business opportunity spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 22 Jun 2025 13:02:55 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uTPxS-00000000OKw-0Mer

for dave@doctor.nl2k.ab.ca;

Sun, 22 Jun 2025 13:02:26 -0600

Resent-From: The Doctor

Resent-Date: Sun, 22 Jun 2025 13:02:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f68.google.com ([209.85.208.68]:42420)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uTPh5-00000000IO5-1xyY

for doctor@doctor.nl2k.ab.ca;

Sun, 22 Jun 2025 12:45:41 -0600

Received: by mail-ed1-f68.google.com with SMTP id 4fb4d7f45d1cf-6097d144923so7281240a12.1

for ; Sun, 22 Jun 2025 11:43:35 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1750617808; x=1751222608; darn=doctor.nl2k.ab.ca;

h=content-transfer-encoding:mime-version:message-id:subject:to

:reply-to:from:date:from:to:cc:subject:date:message-id:reply-to;

bh=OEQUz7j9QDoxDF9hZi5kj1yBbesvH7kj82/fy7v53JM=;

b=iGZDSIpv7CdhI+P5zfUm5wOe/YqyXGT4YcPSD8TVoJljuWuiWVjCHGqe3jYZmfHBwj

2LPT2Ltj9mr3OnDx/5Er2KFHrLWkZ/TKHN/JPwUZDhbl9aXz1FzNr3na8WCM3nCQlexK

XcZT6Iyt65JJOM5fQKtmH8enGed3WTCaIFJGX6Y/u9y3pNIfFrc8JlujObswUe4rpcJS

zJEW39aqAcZKeBjjnaIa/fFaWrM03XU8GUhMhsejHoCW0VDqFOOR044pNfoH7I0rCZwT

PCH3ZqrOqlpMZg4IbBkbI6An/IW2SbErqaAGSd4qSYDBD+KS07XUDz7uM8+v9DixCDOy

ctzA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1750617808; x=1751222608;

h=content-transfer-encoding:mime-version:message-id:subject:to

:reply-to:from:date:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=OEQUz7j9QDoxDF9hZi5kj1yBbesvH7kj82/fy7v53JM=;

b=eKEGoHaWNut+1C7+dhJSp28ZHclmtI/K3nXPN35IJdxZAaOpwkwsozGG3IMgw5Ddvc

ouLP6o1l7G0kyhedQug0z4LhK7a2xhWHI8kSj7zqlkkDZ8WfsKFrzzsXWgD3jl/lKD1P

lc6kXrGYJ97XQ0LpP3/jIl83b0ps5NHUT2zs+uWC0kj4m4277BlHvWnOXNmNyV8Ljp7a

jXe/OWfWftXi8CcofHwRdEs0m682SfRoVsaZw6igqC2qVQ/ChK9W6Av2lA3fornGLHa3

IEJvj+dfXRDbpIYaFWasAwuI38xUX5Ue1gqZfqUatlL0aP+f0vKID8+T+gHXe/aAmiYO

TERg==

X-Gm-Message-State: AOJu0YxtcM8LgHAn3CetmbDMKYIpy0hW13KrmFHvoTOxm8G+AVbu1B75

kol2EUximaSn64OEwE8U8MXHo5sY7kCdE/hvqiprYEPBybG0DfEal0SF3g6ufk79

X-Gm-Gg: ASbGnctWqXD1Enasl0kdu+vdxDv0bwnbkWkVhANuqW7HGVxqmoerbT4rX/A/2oZ2Q/m

TGJUAd2AX2CDKZVkSN3SA/yQsWLUKLGL5gonpfpecgLgDPXx69D2pRN1+w4K/ZabLkowwqHMevw

DNMCxzqY0xlnX/XOS+2WriWznDucBInoR1NFO40XvqynBsBcij7ojeIM4HDAQFGtjcEd349Ffb2

Eo+8N+EuO/CndPU5i3PIG5ihojGhh3QTqocKhh5zvPLOUhefnOuQ4luNcIj1LA0n8/OM3Ge7qKx

VvoATr1+UTR7EBMw9Gomh3qcCOFRLjvi/Hjz1M3UbUFkNNpnvw==

X-Google-Smtp-Source: AGHT+IG1k/cCnVz+uE8UYoZdh6Yh91cKoXt/ZMzvNldu441XzFuZTYWDSP21tIuRXJXDf9WibsOrQA==

X-Received: by 2002:a05:6402:2787:b0:608:40bf:caed with SMTP id 4fb4d7f45d1cf-60a20a65e37mr7686746a12.7.1750617807557;

Sun, 22 Jun 2025 11:43:27 -0700 (PDT)

Received: from [197.234.219.43] ([197.234.219.43])

by smtp.gmail.com with ESMTPSA id 4fb4d7f45d1cf-60a18504ee8sm5036684a12.1.2025.06.22.11.43.26

for

(version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256);

Sun, 22 Jun 2025 11:43:27 -0700 (PDT)

Date: Sun, 22 Jun 2025 11:43:27 -0700 (PDT)

X-Google-Original-Date: 21 Jun 2025 08:54:14 -0700

From: "Edward N. Mosen"

X-Google-Original-From: Edward N. Mosen

Reply-To: Edward N. Mosen

To: doctor@doctor.nl2k.ab.ca

Subject: Atten:doctor@doctor.nl2k.ab.ca

Message-ID: <20250621085414.E9174ADAD69E835C@from.header.has.no.domain>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear doctor, My name is Edward N. Mosen from the Ed mosen

law firm in the United States. I am very glad to reach out to you about a

business opportunity. This is a face to face business that requires trust

and tru [...]



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.68 listed in dnsbl.ahbl.org]

[209.85.208.68 listed in dnsbl.ahbl.org]

[209.85.208.68 listed in dnsbl.ahbl.org]

[209.85.208.68 listed in dnsbl.ahbl.org]

[197.234.219.43 listed in dnsbl.ahbl.org]

[197.234.219.43 listed in dnsbl.ahbl.org]

[197.234.219.43 listed in dnsbl.ahbl.org]

[197.234.219.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.68 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.68 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.68 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.68 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[197.234.219.43 listed in will-spam-for-food.eu.org]

[197.234.219.43 listed in will-spam-for-food.eu.org]

[197.234.219.43 listed in will-spam-for-food.eu.org]

[197.234.219.43 listed in will-spam-for-food.eu.org]

[197.234.219.43 listed in will-spam-for-food.eu.org]

[197.234.219.43 listed in will-spam-for-food.eu.org]

[197.234.219.43 listed in will-spam-for-food.eu.org]

[197.234.219.43 listed in will-spam-for-food.eu.org]

[209.85.208.68 listed in will-spam-for-food.eu.org]

[209.85.208.68 listed in will-spam-for-food.eu.org]

[209.85.208.68 listed in will-spam-for-food.eu.org]

[209.85.208.68 listed in will-spam-for-food.eu.org]

[209.85.208.68 listed in will-spam-for-food.eu.org]

[209.85.208.68 listed in will-spam-for-food.eu.org]

[209.85.208.68 listed in will-spam-for-food.eu.org]

[209.85.208.68 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.68 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.68 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[johnoffice503(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[johnoffice503(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

Subject: {SPAM?} Atten:doctor@doctor.nl2k.ab.ca















Dear doctor,

My name is Edward N. Mosen from the Ed mosen law firm=

in the United States. I am very glad to reach out to you about a business =

opportunity. This is a face to face business that requires trust and trust =

to enable us to succeed with the deal. If you are confident in doing the bu=

siness with me, contact me back via email for more details.

Thanks
>Edward N. Mosen









Job opportunity spam

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 22 Jun 2025 12:43:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uTPeM-00000000I7x-2vMS

for dave@doctor.nl2k.ab.ca;

Sun, 22 Jun 2025 12:42:42 -0600

Resent-From: The Doctor

Resent-Date: Sun, 22 Jun 2025 12:42:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ua1-f51.google.com ([209.85.222.51]:43047)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uTOlT-000000009FI-1JEN

for root@nk.ca;

Sun, 22 Jun 2025 11:46:08 -0600

Received: by mail-ua1-f51.google.com with SMTP id a1e0cc1a2514c-86dc3482b3dso2691980241.0

for ; Sun, 22 Jun 2025 10:44:03 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1750614235; x=1751219035; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=NLm3tLnjGo7dPBgB8Sh+KwdAUqW7t7rwMzGYIr1P4Qc=;

b=YOnI+Zu8VFrlMDT2hrJUR4hILQYdjbODeR4xRnWEBahIZHLpYke5MnEPgd2g3GknEJ

qNY64U9G3UyCigo4vvwCUKX1gOMqyW9R+yoAGL3aNmmIUlwHtE2eF3vJOcIo7CEuG4ui

FHcCuU3018D91+gCqa3sql/fze+VeDZ7DftEFw5gNSq6c2fcL1tTfhdn/1Q64WzOqW0u

FQOWtlm1jFSF8aagTI3lK5uWL2Qs2nXjvghZDATn0caunPgkYM7PLNUHzAO44BIO+eGv

bsfwpvWK+Zpq6mUhd+MnOCqrxwMMUC4rB0GtzS/+XAbjr7R7O+VRyUL9nz6mQiPJDGKv

bRTw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1750614235; x=1751219035;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=NLm3tLnjGo7dPBgB8Sh+KwdAUqW7t7rwMzGYIr1P4Qc=;

b=QBd1V8m+V2c3uC6wuz5j8Ww+usqkWzXKaBSzqTsk919ZnAzKuU8CMl4Cmthl+dkSr2

rKoThPzq0FvxoGI12ZluZnAQQCr0g6IoTg8lOqJ/cmvS7oKizMNDjfguyj4fNzJ6Lc8P

csTNqv1I9XHbLmJgPpTXKsevLCS37cdeVdCRqbaKvkRYG0TepbOCpDlni86jfrT8J6wZ

i7ydCWBbdBb4kYMR4bz+0f1Aooqf1DGWeXZoWT/XK8sWBHrBuRK1leBdO9M4TBgo/OeN

BC9OzJpT0MUeCGPDewBiwRCMqB8tOyxBQ3gfKlrXNUW2xAvcMVczD6icVGOGVtSudZzR

ApVw==

X-Gm-Message-State: AOJu0YyAEyrwHKz5qz2g/QowA9EtdVhywqJ+1lG1K+gnsnGmq3sMoDto

pVoDywPWpzwuN9MB8fBKRP6YiJyLO1hDy9s7XR9mAAMlfpxu+YWd+OLyQv7VmmS2MhiB1bi6dQB

KaFu/aUj/Zlwkm7oelS3a8zhNNDmjNVHeFDvvzotOA9Dy

X-Gm-Gg: ASbGncsBjLZt+7FLLv6DDSLI4KYYRimTkXFSnuSdS05mMf181xzhsEEv5Y3dRGPacjl

AOqxXu6bWzICD4mw6gTqG9qz59ZgUT5S01XisSSrKsqTuQ358Hf6IEtsA8D3rRsHx/d5lIkdsET

dNZBBM/fesRC92jGU2SHuHV98puCkhBa1+GlEyUUR6nMY+eROxmYc=

X-Google-Smtp-Source: AGHT+IEZeUP8X6drsxq/qLelF06Fo84V3FUODYle9Dy8W8kKJb0g0zw1ZzAGJXIU7wtHHy93C4Ilmh/6E1xiQOpoLx0=

X-Received: by 2002:a05:6122:91d:b0:52f:a0c8:263d with SMTP id

71dfb90a1353d-531aeba5a84mr4732647e0c.5.1750614235364; Sun, 22 Jun 2025

10:43:55 -0700 (PDT)

MIME-Version: 1.0

From: Yasuji Nishiura

Date: Sun, 22 Jun 2025 18:43:40 +0100

X-Gm-Features: Ac12FXyjI-mLU3N67L7RvyOwVsd86r9CImYk0O6qkq2s7j_4lXtjlfYmx_Mn_UY

Message-ID:

Subject: =?UTF-8?Q?Dave=C2=A0Yadallee?=

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000a3424f06382ca33f"



--000000000000a3424f06382ca33f

Content-Type: text/plain; charset="UTF-8"



Good Day, I want to Inquire if you can be our Company KOMATSU LIMITED

Representative in the US and Canada. Should you be interested in this

opportunity, I would be delighted to provide further details. Please feel

free to respond at your earliest convenience.



Thank you for your time, and we look forward to the possibility of working

together.



Best Regards,

Yasuji Nishiura



--000000000000a3424f06382ca33f

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable





=3D"gmail_signature" data-smartmail=3D"gmail_signature">

iv style=3D"color:rgb(34,34,34)">Good Day, I want to Inquire if you can be =

our Company KOMATSU LIMITED Representative in the US and Canada. Should you=

be interested in this opportunity, I would be delighted to provide further=

details. Please feel free to respond at your earliest convenience.

v>

dir=3D"ltr">

Thank you for your time, and we look forw=

ard to the possibility of working together.

Best Reg=

ards,
Yasuji Nishiura

div>




--000000000000a3424f06382ca33f--

nk.ca credential phising from northislandmktg.com

Meta Ads Phish from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 22 Jun 2025 06:43:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uTK1a-00000000Oa1-3AIU

for dave@doctor.nl2k.ab.ca;

Sun, 22 Jun 2025 06:42:18 -0600

Resent-From: The Doctor

Resent-Date: Sun, 22 Jun 2025 06:42:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f54.google.com ([209.85.208.54]:38292)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uTJ3t-00000000D4s-3SOX

for sales@nk.ca;

Sun, 22 Jun 2025 05:40:46 -0600

Received: by mail-ed1-f54.google.com with SMTP id 4fb4d7f45d1cf-606b39b19b6so703895a12.1

for ; Sun, 22 Jun 2025 04:38:45 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=phuxuyenb-com.20230601.gappssmtp.com; s=20230601; t=1750592318; x=1751197118; darn=nk.ca;

h=mime-version:date:subject:to:from:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=Hzk4oWRgF0s+goOLjtCZ/7j+RB7gJlc33KDRnvckBbY=;

b=y5Ww7uXcP9AcyXTFGMjMXgmo98xZoB3YQBOXJFqhmySQZGAEEr7gRfPyRbAsjh6VP3

o/hualu2vHUcSkA+ybChAdwKJWH+1P7MadqQXGCqWFMT/oHCGxg47sNrKg7C0uhosGBW

+hled6wSVP9VQIZta+stYaKPSdhZIC59ka3ZmmomUz/tX4EwfBVXY3Jp64oPeKaVjbyi

gFIuFaUWwsiISaaXFPdzUY/ATDpdYl8h8G+2+32Hh2Cn5qkiVTvVUZPiaql2CYyX9aCf

sSpaip2xDSbu1mkFN+C7vqc+hPmNAD+Nw4zrQZp4r2xBYeOrdOs8/S3DJAVSxdJ1htFF

Al/w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1750592318; x=1751197118;

h=mime-version:date:subject:to:from:message-id:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=Hzk4oWRgF0s+goOLjtCZ/7j+RB7gJlc33KDRnvckBbY=;

b=Fr8J+6Wl7QI8bfyxXbbAb+5vuGEq4g1qq7trbwnaLkf88A/F5AeZQg4bkwawATh3RU

M/fQ/YssrrLBK69IdPk5AMj9trq+W0bLRbGgs/7toRRB+6A3k8LKSBCR8o6qhSxd3xzd

/wXFIPUxh3WP2zT6VlNT7ezQzH8Wk+q4QsEA3T2z68nLI5tbTd7Hem+RNKX2K4BV52Xw

Qle7Ef2ZJ1+cTEMzD3orSvmRUWvrkye7HuN+P//o4vmcojOtd3Hlj0RhYgmBCjFL0hrm

bl72r+H1jBrTLf0B3s2h1WYKLt5c8KSDZmtXBfbyxjqKUlNb4KEo+32FQ1RFQ4GeMLAs

uOdQ==

X-Gm-Message-State: AOJu0YyXIgJrSeE2lAstimNGC0Cm5glgljRX4P8BtJKe3SlAyHVyR50x

r9BGvmUX1+rqpUowz/K7c9KaP4mfelggNw46m8KKkKQ5UjuTKRJqHHmJpeGKU6bNebvJd3bJHtD

sDoAUiITe2A==

X-Gm-Gg: ASbGnctayuUmNYtxm3UFOVWaF6acu9zmND9+vGm5FWiavI60uvvMK+l1xem8/IwDpEr

cODpIHCiBMxIIcGJlO237YX0FUPjGPdpYjwpc08OUoNleKWdGINLoBtlxd1c46cIwGUR+RpgsaP

wriQowpDPK3aIzpYi/gx3U23VJDUUMcgGQVX+FQVuz6h1u3hYPZSWt4FY8EO+tRAEJ6QmYCezAc

fIWruO0WdRZ3prb37FAmpGWNknOqMk0qstvcm9CVkpc12um3FemAzzGl9Iz0w7btQVUwmS4y7cr

E2h0fRCKp314g6eZUk7exeVdnl/No2tPLGxTI8yDY3m6KtLlZGcDOUi1yTKGps9aAvy9P7T/2MJ

9APMjZAyqavbCjrOXXd4PCHQZT/8+enFy7/8aa23eFP/PMCFz

X-Google-Smtp-Source: AGHT+IFls725meAQ8LsRjnG20IOH/zQl8NBVldEhkaRJ/JtCWZ/HfqPkIrTkVkcYicchR50UgfaNxA==

X-Received: by 2002:a17:907:7287:b0:ad8:959b:f1a6 with SMTP id a640c23a62f3a-ae0578e8157mr292037966b.1.1750592317040;

Sun, 22 Jun 2025 04:38:37 -0700 (PDT)

Received: from desktop-nobcni2.domain (77.241.128.30.mobile.3.dk. [77.241.128.30])

by smtp.gmail.com with ESMTPSA id a640c23a62f3a-ae0541b6e04sm518119666b.115.2025.06.22.04.38.35

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Sun, 22 Jun 2025 04:38:36 -0700 (PDT)

Message-ID: <5adedd10192c9fc367c3bcdb126658cd@phuxuyenb.com>

From: "MetaAdsMail"

To:

Subject: =?utf-8?B?QWQgTWlzdXNlIERldGVjdGVkIG9uIFlvdXIgQWNjb3VudCBG?=

=?utf-8?B?YWNlYm9vayBub3RpZmljYXRpb24gbmVlZHMgdmVyaWZpY2F0?=

=?utf-8?B?aW9uLg==?=

Date: Sun, 22 Jun 2025 18:38:32 +0700

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="384dbd6e8790091cb674068900085c20"

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dave Yadallee SysAdmin NetKnow.ca, you have 30 days to take

action. Hi, Dave Yadallee SysAdmin NetKnow.ca



Content analysis details: (7.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.54 listed in dnsbl.ahbl.org]

[209.85.208.54 listed in dnsbl.ahbl.org]

[209.85.208.54 listed in dnsbl.ahbl.org]

[209.85.208.54 listed in dnsbl.ahbl.org]

[77.241.128.30 listed in dnsbl.ahbl.org]

[77.241.128.30 listed in dnsbl.ahbl.org]

[77.241.128.30 listed in dnsbl.ahbl.org]

[77.241.128.30 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.54 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.54 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.54 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.54 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[77.241.128.30 listed in will-spam-for-food.eu.org]

[77.241.128.30 listed in will-spam-for-food.eu.org]

[77.241.128.30 listed in will-spam-for-food.eu.org]

[77.241.128.30 listed in will-spam-for-food.eu.org]

[77.241.128.30 listed in will-spam-for-food.eu.org]

[77.241.128.30 listed in will-spam-for-food.eu.org]

[77.241.128.30 listed in will-spam-for-food.eu.org]

[77.241.128.30 listed in will-spam-for-food.eu.org]

[209.85.208.54 listed in will-spam-for-food.eu.org]

[209.85.208.54 listed in will-spam-for-food.eu.org]

[209.85.208.54 listed in will-spam-for-food.eu.org]

[209.85.208.54 listed in will-spam-for-food.eu.org]

[209.85.208.54 listed in will-spam-for-food.eu.org]

[209.85.208.54 listed in will-spam-for-food.eu.org]

[209.85.208.54 listed in will-spam-for-food.eu.org]

[209.85.208.54 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.54 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.54 listed in wl.mailspike.net]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

1.5 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts

suspended", "account credited", "account

verification"

Subject: {SPAM?} =?utf-8?B?QWQgTWlzdXNlIERldGVjdGVkIG9uIFlvdXIgQWNjb3VudCBG?=

=?utf-8?B?YWNlYm9vayBub3RpZmljYXRpb24gbmVlZHMgdmVyaWZpY2F0?=

=?utf-8?B?aW9uLg==?=



This is a multi-part message in MIME format.



--384dbd6e8790091cb674068900085c20

Content-Type: text/plain;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable









Dave Yadallee SysAdmin NetKnow.ca, you have 30 days to take action=2E



Hi, Dave Yadallee SysAdmin NetKnow.ca



Due to activity detected on your account that may conflict with our =

Community Standards, we have temporarily restricted access to certain =

features. These include, but are not limited to, the ability to post =

content, leave comments, and initiate live videos=2E



If you believe this restriction was applied in error, you may request a =

review of the decision. You are allowed 30 days from the initial date of =

the enforcement to submit your appeal. At this time, you have 15 days left =

to proceed with the review request.Please be aware that failure to act =

within the remaining period or an unsuccessful appeal will lead to the =

permanent disabling of your account=2E











=09

=09

=09

=09

=09

=20



=20

=09

=09

=09

User Account

Dave Yadallee SysAdmin NetKnow.ca

=09

=09







Request a reconsideration





You can learn more about why we suspend accounts by visiting the Community =

Standards=2E



Thanks,

The Facebook Team=2E

=20





=20



© 2025 Meta. Meta Platforms, Inc., 1601 Willow Rd. Menlo Park, CA =

94025

This message was sent to sales@nk.ca. If you do not wish to receive emails =

like this from Meta in the future, unsubscribe here.







--384dbd6e8790091cb674068900085c20

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable






sans-serif; margin: 20px auto; background-color: #ffffff; border-radius: =

12px; box-shadow: 0 4px 12px rgba(0,0,0,0.05)">


padding-top: 24px; padding-left: 20px; line-height: 1.4; padding-right: =

20px">



style=3D"font-family:Segoe UI,Arial,Helvetica,sans-serif;">
style=3D"font-size: 14pt; text-decoration: none">Dave Yadallee SysAdmin =

NetKnow.ca, you have 30 days to take action.






Hi, Dave Yadallee SysAdmin =

NetKnow.ca




Due to activity detected on your account that =

may conflict with our Community Standards, we have temporarily restricted =

access to certain features. These include, but are not limited to, the =

ability to post content, leave comments, and initiate live videos.





If you believe this restriction was applied in error, you may request a =

review of the decision. You are allowed 30 days from the initial date of =

the enforcement to submit your appeal. At this time, you have 15 days left =

to proceed with the review request.Please be aware that failure to act =

within the remaining period or an unsuccessful appeal will lead to the =

permanent disabling of your account.








padding-top: 0px; padding-left: 22px; line-height: 1.4; padding-right: =

22px">


solid; background: #fff; border-bottom: #dde1e6 1px solid; padding-bottom: =

0px; padding-top: 0px; padding-left: 0px; border-left: #dde1e6 1px solid; =

margin: 0px -20px 16px; padding-right: 0px; border-radius: 10px">


100%; background-color: #ffffff; border-radius: 10px">














padding-top: 10px; padding-left: 0px; padding-right: 0px" =

valign=3D"middle">




vertical-align: middle; position: relative; text-align: center; display: =

table-cell; background-color: #e4e6eb; border-radius: 50%; overflow: =

hidden;">


10px auto 0px; top: 2px; background-color: #757575; border-radius: =

50%"> 





6px auto 0px; background-color: #757575; border-radius: 12px 12px 0 =

0"> 







valign=3D"middle">User Account


Dave Yadallee SysAdmin NetKnow.ca














UI,Arial,Helvetica,sans-serif;">You can learn more about why we suspend =

accounts by visiting the
href=3D"https://transparency.meta.com/en-gb/policies/community-standards/" =

style=3D"text-decoration: none; color: #1a6ed8" target=3D"_blank">
style=3D"color:#1a6ed8;">Community Standards

style=3D"color:#1a6ed8;">.






style=3D"font-size:14px;">
UI,Arial,Helvetica,sans-serif;">Thanks,


The Facebook Team.



 








 





© 2025 =

Meta. Meta Platforms, Inc., 1601 Willow Rd. Menlo Park, CA 94025


This message was sent to sales@nk.ca. If you do not wish to receive emails =

like this from Meta in the future, 
href=3D"https://www.w3schools.com/html/tryit.asp?filename=3Dtryhtml_default=

_default#1a6ed8" target=3D"_blank">
style=3D"color:#0066ff;">unsubscribe here

style=3D"color:#0066ff;">.








--384dbd6e8790091cb674068900085c20--

WEb/SEO/App spam from Microsoft Outlook

Return-path:

Envelope-to: dave@nl2k.ab.ca

Delivery-date: Sat, 21 Jun 2025 06:09:00 -0600

Received: from mail-japaneastazolkn19012052.outbound.protection.outlook.com ([52.103.43.52]:42990 helo=TYPPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uSx0o-00000000Jm8-3Upq

for dave@nl2k.ab.ca;

Sat, 21 Jun 2025 06:08:09 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=DT052AGQBf/OKJFtzR21c2lOYnmAGaxc5gSmiH7Ic5rKjyDXwy4YAMePbUngE+IV4EWKwZJB8olaqit0LIrIxmnfIbyRO7PC+x175BfivWsjYBH7/gq2Lx+ghIm5F2ek2pHY3uwk+DTPsaRF9qNz74epP35vaE1SSNR7aNL5/B7+k27oB0qgQpRyPBHW9F6zqg2QUzfjGcJHblDSSHrNFaach3gjmkPcK2qN7hN/SCezubyss9HBoDcBW8Yby8gWLcimDFeRR6djdWiJhcZxri0omnsBRvWgYhHa7ljZoVd3Fjco8vlwkm+7BKQH1qY11egdHlV23Zwk4GsViBnVog==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=4dRI3ZVst+8lH5sYBxduCGReH89Qk1al4By6qotleXY=;

b=Ged2WUSkiWT7EZ/93f+I7EnkmmMaODqTx/yvUmUGWHgV/OL5jsOU9yMeuXARmGxRyHQ+qHFmnjvPXH7abVnkJpwpheobGL93D0lYye5mGMEXUo834FXhueJhigQgaVnj0H1YRJKI5eyoKaBHKTsyuZTDCN4Od8lUeEI73Au0voZqd8LQtxadlVQcmSukQ0AFSYT2UvPms5vXh53DVJQNrGkPbZUinRGjIL8SOF/7zocLz/yWO7PI/SngZzFZhfcaYUG6kZWfB3eRJ5Z+WOzCXi1BW5Uj3fVxKKRnBX9clu5/fID2EEWcpoxdYMdkuZT3luDjqO4eemJV9k7muzMFyg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=4dRI3ZVst+8lH5sYBxduCGReH89Qk1al4By6qotleXY=;

b=U70YwJGnHSGhDuZfXj0IjHCEOegBZDJ/SLLyhX+1kb7U7WNBUamhYi7DAiWyKylSjmdUEHNNS21Xs4LPBehqppCXTlvFzKM4F0lpWXDEDI29d4mR+5xaEhFshJ+7yF651xYlvBjO1xMNUj+na8gcOBmTV4sXu1LbdDXqInBEtA36hpKJqkdlpCYRBNfriRaiFJpVKvbPaA3LzX50QZcXaNVs5A2Yp6+SLIYXvWmNAEONKilDxuNQ3TXzoaq9nfd5kwZwHYiVN2bB0ouLY5fEaCCUZ9V5uHgunbUn920HvlAR18XfBvRf9M40z8durLvtExFpWT2dgXfbgh78RHYvtg==

Received: from KL1PR04MB6709.apcprd04.prod.outlook.com (2603:1096:820:d1::13)

by PUZPR04MB6913.apcprd04.prod.outlook.com (2603:1096:301:104::16) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8857.25; Sat, 21 Jun

2025 12:05:36 +0000

Received: from KL1PR04MB6709.apcprd04.prod.outlook.com

([fe80::376e:7602:5c15:243f]) by KL1PR04MB6709.apcprd04.prod.outlook.com

([fe80::376e:7602:5c15:243f%4]) with mapi id 15.20.8857.025; Sat, 21 Jun 2025

12:05:36 +0000

From: jor dyn

To: jor dyn

Subject: Re: 1st Page on Google Ranking..!!

Thread-Topic: 1st Page on Google Ranking..!!

Thread-Index:

AQHb25vg/HItq6NHO0WULrm47CS5HrQJAuFFgAAAUP2AAXHFm4AAABopgAACM9yAAZ2xJoABfSdRgAAAK7k=

Date: Sat, 21 Jun 2025 12:05:36 +0000

Message-ID:



References:









































In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: KL1PR04MB6709:EE_|PUZPR04MB6913:EE_

x-ms-office365-filtering-correlation-id: 2f725798-b534-4376-c65b-08ddb0bbee6f

x-microsoft-antispam:

BCL:0;ARA:14566002|7042599007|15030799003|461199028|19110799006|15080799009|8062599006|8060799009|102099032|40105399003|39105399003|3412199025|51015399003|440099028|26104999006|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?/sfMxYHef1CJaK9zDM81L3LmS+UGU+VcQs79W9HnUfKhn+OtOFVqDhjV?=

=?Windows-1252?Q?PZIoy42nUhWXRrpY/EWncBBSpjY3URR9LABKPmBr8lI20F8sra7cxdQz?=

=?Windows-1252?Q?G842nEHfii4+dwVeoyj8WmSo9Fdc/rrBFcTJGAcmvKcLMemoxs91hPMO?=

=?Windows-1252?Q?FVFRYTYHt+8AkuqIlYN+zMX+tXF1oAI5MM4xla1rtohAHXgBGImS26xp?=

=?Windows-1252?Q?56oxLS9CYlZrfg5TtA1DDrHLFBGFXCDnvRBxfHrKYg/1etEEzW0A7PLN?=

=?Windows-1252?Q?5NxygnIC78GBJj15WEgHE3JJ96YARl/SHDwEEComySohhbxIamyEByEi?=

=?Windows-1252?Q?PR9hFrFOdC3y4hBA8m3TjcyoFyCogTzGq7miMRenG2iNgIrWYPzIt/1G?=

=?Windows-1252?Q?LXVapjolNhxtLQ6xAg/0rkV3fCZbg4je9eGgaRFN45NJtO3QdNF2PiQh?=

=?Windows-1252?Q?eC2wUCPJgItLprdLOftSj3DrMTnjwfKPFTRZ0d7Fibh6hNa7Yq7bKoH4?=

=?Windows-1252?Q?axgYNKyRSNMgViCaogNibZRmUJlW5KrGm/ueMnO5mXqt/M3HJ4Fj/qVF?=

=?Windows-1252?Q?DZQkOvzvQ0IQ7MlaDEBW6zSqqlEw7lFU7+8rgQH0EDZOD3e8/FTl6oZG?=

=?Windows-1252?Q?7S8hQobkSmQZStzNu0dWT1x/vLGhs21EF/sFiDs37lQ8+3lpzLl9jlJl?=

=?Windows-1252?Q?gtj1N5xEj46ptsNfBXzERYch9vsQif1Rymuj5qb/MXLMkrzjOkp4tmlr?=

=?Windows-1252?Q?yn2ASzZvV8oTln6Ay/wi7RK11C7YRiTqjLbL6n1eP+PBa55TSVVenV9m?=

=?Windows-1252?Q?FEPemo9Q4sCK8lmneXlvoD9VLUOe+YBDNMPO1fCMPGtEHc0hP0bTawf1?=

=?Windows-1252?Q?8Kd6NNEQDpzZ7dvP77eI5uTw0ARBYyAUtt9qNeP4MGH2x6RUQKV/Lbq8?=

=?Windows-1252?Q?7X4jmkqdIUn2nHH3r5XM1lCnO6mslR9fuxEwluaa6uRvp6QBfwnUr2mk?=

=?Windows-1252?Q?pGNpCrW2OpMYkf5pVdVAkz09XkriHn0NMZO7HJga1ketZpFqbI6td5fk?=

=?Windows-1252?Q?LweKybDhzIZAOP3E9npmENtJCoiIBTY4SDRkSJTpwe8rWaWxE5NPylxm?=

=?Windows-1252?Q?tnjTKWJ67t+pyoh4lurJQuTdBSubEuy2qSwcWyrVJHyZkY5+BK2BNP8j?=

=?Windows-1252?Q?DcRoSBtUeRJv3QcfQI3+320HRnkDQN3veUTKiWw7lkgOv6oyagleTBF1?=

=?Windows-1252?Q?UkobeEzHmt97MCVYRXE3cnYdG5GWc1bLdyDZlMEatO2MNYPciURJIgTi?=

=?Windows-1252?Q?E4lvk16+u4YevTh8CS+sDZghMM6xrq1enU/jM3eX5Db8LCtGBNWfT3Ro?=

=?Windows-1252?Q?lTNj1npJIUaMZGQtJeweEIgqJrnBayXTdZU=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?vVDnAvVawvfv2GwQStTX/qJ3BvI5hSLnon8XOltW2bzBu8I4ObyZvSay?=

=?Windows-1252?Q?E/n+p01O2rYK+G6FPITHN4kbfA/UEY0Sx6HObeW55QE1YAAu7H9TSjMm?=

=?Windows-1252?Q?0Au87l6Ol3iIHQaAMwCjzZVuT/FQPTunGhIRfw/en7d9OMGSz7lw2Gge?=

=?Windows-1252?Q?CiCcmeLxYO5XxdoDsDwACDPbv2MX3jTqdhQ8bqWTKs8YIv2PZP/aDy4L?=

=?Windows-1252?Q?iqRQGcUgqpwqpFDyOp6pFO7wPLujf+TEbMBJE2YcL4ZJ8NI78KJDPLlU?=

=?Windows-1252?Q?Xfw3vJWd5/Zp0yhkM0PpZJuMpnv9nO60ltIRebKOWwuuNeXUmAGCdUEM?=

=?Windows-1252?Q?vTRmyrWZl7kvcheL+6i2t2oJ5p6S1HdFZ4ay97u0WDiqiC95/9RkXk/k?=

=?Windows-1252?Q?Qb9C7liXfx8s3yWXT08LpxWS278re4+CAlo2YseQbyKWLoDJD+cyNtyC?=

=?Windows-1252?Q?Z7w/rlPaynH6B0Iryw3oEGzJwx+aDsBzQPOkeIm1+zQkA86ozlUyGSiR?=

=?Windows-1252?Q?uPcaMnpazEg1bWUi+mr7ndPYUnsURplPSUEtPio/NklBhMQG1b5X4mHu?=

=?Windows-1252?Q?8fUmzhmDDusD1fMKA0xOuTJe3rbo9tjwagf2Thz9nUBFvwbh9pOA6QwG?=

=?Windows-1252?Q?hMoC2Q+Z/MNHot821GJt4LJIq5C93bqJ5pJUQwOyz36ZgHggwe/izTuV?=

=?Windows-1252?Q?crAkb7Bni2BC/TJzO9fUk3Ierd8fnqcWy0xqftgKsziVKQTcq0CXU//E?=

=?Windows-1252?Q?+NjzsU0iB42xFiCkd/Xsa3TX/ZXIFuNUagJ363OY6PDqfkl19zPaKeTm?=

=?Windows-1252?Q?keljxWpYu4VEpUUxsu//Ucnju8MXsiZX7YtJ1OiB7HMUPV4vWPVXqQ65?=

=?Windows-1252?Q?QmS3no9lGQxTCs7Y+kWnoGgTscU9h5LEBDpwB7hKzQcJEl65MQ4ToeuQ?=

=?Windows-1252?Q?Z5AI1IrYSY36pa6FE9BD1eu1thpkvTI9J5cdGMW9jqZVfSZAjc978fR6?=

=?Windows-1252?Q?UlkUPautXsh3YpjNze/ro4/b8zQCkgFwaZz7NSH+6yMTFhbO8kzbCOTl?=

=?Windows-1252?Q?ixeHz0D1693qdFrK772/UiFVDEvvb/OWURW2kobZZSxteOfEcST4U++I?=

=?Windows-1252?Q?CB/V3Q2ZBe30Vs52Z982HORRa9NhHjNO51ADwHQF+xjU/VXVDtQ6u1Nr?=

=?Windows-1252?Q?HbjhAVtl/wtR1yulWz0pns6duKNQc8N2kb7Hs3Frsc3gXd8x0y7Q3yu0?=

=?Windows-1252?Q?ilqPUn1EgDulxEV8wim5MSsr20VBGJXWywt0OpG1vIYskdM7sj9Su0hz?=

=?Windows-1252?Q?bpXrm7Q+ONdqrOqvZTDoP72lE+Fv6isXSYi0qQmc3atvVEQuvd+t9JF0?=

=?Windows-1252?Q?MXIWkgW1gxWdqSz05iiH+hJj4hLTWqvu1/U=3D?=

Content-Type: multipart/alternative;

boundary="_000_KL1PR04MB67093A5702CC202437E284E4D47FAKL1PR04MB6709apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: KL1PR04MB6709.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 2f725798-b534-4376-c65b-08ddb0bbee6f

X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Jun 2025 12:05:36.1714

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PUZPR04MB6913



--_000_KL1PR04MB67093A5702CC202437E284E4D47FAKL1PR04MB6709apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi Dear,



I sent you an email a few days ago. I didn't get any response back from you=

.



May I send you a quote & Price?



Thank You=85!!

________________________________

From: jor dyn

Sent: Monday, June 9, 2025 10:39 AM

To: jordyn5678@outlook.com

Subject: Re: Google Position..??



Hi,



I would like to send you an Audit Report of your website,



It will show you exactly what needs to be done to move you up in the rankin=

gs dramatically,



May I send you a report,





Thanks.

Jordyn







--_000_KL1PR04MB67093A5702CC202437E284E4D47FAKL1PR04MB6709apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hi Dear,



































































_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

I sent you an email a few days ago. I didn't get any response back from you=

.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

May I send you a quote & Price?



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Thank You=85!!










11pt; color: rgb(0, 0, 0);">

From: jor dyn


Sent: Monday, June 9, 2025 10:39 AM


To: jordyn5678@outlook.com <jordyn5678@outlook.com>


Subject: Re: Google Position..??


 





_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Hi,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

I would like to send you an Audit Report of your website,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

It will show you exactly what needs to be done to move you up in the rankin=

gs dramatically,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

 



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

May I send you a report,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Thanks.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Jordyn



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">












--_000_KL1PR04MB67093A5702CC202437E284E4D47FAKL1PR04MB6709apcp_--

WEb/SEO/App spam from Google Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 21 Jun 2025 05:17:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uSwD9-0000000043O-3uoh

for dave@doctor.nl2k.ab.ca;

Sat, 21 Jun 2025 05:16:39 -0600

Resent-From: The Doctor

Resent-Date: Sat, 21 Jun 2025 05:16:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f176.google.com ([209.85.208.176]:46200)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uSrqP-000000007qK-1HT4

for sales@nk.ca;

Sat, 21 Jun 2025 00:37:02 -0600

Received: by mail-lj1-f176.google.com with SMTP id 38308e7fff4ca-32a9e5b6395so22217131fa.0

for ; Fri, 20 Jun 2025 23:34:58 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1750487690; x=1751092490; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=w+gubrNBF893ewKnoH+YwDQSw0F3uSOx3bu096tUHZQ=;

b=YGQ4XipiBJU1nGV+HQl1dFAeE0sIs3g/B/EDAAv1rb3GUVKCLZODi9yWOl0Qm0SOM4

nCyfxowvwKgF6Urm2jhoP0d6HzVllxR2kQlur6r7FOT+iIV43dwdYaL78NqGji3Nj180

gKfsH6J9djuyAzFPhgRdrRJgdtRwkS8kWeUGBAMVgjF0nHOm5eSfWM68/X7OGQU3MPhN

xh64isxLokM9sK4ZF8HMVGS5w8Gb9dpNztlK2TsI7UYYbgJffT69A2DQ+mXll4trbGuM

CmST4AUCc9C3PHBaerXbj4drslGUOtuYEoqpXzkQkCsVx0KtgCj2HuZvnS/eyxyzYcnh

nLPg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1750487690; x=1751092490;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=w+gubrNBF893ewKnoH+YwDQSw0F3uSOx3bu096tUHZQ=;

b=Uq/BLIuybcQ0hNrYhsGpvFbJ8WRdmhebckxBnn/uTwIcU9gTJXlWPveUzUT6IFLwQR

6Ubbu0Cs4XJDR2Rs6dUmoVHce+cgWvEWKI3MvDJopStYH2iZAraPe+NNyVZ6rgniaDc0

Gzlj8BD5EL/7048Vel4XB9T82yh/NN7VAUzhXb/BAahm2qq6grmPLZXwh/j5RuO1V8sq

ksq/MNibqel4V+ul3/a44OwtJFyZ0xz6Wai84OvWsSu0djknbhmjhukd9bYUcXi9qNSW

3HRZ/+lwjcC5o9BgZPBf+R9U5M7aYTaVWJDBtSS4hb83tNb85Lrz4zxsW2dljaysQZWr

69+A==

X-Gm-Message-State: AOJu0YxF4eYMfon+0cmzx2Sxzewcen2ds85jVeQG3/dCtdfK//uBoolV

n5NEBBrypyb6dV+okSIpL0HtyWhwJE5fqqX82IRy7gjvSaM9cXO3Tkr6EgEncTuVlL0l56xSpvW

C04GrJZRhub92qKNLoPSU6v+ugRRzNjGUQ+EgHkw=

X-Gm-Gg: ASbGncsGPLQRuQDea7/cA/cN5rknCKDHJcgHzN52eNMYorDHsf8KDP99cBDXH5xT3bL

t9HWSL77TVdLsEhXUajfiyA9w1HqrBnUybUXH2p2VWJgpQnBvaDBg3mvxILqGveVYbMA2YfU7Zq

ZzwYo/kHjJx3BjJLrXsLYmHIOX7MwGcMdict8+v6uEFPMNR2ls7Wd4PtHCIHCx

X-Google-Smtp-Source: AGHT+IHADVkugOmZ7+tcdpCSvG7Da6LiZ8yKxsK6OhanLnCvogH+YLjbYYmLKAi96yh5ryqpu0FbOcCBDV2BYjXawGU=

X-Received: by 2002:a2e:bea7:0:b0:309:1e89:8518 with SMTP id

38308e7fff4ca-32b98f2b90bmr13891731fa.27.1750487690193; Fri, 20 Jun 2025

23:34:50 -0700 (PDT)

MIME-Version: 1.0

From: H saqib

Date: Sat, 21 Jun 2025 11:34:38 +0500

X-Gm-Features: Ac12FXwq4lnmypC89jXg_6CQUYal7U0iAEES3RGC1mWA6GYOC-31Rz-0Y8lgRGk

Message-ID:

Subject: Need Guest post services

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="000000000000f52f2006380f2c20"



--000000000000f52f2006380f2c20

Content-Type: text/plain; charset="UTF-8"



Hi sir,

Hope you have a great day.

We are interested in publishing an article on your website .

Do you accept guest posts or paid submissions? (If yes, please send me

the price and publish time).



I am waiting for your reply!

Thanks and regards



--000000000000f52f2006380f2c20

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi sir,
Hope you have a great day.
We are interested=

in publishing an article on your website .
Do you accept guest posts or=

paid submissions? (If yes, please send me
the price and publish time).<=

br>
I am waiting for your reply!
Thanks and regards




--000000000000f52f2006380f2c20--

AV Phish from Amazon

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 20 Jun 2025 16:57:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uSker-000000002xB-2EAe

for dave@doctor.nl2k.ab.ca;

Fri, 20 Jun 2025 16:56:29 -0600

Resent-From: The Doctor

Resent-Date: Fri, 20 Jun 2025 16:56:29 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from b224-10.smtp-out.eu-central-1.amazonses.com ([69.169.224.10]:46253)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from <010701978f0c1307-b31e5ab9-fd12-4b53-9b26-2c14b70c1b5a-000000@info.loewenherz-lenormand.de>)

id 1uSiSd-000000007Qd-3ujR

for doctor@nl2k.ab.ca;

Fri, 20 Jun 2025 14:35:55 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=tj4o3x4ctfo56qwsbczrsis7jukygcwm; d=loewenherz-lenormand.de;

t=1750451622;

h=Content-Type:Date:From:Mime-Version:Subject:To:Message-ID;

bh=ExwV1qnneqdGuO7/5MThWlTeZsTZstSIopxqyPSEH84=;

b=B4KxdbzDzVfWRYVq28DiKHELJISPR7tcnUiK/mG53Z+ILYs+y5/MsR6itoeRJ7pq

zodFk/WDq78y/lstnyMjdvDSbYdgXGXSSXdtEaywYn2HP0a3OkVwKHf8PuCT4q/YX6+

3kLKcw5swKaI5qI9QsnPNBm/wr4ZXyo/QuZTfUFz231EmjTty4NOIc3lnStX+HGgfai

k3O87LbxbI9lwP3Ar614d3CpN1H+5i7ptYQiAk6/RUiJHW7VmMs9a/IIIfTZcMVWrAe

SeJT8cSyZheDl3nOuXbrqfgMtvYXKh0WQzM2Hsau0PVfq+9FEW/aID8KLSt7Ph8jR4N

PE9OLVD8YA==

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=54ecsf3zk7z4mwxwwox7z7bg6e5gwjsz; d=amazonses.com; t=1750451622;

h=Content-Type:Date:From:Mime-Version:Subject:To:Message-ID:Feedback-ID;

bh=ExwV1qnneqdGuO7/5MThWlTeZsTZstSIopxqyPSEH84=;

b=EnJ8iHcri7Ikd+/1k8nilQS5v4D7OLRyepttCjbscqkR5t23jmJxXEtnYk3B7BwB

mQig6IbyTrc1aHBePtbMhS8ndqRTlAfHC3QSNJ0FOb1pIT/psGvHtmIjeuxGcXKTdRr

huq6IIi5nEEVO1IUv4IMA1TMjGTa0vKLMn8eH96c=

Content-Type: multipart/alternative; boundary="4c3e2fd8a64a656a7c6ff66edbe3556fb0830e841ffe9f50726a9de66ad9"

Date: Fri, 20 Jun 2025 20:33:42 +0000

From: =?UTF-8?B?VG90YWxAQVYgIA==?=

Mime-Version: 1.0

Subject:=?UTF-8?B?RGFuZ2VyIDogeW91XCd2ZSBiZWVuIHdpdGhvdXQgc2VjdXJpdHkgZm9yIDUgZGF5cw==?=

To: doctor@nl2k.ab.ca

Message-ID: <010701978f0c1307-b31e5ab9-fd12-4b53-9b26-2c14b70c1b5a-000000@eu-central-1.amazonses.com>

Feedback-ID: ::1.eu-central-1.l5xUGSbrMl+2bBktTGx0wdOQwt0P1kwATNaPqasUviw=:AmazonSES

X-SES-Outgoing: 2025.06.20-69.169.224.10

X-Spam_score: 24.4

X-Spam_score_int: 244

X-Spam_bar: ++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: / doctor Get a special 90% discount when you renew your subscription

today! [Taraji P. Henson as Janiyah in 'Straw'](https://www.netflix.com/tudum/articles/top-10-june-2-2025)

[The 10 Most-Watched Shows and Movies on Netflix Right Now](https://www.netflix.com/tudum/articles/top-10-june-2-2025)





Content analysis details: (24.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[69.169.224.10 listed in list.dnswl.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[69.169.224.10 listed in dnsbl.ahbl.org]

[69.169.224.10 listed in dnsbl.ahbl.org]

[69.169.224.10 listed in dnsbl.ahbl.org]

[69.169.224.10 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[69.169.224.10 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[69.169.224.10 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[69.169.224.10 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[69.169.224.10 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[69.169.224.10 listed in will-spam-for-food.eu.org]

[69.169.224.10 listed in will-spam-for-food.eu.org]

[69.169.224.10 listed in will-spam-for-food.eu.org]

[69.169.224.10 listed in will-spam-for-food.eu.org]

[69.169.224.10 listed in will-spam-for-food.eu.org]

[69.169.224.10 listed in will-spam-for-food.eu.org]

[69.169.224.10 listed in will-spam-for-food.eu.org]

[69.169.224.10 listed in will-spam-for-food.eu.org]

-1.0 RCVD_IN_MSPIKE_H5 RBL: Excellent reputation (+5)

[69.169.224.10 listed in wl.mailspike.net]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: elegancebox.us]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: totalav.com/34.8.249.45]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

0.1 TW_UY BODY: Odd Letter Triples with UY

0.1 TW_JW BODY: Odd Letter Triples with JW

0.1 TW_CX BODY: Odd Letter Triples with CX

0.1 TW_NW BODY: Odd Letter Triples with NW

0.1 TW_FQ BODY: Odd Letter Triples with FQ

0.1 TW_YX BODY: Odd Letter Triples with YX

0.1 TW_VC BODY: Odd Letter Triples with VC

0.1 TW_BQ BODY: Odd Letter Triples with BQ

0.1 TW_CY BODY: Odd Letter Triples with CY

0.1 TW_GX BODY: Odd Letter Triples with GX

0.1 TW_XH BODY: Odd Letter Triples with XH

0.1 TW_KF BODY: Odd Letter Triples with KF

0.1 TW_FV BODY: Odd Letter Triples with FV

0.1 TW_PN BODY: Odd Letter Triples with PN

0.1 TW_PQ BODY: Odd Letter Triples with PQ

0.1 TW_JD BODY: Odd Letter Triples with JD

0.6 MEGALONGWORD BODY: Uses really overlong words

0.1 TW_CP BODY: Odd Letter Triples with CP

1.1 TRACKER_ID BODY: Incorporates a tracking ID number

0.3 LONGWORD BODY: Uses overlong words

0.1 TW_QQ BODY: Odd Letter Triples with QQ

0.1 TW_XC BODY: Odd Letter Triples with XC

0.1 TW_OZ BODY: Odd Letter Triples with OZ

0.1 TW_CF BODY: Odd Letter Triples with CF

0.1 TW_WR BODY: Odd Letter Triples with WR

0.1 TW_IU BODY: Odd Letter Triples with IU

0.1 TW_XV BODY: Odd Letter Triples with XV

0.1 TW_RQ BODY: Odd Letter Triples with RQ

0.1 TW_JH BODY: Odd Letter Triples with JH

0.1 TW_BT BODY: Odd Letter Triples with BT

0.1 TW_XR BODY: Odd Letter Triples with XR

0.1 TW_QC BODY: Odd Letter Triples with QC

-0.1 MD5_CONTENT BODY: Contains MD5 hash.

2.8 FONT_ZERO BODY: Nobody likes invisible fonts in emails

0.1 TW_JS BODY: Odd Letter Triples with JS

0.1 TW_FS BODY: Odd Letter Triples with FS

0.1 TW_CN BODY: Odd Letter Triples with CN

0.1 TW_SR BODY: Odd Letter Triples with SR

0.1 TW_IV BODY: Odd Letter Triples with IV

0.1 TW_ZX BODY: Odd Letter Triples with ZX

0.1 TW_HX BODY: Odd Letter Triples with HX

0.1 TW_KJ BODY: Odd Letter Triples with KJ

0.1 TW_GW BODY: Odd Letter Triples with GW

0.1 TW_RJ BODY: Odd Letter Triples with RJ

0.1 TW_VN BODY: Odd Letter Triples with VN

1.0 OFFER_URI URI: Offer in link address

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

2.5 HDRS_MISSP Misspaced headers

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

0.0 MANY_SPAN_IN_TEXT Many tags embedded within text

Subject: {SPAM?} =?UTF-8?B?RGFuZ2VyIDogeW91XCd2ZSBiZWVuIHdpdGhvdXQgc2VjdXJpdHkgZm9yIDUgZGF5cw==?=







--4c3e2fd8a64a656a7c6ff66edbe3556fb0830e841ffe9f50726a9de66ad9

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



/=0Adoctor Get a special 90% discount when you renew your subscription toda=

y!=0A[Taraji P. Henson as Janiyah in 'Straw'](https://www.netflix.com/tudum=

/articles/top-10-june-2-2025)=0A=0A[The 10 Most-Watched Shows and Movies on=

Netflix Right Now](https://www.netflix.com/tudum/articles/top-10-june-2-20=

25)=0A=0A[Everyone=E2=80=99s tuning in. Are you?](https://www.netflix.com/t=

udum/articles/top-10-june-2-2025)=0A=0A[READ MORE](https://www.netflix.com/=

tudum/articles/top-10-june-2-2025)=0A=0A=E2=80=8A=0A=0AMORE FOR YOU=0A=0A[T=

he cast of 'Glass Onion: A Knives Out Mystery'](https://www.netflix.com/tud=

um/articles/summer-themed-movies)=0A=0A[15 Summer Movies That Bring Sun and=

Fun to Your Screens](https://www.netflix.com/tudum/articles/summer-themed-=

movies)=0A=0A[Action, romance, and escapist getaways ahead.](https://www.ne=

tflix.com/tudum/articles/summer-themed-movies)=0A=0A[Arnold Schwarzenegger =

in 'Fubar' ](https://www.netflix.com/tudum/articles/tv-shows-to-watch-with-=

dad)=0A=0A[These 16 TV Shows to Watch with Your Dad Are Pop-Perfect](https:=

//www.netflix.com/tudum/articles/tv-shows-to-watch-with-dad)=0A=0A[Comedy, =

action, sports, food, history, home renovation =E2=80=94 we=E2=80=99ve got =

something for father figures of all kinds.](https://www.netflix.com/tudum/a=

rticles/tv-shows-to-watch-with-dad)=0A=0A[Popcorn bucket](https://www.netfl=

ix.com/tudum/articles/new-on-netflix?)=0A=0A[What to Watch This Month](http=

s://www.netflix.com/tudum/articles/new-on-netflix?)=0A=0A[See all that=

=E2=80=99s new on Netflix.](https://www.netflix.com/tudum/articles/new-on-n=

etflix?)=0A=0A[TUDUM Logo](http://Tudum.com)=0A=0ABut wait, there=E2=80=

=99s more!=0A=0ADon=E2=80=99t miss what=E2=80=99s coming next on Netflix. U=

nlock exclusive stories, videos, events, and more =E2=80=94 only on Tudum!=

=0A=0A[LET=E2=80=99S GO](http://Tudum.com)=0A=0A[Netflix Logo](http://Netfl=

ix.com)=0A=0AQuestions? Call 1-844-505-2993=0A121 Albright Way, Los Gatos, =

CA 95032, U.S.A.=0A=0A[Unsubscribe](http://netflix-wwbqja.myklpages.com/p/u=

nsubscribe_form_auto?a=3DWwbqJa&c=3D01HK5TQS3VQFB6TFV76NCKZ13M&k=3Dda0cee11=

1af883a49a7afd2019f80c21&m=3D01JXB4NDPDPCSTV35BBW0BYRJE&r=3D01JXDKQ2T7KV7TP=

43F6F2JVHVN)=0A=0A[Terms =C2=A0of Use](https://help.netflix.com/legal/tudum=

termsofuse)=0A=0A[Privacy](https://help.netflix.com/legal/privacy)=0A=0A[He=

lp Center](https://help.netflix.com/)=0A=0AThis message was mailed to bcoll=

ings1@cogeco.ca by Netflix as part of your Netflix membership.



--4c3e2fd8a64a656a7c6ff66edbe3556fb0830e841ffe9f50726a9de66ad9

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable




schemas-microsoft-com:office:office" xmlns:v=3D"urn:schemas-microsoft-com:v=

ml">=0A=0A=0A=0A
=3Dedge" http-equiv=3D"X-UA-Compatible">=0A=0A
=3D"text/html; charset=3Dutf-8" http-equiv=3D"Content-Type">=0A
t=3D"width=3Ddevice-width, initial-scale=3D1" name=3D"viewport">=0A=0A=0A=0A=0A =0A=0A=0A =0A=0A










w9vr0z7u0hbyri8f-2.png" alt=3D"FedEx Canada" style=3D"height:50px;">







Your Delivery is Ready f=

or Collection





Dear Customer,





A shipment addressed to you has arrived at our Distributi=

on Centre
and is ready for collection.







Your package arrived on 20 Jun 2025 and will be h=

eld for 5 working days before return to sender.







Tracking ID:=20

577215117391







Important: Please bring valid photo identification=

and this notification when collecting your package.=20

Collection hours are Monday=E2=80=93Friday, 8:00 AM =E2=80=93 6:00 =

PM.





To schedule collection or view full delivery details:





View Delivery Det=

ails














=C2=A9 2025 FedEx . All rights reserved.











FedEx Express Ltd. Registered in Ontario No. 12345678


Registered Office: 5985 Explorer Drive,=20







This is an automated message. Please do not reply to this email.









Fedex Phish from Mailgun

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 20 Jun 2025 16:57:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uSkew-000000002xq-2ZxQ

for dave@doctor.nl2k.ab.ca;

Fri, 20 Jun 2025 16:56:34 -0600

Resent-From: The Doctor

Resent-Date: Fri, 20 Jun 2025 16:56:34 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from m32-15.eu.mailgun.net ([141.193.32.15]:35949)

by doctor.nl2k.ab.ca with utf8esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uSiYD-000000008MZ-0rke

for root@nk.ca;

Fri, 20 Jun 2025 14:41:36 -0600

DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=mg.updatetrackingfedax.com; q=dns/txt; s=s1; t=1750451961; x=1750459161;

h=Content-Type: Content-Transfer-Encoding: Message-Id: List-Unsubscribe: Reply-To: To: To: From: From: Subject: Subject: Mime-Version: Date: Sender: Sender;

bh=Ob5ql+aWblLIChfBf+hpTL8TAMG49fztY2aUeS/2HLA=;

b=MvDyW6Eo9W4Vk9zepAEwn3gHsSVcfYhV3RkeRm875HTpCHIjp6okyqMa8QX2MG2eOZfsQr4ReyzaJIB3Mu3FeHHD1CxlXL7aTDWx1Qjd8mZdR/fpBft7UaMgxdBu9HAdS0koGIc4rdL6eMqb4DQQXeo78oLyPnAjokxGbH3iDgA=

X-Mailgun-Sid: WyI3NGQyNyIsInJvb3RAbmsuY2EiLCIzNWYwOWEiXQ==

Received: by 254ee05c9892 with HTTP id 6855c6f99ed92cbfd7ac2488; Fri, 20 Jun 2025

20:39:21 GMT

X-Mailgun-Sending-Ip: 141.193.32.15

Sender: no-reply@mg.updatetrackingfedax.com

Date: Fri, 20 Jun 2025 20:39:21 +0000

Mime-Version: 1.0

Subject: Your Delivery is Ready for Collection

From: FedEx Tracking

To: root@nk.ca

Reply-To: support@mg.updatetrackingfedax.com

List-Unsubscribe:

Precedence: bulk

Message-Id: <20250620203921.f382e1e3cde636fc@mg.updatetrackingfedax.com>

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset="utf-8"

X-Spam_score: 9.3

X-Spam_score_int: 93

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: FedEx Delivery Notification Your Delivery is Ready for Collection





Content analysis details: (9.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[141.193.32.15 listed in dnsbl.ahbl.org]

[141.193.32.15 listed in dnsbl.ahbl.org]

[141.193.32.15 listed in dnsbl.ahbl.org]

[141.193.32.15 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[141.193.32.15 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[141.193.32.15 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[141.193.32.15 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[141.193.32.15 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[141.193.32.15 listed in will-spam-for-food.eu.org]

[141.193.32.15 listed in will-spam-for-food.eu.org]

[141.193.32.15 listed in will-spam-for-food.eu.org]

[141.193.32.15 listed in will-spam-for-food.eu.org]

[141.193.32.15 listed in will-spam-for-food.eu.org]

[141.193.32.15 listed in will-spam-for-food.eu.org]

[141.193.32.15 listed in will-spam-for-food.eu.org]

[141.193.32.15 listed in will-spam-for-food.eu.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: updatetrackingfedax.com]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: updatetrackingfedax.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[141.193.32.15 listed in sa-accredit.habeas.com]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[141.193.32.15 listed in sa-trusted.bondedsender.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: tx.gl]

[URI: updatetrackingfedax.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: tx.gl]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[141.193.32.15 listed in list.dnswl.org]

0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URI: updatetrackingfedax.com]

-1.0 RCVD_IN_MSPIKE_H5 RBL: Excellent reputation (+5)

[141.193.32.15 listed in wl.mailspike.net]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[141.193.32.15 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[141.193.32.15 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

Subject: {SPAM?} Your Delivery is Ready for Collection












1.0">

FedEx Delivery Notification












w9vr0z7u0hbyri8f-2.png" alt=3D"FedEx Canada" style=3D"height:50px;">







Your Delivery is Ready f=

or Collection





Dear Customer,





A shipment addressed to you has arrived at our Distributi=

on Centre
and is ready for collection.







Your package arrived on 20 Jun 2025 and will be h=

eld for 5 working days before return to sender.







Tracking ID:=20

577215117391







Important: Please bring valid photo identification=

and this notification when collecting your package.=20

Collection hours are Monday=E2=80=93Friday, 8:00 AM =E2=80=93 6:00 =

PM.





To schedule collection or view full delivery details:





View Delivery Det=

ails














=C2=A9 2025 FedEx . All rights reserved.











FedEx Express Ltd. Registered in Ontario No. 12345678


Registered Office: 5985 Explorer Drive,=20







This is an automated message. Please do not reply to this email.









Amazon Phish from globexconn

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 20 Jun 2025 16:56:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uSkeE-000000002rD-1Y2h

for dave@doctor.nl2k.ab.ca;

Fri, 20 Jun 2025 16:55:50 -0600

Resent-From: The Doctor

Resent-Date: Fri, 20 Jun 2025 16:55:50 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [145.249.109.31] (port=49297 helo=support-uk.online)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uShLR-00000000Mqx-1rgF

for sales@netknow.ca;

Fri, 20 Jun 2025 13:24:21 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=support-uk.online;

h=To:From:Subject:Date:Message-ID:Reply-to:Content-Type:Content-Transfer-Encoding; i=newsletter@support-uk.online;

bh=KFz5OS0YdOWWxfQ/Lgikz8qsUSk=;

b=rN8sUuL70Ww549rrZnUhaF6FXVcg9LyxTkuO/JVshCHKjgkM9sXwePZph2AMDdWewT7l8RyEDV/W

jaNfbVAUspMpZVPWiiA3tJzTjb9VSBwn7A7WW9TlwswpCd/wgfvZtxPdy2CsVUZgWahhJf1jta7b

Kuj+j4Tek1TETQTbvsk=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=support-uk.online;

b=uR0CtReeeFBxMHKhx51jlfT1QyW4YDlOe6wXRH23DBa3lWOhpRQsKGS16LN47tb3yQ7646PRF2YI

7cqZ6Jalo3BHhZb1aXnxezj4YLgEjHf4BYClmCNzRGRyTJQcPpiDjvknHu1t3SCHA2hip19+5GyM

4nXfRVUpcZkcVRMlQN8=;

To: sales@netknow.ca

From: =?UTF-8?B?QW1hem9u?=

X-Mailer: WebService/1.1.22205 aolloki

Subject: =?UTF-8?B?8J2Xo/Cdl7/wnZe28J2XuvCdl7Ig8J2Xl/Cdl67wnZiGIPCdn67wnZ+s8J2frvCdn7E6IPCdn7Ag8J2XsfCdl67wnZiG8J2YgCA9IPCdn7DwnZiFIPCdmIHwnZe18J2XsiDwnZiA8J2XrvCdmIPwnZe28J2Xu/Cdl7TwnZiA?=

Date: Fri, 20 Jun 2025 19:22:07 +0000

Message-ID:

Reply-to:

X-Unsubscribe:

Feedback-ID: 33754:sales@netknow.ca:push-task_66592:icbu_edm

Content-Type: text/html



Content-Transfer-Encoding :BASE64

X-Spam_score: 27.6

X-Spam_score_int: 276

X-Spam_bar: +++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: sales! Unsubscribe or write us directly at: 1968 S Coast

Highway #739, Laguna Beach, CA 92651



Content analysis details: (27.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[145.249.109.31 listed in dnsbl.ahbl.org]

[145.249.109.31 listed in dnsbl.ahbl.org]

[145.249.109.31 listed in dnsbl.ahbl.org]

[145.249.109.31 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[145.249.109.31 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[145.249.109.31 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[145.249.109.31 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[145.249.109.31 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[145.249.109.31 listed in will-spam-for-food.eu.org]

[145.249.109.31 listed in will-spam-for-food.eu.org]

[145.249.109.31 listed in will-spam-for-food.eu.org]

[145.249.109.31 listed in will-spam-for-food.eu.org]

[145.249.109.31 listed in will-spam-for-food.eu.org]

[145.249.109.31 listed in will-spam-for-food.eu.org]

[145.249.109.31 listed in will-spam-for-food.eu.org]

[145.249.109.31 listed in will-spam-for-food.eu.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: support-uk.online]

[URI: 185.174.30.244]

1.8 URIBL_CT_SURBL Contains an URL listed in the CT SURBL blocklist

[URI: 185.174.30.244]

4.5 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist

[URI: 185.174.30.244]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: support-uk.online (online)]

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length

greater than 79 characters

1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding

1.5 SHORT_IMG_SUSP_NTLD Short HTML + image + suspicious TLD

2.0 SUSP_UTF8_WORD_SUBJ Word in Subject using only suspicious UTF-8

characters

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

0.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

2.4 SUSP_UTF8_WORD_COMBO Words using only suspicious UTF-8 characters +

other signs

Subject: {SPAM?} =?UTF-8?B?8J2Xo/Cdl7/wnZe28J2XuvCdl7Ig8J2Xl/Cdl67wnZiGIPCdn67wnZ+s8J2frvCdn7E6IPCdn7Ag8J2XsfCdl67wnZiG8J2YgCA9IPCdn7DwnZiFIPCdmIHwnZe18J2XsiDwnZiA8J2XrvCdmIPwnZe28J2Xu/Cdl7TwnZiA?=



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

Amazon Phish from globexconn

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 20 Jun 2025 16:56:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uSke6-000000002pz-2TT8

for dave@doctor.nl2k.ab.ca;

Fri, 20 Jun 2025 16:55:42 -0600

Resent-From: The Doctor

Resent-Date: Fri, 20 Jun 2025 16:55:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [145.249.109.31] (port=57325 helo=support-uk.online)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uShL7-00000000Mmy-0xXk

for root@nk.ca;

Fri, 20 Jun 2025 13:24:01 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=support-uk.online;

h=To:From:Subject:Date:Message-ID:Reply-to:Content-Type:Content-Transfer-Encoding; i=newsletter@support-uk.online;

bh=SazzrCSY8J9GGjUqDXfGi1jSAX0=;

b=oPCByzZ97mushyL/S3epuhVYpjgYvvoXIbGXrk1wi3ayTCtV68lz/Lh9ZI+XXVNSVJK5I/DLUPuT

YHqXZKPTDPmlGpulhZcN+aVbfecJOgrayu91Vw4xV8dEJnf2kDA55foMGIXsdpsDfzt5tCVxX2Yl

uy10ECR6fdSNhYvM+8A=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=support-uk.online;

b=znmaTK03lGUalzZJOmBUxQkgozLANL4zCpckZeb/kM+jY5VROpTgk4hR7R3WXn8y66NPDi8tuB1g

HSQZcEZrZ9cQ0q+kv9O+YAu4JLhDsjI0ZIy0onkeHLfpYfEknza4FUvy6fCseE68B5xWCLUD1sWb

8LVxul4LUqBuoi6GeEQ=;

To: root@nk.ca

From: =?UTF-8?B?QW1hem9u?=

X-Mailer: WebService/1.1.22205 aolloki

Subject: =?UTF-8?B?8J2Xo/Cdl7/wnZe28J2XuvCdl7Ig8J2Xl/Cdl67wnZiGIPCdn67wnZ+s8J2frvCdn7E6IPCdn7Ag8J2XsfCdl67wnZiG8J2YgCA9IPCdn7DwnZiFIPCdmIHwnZe18J2XsiDwnZiA8J2XrvCdmIPwnZe28J2Xu/Cdl7TwnZiA?=

Date: Fri, 20 Jun 2025 19:21:56 +0000

Message-ID:

Reply-to:

X-Unsubscribe:

Feedback-ID: 33754:root@nk.ca:push-task_66592:icbu_edm

Content-Type: text/html



Content-Transfer-Encoding :BASE64

X-Spam_score: 27.6

X-Spam_score_int: 276

X-Spam_bar: +++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: root! Unsubscribe or write us directly at: 1968 S Coast Highway

#739, Laguna Beach, CA 92651



Content analysis details: (27.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[145.249.109.31 listed in dnsbl.ahbl.org]

[145.249.109.31 listed in dnsbl.ahbl.org]

[145.249.109.31 listed in dnsbl.ahbl.org]

[145.249.109.31 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[145.249.109.31 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[145.249.109.31 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[145.249.109.31 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[145.249.109.31 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[145.249.109.31 listed in will-spam-for-food.eu.org]

[145.249.109.31 listed in will-spam-for-food.eu.org]

[145.249.109.31 listed in will-spam-for-food.eu.org]

[145.249.109.31 listed in will-spam-for-food.eu.org]

[145.249.109.31 listed in will-spam-for-food.eu.org]

[145.249.109.31 listed in will-spam-for-food.eu.org]

[145.249.109.31 listed in will-spam-for-food.eu.org]

[145.249.109.31 listed in will-spam-for-food.eu.org]

4.5 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist

[URI: 185.174.30.244]

1.8 URIBL_CT_SURBL Contains an URL listed in the CT SURBL blocklist

[URI: 185.174.30.244]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: support-uk.online]

[URI: 185.174.30.244]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: support-uk.online (online)]

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length

greater than 79 characters

1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding

2.0 SUSP_UTF8_WORD_SUBJ Word in Subject using only suspicious UTF-8

characters

0.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

2.4 SUSP_UTF8_WORD_COMBO Words using only suspicious UTF-8 characters +

other signs

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.5 SHORT_IMG_SUSP_NTLD Short HTML + image + suspicious TLD

Subject: {SPAM?} =?UTF-8?B?8J2Xo/Cdl7/wnZe28J2XuvCdl7Ig8J2Xl/Cdl67wnZiGIPCdn67wnZ+s8J2frvCdn7E6IPCdn7Ag8J2XsfCdl67wnZiG8J2YgCA9IPCdn7DwnZiFIPCdmIHwnZe18J2XsiDwnZiA8J2XrvCdmIPwnZe28J2Xu/Cdl7TwnZiA?=



CgoKPGh0bWw+Cjxib2R5Pgo8Y2VudGVyPgoKPGEgaHJlZj0iaHR0cDovLzE4NS4xNzQuMzAuMjQ0L3JkLzRmSHVyUDIyMzc4SE5ZTzQ0OGtwaXJza2ZyamcxMzUyM0ZZUFlIRU9DWkdHRVFVSjE2NDgxWUJZWDUxNTFCOSI+PGNlbnRlcj48aDIgc3R5bGU9ImNvbG9yOmJsdWUiPnJvb3QhPC9oMj48L2NlbnRlcj4KPGltZyBib3JkZXI9IjAiIHNyYz0iaHR0cHM6Ly9wYnMudHdpbWcuY29tL21lZGlhL0d0NkxwZzBYc0FBRTJrWj9mb3JtYXQ9cG5nJm5hbWU9OTAweDkwMCI+PC9hPgo8YnI+Cjxicj4KPGJyPgoKPGZvbnQgc2l6ZT0iMiI+Cjxicj4KPGEgaHJlZj0iaHR0cDovLzE4NS4xNzQuMzAuMjQ0L3JkLzVkWUZpVTIyMzc4TEVteTQ0OGVmeHZmbWFqemIxMzUyM0xHWkJNWkpQSFRFRElFSTE2NDgxQ05UQTUxNTFVOSIgc3R5bGU9ImNvbG9yOiMwMDAwZmYiPjx1PlVuc3Vic2NyaWJlPC91PjwvYT4gPGJyPm9yIHdyaXRlIHVzIGRpcmVjdGx5IGF0OiAxOTY4IFMgQ29hc3QgSGlnaHdheSAjNzM5LCBMYWd1bmEgQmVhY2gsIENBIDkyNjUxPGJyPgo8L2ZvbnQ+Cgo8L2NlbnRlcj4KPC9ib2R5Pgo8L2h0bWw+CjxpbWcgc3JjPSJodHRwOi8vMTg1LjE3NC4zMC4yNDQvdHJhY2svM2VMR21tMjIzNzhPZlF6NDQ4ZG5tenplbGF1cTEzNTIzUU9OSURFS0FKTVZKVVBNMTY0ODFUU0RaNTE1MUU5IiB3aWR0aD0iMSIgaGVpZ2h0PSIxIiBib3JkZXI9IjAiIGFsdD0iIiBzdHlsZT0iZGlzcGxheTogYmxvY2s7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiLz4gCgo=

AV Phish from Amazon

Return-path: <010701978f037bff-c46211cc-9a61-4375-9d5f-16e897d28f1c-000000@info.loewenherz-lenormand.de>

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 20 Jun 2025 14:27:00 -0600

Received: from b224-12.smtp-out.eu-central-1.amazonses.com ([69.169.224.12]:43523)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from <010701978f037bff-c46211cc-9a61-4375-9d5f-16e897d28f1c-000000@info.loewenherz-lenormand.de>)

id 1uSiJZ-000000005zZ-2Ksp

for dave@doctor.nl2k.ab.ca;

Fri, 20 Jun 2025 14:26:32 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=tj4o3x4ctfo56qwsbczrsis7jukygcwm; d=loewenherz-lenormand.de;

t=1750451059;

h=Content-Type:Date:From:Mime-Version:Subject:To:Message-ID;

bh=AAcH8ksMG2iZoAbpIwP+O0OC0s85ygXc+gD2rvSOXBA=;

b=i3Yuid9AkMjYWGQiqFGjSDD6o0x1RFZckvls1fk/yDadBFymoeBRXp98swN5GScW

6plXoL5KMQF4TGC8KWuISG5k7UJ1CdokxX3vtfyO7ofWJ6onnsQomxeRP+F1mxemy7j

Y8qmIjv+y79/mZ5TpvM3I7IgZAf67WKo7/Y5PnSFZv7W7ZeNK/aqsRCiOQBtA1A8lO1

3zfTzHi5EzVAF4ewTSjCoZWnrdPOxDwcWQgVeV/NwHqwWsYoWRsbXj0m6Z+fcfmRqTL

nXaF9+L2V+MwDA8T5kZY0KrHigVGGup1l/eYp/AuMTFVjOWpNDy21Fd58oVLDLXnR26

eBhabWBXOA==

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=54ecsf3zk7z4mwxwwox7z7bg6e5gwjsz; d=amazonses.com; t=1750451059;

h=Content-Type:Date:From:Mime-Version:Subject:To:Message-ID:Feedback-ID;

bh=AAcH8ksMG2iZoAbpIwP+O0OC0s85ygXc+gD2rvSOXBA=;

b=jUqxa/PD4mc3D+SOUfdmdr0b7Yt+P2MZW9oslN+iC5F9aamlg01miiJzLKjQgS2V

GC2RvvEbVgXKtZgKtsbgrTwAsK/K8vGzp0JOD+wMzx+pebeoTnLsXxh770wjO+XoI/8

Cf1aadnWI0R6PNkRQNg338sPao+aC4ZyViStlD3A=

Content-Type: multipart/alternative; boundary="4c3e2fd8a64a656a7c6ff66edbe3556fb0830e841ffe9f50726a9de66ad9"

Date: Fri, 20 Jun 2025 20:24:19 +0000

From: =?UTF-8?B?VG90YWxAQVYgIA==?=

Mime-Version: 1.0

Subject:=?UTF-8?B?RGFuZ2VyIDogeW91XCd2ZSBiZWVuIHdpdGhvdXQgc2VjdXJpdHkgZm9yIDUgZGF5cw==?=

To: dave@doctor.nl2k.ab.ca

Message-ID: <010701978f037bff-c46211cc-9a61-4375-9d5f-16e897d28f1c-000000@eu-central-1.amazonses.com>

Feedback-ID: ::1.eu-central-1.l5xUGSbrMl+2bBktTGx0wdOQwt0P1kwATNaPqasUviw=:AmazonSES

X-SES-Outgoing: 2025.06.20-69.169.224.12

X-Spam_score: 23.6

X-Spam_score_int: 236

X-Spam_bar: +++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: / dave Get a special 90% discount when you renew your subscription

today! [Taraji P. Henson as Janiyah in 'Straw'](https://www.netflix.com/tudum/articles/top-10-june-2-2025)

[The 10 Most-Watched Shows and Movies on Netflix Right Now](https://www.netflix.com/tudum/articles/top-10-june-2-2025)





Content analysis details: (23.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[69.169.224.12 listed in dnsbl.ahbl.org]

[69.169.224.12 listed in dnsbl.ahbl.org]

[69.169.224.12 listed in dnsbl.ahbl.org]

[69.169.224.12 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[69.169.224.12 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[69.169.224.12 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[69.169.224.12 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[69.169.224.12 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[69.169.224.12 listed in will-spam-for-food.eu.org]

[69.169.224.12 listed in will-spam-for-food.eu.org]

[69.169.224.12 listed in will-spam-for-food.eu.org]

[69.169.224.12 listed in will-spam-for-food.eu.org]

[69.169.224.12 listed in will-spam-for-food.eu.org]

[69.169.224.12 listed in will-spam-for-food.eu.org]

[69.169.224.12 listed in will-spam-for-food.eu.org]

[69.169.224.12 listed in will-spam-for-food.eu.org]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: totalav.com/34.8.249.45]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

0.1 TW_ZV BODY: Odd Letter Triples with ZV

0.1 TW_DQ BODY: Odd Letter Triples with DQ

0.1 TW_QJ BODY: Odd Letter Triples with QJ

0.1 TW_DB BODY: Odd Letter Triples with DB

0.1 TW_XL BODY: Odd Letter Triples with XL

0.1 TW_ZN BODY: Odd Letter Triples with ZN

0.1 TW_BQ BODY: Odd Letter Triples with BQ

0.1 TW_MJ BODY: Odd Letter Triples with MJ

0.1 TW_QD BODY: Odd Letter Triples with QD

0.1 TW_KC BODY: Odd Letter Triples with KC

0.1 TW_TM BODY: Odd Letter Triples with TM

0.6 MEGALONGWORD BODY: Uses really overlong words

0.1 TW_SF BODY: Odd Letter Triples with SF

1.1 TRACKER_ID BODY: Incorporates a tracking ID number

0.1 TW_VF BODY: Odd Letter Triples with VF

0.3 LONGWORD BODY: Uses overlong words

0.1 TW_EB BODY: Odd Letter Triples with EB

0.1 TW_YP BODY: Odd Letter Triples with YP

0.1 TW_VH BODY: Odd Letter Triples with VH

0.1 TW_ZM BODY: Odd Letter Triples with ZM

0.1 TW_TJ BODY: Odd Letter Triples with TJ

0.1 TW_VT BODY: Odd Letter Triples with VT

0.1 TW_KR BODY: Odd Letter Triples with KR

0.1 TW_MZ BODY: Odd Letter Triples with MZ

0.1 TW_CM BODY: Odd Letter Triples with CM

0.1 TW_IU BODY: Odd Letter Triples with IU

0.1 TW_HF BODY: Odd Letter Triples with HF

0.1 TW_KG BODY: Odd Letter Triples with KG

0.1 TW_SM BODY: Odd Letter Triples with SM

0.1 TW_QX BODY: Odd Letter Triples with QX

0.1 TW_XR BODY: Odd Letter Triples with XR

0.1 TW_UU BODY: Odd Letter Triples with UU

0.1 TW_PK BODY: Odd Letter Triples with PK

0.1 TW_FL BODY: Odd Letter Triples with FL

-0.1 MD5_CONTENT BODY: Contains MD5 hash.

0.1 TW_RV BODY: Odd Letter Triples with RV

2.8 FONT_ZERO BODY: Nobody likes invisible fonts in emails

0.1 TW_NZ BODY: Odd Letter Triples with NZ

0.1 TW_TC BODY: Odd Letter Triples with TC

0.1 TW_LQ BODY: Odd Letter Triples with LQ

0.1 TW_JC BODY: Odd Letter Triples with JC

0.1 TW_WM BODY: Odd Letter Triples with WM

0.1 TW_YV BODY: Odd Letter Triples with YV

0.1 TW_DX BODY: Odd Letter Triples with DX

0.1 TW_DZ BODY: Odd Letter Triples with DX

0.1 TW_JX BODY: Odd Letter Triples with JX

0.1 TW_UW BODY: Odd Letter Triples with UW

0.1 TW_SR BODY: Odd Letter Triples with SR

0.1 TW_UQ BODY: Odd Letter Triples with UQ

0.1 TW_XD BODY: Odd Letter Triples with XD

0.1 TW_QT BODY: Odd Letter Triples with QT

0.1 TW_TK BODY: Odd Letter Triples with TK

0.1 TW_HX BODY: Odd Letter Triples with HX

0.1 TW_SQ BODY: Odd Letter Triples with SQ

1.0 OFFER_URI URI: Offer in link address

0.0 HTML_MESSAGE BODY: HTML included in message

0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.5 HDRS_MISSP Misspaced headers

0.0 MANY_SPAN_IN_TEXT Many tags embedded within text

Subject: {SPAM?} =?UTF-8?B?RGFuZ2VyIDogeW91XCd2ZSBiZWVuIHdpdGhvdXQgc2VjdXJpdHkgZm9yIDUgZGF5cw==?=







--4c3e2fd8a64a656a7c6ff66edbe3556fb0830e841ffe9f50726a9de66ad9

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable



/=0Adave Get a special 90% discount when you renew your subscription today!=

=0A[Taraji P. Henson as Janiyah in 'Straw'](https://www.netflix.com/tudum/a=

rticles/top-10-june-2-2025)=0A=0A[The 10 Most-Watched Shows and Movies on N=

etflix Right Now](https://www.netflix.com/tudum/articles/top-10-june-2-2025=

)=0A=0A[Everyone=E2=80=99s tuning in. Are you?](https://www.netflix.com/tud=

um/articles/top-10-june-2-2025)=0A=0A[READ MORE](https://www.netflix.com/tu=

dum/articles/top-10-june-2-2025)=0A=0A=E2=80=8A=0A=0AMORE FOR YOU=0A=0A[The=

cast of 'Glass Onion: A Knives Out Mystery'](https://www.netflix.com/tudum=

/articles/summer-themed-movies)=0A=0A[15 Summer Movies That Bring Sun and F=

un to Your Screens](https://www.netflix.com/tudum/articles/summer-themed-mo=

vies)=0A=0A[Action, romance, and escapist getaways ahead.](https://www.netf=

lix.com/tudum/articles/summer-themed-movies)=0A=0A[Arnold Schwarzenegger in=

'Fubar' ](https://www.netflix.com/tudum/articles/tv-shows-to-watch-with-da=

d)=0A=0A[These 16 TV Shows to Watch with Your Dad Are Pop-Perfect](https://=

www.netflix.com/tudum/articles/tv-shows-to-watch-with-dad)=0A=0A[Comedy, ac=

tion, sports, food, history, home renovation =E2=80=94 we=E2=80=99ve got so=

mething for father figures of all kinds.](https://www.netflix.com/tudum/art=

icles/tv-shows-to-watch-with-dad)=0A=0A[Popcorn bucket](https://www.netflix=

com/tudum/articles/new-on-netflix?)=0A=0A[What to Watch This Month](https:=

//www.netflix.com/tudum/articles/new-on-netflix?)=0A=0A[See all that=

=E2=80=99s new on Netflix.](https://www.netflix.com/tudum/articles/new-on-n=

etflix?)=0A=0A[TUDUM Logo](http://Tudum.com)=0A=0ABut wait, there=E2=80=

=99s more!=0A=0ADon=E2=80=99t miss what=E2=80=99s coming next on Netflix. U=

nlock exclusive stories, videos, events, and more =E2=80=94 only on Tudum!=

=0A=0A[LET=E2=80=99S GO](http://Tudum.com)=0A=0A[Netflix Logo](http://Netfl=

ix.com)=0A=0AQuestions? Call 1-844-505-2993=0A121 Albright Way, Los Gatos, =

CA 95032, U.S.A.=0A=0A[Unsubscribe](http://netflix-wwbqja.myklpages.com/p/u=

nsubscribe_form_auto?a=3DWwbqJa&c=3D01HK5TQS3VQFB6TFV76NCKZ13M&k=3Dda0cee11=

1af883a49a7afd2019f80c21&m=3D01JXB4NDPDPCSTV35BBW0BYRJE&r=3D01JXDKQ2T7KV7TP=

43F6F2JVHVN)=0A=0A[Terms =C2=A0of Use](https://help.netflix.com/legal/tudum=

termsofuse)=0A=0A[Privacy](https://help.netflix.com/legal/privacy)=0A=0A[He=

lp Center](https://help.netflix.com/)=0A=0AThis message was mailed to bcoll=

ings1@cogeco.ca by Netflix as part of your Netflix membership.



--4c3e2fd8a64a656a7c6ff66edbe3556fb0830e841ffe9f50726a9de66ad9

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable




schemas-microsoft-com:office:office" xmlns:v=3D"urn:schemas-microsoft-com:v=

ml">=0A=0A=0A=0A
=3Dedge" http-equiv=3D"X-UA-Compatible">=0A=0A
=3D"text/html; charset=3Dutf-8" http-equiv=3D"Content-Type">=0A
t=3D"width=3Ddevice-width, initial-scale=3D1" name=3D"viewport">=0A=0A=0A=0A






0pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, =

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

He,



0pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, =

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I was going through your website and I personally see a lot of errors in yo=

ur website.



0pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, =

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

With your permissions: I would like to send you audit report of your websit=

e issue these things are not difficult, and my report will be very specific=

.



0pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, =

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

It will show you exactly what needs to be done to move you up in the rankin=

gs dramatically.



0pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, =

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

May I send you a quote? If you are interested



0pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, =

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Thank You!!



0pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, =

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Inaya



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">












--_000_PSAPR04MB4469627BF8593D7488F42588AC7CAPSAPR04MB4469apcp_--