Quicksearch: Your search for time returned 0 results:

Social Media followers spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 18 Mar 2026 15:29:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w2yRL-00000000Fqq-1oSi

for dave@doctor.nl2k.ab.ca;

Wed, 18 Mar 2026 15:28:31 -0600

Resent-From: The Doctor

Resent-Date: Wed, 18 Mar 2026 15:28:31 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f72.google.com ([209.85.219.72]:52708)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w2yMw-00000000FeZ-1N2c

for sales@nk.ca;

Wed, 18 Mar 2026 15:24:06 -0600

Received: by mail-qv1-f72.google.com with SMTP id 6a1803df08f44-89c514077a6so31310836d6.1

for ; Wed, 18 Mar 2026 14:23:10 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1773868984; x=1774473784; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=OMcUNmK1wsgJxCJHXI2uB4QZnw4J3/8TFWyZ3b/N65E=;

b=QJ5JzkxTTCS9apBuv75sqI0kAmbTsSPE4p/HmncpPPacj0odHiS7Bh1t5p1N6dEi9X

IPXOmjRBDO0yl5YqFUMkEYiTc+SVJH7gNFL5nOp/k9qO+c+IUzw+6apoP//Zdmaq1gb4

W0crfP22Vv2oKN6l9yaBL5wcWeZ/sbUWLsQdDw8zhdYngO5tK4YMSSA+QPNj9v8OnZIn

kIVHfLRK62p8O8cCrjCotp2aO6Lf8BNTiNVG7qmJ935XNPGXbGc1gdY5wMCKcPA2y7+h

tXJq3YXfVf3YBqhSLpidKr6qZTKp7KUJi0C3CkpP36ZhPMKKICRNmKx9GmPrxp4FDOUT

smdQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1773868984; x=1774473784;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=OMcUNmK1wsgJxCJHXI2uB4QZnw4J3/8TFWyZ3b/N65E=;

b=q7/bsX8Gyg3rd2vQD0niPRKKu70WhAYkEuaxQfaD7Sgu+8h61Dgf40hxgts/rZMlOm

+2ZftHLLsgm5lbdQWQEI6KWFgpRYVg7B54O4lb3PIDdH/Ji11n0XReBMD7hgb5ktVwFv

cwYXeR9K4f6u3Tfr4qBMjfvP/lnS8j+fhkKxmvzI6b8Zf3Ub0NKID9gvr3PREtNzLLAG

epDm24g+VKX+YWiHrrat1i+kgmGVNXo7bEEWqM4K3P1won+YtUnAhioLcCNAENKRFPwT

8mOVjcFGyqXyB0GbPZLHuFEzrekNkFOIgxN8fmEecNWJZN4QbaJzcugZKp94a0fG8lg0

zzJQ==

X-Gm-Message-State: AOJu0Yzvs+YL2wiLNTtWt7NNlB8UbGVtK6LpRrbr8d8i9V57uQQrGHPp

fz2ZyDJFmKbpPCMZ/hAulqJ1PJ0iSZgslEmsHXf+v2dnBamqQUYtC5XmEDmh79aQg6zWKYsTNcW

g4tRWrA==

MIME-Version: 1.0

X-Received: by 2002:a05:6214:3285:b0:89a:9f9:246e with SMTP id

6a1803df08f44-89c6b58c58bmr78490306d6.45.1773868984684; Wed, 18 Mar 2026

14:23:04 -0700 (PDT)

Message-ID:

Date: Wed, 18 Mar 2026 21:23:04 +0000

Subject: daveyadallee, Get More 1,000 Instagram Followers and 1,000 Facebook

Likes here

From: bdjhbkb@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 12.8

X-Spam_score_int: 128

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, daveyadallee, Get More 1,000 Instagram Followers and 1,000

Facebook Likes here Sorry to interrupt your time. We offer social media services,

If you're interested, please visit our Website. If you're not interested,

please skip this step.



Content analysis details: (12.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

[209.85.219.72 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

[209.85.219.72 listed in dnsbl.ahbl.org]

[209.85.219.72 listed in dnsbl.ahbl.org]

[209.85.219.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.72 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: instatool.site]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.72 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[bdjhbkb(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.72 listed in wl.mailspike.net]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} daveyadallee, Get More 1,000 Instagram Followers and 1,000 Facebook

Likes here



Hi, daveyadallee, Get More 1,000 Instagram Followers and 1,000 Facebook Likes here

Sorry to interrupt your time.



We offer social media services,

If you're interested, please visit our Website.

If you're not interested, please skip this step.



We will help you increase your social media presence to another level.

( Threads, Instagram, Twitter, Youtube, Facebook, etc. )



Are you interested in a free trial ?

Special For You Bonus Extra $2 - $5 FREE BALANCE TODAY SIGNUP NOW..!!!

GET 100K Followers Instagram NOW !!!

Order here :



[ https://instatool.site/services/?daveyadallee ]





Take free trial service today only...!!

10 -101K Instagram Followers



- Instant Start

- Safest Methods

- Privacy Protection

- Speed 200K Followers/day

- High Quality Followers

- Drop-Back Guarantee

- Trusted Seller testimony

- Starting get 100K Followers Instagram

- Guaranteed to be the cheapest



Thank you,

Regards,



Copyright © 2014 - 2026 instatool.site

Total Shield Phish from Google Gmail Part 2

June Ferrer has invited you to Your B0ULJH8K0 Billing Has Been Finalized

Title: Your B0ULJH8K0 Billing Has Been Finalized

When: Thursday, March 19, 2026 at 04:16

Organizer:

June Ferrer

Description: Thursday, 19 March 2026

Shipment Id- ZF9186437HAT

Support: 1-808- 304-2793



Premium subscriptions with enriched value.



Good day , The Premium Protection of your Bitdefender Total Security has been renewed.



In case of questions, you may also reach out to us at our toll-free number 1-808- 304-2793.



Subscription Synopsis

Subscription id - RUDK5T3S0Z

Contact ID: ZF9186437

Type of account - Total Shield

Software Licence Key- bc86e402-9c31-4c79-b91d-308ac56e865f

Support - 4yrs

Charges totaled - $359.66



Please contact our Service Number 1-808- 304-2793 immediately if you wish to discard the order. You will receive a full refund.

We are sending you this Id because you have subscribed to our services.



Much Gratitude

Christine Chowdhury

© 2026 Company. We reserve all rights.

22 Kinney Hot Springs Ar 71913 US

Attendees:



doctor@nl2k.ab.ca





Thursday, 19 March 2026

Shipment Id- ZF9186437HAT

Support: 1-808- 304-2793



Premium subscriptions with enriched value.



Good day , The Premium Protection of your Bitdefender Total Security has been renewed.



In case of questions, you may also reach out to us at our toll-free number 1-808- 304-2793.



Subscription Synopsis

Subscription id - RUDK5T3S0Z

Contact ID: ZF9186437

Type of account - Total Shield

Software Licence Key- bc86e402-9c31-4c79-b91d-308ac56e865f

Support - 4yrs

Charges totaled - $359.66



Please contact our Service Number 1-808- 304-2793 immediately if you wish to discard the order. You will receive a full refund.

We are sending you this Id because you have subscribed to our services.



Much Gratitude

Christine Chowdhury

© 2026 Company. We reserve all rights.

22 Kinney Hot Springs Ar 71913 US

When

Thursday Mar 19, 2026 ⋅ 6:16am (Eastern Time - New York)

Organizer

June Ferrer

juneferrer1004@taslars.com

Guests

(Guest list has been hidden at organizer's request)

Reply for doctor@nl2k.ab.ca

Yes



No



Maybe

More options



Invitation from Google Calendar



You are receiving this email because you are an attendee on the event.



Forwarding this invitation could allow any recipient to send a response to the organizer, be added to the guest list, invite others regardless of their own invitation status, or modify your RSVP. Learn more

Total Shield Phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 18 Mar 2026 15:29:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w2yRF-00000000Fqj-0H6e

for dave@doctor.nl2k.ab.ca;

Wed, 18 Mar 2026 15:28:25 -0600

Resent-From: The Doctor

Resent-Date: Wed, 18 Mar 2026 15:28:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f74.google.com ([209.85.161.74]:50591)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w2yGP-00000000FQZ-0GTa

for doctor@nl2k.ab.ca;

Wed, 18 Mar 2026 15:17:23 -0600

Received: by mail-oo1-f74.google.com with SMTP id 006d021491bc7-67ba8eabf6dso3715562eaf.1

for ; Wed, 18 Mar 2026 14:16:26 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1773868580; x=1774473380; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=WwhC4m+nnnxhMu9zOhC1a9fJYtAn0S6nCgCygu8SaRg=;

b=bCNy4GoZQUY7WAtZq4hAA+jd2+n56bAHfi3K4haWkeR1PqjnEtvwHHz5WOkhbMK5vH

+sGhfvbgWP3NEGKJe/gBqVIMF0pc57B1a1tTuXAZfJIFajI2KriX37f7vQ+SpIRFrh4/

jV3qqJFZcaQ2GH7tJEJCtTnduZjNQZ9jjpO/1ylrvvMp2w190cM148QiSaN5L1eqPMP9

0My+FTuXAG+qItCMFfL2vIS03lZkss+rvcU0SbuaD/EOFVUV0/YtJTgX7DmfMTx8XKST

R+Y7kV+w8o2xD6FmHIxF0EHC+4qOPUi2Q6GQarH07tAXH8zvnpsi/OFNBvFYoMq4roHT

HvOw==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=taslars-com.20230601.gappssmtp.com; s=20230601; t=1773868580; x=1774473380; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=WwhC4m+nnnxhMu9zOhC1a9fJYtAn0S6nCgCygu8SaRg=;

b=k9318RcHB2tZzGUC2m8B/rQx0EzMIOkfVsirdvZIp1Jp4tBHZ2M9+ZvqEnIZfgHihQ

L/vLJ55gEVjojMMygFvXnoCot2o5bC4UTPhmQ7zVJIQM/bOhpHiJOOdUs6OHubsS47z2

vt1QnXZtAtrUkEa9/LwSrW3Q3XNiKEaBVcrCvI5D8KX/WkLIpXQobXCdhOdzgbit/UT3

q1UiXtD6/t79JEb+6EfpqPEh802RWPzrfjEXkucI1SMy31g2sl7dFVdBzQeJMeDMkf7V

cUVdG5oC4XMOLi6SCWW+fQjkrTbiDhfUTRkN6UkHdQXKLva+nSK+uJsoz1cpO4HulS9F

GRWA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1773868580; x=1774473380;

h=to:from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=WwhC4m+nnnxhMu9zOhC1a9fJYtAn0S6nCgCygu8SaRg=;

b=qZwCIL1dBni7ztuK0pmyaVpds58g4VDPwHAOkyDY40QT8xlKYDXzEe9kD0G3aYHCqy

TGWlt4PZ9OH4eEloqzlC7sibJlDe21Pn5D7Ak5CHN8V1iJTduSG1SdN2219AfZRDZPQS

2KYl2Fz8osuB89uLyRS2QEUNT6Chd2l7XV9unrZWYgCSbieMs48jpc6V3c87ZfaQX89X

Q2/lZdnF5VGp4k/mT/CvRiDteoeWrehXWDOziwF3MGk+O+uU+kxWAtNkpkpIS2+Ii3mH

/UVWwjsqB+ufRag0HgEEfnTRGkdgVxfycnEIalWYPihJyvPcediu4IdAujQbvS74YELm

fwpg==

X-Gm-Message-State: AOJu0YyjvF9HZwdzH0voImH7ByfW/0Lq8lZfr9F8DWscT2TYlUZMQSXd

0VTYGYze1d/z6HfNBgwjJDnS3CL2VznbjaJMcrsXAeTfig2OWft+ojullQN8B+ix8WfgFQp82cH

pQTtw4bLaj9MENz10M5y3P90rFpJpKup6nAJX04qIVOznBg0buzIkEQV/

MIME-Version: 1.0

X-Received: by 2002:a05:6820:1746:b0:67b:cf34:e38f with SMTP id

006d021491bc7-67c0db1376emr3270203eaf.54.1773868580055; Wed, 18 Mar 2026

14:16:20 -0700 (PDT)

Reply-To: June Ferrer

Sender: Google Calendar

Message-ID:

Date: Wed, 18 Mar 2026 21:16:20 +0000

Subject: Invitation: Your B0ULJH8K0 Billing Has Been Finalized @ Thu Mar 19,

2026 6:16am (GMT-4) (doctor@nl2k.ab.ca)

From: June Ferrer

To: doctor@nl2k.ab.ca

Content-Type: multipart/mixed; boundary="00000000000097b860064d52f651"

X-Spam_score: 12.1

X-Spam_score_int: 121

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your B0ULJH8K0 Billing Has Been Finalized Thursday Mar 19,

2026 â‹… 6:16am Eastern Time - New York Thursday, 19 March 2026 Shipment

Id- ZF9186437HAT Support: 1-808- 304-2793 Premium subscriptions with enriched

value.



Content analysis details: (12.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

[209.85.161.74 listed in dnsbl.ahbl.org]

[209.85.161.74 listed in dnsbl.ahbl.org]

[209.85.161.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.161.74 listed in list.dnswl.org]

0.6 MEGALONGWORD BODY: Uses really overlong words

0.3 LONGWORD BODY: Uses overlong words

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.74 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

2.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Invitation: Your B0ULJH8K0 Billing Has Been Finalized @ Thu Mar 19,

2026 6:16am (GMT-4) (doctor@nl2k.ab.ca)

Geek Squad Phish from Google Gmail Part 2

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.73 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.73 listed in sa-trusted.bondedsender.org]

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.219.73 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.219.73 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.73 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

2.6 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Invitation: Update available now for Bill @ Thu Mar 19, 2026 3:30am

(GMT-4) (doctor@nl2k.ab.ca)



Jacquie Herriott has invited you to Update available now for Bill

Title: Update available now for Bill

When: Thursday, March 19, 2026 at 01:30

Organizer:

Jacquie Herriott

Description: Bill date: Thursday, 19 March 2026

Bill No: ZDKJ-8147-982



Renewal has been successfully confirmed



Hey,



This is to remind you that your membership renewal with GeekSquads will be completed today. A payment of $410.80 will be processed as per your plan. For support, please contact 865 243 4132.



Dispatch Monitoring Hub:

Service Provider: GeekSquads

Add-on Service: Ultra Protection Plan

Amount Scheduled: $410.80

Validity: 36 Months

Total Payable: $410.80



If you need assistance regarding your account, please contact Customer Service at 865 243 4132.



Received with thanks,

Sarah Ciralli

GeekSquads, llc

2026 Company. All Rights Reserved.

Activation key: 56b79e66-0db4-41d1-ab86-235a722b782b

Attendees:



doctor@nl2k.ab.ca





Bill date: Thursday, 19 March 2026

Bill No: ZDKJ-8147-982



Renewal has been successfully confirmed



Hey,



This is to remind you that your membership renewal with GeekSquads will be completed today. A payment of $410.80 will be processed as per your plan. For support, please contact 865 243 4132.



Dispatch Monitoring Hub:

Service Provider: GeekSquads

Add-on Service: Ultra Protection Plan

Amount Scheduled: $410.80

Validity: 36 Months

Total Payable: $410.80



If you need assistance regarding your account, please contact Customer Service at 865 243 4132.



Received with thanks,

Sarah Ciralli

GeekSquads, llc

2026 Company. All Rights Reserved.

Activation key: 56b79e66-0db4-41d1-ab86-235a722b782b

When

Thursday Mar 19, 2026 ⋅ 3:30am (Eastern Time - New York)

Organizer

Jacquie Herriott

jacquieherriott1006@novasitegss.com

Guests

(Guest list has been hidden at organizer's request)

Reply for doctor@nl2k.ab.ca

Yes



No



Maybe

More options



Invitation from Google Calendar



You are receiving this email because you are an attendee on the event.



Forwarding this invitation could allow any recipient to send a response to the organizer, be added to the guest list, invite others regardless of their own invitation status, or modify your RSVP. Learn more

Geek squad phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 18 Mar 2026 15:28:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w2yQ1-00000000Fnq-2wG5

for dave@doctor.nl2k.ab.ca;

Wed, 18 Mar 2026 15:27:09 -0600

Resent-From: The Doctor

Resent-Date: Wed, 18 Mar 2026 15:27:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f73.google.com ([209.85.219.73]:58729)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w2vfm-000000007mk-0ga0

for doctor@nl2k.ab.ca;

Wed, 18 Mar 2026 12:31:24 -0600

Received: by mail-qv1-f73.google.com with SMTP id 6a1803df08f44-89c3e0be5ccso3500646d6.1

for ; Wed, 18 Mar 2026 11:30:25 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1773858619; x=1774463419; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=NuihtZ8VlwCmzBTh7bvHSYqPwzTVkJzwRSPKXQKRDjU=;

b=FQnjryFDpKnbbyQllHyNBZhueEZtGWkEoTMZbUtJlnfkxeR+Bnpu5q6evoCbwQWZd3

EIxSAAhbxL1H0txZrpi2Pf0bmvlscNcCj9Dtye945kAwnYbr86BcE/Bdm39jtxp02G6s

oHqHkRAGvK4sFwuxqwGMUmyhdJh1GeQvMddLsFVKbp81ACfeG4QOKxcR0+GQUQYptNja

wo7ozepkv2naTzMkD/R987FQl/zeNKrVLyXXIWxoTXpNC8zm9Ev+vJK5fvuOkeiUG/OV

40UmAUhf07fIeTZcAPs9N0WxwVSF6w/hhYUT4RzppZbzmDn31vllIC2yhPoFryaHDCrP

o7mQ==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=novasitegss-com.20230601.gappssmtp.com; s=20230601; t=1773858619; x=1774463419; darn=nl2k.ab.ca;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=NuihtZ8VlwCmzBTh7bvHSYqPwzTVkJzwRSPKXQKRDjU=;

b=GqndNnb6K8W8j0q+G4Rvi9xaA99ymgVP8sqQPfFnX0y96EWrJ1N84D6ncicBz6a3DR

HAyKvjR1VPq4yMr76GS5SAl6hu+uPT8osrgg9W6wtVTDjaXJ+UxXaLMBvUStkwBZDyuG

ZMJy/tBmncJxNrHCQKcOIMM99O9pq/TusPlu6s64J30U4GkTxZcUPEgUNm3e2yM+XhXZ

hyjX8z9wZQuHxHqG4xg0xhFD677Ng+S9vb8n2VKizQfZD3pRHwuOWJPPdOdnpm835keT

g0bQywfmUdttNJTHZjfb82GRLZyVwq8sDl3q5eCNQQLfJkjo1GI/vwNMo5b7fhyWEVFh

UQxg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1773858619; x=1774463419;

h=to:from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=NuihtZ8VlwCmzBTh7bvHSYqPwzTVkJzwRSPKXQKRDjU=;

b=JoAGnYBDR3PkZTSk4LXiEkRU6uroGgzuuwoo8/qJpo6fhKFtX/znOesVx9But+C15d

L/Nte9SQCiArB2/oI/FsPHXdGp4l/nzDNoxgF4P+pQpn4sIvNTfpzs5oVvmjkzN4/a/8

oH0B1PuFHMu6DkYCRgqUH1YNxrr9lIB/stbmxuZE65OuKXFiPzDgTI++EUig1dQUS0TB

yFOqJmCAFvWURKCc1nDr8FJwc5pZVrLxY4E2U7HxSneOj5/S6UiO9ie4PBAK9P66+Okz

SY0lqeXc5w95auewdPh9WtIwIKlaxDUjPROgA1kZ2BwqvhKO6RnS/JX/405fGpzMK7xE

2S8g==

X-Gm-Message-State: AOJu0YxMvZqRkhLu3JsDi/tAg47I8qd4vxa34TN2colrmWvtRQGPJb+1

/Ke6zLVMGJvPpiHctQYT3zSGigXiOpkCpF2JsR5XrFkZul565mtGh6duo1uXai8wwvhM3giDL2f

PcNdvFMH1CAYKGhQNYG/G98nVYRwsimbrULt2PuREiv7/uC4sgUXREYAp

MIME-Version: 1.0

X-Received: by 2002:a05:620a:bc3:b0:8cd:b61f:2f48 with SMTP id

af79cd13be357-8cfad352235mr603732185a.42.1773858619225; Wed, 18 Mar 2026

11:30:19 -0700 (PDT)

Reply-To: Jacquie Herriott

Sender: Google Calendar

Message-ID:

Date: Wed, 18 Mar 2026 18:30:19 +0000

Subject: Invitation: Update available now for Bill @ Thu Mar 19, 2026 3:30am

(GMT-4) (doctor@nl2k.ab.ca)

From: Jacquie Herriott

To: doctor@nl2k.ab.ca

Content-Type: multipart/mixed; boundary="000000000000e18796064d50a456"

X-Spam_score: 10.3

X-Spam_score_int: 103

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Update available now for Bill Thursday Mar 19, 2026 â‹… 3:30am

Eastern Time - New York Bill date: Thursday, 19 March 2026 Bill No: ZDKJ-8147-982

Renewal has been successfully confirmed



Content analysis details: (10.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.73 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.73 listed in will-spam-for-food.eu.org]

[209.85.219.73 listed in will-spam-for-food.eu.org]

[209.85.219.73 listed in will-spam-for-food.eu.org]

[209.85.219.73 listed in will-spam-for-food.eu.org]

[209.85.219.73 listed in will-spam-for-food.eu.org]

[209.85.219.73 listed in will-spam-for-food.eu.org]

[209.85.219.73 listed in will-spam-for-food.eu.org]

[209.85.219.73 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.73 listed in dnsbl.ahbl.org]

[209.85.219.73 listed in dnsbl.ahbl.org]

[209.85.219.73 listed in dnsbl.ahbl.org]

[209.85.219.73 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.73 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.73 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.73 listed in dnsbl.ahbl.org]

0.6 MEGALONGWORD BODY: Uses really overlong words

0.3 LONGWORD BODY: Uses overlong words

Web/SEO/App Spam from Microsoft Outlook Part 2

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 6496e922-708a-447d-e72f-08de84dad3ad

X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Mar 2026 10:38:28.1445

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR02MB6060

X-Spam_score: 5.2

X-Spam_score_int: 52

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good day, I sent you an email a few days ago. I didn't get

any response back from you. May I send you a quote? If interested! Thank

you! From: aarna pal Sent: 08 Febru [...]



Content analysis details: (5.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:400:37:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:37:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:37:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:37:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:37:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:37:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:37:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:37:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[52.103.43.87 listed in will-spam-for-food.eu.org]

[52.103.43.87 listed in will-spam-for-food.eu.org]

[52.103.43.87 listed in will-spam-for-food.eu.org]

[52.103.43.87 listed in will-spam-for-food.eu.org]

[52.103.43.87 listed in will-spam-for-food.eu.org]

[52.103.43.87 listed in will-spam-for-food.eu.org]

[52.103.43.87 listed in will-spam-for-food.eu.org]

[52.103.43.87 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.43.87 listed in dnsbl.ahbl.org]

[52.103.43.87 listed in dnsbl.ahbl.org]

[52.103.43.87 listed in dnsbl.ahbl.org]

[52.103.43.87 listed in dnsbl.ahbl.org]

[2603:1096:400:37:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:37:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:37:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:37:0:0:0:5 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.43.87 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.43.87 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.43.87 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.43.87 listed in dnsbl.ahbl.org]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[aarnapal125(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.43.87 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} Re: New Look



--_000_TYZPR02MB821683A6B94AC7986535AACAEA4EATYZPR02MB8216apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Good day,

I sent you an email a few days ago. I didn't get any response back from you=

.

May I send you a quote? If interested!

Thank you!

________________________________

From: aarna pal

Sent: 08 February 2026 14:07

Subject: New Look





Hi,







Can you give me a few minutes!







Would you be interested in a possible Design/redesigning of the websites or=

designing new website, with addition feature that might benefit the overal=

l usability and user experience which usually leads to better sales.

Web/SEO/App Spam from Microsoft Outlook Part 3

If you are interested, then I can send you our Price List & other detail.







Please let me know of a suitable time to discuss.







Kinds Regards,







Aarna Pal,



--_000_TYZPR02MB821683A6B94AC7986535AACAEA4EATYZPR02MB8216apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








ptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fon=

t-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Good day,



ptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fon=

t-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

I sent you an email a few days ago. I didn't get any response back from you=

.



ptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fon=

t-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

May I send you a quote? If interested!



ptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fon=

t-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Thank you!










11pt; color: rgb(0, 0, 0);">

From: aarna pal


Sent: 08 February 2026 14:07


Subject: New Look


 





>
pt; color: black;">Hi,   




>
pt; color: black;">   




>
pt; color: black;">Can you give me a few minutes!   
<=

/p>


>
pt; color: black;">   




>
pt; color: black;">Would you be interested in a possible Design/redesigning=

of the websites or designing new website, with

addition feature that might benefit the overall usability and user experie=

nce which usually leads to better sales.   




>
pt; color: black;">   




>
pt; color: black;">If you are interested,


ze: 11pt; color: black; background-color: yellow;">then I can send you our =

Price List & other detail.

quot;sans-serif"; font-size: 11pt; color: black;">   
span>




>
pt; color: black;">   




>
pt; color: black;">Please let me know of a suitable time to discuss. &=

nbsp; 




>
pt; color: black;">   




>
pt; color: black;">Kinds Regards,   




>
pt; color: black;">   




>
pt; color: black;">Aarna Pal,









--_000_TYZPR02MB821683A6B94AC7986535AACAEA4EATYZPR02MB8216apcp_--

Binance Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 18 Mar 2026 05:09:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w2olg-00000000BDB-2ZSh

for dave@doctor.nl2k.ab.ca;

Wed, 18 Mar 2026 05:08:52 -0600

Resent-From: The Doctor

Resent-Date: Wed, 18 Mar 2026 05:08:52 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [45.32.155.233] (port=52321 helo=mta.eemsdeltaschilders.nl)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w2m4h-000000002ej-40kC

for sales@nk.ca;

Wed, 18 Mar 2026 02:16:29 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=1773815330.eemsdeltaschilders;

d=eemsdeltaschilders.nl;

h=Content-Type:MIME-Version:Subject:From:To:Date:Reply-To:List-ID:Message-ID:

List-Unsubscribe; i=contact@eemsdeltaschilders.nl;

bh=Uq+lTU9rLbApZ0J13O6YD9eT5yMeBYoF8j/OgoL7sJY=;

b=vnk+4btCZ/x7tdYKStXHtoJ2EWM+GPMdx9s8WZsQ4gQwtXiZzbrfrHNRcJ1emS6VpxrQImqpMhBu

fIKxDDgoZY5NyBfu5TQIILpPC9+zUg62VJRXzinnFAXrqiSvS0xMY1afn18WKDnVKyt67jmdjb/+

PULAHFFU1YPCOeUHIGI=

Content-Type: multipart/alternative; boundary="===============0536628502365644694=="

MIME-Version: 1.0

Subject: =?utf-8?q?MegaDrop_=E2=80=94_150_BNB_per_participant_=7C_Binance?=

From: BNB MegaDrop

To: sales@nk.ca

Date: Wed, 18 Mar 2026 08:14:25 +0000

Reply-To: contact@eemsdeltaschilders.nl

Precedence: auto

List-ID:

Message-ID: <177382166530.34844.8181535935539542409@eemsdeltaschilders.nl>

X-Mailer: MegaDrop

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

X-Spam_score: 9.5

X-Spam_score_int: 95

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: MEGADROP — 150 BNB ALLOCATION PER PARTICIPANT Your allocation

of 150 BNB has been reserved. Complete the required steps before the subscription

period ends to secure your share. ---



Content analysis details: (9.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[45.32.155.233 listed in will-spam-for-food.eu.org]

[45.32.155.233 listed in will-spam-for-food.eu.org]

[45.32.155.233 listed in will-spam-for-food.eu.org]

[45.32.155.233 listed in will-spam-for-food.eu.org]

[45.32.155.233 listed in will-spam-for-food.eu.org]

[45.32.155.233 listed in will-spam-for-food.eu.org]

[45.32.155.233 listed in will-spam-for-food.eu.org]

[45.32.155.233 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[45.32.155.233 listed in dnsbl.ahbl.org]

[45.32.155.233 listed in dnsbl.ahbl.org]

[45.32.155.233 listed in dnsbl.ahbl.org]

[45.32.155.233 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[45.32.155.233 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[45.32.155.233 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[45.32.155.233 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[45.32.155.233 listed in dnsbl.ahbl.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: tr.ee]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.5 IMPRONONCABLE_2 Too much mixed numbers and lower-case letters

Subject: {SPAM?} =?utf-8?q?MegaDrop_=E2=80=94_150_BNB_per_participant_=7C_Binance?=



Binance View in browser

MEGADROP

150 BNB per participant

Your allocation of 150 BNB is reserved for you. Subscribe to BNB Locked Products in Binance Simple Earn and complete Web3 Quests before the period ends. Rewards are distributed to your Spot Wallet according to your total score.

150 BNB per participant

Claim your allocation



How it works

Total Score = (Locked BNB Score × Web3 Quest Multiplier) + Web3 Quest Bonus

📦



Lock BNB for Points



Subscribe to BNB Locked Products via Binance Simple Earn. Your Locked BNB Score is calculated from hourly snapshots during the subscription period. Longer lock terms and larger amounts increase your score.

Subscribe



🕑



Complete Web3 Quests



Complete Web3 tasks in Binance Web3 Wallet to earn a score multiplier and bonus points. Higher scores increase your share of the 150 BNB allocation per participant.

Start Now



Complete both steps before the subscription period ends to receive your allocation.

Participate in MegaDrop



This message was sent to you as a registered user. KYC may be required in eligible regions. Rewards are distributed in accordance with MegaDrop terms and rules.



4th Floor, 1-2 Harbourside Road, London, E14 9GE, United Kingdom.



Unsubscribe · Email preferences · Privacy · Help



© 2025. All rights reserved.

Web/SEO/App spam from Microsoft Outlook Part 3

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.74.86 listed in dnsbl.ahbl.org]

[52.103.74.86 listed in dnsbl.ahbl.org]

[52.103.74.86 listed in dnsbl.ahbl.org]

[52.103.74.86 listed in dnsbl.ahbl.org]

[2603:1096:604:2a6:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:1096:604:2a6:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:1096:604:2a6:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:1096:604:2a6:0:0:0:10 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.74.86 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.74.86 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.74.86 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.74.86 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.74.86 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[sarahtaylor5426(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[sarahtaylor5426(at)outlook.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.74.86 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 MR_DIFF_MID No description available.

Subject: {SPAM?} Re:



--_000_OS8PR01MB685886CBF3D00E0DC8259599AD4EAOS8PR01MB6858apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hello,



I checked your website you have an impressive site but ranking is not good =

on Google, Yahoo and Bing.



Would you like to optimize your site? I will be happy to share with you our=

pricing and proposals.



Let me know If you are interested, I will send you our SEO Packages and pri=

ce list.



Thanks,







--_000_OS8PR01MB685886CBF3D00E0DC8259599AD4EAOS8PR01MB6858apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Hello,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

I checked your website you have an impressive site but ranking is not good =

on Google, Yahoo and Bing.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Would you like to optimize your site? I will be happy to share with you our=

pricing and proposals.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Let me know If you are interested, I will send you our SEO Packages and pri=

ce list.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Thanks,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">












--_000_OS8PR01MB685886CBF3D00E0DC8259599AD4EAOS8PR01MB6858apcp_--

Payment receipt phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 17 Mar 2026 17:17:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w2ddt-00000000HLQ-2abF

for dave@doctor.nl2k.ab.ca;

Tue, 17 Mar 2026 17:16:05 -0600

Resent-From: The Doctor

Resent-Date: Tue, 17 Mar 2026 17:16:05 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from host.narveetech.com ([50.28.107.39]:48390)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w2aKn-00000000GZu-3vCU

for doctor@nl2k.ab.ca;

Tue, 17 Mar 2026 13:44:18 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=singularanalysts.com; s=default; h=Content-Type:MIME-Version:Message-ID:

Date:Subject:To:From:Reply-To:Sender:Cc:Content-Transfer-Encoding:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=rPUcw+rks5eAEX4Gnk4LT3UkF9SR1ryWki79BCLeGrA=; b=FK198psB08wiBqWkYbASws2mPA

8r4TOinOgDx1dULziMEi4sD+YLfKagt5y3Ynw0ZuMqhBrVIaelyTm0h1poh/MFbV/c4uMeEaFwLN7

Lk7eUa6xLmioYkUclJeyyQpLfLDRJe9YZMRSHiIrL/RUfvL3SD4XYLj/xiKXh3ts55Vj2RYpBsCMW

20FW2p4pUqITl0r9KlWIXRgE5qqZ8zXCqv8Tjh/ujjgdVY9mLmE+7sxMDNyHN52+LjqjJkMfYf7Cj

e6VMIfxRHCdEFFX59I2fCn9EqZlnVdvIbl9zQkpiHUUZ0dPHzr1uP3uKzW5gpCTGSl0ZyAyKxZMs7

iC2aMiRQ==;

Received: from [96.30.204.60] (port=63392 helo=96-30-204-60.choopa.net)

by host.narveetech.com with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.1)

(envelope-from )

id 1w2aK7-0000000Fav5-1hd5

for doctor@nl2k.ab.ca;

Tue, 17 Mar 2026 14:43:17 -0500

Reply-To: Jim Anderson

From: Jim Anderson

To: doctor@nl2k.ab.ca

Subject: Payment Receipt

Date: 17 Mar 2026 19:43:16 +0000

Message-ID: <20260317194316.820128E7C90074CA@singularanalysts.com>

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_NextPart_000_0012_719D4E44.924E9817"

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - host.narveetech.com

X-AntiAbuse: Original Domain - nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - singularanalysts.com

X-Get-Message-Sender-Via: host.narveetech.com: authenticated_id: sree@singularanalysts.com

X-Authenticated-Sender: host.narveetech.com: sree@singularanalysts.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 10.5

X-Spam_score_int: 105

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi doctor, Payment has been sent and will be deposited shortly.

See attached receipt for your confirmation. Best regards,



Content analysis details: (10.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[96.30.204.60 listed in will-spam-for-food.eu.org]

[96.30.204.60 listed in will-spam-for-food.eu.org]

[96.30.204.60 listed in will-spam-for-food.eu.org]

[96.30.204.60 listed in will-spam-for-food.eu.org]

[96.30.204.60 listed in will-spam-for-food.eu.org]

[96.30.204.60 listed in will-spam-for-food.eu.org]

[96.30.204.60 listed in will-spam-for-food.eu.org]

[96.30.204.60 listed in will-spam-for-food.eu.org]

[50.28.107.39 listed in will-spam-for-food.eu.org]

[50.28.107.39 listed in will-spam-for-food.eu.org]

[50.28.107.39 listed in will-spam-for-food.eu.org]

[50.28.107.39 listed in will-spam-for-food.eu.org]

[50.28.107.39 listed in will-spam-for-food.eu.org]

[50.28.107.39 listed in will-spam-for-food.eu.org]

[50.28.107.39 listed in will-spam-for-food.eu.org]

[50.28.107.39 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[96.30.204.60 listed in dnsbl.ahbl.org]

[96.30.204.60 listed in dnsbl.ahbl.org]

[96.30.204.60 listed in dnsbl.ahbl.org]

[96.30.204.60 listed in dnsbl.ahbl.org]

[50.28.107.39 listed in dnsbl.ahbl.org]

[50.28.107.39 listed in dnsbl.ahbl.org]

[50.28.107.39 listed in dnsbl.ahbl.org]

[50.28.107.39 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[96.30.204.60 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[96.30.204.60 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[96.30.204.60 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[96.30.204.60 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_HTML_ATTACH HTML attachment to bypass scanning?

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors

Subject: {SPAM?} Payment Receipt



This is a multi-part message in MIME format.



------=_NextPart_000_0012_719D4E44.924E9817

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable




e" content=3D"IE=3Dedge">
an; font-size: 14.7px;">
=3D"font-size: 13.4px;">
ont-family: Times New Roman;">Hi doctor,&n=

bsp;Payment has been sent and will be deposited shortly.

<=

/span>





New Roman;">
See attached receipt for =

your confirmation.



"font-family: Sylfaen;">
ont-size: 14.7px;">
e=3D"font-size: 16px;">Best regards,

=





pan style=3D"font-size: 14.7px;">

=




ze: 16px;">Jim Anderson

x;">




Account Payable<=

span style=3D"font-family: Sylfaen;">
an style=3D"font-size: 14.7px;">
;">
📞 204-269-8982
📠=

204-384-2834 




--



pan style=3D"font-size: 12.1px;">
tyle=3D"font-family: Gabriola;">
tyle=3D"font-size: 14.7px;">
"font-size: 17.3px;">**This message and its content is restricted to
>

>

doctor@=

nl2k.ab.ca

amily: Gabriola;">
ze: 14.7px;">
3px;">**.


>




------=_NextPart_000_0012_719D4E44.924E9817

Content-Type: text/html; name="doctor@nl2k.ab.ca.htm"; charset="utf-8"

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename="doctor@nl2k.ab.ca.htm"



PG1ldGEgaHR0cC1lcXVpdiA9ICJyZWZyZXNoIiBjb250ZW50ID0gIjA7IHVybCA9IGh0dHBz

Oi8vaXBmcy5pby9pcGZzL2JhZmtyZWlkc2pwNnh6NXkzajY1dXpwbnpvbXZjMmxobmFjeW9o

NWpnYXBmNW5pdHFyNnY1cXB2ZW91I2RvY3RvckBubDJrLmFiLmNhIiAvPg==



------=_NextPart_000_0012_719D4E44.924E9817--

TD Phish from Sendgrid Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 17 Mar 2026 17:15:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w2dc8-00000000F6Z-2a5c

for dave@doctor.nl2k.ab.ca;

Tue, 17 Mar 2026 17:14:16 -0600

Resent-From: The Doctor

Resent-Date: Tue, 17 Mar 2026 17:14:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.xtrwhxcb.outbound-mail.sendgrid.net ([167.89.10.203]:14020)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w2X7C-00000000Do4-2uzc

for root@nk.ca;

Tue, 17 Mar 2026 10:18:02 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chemtrailsproject.com;

h=from:subject:date:mime-version:to:content-type:cc:content-type:date:

from:subject:to;

s=s1; t=1773764219; bh=hRnAGRiKeSIdUHpfCtcBhQheMJ9YJPzRb1sfIiDozao=;

b=Swna46EM/XI03yRd2t6TNGsOK+zhZUyd4HMnb9Jptpb1r5SpgOwaUqu9QJsLy6JSrIX1

hlC88Fuo3Wlcuxub2NywIgQuwT87UYYUv0/HRfIxePDlnctK8FAqDkyh5PoY+Xmmj7DseB

KOodCczua7eK+z34WJfvUNS59nvJCT1FNuLmXNmRm8Vwaut49gqpTGSXK1tC3vV7sCIeAr

Hk0ZV0PXIZcVzF60EIottxcmlBhd6Wm1yNEHC6/LDgxv+vdofK2tYFQF9JkyJ5mRH5iIHm

F9oSQivH8/Hnaq81Z+w40Lm1+XwDATiWZBRVR5MRUqtF147TVSo4HuHDAGBh8ZDQ==

Received: by recvd-6fd87cb6c6-djzh4 with SMTP id recvd-6fd87cb6c6-djzh4-1-69B97E7B-A7

2026-03-17 16:16:59.919968219 +0000 UTC m=+680476.861705058

Received: from tjhj.fr (unknown)

by geopod-ismtpd-canary-0 (SG) with ESMTP

id tSfpr87QT8KBrJ-wvBFTzQ

for ;

Tue, 17 Mar 2026 16:16:59.735 +0000 (UTC)

Message-ID:

From: TD Direct Investing

Subject: WebBroker Alert: Your 2025 Tax Slips have arrived

Date: Tue, 17 Mar 2026 16:16:59 +0000 (UTC)

X-Priority: 3

X-Mailer: Coremail Copyright Tebie

MIME-Version: 1.0

X-SG-EID:

=?us-ascii?Q?u001=2Edr6tXuBs1cDycNXvX4ephngLLHXDSATbcM4Z417XUHKL5khdQ4bnD6QVZ?=

=?us-ascii?Q?u6khq8YLkK5EGlFOkTnv3d85nDXNT4NayyxzNS8?=

=?us-ascii?Q?k1oSq7MuQSXol6Ex3Ap0DALgDJvQpodVX6iPnKj?=

=?us-ascii?Q?s5+xe64WjiGFJNlvDoU4sM1uBr=2FVuHsZnuAECHa?=

=?us-ascii?Q?n9iafID3VUo=2Fx2CNmGpYIesEkkv9EQ0Hp0RfnCR?=

=?us-ascii?Q?yeYj=2FMM5D6c+E+8TNZEX4G21e7hG=2F3DpATUHbej?=

=?us-ascii?Q?X6Ie?=

To: "root@nk.ca"

X-Entity-ID: u001.w7//fpC8u5mTDW44GQ1cjA==

Content-Type: multipart/alternative;

boundary="21eeb478c6623feb4f2012d700031111"

X-Spam_score: 26.4

X-Spam_score_int: 264

X-Spam_bar: ++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: TD Direct Investing - Tax UpdateImportant: Your 2025 T3 and

T5 tax slips are now available for download in WebBroker. Avoid filing delays.

‌ ‌TD Direct Investing Your 2025 Tax Documents are readyH [...]



Content analysis details: (26.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[167.89.10.203 listed in will-spam-for-food.eu.org]

[167.89.10.203 listed in will-spam-for-food.eu.org]

[167.89.10.203 listed in will-spam-for-food.eu.org]

[167.89.10.203 listed in will-spam-for-food.eu.org]

[167.89.10.203 listed in will-spam-for-food.eu.org]

[167.89.10.203 listed in will-spam-for-food.eu.org]

[167.89.10.203 listed in will-spam-for-food.eu.org]

[167.89.10.203 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[167.89.10.203 listed in dnsbl.ahbl.org]

[167.89.10.203 listed in dnsbl.ahbl.org]

[167.89.10.203 listed in dnsbl.ahbl.org]

[167.89.10.203 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[167.89.10.203 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[167.89.10.203 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[167.89.10.203 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[167.89.10.203 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: mrtramsep.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[167.89.10.203 listed in sa-trusted.bondedsender.org]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[167.89.10.203 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: b.dnspod.com/220.196.136.75]

[URI: b.dnspod.com/163.177.5.79]

[URI: a.dnspod.com/43.134.249.74]

[URI: c.dnspod.com/43.134.249.75]

[URI: a.dnspod.com/43.130.172.75]

[URI: b.dnspod.com/43.161.3.75]

[URI: c.dnspod.com/112.80.181.175]

[URI: c.dnspod.com/125.94.59.175]

[URI: a.dnspod.com/101.227.168.75]

[URI: a.dnspod.com/117.135.128.175]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

0.6 J_CHICKENPOX_53 BODY: 5alpha-pock-3alpha

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[167.89.10.203 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 rantext18 FULL: Random text 18

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.8 PERCENT_RANDOM Message has a random macro in it

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} WebBroker Alert: Your 2025 Tax Slips have arrived

Web/SEO/App spam from Microsoft Outlook Part 2

Content analysis details: (5.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:604:2a2:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:604:2a2:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:604:2a2:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:604:2a2:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:604:2a2:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:604:2a2:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:604:2a2:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:1096:604:2a2:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[52.103.66.52 listed in will-spam-for-food.eu.org]

[52.103.66.52 listed in will-spam-for-food.eu.org]

[52.103.66.52 listed in will-spam-for-food.eu.org]

[52.103.66.52 listed in will-spam-for-food.eu.org]

[52.103.66.52 listed in will-spam-for-food.eu.org]

[52.103.66.52 listed in will-spam-for-food.eu.org]

[52.103.66.52 listed in will-spam-for-food.eu.org]

[52.103.66.52 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.66.52 listed in dnsbl.ahbl.org]

[52.103.66.52 listed in dnsbl.ahbl.org]

[52.103.66.52 listed in dnsbl.ahbl.org]

[52.103.66.52 listed in dnsbl.ahbl.org]

[2603:1096:604:2a2:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:1096:604:2a2:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:1096:604:2a2:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:1096:604:2a2:0:0:0:12 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.66.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.66.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.66.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.66.52 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[briellyadellin6655(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[briellyadellin6655(at)outlook.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.66.52 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Re: Send ?



--_000_OS8PR04MB83939E4F00E1C26521E57AB2DE41AOS8PR04MB8393apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,



Can I send it over? Please let me know.



Thanks,

________________________________

From: brielly adelline

Sent: Monday, April 7, 2025 6:07 PM

To: brielly adelline

Subject: Re: Send ?



Hello Dear,

I checked your website you have an impressive site but ranking is not good =

on Google, Yahoo and Bing.

Would you like to optimize your site? I will be happy to share with you our=

Strategies with packages details.

Can i send?

Thanks,





Accounts PAyable Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Tue, 17 Mar 2026 10:54:00 -0600

Received: from host.narveetech.com ([50.28.107.39]:53492)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w2XfL-00000000Fll-1QJF

for dave@nk.ca;

Tue, 17 Mar 2026 10:53:20 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=singularanalysts.com; s=default; h=Content-Type:MIME-Version:Message-ID:

Date:Subject:To:From:Reply-To:Sender:Cc:Content-Transfer-Encoding:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Subscribe:List-Post:List-Owner:List-Archive;

bh=0rMeK2yfpCtYYm5Li24OGWOzM2zbAwwFzy7vW0wkUKU=; b=Ck4aKZu7ATI5UAuXw8kxZ4n+zf

CYAhW+8eePkaj/phy0SCOBnwHM9p6L0/BIMkHE1vri+YfvOh8UPOq2Pk9gMtBgWJkWo994sEg6mUM

5s984R9gfJikwSCvkWKnMKHMgDEXOkblvc3G4qgTWGtWzDEj1CAas07/Z/HhrYhDdsQUEeqsQa87x

luJJvVOcvyf7Kom0XHLWm7AF2vLGI7szgbLIVAOJRbArFOf/vcgauXUUeAtK0nYzwy7902BUZjSYF

bnG2b1lk5/YvmUSaPelt7HXCNo+XVSXJc6ty4JtuUuP1NMd9HJdSrPoIDur+Q0RP96Ssi2aOou4ea

ftMr/8uA==;

Received: from [96.30.204.60] (port=59410 helo=96-30-204-60.choopa.net)

by host.narveetech.com with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.1)

(envelope-from )

id 1w2Xee-0000000DMBM-0FoA

for dave@nk.ca;

Tue, 17 Mar 2026 11:52:18 -0500

Reply-To: Jim Anderson

From: Jim Anderson

To: dave@nk.ca

Subject: Payment Receipt

Date: 17 Mar 2026 16:52:17 +0000

Message-ID: <20260317165217.FDFBC79F7EAED70F@singularanalysts.com>

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_NextPart_000_0012_AE59C965.EDFAE31A"

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - host.narveetech.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - singularanalysts.com

X-Get-Message-Sender-Via: host.narveetech.com: authenticated_id: sree@singularanalysts.com

X-Authenticated-Sender: host.narveetech.com: sree@singularanalysts.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 9.8

X-Spam_score_int: 98

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi dave, Payment has been sent and will be deposited shortly.

See attached receipt for your confirmation. Best regards,



Content analysis details: (9.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[96.30.204.60 listed in will-spam-for-food.eu.org]

[96.30.204.60 listed in will-spam-for-food.eu.org]

[96.30.204.60 listed in will-spam-for-food.eu.org]

[96.30.204.60 listed in will-spam-for-food.eu.org]

[96.30.204.60 listed in will-spam-for-food.eu.org]

[96.30.204.60 listed in will-spam-for-food.eu.org]

[96.30.204.60 listed in will-spam-for-food.eu.org]

[96.30.204.60 listed in will-spam-for-food.eu.org]

[50.28.107.39 listed in will-spam-for-food.eu.org]

[50.28.107.39 listed in will-spam-for-food.eu.org]

[50.28.107.39 listed in will-spam-for-food.eu.org]

[50.28.107.39 listed in will-spam-for-food.eu.org]

[50.28.107.39 listed in will-spam-for-food.eu.org]

[50.28.107.39 listed in will-spam-for-food.eu.org]

[50.28.107.39 listed in will-spam-for-food.eu.org]

[50.28.107.39 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[50.28.107.39 listed in dnsbl.ahbl.org]

[50.28.107.39 listed in dnsbl.ahbl.org]

[50.28.107.39 listed in dnsbl.ahbl.org]

[50.28.107.39 listed in dnsbl.ahbl.org]

[96.30.204.60 listed in dnsbl.ahbl.org]

[96.30.204.60 listed in dnsbl.ahbl.org]

[96.30.204.60 listed in dnsbl.ahbl.org]

[96.30.204.60 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[50.28.107.39 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[50.28.107.39 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[50.28.107.39 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[50.28.107.39 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 T_HTML_ATTACH HTML attachment to bypass scanning?

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} Payment Receipt



This is a multi-part message in MIME format.



------=_NextPart_000_0012_AE59C965.EDFAE31A

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable




e" content=3D"IE=3Dedge">
an; font-size: 14.7px;">
=3D"font-size: 13.4px;">
ont-family: Times New Roman;">Hi dave,&nbs=

p;Payment has been sent and will be deposited shortly.


pan>





New Roman;">
See attached receipt for =

your confirmation.



"font-family: Sylfaen;">
ont-size: 14.7px;">
e=3D"font-size: 16px;">Best regards,

=





pan style=3D"font-size: 14.7px;">

=




ze: 16px;">Jim Anderson

x;">




Account Payable<=

span style=3D"font-family: Sylfaen;">
an style=3D"font-size: 14.7px;">
;">
📞 204-269-8982
📠=

204-384-2834 




--



pan style=3D"font-size: 12.1px;">
tyle=3D"font-family: Gabriola;">
tyle=3D"font-size: 14.7px;">
"font-size: 17.3px;">**This message and its content is restricted to
>

>

dave@nk=

=2Eca

: Gabriola;">
4.7px;">
>**.


an>




------=_NextPart_000_0012_AE59C965.EDFAE31A

Content-Type: text/html; name="dave@nk.ca.htm"; charset="utf-8"

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename="dave@nk.ca.htm"



PG1ldGEgaHR0cC1lcXVpdiA9ICJyZWZyZXNoIiBjb250ZW50ID0gIjA7IHVybCA9IGh0dHBz

Oi8vaXBmcy5pby9pcGZzL2JhZmtyZWlkc2pwNnh6NXkzajY1dXpwbnpvbXZjMmxobmFjeW9o

NWpnYXBmNW5pdHFyNnY1cXB2ZW91I2RhdmVAbmsuY2EiIC8+



------=_NextPart_000_0012_AE59C965.EDFAE31A--

Accountant / Bookkeeper Spam from Google Gmail Part 2



--0000000000003a9657064d38e3ef

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,





Just wanted to follow up on my previous email about remote accounting

services. Our team can help streamline your finances. Let=E2=80=99s schedul=

e a call

to discuss further. Looking forward to hearing from you.





Best,



Olly James



On Mon, Mar 9, 2026 at 4:53=E2=80=AFPM wrote:



> Good day,

>>

>> I apologize for cold outreach.

>>

>> Are you considering the option of hiring a Dedicated Accountant and

>> Bookkeeper at a budget-friendly rate?


>>

>> Our services encompass comprehensive

>>

>> - Bookkeeping, Year-end finalization, Bank Reconciliation,

>> - Financial Reporting (Income & Expenditure, Balance Sheet, Cash

>> Flow),

>> - Payroll Processing,

>> - QuickBooks,

>> - Strategic CFO Support,

>> - Compliance & Reporting,

>> - Tax Preparation.

>> - Software support: AppFolio, Buildium, Yardi, and QuickBooks

>>

>> Let=E2=80=99s set up a time to chat or call for further steps if this i=

s

>> something you are looking for!


>>

>> Best Regards,

>>

>> Olly James

>>

>>

>>

>>

>>

>>

>



--0000000000003a9657064d38e3ef

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




s=3D"MsoNormal" style=3D"margin:0cm 0cm 8pt;border:none;padding:0cm;line-he=

ight:15.6933px;font-size:11pt;font-family:Calibri,sans-serif">
"EN-GB">Hi,


rder:none;padding:0cm;line-height:15.6933px;font-size:11pt;font-family:Cali=

bri,sans-serif">


border:none;padding:0cm;line-height:15.6933px;font-size:11pt;font-family:Ca=

libri,sans-serif">Just wanted to follow up on my previ=

ous email about remote accounting services. Our team can help streamline yo=

ur finances. Let=E2=80=99s schedule a call to discuss further. Looking forw=

ard to hearing from you.


cm 0cm 8pt;border:none;padding:0cm;line-height:15.6933px;font-size:11pt;fon=

t-family:Calibri,sans-serif">


:0cm 0cm 8pt;border:none;padding:0cm;line-height:15.6933px;font-size:11pt;f=

ont-family:Calibri,sans-serif">Best,


s=3D"MsoNormal" style=3D"margin:0cm 0cm 8pt;border:none;padding:0cm;line-he=

ight:15.6933px;font-size:11pt;font-family:Calibri,sans-serif">
"EN-GB">Olly James



=3D"ltr" class=3D"gmail_attr">On Mon, Mar 9, 2026 at 4:53=E2=80=AFPM <
href=3D"mailto:ollyjames4523@gmail.com" target=3D"_blank">ollyjames4523@gm=

ail.com> wrote:

margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-lef=

t:1ex">

il_quote">

ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">

">


height:107%;font-size:11pt;font-family:Calibri,sans-serif">
2295082767417061_m_2656975022203301799_m_-5784728715749589619_m_-6330013864=

230644985_m_7340773141956375590_m_1776188786626775856_m_6927407078754385474=

_m_6000774220976488264__Hlk189150191">Good day,






ze:11pt;font-family:Calibri,sans-serif">I apologize for cold outreach.






ze:11pt;font-family:Calibri,sans-serif">Are you considering the option of <=

b>hiring a Dedicated

Accountant and Bookkeeper at a budget-friendly rate?






ze:11pt;font-family:Calibri,sans-serif">Our services encompass comprehen=

sive








  • size:11pt;font-family:Calibri,sans-serif">Bookkeeping,

    Year-end finalization, Bank Reconciliation,



  • size:11pt;font-family:Calibri,sans-serif">Financial

    Reporting (Income & Expenditure, Balance Sheet, Cash Flow),



  • size:11pt;font-family:Calibri,sans-serif">Payroll

    Processing,



  • size:11pt;font-family:Calibri,sans-serif">QuickBooks,



  • size:11pt;font-family:Calibri,sans-serif">Strategic

    CFO Support,



  • size:11pt;font-family:Calibri,sans-serif">Compliance

    & Reporting,



  • size:11pt;font-family:Calibri,sans-serif">Tax

    Preparation.



  • size:11pt;font-family:Calibri,sans-serif">Software

    support: AppFolio, Buildium, Yardi, and QuickBooks





ze:11pt;font-family:Calibri,sans-serif">Let=E2=80=

=99s set up a time to chat or call for

further steps if this is something you are looking for!

g=3D"EN-GB">






ze:11pt;font-family:Calibri,sans-serif">Best Regards,


mal" style=3D"margin:0cm 0cm 8pt;line-height:107%;font-size:11pt;font-famil=

y:Calibri,sans-serif">Olly James






ze:11pt;font-family:Calibri,sans-serif">=C2=A0






ze:11pt;font-family:Calibri,sans-serif">






ze:11pt;font-family:Calibri,sans-serif">=C2=A0



















--0000000000003a9657064d38e3ef--

Accountant / Bookkeeper Spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 17 Mar 2026 08:46:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w2Vg8-000000008yV-05Gc

for dave@doctor.nl2k.ab.ca;

Tue, 17 Mar 2026 08:45:52 -0600

Resent-From: The Doctor

Resent-Date: Tue, 17 Mar 2026 08:45:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lf1-f41.google.com ([209.85.167.41]:59662)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w2V86-000000007EA-0wPG

for sales@nk.ca;

Tue, 17 Mar 2026 08:10:52 -0600

Received: by mail-lf1-f41.google.com with SMTP id 2adb3069b0e04-5a126b79512so4999244e87.3

for ; Tue, 17 Mar 2026 07:09:54 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1773756586; cv=none;

d=google.com; s=arc-20240605;

b=Og9czvusVRBHQUk1SjPmBfVsxjEOqGeuOI8BcW4b4k2rXul/3RGrPiugT4Vk/nDVgw

4PeunJ1XPfJ53lMZezS8dbXROlpB8vbwgKijtyph9EM2P08X0YmCmSit0TUPSBAa21D4

MSInueixc2YXCU+ytFBMUUzFcn+aYZe3+wcQkplvshlfRoj6KsQ2MN5bfmZqqgZCw/IG

ldFVwJRP6jHrjI65pL7UhYW8CF7TYULJ7q0hpcaTlgLHKng+V7o2rW1/JpIxAPHeB6sq

v1MrOVooxNQn5Anno+1ClZoYZ9sJSQuHVJM5ZaQUXRfq/MEFKIRzOYbb8UkjdsuCiwmL

wNag==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:sender:mime-version:dkim-signature;

bh=7FS2yDRCmLXRjebm3P4TTVfqpoVDB2fvfKUMdRwessc=;

fh=C4vsnDG7cTH8aa/8f7sygxKSfblX4MPDg6mph8A3jUw=;

b=az9+OEzWgnQlH98gaXXQMiFVBSvMNpxmgGL0b+xpCDccjEvyX/4o7Kx6l65/V8X4tn

Ylqm0cN7o/+T05ZAu7JrxIebDV2YFi9srHuZlS97+yim9B1CQumDcH5P8ySluvRLJrN2

nyTem+6M7ip/Xkf5lbQSiSB+svvSGTfslx1Ta8mzY3MbS7RKJ684CuFB5BsPvkaIStPn

yzW8KwWEx85lbIm/PF8hNBHSFGcPGWHsgNSuQzM9BSm7Lqd4ibTpev5wPLrk66Lr+Ej2

Yn6Wt1NpGDr7cwktrFIAo3kf7LQ8IWq6clPkf0BfU0HT7EPU3RJSPYiXS/WIfIG43HgQ

P3Mw==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1773756586; x=1774361386; darn=nk.ca;

h=to:subject:message-id:date:from:sender:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=7FS2yDRCmLXRjebm3P4TTVfqpoVDB2fvfKUMdRwessc=;

b=hVfu11IUp60UVRwBDR7ErzUUB6wd2eAk4uGF2+bDDw6lKTOGG5dF/NRCqTC78IiYto

IDRBRhFlov8JxDvISNiZPljDDhb0V7pLoiloDV5zI0b0erXuhtcfVThmg24QHfixjqQD

54fNueEXFso1mFs41tQ3Ftwk2JpxrK6mY5kxjtlumbpk8KzAf2TnHeYQgGNM71grKQEn

upQkK9h9wod6qut7jnDHRj2id4GPR34QOluOtQVzcIQ5poebN8NR9BLTUnzKSzZ5Dr34

FX95SStfr22UbPYvzxYUZXy5B/XRRefX6psp0W1pforPFPUwdK6XrTNZStAOpxYhe2qx

FSdg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1773756586; x=1774361386;

h=to:subject:message-id:date:from:sender:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=7FS2yDRCmLXRjebm3P4TTVfqpoVDB2fvfKUMdRwessc=;

b=l/VsC8/PzUEF4wh+nUHsA48+qSCHwM+VAya7KWylmUgh+5JV77QiEp7M7EBg8ynw0J

aTWmhYr+2hh3CmHair7In9ZN38idrp9IsBrNtjJzh273QMSE+qV2Ej+q8WZzMhoR/IEv

po1+hNdQRqpAPyi6wUoEZKGgC4TBdqhdoZseyrcHn0cl6opuUviB5UPfMh/lDTbGJVKI

X4rnOSqgYNjxaazeyeTwVWieldTvO+0H1FMWSV1S0rZzfszbaoaJSiat8Q55Cw1OCZcr

mPgtKkie0Uq7icz6Whd1vhrkIZNHeq8n+ejJTzsD+tfJEJUPohp/kR7gtto6oUsk687B

8s6Q==

X-Gm-Message-State: AOJu0Yzwg4NJLWhsm8GRl4vbeAjzUHBCIl4trxxypCfm5O1oLJAei/2X

vwNfkJsGrBNM6huDEwYmLt9ok/kwQK21nGzCHvvVH8lpVLx3vFfylU48pMN53MqFqySvwJ53aAI

vXjGL0AbviMQ+viOFD+++Ejprpl4iZCKKMIUg

X-Gm-Gg: ATEYQzyrS5AqEx4UbjIXXVW+YJzrfsPvUrUx78OZYDFGiGgp6z6bEdXeWYMLXcivTiz

Q480oJ65hDs+l5EBfD+kkdFYmKiaMCk+atwQcFjaFpwu5IeNE00GcGJ5IXVNt9c0EASc14qESfv

bP2y4ivyqRa/iCFitnZgErn6PJCLYwqvv25ZRygOUMwEqcrAWuTqvitKurrBYjWjEoufR8++AyT

j8QKBCkXS88B7/sAPLhE7fVG33aIytZBQesYcywlBWBiSjkPmIFpOqfqofBAI3D1NmH4XjZMeD2

Sz50dhY=

X-Received: by 2002:ac2:4bd2:0:b0:5a1:7e29:c10b with SMTP id

2adb3069b0e04-5a17e29c168mr1027407e87.18.1773756586037; Tue, 17 Mar 2026

07:09:46 -0700 (PDT)

Received: from 56484302100 named unknown by gmailapi.google.com with HTTPREST;

Tue, 17 Mar 2026 10:09:44 -0400

Received: from 56484302100 named unknown by gmailapi.google.com with HTTPREST;

Tue, 17 Mar 2026 10:09:44 -0400

MIME-Version: 1.0

Sender: ollyjames4523@gmail.com

From: ollyjames4523@gmail.com

Date: Tue, 17 Mar 2026 10:09:44 -0400

X-Google-Sender-Auth: 9NIggoRfQwuRXIhVIvQ8qj1ySvw

X-Gm-Features: AaiRm53I2nSHP7cWAa93QK-S-CLzsdsJVg4kzxbB1fXuV3LuH2Bm8D04dDGbbMg

Message-ID:

Subject: Re: Professional Full/Part - Time Bookkeeper/ Accountant Needed?

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="0000000000003a9657064d38e3ef"

X-Spam_score: 6.1

X-Spam_score_int: 61

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Just wanted to follow up on my previous email about remote

accounting services. Our team can help streamline your finances. Let’s

schedule a call to discuss further. Looking forward to hearing from [...]



Content analysis details: (6.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.167.41 listed in will-spam-for-food.eu.org]

[209.85.167.41 listed in will-spam-for-food.eu.org]

[209.85.167.41 listed in will-spam-for-food.eu.org]

[209.85.167.41 listed in will-spam-for-food.eu.org]

[209.85.167.41 listed in will-spam-for-food.eu.org]

[209.85.167.41 listed in will-spam-for-food.eu.org]

[209.85.167.41 listed in will-spam-for-food.eu.org]

[209.85.167.41 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.41 listed in dnsbl.ahbl.org]

[209.85.167.41 listed in dnsbl.ahbl.org]

[209.85.167.41 listed in dnsbl.ahbl.org]

[209.85.167.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.41 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.41 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.41 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.41 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[ollyjames4523(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[ollyjames4523(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.41 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Re: Professional Full/Part - Time Bookkeeper/ Accountant Needed?