humanity nigerian spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Mar 2026 15:41:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxuto-00000000CLm-0qAd

for dave@doctor.nl2k.ab.ca;

Wed, 04 Mar 2026 15:41:00 -0700

Resent-From: The Doctor

Resent-Date: Wed, 4 Mar 2026 15:41:00 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.kalselprov.go.id ([103.142.89.3]:45286)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxuCU-00000000AIW-1O3Y

for doctor@mail.nl2k.ab.ca;

Wed, 04 Mar 2026 14:56:24 -0700

Received: from localhost (localhost [127.0.0.1])

by mail.kalselprov.go.id (Postfix) with ESMTP id 535831C26E52;

Thu, 5 Mar 2026 05:18:00 +0800 (WITA)

Received: from mail.kalselprov.go.id ([127.0.0.1])

by localhost (mail.kalselprov.go.id [127.0.0.1]) (amavis, port 10032)

with ESMTP id ifJ49tEtsFJK; Thu, 5 Mar 2026 05:17:59 +0800 (WITA)

Received: from localhost (localhost [127.0.0.1])

by mail.kalselprov.go.id (Postfix) with ESMTP id 175831C26D43;

Thu, 5 Mar 2026 05:17:59 +0800 (WITA)

X-Virus-Scanned: amavis at mail.kalselprov.go.id

Received: from mail.kalselprov.go.id ([127.0.0.1])

by localhost (mail.kalselprov.go.id [127.0.0.1]) (amavis, port 10026)

with ESMTP id XTP2qSjU3kED; Thu, 5 Mar 2026 05:17:58 +0800 (WITA)

Received: from mail.kalselprov.go.id (localhost [127.0.0.1])

by mail.kalselprov.go.id (Postfix) with ESMTP id 96C2D1C26D32;

Thu, 5 Mar 2026 05:17:57 +0800 (WITA)

Date: Thu, 5 Mar 2026 05:17:57 +0800 (WITA)

From: MRS ANN WHITE

Reply-To: MRS ANN WHITE

Message-ID: <927917270.29249.1772659077590.JavaMail.zimbra@kalselprov.go.id>

Subject: =?utf-8?Q?=E2=80=8B=E2=80=8BATTENTION_DEAR_LOVER_OF_HUMANITY.?=

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit

X-Originating-IP: [156.59.29.248]

X-Mailer: Zimbra 9.0.0_GA_4200044 (ZimbraWebClient - GC145 (Win)/9.0.0_GA_4200044)

Thread-Index: ZOP8w7y6ass5Qb6LeVbXr2MZDSmcHw==

Thread-Topic: =?utf-8?B?4oCL4oCLQVRURU5USU9O?= DEAR LOVER OF HUMANITY.

X-Spam_score: 10.9

X-Spam_score_int: 109

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: ATTENTION DEAR LOVER OF HUMANITY. I know it will be a great

surprise reading from me today but consider This divine intervention as a

pastor explained to my understanding today. I am Mrs. Ann White, I'm a widow

from Oklahoma, I am wri [...]



Content analysis details: (10.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[156.59.29.248 listed in will-spam-for-food.eu.org]

[156.59.29.248 listed in will-spam-for-food.eu.org]

[156.59.29.248 listed in will-spam-for-food.eu.org]

[156.59.29.248 listed in will-spam-for-food.eu.org]

[156.59.29.248 listed in will-spam-for-food.eu.org]

[156.59.29.248 listed in will-spam-for-food.eu.org]

[156.59.29.248 listed in will-spam-for-food.eu.org]

[156.59.29.248 listed in will-spam-for-food.eu.org]

[103.142.89.3 listed in will-spam-for-food.eu.org]

[103.142.89.3 listed in will-spam-for-food.eu.org]

[103.142.89.3 listed in will-spam-for-food.eu.org]

[103.142.89.3 listed in will-spam-for-food.eu.org]

[103.142.89.3 listed in will-spam-for-food.eu.org]

[103.142.89.3 listed in will-spam-for-food.eu.org]

[103.142.89.3 listed in will-spam-for-food.eu.org]

[103.142.89.3 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[103.142.89.3 listed in dnsbl.ahbl.org]

[103.142.89.3 listed in dnsbl.ahbl.org]

[103.142.89.3 listed in dnsbl.ahbl.org]

[103.142.89.3 listed in dnsbl.ahbl.org]

[156.59.29.248 listed in dnsbl.ahbl.org]

[156.59.29.248 listed in dnsbl.ahbl.org]

[156.59.29.248 listed in dnsbl.ahbl.org]

[156.59.29.248 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[103.142.89.3 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[103.142.89.3 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[103.142.89.3 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[103.142.89.3 listed in dnsbl.ahbl.org]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.142.89.3 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.142.89.3 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[103.142.89.3 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[103.142.89.3 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.6 SUBJ_ALL_CAPS Subject is all capitals

1.2 MISSING_HEADERS Missing To: header

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 HK_NAME_MR_MRS No description available.

1.9 REPLYTO_WITHOUT_TO_CC No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} =?utf-8?Q?=E2=80=8B=E2=80=8BATTENTION_DEAR_LOVER_OF_HUMANITY.?=







ATTENTION DEAR LOVER OF HUMANITY.



I know it will be a great surprise reading from me today but consider

This divine intervention as a pastor explained to my understanding

today. I am Mrs. Ann White, I'm a widow from Oklahoma, I am writing you

from my sick bed because i have been fighting cancer for a while now.



I will tell you more about myself and also explain why I need your help

with my donations for confidential reasons, Please write me soon as

possible, my health is pretty bad and my Doctors say I will be moved to

the intensive care unit.



I hope I can trust you? please do pray for me, I wait for your email

feedback,



kindly email me directly via this Email Here: mrs.annwhite@hotmail.com



Thank you

from Mrs. Ann White.

Scotiabank Phish Part 2











--1a7b5f4b4cc6f8d3d5a4259d5714c0f2f

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable







=09





=C2=A0








style=3D"font-style: inherit; font-variant-ligatures: inherit; font-varian=

t-position: inherit; font-variant-caps: inherit; font-variant-numeric: inhe=

rit; font-variant-alternates: inherit; font-variant-east-asian: inherit; fo=

nt-weight: inherit; font-stretch: inherit; font-size: inherit; line-height:=

inherit; font-family: Arial, sans-serif; font-optical-sizing: inherit; -we=

bkit-font-kerning: inherit; font-feature-settings: inherit; font-variation-=

settings: inherit; margin: 40px auto; border-top-left-radius: 10px; border-=

top-right-radius: 10px; border-bottom-right-radius: 10px; border-bottom-lef=

t-radius: 10px; box-shadow: rgba(0, 0, 0, 0.1) 0px 8px 20px; overflow: hidd=

en; transform: scale(0.751667, 0.751667); transform-origin: left top; backg=

round-position: initial initial; background-repeat: initial initial;" width=

=3D"600">

=09
just: auto;">

=09=09

=09=09=09

=09=09

=09


.6;">

=09=09=09

3D""
"External" data-olk-copy-source=3D"MessageBody" src=3D"https://logos-world.=

net/wp-content/uploads/2021/03/Scotiabank-Emblem.png" style=3D"border: 0px;=

font-family: inherit; font-size: inherit; font-style: inherit; font-varian=

t-caps: inherit; font-weight: inherit; font-stretch: inherit; line-height: =

inherit; margin: 0px; padding: 0px; vertical-align: baseline; color: inheri=

t; width: 150px; height: 84px;" />





=09=09=09

=C2=A0





=09=09=09

Date:=C2=A004 =

mars=C2=A02026





=09=09=09

Reference ID:=

=C2=A0SCB-9472-SEC-2026CA





=09=09=09

Dear Customer,





=09=09=09

We would like to inform you that a secure message containing im=

portant updates regarding your account has been sent to you.





=09=09=09

For your protection, we use secure messaging to promptly notify=

you of any changes or activities related to your account security.





=09=09=09


-linkindex=3D"0" href=3D"https://www.askanadventistfriend.com/wp-includes/c=

a/a/" rel=3D"noopener noreferrer" style=3D"border: 0px; font-style: inherit=

; font-variant-ligatures: inherit; font-variant-position: inherit; font-var=

iant-caps: inherit; font-variant-numeric: inherit; font-variant-alternates:=

inherit; font-variant-east-asian: inherit; font-weight: bold; font-stretch=

: inherit; font-size: inherit; line-height: inherit; font-family: inherit; =

font-optical-sizing: inherit; -webkit-font-kerning: inherit; font-feature-s=

ettings: inherit; font-variation-settings: inherit; margin: 0px; padding: 1=

4px 35px; vertical-align: baseline; background-color: rgb(215, 25, 32); col=

or: rgb(255, 255, 255); text-decoration-line: none; border-top-left-radius:=

6px; border-top-right-radius: 6px; border-bottom-right-radius: 6px; border=

-bottom-left-radius: 6px; display: inline-block;" target=3D"_blank" title=

=3D"https://shorturl.at/pk5M1">View Secure Message





=09=09=09

This secure message contains sensitive information regarding yo=

ur banking account. Please sign in to your online banking portal to review =

the complete details.





=09=09=09

Thank you for choosing our banking =

services.





=09=09=09

=C2=A0



=09=09=09












--1a7b5f4b4cc6f8d3d5a4259d5714c0f2f--

Scotiabank Phish Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Mar 2026 14:49:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxu5E-000000009zb-1giA

for dave@doctor.nl2k.ab.ca;

Wed, 04 Mar 2026 14:48:44 -0700

Resent-From: The Doctor

Resent-Date: Wed, 4 Mar 2026 14:48:44 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [91.212.52.120] (port=33132 helo=mybeautyshop.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxqIP-000000009qm-1RcP

for support@nl2k.ab.ca;

Wed, 04 Mar 2026 10:46:12 -0700

Received: by mybeautyshop.com (Postfix, from userid 1000)

id 753C5858748F; Wed, 4 Mar 2026 18:40:39 +0100 (CET)

Date: Wed, 4 Mar 2026 18:40:30 +0100

To: support@nl2k.ab.ca

From: =?UTF-8?B?U2NvdGlhQmFuay4=?=

Subject: =?UTF-8?B?SW1wb3J0YW50OiBTZWN1cmUgTWVzc2FnZSBSZWdhcmRpbmcgWW91ciBBY2NvdW50ICE=?=

Message-ID: <0f406fa80c6305284dbe429568f5c8a1@mybeautyshop.com>

List-Unsubscribe: mailto:bounce114-lihB83x8wOw4e0r@mybeautyshop.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1a7b5f4b4cc6f8d3d5a4259d5714c0f2f"

Content-Transfer-Encoding: 8bit

X-Spam_score: 12.8

X-Spam_score_int: 128

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Date: 04 mars 2026 Reference ID: SCB-9472-SEC-2026CA



Content analysis details: (12.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[91.212.52.120 listed in will-spam-for-food.eu.org]

[91.212.52.120 listed in will-spam-for-food.eu.org]

[91.212.52.120 listed in will-spam-for-food.eu.org]

[91.212.52.120 listed in will-spam-for-food.eu.org]

[91.212.52.120 listed in will-spam-for-food.eu.org]

[91.212.52.120 listed in will-spam-for-food.eu.org]

[91.212.52.120 listed in will-spam-for-food.eu.org]

[91.212.52.120 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[91.212.52.120 listed in dnsbl.ahbl.org]

[91.212.52.120 listed in dnsbl.ahbl.org]

[91.212.52.120 listed in dnsbl.ahbl.org]

[91.212.52.120 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[91.212.52.120 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[91.212.52.120 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[91.212.52.120 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[91.212.52.120 listed in dnsbl.ahbl.org]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[91.212.52.120 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[91.212.52.120 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.5 TVD_PH_SEC BODY: Message includes a phrase commonly used in phishing

mails

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[91.212.52.120 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[91.212.52.120 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.2 TVD_PH_SUBJ_META1 Email has a Phishy looking subject line

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

3.0 URI_WP_DIRINDEX URI for compromised WordPress site, possible malware

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

2.0 URI_WP_HACKED_2 URI for compromised WordPress site, possible malware

Subject: {SPAM?} =?UTF-8?B?SW1wb3J0YW50OiBTZWN1cmUgTWVzc2FnZSBSZWdhcmRpbmcgWW91ciBBY2NvdW50ICE=?=



This is a multi-part message in MIME format.



--1a7b5f4b4cc6f8d3d5a4259d5714c0f2f

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit













Â

















Â



Date: 04 mars 2026



Reference ID:Â SCB-9472-SEC-2026CA



Dear Customer,



We would like to inform you that a secure message containing important updates regarding your account has been sent to you.



For your protection, we use secure messaging to promptly notify you of any changes or activities related to your account security.



View Secure Message



This secure message contains sensitive information regarding your banking account. Please sign in to your online banking portal to review the complete details.



Thank you for choosing our banking services.



Â







Bitcoin phish from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Mar 2026 14:49:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxu4p-000000009yb-3Nd8

for dave@doctor.nl2k.ab.ca;

Wed, 04 Mar 2026 14:48:19 -0700

Resent-From: The Doctor

Resent-Date: Wed, 4 Mar 2026 14:48:19 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-dy1-f172.google.com ([74.125.82.172]:44110)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxpTk-000000007Ua-1w7W

for doctor@doctor.nl2k.ab.ca;

Wed, 04 Mar 2026 09:53:55 -0700

Received: by mail-dy1-f172.google.com with SMTP id 5a478bee46e88-2be26d11b95so2913490eec.0

for ; Wed, 04 Mar 2026 08:52:23 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1772643137; x=1773247937; darn=doctor.nl2k.ab.ca;

h=feedback-id:mime-version:importance:user-agent:message-id:date

:thread-topic:subject:reply-to:to:from:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=0zqUE6SyWQZKHHlNeAMZkKdvyY/oTlXZBmAGvqun+dI=;

b=ZfQXqFJHi3ywLfijrThf9TCAPfSOsicRYgk6jrhn3jf6axc2OnkQmtm7C6bguhYQqS

v9nRpexfAxl1KSAmcpe+txtIwcMpwv2F6TSzBmSOuukAZC+tX4B+U6rmmAA1VK1hYCwR

J2zqarrTnzJsceL0MuC3mBd4W2YURcjRX8vEthS+PpKhkhaRnjHv8rqrQBnFR+5hhIab

PUm+AmBS9yyPHRYFOJU5AF/7NirIkfwTZ9tWSj8ayzMs3eDXDG6L3t9kld0g0gvc4Kz8

j8x8h3ltSrO/wpVotJoID1DTN/Y0PM5zzCauPTzA+db/TQfwKO7SMrhvk4OG/8T9FghA

n30Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772643137; x=1773247937;

h=feedback-id:mime-version:importance:user-agent:message-id:date

:thread-topic:subject:reply-to:to:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=0zqUE6SyWQZKHHlNeAMZkKdvyY/oTlXZBmAGvqun+dI=;

b=DRvjwkdkEILDCSvh6/7v9dtUZ16QR/k0OGga1k4dj2c8ktLF9Q+j63tqUoyVekTbae

q7v8r+56N+EZrmQ+VzFkBl7vlEEdfgk2BE7z82IPmaqS+96VS4iMERF83r3hGkCd4swo

ZKdk1AV29KpMj+BSMP7Grl+oaYgnIrc/PaqPqm9/a7fvdimOSMZzu4P90w6Qf9GK3FLZ

0BDfNy/Sv/sUVKYkcR1bTtbBmXYV4P+W37ZcQFNRnx7+L3Z+ewtKh0sGIwTdW584iKHg

3o16JBLzTQnTHm64NTxBkKGF29EEsrT1hxh2e0VQdMvN7xPpSGqPEO3+nbjipir7yV/8

2e/A==

X-Gm-Message-State: AOJu0YwjCb6eWBMi7DRpthQo96yyyoXX6Tsal7G76yhtY7ETkKFbTLnr

E9peRtuqYFEwIFOuK1u7ldKg9O+AeUd/RhnXKPTavph5GJNtF97CmEff9lpQsMH2AwH+Sotv

X-Gm-Gg: ATEYQzyjmh0SIvoW6Tx/5bNNHv1uErIW9bRVd3tG5NfJH47TiUhStmtJd+cB0lMHxNh

qlrTPhdwPcMm8sFmo2oJ7PIYOZM0Nfawef+UbBorwoVDmtnle1418YJea+R+1ZNsvg443/01xsi

0HjWOB5z7gJUMh1+NpRzp4bVD69sFPHML5vuPX6poNjpWZ/B/cXEtndyaOnZYNxvrFJiIEfQkJj

XppYne5PNQAIWQ/+ELzeX8Qk2Oe8QIWY1QJwRPfnDYaE4jGxZmk36VT8T+NCMmEjWwRLAo95yq3

4WsFsul03+6TaTmt4WXbTihS5xXdl8B+pVWM/7sFZmT2oFTE9CHS7QPNicTmN9jNFo7xHcylFBh

MNE4ZQNolgRMA/9Xhc/Hk6fgb+ixcG2jWX9oF8NyVMpZdN6aYePRB/KuBwmcpOETq6Y4wd0SVB+

th9Y18K+Z468OnUva+Ti87hgleoyx6QZQoxMUNY5IYgt/NjGGKtA==

X-Received: by 2002:a05:7300:6c1f:b0:2b8:6573:2d35 with SMTP id 5a478bee46e88-2be30fbcc32mr1175985eec.2.1772643136481;

Wed, 04 Mar 2026 08:52:16 -0800 (PST)

Received: from [172.26.0.190] ([43.159.130.10])

by smtp.gmail.com with ESMTPSA id 5a478bee46e88-2bdfba0df2fsm11628561eec.7.2026.03.04.08.52.14

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Wed, 04 Mar 2026 08:52:15 -0800 (PST)

Content-Type: multipart/mixed; boundary="===============6574372760136662153=="

MIME-Version: 1.0

From: Elite Customer Care Team

To: doctor@doctor.nl2k.ab.ca

Reply-To: hugosanchez45788776532@gmail.com

Subject: Service Notice: 05-03-2026 | 8AF7

Thread-Topic: Service Notice: 05-03-2026

Date: Thu, 05 Mar 2026 00:52:14 +0800

Message-ID: <177264313472.6412.12816869606010319492@gmail.com>

X-Mailer: Zoho Mail v6.0

User-Agent: Zoho Mail v6.0

X-Priority: 3 (Normal)

Importance: Normal

MIME-Version: 1.0

X-Report-Abuse: Please report abuse to abuse@gmail.com

X-Entity-Ref-ID: 8cd9ef5c-385b-4a20-8b20-7d1b97b38bd8

Feedback-ID: RM2-ccd1:gmail.com



WzcbBolnYrrLYALVIHurzDFToqswBoulZffyQkDBgCkgHaxuwZIdIevJKArAufvV

INV-05BF79-384-2026

injk8bBL3OyEMdWcBpWhqCXHsQRknIxIIIw4xf4lwhY0 | eeb7473c



Info_INV-05BF79-384-2026.png



chinese products spam PArt2



--===============7552161966145469218==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64



PGh0bWw+PHRhYmxlIGFsaWduPSJjZW50ZXIiIGJvcmRlcj0iMCIgY2VsbHBhZGRpbmc9IjEiIGNl

bGxzcGFjaW5nPSIxIiBoZWlnaHQ9Ijk1NSIgd2lkdGg9IjkyMyI+Cgk8dGJvZHk+CgkJPHRyPgoJ

CQk8dGQ+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDAwMDAiPjxzcGFuIHN0eWxlPSJmb250LWZhbWls

eTpWZXJkYW5hLEdlbmV2YSxzYW5zLXNlcmlmIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjE2cHgi

PkRlYXIgPC9zcGFuPjwvc3Bhbj48L3NwYW4+U2lyIG9yIE1hZGFtPHNwYW4gc3R5bGU9ImNvbG9y

OiMwMDAwMDAiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpWZXJkYW5hLEdlbmV2YSxzYW5zLXNl

cmlmIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjE2cHgiPiwmbmJzcDs8L3NwYW4+PGJyIC8+CgkJ

CTxiciBzdHlsZT0iY3Vyc29yOnRleHQiIC8+CgkJCTxzcGFuIHN0eWxlPSJmb250LXNpemU6MTZw

eCI+PHNwYW4gc3R5bGU9ImN1cnNvcjp0ZXh0Ij48c3BhbiBzdHlsZT0iZm9udC1zdHlsZTpub3Jt

YWwiPjxzcGFuIHN0eWxlPSJmb250LXZhcmlhbnQ6bm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC13

ZWlnaHQ6NDAwIj48c3BhbiBzdHlsZT0ibGV0dGVyLXNwYWNpbmc6bm9ybWFsIj48c3BhbiBzdHls

ZT0idGV4dC1kZWNvcmF0aW9uOm5vbmUiPjxzcGFuIHN0eWxlPSJ0ZXh0LXRyYW5zZm9ybTpub25l

Ij48c3BhbiBzdHlsZT0id2hpdGUtc3BhY2U6bm9ybWFsIj48c3BhbiBzdHlsZT0id29yZC1zcGFj

aW5nOjBweCI+PGZvbnQgc3R5bGU9ImN1cnNvcjp0ZXh0Ij5Ib3cgYXJlIHlvdSA/PC9mb250Pjwv

c3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9z

cGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjxiciBzdHlsZT0iY3Vyc29yOnRleHQiIC8+CgkJCTxi

ciAvPgoJCQk8c3BhbiBzdHlsZT0iZm9udC1zaXplOjE2cHgiPjxzcGFuIHN0eWxlPSJjb2xvcjoj

MDAwMDAwIj48c3BhbiBzdHlsZT0iY3Vyc29yOnRleHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWls

eTpUaW1lcyBOZXcgUm9tYW4iPjxzcGFuIHN0eWxlPSJmb250LXN0eWxlOm5vcm1hbCI+PHNwYW4g

c3R5bGU9ImZvbnQtdmFyaWFudDpub3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXdlaWdodDo0MDAi

PjxzcGFuIHN0eWxlPSJsZXR0ZXItc3BhY2luZzpub3JtYWwiPjxzcGFuIHN0eWxlPSJ0ZXh0LWRl

Y29yYXRpb246bm9uZSI+PHNwYW4gc3R5bGU9InRleHQtdHJhbnNmb3JtOm5vbmUiPjxzcGFuIHN0

eWxlPSJ3aGl0ZS1zcGFjZTpub3JtYWwiPjxzcGFuIHN0eWxlPSJ3b3JkLXNwYWNpbmc6MHB4Ij48

c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6YXJpYWwsaGVsdmV0aWNhLHNhbnMtc2VyaWYiPjxzcGFu

IHN0eWxlPSJmb250LXNpemU6MTZweCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OlZlcmRhbmEs

R2VuZXZhLHNhbnMtc2VyaWYiPlRDRSBFbGVjdHJvbmljcyBpcyBhIHByPC9zcGFuPm9mZXNzaW9u

YWwgPC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9

Im9ycGhhbnM6MiI+PHNwYW4gc3R5bGU9InRleHQtZGVjb3JhdGlvbjpub25lIj48c3BhbiBzdHls

ZT0idGV4dC10cmFuc2Zvcm06bm9uZSI+PHNwYW4gc3R5bGU9IndoaXRlLXNwYWNlOm5vcm1hbCI+

PHNwYW4gc3R5bGU9IndvcmQtc3BhY2luZzowcHgiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTph

cmlhbCxoZWx2ZXRpY2Esc2Fucy1zZXJpZiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxNnB4Ij48

c3BhbiBzdHlsZT0iY29sb3I6IzAwMDAwMCI+bWFudWZhY3R1cmVyIG9mIGN1c3RvbS1kZXNpZ25l

ZCZuYnNwOyBpbmR1Y3Rvci90b3JvaWQgY2hva2UgLjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bh

bj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFu

Pjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48YnIgLz4KCQkJPGltZyBhbHQ9IiIgc3JjPSJo

dHRwczovL2NvdW50Lm1hcmtldGluZy1qZC50b3AvdGVtcGxhdGUvYWpheF9nZXRfbmV0d29ya19h

dHRhY2gvP2lkPTEzODkyNDkmYW1wO3VmaWxlX25hbWU9M2U3N2RhOGUtNzM3Ni0xMWYwLTk0ZTct

MDA1MDU2OTY3YzMxLTM2MzQzLmpwZyZhbXA7YWlkPTEiIHN0eWxlPSJ3aWR0aDogMTAwMHB4OyBo

ZWlnaHQ6IDQxOHB4OyIgLz4KCQkJPGRpdiBzdHlsZT0idGV4dC1hbGlnbjpsZWZ0OyAtd2Via2l0

LXRleHQtc3Ryb2tlLXdpZHRoOjBweCI+Jm5ic3A7PC9kaXY+CgkJCTwvdGQ+CgkJPC90cj4KCQk8

dHI+CgkJCTx0ZD4KCQkJPGRpdiBzdHlsZT0idGV4dC1hbGlnbjpsZWZ0OyAtd2Via2l0LXRleHQt

c3Ryb2tlLXdpZHRoOjBweCI+PHNwYW4gc3R5bGU9ImN1cnNvcjp0ZXh0Ij48c3BhbiBzdHlsZT0i

Zm9udC1zdHlsZTpub3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXZhcmlhbnQ6bm9ybWFsIj48c3Bh

biBzdHlsZT0iZm9udC13ZWlnaHQ6NDAwIj48c3BhbiBzdHlsZT0ibGV0dGVyLXNwYWNpbmc6bm9y

bWFsIj48c3BhbiBzdHlsZT0ib3JwaGFuczoyIj48c3BhbiBzdHlsZT0idGV4dC1kZWNvcmF0aW9u

Om5vbmUiPjxzcGFuIHN0eWxlPSJ0ZXh0LXRyYW5zZm9ybTpub25lIj48c3BhbiBzdHlsZT0id2hp

dGUtc3BhY2U6bm9ybWFsIj48c3BhbiBzdHlsZT0id29yZC1zcGFjaW5nOjBweCI+TG9va2luZyBm

b3J3YXJkIHRvIHJlY2VpdmluZyB5b3VyIGtpbmQgaW5xdWlyeSBzb29uLjwvc3Bhbj48L3NwYW4+

PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48

L2Rpdj4KCgkJCTxkaXYgc3R5bGU9InRleHQtYWxpZ246bGVmdDsgLXdlYmtpdC10ZXh0LXN0cm9r

ZS13aWR0aDowcHgiPiZuYnNwOzwvZGl2PgoKCQkJPGRpdiBzdHlsZT0idGV4dC1hbGlnbjpsZWZ0

OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOjBweCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox

NnB4Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAwMDAwMCI+PHNwYW4gc3R5bGU9ImN1cnNvcjp0ZXh0

Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6VGltZXMgTmV3IFJvbWFuIj48c3BhbiBzdHlsZT0i

Zm9udC1zdHlsZTpub3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXZhcmlhbnQ6bm9ybWFsIj48c3Bh

biBzdHlsZT0iZm9udC13ZWlnaHQ6NDAwIj48c3BhbiBzdHlsZT0ibGV0dGVyLXNwYWNpbmc6bm9y

bWFsIj48c3BhbiBzdHlsZT0ib3JwaGFuczoyIj48c3BhbiBzdHlsZT0idGV4dC1kZWNvcmF0aW9u

Om5vbmUiPjxzcGFuIHN0eWxlPSJ0ZXh0LXRyYW5zZm9ybTpub25lIj48c3BhbiBzdHlsZT0id2hp

dGUtc3BhY2U6bm9ybWFsIj48c3BhbiBzdHlsZT0id29yZC1zcGFjaW5nOjBweCI+PHNwYW4gc3R5

bGU9ImZvbnQtZmFtaWx5OmFyaWFsLGhlbHZldGljYSxzYW5zLXNlcmlmIj48c3BhbiBzdHlsZT0i

Zm9udC1zaXplOjE2cHgiPkJlc3QgcmVnYXJkczxiciAvPgoJCQlEYXZpZCBUYW5nPC9zcGFuPjwv

c3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9z

cGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9kaXY+CgoJCQk8ZGl2IHN0

eWxlPSJ0ZXh0LWFsaWduOmxlZnQ7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6MHB4Ij48aW1n

IGFsdD0iIiBzcmM9Imh0dHBzOi8vZWRtLmVkbWNuLmNuL3VzZXJpbWFnZXMvMzI0MC9mODlhYzNl

ZmNhZjc3YTI2NjE5YWUzMzliMmUyYzI1MS5qcGciIHN0eWxlPSJ3aWR0aDogMjAwcHg7IGhlaWdo

dDogMTc2cHg7IiAvPjxpbWcgYWx0PSIiIHNyYz0iaHR0cHM6Ly9jb3VudC5tYXJrZXRpbmctamQu

dG9wL3RlbXBsYXRlL2FqYXhfZ2V0X25ldHdvcmtfYXR0YWNoLz9pZD0xMzg5MjQ5JmFtcDt1Zmls

ZV9uYW1lPTQ5MDkwNjU2LWVhYzQtMTFmMC1iNmU4LTAwNTA1Njk2N2MzMS0zMjg3Mi5wbmcmYW1w

O2FpZD0xIiBzdHlsZT0id2lkdGg6IDQwMHB4OyBoZWlnaHQ6IDI2OXB4OyIgLz48YnIgLz4KCQkJ

Jm5ic3A7PC9kaXY+CgoJCQk8ZGl2IHN0eWxlPSJ0ZXh0LWFsaWduOmxlZnQ7IC13ZWJraXQtdGV4

dC1zdHJva2Utd2lkdGg6MHB4Ij48IS0tIHgtdGlueW1jZS9odG1sIC0tPkFkZDogRmxvb3IgMiwg

QmxkZyAxMCwgMm5kIEluZHVzdHJpYWwgUGFyaywgR3VhbmxvbmcgWGlsaSwgTmFuc2hhbiBEaXN0

cmljdCwgU2hlbnpoZW4sIEd1YW5nZG9uZywgQ2hpbmEgUEM6NTE4MDU1PGJyIC8+CgkJCVRlbDog

ODYtNzU1LTg2MTQ4MDQxICZuYnNwOyAmbmJzcDtFeHQmbmJzcDs4MDEgJm5ic3A7ICZuYnNwOyZu

YnNwOzxiciAvPgoJCQlGYXg6IDg2LTc1NS04NjE0ODAzNDxiciAvPgoJCQlFLW1haWw6IDx1Pjxh

PnNhbGVzQHRjZS1lbGVjdHJvbmljcy5jb208L2E+PC91PjxiciAvPgoJCQk8dT5XZWJzaXRlOiB3

d3cudGNlLWVsZWN0cm9uaWNzLmNvbTwvdT4mbmJzcDs8L2Rpdj4KCgkJCTxkaXYgc3R5bGU9InRl

eHQtYWxpZ246bGVmdDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDowcHgiPiZuYnNwOzwvZGl2

PgoJCQk8L3RkPgoJCTwvdHI+CgkJPHRyPgoJCQk8dGQ+CgkJCTxkaXYgc3R5bGU9InRleHQtYWxp

Z246bGVmdDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDowcHgiPjxiciAvPgoJCQkmbmJzcDs8

L2Rpdj4KCQkJPC90ZD4KCQk8L3RyPgoJPC90Ym9keT4KPC90YWJsZT4KPGJyIC8+CjxiciAvPgo8

YnIgLz4KPGJyIC8+CjxiciAvPgo8YnIgLz4KPGJyIC8+CiZuYnNwOzxpbWcgc3JjPSJodHRwczov

L2NvdW50Lm1hcmtldGluZy1qZC50b3AvbmV3X3RyYWNrL3Q0L056ZzJOemd4T1h4OE1qQXlOakF6

TURReU1qRXdNakV0T0RjMU5pMDVNSHg4YzJGc1pYTkFibXN1WTJFPS5naWYiIGJvcmRlcj0iMCIg

d2lkdGg9IjEiIGhlaWdodD0iMSIgc3R5bGU9ImRpc3BsYXk6bm9uZSIgLz48L2h0bWw+



--===============7552161966145469218==--

chinese products spam PArt 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Mar 2026 08:32:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxoBm-00000000OgN-2AeK

for dave@doctor.nl2k.ab.ca;

Wed, 04 Mar 2026 08:31:06 -0700

Resent-From: The Doctor

Resent-Date: Wed, 4 Mar 2026 08:31:06 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from smtp74-84.mmglsmd.net ([160.124.74.84]:34829)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxnL5-00000000La0-1hHg

for sales@nk.ca;

Wed, 04 Mar 2026 07:37:08 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=tc-elect.com;

i=@tc-elect.com; q=dns/txt; s=umail; t=1772634950;

h=content-type : mime-version : message-id : reply-to :

subject : from : to : date : subject : from : date;

bh=QYEUu9g2pVYlCNDn7rb5WiNPsp7p61ET2VTlGBW/Nxc=;

b=g7rmB2EKJ611O3oVKIqbWkr6uZ9vClMPgFBWXaWUMMcma/XWlO74Wo3j

S5sAh34jmDRFXe6j8tuiel9vTibo84WGtPfpXohyl884dgBWvQmdN8JADp

NwVslBCYxp8Qy28J45duJva/H4SESIxAJRf3jGUewvQMgM8YzyHexg28E=

Received: from helo (unknown [127.0.0.1])

by smtp.tc-elect.com (Postfix) with ESMTP id uixkOteHzXhL

for ; Wed, 04 Mar 2026 22:35:50 +0800

Content-Type: multipart/mixed; boundary="===============7552161966145469218=="

MIME-Version: 1.0

Message-Id: <20260304223550.45193-{8756:20260304221021-8756-90}-0025935@tc-elect.com>

Reply-to: sales@tce-electronics.com

Subject: =?utf-8?q?Supply_toroidal_choke?=

From: David

To: Sir or Madam

Date: Wed, 04 Mar 2026 22:35:50 +0800

Mail-ID: 69a83d86e1382308b48a2ac6

X-Spam_score: 14.3

X-Spam_score_int: 143

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir or Madam, How are you ? TCE Electronics is a professional

manufacturer of custom-designed inductor/toroid choke .



Content analysis details: (14.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.124.74.84 listed in will-spam-for-food.eu.org]

[160.124.74.84 listed in will-spam-for-food.eu.org]

[160.124.74.84 listed in will-spam-for-food.eu.org]

[160.124.74.84 listed in will-spam-for-food.eu.org]

[160.124.74.84 listed in will-spam-for-food.eu.org]

[160.124.74.84 listed in will-spam-for-food.eu.org]

[160.124.74.84 listed in will-spam-for-food.eu.org]

[160.124.74.84 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.124.74.84 listed in dnsbl.ahbl.org]

[160.124.74.84 listed in dnsbl.ahbl.org]

[160.124.74.84 listed in dnsbl.ahbl.org]

[160.124.74.84 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.124.74.84 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.124.74.84 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.124.74.84 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.124.74.84 listed in dnsbl.ahbl.org]

0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist

[URI: edm.edmcn.cn/113.10.156.149]

-0.0 SPF_PASS SPF: sender matches SPF record

3.4 RATWARE_RCVD_PF Bulk email fingerprint (Received PF) found

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.4 SALES_REPLY Your parents named you sales?

2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: count.marketing-jd.top (top)]

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?utf-8?q?Supply_toroidal_choke?=

Social Media followers spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Mar 2026 06:00:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxlp6-000000004ZH-0LfP

for dave@doctor.nl2k.ab.ca;

Wed, 04 Mar 2026 05:59:32 -0700

Resent-From: The Doctor

Resent-Date: Wed, 4 Mar 2026 05:59:31 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f72.google.com ([209.85.161.72]:52735)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from <3CQ-oaQ0JBRwOAKLGF2DAF8828E2AD.4GEK2D6KFC.42@maestro.bounces.google.com>)

id 1vxjzN-00000000KDm-0YSd

for sales@nk.ca;

Wed, 04 Mar 2026 04:02:08 -0700

Received: by mail-oo1-f72.google.com with SMTP id 006d021491bc7-6798921eff4so91835895eaf.1

for ; Wed, 04 Mar 2026 03:01:14 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1772622068; x=1773226868; darn=nk.ca;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=BK38UMYM8auvQhXhvGqWhScg5IQLdcYyq1XbaMWxVfk=;

b=IcOKgsQiozq6UYTv1jqnK0B9hjBXaBXZfYHW/PqVLzqpMs3xB8OGuCCPQWKpzGhj6X

79K4JsYq085lbttjXDSn4hOLplro++FQGziVtTbOxWRTbNqeuK8tt+WhvoB/9w+rZX6k

vP87SeilsMjFenJkiWaNnX2hzexxZZv2LKsoZNlYJRZXnW1pce2huOY/4TIof0XF+aLt

skKgY9jPBaW2z5TM7UYs2kfGgs1+kroDM7Q8DOyPAlgFvGwwZwxoje76CveIO8m3L31D

lHpg4jTDPS2Zj796PsWalEfvf5058QCqyJzXjQ+vICg37RO5jDOb8nQvmK2uQr7GWTEn

JJyg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772622068; x=1773226868;

h=content-transfer-encoding:to:from:subject:date:message-id

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=BK38UMYM8auvQhXhvGqWhScg5IQLdcYyq1XbaMWxVfk=;

b=JL1YJ/VEd594z2WIE4QWhd7pAT5lep2KjE1BnnKRR0WngvZHPLXHNFp2tOSULYClfz

XD74s4EhRrhwUOKY0bzI0niTLp0KlPqaRGAXchs0RL9Mg5qP5BE1CgHugu2TMvdmUzGl

Nin8sgXZ15QUdsaFXIHMaNtJCTGC/jYf+qIA/Z4vgSNt4cyBqb1YvZb4s9kFV+tdUB27

ngoo7WpHi4N88ItpBq4YZmVCwcoDFuufeuqMSkHD1tRGHntiw90NIAyuEyJpj+Bu2iLe

Tfaj8PFFFDrNKvQvGWI2Zq9SrWbKPMHtTEyNSWWlvWUr6DwSoJZrTDj0cdtkI8DDjb8z

qt8g==

X-Gm-Message-State: AOJu0Yye0u/iLdBB4AaOsOYBGNCqr4axYqHNX4Qs85WJJsw1wsSvobmw

HA1G2ELlTA343OTiRszcwJwRAeEFwByk849/rt8Qt0Pd3gVLF03VXbqwuLXFZhfK/YTd7a6Es0W

5MpK4

MIME-Version: 1.0

X-Received: by 2002:a05:690e:1909:b0:64c:f929:7495 with SMTP id

956f58d0204a3-64cf9b2ef3amr890926d50.1.1772621577461; Wed, 04 Mar 2026

02:52:57 -0800 (PST)

Message-ID:

Date: Wed, 04 Mar 2026 10:52:57 +0000

Subject: netknowyeg, Get More 1,000 Instagram Followers and 1,000 Facebook

Likes here

From: wistonalingga@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 9.7

X-Spam_score_int: 97

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, netknowyeg, Get More 1,000 Instagram Followers and 1,000

Facebook Likes here Sorry to interrupt your time. We offer social media services,

If you're interested, please visit our Website. If you're not interested,

please skip this step.



Content analysis details: (9.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.161.72 listed in will-spam-for-food.eu.org]

[209.85.161.72 listed in will-spam-for-food.eu.org]

[209.85.161.72 listed in will-spam-for-food.eu.org]

[209.85.161.72 listed in will-spam-for-food.eu.org]

[209.85.161.72 listed in will-spam-for-food.eu.org]

[209.85.161.72 listed in will-spam-for-food.eu.org]

[209.85.161.72 listed in will-spam-for-food.eu.org]

[209.85.161.72 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.72 listed in dnsbl.ahbl.org]

[209.85.161.72 listed in dnsbl.ahbl.org]

[209.85.161.72 listed in dnsbl.ahbl.org]

[209.85.161.72 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.72 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.72 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.72 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: instatool.site]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[wistonalingga(at)gmail.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.72 listed in wl.mailspike.net]

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} netknowyeg, Get More 1,000 Instagram Followers and 1,000 Facebook

Likes here



Hi, netknowyeg, Get More 1,000 Instagram Followers and 1,000 Facebook Likes here

Sorry to interrupt your time.



We offer social media services,

If you're interested, please visit our Website.

If you're not interested, please skip this step.



We will help you increase your social media presence to another level.

( Threads, Instagram, Twitter, Youtube, Facebook, etc. )



Are you interested in a free trial ?

Special For You Bonus Extra $2 FREE SIGNUP NOW..!!!

GET 100K Followers Instagram NOW !!!

Order here :



[ https://instatool.site/services/?Netknow Internet Service ]





Take free trial service today only...!!

10 -101K Instagram Followers



- Instant Start

- Safest Methods

- Privacy Protection

- Speed 200K Followers/day

- High Quality Followers

- Drop-Back Guarantee

- Trusted Seller testimony

- Starting get 100K Followers Instagram

- Guaranteed to be the cheapest



Thank you,

Regards,



Copyright © 2014 - 2026 instatool.site

Money invest spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Mar 2026 06:00:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxloz-000000004H7-46FU

for dave@doctor.nl2k.ab.ca;

Wed, 04 Mar 2026 05:59:25 -0700

Resent-From: The Doctor

Resent-Date: Wed, 4 Mar 2026 05:59:25 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-lj1-f174.google.com ([209.85.208.174]:55744)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxjoQ-00000000JYP-3h2T

for doctor@doctor.nl2k.ab.ca;

Wed, 04 Mar 2026 03:50:52 -0700

Received: by mail-lj1-f174.google.com with SMTP id 38308e7fff4ca-38700168abaso46663321fa.3

for ; Wed, 04 Mar 2026 02:49:55 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1772621388; cv=none;

d=google.com; s=arc-20240605;

b=L/O+4kmWGaIDcp+62uc7NG9w1MDlFNt79l4uDHGADmhsOTz0CGbrpDI1qTqtpafsku

uS7Mmr3IAZ7PEfc8vzbUtBTId4qlHFPpvLnrw3djXQW1kZOasUAqD6sUkqHh7fOvzkkM

d5e07TUEuXwDtHV5tes7Mv9W/Z1ahlA5kmWh4z2NlGaZU0R7PH/oVSpks9R97u7JQ6M8

axWMXOlCMZXt42P7Xi+vFHfgMJBBqA6OzoUJJALeTckhWYSKeXHb9rBMSjrn1tSmIZ80

bmXsuRAVaB0Q42V/3ZzaGjJNuVbv5PRiupmldSmXLwfC6FWZGAqUN51OKy520igmtGip

ImGg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=okG4tUL+e9o1d14/ic0IdZR7QJb8OCknBRHnUppO5rY=;

fh=yfKFvR2C+u68ygu1DA94eYUvg5TKR1LwzY9KWupTSzI=;

b=dnbpkf4cND2w91ezyz1eGqpzhajorRZcB9fyaKMmFAxf94Ct3UrSp+ZAiVeVuIER2R

4JHoxU4PMtFEZz0XB4ZVsaeRY8KbRSIKMpBqb+q97xOCNgv5LrAbNZX6dnvS0DVAGOgi

cxH+RnmoiZQdsgta7iFKlxqrrbZaLWuEIipEPGBXtQhpUS8yGISAiX6BzI+Cuj4dMURs

wxMUsWMIU475Q6ZJbKAPt9V9pmKgyrkeJUgOS6JAmf9koZ706+/vKlFKiS0KsxVBlx/d

jfuWJTT+a3iexB/aPo58rJcLCFnPEnFNNAP6sx+h3EzBt0pXcbcQKx/c0Ez7SOhzqd/0

H9KA==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1772621388; x=1773226188; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=okG4tUL+e9o1d14/ic0IdZR7QJb8OCknBRHnUppO5rY=;

b=he6B5PFTMYp7p0q6q3nEwQSuiE0vNv8NkTSpx07DG/3F/xzeneqapMitGylojo45SZ

H8RmXFFHEQhjYTHEeHvGHOLttc1eyrad9cFKRMCEdUn1K/mpo/EUOzUAOocXEgC8VR5z

PFWRE8bi90RPLPu4+kBF8pveC7g7wU7R5zisQCiNR4q9o/i02CTTEv9WIzt6haxzyZ1m

PBr5vC+hd2DiN3PwAMx9sXF3MVxR1McQPqZuOZm9UadMxkBmddpfIG31lNb1XaoNTmkK

SY3Kd2fU7AyvSDp1ZWF9v4GCvpyk8UAg3HjkB28KdqAtu0uj+Kth0pIvYjcLEA6vxOVn

kbsg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772621388; x=1773226188;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=okG4tUL+e9o1d14/ic0IdZR7QJb8OCknBRHnUppO5rY=;

b=hsTsUsC58yotr3RLbC2OhK33+i/2kBiVzURV8kXPqNDbjLj7asnYODP0QyIT/3RySw

RpFQq+B1ZVq0oHsHkwnhtlRDNSs9lah3UUTf9sYFu6O0pHmnfLrAOdEbNog32VQ16Cf5

phhIgy+pfL2MnOBbpGbQNBLeyUSuNRxTcSaiy0PkBVwiMBUp0rpgJgdffHCo2cn1Wj7+

/JVby6APHADlUTpOjwE31U9bkeGIsDlX81puXHlZJ6X5myVNfAERlMAQ3PR0ZJAfWpNI

HpewMWsnvQHzFz0LFq10majJiFbJi1TfzPsQicrR27qoe4sWBx4F77K2/ihtc0LzhDjT

V3rQ==

X-Forwarded-Encrypted: i=1; AJvYcCVr4mFG57ZeVGhEwvC285vKJa3hM/zCBTQfrQeVMz2Ddkdz3bTkpz5K33qTKxbxAzCHNirLsA4=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YwgMbpExxgA+ry7wLj98VeZZ7fa5/ykY2orNddsshiIsT9iI4bn

c+8+bVkoSIeJV5hXhsZ+zKdZOil2AOGfm0lgzOI05z2yvrug+29H5BB0buhXBUdYZ4mdpNS+fqd

xsrgm64YZqdCHKvGnIOhiBAQSmAjaBgg=

X-Gm-Gg: ATEYQzz/HdOXUvjQBWrmwYIiIeFyS3Z21DljW/X7UvxCFeWuuIVBDxo1SNjZzgLkGpn

lYxRic/PgaG298CNZj4QXFZtG3e3qrnZ+Ys8affR8gBAMuBb90+cTMbdSlJYzNHxQqMzXft/3pm

WHNatdtZjL/S/3naJ0l0jCyKWa5ONYKvkqJDrO/xAucVZ24stCsguCmfiYGOu8VyxZ4vfpc0Gqh

plIUhIz7QCHUecUhFeSjeZB5l6NjAnYQT9p5QIUxX+c2UhOe9mHsfpPbAn/2lGHF4HCwZP4Q2b3

yk6XSC9VEDsv

X-Received: by 2002:a2e:bc24:0:b0:38a:2def:5a39 with SMTP id

38308e7fff4ca-38a2def5b80mr9970871fa.14.1772621388316; Wed, 04 Mar 2026

02:49:48 -0800 (PST)

MIME-Version: 1.0

Reply-To: davidnelson7702626@gmail.com

From: yenso mark

Date: Wed, 4 Mar 2026 11:49:41 +0100

X-Gm-Features: AaiRm52E5dbHp6a7Kxm7AlwTafmfzygdQsKrs3PHPU4s9ElSZlu4TJbmqlB6COA

Message-ID:

Subject:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000002c042e064c30941e"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 11.5

X-Spam_score_int: 115

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello friend, I want to send money to you to enable me to

invest in your country and get back to me if you are interested. Hello friend,

I want to send money to you to enable me to invest in your country and get

back to me if you are interested.



Content analysis details: (11.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.208.174 listed in will-spam-for-food.eu.org]

[209.85.208.174 listed in will-spam-for-food.eu.org]

[209.85.208.174 listed in will-spam-for-food.eu.org]

[209.85.208.174 listed in will-spam-for-food.eu.org]

[209.85.208.174 listed in will-spam-for-food.eu.org]

[209.85.208.174 listed in will-spam-for-food.eu.org]

[209.85.208.174 listed in will-spam-for-food.eu.org]

[209.85.208.174 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.208.174 listed in dnsbl.ahbl.org]

[209.85.208.174 listed in dnsbl.ahbl.org]

[209.85.208.174 listed in dnsbl.ahbl.org]

[209.85.208.174 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.208.174 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.208.174 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.208.174 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.208.174 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.174 listed in list.dnswl.org]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[davidnelson7702626(at)gmail.com]

1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[yenso4422(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[yenso4422(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.174 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

Subject: {SPAM?}



--0000000000002c042e064c30941e

Content-Type: text/plain; charset="UTF-8"



Hello friend, I want to send money to you to enable me to invest in your

country and get back to me if you are interested.



--0000000000002c042e064c30941e

Content-Type: text/html; charset="UTF-8"





Hello

friend, I want to send money to you to enable me to invest in your country and

get back to me if you are interested.









--0000000000002c042e064c30941e--

German language phish from Google Gmail Part 3


argin:0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"=

;">
talic">GEWINNZAHL: (8-27-37-4=

0-41-43)




argin:0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"=

;">
talic">Datum: Mittwoch, 8. Ok=

tober 2025




argin:0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"=

;">
talic">Betrag: 3 Millionen US=

-Dollar




argin:0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"=

;">
talic">G=C3=BCltig bis: Ende =

2026




argin:0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"=

;">
talic">Wir m=C3=B6chten Sie d=

ar=C3=BCber informieren, dass wir die =C3=9Cberweisung Ihres

Gewinns auf Ihr lokales Bankkonto veranlasst haben. Die Gutschrift und

Aktivierung erfolgt durch unsere Rechtsabteilung (Telex).

p>


argin:0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"=

;">
talic">Bitte kontaktieren Sie=

Ihre Bank:




argin:0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"=

;">
talic">E-Mail:

onlinecitibankuk@gmail.com<=

/a>




argin:0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"=

;">
talic">Name: Jane Fraser




argin:0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"=

;">
talic">CEO




argin:0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"=

;">
talic">Citibank of London
an>




argin:0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"=

;">
talic">Wir garantieren Ihnen =

besten Service.




argin:0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"=

;">
talic">Mit freundlichen Gr=C3=

=BC=C3=9Fen,




argin:0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"=

;">
talic">Unterschrift: David Kn=

ott, CEO




argin:0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"=

;">
talic">National Lottery Fund<=

/span>

nt-style:italic">




argin:0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"=

;">
talic">=C2=A0

mail-MsoSubtleEmphasis" style=3D"color:gray;font-style:italic">
=3D"EN-US" style=3D"font-size:12pt">



;font-style:italic">=C2=A0=C2=A0
an>




argin:0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"=

;">
talic">=C2=A0




argin:0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"=

;">
talic">=C2=A0




argin:0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"=

;">
talic">=C2=A0




argin:0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"=

;">
talic">=C2=A0=C2=A0

=3D"gmail-MsoSubtleEmphasis" style=3D"color:gray;font-style:italic">
ang=3D"EN-US" style=3D"font-size:12pt">




e:11pt;font-family:Calibri,"sans-serif"">
SubtleEmphasis" style=3D"color:gray;font-style:italic">
size:12pt">=C2=A0




l;font-size:11pt;font-family:Calibri,"sans-serif"">
"gmail-MsoSubtleEmphasis" style=3D"color:gray;font-style:italic">
=3D"EN-US" style=3D"font-size:12pt">=C2=A0











--000000000000403c03064c2f4828--

German language phish from Google Gmail Part 2

--000000000000403c03064c2f4828

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Achtung: E-Mail-Inhaber



Herzlichen Gl=C3=BCckwunsch zum Gewinn unserer k=C3=BCrzlich abgeschlossene=

n

nationalen Gratis-Lotterie 2025!



Wir sind =C3=BCberzeugt, dass Sie Google und seine Dienste auch weiterhin m=

it

Ihrem Gewinn nutzen werden. Google ist die weltweit gr=C3=B6=C3=9Fte Suchma=

schine,

und um dies zu gew=C3=A4hrleisten, haben wir ein webbasiertes E-Mail-Gewinn=

spiel

veranstaltet. Ihre E-Mail-Adresse hat drei Millionen US-Dollar (3.000.000

USD) gewonnen.



Hiermit best=C3=A4tigen wir offiziell, dass Sie alle Anforderungen, rechtli=

chen

Verpflichtungen, =C3=9Cberpr=C3=BCfungen und die erforderlichen Meldungen e=

rfolgreich

abgeschlossen haben. Der Test wurde allen Online-Gewinnern unterzogen.



Sie k=C3=B6nnen Ihre Gewinnzahl auf dieser Website einsehen:

https://www.lotteryusa.com/missouri/lotto/year



Weitere Details finden Sie unten.



GEWINNZAHL: (8-27-37-40-41-43)



Datum: Mittwoch, 8. Oktober 2025



Betrag: 3 Millionen US-Dollar



G=C3=BCltig bis: Ende 2026



Wir m=C3=B6chten Sie dar=C3=BCber informieren, dass wir die =C3=9Cberweisun=

g Ihres Gewinns

auf Ihr lokales Bankkonto veranlasst haben. Die Gutschrift und Aktivierung

erfolgt durch unsere Rechtsabteilung (Telex).



Bitte kontaktieren Sie Ihre Bank:



E-Mail: onlinecitibankuk@gmail.com



Name: Jane Fraser



CEO



Citibank of London



Wir garantieren Ihnen besten Service.



Mit freundlichen Gr=C3=BC=C3=9Fen,



Unterschrift: David Knott, CEO



National Lottery Fund



--000000000000403c03064c2f4828

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




cing=3D"0" cellpadding=3D"0" align=3D"left" width=3D"674" style=3D"width:50=

5.4pt;margin-left:4.8pt;margin-right:4.8pt">




















argin:0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"=

;">
talic">=C2=A0=C2=A0




argin:0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"=

;">
talic">=C2=A0

mail-MsoSubtleEmphasis" style=3D"color:gray;font-style:italic">
=3D"EN-US" style=3D"font-size:12pt">Achtung: E-Mail-Inhaber

p>


argin:0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"=

;">
talic">Herzlichen Gl=C3=BCckw=

unsch zum Gewinn unserer k=C3=BCrzlich abgeschlossenen nationalen

Gratis-Lotterie 2025!




argin:0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"=

;">
talic">Wir sind =C3=BCberzeug=

t, dass Sie Google und seine Dienste auch weiterhin mit

Ihrem Gewinn nutzen werden. Google ist die weltweit gr=C3=B6=C3=9Fte Such=

maschine, und

um dies zu gew=C3=A4hrleisten, haben wir ein webbasiertes E-Mail-Gewinnsp=

iel

veranstaltet. Ihre E-Mail-Adresse hat drei Millionen US-Dollar (3.000.000

USD) gewonnen.




argin:0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"=

;">
talic">Hiermit best=C3=A4tige=

n wir offiziell, dass Sie alle Anforderungen,

rechtlichen Verpflichtungen, =C3=9Cberpr=C3=BCfungen und die erforderlich=

en Meldungen

erfolgreich abgeschlossen haben. Der Test wurde allen Online-Gewinnern

unterzogen.




argin:0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"=

;">
talic">Sie k=C3=B6nnen Ihre G=

ewinnzahl auf dieser Website einsehen:

https://www.lo=

tteryusa.com/missouri/lotto/year




argin:0in 0in 10pt;font-size:11pt;font-family:Calibri,"sans-serif"=

;">
talic">Weitere Details finden=

Sie unten.

German language phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Mar 2026 06:00:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxloc-0000000039t-1bb4

for dave@doctor.nl2k.ab.ca;

Wed, 04 Mar 2026 05:59:02 -0700

Resent-From: The Doctor

Resent-Date: Wed, 4 Mar 2026 05:59:02 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f43.google.com ([209.85.219.43]:54501)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxiMb-00000000FBR-29Gt

for doctor@doctor.nl2k.ab.ca;

Wed, 04 Mar 2026 02:18:01 -0700

Received: by mail-qv1-f43.google.com with SMTP id 6a1803df08f44-899fa9610bbso48728656d6.0

for ; Wed, 04 Mar 2026 01:17:06 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1772615820; cv=none;

d=google.com; s=arc-20240605;

b=dVYOXaXOqlcdKh0fOwDYOwrVYtaLnk0IQIwgoQ6cXyGFM7XQwOC8QTLPoPC354MxCR

eTIhf5jZxMBTtPKF26/xur16ohFKsQqowPG6qlqdCQhRmYYxpvnz+rgfJsgP/yJLdHWA

kl3JNqtJy7wCUWCjo+N7AkdKbRKdZz9ZlsHQaiStDMMCem/kY2IZaGCKrE9YAUjC7cIS

hmDSSaQZIlHGVYWtcdbp5ZiNpqeUfr+vOekN0bNnPD1XoUzY/BMnlU3O6jvuP6Vuu3hP

kAfnT7ljEPCJIIheh6FL5Hj8a0TYTJ4ycwOH3+eb8eIxGWsAC24g0e9MTuoOZtbj9CjT

GXqg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=Rk+y+wOXCjKZw30YTcVlpB0L//4Wh+jBvDx0ZYZGiRY=;

fh=Y5HxevmmOqaf2YrPzrDnrLNPMqoYNVVli/VQgg1NzHg=;

b=YoSc9MHctksXbDOavwp2yMDB9Rc6cywq0CD0gLibINKsVNtaF2YLyNGBsUHEP2qW8W

nyyMdKJLRjS1KMfjrgLworwwGYl16NFW6ycEw0eg5sLBmPsJFQhWYbVQ6tPDLWRH0UYz

eUcxBW9tQ25whaP8AJRsGj4WpIMvyMAOC2RlWrXK7DgtNt8OoSgDQJvN+f3mkrIzFU8r

ErU+rRZco61rY7oovfXx1L8DSuDZE+/nx/EIXZke5XVTqjDuKINeairszSNn3f/bTVIX

3j5UnT49ABnfLbWhrV8q9d/EzRefDWU7BGaTSESTxBnVKJaucIkcaMUoGjkWY9ZUZy4W

Kk3g==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1772615820; x=1773220620; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=Rk+y+wOXCjKZw30YTcVlpB0L//4Wh+jBvDx0ZYZGiRY=;

b=W5NSYNecOSjozLtawucgr1RUJTwJL2uS2KtE1MhKPXlfTk6F0+Tg5XabTVMgH4r6Vp

VDCNreOeSp5eJE4s9cn7EE3uUXMJEjs6yQ4P1p780U8DLvTdFC/ewwWEr+pkYZEvs4ev

TgvxTa3lKFHjq4+oa7A+xzSvu82M0M4SAxVSPSlCCpl6noNhATf97yAeJLhUM1Zxz5qB

RrzUs+mUjOBSd/DJ7p542gvsGjogzABu3J2G6BFJqvZn6+5UqcLOBx57/vi/GF/MeCMB

69b9spCB9CjpTMaB64LskjkzWnxBv968YXT8w6SijkT5IXZD42QeSHhwnhtai6SX3YH/

eGMw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1772615820; x=1773220620;

h=to:subject:message-id:date:from:reply-to:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=Rk+y+wOXCjKZw30YTcVlpB0L//4Wh+jBvDx0ZYZGiRY=;

b=gWgnhilNmhLWMiBGjW2Hv6AeQA6OYJNB7pkyZLZ0WMjr2UASxH+AIyd9Eohpv4tEgr

v5s8IgX/VXRQiznL4cZCvGmoCCyK78nSlNh1B58uQTbltXKOTYPW8VIqovnhBg4Weyt8

rllk9IufJoTJg7u1T2YqDwqUnduNiCkzs7ab/X46c/S/I8vCe1lnkMldISYdlsg9fmKt

8xQS1x0frkPkD0JX2SXOFuhFEy3Gx1a7nttdltewnLAzczAkC553cEOfBz+noSoigpwm

6yJHgRYrhj/kQ1ADHKHFOiWLg01NXhWYeLmoyRFJ7PlBu8hLpepBM2uBMvLZOQVbBkRq

8YRQ==

X-Forwarded-Encrypted: i=1; AJvYcCU7KGN2RRPelYmwxyQhxc9YMdBd4CLqp40Vk2MUnAwFc5nkYcObSYAoA8BqlwvF3zkw0rBnf9s=@doctor.nl2k.ab.ca

X-Gm-Message-State: AOJu0YynL8CgPoHUaKno8GwG58cYFah9QOBG+VxwOcjJvkDplikN7Aw2

WNzk4V4XnB2CIDoO3kE/DeqekZSRpQEbrSVE4NieIpqEPylYU0YCqItAC4pRdZF79rKf+IiaL5C

r09++fAFW0csQgdFjj4rWlD+8ltM5cOU=

X-Gm-Gg: ATEYQzzHMSkcj3MPfDNE5RWh1uvTYJNIvFZE38Z5xHSfLljv3AnsBeHiYItifqE5Kf+

q0MpaKzON0S73eW5rip1Knw6huniUTqPGy0SDjMT2s33wE2hGZAzm4uXsQxJ3NKk6g0rH2uuX6T

py1CB16UC+UjeR5q9GTztX4qUok2pBMD0dwP03zr+gf0M9tjdNsS/6hKYZPIPHO37sy+Xy27dK+

mSiQ6u5cwPbutt8u6jcmxa66OTDOoioCU2S2TVv/Yq9m8EyPhLgaWkST/75kt1g73vM3p2V8Csm

AFHeN784m7rU

X-Received: by 2002:a05:6214:252f:b0:894:6c73:7e79 with SMTP id

6a1803df08f44-89a199a89e7mr14378716d6.18.1772615819605; Wed, 04 Mar 2026

01:16:59 -0800 (PST)

MIME-Version: 1.0

Reply-To: onlinecitibankuk@gmail.com

From: Alexandru olivers

Date: Wed, 4 Mar 2026 10:16:49 +0100

X-Gm-Features: AaiRm525oqlpJR-sdTDgRCW0d6mDC2qb8q1Hxj8kGSlN9P39RKG0_C7f2MbPR-E

Message-ID:

Subject: Guten Morgen

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000403c03064c2f4828"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 15.3

X-Spam_score_int: 153

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Achtung: E-Mail-Inhaber Herzlichen Glückwunsch zum Gewinn

unserer kürzlich abgeschlossenen nationalen Gratis-Lotterie 2025! Wir sind

überzeugt, dass Sie Google und seine Dienste auch weiterhin mit Ihrem Gewinn

nutzen werden. Google ist die weltweit größte Suchmaschine, und um dies

zu gewährleisten, haben wir ein webbas [...]



Content analysis details: (15.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

[209.85.219.43 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.219.43 listed in dnsbl.ahbl.org]

[209.85.219.43 listed in dnsbl.ahbl.org]

[209.85.219.43 listed in dnsbl.ahbl.org]

[209.85.219.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.219.43 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.219.43 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.219.43 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.219.43 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.219.43 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.43 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[barrsteverobert(at)gmail.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 HK_LOTTO No description available.

2.7 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.5 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

3.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Guten Morgen

Did you get my e-mail spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Mar 2026 05:59:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxlnz-000000001IQ-03ww

for dave@doctor.nl2k.ab.ca;

Wed, 04 Mar 2026 05:58:23 -0700

Resent-From: The Doctor

Resent-Date: Wed, 4 Mar 2026 05:58:22 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [200.192.64.24] (port=49720 helo=lnpmf-zimbra.pmf.sc.gov.br)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vxjDC-00000000I8U-009d

for sales@nk.ca;

Wed, 04 Mar 2026 03:12:23 -0700

Received: from localhost (localhost.localdomain [127.0.0.1])

by lnpmf-zimbra.pmf.sc.gov.br (Postfix) with ESMTP id DDE65198EEA5;

Wed, 4 Mar 2026 01:58:54 -0300 (-03)

Received: from lnpmf-zimbra.pmf.sc.gov.br ([127.0.0.1])

by localhost (lnpmf-zimbra.pmf.sc.gov.br [127.0.0.1]) (amavisd-new, port 10032)

with ESMTP id kqJ9KoPhxcFU; Wed, 4 Mar 2026 01:58:54 -0300 (-03)

Received: from localhost (localhost.localdomain [127.0.0.1])

by lnpmf-zimbra.pmf.sc.gov.br (Postfix) with ESMTP id 7A1A2198EEAB;

Wed, 4 Mar 2026 01:58:54 -0300 (-03)

DKIM-Filter: OpenDKIM Filter v2.10.3 lnpmf-zimbra.pmf.sc.gov.br 7A1A2198EEAB

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pmf.sc.gov.br;

s=C9FDC13E-AA56-11EA-95E9-DD25EFAE2574; t=1772600334;

bh=++DvU/F28ZbpZ5g0iTjzsqfva6XT0UTd7Q/ihFq9aqY=;

h=Date:From:Message-ID:MIME-Version;

b=XZzIG3S5KD72ZDmXOKEq8ad5baUpwTtAoeJSnafbJ9BbsunO9hp0Aq1D0KY1NH1Cp

+TJKCwydSGYeNDxP620qZtmk0O5oZYM8i6QtsMgPJvhXTgqrc74Jbjwcr/BL6l1Z9u

1fYf0ouFLgdNna7kf789ULbPZFHBkbS83oy66rizHUI+Q0m0FSA07Mz9sGpTgIFxar

FDbXphmveqFBIve9Fy0+LuC39My7/JYlPxiXrEKfuvgGPr9KzmGyIipJaX2RI1PrEh

FnShsDN6qv43wuUq4d762DOOfr8zqaQvzYiYKWaK3zTmJ3yw+qjm2ufURIKZmgSUvg

j1rxcUsA/VE9Q==

X-Virus-Scanned: amavisd-new at pmf.sc.gov.br

Received: from lnpmf-zimbra.pmf.sc.gov.br ([127.0.0.1])

by localhost (lnpmf-zimbra.pmf.sc.gov.br [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id ZihFQYsS_ehx; Wed, 4 Mar 2026 01:58:54 -0300 (-03)

Received: from lnpmf-zimbra.pmf.sc.gov.br (lnpmf-zimbra.pmf.sc.gov.br [200.192.64.24])

by lnpmf-zimbra.pmf.sc.gov.br (Postfix) with ESMTP id 57D27198EE7C;

Wed, 4 Mar 2026 01:58:49 -0300 (-03)

Date: Wed, 4 Mar 2026 01:58:49 -0300 (BRT)

From: Rowell

Reply-To: rowellhambrick695@gmail.com

Message-ID: <768707153.32512311.1772600329315.JavaMail.zimbra@pmf.sc.gov.br>

Subject:

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable

X-Originating-IP: [140.174.187.15]

X-Mailer: Zimbra 8.8.15_GA_4508 (zclient/8.8.15_GA_4508)

Thread-Index: BYaCnMFDIUE4dXIGZHk277CzB0WzbQ==

Thread-Topic:

X-Spam_score: 12.2

X-Spam_score_int: 122

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Do you get my mail



Content analysis details: (12.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[140.174.187.15 listed in will-spam-for-food.eu.org]

[140.174.187.15 listed in will-spam-for-food.eu.org]

[140.174.187.15 listed in will-spam-for-food.eu.org]

[140.174.187.15 listed in will-spam-for-food.eu.org]

[140.174.187.15 listed in will-spam-for-food.eu.org]

[140.174.187.15 listed in will-spam-for-food.eu.org]

[140.174.187.15 listed in will-spam-for-food.eu.org]

[140.174.187.15 listed in will-spam-for-food.eu.org]

[200.192.64.24 listed in will-spam-for-food.eu.org]

[200.192.64.24 listed in will-spam-for-food.eu.org]

[200.192.64.24 listed in will-spam-for-food.eu.org]

[200.192.64.24 listed in will-spam-for-food.eu.org]

[200.192.64.24 listed in will-spam-for-food.eu.org]

[200.192.64.24 listed in will-spam-for-food.eu.org]

[200.192.64.24 listed in will-spam-for-food.eu.org]

[200.192.64.24 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[200.192.64.24 listed in dnsbl.ahbl.org]

[200.192.64.24 listed in dnsbl.ahbl.org]

[200.192.64.24 listed in dnsbl.ahbl.org]

[200.192.64.24 listed in dnsbl.ahbl.org]

[140.174.187.15 listed in dnsbl.ahbl.org]

[140.174.187.15 listed in dnsbl.ahbl.org]

[140.174.187.15 listed in dnsbl.ahbl.org]

[140.174.187.15 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[200.192.64.24 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[200.192.64.24 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[200.192.64.24 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[200.192.64.24 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[200.192.64.24 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[rowellhambrick695(at)gmail.com]

1.2 MISSING_HEADERS Missing To: header

0.0 NO_RDNS2 Sending MTA has no reverse DNS

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.9 REPLYTO_WITHOUT_TO_CC No description available.

Subject: {SPAM?}







Do you get my mail=C2=A0



























































3D"Logo"



Copyright (C) 2014-2026. All right reserved.
Want to change how you receive these emails?
You can unsubscribe from this list.

























































--__=_Part_Boundary_004_029839.006959--



Social Media spam from Microsoft Outlook Part 3





Only services for high-value users =E2=9C=A8 Try now!



























































Social Media spam from Microsoft Outlook Part 2

@media only screen and (max-width: 640px) {

.mceClusterLayout td {

padding: 4px !important;

}

}



div[contenteditable=3D"true"] {

outline: 0;

}



.ProseMirror .empty-node, .ProseMirror:empty {

position: relative;

}



.ProseMirror .empty-node::before, .ProseMirror:empty::before {

position: absolute;

left: 0;

right: 0;

color: rgba(0,0,0,0.2);

cursor: text;

}



.ProseMirror .empty-node:hover::before, .ProseMirror:empty:hover::before {

color: rgba(0,0,0,0.3);

}



.ProseMirror h1.empty-node:only-child::before,

.ProseMirror h2.empty-node:only-child::before,

.ProseMirror h3.empty-node:only-child::before,

.ProseMirror h4.empty-node:only-child::before {

content: 'Heading';

}



.ProseMirror p.empty-node:only-child::before, .ProseMirror:empty::before {

content: 'Start typing...';

}



a .ProseMirror p.empty-node::before, a .ProseMirror:empty::before {

content: '';

}



.mceText, .ProseMirror {

white-space: pre-wrap;

}



body, #bodyTable {

background-color: rgb(234, 236, 226);

}



.mceText, .mceLabel {

font-family: Arial, "Helvetica Neue", Helvetica, sans-serif;

}



.mceText, .mceLabel {

color: rgb(0, 0, 0);

}



.mceText h1 {

margin-bottom: 0px;

}



.mceText p {

margin-bottom: 0px;

}



.mceText label {

margin-bottom: 0px;

}



.mceText input {

margin-bottom: 0px;

}



.mceSpacing-12 .mceInput + .mceErrorMessage {

margin-top: -6px;

}



.mceText h1 {

margin-bottom: 0px;

}



.mceText p {

margin-bottom: 0px;

}



.mceText label {

margin-bottom: 0px;

}



.mceText input {

margin-bottom: 0px;

}



.mceSpacing-24 .mceInput + .mceErrorMessage {

margin-top: -12px;

}



.mceInput {

background-color: transparent;

border: 2px solid rgb(208, 208, 208);

width: 60%;

color: rgb(77, 77, 77);

display: block;

}



.mceInput[type=3D"radio"], .mceInput[type=3D"checkbox"] {

float: left;

margin-right: 12px;

display: inline;

width: auto !important;

}



.mceLabel > .mceInput {

margin-bottom: 0px;

margin-top: 2px;

}



.mceLabel {

display: block;

}



.mceText p {

color: rgb(0, 0, 0);

font-family: Arial, "Helvetica Neue", Helvetica, sans-serif;

font-size: 16px;

font-weight: normal;

line-height: 1.5;

text-align: center;

letter-spacing: 0px;

direction: ltr;

}



.mceText h1 {

color: rgb(0, 0, 0);

font-family: "Playfair Display", Georgia, "Times New Roman", serif;

font-size: 31px;

font-weight: bold;

line-height: 1.5;

text-align: center;

letter-spacing: 0px;

direction: ltr;

}



.mceText a {

color: rgb(0, 108, 115);

font-style: normal;

font-weight: normal;

text-decoration: underline;

direction: ltr;

}



@media only screen and (max-width: 480px) {

.mceText p {

font-size: 16px !important;

line-height: 1.5 !important;

}

}



@media only screen and (max-width: 480px) {

.mceText h1 {

font-size: 31px !important;

line-height: 1.5 !important;

}

}



@media only screen and (max-width: 480px) {

.mceBlockContainer {

padding-left: 16px !important;

padding-right: 16px !important;

}

}



#dataBlockId-10 p, #dataBlockId-10 h1, #dataBlockId-10 h2, #dataBlockId-10 h3, #dataBlockId-10 h4, #dataBlockId-10 ul {

text-align: center;

}



3D"Logo"

Instagram Growth Solutions

Looking for a gradual, natural-looking increase in Instagram followers?
Try vip-followers: premium-quality growth for an exclusive audience. =E2=9C=A8
High quality, consistent delivery, and tailored pacing for premium profiles.

















Try Now


Mon Tue Wed Thu Fri Sat Sun
Back March '26 Forward
           
5 6 7 8
9 10 11 12 13 14 15
16 17 18 19 20 21 22
23 24 25 26 27 28 29
30 31          

Archives

Categories

Syndicate This Blog

  • XML

Blog Administration

Open login screen

Powered by

NetKnow Navigation

Home


VPNs


Dialup Service


Web Design


Web Hosting


E-Commerce


Server Colocation


Domain Registration


Web Mail


Support


Testimonials




Client List


FAQs


Interested in NetKnow Services?


Links


Disclaimer


Acceptable Use


Security





Technorati Profile







AddThis Feed Button

Remote RSS/OPML-Blogroll Feed

No RSS/OPML feed selected

Error

serendipity error: could not include serendipity_plugin_statistics:9cbc0e29a86fd9359ac6748399d6ba5b - exiting.

addthis





AddThis Social Bookmark Button










Blog Grade for www.nk.ca/blog

Empire Avenue





Syndicate This Blog

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:7aefbb7ca9b764849be35e938b6fc9b2 - exiting.

Error

serendipity error: could not include serendipity_plugin_twitter:c7a92f670894afa9e3097574359fe38d - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:8b72cc4261ddc7ff15df253b17c29c23 - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:a0bd1a65cd9ff1c3e289829cc26557c4 - exiting.

Error

serendipity error: could not include serendipity_plugin_statistics:dcd26c048e45c234c054530ef1492953 - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:6d4c66aeb83aeb9524a7cc609051cf0f - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:acc1042e790905e499445a6890081492 - exiting.

Error

serendipity error: could not include serendipity_plugin_freetag:158fb50035b12269ec43107b29253af3 - exiting.

Error

serendipity error: could not include serendipity_plugin_topreferers:6b7e3336713d0a60294c7e310ca5cf1a - exiting.

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:d3f047ee6f925c138fae56dcd7a99400 - exiting.

Error

serendipity error: could not include serendipity_plugin_spamblock_bee:5544ace5c8b19bb8592464810b48df10 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_quicksearch:5624ac0b69cdbe32d0cdc40814d7eb41 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_quicksearch:b8387d3a378247c1c9ede46fffb084e1 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_last_query:bacdc0652131449ebc68ebde2bcb9ce2 - exiting.

Error

serendipity error: could not include serendipity_plugin_google_last_query:8c84ca587b64b627d986e9d5ce98ead1 - exiting.