Web/SEO/App spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on
Content preview: Hi, I am a professional Graphic Designer with over 12+ years

of experience. Do you need New Website, Website Development Re-designing,

CMS design, E-commerce design, & Website Update.? If you are inte [...]



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.23.19 listed in dnsbl.ahbl.org]

[52.103.23.19 listed in dnsbl.ahbl.org]

[52.103.23.19 listed in dnsbl.ahbl.org]

[52.103.23.19 listed in dnsbl.ahbl.org]

[2603:10b6:806:1c3:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:10b6:806:1c3:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:10b6:806:1c3:0:0:0:14 listed in]

[dnsbl.ahbl.org]

[2603:10b6:806:1c3:0:0:0:14 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.23.19 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.23.19 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.23.19 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.23.19 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[parulwebsolution(at)hotmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.23.19 listed in wl.mailspike.net]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[52.103.23.19 listed in will-spam-for-food.eu.org]

[52.103.23.19 listed in will-spam-for-food.eu.org]

[52.103.23.19 listed in will-spam-for-food.eu.org]

[52.103.23.19 listed in will-spam-for-food.eu.org]

[52.103.23.19 listed in will-spam-for-food.eu.org]

[52.103.23.19 listed in will-spam-for-food.eu.org]

[52.103.23.19 listed in will-spam-for-food.eu.org]

[52.103.23.19 listed in will-spam-for-food.eu.org]

[2603:10b6:806:1c3:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:1c3:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:1c3:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:1c3:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:1c3:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:1c3:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:1c3:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:806:1c3:0:0:0:14 listed in]

[will-spam-for-food.eu.org]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Update.?



--_000_SA1PR03MB6420A438ECCD18161DE57E9ADC93ASA1PR03MB6420namp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,

I am a professional Graphic Designer with over 12+ years of experience.

Do you need New Website, Website Development Re-designing, CMS design, E-co=

mmerce design, & Website Update.?

If you are interested, please share your requirement. I can send your price=

list.

Best Regards,





--_000_SA1PR03MB6420A438ECCD18161DE57E9ADC93ASA1PR03MB6420namp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Hi,



Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

I am a professional Graphic Designer with over 12+ years of exp=

erience.



Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Do you need New Website, Website Development Re-designing, CMS design, E=

-commerce design, & Website Update.?



Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

If you are interested, please share your requirement. I can send your price=

list.



Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; fo=

nt-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Best Regards,



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">












--_000_SA1PR03MB6420A438ECCD18161DE57E9ADC93ASA1PR03MB6420namp_--

Web/SEO/App spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 26 Jan 2026 10:24:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vkQIr-000000001CU-2cAH

for dave@doctor.nl2k.ab.ca;

Mon, 26 Jan 2026 10:23:05 -0700

Resent-From: The Doctor

Resent-Date: Mon, 26 Jan 2026 10:23:05 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westus3azolkn19010019.outbound.protection.outlook.com ([52.103.23.19]:36912 helo=PH7PR06CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vkPIN-00000000MOK-1OFX;

Mon, 26 Jan 2026 09:18:42 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=HpO/TOKcEfh9Z95D/lZYMLFSsT5OImSor1fL595oW2s8/mJAOvoAGshLcUJpYd0X0LtwD1MLTsHt8+l7zFIsg8lGosTkAlYd/iGHuoshyuPHtXaUNBy1Z+BGawsVzXrl+vzL8UKLA+K9k90LJBr7sQbU08eFDsWrf43bfIKaEsmziwY5DNOHNMXePYcb3O2Y9wFFuVy8h5XEqhRcIN9pcXPyUgT2/X/8KHF+A4osKkVsoJEgQFuyiEuBJLxL0g/gfYnlKaJtogO0eyQXRuWokVZKGxuNTA66I6oL9T0XZupSSPCLSRbtOAwjMV0tHAb8exSQmidBfjJ4omIFfx+gRQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=UmTSyQGgtQlKhw0RNyT/vWZCu2WTrc/Jvd8d0+z2wAk=;

b=iAc9d0j322xeUo8+e9vcp+cl2MzkRWn3ya2OAVPLCYPwuN1qajtYXAzh7yOjySPpNoBqk3E0Uqsi4VrJDPNHb0N8wScL20QbBB2jIdi4yl9WVIgjDeYMnqju/FXfHiZWQx7IBvGvkZI5L/Eel/avQNUflMbGT9IN1eCraVtAjLYD5/bNL0Tc/sE5i0JMYr4SEMlpO4zopjmdUm98ywgO8zZIbar9RsTVd9CqV4KKh+zKNZ2NXuLOyL8DcNlE+ICOIThNuugEJ5oWC9/rsV/iWSBU1HiJhYb9is3fGLWq9qjyN0L2NmSyidqy8MyZqqv7hpBuekro+ElcWbbbCsKyIA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=UmTSyQGgtQlKhw0RNyT/vWZCu2WTrc/Jvd8d0+z2wAk=;

b=GdAWQUp4OVGY/x7vc18nNMQmA+XFSmburiMxz0J7fV28SbL6wiUzd47MD9AicNXKPy7SfIYi9Zq+wkDoU/gYZONhWWep7zjbOnTbiVXCRWJ+s7LmflPMOoL3y6phfSrlM/M8TYf9rJccf7rJmx02XOWjULlt9HJAwLLvw5lIeprRoEpupwTvIFvXvr+yU5pL29gCyy5sJyIedtm2v3Xpj74nCBeQVK1ZVp6VGEYSCFAEd+bnf5L1bJHVjVQWOnzbovsIE4dcP8GdCQSBhsN5IQYETPsjprk1M4jJXeF/9L3FTCSgJBS5KBMcsqTShFFEJSFFMaNY2/aJ8PjFwTW4yA==

Received: from SA1PR03MB6420.namprd03.prod.outlook.com (2603:10b6:806:1c3::14)

by CO1PR03MB5827.namprd03.prod.outlook.com (2603:10b6:303:9a::7) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9542.12; Mon, 26 Jan

2026 16:17:26 +0000

Received: from SA1PR03MB6420.namprd03.prod.outlook.com

([fe80::f7bb:f1fc:9f63:9e78]) by SA1PR03MB6420.namprd03.prod.outlook.com

([fe80::f7bb:f1fc:9f63:9e78%4]) with mapi id 15.20.9542.010; Mon, 26 Jan 2026

16:17:26 +0000

From: Parul Malviya

Subject: Update.?

Thread-Topic: Update.?

Thread-Index: AQHcjt7n6/JTZ4xhBkasq1JmaghW5A==

Date: Mon, 26 Jan 2026 16:17:25 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SA1PR03MB6420:EE_|CO1PR03MB5827:EE_

x-ms-office365-filtering-correlation-id: b7ac88a7-03a5-41ed-b4c6-08de5cf664f5

x-ms-exchange-slblob-mailprops:

TmQEXxnpNvBQ6yUILjshi4xEF9CJm0gDzQkT4y9aLlNIRjAF2SYoXxKc9MINL+fYTESUH6Zj+hbcqMd6HPVCnX56odE7BW6K/SKv00COwrl0PGQJUVSq6ZRiVYa18aBpPb6QTm1RFoUu9Zj/4Ne9W1C/rR20gq1kPGbQbjpRaF5dR/wwSQdz45M2eyzTtc+0xB81f3IR/t2K+q6+rptU6OIAe91qQmlutjHb57VQPTxZJyW6vg+zYFvGbYGSUPRaLq9D2AzWvdZR2k97Yzj5O+FJ9PPvaX5LvNy9U0zkkY52IVlKjh79mGdxndpDq8VhWKkFwNUaeGf61tQuU+bxnxgflI5mVOJ7QkTMicYQwi7LKYGWDffL9kvdmN+cLXiMoAi+k2hefQNLeVwTwplDP4l+FuxYjVQvF5niOexepIY0wHDgUNWYV07OzvSt0Np1n4IOAUAUo3qukQ8ps5YjN0QuBzvRAlhFIBtd+H8yY9WNJ9IM61pTH29t50/RVjT1Ff6h+blI4mB5WepXVKHu+rZ+0APm5OoMcabN4QiOkcWJQWvUcmcJLI93wVnTnOB+FGY2a7lWLYE=

x-microsoft-antispam:

BCL:0;ARA:14566002|30051999003|461199028|8062599012|8060799015|19110799012|20031999003|39105399006|15030799006|15080799012|31061999003|21061999006|440099028|3412199025|51015399003|40105399003|102099032|35041999009;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?iTRwfHXRCzbEN1r77lnE0+dC25NbFv+4/9Q7DFI0kI5aJORxQIrhWFBQmE?=

=?iso-8859-1?Q?sOPjTACx3McVsToV0+M7Xw1uiDgG0vLqEyY+WQ2FjbRfDgzItQQlNeERdS?=

=?iso-8859-1?Q?s6pHWKSiO2jegNmoVHJ8J66V+N+YUVf8byrO1VcX6qXYh/N+QGATpV2+FY?=

=?iso-8859-1?Q?cRGcoRp8hw1ljZfJp9UO+OGl8wH2uA95nClZKvdizoppXEgtZXYZK1Ygpp?=

=?iso-8859-1?Q?ciPB8vwsOD2psYw8SY5aFw672D9r+WRkIEelFqsnenT/snCzwRMOuzJ4h+?=

=?iso-8859-1?Q?+CVd6Ax4HLTENoupsgcvNwidPyvnZoY1SbkwvAmYEksxtcMKJIujqzzYom?=

=?iso-8859-1?Q?pMPxRJA8fN+EAPvjfqhb0hio+TaeBcB4WOsbm3YlWG+M0RHdlK0+8mIEAv?=

=?iso-8859-1?Q?jsy44M70cuqCP5zS3HGGhA0HCIeL0SPwZrgHDJSqg8Am5dznVNWCzqa2Uk?=

=?iso-8859-1?Q?vii+1NG1wgUwwTVckCYnPg/77LeqNZgVwB5zq6YaZgM/lVjn6LqGpSeQXm?=

=?iso-8859-1?Q?agZTE7XKAQyb0btFhWBpVVWm8oDKJa50pyW4a0zcRIHYUky21OM9clwZKs?=

=?iso-8859-1?Q?GDPNz2phT4Z1BrGnkKAwTs+y4H6A6QgwqwZAvB4LIQbT1h2UEpk7RKePhe?=

=?iso-8859-1?Q?IWAs0FIDuufkhfXLYXX903agkOnn59gu8jhOwR41sQoEU3Ri/tOpCsnDob?=

=?iso-8859-1?Q?8Y0k1v9UJPlqN1UcBjGEdzoiU4KXHSU8Qb0EAoaMprxRxFZNRLf6hUvTCk?=

=?iso-8859-1?Q?+koNQUGb9HP9SnzsaADNHU3rxOvgjqINjc89WZNUKR8pSlyN/X9hVJKhNP?=

=?iso-8859-1?Q?GKU8Bh3EnzYxhB8TYO33j6CZEpwXyhfY3m18baVhW56wP9uAVxwTlScpRf?=

=?iso-8859-1?Q?QT6cFcWTiiUEZhCUDTFNrT++Bz2hOlSCgqticpsiIe4pTlSbXcqioZDnxQ?=

=?iso-8859-1?Q?YxfVpgpiczcSiq3B2/Ejvwta7KXvW+gz0/EXcFGIY+n/nwRrNUTlpGP7//?=

=?iso-8859-1?Q?ZfcyVq/Fw8XqzHauhFYuet/GqdlCDMo6y8Vj0FKF1CgrscQPyg8pwixFW5?=

=?iso-8859-1?Q?LttV/TtOwcCv0w3UmJXwVJ4rgv+UAcCn9OXTkL4KSTFQjDSHCFrFG1dX1T?=

=?iso-8859-1?Q?Wa6G3kC6b/kjRtDviG/NmfOqXbEqcVPEC+7IJUAmdNKocKemd8Q9t6H9O3?=

=?iso-8859-1?Q?K6Jdjk5kxVNbUGQiwsBoad/2/dlYytQSxZrY4ct9JhnjkvxaPx+RP68BR2?=

=?iso-8859-1?Q?ObqwI9mvuBmcxAtrwy4rnmVzXUrqRSSDULIS8KcVRJxdU4zfzwweHiG4wy?=

=?iso-8859-1?Q?3N6yeJ78z2j1qD8nBHKR7HGUhDKOIbckJnpc516hi/zljQsRXzA4Ovo0dt?=

=?iso-8859-1?Q?ygNVz0E2fDx7RqIOOAgr8i1MrNXDviJ2qO4SYKZXOnMQ7UjJ+O0zE=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?uuxISEHrDDQRvfb67QD5Aub9yqMHLlBV/t2B0YX16pQ/1kNfgjMaEo0BB9?=

=?iso-8859-1?Q?EAtAh+sO0e78y+mnh74/ziceCuUxXtCJro16s099AvBkvMAVPhdug9ogg1?=

=?iso-8859-1?Q?7gGj7c2GWtGTJONbDguQ0R5Ea1D2RIdUlG9GuOoat0uxzbn34Gmp1kMck1?=

=?iso-8859-1?Q?Zu7nUgcX3+KowePopiMvjbfmK2tiQhUQHxA31AolHYvDZdPSc9fpP1aNxN?=

=?iso-8859-1?Q?mNOGZOHnUp6kWoW9E/1P46WNZAbTD2aSj3teqP7xNYle7W1JnHNMdN6lxX?=

=?iso-8859-1?Q?k1Ur2++AAae0fS2PHGs5eO15Epctx+zisFqvsPX5kzPtVqtXut9all+aYZ?=

=?iso-8859-1?Q?Y6sMm/ty00tpJzmtD/gFAZyWVnWwB3EUzD18Y4qwrVy4Xy9W/oqXvrzeVf?=

=?iso-8859-1?Q?qo/9/Aqs2yoj1i7cql1al97rYrHuPplqdeexU4Miarn++K61Z8TY7Adcwq?=

=?iso-8859-1?Q?iE4vTI+eNTCYrGly5hqqXHvpaE3pr2jTewwCcQHqwPq+NbO2tF2cJE5eKA?=

=?iso-8859-1?Q?r9WhG1Hrd1PY7abHReMe1sZ1WVlPKBN7LqdaN/PpNZDn/qy27/mYDjokEK?=

=?iso-8859-1?Q?rP8jDGeWAjOrhXneTjNyTOFZueJ2mwxLdOmhU17bDJIXDMdYj0Zu05gkY4?=

=?iso-8859-1?Q?7suLtHglepfXhH9BUfhvPQkYkGAlJgWMH2GNdR1rmgNaGVvU5Z2xR5ozxv?=

=?iso-8859-1?Q?lvQnwF/DdEBTXaYaLM+JdMWwO2O8UK00N2PEmw3pWf44kaSyZPmgcopGes?=

=?iso-8859-1?Q?fs5wItR8qz+NknO7yEue3QbRGnSc4OVj5Ry8eCCVS/7WTxcHKIYntPaeKS?=

=?iso-8859-1?Q?b+17KuVhH2F1IlONq8i0mmuLZ+8rQlSl4kcTdnjpyEl6MYiv84ASiRcE+m?=

=?iso-8859-1?Q?3Ng58ACf/wyJsdEKXJ/q4iM+jwqXd/PSLPcNArs3fKbV+lJWNq147m7+Yr?=

=?iso-8859-1?Q?MBnzQwcIe9DTTJkXouBfZzJ2yv153T0DLUSdO3wbQy5EnI6EXNlKSdruAY?=

=?iso-8859-1?Q?0k4j99yq4zwMkozeC0nSiXrTYMgpOqOVH5ASUGyVl8er5MnX7RzW8gEVVI?=

=?iso-8859-1?Q?3aKtwgqP0AkoP1F3ZZscJLPsq/Chg6v+JPEpgpyu5vV2w1d7pHMaBYnyqZ?=

=?iso-8859-1?Q?FYrfajaLPE6KnO+5X7xTOpp16sqgfhwuZFSxdgt8nIf9kmJaYm0lWomW5T?=

=?iso-8859-1?Q?FEMwE3ZfyNf7Kg608yaZwVI6m9Yi8hG30XYFw1QiyUcVilXNRkIuC/wSyD?=

=?iso-8859-1?Q?xqjlQErr2aoYTLlMwL3RbLHQN16KVzdfQ0f1Wz04KnffnTRpt9/Gnpohuj?=

=?iso-8859-1?Q?5Q7eOk0TSZiCUybKYPNP99vpdlTlzdhh7wg3rHj2s5S9NDNkfZTlGyTS7i?=

=?iso-8859-1?Q?llMToaX2hQkhNsv2JYI6XgXm+FqiX6IB9RLL4kDFUKU16zv8qDQw+Q/y2t?=

=?iso-8859-1?Q?LArkTzTgsNOAP4P2Dl5yWroqZmiMznhnpiCSjOvdpCpo7mZa4nl+ZC1D4l?=

=?iso-8859-1?Q?QPNTr3q4wz/IrP4kNeHZ5M?=

Content-Type: multipart/alternative;

boundary="_000_SA1PR03MB6420A438ECCD18161DE57E9ADC93ASA1PR03MB6420namp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-dea6d.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SA1PR03MB6420.namprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: b7ac88a7-03a5-41ed-b4c6-08de5cf664f5

X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Jan 2026 16:17:25.8141

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO1PR03MB5827

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Norton Phish from Google Gmail Part 4

Posted by Dave Yadallee on









/InformAction">
emtype=3D"http://schema.org/EmailMessage">
ntent=3D"Autumn Beckham: Order W19S7LLP approval record"/>
prop=3D"object" itemscope itemtype=3D"http://schema.org/Event">
op=3D"eventStatus" content=3D"http://schema.org/EventScheduled"/>
prop=3D"publisher" itemscope itemtype=3D"http://schema.org/Organization">
eta itemprop=3D"name" content=3D"Google Calendar"/>
"eventId/googleCalendar" content=3D"sjYRBbCFb1YsaNMU5JLhvsDjG5"/>
e=3D"display: none; font-size: 1px; color: #fff; line-height: 1px; height: =

0; max-height: 0; width: 0; max-width: 0; opacity: 0; overflow: hidden;" it=

emprop=3D"name">Order W19S7LLP approval record
rue">
e itemprop=3D"endDate" datetime=3D"20260127T032037Z">
order=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" align=

=3D"center" style=3D"width:100%;" class=3D"body-container">

tyle=3D"" class=3D"" align=3D"left">

den=3D"true">  
=


n" align=3D"center" style=3D"width:100%;" class=3D"">

=3D"" class=3D"" align=3D"left">
rg/EmailMessage">

Order W19S7LLP approval record=


cellspacing=3D"0" role=3D"presentation" align=3D"center" style=3D"width:100=

%;" class=3D"">

dius: 8px; direction: rtl; font-size: 0; padding: 24px 32px; text-align: le=

ft; vertical-align: top;" class=3D"main-container-inner">

ft; direction: ltr; display: inline-block; vertical-align: top; width: 100%=

;overflow: hidden; word-wrap: break-word;">
=3D"0" cellspacing=3D"0" role=3D"presentation" width=3D"100%" class=3D"main=

-column-table-ltr" style=3D"padding-right: 32px; padding-left: 0;;table-lay=

out: fixed;">

rtical-align:top;">
role=3D"presentation" width=3D"100%" style=3D"table-layout: fixed;">
style=3D"font-size: 0; padding: 0; text-align: left; word-break: break-wor=

d;;padding-bottom:2px;">

oboto, sans-serif;font-weight: 400; font-size: 22px; line-height: 28px;colo=

r: #3c4043; text-decoration: none;" class=3D"primary-text" role=3D"presenta=

tion">Order W19S7LLP approval record

td><=

/table>(Guest list has been hidden at organizer's request)<=

/table>

reak: break-word;;padding-bottom:24px;">

sans-serif;font-style: normal; font-weight: 400; font-size: 14px; line-heig=

ht: 20px; letter-spacing: 0.2px;color: #3c4043; text-decoration: none;" cla=

ss=3D"primary-text" role=3D"presentation">Monday Jan 2=

6, 2026 =E2=8B=85 8:20pm (Mountain Standard Time - Phoenix)

d>

eak: break-word;;padding-bottom:24px;">

ans-serif;font-style: normal; font-weight: 400; font-size: 14px; line-heigh=

t: 20px; letter-spacing: 0.2px;color: #3c4043; text-decoration: none;" clas=

s=3D"primary-text" role=3D"presentation">

Norton Price Estimate Dat=

e: Monday, 26 January 2026
Price Estimate No: PC53353UHZ4265
Support =

Outreach Line: (865)-291-8559

Membership Information Email

Hi,<=

/p>

This email is provided to document your membership information with N=

orton. The entry below is shown for reference as of Monday, 26 January 2026=

.

**Payment Details Panel:**

- License Key: 677c29b3-657c-4fca-=

b123-1044355a7020
- Product Purchased: Premium+ Membership
- Support =

Term: Five Years
- Payment Status: Recorded
- Amount: $380.44
- Re=

corded Date: Monday, 26 January 2026
- Reference ID: R201H1WZVQ

Yo=

ur membership will continue under the standard plan settings unless you req=

uest adjustments before renewal.

If you have questions, you may conta=

ct our support team at (865)-291-8559.

Wishing you calm and well-bein=

g,,
Norton 360
Billing Administrator: Rita Ricketts
Contact Number=

: (859) 222-6452
Operational Address,: 1417 Brushy Mountain Dr New York=

Ny 10025 US

=C2=A9 2026 Company. All rights reserved.


a itemprop=3D"description" content=3D"Norton Price Estimate Date: Monday, 2=

6 January 2026Price Estimate No: PC53353UHZ4265Support Outreach Line: (865)=

-291-8559Membership Information EmailHi,This email is provided to document =

your membership information with Norton. The entry below is shown for refer=

ence as of Monday, 26 January 2026.**Payment Details Panel:**- License Key:=

677c29b3-657c-4fca-b123-1044355a7020- Product Purchased: Premium+ Membersh=

ip- Support Term: Five Years- Payment Status: Recorded- Amount: $380.44- Re=

corded Date: Monday, 26 January 2026- Reference ID: R201H1WZVQYour membersh=

ip will continue under the standard plan settings unless you request adjust=

ments before renewal.If you have questions, you may contact our support tea=

m at (865)-291-8559.Wishing you calm and well-being,,Norton 360Billing Admi=

nistrator: Rita RickettsContact Number: (859) 222-6452Operational Address,=

: 1417 Brushy Mountain Dr New York Ny 10025 US&copy; 2026 Company. All =

rights reserved."/>

0; text-align: left; word-break: break-word;;padding-bottom:24px;">

le=3D"font-family: Roboto, sans-serif;font-style: normal; font-weight: 400;=

font-size: 14px; line-height: 20px; letter-spacing: 0.2px;color: #3c4043; =

text-decoration: none;" class=3D"primary-text" role=3D"presentation">
border=3D"0" cellpadding=3D"0" cellspacing=3D"0" role=3D"presentation" sty=

le=3D"padding-bottom: 4px;">


t-size: 14px;color: #3c4043; text-decoration: none;font-weight: 700;-webkit=

-font-smoothing: antialiased;margin: 0; padding: 0;">Guests


body>

--000000000000b974ee06494b3669--

Norton Phish from Google Gmail Part 3

Posted by Dave Yadallee on


=20



=20



=20



=20







Norton Phish from Google Gmail Part 2

Posted by Dave Yadallee on
















Norton Phish from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 26 Jan 2026 08:01:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vkO4r-000000006J7-0U43

for dave@doctor.nl2k.ab.ca;

Mon, 26 Jan 2026 08:00:29 -0700

Resent-From: The Doctor

Resent-Date: Mon, 26 Jan 2026 08:00:29 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f74.google.com ([209.85.210.74]:43156)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vkNTL-000000003PB-0iDe

for doctor@nl2k.ab.ca;

Mon, 26 Jan 2026 07:21:52 -0700

Received: by mail-ot1-f74.google.com with SMTP id 46e09a7af769-7cfcc8890d2so13683251a34.0

for ; Mon, 26 Jan 2026 06:20:56 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20230601; t=1769437250; x=1770042050; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=8/rEYJSgc1T8lPBIed4x0sJ75pYZul/zSL8EtFncc/A=;

b=mrBx9uj8DtZPODIpHhWpyWkO1BYyNjNQOG3YHB4LIFrZwpzEblIZ42pGo6ixncD9yO

ogFlAHb3NRGiZP6C+dcA8Yb+IA7Cqz9tBL0vbmLKpjyAYR0dqhX7nJPKaOQyV/xZ163N

Knta0EJw8usxLwrt4QgI5e8qlsjDqJN2cyKWNg2XN1vRbxtJHkO6659Zw8cvR3921U72

Qn7KUy0rtPr4sF3wWBy7OfpIQpcUJUXzMPiu0NoeTszegEHBqTN1j3jhM5yJ72z9kAhg

9ZAK++GXcGJYt7zpHdB79nbWYzxEgn/PO43D000cOxPQL9i5x23HO7LnzaWjznoGt37S

LJnw==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=eanosa-org.20230601.gappssmtp.com; s=20230601; t=1769437250; x=1770042050; darn=nl2k.ab.ca;

h=from:subject:date:message-id:sender:reply-to:mime-version:from:to

:cc:subject:date:message-id:reply-to;

bh=8/rEYJSgc1T8lPBIed4x0sJ75pYZul/zSL8EtFncc/A=;

b=y1QOCYnyxzUWuhYcxAwGmXeiBdCQK3BSjCYpAvk+gysgQKKwXnPutaujDXvY92RBD1

Eq3E+pM1OjiftZbLTwexn97kmGAx93IhoONuQsdbcPlvzyvRpEp2za6ko16323Shu+OS

yH1Ws4oxPBo6UeNr3ZgcU/XsHqkDoR2bjv/vU8k90svTgj8ZxZkFgNKVbSMe8Cc7h2os

R83qT8er3Lv9WOdtMxUggojYcBkUwtwanX3cSSeCTqIPcvbT7CKXpGcaqM5JUwd1EBWX

+fK6NWLHrjbJeD+LHC2Rgu5baD3yhDqRF4TbTQiWj7l/v1v2Q35PFL4ceZDvSmya7ntR

PJaA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1769437250; x=1770042050;

h=from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=8/rEYJSgc1T8lPBIed4x0sJ75pYZul/zSL8EtFncc/A=;

b=ib/MCTz21qQxhQv9c+cwBDA4gm2Q/nOA6J3Zcehtn7DDBgUbyzwSBvWH3DNGW5/l93

YVXK9Hzsbyxg1wykdqoXoZh+a4XB32J//v8qT+F90tS0uxjL0tMm5i1Vb1aJ1R3oaSh4

GZN4xM19KpB5kNdYauel1buRCwjLdmhwa+qOryfbEZS8mYqr/VFXfvnyxCmeeG160bGv

wAh/voC28tXuCCsu+HvtuZfYodYqx3SJYPSJiV1HoQgvTaI45pRD9H/BePtOj4ojrgnP

y2pyHMLy+PEaWqPQzQ2Xw9g4kVYO4I2ZyqQYKWG3MpDSUza0gkVcpJnea6uZZ1uCiavs

SCyA==

X-Forwarded-Encrypted: i=1; AJvYcCWG0YcMonvUWl5O5Wz13WDhcry2RRWPJ8ezvqdVp7HcgZQxV59L4cjippuxngT8X0eiSU/YKEk=@nl2k.ab.ca

X-Gm-Message-State: AOJu0Yx9TNWRt7QvMO6Hkxy4j/MEy3eYy8BGFC9JZOMDGyI2fCHL946c

3jvyMv1A3dla84mLDyVD1GRB1sIurbNgczt9CO8zbTyWl3Eq5WszrdGwFyXEjT0Q/qlkUQnByH5

StdmfUNttftwT/lvXIh2RPp+Z5uCHbGyfUP65I2uiukKjJA==

MIME-Version: 1.0

X-Received: by 2002:a05:6830:34a0:b0:7cf:d42d:edb1 with SMTP id

46e09a7af769-7d170762fc2mt2040436a34.10.1769437249451; Mon, 26 Jan 2026

06:20:49 -0800 (PST)

Reply-To: Autumn Beckham

Sender: Google Calendar

Message-ID:

Date: Mon, 26 Jan 2026 14:20:49 +0000

Subject: Order W19S7LLP approval record

From: Autumn Beckham

Content-Type: multipart/alternative; boundary="000000000000b974ee06494b3669"

X-Spam_score: 14.1

X-Spam_score_int: 141

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Order W19S7LLP approval record Order W19S7LLP approval record

Monday Jan 26, 2026 â‹… 8:20pm Mountain Standard Time - Phoenix Norton Price

Estimate Date: Monday, 26 January 2026Price Estimate No: PC53353UHZ4265Support

Outreach Line: (865)-291-8559Membership Information EmailHi,This email is

provided to document your membersh [...]



Content analysis details: (14.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.74 listed in dnsbl.ahbl.org]

[209.85.210.74 listed in dnsbl.ahbl.org]

[209.85.210.74 listed in dnsbl.ahbl.org]

[209.85.210.74 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.74 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.74 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.74 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

[209.85.210.74 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.74 listed in list.dnswl.org]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

1.2 MISSING_HEADERS Missing To: header

0.6 J_CHICKENPOX_74 BODY: 7alpha-pock-4alpha

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.74 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.9 REPLYTO_WITHOUT_TO_CC No description available.

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

2.4 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} Order W19S7LLP approval record



--000000000000b974ee06494b3669

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64



T3JkZXIgVzE5UzdMTFAgYXBwcm92YWwgcmVjb3JkDQoNCk9yZGVyIFcxOVM3TExQIGFwcHJvdmFs

IHJlY29yZA0KTW9uZGF5IEphbiAyNiwgMjAyNiDii4UgODoyMHBtDQpNb3VudGFpbiBTdGFuZGFy

ZCBUaW1lIC0gUGhvZW5peA0KDQoNCg0KTm9ydG9uIFByaWNlIEVzdGltYXRlIERhdGU6IE1vbmRh

eSwgMjYgSmFudWFyeSAyMDI2UHJpY2UgRXN0aW1hdGUgTm86ICANClBDNTMzNTNVSFo0MjY1U3Vw

cG9ydCBPdXRyZWFjaCBMaW5lOiAoODY1KS0yOTEtODU1OU1lbWJlcnNoaXAgSW5mb3JtYXRpb24g

IA0KRW1haWxIaSxUaGlzIGVtYWlsIGlzIHByb3ZpZGVkIHRvIGRvY3VtZW50IHlvdXIgbWVtYmVy

c2hpcCBpbmZvcm1hdGlvbiB3aXRoICANCk5vcnRvbi4gVGhlIGVudHJ5IGJlbG93IGlzIHNob3du

IGZvciByZWZlcmVuY2UgYXMgb2YgTW9uZGF5LCAyNiBKYW51YXJ5ICANCjIwMjYuKipQYXltZW50

IERldGFpbHMgUGFuZWw6KiotIExpY2Vuc2UgS2V5OiAgDQo2NzdjMjliMy02NTdjLTRmY2EtYjEy

My0xMDQ0MzU1YTcwMjAtIFByb2R1Y3QgUHVyY2hhc2VkOiBQcmVtaXVtKyAgDQpNZW1iZXJzaGlw

LSBTdXBwb3J0IFRlcm06IEZpdmUgWWVhcnMtIFBheW1lbnQgU3RhdHVzOiBSZWNvcmRlZC0gQW1v

dW50OiAgDQokMzgwLjQ0LSBSZWNvcmRlZCBEYXRlOiBNb25kYXksIDI2IEphbnVhcnkgMjAyNi0g

UmVmZXJlbmNlIElEOiAgDQpSMjAxSDFXWlZRWW91ciBtZW1iZXJzaGlwIHdpbGwgY29udGludWUg

dW5kZXIgdGhlIHN0YW5kYXJkIHBsYW4gc2V0dGluZ3MgIA0KdW5sZXNzIHlvdSByZXF1ZXN0IGFk

anVzdG1lbnRzIGJlZm9yZSByZW5ld2FsLklmIHlvdSBoYXZlIHF1ZXN0aW9ucywgeW91ICANCm1h

eSBjb250YWN0IG91ciBzdXBwb3J0IHRlYW0gYXQgKDg2NSktMjkxLTg1NTkuV2lzaGluZyB5b3Ug

Y2FsbSBhbmQgIA0Kd2VsbC1iZWluZywsTm9ydG9uIDM2MEJpbGxpbmcgQWRtaW5pc3RyYXRvcjog

Uml0YSBSaWNrZXR0c0NvbnRhY3QgTnVtYmVyOiAgDQooODU5KSAgMjIyLTY0NTJPcGVyYXRpb25h

bCBBZGRyZXNzLDogMTQxNyBCcnVzaHkgTW91bnRhaW4gRHIgTmV3IFlvcmsgTnkgIA0KMTAwMjUg

VVMmY29weTsgMjAyNiBDb21wYW55LiBBbGwgcmlnaHRzIHJlc2VydmVkLg0KDQpPcmdhbml6ZXIN

CkF1dHVtbiBCZWNraGFtDQphbmt1c2hyYWozNTA3QGVhbm9zYS5vcmcNCg0KR3Vlc3RzDQooR3Vl

c3QgbGlzdCBoYXMgYmVlbiBoaWRkZW4gYXQgb3JnYW5pemVyJ3MgcmVxdWVzdCkNCg0K

--000000000000b974ee06494b3669

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-microsoft-com:office:offi=

ce">
t=3D"text/html; charset=3DUTF-8">
=3Ddevice-width,initial-scale=3D1">
ight dark">

Web/SEO/App Spam from Microsoft Outlook Part 2

Posted by Dave Yadallee on
x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?58W/I76BVnSDw5imQomcIDVQvtG1zv381lrkXEWeE0obhDmccKqQRkTD?=

=?Windows-1252?Q?h1w/AF9BC7PMfxoCwenD/zrULDnuybE9Yce6keJOzfN/6eTz7tuaQxKB?=

=?Windows-1252?Q?PoWAK2XMOTSsPgKt0s/amUHtJyZgSxXIbnRFCf+t9Iwc6IeYBsObGkPA?=

=?Windows-1252?Q?Pb+FoIy8LJMZg68Sue+S6YxCzdT24qTQQTtCYx43GOXTZk8VPSzMHN1O?=

=?Windows-1252?Q?HFMCHxoHKkIQQ7Yo3tTs0lGvC4w52pSFQEe/LymcTlb2CH0G4WNG/ydp?=

=?Windows-1252?Q?4+DR8sPGpWXEvwa1eRNlAKBDmVYo2RIF1AAP1Ky1l+C0DvHa3gEhTEx8?=

=?Windows-1252?Q?Iwj3NtNrFL34uVHz1iThwb2S7SYFSthU+sX1cCCwmCn8f1kBECy2nZE3?=

=?Windows-1252?Q?O3GU9yv9RRoLyktCvfuBp0cxAGyhJ8b+LwxvKzPWLaJSSgvxaXOs7Q5r?=

=?Windows-1252?Q?bbXX14YQoNHwJP0KsaNWaKGZxzmXqf7KWE8uiJpw45W5nfECvPEyHopR?=

=?Windows-1252?Q?o1othYJRNH45+emjqFq51YTS95pxEEmFcg4iMamYUscp8PUwxF1u62/P?=

=?Windows-1252?Q?VT8x6hfl5fQTxI7RXJB20pX2WFF/dk0iLp14wBkxY7KKaZUVo+skfr0R?=

=?Windows-1252?Q?YkmtwbYuvrFxNeeMEgyvkXqXHNaSWoRYdSeTPzrvZlH/DU/NGHm7hx25?=

=?Windows-1252?Q?CMiFwK2Oe23V+0tol9mSd/YGzSG2FMO4S5NIN/ih72E2D4xQO855clOc?=

=?Windows-1252?Q?6wWRVmReoPQqGZQSF86T+4h965sqQzDfdhb+ONaGAEDCI3ccpBEzWaHA?=

=?Windows-1252?Q?zmceHoVxEt9oe8hGzxFvy6aQINal4aVxpG9DAc9t2ZVXwU5GLUqJ/mEi?=

=?Windows-1252?Q?p+YDIHsloLadCQbgyVfkoSexlQdxQ3+iXwk7dVLlNFyBKATwi6HCm1TR?=

=?Windows-1252?Q?eZqP+zd5gxyZjqqTX9eY1Bmy9UVLEums9j6vgOqS8ygI06pTOdfgOw2t?=

=?Windows-1252?Q?A4fcqyzkO7Naz+U9QWtm6wQwqUlTcuG5XVYeU2DkC3+0MqAdv81W1N9F?=

=?Windows-1252?Q?Yds+ZqVut2VOSLBK/UwdCpCTg0rT18cnzQoXNHbvR+xAtpSKKB0HmolI?=

=?Windows-1252?Q?3enHlOTHAZckm6vMFjO8MM22jL4V1rJlXv6A/dw8MUDqYDBukCWaDFOt?=

=?Windows-1252?Q?Qf52WzRRYvsPmmR2xUn3cpmFH59C9jatnT4izrlyW9LDVP95cvL9fGOa?=

=?Windows-1252?Q?G6jo32I5E5w2nHyYlXyqSURPTnu8FPuAjOLl3vi0KSz8CGylziyNZ+sw?=

=?Windows-1252?Q?XD0v7W+rRH/zxqkkKaoD99zVI5OIq9gzKFrwmwCKSnWDT0uK2gmGBJTe?=

=?Windows-1252?Q?6Ify9YkGxGpEIQPZw43EhXPPM069kZOVS1GnEe+ZoQhSIEvb+mGOyyU/?=

=?Windows-1252?Q?/dDmWZWKgQMMsNNRaM6oeoaiKqwjY4VuDl8Tq8npqgB0Baz6/91sZ00/?=

=?Windows-1252?Q?hZwAvxErpqX2ksMC1mu+VnADsVmyZyJgX9blqq8MhUgC5gw4W6QtTr/s?=

=?Windows-1252?Q?POhv3K0WO2k2Lb/lFpF3pIX9rLRHiaQVeIUfVQ=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_SE1P216MB24698EB4D6C744BE380C82938B93ASE1P216MB2469KORP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SE1P216MB2469.KORP216.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: a8169d5e-b395-46dd-9e61-08de5cd97496

X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Jan 2026 12:50:16.6470

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PU4P216MB1950



--_000_SE1P216MB24698EB4D6C744BE380C82938B93ASE1P216MB2469KORP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable



Hi,



I personally visited your website when I was browsing it.



In order to significantly improve these search results for you, I would lik=

e to send you an Ranking report of your website.



Can I Send you Quote=94 and Cost/=94?



Best regards,



--_000_SE1P216MB24698EB4D6C744BE380C82938B93ASE1P216MB2469KORP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" clas=

s=3D"elementToProof">

Hi,



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

I personally visited your website when I was browsing it.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

In order to significantly improve these search results for you, I would lik=

e to send you an Ranking report of your website.



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Can I Send you Quote=94 and Cost/=94?



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">







_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Best regards,








--_000_SE1P216MB24698EB4D6C744BE380C82938B93ASE1P216MB2469KORP_--

Web/SEO/App Spam from Microsoft Outlook Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 26 Jan 2026 05:52:00 -0700

Received: from mail-koreacentralazolkn19011025.outbound.protection.outlook.com ([52.103.74.25]:35512 helo=SLXP216CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vkM3y-00000000Iql-1MbS

for dave@doctor.nl2k.ab.ca;

Mon, 26 Jan 2026 05:51:37 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=B66AAqzbx6LlDqeKEWnu/4awIxYb0Wb9CkbmFpU68z5ye5lYDb4V55izfR0PW5XsKfYZKlZ4Lx/hxJpIp+Rxnz3pNHDubJQyWaU+vXBxiy4VvnocM/z25U7PdV9Frb79HYLQl+Z/mMK2JElbn8gUhT/ZI7ram6a4li1eSoABQQaMqqs7dk48FWgcwOrvpKUccrEgronyRMOHYc2gH4YUUYskzAfJOV1qDx2s1nadRwsz7u1e1ycpjXt4V0fSj2bOVUXdxZv9W58g5iZxabPrb/gKvP54XmaRzZfIZgMaE+w0ha0d0MdmPdr/FnI/s4IishY/Fs5JPMFg1fVDyNJcDg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=xvZ2srNKhnoAi6VNxxlxnlUYE9JrszO3MeaQlWh5bEs=;

b=Q3qcFhJsl+nqAma3sYsH+D+JuttKpEfDAa4tbMHroJMEmV0Onzhy4yqkOpeeikc1HmKJC34YIX1LP2gheaVg9HzhL2a1zYgri7t82ECsnz4fFFMrL7JeCy+Wgx4lEXPW/ZI+uu3uyvneTWPvyH0ETj0uxXiY2XCN4nowRDi0V4Lk5WaLfdclZXNqb7fLH0CasZeSrrHDAyjQIGBSI1dVR7TjB5POK3xR78mMuu/iAUvryVt/hr7OhpI93djjxYDIidB6xFb38FJedy6GyK50f0di22y/4lYtvhHiAqwLLhv7lol2Hnxnxs7J1Np/L/2tdYngEciJTZxOpq9MsHgNUQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=xvZ2srNKhnoAi6VNxxlxnlUYE9JrszO3MeaQlWh5bEs=;

b=S63Ovfe7Gj2RLEv7nqp7Q9TmuzHeCBiXqWvhkU5Cw3qkm8B2fSRg/GMgfkJPCPkfnI9HY6b2Y/RTKwzUqtL13oQzObCxxRtlfz4sG7z2O5koqlLz57b5XdfWcAKG2cN6RqJEtreESoauPFw2Ws1jBx1P51IfPNwsFlJxpWV/pm4U+8o5JndvWURXButeXOIYDh4JnNNF1pERWDj4OuP9/LNDENrON1ib1u01TMbC1KbjoxBZUtbKFSj6XGDxcllgVVQ7JkwBmRl7yifujCb2soMG1a8zGbcTtpkIw/GRnqIIIVes69a1Cn4CgJbH52G6XRgYwSLcmAJtIIMK3PC74Q==

Received: from SE1P216MB2469.KORP216.PROD.OUTLOOK.COM (2603:1096:101:1ca::5)

by PU4P216MB1950.KORP216.PROD.OUTLOOK.COM (2603:1096:301:108::10) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9542.16; Mon, 26 Jan

2026 12:50:16 +0000

Received: from SE1P216MB2469.KORP216.PROD.OUTLOOK.COM

([fe80::5c52:ef0f:6225:12d0]) by SE1P216MB2469.KORP216.PROD.OUTLOOK.COM

([fe80::5c52:ef0f:6225:12d0%4]) with mapi id 15.20.9542.010; Mon, 26 Jan 2026

12:50:16 +0000

From: Harry Pro

To: Harry Pro

Subject: Re: Send

Thread-Topic: Send

Thread-Index: AQHcjsJS/uavqBGcrEyTybnPcEmYjw==

Date: Mon, 26 Jan 2026 12:50:16 +0000

Message-ID:



References:



































In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SE1P216MB2469:EE_|PU4P216MB1950:EE_

x-ms-office365-filtering-correlation-id: a8169d5e-b395-46dd-9e61-08de5cd97496

x-microsoft-antispam:

BCL:0;ARA:14566002|31061999003|461199028|7071999006|10112599003|19110799012|8062599012|20031999003|39105399006|15030799006|8060799015|15080799012|440099028|3412199025|51015399003|40105399003|35041999009|102099032|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?e+N67QiO9ABd5Z8ewmOVoHZo4srq+GTdwUm0sCJ6VvubiPilXlZDJMeF?=

=?Windows-1252?Q?Q2OYej6dYD313lynjjvhtdcXPOSEfnTpW3DFvTFZQ7f4214RGp4Ro2rP?=

=?Windows-1252?Q?WQSr4H3oGjEQiNtgFSnggWrZ/atmCTxwi6jE5dRThMKGPSBMNiSZcHMQ?=

=?Windows-1252?Q?JwxdTav8kxdamomF/xDxYqCIXU6MBrbYTy/f2ljVSnv+DIKCgNB8N3zv?=

=?Windows-1252?Q?1I2O3Pp6Mz0wdjHFfBaWf3UJ2ayKX3rehexTO+vBTm2oTz7D0Z/7XlZu?=

=?Windows-1252?Q?ngFeLi4+9FsGOzAx4MkjQt3ZkLPRQx/bV0djfpt+DagIoOCasRxSAGo8?=

=?Windows-1252?Q?69A9OrxvLJjz1OGObFQkGjBLDCcr7PfpgeXzTNa7Heua2ZtWojiSK5F3?=

=?Windows-1252?Q?T2sIPfqxMEt9NIaeYEOSafF7XMRei8s3OuXZ8dfgQFF5KTnzYn4a/xJZ?=

=?Windows-1252?Q?FXZ+pbyeu2FzpDUPDDmyVcpVeNSDHom1lKK02tUuhmlv4iplvBb+Ax1Z?=

=?Windows-1252?Q?/NoFrMNfkgS/i7qeR3ysWp8mpCncu10J0v0TZjoL4sBSQEsn9+cIZGBh?=

=?Windows-1252?Q?H+MpFpfsWWBVFozIXXSZipf6jGN7AeasK9PuC9zQ506jhH52izfiEWK3?=

=?Windows-1252?Q?odXQshDYLEWaw+S+q0WPoGHbJ2irKRtthyTiTlBzVLKcifCdbJVHO3C1?=

=?Windows-1252?Q?n3cOtlYP/MkRNwOxfyKBsTMO5CrHo1BkQzljMiZgL1BJQi7W5pZgflaY?=

=?Windows-1252?Q?zkxyq9W+WZOaEVZS4OzujDnPOkU1YuLu5tC1/4XW0KFmBArjezbZJuyU?=

=?Windows-1252?Q?aaLGxDDU4FhJTnbirxQjJK8Qmw0gkyKpCc/dHNpNxPPr0DVrKv4WlXFX?=

=?Windows-1252?Q?A0r5lQESNvbUtrPFR1Y+zzjH1l69PKum8/gW3a3TsroI6FHAQb/zgw/Y?=

=?Windows-1252?Q?wELkRLPj4WfH8NJuaIQWJY0m05Fkv8odjeJqQPIFyDWyJM++TmW92QI7?=

=?Windows-1252?Q?0HsafOeH7Ff7rADJLJ7MGrMahFfsxqK1Gzm8bGL3Vr7U0dD2JDgdRgMu?=

=?Windows-1252?Q?WL0/l+ceqLtB5OXagSf7+CbUljtINwAlxf6w7aTBXwiMtTjC98hP61VL?=

=?Windows-1252?Q?BbbnK10GsgZWIi2Z27vllz/0kwONhUHb9snKIiDM7WP/4DVqvnAOpTb0?=

=?Windows-1252?Q?rrzano2vOcnmi0M3iky5yaaxy0ughD4Hx2vW5rplZrohGtuMsQPsAuE5?=

=?Windows-1252?Q?B2RrGbnR/GSiXTC8zuJZIyV67ibFKfoJrA4RDxF3Fdfe55jY2nFrUmJY?=

=?Windows-1252?Q?+5Iofqq5qwsVt2qAGXj+awJbT9KRqC7/NrndeG+qO42uBsqDiJeMREBh?=

=?Windows-1252?Q?0dpZkbfx9xcTk/Lp1jytHqIw8nAAAAthgLSWtniT+7Uq1anyFIKg6vNV?=

=?Windows-1252?Q?tbusZPmBJa0RWsbelOSPEjOLIKuVRTtu1YEGofgwVd/yOKV58CkY/HcW?=

=?Windows-1252?Q?Yphoz0sSGU0aG5Pkawt1O6KdD8/oqw=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

Domain Name for sale spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 25 Jan 2026 12:29:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vk5mP-00000000OCb-0maL

for dave@doctor.nl2k.ab.ca;

Sun, 25 Jan 2026 12:28:13 -0700

Resent-From: The Doctor

Resent-Date: Sun, 25 Jan 2026 12:28:13 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f195.google.com ([209.85.210.195]:46167)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vk4Cu-00000000FhO-1i2R

for root@nk.ca;

Sun, 25 Jan 2026 10:47:36 -0700

Received: by mail-pf1-f195.google.com with SMTP id d2e1a72fcca58-8230f8f27cfso1555878b3a.0

for ; Sun, 25 Jan 2026 09:46:41 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1769363196; cv=none;

d=google.com; s=arc-20240605;

b=F7HLRe5Y+smvvWjrIxQYYTN948DbsjvIzIOidFItVCqwYTyBDEnGHlO8Ck+f+Lh7Vb

A0nvwdVEfs1GNCwKElKhDi4128j0d0WW6gfmiOZ7UOpdHQE7SgsuIYaFIJXHPtBTdQ8p

3WQ+ZCjRe2hFUqw2rbTWhwJsMMiitOBY630es8bVuoDb0eINTut+N92jSebTN5X+8oss

FNW3gpVIn2CmeNDxD0vF7BFyakWJEH1qnEDcx7fVULBExRd6+OuTaKtRbRExg2UnC+la

M6ouVarQZfelyRsbtTUFJDSGhxYgeTWdMZHttaYKtTbuKq87xg+FxbzNXFkDNvbqN1w5

LTew==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=ln0gNQsWUbV2SU37uIzZhTUl3R7NKzA2W78HPcEoTlU=;

fh=ny7+SATv4n6lSNl0rVMQyaj6POVJTUZJLShjjgjSTJg=;

b=EO88/vm6LuGvlKvWyaxznDtjCTUJse5Jp5BfXj+yM1rMEVb3Eq9xY3eO04wz0zm7Bw

eLdZ6wS5ml9phaiS69DBNlDgOpvNcLuS1pX6ehf5zwIVRmE/aUIz+cHaw6t24pPE3eVB

n2gMtb7DpxCS7l4YU8oUrvufTBSkuishVcVbFR87EheZSQPq78VbDslBxuATOKFM9uBd

OTvDGMmIidgbLD2oxz6C1FPbYuPpwiEpoz8UUmA+jGPX89wVn/6bCn5NhlGd4qdYLYhK

F71VHMVL1nT/jyRXtH9vAOUCUaEDjqPzeaSoXSOY3mtpsj7qIrUJMIuta2scmQKUjIWW

BHWg==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1769363196; x=1769967996; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=ln0gNQsWUbV2SU37uIzZhTUl3R7NKzA2W78HPcEoTlU=;

b=VN0ZFRkdq+txIrFj64o71HCUBbWOVijUYewfWHWHIuI76vrEoUT/AI7mSwKcWGugWO

3U//zYicuw+FkpnNfTvM+LkHQS1o9iSLmEhbhgUgS7F+kimdNDb018ECnnjeU7vZ/2vP

wvM27fH3yD3UlkjW1j9aNp/sf2EOq/jTufN31wrXgY/MGIa9wgGyfXoK/384P59wtXvq

jsvh8CY8l5NOEFsSLK6ZTplGKGB6435AhKP9cQCOs4XQyqUk61iKRnrcrer0mzpNR4P2

QXHzPJm91rqAf3a5Xfpv0JZYj0EFGyLXYqUo/LMWvEVyGsbj9tGWQQzRvPMR93n/Ehyo

YA3A==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1769363196; x=1769967996;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=ln0gNQsWUbV2SU37uIzZhTUl3R7NKzA2W78HPcEoTlU=;

b=CVJEUd61q57NXV7i0qV8iNvgRfDRTTM255O7joTNx3OKk9bcjgIJhhf8ngyWUstdrG

Z0ma1kAY0ARhm4PhrVcINK659wPXsYkKJM2q/0MhN/z4VUE8jLkLM5i6/jm1KhZU8ppt

XeJq8OMnQXzBA0rCCitOmsIK9BefndIjkkygJGUUxU3qveWG9IwRS66d7ui38mb2GLMz

fqpKkD9s/ev6v7jxandYGvaK8KVcpbqFChPjthxKxPDqz0Y+12Ibq+D8t3f5nN5tLQES

MklvAD8hSKP44tvw6Egtp1+AR7ObeV/t8a8FpZNRwq+jfEVPg+CbwIBE2uRCJJ5k+RWu

IoFg==

X-Gm-Message-State: AOJu0YzPcpE5DAn3fRkvQQQnOZjIDmZ1IU+MLDlAndZifr+xICUzmdYy

3Uf/1CynJp70nt2AZIzoreL6DzUhEpPFYtkkjRc2tPVFLAZ1W5DlboF3ebeWj3EWL4P2ZEFrkfj

esZCcfHrrLqHaS1MAGH7PfzJ+D2iudDF7WLaIHXA=

X-Gm-Gg: AZuq6aK5wEe+v0E3EKgcqalQZ40H3JOi94jZlb/OKXB+PL53qTQpH5XqYGypd6V72/b

zEOr3O2873Pe112092yqygTK/QTwiXJ457s/RtU79ZeU1zrvU9QXPU2RadLEln982VMj25tfWUh

OS6C+waODpMvONNDWF/dpqm0CaEUjsgg5PhZfRL3lits3MwEQjr11v5CfOu83hjcMBEwy/V+0nV

l68798+NZmYWNqBLBdbj3YyUziOMAqjPfu1v1vx+l56ayJyiAbsKTDRGm5b3os+j/xiuruwFc8=

X-Received: by 2002:a17:90b:1f81:b0:343:b610:901c with SMTP id

98e67ed59e1d1-353c4186d44mr2027286a91.26.1769363195481; Sun, 25 Jan 2026

09:46:35 -0800 (PST)

MIME-Version: 1.0

From: John Riley

Date: Sun, 25 Jan 2026 18:46:24 +0100

X-Gm-Features: AZwV_QjfvAM00V1TYtsIUhb0K7SboEku5NPTueGGOiurfhwRa_nXb8j4GaJSHA0

Message-ID:

Subject: EDMONTON VOIP

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000bed293064939f867"

X-Spam_score: 6.4

X-Spam_score_int: 64

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, Are you looking to strengthen your brand and increase

your online visibility? The premier domain www.VoipEdmonton.com is available

for purchase at Godaddy.



Content analysis details: (6.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.195 listed in dnsbl.ahbl.org]

[209.85.210.195 listed in dnsbl.ahbl.org]

[209.85.210.195 listed in dnsbl.ahbl.org]

[209.85.210.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.195 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.195 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.195 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.195 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.195 listed in will-spam-for-food.eu.org]

[209.85.210.195 listed in will-spam-for-food.eu.org]

[209.85.210.195 listed in will-spam-for-food.eu.org]

[209.85.210.195 listed in will-spam-for-food.eu.org]

[209.85.210.195 listed in will-spam-for-food.eu.org]

[209.85.210.195 listed in will-spam-for-food.eu.org]

[209.85.210.195 listed in will-spam-for-food.eu.org]

[209.85.210.195 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.195 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[johnriley.domain(at)gmail.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.195 listed in wl.mailspike.net]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} EDMONTON VOIP



--000000000000bed293064939f867

Content-Type: text/plain; charset="UTF-8"



Hello,



Are you looking to strengthen your brand and increase your online

visibility?



The premier domain

www.VoipEdmonton.com is available for purchase at Godaddy.



This domain would be really good for attracting clients looking for your

VOIP IN EDMONTON



If the domain is developed or redirected to your current website, it would

be extremely beneficial to your company and services in terms of catching

more leads and clients while retaining your brand identity.



You can get this domain for $499 at www.VoipEdmonton.com and claim the

immediate ownership



thank you for your time and I look forward to your reply



Best Regards,



John.



--000000000000bed293064939f867

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,


>
Are you looking to strengthen your brand and increase yo=

ur online visibility?=C2=A0


to">The premier domain=C2=A0

oipEdmonton.com">www.VoipEdmonton.com is available for purchase at Goda=

ddy.

This domain would b=

e really good for attracting clients looking for your VOIP IN EDMONTON=C2=

=A0

If the domain is dev=

eloped or redirected to your current website, it would be extremely benefic=

ial to your company and services in terms of catching more leads and client=

s while retaining your brand identity.


v dir=3D"auto">You can get this domain for $499 at
ipEdmonton.com">www.VoipEdmonton.com and claim the immediate ownership=

=C2=A0

thank you for you=

r time and I look forward to your reply


iv dir=3D"auto">Best Regards,


auto">John.




--000000000000bed293064939f867--

Domain name for sale spam from google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 25 Jan 2026 12:29:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vk5mK-00000000OCE-470I

for dave@doctor.nl2k.ab.ca;

Sun, 25 Jan 2026 12:28:08 -0700

Resent-From: The Doctor

Resent-Date: Sun, 25 Jan 2026 12:28:08 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f65.google.com ([209.85.216.65]:50312)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vk4CY-00000000Ffo-0Ulx

for sales@nk.ca;

Sun, 25 Jan 2026 10:47:14 -0700

Received: by mail-pj1-f65.google.com with SMTP id 98e67ed59e1d1-34c24f4dfb7so1816006a91.0

for ; Sun, 25 Jan 2026 09:46:17 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1769363171; cv=none;

d=google.com; s=arc-20240605;

b=Xn2u3Q0vfkSUm6e+QExOXFUMZksPdUi5+Gb/mMD4u8eZz9mICiYrkI3oKyddRvftZd

oqJE/XuYS7fIDbDGb+3R9qgN3bcgrgodyuIeXbVx9t31vPmcLHQM/EKXgTBOEcEaTUDZ

x4SFth/7dnJH6bBqPaeWiaem29wdosKFnoHtDA09J02j5Pso3rTPOCH33nmUexN5TTRt

LSF3QWTdHRYwKVxX6w7OoQQdd7uBymO6/2U9cicmqq1Wu/uFBTl90TjrvKwJsMXb0VAX

WWp59byqyG60Ww6fZlA8ZGuu9APMHoZB59mX+1stKtbx6BgzskBbjZODJw1faotxNDjV

/svQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=V+7uoyGeCX+WFcCG/O/KO6RCPJGutxOADN/34LriCdU=;

fh=C4vsnDG7cTH8aa/8f7sygxKSfblX4MPDg6mph8A3jUw=;

b=WA8ejYAN03qpczAWy+4tEc032zPCig0e8VyCHWuvbEdnZ0HAi0Wlyp4yIapjwqQRdr

o0HzLNbXGMf/U22KVXAWexo0ICu+b7eo4I8A4lpdYEyDwEkTUN7QkQTwOVLZ/X3IZmwz

4gM9U9dts3u2yWgh0a6Ryx8Q+Ca+3MHiPR7/YRvEzl9zSKgDZULay2kJeBG5Nha2h7nK

jPrFOHnTXr6gthvllshEP1L4xNULHsjuKiCp/tw88vAx1gLAAGxT0+F4vxRdq5Vt9ERJ

IDWHMX/WF0FFt00rBJkj1IsKyzTVaWAUkVQ/NTHiT+iV2t9xSwgsF+G+HVYZWsb518Sh

RFoQ==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1769363171; x=1769967971; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=V+7uoyGeCX+WFcCG/O/KO6RCPJGutxOADN/34LriCdU=;

b=BoCILKaHcbF+o9OKxepm/zIebF2ckPc+2Z8FlRdox9ka9aOW91Ygw2qWMppLkRSVj2

ZLV51YaA67JzxROixMtCUcZTIu1oEaKQCrdzm9s4rdYpYXqxiQxUXiMPAHY1gM35Yy33

ZVH394NCmp7x/GglQna2mankZb9pbrRgMhSfz7UmeQIyLip3PIDe4nIuoY8wQObh5U5e

MSvnAf4sFvWfD6A0GKLCgObai8XPuvcxSaroXwiR6ZiEaxEb78yKGwZQ6qzyIK3Lnrev

xvVjKXkhfSLB0Z+5arSiA1w1rjTG3QRjVWjf+Cbc149d+bHl20ma9dbcDim/MxA2dV1t

3h9w==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1769363171; x=1769967971;

h=to:subject:message-id:date:from:mime-version:x-gm-gg

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=V+7uoyGeCX+WFcCG/O/KO6RCPJGutxOADN/34LriCdU=;

b=cxXPkKo4+WrhkZr4JN6UYOHB5H8HVDE6AhdfZG9mLkzEshS9/23s3j18jFM5oWENGJ

M8JLgGP4MOyDf/gnVoFG78+/QfJOe0HGckWjbAGc5Ua3ubFgOumf1OMASzViDe11jQ/G

bXkNI3Am+dn15IBxqGCdazHx/ej1WnqNDsUZWLoIzt1ybv37HSErJYKOLW9PzIyQut75

mWbIdSxPPx+VS4S9sR/pvKBDYkD5Fgx3+X0nlolkq2pL8gSf+O8936cO3Nvh7RUVitPP

pgwCXIUy7nhQw0QoTg+SsYSmCgfJgzpP9nz7G7JnAl1yAXDOSRjfbE5xEkiNWE3PtgKt

1HpQ==

X-Gm-Message-State: AOJu0YyaABHWiS9IvEAuo/vYUckNo2gwXAoRcQXx2iJNcg+AetUipKP6

B50vIjIVevgmefnaHj17OTBh924Of2XypqJxl1KVhKOJeEuZxSQYzaB7fk2HnwoiNVPwJXfv8Wv

k9X87rkKOQWVZ3N364JtpIvojRaiWGQfgRd6zJbs=

X-Gm-Gg: AZuq6aIZaeWWEc0zbUJ8lBBUl7P8W7yC9XUe8FzqNw9YJ/n/t1i/adjdKjFxG6tqTpX

loijt+9GGsM1YQQIxS7TDg1hxqN2i7CeKbLkL1r2qu+zVTcB4WLO2zxCMO/hLTZ1F+D1gbGYNRt

HHW5sL3lZPz/PWu29VmQjPAYxztFxRWJRJxeKjh8fBPsC2I2WK8WSTlBsvN0diJQybu9nRYUuau

Y1BIWZDNyVksXqsG0XkmBnDrDfqqTNTvBV8dsfn8a+tvCnbiwOqnL2ZEZj5vt+2pH1fBqgaANs=

X-Received: by 2002:a17:90b:2c86:b0:34a:8c77:d37b with SMTP id

98e67ed59e1d1-353c40c6914mr1949501a91.16.1769363171302; Sun, 25 Jan 2026

09:46:11 -0800 (PST)

MIME-Version: 1.0

From: John Riley

Date: Sun, 25 Jan 2026 18:46:00 +0100

X-Gm-Features: AZwV_Qgqpfg24O-wvP61BHAf_zwZhDQGqU_XyUiaJ3wL4u_2XT3AVzg2G7q1QZY

Message-ID:

Subject: EDMONTON VOIP

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="0000000000004de39c064939f726"



--0000000000004de39c064939f726

Content-Type: text/plain; charset="UTF-8"



Hello,



Are you looking to strengthen your brand and increase your online

visibility?



The premier domain

www.VoipEdmonton.com is available for purchase at Godaddy.



This domain would be really good for attracting clients looking for your

VOIP IN EDMONTON



If the domain is developed or redirected to your current website, it would

be extremely beneficial to your company and services in terms of catching

more leads and clients while retaining your brand identity.



You can get this domain for $499 at www.VoipEdmonton.com and claim the

immediate ownership



thank you for your time and I look forward to your reply



Best Regards,



John.



--0000000000004de39c064939f726

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hello,


>
Are you looking to strengthen your brand and increase yo=

ur online visibility?=C2=A0


to">The premier domain=C2=A0

oipEdmonton.com">www.VoipEdmonton.com is available for purchase at Goda=

ddy.

This domain would b=

e really good for attracting clients looking for your VOIP IN EDMONTON=C2=

=A0

If the domain is dev=

eloped or redirected to your current website, it would be extremely benefic=

ial to your company and services in terms of catching more leads and client=

s while retaining your brand identity.


v dir=3D"auto">You can get this domain for $499 at
ipEdmonton.com">www.VoipEdmonton.com and claim the immediate ownership=

=C2=A0

thank you for you=

r time and I look forward to your reply


iv dir=3D"auto">Best Regards,


auto">John.




--0000000000004de39c064939f726--

Loan spam from Google Gmail Part 1

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 25 Jan 2026 05:22:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vjz7u-00000000CNW-1qI9

for dave@doctor.nl2k.ab.ca;

Sun, 25 Jan 2026 05:21:58 -0700

Resent-From: The Doctor

Resent-Date: Sun, 25 Jan 2026 05:21:58 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pl1-f227.google.com ([209.85.214.227]:57495)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vjvjQ-000000006Zf-24mL

for root@nk.ca;

Sun, 25 Jan 2026 01:44:37 -0700

Received: by mail-pl1-f227.google.com with SMTP id d9443c01a7336-2a1022dda33so20822855ad.2

for ; Sun, 25 Jan 2026 00:43:41 -0800 (PST)

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1769330615; x=1769935415;

h=thread-index:thread-topic:mime-version:subject:message-id:reply-to

:from:date:dkim-signature:dkim-filter:x-gm-gg:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=xyiAz+qFQFRgJleyuroZKT/FG0rie6dGemrPIhufYM0=;

b=j373JC4SiWs5e6C/4/5yd2xqoVcwO7Ga0rP1FalRzznX4UQ/NiLaapmmSjy7AfwLlC

b+enwFm6pSydQIEUVGrh2FeiNbMUq+VaZJ9QWaziyaG092AJ5XVVzdZ59ME8NEBuLcO0

+3iQAUKft/qjvMyuEvLBplKVQOaMM0A5TOREbvYomJGN1BuvOMjAAo8814897XBiyJAL

kYNX9/3BjsilYZwChyvWdvB4NQ3ONc4Zm/hWiwXz+z9guXMbI0n7qCWlRq9+iEtIg8OK

C3QJL/JbE7vADyEp9vI1oIsybC29PaRjX+uPFLpnCjy5imSNzEXTGB+MO2SvTEQOiOxo

+HcQ==

X-Forwarded-Encrypted: i=1; AJvYcCWli4ASqYRqpl1x29krpdn8mZkVFf+wIDMv/3t6pXnWYGpRq82ZMhsEcHGia+vaAtwW+WTp@nk.ca

X-Gm-Message-State: AOJu0YwRQtBi7BwQhgiH4kd29bEbzQGAgjhwhucqRKjtsvNgRzmN5eOL

GKd8SvdpEnHjAnzkRobTDXChSCUKeF5I6iQm8KPcrP2J8OXPZrjxKdkgSKa3mrsqfm0nV9lw9sw

BTjMGc9Qye83nKCI87EqvtzalcDGV1/bMYYLo

X-Gm-Gg: AZuq6aLDBIoylD6b4qohxcuQRzXtzcT06X3CyvKs9SwenmhXC5xtKulbg9nLoq5nQ7H

z0MuvtVuZH4kezARjTYlx8jCnut1+qP6kc+YdEIJPIp7XQI9jv/FF+nPmDHk4IUddZUnKudSX9X

tikeI5z8ujleCIGHnYFEm9M5qhiQwPlYXLTGfiMEdC56wDR5fsXPcl38KYFONr9mBghZ03zv1Jr

W0LLaxAbM/xyXKiMcszmz4p9smbZcd0CGD0Z5DXJSnK+feHT88pmJ93Tg3TgMkYd63csVOqzhUP

yUUpwytVPuCiLFdxLq5VCooL3ILCn80ZHeKpWQuQB3lytCYmLvaseEESLxYFNihww/XrFexxn26

l

X-Received: by 2002:a17:902:e892:b0:29f:2734:6ffb with SMTP id d9443c01a7336-2a84523ad24mr10420565ad.22.1769330614933;

Sun, 25 Jan 2026 00:43:34 -0800 (PST)

Received: from mail.activos.com.co ([190.216.205.98])

by smtp-relay.gmail.com with ESMTPS id d9443c01a7336-2a804bef6a3sm6685675ad.42.2026.01.25.00.43.34

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Sun, 25 Jan 2026 00:43:34 -0800 (PST)

X-Relaying-Domain: activos.com.co

Received: from mail.activos.com.co (localhost [127.0.0.1])

by mail.activos.com.co (Postfix) with ESMTPS id 06A0F1752093;

Sun, 25 Jan 2026 03:40:38 -0500 (-05)

Received: from localhost (localhost [127.0.0.1])

by mail.activos.com.co (Postfix) with ESMTP id 21953175208A;

Sun, 25 Jan 2026 03:40:37 -0500 (-05)

DKIM-Filter: OpenDKIM Filter v2.9.2 mail.activos.com.co 21953175208A

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=activos.com.co;

s=3617E2B2-E791-11E8-974D-5040C871AF00; t=1769330437;

bh=fEAiQJpJ/ZkXYaZJ5ERIvobQemAsK9z57oDRa26LTjs=;

h=Date:From:Reply-To:Message-ID:Subject:MIME-Version:Content-Type;

b=SzP/z03VE7o+Ca1ISWDkyyWiX99km9ZQilM8EElQB6cVbQE5Ji9CDxFjswmitdsbd

nUD1+SJnTuqO+qBvvI/elGkUMhGezNoMt9D2Fyhqw2tVmRu/hoDDPXilSp+2b88Fct

uEErswEYr4hf6F6lrjbxatBTSBw0q1Dfom6KE6jU=

X-Amavis-Modified: Mail body modified (using disclaimer) - mail.activos.com.co

Received: from mail.activos.com.co ([127.0.0.1])

by localhost (mail.activos.com.co [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id SgJUA-Qizg5f; Sun, 25 Jan 2026 03:40:36 -0500 (-05)

Received: from mail.activos.com.co (localhost [127.0.0.1])

by mail.activos.com.co (Postfix) with ESMTP id 9DA27175209C;

Sun, 25 Jan 2026 03:40:32 -0500 (-05)

Date: Sun, 25 Jan 2026 03:40:32 -0500 (COT)

From: QIA

Reply-To: QIA

Message-ID: <1799386315.4973921.1769330432525.JavaMail.zimbra@activos.com.co>

Subject: We provide funding for projects....

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_Part_4973920_1697717932.1769330432521"

X-Mailer: Zimbra 8.6.0_GA_1153 (zclient/8.6.0_GA_1153)

Thread-Topic: We provide funding for projects....

Thread-Index: AKBKMd5N/WghFKajlqACJx00A+lALg==

X-Spam_score: 7.4

X-Spam_score_int: 74

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello, If you are currently seeking financial assistance,

our organization offers funding support to individuals and enterprises for

a wide range of projects. If you would like more information about this op

[...]



Content analysis details: (7.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.214.227 listed in dnsbl.ahbl.org]

[209.85.214.227 listed in dnsbl.ahbl.org]

[209.85.214.227 listed in dnsbl.ahbl.org]

[209.85.214.227 listed in dnsbl.ahbl.org]

[190.216.205.98 listed in dnsbl.ahbl.org]

[190.216.205.98 listed in dnsbl.ahbl.org]

[190.216.205.98 listed in dnsbl.ahbl.org]

[190.216.205.98 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.214.227 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.214.227 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.214.227 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.214.227 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[190.216.205.98 listed in will-spam-for-food.eu.org]

[190.216.205.98 listed in will-spam-for-food.eu.org]

[190.216.205.98 listed in will-spam-for-food.eu.org]

[190.216.205.98 listed in will-spam-for-food.eu.org]

[190.216.205.98 listed in will-spam-for-food.eu.org]

[190.216.205.98 listed in will-spam-for-food.eu.org]

[190.216.205.98 listed in will-spam-for-food.eu.org]

[190.216.205.98 listed in will-spam-for-food.eu.org]

[209.85.214.227 listed in will-spam-for-food.eu.org]

[209.85.214.227 listed in will-spam-for-food.eu.org]

[209.85.214.227 listed in will-spam-for-food.eu.org]

[209.85.214.227 listed in will-spam-for-food.eu.org]

[209.85.214.227 listed in will-spam-for-food.eu.org]

[209.85.214.227 listed in will-spam-for-food.eu.org]

[209.85.214.227 listed in will-spam-for-food.eu.org]

[209.85.214.227 listed in will-spam-for-food.eu.org]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.214.227 listed in sa-trusted.bondedsender.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.214.227 listed in sa-accredit.habeas.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.214.227 listed in wl.mailspike.net]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.214.227 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.214.227 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.214.227 listed in list.dnswl.org]

1.2 MISSING_HEADERS Missing To: header

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[qia7625331(at)gmail.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.9 REPLYTO_WITHOUT_TO_CC No description available.

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

Subject: {SPAM?} We provide funding for projects....

Loan spam from Google Gmail Part 2

Posted by Dave Yadallee on
------=_Part_4973920_1697717932.1769330432521

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: 7bit









Hello,



If you are currently seeking financial assistance, our organization offers funding support to individuals and enterprises for a wide range of projects. If you would like more information about this opportunity, please reply to this message and we will be happy to assist you.



Regards,

Cali Al Thani,

Publicity Manager, QIA.

Este mensaje de correo electronico y sus adjuntos puede contener informacion confidencial, privilegiada o legalmente protegida y esta destinado unicamente para el uso del destinatario(s) previsto(s). Cualquier divulgacion, difusion, distribucion, copia o la toma de cualquier accion basada en la informacion aqui contenida esta prohibido. Los correos electronicos no son seguros y no se pueden garantizar que esten libre de errores, ya que pueden ser interceptados, modificados, o contener virus. Cualquier persona que se comunica con esta organizacion por e-mail se considera que ha aceptado estos riesgos. La organizacion no se hace responsable de los errores u omisiones de este mensaje y no sera responsable por daños derivados de la utilizacion del correo electronico situacion que conoce y acepta el destinatario. Cualquier opinion y otra declaracion contenida en este mensaje y cualquier archivo adjunto son de exclusiva responsabilidad del autor y no representan necesariamente la posicion

de la empresa. Si recibe este mensaje por error, por favor notificarlo al remitente de inmediato y desecharlo de su sistema. El destinatario autoriza a la empresa remitente el tratamiento y proteccion de los datos de contacto (direcciones de correo físico, electronico, redes sociales y telefono).

------=_Part_4973920_1697717932.1769330432521

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: 7bit






Hello,

If you are currently seeking financial assistance, our organization offers funding support to individuals and enterprises for a wide range of projects. If you would like more information about this opportunity, please reply to this message and we will be happy to assist you.

Regards,
Cali Al Thani,
Publicity Manager, QIA.





Este mensaje de correo electronico y sus adjuntos puede contener informacion confidencial, privilegiada o legalmente protegida y esta destinado unicamente para el uso del destinatario(s) previsto(s). Cualquier divulgacion, difusion, distribucion, copia o la toma de cualquier accion basada en la informacion aqui contenida esta prohibido. Los correos electronicos no son seguros y no se pueden garantizar que esten libre de errores, ya que pueden ser interceptados, modificados, o contener virus. Cualquier persona que se comunica con esta organizacion por e-mail se considera que ha aceptado estos riesgos. La organizacion no se hace responsable de los errores u omisiones de este mensaje y no sera responsable por danos derivados de la utilizacion del correo electronico situacion que conoce y acepta el destinatario. Cualquier opinion y otra declaracion contenida en este mensaje y cualquier archivo adjunto son de exclusiva responsabilidad del autor y no representan necesariamente

la posicion de la empresa. Si recibe este mensaje por error, por favor notificarlo al remitente de inmediato y desecharlo de su sistema. El destinatario autoriza a la empresa remitente el tratamiento y proteccion de los datos de contacto (direcciones de correo físico, electronico, redes sociales y telefono).






------=_Part_4973920_1697717932.1769330432521--

Web/SEO/App Spam from Google Gmail Part 3

Posted by Dave Yadallee on





class=3DWordSection1>


style=3D'background:white'>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;color:#222222;=

background:white'>Hi,


style=3D'background:white'>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;color:#222222;=

background:white'> 


style=3D'background:white'>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;color:#222222;=

background:white'>Just checking in=E2=80=94would you like me to share =

our seo price list?


style=3D'background:white'>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;color:#222222;=

background:white'> 


style=3D'background:white'>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;color:#222222;=

background:white'>Happy to explain the options and help you choose the =

most cost-effective plan.


style=3D'background:white'>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;color:#222222;=

background:white'> 


style=3D'background:white'>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;color:#222222;=

background:white'>Please advice.


class=3DMsoNormal style=3D'background:white'>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;color:#222222;=

background:white'> 


style=3D'background:white'>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;color:#222222;=

background:white'> 


style=3D'background:white'>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;color:#222222;=

background:white'>On Fri, Jan 16, 2026 at 12:42=E2=80=AFPM <> =

wrote:


style=3D'background:white'>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;color:#222222;=

background:white'> 


style=3D'background:white'>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;color:#222222;=

background:white'>Hi, 
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif'>root@nk.ca
pan>
style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif;color:#222222'=

>


style=3D'font-family:"Calibri",sans-serif;color:black'>=


style=3D'font-family:"Calibri",sans-serif;color:black'>Are you looking =

for effective yet affordable SEO =

services?


style=3D'background:white'>
style=3D'font-family:"Calibri",sans-serif;color:black'> <=

/span>


style=3D'font-family:"Calibri",sans-serif;color:black'>I=E2=80=99m an =

SEO Expert, and I helped over 250+ businesses rank on the 1st Page on =

Google. My rates are very =

affordable.


style=3D'background:white'>
style=3D'font-family:"Calibri",sans-serif;color:black'> <=

/span>


style=3D'font-family:"Calibri",sans-serif;color:black'>Would you like me =

to share our pricing and service details?
style=3D'font-family:"Calibri",sans-serif;color:black'>=


style=3D'font-family:"Calibri",sans-serif;color:black'> <=

/span>


style=3D'font-family:"Calibri",sans-serif;color:black'>Thanks!=


style=3D'font-family:"Calibri",sans-serif;color:black'>SEO =

Team!


style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif'> 
o:p>



------=_NextPart_000_10FC_01DC8D8A.344850B0--



Web/SEO/App Spam from Google Gmail Part 2

Posted by Dave Yadallee on
This is a multipart message in MIME format.



------=_NextPart_000_10FC_01DC8D8A.344850B0

Content-Type: text/plain;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable



Hi,



=20



Just checking in=E2=80=94would you like me to share our seo price list?



=20



Happy to explain the options and help you choose the most cost-effective =

plan.



=20



Please advice.



=20



=20



On Fri, Jan 16, 2026 at 12:42=E2=80=AFPM <> wrote:



=20



Hi, root@nk.ca







Are you looking for effective yet affordable SEO services?



=20



I=E2=80=99m an SEO Expert, and I helped over 250+ businesses rank on the =

1st Page on Google. My rates are very affordable.



=20



Would you like me to share our pricing and service details?



=20



Thanks!



SEO Team!



=20





------=_NextPart_000_10FC_01DC8D8A.344850B0

Content-Type: text/html;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable




charset=3Dutf-8">


xmlns:o=3D"urn:schemas-microsoft-com:office:office" =

xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =

xmlns=3D"http://www.w3.org/TR/REC-html40">
content=3D"Microsoft Word 15 (filtered medium)">