Chinese productus spam from Alibaba

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 13 Mar 2026 06:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w11m6-000000001SS-2VAH

for dave@doctor.nl2k.ab.ca;

Fri, 13 Mar 2026 06:37:54 -0600

Resent-From: The Doctor

Resent-Date: Fri, 13 Mar 2026 06:37:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out208-129.dm.aliyun.com ([140.205.208.129]:54267)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0wcl-000000006kf-153z

for root@nk.ca;

Fri, 13 Mar 2026 01:08:04 -0600

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:vip@jhychemvivian.ltd:vip_edm_WebBatch:307378

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=jhychemvivian.ltd; s=aliyun-cn-hangzhou;

t=1773385619; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=0unnaUreef3G5/4f03zc8YuIcMmw8DhUeRHIXU4fZVM=;

b=D9WJiICB9QZr7D7mRKxm8d1s/CfthYMt4Tc0f7g+KVJ6/5WLjbJtaOwTT1GJXnxF8Zjcj7YvWOxJWzAconjjruRdmkRIe362UDYaXblkhtc+3D2Yl2pTqy/PVjqL3e4FfCYJjtZdbcKA7Armh9blEkRWOWK6TNHOH9YSvwiTx+s=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1773385619; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=0unnaUreef3G5/4f03zc8YuIcMmw8DhUeRHIXU4fZVM=;

b=vikVWPgWnjiupn710F5Q6MJ06RN+OkkJnPQ4ggRD0/ogS1lLBTD9yr9NI7ews4as8TUY79Nzcdjx2lmUFem5XZ+br3LM3wi64CJ4l9M2e4CYYXXFw48LTdrjOotksXq9RB118+V2RqZlrloLcbEbVaFEWVLe+BhzRASG1TxZ2eo=

Received: from chitu-hsf(mailfrom:vip@jhychemvivian.ltd fp:ma_600000280092648892 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Fri, 13 Mar 2026 15:05:13 +0800

Date: Fri, 13 Mar 2026 15:05:13 +0800

From: "Vivian Wang"

To:

Reply-To:

Message-ID:

Subject: =?UTF-8?B?QSBTdGFibGUgVEhQUyA3NSUgTWFudWZhY3R1cmVyLCBFc3RhYmxpc2hlZCBpbiAyMDA5?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000280092648893

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi Sir, I'm writing to introduce THPS (Tetrakis Hydroxymethyl

Phosphonium Sulfate, 75% solution) – a highly effective, environmentally

friendly biocide widely used in:



Content analysis details: (7.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[140.205.208.129 listed in will-spam-for-food.eu.org]

[140.205.208.129 listed in will-spam-for-food.eu.org]

[140.205.208.129 listed in will-spam-for-food.eu.org]

[140.205.208.129 listed in will-spam-for-food.eu.org]

[140.205.208.129 listed in will-spam-for-food.eu.org]

[140.205.208.129 listed in will-spam-for-food.eu.org]

[140.205.208.129 listed in will-spam-for-food.eu.org]

[140.205.208.129 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[140.205.208.129 listed in dnsbl.ahbl.org]

[140.205.208.129 listed in dnsbl.ahbl.org]

[140.205.208.129 listed in dnsbl.ahbl.org]

[140.205.208.129 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[140.205.208.129 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[140.205.208.129 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[140.205.208.129 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[140.205.208.129 listed in dnsbl.ahbl.org]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[140.205.208.129 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[140.205.208.129 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[140.205.208.129 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[140.205.208.129 listed in list.dnswl.org]

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[140.205.208.129 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[140.205.208.129 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.4 SALES_REPLY Your parents named you sales?

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

Subject: {SPAM?} =?UTF-8?B?QSBTdGFibGUgVEhQUyA3NSUgTWFudWZhY3R1cmVyLCBFc3RhYmxpc2hlZCBpbiAyMDA5?=



Hi Sir,



I'm writing to introduce THPS (Tetrakis Hydroxymethyl Phosphonium Sulfate, 75% solution) – a highly effective, environmentally friendly biocide widely used in:



Industrial water treatment (cooling towers, reverse osmosis)



Oilfield (sulfate-reducing bacteria control, iron sulfide removal)



Pulp & paper (slime control)



Leather tanning (chrome-free tanning agent)







Why choose our THPS?



A, Biodegradable & eco-friendly – Meets EPA and EU standards, ideal for clients with strict environmental requirements



B, Stable supply from China – Annual capacity up to 14,000 tons, ensuring consistent quality and reliable delivery



C, Flexible packaging – 25kg, 200kg drums, or IBC totes available. Low MOQ facilitate laboratory



D, Cost-effective – Competitive pricing without compromising quality







We have been serving small to medium water treatment and oilfield chemical companies globally, providing not just products but also technical support and application guidance.







Would you be interested in a sample to test in your system? I can send you the datasheet and MSDS for review.



Looking forward to hearing from you.



Vivian Wang



Mobile/Whatsapp: 008618812757064



Email:sales1@jiahengyuanchem.com

Chinese products spam from Alibaba

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Thu, 12 Mar 2026 21:15:00 -0600

Received: from out0-26.static.mail.aliyun.com ([59.82.0.26]:30648)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0syX-00000000I5y-2wnE

for dave@nk.ca;

Thu, 12 Mar 2026 21:14:20 -0600

X-Alimail-AntiSpam:AC=CONTINUE;BC=0.924362|0.09971132;BR=01201311R101S47rulernew999_84748_200303;CH=yellow;DM=|AD|false|;DS=CONTINUE|ham_regular_dialog|0.341297-0.0606918-0.598012;FP=18118432085807834900|0|0|0|0|-1|-1|-1;HT=maildocker-contentspam033068005250;MF=ludy.wy@qydevelop.com;NM=1;PH=DS;RN=190;RT=0;SR=0;TI=SMTPD_---.grH-jqH_1773371577;

Received: from DESKTOP-EGPU2OG(mailfrom:ludy.wy@qydevelop.com fp:SMTPD_---.grH-jqH_1773371577 cluster:ay29)

by smtp.aliyun-inc.com;

Fri, 13 Mar 2026 11:13:05 +0800

Date: Fri, 13 Mar 2026 11:12:57 +0800

From: ludy.wy

Message-ID: <96791374-3F28-4881-BF2C-4985652F78A6@qydevelop.com>

Subject: =?utf-8?B?TmV3IFRyZW5kcyBpbiAgU2VtaWNvbmR1Y3RvciBEZWZlY3QgUmV2?=

=?utf-8?B?aWV3IFN5c3RlbSBNYXJrZXQgMjAyNiAg5Y2K5a+85L2T57y66Zm35aSN5qOA?=

=?utf-8?B?57O757uf6KGM5Lia5oql5ZGK?=

Disposition-Notification-To: ludy.wy

X-Mailer: MailMasterPC/4.19.4.1001 (Win10 22H2)

X-MailMaster-ShowOneRcpt: 1

X-CUSTOM-MAIL-MASTER-SENT-ID: E521ED14-2062-4DAB-A004-454B1CAD466D

MIME-Version: 1.0

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: base64

X-Spam_score: 11.4

X-Spam_score_int: 114

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi Friend, Here's the one report on the analysis of the Semiconductor

Defect Review System Market that you could share with your management team.





Content analysis details: (11.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[59.82.0.26 listed in will-spam-for-food.eu.org]

[59.82.0.26 listed in will-spam-for-food.eu.org]

[59.82.0.26 listed in will-spam-for-food.eu.org]

[59.82.0.26 listed in will-spam-for-food.eu.org]

[59.82.0.26 listed in will-spam-for-food.eu.org]

[59.82.0.26 listed in will-spam-for-food.eu.org]

[59.82.0.26 listed in will-spam-for-food.eu.org]

[59.82.0.26 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[59.82.0.26 listed in dnsbl.ahbl.org]

[59.82.0.26 listed in dnsbl.ahbl.org]

[59.82.0.26 listed in dnsbl.ahbl.org]

[59.82.0.26 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[59.82.0.26 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[59.82.0.26 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[59.82.0.26 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[59.82.0.26 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[59.82.0.26 listed in sa-trusted.bondedsender.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[59.82.0.26 listed in sa-accredit.habeas.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[59.82.0.26 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[59.82.0.26 listed in list.dnswl.org]

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[59.82.0.26 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[59.82.0.26 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or

Generic rPTR

1.2 MISSING_HEADERS Missing To: header

3.6 NA_DOLLARS BODY: Talks about a million North American dollars

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

Subject: {SPAM?} =?utf-8?B?TmV3IFRyZW5kcyBpbiAgU2VtaWNvbmR1Y3RvciBEZWZlY3QgUmV2?=

=?utf-8?B?aWV3IFN5c3RlbSBNYXJrZXQgMjAyNiAg5Y2K5a+85L2T57y66Zm35aSN5qOA?=

=?utf-8?B?57O757uf6KGM5Lia5oql5ZGK?=



Hi Friend,



Here's the one report on the analysis of the Semiconductor Defect Review System Market that you could share with your management team.



The global Semiconductor Defect Review System market was valued at US$ 966 million in 2025 and is anticipated to reach US$ 1511 million by 2032, at a CAGR of 6.7% from 2026 to 2032.



If you have further interest in this report or related reports, we would be happy to share the Sample Report and Quotation for your reference.



Segment by Type

5-7nm Process

10-16nm Process

20-28nm Process

Others



Segment by Application

8 Inch Wafer

12 Inch Wafer

Mask/Reticle

Others



The following players are covered in this report:

Applied Materials

Lasertec

KLA

Hitachi High-Tech

Advantest

Holon Co., Ltd

Wuhan Jingce Electronic Group

TASMIT, Inc

DJEL



(More companies are available as you want……)

Chapter Outline

Chapter 1: Introduces the report scope of the report, executive summary of different market segments (by region, by Type, by Application, etc), including the market size of each market segment, future development potential, and so on. It offers a high-level view of the current state of the market and its likely evolution in the short to mid-term, and long term.

Chapter 2: Detailed analysis of Semiconductor Defect Review System manufacturers competitive landscape, price, production and value market share, latest development plan, merger, and acquisition information, etc.

Chapter 3: Production/output, value of Semiconductor Defect Review System by region/country. It provides a quantitative analysis of the market size and development potential of each region in the next six years.

Chapter 4: Consumption of Semiconductor Defect Review System in regional level and country level. It provides a quantitative analysis of the market size and development potential of each region and its main countries and introduces the market development, future development prospects, market space, and production of each country in the world.

Chapter 5: Provides the analysis of various market segments by Type, covering the market size and development potential of each market segment, to help readers find the blue ocean market in different market segments.

Chapter 6: Provides the analysis of various market segments by Application, covering the market size and development potential of each market segment, to help readers find the blue ocean market in different downstream markets.

Chapter 7: Provides profiles of key players, introducing the basic situation of the main companies in the market in detail, including product production/output, value, price, gross margin, product introduction, recent development, etc.

Chapter 8: Analysis of industrial chain, including the upstream and downstream of the industry.

Chapter 9: Introduces the market dynamics, latest developments of the market, the driving factors and restrictive factors of the market, the challenges and risks faced by manufacturers in the industry, and the analysis of relevant policies in the industry.

Chapter 10: The main points and conclusions of the report.



If you are interested in getting a sample report or placing an order, please feel free to contact Ludy@qyresearch.com



Thanks for reading this email and hope everything goes well with you.





Ludy.chen

Sales Manager l QY RESEARCH, INC.

Email: Ludy@qyresearch.com





Quickbooks phish from Amazon Part 4

Posted by Dave Yadallee on

cellspacing=3D"0" class=3D"module" data-role=3D"module-button" =

data-type=3D"button" role=3D"module" style=3D"table-layout:fixed;" =

width=3D"100%" data-muid=3D"b32cf4a5-ea8d-4399-9664-31f9feaf5eeb">












class=3D"outer-td" style=3D"padding:12px 0px 47px 0px;">


class=3D"wrapper-mobile" style=3D"text-align:center;">












align=3D"center" bgcolor=3D"#26a51a" class=3D"inner-td" =

style=3D"border-radius:6px; font-size:16px; text-align:center; =

background-color:inherit;">


.us-east-2.amazonaws.com/eepros.html" style=3D"background-color:#26a51a; =

border:1px solid #26A51A; border-color:#26A51A; border-radius:1px; =

border-width:1px; color:#ffffff; display:inline-block; font-size:14px; =

font-weight:normal; letter-spacing:0px; line-height:normal; padding:12px =

18px 12px 18px; text-align:center; text-decoration:none; =

border-style:solid;" target=3D"_blank">Confirm Payment



align=3D"center" width=3D"100%" role=3D"module" data-type=3D"columns" =

style=3D"padding:0px 0px 0px 0px;" bgcolor=3D"#f7f7f7" =

data-distribution=3D"1">










style=3D"width:580px; border-spacing:0; border-collapse:collapse; =

margin:0px 10px 0px 10px;" cellpadding=3D"0" cellspacing=3D"0" =

align=3D"left" border=3D"0" bgcolor=3D"" class=3D"column column-0">










rder-spacing:0;">
border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%" =

style=3D"table-layout: fixed;" data-muid=3D"a013437e-1bcb-4ecb-9ab3-34ff990=

c85c7" data-mc-module-version=3D"2019-10-22">



Please =

don't reply to this email, if you need any help regarding this message, =

please contact the business directly.




=





=


















Quickbooks phish from Amazon Part 3

Posted by Dave Yadallee on
\

inherit">



inherit">Payment =

details:



text-align: inherit">



text-align: inherit">Invoice no. =

          =

;            &n=

bsp;            =

;            &n=

bsp;            =

;            &n=

bsp;            =

;            &n=

bsp;            =

;     #3762



inherit; text-align: inherit">
#5f5f5f">Invoice amount    <=

/strong>           &=

nbsp;           &nbs=

p;            &=

nbsp;           &nbs=

p;            &=

nbsp;           &nbs=

p;            &=

nbsp;           &nbs=

p;  $555.00



inherit">Total amount =

       =

            &nb=

sp;            =

            &nb=

sp;            =

            &nb=

sp;            =

            &nb=

sp;            =

 $555.00   





class=3D"module" role=3D"module" data-type=3D"divider" border=3D"0" =

cellpadding=3D"0" cellspacing=3D"0" width=3D"100%" style=3D"table-layout: =

fixed;" data-muid=3D"a2bb8a23-d06e-41b0-a691-082a275782b4">












role=3D"module-content" height=3D"100%" valign=3D"top" bgcolor=3D"">


align=3D"center" width=3D"100%" height=3D"1px" style=3D"line-height:1px; =

font-size:1px;">












bgcolor=3D"#d9d9d9">



border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%" =

style=3D"table-layout: fixed;" data-muid=3D"55b39dcb-c1bd-456c-b34e-c7f7102=

89684" data-mc-module-version=3D"2019-10-22">












text-align:inherit; background-color:#fafafa;" height=3D"100%" =

valign=3D"top" bgcolor=3D"#fafafa" role=3D"module-content">

style=3D"font-family: inherit; text-align: inherit">   Statu=

s             &=

nbsp;           &nbs=

p;            &=

nbsp;           &nbs=

p;            &=

nbsp;           &nbs=

p;            &=

nbsp;           &nbs=

p;            &=

nbsp;           &nbs=

p; Paid



inherit">   Payment method:      &n=

bsp;            =

;            &n=

bsp;            =

;            &n=

bsp;     BUSINESS_CHECKING*****5585


   =

Authorization ID          &nbs=

p;            &=

nbsp;           &nbs=

p;            &=

nbsp;           &nbs=

p;            &=

nbsp;           &nbs=

p;            &=

nbsp;  ASVNV3IH

Quickbooks Phish from Amazon Part 2

Posted by Dave Yadallee on
.column.of-3 {

width: 33.333%;

}

.column.of-4 {

width: 25%;

}

ul ul ul ul {

list-style-type: disc !important;

}

ol ol {

list-style-type: lower-roman !important;

}

ol ol ol {

list-style-type: lower-latin !important;

}

ol ol ol ol {

list-style-type: decimal !important;

}

@media screen and (max-width:480px) {

.preheader .=

rightColumnContent,

.footer .rightColumnContent {

text-align: left !important;

}

.preheader .=

rightColumnContent div,

.preheader .rightColumnContent span,

.footer .rightColumnContent div,

.footer .rightColumnContent =

span {

text-align: left !important;

}

.preheader .rightColumnContent,

.preheader .leftColumnContent {

font-size: 80% !important;

padding: 5px 0;

}

table.wrapper-mobile {

width: 100% !important;

table-layout: fixed;

}

img.max-width {

height: auto !important;

max-width: 100% !important;

}

a.bulletproof-button {

display: block !important;

width: auto !important;

font-size: 80%;

padding-left: 0 !important;

padding-right: 0 !important;

}

.columns {

width: 100% !important;

}

.column {

display: block !important;

width: 100% !=

important;

padding-left: 0 !important;

padding-right: 0 !=

important;

margin-left: 0 !important;

margin-right: 0 !=

important;

}

.social-icon-column {

display: =

inline-block !important;

}

}










data-body-style=3D"font-size:14px; font-family:arial,helvetica,sans-serif; =

color:#000000; background-color:#FFFFFF;">




width=3D"100%" class=3D"wrapper" bgcolor=3D"#FFFFFF">






class=3D"outer" align=3D"center" cellpadding=3D"0" cellspacing=3D"0" =

border=3D"0">




width=3D"100%">


cellpadding=3D"0" cellspacing=3D"0" border=3D"0">

=








cellspacing=3D"0" border=3D"0" style=3D"width:100%; max-width:600px;" =

align=3D"center">




style=3D"padding:0px 0px 0px 0px; color:#000000; text-align:left;" =

bgcolor=3D"#FFFFFF" width=3D"100%" align=3D"left">
preheader preheader-hide" role=3D"module" data-type=3D"preheader" =

border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%" =

style=3D"display: none !important; mso-hide: all; visibility: hidden; =

opacity: 0; color: transparent; height: 0; width: 0;">

align=3D"center" width=3D"100%" role=3D"module" data-type=3D"columns" =

style=3D"padding:0px 0px 0px 0px;" bgcolor=3D"#FFFFFF" =

data-distribution=3D"1">












style=3D"width:612px; border-spacing:0; border-collapse:collapse; =

margin:0px -6px 0px -6px;" cellpadding=3D"0" cellspacing=3D"0" =

align=3D"left" border=3D"0" bgcolor=3D"" class=3D"column column-0">












rder-spacing:0;">
data-type=3D"image" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" =

width=3D"100%" style=3D"table-layout: fixed;" data-muid=3D"b572a643-0f5c-44=

81-aa76-f0f46520a7e6">












style=3D"font-size:6px; line-height:10px; padding:9px 0px 0px 0px;" =

valign=3D"top" align=3D"left">


border=3D"0" style=3D"display:block; color:#000000; text-decoration:none; =

font-family:Helvetica, arial, sans-serif; font-size:16px; max-width:32% !=

important; width:32%; height:auto !important;" width=3D"196" alt=3D"" =

data-proportionally-constrained=3D"true" data-responsive=3D"true" =

src=3D"http://cdn.mcauto-images-production.sendgrid.=

net/0e35344d99f92e76/a9de69df-b33a-4e57-917b-bf3de77f358c/1100x300.png">

border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%" =

style=3D"table-layout: fixed;" data-muid=3D"8ad5c387-23d5-42fa-800d-7d6299d=

9d0cb">












0px;" role=3D"module-content" height=3D"100%" valign=3D"top" bgcolor=3D"">


align=3D"center" width=3D"100%" height=3D"1px" style=3D"line-height:1px; =

font-size:1px;">












bgcolor=3D"#d9d9d9">



border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%" =

style=3D"table-layout: fixed;" data-muid=3D"b50ab276-3dae-4d03-9a25-0b1ff52=

98a1b" data-mc-module-version=3D"2019-10-22">






text-align:inherit;" height=3D"100%" valign=3D"top" bgcolor=3D"" =

role=3D"module-content">

style=3D"color: #000000; font-family: arial, helvetica, sans-serif; =

font-size: 18px; font-style: normal; font-variant-ligatures: normal; =

font-variant-caps: normal; font-weight: 700; letter-spacing: normal; =

orphans: 2; text-align: left; text-indent: 0px; text-transform: none; =

widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; =

white-space-collapse: preserve; text-wrap: wrap; background-color: rgb(255,=

255, 255); text-decoration-thickness: initial; text-decoration-style: =

initial; text-decoration-color: initial; float: none; display: inline">You =

have been paid $555.00 

Quickbooks Phish from Amazon Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 12 Mar 2026 20:50:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1w0saU-00000000MyO-1v3l

for dave@doctor.nl2k.ab.ca;

Thu, 12 Mar 2026 20:49:18 -0600

Resent-From: The Doctor

Resent-Date: Thu, 12 Mar 2026 20:49:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from a8-126.smtp-out.amazonses.com ([54.240.8.126]:50191)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from <0100019ce48f55f6-e96bbdd9-c25b-411f-a63d-6181848f1b88-000000@mailing.leetintel.com>)

id 1w0qFl-00000000FXM-2yhW

for doctor@doctor.nl2k.ab.ca;

Thu, 12 Mar 2026 18:19:53 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=kjievdq6oawnvmqofkgtf67ruf5xisf7; d=leetintel.com; t=1773361124;

h=Content-Type:From:To:Subject:Message-ID:Content-Transfer-Encoding:Date:MIME-Version;

bh=r7HDBP3wMoxQNK4pw0AFM9X5eTvCzgJKVOZVFxX2nFo=;

b=CCOJ038SGdez1I2SIw6McXuVA67AZ4GU1mvp7tYoRviTEnu3bu23zFZhxML58OYn

IuLTxDfIkcqXw/sVKSZVHdM37He9kUDzjFxIi1FSIst9wT3C96l9fexCfuEdG5xPl1j

fwNeb5X73odM3O4PQAQ/r3YZ8dqSGkbnDwTaKEBEBGkyZYKzxiMUnnd9Xo+fuuRPOTL

o4p9nnXIfSFMiZrqzgyeu4Y+XGVey2uhjuRFvhZ/1l57P02WxebpPwBuh/taX5QhtGL

gCcrPi4X+j63kezSjerc8VAULgL+ok+9PJWCzmRPYNIwxT+JgCGKrWXHlMf/K5/+uUl

0hwWM1d2Hg==

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1773361124;

h=Content-Type:From:To:Subject:Message-ID:Content-Transfer-Encoding:Date:MIME-Version:Feedback-ID;

bh=r7HDBP3wMoxQNK4pw0AFM9X5eTvCzgJKVOZVFxX2nFo=;

b=Cb2r6NyCBgyQJ2ppM26VbIQmBVwUUB/OIl4AS+ZGSuxnJ4gug/uluxbJyTvHoHk2

OCUiw3H2qC+0AEq+EGqWCdfS3gda9QL9eWHp5pQlcWJvfPpE0z6ZKUejic6SL+y5IrU

cX7D0gUsF90PmR13NmBIFG2Q0Kyr2m97IVyuLdyQ=

Content-Type: text/html

From: quickbooks Billing Team

To: doctor@doctor.nl2k.ab.ca

Subject: Payment Failed Notification!!

Message-ID: <0100019ce48f55f6-e96bbdd9-c25b-411f-a63d-6181848f1b88-000000@email.amazonses.com>

Content-Transfer-Encoding: quoted-printable

Date: Fri, 13 Mar 2026 00:18:44 +0000

MIME-Version: 1.0

Feedback-ID: ::1.us-east-1.AryFphSMXmwDJs9E93sIwh6QVZp+n3J7u57mKRMBcKc=:AmazonSES

X-SES-Outgoing: 2026.03.13-54.240.8.126

X-Spam_score: 25.1

X-Spam_score_int: 251

X-Spam_bar: +++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: You have been paid $555.00 Payment details:



Content analysis details: (25.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[54.240.8.126 listed in dnsbl.ahbl.org]

[54.240.8.126 listed in dnsbl.ahbl.org]

[54.240.8.126 listed in dnsbl.ahbl.org]

[54.240.8.126 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[54.240.8.126 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[54.240.8.126 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[54.240.8.126 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[54.240.8.126 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.1 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[54.240.8.126 listed in sa-trusted.bondedsender.org]

0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[54.240.8.126 listed in sa-accredit.habeas.com]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[54.240.8.126 listed in list.dnswl.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[54.240.8.126 listed in will-spam-for-food.eu.org]

[54.240.8.126 listed in will-spam-for-food.eu.org]

[54.240.8.126 listed in will-spam-for-food.eu.org]

[54.240.8.126 listed in will-spam-for-food.eu.org]

[54.240.8.126 listed in will-spam-for-food.eu.org]

[54.240.8.126 listed in will-spam-for-food.eu.org]

[54.240.8.126 listed in will-spam-for-food.eu.org]

[54.240.8.126 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

2.0 GR_DOMAIN_AMAZON1 Received contains spam friendly host (amazon)

0.6 J_CHICKENPOX_52 BODY: 5alpha-pock-2alpha

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[54.240.8.126 listed in wl.mailspike.net]

0.4 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[54.240.8.126 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[54.240.8.126 listed in bl.score.senderscore.com]

15 GR_DOMAIN_SENDGR6 URI: Body contains known spammer URI (sendgr)

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted

Colors in HTML

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

Subject: {SPAM?} Payment Failed Notification!!




org/TR/xhtml1/DTD/xhtml1-strict.dtd">


class=3D"sg-campaigns" xmlns=3D"http://www.w3.org/1999/xhtml">




charset=3Dutf-8">


idth, initial-scale=3D1, minimum-scale=3D1, maximum-scale=3D1">




content=3D"IE=3DEdge">