Shoppers Drug Mart Survey Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 11 Jul 2026 14:37:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wieQt-00000000K5j-1uqG

for dave@doctor.nl2k.ab.ca;

Sat, 11 Jul 2026 14:36:19 -0600

Resent-From: The Doctor

Resent-Date: Sat, 11 Jul 2026 14:36:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps115623.inmotionhosting.com ([192.145.237.173]:43740)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wie4R-00000000Ikb-3L24

for sales@nk.ca;

Sat, 11 Jul 2026 14:13:16 -0600

Received: from ec2-99-79-123-171.ca-central-1.compute.amazonaws.com ([99.79.123.171]:52506 helo=EC2AMAZ-BO61H8T.ca-central-1.compute.internal)

by vps115623.inmotionhosting.com with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.4)

(envelope-from )

id 1wie3V-0000000FEmp-3Jb3

for sales@nk.ca;

Sat, 11 Jul 2026 13:12:09 -0700

Content-Type: multipart/alternative; boundary="===============5547780754340454836=="

MIME-Version: 1.0

From: "A Special Gift Inside"

To:

Subject: Shoppers Drug Mart - App Survey

Date: Sat, 11 Jul 2026 20:12:09 +0000

Reply-To: noreply@subsaharamining.com

Message-ID: <2b0f05b7367d41959ff291d506c40bbe@subsaharamining.com>

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - vps115623.inmotionhosting.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - subsaharamining.com

X-Get-Message-Sender-Via: vps115623.inmotionhosting.com: authenticated_id: admin@subsaharamining.com

X-Authenticated-Sender: vps115623.inmotionhosting.com: admin@subsaharamining.com



--===============5547780754340454836==

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64



SGVsbG8sIAoKICAgQ29tcGxldGUgb3VyIHNob3J0IHN1cnZleSBhbmQgcmVjZWl2ZSBhIHNtYWxs

IHRoYW5rLXlvdSBnaWZ0LiAKCiAgICBUYWtlIHRoZSBzdXJ2ZXkgIAoKICAgVGhhbmsgeW91IQ==



--===============5547780754340454836==

Content-Type: text/html; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: base64



PGh0bWw+Cjxib2R5PgogIDxwPkhlbGxvLDwvcD4KCiAgPHA+Q29tcGxldGUgb3VyIHNob3J0IHN1

cnZleSBhbmQgcmVjZWl2ZSBhIHNtYWxsIHRoYW5rLXlvdSBnaWZ0LjwvcD4KCiAgPHA+PGEgaHJl

Zj0iaHR0cHM6Ly9wdGVhYmlzY3VpdC5mci9pbmRleC5odG1sIj5UYWtlIHRoZSBzdXJ2ZXk8L2E+

PC9wPgoKICA8cD5UaGFuayB5b3UhPC9wPgo8L2JvZHk+CjwvaHRtbD4=



--===============5547780754340454836==--

WEb/SEo/App spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 11 Jul 2026 14:36:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wieQV-00000000K4H-2xH4

for dave@doctor.nl2k.ab.ca;

Sat, 11 Jul 2026 14:35:55 -0600

Resent-From: The Doctor

Resent-Date: Sat, 11 Jul 2026 14:35:55 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-vs1-f70.google.com ([209.85.217.70]:45281)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wicwF-00000000F6m-32pk

for sales@nk.ca;

Sat, 11 Jul 2026 13:00:45 -0600

Received: by mail-vs1-f70.google.com with SMTP id ada2fe7eead31-738627c7908so538541137.2

for ; Sat, 11 Jul 2026 11:59:46 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1783796380; x=1784401180; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=Ay9IzvcOZcT2WYjLO3oUklABaVtCm5W1Cj+p0JZB95s=;

b=fGjzpcQjeEk4kx1NSur/uP+Dnb+hZKYn1bueWjAI6BkGUdOuh1wqIgs5486p0ik4ch

koxjbW0wBVkAXf7fTcp2iKjUuM/ndmqMXrl1IDrC5HXJJ2nAH6pGexJmrj/poNsnU6Ue

X1kshff1TIb+6rJ9a2p9Fe8YXtZSw42ZF1tAFvsQVZKzpSLYEqLHVpt6CkTCW85wHilN

6HwWLuVbbkXHSc+hJDNwum/0cdy66BipHfrGL240zzyc1tJz1kInZH6ghD2ReKraxI4R

j9T6aRyGSOWAmlSv15sb8vmZrO+NOIchWFMlwyu07/zplLKxgP1KA9dbFlwolB1MPUUJ

0zCw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783796380; x=1784401180;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Ay9IzvcOZcT2WYjLO3oUklABaVtCm5W1Cj+p0JZB95s=;

b=nDT9cs19LJYZfLJ62Z1buxVKoRue4waQCPR+WYOuk9i8UCvByeoj0zmwPjWZC5mkhh

NNgBX5mttLSGOudU5j4O9W8YilUhDR7syS5jR5PPCxp3idEnSu2bujG2UYPHSvjoQJ9D

YqbJmb1sYnQz47pc+AsuVR+qUvaIF9CA2BI5QeiiAgaq7OT4J1mbuGVloTRsL/KQw52K

B1Fw03I2UAPuvbUBKyu1uYbjxYwGsoK9/ZJLELTLpILUasX49AxLcrirUX+XAGWMqpQo

up1jiWRITfTEu4JG3xRJx8NCTm5RuSkPVZZ5p34CHGw7RP8tfoFQjrzWLeu5h2hP04OB

NuQg==

X-Gm-Message-State: AOJu0YzCV14689gYaHeOA7cgPeRqjwUSOipEaD8su6l1sDFJvr3kodHl

DX1YrklX/tNPA6AdiTG0lQF+Ap1uowgHDgISB14uXPUJN7gQNaLhq80G96pl6HKX6vryno+bn8+

W/tju3g==

MIME-Version: 1.0

X-Received: by 2002:a05:6102:554b:b0:738:bce9:6afc with SMTP id

ada2fe7eead31-7453384d1eamr1958786137.0.1783796379992; Sat, 11 Jul 2026

11:59:39 -0700 (PDT)

Message-ID:

Date: Sat, 11 Jul 2026 18:59:39 +0000

Subject: your company have a lot of potential.

From: ryanstrain86@gmail.com

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="00000000000094c86306565a75b5"



--00000000000094c86306565a75b5

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes



Hi,



We analyzed your website and discovered some SEO opportunities worth

exploring.



May I send over a brief proposal?



Thanks,

Faheem



--00000000000094c86306565a75b5

Content-Type: text/html; charset="UTF-8"



Hi,

We analyzed your website and discovered some SEO opportunities worth exploring.

May I send over a brief proposal?

Thanks,
Faheem

--00000000000094c86306565a75b5--

Intelcom Phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Sat, 11 Jul 2026 11:34:00 -0600

Received: from iad1-shared-relay.dreamhost.com ([208.113.156.243]:53602)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiba3-00000000AXg-20hk

for dave@nk.ca;

Sat, 11 Jul 2026 11:33:45 -0600

Received: from iad1-shared-b7-03.dreamhost.com (iad1-shared-b7-03.dreamhost.com [67.205.27.24])

by iad1-shared-relay.dreamhost.com (Postfix) with ESMTP id 4gyG4B2gw9zyw

for ; Sat, 11 Jul 2026 10:32:42 -0700 (PDT)

Received: by iad1-shared-b7-03.dreamhost.com (Postfix, from userid 6697016)

id 4gyG4B2Yb4z7pNs; Sat, 11 Jul 2026 10:32:42 -0700 (PDT)

Date: Sat, 11 Jul 2026 10:32:37 -0700

To: dave@nk.ca

From: Intelcom

Subject: Intelcom Delivery Notification

Message-ID: <155a947b8a9c91d9f5243f35fae30748@intelcom.com>

List-Unsubscribe: mailto:bounce547-EbflqqdmYlMWp1I@intelcom.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1c5df8daaf17dd68862db039456ed1085"

Content-Transfer-Encoding: 8bit



This is a multi-part message in MIME format.



--1c5df8daaf17dd68862db039456ed1085

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



















Intelcom









Delivery Update



Your package is currently being processed and requires a small fee for customs handling.



Amount due: 2.96 CAD



Please confirm your delivery details to ensure a smooth delivery experience.

Manage My Delivery







This is an automated message. Please do not reply.



© 2026 Intelcom Express











--1c5df8daaf17dd68862db039456ed1085

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit



















Intelcom











Delivery Update





Your package is currently being processed and requires a small fee for customs handling.





Amount due: 2.96 CAD





Please confirm your delivery details to ensure a smooth delivery experience.



Manage My Delivery








This is an automated message. Please do not reply.





© 2026 Intelcom Express

















--1c5df8daaf17dd68862db039456ed1085--

Intelcom phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Sat, 11 Jul 2026 11:34:00 -0600

Received: from iad1-shared-relay.dreamhost.com ([208.113.156.243]:53602)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiba3-00000000AXg-20hk

for dave@nk.ca;

Sat, 11 Jul 2026 11:33:45 -0600

Received: from iad1-shared-b7-03.dreamhost.com (iad1-shared-b7-03.dreamhost.com [67.205.27.24])

by iad1-shared-relay.dreamhost.com (Postfix) with ESMTP id 4gyG4B2gw9zyw

for ; Sat, 11 Jul 2026 10:32:42 -0700 (PDT)

Received: by iad1-shared-b7-03.dreamhost.com (Postfix, from userid 6697016)

id 4gyG4B2Yb4z7pNs; Sat, 11 Jul 2026 10:32:42 -0700 (PDT)

Date: Sat, 11 Jul 2026 10:32:37 -0700

To: dave@nk.ca

From: Intelcom

Subject: Intelcom Delivery Notification

Message-ID: <155a947b8a9c91d9f5243f35fae30748@intelcom.com>

List-Unsubscribe: mailto:bounce547-EbflqqdmYlMWp1I@intelcom.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1c5df8daaf17dd68862db039456ed1085"

Content-Transfer-Encoding: 8bit



This is a multi-part message in MIME format.



--1c5df8daaf17dd68862db039456ed1085

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



















Intelcom









Delivery Update



Your package is currently being processed and requires a small fee for customs handling.



Amount due: 2.96 CAD



Please confirm your delivery details to ensure a smooth delivery experience.

Manage My Delivery







This is an automated message. Please do not reply.



© 2026 Intelcom Express











--1c5df8daaf17dd68862db039456ed1085

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit



















Intelcom











Delivery Update





Your package is currently being processed and requires a small fee for customs handling.





Amount due: 2.96 CAD





Please confirm your delivery details to ensure a smooth delivery experience.



Manage My Delivery








This is an automated message. Please do not reply.





© 2026 Intelcom Express

















--1c5df8daaf17dd68862db039456ed1085--

Intelcom phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 11 Jul 2026 14:36:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiePs-00000000K2q-2r4B

for dave@doctor.nl2k.ab.ca;

Sat, 11 Jul 2026 14:35:16 -0600

Resent-From: The Doctor

Resent-Date: Sat, 11 Jul 2026 14:35:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from iad1-shared-relay.dreamhost.com ([208.113.156.243]:53568)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiba3-00000000AXe-20kV

for doctor@doctor.nl2k.ab.ca;

Sat, 11 Jul 2026 11:33:45 -0600

Received: from iad1-shared-b7-03.dreamhost.com (iad1-shared-b7-03.dreamhost.com [67.205.27.24])

by iad1-shared-relay.dreamhost.com (Postfix) with ESMTP id 4gyG4B3ccsz10P

for ; Sat, 11 Jul 2026 10:32:42 -0700 (PDT)

Received: by iad1-shared-b7-03.dreamhost.com (Postfix, from userid 6697016)

id 4gyG4B3VwWz7pNv; Sat, 11 Jul 2026 10:32:42 -0700 (PDT)

Date: Sat, 11 Jul 2026 10:32:37 -0700

To: doctor@doctor.nl2k.ab.ca

From: Intelcom

Subject: Intelcom Delivery Notification

Message-ID:

List-Unsubscribe: mailto:bounce547-EbflqqdmYlMWp1I@intelcom.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1b1f1ebd66c39eb912bd3c809fb0fca4a"

Content-Transfer-Encoding: 8bit



This is a multi-part message in MIME format.



--1b1f1ebd66c39eb912bd3c809fb0fca4a

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



















Intelcom









Delivery Update



Your package is currently being processed and requires a small fee for customs handling.



Amount due: 2.96 CAD



Please confirm your delivery details to ensure a smooth delivery experience.

Manage My Delivery







This is an automated message. Please do not reply.



© 2026 Intelcom Express











--1b1f1ebd66c39eb912bd3c809fb0fca4a

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit



















Intelcom











Delivery Update





Your package is currently being processed and requires a small fee for customs handling.





Amount due: 2.96 CAD





Please confirm your delivery details to ensure a smooth delivery experience.



Manage My Delivery








This is an automated message. Please do not reply.





© 2026 Intelcom Express

















--1b1f1ebd66c39eb912bd3c809fb0fca4a--

intelcom phish

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 11 Jul 2026 11:36:00 -0600

Received: from iad1-shared-relay.dreamhost.com ([208.113.156.243]:36634)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wibbe-00000000AeU-0Nxb

for dave@doctor.nl2k.ab.ca;

Sat, 11 Jul 2026 11:35:22 -0600

Received: from iad1-shared-b7-03.dreamhost.com (iad1-shared-b7-03.dreamhost.com [67.205.27.24])

by iad1-shared-relay.dreamhost.com (Postfix) with ESMTP id 4gyG645cRlz1BF

for ; Sat, 11 Jul 2026 10:34:20 -0700 (PDT)

Received: by iad1-shared-b7-03.dreamhost.com (Postfix, from userid 6697016)

id 4gyG4B3mTZz7pNv; Sat, 11 Jul 2026 10:32:42 -0700 (PDT)

Date: Sat, 11 Jul 2026 10:32:37 -0700

To: dave@doctor.nl2k.ab.ca

From: Intelcom

Subject: Intelcom Delivery Notification

Message-ID:

List-Unsubscribe: mailto:bounce547-EbflqqdmYlMWp1I@intelcom.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1edf94f1f5efb2b6f9567af0e1f27072e"

Content-Transfer-Encoding: 8bit



This is a multi-part message in MIME format.



--1edf94f1f5efb2b6f9567af0e1f27072e

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



















Intelcom









Delivery Update



Your package is currently being processed and requires a small fee for customs handling.



Amount due: 2.96 CAD



Please confirm your delivery details to ensure a smooth delivery experience.

Manage My Delivery







This is an automated message. Please do not reply.



© 2026 Intelcom Express











--1edf94f1f5efb2b6f9567af0e1f27072e

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit



















Intelcom











Delivery Update





Your package is currently being processed and requires a small fee for customs handling.





Amount due: 2.96 CAD





Please confirm your delivery details to ensure a smooth delivery experience.



Manage My Delivery








This is an automated message. Please do not reply.





© 2026 Intelcom Express

















--1edf94f1f5efb2b6f9567af0e1f27072e--

Intelcom phish Part 2



This is a multi-part message in MIME format.



--1f0035db069faa3de0823b6dc1c6b60cd

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



















Intelcom









Delivery Update



Your package is currently being processed and requires a small fee for customs handling.



Amount due: 2.96 CAD



Please confirm your delivery details to ensure a smooth delivery experience.

Manage My Delivery







This is an automated message. Please do not reply.



© 2026 Intelcom Express











--1f0035db069faa3de0823b6dc1c6b60cd

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit



















Intelcom











Delivery Update





Your package is currently being processed and requires a small fee for customs handling.





Amount due: 2.96 CAD





Please confirm your delivery details to ensure a smooth delivery experience.



Manage My Delivery








This is an automated message. Please do not reply.





© 2026 Intelcom Express

















--1f0035db069faa3de0823b6dc1c6b60cd--

Intelcom phish Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 11 Jul 2026 14:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiePF-00000000K1H-23v0

for dave@doctor.nl2k.ab.ca;

Sat, 11 Jul 2026 14:34:37 -0600

Resent-From: The Doctor

Resent-Date: Sat, 11 Jul 2026 14:34:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from iad1-shared-relay.dreamhost.com ([208.113.156.243]:47518)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wia1T-0000000041L-0x7K

for sales@nk.ca;

Sat, 11 Jul 2026 09:53:57 -0600

Received: from iad1-shared-b7-03.dreamhost.com (iad1-shared-b7-03.dreamhost.com [67.205.27.24])

by iad1-shared-relay.dreamhost.com (Postfix) with ESMTP id 4gyCr12zz4zyb

for ; Sat, 11 Jul 2026 08:52:01 -0700 (PDT)

Received: by iad1-shared-b7-03.dreamhost.com (Postfix, from userid 6697016)

id 4gyCr12RB5z7pND; Sat, 11 Jul 2026 08:52:01 -0700 (PDT)

Date: Sat, 11 Jul 2026 08:52:00 -0700

To: sales@nk.ca

From: Intelcom

Subject: Intelcom Delivery Notification

Message-ID: <8326dbc5e35ed6d4525234d2b8fd2555@intelcom.com>

List-Unsubscribe: mailto:bounce426-0I5z9GzyDnQBWl9@intelcom.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1f0035db069faa3de0823b6dc1c6b60cd"

Content-Transfer-Encoding: 8bit

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Intelcom Delivery Update



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[208.113.156.243 listed in dnsbl.ahbl.org]

[208.113.156.243 listed in dnsbl.ahbl.org]

[208.113.156.243 listed in dnsbl.ahbl.org]

[208.113.156.243 listed in dnsbl.ahbl.org]

[67.205.27.24 listed in dnsbl.ahbl.org]

[67.205.27.24 listed in dnsbl.ahbl.org]

[67.205.27.24 listed in dnsbl.ahbl.org]

[67.205.27.24 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[208.113.156.243 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[208.113.156.243 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[208.113.156.243 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[208.113.156.243 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[67.205.27.24 listed in will-spam-for-food.eu.org]

[67.205.27.24 listed in will-spam-for-food.eu.org]

[67.205.27.24 listed in will-spam-for-food.eu.org]

[67.205.27.24 listed in will-spam-for-food.eu.org]

[67.205.27.24 listed in will-spam-for-food.eu.org]

[67.205.27.24 listed in will-spam-for-food.eu.org]

[67.205.27.24 listed in will-spam-for-food.eu.org]

[67.205.27.24 listed in will-spam-for-food.eu.org]

[208.113.156.243 listed in will-spam-for-food.eu.org]

[208.113.156.243 listed in will-spam-for-food.eu.org]

[208.113.156.243 listed in will-spam-for-food.eu.org]

[208.113.156.243 listed in will-spam-for-food.eu.org]

[208.113.156.243 listed in will-spam-for-food.eu.org]

[208.113.156.243 listed in will-spam-for-food.eu.org]

[208.113.156.243 listed in will-spam-for-food.eu.org]

[208.113.156.243 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[208.113.156.243 listed in bb.barracudacentral.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[208.113.156.243 listed in psbl.surriel.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.6 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)

[208.113.156.243 listed in bl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[208.113.156.243 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted

Subject: {SPAM?} Intelcom Delivery Notification

Investment spam from Microsoft Outlook Part 2



--_000_DU0PR10MB733474721736BC019FE182CCB0FC2DU0PR10MB7334EURP_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Greetings !



I am Mr. Ammar Hussain from Qatar Petroleum.



I have one hundred million dollars for Investment. Contact me if you are in=

terested. I have all what it will take to move the fund to you as a contrac=

t fund to avoid every query; more details upon the receipt of your response=

.



Regards,

Ammar Hussain.

Qatar Petroleum.

Finance and Accountant.

Email: ammarhussain100@yahoo.com



--_000_DU0PR10MB733474721736BC019FE182CCB0FC2DU0PR10MB7334EURP_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Greetings !



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I am Mr. Ammar Hussain from Qatar Petroleum.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I have one hundred million dollars for Investment. Contact me if you are in=

terested. I have all what it will take to move the fund to you as a contrac=

t fund to avoid every query; more details upon the receipt of your response=

.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Regards,



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Ammar Hussain.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Qatar Petroleum.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Finance and Accountant.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Email: ammarhussain100@yahoo.com








--_000_DU0PR10MB733474721736BC019FE182CCB0FC2DU0PR10MB7334EURP_--

Investment spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 11 Jul 2026 14:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wieOy-00000000K0d-3kGo

for dave@doctor.nl2k.ab.ca;

Sat, 11 Jul 2026 14:34:20 -0600

Resent-From: The Doctor

Resent-Date: Sat, 11 Jul 2026 14:34:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westeuropeazolkn19010020.outbound.protection.outlook.com ([52.103.33.20]:25470 helo=AM0PR83CU005.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiZHH-000000001ky-4Acn

for root@nk.ca;

Sat, 11 Jul 2026 09:06:14 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=BcDopXSjwuOxVr5xROD7K/gV36jnvBlzWfMmimvw+QZYlpBgTz0c8RBNzD+ECkioxdu1cMCsE+30M/codDuC+2ZRwZwsWmp4e7PzPbDwGiOAURnpAyxr9zjHbtQzfp8+6AT4ceHAu1nZjWZfkze6tbPStDWlCotAnUqEEgq49mQW/Rk1qKxj3vaoHHm+uIjwh2Zt7I2hi3djsZj+V8Ux1bGscr08/3J9BLG8gRObLJu+Mws22H/Ffv+UHwB5fBapnChbV++zE3noy1sb3nws2sy5x/VHpWQ0lj/7SehMbJvXxTN9bm8GpKdhca9ASEDhrgZldu6PXRA+mALiC3Q7NA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=S2W264i2ZR0HvUDhJ53AQb8ZWk/WeiT3B5duy/1tm6g=;

b=GJEw6TeLT40RLhqMyebisIQ/xnKPE88Z9Xti9eDGIkiLzKx9LOQLIkFEHZqI4m2ljExmp7U13PPpvnG6v2KfNH6iJy98HEsUPZF04jnG2xsVEeg+ezRs2XFnv/WtuEKKrwUXvlxG6nemxCyCWHzXkLgwmgRICMs1Wnu4j14oHXath5KjsfH7nyiAHJn+PZeHZ6zhjHyRiR5be7NLk2DigYRxVGQOXCJ3UxLetzoiya/XxXL2C5QvVyGe4OvFc5LAn9Jo0rXsfD4vfeaRxMEFJdq+DXEVwVddsJMFy/NUjLcJv9MTy+4Hs2OGsA6EULi/4XjElsSt/Kak5rFGerQuUg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=S2W264i2ZR0HvUDhJ53AQb8ZWk/WeiT3B5duy/1tm6g=;

b=pnbQhTmWzrTsshCuoRCu00A3Xy6PICD+XAf/un/KYWoNmzAFCM8Sb6OKAk0YfzGPqHm4cs+I8sSNbp2NvKjiTwuIn2jS6r450OwB40/Fv2H/S15HjWujza4zTJHwInnRC0sEvuaUcWPI8DICRDFsK3wCJcFZ+E7v5rC2SwtFJF0dVyB89RpgrhzrJjb2zPuWNYKCTpTwWVycBqwb2uhM8Zm3CxdanG51QugspMfAJGWDZvnTSp0vd/S48qkPSQp5VUZ8OcFd4ijEwwIJNCQbHttXIAfatA+/lzr6Bf6sZulnCYG2o3Ocb3go26HuHPWxxohXkCue52AsWNam4yfDRQ==

Received: from DU0PR10MB7334.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:446::11)

by DU0PR10MB5147.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:343::5) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.18; Sat, 11 Jul

2026 15:05:00 +0000

Received: from DU0PR10MB7334.EURPRD10.PROD.OUTLOOK.COM

([fe80::85ce:465b:ff36:78c0]) by DU0PR10MB7334.EURPRD10.PROD.OUTLOOK.COM

([fe80::85ce:465b:ff36:78c0%5]) with mapi id 15.21.0181.019; Sat, 11 Jul 2026

15:05:00 +0000

From: Lhnm Hlkk

Subject: =?iso-8859-1?Q?=A0~_Greetings_!?=

Thread-Topic: =?iso-8859-1?Q?=A0~_Greetings_!?=

Thread-Index: AQHdEUYVQ45/6PMpGECyPPARsxKK+g==

Date: Sat, 11 Jul 2026 15:05:00 +0000

Message-ID:



Accept-Language: en-US, en-ZA

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: DU0PR10MB7334:EE_|DU0PR10MB5147:EE_

x-ms-office365-filtering-correlation-id: 68d516a8-876b-405a-0f63-08dedf5dc765

x-microsoft-antispam:

BCL:0;ARA:14566002|24071999003|18010799003|20110799003|39105399006|25010399006|20031999006|19110799012|4140399003|5062599005|8062599012|8060799015|15030799006|12121999013|22091999003|31061999003|24121999003|24021099003|55001999006|15080799012|7071999006|440099028|3412199025|26104999009|102099032|35041999009|43065399003|40105399003|31055399003|26121999007|26131999018;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?TP0BWgI+UhjDxK47I1DgxpHKr1v9uMQsvTYxm/N1GFletdDs9N9Sw0Esan?=

=?iso-8859-1?Q?wbI5uqBElVbljua7hOvOXTcwMlL3f5g43O58MOiWWJy7g/SxzOz5yJ7uHr?=

=?iso-8859-1?Q?XjAmk1rl5UATfIhljwSS/c8xXE89PftMtQnc03iXDNT30WYRKxMN/t2ukJ?=

=?iso-8859-1?Q?aQjyX1DFMuVONEfT1iYr5QajGpPBOgE/dsiEgP60Tz3506Mf0UrEIkKftq?=

=?iso-8859-1?Q?2Dr+x+OOXXxVHVDagJNlf1Ig4OAYHb9SG0GMraDchYKzg8S27nPXvjkUic?=

=?iso-8859-1?Q?QB/RRKKX+Zs4b1YjjEHsrvnp1iu65XjDG3TwM/0rr53op8o86G1X5ZJgbO?=

=?iso-8859-1?Q?1SRdSwhR1nEnNyru7ss7SgGVfQn4HmeFY/ubxuQg+UX8pgs9tg2OX123Fd?=

=?iso-8859-1?Q?qEuHnYo8xNwseuM1Jz54MWzzAusvf8BYu06IF5/GvEnbwICEhHgiNfjKzk?=

=?iso-8859-1?Q?yKx0mMQVpSSKWSST7n00nN/bcKdz9YtBrjKeoLF/aoJgNpfYvQxcQlCuR5?=

=?iso-8859-1?Q?Yu1mh9YLYQ1g5xsyBNoElhb30LRx3EcALSQmi+/9uwMegj/2dy4TlSNPrZ?=

=?iso-8859-1?Q?N6n3+k04IMGCHECtKcMowKGBZETLfc8hcsApavjv519VpdRfZiPcPSdM5/?=

=?iso-8859-1?Q?FkD90VqtvY9heffGublT6qhUif/gf1C+g1Gcnn5Y2KicyKHEbLkcyLZ4Bv?=

=?iso-8859-1?Q?cJmdIedT+UsFg7mggohJlIQ7lPI7kb2j1xLCCkxnENfNRoj5E1kfxOg36U?=

=?iso-8859-1?Q?psIHNi+o+CRVpzol1t57HwiWYn63raatXs8v650oWGbz5zZ4TwREy7oZ3F?=

=?iso-8859-1?Q?L3F+CE8b+QF152fIv8ozW+B+KlHjvYETXahAK/lvjfwQaiKJBflNtKsb+N?=

=?iso-8859-1?Q?zPp+UkqhMxwmoazaljq48XTKcVWwNsgl4df09pz7b0JuVVUG4yw0/uU5Qm?=

=?iso-8859-1?Q?H6cFG8PdRedTALLPj1iF6vjln9BTIrxFMgaP5muIORRnTI7TCeYwca9kLH?=

=?iso-8859-1?Q?GPULMT2/y1C68d3UQ3GiIxZeeTkfIZupkpD0xJWR1TyQGC2vAeMRICaM9K?=

=?iso-8859-1?Q?wVsCAOfa06Y+6L5S/s315efkUQ0fi0USq2C4KBg9MIGzB7CyCNGH7M3/iB?=

=?iso-8859-1?Q?7bDXg4N0/q3EbHHJ1YU2ZFhwu/dH/lt41+9VuG0Q166fiOkf32sw8iB8Hg?=

=?iso-8859-1?Q?t4boUQm3Tuyz7SqvVUjn3plinoQHRtNa7FfvYC6TDgoQ8tj3DLoMlRK0FO?=

=?iso-8859-1?Q?bFoi9I6uDSEoQkbnw2Dv9O7Ontweis54qkEL6xBPej838058jaJJM9Pky3?=

=?iso-8859-1?Q?/CYyIDtZl2LcKMAoupHGv7W3p8enAgX/C6xPVl9z/ZEHEdVuLhqyFIYbUD?=

=?iso-8859-1?Q?LM6RUJmt3xtUwaH6qGfBjm/6GnIHS6tOLv38A6SPWjEmdDFCOUi+tboAfN?=

=?iso-8859-1?Q?kX6Kvbg9D87xJkbQvmyVBx1Vo9/i7DxgGlDyzIHokJnDDZdYE0GMhj0Aq2?=

=?iso-8859-1?Q?m+yod4DnAaL+6FP8D58B9t?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?/m/N10sd4sc0DbCDF9QvJ61MeJ2MLjJDHZ4cgvtk+6CAtAzsFSp1YkLB0/?=

=?iso-8859-1?Q?b8+875gRYHa/+5D8ZHUB9VxgzR0ivSQEWF/wbClGrw+nfjo/W1ZzHS5YYF?=

=?iso-8859-1?Q?lqJr96Pa1UBPKcezctgpJZh8dD24O2MGmauQaJnLkXAn/MJ3OANHRcWbuk?=

=?iso-8859-1?Q?E1/FFXOm014P2dPqzcb6T0ux5Eri5kf8V5Lq/9wayOp4XrlwGS9k6YdY8r?=

=?iso-8859-1?Q?Y8+BZ1VB/9MoyklLHG7d4Ifi+q/dp8pPM3SN2lzWMhh+L7ckImavMIFaC7?=

=?iso-8859-1?Q?bnsauHxMhHN9kkwZ3RpIlaN6u3Bc522I4JMQyRB5XD0OdRpLMM3pWr+mVh?=

=?iso-8859-1?Q?gPQ+8XUiLtkEXv7a2Vcl81dkzQFAzJX3oQ6wEXpj+6RitQJ3nWNGme79Ey?=

=?iso-8859-1?Q?GmbzSkh9P3duHHJGjQGKaD0X6cZScVZ83v3QpFRWu3b0QksE/AWuBcvX8/?=

=?iso-8859-1?Q?THkYvtp3FMbjGgYodYfcmSXymLT9gW4eXp4VsOEFaZIXXxenHAXrWTir4F?=

=?iso-8859-1?Q?QsiTpt//t2iXWo1VPrHnPyiCqUXchGvH1ujnCYPd7G8R9FCA4kFCr9yOVT?=

=?iso-8859-1?Q?GZIMXsY7QCGfIONaE0oAdD3Q8mdcKwPtHjIuNyzWzVIWmC/6SNezWkFEjY?=

=?iso-8859-1?Q?DPHd+Zrigv7X0MSMArkEtalBvhk4NDCLX520CwiuWsipHZoRBEvQKLz8iA?=

=?iso-8859-1?Q?U3pbPsSZSJIeyUj+GJXU6of5LNhF9SjD8Zpgccz7BExk2/6zIr3Sd78LpU?=

=?iso-8859-1?Q?ePZeR9IxHtnXde8l92SjuEkZj23SXEtv0XCMmUAkJTypVT8YHdlMv2GsB2?=

=?iso-8859-1?Q?bB3iuJ0ug6CeNrh1VW7CB6j2Jkf7yaPFSU1dV1HTYvlZnx5/ywHTAPTgWD?=

=?iso-8859-1?Q?9uUqyi5J+y/lACe5/0pCai2GUj9img5SeCgsP2rBvgljoPGSXgrIoUgcdP?=

=?iso-8859-1?Q?Iqvj7zLnwcvZHyaeVp2ycJuFFI1cG1Qvs0mBOQY4O9Iqu8AGdfyxDVVpAO?=

=?iso-8859-1?Q?GT5ZrSFsxoqyT8SCJW3PXoy236uD40IdZvPBZHe6IlP2RMz2AFFXeYR/iw?=

=?iso-8859-1?Q?lHBrJkyvem6oCX+wa+9PbzH9S5bdCJ1nBL8uKNS3P1AUjFwoeNIYDnESML?=

=?iso-8859-1?Q?T8qpjR6IB7GsGGQKWuTTYCAUtgAauJmqOLXfet0bXNnWYM6jj/XDpgMvVJ?=

=?iso-8859-1?Q?qCorvIJnslUnFWcWFUQPeqWdVniF04ED0HATVAU/3BE+Wrrqj5IhZbyNmQ?=

=?iso-8859-1?Q?atw6G14SBVvgsKbEQgoUy0BqZmXVOys2pCjbkG7R9+UEFVrGq2UsjT//76?=

=?iso-8859-1?Q?7av2gHlXjeqU6M699/7fopczWgtyLloRML/Ep9r/0VnEKv7iJBgZKds6n5?=

=?iso-8859-1?Q?2nFW9WHE30tlFeOLD+RiJ/l/V1EKtlkzs1VtdTHjSraY6a31yZ6r7eDVw1?=

=?iso-8859-1?Q?bXRcH5pOCFBa5/iV?=

Content-Type: multipart/alternative;

boundary="_000_DU0PR10MB733474721736BC019FE182CCB0FC2DU0PR10MB7334EURP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: DU0PR10MB7334.EURPRD10.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 68d516a8-876b-405a-0f63-08dedf5dc765

X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Jul 2026 15:05:00.2831

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU0PR10MB5147

Chinese Products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Sat, 11 Jul 2026 03:05:00 -0600

Received: from out28-89.mail.aliyun.com ([115.124.28.89]:33834)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiTdF-00000000Kzj-0WIL

for dave@nk.ca;

Sat, 11 Jul 2026 03:04:36 -0600

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vicreport.com; s=default;

t=1783760604; h=Date:From:Message-ID:Subject:MIME-Version:Content-Type;

bh=pY2ffmBUCVmRvpfQyOvZrzQ9pOp4kBmAzc1kuQwviLg=;

b=NkdIIIW5Bz69Ndu+rApJen+kvS/ddWaP8jJb2XQUt1FxLXpM1AIQyRaRMXIkPixYWoMiyki3hGR7brWLFjiP02uJAeJgRmDf7cCfs6DqNv4bQLvVirvzr3dLwm7x7RGBqICgZ1qo93V3w6AYZQ20Ca1569w8HNX7+FLMXApc+DM83+jBzozkuwLNcMH9Di9P1rJMFHU/fmnJA3JWvubw2WH6HeWxotEn7SPiEpTFlvTd1MsTbkHjTMBaO6uF9wv+UytKvMKQTYoJn1ccZRKMGk9Tf/yTnFV4x+k5/XjBgJfjawYKz6S4eCGwEQVzj956+VYeD/hCJYK7K8lmNohd6Q==

X-Alimail-AntiSpam:AC=CONTINUE;BC=0.7021549|0.2639619;BR=01201311R401S80rulernew998_84748_2000303;CH=blue;DM=|AD|false|;DS=CONTINUE|ham_alarm|0.0684978-0.112928-0.818574;FP=13540523820541259926|0|0|0|0|-1|-1|-1;HT=maildocker-contentspam033032053168;MF=daly@vicreport.com;NM=1;PH=DW;RN=251;RT=1;SR=0;TI=W4_0.2.3_v5ForWebDing_21250492_1783760590745_o7001c93d;

Received: from WS-web (daly@vicreport.com[W4_0.2.3_v5ForWebDing_21250492_1783760590745_o7001c93d] cluster:ay29) at Sat, 11 Jul 2026 17:03:11 +0800

Date: Sat, 11 Jul 2026 17:03:11 +0800

From: "Daly"

Cc: "vicresearch"

Reply-To: "Daly"

Message-ID:

Subject: =?UTF-8?B?U2VtaWNvbmR1Y3RvciBQcm9jZXNzIENvbnRyb2wgRXF1aXBtZW50IE1hcmtldCBLZXkgUmVn?=

=?UTF-8?B?aW9uIEFuYWx5c2lzIFJlcG9ydA==?=

X-Mailer: [Alimail-Mailagent][W4_0.2.3][v5ForWebDing][Chrome]

MIME-Version: 1.0

x-aliyun-im-through: {"version":"v1.0"}

x-aliyun-mail-creator: W4_0.2.3_v5ForWebDing_M3LTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzE1MC4wLjAuMCBTYWZhcmkvNTM3LjM2vN

x-aliyun-mailtrack: {"foreign-track":"0"}

Content-Type: multipart/alternative;

boundary="----=ALIBOUNDARY_2346_7f87ac624700_6a5206cf_14313a"



Dear,

Regarding Semiconductor Process Control Equipment, we just published our 2026 latest survey. The following manufacturers are covered in this report:

KLA Corporation

Applied Materials

Hitachi High-Tech

ASML

Onto Innovation

Lasertec

SCREEN Semiconductor Solutions

ZEISS

Camtek

Skyverse Technology

Toray Engineering

RSIC

Wuhan Jingce Electronic Group

Microtronic

Unity Semiconductor SAS

SMEE

TZTEK(Muetec)

DJEL

Nordson Corporation

Bruker

Nearfield Instruments (NFI)

Confovis

Muetec

Nova

……

Reply ""Yes"" if you want to see the executive summary. A sample report will be sent to you.

Best regards / Mit freundlichen Grüßen / 此致敬意,

Daly





Instragram followers spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 10 Jul 2026 17:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiKzE-00000000EqY-2qae

for dave@doctor.nl2k.ab.ca;

Fri, 10 Jul 2026 17:50:28 -0600

Resent-From: The Doctor

Resent-Date: Fri, 10 Jul 2026 17:50:28 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f197.google.com ([209.85.128.197]:42115)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiKxx-00000000Eeh-1nZ8

for sales@nk.ca;

Fri, 10 Jul 2026 17:49:11 -0600

Received: by mail-yw1-f197.google.com with SMTP id 00721157ae682-81e688de6beso48805327b3.0

for ; Fri, 10 Jul 2026 16:48:22 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1783727297; x=1784332097; darn=nk.ca;

h=content-transfer-encoding:content-type:to:from:subject:date

:message-id:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=hdXdrm3esRZO8s6qEECXhoPlo36E2/rphYZxU8e9dp8=;

b=WD0XtDFLRo2FnyWmjjhF2/2erftLJ/0o0ZGwHqi710/Y/7SzUCyklywQxeP0uoQs98

BgrwGYX9pdSARoeWCvKJipyhKchS3XnxWzamrJIWvwPKmRM3sVgVwJmRU+P6J9vmDS/O

BDv4BEd6EOhhLMxRO3HzObR9fsmUnvvrPXeGY7bV/02ZKT6z1gesbAlnToq56G1DvJQl

fNN4clmS+jMs1TM9xVYiOaRc+P7sa1DPq7kt4/lsFPAZzKJabbn5TYNX2PgGgIVq13/r

aQIyGOCcEZoDs+eJEVPSXxYX8wSZYHkkDE+/w0Ais9nSwVGE+0eXU3k+MyTNJG+r3dmr

SzjQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783727297; x=1784332097;

h=content-transfer-encoding:content-type:to:from:subject:date

:message-id:mime-version:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=hdXdrm3esRZO8s6qEECXhoPlo36E2/rphYZxU8e9dp8=;

b=ZJo/NaeJ/3+FOI6L8uBhxe/e+NUJyTecEOwSbylB7rhoJcZe188cErERrFY7iNaCeC

1FjZjgswuix36PdfFMiKPNEytVD+Z15OLsOD9rCBV9dPfFCJUExHbPAhXJJOz+7LjAqy

Kdj+fUUvC5raD1fJVL7q6JfJpnPeoLS1MMAZukUJL9gwnKGsBjOUBrryrr4y2R9duknF

zW6MVXqTmvDMHtbiM4z6bFlxDLqUZnlJ9Pbgdn7JzWA4hio+3h/VW4vkMtAdlBagQ/Nl

C6dqwyg3+Jr2nA1N98HIpSqQ1cBveCnjaAGkh7+ESIpfs7SIEFxrub8JPF27ItGrLHbd

CKOQ==

X-Gm-Message-State: AOJu0YwZTGE02NfM+u239oXJg5EK8hr2LDdXGfLbrwv2rfoMqyTfYgPQ

z4OwRRJ54LPxEnb6YjqIprCptW3Ifz18rytqxuUVFmKXrwKK6+tEc+FmI4cEMzBcc9Ag9bewGNt

rQYCU9w==

MIME-Version: 1.0

X-Received: by 2002:a53:b112:0:b0:665:1d25:ff6f with SMTP id

956f58d0204a3-667c5ccad8fmr2734894d50.48.1783726862073; Fri, 10 Jul 2026

16:41:02 -0700 (PDT)

Message-ID:

Date: Fri, 10 Jul 2026 23:41:02 +0000

Subject: Netknow Internet Service, Get More 100,000 Instagram Followers

From: yunipuwa1@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 8.6

X-Spam_score_int: 86

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Netknow Internet Service, Get More 100,000 Instagram Followers

Sorry to interrupt your time. We offer social media services, If you're interested,

please visit our Website. If you're not interested, please skip this step.





Content analysis details: (8.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: instatool.site]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[yunipuwa1(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[yunipuwa1(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.197 listed in wl.mailspike.net]

0.0 URIBL_RED Contains an URL listed in the URIBL redlist

[URI: instatool.site]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Netknow Internet Service, Get More 100,000 Instagram Followers



Hi, Netknow Internet Service, Get More 100,000 Instagram Followers

Sorry to interrupt your time.



We offer social media services,

If you're interested, please visit our Website.

If you're not interested, please skip this step.



We will help you increase your social media presence to another level.

( Threads, Instagram, Twitter, Youtube, Facebook, etc. )



Are you interested in a free trial ?

Special For You Bonus Extra $2 - $5 FREE BALANCE TODAY SIGNUP NOW..!!!

GET 100K Followers Instagram NOW !!!

Order here :



[ https://instatool.site/store/free/?netknowyeg ]





Take free trial service today only...!!

10 -101K Instagram Followers



- Instant Start

- Safest Methods

- Privacy Protection

- Speed 200K Followers/day

- High Quality Followers

- Drop-Back Guarantee

- Trusted Seller testimony

- Starting get 100K Followers Instagram

- Guaranteed to be the cheapest

Docusign Phish from Google Gmail Part 3









3D"Logo"
src=3D"https://docucdn-a.akamaihd.net/olive/images/2.62.=

0/global-assets/email-templates/email-logo.png" width=3D"116" />






3D""
src=3D"https://docucdn-a.akamaihd.net/olive/images/2.76.=

0/email/iconFileWithCheckWhite.png" width=3D"75" />

A document has been sent for your review



target=3D"_blank">View Document








Please review the attached document at your convenience. Contact the =

sender if you have questions.





This invitation is intended only for the recipient and contains secure =

access information.











Confidential: Do not share this email or link with =

others.









About Docusign: Sign securely and legally in minutes, =

from anywhere.





Need help? Contact the sender or visit our support page=

.









Download the app:
.com/features-and-benefits/mobile" target=3D"_blank"> 3D""
height=3D"18" src=3D"https://docucdn-a.akamaihd.net/olive/images/2.62.=

0/global-assets/email-templates/icon-download-app.png" width=3D"18" />Get =

Docusign





Sent by Ashley Allen via Docusign. To unsubscribe, =

contact the sender.





This message contains =

confidential information. If you are not the intended recipient, please =

delete immediately.











Docusign Phish from Google Gmail Part 2

=EF=BB=BF


name=3D"viewport" />

Docusign Phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 10 Jul 2026 16:09:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiJOV-00000000GoE-2iBP

for dave@doctor.nl2k.ab.ca;

Fri, 10 Jul 2026 16:08:27 -0600

Resent-From: The Doctor

Resent-Date: Fri, 10 Jul 2026 16:08:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f102.google.com ([209.85.210.102]:43323)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiJB1-000000009Jp-1BTl

for root@nk.ca;

Fri, 10 Jul 2026 15:54:35 -0600

Received: by mail-ot1-f102.google.com with SMTP id 46e09a7af769-7e9dc546f40so1813851a34.1

for ; Fri, 10 Jul 2026 14:53:43 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=sabeng.it; s=google; t=1783720418; x=1784325218; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=xsSnEjMuhKAAplWQmLPsIFUXTJtv8AQO7G79q61VKJc=;

b=h7GqD0/cFHV/jgFg7otbaLHzyMyG/6qqOT7X0m751339Bh0cPp71Y+miOO/4BD4xbf

DYNopM1ATbwxygcJWs2khrrE5gRd4nCwA9LRhyQzEwMqUrLhxyGl48WefXE7XqS+GfgX

GXbslJaThy4VALgff75e55tQtpXTyQnrDyfqg=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783720418; x=1784325218;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=xsSnEjMuhKAAplWQmLPsIFUXTJtv8AQO7G79q61VKJc=;

b=EgvFEI7vgkpUZD0u2uvobi7BSuCpme/PtV42Iav+ksY3wai2TItIRTQlch7z6mlkUQ

dbwOi90Slxsxe7mjY/UH5U0xcRWGAqzHUnSPwage77UF1quAyo0kGEIFuLdFT+DXexKL

TaiK92P2bWWdNzx1Ll4M0IQ72yL3GkcNBfDLea/8La+Tj+M/lHYUufvO+PLK6cJLdb+X

Skfh/Hdhh+uIRCMbhEgX6MGvne2X6sUK1t5uDb/JGGYrc85k5g2HMNLmrOUJ9gXz4q/i

12xzm7K2tRqgglXDPYMvs2b7X2IlixP++v5AplaPoJIge/k0XVaLktJzU0t1qmEvZ8Q/

OLJQ==

X-Gm-Message-State: AOJu0Yx2eBHVAVt4e/pZgRAiKFX6iHW4JKoafe8lqGL1B2pDIw5iWl7d

GKH9EQQCCvxEcYQ3DNpbK9pOJQwIXbrHE6ZXVc6tEb5DQuYhaP9bbGgdgggS7V7dTbiGUvzsAV1

GSjoLY5Wn9s+0pafqjf5zYpWJZfLmWUHCgknD/b82wqXoQVI=

X-Gm-Gg: AfdE7cmWK4PhxApIFCZ/ZlzpRTwuaD7XPxNd8xGeY1FLPbVHhvNjrbToxlu7bNSV4FA

wWDyIG9OO55Yl2rB33f/B4C6LibA3rdjASIHrsXF73Bta3FtaQeT3cq/JDjJNIB/RGG7IKFcTTa

jqRkp5UKpqtKage5yoG/3Cm41Fx0fJ3JdwlSG/jKHFQh+kj3/yTdxjAlPWiqYjIFvidXJAfwR7o

ydk2Thtmu7fpjlWtoYAnqobAyMFpauPGmBpWWxBKMUiSu9eoADSUE+Z5QGoL/J/vVFiiGDqAJBT

IGFePJndufdbEyyz3qFoV7ZM0FAuFi2pfVGQ8kXeCEpm/L189lTsjFCOA4BCZI3snzzgSw8zkZF

KtFLqZfeuRUsnPyCu3A==

X-Received: by 2002:a05:6820:f006:b0:6a3:6851:3480 with SMTP id 006d021491bc7-6a38b99dff6mr2767701eaf.24.1783720417999;

Fri, 10 Jul 2026 14:53:37 -0700 (PDT)

Received: from sabprogetti.com ([192.210.236.148])

by smtp-relay.gmail.com with ESMTPS id 586e51a60fabf-451917c9bc1sm579465fac.14.2026.07.10.14.53.37

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 10 Jul 2026 14:53:37 -0700 (PDT)

X-Relaying-Domain: sabeng.it

From: "Initiating_Payment|Schedule| Sign_Online/OU=EXCHANGE ADMINISTRATIVE

GROUP (FYDIBOHF23SPDLT)/CN=RECIPIENTS/CN=B7A707497B564FD-87541"



To: root@nk.ca

Subject: =?UTF-8?Q?Review_the_Attached_Commercial_Invoice_D?=

=?UTF-8?Q?ocuments_=EF=BF=BD_07/10/2026_=EF=BF=BD_?=

=?UTF-8?Q?root=40nk=2Eca?=

Message-ID: <8a2175a5-a98d-ebf9-3113-c15ae3cfa1a3@sabeng.it>

Content-Transfer-Encoding: quoted-printable

Date: Fri, 10 Jul 2026 21:53:36 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  A document has been sent for your review View Document

Please review the attached document at your convenience. Contact the sender

if you have questions.



Content analysis details: (8.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[192.210.236.148 listed in dnsbl.ahbl.org]

[192.210.236.148 listed in dnsbl.ahbl.org]

[192.210.236.148 listed in dnsbl.ahbl.org]

[192.210.236.148 listed in dnsbl.ahbl.org]

[209.85.210.102 listed in dnsbl.ahbl.org]

[209.85.210.102 listed in dnsbl.ahbl.org]

[209.85.210.102 listed in dnsbl.ahbl.org]

[209.85.210.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[192.210.236.148 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[192.210.236.148 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[192.210.236.148 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[192.210.236.148 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[209.85.210.102 listed in will-spam-for-food.eu.org]

[209.85.210.102 listed in will-spam-for-food.eu.org]

[209.85.210.102 listed in will-spam-for-food.eu.org]

[209.85.210.102 listed in will-spam-for-food.eu.org]

[209.85.210.102 listed in will-spam-for-food.eu.org]

[209.85.210.102 listed in will-spam-for-food.eu.org]

[209.85.210.102 listed in will-spam-for-food.eu.org]

[209.85.210.102 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.102 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?UTF-8?Q?Review_the_Attached_Commercial_Invoice_D?=

=?UTF-8?Q?ocuments_=EF=BF=BD_07/10/2026_=EF=BF=BD_?=

=?UTF-8?Q?root=40nk=2Eca?=