Web/SEO/App spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 07:29:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQluN-00000000ObP-0wsL

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 07:29:07 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Nov 2026 07:29:07 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19013077.outbound.protection.outlook.com ([52.103.74.77]:5401 helo=SEYPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQk07-000000000PL-0ysK

for sales@nk.ca;

Tue, 10 Nov 2026 05:26:59 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=qVDsI220IIkdrPIEqJUgaM68InlZsgyIsmkVDc17BTzjCcAmz3JBT4M9klUiODIujLj9Ry4sTKuT7VArz2EuWo7gt+HBP5EbmohUhzIe7C7uH4U7E2/Ju+L11qepv8iEx/adLFjzjHaAh62F3fWChnuAFaHxNIkEc1djBC0v2Ebl3gxA0J4cGBwf59hHn+CjeVKCNAhBk444xpJC6Ibq8mb/7lJU+l0gysOPw437QPhrpb9EwNg4yxLxRH98CKNREfQsylkG3UzY62Y92aXHU4T3g+BHJFcfIKpDGvfan4BSeQAI5IM6Nii1KH54PUB2Ax30PceGAjsVKeXg8tm9Lg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=L26LYtdLvpKY99ojKt5c/EhB7yjAbyRso5Q/BLaTqes=;

b=Gv6M9hb2Vgpc/t5y42+aVDU4hECygXbM4DPPo/KRPbpATkV/OGoKFHtUM/evfxvTJDr1REa5LoitTeFbRMydqHUissBG05QcWfmJ2g2Oby0At9GufozBqeQfQGYireqbi8C98u/KaNFne/CuQTI/j1mjUaj/UUIbV+99mrMND9wJw/TkcdjUobgmiTUd4y0zYwVlIFLdiAo8r+RNEafN7aGbXf300CrgdrVRXkwAozEsh7k1SiB7m5pPYz3x8QNyUOlK9Ex/ueS5eKYUm94ex8bgXBGPCY/U5x5cBxBXoLPpktNsE2JVsFiW/PVg3XW78w+sYfEt0L6xH1UVyNMK0Q==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=L26LYtdLvpKY99ojKt5c/EhB7yjAbyRso5Q/BLaTqes=;

b=dd3mseL9yHKA3CSTIapTuFElQmDEsY20FxsIwgX0/rGmUFz+7OGAVbOVq6CSZnWg7vhG/a7IVyFO5ISyM8GelF6qIYBka36NV7ckiIJArTe5o6U0XBfoSt0xe+V4/k9j2aG6O8WFX4kHf6zBqGmYKcLHtE0kCktcud0jpHVq3al4YCcJ7y/2xYdXX6PGYhWsas4VPKc68NAzPcTYvGAasyJ4vhEg9ys0gqZytkFThuPWPAFlxXRCsbN0Ix43g2Yq5+Bek+zJFAPN5fy/bG/2dfAbR+lSZuFcPKgGKnlaVmGdTpYp9UI17hMPOQAsU112wq6CfgmC3K/eKyQUxYi5EQ==

Received: from SI2PR04MB4731.apcprd04.prod.outlook.com (2603:1096:4:127::5) by

TYZPR04MB6788.apcprd04.prod.outlook.com (2603:1096:400:341::9) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.21.592.13; Tue, 10 Nov 2026 11:25:26 +0000

Received: from SI2PR04MB4731.apcprd04.prod.outlook.com

([fe80::736e:82d3:f5e1:8a2d]) by SI2PR04MB4731.apcprd04.prod.outlook.com

([fe80::736e:82d3:f5e1:8a2d%5]) with mapi id 15.21.0592.012; Tue, 10 Nov 2026

11:25:26 +0000

From: Harvey Kitelinger

Subject: Re: Few Details

Thread-Topic: Few Details

Thread-Index: AQHdbGMmbAiUNHk930ihSOavTvRNwbcfIVw6gAHl8aKABiwzzw==

Date: Tue, 10 Nov 2026 11:25:26 +0000

Message-ID:



References:







In-Reply-To:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SI2PR04MB4731:EE_|TYZPR04MB6788:EE_

x-ms-office365-filtering-correlation-id: de9d733b-1462-4b20-1b44-08df3f1d5190

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799012|20031999006|15030799006|24071999003|39105399006|31061999003|37011999003|8062599012|55001999006|16051099003|19110799012|8060799015|4140399003|24021099003|25010399006|440099028|3412199025|102099032|261005200801699003|261007181701699018|11120399003|260806224601699006|51015399003|40105399003;

x-microsoft-antispam-message-info:

=?us-ascii?Q?WZkkCa1Ah11PQo5QrnTt2QsWByvqdaXqXuPOEaNipClvtOXnB9FMf7Puo7Vt?=

=?us-ascii?Q?9EXJV3LO0NOJ5hdUjJZhqEX+dUKFXKtM7Flcew1EH1+Sa072UPeG3AGjm2bp?=

=?us-ascii?Q?DLTOPLqd+yq7DDARjbxDLTsg9tXxz2duybwIHhx8rIrnPNEmuR+s8rwONEdT?=

=?us-ascii?Q?bX2OFMmFLwodxV9lr0PdtTdxOZdF/TfaeK9ZbaniH6+fqIsh5bq4MMV1GGDm?=

=?us-ascii?Q?34N5ZQf7WMd82fnFj6g3bT+kmdmY/PFik4aZZxx3lkemtWJlTLZfn7qhxoPd?=

=?us-ascii?Q?167Mkqb1Kd1kc3ZdedMg/1s3elm+HBCl6B0D3jlc2y0V/kHWX+JPqT/qDLeD?=

=?us-ascii?Q?UhHE9U1nAbNjNU1T66YpWd/e9dq518hDSQVs/zCi/RNVF3/91lMXcZzcIpoF?=

=?us-ascii?Q?24OePuPxOmx5qMI4jpT7wORG72VhX1UwvdG4tFSdzaYIIa5oqNDpbs4snuPR?=

=?us-ascii?Q?x3vCNYfcRWGwv9sN04z4+2VLl9y2cfJ3gXoQbjP6GwE4LhslrF7Pv+40BTR1?=

=?us-ascii?Q?WUM9/7N7ZAnbcw1CS/x9LJtC9eHeIvpE/7uyks0WjsTCBboRMbNpXJsNYJKX?=

=?us-ascii?Q?j086VmYUIyvKl4eub4NIn7oi0JlyoaS12tLQfQ+KIDSLOPjvwqTfIdqtzFgr?=

=?us-ascii?Q?kcJEghqxwkErJqayDSGOSyzMSQlOYAaZfuYtgQBWbPy/dd6XTkXCI8ryLtLO?=

=?us-ascii?Q?Yr/CQCaZpggFbE0A9BFoRMMVSreQgoUEYtN0GwAoiqE6JY/HqsYzqbXV/cGu?=

=?us-ascii?Q?n81CwIYo+kiuSUPB0Phts6pCgbaU7MphclNyWQfxdxwvajsRhmFN9gYXLEea?=

=?us-ascii?Q?jETg9gXV45u+Wi0H9VZVTkLmJt32P8I0leDfFcZ/EQypdXxRMcHQwNIiBX0R?=

=?us-ascii?Q?LNr/Ymx88dpUQ8aeqGvK+cNwbxQRdr/vc91ZHeuyjfsxabXumeO3fJVh22yG?=

=?us-ascii?Q?GJ5CHyDyJf1xFIiIGrn+83DnjjJQL8v4gqDzaZggF2hoyIyeU7o99+xEhdJj?=

=?us-ascii?Q?NtJUpkM5nQWf5rvrxiBn4lXMtX5iJhi+HCzI2wfdp8mtueBr0nrbJLa3DhZR?=

=?us-ascii?Q?0xBNAaAHPXBgnB0EUGBudsVABQfSfvkzR6EXGz0ty4k+6DjOT0wGfiRNtLEM?=

=?us-ascii?Q?mlyUmskWp4Zz44oS2kaPNgOFvFoXUG46NeHt0LSapbE/5LPsEZf233ma9MgP?=

=?us-ascii?Q?JsbU0owPlohkl1cJmYyhLnwQ1Y2/NDNlQZuGYnTKSEdKgULDjdiePW5c6RGd?=

=?us-ascii?Q?wOzM7E5qvGpBUwNXodmA?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?us-ascii?Q?rIly8KvtLvyFJbiPWBQNSS/AjU+wZohT/FsZJ9ElvmAXjEttyLKMlDYleqan?=

=?us-ascii?Q?4T3aUA9373W5Mh6HotQ7/zIgrEps33PLJkllWVdC5rzri2/BA5e7GsETa4O2?=

=?us-ascii?Q?3Zm1DvAI6B0jCkzOpPLxGPEHZ52quuGLJ48Y427xkumxohQ2jv34o6gMF6if?=

=?us-ascii?Q?0MEnCcjacEDs5+JUcXS7sBU+VAQNUfgzNkpUIFTVp0cjoa/9V9Eozuj6C9ot?=

=?us-ascii?Q?nbn6x9DzteNPAzdFsKou2bOeffgsHX32NeZOMnSD26Loq6cyJvQT3lX9pxN9?=

=?us-ascii?Q?7ieoUgcw5FEeYaR4VSz2Qc/JVWvTw6D1QBqNacYbsoS95QQ2mYia0DbF3GfE?=

=?us-ascii?Q?+YEEI/ctq4E78F158ibrm78giM973FZOEhwbtaehKi4gqOVqSDdlhwZJZlqb?=

=?us-ascii?Q?dmXdrlI09jsws5wmJ/IMFTQm/HlQsETY5726VHVyF2McoKE61eVNU52t2S5H?=

=?us-ascii?Q?wk1c+NCkAY3fCHugN1tsBzX6C5QdNGFZF0hYuJlgNMItdWKuiopcqCM67cWl?=

=?us-ascii?Q?h3vJPWujVsDmIZMj7sI1SzZTRyqE39cADMo/qEZNONqk05ID0QRCo6LeqCkT?=

=?us-ascii?Q?nhwaX+AF0/Y8j7oaggBrO7eun3TcV5GYyRghwA3x5E6gtrMCF0Ld9XA8GEPt?=

=?us-ascii?Q?8ifm13yv/exB4X6Oke7iIWETd8KtcZ9Josj4kZs6NnVsQjzSS4+rKlkOpBDT?=

=?us-ascii?Q?kk8WJ23bHvTxgIBNPpZ2bDPIX1tbhtSLEKVw8C9NCe4U2Ogupi9mtgBnnSRj?=

=?us-ascii?Q?DnjpFyWttqNc2K7wTRRoJqxyjmGkUO0FsuV//94lWVCte4p20BgRoQ/KJJRw?=

=?us-ascii?Q?ZDco43dfowDtPzhy0Ghs652juf+NoxhKLgKf0iGQ+3b7uYG+w7oDphH78y3o?=

=?us-ascii?Q?Ucn7hvQJVvNCVs4RIGjBavuRXQK6t8VPwFofBJmqsuXIUAbHCwZ6UVVczyfE?=

=?us-ascii?Q?dXzOda6I14pogSNIenEAYeQWYdA0qi2I1XHV0xL0IIBxgavn7VY4uPRb7A5Q?=

=?us-ascii?Q?jntCsGEvObwEpoRwc58zmRQMWXsXx9oPXs5WbfVdnhBbmlXMsrTS84B+zrAX?=

=?us-ascii?Q?NwLmTKwy2y2aHlNWPfYXuWf/Jii6vpXqtLj7v0cqiX8Gd+ZmWaOqV18ieQXP?=

=?us-ascii?Q?Mq94pJkhw89QFnAIpZiBNltTLrh6V+cFo31lLc9l6OfeB6eB3sYgncbc6eCz?=

=?us-ascii?Q?wiHcYQoL3c8Rma6ylaGcYOesd6oT5jxVmkmJxRgx1gIDPSi8L+g0NzIzWe4a?=

=?us-ascii?Q?kHlKbP+QX87OV3Bb4R5IxMU836x/EzcCQC36aViyAbNoFBsY8IJSKKvOYfj1?=

=?us-ascii?Q?L1ODFeSYB2DZi2yoc20TAIHm8pFZo4lxoQnK8lztjYHd0JrUsz//zPp1ls2d?=

=?us-ascii?Q?Zpn0GF74bmEWBYFE9ATCze+qXbdcCo/1xI/mdvEK0Y6ER2dBLA=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_SI2PR04MB47313615F0AD775B7ACA326EEB722SI2PR04MB4731apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: SI2PR04MB4731.apcprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: de9d733b-1462-4b20-1b44-08df3f1d5190

X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Nov 2026 11:25:26.4890

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYZPR04MB6788



--_000_SI2PR04MB47313615F0AD775B7ACA326EEB722SI2PR04MB4731apcp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hello,

Would you still be interested in hearing how I could help improve your webs=

ite's Google ranking?



________________________________

From: Harvey Kitelinger

Sent: Friday, November 6, 2026 1:09 PM

Subject: Re: Few Details



Would you mind letting me know if you'd like to hear more about my earlier =

message?



________________________________

From: Harvey Kitelinger

Sent: Thursday, November 5, 2026 8:10 AM

Subject: Re: Few Details



Hello,

Would it be helpful to see the recommendations behind my suggestion?

Thanks,



________________________________

From: Harvey Kitelinger

Sent: Wednesday, November 4, 2026 1:49 PM

Subject: Few Details



Hello,

I noticed that your website may not be making the most of the ways people d=

iscover businesses online, including Google and AI platforms like ChatGPT, =

Claude and Gemini.

Shall I share a few ideas?

Best,





--_000_SI2PR04MB47313615F0AD775B7ACA326EEB722SI2PR04MB4731apcp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable








>








font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helv=

etica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hello,



font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helv=

etica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Would you still be interested in hearing how I could help improve your webs=

ite's Google ranking?



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">











yle=3D"font-size:11pt" color=3D"#000000">From: Harvey Kitelinger <=

;Harvey.Kitelinger@outlook.com>


Sent: Friday, November 6, 2026 1:09 PM


Subject: Re: Few Details

 









font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica=

,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Would you mind letting me know if you'd like to hear more about my earlier =

message?



nt,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:=

rgb(0,0,0)">











color=3D"#000000" style=3D"font-size:11pt">From: Harvey Kitelinger &=

lt;Harvey.Kitelinger@outlook.com>


Sent: Thursday, November 5, 2026 8:10 AM


Subject: Re: Few Details

 









m; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helveti=

ca,sans-serif; font-size:12pt; color:rgb(102,102,102)">

Hello,



m; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helveti=

ca,sans-serif; font-size:12pt; color:rgb(102,102,102)">

Would it be helpful to see the recommendations behind my suggestion?=




m; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helveti=

ca,sans-serif; font-size:12pt; color:rgb(102,102,102)">

Thanks,



Font,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; colo=

r:rgb(0,0,0)">











" color=3D"#000000" style=3D"font-size:11pt">From: Harvey Kitelinger=




Sent: Wednesday, November 4, 2026 1:49 PM


Subject: Few Details

 









1em; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helve=

tica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Hello,



1em; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helve=

tica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

I noticed that your website may not be making the most of the ways people d=

iscover businesses online, including Google and AI platforms like ChatGPT, =

Claude and Gemini.



1em; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helve=

tica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Shall I share a few ideas?



1em; font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helve=

tica,sans-serif; font-size:12pt; color:rgb(0,0,0)">

Best,



edFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; co=

lor:rgb(0,0,0)">


















--_000_SI2PR04MB47313615F0AD775B7ACA326EEB722SI2PR04MB4731apcp_--

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 07:28:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQltc-00000000OXR-3qVq

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 07:28:20 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Nov 2026 07:28:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [160.124.75.189] (port=36245 helo=mta75-189.mmglsmd.net)

by doctor.nl2k.ab.ca with essmtp (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQi6g-00000000ENQ-3eax

for root@nk.ca;

Tue, 10 Nov 2026 03:25:36 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;

d=hn.threeway-pipe.com; i=@hn.threeway-pipe.com;

q=dns/txt; s=umail; t=1794302672; h=content-type :

mime-version : message-id : reply-to : subject : from :

to : date : list-unsubscribe : subject : from : date;

bh=wR8hQeolvQYnb4u9wVE+jwZ6V9ZXxmFnnRzOFCS3RZY=;

b=XFqPlq/klvkcmE/9WAkbMPAUGaHyt+vaUp8W0naFadGMapQ3cFbva0O0

Jo9JYbNY5crZDs/y5EBvV+3sA6EJ8MoplxOvL7xrnOSSLOKpLJnE828K4V

vnsd3yINObPAJMeFwjVZ5K2FYygiXiZ4H0BgRQBr1z8FuJhXtGDTQfe7Q=

Received: from helo (unknown [127.0.0.1])

by smtp.hn.threeway-pipe.com (Postfix) with ESMTP id KhBlXAgCiyVP

for ; Tue, 10 Nov 2026 17:13:00 +0800

Content-Type: multipart/mixed; boundary="===============1768781589010434004=="

MIME-Version: 1.0

Message-Id: <20261110171300.93117-{13453:20261110170236-13453-39}-0092902@hn.threeway-pipe.com>

Reply-to: sophia@threewaysteel.com

Subject: =?utf-8?b?UmU6QVBJL1NHUy9JU0/CoENlcnRpZmllZMKgU3RlZWzCoHBpcGVzwqBhbmQ=?=

=?utf-8?b?wqBmaXR0aW5nczs=?=

From: Sophia-Threewaysteel

To: "www.nk.ca"

Date: Tue, 10 Nov 2026 17:13:00 +0800

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Mail-ID: 6af2ddecd1fe1c5a7761f93a

X-Spam_score: 11.5

X-Spam_score_int: 115

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Purchasing Manager, Good day !



Content analysis details: (11.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[160.124.75.189 listed in will-spam-for-food.eu.org]

[160.124.75.189 listed in will-spam-for-food.eu.org]

[160.124.75.189 listed in will-spam-for-food.eu.org]

[160.124.75.189 listed in will-spam-for-food.eu.org]

[160.124.75.189 listed in will-spam-for-food.eu.org]

[160.124.75.189 listed in will-spam-for-food.eu.org]

[160.124.75.189 listed in will-spam-for-food.eu.org]

[160.124.75.189 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[160.124.75.189 listed in dnsbl.ahbl.org]

[160.124.75.189 listed in dnsbl.ahbl.org]

[160.124.75.189 listed in dnsbl.ahbl.org]

[160.124.75.189 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[160.124.75.189 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[160.124.75.189 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[160.124.75.189 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[160.124.75.189 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[160.124.75.189 listed in bl.score.senderscore.com]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: threeway-pipe.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: hn.threeway-pipe.com]

[URI: count.threeway-pipe.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

3.4 RATWARE_RCVD_PF Bulk email fingerprint (Received PF) found

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?utf-8?b?UmU6QVBJL1NHUy9JU0/CoENlcnRpZmllZMKgU3RlZWzCoHBpcGVzwqBhbmQ=?=

=?utf-8?b?wqBmaXR0aW5nczs=?=







Dear Purchasing Manager,



Good day !



I hope this email finds you well.



This is Sophia from Threeway Steel. With 33 years of history in the steel pipe industry, we have established ourselves as a highly reliable partner for the Oil & Gas, Offshore, and Construction sectors.



To give you a quick background, we are proud to have been a trusted supplier to some of the world's most demanding energy companies, including ADNOC, Shell, Petronas (Malaysia Oil), and Pemex.



Our expertise lies in manufacturing and supplying high-quality pipelines that strictly meet international standards. Recent project examples include:



API 5L Gr. X65 PSL2 Line Pipes for a project in Nigeria.



3PE Coated API 5L X42 PSL2 for Chile.



Yellow Jacket Insulated Line Pipes for Peru.



Large Diameter SSAW & LSAW Pipes for Saudi Arabia and Canada.



Because we have successfully passed the strict audits of companies like Shell and ADNOC, you can rest assured of our quality control and material traceability.



Could you please share if you have any current or upcoming piping requirements? I would be more than happy to provide our latest catalog or a competitive quotation for your project.



Looking forward to hearing from you.





Best regards,

Sophia

THREEWAY STEEL CO.,LTD



Add: Hunan steel Industrial Zone, No 9 Xiangfu Road, Hunan,Changsha, China

Tel: +86-13574889509(direct line) | Fax: +86-731-88678578

Web: www.threewaysteel.com

Email: sophia@threewaysteel.com

Skype: zeng.sophia1 | whatsapp : +86 13544036536



P Please consider the environment before printing this e-mail

mailing list phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 07:27:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQlsb-00000000NED-3Nr4

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 07:27:17 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Nov 2026 07:27:17 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx2.freebsd.org ([96.47.72.81]:29297)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQflg-00000000NLm-0kgr

for doctor@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 00:55:48 -0600

Received: from mx1.freebsd.org (mx1.freebsd.org [96.47.72.80])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange x25519)

(No client certificate requested)

by mx2.freebsd.org (Postfix) with ESMTPS id 4jNy7r3Dqfz3Qqm

for ; Tue, 10 Nov 2026 06:54:48 +0000 (UTC)

(envelope-from freebsd-questions+bounces-8594-doctor=doctor.nl2k.ab.ca@FreeBSD.org)

Received: from mlmmj.nyi.freebsd.org (mlmmj.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:24])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)

(No client certificate requested)

by mx1.freebsd.org (Postfix) with ESMTPS id 4jNy7r1Cv7z3QRB

for ; Tue, 10 Nov 2026 06:54:48 +0000 (UTC)

(envelope-from freebsd-questions+bounces-8594-doctor=doctor.nl2k.ab.ca@FreeBSD.org)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim;

t=1794293688; h=from:from:sender:sender:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:mime-version:mime-version:

content-type:content-type:

content-transfer-encoding:content-transfer-encoding:list-id:list-help:

list-owner:list-unsubscribe:list-subscribe:list-post;

bh=iQwqEpbdMzlm/J4JAYqiLj/zhFUEHIw0cxPAF4p0tbA=;

b=MlgVpYI8wg6SKecmfZp9S18mZ1Mf5+nBp3qI5PDVwDgU9D5PvA69S7Cfd3p6CaaDB2S9A8

kSFRFnQ26AhHwvJpDnUxU3hcTsLutu/WNZuKD0l1IIVWK2EYF/38L4FlHs4x/54V9VDI+e

za44ZMklNN8knCrs70nUPcKqBBOv9ZzfV2p9e2LdSNqQG2+X+4OTgs7sNrqaLQ8Z5vxpzH

vO7UjB2Z6q0Nr3g0Q+7110tj9xp80blwOB3kHBzMazY32vaN/zEUiJscZatz3vR3EZh1qZ

h2zLU6Tb8ucLUCtEVwWbypP9zuj2kuP7lHq2NaizQtDK2YbhtufBpeF9iNxePA==

ARC-Seal: i=1; a=rsa-sha256; d=freebsd.org; s=dkim; cv=none; t=1794293688;

b=ZfcxwZwqwldTkWYPNOJnwIUe+QsW8VmdN+/fsJr4ejVwsHqFsPbiQWE/0w4dEtFNXCwho3

oMoO5FIzM+zJENzGz5Ie+O8gJbmCZyE7DWGUbCHpZ8zHj5mse/5CmfYzbi0dAzKcvjnR4w

FpUMvlKDQzFexuB0ivzhUUWvuJeidg9LWqSCgP0V5+upfNbjqmcgZBY2YCc8MXL2oUJAD4

8gCRrpJ02pasxodzxOnTYVUAEdbQ3ietDtSJDH8lBE8eSGn/Z6uJBb2MgEWBwhQRDc35BF

5Hwb6PWNYmMFK6B+CCS/IZNvO+k8nDTqHDhrwLGdbQIFv6Dlf+0qM/TOyPbSig==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org;

s=dkim; t=1794293688;

h=from:from:sender:sender:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:mime-version:mime-version:

content-type:content-type:

content-transfer-encoding:content-transfer-encoding:list-id:list-help:

list-owner:list-unsubscribe:list-subscribe:list-post;

bh=iQwqEpbdMzlm/J4JAYqiLj/zhFUEHIw0cxPAF4p0tbA=;

b=QfCkFG3HO2IY8+RtLD7NV4ztO4SYxij/QU/g4zqovGqWwdJKcQ07iN4aUd4X4eKPTJPO1h

meoMwclYr3bNwWfTfbj1f+N/Pl4/C3Ua9Lt99zhw0pbBM8FSpqs2/9kiwQujJu9jio7AYt

MR5118t3GrAJXEEyUJF6UsBpIaxiWuYnaKo+PL00NH2ZmqYJymXiJBp+T1bH3djFq2xk1l

s5jR1glip7rgxRlGTmzBBAsBuS9W8Kfa7ksMP3J+d21b9B2sn4hTkEdjI6DSNTMUMYYSSF

jlsp0Md4a0ZpJxf6jUzmYiD2iRtzojUIDKj+NWhYfIynHtTiRHzjPYjAW5yROQ==

ARC-Authentication-Results: i=1;

mx1.freebsd.org;

dkim=none;

dmarc=fail reason="SPF not aligned (relaxed), No valid DKIM" header.from=freebsd.org (policy=none);

spf=pass (mx1.freebsd.org: domain of info@zh-live-wellbet.com designates 212.86.125.173 as permitted sender) smtp.mailfrom=info@zh-live-wellbet.com

Received: from mlmmj.nyi.freebsd.org (mlmmj.nyi.freebsd.org [IPv6:2610:1c1:1:606c::50:24])

by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4jNy7D6LKlz6xqwc;

Tue, 10 Nov 2026 06:54:16 +0000 (UTC)

(envelope-from freebsd-questions+bounces-8594@FreeBSD.org)

X-Original-To: freebsd-questions@mlmmj.nyi.freebsd.org

Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])

by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4jNy7C08d2z6xqwZ

for ; Tue, 10 Nov 2026 06:54:15 +0000 (UTC)

(envelope-from info@zh-live-wellbet.com)

Received: from mail.zh-live-wellbet.com (mail.zh-live-wellbet.com [212.86.125.173])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)

key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA512)

(No client certificate requested)

by mx1.freebsd.org (Postfix) with ESMTPS id 4jNy7B5n9gz3Pf5

for ; Tue, 10 Nov 2026 06:54:14 +0000 (UTC)

(envelope-from info@zh-live-wellbet.com)

Authentication-Results: mx1.freebsd.org;

dkim=none;

dmarc=fail reason="SPF not aligned (relaxed), No valid DKIM" header.from=freebsd.org (policy=none);

spf=pass (mx1.freebsd.org: domain of info@zh-live-wellbet.com designates 212.86.125.173 as permitted sender) smtp.mailfrom=info@zh-live-wellbet.com

X-KumoRef: eyJfQF8iOiJcXF8vIiwicmVjaXBpZW50IjoiZnJlZWJzZC1xdWVzdGlvbnNAZnJlZWJzZC5vcmc

ifQ==

Received: from [94.154.32.81] (::ffff:94.154.32.81)

by mail.zh-live-wellbet.com (KumoMTA ::ffff:212.86.125.173)

with ESMTPSA (TLSv1_3:TLS13_AES_256_GCM_SHA384) id 8a8bd45cdcd311f1af73bc2411dfa1c2 for ;

Tue, 10 Nov 2026 06:54:14 +0000

From: Freebsd

To: freebsd-questions@freebsd.org

Subject: Security alert: A new untrusted device added to your Email account

Date: 9 Nov 2026 22:54:20 -0800

Message-ID: <20261109225420.3BA6DD847D887195@freebsd.org>

List-Archive: https://lists.freebsd.org/archives/freebsd-questions

X-BeenThere: freebsd-questions@freebsd.org

Sender: owner-freebsd-questions@FreeBSD.org

List-Id: User questions

List-Post:

List-Help:

List-Subscribe:

List-Unsubscribe:

List-Owner:

Precedence: list

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-Rspamd-Queue-Id: 4jNy7B5n9gz3Pf5

X-Spamd-Bar: +

X-Spamd-Result: default: False [1.55 / 15.00];

R_NO_SPACE_IN_FROM(1.00)[];

FORGED_SENDER(0.30)[no-reply@freebsd.org,info@zh-live-wellbet.com];

MIME_HTML_ONLY(0.20)[];

R_SPF_ALLOW(-0.20)[+a:c];

DMARC_POLICY_SOFTFAIL(0.10)[freebsd.org : SPF not aligned (relaxed), No valid DKIM,none];

ZERO_FONT(0.10)[1];

MANY_INVISIBLE_PARTS(0.05)[1];

RCVD_VIA_SMTP_AUTH(0.00)[];

MIME_TRACE(0.00)[0:~];

RCVD_COUNT_ONE(0.00)[1];

ARC_NA(0.00)[];

MISSING_XM_UA(0.00)[];

ASN(0.00)[asn:43641, ipnet:212.86.125.0/24, country:PL];

MID_RHS_MATCH_FROM(0.00)[];

RCPT_COUNT_ONE(0.00)[1];

TO_DN_NONE(0.00)[];

FROM_NEQ_ENVFROM(0.00)[no-reply@freebsd.org,info@zh-live-wellbet.com];

FROM_HAS_DN(0.00)[];

TO_DOM_EQ_FROM_DOM(0.00)[];

TO_MATCH_ENVRCPT_ALL(0.00)[];

MLMMJ_DEST(0.00)[freebsd-questions@freebsd.org];

PREVIOUSLY_DELIVERED(0.00)[freebsd-questions@freebsd.org];

R_DKIM_NA(0.00)[];

RCVD_TLS_ALL(0.00)[]

X-Spam_score: 7.8

X-Spam_score_int: 78

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: freebsd-questions@freebsd.org A new untrusted device was

added to your email account If this was you, no action is needed. If you don't

recognize this activity, review your devices and secure your account now.

Device Electron on Windows · Frederick Location Frederick, Maryland, US IP

[...]



Content analysis details: (7.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, medium

trust

[96.47.72.81 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[94.154.32.81 listed in will-spam-for-food.eu.org]

[94.154.32.81 listed in will-spam-for-food.eu.org]

[94.154.32.81 listed in will-spam-for-food.eu.org]

[94.154.32.81 listed in will-spam-for-food.eu.org]

[94.154.32.81 listed in will-spam-for-food.eu.org]

[94.154.32.81 listed in will-spam-for-food.eu.org]

[94.154.32.81 listed in will-spam-for-food.eu.org]

[94.154.32.81 listed in will-spam-for-food.eu.org]

[212.86.125.173 listed in will-spam-for-food.eu.org]

[212.86.125.173 listed in will-spam-for-food.eu.org]

[212.86.125.173 listed in will-spam-for-food.eu.org]

[212.86.125.173 listed in will-spam-for-food.eu.org]

[212.86.125.173 listed in will-spam-for-food.eu.org]

[212.86.125.173 listed in will-spam-for-food.eu.org]

[212.86.125.173 listed in will-spam-for-food.eu.org]

[212.86.125.173 listed in will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[will-spam-for-food.eu.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[will-spam-for-food.eu.org]

[96.47.72.80 listed in will-spam-for-food.eu.org]

[96.47.72.80 listed in will-spam-for-food.eu.org]

[96.47.72.80 listed in will-spam-for-food.eu.org]

[96.47.72.80 listed in will-spam-for-food.eu.org]

[96.47.72.80 listed in will-spam-for-food.eu.org]

[96.47.72.80 listed in will-spam-for-food.eu.org]

[96.47.72.80 listed in will-spam-for-food.eu.org]

[96.47.72.80 listed in will-spam-for-food.eu.org]

[96.47.72.81 listed in will-spam-for-food.eu.org]

[96.47.72.81 listed in will-spam-for-food.eu.org]

[96.47.72.81 listed in will-spam-for-food.eu.org]

[96.47.72.81 listed in will-spam-for-food.eu.org]

[96.47.72.81 listed in will-spam-for-food.eu.org]

[96.47.72.81 listed in will-spam-for-food.eu.org]

[96.47.72.81 listed in will-spam-for-food.eu.org]

[96.47.72.81 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2610:1c1:1:606c:0:0:19:1 listed in]

[dnsbl.ahbl.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[dnsbl.ahbl.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[dnsbl.ahbl.org]

[2610:1c1:1:606c:0:0:19:1 listed in]

[dnsbl.ahbl.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[dnsbl.ahbl.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[dnsbl.ahbl.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[dnsbl.ahbl.org]

[2610:1c1:1:606c:0:0:50:24 listed in]

[dnsbl.ahbl.org]

[96.47.72.80 listed in dnsbl.ahbl.org]

[96.47.72.80 listed in dnsbl.ahbl.org]

[96.47.72.80 listed in dnsbl.ahbl.org]

[96.47.72.80 listed in dnsbl.ahbl.org]

[96.47.72.81 listed in dnsbl.ahbl.org]

[96.47.72.81 listed in dnsbl.ahbl.org]

[96.47.72.81 listed in dnsbl.ahbl.org]

[96.47.72.81 listed in dnsbl.ahbl.org]

[212.86.125.173 listed in dnsbl.ahbl.org]

[212.86.125.173 listed in dnsbl.ahbl.org]

[212.86.125.173 listed in dnsbl.ahbl.org]

[212.86.125.173 listed in dnsbl.ahbl.org]

[94.154.32.81 listed in dnsbl.ahbl.org]

[94.154.32.81 listed in dnsbl.ahbl.org]

[94.154.32.81 listed in dnsbl.ahbl.org]

[94.154.32.81 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2610:1c1:1:606c:0:0:19:1 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2610:1c1:1:606c:0:0:19:1 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2610:1c1:1:606c:0:0:19:1 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2610:1c1:1:606c:0:0:19:1 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL

[94.154.32.81 listed in sbl-xbl.spamhaus.org]

[212.86.125.173 listed in sbl-xbl.spamhaus.org]

2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL

[94.154.32.81 listed in zen.spamhaus.org]

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[212.86.125.173 listed in zen.spamhaus.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[96.47.72.81 listed in bl.score.senderscore.com]

0.1 MXG_EMAIL_FRAG BODY: URI with email in fragment

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Security alert: A new untrusted device added to your Email account














us: 20px; border: 0.5px solid rgba(135, 134, 127, 0.25); border-image: none=

; text-align: center; color: rgb(34, 34, 34); text-transform: none; text-in=

dent: 0px; letter-spacing: normal; font-family: Arial, Helvetica, sans-seri=

f; font-size: 0px; font-style: normal; font-weight: 400; word-spacing: 0px;=

white-space: normal; max-width: 592px; orphans: 2; widows: 2; font-variant=

-ligatures: normal; font-variant-caps: normal;=20

-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; text-de=

coration-style: initial; text-decoration-color: initial;">
enter" role=3D"presentation" style=3D"border-radius: 20px; width: 589.33px;=

border-collapse: collapse;" border=3D"0" cellspacing=3D"0" cellpadding=3D"=

0">

lapse: collapse; direction: ltr;">


33px; text-align: left; vertical-align: top; display: inline-block; directi=

on: ltr; max-width: 100%;">
e=3D"vertical-align: top; border-collapse: collapse;" border=3D"0" cellspac=

ing=3D"0" cellpadding=3D"0">



=


: 0px; padding: 36px 25px 10px; border-collapse: collapse;">


cing: 0px;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
style=3D"margin: 0px; width: 128px; border-collapse: collapse;">
e=3D"font-weight: bolder; box-sizing: border-box;">
b(249, 83, 22); box-sizing: border-box;">freebsd-questions=

@freebsd.org

llapse: collapse;">

; line-height: 34px; font-family: Helvetica, sans-serif; font-size: 28px; f=

ont-weight: bold;">A new untrusted device was added to your email acco=

unt

px 25px 18px; border-collapse: collapse;">


; font-family: Helvetica, sans-serif; font-size: 16px;">If this was you, no=

action is needed. If you don't recognize this activity, review your device=

s and secure your account now.

=3D"margin: 0px; padding: 4px 25px; border-collapse: collapse;">


1); line-height: 24px; font-family: Helvetica, sans-serif; font-size: 15px;=

border-collapse: collapse;" border=3D"0" cellspacing=3D"0" cellpadding=3D"=

0">


13, 99); white-space: nowrap; border-collapse: collapse;">Device
yle=3D"margin: 0px; padding: 6px 0px; text-align: right; border-collapse: c=

ollapse;">Electron on Windows · Frederick

-space: nowrap; border-collapse: collapse;">Location
n: 0px; padding: 6px 0px; text-align: right; border-collapse: collapse;">Fr=

ederick, Maryland, US

px; color: rgb(115, 113, 99); white-space: nowrap; border-collapse: collaps=

e;">IP address
right; border-collapse: collapse;">

2601:147:4c00:7a20:5cbc:1d86:76a:75e7

: 0px; padding: 6px 0px; color: rgb(115, 113, 99); white-space: nowrap; bor=

der-collapse: collapse;">When
x; text-align: right; border-collapse: collapse;">11/9/2026 10:54:20 p.m.
td>

0px; padding: 24px 25px; border-collapse: collapse;">


er=3D"0" cellspacing=3D"0" cellpadding=3D"0">


" role=3D"presentation" valign=3D"middle" style=3D"background: rgb(0, 0, 0)=

; margin: 0px; border-radius: 12px; border: currentColor; border-image: non=

e; border-collapse: collapse;" bgcolor=3D"#000000">


olor: rgb(255, 255, 255); line-height: 15.6px; font-family: Helvetica, sans=

-serif; font-size: 13px; display: inline-block;">


18px; text-decoration: none; display: inline-block;" href=3D"https://track=

ingservice.monday.com/tracker/link?token=3DeyJhbGciOiJIUzI1NiIsInR5cCI6IkpX=

VCJ9.eyJvcmlnaW5hbFVybCI6Imh0dHBzOi8vY291cmFnZW91cy1jeWFuLW1tM2dlc2JxLmVkZ2=

VvbmUuZGV2IiwiZW1haWxJZCI6ImNjMDFkNDQzLWFkYmItNGYwYi05ODMxLTQ2MzY2NjdhMDhlZ=

iIsImlhdCI6MTc5MzA5Njg5Nn0.aFRqNspxugjxQzTKcbcPpmKt7wg6WzQ95vCCPFhYWZY&=

r=3Deuc1#freebsd-questions@freebsd.org" target=3D"_blank">

Manage your devices

: collapse;">

ne-height: 22px; font-family: Arial; font-size: 14px;">You're receiving thi=

s email because a new untrusted device was added to your account.
If you=

're experiencing issues, please contact lT Support.



text-transform: none; text-indent: 0px; letter-spacing: normal; font-famil=

y: Arial, Helvetica, sans-serif; font-size: 0px; font-style: normal; font-w=

eight: 400; word-spacing: 0px; white-space: normal; max-width: 592px; orpha=

ns: 2; widows: 2; background-color: rgb(250, 249, 245); font-variant-ligatu=

res: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; tex=

t-decoration-thickness: initial;=20

text-decoration-style: initial; text-decoration-color: initial;">
gn=3D"center" role=3D"presentation" style=3D"width: 592px; border-collapse:=

collapse;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
style=3D"margin: 0px; padding: 20px 0px; border-collapse: collapse; direct=

ion: ltr;">




Guest articling spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 00:22:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQfFv-00000000JBB-0QeV

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 00:22:55 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Nov 2026 00:22:55 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from daprose.net ([70.225.174.106]:61307 helo=mail.daprose.net)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQcta-000000001f6-0NrK

for doctor@doctor.nl2k.ab.ca;

Mon, 09 Nov 2026 21:51:44 -0600

DKIM-Signature: v=1; c=relaxed/relaxed; h=mime-version:from:to:date:subject:content-type:content-transfer-encoding:message-id;

d=mybbs.org; s=dkim; a=rsa-sha256;

bh=FvURVymqdDbwsqhgnbBCfPEsyamWsk9KEWfioxsbrCU=;

b=TqXAqK/p3s7Md9FaVrB2SkEByHv1RNGZJA+VKtfIdD35dadKmAn/HpS0hivPERalh

Z2ybq+ymwQtp+ejUVu1usS6uiV1LBPuD+cxRPVq/JEpwsaljUPSpPIL7F/N+xppopvl

2vnKOITxR/9BNfRAcrN9yCtFtojeXwCxl7okEd4=;

Received: from WIN-QVC5523TPPM ([70.225.174.106]) by daprose.net with

MailEnable ESMTPA; Mon, 9 Nov 2026 21:50:37 -0600

MIME-Version: 1.0

From: admin@mybbs.org

To: doctor@doctor.nl2k.ab.ca

Date: 9 Nov 2026 21:50:37 -0600

Subject: Greetings doctor. A friendly salute from the MyBBS.org Administrator

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: base64

Message-ID:

X-Spam_score: 5.1

X-Spam_score_int: 51

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello doctor, I've visited your website (FRESHPORTS.ORG),

and I would like to ask you to send me any or all of your press releases,

if available, at pressreleases@mybbs.org. Please also add this email address

to yo [...]



Content analysis details: (5.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[70.225.174.106 listed in will-spam-for-food.eu.org]

[70.225.174.106 listed in will-spam-for-food.eu.org]

[70.225.174.106 listed in will-spam-for-food.eu.org]

[70.225.174.106 listed in will-spam-for-food.eu.org]

[70.225.174.106 listed in will-spam-for-food.eu.org]

[70.225.174.106 listed in will-spam-for-food.eu.org]

[70.225.174.106 listed in will-spam-for-food.eu.org]

[70.225.174.106 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[70.225.174.106 listed in dnsbl.ahbl.org]

[70.225.174.106 listed in dnsbl.ahbl.org]

[70.225.174.106 listed in dnsbl.ahbl.org]

[70.225.174.106 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[70.225.174.106 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[70.225.174.106 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[70.225.174.106 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[70.225.174.106 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[70.225.174.106 listed in bb.barracudacentral.org]

0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[70.225.174.106 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 NO_RDNS2 Sending MTA has no reverse DNS

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

Subject: {SPAM?} Greetings doctor. A friendly salute from the MyBBS.org Administrator







Hello doctor,



I've visited your website (FRESHPORTS.ORG), and I would like to ask you to send me any or all of your press releases, if available, at pressreleases@mybbs.org. Please also add this email address to your distribution list.



When sending your press releases, please ensure that the subject line of your email contains only the words "PRESS RELEASE", this will automatically activate our feeder and publish your press release in the appropriate forum.



If you have products or services to offer, please use the Classifieds section on MyBBS.org or start a new discussion by creating a topic about them.



If you need help or have any questions, please write to support@mybbs.org instead. Alternatively, if you experience any problems with our email system or website, please take a screenshot and email it to us at daprose.usa@gmail.com. We will fix the problem as soon as possible. I thank you in advance for your help and cooperation.



Thanks to the technology implemented on our website, we can certainly help you make your voice heard as widely, clearly, and publicly as possible. There are absolutely no charges to you; our service is 100% FREE..



Cordially,





Peter (Pedro) Jaramillo

Programmer/Analyst

Webmaster/Admin at https://mybbs.org

Phone: +1.713-714-7852



MyBBS.org is a proud iniciative of DAPROSE. A Houston, TX USA based Internet Consulting Company specializing in Server and Workstation Programming and Data Processing Services.





This email, and any files sent with it, are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named recipient, please do not read, print, re-transmit, store, or otherwise use this message. If you received this email in error, please notify the sender immediately and delete all copies from your system.



Unsubscribe: To unsubscribe, send an empty message to subscribers@mybbs.org with the word UNSUBSCRIBE In the subject line.





Este correo electrónico, y todos los archivos adjuntos, son confidenciales y están destinados exclusivamente a la persona o entidad a la que van dirigidos. Si usted no es el destinatario indicado, le rogamos que no lea, imprima, retransmita, almacene, ni utilice de ninguna otra forma este mensaje. Si ha recibido este correo por Error, notifique inmediatamente al remitente y elimine todas las copias de su sistema.



Unsubscribe: Para cancelar su suscripcion, envie un mensaje vacio a subscribers@mybbs.org con la palabra UNSUBSCRIBE en el asunto del mensaje.





DAPROSE, 440 Benmar Dr, Suite 2270, Houston, TX 77060, USA.



This message was sent to you using: MyEmailer3 v.1.0.75

Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 00:22:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQfFg-00000000J8h-1gBz

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 00:22:40 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Nov 2026 00:22:40 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out208-139.dm.aliyun.com ([140.205.208.139]:45693)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQcNF-00000000Gh5-16n0

for doctor@nl2k.ab.ca;

Mon, 09 Nov 2026 21:18:20 -0600

X-AliDM-RcptTo: ZG9jdG9yQG5sMmsuYWIuY2E=

Feedback-ID: default:vip@vip.fychem.ltd:alibabak_WebBatch:541082

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.fychem.ltd; s=aliyun-cn-hangzhou;

t=1794280633; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=FKsVbPcWHr8Ciz0/0D65lHWbf63P3ZRUe3waOSAjvPM=;

b=Iy8M01cAGtn5sw7QHyIHAuzDMbI1z93lIMUKiKzrZ5xNxpnacODJJhoz6auwiXr1QVYNhavuiIMkWsEfuukC1aOO1/U/Ch86NQ2i3Fm1xhtJaYqEBT1qAufLC3ev4tBZQpyf0CNUlACAGlMxeugkMJJA2V7ye2vjliKdx4hT7H4=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1794280633; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=FKsVbPcWHr8Ciz0/0D65lHWbf63P3ZRUe3waOSAjvPM=;

b=osb8Rwj4Xn3A4dFuIhIyAyPghddbSjVCLpOfE7vnI0vEJx1ObEso0CrtfB8VY4NhZa73MYhondoYkHh0gInRLB4bS+Ro2h/v/ENz3wec5M6PD0jpINkz6xgqByO/IgdomqQuYUAtD0xb7Ie0Gu3i3lIbXs4FDE6BjGZq6d9RK3Q=

Received: from chitu-hsf(mailfrom:vip@vip.fychem.ltd fp:ma_600000367600596865 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Tue, 10 Nov 2026 11:15:09 +0800

Date: Tue, 10 Nov 2026 11:15:09 +0800

From: "Jeanine"

To:

Reply-To:

Message-ID: <94634417-41c7-42be-97ed-f136a17b0fab@alibaba.com>

Subject: =?UTF-8?B?UkVBQ0gtQ2VydGlmaWVkIENhdXN0aWMgU29kYQ==?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000367600596866

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Cher client, bonjour ! De nombreux clients profitent de la

conjoncture actuelle pour reconstituer leurs stocks. En raison de la récente

baisse du coût des matières premières, les prix de la soude caustique

se situent ac [...]



Content analysis details: (8.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[140.205.208.139 listed in dnsbl.ahbl.org]

[140.205.208.139 listed in dnsbl.ahbl.org]

[140.205.208.139 listed in dnsbl.ahbl.org]

[140.205.208.139 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[140.205.208.139 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[140.205.208.139 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[140.205.208.139 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[140.205.208.139 listed in dnsbl.ahbl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[140.205.208.139 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[140.205.208.139 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H4 RBL: Very Good reputation (+4)

[140.205.208.139 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.4 SALES_REPLY Your parents named you sales?

2.3 MANGLED_LSBIAN BODY: mangled lesbian(s)

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[140.205.208.139 listed in will-spam-for-food.eu.org]

[140.205.208.139 listed in will-spam-for-food.eu.org]

[140.205.208.139 listed in will-spam-for-food.eu.org]

[140.205.208.139 listed in will-spam-for-food.eu.org]

[140.205.208.139 listed in will-spam-for-food.eu.org]

[140.205.208.139 listed in will-spam-for-food.eu.org]

[140.205.208.139 listed in will-spam-for-food.eu.org]

[140.205.208.139 listed in will-spam-for-food.eu.org]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} =?UTF-8?B?UkVBQ0gtQ2VydGlmaWVkIENhdXN0aWMgU29kYQ==?=



Cher client, bonjour !


>De nombreux clients profitent de la c=

onjoncture actuelle pour reconstituer leurs stocks.
34">En raison de la r=C3=A9cente baisse du co=C3=BBt des mati=C3=A8res premi=C3=

=A8res, les prix de la soude caustique se situent actuellement =C3=A0 un nivea=

u tr=C3=A8s attractif et comp=C3=A9titif.


der: none" cellspacing=3D"0" border=3D"1"><=

/tr><=

td style=3D"width: 284px;padding: 0 7px;border-left-width: 1px;border-left-col=

or: windowtext;border-right-width: 1px;border-right-color: windowtext;border-t=

op: none;border-bottom-width: 1px;border-bottom-color: windowtext" valign=3D"t=

op" width=3D"284">

Appare=

nce

=

<=

/tbody>

;padding: 0 7px;border-width: 1px;border-color: windowtext" valign=3D"top" wid=

th=3D"284">

Article
>


lor: windowtext" valign=3D"top" width=3D"284">


libri;font-size:16px">Sp=C3=A9cification


width: 284px;padding: 0 7px;border-left-width: 1px;border-left-color: windowte=

xt;border-right-width: 1px;border-right-color: windowtext;border-top: none;bor=

der-bottom-width: 1px;border-bottom-color: windowtext" valign=3D"top" width=3D=

"284">

Code SH

=


ft-color: windowtext;border-right-width: 1px;border-right-color: windowtext;bo=

rder-top: none;border-bottom-width: 1px;border-bottom-color: windowtext" valig=

n=3D"top" width=3D"284">

=

2815110000


rder-left-width: 1px;border-left-color: windowtext;border-right-width: 1px;bor=

der-right-color: windowtext;border-top: none;border-bottom-width: 1px;border-b=

ottom-color: windowtext" valign=3D"top" width=3D"284">


amily:Calibri;font-size:16px">N=C2=B0 CAS


84px;padding: 0 7px;border-left-width: 1px;border-left-color: windowtext;borde=

r-right-width: 1px;border-right-color: windowtext;border-top: none;border-bott=

om-width: 1px;border-bottom-color: windowtext" valign=3D"top" width=3D"284">
>1310-73-2


-left-color: windowtext;border-right-width: 1px;border-right-color: windowtext=

;border-top: none;border-bottom-width: 1px;border-bottom-color: windowtext" va=

lign=3D"top" width=3D"284">


x">Puret=C3=A9


left-width: 1px;border-left-color: windowtext;border-right-width: 1px;border-r=

ight-color: windowtext;border-top: none;border-bottom-width: 1px;border-bottom=

-color: windowtext" valign=3D"top" width=3D"284">


:Calibri;font-size:16px">98% / 98.5% / 99%; 32%/ 50%


1px;border-left-color: windowtext;border-right-width: 1px;border-right-color:=

windowtext;border-top: none;border-bottom-width: 1px;border-bottom-color: win=

dowtext" valign=3D"top" width=3D"284">


nt-size:16px">Flocons solides blancs / Perles blanches / Liquide


d>

der-left-color: windowtext;border-right-width: 1px;border-right-color: windowt=

ext;border-top: none;border-bottom-width: 1px;border-bottom-color: windowtext"=

valign=3D"top" width=3D"284">


16px">Conditionnement


border-left-width: 1px;border-left-color: windowtext;border-right-width: 1px;b=

order-right-color: windowtext;border-top: none;border-bottom-width: 1px;border=

-bottom-color: windowtext" valign=3D"top" width=3D"284">


-family:Calibri;font-size:16px">Sac en PP de 25 kg, grand sac (big bag) de 100=

0 kg, conteneur IBC de 1
ont-size:16pxfont-family:Calibri">.
ont-size:16px">5 t (
,94);font-size:16px">avec ou sans palettes)


"width: 284px;padding: 0 7px;border-left-width: 1px;border-left-color: windowt=

ext;border-right-width: 1px;border-right-color: windowtext;border-top: none;bo=

rder-bottom-width: 1px;border-bottom-color: windowtext" valign=3D"top" width=3D=

"284">

Application=


r-left-color: windowtext;border-right-width: 1px;border-right-color: windowtex=

t;border-top: none;border-bottom-width: 1px;border-bottom-color: windowtext" v=

align=3D"top" width=3D"284">


px">=E2=80=A2 Fabrication de PVC


Calibri;font-size:16px"> 


;font-size:16px">=E2=80=A2 Traitement de l
ly:Calibri;font-size:16px">=E2=80=99
font-size:16px">eau


16px"> 

=E2=

=80=A2 Industrie textile


font-size:16px"> 


ze:16px">=E2=80=A2 D=C3=A9sulfuration en m=C3=A9tallurgie


pan style=3D"font-family:Calibri;font-size:16px"> 


le=3D"font-family:Calibri;font-size:16px">=E2=80=A2 Industrie p=C3=A9troc=

himique

 =

=E2=80=A2&nbs=

p;Produits chimiques courants et raffinage p=C3=A9trolier


t-color: windowtext;border-right-width: 1px;border-right-color: windowtext;bor=

der-top: none;border-bottom-width: 1px;border-bottom-color: windowtext" colspa=

n=3D"2" valign=3D"top" width=3D"568">


t-size:16px">Conditionn=C3=A9 avec un film PE interne r=C3=A9sistant =C3=A0 l'=

humidit=C3=A9, palettis=C3=A9 et renforc=C3=A9 par un film =C3=A9tirable pour =

un transport maritime en toute s=C3=A9curit=C3=A9. Documentation compl=C3=A8te=

disponible pour le d=C3=A9douanement : COA, TDS, SDS et certificats
pan style=3D"font-family:Calibri;color:rgb(132,19,32);font-size:16px">REACH
pan>.

Usine : Plus de
n style=3D"color:#ff0000">20 ans d=E2=80=99exp=C3=A9rience en productio=

n

Capacit=C3=A9 mensuelle=

: jusqu=E2=80=99=C3=A0 10 000 tonnes par=

mois


b(95, 73, 122);color:#ffffff">Pourquoi choisir notre soude caustique ?<=

/p>

=E2=9C=85 Prix tr=C3=A8s comp=C3=

=A9titifs gr=C3=A2ce =C3=A0 la baisse r=C3=A9cente du co=C3=BBt des mati=C3=A8=

res premi=C3=A8res

=E2=9C=

=85 Haute puret=C3=A9 constante, avec certificat d=E2=80=99analyse (COA) fourn=

i pour chaque lot

=E2=9C=85=

Contr=C3=B4le rigoureux des impuret=C3=A9s


rap-mode: nowrap;">=E2=9C=85 Approvisionnement direct depuis l=E2=80=99usine ;=

remises suppl=C3=A9mentaires pour les commandes en gros


yle=3D"text-wrap-mode: nowrap;">=E2=9C=85 Emballage renforc=C3=A9 r=C3=A9sista=

nt =C3=A0 l=E2=80=99humidit=C3=A9 (diverses options disponibles)

=

=E2=9C=85
">=C3=89chantillons gratuits (500 g =C3=A0 1000 g) disponibles ; frais =

de transport =C3=A0 la charge du destinataire


r:#e36c09">C'est le moment id=C3=A9al pour passer commande et r=C3=A9duire vos=

co=C3=BBts de production. Veuillez nous indiquer la quantit=C3=A9 souhait=C3=A9=

e, le degr=C3=A9 de puret=C3=A9 ainsi que le type de conditionnement ; nous pr=

=C3=A9parerons rapidement une offre promotionnelle actualis=C3=A9e.
=3D"color: rgb(0, 0, 0);">

<=

span style=3D"color: rgb(0, 0, 0);">


olor:#e36c09">

<=

span style=3D"color:#e36c09">
n>

Dear Client, Good day!=

Many clients are taking advanta=

ge of the current timing to restock. Due to the =

recent drop in raw material costs, caustic soda prices are currently at a very=

attractive and competitive level.


ne" cellspacing=3D"0" border=3D"1">
>

Factory: With
:#c0504d">20+ years of production


-mode: nowrap;">Monthly capacity: up to <=

span style=3D"color:#92cddc">10,000 MT per month


le=3D"text-wrap-mode: nowrap;">


e: nowrap; background-color: rgb(95, 73, 122);color:#ffffff">Why our Caustic S=

oda?

=E2=9C=85Very compet=

itive price due to recent raw material cost drops


text-wrap-mode: nowrap;">=E2=9C=85Stable high purity with batch COA

=

=E2=9C=85Strict impurity control
pan>

=E2=9C=85Factory direct sup=

ply, extra discount for bulk orders


: nowrap;">=E2=9C=85Moisture-proof reinforced packing, various options<=

/p>

=E2=9C=85Free samples available =

within 500g=E2=80=931000g, freight collected


wrap-mode: nowrap;color:#ff0000">It is an ideal timing to place orders and low=

er your production costs. Please share your required quantity, purity grade an=

d packing type, we will prepare the latest promotional quotation promptly.
an>

<=

br/>
jpg" _src=3D"https://i.postimg.cc/w6g9Kscp/REACH-certificate.jpg" referrerpoli=

cy=3D"no-referrer"/>



Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 00:22:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQfFb-00000000J7P-269M

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 00:22:35 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Nov 2026 00:22:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from out208-140.dm.aliyun.com ([140.205.208.140]:22262)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQcDf-00000000Dlp-3aH9

for root@nk.ca;

Mon, 09 Nov 2026 21:08:26 -0600

X-AliDM-RcptTo: cm9vdEBuay5jYQ==

Feedback-ID: default:vip@vip.fuyote-floatingseal.ltd:alibabak_WebBatch:342978

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vip.fuyote-floatingseal.ltd; s=aliyun-cn-hangzhou;

t=1794280041; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=7ras5t7BADsPMXvAh4Op1LHD6q6/AqAbDoiaKkZClzM=;

b=uokp91XASqyRZKtbl8TShEmO5rxBLoLlnJha4mOInCGtK8PT0VZa+DdQpdrY11Thq87WQYKhdG1E77kyvBYfZeAbcb1FGWjDZ0BHM7E2Gf/7BgQPuKDT9G5g8kxkYUNwfw60UNAbJQuB8Upxm8Bi883E2bdYEn0PRNZXbkkqzxg=

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=dm-fbl.aliyuncs.com; s=feedback;

t=1794280041; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;

bh=7ras5t7BADsPMXvAh4Op1LHD6q6/AqAbDoiaKkZClzM=;

b=4L9x61oRnRO3JTs0TV2K0rcWlh5oPyX0Zvb7KH4fsPIpunG4wnWDrzGlp6XcDLHwYLJZMWZuPol+4g63H9K47Jx2rbFSZViHHwxG5J3hsldh5D3L+Cmy+dq/7Jso6618GZ2o+nw6uoozE0HIR4FrnaRIGnAl5LtE76+Iw6bxdmk=

Received: from chitu-hsf(mailfrom:vip@vip.fuyote-floatingseal.ltd fp:ma_600000367831337388 cluster:AY35D)

by smtp.aliyun-inc.com(127.0.0.1);

Tue, 10 Nov 2026 11:05:04 +0800

Date: Tue, 10 Nov 2026 11:05:04 +0800

From: "Tina"

To:

Reply-To:

Message-ID: <2d8bc067-8d12-4da7-a210-d2df28fec517@alibaba.com>

Subject: =?UTF-8?B?RmxvYXRpbmcgTWV0YWwgU2VhbHM=?=

X-Priority: 3

MIME-Version: 1.0

X-EnvId: 600000367831337389

X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi , This is Tina from Tianjin Fuyote Technology Co., Ltd.We're

a direct manufacturer of floating seals, covering standard sizes through

to large diameters up to 1425mm OD - for TBM main drives, mining tru [...]





Content analysis details: (6.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[140.205.208.140 listed in will-spam-for-food.eu.org]

[140.205.208.140 listed in will-spam-for-food.eu.org]

[140.205.208.140 listed in will-spam-for-food.eu.org]

[140.205.208.140 listed in will-spam-for-food.eu.org]

[140.205.208.140 listed in will-spam-for-food.eu.org]

[140.205.208.140 listed in will-spam-for-food.eu.org]

[140.205.208.140 listed in will-spam-for-food.eu.org]

[140.205.208.140 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[140.205.208.140 listed in dnsbl.ahbl.org]

[140.205.208.140 listed in dnsbl.ahbl.org]

[140.205.208.140 listed in dnsbl.ahbl.org]

[140.205.208.140 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[140.205.208.140 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[140.205.208.140 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[140.205.208.140 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[140.205.208.140 listed in dnsbl.ahbl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[140.205.208.140 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H4 RBL: Very Good reputation (+4)

[140.205.208.140 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[140.205.208.140 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars

0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

1.0 XPRIO Has X-Priority header

Subject: {SPAM?} =?UTF-8?B?RmxvYXRpbmcgTWV0YWwgU2VhbHM=?=




atch, Inter, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI"=

;, Roboto, Oxygen, Ubuntu, Cantarell, "Open Sans", "Helvetica N=

eue", sans-serif; white-space: normal;" class=3D"ds-markdown-paragraph"><=

span class=3D"">Hi ,


, 21); font-family: quote-cjk-patch, Inter, system-ui, -apple-system, BlinkMac=

SystemFont, "Segoe UI", Roboto, Oxygen, Ubuntu, Cantarell, "Ope=

n Sans", "Helvetica Neue", sans-serif; white-space: normal;" cl=

ass=3D"ds-markdown-paragraph">
: rgb(15, 17, 21); font-family: quote-cjk-patch, Inter, system-ui, -apple-syst=

em, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen, Ubuntu, Cantarel=

l, "Open Sans", "Helvetica Neue", sans-serif; white-space:=

normal;">This is Tina from
-family: quote-cjk-patch, Inter, system-ui, -apple-system, BlinkMacSystemFont,=

"Segoe UI", Roboto, Oxygen, Ubuntu, Cantarell, "Open Sans"=

;, "Helvetica Neue", sans-serif; white-space: normal;">Tianjin Fuyot=

e Technology Co., Ltd.We're a direct manufacturer of floating s=

eals, covering standard size=

s through to large diameters up to 1425mm OD - fo=

r TBM main drives, mining truck hubs, slewing bearings, and heavy reducers.
pan>


te-cjk-patch, Inter, system-ui, -apple-system, BlinkMacSystemFont, "Segoe=

UI", Roboto, Oxygen, Ubuntu, Cantarell, "Open Sans", "Hel=

vetica Neue", sans-serif; white-space: normal;" class=3D"ds-markdown-para=

graph">We machine and grind in-house, and use high-chrome-mol=

y alloy iron for the metal rings. Popular sizes are ke=

pt in stock for fast turnaround, and samples ca=

n be provided for evaluation.


6px 0px; color: rgb(15, 17, 21); font-family: quote-cjk-patch, Inter, system-u=

i, -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen, Ub=

untu, Cantarell, "Open Sans", "Helvetica Neue", sans-serif=

; white-space: normal;" class=3D"ds-markdown-paragraph">If yo=

u have ongoing floating seal demand or hard-to-source sizes, send me the drawi=

ng or spec. Our engineering team will confirm feasibility and lead time first.=


quote-cjk-patch, Inter, system-ui, -apple-system, BlinkMacSystemFont, "Se=

goe UI", Roboto, Oxygen, Ubuntu, Cantarell, "Open Sans", "=

Helvetica Neue", sans-serif; white-space: normal;" class=3D"ds-markdown-p=

aragraph">Happy to send a brief spec sheet if useful.<=

/p>


k-patch, Inter, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI&q=

uot;, Roboto, Oxygen, Ubuntu, Cantarell, "Open Sans", "Helvetic=

a Neue", sans-serif; white-space: normal;" class=3D"ds-markdown-paragraph=

">Best regards,
Tina


style=3D"margin: 16px 0px; color: rgb(15, 17, 21); font-family: quote-cjk-pat=

ch, Inter, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI",=

Roboto, Oxygen, Ubuntu, Cantarell, "Open Sans", "Helvetica Neu=

e", sans-serif; white-space: normal;" class=3D"ds-markdown-paragraph">
g src=3D"https://upload.cc/i1/2026/10/10/dOKBZA.jpg"/>




Nigerian spam from Iran

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 00:22:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQfFT-00000000J6b-3PRl

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 00:22:27 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Nov 2026 00:22:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f52.google.com ([209.85.218.52]:42443)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQbJk-000000008Mq-2TQ3

for doctor@doctor.nl2k.ab.ca;

Mon, 09 Nov 2026 20:10:39 -0600

Received: by mail-ej1-f52.google.com with SMTP id a640c23a62f3a-c434376dbebso286656166b.1

for ; Mon, 09 Nov 2026 18:09:43 -0800 (PST)

ARC-Seal: i=1; a=rsa-sha256; t=1794276577; cv=none;

d=google.com; s=arc-20260327;

b=jpCNO4sYJg9uGCtNwgqTgfKTkhHqQSMccifiAKgpM3AcWCfH8xRvGIq6SP4qAEGTOn

Im73KZhrSoM5qU0VpoJ4iS2gYuGJ2moVbcPKxKwLX+cZ9C2TJr1bHP20nkF1mH+k2Z5Q

rNcBCVTtaAMBahGv5Hqt3uz3XjgIKP5yNSWG7HKrxlcTTOvucQyvat/zdyiP5esIiYTw

3ZuQHo4xGSSK429b3+xL4hsV7ZEm8lHZCaYZu8iTGvVD+e4sxFKlCuU6MO+37hvZXink

E0DoXZLj0Q0ltIptC39+AscSNkC1qiSI/arLM1daluhQNYdkhwpYYQuHgCNcaaviWvZm

DJBA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:reply-to:mime-version

:dkim-signature;

bh=Ylj8HHEZuDRQcBs6AsLlFOjhbgdl/PudGbcn7DjhBoI=;

fh=24474zNkw6ppG75qMUBNudi5LBqZUuuhqmXFt76rsHM=;

b=XZJmcaLWrQveupEw5aVVjhRbRvIsBY2afCeQf5mdd6TGNijYS6dMlXqMPOopu8aOvr

dBaKKTOtyx3oixWcth+uqybhcP0heV7Igdo5hOHAEDP2Wd6/bqG3BVd0gvThnI1Rnr5k

3xpU6iled85xKxl7HwBM/sVtjPU1y171dXY1sgIj9/s1Ieft0gZRYvkGbvAkz5z5Fg+Z

ivP1vI5B/gez8E3F6ISlOi7yPzd0Ofu7GA1idR3gLe1igg/6VfiEsdw3ftJCLtQzSBpP

axk+T19H63ala6SWdp+hUdascsPu6kOurfhknILyT9LJPujqTzA79RMkGCF1ehNaxWnW

5PGA==;

darn=doctor.nl2k.ab.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20260707; t=1794276577; x=1794881377; darn=doctor.nl2k.ab.ca;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:from:to:cc:subject:date:message-id:reply-to:content-type;

bh=Ylj8HHEZuDRQcBs6AsLlFOjhbgdl/PudGbcn7DjhBoI=;

b=jFSby1mNYqRhZhzeNQUG+Tu7AYtinUnsGcFrMI+O4cWKmqEu99v3/GawH2GbzFo2Yo

lO0R82cwUrmjzn/vEztIU+J/hx6DqKznQ8+CEA57G0W8MB75YcTig42v45SzPID6YBqx

OM3x0n/+0p3z00IbmQS3Y5vJNGudqjNCNcUm81KzSUXMbGgP+ynm3LpSDWM++cap4c3O

KA8FSCV8b/mkMCLIp7nTa4FoFt3yk9JWJpQdVmtWT7RaDm4XgLcEEZ06JS+Fx1RZNjwe

M+oC9w2MZ6OM7BpFBY40iRiR7vdvVG9UjubeRN+ueW8Ggqe99pEqzK1rdRU4iVTmCE/G

ONrQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1794276577; x=1794881377;

h=content-type:to:subject:message-id:date:from:reply-to:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=Ylj8HHEZuDRQcBs6AsLlFOjhbgdl/PudGbcn7DjhBoI=;

b=trYx81ArjJfCi8RQRg5fp6tr7AxMOW6Y3Mt+eEpA2Zw/gRTHnvXrci2ZL4vNC39Bj/

9+yjm1gd67B+fD2bmor25o8gw8tmIA0KxT5sLW3f0oZrWwH1MiOnH6/0C9WONpmD05tT

A39WhksgEg5MuBTt5EZaN+nXgX2dNSQKILtG40fLeB0GyzaCrIyG4dl6vCQS8eaW61K0

UW8PLaYv8g+glpyHei9QmlxcEiYNr9/ORvzoSGo0OEObkpSuqb6qcQnOrCJQ/62NRx+9

myFsz4Ez77EyatbNYwFEbr8fB5Z4g+a8Tv1ecjenKQ2tSrQj9KuKuNWfSG7AdvWkasH7

GyLw==

X-Forwarded-Encrypted: i=1; AL+hErHw888KsYBsVPVDl9r7TTyZIkt0jaF2zNThXL4XuhFuVYocBGHL3yYxUqnSXS3s8x+eQ2fTT5I=@doctor.nl2k.ab.ca

X-Gm-Message-State: APuU4Z9AvMEvblwVtO0oMQdLjDmkHGLRLmy3I+QaQrwHj60zuSUcTSHS

myp3IYruzujXUI08a2E5mARKnWBJ2Or/yFBVuCL+5co2AJeJDDFKXGQggMzj6z979DR3ulAsaWu

Mwb4pQlB2NKKyfs1q75DSKNaS5EVdt34=

X-Gm-Gg: AYBFou0wnKPZnCeVl2G/8WHySR7qarWk4JBQ054NLoJqRCMcBW/yuC/Jp/P+uQzzvcw

88DrTgyCyHYYKPP8Bda2xDGNvx37xjaVG5uknrxrRwRA7ONJ4BMGI/5ecPPtsc5LpYn3ZayoXh/

TMSbM4TO+vLLoID3ouCqiIegGBRSY6gy4mIwhzuweqF3p09LQ/wvrfS+TiW8yw+a2QGGzKq/EBZ

Gem19u6KY2ZEdVuWpMlXyNdZwo4R9tRcBDh8zC85fDz2uTSLAXhJodf04QV0v/Jrei1dXRA6Har

y8AF55zh0H2sYhUN2Qwgk3FAJnaZtiuxxsuXN0gaPq/NvmijnB/f9eaFLgJvUtzOv8Xf6dHONiV

j0TdQyHOrD43TmkSsE56oytIQ6Uep3tKjpXZoFqhR7/1gMIDrH/dG7upBVZPpYPo1BB2Xx5GSq/

npqJa0yj+JNAT0wOagFx0OmSsrx7j0h1ecRROCqYKYGKZN5a7Zm0kb8kkw0p0gxHie+I9WE4JfL

A==

X-Received: by 2002:a17:906:c155:b0:c2d:d4dd:8d0 with SMTP id

a640c23a62f3a-c5048668296mr86876266b.16.1794276576415; Mon, 09 Nov 2026

18:09:36 -0800 (PST)

MIME-Version: 1.0

Reply-To: rivasnory0@gmail.com

From: "Mrs. Nory River"

Date: Tue, 10 Nov 2026 03:09:23 +0100

X-Gm-Features: AclHuK8m2HjJw5CgnmvlB9YXg1Bw2QST0ANxzXkd6ersftD5Ogu8O2d2dMVaRZw

Message-ID:

Subject: Hello

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="000000000000f755f1065fe291cb"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 14.5

X-Spam_score_int: 145

X-Spam_bar: ++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear partner. Compliments of the day to you. I believe this

message finds you in good health. Please I will appreciate if you could review

this brief message and respond to me as quickly as possible just because

of [...]



Content analysis details: (14.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.218.52 listed in will-spam-for-food.eu.org]

[209.85.218.52 listed in will-spam-for-food.eu.org]

[209.85.218.52 listed in will-spam-for-food.eu.org]

[209.85.218.52 listed in will-spam-for-food.eu.org]

[209.85.218.52 listed in will-spam-for-food.eu.org]

[209.85.218.52 listed in will-spam-for-food.eu.org]

[209.85.218.52 listed in will-spam-for-food.eu.org]

[209.85.218.52 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.218.52 listed in dnsbl.ahbl.org]

[209.85.218.52 listed in dnsbl.ahbl.org]

[209.85.218.52 listed in dnsbl.ahbl.org]

[209.85.218.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.218.52 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.218.52 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.218.52 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.218.52 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.218.52 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.218.52 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.218.52 listed in bl.score.senderscore.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[dbasadre09(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[dbasadre09(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[rivasnory0(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 T_HK_NAME_FM_MR_MRS No description available.

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.8 UNDISC_MONEY Undisclosed recipients + money/fraud signs

3.0 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)

Subject: {SPAM?} Hello



--000000000000f755f1065fe291cb

Content-Type: text/plain; charset="UTF-8"



Dear partner.



Compliments of the day to you. I believe this message finds you in good

health. Please

I will appreciate if you could review this brief message and respond to me

as quickly as possible just because of the urgency involved.



I am Mrs. Nory River writing you about our plan of relocation out of Iran

due to the ongoing war in Iran and also regarding a private matter

concerning the estate of my late husband who just passed away in these

ongoing war.



Before his passing, we intended to relocate from Iran due to the crisis in

Iran so therefore he secured a significant family fund/asset in a private

security company.



I want to transfer the funds to you to assist with the management of these

funds within your country, hence that is the reason I contacted you.



Furthermore, once the assets are positioned, we would require assistance in

coordinating the necessary documentation for our relocation. If you are in

a position to assist and can provide assurances of your discretion, I will

be prepared to discuss the specifics of this arrangement and the

compensation for your partnership.

I look forward to your response.



Yours Sincerely



Mrs. Nory River



--000000000000f755f1065fe291cb

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Dear partner.

Compliments of the day to you. I beli=

eve this message finds you in good health. Please
I will appreciate if y=

ou could review this brief message and respond to me as quickly as possible=

just because of the urgency involved.

I am Mrs. Nory River writing =

you about our plan of relocation out of Iran due to the ongoing war in Iran=

and also regarding a private matter concerning the estate of my late husba=

nd who just passed away in these ongoing war.

Before his passing, we=

intended to relocate from Iran due to the crisis in Iran so therefore he s=

ecured a significant family fund/asset in a private security company.

r>I want to transfer the funds to you to assist with the management of thes=

e funds within your country, hence that is the reason I contacted you.
<=

br>Furthermore, once the assets are positioned, we would require assistance=

in coordinating the necessary documentation for our relocation. If you are=

in a position to assist and can provide assurances of your discretion, I w=

ill be prepared to discuss the specifics of this arrangement and the compen=

sation for your partnership.
I look forward to your response.

You=

rs Sincerely

Mrs. Nory River






--000000000000f755f1065fe291cb--

Dragonfly phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 10 Nov 2026 00:22:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQfFH-00000000J4q-1Ywu

for dave@doctor.nl2k.ab.ca;

Tue, 10 Nov 2026 00:22:15 -0600

Resent-From: The Doctor

Resent-Date: Tue, 10 Nov 2026 00:22:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from us19.acugis-dns.com ([152.53.80.197]:35920)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQa6V-00000000IBZ-3NSo

for sales@nk.ca;

Mon, 09 Nov 2026 18:52:59 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=llanogas.webgis1.com; s=default; h=MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:To:From:Content-Type:Sender:

Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:

Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:

List-Id:List-Help:List-Unsubscribe:List-Unsubscribe-Post:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=CNLLG+q/NrzvggOFJw4nyhoJqTyiqAh9UheFqURKN/M=; b=zh+12wYrj4apGoSZH+NfwPSIVS

gVmOPgWO61w5ZFCT+LElGC+tB8Ph68cdT3WAeNu1lGrVwxbutVMNHr+SdAWmbc77fXLhC3cckrve/

ry1egUT4pbZHHvjYVtOC2+EQHeynMfWucMs8IrR3DxdEds8cuV2IBCGYEBvc/hUQldcJ9yNT1uW7F

eqxaMHs5u9SOc1IobM+hLD30jva0VuzTOEbO+b8WaFh+caNcOShszlEnrNYfrogNRQHr9dgorhuHQ

m6Ul52eB/xL7cIw604Vnj5wFNwopGWLzr1NoDQqH85OmsCvOU+XZhBFcA9AJyTGJkTYy/Lqj1jy4T

ckxsgNfg==;

Received: from [196.75.116.150] (port=55374 helo=[127.0.0.1])

by us19.acugis-dns.com with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1)

(envelope-from )

id 1xQa5c-0000000B4mr-1BeI

for sales@nk.ca;

Tue, 10 Nov 2026 01:51:55 +0100

Content-Type: text/html

From: Dragonfly

To: sales@nk.ca

Subject: Dragonfly Delivery Notification

Message-ID:

Content-Transfer-Encoding: quoted-printable

Date: Tue, 10 Nov 2026 00:51:53 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - us19.acugis-dns.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - llanogas.webgis1.com

X-Get-Message-Sender-Via: us19.acugis-dns.com: authenticated_id: info-pvix@llanogas.webgis1.com

X-Authenticated-Sender: us19.acugis-dns.com: info-pvix@llanogas.webgis1.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 9.9

X-Spam_score_int: 99

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dragonfly Express. Dear Customer,



Content analysis details: (9.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

[196.75.116.150 listed in dnsbl.ahbl.org]

[196.75.116.150 listed in dnsbl.ahbl.org]

[196.75.116.150 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Dragonfly Delivery Notification














hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">


align-items: center; justify-content: center">


30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.







PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">


DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

 






1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.





However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD





in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=








href=3D"https://dragonfly-exp.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package






COLOR: #000">Thank you for choosing Dragonfly Express.










COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:





© 2026 =

Intelcom Express - Dragonfly Express. All rights reserved.











NEtknow now in Netcraft's top 295850

Posted by Dave Yadallee on
All data is from Netcraft Toolbar .

Looks as if there are major changes to the Netcraft algorithm after some years! Why did Avast clasify the extension as URL:Phishing?

This is not the Alexa Tool Bar!



NetKnow







Netknow now at 295847 from 296156 at Netcraft and pfs compliant



A slight increase! We must do
  1. security audits regularly
  2. check on illegitimate traffic hitting the web server


  3. Effiency of server
    4. and
  4. keep design current!




How do we compare with other providers in

Edmonton, Alberta, Canada?



Rogers





Rogers Business Solutions

which rank 7862 from 7849 and are hosted in Europe.

Telus and reviews





Next we have Telus.com

ranked by Netcraft at 8424 from 8352 .

Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business

is ranked by Netcraft at >2000000 from >2000000 .



Is Telus's ADSL network susceptible to Code Red Attacks and Attackers?

Reviews of Telus are available :





Government of Alberta



The Government of Alberta Website

ranks 13626 from 13542 by Netcraft and seems to hosted on Cloudfare.



City of Edmonton







The City of Edmonton ranks 39047 from 38637 by Netcraft and hosted by Google.



University of Alberta







The University of Alberta ranks 51176 from 49580 hosted by Amazon Techonologies.





TekSavvy





TekSavvy ranks 197692 from 194825 and are hosted by Microsoft



NAIT / Northern Alberta Institute of Technology





NAIT ranks 217855 from 239754 hosted by Microsoft.



Grant MacEwen University





MacEwan ranks 235725 from 235839



Juno and NetZero





We have Juno Internet ranked on top

at 379398 from 365991 who are the owners of

US Based Netzero at Netcraft Rank 255128 from 244702 .



Internet Centre / CCINet



Internet Centre

rank 287377 from 295075. Their partner Rack Nine ranks > 2000000.



Netknow again





We at Netknow are at 295847 from 18857 since the start of 2026.



Shaw Cable





Next,

members.shaw.ca

ranks >2000000 from >2000000 and retired and

Shaw Cable

is next at Netcraft rank >20000000 from >20000000 . Hosted now by Akamei .

Their Network Hosting Arm,

Big Pipe is at

Netcraft rank 382663 from 369060 and hosted by Akamai in Europe .



Reviews of Shaw are available :





Distributel / 3Web / CIA



Cybersurf

is ranked 935836 from 1069706 and seems to be hosted in USA by DigitalOcean.



Xplornet



xplornet

ranks >2000000 from >2000000 and are listed with

Cirrus9 and are joining up with Shaw.

Their new domain xplore.ca ranks 944769 from 942861 .

According to an article in the Sherwood Park Independent, they are also getting an Alberta Government subsidy.



Primus



Primus

ranks >2000000 from >2000000 and now points to BLACKIRON_DataCentres ranked >2000000 from >2000000.



Northern lights Fiber







Northern lights Fiber are ranked by Netcraft >2000000 and uses AWS.



OkayVPN





OkayVPN

are ranked by Netcraft >2000000 and uses Cloudfare.



Radiant Communications / goco.ca





Radiant Communications

are ranked by Netcraft >2000000 and part of goco.ca

which ranks >2000000 .



Tera Byte Edmonton and reviews





Next is Tera-Byte

at Netcraft Rank >2000000 with

Tera-Byte.ca

ranking >2000000 from >2000000 and their wireless arm Tera-Byte Wireless

sold to Xplornet.

One of Tera-Byte's acquisitions

Edmonton Community Networks

ranks at >2000000 from >2000000 and

Go Edmonton ranks >2000000 from >2000000.

Alberta political blogger Daveberta ranks >2000000 from >2000000; interesting!!!

Reviews of Tera-byte is available at

here

and another here

and check Google for more reviews; just search tera byte.



MCSnet





MCSNET ranks >2000000 from >2000000 and are hosted by Microsoft .



Nucleus Internet Services





After that we have

Nucleus Information Services which can be found at Netcraft Rank >2000000 from >2000000 .





4Web





4web ranks >2000000 from >2000000 .



Alentus / Wolfpaw





Alentus

rank by Netcraft >2000000 from >2000000 and I note they are hosted in the USA .

wolfpaw.net

which ranks at >2000000 from >2000000



Yellowpencil





Yellowpencil Ranks >2000000 from >2000000



WSI Corporation





Next is WSI - We Simply The Internet of Toronto

at Netcraft Position >2000000 from >2000000 and are being hosted on Amazon.



Uniserve / Interbaun





Next, Uniserve

ranks on Netcraft >2000000 from >2000000

One of their acquisitions

interbaun

ranks with Netcraft ?????? from ?????? due to merging of sites.

One customer just came over from this organization in Nov 2006.



Clearwave Broadband





Clearwave Broadband ranks

at >2000000 from >2000000



Platinum Communications





Platinum Communications Corp.

bought out by Xplornet .



Wild Rose Internet





Wild Rose Internet

ranks >2000000 from >2000000 and I wonder if this is another wireless branch of Tera-Byte and bought out by Xplornet





TIC Internet





TIC Internet

ranks >2000000 from >2000000 ( I do remember you).



Nisa Custom Internet Solutions





Nisa Custom Internet Solutions

ranks >2000000 from >2000000 by Netcraft



MediaShaker





Media Shakers of Edmonton

ranks >2000000 from >2000000





Koi Media





Koi Media

rank >2000000 from >2000000



WebFire





Webfire.ca

ranks >2000000 from >2000000 and seems to be connected with Shaw.



Core Network Solutions Inc.





Core Network Solutions Inc.

ranks at >2000000 from >2000000 .



The Network Centre





The Network Centre

ranks >2000000 from >2000000 and are linked with Telus high Speed.





Open Concept Internet, Inc.





Open Concept Internet, Inc.

rank > 2000000 from > 2000000





Techalta





Interspots of Edmonton

acquired by Techalta ;



Yegtel





Yegtel rank > 2000000 .



Internet Crossroads





Internet Crossroads Ltd of North Edmonton

rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca .



If I remember anymore, I will add to this entry, before Netcraft changes our ranking. Please watch this space and please feel free to peruse

our services.

Dragonfly phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 09 Nov 2026 17:09:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQYUN-0000000099W-2qf4

for dave@doctor.nl2k.ab.ca;

Mon, 09 Nov 2026 17:09:23 -0600

Resent-From: The Doctor

Resent-Date: Mon, 9 Nov 2026 17:09:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from us19.acugis-dns.com ([152.53.80.197]:35468)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQUB5-00000000PgO-37J7

for sales@nk.ca;

Mon, 09 Nov 2026 12:33:26 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=llanogas.webgis1.com; s=default; h=MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:To:From:Content-Type:Sender:

Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:

Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:

List-Id:List-Help:List-Unsubscribe:List-Unsubscribe-Post:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=pAVf/Wu3kgkRSvEFNd6kGxCfAQpJsVQMQkO82GE7LHQ=; b=c1x4zAq84SXFdftgFozyJo05lm

7fbmAWi4diJ34HptwzCvIFlioblkXqGYmiY0EihiLaU0Opoj9rEyZ45p+1V1L/heWGfu5brlOOE7R

/iszSjRSS+WRJ+WXbGFEBJqPPMB0bPs4B8MOtRNKu9S7NuuZPJ9jTfTZyxAS0d8tV0dS5IXi31D1x

6as4RmsuCLerH2B2lWl4YyVotOFR7eMdhWiwmtVPoa92UUcSxVRiAZTgkDGzUBOam0nprb9vnB1+3

S01CG9KryM5XwAFbe5gC7LUAGHwwtFm+cSsSekshoA6Bpj1QpMhxEAEs0IHALbg+t/m8ub14/RuLW

irwrniAw==;

Received: from [196.75.116.150] (port=50210 helo=[127.0.0.1])

by us19.acugis-dns.com with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1)

(envelope-from )

id 1xQUAC-00000009FkN-0Cye

for sales@nk.ca;

Mon, 09 Nov 2026 19:32:15 +0100

Content-Type: text/html

From: Dragonfly

To: sales@nk.ca

Subject: Dragonfly Delivery Notification

Message-ID:

Content-Transfer-Encoding: quoted-printable

Date: Mon, 09 Nov 2026 18:32:13 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - us19.acugis-dns.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - llanogas.webgis1.com

X-Get-Message-Sender-Via: us19.acugis-dns.com: authenticated_id: info-pvix@llanogas.webgis1.com

X-Authenticated-Sender: us19.acugis-dns.com: info-pvix@llanogas.webgis1.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 6.2

X-Spam_score_int: 62

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dragonfly Express. Dear Customer,



Content analysis details: (6.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[152.53.80.197 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

[196.75.116.150 listed in dnsbl.ahbl.org]

[196.75.116.150 listed in dnsbl.ahbl.org]

[196.75.116.150 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Dragonfly Delivery Notification














hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">


align-items: center; justify-content: center">


30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.







PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">


DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

 






1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.





However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD





in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=








href=3D"https://dragonfly-servic.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package






COLOR: #000">Thank you for choosing Dragonfly Express.










COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:





© 2026 =

Intelcom Express - Dragonfly Express. All rights reserved.











Dragonfly phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 09 Nov 2026 17:09:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQYUN-0000000099W-2qf4

for dave@doctor.nl2k.ab.ca;

Mon, 09 Nov 2026 17:09:23 -0600

Resent-From: The Doctor

Resent-Date: Mon, 9 Nov 2026 17:09:23 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from us19.acugis-dns.com ([152.53.80.197]:35468)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQUB5-00000000PgO-37J7

for sales@nk.ca;

Mon, 09 Nov 2026 12:33:26 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;

d=llanogas.webgis1.com; s=default; h=MIME-Version:Date:

Content-Transfer-Encoding:Message-ID:Subject:To:From:Content-Type:Sender:

Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:

Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:

List-Id:List-Help:List-Unsubscribe:List-Unsubscribe-Post:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=pAVf/Wu3kgkRSvEFNd6kGxCfAQpJsVQMQkO82GE7LHQ=; b=c1x4zAq84SXFdftgFozyJo05lm

7fbmAWi4diJ34HptwzCvIFlioblkXqGYmiY0EihiLaU0Opoj9rEyZ45p+1V1L/heWGfu5brlOOE7R

/iszSjRSS+WRJ+WXbGFEBJqPPMB0bPs4B8MOtRNKu9S7NuuZPJ9jTfTZyxAS0d8tV0dS5IXi31D1x

6as4RmsuCLerH2B2lWl4YyVotOFR7eMdhWiwmtVPoa92UUcSxVRiAZTgkDGzUBOam0nprb9vnB1+3

S01CG9KryM5XwAFbe5gC7LUAGHwwtFm+cSsSekshoA6Bpj1QpMhxEAEs0IHALbg+t/m8ub14/RuLW

irwrniAw==;

Received: from [196.75.116.150] (port=50210 helo=[127.0.0.1])

by us19.acugis-dns.com with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1)

(envelope-from )

id 1xQUAC-00000009FkN-0Cye

for sales@nk.ca;

Mon, 09 Nov 2026 19:32:15 +0100

Content-Type: text/html

From: Dragonfly

To: sales@nk.ca

Subject: Dragonfly Delivery Notification

Message-ID:

Content-Transfer-Encoding: quoted-printable

Date: Mon, 09 Nov 2026 18:32:13 +0000

MIME-Version: 1.0

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - us19.acugis-dns.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]

X-AntiAbuse: Sender Address Domain - llanogas.webgis1.com

X-Get-Message-Sender-Via: us19.acugis-dns.com: authenticated_id: info-pvix@llanogas.webgis1.com

X-Authenticated-Sender: us19.acugis-dns.com: info-pvix@llanogas.webgis1.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Spam_score: 6.2

X-Spam_score_int: 62

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dragonfly Express. Dear Customer,



Content analysis details: (6.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[152.53.80.197 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[196.75.116.150 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

[152.53.80.197 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

[196.75.116.150 listed in dnsbl.ahbl.org]

[196.75.116.150 listed in dnsbl.ahbl.org]

[196.75.116.150 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

[152.53.80.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[196.75.116.150 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

Subject: {SPAM?} Dragonfly Delivery Notification














hidden; MAX-WIDTH: 600px; BACKGROUND: #fff; MARGIN: 20px auto; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">


align-items: center; justify-content: center">


30px; FONT-WEIGHT: bold; COLOR: #fff; FONT-STYLE: italic">Dragonfly Express=

.







PADDING-TOP: 24px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px">


DISPLAY: inline-block; PADDING-RIGHT: 6px">Dear Customer,

 






1.6">

Goods imported into Canada may be subject to applicable duties =

and/or taxes. Carriers are authorized by the. to process occasional =

shipments on behalf of the importer or owner and may remit applicable =

duties and taxes.





However, a parcel belonging to you has been held =

by customs due to missing declaration details from the sender. Please pay: =

4.95 CAD





in duties and taxes as soon as =

possible using the button below: taxes, or other charges are actually owed.=








href=3D"https://dragonfly-servic.duckdns.org/Dragonfly_Shipping/" =

style=3D"FONT-SIZE: 14px; TEXT-DECORATION: none; BACKGROUND: #04ab94; =

FONT-WEIGHT: bold; COLOR: #fff; PADDING-BOTTOM: 10px; PADDING-TOP: 10px; =

PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20px; =

border-radius: 5px">Track my package






COLOR: #000">Thank you for choosing Dragonfly Express.










COLOR: #717171; PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-TOP: =

20px; PADDING-LEFT: 20px; MARGIN: 0px auto; PADDING-RIGHT: 20px; =

border-radius: 10px; box-shadow: 0 4px 8px rgba(0,0,0,.10)">

This email was sent by an automated system=

. Please do not reply official:





© 2026 =

Intelcom Express - Dragonfly Express. All rights reserved.











Web/SEO/App spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 09 Nov 2026 17:08:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQYTc-0000000095R-0hq1

for dave@doctor.nl2k.ab.ca;

Mon, 09 Nov 2026 17:08:36 -0600

Resent-From: The Doctor

Resent-Date: Mon, 9 Nov 2026 17:08:36 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f69.google.com ([209.85.208.69]:47325)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQTQX-00000000L0K-12fJ

for root@nk.ca;

Mon, 09 Nov 2026 11:45:08 -0600

Received: by mail-ed1-f69.google.com with SMTP id 4fb4d7f45d1cf-6a615ab0c06sf985069a12.2

for ; Mon, 09 Nov 2026 09:44:05 -0800 (PST)

ARC-Seal: i=3; a=rsa-sha256; t=1794246238; cv=pass;

d=google.com; s=arc-20260327;

b=K5ygcw3QBJzieM1RNYHc2OzqEWT1HSeClxcOLy0Bw4OKW+Azze4lDfyR1pHMLkJBNz

lGG3drpB6MKLJep1A1bH4chE8zpEqVqHP6JKEs9Q68Z8fd2tT9qrXtlFLrETAdDvfN7u

GnfxxlvbuOPjJWCGfYu7RTE1XxosYCqgdlvFaDNKz4SSMgbpcb9RJ3GJsvw4WN7gRXwJ

phgs1bX1lcSk8VUB+gdi6yg05OcyqAEnz/oSDfEf2VXlYxGN/HJZ490sFGzzWKLpOpil

GIv9b01Lqd8iFN0CUEzs+cZemnDkP+j4hOe33F1UdC3Wkuu3jq/JrGpp8t1uYFFZ3Yhi

vqdg==

ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:to:subject:message-id:date:from

:mime-version:sender:dkim-signature;

bh=NhAT5dNTHb4J4nsrjmkrpz17ULIwkYhbAE+cOd8eW68=;

fh=RXrGQUTWKCFBSTOvvtak6azAeb1bXsX+ufjZNjb3gdM=;

b=P3viqTouWXQX89tpOSUje3LDr+WTQ/3f7JTSMdP/+UNoLqNP9sZpoobzd+RZ5QYbRR

Ky+AACyCzYbb6PCb1iyikdOEkzRye2PtcWbG8a3y3x07cVQOky8o4Jw9EpX8hwHC2THo

Lau+utUy8kOtSXE07JteXEzD3KMZzvCVZLfFD2Mgm3eN842W2d+4DIlkcDhgouhDVUqi

7P0BMhY2hNOlISsXVDpRny5q/BDSAF4VcQPdQMjWuSH3zGkIe5vQUbdxb9KIgBM5XXli

B70kpAXtROwB8KFSNrw633zffshglfFF5r7EJ//uTvbrCBywXnQAHiUYiUbD1WqYB4Kl

e+ag==;

darn=nk.ca

ARC-Authentication-Results: i=3; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20260707 header.b=oLjEoflI;

arc=pass (i=1);

spf=pass (google.com: domain of jasonking3531@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=jasonking3531@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@wdseoservices.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=wdseoservices.com; s=google; t=1794246238; x=1794851038; darn=nk.ca;

h=list-unsubscribe:list-archive:list-help:list-post:list-id

:mailing-list:precedence:x-original-authentication-results

:x-original-sender:content-type:to:subject:message-id:date:from

:mime-version:sender:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=NhAT5dNTHb4J4nsrjmkrpz17ULIwkYhbAE+cOd8eW68=;

b=iMk8giQuneRHHYz/iekKnFq2ZA7dZeXgiiS1f0bCJ8TmqxY5IOnZAHpaHBE70AfvFD

jV4IQAIbWkg1xzFvR8H3HTLrFMKePcRHOCf+rdLeOTvQmGqcZlPU/EJSJEQQuwJ1C4Vu

cIQElqeN5LqaS5wFQQttFEA5O9UGzD4A5JS3GYwFOY4Bzlyky3fFCfWK1RGOw4jxdjhD

lRL+dqIhMMIHx+6PJHJOsKlhcrMAdPM1q9K84ErV3+fkj3hfD4jNljc0KbTPTqSAhHFp

IuIv1Rq6ocsycIWkuJLyXdwegar+SxqbBjiuGAHxa2dM6uunM8xcHazh2McJnNp5/HGo

cgvg==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20260707; t=1794246238; x=1794851038;

h=list-unsubscribe:list-archive:list-help:list-post

:x-spam-checked-in-group:list-id:mailing-list:precedence

:x-original-authentication-results:x-original-sender:content-type:to

:subject:message-id:date:from:mime-version:x-gm-gg:x-beenthere

:x-gm-message-state:sender:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=NhAT5dNTHb4J4nsrjmkrpz17ULIwkYhbAE+cOd8eW68=;

b=wlOscE+Z+KMOfV/xTc/IPsgdzxRjK0i2kVDPnqSLrBiw2JPPaJQdGpqTcNrelspFRm

ZZXFPkFYueudhlV7g/2pE1WyV4gEyOYPcRWYNExu7IDALZZbnO7lKPQKjsNUZElSgx9c

jR1ZM4jAqEQHuH13FS7f6ZfeLQ+/7cNDMIy/Zm5KTEON2gbfTu+mWN0WctxWueYaVJu6

ClHWIcENXI7yrW+Qriu1Egv+wGGYA5eYU4HDaJxj6Fy/uosSUKS5s6ex5SDkyOEuoqCe

DfWgCMHRy5jAnxN4Y5TdByajOKCLP8xM4/bT3d/KgLmwHZB17J1KveFkBOd3H1z16xjF

BW4Q==

Sender: michael_turner@wdseoservices.com

X-Forwarded-Encrypted: i=3; AL+hErHTPumLpcH5F0dFeRu6oJIBgrQhz56Fz/iw3dG8yTfgRfET9VYSAY1ph3PfttVt0gD+rni7@nk.ca

X-Gm-Message-State: APuU4Z+r71jN6ht6lmPQ7oDq6u5wmnl1vOBja1I+5WvDNXKq++wm6/Rq

P/GskItp6YMxW9p9wIpio8UsK+xsYjw8dexRLcDGqb7gwh07+ljztMWYgYCbCPvOPQw=

X-Received: by 2002:aa7:dc01:0:b0:6b5:8233:95d6 with SMTP id 4fb4d7f45d1cf-6b7565f8310mr192840a12.8.1794246237848;

Mon, 09 Nov 2026 09:43:57 -0800 (PST)

X-BeenThere: michael_turner@wdseoservices.com; h="ATskLdeuWfeDf4k94MdoS4cbJpoMFJlcZexbsYUrSdxB9rnsjg=="

Received: by 2002:a05:6402:5192:b0:6b4:6460:d469 with SMTP id

4fb4d7f45d1cf-6b71cd0cd1fls1813563a12.1.-pod-prod-02-eu; Mon, 09 Nov 2026

09:42:57 -0800 (PST)

X-Received: by 2002:a17:907:3f03:b0:c50:475d:9804 with SMTP id a640c23a62f3a-c5049583bf0mr6505166b.13.1794246176667;

Mon, 09 Nov 2026 09:42:56 -0800 (PST)

ARC-Seal: i=2; a=rsa-sha256; t=1794246176; cv=pass;

d=google.com; s=arc-20260327;

b=kJGFBjV9H6k67Pp8kyUlPpeznu0l7429zfKesXO7d5YDsCwEtbxlIW13RNeL9aJoP+

E19f9zst5bFzhduv5lgbQdxvfxWCrDMjcWvE9hOmGfN9vkzbThex/OPsxaqa8RqF6ahu

voNxYLzULgYFGzZE1bbczlqiVQGLMZoPvK7KRbF30jKHNgC8Bw80f+HMXR/cxKYJKgeW

sqmhympZsh7hpnS4jF0DRYC1V2IksYZobsCWzMpswHH0DS5PtWOGdzOQ6wmGV6DojFac

M8hwGOQnpKFkxlDJJcCBkQNKUKEV+uSjvRfHuf4Agyd/nCx0Z/yU0XgBknjPCqhphnHr

DuBA==

ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=ShNMU8UI+MwRm6YQB0Ghu+CkkzMfns/U8b9REmtLiqk=;

fh=SN3QT/9UbwujMk6SE8R9BX7IG6QhvvfMnZwLJOzNdWg=;

b=buVihnYJPhW247cONR03Plg4CdPC6AFWjTUcPDBIhFaWKV22nnPKxIR5cYaLSev56j

e+/L/a0WNw/0phqJFVcRNfOz/+jQjp8B5shK0i4j00dIJBrg7r3YSRHUICwxHAMzq13V

t3CQhahq2eC4zlPj62/GuL8THcA18BGchlYFIbBZCL4Xn4n41MSvP4NcaPFganwvgdeH

8H9ICxiH7Rr3Gk14+3l6SvszJr9Lp9KTsmelgYKPicJDPOHni3oKenYbNAsv94NLMJDz

EH5rnv3dl5aZxeOStjmeYdkwwEQBUQxKDSGNmAwKXTo5U9gbknoLFEJ96FYmvDtWDQ4r

Hk7w==;

dara=google.com

ARC-Authentication-Results: i=2; mx.google.com;

dkim=pass header.i=@gmail.com header.s=20260707 header.b=oLjEoflI;

arc=pass (i=1);

spf=pass (google.com: domain of jasonking3531@gmail.com designates 209.85.220.41 as permitted sender) smtp.mailfrom=jasonking3531@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@wdseoservices.com

Received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41])

by mx.google.com with SMTPS id a640c23a62f3a-c4d69a647d1sor100379766b.18.2026.11.09.09.42.56

for

(Google Transport Security);

Mon, 09 Nov 2026 09:42:56 -0800 (PST)

Received-SPF: pass (google.com: domain of jasonking3531@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;

ARC-Seal: i=1; a=rsa-sha256; t=1794246176; cv=none;

d=google.com; s=arc-20260327;

b=eB6San1TNR6PFYuUKPL/s5YuVmnMNpNJB4KN7+3/mDVQzWNlpncB5N0JfPjk00aiUq

hVZQi7jBRTM9FXz0m6HV8bHWgt7DBVDHaCcPOJ0bC3/7iw29n6AHTi9L09Y8F99bi/Kf

FYe2TjRAbO6VuT225U44ml0eOZODe6SL1fy9hWe2uFOImycmpIh2INLcxtmqJ6SM0Ek9

1mAyBPmKfVarWsK8OGPVq7+SsN+v/zJniO9rbOd/3LqJbbL+qxcRHA+hfOJDKq2f8eCS

aFlX/ExgdtAv6tpan9nSqn0fXtYLYGOEL+Ll9is+ZU2MePxAk7V97QMgHLHls2T9xyKJ

htSQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327;

h=to:subject:message-id:date:from:mime-version:dkim-signature;

bh=ShNMU8UI+MwRm6YQB0Ghu+CkkzMfns/U8b9REmtLiqk=;

fh=SN3QT/9UbwujMk6SE8R9BX7IG6QhvvfMnZwLJOzNdWg=;

b=aIkzUEQkl7RQFimq+41f44Z3kD7P7M9YDunFgAN3OKM8uc9pzQjdzMpMykgB6ngg3l

nwwblxui9nHnN024SUbg8UVjkJJxlIRJYlvcrcvwQzjQqJnfVTb+3ZwiuGE9Z7+Dr04q

Qo2Nebd6Ytigy2U3PqbFDia7tEhfwx/zK1WU0qslNSgjmlurT+9q53gK2tLpRGUNTSGH

liSDgDXAQMbuvOEsMN9ONFrdWnBUADjDD8if5QhuNJmJBOF0uW40ZvNVM7dBVWg9hz5f

QDWE48wud2OUE3SDA9YEMpcF1a1CxpZ8+aYSD+B3c7FaurKS8LtSBs/iK4iqJDJvAx+8

TDBg==;

darn=wdseoservices.com

ARC-Authentication-Results: i=1; mx.google.com; arc=none

X-Gm-Gg: AYBFou1IhnR4wtaruHQ3yQrW8UHLHEe20rqdTNJ+hdyAnpzyq/A68Dk/OinveS7vA1F

aVk5JGDddF3Hc5YldtZRC8JPoEC6JlYZxL7xEARVGG3OVSw/3OPdIPlzD0+jbmiQVB1L3xHxD9o

spGkt2WXbADRj9i0x6FK1/BUsNPBc3RrxzrUMqLomKJGUS1fl/FChvq7aF/U6o6Tb5MaHNwXFxn

XDJAKQn0BzT8A35M89QHXpnRx3q9yh3FaH+6iCeuaEXCFOzCd5TbA9MQLM80clf/vWjZ9heQyp/

WMg+fAQ2gQio/YhdVp7RDsKd7CNbgFWIn8N+ARHatN2XkBcFpx20ZrnurAUD5JS6dhgk/nf65px

8CaWmAD3jcURgNQj0tt1pRDc2M7tPY8utjTmQwqIdBwxRRdNwqI/QdA3HJFhbbQr0awSfswHxeL

G5X0BJhofoGJSPFqcCWy//DE2jupOSPUXD0HamAih/FLJvbspgsWMnhyglaGn4el694YmEzLJx0

FODvw==

X-Received: by 2002:a17:907:e915:b0:c4d:456c:4a29 with SMTP id

a640c23a62f3a-c5049582a21mr7927866b.14.1794246176069; Mon, 09 Nov 2026

09:42:56 -0800 (PST)

MIME-Version: 1.0

From: Jason King

Date: Mon, 9 Nov 2026 23:12:44 +0530

X-Gm-Features: AclHuK9HctL3DippbeRWeDnPn2MM6LympxNYulbG9oyyscEXVW8ssX7rdrV5Nf8

Message-ID:

Subject: Few website design and SEO issues

To: michael_turner@wdseoservices.com

Content-Type: multipart/alternative; boundary="000000000000f6e234065fdb7dd3"

X-Original-Sender: JasonKing3531@gmail.com

X-Original-Authentication-Results: mx.google.com; dkim=pass

header.i=@gmail.com header.s=20260707 header.b=oLjEoflI; arc=pass

(i=1); spf=pass (google.com: domain of jasonking3531@gmail.com

designates 209.85.220.41 as permitted sender) smtp.mailfrom=jasonking3531@gmail.com;

dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com;

dara=neutral header.i=@wdseoservices.com

Precedence: list

Mailing-list: list michael_turner@wdseoservices.com; contact michael_turner+owners@wdseoservices.com

List-ID:

X-Spam-Checked-In-Group: michael_turner@wdseoservices.com

X-Google-Group-Id: 85016566341

List-Post: ,



List-Help: ,



List-Archive:

List-Unsubscribe: ,



X-Spam_score: 6.7

X-Spam_score_int: 67

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I’ve prepared screenshots of a few website design

and SEO issues I found on your site. Just reply “YES” and they’ll

be in your inbox shortly. Thanks,



Content analysis details: (6.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.220.41 listed in will-spam-for-food.eu.org]

[209.85.208.69 listed in will-spam-for-food.eu.org]

[209.85.208.69 listed in will-spam-for-food.eu.org]

[209.85.208.69 listed in will-spam-for-food.eu.org]

[209.85.208.69 listed in will-spam-for-food.eu.org]

[209.85.208.69 listed in will-spam-for-food.eu.org]

[209.85.208.69 listed in will-spam-for-food.eu.org]

[209.85.208.69 listed in will-spam-for-food.eu.org]

[209.85.208.69 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.220.41 listed in dnsbl.ahbl.org]

[209.85.208.69 listed in dnsbl.ahbl.org]

[209.85.208.69 listed in dnsbl.ahbl.org]

[209.85.208.69 listed in dnsbl.ahbl.org]

[209.85.208.69 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.220.41 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist

[URI: wdseoservices.com]

-0.0 SPF_PASS SPF: sender matches SPF record

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: wdseoservices.com]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: wdseoservices.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[jasonking3531(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.208.69 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.69 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.208.69 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list

manager

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

Subject: {SPAM?} Few website design and SEO issues



--000000000000f6e234065fdb7dd3

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,



I=E2=80=99ve prepared screenshots of a few website design and SEO issues=

 I

found on your site.

Just reply =E2=80=9CYES=E2=80=9D and they=E2=80=99ll be in your inbox sho=

rtly.



Thanks,



To unsubscribe from this group and stop receiving emails from it, send an e=

mail to michael_turner+unsubscribe@wdseoservices.com.



--000000000000f6e234065fdb7dd3

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,

I=E2=80=99ve prepared screenshots
ong> of a few website design and SEO issues I found on you=

r site.
Just reply =E2=80=9CYES=E2=80=9D and they=E2=80=

=99ll be in your inbox shortly.

Thanks,=C2=A0=C2=A0

v>







To unsubscribe from this group and stop receiving emails from it, send an e=

mail to mic=

hael_turner+unsubscribe@wdseoservices.com.




--000000000000f6e234065fdb7dd3--

Microsoft Office 2024 phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 09 Nov 2026 17:08:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQYTw-0000000096v-2EdX

for dave@doctor.nl2k.ab.ca;

Mon, 09 Nov 2026 17:08:56 -0600

Resent-From: The Doctor

Resent-Date: Mon, 9 Nov 2026 17:08:56 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [163.52.128.20] (port=57023 helo=softwareslicense.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

id 1xQTac-00000000M12-0GRT

for doctor@mail.nl2k.ab.ca;

Mon, 09 Nov 2026 11:55:28 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=mail.nl2k.ab.ca;

h=Date:From:To:Cc:Subject:MIME-Version:Content-Type; i=doctor@mail.nl2k.ab.ca;

bh=rehG654EdGDqW2OcQGp1CMLHhVg=;

b=fiKjd8JHlIUoGvbsDbuMHJQ5cm1WSD84kU94xlUrsDsQFY9SwQd24EYo8umFldRXC2GczhjeKvsz

SrQbmZGG5sBTIcdRWdYK3Z59x21QAIXgDq7QOYWxTai9gMcU6vC6liy9zEaU/vbLnH+Usih3zEjD

XrgeevGqIJS5jIFAKlcaSvG6DwhskjfYWVdofP8tdSO1+bPM2LtZMs1DwTeIPe2D4kcCiniBy5z6

MksOHzyoWBbtJ6ZbDWMxg6XmjheW4eYlKN3Ki9rn4hRPQGbvlmqQOAEnum2vqdSCUt/f0yuQqezZ

L9iyYSqMBWCtBaWDmATdXpcUb9E4E8wlUcAceg==

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=mail.nl2k.ab.ca;

b=H6uQpj4R2eggcwV6Th2fORZlmEL6cYiDYJCuc5lF6QeAU+1nc1316sH8+QW9C+anrfnI0HJA0sBC

aMZPKp6+7TTYDWCxJoEQlOdvtM7lPpa0E5SCVBLrzgi3xfBELNGimWy9OIihwocHHVqBZ8fgPial

tvX/6tg09q0ljv4Ueqyvv2iUDduhV08G0IKFHSso+t3JCuhAAIZz36NmtTH8W+5ZoSOqALZQ++Y/

BKoRP7vXPrgt8ZjzE3/PrQBC69K4h82cWuHr5R4ya6QvpxS6UVBonuzG844Nu5lWdowLdPzsGYrR

SLiF0CLrK5LAINMLkbczZR6l3vI2w8FxSoWcBw==;

Date: 11-09-2026

From: Digital License Center

To: doctor@mail.nl2k.ab.ca

Cc: doctor@mail.nl2k.ab.ca

Subject: Microsoft Office 2024 – Get Your Lifetime License Today!

MIME-Version: 1.0

Content-Type: text/html

X-Spam_score: 11.0

X-Spam_score_int: 110

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Office 2024 for Windows & Mac KeyMart MICROSOFT OFFICE 2024

· WINDOWS & MAC Work Smarter. Achieve More.



Content analysis details: (11.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[163.52.128.20 listed in bl.score.senderscore.com]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[163.52.128.20 listed in will-spam-for-food.eu.org]

[163.52.128.20 listed in will-spam-for-food.eu.org]

[163.52.128.20 listed in will-spam-for-food.eu.org]

[163.52.128.20 listed in will-spam-for-food.eu.org]

[163.52.128.20 listed in will-spam-for-food.eu.org]

[163.52.128.20 listed in will-spam-for-food.eu.org]

[163.52.128.20 listed in will-spam-for-food.eu.org]

[163.52.128.20 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[163.52.128.20 listed in dnsbl.ahbl.org]

[163.52.128.20 listed in dnsbl.ahbl.org]

[163.52.128.20 listed in dnsbl.ahbl.org]

[163.52.128.20 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[163.52.128.20 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[163.52.128.20 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[163.52.128.20 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[163.52.128.20 listed in dnsbl.ahbl.org]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: 89.252.175.132]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: 89.252.175.132]

0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)

1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.3 MIME_8BIT_HEADER Message header contains 8-bit character

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only

0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

Subject: {SPAM?} Microsoft Office 2024 – Get Your Lifetime License Today!















Office 2024 for Windows & Mac












g: 0 7px;border-width: 1px;border-color: windowtext" valign=3D"top" width=3D"2=

84">

Item


;border-color: windowtext" valign=3D"top" width=3D"284">


-size: 16px;">Specification


padding: 0 7px;border-left-width: 1px;border-left-color: windowtext;border-rig=

ht-width: 1px;border-right-color: windowtext;border-top: none;border-bottom-wi=

dth: 1px;border-bottom-color: windowtext" valign=3D"top" width=3D"284">


n style=3D"font-size: 16px;">HS Code


padding: 0 7px;border-left-width: 1px;border-left-color: windowtext;border-rig=

ht-width: 1px;border-right-color: windowtext;border-top: none;border-bottom-wi=

dth: 1px;border-bottom-color: windowtext" valign=3D"top" width=3D"284">


n style=3D"font-size: 16px;">2815110000


idth: 284px;padding: 0 7px;border-left-width: 1px;border-left-color: windowtex=

t;border-right-width: 1px;border-right-color: windowtext;border-top: none;bord=

er-bottom-width: 1px;border-bottom-color: windowtext" valign=3D"top" width=3D"=

284">

CAS NO


dth: 284px;padding: 0 7px;border-left-width: 1px;border-left-color: windowtext=

;border-right-width: 1px;border-right-color: windowtext;border-top: none;borde=

r-bottom-width: 1px;border-bottom-color: windowtext" valign=3D"top" width=3D"2=

84">

1310-73-2


style=3D"width: 284px;padding: 0 7px;border-left-width: 1px;border-left-color:=

windowtext;border-right-width: 1px;border-right-color: windowtext;border-top:=

none;border-bottom-width: 1px;border-bottom-color: windowtext" valign=3D"top"=

width=3D"284">

Purity


tyle=3D"width: 284px;padding: 0 7px;border-left-width: 1px;border-left-color: =

windowtext;border-right-width: 1px;border-right-color: windowtext;border-top: =

none;border-bottom-width: 1px;border-bottom-color: windowtext" valign=3D"top" =

width=3D"284">

98% / 98.5% / 99%; 32%/ 50%<=

/span>


idth: 1px;border-left-color: windowtext;border-right-width: 1px;border-right-c=

olor: windowtext;border-top: none;border-bottom-width: 1px;border-bottom-color=

: windowtext" valign=3D"top" width=3D"284">

Appearance


width: 284px;padding: 0 7px;border-left-width: 1px;border-left-color: windowte=

xt;border-right-width: 1px;border-right-color: windowtext;border-top: none;bor=

der-bottom-width: 1px;border-bottom-color: windowtext" valign=3D"top" width=3D=

"284">

White Solid Flakes / White Pearls/ L=

iquid


left-width: 1px;border-left-color: windowtext;border-right-width: 1px;border-r=

ight-color: windowtext;border-top: none;border-bottom-width: 1px;border-bottom=

-color: windowtext" valign=3D"top" width=3D"284">


16px;">Packaging


r-left-width: 1px;border-left-color: windowtext;border-right-width: 1px;border=

-right-color: windowtext;border-top: none;border-bottom-width: 1px;border-bott=

om-color: windowtext" valign=3D"top" width=3D"284">


: 16px;">25kg PP bag, 1000kg jumbo bag, 1.5MT IBC(
rgb(45, 84, 160); font-size: 16px;">With/ Without Pallets
yle=3D"font-size: 16px;">)


adding: 0 7px;border-left-width: 1px;border-left-color: windowtext;border-righ=

t-width: 1px;border-right-color: windowtext;border-top: none;border-bottom-wid=

th: 1px;border-bottom-color: windowtext" valign=3D"center" width=3D"284">


yle=3D"text-align:justify;text-justify:inter-ideograph">
ze: 16px;">Application


;border-left-width: 1px;border-left-color: windowtext;border-right-width: 1px;=

border-right-color: windowtext;border-top: none;border-bottom-width: 1px;borde=

r-bottom-color: windowtext" valign=3D"top" width=3D"284">


t-size: 16px;">=E2=80=A2 PVC Manufacturing


nt-size: 16px;"> 

=E2=80=A2=

 Water Treatment

 
an>

=E2=80=A2 Textile Industry
an>

 


font-size: 16px;">=E2=80=A2 Metallurgy Desulfurization


style=3D"font-size: 16px;"> 


;">=E2=80=A2 Petrochemical Industry


: 16px;"> 

=E2=80=A2 D=

aily Chemical & Oil Processing


568px;padding: 0 7px;border-left-width: 1px;border-left-color: windowtext;bor=

der-right-width: 1px;border-right-color: windowtext;border-top: none;border-bo=

ttom-width: 1px;border-bottom-color: windowtext" colspan=3D"2" valign=3D"top" =

width=3D"568">

Packed with inner moisture-p=

roof PE film, palletized and stretch film reinforced for safe ocean shipment. =

Full documents: COA, TDS, SDS, 
134); font-size: 16px;">REACH cer=

tificates available for customs clearance.




































































































MICROSOFT OFFICE 2024 · WINDOWS & MAC





Work Smarter.


Achieve More.







Get the professional Office suite for Windows or Mac —

everything you need to create, manage, communicate

and stay productive.









Microsoft Office 2024







WINDOWS & MAC · LIFETIME LICENSE





























WINDOWS





Office Professional Plus
LTSC 2024







$35

FROM · 1 PC






href="http://89.252.175.132/4SOCzC3464kdgG123qsjlhyorxz71RFVBOHWJAFXVRSG8732SSLD628u1">

SHOP WINDOWS



MAC





Office Home & Business
2024 for Mac







$140

1 MAC · LIFETIME








href="http://89.252.175.132/4fLkVv3464HclQ123wdhwgxndbc71WRFZTCRTHYOLJWH8732MAVI628Z1">

SHOP MAC














Windows — Select Your License











30 PC – Lifetime

▾







1 PC – Lifetime

$35.00







2 PC – Lifetime







3 PC – Lifetime







5 PC – Lifetime







10 PC – Lifetime







20 PC – Lifetime







30 PC – Lifetime

$170.00











Intermediate package prices are displayed on the

product page. Select your preferred Windows quantity

before checkout.










href="http://89.252.175.132/4DMmsZ3464WplA123ohjtcezuov71FMFLWNTKFCRKUIU8732NZQW628W1">

CHOOSE YOUR WINDOWS LICENSE →







Digital license key · No physical box or disc









MAC EDITION



Office Home & Business 2024 for Mac







The complete Office experience built for macOS.

Install it on your Mac and work with your documents,

spreadsheets and presentations — natively and smoothly.







One-time price


$140.00


1 Mac · Lifetime license









href="http://89.252.175.132/4NJyeh3464ogII123tmxajtwvrm71MKHWQLSSIFJYOTM8732QLWT628D1">

GET THE MAC LICENSE →







Digital license key · No physical box or disc











Professional Tools. Powerful Productivity.



































✓ Lifetime License





Perpetual-use license according

to its applicable terms.





✓ Windows & Mac





Separate license options for supported

Windows and macOS installations.






✓ Multiple Options





Choose Windows licenses from 1 PC

up to 30 PC, or a single Mac license.





✓ Digital Delivery





License key delivered by email

with activation instructions.










Your Essential Office Applications





Word

Excel

PowerPoint

Outlook

OneNote

Access*

Publisher*

Teams*





Access and Publisher are available on Windows only.

App availability depends on the exact licensed edition

and platform.









Fast & Convenient Digital Delivery







Forget physical packaging and shipping delays.

Receive your digital license key by email,

along with the necessary activation instructions —

for Windows or Mac.









Ready to Upgrade?







Whether you work on Windows or Mac, there is a

package that suits your needs.




Windows licenses from $35 · Mac edition from $140.






href="http://89.252.175.132/4NjAhW3464xdBE123cozvqaardy71NGVPXBFKIICRKJE8732BVNY628Y1">

SHOP WINDOWS





 






href="http://89.252.175.132/4GsxrF3464gSzX123zbfxjiehlz71DRQXTYQBGELSOJL8732CSKR628K1">

SHOP MAC











KeyMart








Genuine Digital Software Licenses









Need assistance?



support@keymart.net











Windows and Mac editions are licensed and

sold separately.









Microsoft and Office are trademarks of

Microsoft Corporation. KeyMart is an

independent retailer and is not affiliated

with or endorsed by Microsoft.









You are receiving this email because

you subscribed to our updates.






Unsubscribe

  |  

Visit KeyMart







© 2026 KeyMart. All rights reserved.















Microsoft Office 2024 phish

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 09 Nov 2026 17:09:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQYU4-0000000097w-0VLk

for dave@doctor.nl2k.ab.ca;

Mon, 09 Nov 2026 17:09:04 -0600

Resent-From: The Doctor

Resent-Date: Mon, 9 Nov 2026 17:09:04 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [163.52.128.20] (port=60131 helo=softwareslicense.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.100.1 (FreeBSD))

id 1xQThy-00000000Mft-0iCf

for sales@netknow.ca;

Mon, 09 Nov 2026 12:03:08 -0600

DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=smtp; d=netknow.ca;

h=Date:From:To:Cc:Subject:MIME-Version:Content-Type; i=sales@netknow.ca;

bh=Nh/ZhN4b4a5z6RGyd+mCP3aGPWA=;

b=C4bdKZE/K+2s3Uu1MLcFA+uT+bxJV5/OJigFfXe1Jck7qQ/vac9Qbl/hSjM6v+2kzrcOXyzYX24+

EfYZ1gM4U1U4q1NwWWEYdzB4gLL0ZuN/3+eYJuCzvDynY2HBN7/YEH3bFQc0CZrfScHtFR1tkxYg

7Uqie9OkB6qJHpMdOYXP73nwqYNzVW2XlOAPOR3QF5Fvfvid3cVp/U1mOXSh2y7wtwu67VoyyVuB

yy5VTT5WP8tCZfenCSGxqH4Hs/zvmfUPW+eJ6JnOoiMSXP2pdOAmgEbviA/qoyMJJzSH1Sh1yd3O

jDQGSFzV/SctCZn4u7kz1O92jy8ljDGMl/ca1A==

DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=smtp; d=netknow.ca;

b=TjHCCzf/9E0ow/BR+jzcajswIEw5sXJ2VAQ38q2ChRigvFN98CrErmoRC2NPH1pQdT9/VwlTLMA+

a7sHFQopgqk76rYASG53s9dchCLxjL9qnViz4uMnMzhyVOtfqUnlGnxGeN79K/M41nx5eJgoJzGC

DfFsqYWdm5xUnSJUx6r4wvibHSyWswipLqJwEERrNQBZkIDsOrAjy0T966ra9gRg1LoWBbIWLwDz

RfD5zZYFey5j/Slr3zMjg/jwtykTnCAFeLribU000Ne6c+D6STNSBr6Afr3qd0oV3zhal9HxOeAM

nHia5CzPwzvd1ax62u9VdFfX1oX3L/Dtg0xulQ==;

Date: 11-09-2026

From: Digital License Center

To: sales@netknow.ca

Cc: sales@netknow.ca

Subject: Microsoft Office 2024 – Get Your Lifetime License Today!

MIME-Version: 1.0

Content-Type: text/html

X-Spam_score: 11.7

X-Spam_score_int: 117

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Office 2024 for Windows & Mac KeyMart MICROSOFT OFFICE 2024

· WINDOWS & MAC Work Smarter. Achieve More.



Content analysis details: (11.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[163.52.128.20 listed in will-spam-for-food.eu.org]

[163.52.128.20 listed in will-spam-for-food.eu.org]

[163.52.128.20 listed in will-spam-for-food.eu.org]

[163.52.128.20 listed in will-spam-for-food.eu.org]

[163.52.128.20 listed in will-spam-for-food.eu.org]

[163.52.128.20 listed in will-spam-for-food.eu.org]

[163.52.128.20 listed in will-spam-for-food.eu.org]

[163.52.128.20 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[163.52.128.20 listed in dnsbl.ahbl.org]

[163.52.128.20 listed in dnsbl.ahbl.org]

[163.52.128.20 listed in dnsbl.ahbl.org]

[163.52.128.20 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[163.52.128.20 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[163.52.128.20 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[163.52.128.20 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[163.52.128.20 listed in dnsbl.ahbl.org]

0.6 INVALID_DATE_TZ_ABSURD Invalid Date: header (timezone does not exist)

1.4 BUG6152_INVALID_DATE_TZ_ABSURD No description available.

0.4 INVALID_DATE Invalid Date: header (not RFC 2822)

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: 89.252.175.132]

1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist

[URI: 89.252.175.132]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[163.52.128.20 listed in bl.score.senderscore.com]

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.3 MIME_8BIT_HEADER Message header contains 8-bit character

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.0 TO_EQ_FM_DOM_HTML_ONLY To domain == From domain and HTML only

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

0.4 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX

0.0 TO_EQ_FM_HTML_DIRECT To == From and HTML only, direct-to-MX

Subject: {SPAM?} Microsoft Office 2024 – Get Your Lifetime License Today!















Office 2024 for Windows & Mac


MICROSOFT OFFICE 2024 · WINDOWS & MAC





Work Smarter.


Achieve More.







Get the professional Office suite for Windows or Mac —

everything you need to create, manage, communicate

and stay productive.






Microsoft Office 2024







WINDOWS & MAC · LIFETIME LICENSE





























WINDOWS





Office Professional Plus
LTSC 2024







$35

FROM · 1 PC






href="http://89.252.175.132/4vjdrS3464moQv123hypkcnswwz71UKXYXKALHTSQROS123083FZJC628k1">

SHOP WINDOWS



MAC





Office Home & Business
2024 for Mac







$140

1 MAC · LIFETIME








href="http://89.252.175.132/4KJfbo3464JLRq123lacobuobrr71RKNUPDOCCNNQJKM123083VHAD628x1">

SHOP MAC














Windows — Select Your License











30 PC – Lifetime

▾







1 PC – Lifetime

$35.00







2 PC – Lifetime







3 PC – Lifetime







5 PC – Lifetime







10 PC – Lifetime







20 PC – Lifetime







30 PC – Lifetime

$170.00











Intermediate package prices are displayed on the

product page. Select your preferred Windows quantity

before checkout.










href="http://89.252.175.132/4EZPGl3464Fkce123zqxirtggiu71CFSMTBNPTWTROEZ123083ESFU628b1">

CHOOSE YOUR WINDOWS LICENSE →







Digital license key · No physical box or disc




MAC EDITION



Office Home & Business 2024 for Mac







The complete Office experience built for macOS.

Install it on your Mac and work with your documents,

spreadsheets and presentations — natively and smoothly.







One-time price


$140.00


1 Mac · Lifetime license









href="http://89.252.175.132/4gBTZb3464zJgd123dmfgssgqya71PTMYERYATBOFLSJ123083XNAC628K1">

GET THE MAC LICENSE →







Digital license key · No physical box or disc






Professional Tools. Powerful Productivity.



































✓ Lifetime License





Perpetual-use license according

to its applicable terms.





✓ Windows & Mac





Separate license options for supported

Windows and macOS installations.






✓ Multiple Options





Choose Windows licenses from 1 PC

up to 30 PC, or a single Mac license.





✓ Digital Delivery





License key delivered by email

with activation instructions.










Your Essential Office Applications





Word

Excel

PowerPoint

Outlook

OneNote

Access*

Publisher*

Teams*





Access and Publisher are available on Windows only.

App availability depends on the exact licensed edition

and platform.




Fast & Convenient Digital Delivery







Forget physical packaging and shipping delays.

Receive your digital license key by email,

along with the necessary activation instructions —

for Windows or Mac.




Ready to Upgrade?







Whether you work on Windows or Mac, there is a

package that suits your needs.




Windows licenses from $35 · Mac edition from $140.






href="http://89.252.175.132/4odBLH3464Glen123blfmdogzuc71SDJFKMGVFTNQVTB123083RVUB628Z1">

SHOP WINDOWS





 






href="http://89.252.175.132/4VgYJI3464TNed123rawdnixvbg71EJKZZDGXQMIOZUB123083UPKY628L1">

SHOP MAC






KeyMart








Genuine Digital Software Licenses









Need assistance?



support@keymart.net











Windows and Mac editions are licensed and

sold separately.









Microsoft and Office are trademarks of

Microsoft Corporation. KeyMart is an

independent retailer and is not affiliated

with or endorsed by Microsoft.









You are receiving this email because

you subscribed to our updates.






Unsubscribe

  |  

Visit KeyMart







© 2026 KeyMart. All rights reserved.












Chinese products spam

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 09 Nov 2026 10:50:59 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQSZN-00000000F8f-3Wx4

for dave@doctor.nl2k.ab.ca;

Mon, 09 Nov 2026 10:50:09 -0600

Resent-From: The Doctor

Resent-Date: Mon, 9 Nov 2026 10:50:09 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-m8199.xmail.ntesmail.com ([156.224.81.99]:18030)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.100.1 (FreeBSD))

(envelope-from )

id 1xQSEr-00000000AHj-2moe

for sales@nk.ca;

Mon, 09 Nov 2026 10:28:59 -0600

Content-Type: multipart/alternative; BOUNDARY="=_Part_806725_198578943.1794241671075"

To: sales

Subject: =?UTF-8?B?RXhwbG9yaW5nIFBvdGVudGlhbCBTeW5lcmdpZXMgaW4gUmVoYWJpbGl0YXRpb24gQWlkcw==?=

X-Priority: 3

MIME-Version: 1.0

Received: from bosco.ng@dakseon.com( [10.176.110.159] ) by ajax-webmail ( [127.0.0.1] ) ; Tue, 10 Nov 2026 00:27:51 +0800 (GMT+08:00)

From: "bosco.ng"

Date: Tue, 10 Nov 2026 00:27:51 +0800 (GMT+08:00)

X-WM-Tid: 0aa1c1232f9b09b1kunm9362482a101e36

Message-ID: