Instagram followers spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 11 Jul 2025 14:42:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uaKZ5-00000000LOr-2sMf

for dave@doctor.nl2k.ab.ca;

Fri, 11 Jul 2025 14:41:51 -0600

Resent-From: The Doctor

Resent-Date: Fri, 11 Jul 2025 14:41:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f71.google.com ([209.85.219.71]:54561)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uaJwn-00000000JPY-2tMU

for sales@nk.ca;

Fri, 11 Jul 2025 14:03:11 -0600

Received: by mail-qv1-f71.google.com with SMTP id 6a1803df08f44-6fad9167e4cso44553206d6.1

for ; Fri, 11 Jul 2025 13:00:21 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1752264014; x=1752868814; darn=nk.ca;

h=to:from:subject:date:message-id:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=JhEeN2jMjAfwahB2rz+kO8a78z2FFe+hmviBCN4aOZY=;

b=WATw46l0GB/GKmIShP1+TuwuuU4puMkSfCpWFk5xnr7dKXVFy4s3hPQ0xQbceKHOZr

N5MuMX/KHrywVDf7/DfZE9yzF966DQC1NnBGVQwx7RPDgNwt5nF9Zw9X7yt4pA5zj32p

5bVK3BCXgkRrJKfTH3sXvBdtFaqAFnGFKzjM3XZU90MS4s4abO6MPC1amZdsOnDeIQ05

Xrhm92QXvy11oYl/rgpndb/LDwfomJJT8qCH3rgw3zLvg/q9kg0Wg+9bjVJdCBiHGxfs

u+Ss+jZKhWqsrbfVt6z8hO04QzX6LvnK9T/uZbJAmyuhpg3WfJsneyKItNAra4ufL1QW

LOkA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1752264014; x=1752868814;

h=to:from:subject:date:message-id:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=JhEeN2jMjAfwahB2rz+kO8a78z2FFe+hmviBCN4aOZY=;

b=mNxgT41buJHPeZ9NwW8eneHiQJSrFAH4D+g2DKINgYjNM7zZrej4N0/3ndlJ8aqgNY

XgGeNQpzK3J71n2htPDqVFeJIZI8JQN0YjwLxz/qVtbls3QZB56sYf47w/1X7DKugRHz

AZWp6zsEFIsZUB2EHj4bRQXm5RXEPLFzOt8EI2kEHrcgtCoXlVSDWbMMpfbUyoIPJY9m

JTLOKMcBJecX2OApTY8LLJFl8sJOyGuapIAUt8KLq/WkXBvYoOqnLtSA+3ayZz55K64r

KU1v8e/ynPYAnTyP6s+rmgLCSwlG275wvEs+KsYNgydNnCVnQLMjshIakPYmXPfnRGjW

9L6A==

X-Gm-Message-State: AOJu0YxKNVAguoKfS/jS2BOZlRetFqWW2SiBU3XtMwVsxUOcN7auWig+

3i/sG0WZeHCu03417/6KdnNUoM/Mi5uhjQnCBwUJVS3uCNhG6uanqKdn8luVzzWLXy/U0LidU8q

udoA=

X-Google-Smtp-Source: AGHT+IHKpzM6kx0omr1LoBX8m4yXdDWRb9Hn4EcVMZBRsBI0F8whfwQYxzZHwELas225AB9dBIeBY5M4cQ==

MIME-Version: 1.0

X-Received: by 2002:a05:6122:90b:b0:534:69b3:a200 with SMTP id

71dfb90a1353d-535f45580bcmr3374955e0c.0.1752261852405; Fri, 11 Jul 2025

12:24:12 -0700 (PDT)

Message-ID:

Date: Fri, 11 Jul 2025 19:24:12 +0000

Subject: daveyadallee, Get More 2,000 Instagram Followers and 1,000 Tiktok

Views here

From: herabela44@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hi daveyadallee,



We are from Instasocial. We found your Email address on your Instagram page

@daveyadallee.



We Offers Instagram Followers, Likes and Views services.



The price is:



-$29 USD for 1,000 Instagram Followers and

- $9 USD For Instagram Post Likes.

- $7 USD For Instagram Video Views



Now you have Limited Followers, maybe you are Interested?



Building a large and engaged follower base can contribute to brand loyalty.

Followers who feel a strong connection with a brand are more likely to

remain loyal and advocate for the brand..



You can See all packages here :



https://myinstasocial.store/



If you have any questions, feel free to ask them here.

I apologize if this message bothers you,





Also, We have Youtube, Tiktok and Twitter services too, Please check it now.

Thank you,

Regards,

Nigerian spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 11 Jul 2025 09:41:15 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uaFrt-00000000Prz-2QEC

for dave@doctor.nl2k.ab.ca;

Fri, 11 Jul 2025 09:40:57 -0600

Resent-From: The Doctor

Resent-Date: Fri, 11 Jul 2025 09:40:57 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wm1-f45.google.com ([209.85.128.45]:45253)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uaFDO-000000003QA-1wXS

for sales@nk.ca;

Fri, 11 Jul 2025 08:59:20 -0600

Received: by mail-wm1-f45.google.com with SMTP id 5b1f17b1804b1-453066fad06so13559005e9.2

for ; Fri, 11 Jul 2025 07:57:04 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1752245815; x=1752850615; darn=nk.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=JJzXSN4EQPz8Kmjc4PknebRF+pyDYbCOQtCOZpgm6Is=;

b=MBRTLm3R1soBrq/iOtEgtTVfJ/nUr7h59O/ya3N3mR2zx07t14e81zqLVUt42aRfxy

JxT6P5X1TJxR7RnSlZFuxBvB+5OjFszmNVDS1FmzNQGg/esUEQnelyzgaInfJQ56NZGi

lfDbO5vKfwcRoqAyAx9pfftZqDCp0LThR3kmRs/5Pidq5sYQalfvc+fMAf+L6usx2ckc

FZQHIlMTCUBwnuU5320p5osyUqOtZ0F03RRVn742ZVsmz2vmi38u6XTAfFcFMde6hnhO

P2n/rEzCO5Cc+Da7hROiPdZmZnB/hUJ+AqTR2TqPhY0unT56UcJcQLfwDKnjnrY/PM8Z

VRXA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1752245815; x=1752850615;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=JJzXSN4EQPz8Kmjc4PknebRF+pyDYbCOQtCOZpgm6Is=;

b=tbbCn3wX34wcO0yB9QXAODjldNsjbO2uWE4QSRA/Wp48toaWp0islM+ICEWPG7qYX0

jxMbZhIPXF3nh0cKk5Xx/9z5zk2Hx3AesWEkTyvq/DeztfB8FKFwVDuCqm96XPomrobj

cY/EVrzE2aMT0HkEo9bToorKngxKvB82eyRpHRPT1XjLppf3GFiWmcsVkoodql6RiaK8

9RCnCzLSmkP/TH5pi4JYTElxKJDV6Yn1eYNYXnHL2uJraSPTxPkPVHmgwdsB7Ljdz/nC

+FwhRNkIr9B0QrauLI8fUuqJW2CV8S/wQSTn4q0dzrJXpMo7WCtxLO3StzQEZ0kjQEIg

ojPA==

X-Forwarded-Encrypted: i=1; AJvYcCXLqC4OOS7CPvn3ecle8/eRFKPhGNp2gXJQFbx+6ute1NLEwSCOlRiJ/q3B9nb3TVi4EKZGQQ==@nk.ca

X-Gm-Message-State: AOJu0Yzp0WtDQ6RfL0z4aCVI7uuDPZlzNNB5sHE0UU6WewMhmdMLkga2

b9OQsKm8NPwndsFrf7Tu7XUMSlmwS/iyCEYSH7s/INTbLGzk60NoSCTl+HhkbFHkMRrviIveZqK

dXXHEsMSSR3R9i9jioFOEthVnAEEblRQ=

X-Gm-Gg: ASbGncuk2KQ+gtlJw6Xad4nXtxMPu7zUSYvrRNR5NRDgzAI0+G6Tv4FiywyzvaBCe/u

Q/5Oc2fzv8F0Skl3U4PwNzlzIRnZo+ZAV6V8xHUjh8LY2sKfdRHzmNiUOfNA0CZEgTrExamW2vT

zoOGunj9Rzkd42QMYBxqc7FtKRz/KivVBq7G5Tj6Ear0zLH2URVx+3ycnF1k9aYzkUP8ZiCqAic

Szjw6OiOnEKgBNZFg==

X-Google-Smtp-Source: AGHT+IH6WK9FPkji1oe+82knCDgzTtr/KOZdor1+QlL5lpnrqbAgRT7eYJuHXztdJgxChhqkjW76cdep4niSHRFAwVA=

X-Received: by 2002:a05:600d:2388:b0:455:bd8a:7e7 with SMTP id

5b1f17b1804b1-455bd8a0a0amr16692595e9.9.1752245815250; Fri, 11 Jul 2025

07:56:55 -0700 (PDT)

MIME-Version: 1.0

Reply-To: davidsmith202025@outlook.com

From: "David Smith."

Date: Fri, 11 Jul 2025 07:56:43 -0700

X-Gm-Features: Ac12FXwgvNsZtpGfPEHGoQbsU591Ud8yainQngECK5ebtsSw7ok5WXt9TBs9-gU

Message-ID:

Subject: Good Day,

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000060972b0639a88584"

Bcc: sales@nk.ca

X-Spam_score: 11.2

X-Spam_score_int: 112

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Good Day, Respond back Via this email Address: davidsmith202025@outlook.com

How are you doing today? My name is David Smith, I live in the United Kingdom

and work with NatWest Bank UK.I am glad to be connected with you. I have

a business proposal I would like to discuss with [...]



Content analysis details: (11.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.45 listed in dnsbl.ahbl.org]

[209.85.128.45 listed in dnsbl.ahbl.org]

[209.85.128.45 listed in dnsbl.ahbl.org]

[209.85.128.45 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.45 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.45 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.45 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.45 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.128.45 listed in will-spam-for-food.eu.org]

[209.85.128.45 listed in will-spam-for-food.eu.org]

[209.85.128.45 listed in will-spam-for-food.eu.org]

[209.85.128.45 listed in will-spam-for-food.eu.org]

[209.85.128.45 listed in will-spam-for-food.eu.org]

[209.85.128.45 listed in will-spam-for-food.eu.org]

[209.85.128.45 listed in will-spam-for-food.eu.org]

[209.85.128.45 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.128.45 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.45 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[davidsmith202025(at)outlook.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[kingsleyobi516(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[kingsleyobi516(at)gmail.com]

0.6 J_CHICKENPOX_27 BODY: 2alpha-pock-7alpha

0.0 HTML_MESSAGE BODY: HTML included in message

3.0 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

Subject: {SPAM?} Good Day,



--00000000000060972b0639a88584

Content-Type: text/plain; charset="UTF-8"



Good Day,



Respond back Via this email Address: davidsmith202025@outlook.com



How are you doing today? My name is David Smith, I live in the United

Kingdom and work with NatWest Bank UK.I am glad to be connected with you. I

have a business proposal I would like to discuss with you in private. It

involves a business opportunity that will be of huge financial benefit to

both of us.further details will be shared after I receive your

response.Kindly reply with your full name and your country of

Origin/residence,



Yours Truly,



David Smith.

Operational Manager



--00000000000060972b0639a88584

Content-Type: text/html; charset="UTF-8"







Good Day,

Respond back Via this email Address: davidsmith202025@outlook.com

How

are you doing today? My name is David Smith, I live in the United

Kingdom and work with NatWest Bank UK.I am glad to be connected with

you. I have a business proposal I would like to discuss with you in

private. It involves a business opportunity that will be of huge

financial benefit to both of us.further details will be shared after I

receive your response.Kindly reply with your full name and your country

of Origin/residence,

Yours Truly,

David Smith.
Operational Manager















--00000000000060972b0639a88584--

Web/SEO/App Spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 11 Jul 2025 09:40:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uaFqW-00000000Pnt-1Hvy

for dave@doctor.nl2k.ab.ca;

Fri, 11 Jul 2025 09:39:32 -0600

Resent-From: The Doctor

Resent-Date: Fri, 11 Jul 2025 09:39:32 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f176.google.com ([209.85.210.176]:58823)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uaEEQ-00000000NaG-1tRG

for root@nk.ca;

Fri, 11 Jul 2025 07:56:25 -0600

Received: by mail-pf1-f176.google.com with SMTP id d2e1a72fcca58-74924255af4so1853075b3a.1

for ; Fri, 11 Jul 2025 06:54:11 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1752242044; x=1752846844; darn=nk.ca;

h=content-language:thread-index:mime-version:date:subject:to:from

:message-id:from:to:cc:subject:date:message-id:reply-to;

bh=G8EtZdI8h+hFgGfRXEPMO+M1oVpa3V01vaYE9MDU47A=;

b=isHLt6SmFp6KdaV8UEy9fEHs2d1kKp0zlz1wXDEGxv6rFtw/nqz98qAUvtduJDZNmE

zXncTJhESROKmpjU+QVFIWWbU0d6m3MGo47x2xUWBw5UG41kjjWheaAd4LUKNdOcT8Wp

oNS8ZeJqFS3mnfsEM8RgNQ/eEQzm0CVS3gBios+OzgefAmrBaS5BUe6Pyv8mpYnxFrrG

Iy052PqWlD3gGedg/4PVvhH2cCR0bU2EPvR7s2crcF3hEClPa0NJuTRepNKbQfJhyYYQ

EUbuVXkJnGAQeUYuRTbt3eFNHp8bgvZhoccWzoI+WWcdYCcOjXsJV7lFt3O0wLcmohF7

+tAQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1752242044; x=1752846844;

h=content-language:thread-index:mime-version:date:subject:to:from

:message-id:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=G8EtZdI8h+hFgGfRXEPMO+M1oVpa3V01vaYE9MDU47A=;

b=odDpnXmQFR5pTEU0z5IlQm3bkLX5PY7e1HUtPl9foCu6AVcLvXHCOGIozd6ZSDIa4s

VdHDiiMXNAyWX7W2h/jJYFPIrgln1tMzaZ3tQtykNknboOW2unSAUydsYfpgpTcBRUwm

8rukuO2jJ/XB7UiG8tg46/4NfuDZDKNES7bzcy41rK97Cr/3iuZMY/OMGD9kPfQSYurY

J/wWYAS68YEvKT4jyW1mHWQD7By+w4TjOLjbBZMFKp6nd7kYgDWCb/sR2CxLvpqlHi/M

qJ73Q+bwozFxkMfpJD6AdpY9uVQdu0Nbvowh+LNRdK/JygdT2RlXuOYj67Azw6rvp7TG

lYkw==

X-Gm-Message-State: AOJu0YwZ+fLCZ7ipkPcgI0IDPsP7ORHygP3ZigFQ9oYb0gGcK8t+9++H

VjmU5XpsJLne9Oh02L+88sVeI4OYbZ5JkMwir2RiiH4lozxn9ZZOK88xny4LQlPL

X-Gm-Gg: ASbGnct3f3dwJRqbB0W05AsHpIkOUvoDM5780ByQKfrktokysIPJfr9xFJNYcMawH1O

5UzZsOlsyvbjPlv97lcPsE4wmsqT5VSPnjj/s+bnshpe8THC7xq92XMk0Ogy+VxqXA/NmiR4aFc

LwRvHPA86xj2biYM9TGX3/PjznEYmjUCqpoBwN54mw04TNcSbRl6VhFcnVfJprv4UCC1Z337R4H

nJyEYSU38F2DsGfr6BX7A04Jr3PHqxQtEUgJWkVUMpa/fJYIAn/AEu5rPUdi4wkktiyYdt+QIhw

9mEfEy3KYlKsFs936auKbOegpgm1dxMQZN4AF6gCYkA5g7lavuIl6vfqOW/Dc8MsA9GSdwYNgY9

ZKLJW2hH8ZqqFmewmxVqHdTdvOf3LPkbi1AO7g6a6pMvl4g==

X-Google-Smtp-Source: AGHT+IEzCj86vXFDX108JH/JHUKdf7j6Jg6ZlV7RsiAth7K+1WCNufDe9YdcRrk5IMvOzWTiOL1gVQ==

X-Received: by 2002:a17:90b:4a0a:b0:311:ea13:2e70 with SMTP id 98e67ed59e1d1-31c4f4ccca2mr3983357a91.14.1752237816600;

Fri, 11 Jul 2025 05:43:36 -0700 (PDT)

Received: from PC ([2405:204:138c:d3f6:ad84:36a6:306e:29dd])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-31c301ceacbsm8188975a91.42.2025.07.11.05.43.34

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 11 Jul 2025 05:43:35 -0700 (PDT)

Message-ID: <687106f7.170a0220.20ec2b.d536@mx.google.com>

X-Google-Original-Message-ID: <142301dbf261$6b272a80$41757f80$singh295gmail.com>

From: "Avantika Singh"

To:

Subject: App quote.

Date: Fri, 11 Jul 2025 18:12:25 +0530

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_1424_01DBF28F.84DF6680"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: AdvyYSjh/ZWn1FwhSMK4dM2WgjGA5Q==

Content-Language: en-us

X-Spam_score: 5.3

X-Spam_score_int: 53

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello root@nk.ca, Are you looking to develop a mobile app

that matches your business model?



Content analysis details: (5.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.176 listed in dnsbl.ahbl.org]

[209.85.210.176 listed in dnsbl.ahbl.org]

[209.85.210.176 listed in dnsbl.ahbl.org]

[209.85.210.176 listed in dnsbl.ahbl.org]

[2405:204:138c:d3f6:ad84:36a6:306e:29dd listed in]

[dnsbl.ahbl.org]

[2405:204:138c:d3f6:ad84:36a6:306e:29dd listed in]

[dnsbl.ahbl.org]

[2405:204:138c:d3f6:ad84:36a6:306e:29dd listed in]

[dnsbl.ahbl.org]

[2405:204:138c:d3f6:ad84:36a6:306e:29dd listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.176 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.176 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.176 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.176 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2405:204:138c:d3f6:ad84:36a6:306e:29dd listed in]

[will-spam-for-food.eu.org]

[2405:204:138c:d3f6:ad84:36a6:306e:29dd listed in]

[will-spam-for-food.eu.org]

[2405:204:138c:d3f6:ad84:36a6:306e:29dd listed in]

[will-spam-for-food.eu.org]

[2405:204:138c:d3f6:ad84:36a6:306e:29dd listed in]

[will-spam-for-food.eu.org]

[2405:204:138c:d3f6:ad84:36a6:306e:29dd listed in]

[will-spam-for-food.eu.org]

[2405:204:138c:d3f6:ad84:36a6:306e:29dd listed in]

[will-spam-for-food.eu.org]

[2405:204:138c:d3f6:ad84:36a6:306e:29dd listed in]

[will-spam-for-food.eu.org]

[2405:204:138c:d3f6:ad84:36a6:306e:29dd listed in]

[will-spam-for-food.eu.org]

[209.85.210.176 listed in will-spam-for-food.eu.org]

[209.85.210.176 listed in will-spam-for-food.eu.org]

[209.85.210.176 listed in will-spam-for-food.eu.org]

[209.85.210.176 listed in will-spam-for-food.eu.org]

[209.85.210.176 listed in will-spam-for-food.eu.org]

[209.85.210.176 listed in will-spam-for-food.eu.org]

[209.85.210.176 listed in will-spam-for-food.eu.org]

[209.85.210.176 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.176 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.210.176 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[avantika.singh295(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[avantika.singh295(at)gmail.com]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} App quote.



This is a multipart message in MIME format.



------=_NextPart_000_1424_01DBF28F.84DF6680

Content-Type: text/plain;

charset="us-ascii"

Content-Transfer-Encoding: 7bit







Hello root@nk.ca,







Are you looking to develop a mobile app that matches your business model?







We provide:-



1. Taxi booking mobile app



2. Travel and tourism App



3. Tour operator mobile App



4. Airport taxi mobile App



5. Chauffeur service App



6. Transport and logistics App







If you are interested in growing your business with any of these services

then please send me your Reference app. I will forward you our price &

Samples accordingly.







Best Regards,



Avantika Singh





------=_NextPart_000_1424_01DBF28F.84DF6680

Content-Type: text/html;

charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">






charset=3Dus-ascii">




















style=3D'font-family:"Kalinga","sans-serif"'> 

=






style=3D'font-family:"Kalinga","sans-serif"'>Hello =

root@nk.ca,






style=3D'font-family:"Kalinga","sans-serif"'> 

=






style=3D'font-family:"Kalinga","sans-serif"'>Are you

looking to develop a mobile app that matches your business =

model?






style=3D'font-family:"Kalinga","sans-serif"'> 

=






style=3D'font-family:"Kalinga","sans-serif"'>We

provide:-






style=3D'text-indent:-.25in;mso-list:l0 level1 lfo1'>
!supportLists]>
style=3D'font-family:"Kalinga","sans-serif";background:yellow;mso-highlig=

ht:yellow'>
style=3D'mso-list:Ignore'>1.
Roman"'>     


style=3D'font-family:"Kalinga","sans-serif";

background:yellow;mso-highlight:yellow'>Taxi booking mobile =

app






style=3D'text-indent:-.25in;mso-list:l0 level1 lfo1'>
!supportLists]>
style=3D'font-family:"Kalinga","sans-serif";background:yellow;mso-highlig=

ht:yellow'>
style=3D'mso-list:Ignore'>2.
Roman"'>     


style=3D'font-family:"Kalinga","sans-serif";

background:yellow;mso-highlight:yellow'>Travel and tourism =

App






style=3D'text-indent:-.25in;mso-list:l0 level1 lfo1'>
!supportLists]>
style=3D'font-family:"Kalinga","sans-serif";background:yellow;mso-highlig=

ht:yellow'>
style=3D'mso-list:Ignore'>3.
Roman"'>     


style=3D'font-family:"Kalinga","sans-serif";

background:yellow;mso-highlight:yellow'>Tour operator mobile =

App






style=3D'text-indent:-.25in;mso-list:l0 level1 lfo1'>
!supportLists]>
style=3D'font-family:"Kalinga","sans-serif";background:yellow;mso-highlig=

ht:yellow'>
style=3D'mso-list:Ignore'>4.
Roman"'>     


style=3D'font-family:"Kalinga","sans-serif";

background:yellow;mso-highlight:yellow'>Airport taxi mobile =

App






style=3D'text-indent:-.25in;mso-list:l0 level1 lfo1'>
!supportLists]>
style=3D'font-family:"Kalinga","sans-serif";background:yellow;mso-highlig=

ht:yellow'>
style=3D'mso-list:Ignore'>5.
Roman"'>     


style=3D'font-family:"Kalinga","sans-serif";

background:yellow;mso-highlight:yellow'>Chauffeur service =

App






style=3D'text-indent:-.25in;mso-list:l0 level1 lfo1'>
!supportLists]>
style=3D'font-family:"Kalinga","sans-serif";background:yellow;mso-highlig=

ht:yellow'>
style=3D'mso-list:Ignore'>6.
Roman"'>     


style=3D'font-family:"Kalinga","sans-serif";

background:yellow;mso-highlight:yellow'>Transport and logistics =

App






style=3D'font-family:"Kalinga","sans-serif"'> =






style=3D'font-family:"Kalinga","sans-serif"'>If you are

interested in growing your business with any of these services then =

please

send me your Reference app. I will forward you our price & =

Samples

accordingly.






style=3D'font-family:"Kalinga","sans-serif"'> 

=






style=3D'font-family:"Kalinga","sans-serif"'>Best

Regards,






style=3D'font-family:"Kalinga","sans-serif"'>Avantika

Singh
style=3D'font-family:"Kalinga","sans-serif"'>

















------=_NextPart_000_1424_01DBF28F.84DF6680--

Web/SEO/App Spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 11 Jul 2025 07:48:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uaE5h-00000000GDF-1KEM

for dave@doctor.nl2k.ab.ca;

Fri, 11 Jul 2025 07:47:05 -0600

Resent-From: The Doctor

Resent-Date: Fri, 11 Jul 2025 07:47:00 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19013077.outbound.protection.outlook.com ([52.103.74.77]:25401 helo=SEYPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uaCso-00000000D9B-3Nlc

for sales@nk.ca;

Fri, 11 Jul 2025 06:30:08 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=urwtFm0f6MJJEMnrMMSFcxNc4qmPcJTpCeY2TF9Q1fnPG2BtzRkI3NP8R8cLEzIvYgI91fPZ46EoeR0jUhZvUxLrdFIfx475erOQ5Z3GdCYcyXLel9mnpf/GDx2a/nOxcSpnvgFINmsbShLolrXfC5sla7mZ9dAfbV4r0DQ648000e3ara7hf8eqgWRfEjtrYHD+neVxPMGybyOmj8ootyq5e5IdUMuaO+LS37m/+h9rD35YV1qPBYtFDJp+iZD/P2qFbdSH+mc0BJ9JHK7dAsdi7GRJY6v3twWKcTZV6hfYwP+Cmnt65tK3SKYGqKJG26eA7xzm7JdHo0nIR9Bg7Q==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=ifHR8fWP1S+2ytVG0wQ1neubYqTfK9DWxDcBIcaDE7U=;

b=FBk2Q9p517E3ZAN4soxfk+rvPS5l2fTO+PEZtX6HwT+DanDjMr5ytA6eBmPu+jfSQ13MsxT/7tVMFgZ/Gn38PwXK4rtp05PSQC0NPtzAgDKzChE6KuGtH2Z/O2aG6FeTMQbFkhEJ9grWGIDS1WvOX5cJrzHNmnne454bCxuJO40f7TsbqBK2HMH5MwwR0NWTPpDYdkmzIPfrlI++0sAOt/3PrRhnne+6wbijJ6SMc31zZuatlcy5Sz+EDP7UZSdeuGQWiGIRCTOg9FEuFxICEupIAuKQTGmUQwobOpQLyXd7/I/hReFMfABzaVD1ISzKdJEgeSGvSSnGI15Jk9B/YQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=ifHR8fWP1S+2ytVG0wQ1neubYqTfK9DWxDcBIcaDE7U=;

b=VNJIvvKlix0URKl3e4vgUR7ISoaJXf4fM3txYJdkjXDzKFTpZP15CZTPBpFTQYn/mw2nafqnsnXSCeD1Nip/KcpXsWoDGudE3Jx2uJ21SlvrHDbiRBgY49b97Wp3uZDgVKWb6srbKvuv2jLH/t6C7ij6goxL1hYmXEvsxVW+72A1RFlvvoCSslIrDMu6WhKDeve2M25OSFnm1OYzqX/FD/yfIV8orLdcfa11PNbnnwlTioTmpLmfy5jxzInja4G1XPBbPxqeOyBym/gcmObwAO+sYgeymjr9/NxXUEqIlPR4M53lSgHGxmkRJaFx7o7I68u1W/WUds5cJUb4ciBtiA==

Received: from TY0PR06MB6801.apcprd06.prod.outlook.com (2603:1096:405:12::5)

by SEZPR06MB5589.apcprd06.prod.outlook.com (2603:1096:101:c9::7) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8901.26; Fri, 11 Jul

2025 11:46:13 +0000

Received: from TY0PR06MB6801.apcprd06.prod.outlook.com

([fe80::58da:64b:90ab:ea65]) by TY0PR06MB6801.apcprd06.prod.outlook.com

([fe80::58da:64b:90ab:ea65%4]) with mapi id 15.20.8922.023; Fri, 11 Jul 2025

11:46:13 +0000

From: Prince dubey

Subject: Re: SEO Pricing

Thread-Topic: SEO Pricing

Thread-Index: AQHb8ZGaxRPsJNv6/E6+DRK6buixI7QrQMpEgAGOt1M=

Date: Fri, 11 Jul 2025 11:46:13 +0000

Message-ID:



References:









































































































































































































In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TY0PR06MB6801:EE_|SEZPR06MB5589:EE_

x-ms-office365-filtering-correlation-id: 0ea31bd3-0cf6-4f99-28b3-08ddc070896b

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|15030799006|461199028|7071999006|15080799012|56899033|102099032|40105399003|51005399003|3412199025|39105399003|440099028|51015399003;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?2UcxIgrRbDpXsTbjwAhvw8BeUWede7qUlM9KmbpMjEpVcHpQqyLDn6A8Z3?=

=?iso-8859-1?Q?FVoVJYkqjyAAVbFKoE9vnPtKgAIyqYF5nYmKkkyDjmezCzmzUHRxXQco51?=

=?iso-8859-1?Q?ten4pPqh8dqI+npRVTjmrTUSViK4D18UnCGOuixd2ii/ltei4GpCUkgd8j?=

=?iso-8859-1?Q?J6p77KnKC0VlWyFs1lD/pmytwzQ4pVa43CBThg1RHEB/nezGT2n+8XlJm7?=

=?iso-8859-1?Q?a8HLJpb2TzZmpSRp091vTL5Dr/lhLSxGC1xeSKhNHhfn69SSdooJ52QEIy?=

=?iso-8859-1?Q?/633HCr40nB+xUbHDvD6E6MOChGbyazRw7lTC83tL79PQDVnRZLZplktt1?=

=?iso-8859-1?Q?5QqIOeeV8ecz11iQ/h2A1ubdm1lN112wCOonWLth3jYKOoqfRJdU2kyFdp?=

=?iso-8859-1?Q?6WQESjXrnYswLPsRgfJyfGzMCqDFsHURhGeeNjMK4/8S+DLu8v2tEUpr6W?=

=?iso-8859-1?Q?gtK3Db9IQv4BMovEjbWoV1J0LnqW//6QdWSM+z+cKgbmVk1GFpMsPgtXmV?=

=?iso-8859-1?Q?h3p7bouvEd2f1EywZppQMlW5t8znBTfzQIi5vjquAxKYpaMcGSJAFJw69f?=

=?iso-8859-1?Q?egWFvyOJcVxXy6KDtf10XIGKLqlV7fUusp2UDL5g4G7AW1tfID6K6WEvqq?=

=?iso-8859-1?Q?qNHC61Vvdr2lGEb00EgDmffMUFZWejYDL+oen5iSKdVnFVSov80c4zj4m/?=

=?iso-8859-1?Q?A0q2vSxtSpwEyreeZUMe6ODRb2Jg51PtY8x+OIOuAjz1ZCGRZzAwzXR+Zh?=

=?iso-8859-1?Q?42V4F9E0ncUmt8WDFpi+4L8FllL07HvyhLEOprexh6a8b9d5uHdFiDn3U9?=

=?iso-8859-1?Q?nmHYKEZQirL1rOHQbHsu6w6vX8MmsQQePFFCPQjVOZkMOPI1x25jr7UBkU?=

=?iso-8859-1?Q?228Cum6LxfcTZDZNfh4AzCI1K84QOZKrg7drRrtIInjFYBHYCZHC62l+c7?=

=?iso-8859-1?Q?4/nqOH50pi1C3y5Scw0gSTHD/tbkVXvDuzhPxerZz2qHYqBftLuegA21nu?=

=?iso-8859-1?Q?3V/Dy6toe4vGi0r5qenSJ6VUVF2BfGL5+fFFwo/3esILBO1A9zMOoom5yV?=

=?iso-8859-1?Q?DF09o8Ti010n6XuvBuTGxyLQUlsiHUC0mOw8jDd2iGUfleD0PCf7xc6yhE?=

=?iso-8859-1?Q?vAd0Us6C9A/SisSrbmZzcVn0wG8d4f0h3/5PVvlVTqQJFcoal5OIQPWZ6V?=

=?iso-8859-1?Q?TV78BRTmzBHslgXd9GpnISS4VyF33RWg5zc=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?PisDNgTTnl9M/F9zUjEFK5SHpUOgSaFoylbcHSaNIa5NwbAObAtLR2H6CS?=

=?iso-8859-1?Q?YqAeUqrzlkucQaCxB0kW0gYnQvn9IxqQN/J7m3YiWqWkX+JgauTcOxNdVz?=

=?iso-8859-1?Q?oyFlkZEyhk+6dU97XLNLhi8GIO7/iAI4g+UQ8eEhehj9PVyjFgzMaljbEY?=

=?iso-8859-1?Q?XSkeqx/OFuC9nnerQcch+K2GjsXTMEj3NiKCeb9B09GbuXSrVTuC0v/bLc?=

=?iso-8859-1?Q?x7wAwrOJHXG67PVue85ytaH6FzFcPuMFEaLr/VEZ4ruOj7DHWiNms0aaYX?=

=?iso-8859-1?Q?0Uf0bIX3RhaKbbG0DvN9S5DCtOFapY5A0G7YQbXEupnza1jg16VJ1SLke/?=

=?iso-8859-1?Q?TTBxBqwDjHVYNPnEtQG4dYuVXBIFNgAjY864gsQBioYRhws+N7ZWIGS6Xv?=

=?iso-8859-1?Q?ac0akrk+5o3Edsr6TRiGU4OhMxZ5rNn3rsLs7T6e4d7xiV3XsTSv8x35Mm?=

=?iso-8859-1?Q?4a8/Uko/4kYhIhSFkts0hjaRkg06TmBm9FR3MK0xTmtjDuuMCatOWUwDwl?=

=?iso-8859-1?Q?/BkCD+OuKzQ1UevyId/UmKhdsbgGTznjZCOtkMREHi7hu3PhqX/19Ma9cI?=

=?iso-8859-1?Q?KfO3egyYmsBgR8DC8uKki/jpg+gOp2jJb9I/iRUDd7Af5l6wJcSdY3vocI?=

=?iso-8859-1?Q?8t6adxeZErA7jSo7AwfZqS8IrOMWhHmaPT99Ypf90Y0Fhf6Tc+p51zOYzR?=

=?iso-8859-1?Q?02SNJO2j6t/ByeGok2oTb1YZPHGeA4xyeY61v+HdKHVqtLLYvQoeYm7yiq?=

=?iso-8859-1?Q?sfHEYFt+Nf9OYV5Uq9MNWENJ2jHNSW1eWmtGRAafP970p6grWC4NUJOIYe?=

=?iso-8859-1?Q?TxGKFWhpyv0p/v/MyoR+c5QznpsIEV4xG++4oP1kTv7iFwsNMrDvVd6ubw?=

=?iso-8859-1?Q?uA89utuCJXhToQJSGDAG4dGOSfPxJZX8LPVVCmdW/eqdMlF9sliVImo0OC?=

=?iso-8859-1?Q?XOglw7iVZJ1F6FlO8C1eU8c8x1oQnRbs0Qzj0sg4toom8YLmXOufaJ3m+2?=

=?iso-8859-1?Q?LRd1uPSbcUnLz3cSgvIRJa5aiUMiRfU8NNNazhTu7r/v4mNRpVZZ4tjBjn?=

=?iso-8859-1?Q?WkG2UGpKfEUqMfsTeQGgmgGmNZQPJbFW0QZ7JGmN2Rd03bBjH633Xo6Klu?=

=?iso-8859-1?Q?QdCoSkqaFVbcOMnjNoSmosPdRxAl7ORci5lnR8z82TB511jYGqH9heXabi?=

=?iso-8859-1?Q?PsnGmBb6TKO6jbsOjifXYz26UwVYkSflLPl3871+VBTCFHDnMIt4d6KQz4?=

=?iso-8859-1?Q?kLABduUYck0xy8pcFvsv7selglJPy56yJvYYcrrAmiEgbTP2DII7l3xq1T?=

=?iso-8859-1?Q?Im/UNBYSFrItzi8buOp6nfNuCmhT9rQIC4lkED4ar1282WQciiO1oiJsoP?=

=?iso-8859-1?Q?/LTAfgcEgb?=

Content-Type: multipart/alternative;

boundary="_000_TY0PR06MB6801A494E121B7E46A96CB48FD4BATY0PR06MB6801apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-8534-20-msonline-outlook-6a509.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TY0PR06MB6801.apcprd06.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 0ea31bd3-0cf6-4f99-28b3-08ddc070896b

X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Jul 2025 11:46:13.0418

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR06MB5589

X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I am still waiting for your reply. Please let me know

if you are interested in my service



Content analysis details: (8.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.74.77 listed in dnsbl.ahbl.org]

[52.103.74.77 listed in dnsbl.ahbl.org]

[52.103.74.77 listed in dnsbl.ahbl.org]

[52.103.74.77 listed in dnsbl.ahbl.org]

[2603:1096:405:12:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:405:12:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:405:12:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:405:12:0:0:0:5 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.74.77 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.74.77 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.74.77 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.74.77 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:405:12:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:12:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:12:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:12:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:12:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:12:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:12:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:405:12:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[52.103.74.77 listed in will-spam-for-food.eu.org]

[52.103.74.77 listed in will-spam-for-food.eu.org]

[52.103.74.77 listed in will-spam-for-food.eu.org]

[52.103.74.77 listed in will-spam-for-food.eu.org]

[52.103.74.77 listed in will-spam-for-food.eu.org]

[52.103.74.77 listed in will-spam-for-food.eu.org]

[52.103.74.77 listed in will-spam-for-food.eu.org]

[52.103.74.77 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.74.77 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.74.77 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[princeseoservice5(at)hotmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[princeseoservice5(at)hotmail.com]

0.3 SPECIAL_OFFER BODY: Special Offer

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

1.0 MR_DIFF_MID No description available.

Subject: {SPAM?} Re: SEO Pricing



--_000_TY0PR06MB6801A494E121B7E46A96CB48FD4BATY0PR06MB6801apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hello,



I am still waiting for your reply.



Please let me know if you are interested in my service



Thank you

________________________________

From: Prince dubey

Sent: Friday, February 28, 2025 2:52 AM

Subject: Re: SEO Pricing



Hi.

Greetings!

This is offered for your website to get on 1st page on Google.

And increase the number of leads and sales you are getting from your websit=

e.

Special offers to this season!

Kindly let me know you are interested, I will send you, our SEO Packages an=

d price list.

Thanks & Regards













--_000_TY0PR06MB6801A494E121B7E46A96CB48FD4BATY0PR06MB6801apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hello,  

































g">



wdMsg">



vRplyFwdMsg">




x_divRplyFwdMsg">




x_x_x_divRplyFwdMsg">




x_x_x_x_divRplyFwdMsg">




x_x_x_x_x_x_divRplyFwdMsg">




x_x_x_x_x_x_x_x_divRplyFwdMsg">




x_x_x_x_x_x_x_x_x_x_divRplyFwdMsg">




x_x_x_x_x_x_x_x_x_x_x_x_x_x_divRplyFwdMsg">




x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_divRplyFwdMsg">




x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_divRplyFwdMsg">




x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_divRplyFwdMsg">




x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_divRplyFwdMsg">




x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_divRplyFwdMsg">




x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_divRplyFwdM=

sg">




x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_div=

RplyFwdMsg">




x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_d=

ivRplyFwdMsg">




x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x=

_divRplyFwdMsg">




x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x=

_x_x_divRplyFwdMsg">




x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x=

_x_x_x_divRplyFwdMsg">




x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x=

_x_x_x_x_x_x_x_x_x_x_x_x_x_x_divRplyFwdMsg">




_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

I am still waiting for your reply.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

 



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Please let me know if you are interested in my service



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

 



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Thank you





x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x=

_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_divRplyFwdMsg">


11pt; color: rgb(0, 0, 0);">

From: Prince dubey


Sent: Friday, February 28, 2025 2:52 AM



11pt; color: rgb(0, 0, 0);">

Subject: Re: SEO Pricing 


 





-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica=

, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hi.



-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica=

, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Greetings!



-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica=

, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

This is offered for your website to get on 1st page on Google.



-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica=

, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

And increase the number of leads and sales you are getting from your websit=

e.



-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica=

, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Special offers to this season!



-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica=

, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Kindly let me know you are interested, I will send you, our SEO Packages an=

d price list.



-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica=

, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Thanks & Regards



-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica=

, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







nt-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helveti=

ca, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Hel=

vetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Hel=

vetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">












--_000_TY0PR06MB6801A494E121B7E46A96CB48FD4BATY0PR06MB6801apcp_--

Web/SEO/App Spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 11 Jul 2025 07:45:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uaE3A-000000006qq-2t67

for dave@doctor.nl2k.ab.ca;

Fri, 11 Jul 2025 07:44:28 -0600

Resent-From: The Doctor

Resent-Date: Fri, 11 Jul 2025 07:44:28 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-francecentralazolkn19013080.outbound.protection.outlook.com ([52.103.46.80]:56907 helo=PA4PR04CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uaALJ-000000005dU-0HTB

for sales@nk.ca;

Fri, 11 Jul 2025 03:49:13 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=KktorbvavlapFPU/039oohA0X3+rXIeg1zcdZTnCOjaWC12rkMJcNW6rz+ihOdB1hfdF3Jq8WBT1Cv/xVg9wtZDZ0gdJlfC+FylcDbSga/SddNqqV3DflP+fiXmrzPaYd7IQyqQbITwgdpSzYNEmGuMOAgdAF28TPlzJubQoScw9lI5ilr+Pd7v2Cv4Ur4skZfP9FD6LZgI5M/nDFj5+8oRoEpIWEMhc0/GOgvsK50451wMNn/dtRYnlKhtEMXGsGzqgMWDaoDXVDT9iXy8ywOYljLo3kEYmmSTAlPYSG+UfZcatmiT/Id5SRTlhVZuD9QnBLD/SiVh+HOLIXUK9oQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=Bif3KrNswlM7xROEg98UQgsoEqvrXGXyswh7W9T6x3I=;

b=qb3TlFnHyv6hhZhutJn154gVONYWXbuz0JBFXaIILHkb708v1OU8q9ZTROze38MsuTCeahYXoBkgklicOBEPgzP7WWy1VHPD+Rk7smIFR3JmRLnaljlOG4T2ONpX/P2DT40K6O5jIcARk6OH4W6KykPDK82lTPkxtRdBam/jgqOXiyyAKdE7hQzwc4Jgl/SmNzTUgkMR7Zw86P9HAkQ4reMRtT34sZJjqmJiKckuX6gOCS2P6gPt7QvO8p0fjSp6cSWC2DEjp4Hj9MbvdFNEbc177YB1M+oJ5w/7qVd9qTc28bG+3qpeXNX5HV/eCSbSYrK7oDFCSNUVVae54DK0Iw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=Bif3KrNswlM7xROEg98UQgsoEqvrXGXyswh7W9T6x3I=;

b=PlcFIRjtfnye6J2GnaCnmwx476LyJQ12UtqE1DLzvzxeknk7yCgRs8xnz7UOeT7POmqlGv24IAi//V8SjEMXQA2JIGtWvgqpuFYWeyescIuWjBtdzJH5adORyTCKtPGa3A44Q6BpApGOoHeTrSyqK3ecMCbyQQw+7lGEgqguiKzhc3WI6aO+Nk2/o8HtNao4XRBf5Y9dpZjUtsI8zoIVwdM2vp1ySiD2uDaMEWp7yG4pVV6F8QAQ1QiHV8D2lzc1HmVWM2tOnYO0Cqu0i8ZOJGhdcx9kTQAUxaU2F2GYUHPzxvVaFRmYhUH2IiOaPXxXyC22CXPtDQqVPfW/pgBRWQ==

Received: from DB3P189MB2329.EURP189.PROD.OUTLOOK.COM (2603:10a6:10:43e::12)

by AM0P189MB0626.EURP189.PROD.OUTLOOK.COM (2603:10a6:208:199::8) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8922.25; Fri, 11 Jul

2025 09:44:51 +0000

Received: from DB3P189MB2329.EURP189.PROD.OUTLOOK.COM

([fe80::759a:261a:7706:e970]) by DB3P189MB2329.EURP189.PROD.OUTLOOK.COM

([fe80::759a:261a:7706:e970%6]) with mapi id 15.20.8901.024; Fri, 11 Jul 2025

09:44:51 +0000

From: Albert Miles

Subject: Budget SEO Services

Thread-Topic: Budget SEO Services

Thread-Index: AQHb8khtHv87Xcq1gEKx5YhH/kykxA==

Date: Fri, 11 Jul 2025 09:44:51 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: DB3P189MB2329:EE_|AM0P189MB0626:EE_

x-ms-office365-filtering-correlation-id: 0eb52729-ac91-456c-0b5d-08ddc05f9519

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799012|15030799006|461199028|7071999006|39105399003|40105399003|41105399003|51005399003|39145399003|440099028|3412199025|102099032|3430499032;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?czgYEx8k0jKnGx8paIdkTz4aDcX4s9dhkWRiXo+0/nzHmarm0mvulyQL?=

=?Windows-1252?Q?x7UeDGj77/qY5sN65xLjKBEjpV5ZSslHbw6jYCUqTVYFoxMKU8QjSwgF?=

=?Windows-1252?Q?jPCKeh/DXdfwBfjAcuMYRlm/GBs8tTqZTOjwnqG1YTq2j+xQi9q/U1IC?=

=?Windows-1252?Q?HV14GJ1hb3qJgTLZufQeNYgpWn3voeM8O9o6qrvrDMRD/qPBTlzoOLDK?=

=?Windows-1252?Q?7GYAPYzqWA2Bzms9rKNw7XqbsgeN/vYI/KJdzH1OuJ/mZJgrnU0HR7i4?=

=?Windows-1252?Q?VW6ZnaxDGSqYqhNnveSXlsGA0f1+Y6kfuMA/WdHqG0i45OLOVewdv/qV?=

=?Windows-1252?Q?AsJt1GhLRbvZBMWz+a/sRNywPsdXmK1DAz5TYCZWSDTTr5xEll0bQIYL?=

=?Windows-1252?Q?4vsuhIYlj7jKnyu78cSwQ2gVtHgiI2NvwcdYiAXaVZh56fI1OGS7HmCm?=

=?Windows-1252?Q?R4NR7Y/oSeHsrVga3JGQGx/kheMsxhwY9neK8XdYbhRxRpG0/FosStRG?=

=?Windows-1252?Q?/zXnhjCgAjZEzbFuZmKDpAZpEd/6dIA4uQRd6Lg+U49GDnwwlTwxTwf6?=

=?Windows-1252?Q?Oftd0ZjdRj2g9KOSlUSBf+UY/YAGWsc5ND2mx0w4NS+gHE+P2P8IZrGP?=

=?Windows-1252?Q?VKR9f8UAejFcbs9OcMqkz07SogijTDTFOHeYdIAKK6Q+MbSqLovp5lJI?=

=?Windows-1252?Q?IHQrGq5l/k98kpqIVt8LvSQZUJbvF69yGIEdX6hOpci4f5n+XS/D9I/9?=

=?Windows-1252?Q?5NwNo45J+AXvTr9bY48pwVewvkrzUOT/0H0S4OXmH/zscN293yeTXAGT?=

=?Windows-1252?Q?eusgJiRxaR1FFz7jDW7uzUAetRAGRcHjownxpOGpu+NBjYCtWpIqBE++?=

=?Windows-1252?Q?UdUojTBbTeuX9EDsgbMAxKbEelMu8LbHDdJv+UwbKWvOKpfoJQiRkQTB?=

=?Windows-1252?Q?V0ejUTvNZS6SkSGKlErPk6xI7+NpMtslaSHyifDPiNg3sDlsjyeVFQAk?=

=?Windows-1252?Q?wR01LQsRVEKCrFIRsC/BNyLOkCfJ7s+qcZL34FZdFhLHMuXHQG4UgN9L?=

=?Windows-1252?Q?UN+bFlUHULSZW2s+8TjGrYrAS+smSkU/v+bW+0FwBvRYCoxoAGY+asXb?=

=?Windows-1252?Q?kKBuMqS37A0PjsEgk/huBewDbgzZ/fe4ujv0YR9+BKSnGZt5Rd14jHD9?=

=?Windows-1252?Q?Oo9/C2zPV7r5j4rwJZaNDdK80XY9M+80dse93u+M2gmn5fk0pS4MZA8G?=

=?Windows-1252?Q?SRPIsjkaZdKIR8Plx3t/QhvEzk9WYkwPgLmFzJp3A6whg6hsUBPf9TF/?=

=?Windows-1252?Q?PBl33w=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?4fX4sZW3E7e780AeDT6k2ww5IN1+gH3PCPjte7ZaFcXuk5aWLASvBV9g?=

=?Windows-1252?Q?gUPdditvqNjqYHIC8L2K4Bd52yhyhkEUqA0ZhMI3r9UL3pXSLq0ehLsR?=

=?Windows-1252?Q?YmCYryJdYWhjijcl5c4mSLJAlcwBsWkbLLCH7V7WPGSyQfrH8kudL2WI?=

=?Windows-1252?Q?7t0weJAgPbeRXCEQfzIpb1j62KcL8V8fx4/9WRYayFnq4zsOAkH5XhDR?=

=?Windows-1252?Q?3BkAk7quZNpm3sLKOgSulvZ3YXSNvkAIlUT4Y1TTDxY7GtQGC+XcIQ2p?=

=?Windows-1252?Q?AYuGJgSpGSBlC5bE8l193whh7r4QCWtMuOxfDTaonEuK3CKZ+zsPpzeO?=

=?Windows-1252?Q?HZ1ZlgQgY3iXrRDhuHQNo0XSkZBsmjkx399+lDSca75IsTY7XW8AhBHq?=

=?Windows-1252?Q?duksyQ3m69/FLqFD+n9LtNxyfsMuHaHcKBoLOAXs7kvzclsQEK+X6Ls7?=

=?Windows-1252?Q?SYVzLZpJDK+Xx/+fsi8oAwWcjQub0+ZbNlq7TA7G0nEUGOGep9Jo9fAA?=

=?Windows-1252?Q?Zj3QMx6WVLSLNLR0H4rC5XeFBYqXyZn/oB17r7+IB+i5pjO1pdCfeMqv?=

=?Windows-1252?Q?2YU6PrKevA0nLT2hE2W2Rhma8+/p+tmR4LAY3wsc2Vug5Q10OKi9QSRR?=

=?Windows-1252?Q?53X3OFnhmtNEiQS6ZVVxJjH/NCYRePzpCZWdSsBsu7+357omn53zqaQP?=

=?Windows-1252?Q?bG/Dtu+GDaR7ar37pyKaD6bMbwfK+UybLLMYFM1MRsAhJOx+qLyVV2j3?=

=?Windows-1252?Q?vu1tSc8puoNhInB25j6ONjWLJeRGUfTBlzONqQKIXx9JMphoxgaZzBVz?=

=?Windows-1252?Q?VC9EjnQdmvYkfKZy+hS7ZZoabMiIZphSnDo+6jbHkmyOfNZ8vY7HC57U?=

=?Windows-1252?Q?qZhFQSYdZ7lotCxLOpAehRii9u2rBqpH7uVwUSsISM0XL7y+rY0kJBTL?=

=?Windows-1252?Q?mB8FkBVr75viJBQIprbvTlaMQJwTPCjioDePewN+VtFvBQgwvsJbReEG?=

=?Windows-1252?Q?d59mJ351fU2r8TRyt1ITkrQSoDcY9MmR6ARTihgd7HdRT4FRmz8O1d7C?=

=?Windows-1252?Q?ft5ZiRLzfBHMhBM0unyw4iJ+5vBJ0u5Ia3wF9z+pfufUlJVNKcpUsKN/?=

=?Windows-1252?Q?SSAbe0VSNGHf57wno06LAV2KzuRjgMXqcueF+BCRigofXy7GAxb36ciR?=

=?Windows-1252?Q?do3oz+dAptsw2N0K9KOR7/nyhgx5alrL/YeLmjKE8XUe144MXpbxYiyE?=

=?Windows-1252?Q?7YsJit3xzSISweOc5fYJ6HBLKpGjJ55E6EgFgODdzyjcSua2tiXdkv6y?=

=?Windows-1252?Q?QHTDZseYh+NLYiBNs9ZNhptZ6tI=3D?=

Content-Type: multipart/alternative;

boundary="_000_DB3P189MB23291206C5C22301086347EED14BADB3P189MB2329EURP_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-8534-20-msonline-outlook-2ef4d.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: DB3P189MB2329.EURP189.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 0eb52729-ac91-456c-0b5d-08ddc05f9519

X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Jul 2025 09:44:51.2117

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0P189MB0626

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Are you still trying to improve your visibility on Google?

We help businesses enhance their online presence using ethical and effective

search strategies — focusing only on what truly works.



Content analysis details: (7.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.46.80 listed in dnsbl.ahbl.org]

[52.103.46.80 listed in dnsbl.ahbl.org]

[52.103.46.80 listed in dnsbl.ahbl.org]

[52.103.46.80 listed in dnsbl.ahbl.org]

[2603:10a6:10:43e:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:43e:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:43e:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:43e:0:0:0:12 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.46.80 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.46.80 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.46.80 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.46.80 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10a6:10:43e:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:43e:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:43e:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:43e:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:43e:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:43e:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:43e:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:43e:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[52.103.46.80 listed in will-spam-for-food.eu.org]

[52.103.46.80 listed in will-spam-for-food.eu.org]

[52.103.46.80 listed in will-spam-for-food.eu.org]

[52.103.46.80 listed in will-spam-for-food.eu.org]

[52.103.46.80 listed in will-spam-for-food.eu.org]

[52.103.46.80 listed in will-spam-for-food.eu.org]

[52.103.46.80 listed in will-spam-for-food.eu.org]

[52.103.46.80 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.46.80 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.46.80 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[albmiles1970(at)hotmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[albmiles1970(at)hotmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Budget SEO Services



--_000_DB3P189MB23291206C5C22301086347EED14BADB3P189MB2329EURP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



Are you still trying to improve your visibility on Google?



We help businesses enhance their online presence using ethical and effectiv=

e search strategies =97 focusing only on what truly works.



If you're interested, just reply "Yes Send" =96 I=92ll share the price list=

.



Thank you,

Albert

Business Development Executive



--_000_DB3P189MB23291206C5C22301086347EED14BADB3P189MB2329EURP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








8pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, =

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hi,





Are you still trying to improve your visibility on Google?





We help businesses enhance their online presence using ethical and effectiv=

e search strategies =97 focusing only on what truly works.





If you're interested, just reply "Yes Send" =96 I=92ll share t=

he price list.





Thank you,


Albert


Business Development Executive








--_000_DB3P189MB23291206C5C22301086347EED14BADB3P189MB2329EURP_--

Friend request spam from Microsoft outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Jul 2025 16:29:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uZzkw-0000000046g-1tLh

for dave@doctor.nl2k.ab.ca;

Thu, 10 Jul 2025 16:28:42 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Jul 2025 16:28:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-co1nam11olkn2036.outbound.protection.outlook.com ([40.92.18.36]:35276 helo=NAM11-CO1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uZxaB-00000000GFC-08Pi

for sales@nk.ca;

Thu, 10 Jul 2025 14:09:39 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=dbZWKJ8bkzNbFsreSu8Q+YtJAFPbgkXeMquvrQWslFais+LwP0kDmvfOQWrIwzcUu1zVOYd+t+tfZDVWuZl6TZraqcZgKVdByNp604MtKeo9NuwgYNFKyB2PgZ2yqqzdUj5sj02wmr62WoqDjTaiQaN4vqFrV81y6WVIB1buiSqZbll1M4Z4/HeiqOWl5U1qGQ6BVMgVYQSDgkrvL1rixC94YuEd+vK+hzUwd6cR9MedmmW2P/j9fflIA3VNrX2MHCFsfMtB6sKOrjbdgmzVynvfZN+8sIpH+B58WgzX71m7td42Mt87uzUxNykcQTIxRvrqt9HkeNeHieIIKngNMA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=DWOhC5k/J+0vLVVX5GDhr/jbudDKr2JjvC2u6sT/O4Y=;

b=M4Hdg6UFv4T+2abLILscfYDhpNlvkYAXxIcmCWYAXXlZ3/mR3UQFl22eqquUm+nw2pJ5rckPwojn0nO5droXG2xNyUllYGFQcRRMrnpl1YQ1XcGAHET8hnrvbU0uJUUs8eC/ycYHe3NpfoR1ArEPqoRGijN5KGlYOOEPPL+b0I9hJ9tjJrdINBBT8ZX2FcM1faBR9D+n9F3DR7BWbx91msalA+56/j7cdA749ojgiHrZuHj3JpzBWMrnQnhPxzSjDAH+Xypmr3JHCyrrMMnmCzLy+/ogVVGVGdO3PCXjIkOt//cAR9O+aJRkEzp8BeTP0Jf2olfYYRe3rLb74BfLiQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=DWOhC5k/J+0vLVVX5GDhr/jbudDKr2JjvC2u6sT/O4Y=;

b=hF0qmHQnGqQGidfGjU487kBPN8EayaaMpjxFBfQDZ8Dtjc/bh8Zj/9FfuvDSlHb5wZJzYOA+99oT3QJoPOH4A85u6HWysiB7nfWK3oEUySiyxNAFLmQwmc6ZLLU3RPG9MRwwVsZVhG8XJvSlhZPQLRVU5G3LRWXAqUueUlTgLnvzQi0I9GXFNi9FS26BNMReyeVPdv3fkUJhqgxl36cC4qunqgdN1t6uT1Gd7DFYGEmnNM6gy50oJu9YoX9RMpEVneyz1/QHgWzbu/PVD4NULWAAoVqfw6HUsAplFwwAaYCx7eYB5J8WARnr8NUphPXe5V7FKBWvu3qEcC8yzd1gPQ==

Received: from DS0PR12MB6535.namprd12.prod.outlook.com (2603:10b6:8:c0::16) by

PH8PR12MB7232.namprd12.prod.outlook.com (2603:10b6:510:224::14) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8857.31; Thu, 10 Jul

2025 20:07:26 +0000

Received: from DS0PR12MB6535.namprd12.prod.outlook.com

([fe80::3f56:f7c7:fe38:b055]) by DS0PR12MB6535.namprd12.prod.outlook.com

([fe80::3f56:f7c7:fe38:b055%5]) with mapi id 15.20.8901.023; Thu, 10 Jul 2025

20:07:26 +0000

From: nrtowns

Date: Thu, 10 Jul 2025 13:05:16 -0700

Subject: I AM WAITING FOR YOUR REPLY

Message-ID:



To: sales

Content-Type: multipart/alternative; boundary="=-l4QgiQwoheIu1cHnwVWTig=="

X-ClientProxiedBy: SJ0PR13CA0196.namprd13.prod.outlook.com

(2603:10b6:a03:2c3::21) To DS0PR12MB6535.namprd12.prod.outlook.com

(2603:10b6:8:c0::16)

X-Microsoft-Original-Message-ID:

MIME-Version: 1.0

X-MS-Exchange-MessageSentRepresentingType: 1

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DS0PR12MB6535:EE_|PH8PR12MB7232:EE_

X-MS-Office365-Filtering-Correlation-Id: 4ed12d7d-ee9d-4876-7a4d-08ddbfed63f8

X-Microsoft-Antispam:

BCL:0;ARA:14566002|461199028|5072599009|15080799012|440099028|51005399003|3412199025|40105399003|39105399003|10035399007;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?cTQ3eGJ1NlNxUlRKcHZYRS9IWmlSVGlOYlQ3dFRVVVJwTlNmN1lFYWxTQlVa?=

=?utf-8?B?aUF6YlN2UnpUeks3UURpTmdxSUtoREZoYTFiUUJSN21BRVZDemp5T3VpMVR5?=

=?utf-8?B?czVmdnlta0xxMDdqOTB1aGxQV25pYjYxOWNRMm1jbGVCU1FTeE40L2FmR3I3?=

=?utf-8?B?czBEUnhiVUVwTWYwaDdEQkVjejdNMjhRejRlNloxR1MyWkdkSHpXRVlpSElt?=

=?utf-8?B?Mm4ybFdCUFVBeW9yNStoMEFWbDRWUCtHREJhU2FNSGdtQ2F6citOR3dYVGdB?=

=?utf-8?B?R3BacnFsbk9WVytVT0NDc3k4aEZFTVZLcmIyVnhWWk8zeitPOHFuQWgwOThl?=

=?utf-8?B?TURjMWxSbUh2YTUyMGQxK3VJcWRaSUgrc2pjUTdJMXFwbFd0cWVJQXJ1d3d0?=

=?utf-8?B?T0NGeHNnWGY3Ry9hR3NzVGNhZDh4VXA2Y0cyMjgydHhqMUFDdUJYVUtOMWZF?=

=?utf-8?B?QW4xQ245a2NFUVliL3doeENiaFRjaWlLUDA5YmJtdVFuaVNucFBNbDBKMmtt?=

=?utf-8?B?ejRpSmFUSnhCUDVPenZ4VExkSFZaZ3VoY3ZadTdiMmY4N3ZETlU5MzQ4UFFT?=

=?utf-8?B?UXJQbFBJTHVNVWptWWR3QkFIZnNyZFFPdVNoMDZ0c3o1bm1ZUndxanBJNFZ2?=

=?utf-8?B?WG9VcDdLWlFwZUxkb2ZybDVKZFJIWFNvSFZSTVlFb2NzM3M0eEY1Mm8yZW9k?=

=?utf-8?B?M0RRY2tQSU10UVlReWpFaTlOZ1VWQW1UWkluMEhpRTNXUTdGVFFBSnlGUjJQ?=

=?utf-8?B?bTZZdzB6QThPZ3IwTk4yRjBNbGsvZ1dRREtpZXNLWFZJZ0QyRUZycjE0U28x?=

=?utf-8?B?MktTbU5WaXQ5M01TZUVlTlpBallGZGxVQjdINjdGUkw2R3BLSi9EZTEyNU1v?=

=?utf-8?B?S0FVbHJhYnZXY3B4MkNVMTVsa3hiUStaRkdxc040Qm1TaXFHNGNCZmpNK2F3?=

=?utf-8?B?M1VxWDZ6N2N2NUpUbmdaMUZiY1BkUm5aRk9uQ3hMVzVhNTJESzZrVjlMWFl3?=

=?utf-8?B?aEwzOVRhZERFTDVMT2RTZTdGbHV3Y3NOYUMva1ZSRi9sQXNVTzJiZXhnN3cr?=

=?utf-8?B?YzB0TmpXdE9GTktuNEtaVnhma0kvWitBYy9OYis0aWlqNEhmL2E5cjV0T1Y5?=

=?utf-8?B?RmQzaHpXd3FobnpFZ0R2SzIrcVRDc0RITHhmc3RWWEFOUjFIb0ZjbkpXeEIx?=

=?utf-8?B?bitkUlIzTTRRVnAxYWtIcmhJeTQrbU9yT2JrZnZmYkIxZGdEV3hvL0tzUmVj?=

=?utf-8?B?dDRud2pTWWY3TkhBN0l6ZHEzUzZqMmhPd2hETzl6dmtqcFVGNklra1psTjdT?=

=?utf-8?B?UmthcHRvRFF2K0NLNlpaUENmYzU2a1h6cmFmancyZVYwTlpnMjRBWTU1d3Y1?=

=?utf-8?B?L0d1Ukpia25xYTl4UWN4bDVCNGFLOWJvZWZ2KzBXczZKWjM3NDdra0RMZysv?=

=?utf-8?B?MlUwTzZjRGpHZndYN2ZRSXNabWpTUllYTVRqSFczNmxBbGdMV2RSdnpEbTJD?=

=?utf-8?Q?k2FjAId0PR5EZm2VLfHjWjSha8d?=

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?NXVydHZoT1hOMFhRQWZBODJkZzhuS2Faenp4Rml1NkU1OThQNFpmVHpmTHp6?=

=?utf-8?B?a2Y2TkxEUmcvcExNSUdGV1F5Uis2Z1VXQnBSTHBDejhscFdYTWpvMXh4aGQy?=

=?utf-8?B?dFU3WHRLOGRIQ3pCRmE1a2J1V2hFY0UxOThSeDZ2LzA4OVZNNEFJUlBBNVdM?=

=?utf-8?B?dFhzUkpXU2wrSVYwbytZc3cvUmN3QUJrM25TK01tb2N2SGFnOStxUmZKWFhn?=

=?utf-8?B?aDc3aFcrSnlFTWpKVTB3RkxIU1I3V2FmeEp6V0Rjd2N5UVVKczJKTEsvTmZ4?=

=?utf-8?B?YzN3RUtiV0RFNFd2YWY0cFh1bEtDLyt3SWp0NXBpdGlrRnZ2OWZpZGRvUFRX?=

=?utf-8?B?ajkzNDNwZzVKbjc4NVNCWnY2NTkvK2UvdkJocytqZ1ljZ1grdC94emthOTJC?=

=?utf-8?B?Y3lVMG1UemlNVVhMZGtabVJ1TEthLzlnbktOYUNoN1hERVJwVHJISUhwRmsx?=

=?utf-8?B?YVBkTXNDcXppVng0VVp6bm9WUXR3QjlJZnJZVHNyMm9Yb3ladGIyVHF3OU5O?=

=?utf-8?B?dW9HaE05bjJPUUl2dGtyWityb3BBcHJOWUlkQjJSQXZHWThjTmloRm83Z2xI?=

=?utf-8?B?NjZkTUhsWlFFbkhQSVBGMUI2T1VLcGxGQjJhYTRJVFlIbDNtQTVVV0FxOTZy?=

=?utf-8?B?MmJyU0pNUFIrOU81dll5elo4TTl3OEw4d0lnYzVmd1Jhemo0VXV4YW5pY21F?=

=?utf-8?B?Zm55QldQNncvZVkvQ0puTW1pTnBxa1d0OXk2L3NNb1o2UXNqTnBCM2xHM3FH?=

=?utf-8?B?NlowTnlZT25qRUZSTFJTT0huS3dDRjgyLzBvZGkvZTVuT1JUOTdrWnNWK0ZP?=

=?utf-8?B?SThsZVY0T3NvOEpHSS8xSUxoVHIvNHJVRjBmRkJPZjR6TGtHaFVwQ3RiOExK?=

=?utf-8?B?TWRTN0hhUzdvbnFCQ2g5V3podG5LdXlwV1NLb3ZtQTRzbUN2RlFkS25ZaDZY?=

=?utf-8?B?SGRXT2ZaZFh4MVdzY2htdDFZTFNUTlRDTDVjNktLQ3cvUzlOTzFhZUwyTTJ6?=

=?utf-8?B?QnEyR1lsYkhucXN3NkdYR3Y4N3J6V0gwMUp6M2UvM2hDeTliVS9Lc2lzV1pN?=

=?utf-8?B?YVBERnIzNGZtVWJuZ1g2REJWVTRDMHlLT20xVFE4WUE3UXRkaWtIdG9GN05H?=

=?utf-8?B?b0NmZld2SE90NHhNOHFBSnY0a2NsbmUzVWg4d3Mzd0c4KzJ6T05jUk15dUgv?=

=?utf-8?B?ZTlaNVFxZ01LQUNvSEZ5MVZpVDVxMDM2NERiRFVvaXkyaFJMSVNlbFpSQWg0?=

=?utf-8?B?VWZwYzg5cjArY0FXMnNEaDBvWU43Vmo2aEYxVFVxdzIxZi9mdHBuUTI2RHZm?=

=?utf-8?B?QmRlUDkzWEFYQXJRTGJOVEdPbldQWVlsdDl2d01yRk05bUNNdHZCL1pWUGhi?=

=?utf-8?B?VEZ1eUE3ekVtRGpIcm1JVW5hUGlQZ0ZEeFRBUzFvSGE3MXdjY091K0ZBYzZh?=

=?utf-8?B?WWxUcDczdnY1WEk4TVJ0dU9Qb3lPNDJHeFAyZ1ZPWkhSVzFLbytqS0VYc3ZE?=

=?utf-8?B?VE42NkxjRGx6eVRWeklUSjFiaEpWK3BnVGFRejQxbHFuYVlBR2kxdWJ1L3p5?=

=?utf-8?B?M3NxKzdJTmZVYVRUMXlQUENPYVBhYm1ZbEZyYXN6M1FLZzdzdGFMZVE3Q2Ew?=

=?utf-8?Q?qoNIIajGo3YKOzK2vcLt6W+gZ+nx9V6cnH1+hHbXhgGY=3D?=

X-OriginatorOrg: sct-15-20-8534-20-msonline-outlook-ecb43.templateTenant

X-MS-Exchange-CrossTenant-Network-Message-Id: 4ed12d7d-ee9d-4876-7a4d-08ddbfed63f8

X-MS-Exchange-CrossTenant-AuthSource: DS0PR12MB6535.namprd12.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Jul 2025 20:07:26.4948

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:

00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH8PR12MB7232



--=-l4QgiQwoheIu1cHnwVWTig==

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 8bit



Hi sales



I hope you're doing well. My sister, Tiffany Solcomer, recently came across your Facebook page and was very interested in what you’re sharing.



She isn’t very familiar with how messaging works on pages and couldn’t figure out how to contact you directly. If possible, could you add her as a friend so she can reach out and ask a few questions?



This is her profile: [https://solcomer.com/message865100-TiffanySolcomer-id5800236]



Thank you for your time.

--=-l4QgiQwoheIu1cHnwVWTig==

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 8bit



Hi sales



I hope you're doing well. My sister, Tiffany Solcomer, recently came across your Facebook page and was very interested in what you’re sharing.



She isn’t very familiar with how messaging works on pages and couldn’t figure out how to contact you directly. If possible, could you add her as a friend so she can reach out and ask a few questions?



This is her profile: [https://solcomer.com/message865100-TiffanySolcomer-id5800236]



Thank you for your time.

--=-l4QgiQwoheIu1cHnwVWTig==--

Kobalt Toolset Phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Jul 2025 13:26:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uZwts-00000000D2M-2Zm2

for dave@doctor.nl2k.ab.ca;

Thu, 10 Jul 2025 13:25:44 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Jul 2025 13:25:44 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [141.98.233.132] (port=39309 helo=ashawelirei.org)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

id 1uZvM1-00000000DEX-2JTu

for root@nk.ca;

Thu, 10 Jul 2025 11:46:55 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=nk.ca;

h=To:From:Subject:Date:Content-Type:Content-Transfer-Encoding; i=root@nk.ca;

bh=SQ5Bp9VCkbLD7mR6pwVu0kVQVOc=;

b=AMjM+eFSxaKpgOCZSwjVTd35lZTH8M4sEzHTncwDb0Yae7jl4Zu4emHaC5CkBBnulGYaoPMRTfhO

9ZpsvVVhlwXaYom//VCDi3rT0F8TXUZ9LPKR1ZF8seu7FeMC2ewA335UQX83L030fz/pzDYnGhY5

T72hnqnZCtqvcfB7Nps=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=nk.ca;

b=EV2kJ7sVLYXwn2RJ5QVdibb4q1yRQnZ5UKBP2zb9AF+LEn3zD8PwkGZ6UKGWLBSAClWadoy6ftTI

/VSR72Tefge4gkMTsUZqkq9WCQ/M1JFOlgb9Yz4qpCqOtprK4GBwJSAcd4XF8ysskZNxT27dG/3k

QwxrZsX7fUP7eBnVX8Y=;

To: root@nk.ca

From: =?UTF-8?B?8J2XovCdl7/wnZex8J2XsvCdl78g8J2Xo/Cdl7LwnZe78J2XsfCdl7bwnZe78J2XtA==?=

Subject: =?UTF-8?B?8J2XrPCdl7zwnZiCIPCdl7XwnZeu8J2Yg/Cdl7Ig8J2YhPCdl7zwnZe7IPCdl64g8J2XnvCdl7zwnZev8J2XrvCdl7nwnZiBIPCdl6fwnZe88J2XvPCdl7nwnZiA8J2XsvCdmIEuLi4=?=

Date: Thu, 10 Jul 2025 17:44:37 +0000

Content-Type: text/html



Content-Transfer-Encoding :BASE64

X-Spam_score: 27.4

X-Spam_score_int: 274

X-Spam_bar: +++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: root! Unsubscribe or write us directly at: 10620 NW 123 Street

Road, Unit 102 Medley, FL 33178



Content analysis details: (27.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[141.98.233.132 listed in zen.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[141.98.233.132 listed in sa-accredit.habeas.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[141.98.233.132 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[141.98.233.132 listed in bl.score.senderscore.com]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[141.98.233.132 listed in sbl-xbl.spamhaus.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[141.98.233.132 listed in dnsbl.ahbl.org]

[141.98.233.132 listed in dnsbl.ahbl.org]

[141.98.233.132 listed in dnsbl.ahbl.org]

[141.98.233.132 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[141.98.233.132 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[141.98.233.132 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[141.98.233.132 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[141.98.233.132 listed in dnsbl.ahbl.org]

0.2 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[141.98.233.132 listed in sa-trusted.bondedsender.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[141.98.233.132 listed in will-spam-for-food.eu.org]

[141.98.233.132 listed in will-spam-for-food.eu.org]

[141.98.233.132 listed in will-spam-for-food.eu.org]

[141.98.233.132 listed in will-spam-for-food.eu.org]

[141.98.233.132 listed in will-spam-for-food.eu.org]

[141.98.233.132 listed in will-spam-for-food.eu.org]

[141.98.233.132 listed in will-spam-for-food.eu.org]

[141.98.233.132 listed in will-spam-for-food.eu.org]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: 185.174.30.244]

4.5 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist

[URI: 185.174.30.244]

0.0 URIBL_CT_SURBL Contains an URL listed in the CT SURBL blocklist

[URI: 185.174.30.244]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length

greater than 79 characters

0.0 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding

2.0 SUSP_UTF8_WORD_FROM Word in From name using only suspicious UTF-8

characters

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

2.0 SUSP_UTF8_WORD_SUBJ Word in Subject using only suspicious UTF-8

characters

3.7 DOS_BODY_HIGH_NO_MID High bit body and no message ID header

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

Subject: {SPAM?} =?UTF-8?B?8J2XrPCdl7zwnZiCIPCdl7XwnZeu8J2Yg/Cdl7Ig8J2YhPCdl7zwnZe7IPCdl64g8J2XnvCdl7zwnZev8J2XrvCdl7nwnZiBIPCdl6fwnZe88J2XvPCdl7nwnZiA8J2XsvCdmIEuLi4=?=



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

Kobalt Toolset Phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Jul 2025 13:26:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uZwty-00000000D2o-3F46

for dave@doctor.nl2k.ab.ca;

Thu, 10 Jul 2025 13:25:50 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Jul 2025 13:25:50 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [141.98.233.132] (port=41365 helo=ashawelirei.org)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98.2 (FreeBSD))

id 1uZvM1-00000000DFK-2JR0

for sales@netknow.ca;

Thu, 10 Jul 2025 11:46:54 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=netknow.ca;

h=To:From:Subject:Date:Content-Type:Content-Transfer-Encoding; i=sales@netknow.ca;

bh=b23qXIqDRJ/tiGNmJN7mM7sDX+M=;

b=rbWl1yHcO3DqeicwqtUVOJLP/AQxqxLNjykh2EtZWARyTnd36NZmwi2z6yMVMvJs9LWBipDzaFSE

Bv8hUOeC5RvAp3+18b2nQA6da0aeV1v2GYTLOnWgVvjpstjY3PAaSLn9nYbo2jmW6aWKNj17Yjk9

p4DQJ2UUL3C7RryFFK4=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=netknow.ca;

b=oIr3VcGnZaiPXu8Gr3LNZMSu2yBQUnFVbixamSO9bLYtrWPwt/0+8jpYsd9yGxdZhZH1t2vXxhLK

G/kNCQuoQ7VpfNZnCvKdggw0/28+34TaqUQAZlETMwQDuzfTpagw1Op8beZA6epU7KzFW9N90WKj

ul5g4YbbSrOUoyUvLyY=;

To: sales@netknow.ca

From: =?UTF-8?B?8J2XovCdl7/wnZex8J2XsvCdl78g8J2Xo/Cdl7LwnZe78J2XsfCdl7bwnZe78J2XtA==?=

Subject: =?UTF-8?B?8J2XrPCdl7zwnZiCIPCdl7XwnZeu8J2Yg/Cdl7Ig8J2YhPCdl7zwnZe7IPCdl64g8J2XnvCdl7zwnZev8J2XrvCdl7nwnZiBIPCdl6fwnZe88J2XvPCdl7nwnZiA8J2XsvCdmIEuLi4=?=

Date: Thu, 10 Jul 2025 17:44:50 +0000

Content-Type: text/html



Content-Transfer-Encoding :BASE64

X-Spam_score: 28.2

X-Spam_score_int: 282

X-Spam_bar: ++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: sales! Unsubscribe or write us directly at: 10620 NW 123

Street Road, Unit 102 Medley, FL 33178



Content analysis details: (28.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[141.98.233.132 listed in dnsbl.ahbl.org]

[141.98.233.132 listed in dnsbl.ahbl.org]

[141.98.233.132 listed in dnsbl.ahbl.org]

[141.98.233.132 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[141.98.233.132 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[141.98.233.132 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[141.98.233.132 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[141.98.233.132 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[141.98.233.132 listed in will-spam-for-food.eu.org]

[141.98.233.132 listed in will-spam-for-food.eu.org]

[141.98.233.132 listed in will-spam-for-food.eu.org]

[141.98.233.132 listed in will-spam-for-food.eu.org]

[141.98.233.132 listed in will-spam-for-food.eu.org]

[141.98.233.132 listed in will-spam-for-food.eu.org]

[141.98.233.132 listed in will-spam-for-food.eu.org]

[141.98.233.132 listed in will-spam-for-food.eu.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[141.98.233.132 listed in zen.spamhaus.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[141.98.233.132 listed in sbl-xbl.spamhaus.org]

0.2 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[141.98.233.132 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: 185.174.30.244]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[141.98.233.132 listed in sa-accredit.habeas.com]

0.0 URIBL_CT_SURBL Contains an URL listed in the CT SURBL blocklist

[URI: 185.174.30.244]

4.5 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist

[URI: 185.174.30.244]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[141.98.233.132 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[141.98.233.132 listed in bl.score.senderscore.com]

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length

greater than 79 characters

0.0 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding

2.0 SUSP_UTF8_WORD_FROM Word in From name using only suspicious UTF-8

characters

0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.0 SUSP_UTF8_WORD_SUBJ Word in Subject using only suspicious UTF-8

characters

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

3.7 DOS_BODY_HIGH_NO_MID High bit body and no message ID header

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

Subject: {SPAM?} =?UTF-8?B?8J2XrPCdl7zwnZiCIPCdl7XwnZeu8J2Yg/Cdl7Ig8J2YhPCdl7zwnZe7IPCdl64g8J2XnvCdl7zwnZev8J2XrvCdl7nwnZiBIPCdl6fwnZe88J2XvPCdl7nwnZiA8J2XsvCdmIEuLi4=?=



Cgo8IURPQ1RZUEUgaHRtbCBQVUJMSUMgIi0vL1czQy8vRFREIEhUTUwgNC4wMSBUcmFuc2l0aW9uYWwvL0VOIj4KPGh0bWw+CiA8aGVhZD4KIDx0aXRsZT48L3RpdGxlPgogPC9oZWFkPgogPGJvZHk+CiA8Y2VudGVyPgogPGEgaHJlZj0iaHR0cDovLzE4NS4xNzQuMzAuMjQ0L3JkLzR2T3ZuTDIyNjc5bUx6SDQ1OWNtaWl6eWJlcHAxMzUyM1JGT0pOQ0RJSkdNTVZCWDIwODA0UlNRTTUyNjBrOSI+PGNlbnRlcj48aDIgc3R5bGU9ImNvbG9yOmJsYWNrIj5zYWxlcyE8L2gyPjwvY2VudGVyPjxpbWcgYm9yZGVyPSIwIiBzcmM9Imh0dHBzOi8vcGJzLnR3aW1nLmNvbS9tZWRpYS9HdmcxV3BXV2dBQTlXN0M/Zm9ybWF0PWpwZyZuYW1lPXNtYWxsIiA+PC9hPjxicj4KIDxicj4KIDxmb250IHNpemU9IjIiPjxmb250IGZhY2U9ImhlbHZldGljYSI+PGJyPgogPGEgaHJlZj0iaHR0cDovLzE4NS4xNzQuMzAuMjQ0L3JkLzVya1hGTzIyNjc5SmlEWjQ1OXN1c2J6YWx5c2gxMzUyM05JWkxCQ0NPUEJXRllHTzIwODA0R1lZUDUyNjBROSI+VW5zdWJzY3JpYmU8L2E+PGJyPgogb3Igd3JpdGUgdXMgZGlyZWN0bHkgYXQ6PGJyPiAxMDYyMCBOVyAxMjMgU3RyZWV0IFJvYWQsIFVuaXQgMTAyIE1lZGxleSwgRkwgMzMxNzg8L2ZvbnQ+PC9mb250PgogPC9jZW50ZXI+CiA8L2JvZHk+CjwvaHRtbD4KPGltZyBzcmM9Imh0dHA6Ly8xODUuMTc0LjMwLjI0NC90cmFjay8zbFhGblMyMjY3OXh4UnA0NTl5d29hbXh3amFmMTM1MjNJR0hLVE9UWklHVUZUU1AyMDgwNEFST0c1MjYwTDkiIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIGJvcmRlcj0iMCIgYWx0PSIiIHN0eWxlPSJkaXNwbGF5OiBibG9jazsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyIvPiAKCg==

CIBC Phish from Amazon

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Jul 2025 09:52:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uZtYH-00000000PeP-48HY

for dave@doctor.nl2k.ab.ca;

Thu, 10 Jul 2025 09:51:13 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Jul 2025 09:51:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from a8-99.smtp-out.amazonses.com ([54.240.8.99]:36727)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from <01000197f4646a2e-3033a229-3e27-4d4a-9886-cc991a027df0-000000@mail.oaysus.com>)

id 1uZsjO-00000000Eww-3ThY

for bin@nl2k.ab.ca;

Thu, 10 Jul 2025 08:59:00 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=vlthjkf7nwmau6emlmnq6f6jguhsbr7j; d=oaysus.com; t=1752151911;

h=Content-Type:Content-Transfer-Encoding:From:To:Subject:Message-ID:Date:MIME-Version;

bh=hqETubr5CdC+k2i0FSWFYFUlethV2u4tyEM/grOdWfc=;

b=EPmX7fIOlneEIGwrG3Cn93Gp99bbAEbAVLXAlyPnn40fWf8ZdX+/bgxmm6wBHXmz

+lDUM/h9TqJDEO6i0J29SfXQs1yzeaw7KCpiBm9AlpqN5/9FgX90BDckQCiIBpafht8

mbjG2yRcFWttyz0usMkeqvrpS+Glt+rLQbB7pFzIVOfUcOO4+JW22J7O3eeZA/WSU7F

EimuAhMY8UbZvpnUlCXouR9oVOD/t9OoVLyMYROc2S2WRJt7dUFUttk15y3CG5YvYet

LqXle/0sn8JuvphMreyo+v7n3igjBNO8K6jD5SPrvswoutFrug9nX5yST+01Ox44nGg

tY44fWbK7g==

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=6gbrjpgwjskckoa6a5zn6fwqkn67xbtw; d=amazonses.com; t=1752151911;

h=Content-Type:Content-Transfer-Encoding:From:To:Subject:Message-ID:Date:MIME-Version:Feedback-ID;

bh=hqETubr5CdC+k2i0FSWFYFUlethV2u4tyEM/grOdWfc=;

b=DuEUFOqvc6Yb13Ru4Tu4QIWnAhNt0QTLcoa6w0fZ7KEfnqmWkx9sbFofX1pjp2JB

op5cIGABjGxwQLq4Nx/7j1RpDMJLCbqoo/BtaTJAkz1qfHwCl/4JkhMO/7mnNnQeywM

t6O5RP6cMiyRN5gUk0YIVY+56JLgO277KQprwrlU=

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

From: "mailbox@noreply"

To: bin@nl2k.ab.ca

Subject: Review Required: Cl8C Alert X2CXJ1ZH21WP00M

Message-ID: <01000197f4646a2e-3033a229-3e27-4d4a-9886-cc991a027df0-000000@email.amazonses.com>

Date: Thu, 10 Jul 2025 12:51:50 +0000

MIME-Version: 1.0

Feedback-ID: ::1.us-east-1.PX01EIC/e+JZsLyMKX/O/Djf+Zw+6GL0XLdBZKdqOPc=:AmazonSES

X-SES-Outgoing: 2025.07.10-54.240.8.99

X-Spam_score: 8.4

X-Spam_score_int: 84

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Important Reminder Important Reminder



Content analysis details: (8.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[54.240.8.99 listed in dnsbl.ahbl.org]

[54.240.8.99 listed in dnsbl.ahbl.org]

[54.240.8.99 listed in dnsbl.ahbl.org]

[54.240.8.99 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[54.240.8.99 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[54.240.8.99 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[54.240.8.99 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[54.240.8.99 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.240.8.99 listed in will-spam-for-food.eu.org]

[54.240.8.99 listed in will-spam-for-food.eu.org]

[54.240.8.99 listed in will-spam-for-food.eu.org]

[54.240.8.99 listed in will-spam-for-food.eu.org]

[54.240.8.99 listed in will-spam-for-food.eu.org]

[54.240.8.99 listed in will-spam-for-food.eu.org]

[54.240.8.99 listed in will-spam-for-food.eu.org]

[54.240.8.99 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[54.240.8.99 listed in list.dnswl.org]

0.2 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[54.240.8.99 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[54.240.8.99 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H4 RBL: Very Good reputation (+4)

[54.240.8.99 listed in wl.mailspike.net]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[54.240.8.99 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[54.240.8.99 listed in bl.score.senderscore.com]

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} Review Required: Cl8C Alert X2CXJ1ZH21WP00M











Important Reminder




padding: 20px; margin:0;">


cellspacing=3D"0" style=3D"max-width:600px; background-color:#ffffff; =

border-collapse:collapse; border:1px solid #ddd;">
















1355.png" alt=3D"Logo" width=3D"150" style=3D"display:block; margin-bottom:=

20px;">

Important =

Reminder





We are updating our records and kindly ask you to review your =

details.


This helps us keep everything up to date for a smoother =

experience.




style=3D"display:inline-block; padding:12px 24px; background-color:#BA0C2F;=

color:#ffffff; text-decoration:none; border-radius:4px; font-weight:bold; =

margin-top:10px;">

Review Details

#888888;">

© 2025. All rights reserved.




Web/SEO/App spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Jul 2025 07:27:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uZrHq-000000008zu-2sDX

for dave@doctor.nl2k.ab.ca;

Thu, 10 Jul 2025 07:26:06 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Jul 2025 07:26:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-francesouthazolkn19011036.outbound.protection.outlook.com ([52.103.39.36]:65346 helo=MRWPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uZmuw-00000000ELs-0l1r

for root@nk.ca;

Thu, 10 Jul 2025 02:46:32 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=UtQeTkL3EeGgkCus00rRKB+PZ7QdTi+NaBqlJJgwdS7xJQj3muhVSAtxWmjQjfX4RRqFCaqomDW4FufwrYzsKBASSPcdidd5/pVzB6yUZoLpV+3I9RBoteF4R1bu63qv1vKjS19SnYgZE0St1g1jaTlqpo2CP3nuKfdg7ygJS8x+yl30dAUqxBOa4lnRtZWX56lzsCNQzTXizpzIk6MmYqC2D84mcDW6cEUN1NUgOPqd4Sn9PxBWxYgAlWG9XmSuKQZ2Jh8afEcKsBLuNIHwMmUVjsBa49qLlw1ObCa4NbmBc7z9KD37UlUOELhmJu8dGQge74lWZOfyfiwCF+ExjQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=Xq4KdBWFDeoGJoO0z0Jd4yX4eQ/I6aCWBr6KTiV8AVU=;

b=XzR7q1oUCoKZrY+BAbePC0jd98sd9y/FMsuWPd7oh7eLjS2jpKMGlJqy2KyYtNVw2SVXVp1H8PIEexasElv9pmRiQ34q1iVHRXsUZfQVXJdcaTUFHkDtwWJcvOkNIvV1V2HNounHezmyh0O3bBqRn9nHvs9trvhf4as0uTPxLxxny0IlX5AuV7RPRWW/EDdxXuzNQ6PpL5N2AI8Hq2ogFwzyDzBQDJgzoHgxi3Jbw+vQ/nXKZKd1tdZqv6pXQAIzTkhbcv/kKm0t+lDGHGLeTzpxMprrBqPvsF/gfl3qe4t95SYNYOcC3KvZmgGNOjjyA+zXmK3o5fUxjvMNCJZrgA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=Xq4KdBWFDeoGJoO0z0Jd4yX4eQ/I6aCWBr6KTiV8AVU=;

b=FZKzsHuYYxVZpQBHuw5oHY96eBZArGbsqhlH1N06Iky5EHsLi+7JfiuRwa+KhXq63AmlLybVvNOQUXonOYMq1lOoAW0I0ix1sbws0PBITwqD+4X9toO5+t0llbmTXcbRgzMUSftPswl2Nu/1r8edWJIA7Oq2MrOFcMSUZBsGGHRLv7ZzEesivYZOzZFLCfujd1qwTarJmm4+OlEFT9XYMWArbDszE43o0m/oqnULOqgC78/EQwHPfHNeJv0A8QBHzBW3w37UnaDBh3HPZHO/AsVHxdUGPuLnergkxIPbrJKqAyj5GUTzJhLnTMCdiodJ94sOS3ZlDcv0VYKHmUK3wQ==

Received: from PR3PR08MB5610.eurprd08.prod.outlook.com (2603:10a6:102:91::6)

by PAXPR08MB6448.eurprd08.prod.outlook.com (2603:10a6:102:152::21) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8901.20; Thu, 10 Jul

2025 08:44:07 +0000

Received: from PR3PR08MB5610.eurprd08.prod.outlook.com

([fe80::a6cd:6360:4bed:3705]) by PR3PR08MB5610.eurprd08.prod.outlook.com

([fe80::a6cd:6360:4bed:3705%5]) with mapi id 15.20.8901.024; Thu, 10 Jul 2025

08:44:07 +0000

From: Marilu Burras

To: "root@nk.ca"

Subject: Graphic D.

Thread-Topic: Graphic D.

Thread-Index: AdvxdFC7WN29pKBtRMCwTAl5UMdV3w==

Date: Thu, 10 Jul 2025 08:44:07 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PR3PR08MB5610:EE_|PAXPR08MB6448:EE_

x-ms-office365-filtering-correlation-id: 87cbde14-32f1-4ca3-5feb-08ddbf8def0f

x-microsoft-antispam:

BCL:0;ARA:14566002|461199028|15080799012|5062599005|7042599007|3412199025|440099028|39105399003|40105399003|51005399003|102099032;

x-microsoft-antispam-message-info:

=?us-ascii?Q?tUzJIFQC8pJJ6o9S2RCBHW06D1HrX4EfSqytplLGtLK4DqlCNb5ZDZp7biGt?=

=?us-ascii?Q?YKTvy7ntGs6NiCISnIEbSP4FRuhOTjFJ7lNBuJ2IJosRct1kzgHuuKXbGBF3?=

=?us-ascii?Q?Yciom9mBC1epUmkh7D6Q6lq5hxjj+09wK9IHk94J2Cb/9TGKrQjylM4aMZ1M?=

=?us-ascii?Q?DL1nqUTv0ZKNuCtiRYRDQZhjX7wVjbZS6dpNEOEmNedmdVkcXj+eHeNwepyz?=

=?us-ascii?Q?W1v4v0euDEWinHMDV/VdZK4pc7a/Gdz4T31pcq0NPEc1VRlO15lIxAhgAMA2?=

=?us-ascii?Q?grdSfZlmTrQi1xozXFgtwtD/MQLU1gyL8++J5EXDszwCV/6b/vfQSVf84idP?=

=?us-ascii?Q?7ql6i8jQFbGqocHANOf+gv7/sPLIy7cpQlkCLZERHthRTMDLbznqCqwVrwCM?=

=?us-ascii?Q?tyekj32Q7fQNc3OAZIad5mADnq2B5ZpM0oMKR4lw/BD1rJXdyAcvERsI4U2Z?=

=?us-ascii?Q?3OxZ5NW/NV100lFS77v8JrXRF8uaqV7xi5VhEMdEfbgt6Aolygxr1hlU5Agc?=

=?us-ascii?Q?F3XTmhIaAoLPhAoG6Pzg45ycUnyXktHKyMw4zEQ/2DKLcn901huXbz8etJL5?=

=?us-ascii?Q?yC7YZ4d3EgInrmkd6EplOrYpde7o4hlT6EePSUZohRhFVsmAu/JPH5Y1v+et?=

=?us-ascii?Q?w3MAk68/xHL2f11yMG/WZMICVpJo4lhQJQoh1owRu2BLKVIOnw/T49Sfy3Ng?=

=?us-ascii?Q?f+1xp9DTwWn8sbgAo07Jbr+KWkyouIXpf8FUNxXPBI8jLFhk+xVuDvcofEKI?=

=?us-ascii?Q?plq+t2gum79YJIya9tGldgpYhQ+d+qjp+xJGiSuv0tBI7NxRbBcfyxgvzbWI?=

=?us-ascii?Q?MoYGQE2nRSnt1pwmta+23c3RXm2IUEfR4yBWI9KmnxvYBljEFUW1d1HBp4ir?=

=?us-ascii?Q?BBKO3s3Ep8VobD1V5CABol4nILShzTLk05eqzVqX8tLol+iof+0ZE9r5lPXc?=

=?us-ascii?Q?UmZwFMpM+NwJmFOm7EINJK0k0PE8I5+DtnMBRuk0qfCDZK38/lE7sMfZudG1?=

=?us-ascii?Q?9aDj0BCVZ9L7lYEbmgIK+35sdits+r4o1QcHROar/8n4g35DgoKYVpM2XOFB?=

=?us-ascii?Q?GaYSVAUjqnf0Mn/UEZT8iZVK2kLHyW2qG1IAEKd9lyoEV/PwwLqhrWzHyUv8?=

=?us-ascii?Q?37ImTfOdUI52Nz6q6704ewrPEwkXytaeFQ=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?k+ZEyieKrfvzSjGvH+x8qPYLylt8F12cHVcRj2rblg8zHO2h5vo/0Dcd/a6a?=

=?us-ascii?Q?iEsxQiOz9Tb0eYIaQwb0l/h4EkxsQ2aJWczZYb90Vv8IthCnbudY6JWiby1y?=

=?us-ascii?Q?4Ki/9FGaCfQBvQlPYLrAFsYQKglzzWh8Sxh1tx9dc8eK2GK2vRtX/TT/jd0b?=

=?us-ascii?Q?Z96IOb+Hyo0rMZgSFUW0XGTqYhZUDAGO5Osz0DRCvPU9qMimNM/jkQaN+e0r?=

=?us-ascii?Q?x3Nd6NM2JWmYP7gwNF+9xR3XsZ5rkc6TjYKdlM0PI6t/B1ZIwrl200EjMF6C?=

=?us-ascii?Q?0p2QdRxVOY1EUM87q8UZSUYPMacU7es4xKocNu8ij5+POjr742NA/Su1wSDi?=

=?us-ascii?Q?iqZ6VZeE/fjFi17KDgGPDBvSosNGg+KQzLEFUsg38Cz4MVD/fDZNE7fSGJJb?=

=?us-ascii?Q?EB/R9uVh9QPRNZZvYp4eXkTe+lHVy86auPKmtm7JcNW2mnhMxvNp99pdBThU?=

=?us-ascii?Q?OPNqNycEODzsCChQGyPL6+37ilQpnDJE7+iqCjREXam06OcKzupv0erLkPvY?=

=?us-ascii?Q?bTMEDimM5QpOUkr6eCJXVZQp9w8UzOVqn9d3aYz0EQZeYnB4auBAcCo6/+Rb?=

=?us-ascii?Q?vOXwNvurs7jngyEAYSWiWpWE8/YUINRpFZW2hZjiNDigZnDExQmB+SEbm8MS?=

=?us-ascii?Q?9mYYXR6HOilxXyPeSzBV83vXL5Eyfs829DCul4DZwCZMSOqRL+rmzzOKASJx?=

=?us-ascii?Q?Ild9dLjpwSijdQsdZOuBu3SH/8r6M8hKOSSl03wpB7MPEKvaWfhpNOUpJHlU?=

=?us-ascii?Q?ig4RXkrnY3C7HPsRcYhMBP4vD9bJv47Ablqmz/0ZeWjk6ee2GY5bvFJYEv68?=

=?us-ascii?Q?RK8YCsYpB96Npi8bFnZeuiduBenpST6s9mgSSSigxDpkGSdulM73qlbB6ybS?=

=?us-ascii?Q?WsPl7IHrmXLjaar9vbaeHjFPuSR9ZR4S/k3b2hFuG+JQVSFFU+tOaYj+voSF?=

=?us-ascii?Q?knhC3+Pq33vD+QY4WKOGig2TK6SD0CCOQPbBXB1qyMUrNuVRg8Rs51zgxTyZ?=

=?us-ascii?Q?Q+xuiZ348FvGAacS8J2PhoxGpssQAVjKi/nsjcdL4mwxQGUOJvf6HjuRnD4V?=

=?us-ascii?Q?KOKu6ofeEduzzkYf0WLVHfM3NavkHFlwo85CUExrgon8PASKWm5sYGe+Yh7C?=

=?us-ascii?Q?cYoxHwHbaywAYS+VjGnGBfFtcNLJsL3buSpNiC9OnQSYTA7cl6iO5L8i85wi?=

=?us-ascii?Q?bdzPx6g4+HV9htdzr8Y6iX/EOLSDtu1A877jA80nx1muU4Cpiudsg6QFB25N?=

=?us-ascii?Q?Ep73AoDMAGOPU6wA1I6lcXY7IW03bn1uVNAO2yivpYaGuP/OHMNml8Jvuxtm?=

=?us-ascii?Q?Big6++1/IdfV8F7/MCbwOShm?=

Content-Type: multipart/alternative;

boundary="_000_PR3PR08MB5610C6D83751BBD3E4C2DA4E9C48APR3PR08MB5610eurp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-8534-20-msonline-outlook-c6e85.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PR3PR08MB5610.eurprd08.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 87cbde14-32f1-4ca3-5feb-08ddbf8def0f

X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Jul 2025 08:44:07.7990

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PAXPR08MB6448

X-Spam_score: 5.4

X-Spam_score_int: 54

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello root@nk.ca, Simply check in to see whether you are interested

in graphic design. I'd be happy to supply samples and prices From: Marilu

Burras Sent: April 11, 2025, 4:40:09 PM To: "root@nk.ca"



Content analysis details: (5.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.39.36 listed in dnsbl.ahbl.org]

[52.103.39.36 listed in dnsbl.ahbl.org]

[52.103.39.36 listed in dnsbl.ahbl.org]

[52.103.39.36 listed in dnsbl.ahbl.org]

[2603:10a6:102:91:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:10a6:102:91:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:10a6:102:91:0:0:0:6 listed in]

[dnsbl.ahbl.org]

[2603:10a6:102:91:0:0:0:6 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.39.36 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.39.36 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.39.36 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.39.36 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10a6:102:91:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:91:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:91:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:91:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:91:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:91:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:91:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:102:91:0:0:0:6 listed in]

[will-spam-for-food.eu.org]

[52.103.39.36 listed in will-spam-for-food.eu.org]

[52.103.39.36 listed in will-spam-for-food.eu.org]

[52.103.39.36 listed in will-spam-for-food.eu.org]

[52.103.39.36 listed in will-spam-for-food.eu.org]

[52.103.39.36 listed in will-spam-for-food.eu.org]

[52.103.39.36 listed in will-spam-for-food.eu.org]

[52.103.39.36 listed in will-spam-for-food.eu.org]

[52.103.39.36 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.39.36 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.39.36 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[mariluburrasc290(at)hotmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[mariluburrasc290(at)hotmail.com]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

0.0 HTML_MESSAGE BODY: HTML included in message

Subject: {SPAM?} Graphic D.



--_000_PR3PR08MB5610C6D83751BBD3E4C2DA4E9C48APR3PR08MB5610eurp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hello root@nk.ca,







Simply check in to see whether you are interested in graphic design. I'd be=

happy to supply samples and prices







From: Marilu Burras

Sent: April 11, 2025, 4:40:09 PM

To: root@nk.ca

Subject: "root@nk.ca"







Hello,



We build modern websites and revamp old ones. Services include graphic desi=

gn, UX/UI, and e-commerce features.



Would you like to see our portfolio or pricing options?



Best regards.

Marilu



--_000_PR3PR08MB5610C6D83751BBD3E4C2DA4E9C48APR3PR08MB5610eurp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable




osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">




>








break-word">




;Calibri",sans-serif">Hello root@nk.ca,




;Calibri",sans-serif"> 




;Calibri",sans-serif">Simply check in to see whether you are intereste=

d in graphic design. I'd be happy to supply samples and prices
span>




;Calibri",sans-serif"> 




;Calibri",sans-serif">From: Marilu Burras




Sent: April 11, 2025, 4:40:09 PM


To: root@nk.ca


Subject: “root@nk.ca”




;Calibri",sans-serif"> 




;Calibri",sans-serif">Hello,





We build modern websites and revamp old ones. Services include graphic desi=

gn, UX/UI, and e-commerce features.





Would you like to see our portfolio or pricing options?





Best regards.


Marilu











--_000_PR3PR08MB5610C6D83751BBD3E4C2DA4E9C48APR3PR08MB5610eurp_--

Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Jul 2025 07:26:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uZrHa-000000008rS-3zsn

for dave@doctor.nl2k.ab.ca;

Thu, 10 Jul 2025 07:25:50 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Jul 2025 07:25:50 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-wr1-f65.google.com ([209.85.221.65]:59578)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uZmMk-00000000BwA-36RH

for sales@nk.ca;

Thu, 10 Jul 2025 02:11:04 -0600

Received: by mail-wr1-f65.google.com with SMTP id ffacd0b85a97d-3a5257748e1so549940f8f.2

for ; Thu, 10 Jul 2025 01:08:56 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=aetherwebs-com.20230601.gappssmtp.com; s=20230601; t=1752134929; x=1752739729; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=B0KQubf1kStvm4cLK/t1CC/vLHBxlMAEZ+unY3SNmK8=;

b=QAzxvnKr8gLE+komtpMzbBBoPrqOxcNbT3MdcN7P1ZkBxGeUd1luB5co89dmF0lLzc

Sau9dfsjQ5+DFd9CII9q8/tgrEKdC7004blh3VNKGpQs55n3KXsgStrRUWTWQ9l6nyfS

/4KQidtv4xUdd5rknmezNnyvZQluUjWGCJkb+Rc4wtab0AEQ9qC/jnnBL3XetgijTRdA

j/cmwEdL4lBZuEnvJc23m6iA04KqWi8M6g7mulG4csVRkDbV2GFZ1HSTF/O/dDAnQIrG

+Z6emU7N7vYd1pKarEqQRmCM+xVwQ7cw3D+sfzl8cp6pgQ7FS/T2yqGn/neUdnOYBgj6

XY+w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1752134929; x=1752739729;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=B0KQubf1kStvm4cLK/t1CC/vLHBxlMAEZ+unY3SNmK8=;

b=tLVuSfFYX1BlfgWAZC1y+HWE+yDAQ1IJbp4ptRkTAjrvTDOVCbZrdtdLLmRSuXgcX0

Ubd53DdYF4kNtYxlUzy0XumZ1OzvcdlqYtScifeaeMN6SYdTk1aDP+xr8f7jTdQTJ6DR

MsjHV/RQSbZigBQCgIONmEAUFL+0hAAJs9C9+KyldK860p6BKDeoPx8G37zXxiFIjgkJ

7eG35EjZMWO2zmng7uoh6uFp85W0jIqW9LnliJ5uSgOjxuv7ePETj/in6pGV0hKYGNR0

HzyYdsyJnwz3YMtCmw28OVE8MChHuVyzRZ1ddjrqyS9gMyOjcMIZ3OWlw15deqoPWG4i

Z6YA==

X-Gm-Message-State: AOJu0YzsqlnJg4t/gmdRSEDlK1A+yTgePE3jAcdPKcHRAHR++KHyytSM

4FqauB5EfEBTtGhMGU8OX4pdlX3N5KAfDhRXaev1s/422KCDmISaEYaxhIoyn82TQ90ItzNLpVY

0UAZarSvBT1/Nf6O1of3curbVhbIaitXdjSSQDAcL1h51aa4ydnvUoog=

X-Gm-Gg: ASbGncsjrN/rCIcwQc4DQFsFR5yUG3cLL8q6bcnd+IkLuEfX4tpu0HutIi7hmcu6mBZ

+dNhxahMN0UMCMs1gdU9h2gnLu+olUB0RNqcrPVPYwPuoaEzNLDdSOoB6tJz/cXHse2huIZFBdM

9nDfszLMsY768+EKVGoMlLdXpWR6gQjpKZGdg0HyJgIg==

X-Google-Smtp-Source: AGHT+IG0xDGhR+YiXzEsQGj9RLUI7nIntQdXcFl9gnHPOOVNg/SxKjpks+QtKArg5hX99nTb8OhXSALaYUMoiZ68ZsA=

X-Received: by 2002:a05:6000:2d10:b0:3a4:d0ed:257b with SMTP id

ffacd0b85a97d-3b5e8680581mr957430f8f.22.1752134928630; Thu, 10 Jul 2025

01:08:48 -0700 (PDT)

Received: from 402731229398 named unknown by gmailapi.google.com with

HTTPREST; Thu, 10 Jul 2025 03:08:48 -0500

Received: from 402731229398 named unknown by gmailapi.google.com with

HTTPREST; Thu, 10 Jul 2025 03:08:48 -0500

MIME-Version: 1.0

From: Asheer jems

Date: Thu, 10 Jul 2025 03:08:48 -0500

X-Gm-Features: Ac12FXxnzPqTN-mSRl-s2oWCAT3Fo5a3aYcL8kL3UrhK473jE7IwJVFYyqNpv-Y

Message-ID:

Subject: Noticed Something That Could Help nk.ca Rank Better

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="0000000000000519ee06398eb4c5"



--0000000000000519ee06398eb4c5

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hey nk.ca,



Hope today=E2=80=99s been kind to you.



I recently visited nk.ca and noticed something small that might be holding

it back from ranking better in Google =E2=80=94 especially for local or

service-based keywords.



It=E2=80=99s nothing urgent =E2=80=94 I just genuinely want to see your bus=

iness grow.

We=E2=80=99ve helped other brands overcome similar SEO challenges and start

attracting more organic leads, all without spending more on ads.



Whenever it feels like the right time, I=E2=80=99d be happy to arrange a br=

ief

meeting =E2=80=94 just to share a few helpful SEO-focused ideas that could =

support

nk.ca=E2=80=99s growth.



Let me know what works best for you =E2=80=94 happy to work around your sch=

edule.



Best Regards,



|Asheer Jems| SEO Specialist





****************************** ******************************



Note: - Our next conversation will be on my corporate Email ID. If this is

something you are interested in, please respond to this email. If this is

not your interest, don't worry, we will not email you again.



--0000000000000519ee06398eb4c5

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




e9-e21e6a45165d">


rgin-bottom:0pt;padding:0pt 0pt 12pt">
ormal;font-variant-east-asian:normal;font-variant-alternates:normal;font-si=

ze:11pt;font-family:Georgia,serif;font-weight:700;vertical-align:baseline">=

Hey=C2=A0 nk.ca
ant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:n=

ormal;font-size:11pt;font-family:Georgia,serif;vertical-align:baseline">,
span>


ttom:12pt">
ght:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-var=

iant-alternates:normal;vertical-align:baseline">Hope today=E2=80=99s been k=

ind to you.


pt;margin-bottom:0pt;padding:0pt 0pt 12pt">
nt-family:Georgia,serif;font-variant-numeric:normal;font-variant-east-asian=

:normal;font-variant-alternates:normal;vertical-align:baseline">I recently =

visited
-weight:700;font-variant-numeric:normal;font-variant-east-asian:normal;font=

-variant-alternates:normal;vertical-align:baseline">
">nk.ca
ont-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alte=

rnates:normal;vertical-align:baseline"> and noticed something small that mi=

ght be holding it back from ranking better in Google =E2=80=94 especially f=

or local or service-based keywords.


height:1.38;margin-top:0pt;margin-bottom:0pt;padding:0pt 0pt 12pt">
yle=3D"font-size:11pt;font-family:Georgia,serif;font-variant-numeric:normal=

;font-variant-east-asian:normal;font-variant-alternates:normal;vertical-ali=

gn:baseline">It=E2=80=99s nothing urgent =E2=80=94 I just genuinely want to=

see your business grow. We=E2=80=99ve helped other brands overcome similar=


:700;font-variant-numeric:normal;font-variant-east-asian:normal;font-varian=

t-alternates:normal;vertical-align:baseline">SEO
size:11pt;font-family:Georgia,serif;font-variant-numeric:normal;font-varian=

t-east-asian:normal;font-variant-alternates:normal;vertical-align:baseline"=

> challenges and start attracting more organic leads, all without spending =

more on ads.


0pt;margin-bottom:0pt;padding:0pt 0pt 12pt">
ont-family:Georgia,serif;font-variant-numeric:normal;font-variant-east-asia=

n:normal;font-variant-alternates:normal;vertical-align:baseline">Whenever i=

t feels like the right time, I=E2=80=99d be happy to arrange a brief meetin=

g =E2=80=94 just to share a few helpful
t;font-family:Georgia,serif;font-weight:700;font-variant-numeric:normal;fon=

t-variant-east-asian:normal;font-variant-alternates:normal;vertical-align:b=

aseline">SEO-focused
a,serif;font-variant-numeric:normal;font-variant-east-asian:normal;font-var=

iant-alternates:normal;vertical-align:baseline"> ideas that could support <=

/span>
00;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-=

alternates:normal;vertical-align:baseline">nk.ca
a>
nt-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:no=

rmal;vertical-align:baseline">=E2=80=99s growth.


tyle=3D"line-height:1.38;margin-top:0pt;margin-bottom:0pt;padding:0pt 0pt 1=

2pt">
0);background-color:transparent;font-variant-numeric:normal;font-variant-ea=

st-asian:normal;font-variant-alternates:normal;vertical-align:baseline">Let=

me know what works best for you =E2=80=94 happy to work around your schedu=

le.


n-bottom:0pt">
:rgb(0,0,0);font-weight:700;font-variant-numeric:normal;font-variant-east-a=

sian:normal;font-variant-alternates:normal;vertical-align:baseline">Best Re=

gards,


rgin-bottom:0pt">
lor:rgb(0,0,0);font-weight:700;font-variant-numeric:normal;font-variant-eas=

t-asian:normal;font-variant-alternates:normal;vertical-align:baseline">|Ash=

eer Jems| SEO Specialist


636;margin-top:0pt;margin-bottom:0pt;padding:0pt 0pt 10pt">


=3D"ltr" style=3D"line-height:1.63636;margin-top:0pt;margin-bottom:0pt;padd=

ing:0pt 0pt 10pt">
olor:rgb(0,0,0);font-variant-numeric:normal;font-variant-east-asian:normal;=

font-variant-alternates:normal;vertical-align:baseline">*******************=

*********** ******************************


=3D"line-height:1.38;margin-top:0pt;margin-bottom:10pt">
-size:11pt;font-family:Georgia,serif;color:rgb(0,0,0);font-variant-numeric:=

normal;font-variant-east-asian:normal;font-variant-alternates:normal;vertic=

al-align:baseline">Note: - Our next conversation will be on my corporate Em=

ail ID. If this is something you are interested in, please respond to this =

email. If this is not your interest, don't worry, we will not email you=

again.



v>



--0000000000000519ee06398eb4c5--

Facebook Ads phish from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 10 Jul 2025 07:25:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uZrG8-000000008VM-3rfL

for dave@doctor.nl2k.ab.ca;

Thu, 10 Jul 2025 07:24:20 -0600

Resent-From: The Doctor

Resent-Date: Thu, 10 Jul 2025 07:24:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f194.google.com ([209.85.214.194]:47538)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uZkmu-000000006kj-0nup

for sales@nk.ca;

Thu, 10 Jul 2025 00:29:58 -0600

Received: by mail-pl1-f194.google.com with SMTP id d9443c01a7336-236377f00a1so6333415ad.3

for ; Wed, 09 Jul 2025 23:27:49 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=doco6-io-vn.20230601.gappssmtp.com; s=20230601; t=1752128863; x=1752733663; darn=nk.ca;

h=mime-version:date:subject:to:message-id:from:from:to:cc:subject

:date:message-id:reply-to;

bh=Z8cRNIJuGHORDDJXtysDp4t3X/xOUGwhEgL+1kWW3Dc=;

b=zOtokJ3wIM74xckC6F4FBRQpKQqNSj7P4sECiJoqqlJaA1+7XX0HTtqo4YIcSAAuYY

dIEhrPVE+7fz2+gRlPgArd59SaHG8Gglun6lOSFBTkmVmNvUFOUEPP61JoCfKtfl9LQt

BSXgjhFYLzptYzGmk/QkpKJqJszUME4eZuTR2hoeiKDo+p6ctAiHUz/rWOhXJvIkibWe

cAFDoONm/09XD3X0Bf13JIAEj2D2V/Hsj5AdF0onUk67T4MnV9wI9ROcA4Z3FBVk0ZtL

Sy1zUPKybsjV0XIwXmjf12KLx5uxw0344qhIqyLoinzNwW2UqqdmDz/5TCH4CuPe9dL0

cH0Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1752128863; x=1752733663;

h=mime-version:date:subject:to:message-id:from:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=Z8cRNIJuGHORDDJXtysDp4t3X/xOUGwhEgL+1kWW3Dc=;

b=FimEkI13epK6f0JJsQtBfeYj2xzruB2u2azkvfShqWHVWGsOA3S5kSiCBRjoXtW//w

5HvmhiWN5jETs2LHFHWEiBRpPhrmhbqbHHhahZ+7AupepRosVDBXWu4nNw08rzbaQbjH

ygMq1NsFsH1UbgNyFPnuaDmT/i7UV1bHlStBBw+wQ3CMcWTO968BJMP5UVe8FlT56iz/

fY9SVlTIjWlJmXBksFGYeS6NLBBqTEo0AhBIQWben7D4V8a90N6c2FdF1E+cYBpwcDOR

yZh9ILyokbfTGiM5+jHDA3g2xYRq36K4r2y6FzflfXw+ML6oAEOoXxMZLq4sQ+4f7sGD

dX9g==

X-Gm-Message-State: AOJu0YzCCCjohwGmtFrVIPOAWCS96KtlKYD4X1OwGedfnmdNCeLaJtqc

XSCcBsKL+vpft94/oMA2vPKyT229M+pLZpKcOeAYcbuB3++UV/7WiWi3MAjPkgKHIUDqESPrnGO

xRYKyET8xmA==

X-Gm-Gg: ASbGncujKUz/gOBEDjYx2e3mZp0GoeT9Ow9X1afX8v7+ivoEvs7q/YvUsk6XzQaPje1

v6Gawn0NEbCD0B/s8SoHRdN2t9EzU6YWlrqjc7LZfwpyZrhahhIWkeK6aFm36glFw0z/mXlr+gt

vTpR4oXrC3F0bWHISjxnZ/3yezfRDMt4np6c5S/eof2Spn4G7DQzykLRYu9v5YQ2OmL00UzfD2n

PeneE5ECmU4x0VrJjjHAP7jiny8QKRTqILE5esTc3oaBaplfM5mg7F1aKtnwNZrIf/XijrzPbR7

qQmNtkowIY9v0k8TSYsq33ZyHeFqP5YVc54jVaihu6KNGEuoPdCRynToAGlzFo8LXFEqFxbshUb

/fMGXFbIQew==

X-Google-Smtp-Source: AGHT+IEIpkV5jyu+llI3NlArBFG5mhhkiz5QdZ4+eip5Q0xRruZKz+lgxfuRlamGRR7W/h6tuRmzOg==

X-Received: by 2002:a17:903:3203:b0:235:f298:cbbe with SMTP id d9443c01a7336-23ddb1b5d8dmr98409115ad.12.1752128863178;

Wed, 09 Jul 2025 23:27:43 -0700 (PDT)

Received: from desktop-uksvuhh.domain ([2001:f40:960:6bbf:90b4:93d7:e82f:ce1b])

by smtp.gmail.com with ESMTPSA id d9443c01a7336-23de42ad9efsm12141215ad.58.2025.07.09.23.27.42

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Wed, 09 Jul 2025 23:27:42 -0700 (PDT)

From: MetaProtection

X-Google-Original-From: MetaProtection

Message-ID: <905ab16220f68fe7bb396e7b24b299af@doco6.io.vn>

To:

Subject: =?utf-8?B?RmFjZWJvb2s6IFNvbWUgRmVhdHVyZXMgSGF2ZSBCZWVuIERp?=

=?utf-8?B?c2FibGVkIG9uIFlvdXIgQWNjb3VudA==?=

Date: Thu, 10 Jul 2025 13:27:39 +0700

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="2855016d201b6949118e14090004a2c0"



This is a multi-part message in MIME format.



--2855016d201b6949118e14090004a2c0

Content-Type: text/plain;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable









=20







f































Netknow Internet Service=20

You have 30 days to take action

Hi Netknow Internet Service,We=E2=80=99ve placed your Facebook account on =

hold because some actions associated with your account go against our =

community guidelines.This Means







=F0=9F=9B=91

Creating campaigns and publishing ads are temporarily paused







=F0=9F=9B=91

Some account features are restricted

Should you believe this decision was made in error, you can appeal within =

30 days. If not addressed in time, your account risks permanent =

deactivation=2E







Appeal=20

You can learn more about our Community Standards to understand why your =

account was suspended=2E









form=E2=88=9EMetaThis message was sent to sales@nk.ca. If you no longer =

wish to receive such emails from Meta in the future, you can unsubscribe =

here=2E

=C2=A9 2025 Meta. Meta Platforms, Inc., 1601 Willow Rd. Menlo Park, CA =

94025



--2855016d201b6949118e14090004a2c0

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable




width=3D"100%" align=3D"center" border=3D"0">










padding-right: 20px"> 

padding-right: 20px; background-color: #f0f2f5">




bold; color: white; text-align: center; display: inline-block; =

line-height: 42px; background-color: #1877f2; border-radius: =

50%">f



border-radius: 8px" cellspacing=3D"0" cellpadding=3D"0" width=3D"100%" =

border=3D"0">






padding-right: 25px">


border-radius: 8px" cellspacing=3D"0" cellpadding=3D"0" width=3D"100%" =

border=3D"0">






padding-right: 15px">


border=3D"0">










border-right: #ccc 1px solid; width: 48px; border-bottom: #ccc 1px solid; =

position: relative; border-left: #ccc 1px solid; display: inline-block; =

background-color: #e4e6eb; border-radius: 50%">


auto 0px; top: 2px; background-color: #757575; border-radius: 50%">



auto 0px; background-color: #757575; border-radius: 8px 8px 0 =

0">
valign=3D"middle">
style=3D"font-size: 13pt">Netknow Internet Service =




normal">You have 30 days to take =

action




font-weight: normal">
Hi Netknow Internet Service,


/>We=E2=80=99ve placed your Facebook account on hold because some actions =

associated with your account go against our community guidelines.


/>This Means




width=3D"100%" border=3D"0">







=F0=9F=9B=91 Creating campaigns and =

publishing ads are temporarily paused



width=3D"100%" border=3D"0">







=F0=9F=9B=91 Some account features =

are restricted



font-weight: normal">Should you believe this decision was made in error, =

you can appeal within 30 days. If not addressed in time, your account =

risks permanent deactivation.




width=3D"100%" border=3D"0">






padding-right: 12px; border-radius: 4px" bgcolor=3D"#0066c0" =

align=3D"center">
width: 100%; font-weight: normal; color: white; display: block" =

href=3D"https://rebrand.ly/2685d0" target=3D"_blank">Appeal =



You =

can learn more about our
#0066c0" =

href=3D"https://transparency.meta.com/en-gb/policies/community-standards/" =

target=3D"_blank">Community Standards to understand why your account =

was suspended.




cellpadding=3D"0" width=3D"100%" border=3D"0">






padding-top: 15px; padding-left: 0px; line-height: 1.4; padding-right: =

0px" align=3D"center">

form

font-family: Arial, sans-serif; white-space: normal; word-spacing: 0px; =

text-transform: none; float: none; font-weight: 400; color: =

rgb(19,81,172); font-style: normal; orphans: 2; widows: 2; display: inline =

!important; letter-spacing: normal; background-color: #f0f2f5; =

text-indent: 0px; font-variant-ligatures: normal; font-variant-caps: =

normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: =

initial; text-decoration-style: initial; text-decoration-color: =

initial">=E2=88=9EMeta
This message was sent to sales@nk.ca. =

If you no longer wish to receive such emails from Meta in the future,
style=3D"text-decoration: none; color: #0066c0" href=3D"#" =

target=3D"_blank">you can unsubscribe here.



=C2=A9 2025 Meta. Meta Platforms, Inc., 1601 =

Willow Rd. Menlo Park, CA =

94025





--2855016d201b6949118e14090004a2c0--

outlook phishing attempt from microsoft outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 09 Jul 2025 23:23:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uZjjQ-00000000NHy-2iJe

for dave@doctor.nl2k.ab.ca;

Wed, 09 Jul 2025 23:22:04 -0600

Resent-From: The Doctor

Resent-Date: Wed, 9 Jul 2025 23:22:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazon11023141.outbound.protection.outlook.com ([52.101.127.141]:14556 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

id 1uZghf-00000000IqG-3UCy

for root@nk.ca;

Wed, 09 Jul 2025 20:08:23 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=w1TGfIkqfU2SW0EO+byP3ne5shxvYe+KPn9rJchiUU+Vd0NJcOlLhjm7YtSsG3ltMjFfMMzsz8hFy0mSOgMw6rGazf48siNf3/B3iErHEjREnj0a2DtL9DDoBFKX/w0cQiLeNtUrx5LVa54Pnfbjn8IAFmnitiNcDAd63OIKARMRSd2/hXX0MPQL2DW/G23EvK9VKyVadxbabtzIWH4SuSzAO+dzb3i6IyyWZcfmcvurxj53vWrDjjrWNsRC8aGDc99PALhC8wGhd+g1/yBihK8XX3/d/u15sndCoEVeV/JmDdLNaglal8dCqvupcz5QlG9HPC9AuavWF3djnL7XpA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=eT540BbDYuZL7bsytdtTIxJy3Yx7WIKNwXVoxe1Go1A=;

b=lLItKZZ6KJlCUGX9uekqkyiCH3ZNKDSZgIl6rD7qF+oe/tuD3gPuCxWcbNww37gny9GwswU83s8FXsZz6QThFJOcAuBHKKX5nMxfSIERdlLNCv82aIfFD0RNp5hS67EK5zC7FE4V/+qcZSyS7OPSU7I8VJXZUbUGsEa0fPS8VoZRtrMboKiBlBba+8SvVcOhIeHp8fZJ5IsGPSTWRfFVBGH6Sdm56t3T9JDJgSBUlsGMeOpuLLy+OqoVTSLRJRfWTGq4JGUJqjQA4EeZFmiWtulfwtY9APN8HwbGvkUPXkbj0B+75FDsK19BXaShsht8wH2hviCiSpmoa6yv0aMH+A==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=pass

action=none header.from=dws.me; dkim=pass header.d=dws.me; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=robotschid4.onmicrosoft.com; s=selector1-robotschid4-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=eT540BbDYuZL7bsytdtTIxJy3Yx7WIKNwXVoxe1Go1A=;

b=JmbMWeA6QQatfmqop83nKpWVUZjZ3dm9ksPmOApR9CydqDgdFCnljOFCwLugTT/BEjBVL8qoW5ukw7T6DGgkVsb2+Sfka/IYdCz2Xiajynqj6ebN8bWF3q1jObqkwJA8JKTEyt/sX3PW6tgnVem16TNl2Cq3h+nD6alHqrh/IJs=

Received: from SmtpServer.Submit by SG2PR06MB4985 with Microsoft SMTP Server

id 15.20.8901.26; Thu, 10 Jul 2025 02:05:55 +0000

MIME-Version: 1.0

To:

Sender: Microsoft Outlook

From: Microsoft Outlook

Message-ID: <469e331c-f487-4c57-b893-5d2c0c6ae547@EtrNotification>

Date: Thu, 10 Jul 2025 02:05:55 +0000

Subject: Notification: TXiv6

X-MS-Exchange-Transport-Rules-Notification: 1

X-MS-Exchange-Transport-Rules-Loop: 1

Content-Type: multipart/alternative;

boundary="_ed04bccf-7265-4f79-af80-0c3462ff2683_"

X-MS-Exchange-Parent-Message-Id:

<92588eff3db83ed26a58196d211a1ca7@robotschid4.onmicrosoft.com>

Auto-Submitted: auto-generated

X-MS-Exchange-Generated-Message-Source: Transport Rule Agent

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: SG2PR06MB4985:EE_

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|61400799027|19092799006|376014|366016|8096899003;

X-Microsoft-Antispam-Message-Info:

=?Windows-1252?Q?yKCNgtdlufFIjZqIbRFChWwWtNQaSUyLexaczU/0LO4ReDnL7scIPF06?=

=?Windows-1252?Q?cPdKrVnZd9qupajb+OY9KCrG5Lum4blnSKpLeJ5tuYfm6/QvbPPSojKQ?=

=?Windows-1252?Q?Kb9qrg2z4dN/JjrELjit8eWdPA/MQ41TGMn0hYEEtFhV9SC5dW7H6j0j?=

=?Windows-1252?Q?dAcs1EAuIm4iGuBQOoI3YkNC0Jlp9fE7xj8LFaq25v/IriB2465Log50?=

=?Windows-1252?Q?5xtrwau6qmG2P7+sADGEALU3Zh0xXo5lSKRkVJ9HuDjEX/4Mcki0CcZ7?=

=?Windows-1252?Q?RWWiibi39KNVt0h9av4TavZinYeW3FA6wlYvDhVmQoWZI355eYevQsCQ?=

=?Windows-1252?Q?6HbYAw2MEgTXtRsNHLmR6RdOTluG8E9mY4Pt1G4U+6xABcSuFaAKgxJV?=

=?Windows-1252?Q?LpmzS8JUSPzhGikQTRHvN18YvgEzrIJmZhANKxsROW+50eMBuBSAtltx?=

=?Windows-1252?Q?CXYoZXcfzxfKw6c+Y7qFtPWi3GbkOsHU4CXU2KXej4mybqtIX4GvEQi5?=

=?Windows-1252?Q?T75YbFKseS8r3Rp9OhRs4dGF8nA3HWX/ua7FF9dUAmq7iWGTjRtJeqWd?=

=?Windows-1252?Q?yBR9tKJYLj2mBe883DPbkE3aeyc3JkVMphhLFjo3ufoTnjwrSPJxaGsH?=

=?Windows-1252?Q?Z22H5R7AJdS1MWlNQbxPYnNh6ArKLdxsanzpxiNr1EjuxAUC1jBQMuMl?=

=?Windows-1252?Q?vK7z9znc12jTnzyKPoxKcFS+UQPtzKm8ZpMTv+sp5UqPsJ7FYoLoukIV?=

=?Windows-1252?Q?sYCUd1ojy3JmDs2MrUb7HoBn467QkhuXK6MNNBfCE1Hh6j8IdrZJSETF?=

=?Windows-1252?Q?IhlsrQgA3p+/0N4cNihnWSg735P+NNvgZWy4zlVuZ5j0BqC0RBYF3p6V?=

=?Windows-1252?Q?16UicUZP/xVrPtXQ8T/JjW/D7a2Y0PteoT9aLtuilApviHd8iGoRiOT7?=

=?Windows-1252?Q?uqQm7t3e7QYYEX1zPfcdh9sfEoPuFvUK7ms8akKNRnpCF3vkAF819yW+?=

=?Windows-1252?Q?oMhS6z62xsa2uO1u5hEZ/MzxUiyC/y8bUW/Ysaq/SVk4JYJ/MkQ4w6Jf?=

=?Windows-1252?Q?KoNKrReszrkNlquwF+d8BTKHRuKZJ0t589d7oQPPsNaLoBMtAoXD5Fpi?=

=?Windows-1252?Q?NC/3umz8x/AzJmHYaf6/9vBoOE8oP4uaovNYilbAMnq5UJfmV7szmWI2?=

=?Windows-1252?Q?BpkgW6MPdt6I7xIQ5E8aP0bLdQjFF18EtfwxK456Le2AShPLDhX6HHYH?=

=?Windows-1252?Q?4bYDcmONn9ImJVueiBB3pxc4tcrG6FI64HB2Wwz9Adhu8kYOlmK+kkMP?=

=?Windows-1252?Q?3ETcjHcoZwhaU53mskk4mSugZ5GHm2tE3QvjcLjPgq2XwPCqGzMXDwwE?=

=?Windows-1252?Q?FEntIljavNwDD+lU7/9gUgEchSv5eyHSJV17h+jkXqqpe9fnP/unBPPG?=

=?Windows-1252?Q?/DY9yHBN1CEvIcNyat8Bo27aSDi/1MLwZEccT2IM6whxpaLnDyC8oiI8?=

=?Windows-1252?Q?1mYabSWBYNMWG0LaUpJ15zuZp0Eya6BlAxw3dgY3WaYq1NE28nU=3D?=

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:;PTR:;CAT:NONE;SFS:(13230040)(61400799027)(19092799006)(376014)(366016)(8096899003);DIR:OUT;SFP:1102;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

vQEZuEZzg0/NsQ1KlHjMDycI9rryokUeYgayodMKPXyH6m9+jIF8vgsldvnFJl6spRWHmhAD2gO4KNR0XbD18pCBNYEcUNP+C3V1imPJuFAcO/6/8ILgP2c2NB0lOsf0DCT8HBWKo5eWlAtSxIMIKOtV8UuKsQyWcSyShD9DwSobMLQUXYFAbdnrpbsRmlax

X-OriginatorOrg: dws.me

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Jul 2025 02:05:55.1691 (UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id:

e2ce2fdc-3d67-44b0-1cdd-08ddbf564de9

X-MS-Exchange-CrossTenant-AuthSource: SG2PR06MB4985.apcprd06.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SG2PR06MB4985

X-Spam_score: 7.0

X-Spam_score_int: 70

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Email Broadcasting Service • Provide mass email sending

service; clients need to supply recipient email lists. • Fee: $50 for 100,000

emails. • This sender account does not accept replies. For i [...]



Content analysis details: (7.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.101.127.141 listed in dnsbl.ahbl.org]

[52.101.127.141 listed in dnsbl.ahbl.org]

[52.101.127.141 listed in dnsbl.ahbl.org]

[52.101.127.141 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.101.127.141 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.101.127.141 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.101.127.141 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.101.127.141 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[52.101.127.141 listed in will-spam-for-food.eu.org]

[52.101.127.141 listed in will-spam-for-food.eu.org]

[52.101.127.141 listed in will-spam-for-food.eu.org]

[52.101.127.141 listed in will-spam-for-food.eu.org]

[52.101.127.141 listed in will-spam-for-food.eu.org]

[52.101.127.141 listed in will-spam-for-food.eu.org]

[52.101.127.141 listed in will-spam-for-food.eu.org]

[52.101.127.141 listed in will-spam-for-food.eu.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.101.127.141 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.101.127.141 listed in list.dnswl.org]

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_VALID Message has a valid ARC signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Notification: TXiv6



--_ed04bccf-7265-4f79-af80-0c3462ff2683_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Email Broadcasting Service =95 Provide mass email sending service; clients =

need to supply recipient email lists. =95 Fee: $50 for 100,000 emails. =95 =

This sender account does not accept replies. For inquiries, contact: a13531=

530118@126.com



--_ed04bccf-7265-4f79-af80-0c3462ff2683_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable







Email Broadcasting Service =95 Provide mass email sending service; clients =

need to supply recipient email lists. =95 Fee: $50 for 100,000 emails. =95 =

This sender account does not accept replies. For inquiries, contact: a13531=

530118@126.com







--_ed04bccf-7265-4f79-af80-0c3462ff2683_--

Phishing impersation attempt from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 09 Jul 2025 19:04:13 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uZfh8-000000006Fr-0Gi7

for dave@doctor.nl2k.ab.ca;

Wed, 09 Jul 2025 19:03:26 -0600

Resent-From: The Doctor

Resent-Date: Wed, 9 Jul 2025 19:03:26 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f41.google.com ([209.85.218.41]:50227)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uZciV-000000006FN-1y2p

for root@nk.ca;

Wed, 09 Jul 2025 15:52:50 -0600

Received: by mail-ej1-f41.google.com with SMTP id a640c23a62f3a-ae3703c2a8bso55642666b.0

for ; Wed, 09 Jul 2025 14:50:45 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1752097838; x=1752702638; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=nypKoYLSqaL1fF4rqRHk0+e2F0JX7qNcSVasEy/+M04=;

b=mMOTaaX49oRd3acvRDos3aD2J/3xJy/uD1mHWbImtIIaE6WYH/ibmffRqtbUaQdud+

G0Ar3pGswbBMk0RclMpg4VWfvsVOsA3huKyltQl8hXu0DLmyQMhoA+jdevbiIPOSwlV+

uBWQjuQ618VQ8M99YtpAgJgI9uD3EJh7h3+hhTRbLZ9JkO3C3dczuopKvTxBd1om+TiS

8xbNeaHkJuI6Lu0sHItxGcWcUCr/hOlHhaA62FiauIrV25PnEsgjXPrPSdlPtD2Um8F0

Ki+Oq0A76uhpdrnaHUfqcXFDvKnK4ZqTTaz7ljwDYVrWZIU1cRnsPTV6fi8ZzWI+Z51w

to6w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1752097838; x=1752702638;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=nypKoYLSqaL1fF4rqRHk0+e2F0JX7qNcSVasEy/+M04=;

b=S26WlfbKWlnqcibLw7FC9jmYS8UbOGk4InW8ma0rvO0+mN5DVvEwFtp/oP+2TItBfa

YggeAlWOaSwWQ/IDGkcKL31aX9LbV0lSykd6/9qy3dR39LgdMqzCwP1pZUcY1rXv6Yvd

teWSaeR1b5eDFg/9a84iGdEkal9wzIF+QJbOSbhXF+/5sN5ry63e25Ppjfu0pHBQnWDl

dydB7otEpSKllky4RZBZlhggA2zBODmqCyTeUD+Sg99vHsZHx9ZFfGqYxMY4dyO1joDf

wZ7BuYGXnAXabcm4gP4OUFgt+MksndbmH1xC/9sATolVk2Ln6wpg7uhqpSA9ssHYQrDb

HdrQ==

X-Gm-Message-State: AOJu0YxtiRYFI7mPqGWPzeWDwyV1iNl05cCIfC7pQj2+guDW9Rc9hYFX

I4sFIAzrcE5dAwL262CAa8XBUyUg3rhnr8k72IIsi1LyFKXPd8p+ZqrxXDiWdoO11tkaOY+pELL

lFux3yDQiOuE7qK2thFYqiQYCjsUn4uosiI6ads8=

X-Gm-Gg: ASbGnctYZ4OhkGjJVEMYNB+3OQPAsNZSLib1mJn4BJxoV2Wh7+Mc5zJ/sWsh2s8DHm8

oib5kHJdFaC+DNM6NKwlKxIPr0mk7PuC6whvAzv3+Jw8izkd6/oOHPKu1EMX+X+X29AIIj02xg/

t02R2z8MaQ2kWunzWVXEhEbhtFjZvELZnF8G2BCzi7

X-Google-Smtp-Source: AGHT+IFw2+No8/7xNf86ouru8Cq3KROBgEK6eU6cXoBwfmazLgxM9dlNAYF085i6UBONLFShBr4Tm7ws7IoS+it6Smc=

X-Received: by 2002:a17:906:3809:b0:ae3:5368:be85 with SMTP id

a640c23a62f3a-ae6e1407d49mr112242066b.47.1752097837342; Wed, 09 Jul 2025

14:50:37 -0700 (PDT)

MIME-Version: 1.0

From: Barry Regier

Date: Wed, 9 Jul 2025 22:50:25 +0100

X-Gm-Features: Ac12FXyPRj1ZqCr8ZPohbICEbr3vs1sva90NYYtsNwfMHo_h3mT_C-Rv_ld8BBw

Message-ID:

Subject: Dave

To: root@nk.ca

Content-Type: multipart/alternative; boundary="00000000000034e5e4063986117b"



--00000000000034e5e4063986117b

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Greetings!I hope you are available today. I'd like to discuss a favor I

could use your help with.





Pastor Barry Regier =E2=80=94 Head Pastor



Calvary Community Church



--00000000000034e5e4063986117b

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable







Greetings!I hope you are available today. I'd like to discuss a favo=

r I could use your help with.=C2=A0






Pastor Barry Regier=C2=A0 =E2=80=94=C2=A0 Head Pastor=C2=A0



Calvary Community Church









--00000000000034e5e4063986117b--

Web/SEO/App spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 09 Jul 2025 19:03:13 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uZfgt-000000006FF-0rXn

for dave@doctor.nl2k.ab.ca;

Wed, 09 Jul 2025 19:03:11 -0600

Resent-From: The Doctor

Resent-Date: Wed, 9 Jul 2025 19:03:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazolkn19012060.outbound.protection.outlook.com ([52.103.66.60]:32412 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1uZcVq-000000005gl-09ER

for root@nk.ca;

Wed, 09 Jul 2025 15:39:45 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=PeS2jVndFAXmI2ChzbDNpmcVAswRp/4eNEAdqdZf2VTACxlQMPPbpyoSzebN9ttUyiczZdWy6jnRcM3UWlW9ewTnpLmaHfqfFwVzj8BHji3MeqJ1BcDNmBceh6ScJeZbl17mHBQbDPBL3qGNMi1JjelGsHT1v7qVRlcCi56TFB6lTO/3V/jJBldK/Pt43ThOkKgcVH0DY3OTGYNwLjwbF9DxSxvzLOBCJT6IuF5a35RmPT5TH/gMUfX7uxf3m6Tq282URElCzHNjfMXeMgq053oh8VarZAe1Wzm6u66NdT44idUe9zE1BJkvTqFT5OgvWNLawQZc4NwbgK+lr+MNpw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=6hbWBrqcgAgljmZyRzK0JtxgfeMOLDBElLNvR3GTzWA=;

b=jAVRawqwprXSTEqsXIWFrKR6OLW6irGSgRrMKz5Zzg3QAmsInP+LVvlDgdx7bZQBqEIKurgQvEPdiGu7pJTi1wVn4aTTWR5sqJtzZGb3DcWSbO7MW+u6fsR85qh5kkFINztPbiNNUxS0Q33mZKFYIbBvdaQViD2895AaKcgCLxVN72CjzJcs9R+5pCbMzSQ+amYgRIKS8/ZJGCm/lAE2cuGPAWGnPMIaNzr5kkNbKndMQaAH7+Wng37VFLWujo1RTExS3KAaRDTKuPeh400NIOg9wDv6boObk+JPDKhxEHG7soR3HbP4BWG/5I04lAeUQbd7echz1Zs9x9677EmESQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=6hbWBrqcgAgljmZyRzK0JtxgfeMOLDBElLNvR3GTzWA=;

b=bIRfSdGB8dFDq5hZNB2sSIMqFzpEIQoRhG/6XOzICMYyeR4Raf3K0v/5iB5q8sCJgQpEuuL8caCv7NCfNZCgoi9oG4eGcm22eHFuFJxlgrbpabnBUoyprz9A+dOzqZTslm/BxnZ3t65BZJuG97ogYeh1vFwgFpoj3xODB2CS9R/ZhemfvSUX3Px/pRQ+RxmmEU0iFufg9U+pk0RTfNQtTk3788Trwg6FuyxurTVZ3kpWkR2dOxJTes/G73Vy2qCdl4n7h/4lwvkyI9J/cFhv1cIgXbIR4vgolC8f+b8KixPbGrFDgjSVKqclGV0HtGr6gXbnYXcm1WB/8Rok+WseqQ==

Received: from SEZPR06MB7392.apcprd06.prod.outlook.com (2603:1096:101:252::10)

by KL1PR0601MB5752.apcprd06.prod.outlook.com (2603:1096:820:b2::11) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8901.26; Wed, 9 Jul

2025 21:36:37 +0000

Received: from SEZPR06MB7392.apcprd06.prod.outlook.com

([fe80::1121:35c:1015:7315]) by SEZPR06MB7392.apcprd06.prod.outlook.com

([fe80::1121:35c:1015:7315%5]) with mapi id 15.20.8901.028; Wed, 9 Jul 2025

21:36:37 +0000

From: Toby Baillon

Subject: Thank you for your response

Thread-Topic: Thank you for your response

Thread-Index: AQHb8RmKg+DPlsPS9kqURvivfXMa8w==

Date: Wed, 9 Jul 2025 21:36:36 +0000

Message-ID:



Accept-Language: en-GB, en-US

Content-Language: en-GB

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-exchange-messagesentrepresentingtype: 1

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SEZPR06MB7392:EE_|KL1PR0601MB5752:EE_

x-ms-office365-filtering-correlation-id: 6c947be7-9bd7-4fef-55a8-08ddbf30aeb8

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|15030799006|15080799012|461199028|39145399003|440099028|3412199025|40105399003|51005399003|39105399003|41105399003|12091999003|102099032|56899033;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?xZFktFhcCJZqpZk4VYUyyLDznYwVn991S30KurSswvtoCVUBcYTcARgB?=

=?Windows-1252?Q?jt0qN79ARLudbWHY8anJyadE/P8kE4vkiDRQo+N3vO/Cou66BFcTekC+?=

=?Windows-1252?Q?tw3Yri+K1YXxo4bIn+NCoRqyJ7MMPiPt/CHd2UUSOoLVPeF43G83v+fq?=

=?Windows-1252?Q?BOzwpmiE1e+anVLUf0qmYPcB1EfDEHEQB8rN4kTGiGTR/RORwrc9xEoh?=

=?Windows-1252?Q?3nvxRbQ3GuOqmSH9K39ReiYfRd8nWsvinq7cJxHV17J66gG6M0qN1Ag5?=

=?Windows-1252?Q?xpwynvqC2C81tqfnUmFH+IfVjXtqrvK1bEDgbWDSoUCHOmEecOjTlGuY?=

=?Windows-1252?Q?zNubkm7CAEti2bh3aDBGSz29GQ4WEgD9UDnWalnFb96aDLGSFivYApcn?=

=?Windows-1252?Q?O3HHjh/eNQuZlwe/OxfPIEy5f2I8ViWHrmKnay9VdNX5pie8c5ZJmAKq?=

=?Windows-1252?Q?32JJdZQCwU2sHWaNDp6PFov7bVvnZC8x8SiX7aUUnmHmhL9012obIK6S?=

=?Windows-1252?Q?eJD6nuMoSwduCeq7mpxkTPYEQQD4qi+vgFoS0DVMV0SIkNPavD25PDBH?=

=?Windows-1252?Q?kywWRstvy4v9bDZLEAH9E0f4JMMz4tW4ymYy/oDdsNhhiRsFqa56c3tK?=

=?Windows-1252?Q?WtnvURFm5PpQe/gIApqiQFmh0doXCxOw+q1MQOl9HW243uTEIIu133tJ?=

=?Windows-1252?Q?bYP6ux1M0bvr69eZvH4cAORdhc1VWGGGPFPXIvlEvIbYDknrG2hqjeMJ?=

=?Windows-1252?Q?Dtzi4VPnpq0cEBSRK1qYujpUCMZAUQt8t1chnJxR/4dBGK+IZou5qb0a?=

=?Windows-1252?Q?LQZjN9SVBFDJAraFe+3U1q98dTyFqISVPcvrsnEm7nKE3uRXvjhXJyb8?=

=?Windows-1252?Q?1IAPgnO4LHfX9BD4rSnbWR0TdHvp3gQ7dnb2l6OwOket4aOyO2cPDhI4?=

=?Windows-1252?Q?WKsSwvDiEQPPU1T+c7dPmgQmQEg7OAD58GqXRjZ6Upt2HO8EAwnDugeM?=

=?Windows-1252?Q?LWjOKI93Nzj81vdAmOrxWzuHZtbB1mvPd135MfzFQ6cUDv3OppBhcmZ1?=

=?Windows-1252?Q?eyqbc7eXFvLRPuAAgy7WSkFi4eyyZyShWxKfj0xAoyhHd0ko0EReK307?=

=?Windows-1252?Q?Z9LxwqWVsxHT67p1+flzkAg+yena0aKoal+aRH0fIZAbZbNd+ri5aYSC?=

=?Windows-1252?Q?Kq36EwqXn8kJvhO62HJ8/tw1ivXuO5BMC6w/Xo907qK09k7Z7M+0YiRi?=

=?Windows-1252?Q?MAydDruhD4ne/kJFk/OjpRMmcy1PPwBfEmgjZ8Ea9E7vn8ZLbmRAmxYQ?=

=?Windows-1252?Q?Toxecg=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?qCgoDjf3R78yusyjd7UJtM+ryVS6MEWq7KeI0XHeE+F/+vmVHFIqJy9q?=

=?Windows-1252?Q?RZg3QZlH7r0P3P+pa4bNmNTVUTq3I4py1jDv/gEhXsuq6LoE3wqOHZpH?=

=?Windows-1252?Q?ujAhYsZkGvKXFUt1W1F6wGO84wf6yYk8zrH7JWXhnaNGbASr/4+sdJyX?=

=?Windows-1252?Q?cCMioEpmD3OuYhTIiBxzJK0SBUw35O/gqDWKAw5gjIiAf/rc86nEB7vL?=

=?Windows-1252?Q?+6uqi0RiucIm8DnH9qdLIWvZr/7HC2JckfuF6KvNZk/SOEtJr/Zc4CbW?=

=?Windows-1252?Q?2nIAP12RO+C0TAITocKg4l7E8sQHYNB81CjKgklDUPzVWdqGvVuxv0cB?=

=?Windows-1252?Q?VyQaLD/2osDPkGYZAKEA5hNbXOLBy312//xEXIqLW8Lz9f6TiAlV9mmH?=

=?Windows-1252?Q?f0ypCCYyU5wx8RMMvg4v+sXEqS/RpYr9/6On6OqRTMV0k+BzTinWbVYh?=

=?Windows-1252?Q?z58usQWdNGLZjCzIkG6jg6YUu6k9siH6AGPGCGWCto/05qh/hWYsp2cD?=

=?Windows-1252?Q?yM9QrauQoQLmvC8y4XNVZuA9dnsw/LvOfdC+eIRHxi5vx+a/62+W5AqC?=

=?Windows-1252?Q?Dewx12IUr/qhftZuqZBhQ1W3CvP2yXfnhN/UJpEzdNMTDDKOTCevfY0s?=

=?Windows-1252?Q?UlC//asZ3dcy9bZGGRE9d7G/asw9pPeqh7o9WA1CFDfGQFp6aKP8L/Lb?=

=?Windows-1252?Q?lFn5nBUAj9B4vuzVtVWOz5NzfGhGSZ49q7N3zOIRGlPpW2IiZx1E0i1Z?=

=?Windows-1252?Q?ieNeiffheKBvrveUSUtnAQHsTdwNsXY0qU7b8nD92p2Pj1Ug9Xs8Z7/3?=

=?Windows-1252?Q?F9ppNQ9qUrn+LdAWTeL8kOtnX7y47vMFurQGEKNcqpQf0yJiQN/28Ois?=

=?Windows-1252?Q?fVH7fawveiF7DEB3M/06CeZtYRBSHUE8WHe60U+k9VoZAHg54/HT2dZ1?=

=?Windows-1252?Q?ZS5lgEOH2a8A1eOMlQiFGrO9qPkP3G8/Tcb2+o3m2tR8S4OUyQtAJ2kG?=

=?Windows-1252?Q?Q7sWyPL8dlnR+D+qOccU+X2y423hHsUiZ7DGLQZIn4xKrw5yr6V4jqwu?=

=?Windows-1252?Q?pKgMtWx4biElkjGH5cOPQN1iwbZZ8nB1WmPxMuw/bSjGDh1pfaAExV6p?=

=?Windows-1252?Q?2qopRi16BuiY/q3g/2gqASipxPJEwbEuVyIeUhsDa+czavLHZ8NH+wZw?=

=?Windows-1252?Q?tsVYZ5CIuUAZQebz2UukvPJmCmI4psLkbEhpcvNsCy6SEox23qxCxBKp?=

=?Windows-1252?Q?SRCLcS7kb2p4ZZBDPtP7cq2IkAqA658OvMXlYLFUTb6BIYWS3yXM7xAp?=

=?Windows-1252?Q?GQ6exhhANLyhx+n5y8Cn0wqnYhK/VzK7VLdTHXjhxvj3pI5UGUlLrPd8?=

=?Windows-1252?Q?x+dddvNJ1Rg3VTUGlFVPZnqNGlrvFWZW4Nc=3D?=

Content-Type: multipart/alternative;

boundary="_000_SEZPR06MB7392F437EF876888FCFFC66BA449ASEZPR06MB7392apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-8534-20-msonline-outlook-6a509.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SEZPR06MB7392.apcprd06.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 6c947be7-9bd7-4fef-55a8-08ddbf30aeb8

X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Jul 2025 21:36:36.6834

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: KL1PR0601MB5752

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I just wanted to check if you received my previous email.

If you're interested, simply reply with "SEND" or "Proposal," and I'll share

the details. If not, just reply "REMOVE" or "NO."



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.66.60 listed in dnsbl.ahbl.org]

[52.103.66.60 listed in dnsbl.ahbl.org]

[52.103.66.60 listed in dnsbl.ahbl.org]

[52.103.66.60 listed in dnsbl.ahbl.org]

[2603:1096:101:252:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:252:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:252:0:0:0:10 listed in]

[dnsbl.ahbl.org]

[2603:1096:101:252:0:0:0:10 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.66.60 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.66.60 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.66.60 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.66.60 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:101:252:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:252:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:252:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:252:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:252:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:252:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:252:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[2603:1096:101:252:0:0:0:10 listed in]

[will-spam-for-food.eu.org]

[52.103.66.60 listed in will-spam-for-food.eu.org]

[52.103.66.60 listed in will-spam-for-food.eu.org]

[52.103.66.60 listed in will-spam-for-food.eu.org]

[52.103.66.60 listed in will-spam-for-food.eu.org]

[52.103.66.60 listed in will-spam-for-food.eu.org]

[52.103.66.60 listed in will-spam-for-food.eu.org]

[52.103.66.60 listed in will-spam-for-food.eu.org]

[52.103.66.60 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.66.60 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.66.60 listed in wl.mailspike.net]

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[tobybaillon(at)hotmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Thank you for your response



--_000_SEZPR06MB7392F437EF876888FCFFC66BA449ASEZPR06MB7392apcp_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,







I just wanted to check if you received my previous email.







If you're interested, simply reply with "SEND" or "Proposal," and I'll shar=

e the details. If not, just reply "REMOVE" or "NO."



I'm waiting for your response!







Thanks!



----------------------------------------------



From: Toby

Sent: Friday, June 27, 2025 5:55 PM

Subject: Re: "Quotes/COST" Please respond..!







Hi,







I hope you're well.







I recently reviewed your website and see significant potential for growth.







I=92d like to offer a complimentary audit report, along with a quote, showi=

ng how we can greatly enhance your search results and help place your websi=

te on Google=92s first page.







May I send you the report and quote?







Thank you for considering this.







Best regards,



--_000_SEZPR06MB7392F437EF876888FCFFC66BA449ASEZPR06MB7392apcp_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








entToProof">


ack;">Hi,




entToProof">


ack;"> 




entToProof">


ack;">I just wanted to check if you received my previous email.




entToProof">


ack;"> 




entToProof">


ack;">If you're interested, simply reply with "
ont-family: Calibri, sans-serif; font-size: 11pt; color: rgb(12, 136, 42);"=

>SEND
ze: 11pt; color: black;">"

or "
: 11pt; color: rgb(12, 136, 42);">P
: Aptos, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">roposal<=

/span>
or: black;">,"

and I'll share the details. If not, just reply "
"font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(222, 106, 25=

);">REMOVE
nt-size: 11pt; color: black;">" or "
mily: Calibri, sans-serif; font-size: 11pt; color: rgb(222, 106, 25);">N=

O
t; color: black;">."




entToProof">


ack;">I'm waiting for your response!




entToProof">


ack;"> 




entToProof">


ack;">Thanks!




entToProof">


ack;">------------------------------------------=

----




entToProof">


ack;">From: Toby


Sent: Friday, June 27, 2025 5:55 PM


Subject: Re: "Quotes/COST" Please respond..!
p>


entToProof">


b(0, 0, 0);"> 




entToProof">


b(0, 32, 96);">Hi,




entToProof">


b(0, 32, 96);"> 




entToProof">


b(0, 32, 96);">I hope you're well.




entToProof">


b(0, 32, 96);"> 




entToProof">


b(0, 32, 96);">I recently reviewed your website and see significant potenti=

al for growth.




entToProof">


b(0, 32, 96);"> 




entToProof">


b(0, 32, 96);">I=92d like to offer a complimentary audit report, along with=

a quote, showing how we can greatly enhance your search results and help p=

lace your website on Google=92s first

page.




entToProof">


b(0, 32, 96);"> 




entToProof">


b(0, 32, 96);">May I send you the report and quote?




entToProof">


b(0, 32, 96);"> 




entToProof">


b(0, 32, 96);">Thank you for considering this.




entToProof">


b(0, 32, 96);"> 




entToProof">


b(0, 32, 96);">Best regards,









--_000_SEZPR06MB7392F437EF876888FCFFC66BA449ASEZPR06MB7392apcp_--