French language RCMP phish from Google Gmail

evidence at Spamcop

French language RCMP phish from Google Gmail

Evidence at Spamcop

French language RCMP phish from Google Gmail

Evidence at Scamcop

French language RCMP phish from Google Gmail

Evidence at Spamcop

French language RCMP phish from Google Gmail

Evidence ay Spamcop

French language RCMP Phish from Google Gmail

Evidence at spamcop

French language RCMP phish from Google Gmail

Evidence at Spamcop

Web/SEO/App Spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 09 Dec 2025 14:58:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vT5ho-00000000Lsr-3yi2

for dave@doctor.nl2k.ab.ca;

Tue, 09 Dec 2025 14:57:12 -0700

Resent-From: The Doctor

Resent-Date: Tue, 9 Dec 2025 14:57:12 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oi1-f176.google.com ([209.85.167.176]:52388)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vT4Yg-00000000IRT-25dZ

for sales@nk.ca;

Tue, 09 Dec 2025 13:43:51 -0700

Received: by mail-oi1-f176.google.com with SMTP id 5614622812f47-450be85b7d9so2773109b6e.0

for ; Tue, 09 Dec 2025 12:42:56 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=groupacclaim.co; s=google; t=1765312970; x=1765917770; darn=nk.ca;

h=mime-version:date:message-id:subject:to:from:from:to:cc:subject

:date:message-id:reply-to;

bh=XNnHItT+IqKbf12xIof0EhDk4utDtvAvaU4aDbGhghA=;

b=LYoBrPMTXrCkZEdvHdhsiv4DFo1dDbdZ5cDfXbM1T8IzrWXRi07oNP5fQ27LMcekvc

lJ9P+Kz0GCI8YvepXSfwFbPJE14gER80ttrvocE6UzL4rI69jx2mWhoD2XTQRK5E1dup

pORTpA/PcOEIf1GbYHHXbYWavFTUjzBt9R+wswkY2kcrcMsQCi2JUcev/xZ4V0l14zk9

2fxGbuFwd2DOaj88vUxaFJmstDB+6Epvuchjb/tmmmnh8KqQ2ia1wfhBBXSjgLjKs612

gFwi0WMkVfWNBiCF0WwVXR5Z6uwvT1aNRKLpcgdRXupOsTN+6stgBhMbFAtyTdjH8fA9

5Htw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765312970; x=1765917770;

h=mime-version:date:message-id:subject:to:from:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=XNnHItT+IqKbf12xIof0EhDk4utDtvAvaU4aDbGhghA=;

b=fZcxnfjfGddTY1SAbAX56xlAvgahblHXVlDDA3buZUjUef/avda0NDJ4T/rrW6qM+P

y7S5sxch9KVWxmS9MhmSDOnOPfBjPJgBIqndU0YQVXbEoBNBoCTt4Fl+Q07uuY3QRpl4

JGTnZgS6XT/DP62QMPB0StR2inpmjZPBicPIPfOUcsV6rS/26l0W7ZGZlUvB9zWp3Yog

VpfAtRLnrPF8h31789RYpq+4dNLSLBQlUh8q1XiUCPi4uSJVokd54XIbFDDIvH9dqkx0

LsvsWfRdrKqHtafYCWoPsZdRGowJd9l9Ufx3wNfbTRSOZx+p7QVBn5w3rpCZ3ngnDBUb

bDZA==

X-Gm-Message-State: AOJu0YwKjSqOCieqpAD935Feq0zuHoB11T1mZXeeBg4PtBggn86UcSBM

Vdh54zocykS3ZpZCpxdqUqGaWTlPUi6fVvBmOjzYcLG9RFkeRPFBOj1+8PJ2JJeSQ1+qVJxoDMg

QFIzXeg==

X-Gm-Gg: ASbGncuk4tvQwxMbY8Ck69OJYS8GtcYHyMFOQI7jWprmkJURWDa14/EipMbkrXGZ3oj

qUgfJxTRWWnbqrQvBDVzkNAMBDxouApQ32NG0cNKJF6RNBsifOC7Ft5nIHtiLMGM7O/BfgvKWW/

f1hmHeMqWqe4f9AFblU2fa6r91NtrNsukcDM0vXS+oJK56L80UBTWfELsLlv7jrRGiNGIkVSAse

tpLkuQe0rioA2dCM0jZu0SM4y7fG5bx/BZyjtx8y4sPhLBYcBoZMvBKapQbES9elCgsNdkHX/b0

O6+kPlVRy8YQ0tI4w3Ops0ZT/5Intyj7sSIIxDP3HFiNmXRnf9RHOzG8M0PCZ2cO0uFNLenOI9Q

3K+fYCUQ31qj0SRmBPI7zUwvcU6+VymGvJCPW6dot9Wr3sGkyCzQG9iW4mFbaHULiSpLfR8DHnT

rwmC1MHfqaery1Xn5slEunINTfJv6eIu15TCI8UKwOsfhmYeXOUE5JudvvpzZ3WgikCYIh3JEaL

zxRqbiSF8ZZV+mZrtmiNj9fWculLYXYDg==

X-Google-Smtp-Source: AGHT+IFb+f+BvJVibxa7oDSNZ18Ups7g4l5XlYn7aWSqFXwbUb8I0xbGgSZEKNRfAbN3vCmPEoNYLQ==

X-Received: by 2002:a05:620a:29d2:b0:8b9:a134:90e0 with SMTP id af79cd13be357-8ba38a7663amr4065085a.16.1765305801801;

Tue, 09 Dec 2025 10:43:21 -0800 (PST)

Received: from ip-172-31-7-170.ec2.internal (ec2-13-218-114-168.compute-1.amazonaws.com. [13.218.114.168])

by smtp.gmail.com with ESMTPSA id af79cd13be357-8b62529e75csm1392648085a.9.2025.12.09.10.43.21

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 09 Dec 2025 10:43:21 -0800 (PST)

From: =?UTF-8?Q?Natalia_J=C3=B3zefara?=

To: sales@nk.ca

Subject: Hey

Message-ID: <39327c5a-da83-sl92-40aa-a8f1-fbd3b81d6889@groupacclaim.co>

Date: Tue, 09 Dec 2025 18:43:21 +0000

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--_NmP-e50ca364b95bcbba-Part_1"

X-Spam_score: 6.6

X-Spam_score_int: 66

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: I’ve seen you guys at Netknow do impressive work in web

development. We’re a Polish agency and we often assist companies like yours

with developing websites in Webflow and WordPress when they need extra hands.





Content analysis details: (6.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[13.218.114.168 listed in will-spam-for-food.eu.org]

[13.218.114.168 listed in will-spam-for-food.eu.org]

[13.218.114.168 listed in will-spam-for-food.eu.org]

[13.218.114.168 listed in will-spam-for-food.eu.org]

[13.218.114.168 listed in will-spam-for-food.eu.org]

[13.218.114.168 listed in will-spam-for-food.eu.org]

[13.218.114.168 listed in will-spam-for-food.eu.org]

[13.218.114.168 listed in will-spam-for-food.eu.org]

[209.85.167.176 listed in will-spam-for-food.eu.org]

[209.85.167.176 listed in will-spam-for-food.eu.org]

[209.85.167.176 listed in will-spam-for-food.eu.org]

[209.85.167.176 listed in will-spam-for-food.eu.org]

[209.85.167.176 listed in will-spam-for-food.eu.org]

[209.85.167.176 listed in will-spam-for-food.eu.org]

[209.85.167.176 listed in will-spam-for-food.eu.org]

[209.85.167.176 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.167.176 listed in dnsbl.ahbl.org]

[209.85.167.176 listed in dnsbl.ahbl.org]

[209.85.167.176 listed in dnsbl.ahbl.org]

[209.85.167.176 listed in dnsbl.ahbl.org]

[13.218.114.168 listed in dnsbl.ahbl.org]

[13.218.114.168 listed in dnsbl.ahbl.org]

[13.218.114.168 listed in dnsbl.ahbl.org]

[13.218.114.168 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.167.176 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.167.176 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.167.176 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.167.176 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.176 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.176 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Hey



----_NmP-e50ca364b95bcbba-Part_1

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



I=E2=80=99ve seen you guys at Netknow do impressive work in web development=

.





We=E2=80=99re a Polish agency and we often assist companies like yours =

with developing websites in Webflow and WordPress when they need extra =

hands.





Would you like to take a look at a few websites we recently =

created for another agency in Canada?





Be Well,=C2=A0

Natalia J=C3=B3zefara =C2=A0

The Acclaim Agency

acclaim.agency





----_NmP-e50ca364b95bcbba-Part_1

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable









Hey




content=3D"text/html; charset=3Dutf-8">




initial-scale=3D1">



=20



I=E2=80=99ve seen=

you guys at Netknow do impressive work in web development.=



We=E2=80=99re a Polish agency and we often assist =

companies like yours with developing websites in Webflow and WordPress when=

they need extra hands.

Would you like to take a look at =

a few websites we recently created for another agency in Canada?=


Be Well, 
Natalia J=C3=B3zefara =

 
The Acclaim Agency





=20



----_NmP-e50ca364b95bcbba-Part_1--

French language RCMP phish from Google Gmail

Evidence at Spamcop

French language RCMP phish from Google Gmail

Evidence at Spamcop

Web/SEO/App Spam from Microsoft Outlook Part 2



=?Windows-1252?Q?af6wzI1WQvrpc46oV4HgvxQ6u6frRzvFM7Ixb5ZqC8cyTzYt25jgx7N/?=

=?Windows-1252?Q?IHSSVsU7zXH+9QWUV2SdHTzOTsq5opLDtHF9UtM5ngYzpUt+RduQ9y6B?=

=?Windows-1252?Q?Ge5JveyuRlyHMkD7HmrulVlhv533lSXQQ+35TOFqkqJmU2eA3sxndpz9?=

=?Windows-1252?Q?bkKFTfKNtB5dP3LMxuy5PHBhjNPlCMPHC9q7lH3u6AIcZejbLZBs40h3?=

=?Windows-1252?Q?b84y0r5TNd8redGATvPyKPfP/eqOvmbnDoA+swwD59LQyd8U2m2POLvA?=

=?Windows-1252?Q?7a0izCKeWfHa+OVaZuLRgVhSaNWKeVXaxSpKabfcdvbKmJRcuaRbBFWg?=

=?Windows-1252?Q?GC5j9ywi2kKDMHzZBMRFCgsDl6MB+Xc9YLcUsKnrmWj7msQhmbwNVsdc?=

=?Windows-1252?Q?M9usFe5sBdiQFHkaSsNMXw=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_TYZPR01MB56213462F17AECE118762BD3BCA3ATYZPR01MB5621apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYZPR01MB5621.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 47e0a664-93bb-4197-ad1b-08de373b0e83

X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Dec 2025 15:53:11.8944

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: KL1PR01MB5799



--_000_TYZPR01MB56213462F17AECE118762BD3BCA3ATYZPR01MB5621apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,







I personally visited your website when I was browsing it.







In order to significantly improve these search results for you, I would lik=

e to send you an Ranking report of your website.







Can I Send you Quote=94 and Cost/=94?







Best regards,



--_000_TYZPR01MB56213462F17AECE118762BD3BCA3ATYZPR01MB5621apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Hi,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

 



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

I personally visited your website when I was browsing it.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

 



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

In order to significantly improve these search results for you, I would lik=

e to send you an Ranking report of your website.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

 



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Can I Send you Quote=94 and Cost/=94? 



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

 



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Best regards,








--_000_TYZPR01MB56213462F17AECE118762BD3BCA3ATYZPR01MB5621apcp_--

Web/SEO/App Spam from Microsoft Outlook Part 1

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 09 Dec 2025 08:56:00 -0700

Received: from mail-koreacentralazolkn19013073.outbound.protection.outlook.com ([52.103.74.73]:14016 helo=SEYPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vT039-00000000LnN-2Fgu

for dave@doctor.nl2k.ab.ca;

Tue, 09 Dec 2025 08:55:02 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=DE/wDeCV/Us9x6kWR+t9s3HW0qNlzIR9wZRFz12ktZRyzsMbltGs0qFkP2yTFahVsL8pwgTIYrBEbqYxfoqSZTKW+vptBROh+tbPxPAbI7bmTbWed0AjPvQY3rEXSRa6AcYRnRVFf3gIYdcpOTFJ6rw/1oNJygJZbimmcxU2JTWyl7JcFZQ4EyW+Jn0+ljvHAZ05ywLjZt2ciMPp135gFc72fjGMS/NsUIfywLt62aJa/Fga3rsgWMpZubao007oz1PlOBARZWQQ1NPjJO22L0tJX2ss0wuhHsOow6z7WMR+CvaI4H1ENOnmwjxrchc5ebKg5LH3w1t3xKwfyEsesA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=0YStLK595PeLuqZInqBpsShvvnehHm7KrV0UY0Olf60=;

b=EIOiKFIThip2XXeLU2/YqxPJpEzYfiBq1jPsC5KaQAy6nXuIKQt/x2bVCnM7UeUqhmQ3/eHW47bF7HTDRuiQYb5UmPJzhmmAcl+W2O5evVBDp0ceDYoaMeUy539DRQNDb7yxM87DtjvxgVjy+CkwS9ABYE2/PzRQCP6YIWnC9zrXx/+terFFwtRV1FHxQK5Tw6Y5BhHB+L8cjKfS71siMct8j5FhXtSBHlrC4EHGyoumVXK01bfC+eKiCW0vcm6m2TrnFrWclM9ptbb3zN1/6+wqCiVEgbCe1CnD99iyguYRN9jiSK/RBunARgrmS84pvdc6dk9qN+chu9eRp1DrcA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=0YStLK595PeLuqZInqBpsShvvnehHm7KrV0UY0Olf60=;

b=sbXT0JLpD2iJsHhw2wpuOKOGMQFXE8I62ZMczmH9MyDnEdxmLyMUzKiINXxZiffZA+aMxLNiU7IwaBSs9ppjdzubZqhUPcwHNF2ffYydnxOc9T/0oMZQgttLOFKBVOZT+mUGbMvtWjLqBy3tgjrSNvaIhc2/pMTNwDOO3/zCzvIeo0Q0KT59LMMxxZufmpixFAz0vsG04OZueV8TmUKG2x/UuDHDnOEeQHzbZwHCuRYpuUa1l5gejpuHTSKnSpbrP9nfe73Tv8eEqTgXXgXJkyRaXWVPwo5xIGH1WlETZqjfETwxN0jN8mu6Dozey3uKW/ZQSf/av+fdyn4tWz/2Og==

Received: from TYZPR01MB5621.apcprd01.prod.exchangelabs.com

(2603:1096:400:41b::10) by KL1PR01MB5799.apcprd01.prod.exchangelabs.com

(2603:1096:820:113::5) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9412.7; Tue, 9 Dec

2025 15:53:12 +0000

Received: from TYZPR01MB5621.apcprd01.prod.exchangelabs.com

([fe80::9fae:b5b9:2e74:a1b6]) by TYZPR01MB5621.apcprd01.prod.exchangelabs.com

([fe80::9fae:b5b9:2e74:a1b6%6]) with mapi id 15.20.9388.013; Tue, 9 Dec 2025

15:53:12 +0000

From: Trevor Frank

To: Trevor Frank

Subject: =?Windows-1252?Q?Re:_Yes=85=3F?=

Thread-Topic: =?Windows-1252?Q?Yes=85=3F?=

Thread-Index: AQHcaSPsF18oSKhwFk2DM3absre3ug==

Date: Tue, 9 Dec 2025 15:53:11 +0000

Message-ID:



References:

















































































In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-exchange-messagesentrepresentingtype: 1

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYZPR01MB5621:EE_|KL1PR01MB5799:EE_

x-ms-office365-filtering-correlation-id: 47e0a664-93bb-4197-ad1b-08de373b0e83

x-microsoft-antispam:

BCL:0;ARA:14566002|39105399006|37102599003|31061999003|461199028|8060799015|8062599012|19110799012|15030799006|15080799012|440099028|3412199025|39145399003|40105399003|41105399003|102099032|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?hJUd44TevX6A4wES7XPu6rrCUMXfpVOVMFEr+poIz0P5rUtID77Ubq39?=

=?Windows-1252?Q?TUj63sf9su/4vcJ/kbvN7lHhFCmVZSHtwRBVuVHyXu0sWh04mimS+yA2?=

=?Windows-1252?Q?AO0G7gJGoNWXgAnyrtaET/c+RCsizqNiEkiCnp6k7tipe9Aqtn8H8FHp?=

=?Windows-1252?Q?YCkMsmmN/aiVusRs9BGW8ySX+X5FlEUdeAgkIx2QsJd8agT5GqrYPGgE?=

=?Windows-1252?Q?pgiqJfOB66pOLewVe0Hh9ialA81mIDRXa5/ye2ZQHa4o+vRfqhS/VAvX?=

=?Windows-1252?Q?t8qBUmD/GbRDxBEbXMWrqd9ch4X5eJtdaq9gXvATKoVVCyOdkW/WizSi?=

=?Windows-1252?Q?XrKGD1EWStF2PTqqO69MwDUzmVG/KziFrQ2UaZ7xqGPFsyIEKFMhgB0C?=

=?Windows-1252?Q?o4hCD7t57nickNPP4kNGDB0mnGIY37DBtDvx/FZdS9nVDUP2OpaYduwT?=

=?Windows-1252?Q?pM3RQiweNeoUXe7yam1OZICZwR47O23gst0VZnzBQ9pEf34quC8w3zG0?=

=?Windows-1252?Q?BB09C4h6eF0OL8XtOAMkv9g2wtmyxGbqu1lAiEG9xiaysGCW3XWZhp9O?=

=?Windows-1252?Q?V0bFBEZ0nDU6vO47tj+XBTC1HZSo22zcri26QrOe3RZpIkpDhUebb3m9?=

=?Windows-1252?Q?Dblb9FVBMEsgWp/x4XMdeO5eooHMUbny/Gh4/UWKoKDCkCy/UhTt+a62?=

=?Windows-1252?Q?ohhM+BfVhx795s1lckjHm1ClMtfLnKDXRl/Naz5JRX3lM5bQWCnjBiWO?=

=?Windows-1252?Q?f5hNn7pJ8qHXhDN2PW9BDrYSgbiBpEnvntHnJYjUoEMnsaNPadixj2Hc?=

=?Windows-1252?Q?FLmTmqdxok69JF1QVh8TQ4lamvLRldprtV/QRnxfM0yIn9DPe7REaDid?=

=?Windows-1252?Q?BHH1hQGrHZWPf8DWzg76tHubOJ4izAL6CK920Lf27yWo6zVbfrKVnVPV?=

=?Windows-1252?Q?XYR7nbWgDfbhAPbYqsTClu2RKVdGKwFBtOvMda7LLaBiQbbbmpgwgyGD?=

=?Windows-1252?Q?d/T51mVE/CguOb1iHTk9gu7zAvzL6bDu85UKJL8KrZ6ZaQmnvRopcNSp?=

=?Windows-1252?Q?KHvQ2pqoV530afCrhEWzkVaUVLn1n9yACwDJ1B8TWt4NgRfJGELypCNW?=

=?Windows-1252?Q?1Lh90O25tbZj4UXn/t3yeKhhR+tzvJdSWBzmziV/z++/C05iFKMp1qdR?=

=?Windows-1252?Q?W3U4ET6Z1gY3ldoMFsvzd1N0h+SvZ8a8VgE4HkE6npUU2n6NpDrrXGbZ?=

=?Windows-1252?Q?SRW2B3ADiEjnu3Sa7kT67FcC/5uxW5hRvzpxaeSjQAhZNGKafeUExANo?=

=?Windows-1252?Q?dJ3QHdTvIs2PG0SrKHg/rDCo2nWICm8iQWPXPjxcqSWFKdGPIQBdCd6N?=

=?Windows-1252?Q?yD+qdTLsbQT3s83W64p5FjhquPxGDQf+ch3YnSHaBBqdOAN/cj7Cazer?=

=?Windows-1252?Q?qEvLgfVcEgEmPWTv8/laWA=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?1U1mSDivivAlBbKM2RfAZzeoqhxvvdv+Sn2jiGvEzaGBxDQ9SVvVJ9Ha?=

=?Windows-1252?Q?FMhOw/fanPydZjMTJ2dqvBCWStHFzIodfL97e1z7/Ki3AmyuTC+ml2WZ?=

=?Windows-1252?Q?KofM0GaPML/6fHS9318JaMRhYlhd8Ky9l1CdboKHhXA+fVU9r83npxXd?=

=?Windows-1252?Q?D96wbzBgEwPs6OvEF7VOntgwS+Yq/Ht5rekZa1RLGWuS7cO3LZ8IutCS?=

=?Windows-1252?Q?xcuTm+cUab4bziffP5cCCi3BteoCZ0ZPspm58ReAjGmwDGB1F/Bu85Iw?=

=?Windows-1252?Q?4DN39ntuOfIH78VFHEbaVySv9VlqV/39Sb+HpXX/J44ibfV2YQi2svKI?=

=?Windows-1252?Q?fmCarFNyZCFo1uFZo5QJaKzmvBN+qB++kCuXpXsIkJ74f7LXqmeRQJkU?=

=?Windows-1252?Q?ZVd4VQspiwwVz7rJHtt9WvV6ny40pjbUDdZj49Kn9AE8DNSR31137lQS?=

=?Windows-1252?Q?lPguMNBqXB8A4PoQZ9LWtA13Qmgx5pXo29ViD1N8ufCq7IOv7ccTbpeT?=

=?Windows-1252?Q?K+KsGZAbEUu1OqP9maLfr1NJA9jzKGd4181pTzu+PTftbbn+dPVuuu/g?=

=?Windows-1252?Q?ztbzfvEydGW+KFqHuJlOAO9FStiVu/JtA6wIUfL7ofgyv+d72vKKZFxz?=

=?Windows-1252?Q?Yu6w2t62yCUvxN6B3JykN15b0bbsfsK/RH9JcQI+uX1UDuCpLNqELfxB?=

=?Windows-1252?Q?isGteME1skoc4LY53eQQQLU0/C5jXk1qbK78wMGUHz/rh80W8NfC/qJB?=

=?Windows-1252?Q?V/zk179N28B1/QyDcGp8TJIgnH920D/+Io6iqA0MlI+LrwhrwlIWXjiX?=

=?Windows-1252?Q?qfEAuxFHrXd8rWpBsccf7F0CvuWeswr2kk7D0WUQ/FaQn82yfMdEU/Xa?=

=?Windows-1252?Q?XEO+4n5PMCsW6ntUm9rbE7aXtOOYMbWNMul+Vxo3ll+9uG7vjnjDp/4x?=

=?Windows-1252?Q?CMU5Ww/CVUsLL2826pNc1Huj+HaO8GuQd7v1fYNCexR5gmbcUCpYQ2l1?=

Web/SEO/App Spam from Google Gmail Part 2

Dear,



We are pleased to present our proposal for web development services for your

website, covering the development of a dynamic website and associated

services.



Our web development team has extensive experience in developing and

maintaining websites for clients like yours. Our team is skilled in the use

of modern web development technologies such as HTML5, CSS3, and JavaScript,

as well as the popular content management systems (CMS) like WordPress,

Shopify, Magneto and Joomla.



Our proposal includes the following services:



. Design and development of a custom website



. Creation of an intuitive and optimized user interface



. Implementation of user-friendly navigation



. Development of a secure and reliable back-end



. Integration of content management system



. Integration of social media platforms



. Implementation of SEO best practices



. Development of mobile-friendly version



. Testing and debugging



. Deployment of the website



. Ongoing maintenance and support





we are confident that our team can deliver a website that meets your

expectations and requirements. Our proposal includes a detailed project

timeline, cost breakdown, and payment schedule.



Please do not hesitate to contact us if you have any questions or would like

to discuss this proposal further. We look forward to hearing from you soon.



Thanks and Regard's

Juliette





------=_NextPart_000_1461E_01DC692F.A0204100

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =

charset=3Dus-ascii">
(filtered medium)">

class=3DWordSection1>


style=3D'color:black'> 


class=3DMsoNormal>
style=3D'color:black'>Dear,


class=3DMsoNormal>We are pleased to present =

our proposal for web development services for your website, covering the =

development of a dynamic website and associated services.

Our web =

development team has extensive experience in developing and maintaining =

websites for clients like yours. Our team is skilled in the use of =

modern web development technologies such as HTML5, CSS3, and JavaScript, =

as well as the popular content management systems (CMS) like WordPress, =

Shopify, Magneto and Joomla.

Our proposal includes the following =

services:

• Design and development of a custom website =


style=3D'color:black'>• Creation of an intuitive and optimized =

user interface


style=3D'color:black'>• Implementation of user-friendly navigation =


style=3D'color:black'>• Development of a secure and reliable =

back-end


style=3D'color:black'>• Integration of content management system =


style=3D'color:black'>• Integration of social media platforms =


style=3D'color:black'>• Implementation of SEO best practices =


style=3D'color:black'>• Development of mobile-friendly version =


style=3D'color:black'>• Testing and debugging =


style=3D'color:black'>• Deployment of the website =


style=3D'color:black'>• Ongoing maintenance and =

support


we are confident that our team can deliver a website =

that meets your expectations and requirements. Our proposal includes a =

detailed project timeline, cost breakdown, and payment =

schedule.

Please do not hesitate to contact us if you have any =

questions or would like to discuss this proposal further. We look =

forward to hearing from you soon.

Thanks and =

Regard’s
Juliette



------=_NextPart_000_1461E_01DC692F.A0204100--

Web/SEO/App Spam from Google Gmail Part 1

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 09 Dec 2025 08:36:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vSzkC-00000000GGN-3LBd

for dave@doctor.nl2k.ab.ca;

Tue, 09 Dec 2025 08:35:16 -0700

Resent-From: The Doctor

Resent-Date: Tue, 9 Dec 2025 08:35:16 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f195.google.com ([209.85.214.195]:53587)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vSwC7-000000005jb-1y42

for root@nk.ca;

Tue, 09 Dec 2025 04:48:00 -0700

Received: by mail-pl1-f195.google.com with SMTP id d9443c01a7336-29ba9249e9dso77234465ad.3

for ; Tue, 09 Dec 2025 03:47:06 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=thenitroinfotech.com; s=google; t=1765280820; x=1765885620; darn=nk.ca;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:from:to:cc:subject:date:message-id:reply-to;

bh=/JSuauFtZsmRfob7BVugFJLIoJlxq0+y0mJRg9l9znE=;

b=Hpf2msQSfeCjTsQ5ilAnJtlfZ+8d35RgXXQ1HjDn2an6N0ysHSU3XkE/OchASaDANX

bJz3hk6ppebuerfYXCAgm1tbS5S+UjoRw/zhGfL+AZJaYHLpB6EQvaMGfS3ruMkcbfJj

miYZSeTWr4GlHzM4hHqHRVDCYWKpdUH3/xRAdVa6V2VbO85tke16cf/EbQY5J+fSjJ14

e7Tl+IRiiUuPz2NJ5jx44MWE1MooIRNU3lxep/+71hp5w8UcoIYCQqjNLqR+GM6FxAjy

eofjCcmjkxajlF7fOSRu4zZKE3NDlUKRULqr9VMBw1F+j/rPRBlMxoN30nOi8t3IomCN

WrAQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1765280820; x=1765885620;

h=content-language:thread-index:mime-version:message-id:date:subject

:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=/JSuauFtZsmRfob7BVugFJLIoJlxq0+y0mJRg9l9znE=;

b=jY/ztTCJqrnky0IfUJaoHYb8aU7a2vkdothBcyz/FHTId42uOVbPWlc/txKg0NNxB3

+GHyz9jxTa7CJX43AY84PHdUFY+LZ+K+WTV58pflI77NxSKCMKu0ermU1aG6KX5PvB3Q

sFU7GLOsk+Ryp+mXY6ULMmb5XhrjklskLwRgSVr7B4oCebf3L11VGijQH993P2xcQvdC

bMlQoBHwAUqzKa6S071z6SeSqVtWOj0roJzRwlzxJgQEvLYNaqoET6kcFru+TcXB31rQ

5J1ExqsVn8G6uaOsOYFTzYQHgOgW/kYWGRZpdUo8X03vU2cUz1F7OPg4o1hlJntsIePB

rw/Q==

X-Gm-Message-State: AOJu0Yyn4zje8NNQhQ9lI/f6Bzj+d9FLCxB/L5Jw1bT/RREiyDs8SpFn

Yr+8TNRWcqal/T8WtvcvWPOuOeGAeqcBV8E0VXjv/jvttiBTWU8gWWP+iKKovzo6ETgLKis90rN

INCMxdtob

X-Gm-Gg: AY/fxX7EA0ajlUzJLdrJPfcwIGERtcuPuxBhuXM+ELcQh5t0AGYWPwfDxhwECppqTTS

2iW5XBDL0dUjHCl3kchVVbCJOiA3xobAXD4sJFZFx4e2mj8+LkNSIXvi7z55jffEiflAoQpX6s0

DnnbbLmbplcJNh8TaPWz31nJBbFlj4ef9RJoBGsBWwvrTaKUIt1wIcp7P6Geck3tYNotRg3AoNE

IGqpXIKLB52gpPl7NGOXpb1r5t/JaBpKqyrQXMSxSxCK0E0PfB8g/Afau6dATEkP7DqJWoaxo/G

6baniBLvqEp2n7W+UD2FvSBQCzsUPBWknUb8IF73+xP6b3mzDG/j2RPlginfjt3Z+SCqMQ81KGf

4OgOmDPC3ZZBh8yMXBHeUu82wzBHtl7hNE7o6XrFgsrQS+w+Pxhs3tNBuvAY01JHBbUBi/qwdzm

qEXV0vz9BisRqYdmhAMyCq8ZVsLm0mJxTMagsDRfk=

X-Google-Smtp-Source: AGHT+IFM9HIZMo6epE/URXoFHoIQh4l5TAFka0YWgQ/AzYbxqhsjxYP8sIsTHWFYtke0HlXExXwyPQ==

X-Received: by 2002:a17:903:3c44:b0:27e:f018:d2fb with SMTP id d9443c01a7336-29df557291amr109767735ad.6.1765280819070;

Tue, 09 Dec 2025 03:46:59 -0800 (PST)

Received: from DESKTOPMV2KPRA ([103.120.153.130])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-29dae99f01csm150149315ad.48.2025.12.09.03.46.57

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 09 Dec 2025 03:46:58 -0800 (PST)

From: "Juliette"

To:

Subject: Upgrading Your Business Website

Date: Tue, 9 Dec 2025 17:00:39 +0530

Message-ID: <1461d01dc6901$8665bb10$93313130$@thenitroinfotech.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_1461E_01DC692F.A0204100"

X-Mailer: Microsoft Outlook 16.0

Thread-Index: Adxo2hnl3pWT84CvQq6mTFgvfmmdtQ==

Content-Language: en-us

X-Spam_score: 10.9

X-Spam_score_int: 109

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear, We are pleased to present our proposal for web development

services for your website, covering the development of a dynamic website

and associated services.



Content analysis details: (10.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[103.120.153.130 listed in will-spam-for-food.eu.org]

[103.120.153.130 listed in will-spam-for-food.eu.org]

[103.120.153.130 listed in will-spam-for-food.eu.org]

[103.120.153.130 listed in will-spam-for-food.eu.org]

[103.120.153.130 listed in will-spam-for-food.eu.org]

[103.120.153.130 listed in will-spam-for-food.eu.org]

[103.120.153.130 listed in will-spam-for-food.eu.org]

[103.120.153.130 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

[209.85.214.195 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.195 listed in dnsbl.ahbl.org]

[209.85.214.195 listed in dnsbl.ahbl.org]

[209.85.214.195 listed in dnsbl.ahbl.org]

[209.85.214.195 listed in dnsbl.ahbl.org]

[103.120.153.130 listed in dnsbl.ahbl.org]

[103.120.153.130 listed in dnsbl.ahbl.org]

[103.120.153.130 listed in dnsbl.ahbl.org]

[103.120.153.130 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.195 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.195 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.195 listed in dnsbl.ahbl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: thenitroinfotech.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: thenitroinfotech.com]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.195 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.214.195 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.2 NEW_PRODUCTS No description available.

Subject: {SPAM?} Upgrading Your Business Website



This is a multipart message in MIME format.



------=_NextPart_000_1461E_01DC692F.A0204100

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit

Adtech spam

Check Spamcop