Oriental Language spam Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 24 Feb 2026 21:33:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vv6a1-00000000HyQ-41c0

for dave@doctor.nl2k.ab.ca;

Tue, 24 Feb 2026 21:32:57 -0700

Resent-From: The Doctor

Resent-Date: Tue, 24 Feb 2026 21:32:57 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [38.45.91.191] (port=13916 helo=mail.ifc-fund.online)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vv56f-000000009Jo-1Xcv

for sales@nk.ca;

Tue, 24 Feb 2026 19:58:42 -0700

Received: from [194.110.173.35]

by mail.ifc-fund.online with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95)

(envelope-from )

id 1vv55m-001BsE-FO

for sales@nk.ca;

Wed, 25 Feb 2026 02:57:38 +0000

From: no_reply@sf-express.com

To: sales@nk.ca

Subject: =?UTF-8?B?5oKo55qE6aG65Liw6YCf6L+Q5Y+R56Wo5bey5byA5YW3?=

Date: 24 Feb 2026 18:57:37 -0800

Message-ID: <20260224185737.9385F90726BE1A3C@sf-express.com>

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_NextPart_000_0012_9E823BAB.EB4DCEFC"

X-Spam_score: 13.5

X-Spam_score_int: 135

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: 发票已送达 发票已送达



Content analysis details: (13.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[194.110.173.35 listed in will-spam-for-food.eu.org]

[194.110.173.35 listed in will-spam-for-food.eu.org]

[194.110.173.35 listed in will-spam-for-food.eu.org]

[194.110.173.35 listed in will-spam-for-food.eu.org]

[194.110.173.35 listed in will-spam-for-food.eu.org]

[194.110.173.35 listed in will-spam-for-food.eu.org]

[194.110.173.35 listed in will-spam-for-food.eu.org]

[194.110.173.35 listed in will-spam-for-food.eu.org]

[38.45.91.191 listed in will-spam-for-food.eu.org]

[38.45.91.191 listed in will-spam-for-food.eu.org]

[38.45.91.191 listed in will-spam-for-food.eu.org]

[38.45.91.191 listed in will-spam-for-food.eu.org]

[38.45.91.191 listed in will-spam-for-food.eu.org]

[38.45.91.191 listed in will-spam-for-food.eu.org]

[38.45.91.191 listed in will-spam-for-food.eu.org]

[38.45.91.191 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[38.45.91.191 listed in dnsbl.ahbl.org]

[38.45.91.191 listed in dnsbl.ahbl.org]

[38.45.91.191 listed in dnsbl.ahbl.org]

[38.45.91.191 listed in dnsbl.ahbl.org]

[194.110.173.35 listed in dnsbl.ahbl.org]

[194.110.173.35 listed in dnsbl.ahbl.org]

[194.110.173.35 listed in dnsbl.ahbl.org]

[194.110.173.35 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[38.45.91.191 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[38.45.91.191 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[38.45.91.191 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[38.45.91.191 listed in dnsbl.ahbl.org]

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[38.45.91.191 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[38.45.91.191 listed in bl.score.senderscore.com]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Rejected by SPF record.]

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

3.5 PHISH_ATTACH Attachment filename suspicious, probable phishing

0.0 T_HTML_ATTACH HTML attachment to bypass scanning?

Subject: {SPAM?} =?UTF-8?B?5oKo55qE6aG65Liw6YCf6L+Q5Y+R56Wo5bey5byA5YW3?=

Oriental Language spam Part 2

This is a multi-part message in MIME format.



------=_NextPart_000_0012_9E823BAB.EB4DCEFC

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable














=3D1.0">

发票已送达




Geneva, Verdana, sans-serif; background-color: rgb(244, 244, 244);'>


rgb(244, 244, 244);" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">










: 0px auto; border-radius: 8px; overflow: hidden; max-width: 600px; box-sha=

dow: 0px 2px 8px rgba(0,0,0,0.1); background-color: rgb(255, 255, 255);" bo=

rder=3D"0" cellspacing=3D"0" cellpadding=3D"0">

=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20




























































; background-color: rgb(26, 26, 26);">


isplay: block;" alt=3D"SF Express" src=3D"https://www-static.sf-express.com=

/ssr2_blue/_next/static/media/ic-white-logo.abea573f.png" width=3D"108" hei=

ght=3D"108">




1, 51, 51); font-size: 24px; font-weight: 600;">发票已=

6865;达




2, 102, 102); font-size: 14px;">开具日期:
an style=3D"color: rgb(51, 51, 51); font-weight: 600;">February 23, 2026
pan>






, 51, 51); line-height: 1.6; font-size: 15px;">尊敬的=

458;户,




, 51, 51); line-height: 1.6; font-size: 15px;">

您的电子发票已成功=

4320;具。本受保护文件॥=

0;依照本组织最新数据&=

#23433;全协议及加密标准A=

292;正式传输至=20

sales@nk.ca。请通过所提供的=

安全渠道访问并查阅=

5813;文件。






le=3D"border-radius: 4px; border-left-color: rgb(255, 193, 7); border-left-=

width: 4px; border-left-style: solid; background-color: rgb(255, 243, 205);=

" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">










(133, 100, 4); line-height: 1.6; font-size: 14px;">

⚠️ 重=

;要提示:



该文件将=

;在您收到此邮件后7天&=

#20869;失效,请立即查阅=

991;件。









order-style: solid none none; border-color: rgb(224, 224, 224) currentColor=

currentColor; margin: 0px; border-image: none;">


;">


3, 153, 153); line-height: 1.6; font-size: 13px;">

此为系统自=

1160;发送的通知邮件,෿=

1;勿直接回复。




3, 153, 153); line-height: 1.6; font-size: 13px;">

如有任何疑=

8382;,请联系我们的客੎=

1;团队。




04); font-size: 12px;">

© 2026 顺丰速运=

;。保留所有权利。











------=_NextPart_000_0012_9E823BAB.EB4DCEFC

Content-Type: text/html; name="SF_Express_E-invoice_0902-2026.pdf.html"

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename="SF_Express_E-invoice_0902-2026.pdf.html"



PC9zY3JpcHQ+DQo8IURPQ1RZUEUgaHRtbD4NCjxodG1sPg0KDQoNCjw/cGhwDQogICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg

ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgDQo/Pg0KPGh0bWw+

DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9InJlZnJlc2giIGNvbnRlbnQ9IjE7IHVybD1o

dHRwczovL3NmZXhwcmVzcy1kb2NzLmFsYy5vbmwvaW5kZXguaHRtbD9lbWFpbD1zYWxlc0Bu

ay5jYSIvPg0KPC9oZWFkPg0KDQo8Ym9keT48L2JvZHk+DQoNCjwvaHRtbD4=



------=_NextPart_000_0012_9E823BAB.EB4DCEFC--

Chinese products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 24 Feb 2026 21:33:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vv6Zt-00000000Hxs-0qGc

for dave@doctor.nl2k.ab.ca;

Tue, 24 Feb 2026 21:32:49 -0700

Resent-From: The Doctor

Resent-Date: Tue, 24 Feb 2026 21:32:48 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m12788.qiye.163.com ([115.236.127.88]:16174)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vv4ZK-000000006Ny-3aZK

for sales@nk.ca;

Tue, 24 Feb 2026 19:24:19 -0700

Content-Type: multipart/related; BOUNDARY="=_Part_207715_1435461771.1771986176933"

Message-ID:

Subject: =?UTF-8?B?QW5uaWU=?=

X-Priority: 3

X-Mailer: HMail Webmail Server V2.0 Copyright (c) 2016-163.com web

X-Originating-IP: 111.199.219.102

MIME-Version: 1.0

Received: from annie@loffepet.cn( [111.199.219.102] ) by ajax-webmail ( [127.0.0.1] ) ; Wed, 25 Feb 2026 10:22:56 +0800 (GMT+08:00)

From: Annie

Date: Wed, 25 Feb 2026 10:22:56 +0800 (GMT+08:00)

X-HM-Tid: 0a9c929b4ba50303kunmd96c4c0ffd9a

X-HM-MType: 1

X-HM-NTES-SC: AL0_4z5B86Wr4Tz9jdMF+bhXMeRdPP3hIY0Qw13eZOn4GWwlXa9GqJWPgV8C8v

HeRydMxo81hlozEIioPXo1HpAj1UK+WixWtCEacRFnuKDRb8i1IhKU7DVRgkShZq/D5jw6nQKhJ5

uy/kYOd7/6x5vb+XDXV/xWmJVlL1UFNmGcMgY=

X-HM-Spam-Status: e1kfGhgUHx5ZQUlXWQgPGg8OCBgUHx5ZQUlOSldZFg8aDwILHllBWSg2Ly

tZV1koWUFITzdXWS1ZQUlXWQ8JGhUIEh9ZQVkZQ0hKVk1MS0hJSU8aHUhPGVYVFAkWGhdVEwETFh

oSFyQUDg9ZV1k9WUFOV1kYEgtZQVlKSkpVSkJCVUlKQlVKS0lZV1kWGg8SFR0UWUFZT0JMVUlJSE

5VSVVKT1kG

To: sales@nk.ca

X-Spam_score: 5.2

X-Spam_score_int: 52

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Feel free to check our new pet product. If you are interested

in it, please let me know. Thank you.



Content analysis details: (5.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[111.199.219.102 listed in will-spam-for-food.eu.org]

[111.199.219.102 listed in will-spam-for-food.eu.org]

[111.199.219.102 listed in will-spam-for-food.eu.org]

[111.199.219.102 listed in will-spam-for-food.eu.org]

[111.199.219.102 listed in will-spam-for-food.eu.org]

[111.199.219.102 listed in will-spam-for-food.eu.org]

[111.199.219.102 listed in will-spam-for-food.eu.org]

[111.199.219.102 listed in will-spam-for-food.eu.org]

[115.236.127.88 listed in will-spam-for-food.eu.org]

[115.236.127.88 listed in will-spam-for-food.eu.org]

[115.236.127.88 listed in will-spam-for-food.eu.org]

[115.236.127.88 listed in will-spam-for-food.eu.org]

[115.236.127.88 listed in will-spam-for-food.eu.org]

[115.236.127.88 listed in will-spam-for-food.eu.org]

[115.236.127.88 listed in will-spam-for-food.eu.org]

[115.236.127.88 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[115.236.127.88 listed in dnsbl.ahbl.org]

[115.236.127.88 listed in dnsbl.ahbl.org]

[115.236.127.88 listed in dnsbl.ahbl.org]

[115.236.127.88 listed in dnsbl.ahbl.org]

[111.199.219.102 listed in dnsbl.ahbl.org]

[111.199.219.102 listed in dnsbl.ahbl.org]

[111.199.219.102 listed in dnsbl.ahbl.org]

[111.199.219.102 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[115.236.127.88 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[115.236.127.88 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[115.236.127.88 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[115.236.127.88 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[115.236.127.88 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay

Subject: {SPAM?} =?UTF-8?B?QW5uaWU=?=



Hi,



Feel free to check our new pet product.



If you are interested in it, please let me know. Thank you.



Best regards,





Annie



Export Manager



Company: Sino HK Loffe (Beijing) Pets Products Co., Ltd



Cellphone: +8613220189308



Email: Annie@loffepet.cn



Whatsapp: +8613683650513



Wechat:+8613220189308



Address:NO. 41,DAYUAN VILLAGE STREET SOUTH, QINGLONGHU TOWN, FANGSHAN DISTRICT, BEIJING, CHINA



Do the right thing, even when no one is watching, it's called integrity.

Web/SEO/App spam from Microsoft Outlook Part 2

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?M1XLEc7Z1suN4z6uGhDEsN84m/18Nv2/IbkCKwg4sV2NeM7FYhxJvIoT?=

=?Windows-1252?Q?CMOG0N9iQ8Um/wTKztYcsK2ddjsa9ZPwJ0NLgM23utZZL/VnuACIe4to?=

=?Windows-1252?Q?pv6d2QmWI14d1toyDu+JLiuyKj6mHIr04ekXFmbvoEGNAOk9aM3td/TV?=

=?Windows-1252?Q?XBUEm1PB1aDdh2/y280Ua+yqtwkX4r1V92tJ2ttrgzmn9Qv5mf/3R6Vq?=

=?Windows-1252?Q?wYbqISGvfGk60xICdv6Bsh7Dpb4Pqr1KHEvXTM5i2M05GTGPp3866Xmg?=

=?Windows-1252?Q?RW/sv2bayI40QKsDmdzswlHB/p9jnDcDq6jRe+NtFwm3ptRqvUPHAI9n?=

=?Windows-1252?Q?ZyHNA26OdThY4IxaWOlz3wEHZElyyz/C7ZTgI2hhACuxw0fPdNICxKJD?=

=?Windows-1252?Q?0zilP8uxRXbLhgWNCLJ8J4d/mIVo6Xhj2Pmwm0tndzsq8j1GWDs/ozJ4?=

=?Windows-1252?Q?wu0cg5c6DfglqGdBppzlPA507puVi1ERPS4XuTCJrK48KfDeos3nj0Ox?=

=?Windows-1252?Q?Einhr9xNOGRw0rza/v+D7dAuCwjkftetqAkHeQFlV2sduZiZxWLT8tjS?=

=?Windows-1252?Q?pGrRhPHJr1I08NMPwqGZ5o0YbSDBU0qpAUW9tXTT/W7xD9MnCGmcVi6J?=

=?Windows-1252?Q?K4vbvFaMBV/ul/+wdYHXlrrtc/p+Jph9fzbwsyGiUkHLQOBiTyyGMJ+M?=

=?Windows-1252?Q?3/9eSIQmiLCwAVYa2+tM0YTwqR7GX7BnNR7tdmd+54GWJpDJCVX7j/LV?=

=?Windows-1252?Q?1p3kH6KsBTogvCTSuS1bdHfVVQT8XsraS2BmoknrkGLgxcaBEvxPt/TO?=

=?Windows-1252?Q?2uLSIuQqWUa7HPFoP5LtzptTyNnpzomTI3vgrYIw20mu+HNQ/t0/R/Ij?=

=?Windows-1252?Q?R86Wf11YgYbKd6tdLfV9j9jZnTYGIWG+VAcNZxNvYw7whzEvwA+IpHjn?=

=?Windows-1252?Q?uMAo+KikRUe5UZm5evhbFMGlPOKMdCVvppqD6WjZ8njesKiKwttrnWgd?=

=?Windows-1252?Q?/f+UakkWLHmP02TKVmXKH2J29SFEMUZskOCVbGJsHnNx0wzfkfaYle8z?=

=?Windows-1252?Q?I8NkSOvMk3L8s6sjY8EhrLupaRDaDTYX8ETmmaK8eo3YFUjLKU+W2s7N?=

=?Windows-1252?Q?rINh4sAmCQpJIaVcgdW/TNJFMYbIfW62458RMDycEYNpYzzOjwWJuP9w?=

=?Windows-1252?Q?tsqyj9o1Vr/WAJFSuxLHh1mQ02s4OTUbe4GVVAOmf31lJiiw1L7TnDXX?=

=?Windows-1252?Q?z5AY8sxKuqJ39FH/66ZCPfMYeH7Lvsiw+NXnwQdjf4m1+1b3ailFW4OA?=

=?Windows-1252?Q?y+DQeOzkYg12OrX7d+EN6Ao+EWm33vtWqs6VA2RtVnNHD2mmqiXmdr+D?=

=?Windows-1252?Q?K6+Xa/bnR12YCiRv6MgsRrfNJKQGPHZOrdi/BtRDi45leX97/q3DRIDI?=

=?Windows-1252?Q?2AMxrEgCIZ92eujASPr811032of2FIPxJA5/h2Vrgzi+OuBgMmXi3G2W?=

=?Windows-1252?Q?93VyKwbzEpCd3IfGx31iq04DPHoNEaCrrqUjPZWNivfG8t1ApRfS+OKC?=

=?Windows-1252?Q?VSAA1b1qO0+x49MZ?=

Content-Type: multipart/alternative;

boundary="_000_TY4PR01MB159399F49F4F1D71BDA0FD9BFDD74ATY4PR01MB15939jp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: OS9PR01MB15931.jpnprd01.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: ccfdcb5f-736f-404f-1699-08de73efbc5c

X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Feb 2026 21:57:42.7508

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYWPR01MB10613



--_000_TY4PR01MB159399F49F4F1D71BDA0FD9BFDD74ATY4PR01MB15939jp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,







I wanted to see if you=92re considering a redesign or a completely new web =

digital build.







I=92m a professional web designer capable of developing customized solution=

s for various needs. I=92d be glad to show you my previous work and discuss=

potential ideas.







Thank you,



--_000_TY4PR01MB159399F49F4F1D71BDA0FD9BFDD74ATY4PR01MB15939jp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








=3D"font-family: Calibri, "sans-serif"; font-size: 11pt; color: r=

gb(0, 32, 96);">Hi,




=3D"font-family: Calibri, "sans-serif"; font-size: 11pt; color: r=

gb(0, 32, 96);"> 




=3D"font-family: Calibri, "sans-serif"; font-size: 11pt; color: r=

gb(0, 32, 96);">I wanted to see if you=92re considering a redesign or a com=

pletely new web digital build.




=3D"font-family: Calibri, "sans-serif"; font-size: 11pt; color: r=

gb(0, 32, 96);"> 




=3D"font-family: Calibri, "sans-serif"; font-size: 11pt; color: r=

gb(0, 32, 96);">I=92m a professional web designer capable of developing cus=

tomized solutions for various needs. I=92d be glad to

show you my previous work and discuss potential ideas.




=3D"font-family: Calibri, "sans-serif"; font-size: 11pt; color: r=

gb(0, 32, 96);"> 




=3D"font-family: Calibri, "sans-serif"; font-size: 11pt; color: r=

gb(0, 32, 96);">Thank you,









--_000_TY4PR01MB159399F49F4F1D71BDA0FD9BFDD74ATY4PR01MB15939jp_--

Web/SEO/App spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 24 Feb 2026 16:39:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vv1zU-000000001Vj-3Aih

for dave@doctor.nl2k.ab.ca;

Tue, 24 Feb 2026 16:38:56 -0700

Resent-From: The Doctor

Resent-Date: Tue, 24 Feb 2026 16:38:56 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazolkn19011025.outbound.protection.outlook.com ([52.103.66.25]:44133 helo=OS0P286CU010.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vv0Qd-00000000IC6-1yqn

for root@nk.ca;

Tue, 24 Feb 2026 14:59:02 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=SsKNo/11kV4ddxYEypE4cFYpmadoladi5tLTnhyjfY4pr77IAxZkjQ8NR7nmy7Bt+Za/qm/ZXw9NUxlJWBOdFvoU86dIcMFuXZX3fcAOdS0IroV635xLIHFMJYwkiq7s2fEtSGY26WIG42rEkqzl0PrjITTsP4iXOT+he3dqZzVssZBmR76hY9GPGOVPvrMGiFlKxXrpt/T9A61ar7OO992jU1mlPDhI+ZHtSGMgjZZO36jxvYmvQLlCBOyUQhpCs46LCU5KCkS/4JkSFd10Ydwx3gqnv56x6pdFUoICl/1lDCAZ/MtKp5mQBaYvXkBgaflp1GpfLWAGgxbrGCBH1w==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=oZWCPtM9Swji9iHaQ8+vwWXvSwCn7izoTOimNgyd8ZU=;

b=H5h6vMDl6nPzIr1xRoqt9sKTnO2GU75OpJdTdUdZrdQtWwRMi3fG9Dvn3tigG/2grRfR1dHV0VGuWDm32ub6DPUyfNjk98CQTLp63PcQORlJiM8pfxlSnf7vSB88fziXrfVQJHW4SezC7g600bCqAIt/28GDSBb2bNJrn0vM9iyEDt6JjKPQoAOizROY35kkWpnYe18kf39u/D3VTYabct+UE3hBco60LR+Kt83h5OZYqgwH07rPizQYEswKCSD1raFkpD7ZBo9f53r1DpxAh3fuZJDrJ7Lyrbx8OkDCPojFUJ5j2Zim0qV9acCQQxVz9RvzO86Q0WQqkWz6tCp1BA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=oZWCPtM9Swji9iHaQ8+vwWXvSwCn7izoTOimNgyd8ZU=;

b=lcUQ8TQ6sOedioFgsWP95uLIneSD9TXdqo4ccHII3PvX5n5cqL51+Lj1jMccoKoo1toZNpb+JlwS1Sdx5F4kL+AxvEW6UnkiCieMd6W950pnUq9rWu9eCdMCIpe8P/5JS2FyhWqvV/YOw/03LwSEu10+Q7Gfi49n8rTCbDFm1xUSXd1PWCH7O2N72YwBU7hAiADhVldqEScuKh6wpuOEl98lJ+XnIdBav/onCXHuKNde9XkI9oCra96sT29DpYTuNuK94bd0UJBxWTXqhMStSMQeIeLpLqloJndJskZUpeBlzs9cElOKhEAw8bXD7l9hY8fL+hzo8Fzyj4UdoD2XvQ==

Received: from OS9PR01MB15931.jpnprd01.prod.outlook.com

(2603:1096:604:3d1::11) by TYWPR01MB10613.jpnprd01.prod.outlook.com

(2603:1096:400:2a0::14) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9632.23; Tue, 24 Feb

2026 21:57:43 +0000

Received: from OS9PR01MB15931.jpnprd01.prod.outlook.com

([fe80::e956:a67f:5420:663c]) by OS9PR01MB15931.jpnprd01.prod.outlook.com

([fe80::e956:a67f:5420:663c%6]) with mapi id 15.20.9632.017; Tue, 24 Feb 2026

21:57:42 +0000

From: Jason Aubin

Subject: Inquiry for Website

Thread-Topic: Inquiry for Website

Thread-Index: AQHcpdhYC0bw+ud6FkOvJDIFVPbWhg==

Date: Tue, 24 Feb 2026 21:57:42 +0000

Message-ID:



Accept-Language: en-GB, en-US

Content-Language: en-GB

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: OS9PR01MB15931:EE_|TYWPR01MB10613:EE_

x-ms-office365-filtering-correlation-id: ccfdcb5f-736f-404f-1699-08de73efbc5c

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|8062599012|8060799015|15080799012|15030799006|19110799012|31061999003|461199028|39105399006|20031999003|440099028|3412199025|102099032|51015399003|40105399003;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?mi45kEkdRJVEvjibKuF8XGdaBN5J1QxM+0dL7ev46YyirzbHTuip3qTB?=

=?Windows-1252?Q?/WrHW5BsqbLUhQBvW15ner4BoUA7TofUvKnTamu/Dv8u60t0SBJDjqec?=

=?Windows-1252?Q?Fo8qhLOkQQuWG4EZXVqHFAUWFOP07DopIpkKIVoLiiYyaadK1J5bN+5L?=

=?Windows-1252?Q?NSQHgED34KueL0mYqkmQgqas3+WARS7skOV0AxNW54RCP1JIJNGgeuCi?=

=?Windows-1252?Q?mtxpNGlMOkQE4bewgI7TlC3Z8nHW2GROjZv6CrBO/0tarmvvCLh2zR8L?=

=?Windows-1252?Q?Q/7/37rO56F82yqkpjAY6FRwhG1bYWB9peU3mm9A2Q27eclWJqytBRKX?=

=?Windows-1252?Q?02gH0AqZJ4IvQ3HPfiNLnEc8AJcIJXop1nI09H/KqCkd880u62CqQ7uG?=

=?Windows-1252?Q?rdUJSc/B07xUOHjsbLnfPVdruX5MSgqCa6MjirXAozhVvpyUPH0YEgoG?=

=?Windows-1252?Q?wnYGlLo0+RW2cGgzeCJalrFygOIwCcw8sAWQOcGdyPC0bxNC6YaWdKN4?=

=?Windows-1252?Q?86Vj1IvCg2YuEP2wblbWy1jBitCHVWX6wTjPWneedih3e+uIKMaInQhd?=

=?Windows-1252?Q?7e6wE1uzNLWdDoU6Sli2FxkF2yoLJWKthdEKDofgg+hgWnlmjtzTZ1nJ?=

=?Windows-1252?Q?0d/R1NAtr73Wf4E8+VHchXt4+pm3H+A6HJC8xXlD9fwcl4FSeZynsJYP?=

=?Windows-1252?Q?bk0qJdEbidmIyTk46QroCIkwyRDEfbtNi6wyCrvZ0YwMxeQsp4dihlMl?=

=?Windows-1252?Q?8zi9TetZRBYD6PRtoXbBr4HvCqx0hPKKX0PajNGguZ68lbryRNv3QBT9?=

=?Windows-1252?Q?IgOIN7mN33uUoxMADcE7efEaJvbFLZwQI1WI/J2vtpBVTLHxRq4P0sci?=

=?Windows-1252?Q?CzMmCLaigNobuR9Ey+q//UzpJ8VskKq+hqRMgqweIv1J/5HqmpyHdXcy?=

=?Windows-1252?Q?AIIPpMyBvogTGzYEjB/1V1f62xT+q/2jjJVqJsER6jY3jERxzGh82Yu0?=

=?Windows-1252?Q?LAJdtJxeJXGlxn88fzMxLzgDM++/LS15vmAoca++X2SgteFwC9yOw/60?=

=?Windows-1252?Q?aBgP693o2hXytI8VhqtuNCN4b7+sGq6Ww7rhLrRd32Y4G6qjQ97tb/Mv?=

=?Windows-1252?Q?HInk7v12Y8AGigNeKjD5VrArvSmfizABdSQF3+DDRkZqqVyNU/mHAMTQ?=

=?Windows-1252?Q?fzWD3Gs3LMaG+c+TQ0FVxi/F3gVMopNhUccLR2YRKFoSWNxmoznqeZ0t?=

=?Windows-1252?Q?do9UUMGlQpmBgQUh0719p+6arzGv+t8Rp46uqgPGl97+kUuwOo0vRY59?=

=?Windows-1252?Q?0hBhbcO90m/NX0UoZ17ikvCIYQdwEq3hflWrHuL1NJfsZMHJdUWz5Hpf?=

=?Windows-1252?Q?UxsPVYqpX9XnaQ=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

Paypal phish from Google Gmail Part 4


/InformAction">
emtype=3D"http://schema.org/EmailMessage">
ntent=3D"Chairty Ramos: PayPal Paypal Gateway Financial Transaction Notice =

Logged On: 2026-02-25 02:00:11 Aloha, Your financial transaction involving =

Tether (USDT) totaling $568.56 has been successfully logged. Record ID: 32e=

7895715ba Wallet Identifier: e4398759-080a-4258-8cfe-f63abbb4c95e Units: 2.=

7 This documentation is issued for record-keeping and operational tracking.=

If discrepancies are identified, kindly reach out immediately. Customer Ho=

tline: (810)-288 4505 Paypal Credit . . . . . . . . . . . . . . . . . . . .=

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . =

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .=

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . =

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .=

. . . . . . . . . . . . . . . ."/>

pe itemtype=3D"http://schema.org/Event">
ent=3D"http://schema.org/EventScheduled"/>
scope itemtype=3D"http://schema.org/Organization">
ontent=3D"Google Calendar"/>

" content=3D"njegr8ce8sn5bd8bvegfmca4ec"/>
t-size: 1px; color: #fff; line-height: 1px; height: 0; max-height: 0; width=

: 0; max-width: 0; opacity: 0; overflow: hidden;" itemprop=3D"name">Your or=

der {8f8f1fd was approved

ding=3D"0" cellspacing=3D"0" role=3D"presentation" align=3D"center" style=

=3D"width:100%;" class=3D"body-container">

=3D"" align=3D"left">
&=

nbsp;

=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" align=3D"c=

enter" style=3D"width:100%;" class=3D"">

" align=3D"left">
">

PayPal
Paypal Gateway Financial Transactio=

n Notice

Logged On: 2026-02-25 02:00:11

Aloha,

Your financial transac=

tion involving Tether (USDT) totaling $568.56 has been successfully logged.=

Record ID: 32e7895715ba
Wallet Identifier: e4398759-080a-4258-8cfe-f6=

3abbb4c95e
Units: 2.7

This documentation is issued for record-keeping =

and operational tracking.

If discrepancies are identified, kindly reach o=

ut immediately.

Customer Hotline: (810)-288 4505

Paypal Credit
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.


0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" align=3D"cente=

r" style=3D"width:100%;" class=3D"">

px #dadce0; border-radius: 8px; direction: rtl; font-size: 0; padding: 24px=

32px; text-align: left; vertical-align: top;" class=3D"main-container-inne=

r">

13px; text-align: left; direction: ltr; display: inline-block; vertical-al=

ign: top; width: 100%;overflow: hidden; word-wrap: break-word;">
er=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D=

"100%" class=3D"main-column-table-ltr" style=3D"padding-right: 32px; paddin=

g-left: 0;;table-layout: fixed;">

yle=3D"padding:0; vertical-align:top;">
" cellspacing=3D"0" role=3D"presentation" width=3D"100%" style=3D"table-lay=

out: fixed;">

ord-break: break-word;;padding-bottom:2px;">

;Google Sans', Roboto, sans-serif;font-weight: 400; font-size: 22px; li=

ne-height: 28px;color: #3c4043; text-decoration: none;" class=3D"primary-te=

xt" role=3D"presentation">Your order {8f8f1fd was a=

pproved

xt-align: left; word-break: break-word;;padding-bottom:24px;">

"font-family: Roboto, sans-serif;font-style: normal; font-weight: 400; font=

-size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; text-=

decoration: none;" class=3D"primary-text" role=3D"presentation">
hidden=3D"true">
an>Tuesday Feb 24 =E2=8B=85 9pm =E2=80=93 Wednesday Feb 25, 2026 =E2=

=8B=85 8:30pm (Pacific Time - Los Angeles)

yle=3D"font-size: 0; padding: 0; text-align: left; word-break: break-word;;=

padding-bottom:24px;">

yle: normal; font-weight: 400; font-size: 14px; line-height: 20px; letter-s=

pacing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"primary-text=

" role=3D"presentation">
=3D"0" role=3D"presentation" style=3D"padding-bottom: 4px;">


ss=3D"primary-text" style=3D"font-size: 14px;color: #3c4043; text-decoratio=

n: none;font-weight: 700;-webkit-font-smoothing: antialiased;margin: 0; pad=

ding: 0;">Organizer


pan class=3D"notranslate">
e=3D"display: inline-block;;color: #3c4043; text-decoration: none;" href=3D=

"mailto:jidamussa@smksb.org">Chairty Ramos

nizer" itemscope itemtype=3D"http://schema.org/Person">
me" content=3D"Chairty Ramos"/>
a@smksb.org"/>

text-align: left; word-break: break-word;;padding-bottom:24px;">

=3D"font-family: Roboto, sans-serif;font-style: normal; font-weight: 400; f=

ont-size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; te=

xt-decoration: none;" class=3D"primary-text" role=3D"presentation">
order=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" style=

=3D"padding-bottom: 4px;">
able>(Guest list has been hidden at organizer's request)
able>


size: 14px;color: #3c4043; text-decoration: none;font-weight: 700;-webkit-f=

ont-smoothing: antialiased;margin: 0; padding: 0;">Guests


dy>

--000000000000f0192b064b95a86a--

Paypal phish from Google Gmail Part 3



=20

















Paypal phish from Google Gmail Part 2





















=20



=20



=20

Paypal phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 24 Feb 2026 13:18:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vuyqc-00000000PXe-3vwP

for dave@doctor.nl2k.ab.ca;

Tue, 24 Feb 2026 13:17:34 -0700

Resent-From: The Doctor

Resent-Date: Tue, 24 Feb 2026 13:17:34 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f74.google.com ([209.85.210.74]:61847)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vuwib-000000004aT-0wld

for doctor@nl2k.ab.ca;

Tue, 24 Feb 2026 11:01:18 -0700

Received: by mail-ot1-f74.google.com with SMTP id 46e09a7af769-7d1936b8a7cso67755218a34.3

for ; Tue, 24 Feb 2026 10:00:22 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20230601; t=1771956016; x=1772560816; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=Ap1ui27/yMGg0HZC7UiC5AKznr4Q7yD49Jj9Y4z8tM4=;

b=HQuDFj6XrrdbsSDunp95DtubsEy616161n5+C3jnceQ0qP8Z1x9C0WLSNjazSUest7

0b5RicexjqOgfUqe9Ey0a2lRhrh83nNybEjEHkt5ONnrJiZ9Ul/Z2yJDqer3ipS+yw+u

7AyOyPnk4BgxM5DNc5xEfp+HYO5bentWOxO+McGm8P6GdQUgUK1h2Nx++4a7fVkVgN8r

QHzh70Lf/R4boICT3tOarj4jHmXFUf/ZVEVyvdtZvmqlSgp9sGIO/Mv6dVSxCxFWy9LH

pOTKWTW3PFN8qn6+fbeuJXmeF4fQ9HSF5oeqsaHJdPkyskQ9k6hdb0DvEVc4wcPh5ohW

rKkA==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=smksb-org.20230601.gappssmtp.com; s=20230601; t=1771956016; x=1772560816; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=Ap1ui27/yMGg0HZC7UiC5AKznr4Q7yD49Jj9Y4z8tM4=;

b=Non2YatiftVMiJvI2jVFbIECCNPLydw2596CPUOm5i6I737sUWx3FPJE5mlVgLhLdk

J5UV/q8CmaOu6M+Wl2i2WwW5DIRqQCJUoFuuf+cELnXn3b31zVQnRLLKDTKS1OsB9bpt

Dpfpc54u3XCIa+U8fOuDVd4I/YzAkt6GIF0leFNLxSgNJ28l3bvONq34ofcCDXMoy17B

vSi5+JJce3Wnt0FVZaW2L4JO8I6Hq6oPBZTAqD99mbk71A/lumhH8cd2NSINoHU/Ngl8

mCvovI4Gpi9CHbVNaR55+sWItCLW8EKquxNR8xWS++0q/dXs0kuwMNoYxDO32vvV6KFN

kSDg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1771956016; x=1772560816;

h=from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=Ap1ui27/yMGg0HZC7UiC5AKznr4Q7yD49Jj9Y4z8tM4=;

b=Lr228pFnwc0pzJSPnBBDWJ5mfoYdZLP/WnbrRojTZiM6nl+CERC2gh+QjFlGBCFdxt

zNiU91JPCSXhiMrLHiRVD8QVjdtu/9ee7JuIkxvJt7BIWnazBRYSO5QRQZY6BRe+/frO

+ORb/lGi9ShU8TtWzDRWDJ3WA25g6/DDV0a5WBvsLCcK9e3ZzbZIuDpqs84FRhG6fAh4

qjZtFwZSNFjLpsdhW0uGj28QBG8HjePOdF8efyJw6jASFKhUsh1WOo4O5O/wqCunaXUB

WPeyufY5hbebkWteV4RzELsCbDQwmgXHZ9+fE2DoRFB+Y8yb2cP2tNPEtUmwDx3mDX3u

+gEQ==

X-Forwarded-Encrypted: i=1; AJvYcCUMTIeKTqui2ZPxEkBWVza3GHkmzjI7Dcx4qdZ8tK18XrZZl1PhMn84X9WZMINunzMK8HYE0Vg=@nl2k.ab.ca

X-Gm-Message-State: AOJu0YwuUFqj6HjK4dQ2yNAb4uQjuPFIYrxFKYoyGH0Zp6VSMqb2DVHT

YuozphCX4J+7MeNA5UljF4Hf2M+R6epkdSQwRsmTB/GO2YYX8LBUr7f23QBoz+5lmcQblJnFhIA

g1EHBWaQQKgDRZ26QRmdlfjm988mqLDvDjYtqiSTNv2Tjfw==

MIME-Version: 1.0

X-Received: by 2002:a05:6830:210e:b0:7cf:d150:8251 with SMTP id

46e09a7af769-7d52c1c04e4mt13957058a34.33.1771956016385; Tue, 24 Feb 2026

10:00:16 -0800 (PST)

Reply-To: Chairty Ramos

Sender: Google Calendar

Message-ID:

Date: Tue, 24 Feb 2026 18:00:16 +0000

Subject: Your order {8f8f1fd was approved

From: Chairty Ramos

Content-Type: multipart/alternative; boundary="000000000000f0192b064b95a86a"

X-Spam_score: 13.7

X-Spam_score_int: 137

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: PayPal Paypal Gateway Financial Transaction Notice Logged

On: 2026-02-25 02:00:11 Aloha, Your financial transaction involving Tether

(USDT) totaling $568.56 has been successfully logged. Record ID: 32 [...]





Content analysis details: (13.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.74 listed in dnsbl.ahbl.org]

[209.85.210.74 listed in dnsbl.ahbl.org]

[209.85.210.74 listed in dnsbl.ahbl.org]

[209.85.210.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.74 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.74 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.74 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.74 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

1.2 MISSING_HEADERS Missing To: header

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.74 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.5 VOWEL_FROM_5 Impronouncable from header (6 consecutive vowels)

1.9 REPLYTO_WITHOUT_TO_CC No description available.

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Your order {8f8f1fd was approved



--000000000000f0192b064b95a86a

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



UGF5UGFsIFBheXBhbCBHYXRld2F5IEZpbmFuY2lhbCBUcmFuc2FjdGlvbiBOb3RpY2UgTG9nZ2Vk

IE9uOiAyMDI2LTAyLTI1ICANCjAyOjAwOjExIEFsb2hhLCBZb3VyIGZpbmFuY2lhbCB0cmFuc2Fj

dGlvbiBpbnZvbHZpbmcgVGV0aGVyIChVU0RUKSB0b3RhbGluZyAgDQokNTY4LjU2IGhhcyBiZWVu

IHN1Y2Nlc3NmdWxseSBsb2dnZWQuIFJlY29yZCBJRDogMzJlNzg5NTcxNWJhIFdhbGxldCAgDQpJ

ZGVudGlmaWVyOiBlNDM5ODc1OS0wODBhLTQyNTgtOGNmZS1mNjNhYmJiNGM5NWUgVW5pdHM6IDIu

NyBUaGlzICANCmRvY3VtZW50YXRpb24gaXMgaXNzdWVkIGZvciByZWNvcmQta2VlcGluZyBhbmQg

b3BlcmF0aW9uYWwgdHJhY2tpbmcuIElmICANCmRpc2NyZXBhbmNpZXMgYXJlIGlkZW50aWZpZWQs

IGtpbmRseSByZWFjaCBvdXQgaW1tZWRpYXRlbHkuIEN1c3RvbWVyICANCkhvdGxpbmU6ICg4MTAp

LTI4OCA0NTA1IFBheXBhbCAgDQpDcmVkaXQgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4N

Cg0KWW91ciBvcmRlciB7OGY4ZjFmZCB3YXMgYXBwcm92ZWQNClR1ZXNkYXkgRmViIDI0IOKLhSA5

cG0g4oCTIFdlZG5lc2RheSBGZWIgMjUsIDIwMjYg4ouFIDg6MzBwbQ0KUGFjaWZpYyBUaW1lIC0g

TG9zIEFuZ2VsZXMNCg0KDQoNCk9yZ2FuaXplcg0KQ2hhaXJ0eSBSYW1vcw0KamlkYW11c3NhQHNt

a3NiLm9yZw0KDQo=

--000000000000f0192b064b95a86a

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">

PayPal Phish from Google Gmail Part 5


/InformAction">
emtype=3D"http://schema.org/EmailMessage">
ntent=3D"Ashley Rumel: PayPal Paypal Credit Official Processing Receipt Gen=

erated: 2026-02-25 01:59:46 Greetings, We confirm that your request relatin=

g to Tether-USDT with a declared value of $583.85 has been accepted by our =

system. Receipt Number: 6713fe27642e E-Wallet Reference: 9a2d088d-0c8c-474d=

-be4b-21df1a522e13 Processing Quantity: 3.5 The transaction is scheduled fo=

r routine monitoring and final confirmation within our network. For urgent =

matters, contact our service department. Customer Service Line: { 1-810- 29=

3-0364 } COINBASE EXCHANGE PVT LTD PAYMENT Exchange Services . . . . . . . =

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .=

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . =

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .=

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . =

. . . . . . . . . . . . . . . . . . . . . . . . . . . . ."/>

emprop=3D"object" itemscope itemtype=3D"http://schema.org/Event">
prop=3D"eventStatus" content=3D"http://schema.org/EventScheduled"/>
emprop=3D"publisher" itemscope itemtype=3D"http://schema.org/Organization">=


=3D"eventId/googleCalendar" content=3D"idu03a67hhtandn364sosojs60"/>
tyle=3D"display: none; font-size: 1px; color: #fff; line-height: 1px; heigh=

t: 0; max-height: 0; width: 0; max-width: 0; opacity: 0; overflow: hidden;"=

itemprop=3D"name">Dear account holder Acknowledgment for your order no {a1=

96473

=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%;" class=

=3D"body-container">

-[if mso | IE]>
=3D"presentation">
tbody>
=

 

ellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100%=

;" class=3D"">

mscope itemtype=3D"http://schema.org/EmailMessage">


on">PayPal
Paypal Credit Official Processing Receipt

Generated: 2026-0=

2-25 01:59:46

Greetings,

We confirm that your request relating to Tethe=

r-USDT with a declared value of $583.85 has been accepted by our system.

=

Receipt Number: 6713fe27642e
E-Wallet Reference: 9a2d088d-0c8c-474d-be4b=

-21df1a522e13
Processing Quantity: 3.5

The transaction is scheduled fo=

r routine monitoring and final confirmation within our network.

For urgen=

t matters, contact our service department.

Customer Service Line: { 1-810=

- 293-0364 }

COINBASE EXCHANGE PVT LTD PAYMENT Exchange Services
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
=

.
.
.
.
.


0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" align=3D"cente=

r" style=3D"width:100%;" class=3D"">

px #dadce0; border-radius: 8px; direction: rtl; font-size: 0; padding: 24px=

32px; text-align: left; vertical-align: top;" class=3D"main-container-inne=

r">

13px; text-align: left; direction: ltr; display: inline-block; vertical-al=

ign: top; width: 100%;overflow: hidden; word-wrap: break-word;">
er=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D=

"100%" class=3D"main-column-table-ltr" style=3D"padding-right: 32px; paddin=

g-left: 0;;table-layout: fixed;">

yle=3D"padding:0; vertical-align:top;">
" cellspacing=3D"0" role=3D"presentation" width=3D"100%" style=3D"table-lay=

out: fixed;">

ord-break: break-word;;padding-bottom:2px;">

;Google Sans', Roboto, sans-serif;font-weight: 400; font-size: 22px; li=

ne-height: 28px;color: #3c4043; text-decoration: none;" class=3D"primary-te=

xt" role=3D"presentation">Dear account holder Ackno=

wledgment for your order no {a196473

"font-size: 0; padding: 0; text-align: left; word-break: break-word;;paddin=

g-bottom:24px;">

ormal; font-weight: 400; font-size: 14px; line-height: 20px; letter-spacing=

: 0.2px;color: #3c4043; text-decoration: none;" class=3D"primary-text" role=

=3D"presentation">Wednesday Feb 25, 2026 =E2=8B=85 12am=

=E2=80=93 11:30pm (Eastern Time - New York)

style=3D"font-size: 0; padding: 0; text-align: left; word-break: break-word=

;;padding-bottom:24px;">

style: normal; font-weight: 400; font-size: 14px; line-height: 20px; letter=

-spacing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"primary-te=

xt" role=3D"presentation">
=3D"0" role=3D"presentation" style=3D"padding-bottom: 4px;">


ss=3D"primary-text" style=3D"font-size: 14px;color: #3c4043; text-decoratio=

n: none;font-weight: 700;-webkit-font-smoothing: antialiased;margin: 0; pad=

ding: 0;">Organizer


pan class=3D"notranslate">
e=3D"display: inline-block;;color: #3c4043; text-decoration: none;" href=3D=

"mailto:chatri0123x@renewalmfok.org">Ashley Rumel

=3D"organizer" itemscope itemtype=3D"http://schema.org/Person">
op=3D"name" content=3D"Ashley Rumel"/>
hatri0123x@renewalmfok.org"/>

class=3D"secondary-text underline-on-hover" style=3D"display: inline-block=

;;color: #70757a; text-decoration: none;" href=3D"mailto:chatri0123x@renewa=

lmfok.org">chatri0123x@renewalmfok.org

le=3D"font-size: 0; padding: 0; text-align: left; word-break: break-word;;p=

adding-bottom:24px;">

le: normal; font-weight: 400; font-size: 14px; line-height: 20px; letter-sp=

acing: 0.2px;color: #3c4043; text-decoration: none;" class=3D"primary-text"=

role=3D"presentation">
"0" role=3D"presentation" style=3D"padding-bottom: 4px;">


=3D"primary-text" style=3D"font-size: 14px;color: #3c4043; text-decoration:=

none;font-weight: 700;-webkit-font-smoothing: antialiased;margin: 0; paddi=

ng: 0;">Guests

(Guest list has been hidden at organiz=

er's request)


--00000000000088e6c9064b95a704--

Paypal Phish from Google Gmail Part 4









Paypal Phish from Google Gmail Part 3



=20



=20



=20



=20







Paypal Phish from Google Gmail Part 2


schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">

















Paypal Phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 24 Feb 2026 13:18:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vuyqS-00000000PXI-2DT9

for dave@doctor.nl2k.ab.ca;

Tue, 24 Feb 2026 13:17:24 -0700

Resent-From: The Doctor

Resent-Date: Tue, 24 Feb 2026 13:17:24 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f74.google.com ([209.85.161.74]:45336)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vuwiE-000000004Yk-3DBQ

for doctor@nl2k.ab.ca;

Tue, 24 Feb 2026 11:00:56 -0700

Received: by mail-oo1-f74.google.com with SMTP id 006d021491bc7-679c6ef1538so46999395eaf.3

for ; Tue, 24 Feb 2026 09:59:59 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20230601; t=1771955993; x=1772560793; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=UAvIwWiTNPfbB1R+vAtk2nZhSk6d0sQ++OLcQrvq9pc=;

b=jW3KUvTfK6pgaalBxYIPhz8NSo3FNa8GTyQIgOGGDptEiQmm1c8f3axK670BOXpIwp

u1BJkE5wRQQH8uC9WH9bPlbnn5f5XYRhFDrApmmZb7rv9QV/9X3M9uiH6ZLwTkyg4dO4

acgq9OuNQDImVOY0L5e8ykBHUKU5i6qu7OFukuenQY/rT/lZvr2fJkTQaL0IxQuXDI29

zeIekZprb999CJDsDyXbls7TCtOOSmarhsvYZoez8a6gAmMiPoe49XfUz7yqYPQn7epi

sum/UvkmZKWkl+9BAtAvBZGZ1rH22XatJkO25M1M8lci3aT06LLUQIhTm86ybNMAVYkS

NjbA==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=renewalmfok-org.20230601.gappssmtp.com; s=20230601; t=1771955993; x=1772560793; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=UAvIwWiTNPfbB1R+vAtk2nZhSk6d0sQ++OLcQrvq9pc=;

b=KrzAKzXq64oy2eTVUjyUQxtqO48iDF8/mHxvWYwQHn+FWKp127DdwcjElRh8Lk33T6

1ZGSEw57t8+UXNBdmE7lnV0u2BzDZy0skUa+am3UDSi0AlHicZa7No54WR8RVqmDHbB9

swTD4WKbIsoup/WnQED2j4Ch58kqri3PwJ23HXvo5d4m+ylUAmVj37CNAMNhyL8rYPBO

VNSZZ0jWRFyT3xrtJJ2jWcdbOqBPe9EzD568kVBsu5cP0n0LRdgwMB1LzXyQFv3Wc89h

LbhLW9+2lKgWEYJ9SLTDZOD64qSGvjVYERUYmwnAp6FG0eu/VjKyn2ycv82D2JzYn4m5

CKxA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1771955993; x=1772560793;

h=from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=UAvIwWiTNPfbB1R+vAtk2nZhSk6d0sQ++OLcQrvq9pc=;

b=xBmRFnt2D9vq1teIyKO073994aL0WN2MkzzJ8fV1ETK4nXuHikHeQlLyJDqanP2d+x

wGiAKXgfD/GBY8Dxj0PM4tbL33Q2PJABo9AuhrCtcvzQZUGF00A5Aapn1t0/dgDq1lKi

UXk/Wv7nffCWS6wj5+Orm37ZOFfjTCPRUn0/n6siWhjLptnsTztOhSWaOSay5hvAIE58

UAt92LzScJy+r/us40V73aJKeXwLpACULD/mzM0zYtLLSyJC5RqORvaMm9uIDhgPRLpg

PKg+/49q4IfQ0iZVsQqoWpWPRYEk7h4bkHYgxOpJx+7Yorlir/AlMXMkLXnIElfnNMhP

O1fw==

X-Forwarded-Encrypted: i=1; AJvYcCVBg6TNP5NLQos18BKuvwLbdo8ixRRUkZ2dAis+zYLQHfUpd49Xuvy3ROQFsloGyOGSNHGw2KI=@nl2k.ab.ca

X-Gm-Message-State: AOJu0YyfIy6CWda9Lwv4foVZWt7vwnrxxhTGxKx2OzaYYvQQVTs5KyCr

V9l61X050+BB/RGQ2CdryyD5LQFdXfqs0s1LuiX2l6XO7lehOYUZYRcC4fmMNIoNy5AExhhQAx3

oWR6SFxYhc/CCyxGlGeZwMzcezVURmTn5ues5h5EI2jy3Ag==

MIME-Version: 1.0

X-Received: by 2002:a4a:da52:0:b0:679:dcb5:b84a with SMTP id

006d021491bc7-679dcb5bc82mt2629928eaf.57.1771955992939; Tue, 24 Feb 2026

09:59:52 -0800 (PST)

Reply-To: Ashley Rumel

Sender: Google Calendar

Message-ID:

Date: Tue, 24 Feb 2026 17:59:53 +0000

Subject: Dear account holder Acknowledgment for your order no {a196473

From: Ashley Rumel

Content-Type: multipart/alternative; boundary="00000000000088e6c9064b95a704"

X-Spam_score: 9.4

X-Spam_score_int: 94

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: PayPal Paypal Credit Official Processing Receipt Generated:

2026-02-25 01:59:46 Greetings, We confirm that your request relating to Tether-USDT

with a declared value of $583.85 has been accepted by ou [...]



Content analysis details: (9.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

[209.85.161.74 listed in dnsbl.ahbl.org]

[209.85.161.74 listed in dnsbl.ahbl.org]

[209.85.161.74 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.74 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.161.74 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

[209.85.161.74 listed in will-spam-for-food.eu.org]

1.2 MISSING_HEADERS Missing To: header

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.161.74 listed in sa-accredit.habeas.com]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.161.74 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.161.74 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.161.74 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.74 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.9 REPLYTO_WITHOUT_TO_CC No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Dear account holder Acknowledgment for your order no {a196473



--00000000000088e6c9064b95a704

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



UGF5UGFsIFBheXBhbCBDcmVkaXQgT2ZmaWNpYWwgUHJvY2Vzc2luZyBSZWNlaXB0IEdlbmVyYXRl

ZDogMjAyNi0wMi0yNSAgDQowMTo1OTo0NiBHcmVldGluZ3MsIFdlIGNvbmZpcm0gdGhhdCB5b3Vy

IHJlcXVlc3QgcmVsYXRpbmcgdG8gVGV0aGVyLVVTRFQgIA0Kd2l0aCBhIGRlY2xhcmVkIHZhbHVl

IG9mICQ1ODMuODUgaGFzIGJlZW4gYWNjZXB0ZWQgYnkgb3VyIHN5c3RlbS4gUmVjZWlwdCAgDQpO

dW1iZXI6IDY3MTNmZTI3NjQyZSBFLVdhbGxldCBSZWZlcmVuY2U6ICANCjlhMmQwODhkLTBjOGMt

NDc0ZC1iZTRiLTIxZGYxYTUyMmUxMyBQcm9jZXNzaW5nIFF1YW50aXR5OiAzLjUgVGhlICANCnRy

YW5zYWN0aW9uIGlzIHNjaGVkdWxlZCBmb3Igcm91dGluZSBtb25pdG9yaW5nIGFuZCBmaW5hbCBj

b25maXJtYXRpb24gIA0Kd2l0aGluIG91ciBuZXR3b3JrLiBGb3IgdXJnZW50IG1hdHRlcnMsIGNv

bnRhY3Qgb3VyIHNlcnZpY2UgZGVwYXJ0bWVudC4gIA0KQ3VzdG9tZXIgU2VydmljZSBMaW5lOiB7

IDEtODEwLSAyOTMtMDM2NCB9IENPSU5CQVNFIEVYQ0hBTkdFIFBWVCBMVEQgIA0KUEFZTUVOVCBF

eGNoYW5nZSAgDQpTZXJ2aWNlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu

IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g

LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLg0KDQpEZWFy

IGFjY291bnQgaG9sZGVyIEFja25vd2xlZGdtZW50IGZvciB5b3VyIG9yZGVyIG5vIHthMTk2NDcz

DQpXZWRuZXNkYXkgRmViIDI1LCAyMDI2IOKLhSAxMmFtIOKAkyAxMTozMHBtDQpFYXN0ZXJuIFRp

bWUgLSBOZXcgWW9yaw0KDQoNCg0KT3JnYW5pemVyDQpBc2hsZXkgUnVtZWwNCmNoYXRyaTAxMjN4

QHJlbmV3YWxtZm9rLm9yZw0KDQo=

--00000000000088e6c9064b95a704

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

AAA Safety kit phish from Microsoft Outlook Part 4





Millions across the US north-east remain under a state of emergency after a severe winter storm brought nearly two feet of snow in some places, along with high winds and cold temperatures. Parts of Canada's Atlantic Coast have also been affected.



New York's Central Park recorded almost 20in (51cm) of snow, according to the National Weather Center, and Providence, Rhode Island, received 33in (83cm) of snow, smashing the existing record for the single greatest snowstorm, 28.6in (72.6cm) set in February 1978.



The snow has started to taper off, but with so much on the ground, it could take several days for life to return to normal on the East Coast.



Here is where things stand at the moment:



In New York, a travel ban that brought the city of over 8 million to a near standstill has been lifted

NYC Mayor Zohran Mamdani - who has been in office for only two months and has already experienced two major snow storms - announced that millions of students are taking a full snow-day off, meaning they did not have to attend online instruction or in-person school

No deaths have been recorded in New York as a result of the storm, Mamdani said at a news conference. The last storm in New York in January left 19 people dead

In neighbouring Connecticut and New Jersey, there are concerns that falling trees and branches loaded down by snow could lead to dangerous road conditions and more power outages

Massachusetts appears to have been hit the hardest with power outages. More than 284,000 households and businesses are without power, according to blackout tracker PowerOutage.us

Thousands of flights in and out of the affected area have been cancelled

In Rhode Island and Connecticut, state bans on non-essential travel are in place until further notice

Massachusetts Governor Maura Healey, who activated the state's National Guard ahead of the storm, told residents to check on neighbours and the elderly and "stay off the roads"



We are ending out live coverage for today, but you can read more about the blizzard and its aftermath here: More than 5,000 flights cancelled as US east coast digs out of record snow



'A very unique experience' - New Yorkers and visitors react to winter stormpublished at 22:25 23 February

22:25 23 February

Berliner Peggy Ferber speaks to Reuters from Times SquareImage source, Reuters

Image caption,



Berliner Peggy Ferber woke up early to visit Times Square in the snow



New Yorkers are no strangers to snow, but resident Mickey Blank says it "doesn't happen too often in the city that the road is covered and you have to go through mountains of snow".



Speaking to news agency Reuters, she describes today's conditions as "a very unique experience".



Some visitors to the city have been charmed by the conditions too.



Berliner Peggy Ferber is temporarily living in New York, and describes it as a "very special moment". She says she "woke up early" this morning to visit Times Square. It is "crazy" to see it "so empty", she says.



Sylvain Roy is visiting from Lille in France, and describes seeing snow in New York as "perfect".



Here are some pictures from around the city today:

A New York Street blanketed in snow with the skyscrapers of Lower Manhattan in the backgroundImage source, Getty Images

Image caption,



A thick blanket of snow left parts of Manhattan eerily quiet

People building a snowman in Times SquareImage source, Getty Images

Image caption,



People building a snowman in Times Square

A person in grey hooded coat and backpack walks through the snow outside Radio City Music HallImage source, Getty Images

Image caption,



There was no stopping some New Yorkers

A car coming through a large arch at the end of a bridge during a blizzardImage source, Getty Images

Image caption,



A travel ban meant there were very few cars on the road

People sledding on fresh snowImage source, Reuters

Image caption,



And a full snow day allowed many children to take to the parks with sleds

Cape Cod worst-hit by power outages in Massachusettspublished at 22:21 23 February

22:21 23 February



In Massachusetts, the county that contains the wealthy seaside enclave of Cape Cod is struggling to restore electricity.



More than 156,000 customers were without power in Barnstable County as of Monday evening, according to PowerOutage.us.



Entire neighbourhoods are without power, according to local media, due to strong winds blowing down trees laden with heavy snow, severing power lines.



Local power utility companies say they are working to rapidly restore service, but are being hampered by blowing snow and poor visibility. They plan to bring in work crews from neighbouring states.









--_0a435d48-51ac-44dd-ae80-3a94c99c8273_--