9Nf1mevQVS24Q==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=1znvDupfQ0gxKsL8lbVrWD9hlQkwK8TBRSLs/c3tVCk=;

b=K5yV8QeJ61nNx/x/2TEdt1+jGsbJttSxr3oN9+IdVT41CM9BXBGrqh31fZS0iWYnpthXTstKCKIiBDD10TJoCQ79KSWW4+eMYLiNrAVrMArDJZlJKPliIj3w2WPr5NI63xsYntJcwsnLi64LZlsA360T2JDLj6UhwPheplzsMe6vtpwoJZBQpuxVLjNCOiNbbHROjSows5uqqUBuy2Rh/49vwDZcRxRyygyVrULI4FAzgapB75yCOihz7xP5fEAQxL9KA4UU1HD58THhiUo1HLfFfUGeHsgT+VTt/AGmV4PgMhheJvrEjPLjzkQzZgGOHQauIQxkahid6euoc6Ju7Q==

Received: from OSNPR01MB7458.apcprd01.prod.exchangelabs.com

(2603:1096:604:318::6) by TY2PPFFE25ECB78.apcprd01.prod.exchangelabs.com

(2603:1096:408::3e2) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8534.44; Sat, 29 Mar

2025 07:28:35 +0000

Received: from OSNPR01MB7458.apcprd01.prod.exchangelabs.com

([fe80::1428:b979:55c6:d55]) by OSNPR01MB7458.apcprd01.prod.exchangelabs.com

([fe80::1428:b979:55c6:d55%5]) with mapi id 15.20.8511.026; Sat, 29 Mar 2025

07:28:35 +0000

From: Suneeta Varma

Subject: Proposal #2025

Thread-Topic: Proposal #2025

Thread-Index: AQHboHwPtZqdII1ywUuOBu/j3bg1sw==

Date: Sat, 29 Mar 2025 07:28:34 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-exchange-messagesentrepresentingtype: 1

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: OSNPR01MB7458:EE_|TY2PPFFE25ECB78:EE_

x-ms-office365-filtering-correlation-id: cf477a4b-d5ff-4a97-2650-08dd6e93502b

x-microsoft-antispam:

BCL:0;ARA:14566002|461199028|7092599003|15080799006|7071999006|15030799003|19110799003|8060799006|8062599003|102099032|3412199025|440099028;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?sNUzuCTKmi7TWSTpXrSjvmpGorePh/JzU0/nq9lCHYXHGEEhOCVue5l+L3?=

=?iso-8859-1?Q?SdpwqvkrxKD92dYsnBBSP0JBrkJUJHZtaVv5HBS4jPsJA1lOttE7el3RlB?=

=?iso-8859-1?Q?HEe+WqM4TgrGFGy9TOJM/tSfb/14jhk3G+cguyvCiV2snP8WtQxSMlfCLw?=

=?iso-8859-1?Q?i1AG+8MMgc9mSeChJweOaNUCXz7FC4bS/jrZ41Qq2d4gxe+tVjst/ovT7U?=

=?iso-8859-1?Q?dZUxD0vm4AQriQBkRqR9gzfyy1XMKHj5zWjKguY7BpP9aLpxA8BWtjG4nw?=

=?iso-8859-1?Q?FwcRnsBNYIM0H8eL/BopYipJmNySq/Fwwra3eWQNs5WsATdyAyn8JpEV84?=

=?iso-8859-1?Q?YHOeUe3YmEjffpIfW/npTMYhqPHkQEr9US47RdQ28EpfdsKG33DPA0WID7?=

=?iso-8859-1?Q?44eDV0A6UK48KK8H8sQ+PgvZuKCMQl4BzW7troIkeIq+M8kF4reh4HYb0e?=

=?iso-8859-1?Q?hbI1G3S7IJkVSx1s45HIWcemqstsUtCvwKzBd3x1uwf5IU4aGGYOZo6PqT?=

=?iso-8859-1?Q?cPob7N33G9PAHfzKnmH3/JafjOUFi5g3NjPAnI38CNUTl6PnJvLigCsaJl?=

=?iso-8859-1?Q?/b5AhLmIfpVL7ATc13UdAM/kfAlg3qP6HUC3xb6/vJ6TZ9NUy5JiaK/zZM?=

=?iso-8859-1?Q?I7D+Hgz71sRtuDvXPqxpx03PfZ+CoKRoIN8WMfxSly+UoU9Zf2PIWofcHz?=

=?iso-8859-1?Q?S7lh11Vg7oYKe+a8iFSEnN2grVUIa+pxFlDRqHJPtk4MLzSTCyEDX5XL75?=

=?iso-8859-1?Q?T9YFf1+/BTuGqULF3Vh00v+q8v9UPwcnrnR8DZHG7SvxrEx7lAXxU/9XxV?=

=?iso-8859-1?Q?3NoPtQvscrtGJoU9cgXQjDm92+pChpTpJOd/KqfRL/zPsx0R+e9Ux1rHT9?=

=?iso-8859-1?Q?6O6SIiPxKtTqhk9Fp4qelS2hS3UduabI0eqhuuzvjqXAJErscAWccGHJGb?=

=?iso-8859-1?Q?b2s4FghSQXd+9Tk6accSwsLczdkBl82CNF0LBwD1+7e3L2Esuj7AiVvrss?=

=?iso-8859-1?Q?ZvSkr55yfJ1b2oUTMkiM6vfS51r+1YIw6j6BjnFZmqmsindk7FR53ur1Ex?=

=?iso-8859-1?Q?bVNkdLk6Yi+I/OA2ooEYz9fvdpAzu3AjTdYpgzwbxtgLn2rDp5GZL28WW4?=

=?iso-8859-1?Q?mY6TzTWhIpUjUcHz4zyqvxbc3SWuAEgwKXyVD5gKF50nPze3aIrDmgDshP?=

=?iso-8859-1?Q?c0ZEOYzqTnaLgPKlEUuA8DNjS6DZOSHkvvE=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?gqdm6meJONkvJa3wahG+Kkfl5ca9/fgLs8ggIGeJq9lkinlz5oqzfmvB8v?=

=?iso-8859-1?Q?El1d64+FjNHVCpQ/sxe5/L046cu0K98sECtXglR1r7FujPyg2HevpSMf86?=

=?iso-8859-1?Q?clIjE9m7HqLEoDAfnW8HFsjHw8irWfSxAkTuc8uBta35nYv+MEfujI3ktl?=

=?iso-8859-1?Q?j2aVQCkbUGHrwqDn7OZIYDuVzfDbGW8tioaTZVvhJ2FWPz/qMIEDOiqD/V?=

=?iso-8859-1?Q?8YmDCwOaQc9YsmQ67XOk/p/aIKL2PWuZf+Gc1MF36XnP7TCJ7AWKYhaxPF?=

=?iso-8859-1?Q?KvcBIKmvo3gkXnKXWnoVkn2Kqn9H5qbj0hPJ7/xhFNhVM4zUD1PStvDh3c?=

=?iso-8859-1?Q?k0tuHS7nCHjRoL36Lzricy429SKyUMSVVHFKflimU6MnwucPZPF1dBQDNj?=

=?iso-8859-1?Q?c8kR/SdO7i9dVcOqMZRlKHaxL42CS0QkXlQxqhV2fGMU8I7i3hmLSPdH4b?=

=?iso-8859-1?Q?E5SgcqxhTY01nPpFJxnORtJ3xfecZJc1YelQ13GfucgwlPdWU+TjTJV33l?=

=?iso-8859-1?Q?/x9uVlHjAcTNKmM1h5yKC1fhjRawxAgc8tTEDC9ua3ukFpuxqxMjiQaJjJ?=

=?iso-8859-1?Q?jM95TxJ8sl5V6BJ0v8KdP6+M32hWOYv1UY9xTsCKHlbsSIB4jYuCTzpnkc?=

=?iso-8859-1?Q?u7dM9rK8hdUEA6lNmeBH8nE6M3h4KZVjCWuEjz0e0QJYicCn48dbH5wrGP?=

=?iso-8859-1?Q?+6pvuAuTOxTP3noPCQ0UKnFZ2DnoTnwCwSylb+w0+guxB11eMjkI6DMa4S?=

=?iso-8859-1?Q?vDow/WftFP+RljiWQE5gMTzgcG5mskYhgNWw0Gz0tRwMIjaDZypk7h6V6O?=

=?iso-8859-1?Q?MReBEJEz5x61V9XJWFp2l5n8em1hUF625igQOZWoOZ2Rdohwu2pnahkiFN?=

=?iso-8859-1?Q?3PaCTebRIG5J1YSQ5nu9XjfAdEFMWORyUDRdP8lWOxretSJrwzLjxOlXQc?=

=?iso-8859-1?Q?lUI/8OLlnhMqt60mpS+zw3Ougf1QZYTXZU4a/s5fDi9U3Qy2s3MB30tnu7?=

=?iso-8859-1?Q?//Tz0YWi9ukn5BaUCOhiFh+E74YqrHQGwHwlZRlTiS5Zss69oj3cfXavct?=

=?iso-8859-1?Q?BUlhH+RNeRywCXWpGtGTTSobyn9qs29Yc9oriTjjcZcd/jl8RPNfkAvwLo?=

=?iso-8859-1?Q?ZBbbD1DPW1uJMiS8DM6LuoEukJtc+EucPXahf1omb7vH5b6XKdUjaWclqV?=

=?iso-8859-1?Q?ahkki8l2LxbH1zFj+bKVWBoPd4bgM6BbLrp7LfcVMP8pw3IJ8CWxZZ/yJT?=

=?iso-8859-1?Q?/cHI8PqZ6YezYOUDGzVDgWNHWR4GCCTZwXHrQNtKw=3D?=

Content-Type: multipart/alternative;

boundary="_000_OSNPR01MB74583EB424A67F1866381324C8A32OSNPR01MB7458apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: OSNPR01MB7458.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: cf477a4b-d5ff-4a97-2650-08dd6e93502b

X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Mar 2025 07:28:34.0602

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TY2PPFFE25ECB78



--_000_OSNPR01MB74583EB424A67F1866381324C8A32OSNPR01MB7458apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



HI,



With your permission I would like to send you an audit report of your websi=

te with prices showing you a few things to greatly improve these search res=

ults for you.



May I send you a quote, Price List?



Thanks,

Suneeta Varma



--_000_OSNPR01MB74583EB424A67F1866381324C8A32OSNPR01MB7458apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








s-serif; font-size: 12pt; color: rgb(0, 0, 0);">

HI,



s-serif; font-size: 12pt; color: rgb(0, 0, 0);">







s-serif; font-size: 12pt; color: rgb(0, 0, 0);">

With your permission I would like to send you an audit report of your websi=

te with prices showing you a few things to greatly improve these search res=

ults for you.



s-serif; font-size: 12pt; color: rgb(0, 0, 0);">







s-serif; font-size: 12pt; color: rgb(0, 0, 0);">

May I send you a quote, Price List?



s-serif; font-size: 12pt; color: rgb(0, 0, 0);">







s-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Thanks,



s-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Suneeta Varma








--_000_OSNPR01MB74583EB424A67F1866381324C8A32OSNPR01MB7458apcp_--

Web/SEO/App spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 28 Mar 2025 15:08:00 -0600

Received: from mail-vi1eur02olkn2105.outbound.protection.outlook.com ([40.92.48.105]:57921 helo=EUR02-VI1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1tyGvd-000000008Ax-0J37

for dave@doctor.nl2k.ab.ca;

Fri, 28 Mar 2025 15:07:58 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=SnuAUBI/zCLXL8QvUs2fThCvjh7YQO1sHyE5uEP3rhYiYM3dtToz9y7besoBjGhlnSLUW0JKyfkQrDPzf9Ex1MPo+XEwQTqrOxPFax15t2exTiU8jFklZKzB+LnLXkQEMXSf/IqugiLM2iP3kC3iTeo7bQ+T7MK+Qoz2glaZrfsWHcTlIxx/dGjWKmTQyX5cCnkT/mbMGUt8AkXS8iAmJK+SWJhBWvI7i6pIaL/ByQXbMgiF6QQH4+iwQUAJDeYawgMNTOpPnl0gO8OHRSMKzn8w6jg3SrNxlyxVikUpZgYN71etHAIUcic6w5aX48ALVm222ThksC2g8ynh9O+THw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=7JI8guLsZJ0gh8bPFoa52IfYRRfP/9rgV+WKqq4IjRg=;

b=EJOwEDzAZR6IBojJpWTxY2rhBxctHUFwiVC3LP23iGe9Dhv9xraAnFAfOEjXXeLP9UP7rCsepF6ipIGZjKv6uHNb5oLXuyy0uZjrkJ4PTgrg2mO1rSOiSOCHH0hJVepExSuSG6GT3rf61IBfuIL0CvZlw0bG3zDuvPqrSaClKpQRbS/Z4ktbgB7UZ0vWyR01cTGyXvqdaGlgd/YS+U2jXEJcZMCaiS8/5fDPEeiqG0RJQQVfrAdQL3ag/lP5aL5AxT+1l+6DYLcmiVXVPETy/AvMnB5lW2pfZaUewrmPqXgBZURtUtLmSavGWV6On5sLPogefSeKAcFxoXnxor7uGw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=7JI8guLsZJ0gh8bPFoa52IfYRRfP/9rgV+WKqq4IjRg=;

b=P4Nv5xiI8UfrP54hiw0Sp1LBEy20C1uJRX+nmfQfgbVSmK4iUEEfH6GquHYE3pHr7HDl+vXttWY2FHXC/QqcVsas0K/BcCnYWXmKLRblV0jHkxqnrZ/eO0RFkkhi3HnYukOz513FutvLZ0+9TJylB+8ixKaVMQKzpWYCzpQkwEDOgaDDV4arVd5pnIV46Vln6hmRlpdIm+2zOj6isGoVRp0hpZ+ZgekWfPGFiTT6yaXvim19IuG3d35Q/YEaE0er5ls1z8l8eWufro6q2RXWO5Vz3cn8DL/yCdEeAwsvffOPpVxdi6H3DaVgaBHbkkkfNSnT0lzDp5TcDwrnJwbnqQ==

Received: from GV1PR02MB8586.eurprd02.prod.outlook.com (2603:10a6:150:96::14)

by GV2PR02MB9614.eurprd02.prod.outlook.com (2603:10a6:150:df::6) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8534.44; Fri, 28 Mar

2025 21:05:05 +0000

Received: from GV1PR02MB8586.eurprd02.prod.outlook.com

([fe80::2efe:4214:1a55:5d3e]) by GV1PR02MB8586.eurprd02.prod.outlook.com

([fe80::2efe:4214:1a55:5d3e%7]) with mapi id 15.20.8534.043; Fri, 28 Mar 2025

21:05:05 +0000

From: Shiv Shankar

Subject: An Important guides Message trying to reach you (again)..

Thread-Topic: An Important guides Message trying to reach you (again)..

Thread-Index: AQHboCT5pP9ryHuc6ESkpy7bF0nndQ==

Date: Fri, 28 Mar 2025 21:05:05 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-exchange-messagesentrepresentingtype: 1

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: GV1PR02MB8586:EE_|GV2PR02MB9614:EE_

x-ms-office365-filtering-correlation-id: ff603e0b-6ac4-48cb-0b81-08dd6e3c36b0

x-microsoft-antispam:

BCL:0;ARA:14566002|7092599003|19110799003|15080799006|12050799009|8062599003|9400799030|15030799003|7071999006|461199028|8060799006|1602099012|440099028|4302099013|3412199025|10035399004|102099032|12071999003|21061999003;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?jvIHdlOZjf0QvpGudB6ILU+SwbaCCBrpgN8Lv/tRXAeiCagKLUxNSKxA?=

=?Windows-1252?Q?ETKgZ2GI+7bMf+vYU0AiSqAX5//gKxVq5Gi5O2GngRDsY/xiMuXMkPSP?=

=?Windows-1252?Q?RJ6745etlJGCOaZ70Lzyz4e7UU03owNA275MnhMLltNH+/ac4eZdVQIk?=

=?Windows-1252?Q?Ne+x8MvaR/KrQRlk5XpHPoc8BFDcvv5hGWd2wxB3KpuQF/OO6+g+WRdW?=

=?Windows-1252?Q?tRrkQwUsh8TgYOys+bM1bMWKhrV/NNZVR/rooJzdyvsjMC6hB5LJHDnP?=

=?Windows-1252?Q?C7FWEvByCJ8EOFQMQtVZPVnTuih1xdmzJtPgwAH6pNyhkClcVwuCj6PE?=

=?Windows-1252?Q?ezVP8Yf21R9yIN2a8qf67DcYH03qwuafMFjs66r8VSLVuk7MeaeE7fD7?=

=?Windows-1252?Q?dRCx8sbF4nXX9wNbSSi7KCe5ZmJvXkLGHVyVLfT11AGiDzVOauEVGVOX?=

=?Windows-1252?Q?vC31gp8WTHvqFum/KMJSKYiwEFDZVEHd4v7hE7kCPZTZNO4JLqX/7XWG?=

=?Windows-1252?Q?zCdPeiw33Zvw7KpU8MmqE6d380YazPYDhALmEkM+gsz1q+2qzAITRatR?=

=?Windows-1252?Q?a8Aacspw8hbpmnfJyQ2Hc1dCKry/bFhcCOcck/5tn1SyL4qCuDi16rQQ?=

=?Windows-1252?Q?UZpHpFjlDnvzJxI0JRHWE8e0KJ6q6C0gGe4X/ryqHcBtXuMBLIRyRJt7?=

=?Windows-1252?Q?YS6cVldaXAZ7B0mfQ0ryKfxNLYBpMof5JtezaYRya2GseiP5Izfbjqj+?=

=?Windows-1252?Q?NiqGvOrhmmL4GFy3j3c+bznlSPOUk6dKyqJ6zQylc8xIg26vzc7jkC+H?=

=?Windows-1252?Q?i4AEqpOGlsUEF+W6FwLnWEBJtHI2oFSrYxNkcYjOPFjIOCM7G+sJ7vu4?=

=?Windows-1252?Q?n9AQgPr/PBuFqPv8owtZJaMXtreyPkUA/A/WbJibq789tP4uMQHD6Z60?=

=?Windows-1252?Q?puQjvToCiRPDpbFUMiaaT/vFV7JjZ+bkXxzijaAoifEXK9PPVvDqs7aM?=

=?Windows-1252?Q?TmA330u3BScVb1xkmk1sz7UTP+t+LgMe6yhN8mTYj8E1f2mSqBaTle9a?=

=?Windows-1252?Q?LU+f4u6jj/hN39mGWVqnsSO+6pbAUzbceztWVyBu9DBFj0p4+4RUUd2/?=

=?Windows-1252?Q?B47ncOX3CpChPEVKTwi4r+cf+kiYZcYMEfm8qjlneCVTfVrOnR8qFtbh?=

=?Windows-1252?Q?WOAh518IxZ/JLYdz1823odhC506/DZPwbJO2T2yGCO/4FozqJhs2UipN?=

=?Windows-1252?Q?F3GxsFlizPoG9FmXJ+OMuLvcGdXgQ2dkKOSsrs03EGgwnRorB/oUQlK/?=

=?Windows-1252?Q?JFlZGvjqxqBBJUFeGYtIcsvBZoaT14IylO90NDQtIbn7o4WP5ExOkgAQ?=

=?Windows-1252?Q?80KEhKbY+XSLTn+WJNHJrurWG4OthiZSLK3rXHiz3miBk0N9icoN2/GJ?=

=?Windows-1252?Q?F9KeiTC52aTY0mAUA/C9lWLae703xVFsAyLJAuH7cEXCl32NbqFf/Ghr?=

=?Windows-1252?Q?7WZZ5zCJkpK3Di7OWEdUN94NcPspjw=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?/Tr+U2s8HxuGlMV4eAVoQoBxmyUq80oJb1AE6wleSpTAsUrPFpYewAav?=

=?Windows-1252?Q?w6JYKXxpDcBEuBiMb8lWG0ngxg9shRjTUOrfXifLV0qGrG1JaHT4gPtV?=

=?Windows-1252?Q?p+4pjpuv/yPHzfa4AjzD3oAdKq9qirR8X1UC4YS0EbfhvixG8EdFSiWP?=

=?Windows-1252?Q?/AGMlrroSDzvdd5ujjBZoheCOsbNPqDWEFhgYErN5zonobMrlaCEtJrB?=

=?Windows-1252?Q?r9KVnCYbt/GCVMRQ+qzDwfQPanOR3H2kRfEoB4k4ZPk8MQRfrdKNX0Q/?=

=?Windows-1252?Q?qz7RLN083oo7MsJ0g8XKxFT7llVy18fPbT5pFaDMvJwI27jSHKsh0FTj?=

=?Windows-1252?Q?+NFsFzeC5sBEQyf8rP/RYR5bXgnWL1IRbS4Q1ri5Jvk5MK9heaOmZ3F0?=

=?Windows-1252?Q?PBbio1IF/i4hNtKpP5z2IysiLT2meyeC1kq20y++vbMOKGhPdnAr2f44?=

=?Windows-1252?Q?3VrlGeXLlgNpRfD+1mpV9UV17Aje55JBSLoPQV3+GNJ4gN7Z3xLlSPAl?=

=?Windows-1252?Q?ERWSlWF3Lvb77SgF/404blxR6E8Ey4YkYridJnsrEI2Fw+dOq17xAs+L?=

=?Windows-1252?Q?JtMzeTQ6Fto7wUue8rVKLyk8xgqAAX5l6d6Y3VfOCcWqv3WfCVVAxsqJ?=

=?Windows-1252?Q?yRZzcSByKq3+oB/9C/+fZh9tJR4T2MJ3jUJvGmwX/8IV1apqFZu6uke5?=

=?Windows-1252?Q?Wxt9a02TDqstzz4xsYU7y0I0c724D3f2a2+rwEjvm+PdoTk6Q1wvLfgE?=

=?Windows-1252?Q?w8nXV1MR5SopgdUUmKlChvGNBlCLD7ueFFXehXK8WDP0Ow8/+XRpN/v8?=

=?Windows-1252?Q?9v2zKLzHdsUAu9qxV1tZ8b4Z+nKugwWOHNE3RDLuxoNa5atFdRkIWFhu?=

=?Windows-1252?Q?9JNDy1XxoPE5/PSqgWBu/QRk8XHY64NuoBoKstdh/PpRAjNr+UaZldGr?=

=?Windows-1252?Q?/wBA/RWPiF5AAmI2M5VjSRXKckFWAS7cb5isW+beZ+7WX0w4cqSxaP+n?=

=?Windows-1252?Q?oEv4qeawX8a4OVAa3wwesDzYlo1u20O7zt7eOn4ugZbuMagqe68t4QPi?=

=?Windows-1252?Q?MxChMcjcee5BtXnl2kJo9zc/eNMq2Qxnb633/8bCT5HgU0rRPKuEU43R?=

=?Windows-1252?Q?zgXHWuGPGrq30dBsf/VIBG4lgI0AzrodmzdJUZAOroHy0fV4/0cSKJhj?=

=?Windows-1252?Q?HuFLYqZrDdLj03VqS+beqn/sYwPgXOCmh3jBArmY29jEpmP9ukEuoJOF?=

=?Windows-1252?Q?xYbR5FRK/CmERVzmkobVOfBh/XF4yOnp2B56dgMtQZ+j+xYFd/oYz3lU?=

=?Windows-1252?Q?8ALQnLKeDujULHFzKxW1+kr9xhIdzmZZN1STwZOJp6d9uoNvJeeEHaIh?=

=?Windows-1252?Q?YnyjdX3/iw2MWJGoFi97QgF0f90Y/19EV5ariLcpcRr97GNUp0aM23/h?=

=?Windows-1252?Q?LvkNMrWd0qUR3rvDvI6Gvg=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_GV1PR02MB8586B7023BEFB9B682400728EEA02GV1PR02MB8586eurp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: GV1PR02MB8586.eurprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: ff603e0b-6ac4-48cb-0b81-08dd6e3c36b0

X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Mar 2025 21:05:05.0767

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV2PR02MB9614

X-Spam_score: 12.3

X-Spam_score_int: 123

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Something truly extraordinary is happening in your energy

field right now—something that only occurs once every 19 years. Recently,

I sensed a powerful shift within you, an awakening that has opened a rare

cosmic doorway just for you. Moments like these are rare, and I knew I had

to reach out.



Content analysis details: (12.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10a6:150:96:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:96:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:96:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:96:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:96:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:96:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:96:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:150:96:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[40.92.48.105 listed in will-spam-for-food.eu.org]

[40.92.48.105 listed in will-spam-for-food.eu.org]

[40.92.48.105 listed in will-spam-for-food.eu.org]

[40.92.48.105 listed in will-spam-for-food.eu.org]

[40.92.48.105 listed in will-spam-for-food.eu.org]

[40.92.48.105 listed in will-spam-for-food.eu.org]

[40.92.48.105 listed in will-spam-for-food.eu.org]

[40.92.48.105 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2603:10a6:150:96:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:96:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:96:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:10a6:150:96:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[40.92.48.105 listed in dnsbl.ahbl.org]

[40.92.48.105 listed in dnsbl.ahbl.org]

[40.92.48.105 listed in dnsbl.ahbl.org]

[40.92.48.105 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2603:10a6:150:96:0:0:0:14 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2603:10a6:150:96:0:0:0:14 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2603:10a6:150:96:0:0:0:14 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2603:10a6:150:96:0:0:0:14 listed in]

[dnsbl.ahbl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.48.105 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.48.105 listed in list.dnswl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.3 FROM_LOCAL_HEX From: localpart has long hexadecimal sequence

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[outlook_0d6a1b4ca469fe8b(at)outlook.com]

1.2 MISSING_HEADERS Missing To: header

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

1.0 IMPRO_URI_2 No description available.

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 IMPRO_URI_3 No description available.

Subject: {SPAM?} An Important guides Message trying to reach you (again)..



--_000_GV1PR02MB8586B7023BEFB9B682400728EEA02GV1PR02MB8586eurp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Something truly extraordinary is happening in your energy field right now=

=97something that only occurs once every 19 years.



Recently, I sensed a powerful shift within you, an awakening that has opene=

d a rare cosmic doorway just for you. Moments like these are rare, and I kn=

ew I had to reach out.



But I can=92t reveal everything here=97you need to access your personalized=

reading to uncover the full message waiting for you.
ofsvh3fwmfg-g.hop.clickbank.net/>



Your spirit guides have an urgent message for you=97something they deeply w=

ant you to see and understand. They have been reaching out, and I feel call=

ed to pass this on.



I truly hope you take this opportunity to hear what they have to say. You w=

ere meant to receive this at exactly this moment.



Let me know if this resonates with you=97I=92d love to hear your thoughts.



With light and clarity,

Marry Clair





--_000_GV1PR02MB8586B7023BEFB9B682400728EEA02GV1PR02MB8586eurp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








background-color: white; margin: 0px; font-family: Aptos, Aptos_EmbeddedFon=

t, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: black;">

Something truly extraordinary is happening in your energy field right now=

=97something that only occurs once every 19 years.



background-color: white; margin: 0px; font-family: Aptos, Aptos_EmbeddedFon=

t, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: black;">







background-color: white; margin: 0px; font-family: Aptos, Aptos_EmbeddedFon=

t, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: black;">

Recently, I sensed a powerful shift within you, an awakening that has opene=

d a rare cosmic doorway just for you. Moments like these are rare, and I kn=

ew I had to reach out.



background-color: white; margin: 0px; font-family: Aptos, Aptos_EmbeddedFon=

t, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: black;">







background-color: white; margin: 0px; font-family: Aptos, Aptos_EmbeddedFon=

t, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: black;">

But I can=92t reveal everything here=97
h3fwmfg-g.hop.clickbank.net/" target=3D"_blank" id=3D"OWAbd28e584-bdb3-fc94=

-6f4c-22c147c18442" class=3D"x_OWAAutoLink" title=3D"https://ce3a6co4xb52go=

fsvh3fwmfg-g.hop.clickbank.net/" rel=3D"noopener noreferrer" data-auth=3D"N=

otApplicable" data-linkindex=3D"0" style=3D"margin: 0px;">you

need to access your personalized reading to uncover the full message waiti=

ng for you.



background-color: white; margin: 0px; font-family: Aptos, Aptos_EmbeddedFon=

t, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: black;">







background-color: white; margin: 0px; font-family: Aptos, Aptos_EmbeddedFon=

t, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: black;">

Your spirit guides have an urgent message for you=97something they deeply w=

ant you to see and understand. They have been reaching out, and I feel call=

ed to pass this on.



background-color: white; margin: 0px; font-family: Aptos, Aptos_EmbeddedFon=

t, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: black;">







background-color: white; margin: 0px; font-family: Aptos, Aptos_EmbeddedFon=

t, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: black;">

I truly hope you take this opportunity to hear what they have to say. You w=

ere meant to receive this at exactly this moment.



background-color: white; margin: 0px; font-family: Aptos, Aptos_EmbeddedFon=

t, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: black;">







background-color: white; margin: 0px; font-family: Aptos, Aptos_EmbeddedFon=

t, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: black;">

Let me know if this resonates with you=97I=92d love to hear your thoughts.<=

/div>


background-color: white; margin: 0px; font-family: Aptos, Aptos_EmbeddedFon=

t, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: black;">







background-color: white; margin: 0px; font-family: Aptos, Aptos_EmbeddedFon=

t, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: black;">

With light and clarity,



background-color: white; margin: 0px; font-family: Aptos, Aptos_EmbeddedFon=

t, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; co=

lor: black;">

Marry Clair



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">












--_000_GV1PR02MB8586B7023BEFB9B682400728EEA02GV1PR02MB8586eurp_--

WEb/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 28 Mar 2025 13:07:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1tyF2e-00000000DyG-1sdW

for dave@doctor.nl2k.ab.ca;

Fri, 28 Mar 2025 13:06:56 -0600

Resent-From: The Doctor

Resent-Date: Fri, 28 Mar 2025 13:06:56 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f45.google.com ([209.85.216.45]:57520)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1tyDZe-00000000O9g-33aq

for root@nk.ca;

Fri, 28 Mar 2025 11:33:04 -0600

Received: by mail-pj1-f45.google.com with SMTP id 98e67ed59e1d1-2ff6e91cff5so4412432a91.2

for ; Fri, 28 Mar 2025 10:30:59 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1743183053; x=1743787853; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=BDqXcNML6dbD8IM2X3M40lTpUts3N/5QXoU3p1KrDvY=;

b=d3lKRax4wmT4vlXPgZ/wokU1NJkowBDPL1SzGVhvlRVEne4tRAES9xz5Lw2pz6mtly

Er47VPdrNynG8w6FMFbbaSlb1DcTvJd2qFo0H3GP7rK5HLVf9xBVQdp06FsKFOtkCmJC

4e+P7rv48iu3Ji8qbXOB7ZxLCiOpwGtQeyJv4+us+ESxuPTC+2sUHlOZMcnE2g2J8n4d

UBFi/ozRFSCh6t7rzejnh9yWPkW+R3d+Pv9pU3JV4Y1BVnFODuToEpsIeOlmHBkYg5wA

iagOalUCUTXSONLOswvxdb4pP0wr6sxbkgE4qKF/y+DcB/YMgsHWoY0iUPBQbX+YPJ+9

4RPg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1743183053; x=1743787853;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=BDqXcNML6dbD8IM2X3M40lTpUts3N/5QXoU3p1KrDvY=;

b=Ywr0mDHrBfs1OgK1lhN5l4OfFHfl1a+daoIobrrvodv9mbHKQalVV+KXSAdyUz711n

kNr62Tkup8qkINe0VvH2Vb91B3EeBlwSLaWGiuO6SDVL/mHaIES/kfxedgB5IGoapOF5

DShCGW6J4GXmiEPRk6KVqnPPftu7Za5cjWzxyNYTzSVl+CWQrMVTXZDEtnHQOvTmr9yA

oEfksJCKi0c7cflU7XRTADqQspl15Pn4sioJYgGVCm//dLqhJ39OtdUo+YxZ2yZUP3iE

eYvND5nUL8GGJT/eabdNk4Pp8FOzGsquwV7f9NacLxm4yjn1HgFZoiTQ1hCDX5a29hbF

C4UQ==

X-Gm-Message-State: AOJu0Yxh6qqbgSPwEBITMlbLnCnfvcMOmRvIewsJxGMQ8LsN3/DV0qU7

cl78uCm9EgU67wlnzQSnPySS2GtQzrvXki74lqAcvONn01DyaAbtskbCWg2n

X-Gm-Gg: ASbGncsloF2PVWxTEgH0A1u/sJl4SmVUejqKoatBjqZBYXOfLj0SSndw+Ai686yAoEI

HwfZ2rat8UFmxSdNBZ3tWNviRAF2ejAePMSo17kZjwbDdwY/5vmP2SPmYJw27FylFW2LKi2+R04

aeR42R6UkgIKdjKAypl//rE7QubMC2mrel8afhqyckJnlGfHq2J3RyBugaJH7xoyYg1k79zZVsJ

yWkXUCYijIj5x0SyldtufuYPGa37NOfzMNK2bexP3THUosDTO4Fu56KG1rdLttEae8OrVMm5e0s

xO80ZphynsC5BtPfPLOJrhjCyxfZv/9q2vK9I2iSifqYE+1AHH5XjG8LYd89v3YE/kl3

X-Google-Smtp-Source: AGHT+IGc08cE9J0+ukyuxpzB3whCSeaQDlsz7k2tNRRL+yoiyHgTRiE2rvO9sHqggHNWDu741Pu9lg==

X-Received: by 2002:a17:90b:2704:b0:2ee:d7d3:3019 with SMTP id 98e67ed59e1d1-30531fa4f43mr197382a91.12.1743183052609;

Fri, 28 Mar 2025 10:30:52 -0700 (PDT)

Received: from DESKTOP1B92V7I ([2401:4900:81f9:26d1:892b:6751:ed16:8b3b])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-30516d623b0sm2180469a91.24.2025.03.28.10.30.50

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 28 Mar 2025 10:30:51 -0700 (PDT)

From: "Claire"

To:

Subject: Re: Mobile App.

Date: Fri, 28 Mar 2025 23:00:16 +0530

Message-ID: <088401dba007$26bf2d40$743d87c0$@com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0885_01DBA035.40776940"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdugBvMoKO/iqHZFSryOrsHuQMn69A==

Content-Language: en-us

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi,root@nk.ca How are you? I provide website design; Word

Press, Creative UX & UI, Web Design, Mobile App, E-commerce and new site re-design

+ SEO services



Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2401:4900:81f9:26d1:892b:6751:ed16:8b3b listed]

[in will-spam-for-food.eu.org]

[2401:4900:81f9:26d1:892b:6751:ed16:8b3b listed]

[in will-spam-for-food.eu.org]

[2401:4900:81f9:26d1:892b:6751:ed16:8b3b listed]

[in will-spam-for-food.eu.org]

[2401:4900:81f9:26d1:892b:6751:ed16:8b3b listed]

[in will-spam-for-food.eu.org]

[2401:4900:81f9:26d1:892b:6751:ed16:8b3b listed]

[in will-spam-for-food.eu.org]

[2401:4900:81f9:26d1:892b:6751:ed16:8b3b listed]

[in will-spam-for-food.eu.org]

[2401:4900:81f9:26d1:892b:6751:ed16:8b3b listed]

[in will-spam-for-food.eu.org]

[2401:4900:81f9:26d1:892b:6751:ed16:8b3b listed]

[in will-spam-for-food.eu.org]

[209.85.216.45 listed in will-spam-for-food.eu.org]

[209.85.216.45 listed in will-spam-for-food.eu.org]

[209.85.216.45 listed in will-spam-for-food.eu.org]

[209.85.216.45 listed in will-spam-for-food.eu.org]

[209.85.216.45 listed in will-spam-for-food.eu.org]

[209.85.216.45 listed in will-spam-for-food.eu.org]

[209.85.216.45 listed in will-spam-for-food.eu.org]

[209.85.216.45 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.45 listed in dnsbl.ahbl.org]

[209.85.216.45 listed in dnsbl.ahbl.org]

[209.85.216.45 listed in dnsbl.ahbl.org]

[209.85.216.45 listed in dnsbl.ahbl.org]

[2401:4900:81f9:26d1:892b:6751:ed16:8b3b listed]

[in dnsbl.ahbl.org]

[2401:4900:81f9:26d1:892b:6751:ed16:8b3b listed]

[in dnsbl.ahbl.org]

[2401:4900:81f9:26d1:892b:6751:ed16:8b3b listed]

[in dnsbl.ahbl.org]

[2401:4900:81f9:26d1:892b:6751:ed16:8b3b listed]

[in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.45 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.45 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.45 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.45 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.45 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.45 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[clairehannah9780(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[clairehannah9780(at)gmail.com]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Re: Mobile App.



This is a multi-part message in MIME format.



------=_NextPart_000_0885_01DBA035.40776940

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit



Hi,root@nk.ca



How are you?



I provide website design; Word Press, Creative UX & UI, Web Design, Mobile

App, E-commerce and new site re-design + SEO services



Please share your thoughts and concerns with availability so we can schedule

a chat to discuss further.



Can I send you a price list?



Regards,



Claire,



P.S. : If you are not interested in our services, please write Unsubscribe

in the Subject and send it to us.









------=_NextPart_000_0885_01DBA035.40776940

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>

Hi,root@nk.ca


class=3DMsoNormal>How are you?

I provide website =

design; Word Press, Creative UX & UI, Web Design, Mobile App, =

E-commerce and new site re-design + SEO services


class=3DMsoNormal>Please share your thoughts and concerns with =

availability so we can schedule a chat to discuss further.


class=3DMsoNormal>Can =

I send you a price list?

Regards,


class=3DMsoNormal>Claire,

P.S. : If you are not =

interested in our services, please write Unsubscribe in the Subject and =

send it to us.


class=3DMsoNormal> 



------=_NextPart_000_0885_01DBA035.40776940--



Web/Seo/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 28 Mar 2025 07:21:01 -0600

Received: from mail-oa1-f68.google.com ([209.85.160.68]:55378)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ty9cn-00000000HMM-21w0

for dave@doctor.nl2k.ab.ca;

Fri, 28 Mar 2025 07:20:03 -0600

Received: by mail-oa1-f68.google.com with SMTP id 586e51a60fabf-2c6f27599abso612773fac.2

for ; Fri, 28 Mar 2025 06:17:58 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=bluedigitalmedia-agency.20230601.gappssmtp.com; s=20230601; t=1743167872; x=1743772672; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=OV8zaSJp0rZXFEX2xRwu/8Y3ThW3L+5XeD1kqpIuSvw=;

b=xebi+upHIyqFojbsKokabdaUlFmWalWXGDZ3SKf99qMEnSF6kOaG4S6XEo9j+n3voe

ZIsfh9PpVJb2qPZAymbJtJxvKUB+dbRhpvGievhJ4U0UKFr714XEdsT6zKdb8n0FX/jh

WGDb4sCHxrer5mYv01lnFkVbKz7sx065IFjuHBTS6S2xSwmFqrTvKGYnkpQZnwZT6lfM

TXgChkjPWLZNCBojw6pvy0JsEmAkz7RT0XfNfkw2M0PCUuRh+wnuYwgVjsM3A36rAKBf

7H3G3G4zASmIcR9L4/RZM/Xs/+4CYPKviNOqnnBBiX/gBQ3MHYawoxf1wPP6lYCh1aLY

HiwQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1743167872; x=1743772672;

h=to:subject:message-id:date:from:sender:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=OV8zaSJp0rZXFEX2xRwu/8Y3ThW3L+5XeD1kqpIuSvw=;

b=WYsdc4K7isysvf2ONDd4GiESC1FO3jsyIiPegwQ4aeEVYK9xm+qWZh9/D5O8xlPCQI

mAxa8VOpK+cyKpP3s4EJRBtOI05RzI0uKEnLEsP8+j4ZM3K0IeimOLzSCjqxaGpzfA6B

VOhWSIfDES0ubTiGS0IgdgYE/LiVXJ/TbBWPd6qbg7+JMeMDlCZLVr5G71D+OFRQHAiv

Q/rEgUU/pRrhyRAwvDqdGHdLOeSFGCbDBnJHFr698lpqCZwyfzIAXdKgPw4EAH9SbagL

0FmorNfeFNTWi9pPCoroonTo8VN0XR56+yOBraVuGxR854HaISRNgfvZKIw4DAKWBWkl

N+cA==

X-Gm-Message-State: AOJu0YyM8ciy7oZnUeR7Uko4lRQszwE0CZMD/1Z6yXaMZgF64k5NuGYJ

oSmKiZf9fbKuzPKgiImzzAZnpWTNkY3t5O7lltD2fglhymo3gXzu19jcxZEIDpVEj5ucV1gVkTu

8jQVs2sH9CG34xe8Y27tMlnvXsQgjvJfGcgYLKGK8dW25I4w1gqbYOg==

X-Gm-Gg: ASbGncvN+Me4jrxSLOhmkYXnm+HjoxVbhWu9wcBxq7tFw8SAOFhxg2CFIGJrGVNWO5u

Ps0ewO7uLHHS9AhrzJ96ADFuyaZ8gKg9UFkSyzABJDyYdGudTura+dHfFk23vJ6whp3oDFgXbk6

VWwkHsaC+PvAAjWTpOQeV8nR/yaw==

X-Google-Smtp-Source: AGHT+IH7oJbrZtiGBzRVq2OPTdvAhUoMaxhnfug1KukQ9iYDp/BUNxkraS+mHfFtEnIqrBAFRCnM3MKAP4bpSlpUX2k=

X-Received: by 2002:a05:6871:4145:b0:2b8:2f9c:d513 with SMTP id

586e51a60fabf-2c848006687mr4677870fac.19.1743167872097; Fri, 28 Mar 2025

06:17:52 -0700 (PDT)

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Fri, 28 Mar 2025 06:17:51 -0700

Received: from 52669349336 named unknown by gmailapi.google.com with HTTPREST;

Fri, 28 Mar 2025 06:17:50 -0700

MIME-Version: 1.0

Sender: "Blue Digital Media & Web Solutions"

From: "Blue Digital Media & Web Solutions"

Date: Fri, 28 Mar 2025 06:17:51 -0700

X-Google-Sender-Auth: qqqSUGZT0N5dDEPRg6vPUN2hbgY

X-Gm-Features: AQ5f1Jr7rZbBKrEgoh_zGMVV-xC9D56JNtOoK4qEANnT5agaZ0t-FE95eQJ7XB4

Message-ID:

Subject: =?UTF-8?Q?=2D_Your_Local_Business_Is_Invisible_on_Google_=E2=80=93_Cus?=

=?UTF-8?Q?tomers_Can=E2=80=99t_Find_You=21?=

To: Dave

Content-Type: multipart/alternative; boundary="000000000000ccee26063166e525"

X-Spam_score: 10.4

X-Spam_score_int: 104

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear *Webmaster*, I hope you are doing well. We noticed that

your local business may not be appearing in Google search results, which

can significantly affect your ability to attract local customers and increase

foot traffic. After conducting an [...]



Content analysis details: (10.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.68 listed in will-spam-for-food.eu.org]

[209.85.160.68 listed in will-spam-for-food.eu.org]

[209.85.160.68 listed in will-spam-for-food.eu.org]

[209.85.160.68 listed in will-spam-for-food.eu.org]

[209.85.160.68 listed in will-spam-for-food.eu.org]

[209.85.160.68 listed in will-spam-for-food.eu.org]

[209.85.160.68 listed in will-spam-for-food.eu.org]

[209.85.160.68 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.68 listed in dnsbl.ahbl.org]

[209.85.160.68 listed in dnsbl.ahbl.org]

[209.85.160.68 listed in dnsbl.ahbl.org]

[209.85.160.68 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.68 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.68 listed in dnsbl.ahbl.org]

0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.68 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.68 listed in wl.mailspike.net]

0.3 LONGWORD BODY: Uses overlong words

0.6 MEGALONGWORD BODY: Uses really overlong words

0.0 HTML_MESSAGE BODY: HTML included in message

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

Subject: {SPAM?} =?UTF-8?Q?=2D_Your_Local_Business_Is_Invisible_on_Google_=E2=80=93_Cus?=

=?UTF-8?Q?tomers_Can=E2=80=99t_Find_You=21?=



--000000000000ccee26063166e525

Content-Type: text/plain; charset="UTF-8"



Dear *Webmaster*,



I hope you are doing well.



We noticed that your local business may not be appearing in Google search

results, which can significantly affect your ability to attract local

customers and increase foot traffic. After conducting an initial analysis,

we identified several key areas that may be impacting your local search

visibility:



1. Incomplete or Inaccurate Google My Business (GMB) Listing: Your GMB

profile may be missing crucial information, such as business hours, contact

details, or accurate location data. Optimizing your GMB listing will

improve your chances of appearing in local searches.



2. Lack of Local Backlinks: Your website has a limited number of local

backlinks from authoritative sites within your community. Building

connections with local businesses and directories can help enhance your

credibility and search ranking.



3. Missing Location Keywords: Your website content lacks

location-specific keywords that help customers find your business.

Including city and neighborhood names throughout your content can boost

your visibility in local search results.



4. Poor Online Reviews and Ratings: Low or few customer reviews can

hurt your local reputation. Encouraging satisfied customers to leave

positive reviews can significantly impact your ranking and credibility.



5. Inconsistent NAP (Name, Address, Phone Number) Information:

Inconsistent contact information across directories and platforms can

confuse search engines and lower your ranking. Ensuring consistent NAP

details is crucial for local SEO.



6. Unoptimized Meta Tags: Your meta titles and descriptions do not

include local keywords, which limits your chances of appearing in localized

search results. Crafting location-specific meta tags can enhance your

ranking.



7. Lack of Social Media Integration: Your business may not be taking

advantage of social media platforms to boost visibility. Engaging with your

community through social media can drive traffic and improve brand

awareness.



8. Missing Location Pages: If your business operates in multiple

locations, creating separate, optimized pages for each location can improve

your ranking and attract more local customers.



9. No Local Schema Markup: Implementing local schema markup helps

search engines understand your business location and contact information,

improving your chances of appearing in local search features.



Taking proactive steps to address these challenges will significantly boost

your local business visibility and help attract more customers. Our team of

SEO experts specializes in local business promotion and can provide a

comprehensive strategy to improve your online presence.



Feel free to reach out to us at https://bluedigitalmedia.ltd/



for a free consultation and tailored solutions.



Looking forward to helping your business thrive!



--



Best Regards,



Blue Digital Media & Web Solutions



www.bluedigitalmedia.ltd



info@bluedigitalmedia.ltd

+91 70082 11573

[image: beacon]



--000000000000ccee26063166e525

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




n-left:0cm;font-size:12pt;font-family:"Times New Roman","ser=

if"">
f"">Dear Webmaster,






2pt;font-family:"Times New Roman","serif"">
=3D"font-size:11pt;font-family:Verdana,"sans-serif"">I hope you a=

re

doing well.






2pt;font-family:"Times New Roman","serif"">
=3D"font-size:11pt;font-family:Verdana,"sans-serif"">We noticed t=

hat

your local business may not be appearing in Google search results, which ca=

n

significantly affect your ability to attract local customers and increase f=

oot

traffic. After conducting an initial analysis, we identified several key ar=

eas

that may be impacting your local search visibility:






12pt;font-family:"Times New Roman","serif"">
=3D"font-size:11pt;font-family:Verdana,"sans-serif"">1.
e=3D"font-variant-numeric:normal;font-variant-east-asian:normal;font-varian=

t-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-se=

ttings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-fam=

ily:"Times New Roman"">=C2=A0=C2=A0
tyle=3D"font-size:11pt;font-family:Verdana,"sans-serif"">Incomple=

te or

Inaccurate Google My Business (GMB) Listing:
font-size:11pt;font-family:Verdana,"sans-serif""> Your GMB profil=

e

may be missing crucial information, such as business hours, contact details=

, or

accurate location data. Optimizing your GMB listing will improve your chanc=

es

of appearing in local searches.






12pt;font-family:"Times New Roman","serif"">
=3D"font-size:11pt;font-family:Verdana,"sans-serif"">2.
e=3D"font-variant-numeric:normal;font-variant-east-asian:normal;font-varian=

t-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-se=

ttings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-fam=

ily:"Times New Roman"">=C2=A0=C2=A0
tyle=3D"font-size:11pt;font-family:Verdana,"sans-serif"">Lack of =

Local

Backlinks:
,"sans-serif"">

Your website has a limited number of local backlinks from authoritative sit=

es

within your community. Building connections with local businesses and

directories can help enhance your credibility and search ranking.
>




12pt;font-family:"Times New Roman","serif"">
=3D"font-size:11pt;font-family:Verdana,"sans-serif"">3.
e=3D"font-variant-numeric:normal;font-variant-east-asian:normal;font-varian=

t-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-se=

ttings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-fam=

ily:"Times New Roman"">=C2=A0=C2=A0
tyle=3D"font-size:11pt;font-family:Verdana,"sans-serif"">Missing =

Location

Keywords:
"sans-serif"">

Your website content lacks location-specific keywords that help customers f=

ind

your business. Including city and neighborhood names throughout your conten=

t

can boost your visibility in local search results.






12pt;font-family:"Times New Roman","serif"">
=3D"font-size:11pt;font-family:Verdana,"sans-serif"">4.
e=3D"font-variant-numeric:normal;font-variant-east-asian:normal;font-varian=

t-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-se=

ttings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-fam=

ily:"Times New Roman"">=C2=A0=C2=A0
tyle=3D"font-size:11pt;font-family:Verdana,"sans-serif"">Poor Onl=

ine Reviews

and Ratings:
na,"sans-serif"">

Low or few customer reviews can hurt your local reputation. Encouraging sat=

isfied

customers to leave positive reviews can significantly impact your ranking a=

nd

credibility.






12pt;font-family:"Times New Roman","serif"">
=3D"font-size:11pt;font-family:Verdana,"sans-serif"">5.
e=3D"font-variant-numeric:normal;font-variant-east-asian:normal;font-varian=

t-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-se=

ttings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-fam=

ily:"Times New Roman"">=C2=A0=C2=A0
tyle=3D"font-size:11pt;font-family:Verdana,"sans-serif"">Inconsis=

tent NAP

(Name, Address, Phone Number) Information:
nt-size:11pt;font-family:Verdana,"sans-serif""> Inconsistent

contact information across directories and platforms can confuse search eng=

ines

and lower your ranking. Ensuring consistent NAP details is crucial for loca=

l

SEO.






12pt;font-family:"Times New Roman","serif"">
=3D"font-size:11pt;font-family:Verdana,"sans-serif"">6.
e=3D"font-variant-numeric:normal;font-variant-east-asian:normal;font-varian=

t-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-se=

ttings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-fam=

ily:"Times New Roman"">=C2=A0=C2=A0
tyle=3D"font-size:11pt;font-family:Verdana,"sans-serif"">Unoptimi=

zed Meta

Tags:
t;sans-serif"">

Your meta titles and descriptions do not include local keywords, which limi=

ts

your chances of appearing in localized search results. Crafting location-sp=

ecific

meta tags can enhance your ranking.






12pt;font-family:"Times New Roman","serif"">
=3D"font-size:11pt;font-family:Verdana,"sans-serif"">7.
e=3D"font-variant-numeric:normal;font-variant-east-asian:normal;font-varian=

t-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-se=

ttings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-fam=

ily:"Times New Roman"">=C2=A0=C2=A0
tyle=3D"font-size:11pt;font-family:Verdana,"sans-serif"">Lack of =

Social

Media Integration:
:Verdana,"sans-serif""> Your business may not be taking advantage=

of social

media platforms to boost visibility. Engaging with your community through

social media can drive traffic and improve brand awareness.






12pt;font-family:"Times New Roman","serif"">
=3D"font-size:11pt;font-family:Verdana,"sans-serif"">8.
e=3D"font-variant-numeric:normal;font-variant-east-asian:normal;font-varian=

t-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-se=

ttings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-fam=

ily:"Times New Roman"">=C2=A0=C2=A0
tyle=3D"font-size:11pt;font-family:Verdana,"sans-serif"">Missing =

Location

Pages:
ot;sans-serif"">

If your business operates in multiple locations, creating separate, optimiz=

ed

pages for each location can improve your ranking and attract more local

customers.






12pt;font-family:"Times New Roman","serif"">
=3D"font-size:11pt;font-family:Verdana,"sans-serif"">9.
e=3D"font-variant-numeric:normal;font-variant-east-asian:normal;font-varian=

t-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-se=

ttings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-fam=

ily:"Times New Roman"">=C2=A0=C2=A0
tyle=3D"font-size:11pt;font-family:Verdana,"sans-serif"">No Local=

Schema

Markup:
uot;sans-serif"">

Implementing local schema markup helps search engines understand your busin=

ess

location and contact information, improving your chances of appearing in lo=

cal

search features.






2pt;font-family:"Times New Roman","serif"">
=3D"font-size:11pt;font-family:Verdana,"sans-serif"">Taking proac=

tive

steps to address these challenges will significantly boost your local busin=

ess

visibility and help attract more customers. Our team of SEO experts special=

izes

in local business promotion and can provide a comprehensive strategy to imp=

rove

your online presence.






2pt;font-family:"Times New Roman","serif"">
=3D"font-size:11pt;font-family:Verdana,"sans-serif"">Feel free to=

reach

out to us at
pot.com/29LE51vTDhsvwMRKXcCAQiiYdO6tz9gwmPauivZm6ZF3J1ubclQELfCGtSpbpf3HbFd=

JBTeNHpHc1ws5pAKewwRs89Ul2EMLRxQMPsKVj8YZd531TGAWlplos1OKignqgbzcf8SS3YUJ4s=

DLQFz94VIFj2N48j52iTKgE4lIs5GrfWKtDR9XUaltMD7Xk9Ko07C0" rel=3D"nofollow" st=

yle=3D"color:blue">
sans-serif"">https://bluedigitalmedia.ltd/
nt-size:11pt;font-family:Verdana,"sans-serif""> for a free

consultation and tailored solutions.






2pt;font-family:"Times New Roman","serif"">
=3D"font-size:11pt;font-family:Verdana,"sans-serif"">Looking forw=

ard to

helping your business thrive!



"gmail_signature_prefix">--

ature" data-smartmail=3D"gmail_signature">





ily:"Verdana","sans-serif";color:#222222">Best Regards,=






1IDGNbYQHieuAcMfLnSkdvziRgfoU0vzXjqAdXcxkKA15KwX0RoHrCftOjZai6ZZhpnNC2RvVfP=

">





an style=3D"font-family:"Verdana","sans-serif";color:bl=

ue">Blue Digital Media & Web Solutions
mily:"Verdana","sans-serif";color:#222222">
t>






digitalmedia-dot-yamm-track.appspot.com/2B-Stk5Wus67AHMJobTLy-JsJKc7_nUBr70=

iKlxRRAHbM1ubclQGEgfaMwWwDvkEzJSEr-BwdqdeKIkCVd6NH8Rj0opS77jz6cGGdo7JpFvlsD=

1voC7pSW6_X3o-x2QI8xsSHJybIgAHZ7Mf6s9x-JJDvkynxpysM8JGoI1GekqTzsSINXhFiY9fb=

os-mEIzXonE" rel=3D"nofollow" target=3D"_blank">
"Verdana","sans-serif";color:#1155cc">www.bluedigitalme=

dia.ltd
ans-serif";color:blue">



quot;;color:blue">info@bluedigitalmedia.ltd


+91 70082 11573
sans-serif";color:#222222">








Gg6dTRMcvHzImXl32MnXrMB__b3VDuk0HE1ubclQHV5QRP4HpJyAFKPFfLA6DRQjJpHEdNjEI2N=

F8tOC0I-QV5svWQLGhkNTwNbPAUw0heldJPy7fpOMKIRorBOh2RA2GRX367XCqe7ndyvJ8XAvMU=

-LR6Y474RWk" width=3D"1" height=3D"1" alt=3D"beacon" style=3D"display:none;=

display:none!important;">



--000000000000ccee26063166e525--

Payroll Phish from Romania

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 28 Mar 2025 06:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ty95a-00000000MrE-07Lf

for dave@doctor.nl2k.ab.ca;

Fri, 28 Mar 2025 06:45:34 -0600

Resent-From: The Doctor

Resent-Date: Fri, 28 Mar 2025 06:45:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.colinservices.com ([81.181.111.53]:43885)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ty8uZ-00000000KZx-1yb1

for doctor@nl2k.ab.ca;

Fri, 28 Mar 2025 06:34:18 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=dkim; d=colinservices.com;

h=From:To:Subject:Date:Message-ID:MIME-Version:Content-Type;

bh=SZq71pNcH/1dKnzA2VAR8myLnmFiXRJGin5KLqRwQks=;

b=ChxD0UYcIf2pAMisdOFBbAQGRHUD68mZ3Ekhrm42DtI2X5BpIsaNBeR8ju8Prf2iM47qacK2JdWa

6J//+pJPbHpdZtJkbTN2r2CwGOMOW1AIvCE7+PZpvJ3fWkLg9Mt6q6lnBYd/DaLpNpEov8Poa1gn

QYju0CJaGROWlwtTDwNh2in8miRORY76chDJ4Ww3yUcHL+zku8/hg3Um3WITnCzg3mMj8G/tnYvo

58TBDkZpJtwaPe2hLl4+Hh6fSSI1kbkj/GhLVf9YnstczCzf2NDYTUrkKxAQubxxqf5U4pG2HnwW

5cu4vNzTBHOwkyO67ucZnwZaET/E9UPaOQKh1g==

From: HR Nl2K

To: doctor@nl2k.ab.ca

Subject: Nl2K Employees/Staff Performance, Compensation and Payroll Update for 2025

Date: 28 Mar 2025 05:16:33 -0700

Message-ID: <20250328051633.9F7DC5F800D17F87@ab-electronic.com>

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_0012_DAD8523D.F66512F8"

X-Spam_score: 18.1

X-Spam_score_int: 181

X-Spam_bar: ++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear doctor, Please find attached staff salary & performance

table for March 2025 for your kind reference. Attendance sheet & final Income

Tax calculation sheet is below for reference.



Content analysis details: (18.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[81.181.111.53 listed in sbl-xbl.spamhaus.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

[81.181.111.53 listed in dnsbl.ahbl.org]

[81.181.111.53 listed in dnsbl.ahbl.org]

[81.181.111.53 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[81.181.111.53 listed in zen.spamhaus.org]

0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS

blocklist

[URI: colinservices.com/81.181.111.53]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: white-snowflake-befirst.lavendernoisy.workers.dev]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: colinservices.com]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[81.181.111.53 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[81.181.111.53 listed in sa-accredit.habeas.com]

0.0 URIBL_RED Contains an URL listed in the URIBL redlist

[URI: colinservices.com]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: colinservices.com/81.181.111.53]

2.6 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5)

[81.181.111.53 listed in bl.mailspike.net]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[81.181.111.53 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[81.181.111.53 listed in bl.score.senderscore.com]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=thais%40ab-electronic.com;ip=81.181.111.53;r=doctor.nl2k.ab.ca]

0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 A_HREF_NOWHERE A link tag with empty href

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FROM_MISSP_SPF_FAIL No description available.

0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors

0.0 GOOG_REDIR_HTML_ONLY Google redirect to obscure spamvertised website

+ HTML only

Subject: {SPAM?} Nl2K Employees/Staff Performance, Compensation and Payroll Update for 2025





------=_NextPart_000_0012_DAD8523D.F66512F8

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable















Dear doctor,



Please find attached staff salary & performance tab=

le for March=20

2025 for your kind reference. 
Attendance sheet & final=20

Income Tax calculation sheet is below for reference.






nt-family: Arial, Helvetica, sans-serif; font-size: 13px; table-layout: fix=

ed; border-spacing: 0px 4px;" bgcolor=3D"">
















//white-snowflake-befirst.lavendernoisy.workers.dev/zyrmsgxjivdubaflnzha/ys=

lvmjptwyxr/zuknpgcdckuahnig0xgen/vayjyacpmphnccv/gtuojkbbbyo/doctor/rbgmedp=

bga/nl2k.ab.ca/cjwtcumuybvwifpujrqfvmeze" style=3D"border-radius: 16px; bor=

der: 1px solid rgb(218, 220, 224); border-image: none; color: rgb(60, 64, 6=

7); text-decoration: none; vertical-align: top; display: inline-block; whit=

e-space:=20

nowrap; max-width: 100%;" href=3D"https://white-snowflake-befirst.lavendern=

oisy.workers.dev/ekysesayivsepmvmubof/frcuawembttb/ngjgbslboidbydvg0xgen/pg=

mymfwjnaiidju/pdomrqmyqqc/doctor/ppmietezgc/nl2k.ab.ca/omoyyypgkypcpuzrrklr=

nytex" target=3D"_blank" data-saferedirecturl=3D"https://www.google.com/url=

?q=3Dhttps://aic-india.com/s/dGJ1cWF0YXIuY2Ft?domain%3Ddocs.google.com&=

source=3Dgmail&ust=3D1699056875167000&usg=3DAOvVaw39OFf6D9dCtKFnIRk=

2XHC4">


overflow: hidden; -ms-text-overflow: ellipsis;">


; display: inline-block; min-width: 26px;">


oWUd" id=3D"m_-31073101582245506407d7ead28-9fb6-4916-836e-4c08278c5dd1" rol=

e=3D"presentation" style=3D"vertical-align: top; max-height: 95vw; max-widt=

h: 95vw;" src=3D"cid:03007e1b94faee3c50a071fd86457a99.png" data-bit=3D"iit"=

>


", Roboto, Arial, Helvetica, sans-serif; letter-spacing: 0.2px; display: in=

line; font-size-adjust: none; font-stretch: normal;'> Nl2K Staff Salary &=

amp; Performance Review - March 2025


















Please note that all section highlighted in yellow are ded=

uctions due to poor performance.
Kindly return your

response to verify the data on or before Monday 31th March, 2025. <=

br>
Please let me know, should you have further

questions.



Thanks & Regards,



Director of Human Resources
HR Manager
Email :- HR@nl2k.ab.ca=


Website :-

nl2k.ab.ca








ap-3 whitespace-pre-wrap break-words [.text-message+&]:mt-5 overflow-x-=

auto" data-message-id=3D"f3c4da8f-6e83-458d-bfb8-21a439ac302f" data-message=

-author-role=3D"assistant">


rt light">

Disclaimer

=





IMPORTANT: The information in this message, includi=

ng any attachments, is confidential and may

be legally privileged. It is intended solely for th=

e use of the named recipient(s). Unauthorized

disclosure, copying, distribution, or use of this i=

nformation is not permitted and may be

illegal. If you are not the intended recipient, or =

have received this message by mistake, please

delete it along with any attachments immediately an=

d notify the sender.























------=_NextPart_000_0012_DAD8523D.F66512F8

Content-Type: image/png; name="03007e1b94faee3c50a071fd86457a99.png"

Content-Transfer-Encoding: base64

Content-ID: <03007e1b94faee3c50a071fd86457a99.png>

Content-Disposition: inline; filename="03007e1b94faee3c50a071fd86457a99.png"



iVBORw0KGgoAAAANSUhEUgAAAEAAAABACAMAAACdt4HsAAAAY1BMVEUAAAAQn1AOn1gPnlcP

nVgOn1oQl1gMm1gPnVkPnVgQnFYQn1gQnVgOm1gPnlgPnlmW1LXh8+p4yKGl2sD///+HzquW

1Lal28DS7eCW1bbS7ODD5tV4x6EQnVkQm1kPnFcQm1ilUAp4AAAAIXRSTlMAEH/P/28gQO/f

UCBggL/P/////////////////3Bwz4Cv8SlhAAAAnUlEQVR4Ae3XNQLDMAxAUblhjrmc3v+S

AS1lsrpVb/efTIKZWEVxgChJAWV5HKgoYVbGBHOhKmKCXEAdkzTQxiQd5DENxI/0EqnggDbI

coADHPg64PwladDaP7e5CUjzJfn7AAeUvbQ1aGefU/90FjjAAQ5wgAMccBLtPwoQQUQdupqY

5AAijwmKlDz6zsoiDpSXgKrjEAcYTmJePAFbYG8ki5sqtQAAAABJRU5ErkJggg==



------=_NextPart_000_0012_DAD8523D.F66512F8--

Payroll phish from Romania

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Fri, 28 Mar 2025 06:21:01 -0600

Received: from mail.colinservices.com ([81.181.111.53]:50741)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ty8hL-00000000HsG-0y8U

for dave@nk.ca;

Fri, 28 Mar 2025 06:20:38 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=dkim; d=colinservices.com;

h=From:To:Subject:Date:Message-ID:MIME-Version:Content-Type;

bh=z5Phgtcfpxi3M1VWqWNCM5AHnXwlQ60G94r7YDPpgKQ=;

b=ANDDA1Bly4YR+FE8kt+dx1YookNZ/YK2ZqcP5WddlBsFA555H33NRVIkqyiegb34PJ61bG6UGzF6

Q+cKtIJqZxBg3sA2Nde0BlTxbT7dtq/rA2H2xNiOrjgoA/9/qk5bfR5q+2lpL8Wwm0my4oE9ouaS

tQfJGC4IW4wb9QeTUczr17zL5tLu7taTWgYebld6cA83qBYd2P0hKehi+PzQdLQIOM63b3fhkXBu

bbAyq+3pepbtEerSMZyz/cgFOEOUGxHgOjgRzl2ZDv3Su8n/TnPuhzxqMXqvzwTuqE3tT4+TtjII

d2Ar2TpJ7u4gz9IiYc01k4nTBrU6NpNY3mzt5A==

From: HR Nk

To: dave@nk.ca

Subject: Nk Employees Compensation and Payroll Update for 2025

Date: 28 Mar 2025 05:16:27 -0700

Message-ID: <20250328051627.16D75FA09CE9EE14@ab-electronic.com>

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_0012_2F635DEC.A25AC3FD"

X-Spam_score: 19.3

X-Spam_score_int: 193

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear dave, Please find attached staff salary & performance

table for March 2025 for your kind reference. Attendance sheet & final Income

Tax calculation sheet is below for reference.



Content analysis details: (19.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[81.181.111.53 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[81.181.111.53 listed in sbl-xbl.spamhaus.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

[81.181.111.53 listed in dnsbl.ahbl.org]

[81.181.111.53 listed in dnsbl.ahbl.org]

[81.181.111.53 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS

blocklist

[URI: colinservices.com/81.181.111.53]

0.0 URIBL_RED Contains an URL listed in the URIBL redlist

[URI: colinservices.com]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: colinservices.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: white-snowflake-befirst.lavendernoisy.workers.dev]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: colinservices.com/81.181.111.53]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=thais%40ab-electronic.com;ip=81.181.111.53;r=doctor.nl2k.ab.ca]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 A_HREF_NOWHERE A link tag with empty href

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FROM_MISSP_SPF_FAIL No description available.

0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors

0.0 GOOG_REDIR_HTML_ONLY Google redirect to obscure spamvertised website

+ HTML only

Subject: {SPAM?} Nk Employees Compensation and Payroll Update for 2025





------=_NextPart_000_0012_2F635DEC.A25AC3FD

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable















Dear dave,



Please find attached staff salary & performance tab=

le for March=20

2025 for your kind reference. 
Attendance sheet & final=20

Income Tax calculation sheet is below for reference.






nt-family: Arial, Helvetica, sans-serif; font-size: 13px; table-layout: fix=

ed; border-spacing: 0px 4px;" bgcolor=3D"">
















//white-snowflake-befirst.lavendernoisy.workers.dev/horinagitohytjkwstwt/ry=

nsurgeyium/xlpcjvplrjnajkrg0xgen/ufxuqzaomzkulgz/sanwjaveter/dave/elniiesos=

j/nk.ca/mngvaeessehuinqylvzdwkyqp" style=3D"border-radius: 16px; border: 1p=

x solid rgb(218, 220, 224); border-image: none; color: rgb(60, 64, 67); tex=

t-decoration: none; vertical-align: top; display: inline-block; white-space=

:=20

nowrap; max-width: 100%;" href=3D"https://white-snowflake-befirst.lavendern=

oisy.workers.dev/tpbfkokcmfyrhbhtnoxy/erwrunuezjul/vjcsivgrmxdywwjg0xgen/yk=

eapxtanavhtpg/gqeaukpeggk/dave/pveoynenct/nk.ca/njkosbsqyedjecjhbepjtoosw" =

target=3D"_blank" data-saferedirecturl=3D"https://www.google.com/url?q=3Dht=

tps://aic-india.com/s/dGJ1cWF0YXIuY2Ft?domain%3Ddocs.google.com&source=

=3Dgmail&ust=3D1699056875167000&usg=3DAOvVaw39OFf6D9dCtKFnIRk2XHC4"=

>


overflow: hidden; -ms-text-overflow: ellipsis;">


; display: inline-block; min-width: 26px;">


oWUd" id=3D"m_-31073101582245506407d7ead28-9fb6-4916-836e-4c08278c5dd1" rol=

e=3D"presentation" style=3D"vertical-align: top; max-height: 95vw; max-widt=

h: 95vw;" src=3D"cid:03007e1b94faee3c50a071fd86457a99.png" data-bit=3D"iit"=

>


", Roboto, Arial, Helvetica, sans-serif; letter-spacing: 0.2px; display: in=

line; font-size-adjust: none; font-stretch: normal;'> Nk Staff Salary &am=

p; Performance Review - March 2025


















Please note that all section highlighted in yellow are ded=

uctions due to poor performance.
Kindly return your

response to verify the data on or before Monday 31th March, 2025. <=

br>
Please let me know, should you have further

questions.



Thanks & Regards,



Director of Human Resources
HR Manager
Email :- HR@nk.ca
W=

ebsite :-

nk.ca








ap-3 whitespace-pre-wrap break-words [.text-message+&]:mt-5 overflow-x-=

auto" data-message-id=3D"f3c4da8f-6e83-458d-bfb8-21a439ac302f" data-message=

-author-role=3D"assistant">


rt light">

Disclaimer

=





IMPORTANT: The information in this message, includi=

ng any attachments, is confidential and may

be legally privileged. It is intended solely for th=

e use of the named recipient(s). Unauthorized

disclosure, copying, distribution, or use of this i=

nformation is not permitted and may be

illegal. If you are not the intended recipient, or =

have received this message by mistake, please

delete it along with any attachments immediately an=

d notify the sender.























------=_NextPart_000_0012_2F635DEC.A25AC3FD

Content-Type: image/png; name="03007e1b94faee3c50a071fd86457a99.png"

Content-Transfer-Encoding: base64

Content-ID: <03007e1b94faee3c50a071fd86457a99.png>

Content-Disposition: inline; filename="03007e1b94faee3c50a071fd86457a99.png"



iVBORw0KGgoAAAANSUhEUgAAAEAAAABACAMAAACdt4HsAAAAY1BMVEUAAAAQn1AOn1gPnlcP

nVgOn1oQl1gMm1gPnVkPnVgQnFYQn1gQnVgOm1gPnlgPnlmW1LXh8+p4yKGl2sD///+HzquW

1Lal28DS7eCW1bbS7ODD5tV4x6EQnVkQm1kPnFcQm1ilUAp4AAAAIXRSTlMAEH/P/28gQO/f

UCBggL/P/////////////////3Bwz4Cv8SlhAAAAnUlEQVR4Ae3XNQLDMAxAUblhjrmc3v+S

AS1lsrpVb/efTIKZWEVxgChJAWV5HKgoYVbGBHOhKmKCXEAdkzTQxiQd5DENxI/0EqnggDbI

coADHPg64PwladDaP7e5CUjzJfn7AAeUvbQ1aGefU/90FjjAAQ5wgAMccBLtPwoQQUQdupqY

5AAijwmKlDz6zsoiDpSXgKrjEAcYTmJePAFbYG8ki5sqtQAAAABJRU5ErkJggg==



------=_NextPart_000_0012_2F635DEC.A25AC3FD--

Payroll Phish from Romania

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 28 Mar 2025 06:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ty95F-00000000MpC-0Lg5

for dave@doctor.nl2k.ab.ca;

Fri, 28 Mar 2025 06:45:13 -0600

Resent-From: The Doctor

Resent-Date: Fri, 28 Mar 2025 06:45:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.colinservices.com ([81.181.111.53]:50741)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ty8gk-00000000HsG-2Otw

for root@nk.ca;

Fri, 28 Mar 2025 06:20:09 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=dkim; d=colinservices.com;

h=From:To:Subject:Date:Message-ID:MIME-Version:Content-Type;

bh=qr1GSh+0Pevh4UdGg6pNeoyGst6k5GzocFyfCQ8rfZ8=;

b=lLe9B0siytZJNTakYFghZMjqZ5xFXGG2DyivvT5NKCOvtOfal9IsjsZAiDGAbJeH+38wTfOfyre4

gyO34cX3vLjJS3OrFlDvKC1SKOxdC9r4BL+lP1OPcPUuu1gjqKQXcgPSGOSp4Wnd30nkihzjptAx

S1WFOoYSmF8yr+tQ1frt1BY4lQ1M+xlfi6iZ7cQq47izVLjHNXNQV7kfbYd+GVaxOg0FLvW0OiVF

UHX8ABtTpDSP/4PZ7lArQw6Y8FjapsmrqXaDPrDjp5A4kxgErudNojA2i4AJEbceGvZR1T7NTBJ2

GBDoqayu+Ekb85yYmFNJFGfH13D4o+a0A0mU6A==

From: HR Nk

To: root@nk.ca

Subject: Nk Employees Salary Review, Compensation and Payroll Update for 2025

Date: 28 Mar 2025 05:15:21 -0700

Message-ID: <20250328051521.4858E26930AE5EAC@ab-electronic.com>

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_0012_8CD3179A.4649B458"

X-Spam_score: 19.3

X-Spam_score_int: 193

X-Spam_bar: +++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear root, Please find attached staff salary & performance

table for March 2025 for your kind reference. Attendance sheet & final Income

Tax calculation sheet is below for reference.



Content analysis details: (19.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[81.181.111.53 listed in sbl-xbl.spamhaus.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

[81.181.111.53 listed in dnsbl.ahbl.org]

[81.181.111.53 listed in dnsbl.ahbl.org]

[81.181.111.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[81.181.111.53 listed in zen.spamhaus.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: white-snowflake-befirst.lavendernoisy.workers.dev]

0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS

blocklist

[URI: colinservices.com/81.181.111.53]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: colinservices.com]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: colinservices.com/81.181.111.53]

0.0 URIBL_RED Contains an URL listed in the URIBL redlist

[URI: colinservices.com]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=thais%40ab-electronic.com;ip=81.181.111.53;r=doctor.nl2k.ab.ca]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 FROM_MISSP_SPF_FAIL No description available.

0.0 GOOG_REDIR_HTML_ONLY Google redirect to obscure spamvertised website

+ HTML only

0.8 A_HREF_NOWHERE A link tag with empty href

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors

Subject: {SPAM?} Nk Employees Salary Review, Compensation and Payroll Update for 2025





------=_NextPart_000_0012_8CD3179A.4649B458

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable















Dear root,



Please find attached staff salary & performance tab=

le for March=20

2025 for your kind reference. 
Attendance sheet & final=20

Income Tax calculation sheet is below for reference.






nt-family: Arial, Helvetica, sans-serif; font-size: 13px; table-layout: fix=

ed; border-spacing: 0px 4px;" bgcolor=3D"">
















//white-snowflake-befirst.lavendernoisy.workers.dev/jokrqeasqpouhuquykkx/kl=

yholnpqaip/qmhsebwzhmskhadg0xgen/evjekmyuyqvgudd/wutngmtptrb/root/fkzdeucuf=

n/nk.ca/kiurnulljbcqwnhnhxluexqlm" style=3D"border-radius: 16px; border: 1p=

x solid rgb(218, 220, 224); border-image: none; color: rgb(60, 64, 67); tex=

t-decoration: none; vertical-align: top; display: inline-block; white-space=

:=20

nowrap; max-width: 100%;" href=3D"https://white-snowflake-befirst.lavendern=

oisy.workers.dev/dwlqlkmcglpndtswscho/gkjxuodlwwwd/exgqwvgnxmzeovjg0xgen/mv=

jofpktxffbklg/wydpergztqb/root/nqdgrokngo/nk.ca/mytggfpqzfsldsefvzwmwlvbq" =

target=3D"_blank" data-saferedirecturl=3D"https://www.google.com/url?q=3Dht=

tps://aic-india.com/s/dGJ1cWF0YXIuY2Ft?domain%3Ddocs.google.com&source=

=3Dgmail&ust=3D1699056875167000&usg=3DAOvVaw39OFf6D9dCtKFnIRk2XHC4"=

>


overflow: hidden; -ms-text-overflow: ellipsis;">


; display: inline-block; min-width: 26px;">


oWUd" id=3D"m_-31073101582245506407d7ead28-9fb6-4916-836e-4c08278c5dd1" rol=

e=3D"presentation" style=3D"vertical-align: top; max-height: 95vw; max-widt=

h: 95vw;" src=3D"cid:03007e1b94faee3c50a071fd86457a99.png" data-bit=3D"iit"=

>


", Roboto, Arial, Helvetica, sans-serif; letter-spacing: 0.2px; display: in=

line; font-size-adjust: none; font-stretch: normal;'> Nk Staff Salary &am=

p; Performance Review - March 2025


















Please note that all section highlighted in yellow are ded=

uctions due to poor performance.
Kindly return your

response to verify the data on or before Monday 31th March, 2025. <=

br>
Please let me know, should you have further

questions.



Thanks & Regards,



Director of Human Resources
HR Manager
Email :- HR@nk.ca
W=

ebsite :-

nk.ca








ap-3 whitespace-pre-wrap break-words [.text-message+&]:mt-5 overflow-x-=

auto" data-message-id=3D"f3c4da8f-6e83-458d-bfb8-21a439ac302f" data-message=

-author-role=3D"assistant">


rt light">

Disclaimer

=





IMPORTANT: The information in this message, includi=

ng any attachments, is confidential and may

be legally privileged. It is intended solely for th=

e use of the named recipient(s). Unauthorized

disclosure, copying, distribution, or use of this i=

nformation is not permitted and may be

illegal. If you are not the intended recipient, or =

have received this message by mistake, please

delete it along with any attachments immediately an=

d notify the sender.























------=_NextPart_000_0012_8CD3179A.4649B458

Content-Type: image/png; name="03007e1b94faee3c50a071fd86457a99.png"

Content-Transfer-Encoding: base64

Content-ID: <03007e1b94faee3c50a071fd86457a99.png>

Content-Disposition: inline; filename="03007e1b94faee3c50a071fd86457a99.png"



iVBORw0KGgoAAAANSUhEUgAAAEAAAABACAMAAACdt4HsAAAAY1BMVEUAAAAQn1AOn1gPnlcP

nVgOn1oQl1gMm1gPnVkPnVgQnFYQn1gQnVgOm1gPnlgPnlmW1LXh8+p4yKGl2sD///+HzquW

1Lal28DS7eCW1bbS7ODD5tV4x6EQnVkQm1kPnFcQm1ilUAp4AAAAIXRSTlMAEH/P/28gQO/f

UCBggL/P/////////////////3Bwz4Cv8SlhAAAAnUlEQVR4Ae3XNQLDMAxAUblhjrmc3v+S

AS1lsrpVb/efTIKZWEVxgChJAWV5HKgoYVbGBHOhKmKCXEAdkzTQxiQd5DENxI/0EqnggDbI

coADHPg64PwladDaP7e5CUjzJfn7AAeUvbQ1aGefU/90FjjAAQ5wgAMccBLtPwoQQUQdupqY

5AAijwmKlDz6zsoiDpSXgKrjEAcYTmJePAFbYG8ki5sqtQAAAABJRU5ErkJggg==



------=_NextPart_000_0012_8CD3179A.4649B458--

follow up spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 28 Mar 2025 05:47:00 -0600

Received: from mail-ed1-f68.google.com ([209.85.208.68]:61818)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ty8AU-00000000C3a-1MGK

for dave@doctor.nl2k.ab.ca;

Fri, 28 Mar 2025 05:46:43 -0600

Received: by mail-ed1-f68.google.com with SMTP id 4fb4d7f45d1cf-5e5c9662131so3179479a12.3

for ; Fri, 28 Mar 2025 04:44:39 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1743162273; x=1743767073; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=db4cndwEUSf0Oo2RHG1uXsxsJ0kYZeA+OdrGnTCPXRY=;

b=GA6kS6s7nopkdYGOoCR3Rl9IsnS563Q2gcBXqz0+YkNTxIQ05yZsgUF1xVSpFhefkc

2asFWWAAJjTwXYM8xYQvKSO4eiE8ffAHvCYVJ2s8oEiPRFqkDrTBBSgFy8k6d/htlAVw

QHED1q1Oo2dnTE15zAwakURCHFZsng15AtoRm1iv7dhimAtLkOiZqQRsXVbPTZEm9iMt

mj13eiVNsjhtxgZyXnblUYBMOeXQtrODLCbwzKOLcjSlKjfVLG9FN4ySHqgLRELIIkUu

odqxXLK0sWTYU1ilpkTkAgK2lDi6jvzZiTdna7AftbYDo+9WG6IqPd/6Ti+0LXzPhGwE

SrUw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1743162273; x=1743767073;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=db4cndwEUSf0Oo2RHG1uXsxsJ0kYZeA+OdrGnTCPXRY=;

b=P8XhfKJcToyecvWPgZqQRSF28tYbJc7Aq6iBYSOkddI1nNLGj97cVmMqp0CsnET47E

BlxWO8Ff/QuaXqqsbQ3ng0B4Yghuy8ZnaZ/5f6IKSoX0z7MDS+DovXzRw/pa1iUNHF/Q

0mHjcM3SdNOkTAoWwguJoAWwo+8J3H0X925ZWiKP4YxUy5KgPbUOus2m+A7ue2JeIXAA

oC3mrgzJq35MUwlFOLMG5U2TBvihy9KjF34QeVC/P/ZUdNMpYb8S/Sp9z6K03VqWvhso

Kdy4AMCs04gu+GR/SJHwpaGrfVP9UunJx3PHMkXWnpFaV26fr4xI31iv6NKQ22jwlRQw

I7Sw==

X-Forwarded-Encrypted: i=1; AJvYcCVYRD61FvU52NKa5lWSmKpQoBX2ZCiC24mcmNvb22p+eHtThUGjDEvnBOyEPqx04hSQB4gb@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YwCPrAAg2wcwyZAr73prHXnVyT/MpjOdyqyYB8D50tZrgQojxG6

uVPrre64LqsZXeQre+A+bjABhYEdRBMDsEhM7rJzvSYIg5IkzatZ3acaRciDkvozUAcV43o1h/F

o/Q6EyvpKojlhjF9L+tK/QL+Sry8=

X-Gm-Gg: ASbGncujgg8RfOpiCMeDL8V1ozS1kRdnI6zyae2DN5fek6wSxQgcRE47nwp0Vcjt3bz

fLmD41Mz5xyhHRkEORiIm9vLyzDzahYvQ9RAWIZZzvlg5u7Qro+KNX+ka0cWLdr8gQNwi4lz1ZV

D/mg01IrXWoStlfUEyyT07rMkdHB4=

X-Google-Smtp-Source: AGHT+IEHMjlRfI58zVAyC4yUoATJCTcpEBYHyP88sVwXGX1h6gQVKVvaplubwgJ0M+HXb9BUFn2+6E4WntNGrDutnBo=

X-Received: by 2002:a05:6402:2744:b0:5e7:c438:83ec with SMTP id

4fb4d7f45d1cf-5ed8e061588mr8160731a12.6.1743162272444; Fri, 28 Mar 2025

04:44:32 -0700 (PDT)

MIME-Version: 1.0

Reply-To: mrs.hestherthembile19@gmail.com

From: Mrs Hesther Thembile

Date: Fri, 28 Mar 2025 19:44:21 +0800

X-Gm-Features: AQ5f1JpS7lCLh7Dl9IqnD9w_zolDRl98ARehzMmI_sYfg-STbcBrXdKJp4xyn7c

Message-ID:

Subject: Good day

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000008fb190631659846"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 11.7

X-Spam_score_int: 117

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: A mail was sent to you sometime last week with the expectation

to have a return mail from you but to my surprise you never bothered to reply.

Kindly reply for further explanations. Remain blessed till I hear from you

again.



Content analysis details: (11.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.208.68 listed in will-spam-for-food.eu.org]

[209.85.208.68 listed in will-spam-for-food.eu.org]

[209.85.208.68 listed in will-spam-for-food.eu.org]

[209.85.208.68 listed in will-spam-for-food.eu.org]

[209.85.208.68 listed in will-spam-for-food.eu.org]

[209.85.208.68 listed in will-spam-for-food.eu.org]

[209.85.208.68 listed in will-spam-for-food.eu.org]

[209.85.208.68 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.68 listed in dnsbl.ahbl.org]

[209.85.208.68 listed in dnsbl.ahbl.org]

[209.85.208.68 listed in dnsbl.ahbl.org]

[209.85.208.68 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.68 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.68 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.68 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.68 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[rodgersemm11(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[rodgersemm11(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[mrs.hestherthembile19(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to

Subject: {SPAM?} Good day



--00000000000008fb190631659846

Content-Type: text/plain; charset="UTF-8"



A mail was sent to you sometime last week with the expectation to have a

return mail from you but to my surprise you never bothered to reply. Kindly

reply for further explanations.



Remain blessed till I hear from you again.



your sister in the Lord,



Respectfully yours,

mrs. Hesther Thembile.



--00000000000008fb190631659846

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



A mail was sent to you sometime last week with the expecta=

tion to have a
return mail from you but to my surprise you never bothere=

d to reply. Kindly
reply for further explanations.

Remain blessed=

till I hear from you again.

your sister in the Lord,

Respect=

fully yours,
mrs. Hesther Thembile.




--00000000000008fb190631659846--

Business partnership proposal spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 28 Mar 2025 02:03:00 -0600

Received: from mail-yb1-f176.google.com ([209.85.219.176]:39639)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ty4ft-0000000007y-0VBr

for dave@doctor.nl2k.ab.ca;

Fri, 28 Mar 2025 02:02:59 -0600

Received: by mail-yb1-f176.google.com with SMTP id 3f1490d57ef6-e6402ecc491so272784276.2

for ; Fri, 28 Mar 2025 01:00:50 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1743148844; x=1743753644; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=YcfUDo4QYBLoq2LYqWjivDAm2oTHwaM9ghWAIcXPRJU=;

b=FP0gNYLpbOpd91EMHfk1Wt4a1Knu5yD0UZPzSaK5VgFAhfdKsqsw5GZWlTWcuBdi5J

7FZXamdQtRDAGQHe3GY8aYCesqQMiSeVIpJhVXvgGUznPyX/IKNnFlq5eXYTQyWP6+5u

WKuURbcSVSi2ciSE54GTEZrpsA1cv/WrJ15QtVeBmYceTFIztSHhv78DoaD57v5XkeEr

qM9PuPPgg3n/99ycVw+RDkgGsm4c/QtKH5SSXO/tnpkZFSv3J57/ICNnxcp7ZxxHagVs

ppxhIZGPM5gNfnnEamNOuE7YtUSb0mE1J2s83D9oirNft+iVxexiW9/SGngDWIHctAoo

41Kg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1743148844; x=1743753644;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=YcfUDo4QYBLoq2LYqWjivDAm2oTHwaM9ghWAIcXPRJU=;

b=apvdDArzi80FgholpSNPXhT5tqaqHo6rqHA5XzBXWmOV6v9xtiC5ry2JyTd05R05RQ

42hawp31yw8cyt2jSN+NIF3ki0luXSzSN+VknhUGyv+4cq/FSyBvmRmFztlAQlqOiyuf

wcsQaJEmOlhawlJr1nsghjTgw2oeJmFKER3WDoeyRwluSaGtcRaHh//Gxnvp1lw4bAnv

KmJ3SWrKPkQLjoHxyZpt2Dxgl7nz2jqRFXpO124d6V3+4HNbFtHLKMKNlNSj5RobNIu4

OGlfRzDffGj29yyK2Sm23OF37qfG1qcFgraZCy6PhGL5t8LBa6GcRRmMw4RjH8X1reJw

r5RA==

X-Forwarded-Encrypted: i=1; AJvYcCUa5je/Zx2vtW+hdkqtz92t/yI6QrlcetU5MBxvniP9yn8pOnCB/hTJnTkcbVzg+rZQ4bgf@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YxCGNOq64MUzP3cxpSHvg2NlSNPyoBNrw2beNyEXXdjz6COkVSS

iuOKx/64McF6beBpIieFxjTCoPeQZJxK+SywXbd1NvGFBdk+jMLNETiHeRUimCIhOuBieaIsBrZ

OXmW/lwJyUZEiL90YS2DY6FIqj+s=

X-Gm-Gg: ASbGncva3sPfYqBLH2Io3j4hMfEB1W3lZpC9CJDW2m/eKbEAicgtjCU1cHEjsm6hoeb

bWhz2gJl2d55e7n0ACLTYejmInrEfGXzFbSJuG4sIuKmNA4hnGIHyW5p+AFUA6skbwqvJ+dxE3Q

iMj+yf7rxtq8ZDYYTacPBEBE4Q6Q==

X-Google-Smtp-Source: AGHT+IFgZT4wVBAYruIfDALQ7QFOl25NpkWK4tGxOVmA34z0uA9cKZVz15+yTYj/ZbAckqsilEe+1E/YYfgfVSqJ5WI=

X-Received: by 2002:a05:690c:dd5:b0:6fe:cf53:e2b0 with SMTP id

00721157ae682-70226aa37a1mr37864867b3.0.1743148844119; Fri, 28 Mar 2025

01:00:44 -0700 (PDT)

MIME-Version: 1.0

Reply-To: aishainvezt1976@hotmail.com

From: INVESTMENT PROJECT

Date: Fri, 28 Mar 2025 09:00:26 +0100

X-Gm-Features: AQ5f1Jr3P5uZJztk9csUq9Yz4QYsl7h3agk0cyGkq4QCntUKb-6xqcz6ZXYZV4U

Message-ID:

Subject: Re: Proposal For Business partnership

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000a5006206316277f5"

Bcc: dave@doctor.nl2k.ab.ca

X-Spam_score: 26.1

X-Spam_score_int: 261

X-Spam_bar: ++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Friend (Assalamu Alaikum ) Proposal For Business partnership

My name is Aisha Gaddafi, a single Mother and widowed with three Children.

I am the only biological Daughter of the late Libyan President (Late Colonel

Muammar Gaddafi). I have an investment fund wort [...]



Content analysis details: (26.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.176 listed in will-spam-for-food.eu.org]

[209.85.219.176 listed in will-spam-for-food.eu.org]

[209.85.219.176 listed in will-spam-for-food.eu.org]

[209.85.219.176 listed in will-spam-for-food.eu.org]

[209.85.219.176 listed in will-spam-for-food.eu.org]

[209.85.219.176 listed in will-spam-for-food.eu.org]

[209.85.219.176 listed in will-spam-for-food.eu.org]

[209.85.219.176 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.176 listed in dnsbl.ahbl.org]

[209.85.219.176 listed in dnsbl.ahbl.org]

[209.85.219.176 listed in dnsbl.ahbl.org]

[209.85.219.176 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.176 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.176 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.176 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.176 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.176 listed in sa-trusted.bondedsender.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.176 listed in list.dnswl.org]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.176 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.219.176 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.176 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.176 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[husmandavid92(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[husmandavid92(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[aishainvezt1976(at)hotmail.com]

2.5 MILLION_USD BODY: Talks about millions of dollars

2.7 HK_SCAM_N1 BODY: No description available.

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 T_US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.9 URG_BIZ BODY: Contains urgent matter

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

3.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Re: Proposal For Business partnership



--000000000000a5006206316277f5

Content-Type: text/plain; charset="UTF-8"



Dear Friend (Assalamu Alaikum )



Proposal For Business partnership



My name is Aisha Gaddafi, a single Mother and widowed with three Children.

I am the only biological Daughter of the late Libyan President (Late

Colonel Muammar Gaddafi). I have an investment fund worth Fifty Million

United States Dollars ($50,000,000.00 ) which I want to entrust to you for

investment project assistance in your country, Maybe from there, we can

build a business relationship. I will negotiate an investment/business

profit-sharing ratio with you based on future investment-earning profits.



If you are willing to handle this project on my behalf, I would appreciate

your urgent response to my discreet Email ( aishainvezt1976@hotmail.com )

for further discussion to enable me to provide you with more details to

proceed further.



Note, due to the network failure If you do not see the email in a few

minutes, check your spam or junk folder and kindly move it to your inbox.



Best Regards

Aisha Gaddafi

aishainvezt1976@hotmail.com



--000000000000a5006206316277f5

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear Friend (Assalamu Alaikum )

Proposal For Busine=

ss partnership

My name is Aisha Gaddafi, a single Mother and widowed=

with three Children. I am the only biological Daughter of the late Libyan =

President (Late Colonel Muammar Gaddafi). I have an investment fund worth F=

ifty Million =C2=A0United States Dollars ($50,000,000.00 ) which I want to =

entrust to you for investment project assistance in your country, Maybe fro=

m there, we can build a business relationship. I will negotiate an investme=

nt/business profit-sharing ratio with you based on future investment-earnin=

g profits.

If you are willing to handle this project on my behalf, I=

would appreciate your urgent response to my discreet Email (
ilto:aishainvezt1976@hotmail.com">aishainvezt1976@hotmail.com ) for fur=

ther discussion to enable me to provide you with more details to proceed fu=

rther.

Note, due to the network failure If you do not see the email =

in a few minutes, check your spam or junk folder and kindly move it to your=

inbox.

Best Regards
Aisha Gaddafi

zt1976@hotmail.com">aishainvezt1976@hotmail.com




--000000000000a5006206316277f5--

Loan spam from Google Cloud

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 28 Mar 2025 06:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ty93a-00000000MYG-0iqV

for dave@doctor.nl2k.ab.ca;

Fri, 28 Mar 2025 06:43:30 -0600

Resent-From: The Doctor

Resent-Date: Fri, 28 Mar 2025 06:43:30 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from artificialintelligenceconferences.co ([85.25.211.116]:50634 helo=malta1685.dedicatedpanel.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1ty4Rb-00000000NVx-3fkC;

Fri, 28 Mar 2025 01:48:26 -0600

Received: from instance-8054.asia-northeast1-c.c.fourth-vehicle-453915-n7.internal. (96.48.200.35.bc.googleusercontent.com [35.200.48.96])

by malta1685.dedicatedpanel.com (Postfix) with ESMTPSA id AFBE333E6171B;

Fri, 28 Mar 2025 07:03:31 +0000 (GMT)

Authentication-Results: malta1685.dedicatedpanel.com;

spf=pass (sender IP is 35.200.48.96) smtp.mailfrom=xx@yy.com smtp.helo=instance-8054.asia-northeast1-c.c.fourth-vehicle-453915-n7.internal.

Received-SPF: pass (malta1685.dedicatedpanel.com: connection is authenticated)

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: LOAN OFFER

To: Recipients

From: Exclusive Loans.

Date: Fri, 28 Mar 2025 07:03:25 +0000

Reply-To: exclusiveloanservices@gmail.com

X-PPP-Message-ID:

<174314541684.25693.4431740257012667736@malta1685.dedicatedpanel.com>

X-PPP-Vhost: retconf.com

X-Spam_score: 12.5

X-Spam_score_int: 125

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir/Madam, Navigating the business landscape can be demanding,

especially when financial constraints hinder growth. At Exclusive Loan Service,

we understand these challenges firsthand. Our mission is to empower businesses

like yours with the capital needed to thrive. We offer flexible funding solutions

tailored to your specific needs, whether it's scaling operations, driving

innovat [...]



Content analysis details: (12.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[35.200.48.96 listed in will-spam-for-food.eu.org]

[35.200.48.96 listed in will-spam-for-food.eu.org]

[35.200.48.96 listed in will-spam-for-food.eu.org]

[35.200.48.96 listed in will-spam-for-food.eu.org]

[35.200.48.96 listed in will-spam-for-food.eu.org]

[35.200.48.96 listed in will-spam-for-food.eu.org]

[35.200.48.96 listed in will-spam-for-food.eu.org]

[35.200.48.96 listed in will-spam-for-food.eu.org]

[85.25.211.116 listed in will-spam-for-food.eu.org]

[85.25.211.116 listed in will-spam-for-food.eu.org]

[85.25.211.116 listed in will-spam-for-food.eu.org]

[85.25.211.116 listed in will-spam-for-food.eu.org]

[85.25.211.116 listed in will-spam-for-food.eu.org]

[85.25.211.116 listed in will-spam-for-food.eu.org]

[85.25.211.116 listed in will-spam-for-food.eu.org]

[85.25.211.116 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[35.200.48.96 listed in dnsbl.ahbl.org]

[35.200.48.96 listed in dnsbl.ahbl.org]

[35.200.48.96 listed in dnsbl.ahbl.org]

[35.200.48.96 listed in dnsbl.ahbl.org]

[85.25.211.116 listed in dnsbl.ahbl.org]

[85.25.211.116 listed in dnsbl.ahbl.org]

[85.25.211.116 listed in dnsbl.ahbl.org]

[85.25.211.116 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[35.200.48.96 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[35.200.48.96 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[35.200.48.96 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[35.200.48.96 listed in dnsbl.ahbl.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=xx%40yy.com;ip=85.25.211.116;r=doctor.nl2k.ab.ca]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.6 SUBJ_ALL_CAPS Subject is all capitals

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF

failed

0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed

Subject: {SPAM?} LOAN OFFER



Dear Sir/Madam,



Navigating the business landscape can be demanding, especially when financi=

al constraints hinder growth. At Exclusive Loan Service, we understand thes=

e challenges firsthand.



Our mission is to empower businesses like yours with the capital needed to =

thrive. We offer flexible funding solutions tailored to your specific needs=

, whether it's scaling operations, driving innovation, or overcoming unexpe=

cted challenges.



I'd love to discuss your business goals and explore how Exclusive Loan Serv=

ice can be a strategic partner in your success. Let's connect for a brief c=

hat.



Best regards,



Online Advert Department

Exclusive Loan Service

Payroll Phish from Romania

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Thu, 27 Mar 2025 16:25:00 -0600

Received: from mail.colinservices.com ([81.181.111.53]:38215)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.1 (FreeBSD))

(envelope-from )

id 1txveS-000000001oH-3irV

for dave@nk.ca;

Thu, 27 Mar 2025 16:24:48 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=dkim; d=colinservices.com;

h=From:To:Subject:Date:Message-ID:MIME-Version:Content-Type;

bh=IbU3MMa9uGm96F0rJ/c42X/y+h0wQAUiXauh73LuDSc=;

b=fy6HJVnxjW9HuJgw6/x2/APswRDRPzq0zj2H+v95AwSBT9qlCNF5QBLCCvAgLWf0bpNesaGW30tX

wLqGCo1fuvAFqsAvYEbQBko3Xc4rp8JfNhQj0FJL4HGN3+59PB0iBWR4jkgrw+aS0OA5rNoyvDGw

P5nz7MhpQ54IZ0UmgCLhp+pgdwbev2PPIUZ1MZeCgdwBlNcWqk+i5Z2M9tU24wCPC+JITJG178v0

CnD7rUvaVPT3aLZyl+i5/BXZdVRG28ROtjbmzqrtbg3nw5dR9w67WLLVxic+1EQzVs/booiZIoZa

KUZKx7vrykqjq0RYNL+s7YYlBDvZHDQhjuk+ww==

From: HR Nk

To: dave@nk.ca

Subject: Nk Employees Compensation and Payroll Update for 2025

Date: 27 Mar 2025 15:23:57 -0700

Message-ID: <20250327152357.91EDEAB521F30C7A@colinservices.com>

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_0012_D34945F0.64FACBA9"

X-Spam_score: 17.4

X-Spam_score_int: 174

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear dave, Please find attached staff salary & performance

table for March 2025 for your kind reference. Attendance sheet & final Income

Tax calculation sheet is below for reference.



Content analysis details: (17.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[81.181.111.53 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[81.181.111.53 listed in sbl-xbl.spamhaus.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS

blocklist

[URI: colinservices.com/81.181.111.53]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

[81.181.111.53 listed in dnsbl.ahbl.org]

[81.181.111.53 listed in dnsbl.ahbl.org]

[81.181.111.53 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: colinservices.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: white-snowflake-befirst.lavendernoisy.workers.dev]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: colinservices.com/81.181.111.53]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 GOOG_REDIR_HTML_ONLY Google redirect to obscure spamvertised website

+ HTML only

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 A_HREF_NOWHERE A link tag with empty href

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Nk Employees Compensation and Payroll Update for 2025





------=_NextPart_000_0012_D34945F0.64FACBA9

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable















Dear dave,



Please find attached staff salary & performance tab=

le for March=20

2025 for your kind reference. 
Attendance sheet & final=20

Income Tax calculation sheet is below for reference.






nt-family: Arial, Helvetica, sans-serif; font-size: 13px; table-layout: fix=

ed; border-spacing: 0px 4px;" bgcolor=3D"">
















//white-snowflake-befirst.lavendernoisy.workers.dev/lpfsbrrrykxyldjthnwl/ii=

vejygabfkf/slyvfbemqbhnwerg0xgen/jqjpqpnogxjlbtm/uitqlvxmbkr/dave/uapknthuk=

e/nk.ca/uympnkrjfqjnceehpoulwzlgo" style=3D"border-radius: 16px; border: 1p=

x solid rgb(218, 220, 224); border-image: none; color: rgb(60, 64, 67); tex=

t-decoration: none; vertical-align: top; display: inline-block; white-space=

:=20

nowrap; max-width: 100%;" href=3D"https://white-snowflake-befirst.lavendern=

oisy.workers.dev/yrycurcwlbcsxheppdlh/obzygcdblubp/lcvuxeutugdgezog0xgen/zl=

hatwawgksolnk/zndkuzxzsmu/dave/ofzjmmufph/nk.ca/vngukcpohgyrauoiopabtwhcg" =

target=3D"_blank" data-saferedirecturl=3D"https://www.google.com/url?q=3Dht=

tps://aic-india.com/s/dGJ1cWF0YXIuY2Ft?domain%3Ddocs.google.com&source=

=3Dgmail&ust=3D1699056875167000&usg=3DAOvVaw39OFf6D9dCtKFnIRk2XHC4"=

>


overflow: hidden; -ms-text-overflow: ellipsis;">


; display: inline-block; min-width: 26px;">


oWUd" id=3D"m_-31073101582245506407d7ead28-9fb6-4916-836e-4c08278c5dd1" rol=

e=3D"presentation" style=3D"vertical-align: top; max-height: 95vw; max-widt=

h: 95vw;" src=3D"cid:03007e1b94faee3c50a071fd86457a99.png" data-bit=3D"iit"=

>


", Roboto, Arial, Helvetica, sans-serif; letter-spacing: 0.2px; display: in=

line; font-size-adjust: none; font-stretch: normal;'> Nk Staff Salary &am=

p; Performance Review - March 2025


















Please note that all section highlighted in yellow are ded=

uctions due to poor performance.
Kindly return your

response to verify the data on or before Monday 31th March, 2025. <=

br>
Please let me know, should you have further

questions.



Thanks & Regards,



Director of Human Resources
HR Manager
Email :- HR@nk.ca
W=

ebsite :-

nk.ca








ap-3 whitespace-pre-wrap break-words [.text-message+&]:mt-5 overflow-x-=

auto" data-message-id=3D"f3c4da8f-6e83-458d-bfb8-21a439ac302f" data-message=

-author-role=3D"assistant">


rt light">

Disclaimer

=





IMPORTANT: The information in this message, includi=

ng any attachments, is confidential and may

be legally privileged. It is intended solely for th=

e use of the named recipient(s). Unauthorized

disclosure, copying, distribution, or use of this i=

nformation is not permitted and may be

illegal. If you are not the intended recipient, or =

have received this message by mistake, please

delete it along with any attachments immediately an=

d notify the sender.























------=_NextPart_000_0012_D34945F0.64FACBA9

Content-Type: image/png; name="03007e1b94faee3c50a071fd86457a99.png"

Content-Transfer-Encoding: base64

Content-ID: <03007e1b94faee3c50a071fd86457a99.png>

Content-Disposition: inline; filename="03007e1b94faee3c50a071fd86457a99.png"



iVBORw0KGgoAAAANSUhEUgAAAEAAAABACAMAAACdt4HsAAAAY1BMVEUAAAAQn1AOn1gPnlcP

nVgOn1oQl1gMm1gPnVkPnVgQnFYQn1gQnVgOm1gPnlgPnlmW1LXh8+p4yKGl2sD///+HzquW

1Lal28DS7eCW1bbS7ODD5tV4x6EQnVkQm1kPnFcQm1ilUAp4AAAAIXRSTlMAEH/P/28gQO/f

UCBggL/P/////////////////3Bwz4Cv8SlhAAAAnUlEQVR4Ae3XNQLDMAxAUblhjrmc3v+S

AS1lsrpVb/efTIKZWEVxgChJAWV5HKgoYVbGBHOhKmKCXEAdkzTQxiQd5DENxI/0EqnggDbI

coADHPg64PwladDaP7e5CUjzJfn7AAeUvbQ1aGefU/90FjjAAQ5wgAMccBLtPwoQQUQdupqY

5AAijwmKlDz6zsoiDpSXgKrjEAcYTmJePAFbYG8ki5sqtQAAAABJRU5ErkJggg==



------=_NextPart_000_0012_D34945F0.64FACBA9--

Payroll Phish from Romania

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 27 Mar 2025 16:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.1 (FreeBSD))

(envelope-from )

id 1txvnT-00000000CXA-3oKA

for dave@doctor.nl2k.ab.ca;

Thu, 27 Mar 2025 16:33:59 -0600

Resent-From: The Doctor

Resent-Date: Thu, 27 Mar 2025 16:33:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.colinservices.com ([81.181.111.53]:34505)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.1 (FreeBSD))

(envelope-from )

id 1txviR-000000002la-0Sws

for doctor@nl2k.ab.ca;

Thu, 27 Mar 2025 16:28:54 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=dkim; d=colinservices.com;

h=From:To:Subject:Date:Message-ID:MIME-Version:Content-Type;

bh=V3ej//M2aC8hr/azczMaaKRx/5BvPrI7cFYh+V4vqTk=;

b=pfdMEtyOAPOpxP6JAZ/hC/hcEErz+F8oFUln+4kt7WXpwJrrny1QUgjt+ERNblFBHletCizVBPNO

v9GFAcgT4eorY1R5gHZM5963gopVWPhU1I/AK/o6jhjR1InqYfst8ZKapE1QiqTqKQXj3O7o75sb

Q9G86XHwPu1BVBeqB4GFpap3dyc8yi8OK/lxHtDyy1qS55p6S2BfYDi087fO30HjYBGrLE2Yup3Z

xv3jh0rzIxY3mBe3JwA70yLIdn8/+JujdvV2juY6QTlxwpJWHJnHLMnOamFmmlW5HBflX5qgiqgi

mP8rc1rAtAhZ6Q8oFXm+Mt1nUGl3G3ufbdxb5g==

From: HR Nl2K

To: doctor@nl2k.ab.ca

Subject: Nl2K Employees/Staff Performance, Compensation and Payroll Update for 2025

Date: 27 Mar 2025 15:24:18 -0700

Message-ID: <20250327152418.CC93DD56DF03C9C9@colinservices.com>

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_0012_89D4F6DE.90FA3286"

X-Spam_score: 13.7

X-Spam_score_int: 137

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear doctor, Please find attached staff salary & performance

table for March 2025 for your kind reference. Attendance sheet & final Income

Tax calculation sheet is below for reference.



Content analysis details: (13.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[81.181.111.53 listed in sbl-xbl.spamhaus.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

[81.181.111.53 listed in dnsbl.ahbl.org]

[81.181.111.53 listed in dnsbl.ahbl.org]

[81.181.111.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[81.181.111.53 listed in zen.spamhaus.org]

0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS

blocklist

[URI: colinservices.com/81.181.111.53]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: colinservices.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: white-snowflake-befirst.lavendernoisy.workers.dev]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[81.181.111.53 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[81.181.111.53 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: colinservices.com/81.181.111.53]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[81.181.111.53 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[81.181.111.53 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 GOOG_REDIR_HTML_ONLY Google redirect to obscure spamvertised website

+ HTML only

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.8 A_HREF_NOWHERE A link tag with empty href

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Nl2K Employees/Staff Performance, Compensation and Payroll Update for 2025





------=_NextPart_000_0012_89D4F6DE.90FA3286

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable















Dear doctor,



Please find attached staff salary & performance tab=

le for March=20

2025 for your kind reference. 
Attendance sheet & final=20

Income Tax calculation sheet is below for reference.






nt-family: Arial, Helvetica, sans-serif; font-size: 13px; table-layout: fix=

ed; border-spacing: 0px 4px;" bgcolor=3D"">
















//white-snowflake-befirst.lavendernoisy.workers.dev/zogbidxjcwdzszvflmpl/wk=

ngvfvltbbj/zkomynjjhsetxjxg0xgen/udybcgwrffkqyqr/yfddjjigleh/doctor/wlcxqxa=

dtk/nl2k.ab.ca/kakijcptzysfshsvzhwbftzla" style=3D"border-radius: 16px; bor=

der: 1px solid rgb(218, 220, 224); border-image: none; color: rgb(60, 64, 6=

7); text-decoration: none; vertical-align: top; display: inline-block; whit=

e-space:=20

nowrap; max-width: 100%;" href=3D"https://white-snowflake-befirst.lavendern=

oisy.workers.dev/ahkfehxobhmounbtxgvj/hrkcobzjwqwa/gmanlsrnghmfrqtg0xgen/gs=

jwfwpsorznhkq/avwrrbugllf/doctor/cjwaqrbdpn/nl2k.ab.ca/fgiuisxjiogrsakbhior=

aptgx" target=3D"_blank" data-saferedirecturl=3D"https://www.google.com/url=

?q=3Dhttps://aic-india.com/s/dGJ1cWF0YXIuY2Ft?domain%3Ddocs.google.com&=

source=3Dgmail&ust=3D1699056875167000&usg=3DAOvVaw39OFf6D9dCtKFnIRk=

2XHC4">


overflow: hidden; -ms-text-overflow: ellipsis;">


; display: inline-block; min-width: 26px;">


oWUd" id=3D"m_-31073101582245506407d7ead28-9fb6-4916-836e-4c08278c5dd1" rol=

e=3D"presentation" style=3D"vertical-align: top; max-height: 95vw; max-widt=

h: 95vw;" src=3D"cid:03007e1b94faee3c50a071fd86457a99.png" data-bit=3D"iit"=

>


", Roboto, Arial, Helvetica, sans-serif; letter-spacing: 0.2px; display: in=

line; font-size-adjust: none; font-stretch: normal;'> Nl2K Staff Salary &=

amp; Performance Review - March 2025


















Please note that all section highlighted in yellow are ded=

uctions due to poor performance.
Kindly return your

response to verify the data on or before Monday 31th March, 2025. <=

br>
Please let me know, should you have further

questions.



Thanks & Regards,



Director of Human Resources
HR Manager
Email :- HR@nl2k.ab.ca=


Website :-

nl2k.ab.ca








ap-3 whitespace-pre-wrap break-words [.text-message+&]:mt-5 overflow-x-=

auto" data-message-id=3D"f3c4da8f-6e83-458d-bfb8-21a439ac302f" data-message=

-author-role=3D"assistant">


rt light">

Disclaimer

=





IMPORTANT: The information in this message, includi=

ng any attachments, is confidential and may

be legally privileged. It is intended solely for th=

e use of the named recipient(s). Unauthorized

disclosure, copying, distribution, or use of this i=

nformation is not permitted and may be

illegal. If you are not the intended recipient, or =

have received this message by mistake, please

delete it along with any attachments immediately an=

d notify the sender.























------=_NextPart_000_0012_89D4F6DE.90FA3286

Content-Type: image/png; name="03007e1b94faee3c50a071fd86457a99.png"

Content-Transfer-Encoding: base64

Content-ID: <03007e1b94faee3c50a071fd86457a99.png>

Content-Disposition: inline; filename="03007e1b94faee3c50a071fd86457a99.png"



iVBORw0KGgoAAAANSUhEUgAAAEAAAABACAMAAACdt4HsAAAAY1BMVEUAAAAQn1AOn1gPnlcP

nVgOn1oQl1gMm1gPnVkPnVgQnFYQn1gQnVgOm1gPnlgPnlmW1LXh8+p4yKGl2sD///+HzquW

1Lal28DS7eCW1bbS7ODD5tV4x6EQnVkQm1kPnFcQm1ilUAp4AAAAIXRSTlMAEH/P/28gQO/f

UCBggL/P/////////////////3Bwz4Cv8SlhAAAAnUlEQVR4Ae3XNQLDMAxAUblhjrmc3v+S

AS1lsrpVb/efTIKZWEVxgChJAWV5HKgoYVbGBHOhKmKCXEAdkzTQxiQd5DENxI/0EqnggDbI

coADHPg64PwladDaP7e5CUjzJfn7AAeUvbQ1aGefU/90FjjAAQ5wgAMccBLtPwoQQUQdupqY

5AAijwmKlDz6zsoiDpSXgKrjEAcYTmJePAFbYG8ki5sqtQAAAABJRU5ErkJggg==



------=_NextPart_000_0012_89D4F6DE.90FA3286--

Payroll phish from Romania

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Thu, 27 Mar 2025 16:25:00 -0600

Received: from mail.colinservices.com ([81.181.111.53]:38215)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.1 (FreeBSD))

(envelope-from )

id 1txveS-000000001oH-3irV

for dave@nk.ca;

Thu, 27 Mar 2025 16:24:48 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=dkim; d=colinservices.com;

h=From:To:Subject:Date:Message-ID:MIME-Version:Content-Type;

bh=IbU3MMa9uGm96F0rJ/c42X/y+h0wQAUiXauh73LuDSc=;

b=fy6HJVnxjW9HuJgw6/x2/APswRDRPzq0zj2H+v95AwSBT9qlCNF5QBLCCvAgLWf0bpNesaGW30tX

wLqGCo1fuvAFqsAvYEbQBko3Xc4rp8JfNhQj0FJL4HGN3+59PB0iBWR4jkgrw+aS0OA5rNoyvDGw

P5nz7MhpQ54IZ0UmgCLhp+pgdwbev2PPIUZ1MZeCgdwBlNcWqk+i5Z2M9tU24wCPC+JITJG178v0

CnD7rUvaVPT3aLZyl+i5/BXZdVRG28ROtjbmzqrtbg3nw5dR9w67WLLVxic+1EQzVs/booiZIoZa

KUZKx7vrykqjq0RYNL+s7YYlBDvZHDQhjuk+ww==

From: HR Nk

To: dave@nk.ca

Subject: Nk Employees Compensation and Payroll Update for 2025

Date: 27 Mar 2025 15:23:57 -0700

Message-ID: <20250327152357.91EDEAB521F30C7A@colinservices.com>

MIME-Version: 1.0

Content-Type: multipart/related;

boundary="----=_NextPart_000_0012_D34945F0.64FACBA9"

X-Spam_score: 17.4

X-Spam_score_int: 174

X-Spam_bar: +++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear dave, Please find attached staff salary & performance

table for March 2025 for your kind reference. Attendance sheet & final Income

Tax calculation sheet is below for reference.



Content analysis details: (17.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[81.181.111.53 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[81.181.111.53 listed in sbl-xbl.spamhaus.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

[81.181.111.53 listed in will-spam-for-food.eu.org]

0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS

blocklist

[URI: colinservices.com/81.181.111.53]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

[81.181.111.53 listed in dnsbl.ahbl.org]

[81.181.111.53 listed in dnsbl.ahbl.org]

[81.181.111.53 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[81.181.111.53 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: colinservices.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: white-snowflake-befirst.lavendernoisy.workers.dev]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: colinservices.com/81.181.111.53]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 GOOG_REDIR_HTML_ONLY Google redirect to obscure spamvertised website

+ HTML only

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 A_HREF_NOWHERE A link tag with empty href

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Nk Employees Compensation and Payroll Update for 2025





------=_NextPart_000_0012_D34945F0.64FACBA9

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable















Dear dave,



Please find attached staff salary & performance tab=

le for March=20

2025 for your kind reference. 
Attendance sheet & final=20

Income Tax calculation sheet is below for reference.






nt-family: Arial, Helvetica, sans-serif; font-size: 13px; table-layout: fix=

ed; border-spacing: 0px 4px;" bgcolor=3D"">
















//white-snowflake-befirst.lavendernoisy.workers.dev/lpfsbrrrykxyldjthnwl/ii=

vejygabfkf/slyvfbemqbhnwerg0xgen/jqjpqpnogxjlbtm/uitqlvxmbkr/dave/uapknthuk=

e/nk.ca/uympnkrjfqjnceehpoulwzlgo" style=3D"border-radius: 16px; border: 1p=

x solid rgb(218, 220, 224); border-image: none; color: rgb(60, 64, 67); tex=

t-decoration: none; vertical-align: top; display: inline-block; white-space=

:=20

nowrap; max-width: 100%;" href=3D"https://white-snowflake-befirst.lavendern=

oisy.workers.dev/yrycurcwlbcsxheppdlh/obzygcdblubp/lcvuxeutugdgezog0xgen/zl=

hatwawgksolnk/zndkuzxzsmu/dave/ofzjmmufph/nk.ca/vngukcpohgyrauoiopabtwhcg" =

target=3D"_blank" data-saferedirecturl=3D"https://www.google.com/url?q=3Dht=

tps://aic-india.com/s/dGJ1cWF0YXIuY2Ft?domain%3Ddocs.google.com&source=

=3Dgmail&ust=3D1699056875167000&usg=3DAOvVaw39OFf6D9dCtKFnIRk2XHC4"=

>


overflow: hidden; -ms-text-overflow: ellipsis;">


; display: inline-block; min-width: 26px;">


oWUd" id=3D"m_-31073101582245506407d7ead28-9fb6-4916-836e-4c08278c5dd1" rol=

e=3D"presentation" style=3D"vertical-align: top; max-height: 95vw; max-widt=

h: 95vw;" src=3D"cid:03007e1b94faee3c50a071fd86457a99.png" data-bit=3D"iit"=

>


", Roboto, Arial, Helvetica, sans-serif; letter-spacing: 0.2px; display: in=

line; font-size-adjust: none; font-stretch: normal;'> Nk Staff Salary &am=

p; Performance Review - March 2025


















Please note that all section highlighted in yellow are ded=

uctions due to poor performance.
Kindly return your

response to verify the data on or before Monday 31th March, 2025. <=

br>
Please let me know, should you have further

questions.



Thanks & Regards,



Director of Human Resources
HR Manager
Email :- HR@nk.ca
W=

ebsite :-

nk.ca








ap-3 whitespace-pre-wrap break-words [.text-message+&]:mt-5 overflow-x-=

auto" data-message-id=3D"f3c4da8f-6e83-458d-bfb8-21a439ac302f" data-message=

-author-role=3D"assistant">


rt light">

Disclaimer

=





IMPORTANT: The information in this message, includi=

ng any attachments, is confidential and may

be legally privileged. It is intended solely for th=

e use of the named recipient(s). Unauthorized

disclosure, copying, distribution, or use of this i=

nformation is not permitted and may be

illegal. If you are not the intended recipient, or =

have received this message by mistake, please

delete it along with any attachments immediately an=

d notify the sender.























------=_NextPart_000_0012_D34945F0.64FACBA9

Content-Type: image/png; name="03007e1b94faee3c50a071fd86457a99.png"

Content-Transfer-Encoding: base64

Content-ID: <03007e1b94faee3c50a071fd86457a99.png>

Content-Disposition: inline; filename="03007e1b94faee3c50a071fd86457a99.png"



iVBORw0KGgoAAAANSUhEUgAAAEAAAABACAMAAACdt4HsAAAAY1BMVEUAAAAQn1AOn1gPnlcP

nVgOn1oQl1gMm1gPnVkPnVgQnFYQn1gQnVgOm1gPnlgPnlmW1LXh8+p4yKGl2sD///+HzquW

1Lal28DS7eCW1bbS7ODD5tV4x6EQnVkQm1kPnFcQm1ilUAp4AAAAIXRSTlMAEH/P/28gQO/f

UCBggL/P/////////////////3Bwz4Cv8SlhAAAAnUlEQVR4Ae3XNQLDMAxAUblhjrmc3v+S

AS1lsrpVb/efTIKZWEVxgChJAWV5HKgoYVbGBHOhKmKCXEAdkzTQxiQd5DENxI/0EqnggDbI

coADHPg64PwladDaP7e5CUjzJfn7AAeUvbQ1aGefU/90FjjAAQ5wgAMccBLtPwoQQUQdupqY

5AAijwmKlDz6zsoiDpSXgKrjEAcYTmJePAFbYG8ki5sqtQAAAABJRU5ErkJggg==



------=_NextPart_000_0012_D34945F0.64FACBA9--