Microsoft Office 2024 phish

Posted by Dave Yadallee on Friday, November 6. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path: <>

Envelope-to: dave@nl2k.ab.ca

Delivery-date: Thu, 05 Nov 2026 17:08:59 -0600

Received: from [157.228.69.187] (port=39889 helo=arinaleiunsdfbhger.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

id 1xP6Z8-00000000PBK-3FwG

for dave@nl2k.ab.ca;

Thu, 05 Nov 2026 17:08:20 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=nl2k.ab.ca;

h=Date:From:To:Cc:Subject:MIME-Version:Content-Type; i=dave@nl2k.ab.ca;

bh=rzVJE9VrOCZ17+19qNluxBww+Aw=;

b=MM8qnNlfLePlvfayIOKuYZxZRwhG55F0KtLMlYgdl4S2/mWXaFCrITq+5T3592/fEldcvAwi8cDJ

51TyF4IVayOE2f+XGYi2B1JbFx/RHq4N3xGZl15kuFucGKEo4EeZZDZE937ewXAe483s+KgiOdNY

iMYNTZGf2chMs5Ir2eQ=

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=nl2k.ab.ca;

b=UZJSlmJKQoOLVyq/CDiV69K789aLlCAV1re+jC8Zn5sb14VXph3NFr5zs84G+dI9+jq31g5zuVmX

HV68Onr4mtF7q9RbXIWoMHiMdzOQq7GgufJHyuQFao1gvBg+67f5kIDCgB+uHObKjuh3/rDdd1LK

ykF7L0urCueQTIddgLs=;

Date: 11-05-2026

From: Digital License Center

To: dave@nl2k.ab.ca

Cc: dave@nl2k.ab.ca

Subject: Microsoft Office 2024 â€“ Get Your Lifetime License Today!

MIME-Version: 1.0

Content-Type: text/html

X-Spam_score: 12.7

X-Spam_score_int: 127

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Office 2024 for Windows & Mac KeyMart MICROSOFT OFFICE 2024

Â· WINDOWS & MAC Work Smarter. Achieve More.

Content analysis details: (12.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[157.228.69.187 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[157.228.69.187 listed in will-spam-for-food.eu.org]

[157.228.69.187 listed in will-spam-for-food.eu.org]

[157.228.69.187 listed in will-spam-for-food.eu.org]

[157.228.69.187 listed in will-spam-for-food.eu.org]

[157.228.69.187 listed in will-spam-for-food.eu.org]

[157.228.69.187 listed in will-spam-for-food.eu.org]

[157.228.69.187 listed in will-spam-for-food.eu.org]

[157.228.69.187 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[157.228.69.187 listed in dnsbl.ahbl.org]

[157.228.69.187 listed in dnsbl.ahbl.org]

[157.228.69.187 listed in dnsbl.ahbl.org]

[157.228.69.187 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[157.228.69.187 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[157.228.69.187 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[157.228.69.187 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[157.228.69.187 listed in dnsbl.ahbl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: 89.252.175.132]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: 89.252.175.132]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: 89.252.175.132]

0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)

1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.3 MIME_8BIT_HEADER Message header contains 8-bit character

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

0.0 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX

Subject: {SPAM?} Microsoft Office 2024 â€“ Get Your Lifetime License Today!

Office 2024 for Windows & Mac

MICROSOFT OFFICE 2024 Â· WINDOWS & MAC

Work Smarter.

Achieve More.

Get the professional Office suite for Windows or Mac â€”

everything you need to create, manage, communicate

and stay productive.

Microsoft Office 2024

WINDOWS & MAC Â· LIFETIME LICENSE

WINDOWS

Office Professional Plus
LTSC 2024

$35

FROM Â· 1 PC

href="http://89.252.175.132/4qJSJt3411pxIn123ckzjfbofhp70ZHZMHTVGIQYZGFG42856ODIP620f1">

SHOP WINDOWS

MAC

Office Home & Business
2024 for Mac

$140

1 MAC Â· LIFETIME

href="http://89.252.175.132/4IeEvY3411xtzx123nlydgyjpkt70RHAYCWUDXZFNIJN42856JEUN620P1">

SHOP MAC

Windows â€” Select Your License

Intermediate package prices are displayed on the

product page. Select your preferred Windows quantity

before checkout.

href="http://89.252.175.132/4eZhry3411yIPW123jdovnnvttu70YZMWLYCSSVDRRWG42856DUTU620s1">

CHOOSE YOUR WINDOWS LICENSE →

Digital license key Â· No physical box or disc

MAC EDITION

Office Home & Business 2024 for Mac

The complete Office experience built for macOS.

Install it on your Mac and work with your documents,

spreadsheets and presentations â€” natively and smoothly.

One-time price

$140.00

1 Mac Â· Lifetime license

href="http://89.252.175.132/4tWeqR3411ewxR123onlhnpalhe70ZACDSSTIYZJBBBH42856OONM620D1">

GET THE MAC LICENSE →

Digital license key Â· No physical box or disc

Professional Tools. Powerful Productivity.

âœ“ Lifetime License Perpetual-use license according to its applicable terms.	âœ“ Windows & Mac Separate license options for supported Windows and macOS installations.
âœ“ Multiple Options Choose Windows licenses from 1 PC up to 30 PC, or a single Mac license.	âœ“ Digital Delivery License key delivered by email with activation instructions.

Your Essential Office Applications

Word

Excel

PowerPoint

Outlook

OneNote

Access*

Publisher*

Teams*

Access and Publisher are available on Windows only.

App availability depends on the exact licensed edition

and platform.

Fast & Convenient Digital Delivery

Forget physical packaging and shipping delays.

Receive your digital license key by email,

along with the necessary activation instructions â€”

for Windows or Mac.

Ready to Upgrade?

Whether you work on Windows or Mac, there is a

package that suits your needs.

Windows licenses from $35 Â· Mac edition from $140.

href="http://89.252.175.132/4UvEyb3411OAES123oeshiqebks70LMCORYVGIJMTWNV42856ZWZB620h1">

SHOP WINDOWS

href="http://89.252.175.132/4tEDGq3411sybn123mnamyzddzs70XSLYPKLDIEYKLOI42856VFYJ620p1">

SHOP MAC

KeyMart

Genuine Digital Software Licenses

Need assistance?

support@keymart.net

Windows and Mac editions are licensed and

sold separately.

Microsoft and Office are trademarks of

Microsoft Corporation. KeyMart is an

independent retailer and is not affiliated

with or endorsed by Microsoft.

You are receiving this email because

you subscribed to our updates.

Unsubscribe

|

Visit KeyMart

Â© 2026 KeyMart. All rights reserved.

Web/SEO/App spam from Microsoft Outlook

Posted by Dave Yadallee on Friday, November 6. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 08:19:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xObpr-000000003x3-346a

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 08:19:31 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 08:19:31 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013074.outbound.protection.outlook.com ([52.103.43.74]:56716 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xObO8-00000000Mwd-0Wtj

for sales@nk.ca;

Wed, 04 Nov 2026 07:50:56 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=uiRhg2kESUURIZPgpBHtqoUKiHHl1SATeQUfbf90vzAJxBF2Cbs6BIfgyb+2FiWCM2tdGCm98uhfqCJPGidvow0ePw4tXtu5IFseNZr1taLEkBmuQRcfUURxChhCYH82r8yHQqqu+RyMU1V6400qn55ZDHemojPBSENObFLxCxFNAo+66z7iFdq0BNqhGL4S3IKnR6CdTqFdRWNrxcVz2/srI72w1DO5mnZcJQeVlngN5R+BLkyNEYd7m1E6yO3QGChOI24YTvXWyDGzO93YJHgrWutAcnTBi95GWqKsmAeEdqP5byaQa5xgK0vqiIjclxR4hLfjhEcL2gVhmAszKA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=hiSjRPTIjUr9+HW9bZ6/37l0dzxu1hI35yiS1G/P+Pk=;

b=xj3e41xLAyrePwLJvZ1FIjIuRvyRpXLw1n1rqZFRGgMxQZw7Oxvrys+2wGHGpsIBOJ+se6g792ZWwz5CsHT8OuEOW7oAk/7klVOa7zHdbyFnZLfzTX8+mXA/vViN60Ii1mpuLsWiCQjC9FakIfWit00Rwhq4897hkzLtOTzjXa7c57fBNOvfkZpDTrEGpTRtkPgZ+2X45yxiPeyqYkDLAp53c78JrHQVMIFoKGkDH5OB45DhBwjtSShL43vXa9a9H2Ry00rqofDdslxZngv4uc/VINhRKP32/TsgTMBch//dRwD7B/eXzxkuXp5mRnVr4W/bmvuKoQJwYPxHMzn8Zg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=hiSjRPTIjUr9+HW9bZ6/37l0dzxu1hI35yiS1G/P+Pk=;

b=aVAKlXfq1t/huav6X8/RSj0GTT4ZdBr8TM2T6WtqhPvMykdmJG7I0Ap85SJChaomQlj1yDk/yWD35IDBsjPqhE05dFmzDiyY+MIEM1ifZe7sszMhn7QCOTudw4Mps2hevAEOIU37Gbf4TADKvm7+1EicYEzDg8YE5YLOuHVRlzSBsdesVbhkGK5czzQvEzCFtrQpxP4KEQJ3m0riWKvfFI3PWbnyi6AYOhS1dSoZNEHkA2VEZrmN2l0EOTqLM0kYRQAm5/4xjMWQAhkWL8+07kuDz146K/7aVBLwPGNR62oJn0afgVAOlIsLlQVtmgzEa7cTisnVQIYn0Gt9o5ey+Q==

Received: from SI2PR04MB4731.apcprd04.prod.outlook.com (2603:1096:4:127::5) by

SE3PR04MB9388.apcprd04.prod.outlook.com (2603:1096:101:32b::16) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.569.12; Wed, 4 Nov

2026 13:49:23 +0000

Received: from SI2PR04MB4731.apcprd04.prod.outlook.com

([fe80::736e:82d3:f5e1:8a2d]) by SI2PR04MB4731.apcprd04.prod.outlook.com

([fe80::736e:82d3:f5e1:8a2d%5]) with mapi id 15.21.0592.007; Wed, 4 Nov 2026

13:49:22 +0000

From: Harvey Kitelinger

Subject: Few Details

Thread-Topic: Few Details

Thread-Index: AQHdbGMmbAiUNHk930ihSOavTvRNwQ==

Date: Wed, 4 Nov 2026 13:49:22 +0000

Message-ID:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SI2PR04MB4731:EE_|SE3PR04MB9388:EE_

x-ms-office365-filtering-correlation-id: 0af37dfb-1e4d-4feb-bb0c-08df3a7a6e92

x-microsoft-antispam:

BCL:0;ARA:14566002|15030799006|15080799012|20031999006|8062599012|4140399003|19110799012|25010399006|8060799015|24071999003|37011999003|16051099003|55001999006|31061999003|24021099003|39105399006|260806224601699006|51015399003|40105399003|102099032|3412199025|440099028;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?FiYL4BIPSkpU5zQqKmQxgml+wBnxXaLv0TKL2PBxwj6eI34iEiUCXoQ6Co?=

=?iso-8859-1?Q?QRMzyyiwoo+BCAyWSQp8rMLbnWKFH9kNNLTyI5z/SFEUwqsBstB/xkkujq?=

=?iso-8859-1?Q?Pt1surNqDXIItKxbsx29sWLYGDxsVp25/cUFSBE9d482iq4N/1UwOgLtvD?=

=?iso-8859-1?Q?Zux8nkQA+fM4S0KTPbWcMAU69cMzK5+E1IBLuZ4WXxkrByHgY5NyNOo3SR?=

=?iso-8859-1?Q?BBKcL675iegWC7XyRMbEby04LpGAuzNOh6izvhDI6abla7FzN2kzGbuZa6?=

=?iso-8859-1?Q?2w6FxvMOg3FU4iHULAWCtqRdvj0GPG2eJLV1y+iS+g8tBQow+PcxpD1YfV?=

=?iso-8859-1?Q?xIZx91G0kQYM03zuyxJKYsnKdK9V8kFJrGVjlZBOp1QHQaBMeSFQ4UmCQT?=

=?iso-8859-1?Q?Dh+U1isqdKFbTKQiFoTeGSERHf3HPHt1yyD2Tn5jcCEvthratqKK0M2VA1?=

=?iso-8859-1?Q?xHjAY9QLoa7XLvNVsDX6b2go8Fkvud4GbL+OD45nXoTa32YM91oQou8uQx?=

=?iso-8859-1?Q?2lUZTMExxdBcUfhUIFU5E6W2X6VkdSdw78PUFnbrwXs2R9XScgQxVeAhN6?=

=?iso-8859-1?Q?SoHDF2jRxm3UDMzzvCKemJF0Si/kjB+bAT1isL3wmhjWFvq6Px5aEiCQvg?=

=?iso-8859-1?Q?/NTMWnoHQPDEB940u0AWctawoVXVlFgSD4jmSrIa1119aNo9ae7fhdCXgj?=

=?iso-8859-1?Q?EIFP7QyV7QU73jdjL9BBtKEl9XACPe4rnAERHpb0VUriAxhHyVyyl4MubA?=

=?iso-8859-1?Q?6DUsFDbHMbWM7GXKDd7dJfHMxZIYyNvoa1AFUZ1zERiRALXuO5vfdwM8Nf?=

=?iso-8859-1?Q?R+nZQ7kqbG44ZCe0+e9vffc+CzEBfTa4ceOhGOk90JQCGxvfa13W/eR3W8?=

=?iso-8859-1?Q?BccQ8wob3XRVTFu0t70mdz8/sKTY5Zlp5xAhAi5UnKCC9ByHX6EE8xh0fI?=

=?iso-8859-1?Q?U+t5YWB6yNBm9QkUC8nebLz+TOFHnPunRNSaPECYdwG7uFX91SRHjUw9tj?=

=?iso-8859-1?Q?LFdP0tJ/wSZIE7d3yM2/ItzVgWd87erfPdB68yMxugQmnkY8lCLoY2S0vj?=

=?iso-8859-1?Q?27Xxcv8HgloDSfA+JdQO2KtNcNDD2PnckuGrnGxJty5vHIDTT1k30Md+pi?=

=?iso-8859-1?Q?b4rj2vM4kcx5HRi90rK5jth4KaAD1jHwzu5X00nE108RzfxXKGJcGqOJmH?=

=?iso-8859-1?Q?AbeUbjYJfBO6aGYwm0xyD4T1iD1qBUMyTcbYYfPCgOhvJ7nicwCD2nWgak?=

=?iso-8859-1?Q?kVPJwPNbAIL8cpviPLfw=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?8RCxe30NH4yITF1BLNxWWa5tEWqkNLaP8JO/ur5AtdmOWiN4ND+mNeqTJl?=

=?iso-8859-1?Q?Is7QMoSoEnAYfwfjDwdm0aCyB+6QyBz8kw3UBEKxB55KkPxZv7pJqw1K5O?=

=?iso-8859-1?Q?hlIaJqVMyuvW9khWvVM/TTe44KZLx+DUx2CPHec6kCDcfKFDXV7XNMX/YW?=

=?iso-8859-1?Q?b/377dtTOK7RuBlxKQNxm5RzdsKmS/6pnfc9eWeUEkLm4C9W/WXAsiWKz2?=

=?iso-8859-1?Q?/IDpAxeLgOEGI/dnK6ycFLtkN1YqmSfClerJjWv9iHtXajFEeAMA+k+H01?=

=?iso-8859-1?Q?nNbO+YghX7suvHwCm57FzXMktH/W/XP6zEBoZUTM3IsWVCT0v8ORJXsRCr?=

=?iso-8859-1?Q?NhQUgQ6uypCkIamOBrqWOiGmOTsTvGtF5oNsJ86ocIBKJttfyeZtRpaeBR?=

=?iso-8859-1?Q?3xg6xayMcgTHLYwdKgIf3K1J1KgNEm8uXTI6QSAT0hFIwflEnfdXyxaYGv?=

=?iso-8859-1?Q?DpWBd57plyBovU0xtXyhsUdDBrQY8iHfb8DI+6OoycEraMGbbv1kQ6Cl7C?=

=?iso-8859-1?Q?bUG7FPukCTGLNgbJCUqHks0m75xlkkVsalS+yx70/6ei/EmRBCTMAjzzCK?=

=?iso-8859-1?Q?/i4RM9ZoEzo2wb+t5QvEw45Y6VLtUTQ4qv7GHBmKcD2eysI0ucq8joajmE?=

=?iso-8859-1?Q?2kSPFME8JgPaHuGKRybtWr/BsTVvpy4eFYvvnKX5mX7aR16v+H2y0cUhgM?=

=?iso-8859-1?Q?faCFoDMjfgwys5G7ynq2m4QITqhfL9mTE/VQDkuBfeEQjsxl5CYcRdSlqM?=

=?iso-8859-1?Q?nx4CBfhbgsdRuseuqH0rWW9n7e+w+si6srgMS1P6TLQgf9RWvRtHam+qoo?=

=?iso-8859-1?Q?nSXQUSMU+wbslUXFXcJr12kTknexdImG26XZsQ8uT/Jl0mB0+qLVmo7T54?=

=?iso-8859-1?Q?YBqmJ+dXVr5UaOETvjDrjjEkNuRjJ1Q9HZ/IAJeshydg+dnySxIB1wN4ph?=

=?iso-8859-1?Q?LX2Wd/scKssWeALPhtFSDZh83waSTvjTetuFqVv9MWN6/hsQZVCVMhyPk9?=

=?iso-8859-1?Q?xEGGGc4ld9CR3AmNRttddYbtctfaVbUB+E8D6UyQDPx29UaVfZlPEsvgz5?=

=?iso-8859-1?Q?SDDeTBtR2Zq/uSbtIuYKizi/hJ6icm49HljMx4yO4mTRw4hx8XbbIGExzs?=

=?iso-8859-1?Q?HNK+INv4GNUkSDPGPWL0z63HtKhzbwygtor1JUszJx7oQGtKgei58bmY5K?=

=?iso-8859-1?Q?fxAAR20RFqNZn2SozFIDyHe0ZX6CRYGoAgFDgRrqBAwkH8NlZh9DYnmeMW?=

=?iso-8859-1?Q?Ibjpo496ebG1CT5PFDWWGxuqAyqNrYSU3i+TfCU9pIwKOfiRmMFX1vDT+p?=

=?iso-8859-1?Q?fHwpBVxKlI4Ja0FoS0aF+BVxm/h1uIXRW3hVpnfKDIRbAaUPDTpGjKAtQc?=

=?iso-8859-1?Q?5YMsbROi+WBW0p+U9y0j57s0C122+OHOq/wXcCM1kF2KJEn8QkUlPt+tzL?=

=?iso-8859-1?Q?5bo5Z3ympqH6H5uh?=

Content-Type: multipart/alternative;

boundary="_000_SI2PR04MB4731C0825E799DFD3ADBAD49EB682SI2PR04MB4731apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SI2PR04MB4731.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 0af37dfb-1e4d-4feb-bb0c-08df3a7a6e92

X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Nov 2026 13:49:22.4837

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SE3PR04MB9388

--_000_SI2PR04MB4731C0825E799DFD3ADBAD49EB682SI2PR04MB4731apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Hello,

I noticed that your website may not be making the most of the ways people d=

iscover businesses online, including Google and AI platforms like ChatGPT, =

Claude and Gemini.

Shall I share a few ideas?

Best,

--_000_SI2PR04MB4731C0825E799DFD3ADBAD49EB682SI2PR04MB4731apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

1">

font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helv=

etica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hello,

font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helv=

etica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I noticed that your website may not be making the most of the ways people d=

iscover businesses online, including Google and AI platforms like ChatGPT, =

Claude and Gemini.

font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helv=

etica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Shall I share a few ideas?

font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helv=

etica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Best,

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

--_000_SI2PR04MB4731C0825E799DFD3ADBAD49EB682SI2PR04MB4731apcp_--

Microsoft rewards phish from amazon

Posted by Dave Yadallee on Friday, November 6. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path: <010001a1aa3cc94c-40f2c038-7002-40ef-9171-f4245f2d2f03-000000@e.customeremail.microsoftrewards.com>

Envelope-to: dave@nk.ca

Delivery-date: Wed, 04 Nov 2026 23:46:00 -0600

Received: from g174-64.smtp-out.amazonses.com ([216.221.174.64]:38995)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <010001a1aa3cc94c-40f2c038-7002-40ef-9171-f4245f2d2f03-000000@e.customeremail.microsoftrewards.com>)

id 1xOqI1-000000001Ff-2wnr

for dave@nk.ca;

Wed, 04 Nov 2026 23:45:35 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=m4basdgxof77vxggmpewu6flnczurfs5;

d=customeremail.microsoftrewards.com; t=1793857473;

h=Date:From:To:Subject:MIME-Version:Content-Type:List-Unsubscribe-Post:List-Unsubscribe:Message-ID;

bh=91B41v4QsBAiZ/fqSEwuzb7jsTqbM911Tnb5xQe848I=;

b=A4EggrcW/X4HDnoypi85JEjugY3ockwNscae9YeBiAqKZrGLekYC/hay8dAxbEOc

PTxalcu1jniSIG/wsoA0m/nYjYNHK5Ilkqj1/tf6pBLuMLi7sn8MMTQOBdDkoBrfsSX

On54qzjeXp3cbgIf2F7NU9SFr8VeQUgWB536QLV/kNg9HrLDf5liSKc5v7slD/tFp3V

8Jrp0Urd3AWiU2+wPnXoFA4dzC8Z/5qXN3/tOlvTONFFJekKLxzo7FRS/PGgELSnP5u

odFGYsLHY+2rY6e9APaiE7LDkQqJ2QvP5LTkeg0b9R+md7mGnJ8qNR6YTkGaDMISDWD

6VbT4BNxbw==

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1793857473;

h=Date:From:To:Subject:MIME-Version:Content-Type:List-Unsubscribe-Post:List-Unsubscribe:Message-ID:Feedback-ID;

bh=91B41v4QsBAiZ/fqSEwuzb7jsTqbM911Tnb5xQe848I=;

b=SD3jV7M/Bc17n472KcS49efC13/o96NgRSYFXz9/PT4y4IwTog7UguhMMjULk7ks

CEIA+9p54SRja8ajurdE7DOH8jZhy5EtNs62RGkj9JPlFl5Sh0uROb22kQEvlJZI3ue

r3+dL4FV7hZ2O6l5HKV/NK5IjeX++kIdDzEJP9us=

Date: Thu, 5 Nov 2026 05:44:32 +0000

From: Microsoft Rewards

To: dave@nk.ca

Subject: =?UTF-8?Q?Get_Super_Duolingo=E2=80=94for_free?=

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_Part_700045_448643964.1793857473754"

List-Unsubscribe-Post: List-Unsubscribe=One-Click

List-Unsubscribe:

Message-ID: <010001a1aa3cc94c-40f2c038-7002-40ef-9171-f4245f2d2f03-000000@email.amazonses.com>

Feedback-ID: :1.us-east-1.WLjAuNYRRj6DKScq4VKG/pS8kZ1xHNsxZkUcF8x9CnNgglF5/2fgx2dYQiIU/0OrLC3ITZMUDGA6y4lLrWuOy90K9ZOLzfFthdSO5mpA//0jeF+yLVGtbNRmFQPkaEU48M++wNEnqlLJc3r6nHiz1A==:1.us-east-1.Gzb0L9Xbuy8a6XAMVoLQe1hccINiBcZo/UwauQxpRko=:AmazonSES

X-SES-Outgoing: 2026.11.05-216.221.174.64

------=_Part_700045_448643964.1793857473754

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

To unlock this reward,

complete a fun quest

Get Super Duolingo=E2=80=94for

free 96 sup, sub {

font-size:100% !important; } sup { mso-text-raise:10%; } sub {

mso-text-raise:-10%; } table, td { border-collapse:collapse;

mso-table-lspace:0; mso-table-rspace:0; } a, a:link, a:visited {

text-decoration:none; } .h-display, .h-display-2 { font-family:

'Open Sans', Arial, sans-serif !important; } .cta-image {

padding-top: 28px !important; }

Microsoft Rewards Logo ( https://go.microsoft.com/fwlink/?LinkId=3D2381922&=

clcid=3D0x409 )

Microsoft Rewards ( https://go.microsoft.com/fwlink/?LinkId=3D2381922&clcid=

=3D0x409 )

0 (

https://go.microsoft.com/fwlink/?LinkId=3D2381922&clcid=3D0x409 ) Microso=

ft Rewards

medallion ( https://go.microsoft.com/fwlink/?LinkId=3D2381922&clcid=3D0x409=

)

Microsoft Rewards LogoMicrosoft Rewards (

https://go.microsoft.com/fwlink/?LinkId=3D2381922&clcid=3D0x409 )

0Microsoft Rewards medallion (

https://go.microsoft.com/fwlink/?LinkId=3D2381922&clcid=3D0x409 )

2 free months.

1 quest. Let=E2=80=99s go.

****************************************************

2 free months.

1 quest. Let=E2=80=99s go.

****************************************************

( https://go.microsoft.com/fwlink/?lid=3Davzmczrrnndw&LinkId=3D2382025&clci=

d=3D0x409 )

--> Get 2 months of

Super Duolingo on us.

To unlock your reward,

complete a few quick activities, including searching with Bing

for 5 out of 14 days. Easy.

Start the

quest=20

( https://go.microsoft.com/fwlink/?lid=3Dvh44zdwtj12l&LinkId=3D2382025&clci=

d=3D0x409 )

Start the

quest=20

( https://go.microsoft.com/fwlink/?lid=3Dyectwdaiyqg6&LinkId=3D2382025&clci=

d=3D0x409 )

Super Duolingo

owl character flying through a starry dark blue background with

the Super Duolingo logo=20

( https://go.microsoft.com/fwlink/?lid=3Da3ax47843u9e&LinkId=3D2382025&clci=

d=3D0x409 )

=20

Install

the Bing

App

Get

it on Google

Play (

https://go.microsoft.com/fwlink/?LinkId=3D2381920 )

Download

on the App

Store (

https://go.microsoft.com/fwlink/?LinkId=3D2381920 )

Follow

Microsoft

Rewards Instagram (

https://go.microsoft.com/fwlink/?LinkId=3D2381919 ) TikTok (

https://go.microsoft.com/fwlink/?LinkId=3D2381918 ) YouTube (

https://go.microsoft.com/fwlink/?LinkId=3D2381917 ) X (formerly Twitter) =

(

https://go.microsoft.com/fwlink/?LinkId=3D2382024 )

Limited-time

offer for select Microsoft Rewards members. Activate the quest by

November 19, 2026. The Bing search activity must be completed

within 14 days of activation, and all quest activities must be

completed by December 3, 2026 to be eligible for the reward.

Limit one per person/account. Available while supplies last.

Available in select markets only. Microsoft reserves the right to

modify or cancel this offer at any time. Current Super Duolingo

subscribers are not eligible. Terms apply=20

( https://go.microsoft.com/fwlink/?lid=3D6hpcb6wpjpj7&LinkId=3D2384402 )

. See quest page for full

details.

Unsubscribe

(

https://account.microsoft.com/profile/unsubscribe?CTID=3D0&ECID=3DFeJBDjYWd=

duKTLxYpczx7g&K=3D6dd0beba-c127-4cd4-aa6e-b953a3058a56&D=3D6392772923560233=

26&PID=3D19137&TID=3D0b8f6b28-d47a-4951-916e-e85a011d8a69&CMID=3Dnull ) |

Privacy

Statement

(

https://go.microsoft.com/fwlink/?LinkId=3D521839 )

Microsoft Corporation, One Microsoft Wa‌y,‌<=

/span> Redm‌ond,‌ W‌A 9‌8052&nbs=

p;US‌A

Microsoft Logo (

https://go.microsoft.com/fwlink/?LinkId=3D2381922&clcid=3D0x409 )

------=_Part_700045_448643964.1793857473754

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

ft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:office" lang=3D"">

">

=3D1.0">

=20

=20

=20

Get Super Duolingo=E2=80=94for free

=20

ng=3D"0" border=3D"0" style=3D"margin: 0 auto;" bgcolor=3D"#ffffff">

" cellspacing=3D"0" border=3D"0" class=3D"container" style=3D"width: 640px;=

max-width: 640px; margin: 0 auto;" bgcolor=3D"#ffffff">

=20

=3D"0" border=3D"0" style=3D"width: 100%; border-collapse: collapse;">

40px; margin: 0 auto; padding: 0;">

cing=3D"0" border=3D"0" style=3D"width: 100%; max-width: 640px; border-coll=

apse: collapse;" bgcolor=3D"#ffffff">

tyle=3D"max-width: 496px; margin: 0 auto; padding: 30px 72px 0;">

=20

0" cellpadding=3D"0" border=3D"0" style=3D"border-radius: 16px; border-spac=

ing: 0; width: 100%; max-width: 496px; margin: 0; padding: 0;">

order-radius: 16px; color: #111111; height: 60px; padding: 0 20px; border: =

0.5px solid rgba(0,0,0,0.12);">

ng=3D"0" cellpadding=3D"0" border=3D"0" style=3D"border-spacing: 0; color: =

#111111; height: 60px; margin: 0; padding: 0;">

=3D"99%" style=3D"font-family: 'Segoe UI',Arial,sans-serif; font-style: nor=

mal; font-weight: 600; font-size: 16px; line-height: 21px; letter-spacing: =

-0.02em; color: #272320; padding-right: 8px;" valign=3D"middle">

ftrewards.com/CL0/https:%2F%2Fgo.microsoft.com%2Ffwlink%2F%3FLinkId=3D23819=

22%26clcid=3D0x409/5/010001a1aa3cc94c-40f2c038-7002-40ef-9171-f4245f2d2f03-=

000000/4C_8sn6mEvlUW7VnyAi60_02spB-2RpMlrtMiCJDO3o=3D452" target=3D"_blank"=

aria-label=3D"Microsoft Rewards" style=3D"font-family: 'Segoe UI',Arial,sa=

ns-serif; font-style: normal; font-weight: 600; font-size: 16px; line-heigh=

t: 21px; letter-spacing: -0.02em; color: #272320; text-decoration: none; ve=

rtical-align: middle; white-space: nowrap;">

s.com/appboy/communication/assets/image_assets/images/6a0744985556180083172=

f09/original.png" width=3D"19" alt=3D"Microsoft Rewards Logo" style=3D"vert=

ical-align: middle; margin-right: 6px; display: inline-block; border-width:=

0;">
x; height: 21px; font-family: 'Segoe UI',Arial,sans-serif; font-style: norm=

al; font-weight: 600; font-size: 16px; line-height: 21px; letter-spacing: -=

0.02em; color: #272320; vertical-align: middle; white-space: nowrap;">Micro=

soft Rewards

th=3D"1%" nowrap style=3D"font-family: 'Segoe UI',Arial,sans-serif; font-st=

yle: normal; font-weight: 600; font-size: 16px; line-height: 21px; letter-s=

pacing: -0.02em; color: #272320; padding-left: 8px; padding-right: 8px; whi=

te-space: nowrap;" valign=3D"middle">

ftrewards.com/CL0/https:%2F%2Fgo.microsoft.com%2Ffwlink%2F%3FLinkId=3D23819=

22%26clcid=3D0x409/6/010001a1aa3cc94c-40f2c038-7002-40ef-9171-f4245f2d2f03-=

000000/3y8X2AcZCzmvYwAVjA9y1BuVFYLWiCqEbtI8niXZO0o=3D452" target=3D"_blank"=

aria-label=3D"Microsoft Rewards medallion" style=3D"text-decoration: none;=

display: inline-block; width: auto; text-align: right; font-size: 0; line-=

height: 21px; white-space: nowrap; color: #272320;">
xt" style=3D"display: inline-block; width: 130px; height: 21px; font-family=

: 'Segoe UI',Arial,sans-serif; font-style: normal; font-weight: 600; font-s=

ize: 16px; line-height: 21px; letter-spacing: -0.02em; color: #272320; vert=

ical-align: middle; padding-right: 4px; white-space: nowrap; text-align: ri=

ght;">0

ets/image_assets/images/6a424fd77b359e009af02317/original.png?1782730711" w=

idth=3D"16" height=3D"16" alt=3D"Microsoft Rewards medallion" style=3D"disp=

lay: inline-block; vertical-align: middle; border-width: 0;">

=20

ly: 'Segoe UI', Arial, sans-serif; color: #222222; border-collapse: collaps=

e; mso-table-lspace: 0pt; mso-table-rspace: 0pt; direction: ltr; padding: 2=

4px 72px 40px;" class=3D"mobile-padding">

ftrewards.com/CL0/https:%2F%2Fgo.microsoft.com%2Ffwlink%2F%3Flid=3Davzmczrr=

nndw%26LinkId=3D2382025%26clcid=3D0x409/1/010001a1aa3cc94c-40f2c038-7002-40=

ef-9171-f4245f2d2f03-000000/2I-ixZ8yf45CMndjfjIAfNrqhqfMUYXx7iN6Wl7C3SI=3D4=

52" target=3D"_blank" style=3D"text-decoration: none; color: #272320; displ=

ay: block;">

ily: Segoe UI, Helvetica, Arial, sans-serif; font-weight: 600; font-size: 5=

6px; line-height: 56px; letter-spacing: -0.01em; color: #272320; border-col=

lapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; padding-bott=

om: 16px; margin: 0 0 8px;">

2 free months.
1 quest. Let=E2=80=

=99s go.

amily: 'Segoe UI', Arial, sans-serif; font-size: 16px; line-height: 130%; c=

olor: #4C4642; margin: 10; padding: 0;">

Get 2 months of Super Duolingo on us.

amily: 'Segoe UI', Arial, sans-serif; font-size: 16px; line-height: 130%; c=

olor: #4C4642; margin: 0; padding: 0;">

To unlock your reward, complete a few quick=

activities, including searching with Bing for 5 out of 14 days. Easy.

cellspacing=3D"0" border=3D"0" width=3D"100%">

; line-height: 16px; font-size: 0; mso-line-height-rule: exactly;">
td>

cellspacing=3D"0" border=3D"0" width=3D"100%">

; line-height: 16px; font-size: 0; padding: 0 0 24px;">

lpadding=3D"0" cellspacing=3D"0" border=3D"0">

" style=3D"padding: 0;">

mail.microsoftrewards.com/CL0/https:%2F%2Fgo.microsoft.com%2Ffwlink%2F%3Fli=

d=3Da3ax47843u9e%26LinkId=3D2382025%26clcid=3D0x409/1/010001a1aa3cc94c-40f2=

c038-7002-40ef-9171-f4245f2d2f03-000000/oQ4xp3gSdgoaLtbJNpNu0k5WON7BpNJst4W=

2Yot0-ig=3D452" target=3D"_blank" style=3D"display: block; text-decoration:=

none;">

s.com/appboy/communication/assets/image_assets/images/6abc9de33b75d30083365=

c7f/original.png?1790746083" width=3D"496" alt=3D"Super Duolingo owl charac=

ter flying through a starry dark blue background with the Super Duolingo lo=

go" style=3D"display: block; width: 100%; max-width: 496px; height: auto; b=

order-radius: 24px; border-width: 0;">

=20

=20

=3D"0" border=3D"0">

;">

010001a1aa3cc94c-40f2c038-7002-40ef-9171-f4245f2d2f03-000000/8iBrkrPE339ZkC=

LIkvO1XZ6gNoVHBwgjm31bVsI2G0U=3D452" style=3D"display: none; width: 1px; he=

ight: 1px;">

------=_Part_700045_448643964.1793857473754--

Chinese products spam

Posted by Dave Yadallee on Friday, November 6. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 05 Nov 2026 04:57:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOv9l-000000008q0-3dD0

for dave@doctor.nl2k.ab.ca;

Thu, 05 Nov 2026 04:57:21 -0600

Resent-From: The Doctor

Resent-Date: Thu, 5 Nov 2026 04:57:21 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out208-116.dm.aliyun.com ([140.205.208.116]:50994)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOplj-00000000NUx-0cgT

for doctor@nl2k.ab.ca;

Wed, 04 Nov 2026 23:12:14 -0600

X-AliDM-RcptTo: ZG9jdG9yQG5sMmsuYWIuY2E=

Feedback-ID: default:carrie@vip.rubbersheeting.ltd:alibabak_WebBatch:317014

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.rubbersheeting.ltd; s=aliyun-cn-hangzhou;

t=1793855468; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=MxPkyimI4bOuJoRDOybxGdtbxhJb4oRbuE3t85WFCo8=;

b=ezEJMuSmHtiEeRgSuJbYGIubtdDV+AaPYbuBgM6gLb7s6goG7SNcSORVu80o6948j6Wf+xtyDi+9fYHQSCsV7p125szy1swR5seC6cTJQpyCgyE4fqi1wC8I6jNbgFfPDfUBsAV9BKoJ9QogCcA68fhbdAaE9Q2axSPJoTiXROQ=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1793855468; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=MxPkyimI4bOuJoRDOybxGdtbxhJb4oRbuE3t85WFCo8=;

b=MrqDQWRSovZVU9MGavrQ36W2Uq4uB0BXiV+yK5Kses6ApjJ/ctrPoxk+n/fnKXQC68Lo1ihA4obwp3hyY5dZzLXFwCUwuJ22FIaDfJM3qcxcY1rlf7psXOaztnpC9sx9NW/ECZqzyt+Qu8Gi/Ncn8X2klUQHtGyGgDuh0p0r53U=

Received: from chitu-hsf(mailfrom:carrie@vip.rubbersheeting.ltd fp:ma_600000367678328556 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Thu, 05 Nov 2026 13:09:43 +0800

Date: Thu, 05 Nov 2026 13:09:43 +0800

From: "Carrie Kang"

To:

Reply-To:

Message-ID: <6f93f62b-dc1b-4404-bce8-632b39381ab1@alibaba.com>

Subject: =?UTF-8?B?UnViYmVyIG1hdHM=?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000367678328557

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 7.1

X-Spam_score_int: 71

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi, Wish you have a great day!

Content analysis details: (7.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[140.205.208.116 listed in will-spam-for-food.eu.org]

[140.205.208.116 listed in will-spam-for-food.eu.org]

[140.205.208.116 listed in will-spam-for-food.eu.org]

[140.205.208.116 listed in will-spam-for-food.eu.org]

[140.205.208.116 listed in will-spam-for-food.eu.org]

[140.205.208.116 listed in will-spam-for-food.eu.org]

[140.205.208.116 listed in will-spam-for-food.eu.org]

[140.205.208.116 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[140.205.208.116 listed in dnsbl.ahbl.org]

[140.205.208.116 listed in dnsbl.ahbl.org]

[140.205.208.116 listed in dnsbl.ahbl.org]

[140.205.208.116 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[140.205.208.116 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[140.205.208.116 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[140.205.208.116 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[140.205.208.116 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[140.205.208.116 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[140.205.208.116 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[140.205.208.116 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_REMOTE_IMAGE Message contains an external image

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} =?UTF-8?B?UnViYmVyIG1hdHM=?=

Hi,=

Wish you have a great day!
pan>

an style=3D"text-wrap-mode: nowrap;font-family:comic sans ms">We specialize in=

the manufacturing of Rubb=

er products and PTFE,

ic sans ms">Primarily focusing on
an>SBR/CR(Neoprene)/EPDM/NBR(Nitrile)/NR(Natural=

)/Insertion/FKM(Viton)/Insulating/(ESD) rubber sheet/High-abrasion rubber/Sili=

cone.

=

Anti-Static/Anti-Slip=

ped Rubber sheets/Stall mats/Drainage rubber mats/Rubber Block.

<=

span style=3D"font-family:comic sans ms;">
(255, 255, 0);">Custom-sized gaskets and precision cutting are available
>.

wrap;font-family:comic sans ms">If you are interested or have any requirements=

, please do not hesitate to contact me.

-wrap-mode: nowrap;font-family:comic sans ms">Your feedback is highly valued.<=

/span>

li.net/2025/05/13/fG4YD6w3soeJ1Tv.jpg"/>

-mode: nowrap;">

family:comic sans ms">Thanks &Best Regards

t-family:comic sans ms">

ap;font-family:comic sans ms">Carrie Kang

p-mode: nowrap;font-family:comic sans ms">Whatsapp&Phone:0086 13821173226<=

/span>

=

www.zxzrubberfactory.com

Chinese products spam

Posted by Dave Yadallee on Friday, November 6. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 19:13:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOm2U-00000000BLF-2weI

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 19:13:14 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 19:13:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m16023653221.xmail.ntesmail.com ([160.236.53.221]:23378)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOlu2-00000000A2q-0V3Y

for sales@nk.ca;

Wed, 04 Nov 2026 19:04:36 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_1100650_1935421036.1793840605625"

To: sales

Reply-To: tonlexinc@gdtlxvip.com

Subject: =?UTF-8?B?TGF0ZXN0IEFpciAmIE9jZWFuIEZyZWlnaHQgU29sdXRpb25zIGZyb20gQ2hpbmEgdG8gQ2FuYWRh?=

X-Priority: 3

MIME-Version: 1.0

Received: from tonlexinc@gdtlxvip.com( [10.176.110.159] ) by ajax-webmail ( [127.0.0.1] ) ; Thu, 5 Nov 2026 09:03:25 +0800 (GMT+08:00)

From: Germaine

Date: Thu, 5 Nov 2026 09:03:25 +0800 (GMT+08:00)

X-WM-Tid: 0aa1a93b69add094kusyd4b36674161bcf

DKIM-Signature: a=rsa-sha256;

b=AkKR4jxEzddXPV9qCXwI5kgyKNOXhTYfRnZKehLzBNDImrsrGD6LngQygnybd2S9UIjPhWRo1Ioostbdttuvp87L5h3Zdhzh94saDeQY/3iU/dn3o1nqPe5DtqaMc953DNA4b7mHsqsFlrtDTfoAuAD2ZUzR0PhyTuccTxKGyTg=; s=default; c=relaxed/relaxed; d=tonledapro.com; v=1;

bh=Xxkp61FlI914BmUC6Z7k/PfTFx49lv/r//eXCMFTnGM=;

h=date:mime-version:list-unsubscribe:subject:message-id:list-unsubscribe-post:from;

Message-ID:

Dear,

Have a wonderful week,

I’m writing to share some positive news about ocean freight rates on our Canada routes. Following a period of volatility, capacity has improved and pricing has become more competitive, potentially delivering significant savings across your supply chain.

Current ocean freight highlights (Q4 2026):

From local warehouse pickup in China to delivery at your receiving address, we handle all logistics and import formalities. Our solutions–Shenzhen to Toronto : Ocean freight-$1.50/kg | Air freight-$9.50/kg.

FCL bookings are our specialty. Ningbo to Montreal: 20GP $7,000 | 40HQ $8,700 with weekly departures.

What sets us apart is our end-to-end DDP service — we handle everything from pickup at your supplier’s door to customs clearance and final delivery. No hidden fees, no surprises.

I’d love to quote your next shipment — even if it’s just for comparison purposes. Can I get a few details about your typical shipping volume and routes?

Best regards,

Enable premium notifications for product growth via . Keep My Alerts Active

To override these emails, visit Tweak Email Delivery.

Germaine

Germaine TONLEXING

International Sales | Tonlexing Logistics

NVOCC Licensed · FMC Registered

Email: sales28@tonlexing.com

WhatsApp: +86 159 1948 8619

Website: www.tonlexing.com

Location: Shenzhen, China

Air Freight · Sea Freight · DDP Shipping · Customs Clearance · Amazon FBA

Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on Friday, November 6. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 16:21:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOjM5-0000000085x-0MtL

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 16:21:17 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 16:21:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pz2-f5.google.com ([74.125.228.5]:44305)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOgf4-00000000LGS-1ACt

for sales@nk.ca;

Wed, 04 Nov 2026 13:28:45 -0600

Received: by mail-pz2-f5.google.com with SMTP id 41be03b00d2f7-cdac0ac5f19so593394a12.1

for ; Wed, 04 Nov 2026 11:27:48 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=amysoftsolution.info; s=google; t=1793820462; x=1794425262; darn=nk.ca;

h=content-type:mime-version:date:message-id:subject:reply-to:to:from

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=YVwvhfOR+a4CcrbxDJKiuGeoQ+2WX2x1kI8XYePSOn8=;

b=EBFlGrlc7Q806hKlhMbHxaTs+n9nZLEqwkmwQ6kuiHyPksUM/JatlHQM1wuyvOnxdC

bRV6rAHG8SbVTWNbC3YoPyHev6eONugj9llfUceOneOItkrmY9/ObLI6MIN1CUwdQ18v

zt/uE1czx5KPoBLkiHOeeVFVoG4awobAhfTq0=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793820462; x=1794425262;

h=content-type:mime-version:date:message-id:subject:reply-to:to:from

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=YVwvhfOR+a4CcrbxDJKiuGeoQ+2WX2x1kI8XYePSOn8=;

b=onI3SUykRdgzsuUyESsvquJhX+Z2upKTqPMHoim6HjnJt4XPFJpwC92enTzyt7dwTv

8GXRzFOn0Y6kNaB2+nBcqOPhLx8f7IZX/9aJLor1ZYZHLmjqoJvDH7uVio9E2jgahtZp

Eeo1JS6hh+UUAmuMxq5Im6pxFZ50nmSG0PcpmIsz0RuJSOO6xdnqRzbvvaPwBmMWeb/G

EnJQ7lb8M6CRVcV1MSdBH9ikHqZ/LnR4okvYbMMRYcjIgKhMyYFMJ6coxWSXvAPySudG

+W2Pujfy4BQ7vfnA7FzqCITcU6odADDnlyghW8kKtdXwEeHr10K2l9OxpJxZA4weOU8D

4N0A==

X-Gm-Message-State: APuU4Z+zui6LoB9du8f+nDBTtzeDSeZoBMyTT2IVMiIAtxSRkR7KDT3B

CqEQYiZ/SOVXfPldFShq1Db3srhe3JGWUiT7P4wgzFI3CASx8zSStp2LMRCVwdP6HalkkUwNm/f

ZwrK9pCs=

X-Gm-Gg: AYBFou3rinnJzIkRBArQTDW7Yq8A8zdk9A0z/H8T5LpHFJ1NtZASlHeGrt1M7HKrnQ9

GKQ2Rsz1tReWU2Ad5LkeeIZ6Yz5w6zJvjZbco1rDaXUC++sEFzFaKwhnnO4l/u6y9lKhoW1WzeF

biYL7LcFfE7xuo3xXNOehHhxtPS/lBbP/iP/m6TOKEd/E7QNcjnom5wWDmM1cX292OB0AGLIoRd

RaxleHoP4mNzOTC60VNczFbvvS+ZbJe3ZQpRW7Z2Qz0doXRwCdrBaXcIKK1ONWLhqxNGG22P+MG

igAfhDw7429f8fwMU5jOZwuWNNBF9gRGuD1voYMbUSIqGOzK1PPXp0l1pXuTdTO6YwvLXNfOQ0z

QTo/alh9r4WZNV/Qy+LDfnWAUivn6C0+VhODSyPoLrXShIXpkmRdHfLjeWWcKArIVX6nMZMvTQx

DgkszvI1YzFuvbFkBeJivRbKpvlyNu5bW5AQ7fpkV7NUKOYHZQfOGosyO56BwhRoMXlBpM7C467

Jo+gge4Yvivm90cj3sCH3EYb3jM5Tiq6f8WCPrR04o+vlep7G4q9xleYCF7pVGn/f92uqXgV4OI

VHXk5nxoOatXjLjgIAZUxCcSjN4g9+5Y3uoC4oSqPSHXYT7vYnt7KQHjslvQT/FqkfGmbpal

X-Received: by 2002:a05:6a20:6a0b:b0:3dd:85a9:55a4 with SMTP id adf61e73a8af0-3e92899ccfbmr17160814637.29.1793820462303;

Wed, 04 Nov 2026 11:27:42 -0800 (PST)

Received: from [127.0.0.1] ([122.161.51.52])

by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-cdb469b1f96sm1452922a12.30.2026.11.04.11.27.36

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Wed, 04 Nov 2026 11:27:42 -0800 (PST)

From: Baker

To: sales@nk.ca

Reply-To: baker@amysoftsolution.info

Subject: Hi sales@nk.ca

Message-ID:

Date: Wed, 04 Nov 2026 19:27:31 +0000

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--_NmP-a7139ff9cf4b5728-Part_1"

X-Spam_score: 11.3

X-Spam_score_int: 113

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi sales@nk.ca I sent you an email a few days ago regarding

mobile app/Redesign/update/add new features. If you are interested?

Content analysis details: (11.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[74.125.228.5 listed in will-spam-for-food.eu.org]

[74.125.228.5 listed in will-spam-for-food.eu.org]

[74.125.228.5 listed in will-spam-for-food.eu.org]

[74.125.228.5 listed in will-spam-for-food.eu.org]

[74.125.228.5 listed in will-spam-for-food.eu.org]

[74.125.228.5 listed in will-spam-for-food.eu.org]

[74.125.228.5 listed in will-spam-for-food.eu.org]

[74.125.228.5 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[122.161.51.52 listed in dnsbl.ahbl.org]

[122.161.51.52 listed in dnsbl.ahbl.org]

[122.161.51.52 listed in dnsbl.ahbl.org]

[122.161.51.52 listed in dnsbl.ahbl.org]

[74.125.228.5 listed in dnsbl.ahbl.org]

[74.125.228.5 listed in dnsbl.ahbl.org]

[74.125.228.5 listed in dnsbl.ahbl.org]

[74.125.228.5 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[122.161.51.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[122.161.51.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[122.161.51.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[122.161.51.52 listed in dnsbl.ahbl.org]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[122.161.51.52 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: amysoftsolution.info]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

[Blocked - see ]

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.228.5 listed in list.dnswl.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.228.5 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.228.5 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Hi sales@nk.ca

----_NmP-a7139ff9cf4b5728-Part_1

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable

Hi sales@nk.ca

I sent you an email a few days ago regarding mobile =

app/Redesign/update/add new features.

If you are interested?

PLEASE SEND ME YOUR CONTACT & WHATSAPP NUMBER SO, WE CAN DISCUSS IT BETTER.

Thanks,=20

---------------------------------------

From: Baker

Sent: Tue, 29 Sept 2026

To: sales@nk.ca

Subject: Mobile Apps!

=20

Hi, sales@nk.ca

=20

My name is Baker, Marketing Manager at an =

international mobile apps development company in India.

=20

We create various types of apps including radio/podcast apps, retail apps, =

delivery apps, booking apps, fashion apps, fitness apps, healthcare apps, =

wedding apps, taxi apps, restaurant apps, etc.

=20

If interested, I can send you samples, our portfolio, and company details.

=20

Thanks,

Baker

----_NmP-a7139ff9cf4b5728-Part_1

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

Hi sales@nk.ca

I sent you an email a few days ago regarding =

mobile app/Redesign/update/add new features.

If you are interested?=

PLEASE SEND ME YOUR CONTACT & =

WHATSAPP NUMBER SO, WE CAN DISCUSS IT BETTER.

Thanks,=

---------------------------------------

From: =

Baker

Sent: Tue, 29 Sept 2026

>To: sales@nk.ca

Subject: Mobile Apps!=

Hi, sales@nk.ca

My =

name is Baker, Marketing Manager at an international mobile apps =

development company in India.

We create various types of=

apps including radio/podcast apps, retail apps, delivery apps, booking =

apps, fashion apps, fitness apps, healthcare apps, wedding apps, taxi apps,=

restaurant apps, etc.

If interested, I can send you =

samples, our portfolio, and company details.

Thanks,=

Baker

----_NmP-a7139ff9cf4b5728-Part_1--

Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on Friday, November 6. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 16:21:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOjLz-0000000082T-2hfD

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 16:21:11 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 16:21:11 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj2-f0.google.com ([74.125.227.128]:34709)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOg7Y-00000000IFq-14C4

for root@nk.ca;

Wed, 04 Nov 2026 12:54:08 -0600

Received: by mail-pj2-f0.google.com with SMTP id 98e67ed59e1d1-3aec0b1d816so516180a91.0

for ; Wed, 04 Nov 2026 10:53:10 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=amysoftsolution-com.20260707.gappssmtp.com; s=20260707; t=1793818384; x=1794423184; darn=nk.ca;

h=content-type:mime-version:date:message-id:subject:reply-to:to:from

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=HwgBYbZ27OmcwTLbD4T3iRjiaYFVAs+SboLPuiWIt3g=;

b=r5Mdb9ooPiHvQMuqwhyiRCApfRUcgyEFr81yJgcAWfJXoo0pI5vGVCAQT2j22pYhLM

0vfVhcrtY5toJOJQRa9K6J0KJhTtNnPQ5ocuW6or0Xd3EaiNNSlGETJCaABRix5Bj61N

Ggb/Z+xy5Lsoxml32vk3OQrpRgyxrBrFFYeqqJPVn8xLtkEb4dND+x8M1CJl5jHvrCU6

5/w/PINbS8dh1oXNrsQNO8nRa+TbVRF9ZLJ7JPwXmlkrllpbtHRL5E12tPbcVkv7LXAL

POfoB3pMXlJzJiPLdb4Ki8iAqhEoPrRXb8K8Qy4cBm3Tn6zRPINXGF+R5AxvdWLSX/C8

vHcA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793818384; x=1794423184;

h=content-type:mime-version:date:message-id:subject:reply-to:to:from

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=HwgBYbZ27OmcwTLbD4T3iRjiaYFVAs+SboLPuiWIt3g=;

b=vvIPzMcTQlfe0fmtMRsFHftqMAC8/UgqODBTZq4w55dpxKWg+Xcaw3ADc8n0peWK05

L1fv2uE5WCRFoOFWQ20cSXmwcsqMrXzVuFvdl0l0ILzUD+E04PS2DyWCA5Nl3oHv43zi

QF3+OsRz4i7cFXGAzOgHIDYhLaqms4XqyimDni1mzurcR4uohJdh4uw0ervz3ihbKdLB

MDvF6Smqq3wK1onTiYttyViFHyyiYds+fkap7ByUpPt+IfdI/JDVGHz7t8EmMTICZlfg

xwUtctNoaKSWFENTyZtuDKuE7IHEX8U25kR6fh05EHHM4nyqTTusitVBfEKl9rrWx6Um

thXw==

X-Gm-Message-State: APuU4Z88PgnSAsE7cKgAHZRhXMbgWbwLSLsgYKEcFPzmK6erS650iyE/

ualsyqyKWzAZI8PhIeOZ9dXAhCxGOVo49WOD47V7t31k0k7fTX79qy6VIzY4mO6Bfym1lKzdREo

HiAcZpxw=

X-Gm-Gg: AYBFou0n53RRHv0Mk6I/68awVo3SuZ51S8vgvXKDIWVY4wh48TZfaVOQN1FNaV0Mm1t

71PT3cem4UbXB4NSLvxvqEjnoH8XKgE6BbaGN6bIvm0/g6fR0qSfZBcahun3AhFnRShoxGCvkHA

rA6TD1Tj2D5kQPN0XsDVFVFVokVFTwbgjxsxHbyhiSzNZYXwzs0vd7FRvM+M2iJTh3wZkpoI7Zc

vBuVSi4Omlbrjnfp2XDEul9jFeKDEQH2RDdqsbV5qKC1vFVUwUW7AYCxLAt3eCRqs+mkaV/2d+e

maBx57LuViOuYguvuVkHOGmgpqeu4WO1hfNBtMBu/UiJyH2g2DIZRBOx9wVvbPG/UM/p2cZGat0

tQJ0H7UI7n/JV49GgXGV3/QsxGmHI1YuspQMzTrce7s7ZTzSkE01MgoXgzkZsOj6bUW4hHSr10l

vVWIYBu2JOG/cX90UJoZSyAXpMewAGgCjkroIKjErU/med521XtlEtkIMRDA4eJ7vTJzd9ytgQu

znqqWtnZqsqbZE0qEBSeB2NMpky6M4PkBlrQncMjewDEwwX3v6syfhQ0/NZGqdT9l6PeRAR3pNI

/cobzDgbYqoprYgWJUvrcFnXNU2NnDsPj5ygrlA07DqWmFU4+P4=

X-Received: by 2002:a17:90b:33c9:b0:3ae:4dc8:3d3d with SMTP id 98e67ed59e1d1-3ae89865f87mr15136808a91.58.1793818384529;

Wed, 04 Nov 2026 10:53:04 -0800 (PST)

Received: from [127.0.0.1] ([122.161.51.52])

by smtp.gmail.com with ESMTPSA id 98e67ed59e1d1-3b0b3287a60sm97848a91.13.2026.11.04.10.52.57

for

(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);

Wed, 04 Nov 2026 10:53:04 -0800 (PST)

From: Warren

To: root@nk.ca

Reply-To: warren@amysoftsolution.com

Subject: App idea - root@nk.ca

Message-ID: <8f36699c-639c-496e-b835-76bd9d947155@amysoftsolution.com>

Date: Wed, 04 Nov 2026 18:52:55 +0000

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="--_NmP-61059a874106e9fb-Part_1"

X-Spam_score: 6.8

X-Spam_score_int: 68

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi root@nk.ca I sent you an email a few days ago regarding

mobile app/Redesign/update/add new features. If you are interested?

Content analysis details: (6.8 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[122.161.51.52 listed in will-spam-for-food.eu.org]

[74.125.227.128 listed in will-spam-for-food.eu.org]

[74.125.227.128 listed in will-spam-for-food.eu.org]

[74.125.227.128 listed in will-spam-for-food.eu.org]

[74.125.227.128 listed in will-spam-for-food.eu.org]

[74.125.227.128 listed in will-spam-for-food.eu.org]

[74.125.227.128 listed in will-spam-for-food.eu.org]

[74.125.227.128 listed in will-spam-for-food.eu.org]

[74.125.227.128 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[122.161.51.52 listed in dnsbl.ahbl.org]

[122.161.51.52 listed in dnsbl.ahbl.org]

[122.161.51.52 listed in dnsbl.ahbl.org]

[122.161.51.52 listed in dnsbl.ahbl.org]

[74.125.227.128 listed in dnsbl.ahbl.org]

[74.125.227.128 listed in dnsbl.ahbl.org]

[74.125.227.128 listed in dnsbl.ahbl.org]

[74.125.227.128 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[122.161.51.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[122.161.51.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[122.161.51.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[122.161.51.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[122.161.51.52 listed in sbl-xbl.spamhaus.org]

1.5 RCVD_IN_CBL RBL: Received via a relay in cbl.abuseat.org

[Listed by XBL, see ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.227.128 listed in list.dnswl.org]

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.5 L_HELLO_ADDRESS BODY: Greets you by address, not by name

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.227.128 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.227.128 listed in wl.mailspike.net]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} App idea - root@nk.ca

----_NmP-61059a874106e9fb-Part_1

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable

Hi root@nk.ca

I sent you an email a few days ago regarding mobile =

app/Redesign/update/add new features.

If you are interested?

PLEASE SEND ME YOUR CONTACT & WHATSAPP NUMBER SO, WE CAN DISCUSS IT BETTER.

Thanks,=20

---------------------------------------

From: Warren

Sent: Tue, 29 Sept 2026

To: root@nk.ca

Subject: Mobile Apps!

=20

Hi, root@nk.ca

=20

My name is Warren, Marketing Manager at an =

international mobile apps development company in India.

=20

We create various types of apps including radio/podcast apps, retail apps, =

delivery apps, booking apps, fashion apps, fitness apps, healthcare apps, =

wedding apps, taxi apps, restaurant apps, etc.

=20

If interested, I can send you samples, our portfolio, and company details.

=20

Thanks,

Warren

----_NmP-61059a874106e9fb-Part_1

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

Hi root@nk.ca

I sent you an email a few days ago regarding =

mobile app/Redesign/update/add new features.

If you are interested?=

PLEASE SEND ME YOUR CONTACT & =

WHATSAPP NUMBER SO, WE CAN DISCUSS IT BETTER.

Thanks,=

---------------------------------------

From: =

Warren

Sent: Tue, 29 Sept 2026

g>To: root@nk.ca

Subject: Mobile Apps!=

Hi, root@nk.ca

My name=

is Warren, Marketing Manager at an international mobile apps development =

company in India.

We create various types of apps =

including radio/podcast apps, retail apps, delivery apps, booking apps, =

fashion apps, fitness apps, healthcare apps, wedding apps, taxi apps, =

restaurant apps, etc.

If interested, I can send you =

samples, our portfolio, and company details.

Thanks,=

Warren

----_NmP-61059a874106e9fb-Part_1--

CRA Phish from Sendgrid

Posted by Dave Yadallee on Friday, November 6. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 16:21:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOjLu-000000007zr-3pFX

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 16:21:06 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 16:21:06 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from xtrwnbzh.outbound-mail.sendgrid.net ([167.89.43.224]:46698)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOg7C-00000000ICo-3TW7

for doctor@nl2k.ab.ca;

Wed, 04 Nov 2026 12:53:44 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=urgnetdreply.com;

h=content-transfer-encoding:content-type:date:from:mime-version:subject:

to:cc:content-type:date:from:subject:to;

s=s1; t=1793818364;

bh=nwegtaUNkAedlZx9cGkrbSKSUx648xs1+KVdOh0U28A=;

b=Ra/tVT+o1cKEunOLzS5p5cpWoBqYJ8nCeIt0gJL3ESWtmPNeMIOP1Hj8uXNov8KttGzc

oIxUmb1uuRxWs4l12Z3JYDynSnce85WxkjH1DtrvYDZUdBSanDkvwl5NfkV81x4P5vw4Fr

fIYXC2HptrgC7Y5r/URp4RUEeTlDBHeMMDfEMB+UfD1DjXFO9dv1oKXusZRQX0/RGGHSoF

Fm/OcnRps+y9Nh745kVFRovCmrJoihFAywY7Xd/iyJumjO8LJgxHk/lwZvG4UmrJ5j5G4w

WZHH/5Zl/+vP3pUiHW4xASZyDtraLsP0u/3xVv9wqOh25bkBx0kEPnf3XR1LtJIw==

Received: by recvd-5bb5b9cb76-tbpbw with SMTP id recvd-5bb5b9cb76-tbpbw-1-6AEB7EEB-DF

2026-11-04 18:52:27.675227384 +0000 UTC m=+3117135.587584833

Received: from MTE4MDcyMDc0 (unknown)

by geopod-ismtpd-2 (SG) with HTTP

id GfdmWODVTvmzo9_wv5y1XA

Wed, 04 Nov 2026 18:52:27.491 +0000 (UTC)

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=iso-8859-1

Date: Wed, 04 Nov 2026 18:52:44 +0000 (UTC)

From: CRA

Mime-Version: 1.0

Message-ID:

Subject: Your Tax Refund Request Update

X-SG-EID:

=?us-ascii?Q?u001=2EowaA05HsZf+q2SeVqezeo8nzB1HFJQpMXnEyN9aWZmtcgTBf4uMozlY4p?=

=?us-ascii?Q?JmhDc7andxACNtaRLjNX1Ll5xBsuR45i+sFv7bz?=

=?us-ascii?Q?g7+6+A0AXmy04pFZ9rRqPvWkZJpGgjFq7Md65Ft?=

=?us-ascii?Q?MLr2joH9w7hcZJ+YUx99Usfp1MgKXMGWb0LJDJe?=

=?us-ascii?Q?i5Nekm2bDHkTh9j7dlHWCEnfXPppfniEHiubepN?=

=?us-ascii?Q?jaSYBxtt=2FvdObPEWudkIE0=3D?=

To: doctor@nl2k.ab.ca

X-Entity-ID: u001.IFTnLSLJdn18WG3oEwlrUQ==

X-Spam_score: 33.3

X-Spam_score_int: 333

X-Spam_bar: +++++++++++++++++++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Tax Refund Request Update TAX INFORMATION SERVICE

Content analysis details: (33.3 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[167.89.43.224 listed in will-spam-for-food.eu.org]

[167.89.43.224 listed in will-spam-for-food.eu.org]

[167.89.43.224 listed in will-spam-for-food.eu.org]

[167.89.43.224 listed in will-spam-for-food.eu.org]

[167.89.43.224 listed in will-spam-for-food.eu.org]

[167.89.43.224 listed in will-spam-for-food.eu.org]

[167.89.43.224 listed in will-spam-for-food.eu.org]

[167.89.43.224 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[167.89.43.224 listed in dnsbl.ahbl.org]

[167.89.43.224 listed in dnsbl.ahbl.org]

[167.89.43.224 listed in dnsbl.ahbl.org]

[167.89.43.224 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[167.89.43.224 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[167.89.43.224 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[167.89.43.224 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[167.89.43.224 listed in dnsbl.ahbl.org]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-0.0 SPF_PASS SPF: sender matches SPF record

15 GR_DOMAIN_SENDGR1 Received contains spammer id (sendgr)

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[167.89.43.224 listed in bl.score.senderscore.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[167.89.43.224 listed in wl.mailspike.net]

15 GR_DOMAIN_SENDGR6 URI: Body contains known spammer URI (sendgr)

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Your Tax Refund Request Update

Tax Refund Request Update

=3D"0" border=3D"0" style=3D"background:#f8fafc;padding:40px 12px;">

pacing=3D"0" border=3D"0" style=3D"max-width:580px;background:#ffffff;borde=

r:1px solid #e2e8f0;border-radius:16px;">

ght:0;border-radius:16px 16px 0 0;">

f5f9;">

cellspacing=3D"0" border=3D"0">

ter-spacing:1px;color:#64748b;">

TAX INFORMATION SERVICE

00;color:#0f172a;">

Canadian Tax Information

ckground:#e6f7f5;color:#008f7c;border-radius:12px;font-size:10px;font-weigh=

t:700;text-transform:uppercase;">

Account Update

tter-spacing:1px;color:#00a68f;">

TAX REFUND REQUEST

ont-weight:700;color:#0f172a;">

Your Tax Refund Request Update

lor:#334155;">

Dear Taxpayer,

=20

lor:#475569;">

An update is available regarding your Canadian tax refund r=

equest. You can review the reference information and current request status=

below.

cellspacing=3D"0" border=3D"0" style=3D"margin-bottom:24px;border:1px soli=

d #e2e8f0;background:#f8fafc;border-radius:12px;">

700;letter-spacing:1px;color:#00a68f;text-transform:uppercase;">

Your Request Details

=3D"0" cellspacing=3D"0" border=3D"0">

:1px solid #f1f5f9;font-size:13px;color:#64748b;"> Tax Year:	bottom:1px solid #f1f5f9;font-size:13px;font-weight:700;color:#0f172a;"> 2025-2026
#f1f5f9;font-size:13px;color:#64748b;"> Reference Number:	bottom:1px solid #f1f5f9;font-family:'Courier New',monospace;font-size:12px= ;font-weight:700;color:#0f172a;"> CRA78205520-26
4748b;"> Request Status:	1px;border:1px solid #bbf7d0;background:#f0fdf4;color:#15803d;border-radius= :6px;font-size:11px;font-weight:700;"> Approved

cellspacing=3D"0" border=3D"0" style=3D"margin-bottom:26px;">

68f;background:#e6f7f5;border-radius:0 8px 8px 0;">

or:#17685f;">

For official confirmation of your tax account, refund=

eligibility and payment details, please consult your CRA My Account direct=

ly.

"0" border=3D"0" align=3D"center" style=3D"margin:0 auto 25px;">

radius:8px;">

upn=3Du001.3zoogpfFuMN4ws79ubeyvcglLJcD7eZPVZ3hCMev8MWvb5XzUH7n76L-2Fn8Y50Z=

ty1I3YI7RqidbQjAtek-2FD0SryzXzRVQq-2FrjqPgTo6Nxco-3D36SU_GyWe1RRaaz-2B-2B-2=

Bm2R4SiSUdze5JEo-2BJEvf8HTpyV4CVbJ-2B4DPRJcbxUcuz2AARi3L6b9dil0Gx-2BNUYbkjq=

-2Fk9vxTiBanN9xuA4Q7wUjs8y9YWYnxnIDC-2BuGhzsOa30H3DBirrI3j2-2B9lwUb7UyHjdY-=

2BOtHqimR-2FJX3Q20nDSAMzGrHK3bZHK6ii8pGH-2Fy3CwXt0shFT767ieM5mzO78A14A-3D-3=

D" target=3D"_blank" style=3D"display:inline-block;padding:15px 30px;font-s=

ize:14px;font-weight:700;color:#ffffff;text-decoration:none;border-radius:8=

px;">

Visit Official CRA Services

lor:#64748b;text-align:center;">

The button above directs you to the official Government of =

Canada website.

x 0;" />

748b;text-align:center;">

Need assistance?<=

br />

Contact the independent service that sent this notification=

using its verified support contact information.

x solid #e2e8f0;border-radius:0 0 16px 16px;text-align:center;">

lor:#64748b;">

This is an automated email sent by the system. Please do no=

t reply to this message.

a3b8;">

=A9 2026 Independent Tax Information Service.

Not affiliated with or endorsed by the Canada Revenue Agenc=

y or the Government of Canada.

For official tax information, visit

=3Du001.3zoogpfFuMN4ws79ubeyvcglLJcD7eZPVZ3hCMev8MWvb5XzUH7n76L-2Fn8Y50Zty1=

I3YI7RqidbQjAtek-2FD0SryzXzRVQq-2FrjqPgTo6Nxco-3DQ9eW_GyWe1RRaaz-2B-2B-2Bm2=

R4SiSUdze5JEo-2BJEvf8HTpyV4CVbJ-2B4DPRJcbxUcuz2AARi3Li9Sq65uEYi7TH998yAiyLo=

AcE4ea3qXEeaXqZI2z8Lo6vH-2BOH-2FGCmrCOS8hcKQlVAhH9VtqGBxgOxSi9tF9R1fOV0xMo8=

lU2n0On4rXf6ep0-2FsV5Vr6o1xPVnDYXGHGS2-2B-2BGV1ekjCmXzSEVV5CGHg-3D-3D" targ=

et=3D"_blank" style=3D"color:#008f7c;text-decoration:underline;">Canada.ca<=

/a>.

SKe20dbI9Z6QPR4oa3RFgmOb-2Bwu-2BlwQJRkHFB-2Bqv9pRH22sszyC9Ufbcs3HfR3uA9Omq-=

2F6Z6CWetU-2BEmkd4-2FT-2BtWX1WveafSVbYujGBCbgWS-2BonjM9jGReNxUW-2FjatCwOCs2=

L-2FX7P1M6kTUYhfUl-2FBln-2Bp3TyG-2BFmLkw2L94vuJHFVFh8j8RZSI8BYELSjz6wrx1UQ9=

vtkyUQ-3D-3D" alt=3D"" width=3D"1" height=3D"1" border=3D"0" style=3D"heigh=

t:1px !important;width:1px !important;border-width:0 !important;margin-top:=

0 !important;margin-bottom:0 !important;margin-right:0 !important;margin-le=

ft:0 !important;padding-top:0 !important;padding-bottom:0 !important;paddin=

g-right:0 !important;padding-left:0 !important;"/>

WEb/SEO/App spam from Microsoft outlook

Posted by Dave Yadallee on Friday, November 6. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 16:20:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOjLT-000000007n3-324w

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 16:20:39 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 16:20:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19013080.outbound.protection.outlook.com ([52.103.43.80]:36399 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOco9-000000001hb-0XjU

for sales@nk.ca;

Wed, 04 Nov 2026 09:21:53 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=qCYisCzW30zjljW6G8O6nHxKdd7lXppp4blIDZsDu7hHbV1dgOdN5In1fNTddamOXX5KRpwo98GiqOpoowFoa9Te+wZl05nfmX0Xu/TquEpOJo3UWNxTINIdknjO62KW2d7JkWTMhfoEkJOru95quozbThWUN5ND4dMegBNH13Qg6ZkaQ+u6nbv0G8JwTl2APFLoSTr3LlQCiJmtET03o/QAp2p5+94v9kwZJjv6afgGmLlnqZ4SyYWD0TzbMaBR0QWD42SUBUvwQg23gxz3wDMzXrOfvFLHEgbSct1xjaGyfiLYWnejriyhTXIGCw1yHqwR8EtLGWxcyR9RBpOXkw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=qpLrothbcU9/xWoTH6/ZDBPSJFG0vvoOKISfenrYS6A=;

b=ou+SlSmjlOYe+xJk6j2jCuB8GKuEsSarkf/ba9DTDiRjSrHP4CT5pe1Qb6jLdInMd8lL0qPYSFFnDb4jYkIan90T2EW/R7y12LZSxeVxnx4zSwcJ28egBYmhpMMQ9SK+9C1fHeLVGrG3b0ARRm0Tuk/9DpN2jCR9JjWzAESWc9KVJuAAfCQpBxAKuTohNo8oMRX/ASbvV7WXad3O2GqdQk1fapcJojwcBv5d+28cHtHsUtph54DVrLTf5VQ6oh0Xx1nfN0m+6RQ5TzXjYxiolJd5tDkPNR7lFfP70EXGcqhmtB7CSYH0kx26ACcu9qAIa5cWr0yz1ScgEZVkmnRfVA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=qpLrothbcU9/xWoTH6/ZDBPSJFG0vvoOKISfenrYS6A=;

b=FREPLqvzZyJmdhpvbePAQs6sC0jx8XCza3VIsHySJBUW4LSBIdUWporNr5l6UkuZBvMEIATv5Pe+g6u7LiS4YrOauX4AQNfN2rSsMy52vnHKHeSoFXboHtJFJRx26VAWO0T1JO8IzKWRFwmKrI9BH3RlBbhKZq3Vu6AeFqlo8uQPjpBZMEzYvvHLB/hF5TabKxz1O5MIhSr6irUdVVy158TXOyjtM4gPIvPFPYqucaWGNy45GszG8G0Ti/etBN4Z3G+x4VANyktvzvgOxAP1KkqMZkTwP3kCR9VWA+K9+R0mbJC5vu9nVGdI8N/8q1+2Wp9qNB3eXwTs4Vx9PTG4Dw==

Received: from PUZPR01MB5357.apcprd01.prod.exchangelabs.com

(2603:1096:301:110::6) by SEYPR01MB5122.apcprd01.prod.exchangelabs.com

(2603:1096:101:d0::14) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.592.9; Wed, 4 Nov 2026

15:19:43 +0000

Received: from PUZPR01MB5357.apcprd01.prod.exchangelabs.com

([fe80::9c24:186e:808b:d924]) by PUZPR01MB5357.apcprd01.prod.exchangelabs.com

([fe80::9c24:186e:808b:d924%4]) with mapi id 15.21.0592.007; Wed, 4 Nov 2026

15:19:43 +0000

From: Eliza Tanner

To: Eliza Tanner

Subject: Re: Send

Thread-Topic: Send

Thread-Index: AQHdbG+YsNVXeO990EunSPt6LvHSI7ceBpSb

Date: Wed, 4 Nov 2026 15:19:41 +0000

Message-ID:

References:

In-Reply-To:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PUZPR01MB5357:EE_|SEYPR01MB5122:EE_

x-ms-office365-filtering-correlation-id: 931e5326-44db-4890-77a3-08df3a870d92

x-microsoft-antispam:

BCL:0;ARA:14566002|2604032031799003|704163111799003|7042599007|31061999003|25010399006|22091999003|24121999003|48001999003|8062599012|37011999003|8060799015|19110799012|51005399006|15080799012|55001999006|45011099003|16051099003|15030799006|40105399003|26121999007|260806224601699006|102099032|440099028|3412199025|1710799026;

x-microsoft-antispam-message-info:

=?us-ascii?Q?WZScNgyEG2yKGc3WQ6po1BOhzLIeNu2Q+R5gJjMPMrr3sAL9WE+ZU4FpUHhy?=

=?us-ascii?Q?yL6ljeqFMtCdNIPIf9wbJeB8IfyNQqihRw4Z1lo3Pe+EG34W2oSkyzmqtMum?=

=?us-ascii?Q?6wuy61S5zYwwAObUjtLIXNiozDomjitw/AARMYsiyPUs2QkHTOBI/9t7EW9n?=

=?us-ascii?Q?bfFST5GUT0z+1zHJcwpFAeH0EIcvCjzTISjtqZBNqtM0yU6fgF3aF45opMB8?=

=?us-ascii?Q?Zbqr/rbVvl6xj3sQs89TPDDIgSF4ejzWX8T7KxqHOP4Bhro+opbvd6X/HzJp?=

=?us-ascii?Q?izaRLqNd48lvXk9OLe5eCRJ2bNioEMPHPIYyIAxLEOC9Czp4SDg8wBPQcdWi?=

=?us-ascii?Q?TFMUeGLn01Sthnru+ZQbt+1TJ4FFjDJzw5ODgS67Lci3Ddy/iDtixFSJVlWq?=

=?us-ascii?Q?dou1PfJzW0EOVPe5E/N/0Ijcbp0zIf/QDA9jmjKioH35eq3uOglqP/Vxkfar?=

=?us-ascii?Q?tK4v8LQ9j0Eb3c74hTjTizf+pOncQFCiwd53pURgtrhfuJFaMup9wvOUyaOG?=

=?us-ascii?Q?OpK6WIINhxjdcEC21dCSmFCmYiFfto9zjhKnwIAUxJf0uk/5Ify8MDvTK0Qn?=

=?us-ascii?Q?7bf4Z94Hzbe93MO/AAKcDb/Ysh3kJ0p+d+Q76TGC0j77F1vKlIwxmrMqDjoA?=

=?us-ascii?Q?ZiwrGKS+ZH/Rype+v1C1kOTuWVaV+ubXYIP2pW1BgayQRWzNvw4Y5vjj0WAg?=

=?us-ascii?Q?NnrIy21rX4RN4aAL11Xtr2M/80j9gm1ute1mF4Htqp71CSW7+BCCz25wYqtb?=

=?us-ascii?Q?trSabM5giF8Hqh9yfzQRggfl226p5IZsIs+z67gidYWCxwSi6Kh5lSyfb0U9?=

=?us-ascii?Q?x0I/RNOWn5ehmNU4mE0H38zMG+F3kJW8vAAj6bvFpZttpUXwErPp7oAUg2LZ?=

=?us-ascii?Q?KNuwFD5iPi2FLv2g+LnzIDpMVUnu2O4weokXLnGvbxkLRuCjXW89rphtPeWw?=

=?us-ascii?Q?wkNyJFZWGGlo9OPuPVUHgoIQDHz+t2EF/14+IXXhqlqFOR+ctsUdVBSsMzGd?=

=?us-ascii?Q?l9pbgt/Jy4ZuzU5cULm1SrmKwf5JG2NuCmk74BH01+x+EwRRVxneE0+xiD+P?=

=?us-ascii?Q?mxQ2ivshxsPtoCUBKy9kETeFaoTPzdzd190/LxermOLOUaE8aCU7QSgVWIYw?=

=?us-ascii?Q?aCvsaFC2zYXjWfmXLsxa4gI/17nLdSuE1clGOEt2Dj/D6fRyPkkMc/BjWlt1?=

=?us-ascii?Q?8G3YFVgTCm1/Zyp7xnarDWyqgOhlNVLyFUQcoPbpO88nZnS7M+5qTWqw1KXq?=

=?us-ascii?Q?uCeYF36P2yjO+bfm9xQ12fbB4aZQTusErQTfYVj8ldbJgZ/Zw8iBbDog38AN?=

=?us-ascii?Q?E4AUO8JInmovK8+9B3xXy5wXIf+opKhHyTNWSe76H7hCk4TC1Gi/3Ke58TK4?=

=?us-ascii?Q?7M9ubqUaUob7KLa88B196ubmTpPF?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?0yaRQn5uIWhabUKDBNWyu3qKMc5dMPi0WHHpnbzZpkdn9t1D3CKTjVblqS3N?=

=?us-ascii?Q?dKIyFj0hhY1xEr/ttDA3ZgXq5rLUjperPHV2sJby565cVmpg0RhR9S7h+irx?=

=?us-ascii?Q?7rKiH8Ko6xQ+zgQuWvWXtDYMqURXMwLtuRohoySKReEiAMXDib2ZaHbyfIv0?=

=?us-ascii?Q?797tfvJMpv5mbQdWWwKPAVNTp/1Mv7LXxcX9OjePAGZX1YJzhdRSkUtY9bNH?=

=?us-ascii?Q?0JFz58DlfbEhoMjcaRjtjon87JZDbG20Qy45UelWpVF40NHwvBsuOOX84qWM?=

=?us-ascii?Q?jR3d8nxoowRLNrK1bZv1BbiG8hDE+gImfuwgGkUjsXgT1uHAi6qUsA8aOhKU?=

=?us-ascii?Q?ST0aSOqbjOxVEq3/PywGSViUzcjWthT8q2msiO9DccguIyhOXFbZ2S8gE8+m?=

=?us-ascii?Q?bDEw43CZXEKdz/VUngqEwjHQcQrcI7KAW9U0Ti244TZIHRqg3ZqneGJwFpy5?=

=?us-ascii?Q?eI17jxne6Hy/9VNzLk2z9quXvbxA9B/cB1VEiIPTpXIoSkVs4dQ6tIh2VkI4?=

=?us-ascii?Q?RF0vye9Lk6B8eqJJWjBuQWpjw2v5eXHF43TNsM4KSz6R7Jd9t+ekCqAo8JIE?=

=?us-ascii?Q?oDDgruHWF0Fq60w8LNEf8RcFcNSgKjNy7GsN/oh7ECN/s2HFf04O6vf5YyXf?=

=?us-ascii?Q?f8M9BqJO0BPBj7h9fvO8wpoaP4L6ZRbUZ+5WeiuWlbVMM7KxUynAWHUItoS9?=

=?us-ascii?Q?bfrGGzmzjE79uHSow9XZ8p04YC+0ae+loq+pXwZVj7sF7vA1Do6KlauNM2zc?=

=?us-ascii?Q?HknYUr/25nG+dwwtAOg7ThU+mO5k1+E0OLOh8qgosVRtF6b3/NsjAlHdq6vw?=

=?us-ascii?Q?f+0a5oobgt69YuglIBEE12PQY5GwL6LZCZtwxjkFzYcKL3r6gP8/kSiL+rq8?=

=?us-ascii?Q?2Ua2p613FgAO4Sa0cokMkkc4sI+ffwOJm4u4UhuOrOelMxIq2epbK7e8zxeA?=

=?us-ascii?Q?Lzf7knl8ySe1xX8jYsWm8/KWJ2YHjGae7lfvs04fD8/Smh7hY5f3frNfm5Cl?=

=?us-ascii?Q?Ox1AHuGHfugLhXc8VwIi/jrWykon/syjHg/taYu8Hc2V0MHG+xbbiYawI4GO?=

=?us-ascii?Q?ai9HhTOhO6Yr9yMBrOZIks6YHoZLsbkSGrCmENfDMikxJE5XNFSJ3KSZLW0R?=

=?us-ascii?Q?nFzP9IkSis5nCxLiqXxNaNeNw2ikNPrm+rr1HVj4FRcZfkHb5q77z7rnGhvU?=

=?us-ascii?Q?AV3N5DIAo24f0APiDKvs+Afyp2BPt7pZ9GYx+p4r7MkCIaeoz/zjzDsGMXjC?=

=?us-ascii?Q?Pv31u9OSk+eazYQdem1+QXlX45MohojF5f5Kv+LXe9u7SrHzgGaqN5Hdn6dn?=

=?us-ascii?Q?kIY8lV6o8N60hhZLDd/+XH0VCOm9RH14Jn6/BKl/lRJHn1y47hZMYGpx0qCe?=

=?us-ascii?Q?8rBkcWCY0Su2BD555lkjco9FKkOOMCABSsJvT1Mla+P54V3mdm51A7LJmT05?=

=?us-ascii?Q?ZVl476mKEQhLM0X8JRSe0H+c9nmGNW80?=

Content-Type: multipart/alternative;

boundary="_000_PUZPR01MB5357212B509B6AE295DD3630AC682PUZPR01MB5357apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PUZPR01MB5357.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 931e5326-44db-4890-77a3-08df3a870d92

X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Nov 2026 15:19:41.3439

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEYPR01MB5122

--_000_PUZPR01MB5357212B509B6AE295DD3630AC682PUZPR01MB5357apcp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

Hi,

May I send you a price list and portfolio?

Please Reply "Yes or Sure"

Thanks you,

________________________________

From: Eliza Tanner

Sent: Wednesday, November 4, 2026 8:48 PM

To: Eliza Tanner

Subject: Send

Hi,

I visited your site and it looks great, but it seems to be falling short on=

search engine rankings for Google, Yahoo, and Bing.

Can I send over my price list and a proposal to help you improve your resul=

ts?

Thank you!

--_000_PUZPR01MB5357212B509B6AE295DD3630AC682PUZPR01MB5357apcp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable

>

xt-indent: 0px; line-height: 1.284; background-color: rgb(255, 255, 255); m=

argin: 0cm 0px 8pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontSer=

vice, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);=

">

Hi,

background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Apto=

s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);">

background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Apto=

s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);">

May I send you a price list and portfolio?

background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Apto=

s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);">

background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Apto=

s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);">

Please Reply "Yes or Sure"

background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Apto=

s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);">

background-color: rgb(255, 255, 255); margin: 0px; font-family: Aptos, Apto=

s_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-s=

ize: 12pt; color: rgb(0, 0, 0);">

Thanks you,

nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

yle=3D"font-size:11pt" color=3D"#000000">From: Eliza Tanner

Sent: Wednesday, November 4, 2026 8:48 PM

To: Eliza Tanner <eliza456.webb@outlook.com>

Subject: Send

nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">

t; color:black">

Hi,

I visited your site and it looks great, but it seems to be falling short on=

search engine rankings for Google, Yahoo, and Bing.

Can I send over my price list and a proposal to help you improve your re=

sults?

Thank you!

nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">

--_000_PUZPR01MB5357212B509B6AE295DD3630AC682PUZPR01MB5357apcp_--

Chiniese products spam from Microsoft

Posted by Dave Yadallee on Friday, November 6. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 07:18:00 -0600

Received: from mail-swedencentralazolkn19013087.outbound.protection.outlook.com ([52.103.35.87]:29740 helo=GVXPR05CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOas8-00000000KTV-2hP2

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 07:17:54 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=unSwmZqfgoa9t3FFvK/M9ALm7pu1f8WP4a6+eHUQ791vYJ/Q6m5fT36t+1BEjkiRMj0xK6wOPwMeXLPuRya9p1BaWIE6MWtcAtJUunQ0Ts5oK3dq2otkCMJ3AIcusAnZ9cT7Tyyj/uXBdp5m02sXbBhbpkeeUn2J+g7YO8HkE6svBrhBgcXIzQOdenGm8sbZFFWmTFyi5VPe4gu2xN81jkJR64mpjqvKztsXl19lsbWxdurCo0EsgBbsTZqowmwexSqIVIeB1c7zP1glhRpQk1KWi9gKm56ryQTkv9eiZLfSUITYoFnI+QfwD8gcopwpqTwGRz6uRRLhdscVGSdfLw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=hkGEhFMttArxtsrvrJ2PI5li13T0WsW25jIJWyM55HU=;

b=rDh66plMR7kWKr8vYNnG0QcA6d6/5pUvvfDnKx8udDJRb4is9/h8Ssqax5Ofp52MbgxqhepiHyxEqZtghROPtgHiopUN2A6bTN9+MTjK+YgthkmUrbtE9+cGkPaDRlQCqm9b0jRRKuVzAiH7LG5W1yOyugkMDPLM4SWVRPtlt+1ajOhj2SYcVH/q2iEiOYP4KZ9F6h4X2XIwYgEsdDCzyAOsfo/a11d0SfqWATHxQA3D64gfrAoY4jFHxWAFHcAviDb0uh0JQzk7nkncO29cItNGxD07aB1hQLu6AJKclVMUEYuv9tkNYv2PyulXxiyClWhSjzuUpWdLahXSXFCQrg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=hkGEhFMttArxtsrvrJ2PI5li13T0WsW25jIJWyM55HU=;

b=CFHgDXSmsikH2F7RXQqiaPA9VK6zxJ8u///DW0BOKN25F3XGI9cndwabprOm39GOuBy2Hcq/YMvTc9d3ntVpGM/zi/OS/IuR/3Z0cisYkBdWe8XEpVGlluoIc92o6Doo0xqZt5nWIHNnSfaZMVMZcC6dnrD15qMdIAxqNLV3a+o3Lry8zlT7iB/o9ZShAGTfWct/mvOk+C4AZWVZMR81YwdlqkSfKhFM5ORi+qt7AmY54dWx2ZwZhDVD/P3hTvxSZFLF0K60Paj0+urjdUxsC9hvbtKpk624F0bjBmCLOjPrBrKTV7fm5busesDpA5DNVI/v8UObVBSmrcFrZPAM6Q==

Received: from AM8P193MB0929.EURP193.PROD.OUTLOOK.COM (2603:10a6:20b:1e3::24)

by VI0P193MB2916.EURP193.PROD.OUTLOOK.COM (2603:10a6:800:2dc::22) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.592.9; Wed, 4 Nov 2026

13:16:44 +0000

Received: from AM8P193MB0929.EURP193.PROD.OUTLOOK.COM

([fe80::649b:e338:60a:fc26]) by AM8P193MB0929.EURP193.PROD.OUTLOOK.COM

([fe80::649b:e338:60a:fc26%3]) with mapi id 15.21.0592.007; Wed, 4 Nov 2026

13:16:44 +0000

From: Benjiman Hollobaugh

To: "dave@doctor.nl2k.ab.ca"

Subject: A brief sales and management can share

Thread-Topic: A brief sales and management can share

Thread-Index: AQHdbF68HUQ3q4V6YEqs7slIs92eEA==

Date: Wed, 4 Nov 2026 13:16:44 +0000

Message-ID:

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-TNEF-Correlator:

x-ms-exchange-messagesentrepresentingtype: 1

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: AM8P193MB0929:EE_|VI0P193MB2916:EE_

x-ms-office365-filtering-correlation-id: 1a7ad242-e124-4b25-ea16-08df3a75df73

x-microsoft-antispam:

BCL:0;ARA:14566002|5062599005|38102599003|31061999003|15080799012|8062599012|8060799015|19110799012|39105399006|6092099016|36102599003|2604031031799003|4140399003|20031999006|25010399006|102099032|440099028|3412199025|56899033|261007181701699018|11120399003|261005200801699003|40105399003;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?GcrJ+XTEERWzGJRCZF1GctVZ1yqF5C12CimK3QN96BqKAG6J5U4D9HB0?=

=?Windows-1252?Q?EeqtSHB9Bov8mCNrx8ZPpzoneaPXNFM0FZI+cBcwcbOJN5pk9UOLNM0Z?=

=?Windows-1252?Q?/fmibFEJDIypIO6iXZbgAJbc9UlS+XAEv/74KnQwXthOogAOSDdHQXD7?=

=?Windows-1252?Q?UPJ45Rgyv3bP64/ClDlksokTHpaYphEAzPvnV5zUw0RMmurAD9U5xBq5?=

=?Windows-1252?Q?5jzyEKoWKt88oYcNy1a/4YkBK13+rnIu/VWBGmC3/EdmKCceb5sUPHm4?=

=?Windows-1252?Q?XRYaLg/wjiGQhW2Q7r7710hxosERkWo01mjT5JoljT7Gylm9SfdwVbR/?=

=?Windows-1252?Q?IbL5LV++1SXYJSxqiuedJAyP7lwScz3B3uXos7pZGziKBWd3tm6ikzJR?=

=?Windows-1252?Q?JzAJ3zXTlKle/EQ0gliyo/WWJOQJDk1cYnBoRIfHq1aIviNmQhgPj/5E?=

=?Windows-1252?Q?1sndiMNPnbPeqNSe6P6r8hkb29BVTv9XVPp0hzoeh6/ZRFahJLtCMsys?=

=?Windows-1252?Q?Cl3heuMw+zzXkq2ikLbU3KNuqUj+EmgCa+Xx5zqy80dC1bnQt0Z3hnGv?=

=?Windows-1252?Q?W8voGdENvrjvZMgxvkd9LMjmd1pEgmKEZhQ9LG+k1ziDAD1B+H6k/k21?=

=?Windows-1252?Q?fo9WQ1S8/jmNkxXKL+tSMiTjuhGQ6Wt/9Rl5GqZ91NnJ3hLuWpJXQlpN?=

=?Windows-1252?Q?F0kVDTH89EuG2AFwRYSBtiL2o14lePCegA1LDxyq7upgl6T/ofNSw6Av?=

=?Windows-1252?Q?h2/d+OsRBklJaeT0puV5cNrt6eMPLxbMAIZkEJKTboDwTzgnmegNW2U/?=

=?Windows-1252?Q?sw/1JrNRkpIV3YPaZq+iojlV/qSLDCaXMRPKfd/zM0ZUmwQMbpvk6hzE?=

=?Windows-1252?Q?NMph4LNd4e/RM53C//NOSmpFTJ5UeQD3Mmj6zhvm85ubyMVpGcG4jP5v?=

=?Windows-1252?Q?o+wy+Lbws70kOCfCe/NtPepv+Sev7cYGZAKV1glu5y7uKh5jMb/SQhce?=

=?Windows-1252?Q?FR+JEI05pn8sBi8xn1EgQDk4ttiDFgICrcQRXojknVt7rrcAMUUXpGwP?=

=?Windows-1252?Q?3yJ6cleHejGVVanjOduXs60179YkhafD0GYJ+1hOdcy01cZk0Nw15NIH?=

=?Windows-1252?Q?/zlYUHgGRj2GOVzL5kFkxZUKkx9OY8cmGyMX0plqzsHOs9sWBEeojiEA?=

=?Windows-1252?Q?x7st4Ux16i9Q5oJwlplTCZXvd/wNTuCyKJIlUrxakA33JKirqKYc7tZb?=

=?Windows-1252?Q?1qeybZnyh7Ve5ohdn+M=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?bhxFnguanJsmKlkI3v/bhlNjTy1vVmXARAAgIwtYCh2L+jJyzyf+I/YD?=

=?Windows-1252?Q?h4lh9LJqQMZqPh7orncBjOS/tDWc/MsUYwb9L0aO6chuBZU+VTYnfSMU?=

=?Windows-1252?Q?Qtf5h8QajHyofAmBEzH70EKL1QVAdWdYUgKUn1OOHKaxxG6C1RRgwoga?=

=?Windows-1252?Q?EC4MlHnHypLhQp/8Yum+tznMXO4sFAJVpcxPVTgT1qSSv8FD+mr+bi+u?=

=?Windows-1252?Q?Wy0vY9orJr73FznHyuqOuzSoA/X3vpF3r8GvN4SI4Eqbr7HKGDFSSna8?=

=?Windows-1252?Q?ltXzqpkEZZcUkQvfp6cQGIhfzT4MiYq3PxT0qYVBkRtWpKvkAaHcPvqH?=

=?Windows-1252?Q?adELrP1I6EccS/9TjhZjtGKuFp8R8ctokQrSR/u/CsqCY48WQY+bHMRq?=

=?Windows-1252?Q?o3Rkb9Tqa7RvyIcwv1QVJFRBBA1U6yDu8EYb9Y9QQ5N6QT8JA7v/TtNo?=

=?Windows-1252?Q?B9577wD3JWzILSoC+/yiSZI5B9I2qcF6vKkYjWlEnNYxi8QAN5pCBBR5?=

=?Windows-1252?Q?n0kPMFuJYLCNzMkSyJXdBftR7hNSFnecMNuABX7AbymQ/jMX/o1tU8B2?=

=?Windows-1252?Q?rfAF1MiLptXhsrL9MQAUePKcXQOSg1iUlrsOMiXRyQ81TtcZuzYJ+u3A?=

=?Windows-1252?Q?xyRDMTrMsRJVlCHRCVfzWUZ0sepaSjQE/LGURF6fdS9v1w0sEMlMQYuc?=

=?Windows-1252?Q?p7n5TLRwlbS9Tuqw1loYPWhkRLBzCnMOcjkMJjvjdJ9Y+o99m2OK2iK0?=

=?Windows-1252?Q?H9uIpGwxvaeZDUQJV4FzNOth3o6O9Ws0TiwH8vdf9cHKj7pr2f5akTme?=

=?Windows-1252?Q?vvCvdDfs9VGd9MXKtHK9a2/iTpYg3uQohXP6xvxFPRCK5BWz3RLTe0Sw?=

=?Windows-1252?Q?X28GiL8lDJf5sbDlfBHdnQGmSJI7/mJKaxfM1GjM7tnDfCekJ6Qdfqem?=

=?Windows-1252?Q?eZiEAZDNpyv2mA3HkUPHTFy6mfEeT5TGGlaywvBA9ayly+AsQ+tDqS9M?=

=?Windows-1252?Q?YQ3+I28hdLhYAIWUHhxAcZzgACewORv9I7yRKqoFshreUHpl6V/AevD4?=

=?Windows-1252?Q?POTWx07deA+be+KN4hoXRSbWLQaGdhEbH8GE4maGsAfdiTT/kskHuvb7?=

=?Windows-1252?Q?5+pxwcUZ14CrcUm90sjSwSeKlL5+NiddiR/JIutTa8NW/MITsXBJnq0H?=

=?Windows-1252?Q?20eiXeEW8aO0+2nMrty9G917P+t9csbBpap1WPUm4N/i8H4a67+3F15M?=

=?Windows-1252?Q?iKbLilthUPx5ccSpQXbd6njzlpVq/K5dJyAcEHn2c+56jiCBSHi99XQ6?=

=?Windows-1252?Q?xfeR8bs/S7grP/UcwYzANkVdM15aoVk2d3iy67zdtpFO4XoR+6WgDXWN?=

=?Windows-1252?Q?Mh02Y6Wv+M/EpGdkyqMb+rOUHFRcF0Y/D/J3zxmxG19lIWTZRQR9Kex6?=

=?Windows-1252?Q?IJrRszAcQxgIGYbj6Snuq3k3QUaOK2tenwdYRN1f9kv1FuXANrJV+wFy?=

=?Windows-1252?Q?ytEwzZibvpoVk4OSMSs7OHA4qXXNEQ=3D=3D?=

Content-Type: multipart/related;

boundary="_004_AM8P193MB09297B25EDFC3509B815CDF2C8682AM8P193MB0929EURP_";

type="multipart/alternative"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: AM8P193MB0929.EURP193.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 1a7ad242-e124-4b25-ea16-08df3a75df73

X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Nov 2026 13:16:44.4142

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI0P193MB2916

--_004_AM8P193MB09297B25EDFC3509B815CDF2C8682AM8P193MB0929EURP_

Content-Type: multipart/alternative;

boundary="_000_AM8P193MB09297B25EDFC3509B815CDF2C8682AM8P193MB0929EURP_"

--_000_AM8P193MB09297B25EDFC3509B815CDF2C8682AM8P193MB0929EURP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

Hello everyone,

I=92m Lucy from Tendata in Shanghai. Export teams often need a clearer view=

of overseas purchasing activity.

I=92ve included a sample screen to show how the information is presented.

[cid:image1]

A product-led search helps keep the research tied to a commercial question =

rather than expanding into an unfiltered company list. A sample can help yo=

ur team judge whether this type of evidence fits its own research process.

Could you share a suitable phone or WhatsApp number for follow-up? I can pr=

epare a complimentary buyer-data sample for a product or market you choose;=

if you prefer not to share a number, simply reply by email.

Lucy Data Consultant

(+86) 15921777864

Tendata Tech Co.,Ltd

(+86) 15921777864(WhatsApp)

dataconsultant@tendata.cn

8th Floor, South Tower, Building 9,

Lujiazui Software Park, East Road,

Pudong New Area, Shanghai, China

--_000_AM8P193MB09297B25EDFC3509B815CDF2C8682AM8P193MB0929EURP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable

252">

Hello everyone,

I=92m Lucy from Tendata in Shanghai. Export teams often need a clearer v=

iew of overseas purchasing activity.

I=92ve included a sample screen to show how the information is presented=

.

ccc;" data-outlook-trace=3D"F:0|T:1" src=3D"cid:image1">

A product-led search helps keep the research tied to a commercial questi=

on rather than expanding into an unfiltered company list. A sample can help=

your team judge whether this type of evidence fits its own research proces=

s.

Could you share a suitable phone or WhatsApp number for follow-up? I can=

prepare a complimentary buyer-data sample for a product or market you choo=

se; if you prefer not to share a number, simply reply by email.

Lucy Data Consultant

(+86) 15921777864

Tendata Tech Co.,Ltd

(+86) 15921777864(WhatsApp)

dataconsultant@tendata.cn

8th Floor, South Tower, Building 9,

Lujiazui Software Park, East Road,

Pudong New Area, Shanghai, China

--_000_AM8P193MB09297B25EDFC3509B815CDF2C8682AM8P193MB0929EURP_--

--_004_AM8P193MB09297B25EDFC3509B815CDF2C8682AM8P193MB0929EURP_

Content-Type: image/png; name="image1.png"

Content-Description: image1.png

Content-Disposition: inline; filename="image1.png"; size=181212;

creation-date="Wed, 04 Nov 2026 13:16:43 GMT";

modification-date="Wed, 04 Nov 2026 13:16:43 GMT"

Content-ID:

Content-Transfer-Encoding: base64

...

--_004_AM8P193MB09297B25EDFC3509B815CDF2C8682AM8P193MB0929EURP_--

Paypal cryptocurrency phish from Google gmail

Posted by Dave Yadallee on Friday, November 6. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 08:19:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xObpP-000000003vJ-20FV

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 08:19:03 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 08:19:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f173.google.com ([209.85.210.173]:60893)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOaQE-00000000HgX-3z0i

for doctor@nl2k.ab.ca;

Wed, 04 Nov 2026 06:49:03 -0600

Received: by mail-pf1-f173.google.com with SMTP id d2e1a72fcca58-8a058f74a54so249183b3a.1

for ; Wed, 04 Nov 2026 04:48:05 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20260707; t=1793796478; x=1794401278; darn=nl2k.ab.ca;

h=priority:importance:subject:from:to:mime-version:content-type:date

:message-id:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=HKRyxb5qRmUndd/WRRcn0w+5EZKedItxjHwDatFxMaM=;

b=CrAm6Zw8RfIeKENS2xzQ1jBJsbyyaa8iIDzCUNhs+CVdC18kiSx1uwf+kdsc3CYPvx

hxcREtDZ4rWXONCo9gI9MrgjpeEduCI1iknWTcvGSwxtVcScCGK4iiLxG4Yy4ksf0sP1

RhguVA1hIFDlbDwZTCRve9oplf3mt2ZcN3iaczIv8KJu0PWFbpdDApFqk+zKLhCsKdJD

FhW031f8J74jrOqGOpGl/PaUBvIo7HEDeK+b+HtcfPYNMU2xavBWohWMb8OvyL+klrBr

+e+e9zQM88wJmG7E+rhPxIJ5eNbPGjwr8NHuKHMZ8EylEyU2As4Xhci9j+kQG6RMrfvM

KT8g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793796478; x=1794401278;

h=priority:importance:subject:from:to:mime-version:content-type:date

:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=HKRyxb5qRmUndd/WRRcn0w+5EZKedItxjHwDatFxMaM=;

b=wlawTl7Lr/C85QQ1VZssz6NKKuWm4uT1ZBekpxLLiccAJgzgkAz7lVS2Yi5bvdvzOc

l6529vVgn1bDY4gO8Ugkuq5CTMyj3vNaNX9pKqHm5lp8CHcGgiHQm/5OfxTEQ0xMriDM

+NazXxV0zCGbVGLp7MiLlBXWiQcY7moX8QkSq2ciuIgsgjQw8aZ6jCnBCaCCIWevwHbr

i8119DNPuydmJbaxNhF9iq8e8dI9MSwbwZANiYWV7xENp5UtHV7DIt3FXoFsek5ZJaTt

WOgj6cgO6U7KifD77VbIZ9hFQ9kitozv3rktjkMTrgzwZ0TeAZ0nvUgds1iw1ovl4Dtg

BbVQ==

X-Gm-Message-State: APuU4Z8cU/0G5ZUd2/kH9HQBpVZTkJAbjvy+PYQazgfbIaQuwn0Lo8Iy

WzHYJf1Gy96jH3EwJfzak0DWZDaMqT6ItZTsvJ7exMwSHI8fKiR1Dl9WtNZLQr9Hb3gxQBPN

X-Gm-Gg: AYBFou3XypumNsgHtn0rCyfShX4QPkb8SEyH7Yaf/OgbR5ALhRDK+F2h4JTWjrZIPol

bE/rv5RzeMOvtRscsS5M8LaCdBoXf9aZR+a01Qs2mv3UORb0Ym7Q9IhVD4ePVTNRMFPlOv8/xT6

H+KM6YZ8midCHEvJM77ACunrNLUw+0NBCZaWYSgupDuDw3rOwu5aHY9jIUPDvWFs2Y2wBheaPD0

+Bfd6YCV2ju7dvQUzD18RSa1Ko+6kdlfeg+F89EumwaSxQZPf7J4/U3Uy9lMJV8W9ehBJ/BJLcX

fSLK6IQ7yx/AGZ/inslQyyBiICqmvqPrN2MBCbT4lE82rGJeE1oTWo7FEkOcLMXxYet9l0s3Kt3

rhOy2nvSHVDxhPfV2h02c0PuNGOXL62WBJffOQQwrpwyVHD9AHFeutYHL7PuqLnX9hmrFlXjRIB

1Y/9KJgKn6+xFK/kcuIJ0oDe9JW5yWNNbS6r5ylUTN07wVarqbuZaZn7Kl53+KTaKVg0pEKY0FZ

oLCxZukksn8K2CeZ01L+ML02Xshst7uPll9luWjmbXmN1dEcLPi8joO9nXEDd8Jpk/wibHik96m

q1kyi+gkUg==

X-Received: by 2002:a05:6a00:1813:b0:89e:ba55:119a with SMTP id d2e1a72fcca58-8a9bffd4f4bmr13236967b3a.47.1793796478081;

Wed, 04 Nov 2026 04:47:58 -0800 (PST)

Received: from [172.22.32.131] ([43.156.152.206])

by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-8b09b569437sm851703b3a.34.2026.11.04.04.47.56

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Wed, 04 Nov 2026 04:47:57 -0800 (PST)

Message-ID: <6aeb297d.061e5658.1a9478.eaa3@mx.google.com>

Date: Wed, 04 Nov 2026 04:47:57 -0800 (PST)

Content-Type: multipart/mixed; boundary="===============8060678749207651036=="

MIME-Version: 1.0

to: Doctor

from: Doctor

subject: You have already paid for Your Invoice 99698778

Importance: normal

Priority: normal

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: PayPal Purchase Date: Wednesday, November 04, 2026 Invoice

No: 99698778 Product Id: 424Z50KPPUAQ19

Content analysis details: (7.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[43.156.152.206 listed in will-spam-for-food.eu.org]

[43.156.152.206 listed in will-spam-for-food.eu.org]

[43.156.152.206 listed in will-spam-for-food.eu.org]

[43.156.152.206 listed in will-spam-for-food.eu.org]

[43.156.152.206 listed in will-spam-for-food.eu.org]

[43.156.152.206 listed in will-spam-for-food.eu.org]

[43.156.152.206 listed in will-spam-for-food.eu.org]

[43.156.152.206 listed in will-spam-for-food.eu.org]

[209.85.210.173 listed in will-spam-for-food.eu.org]

[209.85.210.173 listed in will-spam-for-food.eu.org]

[209.85.210.173 listed in will-spam-for-food.eu.org]

[209.85.210.173 listed in will-spam-for-food.eu.org]

[209.85.210.173 listed in will-spam-for-food.eu.org]

[209.85.210.173 listed in will-spam-for-food.eu.org]

[209.85.210.173 listed in will-spam-for-food.eu.org]

[209.85.210.173 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.173 listed in dnsbl.ahbl.org]

[209.85.210.173 listed in dnsbl.ahbl.org]

[209.85.210.173 listed in dnsbl.ahbl.org]

[209.85.210.173 listed in dnsbl.ahbl.org]

[43.156.152.206 listed in dnsbl.ahbl.org]

[43.156.152.206 listed in dnsbl.ahbl.org]

[43.156.152.206 listed in dnsbl.ahbl.org]

[43.156.152.206 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.173 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.173 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.173 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.173 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.173 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[imranabcd93(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[imranabcd93(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.173 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.173 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_MXG_LOWER_HDR_SPAM Lower case header spam

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} You have already paid for Your Invoice 99698778

--===============8060678749207651036==

Content-Type: text/html; charset="us-ascii"

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit

PayPal

Purchase Date: Wednesday, November 04, 2026
Invoice No: 99698778
Product Id: 424Z50KPPUAQ19

Payment Transfer Confirmation

Dear Doctor,

We received a request to process a transaction using your PayPal account. If you authorized this transaction, no further action is required. Your payment of $1,356.08 is scheduled to be processed today.

If you do not recognize this request, please contact our Customer Support team immediately so we can review your account activity and help protect your account.

Cryptocurrency Purchase Details
Cryptocurrency: USD Coin (USDC)
Network Type: Optimism Network
Asset Type: Digital Cryptocurrency
Wallet Address: 4276d1cc-ebb3-4c96-828d-714f5c0509a5
Quantity Purchased: 0.013
Transaction Fee: $00.0
Total Purchase Amount: $1,356.08
Payment Method: Bank Transfer
Transaction Status: Completed

Security Reminder
For your protection, PayPal will never request your password, one-time verification codes, recovery phrase, or banking credentials through email, phone, or text message.

Kind regards,
PayPal Gateway
+1 (582) 245-0238

--===============8060678749207651036==--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on Thursday, November 5. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 06:13:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOZs5-00000000MHk-2HeA

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 06:13:41 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 06:13:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f72.google.com ([209.85.161.72]:45324)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <2020100321@ucss.pe>)

id 1xOZ4R-000000000hC-3huA

for doctor@nk.ca;

Wed, 04 Nov 2026 05:22:25 -0600

Received: by mail-oo1-f72.google.com with SMTP id 006d021491bc7-6df538053fcso619028eaf.3

for ; Wed, 04 Nov 2026 03:21:30 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=ucss.pe; s=google; t=1793791284; x=1794396084; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=SBFeIas14nU0jNiqNVSnLk3w9aj/hID/JLcPr52TMRw=;

b=TBur4JKs+rYUNhxLY+jnp/5TaQ58vxpmmJCn/SQgmnogoZLi6BvGigcK+OWcdtIX5T

E+PHQH0JGPPOPrHle0ag4fKu4axek/U9XUcbSZD13A86MfasixH6tE2Ae/nSEYzR63wQ

fsKEoEyPk7AFxxAGUMvgIxQkihNV/mGJNZ/Vf9PjJCNge/386/h0auLkEAsA4SQ6Fn6p

TlRH0YM1fLuZs9svU/MSCcK6WPCm6ASEp5D7a6X/+dPWht9Ld3b+GZxufBcfjBIubVLt

MqYZP+/84VjhXEAhIEEuAu4Z+USyhXe1+Xy7qZIq/L3cGB0LpCB6axRJ6UA80pk4FxZ2

z8eA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793791284; x=1794396084;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=SBFeIas14nU0jNiqNVSnLk3w9aj/hID/JLcPr52TMRw=;

b=2oR/JUS659XI+8p6wR+ZgabUx5tpFiUmdy1oypXu8Le0IHJuD7pY4wHMD8Bp8xySsP

0wvMzYoLNvYP+WvwnIu4q1Pnnlz/RdqfuYmMtyuovoRWb4ivDqLM6woyy2Utvcqbnew5

1x7be3Gx6PNQFpILbwpsRlxofcm7CcHFUrjfZkIpEcbSIJqFhkVtgNs7jrSZH3zmo/5g

AYa1ViVcGXJ/6FC+bwHvRLiLFXlQ71iYIYfs5HD7hld8xkuRfEF6dqI9J66x/X64QZGW

dEKFPGk00/lZEJXc29k9TUf7nz4NyAHQ+zlSyyfxpUJ5WpjIoBDRXNXEJY+dPMHvLBt0

c7VQ==

X-Gm-Message-State: APuU4Z/FM0ADJxbPa+uuA3k9LuJNMGWmvwwAXWrStBqR89nAoi/hlb9d

Lked9emurAZb4t9f/s33aS1PTAhquKj9jpavIGjOcgNO1dn0OuBG1Ks9NGusyKoXXgswad3HaZ1

fP4Upx9zNZ9yOhZZDX8Uh3tzh

MIME-Version: 1.0

X-Received: by 2002:a05:6820:5717:20b0:70c:302c:41fa with SMTP id

006d021491bc7-714f29e6f63mr5990643eaf.60.1793791284098; Wed, 04 Nov 2026

03:21:24 -0800 (PST)

Message-ID:

Date: Wed, 04 Nov 2026 11:21:24 +0000

Subject: =?UTF-8?B?VGVydWdsZXZlcmVuIHdvcmR0IGR1dXJkZXI6IHNsYSB1dyB6b25uZXN0cm9vbSB6ZWxmIG9w?=

From: Energieopslag Loket Nederland <2020100321@ucss.pe>

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="0000000000004a47c8065f7194e3"

--0000000000004a47c8065f7194e3

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

TmV0YmVoZWVyZGVycyByZWtlbmVuIHN0ZWVkcyB2YWtlciB0ZXJ1Z2xldmVya29zdGVuLiBEYXQg

YmV0ZWtlbnQgZGF0IHUgIA0KYmV0YWFsdCBvbSB1dyBlaWdlbiB6b25uZXN0cm9vbSBhYW4gaGV0

IG5ldCB0ZSBnZXZlbi4gRWVuIHRodWlzYmF0dGVyaWogIA0KbG9zdCBkYXQgb3A6IHUgc2xhYXQg

b3ZlcmRhZyBvcCBlbiB2ZXJicnVpa3QgJ3MgYXZvbmRzIHpvbmRlciBleHRyYSBrb3N0ZW4uDQoN

CkNoZWNrIG9mIHV3IHdvbmluZyBpbiBhYW5tZXJraW5nIGtvbXQgdm9vciBlZW4gdGh1aXNiYXR0

ZXJpaiB6b25kZXIgZWlnZW4gIA0KaW52ZXN0ZXJpbmcuDQpXb25pbmdjaGVjayBzdGFydGVuDQpV

aXRzY2hyaWp2ZW4gwrcgTmlldCBtZWVyIG9udHZhbmdlbg0KDQo=

--0000000000004a47c8065f7194e3

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

dding:20px;color:#1a1a1a">

Netbeheerders r=

ekenen steeds vaker terugleverkosten. Dat betekent dat u betaalt om uw eige=

n zonnestroom aan het net te geven. Een thuisbatterij lost dat op: u slaat =

overdag op en verbruikt 's avonds zonder extra kosten.

Check of uw won=

ing in aanmerking komt voor een thuisbatterij zonder eigen investering.

y:inline-block;background:#2d6a4f;color:#fff;padding:12px 28px;text-decorat=

ion:none;border-radius:4px;font-size:15px;font-weight:bold">Woningcheck sta=

rten

oralweb.click#t/u/dd77f32df6eea1557c2f" style=3D"color:#999">Uitschrijven
a> =C2=B7
=3D"color:#999">Niet meer ontvangen

ight=3D"1" style=3D"display:none" alt=3D"">

--0000000000004a47c8065f7194e3--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on Thursday, November 5. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 06:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOZrm-00000000LN7-2spk

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 06:13:22 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 06:13:22 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f199.google.com ([209.85.214.199]:55510)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <1602044@esan.edu.pe>)

id 1xOYlH-00000000PJc-09lF

for doctor@nk.ca;

Wed, 04 Nov 2026 05:02:38 -0600

Received: by mail-pl1-f199.google.com with SMTP id d9443c01a7336-2e954d87b48so8640415ad.2

for ; Wed, 04 Nov 2026 03:01:41 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=esan.edu.pe; s=google; t=1793790095; x=1794394895; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=uIYz4en9itKFJ4wHZQ6fCUK8QaM3ZI1SWNKZgjUHJ08=;

b=LrTSEnTzitaQVnBJ/nj5wXUKKusFBKmTQ/2HYydxxfhTheSllB0zr0tFYGmCwsCc02

kK11t6QP+gFWeQVCaZxtpGoDO7pPv0WDVrJ3Qw4BxQcukrJffl4A6iL8l+zrANHdNY+j

nVSjgEnM098raN8Uhnc3ENON/03OQLg4yAHclhAX/DyZL1FEuSeiKw3TPmtY82iN3W1A

sAQvCc9nOd05DMKwVHPVKauQcDOcg6/RsqVHYzmbdhkfi6oMb/kUZcpzBVt5GGhPLhp/

BT4my0h94H/mMgoiMAx3iPpnWg2iljW11ewb2s2eDd271pU+MQNcu/9qCRTXUGRVHutM

n2Gw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793790095; x=1794394895;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=uIYz4en9itKFJ4wHZQ6fCUK8QaM3ZI1SWNKZgjUHJ08=;

b=y+BjqlAYs489TJHeKedKeQlQcwbDNygrGmJVlOQxmMBgqldLvhzAoMWlLZ8hVzuAbb

VxYTcZYt0lC9M1ou9DgTTZ/+nHeHQNQq9Vx82tWwghMOudPLLQLjjkw6zZ9PH8gE2zN7

KgcttPtwGPzJKlT0P8PMqw/TJqwAn5HrcR3hlOKhcu1ILGm1G78E9VSuTLDTZYTfAtnB

c/+8YI9pZTUEAjNMIVykb7c8tIR5g0GmMHMRnGxW2ky3TmeQJMAXMz014CumVqOCZWWl

qN5L5lDSru0xAlpsOpv7oK79F57gtYJPHUq4Cm1GYYnj/Q8PwKLDKzbOhZuLvX2A1Qfr

JYyA==

X-Gm-Message-State: APuU4Z+uW+r9wBuK3EOCWP+j00AsLP2LxLEXsK1AoeJeH5QbpON2JQET

R/qKqA4+kmatmSgChA0DwGqR2P5NBi8artee22FgXHBC5oaLw7HouKe664520mt0D9gMTZDoGBk

HNjInDctk2+74yThHSIVXCSc=

MIME-Version: 1.0

X-Received: by 2002:a17:903:11c7:b0:2e6:1715:e48d with SMTP id

d9443c01a7336-2eb36716f0amr148957755ad.35.1793790094869; Wed, 04 Nov 2026

03:01:34 -0800 (PST)

Message-ID:

Date: Wed, 04 Nov 2026 11:01:34 +0000

Subject: =?UTF-8?B?RG9lIG1lZSBlbiB3aW4gZWVuIFBsYXlTdGF0aW9uIDUgU2xpbQ==?=

From: Nationaal Telecom Onderzoek <1602044@esan.edu.pe>

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="000000000000681d76065f714d4e"

--000000000000681d76065f714d4e

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

SGV0IE5hdGlvbmFhbCBUZWxlY29tIE9uZGVyem9layB6b2VrdCBub2cgZGVlbG5lbWVycyB1aXQg

dXcgcmVnaW8uIEhldCBrb3N0ICANCjEgbWludXV0LiA1IGtvcnRlIHZyYWdlbiBvdmVyIHV3IHBy

b3ZpZGVyLCB2b2xsZWRpZyBhbm9uaWVtLiBPbmRlciBhbGxlICANCmRlZWxuZW1lcnMgdmVybG90

ZW4gd2UgZGV6ZSBtYWFuZCBlZW4gUGxheVN0YXRpb24gNSBTbGltLCBlZW4gaVBhZCBlbiBlZW4g

IA0KR2FsYXh5IFdhdGNoLg0KDQpEb2UgbnUgbWVlIGVuIG1hYWsga2Fucy4NCk1lZWRvZW4gYWFu

IG9uZGVyem9law0KVWl0c2NocmlqdmVuIMK3IE5pZXQgbWVlciBvbnR2YW5nZW4NCg0K

--000000000000681d76065f714d4e

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

dding:20px;color:#1a1a1a">

Het Nationaal T=

elecom Onderzoek zoekt nog deelnemers uit uw regio. Het kost 1 minuut. 5 ko=

rte vragen over uw provider, volledig anoniem. Onder alle deelnemers verlot=

en we deze maand een PlayStation 5 Slim, een iPad en een Galaxy Watch.

Doe nu mee en m=

aak kans.

y:inline-block;background:#6c3fa0;color:#fff;padding:12px 28px;text-decorat=

ion:none;border-radius:4px;font-size:15px;font-weight:bold">Meedoen aan ond=

erzoek

ebrot.digital#t/u/73fca3f7b6e1622da8ea" style=3D"color:#999">Uitschrijven
a> =C2=B7
=3D"color:#999">Niet meer ontvangen

ight=3D"1" style=3D"display:none" alt=3D"">

--000000000000681d76065f714d4e--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on Thursday, November 5. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 06:14:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOZrT-00000000KUl-3NcE

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 06:13:03 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 06:13:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f198.google.com ([209.85.210.198]:47212)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <2506172055@uladech.pe>)

id 1xOYSM-00000000Nmn-2gol

for doctor@nk.ca;

Wed, 04 Nov 2026 04:43:04 -0600

Received: by mail-pf1-f198.google.com with SMTP id d2e1a72fcca58-8a05bfa6af5so653729b3a.2

for ; Wed, 04 Nov 2026 02:42:07 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=uladech.pe; s=google; t=1793788922; x=1794393722; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=Wsvzvq1Xa6QO+YVw8lkPtFd9zBdsgdFv8tncwI+K9k4=;

b=Bnh5xdKsiG5fRpPGDTgBB9qnMU5HLh0arg+fE13JX85tHX4WDy4GzmytLVC+uCK9eb

VyRxYq+bXmPmkNZYppJ+uC2805Tq2e1sPuii7VIKD/JVRagWp40BpQf1gQ9moizdbKlg

wg9DIBkindzuGuyI9/aWlTOcTQHEwUjTugCsw=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793788922; x=1794393722;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Wsvzvq1Xa6QO+YVw8lkPtFd9zBdsgdFv8tncwI+K9k4=;

b=pMy9EhNF9HIRAo4DIxm7ZK7+CNTQCAIsRuSMFsL+ozOwoe81F4QFZHLyNNvJYKrOOC

jMSEAQ29ttxE4eA9VC4524NBtQw86L81EUPykk612Rv3x1M9PyP3xuS2pngPecNjBbEC

kUlnNvtHFviFhGKcmhbhyrv3Irz6MdbjlRB6StKy+1syrprImVTuDoMJ0TWV1zX3SMYi

zDTSQk+g4O6eQspDWThTXmbZ3L1J4tfLOXAqFXmmueGIEW+QFFBh03hhGJzPSWFuwXOs

x9TkGraZqTxVsCMMcDWZMRjHWakhZ2mZOzmEDqrxPMS1fAKsF3bNehhWH/0C6kBhwTeW

u33w==

X-Gm-Message-State: APuU4Z9fpxlyDgXRra0jwLdlYA7u3UUemz8f2PFr2enJv0CGFTpUPV3G

oW37eiiyA7pRTV33zxPCzKysTcclDQ4Jpt60DWGNiLutNNBkUWeahcSzBb95jbmS6h3Tx/V/BmU

Hz+XtMTFhMS73N6Bw3Zqbng==

MIME-Version: 1.0

X-Received: by 2002:a17:90b:4c52:b0:3b0:a4d1:6d7a with SMTP id

98e67ed59e1d1-3b0a4d1700dmr263005a91.31.1793788921853; Wed, 04 Nov 2026

02:42:01 -0800 (PST)

Message-ID:

Date: Wed, 04 Nov 2026 10:42:01 +0000

Subject: =?UTF-8?B?VXcgZW5lcmdpZWNvbnRyYWN0IGxvb3B0IGFmOiB2ZXJnZWxpamsgbnUgZW4gYmVzcGFhcg==?=

From: Nationaal Energie Collectief <2506172055@uladech.pe>

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="0000000000007d4bcf065f7107b9"

X-Spam_score: 5.1

X-Spam_score_int: 51

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Veel energiecontracten worden stilzwijgend verlengd tegen

een hoger tarief. De tarieven zijn dit najaar flink gedaald, maar dat voordeel

krijgt u alleen als u zelf actie onderneemt. Overstappen kost 5 [...]

Content analysis details: (5.1 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

[209.85.210.198 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.198 listed in dnsbl.ahbl.org]

[209.85.210.198 listed in dnsbl.ahbl.org]

[209.85.210.198 listed in dnsbl.ahbl.org]

[209.85.210.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.198 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.198 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.198 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.198 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.198 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 TW_JG BODY: Odd Letter Triples with JG

0.1 TW_IJ BODY: Odd Letter Triples with IJ

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.210.198 listed in bl.score.senderscore.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.198 listed in wl.mailspike.net]

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} =?UTF-8?B?VXcgZW5lcmdpZWNvbnRyYWN0IGxvb3B0IGFmOiB2ZXJnZWxpamsgbnUgZW4gYmVzcGFhcg==?=

--0000000000007d4bcf065f7107b9

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

VmVlbCBlbmVyZ2llY29udHJhY3RlbiB3b3JkZW4gc3RpbHp3aWpnZW5kIHZlcmxlbmdkIHRlZ2Vu

IGVlbiBob2dlciB0YXJpZWYuICANCkRlIHRhcmlldmVuIHppam4gZGl0IG5hamFhciBmbGluayBn

ZWRhYWxkLCBtYWFyIGRhdCB2b29yZGVlbCBrcmlqZ3QgdSAgDQphbGxlZW4gYWxzIHUgemVsZiBh

Y3RpZSBvbmRlcm5lZW10LiBPdmVyc3RhcHBlbiBrb3N0IDUgbWludXRlbiBlbiBiZXNwYWFydCAg

DQpnZW1pZGRlbGQgNDgwIGV1cm8gcGVyIGphYXIuDQoNClZlcmdlbGlqayBkZSBzY2hlcnBzdGUg

dGFyaWV2ZW4gdmlhIGRlIEdlbWVlbnRlY2hlY2tlci4NClRhcmlldmVuIHZlcmdlbGlqa2VuDQpV

aXRzY2hyaWp2ZW4gwrcgTmlldCBtZWVyIG9udHZhbmdlbg0KDQo=

--0000000000007d4bcf065f7107b9

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

dding:20px;color:#1a1a1a">

Veel energiecon=

tracten worden stilzwijgend verlengd tegen een hoger tarief. De tarieven zi=

jn dit najaar flink gedaald, maar dat voordeel krijgt u alleen als u zelf a=

ctie onderneemt. Overstappen kost 5 minuten en bespaart gemiddeld 480 euro =

per jaar.

Vergelijk de sc=

herpste tarieven via de Gemeentechecker.

y:inline-block;background:#264653;color:#fff;padding:12px 28px;text-decorat=

ion:none;border-radius:4px;font-size:15px;font-weight:bold">Tarieven vergel=

ijken

ebrot.digital#t/u/ad134a217f6d325e4ec8" style=3D"color:#999">Uitschrijven
a> =C2=B7
=3D"color:#999">Niet meer ontvangen

ight=3D"1" style=3D"display:none" alt=3D"">

--0000000000007d4bcf065f7107b9--

Dutch language phish from Google Gmail

Posted by Dave Yadallee on Thursday, November 5. 2026

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 04 Nov 2026 06:12:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xOZrO-00000000KFS-0Vu4

for dave@doctor.nl2k.ab.ca;

Wed, 04 Nov 2026 06:12:58 -0600

Resent-From: The Doctor

Resent-Date: Wed, 4 Nov 2026 06:12:58 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f70.google.com ([209.85.216.70]:51468)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from <3EAfraggRBikOFQJRFSHZHaaNWYZFQ.JIZ.UJITHYTWSP.HF@maestro.bounces.google.com>)

id 1xOY84-00000000M2t-0GSQ

for doctor@nk.ca;

Wed, 04 Nov 2026 04:22:05 -0600

Received: by mail-pj1-f70.google.com with SMTP id 98e67ed59e1d1-3ac8f449d1bso486053a91.3

for ; Wed, 04 Nov 2026 02:21:10 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=ucvvirtual-edu-pe.20260707.gappssmtp.com; s=20260707; t=1793787664; x=1794392464; darn=nk.ca;

h=content-type:to:from:subject:date:message-id:mime-version:from:to

:cc:subject:date:message-id:reply-to:content-type;

bh=bP8q8CPiS3l5XwQ2C/AZjsMwHmKi5IUfNsyyGmKbIcY=;

b=K8Jvy9ALLfUGHrcStbdKzOHYZjnxg5q699YqM7UV1c7ysazMpWOm/X666652btcehU

6R9wUhcOaaJ2R7dsyFYO7s7bI1nJ2mbqPBk8eaR1t8t4nx42cTL0fim6X3zbu2kAx0md

OYh9iGvwigFdDRGEO6MgSCFATkaNCeLW0J38L+OZRsoorvOFbHMa3dSAXU/skcAtpDD+

ndPH2B42sZm9rxBYMyfcUbAuaHC0nXYES4rPWiWMDu5gbtN5SBHKdN4B+f2sRY5c7kbZ

Kck0yZmav3Hzk6aZTNEnLIGIMSE3VLM57zduJ7LSI3595yFB5LPG2idXRXEynbMOu1F+

nQRQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1793787664; x=1794392464;

h=content-type:to:from:subject:date:message-id:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=bP8q8CPiS3l5XwQ2C/AZjsMwHmKi5IUfNsyyGmKbIcY=;

b=YfhdN+CdaGHV4N+N0ZnTmKsAzv4D+XSnuTxTuE65wDIt72YgPPjx9FfbKfovJAVNFS

C4oImZs8jRZ0iXiNq/0i7J/DT6LAA1AurIpSLCjwSIsoRZuVxyVv5xNaiPC8E5AfPkX8

lXkzoMVVmDaBeGwciHXdYTKC8sRGYaQCndoS+U/obccwqTVAFpXj1N5kOXJsVqmmASRq

0RR7ANe5D2rcxuw9N1MpgTB9vJJeThBFrFLVSLKbIjbfHDfeqx2ykaOK7xLZ8xzKSW0W

fH4+vErdmfgrjGYPdpaQzgugvY819HhKxe8PVudVBr9kelxWjqQBHw1IGM+mYI1Ud8Ms

fqdg==

X-Gm-Message-State: APuU4Z8jOCqtPfU7dDXy8SOkBDJ+yYzU5ouIHjc2Sc8hIUGJ/NWAkXR8

NKuzVtw0lx/e1of5uOd5H/Qau51BrrkgFnoR0fhEYCWpL6NJkP1b0ecpVp11+tpBz0KkhLASRJD

D1RVowobZT7BsCU1f7kPJ2/Hu

MIME-Version: 1.0

X-Received: by 2002:a17:90a:dfc4:b0:3aa:fdad:7d6c with SMTP id

98e67ed59e1d1-3ae897c190bmr13319653a91.58.1793787664127; Wed, 04 Nov 2026

02:21:04 -0800 (PST)

Message-ID:

Date: Wed, 04 Nov 2026 10:21:04 +0000

Subject: =?UTF-8?B?RW5lcmdpZXRhcmlldmVuIGRhYWxkZW4gb3BuaWV1dzogYmV0YWFsdCB1IG5vZyBoZXQgb3VkZSB0YXJpZWY/?=

From: Tariefwijzer Energie

To: doctor@nk.ca

Content-Type: multipart/alternative; boundary="00000000000085f3ba065f70bca5"

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: De energiemarkt is opnieuw gedaald, maar uw leverancier past

het tarief niet automatisch aan. Als uw contract ouder is dan 6 maanden,

betaalt u waarschijnlijk nog het oude tarief. Het verschil kan opl [...]

Content analysis details: (5.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

[209.85.216.70 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.216.70 listed in dnsbl.ahbl.org]

[209.85.216.70 listed in dnsbl.ahbl.org]

[209.85.216.70 listed in dnsbl.ahbl.org]

[209.85.216.70 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.216.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.216.70 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.216.70 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.216.70 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 T_PDS_OTHER_BAD_TLD Untrustworthy TLDs

[URI: cozyday.click (click)]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.1 TW_JN BODY: Odd Letter Triples with JN

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.216.70 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.216.70 listed in wl.mailspike.net]

1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_REMOTE_IMAGE Message contains an external image

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.216.70 listed in bl.score.senderscore.com]

Subject: {SPAM?} =?UTF-8?B?RW5lcmdpZXRhcmlldmVuIGRhYWxkZW4gb3BuaWV1dzogYmV0YWFsdCB1IG5vZyBoZXQgb3VkZSB0YXJpZWY/?=

--00000000000085f3ba065f70bca5

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

RGUgZW5lcmdpZW1hcmt0IGlzIG9wbmlldXcgZ2VkYWFsZCwgbWFhciB1dyBsZXZlcmFuY2llciBw

YXN0IGhldCB0YXJpZWYgIA0KbmlldCBhdXRvbWF0aXNjaCBhYW4uIEFscyB1dyBjb250cmFjdCBv

dWRlciBpcyBkYW4gNiBtYWFuZGVuLCBiZXRhYWx0IHUgIA0Kd2FhcnNjaGlqbmxpamsgbm9nIGhl

dCBvdWRlIHRhcmllZi4gSGV0IHZlcnNjaGlsIGthbiBvcGxvcGVuIHRvdCBob25kZXJkZW4gIA0K

ZXVyb3MgcGVyIGphYXIuDQoNCkNoZWNrIGluIDIgbWludXRlbiB3YXQgaGV0IGxhYWdzdGUgdGFy

aWVmIGlzIHZvb3IgdXcgc2l0dWF0aWUuDQpUYXJpZWYgY2hlY2tlbg0KVWl0c2NocmlqdmVuIMK3

IE5pZXQgbWVlciBvbnR2YW5nZW4NCg0K

--00000000000085f3ba065f70bca5

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

dding:20px;color:#1a1a1a">

De energiemarkt=

is opnieuw gedaald, maar uw leverancier past het tarief niet automatisch a=

an. Als uw contract ouder is dan 6 maanden, betaalt u waarschijnlijk nog he=

t oude tarief. Het verschil kan oplopen tot honderden euros per jaar.

Check in 2 minu=

ten wat het laagste tarief is voor uw situatie.

:inline-block;background:#14746f;color:#fff;padding:12px 28px;text-decorati=

on:none;border-radius:4px;font-size:15px;font-weight:bold">Tarief checken
a>

ozyday.click#t/u/2515815d8290e3ee2e42" style=3D"color:#999">Uitschrijven
> =C2=B7
=3D"color:#999">Niet meer ontvangen

ght=3D"1" style=3D"display:none" alt=3D"">

--00000000000085f3ba065f70bca5--

Mon	Tue	Wed	Thu	Fri	Sat	Sun
← Back	November '26					Forward →
						1
2	3	4	5	6	7	8
9	10	11	12	13	14	15
16	17	18	19	20	21	22
23	24	25	26	27	28	29
30

Work Smarter. Achieve More.

Office Home & Business 2024 for Mac

Professional Tools. Powerful Productivity.

Fast & Convenient Digital Delivery

Ready to Upgrade?

ont-weight:700;color:#0f172a;"> Your Tax Refund Request Update

PayPal

Payment Transfer Confirmation

Work Smarter.

Achieve More.

ont-weight:700;color:#0f172a;">

Your Tax Refund Request Update